VIRY.CZ

Pomáháme v boji s počítačovou havěti!
https://forum.viry.cz:443/

Prosím o kontrolu logu, svchost 100% cpu

https://forum.viry.cz:443/viewtopic.php?t=134719

Stránka 1 z 1

Prosím o kontrolu logu, svchost 100% cpu

Napsal: 14 pro 2013 22:35
od Mellior
Na obstarožnom počítači nám už nejaký ten piatok vyťažuje proces svchost cpu na 100%. Preinštaloval som komplet windows no nepomohlo, tak sa obraciam o pomoc na vás :)

Tu je log:
Logfile of random's system information tool 1.09 (written by random/random)
Run by Admin at 2013-12-14 22:31:13
Systém Microsoft Windows XP Professional Service Pack 3
System drive C: has 36 GB (90%) free of 40 GB
Total RAM: 511 MB (44% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 22:31:48, on 14.12.2013
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP3 (6.00.2900.5512)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\ESET\ESET Endpoint Antivirus\egui.exe
C:\WINDOWS\system32\ctfmon.exe
C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe
C:\Program Files\ESET\ESET Endpoint Antivirus\ekrn.exe
C:\WINDOWS\system32\wuauclt.exe
C:\Program Files\Outlook Express\msimn.exe
C:\Program Files\Messenger\msmsgs.exe
D:\Prevzaté súbory\RSIT.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\trend micro\Admin.exe

O4 - HKLM\..\Run: [egui] "C:\Program Files\ESET\ESET Endpoint Antivirus\egui.exe" /hide /waitservice
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Office Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O22 - SharedTaskScheduler: Browseui preloader - {438755C2-A8BA-11D1-B96B-00A0C90312E1} - C:\WINDOWS\system32\browseui.dll
O22 - SharedTaskScheduler: Component Categories cache daemon - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\WINDOWS\system32\browseui.dll
O23 - Service: ESET HTTP Server (EhttpSrv) - ESET - C:\Program Files\ESET\ESET Endpoint Antivirus\EHttpSrv.exe
O23 - Service: ESET Service (ekrn) - ESET - C:\Program Files\ESET\ESET Endpoint Antivirus\ekrn.exe
O23 - Service: ESET SHA Service (ESHASRV) - ESET - C:\Program Files\ESET\ESET Endpoint Antivirus\EShaSrv.exe
O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Mozilla Foundation - C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe

--
End of file - 2923 bytes

=========Mozilla firefox=========

ProfilePath - C:\Documents and Settings\Admin\Application Data\Mozilla\Firefox\Profiles\ssv5ez3r.default

======Registry dump======

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"egui"=C:\Program Files\ESET\ESET Endpoint Antivirus\egui.exe [2012-07-04 3154464]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"=C:\WINDOWS\system32\ctfmon.exe [2008-04-14 15360]
"MSMSGS"=C:\Program Files\Messenger\msmsgs.exe [2008-04-14 1695232]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=145

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"midimapper"=midimap.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msadpcm"=msadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.trspch"=tssoft32.acm
"vidc.cvid"=iccvid.dll
"vidc.I420"=msh263.drv
"vidc.iv31"=ir32_32.dll
"vidc.iv32"=ir32_32.dll
"vidc.iv41"=ir41_32.ax
"vidc.iyuv"=iyuv_32.dll
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"vidc.uyvy"=msyuv.dll
"vidc.yuy2"=msyuv.dll
"vidc.yvu9"=tsbyuv.dll
"vidc.yvyu"=msyuv.dll
"wavemapper"=msacm32.drv
"msacm.msg723"=msg723.acm
"vidc.M263"=msh263.drv
"vidc.M261"=msh261.drv
"msacm.msaudio1"=msaud32.acm
"msacm.sl_anet"=sl_anet.acm
"msacm.iac2"=C:\WINDOWS\system32\iac25_32.ax
"vidc.iv50"=ir50_32.dll
"msacm.l3acm"=C:\WINDOWS\system32\l3codeca.acm

