Prosím o kontrolu logu win32/injector DCDI v karanténě Vyřešeno

[jaro3]

Vypni rez. ochranu u antiviru a antispywaru,příp. firewall..

Otevři si Poznámkový blok (Start -> Spustit... a napiš do okna Notepad a dej Ok.
Zkopíruj do něj následující celý text označený zeleně:

Kód: Vybrat vše

ClearJavaCache::
KillAll::
File::
c:\windows\Tasks\Adobe Flash Player Updater.job
c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
c:\windows\Tasks\GoogleUpdateTaskMachineUA.job

Folder::
c:\program files (x86)\Google\Update

RegLock::
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\PCW\Security]
@Denied: (Full) (Everyone)

Zvol možnost Soubor -> Uložit jako... a nastav tyto parametry:
Název souboru: zde napiš: CFScript.txt
Uložit jako typ: tak tam vyber Všechny soubory
Ulož soubor na plochu.
Ukonči všechna aktivní okna.

Uchop myší vytvořený skript CFScript.txt, přemísti ho nad stažený program ComboFix.exe a když se oba soubory překryjí, skript upusť.
- Automaticky se spustí ComboFix
- Vlož sem log, který vyběhne v závěru čistícího procesu + nový log z HJT

Upozornění : Může se stát, že po aplikaci Combofixu a restartu počítače, Windows nenaběhnou , nebo nenajede plocha , budou problémy s připojením, pak znovu restartuj počítač, pokud to nepomůže , po restartu mačkej klávesu F8 a pak zvol poslední známou funkční konfiguraci. , či použij bod obnovy.

Stáhni si aswMBR
na svojí plochu. Uzavři všechna okna , programy a prohlížeče. Poklepej na aswMBR.exe. Pokud se objeví hláška o možnosti stáhnutí databáze Avastu , klikni na NE. Poté klikni na „Scan“ . Po skenu klikni na „Save Log“ a ulož si log na plochu .Zkopíruj sem celý obsah toho logu. Pak klikni na „Exit“ k zavření programu.

[Reklama]

[OTAS]

