Prosím o preventivku

[jasnenka]

Dobrý den nebo ahoj

Ráda bych Vás poprosila o preventivní prohlídku mého pracovního stroje. žádný zásadní problém neeviduji jen nemohu odesílat z jednoho e-mailu v poštovním klientovi, tak si říkám, jestli nemám zase zanešený PC. Jednou se mi tento problém už stal a po vyčištění tady s radou se problém vyřešil. Tak prosím. Tady je log:

Logfile of random's system information tool 1.09 (written by random/random)
Run by marika at 2013-01-10 06:43:00
Microsoft Windows 7 Home Premium Service Pack 1
System drive C: has 88 GB (64%) free of 137 GB
Total RAM: 1791 MB (23% free)


======Listing Processes======

\SystemRoot\System32\smss.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
wininit.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
C:\windows\system32\services.exe
winlogon.exe
C:\windows\system32\lsass.exe
C:\windows\system32\lsm.exe
C:\windows\system32\svchost.exe -k DcomLaunch
C:\windows\system32\svchost.exe -k RPCSS
"c:\Program Files\Microsoft Security Client\MsMpEng.exe"
C:\windows\system32\atiesrxx.exe
C:\windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\windows\system32\svchost.exe -k netsvcs
C:\windows\servicing\TrustedInstaller.exe
C:\windows\system32\svchost.exe -k LocalService
C:\windows\system32\svchost.exe -k NetworkService
C:\windows\System32\spoolsv.exe
taskeng.exe {D5E55FF9-206B-4AF8-BFE7-95D923CA1A41}
C:\windows\system32\svchost.exe -k LocalServiceNoNetwork
"C:\Program Files (x86)\Common Files\ArcSoft\Connection Service\Bin\ACService.exe"
"C:\Program Files (x86)\Ashampoo\Ashampoo HDD Control 2\AHDDC2_Service.exe"
"C:\Program Files (x86)\Cobian Backup 11\cbVSCService11.exe"
C:\windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
C:\windows\System32\svchost.exe -k LocalServicePeerNet
"C:\Program Files (x86)\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe"
C:\windows\system32\svchost.exe -k imgsvc
"C:\Program Files (x86)\TeamViewer\Version8\TeamViewer_Service.exe"
"C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE"
WLIDSvcM.exe 1316
"c:\Program Files\Microsoft Security Client\NisSrv.exe"
C:\windows\system32\svchost.exe -k NetworkServiceNetworkRestricted
C:\windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe
C:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe
atieclxx
"taskhost.exe"
C:\windows\system32\DllHost.exe /Processid:{30D49246-D217-465F-B00B-AC9DDD652EB7}
"C:\windows\system32\Dwm.exe"
C:\windows\Explorer.EXE
C:\windows\system32\SearchIndexer.exe /Embedding
"C:\windows\system32\SearchProtocolHost.exe" Global\UsGthrFltPipeMssGthrPipe1_ Global\UsGthrCtrlFltPipeMssGthrPipe1 1 -2147483646 "Software\Microsoft\Windows Search" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT; MS Search 4.0 Robot)" "C:\ProgramData\Microsoft\Search\Data\Temp\usgthrsvc" "DownLevelDaemon"
"C:\Users\marika\AppData\Local\Google\Chrome\Application\chrome.exe"
"C:\Users\marika\AppData\Local\Google\Chrome\Application\chrome.exe" --type=gpu-process --channel="3672.1.2087666521\1887168472" --reduce-gpu-sandbox --disable-image-transport-surface --gpu-vendor-id=0x1002 --gpu-device-id=0x9712 --gpu-driver-vendor="ATI Technologies Inc." --gpu-driver-version=8.634.0.0 --ignored=" --type=renderer " /prefetch:12
"C:\Users\marika\AppData\Local\Google\Chrome\Application\chrome.exe" --type=renderer --lang=cs --force-fieldtrials=AsyncDns/disabled/ConnCountImpact/conn_count_6/ConnnectBackupJobs/ConnectBackupJobsEnabled/DnsImpact/default_enabled_prefetch/EnableStage3D/enabled_default/ForceCompositingMode/disable/GlobalSdch/global_enable_sdch/IdleSktToImpact/idle_timeout_10/InfiniteCache/No/NewTabButton/default/OmniboxDisallowInlineHQP/Standard/OmniboxSearchSuggest/13/OneClickSignIn/Standard/Prerender/PrerenderEnabled/ProxyConnectionImpact/proxy_connections_32/SBInterstitial/V2/SpdyCwnd/cwndMin16/SpeculativePrefetchingLearning/SpeculativePrefetchingDisabled/Test0PercentDefault/group_01/UMA-Dynamic-Binary-Uniformity-Trial/default/UMA-Session-Randomized-Uniformity-Trial-5-Percent/group_03/UMA-Uniformity-Trial-1-Percent/group_93/UMA-Uniformity-Trial-10-Percent/group_04/UMA-Uniformity-Trial-20-Percent/group_02/UMA-Uniformity-Trial-5-Percent/group_10/UMA-Uniformity-Trial-50-Percent/default/WarmSocketImpact/warm_socket/ --extension-process --renderer-print-preview --disable-accelerated-2d-canvas --channel="3672.2.462153504\1726775713" /prefetch:3
"C:\Users\marika\AppData\Local\Google\Chrome\Application\chrome.exe" --type=renderer --lang=cs --force-fieldtrials=AsyncDns/disabled/ConnCountImpact/conn_count_6/ConnnectBackupJobs/ConnectBackupJobsEnabled/DnsImpact/default_enabled_prefetch/EnableStage3D/enabled_default/ForceCompositingMode/disable/GlobalSdch/global_enable_sdch/IdleSktToImpact/idle_timeout_10/InfiniteCache/No/NewTabButton/default/OmniboxDisallowInlineHQP/Standard/OmniboxSearchSuggest/13/OneClickSignIn/Standard/Prerender/PrerenderEnabled/ProxyConnectionImpact/proxy_connections_32/SBInterstitial/V2/SpdyCwnd/cwndMin16/SpeculativePrefetchingLearning/SpeculativePrefetchingDisabled/Test0PercentDefault/group_01/UMA-Dynamic-Binary-Uniformity-Trial/default/UMA-Session-Randomized-Uniformity-Trial-5-Percent/group_03/UMA-Uniformity-Trial-1-Percent/group_93/UMA-Uniformity-Trial-10-Percent/group_04/UMA-Uniformity-Trial-20-Percent/group_02/UMA-Uniformity-Trial-5-Percent/group_10/UMA-Uniformity-Trial-50-Percent/default/WarmSocketImpact/warm_socket/ --extension-process --renderer-print-preview --disable-accelerated-2d-canvas --channel="3672.3.1600042082\1350643202" /prefetch:3
"C:\Users\marika\AppData\Local\Google\Chrome\Application\chrome.exe" --type=plugin --plugin-path="C:\Program Files (x86)\Sticky Password\npspAutofill.dll" --lang=cs --channel="3672.5.958050297\2009418835" /prefetch:4
"C:\Users\marika\AppData\Local\Google\Chrome\Application\chrome.exe" --type=renderer --lang=cs --force-fieldtrials=AsyncDns/disabled/ConnCountImpact/conn_count_6/ConnnectBackupJobs/ConnectBackupJobsEnabled/DnsImpact/default_enabled_prefetch/EnableStage3D/enabled_default/ForceCompositingMode/disable/GlobalSdch/global_enable_sdch/IdleSktToImpact/idle_timeout_10/InfiniteCache/No/NewTabButton/default/OmniboxDisallowInlineHQP/Standard/OmniboxHQPNewScoring/Standard/OmniboxSearchSuggest/13/OneClickSignIn/Standard/Prerender/PrerenderEnabled/PrerenderFromOmnibox/OmniboxPrerenderEnabled/ProxyConnectionImpact/proxy_connections_32/SBInterstitial/V2/SpdyCwnd/cwndMin16/SpeculativePrefetchingLearning/SpeculativePrefetchingDisabled/Test0PercentDefault/group_01/UMA-Dynamic-Binary-Uniformity-Trial/default/UMA-Session-Randomized-Uniformity-Trial-5-Percent/group_03/UMA-Uniformity-Trial-1-Percent/group_93/UMA-Uniformity-Trial-10-Percent/group_04/UMA-Uniformity-Trial-20-Percent/group_02/UMA-Uniformity-Trial-5-Percent/group_10/UMA-Uniformity-Trial-50-Percent/default/WarmSocketImpact/warm_socket/ --renderer-print-preview --disable-accelerated-2d-canvas --channel="3672.7.499545136\1653306521" /prefetch:3
"C:\Users\marika\AppData\Local\Google\Chrome\Application\chrome.exe" --type=renderer --lang=cs --force-fieldtrials=AsyncDns/disabled/ConnCountImpact/conn_count_6/ConnnectBackupJobs/ConnectBackupJobsEnabled/DnsImpact/default_enabled_prefetch/EnableStage3D/enabled_default/ForceCompositingMode/disable/GlobalSdch/global_enable_sdch/IdleSktToImpact/idle_timeout_10/InfiniteCache/No/NewTabButton/default/OmniboxDisallowInlineHQP/Standard/OmniboxHQPNewScoring/Standard/OmniboxSearchSuggest/13/OneClickSignIn/Standard/Prerender/PrerenderEnabled/PrerenderFromOmnibox/OmniboxPrerenderEnabled/ProxyConnectionImpact/proxy_connections_32/SBInterstitial/V2/SpdyCwnd/cwndMin16/SpeculativePrefetchingLearning/SpeculativePrefetchingDisabled/Test0PercentDefault/group_01/UMA-Dynamic-Binary-Uniformity-Trial/default/UMA-Session-Randomized-Uniformity-Trial-5-Percent/group_03/UMA-Uniformity-Trial-1-Percent/group_93/UMA-Uniformity-Trial-10-Percent/group_04/UMA-Uniformity-Trial-20-Percent/group_02/UMA-Uniformity-Trial-5-Percent/group_10/UMA-Uniformity-Trial-50-Percent/default/WarmSocketImpact/warm_socket/ --renderer-print-preview --disable-accelerated-2d-canvas --channel="3672.8.77792318\824304151" /prefetch:3
"C:\Users\marika\AppData\Local\Google\Chrome\Application\chrome.exe" --type=ppapi --channel="3672.9.208878203\486356538" --lang=cs --ignored=" --type=renderer " /prefetch:13
"C:\Program Files (x86)\Sticky Password\stpass.exe"
C:\windows\system32\sppsvc.exe
"C:\Users\marika\AppData\Local\Google\Chrome\Application\chrome.exe" --type=renderer --lang=cs --force-fieldtrials=AsyncDns/disabled/ConnCountImpact/conn_count_6/ConnnectBackupJobs/ConnectBackupJobsEnabled/DnsImpact/default_enabled_prefetch/EnableStage3D/enabled_default/ForceCompositingMode/disable/GlobalSdch/global_enable_sdch/HttpPipeliningCompatibility/disable_test/IdleSktToImpact/idle_timeout_10/InfiniteCache/No/NetworkConnectivity/disable_network_stats/NewTabButton/default/OmniboxDisallowInlineHQP/Standard/OmniboxHQPNewScoring/Standard/OmniboxSearchSuggest/13/OneClickSignIn/Standard/Prerender/PrerenderEnabled/PrerenderFromOmnibox/OmniboxPrerenderEnabled/ProxyConnectionImpact/proxy_connections_32/SBInterstitial/V2/SpdyCwnd/cwndMin16/SpeculativePrefetchingLearning/SpeculativePrefetchingDisabled/Test0PercentDefault/group_01/UMA-Dynamic-Binary-Uniformity-Trial/default/UMA-Session-Randomized-Uniformity-Trial-5-Percent/group_03/UMA-Uniformity-Trial-1-Percent/group_93/UMA-Uniformity-Trial-10-Percent/group_04/UMA-Uniformity-Trial-20-Percent/group_02/UMA-Uniformity-Trial-5-Percent/group_10/UMA-Uniformity-Trial-50-Percent/default/WarmSocketImpact/warm_socket/ --renderer-print-preview --disable-accelerated-2d-canvas --channel="3672.10.2003252058\602062566" /prefetch:3
C:\windows\system32\wbem\wmiprvse.exe
"C:\windows\system32\SearchFilterHost.exe" 0 512 516 524 65536 520
"C:\Users\marika\Downloads\RSITx64 (1).exe"
C:\windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -UseCLSID {DBE16812-44F2-49A1-8BD3-D82F09B4AA15} -Comment "NGen Worker Process"

