Nefunkční firewall, internet

Zpráva

xmalik2 · #1 Příspěvek od **xmalik2** » 09 čer 2014 09:00

Ahoj, měl jsem doma zavirovaný počítač, který hned po spuštění využíval CPU na 80-100% a systém hlásil, že je plný disk. Měl jsem i zablokovaný přístup do nouzového režimu, systém zamrzl u souboru CLASSPNP.SYS.

Včera se mi povedlo se této havěti zbavit, dostal jsem se nakonec i do toho nouzáku a místo na disku se uvolnilo. Bohužel ale nastal další problém - Nejde spustit Brána Firewall a nejede internet (předtím internet fungoval).

Brána Firewall je červená a hlásí pouze možnost: Použít doporučené nastavení. Po zvolení této možnosti se chvíli kroutí loading, ale nic se nestane.
Snažil jsem se spustit Službu Brána Firewall, ale napsalo mi to hlášku:

Systém Windows nemůže spustit službu Brána Windows Firewall v počítači Local Computer. Další informace naleznete v systémovém protokolu událostí. Pokud se nejedná o službu společnosti Microsoft, obraťte se na dodavatele služby a sdělte kód chyby týkající se služby 6801.

V systémovém protokolu událostí je chyba:

Služba Brána Windows Firewall ukončena s chybou Podpora transakcí v rámci zadaného spcávce prostředků nebyla spuštěna nebo byla vypnuta z důvodu chyby., specifickou pro službu.

Podrobnosti události

Kód: Vybrat vše

- System 

  - Provider 

   [ Name]  Service Control Manager 
   [ Guid]  {555908d1-a6d7-4695-8e1e-26931d2012f4} 
   [ EventSourceName]  Service Control Manager 
 
  - EventID 7024 

   [ Qualifiers]  49152 
 
   Version 0 
 
   Level 2 
 
   Task 0 
 
   Opcode 0 
 
   Keywords 0x8080000000000000 
 
  - TimeCreated 

   [ SystemTime]  2014-06-09T07:30:04.263105700Z 
 
   EventRecordID 150352 
 
   Correlation 
 
  - Execution 

   [ ProcessID]  572 
   [ ThreadID]  1456 
 
   Channel System 
 
   Computer HP 
 
   Security 
 

- EventData 

  param1 Brána Windows Firewall 
  param2 %%6801

Podezřelé je mi také to, že když chci přistoupit do Plánovače úloh, vyskočí mi hláška:

Služba plánovač úloh není k dispozici. Služba se pokusí o nové připojení.

kliknu na OK, pak vyskočí chybová hláška:

Vybraná úloha Proxy již neexistuje. Pokud chcete zobrazit aktuální úlohy, klikněte na možnost Aktualizovat.

Předem díky za jakoukoli pomoc.
Marek.

Log z RSIT
Logfile of random's system information tool 1.10 (written by random/random)
Run by User at 2014-06-09 09:42:53
Microsoft Windows 7 Professional
System drive C: has 269 GB (88%) free of 305 GB
Total RAM: 2013 MB (64% free)

HijackThis download failed

======Scheduled tasks folder======

C:\Windows\tasks\Adobe Flash Player Updater.job - C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe

=========Mozilla firefox=========

ProfilePath - C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\v058i168.default

prefs.js - "browser.startup.homepage" - "http://www.centrum.cz"
prefs.js - "extensions.enabledItems" - "xmlfiller@software602.cz:3.16.2, {CAFEEFAC-0016-0000-0031-ABCDEFFEDCBA}:6.0.31, {972ce4c6-7e08-4474-a285-3208198ce6fd}:3.6.25"
prefs.js - "keyword.URL" - "http://search.yahoo.com/search?fr=green ... =198484&p="

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 13.0.0.206 Plugin
"Path"=C:\Windows\system32\Macromed\Flash\NPSWF32_13_0_0_214.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@java.com/DTPlugin,version=10.55.2]
"Description"=Java™ Deployment Toolkit
"Path"=C:\Program Files\Java\jre7\bin\dtplugin\npDeployJava1.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@java.com/JavaPlugin,version=10.55.2]
"Description"=Oracle® Next Generation Java™ Plug-In
"Path"=C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@microsoft.com/GENUINE]
"Description"=
"Path"=disabled

