Odvirování PC, zrychlení počítače, vzdálená pomoc prostřednictvím služby neslape.cz

po zapnutí naběhne NR bez sítě + rsit log

Máte problém s virem? Vložte sem log z FRST nebo RSIT.

Moderátor: Moderátoři

Pravidla fóra
Pokud chcete pomoc, vložte log z FRST [návod zde] nebo RSIT [návod zde]

Jednotlivé thready budou po vyřešení uzamčeny. Stejně tak ty, které budou nečinné déle než 14 dní. Vizte Pravidlo o zamykání témat. Děkujeme za pochopení.

!NOVINKA!
Nově lze využívat služby vzdálené pomoci, kdy se k vašemu počítači připojí odborník a bližší informace o problému si od vás získá telefonicky! Více na www.neslape.cz
Zamčeno
Zpráva
Autor
TheSevenCz
Návštěvník
Návštěvník
Příspěvky: 42
Registrován: 08 črc 2012 13:00

po zapnutí naběhne NR bez sítě + rsit log

#1 Příspěvek od TheSevenCz »

Zdravím kamarádka mi dala svůj zaneřáděný ntb na "opravu" při čistění ntb ccleanerem zatrhla i nějaké další položky než si deafultní po restartu ntb automaticky naběhne do nouzového režim koukal sem i do biosu a nenašel sem problém tedy po zapnutí ntb vyskočí načítání souborů souborů systému windows a pak naběhne celkem rychle nouzový režim bez práce v síti a vněm jede vše v "pořádku" zkoušel sem bod obnovy do funkčního data bohužel beze změny prosím o radu přikládám sken z rsitu děkuji mnohokrát za váš čas

Logfile of random's system information tool 1.10 (written by random/random)
Run by Jitka at 2014-11-08 18:48:52
Microsoft Windows 7 Professional Service Pack 1
System drive C: has 364 GB (76%) free of 477 GB
Total RAM: 8058 MB (91% free)

HijackThis download failed

======Listing Processes======



\SystemRoot\System32\smss.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
wininit.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
C:\Windows\system32\services.exe
winlogon.exe
C:\Windows\system32\lsass.exe
C:\Windows\system32\lsm.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Windows\system32\svchost.exe -k RPCSS
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\system32\svchost.exe -k netsvcs
C:\Windows\system32\svchost.exe -k NetworkService
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
/QuitInfo:0000000000000168;000000000000016C; /AddRef;
/QuitInfo:00000000000001B4;00000000000001B8; /AddRef;
/QuitInfo:00000000000001A4;00000000000001C0;
C:\Windows\Explorer.EXE
ctfmon.exe
C:\Windows\system32\DllHost.exe /Processid:{3EB3C877-1F16-487C-9050-104DBCD66683}
C:\Windows\System32\svchost.exe -k secsvcs
"C:\Users\Jitka\Desktop\RSITx64.exe"
C:\Windows\system32\wbem\wmiprvse.exe

======Scheduled tasks folder======

C:\Windows\tasks\Adobe Flash Player Updater.job - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
C:\Windows\tasks\GoogleUpdateTaskMachineCore.job - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe /c
C:\Windows\tasks\GoogleUpdateTaskMachineUA.job - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe /ua /installsource scheduler

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{8E5E2654-AD2D-48bf-AC2D-D17F00898D06}]
avast! Online Security - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll [2014-08-28 612248]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{8E5E2654-AD2D-48bf-AC2D-D17F00898D06}]
avast! Online Security - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2014-08-28 457712]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"IAStorIcon"=C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIconLaunch.exe [2013-08-07 36352]
"QuickSet"=C:\Program Files\Dell\QuickSet\QuickSet.exe [2012-05-22 3732880]
"IgfxTray"=C:\Windows\system32\igfxtray.exe [2012-08-07 170304]
"HotKeysCmds"=C:\Windows\system32\hkcmd.exe [2012-08-07 398656]
"NvBackend"=C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2014-04-30 2199840]
"ShadowPlay"=C:\Windows\system32\nvspcap64.dll [2014-04-30 1225920]
"Persistence"=C:\Windows\system32\igfxpers.exe [2012-08-07 440640]
"SysTrayApp"=C:\Program Files\IDT\WDM\sttray64.exe [2012-09-05 1664000]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^McAfee Security Scan Plus.lnk]
C:\PROGRA~2\MCAFEE~1\30E3C3~1.285\SSSCHE~1.EXE []

[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]
"AvastUI.exe"=C:\Program Files\AVAST Software\Avast\AvastUI.exe [2014-08-28 4085896]
"Adobe ARM"=C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2014-08-21 959176]
"TomTomHOME.exe"=C:\Program Files (x86)\TomTom HOME\TomTomHOME.exe [2006-10-30 3576512]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
"AppInit_DLLs"="C:\Windows\system32\nvinitx.dll"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\igfxcui]
C:\Windows\system32\igfxdev.dll [2012-08-03 439296]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=credssp.dll

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorAdmin"=5
"ConsentPromptBehaviorUser"=3
"EnableUIADesktopToggle"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoActiveDesktop"=1
"NoActiveDesktopChanges"=1
"ForceActiveDesktopOn"=0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.msadpcm"=msadp32.acm
"midimapper"=midimap.dll
"wavemapper"=msacm32.drv
"VIDC.UYVY"=msyuv.dll
"VIDC.YUY2"=msyuv.dll
"VIDC.YVYU"=msyuv.dll
"VIDC.IYUV"=iyuv_32.dll
"vidc.i420"=iyuv_32.dll
"VIDC.YVU9"=tsbyuv.dll
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"MSVideo8"=VfWWDM32.dll
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"aux1"=wdmaud.drv
"wave2"=wdmaud.drv
"midi2"=wdmaud.drv
"mixer2"=wdmaud.drv
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*

======List of files/folders created in the last 1 month======

2014-11-08 18:41:31 ----D---- C:\rsit
2014-11-08 18:41:31 ----D---- C:\Program Files\trend micro
2014-11-08 18:40:59 ----D---- C:\FRST
2014-11-06 11:11:24 ----HD---- C:\$WINDOWS.~BT
2014-11-05 21:06:02 ----D---- C:\inetpub
2014-10-26 14:08:50 ----A---- C:\Windows\SYSWOW64\certsentry.dll
2014-10-26 14:08:50 ----A---- C:\Windows\system32\certsentry.dll
2014-10-26 14:08:42 ----D---- C:\Program Files (x86)\Comodo
2014-10-26 14:08:14 ----A---- C:\Windows\SYSWOW64\fmcodec.DLL
2014-10-26 14:08:10 ----D---- C:\Program Files (x86)\DsNET Corp
2014-10-20 17:53:36 ----D---- C:\Program Files (x86)\Clair
2014-10-20 12:00:10 ----D---- C:\Program Files\IDT
2014-10-20 11:14:36 ----N---- C:\Windows\system32\WavesGUILib64.dll
2014-10-20 11:14:36 ----N---- C:\Windows\system32\MaxxAudioIDT64.dll
2014-10-20 11:07:37 ----D---- C:\Users\Jitka\AppData\Roaming\IDT
2014-10-20 11:05:43 ----D---- C:\Program Files (x86)\DriverToolkit
2014-10-20 10:57:36 ----A---- C:\Windows\system32\imthx64.dll
2014-10-20 10:57:36 ----A---- C:\Windows\system32\imapo64.dll
2014-10-20 10:57:36 ----A---- C:\Windows\system32\imapo32.dll
2014-10-20 10:57:35 ----A---- C:\Windows\system32\WavesGUILib.dll
2014-10-20 10:57:35 ----A---- C:\Windows\system32\stlang64.dll
2014-10-20 10:57:35 ----A---- C:\Windows\system32\MaxxAudioMeters64.exe
2014-10-20 10:57:35 ----A---- C:\Windows\system32\MaxxAudioIDT.dll
2014-10-20 10:57:35 ----A---- C:\Windows\system32\MaxxAudioAPOShell64.dll
2014-10-20 10:57:00 ----A---- C:\Windows\system32\drivers\stwrt64.sys
2014-10-20 10:56:59 ----N---- C:\Windows\system32\stapi64.dll
2014-10-20 10:56:59 ----A---- C:\Windows\SYSWOW64\IMAPO32.dll
2014-10-20 10:56:59 ----A---- C:\Windows\system32\stcplx64.dll
2014-10-20 10:56:59 ----A---- C:\Windows\system32\stapo64.dll
2014-10-20 10:56:59 ----A---- C:\Windows\system32\st646426.dll
2014-10-20 10:56:59 ----A---- C:\Windows\system32\MaxxAudioAPO4064.dll
2014-10-20 10:56:59 ----A---- C:\Windows\system32\MaxxAudioAPO3064.dll
2014-10-15 08:03:59 ----A---- C:\Windows\system32\win32k.sys
2014-10-15 08:03:54 ----A---- C:\Windows\SYSWOW64\drmv2clt.dll
2014-10-15 08:03:54 ----A---- C:\Windows\SYSWOW64\blackbox.dll
2014-10-15 08:03:54 ----A---- C:\Windows\system32\drmv2clt.dll
2014-10-15 08:03:54 ----A---- C:\Windows\system32\blackbox.dll
2014-10-15 08:03:52 ----A---- C:\Windows\system32\wmp.dll
2014-10-15 08:03:51 ----A---- C:\Windows\system32\mf.dll
2014-10-15 08:03:50 ----A---- C:\Windows\SYSWOW64\wmdrmsdk.dll
2014-10-15 08:03:50 ----A---- C:\Windows\system32\wmdrmsdk.dll
2014-10-15 08:03:48 ----A---- C:\Windows\system32\AUDIOKSE.dll
2014-10-15 08:03:47 ----A---- C:\Windows\SYSWOW64\wmp.dll
2014-10-15 08:03:46 ----A---- C:\Windows\SYSWOW64\mf.dll
2014-10-15 08:03:46 ----A---- C:\Windows\SYSWOW64\drmmgrtn.dll
2014-10-15 08:03:46 ----A---- C:\Windows\SYSWOW64\AUDIOKSE.dll
2014-10-15 08:03:46 ----A---- C:\Windows\system32\drmmgrtn.dll
2014-10-15 08:03:46 ----A---- C:\Windows\system32\drivers\PEAuth.sys
2014-10-15 08:03:46 ----A---- C:\Windows\system32\ci.dll
2014-10-15 08:03:44 ----A---- C:\Windows\system32\quartz.dll
2014-10-15 08:03:44 ----A---- C:\Windows\system32\AudioEng.dll
2014-10-15 08:03:43 ----A---- C:\Windows\system32\winload.exe
2014-10-15 08:03:42 ----A---- C:\Windows\SYSWOW64\AudioSes.dll
2014-10-15 08:03:42 ----A---- C:\Windows\system32\wintrust.dll
2014-10-15 08:03:42 ----A---- C:\Windows\system32\winresume.exe
2014-10-15 08:03:42 ----A---- C:\Windows\system32\ntoskrnl.exe
2014-10-15 08:03:42 ----A---- C:\Windows\system32\cryptsvc.dll
2014-10-15 08:03:41 ----A---- C:\Windows\SYSWOW64\wintrust.dll
2014-10-15 08:03:41 ----A---- C:\Windows\SYSWOW64\ntkrnlpa.exe
2014-10-15 08:03:41 ----A---- C:\Windows\SYSWOW64\cryptsvc.dll
2014-10-15 08:03:41 ----A---- C:\Windows\system32\evr.dll
2014-10-15 08:03:41 ----A---- C:\Windows\system32\EncDump.dll
2014-10-15 08:03:41 ----A---- C:\Windows\system32\cryptui.dll
2014-10-15 08:03:41 ----A---- C:\Windows\system32\crypt32.dll
2014-10-15 08:03:41 ----A---- C:\Windows\system32\AudioSes.dll
2014-10-15 08:03:40 ----A---- C:\Windows\SYSWOW64\quartz.dll
2014-10-15 08:03:40 ----A---- C:\Windows\SYSWOW64\ntoskrnl.exe
2014-10-15 08:03:40 ----A---- C:\Windows\SYSWOW64\evr.dll
2014-10-15 08:03:40 ----A---- C:\Windows\system32\mfplat.dll
2014-10-15 08:03:40 ----A---- C:\Windows\system32\audiosrv.dll
2014-10-15 08:03:39 ----A---- C:\Windows\SYSWOW64\mfplat.dll
2014-10-15 08:03:39 ----A---- C:\Windows\SYSWOW64\cryptui.dll
2014-10-15 08:03:39 ----A---- C:\Windows\SYSWOW64\cryptsp.dll
2014-10-15 08:03:39 ----A---- C:\Windows\SYSWOW64\crypt32.dll
2014-10-15 08:03:39 ----A---- C:\Windows\SYSWOW64\AudioEng.dll
2014-10-15 08:03:39 ----A---- C:\Windows\system32\srcore.dll
2014-10-15 08:03:39 ----A---- C:\Windows\system32\rstrui.exe
2014-10-15 08:03:39 ----A---- C:\Windows\system32\pcasvc.dll
2014-10-15 08:03:39 ----A---- C:\Windows\system32\msscp.dll
2014-10-15 08:03:39 ----A---- C:\Windows\system32\msnetobj.dll
2014-10-15 08:03:39 ----A---- C:\Windows\system32\cryptsp.dll
2014-10-15 08:03:38 ----A---- C:\Windows\SYSWOW64\rrinstaller.exe
2014-10-15 08:03:38 ----A---- C:\Windows\SYSWOW64\msscp.dll
2014-10-15 08:03:38 ----A---- C:\Windows\SYSWOW64\msnetobj.dll
2014-10-15 08:03:38 ----A---- C:\Windows\SYSWOW64\mfps.dll
2014-10-15 08:03:38 ----A---- C:\Windows\system32\rrinstaller.exe
2014-10-15 08:03:38 ----A---- C:\Windows\system32\mfps.dll
2014-10-15 08:03:38 ----A---- C:\Windows\system32\drivers\appid.sys
2014-10-15 08:03:38 ----A---- C:\Windows\system32\audiodg.exe
2014-10-15 08:03:38 ----A---- C:\Windows\system32\appidsvc.dll
2014-10-15 08:03:38 ----A---- C:\Windows\system32\appidapi.dll
2014-10-15 08:03:37 ----A---- C:\Windows\SYSWOW64\wmploc.DLL
2014-10-15 08:03:37 ----A---- C:\Windows\SYSWOW64\srclient.dll
2014-10-15 08:03:37 ----A---- C:\Windows\SYSWOW64\spwmp.dll
2014-10-15 08:03:37 ----A---- C:\Windows\SYSWOW64\mfpmp.exe
2014-10-15 08:03:37 ----A---- C:\Windows\SYSWOW64\mferror.dll
2014-10-15 08:03:37 ----A---- C:\Windows\SYSWOW64\dxmasf.dll
2014-10-15 08:03:37 ----A---- C:\Windows\SYSWOW64\appidapi.dll
2014-10-15 08:03:37 ----A---- C:\Windows\system32\wmploc.DLL
2014-10-15 08:03:37 ----A---- C:\Windows\system32\srclient.dll
2014-10-15 08:03:37 ----A---- C:\Windows\system32\spwmp.dll
2014-10-15 08:03:37 ----A---- C:\Windows\system32\setbcdlocale.dll
2014-10-15 08:03:37 ----A---- C:\Windows\system32\mfpmp.exe
2014-10-15 08:03:37 ----A---- C:\Windows\system32\mferror.dll
2014-10-15 08:03:37 ----A---- C:\Windows\system32\dxmasf.dll
2014-10-15 08:03:37 ----A---- C:\Windows\system32\appidpolicyconverter.exe
2014-10-15 08:03:37 ----A---- C:\Windows\system32\appidcertstorecheck.exe
2014-10-15 08:03:27 ----A---- C:\Windows\SYSWOW64\mscorier.dll
2014-10-15 08:03:27 ----A---- C:\Windows\SYSWOW64\dfshim.dll
2014-10-15 08:03:27 ----A---- C:\Windows\system32\mscorier.dll
2014-10-15 08:03:26 ----A---- C:\Windows\SYSWOW64\mscories.dll
2014-10-15 08:03:26 ----A---- C:\Windows\system32\mscories.dll
2014-10-15 08:03:26 ----A---- C:\Windows\system32\dfshim.dll
2014-10-15 08:03:21 ----A---- C:\Windows\system32\generaltel.dll
2014-10-15 08:03:21 ----A---- C:\Windows\system32\aepdu.dll
2014-10-15 08:03:21 ----A---- C:\Windows\system32\aeinv.dll
2014-10-15 08:03:19 ----A---- C:\Windows\SYSWOW64\iernonce.dll
2014-10-15 08:03:18 ----A---- C:\Windows\SYSWOW64\urlmon.dll
2014-10-15 08:03:18 ----A---- C:\Windows\SYSWOW64\mshtmled.dll
2014-10-15 08:03:18 ----A---- C:\Windows\SYSWOW64\mshtml.dll
2014-10-15 08:03:18 ----A---- C:\Windows\SYSWOW64\msfeeds.dll
2014-10-15 08:03:18 ----A---- C:\Windows\SYSWOW64\jscript9diag.dll
2014-10-15 08:03:18 ----A---- C:\Windows\SYSWOW64\JavaScriptCollectionAgent.dll
2014-10-15 08:03:18 ----A---- C:\Windows\SYSWOW64\ieetwproxystub.dll
2014-10-15 08:03:18 ----A---- C:\Windows\SYSWOW64\iedkcs32.dll
2014-10-15 08:03:18 ----A---- C:\Windows\SYSWOW64\dxtmsft.dll
2014-10-15 08:03:18 ----A---- C:\Windows\system32\JavaScriptCollectionAgent.dll
2014-10-15 08:03:18 ----A---- C:\Windows\system32\iernonce.dll
2014-10-15 08:03:18 ----A---- C:\Windows\system32\ieetwproxystub.dll
2014-10-15 08:03:18 ----A---- C:\Windows\system32\ie4uinit.exe
2014-10-15 08:03:17 ----A---- C:\Windows\SYSWOW64\iesetup.dll
2014-10-15 08:03:17 ----A---- C:\Windows\SYSWOW64\iertutil.dll
2014-10-15 08:03:17 ----A---- C:\Windows\system32\urlmon.dll
2014-10-15 08:03:17 ----A---- C:\Windows\system32\iedkcs32.dll
2014-10-15 08:03:16 ----A---- C:\Windows\SYSWOW64\jsproxy.dll
2014-10-15 08:03:16 ----A---- C:\Windows\SYSWOW64\ieui.dll
2014-10-15 08:03:16 ----A---- C:\Windows\SYSWOW64\ieframe.dll
2014-10-15 08:03:16 ----A---- C:\Windows\SYSWOW64\dxtrans.dll
2014-10-15 08:03:16 ----A---- C:\Windows\system32\msfeeds.dll
2014-10-15 08:03:16 ----A---- C:\Windows\system32\ieetwcollectorres.dll
2014-10-15 08:03:16 ----A---- C:\Windows\system32\ieetwcollector.exe
2014-10-15 08:03:16 ----A---- C:\Windows\system32\dxtmsft.dll
2014-10-15 08:03:15 ----A---- C:\Windows\SYSWOW64\mshtmlmedia.dll
2014-10-15 08:03:15 ----A---- C:\Windows\system32\iesetup.dll
2014-10-15 08:03:15 ----A---- C:\Windows\system32\iertutil.dll
2014-10-15 08:03:14 ----A---- C:\Windows\SYSWOW64\wininet.dll
2014-10-15 08:03:14 ----A---- C:\Windows\SYSWOW64\vbscript.dll
2014-10-15 08:03:14 ----A---- C:\Windows\SYSWOW64\msrating.dll
2014-10-15 08:03:14 ----A---- C:\Windows\SYSWOW64\MshtmlDac.dll
2014-10-15 08:03:14 ----A---- C:\Windows\SYSWOW64\jscript9.dll
2014-10-15 08:03:14 ----A---- C:\Windows\SYSWOW64\ieUnatt.exe
2014-10-15 08:03:14 ----A---- C:\Windows\SYSWOW64\ieapfltr.dll
2014-10-15 08:03:14 ----A---- C:\Windows\system32\jsproxy.dll
2014-10-15 08:03:14 ----A---- C:\Windows\system32\dxtrans.dll
2014-10-15 08:03:13 ----A---- C:\Windows\system32\mshtmlmedia.dll
2014-10-15 08:03:13 ----A---- C:\Windows\system32\mshtmled.dll
2014-10-15 08:03:13 ----A---- C:\Windows\system32\jscript9diag.dll
2014-10-15 08:03:13 ----A---- C:\Windows\system32\jscript9.dll
2014-10-15 08:03:13 ----A---- C:\Windows\system32\ieUnatt.exe
2014-10-15 08:03:13 ----A---- C:\Windows\system32\ieui.dll
2014-10-15 08:03:13 ----A---- C:\Windows\system32\ieframe.dll
2014-10-15 08:03:12 ----A---- C:\Windows\system32\wininet.dll
2014-10-15 08:03:12 ----A---- C:\Windows\system32\vbscript.dll
2014-10-15 08:03:12 ----A---- C:\Windows\system32\msrating.dll
2014-10-15 08:03:12 ----A---- C:\Windows\system32\MshtmlDac.dll
2014-10-15 08:03:12 ----A---- C:\Windows\system32\ieapfltr.dll
2014-10-15 08:03:11 ----A---- C:\Windows\system32\MsSpellCheckingFacility.exe
2014-10-15 08:03:11 ----A---- C:\Windows\system32\mshtml.dll
2014-10-15 08:03:05 ----A---- C:\Windows\SYSWOW64\rastls.dll
2014-10-15 08:03:05 ----A---- C:\Windows\system32\rastls.dll
2014-10-15 08:02:58 ----A---- C:\Windows\system32\rdpcorets.dll
2014-10-15 08:02:50 ----A---- C:\Windows\SYSWOW64\msi.dll
2014-10-15 08:02:50 ----A---- C:\Windows\system32\msi.dll
2014-10-15 08:02:37 ----A---- C:\Windows\system32\termsrv.dll
2014-10-15 08:02:36 ----A---- C:\Windows\SYSWOW64\winsta.dll
2014-10-15 08:02:36 ----A---- C:\Windows\system32\winsta.dll
2014-10-15 08:02:36 ----A---- C:\Windows\system32\winlogon.exe
2014-10-15 08:02:36 ----A---- C:\Windows\system32\rdpcorekmts.dll
2014-10-15 08:02:36 ----A---- C:\Windows\system32\drivers\rdpwd.sys
2014-10-15 08:02:35 ----A---- C:\Windows\SYSWOW64\TSpkg.dll
2014-10-15 08:02:35 ----A---- C:\Windows\SYSWOW64\credssp.dll
2014-10-15 08:02:35 ----A---- C:\Windows\system32\TSpkg.dll
2014-10-15 08:02:35 ----A---- C:\Windows\system32\drivers\tssecsrv.sys
2014-10-15 08:02:35 ----A---- C:\Windows\system32\credssp.dll
2014-10-15 08:02:28 ----A---- C:\Windows\SYSWOW64\mstscax.dll
2014-10-15 08:02:28 ----A---- C:\Windows\system32\mstscax.dll
2014-10-15 08:02:25 ----A---- C:\Windows\SYSWOW64\packager.dll
2014-10-15 08:02:25 ----A---- C:\Windows\system32\packager.dll