======Scheduled tasks folder======

C:\windows\tasks\GoogleUpdateTaskUserS-1-5-21-1884878553-492949299-735548271-1000Core.job
C:\windows\tasks\GoogleUpdateTaskUserS-1-5-21-1884878553-492949299-735548271-1000UA.job

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
Windows Live ID Sign-in Helper - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2010-09-21 529280]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{B4F3A835-0E21-4959-BA22-42B3008E02FF}]
Office Document Cache Handler - C:\PROGRA~1\MICROS~2\Office14\URLREDIR.DLL [2010-12-21 689040]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
Adobe PDF Link Helper - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2012-07-27 63944]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{6EBF7485-159F-4bff-A14F-B9E3AAC4465B}]
Search Helper - C:\Program Files (x86)\Microsoft\Search Enhancement Pack\Search Helper\SEPsearchhelperie.dll [2010-09-22 191792]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{B4F3A835-0E21-4959-BA22-42B3008E02FF}]
Office Document Cache Handler - C:\PROGRA~2\MICROS~1\Office14\URLREDIR.DLL [2010-12-21 561552]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Cobian Backup 11 interface]
C:\Program Files (x86)\Cobian Backup 11\cbInterface.exe [2012-07-31 4407808]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Google Update]
C:\Users\marika\AppData\Local\Google\Update\GoogleUpdate.exe [2012-12-15 116648]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\MSC]
c:\Program Files\Microsoft Security Client\msseces.exe [2012-09-12 1289704]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Skytel]
C:\Program Files\Realtek\Audio\HDA\Skytel.exe [2009-06-24 1833504]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\StickyPassword]
C:\Program Files (x86)\Sticky Password\stpass.exe [2012-11-15 3213184]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
"AppInit_DLLs"=" "

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - C:\windows\system32\webcheck.dll [2011-05-17 249344]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=credssp.dll

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MsMpSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\avas_service]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\avss_service]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\MsMpSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\tpavdrw_service]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\tpmgma_service]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorAdmin"=5
"ConsentPromptBehaviorUser"=3
"EnableUIADesktopToggle"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=145
"NoDrives"=0