ComboFix 16-07-16.01 - Otto 22.07.2016 11:18:05.2.4 - x64
Microsoft Windows 7 Professional 6.1.7601.1.1250.420.1029.18.4048.2172 [GMT 2:00]
Spuštěný z: c:\users\Otto\Desktop\ComboFix.exe
Použité ovládací přepínače :: c:\users\Otto\Desktop\CFScript.txt
AV: ESET NOD32 Antivirus 9.0.318.22 *Disabled/Updated* {19259FAE-8396-A113-46DB-15B0E7DFA289}
SP: ESET NOD32 Antivirus 9.0.376.1 *Disabled/Updated* {A2447E4A-A5AC-AE9D-7C6B-2EC29C58E834}
SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.
FILE ::
"c:\windows\Tasks\Adobe Flash Player Updater.job"
"c:\windows\Tasks\GoogleUpdateTaskMachineCore.job"
"c:\windows\Tasks\GoogleUpdateTaskMachineUA.job"
.
.
((((((((((((((((((((((((((((((((((((((( Ostatní výmazy )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
c:\program files (x86)\Google\Update
c:\program files (x86)\Google\Update\1.3.30.3\GoogleCrashHandler.exe
c:\program files (x86)\Google\Update\1.3.30.3\GoogleCrashHandler64.exe
c:\program files (x86)\Google\Update\1.3.30.3\GoogleUpdate.exe
c:\program files (x86)\Google\Update\1.3.30.3\GoogleUpdateBroker.exe
c:\program files (x86)\Google\Update\1.3.30.3\GoogleUpdateComRegisterShell64.exe
c:\program files (x86)\Google\Update\1.3.30.3\GoogleUpdateHelper.msi
c:\program files (x86)\Google\Update\1.3.30.3\GoogleUpdateOnDemand.exe
c:\program files (x86)\Google\Update\1.3.30.3\GoogleUpdateSetup.exe
c:\program files (x86)\Google\Update\1.3.30.3\GoogleUpdateWebPlugin.exe
c:\program files (x86)\Google\Update\1.3.30.3\goopdate.dll
c:\program files (x86)\Google\Update\1.3.30.3\goopdateres_am.dll
c:\program files (x86)\Google\Update\1.3.30.3\goopdateres_ar.dll
c:\program files (x86)\Google\Update\1.3.30.3\goopdateres_bg.dll
c:\program files (x86)\Google\Update\1.3.30.3\goopdateres_bn.dll
c:\program files (x86)\Google\Update\1.3.30.3\goopdateres_ca.dll
c:\program files (x86)\Google\Update\1.3.30.3\goopdateres_cs.dll
c:\program files (x86)\Google\Update\1.3.30.3\goopdateres_da.dll
c:\program files (x86)\Google\Update\1.3.30.3\goopdateres_de.dll
c:\program files (x86)\Google\Update\1.3.30.3\goopdateres_el.dll
c:\program files (x86)\Google\Update\1.3.30.3\goopdateres_en-GB.dll
c:\program files (x86)\Google\Update\1.3.30.3\goopdateres_en.dll
c:\program files (x86)\Google\Update\1.3.30.3\goopdateres_es-419.dll
c:\program files (x86)\Google\Update\1.3.30.3\goopdateres_es.dll
c:\program files (x86)\Google\Update\1.3.30.3\goopdateres_et.dll
c:\program files (x86)\Google\Update\1.3.30.3\goopdateres_fa.dll
c:\program files (x86)\Google\Update\1.3.30.3\goopdateres_fi.dll
c:\program files (x86)\Google\Update\1.3.30.3\goopdateres_fil.dll
c:\program files (x86)\Google\Update\1.3.30.3\goopdateres_fr.dll
c:\program files (x86)\Google\Update\1.3.30.3\goopdateres_gu.dll
c:\program files (x86)\Google\Update\1.3.30.3\goopdateres_hi.dll
c:\program files (x86)\Google\Update\1.3.30.3\goopdateres_hr.dll
c:\program files (x86)\Google\Update\1.3.30.3\goopdateres_hu.dll
c:\program files (x86)\Google\Update\1.3.30.3\goopdateres_id.dll
c:\program files (x86)\Google\Update\1.3.30.3\goopdateres_is.dll
c:\program files (x86)\Google\Update\1.3.30.3\goopdateres_it.dll
c:\program files (x86)\Google\Update\1.3.30.3\goopdateres_iw.dll
c:\program files (x86)\Google\Update\1.3.30.3\goopdateres_ja.dll
c:\program files (x86)\Google\Update\1.3.30.3\goopdateres_kn.dll
c:\program files (x86)\Google\Update\1.3.30.3\goopdateres_ko.dll
c:\program files (x86)\Google\Update\1.3.30.3\goopdateres_lt.dll
c:\program files (x86)\Google\Update\1.3.30.3\goopdateres_lv.dll
c:\program files (x86)\Google\Update\1.3.30.3\goopdateres_ml.dll
c:\program files (x86)\Google\Update\1.3.30.3\goopdateres_mr.dll
c:\program files (x86)\Google\Update\1.3.30.3\goopdateres_ms.dll
c:\program files (x86)\Google\Update\1.3.30.3\goopdateres_nl.dll
c:\program files (x86)\Google\Update\1.3.30.3\goopdateres_no.dll
c:\program files (x86)\Google\Update\1.3.30.3\goopdateres_pl.dll
c:\program files (x86)\Google\Update\1.3.30.3\goopdateres_pt-BR.dll
c:\program files (x86)\Google\Update\1.3.30.3\goopdateres_pt-PT.dll
c:\program files (x86)\Google\Update\1.3.30.3\goopdateres_ro.dll
c:\program files (x86)\Google\Update\1.3.30.3\goopdateres_ru.dll
c:\program files (x86)\Google\Update\1.3.30.3\goopdateres_sk.dll
c:\program files (x86)\Google\Update\1.3.30.3\goopdateres_sl.dll
c:\program files (x86)\Google\Update\1.3.30.3\goopdateres_sr.dll
c:\program files (x86)\Google\Update\1.3.30.3\goopdateres_sv.dll
c:\program files (x86)\Google\Update\1.3.30.3\goopdateres_sw.dll
c:\program files (x86)\Google\Update\1.3.30.3\goopdateres_ta.dll
c:\program files (x86)\Google\Update\1.3.30.3\goopdateres_te.dll
c:\program files (x86)\Google\Update\1.3.30.3\goopdateres_th.dll
c:\program files (x86)\Google\Update\1.3.30.3\goopdateres_tr.dll
c:\program files (x86)\Google\Update\1.3.30.3\goopdateres_uk.dll
c:\program files (x86)\Google\Update\1.3.30.3\goopdateres_ur.dll
c:\program files (x86)\Google\Update\1.3.30.3\goopdateres_vi.dll
c:\program files (x86)\Google\Update\1.3.30.3\goopdateres_zh-CN.dll
c:\program files (x86)\Google\Update\1.3.30.3\goopdateres_zh-TW.dll
c:\program files (x86)\Google\Update\1.3.30.3\npGoogleUpdate3.dll
c:\program files (x86)\Google\Update\1.3.30.3\psmachine.dll
c:\program files (x86)\Google\Update\1.3.30.3\psmachine_64.dll
c:\program files (x86)\Google\Update\1.3.30.3\psuser.dll
c:\program files (x86)\Google\Update\1.3.30.3\psuser_64.dll
c:\program files (x86)\Google\Update\Download\{430FD4D0-B729-4F61-AA34-91526481799D}\1.3.30.3\GoogleUpdateSetup.exe