======List of files/folders modified in the last 1 month======

2014-11-08 18:41:54 ----D---- C:\Windows\Temp
2014-11-08 18:41:31 ----D---- C:\Program Files
2014-11-08 18:41:01 ----D---- C:\Windows
2014-11-08 18:40:54 ----D---- C:\Windows\System32
2014-11-08 18:40:54 ----D---- C:\Windows\inf
2014-11-08 18:40:54 ----A---- C:\Windows\system32\PerfStringBackup.INI
2014-11-07 19:29:49 ----D---- C:\Asw
2014-11-07 18:51:39 ----D---- C:\Windows\system32\config
2014-11-07 18:41:11 ----D---- C:\Windows\system32\wbem
2014-11-07 18:40:42 ----D---- C:\Windows\winsxs
2014-11-07 18:40:42 ----D---- C:\Windows\Tasks
2014-11-07 18:40:42 ----D---- C:\Windows\SYSWOW64\cs-CZ
2014-11-07 18:40:42 ----D---- C:\Windows\system32\wfp
2014-11-07 18:40:42 ----D---- C:\Windows\system32\DriverStore
2014-11-07 18:40:42 ----D---- C:\Windows\system32\cs-CZ
2014-11-07 18:40:42 ----D---- C:\Windows\system32\catroot2
2014-11-07 18:40:42 ----D---- C:\Windows\ShellNew
2014-11-07 18:40:42 ----D---- C:\Windows\PolicyDefinitions
2014-11-07 18:40:42 ----D---- C:\Program Files\Windows Journal
2014-11-07 18:40:37 ----D---- C:\Windows\SYSWOW64\NV
2014-11-07 18:40:37 ----D---- C:\Windows\SysWOW64
2014-11-07 18:40:37 ----D---- C:\Windows\system32\Tasks
2014-11-07 18:40:37 ----D---- C:\Windows\system32\NV
2014-11-07 18:40:37 ----D---- C:\Windows\system32\drivers\etc
2014-11-07 18:40:37 ----D---- C:\Windows\system32\drivers
2014-11-07 18:40:37 ----D---- C:\Windows\Setup
2014-11-07 18:40:37 ----D---- C:\Windows\pss
2014-11-07 18:40:34 ----D---- C:\Windows\Help
2014-11-07 18:40:32 ----D---- C:\Program Files\NVIDIA Corporation
2014-11-07 18:40:32 ----D---- C:\Program Files (x86)\WarThunder
2014-11-07 18:40:32 ----D---- C:\Program Files (x86)\NVIDIA Corporation
2014-11-07 18:40:32 ----D---- C:\Fakturka
2014-11-07 18:40:28 ----D---- C:\Windows\registration
2014-11-07 18:39:33 ----D---- C:\Program Files\Common Files\Microsoft Shared
2014-11-07 18:02:38 ----D---- C:\Windows\SoftwareDistribution
2014-11-07 18:02:38 ----D---- C:\Windows\Logs
2014-11-05 23:24:48 ----D---- C:\Windows\SYSWOW64\inetsrv
2014-11-05 23:24:48 ----D---- C:\Windows\system32\inetsrv
2014-11-05 23:14:48 ----HD---- C:\Windows\system32\GroupPolicy
2014-11-05 20:45:48 ----SHD---- C:\System Volume Information
2014-11-05 20:20:26 ----D---- C:\Windows\tracing
2014-11-05 20:09:12 ----D---- C:\Windows\Prefetch
2014-11-05 20:09:02 ----D---- C:\ProgramData\NVIDIA
2014-11-03 00:59:11 ----D---- C:\Users\Jitka\AppData\Roaming\TS3Client
2014-10-30 08:26:21 ----A---- C:\Windows\SYSWOW64\log.txt
2014-10-28 09:45:02 ----SHD---- C:\Windows\Installer
2014-10-28 09:40:43 ----D---- C:\Program Files (x86)
2014-10-20 10:56:57 ----HD---- C:\Program Files (x86)\InstallShield Installation Information
2014-10-20 10:42:54 ----D---- C:\Windows\debug
2014-10-20 10:41:46 ----D---- C:\Program Files\TeamSpeak 3 Client
2014-10-20 10:28:36 ----HD---- C:\ProgramData
2014-10-20 10:28:32 ----D---- C:\Program Files (x86)\Common Files
2014-10-20 10:28:31 ----D---- C:\Program Files (x86)\Overwolf
2014-10-16 14:47:17 ----D---- C:\Windows\rescache
2014-10-16 14:12:39 ----D---- C:\Windows\Microsoft.NET
2014-10-16 11:40:12 ----RSD---- C:\Windows\assembly
2014-10-16 10:34:25 ----D---- C:\Windows\SYSWOW64\Dism
2014-10-16 10:34:25 ----D---- C:\Windows\system32\en-US
2014-10-16 10:34:25 ----D---- C:\Windows\system32\Dism
2014-10-16 10:34:25 ----D---- C:\Program Files\Windows Media Player
2014-10-16 10:34:25 ----D---- C:\Program Files (x86)\Windows Media Player
2014-10-16 10:34:24 ----SD---- C:\Windows\system32\CompatTel
2014-10-16 10:34:24 ----D---- C:\Windows\system32\CodeIntegrity
2014-10-16 10:34:24 ----D---- C:\Windows\system32\Boot
2014-10-16 10:34:23 ----D---- C:\Windows\SYSWOW64\en-US
2014-10-16 10:34:23 ----D---- C:\Program Files\Internet Explorer
2014-10-16 10:34:22 ----D---- C:\Program Files (x86)\Internet Explorer
2014-10-15 19:42:07 ----D---- C:\Windows\system32\MRT
2014-10-15 19:40:36 ----A---- C:\Windows\system32\MRT.exe
2014-10-15 08:02:16 ----D---- C:\Windows\system32\catroot