======List of files/folders created in the last 1 month======

2013-12-14 22:23:48 ----D---- C:\WINDOWS\system32\appmgmt
2013-12-14 21:14:04 ----D---- C:\Program Files\trend micro
2013-12-14 21:13:59 ----D---- C:\rsit
2013-12-14 20:25:02 ----A---- C:\WINDOWS\ODBC.INI
2013-12-14 20:24:35 ----A---- C:\WINDOWS\system32\mdimon.dll
2013-12-14 19:17:19 ----A---- C:\WINDOWS\system32\WMErrSKY.dll
2013-12-14 19:17:08 ----D---- C:\WINDOWS\system32\1051
2013-12-14 18:48:41 ----SHD---- C:\RECYCLER
2013-12-14 18:44:10 ----D---- C:\Program Files\ESET
2013-12-14 18:44:10 ----D---- C:\Documents and Settings\All Users\Application Data\ESET
2013-12-14 18:41:23 ----D---- C:\Documents and Settings\Admin\Application Data\Easeware
2013-12-14 18:41:05 ----D---- C:\Program Files\Easeware
2013-12-14 18:24:10 ----RSD---- C:\WINDOWS\assembly
2013-12-14 18:19:57 ----A---- C:\WINDOWS\system32\h323log.txt
2013-12-14 18:17:21 ----D---- C:\WINDOWS\Microsoft.NET
2013-12-14 18:15:38 ----A---- C:\WINDOWS\system32\drivers\audstub.sys
2013-12-14 18:15:28 ----A---- C:\WINDOWS\system32\hidserv.dll
2013-12-14 18:14:55 ----A---- C:\WINDOWS\system32\drivers\redbook.sys
2013-12-14 18:14:35 ----A---- C:\WINDOWS\system32\drivers\gameenum.sys
2013-12-14 18:14:23 ----A---- C:\WINDOWS\system32\drivers\nv4_mini.sys
2013-12-14 18:14:22 ----A---- C:\WINDOWS\system32\nv4_disp.dll
2013-12-14 18:14:12 ----A---- C:\WINDOWS\system32\drivers\fetnd5.sys
2013-12-14 18:14:10 ----A---- C:\WINDOWS\system32\usbui.dll
2013-12-14 18:14:04 ----A---- C:\WINDOWS\system32\drivers\UAGP35.SYS
2013-12-14 18:14:00 ----A---- C:\WINDOWS\system32\drivers\enum1394.sys
2013-12-14 18:13:57 ----A---- C:\WINDOWS\system32\HSFCISP2.dll
2013-12-14 18:13:57 ----A---- C:\WINDOWS\system32\drivers\mdmxsdk.sys
2013-12-14 18:13:57 ----A---- C:\WINDOWS\system32\drivers\HSFCXTS2.sys
2013-12-14 18:13:56 ----A---- C:\WINDOWS\system32\mdmxsdk.dll
2013-12-14 18:13:56 ----A---- C:\WINDOWS\system32\drivers\HSFBS2S2.sys
2013-12-14 18:13:55 ----A---- C:\WINDOWS\system32\drivers\HSFDPSP2.sys
2013-12-14 18:12:46 ----A---- C:\WINDOWS\system32\PerfStringBackup.INI
2013-12-14 18:12:45 ----SHD---- C:\WINDOWS\Installer
2013-12-14 18:12:45 ----D---- C:\Program Files\Common Files\ODBC
2013-12-14 18:12:45 ----A---- C:\WINDOWS\ODBCINST.INI
2013-12-14 18:12:41 ----D---- C:\Program Files\Common Files\SpeechEngines
2013-12-14 18:12:41 ----D---- C:\Program Files\Common Files\Microsoft Shared
2013-12-14 18:12:40 ----RD---- C:\Program Files
2013-12-14 18:12:40 ----D---- C:\Program Files\Common Files
2013-12-14 18:12:37 ----RA---- C:\WINDOWS\system32\kbdtuq.dll
2013-12-14 18:12:37 ----RA---- C:\WINDOWS\system32\kbdtuf.dll
2013-12-14 18:12:37 ----RA---- C:\WINDOWS\system32\kbdazel.dll
2013-12-14 18:12:34 ----RA---- C:\WINDOWS\system32\kbdycc.dll
2013-12-14 18:12:34 ----RA---- C:\WINDOWS\system32\kbduzb.dll
2013-12-14 18:12:34 ----RA---- C:\WINDOWS\system32\kbdur.dll
2013-12-14 18:12:34 ----RA---- C:\WINDOWS\system32\kbdtat.dll
2013-12-14 18:12:34 ----RA---- C:\WINDOWS\system32\kbdru1.dll
2013-12-14 18:12:34 ----RA---- C:\WINDOWS\system32\kbdru.dll
2013-12-14 18:12:34 ----RA---- C:\WINDOWS\system32\kbdmon.dll
2013-12-14 18:12:34 ----RA---- C:\WINDOWS\system32\kbdkyr.dll
2013-12-14 18:12:34 ----RA---- C:\WINDOWS\system32\kbdkaz.dll
2013-12-14 18:12:34 ----RA---- C:\WINDOWS\system32\kbdbu.dll
2013-12-14 18:12:34 ----RA---- C:\WINDOWS\system32\kbdblr.dll
2013-12-14 18:12:34 ----RA---- C:\WINDOWS\system32\kbdaze.dll
2013-12-14 18:12:32 ----RA---- C:\WINDOWS\system32\kbdhept.dll
2013-12-14 18:12:31 ----RA---- C:\WINDOWS\system32\kbdhela3.dll
2013-12-14 18:12:31 ----RA---- C:\WINDOWS\system32\kbdhela2.dll
2013-12-14 18:12:31 ----RA---- C:\WINDOWS\system32\kbdhe319.dll
2013-12-14 18:12:31 ----RA---- C:\WINDOWS\system32\kbdhe220.dll
2013-12-14 18:12:31 ----RA---- C:\WINDOWS\system32\kbdhe.dll
2013-12-14 18:12:31 ----RA---- C:\WINDOWS\system32\kbdgkl.dll
2013-12-14 18:12:30 ----RA---- C:\WINDOWS\system32\kbdlt1.dll
2013-12-14 18:12:29 ----RA---- C:\WINDOWS\system32\kbdlv1.dll
2013-12-14 18:12:29 ----RA---- C:\WINDOWS\system32\kbdlv.dll
2013-12-14 18:12:29 ----RA---- C:\WINDOWS\system32\kbdlt.dll
2013-12-14 18:12:29 ----RA---- C:\WINDOWS\system32\kbdest.dll
2013-12-14 18:12:27 ----RA---- C:\WINDOWS\system32\kbdycl.dll
2013-12-14 18:12:27 ----RA---- C:\WINDOWS\system32\kbdsl1.dll
2013-12-14 18:12:27 ----RA---- C:\WINDOWS\system32\kbdsl.dll
2013-12-14 18:12:27 ----RA---- C:\WINDOWS\system32\kbdro.dll
2013-12-14 18:12:27 ----RA---- C:\WINDOWS\system32\kbdpl1.dll
2013-12-14 18:12:27 ----RA---- C:\WINDOWS\system32\kbdpl.dll
2013-12-14 18:12:27 ----RA---- C:\WINDOWS\system32\kbdhu1.dll
2013-12-14 18:12:27 ----RA---- C:\WINDOWS\system32\kbdhu.dll
2013-12-14 18:12:27 ----RA---- C:\WINDOWS\system32\kbdcz2.dll
2013-12-14 18:12:27 ----RA---- C:\WINDOWS\system32\kbdcz1.dll
2013-12-14 18:12:27 ----RA---- C:\WINDOWS\system32\kbdcz.dll
2013-12-14 18:12:27 ----RA---- C:\WINDOWS\system32\kbdcr.dll
2013-12-14 18:12:27 ----RA---- C:\WINDOWS\system32\KBDAL.DLL
2013-12-14 18:12:24 ----A---- C:\WINDOWS\system32\irclass.dll
2013-12-14 18:12:24 ----A---- C:\WINDOWS\system32\dgsetup.dll
2013-12-14 18:12:24 ----A---- C:\WINDOWS\system32\dgrpsetu.dll
2013-12-14 18:12:23 ----A---- C:\WINDOWS\system32\spxcoins.dll
2013-12-14 18:12:23 ----A---- C:\WINDOWS\system32\EqnClass.Dll
2013-12-14 18:12:21 ----A---- C:\WINDOWS\TASKMAN.EXE
2013-12-14 18:12:20 ----N---- C:\WINDOWS\system32\CONFIG.TMP
2013-12-14 18:12:20 ----A---- C:\WINDOWS\system32\drivers\irenum.sys
2013-12-14 18:12:20 ----A---- C:\WINDOWS\system32\batt.dll
2013-12-14 18:12:20 ----A---- C:\WINDOWS\NOTEPAD.EXE
2013-12-14 18:12:18 ----A---- C:\WINDOWS\system32\storprop.dll
2013-12-14 18:12:10 ----ASH---- C:\Documents and Settings\All Users\Application Data\desktop.ini
2013-12-14 18:12:05 ----RA---- C:\WINDOWS\SET8.tmp
2013-12-14 18:12:02 ----RA---- C:\WINDOWS\SET4.tmp
2013-12-14 18:12:01 ----RA---- C:\WINDOWS\SET3.tmp
2013-12-14 18:11:54 ----D---- C:\WINDOWS\system32\CatRoot2
2013-12-14 18:11:54 ----D---- C:\WINDOWS\system32\CatRoot
2013-12-14 18:11:49 ----SD---- C:\Documents and Settings\All Users\Application Data\Microsoft
2013-12-14 18:11:27 ----A---- C:\WINDOWS\setuplog.txt
2013-12-14 18:11:24 ----SHD---- C:\System Volume Information
2013-12-14 18:11:24 ----D---- C:\Documents and Settings
2013-12-14 18:11:23 ----A---- C:\WINDOWS\system32\FNTCACHE.DAT
2013-12-14 18:10:30 ----SH---- C:\boot.ini
2013-12-14 18:07:40 ----A---- C:\WINDOWS\system32\drivers\USBSTOR.SYS
2013-12-14 18:03:14 ----RSHDC---- C:\WINDOWS\system32\dllcache
2013-12-14 18:03:14 ----RSD---- C:\WINDOWS\Fonts
2013-12-14 18:03:14 ----RD---- C:\WINDOWS\Web
2013-12-14 18:03:14 ----HD---- C:\WINDOWS\inf
2013-12-14 18:03:14 ----D---- C:\WINDOWS\WinSxS
2013-12-14 18:03:14 ----D---- C:\WINDOWS\twain_32
2013-12-14 18:03:14 ----D---- C:\WINDOWS\Temp
2013-12-14 18:03:14 ----D---- C:\WINDOWS\system32\wins
2013-12-14 18:03:14 ----D---- C:\WINDOWS\system32\wbem
2013-12-14 18:03:14 ----D---- C:\WINDOWS\system32\usmt
2013-12-14 18:03:14 ----D---- C:\WINDOWS\system32\spool
2013-12-14 18:03:14 ----D---- C:\WINDOWS\system32\ShellExt
2013-12-14 18:03:14 ----D---- C:\WINDOWS\system32\Setup
2013-12-14 18:03:14 ----D---- C:\WINDOWS\system32\scripting
2013-12-14 18:03:14 ----D---- C:\WINDOWS\system32\ras
2013-12-14 18:03:14 ----D---- C:\WINDOWS\system32\oobe
2013-12-14 18:03:14 ----D---- C:\WINDOWS\system32\npp
2013-12-14 18:03:14 ----D---- C:\WINDOWS\system32\mui
2013-12-14 18:03:14 ----D---- C:\WINDOWS\system32\inetsrv
2013-12-14 18:03:14 ----D---- C:\WINDOWS\system32\IME
2013-12-14 18:03:14 ----D---- C:\WINDOWS\system32\icsxml
2013-12-14 18:03:14 ----D---- C:\WINDOWS\system32\ias
2013-12-14 18:03:14 ----D---- C:\WINDOWS\system32\export
2013-12-14 18:03:14 ----D---- C:\WINDOWS\system32\en
2013-12-14 18:03:14 ----D---- C:\WINDOWS\system32\drivers\etc
2013-12-14 18:03:14 ----D---- C:\WINDOWS\system32\drivers\disdn
2013-12-14 18:03:14 ----D---- C:\WINDOWS\system32\drivers
2013-12-14 18:03:14 ----D---- C:\WINDOWS\system32\dhcp
2013-12-14 18:03:14 ----D---- C:\WINDOWS\system32\config
2013-12-14 18:03:14 ----D---- C:\WINDOWS\system32\3com_dmi
2013-12-14 18:03:14 ----D---- C:\WINDOWS\system32\3076
2013-12-14 18:03:14 ----D---- C:\WINDOWS\system32\2052
2013-12-14 18:03:14 ----D---- C:\WINDOWS\system32\1054
2013-12-14 18:03:14 ----D---- C:\WINDOWS\system32\1042
2013-12-14 18:03:14 ----D---- C:\WINDOWS\system32\1041
2013-12-14 18:03:14 ----D---- C:\WINDOWS\system32\1037
2013-12-14 18:03:14 ----D---- C:\WINDOWS\system32\1033
2013-12-14 18:03:14 ----D---- C:\WINDOWS\system32\1031
2013-12-14 18:03:14 ----D---- C:\WINDOWS\system32\1028
2013-12-14 18:03:14 ----D---- C:\WINDOWS\system32\1025
2013-12-14 18:03:14 ----D---- C:\WINDOWS\system32
2013-12-14 18:03:14 ----D---- C:\WINDOWS\system
2013-12-14 18:03:14 ----D---- C:\WINDOWS\security
2013-12-14 18:03:14 ----D---- C:\WINDOWS\Resources
2013-12-14 18:03:14 ----D---- C:\WINDOWS\repair
2013-12-14 18:03:14 ----D---- C:\WINDOWS\Provisioning
2013-12-14 18:03:14 ----D---- C:\WINDOWS\pchealth
2013-12-14 18:03:14 ----D---- C:\WINDOWS\PeerNet
2013-12-14 18:03:14 ----D---- C:\WINDOWS\Network Diagnostic
2013-12-14 18:03:14 ----D---- C:\WINDOWS\mui
2013-12-14 18:03:14 ----D---- C:\WINDOWS\msapps
2013-12-14 18:03:14 ----D---- C:\WINDOWS\msagent
2013-12-14 18:03:14 ----D---- C:\WINDOWS\Media
2013-12-14 18:03:14 ----D---- C:\WINDOWS\L2Schemas
2013-12-14 18:03:14 ----D---- C:\WINDOWS\java
2013-12-14 18:03:14 ----D---- C:\WINDOWS\ime
2013-12-14 18:03:14 ----D---- C:\WINDOWS\Help
2013-12-14 18:03:14 ----D---- C:\WINDOWS\ehome
2013-12-14 18:03:14 ----D---- C:\WINDOWS\Driver Cache
2013-12-14 18:03:14 ----D---- C:\WINDOWS\Debug
2013-12-14 18:03:14 ----D---- C:\WINDOWS\Cursors
2013-12-14 18:03:14 ----D---- C:\WINDOWS\Connection Wizard
2013-12-14 18:03:14 ----D---- C:\WINDOWS\Config
2013-12-14 18:03:14 ----D---- C:\WINDOWS\AppPatch
2013-12-14 18:03:14 ----D---- C:\WINDOWS\addins
2013-12-14 18:03:14 ----D---- C:\WINDOWS
2013-12-14 18:03:13 ----ASH---- C:\pagefile.sys
2013-12-14 17:56:43 ----D---- C:\Documents and Settings\Admin\Application Data\WinRAR
2013-12-14 17:56:38 ----D---- C:\Program Files\WinRAR
2013-12-14 17:39:07 ----D---- C:\Documents and Settings\Admin\Application Data\Mozilla
2013-12-14 17:38:16 ----D---- C:\Program Files\Mozilla Maintenance Service
2013-12-14 17:38:16 ----D---- C:\Documents and Settings\All Users\Application Data\Mozilla
2013-12-14 17:38:08 ----D---- C:\Program Files\Mozilla Firefox
2013-12-14 17:29:32 ----D---- C:\Documents and Settings\Admin\Application Data\Identities
2013-12-14 17:29:28 ----HD---- C:\Program Files\Uninstall Information
2013-12-14 17:29:19 ----ASH---- C:\Documents and Settings\Admin\Application Data\desktop.ini
2013-12-14 17:29:18 ----SD---- C:\Documents and Settings\Admin\Application Data\Microsoft
2013-12-14 17:29:17 ----ASH---- C:\hiberfil.sys
2013-12-14 17:28:37 ----A---- C:\WINDOWS\system32\wpa.bak
2013-12-14 17:27:42 ----D---- C:\WINDOWS\system32\SoftwareDistribution