c:\program files (x86)\Google\Update\Download\{4DC8B4CA-1BDA-483E-B5FA-D3C12E15B62D}\51.0.2704.106\51.0.2704.106_50.0.2661.102_chrome_updater.exe
c:\program files (x86)\Google\Update\GoogleUpdate.exe
c:\windows\Tasks\Adobe Flash Player Updater.job
c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
.
.
((((((((((((((((((((((((((((((((((((((( Ovladače/Služby )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
-------\Service_gupdate
-------\Service_gupdatem
-------\Service_gupdate
-------\Service_gupdatem
.
.
((((((((((((((((((((((((( Soubory vytvořené od 2016-06-22 do 2016-07-22 )))))))))))))))))))))))))))))))
.
.
2016-07-22 09:22 . 2016-07-22 09:22 -------- d-----w- c:\users\UpdatusUser\AppData\Local\temp
2016-07-21 14:54 . 2016-07-21 14:54 -------- d-----w- C:\zoek
2016-07-20 19:05 . 2016-07-20 19:05 -------- d-----w- c:\users\Otto\AppData\Local\CEF
2016-07-20 19:05 . 2016-07-20 19:05 -------- d-----w- c:\users\Otto\AppData\Local\Adobe
2016-07-20 18:05 . 2016-07-21 10:02 192216 ----a-w- c:\windows\system32\drivers\MBAMSwissArmy.sys
2016-07-20 18:04 . 2016-03-10 12:09 64896 ----a-w- c:\windows\system32\drivers\mwac.sys
2016-07-20 18:04 . 2016-03-10 12:08 140672 ----a-w- c:\windows\system32\drivers\mbamchameleon.sys
2016-07-20 18:04 . 2016-03-10 12:08 27008 ----a-w- c:\windows\system32\drivers\mbam.sys
2016-07-20 18:04 . 2016-07-20 18:04 -------- d-----w- c:\program files (x86)\Malwarebytes Anti-Malware
2016-07-20 18:04 . 2016-07-20 18:04 -------- d-----w- c:\programdata\Malwarebytes
2016-07-20 17:55 . 2016-07-21 09:21 -------- d-----w- C:\AdwCleaner
2016-07-20 16:21 . 2016-07-20 16:21 -------- d-----w- c:\users\Otto\AppData\Roaming\TeamViewer
2016-07-20 15:46 . 2016-07-20 15:47 -------- d-----w- c:\program files\trend micro
2016-07-20 15:46 . 2016-07-20 15:47 -------- d-----w- C:\rsit
2016-07-20 15:18 . 2016-07-20 15:18 -------- d-----w- c:\program files (x86)\ESET
2016-07-20 09:39 . 2016-06-21 22:04 12007136 ----a-w- c:\programdata\Microsoft\Windows Defender\Definition Updates\{2784D07A-3A55-41DF-8025-236A58973C31}\mpengine.dll
2016-07-18 15:03 . 2016-07-18 15:03 -------- d-----w- c:\program files (x86)\VSO
2016-07-18 10:13 . 2016-07-20 15:16 181160 ----a-w- c:\windows\system32\drivers\ESETCleanersDriver.sys
2016-07-16 18:21 . 2016-07-16 18:26 45056 ----a-w- c:\windows\NCUNINST.EXE
2016-07-16 18:19 . 2016-07-16 18:19 -------- d-----w- c:\users\Otto\AppData\Roaming\InfoTurist
2016-07-16 18:19 . 2016-07-16 18:19 -------- d-----w- c:\program files (x86)\Common Files\SWF Studio
2016-07-16 15:35 . 2016-07-16 15:35 -------- d-----w- c:\program files\Inpaint
2016-07-14 10:50 . 2016-06-14 15:03 3217408 ----a-w- c:\windows\system32\win32k.sys
2016-07-11 13:52 . 2016-07-11 13:53 -------- d-----w- c:\users\Otto\AppData\Local\HappyFoto-FOTO-CZ
2016-07-11 13:52 . 2016-07-11 13:52 -------- d-----w- c:\program files (x86)\HappyFoto-FOTO-CZ
2016-07-09 10:26 . 2016-07-09 10:26 -------- d-----w- c:\users\Otto\AppData\Roaming\NVIDIA
2016-07-09 10:19 . 2016-07-09 10:25 -------- d-----w- c:\program files (x86)\DVDFab 9
2016-06-29 18:13 . 2016-06-29 18:13 -------- d-----w- c:\program files\Mozilla Firefox
2016-06-26 16:54 . 2016-05-12 17:15 2048 ----a-w- c:\windows\system32\tzres.dll
2016-06-26 16:54 . 2016-05-12 15:18 2048 ----a-w- c:\windows\SysWow64\tzres.dll
2016-06-26 16:54 . 2016-05-13 22:15 382184 ----a-w- c:\windows\system32\atmfd.dll
2016-06-26 16:54 . 2016-05-13 22:09 41472 ----a-w- c:\windows\system32\lpk.dll
2016-06-26 16:54 . 2016-05-13 22:09 100864 ----a-w- c:\windows\system32\fontsub.dll
2016-06-26 16:54 . 2016-05-13 22:09 14336 ----a-w- c:\windows\system32\dciman32.dll
2016-06-26 16:54 . 2016-05-13 22:09 46080 ----a-w- c:\windows\system32\atmlib.dll
2016-06-26 16:54 . 2016-05-13 21:54 308456 ----a-w- c:\windows\SysWow64\atmfd.dll
2016-06-26 16:54 . 2016-05-13 21:50 25600 ----a-w- c:\windows\SysWow64\lpk.dll
2016-06-26 16:54 . 2016-05-13 21:49 70656 ----a-w- c:\windows\SysWow64\fontsub.dll
2016-06-26 16:54 . 2016-05-13 21:49 10240 ----a-w- c:\windows\SysWow64\dciman32.dll
2016-06-26 16:54 . 2016-05-13 21:27 34304 ----a-w- c:\windows\SysWow64\atmlib.dll
.
.
.
(((((((((((((((((((((((((((((((((((((((( Find3M výpis ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2016-07-21 10:03 . 2016-03-02 18:41 28272 ----a-w- c:\windows\system32\drivers\TrueSight.sys
2016-07-18 18:37 . 2016-02-23 18:21 82816 ----a-w- c:\users\Otto\AppData\Roaming\pcouffin.sys
2016-06-24 12:50 . 2015-12-19 18:51 796352 ----a-w- c:\windows\SysWow64\FlashPlayerApp.exe
2016-06-24 12:50 . 2015-12-19 18:51 142528 ----a-w- c:\windows\SysWow64\FlashPlayerCPLApp.cpl
2016-06-21 10:13 . 2015-12-15 11:27 485032 ------w- c:\windows\system32\MpSigStub.exe
2016-06-14 15:21 . 2016-07-14 10:50 2560 ----a-w- c:\windows\apppatch\AcRes.dll
2016-05-16 23:14 . 2016-06-26 16:55 251392 ----a-w- c:\windows\SysWow64\schannel.dll
2016-05-16 23:14 . 2016-06-26 16:55 141312 ----a-w- c:\windows\SysWow64\rpchttp.dll
2016-05-16 23:14 . 2016-06-26 16:55 344064 ----a-w- c:\windows\system32\schannel.dll
2016-05-16 23:14 . 2016-06-26 16:55 190464 ----a-w- c:\windows\system32\rpchttp.dll
2016-05-16 23:14 . 2016-06-26 16:55 44032 ----a-w- c:\windows\apppatch\acwow64.dll
2015-12-21 13:53 . 2015-12-16 18:49 20320792 ----a-w- c:\program files (x86)\Common Files\lpuninstall.exe
.
.
(((((((((((((((((((((((((((((((((( Spouštěcí body v registru )))))))))))))))))))))))))))))))))))))))))))))
.
.
