Stránka 1 z 1

Podozrenie z virusu

Napsal: 14 led 2014 14:19
od M@tej
Zdravím, mám také podozrenie, že mám červa v kompe ale niesom si istý. Pri sputení KM Player-u mi vypíše že chybná bitová kópia, čo som hladal na google, že vraj to môže byť aj skrytý vírus. Windows som preinštaloval asi pred pol rokom predtým som mal vistu tak išlo šecko ok, ale teraz pri W7 a pri spustení KM player-u mi vyskočí tabuľka. Taktiež v priebehu zapnutého pc mi raz vyskočí taka tabulka jak príkazový riadok a okno a tam nejaký súbor s koncovkou .dll /v priebehu dňa keď to vyškočí to tu hodím/ a keď 2x kliknem na zavrieť, tak to zmizne.
Tu je ten problem pri spustení Km player http://fastimages.eu/images/beznzviyi.png
za odpoveď ďakujem.

Log z RSIT

Logfile of random's system information tool 1.09 (written by random/random)
Run by Matej at 2014-01-14 13:59:52
Microsoft Windows 7 Ultimate Service Pack 1
System drive C: has 18 GB (19%) free of 93 GB
Total RAM: 2046 MB (44% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 14:00:36, on 14. 1. 2014
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v10.0 (10.00.9200.16686)
Boot mode: Normal

Running processes:
C:\Windows\system32\taskhost.exe
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe
C:\Program Files\Avira\AntiVir Desktop\avgnt.exe
C:\Program Files\Windows Sidebar\sidebar.exe
C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
C:\Windows\System32\mobsync.exe
C:\Program Files\HP\Digital Imaging\bin\hpqSTE08.exe
C:\Program Files\HP\Digital Imaging\bin\hpqbam08.exe
C:\Program Files\HP\Digital Imaging\bin\hpqgpc01.exe
C:\Program Files\Opera\opera.exe
C:\Program Files\VideoLAN\VLC\vlc.exe
C:\Windows\system32\SearchFilterHost.exe
M:\My document\RSIT.exe
C:\Program Files\trend micro\Matej.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://google.com/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/p/?LinkId=255141
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/p/?LinkId=255141
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O4 - HKLM\..\Run: [PAC7302_Monitor] C:\Windows\PixArt\PAC7302\Monitor.exe
O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKLM\..\Run: [20131121] C:\Program Files\AVAST Software\Avast\setup\emupdate\c6ec5fe8-f8f0-43aa-9c0d-b19a7e893954.exe /check
O4 - HKLM\..\Run: [avgnt] "C:\Program Files\Avira\AntiVir Desktop\avgnt.exe" /min
O4 - HKCU\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun
O4 - HKCU\..\Run: [DAEMON Tools Lite] "C:\Program Files\DAEMON Tools Lite\DTLite.exe" -autorun
O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
O8 - Extra context menu item: E&xportovať do programu Microsoft Excel - res://C:\PROGRA~1\MICROS~3\Office12\EXCEL.EXE/3000
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~3\Office12\REFIEBAR.DLL
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: Avira FireWall (AntiVirFirewallService) - Avira Operations GmbH & Co. KG - C:\Program Files\Avira\AntiVir Desktop\avfwsvc.exe
O23 - Service: Avira Mail Protection (AntiVirMailService) - Avira Operations GmbH & Co. KG - C:\Program Files\Avira\AntiVir Desktop\avmailc.exe
O23 - Service: Avira Scheduler (AntiVirSchedulerService) - Avira Operations GmbH & Co. KG - C:\Program Files\Avira\AntiVir Desktop\sched.exe
O23 - Service: Avira Real-Time Protection (AntiVirService) - Avira Operations GmbH & Co. KG - C:\Program Files\Avira\AntiVir Desktop\avguard.exe
O23 - Service: Avira Web Protection (AntiVirWebService) - Avira Operations GmbH & Co. KG - C:\Program Files\Avira\AntiVir Desktop\AVWEBGRD.EXE
O23 - Service: Služba Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: Služba Google Update (gupdatem) (gupdatem) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: NVIDIA Display Driver Service (nvsvc) - NVIDIA Corporation - C:\Windows\system32\nvvsvc.exe
O23 - Service: NVIDIA Update Service Daemon (nvUpdatusService) - Unknown owner - C:\Program Files\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe (file missing)
O23 - Service: PandoraService (PanService) - Pandora.TV - C:\Program Files\PANDORA.TV\PanService\KMPService.exe
O23 - Service: Skype Updater (SkypeUpdate) - Skype Technologies - C:\Program Files\Skype\Updater\Updater.exe
O23 - Service: Steam Client Service - Valve Corporation - C:\Program Files\Common Files\Steam\SteamService.exe