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0]
"Description"=Ag Player Plugin
"Path"=c:\Program Files\Microsoft Silverlight\5.1.30214.0\npctrl.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@microsoft.com/WLPG,version=15.4.3502.0922]
"Description"=WLPG Install MIME type
"Path"=C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@microsoft.com/WLPG,version=15.4.3508.1109]
"Description"=WLPG Install MIME type
"Path"=C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@videolan.org/vlc,version=2.0.8]
"Description"=VLC Multimedia Plugin
"Path"=C:\VideoLAN\VLC\npvlc.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\Adobe Reader]
"Description"=Handles PDFs in-place in Firefox
"Path"=C:\Program Files\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll

C:\Program Files\Mozilla Firefox\extensions\
xmlfiller@software602.cz
{CAFEEFAC-0016-0000-0035-ABCDEFFEDCBA}

C:\Program Files\Mozilla Firefox\components\
nsIFillerPlugin.xpt

C:\Program Files\Mozilla Firefox\plugins\
npfiller.dll
NPOFF12.DLL
nppdf32.dll

C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\v058i168.default\searchplugins\
yahoo.xml

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{1dad3af3-ef2f-4f64-ac4b-11789189fcb6}]
Bing Bar Helper - C:\Program Files\Microsoft\BingBar\7.3.132.0\BingExt.dll []

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
Java(tm) Plug-In SSV Helper - C:\Program Files\Java\jre7\bin\ssv.dll [2014-04-14 462760]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
Windows Live ID Sign-in Helper - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2010-09-21 439168]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9FDDE16B-836F-4806-AB1F-1455CBEF/289}]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre7\bin\jp2ssv.dll [2014-04-14 171944]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"ToolBoxFX"=C:\Program Files\HP\ToolBoxFX\bin\HPTLBXFX.exe [2010-03-03 53248]
"SunJavaUpdateSched"=C:\Program Files\Common Files\Java\Java Update\jusched.exe [2013-07-02 254336]
"Persistence"=C:\Windows\system32\igfxpers.exe [2010-04-21 169496]
"LanguageShortcut"=C:\Program Files\CyberLink\PowerDVD\Language\Language.exe [2007-01-08 52256]
"IgfxTray"=C:\Windows\system32\igfxtray.exe [2010-04-21 136216]
"HPUsageTracking"=C:\Program Files\HP\HP UT\bin\hppusg.exe [2007-08-31 36864]
"HP Software Update"=C:\Program Files\HP\HP Software Update\HPWuSchd2.exe [2005-02-16 49152]
"HotKeysCmds"=C:\Windows\system32\hkcmd.exe [2010-04-21 171032]
"F-Secure TNB"=C:\Program Files\F-Secure\FSGUI\TNBUtil.exe [2009-08-05 2349664]
"F-Secure Manager"=C:\Program Files\F-Secure\Common\FSM32.EXE [2009-08-05 199264]
"Adobe ARM"=C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2013-11-21 959904]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"PrMan"=C:\PCFPRINT\PRMAN32.EXE [2004-09-19 1520348]
"LightScribe Control Panel"=C:\Program Files\Common Files\LightScribe\LightScribeControlPanel.exe [2008-01-24 2289664]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Advanced SystemCare 5]
C:\Program Files\IObit\Advanced SystemCare 5\ASCTray.exe [2011-12-29 620376]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\RemoteControl]
C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe [2007-03-14 71216]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\igfxcui]
C:\Windows\system32\igfxdev.dll [2010-04-21 227328]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=credssp.dll

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorUser"=3
"EnableUIADesktopToggle"=0
"PromptOnSecureDesktop"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=145
"NoDrives"=0

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDrives"=0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.msadpcm"=msadp32.acm
"midimapper"=midimap.dll
"wavemapper"=msacm32.drv
"vidc.uyvy"=msyuv.dll
"vidc.yuy2"=msyuv.dll
"vidc.yvyu"=msyuv.dll
"vidc.iyuv"=iyuv_32.dll
"vidc.i420"=iyuv_32.dll
"vidc.yvu9"=tsbyuv.dll
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"vidc.cvid"=iccvid.dll
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv
"msacm.siren"=sirenacm.dll

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1
.txt - open - "C:\Program Files\Microsoft Office\Office12\WINWORD.EXE" /n /dde

