Odvirování PC, zrychlení počítače, vzdálená pomoc prostřednictvím služby neslape.cz

Kontrola logu po čístění

Máte problém s virem? Vložte sem log z FRST nebo RSIT.

Moderátor: Moderátoři

Pravidla fóra
Pokud chcete pomoc, vložte log z FRST [návod zde] nebo RSIT [návod zde]

Jednotlivé thready budou po vyřešení uzamčeny. Stejně tak ty, které budou nečinné déle než 14 dní. Vizte Pravidlo o zamykání témat. Děkujeme za pochopení.

!NOVINKA!
Nově lze využívat služby vzdálené pomoci, kdy se k vašemu počítači připojí odborník a bližší informace o problému si od vás získá telefonicky! Více na www.neslape.cz
Odpovědět
Zpráva
Autor
ekki
Návštěvník
Návštěvník
Příspěvky: 13
Registrován: 04 dub 2017 14:54

Kontrola logu po čístění

#1 Příspěvek od ekki »

Ahoj, prosím o kontrolu logu po vyčištění. Použil jsem ADWCleaner, Adware Removal Tool by TSA, ComboFIX, mbam. Každý něco našel a odmazal.



Logfile of random's system information tool 1.10 (written by random/random)
Run by Lang at 2017-04-13 10:36:48
Microsoft Windows 7 Home Premium Service Pack 1
System drive C: has 595 GB (62%) free of 954 GB
Total RAM: 4095 MB (69% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 10:36:57, on 13.4.2017
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v11.0 (11.00.9600.18639)
Boot mode: Normal

Running processes:
C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe
C:\Users\Lang\Desktop\RSIT.exe
C:\Program Files (x86)\trend micro\Lang.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = Preserve
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/p/?LinkId=255141
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/p/?LinkId=255141
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/p/?LinkId=255141
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files (x86)\Microsoft Office\Office12\GrooveShellExtensions.dll
O2 - BHO: Pomocná služba pro přihlášení k účtu Microsoft - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O4 - HKCU\..\Run: [DAEMON Tools Lite Automount] "C:\Program Files\DAEMON Tools Lite\DTAgent.exe" -autorun
O9 - Extra button: @C:\Program Files (x86)\Windows Live\Writer\WindowsLiveWriterShortcuts.dll,-1004 - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra 'Tools' menuitem: @C:\Program Files (x86)\Windows Live\Writer\WindowsLiveWriterShortcuts.dll,-1003 - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll
O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll
O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O15 - Trusted Zone: http://help.eset.com (HKLM)
O15 - ESC Trusted Zone: http://help.eset.com (HKLM)
O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Program Files (x86)\Microsoft Office\Office12\GrooveSystemServices.dll
O18 - Protocol: wlpg - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} - C:\Program Files (x86)\Windows Live\Photo Gallery\AlbumDownloadProtocolHandler.dll
O23 - Service: Adobe Genuine Software Integrity Service (AGSService) - Adobe Systems, Incorporated - C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGSService.exe
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
O23 - Service: Apple Mobile Device Service - Apple Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
O23 - Service: Bonjour Service - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: Disc Soft Lite Bus Service - Disc Soft Ltd - C:\Program Files\DAEMON Tools Lite\DiscSoftBusService.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)
O23 - Service: ESET Service (ekrn) - ESET - C:\Program Files\ESET\ESET Security\ekrn.exe
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)
O23 - Service: Služba Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Služba Google Update (gupdatem) (gupdatem) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: @%SystemRoot%\system32\ieetwcollectorres.dll,-1000 (IEEtwCollectorService) - Unknown owner - C:\Windows\system32\IEEtwCollector.exe (file missing)
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
O23 - Service: NVIDIA Display Driver Service (nvsvc) - Unknown owner - C:\Windows\system32\nvvsvc.exe (file missing)
O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)
O23 - Service: SwitchBoard - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\Wat\WatUX.exe,-601 (WatAdminSvc) - Unknown owner - C:\Windows\system32\Wat\WatAdminSvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)

--
End of file - 6339 bytes

======Scheduled tasks folder======

C:\Windows\tasks\GoogleUpdateTaskMachineCore.job - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe /c
C:\Windows\tasks\GoogleUpdateTaskMachineCore1d0bf90961655b6.job - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe /c
C:\Windows\tasks\GoogleUpdateTaskMachineCore1d0e3a57663b2bb.job - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe /c
C:\Windows\tasks\GoogleUpdateTaskMachineUA.job - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe /ua /installsource scheduler
C:\Windows\tasks\GoogleUpdateTaskMachineUA1d040b84c435af9.job - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe /ua /installsource scheduler
C:\Windows\tasks\GoogleUpdateTaskMachineUA1d08ffdd6e4fc46.job - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe /ua /installsource scheduler
C:\Windows\tasks\GoogleUpdateTaskMachineUA1d0e3a577431981.job - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe /ua /installsource scheduler
C:\Windows\tasks\GoogleUpdateTaskMachineUA1d0f29d60833303.job - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe /ua /installsource scheduler
C:\Windows\tasks\GoogleUpdateTaskMachineUA1d12eb1e256d743.job - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe /ua /installsource scheduler

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{72853161-30C5-4D22-B7F9-0BBC1D38A37E}]
Groove GFS Browser Helper - C:\Program Files (x86)\Microsoft Office\Office12\GrooveShellExtensions.dll [2009-02-26 2217832]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
Pomocná služba pro přihlášení k účtu Microsoft - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2012-07-17 441592]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"DAEMON Tools Lite Automount"=C:\Program Files\DAEMON Tools Lite\DTAgent.exe [2016-04-04 4289728]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{B5A7F190-DDA6-4420-B3BA-52453494E6CD}"=C:\Program Files (x86)\Microsoft Office\Office12\GrooveShellExtensions.dll [2009-02-26 2217832]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=credssp.dll

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorAdmin"=5
"ConsentPromptBehaviorUser"=3
"EnableUIADesktopToggle"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1
"SoftwareSASGeneration"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoSimpleNetIDList"=1
"NoDriveTypeAutoRun"=221
"NoDrives"=0

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDrives"=0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.msadpcm"=msadp32.acm
"midimapper"=midimap.dll
"wavemapper"=msacm32.drv
"vidc.uyvy"=msyuv.dll
"vidc.yuy2"=msyuv.dll
"vidc.yvyu"=msyuv.dll
"vidc.iyuv"=iyuv_32.dll
"vidc.i420"=iyuv_32.dll
"vidc.yvu9"=tsbyuv.dll
"msacm.l3acm"=C:\Windows\SysWOW64\l3codeca.acm
"vidc.cvid"=iccvid.dll
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"aux1"=wdmaud.drv
"wave2"=wdmaud.drv
"midi2"=wdmaud.drv
"mixer2"=wdmaud.drv
"aux2"=wdmaud.drv
"wave3"=wdmaud.drv
"midi3"=wdmaud.drv
"mixer3"=wdmaud.drv
"aux3"=wdmaud.drv
"wave4"=wdmaud.drv
"midi4"=wdmaud.drv
"mixer4"=wdmaud.drv
"aux4"=wdmaud.drv
"wave9"=wdmaud.drv
"midi9"=wdmaud.drv
"mixer9"=wdmaud.drv
"aux5"=wdmaud.drv
"msacm.siren"=sirenacm.dll
"wave6"=wdmaud.drv
"midi6"=wdmaud.drv
"mixer6"=wdmaud.drv
"wave8"=wdmaud.drv
"midi8"=wdmaud.drv
"mixer8"=wdmaud.drv
"wave7"=wdmaud.drv
"midi7"=wdmaud.drv
"mixer7"=wdmaud.drv
"wave5"=wdmaud.drv
"midi5"=wdmaud.drv
"mixer5"=wdmaud.drv
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1

