Odvirování PC, zrychlení počítače, vzdálená pomoc prostřednictvím služby neslape.cz
Problém s PC
Moderátor: Moderátoři
Pravidla fóra
Pokud chcete pomoc, vložte log z FRST [návod zde] nebo RSIT [návod zde]
Jednotlivé thready budou po vyřešení uzamčeny. Stejně tak ty, které budou nečinné déle než 14 dní. Vizte Pravidlo o zamykání témat. Děkujeme za pochopení.
!NOVINKA!
Nově lze využívat služby vzdálené pomoci, kdy se k vašemu počítači připojí odborník a bližší informace o problému si od vás získá telefonicky! Více na www.neslape.cz
Pokud chcete pomoc, vložte log z FRST [návod zde] nebo RSIT [návod zde]
Jednotlivé thready budou po vyřešení uzamčeny. Stejně tak ty, které budou nečinné déle než 14 dní. Vizte Pravidlo o zamykání témat. Děkujeme za pochopení.
!NOVINKA!
Nově lze využívat služby vzdálené pomoci, kdy se k vašemu počítači připojí odborník a bližší informace o problému si od vás získá telefonicky! Více na www.neslape.cz
Problém s PC
Zdravím, mám problém s pc. Počítač mi z nějakého důvodu přestal fungovat. Nevím proč, ale zřejmě je s velkou pravděpodobností infikován virem. Avast se samočinně deaktivoval a nešel aktivovat. Zkoušel jsem obnovu pc ze zálohy, ale pc žádnou zálohu nenašlo, tak jsem win7 zkusil pomocí instalač. CD přeinstalovat. Nainstaloval jsem ovladače a vše vypadalo, že je na dobré cestě. Dnes jsem zkoušel projet pc avastem před spuštěním (registr?) a žádný vir nenašel. Zkusil jsem eset on-line scanner, ale ten se zasekl na 22 procentech a celý pc opět pomalý a bez odezvy. Pc opět nefunguje jak má, při nabíhání při restartu nešel dokonce vůbec spustit, proběhla nějaká automatická oprava systému a běží v nouzovém režimu s připojením k síti. Kabel od netu jsem odpojil, pro jistotu. Mohu někoho poprosit o radu?Děkuji.
Re: Problém s PC
Dodatek k problému s pc
Logfile of random's system information tool 1.10 (written by random/random)
Run by František at 2016-06-16 23:39:18
Microsoft Windows 7 Home Premium Service Pack 1
System drive C: has 334 GB (69%) free of 481 GB
Total RAM: 8131 MB (89% free)
Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 23:39:26, on 16.6.2016
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v8.00 (8.00.7601.17514)
Boot mode: Safe mode with network support
Running processes:
C:\Program Files (x86)\Mozilla Firefox\firefox.exe
C:\Program Files\trend micro\František.exe
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
F2 - REG:system.ini: UserInit=userinit.exe
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'NETWORK SERVICE')
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)
--
End of file - 4297 bytes
======Listing Processes======
\SystemRoot\System32\smss.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
wininit.exe
C:\Windows\system32\services.exe
C:\Windows\system32\lsass.exe
C:\Windows\system32\lsm.exe
winlogon.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Windows\system32\svchost.exe -k RPCSS
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\system32\svchost.exe -k netsvcs
C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k LocalService
C:\Windows\system32\svchost.exe -k NetworkService
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
ctfmon.exe
C:\Windows\System32\svchost.exe -k secsvcs
C:\Windows\system32\wbem\wmiprvse.exe
"C:\Program Files (x86)\Mozilla Firefox\firefox.exe"
"C:\Windows\Explorer.EXE"
"C:\Users\František\Downloads\RSITx64.exe"
C:\Windows\system32\WerFault.exe -u -p 1020 -s 3744
C:\Windows\system32\wbem\wmiprvse.exe
======Registry dump======
[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=credssp.dll
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorAdmin"=5
"ConsentPromptBehaviorUser"=3
"EnableUIADesktopToggle"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoActiveDesktop"=1
"NoActiveDesktopChanges"=1
"ForceActiveDesktopOn"=0
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.msadpcm"=msadp32.acm
"midimapper"=midimap.dll
"wavemapper"=msacm32.drv
"vidc.uyvy"=msyuv.dll
"vidc.yuy2"=msyuv.dll
"vidc.yvyu"=msyuv.dll
"vidc.iyuv"=iyuv_32.dll
"vidc.i420"=iyuv_32.dll
"vidc.yvu9"=tsbyuv.dll
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"aux1"=wdmaud.drv
======File associations======
.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*
======List of files/folders created in the last 1 month======
2016-06-16 23:31:18 ----A---- C:\Windows\ntbtlog.txt
2016-06-16 23:17:17 ----D---- C:\Program Files\trend micro
2016-06-16 23:17:13 ----D---- C:\rsit
2016-06-16 17:44:10 ----D---- C:\Program Files (x86)\ESET
2016-06-16 08:58:18 ----A---- C:\Windows\SYSWOW64\PerfStringBackup.INI
2016-06-16 08:57:14 ----D---- C:\Windows\Migration