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 iaStorA;iaStorA; C:\Windows\system32\DRIVERS\iaStorA.sys [2013-08-07 644968]
R0 iaStorF;iaStorF; C:\Windows\system32\DRIVERS\iaStorF.sys [2013-08-07 28008]
R0 nvpciflt;nvpciflt; C:\Windows\system32\DRIVERS\nvpciflt.sys [2014-09-14 32576]
R0 rdyboost;ReadyBoost; C:\Windows\System32\drivers\rdyboost.sys [2010-11-21 213888]
R3 MEIx64;Intel(R) Management Engine Interface ; C:\Windows\system32\DRIVERS\HECIx64.sys [2012-07-17 62784]
S0 aswRvrt;avast! Revert; C:\Windows\system32\drivers\aswRvrt.sys [2014-08-28 65776]
S0 aswVmm;avast! VM Monitor; C:\Windows\system32\drivers\aswVmm.sys [2014-08-28 224896]
S1 aswRdr;aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [2014-08-28 93568]
S1 aswSnx;aswSnx; C:\Windows\system32\drivers\aswSnx.sys [2014-08-28 1041168]
S1 aswSP;aswSP; C:\Windows\system32\drivers\aswSP.sys [2014-08-28 427360]
S1 vwififlt;Virtual WiFi Filter Driver; C:\Windows\system32\DRIVERS\vwififlt.sys [2009-07-14 59904]
S2 aswHwid;avast! HardwareID; C:\Windows\system32\drivers\aswHwid.sys [2014-08-28 29208]
S2 aswMonFlt;aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [2014-08-28 79184]
S2 aswStm;aswStm; C:\Windows\system32\drivers\aswStm.sys [2014-08-28 92008]
S3 BthEnum;Ovladač pro Bluetooth Request Block; C:\Windows\system32\drivers\BthEnum.sys [2009-07-14 41984]
S3 BthPan;Zařízení Bluetooth (síť PAN); C:\Windows\system32\DRIVERS\bthpan.sys [2009-07-14 118784]
S3 BTHPORT;Ovladač portu Bluetooth; C:\Windows\System32\Drivers\BTHport.sys [2012-07-06 552960]
S3 BTHUSB;Ovladač rozhraní USB radiostanice Bluetooth; C:\Windows\System32\Drivers\BTHUSB.sys [2011-04-28 80384]
S3 Dot4;MS IEEE-1284.4 Driver; C:\Windows\system32\DRIVERS\Dot4.sys [2009-07-14 145920]
S3 Dot4Print;Print Class Driver for IEEE-1284.4; C:\Windows\system32\DRIVERS\Dot4Prt.sys [2010-11-21 19968]
S3 Dot4Scan;Scan Class Driver for IEEE-1284.4; C:\Windows\system32\DRIVERS\Dot4Scan.sys [2009-07-14 13824]
S3 dot4usb;Dot4USB Filter Dot4USB Filter; C:\Windows\system32\DRIVERS\dot4usb.sys [2009-07-14 43008]
S3 igfx;igfx; C:\Windows\system32\DRIVERS\igdkmd64.sys [2012-08-03 8987456]
S3 IntcDAud;Intel(R) Display Audio; C:\Windows\system32\DRIVERS\IntcDAud.sys [2012-06-19 342528]
S3 L1C;NDIS Miniport Driver for Qualcomm Atheros AR81xx PCI-E Ethernet Controller; C:\Windows\system32\DRIVERS\L1C62x64.sys [2013-07-18 129224]
S3 NETwNs64;___ Ovladač adaptéru řady Intel(R) Wireless WiFi Link 5000 pro systém Windows 7 64 Bit; C:\Windows\system32\DRIVERS\Netwsw00.sys [2012-06-03 11499008]
S3 NvStreamKms;NvStreamKms; \??\C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [2014-04-30 18776]
S3 nvvad_WaveExtensible;NVIDIA Virtual Audio Device (Wave Extensible) (WDM); C:\Windows\system32\drivers\nvvad64v.sys [2014-03-31 40392]
S3 pciide;pciide; C:\Windows\system32\drivers\pciide.sys [2009-07-14 12352]
S3 RDPDR;Terminal Server Device Redirector Driver; C:\Windows\System32\drivers\rdpdr.sys [2010-11-21 165888]
S3 RdpVideoMiniport;Remote Desktop Video Miniport Driver; C:\Windows\System32\drivers\rdpvideominiport.sys [2012-08-23 19456]
S3 RFCOMM;Zařízení Bluetooth (RFCOMM protokol TDI); C:\Windows\system32\DRIVERS\rfcomm.sys [2009-07-14 158720]
S3 STHDA;@%SystemRoot%\system32\stlang64.dll,-10322; C:\Windows\system32\DRIVERS\stwrt64.sys [2012-09-05 542208]
S3 TsUsbFlt;TsUsbFlt; C:\Windows\system32\drivers\tsusbflt.sys [2013-10-02 56832]
S3 TsUsbGD;Remote Desktop Generic USB Device; C:\Windows\system32\drivers\TsUsbGD.sys [2012-08-23 30208]
S3 usb_rndisx;Adaptér USB RNDIS; C:\Windows\system32\DRIVERS\usb8023x.sys [2013-02-12 19968]
S3 vwifimp;Microsoft Virtual WiFi Miniport Service; C:\Windows\system32\DRIVERS\vwifimp.sys [2009-07-14 17920]
S3 WinUsb;WinUsb; C:\Windows\system32\DRIVERS\WinUsb.sys [2010-11-21 41984]
S4 CSC;@%systemroot%\system32\cscsvc.dll,-202; C:\Windows\system32\drivers\csc.sys [2010-11-21 514560]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

S2 AdobeARMservice;Adobe Acrobat Update Service; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [2014-09-12 64704]
S2 avast! Antivirus;avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [2014-08-28 50344]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2013-09-11 105144]
S2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2013-09-11 124088]
S2 DragonUpdater;COMODO Dragon Update Service; C:\Program Files (x86)\Comodo\Dragon\dragon_updater.exe [2014-05-27 2139328]
S2 gupdate;Služba Google Update (gupdate); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2014-04-20 116648]
S2 IAStorDataMgrSvc;Intel(R) Rapid Storage Technology; C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe [2013-08-07 15720]
S2 Intel(R) Capability Licensing Service Interface;Intel(R) Capability Licensing Service Interface; C:\Program Files\Intel\iCLS Client\HeciServer.exe [2012-02-02 628448]
S2 jhi_service;Intel(R) Dynamic Application Loader Host Interface Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [2012-03-15 162648]
S2 LMS;Intel(R) Management and Security Application Local Management Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe [2012-03-15 276824]
S2 Net Driver HPZ12;Net Driver HPZ12; C:\Windows\System32\svchost.exe [2009-07-14 27136]
S2 NvNetworkService;NVIDIA Network Service; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [2014-04-30 1617696]
S2 NvStreamSvc;NVIDIA Streamer Service; C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [2014-04-30 21007192]
S2 nvsvc;NVIDIA Display Driver Service; C:\Windows\system32\nvvsvc.exe [2014-09-13 934216]
S2 Pml Driver HPZ12;Pml Driver HPZ12; C:\Windows\System32\svchost.exe [2009-07-14 27136]
S2 STacSV;@%SystemRoot%\system32\stlang64.dll,-10122; C:\Program Files\IDT\WDM\STacSV64.exe [2012-09-05 323072]
S2 TeamViewer9;TeamViewer 9; C:\Program Files (x86)\TeamViewer\Version9\TeamViewer_Service.exe [2014-09-12 4799760]
S2 TomTomHOMEService;TomTomHOMEService; C:\Program Files (x86)\TomTom HOME 2\TomTomHOMEService.exe [2014-06-05 93040]
S2 UNS;Intel(R) Management and Security Application User Notification Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe [2012-03-15 362840]
S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service; C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2014-09-10 267440]
S3 AppMgmt;@appmgmts.dll,-3250; C:\Windows\system32\svchost.exe [2009-07-14 27136]
S3 cphs;Intel(R) Content Protection HECI Service; C:\Windows\SysWow64\IntelCpHeciSvc.exe [2012-08-07 276288]
S3 gupdatem;Služba Google Update (gupdatem); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2014-04-20 116648]
S3 IEEtwCollectorService;@%SystemRoot%\system32\ieetwcollectorres.dll,-1000; C:\Windows\system32\IEEtwCollector.exe [2014-09-19 111616]
S3 PeerDistSvc;@%SystemRoot%\system32\peerdistsvc.dll,-9000; C:\Windows\System32\svchost.exe [2009-07-14 27136]
S3 StorSvc;@%SystemRoot%\System32\StorSvc.dll,-100; C:\Windows\System32\svchost.exe [2009-07-14 27136]
S3 UmRdpService;@%SystemRoot%\system32\umrdp.dll,-1000; C:\Windows\System32\svchost.exe [2009-07-14 27136]
S3 WatAdminSvc;@%SystemRoot%\system32\Wat\WatUX.exe,-601; C:\Windows\system32\Wat\WatAdminSvc.exe [2014-04-20 1255736]
S4 aspnet_state;Stavová služba ASP.NET; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\aspnet_state.exe [2013-09-11 51808]
S4 CscService;@%systemroot%\system32\cscsvc.dll,-200; C:\Windows\System32\svchost.exe [2009-07-14 27136]
S4 NetMsmqActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8195; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2013-09-11 139856]
S4 NetPipeActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8197; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2013-09-11 139856]
S4 NetTcpActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8199; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2013-09-11 139856]

-----------------EOF-----------------
Nahoru
Uživatelský avatar
Rudy
Site Admin
Site Admin
Příspěvky: 119547
Registrován: 30 říj 2003 13:42
Bydliště: Plzeň
Kontaktovat uživatele:
Kontaktovat uživatele Rudy

Re: po zapnutí naběhne NR bez sítě + rsit log

#2 Příspěvek od Rudy »

Zdravím!
Spusťte nejprve tuto utilitu:
Stáhněte AdwCleaner http://general-changelog-team.fr/fr/dow ... adwcleaner
Uložte na plochu
Ukončete všechny programy
Klikněte nejprve na >Scan< a pak na >Clean<.
Proběhne skenováni a pak se objeví log, který sem vložte.
Dotazy a logy vkládejte pouze do vašich threadů. Soukromé zprávy, icq a e-maily neslouží k řešení vašich problémů.

Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.

Navštivte: Obrázek

e-mail: rudy(zavináč)forum.viry.cz

Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!


Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Nahoru
TheSevenCz
Návštěvník
Návštěvník
Příspěvky: 42
Registrován: 08 črc 2012 13:00

Re: po zapnutí naběhne NR bez sítě + rsit log

#3 Příspěvek od TheSevenCz »

Po restartu se nic neotevřelo tak sem to našel ve složce sna dje to ono
# AdwCleaner v4.100 - Report created 08/11/2014 at 19:52:20
# DB v2014-11-07.1
# Updated 08/11/2014 by Xplode
# Operating System : Windows 7 Professional Service Pack 1 (64 bits)
# Username : Jitka - JITKA-PC
# Running from : C:\Users\Jitka\Desktop\adwcleaner_4.100.exe
# Option : Clean

***** [ Services ] *****


***** [ Files / Folders ] *****

Folder Deleted : C:\Users\Jitka\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\cmaiofennmphjldldcpphcechfnnohja

***** [ Scheduled Tasks ] *****


***** [ Shortcuts ] *****


***** [ Registry ] *****

Key Deleted : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\GoogleUpdate.exe

***** [ Browsers ] *****

-\\ Internet Explorer v11.0.9600.17344


-\\ Google Chrome v38.0.2125.111


-\\ Comodo Dragon v33.1.0.1

[C:\Users\Jitka\AppData\Local\Comodo\Dragon\User Data\Default\preferences] - Deleted [Extension] : cmaiofennmphjldldcpphcechfnnohja

*************************

AdwCleaner[R0].txt - [1140 octets] - [08/11/2014 19:50:03]
AdwCleaner[S0].txt - [1060 octets] - [08/11/2014 19:52:20]

########## EOF - C:\AdwCleaner\AdwCleaner[S0].txt - [1120 octets] ##########
Nahoru
Uživatelský avatar
Rudy
Site Admin
Site Admin
Příspěvky: 119547
Registrován: 30 říj 2003 13:42
Bydliště: Plzeň
Kontaktovat uživatele:
Kontaktovat uživatele Rudy

Re: po zapnutí naběhne NR bez sítě + rsit log

#4 Příspěvek od Rudy »

Dejte nový log RSIT.
Dotazy a logy vkládejte pouze do vašich threadů. Soukromé zprávy, icq a e-maily neslouží k řešení vašich problémů.

Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.

Navštivte: Obrázek

e-mail: rudy(zavináč)forum.viry.cz

Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!


Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Nahoru
TheSevenCz
Návštěvník
Návštěvník
Příspěvky: 42
Registrován: 08 črc 2012 13:00

Re: po zapnutí naběhne NR bez sítě + rsit log

#5 Příspěvek od TheSevenCz »

Logfile of random's system information tool 1.10 (written by random/random)
Run by Jitka at 2014-11-08 20:01:17
Microsoft Windows 7 Professional Service Pack 1
System drive C: has 364 GB (76%) free of 477 GB
Total RAM: 8058 MB (90% free)

HijackThis download failed

======Listing Processes======



\SystemRoot\System32\smss.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
wininit.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
C:\Windows\system32\services.exe
winlogon.exe
C:\Windows\system32\lsass.exe
C:\Windows\system32\lsm.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Windows\system32\svchost.exe -k RPCSS
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\system32\svchost.exe -k netsvcs
C:\Windows\system32\svchost.exe -k NetworkService
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
/QuitInfo:0000000000000168;000000000000016C; /AddRef;
/QuitInfo:00000000000001B4;00000000000001B8; /AddRef;
/QuitInfo:00000000000001A4;00000000000001C0;
C:\Windows\Explorer.EXE
ctfmon.exe
C:\Windows\system32\DllHost.exe /Processid:{3EB3C877-1F16-487C-9050-104DBCD66683}
C:\Windows\system32\wbem\wmiprvse.exe
C:\Windows\System32\svchost.exe -k secsvcs
"C:\Users\Jitka\Desktop\RSITx64.exe"
C:\Windows\system32\wbem\wmiprvse.exe

======Scheduled tasks folder======

C:\Windows\tasks\Adobe Flash Player Updater.job - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
C:\Windows\tasks\GoogleUpdateTaskMachineCore.job - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe /c
C:\Windows\tasks\GoogleUpdateTaskMachineUA.job - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe /ua /installsource scheduler

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{8E5E2654-AD2D-48bf-AC2D-D17F00898D06}]
avast! Online Security - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll [2014-08-28 612248]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{8E5E2654-AD2D-48bf-AC2D-D17F00898D06}]
avast! Online Security - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2014-08-28 457712]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"IAStorIcon"=C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIconLaunch.exe [2013-08-07 36352]
"QuickSet"=C:\Program Files\Dell\QuickSet\QuickSet.exe [2012-05-22 3732880]
"IgfxTray"=C:\Windows\system32\igfxtray.exe [2012-08-07 170304]
"HotKeysCmds"=C:\Windows\system32\hkcmd.exe [2012-08-07 398656]
"NvBackend"=C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2014-04-30 2199840]
"ShadowPlay"=C:\Windows\system32\nvspcap64.dll [2014-04-30 1225920]
"Persistence"=C:\Windows\system32\igfxpers.exe [2012-08-07 440640]
"SysTrayApp"=C:\Program Files\IDT\WDM\sttray64.exe [2012-09-05 1664000]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\RunOnce]
"Report"=C:\AdwCleaner\AdwCleaner[S0].txt [2014-11-08 1200]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^McAfee Security Scan Plus.lnk]
C:\PROGRA~2\MCAFEE~1\30E3C3~1.285\SSSCHE~1.EXE []

[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]
"AvastUI.exe"=C:\Program Files\AVAST Software\Avast\AvastUI.exe [2014-08-28 4085896]
"Adobe ARM"=C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2014-08-21 959176]
"TomTomHOME.exe"=C:\Program Files (x86)\TomTom HOME\TomTomHOME.exe [2006-10-30 3576512]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
"AppInit_DLLs"="C:\Windows\system32\nvinitx.dll"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\igfxcui]
C:\Windows\system32\igfxdev.dll [2012-08-03 439296]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=credssp.dll

