PC neuspava.
Moderátor: Moderátoři
Pravidla fóra
Pokud chcete pomoc, vložte log z FRST [návod zde] nebo RSIT [návod zde]
Jednotlivé thready budou po vyřešení uzamčeny. Stejně tak ty, které budou nečinné déle než 14 dní. Vizte Pravidlo o zamykání témat. Děkujeme za pochopení.
!NOVINKA!
Nově lze využívat služby vzdálené pomoci, kdy se k vašemu počítači připojí odborník a bližší informace o problému si od vás získá telefonicky! Více na www.neslape.cz
Vážení uživaterlé!
Ve dnech 4. - 6-9.2026 budou někteříí naši členové na každoročním srazu fóra. Žádáme vás, abyste měli strpení, nemusí se na na řešení vašeho problému dostat hned. Děkujeme za pochopení.
Pokud chcete pomoc, vložte log z FRST [návod zde] nebo RSIT [návod zde]
Jednotlivé thready budou po vyřešení uzamčeny. Stejně tak ty, které budou nečinné déle než 14 dní. Vizte Pravidlo o zamykání témat. Děkujeme za pochopení.
!NOVINKA!
Nově lze využívat služby vzdálené pomoci, kdy se k vašemu počítači připojí odborník a bližší informace o problému si od vás získá telefonicky! Více na www.neslape.cz
Vážení uživaterlé!
Ve dnech 4. - 6-9.2026 budou někteříí naši členové na každoročním srazu fóra. Žádáme vás, abyste měli strpení, nemusí se na na řešení vašeho problému dostat hned. Děkujeme za pochopení.
Re: PC neuspava.
Akosi nedostavam odpoved. Mozno je moja chyba, ze som nedosledny a nevlozil log z RSIT:
Po dlhsej dobe som opat zamieril k vam kedze si neviem poradit.Win7 mi po zavedeni SoundMAX (myslim si ) nechce automaticky uspat sa. Skusal som vsetko mozne pomocou Dr.Google doporucene, ale bezvysledne. Stiahol som hijackthis aten mi v analyze oznacil 2 pre mna diskutabilne prvky :
O4 - HKLM\..\Run: [SoundMAX] C:\Program Files\Analog Devices\SoundMAX\soundmax.exe /tray
Špatný
Safe Musí být opraven! This entry was classified from our visitors as good.
O4 - HKCU\..\Run: [Skype] "C:\Program Files\Skype\Phone\Skype.exe" /minimized /regrun
Bezpecný.
Není nebezpecný, není potrebný. "Skype is free and simple software that will enable you to make free calls anywhere in the world in minutes"
Tu posielam kompletny log z hijackthis. Prosim vas preklepnite mi ho, ci tam nie je nieco nezelaneho.
Vdaka :
Logfile of random's system information tool 1.09 (written by random/random)
Run by Gustav7 at 2012-11-21 15:10:58
Microsoft Windows 7 Professional
System drive C: has 16 GB (53%) free of 30 GB
Total RAM: 1023 MB (16% free)
Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 15:11:02, on 21. 11. 2012
Platform: Windows 7 (WinNT 6.00.3504)
MSIE: Internet Explorer v8.00 (8.00.7600.16385)
Boot mode: Normal
Running processes:
C:\Windows\system32\Dwm.exe
C:\Windows\system32\taskhost.exe
C:\Windows\Explorer.EXE
C:\Program Files\Avira\AntiVir Desktop\avgnt.exe
C:\Program Files\COMODO\COMODO Internet Security\cfp.exe
C:\Program Files\Common Files\Java\Java Update\jusched.exe
C:\Program Files\Analog Devices\SoundMAX\SoundMAX.exe
C:\Program Files\Analog Devices\Core\smax4pnp.exe
C:\Program Files\Skype\Phone\Skype.exe
C:\Users\Gustav7\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\Gustav7\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\Gustav7\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\Gustav7\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\Gustav7\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\Gustav7\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Windows\system32\NOTEPAD.EXE
C:\Users\Gustav7\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Windows\system32\NOTEPAD.EXE
C:\Windows\system32\SearchFilterHost.exe
C:\Users\Gustav7\Downloads\RSIT.exe
C:\Program Files\trend micro\Gustav7.exe
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://uk.ask.com/?l=dis&o=15768
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll
O2 - BHO: SkypeIEPluginBHO - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll
O4 - HKLM\..\Run: [avgnt] "C:\Program Files\Avira\AntiVir Desktop\avgnt.exe" /min
O4 - HKLM\..\Run: [COMODO Internet Security] "C:\Program Files\COMODO\COMODO Internet Security\cfp.exe" -h
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Common Files\Java\Java Update\jusched.exe"
O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKLM\..\Run: [SoundMAX] C:\Program Files\Analog Devices\SoundMAX\soundmax.exe /tray
O4 - HKLM\..\Run: [SoundMAXPnP] C:\Program Files\Analog Devices\Core\smax4pnp.exe
O4 - HKCU\..\Run: [Google Update] "C:\Users\Gustav7\AppData\Local\Google\Update\GoogleUpdate.exe" /c
O4 - HKCU\..\Run: [Skype] "C:\Program Files\Skype\Phone\Skype.exe" /minimized /regrun
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'NETWORK SERVICE')
O8 - Extra context menu item: Add to Google Photos Screensa&ver - res://C:\Windows\system32\GPhotos.scr/200
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Excel - res://C:\PROGRA~1\MICROS~1\Office12\EXCEL.EXE/3000
O9 - Extra button: Skype Click to Call - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~1\Office12\REFIEBAR.DLL
O16 - DPF: {62789780-B744-11D0-986B-00609731A21D} (Autodesk MapGuide ActiveX Control) - http://195.28.70.134/kapor2/lib/mgaxctrl.cab
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/s ... wflash.cab
O18 - Protocol: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O20 - AppInit_DLLs: C:\Windows\system32\guard32.dll
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe
O23 - Service: Andrea ADI Filters Service (AEADIFilters) - Andrea Electronics Corporation - C:\Windows\system32\AEADISRV.EXE
O23 - Service: Avira Scheduler (AntiVirSchedulerService) - Avira Operations GmbH & Co. KG - C:\Program Files\Avira\AntiVir Desktop\sched.exe
O23 - Service: Avira Realtime Protection (AntiVirService) - Avira Operations GmbH & Co. KG - C:\Program Files\Avira\AntiVir Desktop\avguard.exe
O23 - Service: COMODO Internet Security Helper Service (cmdAgent) - COMODO - C:\Program Files\COMODO\COMODO Internet Security\cmdagent.exe
O23 - Service: EPSON V3 Service4(01) (EPSON_PM_RPCV4_01) - SEIKO EPSON CORPORATION - C:\ProgramData\EPSON\EPW!3 SSRP\E_S40RP7.EXE
O23 - Service: Služba Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: Služba Google Update (gupdatem) (gupdatem) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: Skype C2C Service - Skype Technologies S.A. - C:\ProgramData\Skype\Toolbars\Skype C2C Service\c2c_service.exe
O23 - Service: Skype Updater (SkypeUpdate) - Skype Technologies - C:\Program Files\Skype\Updater\Updater.exe
--
End of file - 6339 bytes
======Scheduled tasks folder======
C:\Windows\tasks\GoogleUpdateTaskMachineCore1cd95abddb6e307.job
C:\Windows\tasks\GoogleUpdateTaskMachineUA.job
C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-4093114758-1149787721-3482645471-1000Core1cd969db63f91b7.job
C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-4093114758-1149787721-3482645471-1000UA.job
======Registry dump======
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
Adobe PDF Link Helper - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2012-07-27 63944]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
Java(tm) Plug-In SSV Helper - C:\Program Files\Java\jre7\bin\ssv.dll [2012-09-05 449512]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}]
Skype Browser Helper - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll [2012-10-02 4119744]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre7\bin\jp2ssv.dll [2012-09-05 157672]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"avgnt"=C:\Program Files\Avira\AntiVir Desktop\avgnt.exe [2012-09-01 348664]
"COMODO Internet Security"=C:\Program Files\COMODO\COMODO Internet Security\cfp.exe [2012-11-07 6756048]
"SunJavaUpdateSched"=C:\Program Files\Common Files\Java\Java Update\jusched.exe [2012-07-03 252848]
"Adobe ARM"=C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2012-07-27 919008]
"SoundMAX"=C:\Program Files\Analog Devices\SoundMAX\soundmax.exe [2009-05-18 3866624]
"SoundMAXPnP"=C:\Program Files\Analog Devices\Core\smax4pnp.exe [2009-06-05 1310720]
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"Google Update"=C:\Users\Gustav7\AppData\Local\Google\Update\GoogleUpdate.exe [2012-06-23 116648]
"Skype"=C:\Program Files\Skype\Phone\Skype.exe [2012-07-13 17418928]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
"AppInit_DLLs"=" C:\Windows\system32\guard32.dll"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED}
[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=credssp.dll
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorAdmin"=5
"ConsentPromptBehaviorUser"=3
"EnableUIADesktopToggle"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.msadpcm"=msadp32.acm
"midimapper"=midimap.dll
"wavemapper"=msacm32.drv
"VIDC.UYVY"=msyuv.dll
"VIDC.YUY2"=msyuv.dll
"VIDC.YVYU"=msyuv.dll
"VIDC.IYUV"=iyuv_32.dll
"vidc.i420"=iyuv_32.dll
"VIDC.YVU9"=tsbyuv.dll
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"vidc.cvid"=iccvid.dll
"MSVideo8"=VfWWDM32.dll
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv
======File associations======
.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*
======List of files/folders created in the last 1 month======
2012-11-21 15:10:59 ----D---- C:\Program Files\trend micro
2012-11-21 15:10:58 ----D---- C:\rsit
2012-11-21 14:18:10 ----D---- C:\ProgramData\SonicFocus
2012-11-21 14:13:06 ----D---- C:\Program Files\Creative
2012-11-21 14:13:06 ----A---- C:\Windows\system32\wrap_oal.dll
2012-11-21 14:13:06 ----A---- C:\Windows\system32\OpenAL32.dll
2012-11-21 14:13:05 ----N---- C:\Windows\system32\adi_oal.dll
2012-11-21 14:12:25 ----D---- C:\Program Files\Analog Devices
2012-11-19 22:43:37 ----A---- C:\Windows\system32\FNTCACHE.DAT
2012-11-03 19:35:11 ----D---- C:\Windows\pss
2012-10-31 22:00:20 ----A---- C:\Windows\system32\SmaxCo.dll
2012-10-31 22:00:19 ----A---- C:\Windows\system32\SFFXSAPO.dll
2012-10-31 22:00:19 ----A---- C:\Windows\system32\SFFXProc.dll
2012-10-31 22:00:19 ----A---- C:\Windows\system32\SFFXMAPO.dll
2012-10-31 22:00:19 ----A---- C:\Windows\system32\SFFXHAPO.dll
2012-10-31 22:00:19 ----A---- C:\Windows\system32\SFFXDAPO.dll
2012-10-31 22:00:19 ----A---- C:\Windows\system32\SFFXCPStr.dll
2012-10-31 22:00:19 ----A---- C:\Windows\system32\SFFXCPBL.dll
2012-10-31 22:00:19 ----A---- C:\Windows\system32\SFFXComm.dll
2012-10-31 22:00:19 ----A---- C:\Windows\system32\drivers\ADIHdAud.sys
2012-10-31 22:00:19 ----A---- C:\Windows\system32\AEADISRV.EXE
2012-10-31 22:00:19 ----A---- C:\Windows\system32\AEADIExt.dll
2012-10-31 22:00:19 ----A---- C:\Windows\system32\AEADIAPR.dll
2012-10-31 22:00:19 ----A---- C:\Windows\system32\AEADIAPO.dll
2012-10-24 15:13:36 ----D---- C:\Temp
2012-10-24 14:04:14 ----D---- C:\Users\Gustav7\AppData\Roaming\Samsung
2012-10-24 14:01:31 ----A---- C:\Windows\system32\Redemption.dll
2012-10-24 13:59:40 ----D---- C:\ProgramData\Samsung
2012-10-24 13:59:40 ----D---- C:\Program Files\Samsung
======List of files/folders modified in the last 1 month======
2012-11-21 15:11:02 ----D---- C:\Windows\Prefetch
2012-11-21 15:11:01 ----D---- C:\Windows\Temp
2012-11-21 15:10:59 ----RD---- C:\Program Files
2012-11-21 15:03:26 ----D---- C:\Users\Gustav7\AppData\Roaming\Skype
2012-11-21 14:18:10 ----D---- C:\Windows\System32
2012-11-21 14:18:10 ----D---- C:\ProgramData
2012-11-21 14:18:08 ----D---- C:\Windows\system32\drivers
2012-11-21 14:17:44 ----D---- C:\Windows\system32\config
2012-11-21 14:12:57 ----SHD---- C:\System Volume Information
2012-11-21 14:12:26 ----D---- C:\Windows\inf
2012-11-21 14:08:55 ----D---- C:\Windows\system32\DriverStore
2012-11-21 14:08:55 ----D---- C:\Windows\system32\catroot
2012-11-21 14:07:59 ----D---- C:\Windows
2012-11-20 21:56:07 ----D---- C:\Windows\debug
2012-11-17 01:02:10 ----D---- C:\Windows\system32\drivers\etc
2012-11-13 19:16:44 ----SHD---- C:\Windows\Installer
2012-11-13 19:16:44 ----SHD---- C:\Config.Msi
2012-11-13 19:16:44 ----HD---- C:\Program Files\InstallShield Installation Information
2012-11-13 19:15:23 ----D---- C:\Windows\system32\catroot2
2012-11-13 19:14:13 ----RSD---- C:\Windows\assembly
2012-11-08 13:48:32 ----A---- C:\Windows\system32\PerfStringBackup.INI
2012-11-07 23:37:35 ----A---- C:\Windows\system32\cmdcsr.dll
2012-11-07 23:37:34 ----A---- C:\Windows\system32\guard32.dll
2012-11-05 13:16:44 ----D---- C:\Program Files\COMODO
2012-11-05 13:16:40 ----D---- C:\Program Files\Common Files
2012-11-01 15:33:26 ----D---- C:\Windows\system32\Tasks
2012-11-01 15:30:02 ----SD---- C:\Users\Gustav7\AppData\Roaming\Microsoft
2012-10-31 21:40:03 ----D---- C:\Windows\system
2012-10-31 21:02:55 ----A---- C:\Windows\AS_Debug.txt
2012-10-31 19:16:15 ----SD---- C:\ProgramData\Microsoft
2012-10-24 14:54:27 ----D---- C:\Windows\Microsoft.NET
======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======
R0 pciide;pciide; C:\Windows\system32\DRIVERS\pciide.sys [2009-07-14 12368]
R0 rdyboost;ReadyBoost; C:\Windows\System32\drivers\rdyboost.sys [2009-07-14 173648]
R1 AsIO;AsIO; C:\Windows\system32\drivers\AsIO.sys [2012-07-02 12400]
R1 avipbb;avipbb; C:\Windows\system32\DRIVERS\avipbb.sys [2012-04-27 137928]