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDrives"=0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.msadpcm"=msadp32.acm
"midimapper"=midimap.dll
"wavemapper"=msacm32.drv
"VIDC.UYVY"=msyuv.dll
"VIDC.YUY2"=msyuv.dll
"VIDC.YVYU"=msyuv.dll
"VIDC.IYUV"=iyuv_32.dll
"vidc.i420"=iyuv_32.dll
"VIDC.YVU9"=tsbyuv.dll
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"aux1"=wdmaud.drv
"MSVideo8"=VfWWDM32.dll

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1

======List of files/folders created in the last 1 month======

2013-01-10 06:43:00 ----D---- C:\rsit
2013-01-10 06:35:35 ----A---- C:\windows\system32\FNTCACHE.DAT
2013-01-09 07:41:47 ----A---- C:\windows\system32\win32spl.dll
2013-01-09 07:41:46 ----A---- C:\windows\SYSWOW64\win32spl.dll
2013-01-09 07:41:01 ----A---- C:\windows\system32\msxml6.dll
2013-01-09 07:40:59 ----A---- C:\windows\system32\msxml3.dll
2013-01-09 07:40:56 ----A---- C:\windows\SYSWOW64\msxml6.dll
2013-01-09 07:40:55 ----A---- C:\windows\SYSWOW64\msxml3.dll
2013-01-09 07:19:38 ----A---- C:\windows\system32\ncrypt.dll
2013-01-09 07:19:37 ----A---- C:\windows\SYSWOW64\ncrypt.dll
2013-01-09 07:19:13 ----A---- C:\windows\system32\usp10.dll
2013-01-09 07:19:12 ----A---- C:\windows\SYSWOW64\usp10.dll
2013-01-09 07:18:36 ----A---- C:\windows\system32\Wpc.dll
2013-01-09 07:18:35 ----A---- C:\windows\system32\gameux.dll
2013-01-09 07:18:34 ----A---- C:\windows\SYSWOW64\gameux.dll
2013-01-09 07:18:33 ----A---- C:\windows\SYSWOW64\Wpc.dll
2013-01-09 07:14:47 ----A---- C:\windows\system32\KernelBase.dll
2013-01-09 07:14:44 ----A---- C:\windows\SYSWOW64\KernelBase.dll
2013-01-09 07:14:42 ----A---- C:\windows\system32\kernel32.dll
2013-01-09 07:14:38 ----A---- C:\windows\SYSWOW64\kernel32.dll
2013-01-09 07:14:37 ----A---- C:\windows\system32\wow64win.dll
2013-01-09 07:14:37 ----A---- C:\windows\system32\winsrv.dll
2013-01-09 07:14:36 ----A---- C:\windows\system32\wow64cpu.dll
2013-01-09 07:14:36 ----A---- C:\windows\system32\wow64.dll
2013-01-09 07:14:36 ----A---- C:\windows\system32\conhost.exe
2013-01-09 07:14:34 ----A---- C:\windows\SYSWOW64\ntvdm64.dll
2013-01-09 07:14:34 ----A---- C:\windows\system32\ntvdm64.dll
2013-01-09 07:14:33 ----A---- C:\windows\SYSWOW64\wow32.dll
2013-01-09 07:14:32 ----AH---- C:\windows\system32\api-ms-win-core-string-l1-1-0.dll
2013-01-09 07:14:27 ----AH---- C:\windows\SYSWOW64\api-ms-win-core-file-l1-1-0.dll
2013-01-09 07:14:26 ----AH---- C:\windows\system32\api-ms-win-core-file-l1-1-0.dll
2013-01-09 07:14:25 ----AH---- C:\windows\SYSWOW64\api-ms-win-core-errorhandling-l1-1-0.dll
2013-01-09 07:14:25 ----AH---- C:\windows\system32\api-ms-win-core-delayload-l1-1-0.dll
2013-01-09 07:14:24 ----AH---- C:\windows\SYSWOW64\api-ms-win-core-delayload-l1-1-0.dll
2013-01-09 07:14:23 ----AH---- C:\windows\system32\api-ms-win-security-base-l1-1-0.dll
2013-01-09 07:14:23 ----AH---- C:\windows\system32\api-ms-win-core-xstate-l1-1-0.dll
2013-01-09 07:14:23 ----AH---- C:\windows\system32\api-ms-win-core-util-l1-1-0.dll
2013-01-09 07:14:22 ----AH---- C:\windows\SYSWOW64\api-ms-win-core-sysinfo-l1-1-0.dll
2013-01-09 07:14:22 ----AH---- C:\windows\SYSWOW64\api-ms-win-core-synch-l1-1-0.dll
2013-01-09 07:14:22 ----AH---- C:\windows\system32\api-ms-win-core-threadpool-l1-1-0.dll
2013-01-09 07:14:22 ----AH---- C:\windows\system32\api-ms-win-core-sysinfo-l1-1-0.dll
2013-01-09 07:14:21 ----AH---- C:\windows\SYSWOW64\api-ms-win-core-string-l1-1-0.dll
2013-01-09 07:14:21 ----AH---- C:\windows\SYSWOW64\api-ms-win-core-profile-l1-1-0.dll
2013-01-09 07:14:21 ----AH---- C:\windows\system32\api-ms-win-core-synch-l1-1-0.dll
2013-01-09 07:14:21 ----AH---- C:\windows\system32\api-ms-win-core-rtlsupport-l1-1-0.dll
2013-01-09 07:14:21 ----AH---- C:\windows\system32\api-ms-win-core-profile-l1-1-0.dll
2013-01-09 07:14:20 ----AH---- C:\windows\SYSWOW64\api-ms-win-core-processthreads-l1-1-0.dll
2013-01-09 07:14:20 ----AH---- C:\windows\SYSWOW64\api-ms-win-core-processenvironment-l1-1-0.dll
2013-01-09 07:14:20 ----AH---- C:\windows\SYSWOW64\api-ms-win-core-namedpipe-l1-1-0.dll
2013-01-09 07:14:20 ----AH---- C:\windows\system32\api-ms-win-core-processthreads-l1-1-0.dll
2013-01-09 07:14:20 ----AH---- C:\windows\system32\api-ms-win-core-processenvironment-l1-1-0.dll
2013-01-09 07:14:19 ----AH---- C:\windows\SYSWOW64\api-ms-win-core-misc-l1-1-0.dll
2013-01-09 07:14:19 ----AH---- C:\windows\system32\api-ms-win-core-namedpipe-l1-1-0.dll
2013-01-09 07:14:19 ----AH---- C:\windows\system32\api-ms-win-core-misc-l1-1-0.dll
2013-01-09 07:14:18 ----AH---- C:\windows\SYSWOW64\api-ms-win-core-memory-l1-1-0.dll
2013-01-09 07:14:18 ----AH---- C:\windows\system32\api-ms-win-core-memory-l1-1-0.dll
2013-01-09 07:14:17 ----AH---- C:\windows\SYSWOW64\api-ms-win-core-localregistry-l1-1-0.dll
2013-01-09 07:14:17 ----AH---- C:\windows\SYSWOW64\api-ms-win-core-libraryloader-l1-1-0.dll
2013-01-09 07:14:17 ----AH---- C:\windows\system32\api-ms-win-core-localregistry-l1-1-0.dll
2013-01-09 07:14:16 ----AH---- C:\windows\SYSWOW64\api-ms-win-core-io-l1-1-0.dll
2013-01-09 07:14:16 ----AH---- C:\windows\SYSWOW64\api-ms-win-core-interlocked-l1-1-0.dll
2013-01-09 07:14:16 ----AH---- C:\windows\system32\api-ms-win-core-libraryloader-l1-1-0.dll
2013-01-09 07:14:16 ----AH---- C:\windows\system32\api-ms-win-core-io-l1-1-0.dll
