Zdravím, nepravidelně vypadává net, FF nebo IE přes port 80 nebo 443 se snaží navázat na řadu Ip adres, což vede k nárůstu pingu až k výpadku. Antivir žádný problém nehlásí.
Logfile of random's system information tool 1.08 (written by random/random)
Run by Mirek at 2011-05-26 20:58:40
Microsoft Windows 7 Ultimate
System drive C: has 4 GB (18%) free of 20 GB
Total RAM: 4094 MB (64% free)
Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 20:58:54, on 26.5.2011
Platform: Windows 7 (WinNT 6.00.3504)
MSIE: Internet Explorer v9.00 (9.00.8112.16421)
Boot mode: Normal
Running processes:
C:\Users\Mirek\Desktop\Tcpview.exe
F:\Program Files (x86)\Mozilla Firefox\firefox.exe
F:\Program Files (x86)\Mozilla Firefox\plugin-container.exe
C:\Program Files\trend micro\Mirek.exe
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
O23 - Service: AMD External Events Utility - Unknown owner - C:\Windows\system32\atiesrxx.exe (file missing)
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)
O23 - Service: ESET HTTP Server (EhttpSrv) - ESET - F:\Program Files\ESET\ESET Smart Security\EHttpSrv.exe
O23 - Service: ESET Service (ekrn) - ESET - F:\Program Files\ESET\ESET Smart Security\x86\ekrn.exe
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\Wat\WatUX.exe,-601 (WatAdminSvc) - Unknown owner - C:\Windows\system32\Wat\WatAdminSvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)
--
End of file - 3353 bytes
======Listing Processes======
\SystemRoot\System32\smss.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
wininit.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
C:\Windows\system32\services.exe
winlogon.exe
C:\Windows\system32\lsass.exe
C:\Windows\system32\lsm.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Windows\system32\svchost.exe -k RPCSS
C:\Windows\system32\atiesrxx.exe
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k netsvcs
C:\Windows\system32\svchost.exe -k LocalService
C:\Windows\system32\svchost.exe -k NetworkService
atieclxx
"taskhost.exe"
"C:\Windows\system32\Dwm.exe"
C:\Windows\System32\spoolsv.exe
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
C:\Windows\Explorer.EXE
"F:\Program Files\ESET\ESET Smart Security\x86\ekrn.exe"
C:\Windows\system32\svchost.exe -k NetworkServiceNetworkRestricted
"F:\Program Files\ESET\ESET Smart Security\egui.exe" /hide /waitservice
C:\Windows\system32\SearchIndexer.exe /Embedding
"C:\Program Files\Windows Media Player\wmpnetwk.exe"
C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
C:\Windows\System32\svchost.exe -k secsvcs
"C:\Windows\system32\wuauclt.exe"
"C:\Users\Mirek\Desktop\Tcpview.exe"
"C:\Windows\system32\ping.exe" seznam.cz /t
\??\C:\Windows\system32\conhost.exe
"F:\Program Files (x86)\Mozilla Firefox\firefox.exe"
"F:\Program Files (x86)\Mozilla Firefox\plugin-container.exe" --channel=1640.fbda240.1353136536 "C:\Windows\SysWOW64\Macromed\Flash\NPSWF32.dll" "Mozilla.Firefox.4.0.1" -omnijar F:\Program Files (x86)\Mozilla Firefox\omni.jar 1640 \\.\pipe\gecko-crash-server-pipe.1640 plugin
C:\Windows\servicing\TrustedInstaller.exe
"C:\Users\Mirek\Desktop\RSITx64.exe"
C:\Windows\system32\wbem\wmiprvse.exe
C:\Windows\System32\svchost.exe -k WerSvcGroup
======Registry dump======
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"egui"=F:\Program Files\ESET\ESET Smart Security\egui.exe [2011-01-12 2918656]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - C:\Windows\system32\webcheck.dll [2011-05-25 249344]
[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=credssp.dll
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorAdmin"=5
"ConsentPromptBehaviorUser"=3
"EnableUIADesktopToggle"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDrives"=0
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDrives"=0
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
======File associations======
.js - edit - C:\Windows\System32\Notepad.exe %1
======List of files/folders created in the last 1 months======
2011-05-26 20:35:40 ----SHD---- C:\$RECYCLE.BIN
2011-05-26 20:31:42 ----D---- C:\Windows\temp
2011-05-25 23:27:28 ----D---- C:\Users\Mirek\AppData\Roaming\Malwarebytes
2011-05-25 23:27:22 ----D---- C:\ProgramData\Malwarebytes
2011-05-25 23:27:22 ----A---- C:\Windows\SYSWOW64\drivers\mbamswissarmy.sys
2011-05-25 23:27:19 ----A---- C:\Windows\system32\drivers\mbam.sys
2011-05-25 22:53:55 ----D---- C:\rsit
2011-05-25 22:45:13 ----A---- C:\Windows\zip.exe
2011-05-25 22:45:13 ----A---- C:\Windows\SWSC.exe
2011-05-25 22:45:13 ----A---- C:\Windows\SWREG.exe
2011-05-25 22:45:13 ----A---- C:\Windows\sed.exe
2011-05-25 22:45:13 ----A---- C:\Windows\PEV.exe
2011-05-25 22:45:13 ----A---- C:\Windows\NIRCMD.exe
2011-05-25 22:45:13 ----A---- C:\Windows\MBR.exe
2011-05-25 22:45:13 ----A---- C:\Windows\grep.exe
2011-05-25 22:44:17 ----D---- C:\Windows\ERDNT
2011-05-25 22:39:43 ----A---- C:\Windows\ntbtlog.txt
2011-05-25 21:45:38 ----D---- C:\Program Files\Defraggler
2011-05-25 21:27:25 ----D---- C:\Program Files\trend micro
2011-05-25 21:23:20 ----D---- C:\Users\Mirek\AppData\Roaming\Macromedia
2011-05-25 21:23:20 ----D---- C:\Users\Mirek\AppData\Roaming\Adobe
2011-05-25 21:23:11 ----D---- C:\Windows\SYSWOW64\Macromed
2011-05-25 20:48:58 ----D---- C:\Windows\SYSWOW64\cs
2011-05-25 20:48:55 ----D---- C:\Windows\SYSWOW64\XPSViewer
2011-05-25 20:48:55 ----D---- C:\Windows\SYSWOW64\drivers\cs-CZ
2011-05-25 20:48:55 ----D---- C:\Windows\cs-CZ
2011-05-25 20:48:54 ----D---- C:\Windows\system32\cs
2011-05-25 20:48:48 ----D---- C:\Windows\system32\drivers\cs-CZ
2011-05-25 20:33:35 ----D---- C:\Program Files\Common Files\ATI Technologies
2011-05-25 20:33:08 ----D---- C:\Program Files\ATI
2011-05-25 20:31:42 ----D---- C:\ATI
2011-05-25 20:23:41 ----A---- C:\Windows\SYSWOW64\wininet.dll
2011-05-25 20:23:41 ----A---- C:\Windows\SYSWOW64\wextract.exe
2011-05-25 20:23:41 ----A---- C:\Windows\SYSWOW64\webcheck.dll
2011-05-25 20:23:41 ----A---- C:\Windows\SYSWOW64\vbscript.dll
2011-05-25 20:23:41 ----A---- C:\Windows\SYSWOW64\urlmon.dll
2011-05-25 20:23:41 ----A---- C:\Windows\SYSWOW64\url.dll
2011-05-25 20:23:41 ----A---- C:\Windows\SYSWOW64\SetIEInstalledDate.exe
2011-05-25 20:23:41 ----A---- C:\Windows\SYSWOW64\RegisterIEPKEYs.exe
2011-05-25 20:23:41 ----A---- C:\Windows\SYSWOW64\pngfilt.dll
2011-05-25 20:23:41 ----A---- C:\Windows\SYSWOW64\occache.dll
2011-05-25 20:23:41 ----A---- C:\Windows\SYSWOW64\msrating.dll
2011-05-25 20:23:41 ----A---- C:\Windows\SYSWOW64\msls31.dll
2011-05-25 20:23:41 ----A---- C:\Windows\SYSWOW64\mshtmler.dll
2011-05-25 20:23:41 ----A---- C:\Windows\SYSWOW64\mshtmled.dll
2011-05-25 20:23:41 ----A---- C:\Windows\SYSWOW64\mshtml.dll
2011-05-25 20:23:41 ----A---- C:\Windows\SYSWOW64\mshta.exe
2011-05-25 20:23:41 ----A---- C:\Windows\SYSWOW64\msfeedssync.exe
2011-05-25 20:23:41 ----A---- C:\Windows\SYSWOW64\msfeedsbs.dll
2011-05-25 20:23:41 ----A---- C:\Windows\SYSWOW64\msfeeds.dll
2011-05-25 20:23:41 ----A---- C:\Windows\SYSWOW64\licmgr10.dll
2011-05-25 20:23:41 ----A---- C:\Windows\SYSWOW64\jsproxy.dll
2011-05-25 20:23:41 ----A---- C:\Windows\SYSWOW64\jscript9.dll
2011-05-25 20:23:41 ----A---- C:\Windows\SYSWOW64\jscript.dll
2011-05-25 20:23:41 ----A---- C:\Windows\SYSWOW64\inseng.dll
2011-05-25 20:23:41 ----A---- C:\Windows\SYSWOW64\imgutil.dll
2011-05-25 20:23:41 ----A---- C:\Windows\SYSWOW64\iexpress.exe
2011-05-25 20:23:41 ----A---- C:\Windows\SYSWOW64\ieUnatt.exe
2011-05-25 20:23:41 ----A---- C:\Windows\SYSWOW64\ieui.dll
2011-05-25 20:23:41 ----A---- C:\Windows\SYSWOW64\iesysprep.dll
2011-05-25 20:23:41 ----A---- C:\Windows\SYSWOW64\iesetup.dll
2011-05-25 20:23:41 ----A---- C:\Windows\SYSWOW64\iertutil.dll