R1 avkmgr;avkmgr; C:\Windows\system32\DRIVERS\avkmgr.sys [2012-04-16 36000]
R1 cmdGuard;COMODO Internet Security Sandbox Driver; C:\Windows\System32\DRIVERS\cmdguard.sys [2012-11-07 494416]
R1 cmdHlp;COMODO Internet Security Helper Driver; C:\Windows\System32\DRIVERS\cmdhlp.sys [2012-11-07 36072]
R1 CSC;@%systemroot%\system32\cscsvc.dll,-202; C:\Windows\system32\drivers\csc.sys [2009-07-13 387584]
R1 inspect;COMODO Internet Security Firewall Driver; C:\Windows\system32\DRIVERS\inspect.sys [2012-11-07 82952]
R1 ssmdrv;ssmdrv; C:\Windows\system32\DRIVERS\ssmdrv.sys [2010-06-17 28520]
R2 avgntflt;avgntflt; C:\Windows\system32\DRIVERS\avgntflt.sys [2012-04-24 83392]
R2 irda;IrDA Protocol; C:\Windows\system32\DRIVERS\irda.sys [2009-07-13 96768]
R2 Parvdm;Parvdm; C:\Windows\system32\DRIVERS\parvdm.sys [2009-07-13 8704]
R3 ADIHdAudAddService;ADI UAA Function Driver for High Definition Audio Service; C:\Windows\system32\drivers\ADIHdAud.sys [2009-06-05 380416]
R3 atikmdag;atikmdag; C:\Windows\system32\DRIVERS\atikmdag.sys [2009-07-13 4194816]
R3 ICAM5USB;Intel(r) PC Camera CS110; C:\Windows\System32\Drivers\Icam5USB.sys [2001-08-17 100992]
R3 MTsensor;ATK0110 ACPI UTILITY; C:\Windows\system32\DRIVERS\ASACPI.sys [2009-10-10 13216]
R3 ROCKEYNT;Feitian ROCKEY4 Device Service; C:\Windows\system32\DRIVERS\Rockey4.sys [2012-07-13 26976]
S3 aic78xx;aic78xx; C:\Windows\system32\DRIVERS\djsvs.sys [2009-07-14 70720]
S3 amdagp;AMD AGP Bus Filter Driver; C:\Windows\system32\DRIVERS\amdagp.sys [2009-07-14 53312]
S3 androidusb;SAMSUNG Android Composite ADB Interface Driver; C:\Windows\System32\Drivers\ssadadb.sys [2011-05-13 30312]
S3 b57nd60x;Broadcom NetXtreme Gigabit Ethernet - NDIS 6.0; C:\Windows\system32\DRIVERS\b57nd60x.sys [2009-07-13 229888]
S3 dgderdrv;dgderdrv; C:\Windows\System32\drivers\dgderdrv.sys []
S3 Dot4;MS IEEE-1284.4 Driver; C:\Windows\system32\DRIVERS\Dot4.sys [2009-07-13 131072]
S3 Dot4Print;Print Class Driver for IEEE-1284.4; C:\Windows\system32\DRIVERS\Dot4Prt.sys [2009-07-13 16384]
S3 dot4usb;Dot4USB Filter Dot4USB Filter; C:\Windows\system32\DRIVERS\dot4usb.sys [2009-07-13 36864]
S3 epmntdrv;epmntdrv; \??\C:\Windows\system32\epmntdrv.sys [2011-07-29 14216]
S3 EuGdiDrv;EuGdiDrv; \??\C:\Windows\system32\EuGdiDrv.sys [2011-07-29 8456]
S3 RDPDR;Terminal Server Device Redirector Driver; C:\Windows\System32\drivers\rdpdr.sys [2009-07-14 133120]
S3 s3cap;s3cap; C:\Windows\system32\DRIVERS\vms3cap.sys [2009-07-13 5632]
S3 SenFiltService;SenFilt Service; C:\Windows\system32\drivers\Senfilt.sys []
S3 sisagp;SIS AGP Bus Filter; C:\Windows\system32\DRIVERS\sisagp.sys [2009-07-14 52304]
S3 ssadbus;SAMSUNG Android USB Composite Device driver (WDM); C:\Windows\system32\DRIVERS\ssadbus.sys [2011-05-13 121064]
S3 ssadmdfl;SAMSUNG Android USB Modem (Filter); C:\Windows\system32\DRIVERS\ssadmdfl.sys [2011-05-13 12776]
S3 ssadmdm;SAMSUNG Android USB Modem Drivers; C:\Windows\system32\DRIVERS\ssadmdm.sys [2011-05-13 136808]
S3 ssadserd;SAMSUNG Android USB Diagnostic Serial Port (WDM); C:\Windows\system32\DRIVERS\ssadserd.sys [2011-05-13 114280]
S3 storvsc;storvsc; C:\Windows\system32\DRIVERS\storvsc.sys [2009-07-14 28224]
S3 stusb2ir;USB 2.0 IrDA Bridge; C:\Windows\system32\DRIVERS\stusb2ir.sys [2004-09-07 40856]
S3 usb_rndisx;USB RNDIS Adapter; C:\Windows\system32\DRIVERS\usb8023x.sys [2009-07-13 15872]
S3 usbscan;USB Scanner Driver; C:\Windows\system32\DRIVERS\usbscan.sys [2009-07-14 35840]
S3 viaagp;VIA AGP Bus Filter; C:\Windows\system32\DRIVERS\viaagp.sys [2009-07-14 53328]
S3 ViaC7;VIA C7 Processor Driver; C:\Windows\system32\DRIVERS\viac7.sys [2009-07-13 52736]
S3 vmbus;@%SystemRoot%\system32\vmbusres.dll,-1000; C:\Windows\system32\DRIVERS\vmbus.sys [2009-07-14 175824]
S3 VMBusHID;VMBusHID; C:\Windows\system32\DRIVERS\VMBusHID.sys [2009-07-13 17920]
S3 WinUsb;WinUsb; C:\Windows\system32\DRIVERS\WinUsb.sys [2009-07-13 34944]
======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======
R2 AdobeARMservice;Adobe Acrobat Update Service; C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe [2012-07-27 63960]
R2 AEADIFilters;Andrea ADI Filters Service; C:\Windows\system32\AEADISRV.EXE [2009-06-05 90112]
R2 AntiVirService;Avira Realtime Protection; C:\Program Files\Avira\AntiVir Desktop\avguard.exe [2012-05-01 110032]
R2 AntiVirSchedulerService;Avira Scheduler; C:\Program Files\Avira\AntiVir Desktop\sched.exe [2012-05-02 86224]
R2 cmdAgent;COMODO Internet Security Helper Service; C:\Program Files\COMODO\COMODO Internet Security\cmdagent.exe [2012-11-07 1990464]
R2 CscService;@%systemroot%\system32\cscsvc.dll,-200; C:\Windows\System32\svchost.exe [2009-07-14 20992]
R2 EPSON_PM_RPCV4_01;EPSON V3 Service4(01); C:\ProgramData\EPSON\EPW!3 SSRP\E_S40RP7.EXE [2007-01-11 113664]
R2 HPSLPSVC;HP Network Devices Support; C:\Windows\system32\svchost.exe [2009-07-14 20992]
R2 Irmon;@%SystemRoot%\System32\irmon.dll,-2000; C:\Windows\system32\svchost.exe [2009-07-14 20992]
R2 Pml Driver HPZ12;Pml Driver HPZ12; C:\Windows\System32\svchost.exe [2009-07-14 20992]
R2 Skype C2C Service;Skype C2C Service; C:\ProgramData\Skype\Toolbars\Skype C2C Service\c2c_service.exe []
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
S2 gupdate;Služba Google Update (gupdate); C:\Program Files\Google\Update\GoogleUpdate.exe [2012-07-05 116648]
S2 SkypeUpdate;Skype Updater; C:\Program Files\Skype\Updater\Updater.exe [2012-06-07 160944]
S3 AppMgmt;@appmgmts.dll,-3250; C:\Windows\system32\svchost.exe [2009-07-14 20992]
S3 gupdatem;Služba Google Update (gupdatem); C:\Program Files\Google\Update\GoogleUpdate.exe [2012-07-05 116648]
S3 gusvc;Google Updater Service; C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe [2011-05-09 136120]
S3 odserv;Microsoft Office Diagnostics Service; C:\Program Files\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE [2007-08-24 443776]
S3 ose;Office Source Engine; C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2006-10-26 145184]
S3 PeerDistSvc;@%SystemRoot%\system32\peerdistsvc.dll,-9000; C:\Windows\System32\svchost.exe [2009-07-14 20992]
S3 StorSvc;@%SystemRoot%\System32\StorSvc.dll,-100; C:\Windows\System32\svchost.exe [2009-07-14 20992]
S3 UmRdpService;@%SystemRoot%\system32\umrdp.dll,-1000; C:\Windows\System32\svchost.exe [2009-07-14 20992]
-----------------EOF-----------------
Mc_Murphy - Ano, HJT se tu už sto let nepoužívá. A pokud si budeš sám odpovídat, nediv se, že si Tě nikdo nevšimne.
A nezapomeň také, že jsme tu dobrovolně, zdarma, ve svém volném čase, takže nějaké vyčkání je potřeba a připomínáním se a urgováním svého logu docílíš přesně opačného účinku.
Po dlhsej dobe som opat zamieril k vam kedze si neviem poradit.Win7 mi po zavedeni SoundMAX (myslim si ) nechce automaticky uspat sa. Skusal som vsetko mozne pomocou Dr.Google doporucene, ale bezvysledne. Stiahol som hijackthis aten mi v analyze oznacil 2 pre mna diskutabilne prvky :
O4 - HKLM\..\Run: [SoundMAX] C:\Program Files\Analog Devices\SoundMAX\soundmax.exe /tray
Špatný
Safe Musí být opraven! This entry was classified from our visitors as good.
O4 - HKCU\..\Run: [Skype] "C:\Program Files\Skype\Phone\Skype.exe" /minimized /regrun
Bezpecný.
Není nebezpecný, není potrebný. "Skype is free and simple software that will enable you to make free calls anywhere in the world in minutes"
Tu posielam kompletny log z hijackthis. Prosim vas preklepnite mi ho, ci tam nie je nieco nezelaneho.
Vdaka :
Logfile of random's system information tool 1.09 (written by random/random)
Run by Gustav7 at 2012-11-21 15:10:58
Microsoft Windows 7 Professional
System drive C: has 16 GB (53%) free of 30 GB
Total RAM: 1023 MB (16% free)
Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 15:11:02, on 21. 11. 2012
Platform: Windows 7 (WinNT 6.00.3504)
MSIE: Internet Explorer v8.00 (8.00.7600.16385)
Boot mode: Normal
Running processes:
C:\Windows\system32\Dwm.exe
C:\Windows\system32\taskhost.exe
C:\Windows\Explorer.EXE
C:\Program Files\Avira\AntiVir Desktop\avgnt.exe
C:\Program Files\COMODO\COMODO Internet Security\cfp.exe
C:\Program Files\Common Files\Java\Java Update\jusched.exe
C:\Program Files\Analog Devices\SoundMAX\SoundMAX.exe
C:\Program Files\Analog Devices\Core\smax4pnp.exe
C:\Program Files\Skype\Phone\Skype.exe
C:\Users\Gustav7\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\Gustav7\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\Gustav7\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\Gustav7\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\Gustav7\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\Gustav7\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Windows\system32\NOTEPAD.EXE
C:\Users\Gustav7\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Windows\system32\NOTEPAD.EXE
C:\Windows\system32\SearchFilterHost.exe
C:\Users\Gustav7\Downloads\RSIT.exe
C:\Program Files\trend micro\Gustav7.exe
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://uk.ask.com/?l=dis&o=15768
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll
O2 - BHO: SkypeIEPluginBHO - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll
O4 - HKLM\..\Run: [avgnt] "C:\Program Files\Avira\AntiVir Desktop\avgnt.exe" /min
O4 - HKLM\..\Run: [COMODO Internet Security] "C:\Program Files\COMODO\COMODO Internet Security\cfp.exe" -h
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Common Files\Java\Java Update\jusched.exe"
O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKLM\..\Run: [SoundMAX] C:\Program Files\Analog Devices\SoundMAX\soundmax.exe /tray
O4 - HKLM\..\Run: [SoundMAXPnP] C:\Program Files\Analog Devices\Core\smax4pnp.exe
O4 - HKCU\..\Run: [Google Update] "C:\Users\Gustav7\AppData\Local\Google\Update\GoogleUpdate.exe" /c
O4 - HKCU\..\Run: [Skype] "C:\Program Files\Skype\Phone\Skype.exe" /minimized /regrun
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'NETWORK SERVICE')
O8 - Extra context menu item: Add to Google Photos Screensa&ver - res://C:\Windows\system32\GPhotos.scr/200
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Excel - res://C:\PROGRA~1\MICROS~1\Office12\EXCEL.EXE/3000
O9 - Extra button: Skype Click to Call - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~1\Office12\REFIEBAR.DLL
O16 - DPF: {62789780-B744-11D0-986B-00609731A21D} (Autodesk MapGuide ActiveX Control) - http://195.28.70.134/kapor2/lib/mgaxctrl.cab
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/s ... wflash.cab
O18 - Protocol: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O20 - AppInit_DLLs: C:\Windows\system32\guard32.dll
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe
O23 - Service: Andrea ADI Filters Service (AEADIFilters) - Andrea Electronics Corporation - C:\Windows\system32\AEADISRV.EXE
O23 - Service: Avira Scheduler (AntiVirSchedulerService) - Avira Operations GmbH & Co. KG - C:\Program Files\Avira\AntiVir Desktop\sched.exe
O23 - Service: Avira Realtime Protection (AntiVirService) - Avira Operations GmbH & Co. KG - C:\Program Files\Avira\AntiVir Desktop\avguard.exe
O23 - Service: COMODO Internet Security Helper Service (cmdAgent) - COMODO - C:\Program Files\COMODO\COMODO Internet Security\cmdagent.exe
O23 - Service: EPSON V3 Service4(01) (EPSON_PM_RPCV4_01) - SEIKO EPSON CORPORATION - C:\ProgramData\EPSON\EPW!3 SSRP\E_S40RP7.EXE
O23 - Service: Služba Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: Služba Google Update (gupdatem) (gupdatem) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: Skype C2C Service - Skype Technologies S.A. - C:\ProgramData\Skype\Toolbars\Skype C2C Service\c2c_service.exe
O23 - Service: Skype Updater (SkypeUpdate) - Skype Technologies - C:\Program Files\Skype\Updater\Updater.exe
--
End of file - 6339 bytes
======Scheduled tasks folder======
C:\Windows\tasks\GoogleUpdateTaskMachineCore1cd95abddb6e307.job
C:\Windows\tasks\GoogleUpdateTaskMachineUA.job
C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-4093114758-1149787721-3482645471-1000Core1cd969db63f91b7.job
C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-4093114758-1149787721-3482645471-1000UA.job
======Registry dump======
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
Adobe PDF Link Helper - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2012-07-27 63944]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
Java(tm) Plug-In SSV Helper - C:\Program Files\Java\jre7\bin\ssv.dll [2012-09-05 449512]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}]
Skype Browser Helper - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll [2012-10-02 4119744]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre7\bin\jp2ssv.dll [2012-09-05 157672]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"avgnt"=C:\Program Files\Avira\AntiVir Desktop\avgnt.exe [2012-09-01 348664]
"COMODO Internet Security"=C:\Program Files\COMODO\COMODO Internet Security\cfp.exe [2012-11-07 6756048]
"SunJavaUpdateSched"=C:\Program Files\Common Files\Java\Java Update\jusched.exe [2012-07-03 252848]
"Adobe ARM"=C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2012-07-27 919008]
"SoundMAX"=C:\Program Files\Analog Devices\SoundMAX\soundmax.exe [2009-05-18 3866624]