--
End of file - 4978 bytes

======Scheduled tasks folder======

C:\Windows\tasks\Adobe Flash Player Updater.job
C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
C:\Windows\tasks\GoogleUpdateTaskMachineUA.job

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
Adobe PDF Link Helper - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2012-09-23 60568]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"PAC7302_Monitor"=C:\Windows\PixArt\PAC7302\Monitor.exe []
"Adobe ARM"=C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2012-09-23 926896]
"20131121"=C:\Program Files\AVAST Software\Avast\setup\emupdate\c6ec5fe8-f8f0-43aa-9c0d-b19a7e893954.exe /check []
"avgnt"=C:\Program Files\Avira\AntiVir Desktop\avgnt.exe [2013-12-22 684600]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"Sidebar"=C:\Program Files\Windows Sidebar\sidebar.exe [2010-11-20 1174016]
"DAEMON Tools Lite"=C:\Program Files\DAEMON Tools Lite\DTLite.exe [2013-03-14 3672640]

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup
HP Digital Imaging Monitor.lnk - C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED}

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=credssp.dll

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\PEVSystemStart]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\procexp90.Sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\PEVSystemStart]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\procexp90.Sys]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorAdmin"=5
"ConsentPromptBehaviorUser"=3
"EnableUIADesktopToggle"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.msadpcm"=msadp32.acm
"midimapper"=midimap.dll
"wavemapper"=msacm32.drv
"VIDC.UYVY"=msyuv.dll
"VIDC.YUY2"=msyuv.dll
"VIDC.YVYU"=msyuv.dll
"VIDC.IYUV"=iyuv_32.dll
"vidc.i420"=iyuv_32.dll
"VIDC.YVU9"=tsbyuv.dll
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"vidc.cvid"=iccvid.dll
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"aux1"=wdmaud.drv
"MSVideo8"=VfWWDM32.dll
"VIDC.CFHD"=cfhd.dll