2011-05-25 20:23:41 ----A---- C:\Windows\SYSWOW64\iernonce.dll
2011-05-25 20:23:41 ----A---- C:\Windows\SYSWOW64\iepeers.dll
2011-05-25 20:23:41 ----A---- C:\Windows\SYSWOW64\ieframe.dll
2011-05-25 20:23:41 ----A---- C:\Windows\SYSWOW64\iedkcs32.dll
2011-05-25 20:23:41 ----A---- C:\Windows\SYSWOW64\ieapfltr.dll
2011-05-25 20:23:41 ----A---- C:\Windows\SYSWOW64\ieakui.dll
2011-05-25 20:23:41 ----A---- C:\Windows\SYSWOW64\ieaksie.dll
2011-05-25 20:23:41 ----A---- C:\Windows\SYSWOW64\ieakeng.dll
2011-05-25 20:23:41 ----A---- C:\Windows\SYSWOW64\IEAdvpack.dll
2011-05-25 20:23:41 ----A---- C:\Windows\SYSWOW64\ie4uinit.exe
2011-05-25 20:23:41 ----A---- C:\Windows\SYSWOW64\icardie.dll
2011-05-25 20:23:41 ----A---- C:\Windows\SYSWOW64\dxtrans.dll
2011-05-25 20:23:41 ----A---- C:\Windows\SYSWOW64\dxtmsft.dll
2011-05-25 20:23:41 ----A---- C:\Windows\SYSWOW64\admparse.dll
2011-05-25 20:23:41 ----A---- C:\Windows\system32\wininet.dll
2011-05-25 20:23:41 ----A---- C:\Windows\system32\wextract.exe
2011-05-25 20:23:41 ----A---- C:\Windows\system32\webcheck.dll
2011-05-25 20:23:41 ----A---- C:\Windows\system32\vbscript.dll
2011-05-25 20:23:41 ----A---- C:\Windows\system32\urlmon.dll
2011-05-25 20:23:41 ----A---- C:\Windows\system32\url.dll
2011-05-25 20:23:41 ----A---- C:\Windows\system32\SetIEInstalledDate.exe
2011-05-25 20:23:41 ----A---- C:\Windows\system32\RegisterIEPKEYs.exe
2011-05-25 20:23:41 ----A---- C:\Windows\system32\pngfilt.dll
2011-05-25 20:23:41 ----A---- C:\Windows\system32\occache.dll
2011-05-25 20:23:41 ----A---- C:\Windows\system32\msrating.dll
2011-05-25 20:23:41 ----A---- C:\Windows\system32\msls31.dll
2011-05-25 20:23:41 ----A---- C:\Windows\system32\mshtmler.dll
2011-05-25 20:23:41 ----A---- C:\Windows\system32\mshtmled.dll
2011-05-25 20:23:41 ----A---- C:\Windows\system32\mshtml.dll
2011-05-25 20:23:41 ----A---- C:\Windows\system32\mshta.exe
2011-05-25 20:23:41 ----A---- C:\Windows\system32\msfeedssync.exe
2011-05-25 20:23:41 ----A---- C:\Windows\system32\msfeedsbs.dll
2011-05-25 20:23:41 ----A---- C:\Windows\system32\msfeeds.dll
2011-05-25 20:23:41 ----A---- C:\Windows\system32\licmgr10.dll
2011-05-25 20:23:41 ----A---- C:\Windows\system32\jsproxy.dll
2011-05-25 20:23:41 ----A---- C:\Windows\system32\jscript9.dll
2011-05-25 20:23:41 ----A---- C:\Windows\system32\jscript.dll
2011-05-25 20:23:41 ----A---- C:\Windows\system32\inseng.dll
2011-05-25 20:23:41 ----A---- C:\Windows\system32\imgutil.dll
2011-05-25 20:23:41 ----A---- C:\Windows\system32\iexpress.exe
2011-05-25 20:23:41 ----A---- C:\Windows\system32\ieUnatt.exe
2011-05-25 20:23:41 ----A---- C:\Windows\system32\ieui.dll
2011-05-25 20:23:41 ----A---- C:\Windows\system32\iesysprep.dll
2011-05-25 20:23:41 ----A---- C:\Windows\system32\iesetup.dll
2011-05-25 20:23:41 ----A---- C:\Windows\system32\iertutil.dll
2011-05-25 20:23:41 ----A---- C:\Windows\system32\iernonce.dll
2011-05-25 20:23:41 ----A---- C:\Windows\system32\iepeers.dll
2011-05-25 20:23:41 ----A---- C:\Windows\system32\ieframe.dll
2011-05-25 20:23:41 ----A---- C:\Windows\system32\iedkcs32.dll
2011-05-25 20:23:41 ----A---- C:\Windows\system32\ieapfltr.dll
2011-05-25 20:23:41 ----A---- C:\Windows\system32\ieakui.dll
2011-05-25 20:23:41 ----A---- C:\Windows\system32\ieaksie.dll
2011-05-25 20:23:41 ----A---- C:\Windows\system32\ieakeng.dll
2011-05-25 20:23:41 ----A---- C:\Windows\system32\IEAdvpack.dll
2011-05-25 20:23:41 ----A---- C:\Windows\system32\ie4uinit.exe
2011-05-25 20:23:41 ----A---- C:\Windows\system32\icardie.dll
2011-05-25 20:23:41 ----A---- C:\Windows\system32\dxtrans.dll
2011-05-25 20:23:41 ----A---- C:\Windows\system32\dxtmsft.dll
2011-05-25 20:23:41 ----A---- C:\Windows\system32\admparse.dll
2011-05-25 20:20:39 ----A---- C:\Windows\SYSWOW64\XpsRasterService.dll
2011-05-25 20:20:39 ----A---- C:\Windows\SYSWOW64\XpsPrint.dll
2011-05-25 20:20:39 ----A---- C:\Windows\SYSWOW64\XpsGdiConverter.dll
2011-05-25 20:20:39 ----A---- C:\Windows\SYSWOW64\WMVDECOD.DLL
2011-05-25 20:20:39 ----A---- C:\Windows\SYSWOW64\mfreadwrite.dll
2011-05-25 20:20:39 ----A---- C:\Windows\SYSWOW64\mf.dll
2011-05-25 20:20:39 ----A---- C:\Windows\SYSWOW64\ExplorerFrame.dll
2011-05-25 20:20:39 ----A---- C:\Windows\SYSWOW64\DWrite.dll
2011-05-25 20:20:39 ----A---- C:\Windows\SYSWOW64\d3d10warp.dll
2011-05-25 20:20:39 ----A---- C:\Windows\SYSWOW64\d3d10_1core.dll
2011-05-25 20:20:39 ----A---- C:\Windows\SYSWOW64\d3d10_1.dll
2011-05-25 20:20:39 ----A---- C:\Windows\SYSWOW64\d2d1.dll
2011-05-25 20:20:39 ----A---- C:\Windows\system32\XpsRasterService.dll
2011-05-25 20:20:39 ----A---- C:\Windows\system32\XpsPrint.dll
2011-05-25 20:20:39 ----A---- C:\Windows\system32\XpsGdiConverter.dll
2011-05-25 20:20:39 ----A---- C:\Windows\system32\WMVDECOD.DLL
2011-05-25 20:20:39 ----A---- C:\Windows\system32\mfreadwrite.dll
2011-05-25 20:20:39 ----A---- C:\Windows\system32\mfps.dll
2011-05-25 20:20:39 ----A---- C:\Windows\system32\mf.dll
2011-05-25 20:20:39 ----A---- C:\Windows\system32\FntCache.dll
2011-05-25 20:20:39 ----A---- C:\Windows\system32\ExplorerFrame.dll
2011-05-25 20:20:39 ----A---- C:\Windows\system32\DWrite.dll
2011-05-25 20:20:39 ----A---- C:\Windows\system32\drivers\dxgmms1.sys
2011-05-25 20:20:39 ----A---- C:\Windows\system32\drivers\dxgkrnl.sys
2011-05-25 20:20:39 ----A---- C:\Windows\system32\d3d10warp.dll
2011-05-25 20:20:39 ----A---- C:\Windows\system32\d3d10_1core.dll
2011-05-25 20:20:39 ----A---- C:\Windows\system32\d3d10_1.dll
2011-05-25 20:20:39 ----A---- C:\Windows\system32\d2d1.dll
2011-05-25 20:20:39 ----A---- C:\Windows\system32\cdd.dll
2011-05-25 20:16:28 ----D---- C:\Windows\SYSWOW64\Wat
2011-05-25 20:16:28 ----D---- C:\Windows\system32\Wat
2011-05-25 20:11:18 ----A---- C:\Windows\SYSWOW64\poqexec.exe
2011-05-25 20:11:18 ----A---- C:\Windows\system32\poqexec.exe
2011-05-25 19:12:17 ----A---- C:\Windows\SYSWOW64\PresentationHostProxy.dll
2011-05-25 19:12:17 ----A---- C:\Windows\SYSWOW64\PresentationHost.exe
2011-05-25 19:12:17 ----A---- C:\Windows\SYSWOW64\netfxperf.dll
2011-05-25 19:12:17 ----A---- C:\Windows\SYSWOW64\mscoree.dll
2011-05-25 19:12:17 ----A---- C:\Windows\SYSWOW64\dfshim.dll
2011-05-25 19:12:17 ----A---- C:\Windows\system32\PresentationHostProxy.dll
2011-05-25 19:12:17 ----A---- C:\Windows\system32\PresentationHost.exe
2011-05-25 19:12:17 ----A---- C:\Windows\system32\netfxperf.dll
2011-05-25 19:12:17 ----A---- C:\Windows\system32\mscoree.dll
2011-05-25 19:12:17 ----A---- C:\Windows\system32\dfshim.dll
2011-05-25 19:11:59 ----A---- C:\Windows\system32\browserchoice.exe
2011-05-25 19:08:21 ----A---- C:\Windows\system32\drivers\srvnet.sys
2011-05-25 19:08:21 ----A---- C:\Windows\system32\drivers\srv2.sys
2011-05-25 19:08:21 ----A---- C:\Windows\system32\drivers\srv.sys
2011-05-25 19:08:06 ----A---- C:\Windows\system32\shell32.dll
2011-05-25 19:08:04 ----A---- C:\Windows\SYSWOW64\shell32.dll
2011-05-25 19:06:07 ----A---- C:\Windows\system32\ntdll.dll
2011-05-25 19:06:06 ----A---- C:\Windows\SYSWOW64\ntdll.dll
2011-05-25 19:05:48 ----A---- C:\Windows\SYSWOW64\secur32.dll
2011-05-25 19:05:48 ----A---- C:\Windows\system32\lsasrv.dll
2011-05-25 19:05:48 ----A---- C:\Windows\system32\drivers\ksecpkg.sys
2011-05-25 19:05:47 ----A---- C:\Windows\SYSWOW64\sspicli.dll
2011-05-25 19:05:27 ----A---- C:\Windows\system32\ntoskrnl.exe
2011-05-25 19:05:25 ----A---- C:\Windows\SYSWOW64\ntkrnlpa.exe
2011-05-25 19:05:24 ----A---- C:\Windows\SYSWOW64\ntoskrnl.exe
2011-05-25 19:05:20 ----A---- C:\Windows\SYSWOW64\odbc32.dll
2011-05-25 19:05:20 ----A---- C:\Windows\system32\odbc32.dll
2011-05-25 19:05:18 ----A---- C:\Windows\SYSWOW64\taskschd.dll