2013-01-09 07:14:15 ----AH---- C:\windows\SYSWOW64\api-ms-win-core-heap-l1-1-0.dll
2013-01-09 07:14:15 ----AH---- C:\windows\system32\api-ms-win-core-interlocked-l1-1-0.dll
2013-01-09 07:14:15 ----AH---- C:\windows\system32\api-ms-win-core-heap-l1-1-0.dll
2013-01-09 07:14:14 ----AH---- C:\windows\SYSWOW64\api-ms-win-core-handle-l1-1-0.dll
2013-01-09 07:14:14 ----AH---- C:\windows\SYSWOW64\api-ms-win-core-fibers-l1-1-0.dll
2013-01-09 07:14:14 ----AH---- C:\windows\system32\api-ms-win-core-handle-l1-1-0.dll
2013-01-09 07:14:14 ----AH---- C:\windows\system32\api-ms-win-core-fibers-l1-1-0.dll
2013-01-09 07:14:14 ----AH---- C:\windows\system32\api-ms-win-core-errorhandling-l1-1-0.dll
2013-01-09 07:14:13 ----AH---- C:\windows\SYSWOW64\api-ms-win-core-debug-l1-1-0.dll
2013-01-09 07:14:13 ----AH---- C:\windows\SYSWOW64\api-ms-win-core-datetime-l1-1-0.dll
2013-01-09 07:14:13 ----AH---- C:\windows\system32\api-ms-win-core-debug-l1-1-0.dll
2013-01-09 07:14:13 ----AH---- C:\windows\system32\api-ms-win-core-datetime-l1-1-0.dll
2013-01-09 07:14:12 ----AH---- C:\windows\SYSWOW64\api-ms-win-security-base-l1-1-0.dll
2013-01-09 07:14:11 ----AH---- C:\windows\SYSWOW64\api-ms-win-core-xstate-l1-1-0.dll
2013-01-09 07:14:11 ----AH---- C:\windows\SYSWOW64\api-ms-win-core-util-l1-1-0.dll
2013-01-09 07:14:11 ----AH---- C:\windows\SYSWOW64\api-ms-win-core-threadpool-l1-1-0.dll
2013-01-09 07:14:11 ----AH---- C:\windows\SYSWOW64\api-ms-win-core-rtlsupport-l1-1-0.dll
2013-01-09 07:14:08 ----A---- C:\windows\SYSWOW64\setup16.exe
2013-01-09 07:14:05 ----A---- C:\windows\SYSWOW64\instnm.exe
2013-01-09 07:14:04 ----AH---- C:\windows\SYSWOW64\api-ms-win-core-localization-l1-1-0.dll
2013-01-09 07:14:04 ----AH---- C:\windows\SYSWOW64\api-ms-win-core-console-l1-1-0.dll
2013-01-09 07:14:04 ----AH---- C:\windows\system32\api-ms-win-core-localization-l1-1-0.dll
2013-01-09 07:13:58 ----AH---- C:\windows\system32\api-ms-win-core-console-l1-1-0.dll
2013-01-09 07:13:50 ----A---- C:\windows\SYSWOW64\user.exe
2013-01-02 17:29:26 ----D---- C:\Program Files (x86)\LibreOffice 3.6
2012-12-22 09:53:02 ----A---- C:\windows\SYSWOW64\atmlib.dll
2012-12-22 09:53:01 ----A---- C:\windows\system32\atmlib.dll
2012-12-22 09:52:55 ----A---- C:\windows\system32\atmfd.dll
2012-12-22 09:52:35 ----A---- C:\windows\SYSWOW64\atmfd.dll
2012-12-17 09:39:58 ----N---- C:\windows\SYSWOW64\BRRBTOOL.EXE
2012-12-17 09:39:57 -------- C:\windows\SYSWOW64\brlmw03a.ini
2012-12-17 09:39:57 -------- C:\windows\SYSWOW64\brlmw03a.dll
2012-12-17 09:39:57 -------- C:\windows\SYSWOW64\brlm03a.dll
2012-12-17 09:39:55 ----D---- C:\Program Files (x86)\Brownie
2012-12-17 09:39:55 ----A---- C:\windows\HL-2030.INI
2012-12-17 09:39:55 -------- C:\windows\SYSWOW64\BROSNMP.DLL
2012-12-17 09:39:43 ----D---- C:\Program Files (x86)\Brother
2012-12-17 09:39:42 -------- C:\windows\SYSWOW64\BRWEBUP.EXE
2012-12-17 09:39:42 -------- C:\windows\SYSWOW64\BrWebIns.dll
2012-12-15 13:12:14 ----D---- C:\Program Files (x86)\Cobian Backup 11
2012-12-15 13:07:51 ----D---- C:\Users\marika\AppData\Roaming\LibreOffice
2012-12-15 11:08:02 ----D---- C:\Program Files (x86)\Microsoft Security Client
2012-12-15 11:07:55 ----D---- C:\Program Files\Microsoft Security Client
2012-12-13 19:20:35 ----A---- C:\windows\system32\mshtmled.dll
2012-12-13 19:20:34 ----A---- C:\windows\SYSWOW64\vbscript.dll
2012-12-13 19:20:34 ----A---- C:\windows\SYSWOW64\mshtmled.dll
2012-12-13 19:20:33 ----A---- C:\windows\SYSWOW64\ieui.dll
2012-12-13 19:20:32 ----A---- C:\windows\SYSWOW64\ieUnatt.exe
2012-12-13 19:20:32 ----A---- C:\windows\system32\ieUnatt.exe
2012-12-13 19:20:32 ----A---- C:\windows\system32\ieui.dll
2012-12-13 19:20:31 ----A---- C:\windows\SYSWOW64\url.dll
2012-12-13 19:20:31 ----A---- C:\windows\system32\url.dll
2012-12-13 19:20:30 ----A---- C:\windows\SYSWOW64\urlmon.dll
2012-12-13 19:20:29 ----A---- C:\windows\system32\urlmon.dll
2012-12-13 19:20:28 ----A---- C:\windows\system32\msfeeds.dll
2012-12-13 19:20:28 ----A---- C:\windows\system32\jscript9.dll
2012-12-13 19:20:27 ----A---- C:\windows\SYSWOW64\msfeeds.dll
2012-12-13 19:20:26 ----A---- C:\windows\SYSWOW64\wininet.dll
2012-12-13 19:20:25 ----A---- C:\windows\system32\wininet.dll
2012-12-13 19:20:25 ----A---- C:\windows\system32\jsproxy.dll
2012-12-13 19:20:23 ----A---- C:\windows\SYSWOW64\jscript9.dll
2012-12-13 19:20:23 ----A---- C:\windows\SYSWOW64\jscript.dll
2012-12-13 19:20:22 ----A---- C:\windows\system32\vbscript.dll
2012-12-13 19:20:22 ----A---- C:\windows\system32\jscript.dll
2012-12-13 19:20:21 ----A---- C:\windows\SYSWOW64\iertutil.dll
2012-12-13 19:20:21 ----A---- C:\windows\system32\iertutil.dll
2012-12-13 19:20:20 ----A---- C:\windows\SYSWOW64\jsproxy.dll
2012-12-13 19:20:16 ----A---- C:\windows\SYSWOW64\mshtml.dll
2012-12-13 19:20:14 ----A---- C:\windows\system32\mshtml.dll
2012-12-13 19:20:12 ----A---- C:\windows\system32\ieframe.dll
2012-12-13 19:20:11 ----A---- C:\windows\SYSWOW64\ieframe.dll
2012-12-13 09:11:28 ----A---- C:\windows\system32\win32k.sys
2012-12-13 09:08:19 ----A---- C:\windows\system32\dpnet.dll
2012-12-13 09:08:18 ----A---- C:\windows\SYSWOW64\dpnet.dll
2012-12-13 06:56:21 ----A---- C:\windows\system32\tzres.dll
2012-12-13 06:56:16 ----A---- C:\windows\SYSWOW64\tzres.dll