2016-06-16 08:57:14 ----D---- C:\Program Files (x86)\Microsoft.NET
2016-06-16 08:31:00 ----D---- C:\Users\František\AppData\Roaming\Mozilla
2016-06-16 08:30:49 ----D---- C:\Program Files (x86)\Mozilla Maintenance Service
2016-06-16 08:30:48 ----D---- C:\Program Files (x86)\Mozilla Firefox
2016-06-16 00:37:00 ----D---- C:\Users\František\AppData\Roaming\com.adobe.mauby.4875E02D9FB21EE389F73B8D1702B320485DF8CE.1
2016-06-16 00:37:00 ----D---- C:\Users\František\AppData\Roaming\com.adobe.mauby
2016-06-16 00:31:52 ----A---- C:\Windows\SYSWOW64\nvStreaming.exe
2016-06-16 00:30:48 ----A---- C:\Windows\system32\nvvsvc.exe
2016-06-16 00:30:48 ----A---- C:\Windows\system32\nvsvcr.dll
2016-06-16 00:30:48 ----A---- C:\Windows\system32\nvsvc64.dll
2016-06-16 00:30:48 ----A---- C:\Windows\system32\nvshext.dll
2016-06-16 00:30:48 ----A---- C:\Windows\system32\nvmctray.dll
2016-06-16 00:30:48 ----A---- C:\Windows\system32\nvcpl.dll
2016-06-16 00:30:48 ----A---- C:\Windows\system32\nv3dappshextr.dll
2016-06-16 00:30:48 ----A---- C:\Windows\system32\nv3dappshext.dll
2016-06-16 00:30:41 ----A---- C:\Windows\SYSWOW64\OpenCL.dll
2016-06-16 00:30:41 ----A---- C:\Windows\system32\OpenCL.dll
2016-06-16 00:30:37 ----D---- C:\ProgramData\NVIDIA Corporation
2016-06-16 00:30:34 ----D---- C:\Program Files (x86)\NVIDIA Corporation
2016-06-16 00:29:52 ----D---- C:\ProgramData\Package Cache
2016-06-16 00:29:03 ----A---- C:\Windows\SYSWOW64\nvwgf2um.dll
2016-06-16 00:29:03 ----A---- C:\Windows\SYSWOW64\nvumdshim.dll
2016-06-16 00:29:03 ----A---- C:\Windows\SYSWOW64\nvptxJitCompiler.dll
2016-06-16 00:29:03 ----A---- C:\Windows\SYSWOW64\nvopencl.dll
2016-06-16 00:29:03 ----A---- C:\Windows\SYSWOW64\nvoglv32.dll
2016-06-16 00:29:03 ----A---- C:\Windows\SYSWOW64\nvoglshim32.dll
2016-06-16 00:29:03 ----A---- C:\Windows\SYSWOW64\nvinit.dll
2016-06-16 00:29:03 ----A---- C:\Windows\SYSWOW64\NvIFROpenGL.dll
2016-06-16 00:29:03 ----A---- C:\Windows\SYSWOW64\NvIFR.dll
2016-06-16 00:29:03 ----A---- C:\Windows\SYSWOW64\NvFBC.dll
2016-06-16 00:29:03 ----A---- C:\Windows\SYSWOW64\nvfatbinaryLoader.dll
2016-06-16 00:29:03 ----A---- C:\Windows\SYSWOW64\nvEncodeAPI.dll
2016-06-16 00:29:03 ----A---- C:\Windows\SYSWOW64\nvd3dum.dll
2016-06-16 00:29:03 ----A---- C:\Windows\SYSWOW64\nvcuvid.dll
2016-06-16 00:29:03 ----A---- C:\Windows\SYSWOW64\nvcuda.dll
2016-06-16 00:29:03 ----A---- C:\Windows\SYSWOW64\nvcompiler.dll
2016-06-16 00:29:03 ----A---- C:\Windows\SYSWOW64\nvapi.dll
2016-06-16 00:29:03 ----A---- C:\Windows\system32\nvwgf2umx.dll
2016-06-16 00:29:03 ----A---- C:\Windows\system32\nvumdshimx.dll
2016-06-16 00:29:03 ----A---- C:\Windows\system32\nvptxJitCompiler.dll
2016-06-16 00:29:03 ----A---- C:\Windows\system32\nvopencl.dll
2016-06-16 00:29:03 ----A---- C:\Windows\system32\nvoglv64.dll
2016-06-16 00:29:03 ----A---- C:\Windows\system32\nvoglshim64.dll
2016-06-16 00:29:03 ----A---- C:\Windows\system32\nvinitx.dll
2016-06-16 00:29:03 ----A---- C:\Windows\system32\NvIFROpenGL.dll
2016-06-16 00:29:03 ----A---- C:\Windows\system32\NvIFR64.dll
2016-06-16 00:29:03 ----A---- C:\Windows\system32\nvhdap64.dll
2016-06-16 00:29:03 ----A---- C:\Windows\system32\nvhdagenco64.dll
2016-06-16 00:29:03 ----A---- C:\Windows\system32\NvFBC64.dll
2016-06-16 00:29:03 ----A---- C:\Windows\system32\nvfatbinaryLoader.dll
2016-06-16 00:29:03 ----A---- C:\Windows\system32\nvEncodeAPI64.dll
2016-06-16 00:29:03 ----A---- C:\Windows\system32\nvdispgenco6436839.dll
2016-06-16 00:29:03 ----A---- C:\Windows\system32\nvdispco6436839.dll
2016-06-16 00:29:03 ----A---- C:\Windows\system32\nvd3dumx.dll
2016-06-16 00:29:03 ----A---- C:\Windows\system32\nvcuvid.dll
2016-06-16 00:29:03 ----A---- C:\Windows\system32\nvcuda.dll
2016-06-16 00:29:03 ----A---- C:\Windows\system32\nvcompiler.dll
2016-06-16 00:29:03 ----A---- C:\Windows\system32\nvapi64.dll
2016-06-16 00:29:03 ----A---- C:\Windows\system32\drivers\nvlddmkm.sys
2016-06-16 00:29:03 ----A---- C:\Windows\system32\drivers\nvhda64v.sys
2016-06-16 00:27:53 ----D---- C:\NVIDIA
2016-06-16 00:25:20 ----D---- C:\ProgramData\NVIDIA
2016-06-16 00:24:59 ----D---- C:\Windows\Sun
2016-06-16 00:23:59 ----D---- C:\Users\František\AppData\Roaming\Sun
2016-06-16 00:23:57 ----A---- C:\Windows\SYSWOW64\WindowsAccessBridge-32.dll
2016-06-16 00:23:50 ----D---- C:\ProgramData\Oracle
2016-06-16 00:23:48 ----D---- C:\Program Files (x86)\Java
2016-06-16 00:08:11 ----A---- C:\Windows\SYSWOW64\nvaudcap32v.dll
2016-06-16 00:08:11 ----A---- C:\Windows\system32\nvaudcap64v.dll
2016-06-16 00:08:11 ----A---- C:\Windows\system32\drivers\nvvad64v.sys
2016-06-15 22:59:07 ----D---- C:\34f7e4c70218db2e26d6c6a9af
2016-06-15 22:16:04 ----D---- C:\6f02b9ce3f79b1f8efe8e8b45f2a1763