"SoundMAXPnP"=C:\Program Files\Analog Devices\Core\smax4pnp.exe [2009-06-05 1310720]
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"Google Update"=C:\Users\Gustav7\AppData\Local\Google\Update\GoogleUpdate.exe [2012-06-23 116648]
"Skype"=C:\Program Files\Skype\Phone\Skype.exe [2012-07-13 17418928]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
"AppInit_DLLs"=" C:\Windows\system32\guard32.dll"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED}
[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=credssp.dll
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorAdmin"=5
"ConsentPromptBehaviorUser"=3
"EnableUIADesktopToggle"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.msadpcm"=msadp32.acm
"midimapper"=midimap.dll
"wavemapper"=msacm32.drv
"VIDC.UYVY"=msyuv.dll
"VIDC.YUY2"=msyuv.dll
"VIDC.YVYU"=msyuv.dll
"VIDC.IYUV"=iyuv_32.dll
"vidc.i420"=iyuv_32.dll
"VIDC.YVU9"=tsbyuv.dll
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"vidc.cvid"=iccvid.dll
"MSVideo8"=VfWWDM32.dll
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv
======File associations======
.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*
======List of files/folders created in the last 1 month======
2012-11-21 15:10:59 ----D---- C:\Program Files\trend micro
2012-11-21 15:10:58 ----D---- C:\rsit
2012-11-21 14:18:10 ----D---- C:\ProgramData\SonicFocus
2012-11-21 14:13:06 ----D---- C:\Program Files\Creative
2012-11-21 14:13:06 ----A---- C:\Windows\system32\wrap_oal.dll
2012-11-21 14:13:06 ----A---- C:\Windows\system32\OpenAL32.dll
2012-11-21 14:13:05 ----N---- C:\Windows\system32\adi_oal.dll
2012-11-21 14:12:25 ----D---- C:\Program Files\Analog Devices
2012-11-19 22:43:37 ----A---- C:\Windows\system32\FNTCACHE.DAT
2012-11-03 19:35:11 ----D---- C:\Windows\pss
2012-10-31 22:00:20 ----A---- C:\Windows\system32\SmaxCo.dll
2012-10-31 22:00:19 ----A---- C:\Windows\system32\SFFXSAPO.dll
2012-10-31 22:00:19 ----A---- C:\Windows\system32\SFFXProc.dll
2012-10-31 22:00:19 ----A---- C:\Windows\system32\SFFXMAPO.dll
2012-10-31 22:00:19 ----A---- C:\Windows\system32\SFFXHAPO.dll
2012-10-31 22:00:19 ----A---- C:\Windows\system32\SFFXDAPO.dll
2012-10-31 22:00:19 ----A---- C:\Windows\system32\SFFXCPStr.dll
2012-10-31 22:00:19 ----A---- C:\Windows\system32\SFFXCPBL.dll
2012-10-31 22:00:19 ----A---- C:\Windows\system32\SFFXComm.dll
2012-10-31 22:00:19 ----A---- C:\Windows\system32\drivers\ADIHdAud.sys
2012-10-31 22:00:19 ----A---- C:\Windows\system32\AEADISRV.EXE
2012-10-31 22:00:19 ----A---- C:\Windows\system32\AEADIExt.dll
2012-10-31 22:00:19 ----A---- C:\Windows\system32\AEADIAPR.dll
2012-10-31 22:00:19 ----A---- C:\Windows\system32\AEADIAPO.dll
2012-10-24 15:13:36 ----D---- C:\Temp
2012-10-24 14:04:14 ----D---- C:\Users\Gustav7\AppData\Roaming\Samsung
2012-10-24 14:01:31 ----A---- C:\Windows\system32\Redemption.dll
2012-10-24 13:59:40 ----D---- C:\ProgramData\Samsung
2012-10-24 13:59:40 ----D---- C:\Program Files\Samsung
======List of files/folders modified in the last 1 month======
2012-11-21 15:11:02 ----D---- C:\Windows\Prefetch
2012-11-21 15:11:01 ----D---- C:\Windows\Temp
2012-11-21 15:10:59 ----RD---- C:\Program Files
2012-11-21 15:03:26 ----D---- C:\Users\Gustav7\AppData\Roaming\Skype
2012-11-21 14:18:10 ----D---- C:\Windows\System32
2012-11-21 14:18:10 ----D---- C:\ProgramData
2012-11-21 14:18:08 ----D---- C:\Windows\system32\drivers
2012-11-21 14:17:44 ----D---- C:\Windows\system32\config
2012-11-21 14:12:57 ----SHD---- C:\System Volume Information
2012-11-21 14:12:26 ----D---- C:\Windows\inf
2012-11-21 14:08:55 ----D---- C:\Windows\system32\DriverStore
2012-11-21 14:08:55 ----D---- C:\Windows\system32\catroot
2012-11-21 14:07:59 ----D---- C:\Windows
2012-11-20 21:56:07 ----D---- C:\Windows\debug
2012-11-17 01:02:10 ----D---- C:\Windows\system32\drivers\etc
2012-11-13 19:16:44 ----SHD---- C:\Windows\Installer
2012-11-13 19:16:44 ----SHD---- C:\Config.Msi
2012-11-13 19:16:44 ----HD---- C:\Program Files\InstallShield Installation Information
2012-11-13 19:15:23 ----D---- C:\Windows\system32\catroot2
2012-11-13 19:14:13 ----RSD---- C:\Windows\assembly
2012-11-08 13:48:32 ----A---- C:\Windows\system32\PerfStringBackup.INI
2012-11-07 23:37:35 ----A---- C:\Windows\system32\cmdcsr.dll
2012-11-07 23:37:34 ----A---- C:\Windows\system32\guard32.dll
2012-11-05 13:16:44 ----D---- C:\Program Files\COMODO
2012-11-05 13:16:40 ----D---- C:\Program Files\Common Files
2012-11-01 15:33:26 ----D---- C:\Windows\system32\Tasks
2012-11-01 15:30:02 ----SD---- C:\Users\Gustav7\AppData\Roaming\Microsoft
2012-10-31 21:40:03 ----D---- C:\Windows\system
2012-10-31 21:02:55 ----A---- C:\Windows\AS_Debug.txt
2012-10-31 19:16:15 ----SD---- C:\ProgramData\Microsoft
2012-10-24 14:54:27 ----D---- C:\Windows\Microsoft.NET
======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======
R0 pciide;pciide; C:\Windows\system32\DRIVERS\pciide.sys [2009-07-14 12368]
R0 rdyboost;ReadyBoost; C:\Windows\System32\drivers\rdyboost.sys [2009-07-14 173648]
R1 AsIO;AsIO; C:\Windows\system32\drivers\AsIO.sys [2012-07-02 12400]
R1 avipbb;avipbb; C:\Windows\system32\DRIVERS\avipbb.sys [2012-04-27 137928]
R1 avkmgr;avkmgr; C:\Windows\system32\DRIVERS\avkmgr.sys [2012-04-16 36000]
R1 cmdGuard;COMODO Internet Security Sandbox Driver; C:\Windows\System32\DRIVERS\cmdguard.sys [2012-11-07 494416]
R1 cmdHlp;COMODO Internet Security Helper Driver; C:\Windows\System32\DRIVERS\cmdhlp.sys [2012-11-07 36072]
R1 CSC;@%systemroot%\system32\cscsvc.dll,-202; C:\Windows\system32\drivers\csc.sys [2009-07-13 387584]
R1 inspect;COMODO Internet Security Firewall Driver; C:\Windows\system32\DRIVERS\inspect.sys [2012-11-07 82952]
R1 ssmdrv;ssmdrv; C:\Windows\system32\DRIVERS\ssmdrv.sys [2010-06-17 28520]
R2 avgntflt;avgntflt; C:\Windows\system32\DRIVERS\avgntflt.sys [2012-04-24 83392]
R2 irda;IrDA Protocol; C:\Windows\system32\DRIVERS\irda.sys [2009-07-13 96768]
R2 Parvdm;Parvdm; C:\Windows\system32\DRIVERS\parvdm.sys [2009-07-13 8704]
R3 ADIHdAudAddService;ADI UAA Function Driver for High Definition Audio Service; C:\Windows\system32\drivers\ADIHdAud.sys [2009-06-05 380416]
R3 atikmdag;atikmdag; C:\Windows\system32\DRIVERS\atikmdag.sys [2009-07-13 4194816]
R3 ICAM5USB;Intel(r) PC Camera CS110; C:\Windows\System32\Drivers\Icam5USB.sys [2001-08-17 100992]
R3 MTsensor;ATK0110 ACPI UTILITY; C:\Windows\system32\DRIVERS\ASACPI.sys [2009-10-10 13216]
R3 ROCKEYNT;Feitian ROCKEY4 Device Service; C:\Windows\system32\DRIVERS\Rockey4.sys [2012-07-13 26976]
S3 aic78xx;aic78xx; C:\Windows\system32\DRIVERS\djsvs.sys [2009-07-14 70720]
S3 amdagp;AMD AGP Bus Filter Driver; C:\Windows\system32\DRIVERS\amdagp.sys [2009-07-14 53312]
S3 androidusb;SAMSUNG Android Composite ADB Interface Driver; C:\Windows\System32\Drivers\ssadadb.sys [2011-05-13 30312]
S3 b57nd60x;Broadcom NetXtreme Gigabit Ethernet - NDIS 6.0; C:\Windows\system32\DRIVERS\b57nd60x.sys [2009-07-13 229888]
S3 dgderdrv;dgderdrv; C:\Windows\System32\drivers\dgderdrv.sys []
S3 Dot4;MS IEEE-1284.4 Driver; C:\Windows\system32\DRIVERS\Dot4.sys [2009-07-13 131072]
S3 Dot4Print;Print Class Driver for IEEE-1284.4; C:\Windows\system32\DRIVERS\Dot4Prt.sys [2009-07-13 16384]
S3 dot4usb;Dot4USB Filter Dot4USB Filter; C:\Windows\system32\DRIVERS\dot4usb.sys [2009-07-13 36864]
S3 epmntdrv;epmntdrv; \??\C:\Windows\system32\epmntdrv.sys [2011-07-29 14216]
S3 EuGdiDrv;EuGdiDrv; \??\C:\Windows\system32\EuGdiDrv.sys [2011-07-29 8456]
S3 RDPDR;Terminal Server Device Redirector Driver; C:\Windows\System32\drivers\rdpdr.sys [2009-07-14 133120]
S3 s3cap;s3cap; C:\Windows\system32\DRIVERS\vms3cap.sys [2009-07-13 5632]
S3 SenFiltService;SenFilt Service; C:\Windows\system32\drivers\Senfilt.sys []
S3 sisagp;SIS AGP Bus Filter; C:\Windows\system32\DRIVERS\sisagp.sys [2009-07-14 52304]
S3 ssadbus;SAMSUNG Android USB Composite Device driver (WDM); C:\Windows\system32\DRIVERS\ssadbus.sys [2011-05-13 121064]
S3 ssadmdfl;SAMSUNG Android USB Modem (Filter); C:\Windows\system32\DRIVERS\ssadmdfl.sys [2011-05-13 12776]
S3 ssadmdm;SAMSUNG Android USB Modem Drivers; C:\Windows\system32\DRIVERS\ssadmdm.sys [2011-05-13 136808]
S3 ssadserd;SAMSUNG Android USB Diagnostic Serial Port (WDM); C:\Windows\system32\DRIVERS\ssadserd.sys [2011-05-13 114280]
S3 storvsc;storvsc; C:\Windows\system32\DRIVERS\storvsc.sys [2009-07-14 28224]
S3 stusb2ir;USB 2.0 IrDA Bridge; C:\Windows\system32\DRIVERS\stusb2ir.sys [2004-09-07 40856]
S3 usb_rndisx;USB RNDIS Adapter; C:\Windows\system32\DRIVERS\usb8023x.sys [2009-07-13 15872]
S3 usbscan;USB Scanner Driver; C:\Windows\system32\DRIVERS\usbscan.sys [2009-07-14 35840]
S3 viaagp;VIA AGP Bus Filter; C:\Windows\system32\DRIVERS\viaagp.sys [2009-07-14 53328]
S3 ViaC7;VIA C7 Processor Driver; C:\Windows\system32\DRIVERS\viac7.sys [2009-07-13 52736]
S3 vmbus;@%SystemRoot%\system32\vmbusres.dll,-1000; C:\Windows\system32\DRIVERS\vmbus.sys [2009-07-14 175824]
S3 VMBusHID;VMBusHID; C:\Windows\system32\DRIVERS\VMBusHID.sys [2009-07-13 17920]
S3 WinUsb;WinUsb; C:\Windows\system32\DRIVERS\WinUsb.sys [2009-07-13 34944]
======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======
R2 AdobeARMservice;Adobe Acrobat Update Service; C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe [2012-07-27 63960]
R2 AEADIFilters;Andrea ADI Filters Service; C:\Windows\system32\AEADISRV.EXE [2009-06-05 90112]
R2 AntiVirService;Avira Realtime Protection; C:\Program Files\Avira\AntiVir Desktop\avguard.exe [2012-05-01 110032]
R2 AntiVirSchedulerService;Avira Scheduler; C:\Program Files\Avira\AntiVir Desktop\sched.exe [2012-05-02 86224]
R2 cmdAgent;COMODO Internet Security Helper Service; C:\Program Files\COMODO\COMODO Internet Security\cmdagent.exe [2012-11-07 1990464]
R2 CscService;@%systemroot%\system32\cscsvc.dll,-200; C:\Windows\System32\svchost.exe [2009-07-14 20992]
R2 EPSON_PM_RPCV4_01;EPSON V3 Service4(01); C:\ProgramData\EPSON\EPW!3 SSRP\E_S40RP7.EXE [2007-01-11 113664]
R2 HPSLPSVC;HP Network Devices Support; C:\Windows\system32\svchost.exe [2009-07-14 20992]
R2 Irmon;@%SystemRoot%\System32\irmon.dll,-2000; C:\Windows\system32\svchost.exe [2009-07-14 20992]
R2 Pml Driver HPZ12;Pml Driver HPZ12; C:\Windows\System32\svchost.exe [2009-07-14 20992]
R2 Skype C2C Service;Skype C2C Service; C:\ProgramData\Skype\Toolbars\Skype C2C Service\c2c_service.exe []
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
S2 gupdate;Služba Google Update (gupdate); C:\Program Files\Google\Update\GoogleUpdate.exe [2012-07-05 116648]
S2 SkypeUpdate;Skype Updater; C:\Program Files\Skype\Updater\Updater.exe [2012-06-07 160944]
S3 AppMgmt;@appmgmts.dll,-3250; C:\Windows\system32\svchost.exe [2009-07-14 20992]
S3 gupdatem;Služba Google Update (gupdatem); C:\Program Files\Google\Update\GoogleUpdate.exe [2012-07-05 116648]
S3 gusvc;Google Updater Service; C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe [2011-05-09 136120]
S3 odserv;Microsoft Office Diagnostics Service; C:\Program Files\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE [2007-08-24 443776]
S3 ose;Office Source Engine; C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2006-10-26 145184]
S3 PeerDistSvc;@%SystemRoot%\system32\peerdistsvc.dll,-9000; C:\Windows\System32\svchost.exe [2009-07-14 20992]
S3 StorSvc;@%SystemRoot%\System32\StorSvc.dll,-100; C:\Windows\System32\svchost.exe [2009-07-14 20992]
S3 UmRdpService;@%SystemRoot%\system32\umrdp.dll,-1000; C:\Windows\System32\svchost.exe [2009-07-14 20992]
-----------------EOF-----------------
Mc_Murphy - Ano, HJT se tu už sto let nepoužívá. A pokud si budeš sám odpovídat, nediv se, že si Tě nikdo nevšimne.
A nezapomeň také, že jsme tu dobrovolně, zdarma, ve svém volném čase, takže nějaké vyčkání je potřeba a připomínáním se a urgováním svého logu docílíš přesně opačného účinku.
Naposledy upravil(a) Mc_Murphy dne 22 Lis 2012 14:44, celkem upraveno 1 x.
Důvod: Příspěvky sloučeny do jednoho.
Důvod: Příspěvky sloučeny do jednoho.
Re: PC neuspava.
Dobrý den,
omlouvám se za pozdní odpověď.
Problém stále přetrvává?
Poprosím i o druhý log ze rsitu s názvem info.txt.
omlouvám se za pozdní odpověď.
Problém stále přetrvává?
Poprosím i o druhý log ze rsitu s názvem info.txt.
Nepoužívejte COMBOFIX bez doporučení rádce, může dojít k poškození systému!
Vždy před odvirováním počítače zazálohujte důležitá data
Chcete podpořit naše forum? Informace zde

K zastižení jsem spíše v noci, mezi 21.-23. hodinou
Pokud máte nějaké dotazy, můžete mi napsat na email Motji(zavináč)forum.viry.cz.
Vždy před odvirováním počítače zazálohujte důležitá data
Chcete podpořit naše forum? Informace zde

K zastižení jsem spíše v noci, mezi 21.-23. hodinou
Pokud máte nějaké dotazy, můžete mi napsat na email Motji(zavináč)forum.viry.cz.
Re: PC neuspava.
Dobry vecer prajem.
V prvom rade ma potesilo, ze ste na mna nezabudli, za co vam uprimne dakujem
Problem sa po RSIT a ComboFix ( ospravedlnujem sa za nepozornost) na chvilku odstranil, ale po case sa vratil. Detaily si uz zial nepamatam, snad to zistite z novevo RSIT, ktory prikladam.