======List of files/folders created in the last 1 month======

2017-04-13 10:36:48 ----D---- C:\rsit
2017-04-13 10:36:48 ----D---- C:\Program Files (x86)\trend micro
2017-04-13 09:11:35 ----D---- C:\ProgramData\ESET
2017-04-13 09:02:38 ----A---- C:\Windows\ntbtlog.txt
2017-04-12 14:41:52 ----A---- C:\Windows\SysWOW64\mshtml.dll
2017-04-12 14:41:48 ----A---- C:\Windows\SysWOW64\ieframe.dll
2017-04-12 14:41:46 ----A---- C:\Windows\SysWOW64\jscript9.dll
2017-04-12 14:41:44 ----A---- C:\Windows\SysWOW64\wininet.dll
2017-04-12 14:41:42 ----A---- C:\Windows\SysWOW64\iertutil.dll
2017-04-12 14:41:41 ----A---- C:\Windows\SysWOW64\urlmon.dll
2017-04-12 14:41:40 ----A---- C:\Windows\SysWOW64\win32spl.dll
2017-04-12 14:41:36 ----A---- C:\Windows\SysWOW64\quartz.dll
2017-04-12 14:41:36 ----A---- C:\Windows\SysWOW64\ole32.dll
2017-04-12 14:41:36 ----A---- C:\Windows\SysWOW64\atmfd.dll
2017-04-12 14:41:35 ----A---- C:\Windows\SysWOW64\wuapi.dll
2017-04-12 14:41:35 ----A---- C:\Windows\SysWOW64\iedkcs32.dll
2017-04-12 14:41:35 ----A---- C:\Windows\SysWOW64\gdi32.dll
2017-04-12 14:41:35 ----A---- C:\Windows\SysWOW64\api-ms-win-core-file-l1-2-0.dll
2017-04-12 14:41:34 ----A---- C:\Windows\SysWOW64\ucrtbase.dll
2017-04-12 14:41:34 ----A---- C:\Windows\SysWOW64\mshtmlmedia.dll
2017-04-12 14:41:34 ----A---- C:\Windows\SysWOW64\api-ms-win-crt-utility-l1-1-0.dll
2017-04-12 14:41:34 ----A---- C:\Windows\SysWOW64\api-ms-win-crt-time-l1-1-0.dll
2017-04-12 14:41:34 ----A---- C:\Windows\SysWOW64\api-ms-win-crt-string-l1-1-0.dll
2017-04-12 14:41:34 ----A---- C:\Windows\SysWOW64\api-ms-win-crt-stdio-l1-1-0.dll
2017-04-12 14:41:34 ----A---- C:\Windows\SysWOW64\api-ms-win-crt-runtime-l1-1-0.dll
2017-04-12 14:41:34 ----A---- C:\Windows\SysWOW64\api-ms-win-crt-process-l1-1-0.dll
2017-04-12 14:41:34 ----A---- C:\Windows\SysWOW64\api-ms-win-crt-private-l1-1-0.dll
2017-04-12 14:41:34 ----A---- C:\Windows\SysWOW64\api-ms-win-crt-multibyte-l1-1-0.dll
2017-04-12 14:41:34 ----A---- C:\Windows\SysWOW64\api-ms-win-crt-math-l1-1-0.dll
2017-04-12 14:41:34 ----A---- C:\Windows\SysWOW64\api-ms-win-crt-locale-l1-1-0.dll
2017-04-12 14:41:34 ----A---- C:\Windows\SysWOW64\api-ms-win-crt-heap-l1-1-0.dll
2017-04-12 14:41:34 ----A---- C:\Windows\SysWOW64\api-ms-win-crt-filesystem-l1-1-0.dll
2017-04-12 14:41:34 ----A---- C:\Windows\SysWOW64\api-ms-win-crt-environment-l1-1-0.dll
2017-04-12 14:41:34 ----A---- C:\Windows\SysWOW64\api-ms-win-crt-convert-l1-1-0.dll
2017-04-12 14:41:34 ----A---- C:\Windows\SysWOW64\api-ms-win-crt-conio-l1-1-0.dll
2017-04-12 14:41:34 ----A---- C:\Windows\SysWOW64\api-ms-win-core-xstate-l2-1-0.dll
2017-04-12 14:41:34 ----A---- C:\Windows\SysWOW64\api-ms-win-core-timezone-l1-1-0.dll
2017-04-12 14:41:34 ----A---- C:\Windows\SysWOW64\api-ms-win-core-synch-l1-2-0.dll
2017-04-12 14:41:34 ----A---- C:\Windows\SysWOW64\api-ms-win-core-processthreads-l1-1-1.dll
2017-04-12 14:41:34 ----A---- C:\Windows\SysWOW64\api-ms-win-core-localization-l1-2-0.dll
2017-04-12 14:41:34 ----A---- C:\Windows\SysWOW64\api-ms-win-core-file-l2-1-0.dll
2017-04-12 14:41:32 ----A---- C:\Windows\SysWOW64\ntkrnlpa.exe
2017-04-12 14:41:31 ----A---- C:\Windows\SysWOW64\ntoskrnl.exe
2017-04-12 14:41:27 ----A---- C:\Windows\SysWOW64\ntdll.dll
2017-04-12 14:41:27 ----A---- C:\Windows\SysWOW64\asycfilt.dll
2017-04-12 14:41:26 ----A---- C:\Windows\SysWOW64\webcheck.dll
2017-04-12 14:41:26 ----A---- C:\Windows\SysWOW64\samlib.dll
2017-04-12 14:41:26 ----A---- C:\Windows\SysWOW64\msfeeds.dll
2017-04-12 14:41:26 ----A---- C:\Windows\SysWOW64\mfmjpegdec.dll
2017-04-12 14:41:26 ----A---- C:\Windows\SysWOW64\certcli.dll
2017-04-12 14:41:26 ----A---- C:\Windows\SysWOW64\cdosys.dll
2017-04-12 14:41:25 ----A---- C:\Windows\SysWOW64\wuwebv.dll
2017-04-12 14:41:25 ----A---- C:\Windows\SysWOW64\vbscript.dll
2017-04-12 14:41:25 ----A---- C:\Windows\SysWOW64\jscript.dll
2017-04-12 14:41:24 ----A---- C:\Windows\SysWOW64\wups.dll
2017-04-12 14:41:23 ----A---- C:\Windows\SysWOW64\wudriver.dll
2017-04-12 14:41:23 ----A---- C:\Windows\SysWOW64\rpcrt4.dll
2017-04-12 14:41:22 ----A---- C:\Windows\SysWOW64\ieapfltr.dll
2017-04-12 14:41:20 ----A---- C:\Windows\SysWOW64\srclient.dll
2017-04-12 14:41:20 ----A---- C:\Windows\SysWOW64\kerberos.dll
2017-04-12 14:41:20 ----A---- C:\Windows\SysWOW64\ieui.dll
2017-04-12 14:41:20 ----A---- C:\Windows\SysWOW64\advapi32.dll
2017-04-12 14:41:19 ----A---- C:\Windows\SysWOW64\wuapp.exe
2017-04-12 14:41:19 ----A---- C:\Windows\SysWOW64\sspicli.dll
2017-04-12 14:41:19 ----A---- C:\Windows\SysWOW64\schannel.dll
2017-04-12 14:41:19 ----A---- C:\Windows\SysWOW64\occache.dll
2017-04-12 14:41:19 ----A---- C:\Windows\SysWOW64\msv1_0.dll
2017-04-12 14:41:19 ----A---- C:\Windows\SysWOW64\msrating.dll
2017-04-12 14:41:19 ----A---- C:\Windows\SysWOW64\mshtmled.dll
2017-04-12 14:41:19 ----A---- C:\Windows\SysWOW64\KernelBase.dll
2017-04-12 14:41:19 ----A---- C:\Windows\SysWOW64\jsproxy.dll
2017-04-12 14:41:19 ----A---- C:\Windows\SysWOW64\jscript9diag.dll
2017-04-12 14:41:19 ----A---- C:\Windows\SysWOW64\ieUnatt.exe
2017-04-12 14:41:19 ----A---- C:\Windows\SysWOW64\ieetwproxystub.dll
2017-04-12 14:41:19 ----A---- C:\Windows\SysWOW64\dxtrans.dll
2017-04-12 14:41:19 ----A---- C:\Windows\SysWOW64\dxtmsft.dll
2017-04-12 14:41:18 ----A---- C:\Windows\SysWOW64\wdigest.dll
2017-04-12 14:41:18 ----A---- C:\Windows\SysWOW64\TSpkg.dll
2017-04-12 14:41:18 ----A---- C:\Windows\SysWOW64\rpchttp.dll
2017-04-12 14:41:18 ----A---- C:\Windows\SysWOW64\ncrypt.dll
2017-04-12 14:41:18 ----A---- C:\Windows\SysWOW64\MshtmlDac.dll
2017-04-12 14:41:18 ----A---- C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll
2017-04-12 14:41:18 ----A---- C:\Windows\SysWOW64\inseng.dll
2017-04-12 14:41:18 ----A---- C:\Windows\SysWOW64\iesetup.dll
2017-04-12 14:41:18 ----A---- C:\Windows\SysWOW64\iernonce.dll
2017-04-12 14:41:18 ----A---- C:\Windows\SysWOW64\cryptbase.dll
2017-04-12 14:41:18 ----A---- C:\Windows\SysWOW64\bcrypt.dll
2017-04-12 14:41:18 ----A---- C:\Windows\SysWOW64\appidapi.dll
2017-04-12 14:41:17 ----AH---- C:\Windows\SysWOW64\api-ms-win-core-sysinfo-l1-1-0.dll
2017-04-12 14:41:17 ----AH---- C:\Windows\SysWOW64\api-ms-win-core-synch-l1-1-0.dll
2017-04-12 14:41:17 ----A---- C:\Windows\SysWOW64\wow32.dll
2017-04-12 14:41:17 ----A---- C:\Windows\SysWOW64\secur32.dll
2017-04-12 14:41:17 ----A---- C:\Windows\SysWOW64\ntvdm64.dll
2017-04-12 14:41:17 ----A---- C:\Windows\SysWOW64\lpk.dll
2017-04-12 14:41:17 ----A---- C:\Windows\SysWOW64\kernel32.dll
2017-04-12 14:41:17 ----A---- C:\Windows\SysWOW64\fontsub.dll
2017-04-12 14:41:17 ----A---- C:\Windows\SysWOW64\dciman32.dll
2017-04-12 14:41:17 ----A---- C:\Windows\SysWOW64\credssp.dll
2017-04-12 14:41:17 ----A---- C:\Windows\SysWOW64\auditpol.exe
2017-04-12 14:41:17 ----A---- C:\Windows\SysWOW64\atmlib.dll
2017-04-12 14:41:16 ----AH---- C:\Windows\SysWOW64\api-ms-win-core-string-l1-1-0.dll
2017-04-12 14:41:16 ----AH---- C:\Windows\SysWOW64\api-ms-win-core-rtlsupport-l1-1-0.dll
2017-04-12 14:41:16 ----AH---- C:\Windows\SysWOW64\api-ms-win-core-profile-l1-1-0.dll
2017-04-12 14:41:16 ----AH---- C:\Windows\SysWOW64\api-ms-win-core-processthreads-l1-1-0.dll
2017-04-12 14:41:16 ----AH---- C:\Windows\SysWOW64\api-ms-win-core-processenvironment-l1-1-0.dll
2017-04-12 14:41:16 ----AH---- C:\Windows\SysWOW64\api-ms-win-core-namedpipe-l1-1-0.dll
2017-04-12 14:41:16 ----AH---- C:\Windows\SysWOW64\api-ms-win-core-misc-l1-1-0.dll
2017-04-12 14:41:16 ----AH---- C:\Windows\SysWOW64\api-ms-win-core-memory-l1-1-0.dll
2017-04-12 14:41:16 ----AH---- C:\Windows\SysWOW64\api-ms-win-core-localregistry-l1-1-0.dll
2017-04-12 14:41:16 ----AH---- C:\Windows\SysWOW64\api-ms-win-core-libraryloader-l1-1-0.dll
2017-04-12 14:41:15 ----AH---- C:\Windows\SysWOW64\api-ms-win-security-base-l1-1-0.dll
2017-04-12 14:41:15 ----AH---- C:\Windows\SysWOW64\api-ms-win-core-xstate-l1-1-0.dll
2017-04-12 14:41:15 ----AH---- C:\Windows\SysWOW64\api-ms-win-core-util-l1-1-0.dll
2017-04-12 14:41:15 ----AH---- C:\Windows\SysWOW64\api-ms-win-core-threadpool-l1-1-0.dll
2017-04-12 14:41:15 ----AH---- C:\Windows\SysWOW64\api-ms-win-core-localization-l1-1-0.dll
2017-04-12 14:41:15 ----AH---- C:\Windows\SysWOW64\api-ms-win-core-io-l1-1-0.dll
2017-04-12 14:41:15 ----AH---- C:\Windows\SysWOW64\api-ms-win-core-interlocked-l1-1-0.dll
2017-04-12 14:41:15 ----AH---- C:\Windows\SysWOW64\api-ms-win-core-heap-l1-1-0.dll
2017-04-12 14:41:15 ----AH---- C:\Windows\SysWOW64\api-ms-win-core-handle-l1-1-0.dll
2017-04-12 14:41:15 ----AH---- C:\Windows\SysWOW64\api-ms-win-core-file-l1-1-0.dll
2017-04-12 14:41:15 ----AH---- C:\Windows\SysWOW64\api-ms-win-core-fibers-l1-1-0.dll
2017-04-12 14:41:15 ----AH---- C:\Windows\SysWOW64\api-ms-win-core-errorhandling-l1-1-0.dll
2017-04-12 14:41:15 ----AH---- C:\Windows\SysWOW64\api-ms-win-core-delayload-l1-1-0.dll
2017-04-12 14:41:15 ----AH---- C:\Windows\SysWOW64\api-ms-win-core-debug-l1-1-0.dll
2017-04-12 14:41:15 ----AH---- C:\Windows\SysWOW64\api-ms-win-core-datetime-l1-1-0.dll
2017-04-12 14:41:15 ----AH---- C:\Windows\SysWOW64\api-ms-win-core-console-l1-1-0.dll
2017-04-12 14:41:15 ----A---- C:\Windows\SysWOW64\setup16.exe
2017-04-12 14:41:15 ----A---- C:\Windows\SysWOW64\instnm.exe
2017-04-12 14:41:15 ----A---- C:\Windows\SysWOW64\apisetschema.dll
2017-04-12 14:41:14 ----A---- C:\Windows\SysWOW64\user.exe
2017-04-12 14:41:14 ----A---- C:\Windows\SysWOW64\tzres.dll
2017-04-12 14:41:13 ----A---- C:\Windows\SysWOW64\msaudite.dll
2017-04-12 14:41:13 ----A---- C:\Windows\SysWOW64\adtschema.dll
2017-04-12 14:41:11 ----A---- C:\Windows\SysWOW64\msobjs.dll
2017-04-12 14:40:38 ----A---- C:\Windows\SysWOW64\kbdgeoqw.dll
2017-04-12 14:40:38 ----A---- C:\Windows\SysWOW64\KBDAZEL.DLL
2017-04-12 14:40:38 ----A---- C:\Windows\SysWOW64\KBDAZE.DLL
2017-04-12 13:50:36 ----A---- C:\Windows\SysWOW64\subinacl.exe
2017-04-12 13:30:06 ----D---- C:\$RECYCLE.BIN
2017-04-12 13:19:59 ----D---- C:\Qoobox
2017-04-12 13:19:36 ----D---- C:\Windows\erdnt
2017-04-12 09:37:14 ----D---- C:\ProgramData\Comodo
2017-04-12 09:21:53 ----D---- C:\Windows\pss
2017-03-20 00:48:06 ----A---- C:\Windows\SysWOW64\msvcr110_clr0400.dll
2017-03-20 00:48:06 ----A---- C:\Windows\SysWOW64\msvcr100_clr0400.dll
2017-03-20 00:48:06 ----A---- C:\Windows\SysWOW64\msvcp110_clr0400.dll
2017-03-20 00:48:06 ----A---- C:\Windows\SysWOW64\aspnet_counters.dll
2017-03-18 23:31:19 ----A---- C:\Windows\SysWOW64\DWrite.dll
2017-03-18 23:31:17 ----A---- C:\Windows\SysWOW64\msxml3.dll
2017-03-18 23:31:17 ----A---- C:\Windows\HelpPane.exe
2017-03-18 23:31:16 ----A---- C:\Windows\SysWOW64\usp10.dll
2017-03-18 23:31:15 ----A---- C:\Windows\SysWOW64\inetcomm.dll
2017-03-18 23:31:11 ----A---- C:\Windows\SysWOW64\mscms.dll
2017-03-18 23:31:11 ----A---- C:\Windows\SysWOW64\icm32.dll
2017-03-18 23:31:10 ----A---- C:\Windows\SysWOW64\WcsPlugInService.dll
2017-03-18 23:31:09 ----A---- C:\Windows\SysWOW64\INETRES.dll
2017-03-18 23:31:08 ----A---- C:\Windows\SysWOW64\msxml3r.dll