======List of files/folders created in the last 1 month======

2014-06-09 09:42:53 ----D---- C:\rsit
2014-06-09 09:42:53 ----D---- C:\Program Files\trend micro
2014-06-09 09:23:49 ----D---- C:\Users\User\AppData\Roaming\HP
2014-06-09 09:06:35 ----A---- C:\ComboFix.txt
2014-06-09 09:03:00 ----SHD---- C:\$RECYCLE.BIN
2014-06-09 09:01:23 ----D---- C:\Windows\temp
2014-06-09 08:51:16 ----A---- C:\Windows\zip.exe
2014-06-09 08:51:16 ----A---- C:\Windows\SWSC.exe
2014-06-09 08:51:16 ----A---- C:\Windows\SWREG.exe
2014-06-09 08:51:16 ----A---- C:\Windows\sed.exe
2014-06-09 08:51:16 ----A---- C:\Windows\PEV.exe
2014-06-09 08:51:16 ----A---- C:\Windows\NIRCMD.exe
2014-06-09 08:51:16 ----A---- C:\Windows\MBR.exe
2014-06-09 08:51:16 ----A---- C:\Windows\grep.exe
2014-06-08 21:42:14 ----A---- C:\TDSSKiller.3.0.0.25_08.06.2014_21.42.14_log.txt
2014-06-08 21:32:37 ----D---- C:\Windows\pss
2014-06-08 21:26:47 ----D---- C:\Qoobox
2014-06-08 21:25:50 ----D---- C:\Windows\erdnt
2014-06-08 21:24:46 ----A---- C:\TDSSKiller.3.0.0.25_08.06.2014_21.24.46_log.txt
2014-06-08 13:59:25 ----N---- C:\bootsqm.dat
2014-06-08 13:58:15 ----D---- C:\found.000
2014-06-08 12:32:26 ----A---- C:\Windows\system32\drivers\TrueSight.sys
2014-06-08 12:32:20 ----D---- C:\ProgramData\RogueKiller
2014-06-08 11:59:11 ----D---- C:\Users\User\AppData\Roaming\JGoodies
2014-06-08 11:58:19 ----D---- C:\Program Files\JGoodies
2014-06-06 19:58:07 ----D---- C:\Users\User\AppData\Roaming\Malwarebytes
2014-06-06 19:57:41 ----D---- C:\ProgramData\Malwarebytes
2014-06-06 19:57:40 ----D---- C:\Program Files\Malwarebytes' Anti-Malware
2014-06-06 19:57:40 ----A---- C:\Windows\system32\drivers\mbam.sys
2014-06-06 19:50:32 ----A---- C:\TDSSKiller.3.0.0.25_06.06.2014_19.50.32_log.txt
2014-06-06 19:40:03 ----D---- C:\AdwCleaner
2014-05-30 19:17:29 ----D---- C:\Program Files\Common Files\DESIGNER
2014-05-23 16:26:55 ----D---- C:\Program Files\Mozilla Firefox