======List of files/folders modified in the last 1 month======

2013-01-10 06:43:10 ----D---- C:\windows\Prefetch
2013-01-10 06:43:06 ----D---- C:\Program Files\trend micro
2013-01-10 06:42:50 ----RSD---- C:\windows\assembly
2013-01-10 06:42:37 ----D---- C:\windows\Temp
2013-01-10 06:42:01 ----D---- C:\windows\SoftwareDistribution
2013-01-10 06:38:21 ----D---- C:\windows\Microsoft.NET
2013-01-10 06:38:00 ----D---- C:\windows\system32\config
2013-01-10 06:37:56 ----D---- C:\windows\winsxs
2013-01-10 06:37:50 ----D---- C:\windows\inf
2013-01-10 06:35:51 ----D---- C:\Windows
2013-01-10 06:35:47 ----D---- C:\windows\debug
2013-01-10 06:35:35 ----D---- C:\windows\System32
2013-01-10 06:34:23 ----D---- C:\windows\SysWOW64
2013-01-10 06:34:00 ----D---- C:\windows\SYSWOW64\cs-CZ
2013-01-10 06:33:52 ----D---- C:\windows\system32\cs-CZ
2013-01-10 06:33:09 ----D---- C:\windows\AppPatch
2013-01-09 18:36:25 ----SHD---- C:\System Volume Information
2013-01-09 18:34:31 ----D---- C:\Users\marika\AppData\Roaming\Skype
2013-01-09 13:07:35 ----D---- C:\Users\marika\AppData\Roaming\ICQ
2013-01-09 07:10:19 ----D---- C:\windows\system32\catroot
2013-01-09 07:09:46 ----D---- C:\windows\system32\catroot2
2013-01-09 07:07:52 ----D---- C:\Users\marika\AppData\Roaming\Wise Disk Cleaner
2013-01-07 15:35:55 ----D---- C:\windows\system32\NDF
2013-01-02 17:38:54 ----SHD---- C:\windows\Installer
2013-01-02 17:36:28 ----D---- C:\Config.Msi
2013-01-02 17:35:21 ----D---- C:\windows\ShellNew
2013-01-02 17:29:26 ----RD---- C:\Program Files (x86)
2013-01-01 18:03:37 ----D---- C:\windows\SYSWOW64\LogFiles
2013-01-01 18:03:37 ----D---- C:\windows\system32\LogFiles
2013-01-01 14:36:46 ----A---- C:\windows\BRWMARK.INI
2013-01-01 14:29:24 ----A---- C:\windows\Brownie.ini
2012-12-27 10:00:33 ----A---- C:\windows\system32\PerfStringBackup.INI
2012-12-27 08:22:04 ----D---- C:\Program Files\CCleaner
2012-12-17 16:20:13 ----D---- C:\windows\rescache
2012-12-17 09:39:58 ----A---- C:\windows\BRVIDEO.INI
2012-12-17 09:39:37 ----HD---- C:\Program Files (x86)\InstallShield Installation Information
2012-12-17 09:02:01 ----D---- C:\windows\system32\Tasks
2012-12-17 09:01:42 ----RSD---- C:\windows\Fonts
2012-12-17 09:01:33 ----D---- C:\Program Files (x86)\TeamViewer
2012-12-15 13:28:33 ----D---- C:\ProgramData\AVAST Software
2012-12-15 13:18:08 ----RD---- C:\Program Files (x86)\Skype
2012-12-15 13:16:36 ----RD---- C:\Program Files
2012-12-15 11:45:00 ----D---- C:\windows\Tasks
2012-12-15 11:08:06 ----D---- C:\windows\system32\drivers
2012-12-15 11:08:02 ----SD---- C:\ProgramData\Microsoft
2012-12-15 11:03:16 ----D---- C:\Program Files (x86)\Opera
2012-12-15 11:03:14 ----D---- C:\Users\marika\AppData\Roaming\Opera
2012-12-15 11:02:44 ----D---- C:\ProgramData
2012-12-15 11:02:44 ----D---- C:\Program Files\NetSoftware
2012-12-15 11:00:30 ----D---- C:\Program Files (x86)\Mozilla Firefox
2012-12-14 13:37:10 ----D---- C:\Program Files (x86)\Internet Explorer
2012-12-14 13:37:08 ----D---- C:\windows\SYSWOW64\migration
2012-12-14 13:37:03 ----D---- C:\windows\system32\migration
2012-12-14 13:37:00 ----D---- C:\Program Files\Internet Explorer
2012-12-13 19:28:50 ----D---- C:\ProgramData\Microsoft Help
2012-12-13 19:24:26 ----A---- C:\windows\system32\MRT.exe