======List of files/folders modified in the last 1 month======

2017-04-13 10:36:48 ----RD---- C:\Program Files (x86)
2017-04-13 10:35:35 ----D---- C:\Windows\Temp
2017-04-13 09:12:57 ----D---- C:\Windows\inf
2017-04-13 09:12:37 ----SHD---- C:\Windows\Installer
2017-04-13 09:12:22 ----D---- C:\Config.Msi
2017-04-13 09:11:35 ----RD---- C:\Program Files
2017-04-13 09:11:35 ----D---- C:\ProgramData
2017-04-13 09:05:28 ----D---- C:\Windows
2017-04-13 08:53:18 ----D---- C:\Windows\Microsoft.NET
2017-04-13 08:36:37 ----RSD---- C:\Windows\assembly
2017-04-13 08:30:54 ----D---- C:\Windows\System32
2017-04-12 16:16:36 ----SHD---- C:\System Volume Information
2017-04-12 15:12:12 ----D---- C:\Windows\SoftwareDistribution
2017-04-12 15:10:58 ----D---- C:\Windows\debug
2017-04-12 15:07:48 ----D---- C:\Windows\winsxs
2017-04-12 15:05:17 ----D---- C:\Windows\SysWOW64\en-US
2017-04-12 15:05:17 ----D---- C:\Windows\SysWOW64\cs-CZ
2017-04-12 15:05:17 ----D---- C:\Windows\SysWOW64
2017-04-12 15:05:13 ----D---- C:\Windows\AppPatch
2017-04-12 15:05:13 ----D---- C:\Program Files (x86)\Internet Explorer
2017-04-12 15:05:12 ----RSD---- C:\Windows\Fonts
2017-04-12 15:01:32 ----D---- C:\ProgramData\Microsoft Help
2017-04-12 14:57:58 ----D---- C:\Program Files (x86)\Microsoft Silverlight
2017-04-12 14:51:39 ----D---- C:\Windows\SysWOW64\RTCOM
2017-04-12 14:46:21 ----A---- C:\Windows\SysWOW64\PerfStringBackup.INI
2017-04-12 14:23:55 ----D---- C:\ProgramData\NVIDIA
2017-04-12 13:30:10 ----A---- C:\Windows\system.ini
2017-04-12 13:25:50 ----D---- C:\ProgramData\TEMP
2017-04-12 13:25:41 ----D---- C:\Windows\SysWOW64\drivers
2017-04-12 13:25:40 ----D---- C:\Program Files (x86)\Common Files
2017-04-12 13:19:57 ----D---- C:\Windows\Prefetch
2017-04-12 09:33:50 ----D---- C:\ProgramData\AVAST Software
2017-04-12 09:33:41 ----D---- C:\Program Files (x86)\Common Files\AV
2017-04-12 09:17:59 ----D---- C:\Users\Lang\AppData\Roaming\DAEMON Tools Lite
2017-04-12 09:17:58 ----D---- C:\Users\Lang\AppData\Roaming\uTorrent
2017-04-12 09:16:55 ----D---- C:\Windows\Minidump
2017-04-12 09:09:34 ----D---- C:\ProgramData\Ashampoo
2017-04-12 08:47:45 ----D---- C:\Users\Lang\AppData\Roaming\IObit
2017-04-12 08:35:42 ----D---- C:\ProgramData\IObit
2017-04-12 08:30:51 ----D---- C:\ProgramData\ProductData
2017-03-19 17:19:26 ----D---- C:\Windows\SysWOW64\migration

