častá modrá smrt

[urbape]

vkládám log z comboFix

ComboFix 14-04-30.01 - Petr 02.05.2014 13:53:03.1.8 - x64
Microsoft Windows 7 Ultimate 6.1.7600.0.1250.420.1029.18.8078.6192 [GMT 2:00]
Spuštěný z: c:\users\Petr\Desktop\ComboFix.exe
AV: Microsoft Security Essentials *Enabled/Updated* {641105E6-77ED-3F35-A304-765193BCB75F}
SP: Microsoft Security Essentials *Enabled/Updated* {DF70E402-51D7-30BB-99B4-4D23E83BFDE2}
SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.
.
((((((((((((((((((((((((( Soubory vytvořené od 2014-04-02 do 2014-05-02 )))))))))))))))))))))))))))))))
.
.
2014-05-02 11:57 . 2014-05-02 11:57 -------- d-----w- c:\users\Default\AppData\Local\temp
2014-05-01 17:19 . 2014-05-01 17:32 -------- d-----w- c:\program files\WhoCrashed
2014-05-01 17:17 . 2014-05-01 17:17 -------- d-----w- c:\program files (x86)\CrystalDiskInfo
2014-05-01 11:34 . 2014-05-01 11:34 -------- d-----w- c:\windows\ERUNT
2014-05-01 08:56 . 2014-05-01 13:56 119512 ----a-w- c:\windows\system32\drivers\MBAMSwissArmy.sys
2014-05-01 08:56 . 2014-05-01 08:56 -------- d-----w- c:\program files (x86)\Malwarebytes Anti-Malware
2014-05-01 08:56 . 2014-05-01 08:56 -------- d-----w- c:\programdata\Malwarebytes
2014-05-01 08:56 . 2014-04-03 07:51 63192 ----a-w- c:\windows\system32\drivers\mwac.sys
2014-05-01 08:56 . 2014-04-03 07:51 88280 ----a-w- c:\windows\system32\drivers\mbamchameleon.sys
2014-05-01 08:56 . 2014-04-03 07:50 25816 ----a-w- c:\windows\system32\drivers\mbam.sys
2014-05-01 08:52 . 2010-08-30 06:34 536576 ----a-w- c:\windows\SysWow64\sqlite3.dll
2014-05-01 08:51 . 2014-05-01 11:25 -------- d-----w- C:\AdwCleaner
2014-05-01 08:29 . 2012-07-26 07:40 2560 ----a-w- c:\windows\system32\drivers\cs-CZ\wdf01000.sys.mui
2014-05-01 08:29 . 2012-07-26 04:55 785512 ----a-w- c:\windows\system32\drivers\Wdf01000.sys
2014-05-01 08:29 . 2012-07-26 04:55 54376 ----a-w- c:\windows\system32\drivers\WdfLdr.sys
2014-05-01 08:29 . 2012-07-26 02:36 9728 ----a-w- c:\windows\system32\Wdfres.dll
2014-05-01 08:29 . 2014-05-01 08:29 1795952 ----a-w- c:\windows\system32\WdfCoInstaller01011.dll
2014-05-01 08:29 . 2014-05-01 08:29 100312 ----a-w- c:\windows\system32\drivers\TeeDriverx64.sys
2014-05-01 08:28 . 2014-05-01 08:28 11527888 ----a-w- c:\windows\system32\drivers\NETwsw00.sys
2014-04-29 18:43 . 2014-04-29 18:43 -------- d--h--w- c:\programdata\CanonIJScan
2014-04-28 18:26 . 2014-04-28 18:26 -------- d-----w- c:\program files (x86)\Common Files\Skype
2014-04-28 18:26 . 2014-04-28 18:26 -------- d-----r- c:\program files (x86)\Skype
2014-04-28 18:26 . 2014-04-28 18:26 -------- d-----w- c:\programdata\Skype
2014-04-27 15:58 . 2014-04-29 18:43 -------- d-----w- c:\programdata\CanonIJPLM
2014-04-27 15:58 . 2013-02-04 13:10 321536 ----a-w- c:\windows\SysWow64\CNC_BWL.dll