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*

======List of files/folders created in the last 1 month======

2014-01-14 13:59:52 ----D---- C:\rsit
2014-01-14 13:59:52 ----D---- C:\Program Files\trend micro
2014-01-05 22:59:21 ----D---- C:\Program Files\URUSoft
2014-01-03 18:01:05 ----A---- C:\Windows\system32\XAudio2_7.dll
2014-01-03 18:01:05 ----A---- C:\Windows\system32\XAPOFX1_5.dll
2014-01-03 18:01:05 ----A---- C:\Windows\system32\xactengine3_7.dll
2014-01-03 18:01:04 ----A---- C:\Windows\system32\d3dx11_43.dll
2014-01-03 18:01:04 ----A---- C:\Windows\system32\d3dcsx_43.dll
2014-01-03 18:01:04 ----A---- C:\Windows\system32\D3DCompiler_43.dll
2014-01-03 18:01:03 ----A---- C:\Windows\system32\XAudio2_6.dll
2014-01-03 18:01:03 ----A---- C:\Windows\system32\XAPOFX1_4.dll
2014-01-03 18:01:03 ----A---- C:\Windows\system32\D3DX9_43.dll
2014-01-03 18:01:03 ----A---- C:\Windows\system32\d3dx10_43.dll
2014-01-03 18:01:02 ----A---- C:\Windows\system32\XAudio2_5.dll
2014-01-03 18:01:02 ----A---- C:\Windows\system32\xactengine3_6.dll
2014-01-03 18:01:02 ----A---- C:\Windows\system32\X3DAudio1_7.dll
2014-01-03 18:01:01 ----A---- C:\Windows\system32\xactengine3_5.dll
2014-01-03 18:01:01 ----A---- C:\Windows\system32\D3DCompiler_42.dll
2014-01-03 18:01:00 ----A---- C:\Windows\system32\d3dx11_42.dll
2014-01-03 18:01:00 ----A---- C:\Windows\system32\d3dcsx_42.dll
2014-01-03 18:00:59 ----A---- C:\Windows\system32\D3DX9_42.dll
2014-01-03 18:00:59 ----A---- C:\Windows\system32\d3dx10_42.dll
2014-01-03 18:00:58 ----A---- C:\Windows\system32\D3DX9_41.dll
2014-01-03 18:00:58 ----A---- C:\Windows\system32\d3dx10_41.dll
2014-01-03 18:00:58 ----A---- C:\Windows\system32\D3DCompiler_41.dll
2014-01-03 18:00:57 ----A---- C:\Windows\system32\XAudio2_4.dll
2014-01-03 18:00:57 ----A---- C:\Windows\system32\XAPOFX1_3.dll
2014-01-03 18:00:57 ----A---- C:\Windows\system32\xactengine3_4.dll
2014-01-03 18:00:57 ----A---- C:\Windows\system32\X3DAudio1_6.dll
2014-01-03 18:00:56 ----A---- C:\Windows\system32\d3dx10_40.dll
2014-01-03 18:00:56 ----A---- C:\Windows\system32\D3DCompiler_40.dll
2014-01-03 18:00:55 ----A---- C:\Windows\system32\D3DX9_40.dll
2014-01-03 18:00:54 ----A---- C:\Windows\system32\XAudio2_3.dll
2014-01-03 18:00:54 ----A---- C:\Windows\system32\XAPOFX1_2.dll
2014-01-03 18:00:54 ----A---- C:\Windows\system32\xactengine3_3.dll
2014-01-03 18:00:54 ----A---- C:\Windows\system32\X3DAudio1_5.dll
2014-01-03 18:00:53 ----A---- C:\Windows\system32\XAudio2_2.dll
2014-01-03 18:00:53 ----A---- C:\Windows\system32\XAPOFX1_1.dll
2014-01-03 18:00:53 ----A---- C:\Windows\system32\xactengine3_2.dll
2014-01-03 18:00:52 ----A---- C:\Windows\system32\d3dx10_39.dll
2014-01-03 18:00:52 ----A---- C:\Windows\system32\D3DCompiler_39.dll
2014-01-03 18:00:51 ----A---- C:\Windows\system32\D3DX9_39.dll
2014-01-01 12:58:10 ----D---- C:\Users\Matej\AppData\Roaming\Publish Providers
2014-01-01 12:55:44 ----N---- C:\Windows\system32\dbmsqlgc.dll
2014-01-01 12:55:44 ----N---- C:\Windows\system32\dbmsgnet.dll
2014-01-01 12:55:32 ----A---- C:\Windows\IsUninst.exe
2014-01-01 12:55:15 ----D---- C:\Program Files\Microsoft SQL Server
2014-01-01 12:54:01 ----D---- C:\Program Files\Vstplugins
2014-01-01 12:53:51 ----D---- C:\Program Files\Sony
2014-01-01 12:53:10 ----D---- C:\Program Files\Sony Setup
2014-01-01 12:05:24 ----D---- C:\ProgramData\Sony
2014-01-01 12:03:51 ----D---- C:\Users\Matej\AppData\Roaming\Sony
2013-12-24 13:09:19 ----D---- C:\Program Files\MediaInfo
2013-12-24 13:08:50 ----D---- C:\Program Files\IMANDIX
2013-12-22 17:26:34 ----A---- C:\Windows\system32\drivers\avnetflt.sys
2013-12-22 17:12:51 ----D---- C:\Users\Matej\AppData\Roaming\Avira
2013-12-22 17:12:12 ----A---- C:\Windows\system32\drivers\ssmdrv.sys
2013-12-22 17:12:11 ----A---- C:\Windows\system32\drivers\avkmgr.sys
2013-12-22 17:12:11 ----A---- C:\Windows\system32\drivers\avipbb.sys
2013-12-22 17:12:11 ----A---- C:\Windows\system32\drivers\avgntflt.sys
2013-12-22 17:12:11 ----A---- C:\Windows\system32\drivers\avfwot.sys
2013-12-22 17:12:11 ----A---- C:\Windows\system32\drivers\avfwim.sys
2013-12-22 17:12:10 ----D---- C:\ProgramData\Avira
2013-12-22 17:12:10 ----D---- C:\Program Files\Avira
2013-12-22 16:51:15 ----D---- C:\Users\Matej\AppData\Roaming\Shifters Anticheat
2013-12-19 19:18:11 ----A---- C:\PA7302.DAT