2016-06-15 22:13:59 ----D---- C:\Program Files\NVIDIA Corporation
2016-06-15 22:07:51 ----A---- C:\Windows\system32\drivers\aswKbd.sys
2016-06-15 22:06:46 ----D---- C:\Users\František\AppData\Roaming\AVAST Software
2016-06-15 22:06:23 ----D---- C:\Program Files\Common Files\AV
2016-06-15 22:06:15 ----A---- C:\Windows\system32\drivers\aswVmm.sys
2016-06-15 22:06:15 ----A---- C:\Windows\system32\drivers\aswStm.sys
2016-06-15 22:06:14 ----A---- C:\Windows\system32\drivers\aswSP.sys
2016-06-15 22:06:14 ----A---- C:\Windows\system32\drivers\aswRvrt.sys
2016-06-15 22:06:13 ----A---- C:\Windows\system32\drivers\aswMonFlt.sys
2016-06-15 22:06:13 ----A---- C:\Windows\system32\drivers\aswHwid.sys
2016-06-15 22:06:12 ----A---- C:\Windows\system32\drivers\aswRdr2.sys
2016-06-15 22:06:09 ----A---- C:\Windows\system32\drivers\aswSnx.sys
2016-06-15 22:06:00 ----A---- C:\Windows\system32\aswBoot.exe
2016-06-15 22:05:58 ----A---- C:\Windows\avastSS.scr
2016-06-15 22:03:55 ----D---- C:\Program Files\AVAST Software
2016-06-15 22:03:32 ----D---- C:\ProgramData\AVAST Software
2016-06-15 22:02:02 ----A---- C:\Windows\system32\wups2.dll
2016-06-15 22:02:02 ----A---- C:\Windows\system32\wucltux.dll
2016-06-15 22:02:02 ----A---- C:\Windows\system32\wuaueng.dll
2016-06-15 22:02:02 ----A---- C:\Windows\system32\wuauclt.exe
2016-06-15 22:01:57 ----A---- C:\Windows\SYSWOW64\wups.dll
2016-06-15 22:01:57 ----A---- C:\Windows\SYSWOW64\wudriver.dll
2016-06-15 22:01:57 ----A---- C:\Windows\SYSWOW64\wuapi.dll
2016-06-15 22:01:57 ----A---- C:\Windows\system32\wups.dll
2016-06-15 22:01:57 ----A---- C:\Windows\system32\wudriver.dll
2016-06-15 22:01:57 ----A---- C:\Windows\system32\wuapi.dll
2016-06-15 22:01:50 ----A---- C:\Windows\SYSWOW64\wuwebv.dll
2016-06-15 22:01:50 ----A---- C:\Windows\SYSWOW64\wuapp.exe
2016-06-15 22:01:50 ----A---- C:\Windows\system32\wuwebv.dll
2016-06-15 22:01:50 ----A---- C:\Windows\system32\wuapp.exe
2016-06-15 21:59:15 ----A---- C:\Windows\system32\RTNUninst64.dll
2016-06-15 21:59:15 ----A---- C:\Windows\system32\RtNicProp64.dll
2016-06-15 21:59:15 ----A---- C:\Windows\system32\drivers\Rt64win7.sys
2016-06-15 21:52:20 ----A---- C:\Windows\system32\drivers\iusb3hcs.sys
2016-06-15 21:52:10 ----A---- C:\Windows\system32\drivers\iusb3xhc.sys
2016-06-15 21:52:08 ----A---- C:\Windows\system32\drivers\iusb3hub.sys
2016-06-15 21:48:42 ----A---- C:\Windows\system32\drivers\IntelMEFWVer.dll
2016-06-15 21:48:37 ----D---- C:\ProgramData\Intel
2016-06-15 21:48:31 ----D---- C:\Program Files\Intel
2016-06-15 21:47:47 ----A---- C:\Windows\system32\drivers\HECIx64.sys
2016-06-15 21:47:46 ----D---- C:\Users\František\AppData\Roaming\InstallShield
2016-06-15 21:38:52 ----D---- C:\Windows\SYSWOW64\RTCOM
2016-06-15 21:38:52 ----D---- C:\Program Files\Realtek
2016-06-15 21:38:43 ----A---- C:\Windows\SYSWOW64\MBTHX32.dll
2016-06-15 21:38:43 ----A---- C:\Windows\SYSWOW64\MBAPO32.dll
2016-06-15 21:38:43 ----A---- C:\Windows\system32\WavesGUILib64.dll
2016-06-15 21:38:43 ----A---- C:\Windows\system32\SRSWOW64.dll
2016-06-15 21:38:43 ----A---- C:\Windows\system32\SRSTSX64.dll
2016-06-15 21:38:43 ----A---- C:\Windows\system32\SRSTSH64.dll
2016-06-15 21:38:43 ----A---- C:\Windows\system32\SRSHP64.dll
2016-06-15 21:38:43 ----A---- C:\Windows\system32\RtPgEx64.dll
2016-06-15 21:38:43 ----A---- C:\Windows\system32\RtlCPAPI64.dll
2016-06-15 21:38:43 ----A---- C:\Windows\system32\RtkCoLDR64.dll
2016-06-15 21:38:43 ----A---- C:\Windows\system32\RtkCfg64.dll
2016-06-15 21:38:43 ----A---- C:\Windows\system32\RtkAPO64.dll
2016-06-15 21:38:43 ----A---- C:\Windows\system32\RtkApi64.dll
2016-06-15 21:38:43 ----A---- C:\Windows\system32\RTEEP64A.dll
2016-06-15 21:38:43 ----A---- C:\Windows\system32\RTEEL64A.dll
2016-06-15 21:38:43 ----A---- C:\Windows\system32\RTEEG64A.dll
2016-06-15 21:38:43 ----A---- C:\Windows\system32\RTEED64A.dll
2016-06-15 21:38:43 ----A---- C:\Windows\system32\RtDataProc64.dll
2016-06-15 21:38:43 ----A---- C:\Windows\system32\RTCOM64.dll
2016-06-15 21:38:43 ----A---- C:\Windows\system32\RP3DHT64.dll
2016-06-15 21:38:43 ----A---- C:\Windows\system32\RP3DAA64.dll
2016-06-15 21:38:43 ----A---- C:\Windows\system32\RCoInstII64.dll
2016-06-15 21:38:43 ----A---- C:\Windows\system32\MBWrp64.dll
2016-06-15 21:38:43 ----A---- C:\Windows\system32\MBTHX64.dll
2016-06-15 21:38:43 ----A---- C:\Windows\system32\MBAPO64.dll
2016-06-15 21:38:43 ----A---- C:\Windows\system32\drivers\rtvienna.dat
2016-06-15 21:38:43 ----A---- C:\Windows\system32\drivers\RTKVHD64.sys
2016-06-15 21:38:43 ----A---- C:\Windows\system32\drivers\RTAIODAT.DAT
2016-06-15 21:38:43 ----A---- C:\Windows\system32\drivers\MBfilt64.sys