2013-12-14 17:26:44 ----D---- C:\WINDOWS\SoftwareDistribution
2013-12-14 17:26:34 ----SD---- C:\WINDOWS\system32\Microsoft
2013-12-14 17:26:34 ----D---- C:\WINDOWS\Prefetch
2013-12-14 17:26:34 ----A---- C:\WINDOWS\SchedLgU.Txt
2013-12-14 17:25:29 ----AS---- C:\WINDOWS\bootstat.dat
2013-12-14 17:22:46 ----D---- C:\WINDOWS\system32\xircom
2013-12-14 17:22:46 ----D---- C:\Program Files\xerox
2013-12-14 17:22:46 ----D---- C:\Program Files\microsoft frontpage
2013-12-14 17:22:24 ----RASH---- C:\MSDOS.SYS
2013-12-14 17:22:24 ----RASH---- C:\IO.SYS
2013-12-14 17:22:24 ----A---- C:\WINDOWS\control.ini
2013-12-14 17:22:24 ----A---- C:\CONFIG.SYS
2013-12-14 17:22:24 ----A---- C:\AUTOEXEC.BAT
2013-12-14 17:22:06 ----A---- C:\WINDOWS\OEWABLog.txt
2013-12-14 17:22:02 ----A---- C:\WINDOWS\system32\mapi32.dll
2013-12-14 17:20:54 ----SD---- C:\WINDOWS\Downloaded Program Files
2013-12-14 17:20:54 ----RD---- C:\WINDOWS\Offline Web Pages
2013-12-14 17:20:41 ----HD---- C:\Program Files\WindowsUpdate
2013-12-14 17:20:17 ----D---- C:\WINDOWS\system32\DirectX
2013-12-14 17:20:10 ----A---- C:\WINDOWS\system32\atrace.dll
2013-12-14 17:20:07 ----A---- C:\WINDOWS\system32\desktop.ini
2013-12-14 17:20:07 ----A---- C:\WINDOWS\desktop.ini
2013-12-14 17:19:59 ----A---- C:\WINDOWS\system32\nmevtmsg.dll
2013-12-14 17:19:58 ----A---- C:\WINDOWS\system32\acctres.dll
2013-12-14 17:19:57 ----D---- C:\Program Files\Common Files\Services
2013-12-14 17:19:54 ----SD---- C:\WINDOWS\Tasks
2013-12-14 17:19:54 ----A---- C:\WINDOWS\system32\icfgnt5.dll
2013-12-14 17:19:52 ----D---- C:\Program Files\Common Files\MSSoap
2013-12-14 17:19:48 ----D---- C:\WINDOWS\srchasst
2013-12-14 17:19:47 ----D---- C:\WINDOWS\system32\Macromed
2013-12-14 17:19:43 ----A---- C:\WINDOWS\system32\wuweb.dll
2013-12-14 17:19:43 ----A---- C:\WINDOWS\system32\wups.dll
2013-12-14 17:19:43 ----A---- C:\WINDOWS\system32\wucltui.dll
2013-12-14 17:19:43 ----A---- C:\WINDOWS\system32\wuauserv.dll
2013-12-14 17:19:43 ----A---- C:\WINDOWS\system32\wuaueng1.dll
2013-12-14 17:19:43 ----A---- C:\WINDOWS\system32\wuaueng.dll
2013-12-14 17:19:42 ----A---- C:\WINDOWS\system32\wuauclt1.exe
2013-12-14 17:19:42 ----A---- C:\WINDOWS\system32\wuauclt.exe
2013-12-14 17:19:42 ----A---- C:\WINDOWS\system32\wuapi.dll
2013-12-14 17:19:42 ----A---- C:\WINDOWS\system32\qmgrprxy.dll
2013-12-14 17:19:42 ----A---- C:\WINDOWS\system32\qmgr.dll
2013-12-14 17:19:42 ----A---- C:\WINDOWS\system32\bitsprx4.dll
2013-12-14 17:19:42 ----A---- C:\WINDOWS\system32\bitsprx3.dll
2013-12-14 17:19:42 ----A---- C:\WINDOWS\system32\bitsprx2.dll
2013-12-14 17:19:37 ----D---- C:\Program Files\Movie Maker
2013-12-14 17:19:12 ----A---- C:\WINDOWS\system32\safrslv.dll
2013-12-14 17:19:12 ----A---- C:\WINDOWS\system32\safrdm.dll
2013-12-14 17:19:12 ----A---- C:\WINDOWS\system32\safrcdlg.dll
2013-12-14 17:19:12 ----A---- C:\WINDOWS\system32\racpldlg.dll
2013-12-14 17:19:07 ----A---- C:\WINDOWS\system32\fltMc.exe
2013-12-14 17:19:07 ----A---- C:\WINDOWS\system32\fltlib.dll
2013-12-14 17:19:07 ----A---- C:\WINDOWS\system32\drivers\fltMgr.sys
2013-12-14 17:19:06 ----D---- C:\WINDOWS\system32\Restore
2013-12-14 17:19:06 ----A---- C:\WINDOWS\system32\srsvc.dll
2013-12-14 17:19:06 ----A---- C:\WINDOWS\system32\srrstr.dll
2013-12-14 17:19:06 ----A---- C:\WINDOWS\system32\srclient.dll
2013-12-14 17:19:06 ----A---- C:\WINDOWS\system32\drivers\sr.sys
2013-12-14 17:19:05 ----A---- C:\WINDOWS\system32\mnmdd.dll
2013-12-14 17:19:05 ----A---- C:\WINDOWS\system32\isrdbg32.dll
2013-12-14 17:19:05 ----A---- C:\WINDOWS\system32\ils.dll
2013-12-14 17:19:04 ----A---- C:\WINDOWS\system32\nmmkcert.dll
2013-12-14 17:19:04 ----A---- C:\WINDOWS\system32\msconf.dll
2013-12-14 17:19:04 ----A---- C:\WINDOWS\system32\mnmsrvc.exe
2013-12-14 17:19:01 ----D---- C:\Program Files\NetMeeting
2013-12-14 17:19:01 ----A---- C:\WINDOWS\system32\msoert2.dll
2013-12-14 17:19:01 ----A---- C:\WINDOWS\system32\msoeacct.dll
2013-12-14 17:18:59 ----A---- C:\WINDOWS\system32\inetres.dll
2013-12-14 17:18:59 ----A---- C:\WINDOWS\system32\inetcomm.dll
2013-12-14 17:18:57 ----D---- C:\Program Files\Outlook Express
2013-12-14 17:18:57 ----A---- C:\WINDOWS\system32\schedsvc.dll
2013-12-14 17:18:57 ----A---- C:\WINDOWS\system32\mstinit.exe
2013-12-14 17:18:57 ----A---- C:\WINDOWS\system32\mstask.dll
2013-12-14 17:18:56 ----A---- C:\WINDOWS\system32\isign32.dll
2013-12-14 17:18:56 ----A---- C:\WINDOWS\system32\inetcfg.dll
2013-12-14 17:18:56 ----A---- C:\WINDOWS\system32\icwphbk.dll
2013-12-14 17:18:56 ----A---- C:\WINDOWS\system32\icwdial.dll
2013-12-14 17:18:49 ----D---- C:\Program Files\Common Files\System
2013-12-14 17:18:47 ----D---- C:\Program Files\Internet Explorer
2013-12-14 17:18:16 ----A---- C:\WINDOWS\system32\emptyregdb.dat
2013-12-14 17:18:06 ----D---- C:\Program Files\ComPlus Applications
2013-12-14 17:18:04 ----A---- C:\WINDOWS\vbaddin.ini
2013-12-14 17:18:04 ----A---- C:\WINDOWS\vb.ini
2013-12-14 17:17:59 ----D---- C:\WINDOWS\Registration
2013-12-14 17:17:52 ----D---- C:\Program Files\Windows Media Player
2013-12-14 17:17:52 ----D---- C:\Program Files\Online Services
2013-12-14 17:17:43 ----D---- C:\Program Files\Messenger
2013-12-14 17:17:38 ----D---- C:\Program Files\MSN Gaming Zone
2013-12-14 17:17:38 ----A---- C:\WINDOWS\system32\write.exe
2013-12-14 17:17:26 ----A---- C:\WINDOWS\system32\sndvol32.exe
2013-12-14 17:17:26 ----A---- C:\WINDOWS\system32\hticons.dll
2013-12-14 17:17:26 ----A---- C:\WINDOWS\system32\avwav.dll
2013-12-14 17:17:25 ----A---- C:\WINDOWS\system32\winchat.exe
2013-12-14 17:17:25 ----A---- C:\WINDOWS\system32\avtapi.dll
2013-12-14 17:17:25 ----A---- C:\WINDOWS\system32\avmeter.dll
2013-12-14 17:17:16 ----A---- C:\WINDOWS\system32\getuname.dll
2013-12-14 17:17:15 ----A---- C:\WINDOWS\system32\sol.exe
2013-12-14 17:17:15 ----A---- C:\WINDOWS\system32\charmap.exe
2013-12-14 17:17:15 ----A---- C:\WINDOWS\system32\calc.exe
2013-12-14 17:17:14 ----A---- C:\WINDOWS\system32\winmine.exe
2013-12-14 17:17:14 ----A---- C:\WINDOWS\system32\reset.exe
2013-12-14 17:17:14 ----A---- C:\WINDOWS\system32\mshearts.exe
2013-12-14 17:17:14 ----A---- C:\WINDOWS\system32\freecell.exe
2013-12-14 17:17:13 ----A---- C:\WINDOWS\system32\usrlogon.cmd
2013-12-14 17:17:13 ----A---- C:\WINDOWS\system32\tsshutdn.exe
2013-12-14 17:17:13 ----A---- C:\WINDOWS\system32\tslabels.ini
2013-12-14 17:17:13 ----A---- C:\WINDOWS\system32\tskill.exe
2013-12-14 17:17:13 ----A---- C:\WINDOWS\system32\tsdiscon.exe
2013-12-14 17:17:13 ----A---- C:\WINDOWS\system32\tscon.exe
2013-12-14 17:17:13 ----A---- C:\WINDOWS\system32\shadow.exe
2013-12-14 17:17:13 ----A---- C:\WINDOWS\system32\rwinsta.exe
2013-12-14 17:17:13 ----A---- C:\WINDOWS\system32\regini.exe
2013-12-14 17:17:13 ----A---- C:\WINDOWS\system32\rdpcfgex.dll
2013-12-14 17:17:12 ----A---- C:\WINDOWS\system32\qwinsta.exe
2013-12-14 17:17:12 ----A---- C:\WINDOWS\system32\qappsrv.exe
2013-12-14 17:17:11 ----A---- C:\WINDOWS\system32\msg.exe
2013-12-14 17:17:11 ----A---- C:\WINDOWS\system32\msdtcprf.ini
2013-12-14 17:17:11 ----A---- C:\WINDOWS\system32\logoff.exe
2013-12-14 17:17:11 ----A---- C:\WINDOWS\system32\cdmodem.dll
2013-12-14 17:17:03 ----A---- C:\WINDOWS\system32\wmimgmt.msc
2013-12-14 17:16:51 ----D---- C:\Program Files\MSN
2013-12-14 17:16:50 ----A---- C:\WINDOWS\system32\accwiz.exe
2013-12-14 17:16:49 ----D---- C:\Program Files\Windows NT
2013-12-14 17:16:49 ----A---- C:\WINDOWS\system32\sndrec32.exe
2013-12-14 17:16:49 ----A---- C:\WINDOWS\system32\mplay32.exe
2013-12-14 17:16:49 ----A---- C:\WINDOWS\system32\hypertrm.dll
2013-12-14 17:16:48 ----A---- C:\WINDOWS\system32\spider.exe
2013-12-14 17:16:48 ----A---- C:\WINDOWS\system32\mspaint.exe
2013-12-14 17:16:48 ----A---- C:\WINDOWS\system32\clipbrd.exe
2013-12-14 17:16:47 ----D---- C:\WINDOWS\system32\en-US
2013-12-14 17:16:47 ----A---- C:\WINDOWS\system32\tsgqec.dll
2013-12-14 17:16:47 ----A---- C:\WINDOWS\system32\tscfgwmi.dll
2013-12-14 17:16:47 ----A---- C:\WINDOWS\system32\drivers\tdtcp.sys
2013-12-14 17:16:47 ----A---- C:\WINDOWS\system32\drivers\tdpipe.sys
2013-12-14 17:16:47 ----A---- C:\WINDOWS\system32\drivers\rdpwd.sys
2013-12-14 17:16:46 ----A---- C:\WINDOWS\system32\rhttpaa.dll
2013-12-14 17:16:46 ----A---- C:\WINDOWS\system32\mstscax.dll
2013-12-14 17:16:46 ----A---- C:\WINDOWS\system32\aaclient.dll
2013-12-14 17:16:45 ----A---- C:\WINDOWS\system32\termsrv.dll
2013-12-14 17:16:45 ----A---- C:\WINDOWS\system32\sessmgr.exe
2013-12-14 17:16:45 ----A---- C:\WINDOWS\system32\remotepg.dll
2013-12-14 17:16:45 ----A---- C:\WINDOWS\system32\rdshost.exe
2013-12-14 17:16:45 ----A---- C:\WINDOWS\system32\rdsaddin.exe
2013-12-14 17:16:45 ----A---- C:\WINDOWS\system32\rdchost.dll
2013-12-14 17:16:45 ----A---- C:\WINDOWS\system32\mstsc.exe
2013-12-14 17:16:44 ----D---- C:\WINDOWS\system32\MsDtc
2013-12-14 17:16:44 ----A---- C:\WINDOWS\system32\rdpwsx.dll
2013-12-14 17:16:44 ----A---- C:\WINDOWS\system32\rdpsnd.dll
2013-12-14 17:16:44 ----A---- C:\WINDOWS\system32\rdpclip.exe
2013-12-14 17:16:44 ----A---- C:\WINDOWS\system32\qprocess.exe
2013-12-14 17:16:44 ----A---- C:\WINDOWS\system32\msdtcuiu.dll
2013-12-14 17:16:44 ----A---- C:\WINDOWS\system32\icaapi.dll
2013-12-14 17:16:44 ----A---- C:\WINDOWS\system32\cfgbkend.dll
2013-12-14 17:16:43 ----A---- C:\WINDOWS\system32\xolehlp.dll
2013-12-14 17:16:43 ----A---- C:\WINDOWS\system32\mtxoci.dll
2013-12-14 17:16:43 ----A---- C:\WINDOWS\system32\msdtctm.dll
2013-12-14 17:16:43 ----A---- C:\WINDOWS\system32\msdtcprx.dll
2013-12-14 17:16:43 ----A---- C:\WINDOWS\system32\msdtclog.dll
2013-12-14 17:16:43 ----A---- C:\WINDOWS\system32\msdtc.exe
2013-12-14 17:16:42 ----A---- C:\WINDOWS\system32\mtxlegih.dll
2013-12-14 17:16:42 ----A---- C:\WINDOWS\system32\mtxex.dll
2013-12-14 17:16:42 ----A---- C:\WINDOWS\system32\mtxdm.dll
2013-12-14 17:16:42 ----A---- C:\WINDOWS\system32\dcomcnfg.exe
2013-12-14 17:16:41 ----D---- C:\WINDOWS\system32\Com
2013-12-14 17:16:41 ----A---- C:\WINDOWS\system32\stclient.dll
2013-12-14 17:16:41 ----A---- C:\WINDOWS\system32\comrepl.dll
2013-12-14 17:16:41 ----A---- C:\WINDOWS\system32\comaddin.dll
2013-12-14 17:16:41 ----A---- C:\WINDOWS\system32\colbact.dll
2013-12-14 17:16:41 ----A---- C:\WINDOWS\system32\clbcatex.dll
2013-12-14 17:16:41 ----A---- C:\WINDOWS\system32\catsrvps.dll
2013-12-14 17:16:40 ----A---- C:\WINDOWS\system32\comuid.dll
2013-12-14 17:16:40 ----A---- C:\WINDOWS\system32\comsvcs.dll
2013-12-14 17:16:40 ----A---- C:\WINDOWS\system32\comsnap.dll
2013-12-14 17:16:40 ----A---- C:\WINDOWS\system32\catsrvut.dll
2013-12-14 17:16:40 ----A---- C:\WINDOWS\system32\catsrv.dll
2013-12-14 17:16:39 ----A---- C:\WINDOWS\system32\clbcatq.dll
2013-12-14 17:16:33 ----A---- C:\WINDOWS\system32\servdeps.dll
2013-12-14 17:16:33 ----A---- C:\WINDOWS\system32\mmfutil.dll
2013-12-14 17:16:32 ----A---- C:\WINDOWS\system32\licwmi.dll
2013-12-14 17:16:32 ----A---- C:\WINDOWS\system32\cmprops.dll
2013-12-14 17:16:27 ----A---- C:\WINDOWS\system32\drivers\termdd.sys
2013-12-14 17:16:27 ----A---- C:\WINDOWS\system32\drivers\rdpdr.sys