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorAdmin"=5
"ConsentPromptBehaviorUser"=3
"EnableUIADesktopToggle"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoActiveDesktop"=1
"NoActiveDesktopChanges"=1
"ForceActiveDesktopOn"=0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.msadpcm"=msadp32.acm
"midimapper"=midimap.dll
"wavemapper"=msacm32.drv
"VIDC.UYVY"=msyuv.dll
"VIDC.YUY2"=msyuv.dll
"VIDC.YVYU"=msyuv.dll
"VIDC.IYUV"=iyuv_32.dll
"vidc.i420"=iyuv_32.dll
"VIDC.YVU9"=tsbyuv.dll
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"MSVideo8"=VfWWDM32.dll
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"aux1"=wdmaud.drv
"wave2"=wdmaud.drv
"midi2"=wdmaud.drv
"mixer2"=wdmaud.drv
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*

======List of files/folders created in the last 1 month======

2014-11-08 19:49:03 ----D---- C:\AdwCleaner
2014-11-08 18:41:31 ----D---- C:\rsit
2014-11-08 18:41:31 ----D---- C:\Program Files\trend micro
2014-11-08 18:40:59 ----D---- C:\FRST
2014-11-06 11:11:24 ----HD---- C:\$WINDOWS.~BT
2014-11-05 21:06:02 ----D---- C:\inetpub
2014-10-26 14:08:50 ----A---- C:\Windows\SYSWOW64\certsentry.dll
2014-10-26 14:08:50 ----A---- C:\Windows\system32\certsentry.dll
2014-10-26 14:08:42 ----D---- C:\Program Files (x86)\Comodo
2014-10-26 14:08:14 ----A---- C:\Windows\SYSWOW64\fmcodec.DLL
2014-10-26 14:08:10 ----D---- C:\Program Files (x86)\DsNET Corp
2014-10-20 17:53:36 ----D---- C:\Program Files (x86)\Clair
2014-10-20 12:00:10 ----D---- C:\Program Files\IDT
2014-10-20 11:14:36 ----N---- C:\Windows\system32\WavesGUILib64.dll
2014-10-20 11:14:36 ----N---- C:\Windows\system32\MaxxAudioIDT64.dll
2014-10-20 11:07:37 ----D---- C:\Users\Jitka\AppData\Roaming\IDT
2014-10-20 11:05:43 ----D---- C:\Program Files (x86)\DriverToolkit
2014-10-20 10:57:36 ----A---- C:\Windows\system32\imthx64.dll
2014-10-20 10:57:36 ----A---- C:\Windows\system32\imapo64.dll
2014-10-20 10:57:36 ----A---- C:\Windows\system32\imapo32.dll
2014-10-20 10:57:35 ----A---- C:\Windows\system32\WavesGUILib.dll
2014-10-20 10:57:35 ----A---- C:\Windows\system32\stlang64.dll
2014-10-20 10:57:35 ----A---- C:\Windows\system32\MaxxAudioMeters64.exe
2014-10-20 10:57:35 ----A---- C:\Windows\system32\MaxxAudioIDT.dll
2014-10-20 10:57:35 ----A---- C:\Windows\system32\MaxxAudioAPOShell64.dll
2014-10-20 10:57:00 ----A---- C:\Windows\system32\drivers\stwrt64.sys
2014-10-20 10:56:59 ----N---- C:\Windows\system32\stapi64.dll
2014-10-20 10:56:59 ----A---- C:\Windows\SYSWOW64\IMAPO32.dll
2014-10-20 10:56:59 ----A---- C:\Windows\system32\stcplx64.dll
2014-10-20 10:56:59 ----A---- C:\Windows\system32\stapo64.dll
2014-10-20 10:56:59 ----A---- C:\Windows\system32\st646426.dll
2014-10-20 10:56:59 ----A---- C:\Windows\system32\MaxxAudioAPO4064.dll
2014-10-20 10:56:59 ----A---- C:\Windows\system32\MaxxAudioAPO3064.dll
2014-10-15 08:03:59 ----A---- C:\Windows\system32\win32k.sys
2014-10-15 08:03:54 ----A---- C:\Windows\SYSWOW64\drmv2clt.dll
2014-10-15 08:03:54 ----A---- C:\Windows\SYSWOW64\blackbox.dll
2014-10-15 08:03:54 ----A---- C:\Windows\system32\drmv2clt.dll
2014-10-15 08:03:54 ----A---- C:\Windows\system32\blackbox.dll
2014-10-15 08:03:52 ----A---- C:\Windows\system32\wmp.dll
2014-10-15 08:03:51 ----A---- C:\Windows\system32\mf.dll
2014-10-15 08:03:50 ----A---- C:\Windows\SYSWOW64\wmdrmsdk.dll
2014-10-15 08:03:50 ----A---- C:\Windows\system32\wmdrmsdk.dll
2014-10-15 08:03:48 ----A---- C:\Windows\system32\AUDIOKSE.dll
2014-10-15 08:03:47 ----A---- C:\Windows\SYSWOW64\wmp.dll
2014-10-15 08:03:46 ----A---- C:\Windows\SYSWOW64\mf.dll
2014-10-15 08:03:46 ----A---- C:\Windows\SYSWOW64\drmmgrtn.dll
2014-10-15 08:03:46 ----A---- C:\Windows\SYSWOW64\AUDIOKSE.dll
2014-10-15 08:03:46 ----A---- C:\Windows\system32\drmmgrtn.dll
2014-10-15 08:03:46 ----A---- C:\Windows\system32\drivers\PEAuth.sys
2014-10-15 08:03:46 ----A---- C:\Windows\system32\ci.dll
2014-10-15 08:03:44 ----A---- C:\Windows\system32\quartz.dll
2014-10-15 08:03:44 ----A---- C:\Windows\system32\AudioEng.dll
2014-10-15 08:03:43 ----A---- C:\Windows\system32\winload.exe
2014-10-15 08:03:42 ----A---- C:\Windows\SYSWOW64\AudioSes.dll
2014-10-15 08:03:42 ----A---- C:\Windows\system32\wintrust.dll
2014-10-15 08:03:42 ----A---- C:\Windows\system32\winresume.exe
2014-10-15 08:03:42 ----A---- C:\Windows\system32\ntoskrnl.exe
2014-10-15 08:03:42 ----A---- C:\Windows\system32\cryptsvc.dll
2014-10-15 08:03:41 ----A---- C:\Windows\SYSWOW64\wintrust.dll
2014-10-15 08:03:41 ----A---- C:\Windows\SYSWOW64\ntkrnlpa.exe
2014-10-15 08:03:41 ----A---- C:\Windows\SYSWOW64\cryptsvc.dll
2014-10-15 08:03:41 ----A---- C:\Windows\system32\evr.dll
2014-10-15 08:03:41 ----A---- C:\Windows\system32\EncDump.dll
2014-10-15 08:03:41 ----A---- C:\Windows\system32\cryptui.dll
2014-10-15 08:03:41 ----A---- C:\Windows\system32\crypt32.dll
2014-10-15 08:03:41 ----A---- C:\Windows\system32\AudioSes.dll
2014-10-15 08:03:40 ----A---- C:\Windows\SYSWOW64\quartz.dll
2014-10-15 08:03:40 ----A---- C:\Windows\SYSWOW64\ntoskrnl.exe
2014-10-15 08:03:40 ----A---- C:\Windows\SYSWOW64\evr.dll
2014-10-15 08:03:40 ----A---- C:\Windows\system32\mfplat.dll
2014-10-15 08:03:40 ----A---- C:\Windows\system32\audiosrv.dll
2014-10-15 08:03:39 ----A---- C:\Windows\SYSWOW64\mfplat.dll
2014-10-15 08:03:39 ----A---- C:\Windows\SYSWOW64\cryptui.dll
2014-10-15 08:03:39 ----A---- C:\Windows\SYSWOW64\cryptsp.dll
2014-10-15 08:03:39 ----A---- C:\Windows\SYSWOW64\crypt32.dll
2014-10-15 08:03:39 ----A---- C:\Windows\SYSWOW64\AudioEng.dll
2014-10-15 08:03:39 ----A---- C:\Windows\system32\srcore.dll
2014-10-15 08:03:39 ----A---- C:\Windows\system32\rstrui.exe
2014-10-15 08:03:39 ----A---- C:\Windows\system32\pcasvc.dll
2014-10-15 08:03:39 ----A---- C:\Windows\system32\msscp.dll
2014-10-15 08:03:39 ----A---- C:\Windows\system32\msnetobj.dll
2014-10-15 08:03:39 ----A---- C:\Windows\system32\cryptsp.dll
2014-10-15 08:03:38 ----A---- C:\Windows\SYSWOW64\rrinstaller.exe
2014-10-15 08:03:38 ----A---- C:\Windows\SYSWOW64\msscp.dll
2014-10-15 08:03:38 ----A---- C:\Windows\SYSWOW64\msnetobj.dll
2014-10-15 08:03:38 ----A---- C:\Windows\SYSWOW64\mfps.dll
2014-10-15 08:03:38 ----A---- C:\Windows\system32\rrinstaller.exe
2014-10-15 08:03:38 ----A---- C:\Windows\system32\mfps.dll
2014-10-15 08:03:38 ----A---- C:\Windows\system32\drivers\appid.sys
2014-10-15 08:03:38 ----A---- C:\Windows\system32\audiodg.exe
2014-10-15 08:03:38 ----A---- C:\Windows\system32\appidsvc.dll
2014-10-15 08:03:38 ----A---- C:\Windows\system32\appidapi.dll
2014-10-15 08:03:37 ----A---- C:\Windows\SYSWOW64\wmploc.DLL
2014-10-15 08:03:37 ----A---- C:\Windows\SYSWOW64\srclient.dll
2014-10-15 08:03:37 ----A---- C:\Windows\SYSWOW64\spwmp.dll
2014-10-15 08:03:37 ----A---- C:\Windows\SYSWOW64\mfpmp.exe
2014-10-15 08:03:37 ----A---- C:\Windows\SYSWOW64\mferror.dll
2014-10-15 08:03:37 ----A---- C:\Windows\SYSWOW64\dxmasf.dll
2014-10-15 08:03:37 ----A---- C:\Windows\SYSWOW64\appidapi.dll
2014-10-15 08:03:37 ----A---- C:\Windows\system32\wmploc.DLL
2014-10-15 08:03:37 ----A---- C:\Windows\system32\srclient.dll
2014-10-15 08:03:37 ----A---- C:\Windows\system32\spwmp.dll
2014-10-15 08:03:37 ----A---- C:\Windows\system32\setbcdlocale.dll
2014-10-15 08:03:37 ----A---- C:\Windows\system32\mfpmp.exe
2014-10-15 08:03:37 ----A---- C:\Windows\system32\mferror.dll
2014-10-15 08:03:37 ----A---- C:\Windows\system32\dxmasf.dll
2014-10-15 08:03:37 ----A---- C:\Windows\system32\appidpolicyconverter.exe
2014-10-15 08:03:37 ----A---- C:\Windows\system32\appidcertstorecheck.exe
2014-10-15 08:03:27 ----A---- C:\Windows\SYSWOW64\mscorier.dll
2014-10-15 08:03:27 ----A---- C:\Windows\SYSWOW64\dfshim.dll
2014-10-15 08:03:27 ----A---- C:\Windows\system32\mscorier.dll
2014-10-15 08:03:26 ----A---- C:\Windows\SYSWOW64\mscories.dll
2014-10-15 08:03:26 ----A---- C:\Windows\system32\mscories.dll
2014-10-15 08:03:26 ----A---- C:\Windows\system32\dfshim.dll
2014-10-15 08:03:21 ----A---- C:\Windows\system32\generaltel.dll
2014-10-15 08:03:21 ----A---- C:\Windows\system32\aepdu.dll
2014-10-15 08:03:21 ----A---- C:\Windows\system32\aeinv.dll
2014-10-15 08:03:19 ----A---- C:\Windows\SYSWOW64\iernonce.dll
2014-10-15 08:03:18 ----A---- C:\Windows\SYSWOW64\urlmon.dll
2014-10-15 08:03:18 ----A---- C:\Windows\SYSWOW64\mshtmled.dll
2014-10-15 08:03:18 ----A---- C:\Windows\SYSWOW64\mshtml.dll
2014-10-15 08:03:18 ----A---- C:\Windows\SYSWOW64\msfeeds.dll
2014-10-15 08:03:18 ----A---- C:\Windows\SYSWOW64\jscript9diag.dll
2014-10-15 08:03:18 ----A---- C:\Windows\SYSWOW64\JavaScriptCollectionAgent.dll
2014-10-15 08:03:18 ----A---- C:\Windows\SYSWOW64\ieetwproxystub.dll
2014-10-15 08:03:18 ----A---- C:\Windows\SYSWOW64\iedkcs32.dll
2014-10-15 08:03:18 ----A---- C:\Windows\SYSWOW64\dxtmsft.dll
2014-10-15 08:03:18 ----A---- C:\Windows\system32\JavaScriptCollectionAgent.dll
2014-10-15 08:03:18 ----A---- C:\Windows\system32\iernonce.dll
2014-10-15 08:03:18 ----A---- C:\Windows\system32\ieetwproxystub.dll
2014-10-15 08:03:18 ----A---- C:\Windows\system32\ie4uinit.exe
2014-10-15 08:03:17 ----A---- C:\Windows\SYSWOW64\iesetup.dll
2014-10-15 08:03:17 ----A---- C:\Windows\SYSWOW64\iertutil.dll
2014-10-15 08:03:17 ----A---- C:\Windows\system32\urlmon.dll
2014-10-15 08:03:17 ----A---- C:\Windows\system32\iedkcs32.dll
2014-10-15 08:03:16 ----A---- C:\Windows\SYSWOW64\jsproxy.dll
2014-10-15 08:03:16 ----A---- C:\Windows\SYSWOW64\ieui.dll
2014-10-15 08:03:16 ----A---- C:\Windows\SYSWOW64\ieframe.dll
2014-10-15 08:03:16 ----A---- C:\Windows\SYSWOW64\dxtrans.dll
2014-10-15 08:03:16 ----A---- C:\Windows\system32\msfeeds.dll
2014-10-15 08:03:16 ----A---- C:\Windows\system32\ieetwcollectorres.dll
2014-10-15 08:03:16 ----A---- C:\Windows\system32\ieetwcollector.exe
2014-10-15 08:03:16 ----A---- C:\Windows\system32\dxtmsft.dll
2014-10-15 08:03:15 ----A---- C:\Windows\SYSWOW64\mshtmlmedia.dll
2014-10-15 08:03:15 ----A---- C:\Windows\system32\iesetup.dll
2014-10-15 08:03:15 ----A---- C:\Windows\system32\iertutil.dll
2014-10-15 08:03:14 ----A---- C:\Windows\SYSWOW64\wininet.dll
2014-10-15 08:03:14 ----A---- C:\Windows\SYSWOW64\vbscript.dll
2014-10-15 08:03:14 ----A---- C:\Windows\SYSWOW64\msrating.dll
2014-10-15 08:03:14 ----A---- C:\Windows\SYSWOW64\MshtmlDac.dll
2014-10-15 08:03:14 ----A---- C:\Windows\SYSWOW64\jscript9.dll
2014-10-15 08:03:14 ----A---- C:\Windows\SYSWOW64\ieUnatt.exe
2014-10-15 08:03:14 ----A---- C:\Windows\SYSWOW64\ieapfltr.dll
2014-10-15 08:03:14 ----A---- C:\Windows\system32\jsproxy.dll
2014-10-15 08:03:14 ----A---- C:\Windows\system32\dxtrans.dll
2014-10-15 08:03:13 ----A---- C:\Windows\system32\mshtmlmedia.dll
2014-10-15 08:03:13 ----A---- C:\Windows\system32\mshtmled.dll
2014-10-15 08:03:13 ----A---- C:\Windows\system32\jscript9diag.dll
2014-10-15 08:03:13 ----A---- C:\Windows\system32\jscript9.dll
2014-10-15 08:03:13 ----A---- C:\Windows\system32\ieUnatt.exe
2014-10-15 08:03:13 ----A---- C:\Windows\system32\ieui.dll
2014-10-15 08:03:13 ----A---- C:\Windows\system32\ieframe.dll
2014-10-15 08:03:12 ----A---- C:\Windows\system32\wininet.dll
2014-10-15 08:03:12 ----A---- C:\Windows\system32\vbscript.dll
2014-10-15 08:03:12 ----A---- C:\Windows\system32\msrating.dll
2014-10-15 08:03:12 ----A---- C:\Windows\system32\MshtmlDac.dll
2014-10-15 08:03:12 ----A---- C:\Windows\system32\ieapfltr.dll
2014-10-15 08:03:11 ----A---- C:\Windows\system32\MsSpellCheckingFacility.exe
2014-10-15 08:03:11 ----A---- C:\Windows\system32\mshtml.dll
2014-10-15 08:03:05 ----A---- C:\Windows\SYSWOW64\rastls.dll
2014-10-15 08:03:05 ----A---- C:\Windows\system32\rastls.dll
2014-10-15 08:02:58 ----A---- C:\Windows\system32\rdpcorets.dll
2014-10-15 08:02:50 ----A---- C:\Windows\SYSWOW64\msi.dll
2014-10-15 08:02:50 ----A---- C:\Windows\system32\msi.dll
2014-10-15 08:02:37 ----A---- C:\Windows\system32\termsrv.dll
2014-10-15 08:02:36 ----A---- C:\Windows\SYSWOW64\winsta.dll
2014-10-15 08:02:36 ----A---- C:\Windows\system32\winsta.dll
2014-10-15 08:02:36 ----A---- C:\Windows\system32\winlogon.exe
2014-10-15 08:02:36 ----A---- C:\Windows\system32\rdpcorekmts.dll
2014-10-15 08:02:36 ----A---- C:\Windows\system32\drivers\rdpwd.sys
2014-10-15 08:02:35 ----A---- C:\Windows\SYSWOW64\TSpkg.dll
2014-10-15 08:02:35 ----A---- C:\Windows\SYSWOW64\credssp.dll
2014-10-15 08:02:35 ----A---- C:\Windows\system32\TSpkg.dll
2014-10-15 08:02:35 ----A---- C:\Windows\system32\drivers\tssecsrv.sys
2014-10-15 08:02:35 ----A---- C:\Windows\system32\credssp.dll
2014-10-15 08:02:28 ----A---- C:\Windows\SYSWOW64\mstscax.dll
2014-10-15 08:02:28 ----A---- C:\Windows\system32\mstscax.dll
2014-10-15 08:02:25 ----A---- C:\Windows\SYSWOW64\packager.dll
2014-10-15 08:02:25 ----A---- C:\Windows\system32\packager.dll