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 AtiPcie;AMD PCI Express (3GIO) Filter; C:\windows\system32\DRIVERS\AtiPcie.sys [2009-05-05 16440]
R0 MpFilter;Microsoft Malware Protection Driver; C:\windows\system32\DRIVERS\MpFilter.sys [2012-08-30 228768]
R0 pciide;pciide; C:\windows\system32\drivers\pciide.sys [2009-07-14 12352]
R0 rdyboost;ReadyBoost; C:\windows\System32\drivers\rdyboost.sys [2010-11-20 213888]
R1 vwififlt;Virtual WiFi Filter Driver; C:\windows\system32\DRIVERS\vwififlt.sys [2009-07-14 59904]
R2 NisDrv;Microsoft Network Inspection System; C:\windows\system32\DRIVERS\NisDrvWFP.sys [2012-08-30 128456]
R3 atikmdag;atikmdag; C:\windows\system32\DRIVERS\atikmdag.sys [2009-07-30 6038016]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\windows\system32\drivers\RTKVHD64.sys [2009-06-24 1787168]
R3 netr28x;Ralink 802.11n Extensible Wireless Driver; C:\windows\system32\DRIVERS\netr28x.sys [2009-06-19 712704]
R3 RTHDMIAzAudService;Service for HDMI; C:\windows\system32\drivers\RtHDMIVX.sys [2009-06-24 205472]
R3 RTL8167;Realtek 8167 NT Driver; C:\windows\system32\DRIVERS\Rt64win7.sys [2009-05-22 215040]
R3 vwifimp;Microsoft Virtual WiFi Miniport Service; C:\windows\system32\DRIVERS\vwifimp.sys [2009-07-14 17920]
S3 BridgeMP;@%SystemRoot%\system32\bridgeres.dll,-1; C:\windows\system32\DRIVERS\bridge.sys [2009-07-14 95232]
S3 esihdrv;esihdrv; \??\C:\Users\marika\AppData\Local\Temp\esihdrv.sys []
S3 fssfltr;FssFltr; C:\windows\system32\DRIVERS\fssfltr.sys [2010-09-22 48488]
S3 RSUSBSTOR;RtsUStor.Sys Realtek USB Card Reader; C:\windows\System32\Drivers\RtsUStor.sys [2009-06-04 216064]
S3 RtsUIR;Realtek IR Driver; C:\windows\system32\DRIVERS\Rts516xIR.sys []
S3 sdbus;sdbus; C:\windows\system32\drivers\sdbus.sys [2010-11-20 109056]
S3 smserial;smserial; C:\windows\system32\DRIVERS\SmSerl64.sys [2009-06-10 1227776]
S3 TsUsbFlt;TsUsbFlt; C:\windows\system32\drivers\tsusbflt.sys [2010-11-20 59392]
S3 USBCCID;Realtek Smartcard Reader Driver; C:\windows\system32\DRIVERS\RtsUCcid.sys []
S3 WinUsb;WinUsb; C:\windows\system32\DRIVERS\WinUsb.sys [2010-11-20 41984]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 ACDaemon;ArcSoft Connect Daemon; C:\Program Files (x86)\Common Files\ArcSoft\Connection Service\Bin\ACService.exe [2010-03-18 113152]
R2 AHDDC2;Ashampoo HDD Control 2 Service; C:\Program Files (x86)\Ashampoo\Ashampoo HDD Control 2\AHDDC2_Service.exe [2011-04-05 1518976]
R2 AMD External Events Utility;AMD External Events Utility; C:\windows\system32\atiesrxx.exe [2009-07-30 203264]
R2 cbVSCService11;Cobian Backup 11 Stínová kopie - Requester; C:\Program Files (x86)\Cobian Backup 11\cbVSCService11.exe [2012-07-31 67584]
R2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64; C:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2010-03-18 138576]
R2 MsMpSvc;Microsoft Antimalware Service; c:\Program Files\Microsoft Security Client\MsMpEng.exe [2012-09-12 22072]
R2 SeaPort;SeaPort; C:\Program Files (x86)\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe [2010-09-22 249136]
R2 TeamViewer8;TeamViewer 8; C:\Program Files (x86)\TeamViewer\Version8\TeamViewer_Service.exe [2012-11-29 3463080]
R2 wlidsvc;Windows Live ID Sign-in Assistant; C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE [2010-09-21 2286976]
R3 NisSrv;@c:\Program Files\Microsoft Security Client\MpAsDesc.dll,-243; c:\Program Files\Microsoft Security Client\NisSrv.exe [2012-09-12 368896]
S3 aspnet_state;ASP.NET State Service; C:\windows\Microsoft.NET\Framework64\v4.0.30319\aspnet_state.exe [2010-03-18 44376]
S3 DfSdkS;Defragmentation-Service; C:\Program Files (x86)\Ashampoo\Ashampoo HDD Control 2\DfSdkS64.exe [2009-08-24 544768]
S3 fsssvc;Windows Live Family Safety Service; C:\Program Files (x86)\Windows Live\Family Safety\fsssvc.exe [2010-09-22 1493352]
S3 ose;Office Source Engine; C:\Program Files (x86)\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2010-01-09 149352]
S3 osppsvc;Office Software Protection Platform; C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE [2010-01-09 4925184]
S3 WatAdminSvc;@%SystemRoot%\system32\Wat\WatUX.exe,-601; C:\windows\system32\Wat\WatAdminSvc.exe [2011-05-17 1255736]
S4 NetMsmqActivator;@C:\windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8195; C:\windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2010-03-18 124240]
S4 NetPipeActivator;@C:\windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8197; C:\windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2010-03-18 124240]
S4 NetTcpActivator;@C:\windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8199; C:\windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2010-03-18 124240]
S4 wlcrasvc;Windows Live Mesh remote connections service; C:\Program Files\Windows Live\Mesh\wlcrasvc.exe [2010-09-22 57184]

-----------------EOF-----------------

[JaRon]

Ahoj,
nevidim niz zavazne a zavadne - ale preventivne mozes prescanovat s MBAM - rychla kontrola

[jasnenka]

Díky..provedla jsem rychlou kontrolu, jak píšete a něco jednou nalezl...

Malwarebytes Anti-Malware 1.70.0.1100
www.malwarebytes.org

Verze: v2013.01.10.02

Windows 7 Service Pack 1 x64 NTFS
Internet Explorer 9.0.8112.16421
marika :: MARIKA-MSI [administrátor]

10.1.2013 9:38:47
MBAM-log-2013-01-10 (10-00-43).txt

Typ: Rychlá kontrola
Nastavení kontroly povoleno: Paměť | Po spuštění | Registr | Systémové soubory | Heuristická analýza Extra | Heuristická analýza Shuriken | PUP | PUM
Nastavení kontroly zakázáno: P2P
Kontrolované objekty: 211583
Uplynulý čas: 21 minut, 41 sekund

Nalezené procesy v paměti: 0
(Žádné škodlivé položky nebyly zjištěny)

Nalezené moduly v paměti: 0
(Žádné škodlivé položky nebyly zjištěny)

Nalezené klíče v registru: 1
HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{f34c9277-6577-4dff-b2d7-7d58092f272f} (PUP.Datamngr) -> Nebyla provedena žádná instrukce.

Nalezené hodnoty v registru: 0
(Žádné škodlivé položky nebyly zjištěny)

Nalezené datové položky v registru: 0
(Žádné škodlivé položky nebyly zjištěny)

Nalezené složky: 0
(Žádné škodlivé položky nebyly zjištěny)

Nalezené soubory: 0
(Žádné škodlivé položky nebyly zjištěny)

(konec)

[jasnenka]

Dala jsem toho jednoho šmejda tedy vymazat a nyní je to OK viz:

Malwarebytes Anti-Malware 1.70.0.1100
www.malwarebytes.org

Verze: v2013.01.10.02

Windows 7 Service Pack 1 x64 NTFS
Internet Explorer 9.0.8112.16421
marika :: MARIKA-MSI [administrátor]

10.1.2013 10:03:59
mbam-log-2013-01-10 (10-03-59).txt

Typ: Rychlá kontrola
Nastavení kontroly povoleno: Paměť | Po spuštění | Registr | Systémové soubory | Heuristická analýza Extra | Heuristická analýza Shuriken | PUP | PUM
Nastavení kontroly zakázáno: P2P
Kontrolované objekty: 211480
Uplynulý čas: 5 minut, 43 sekund

Nalezené procesy v paměti: 0
(Žádné škodlivé položky nebyly zjištěny)

Nalezené moduly v paměti: 0
(Žádné škodlivé položky nebyly zjištěny)

Nalezené klíče v registru: 0
(Žádné škodlivé položky nebyly zjištěny)

Nalezené hodnoty v registru: 0
(Žádné škodlivé položky nebyly zjištěny)

Nalezené datové položky v registru: 0
(Žádné škodlivé položky nebyly zjištěny)

Nalezené složky: 0
(Žádné škodlivé položky nebyly zjištěny)

Nalezené soubory: 0
(Žádné škodlivé položky nebyly zjištěny)

(konec)

[JaRon]

dobre si urobila - hotovo

[jasnenka]

ale stále mi nejde z jednoho e-mailu vpoštovním klientovi odesílat e-mail. Je to e-mail od seznamu ale mám tam i jiné a od nich to odesílat jde takže v nastavení to nebude. Jednou se to podařilo vyřešit dle vašich rad tady...

