Prosím o kontrolu LOGU Vyřešeno

[Max583]

ComboFix 15-01-18.01 - Bohouš 19.01.2015 10:54:39.6.2 - x86
Microsoft Windows 7 Ultimate 6.1.7601.1.1250.420.1029.18.2048.913 [GMT 1:00]
Spuštěný z: d:\stažené soubory\Downloads\ComboFix.exe
AV: Kaspersky Anti-Virus *Disabled/Updated* {179979E8-273D-D14E-0543-2861940E4886}
SP: Kaspersky Anti-Virus *Disabled/Updated* {ACF8980C-0107-DEC0-3FF3-1313EF89023B}
SP: Windows Defender *Enabled/Outdated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.
.
((((((((((((((((((((((((((((((((((((((( Ostatní výmazy )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
c:\users\Bohouš\AppData\Roaming\Microsoft\Windows\mrkiaDywlnzXxL.dat
c:\windows\PFRO.log
.
.
((((((((((((((((((((((((( Soubory vytvořené od 2014-12-19 do 2015-01-19 )))))))))))))))))))))))))))))))
.
.
2015-01-19 10:06 . 2015-01-19 10:06 -------- d-----w- c:\users\Bohouš\AppData\Local\temp
2015-01-19 10:06 . 2015-01-19 10:06 -------- d-----w- c:\users\Public\AppData\Local\temp
2015-01-19 10:06 . 2015-01-19 10:06 -------- d-----w- c:\users\HomeGroupUser$\AppData\Local\temp
2015-01-17 12:33 . 2015-01-17 11:52 24064 ----a-w- c:\windows\zoek-delete.exe
2015-01-17 11:52 . 2015-01-17 12:30 -------- d-----w- C:\zoek_backup
2015-01-16 09:10 . 2015-01-16 09:10 388096 ----a-r- c:\users\Bohouš\AppData\Roaming\Microsoft\Installer\{45A66726-69BC-466B-A7A4-12FCBA4883D7}\HiJackThis.exe
2015-01-13 08:15 . 2015-01-13 09:59 -------- d-----r- c:\users\Bohouš\Dropbox
2015-01-13 08:12 . 2015-01-13 09:58 -------- d-----w- c:\users\Bohouš\AppData\Roaming\Dropbox
.
.
.
(((((((((((((((((((((((((((((((((((((((( Find3M výpis ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2015-01-19 09:22 . 2014-08-17 17:36 35064 ----a-w- c:\windows\system32\drivers\TrueSight.sys
2015-01-19 08:25 . 2014-06-11 08:43 163504 ----a-w- c:\programdata\Microsoft\Windows\Sqm\Manifest\Sqm10145.bin
2015-01-16 09:10 . 2015-01-16 09:10 388096 ----a-r- c:\users\Bohouš\AppData\Roaming\Microsoft\Installer\{45A66726-69BC-466B-A7A4-12FCBA4883D7}\HiJackThis.exe
2015-01-16 09:10 . 2015-01-16 09:10 388096 ----a-r- c:\users\Bohouš\AppData\Roaming\Microsoft\Installer\{45A66726-69BC-466B-A7A4-12FCBA4883D7}\HiJackThis.exe
2014-11-06 03:28 . 2014-11-12 11:35 2724864 ----a-w- c:\windows\system32\mshtml.tlb
2014-11-06 03:28 . 2014-11-12 11:35 4096 ----a-w- c:\windows\system32\ieetwcollectorres.dll
2014-11-06 03:13 . 2014-11-12 11:35 501248 ----a-w- c:\windows\system32\vbscript.dll
2014-11-06 03:13 . 2014-11-12 11:35 62464 ----a-w- c:\windows\system32\iesetup.dll
2014-11-06 03:12 . 2014-11-12 11:35 47616 ----a-w- c:\windows\system32\ieetwproxystub.dll
2014-11-06 03:10 . 2014-11-12 11:35 64000 ----a-w- c:\windows\system32\MshtmlDac.dll
2014-11-06 02:59 . 2014-11-12 11:35 115712 ----a-w- c:\windows\system32\ieUnatt.exe
2014-11-06 02:59 . 2014-11-12 11:35 102912 ----a-w- c:\windows\system32\ieetwcollector.exe
2014-11-06 02:58 . 2014-11-12 11:35 620032 ----a-w- c:\windows\system32\jscript9diag.dll
2014-11-06 02:51 . 2014-11-12 11:35 667648 ----a-w- c:\windows\system32\MsSpellCheckingFacility.exe
2014-11-06 02:42 . 2014-11-12 11:35 60416 ----a-w- c:\windows\system32\JavaScriptCollectionAgent.dll
2014-11-06 02:21 . 2014-11-12 11:35 4298240 ----a-w- c:\windows\system32\jscript9.dll
2014-11-06 02:21 . 2014-11-12 11:35 2051072 ----a-w- c:\windows\system32\inetcpl.cpl
2014-11-06 02:20 . 2014-11-12 11:35 1155072 ----a-w- c:\windows\system32\mshtmlmedia.dll
2014-11-06 01:52 . 2014-11-12 11:35 1892864 ----a-w- c:\windows\system32\wininet.dll
2014-11-05 17:50 . 2014-11-12 11:36 254464 ----a-w- c:\windows\system32\generaltel.dll
2014-11-05 17:50 . 2014-11-12 11:36 203776 ----a-w- c:\windows\system32\aepdu.dll
2014-11-05 17:47 . 2014-11-12 11:36 302592 ----a-w- c:\windows\system32\aeinv.dll
2014-11-04 13:30 . 2014-01-24 21:59 229000 ------w- c:\windows\system32\MpSigStub.exe