======List of files/folders modified in the last 1 month======

2014-11-08 20:01:15 ----D---- C:\Windows\Temp
2014-11-08 19:56:53 ----D---- C:\Windows\System32
2014-11-08 19:56:53 ----D---- C:\Windows\inf
2014-11-08 19:56:53 ----A---- C:\Windows\system32\PerfStringBackup.INI
2014-11-08 19:52:46 ----D---- C:\Windows
2014-11-08 18:41:31 ----D---- C:\Program Files
2014-11-07 19:29:49 ----D---- C:\Asw
2014-11-07 18:51:39 ----D---- C:\Windows\system32\config
2014-11-07 18:41:11 ----D---- C:\Windows\system32\wbem
2014-11-07 18:40:42 ----D---- C:\Windows\winsxs
2014-11-07 18:40:42 ----D---- C:\Windows\Tasks
2014-11-07 18:40:42 ----D---- C:\Windows\SYSWOW64\cs-CZ
2014-11-07 18:40:42 ----D---- C:\Windows\system32\wfp
2014-11-07 18:40:42 ----D---- C:\Windows\system32\DriverStore
2014-11-07 18:40:42 ----D---- C:\Windows\system32\cs-CZ
2014-11-07 18:40:42 ----D---- C:\Windows\system32\catroot2
2014-11-07 18:40:42 ----D---- C:\Windows\ShellNew
2014-11-07 18:40:42 ----D---- C:\Windows\PolicyDefinitions
2014-11-07 18:40:42 ----D---- C:\Program Files\Windows Journal
2014-11-07 18:40:37 ----D---- C:\Windows\SYSWOW64\NV
2014-11-07 18:40:37 ----D---- C:\Windows\SysWOW64
2014-11-07 18:40:37 ----D---- C:\Windows\system32\Tasks
2014-11-07 18:40:37 ----D---- C:\Windows\system32\NV
2014-11-07 18:40:37 ----D---- C:\Windows\system32\drivers\etc
2014-11-07 18:40:37 ----D---- C:\Windows\system32\drivers
2014-11-07 18:40:37 ----D---- C:\Windows\Setup
2014-11-07 18:40:37 ----D---- C:\Windows\pss
2014-11-07 18:40:34 ----D---- C:\Windows\Help
2014-11-07 18:40:32 ----D---- C:\Program Files\NVIDIA Corporation
2014-11-07 18:40:32 ----D---- C:\Program Files (x86)\WarThunder
2014-11-07 18:40:32 ----D---- C:\Program Files (x86)\NVIDIA Corporation
2014-11-07 18:40:32 ----D---- C:\Fakturka
2014-11-07 18:40:28 ----D---- C:\Windows\registration
2014-11-07 18:39:33 ----D---- C:\Program Files\Common Files\Microsoft Shared
2014-11-07 18:02:38 ----D---- C:\Windows\SoftwareDistribution
2014-11-07 18:02:38 ----D---- C:\Windows\Logs
2014-11-05 23:24:48 ----D---- C:\Windows\SYSWOW64\inetsrv
2014-11-05 23:24:48 ----D---- C:\Windows\system32\inetsrv
2014-11-05 23:14:48 ----HD---- C:\Windows\system32\GroupPolicy
2014-11-05 20:45:48 ----SHD---- C:\System Volume Information
2014-11-05 20:20:26 ----D---- C:\Windows\tracing
2014-11-05 20:09:12 ----D---- C:\Windows\Prefetch
2014-11-05 20:09:02 ----D---- C:\ProgramData\NVIDIA
2014-11-03 00:59:11 ----D---- C:\Users\Jitka\AppData\Roaming\TS3Client
2014-10-30 08:26:21 ----A---- C:\Windows\SYSWOW64\log.txt
2014-10-28 09:45:02 ----SHD---- C:\Windows\Installer
2014-10-28 09:40:43 ----D---- C:\Program Files (x86)
2014-10-20 10:56:57 ----HD---- C:\Program Files (x86)\InstallShield Installation Information
2014-10-20 10:42:54 ----D---- C:\Windows\debug
2014-10-20 10:41:46 ----D---- C:\Program Files\TeamSpeak 3 Client
2014-10-20 10:28:36 ----HD---- C:\ProgramData
2014-10-20 10:28:32 ----D---- C:\Program Files (x86)\Common Files
2014-10-20 10:28:31 ----D---- C:\Program Files (x86)\Overwolf
2014-10-16 14:47:17 ----D---- C:\Windows\rescache
2014-10-16 14:12:39 ----D---- C:\Windows\Microsoft.NET
2014-10-16 11:40:12 ----RSD---- C:\Windows\assembly
2014-10-16 10:34:25 ----D---- C:\Windows\SYSWOW64\Dism
2014-10-16 10:34:25 ----D---- C:\Windows\system32\en-US
2014-10-16 10:34:25 ----D---- C:\Windows\system32\Dism
2014-10-16 10:34:25 ----D---- C:\Program Files\Windows Media Player
2014-10-16 10:34:25 ----D---- C:\Program Files (x86)\Windows Media Player
2014-10-16 10:34:24 ----SD---- C:\Windows\system32\CompatTel
2014-10-16 10:34:24 ----D---- C:\Windows\system32\CodeIntegrity
2014-10-16 10:34:24 ----D---- C:\Windows\system32\Boot
2014-10-16 10:34:23 ----D---- C:\Windows\SYSWOW64\en-US
2014-10-16 10:34:23 ----D---- C:\Program Files\Internet Explorer
2014-10-16 10:34:22 ----D---- C:\Program Files (x86)\Internet Explorer
2014-10-15 19:42:07 ----D---- C:\Windows\system32\MRT
2014-10-15 19:40:36 ----A---- C:\Windows\system32\MRT.exe
2014-10-15 08:02:16 ----D---- C:\Windows\system32\catroot

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 iaStorA;iaStorA; C:\Windows\system32\DRIVERS\iaStorA.sys [2013-08-07 644968]
R0 iaStorF;iaStorF; C:\Windows\system32\DRIVERS\iaStorF.sys [2013-08-07 28008]
R0 nvpciflt;nvpciflt; C:\Windows\system32\DRIVERS\nvpciflt.sys [2014-09-14 32576]
R0 rdyboost;ReadyBoost; C:\Windows\System32\drivers\rdyboost.sys [2010-11-21 213888]
R3 MEIx64;Intel(R) Management Engine Interface ; C:\Windows\system32\DRIVERS\HECIx64.sys [2012-07-17 62784]
S0 aswRvrt;avast! Revert; C:\Windows\system32\drivers\aswRvrt.sys [2014-08-28 65776]
S0 aswVmm;avast! VM Monitor; C:\Windows\system32\drivers\aswVmm.sys [2014-08-28 224896]
S1 aswRdr;aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [2014-08-28 93568]
S1 aswSnx;aswSnx; C:\Windows\system32\drivers\aswSnx.sys [2014-08-28 1041168]
S1 aswSP;aswSP; C:\Windows\system32\drivers\aswSP.sys [2014-08-28 427360]
S1 vwififlt;Virtual WiFi Filter Driver; C:\Windows\system32\DRIVERS\vwififlt.sys [2009-07-14 59904]
S2 aswHwid;avast! HardwareID; C:\Windows\system32\drivers\aswHwid.sys [2014-08-28 29208]
S2 aswMonFlt;aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [2014-08-28 79184]
S2 aswStm;aswStm; C:\Windows\system32\drivers\aswStm.sys [2014-08-28 92008]
S3 BthEnum;Ovladač pro Bluetooth Request Block; C:\Windows\system32\drivers\BthEnum.sys [2009-07-14 41984]
S3 BthPan;Zařízení Bluetooth (síť PAN); C:\Windows\system32\DRIVERS\bthpan.sys [2009-07-14 118784]
S3 BTHPORT;Ovladač portu Bluetooth; C:\Windows\System32\Drivers\BTHport.sys [2012-07-06 552960]
S3 BTHUSB;Ovladač rozhraní USB radiostanice Bluetooth; C:\Windows\System32\Drivers\BTHUSB.sys [2011-04-28 80384]
S3 Dot4;MS IEEE-1284.4 Driver; C:\Windows\system32\DRIVERS\Dot4.sys [2009-07-14 145920]
S3 Dot4Print;Print Class Driver for IEEE-1284.4; C:\Windows\system32\DRIVERS\Dot4Prt.sys [2010-11-21 19968]
S3 Dot4Scan;Scan Class Driver for IEEE-1284.4; C:\Windows\system32\DRIVERS\Dot4Scan.sys [2009-07-14 13824]
S3 dot4usb;Dot4USB Filter Dot4USB Filter; C:\Windows\system32\DRIVERS\dot4usb.sys [2009-07-14 43008]
S3 igfx;igfx; C:\Windows\system32\DRIVERS\igdkmd64.sys [2012-08-03 8987456]
S3 IntcDAud;Intel(R) Display Audio; C:\Windows\system32\DRIVERS\IntcDAud.sys [2012-06-19 342528]
S3 L1C;NDIS Miniport Driver for Qualcomm Atheros AR81xx PCI-E Ethernet Controller; C:\Windows\system32\DRIVERS\L1C62x64.sys [2013-07-18 129224]
S3 NETwNs64;___ Ovladač adaptéru řady Intel(R) Wireless WiFi Link 5000 pro systém Windows 7 64 Bit; C:\Windows\system32\DRIVERS\Netwsw00.sys [2012-06-03 11499008]
S3 NvStreamKms;NvStreamKms; \??\C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [2014-04-30 18776]
S3 nvvad_WaveExtensible;NVIDIA Virtual Audio Device (Wave Extensible) (WDM); C:\Windows\system32\drivers\nvvad64v.sys [2014-03-31 40392]
S3 pciide;pciide; C:\Windows\system32\drivers\pciide.sys [2009-07-14 12352]
S3 RDPDR;Terminal Server Device Redirector Driver; C:\Windows\System32\drivers\rdpdr.sys [2010-11-21 165888]
S3 RdpVideoMiniport;Remote Desktop Video Miniport Driver; C:\Windows\System32\drivers\rdpvideominiport.sys [2012-08-23 19456]
S3 RFCOMM;Zařízení Bluetooth (RFCOMM protokol TDI); C:\Windows\system32\DRIVERS\rfcomm.sys [2009-07-14 158720]
S3 STHDA;@%SystemRoot%\system32\stlang64.dll,-10322; C:\Windows\system32\DRIVERS\stwrt64.sys [2012-09-05 542208]
S3 TsUsbFlt;TsUsbFlt; C:\Windows\system32\drivers\tsusbflt.sys [2013-10-02 56832]
S3 TsUsbGD;Remote Desktop Generic USB Device; C:\Windows\system32\drivers\TsUsbGD.sys [2012-08-23 30208]
S3 usb_rndisx;Adaptér USB RNDIS; C:\Windows\system32\DRIVERS\usb8023x.sys [2013-02-12 19968]
S3 vwifimp;Microsoft Virtual WiFi Miniport Service; C:\Windows\system32\DRIVERS\vwifimp.sys [2009-07-14 17920]
S3 WinUsb;WinUsb; C:\Windows\system32\DRIVERS\WinUsb.sys [2010-11-21 41984]
S4 CSC;@%systemroot%\system32\cscsvc.dll,-202; C:\Windows\system32\drivers\csc.sys [2010-11-21 514560]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