*Poznámka* prázdné záznamy a legitimní výchozí údaje nejsou zobrazeny.
REGEDIT4
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Zoner Photo Studio Autoupdate"="c:\program files\ZONER\PHOTO STUDIO 17\Program32\ZPSTRAY.EXE" [2015-07-12 563416]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorUser"= 3 (0x3)
"EnableLUA"= 0 (0x0)
"EnableUIADesktopToggle"= 0 (0x0)
"PromptOnSecureDesktop"= 0 (0x0)
.
R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [x]
R3 BrYNSvc;BrYNSvc;c:\program files (x86)\Browny02\BrYNSvc.exe;c:\program files (x86)\Browny02\BrYNSvc.exe [x]
R3 dtlitescsibus;DAEMON Tools Lite Virtual SCSI Bus;c:\windows\system32\DRIVERS\dtlitescsibus.sys;c:\windows\SYSNATIVE\DRIVERS\dtlitescsibus.sys [x]
R3 dtliteusbbus;DAEMON Tools Lite Virtual USB Bus;c:\windows\system32\DRIVERS\dtliteusbbus.sys;c:\windows\SYSNATIVE\DRIVERS\dtliteusbbus.sys [x]
R3 ESETCleanersDriver;ESET Cleaner Service;c:\windows\system32\Drivers\ESETCleanersDriver.sys;c:\windows\SYSNATIVE\Drivers\ESETCleanersDriver.sys [x]
R3 Garmin Device Interaction Service;Garmin Device Interaction Service;c:\program files (x86)\Garmin\Device Interaction Service\GarminService.exe;c:\program files (x86)\Garmin\Device Interaction Service\GarminService.exe [x]
R3 IEEtwCollectorService;Internet Explorer ETW Collector Service;c:\windows\system32\IEEtwCollector.exe;c:\windows\SYSNATIVE\IEEtwCollector.exe [x]
R3 RdpVideoMiniport;Remote Desktop Video Miniport Driver;c:\windows\system32\drivers\rdpvideominiport.sys;c:\windows\SYSNATIVE\drivers\rdpvideominiport.sys [x]
R3 Revoflt;Revoflt;c:\windows\system32\DRIVERS\revoflt.sys;c:\windows\SYSNATIVE\DRIVERS\revoflt.sys [x]
R3 RTL8167;Realtek 8167 NT Driver;c:\windows\system32\DRIVERS\Rt64win7.sys;c:\windows\SYSNATIVE\DRIVERS\Rt64win7.sys [x]
R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys;c:\windows\SYSNATIVE\drivers\tsusbflt.sys [x]
R3 WatAdminSvc;Služba Technologie aktivace Windows;c:\windows\system32\Wat\WatAdminSvc.exe;c:\windows\SYSNATIVE\Wat\WatAdminSvc.exe [x]
S1 eamonm;eamonm;c:\windows\system32\DRIVERS\eamonm.sys;c:\windows\SYSNATIVE\DRIVERS\eamonm.sys [x]
S1 ehdrv;ehdrv;c:\windows\system32\DRIVERS\ehdrv.sys;c:\windows\SYSNATIVE\DRIVERS\ehdrv.sys [x]
S2 DiagTrack;Diagnostics Tracking Service;c:\windows\System32\svchost.exe;c:\windows\SYSNATIVE\svchost.exe [x]
S2 ekrn;ESET Service;c:\program files\ESET\ESET NOD32 Antivirus\ekrn.exe;c:\program files\ESET\ESET NOD32 Antivirus\ekrn.exe [x]
S2 epfwwfpr;epfwwfpr;c:\windows\system32\DRIVERS\epfwwfpr.sys;c:\windows\SYSNATIVE\DRIVERS\epfwwfpr.sys [x]
S2 Intel(R) Capability Licensing Service Interface;Intel(R) Capability Licensing Service Interface;c:\program files\Intel\iCLS Client\HeciServer.exe;c:\program files\Intel\iCLS Client\HeciServer.exe [x]
S2 jhi_service;Intel(R) Dynamic Application Loader Host Interface Service;c:\program files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe;c:\program files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [x]
S2 UNS;Intel(R) Management and Security Application User Notification Service;c:\program files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe;c:\program files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe [x]
S2 VIAKaraokeService;VIA Karaoke digital mixer Service;c:\windows\system32\viakaraokesrv.exe;c:\windows\SYSNATIVE\viakaraokesrv.exe [x]
S3 VIAHdAudAddService;VIA High Definition Audio Driver Service;c:\windows\system32\drivers\viahduaa.sys;c:\windows\SYSNATIVE\drivers\viahduaa.sys [x]
.
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\svchost]
LocalServiceAndNoImpersonation REG_MULTI_SZ SSDPSRV upnphost SCardSvr QWAVE wcncsvc
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\active setup\installed components\{8A69D345-D564-463c-AFF1-A69D9E530F96}]
2016-07-09 09:43 1248072 ----a-w- c:\program files (x86)\Google\Chrome\Application\51.0.2704.106\Installer\chrmstp.exe
.
.
--------- X64 Entries -----------
.
.
------- Doplňkový sken -------
.
uLocal Page = c:\windows\system32\blank.htm
uStart Page = hxxp://www.google.com/
mLocal Page = c:\windows\SysWOW64\blank.htm
IE: E&xportovat do aplikace Microsoft Excel - c:\progra~2\MICROS~1\Office12\EXCEL.EXE/3000
IE: WikiKomentáře Google... - c:\program files (x86)\Google\Google Toolbar\Component\GoogleToolbarDynamic_mui_en_6CE5017F567343CA.dll/cmsidewiki.html
Trusted Zone: eset.com\help
TCP: DhcpNameServer = 213.46.172.37 213.46.172.36
FF - ProfilePath - c:\users\Otto\AppData\Roaming\Mozilla\Firefox\Profiles\2ags4dgm.default\
FF - prefs.js: browser.startup.homepage - hxxp://www.seznam.cz/
.
- - - - NEPLATNÉ POLOŽKY ODSTRANĚNÉ Z REGISTRU - - - -
.
AddRemove-{54b8854c-ad14-42fe-9dfb-bffd1a23fcf6} - c:\programdata\Package Cache\{54b8854c-ad14-42fe-9dfb-bffd1a23fcf6}\GarminExpressInstaller.exe
.
.
.
------------------------ Jiné spuštené procesy ------------------------
.
c:\windows\SysWOW64\brsvc01a.exe
c:\windows\SysWOW64\brss01a.exe
c:\program files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
c:\program files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
c:\program files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
.
**************************************************************************
.
Celkový čas: 2016-07-22 11:27:55 - počítač byl restartován
ComboFix-quarantined-files.txt 2016-07-22 09:27
.
Před spuštěním: Volných bajtů: 307 103 535 104
Po spuštění: Volných bajtů: 306 511 298 560
.
- - End Of File - - 5587C15793E8A13BD49BD15E4F422753
A36C5E4F47E84449FF07ED3517B43A31