[JaRon]

mozme skusit CF, aj ked si myslim, ze skor bude problem v nastaveni konkretneho uctu ,,,
stiahni a uloz na plochu ComboFix

potom spust pod uctom s administratorskym opravnenim


akcia trva cca. 5-10 minut, niekedy i dlhsie -, Pocas scanu nespustaj ziadne ine aplikacie

Nie je dovod na paniku ak stroj bude restartovany
upozornenie: ak pouzivas antispyware s rezidentnim stitem, ten pred scanom vypni.

po restarte aplikacie vytvori log, ulozeny na C:\Combofix.txt (jeho obsah vloz sem)

[jasnenka]

To je hloubková kontrola jako?

Log zde:

ComboFix 13-01-08.01 - marika 10.01.2013 11:38:26.4.2 - x64
Microsoft Windows 7 Home Premium 6.1.7601.1.1250.420.1029.18.1791.744 [GMT 1:00]
Spuštěný z: c:\users\marika\Downloads\ComboFix.exe
AV: Microsoft Security Essentials *Disabled/Updated* {B140BF4E-23BB-4198-90AB-A51A4C60A69C}
SP: Microsoft Security Essentials *Disabled/Updated* {0A215EAA-0581-4E16-AA1B-9E6837E7EC21}
SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.
.
((((((((((((((((((((((((( Soubory vytvořené od 2012-12-10 do 2013-01-10 )))))))))))))))))))))))))))))))
.
.
2013-01-10 10:49 . 2013-01-10 10:49 -------- d-----w- c:\users\Public\AppData\Local\temp
2013-01-10 10:49 . 2013-01-10 10:49 -------- d-----w- c:\users\Default\AppData\Local\temp
2013-01-10 10:34 . 2012-11-08 08:24 9125352 ----a-w- c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\{2D8441B4-F16B-4A0D-9E16-495732E749DF}\mpengine.dll
2013-01-10 05:43 . 2013-01-10 05:43 -------- d-----w- C:\rsit
2013-01-09 06:41 . 2012-11-09 05:45 750592 ----a-w- c:\windows\system32\win32spl.dll
2013-01-09 06:41 . 2012-11-09 04:43 492032 ----a-w- c:\windows\SysWow64\win32spl.dll
2013-01-09 06:41 . 2012-11-01 05:43 2002432 ----a-w- c:\windows\system32\msxml6.dll
2013-01-09 06:40 . 2012-11-01 05:43 1882624 ----a-w- c:\windows\system32\msxml3.dll
2013-01-09 06:40 . 2012-11-01 04:47 1389568 ----a-w- c:\windows\SysWow64\msxml6.dll
2013-01-09 06:40 . 2012-11-01 04:47 1236992 ----a-w- c:\windows\SysWow64\msxml3.dll
2013-01-09 06:19 . 2012-11-20 05:48 307200 ----a-w- c:\windows\system32\ncrypt.dll
2013-01-09 06:19 . 2012-11-20 04:51 220160 ----a-w- c:\windows\SysWow64\ncrypt.dll
2013-01-09 06:19 . 2012-11-22 05:44 800768 ----a-w- c:\windows\system32\usp10.dll
2013-01-09 06:19 . 2012-11-22 04:45 626688 ----a-w- c:\windows\SysWow64\usp10.dll
2013-01-09 06:14 . 2012-11-30 05:41 424448 ----a-w- c:\windows\system32\KernelBase.dll
2013-01-09 06:13 . 2012-11-30 05:38 3072 ---ha-w- c:\windows\system32\api-ms-win-core-console-l1-1-0.dll
2013-01-09 06:13 . 2012-11-30 02:44 2048 ----a-w- c:\windows\SysWow64\user.exe
2013-01-08 06:18 . 2012-11-08 08:24 9125352 ----a-w- c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\Backup\mpengine.dll
2013-01-02 16:29 . 2013-01-02 16:35 -------- d-----w- c:\program files (x86)\LibreOffice 3.6
2012-12-22 08:53 . 2012-12-16 14:13 34304 ----a-w- c:\windows\SysWow64\atmlib.dll
2012-12-22 08:53 . 2012-12-16 17:11 46080 ----a-w- c:\windows\system32\atmlib.dll
2012-12-22 08:52 . 2012-12-16 14:45 367616 ----a-w- c:\windows\system32\atmfd.dll
2012-12-22 08:52 . 2012-12-16 14:13 295424 ----a-w- c:\windows\SysWow64\atmfd.dll
2012-12-15 12:12 . 2012-12-15 12:12 -------- d-----w- c:\program files (x86)\Cobian Backup 11
2012-12-15 12:07 . 2012-12-15 12:07 -------- d-----w- c:\users\marika\AppData\Roaming\LibreOffice
2012-12-15 10:10 . 2012-12-15 10:10 972264 ------w- c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\{E3571C28-A160-47D6-BB10-A42B08435921}\gapaengine.dll
2012-12-15 10:08 . 2012-12-15 10:08 -------- d-----w- c:\program files (x86)\Microsoft Security Client
2012-12-15 10:07 . 2012-12-15 10:08 -------- d-----w- c:\program files\Microsoft Security Client
2012-12-14 12:46 . 2012-11-08 17:24 9125352 ----a-w- c:\programdata\Microsoft\Windows Defender\Definition Updates\{DBE2EF78-1E41-4BB4-A922-F7C32E14C1F5}\mpengine.dll
2012-12-13 08:11 . 2012-11-22 03:26 3149824 ----a-w- c:\windows\system32\win32k.sys
2012-12-13 08:08 . 2012-11-02 05:59 478208 ----a-w- c:\windows\system32\dpnet.dll
2012-12-13 08:08 . 2012-11-02 05:11 376832 ----a-w- c:\windows\SysWow64\dpnet.dll
2012-12-13 05:56 . 2012-11-09 05:45 2048 ----a-w- c:\windows\system32\tzres.dll
2012-12-13 05:56 . 2012-11-09 04:42 2048 ----a-w- c:\windows\SysWow64\tzres.dll
.
.
.
(((((((((((((((((((((((((((((((((((((((( Find3M výpis ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2012-12-13 18:24 . 2011-05-17 09:45 67413224 ----a-w- c:\windows\system32\MRT.exe
2012-11-30 04:45 . 2013-01-09 06:14 44032 ----a-w- c:\windows\apppatch\acwow64.dll
2012-10-30 22:50 . 2012-01-27 08:16 285328 ----a-w- c:\windows\system32\aswBoot.exe
2012-10-24 05:26 . 2012-10-24 05:26 773968 ----a-w- c:\windows\SysWow64\msvcr100.dll
2012-10-24 05:26 . 2012-10-24 05:26 421200 ----a-w- c:\windows\SysWow64\msvcp100.dll
2012-10-16 08:38 . 2012-11-28 13:58 135168 ----a-w- c:\windows\apppatch\AppPatch64\AcXtrnal.dll
2012-10-16 08:38 . 2012-11-28 13:58 350208 ----a-w- c:\windows\apppatch\AppPatch64\AcLayers.dll
2012-10-16 07:39 . 2012-11-28 13:58 561664 ----a-w- c:\windows\apppatch\AcLayers.dll
.
.
(((((((((((((((((((((((((((((((((( Spouštěcí body v registru )))))))))))))))))))))))))))))))))))))))))))))
.
.
*Poznámka* prázdné záznamy a legitimní výchozí údaje nejsou zobrazeny.
REGEDIT4
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorAdmin"= 5 (0x5)
"ConsentPromptBehaviorUser"= 3 (0x3)
"EnableUIADesktopToggle"= 0 (0x0)
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\windows]
