prosím o kontrolu , zasekává se internet , děkuji Vyřešeno

[Habasko]

aswMBR version 0.9.9.1665 Copyright(c) 2011 AVAST Software
Run date: 2012-09-13 11:17:29
-----------------------------
11:17:29.398 OS Version: Windows x64 6.1.7601 Service Pack 1
11:17:29.398 Number of processors: 2 586 0x170A
11:17:29.399 ComputerName: PC-PC UserName: pc
11:17:30.510 Initialize success
11:17:30.582 AVAST engine defs: 12091300
11:17:33.408 Disk 0 (boot) \Device\Harddisk0\DR0 -> \Device\Ide\IdeDeviceP0T0L0-3
11:17:33.409 Disk 0 Vendor: SAMSUNG_HD642JJ 1AA01113 Size: 610480MB BusType: 3
11:17:33.424 Disk 0 MBR read successfully
11:17:33.425 Disk 0 MBR scan
11:17:33.428 Disk 0 Windows 7 default MBR code
11:17:33.432 Disk 0 Partition 1 80 (A) 07 HPFS/NTFS NTFS 610478 MB offset 2048
11:17:33.444 Disk 0 scanning C:\Windows\system32\drivers
11:17:38.919 Service scanning
11:17:48.949 Modules scanning
11:17:48.954 Disk 0 trace - called modules:
11:17:48.966 ntoskrnl.exe CLASSPNP.SYS disk.sys ACPI.sys ataport.SYS intelide.sys PCIIDEX.SYS hal.dll atapi.sys
11:17:48.969 1 nt!IofCallDriver -> \Device\Harddisk0\DR0[0xfffffa8003955060]
11:17:48.972 3 CLASSPNP.SYS[fffff880019c543f] -> nt!IofCallDriver -> [0xfffffa8003827520]
11:17:48.976 5 ACPI.sys[fffff88000fb07a1] -> nt!IofCallDriver -> \Device\Ide\IdeDeviceP0T0L0-3[0xfffffa800380d060]
11:17:49.893 AVAST engine scan C:\Windows
11:17:51.409 AVAST engine scan C:\Windows\system32
11:19:12.580 AVAST engine scan C:\Windows\system32\drivers
11:19:20.989 AVAST engine scan C:\Users\pc
11:20:38.611 AVAST engine scan C:\ProgramData
11:23:33.708 Scan finished successfully
11:25:11.625 Disk 0 MBR has been saved successfully to "C:\Users\pc\Desktop\MBR.dat"
11:25:11.628 The log file has been saved successfully to "C:\Users\pc\Desktop\aswMBR.txt"

[Reklama]

[Žbeky]

Otevři si Poznámkový blok (Start -> Spustit... a napiš do okna Notepad a dej Ok.
Zkopíruj do něj následující celý text označený zeleně:
Poznámka: Nepoužij k označení skriptu funkci VYBRAT VŠE

Kód: Vybrat vše

KillAll::

File::
c:\windows\system32\GameMon.des

Driver::
npggsvc

Registry::
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"combofix"=-
[-HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\npggsvc]

RegLock::
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}]
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\Elevation]
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\LocalServer32]
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\TypeLib]
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}]
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\ProxyStubClsid32]
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\TypeLib]


Zvol možnost Soubor -> Uložit jako... a nastav tyto parametry:
Název souboru: zde napiš: CFScript.txt
Uložit jako typ: tak tam vyber Všechny soubory
Ulož soubor na plochu.
Ukonči všechna aktivní okna.

Uchop myší vytvořený skript CFScript.txt, přemísti ho nad stažený program ComboFix.exe a když se oba soubory překryjí, skript upusť.
- Automaticky se spustí ComboFix
- Vlož sem log, který vyběhne v závěru čistícího procesu

[Habasko]