======List of files/folders modified in the last 1 month======

2014-06-09 09:42:53 ----RD---- C:\Program Files
2014-06-09 09:38:54 ----SD---- C:\ProgramData\Microsoft
2014-06-09 09:28:03 ----D---- C:\Windows\System32
2014-06-09 09:28:03 ----D---- C:\Windows\inf
2014-06-09 09:28:03 ----A---- C:\Windows\system32\PerfStringBackup.INI
2014-06-09 09:10:09 ----SHD---- C:\Windows\Installer
2014-06-09 09:10:09 ----D---- C:\Config.Msi
2014-06-09 09:09:42 ----SHD---- C:\System Volume Information
2014-06-09 09:07:11 ----D---- C:\Windows
2014-06-09 09:06:38 ----D---- C:\Windows\system32\drivers
2014-06-09 09:02:59 ----A---- C:\Windows\system.ini
2014-06-09 09:02:53 ----D---- C:\Windows\system32\drivers\etc
2014-06-09 08:57:39 ----D---- C:\Windows\AppPatch
2014-06-09 08:57:38 ----D---- C:\Program Files\Common Files
2014-06-09 08:50:31 ----D---- C:\Windows\Tasks
2014-06-09 08:26:58 ----D---- C:\Windows\system32\LogFiles
2014-06-09 08:12:44 ----D---- C:\Program Files\Microsoft Office
2014-06-09 00:02:25 ----D---- C:\Windows\system32\Tasks
2014-06-08 21:55:47 ----D---- C:\Windows\system32\catroot2
2014-06-08 13:28:33 ----D---- C:\Program Files\F-Secure
2014-06-08 12:32:20 ----D---- C:\ProgramData
2014-06-08 12:25:17 ----D---- C:\Windows\debug
2014-06-07 11:29:20 ----D---- C:\PCFPRINT
2014-06-06 20:19:08 ----D---- C:\Windows\Vss
2014-06-06 19:22:08 ----D---- C:\Windows\system32\config
2014-06-06 19:05:45 ----D---- C:\Windows\system32\NDF
2014-06-03 19:59:01 ----D---- C:\Users\User\AppData\Roaming\IObit
2014-06-03 19:12:59 ----D---- C:\ProgramData\fssg
2014-06-03 19:12:53 ----D---- C:\UFAND42
2014-06-03 17:54:46 ----D---- C:\Windows\system32\appmgmt
2014-06-03 17:54:31 ----D---- C:\Windows\ehome
2014-06-03 17:49:43 ----D---- C:\Users\User\AppData\Roaming\vlc
2014-06-03 16:53:01 ----D---- C:\Windows\Prefetch
2014-06-03 16:45:41 ----D---- C:\ProgramData\Microsoft Help
2014-05-30 19:27:53 ----D---- C:\KEO
2014-05-30 19:27:52 ----D---- C:\EO4L
2014-05-30 19:20:29 ----D---- C:\Windows\system32\MRT
2014-05-28 18:43:56 ----A---- C:\Windows\system32\sqlite3.dll
2014-05-23 20:43:40 ----A---- C:\Windows\system32\FlashPlayerApp.exe
2014-05-23 16:33:09 ----D---- C:\Program Files\Mozilla Maintenance Service
2014-05-23 14:13:50 ----D---- C:\Users\User\AppData\Roaming\602XML