[OTAS]

aswMBR version 1.0.1.2290 Copyright(c) 2014 AVAST Software
Run date: 2016-07-22 11:31:18
-----------------------------
11:31:18.977 OS Version: Windows x64 6.1.7601 Service Pack 1
11:31:18.978 Number of processors: 4 586 0x3A09
11:31:18.978 ComputerName: OTTO-PC UserName: Otto
11:31:19.935 Initialize success
11:31:20.010 VM: initialized successfully
11:31:20.011 VM: Intel CPU BiosDisabled
11:31:35.724 Disk 0 (boot) \Device\Harddisk0\DR0 -> \Device\Ide\IdeDeviceP0T0L0-0
11:31:35.728 Disk 0 Vendor: WDC_WD5000AAKX-00ERMA0 15.01H15 Size: 476940MB BusType: 3
11:31:35.883 Disk 0 MBR read successfully
11:31:35.886 Disk 0 MBR scan
11:31:35.888 Disk 0 Windows 7 default MBR code
11:31:35.891 Disk 0 Partition 1 80 (A) 07 HPFS/NTFS NTFS 313 MB offset 63
11:31:35.896 Disk 0 Boot: NTFS code=2
11:31:35.902 Disk 0 Partition 2 00 07 HPFS/NTFS NTFS 476623 MB offset 642600
11:31:35.922 Disk 0 scanning C:\Windows\system32\drivers
11:31:41.726 Service scanning
11:31:45.657 Service ehdrv C:\Windows\system32\DRIVERS\ehdrv.sys **LOCKED** 5
11:31:46.002 Service epfwwfpr C:\Windows\system32\DRIVERS\epfwwfpr.sys **LOCKED** 5
11:31:55.777 Modules scanning
11:31:55.787 Disk 0 trace - called modules:
11:31:55.806 ntoskrnl.exe CLASSPNP.SYS disk.sys ACPI.sys ataport.SYS pciide.sys PCIIDEX.SYS hal.dll atapi.sys
11:31:55.812 1 nt!IofCallDriver -> \Device\Harddisk0\DR0[0xfffffa800478f060]
11:31:55.817 3 CLASSPNP.SYS[fffff8800198f43f] -> nt!IofCallDriver -> [0xfffffa80042ac580]
11:31:55.822 5 ACPI.sys[fffff88000f6c7a1] -> nt!IofCallDriver -> \Device\Ide\IdeDeviceP0T0L0-0[0xfffffa80041e9060]
11:31:55.827 Disk 0 statistics 92908/0/0 @ 8,52 MB/s
11:31:55.832 Scan finished successfully
11:33:48.431 Disk 0 MBR has been saved successfully to "C:\Users\Otto\Desktop\MBR.dat"
11:33:48.431 The log file has been saved successfully to "C:\Users\Otto\Desktop\aswMBR.txt"