2014-10-25 01:32 . 2014-11-12 11:36 67584 ----a-w- c:\windows\system32\packager.dll
2013-02-18 16:46 . 2014-08-07 09:01 4216840 ----a-w- c:\program files\Common Files\vcredist_2008_sp1_x86.exe
.
.
(((((((((((((((((((((((((((((((((( Spouštěcí body v registru )))))))))))))))))))))))))))))))))))))))))))))
.
.
*Poznámka* prázdné záznamy a legitimní výchozí údaje nejsou zobrazeny.
REGEDIT4
.
[HKEY_LOCAL_MACHINE\SOFTWARE\~\Browser Helper Objects\{10921475-03CE-4E04-90CE-E2E7EF20C814}]
2014-08-31 07:41 752960 ----a-w- c:\program files\IObit\IObit Uninstaller\UninstallExplorer32.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\"DropboxExt1"]
@="{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}"
[HKEY_CLASSES_ROOT\CLSID\{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}]
2015-01-09 03:16 131480 ----a-w- c:\users\Bohouš\AppData\Roaming\Dropbox\bin\DropboxExt.24.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\"DropboxExt2"]
@="{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}"
[HKEY_CLASSES_ROOT\CLSID\{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}]
2015-01-09 03:16 131480 ----a-w- c:\users\Bohouš\AppData\Roaming\Dropbox\bin\DropboxExt.24.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\"DropboxExt3"]
@="{FB314EDD-A251-47B7-93E1-CDD82E34AF8B}"
[HKEY_CLASSES_ROOT\CLSID\{FB314EDD-A251-47B7-93E1-CDD82E34AF8B}]
2015-01-09 03:16 131480 ----a-w- c:\users\Bohouš\AppData\Roaming\Dropbox\bin\DropboxExt.24.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\"DropboxExt4"]
@="{FB314EDE-A251-47B7-93E1-CDD82E34AF8B}"
[HKEY_CLASSES_ROOT\CLSID\{FB314EDE-A251-47B7-93E1-CDD82E34AF8B}]
2015-01-09 03:16 131480 ----a-w- c:\users\Bohouš\AppData\Roaming\Dropbox\bin\DropboxExt.24.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\"DropboxExt5"]
@="{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}"
[HKEY_CLASSES_ROOT\CLSID\{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}]
2015-01-09 03:16 131480 ----a-w- c:\users\Bohouš\AppData\Roaming\Dropbox\bin\DropboxExt.24.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\"DropboxExt6"]
@="{FB314EDF-A251-47B7-93E1-CDD82E34AF8B}"
[HKEY_CLASSES_ROOT\CLSID\{FB314EDF-A251-47B7-93E1-CDD82E34AF8B}]
2015-01-09 03:16 131480 ----a-w- c:\users\Bohouš\AppData\Roaming\Dropbox\bin\DropboxExt.24.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\"DropboxExt7"]
@="{FB314EDC-A251-47B7-93E1-CDD82E34AF8B}"
[HKEY_CLASSES_ROOT\CLSID\{FB314EDC-A251-47B7-93E1-CDD82E34AF8B}]
2015-01-09 03:16 131480 ----a-w- c:\users\Bohouš\AppData\Roaming\Dropbox\bin\DropboxExt.24.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\"DropboxExt8"]
@="{FB314EE0-A251-47B7-93E1-CDD82E34AF8B}"
[HKEY_CLASSES_ROOT\CLSID\{FB314EE0-A251-47B7-93E1-CDD82E34AF8B}]
2015-01-09 03:16 131480 ----a-w- c:\users\Bohouš\AppData\Roaming\Dropbox\bin\DropboxExt.24.dll
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"RocketDock"="d:\programy\RocketDock\RocketDock.exe" [2007-09-02 495616]
"Rainlendar2"="d:\programy\Rainlendar2\Rainlendar2.exe" [2012-07-02 2498048]
"CCleaner Monitoring"="c:\program files\CCleaner\CCleaner.exe" [2014-09-26 4811032]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"SoundMan"="SOUNDMAN.EXE" [2009-04-14 604704]
"CDAServer"="c:\program files\Common Files\Common Desktop Agent\CDASrv.exe" [2012-03-09 350072]
.
[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\RunOnce]
"SPReview"="c:\windows\System32\SPReview\SPReview.exe" [2014-01-25 280576]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorAdmin"= 5 (0x5)
"ConsentPromptBehaviorUser"= 3 (0x3)
"EnableUIADesktopToggle"= 0 (0x0)
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\IMFservice]
@="Service"
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\BCSSync]
2012-11-05 14:27 89184 ----a-w- c:\program files\Microsoft Office\Office14\BCSSync.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\cz.seznam.software.autoupdate]