2014-04-27 13:30 . 2014-04-02 13:27 1081112 ----a-w- c:\windows\SysWow64\nvspcap.dll
2014-04-27 13:30 . 2014-04-02 13:27 1225920 ----a-w- c:\windows\system32\nvspcap64.dll
2014-04-27 13:29 . 2013-12-27 18:42 35104 ----a-w- c:\windows\system32\nvaudcap64v.dll
2014-04-27 13:29 . 2013-12-27 18:42 33056 ----a-w- c:\windows\SysWow64\nvaudcap32v.dll
2014-04-27 13:29 . 2013-12-27 18:42 39200 ----a-w- c:\windows\system32\drivers\nvvad64v.sys
2014-04-27 12:13 . 2014-04-27 12:13 -------- d-----w- c:\program files (x86)\Common Files\Wise Installation Wizard
2014-04-25 14:13 . 2014-04-25 14:13 -------- d-----w- c:\program files (x86)\VideoLAN
2014-04-25 10:05 . 2014-04-28 14:16 -------- d-----w- c:\programdata\Origin
2014-04-25 05:20 . 2014-04-25 13:10 280856 ----a-w- c:\windows\SysWow64\PnkBstrB.xtr
2014-04-25 05:17 . 2014-04-25 13:10 280856 ----a-w- c:\windows\SysWow64\PnkBstrB.exe
2014-04-25 05:17 . 2014-04-25 10:03 280792 ----a-w- c:\windows\SysWow64\PnkBstrB.ex0
2014-04-25 05:17 . 2014-04-25 05:21 76888 ----a-w- c:\windows\SysWow64\PnkBstrA.exe
2014-04-24 10:44 . 2014-04-24 10:44 -------- d-----w- c:\program files\Intel
2014-04-23 15:01 . 2014-04-23 15:01 -------- d-----w- c:\program files (x86)\SystemRequirementsLab
2014-04-23 15:01 . 2014-04-23 15:01 -------- d-----w- c:\programdata\SystemRequirementsLab
2014-04-22 07:03 . 2014-04-22 07:03 -------- d-----w- c:\program files (x86)\Mozilla Maintenance Service
2014-04-21 18:00 . 2009-09-10 06:28 311808 ----a-w- c:\windows\system32\msv1_0.dll
2014-04-21 18:00 . 2009-09-10 05:52 257024 ----a-w- c:\windows\SysWow64\msv1_0.dll
2014-04-21 17:45 . 2010-02-23 08:16 294912 ----a-w- c:\windows\system32\browserchoice.exe
2014-04-21 17:43 . 2014-04-21 17:43 996352 ----a-w- c:\program files\Common Files\Microsoft Shared\VGX\VGX.dll
2014-04-21 17:41 . 2014-04-21 17:41 982912 ----a-w- c:\windows\system32\drivers\dxgkrnl.sys
2014-04-21 17:25 . 2014-04-21 17:25 -------- d-----w- c:\programdata\regid.1995-08.com.techsmith
2014-04-21 17:25 . 2014-04-21 17:25 -------- d-----w- c:\program files (x86)\QuickTime
2014-04-21 17:25 . 2014-04-21 17:25 -------- d-----w- c:\program files (x86)\Common Files\TechSmith Shared
2014-04-21 17:25 . 2014-04-21 17:25 -------- d-----w- c:\programdata\TechSmith
2014-04-21 17:25 . 2014-04-21 17:25 -------- d-----w- c:\program files (x86)\TechSmith
2014-04-21 17:24 . 2012-12-16 16:52 46080 ----a-w- c:\windows\system32\atmlib.dll
2014-04-21 17:24 . 2012-12-16 14:40 367616 ----a-w- c:\windows\system32\atmfd.dll
2014-04-21 17:24 . 2012-12-16 14:25 295424 ----a-w- c:\windows\SysWow64\atmfd.dll
2014-04-21 17:24 . 2012-12-16 14:25 34304 ----a-w- c:\windows\SysWow64\atmlib.dll
2014-04-21 17:24 . 2009-10-19 14:46 100864 ----a-w- c:\windows\system32\fontsub.dll
2014-04-21 17:24 . 2009-10-19 14:10 70656 ----a-w- c:\windows\SysWow64\fontsub.dll
2014-04-21 17:13 . 2014-04-21 17:14 -------- d-----w- c:\windows\system32\MRT
2014-04-21 17:11 . 2012-03-01 06:54 22896 ----a-w- c:\windows\system32\drivers\fs_rec.sys
2014-04-21 17:11 . 2012-03-01 06:40 80896 ----a-w- c:\windows\system32\imagehlp.dll
2014-04-21 17:11 . 2012-03-01 06:35 5120 ----a-w- c:\windows\system32\wmi.dll
2014-04-21 17:11 . 2012-03-01 05:45 158720 ----a-w- c:\windows\SysWow64\imagehlp.dll
2014-04-21 17:11 . 2012-03-01 05:40 5120 ----a-w- c:\windows\SysWow64\wmi.dll
2014-04-21 16:46 . 2011-11-17 07:12 395776 ----a-w- c:\windows\system32\webio.dll
2014-04-21 16:45 . 2013-02-12 14:02 19968 ----a-w- c:\windows\system32\drivers\usb8023.sys
2014-04-21 16:44 . 2010-10-16 05:23 112000 ----a-w- c:\windows\system32\consent.exe
2014-04-21 16:43 . 2009-09-03 07:36 1975296 ----a-w- c:\windows\system32\CertEnroll.dll
2014-04-21 16:43 . 2009-09-03 07:04 1320960 ----a-w- c:\windows\SysWow64\CertEnroll.dll
2014-04-21 16:42 . 2010-10-16 05:17 720896 ----a-w- c:\windows\system32\odbc32.dll
2014-04-21 16:42 . 2010-10-16 04:34 573440 ----a-w- c:\windows\SysWow64\odbc32.dll
2014-04-21 16:42 . 2010-10-16 05:16 495616 ----a-w- c:\program files\Common Files\System\ado\msadox.dll
2014-04-21 16:42 . 2010-10-16 05:16 466944 ----a-w- c:\program files\Common Files\System\ado\msadomd.dll
2014-04-21 16:42 . 2010-10-16 05:16 258048 ----a-w- c:\program files\Common Files\System\msadc\msadco.dll
2014-04-21 16:42 . 2010-10-16 04:33 372736 ----a-w- c:\program files (x86)\Common Files\System\ado\msadox.dll
2014-04-21 16:42 . 2010-10-16 04:33 352256 ----a-w- c:\program files (x86)\Common Files\System\ado\msadomd.dll
2014-04-21 16:42 . 2010-10-16 04:33 208896 ----a-w- c:\program files (x86)\Common Files\System\msadc\msadco.dll
2014-04-21 16:42 . 2011-11-17 07:14 1739160 ----a-w- c:\windows\system32\ntdll.dll
2014-04-21 16:42 . 2011-11-17 05:41 1292592 ----a-w- c:\windows\SysWow64\ntdll.dll
2014-04-21 16:38 . 2013-03-01 03:32 3150848 ----a-w- c:\windows\system32\win32k.sys
2014-04-21 16:38 . 2011-05-24 11:21 404992 ----a-w- c:\windows\system32\umpnpmgr.dll
2014-04-21 16:38 . 2011-05-24 10:34 64512 ----a-w- c:\windows\SysWow64\devobj.dll
2014-04-21 16:38 . 2011-05-24 10:34 44544 ----a-w- c:\windows\SysWow64\devrtl.dll
2014-04-21 16:38 . 2011-05-24 10:34 145920 ----a-w- c:\windows\SysWow64\cfgmgr32.dll
2014-04-21 16:38 . 2011-05-24 10:32 252928 ----a-w- c:\windows\SysWow64\drvinst.exe
2014-04-21 16:35 . 2012-09-06 17:38 295792 ----a-w- c:\windows\system32\drivers\volsnap.sys
2014-04-21 16:30 . 2010-07-29 06:30 82944 ----a-w- c:\windows\SysWow64\iccvid.dll
2014-04-21 16:30 . 2010-03-05 07:52 84992 ----a-w- c:\windows\system32\asycfilt.dll
2014-04-21 16:30 . 2010-03-05 07:42 67584 ----a-w- c:\windows\SysWow64\asycfilt.dll
2014-04-21 16:27 . 2011-11-19 15:07 77312 ----a-w- c:\windows\system32\packager.dll
2014-04-21 16:27 . 2011-11-19 14:06 67072 ----a-w- c:\windows\SysWow64\packager.dll
2014-04-21 09:17 . 2014-04-21 09:18 -------- d-----w- c:\windows\system32\appmgmt
2014-04-21 09:05 . 2014-04-21 09:05 -------- d-sh--w- c:\programdata\SecuROM
2014-04-20 16:46 . 2014-04-20 16:46 -------- d-----w- c:\programdata\Oracle
2014-04-20 16:46 . 2014-04-20 16:46 -------- d-----w- c:\program files (x86)\Common Files\Java
2014-04-20 16:46 . 2014-04-20 16:46 96168 ----a-w- c:\windows\SysWow64\WindowsAccessBridge-32.dll
2014-04-20 16:45 . 2014-04-20 16:45 -------- d-----w- c:\program files (x86)\Java
2014-04-20 11:01 . 2014-04-20 11:01 178800 ----a-w- c:\windows\SysWow64\CmdLineExt_x64.dll
2014-04-19 14:51 . 2014-04-19 14:51 -------- d-----w- c:\programdata\Codemasters
2014-04-19 14:51 . 2014-04-19 14:51 -------- d-----w- c:\programdata\Steam
2014-04-19 11:13 . 2014-04-19 11:13 -------- d-----w- c:\program files (x86)\Futuremark
2014-04-19 11:12 . 2014-04-19 11:12 -------- d-----w- c:\program files\Futuremark
2014-04-19 06:46 . 2014-04-19 06:46 -------- d-----w- c:\programdata\RELOADED
2014-04-19 06:34 . 2014-04-19 06:34 -------- d-----w- c:\programdata\Room Arranger
2014-04-19 06:34 . 2014-04-19 06:34 -------- d-----w- c:\program files (x86)\Room Arranger
2014-04-18 14:22 . 2014-04-18 14:22 -------- d-----w- c:\program files (x86)\Common Files\Adobe
2014-04-18 11:02 . 2014-04-18 11:02 -------- d-----w- c:\program files\CPUID
2014-04-18 06:25 . 2014-04-18 07:30 -------- d-----w- c:\program files (x86)\Need For Speed.The Run.Limited Edition
2014-04-17 20:07 . 2014-05-01 14:26 -------- d-----w- c:\program files (x86)\Ubisoft
2014-04-17 20:05 . 2008-10-27 08:04 25936 ----a-w- c:\windows\system32\X3DAudio1_5.dll
2014-04-17 19:03 . 2007-06-20 18:49 409960 ----a-w- c:\windows\system32\xactengine2_8.dll
2014-04-17 18:19 . 2014-04-26 13:26 -------- d-----w- c:\program files (x86)\Common Files\Steam
2014-04-17 18:19 . 2014-04-30 17:02 -------- d-----w- c:\program files (x86)\Steam
2014-04-17 18:17 . 2014-04-17 18:17 283064 ----a-w- c:\windows\system32\drivers\dtsoftbus01.sys
2014-04-17 18:17 . 2014-04-17 18:17 -------- d-----w- c:\program files (x86)\DAEMON Tools Lite
2014-04-17 18:16 . 2014-04-17 18:54 -------- d-----w- c:\programdata\DAEMON Tools Lite
2014-04-17 17:48 . 2014-04-17 17:48 901848 ----a-w- c:\windows\system32\drivers\Rt64win7.sys
2014-04-17 17:48 . 2014-04-17 17:48 73800 ----a-w- c:\windows\system32\RtNicProp64.dll
2014-04-17 17:35 . 2014-04-25 13:25 -------- d-----w- c:\programdata\IObit
2014-04-17 17:35 . 2014-04-17 17:35 -------- d-----w- c:\program files (x86)\IObit
2014-04-17 17:09 . 2014-04-21 17:16 -------- d-----w- c:\program files (x86)\Microsoft Works
2014-04-17 17:09 . 2014-04-17 17:09 -------- d-----w- c:\windows\PCHEALTH
2014-04-17 17:08 . 2014-04-17 17:08 -------- d-----w- c:\program files\Microsoft Office
2014-04-17 17:08 . 2014-04-17 17:08 -------- d-----w- c:\program files (x86)\Microsoft Visual Studio 8
2014-04-17 17:07 . 2014-04-23 13:34 -------- d-----w- c:\programdata\Microsoft Help
2014-04-17 17:07 . 2014-04-17 17:07 -------- d-----r- C:\MSOCache
.
.
(((((((((((((((((((((((((((((((((((((((( Find3M výpis ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
.
(((((((((((((((((((((((((((((((((( Spouštěcí body v registru )))))))))))))))))))))))))))))))))))))))))))))
.
.
*Poznámka* prázdné záznamy a legitimní výchozí údaje nejsou zobrazeny.
REGEDIT4
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"DAEMON Tools Lite"="c:\program files (x86)\DAEMON Tools Lite\DTLite.exe" [2014-03-04 3696912]
"Sidebar"="c:\program files\Windows Sidebar\sidebar.exe" [2009-07-14 1475072]
"uTorrent"="c:\users\Petr\AppData\Roaming\uTorrent\utorrent.exe" [2014-04-29 1270352]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]
"USB3MON"="c:\program files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe" [2012-02-07 291608]
"ATKOSD2"="c:\program files (x86)\ASUS\ATK Package\ATKOSD2\ATKOSD2.exe" [2012-06-25 322208]
"ATKMEDIA"="c:\program files (x86)\ASUS\ATK Package\ATK Media\DMedia.exe" [2012-06-19 174752]
"HControlUser"="c:\program files (x86)\ASUS\ATK Package\ATK Hotkey\HControlUser.exe" [2009-06-19 105016]
"GrooveMonitor"="c:\program files (x86)\Microsoft Office\Office12\GrooveMonitor.exe" [2009-02-26 30040]
"Adobe ARM"="c:\program files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2013-11-21 959904]
"SunJavaUpdateSched"="c:\program files (x86)\Common Files\Java\Java Update\jusched.exe" [2013-07-02 254336]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorAdmin"= 5 (0x5)
"ConsentPromptBehaviorUser"= 3 (0x3)
"EnableUIADesktopToggle"= 0 (0x0)
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\windows]
"LoadAppInit_DLLs"=1 (0x1)
"AppInit_DLLs"=c:\windows\SysWOW64\nvinit.dll
.
R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [x]
R2 SkypeUpdate;Skype Updater;c:\program files (x86)\Skype\Updater\Updater.exe;c:\program files (x86)\Skype\Updater\Updater.exe [x]
R3 btmaux;Intel Bluetooth Auxiliary Service;c:\windows\system32\DRIVERS\btmaux.sys;c:\windows\SYSNATIVE\DRIVERS\btmaux.sys [x]
R3 Futuremark SystemInfo Service;Futuremark SystemInfo Service;c:\program files (x86)\Futuremark\Futuremark SystemInfo\FMSISvc.exe;c:\program files (x86)\Futuremark\Futuremark SystemInfo\FMSISvc.exe [x]
S0 iusb3hcs;Ovladač přepínání hostitelského řadiče Intel(R) USB 3.0;c:\windows\system32\DRIVERS\iusb3hcs.sys;c:\windows\SYSNATIVE\DRIVERS\iusb3hcs.sys [x]
S0 nvpciflt;nvpciflt;c:\windows\system32\DRIVERS\nvpciflt.sys;c:\windows\SYSNATIVE\DRIVERS\nvpciflt.sys [x]
S1 ATKWMIACPIIO;ATKWMIACPI Driver;c:\program files (x86)\ASUS\ATK Package\ATK WMIACPI\atkwmiacpi64.sys;c:\program files (x86)\ASUS\ATK Package\ATK WMIACPI\atkwmiacpi64.sys [x]
S1 dtsoftbus01;DAEMON Tools Virtual Bus Driver;c:\windows\system32\DRIVERS\dtsoftbus01.sys;c:\windows\SYSNATIVE\DRIVERS\dtsoftbus01.sys [x]
S2 AFBAgent;AFBAgent;c:\windows\system32\FBAgent.exe;c:\windows\SYSNATIVE\FBAgent.exe [x]
S2 ASMMAP64;ASMMAP64;c:\program files (x86)\ASUS\ATK Package\ATKGFNEX\ASMMAP64.sys;c:\program files (x86)\ASUS\ATK Package\ATKGFNEX\ASMMAP64.sys [x]
S2 ASUS InstantOn;ASUS InstantOn Service;c:\program files (x86)\ASUS\InstantOn for NB\InsOnSrv.exe;c:\program files (x86)\ASUS\InstantOn for NB\InsOnSrv.exe [x]
S2 AtherosSvc;AtherosSvc;c:\program files (x86)\Bluetooth Suite\adminservice.exe;c:\program files (x86)\Bluetooth Suite\adminservice.exe [x]
S2 Bluetooth Device Monitor;Bluetooth Device Monitor;c:\program files (x86)\Intel\Bluetooth\devmonsrv.exe;c:\program files (x86)\Intel\Bluetooth\devmonsrv.exe [x]
S2 Bluetooth OBEX Service;Bluetooth OBEX Service;c:\program files (x86)\Intel\Bluetooth\obexsrv.exe;c:\program files (x86)\Intel\Bluetooth\obexsrv.exe [x]
S2 NvNetworkService;NVIDIA Network Service;c:\program files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe;c:\program files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [x]
S3 AthBTPort;Atheros Virtual Bluetooth Class;c:\windows\system32\DRIVERS\btath_flt.sys;c:\windows\SYSNATIVE\DRIVERS\btath_flt.sys [x]
S3 Bluetooth Media Service;Bluetooth Media Service;c:\program files (x86)\Intel\Bluetooth\mediasrv.exe;c:\program files (x86)\Intel\Bluetooth\mediasrv.exe [x]
S3 BTATH_A2DP;Bluetooth A2DP Audio Driver;c:\windows\system32\drivers\btath_a2dp.sys;c:\windows\SYSNATIVE\drivers\btath_a2dp.sys [x]
S3 btath_avdt;Atheros Bluetooth AVDT Service;c:\windows\system32\drivers\btath_avdt.sys;c:\windows\SYSNATIVE\drivers\btath_avdt.sys [x]
S3 BTATH_BUS;Atheros Bluetooth Bus;c:\windows\system32\DRIVERS\btath_bus.sys;c:\windows\SYSNATIVE\DRIVERS\btath_bus.sys [x]
S3 BTATH_HCRP;Bluetooth HCRP Server driver;c:\windows\system32\DRIVERS\btath_hcrp.sys;c:\windows\SYSNATIVE\DRIVERS\btath_hcrp.sys [x]
S3 BTATH_RCP;Bluetooth AVRCP Device;c:\windows\system32\DRIVERS\btath_rcp.sys;c:\windows\SYSNATIVE\DRIVERS\btath_rcp.sys [x]
S3 btmaudio;Intel Bluetooth Audio Service;c:\windows\system32\drivers\btmaud.sys;c:\windows\SYSNATIVE\drivers\btmaud.sys [x]