2011-05-25 19:05:18 ----A---- C:\Windows\SYSWOW64\taskeng.exe
2011-05-25 19:05:18 ----A---- C:\Windows\SYSWOW64\taskcomp.dll
2011-05-25 19:05:18 ----A---- C:\Windows\SYSWOW64\schtasks.exe
2011-05-25 19:05:18 ----A---- C:\Windows\system32\wmicmiplugin.dll
2011-05-25 19:05:18 ----A---- C:\Windows\system32\taskschd.dll
2011-05-25 19:05:18 ----A---- C:\Windows\system32\taskeng.exe
2011-05-25 19:05:18 ----A---- C:\Windows\system32\taskcomp.dll
2011-05-25 19:05:18 ----A---- C:\Windows\system32\schtasks.exe
2011-05-25 19:05:18 ----A---- C:\Windows\system32\schedsvc.dll
2011-05-25 19:05:16 ----A---- C:\Windows\SYSWOW64\CPFilters.dll
2011-05-25 19:05:16 ----A---- C:\Windows\system32\EncDec.dll
2011-05-25 19:05:16 ----A---- C:\Windows\system32\CPFilters.dll
2011-05-25 19:05:15 ----A---- C:\Windows\SYSWOW64\sbe.dll
2011-05-25 19:05:15 ----A---- C:\Windows\SYSWOW64\EncDec.dll
2011-05-25 19:05:15 ----A---- C:\Windows\system32\sbe.dll
2011-05-25 19:04:36 ----A---- C:\Windows\system32\wmp.dll
2011-05-25 19:04:34 ----A---- C:\Windows\SYSWOW64\wmp.dll
2011-05-25 19:04:33 ----A---- C:\Windows\SYSWOW64\wmploc.DLL
2011-05-25 19:04:33 ----A---- C:\Windows\system32\wmploc.DLL
2011-05-25 19:04:06 ----A---- C:\Windows\system32\win32k.sys
2011-05-25 19:04:04 ----A---- C:\Windows\SYSWOW64\sscore.dll
2011-05-25 19:04:04 ----A---- C:\Windows\system32\srvsvc.dll
2011-05-25 19:04:03 ----A---- C:\Windows\system32\quartz.dll
2011-05-25 19:04:02 ----A---- C:\Windows\SYSWOW64\tsbyuv.dll
2011-05-25 19:04:02 ----A---- C:\Windows\SYSWOW64\quartz.dll
2011-05-25 19:04:02 ----A---- C:\Windows\SYSWOW64\msyuv.dll
2011-05-25 19:04:02 ----A---- C:\Windows\SYSWOW64\msvidc32.dll
2011-05-25 19:04:02 ----A---- C:\Windows\SYSWOW64\msrle32.dll
2011-05-25 19:04:02 ----A---- C:\Windows\SYSWOW64\mciavi32.dll
2011-05-25 19:04:02 ----A---- C:\Windows\SYSWOW64\iyuv_32.dll
2011-05-25 19:04:02 ----A---- C:\Windows\SYSWOW64\avifil32.dll
2011-05-25 19:04:02 ----A---- C:\Windows\system32\tsbyuv.dll
2011-05-25 19:04:02 ----A---- C:\Windows\system32\msyuv.dll
2011-05-25 19:04:02 ----A---- C:\Windows\system32\msvidc32.dll
2011-05-25 19:04:02 ----A---- C:\Windows\system32\msrle32.dll
2011-05-25 19:04:02 ----A---- C:\Windows\system32\mfc42u.dll
2011-05-25 19:04:02 ----A---- C:\Windows\system32\iyuv_32.dll
2011-05-25 19:04:01 ----A---- C:\Windows\SYSWOW64\mfc42.dll
2011-05-25 19:04:01 ----A---- C:\Windows\system32\mfc42.dll
2011-05-25 19:04:00 ----A---- C:\Windows\SYSWOW64\mfc42u.dll
2011-05-25 19:03:59 ----A---- C:\Windows\system32\winresume.exe
2011-05-25 19:03:59 ----A---- C:\Windows\system32\winload.exe
2011-05-25 19:03:59 ----A---- C:\Windows\system32\kdusb.dll
2011-05-25 19:03:59 ----A---- C:\Windows\system32\kdcom.dll
2011-05-25 19:03:59 ----A---- C:\Windows\system32\kd1394.dll
2011-05-25 19:03:58 ----A---- C:\Windows\SYSWOW64\explorer.exe
2011-05-25 19:03:58 ----A---- C:\Windows\system32\winlogon.exe
2011-05-25 19:03:58 ----A---- C:\Windows\explorer.exe
2011-05-25 19:03:57 ----A---- C:\Windows\SYSWOW64\kerberos.dll
2011-05-25 19:03:57 ----A---- C:\Windows\system32\kerberos.dll
2011-05-25 19:03:46 ----A---- C:\Windows\system32\drivers\tcpip.sys
2011-05-25 19:03:45 ----A---- C:\Windows\SYSWOW64\mstscax.dll
2011-05-25 19:03:45 ----A---- C:\Windows\system32\mstscax.dll
2011-05-25 19:03:44 ----A---- C:\Windows\SYSWOW64\mstsc.exe
2011-05-25 19:03:44 ----A---- C:\Windows\system32\mstsc.exe
2011-05-25 19:03:40 ----A---- C:\Windows\SYSWOW64\tzres.dll
2011-05-25 19:03:40 ----A---- C:\Windows\system32\tzres.dll
2011-05-25 19:03:20 ----A---- C:\Windows\SYSWOW64\dnscacheugc.exe
2011-05-25 19:03:20 ----A---- C:\Windows\SYSWOW64\dnsapi.dll
2011-05-25 19:03:20 ----A---- C:\Windows\system32\dnsrslvr.dll
2011-05-25 19:03:20 ----A---- C:\Windows\system32\dnscacheugc.exe
2011-05-25 19:03:20 ----A---- C:\Windows\system32\dnsapi.dll
2011-05-25 19:03:17 ----A---- C:\Windows\system32\ole32.dll
2011-05-25 19:03:16 ----A---- C:\Windows\SYSWOW64\ole32.dll
2011-05-25 19:03:16 ----A---- C:\Windows\SYSWOW64\atmfd.dll
2011-05-25 19:03:16 ----A---- C:\Windows\system32\atmfd.dll
2011-05-25 19:03:15 ----A---- C:\Windows\SYSWOW64\fontsub.dll
2011-05-25 19:03:15 ----A---- C:\Windows\SYSWOW64\atmlib.dll
2011-05-25 19:03:15 ----A---- C:\Windows\system32\fontsub.dll
2011-05-25 19:03:15 ----A---- C:\Windows\system32\atmlib.dll
2011-05-25 19:03:14 ----A---- C:\Windows\SYSWOW64\schannel.dll
2011-05-25 19:03:14 ----A---- C:\Windows\system32\schannel.dll
2011-05-25 19:03:14 ----A---- C:\Windows\system32\inetcomm.dll
2011-05-25 19:03:13 ----A---- C:\Windows\SYSWOW64\webio.dll
2011-05-25 19:03:13 ----A---- C:\Windows\SYSWOW64\inetcomm.dll
2011-05-25 19:03:13 ----A---- C:\Windows\system32\webio.dll
2011-05-25 19:03:12 ----A---- C:\Windows\SYSWOW64\msxml3.dll
2011-05-25 19:03:12 ----A---- C:\Windows\system32\msxml3.dll
2011-05-25 19:03:11 ----A---- C:\Windows\SYSWOW64\wmpmde.dll
2011-05-25 19:03:11 ----A---- C:\Windows\system32\wmpmde.dll
2011-05-25 19:03:11 ----A---- C:\Windows\system32\drivers\mrxsmb10.sys
2011-05-25 19:03:10 ----A---- C:\Windows\system32\wintrust.dll
2011-05-25 19:03:10 ----A---- C:\Windows\system32\FXSCOVER.exe
2011-05-25 19:03:10 ----A---- C:\Windows\system32\drivers\mrxsmb20.sys
2011-05-25 19:03:10 ----A---- C:\Windows\system32\drivers\mrxsmb.sys
2011-05-25 19:03:10 ----A---- C:\Windows\system32\drivers\bowser.sys
2011-05-25 19:03:09 ----A---- C:\Windows\SYSWOW64\wintrust.dll
2011-05-25 19:03:08 ----A---- C:\Windows\SYSWOW64\StructuredQuery.dll
2011-05-25 19:03:08 ----A---- C:\Windows\SYSWOW64\cabview.dll
2011-05-25 19:03:08 ----A---- C:\Windows\system32\StructuredQuery.dll
2011-05-25 19:03:08 ----A---- C:\Windows\system32\cabview.dll
2011-05-25 19:03:07 ----A---- C:\Windows\SYSWOW64\t2embed.dll
2011-05-25 19:03:07 ----A---- C:\Windows\system32\t2embed.dll
2011-05-25 19:03:07 ----A---- C:\Windows\system32\comctl32.dll
2011-05-25 19:03:06 ----A---- C:\Windows\SYSWOW64\comctl32.dll
2011-05-25 19:03:05 ----A---- C:\Windows\SYSWOW64\rtutils.dll
2011-05-25 19:03:05 ----A---- C:\Windows\SYSWOW64\asycfilt.dll
2011-05-25 19:03:05 ----A---- C:\Windows\system32\rtutils.dll
2011-05-25 19:03:05 ----A---- C:\Windows\system32\consent.exe
2011-05-25 19:03:05 ----A---- C:\Windows\system32\asycfilt.dll
2011-05-25 19:03:04 ----A---- C:\Windows\SYSWOW64\iccvid.dll
2011-05-25 19:03:03 ----A---- C:\Windows\system32\spoolsv.exe
2011-05-25 19:02:32 ----A---- C:\Windows\SYSWOW64\mfc40u.dll
2011-05-25 19:02:32 ----A---- C:\Windows\SYSWOW64\mfc40.dll
2011-05-25 18:40:34 ----D---- C:\Users\Mirek\AppData\Roaming\ESET
2011-05-25 18:39:56 ----D---- C:\ProgramData\ESET
2011-05-25 18:38:09 ----SHD---- C:\Windows\Installer
2011-05-25 18:28:23 ----D---- C:\Users\Mirek\AppData\Roaming\Mozilla
2011-05-25 07:35:32 ----RASH---- C:\BOOTSECT.BAK
2011-05-25 07:35:30 ----D---- C:\Boot
2011-05-25 07:14:30 ----D---- C:\Temp
2011-05-25 06:39:26 ----D---- C:\Windows\SoftwareDistribution
2011-05-25 06:37:13 ----SHD---- C:\System Volume Information
2011-05-25 06:37:09 ----D---- C:\Windows\CSC
2011-05-25 06:36:36 ----ASH---- C:\hiberfil.sys
2011-05-24 21:45:58 ----D---- C:\Users\Mirek\AppData\Roaming\Identities
2011-05-24 21:45:36 ----SD---- C:\Users\Mirek\AppData\Roaming\Microsoft
2011-05-24 21:45:36 ----D---- C:\Users\Mirek\AppData\Roaming\Media Center Programs
2011-05-24 21:42:36 ----SHD---- C:\ProgramData\Templates
2011-05-24 21:42:36 ----SHD---- C:\ProgramData\Start Menu
2011-05-24 21:42:36 ----SHD---- C:\ProgramData\Favorites
2011-05-24 21:42:36 ----SHD---- C:\ProgramData\Documents
2011-05-24 21:42:36 ----SHD---- C:\ProgramData\Desktop
2011-05-24 21:42:36 ----SHD---- C:\ProgramData\Application Data