2013-05-16 13:25 1062472 ----a-w- c:\users\Bohouš\AppData\Roaming\Seznam.cz\szninstall.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\cz.seznam.software.szndesktop]
2013-04-12 08:10 92664 ----a-w- c:\users\Bohouš\AppData\Roaming\Seznam.cz\bin\wszndesktop.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\seznam-listicka-distribuce]
2013-05-16 13:25 1062472 ----a-w- c:\program files\Seznam.cz\distribution\szninstall.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\VirtualCloneDrive]
2009-06-17 11:44 85160 ----a-w- c:\program files\Elaborate Bytes\VirtualCloneDrive\VCDDaemon.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\KasperskyAntiVirus]
"DisableMonitoring"=dword:00000001
.
R3 ggflt;SEMC USB Flash Driver Filter;c:\windows\system32\DRIVERS\ggflt.sys [2014-04-08 12400]
R3 IEEtwCollectorService;Internet Explorer ETW Collector Service;c:\windows\system32\IEEtwCollector.exe [2014-11-06 102912]
R3 RdpVideoMiniport;Remote Desktop Video Miniport Driver;c:\windows\system32\drivers\rdpvideominiport.sys [2012-08-23 14848]
R3 Sony PC Companion;Sony PC Companion;c:\program files\Sony\Sony PC Companion\PCCService.exe [2013-02-04 155824]
R3 Synth3dVsc;Synth3dVsc;c:\windows\system32\drivers\synth3dvsc.sys [x]
R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys [2012-08-23 49664]
R3 tsusbhub;tsusbhub;c:\windows\system32\drivers\tsusbhub.sys [x]
R3 VGPU;VGPU;c:\windows\system32\drivers\rdvgkmd.sys [x]
R3 WatAdminSvc;Služba Technologie aktivace Windows;c:\windows\system32\Wat\WatAdminSvc.exe [2014-01-25 1343400]
S1 klhk;klhk;c:\windows\system32\DRIVERS\klhk.sys [2014-04-10 34400]
S1 KLIM6;Kaspersky Anti-Virus NDIS 6 Filter;c:\windows\system32\DRIVERS\klim6.sys [2014-02-25 25696]
S1 klpd;klpd;c:\windows\system32\DRIVERS\klpd.sys [2013-04-12 14432]
S1 kltdi;kltdi;c:\windows\system32\DRIVERS\kltdi.sys [2014-03-25 45024]
S1 kneps;kneps;c:\windows\system32\DRIVERS\kneps.sys [2014-03-26 145888]
S2 AVP15.0.0;Služba Kaspersky Anti-Virus 15.0.0;c:\program files\Kaspersky Lab\Kaspersky Internet Security 15.0.0\avp.exe [2014-04-20 233552]
S2 IMFservice;IMF Service;c:\program files\IObit\IObit Malware Fighter\IMFsrv.exe [2014-05-15 342336]
S2 SSPORT;SSPORT;c:\windows\system32\Drivers\SSPORT.sys [2013-04-10 5120]
S3 dc3d;MS Hardware Device Detection Driver;c:\windows\system32\DRIVERS\dc3d.sys [2014-08-31 65200]
S3 klflt;Kaspersky Lab Kernel DLL;c:\windows\system32\DRIVERS\klflt.sys [2014-10-11 112136]
S3 klkbdflt;Kaspersky Lab KLKBDFLT;c:\windows\system32\DRIVERS\klkbdflt.sys [2014-03-28 24672]
S3 klmouflt;Kaspersky Lab KLMOUFLT;c:\windows\system32\DRIVERS\klmouflt.sys [2013-08-08 25696]
.
.
--- Ostatní služby/ovladače v paměti ---
.
*Deregistered* - TrueSight
.
[HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{8A69D345-D564-463c-AFF1-A69D9E530F96}]
2014-08-17 14:11 1104200 ----a-w- c:\program files\Google\Chrome\Application\36.0.1985.143\Installer\chrmstp.exe
.
Obsah adresáře 'Naplánované úlohy'
.
2015-01-19 c:\windows\Tasks\AutoKMS.job
- c:\windows\AutoKMS\AutoKMS.exe [2014-12-29 09:06]
.
.
------- Doplňkový sken -------
.
uStart Page = hxxp://www.google.com
IE: E&xportovat do aplikace Microsoft Excel - c:\progra~1\MICROS~2\Office14\EXCEL.EXE/3000
IE: Open with WordPerfect - c:\program files\Corel\WordPerfect Office X7\Programs\WPLauncher.hta
TCP: DhcpNameServer = 77.237.128.2 77.237.128.1 192.168.1.1
.
- - - - NEPLATNÉ POLOŽKY ODSTRANĚNÉ Z REGISTRU - - - -
.
URLSearchHooks-{a1e75a0e-4397-4ba8-bb50-e19fb66890f4} - (no file)
.
.
.
--------------------- ZAMKNUTÉ KLÍČE V REGISTRU ---------------------
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\PCW\Security]
@Denied: (Full) (Everyone)
.
Celkový čas: 2015-01-19 11:09:29
ComboFix-quarantined-files.txt 2015-01-19 10:09
.
Před spuštěním: Volných bajtů: 10 463 657 984
Po spuštění: Volných bajtů: 10 405 195 776
.
- - End Of File - - B31DF69B6C6D48770D701777C9C37A3D
A36C5E4F47E84449FF07ED3517B43A31