2016-06-15 21:38:42 ----HD---- C:\Program Files (x86)\InstallShield Installation Information
2016-06-15 21:38:42 ----D---- C:\Program Files (x86)\Realtek
2016-06-15 21:38:42 ----A---- C:\Windows\system32\MaxxAudioEQ64.dll
2016-06-15 21:38:42 ----A---- C:\Windows\system32\MaxxAudioAPOShell64.dll
2016-06-15 21:38:42 ----A---- C:\Windows\system32\MaxxAudioAPO20.dll
2016-06-15 21:38:42 ----A---- C:\Windows\system32\FMAPO64.dll
2016-06-15 21:38:42 ----A---- C:\Windows\system32\CONEQMSAPOGUILibrary.dll
2016-06-15 21:38:42 ----A---- C:\Windows\system32\AERTAR64.dll
2016-06-15 21:38:42 ----A---- C:\Windows\system32\AERTAC64.dll
2016-06-15 21:38:38 ----RA---- C:\Windows\RtlExUpd.dll
2016-06-15 21:38:38 ----HD---- C:\Program Files (x86)\Temp
2016-06-15 21:33:11 ----D---- C:\Program Files (x86)\Intel
2016-06-15 21:33:11 ----A---- C:\Windows\SYSWOW64\CSVer.dll
2016-06-15 21:32:04 ----D---- C:\Users\František\AppData\Roaming\Macromedia
2016-06-15 21:32:03 ----D---- C:\Users\František\AppData\Roaming\Adobe
2016-06-15 21:31:49 ----D---- C:\ProgramData\Adobe
2016-06-15 21:31:48 ----D---- C:\Program Files (x86)\Adobe
2016-06-15 21:31:46 ----SHD---- C:\Windows\Installer
2016-06-15 21:18:36 ----D---- C:\Windows\Panther
2016-06-15 20:40:43 ----D---- C:\Users\František\AppData\Roaming\Identities
2016-06-15 20:40:26 ----SD---- C:\Users\František\AppData\Roaming\Microsoft
2016-06-15 20:40:26 ----D---- C:\Users\František\AppData\Roaming\Media Center Programs
2016-06-15 20:40:20 ----SHD---- C:\ProgramData\Šablony
2016-06-15 20:40:20 ----SHD---- C:\ProgramData\Plocha
2016-06-15 20:40:20 ----SHD---- C:\ProgramData\Oblíbené položky
2016-06-15 20:40:20 ----SHD---- C:\ProgramData\Nabídka Start
2016-06-15 20:40:20 ----SHD---- C:\ProgramData\Dokumenty
2016-06-15 20:40:20 ----SHD---- C:\ProgramData\Data aplikací
2016-06-15 20:25:05 ----D---- C:\Windows\SoftwareDistribution
2016-06-15 20:22:40 ----D---- C:\Windows\Prefetch
2016-06-15 20:01:38 ----D---- C:\Windows.old
2016-06-09 22:05:34 ----SHD---- C:\Config.Msi
======List of files/folders modified in the last 1 month======
2016-06-16 23:39:16 ----D---- C:\Windows\Temp
2016-06-16 23:38:46 ----RD---- C:\Program Files (x86)
2016-06-16 23:36:16 ----D---- C:\Windows\System32
2016-06-16 23:36:16 ----D---- C:\Windows\inf
2016-06-16 23:36:16 ----A---- C:\Windows\system32\PerfStringBackup.INI
2016-06-16 23:31:18 ----D---- C:\Windows
2016-06-16 23:21:34 ----D---- C:\Windows\system32\config
2016-06-16 23:17:17 ----RD---- C:\Program Files
2016-06-16 23:13:36 ----D---- C:\Windows\system32\catroot
2016-06-16 23:13:31 ----D---- C:\Windows\system32\NDF
2016-06-16 23:11:31 ----D---- C:\Windows\SYSWOW64\drivers
2016-06-16 21:24:12 ----D---- C:\Windows\system32\LogFiles
2016-06-16 18:46:20 ----D---- C:\Windows\SysWOW64
2016-06-16 09:38:29 ----D---- C:\Windows\Microsoft.NET
2016-06-16 09:21:49 ----SHD---- C:\System Volume Information
2016-06-16 09:00:07 ----D---- C:\Windows\SYSWOW64\cs-CZ
2016-06-16 09:00:07 ----D---- C:\Windows\system32\cs-CZ
2016-06-16 08:59:06 ----RSD---- C:\Windows\assembly
2016-06-16 08:57:15 ----D---- C:\Windows\SYSWOW64\en-US
2016-06-16 08:57:15 ----D---- C:\Windows\system32\en-US
2016-06-16 08:57:14 ----SD---- C:\ProgramData\Microsoft
2016-06-16 07:15:46 ----D---- C:\Windows\winsxs
2016-06-16 07:00:26 ----D---- C:\Windows\system32\wdi
2016-06-16 00:32:24 ----D---- C:\Windows\system32\DriverStore
2016-06-16 00:31:43 ----D---- C:\Windows\system32\drivers
2016-06-16 00:30:47 ----D---- C:\Windows\Help
2016-06-16 00:30:37 ----HD---- C:\ProgramData
2016-06-16 00:30:32 ----D---- C:\Windows\system32\catroot2
2016-06-16 00:24:09 ----D---- C:\Program Files (x86)\Common Files
2016-06-16 00:15:05 ----D---- C:\Windows\system32\Tasks
2016-06-15 22:16:04 ----D---- C:\Windows\Logs
2016-06-15 22:06:23 ----D---- C:\Program Files\Common Files
2016-06-15 21:58:59 ----D---- C:\Windows\system32\restore
2016-06-15 21:48:27 ----D---- C:\Program Files\Common Files\Microsoft Shared
2016-06-15 20:43:27 ----RD---- C:\Users
2016-06-15 20:40:40 ----SHD---- C:\$Recycle.Bin
2016-06-15 20:40:20 ----D---- C:\Program Files\Windows NT
2016-06-15 20:38:25 ----D---- C:\Windows\rescache
2016-06-15 20:38:15 ----D---- C:\Windows\debug
2016-06-15 20:32:47 ----SHD---- C:\Recovery
2016-06-15 20:32:46 ----D---- C:\Windows\system32\Recovery
2016-06-15 20:28:59 ----D---- C:\Windows\system32\CodeIntegrity
2016-06-15 20:26:19 ----D---- C:\Windows\system32\sysprep
2016-06-15 20:24:20 ----D---- C:\Windows\system32\drivers\UMDF
======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======
R0 rdyboost;ReadyBoost; C:\Windows\System32\drivers\rdyboost.sys [2010-11-21 213888]