ComboFix 12-09-13.01 - pc 13.09.2012 15:54:23.3.2 - x64
Microsoft Windows 7 Home Premium 6.1.7601.1.1250.420.1029.18.3519.2597 [GMT 2:00]
Spuštěný z: c:\users\pc\Desktop\ComboFix.exe
Použité ovládací přepínače :: c:\users\pc\Desktop\CFScript.txt
AV: avast! Antivirus *Enabled/Updated* {2B2D1395-420B-D5C9-657E-930FE358FC3C}
SP: avast! Antivirus *Enabled/Updated* {904CF271-6431-DA47-5FCE-A87D98DFB681}
SP: Windows Defender *Enabled/Outdated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.
FILE ::
"c:\windows\system32\GameMon.des"
.
.
((((((((((((((((((((((((((((((((((((((( Ostatní výmazy )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
.
((((((((((((((((((((((((((((((((((((((( Ovladače/Služby )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
-------\Service_COMSysApp
-------\Service_npggsvc
.
.
((((((((((((((((((((((((( Soubory vytvořené od 2012-08-13 do 2012-09-13 )))))))))))))))))))))))))))))))
.
.
2012-09-13 13:59 . 2012-09-13 13:59 -------- d-----w- c:\users\Default\AppData\Local\temp
2012-09-13 12:37 . 2012-09-13 12:37 -------- d-----w- c:\users\pc\AppData\Roaming\SFBot
2012-09-12 07:00 . 2012-09-12 07:00 -------- d-----w- c:\users\pc\AppData\Roaming\Malwarebytes
2012-09-12 07:00 . 2012-09-12 07:00 -------- d-----w- c:\programdata\Malwarebytes
2012-09-12 07:00 . 2012-09-12 07:00 -------- d-----w- c:\program files (x86)\Malwarebytes' Anti-Malware
2012-09-12 07:00 . 2012-09-07 15:04 25928 ----a-w- c:\windows\system32\drivers\mbam.sys
2012-09-12 06:43 . 2012-09-12 06:43 -------- d-----w- c:\program files\CCleaner
2012-09-12 06:42 . 2012-09-12 06:42 388096 ----a-r- c:\users\pc\AppData\Roaming\Microsoft\Installer\{45A66726-69BC-466B-A7A4-12FCBA4883D7}\HiJackThis.exe
2012-09-12 06:42 . 2012-09-12 06:42 -------- d-----w- c:\program files (x86)\Trend Micro
2012-09-04 17:28 . 2012-09-12 06:44 -------- d-----w- c:\users\pc\AppData\Roaming\TS3Client
2012-09-04 09:14 . 2012-09-04 09:14 -------- d-----w- c:\program files (x86)\PANDORA.TV
2012-09-04 09:14 . 2012-09-04 09:16 -------- d-----w- c:\program files (x86)\The KMPlayer
2012-09-03 17:40 . 2012-09-03 17:42 -------- d-----w- c:\program files (x86)\City Car Driving
2012-09-01 20:23 . 2012-09-01 20:23 -------- d-----w- c:\program files\NetWorx
2012-09-01 20:23 . 2012-09-01 20:23 -------- d-----w- c:\programdata\SoftPerfect
2012-08-30 10:52 . 2012-08-30 10:52 -------- d-----w- c:\users\pc\AppData\Roaming\Need for Speed World
2012-08-30 08:16 . 2012-08-30 08:16 -------- d-----w- c:\users\pc\AppData\Local\Electronic_Arts_Inc
2012-08-30 08:16 . 2012-08-30 08:16 -------- d-----w- c:\programdata\Electronic Arts
2012-08-29 18:29 . 2012-08-29 18:29 -------- d-----w- c:\users\pc\AppData\Roaming\NPLUTO Corporation
2012-08-29 18:28 . 2012-06-24 16:32 4035008 ----a-w- c:\windows\SysWow64\GameMon.des
2012-08-29 18:28 . 2012-08-29 18:28 -------- d-----w- c:\program files\Common Files\INCA Shared
2012-08-29 18:20 . 2012-08-29 18:20 -------- d-----w- C:\GamesCampus
2012-08-28 14:48 . 2012-08-28 14:48 -------- d-----w- c:\users\pc\AppData\Local\Diagnostics
2012-08-23 13:22 . 2012-08-23 13:29 -------- d-----w- c:\users\pc\AppData\Roaming\KVIrc4