RogueKiller V10.1.2.0 [Jan 7 2015] by Adlice Software
mail : http://www.adlice.com/contact/
Feedback : http://forum.adlice.com
Webová stránka : http://www.adlice.com/softwares/roguekiller/
Blog : http://www.adlice.com

Operační systém : Windows 7 (6.1.7601 Service Pack 1) 32 bits version
Spuštěno : Normální režim
Uživatel : Bohouš [Práva správce]
Mód : Smazat -- Datum : 01/19/2015 10:32:02

¤¤¤ Procesy : 0 ¤¤¤

¤¤¤ Registry : 6 ¤¤¤
[PUM.Dns] HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Tcpip\Parameters | DhcpNameServer : 77.237.128.2 77.237.128.1 192.168.1.1 [CZECH REPUBLIC (CZ)][CZECH REPUBLIC (CZ)] -> Nahrazeno ()
[PUM.Dns] HKEY_LOCAL_MACHINE\System\ControlSet001\Services\Tcpip\Parameters | DhcpNameServer : 77.237.128.2 77.237.128.1 192.168.1.1 [CZECH REPUBLIC (CZ)][CZECH REPUBLIC (CZ)] -> Nahrazeno ()
[PUM.Dns] HKEY_LOCAL_MACHINE\System\ControlSet002\Services\Tcpip\Parameters | DhcpNameServer : 77.237.128.2 77.237.128.1 192.168.1.1 [CZECH REPUBLIC (CZ)][CZECH REPUBLIC (CZ)] -> Nahrazeno ()
[PUM.Dns] HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Tcpip\Parameters\Interfaces\{3DCF8740-518D-40BD-940E-62F2FED3196D} | DhcpNameServer : 77.237.128.2 77.237.128.1 192.168.1.1 [CZECH REPUBLIC (CZ)][CZECH REPUBLIC (CZ)] -> Nahrazeno ()
[PUM.Dns] HKEY_LOCAL_MACHINE\System\ControlSet001\Services\Tcpip\Parameters\Interfaces\{3DCF8740-518D-40BD-940E-62F2FED3196D} | DhcpNameServer : 77.237.128.2 77.237.128.1 192.168.1.1 [CZECH REPUBLIC (CZ)][CZECH REPUBLIC (CZ)] -> Nahrazeno ()
[PUM.Dns] HKEY_LOCAL_MACHINE\System\ControlSet002\Services\Tcpip\Parameters\Interfaces\{3DCF8740-518D-40BD-940E-62F2FED3196D} | DhcpNameServer : 77.237.128.2 77.237.128.1 192.168.1.1 [CZECH REPUBLIC (CZ)][CZECH REPUBLIC (CZ)] -> Nahrazeno ()

¤¤¤ Úlohy : 0 ¤¤¤

¤¤¤ Soubory : 0 ¤¤¤

¤¤¤ Soubor HOSTS : 1 ¤¤¤
[C:\Windows\System32\drivers\etc\hosts] 127.0.0.1 localhost -> Smazáno

¤¤¤ Antirootkit : 0 (Driver: Nahrán) ¤¤¤

¤¤¤ Webové prohlížeče : 0 ¤¤¤

¤¤¤ Kontrola MBR : ¤¤¤
+++++ PhysicalDrive0: ST340014A ATA Device +++++
--- User ---
[MBR] c739e60b57ac8abc11d8279d7a5ac0a7
[BSP] ab99cc4c3e011a3a9cca4b69a968049e : Windows Vista/7/8 MBR Code
Partition table:
0 - [ACTIVE] NTFS (0x7) [VISIBLE] Offset (sectors): 2048 | Size: 100 MB
1 - [XXXXXX] NTFS (0x7) [VISIBLE] Offset (sectors): 206848 | Size: 38063 MB
User = LL1 ... OK
User = LL2 ... OK

+++++ PhysicalDrive1: WDC WD5000AVDS-63U7B1 ATA Device +++++
--- User ---
[MBR] b4dd07df154ef37bcc0d73bbec167488
[BSP] 6a52188395639a4256825024f288b9ff : HP MBR Code
Partition table:
0 - [XXXXXX] NTFS (0x7) [VISIBLE] Offset (sectors): 63 | Size: 476937 MB
User = LL1 ... OK
User = LL2 ... OK


============================================
RKreport_DEL_01172015_115402.log - RKreport_DEL_01172015_125026.log - RKreport_DEL_01182015_103548.log - RKreport_DEL_01182015_103601.log
RKreport_DEL_01182015_104147.log - RKreport_DEL_01182015_104205.log - RKreport_DEL_01182015_104222.log - RKreport_DEL_01182015_104659.log
RKreport_DEL_01182015_104707.log - RKreport_DEL_08182014_072016.log - RKreport_SCN_01172015_101854.log - RKreport_SCN_01172015_124136.log
RKreport_SCN_01172015_124551.log - RKreport_SCN_01172015_124928.log - RKreport_SCN_01182015_103520.log - RKreport_SCN_01182015_104127.log
RKreport_SCN_01182015_104625.log - RKreport_SCN_08172014_194452.log - RKreport_SCN_08182014_071854.log - RKreport_SCN_01192015_102959.log

[Reklama]

[Orcus]

Zlegalizuj Office + případně i Windows.


Otevři si Poznámkový blok (Start -> Spustit... a napiš do okna Notepad a dej Ok).
Zkopíruj do něj následující celý text označený červeně:

ClearJavaCache::

KillAll::

File::
c:\windows\Tasks\AutoKMS.job
c:\windows\AutoKMS\AutoKMS.exe



Zvol možnost Soubor -> Uložit jako... a nastav tyto parametry:
Název souboru: zde napiš: CFScript.txt
Uložit jako typ: tak tam vyber Všechny soubory
Ulož soubor na plochu.
Ukonči všechna aktivní okna.