R3 RTL8167;Realtek 8167 NT Driver; C:\Windows\system32\DRIVERS\Rt64win7.sys [2013-02-01 819784]
S3 pciide;pciide; C:\Windows\system32\drivers\pciide.sys [2009-07-14 12352]
S3 TsUsbFlt;TsUsbFlt; C:\Windows\system32\drivers\tsusbflt.sys [2010-11-21 59392]
S3 TsUsbGD;Remote Desktop Generic USB Device; C:\Windows\system32\drivers\TsUsbGD.sys [2010-11-21 31232]
======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======
All services whitelisted
-----------------EOF-----------------
Logfile of random's system information tool 1.10 (written by random/random)
Run by František at 2016-06-16 23:39:18
Microsoft Windows 7 Home Premium Service Pack 1
System drive C: has 334 GB (69%) free of 481 GB
Total RAM: 8131 MB (89% free)
Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 23:39:26, on 16.6.2016
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v8.00 (8.00.7601.17514)
Boot mode: Safe mode with network support
Running processes:
C:\Program Files (x86)\Mozilla Firefox\firefox.exe
C:\Program Files\trend micro\František.exe
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
F2 - REG:system.ini: UserInit=userinit.exe
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'NETWORK SERVICE')
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)
--
End of file - 4297 bytes
======Listing Processes======
\SystemRoot\System32\smss.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
wininit.exe
C:\Windows\system32\services.exe
C:\Windows\system32\lsass.exe
C:\Windows\system32\lsm.exe
winlogon.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Windows\system32\svchost.exe -k RPCSS
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\system32\svchost.exe -k netsvcs
C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k LocalService
C:\Windows\system32\svchost.exe -k NetworkService
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
ctfmon.exe
C:\Windows\System32\svchost.exe -k secsvcs
C:\Windows\system32\wbem\wmiprvse.exe
"C:\Program Files (x86)\Mozilla Firefox\firefox.exe"
"C:\Windows\Explorer.EXE"
"C:\Users\František\Downloads\RSITx64.exe"
C:\Windows\system32\WerFault.exe -u -p 1020 -s 3744
C:\Windows\system32\wbem\wmiprvse.exe
======Registry dump======
[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=credssp.dll
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorAdmin"=5
"ConsentPromptBehaviorUser"=3
"EnableUIADesktopToggle"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoActiveDesktop"=1
"NoActiveDesktopChanges"=1
"ForceActiveDesktopOn"=0
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.msadpcm"=msadp32.acm
"midimapper"=midimap.dll
"wavemapper"=msacm32.drv
"vidc.uyvy"=msyuv.dll
"vidc.yuy2"=msyuv.dll
"vidc.yvyu"=msyuv.dll
"vidc.iyuv"=iyuv_32.dll
"vidc.i420"=iyuv_32.dll
"vidc.yvu9"=tsbyuv.dll
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"aux1"=wdmaud.drv
======File associations======
.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*
======List of files/folders created in the last 1 month======
2016-06-16 23:31:18 ----A---- C:\Windows\ntbtlog.txt
2016-06-16 23:17:17 ----D---- C:\Program Files\trend micro
2016-06-16 23:17:13 ----D---- C:\rsit
2016-06-16 17:44:10 ----D---- C:\Program Files (x86)\ESET
2016-06-16 08:58:18 ----A---- C:\Windows\SYSWOW64\PerfStringBackup.INI
2016-06-16 08:57:14 ----D---- C:\Windows\Migration
2016-06-16 08:57:14 ----D---- C:\Program Files (x86)\Microsoft.NET
2016-06-16 08:31:00 ----D---- C:\Users\František\AppData\Roaming\Mozilla
2016-06-16 08:30:49 ----D---- C:\Program Files (x86)\Mozilla Maintenance Service
2016-06-16 08:30:48 ----D---- C:\Program Files (x86)\Mozilla Firefox
2016-06-16 00:37:00 ----D---- C:\Users\František\AppData\Roaming\com.adobe.mauby.4875E02D9FB21EE389F73B8D1702B320485DF8CE.1
2016-06-16 00:37:00 ----D---- C:\Users\František\AppData\Roaming\com.adobe.mauby
2016-06-16 00:31:52 ----A---- C:\Windows\SYSWOW64\nvStreaming.exe
2016-06-16 00:30:48 ----A---- C:\Windows\system32\nvvsvc.exe
2016-06-16 00:30:48 ----A---- C:\Windows\system32\nvsvcr.dll
2016-06-16 00:30:48 ----A---- C:\Windows\system32\nvsvc64.dll
2016-06-16 00:30:48 ----A---- C:\Windows\system32\nvshext.dll
2016-06-16 00:30:48 ----A---- C:\Windows\system32\nvmctray.dll
2016-06-16 00:30:48 ----A---- C:\Windows\system32\nvcpl.dll
2016-06-16 00:30:48 ----A---- C:\Windows\system32\nv3dappshextr.dll
2016-06-16 00:30:48 ----A---- C:\Windows\system32\nv3dappshext.dll
2016-06-16 00:30:41 ----A---- C:\Windows\SYSWOW64\OpenCL.dll
2016-06-16 00:30:41 ----A---- C:\Windows\system32\OpenCL.dll
2016-06-16 00:30:37 ----D---- C:\ProgramData\NVIDIA Corporation
2016-06-16 00:30:34 ----D---- C:\Program Files (x86)\NVIDIA Corporation
2016-06-16 00:29:52 ----D---- C:\ProgramData\Package Cache