======List of files/folders modified in the last 1 month======

2014-01-14 14:00:12 ----D---- C:\Windows\Temp
2014-01-14 13:59:52 ----RD---- C:\Program Files
2014-01-14 00:28:47 ----D---- C:\Users\Matej\AppData\Roaming\vlc
2014-01-13 23:29:31 ----SHD---- C:\System Volume Information
2014-01-13 23:08:53 ----HD---- C:\_acestream_cache_
2014-01-13 23:08:24 ----D---- C:\Users\Matej\AppData\Roaming\.ACEStream
2014-01-13 20:54:42 ----D---- C:\Windows\Prefetch
2014-01-13 20:44:53 ----D---- C:\Users\Matej\AppData\Roaming\TS3Client
2014-01-13 20:13:21 ----D---- C:\Program Files\Steam
2014-01-13 13:50:50 ----D---- C:\Users\Matej\AppData\Roaming\BitTorrent
2014-01-12 11:38:04 ----D---- C:\Program Files\Common Files\Steam
2014-01-12 11:00:05 ----D---- C:\Program Files\SpeedFan
2014-01-06 14:52:32 ----D---- C:\Windows\system32\config
2014-01-03 18:01:06 ----D---- C:\Windows\System32
2014-01-03 18:00:41 ----RSD---- C:\Windows\assembly
2014-01-03 00:13:33 ----SHD---- C:\$RECYCLE.BIN
2014-01-01 12:56:42 ----SHD---- C:\Windows\Installer
2014-01-01 12:56:42 ----HD---- C:\Config.Msi
2014-01-01 12:55:57 ----D---- C:\Windows\inf
2014-01-01 12:55:57 ----A---- C:\Windows\system32\PerfStringBackup.INI
2014-01-01 12:55:44 ----D---- C:\Windows
2014-01-01 12:55:41 ----HD---- C:\Program Files\Uninstall Information
2014-01-01 12:29:43 ----D---- C:\Windows\winsxs
2014-01-01 12:05:24 ----HD---- C:\ProgramData
2013-12-22 17:26:42 ----D---- C:\Windows\system32\catroot
2013-12-22 17:26:34 ----D---- C:\Windows\system32\drivers
2013-12-22 17:14:56 ----D---- C:\Windows\system32\catroot2
2013-12-22 17:12:29 ----D---- C:\Windows\system32\DriverStore
2013-12-20 23:05:17 ----D---- C:\Users\Matej\AppData\Roaming\SimpleTV V03
2013-12-18 15:03:55 ----D---- C:\Users\Matej\AppData\Roaming\mkvtoolnix