Uchop myší vytvořený skript CFScript.txt, přemísti ho nad stažený program ComboFix.exe
a když se oba soubory překryjí, skript upusť.


- Automaticky se spustí ComboFix, oprava může trvat i déle než 10 minut. ! Nech ComboFix dokončit svou práci !
- Vlož sem log, který vyběhne v závěru čistícího procesu

Upozornění : Může se stát, že po aplikaci skriptu a restartu počítače Windows nenaběhnou, pak znovu restartuj počítač, mačkej F8 a pak zvol poslední známou funkční konfiguraci.

====================================================

Stáhni si aswMBR
na svojí plochu. Uzavři všechna okna , programy a prohlížeče. Poklepej na aswMBR.exe. Pokud se objeví hláška o možnosti stáhnutí databáze Avastu , klikni na NE. Poté klikni na „Scan“ . Po skenu klikni na „Save Log“ a ulož si log na plochu .Zkopíruj sem celý obsah toho logu. Pak klikni na „Exit“ k zavření programu.

[Max583]

ComboFix 15-01-18.01 - Bohouš 19.01.2015 15:07:55.7.2 - x86
Microsoft Windows 7 Ultimate 6.1.7601.1.1250.420.1029.18.2048.831 [GMT 1:00]
Spuštěný z: d:\sta×enú soubory\Downloads\ComboFix.exe
Použité ovládací přepínače :: c:\users\BohouÜ\Desktop\CFScript.txt
AV: Kaspersky Anti-Virus *Disabled/Updated* {179979E8-273D-D14E-0543-2861940E4886}
SP: Kaspersky Anti-Virus *Disabled/Updated* {ACF8980C-0107-DEC0-3FF3-1313EF89023B}
SP: Windows Defender *Enabled/Outdated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.
.
((((((((((((((((((((((((( Soubory vytvořené od 2014-12-19 do 2015-01-19 )))))))))))))))))))))))))))))))
.
.
2015-01-19 14:18 . 2015-01-19 14:18 -------- d-----w- c:\users\Public\AppData\Local\temp
2015-01-19 14:18 . 2015-01-19 14:18 -------- d-----w- c:\users\HomeGroupUser$\AppData\Local\temp
2015-01-19 14:18 . 2015-01-19 14:18 -------- d-----w- c:\users\Guest\AppData\Local\temp
2015-01-19 14:18 . 2015-01-19 14:18 -------- d-----w- c:\users\Default\AppData\Local\temp
2015-01-19 14:18 . 2015-01-19 14:18 -------- d-----w- c:\users\Administrator\AppData\Local\temp
2015-01-19 10:09 . 2015-01-19 14:18 -------- d-----w- c:\users\Bohouš\AppData\Local\temp
2015-01-17 12:33 . 2015-01-17 11:52 24064 ----a-w- c:\windows\zoek-delete.exe
2015-01-17 11:52 . 2015-01-17 12:30 -------- d-----w- C:\zoek_backup
2015-01-16 09:10 . 2015-01-16 09:10 388096 ----a-r- c:\users\Bohouš\AppData\Roaming\Microsoft\Installer\{45A66726-69BC-466B-A7A4-12FCBA4883D7}\HiJackThis.exe
2015-01-13 08:15 . 2015-01-13 09:59 -------- d-----r- c:\users\Bohouš\Dropbox
2015-01-13 08:12 . 2015-01-13 09:58 -------- d-----w- c:\users\Bohouš\AppData\Roaming\Dropbox
.
.
.
(((((((((((((((((((((((((((((((((((((((( Find3M výpis ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2015-01-19 09:22 . 2014-08-17 17:36 35064 ----a-w- c:\windows\system32\drivers\TrueSight.sys
2015-01-19 08:25 . 2014-06-11 08:43 163504 ----a-w- c:\programdata\Microsoft\Windows\Sqm\Manifest\Sqm10145.bin
2015-01-16 09:10 . 2015-01-16 09:10 388096 ----a-r- c:\users\Bohouš\AppData\Roaming\Microsoft\Installer\{45A66726-69BC-466B-A7A4-12FCBA4883D7}\HiJackThis.exe
2015-01-16 09:10 . 2015-01-16 09:10 388096 ----a-r- c:\users\Bohouš\AppData\Roaming\Microsoft\Installer\{45A66726-69BC-466B-A7A4-12FCBA4883D7}\HiJackThis.exe
2014-11-06 03:28 . 2014-11-12 11:35 2724864 ----a-w- c:\windows\system32\mshtml.tlb
2014-11-06 03:28 . 2014-11-12 11:35 4096 ----a-w- c:\windows\system32\ieetwcollectorres.dll
2014-11-06 03:13 . 2014-11-12 11:35 501248 ----a-w- c:\windows\system32\vbscript.dll
2014-11-06 03:13 . 2014-11-12 11:35 62464 ----a-w- c:\windows\system32\iesetup.dll
2014-11-06 03:12 . 2014-11-12 11:35 47616 ----a-w- c:\windows\system32\ieetwproxystub.dll
2014-11-06 03:10 . 2014-11-12 11:35 64000 ----a-w- c:\windows\system32\MshtmlDac.dll
2014-11-06 02:59 . 2014-11-12 11:35 115712 ----a-w- c:\windows\system32\ieUnatt.exe
2014-11-06 02:59 . 2014-11-12 11:35 102912 ----a-w- c:\windows\system32\ieetwcollector.exe
2014-11-06 02:58 . 2014-11-12 11:35 620032 ----a-w- c:\windows\system32\jscript9diag.dll
2014-11-06 02:51 . 2014-11-12 11:35 667648 ----a-w- c:\windows\system32\MsSpellCheckingFacility.exe
2014-11-06 02:42 . 2014-11-12 11:35 60416 ----a-w- c:\windows\system32\JavaScriptCollectionAgent.dll
2014-11-06 02:21 . 2014-11-12 11:35 4298240 ----a-w- c:\windows\system32\jscript9.dll