2011-05-24 21:42:36 ----SHD---- C:\Documents and Settings
2011-05-24 21:42:36 ----D---- C:\Recovery
======List of files/folders modified in the last 1 months======
2011-05-26 20:55:14 ----D---- C:\Windows\system32\config
2011-05-26 20:39:56 ----D---- C:\Windows\System32
2011-05-26 20:39:55 ----D---- C:\Windows\inf
2011-05-26 20:39:55 ----A---- C:\Windows\system32\PerfStringBackup.INI
2011-05-26 20:31:42 ----D---- C:\Windows\system32\drivers
2011-05-26 20:31:42 ----D---- C:\Windows
2011-05-26 20:30:24 ----A---- C:\Windows\system.ini
2011-05-26 20:29:18 ----D---- C:\Windows\SYSWOW64\drivers
2011-05-26 20:29:18 ----D---- C:\Windows\SysWOW64
2011-05-26 20:29:18 ----D---- C:\Windows\AppPatch
2011-05-26 20:29:16 ----D---- C:\Program Files\Common Files
2011-05-26 20:29:16 ----D---- C:\Program Files (x86)\Common Files
2011-05-25 23:27:22 ----D---- C:\ProgramData
2011-05-25 21:45:38 ----RD---- C:\Program Files
2011-05-25 21:11:04 ----D---- C:\Windows\winsxs
2011-05-25 21:11:00 ----D---- C:\Windows\SYSWOW64\cs-CZ
2011-05-25 21:11:00 ----D---- C:\Windows\system32\cs-CZ
2011-05-25 21:06:35 ----D---- C:\Windows\system32\catroot
2011-05-25 21:06:34 ----D---- C:\Windows\system32\catroot2
2011-05-25 20:49:04 ----D---- C:\Program Files\Windows Sidebar
2011-05-25 20:49:04 ----D---- C:\Program Files\Windows Media Player
2011-05-25 20:49:04 ----D---- C:\Program Files\Windows Mail
2011-05-25 20:49:04 ----D---- C:\Program Files\DVD Maker
2011-05-25 20:49:04 ----D---- C:\Program Files (x86)\Windows Sidebar
2011-05-25 20:49:04 ----D---- C:\Program Files (x86)\Windows Photo Viewer
2011-05-25 20:49:04 ----D---- C:\Program Files (x86)\Windows Media Player
2011-05-25 20:49:04 ----D---- C:\Program Files (x86)\Windows Mail
2011-05-25 20:49:04 ----D---- C:\Program Files (x86)\Windows Defender
2011-05-25 20:49:03 ----D---- C:\Windows\servicing
2011-05-25 20:49:03 ----D---- C:\Program Files\Windows Photo Viewer
2011-05-25 20:49:03 ----D---- C:\Program Files\Windows Journal
2011-05-25 20:49:03 ----D---- C:\Program Files\Windows Defender
2011-05-25 20:49:03 ----D---- C:\Program Files\Common Files\System
2011-05-25 20:48:58 ----D---- C:\Windows\SYSWOW64\winrm
2011-05-25 20:48:58 ----D---- C:\Windows\SYSWOW64\slmgr
2011-05-25 20:48:58 ----D---- C:\Windows\SYSWOW64\migwiz
2011-05-25 20:48:58 ----D---- C:\Windows\SYSWOW64\migration
2011-05-25 20:48:58 ----D---- C:\Windows\ehome
2011-05-25 20:48:55 ----D---- C:\Windows\SYSWOW64\WCN
2011-05-25 20:48:55 ----D---- C:\Windows\SYSWOW64\wbem
2011-05-25 20:48:55 ----D---- C:\Windows\SYSWOW64\Printing_Admin_Scripts
2011-05-25 20:48:55 ----D---- C:\Windows\SYSWOW64\MUI
2011-05-25 20:48:55 ----D---- C:\Windows\SYSWOW64\DriverStore
2011-05-25 20:48:55 ----D---- C:\Windows\SYSWOW64\Dism
2011-05-25 20:48:55 ----D---- C:\Windows\SYSWOW64\com
2011-05-25 20:48:55 ----D---- C:\Windows\IME
2011-05-25 20:48:54 ----D---- C:\Windows\system32\winrm
2011-05-25 20:48:54 ----D---- C:\Windows\system32\sysprep
2011-05-25 20:48:54 ----D---- C:\Windows\system32\slmgr
2011-05-25 20:48:54 ----D---- C:\Windows\system32\oobe
2011-05-25 20:48:54 ----D---- C:\Windows\system32\migwiz
2011-05-25 20:48:54 ----D---- C:\Windows\system32\migration
2011-05-25 20:48:54 ----D---- C:\Windows\system32\Boot
2011-05-25 20:48:54 ----D---- C:\Windows\PolicyDefinitions
2011-05-25 20:48:47 ----D---- C:\Windows\system32\WCN
2011-05-25 20:48:47 ----D---- C:\Windows\system32\MUI
2011-05-25 20:48:47 ----D---- C:\Windows\system32\drivers\UMDF
2011-05-25 20:48:47 ----D---- C:\Windows\system32\Dism
2011-05-25 20:48:46 ----D---- C:\Windows\system32\wbem
2011-05-25 20:48:46 ----D---- C:\Windows\system32\Printing_Admin_Scripts
2011-05-25 20:48:46 ----D---- C:\Windows\system32\DriverStore
2011-05-25 20:48:46 ----D---- C:\Windows\system32\com
2011-05-25 20:39:54 ----D---- C:\Windows\Prefetch
2011-05-25 20:35:12 ----D---- C:\Windows\SYSWOW64\en-US
2011-05-25 20:35:10 ----D---- C:\Windows\system32\en-US
2011-05-25 20:35:08 ----D---- C:\Program Files\Internet Explorer
2011-05-25 20:35:07 ----D---- C:\Program Files (x86)\Internet Explorer
2011-05-25 20:33:10 ----D---- C:\Program Files\Common Files\Microsoft Shared
2011-05-25 20:24:01 ----D---- C:\Windows\Logs
2011-05-25 19:39:19 ----D---- C:\Windows\Microsoft.NET
2011-05-25 19:39:13 ----RSD---- C:\Windows\assembly
2011-05-25 19:13:41 ----D---- C:\Windows\debug
2011-05-25 18:39:42 ----D---- C:\Windows\system32\restore
2011-05-25 18:27:34 ----RD---- C:\Program Files (x86)
2011-05-25 18:21:06 ----D---- C:\Windows\system32\NDF
2011-05-25 06:39:43 ----D---- C:\Windows\Panther
2011-05-24 22:05:28 ----SD---- C:\ProgramData\Microsoft
2011-05-24 21:45:35 ----RD---- C:\Users
2011-04-29 11:54:46 ----A---- C:\Windows\system32\MRT.exe
======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======
R0 pciide;pciide; C:\Windows\system32\DRIVERS\pciide.sys [2009-07-14 12352]
R0 rdyboost;ReadyBoost; C:\Windows\System32\drivers\rdyboost.sys [2009-07-14 214096]
R1 CSC;@%systemroot%\system32\cscsvc.dll,-202; C:\Windows\system32\drivers\csc.sys [2009-07-14 514048]
R1 ehdrv;ehdrv; C:\Windows\system32\DRIVERS\ehdrv.sys [2010-12-21 141264]
R2 eamonm;eamonm; C:\Windows\system32\DRIVERS\eamonm.sys [2010-12-21 170640]
R2 epfw;epfw; C:\Windows\system32\DRIVERS\epfw.sys [2010-12-21 170640]
R2 epfwwfp;epfwwfp; C:\Windows\system32\DRIVERS\epfwwfp.sys [2010-12-21 50624]
R3 amdkmdag;amdkmdag; C:\Windows\system32\DRIVERS\atikmdag.sys [2011-04-20 9319936]
R3 amdkmdap;amdkmdap; C:\Windows\system32\DRIVERS\atikmpag.sys [2011-04-20 306176]
R3 Epfwndis;Eset Personal Firewall; C:\Windows\system32\DRIVERS\Epfwndis.sys [2010-12-21 34144]
R3 RTL8167;Realtek 8167 NT Driver; C:\Windows\system32\DRIVERS\Rt64win7.sys [2009-06-10 187392]
S3 atikmdag;atikmdag; C:\Windows\system32\DRIVERS\atikmdag.sys [2011-04-20 9319936]
S3 E1G60;Intel(R) PRO/1000 NDIS 6 Adapter Driver; C:\Windows\system32\DRIVERS\E1G6032E.sys [2009-06-10 145792]
S3 RDPDR;Terminal Server Device Redirector Driver; C:\Windows\System32\drivers\rdpdr.sys [2009-07-14 165376]
S3 s3cap;s3cap; C:\Windows\system32\DRIVERS\vms3cap.sys [2009-07-14 6656]
S3 storvsc;storvsc; C:\Windows\system32\DRIVERS\storvsc.sys [2009-07-14 34896]
S3 vmbus;@%SystemRoot%\system32\vmbusres.dll,-1000; C:\Windows\system32\DRIVERS\vmbus.sys [2009-07-14 200272]
S3 VMBusHID;VMBusHID; C:\Windows\system32\DRIVERS\VMBusHID.sys [2009-07-14 21760]
======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======
R2 AMD External Events Utility;AMD External Events Utility; C:\Windows\system32\atiesrxx.exe [2011-04-20 203776]
R2 CscService;@%systemroot%\system32\cscsvc.dll,-200; C:\Windows\System32\svchost.exe [2009-07-14 27136]
R2 ekrn;ESET Service; F:\Program Files\ESET\ESET Smart Security\x86\ekrn.exe [2011-01-12 810144]
S3 AppMgmt;@appmgmts.dll,-3250; C:\Windows\system32\svchost.exe [2009-07-14 27136]
S3 EhttpSrv;ESET HTTP Server; F:\Program Files\ESET\ESET Smart Security\EHttpSrv.exe [2011-01-12 42360]
S3 PeerDistSvc;@%SystemRoot%\system32\peerdistsvc.dll,-9000; C:\Windows\System32\svchost.exe [2009-07-14 27136]
S3 UmRdpService;@%SystemRoot%\system32\umrdp.dll,-1000; C:\Windows\System32\svchost.exe [2009-07-14 27136]
S3 WatAdminSvc;@%SystemRoot%\system32\Wat\WatUX.exe,-601; C:\Windows\system32\Wat\WatAdminSvc.exe [2011-05-25 1255736]
Odvirování PC, zrychlení počítače, vzdálená pomoc prostřednictvím služby neslape.cz
Výpadky netu
Moderátor: Moderátoři
Pravidla fóra
Pokud chcete pomoc, vložte log z FRST [návod zde] nebo RSIT [návod zde]
Jednotlivé thready budou po vyřešení uzamčeny. Stejně tak ty, které budou nečinné déle než 14 dní. Vizte Pravidlo o zamykání témat. Děkujeme za pochopení.