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 giveio;giveio; C:\Windows\system32\giveio.sys [1996-04-03 5248]
R0 rdyboost;ReadyBoost; C:\Windows\System32\drivers\rdyboost.sys [2010-11-20 173440]
R0 speedfan;speedfan; C:\Windows\system32\speedfan.sys [2011-03-18 25240]
R1 avfwot;avfwot; C:\Windows\system32\DRIVERS\avfwot.sys [2013-03-26 113024]
R1 avipbb;avipbb; C:\Windows\system32\DRIVERS\avipbb.sys [2013-12-22 135648]
R1 avkmgr;avkmgr; C:\Windows\system32\DRIVERS\avkmgr.sys [2013-12-22 37352]
R1 CSC;@%systemroot%\system32\cscsvc.dll,-202; C:\Windows\system32\drivers\csc.sys [2010-11-20 388096]
R1 dtsoftbus01;DAEMON Tools Virtual Bus Driver; C:\Windows\system32\DRIVERS\dtsoftbus01.sys [2013-09-27 242240]
R1 ssmdrv;ssmdrv; C:\Windows\system32\DRIVERS\ssmdrv.sys [2013-03-26 28520]
R2 avgntflt;avgntflt; C:\Windows\system32\DRIVERS\avgntflt.sys [2013-12-22 90400]
R2 irda;IrDA Protocol; C:\Windows\system32\DRIVERS\irda.sys [2009-07-14 96768]
R2 Parvdm;Parvdm; C:\Windows\system32\DRIVERS\parvdm.sys [2009-07-14 8704]
R3 avfwim;AvFw Packet Filter Miniport; C:\Windows\system32\DRIVERS\avfwim.sys [2013-03-26 92448]
R3 irsir;Microsoft Serial Infrared Driver; C:\Windows\system32\DRIVERS\irsir.sys [2006-11-02 20992]
R3 PAC7302;PAC7302 VGA USB Camera; C:\Windows\system32\DRIVERS\PAC7302.SYS [2007-06-14 457856]
R3 RTL8167;Ovladač Realtek 8167 NT; C:\Windows\system32\DRIVERS\Rt86win7.sys [2009-07-13 139776]
S3 aic78xx;aic78xx; C:\Windows\system32\drivers\djsvs.sys [2009-07-14 70720]
S3 amdagp;AMD AGP Bus Filter Driver; C:\Windows\system32\drivers\amdagp.sys [2009-07-14 53312]
S3 b57nd60x;Broadcom NetXtreme Gigabit Ethernet - NDIS 6.0; C:\Windows\system32\DRIVERS\b57nd60x.sys [2009-07-13 229888]
S3 BridgeMP;@%SystemRoot%\system32\bridgeres.dll,-1; C:\Windows\system32\DRIVERS\bridge.sys [2009-07-14 78336]
S3 catchme;catchme; \??\C:\Users\Matej\AppData\Local\Temp\catchme.sys []
S3 dmvsc;dmvsc; C:\Windows\system32\drivers\dmvsc.sys [2010-11-20 62464]
S3 Dot4;MS IEEE-1284.4 Driver; C:\Windows\system32\DRIVERS\Dot4.sys [2009-07-14 131072]
S3 Dot4Print;Print Class Driver for IEEE-1284.4; C:\Windows\system32\DRIVERS\Dot4Prt.sys [2010-11-20 16384]
S3 dot4usb;MS Dot4USB Filter Dot4USB Filter; C:\Windows\system32\DRIVERS\dot4usb.sys [2009-07-14 36864]
S3 GMSIPCI;GMSIPCI; \??\D:\INSTALL\GMSIPCI.SYS []
S3 hamachi;Hamachi Network Interface; C:\Windows\system32\DRIVERS\hamachi.sys [2009-03-18 26176]
S3 pciide;pciide; C:\Windows\system32\drivers\pciide.sys [2009-07-14 12368]
S3 RDPDR;Terminal Server Device Redirector Driver; C:\Windows\System32\drivers\rdpdr.sys [2010-11-20 133632]
S3 RdpVideoMiniport;Remote Desktop Video Miniport Driver; C:\Windows\System32\drivers\rdpvideominiport.sys [2010-11-20 15872]
S3 s3cap;s3cap; C:\Windows\system32\drivers\vms3cap.sys [2010-11-20 5632]
S3 sisagp;SIS AGP Bus Filter; C:\Windows\system32\drivers\sisagp.sys [2009-07-14 52304]
S3 storvsc;storvsc; C:\Windows\system32\drivers\storvsc.sys [2010-11-20 28032]
S3 Synth3dVsc;Synth3dVsc; C:\Windows\System32\drivers\synth3dvsc.sys [2010-11-20 77184]
S3 terminpt;Microsoft Remote Desktop Input Driver; C:\Windows\system32\drivers\terminpt.sys [2010-11-20 25600]
S3 TsUsbFlt;@%SystemRoot%\system32\drivers\tsusbflt.sys,-1; C:\Windows\System32\drivers\tsusbflt.sys [2010-11-20 52224]
S3 TsUsbGD;Remote Desktop Generic USB Device; C:\Windows\system32\drivers\TsUsbGD.sys [2010-11-20 27264]
S3 tsusbhub;@%SystemRoot%\system32\drivers\tsusbhub.sys,-1; C:\Windows\system32\drivers\tsusbhub.sys [2010-11-20 112640]
S3 usbscan;Ovladač skeneru USB; C:\Windows\system32\DRIVERS\usbscan.sys [2009-07-14 35840]
S3 VGPU;VGPU; C:\Windows\System32\drivers\rdvgkmd.sys []
S3 viaagp;VIA AGP Bus Filter; C:\Windows\system32\drivers\viaagp.sys [2009-07-14 53328]
S3 ViaC7;VIA C7 Processor Driver; C:\Windows\system32\drivers\viac7.sys [2009-07-14 52736]
S3 vmbus;vmbus; C:\Windows\system32\drivers\vmbus.sys [2010-11-20 175360]