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 edevmon;edevmon; C:\Windows\system32\DRIVERS\edevmon.sys []
R0 rdyboost;ReadyBoost; C:\Windows\System32\drivers\rdyboost.sys []
R1 eamonm;eamonm; C:\Windows\system32\DRIVERS\eamonm.sys []
R1 ehdrv;ehdrv; C:\Windows\system32\DRIVERS\ehdrv.sys []
R1 epfw;epfw; C:\Windows\system32\DRIVERS\epfw.sys []
R1 EpfwLWF;ESET Personal Firewall; C:\Windows\system32\DRIVERS\EpfwLWF.sys []
R1 epfwwfp;epfwwfp; C:\Windows\system32\DRIVERS\epfwwfp.sys []
R1 HWiNFO32;HWiNFO32/64 Kernel Driver; \??\C:\Windows\SysWOW64\drivers\HWiNFO64A.SYS [2015-06-28 26528]
R2 ekbdflt;ekbdflt; C:\Windows\system32\DRIVERS\ekbdflt.sys []
R3 AmUStor;AM USB Stroage Driver; C:\Windows\system32\drivers\AmUStor.SYS []
R3 dtlitescsibus;DAEMON Tools Lite Virtual SCSI Bus; C:\Windows\system32\DRIVERS\dtlitescsibus.sys []
R3 dtliteusbbus;DAEMON Tools Lite Virtual USB Bus; C:\Windows\system32\DRIVERS\dtliteusbbus.sys []
R3 GEARAspiWDM;GEAR ASPI Filter Driver; C:\Windows\system32\DRIVERS\GEARAspiWDM.sys []
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\Windows\system32\drivers\RTKVHD64.sys []
R3 L1C;NDIS Miniport Driver for Qualcomm Atheros AR81xx PCI-E Ethernet Controller; C:\Windows\system32\DRIVERS\L1C62x64.sys []
R3 MTsensor;ATK0110 ACPI UTILITY; C:\Windows\system32\DRIVERS\ASACPI.sys []
R3 NVHDA;Service for NVIDIA High Definition Audio Driver; C:\Windows\system32\drivers\nvhda64v.sys []
S3 aswHdsKe;aswHdsKe; \??\C:\Windows\system32\drivers\aswHdsKe.sys []
S3 BridgeMP;@%SystemRoot%\system32\bridgeres.dll,-1; C:\Windows\system32\DRIVERS\bridge.sys []
S3 dg_ssudbus;SAMSUNG Mobile USB Composite Device Driver (DEVGURU Ver.); C:\Windows\system32\DRIVERS\ssudbus.sys []
S3 Dot4;MS IEEE-1284.4 Driver; C:\Windows\system32\DRIVERS\Dot4.sys []
S3 Dot4Print;Print Class Driver for IEEE-1284.4; C:\Windows\system32\DRIVERS\Dot4Prt.sys []
S3 dot4usb;MS Dot4USB Filter Dot4USB Filter; C:\Windows\system32\DRIVERS\dot4usb.sys []
S3 fssfltr;FssFltr; C:\Windows\system32\DRIVERS\fssfltr.sys []
S3 ivusb;Initio Driver for USB Default Controller; C:\Windows\system32\DRIVERS\ivusb.sys []
S3 pciide;pciide; C:\Windows\system32\drivers\pciide.sys []
S3 RdpVideoMiniport;Remote Desktop Video Miniport Driver; C:\Windows\System32\drivers\rdpvideominiport.sys []
S3 ssudmdm;SAMSUNG Mobile USB Modem Drivers (DEVGURU Ver.); C:\Windows\system32\DRIVERS\ssudmdm.sys []
S3 TsUsbFlt;TsUsbFlt; C:\Windows\system32\drivers\tsusbflt.sys []
S3 TsUsbGD;Remote Desktop Generic USB Device; C:\Windows\system32\drivers\TsUsbGD.sys []
S3 USBAAPL64;Apple Mobile USB Driver; C:\Windows\System32\Drivers\usbaapl64.sys []
S3 usbscan;Ovladač skeneru USB; C:\Windows\system32\DRIVERS\usbscan.sys []
S3 WinUsb;SAMSUNG Android USB Driver; C:\Windows\system32\DRIVERS\WinUsb.sys []

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 AGSService;Adobe Genuine Software Integrity Service; C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGSService.exe [2017-02-27 2227312]
R2 Apple Mobile Device Service;Apple Mobile Device Service; C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe [2016-09-22 83768]
R2 Bonjour Service;Bonjour Service; C:\Program Files\Bonjour\mDNSResponder.exe [2015-08-12 462096]
R2 DiagTrack;@%SystemRoot%\system32\UtcResources.dll,-3001; C:\Windows\System32\svchost.exe [2009-07-14 20992]
R2 ekrn;ESET Service; C:\Program Files\ESET\ESET Security\ekrn.exe [2017-03-09 2624856]
R2 Net Driver HPZ12;Net Driver HPZ12; C:\Windows\System32\svchost.exe [2009-07-14 20992]
R2 nvsvc;NVIDIA Display Driver Service; C:\Windows\system32\nvvsvc.exe []
R2 Pml Driver HPZ12;Pml Driver HPZ12; C:\Windows\System32\svchost.exe [2009-07-14 20992]
R2 wlidsvc;Windows Live ID Sign-in Assistant; C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE [2012-07-17 2292480]
R3 Disc Soft Lite Bus Service;Disc Soft Lite Bus Service; C:\Program Files\DAEMON Tools Lite\DiscSoftBusService.exe [2016-04-04 1443520]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2017-03-20 105096]
S2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2017-03-20 125064]
S2 gupdate;Služba Google Update (gupdate); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-08-31 144200]
S3 fsssvc;Windows Live Family Safety Service; C:\Program Files (x86)\Windows Live\Family Safety\fsssvc.exe [2014-03-31 1512640]
S3 gupdatem;Služba Google Update (gupdatem); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-08-31 144200]
S3 IEEtwCollectorService;@%SystemRoot%\system32\ieetwcollectorres.dll,-1000; C:\Windows\system32\IEEtwCollector.exe /V []
S3 Microsoft Office Groove Audit Service;Microsoft Office Groove Audit Service; C:\Program Files (x86)\Microsoft Office\Office12\GrooveAuditService.exe [2009-02-26 64856]
S3 odserv;Microsoft Office Diagnostics Service; C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE [2011-07-20 440696]
S3 ose;Office Source Engine; C:\Program Files (x86)\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2006-10-26 145184]
S3 SwitchBoard;SwitchBoard; C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [2010-02-19 517096]
S3 WatAdminSvc;@%SystemRoot%\system32\Wat\WatUX.exe,-601; C:\Windows\system32\Wat\WatAdminSvc.exe []
S4 aspnet_state;Stavová služba ASP.NET; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\aspnet_state.exe [2017-03-20 51320]
S4 NetMsmqActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8195; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2017-03-20 135800]
S4 NetPipeActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8197; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2017-03-20 135800]
S4 NetTcpActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8199; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2017-03-20 135800]

-----------------EOF-----------------
Nahoru
Uživatelský avatar
Rudy
Site Admin
Site Admin
Příspěvky: 119495
Registrován: 30 říj 2003 13:42
Bydliště: Plzeň
Kontaktovat uživatele:
Kontaktovat uživatele Rudy

Re: Kontrola logu po čístění

#2 Příspěvek od Rudy »

Zdravím!
S ComboFixem opatrně, laik si jím snadno může poškodit systém. Stáhněte OTM: http://oldtimer.geekstogo.com/OTM.exe a uložte na plochu. Spusťte a do levého okna zkopírujte:
:files
C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
C:\Windows\tasks\GoogleUpdateTaskMachineCore1d0bf90961655b6.job
C:\Windows\tasks\GoogleUpdateTaskMachineCore1d0e3a57663b2bb.job
C:\Windows\tasks\GoogleUpdateTaskMachineUA.job
C:\Windows\tasks\GoogleUpdateTaskMachineUA1d040b84c435af9.job
C:\Windows\tasks\GoogleUpdateTaskMachineUA1d08ffdd6e4fc46.job
C:\Windows\tasks\GoogleUpdateTaskMachineUA1d0e3a577431981.job
C:\Windows\tasks\GoogleUpdateTaskMachineUA1d0f29d60833303.job
C:\Windows\tasks\GoogleUpdateTaskMachineUA1d12eb1e256d743.job

:commands
[Purity]
[Emptytemp]
[Emptyflash]
a klikněte na >MoveIt!<. Po skenu restartujte PC a dejte nový log RSIT.
Dotazy a logy vkládejte pouze do vašich threadů. Soukromé zprávy, icq a e-maily neslouží k řešení vašich problémů.

Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.

Navštivte: Obrázek

e-mail: rudy(zavináč)forum.viry.cz

Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!


Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Nahoru
ekki
Návštěvník
Návštěvník
Příspěvky: 13
Registrován: 04 dub 2017 14:54

Re: Kontrola logu po čístění

#3 Příspěvek od ekki »

Logfile of random's system information tool 1.10 (written by random/random)
Run by Lang at 2017-04-18 08:09:52
Microsoft Windows 7 Home Premium Service Pack 1
System drive C: has 590 GB (62%) free of 954 GB
Total RAM: 4095 MB (55% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 8:09:59, on 18.4.2017
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v11.0 (11.00.9600.18639)
Boot mode: Normal

Running processes:
C:\Program Files (x86)\NVIDIA Corporation\NvContainer\nvcontainer.exe
C:\Program Files (x86)\TeamViewer\TeamViewer.exe
C:\Program Files (x86)\NVIDIA Corporation\NvNode\NVIDIA Web Helper.exe
C:\Users\Lang\Desktop\RSIT.exe
C:\Program Files (x86)\trend micro\Lang.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = Preserve
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/p/?LinkId=255141
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/p/?LinkId=255141
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/p/?LinkId=255141
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files (x86)\Microsoft Office\Office12\GrooveShellExtensions.dll
O2 - BHO: Pomocná služba pro přihlášení k účtu Microsoft - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O4 - HKCU\..\Run: [DAEMON Tools Lite Automount] "C:\Program Files\DAEMON Tools Lite\DTAgent.exe" -autorun
O9 - Extra button: @C:\Program Files (x86)\Windows Live\Writer\WindowsLiveWriterShortcuts.dll,-1004 - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra 'Tools' menuitem: @C:\Program Files (x86)\Windows Live\Writer\WindowsLiveWriterShortcuts.dll,-1003 - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll
O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll
O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O15 - Trusted Zone: http://help.eset.com (HKLM)
O15 - ESC Trusted Zone: http://help.eset.com (HKLM)
O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Program Files (x86)\Microsoft Office\Office12\GrooveSystemServices.dll
O18 - Protocol: wlpg - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} - C:\Program Files (x86)\Windows Live\Photo Gallery\AlbumDownloadProtocolHandler.dll
O23 - Service: Adobe Genuine Software Integrity Service (AGSService) - Adobe Systems, Incorporated - C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGSService.exe
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
O23 - Service: Apple Mobile Device Service - Apple Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
O23 - Service: Bonjour Service - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: Disc Soft Lite Bus Service - Disc Soft Ltd - C:\Program Files\DAEMON Tools Lite\DiscSoftBusService.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)
O23 - Service: ESET Service (ekrn) - ESET - C:\Program Files\ESET\ESET Security\ekrn.exe
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)
O23 - Service: Služba Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Služba Google Update (gupdatem) (gupdatem) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: @%SystemRoot%\system32\ieetwcollectorres.dll,-1000 (IEEtwCollectorService) - Unknown owner - C:\Windows\system32\IEEtwCollector.exe (file missing)
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
O23 - Service: NVIDIA LocalSystem Container (NvContainerLocalSystem) - NVIDIA Corporation - C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe
O23 - Service: NVIDIA NetworkService Container (NvContainerNetworkService) - NVIDIA Corporation - C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe
O23 - Service: NVIDIA Display Container LS (NVDisplay.ContainerLocalSystem) - NVIDIA Corporation - C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe
O23 - Service: NVIDIA Telemetry Container (NvTelemetryContainer) - NVIDIA Corporation - C:\Program Files (x86)\NVIDIA Corporation\NvTelemetry\NvTelemetryContainer.exe
O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)
O23 - Service: SwitchBoard - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe
O23 - Service: TeamViewer 12 (TeamViewer) - TeamViewer GmbH - C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\Wat\WatUX.exe,-601 (WatAdminSvc) - Unknown owner - C:\Windows\system32\Wat\WatAdminSvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)

--
End of file - 7132 bytes

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{72853161-30C5-4D22-B7F9-0BBC1D38A37E}]
Groove GFS Browser Helper - C:\Program Files (x86)\Microsoft Office\Office12\GrooveShellExtensions.dll [2009-02-26 2217832]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
Pomocná služba pro přihlášení k účtu Microsoft - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2012-07-17 441592]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"DAEMON Tools Lite Automount"=C:\Program Files\DAEMON Tools Lite\DTAgent.exe [2016-04-04 4289728]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{B5A7F190-DDA6-4420-B3BA-52453494E6CD}"=C:\Program Files (x86)\Microsoft Office\Office12\GrooveShellExtensions.dll [2009-02-26 2217832]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=credssp.dll

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorAdmin"=5
"ConsentPromptBehaviorUser"=3
"EnableUIADesktopToggle"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1
"SoftwareSASGeneration"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoSimpleNetIDList"=1
"NoDriveTypeAutoRun"=221
"NoDrives"=0

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDrives"=0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.msadpcm"=msadp32.acm
"midimapper"=midimap.dll
"wavemapper"=msacm32.drv
"vidc.uyvy"=msyuv.dll
"vidc.yuy2"=msyuv.dll
"vidc.yvyu"=msyuv.dll
"vidc.iyuv"=iyuv_32.dll
"vidc.i420"=iyuv_32.dll
"vidc.yvu9"=tsbyuv.dll
"msacm.l3acm"=C:\Windows\SysWOW64\l3codeca.acm
"vidc.cvid"=iccvid.dll
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"aux1"=wdmaud.drv
"wave2"=wdmaud.drv
"midi2"=wdmaud.drv
"mixer2"=wdmaud.drv
"aux2"=wdmaud.drv
"wave3"=wdmaud.drv
"midi3"=wdmaud.drv
"mixer3"=wdmaud.drv
"aux3"=wdmaud.drv
"wave4"=wdmaud.drv
"midi4"=wdmaud.drv
"mixer4"=wdmaud.drv
"aux4"=wdmaud.drv
"wave9"=wdmaud.drv
"midi9"=wdmaud.drv
"mixer9"=wdmaud.drv
"aux5"=wdmaud.drv
"msacm.siren"=sirenacm.dll
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv
"wave5"=wdmaud.drv
"midi5"=wdmaud.drv
"mixer5"=wdmaud.drv
"wave6"=wdmaud.drv
"midi6"=wdmaud.drv
"mixer6"=wdmaud.drv
"wave8"=wdmaud.drv
"midi8"=wdmaud.drv
"mixer8"=wdmaud.drv
"wave7"=wdmaud.drv
"midi7"=wdmaud.drv
"mixer7"=wdmaud.drv