======List of files/folders modified in the last 1 month======

2013-12-14 22:00:35 ----A---- C:\WINDOWS\win.ini
2013-12-14 18:17:15 ----A---- C:\WINDOWS\system.ini
2013-12-14 17:21:46 ----ASH---- C:\WINDOWS\fonts\desktop.ini

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 ohci1394;OHCI Compliant IEEE 1394 Host Controller; C:\WINDOWS\system32\DRIVERS\ohci1394.sys [2008-04-14 61696]
R0 uagp35;Microsoft AGPv3.5 Filter; C:\WINDOWS\system32\DRIVERS\uagp35.sys [2008-04-14 44672]
R1 eamon;eamon; C:\WINDOWS\system32\DRIVERS\eamon.sys [2012-07-10 164464]
R1 ehdrv;ehdrv; C:\WINDOWS\system32\DRIVERS\ehdrv.sys [2012-03-29 123760]
R1 epfwtdir;epfwtdir; C:\WINDOWS\system32\DRIVERS\epfwtdir.sys [2012-03-29 107280]
R1 intelppm;Intel Processor Driver; C:\WINDOWS\system32\DRIVERS\intelppm.sys [2008-04-14 36352]
R2 mdmxsdk;mdmxsdk; C:\WINDOWS\system32\DRIVERS\mdmxsdk.sys [2008-04-14 11868]
R3 Arp1394;1394 ARP Client Protocol; C:\WINDOWS\system32\DRIVERS\arp1394.sys [2008-04-14 60800]
R3 FETNDIS;VIA PCI 10/100Mb Fast Ethernet Adapter NT Driver; C:\WINDOWS\system32\DRIVERS\fetnd5.sys [2001-08-17 27165]
R3 hidusb;Microsoft HID Class Driver; C:\WINDOWS\system32\DRIVERS\hidusb.sys [2008-04-14 10368]
R3 HSF_DP;HSF_DP; C:\WINDOWS\system32\DRIVERS\HSFDPSP2.sys [2008-04-14 1041536]
R3 HSFHWBS2;HSFHWBS2; C:\WINDOWS\system32\DRIVERS\HSFBS2S2.sys [2008-04-14 220032]
R3 mouhid;Mouse HID Driver; C:\WINDOWS\system32\DRIVERS\mouhid.sys [2008-04-14 12160]
R3 NIC1394;1394 Net Driver; C:\WINDOWS\system32\DRIVERS\nic1394.sys [2008-04-14 61824]
R3 nv;nv; C:\WINDOWS\system32\DRIVERS\nv4_mini.sys [2008-04-13 1897408]
R3 usbuhci;Microsoft USB Universal Host Controller Miniport Driver; C:\WINDOWS\system32\DRIVERS\usbuhci.sys [2008-04-14 20608]
R3 winachsf;winachsf; C:\WINDOWS\system32\DRIVERS\HSFCXTS2.sys [2008-04-14 685056]
S3 USBSTOR;USB Mass Storage Driver; C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS [2008-04-14 26368]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 clr_optimization_v2.0.50727_32;.NET Runtime Optimization Service v2.0.50727_X86; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe [2008-07-25 69632]
R2 ekrn;ESET Service; C:\Program Files\ESET\ESET Endpoint Antivirus\ekrn.exe [2012-07-04 999704]
S3 aspnet_state;ASP.NET State Service; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe [2008-07-25 34312]
S3 EhttpSrv;ESET HTTP Server; C:\Program Files\ESET\ESET Endpoint Antivirus\EHttpSrv.exe [2012-07-04 31056]
S3 ESHASRV;ESET SHA Service; C:\Program Files\ESET\ESET Endpoint Antivirus\EShaSrv.exe [2012-07-04 183944]
S3 MozillaMaintenance;Mozilla Maintenance Service; C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe [2013-12-05 119408]

-----------------EOF-----------------

Re: Prosím o kontrolu logu, svchost 100% cpu

Napsal: 14 pro 2013 22:56
od Rudy
Zdravím!
Na zkoušku vypněte aut. aktualizace oper. systému.

Re: Prosím o kontrolu logu, svchost 100% cpu

Napsal: 14 pro 2013 22:59
od Mellior
Nepomohlo

Re: Prosím o kontrolu logu, svchost 100% cpu

Napsal: 14 pro 2013 23:05
od Rudy
Spusťte tuto utilitu:
Stáhněte AdwCleaner http://general-changelog-team.fr/fr/dow ... adwcleaner
Uložte na plochu
Ukončete všechny programy
Klikněte nejprve na >Scan< a pak na >Clean<.
Proběhne skenováni a pak se objeví log, který sem vložte.

Re: Prosím o kontrolu logu, svchost 100% cpu

Napsal: 15 pro 2013 11:00
od Mellior
Nenašiel nič...

# AdwCleaner v3.015 - Report created 15/12/2013 at 10:55:07
# Updated 10/12/2013 by Xplode
# Operating System : Microsoft Windows XP Service Pack 3 (32 bits)
# Username : Admin
# Running from : C:\Documents and Settings\Admin\Desktop\adwcleaner.exe
# Option : Clean

***** [ Services ] *****


***** [ Files / Folders ] *****


***** [ Shortcuts ] *****


***** [ Registry ] *****


***** [ Browsers ] *****

-\\ Internet Explorer v6.0.2900.5512


-\\ Mozilla Firefox v26.0 (sk)

[ File : C:\Documents and Settings\Admin\Application Data\Mozilla\Firefox\Profiles\ssv5ez3r.default\prefs.js ]


*************************

AdwCleaner[R0].txt - [800 octets] - [15/12/2013 10:26:12]
AdwCleaner[S0].txt - [722 octets] - [15/12/2013 10:55:07]

########## EOF - C:\AdwCleaner\AdwCleaner[S0].txt - [781 octets] ##########

Re: Prosím o kontrolu logu, svchost 100% cpu

Napsal: 15 pro 2013 11:54
od Rudy
Stáhněte OTM: http://oldtimer.geekstogo.com/OTM.exe a uložte na plochu. Spusťte a do levého okna zkopírujte:
:commands
[Purity]
[Emptytemp]
[Emptyflash]

a klikněte na >MoveIt!<. Po skenu restartujte PC a dejte nový log RSIT.