2016-06-16 00:29:03 ----A---- C:\Windows\SYSWOW64\nvwgf2um.dll
2016-06-16 00:29:03 ----A---- C:\Windows\SYSWOW64\nvumdshim.dll
2016-06-16 00:29:03 ----A---- C:\Windows\SYSWOW64\nvptxJitCompiler.dll
2016-06-16 00:29:03 ----A---- C:\Windows\SYSWOW64\nvopencl.dll
2016-06-16 00:29:03 ----A---- C:\Windows\SYSWOW64\nvoglv32.dll
2016-06-16 00:29:03 ----A---- C:\Windows\SYSWOW64\nvoglshim32.dll
2016-06-16 00:29:03 ----A---- C:\Windows\SYSWOW64\nvinit.dll
2016-06-16 00:29:03 ----A---- C:\Windows\SYSWOW64\NvIFROpenGL.dll
2016-06-16 00:29:03 ----A---- C:\Windows\SYSWOW64\NvIFR.dll
2016-06-16 00:29:03 ----A---- C:\Windows\SYSWOW64\NvFBC.dll
2016-06-16 00:29:03 ----A---- C:\Windows\SYSWOW64\nvfatbinaryLoader.dll
2016-06-16 00:29:03 ----A---- C:\Windows\SYSWOW64\nvEncodeAPI.dll
2016-06-16 00:29:03 ----A---- C:\Windows\SYSWOW64\nvd3dum.dll
2016-06-16 00:29:03 ----A---- C:\Windows\SYSWOW64\nvcuvid.dll
2016-06-16 00:29:03 ----A---- C:\Windows\SYSWOW64\nvcuda.dll
2016-06-16 00:29:03 ----A---- C:\Windows\SYSWOW64\nvcompiler.dll
2016-06-16 00:29:03 ----A---- C:\Windows\SYSWOW64\nvapi.dll
2016-06-16 00:29:03 ----A---- C:\Windows\system32\nvwgf2umx.dll
2016-06-16 00:29:03 ----A---- C:\Windows\system32\nvumdshimx.dll
2016-06-16 00:29:03 ----A---- C:\Windows\system32\nvptxJitCompiler.dll
2016-06-16 00:29:03 ----A---- C:\Windows\system32\nvopencl.dll
2016-06-16 00:29:03 ----A---- C:\Windows\system32\nvoglv64.dll
2016-06-16 00:29:03 ----A---- C:\Windows\system32\nvoglshim64.dll
2016-06-16 00:29:03 ----A---- C:\Windows\system32\nvinitx.dll
2016-06-16 00:29:03 ----A---- C:\Windows\system32\NvIFROpenGL.dll
2016-06-16 00:29:03 ----A---- C:\Windows\system32\NvIFR64.dll
2016-06-16 00:29:03 ----A---- C:\Windows\system32\nvhdap64.dll
2016-06-16 00:29:03 ----A---- C:\Windows\system32\nvhdagenco64.dll
2016-06-16 00:29:03 ----A---- C:\Windows\system32\NvFBC64.dll
2016-06-16 00:29:03 ----A---- C:\Windows\system32\nvfatbinaryLoader.dll
2016-06-16 00:29:03 ----A---- C:\Windows\system32\nvEncodeAPI64.dll
2016-06-16 00:29:03 ----A---- C:\Windows\system32\nvdispgenco6436839.dll
2016-06-16 00:29:03 ----A---- C:\Windows\system32\nvdispco6436839.dll
2016-06-16 00:29:03 ----A---- C:\Windows\system32\nvd3dumx.dll
2016-06-16 00:29:03 ----A---- C:\Windows\system32\nvcuvid.dll
2016-06-16 00:29:03 ----A---- C:\Windows\system32\nvcuda.dll
2016-06-16 00:29:03 ----A---- C:\Windows\system32\nvcompiler.dll
2016-06-16 00:29:03 ----A---- C:\Windows\system32\nvapi64.dll
2016-06-16 00:29:03 ----A---- C:\Windows\system32\drivers\nvlddmkm.sys
2016-06-16 00:29:03 ----A---- C:\Windows\system32\drivers\nvhda64v.sys
2016-06-16 00:27:53 ----D---- C:\NVIDIA
2016-06-16 00:25:20 ----D---- C:\ProgramData\NVIDIA
2016-06-16 00:24:59 ----D---- C:\Windows\Sun
2016-06-16 00:23:59 ----D---- C:\Users\František\AppData\Roaming\Sun
2016-06-16 00:23:57 ----A---- C:\Windows\SYSWOW64\WindowsAccessBridge-32.dll
2016-06-16 00:23:50 ----D---- C:\ProgramData\Oracle
2016-06-16 00:23:48 ----D---- C:\Program Files (x86)\Java
2016-06-16 00:08:11 ----A---- C:\Windows\SYSWOW64\nvaudcap32v.dll
2016-06-16 00:08:11 ----A---- C:\Windows\system32\nvaudcap64v.dll
2016-06-16 00:08:11 ----A---- C:\Windows\system32\drivers\nvvad64v.sys
2016-06-15 22:59:07 ----D---- C:\34f7e4c70218db2e26d6c6a9af
2016-06-15 22:16:04 ----D---- C:\6f02b9ce3f79b1f8efe8e8b45f2a1763
2016-06-15 22:13:59 ----D---- C:\Program Files\NVIDIA Corporation
2016-06-15 22:07:51 ----A---- C:\Windows\system32\drivers\aswKbd.sys
2016-06-15 22:06:46 ----D---- C:\Users\František\AppData\Roaming\AVAST Software
2016-06-15 22:06:23 ----D---- C:\Program Files\Common Files\AV
2016-06-15 22:06:15 ----A---- C:\Windows\system32\drivers\aswVmm.sys
2016-06-15 22:06:15 ----A---- C:\Windows\system32\drivers\aswStm.sys
2016-06-15 22:06:14 ----A---- C:\Windows\system32\drivers\aswSP.sys
2016-06-15 22:06:14 ----A---- C:\Windows\system32\drivers\aswRvrt.sys
2016-06-15 22:06:13 ----A---- C:\Windows\system32\drivers\aswMonFlt.sys
2016-06-15 22:06:13 ----A---- C:\Windows\system32\drivers\aswHwid.sys
2016-06-15 22:06:12 ----A---- C:\Windows\system32\drivers\aswRdr2.sys
2016-06-15 22:06:09 ----A---- C:\Windows\system32\drivers\aswSnx.sys
2016-06-15 22:06:00 ----A---- C:\Windows\system32\aswBoot.exe
2016-06-15 22:05:58 ----A---- C:\Windows\avastSS.scr
2016-06-15 22:03:55 ----D---- C:\Program Files\AVAST Software
2016-06-15 22:03:32 ----D---- C:\ProgramData\AVAST Software
2016-06-15 22:02:02 ----A---- C:\Windows\system32\wups2.dll
2016-06-15 22:02:02 ----A---- C:\Windows\system32\wucltux.dll
2016-06-15 22:02:02 ----A---- C:\Windows\system32\wuaueng.dll
2016-06-15 22:02:02 ----A---- C:\Windows\system32\wuauclt.exe
2016-06-15 22:01:57 ----A---- C:\Windows\SYSWOW64\wups.dll
2016-06-15 22:01:57 ----A---- C:\Windows\SYSWOW64\wudriver.dll
2016-06-15 22:01:57 ----A---- C:\Windows\SYSWOW64\wuapi.dll
2016-06-15 22:01:57 ----A---- C:\Windows\system32\wups.dll
2016-06-15 22:01:57 ----A---- C:\Windows\system32\wudriver.dll
2016-06-15 22:01:57 ----A---- C:\Windows\system32\wuapi.dll
2016-06-15 22:01:50 ----A---- C:\Windows\SYSWOW64\wuwebv.dll
2016-06-15 22:01:50 ----A---- C:\Windows\SYSWOW64\wuapp.exe
2016-06-15 22:01:50 ----A---- C:\Windows\system32\wuwebv.dll
2016-06-15 22:01:50 ----A---- C:\Windows\system32\wuapp.exe
2016-06-15 21:59:15 ----A---- C:\Windows\system32\RTNUninst64.dll
2016-06-15 21:59:15 ----A---- C:\Windows\system32\RtNicProp64.dll
2016-06-15 21:59:15 ----A---- C:\Windows\system32\drivers\Rt64win7.sys
2016-06-15 21:52:20 ----A---- C:\Windows\system32\drivers\iusb3hcs.sys
2016-06-15 21:52:10 ----A---- C:\Windows\system32\drivers\iusb3xhc.sys
2016-06-15 21:52:08 ----A---- C:\Windows\system32\drivers\iusb3hub.sys
2016-06-15 21:48:42 ----A---- C:\Windows\system32\drivers\IntelMEFWVer.dll
2016-06-15 21:48:37 ----D---- C:\ProgramData\Intel
2016-06-15 21:48:31 ----D---- C:\Program Files\Intel
2016-06-15 21:47:47 ----A---- C:\Windows\system32\drivers\HECIx64.sys
2016-06-15 21:47:46 ----D---- C:\Users\František\AppData\Roaming\InstallShield
2016-06-15 21:38:52 ----D---- C:\Windows\SYSWOW64\RTCOM
2016-06-15 21:38:52 ----D---- C:\Program Files\Realtek
2016-06-15 21:38:43 ----A---- C:\Windows\SYSWOW64\MBTHX32.dll
2016-06-15 21:38:43 ----A---- C:\Windows\SYSWOW64\MBAPO32.dll
2016-06-15 21:38:43 ----A---- C:\Windows\system32\WavesGUILib64.dll
2016-06-15 21:38:43 ----A---- C:\Windows\system32\SRSWOW64.dll
2016-06-15 21:38:43 ----A---- C:\Windows\system32\SRSTSX64.dll
2016-06-15 21:38:43 ----A---- C:\Windows\system32\SRSTSH64.dll
2016-06-15 21:38:43 ----A---- C:\Windows\system32\SRSHP64.dll
2016-06-15 21:38:43 ----A---- C:\Windows\system32\RtPgEx64.dll
2016-06-15 21:38:43 ----A---- C:\Windows\system32\RtlCPAPI64.dll
2016-06-15 21:38:43 ----A---- C:\Windows\system32\RtkCoLDR64.dll
2016-06-15 21:38:43 ----A---- C:\Windows\system32\RtkCfg64.dll
2016-06-15 21:38:43 ----A---- C:\Windows\system32\RtkAPO64.dll
2016-06-15 21:38:43 ----A---- C:\Windows\system32\RtkApi64.dll
2016-06-15 21:38:43 ----A---- C:\Windows\system32\RTEEP64A.dll
2016-06-15 21:38:43 ----A---- C:\Windows\system32\RTEEL64A.dll
2016-06-15 21:38:43 ----A---- C:\Windows\system32\RTEEG64A.dll
2016-06-15 21:38:43 ----A---- C:\Windows\system32\RTEED64A.dll
2016-06-15 21:38:43 ----A---- C:\Windows\system32\RtDataProc64.dll
2016-06-15 21:38:43 ----A---- C:\Windows\system32\RTCOM64.dll
2016-06-15 21:38:43 ----A---- C:\Windows\system32\RP3DHT64.dll
2016-06-15 21:38:43 ----A---- C:\Windows\system32\RP3DAA64.dll
2016-06-15 21:38:43 ----A---- C:\Windows\system32\RCoInstII64.dll
2016-06-15 21:38:43 ----A---- C:\Windows\system32\MBWrp64.dll
2016-06-15 21:38:43 ----A---- C:\Windows\system32\MBTHX64.dll
2016-06-15 21:38:43 ----A---- C:\Windows\system32\MBAPO64.dll
2016-06-15 21:38:43 ----A---- C:\Windows\system32\drivers\rtvienna.dat
2016-06-15 21:38:43 ----A---- C:\Windows\system32\drivers\RTKVHD64.sys
2016-06-15 21:38:43 ----A---- C:\Windows\system32\drivers\RTAIODAT.DAT
2016-06-15 21:38:43 ----A---- C:\Windows\system32\drivers\MBfilt64.sys
2016-06-15 21:38:42 ----HD---- C:\Program Files (x86)\InstallShield Installation Information
2016-06-15 21:38:42 ----D---- C:\Program Files (x86)\Realtek
2016-06-15 21:38:42 ----A---- C:\Windows\system32\MaxxAudioEQ64.dll
2016-06-15 21:38:42 ----A---- C:\Windows\system32\MaxxAudioAPOShell64.dll
2016-06-15 21:38:42 ----A---- C:\Windows\system32\MaxxAudioAPO20.dll
2016-06-15 21:38:42 ----A---- C:\Windows\system32\FMAPO64.dll
2016-06-15 21:38:42 ----A---- C:\Windows\system32\CONEQMSAPOGUILibrary.dll
2016-06-15 21:38:42 ----A---- C:\Windows\system32\AERTAR64.dll
2016-06-15 21:38:42 ----A---- C:\Windows\system32\AERTAC64.dll
2016-06-15 21:38:38 ----RA---- C:\Windows\RtlExUpd.dll
2016-06-15 21:38:38 ----HD---- C:\Program Files (x86)\Temp
2016-06-15 21:33:11 ----D---- C:\Program Files (x86)\Intel
2016-06-15 21:33:11 ----A---- C:\Windows\SYSWOW64\CSVer.dll
2016-06-15 21:32:04 ----D---- C:\Users\František\AppData\Roaming\Macromedia
2016-06-15 21:32:03 ----D---- C:\Users\František\AppData\Roaming\Adobe
2016-06-15 21:31:49 ----D---- C:\ProgramData\Adobe
2016-06-15 21:31:48 ----D---- C:\Program Files (x86)\Adobe
2016-06-15 21:31:46 ----SHD---- C:\Windows\Installer
2016-06-15 21:18:36 ----D---- C:\Windows\Panther
2016-06-15 20:40:43 ----D---- C:\Users\František\AppData\Roaming\Identities
2016-06-15 20:40:26 ----SD---- C:\Users\František\AppData\Roaming\Microsoft