aswMBR version 1.0.1.2290 Copyright(c) 2014 AVAST Software
Run date: 2016-07-22 11:31:18
-----------------------------
11:31:18.977 OS Version: Windows x64 6.1.7601 Service Pack 1
11:31:18.978 Number of processors: 4 586 0x3A09
11:31:18.978 ComputerName: OTTO-PC UserName: Otto
11:31:19.935 Initialize success
11:31:20.010 VM: initialized successfully
11:31:20.011 VM: Intel CPU BiosDisabled
11:31:35.724 Disk 0 (boot) \Device\Harddisk0\DR0 -> \Device\Ide\IdeDeviceP0T0L0-0
11:31:35.728 Disk 0 Vendor: WDC_WD5000AAKX-00ERMA0 15.01H15 Size: 476940MB BusType: 3
11:31:35.883 Disk 0 MBR read successfully
11:31:35.886 Disk 0 MBR scan
11:31:35.888 Disk 0 Windows 7 default MBR code
11:31:35.891 Disk 0 Partition 1 80 (A) 07 HPFS/NTFS NTFS 313 MB offset 63
11:31:35.896 Disk 0 Boot: NTFS code=2
11:31:35.902 Disk 0 Partition 2 00 07 HPFS/NTFS NTFS 476623 MB offset 642600
11:31:35.922 Disk 0 scanning C:\Windows\system32\drivers
11:31:41.726 Service scanning
11:31:45.657 Service ehdrv C:\Windows\system32\DRIVERS\ehdrv.sys **LOCKED** 5
11:31:46.002 Service epfwwfpr C:\Windows\system32\DRIVERS\epfwwfpr.sys **LOCKED** 5
11:31:55.777 Modules scanning
11:31:55.787 Disk 0 trace - called modules:
11:31:55.806 ntoskrnl.exe CLASSPNP.SYS disk.sys ACPI.sys ataport.SYS pciide.sys PCIIDEX.SYS hal.dll atapi.sys
11:31:55.812 1 nt!IofCallDriver -> \Device\Harddisk0\DR0[0xfffffa800478f060]
11:31:55.817 3 CLASSPNP.SYS[fffff8800198f43f] -> nt!IofCallDriver -> [0xfffffa80042ac580]
11:31:55.822 5 ACPI.sys[fffff88000f6c7a1] -> nt!IofCallDriver -> \Device\Ide\IdeDeviceP0T0L0-0[0xfffffa80041e9060]
11:31:55.827 Disk 0 statistics 92908/0/0 @ 8,52 MB/s
11:31:55.832 Scan finished successfully
11:33:48.431 Disk 0 MBR has been saved successfully to "C:\Users\Otto\Desktop\MBR.dat"
11:33:48.431 The log file has been saved successfully to "C:\Users\Otto\Desktop\aswMBR.txt"
11:34:26.888 Disk 0 MBR has been saved successfully to "C:\Users\Otto\Desktop\MBR.dat"
11:34:26.904 The log file has been saved successfully to "C:\Users\Otto\Desktop\aswMBR.txt"