2014-11-06 02:21 . 2014-11-12 11:35 2051072 ----a-w- c:\windows\system32\inetcpl.cpl
2014-11-06 02:20 . 2014-11-12 11:35 1155072 ----a-w- c:\windows\system32\mshtmlmedia.dll
2014-11-06 01:52 . 2014-11-12 11:35 1892864 ----a-w- c:\windows\system32\wininet.dll
2014-11-05 17:50 . 2014-11-12 11:36 254464 ----a-w- c:\windows\system32\generaltel.dll
2014-11-05 17:50 . 2014-11-12 11:36 203776 ----a-w- c:\windows\system32\aepdu.dll
2014-11-05 17:47 . 2014-11-12 11:36 302592 ----a-w- c:\windows\system32\aeinv.dll
2014-11-04 13:30 . 2014-01-24 21:59 229000 ------w- c:\windows\system32\MpSigStub.exe
2014-10-25 01:32 . 2014-11-12 11:36 67584 ----a-w- c:\windows\system32\packager.dll
2013-02-18 16:46 . 2014-08-07 09:01 4216840 ----a-w- c:\program files\Common Files\vcredist_2008_sp1_x86.exe
.
.
(((((((((((((((((((((((((((((((((( Spouštěcí body v registru )))))))))))))))))))))))))))))))))))))))))))))
.
.
*Poznámka* prázdné záznamy a legitimní výchozí údaje nejsou zobrazeny.
REGEDIT4
.
[HKEY_LOCAL_MACHINE\SOFTWARE\~\Browser Helper Objects\{10921475-03CE-4E04-90CE-E2E7EF20C814}]
2014-08-31 07:41 752960 ----a-w- c:\program files\IObit\IObit Uninstaller\UninstallExplorer32.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\"DropboxExt1"]
@="{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}"
[HKEY_CLASSES_ROOT\CLSID\{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}]
2015-01-09 03:16 131480 ----a-w- c:\users\Bohouš\AppData\Roaming\Dropbox\bin\DropboxExt.24.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\"DropboxExt2"]
@="{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}"
[HKEY_CLASSES_ROOT\CLSID\{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}]
2015-01-09 03:16 131480 ----a-w- c:\users\Bohouš\AppData\Roaming\Dropbox\bin\DropboxExt.24.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\"DropboxExt3"]
@="{FB314EDD-A251-47B7-93E1-CDD82E34AF8B}"
[HKEY_CLASSES_ROOT\CLSID\{FB314EDD-A251-47B7-93E1-CDD82E34AF8B}]
2015-01-09 03:16 131480 ----a-w- c:\users\Bohouš\AppData\Roaming\Dropbox\bin\DropboxExt.24.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\"DropboxExt4"]
@="{FB314EDE-A251-47B7-93E1-CDD82E34AF8B}"
[HKEY_CLASSES_ROOT\CLSID\{FB314EDE-A251-47B7-93E1-CDD82E34AF8B}]
2015-01-09 03:16 131480 ----a-w- c:\users\Bohouš\AppData\Roaming\Dropbox\bin\DropboxExt.24.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\"DropboxExt5"]
@="{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}"
[HKEY_CLASSES_ROOT\CLSID\{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}]
2015-01-09 03:16 131480 ----a-w- c:\users\Bohouš\AppData\Roaming\Dropbox\bin\DropboxExt.24.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\"DropboxExt6"]
@="{FB314EDF-A251-47B7-93E1-CDD82E34AF8B}"
[HKEY_CLASSES_ROOT\CLSID\{FB314EDF-A251-47B7-93E1-CDD82E34AF8B}]
2015-01-09 03:16 131480 ----a-w- c:\users\Bohouš\AppData\Roaming\Dropbox\bin\DropboxExt.24.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\"DropboxExt7"]
@="{FB314EDC-A251-47B7-93E1-CDD82E34AF8B}"
[HKEY_CLASSES_ROOT\CLSID\{FB314EDC-A251-47B7-93E1-CDD82E34AF8B}]
2015-01-09 03:16 131480 ----a-w- c:\users\Bohouš\AppData\Roaming\Dropbox\bin\DropboxExt.24.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\"DropboxExt8"]
@="{FB314EE0-A251-47B7-93E1-CDD82E34AF8B}"
[HKEY_CLASSES_ROOT\CLSID\{FB314EE0-A251-47B7-93E1-CDD82E34AF8B}]
2015-01-09 03:16 131480 ----a-w- c:\users\Bohouš\AppData\Roaming\Dropbox\bin\DropboxExt.24.dll
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"RocketDock"="d:\programy\RocketDock\RocketDock.exe" [2007-09-02 495616]
"Rainlendar2"="d:\programy\Rainlendar2\Rainlendar2.exe" [2012-07-02 2498048]
"CCleaner Monitoring"="c:\program files\CCleaner\CCleaner.exe" [2014-09-26 4811032]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"SoundMan"="SOUNDMAN.EXE" [2009-04-14 604704]
"CDAServer"="c:\program files\Common Files\Common Desktop Agent\CDASrv.exe" [2012-03-09 350072]
.
[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\RunOnce]
"SPReview"="c:\windows\System32\SPReview\SPReview.exe" [2014-01-25 280576]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorAdmin"= 5 (0x5)
"ConsentPromptBehaviorUser"= 3 (0x3)
"EnableUIADesktopToggle"= 0 (0x0)