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 fsbts;fsbts; C:\Windows\system32\Drivers\fsbts.sys [2012-09-09 44240]
R0 rdyboost;ReadyBoost; C:\Windows\System32\drivers\rdyboost.sys [2009-07-14 173648]
R0 Si3132r5;SiI-3132 SoftRaid 5 Controller; C:\Windows\system32\DRIVERS\Si3132r5.sys [2007-06-01 215856]
R0 SiFilter;SATALink driver accelerator; C:\Windows\system32\DRIVERS\SiWinAcc.sys [2007-05-25 17328]
R0 SiRemFil;SATALink External Device Filter; C:\Windows\system32\DRIVERS\SiRemFil.sys [2007-05-25 12464]
R1 CSC;@%systemroot%\system32\cscsvc.dll,-202; C:\Windows\system32\drivers\csc.sys [2009-07-14 387584]
R1 F-Secure HIPS;F-Secure HIPS Driver; \??\C:\Program Files\F-Secure\HIPS\drivers\fshs.sys [2009-08-05 68064]
R1 FSES;F-Secure Email Scanning Driver; C:\Windows\System32\drivers\fses.sys [2011-03-05 36792]
R1 FSFW;F-Secure Firewall Driver; C:\Windows\System32\drivers\fsdfw.sys [2013-05-01 73224]
R1 fsvista;F-Secure Vista Support Driver; \??\C:\Program Files\F-Secure\Anti-Virus\minifilter\fsvista.sys [2009-08-05 12384]
R3 F-Secure Gatekeeper;F-Secure Gatekeeper; \??\C:\Program Files\F-Secure\Anti-Virus\minifilter\fsgk.sys [2013-07-12 145856]
R3 igfx;igfx; C:\Windows\system32\DRIVERS\igdkmd32.sys [2010-04-21 8746496]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\Windows\system32\drivers\RTKVHDA.sys [2010-06-08 3112360]
R3 MBAMProtector;MBAMProtector; \??\C:\Windows\system32\drivers\mbam.sys [2013-04-04 22856]
R3 RTL8167;Realtek 8167 NT Driver; C:\Windows\system32\DRIVERS\Rt86win7.sys [2009-03-01 139776]
S1 MpKsl8636cd68;MpKsl8636cd68; \??\c:\ProgramData\Microsoft\Microsoft Antimalware\Definition Updates\{2B43EBFF-EB94-45E8-A536-4F75A6CB0665}\MpKsl8636cd68.sys []
S2 Parvdm;Parvdm; C:\Windows\system32\DRIVERS\parvdm.sys [2009-07-14 8704]
S3 aic78xx;aic78xx; C:\Windows\system32\DRIVERS\djsvs.sys [2009-07-14 70720]
S3 amdagp;AMD AGP Bus Filter Driver; C:\Windows\system32\DRIVERS\amdagp.sys [2009-07-14 53312]
S3 b57nd60x;Broadcom NetXtreme Gigabit Ethernet - NDIS 6.0; C:\Windows\system32\DRIVERS\b57nd60x.sys [2009-07-14 229888]
S3 BridgeMP;@%SystemRoot%\system32\bridgeres.dll,-1; C:\Windows\system32\DRIVERS\bridge.sys [2009-07-14 78336]
S3 catchme;catchme; \??\C:\Users\User\AppData\Local\Temp\catchme.sys []
S3 fssfltr;FssFltr; C:\Windows\system32\DRIVERS\fssfltr.sys [2010-09-23 39272]
S3 HPFXBULK;HPFXBULK; C:\Windows\system32\drivers\hpfxbulk.sys [2007-07-16 17432]
S3 HPFXFAX;HPFXFAX; C:\Windows\system32\drivers\hpfxfax.sys [2007-07-16 20504]
S3 pciide;pciide; C:\Windows\system32\DRIVERS\pciide.sys [2009-07-14 12368]
S3 RDPDR;Terminal Server Device Redirector Driver; C:\Windows\System32\drivers\rdpdr.sys [2009-07-14 133120]
S3 s3cap;s3cap; C:\Windows\system32\DRIVERS\vms3cap.sys [2009-07-14 5632]
S3 sisagp;SIS AGP Bus Filter; C:\Windows\system32\DRIVERS\sisagp.sys [2009-07-14 52304]
S3 storvsc;storvsc; C:\Windows\system32\DRIVERS\storvsc.sys [2009-07-14 28224]
S3 usbscan;Ovladač skeneru USB; C:\Windows\system32\DRIVERS\usbscan.sys [2009-07-14 35840]
S3 viaagp;VIA AGP Bus Filter; C:\Windows\system32\DRIVERS\viaagp.sys [2009-07-14 53328]
S3 ViaC7;VIA C7 Processor Driver; C:\Windows\system32\DRIVERS\viac7.sys [2009-07-14 52736]
S3 vmbus;@%SystemRoot%\system32\vmbusres.dll,-1000; C:\Windows\system32\DRIVERS\vmbus.sys [2009-07-14 175824]
S3 VMBusHID;VMBusHID; C:\Windows\system32\DRIVERS\VMBusHID.sys [2009-07-14 17920]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 602XML Updater;602Updater; C:\Program Files\Common Files\soft602\602updsvc\602updsvc.exe [2010-04-14 73728]