S2 AdobeARMservice;Adobe Acrobat Update Service; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [2014-09-12 64704]
S2 avast! Antivirus;avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [2014-08-28 50344]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2013-09-11 105144]
S2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2013-09-11 124088]
S2 DragonUpdater;COMODO Dragon Update Service; C:\Program Files (x86)\Comodo\Dragon\dragon_updater.exe [2014-05-27 2139328]
S2 gupdate;Služba Google Update (gupdate); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2014-04-20 116648]
S2 IAStorDataMgrSvc;Intel(R) Rapid Storage Technology; C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe [2013-08-07 15720]
S2 Intel(R) Capability Licensing Service Interface;Intel(R) Capability Licensing Service Interface; C:\Program Files\Intel\iCLS Client\HeciServer.exe [2012-02-02 628448]
S2 jhi_service;Intel(R) Dynamic Application Loader Host Interface Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [2012-03-15 162648]
S2 LMS;Intel(R) Management and Security Application Local Management Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe [2012-03-15 276824]
S2 Net Driver HPZ12;Net Driver HPZ12; C:\Windows\System32\svchost.exe [2009-07-14 27136]
S2 NvNetworkService;NVIDIA Network Service; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [2014-04-30 1617696]
S2 NvStreamSvc;NVIDIA Streamer Service; C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [2014-04-30 21007192]
S2 nvsvc;NVIDIA Display Driver Service; C:\Windows\system32\nvvsvc.exe [2014-09-13 934216]
S2 Pml Driver HPZ12;Pml Driver HPZ12; C:\Windows\System32\svchost.exe [2009-07-14 27136]
S2 STacSV;@%SystemRoot%\system32\stlang64.dll,-10122; C:\Program Files\IDT\WDM\STacSV64.exe [2012-09-05 323072]
S2 TeamViewer9;TeamViewer 9; C:\Program Files (x86)\TeamViewer\Version9\TeamViewer_Service.exe [2014-09-12 4799760]
S2 TomTomHOMEService;TomTomHOMEService; C:\Program Files (x86)\TomTom HOME 2\TomTomHOMEService.exe [2014-06-05 93040]
S2 UNS;Intel(R) Management and Security Application User Notification Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe [2012-03-15 362840]
S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service; C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2014-09-10 267440]
S3 AppMgmt;@appmgmts.dll,-3250; C:\Windows\system32\svchost.exe [2009-07-14 27136]
S3 cphs;Intel(R) Content Protection HECI Service; C:\Windows\SysWow64\IntelCpHeciSvc.exe [2012-08-07 276288]
S3 gupdatem;Služba Google Update (gupdatem); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2014-04-20 116648]
S3 IEEtwCollectorService;@%SystemRoot%\system32\ieetwcollectorres.dll,-1000; C:\Windows\system32\IEEtwCollector.exe [2014-09-19 111616]
S3 PeerDistSvc;@%SystemRoot%\system32\peerdistsvc.dll,-9000; C:\Windows\System32\svchost.exe [2009-07-14 27136]
S3 StorSvc;@%SystemRoot%\System32\StorSvc.dll,-100; C:\Windows\System32\svchost.exe [2009-07-14 27136]
S3 UmRdpService;@%SystemRoot%\system32\umrdp.dll,-1000; C:\Windows\System32\svchost.exe [2009-07-14 27136]
S3 WatAdminSvc;@%SystemRoot%\system32\Wat\WatUX.exe,-601; C:\Windows\system32\Wat\WatAdminSvc.exe [2014-04-20 1255736]
S4 aspnet_state;Stavová služba ASP.NET; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\aspnet_state.exe [2013-09-11 51808]
S4 CscService;@%systemroot%\system32\cscsvc.dll,-200; C:\Windows\System32\svchost.exe [2009-07-14 27136]
S4 NetMsmqActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8195; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2013-09-11 139856]
S4 NetPipeActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8197; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2013-09-11 139856]
S4 NetTcpActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8199; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2013-09-11 139856]

-----------------EOF-----------------
Nahoru
Uživatelský avatar
Rudy
Site Admin
Site Admin
Příspěvky: 119547
Registrován: 30 říj 2003 13:42
Bydliště: Plzeň
Kontaktovat uživatele:
Kontaktovat uživatele Rudy

Re: po zapnutí naběhne NR bez sítě + rsit log

#6 Příspěvek od Rudy »

Stáhněte OTM: http://oldtimer.geekstogo.com/OTM.exe a uložte na plochu. Spusťte a do levého okna zkopírujte:
:files
C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
C:\Windows\tasks\GoogleUpdateTaskMachineUA.job

:commands
[Purity]
[Emptytemp]
[Emptyflash]
a klikněte na >MoveIt!<. Před skenem vypněte antivir a po něm restartujte PC. Dejte nový log RSIT.
Dotazy a logy vkládejte pouze do vašich threadů. Soukromé zprávy, icq a e-maily neslouží k řešení vašich problémů.

Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.

Navštivte: Obrázek

e-mail: rudy(zavináč)forum.viry.cz

Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!


Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Nahoru
TheSevenCz
Návštěvník
Návštěvník
Příspěvky: 42
Registrován: 08 črc 2012 13:00

Re: po zapnutí naběhne NR bez sítě + rsit log

#7 Příspěvek od TheSevenCz »

Logfile of random's system information tool 1.10 (written by random/random)
Run by Jitka at 2014-11-08 21:07:47
Microsoft Windows 7 Professional Service Pack 1
System drive C: has 364 GB (76%) free of 477 GB
Total RAM: 8058 MB (92% free)

HijackThis download failed

======Listing Processes======



\SystemRoot\System32\smss.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
wininit.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
C:\Windows\system32\services.exe
winlogon.exe
C:\Windows\system32\lsass.exe
C:\Windows\system32\lsm.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Windows\system32\svchost.exe -k RPCSS
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\system32\svchost.exe -k netsvcs
C:\Windows\system32\svchost.exe -k NetworkService
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
/QuitInfo:0000000000000170;0000000000000174; /AddRef;
/QuitInfo:00000000000001B4;00000000000001B8; /AddRef;
/QuitInfo:0000000000000190;00000000000001C0;
C:\Windows\Explorer.EXE
ctfmon.exe
C:\Windows\system32\DllHost.exe /Processid:{3EB3C877-1F16-487C-9050-104DBCD66683}
"C:\Users\Jitka\Desktop\RSITx64.exe"
C:\Windows\system32\wbem\wmiprvse.exe

======Scheduled tasks folder======

C:\Windows\tasks\Adobe Flash Player Updater.job - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{8E5E2654-AD2D-48bf-AC2D-D17F00898D06}]
avast! Online Security - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll [2014-08-28 612248]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{8E5E2654-AD2D-48bf-AC2D-D17F00898D06}]
avast! Online Security - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2014-08-28 457712]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"IAStorIcon"=C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIconLaunch.exe [2013-08-07 36352]
"QuickSet"=C:\Program Files\Dell\QuickSet\QuickSet.exe [2012-05-22 3732880]
"IgfxTray"=C:\Windows\system32\igfxtray.exe [2012-08-07 170304]
"HotKeysCmds"=C:\Windows\system32\hkcmd.exe [2012-08-07 398656]
"NvBackend"=C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2014-04-30 2199840]
"ShadowPlay"=C:\Windows\system32\nvspcap64.dll [2014-04-30 1225920]
"Persistence"=C:\Windows\system32\igfxpers.exe [2012-08-07 440640]
"SysTrayApp"=C:\Program Files\IDT\WDM\sttray64.exe [2012-09-05 1664000]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\RunOnce]
"Report"=C:\AdwCleaner\AdwCleaner[S0].txt [2014-11-08 1200]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^McAfee Security Scan Plus.lnk]
C:\PROGRA~2\MCAFEE~1\30E3C3~1.285\SSSCHE~1.EXE []

[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]
"AvastUI.exe"=C:\Program Files\AVAST Software\Avast\AvastUI.exe [2014-08-28 4085896]
"Adobe ARM"=C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2014-08-21 959176]
"TomTomHOME.exe"=C:\Program Files (x86)\TomTom HOME\TomTomHOME.exe [2006-10-30 3576512]

[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\RunOnce]
"OTM"=C:\Users\Jitka\Desktop\OTM.exe [2014-11-08 522240]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
"AppInit_DLLs"="C:\Windows\system32\nvinitx.dll"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\igfxcui]
C:\Windows\system32\igfxdev.dll [2012-08-03 439296]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=credssp.dll

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorAdmin"=5
"ConsentPromptBehaviorUser"=3
"EnableUIADesktopToggle"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoActiveDesktop"=1
"NoActiveDesktopChanges"=1
"ForceActiveDesktopOn"=0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.msadpcm"=msadp32.acm
"midimapper"=midimap.dll
"wavemapper"=msacm32.drv
"VIDC.UYVY"=msyuv.dll
"VIDC.YUY2"=msyuv.dll
"VIDC.YVYU"=msyuv.dll
"VIDC.IYUV"=iyuv_32.dll
"vidc.i420"=iyuv_32.dll
"VIDC.YVU9"=tsbyuv.dll
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"MSVideo8"=VfWWDM32.dll
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"aux1"=wdmaud.drv
"wave2"=wdmaud.drv
"midi2"=wdmaud.drv
"mixer2"=wdmaud.drv
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*