!NOVINKA!
Nově lze využívat služby vzdálené pomoci, kdy se k vašemu počítači připojí odborník a bližší informace o problému si od vás získá telefonicky! Více na www.neslape.cz
Pokud chcete pomoc, vložte log z FRST [návod zde] nebo RSIT [návod zde]
Jednotlivé thready budou po vyřešení uzamčeny. Stejně tak ty, které budou nečinné déle než 14 dní. Vizte Pravidlo o zamykání témat. Děkujeme za pochopení.
!NOVINKA!
Nově lze využívat služby vzdálené pomoci, kdy se k vašemu počítači připojí odborník a bližší informace o problému si od vás získá telefonicky! Více na www.neslape.cz
-
Rudy
- Site Admin
- Příspěvky: 119506
- Registrován: 30 říj 2003 13:42
- Bydliště: Plzeň
- Kontaktovat uživatele:
Re: Výpadky netu
Včera jste dělal sken ComboFix. Rád bych viděl z něho log, neboť z RSIT, který je proveden po něm nevyčtu nic.
Dotazy a logy vkládejte pouze do vašich threadů. Soukromé zprávy, icq a e-maily neslouží k řešení vašich problémů.
Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.
Navštivte:
e-mail: rudy(zavináč)forum.viry.cz
Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!
Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.
Navštivte:
e-mail: rudy(zavináč)forum.viry.cz
Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!
Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Re: Výpadky netu
ComboFix 11-05-25.01 - Mirek 26.05.2011 20:27:39.2.2 - x64 NETWORK
Microsoft Windows 7 Ultimate 6.1.7600.0.1252.1.1033.18.4094.3309 [GMT 2:00]
Running from: c:\users\Mirek\Desktop\ComboFix.exe
Command switches used :: /u
AV: ESET Smart Security 4.2 *Enabled/Updated* {77DEAFED-8149-104B-25A1-21771CA47CD1}
FW: ESET personal firewall *Enabled* {4FE52EC8-CB26-1113-0EFE-8842E2773BAA}
SP: ESET Smart Security 4.2 *Enabled/Updated* {CCBF4E09-A773-1FC5-1F11-1A056723366C}
SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
* Created a new restore point
.
.
((((((((((((((((((((((((( Files Created from 2011-04-26 to 2011-05-26 )))))))))))))))))))))))))))))))
.
.
2011-05-26 18:30 . 2011-05-26 18:30 -------- d-----w- c:\users\Default\AppData\Local\temp
2011-05-25 21:27 . 2011-05-25 21:27 -------- d-----w- c:\programdata\Malwarebytes
2011-05-25 21:27 . 2010-12-20 16:09 38224 ----a-w- c:\windows\SysWow64\drivers\mbamswissarmy.sys
2011-05-25 21:27 . 2010-12-20 16:08 24152 ----a-w- c:\windows\system32\drivers\mbam.sys
2011-05-25 20:53 . 2011-05-25 20:53 -------- d-----w- C:\rsit
2011-05-25 19:45 . 2011-05-25 19:45 -------- d-----w- c:\program files\Defraggler
2011-05-25 19:27 . 2011-05-25 20:53 -------- d-----w- c:\program files\trend micro
2011-05-25 19:23 . 2011-05-25 19:23 404640 ----a-w- c:\windows\SysWow64\FlashPlayerCPLApp.cpl
2011-05-25 19:23 . 2011-05-25 19:23 -------- d-----w- c:\windows\SysWow64\Macromed
2011-05-25 18:48 . 2011-05-25 18:48 -------- d-----w- c:\windows\SysWow64\cs
2011-05-25 18:48 . 2011-05-25 18:48 -------- d-----w- c:\windows\SysWow64\XPSViewer
2011-05-25 18:48 . 2011-05-25 18:48 -------- d-----w- c:\windows\SysWow64\wbem\cs-CZ
2011-05-25 18:48 . 2011-05-25 18:48 -------- d-----w- c:\windows\SysWow64\drivers\cs-CZ
2011-05-25 18:48 . 2011-05-25 18:48 -------- d-----w- c:\windows\cs-CZ
2011-05-25 18:48 . 2011-05-25 18:48 -------- d-----w- c:\windows\system32\cs
2011-05-25 18:48 . 2011-05-25 18:48 -------- d-----w- c:\windows\system32\drivers\cs-CZ
2011-05-25 18:48 . 2011-05-25 18:48 -------- d-----w- c:\windows\system32\drivers\UMDF\cs-CZ
2011-05-25 18:48 . 2011-05-25 18:48 -------- d-----w- c:\windows\system32\wbem\cs-CZ
2011-05-25 18:45 . 2009-07-13 17:04 3584 ----a-w- c:\windows\system32\Spool\prtprocs\x64\cs-CZ\LXKPTPRC.DLL.mui
2011-05-25 18:33 . 2011-05-25 18:33 -------- d-----w- c:\program files\Common Files\ATI Technologies
2011-05-25 18:33 . 2011-05-25 18:33 -------- d-----w- c:\program files (x86)\Common Files\ATI Technologies
2011-05-25 18:33 . 2011-05-25 18:33 -------- d-----w- c:\program files\ATI
2011-05-25 18:31 . 2011-05-25 18:31 -------- d-----w- C:\ATI
2011-05-25 18:20 . 2011-05-25 18:20 982912 ----a-w- c:\windows\system32\drivers\dxgkrnl.sys
2011-05-25 18:16 . 2011-05-25 18:16 -------- d-----w- c:\windows\SysWow64\Wat
2011-05-25 18:16 . 2011-05-25 18:16 -------- d-----w- c:\windows\system32\Wat
2011-05-25 18:11 . 2011-04-09 06:58 142336 ----a-w- c:\windows\system32\poqexec.exe
2011-05-25 18:11 . 2011-04-09 05:56 123904 ----a-w- c:\windows\SysWow64\poqexec.exe
2011-05-25 17:12 . 2009-11-25 10:47 99176 ----a-w- c:\windows\SysWow64\PresentationHostProxy.dll
2011-05-25 17:12 . 2009-11-25 10:47 49472 ----a-w- c:\windows\SysWow64\netfxperf.dll
2011-05-25 17:12 . 2009-11-25 10:47 48960 ----a-w- c:\windows\system32\netfxperf.dll
2011-05-25 17:12 . 2009-11-25 10:47 297808 ----a-w- c:\windows\SysWow64\mscoree.dll
2011-05-25 17:12 . 2009-11-25 10:47 295264 ----a-w- c:\windows\SysWow64\PresentationHost.exe
2011-05-25 17:12 . 2009-11-25 10:47 1130824 ----a-w- c:\windows\SysWow64\dfshim.dll
2011-05-25 17:12 . 2009-11-25 10:47 109912 ----a-w- c:\windows\system32\PresentationHostProxy.dll
2011-05-25 17:12 . 2009-11-25 10:47 444752 ----a-w- c:\windows\system32\mscoree.dll
2011-05-25 17:12 . 2009-11-25 10:47 320352 ----a-w- c:\windows\system32\PresentationHost.exe
2011-05-25 17:12 . 2009-11-25 10:47 1942856 ----a-w- c:\windows\system32\dfshim.dll
2011-05-25 17:11 . 2010-02-23 08:16 294912 ----a-w- c:\windows\system32\browserchoice.exe
2011-05-25 17:08 . 2011-05-18 10:37 8718160 ----a-w- c:\programdata\Microsoft\Windows Defender\Definition Updates\{4DDB23E7-826B-4B0F-B6D6-72E271B8755B}\mpengine.dll
2011-05-25 17:08 . 2011-02-23 05:16 461312 ----a-w- c:\windows\system32\drivers\srv.sys
2011-05-25 17:08 . 2011-02-23 05:16 401920 ----a-w- c:\windows\system32\drivers\srv2.sys
2011-05-25 17:08 . 2011-02-23 05:15 161792 ----a-w- c:\windows\system32\drivers\srvnet.sys
2011-05-25 17:06 . 2010-10-27 05:16 1739176 ----a-w- c:\windows\system32\ntdll.dll
2011-05-25 17:06 . 2010-10-27 04:40 1293120 ----a-w- c:\windows\SysWow64\ntdll.dll
2011-05-25 17:03 . 2011-02-05 12:41 556928 ----a-w- c:\windows\system32\winresume.efi
2011-05-25 17:02 . 2010-08-31 04:32 954752 ----a-w- c:\windows\SysWow64\mfc40.dll
2011-05-25 17:02 . 2010-08-31 04:32 954288 ----a-w- c:\windows\SysWow64\mfc40u.dll
2011-05-25 16:38 . 2011-05-25 18:33 -------- d-sh--w- c:\windows\Installer
2011-05-25 05:35 . 2011-05-25 05:35 -------- d-----w- C:\Boot
2011-05-25 05:14 . 2011-05-25 05:14 -------- d-----w- C:\Temp
2011-05-25 04:38 . 2011-05-25 04:38 0 ----a-w- c:\windows\ativpsrm.bin
2011-05-24 19:45 . 2011-05-26 16:34 -------- d-----w- c:\users\Mirek
.
.
.