R2 AdobeARMservice;Adobe Acrobat Update Service; C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe [2013-12-18 65432]
R2 AdvancedSystemCareService5;Advanced SystemCare Service 5; C:\Program Files\IObit\Advanced SystemCare 5\ASCService.exe [2011-12-29 497496]
R2 BBSvc;BingBar Service; C:\Program Files\Microsoft\BingBar\7.3.132.0\BBSvc.exe [2014-03-11 193696]
R2 F-Secure Gatekeeper Handler Starter;FSGKHS; C:\Program Files\F-Secure\Anti-Virus\fsgk32st.exe [2009-08-05 215648]
R2 FSMA;F-Secure Management Agent; C:\Program Files\F-Secure\Common\FSMA32.EXE [2009-08-05 186976]
R2 HP LaserJet Service;HP LaserJet Service; C:\Program Files\HP\HPLaserJetService\HPLaserJetService.exe [2010-03-03 136192]
R2 hpqddsvc;Služba HP CUE DeviceDiscovery; C:\Windows\system32\svchost.exe [2009-07-14 20992]
R2 LightScribeService;LightScribeService Direct Disc Labeling Service; C:\Program Files\Common Files\LightScribe\LSSrvc.exe [2008-01-24 73728]
R2 MBAMService;MBAMService; C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe [2013-04-04 701512]
R2 MBAMScheduler;MBAMScheduler; C:\Program Files\Malwarebytes' Anti-Malware\mbamscheduler.exe [2013-04-04 418376]
R2 MySQL7;MySQL7; C:\Alis\MySQL51\server\bin\mysqld.exe [2010-08-13 6094848]
R2 Net Driver HPZ12;Net Driver HPZ12; C:\Windows\System32\svchost.exe [2009-07-14 20992]
R2 Pml Driver HPZ12;Pml Driver HPZ12; C:\Windows\System32\svchost.exe [2009-07-14 20992]
R2 RichVideo;Cyberlink RichVideo Service(CRVS); C:\Program Files\CyberLink\Shared Files\RichVideo.exe [2007-05-14 272024]
R2 wlidsvc;Windows Live ID Sign-in Assistant; C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE [2010-09-21 1710464]
R3 BBUpdate;BBUpdate; C:\Program Files\Microsoft\BingBar\7.3.132.0\SeaPort.exe [2014-03-11 247968]
R3 FSDFWD;F-Secure Anti-Virus Firewall Daemon; C:\Program Files\F-Secure\FWES\Program\fsdfwd.exe [2011-03-05 522848]
R3 FSORSPClient;F-Secure ORSP Client; C:\Program Files\F-Secure\ORSP Client\fsorsp.exe [2013-06-07 60352]
R3 hpqcxs08;hpqcxs08; C:\Windows\system32\svchost.exe [2009-07-14 20992]
S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service; C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2014-05-23 257712]
S3 AppMgmt;@appmgmts.dll,-3250; C:\Windows\system32\svchost.exe [2009-07-14 20992]
S3 fsssvc;Windows Live Family Safety Service; C:\Program Files\Windows Live\Family Safety\fsssvc.exe [2010-09-23 1493352]
S3 MozillaMaintenance;Mozilla Maintenance Service; C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe [2014-05-23 119408]
S3 NMIndexingService;NMIndexingService; C:\Program Files\Common Files\Ahead\Lib\NMIndexingService.exe []
S3 odserv;Microsoft Office Diagnostics Service; C:\Program Files\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE [2011-07-20 440696]
S3 ose;Office Source Engine; C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2008-10-24 145248]
S3 StorSvc;@%SystemRoot%\System32\StorSvc.dll,-100; C:\Windows\System32\svchost.exe [2009-07-14 20992]
S3 UmRdpService;@%SystemRoot%\system32\umrdp.dll,-1000; C:\Windows\System32\svchost.exe [2009-07-14 20992]
S3 WatAdminSvc;@%SystemRoot%\system32\Wat\WatUX.exe,-601; C:\Windows\system32\Wat\WatAdminSvc.exe [2010-08-31 1343400]
S4 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
S4 CscService;@%systemroot%\system32\cscsvc.dll,-200; C:\Windows\System32\svchost.exe [2009-07-14 20992]
S4 PeerDistSvc;@%SystemRoot%\system32\peerdistsvc.dll,-9000; C:\Windows\System32\svchost.exe [2009-07-14 20992]
S4 wlcrasvc;Windows Live Mesh remote connections service; C:\Program Files\Windows Live\Mesh\wlcrasvc.exe [2010-09-22 51040]