======List of files/folders created in the last 1 month======

2014-11-08 21:03:47 ----D---- C:\_OTM
2014-11-08 19:49:03 ----D---- C:\AdwCleaner
2014-11-08 18:41:31 ----D---- C:\rsit
2014-11-08 18:41:31 ----D---- C:\Program Files\trend micro
2014-11-08 18:40:59 ----D---- C:\FRST
2014-11-06 11:11:24 ----HD---- C:\$WINDOWS.~BT
2014-11-05 21:06:02 ----D---- C:\inetpub
2014-10-26 14:08:50 ----A---- C:\Windows\SYSWOW64\certsentry.dll
2014-10-26 14:08:50 ----A---- C:\Windows\system32\certsentry.dll
2014-10-26 14:08:42 ----D---- C:\Program Files (x86)\Comodo
2014-10-26 14:08:14 ----A---- C:\Windows\SYSWOW64\fmcodec.DLL
2014-10-26 14:08:10 ----D---- C:\Program Files (x86)\DsNET Corp
2014-10-20 17:53:36 ----D---- C:\Program Files (x86)\Clair
2014-10-20 12:00:10 ----D---- C:\Program Files\IDT
2014-10-20 11:14:36 ----N---- C:\Windows\system32\WavesGUILib64.dll
2014-10-20 11:14:36 ----N---- C:\Windows\system32\MaxxAudioIDT64.dll
2014-10-20 11:07:37 ----D---- C:\Users\Jitka\AppData\Roaming\IDT
2014-10-20 11:05:43 ----D---- C:\Program Files (x86)\DriverToolkit
2014-10-20 10:57:36 ----A---- C:\Windows\system32\imthx64.dll
2014-10-20 10:57:36 ----A---- C:\Windows\system32\imapo64.dll
2014-10-20 10:57:36 ----A---- C:\Windows\system32\imapo32.dll
2014-10-20 10:57:35 ----A---- C:\Windows\system32\WavesGUILib.dll
2014-10-20 10:57:35 ----A---- C:\Windows\system32\stlang64.dll
2014-10-20 10:57:35 ----A---- C:\Windows\system32\MaxxAudioMeters64.exe
2014-10-20 10:57:35 ----A---- C:\Windows\system32\MaxxAudioIDT.dll
2014-10-20 10:57:35 ----A---- C:\Windows\system32\MaxxAudioAPOShell64.dll
2014-10-20 10:57:00 ----A---- C:\Windows\system32\drivers\stwrt64.sys
2014-10-20 10:56:59 ----N---- C:\Windows\system32\stapi64.dll
2014-10-20 10:56:59 ----A---- C:\Windows\SYSWOW64\IMAPO32.dll
2014-10-20 10:56:59 ----A---- C:\Windows\system32\stcplx64.dll
2014-10-20 10:56:59 ----A---- C:\Windows\system32\stapo64.dll
2014-10-20 10:56:59 ----A---- C:\Windows\system32\st646426.dll
2014-10-20 10:56:59 ----A---- C:\Windows\system32\MaxxAudioAPO4064.dll
2014-10-20 10:56:59 ----A---- C:\Windows\system32\MaxxAudioAPO3064.dll
2014-10-15 08:03:59 ----A---- C:\Windows\system32\win32k.sys
2014-10-15 08:03:54 ----A---- C:\Windows\SYSWOW64\drmv2clt.dll
2014-10-15 08:03:54 ----A---- C:\Windows\SYSWOW64\blackbox.dll
2014-10-15 08:03:54 ----A---- C:\Windows\system32\drmv2clt.dll
2014-10-15 08:03:54 ----A---- C:\Windows\system32\blackbox.dll
2014-10-15 08:03:52 ----A---- C:\Windows\system32\wmp.dll
2014-10-15 08:03:51 ----A---- C:\Windows\system32\mf.dll
2014-10-15 08:03:50 ----A---- C:\Windows\SYSWOW64\wmdrmsdk.dll
2014-10-15 08:03:50 ----A---- C:\Windows\system32\wmdrmsdk.dll
2014-10-15 08:03:48 ----A---- C:\Windows\system32\AUDIOKSE.dll
2014-10-15 08:03:47 ----A---- C:\Windows\SYSWOW64\wmp.dll
2014-10-15 08:03:46 ----A---- C:\Windows\SYSWOW64\mf.dll
2014-10-15 08:03:46 ----A---- C:\Windows\SYSWOW64\drmmgrtn.dll
2014-10-15 08:03:46 ----A---- C:\Windows\SYSWOW64\AUDIOKSE.dll
2014-10-15 08:03:46 ----A---- C:\Windows\system32\drmmgrtn.dll
2014-10-15 08:03:46 ----A---- C:\Windows\system32\drivers\PEAuth.sys
2014-10-15 08:03:46 ----A---- C:\Windows\system32\ci.dll
2014-10-15 08:03:44 ----A---- C:\Windows\system32\quartz.dll
2014-10-15 08:03:44 ----A---- C:\Windows\system32\AudioEng.dll
2014-10-15 08:03:43 ----A---- C:\Windows\system32\winload.exe
2014-10-15 08:03:42 ----A---- C:\Windows\SYSWOW64\AudioSes.dll
2014-10-15 08:03:42 ----A---- C:\Windows\system32\wintrust.dll
2014-10-15 08:03:42 ----A---- C:\Windows\system32\winresume.exe
2014-10-15 08:03:42 ----A---- C:\Windows\system32\ntoskrnl.exe
2014-10-15 08:03:42 ----A---- C:\Windows\system32\cryptsvc.dll
2014-10-15 08:03:41 ----A---- C:\Windows\SYSWOW64\wintrust.dll
2014-10-15 08:03:41 ----A---- C:\Windows\SYSWOW64\ntkrnlpa.exe
2014-10-15 08:03:41 ----A---- C:\Windows\SYSWOW64\cryptsvc.dll
2014-10-15 08:03:41 ----A---- C:\Windows\system32\evr.dll
2014-10-15 08:03:41 ----A---- C:\Windows\system32\EncDump.dll
2014-10-15 08:03:41 ----A---- C:\Windows\system32\cryptui.dll
2014-10-15 08:03:41 ----A---- C:\Windows\system32\crypt32.dll
2014-10-15 08:03:41 ----A---- C:\Windows\system32\AudioSes.dll
2014-10-15 08:03:40 ----A---- C:\Windows\SYSWOW64\quartz.dll
2014-10-15 08:03:40 ----A---- C:\Windows\SYSWOW64\ntoskrnl.exe
2014-10-15 08:03:40 ----A---- C:\Windows\SYSWOW64\evr.dll
2014-10-15 08:03:40 ----A---- C:\Windows\system32\mfplat.dll
2014-10-15 08:03:40 ----A---- C:\Windows\system32\audiosrv.dll
2014-10-15 08:03:39 ----A---- C:\Windows\SYSWOW64\mfplat.dll
2014-10-15 08:03:39 ----A---- C:\Windows\SYSWOW64\cryptui.dll
2014-10-15 08:03:39 ----A---- C:\Windows\SYSWOW64\cryptsp.dll
2014-10-15 08:03:39 ----A---- C:\Windows\SYSWOW64\crypt32.dll
2014-10-15 08:03:39 ----A---- C:\Windows\SYSWOW64\AudioEng.dll
2014-10-15 08:03:39 ----A---- C:\Windows\system32\srcore.dll
2014-10-15 08:03:39 ----A---- C:\Windows\system32\rstrui.exe
2014-10-15 08:03:39 ----A---- C:\Windows\system32\pcasvc.dll
2014-10-15 08:03:39 ----A---- C:\Windows\system32\msscp.dll
2014-10-15 08:03:39 ----A---- C:\Windows\system32\msnetobj.dll
2014-10-15 08:03:39 ----A---- C:\Windows\system32\cryptsp.dll
2014-10-15 08:03:38 ----A---- C:\Windows\SYSWOW64\rrinstaller.exe
2014-10-15 08:03:38 ----A---- C:\Windows\SYSWOW64\msscp.dll
2014-10-15 08:03:38 ----A---- C:\Windows\SYSWOW64\msnetobj.dll
2014-10-15 08:03:38 ----A---- C:\Windows\SYSWOW64\mfps.dll
2014-10-15 08:03:38 ----A---- C:\Windows\system32\rrinstaller.exe
2014-10-15 08:03:38 ----A---- C:\Windows\system32\mfps.dll
2014-10-15 08:03:38 ----A---- C:\Windows\system32\drivers\appid.sys
2014-10-15 08:03:38 ----A---- C:\Windows\system32\audiodg.exe
2014-10-15 08:03:38 ----A---- C:\Windows\system32\appidsvc.dll
2014-10-15 08:03:38 ----A---- C:\Windows\system32\appidapi.dll
2014-10-15 08:03:37 ----A---- C:\Windows\SYSWOW64\wmploc.DLL
2014-10-15 08:03:37 ----A---- C:\Windows\SYSWOW64\srclient.dll
2014-10-15 08:03:37 ----A---- C:\Windows\SYSWOW64\spwmp.dll
2014-10-15 08:03:37 ----A---- C:\Windows\SYSWOW64\mfpmp.exe
2014-10-15 08:03:37 ----A---- C:\Windows\SYSWOW64\mferror.dll
2014-10-15 08:03:37 ----A---- C:\Windows\SYSWOW64\dxmasf.dll
2014-10-15 08:03:37 ----A---- C:\Windows\SYSWOW64\appidapi.dll
2014-10-15 08:03:37 ----A---- C:\Windows\system32\wmploc.DLL
2014-10-15 08:03:37 ----A---- C:\Windows\system32\srclient.dll
2014-10-15 08:03:37 ----A---- C:\Windows\system32\spwmp.dll
2014-10-15 08:03:37 ----A---- C:\Windows\system32\setbcdlocale.dll
2014-10-15 08:03:37 ----A---- C:\Windows\system32\mfpmp.exe
2014-10-15 08:03:37 ----A---- C:\Windows\system32\mferror.dll
2014-10-15 08:03:37 ----A---- C:\Windows\system32\dxmasf.dll
2014-10-15 08:03:37 ----A---- C:\Windows\system32\appidpolicyconverter.exe
2014-10-15 08:03:37 ----A---- C:\Windows\system32\appidcertstorecheck.exe
2014-10-15 08:03:27 ----A---- C:\Windows\SYSWOW64\mscorier.dll
2014-10-15 08:03:27 ----A---- C:\Windows\SYSWOW64\dfshim.dll
2014-10-15 08:03:27 ----A---- C:\Windows\system32\mscorier.dll
2014-10-15 08:03:26 ----A---- C:\Windows\SYSWOW64\mscories.dll
2014-10-15 08:03:26 ----A---- C:\Windows\system32\mscories.dll
2014-10-15 08:03:26 ----A---- C:\Windows\system32\dfshim.dll
2014-10-15 08:03:21 ----A---- C:\Windows\system32\generaltel.dll
2014-10-15 08:03:21 ----A---- C:\Windows\system32\aepdu.dll
2014-10-15 08:03:21 ----A---- C:\Windows\system32\aeinv.dll
2014-10-15 08:03:19 ----A---- C:\Windows\SYSWOW64\iernonce.dll
2014-10-15 08:03:18 ----A---- C:\Windows\SYSWOW64\urlmon.dll
2014-10-15 08:03:18 ----A---- C:\Windows\SYSWOW64\mshtmled.dll
2014-10-15 08:03:18 ----A---- C:\Windows\SYSWOW64\mshtml.dll
2014-10-15 08:03:18 ----A---- C:\Windows\SYSWOW64\msfeeds.dll
2014-10-15 08:03:18 ----A---- C:\Windows\SYSWOW64\jscript9diag.dll
2014-10-15 08:03:18 ----A---- C:\Windows\SYSWOW64\JavaScriptCollectionAgent.dll
2014-10-15 08:03:18 ----A---- C:\Windows\SYSWOW64\ieetwproxystub.dll
2014-10-15 08:03:18 ----A---- C:\Windows\SYSWOW64\iedkcs32.dll
2014-10-15 08:03:18 ----A---- C:\Windows\SYSWOW64\dxtmsft.dll
2014-10-15 08:03:18 ----A---- C:\Windows\system32\JavaScriptCollectionAgent.dll
2014-10-15 08:03:18 ----A---- C:\Windows\system32\iernonce.dll
2014-10-15 08:03:18 ----A---- C:\Windows\system32\ieetwproxystub.dll
2014-10-15 08:03:18 ----A---- C:\Windows\system32\ie4uinit.exe
2014-10-15 08:03:17 ----A---- C:\Windows\SYSWOW64\iesetup.dll
2014-10-15 08:03:17 ----A---- C:\Windows\SYSWOW64\iertutil.dll
2014-10-15 08:03:17 ----A---- C:\Windows\system32\urlmon.dll
2014-10-15 08:03:17 ----A---- C:\Windows\system32\iedkcs32.dll
2014-10-15 08:03:16 ----A---- C:\Windows\SYSWOW64\jsproxy.dll
2014-10-15 08:03:16 ----A---- C:\Windows\SYSWOW64\ieui.dll
2014-10-15 08:03:16 ----A---- C:\Windows\SYSWOW64\ieframe.dll
2014-10-15 08:03:16 ----A---- C:\Windows\SYSWOW64\dxtrans.dll
2014-10-15 08:03:16 ----A---- C:\Windows\system32\msfeeds.dll
2014-10-15 08:03:16 ----A---- C:\Windows\system32\ieetwcollectorres.dll
2014-10-15 08:03:16 ----A---- C:\Windows\system32\ieetwcollector.exe
2014-10-15 08:03:16 ----A---- C:\Windows\system32\dxtmsft.dll
2014-10-15 08:03:15 ----A---- C:\Windows\SYSWOW64\mshtmlmedia.dll
2014-10-15 08:03:15 ----A---- C:\Windows\system32\iesetup.dll
2014-10-15 08:03:15 ----A---- C:\Windows\system32\iertutil.dll
2014-10-15 08:03:14 ----A---- C:\Windows\SYSWOW64\wininet.dll
2014-10-15 08:03:14 ----A---- C:\Windows\SYSWOW64\vbscript.dll
2014-10-15 08:03:14 ----A---- C:\Windows\SYSWOW64\msrating.dll
2014-10-15 08:03:14 ----A---- C:\Windows\SYSWOW64\MshtmlDac.dll
2014-10-15 08:03:14 ----A---- C:\Windows\SYSWOW64\jscript9.dll
2014-10-15 08:03:14 ----A---- C:\Windows\SYSWOW64\ieUnatt.exe
2014-10-15 08:03:14 ----A---- C:\Windows\SYSWOW64\ieapfltr.dll
2014-10-15 08:03:14 ----A---- C:\Windows\system32\jsproxy.dll
2014-10-15 08:03:14 ----A---- C:\Windows\system32\dxtrans.dll
2014-10-15 08:03:13 ----A---- C:\Windows\system32\mshtmlmedia.dll
2014-10-15 08:03:13 ----A---- C:\Windows\system32\mshtmled.dll
2014-10-15 08:03:13 ----A---- C:\Windows\system32\jscript9diag.dll
2014-10-15 08:03:13 ----A---- C:\Windows\system32\jscript9.dll
2014-10-15 08:03:13 ----A---- C:\Windows\system32\ieUnatt.exe
2014-10-15 08:03:13 ----A---- C:\Windows\system32\ieui.dll
2014-10-15 08:03:13 ----A---- C:\Windows\system32\ieframe.dll
2014-10-15 08:03:12 ----A---- C:\Windows\system32\wininet.dll
2014-10-15 08:03:12 ----A---- C:\Windows\system32\vbscript.dll
2014-10-15 08:03:12 ----A---- C:\Windows\system32\msrating.dll
2014-10-15 08:03:12 ----A---- C:\Windows\system32\MshtmlDac.dll
2014-10-15 08:03:12 ----A---- C:\Windows\system32\ieapfltr.dll
2014-10-15 08:03:11 ----A---- C:\Windows\system32\MsSpellCheckingFacility.exe
2014-10-15 08:03:11 ----A---- C:\Windows\system32\mshtml.dll
2014-10-15 08:03:05 ----A---- C:\Windows\SYSWOW64\rastls.dll
2014-10-15 08:03:05 ----A---- C:\Windows\system32\rastls.dll
2014-10-15 08:02:58 ----A---- C:\Windows\system32\rdpcorets.dll
2014-10-15 08:02:50 ----A---- C:\Windows\SYSWOW64\msi.dll
2014-10-15 08:02:50 ----A---- C:\Windows\system32\msi.dll
2014-10-15 08:02:37 ----A---- C:\Windows\system32\termsrv.dll
2014-10-15 08:02:36 ----A---- C:\Windows\SYSWOW64\winsta.dll
2014-10-15 08:02:36 ----A---- C:\Windows\system32\winsta.dll
2014-10-15 08:02:36 ----A---- C:\Windows\system32\winlogon.exe
2014-10-15 08:02:36 ----A---- C:\Windows\system32\rdpcorekmts.dll
2014-10-15 08:02:36 ----A---- C:\Windows\system32\drivers\rdpwd.sys
2014-10-15 08:02:35 ----A---- C:\Windows\SYSWOW64\TSpkg.dll
2014-10-15 08:02:35 ----A---- C:\Windows\SYSWOW64\credssp.dll
2014-10-15 08:02:35 ----A---- C:\Windows\system32\TSpkg.dll
2014-10-15 08:02:35 ----A---- C:\Windows\system32\drivers\tssecsrv.sys
2014-10-15 08:02:35 ----A---- C:\Windows\system32\credssp.dll
2014-10-15 08:02:28 ----A---- C:\Windows\SYSWOW64\mstscax.dll
2014-10-15 08:02:28 ----A---- C:\Windows\system32\mstscax.dll
2014-10-15 08:02:25 ----A---- C:\Windows\SYSWOW64\packager.dll
2014-10-15 08:02:25 ----A---- C:\Windows\system32\packager.dll

======List of files/folders modified in the last 1 month======

2014-11-08 21:03:54 ----D---- C:\Windows\Temp
2014-11-08 21:03:53 ----D---- C:\Windows
2014-11-08 21:03:47 ----D---- C:\Windows\Tasks
2014-11-08 21:02:53 ----D---- C:\Windows\System32
2014-11-08 21:02:53 ----D---- C:\Windows\inf
2014-11-08 21:02:53 ----A---- C:\Windows\system32\PerfStringBackup.INI
2014-11-08 18:41:31 ----D---- C:\Program Files
2014-11-07 19:29:49 ----D---- C:\Asw
2014-11-07 18:51:39 ----D---- C:\Windows\system32\config
2014-11-07 18:41:11 ----D---- C:\Windows\system32\wbem
2014-11-07 18:40:42 ----D---- C:\Windows\winsxs
2014-11-07 18:40:42 ----D---- C:\Windows\SYSWOW64\cs-CZ
2014-11-07 18:40:42 ----D---- C:\Windows\system32\wfp
2014-11-07 18:40:42 ----D---- C:\Windows\system32\DriverStore
2014-11-07 18:40:42 ----D---- C:\Windows\system32\cs-CZ
2014-11-07 18:40:42 ----D---- C:\Windows\system32\catroot2
2014-11-07 18:40:42 ----D---- C:\Windows\ShellNew
2014-11-07 18:40:42 ----D---- C:\Windows\PolicyDefinitions
2014-11-07 18:40:42 ----D---- C:\Program Files\Windows Journal
2014-11-07 18:40:37 ----D---- C:\Windows\SYSWOW64\NV
2014-11-07 18:40:37 ----D---- C:\Windows\SysWOW64
2014-11-07 18:40:37 ----D---- C:\Windows\system32\Tasks
2014-11-07 18:40:37 ----D---- C:\Windows\system32\NV
2014-11-07 18:40:37 ----D---- C:\Windows\system32\drivers\etc
2014-11-07 18:40:37 ----D---- C:\Windows\system32\drivers
2014-11-07 18:40:37 ----D---- C:\Windows\Setup
2014-11-07 18:40:37 ----D---- C:\Windows\pss
2014-11-07 18:40:34 ----D---- C:\Windows\Help
2014-11-07 18:40:32 ----D---- C:\Program Files\NVIDIA Corporation
2014-11-07 18:40:32 ----D---- C:\Program Files (x86)\WarThunder
2014-11-07 18:40:32 ----D---- C:\Program Files (x86)\NVIDIA Corporation
2014-11-07 18:40:32 ----D---- C:\Fakturka
2014-11-07 18:40:28 ----D---- C:\Windows\registration
2014-11-07 18:39:33 ----D---- C:\Program Files\Common Files\Microsoft Shared
2014-11-07 18:02:38 ----D---- C:\Windows\SoftwareDistribution
2014-11-07 18:02:38 ----D---- C:\Windows\Logs
2014-11-05 23:24:48 ----D---- C:\Windows\SYSWOW64\inetsrv
2014-11-05 23:24:48 ----D---- C:\Windows\system32\inetsrv
2014-11-05 23:14:48 ----HD---- C:\Windows\system32\GroupPolicy
2014-11-05 20:45:48 ----SHD---- C:\System Volume Information
2014-11-05 20:20:26 ----D---- C:\Windows\tracing
2014-11-05 20:09:12 ----D---- C:\Windows\Prefetch
2014-11-05 20:09:02 ----D---- C:\ProgramData\NVIDIA
2014-11-03 00:59:11 ----D---- C:\Users\Jitka\AppData\Roaming\TS3Client
2014-10-30 08:26:21 ----A---- C:\Windows\SYSWOW64\log.txt
2014-10-28 09:45:02 ----SHD---- C:\Windows\Installer
2014-10-28 09:40:43 ----D---- C:\Program Files (x86)
2014-10-20 10:56:57 ----HD---- C:\Program Files (x86)\InstallShield Installation Information
2014-10-20 10:42:54 ----D---- C:\Windows\debug
2014-10-20 10:41:46 ----D---- C:\Program Files\TeamSpeak 3 Client
2014-10-20 10:28:36 ----HD---- C:\ProgramData
2014-10-20 10:28:32 ----D---- C:\Program Files (x86)\Common Files
2014-10-20 10:28:31 ----D---- C:\Program Files (x86)\Overwolf
2014-10-16 14:47:17 ----D---- C:\Windows\rescache
2014-10-16 14:12:39 ----D---- C:\Windows\Microsoft.NET
2014-10-16 11:40:12 ----RSD---- C:\Windows\assembly
2014-10-16 10:34:25 ----D---- C:\Windows\SYSWOW64\Dism
2014-10-16 10:34:25 ----D---- C:\Windows\system32\en-US
2014-10-16 10:34:25 ----D---- C:\Windows\system32\Dism
2014-10-16 10:34:25 ----D---- C:\Program Files\Windows Media Player
2014-10-16 10:34:25 ----D---- C:\Program Files (x86)\Windows Media Player
2014-10-16 10:34:24 ----SD---- C:\Windows\system32\CompatTel
2014-10-16 10:34:24 ----D---- C:\Windows\system32\CodeIntegrity
2014-10-16 10:34:24 ----D---- C:\Windows\system32\Boot
2014-10-16 10:34:23 ----D---- C:\Windows\SYSWOW64\en-US
2014-10-16 10:34:23 ----D---- C:\Program Files\Internet Explorer
2014-10-16 10:34:22 ----D---- C:\Program Files (x86)\Internet Explorer
2014-10-15 19:42:07 ----D---- C:\Windows\system32\MRT
2014-10-15 19:40:36 ----A---- C:\Windows\system32\MRT.exe
2014-10-15 08:02:16 ----D---- C:\Windows\system32\catroot