aswMBR version 1.0.1.2290 Copyright(c) 2014 AVAST Software
Run date: 2016-07-22 11:35:04
-----------------------------
11:35:04.039 OS Version: Windows x64 6.1.7601 Service Pack 1
11:35:04.039 Number of processors: 4 586 0x3A09
11:35:04.039 ComputerName: OTTO-PC UserName: Otto
11:35:04.709 Initialize success
11:35:04.725 VM: initialized successfully
11:35:04.725 VM: Intel CPU BiosDisabled
11:35:08.106 Disk 0 (boot) \Device\Harddisk0\DR0 -> \Device\Ide\IdeDeviceP0T0L0-0
11:35:08.106 Disk 0 Vendor: WDC_WD5000AAKX-00ERMA0 15.01H15 Size: 476940MB BusType: 3
11:35:08.262 Disk 0 MBR read successfully
11:35:08.278 Disk 0 MBR scan
11:35:08.278 Disk 0 Windows 7 default MBR code
11:35:08.278 Disk 0 Partition 1 80 (A) 07 HPFS/NTFS NTFS 313 MB offset 63
11:35:08.278 Disk 0 Boot: NTFS code=2
11:35:08.293 Disk 0 Partition 2 00 07 HPFS/NTFS NTFS 476623 MB offset 642600
11:35:08.293 Disk 0 scanning C:\Windows\system32\drivers
11:35:14.175 Service scanning
11:35:17.061 Service ehdrv C:\Windows\system32\DRIVERS\ehdrv.sys **LOCKED** 5
11:35:17.404 Service epfwwfpr C:\Windows\system32\DRIVERS\epfwwfpr.sys **LOCKED** 5
11:35:27.154 Modules scanning
11:35:27.154 Disk 0 trace - called modules:
11:35:27.169 ntoskrnl.exe CLASSPNP.SYS disk.sys ACPI.sys ataport.SYS pciide.sys PCIIDEX.SYS hal.dll atapi.sys
11:35:27.185 1 nt!IofCallDriver -> \Device\Harddisk0\DR0[0xfffffa800478f060]
11:35:27.185 3 CLASSPNP.SYS[fffff8800198f43f] -> nt!IofCallDriver -> [0xfffffa80042ac580]
11:35:27.185 5 ACPI.sys[fffff88000f6c7a1] -> nt!IofCallDriver -> \Device\Ide\IdeDeviceP0T0L0-0[0xfffffa80041e9060]
11:35:27.201 Disk 0 statistics 92908/0/0 @ 7,88 MB/s
11:35:27.201 Scan finished successfully
11:36:02.379 Disk 0 MBR has been saved successfully to "C:\Users\Otto\Desktop\MBR.dat"
11:36:02.394 The log file has been saved successfully to "C:\Users\Otto\Desktop\aswMBR.txt"