Re: Prosím o kontrolu logu, svchost 100% cpu

Napsal: 15 pro 2013 12:48
od Mellior
Logfile of random's system information tool 1.09 (written by random/random)
Run by Admin at 2013-12-15 12:47:09
Systém Microsoft Windows XP Professional Service Pack 3
System drive C: has 36 GB (90%) free of 40 GB
Total RAM: 511 MB (54% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 12:47:20, on 15.12.2013
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe
C:\Program Files\ESET\ESET Endpoint Antivirus\ekrn.exe
C:\WINDOWS\system32\wuauclt.exe
C:\WINDOWS\notepad.exe
C:\Program Files\ESET\ESET Endpoint Antivirus\egui.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Messenger\msmsgs.exe
D:\Prevzaté súbory\RSIT.exe
C:\Program Files\trend micro\Admin.exe

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
O4 - HKLM\..\Run: [egui] "C:\Program Files\ESET\ESET Endpoint Antivirus\egui.exe" /hide /waitservice
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Office Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O22 - SharedTaskScheduler: Browseui preloader - {438755C2-A8BA-11D1-B96B-00A0C90312E1} - C:\WINDOWS\system32\browseui.dll
O22 - SharedTaskScheduler: Component Categories cache daemon - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\WINDOWS\system32\browseui.dll
O23 - Service: ESET HTTP Server (EhttpSrv) - ESET - C:\Program Files\ESET\ESET Endpoint Antivirus\EHttpSrv.exe
O23 - Service: ESET Service (ekrn) - ESET - C:\Program Files\ESET\ESET Endpoint Antivirus\ekrn.exe
O23 - Service: ESET SHA Service (ESHASRV) - ESET - C:\Program Files\ESET\ESET Endpoint Antivirus\EShaSrv.exe
O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Mozilla Foundation - C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe

--
End of file - 3313 bytes

=========Mozilla firefox=========

ProfilePath - C:\Documents and Settings\Admin\Application Data\Mozilla\Firefox\Profiles\ssv5ez3r.default

prefs.js - "browser.startup.homepage" - "http://www.zoznam.sk/"

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 11.9.900.170 Plugin
"Path"=C:\WINDOWS\system32\Macromed\Flash\NPSWF32_11_9_900_170.dll


======Registry dump======

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"egui"=C:\Program Files\ESET\ESET Endpoint Antivirus\egui.exe [2012-07-04 3154464]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"=C:\WINDOWS\system32\ctfmon.exe [2008-04-14 15360]
"MSMSGS"=C:\Program Files\Messenger\msmsgs.exe [2008-04-14 1695232]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=145

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"midimapper"=midimap.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msadpcm"=msadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.trspch"=tssoft32.acm
"vidc.cvid"=iccvid.dll
"vidc.I420"=msh263.drv
"vidc.iv31"=ir32_32.dll
"vidc.iv32"=ir32_32.dll
"vidc.iv41"=ir41_32.ax
"vidc.iyuv"=iyuv_32.dll
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"vidc.uyvy"=msyuv.dll
"vidc.yuy2"=msyuv.dll
"vidc.yvu9"=tsbyuv.dll
"vidc.yvyu"=msyuv.dll
"wavemapper"=msacm32.drv
"msacm.msg723"=msg723.acm
"vidc.M263"=msh263.drv
"vidc.M261"=msh261.drv
"msacm.msaudio1"=msaud32.acm
"msacm.sl_anet"=sl_anet.acm
"msacm.iac2"=C:\WINDOWS\system32\iac25_32.ax
"vidc.iv50"=ir50_32.dll
"msacm.l3acm"=C:\WINDOWS\system32\l3codeca.acm