-----------------EOF-----------------

Log z Hijackthis

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 9:57:07, on 9.6.2014
Platform: Windows 7 (WinNT 6.00.3504)
MSIE: Internet Explorer v8.00 (8.00.7600.17267)
Boot mode: Normal

Running processes:
C:\Windows\system32\Dwm.exe
C:\Windows\system32\taskhost.exe
C:\Windows\Explorer.EXE
C:\Program Files\HP\ToolboxFX\bin\HPTLBXFX.exe
C:\Program Files\Common Files\Java\Java Update\jusched.exe
C:\Windows\System32\igfxpers.exe
C:\Program Files\HP\HP UT\bin\hppusg.exe
C:\Program Files\HP\HP Software Update\hpwuSchd2.exe
C:\Windows\System32\hkcmd.exe
C:\Program Files\F-Secure\Common\FSM32.EXE
C:\PCFPRINT\PRMAN32.EXE
C:\Program Files\Common Files\LightScribe\LightScribeControlPanel.exe
C:\Program Files\Malwarebytes' Anti-Malware\mbamgui.exe
E:\apps\VIRUS_KILLERS\hijackthis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.seznam.cz/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
O2 - BHO: Bing Bar Helper - {1dad3af3-ef2f-4f64-ac4b-11789189fcb6} - C:\Program Files\Microsoft\BingBar\7.3.132.0\BingExt.dll (file missing)
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll
O2 - BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: (no name) - {9FDDE16B-836F-4806-AB1F-1455CBEF/289} - (no file)
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll
O4 - HKLM\..\Run: [ToolBoxFX] "C:\Program Files\HP\ToolBoxFX\bin\HPTLBXFX.exe" /enum:on /alerts:on /notifications:on /fl:on /fr:on /appData:on /tmcp:on
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Common Files\Java\Java Update\jusched.exe"
O4 - HKLM\..\Run: [Persistence] C:\Windows\system32\igfxpers.exe
O4 - HKLM\..\Run: [LanguageShortcut] "C:\Program Files\CyberLink\PowerDVD\Language\Language.exe"
O4 - HKLM\..\Run: [IgfxTray] C:\Windows\system32\igfxtray.exe
O4 - HKLM\..\Run: [HPUsageTracking] "C:\Program Files\HP\HP UT\bin\hppusg.exe" "C:\Program Files\HP\HP UT\"
O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
O4 - HKLM\..\Run: [HotKeysCmds] C:\Windows\system32\hkcmd.exe
O4 - HKLM\..\Run: [F-Secure TNB] "C:\Program Files\F-Secure\FSGUI\TNBUtil.exe" /CHECKALL /WAITFORSW
O4 - HKLM\..\Run: [F-Secure Manager] "C:\Program Files\F-Secure\Common\FSM32.EXE" /splash
O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKCU\..\Run: [PrMan] C:\PCFPRINT\PRMAN32.EXE
O4 - HKCU\..\Run: [LightScribe Control Panel] C:\Program Files\Common Files\LightScribe\LightScribeControlPanel.exe -hidden
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Excel - res://C:\PROGRA~1\MICROS~3\Office12\EXCEL.EXE/3000
O9 - Extra button: @C:\Program Files\Windows Live\Companion\companionlang.dll,-600 - {0000036B-C524-4050-81A0-243669A86B9F} - C:\Program Files\Windows Live\Companion\companioncore.dll
O9 - Extra button: @C:\Program Files\Windows Live\Writer\WindowsLiveWriterShortcuts.dll,-1004 - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra 'Tools' menuitem: @C:\Program Files\Windows Live\Writer\WindowsLiveWriterShortcuts.dll,-1003 - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~3\Office12\REFIEBAR.DLL
O10 - Unknown file in Winsock LSP: c:\program files\common files\microsoft shared\windows live\wlidnsp.dll
O10 - Unknown file in Winsock LSP: c:\program files\common files\microsoft shared\windows live\wlidnsp.dll
O18 - Protocol: wlpg - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} - C:\Program Files\Windows Live\Photo Gallery\AlbumDownloadProtocolHandler.dll
O23 - Service: 602Updater (602XML Updater) - Software602 a.s. - C:\Program Files\Common Files\soft602\602updsvc\602updsvc.exe
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: Advanced SystemCare Service 5 (AdvancedSystemCareService5) - IObit - C:\Program Files\IObit\Advanced SystemCare 5\ASCService.exe
O23 - Service: FSGKHS (F-Secure Gatekeeper Handler Starter) - Unknown owner - C:\Program Files\F-Secure\Anti-Virus\fsgk32st.exe
O23 - Service: F-Secure Anti-Virus Firewall Daemon (FSDFWD) - F-Secure Corporation - C:\Program Files\F-Secure\FWES\Program\fsdfwd.exe
O23 - Service: F-Secure Management Agent (FSMA) - F-Secure Corporation - C:\Program Files\F-Secure\Common\FSMA32.EXE
O23 - Service: F-Secure ORSP Client (FSORSPClient) - F-Secure Corporation - C:\Program Files\F-Secure\ORSP Client\fsorsp.exe
O23 - Service: HP LaserJet Service - HP - C:\Program Files\HP\HPLaserJetService\HPLaserJetService.exe
O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files\Common Files\LightScribe\LSSrvc.exe
O23 - Service: MBAMScheduler - Malwarebytes Corporation - C:\Program Files\Malwarebytes' Anti-Malware\mbamscheduler.exe
O23 - Service: MBAMService - Malwarebytes Corporation - C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe
O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Mozilla Foundation - C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe
O23 - Service: MySQL7 - Unknown owner - C:\Alis\MySQL51\server\bin\mysqld.exe
O23 - Service: NMIndexingService - Unknown owner - C:\Program Files\Common Files\Ahead\Lib\NMIndexingService.exe (file missing)
O23 - Service: Cyberlink RichVideo Service(CRVS) (RichVideo) - Unknown owner - C:\Program Files\CyberLink\Shared Files\RichVideo.exe