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 iaStorA;iaStorA; C:\Windows\system32\DRIVERS\iaStorA.sys [2013-08-07 644968]
R0 iaStorF;iaStorF; C:\Windows\system32\DRIVERS\iaStorF.sys [2013-08-07 28008]
R0 nvpciflt;nvpciflt; C:\Windows\system32\DRIVERS\nvpciflt.sys [2014-09-14 32576]
R0 rdyboost;ReadyBoost; C:\Windows\System32\drivers\rdyboost.sys [2010-11-21 213888]
R3 MEIx64;Intel(R) Management Engine Interface ; C:\Windows\system32\DRIVERS\HECIx64.sys [2012-07-17 62784]
S0 aswRvrt;avast! Revert; C:\Windows\system32\drivers\aswRvrt.sys [2014-08-28 65776]
S0 aswVmm;avast! VM Monitor; C:\Windows\system32\drivers\aswVmm.sys [2014-08-28 224896]
S1 aswRdr;aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [2014-08-28 93568]
S1 aswSnx;aswSnx; C:\Windows\system32\drivers\aswSnx.sys [2014-08-28 1041168]
S1 aswSP;aswSP; C:\Windows\system32\drivers\aswSP.sys [2014-08-28 427360]
S1 vwififlt;Virtual WiFi Filter Driver; C:\Windows\system32\DRIVERS\vwififlt.sys [2009-07-14 59904]
S2 aswHwid;avast! HardwareID; C:\Windows\system32\drivers\aswHwid.sys [2014-08-28 29208]
S2 aswMonFlt;aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [2014-08-28 79184]
S2 aswStm;aswStm; C:\Windows\system32\drivers\aswStm.sys [2014-08-28 92008]
S3 BthEnum;Ovladač pro Bluetooth Request Block; C:\Windows\system32\drivers\BthEnum.sys [2009-07-14 41984]
S3 BthPan;Zařízení Bluetooth (síť PAN); C:\Windows\system32\DRIVERS\bthpan.sys [2009-07-14 118784]
S3 BTHPORT;Ovladač portu Bluetooth; C:\Windows\System32\Drivers\BTHport.sys [2012-07-06 552960]
S3 BTHUSB;Ovladač rozhraní USB radiostanice Bluetooth; C:\Windows\System32\Drivers\BTHUSB.sys [2011-04-28 80384]
S3 Dot4;MS IEEE-1284.4 Driver; C:\Windows\system32\DRIVERS\Dot4.sys [2009-07-14 145920]
S3 Dot4Print;Print Class Driver for IEEE-1284.4; C:\Windows\system32\DRIVERS\Dot4Prt.sys [2010-11-21 19968]
S3 Dot4Scan;Scan Class Driver for IEEE-1284.4; C:\Windows\system32\DRIVERS\Dot4Scan.sys [2009-07-14 13824]
S3 dot4usb;Dot4USB Filter Dot4USB Filter; C:\Windows\system32\DRIVERS\dot4usb.sys [2009-07-14 43008]
S3 igfx;igfx; C:\Windows\system32\DRIVERS\igdkmd64.sys [2012-08-03 8987456]
S3 IntcDAud;Intel(R) Display Audio; C:\Windows\system32\DRIVERS\IntcDAud.sys [2012-06-19 342528]
S3 L1C;NDIS Miniport Driver for Qualcomm Atheros AR81xx PCI-E Ethernet Controller; C:\Windows\system32\DRIVERS\L1C62x64.sys [2013-07-18 129224]
S3 NETwNs64;___ Ovladač adaptéru řady Intel(R) Wireless WiFi Link 5000 pro systém Windows 7 64 Bit; C:\Windows\system32\DRIVERS\Netwsw00.sys [2012-06-03 11499008]
S3 NvStreamKms;NvStreamKms; \??\C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [2014-04-30 18776]
S3 nvvad_WaveExtensible;NVIDIA Virtual Audio Device (Wave Extensible) (WDM); C:\Windows\system32\drivers\nvvad64v.sys [2014-03-31 40392]
S3 pciide;pciide; C:\Windows\system32\drivers\pciide.sys [2009-07-14 12352]
S3 RDPDR;Terminal Server Device Redirector Driver; C:\Windows\System32\drivers\rdpdr.sys [2010-11-21 165888]
S3 RdpVideoMiniport;Remote Desktop Video Miniport Driver; C:\Windows\System32\drivers\rdpvideominiport.sys [2012-08-23 19456]
S3 RFCOMM;Zařízení Bluetooth (RFCOMM protokol TDI); C:\Windows\system32\DRIVERS\rfcomm.sys [2009-07-14 158720]
S3 STHDA;@%SystemRoot%\system32\stlang64.dll,-10322; C:\Windows\system32\DRIVERS\stwrt64.sys [2012-09-05 542208]
S3 TsUsbFlt;TsUsbFlt; C:\Windows\system32\drivers\tsusbflt.sys [2013-10-02 56832]
S3 TsUsbGD;Remote Desktop Generic USB Device; C:\Windows\system32\drivers\TsUsbGD.sys [2012-08-23 30208]
S3 usb_rndisx;Adaptér USB RNDIS; C:\Windows\system32\DRIVERS\usb8023x.sys [2013-02-12 19968]
S3 vwifimp;Microsoft Virtual WiFi Miniport Service; C:\Windows\system32\DRIVERS\vwifimp.sys [2009-07-14 17920]
S3 WinUsb;WinUsb; C:\Windows\system32\DRIVERS\WinUsb.sys [2010-11-21 41984]
S4 CSC;@%systemroot%\system32\cscsvc.dll,-202; C:\Windows\system32\drivers\csc.sys [2010-11-21 514560]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

S2 AdobeARMservice;Adobe Acrobat Update Service; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [2014-09-12 64704]
S2 avast! Antivirus;avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [2014-08-28 50344]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2013-09-11 105144]
S2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2013-09-11 124088]
S2 DragonUpdater;COMODO Dragon Update Service; C:\Program Files (x86)\Comodo\Dragon\dragon_updater.exe [2014-05-27 2139328]
S2 gupdate;Služba Google Update (gupdate); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2014-04-20 116648]
S2 IAStorDataMgrSvc;Intel(R) Rapid Storage Technology; C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe [2013-08-07 15720]
S2 Intel(R) Capability Licensing Service Interface;Intel(R) Capability Licensing Service Interface; C:\Program Files\Intel\iCLS Client\HeciServer.exe [2012-02-02 628448]
S2 jhi_service;Intel(R) Dynamic Application Loader Host Interface Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [2012-03-15 162648]
S2 LMS;Intel(R) Management and Security Application Local Management Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe [2012-03-15 276824]
S2 Net Driver HPZ12;Net Driver HPZ12; C:\Windows\System32\svchost.exe [2009-07-14 27136]
S2 NvNetworkService;NVIDIA Network Service; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [2014-04-30 1617696]
S2 NvStreamSvc;NVIDIA Streamer Service; C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [2014-04-30 21007192]
S2 nvsvc;NVIDIA Display Driver Service; C:\Windows\system32\nvvsvc.exe [2014-09-13 934216]
S2 Pml Driver HPZ12;Pml Driver HPZ12; C:\Windows\System32\svchost.exe [2009-07-14 27136]
S2 STacSV;@%SystemRoot%\system32\stlang64.dll,-10122; C:\Program Files\IDT\WDM\STacSV64.exe [2012-09-05 323072]
S2 TeamViewer9;TeamViewer 9; C:\Program Files (x86)\TeamViewer\Version9\TeamViewer_Service.exe [2014-09-12 4799760]
S2 TomTomHOMEService;TomTomHOMEService; C:\Program Files (x86)\TomTom HOME 2\TomTomHOMEService.exe [2014-06-05 93040]
S2 UNS;Intel(R) Management and Security Application User Notification Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe [2012-03-15 362840]
S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service; C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2014-09-10 267440]
S3 AppMgmt;@appmgmts.dll,-3250; C:\Windows\system32\svchost.exe [2009-07-14 27136]
S3 cphs;Intel(R) Content Protection HECI Service; C:\Windows\SysWow64\IntelCpHeciSvc.exe [2012-08-07 276288]
S3 gupdatem;Služba Google Update (gupdatem); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2014-04-20 116648]
S3 IEEtwCollectorService;@%SystemRoot%\system32\ieetwcollectorres.dll,-1000; C:\Windows\system32\IEEtwCollector.exe [2014-09-19 111616]
S3 PeerDistSvc;@%SystemRoot%\system32\peerdistsvc.dll,-9000; C:\Windows\System32\svchost.exe [2009-07-14 27136]
S3 StorSvc;@%SystemRoot%\System32\StorSvc.dll,-100; C:\Windows\System32\svchost.exe [2009-07-14 27136]
S3 UmRdpService;@%SystemRoot%\system32\umrdp.dll,-1000; C:\Windows\System32\svchost.exe [2009-07-14 27136]
S3 WatAdminSvc;@%SystemRoot%\system32\Wat\WatUX.exe,-601; C:\Windows\system32\Wat\WatAdminSvc.exe [2014-04-20 1255736]
S4 aspnet_state;Stavová služba ASP.NET; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\aspnet_state.exe [2013-09-11 51808]
S4 CscService;@%systemroot%\system32\cscsvc.dll,-200; C:\Windows\System32\svchost.exe [2009-07-14 27136]
S4 NetMsmqActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8195; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2013-09-11 139856]
S4 NetPipeActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8197; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2013-09-11 139856]
S4 NetTcpActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8199; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2013-09-11 139856]

-----------------EOF-----------------
Nahoru
Uživatelský avatar
Rudy
Site Admin
Site Admin
Příspěvky: 119547
Registrován: 30 říj 2003 13:42
Bydliště: Plzeň
Kontaktovat uživatele:
Kontaktovat uživatele Rudy

Re: po zapnutí naběhne NR bez sítě + rsit log

#8 Příspěvek od Rudy »

Smazáno. Znovu spusťte OTM a klikněte na >CleanUp!<. OTM po sobě uklidí. Nakonec restartujte PC. Nastala nějaká změna?
Dotazy a logy vkládejte pouze do vašich threadů. Soukromé zprávy, icq a e-maily neslouží k řešení vašich problémů.

Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.

Navštivte: Obrázek

e-mail: rudy(zavináč)forum.viry.cz

Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!


Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Nahoru
TheSevenCz
Návštěvník
Návštěvník
Příspěvky: 42
Registrován: 08 črc 2012 13:00

Re: po zapnutí naběhne NR bez sítě + rsit log

#9 Příspěvek od TheSevenCz »

system is booting in safemode ... bohužel pořád nouzák
Nahoru
Uživatelský avatar
Rudy
Site Admin
Site Admin
Příspěvky: 119547
Registrován: 30 říj 2003 13:42
Bydliště: Plzeň
Kontaktovat uživatele:
Kontaktovat uživatele Rudy

Re: po zapnutí naběhne NR bez sítě + rsit log

#10 Příspěvek od Rudy »

Zkuste obnovu systému k datu, kdy korektně fungoval.
Dotazy a logy vkládejte pouze do vašich threadů. Soukromé zprávy, icq a e-maily neslouží k řešení vašich problémů.

Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.

Navštivte: Obrázek

e-mail: rudy(zavináč)forum.viry.cz

Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!


Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Nahoru
TheSevenCz
Návštěvník
Návštěvník
Příspěvky: 42
Registrován: 08 črc 2012 13:00

Re: po zapnutí naběhne NR bez sítě + rsit log

#11 Příspěvek od TheSevenCz »

jak sem psal už sem zkoušel udělal sem to ted znovu vyskočilo na mě že vše bylo úspšně dokončeno a systém byl obnoven ape stejně to naběhne do nouzáku ...
Nahoru
Uživatelský avatar
Rudy
Site Admin
Site Admin
Příspěvky: 119547
Registrován: 30 říj 2003 13:42
Bydliště: Plzeň
Kontaktovat uživatele:
Kontaktovat uživatele Rudy

Re: po zapnutí naběhne NR bez sítě + rsit log

#12 Příspěvek od Rudy »

Co jste instaloval těsně před tím, než se problém objevil?
Dotazy a logy vkládejte pouze do vašich threadů. Soukromé zprávy, icq a e-maily neslouží k řešení vašich problémů.

Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.

Navštivte: Obrázek

e-mail: rudy(zavináč)forum.viry.cz

Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!


Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Nahoru
TheSevenCz
Návštěvník
Návštěvník
Příspěvky: 42
Registrován: 08 črc 2012 13:00

Re: po zapnutí naběhne NR bez sítě + rsit log

#13 Příspěvek od TheSevenCz »

viz text před logem edit: údajně se updatoval invidia experience + čistila ccleanerem a možná zatrhla něco co nebylo v deafultu nic víc ...
Nahoru
Uživatelský avatar
Rudy
Site Admin
Site Admin
Příspěvky: 119547
Registrován: 30 říj 2003 13:42
Bydliště: Plzeň
Kontaktovat uživatele:
Kontaktovat uživatele Rudy

Re: po zapnutí naběhne NR bez sítě + rsit log

#14 Příspěvek od Rudy »

CCleaner to určitě nemohl způsobit a invidia experience nevím, bohužel, co je, znám jen nvidia experience.
Dotazy a logy vkládejte pouze do vašich threadů. Soukromé zprávy, icq a e-maily neslouží k řešení vašich problémů.

Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.

Navštivte: Obrázek

e-mail: rudy(zavináč)forum.viry.cz

Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!


Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Nahoru
TheSevenCz
Návštěvník
Návštěvník
Příspěvky: 42
Registrován: 08 črc 2012 13:00

Re: po zapnutí naběhne NR bez sítě + rsit log

#15 Příspěvek od TheSevenCz »

můj překlep .... Nvidia GeForece Experience .... tedy žádná jiná rada? :(
Nahoru
Zamčeno

Zpět na „Řešení problémů, logy“