S3 VMBusHID;VMBusHID; C:\Windows\system32\drivers\VMBusHID.sys [2010-11-20 17920]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 AdobeARMservice;Adobe Acrobat Update Service; C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe [2012-09-23 65192]
R2 AntiVirFirewallService;Avira FireWall; C:\Program Files\Avira\AntiVir Desktop\avfwsvc.exe [2013-12-22 1012280]
R2 AntiVirMailService;Avira Mail Protection; C:\Program Files\Avira\AntiVir Desktop\avmailc.exe [2013-12-22 896056]
R2 AntiVirService;Avira Real-Time Protection; C:\Program Files\Avira\AntiVir Desktop\avguard.exe [2013-12-22 440376]
R2 AntiVirSchedulerService;Avira Scheduler; C:\Program Files\Avira\AntiVir Desktop\sched.exe [2013-12-22 440376]
R2 AntiVirWebService;Avira Web Protection; C:\Program Files\Avira\AntiVir Desktop\AVWEBGRD.EXE [2013-12-22 1011768]
R2 CscService;@%systemroot%\system32\cscsvc.dll,-200; C:\Windows\System32\svchost.exe [2009-07-14 20992]
R2 hpqddsvc;Služba HP CUE DeviceDiscovery; C:\Windows\system32\svchost.exe [2009-07-14 20992]
R2 Irmon;@%SystemRoot%\System32\irmon.dll,-2000; C:\Windows\system32\svchost.exe [2009-07-14 20992]
R2 MSSQL$SONY_MEDIAMGR;MSSQL$SONY_MEDIAMGR; C:\Program Files\Sony\Shared Plug-Ins\Media Manager\MSSQL$SONY_MEDIAMGR\Binn\sqlservr.exe [2002-12-17 7520337]
R2 Net Driver HPZ12;Net Driver HPZ12; C:\Windows\System32\svchost.exe [2009-07-14 20992]
R2 nvsvc;NVIDIA Display Driver Service; C:\Windows\system32\nvvsvc.exe [2012-12-29 639928]
R2 PanService;PandoraService; C:\Program Files\PANDORA.TV\PanService\KMPService.exe [2013-07-08 1922600]
R2 Pml Driver HPZ12;Pml Driver HPZ12; C:\Windows\System32\svchost.exe [2009-07-14 20992]
R3 hpqcxs08;hpqcxs08; C:\Windows\system32\svchost.exe [2009-07-14 20992]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
S2 gupdate;Služba Google Update (gupdate); C:\Program Files\Google\Update\GoogleUpdate.exe [2013-09-27 116648]
S2 nvUpdatusService;NVIDIA Update Service Daemon; C:\Program Files\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe []
S2 SkypeUpdate;Skype Updater; C:\Program Files\Skype\Updater\Updater.exe [2013-10-23 172192]
S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service; C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2013-12-10 257416]
S3 AppMgmt;@appmgmts.dll,-3250; C:\Windows\system32\svchost.exe [2009-07-14 20992]
S3 aspnet_state;Stavová služba ASP.NET; C:\Windows\Microsoft.NET\Framework\v4.0.30319\aspnet_state.exe [2010-03-18 35160]
S3 gupdatem;Služba Google Update (gupdatem); C:\Program Files\Google\Update\GoogleUpdate.exe [2013-09-27 116648]
S3 MSSQLServerADHelper;MSSQLServerADHelper; C:\Program Files\Microsoft SQL Server\80\Tools\Binn\sqladhlp.exe [2002-12-17 66112]
S3 odserv;Microsoft Office Diagnostics Service; C:\Program Files\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE [2006-10-26 441136]
S3 ose;Office Source Engine; C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2006-10-26 145184]
S3 PeerDistSvc;@%SystemRoot%\system32\peerdistsvc.dll,-9000; C:\Windows\System32\svchost.exe [2009-07-14 20992]
S3 SQLAgent$SONY_MEDIAMGR;SQLAgent$SONY_MEDIAMGR; C:\Program Files\Sony\Shared Plug-Ins\Media Manager\MSSQL$SONY_MEDIAMGR\Binn\sqlagent.EXE [2002-12-17 311872]
S3 Steam Client Service;Steam Client Service; C:\Program Files\Common Files\Steam\SteamService.exe [2014-01-07 569768]
S3 UmRdpService;@%SystemRoot%\system32\umrdp.dll,-1000; C:\Windows\System32\svchost.exe [2009-07-14 20992]
S3 WatAdminSvc;@%SystemRoot%\system32\Wat\WatUX.exe,-601; C:\Windows\system32\Wat\WatAdminSvc.exe [2013-09-28 1343400]
S4 NetMsmqActivator;@c:\Windows\Microsoft.NET\Framework\v4.0.30319\\ServiceModelInstallRC.dll,-8195; C:\Windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe [2010-03-18 124240]
S4 NetPipeActivator;@c:\Windows\Microsoft.NET\Framework\v4.0.30319\\ServiceModelInstallRC.dll,-8197; C:\Windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe [2010-03-18 124240]
S4 NetTcpActivator;@c:\Windows\Microsoft.NET\Framework\v4.0.30319\\ServiceModelInstallRC.dll,-8199; C:\Windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe [2010-03-18 124240]