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1

======List of files/folders created in the last 1 month======

2017-04-15 22:08:39 ----D---- C:\_OTM
2017-04-13 12:50:04 ----D---- C:\Users\Lang\AppData\Roaming\TeamViewer
2017-04-13 12:49:53 ----D---- C:\Program Files (x86)\TeamViewer
2017-04-13 11:04:52 ----A---- C:\Windows\SysWOW64\D3DX9_43.dll
2017-04-13 11:04:52 ----A---- C:\Windows\SysWOW64\d3dx10_43.dll
2017-04-13 11:04:28 ----A---- C:\Windows\SysWOW64\nvspbridge.dll
2017-04-13 11:04:26 ----A---- C:\Windows\SysWOW64\nvspcap.dll
2017-04-13 11:03:18 ----A---- C:\Windows\NvTelemetryContainerRecovery.bat
2017-04-13 11:02:49 ----A---- C:\Windows\SysWOW64\nvStreaming.exe
2017-04-13 11:02:23 ----A---- C:\Windows\SysWOW64\vulkaninfo.exe
2017-04-13 11:02:23 ----A---- C:\Windows\SysWOW64\vulkan-1.dll
2017-04-13 11:02:22 ----D---- C:\Program Files (x86)\VulkanRT
2017-04-13 11:01:21 ----A---- C:\Windows\NvContainerRecovery.bat
2017-04-13 10:56:36 ----A---- C:\Windows\SysWOW64\nvaudcap32v.dll
2017-04-13 10:56:34 ----A---- C:\Windows\SysWOW64\nvumdshim.dll
2017-04-13 10:56:34 ----A---- C:\Windows\SysWOW64\nvptxJitCompiler.dll
2017-04-13 10:56:34 ----A---- C:\Windows\SysWOW64\nvopencl.dll
2017-04-13 10:56:34 ----A---- C:\Windows\SysWOW64\nvoglv32.dll
2017-04-13 10:56:34 ----A---- C:\Windows\SysWOW64\nvoglshim32.dll
2017-04-13 10:56:34 ----A---- C:\Windows\SysWOW64\nvinit.dll
2017-04-13 10:56:34 ----A---- C:\Windows\SysWOW64\NvIFR.dll
2017-04-13 10:56:33 ----A---- C:\Windows\SysWOW64\NvFBC.dll
2017-04-13 10:56:33 ----A---- C:\Windows\SysWOW64\nvfatbinaryLoader.dll
2017-04-13 10:56:33 ----A---- C:\Windows\SysWOW64\nvd3dum.dll
2017-04-13 10:56:33 ----A---- C:\Windows\SysWOW64\nvcuvid.dll
2017-04-13 10:56:33 ----A---- C:\Windows\SysWOW64\nvcuda.dll
2017-04-13 10:56:28 ----A---- C:\Windows\SysWOW64\nvcompiler.dll
2017-04-13 10:56:28 ----A---- C:\Windows\SysWOW64\nvapi.dll
2017-04-13 10:52:29 ----D---- C:\NVIDIA
2017-04-13 10:36:48 ----D---- C:\rsit
2017-04-13 10:36:48 ----D---- C:\Program Files (x86)\trend micro
2017-04-13 09:11:35 ----D---- C:\ProgramData\ESET
2017-04-13 09:02:38 ----A---- C:\Windows\ntbtlog.txt
2017-04-12 14:41:52 ----A---- C:\Windows\SysWOW64\mshtml.dll
2017-04-12 14:41:48 ----A---- C:\Windows\SysWOW64\ieframe.dll
2017-04-12 14:41:46 ----A---- C:\Windows\SysWOW64\jscript9.dll
2017-04-12 14:41:44 ----A---- C:\Windows\SysWOW64\wininet.dll
2017-04-12 14:41:42 ----A---- C:\Windows\SysWOW64\iertutil.dll
2017-04-12 14:41:41 ----A---- C:\Windows\SysWOW64\urlmon.dll
2017-04-12 14:41:40 ----A---- C:\Windows\SysWOW64\win32spl.dll
2017-04-12 14:41:36 ----A---- C:\Windows\SysWOW64\quartz.dll
2017-04-12 14:41:36 ----A---- C:\Windows\SysWOW64\ole32.dll
2017-04-12 14:41:36 ----A---- C:\Windows\SysWOW64\atmfd.dll
2017-04-12 14:41:35 ----A---- C:\Windows\SysWOW64\wuapi.dll
2017-04-12 14:41:35 ----A---- C:\Windows\SysWOW64\iedkcs32.dll
2017-04-12 14:41:35 ----A---- C:\Windows\SysWOW64\gdi32.dll
2017-04-12 14:41:35 ----A---- C:\Windows\SysWOW64\api-ms-win-core-file-l1-2-0.dll
2017-04-12 14:41:34 ----A---- C:\Windows\SysWOW64\ucrtbase.dll
2017-04-12 14:41:34 ----A---- C:\Windows\SysWOW64\mshtmlmedia.dll
2017-04-12 14:41:34 ----A---- C:\Windows\SysWOW64\api-ms-win-crt-utility-l1-1-0.dll
2017-04-12 14:41:34 ----A---- C:\Windows\SysWOW64\api-ms-win-crt-time-l1-1-0.dll
2017-04-12 14:41:34 ----A---- C:\Windows\SysWOW64\api-ms-win-crt-string-l1-1-0.dll
2017-04-12 14:41:34 ----A---- C:\Windows\SysWOW64\api-ms-win-crt-stdio-l1-1-0.dll
2017-04-12 14:41:34 ----A---- C:\Windows\SysWOW64\api-ms-win-crt-runtime-l1-1-0.dll
2017-04-12 14:41:34 ----A---- C:\Windows\SysWOW64\api-ms-win-crt-process-l1-1-0.dll
2017-04-12 14:41:34 ----A---- C:\Windows\SysWOW64\api-ms-win-crt-private-l1-1-0.dll
2017-04-12 14:41:34 ----A---- C:\Windows\SysWOW64\api-ms-win-crt-multibyte-l1-1-0.dll
2017-04-12 14:41:34 ----A---- C:\Windows\SysWOW64\api-ms-win-crt-math-l1-1-0.dll
2017-04-12 14:41:34 ----A---- C:\Windows\SysWOW64\api-ms-win-crt-locale-l1-1-0.dll
2017-04-12 14:41:34 ----A---- C:\Windows\SysWOW64\api-ms-win-crt-heap-l1-1-0.dll
2017-04-12 14:41:34 ----A---- C:\Windows\SysWOW64\api-ms-win-crt-filesystem-l1-1-0.dll
2017-04-12 14:41:34 ----A---- C:\Windows\SysWOW64\api-ms-win-crt-environment-l1-1-0.dll
2017-04-12 14:41:34 ----A---- C:\Windows\SysWOW64\api-ms-win-crt-convert-l1-1-0.dll
2017-04-12 14:41:34 ----A---- C:\Windows\SysWOW64\api-ms-win-crt-conio-l1-1-0.dll
2017-04-12 14:41:34 ----A---- C:\Windows\SysWOW64\api-ms-win-core-xstate-l2-1-0.dll
2017-04-12 14:41:34 ----A---- C:\Windows\SysWOW64\api-ms-win-core-timezone-l1-1-0.dll
2017-04-12 14:41:34 ----A---- C:\Windows\SysWOW64\api-ms-win-core-synch-l1-2-0.dll
2017-04-12 14:41:34 ----A---- C:\Windows\SysWOW64\api-ms-win-core-processthreads-l1-1-1.dll
2017-04-12 14:41:34 ----A---- C:\Windows\SysWOW64\api-ms-win-core-localization-l1-2-0.dll
2017-04-12 14:41:34 ----A---- C:\Windows\SysWOW64\api-ms-win-core-file-l2-1-0.dll
2017-04-12 14:41:32 ----A---- C:\Windows\SysWOW64\ntkrnlpa.exe
2017-04-12 14:41:31 ----A---- C:\Windows\SysWOW64\ntoskrnl.exe
2017-04-12 14:41:27 ----A---- C:\Windows\SysWOW64\ntdll.dll
2017-04-12 14:41:27 ----A---- C:\Windows\SysWOW64\asycfilt.dll
2017-04-12 14:41:26 ----A---- C:\Windows\SysWOW64\webcheck.dll
2017-04-12 14:41:26 ----A---- C:\Windows\SysWOW64\samlib.dll
2017-04-12 14:41:26 ----A---- C:\Windows\SysWOW64\msfeeds.dll
2017-04-12 14:41:26 ----A---- C:\Windows\SysWOW64\mfmjpegdec.dll
2017-04-12 14:41:26 ----A---- C:\Windows\SysWOW64\certcli.dll
2017-04-12 14:41:26 ----A---- C:\Windows\SysWOW64\cdosys.dll
2017-04-12 14:41:25 ----A---- C:\Windows\SysWOW64\wuwebv.dll
2017-04-12 14:41:25 ----A---- C:\Windows\SysWOW64\vbscript.dll
2017-04-12 14:41:25 ----A---- C:\Windows\SysWOW64\jscript.dll
2017-04-12 14:41:24 ----A---- C:\Windows\SysWOW64\wups.dll
2017-04-12 14:41:23 ----A---- C:\Windows\SysWOW64\wudriver.dll
2017-04-12 14:41:23 ----A---- C:\Windows\SysWOW64\rpcrt4.dll
2017-04-12 14:41:22 ----A---- C:\Windows\SysWOW64\ieapfltr.dll
2017-04-12 14:41:20 ----A---- C:\Windows\SysWOW64\srclient.dll
2017-04-12 14:41:20 ----A---- C:\Windows\SysWOW64\kerberos.dll
2017-04-12 14:41:20 ----A---- C:\Windows\SysWOW64\ieui.dll
2017-04-12 14:41:20 ----A---- C:\Windows\SysWOW64\advapi32.dll
2017-04-12 14:41:19 ----A---- C:\Windows\SysWOW64\wuapp.exe
2017-04-12 14:41:19 ----A---- C:\Windows\SysWOW64\sspicli.dll
2017-04-12 14:41:19 ----A---- C:\Windows\SysWOW64\schannel.dll
2017-04-12 14:41:19 ----A---- C:\Windows\SysWOW64\occache.dll
2017-04-12 14:41:19 ----A---- C:\Windows\SysWOW64\msv1_0.dll
2017-04-12 14:41:19 ----A---- C:\Windows\SysWOW64\msrating.dll
2017-04-12 14:41:19 ----A---- C:\Windows\SysWOW64\mshtmled.dll
2017-04-12 14:41:19 ----A---- C:\Windows\SysWOW64\KernelBase.dll
2017-04-12 14:41:19 ----A---- C:\Windows\SysWOW64\jsproxy.dll
2017-04-12 14:41:19 ----A---- C:\Windows\SysWOW64\jscript9diag.dll
2017-04-12 14:41:19 ----A---- C:\Windows\SysWOW64\ieUnatt.exe
2017-04-12 14:41:19 ----A---- C:\Windows\SysWOW64\ieetwproxystub.dll
2017-04-12 14:41:19 ----A---- C:\Windows\SysWOW64\dxtrans.dll
2017-04-12 14:41:19 ----A---- C:\Windows\SysWOW64\dxtmsft.dll
2017-04-12 14:41:18 ----A---- C:\Windows\SysWOW64\wdigest.dll
2017-04-12 14:41:18 ----A---- C:\Windows\SysWOW64\TSpkg.dll
2017-04-12 14:41:18 ----A---- C:\Windows\SysWOW64\rpchttp.dll
2017-04-12 14:41:18 ----A---- C:\Windows\SysWOW64\ncrypt.dll
2017-04-12 14:41:18 ----A---- C:\Windows\SysWOW64\MshtmlDac.dll
2017-04-12 14:41:18 ----A---- C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll
2017-04-12 14:41:18 ----A---- C:\Windows\SysWOW64\inseng.dll
2017-04-12 14:41:18 ----A---- C:\Windows\SysWOW64\iesetup.dll
2017-04-12 14:41:18 ----A---- C:\Windows\SysWOW64\iernonce.dll
2017-04-12 14:41:18 ----A---- C:\Windows\SysWOW64\cryptbase.dll
2017-04-12 14:41:18 ----A---- C:\Windows\SysWOW64\bcrypt.dll
2017-04-12 14:41:18 ----A---- C:\Windows\SysWOW64\appidapi.dll
2017-04-12 14:41:17 ----AH---- C:\Windows\SysWOW64\api-ms-win-core-sysinfo-l1-1-0.dll
2017-04-12 14:41:17 ----AH---- C:\Windows\SysWOW64\api-ms-win-core-synch-l1-1-0.dll
2017-04-12 14:41:17 ----A---- C:\Windows\SysWOW64\wow32.dll
2017-04-12 14:41:17 ----A---- C:\Windows\SysWOW64\secur32.dll
2017-04-12 14:41:17 ----A---- C:\Windows\SysWOW64\ntvdm64.dll
2017-04-12 14:41:17 ----A---- C:\Windows\SysWOW64\lpk.dll
2017-04-12 14:41:17 ----A---- C:\Windows\SysWOW64\kernel32.dll
2017-04-12 14:41:17 ----A---- C:\Windows\SysWOW64\fontsub.dll
2017-04-12 14:41:17 ----A---- C:\Windows\SysWOW64\dciman32.dll
2017-04-12 14:41:17 ----A---- C:\Windows\SysWOW64\credssp.dll
2017-04-12 14:41:17 ----A---- C:\Windows\SysWOW64\auditpol.exe
2017-04-12 14:41:17 ----A---- C:\Windows\SysWOW64\atmlib.dll
2017-04-12 14:41:16 ----AH---- C:\Windows\SysWOW64\api-ms-win-core-string-l1-1-0.dll
2017-04-12 14:41:16 ----AH---- C:\Windows\SysWOW64\api-ms-win-core-rtlsupport-l1-1-0.dll
2017-04-12 14:41:16 ----AH---- C:\Windows\SysWOW64\api-ms-win-core-profile-l1-1-0.dll
2017-04-12 14:41:16 ----AH---- C:\Windows\SysWOW64\api-ms-win-core-processthreads-l1-1-0.dll
2017-04-12 14:41:16 ----AH---- C:\Windows\SysWOW64\api-ms-win-core-processenvironment-l1-1-0.dll
2017-04-12 14:41:16 ----AH---- C:\Windows\SysWOW64\api-ms-win-core-namedpipe-l1-1-0.dll
2017-04-12 14:41:16 ----AH---- C:\Windows\SysWOW64\api-ms-win-core-misc-l1-1-0.dll
2017-04-12 14:41:16 ----AH---- C:\Windows\SysWOW64\api-ms-win-core-memory-l1-1-0.dll
2017-04-12 14:41:16 ----AH---- C:\Windows\SysWOW64\api-ms-win-core-localregistry-l1-1-0.dll
2017-04-12 14:41:16 ----AH---- C:\Windows\SysWOW64\api-ms-win-core-libraryloader-l1-1-0.dll
2017-04-12 14:41:15 ----AH---- C:\Windows\SysWOW64\api-ms-win-security-base-l1-1-0.dll
2017-04-12 14:41:15 ----AH---- C:\Windows\SysWOW64\api-ms-win-core-xstate-l1-1-0.dll
2017-04-12 14:41:15 ----AH---- C:\Windows\SysWOW64\api-ms-win-core-util-l1-1-0.dll
2017-04-12 14:41:15 ----AH---- C:\Windows\SysWOW64\api-ms-win-core-threadpool-l1-1-0.dll
2017-04-12 14:41:15 ----AH---- C:\Windows\SysWOW64\api-ms-win-core-localization-l1-1-0.dll
2017-04-12 14:41:15 ----AH---- C:\Windows\SysWOW64\api-ms-win-core-io-l1-1-0.dll
2017-04-12 14:41:15 ----AH---- C:\Windows\SysWOW64\api-ms-win-core-interlocked-l1-1-0.dll
2017-04-12 14:41:15 ----AH---- C:\Windows\SysWOW64\api-ms-win-core-heap-l1-1-0.dll
2017-04-12 14:41:15 ----AH---- C:\Windows\SysWOW64\api-ms-win-core-handle-l1-1-0.dll
2017-04-12 14:41:15 ----AH---- C:\Windows\SysWOW64\api-ms-win-core-file-l1-1-0.dll
2017-04-12 14:41:15 ----AH---- C:\Windows\SysWOW64\api-ms-win-core-fibers-l1-1-0.dll
2017-04-12 14:41:15 ----AH---- C:\Windows\SysWOW64\api-ms-win-core-errorhandling-l1-1-0.dll
2017-04-12 14:41:15 ----AH---- C:\Windows\SysWOW64\api-ms-win-core-delayload-l1-1-0.dll
2017-04-12 14:41:15 ----AH---- C:\Windows\SysWOW64\api-ms-win-core-debug-l1-1-0.dll
2017-04-12 14:41:15 ----AH---- C:\Windows\SysWOW64\api-ms-win-core-datetime-l1-1-0.dll
2017-04-12 14:41:15 ----AH---- C:\Windows\SysWOW64\api-ms-win-core-console-l1-1-0.dll
2017-04-12 14:41:15 ----A---- C:\Windows\SysWOW64\setup16.exe
2017-04-12 14:41:15 ----A---- C:\Windows\SysWOW64\instnm.exe
2017-04-12 14:41:15 ----A---- C:\Windows\SysWOW64\apisetschema.dll
2017-04-12 14:41:14 ----A---- C:\Windows\SysWOW64\user.exe
2017-04-12 14:41:14 ----A---- C:\Windows\SysWOW64\tzres.dll
2017-04-12 14:41:13 ----A---- C:\Windows\SysWOW64\msaudite.dll
2017-04-12 14:41:13 ----A---- C:\Windows\SysWOW64\adtschema.dll
2017-04-12 14:41:11 ----A---- C:\Windows\SysWOW64\msobjs.dll
2017-04-12 14:40:38 ----A---- C:\Windows\SysWOW64\kbdgeoqw.dll
2017-04-12 14:40:38 ----A---- C:\Windows\SysWOW64\KBDAZEL.DLL
2017-04-12 14:40:38 ----A---- C:\Windows\SysWOW64\KBDAZE.DLL
2017-04-12 13:50:36 ----A---- C:\Windows\SysWOW64\subinacl.exe
2017-04-12 13:30:06 ----D---- C:\$RECYCLE.BIN
2017-04-12 13:19:59 ----D---- C:\Qoobox
2017-04-12 13:19:36 ----D---- C:\Windows\erdnt
2017-04-12 09:37:14 ----D---- C:\ProgramData\Comodo
2017-04-12 09:21:53 ----D---- C:\Windows\pss
2017-03-20 00:48:06 ----A---- C:\Windows\SysWOW64\msvcr110_clr0400.dll
2017-03-20 00:48:06 ----A---- C:\Windows\SysWOW64\msvcr100_clr0400.dll
2017-03-20 00:48:06 ----A---- C:\Windows\SysWOW64\msvcp110_clr0400.dll
2017-03-20 00:48:06 ----A---- C:\Windows\SysWOW64\aspnet_counters.dll