======List of files/folders created in the last 1 month======

2013-12-15 12:44:33 ----D---- C:\_OTM
2013-12-15 12:30:22 ----D---- C:\WINDOWS\ie8updates
2013-12-15 12:25:45 ----D---- C:\WINDOWS\WBEM
2013-12-15 12:25:28 ----N---- C:\WINDOWS\system32\spmsg.dll
2013-12-15 12:25:27 ----A---- C:\WINDOWS\system32\spupdsvc.exe
2013-12-15 12:24:29 ----HDC---- C:\WINDOWS\ie8
2013-12-15 12:24:29 ----D---- C:\WINDOWS\system32\sk-SK
2013-12-15 12:21:44 ----A---- C:\WINDOWS\system32\normaliz.dll
2013-12-15 12:21:44 ----A---- C:\WINDOWS\system32\nlsdl.dll
2013-12-15 12:21:44 ----A---- C:\WINDOWS\system32\idndl.dll
2013-12-15 12:21:43 ----N---- C:\WINDOWS\system32\WinFXDocObj.exe
2013-12-15 12:21:43 ----A---- C:\WINDOWS\system32\msdbg2.dll
2013-12-15 12:21:43 ----A---- C:\WINDOWS\system32\ieudinit.exe
2013-12-15 12:21:39 ----N---- C:\WINDOWS\system32\msfeedssync.exe
2013-12-15 12:21:39 ----A---- C:\WINDOWS\system32\msfeedsbs.dll
2013-12-15 12:21:39 ----A---- C:\WINDOWS\system32\msfeeds.dll
2013-12-15 12:21:38 ----N---- C:\WINDOWS\system32\ieui.dll
2013-12-15 12:21:38 ----A---- C:\WINDOWS\system32\iertutil.dll
2013-12-15 12:21:36 ----A---- C:\WINDOWS\system32\ieframe.dll
2013-12-15 12:21:35 ----N---- C:\WINDOWS\system32\ieapfltr.dll
2013-12-15 12:21:35 ----N---- C:\WINDOWS\system32\ieapfltr.dat
2013-12-15 12:21:35 ----N---- C:\WINDOWS\system32\icardie.dll
2013-12-15 12:17:05 ----D---- C:\Documents and Settings\Admin\Application Data\Macromedia
2013-12-15 12:17:04 ----D---- C:\Documents and Settings\Admin\Application Data\Adobe
2013-12-15 11:48:32 ----A---- C:\WINDOWS\system32\FlashPlayerApp.exe
2013-12-15 10:26:06 ----D---- C:\AdwCleaner
2013-12-14 22:23:48 ----D---- C:\WINDOWS\system32\appmgmt
2013-12-14 21:14:04 ----D---- C:\Program Files\trend micro
2013-12-14 21:13:59 ----D---- C:\rsit
2013-12-14 20:25:02 ----A---- C:\WINDOWS\ODBC.INI
2013-12-14 20:24:35 ----A---- C:\WINDOWS\system32\mdimon.dll
2013-12-14 19:17:19 ----A---- C:\WINDOWS\system32\WMErrSKY.dll
2013-12-14 19:17:08 ----D---- C:\WINDOWS\system32\1051
2013-12-14 18:48:41 ----SHD---- C:\RECYCLER
2013-12-14 18:44:10 ----D---- C:\Program Files\ESET
2013-12-14 18:44:10 ----D---- C:\Documents and Settings\All Users\Application Data\ESET
2013-12-14 18:41:23 ----D---- C:\Documents and Settings\Admin\Application Data\Easeware
2013-12-14 18:41:05 ----D---- C:\Program Files\Easeware
2013-12-14 18:24:10 ----RSD---- C:\WINDOWS\assembly
2013-12-14 18:19:57 ----A---- C:\WINDOWS\system32\h323log.txt
2013-12-14 18:17:21 ----D---- C:\WINDOWS\Microsoft.NET
2013-12-14 18:15:38 ----A---- C:\WINDOWS\system32\drivers\audstub.sys
2013-12-14 18:15:28 ----A---- C:\WINDOWS\system32\hidserv.dll
2013-12-14 18:14:55 ----A---- C:\WINDOWS\system32\drivers\redbook.sys
2013-12-14 18:14:35 ----A---- C:\WINDOWS\system32\drivers\gameenum.sys
2013-12-14 18:14:23 ----A---- C:\WINDOWS\system32\drivers\nv4_mini.sys
2013-12-14 18:14:22 ----A---- C:\WINDOWS\system32\nv4_disp.dll
2013-12-14 18:14:12 ----A---- C:\WINDOWS\system32\drivers\fetnd5.sys
2013-12-14 18:14:10 ----A---- C:\WINDOWS\system32\usbui.dll
2013-12-14 18:14:04 ----A---- C:\WINDOWS\system32\drivers\UAGP35.SYS
2013-12-14 18:14:00 ----A---- C:\WINDOWS\system32\drivers\enum1394.sys
2013-12-14 18:13:57 ----A---- C:\WINDOWS\system32\HSFCISP2.dll
2013-12-14 18:13:57 ----A---- C:\WINDOWS\system32\drivers\mdmxsdk.sys
2013-12-14 18:13:57 ----A---- C:\WINDOWS\system32\drivers\HSFCXTS2.sys
2013-12-14 18:13:56 ----A---- C:\WINDOWS\system32\mdmxsdk.dll
2013-12-14 18:13:56 ----A---- C:\WINDOWS\system32\drivers\HSFBS2S2.sys
2013-12-14 18:13:55 ----A---- C:\WINDOWS\system32\drivers\HSFDPSP2.sys
2013-12-14 18:12:48 ----A---- C:\WINDOWS\imsins.BAK
2013-12-14 18:12:46 ----A---- C:\WINDOWS\system32\PerfStringBackup.INI
2013-12-14 18:12:45 ----SHD---- C:\WINDOWS\Installer
2013-12-14 18:12:45 ----D---- C:\Program Files\Common Files\ODBC
2013-12-14 18:12:45 ----A---- C:\WINDOWS\ODBCINST.INI
2013-12-14 18:12:41 ----D---- C:\Program Files\Common Files\SpeechEngines
2013-12-14 18:12:41 ----D---- C:\Program Files\Common Files\Microsoft Shared
2013-12-14 18:12:40 ----RD---- C:\Program Files
2013-12-14 18:12:40 ----D---- C:\Program Files\Common Files
2013-12-14 18:12:37 ----RA---- C:\WINDOWS\system32\kbdtuq.dll
2013-12-14 18:12:37 ----RA---- C:\WINDOWS\system32\kbdtuf.dll
2013-12-14 18:12:37 ----RA---- C:\WINDOWS\system32\kbdazel.dll
2013-12-14 18:12:34 ----RA---- C:\WINDOWS\system32\kbdycc.dll
2013-12-14 18:12:34 ----RA---- C:\WINDOWS\system32\kbduzb.dll
2013-12-14 18:12:34 ----RA---- C:\WINDOWS\system32\kbdur.dll
2013-12-14 18:12:34 ----RA---- C:\WINDOWS\system32\kbdtat.dll
2013-12-14 18:12:34 ----RA---- C:\WINDOWS\system32\kbdru1.dll
2013-12-14 18:12:34 ----RA---- C:\WINDOWS\system32\kbdru.dll
2013-12-14 18:12:34 ----RA---- C:\WINDOWS\system32\kbdmon.dll
2013-12-14 18:12:34 ----RA---- C:\WINDOWS\system32\kbdkyr.dll
2013-12-14 18:12:34 ----RA---- C:\WINDOWS\system32\kbdkaz.dll
2013-12-14 18:12:34 ----RA---- C:\WINDOWS\system32\kbdbu.dll
2013-12-14 18:12:34 ----RA---- C:\WINDOWS\system32\kbdblr.dll
2013-12-14 18:12:34 ----RA---- C:\WINDOWS\system32\kbdaze.dll
2013-12-14 18:12:32 ----RA---- C:\WINDOWS\system32\kbdhept.dll
2013-12-14 18:12:31 ----RA---- C:\WINDOWS\system32\kbdhela3.dll
2013-12-14 18:12:31 ----RA---- C:\WINDOWS\system32\kbdhela2.dll
2013-12-14 18:12:31 ----RA---- C:\WINDOWS\system32\kbdhe319.dll
2013-12-14 18:12:31 ----RA---- C:\WINDOWS\system32\kbdhe220.dll
2013-12-14 18:12:31 ----RA---- C:\WINDOWS\system32\kbdhe.dll
2013-12-14 18:12:31 ----RA---- C:\WINDOWS\system32\kbdgkl.dll
2013-12-14 18:12:30 ----RA---- C:\WINDOWS\system32\kbdlt1.dll
2013-12-14 18:12:29 ----RA---- C:\WINDOWS\system32\kbdlv1.dll
2013-12-14 18:12:29 ----RA---- C:\WINDOWS\system32\kbdlv.dll
2013-12-14 18:12:29 ----RA---- C:\WINDOWS\system32\kbdlt.dll
2013-12-14 18:12:29 ----RA---- C:\WINDOWS\system32\kbdest.dll
2013-12-14 18:12:27 ----RA---- C:\WINDOWS\system32\kbdycl.dll
2013-12-14 18:12:27 ----RA---- C:\WINDOWS\system32\kbdsl1.dll
2013-12-14 18:12:27 ----RA---- C:\WINDOWS\system32\kbdsl.dll
2013-12-14 18:12:27 ----RA---- C:\WINDOWS\system32\kbdro.dll
2013-12-14 18:12:27 ----RA---- C:\WINDOWS\system32\kbdpl1.dll
2013-12-14 18:12:27 ----RA---- C:\WINDOWS\system32\kbdpl.dll
2013-12-14 18:12:27 ----RA---- C:\WINDOWS\system32\kbdhu1.dll
2013-12-14 18:12:27 ----RA---- C:\WINDOWS\system32\kbdhu.dll
2013-12-14 18:12:27 ----RA---- C:\WINDOWS\system32\kbdcz2.dll
2013-12-14 18:12:27 ----RA---- C:\WINDOWS\system32\kbdcz1.dll
2013-12-14 18:12:27 ----RA---- C:\WINDOWS\system32\kbdcz.dll
2013-12-14 18:12:27 ----RA---- C:\WINDOWS\system32\kbdcr.dll
2013-12-14 18:12:27 ----RA---- C:\WINDOWS\system32\KBDAL.DLL
2013-12-14 18:12:24 ----A---- C:\WINDOWS\system32\irclass.dll
2013-12-14 18:12:24 ----A---- C:\WINDOWS\system32\dgsetup.dll
2013-12-14 18:12:24 ----A---- C:\WINDOWS\system32\dgrpsetu.dll
2013-12-14 18:12:23 ----A---- C:\WINDOWS\system32\spxcoins.dll
2013-12-14 18:12:23 ----A---- C:\WINDOWS\system32\EqnClass.Dll
2013-12-14 18:12:21 ----A---- C:\WINDOWS\TASKMAN.EXE
2013-12-14 18:12:20 ----A---- C:\WINDOWS\system32\drivers\irenum.sys
2013-12-14 18:12:20 ----A---- C:\WINDOWS\system32\batt.dll
2013-12-14 18:12:20 ----A---- C:\WINDOWS\NOTEPAD.EXE
2013-12-14 18:12:18 ----A---- C:\WINDOWS\system32\storprop.dll
2013-12-14 18:12:10 ----ASH---- C:\Documents and Settings\All Users\Application Data\desktop.ini
2013-12-14 18:11:54 ----D---- C:\WINDOWS\system32\CatRoot2
2013-12-14 18:11:54 ----D---- C:\WINDOWS\system32\CatRoot
2013-12-14 18:11:49 ----SD---- C:\Documents and Settings\All Users\Application Data\Microsoft
2013-12-14 18:11:27 ----A---- C:\WINDOWS\setuplog.txt
2013-12-14 18:11:24 ----SHD---- C:\System Volume Information
2013-12-14 18:11:24 ----D---- C:\Documents and Settings
2013-12-14 18:11:23 ----A---- C:\WINDOWS\system32\FNTCACHE.DAT
2013-12-14 18:10:30 ----SH---- C:\boot.ini
2013-12-14 18:07:40 ----A---- C:\WINDOWS\system32\drivers\USBSTOR.SYS
2013-12-14 18:03:14 ----RSHDC---- C:\WINDOWS\system32\dllcache
2013-12-14 18:03:14 ----RSD---- C:\WINDOWS\Fonts
2013-12-14 18:03:14 ----RD---- C:\WINDOWS\Web
2013-12-14 18:03:14 ----HD---- C:\WINDOWS\inf
2013-12-14 18:03:14 ----D---- C:\WINDOWS\WinSxS
2013-12-14 18:03:14 ----D---- C:\WINDOWS\twain_32
2013-12-14 18:03:14 ----D---- C:\WINDOWS\Temp
2013-12-14 18:03:14 ----D---- C:\WINDOWS\system32\wins
2013-12-14 18:03:14 ----D---- C:\WINDOWS\system32\wbem
2013-12-14 18:03:14 ----D---- C:\WINDOWS\system32\usmt
2013-12-14 18:03:14 ----D---- C:\WINDOWS\system32\spool
2013-12-14 18:03:14 ----D---- C:\WINDOWS\system32\ShellExt
2013-12-14 18:03:14 ----D---- C:\WINDOWS\system32\Setup
2013-12-14 18:03:14 ----D---- C:\WINDOWS\system32\scripting
2013-12-14 18:03:14 ----D---- C:\WINDOWS\system32\ras
2013-12-14 18:03:14 ----D---- C:\WINDOWS\system32\oobe
2013-12-14 18:03:14 ----D---- C:\WINDOWS\system32\npp
2013-12-14 18:03:14 ----D---- C:\WINDOWS\system32\mui
2013-12-14 18:03:14 ----D---- C:\WINDOWS\system32\inetsrv
2013-12-14 18:03:14 ----D---- C:\WINDOWS\system32\IME
2013-12-14 18:03:14 ----D---- C:\WINDOWS\system32\icsxml
2013-12-14 18:03:14 ----D---- C:\WINDOWS\system32\ias
2013-12-14 18:03:14 ----D---- C:\WINDOWS\system32\export
2013-12-14 18:03:14 ----D---- C:\WINDOWS\system32\en
2013-12-14 18:03:14 ----D---- C:\WINDOWS\system32\drivers\etc
2013-12-14 18:03:14 ----D---- C:\WINDOWS\system32\drivers\disdn
2013-12-14 18:03:14 ----D---- C:\WINDOWS\system32\drivers
2013-12-14 18:03:14 ----D---- C:\WINDOWS\system32\dhcp
2013-12-14 18:03:14 ----D---- C:\WINDOWS\system32\config
2013-12-14 18:03:14 ----D---- C:\WINDOWS\system32\3com_dmi
2013-12-14 18:03:14 ----D---- C:\WINDOWS\system32\3076
2013-12-14 18:03:14 ----D---- C:\WINDOWS\system32\2052
2013-12-14 18:03:14 ----D---- C:\WINDOWS\system32\1054
2013-12-14 18:03:14 ----D---- C:\WINDOWS\system32\1042
2013-12-14 18:03:14 ----D---- C:\WINDOWS\system32\1041
2013-12-14 18:03:14 ----D---- C:\WINDOWS\system32\1037
2013-12-14 18:03:14 ----D---- C:\WINDOWS\system32\1033
2013-12-14 18:03:14 ----D---- C:\WINDOWS\system32\1031
2013-12-14 18:03:14 ----D---- C:\WINDOWS\system32\1028
2013-12-14 18:03:14 ----D---- C:\WINDOWS\system32\1025
2013-12-14 18:03:14 ----D---- C:\WINDOWS\system32
2013-12-14 18:03:14 ----D---- C:\WINDOWS\system
2013-12-14 18:03:14 ----D---- C:\WINDOWS\security
2013-12-14 18:03:14 ----D---- C:\WINDOWS\Resources
2013-12-14 18:03:14 ----D---- C:\WINDOWS\repair
2013-12-14 18:03:14 ----D---- C:\WINDOWS\Provisioning
2013-12-14 18:03:14 ----D---- C:\WINDOWS\pchealth
2013-12-14 18:03:14 ----D---- C:\WINDOWS\PeerNet
2013-12-14 18:03:14 ----D---- C:\WINDOWS\Network Diagnostic
2013-12-14 18:03:14 ----D---- C:\WINDOWS\mui
2013-12-14 18:03:14 ----D---- C:\WINDOWS\msapps
2013-12-14 18:03:14 ----D---- C:\WINDOWS\msagent
2013-12-14 18:03:14 ----D---- C:\WINDOWS\Media
2013-12-14 18:03:14 ----D---- C:\WINDOWS\L2Schemas
2013-12-14 18:03:14 ----D---- C:\WINDOWS\java
2013-12-14 18:03:14 ----D---- C:\WINDOWS\ime
2013-12-14 18:03:14 ----D---- C:\WINDOWS\Help
2013-12-14 18:03:14 ----D---- C:\WINDOWS\ehome
2013-12-14 18:03:14 ----D---- C:\WINDOWS\Driver Cache
2013-12-14 18:03:14 ----D---- C:\WINDOWS\Debug
2013-12-14 18:03:14 ----D---- C:\WINDOWS\Cursors
2013-12-14 18:03:14 ----D---- C:\WINDOWS\Connection Wizard
2013-12-14 18:03:14 ----D---- C:\WINDOWS\Config
2013-12-14 18:03:14 ----D---- C:\WINDOWS\AppPatch
2013-12-14 18:03:14 ----D---- C:\WINDOWS\addins
2013-12-14 18:03:14 ----D---- C:\WINDOWS
2013-12-14 18:03:13 ----ASH---- C:\pagefile.sys
2013-12-14 17:56:43 ----D---- C:\Documents and Settings\Admin\Application Data\WinRAR
2013-12-14 17:56:38 ----D---- C:\Program Files\WinRAR
2013-12-14 17:39:07 ----D---- C:\Documents and Settings\Admin\Application Data\Mozilla
2013-12-14 17:38:16 ----D---- C:\Program Files\Mozilla Maintenance Service