-----------------EOF-----------------

Re: Podozrenie z virusu

Napsal: 14 led 2014 15:50
od vyosek
Zdravim :)

:arrow: Jen se zeptam pouzivate legalni operacni system, nejvyssi licence Ultimate zrovna neni bezna doamci verze :?:

Re: Podozrenie z virusu

Napsal: 14 led 2014 15:57
od M@tej
No jeden známy mi to inštaloval, predpokladám že ide stiahnutý soft. Ja používam PC aj na hranie hier tak preto mi odporučil radšej verziu ultimate.

Re: Podozrenie z virusu

Napsal: 14 led 2014 16:03
od vyosek
Tak to mate dobre zname, kdyz Vas vedomne vystavuji riziku trestniho stihani pro poruseni autorskych prav (pouzivani nelegalniho systemu).

Je mi lito, ale na nasem foru se nelegalnimi systemy nezabyvame - je to dano jak pravidly fora, tak chartou mezinarodni aliance ASAP jejiz jsme cleny...

Re: Podozrenie z virusu

Napsal: 14 led 2014 16:06
od M@tej
no nič i tak ďakujem a prajem pekný deň.

Re: Podozrenie z virusu

Napsal: 14 led 2014 16:16
od vyosek
:arrow: Zkuste KMPlayer preinstalovat

:arrow: Ale tim me rady konci, jak jsem psal.

Mejte se :worship:

A na zaklade Pravidla o zamykani temat :lock: