Prosím o kontrolu logu Vyřešeno

[Leo18]

ComboFix 14-06-16.01 - Multimedia 18.06.2014 10:19:03.6.2 - x86
Microsoft Windows 7 Home Premium 6.1.7601.1.1250.420.1029.18.2009.1004 [GMT 2:00]
Spuštěný z: c:\users\Multimedia\Desktop\Zdeny\LiÜtýnÝ PC\Programy\ComboFix.exe
Použité ovládací přepínače :: c:\users\Multimedia\Desktop\CFScript.txt
AV: avast! Antivirus *Disabled/Updated* {17AD7D40-BA12-9C46-7131-94903A54AD8B}
SP: avast! Antivirus *Disabled/Updated* {ACCC9CA4-9C28-93C8-4B81-AFE241D3E736}
SP: Windows Defender *Enabled/Outdated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.
.
((((((((((((((((((((((((( Soubory vytvořené od 2014-05-18 do 2014-06-18 )))))))))))))))))))))))))))))))
.
.
2014-06-18 08:32 . 2014-06-18 08:32 -------- d-----w- c:\users\Public\AppData\Local\temp
2014-06-18 08:32 . 2014-06-18 08:32 -------- d-----w- c:\users\Default\AppData\Local\temp
2014-06-18 05:04 . 2014-06-18 05:04 -------- d-----w- c:\users\Multimedia\AppData\Local\Adobe
2014-06-15 20:49 . 2014-06-17 19:08 26624 ----a-w- c:\windows\system32\drivers\TrueSight.sys
2014-06-15 20:49 . 2014-06-15 20:49 -------- d-----w- c:\programdata\RogueKiller
2014-06-13 16:24 . 2014-05-12 05:26 51928 ----a-w- c:\windows\system32\drivers\mwac.sys
2014-06-13 16:24 . 2014-05-12 05:25 74456 ----a-w- c:\windows\system32\drivers\mbamchameleon.sys
2014-06-13 16:24 . 2014-06-14 17:06 -------- d-----w- c:\program files\Malwarebytes Anti-Malware
2014-06-12 19:02 . 2010-08-30 06:34 536576 ----a-w- c:\windows\system32\sqlite3.dll
2014-06-09 11:47 . 2014-06-18 07:11 110296 ----a-w- c:\windows\system32\drivers\mbamswissarmy.sys
2014-06-09 11:44 . 2014-05-12 05:25 23256 ----a-w- c:\windows\system32\drivers\mbam.sys
.
.
.
(((((((((((((((((((((((((((((((((((((((( Find3M výpis ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2014-05-15 20:23 . 2014-04-30 20:23 68312 ----a-w- c:\windows\system32\drivers\aswstm.sys
2014-05-15 20:23 . 2011-05-18 11:58 777488 ----a-w- c:\windows\system32\drivers\aswsnx.sys
2014-05-15 20:23 . 2010-10-26 06:43 411680 ----a-w- c:\windows\system32\drivers\aswsp.sys
2014-05-14 11:47 . 2012-11-28 16:51 692400 ----a-w- c:\windows\system32\FlashPlayerApp.exe
2014-05-14 11:47 . 2012-08-16 14:10 70832 ----a-w- c:\windows\system32\FlashPlayerCPLApp.cpl
2014-04-30 20:23 . 2014-04-30 20:17 180632 ----a-w- c:\windows\system32\drivers\aswVmm.sys
2014-04-30 20:23 . 2014-04-30 20:17 49944 ----a-w- c:\windows\system32\drivers\aswRvrt.sys
2014-04-30 20:23 . 2011-05-18 11:58 776976 ----a-w- c:\windows\system32\drivers\aswsnx.sys.1400185437740
2014-04-30 20:23 . 2010-10-26 06:43 411552 ----a-w- c:\windows\system32\drivers\aswsp.sys.1400185437740
2014-04-30 20:23 . 2010-10-26 06:43 67824 ----a-w- c:\windows\system32\drivers\aswMonFlt.sys
2014-04-30 20:23 . 2014-04-30 20:23 24184 ----a-w- c:\windows\system32\drivers\aswHwid.sys
2014-04-30 20:23 . 2013-05-13 13:11 81768 ----a-w- c:\windows\system32\drivers\aswRdr2.sys
2014-04-30 20:23 . 2014-04-30 20:23 43152 ----a-w- c:\windows\avastSS.scr
2014-04-30 20:23 . 2010-10-26 06:42 271264 ----a-w- c:\windows\system32\aswBoot.exe
2014-03-31 07:35 . 2010-10-25 17:59 231584 ------w- c:\windows\system32\MpSigStub.exe
2009-05-01 21:02 . 2014-05-10 15:21 1044480 ----a-w- c:\program files\mozilla firefox\plugins\libdivx.dll
2009-05-01 21:02 . 2014-05-10 15:21 200704 ----a-w- c:\program files\mozilla firefox\plugins\ssldivx.dll
.
.
(((((((((((((((((((((((((((((((((( Spouštěcí body v registru )))))))))))))))))))))))))))))))))))))))))))))
.
.
*Poznámka* prázdné záznamy a legitimní výchozí údaje nejsou zobrazeny.
REGEDIT4
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\00avast]
@="{472083B0-C522-11CF-8763-00608CC02F24}"
[HKEY_CLASSES_ROOT\CLSID\{472083B0-C522-11CF-8763-00608CC02F24}]
2014-04-30 20:23 260976 ----a-w- c:\program files\Alwil Software\Avast5\ashShell.dll
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Adobe ARM"="c:\program files\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2013-11-21 959904]
"AvastUI.exe"="c:\program files\Alwil Software\Avast5\AvastUI.exe" [2014-06-08 3890208]
"TkBellExe"="c:\program files\Real\RealPlayer\update\realsched.exe" [2013-07-11 295512]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorAdmin"= 5 (0x5)
"EnableUIADesktopToggle"= 0 (0x0)
"PromptOnSecureDesktop"= 0 (0x0)
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\drivers32]
"aux"=wdmaud.drv
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\TkBellExe]
2013-07-11 07:41 295512 ----a-w- c:\program files\Real\RealPlayer\Update\realsched.exe
.
R2 aswStm;aswStm;c:\windows\system32\drivers\aswStm.sys [2014-05-15 68312]
R3 EagleXNt;EagleXNt;c:\windows\system32\drivers\EagleXNt.sys [x]
R3 ewusbnet;HUAWEI USB-NDIS miniport;c:\windows\system32\DRIVERS\ewusbnet.sys [2009-07-23 112128]
R3 hwusbfake;Huawei DataCard USB Fake;c:\windows\system32\DRIVERS\ewusbfake.sys [2009-07-23 100736]
R3 nmwcdnsu;Nokia USB Flashing Phone Parent;c:\windows\system32\drivers\nmwcdnsu.sys [2010-12-02 137600]
R3 nmwcdnsuc;Nokia USB Flashing Generic;c:\windows\system32\drivers\nmwcdnsuc.sys [2010-12-02 8576]
R3 RTL8167;Realtek 8167 NT Driver;c:\windows\system32\DRIVERS\Rt86win7.sys [2009-07-13 139776]
R3 ss_bbus;SAMSUNG USB Mobile Device (WDM);c:\windows\system32\DRIVERS\ss_bbus.sys [2009-09-19 98432]
R3 ss_bmdfl;SAMSUNG USB Mobile Modem (Filter);c:\windows\system32\DRIVERS\ss_bmdfl.sys [2009-09-19 14848]
R3 ss_bmdm;SAMSUNG USB Mobile Modem;c:\windows\system32\DRIVERS\ss_bmdm.sys [2009-09-19 123648]
R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys [2010-11-20 52224]
R3 WatAdminSvc;Služba Technologie aktivace Windows;c:\windows\system32\Wat\WatAdminSvc.exe [2010-10-26 1343400]
R4 wlcrasvc;Windows Live Mesh remote connections service;c:\program files\Windows Live\Mesh\wlcrasvc.exe [2010-09-22 51040]
S0 aswRvrt;avast! Revert; [x]
S0 aswVmm;avast! VM Monitor; [x]
S1 aswSnx;aswSnx;c:\windows\system32\drivers\aswSnx.sys [2014-05-15 777488]
S1 aswSP;aswSP;c:\windows\system32\drivers\aswSP.sys [2014-05-15 411680]
S1 SABI;SAMSUNG Kernel Driver For Windows 7;c:\windows\system32\Drivers\SABI.sys [2010-03-31 10752]
S2 aswHwid;avast! HardwareID;c:\windows\system32\drivers\aswHwid.sys [2014-04-30 24184]
S2 aswMonFlt;aswMonFlt;c:\windows\system32\drivers\aswMonFlt.sys [2014-04-30 67824]
S2 cvhsvc;Client Virtualization Handler;c:\program files\Common Files\Microsoft Shared\Virtualization Handler\CVHSVC.EXE [2013-04-22 822504]
S2 MBAMService;MBAMService;c:\program files\Malwarebytes Anti-Malware\mbamservice.exe [2014-05-12 860472]
S2 RealNetworks Downloader Resolver Service;RealNetworks Downloader Resolver Service;c:\program files\RealNetworks\RealDownloader\rndlresolversvc.exe [2013-04-16 39056]
S2 sftlist;Application Virtualization Client;c:\program files\Microsoft Application Virtualization Client\sftlist.exe [2013-06-26 523944]
S3 IntcHdmiAddService;Intel(R) High Definition Audio HDMI;c:\windows\system32\drivers\IntcHdmi.sys [2009-07-10 122880]
S3 MBAMProtector;MBAMProtector;c:\windows\system32\drivers\mbam.sys [2014-05-12 23256]
S3 MBAMSwissArmy;MBAMSwissArmy;c:\windows\system32\drivers\MBAMSwissArmy.sys [2014-06-18 110296]
S3 MBAMWebAccessControl;MBAMWebAccessControl;c:\windows\system32\drivers\mwac.sys [2014-05-12 51928]
S3 Sftfs;Sftfs;c:\windows\system32\DRIVERS\Sftfslh.sys [2013-06-26 583848]
S3 Sftplay;Sftplay;c:\windows\system32\DRIVERS\Sftplaylh.sys [2013-06-26 197800]
S3 Sftredir;Sftredir;c:\windows\system32\DRIVERS\Sftredirlh.sys [2013-06-26 24232]
S3 Sftvol;Sftvol;c:\windows\system32\DRIVERS\Sftvollh.sys [2013-06-26 20136]
S3 sftvsa;Application Virtualization Service Agent;c:\program files\Microsoft Application Virtualization Client\sftvsa.exe [2013-06-26 207528]
S3 yukonw7;Ovladač NDIS6.2 Miniport pro řadič Marvell Yukon Ethernet Controller;c:\windows\system32\DRIVERS\yk62x86.sys [2009-07-13 311296]
.
.
--- Ostatní služby/ovladače v paměti ---
.
*NewlyCreated* - MBAMSWISSARMY
*Deregistered* - TrueSight
.
[HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{8A69D345-D564-463c-AFF1-A69D9E530F96}]
2013-04-11 00:21 1642448 ----a-w- c:\program files\Google\Chrome\Application\26.0.1410.64\Installer\chrmstp.exe
.
Obsah adresáře 'Naplánované úlohy'
.
2014-06-18 c:\windows\Tasks\Adobe Flash Player Updater.job
- c:\windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2012-11-28 11:47]
.
.
------- Doplňkový sken -------
.
uStart Page = hxxp://www.google.com
uSearchAssistant = hxxp://www.google.com/ie
uSearchURL,(Default) = hxxp://www.google.com/search?q=%s
IE: E&xportovat do aplikace Microsoft Excel - c:\progra~1\MIF5BA~1\Office12\EXCEL.EXE/3000
TCP: DhcpNameServer = 8.8.8.4 8.8.8.8
FF - ProfilePath - c:\users\Multimedia\AppData\Roaming\Mozilla\Firefox\Profiles\n9071zb8.default-1370150688715\
FF - prefs.js: browser.startup.homepage - hxxp://www.seznam.cz/
.
.
Celkový čas: 2014-06-18 10:35:23
ComboFix-quarantined-files.txt 2014-06-18 08:35
ComboFix2.txt 2014-06-18 05:02
.
Před spuštěním: Volných bajtů: 35 023 888 384
Po spuštění: Volných bajtů: 34 967 900 160
.
- - End Of File - - 4292B1C7674D63A404BBFA7FC5280C58
2E5DEBB2116B3417023E0D6562D7ED07

[Reklama]

[Leo18]

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 10:38:20, on 18.6.2014
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v10.0 (10.00.9200.16720)
Boot mode: Normal

Running processes:
C:\windows\system32\taskhost.exe
C:\windows\system32\Dwm.exe
C:\Program Files\Alwil Software\Avast5\avastui.exe
C:\windows\system32\wbem\unsecapp.exe
C:\Program Files\OpenOffice 4\program\swriter.exe
C:\Program Files\OpenOffice 4\program\soffice.exe
C:\Program Files\OpenOffice 4\program\swriter.exe
C:\Program Files\OpenOffice 4\program\soffice.bin
C:\Program Files\OpenOffice 4\program\soffice.exe
C:\Program Files\OpenOffice 4\program\soffice.bin
C:\Program Files\OpenOffice 4\program\swriter.exe
C:\Program Files\OpenOffice 4\program\soffice.exe
C:\Program Files\OpenOffice 4\program\soffice.bin
C:\Program Files\OpenOffice 4\program\swriter.exe
C:\Program Files\OpenOffice 4\program\soffice.exe
C:\Program Files\OpenOffice 4\program\soffice.bin
C:\Program Files\Real\RealPlayer\update\realsched.exe
C:\Program Files\OpenOffice 4\program\swriter.exe
C:\Program Files\OpenOffice 4\program\soffice.exe
C:\Program Files\OpenOffice 4\program\soffice.bin
C:\windows\Explorer.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\Mozilla Firefox\plugin-container.exe
C:\windows\system32\Macromed\Flash\FlashPlayerPlugin_13_0_0_214.exe
C:\windows\system32\Macromed\Flash\FlashPlayerPlugin_13_0_0_214.exe
C:\Program Files\Trend Micro\HiJackThis\HiJackThis.exe
c:\program files\real\realplayer\RealPlay.exe

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/p/?LinkId=255141
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
O2 - BHO: avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\Alwil Software\Avast5\aswWebRepIE.dll
O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKLM\..\Run: [AvastUI.exe] "C:\Program Files\Alwil Software\Avast5\AvastUI.exe" /nogui
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Real\RealPlayer\update\realsched.exe" -osboot
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Excel - res://C:\PROGRA~1\MIF5BA~1\Office12\EXCEL.EXE/3000
O9 - Extra button: PokerStars - {3AD14F0C-ED16-4e43-B6D8-661B03F6A1EF} - C:\Program Files\PokerStars\PokerStarsUpdate.exe
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MIF5BA~1\Office12\REFIEBAR.DLL
O10 - Unknown file in Winsock LSP: c:\program files\common files\microsoft shared\windows live\wlidnsp.dll
O10 - Unknown file in Winsock LSP: c:\program files\common files\microsoft shared\windows live\wlidnsp.dll
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O16 - DPF: {784797A8-342D-4072-9486-03C8D0F2F0A1} (Battlefield Heroes Updater) - http://www.battlefieldheroes.com/static ... .127.0.cab
O18 - Protocol: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O18 - Protocol: wlpg - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} - C:\Program Files\Windows Live\Photo Gallery\AlbumDownloadProtocolHandler.dll
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: avast! Antivirus - AVAST Software - C:\Program Files\Alwil Software\Avast5\AvastSvc.exe
O23 - Service: Google Software Updater (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: MBAMScheduler - Malwarebytes Corporation - C:\Program Files\Malwarebytes Anti-Malware\mbamscheduler.exe
O23 - Service: MBAMService - Malwarebytes Corporation - C:\Program Files\Malwarebytes Anti-Malware\mbamservice.exe
O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Mozilla Foundation - C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe
O23 - Service: PnkBstrA - Unknown owner - C:\windows\system32\PnkBstrA.exe
O23 - Service: RealNetworks Downloader Resolver Service - Unknown owner - C:\Program Files\RealNetworks\RealDownloader\rndlresolversvc.exe

--
End of file - 5058 bytes

[Leo18]

swMBR version 1.0.1.2041 Copyright(c) 2014 AVAST Software
Run date: 2014-06-18 10:40:55
-----------------------------
10:40:55.217 OS Version: Windows 6.1.7601 Service Pack 1
10:40:55.218 Number of processors: 2 586 0x170A
10:40:55.223 ComputerName: MULTIMEDIA-PC UserName: Multimedia
10:40:57.153 Initialize success
10:40:57.153 VM: initialized successfully
10:40:57.163 VM: outdated driver version !
10:41:01.541 AVAST engine defs: 14061701
10:41:26.890 Disk 0 (boot) \Device\Harddisk0\DR0 -> \Device\Ide\IAAStorageDevice-1
10:41:26.893 Disk 0 Vendor: SAMSUNG_ 2AJ1 Size: 305245MB BusType: 3
10:41:27.037 Disk 0 MBR read successfully
10:41:27.041 Disk 0 MBR scan
10:41:27.095 Disk 0 unknown MBR code
10:41:27.111 Disk 0 Partition 1 00 27 Hidden NTFS WinRE NTFS 20480 MB offset 2048
10:41:27.149 Disk 0 Partition 2 80 (A) 07 HPFS/NTFS NTFS 100 MB offset 41945088
10:41:27.154 Disk 0 default boot code
10:41:27.174 Disk 0 Partition 3 00 07 HPFS/NTFS NTFS 142330 MB offset 42149888
10:41:27.206 Disk 0 Partition 4 00 07 HPFS/NTFS NTFS 142333 MB offset 333641728
10:41:27.214 Disk 0 scanning sectors +625139712
10:41:27.310 Disk 0 scanning C:\windows\system32\drivers
10:41:40.991 Service scanning
10:42:02.566 Modules scanning
10:42:13.345 Disk 0 trace - called modules:
10:42:13.377 ntoskrnl.exe CLASSPNP.SYS disk.sys iaStor.sys halmacpi.dll
10:42:13.377 1 nt!IofCallDriver -> \Device\Harddisk0\DR0[0x86b66648]
10:42:13.377 3 CLASSPNP.SYS[8a37b59e] -> nt!IofCallDriver -> \Device\Ide\IAAStorageDevice-1[0x85d65028]
10:42:13.782 AVAST engine scan C:\windows
10:42:16.699 AVAST engine scan C:\windows\system32
10:45:03.308 AVAST engine scan C:\windows\system32\drivers
10:45:18.767 AVAST engine scan C:\Users\Multimedia
10:49:59.693 AVAST engine scan C:\ProgramData
10:52:47.487 Scan finished successfully
10:55:40.901 Disk 0 MBR has been saved successfully to "C:\Users\Multimedia\Desktop\MBR.dat"
10:55:40.912 The log file has been saved successfully to "C:\Users\Multimedia\Desktop\aswMBR.txt"

[jaro3]

ComboFix se odinstaluje takto:
Start-Spustit a zadej ComboFix /Uninstall

Vyčisti systém CCleanerem

Stáhni si OTC

na plochu. Poklepej na něj. Potom klikni na Clean up!.
Restartuj PC , pokud Ti bude doporučeno.

Zavři ostatní aplikace a prohlížeče, odpoj se od netu a fixni v HJT:
Návod

Kód: Vybrat vše

O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Real\RealPlayer\update\realsched.exe" -osboot

Avast5 zaktualizuj program na verzi Avast2014!!

Co problémy?

[Leo18]

Pc je o poznání rychlejší,problémy nejsou.Díky

[jaro3]

Pokud nejsou problémy , je to vše a můžeš dát vyřešeno , zelenou fajfku.