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\IMFservice]
@="Service"
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\BCSSync]
2012-11-05 14:27 89184 ----a-w- c:\program files\Microsoft Office\Office14\BCSSync.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\cz.seznam.software.autoupdate]
2013-05-16 13:25 1062472 ----a-w- c:\users\Bohouš\AppData\Roaming\Seznam.cz\szninstall.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\cz.seznam.software.szndesktop]
2013-04-12 08:10 92664 ----a-w- c:\users\Bohouš\AppData\Roaming\Seznam.cz\bin\wszndesktop.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\seznam-listicka-distribuce]
2013-05-16 13:25 1062472 ----a-w- c:\program files\Seznam.cz\distribution\szninstall.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\VirtualCloneDrive]
2009-06-17 11:44 85160 ----a-w- c:\program files\Elaborate Bytes\VirtualCloneDrive\VCDDaemon.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\KasperskyAntiVirus]
"DisableMonitoring"=dword:00000001
.
R3 ggflt;SEMC USB Flash Driver Filter;c:\windows\system32\DRIVERS\ggflt.sys [2014-04-08 12400]
R3 IEEtwCollectorService;Internet Explorer ETW Collector Service;c:\windows\system32\IEEtwCollector.exe [2014-11-06 102912]
R3 RdpVideoMiniport;Remote Desktop Video Miniport Driver;c:\windows\system32\drivers\rdpvideominiport.sys [2012-08-23 14848]
R3 Sony PC Companion;Sony PC Companion;c:\program files\Sony\Sony PC Companion\PCCService.exe [2013-02-04 155824]
R3 Synth3dVsc;Synth3dVsc;c:\windows\system32\drivers\synth3dvsc.sys [x]
R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys [2012-08-23 49664]
R3 tsusbhub;tsusbhub;c:\windows\system32\drivers\tsusbhub.sys [x]
R3 VGPU;VGPU;c:\windows\system32\drivers\rdvgkmd.sys [x]
R3 WatAdminSvc;Služba Technologie aktivace Windows;c:\windows\system32\Wat\WatAdminSvc.exe [2014-01-25 1343400]
S1 klhk;klhk;c:\windows\system32\DRIVERS\klhk.sys [2014-04-10 34400]
S1 KLIM6;Kaspersky Anti-Virus NDIS 6 Filter;c:\windows\system32\DRIVERS\klim6.sys [2014-02-25 25696]
S1 klpd;klpd;c:\windows\system32\DRIVERS\klpd.sys [2013-04-12 14432]
S1 kltdi;kltdi;c:\windows\system32\DRIVERS\kltdi.sys [2014-03-25 45024]
S1 kneps;kneps;c:\windows\system32\DRIVERS\kneps.sys [2014-03-26 145888]
S2 AVP15.0.0;Služba Kaspersky Anti-Virus 15.0.0;c:\program files\Kaspersky Lab\Kaspersky Internet Security 15.0.0\avp.exe [2014-04-20 233552]
S2 IMFservice;IMF Service;c:\program files\IObit\IObit Malware Fighter\IMFsrv.exe [2014-05-15 342336]
S2 SSPORT;SSPORT;c:\windows\system32\Drivers\SSPORT.sys [2013-04-10 5120]
S3 dc3d;MS Hardware Device Detection Driver;c:\windows\system32\DRIVERS\dc3d.sys [2014-08-31 65200]
S3 klflt;Kaspersky Lab Kernel DLL;c:\windows\system32\DRIVERS\klflt.sys [2014-10-11 112136]
S3 klkbdflt;Kaspersky Lab KLKBDFLT;c:\windows\system32\DRIVERS\klkbdflt.sys [2014-03-28 24672]
S3 klmouflt;Kaspersky Lab KLMOUFLT;c:\windows\system32\DRIVERS\klmouflt.sys [2013-08-08 25696]
.
.
[HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{8A69D345-D564-463c-AFF1-A69D9E530F96}]
2014-08-17 14:11 1104200 ----a-w- c:\program files\Google\Chrome\Application\36.0.1985.143\Installer\chrmstp.exe
.
Obsah adresáře 'Naplánované úlohy'
.
2015-01-19 c:\windows\Tasks\AutoKMS.job
- c:\windows\AutoKMS\AutoKMS.exe [2014-12-29 09:06]
.
.
------- Doplňkový sken -------
.
uStart Page = hxxp://www.google.com
IE: E&xportovat do aplikace Microsoft Excel - c:\progra~1\MICROS~2\Office14\EXCEL.EXE/3000
IE: Open with WordPerfect - c:\program files\Corel\WordPerfect Office X7\Programs\WPLauncher.hta
TCP: DhcpNameServer = 77.237.128.2 77.237.128.1 192.168.1.1
.
- - - - NEPLATNÉ POLOŽKY ODSTRANĚNÉ Z REGISTRU - - - -
.
URLSearchHooks-{a1e75a0e-4397-4ba8-bb50-e19fb66890f4} - (no file)
.
.
.
--------------------- ZAMKNUTÉ KLÍČE V REGISTRU ---------------------
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\PCW\Security]
@Denied: (Full) (Everyone)
.
Celkový čas: 2015-01-19 15:21:59
ComboFix-quarantined-files.txt 2015-01-19 14:21
ComboFix2.txt 2015-01-19 10:09
.
Před spuštěním: Volných bajtů: 10 467 332 096
Po spuštění: Volných bajtů: 10 403 958 784
.
- - End Of File - - 4443FB5D2E248C9564143A773D1A1EF5
A36C5E4F47E84449FF07ED3517B43A31