Novy RSIT:
Logfile of random's system information tool 1.09 (written by random/random)
Run by Gustav7 at 2012-12-04 19:38:04
Microsoft Windows 7 Professional
System drive C: has 14 GB (47%) free of 30 GB
Total RAM: 1023 MB (39% free)
Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 19:38:26, on 4. 12. 2012
Platform: Windows 7 (WinNT 6.00.3504)
MSIE: Internet Explorer v8.00 (8.00.7600.16385)
Boot mode: Normal
Running processes:
C:\Windows\system32\taskhost.exe
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Program Files\Avira\AntiVir Desktop\avgnt.exe
C:\Program Files\COMODO\COMODO Internet Security\cfp.exe
C:\Program Files\Common Files\Java\Java Update\jusched.exe
C:\Program Files\Analog Devices\Core\smax4pnp.exe
C:\Program Files\Skype\Phone\Skype.exe
C:\Program Files\Analog Devices\SoundMAX\SoundMAX.exe
C:\Users\Gustav7\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\Gustav7\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\Gustav7\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\Gustav7\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\Gustav7\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\Gustav7\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\Gustav7\Downloads\RSIT.exe
C:\Program Files\trend micro\Gustav7.exe
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://uk.ask.com/?l=dis&o=15768
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll
O2 - BHO: SkypeIEPluginBHO - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll
O4 - HKLM\..\Run: [avgnt] "C:\Program Files\Avira\AntiVir Desktop\avgnt.exe" /min
O4 - HKLM\..\Run: [COMODO Internet Security] "C:\Program Files\COMODO\COMODO Internet Security\cfp.exe" -h
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Common Files\Java\Java Update\jusched.exe"
O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKLM\..\Run: [SoundMAXPnP] C:\Program Files\Analog Devices\Core\smax4pnp.exe
O4 - HKCU\..\Run: [Skype] "C:\Program Files\Skype\Phone\Skype.exe" /minimized /regrun
O4 - HKCU\..\Run: [SoundMax] "C:\Program Files\Analog Devices\SoundMAX\SoundMAX.exe" /tray
O8 - Extra context menu item: Add to Google Photos Screensa&ver - res://C:\Windows\system32\GPhotos.scr/200
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Excel - res://C:\PROGRA~1\MICROS~1\Office12\EXCEL.EXE/3000
O9 - Extra button: Skype Click to Call - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~1\Office12\REFIEBAR.DLL
O16 - DPF: {62789780-B744-11D0-986B-00609731A21D} (Autodesk MapGuide ActiveX Control) - http://195.28.70.134/kapor2/lib/mgaxctrl.cab
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/s ... wflash.cab
O18 - Protocol: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O20 - AppInit_DLLs: C:\Windows\System32\guard32.dll
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe
O23 - Service: Andrea ADI Filters Service (AEADIFilters) - Andrea Electronics Corporation - C:\Windows\system32\AEADISRV.EXE
O23 - Service: Avira Scheduler (AntiVirSchedulerService) - Avira Operations GmbH & Co. KG - C:\Program Files\Avira\AntiVir Desktop\sched.exe
O23 - Service: Avira Realtime Protection (AntiVirService) - Avira Operations GmbH & Co. KG - C:\Program Files\Avira\AntiVir Desktop\avguard.exe
O23 - Service: COMODO Internet Security Helper Service (cmdAgent) - COMODO - C:\Program Files\COMODO\COMODO Internet Security\cmdagent.exe
O23 - Service: EPSON V3 Service4(01) (EPSON_PM_RPCV4_01) - SEIKO EPSON CORPORATION - C:\ProgramData\EPSON\EPW!3 SSRP\E_S40RP7.EXE
O23 - Service: Služba Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: Služba Google Update (gupdatem) (gupdatem) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: Skype C2C Service - Skype Technologies S.A. - C:\ProgramData\Skype\Toolbars\Skype C2C Service\c2c_service.exe
O23 - Service: Skype Updater (SkypeUpdate) - Skype Technologies - C:\Program Files\Skype\Updater\Updater.exe
--
End of file - 5482 bytes
======Scheduled tasks folder======
C:\Windows\tasks\GoogleUpdateTaskMachineCore1cd95abddb6e307.job
C:\Windows\tasks\GoogleUpdateTaskMachineUA.job
C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-4093114758-1149787721-3482645471-1000Core1cd969db63f91b7.job
C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-4093114758-1149787721-3482645471-1000UA.job
======Registry dump======
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
Adobe PDF Link Helper - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2012-07-27 63944]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
Java(tm) Plug-In SSV Helper - C:\Program Files\Java\jre7\bin\ssv.dll [2012-09-25 449512]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}]
Skype Browser Helper - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll [2012-11-22 4529344]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre7\bin\jp2ssv.dll [2012-09-25 155384]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"avgnt"=C:\Program Files\Avira\AntiVir Desktop\avgnt.exe [2012-09-01 348664]
"COMODO Internet Security"=C:\Program Files\COMODO\COMODO Internet Security\cfp.exe [2012-11-07 6756048]
"SunJavaUpdateSched"=C:\Program Files\Common Files\Java\Java Update\jusched.exe [2012-07-03 252848]
"Adobe ARM"=C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2012-07-27 919008]
"SoundMAXPnP"=C:\Program Files\Analog Devices\Core\smax4pnp.exe [2009-06-05 1310720]
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"Skype"=C:\Program Files\Skype\Phone\Skype.exe [2012-11-09 17877168]
"SoundMax"=C:\Program Files\Analog Devices\SoundMAX\SoundMAX.exe [2009-05-18 3866624]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
"AppInit_DLLs"="C:\Windows\System32\guard32.dll"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED}
[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=credssp.dll
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorAdmin"=5
"ConsentPromptBehaviorUser"=3
"EnableUIADesktopToggle"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDrives"=0
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDrives"=0
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.msadpcm"=msadp32.acm
"midimapper"=midimap.dll
"wavemapper"=msacm32.drv
"VIDC.UYVY"=msyuv.dll
"VIDC.YUY2"=msyuv.dll
"VIDC.YVYU"=msyuv.dll
"VIDC.IYUV"=iyuv_32.dll
"vidc.i420"=iyuv_32.dll
"VIDC.YVU9"=tsbyuv.dll
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"vidc.cvid"=iccvid.dll
"MSVideo8"=VfWWDM32.dll
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv
======File associations======
.js - edit - C:\Windows\System32\Notepad.exe %1
======List of files/folders created in the last 1 month======
2012-11-22 13:14:53 ----D---- C:\Windows\temp
2012-11-22 13:14:51 ----A---- C:\ComboFix.txt
2012-11-22 13:12:04 ----SHD---- C:\$RECYCLE.BIN
2012-11-22 13:00:49 ----A---- C:\Windows\zip.exe
2012-11-22 13:00:49 ----A---- C:\Windows\SWSC.exe
2012-11-22 13:00:49 ----A---- C:\Windows\SWREG.exe
2012-11-22 13:00:49 ----A---- C:\Windows\sed.exe
2012-11-22 13:00:49 ----A---- C:\Windows\PEV.exe
2012-11-22 13:00:49 ----A---- C:\Windows\NIRCMD.exe
2012-11-22 13:00:49 ----A---- C:\Windows\MBR.exe
2012-11-22 13:00:49 ----A---- C:\Windows\grep.exe
2012-11-22 12:58:28 ----D---- C:\Qoobox
2012-11-22 12:57:44 ----D---- C:\Windows\erdnt
2012-11-21 22:13:27 ----D---- C:\Program Files\Common Files\Skype
2012-11-21 22:03:04 ----A---- C:\Windows\system32\WindowsAccessBridge.dll
2012-11-21 22:03:04 ----A---- C:\Windows\system32\javaw.exe
2012-11-21 22:03:04 ----A---- C:\Windows\system32\java.exe
2012-11-21 15:10:59 ----D---- C:\Program Files\trend micro
2012-11-21 15:10:58 ----D---- C:\rsit
2012-11-21 14:18:10 ----D---- C:\ProgramData\SonicFocus
2012-11-21 14:13:06 ----D---- C:\Program Files\Creative
2012-11-21 14:13:06 ----A---- C:\Windows\system32\wrap_oal.dll
2012-11-21 14:13:06 ----A---- C:\Windows\system32\OpenAL32.dll
2012-11-21 14:13:05 ----N---- C:\Windows\system32\adi_oal.dll
2012-11-21 14:12:25 ----D---- C:\Program Files\Analog Devices
2012-11-19 22:43:37 ----A---- C:\Windows\system32\FNTCACHE.DAT
======List of files/folders modified in the last 1 month======
2012-12-04 19:38:16 ----D---- C:\Windows\Prefetch
2012-12-04 19:37:58 ----D---- C:\Users\Gustav7\AppData\Roaming\Skype
2012-12-04 10:28:45 ----SHD---- C:\Windows\Installer
2012-12-04 10:28:45 ----D---- C:\Config.Msi
2012-12-01 00:11:32 ----D---- C:\Windows\system32\config
2012-12-01 00:00:19 ----SHD---- C:\System Volume Information
2012-11-27 21:31:37 ----D---- C:\Users\Gustav7\AppData\Roaming\MOBILedit
2012-11-24 23:59:53 ----D---- C:\ProgramData\Skype
2012-11-22 13:14:55 ----D---- C:\Windows\system32\drivers
2012-11-22 13:14:53 ----D---- C:\Windows
2012-11-22 13:11:54 ----A---- C:\Windows\system.ini
2012-11-22 13:09:07 ----D---- C:\Windows\system32\drivers\etc
2012-11-22 13:05:51 ----D---- C:\Windows\System32
2012-11-22 13:05:51 ----D---- C:\Windows\AppPatch
2012-11-22 13:05:48 ----D---- C:\Program Files\Common Files
2012-11-21 22:13:27 ----RD---- C:\Program Files\Skype
2012-11-21 22:03:04 ----D---- C:\Program Files\Java
2012-11-21 15:10:59 ----RD---- C:\Program Files
2012-11-21 14:18:10 ----D---- C:\ProgramData
2012-11-21 14:12:26 ----D---- C:\Windows\inf
2012-11-21 14:08:55 ----D---- C:\Windows\system32\DriverStore
2012-11-21 14:08:55 ----D---- C:\Windows\system32\catroot
2012-11-20 21:56:07 ----D---- C:\Windows\debug
2012-11-13 19:16:50 ----D---- C:\Users\Gustav7\AppData\Roaming\Samsung
2012-11-13 19:16:50 ----D---- C:\Program Files\Samsung
2012-11-13 19:16:46 ----D---- C:\ProgramData\Samsung
2012-11-13 19:16:44 ----HD---- C:\Program Files\InstallShield Installation Information
2012-11-13 19:15:23 ----D---- C:\Windows\system32\catroot2
2012-11-13 19:14:13 ----RSD---- C:\Windows\assembly
2012-11-08 13:48:32 ----A---- C:\Windows\system32\PerfStringBackup.INI
2012-11-07 23:37:35 ----A---- C:\Windows\system32\cmdcsr.dll
2012-11-07 23:37:34 ----A---- C:\Windows\system32\guard32.dll
2012-11-05 13:16:44 ----D---- C:\Program Files\COMODO
======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======
R0 pciide;pciide; C:\Windows\system32\DRIVERS\pciide.sys [2009-07-14 12368]
R0 rdyboost;ReadyBoost; C:\Windows\System32\drivers\rdyboost.sys [2009-07-14 173648]
R1 AsIO;AsIO; C:\Windows\system32\drivers\AsIO.sys [2012-07-02 12400]
R1 avipbb;avipbb; C:\Windows\system32\DRIVERS\avipbb.sys [2012-04-27 137928]
R1 avkmgr;avkmgr; C:\Windows\system32\DRIVERS\avkmgr.sys [2012-04-16 36000]
R1 cmdGuard;COMODO Internet Security Sandbox Driver; C:\Windows\System32\DRIVERS\cmdguard.sys [2012-11-07 494416]
R1 cmdHlp;COMODO Internet Security Helper Driver; C:\Windows\System32\DRIVERS\cmdhlp.sys [2012-11-07 36072]
R1 CSC;@%systemroot%\system32\cscsvc.dll,-202; C:\Windows\system32\drivers\csc.sys [2009-07-13 387584]
R1 inspect;COMODO Internet Security Firewall Driver; C:\Windows\system32\DRIVERS\inspect.sys [2012-11-07 82952]
R1 ssmdrv;ssmdrv; C:\Windows\system32\DRIVERS\ssmdrv.sys [2010-06-17 28520]
R2 avgntflt;avgntflt; C:\Windows\system32\DRIVERS\avgntflt.sys [2012-04-24 83392]
R2 irda;IrDA Protocol; C:\Windows\system32\DRIVERS\irda.sys [2009-07-13 96768]
R2 Parvdm;Parvdm; C:\Windows\system32\DRIVERS\parvdm.sys [2009-07-13 8704]
R3 ADIHdAudAddService;ADI UAA Function Driver for High Definition Audio Service; C:\Windows\system32\drivers\ADIHdAud.sys [2009-06-05 380416]
R3 atikmdag;atikmdag; C:\Windows\system32\DRIVERS\atikmdag.sys [2009-07-13 4194816]
R3 ICAM5USB;Intel(r) PC Camera CS110; C:\Windows\System32\Drivers\Icam5USB.sys [2001-08-17 100992]
R3 MTsensor;ATK0110 ACPI UTILITY; C:\Windows\system32\DRIVERS\ASACPI.sys [2009-10-10 13216]
R3 ROCKEYNT;Feitian ROCKEY4 Device Service; C:\Windows\system32\DRIVERS\Rockey4.sys [2012-07-13 26976]
S3 aic78xx;aic78xx; C:\Windows\system32\DRIVERS\djsvs.sys [2009-07-14 70720]
S3 amdagp;AMD AGP Bus Filter Driver; C:\Windows\system32\DRIVERS\amdagp.sys [2009-07-14 53312]
S3 androidusb;SAMSUNG Android Composite ADB Interface Driver; C:\Windows\System32\Drivers\ssadadb.sys [2011-05-13 30312]
S3 b57nd60x;Broadcom NetXtreme Gigabit Ethernet - NDIS 6.0; C:\Windows\system32\DRIVERS\b57nd60x.sys [2009-07-13 229888]
S3 BridgeMP;@%SystemRoot%\system32\bridgeres.dll,-1; C:\Windows\system32\DRIVERS\bridge.sys [2009-07-14 78336]
S3 catchme;catchme; \??\C:\Users\Gustav7\AppData\Local\Temp\catchme.sys []
S3 dgderdrv;dgderdrv; C:\Windows\System32\drivers\dgderdrv.sys []
S3 Dot4;MS IEEE-1284.4 Driver; C:\Windows\system32\DRIVERS\Dot4.sys [2009-07-13 131072]
S3 Dot4Print;Print Class Driver for IEEE-1284.4; C:\Windows\system32\DRIVERS\Dot4Prt.sys [2009-07-13 16384]
S3 dot4usb;Dot4USB Filter Dot4USB Filter; C:\Windows\system32\DRIVERS\dot4usb.sys [2009-07-13 36864]
S3 epmntdrv;epmntdrv; \??\C:\Windows\system32\epmntdrv.sys [2011-07-29 14216]
S3 EuGdiDrv;EuGdiDrv; \??\C:\Windows\system32\EuGdiDrv.sys [2011-07-29 8456]
S3 RDPDR;Terminal Server Device Redirector Driver; C:\Windows\System32\drivers\rdpdr.sys [2009-07-14 133120]
S3 s3cap;s3cap; C:\Windows\system32\DRIVERS\vms3cap.sys [2009-07-13 5632]
S3 SenFiltService;SenFilt Service; C:\Windows\system32\drivers\Senfilt.sys []
S3 sisagp;SIS AGP Bus Filter; C:\Windows\system32\DRIVERS\sisagp.sys [2009-07-14 52304]
S3 ssadbus;SAMSUNG Android USB Composite Device driver (WDM); C:\Windows\system32\DRIVERS\ssadbus.sys [2011-05-13 121064]
S3 ssadmdfl;SAMSUNG Android USB Modem (Filter); C:\Windows\system32\DRIVERS\ssadmdfl.sys [2011-05-13 12776]
S3 ssadmdm;SAMSUNG Android USB Modem Drivers; C:\Windows\system32\DRIVERS\ssadmdm.sys [2011-05-13 136808]
S3 ssadserd;SAMSUNG Android USB Diagnostic Serial Port (WDM); C:\Windows\system32\DRIVERS\ssadserd.sys [2011-05-13 114280]
S3 storvsc;storvsc; C:\Windows\system32\DRIVERS\storvsc.sys [2009-07-14 28224]
S3 stusb2ir;USB 2.0 IrDA Bridge; C:\Windows\system32\DRIVERS\stusb2ir.sys [2004-09-07 40856]
S3 usb_rndisx;USB RNDIS Adapter; C:\Windows\system32\DRIVERS\usb8023x.sys [2009-07-13 15872]
S3 usbscan;USB Scanner Driver; C:\Windows\system32\DRIVERS\usbscan.sys [2009-07-14 35840]
S3 viaagp;VIA AGP Bus Filter; C:\Windows\system32\DRIVERS\viaagp.sys [2009-07-14 53328]
S3 ViaC7;VIA C7 Processor Driver; C:\Windows\system32\DRIVERS\viac7.sys [2009-07-13 52736]
S3 vmbus;@%SystemRoot%\system32\vmbusres.dll,-1000; C:\Windows\system32\DRIVERS\vmbus.sys [2009-07-14 175824]
S3 VMBusHID;VMBusHID; C:\Windows\system32\DRIVERS\VMBusHID.sys [2009-07-13 17920]
S3 WinUsb;WinUsb; C:\Windows\system32\DRIVERS\WinUsb.sys [2009-07-13 34944]
======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======
R2 AdobeARMservice;Adobe Acrobat Update Service; C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe [2012-07-27 63960]
R2 AEADIFilters;Andrea ADI Filters Service; C:\Windows\system32\AEADISRV.EXE [2009-06-05 90112]
R2 AntiVirService;Avira Realtime Protection; C:\Program Files\Avira\AntiVir Desktop\avguard.exe [2012-05-01 110032]
R2 AntiVirSchedulerService;Avira Scheduler; C:\Program Files\Avira\AntiVir Desktop\sched.exe [2012-05-02 86224]
R2 cmdAgent;COMODO Internet Security Helper Service; C:\Program Files\COMODO\COMODO Internet Security\cmdagent.exe [2012-11-07 1990464]
R2 CscService;@%systemroot%\system32\cscsvc.dll,-200; C:\Windows\System32\svchost.exe [2009-07-14 20992]
R2 EPSON_PM_RPCV4_01;EPSON V3 Service4(01); C:\ProgramData\EPSON\EPW!3 SSRP\E_S40RP7.EXE [2007-01-11 113664]
R2 Irmon;@%SystemRoot%\System32\irmon.dll,-2000; C:\Windows\system32\svchost.exe [2009-07-14 20992]
R2 Skype C2C Service;Skype C2C Service; C:\ProgramData\Skype\Toolbars\Skype C2C Service\c2c_service.exe [2012-11-22 3290304]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
S2 gupdate;Služba Google Update (gupdate); C:\Program Files\Google\Update\GoogleUpdate.exe [2012-07-05 116648]
S2 Pml Driver HPZ12;Pml Driver HPZ12; C:\Windows\System32\svchost.exe [2009-07-14 20992]
S2 SkypeUpdate;Skype Updater; C:\Program Files\Skype\Updater\Updater.exe [2012-11-09 160944]
S3 AppMgmt;@appmgmts.dll,-3250; C:\Windows\system32\svchost.exe [2009-07-14 20992]
S3 gupdatem;Služba Google Update (gupdatem); C:\Program Files\Google\Update\GoogleUpdate.exe [2012-07-05 116648]
S3 gusvc;Google Updater Service; C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe [2011-05-09 136120]
S3 odserv;Microsoft Office Diagnostics Service; C:\Program Files\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE [2007-08-24 443776]
S3 ose;Office Source Engine; C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2006-10-26 145184]
S3 PeerDistSvc;@%SystemRoot%\system32\peerdistsvc.dll,-9000; C:\Windows\System32\svchost.exe [2009-07-14 20992]
S3 StorSvc;@%SystemRoot%\System32\StorSvc.dll,-100; C:\Windows\System32\svchost.exe [2009-07-14 20992]
S3 UmRdpService;@%SystemRoot%\system32\umrdp.dll,-1000; C:\Windows\System32\svchost.exe [2009-07-14 20992]
-----------------EOF-----------------
V prvom rade ma potesilo, ze ste na mna nezabudli, za co vam uprimne dakujem
Problem sa po RSIT a ComboFix ( ospravedlnujem sa za nepozornost) na chvilku odstranil, ale po case sa vratil. Detaily si uz zial nepamatam, snad to zistite z novevo RSIT, ktory prikladam.