======List of files/folders modified in the last 1 month======

2017-04-18 08:09:59 ----D---- C:\Windows\Prefetch
2017-04-18 08:09:38 ----D---- C:\Windows\Temp
2017-04-18 08:07:58 ----D---- C:\ProgramData\NVIDIA
2017-04-15 22:08:41 ----D---- C:\Windows\Tasks
2017-04-13 19:15:30 ----SHD---- C:\Windows\Installer
2017-04-13 19:15:30 ----D---- C:\Config.Msi
2017-04-13 19:10:31 ----RD---- C:\Program Files (x86)
2017-04-13 12:55:10 ----D---- C:\Windows
2017-04-13 12:53:17 ----D---- C:\Windows\SysWOW64
2017-04-13 12:53:17 ----D---- C:\Windows\System32
2017-04-13 12:50:08 ----RSD---- C:\Windows\Fonts
2017-04-13 12:41:40 ----SHD---- C:\System Volume Information
2017-04-13 11:08:45 ----D---- C:\ProgramData\NVIDIA Corporation
2017-04-13 11:05:47 ----D---- C:\Windows\inf
2017-04-13 11:04:29 ----D---- C:\Windows\Logs
2017-04-13 11:04:04 ----D---- C:\Program Files (x86)\NVIDIA Corporation
2017-04-13 10:58:23 ----D---- C:\ProgramData\Package Cache
2017-04-13 09:11:35 ----RD---- C:\Program Files
2017-04-13 09:11:35 ----D---- C:\ProgramData
2017-04-13 08:53:18 ----D---- C:\Windows\Microsoft.NET
2017-04-13 08:36:37 ----RSD---- C:\Windows\assembly
2017-04-12 15:12:12 ----D---- C:\Windows\SoftwareDistribution
2017-04-12 15:10:58 ----D---- C:\Windows\debug
2017-04-12 15:07:48 ----D---- C:\Windows\winsxs
2017-04-12 15:05:17 ----D---- C:\Windows\SysWOW64\en-US
2017-04-12 15:05:17 ----D---- C:\Windows\SysWOW64\cs-CZ
2017-04-12 15:05:13 ----D---- C:\Windows\AppPatch
2017-04-12 15:05:13 ----D---- C:\Program Files (x86)\Internet Explorer
2017-04-12 15:01:32 ----D---- C:\ProgramData\Microsoft Help
2017-04-12 14:57:58 ----D---- C:\Program Files (x86)\Microsoft Silverlight
2017-04-12 14:51:39 ----D---- C:\Windows\SysWOW64\RTCOM
2017-04-12 14:46:21 ----A---- C:\Windows\SysWOW64\PerfStringBackup.INI
2017-04-12 13:30:10 ----A---- C:\Windows\system.ini
2017-04-12 13:25:50 ----D---- C:\ProgramData\TEMP
2017-04-12 13:25:41 ----D---- C:\Windows\SysWOW64\drivers
2017-04-12 13:25:40 ----D---- C:\Program Files (x86)\Common Files
2017-04-12 09:33:50 ----D---- C:\ProgramData\AVAST Software
2017-04-12 09:33:41 ----D---- C:\Program Files (x86)\Common Files\AV
2017-04-12 09:17:59 ----D---- C:\Users\Lang\AppData\Roaming\DAEMON Tools Lite
2017-04-12 09:17:58 ----D---- C:\Users\Lang\AppData\Roaming\uTorrent
2017-04-12 09:16:55 ----D---- C:\Windows\Minidump
2017-04-12 09:09:34 ----D---- C:\ProgramData\Ashampoo
2017-04-12 08:47:45 ----D---- C:\Users\Lang\AppData\Roaming\IObit
2017-04-12 08:35:42 ----D---- C:\ProgramData\IObit
2017-04-12 08:30:51 ----D---- C:\ProgramData\ProductData
2017-04-01 05:20:54 ----A---- C:\Windows\SysWOW64\OpenCL.dll
2017-04-01 05:20:54 ----A---- C:\Windows\SysWOW64\nvwgf2um.dll
2017-03-19 17:19:26 ----D---- C:\Windows\SysWOW64\migration