[jaro3]

ComboFix se odinstaluje takto:
Start-Spustit a zadej ComboFix /Uninstall

Vyčisti systém CCleanerem

Stáhni si OTC

na plochu. Poklepej na něj. Potom klikni na Clean up!.
Restartuj PC , pokud Ti bude doporučeno.

Stáhni si zde DelFix
https://toolslib.net/downloads/viewdownload/2-delfix/

ulož si soubor na plochu.
Poklepáním na ikonu spusť nástroj Delfix.exe
( Ve Windows Vista, Windows 7 a 8, musíš spustit soubor pravým tlačítkem myši -> Spustit jako správce .
V hlavním menu, zkontroluj tyto možnosti - Odstranění dezinfekce nástrojů (Remove desinfection tools) – Vyčistit body obnovy (Purge System Restore)
Poté klikněte na tlačítko Spustit (Run) a nech nástroj dělat svoji práci

Poté se zpráva se otevře (DelFix.txt). Vlož celý obsah zprávy sem.Jinak je zpráva zde:
v C: \ DelFix.txt


Co problémy?

[OTAS]

# DelFix v1.013 - Logfile created 22/07/2016 at 12:25:14
# Updated 17/04/2016 by Xplode
# Username : Otto - OTTO-PC
# Operating System : Windows 7 Professional Service Pack 1 (64 bits)

~ Removing disinfection tools ...

Deleted : C:\zoek_backup
Deleted : C:\AdwCleaner
Deleted : C:\zoek-results2016-07-21-104212.log
Deleted : C:\Users\Otto\Desktop\AdwCleaner.exe
Deleted : C:\Users\Otto\Desktop\JRT.exe
Deleted : C:\Users\Otto\Desktop\RogueKillerX64.exe
Deleted : C:\Users\Otto\Desktop\zoek.rar
Deleted : C:\Users\Otto\Downloads\HijackThis.exe
Deleted : HKLM\SOFTWARE\Swearware
Deleted : HKLM\SOFTWARE\TrendMicro\Hijackthis
Deleted : HKLM\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_ASWMBR

~ Cleaning system restore ...

Deleted : RP #111 [Revo Uninstaller Pro's restore point - Ashampoo Burning Studio 2016 | 07/17/2016 13:43:10]
Deleted : RP #113 [Revo Uninstaller Pro's restore point - VSO ConvertXtoVideo Ultimate 2 | 07/18/2016 09:49:21]
Deleted : RP #115 [Revo Uninstaller Pro's restore point - VSO ConvertXtoVideo Ultimate 1 | 07/18/2016 10:07:27]
Deleted : RP #117 [Revo Uninstaller Pro's restore point - VSO ConvertXtoVideo Ultimate 2 | 07/18/2016 13:56:33]
Deleted : RP #119 [Revo Uninstaller Pro's restore point - VSO ConvertXtoVideo Ultimate 2 | 07/18/2016 15:00:25]
Deleted : RP #121 [Revo Uninstaller Pro's restore point - ContentPush | 07/18/2016 18:17:14]
Deleted : RP #123 [Revo Uninstaller Pro's restore point - Weather Chickn | 07/18/2016 18:20:42]
Deleted : RP #124 [Windows Update | 07/20/2016 09:38:57]
Deleted : RP #125 [JRT Pre-Junkware Removal | 07/20/2016 19:17:52]
Deleted : RP #126 [zoek.exe restore point | 07/21/2016 10:30:04]

New restore point created !

########## - EOF - ##########

[Orcus]

Co problémy?

[OTAS]

No zdá se že je PC v pořádku.

[Orcus]

OK, pokud nejsou problémy, je to vše a můžeš dát vyřešeno , zelenou fajfku.