(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2011-04-20 02:44 . 2011-04-20 02:44 9319936 ----a-w- c:\windows\system32\drivers\atikmdag.sys
2011-04-20 02:30 . 2011-04-20 02:30 22900736 ----a-w- c:\windows\system32\atio6axx.dll
2011-04-20 02:09 . 2011-04-20 02:09 151552 ----a-w- c:\windows\system32\atiapfxx.exe
2011-04-20 02:09 . 2011-04-20 02:09 676864 ----a-w- c:\windows\SysWow64\aticfx32.dll
2011-04-20 02:07 . 2011-04-20 02:07 795648 ----a-w- c:\windows\system32\aticfx64.dll
2011-04-20 02:07 . 2011-04-20 02:07 17693184 ----a-w- c:\windows\SysWow64\atioglxx.dll
2011-04-20 02:05 . 2011-04-20 02:05 462848 ----a-w- c:\windows\system32\ATIDEMGX.dll
2011-04-20 02:04 . 2011-04-20 02:04 480256 ----a-w- c:\windows\system32\atieclxx.exe
2011-04-20 02:04 . 2011-04-20 02:04 203776 ----a-w- c:\windows\system32\atiesrxx.exe
2011-04-20 02:03 . 2011-04-20 02:03 120320 ----a-w- c:\windows\system32\atitmm64.dll
2011-04-20 02:02 . 2011-04-20 02:02 423424 ----a-w- c:\windows\system32\atipdl64.dll
2011-04-20 02:02 . 2011-04-20 02:02 356352 ----a-w- c:\windows\SysWow64\atipdlxx.dll
2011-04-20 02:02 . 2011-04-20 02:02 278528 ----a-w- c:\windows\SysWow64\Oemdspif.dll
2011-04-20 02:02 . 2011-04-20 02:02 16384 ----a-w- c:\windows\system32\atimuixx.dll
2011-04-20 02:02 . 2011-04-20 02:02 59392 ----a-w- c:\windows\system32\atiedu64.dll
2011-04-20 02:02 . 2011-04-20 02:02 43520 ----a-w- c:\windows\SysWow64\ati2edxx.dll
2011-04-20 01:59 . 2011-04-20 01:59 4161536 ----a-w- c:\windows\SysWow64\atidxx32.dll
2011-04-20 01:49 . 2009-07-13 21:59 4951552 ----a-w- c:\windows\system32\atidxx64.dll
2011-04-20 01:46 . 2011-04-20 01:46 51200 ----a-w- c:\windows\system32\aticalrt64.dll
2011-04-20 01:46 . 2011-04-20 01:46 46080 ----a-w- c:\windows\SysWow64\aticalrt.dll
2011-04-20 01:46 . 2011-04-20 01:46 44544 ----a-w- c:\windows\system32\aticalcl64.dll
2011-04-20 01:46 . 2011-04-20 01:46 44032 ----a-w- c:\windows\SysWow64\aticalcl.dll
2011-04-20 01:45 . 2011-04-20 01:45 7768064 ----a-w- c:\windows\system32\aticaldd64.dll
2011-04-20 01:42 . 2011-04-20 01:42 6389760 ----a-w- c:\windows\SysWow64\aticaldd.dll
2011-04-20 01:40 . 2011-04-20 01:40 1222656 ----a-w- c:\windows\system32\atiumd6v.dll
2011-04-20 01:40 . 2011-04-20 01:40 1923584 ----a-w- c:\windows\SysWow64\atiumdmv.dll
2011-04-20 01:40 . 2011-04-20 01:40 3868672 ----a-w- c:\windows\system32\atiumd6a.dll
2011-04-20 01:38 . 2011-04-20 01:38 4286464 ----a-w- c:\windows\SysWow64\atiumdag.dll
2011-04-20 01:31 . 2011-04-20 01:31 5440000 ----a-w- c:\windows\system32\atiumd64.dll
2011-04-20 01:30 . 2011-04-20 01:30 4056576 ----a-w- c:\windows\SysWow64\atiumdva.dll
2011-04-20 01:27 . 2011-04-20 01:27 58880 ----a-w- c:\windows\system32\coinst.dll
2011-04-20 01:23 . 2011-04-20 01:23 366080 ----a-w- c:\windows\system32\atiadlxx.dll
2011-04-20 01:23 . 2011-04-20 01:23 262144 ----a-w- c:\windows\SysWow64\atiadlxy.dll
2011-04-20 01:22 . 2011-04-20 01:22 14848 ----a-w- c:\windows\system32\atig6pxx.dll
2011-04-20 01:22 . 2011-04-20 01:22 12800 ----a-w- c:\windows\SysWow64\atiglpxx.dll
2011-04-20 01:22 . 2011-04-20 01:22 12800 ----a-w- c:\windows\system32\atiglpxx.dll
2011-04-20 01:22 . 2011-04-20 01:22 39936 ----a-w- c:\windows\system32\atig6txx.dll
2011-04-20 01:22 . 2011-04-20 01:22 32768 ----a-w- c:\windows\SysWow64\atigktxx.dll
2011-04-20 01:22 . 2011-04-20 01:22 306176 ----a-w- c:\windows\system32\drivers\atikmpag.sys
2011-04-20 01:21 . 2011-04-20 01:21 40960 ----a-w- c:\windows\system32\atiuxp64.dll
2011-04-20 01:21 . 2011-04-20 01:21 31232 ----a-w- c:\windows\SysWow64\atiuxpag.dll
2011-04-20 01:21 . 2011-04-20 01:21 38912 ----a-w- c:\windows\system32\atiu9p64.dll
2011-04-20 01:21 . 2011-04-20 01:21 29184 ----a-w- c:\windows\SysWow64\atiu9pag.dll
2011-04-20 01:20 . 2011-04-20 01:20 53248 ----a-w- c:\windows\system32\drivers\ati2erec.dll
2011-04-20 01:13 . 2011-04-20 01:13 53760 ----a-w- c:\windows\system32\atimpc64.dll
2011-04-20 01:13 . 2011-04-20 01:13 53760 ----a-w- c:\windows\system32\amdpcom64.dll
2011-04-20 01:13 . 2011-04-20 01:13 52736 ----a-w- c:\windows\SysWow64\atimpc32.dll
2011-04-20 01:13 . 2011-04-20 01:13 52736 ----a-w- c:\windows\SysWow64\amdpcom32.dll
.
.
((((((((((((((((((((((((((((( SnapShot@2011-05-25_20.48.40 )))))))))))))))))))))))))))))))))))))))))
.
+ 2011-05-24 19:47 . 2011-05-26 18:17 9560 c:\windows\system32\NetworkList\Icons\{18382565-A7F5-43C4-A755-36F0DB5B8186}_48.bin
- 2011-05-24 19:47 . 2011-05-24 20:05 9560 c:\windows\system32\NetworkList\Icons\{18382565-A7F5-43C4-A755-36F0DB5B8186}_48.bin
- 2011-05-24 19:47 . 2011-05-24 20:05 4280 c:\windows\system32\NetworkList\Icons\{18382565-A7F5-43C4-A755-36F0DB5B8186}_32.bin
+ 2011-05-24 19:47 . 2011-05-26 18:17 4280 c:\windows\system32\NetworkList\Icons\{18382565-A7F5-43C4-A755-36F0DB5B8186}_32.bin
- 2011-05-24 19:47 . 2011-05-24 20:05 2456 c:\windows\system32\NetworkList\Icons\{18382565-A7F5-43C4-A755-36F0DB5B8186}_24.bin
+ 2011-05-24 19:47 . 2011-05-26 18:17 2456 c:\windows\system32\NetworkList\Icons\{18382565-A7F5-43C4-A755-36F0DB5B8186}_24.bin
+ 2011-05-26 16:14 . 2011-05-26 16:14 2048 c:\windows\ServiceProfiles\LocalService\AppData\Local\lastalive1.dat
- 2011-05-25 20:39 . 2011-05-25 20:39 2048 c:\windows\ServiceProfiles\LocalService\AppData\Local\lastalive1.dat
+ 2011-05-26 16:14 . 2011-05-26 16:14 2048 c:\windows\ServiceProfiles\LocalService\AppData\Local\lastalive0.dat
- 2011-05-25 20:39 . 2011-05-25 20:39 2048 c:\windows\ServiceProfiles\LocalService\AppData\Local\lastalive0.dat
- 2009-07-14 02:36 . 2011-05-25 20:44 615122 c:\windows\system32\perfh009.dat
+ 2009-07-14 02:36 . 2011-05-26 16:18 615122 c:\windows\system32\perfh009.dat
- 2011-05-25 18:49 . 2011-05-25 20:44 622444 c:\windows\system32\perfh005.dat
+ 2011-05-25 18:49 . 2011-05-26 16:18 622444 c:\windows\system32\perfh005.dat
+ 2009-07-14 02:36 . 2011-05-26 16:18 103496 c:\windows\system32\perfc009.dat
- 2009-07-14 02:36 . 2011-05-25 20:44 103496 c:\windows\system32\perfc009.dat
- 2011-05-25 18:49 . 2011-05-25 20:44 118612 c:\windows\system32\perfc005.dat
+ 2011-05-25 18:49 . 2011-05-26 16:18 118612 c:\windows\system32\perfc005.dat
.
((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* empty entries & legit default entries are not shown
REGEDIT4
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]
"Malwarebytes' Anti-Malware (reboot)"="f:\program files (x86)\Malwarebytes' Anti-Malware\mbam.exe" [2010-12-20 963976]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\RunOnce]
"Malwarebytes' Anti-Malware"="f:\program files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe" [2010-12-20 443728]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorAdmin"= 5 (0x5)
"ConsentPromptBehaviorUser"= 3 (0x3)
"EnableUIADesktopToggle"= 0 (0x0)
.
R1 ehdrv;ehdrv;c:\windows\system32\DRIVERS\ehdrv.sys [x]
R2 AMD External Events Utility;AMD External Events Utility;c:\windows\system32\atiesrxx.exe [x]
R2 eamonm;eamonm;c:\windows\system32\DRIVERS\eamonm.sys [x]
R2 ekrn;ESET Service;f:\program files\ESET\ESET Smart Security\x86\ekrn.exe [2011-01-12 810144]
R2 epfwwfp;epfwwfp;c:\windows\system32\DRIVERS\epfwwfp.sys [x]
R3 amdkmdag;amdkmdag;c:\windows\system32\DRIVERS\atikmdag.sys [x]
R3 amdkmdap;amdkmdap;c:\windows\system32\DRIVERS\atikmpag.sys [x]
R3 WatAdminSvc;Služba Technologie aktivace Windows;c:\windows\system32\Wat\WatAdminSvc.exe [x]
S3 RTL8167;Realtek 8167 NT Driver;c:\windows\system32\DRIVERS\Rt64win7.sys [x]
.