aswMBR version 1.0.1.2290 Copyright(c) 2014 AVAST Software
Run date: 2015-01-19 15:25:11
-----------------------------
15:25:11.128 OS Version: Windows 6.1.7601 Service Pack 1
15:25:11.128 Number of processors: 2 586 0x409
15:25:11.128 ComputerName: BOHOUŠ-PC UserName: Bohouš
15:25:13.191 Initialize success
15:25:13.207 VM: initialized successfully
15:25:13.207 VM: Intel CPU virtualization not supported
15:25:21.690 Disk 0 (boot) \Device\Harddisk0\DR0 -> \Device\Ide\IdeDeviceP0T1L0-1
15:25:21.706 Disk 0 Vendor: ST340014A 3.06 Size: 38165MB BusType: 3
15:25:21.706 Disk 1 \Device\Harddisk1\DR1 -> \Device\Ide\IdeDeviceP2T0L0-3
15:25:21.706 Disk 1 Vendor: WDC_WD5000AVDS-63U7B1 01.00A01 Size: 476940MB BusType: 3
15:25:21.862 Disk 0 MBR read successfully
15:25:21.862 Disk 0 MBR scan
15:25:21.877 Disk 0 Windows 7 default MBR code
15:25:21.877 Disk 0 Partition 1 80 (A) 07 HPFS/NTFS NTFS 100 MB offset 2048
15:25:21.893 Disk 0 Boot: NTFS code=2
15:25:21.909 Disk 0 Partition 2 00 07 HPFS/NTFS NTFS 38063 MB offset 206848
15:25:21.924 Disk 0 scanning sectors +78159872
15:25:22.096 Disk 0 scanning C:\Windows\system32\drivers
15:25:31.034 Service scanning
15:25:44.331 Service kl1 C:\Windows\system32\DRIVERS\kl1.sys **LOCKED** 5
15:25:44.409 Service klflt C:\Windows\system32\DRIVERS\klflt.sys **LOCKED** 5
15:25:44.456 Service klhk C:\Windows\system32\DRIVERS\klhk.sys **LOCKED** 5
15:25:44.549 Service KLIM6 C:\Windows\system32\DRIVERS\klim6.sys **LOCKED** 5
15:25:44.674 Service klkbdflt C:\Windows\system32\DRIVERS\klkbdflt.sys **LOCKED** 5
15:25:44.784 Service klmouflt C:\Windows\system32\DRIVERS\klmouflt.sys **LOCKED** 5
15:25:44.909 Service klpd C:\Windows\system32\DRIVERS\klpd.sys **LOCKED** 5
15:25:45.034 Service kltdi C:\Windows\system32\DRIVERS\kltdi.sys **LOCKED** 5
15:25:45.159 Service kneps C:\Windows\system32\DRIVERS\kneps.sys **LOCKED** 5
15:26:08.846 Modules scanning
15:26:08.846 Disk 0 trace - called modules:
15:26:08.877 ntkrnlpa.exe CLASSPNP.SYS disk.sys ACPI.sys halmacpi.dll ataport.SYS intelide.sys PCIIDEX.SYS atapi.sys
15:26:08.877 1 nt!IofCallDriver -> \Device\Harddisk0\DR0[0x85e78778]
15:26:08.893 3 CLASSPNP.SYS[897cb59e] -> nt!IofCallDriver -> [0x85d53358]
15:26:08.909 5 ACPI.sys[893403d4] -> nt!IofCallDriver -> \Device\Ide\IdeDeviceP0T1L0-1[0x85d58030]
15:26:08.909 Disk 0 statistics 80754/0/0 @ 4,87 MB/s
15:26:08.924 Scan finished successfully
15:26:26.518 Disk 0 MBR has been saved successfully to "C:\Users\Bohouš\Desktop\MBR.dat"
15:26:26.534 The log file has been saved successfully to "C:\Users\Bohouš\Desktop\aswMBR.txt"

[jaro3]

ComboFix se odinstaluje takto:
Start-Spustit a zadej ComboFix /Uninstall

Vyčisti systém CCleanerem

Stáhni si OTC

na plochu. Poklepej na něj. Potom klikni na Clean up!.
Restartuj PC , pokud Ti bude doporučeno.

Co problémy?

[Max583]

Jo je to daleko lepší - jak jsem již psal musím se nějak zaměřit na tu rychlost připojení. Všechno moc dlouho trvá. Za vyčištění díky. Dám vyřízeno.