Novy RSIT:
Logfile of random's system information tool 1.09 (written by random/random)
Run by Gustav7 at 2012-12-04 19:38:04
Microsoft Windows 7 Professional
System drive C: has 14 GB (47%) free of 30 GB
Total RAM: 1023 MB (39% free)
Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 19:38:26, on 4. 12. 2012
Platform: Windows 7 (WinNT 6.00.3504)
MSIE: Internet Explorer v8.00 (8.00.7600.16385)
Boot mode: Normal
Running processes:
C:\Windows\system32\taskhost.exe
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Program Files\Avira\AntiVir Desktop\avgnt.exe
C:\Program Files\COMODO\COMODO Internet Security\cfp.exe
C:\Program Files\Common Files\Java\Java Update\jusched.exe
C:\Program Files\Analog Devices\Core\smax4pnp.exe
C:\Program Files\Skype\Phone\Skype.exe
C:\Program Files\Analog Devices\SoundMAX\SoundMAX.exe
C:\Users\Gustav7\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\Gustav7\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\Gustav7\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\Gustav7\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\Gustav7\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\Gustav7\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\Gustav7\Downloads\RSIT.exe
C:\Program Files\trend micro\Gustav7.exe
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://uk.ask.com/?l=dis&o=15768
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll
O2 - BHO: SkypeIEPluginBHO - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll
O4 - HKLM\..\Run: [avgnt] "C:\Program Files\Avira\AntiVir Desktop\avgnt.exe" /min
O4 - HKLM\..\Run: [COMODO Internet Security] "C:\Program Files\COMODO\COMODO Internet Security\cfp.exe" -h
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Common Files\Java\Java Update\jusched.exe"
O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKLM\..\Run: [SoundMAXPnP] C:\Program Files\Analog Devices\Core\smax4pnp.exe
O4 - HKCU\..\Run: [Skype] "C:\Program Files\Skype\Phone\Skype.exe" /minimized /regrun
O4 - HKCU\..\Run: [SoundMax] "C:\Program Files\Analog Devices\SoundMAX\SoundMAX.exe" /tray
O8 - Extra context menu item: Add to Google Photos Screensa&ver - res://C:\Windows\system32\GPhotos.scr/200
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Excel - res://C:\PROGRA~1\MICROS~1\Office12\EXCEL.EXE/3000
O9 - Extra button: Skype Click to Call - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~1\Office12\REFIEBAR.DLL
O16 - DPF: {62789780-B744-11D0-986B-00609731A21D} (Autodesk MapGuide ActiveX Control) - http://195.28.70.134/kapor2/lib/mgaxctrl.cab
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/s ... wflash.cab
O18 - Protocol: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O20 - AppInit_DLLs: C:\Windows\System32\guard32.dll
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe
O23 - Service: Andrea ADI Filters Service (AEADIFilters) - Andrea Electronics Corporation - C:\Windows\system32\AEADISRV.EXE
O23 - Service: Avira Scheduler (AntiVirSchedulerService) - Avira Operations GmbH & Co. KG - C:\Program Files\Avira\AntiVir Desktop\sched.exe
O23 - Service: Avira Realtime Protection (AntiVirService) - Avira Operations GmbH & Co. KG - C:\Program Files\Avira\AntiVir Desktop\avguard.exe
O23 - Service: COMODO Internet Security Helper Service (cmdAgent) - COMODO - C:\Program Files\COMODO\COMODO Internet Security\cmdagent.exe
O23 - Service: EPSON V3 Service4(01) (EPSON_PM_RPCV4_01) - SEIKO EPSON CORPORATION - C:\ProgramData\EPSON\EPW!3 SSRP\E_S40RP7.EXE
O23 - Service: Služba Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: Služba Google Update (gupdatem) (gupdatem) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: Skype C2C Service - Skype Technologies S.A. - C:\ProgramData\Skype\Toolbars\Skype C2C Service\c2c_service.exe
O23 - Service: Skype Updater (SkypeUpdate) - Skype Technologies - C:\Program Files\Skype\Updater\Updater.exe
--
End of file - 5482 bytes
======Scheduled tasks folder======
C:\Windows\tasks\GoogleUpdateTaskMachineCore1cd95abddb6e307.job
C:\Windows\tasks\GoogleUpdateTaskMachineUA.job
C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-4093114758-1149787721-3482645471-1000Core1cd969db63f91b7.job
C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-4093114758-1149787721-3482645471-1000UA.job
======Registry dump======
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
Adobe PDF Link Helper - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2012-07-27 63944]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
Java(tm) Plug-In SSV Helper - C:\Program Files\Java\jre7\bin\ssv.dll [2012-09-25 449512]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}]
Skype Browser Helper - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll [2012-11-22 4529344]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre7\bin\jp2ssv.dll [2012-09-25 155384]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"avgnt"=C:\Program Files\Avira\AntiVir Desktop\avgnt.exe [2012-09-01 348664]
"COMODO Internet Security"=C:\Program Files\COMODO\COMODO Internet Security\cfp.exe [2012-11-07 6756048]
"SunJavaUpdateSched"=C:\Program Files\Common Files\Java\Java Update\jusched.exe [2012-07-03 252848]
"Adobe ARM"=C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2012-07-27 919008]
"SoundMAXPnP"=C:\Program Files\Analog Devices\Core\smax4pnp.exe [2009-06-05 1310720]
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"Skype"=C:\Program Files\Skype\Phone\Skype.exe [2012-11-09 17877168]
"SoundMax"=C:\Program Files\Analog Devices\SoundMAX\SoundMAX.exe [2009-05-18 3866624]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
"AppInit_DLLs"="C:\Windows\System32\guard32.dll"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED}
[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=credssp.dll
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorAdmin"=5
"ConsentPromptBehaviorUser"=3
"EnableUIADesktopToggle"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDrives"=0
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDrives"=0
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.msadpcm"=msadp32.acm
"midimapper"=midimap.dll
"wavemapper"=msacm32.drv
"VIDC.UYVY"=msyuv.dll
"VIDC.YUY2"=msyuv.dll
"VIDC.YVYU"=msyuv.dll
"VIDC.IYUV"=iyuv_32.dll
"vidc.i420"=iyuv_32.dll
"VIDC.YVU9"=tsbyuv.dll
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"vidc.cvid"=iccvid.dll
"MSVideo8"=VfWWDM32.dll
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv
======File associations======
.js - edit - C:\Windows\System32\Notepad.exe %1
======List of files/folders created in the last 1 month======
2012-11-22 13:14:53 ----D---- C:\Windows\temp
2012-11-22 13:14:51 ----A---- C:\ComboFix.txt
2012-11-22 13:12:04 ----SHD---- C:\$RECYCLE.BIN
2012-11-22 13:00:49 ----A---- C:\Windows\zip.exe
2012-11-22 13:00:49 ----A---- C:\Windows\SWSC.exe
2012-11-22 13:00:49 ----A---- C:\Windows\SWREG.exe
2012-11-22 13:00:49 ----A---- C:\Windows\sed.exe
2012-11-22 13:00:49 ----A---- C:\Windows\PEV.exe
2012-11-22 13:00:49 ----A---- C:\Windows\NIRCMD.exe
2012-11-22 13:00:49 ----A---- C:\Windows\MBR.exe
2012-11-22 13:00:49 ----A---- C:\Windows\grep.exe
2012-11-22 12:58:28 ----D---- C:\Qoobox
2012-11-22 12:57:44 ----D---- C:\Windows\erdnt
2012-11-21 22:13:27 ----D---- C:\Program Files\Common Files\Skype
2012-11-21 22:03:04 ----A---- C:\Windows\system32\WindowsAccessBridge.dll
2012-11-21 22:03:04 ----A---- C:\Windows\system32\javaw.exe
2012-11-21 22:03:04 ----A---- C:\Windows\system32\java.exe
2012-11-21 15:10:59 ----D---- C:\Program Files\trend micro
2012-11-21 15:10:58 ----D---- C:\rsit
2012-11-21 14:18:10 ----D---- C:\ProgramData\SonicFocus
2012-11-21 14:13:06 ----D---- C:\Program Files\Creative
2012-11-21 14:13:06 ----A---- C:\Windows\system32\wrap_oal.dll
2012-11-21 14:13:06 ----A---- C:\Windows\system32\OpenAL32.dll
2012-11-21 14:13:05 ----N---- C:\Windows\system32\adi_oal.dll
2012-11-21 14:12:25 ----D---- C:\Program Files\Analog Devices
2012-11-19 22:43:37 ----A---- C:\Windows\system32\FNTCACHE.DAT
======List of files/folders modified in the last 1 month======
2012-12-04 19:38:16 ----D---- C:\Windows\Prefetch
2012-12-04 19:37:58 ----D---- C:\Users\Gustav7\AppData\Roaming\Skype
2012-12-04 10:28:45 ----SHD---- C:\Windows\Installer
2012-12-04 10:28:45 ----D---- C:\Config.Msi
2012-12-01 00:11:32 ----D---- C:\Windows\system32\config
2012-12-01 00:00:19 ----SHD---- C:\System Volume Information
2012-11-27 21:31:37 ----D---- C:\Users\Gustav7\AppData\Roaming\MOBILedit
2012-11-24 23:59:53 ----D---- C:\ProgramData\Skype
2012-11-22 13:14:55 ----D---- C:\Windows\system32\drivers
2012-11-22 13:14:53 ----D---- C:\Windows
2012-11-22 13:11:54 ----A---- C:\Windows\system.ini
2012-11-22 13:09:07 ----D---- C:\Windows\system32\drivers\etc
2012-11-22 13:05:51 ----D---- C:\Windows\System32
2012-11-22 13:05:51 ----D---- C:\Windows\AppPatch
2012-11-22 13:05:48 ----D---- C:\Program Files\Common Files
2012-11-21 22:13:27 ----RD---- C:\Program Files\Skype
2012-11-21 22:03:04 ----D---- C:\Program Files\Java
2012-11-21 15:10:59 ----RD---- C:\Program Files
2012-11-21 14:18:10 ----D---- C:\ProgramData
2012-11-21 14:12:26 ----D---- C:\Windows\inf
2012-11-21 14:08:55 ----D---- C:\Windows\system32\DriverStore
2012-11-21 14:08:55 ----D---- C:\Windows\system32\catroot
2012-11-20 21:56:07 ----D---- C:\Windows\debug
2012-11-13 19:16:50 ----D---- C:\Users\Gustav7\AppData\Roaming\Samsung
2012-11-13 19:16:50 ----D---- C:\Program Files\Samsung
2012-11-13 19:16:46 ----D---- C:\ProgramData\Samsung
2012-11-13 19:16:44 ----HD---- C:\Program Files\InstallShield Installation Information
2012-11-13 19:15:23 ----D---- C:\Windows\system32\catroot2
2012-11-13 19:14:13 ----RSD---- C:\Windows\assembly
2012-11-08 13:48:32 ----A---- C:\Windows\system32\PerfStringBackup.INI
2012-11-07 23:37:35 ----A---- C:\Windows\system32\cmdcsr.dll
2012-11-07 23:37:34 ----A---- C:\Windows\system32\guard32.dll
2012-11-05 13:16:44 ----D---- C:\Program Files\COMODO
======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======
R0 pciide;pciide; C:\Windows\system32\DRIVERS\pciide.sys [2009-07-14 12368]
R0 rdyboost;ReadyBoost; C:\Windows\System32\drivers\rdyboost.sys [2009-07-14 173648]
R1 AsIO;AsIO; C:\Windows\system32\drivers\AsIO.sys [2012-07-02 12400]
R1 avipbb;avipbb; C:\Windows\system32\DRIVERS\avipbb.sys [2012-04-27 137928]
R1 avkmgr;avkmgr; C:\Windows\system32\DRIVERS\avkmgr.sys [2012-04-16 36000]
R1 cmdGuard;COMODO Internet Security Sandbox Driver; C:\Windows\System32\DRIVERS\cmdguard.sys [2012-11-07 494416]
R1 cmdHlp;COMODO Internet Security Helper Driver; C:\Windows\System32\DRIVERS\cmdhlp.sys [2012-11-07 36072]
R1 CSC;@%systemroot%\system32\cscsvc.dll,-202; C:\Windows\system32\drivers\csc.sys [2009-07-13 387584]
R1 inspect;COMODO Internet Security Firewall Driver; C:\Windows\system32\DRIVERS\inspect.sys [2012-11-07 82952]
R1 ssmdrv;ssmdrv; C:\Windows\system32\DRIVERS\ssmdrv.sys [2010-06-17 28520]
R2 avgntflt;avgntflt; C:\Windows\system32\DRIVERS\avgntflt.sys [2012-04-24 83392]
R2 irda;IrDA Protocol; C:\Windows\system32\DRIVERS\irda.sys [2009-07-13 96768]
R2 Parvdm;Parvdm; C:\Windows\system32\DRIVERS\parvdm.sys [2009-07-13 8704]
R3 ADIHdAudAddService;ADI UAA Function Driver for High Definition Audio Service; C:\Windows\system32\drivers\ADIHdAud.sys [2009-06-05 380416]
R3 atikmdag;atikmdag; C:\Windows\system32\DRIVERS\atikmdag.sys [2009-07-13 4194816]
R3 ICAM5USB;Intel(r) PC Camera CS110; C:\Windows\System32\Drivers\Icam5USB.sys [2001-08-17 100992]
R3 MTsensor;ATK0110 ACPI UTILITY; C:\Windows\system32\DRIVERS\ASACPI.sys [2009-10-10 13216]
R3 ROCKEYNT;Feitian ROCKEY4 Device Service; C:\Windows\system32\DRIVERS\Rockey4.sys [2012-07-13 26976]
S3 aic78xx;aic78xx; C:\Windows\system32\DRIVERS\djsvs.sys [2009-07-14 70720]
S3 amdagp;AMD AGP Bus Filter Driver; C:\Windows\system32\DRIVERS\amdagp.sys [2009-07-14 53312]
S3 androidusb;SAMSUNG Android Composite ADB Interface Driver; C:\Windows\System32\Drivers\ssadadb.sys [2011-05-13 30312]
S3 b57nd60x;Broadcom NetXtreme Gigabit Ethernet - NDIS 6.0; C:\Windows\system32\DRIVERS\b57nd60x.sys [2009-07-13 229888]
S3 BridgeMP;@%SystemRoot%\system32\bridgeres.dll,-1; C:\Windows\system32\DRIVERS\bridge.sys [2009-07-14 78336]
S3 catchme;catchme; \??\C:\Users\Gustav7\AppData\Local\Temp\catchme.sys []
S3 dgderdrv;dgderdrv; C:\Windows\System32\drivers\dgderdrv.sys []
S3 Dot4;MS IEEE-1284.4 Driver; C:\Windows\system32\DRIVERS\Dot4.sys [2009-07-13 131072]
S3 Dot4Print;Print Class Driver for IEEE-1284.4; C:\Windows\system32\DRIVERS\Dot4Prt.sys [2009-07-13 16384]
S3 dot4usb;Dot4USB Filter Dot4USB Filter; C:\Windows\system32\DRIVERS\dot4usb.sys [2009-07-13 36864]