"LoadAppInit_DLLs"=1 (0x1)
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\drivers32]
"aux1"=wdmaud.drv
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MsMpSvc]
@="Service"
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\run-]
"StartCCC"="c:\program files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun
"ArcSoft Connection Service"=c:\program files (x86)\Common Files\ArcSoft\Connection Service\Bin\ACDaemon.exe
"BCSSync"="c:\program files (x86)\Microsoft Office\Office14\BCSSync.exe" /DelayServices
"Adobe Reader Speed Launcher"="c:\program files (x86)\Adobe\Reader 10.0\Reader\Reader_sl.exe"
"Adobe ARM"="c:\program files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
"NetSoftware"="c:\program files\NetSoftware\Starter.exe" /path="c:\program files\NetSoftware"
.
R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2010-03-18 138576]
R3 DfSdkS;Defragmentation-Service;c:\program files (x86)\Ashampoo\Ashampoo HDD Control 2\DfSdkS64.exe [2009-08-24 544768]
R3 esihdrv;esihdrv;c:\users\marika\AppData\Local\Temp\esihdrv.sys [x]
R3 NisDrv;Microsoft Network Inspection System;c:\windows\system32\DRIVERS\NisDrvWFP.sys [2012-08-30 128456]
R3 NisSrv;Kontrola sítě Microsoft;c:\program files\Microsoft Security Client\NisSrv.exe [2012-09-12 368896]
R3 RSUSBSTOR;RtsUStor.Sys Realtek USB Card Reader;c:\windows\system32\Drivers\RtsUStor.sys [2009-06-04 216064]
R3 RtsUIR;Realtek IR Driver;c:\windows\system32\DRIVERS\Rts516xIR.sys [x]
R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys [2010-11-20 59392]
R3 WatAdminSvc;Služba Technologie aktivace Windows;c:\windows\system32\Wat\WatAdminSvc.exe [2011-05-17 1255736]
R4 wlcrasvc;Windows Live Mesh remote connections service;c:\program files\Windows Live\Mesh\wlcrasvc.exe [2010-09-22 57184]
S2 AHDDC2;Ashampoo HDD Control 2 Service;c:\program files (x86)\Ashampoo\Ashampoo HDD Control 2\AHDDC2_Service.exe [2011-04-05 1518976]
S2 AMD External Events Utility;AMD External Events Utility;c:\windows\system32\atiesrxx.exe [2009-07-30 203264]
S2 cbVSCService11;Cobian Backup 11 Stínová kopie - Requester;c:\program files (x86)\Cobian Backup 11\cbVSCService11.exe [2012-07-31 67584]
S2 TeamViewer8;TeamViewer 8;c:\program files (x86)\TeamViewer\Version8\TeamViewer_Service.exe [2012-11-29 3463080]
S3 netr28x;Ralink 802.11n Extensible Wireless Driver;c:\windows\system32\DRIVERS\netr28x.sys [2009-06-19 712704]
S3 RTL8167;Realtek 8167 NT Driver;c:\windows\system32\DRIVERS\Rt64win7.sys [2009-05-22 215040]
.
.
Obsah adresáře 'Naplánované úlohy'
.
2013-01-09 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1884878553-492949299-735548271-1000Core.job
- c:\users\marika\AppData\Local\Google\Update\GoogleUpdate.exe [2012-12-15 10:44]
.
2013-01-10 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1884878553-492949299-735548271-1000UA.job
- c:\users\marika\AppData\Local\Google\Update\GoogleUpdate.exe [2012-12-15 10:44]
.
.
--------- X64 Entries -----------
.
.
------- Doplňkový sken -------
.
uLocal Page = c:\windows\system32\blank.htm
uStart Page = hxxp://www.searchnu.com/406
mLocal Page =
IE: E&xportovat do aplikace Microsoft Excel - c:\progra~2\MICROS~1\Office14\EXCEL.EXE/3000
IE: Od&eslat do aplikace OneNote - c:\progra~2\MICROS~1\Office14\ONBttnIE.dll/105
IE: Sticky Password - c:\program files (x86)\Sticky Password\spIEBho.dll/616
IE: {{77F665FD-3F60-4B0A-AE14-EC124B7A7FCE} - c:\program files (x86)\ICQ7.7\ICQ.exe
TCP: DhcpNameServer = 192.168.1.1
.
- - - - NEPLATNÉ POLOŽKY ODSTRANĚNÉ Z REGISTRU - - - -
.
Toolbar-10 - (no file)
Toolbar-Locked - (no file)
Toolbar-10 - (no file)
.
.
.
--------------------- ZAMKNUTÉ KLÍČE V REGISTRU ---------------------
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\windows\\system32\\Macromed\\Flash\\FlashUtil64_11_4_402_278_ActiveX.exe,-101"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\Elevation]
"Enabled"=dword:00000001
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\LocalServer32]
@="c:\\windows\\system32\\Macromed\\Flash\\FlashUtil64_11_4_402_278_ActiveX.exe"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
.
[HKEY_LOCAL_MACHINE\software\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="IFlashBroker5"
.
[HKEY_LOCAL_MACHINE\software\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"
.
[HKEY_LOCAL_MACHINE\software\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
.
Celkový čas: 2013-01-10 11:55:00
ComboFix-quarantined-files.txt 2013-01-10 10:54
.
Před spuštěním: Volných bajtů: 90 496 630 784
Po spuštění: Volných bajtů: 90 206 838 784
.
- - End Of File - - AFB7D5E87AED9D0A6A7A08C6771D542C

[JaRon]

s CF si urobim lepsi obraz o PC - myslim, ze tu nejde o virovy problem
skontroluj nastavenia login/password/server uctu, kde je problem
+ pokial je moznost prihlasit sa k uctu cez prehliadac napr. webmail odskusaj to

[jasnenka]

To jsem ráda, že tedy PC je podle tebe v pořádku ale z jednoho poštovního účtu od seznamu stále neodesílá jen přijímá. Nastavení je stejné jako u jiných. A ani jsem s tím nehýbala vše při starém a najednou začalo neodesílat. Zobrazuje se hláška, že se nepodařilo odeslat, protože spojení se SMTP serverem smtp.seznam.cz vypršelo...

[jasnenka]

Jéé, už to jde! nevím jak ale přehodilo se mi u SMTP nastavení odchozí server. Nevím ale jak jsem s tím opravdu nehýbala...

Takže PC je jinak OK? Ani nneí znečištěný? Já se ho tedy čistím každý den ccleaner a Wise disk cleaner..

[JaRon]

PC je OK - CCleaner staci tak 1yzdenne, castejsie iba install/reinstall SW