S3 btmhsf;btmhsf;c:\windows\system32\DRIVERS\btmhsf.sys;c:\windows\SYSNATIVE\DRIVERS\btmhsf.sys [x]
S3 ETD;ELAN PS/2 Port Input Device;c:\windows\system32\DRIVERS\ETD.sys;c:\windows\SYSNATIVE\DRIVERS\ETD.sys [x]
S3 ibtfltcoex;ibtfltcoex;c:\windows\system32\DRIVERS\iBtFltCoex.sys;c:\windows\SYSNATIVE\DRIVERS\iBtFltCoex.sys [x]
S3 IntcDAud;Intel(R) Display Audio;c:\windows\system32\DRIVERS\IntcDAud.sys;c:\windows\SYSNATIVE\DRIVERS\IntcDAud.sys [x]
S3 iusb3hub;Ovladač rozbočovače Intel(R) USB 3.0;c:\windows\system32\DRIVERS\iusb3hub.sys;c:\windows\SYSNATIVE\DRIVERS\iusb3hub.sys [x]
S3 iusb3xhc;Ovladač rozšiřitelného hostitelského řadiče Intel(R) USB 3.0;c:\windows\system32\DRIVERS\iusb3xhc.sys;c:\windows\SYSNATIVE\DRIVERS\iusb3xhc.sys [x]
S3 nvvad_WaveExtensible;NVIDIA Virtual Audio Device (Wave Extensible) (WDM);c:\windows\system32\drivers\nvvad64v.sys;c:\windows\SYSNATIVE\drivers\nvvad64v.sys [x]
S3 RSBASTOR;Realtek PCIE CardReader Driver - BA;c:\windows\system32\DRIVERS\RtsBaStor.sys;c:\windows\SYSNATIVE\DRIVERS\RtsBaStor.sys [x]
S3 RTL8167;Realtek 8167 NT Driver;c:\windows\system32\DRIVERS\Rt64win7.sys;c:\windows\SYSNATIVE\DRIVERS\Rt64win7.sys [x]
.
.
--- Ostatní služby/ovladače v paměti ---
.
*Deregistered* - NisDrv
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\active setup\installed components\{8A69D345-D564-463c-AFF1-A69D9E530F96}]
2014-04-25 08:57 1078088 ----a-w- c:\program files (x86)\Google\Chrome\Application\34.0.1847.131\Installer\chrmstp.exe
.
Obsah adresáře 'Naplánované úlohy'
.
2014-05-02 c:\windows\Tasks\FacebookUpdateTaskUserS-1-5-21-1600135958-1387366072-1656309362-1000Core.job
- c:\users\Petr\AppData\Local\Facebook\Update\FacebookUpdate.exe [2014-04-24 09:42]
.
2014-05-02 c:\windows\Tasks\FacebookUpdateTaskUserS-1-5-21-1600135958-1387366072-1656309362-1000UA.job
- c:\users\Petr\AppData\Local\Facebook\Update\FacebookUpdate.exe [2014-04-24 09:42]
.
2014-05-01 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
- c:\program files (x86)\Google\Update\GoogleUpdate.exe [2014-04-17 15:44]
.
2014-05-02 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
- c:\program files (x86)\Google\Update\GoogleUpdate.exe [2014-04-17 15:44]
.
.
--------- X64 Entries -----------
.
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"IgfxTray"="c:\windows\system32\igfxtray.exe" [2012-02-22 170264]
"HotKeysCmds"="c:\windows\system32\hkcmd.exe" [2012-02-22 398616]
"Persistence"="c:\windows\system32\igfxpers.exe" [2012-02-22 440600]
"AtherosBtStack"="c:\program files (x86)\Bluetooth Suite\BtvStack.exe" [2011-12-29 1014432]
"AthBtTray"="c:\program files (x86)\Bluetooth Suite\AthBtTray.exe" [2011-12-29 800416]
"NvBackend"="c:\program files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe" [2014-04-02 2201032]