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 edevmon;edevmon; C:\Windows\system32\DRIVERS\edevmon.sys []
R0 rdyboost;ReadyBoost; C:\Windows\System32\drivers\rdyboost.sys []
R1 eamonm;eamonm; C:\Windows\system32\DRIVERS\eamonm.sys []
R1 ehdrv;ehdrv; C:\Windows\system32\DRIVERS\ehdrv.sys []
R1 epfw;epfw; C:\Windows\system32\DRIVERS\epfw.sys []
R1 EpfwLWF;ESET Personal Firewall; C:\Windows\system32\DRIVERS\EpfwLWF.sys []
R1 epfwwfp;epfwwfp; C:\Windows\system32\DRIVERS\epfwwfp.sys []
R1 HWiNFO32;HWiNFO32/64 Kernel Driver; \??\C:\Windows\SysWOW64\drivers\HWiNFO64A.SYS [2015-06-28 26528]
R2 ekbdflt;ekbdflt; C:\Windows\system32\DRIVERS\ekbdflt.sys []
R3 AmUStor;AM USB Stroage Driver; C:\Windows\system32\drivers\AmUStor.SYS []
R3 dtlitescsibus;DAEMON Tools Lite Virtual SCSI Bus; C:\Windows\system32\DRIVERS\dtlitescsibus.sys []
R3 dtliteusbbus;DAEMON Tools Lite Virtual USB Bus; C:\Windows\system32\DRIVERS\dtliteusbbus.sys []
R3 GEARAspiWDM;GEAR ASPI Filter Driver; C:\Windows\system32\DRIVERS\GEARAspiWDM.sys []
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\Windows\system32\drivers\RTKVHD64.sys []
R3 L1C;NDIS Miniport Driver for Qualcomm Atheros AR81xx PCI-E Ethernet Controller; C:\Windows\system32\DRIVERS\L1C62x64.sys []
R3 MTsensor;ATK0110 ACPI UTILITY; C:\Windows\system32\DRIVERS\ASACPI.sys []
R3 NVHDA;Service for NVIDIA High Definition Audio Driver; C:\Windows\system32\drivers\nvhda64v.sys []
R3 nvvad_WaveExtensible;NVIDIA Virtual Audio Device (Wave Extensible) (WDM); C:\Windows\system32\drivers\nvvad64v.sys []
R3 nvvhci;NVVHCI Enumerator Service; C:\Windows\system32\DRIVERS\nvvhci.sys []
S3 aswHdsKe;aswHdsKe; \??\C:\Windows\system32\drivers\aswHdsKe.sys []
S3 BridgeMP;@%SystemRoot%\system32\bridgeres.dll,-1; C:\Windows\system32\DRIVERS\bridge.sys []
S3 dg_ssudbus;SAMSUNG Mobile USB Composite Device Driver (DEVGURU Ver.); C:\Windows\system32\DRIVERS\ssudbus.sys []
S3 Dot4;MS IEEE-1284.4 Driver; C:\Windows\system32\DRIVERS\Dot4.sys []
S3 Dot4Print;Print Class Driver for IEEE-1284.4; C:\Windows\system32\DRIVERS\Dot4Prt.sys []
S3 dot4usb;MS Dot4USB Filter Dot4USB Filter; C:\Windows\system32\DRIVERS\dot4usb.sys []
S3 fssfltr;FssFltr; C:\Windows\system32\DRIVERS\fssfltr.sys []
S3 ivusb;Initio Driver for USB Default Controller; C:\Windows\system32\DRIVERS\ivusb.sys []
S3 NvStreamKms;NVIDIA KMS; \??\C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [2017-04-01 29240]
S3 pciide;pciide; C:\Windows\system32\drivers\pciide.sys []
S3 RdpVideoMiniport;Remote Desktop Video Miniport Driver; C:\Windows\System32\drivers\rdpvideominiport.sys []
S3 ssudmdm;SAMSUNG Mobile USB Modem Drivers (DEVGURU Ver.); C:\Windows\system32\DRIVERS\ssudmdm.sys []
S3 TsUsbFlt;TsUsbFlt; C:\Windows\system32\drivers\tsusbflt.sys []
S3 TsUsbGD;Remote Desktop Generic USB Device; C:\Windows\system32\drivers\TsUsbGD.sys []
S3 USBAAPL64;Apple Mobile USB Driver; C:\Windows\System32\Drivers\usbaapl64.sys []
S3 usbscan;Ovladač skeneru USB; C:\Windows\system32\DRIVERS\usbscan.sys []
S3 WinUsb;SAMSUNG Android USB Driver; C:\Windows\system32\DRIVERS\WinUsb.sys []

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 AGSService;Adobe Genuine Software Integrity Service; C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGSService.exe [2017-02-27 2227312]
R2 Apple Mobile Device Service;Apple Mobile Device Service; C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe [2016-09-22 83768]
R2 Bonjour Service;Bonjour Service; C:\Program Files\Bonjour\mDNSResponder.exe [2015-08-12 462096]
R2 DiagTrack;@%SystemRoot%\system32\UtcResources.dll,-3001; C:\Windows\System32\svchost.exe [2009-07-14 20992]
R2 ekrn;ESET Service; C:\Program Files\ESET\ESET Security\ekrn.exe [2017-03-09 2624856]
R2 Net Driver HPZ12;Net Driver HPZ12; C:\Windows\System32\svchost.exe [2009-07-14 20992]
R2 NvContainerLocalSystem;NVIDIA LocalSystem Container; C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe [2017-04-01 464440]
R2 NVDisplay.ContainerLocalSystem;NVIDIA Display Container LS; C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe [2017-04-01 462784]
R2 NvTelemetryContainer;NVIDIA Telemetry Container; C:\Program Files (x86)\NVIDIA Corporation\NvTelemetry\NvTelemetryContainer.exe [2017-04-01 427064]
R2 Pml Driver HPZ12;Pml Driver HPZ12; C:\Windows\System32\svchost.exe [2009-07-14 20992]
R2 TeamViewer;TeamViewer 12; C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe [2017-03-17 10883824]
R2 wlidsvc;Windows Live ID Sign-in Assistant; C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE [2012-07-17 2292480]
R3 Disc Soft Lite Bus Service;Disc Soft Lite Bus Service; C:\Program Files\DAEMON Tools Lite\DiscSoftBusService.exe [2016-04-04 1443520]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2017-03-20 105096]
S2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2017-03-20 125064]
S2 gupdate;Služba Google Update (gupdate); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-08-31 144200]
S3 fsssvc;Windows Live Family Safety Service; C:\Program Files (x86)\Windows Live\Family Safety\fsssvc.exe [2014-03-31 1512640]
S3 gupdatem;Služba Google Update (gupdatem); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-08-31 144200]
S3 IEEtwCollectorService;@%SystemRoot%\system32\ieetwcollectorres.dll,-1000; C:\Windows\system32\IEEtwCollector.exe /V []
S3 Microsoft Office Groove Audit Service;Microsoft Office Groove Audit Service; C:\Program Files (x86)\Microsoft Office\Office12\GrooveAuditService.exe [2009-02-26 64856]
S3 NvContainerNetworkService;NVIDIA NetworkService Container; C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe [2017-04-01 464440]
S3 odserv;Microsoft Office Diagnostics Service; C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE [2011-07-20 440696]
S3 ose;Office Source Engine; C:\Program Files (x86)\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2006-10-26 145184]
S3 SwitchBoard;SwitchBoard; C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [2010-02-19 517096]
S3 WatAdminSvc;@%SystemRoot%\system32\Wat\WatUX.exe,-601; C:\Windows\system32\Wat\WatAdminSvc.exe []
S4 aspnet_state;Stavová služba ASP.NET; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\aspnet_state.exe [2017-03-20 51320]
S4 NetMsmqActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8195; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2017-03-20 135800]
S4 NetPipeActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8197; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2017-03-20 135800]
S4 NetTcpActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8199; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2017-03-20 135800]

-----------------EOF-----------------
Nahoru
Uživatelský avatar
Rudy
Site Admin
Site Admin
Příspěvky: 119495
Registrován: 30 říj 2003 13:42
Bydliště: Plzeň
Kontaktovat uživatele:
Kontaktovat uživatele Rudy

Re: Kontrola logu po čístění

#4 Příspěvek od Rudy »

Smazáno. Log je již OK.
Dotazy a logy vkládejte pouze do vašich threadů. Soukromé zprávy, icq a e-maily neslouží k řešení vašich problémů.

Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.

Navštivte: Obrázek

e-mail: rudy(zavináč)forum.viry.cz

Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!


Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Nahoru
ekki
Návštěvník
Návštěvník
Příspěvky: 13
Registrován: 04 dub 2017 14:54

Re: Kontrola logu po čístění

#5 Příspěvek od ekki »

Děkuji mnohokrát!
Nahoru
Uživatelský avatar
Rudy
Site Admin
Site Admin
Příspěvky: 119495
Registrován: 30 říj 2003 13:42
Bydliště: Plzeň
Kontaktovat uživatele:
Kontaktovat uživatele Rudy

Re: Kontrola logu po čístění

#6 Příspěvek od Rudy »

Nemáte zač! :)
Dotazy a logy vkládejte pouze do vašich threadů. Soukromé zprávy, icq a e-maily neslouží k řešení vašich problémů.

Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.

Navštivte: Obrázek

e-mail: rudy(zavináč)forum.viry.cz

Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!


Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Nahoru
Odpovědět

Zpět na „Řešení problémů, logy“