2013-12-14 17:38:16 ----D---- C:\Documents and Settings\All Users\Application Data\Mozilla
2013-12-14 17:38:08 ----D---- C:\Program Files\Mozilla Firefox
2013-12-14 17:29:32 ----D---- C:\Documents and Settings\Admin\Application Data\Identities
2013-12-14 17:29:28 ----HD---- C:\Program Files\Uninstall Information
2013-12-14 17:29:19 ----ASH---- C:\Documents and Settings\Admin\Application Data\desktop.ini
2013-12-14 17:29:18 ----SD---- C:\Documents and Settings\Admin\Application Data\Microsoft
2013-12-14 17:29:17 ----ASH---- C:\hiberfil.sys
2013-12-14 17:28:37 ----A---- C:\WINDOWS\system32\wpa.bak
2013-12-14 17:27:42 ----D---- C:\WINDOWS\system32\SoftwareDistribution
2013-12-14 17:26:44 ----D---- C:\WINDOWS\SoftwareDistribution
2013-12-14 17:26:34 ----SD---- C:\WINDOWS\system32\Microsoft
2013-12-14 17:26:34 ----D---- C:\WINDOWS\Prefetch
2013-12-14 17:26:34 ----A---- C:\WINDOWS\SchedLgU.Txt
2013-12-14 17:25:29 ----AS---- C:\WINDOWS\bootstat.dat
2013-12-14 17:22:46 ----D---- C:\WINDOWS\system32\xircom
2013-12-14 17:22:46 ----D---- C:\Program Files\xerox
2013-12-14 17:22:46 ----D---- C:\Program Files\microsoft frontpage
2013-12-14 17:22:24 ----RASH---- C:\MSDOS.SYS
2013-12-14 17:22:24 ----RASH---- C:\IO.SYS
2013-12-14 17:22:24 ----A---- C:\WINDOWS\control.ini
2013-12-14 17:22:24 ----A---- C:\CONFIG.SYS
2013-12-14 17:22:24 ----A---- C:\AUTOEXEC.BAT
2013-12-14 17:22:06 ----A---- C:\WINDOWS\OEWABLog.txt
2013-12-14 17:22:02 ----A---- C:\WINDOWS\system32\mapi32.dll
2013-12-14 17:20:54 ----SD---- C:\WINDOWS\Downloaded Program Files
2013-12-14 17:20:54 ----RD---- C:\WINDOWS\Offline Web Pages
2013-12-14 17:20:41 ----HD---- C:\Program Files\WindowsUpdate
2013-12-14 17:20:17 ----D---- C:\WINDOWS\system32\DirectX
2013-12-14 17:20:10 ----A---- C:\WINDOWS\system32\atrace.dll
2013-12-14 17:20:07 ----A---- C:\WINDOWS\system32\desktop.ini
2013-12-14 17:20:07 ----A---- C:\WINDOWS\desktop.ini
2013-12-14 17:19:59 ----A---- C:\WINDOWS\system32\nmevtmsg.dll
2013-12-14 17:19:58 ----A---- C:\WINDOWS\system32\acctres.dll
2013-12-14 17:19:57 ----D---- C:\Program Files\Common Files\Services
2013-12-14 17:19:54 ----SD---- C:\WINDOWS\Tasks
2013-12-14 17:19:54 ----A---- C:\WINDOWS\system32\icfgnt5.dll
2013-12-14 17:19:52 ----D---- C:\Program Files\Common Files\MSSoap
2013-12-14 17:19:48 ----D---- C:\WINDOWS\srchasst
2013-12-14 17:19:47 ----D---- C:\WINDOWS\system32\Macromed
2013-12-14 17:19:43 ----A---- C:\WINDOWS\system32\wuweb.dll
2013-12-14 17:19:43 ----A---- C:\WINDOWS\system32\wups.dll
2013-12-14 17:19:43 ----A---- C:\WINDOWS\system32\wucltui.dll
2013-12-14 17:19:43 ----A---- C:\WINDOWS\system32\wuauserv.dll
2013-12-14 17:19:43 ----A---- C:\WINDOWS\system32\wuaueng1.dll
2013-12-14 17:19:43 ----A---- C:\WINDOWS\system32\wuaueng.dll
2013-12-14 17:19:42 ----A---- C:\WINDOWS\system32\wuauclt1.exe
2013-12-14 17:19:42 ----A---- C:\WINDOWS\system32\wuauclt.exe
2013-12-14 17:19:42 ----A---- C:\WINDOWS\system32\wuapi.dll
2013-12-14 17:19:42 ----A---- C:\WINDOWS\system32\qmgrprxy.dll
2013-12-14 17:19:42 ----A---- C:\WINDOWS\system32\qmgr.dll
2013-12-14 17:19:42 ----A---- C:\WINDOWS\system32\bitsprx4.dll
2013-12-14 17:19:42 ----A---- C:\WINDOWS\system32\bitsprx3.dll
2013-12-14 17:19:42 ----A---- C:\WINDOWS\system32\bitsprx2.dll
2013-12-14 17:19:37 ----D---- C:\Program Files\Movie Maker
2013-12-14 17:19:12 ----A---- C:\WINDOWS\system32\safrslv.dll
2013-12-14 17:19:12 ----A---- C:\WINDOWS\system32\safrdm.dll
2013-12-14 17:19:12 ----A---- C:\WINDOWS\system32\safrcdlg.dll
2013-12-14 17:19:12 ----A---- C:\WINDOWS\system32\racpldlg.dll
2013-12-14 17:19:07 ----A---- C:\WINDOWS\system32\fltMc.exe
2013-12-14 17:19:07 ----A---- C:\WINDOWS\system32\fltlib.dll
2013-12-14 17:19:07 ----A---- C:\WINDOWS\system32\drivers\fltMgr.sys
2013-12-14 17:19:06 ----D---- C:\WINDOWS\system32\Restore
2013-12-14 17:19:06 ----A---- C:\WINDOWS\system32\srsvc.dll
2013-12-14 17:19:06 ----A---- C:\WINDOWS\system32\srrstr.dll
2013-12-14 17:19:06 ----A---- C:\WINDOWS\system32\srclient.dll
2013-12-14 17:19:06 ----A---- C:\WINDOWS\system32\drivers\sr.sys
2013-12-14 17:19:05 ----A---- C:\WINDOWS\system32\mnmdd.dll
2013-12-14 17:19:05 ----A---- C:\WINDOWS\system32\isrdbg32.dll
2013-12-14 17:19:05 ----A---- C:\WINDOWS\system32\ils.dll
2013-12-14 17:19:04 ----A---- C:\WINDOWS\system32\nmmkcert.dll
2013-12-14 17:19:04 ----A---- C:\WINDOWS\system32\msconf.dll
2013-12-14 17:19:04 ----A---- C:\WINDOWS\system32\mnmsrvc.exe
2013-12-14 17:19:01 ----D---- C:\Program Files\NetMeeting
2013-12-14 17:19:01 ----A---- C:\WINDOWS\system32\msoert2.dll
2013-12-14 17:19:01 ----A---- C:\WINDOWS\system32\msoeacct.dll
2013-12-14 17:18:59 ----A---- C:\WINDOWS\system32\inetres.dll
2013-12-14 17:18:59 ----A---- C:\WINDOWS\system32\inetcomm.dll
2013-12-14 17:18:57 ----D---- C:\Program Files\Outlook Express
2013-12-14 17:18:57 ----A---- C:\WINDOWS\system32\schedsvc.dll
2013-12-14 17:18:57 ----A---- C:\WINDOWS\system32\mstinit.exe
2013-12-14 17:18:57 ----A---- C:\WINDOWS\system32\mstask.dll
2013-12-14 17:18:56 ----A---- C:\WINDOWS\system32\isign32.dll
2013-12-14 17:18:56 ----A---- C:\WINDOWS\system32\inetcfg.dll
2013-12-14 17:18:56 ----A---- C:\WINDOWS\system32\icwphbk.dll
2013-12-14 17:18:56 ----A---- C:\WINDOWS\system32\icwdial.dll
2013-12-14 17:18:49 ----D---- C:\Program Files\Common Files\System
2013-12-14 17:18:47 ----D---- C:\Program Files\Internet Explorer
2013-12-14 17:18:16 ----A---- C:\WINDOWS\system32\emptyregdb.dat
2013-12-14 17:18:06 ----D---- C:\Program Files\ComPlus Applications
2013-12-14 17:18:04 ----A---- C:\WINDOWS\vbaddin.ini
2013-12-14 17:18:04 ----A---- C:\WINDOWS\vb.ini
2013-12-14 17:17:59 ----D---- C:\WINDOWS\Registration
2013-12-14 17:17:52 ----D---- C:\Program Files\Windows Media Player
2013-12-14 17:17:52 ----D---- C:\Program Files\Online Services
2013-12-14 17:17:43 ----D---- C:\Program Files\Messenger
2013-12-14 17:17:38 ----D---- C:\Program Files\MSN Gaming Zone
2013-12-14 17:17:38 ----A---- C:\WINDOWS\system32\write.exe
2013-12-14 17:17:26 ----A---- C:\WINDOWS\system32\sndvol32.exe
2013-12-14 17:17:26 ----A---- C:\WINDOWS\system32\hticons.dll
2013-12-14 17:17:26 ----A---- C:\WINDOWS\system32\avwav.dll
2013-12-14 17:17:25 ----A---- C:\WINDOWS\system32\winchat.exe
2013-12-14 17:17:25 ----A---- C:\WINDOWS\system32\avtapi.dll
2013-12-14 17:17:25 ----A---- C:\WINDOWS\system32\avmeter.dll
2013-12-14 17:17:16 ----A---- C:\WINDOWS\system32\getuname.dll
2013-12-14 17:17:15 ----A---- C:\WINDOWS\system32\sol.exe
2013-12-14 17:17:15 ----A---- C:\WINDOWS\system32\charmap.exe
2013-12-14 17:17:15 ----A---- C:\WINDOWS\system32\calc.exe
2013-12-14 17:17:14 ----A---- C:\WINDOWS\system32\winmine.exe
2013-12-14 17:17:14 ----A---- C:\WINDOWS\system32\reset.exe
2013-12-14 17:17:14 ----A---- C:\WINDOWS\system32\mshearts.exe
2013-12-14 17:17:14 ----A---- C:\WINDOWS\system32\freecell.exe
2013-12-14 17:17:13 ----A---- C:\WINDOWS\system32\usrlogon.cmd
2013-12-14 17:17:13 ----A---- C:\WINDOWS\system32\tsshutdn.exe
2013-12-14 17:17:13 ----A---- C:\WINDOWS\system32\tslabels.ini
2013-12-14 17:17:13 ----A---- C:\WINDOWS\system32\tskill.exe
2013-12-14 17:17:13 ----A---- C:\WINDOWS\system32\tsdiscon.exe
2013-12-14 17:17:13 ----A---- C:\WINDOWS\system32\tscon.exe
2013-12-14 17:17:13 ----A---- C:\WINDOWS\system32\shadow.exe
2013-12-14 17:17:13 ----A---- C:\WINDOWS\system32\rwinsta.exe
2013-12-14 17:17:13 ----A---- C:\WINDOWS\system32\regini.exe
2013-12-14 17:17:13 ----A---- C:\WINDOWS\system32\rdpcfgex.dll
2013-12-14 17:17:12 ----A---- C:\WINDOWS\system32\qwinsta.exe
2013-12-14 17:17:12 ----A---- C:\WINDOWS\system32\qappsrv.exe
2013-12-14 17:17:11 ----A---- C:\WINDOWS\system32\msg.exe
2013-12-14 17:17:11 ----A---- C:\WINDOWS\system32\msdtcprf.ini
2013-12-14 17:17:11 ----A---- C:\WINDOWS\system32\logoff.exe
2013-12-14 17:17:11 ----A---- C:\WINDOWS\system32\cdmodem.dll
2013-12-14 17:17:03 ----A---- C:\WINDOWS\system32\wmimgmt.msc
2013-12-14 17:16:51 ----D---- C:\Program Files\MSN
2013-12-14 17:16:50 ----A---- C:\WINDOWS\system32\accwiz.exe
2013-12-14 17:16:49 ----D---- C:\Program Files\Windows NT
2013-12-14 17:16:49 ----A---- C:\WINDOWS\system32\sndrec32.exe
2013-12-14 17:16:49 ----A---- C:\WINDOWS\system32\mplay32.exe
2013-12-14 17:16:49 ----A---- C:\WINDOWS\system32\hypertrm.dll
2013-12-14 17:16:48 ----A---- C:\WINDOWS\system32\spider.exe
2013-12-14 17:16:48 ----A---- C:\WINDOWS\system32\mspaint.exe
2013-12-14 17:16:48 ----A---- C:\WINDOWS\system32\clipbrd.exe
2013-12-14 17:16:47 ----D---- C:\WINDOWS\system32\en-US
2013-12-14 17:16:47 ----A---- C:\WINDOWS\system32\tsgqec.dll
2013-12-14 17:16:47 ----A---- C:\WINDOWS\system32\tscfgwmi.dll
2013-12-14 17:16:47 ----A---- C:\WINDOWS\system32\drivers\tdtcp.sys
2013-12-14 17:16:47 ----A---- C:\WINDOWS\system32\drivers\tdpipe.sys
2013-12-14 17:16:47 ----A---- C:\WINDOWS\system32\drivers\rdpwd.sys
2013-12-14 17:16:46 ----A---- C:\WINDOWS\system32\rhttpaa.dll
2013-12-14 17:16:46 ----A---- C:\WINDOWS\system32\mstscax.dll
2013-12-14 17:16:46 ----A---- C:\WINDOWS\system32\aaclient.dll
2013-12-14 17:16:45 ----A---- C:\WINDOWS\system32\termsrv.dll
2013-12-14 17:16:45 ----A---- C:\WINDOWS\system32\sessmgr.exe
2013-12-14 17:16:45 ----A---- C:\WINDOWS\system32\remotepg.dll
2013-12-14 17:16:45 ----A---- C:\WINDOWS\system32\rdshost.exe
2013-12-14 17:16:45 ----A---- C:\WINDOWS\system32\rdsaddin.exe
2013-12-14 17:16:45 ----A---- C:\WINDOWS\system32\rdchost.dll
2013-12-14 17:16:45 ----A---- C:\WINDOWS\system32\mstsc.exe
2013-12-14 17:16:44 ----D---- C:\WINDOWS\system32\MsDtc
2013-12-14 17:16:44 ----A---- C:\WINDOWS\system32\rdpwsx.dll
2013-12-14 17:16:44 ----A---- C:\WINDOWS\system32\rdpsnd.dll
2013-12-14 17:16:44 ----A---- C:\WINDOWS\system32\rdpclip.exe
2013-12-14 17:16:44 ----A---- C:\WINDOWS\system32\qprocess.exe
2013-12-14 17:16:44 ----A---- C:\WINDOWS\system32\msdtcuiu.dll
2013-12-14 17:16:44 ----A---- C:\WINDOWS\system32\icaapi.dll
2013-12-14 17:16:44 ----A---- C:\WINDOWS\system32\cfgbkend.dll
2013-12-14 17:16:43 ----A---- C:\WINDOWS\system32\xolehlp.dll
2013-12-14 17:16:43 ----A---- C:\WINDOWS\system32\mtxoci.dll
2013-12-14 17:16:43 ----A---- C:\WINDOWS\system32\msdtctm.dll
2013-12-14 17:16:43 ----A---- C:\WINDOWS\system32\msdtcprx.dll
2013-12-14 17:16:43 ----A---- C:\WINDOWS\system32\msdtclog.dll
2013-12-14 17:16:43 ----A---- C:\WINDOWS\system32\msdtc.exe
2013-12-14 17:16:42 ----A---- C:\WINDOWS\system32\mtxlegih.dll
2013-12-14 17:16:42 ----A---- C:\WINDOWS\system32\mtxex.dll
2013-12-14 17:16:42 ----A---- C:\WINDOWS\system32\mtxdm.dll
2013-12-14 17:16:42 ----A---- C:\WINDOWS\system32\dcomcnfg.exe
2013-12-14 17:16:41 ----D---- C:\WINDOWS\system32\Com
2013-12-14 17:16:41 ----A---- C:\WINDOWS\system32\stclient.dll
2013-12-14 17:16:41 ----A---- C:\WINDOWS\system32\comrepl.dll
2013-12-14 17:16:41 ----A---- C:\WINDOWS\system32\comaddin.dll
2013-12-14 17:16:41 ----A---- C:\WINDOWS\system32\colbact.dll
2013-12-14 17:16:41 ----A---- C:\WINDOWS\system32\clbcatex.dll
2013-12-14 17:16:41 ----A---- C:\WINDOWS\system32\catsrvps.dll
2013-12-14 17:16:40 ----A---- C:\WINDOWS\system32\comuid.dll
2013-12-14 17:16:40 ----A---- C:\WINDOWS\system32\comsvcs.dll
2013-12-14 17:16:40 ----A---- C:\WINDOWS\system32\comsnap.dll
2013-12-14 17:16:40 ----A---- C:\WINDOWS\system32\catsrvut.dll
2013-12-14 17:16:40 ----A---- C:\WINDOWS\system32\catsrv.dll
2013-12-14 17:16:39 ----A---- C:\WINDOWS\system32\clbcatq.dll
2013-12-14 17:16:33 ----A---- C:\WINDOWS\system32\servdeps.dll
2013-12-14 17:16:33 ----A---- C:\WINDOWS\system32\mmfutil.dll
2013-12-14 17:16:32 ----A---- C:\WINDOWS\system32\licwmi.dll
2013-12-14 17:16:32 ----A---- C:\WINDOWS\system32\cmprops.dll
2013-12-14 17:16:27 ----A---- C:\WINDOWS\system32\drivers\termdd.sys
2013-12-14 17:16:27 ----A---- C:\WINDOWS\system32\drivers\rdpdr.sys