"BTMTrayAgent"="c:\program files (x86)\Intel\Bluetooth\btmshell.dll" [2011-12-19 11406608]
"ShadowPlay"="c:\windows\system32\nvspcap64.dll" [2014-04-02 1225920]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
"AppInit_DLLs"=c:\windows\System32\nvinitx.dll
.
------- Doplňkový sken -------
.
uLocal Page = c:\windows\system32\blank.htm
mLocal Page = c:\windows\SysWOW64\blank.htm
IE: E&xportovat do aplikace Microsoft Excel - c:\progra~2\MICROS~2\Office12\EXCEL.EXE/3000
TCP: DhcpNameServer = 192.168.0.1
FF - ProfilePath - c:\users\Petr\AppData\Roaming\Mozilla\Firefox\Profiles\aso8s67t.default\
FF - prefs.js: browser.search.selectedEngine - Yahoo!
FF - prefs.js: keyword.URL - hxxp://search.yahoo.com/search?fr=green ... =402027&p=
.
- - - - NEPLATNÉ POLOŽKY ODSTRANĚNÉ Z REGISTRU - - - -
.
Wow6432Node-HKCU-Run-RGSC - d:\program files (x86)\Rockstar Games\Rockstar Games Social Club\RGSCLauncher.exe
Wow6432Node-HKLM-Run-<NO NAME> - (no file)
HKLM-Run-ETDCtrl - c:\program files (x86)\Elantech\ETDCtrl.exe
.
.
.
--------------------- ZAMKNUTÉ KLÍČE V REGISTRU ---------------------
.
[HKEY_USERS\S-1-5-21-1600135958-1387366072-1656309362-1000\Software\SecuROM\License information*]
"datasecu"=hex:3c,7e,f8,8c,d6,37,6f,28,c4,5f,1c,0a,91,be,c8,04,25,59,29,37,7d,
ea,05,11,d7,79,a5,f1,88,8a,b4,56,56,85,0c,2f,1e,d2,fc,8b,75,32,0a,3a,98,e0,\
"rkeysecu"=hex:fe,f3,49,59,e5,3b,b6,7a,84,99,2d,a4,98,e4,f7,8a
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet003\Control\PCW\Security]
@Denied: (Full) (Everyone)
.
Celkový čas: 2014-05-02 13:58:20
ComboFix-quarantined-files.txt 2014-05-02 11:58
.
Před spuštěním: Volných bajtů: 159 424 126 976
Po spuštění: Volných bajtů: 159 094 448 128
.
- - End Of File - - 8E4C93B6AE90B4F567796FAA56B4E312
A36C5E4F47E84449FF07ED3517B43A31

[Reklama]

[pulsik]

Co to má být? Včera jsem Ti poslal odkaz, kde jsou přesný instrukce a ty sem hodíš log z combofixu, který patří do HJT.. Čteš vůbec to, co Ti kdo pošle?

[urbape]

Založ si nové téma v této sekci:
viewforum.php?f=118


+
Vypni rez. ochranu u antiviru a antispywaru,příp. firewall..

Stáhni si ComboFix (by sUBs)
a ulož si ho na plochu.
Ukonči všechna aktivní okna a spusť ho.
- Po spuštění se zobrazí podmínky užití, potvrď je stiskem tlačítka Ano
- Dále postupuj dle pokynů, během aplikování ComboFixu neklikej do zobrazujícího se okna
- Po dokončení skenování by měl program vytvořit log - C:\ComboFix.txt - zkopíruj sem prosím celý jeho obsah
Pokud budou problémy , spusť ho v nouz. režimu.

Tohle mi napsal jaro3

--- Doplnění předchozího příspěvku (02 Kvě 2014 14:08) ---

omlouvám se ale až ted sem se kouk do sz

[pulsik]

Bylo to myšleno jinak, než si pochopil.. Druhá část patří do HJT.

[urbape]

Aha tak to se omlouvám