.
.
--------- x86-64 -----------
.
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"egui"="f:\program files\ESET\ESET Smart Security\egui.exe" [2011-01-12 2918656]
.
------- Supplementary Scan -------
.
uLocal Page = c:\windows\system32\blank.htm
mLocal Page = c:\windows\SYSTEM32\blank.htm
FF - ProfilePath - c:\users\Mirek\AppData\Roaming\Mozilla\Firefox\Profiles\45b8to2s.default\
.
- - - - ORPHANS REMOVED - - - -
.
Wow6432Node-HKLM-RunOnce-<NO NAME> - (no file)
.
.
--------------------- LOCKED REGISTRY KEYS ---------------------
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\PCW\Security]
@Denied: (Full) (Everyone)
.
Completion time: 2011-05-26 20:31:40
ComboFix-quarantined-files.txt 2011-05-26 18:31
ComboFix2.txt 2011-05-25 20:49
.
Pre-Run: 5 163 569 152
Post-Run: 5 119 778 816
.
- - End Of File - - 07256FB79B9C18CB56AE5E171173C96C
Microsoft Windows 7 Ultimate 6.1.7600.0.1252.1.1033.18.4094.3309 [GMT 2:00]
Running from: c:\users\Mirek\Desktop\ComboFix.exe
Command switches used :: /u
AV: ESET Smart Security 4.2 *Enabled/Updated* {77DEAFED-8149-104B-25A1-21771CA47CD1}
FW: ESET personal firewall *Enabled* {4FE52EC8-CB26-1113-0EFE-8842E2773BAA}
SP: ESET Smart Security 4.2 *Enabled/Updated* {CCBF4E09-A773-1FC5-1F11-1A056723366C}
SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
* Created a new restore point
.
.
((((((((((((((((((((((((( Files Created from 2011-04-26 to 2011-05-26 )))))))))))))))))))))))))))))))
.
.
2011-05-26 18:30 . 2011-05-26 18:30 -------- d-----w- c:\users\Default\AppData\Local\temp
2011-05-25 21:27 . 2011-05-25 21:27 -------- d-----w- c:\programdata\Malwarebytes
2011-05-25 21:27 . 2010-12-20 16:09 38224 ----a-w- c:\windows\SysWow64\drivers\mbamswissarmy.sys
2011-05-25 21:27 . 2010-12-20 16:08 24152 ----a-w- c:\windows\system32\drivers\mbam.sys
2011-05-25 20:53 . 2011-05-25 20:53 -------- d-----w- C:\rsit
2011-05-25 19:45 . 2011-05-25 19:45 -------- d-----w- c:\program files\Defraggler
2011-05-25 19:27 . 2011-05-25 20:53 -------- d-----w- c:\program files\trend micro
2011-05-25 19:23 . 2011-05-25 19:23 404640 ----a-w- c:\windows\SysWow64\FlashPlayerCPLApp.cpl
2011-05-25 19:23 . 2011-05-25 19:23 -------- d-----w- c:\windows\SysWow64\Macromed
2011-05-25 18:48 . 2011-05-25 18:48 -------- d-----w- c:\windows\SysWow64\cs
2011-05-25 18:48 . 2011-05-25 18:48 -------- d-----w- c:\windows\SysWow64\XPSViewer
2011-05-25 18:48 . 2011-05-25 18:48 -------- d-----w- c:\windows\SysWow64\wbem\cs-CZ
2011-05-25 18:48 . 2011-05-25 18:48 -------- d-----w- c:\windows\SysWow64\drivers\cs-CZ
2011-05-25 18:48 . 2011-05-25 18:48 -------- d-----w- c:\windows\cs-CZ
2011-05-25 18:48 . 2011-05-25 18:48 -------- d-----w- c:\windows\system32\cs
2011-05-25 18:48 . 2011-05-25 18:48 -------- d-----w- c:\windows\system32\drivers\cs-CZ
2011-05-25 18:48 . 2011-05-25 18:48 -------- d-----w- c:\windows\system32\drivers\UMDF\cs-CZ
2011-05-25 18:48 . 2011-05-25 18:48 -------- d-----w- c:\windows\system32\wbem\cs-CZ
2011-05-25 18:45 . 2009-07-13 17:04 3584 ----a-w- c:\windows\system32\Spool\prtprocs\x64\cs-CZ\LXKPTPRC.DLL.mui
2011-05-25 18:33 . 2011-05-25 18:33 -------- d-----w- c:\program files\Common Files\ATI Technologies
2011-05-25 18:33 . 2011-05-25 18:33 -------- d-----w- c:\program files (x86)\Common Files\ATI Technologies
2011-05-25 18:33 . 2011-05-25 18:33 -------- d-----w- c:\program files\ATI
2011-05-25 18:31 . 2011-05-25 18:31 -------- d-----w- C:\ATI
2011-05-25 18:20 . 2011-05-25 18:20 982912 ----a-w- c:\windows\system32\drivers\dxgkrnl.sys
2011-05-25 18:16 . 2011-05-25 18:16 -------- d-----w- c:\windows\SysWow64\Wat
2011-05-25 18:16 . 2011-05-25 18:16 -------- d-----w- c:\windows\system32\Wat
2011-05-25 18:11 . 2011-04-09 06:58 142336 ----a-w- c:\windows\system32\poqexec.exe
2011-05-25 18:11 . 2011-04-09 05:56 123904 ----a-w- c:\windows\SysWow64\poqexec.exe
2011-05-25 17:12 . 2009-11-25 10:47 99176 ----a-w- c:\windows\SysWow64\PresentationHostProxy.dll
2011-05-25 17:12 . 2009-11-25 10:47 49472 ----a-w- c:\windows\SysWow64\netfxperf.dll
2011-05-25 17:12 . 2009-11-25 10:47 48960 ----a-w- c:\windows\system32\netfxperf.dll
2011-05-25 17:12 . 2009-11-25 10:47 297808 ----a-w- c:\windows\SysWow64\mscoree.dll
2011-05-25 17:12 . 2009-11-25 10:47 295264 ----a-w- c:\windows\SysWow64\PresentationHost.exe
2011-05-25 17:12 . 2009-11-25 10:47 1130824 ----a-w- c:\windows\SysWow64\dfshim.dll
2011-05-25 17:12 . 2009-11-25 10:47 109912 ----a-w- c:\windows\system32\PresentationHostProxy.dll
2011-05-25 17:12 . 2009-11-25 10:47 444752 ----a-w- c:\windows\system32\mscoree.dll
2011-05-25 17:12 . 2009-11-25 10:47 320352 ----a-w- c:\windows\system32\PresentationHost.exe
2011-05-25 17:12 . 2009-11-25 10:47 1942856 ----a-w- c:\windows\system32\dfshim.dll
2011-05-25 17:11 . 2010-02-23 08:16 294912 ----a-w- c:\windows\system32\browserchoice.exe
2011-05-25 17:08 . 2011-05-18 10:37 8718160 ----a-w- c:\programdata\Microsoft\Windows Defender\Definition Updates\{4DDB23E7-826B-4B0F-B6D6-72E271B8755B}\mpengine.dll
2011-05-25 17:08 . 2011-02-23 05:16 461312 ----a-w- c:\windows\system32\drivers\srv.sys
2011-05-25 17:08 . 2011-02-23 05:16 401920 ----a-w- c:\windows\system32\drivers\srv2.sys
2011-05-25 17:08 . 2011-02-23 05:15 161792 ----a-w- c:\windows\system32\drivers\srvnet.sys
2011-05-25 17:06 . 2010-10-27 05:16 1739176 ----a-w- c:\windows\system32\ntdll.dll
2011-05-25 17:06 . 2010-10-27 04:40 1293120 ----a-w- c:\windows\SysWow64\ntdll.dll
2011-05-25 17:03 . 2011-02-05 12:41 556928 ----a-w- c:\windows\system32\winresume.efi
2011-05-25 17:02 . 2010-08-31 04:32 954752 ----a-w- c:\windows\SysWow64\mfc40.dll
2011-05-25 17:02 . 2010-08-31 04:32 954288 ----a-w- c:\windows\SysWow64\mfc40u.dll
2011-05-25 16:38 . 2011-05-25 18:33 -------- d-sh--w- c:\windows\Installer
2011-05-25 05:35 . 2011-05-25 05:35 -------- d-----w- C:\Boot
2011-05-25 05:14 . 2011-05-25 05:14 -------- d-----w- C:\Temp
2011-05-25 04:38 . 2011-05-25 04:38 0 ----a-w- c:\windows\ativpsrm.bin
2011-05-24 19:45 . 2011-05-26 16:34 -------- d-----w- c:\users\Mirek
.
.
.
(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2011-04-20 02:44 . 2011-04-20 02:44 9319936 ----a-w- c:\windows\system32\drivers\atikmdag.sys
2011-04-20 02:30 . 2011-04-20 02:30 22900736 ----a-w- c:\windows\system32\atio6axx.dll
2011-04-20 02:09 . 2011-04-20 02:09 151552 ----a-w- c:\windows\system32\atiapfxx.exe
2011-04-20 02:09 . 2011-04-20 02:09 676864 ----a-w- c:\windows\SysWow64\aticfx32.dll
2011-04-20 02:07 . 2011-04-20 02:07 795648 ----a-w- c:\windows\system32\aticfx64.dll
2011-04-20 02:07 . 2011-04-20 02:07 17693184 ----a-w- c:\windows\SysWow64\atioglxx.dll
2011-04-20 02:05 . 2011-04-20 02:05 462848 ----a-w- c:\windows\system32\ATIDEMGX.dll
2011-04-20 02:04 . 2011-04-20 02:04 480256 ----a-w- c:\windows\system32\atieclxx.exe
2011-04-20 02:04 . 2011-04-20 02:04 203776 ----a-w- c:\windows\system32\atiesrxx.exe
2011-04-20 02:03 . 2011-04-20 02:03 120320 ----a-w- c:\windows\system32\atitmm64.dll
2011-04-20 02:02 . 2011-04-20 02:02 423424 ----a-w- c:\windows\system32\atipdl64.dll
2011-04-20 02:02 . 2011-04-20 02:02 356352 ----a-w- c:\windows\SysWow64\atipdlxx.dll
2011-04-20 02:02 . 2011-04-20 02:02 278528 ----a-w- c:\windows\SysWow64\Oemdspif.dll
2011-04-20 02:02 . 2011-04-20 02:02 16384 ----a-w- c:\windows\system32\atimuixx.dll
2011-04-20 02:02 . 2011-04-20 02:02 59392 ----a-w- c:\windows\system32\atiedu64.dll
2011-04-20 02:02 . 2011-04-20 02:02 43520 ----a-w- c:\windows\SysWow64\ati2edxx.dll
2011-04-20 01:59 . 2011-04-20 01:59 4161536 ----a-w- c:\windows\SysWow64\atidxx32.dll
2011-04-20 01:49 . 2009-07-13 21:59 4951552 ----a-w- c:\windows\system32\atidxx64.dll
2011-04-20 01:46 . 2011-04-20 01:46 51200 ----a-w- c:\windows\system32\aticalrt64.dll
2011-04-20 01:46 . 2011-04-20 01:46 46080 ----a-w- c:\windows\SysWow64\aticalrt.dll
2011-04-20 01:46 . 2011-04-20 01:46 44544 ----a-w- c:\windows\system32\aticalcl64.dll
2011-04-20 01:46 . 2011-04-20 01:46 44032 ----a-w- c:\windows\SysWow64\aticalcl.dll
2011-04-20 01:45 . 2011-04-20 01:45 7768064 ----a-w- c:\windows\system32\aticaldd64.dll
2011-04-20 01:42 . 2011-04-20 01:42 6389760 ----a-w- c:\windows\SysWow64\aticaldd.dll
2011-04-20 01:40 . 2011-04-20 01:40 1222656 ----a-w- c:\windows\system32\atiumd6v.dll
2011-04-20 01:40 . 2011-04-20 01:40 1923584 ----a-w- c:\windows\SysWow64\atiumdmv.dll
2011-04-20 01:40 . 2011-04-20 01:40 3868672 ----a-w- c:\windows\system32\atiumd6a.dll
2011-04-20 01:38 . 2011-04-20 01:38 4286464 ----a-w- c:\windows\SysWow64\atiumdag.dll
2011-04-20 01:31 . 2011-04-20 01:31 5440000 ----a-w- c:\windows\system32\atiumd64.dll
2011-04-20 01:30 . 2011-04-20 01:30 4056576 ----a-w- c:\windows\SysWow64\atiumdva.dll
2011-04-20 01:27 . 2011-04-20 01:27 58880 ----a-w- c:\windows\system32\coinst.dll
2011-04-20 01:23 . 2011-04-20 01:23 366080 ----a-w- c:\windows\system32\atiadlxx.dll
2011-04-20 01:23 . 2011-04-20 01:23 262144 ----a-w- c:\windows\SysWow64\atiadlxy.dll
2011-04-20 01:22 . 2011-04-20 01:22 14848 ----a-w- c:\windows\system32\atig6pxx.dll
2011-04-20 01:22 . 2011-04-20 01:22 12800 ----a-w- c:\windows\SysWow64\atiglpxx.dll
2011-04-20 01:22 . 2011-04-20 01:22 12800 ----a-w- c:\windows\system32\atiglpxx.dll
2011-04-20 01:22 . 2011-04-20 01:22 39936 ----a-w- c:\windows\system32\atig6txx.dll
2011-04-20 01:22 . 2011-04-20 01:22 32768 ----a-w- c:\windows\SysWow64\atigktxx.dll
2011-04-20 01:22 . 2011-04-20 01:22 306176 ----a-w- c:\windows\system32\drivers\atikmpag.sys
2011-04-20 01:21 . 2011-04-20 01:21 40960 ----a-w- c:\windows\system32\atiuxp64.dll
2011-04-20 01:21 . 2011-04-20 01:21 31232 ----a-w- c:\windows\SysWow64\atiuxpag.dll
2011-04-20 01:21 . 2011-04-20 01:21 38912 ----a-w- c:\windows\system32\atiu9p64.dll
2011-04-20 01:21 . 2011-04-20 01:21 29184 ----a-w- c:\windows\SysWow64\atiu9pag.dll
2011-04-20 01:20 . 2011-04-20 01:20 53248 ----a-w- c:\windows\system32\drivers\ati2erec.dll
2011-04-20 01:13 . 2011-04-20 01:13 53760 ----a-w- c:\windows\system32\atimpc64.dll
2011-04-20 01:13 . 2011-04-20 01:13 53760 ----a-w- c:\windows\system32\amdpcom64.dll
2011-04-20 01:13 . 2011-04-20 01:13 52736 ----a-w- c:\windows\SysWow64\atimpc32.dll
2011-04-20 01:13 . 2011-04-20 01:13 52736 ----a-w- c:\windows\SysWow64\amdpcom32.dll
.
.
((((((((((((((((((((((((((((( SnapShot@2011-05-25_20.48.40 )))))))))))))))))))))))))))))))))))))))))
.
+ 2011-05-24 19:47 . 2011-05-26 18:17 9560 c:\windows\system32\NetworkList\Icons\{18382565-A7F5-43C4-A755-36F0DB5B8186}_48.bin
- 2011-05-24 19:47 . 2011-05-24 20:05 9560 c:\windows\system32\NetworkList\Icons\{18382565-A7F5-43C4-A755-36F0DB5B8186}_48.bin
- 2011-05-24 19:47 . 2011-05-24 20:05 4280 c:\windows\system32\NetworkList\Icons\{18382565-A7F5-43C4-A755-36F0DB5B8186}_32.bin
+ 2011-05-24 19:47 . 2011-05-26 18:17 4280 c:\windows\system32\NetworkList\Icons\{18382565-A7F5-43C4-A755-36F0DB5B8186}_32.bin
- 2011-05-24 19:47 . 2011-05-24 20:05 2456 c:\windows\system32\NetworkList\Icons\{18382565-A7F5-43C4-A755-36F0DB5B8186}_24.bin
+ 2011-05-24 19:47 . 2011-05-26 18:17 2456 c:\windows\system32\NetworkList\Icons\{18382565-A7F5-43C4-A755-36F0DB5B8186}_24.bin
+ 2011-05-26 16:14 . 2011-05-26 16:14 2048 c:\windows\ServiceProfiles\LocalService\AppData\Local\lastalive1.dat
- 2011-05-25 20:39 . 2011-05-25 20:39 2048 c:\windows\ServiceProfiles\LocalService\AppData\Local\lastalive1.dat
+ 2011-05-26 16:14 . 2011-05-26 16:14 2048 c:\windows\ServiceProfiles\LocalService\AppData\Local\lastalive0.dat
- 2011-05-25 20:39 . 2011-05-25 20:39 2048 c:\windows\ServiceProfiles\LocalService\AppData\Local\lastalive0.dat
- 2009-07-14 02:36 . 2011-05-25 20:44 615122 c:\windows\system32\perfh009.dat
+ 2009-07-14 02:36 . 2011-05-26 16:18 615122 c:\windows\system32\perfh009.dat
- 2011-05-25 18:49 . 2011-05-25 20:44 622444 c:\windows\system32\perfh005.dat
+ 2011-05-25 18:49 . 2011-05-26 16:18 622444 c:\windows\system32\perfh005.dat
+ 2009-07-14 02:36 . 2011-05-26 16:18 103496 c:\windows\system32\perfc009.dat
- 2009-07-14 02:36 . 2011-05-25 20:44 103496 c:\windows\system32\perfc009.dat
- 2011-05-25 18:49 . 2011-05-25 20:44 118612 c:\windows\system32\perfc005.dat
+ 2011-05-25 18:49 . 2011-05-26 16:18 118612 c:\windows\system32\perfc005.dat
.
((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* empty entries & legit default entries are not shown
REGEDIT4
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]
"Malwarebytes' Anti-Malware (reboot)"="f:\program files (x86)\Malwarebytes' Anti-Malware\mbam.exe" [2010-12-20 963976]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\RunOnce]
"Malwarebytes' Anti-Malware"="f:\program files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe" [2010-12-20 443728]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorAdmin"= 5 (0x5)
"ConsentPromptBehaviorUser"= 3 (0x3)
"EnableUIADesktopToggle"= 0 (0x0)
.
R1 ehdrv;ehdrv;c:\windows\system32\DRIVERS\ehdrv.sys [x]
R2 AMD External Events Utility;AMD External Events Utility;c:\windows\system32\atiesrxx.exe [x]
R2 eamonm;eamonm;c:\windows\system32\DRIVERS\eamonm.sys [x]
R2 ekrn;ESET Service;f:\program files\ESET\ESET Smart Security\x86\ekrn.exe [2011-01-12 810144]
R2 epfwwfp;epfwwfp;c:\windows\system32\DRIVERS\epfwwfp.sys [x]
R3 amdkmdag;amdkmdag;c:\windows\system32\DRIVERS\atikmdag.sys [x]
R3 amdkmdap;amdkmdap;c:\windows\system32\DRIVERS\atikmpag.sys [x]
R3 WatAdminSvc;Služba Technologie aktivace Windows;c:\windows\system32\Wat\WatAdminSvc.exe [x]
S3 RTL8167;Realtek 8167 NT Driver;c:\windows\system32\DRIVERS\Rt64win7.sys [x]
.
.
.
--------- x86-64 -----------
.
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"egui"="f:\program files\ESET\ESET Smart Security\egui.exe" [2011-01-12 2918656]
.
------- Supplementary Scan -------
.
uLocal Page = c:\windows\system32\blank.htm
mLocal Page = c:\windows\SYSTEM32\blank.htm
FF - ProfilePath - c:\users\Mirek\AppData\Roaming\Mozilla\Firefox\Profiles\45b8to2s.default\
.
- - - - ORPHANS REMOVED - - - -
.
Wow6432Node-HKLM-RunOnce-<NO NAME> - (no file)
.
.
--------------------- LOCKED REGISTRY KEYS ---------------------
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\PCW\Security]
@Denied: (Full) (Everyone)
.
Completion time: 2011-05-26 20:31:40
ComboFix-quarantined-files.txt 2011-05-26 18:31
ComboFix2.txt 2011-05-25 20:49
.
Pre-Run: 5 163 569 152
Post-Run: 5 119 778 816
.
- - End Of File - - 07256FB79B9C18CB56AE5E171173C96C
-
Rudy
- Site Admin
- Příspěvky: 119506
- Registrován: 30 říj 2003 13:42
- Bydliště: Plzeň
- Kontaktovat uživatele:
Re: Výpadky netu
Log vypadá čistý. Zkuste restartovat modem, příp. další síť. prvek v datové cestě.
Dotazy a logy vkládejte pouze do vašich threadů. Soukromé zprávy, icq a e-maily neslouží k řešení vašich problémů.
Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.
Navštivte:
e-mail: rudy(zavináč)forum.viry.cz
Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!
Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.
Navštivte:
e-mail: rudy(zavináč)forum.viry.cz
Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!
Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Přispějete na provoz fóra?