S3 epmntdrv;epmntdrv; \??\C:\Windows\system32\epmntdrv.sys [2011-07-29 14216]
S3 EuGdiDrv;EuGdiDrv; \??\C:\Windows\system32\EuGdiDrv.sys [2011-07-29 8456]
S3 RDPDR;Terminal Server Device Redirector Driver; C:\Windows\System32\drivers\rdpdr.sys [2009-07-14 133120]
S3 s3cap;s3cap; C:\Windows\system32\DRIVERS\vms3cap.sys [2009-07-13 5632]
S3 SenFiltService;SenFilt Service; C:\Windows\system32\drivers\Senfilt.sys []
S3 sisagp;SIS AGP Bus Filter; C:\Windows\system32\DRIVERS\sisagp.sys [2009-07-14 52304]
S3 ssadbus;SAMSUNG Android USB Composite Device driver (WDM); C:\Windows\system32\DRIVERS\ssadbus.sys [2011-05-13 121064]
S3 ssadmdfl;SAMSUNG Android USB Modem (Filter); C:\Windows\system32\DRIVERS\ssadmdfl.sys [2011-05-13 12776]
S3 ssadmdm;SAMSUNG Android USB Modem Drivers; C:\Windows\system32\DRIVERS\ssadmdm.sys [2011-05-13 136808]
S3 ssadserd;SAMSUNG Android USB Diagnostic Serial Port (WDM); C:\Windows\system32\DRIVERS\ssadserd.sys [2011-05-13 114280]
S3 storvsc;storvsc; C:\Windows\system32\DRIVERS\storvsc.sys [2009-07-14 28224]
S3 stusb2ir;USB 2.0 IrDA Bridge; C:\Windows\system32\DRIVERS\stusb2ir.sys [2004-09-07 40856]
S3 usb_rndisx;USB RNDIS Adapter; C:\Windows\system32\DRIVERS\usb8023x.sys [2009-07-13 15872]
S3 usbscan;USB Scanner Driver; C:\Windows\system32\DRIVERS\usbscan.sys [2009-07-14 35840]
S3 viaagp;VIA AGP Bus Filter; C:\Windows\system32\DRIVERS\viaagp.sys [2009-07-14 53328]
S3 ViaC7;VIA C7 Processor Driver; C:\Windows\system32\DRIVERS\viac7.sys [2009-07-13 52736]
S3 vmbus;@%SystemRoot%\system32\vmbusres.dll,-1000; C:\Windows\system32\DRIVERS\vmbus.sys [2009-07-14 175824]
S3 VMBusHID;VMBusHID; C:\Windows\system32\DRIVERS\VMBusHID.sys [2009-07-13 17920]
S3 WinUsb;WinUsb; C:\Windows\system32\DRIVERS\WinUsb.sys [2009-07-13 34944]
======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======
R2 AdobeARMservice;Adobe Acrobat Update Service; C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe [2012-07-27 63960]
R2 AEADIFilters;Andrea ADI Filters Service; C:\Windows\system32\AEADISRV.EXE [2009-06-05 90112]
R2 AntiVirService;Avira Realtime Protection; C:\Program Files\Avira\AntiVir Desktop\avguard.exe [2012-05-01 110032]
R2 AntiVirSchedulerService;Avira Scheduler; C:\Program Files\Avira\AntiVir Desktop\sched.exe [2012-05-02 86224]
R2 cmdAgent;COMODO Internet Security Helper Service; C:\Program Files\COMODO\COMODO Internet Security\cmdagent.exe [2012-11-07 1990464]
R2 CscService;@%systemroot%\system32\cscsvc.dll,-200; C:\Windows\System32\svchost.exe [2009-07-14 20992]
R2 EPSON_PM_RPCV4_01;EPSON V3 Service4(01); C:\ProgramData\EPSON\EPW!3 SSRP\E_S40RP7.EXE [2007-01-11 113664]
R2 Irmon;@%SystemRoot%\System32\irmon.dll,-2000; C:\Windows\system32\svchost.exe [2009-07-14 20992]
R2 Skype C2C Service;Skype C2C Service; C:\ProgramData\Skype\Toolbars\Skype C2C Service\c2c_service.exe [2012-11-22 3290304]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
S2 gupdate;Služba Google Update (gupdate); C:\Program Files\Google\Update\GoogleUpdate.exe [2012-07-05 116648]
S2 Pml Driver HPZ12;Pml Driver HPZ12; C:\Windows\System32\svchost.exe [2009-07-14 20992]
S2 SkypeUpdate;Skype Updater; C:\Program Files\Skype\Updater\Updater.exe [2012-11-09 160944]
S3 AppMgmt;@appmgmts.dll,-3250; C:\Windows\system32\svchost.exe [2009-07-14 20992]
S3 gupdatem;Služba Google Update (gupdatem); C:\Program Files\Google\Update\GoogleUpdate.exe [2012-07-05 116648]
S3 gusvc;Google Updater Service; C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe [2011-05-09 136120]
S3 odserv;Microsoft Office Diagnostics Service; C:\Program Files\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE [2007-08-24 443776]
S3 ose;Office Source Engine; C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2006-10-26 145184]
S3 PeerDistSvc;@%SystemRoot%\system32\peerdistsvc.dll,-9000; C:\Windows\System32\svchost.exe [2009-07-14 20992]
S3 StorSvc;@%SystemRoot%\System32\StorSvc.dll,-100; C:\Windows\System32\svchost.exe [2009-07-14 20992]
S3 UmRdpService;@%SystemRoot%\system32\umrdp.dll,-1000; C:\Windows\System32\svchost.exe [2009-07-14 20992]
-----------------EOF-----------------
Re: PC neuspava.
Poprosím o tento log
C:\ComboFix.txt
C:\ComboFix.txt
Nepoužívejte COMBOFIX bez doporučení rádce, může dojít k poškození systému!
Vždy před odvirováním počítače zazálohujte důležitá data
Chcete podpořit naše forum? Informace zde

K zastižení jsem spíše v noci, mezi 21.-23. hodinou
Pokud máte nějaké dotazy, můžete mi napsat na email Motji(zavináč)forum.viry.cz.
Vždy před odvirováním počítače zazálohujte důležitá data
Chcete podpořit naše forum? Informace zde

K zastižení jsem spíše v noci, mezi 21.-23. hodinou
Pokud máte nějaké dotazy, můžete mi napsat na email Motji(zavináč)forum.viry.cz.
Re: PC neuspava.
Posielam, ale tento je stary. Mam spravit novy ?
ComboFix 12-11-22.03 - Gustav7 . 11. 2012 13:02:27.1.2 - x86
Microsoft Windows 7 Professional 6.1.7600.0.1250.421.1051.18.1023.516 [GMT 0:00]
Running from: c:\users\Gustav7\Downloads\ComboFix.exe
AV: Avira Desktop *Disabled/Updated* {F67B4DE5-C0B4-6C3F-0EFF-6C83BD5D0C2C}
FW: COMODO Firewall *Disabled* {7DB03214-694B-060B-1600-BD4715C36DBB}
SP: Avira Desktop *Disabled/Updated* {4D1AAC01-E68E-63B1-344F-57F1C6DA4691}
SP: COMODO Defense+ *Disabled/Updated* {FEEA52D5-051E-08DD-07EF-2F009097607D}
SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.
.
((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
c:\users\Gustav7\AppData\Local\Temp\7zS58E6\HPSLPSVC32.DLL
c:\users\Gustav7\AppData\Local\TempDIR
c:\windows\IsUn0405.exe
.
.
((((((((((((((((((((((((((((((((((((((( Drivers/Services )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
-------\Service_HPSLPSVC
.
.
((((((((((((((((((((((((( Files Created from 2012-10-22 to 2012-11-22 )))))))))))))))))))))))))))))))
.
.
2012-11-21 22:13 . 2012-11-21 22:13 -------- d-----w- c:\program files\Common Files\Skype
2012-11-21 22:03 . 2012-09-24 23:16 93672 ----a-w- c:\windows\system32\WindowsAccessBridge.dll
2012-11-21 15:10 . 2012-11-21 15:11 -------- d-----w- c:\program files\trend micro
2012-11-21 15:10 . 2012-11-21 15:11 -------- d-----w- C:\rsit
2012-11-21 14:18 . 2012-11-21 14:18 -------- d-----w- c:\programdata\SonicFocus
2012-11-21 14:13 . 2012-11-21 14:13 413696 ----a-w- c:\windows\system32\wrap_oal.dll
2012-11-21 14:13 . 2012-11-21 14:13 110592 ----a-w- c:\windows\system32\OpenAL32.dll
2012-11-21 14:13 . 2012-11-21 14:13 -------- d-----w- c:\program files\Creative
2012-11-21 14:13 . 2008-09-17 15:07 1503232 ------w- c:\windows\system32\adi_oal.dll
2012-11-21 14:12 . 2012-11-21 14:18 -------- d-----w- c:\program files\Analog Devices
2012-11-02 21:09 . 2012-11-02 21:09 -------- d-----w- c:\users\Gustav7\AppData\Local\WMTools Downloaded Files
2012-10-31 15:31 . 2003-11-10 18:13 69715 ----a-w- c:\program files\Common Files\InstallShield\Professional\RunTime\09\01\Intel32\ctor.dll
2012-10-31 15:31 . 2003-11-10 18:12 266240 ----a-w- c:\program files\Common Files\InstallShield\Professional\RunTime\09\01\Intel32\iscript.dll
2012-10-31 15:31 . 2003-11-10 18:12 192512 ----a-w- c:\program files\Common Files\InstallShield\Professional\RunTime\09\01\Intel32\iuser.dll
2012-10-31 15:31 . 2003-11-10 18:14 729088 ----a-w- c:\program files\Common Files\InstallShield\Professional\RunTime\09\01\Intel32\iKernel.dll
2012-10-31 15:31 . 2003-11-10 18:11 5632 ----a-w- c:\program files\Common Files\InstallShield\Professional\RunTime\09\01\Intel32\DotNetInstaller.exe
2012-10-31 15:31 . 2012-10-31 15:31 188548 ----a-w- c:\program files\Common Files\InstallShield\Professional\RunTime\09\01\Intel32\iGdi.dll
2012-10-31 15:31 . 2012-10-31 15:31 311428 ----a-w- c:\program files\Common Files\InstallShield\Professional\RunTime\09\01\Intel32\setup.dll
2012-10-24 15:13 . 2012-10-24 15:13 -------- d-----w- C:\Temp
2012-10-24 14:04 . 2012-10-24 14:04 -------- d-----w- c:\users\Gustav7\AppData\Local\Samsung
2012-10-24 14:04 . 2012-11-13 19:16 -------- d-----w- c:\users\Gustav7\AppData\Roaming\Samsung
2012-10-24 14:01 . 2012-09-26 19:57 4659712 ----a-w- c:\windows\system32\Redemption.dll
2012-10-24 13:59 . 2012-11-13 19:16 -------- d-----w- c:\program files\Samsung
2012-10-24 13:59 . 2012-11-13 19:16 -------- d-----w- c:\programdata\Samsung
2012-10-24 13:54 . 2012-10-24 13:54 -------- d-----w- c:\users\Gustav7\AppData\Local\Downloaded Installations
.
.
.
(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2012-11-07 23:37 . 2012-02-03 18:27 82952 ----a-w- c:\windows\system32\drivers\inspect.sys
2012-11-07 23:37 . 2012-03-11 20:13 36072 ----a-w- c:\windows\system32\drivers\cmdhlp.sys
2012-11-07 23:37 . 2012-03-11 20:13 494416 ----a-w- c:\windows\system32\drivers\cmdGuard.sys
2012-11-07 23:37 . 2012-03-11 20:13 19632 ----a-w- c:\windows\system32\drivers\cmderd.sys
2012-11-07 23:37 . 2012-03-11 20:13 34024 ----a-w- c:\windows\system32\cmdcsr.dll
2012-11-07 23:37 . 2012-03-11 20:13 301264 ----a-w- c:\windows\system32\guard32.dll
2012-09-26 19:57 . 2012-09-26 19:57 974848 ----a-w- c:\windows\system32\cis-2.4.dll
2012-09-26 19:57 . 2012-09-26 19:57 81920 ----a-w- c:\windows\system32\issacapi_bs-2.3.dll
2012-09-26 19:57 . 2012-09-26 19:57 65536 ----a-w- c:\windows\system32\issacapi_pe-2.3.dll
2012-09-26 19:57 . 2012-09-26 19:57 57344 ----a-w- c:\windows\system32\MTXSYNCICON.dll
2012-09-26 19:57 . 2012-09-26 19:57 57344 ----a-w- c:\windows\system32\MK_Lyric.dll
2012-09-26 19:57 . 2012-09-26 19:57 57344 ----a-w- c:\windows\system32\issacapi_se-2.3.dll
2012-09-26 19:57 . 2012-09-26 19:57 569344 ----a-w- c:\windows\system32\muzdecode.ax
2012-09-26 19:57 . 2012-09-26 19:57 491520 ----a-w- c:\windows\system32\muzapp.dll
2012-09-26 19:57 . 2012-09-26 19:57 49152 ----a-w- c:\windows\system32\MaJGUILib.dll
2012-09-26 19:57 . 2012-09-26 19:57 45320 ----a-w- c:\windows\system32\MAMACExtract.dll
2012-09-26 19:57 . 2012-09-26 19:57 45056 ----a-w- c:\windows\system32\MaXMLProto.dll
2012-09-26 19:57 . 2012-09-26 19:57 45056 ----a-w- c:\windows\system32\MACXMLProto.dll
2012-09-26 19:57 . 2012-09-26 19:57 40960 ----a-w- c:\windows\system32\MTTELECHIP.dll
2012-09-26 19:57 . 2012-09-26 19:57 352256 ----a-w- c:\windows\system32\MSLUR71.dll
2012-09-26 19:57 . 2012-09-26 19:57 258048 ----a-w- c:\windows\system32\muzoggsp.ax
2012-09-26 19:57 . 2012-09-26 19:57 245760 ----a-w- c:\windows\system32\MSCLib.dll
2012-09-26 19:57 . 2012-09-26 19:57 24576 ----a-w- c:\windows\system32\MASetupCleaner.exe
2012-09-26 19:57 . 2012-09-26 19:57 200704 ----a-w- c:\windows\system32\muzwmts.dll
2012-09-26 19:57 . 2012-09-26 19:57 172032 ----a-w- c:\windows\system32\muzapp.exe
2012-09-26 19:57 . 2012-09-26 19:57 155648 ----a-w- c:\windows\system32\MSFLib.dll
2012-09-26 19:57 . 2012-09-26 19:57 143360 ----a-w- c:\windows\system32\3DAudio.ax
2012-09-26 19:57 . 2012-09-26 19:57 135168 ----a-w- c:\windows\system32\muzaf1.dll
2012-09-26 19:57 . 2012-09-26 19:57 131072 ----a-w- c:\windows\system32\muzmpgsp.ax
2012-09-26 19:57 . 2012-09-26 19:57 122880 ----a-w- c:\windows\system32\muzeffect.ax
2012-09-26 19:57 . 2012-09-26 19:57 118784 ----a-w- c:\windows\system32\MaDRM.dll
2012-09-26 19:57 . 2012-09-26 19:57 110592 ----a-w- c:\windows\system32\muzmp4sp.ax
2012-09-12 21:03 . 2012-09-12 21:03 73416 ----a-w- c:\windows\system32\FlashPlayerCPLApp.cpl
2012-09-12 21:03 . 2012-09-12 21:03 696520 ----a-w- c:\windows\system32\FlashPlayerApp.exe
2012-09-05 09:25 . 2012-07-05 14:29 821736 ----a-w- c:\windows\system32\npDeployJava1.dll
2012-09-05 09:25 . 2012-07-05 14:29 746984 ----a-w- c:\windows\system32\deployJava1.dll
.
.
((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* empty entries & legit default entries are not shown
REGEDIT4
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Skype"="c:\program files\Skype\Phone\Skype.exe" [2012-11-09 17877168]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"avgnt"="c:\program files\Avira\AntiVir Desktop\avgnt.exe" [2012-09-01 348664]
"COMODO Internet Security"="c:\program files\COMODO\COMODO Internet Security\cfp.exe" [2012-11-07 6756048]
"SunJavaUpdateSched"="c:\program files\Common Files\Java\Java Update\jusched.exe" [2012-07-03 252848]
"Adobe ARM"="c:\program files\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2012-07-27 919008]
"SoundMAXPnP"="c:\program files\Analog Devices\Core\smax4pnp.exe" [2009-06-05 1310720]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorAdmin"= 5 (0x5)
"ConsentPromptBehaviorUser"= 3 (0x3)
"EnableUIADesktopToggle"= 0 (0x0)
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\windows]
"AppInit_DLLs"=c:\windows\System32\guard32.dll
.