======List of files/folders modified in the last 1 month======

2013-12-14 22:00:35 ----A---- C:\WINDOWS\win.ini
2013-12-14 18:17:15 ----A---- C:\WINDOWS\system.ini
2013-12-14 17:21:46 ----ASH---- C:\WINDOWS\fonts\desktop.ini

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 ohci1394;OHCI Compliant IEEE 1394 Host Controller; C:\WINDOWS\system32\DRIVERS\ohci1394.sys [2008-04-14 61696]
R0 uagp35;Microsoft AGPv3.5 Filter; C:\WINDOWS\system32\DRIVERS\uagp35.sys [2008-04-14 44672]
R1 eamon;eamon; C:\WINDOWS\system32\DRIVERS\eamon.sys [2012-07-10 164464]
R1 ehdrv;ehdrv; C:\WINDOWS\system32\DRIVERS\ehdrv.sys [2012-03-29 123760]
R1 epfwtdir;epfwtdir; C:\WINDOWS\system32\DRIVERS\epfwtdir.sys [2012-03-29 107280]
R1 intelppm;Intel Processor Driver; C:\WINDOWS\system32\DRIVERS\intelppm.sys [2008-04-14 36352]
R2 mdmxsdk;mdmxsdk; C:\WINDOWS\system32\DRIVERS\mdmxsdk.sys [2008-04-14 11868]
R3 Arp1394;1394 ARP Client Protocol; C:\WINDOWS\system32\DRIVERS\arp1394.sys [2008-04-14 60800]
R3 FETNDIS;VIA PCI 10/100Mb Fast Ethernet Adapter NT Driver; C:\WINDOWS\system32\DRIVERS\fetnd5.sys [2001-08-17 27165]
R3 hidusb;Microsoft HID Class Driver; C:\WINDOWS\system32\DRIVERS\hidusb.sys [2008-04-14 10368]
R3 HSF_DP;HSF_DP; C:\WINDOWS\system32\DRIVERS\HSFDPSP2.sys [2008-04-14 1041536]
R3 HSFHWBS2;HSFHWBS2; C:\WINDOWS\system32\DRIVERS\HSFBS2S2.sys [2008-04-14 220032]
R3 mouhid;Mouse HID Driver; C:\WINDOWS\system32\DRIVERS\mouhid.sys [2008-04-14 12160]
R3 NIC1394;1394 Net Driver; C:\WINDOWS\system32\DRIVERS\nic1394.sys [2008-04-14 61824]
R3 nv;nv; C:\WINDOWS\system32\DRIVERS\nv4_mini.sys [2008-04-13 1897408]
R3 usbuhci;Microsoft USB Universal Host Controller Miniport Driver; C:\WINDOWS\system32\DRIVERS\usbuhci.sys [2008-04-14 20608]
R3 winachsf;winachsf; C:\WINDOWS\system32\DRIVERS\HSFCXTS2.sys [2008-04-14 685056]
S3 USBSTOR;USB Mass Storage Driver; C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS [2008-04-14 26368]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 clr_optimization_v2.0.50727_32;.NET Runtime Optimization Service v2.0.50727_X86; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe [2008-07-25 69632]
R2 ekrn;ESET Service; C:\Program Files\ESET\ESET Endpoint Antivirus\ekrn.exe [2012-07-04 999704]
S3 aspnet_state;ASP.NET State Service; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe [2008-07-25 34312]
S3 EhttpSrv;ESET HTTP Server; C:\Program Files\ESET\ESET Endpoint Antivirus\EHttpSrv.exe [2012-07-04 31056]
S3 ESHASRV;ESET SHA Service; C:\Program Files\ESET\ESET Endpoint Antivirus\EShaSrv.exe [2012-07-04 183944]
S3 MozillaMaintenance;Mozilla Maintenance Service; C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe [2013-12-05 119408]

-----------------EOF-----------------

Re: Prosím o kontrolu logu, svchost 100% cpu

Napsal: 15 pro 2013 12:56
od Rudy
Nastakla nějaká změna? Pokud ne, vypněte na zkoušku aut. aktualizace a restartujte PC.

Re: Prosím o kontrolu logu, svchost 100% cpu

Napsal: 15 pro 2013 13:22
od Mellior
Trochu som pogooglil a manuálna aktualizácia pre IE8 ( http://www.microsoft.com/en-us/download ... x?id=28385 ) to zdá sa zatiaľ poriešila. Uvidím... Zatiaľ dík za pomoc :)

Re: Prosím o kontrolu logu, svchost 100% cpu

Napsal: 15 pro 2013 16:55
od Rudy
OK, to jsem rád. Nemáte zač! :)
Všechny časy jsou v UTC+01:00
Stránka 1 z 1

Založeno na phpBB® Forum Software © phpBB Limited

Český překlad – phpBB.cz