--
End of file - 6592 bytes

#2 Příspěvek od **JaRon** » 09 čer 2014 09:07

ahoj,
1. odinstaluj tento nestastny SW

Advanced SystemCare 5
2. doinstaluj ServicePack1

xmalik2 · #3 Příspěvek od **xmalik2** » 09 čer 2014 10:37

Program jsem odstranil, instalace SP1 se ale bohužel nezdařila (z důvodu: Parametr není správný). Chyba: ERROR_INVALID_PARAMETER(0x80070057).

Na stránkách Microsoftu jsem se dočetl, že mám v tomto případě stáhnout Nástroj přípravenosti aktualizace systému http://support.microsoft.com/kb/947821/cs. Bohužel ani stažení a instalace tohoto HotFix balíčku nepomohla a systém pořád hlásí stejnou chybu jako na začátku.

Samostatný balíček se Service Packem 1 pro Windows 7 x86 jsem stahoval také ze stránek Microsoftu http://www.microsoft.com/cs-cz/download ... px?id=5842. Konkrétně se jednalo o windows6.1-KB976932-X86.

Kde se stala chyba mi není jasné

.

xmalik2 · #4 Příspěvek od **xmalik2** » 09 čer 2014 10:45

xmalik2 píše:Program jsem odstranil, instalace SP1 se ale bohužel nezdařila (z důvodu: Parametr není správný). Chyba: ERROR_INVALID_PARAMETER(0x80070057).

Na stránkách Microsoftu jsem se dočetl, že mám v tomto případě stáhnout Nástroj přípravenosti aktualizace systému http://support.microsoft.com/kb/947821/cs. Bohužel ani stažení a instalace tohoto HotFix balíčku nepomohla a systém pořád hlásí stejnou chybu jako na začátku.

Samostatný balíček se Service Packem 1 pro Windows 7 x86 jsem stahoval také ze stránek Microsoftu http://www.microsoft.com/cs-cz/download ... px?id=5842. Konkrétně se jednalo o windows6.1-KB976932-X86.

Kde se stala chyba mi není jasné .

Možná to má co dělat s aktualizacemi, které čekají na instalaci při vypnutí PC. Ty ale zamrzají také, skončí na obrazovce "Probíhá instalace aktualizace 2 z 5 .."

Ještě tomu chvíli nechám, jestli se to nepohne, ale spíše to vypadá že ne

.

#5 Příspěvek od **JaRon** » 09 čer 2014 10:56

1. vycisti PC s CCleanerom
2. spust s prikazoveho riadku sfc /scannow

xmalik2 · #6 Příspěvek od **xmalik2** » 09 čer 2014 11:34

Vyčištěno, integrita zkontrolována. Test přes SFC jsem dělal už předtím http://www.sevenforums.com/tutorials/13 ... -boot.html. Ale přesto jsem to udělal ještě pro jistotu jednou.

Teď Brána Firewall po kliknutí na doporučená nastavení píše:

Brána Windows Firewall nemůže změnit některá nastavení. Kód chyby: 0x8007045b.

#7 Příspěvek od **JaRon** » 09 čer 2014 12:19

pouzi este chkdsk /r vidim tam nejaky mensi problem s diskom
,,, viac Ti asi neporadim, kedze prebehlo "silne" odvirovanie mimo tohto fora

a niekde mohlo dosjt k poskodeniu OS

VIRY.CZ

Nefunkční firewall, internet

Nefunkční firewall, internet

Re: Nefunkční firewall, internet

Re: Nefunkční firewall, internet

Re: Nefunkční firewall, internet

Re: Nefunkční firewall, internet

Re: Nefunkční firewall, internet

Re: Nefunkční firewall, internet