R2 SkypeUpdate;Skype Updater;c:\program files\Skype\Updater\Updater.exe [x]
R3 androidusb;SAMSUNG Android Composite ADB Interface Driver;c:\windows\system32\Drivers\ssadadb.sys [x]
R3 dgderdrv;dgderdrv;c:\windows\system32\drivers\dgderdrv.sys [x]
R3 epmntdrv;epmntdrv;c:\windows\system32\epmntdrv.sys [x]
R3 EuGdiDrv;EuGdiDrv;c:\windows\system32\EuGdiDrv.sys [x]
R3 ssadbus;SAMSUNG Android USB Composite Device driver (WDM);c:\windows\system32\DRIVERS\ssadbus.sys [x]
R3 ssadmdfl;SAMSUNG Android USB Modem (Filter);c:\windows\system32\DRIVERS\ssadmdfl.sys [x]
R3 ssadmdm;SAMSUNG Android USB Modem Drivers;c:\windows\system32\DRIVERS\ssadmdm.sys [x]
R3 ssadserd;SAMSUNG Android USB Diagnostic Serial Port (WDM);c:\windows\system32\DRIVERS\ssadserd.sys [x]
R3 stusb2ir;USB 2.0 IrDA Bridge;c:\windows\system32\DRIVERS\stusb2ir.sys [x]
S1 avkmgr;avkmgr;c:\windows\system32\DRIVERS\avkmgr.sys [x]
S1 cmdGuard;COMODO Internet Security Sandbox Driver;c:\windows\system32\DRIVERS\cmdguard.sys [x]
S1 cmdHlp;COMODO Internet Security Helper Driver;c:\windows\system32\DRIVERS\cmdhlp.sys [x]
S2 AntiVirSchedulerService;Avira Scheduler;c:\program files\Avira\AntiVir Desktop\sched.exe [x]
S2 Skype C2C Service;Skype C2C Service;c:\programdata\Skype\Toolbars\Skype C2C Service\c2c_service.exe [x]
S3 yukonw7;NDIS6.2 Miniport Driver for Marvell Yukon Ethernet Controller;c:\windows\system32\DRIVERS\yk62x86.sys [x]
.
.
--- Other Services/Drivers In Memory ---
.
*NewlyCreated* - WS2IFSL
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost]
LocalServiceAndNoImpersonation REG_MULTI_SZ SSDPSRV upnphost SCardSvr TBS FontCache fdrespub AppIDSvc QWAVE wcncsvc SensrSvc
HPZ12 REG_MULTI_SZ Pml Driver HPZ12 Net Driver HPZ12
HPService REG_MULTI_SZ HPSLPSVC
.
Contents of the 'Scheduled Tasks' folder
.
2012-09-18 c:\windows\Tasks\GoogleUpdateTaskMachineCore1cd95abddb6e307.job
- c:\program files\Google\Update\GoogleUpdate.exe [2012-07-05 21:06]
.
2012-11-22 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
- c:\program files\Google\Update\GoogleUpdate.exe [2012-07-05 21:06]
.
2012-09-19 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-4093114758-1149787721-3482645471-1000Core1cd969db63f91b7.job
- c:\users\Gustav7\AppData\Local\Google\Update\GoogleUpdate.exe [2012-06-23 22:23]
.
2012-11-22 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-4093114758-1149787721-3482645471-1000UA.job
- c:\users\Gustav7\AppData\Local\Google\Update\GoogleUpdate.exe [2012-06-23 22:23]
.
.
------- Supplementary Scan -------
.
uStart Page = hxxp://uk.ask.com/?l=dis&o=15768
uDefault_Search_URL = hxxp://www.google.com/ie
uSearchAssistant = hxxp://www.google.com/ie
uSearchURL,(Default) = hxxp://www.google.com/search?q=%s
IE: Add to Google Photos Screensa&ver - c:\windows\system32\GPhotos.scr/200
IE: E&xportovat do aplikace Microsoft Excel - c:\progra~1\MICROS~1\Office12\EXCEL.EXE/3000
TCP: DhcpNameServer = 194.168.4.100 194.168.8.100
.
.
--------------------- LOCKED REGISTRY KEYS ---------------------
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0000\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\PCW\Security]
@Denied: (Full) (Everyone)
.
--------------------- DLLs Loaded Under Running Processes ---------------------
.
- - - - - - - > 'lsass.exe'(548)
c:\windows\system32\guard32.dll
.
- - - - - - - > 'Explorer.exe'(2504)
c:\windows\system32\guard32.dll
c:\windows\System32\gameux.dll
c:\windows\System32\netshell.dll
.
------------------------ Other Running Processes ------------------------
.
c:\program files\COMODO\COMODO Internet Security\cmdagent.exe
c:\windows\system32\AUDIODG.EXE
c:\program files\Common Files\Adobe\ARM\1.0\armsvc.exe
c:\windows\system32\AEADISRV.EXE
c:\program files\Avira\AntiVir Desktop\avguard.exe
c:\programdata\EPSON\EPW!3 SSRP\E_S40RP7.EXE
c:\windows\system32\taskhost.exe
c:\program files\Avira\AntiVir Desktop\avshadow.exe
c:\windows\system32\conhost.exe
c:\windows\system32\WUDFHost.exe
c:\windows\system32\conhost.exe
c:\program files\Windows Media Player\wmpnetwk.exe
c:\windows\system32\sppsvc.exe
.
**************************************************************************
.
Completion time: 2012-11-22 13:14:50 - machine was rebooted
ComboFix-quarantined-files.txt 2012-11-22 13:14
.
Pre-Run: 16 540 114 944 bytes free
Post-Run: 16 300 384 256 bytes free
.
- - End Of File - - E98F8319DBFE153A2FE13EA0115CBD1D
ComboFix 12-11-22.03 - Gustav7 . 11. 2012 13:02:27.1.2 - x86
Microsoft Windows 7 Professional 6.1.7600.0.1250.421.1051.18.1023.516 [GMT 0:00]
Running from: c:\users\Gustav7\Downloads\ComboFix.exe
AV: Avira Desktop *Disabled/Updated* {F67B4DE5-C0B4-6C3F-0EFF-6C83BD5D0C2C}
FW: COMODO Firewall *Disabled* {7DB03214-694B-060B-1600-BD4715C36DBB}
SP: Avira Desktop *Disabled/Updated* {4D1AAC01-E68E-63B1-344F-57F1C6DA4691}
SP: COMODO Defense+ *Disabled/Updated* {FEEA52D5-051E-08DD-07EF-2F009097607D}
SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.
.
((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
c:\users\Gustav7\AppData\Local\Temp\7zS58E6\HPSLPSVC32.DLL
c:\users\Gustav7\AppData\Local\TempDIR
c:\windows\IsUn0405.exe
.
.
((((((((((((((((((((((((((((((((((((((( Drivers/Services )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
-------\Service_HPSLPSVC
.
.
((((((((((((((((((((((((( Files Created from 2012-10-22 to 2012-11-22 )))))))))))))))))))))))))))))))
.
.
2012-11-21 22:13 . 2012-11-21 22:13 -------- d-----w- c:\program files\Common Files\Skype
2012-11-21 22:03 . 2012-09-24 23:16 93672 ----a-w- c:\windows\system32\WindowsAccessBridge.dll
2012-11-21 15:10 . 2012-11-21 15:11 -------- d-----w- c:\program files\trend micro
2012-11-21 15:10 . 2012-11-21 15:11 -------- d-----w- C:\rsit
2012-11-21 14:18 . 2012-11-21 14:18 -------- d-----w- c:\programdata\SonicFocus
2012-11-21 14:13 . 2012-11-21 14:13 413696 ----a-w- c:\windows\system32\wrap_oal.dll
2012-11-21 14:13 . 2012-11-21 14:13 110592 ----a-w- c:\windows\system32\OpenAL32.dll
2012-11-21 14:13 . 2012-11-21 14:13 -------- d-----w- c:\program files\Creative
2012-11-21 14:13 . 2008-09-17 15:07 1503232 ------w- c:\windows\system32\adi_oal.dll
2012-11-21 14:12 . 2012-11-21 14:18 -------- d-----w- c:\program files\Analog Devices
2012-11-02 21:09 . 2012-11-02 21:09 -------- d-----w- c:\users\Gustav7\AppData\Local\WMTools Downloaded Files
2012-10-31 15:31 . 2003-11-10 18:13 69715 ----a-w- c:\program files\Common Files\InstallShield\Professional\RunTime\09\01\Intel32\ctor.dll
2012-10-31 15:31 . 2003-11-10 18:12 266240 ----a-w- c:\program files\Common Files\InstallShield\Professional\RunTime\09\01\Intel32\iscript.dll
2012-10-31 15:31 . 2003-11-10 18:12 192512 ----a-w- c:\program files\Common Files\InstallShield\Professional\RunTime\09\01\Intel32\iuser.dll
2012-10-31 15:31 . 2003-11-10 18:14 729088 ----a-w- c:\program files\Common Files\InstallShield\Professional\RunTime\09\01\Intel32\iKernel.dll
2012-10-31 15:31 . 2003-11-10 18:11 5632 ----a-w- c:\program files\Common Files\InstallShield\Professional\RunTime\09\01\Intel32\DotNetInstaller.exe
2012-10-31 15:31 . 2012-10-31 15:31 188548 ----a-w- c:\program files\Common Files\InstallShield\Professional\RunTime\09\01\Intel32\iGdi.dll
2012-10-31 15:31 . 2012-10-31 15:31 311428 ----a-w- c:\program files\Common Files\InstallShield\Professional\RunTime\09\01\Intel32\setup.dll
2012-10-24 15:13 . 2012-10-24 15:13 -------- d-----w- C:\Temp
2012-10-24 14:04 . 2012-10-24 14:04 -------- d-----w- c:\users\Gustav7\AppData\Local\Samsung
2012-10-24 14:04 . 2012-11-13 19:16 -------- d-----w- c:\users\Gustav7\AppData\Roaming\Samsung
2012-10-24 14:01 . 2012-09-26 19:57 4659712 ----a-w- c:\windows\system32\Redemption.dll
2012-10-24 13:59 . 2012-11-13 19:16 -------- d-----w- c:\program files\Samsung
2012-10-24 13:59 . 2012-11-13 19:16 -------- d-----w- c:\programdata\Samsung
2012-10-24 13:54 . 2012-10-24 13:54 -------- d-----w- c:\users\Gustav7\AppData\Local\Downloaded Installations
.
.
.
(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2012-11-07 23:37 . 2012-02-03 18:27 82952 ----a-w- c:\windows\system32\drivers\inspect.sys
2012-11-07 23:37 . 2012-03-11 20:13 36072 ----a-w- c:\windows\system32\drivers\cmdhlp.sys
2012-11-07 23:37 . 2012-03-11 20:13 494416 ----a-w- c:\windows\system32\drivers\cmdGuard.sys
2012-11-07 23:37 . 2012-03-11 20:13 19632 ----a-w- c:\windows\system32\drivers\cmderd.sys
2012-11-07 23:37 . 2012-03-11 20:13 34024 ----a-w- c:\windows\system32\cmdcsr.dll
2012-11-07 23:37 . 2012-03-11 20:13 301264 ----a-w- c:\windows\system32\guard32.dll
2012-09-26 19:57 . 2012-09-26 19:57 974848 ----a-w- c:\windows\system32\cis-2.4.dll
2012-09-26 19:57 . 2012-09-26 19:57 81920 ----a-w- c:\windows\system32\issacapi_bs-2.3.dll
2012-09-26 19:57 . 2012-09-26 19:57 65536 ----a-w- c:\windows\system32\issacapi_pe-2.3.dll
2012-09-26 19:57 . 2012-09-26 19:57 57344 ----a-w- c:\windows\system32\MTXSYNCICON.dll
2012-09-26 19:57 . 2012-09-26 19:57 57344 ----a-w- c:\windows\system32\MK_Lyric.dll
2012-09-26 19:57 . 2012-09-26 19:57 57344 ----a-w- c:\windows\system32\issacapi_se-2.3.dll
2012-09-26 19:57 . 2012-09-26 19:57 569344 ----a-w- c:\windows\system32\muzdecode.ax
2012-09-26 19:57 . 2012-09-26 19:57 491520 ----a-w- c:\windows\system32\muzapp.dll
2012-09-26 19:57 . 2012-09-26 19:57 49152 ----a-w- c:\windows\system32\MaJGUILib.dll
2012-09-26 19:57 . 2012-09-26 19:57 45320 ----a-w- c:\windows\system32\MAMACExtract.dll
2012-09-26 19:57 . 2012-09-26 19:57 45056 ----a-w- c:\windows\system32\MaXMLProto.dll
2012-09-26 19:57 . 2012-09-26 19:57 45056 ----a-w- c:\windows\system32\MACXMLProto.dll
2012-09-26 19:57 . 2012-09-26 19:57 40960 ----a-w- c:\windows\system32\MTTELECHIP.dll
2012-09-26 19:57 . 2012-09-26 19:57 352256 ----a-w- c:\windows\system32\MSLUR71.dll
2012-09-26 19:57 . 2012-09-26 19:57 258048 ----a-w- c:\windows\system32\muzoggsp.ax
2012-09-26 19:57 . 2012-09-26 19:57 245760 ----a-w- c:\windows\system32\MSCLib.dll
2012-09-26 19:57 . 2012-09-26 19:57 24576 ----a-w- c:\windows\system32\MASetupCleaner.exe
2012-09-26 19:57 . 2012-09-26 19:57 200704 ----a-w- c:\windows\system32\muzwmts.dll
2012-09-26 19:57 . 2012-09-26 19:57 172032 ----a-w- c:\windows\system32\muzapp.exe
2012-09-26 19:57 . 2012-09-26 19:57 155648 ----a-w- c:\windows\system32\MSFLib.dll
2012-09-26 19:57 . 2012-09-26 19:57 143360 ----a-w- c:\windows\system32\3DAudio.ax
2012-09-26 19:57 . 2012-09-26 19:57 135168 ----a-w- c:\windows\system32\muzaf1.dll
2012-09-26 19:57 . 2012-09-26 19:57 131072 ----a-w- c:\windows\system32\muzmpgsp.ax
2012-09-26 19:57 . 2012-09-26 19:57 122880 ----a-w- c:\windows\system32\muzeffect.ax
2012-09-26 19:57 . 2012-09-26 19:57 118784 ----a-w- c:\windows\system32\MaDRM.dll
2012-09-26 19:57 . 2012-09-26 19:57 110592 ----a-w- c:\windows\system32\muzmp4sp.ax
2012-09-12 21:03 . 2012-09-12 21:03 73416 ----a-w- c:\windows\system32\FlashPlayerCPLApp.cpl
2012-09-12 21:03 . 2012-09-12 21:03 696520 ----a-w- c:\windows\system32\FlashPlayerApp.exe
2012-09-05 09:25 . 2012-07-05 14:29 821736 ----a-w- c:\windows\system32\npDeployJava1.dll
2012-09-05 09:25 . 2012-07-05 14:29 746984 ----a-w- c:\windows\system32\deployJava1.dll
.
.
((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* empty entries & legit default entries are not shown
REGEDIT4
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Skype"="c:\program files\Skype\Phone\Skype.exe" [2012-11-09 17877168]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"avgnt"="c:\program files\Avira\AntiVir Desktop\avgnt.exe" [2012-09-01 348664]
"COMODO Internet Security"="c:\program files\COMODO\COMODO Internet Security\cfp.exe" [2012-11-07 6756048]
"SunJavaUpdateSched"="c:\program files\Common Files\Java\Java Update\jusched.exe" [2012-07-03 252848]
"Adobe ARM"="c:\program files\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2012-07-27 919008]
"SoundMAXPnP"="c:\program files\Analog Devices\Core\smax4pnp.exe" [2009-06-05 1310720]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorAdmin"= 5 (0x5)
"ConsentPromptBehaviorUser"= 3 (0x3)
"EnableUIADesktopToggle"= 0 (0x0)
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\windows]
"AppInit_DLLs"=c:\windows\System32\guard32.dll
.
R2 SkypeUpdate;Skype Updater;c:\program files\Skype\Updater\Updater.exe [x]
R3 androidusb;SAMSUNG Android Composite ADB Interface Driver;c:\windows\system32\Drivers\ssadadb.sys [x]
R3 dgderdrv;dgderdrv;c:\windows\system32\drivers\dgderdrv.sys [x]
R3 epmntdrv;epmntdrv;c:\windows\system32\epmntdrv.sys [x]
R3 EuGdiDrv;EuGdiDrv;c:\windows\system32\EuGdiDrv.sys [x]
R3 ssadbus;SAMSUNG Android USB Composite Device driver (WDM);c:\windows\system32\DRIVERS\ssadbus.sys [x]
R3 ssadmdfl;SAMSUNG Android USB Modem (Filter);c:\windows\system32\DRIVERS\ssadmdfl.sys [x]
R3 ssadmdm;SAMSUNG Android USB Modem Drivers;c:\windows\system32\DRIVERS\ssadmdm.sys [x]
R3 ssadserd;SAMSUNG Android USB Diagnostic Serial Port (WDM);c:\windows\system32\DRIVERS\ssadserd.sys [x]
R3 stusb2ir;USB 2.0 IrDA Bridge;c:\windows\system32\DRIVERS\stusb2ir.sys [x]
S1 avkmgr;avkmgr;c:\windows\system32\DRIVERS\avkmgr.sys [x]
S1 cmdGuard;COMODO Internet Security Sandbox Driver;c:\windows\system32\DRIVERS\cmdguard.sys [x]
S1 cmdHlp;COMODO Internet Security Helper Driver;c:\windows\system32\DRIVERS\cmdhlp.sys [x]
S2 AntiVirSchedulerService;Avira Scheduler;c:\program files\Avira\AntiVir Desktop\sched.exe [x]
S2 Skype C2C Service;Skype C2C Service;c:\programdata\Skype\Toolbars\Skype C2C Service\c2c_service.exe [x]
S3 yukonw7;NDIS6.2 Miniport Driver for Marvell Yukon Ethernet Controller;c:\windows\system32\DRIVERS\yk62x86.sys [x]
.
.
--- Other Services/Drivers In Memory ---
.
*NewlyCreated* - WS2IFSL
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost]
LocalServiceAndNoImpersonation REG_MULTI_SZ SSDPSRV upnphost SCardSvr TBS FontCache fdrespub AppIDSvc QWAVE wcncsvc SensrSvc
HPZ12 REG_MULTI_SZ Pml Driver HPZ12 Net Driver HPZ12
HPService REG_MULTI_SZ HPSLPSVC
.
Contents of the 'Scheduled Tasks' folder
.
2012-09-18 c:\windows\Tasks\GoogleUpdateTaskMachineCore1cd95abddb6e307.job
- c:\program files\Google\Update\GoogleUpdate.exe [2012-07-05 21:06]
.
2012-11-22 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
- c:\program files\Google\Update\GoogleUpdate.exe [2012-07-05 21:06]
.
2012-09-19 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-4093114758-1149787721-3482645471-1000Core1cd969db63f91b7.job
- c:\users\Gustav7\AppData\Local\Google\Update\GoogleUpdate.exe [2012-06-23 22:23]
.
2012-11-22 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-4093114758-1149787721-3482645471-1000UA.job
- c:\users\Gustav7\AppData\Local\Google\Update\GoogleUpdate.exe [2012-06-23 22:23]
.
.
------- Supplementary Scan -------
.
uStart Page = hxxp://uk.ask.com/?l=dis&o=15768
uDefault_Search_URL = hxxp://www.google.com/ie
uSearchAssistant = hxxp://www.google.com/ie
uSearchURL,(Default) = hxxp://www.google.com/search?q=%s
IE: Add to Google Photos Screensa&ver - c:\windows\system32\GPhotos.scr/200
IE: E&xportovat do aplikace Microsoft Excel - c:\progra~1\MICROS~1\Office12\EXCEL.EXE/3000
TCP: DhcpNameServer = 194.168.4.100 194.168.8.100
.
.
--------------------- LOCKED REGISTRY KEYS ---------------------
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0000\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\PCW\Security]
@Denied: (Full) (Everyone)
.
--------------------- DLLs Loaded Under Running Processes ---------------------
.
- - - - - - - > 'lsass.exe'(548)
c:\windows\system32\guard32.dll
.
- - - - - - - > 'Explorer.exe'(2504)
c:\windows\system32\guard32.dll
c:\windows\System32\gameux.dll
c:\windows\System32\netshell.dll
.
------------------------ Other Running Processes ------------------------
.
c:\program files\COMODO\COMODO Internet Security\cmdagent.exe
c:\windows\system32\AUDIODG.EXE
c:\program files\Common Files\Adobe\ARM\1.0\armsvc.exe
c:\windows\system32\AEADISRV.EXE
c:\program files\Avira\AntiVir Desktop\avguard.exe
c:\programdata\EPSON\EPW!3 SSRP\E_S40RP7.EXE
c:\windows\system32\taskhost.exe
c:\program files\Avira\AntiVir Desktop\avshadow.exe
c:\windows\system32\conhost.exe
c:\windows\system32\WUDFHost.exe
c:\windows\system32\conhost.exe
c:\program files\Windows Media Player\wmpnetwk.exe
c:\windows\system32\sppsvc.exe
.
**************************************************************************
.
Completion time: 2012-11-22 13:14:50 - machine was rebooted
ComboFix-quarantined-files.txt 2012-11-22 13:14
.
Pre-Run: 16 540 114 944 bytes free
Post-Run: 16 300 384 256 bytes free
.
- - End Of File - - E98F8319DBFE153A2FE13EA0115CBD1D
Re: PC neuspava.
Zatím ne.
na zbytečné toolbary použijte tento program, viz citace od kolegy
Mrkněte se, zda máte nastaven režim spánku
start/ovládací panely/možnosti napájení/změnit nastavení schématu
na zbytečné toolbary použijte tento program, viz citace od kolegy
vyosek napsal:Stahnete AdwCleaner http://general-changelog-team.fr/fr/dow ... adwcleaner
- Ulozte nejlepe na plochu
- Ukoncete vsechny programy
- Kliknete na Search
- Probehne skenovani a pak se objevi log, pripadne bude ulozen na systemovem disku jako AdwCleaner[R?].txt, ten sem vlozte
Mrkněte se, zda máte nastaven režim spánku
start/ovládací panely/možnosti napájení/změnit nastavení schématu
Nepoužívejte COMBOFIX bez doporučení rádce, může dojít k poškození systému!
Vždy před odvirováním počítače zazálohujte důležitá data
Chcete podpořit naše forum? Informace zde

K zastižení jsem spíše v noci, mezi 21.-23. hodinou
Pokud máte nějaké dotazy, můžete mi napsat na email Motji(zavináč)forum.viry.cz.
Vždy před odvirováním počítače zazálohujte důležitá data
Chcete podpořit naše forum? Informace zde

K zastižení jsem spíše v noci, mezi 21.-23. hodinou
Pokud máte nějaké dotazy, můžete mi napsat na email Motji(zavináč)forum.viry.cz.
Re: PC neuspava.
Rezim spanku mam nastaveny na 25 minut.
Tu je spominany log. :
# AdwCleaner v2.011 - Logfile created 12/06/2012 at 12:56:06
# Updated 02/12/2012 by Xplode
# Operating system : Windows 7 Professional (32 bits)
# User : Gustav7 - GUSTAV7-PC
# Boot Mode : Normal
# Running from : C:\Users\Gustav7\Desktop\adwcleaner.exe
# Option [Search]
***** [Services] *****
***** [Files / Folders] *****
Folder Found : C:\ProgramData\Ask
Folder Found : C:\Users\Gustav7\AppData\Local\APN
Folder Found : C:\Users\Gustav7\AppData\LocalLow\AskToolbar
***** [Registry] *****
Tu je spominany log. :
# AdwCleaner v2.011 - Logfile created 12/06/2012 at 12:56:06
# Updated 02/12/2012 by Xplode
# Operating system : Windows 7 Professional (32 bits)
# User : Gustav7 - GUSTAV7-PC
# Boot Mode : Normal
# Running from : C:\Users\Gustav7\Desktop\adwcleaner.exe
# Option [Search]
***** [Services] *****
***** [Files / Folders] *****
Folder Found : C:\ProgramData\Ask
Folder Found : C:\Users\Gustav7\AppData\Local\APN
Folder Found : C:\Users\Gustav7\AppData\LocalLow\AskToolbar
***** [Registry] *****
Re: PC neuspava.
Dejte delete.
Pošlu sem kolegu
Pošlu sem kolegu
Nepoužívejte COMBOFIX bez doporučení rádce, může dojít k poškození systému!
Vždy před odvirováním počítače zazálohujte důležitá data
Chcete podpořit naše forum? Informace zde

K zastižení jsem spíše v noci, mezi 21.-23. hodinou
Pokud máte nějaké dotazy, můžete mi napsat na email Motji(zavináč)forum.viry.cz.
Vždy před odvirováním počítače zazálohujte důležitá data
Chcete podpořit naše forum? Informace zde

K zastižení jsem spíše v noci, mezi 21.-23. hodinou
Pokud máte nějaké dotazy, můžete mi napsat na email Motji(zavináč)forum.viry.cz.
Re: PC neuspava.
Stalo sa. Davam log.
# AdwCleaner v2.011 - Logfile created 12/06/2012 at 21:24:39
# Updated 02/12/2012 by Xplode
# Operating system : Windows 7 Professional (32 bits)
# User : Gustav7 - GUSTAV7-PC
# Boot Mode : Normal
# Running from : C:\Users\Gustav7\Desktop\adwcleaner.exe
# Option [Delete]
***** [Services] *****
***** [Files / Folders] *****
Folder Deleted : C:\ProgramData\Ask
Folder Deleted : C:\Users\Gustav7\AppData\Local\APN
Folder Deleted : C:\Users\Gustav7\AppData\LocalLow\AskToolbar
***** [Registry] *****
***** [Internet Browsers] *****
-\\ Internet Explorer v8.0.7600.16385
Replaced : [HKCU\Software\Microsoft\Internet Explorer\Main - Start Page] = hxxp://uk.ask.com/?l=dis&o=15768 --> hxxp://www.google.com
-\\ Google Chrome v23.0.1271.95
File : C:\Users\Gustav7\AppData\Local\Google\Chrome\User Data\Default\Preferences
Deleted [l.9] : homepage = "hxxp://search.conduit.com/?SearchSource=10&ctid=CT1750559",
Deleted [l.12] : urls_to_restore_on_startup = [ "hxxp://search.babylon.com/?affID=115131&babsrc=HP_iclro&mn[...]
Deleted [l.1752] : homepage = "hxxp://search.conduit.com/?SearchSource=10&ctid=CT1750559",
Deleted [l.2615] : urls_to_restore_on_startup = [ "hxxp://search.babylon.com/?affID=115131&babsrc=HP_iclro&mntrI[...]
*************************
AdwCleaner[R1].txt - [1501 octets] - [06/12/2012 12:56:06]
AdwCleaner[S1].txt - [1366 octets] - [06/12/2012 21:24:39]
########## EOF - C:\AdwCleaner[S1].txt - [1426 octets] ##########
# AdwCleaner v2.011 - Logfile created 12/06/2012 at 21:24:39
# Updated 02/12/2012 by Xplode
# Operating system : Windows 7 Professional (32 bits)
# User : Gustav7 - GUSTAV7-PC
# Boot Mode : Normal
# Running from : C:\Users\Gustav7\Desktop\adwcleaner.exe
# Option [Delete]
***** [Services] *****
***** [Files / Folders] *****
Folder Deleted : C:\ProgramData\Ask
Folder Deleted : C:\Users\Gustav7\AppData\Local\APN
Folder Deleted : C:\Users\Gustav7\AppData\LocalLow\AskToolbar
***** [Registry] *****
***** [Internet Browsers] *****
-\\ Internet Explorer v8.0.7600.16385
Replaced : [HKCU\Software\Microsoft\Internet Explorer\Main - Start Page] = hxxp://uk.ask.com/?l=dis&o=15768 --> hxxp://www.google.com
-\\ Google Chrome v23.0.1271.95
File : C:\Users\Gustav7\AppData\Local\Google\Chrome\User Data\Default\Preferences
Deleted [l.9] : homepage = "hxxp://search.conduit.com/?SearchSource=10&ctid=CT1750559",
Deleted [l.12] : urls_to_restore_on_startup = [ "hxxp://search.babylon.com/?affID=115131&babsrc=HP_iclro&mn[...]
Deleted [l.1752] : homepage = "hxxp://search.conduit.com/?SearchSource=10&ctid=CT1750559",
Deleted [l.2615] : urls_to_restore_on_startup = [ "hxxp://search.babylon.com/?affID=115131&babsrc=HP_iclro&mntrI[...]
*************************
AdwCleaner[R1].txt - [1501 octets] - [06/12/2012 12:56:06]
AdwCleaner[S1].txt - [1366 octets] - [06/12/2012 21:24:39]
########## EOF - C:\AdwCleaner[S1].txt - [1426 octets] ##########
Re: PC neuspava.
Ahoj, spusť příkazový řádek jako správce a napiš tam příkaz:
powercfg -requests | clip a enter
Výstup sem pak vlož pomocí Ctrl+V.
Pokud nebude nalezeno nic, co by bránilo uspání, stáhni toto, spusť to, nesahej na klávesnici ani myš a sleduj, jestli nebudou přibývat nějaké vstupní události.
powercfg -requests | clip a enter
Výstup sem pak vlož pomocí Ctrl+V.
Pokud nebude nalezeno nic, co by bránilo uspání, stáhni toto, spusť to, nesahej na klávesnici ani myš a sleduj, jestli nebudou přibývat nějaké vstupní události.
Pokud jste s naší pomocí spokojeni, můžete nás podpořit. Informace zde
Re: PC neuspava.
Ako vidis, na clip mi nedal ziadny vystup. Skusil som bez clip a vysledok je nizsie.
C:\Windows\system32>powercfg -requests | clip
C:\Windows\system32>powercfg -requests | clip
C:\Windows\system32>powercfg -requests
DISPLAY:
None.
SYSTEM:
[DRIVER] SoundMAX Integrated Digital HD Audio
&SUBSYS_1043818F&REV_1005\4&24cf1972&0&0001)
Prúd zvukových údajov sa práve používa.
AWAYMODE:
None.
C:\Windows\system32>powercfg -requests | clip
C:\Windows\system32>powercfg -requests | clip
C:\Windows\system32>powercfg -requests
DISPLAY:
None.
SYSTEM:
[DRIVER] SoundMAX Integrated Digital HD Audio
&SUBSYS_1043818F&REV_1005\4&24cf1972&0&0001)
Prúd zvukových údajov sa práve používa.
AWAYMODE:
None.
Re: PC neuspava.
Stiahol a otvoril som Imput activity. V pripojenych zariadeniach mi udava 5 zariadeni :
1.Klavesnica c.1 - Terminal Server Keyboard Driver
2.Klavesnica c.2 - HID Keyboard Device
3.Mys c.1 - Terminal Server Mouse Driver
4.Mys c.2 - HID Mouse Device
5.Zarizeni HID c.1 - HID-compilant consumer control device
Kedze ja mam len 1 HID mys a 1 HID klavesnicu, to ostatne je ake oznacenie ?
Inak cakal som, ako si mi kazal a nic sa nedialo.
1.Klavesnica c.1 - Terminal Server Keyboard Driver
2.Klavesnica c.2 - HID Keyboard Device
3.Mys c.1 - Terminal Server Mouse Driver
4.Mys c.2 - HID Mouse Device
5.Zarizeni HID c.1 - HID-compilant consumer control device
Kedze ja mam len 1 HID mys a 1 HID klavesnicu, to ostatne je ake oznacenie ?
Inak cakal som, ako si mi kazal a nic sa nedialo.
Re: PC neuspava.
Tomu uspání brání ovladač Adihdaud.sys (SoundMAX), jak jsi správně předpokládal.
Sežeň novější ovladač, jestli vůbec nějaký existuje. Může ho tuším nahradit i High Definition Audio Codecs
Co je to za základní desku?
Sežeň novější ovladač, jestli vůbec nějaký existuje. Může ho tuším nahradit i High Definition Audio Codecs
Co je to za základní desku?
Pokud jste s naší pomocí spokojeni, můžete nás podpořit. Informace zde
Re: PC neuspava.
Je to ASUS A8R MVP. Bohuzial na HDAC nefunguje. Momentalny ovladac je najnovsi, ktory sa mi podarilo zohnat. V kazdom pripade je fajn vediet o zdroji problemu a viem, v ktorom smere sa priebezne pohybovat pri jeho odstranovani.
Velke dakujem za pomoc a trpezlivost spolupracovat so mnou.
Do najblizsieho stretka prajem vsetko naj.
Velke dakujem za pomoc a trpezlivost spolupracovat so mnou.
Do najblizsieho stretka prajem vsetko naj.
Re: PC neuspava.
Nemáš zač.
Já bych se na to asi vykašlal, 21.12. je stejně konec světa. Jestli ten počítač neodolá teplotě 50000°C, nemá to smysl
Po odpaření se naspí, až ho to bude mrzet.
Já bych se na to asi vykašlal, 21.12. je stejně konec světa. Jestli ten počítač neodolá teplotě 50000°C, nemá to smysl
Po odpaření se naspí, až ho to bude mrzet.
Pokud jste s naší pomocí spokojeni, můžete nás podpořit. Informace zde



Přispějete na provoz fóra?