2016-06-15 20:40:26 ----D---- C:\Users\František\AppData\Roaming\Media Center Programs
2016-06-15 20:40:20 ----SHD---- C:\ProgramData\Šablony
2016-06-15 20:40:20 ----SHD---- C:\ProgramData\Plocha
2016-06-15 20:40:20 ----SHD---- C:\ProgramData\Oblíbené položky
2016-06-15 20:40:20 ----SHD---- C:\ProgramData\Nabídka Start
2016-06-15 20:40:20 ----SHD---- C:\ProgramData\Dokumenty
2016-06-15 20:40:20 ----SHD---- C:\ProgramData\Data aplikací
2016-06-15 20:25:05 ----D---- C:\Windows\SoftwareDistribution
2016-06-15 20:22:40 ----D---- C:\Windows\Prefetch
2016-06-15 20:01:38 ----D---- C:\Windows.old
2016-06-09 22:05:34 ----SHD---- C:\Config.Msi
======List of files/folders modified in the last 1 month======
2016-06-16 23:39:16 ----D---- C:\Windows\Temp
2016-06-16 23:38:46 ----RD---- C:\Program Files (x86)
2016-06-16 23:36:16 ----D---- C:\Windows\System32
2016-06-16 23:36:16 ----D---- C:\Windows\inf
2016-06-16 23:36:16 ----A---- C:\Windows\system32\PerfStringBackup.INI
2016-06-16 23:31:18 ----D---- C:\Windows
2016-06-16 23:21:34 ----D---- C:\Windows\system32\config
2016-06-16 23:17:17 ----RD---- C:\Program Files
2016-06-16 23:13:36 ----D---- C:\Windows\system32\catroot
2016-06-16 23:13:31 ----D---- C:\Windows\system32\NDF
2016-06-16 23:11:31 ----D---- C:\Windows\SYSWOW64\drivers
2016-06-16 21:24:12 ----D---- C:\Windows\system32\LogFiles
2016-06-16 18:46:20 ----D---- C:\Windows\SysWOW64
2016-06-16 09:38:29 ----D---- C:\Windows\Microsoft.NET
2016-06-16 09:21:49 ----SHD---- C:\System Volume Information
2016-06-16 09:00:07 ----D---- C:\Windows\SYSWOW64\cs-CZ
2016-06-16 09:00:07 ----D---- C:\Windows\system32\cs-CZ
2016-06-16 08:59:06 ----RSD---- C:\Windows\assembly
2016-06-16 08:57:15 ----D---- C:\Windows\SYSWOW64\en-US
2016-06-16 08:57:15 ----D---- C:\Windows\system32\en-US
2016-06-16 08:57:14 ----SD---- C:\ProgramData\Microsoft
2016-06-16 07:15:46 ----D---- C:\Windows\winsxs
2016-06-16 07:00:26 ----D---- C:\Windows\system32\wdi
2016-06-16 00:32:24 ----D---- C:\Windows\system32\DriverStore
2016-06-16 00:31:43 ----D---- C:\Windows\system32\drivers
2016-06-16 00:30:47 ----D---- C:\Windows\Help
2016-06-16 00:30:37 ----HD---- C:\ProgramData
2016-06-16 00:30:32 ----D---- C:\Windows\system32\catroot2
2016-06-16 00:24:09 ----D---- C:\Program Files (x86)\Common Files
2016-06-16 00:15:05 ----D---- C:\Windows\system32\Tasks
2016-06-15 22:16:04 ----D---- C:\Windows\Logs
2016-06-15 22:06:23 ----D---- C:\Program Files\Common Files
2016-06-15 21:58:59 ----D---- C:\Windows\system32\restore
2016-06-15 21:48:27 ----D---- C:\Program Files\Common Files\Microsoft Shared
2016-06-15 20:43:27 ----RD---- C:\Users
2016-06-15 20:40:40 ----SHD---- C:\$Recycle.Bin
2016-06-15 20:40:20 ----D---- C:\Program Files\Windows NT
2016-06-15 20:38:25 ----D---- C:\Windows\rescache
2016-06-15 20:38:15 ----D---- C:\Windows\debug
2016-06-15 20:32:47 ----SHD---- C:\Recovery
2016-06-15 20:32:46 ----D---- C:\Windows\system32\Recovery
2016-06-15 20:28:59 ----D---- C:\Windows\system32\CodeIntegrity
2016-06-15 20:26:19 ----D---- C:\Windows\system32\sysprep
2016-06-15 20:24:20 ----D---- C:\Windows\system32\drivers\UMDF
======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======
R0 rdyboost;ReadyBoost; C:\Windows\System32\drivers\rdyboost.sys [2010-11-21 213888]
R3 RTL8167;Realtek 8167 NT Driver; C:\Windows\system32\DRIVERS\Rt64win7.sys [2013-02-01 819784]
S3 pciide;pciide; C:\Windows\system32\drivers\pciide.sys [2009-07-14 12352]
S3 TsUsbFlt;TsUsbFlt; C:\Windows\system32\drivers\tsusbflt.sys [2010-11-21 59392]
S3 TsUsbGD;Remote Desktop Generic USB Device; C:\Windows\system32\drivers\TsUsbGD.sys [2010-11-21 31232]
======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======
All services whitelisted
-----------------EOF-----------------
-
Rudy
- Site Admin
- Příspěvky: 119673
- Registrován: 30 říj 2003 13:42
- Bydliště: Plzeň
- Kontaktovat uživatele:
Re: Problém s PC
Zdravím!
Spusťte tuto utilitu:
Spusťte tuto utilitu:
Stáhněte AdwCleaner http://general-changelog-team.fr/fr/dow ... adwcleaner
Uložte na plochu
Ukončete všechny programy
Klikněte nejprve na >Scan< a pak na >Clean<.
Proběhne skenováni a pak se objeví log, který sem vložte.
Dotazy a logy vkládejte pouze do vašich threadů. Soukromé zprávy, icq a e-maily neslouží k řešení vašich problémů.
Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.
Navštivte:
e-mail: rudy(zavináč)forum.viry.cz
Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!
Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.
Navštivte:
e-mail: rudy(zavináč)forum.viry.cz
Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!
Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Přispějete na provoz fóra?