2012-08-23 13:21 . 2012-08-23 17:43 -------- d-----w- c:\program files (x86)\KVIrc
2012-08-17 13:07 . 2012-08-17 13:07 -------- d-----w- c:\program files\TeamSpeak 3 Client
2012-08-15 12:21 . 2012-08-19 20:22 -------- d-----w- c:\users\pc\AppData\Roaming\wargaming.net
.
.
.
(((((((((((((((((((((((((((((((((((((((( Find3M výpis ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2012-09-02 06:55 . 2012-08-10 07:33 73416 ----a-w- c:\windows\SysWow64\FlashPlayerCPLApp.cpl
2012-09-02 06:55 . 2012-08-10 07:33 696520 ----a-w- c:\windows\SysWow64\FlashPlayerApp.exe
2012-08-21 09:13 . 2012-08-09 16:49 359464 ----a-w- c:\windows\system32\drivers\aswSP.sys
2012-08-21 09:13 . 2012-08-09 16:49 59728 ----a-w- c:\windows\system32\drivers\aswTdi.sys
2012-08-21 09:13 . 2012-08-09 16:49 969200 ----a-w- c:\windows\system32\drivers\aswSnx.sys
2012-08-21 09:13 . 2012-08-09 16:49 54072 ----a-w- c:\windows\system32\drivers\aswRdr2.sys
2012-08-21 09:13 . 2012-08-09 16:49 71600 ----a-w- c:\windows\system32\drivers\aswMonFlt.sys
2012-08-21 09:13 . 2012-08-09 16:49 25232 ----a-w- c:\windows\system32\drivers\aswFsBlk.sys
2012-08-21 09:12 . 2012-08-09 16:48 41224 ----a-w- c:\windows\avastSS.scr
2012-08-21 09:12 . 2012-08-09 16:48 227648 ----a-w- c:\windows\SysWow64\aswBoot.exe
2012-08-21 09:12 . 2012-08-09 16:49 285328 ----a-w- c:\windows\system32\aswBoot.exe
2012-08-14 10:37 . 2012-08-14 10:37 283200 ----a-w- c:\windows\system32\drivers\dtsoftbus01.sys
2012-08-10 16:31 . 2012-08-10 14:02 15823872 ----a-w- c:\users\pc\AppData\Roaming\Microsoft\Windows\Templates\Office 2010 Toolkit.exe
2012-08-10 16:31 . 2012-08-10 14:02 786492 ----a-w- c:\users\pc\AppData\Roaming\Microsoft\Windows\Templates\cryptedcybertoirrent.exe
2012-08-09 20:34 . 2012-08-09 20:34 96768 ----a-w- c:\windows\system32\mshtmled.dll
2012-08-09 20:34 . 2012-08-09 20:34 91648 ----a-w- c:\windows\system32\SetIEInstalledDate.exe
2012-08-09 20:34 . 2012-08-09 20:34 89088 ----a-w- c:\windows\system32\RegisterIEPKEYs.exe
2012-08-09 20:34 . 2012-08-09 20:34 89088 ----a-w- c:\windows\system32\ie4uinit.exe
2012-08-09 20:34 . 2012-08-09 20:34 86528 ----a-w- c:\windows\SysWow64\iesysprep.dll
2012-08-09 20:34 . 2012-08-09 20:34 85504 ----a-w- c:\windows\system32\jsproxy.dll
2012-08-09 20:34 . 2012-08-09 20:34 85504 ----a-w- c:\windows\system32\iesetup.dll
2012-08-09 20:34 . 2012-08-09 20:34 82432 ----a-w- c:\windows\system32\icardie.dll
2012-08-09 20:34 . 2012-08-09 20:34 818688 ----a-w- c:\windows\system32\jscript.dll
2012-08-09 20:34 . 2012-08-09 20:34 76800 ----a-w- c:\windows\SysWow64\SetIEInstalledDate.exe
2012-08-09 20:34 . 2012-08-09 20:34 76800 ----a-w- c:\windows\system32\tdc.ocx
2012-08-09 20:34 . 2012-08-09 20:34 74752 ----a-w- c:\windows\SysWow64\RegisterIEPKEYs.exe
2012-08-09 20:34 . 2012-08-09 20:34 74752 ----a-w- c:\windows\SysWow64\iesetup.dll
2012-08-09 20:34 . 2012-08-09 20:34 697344 ----a-w- c:\windows\system32\msfeeds.dll
2012-08-09 20:34 . 2012-08-09 20:34 65024 ----a-w- c:\windows\system32\pngfilt.dll
2012-08-09 20:34 . 2012-08-09 20:34 63488 ----a-w- c:\windows\SysWow64\tdc.ocx
2012-08-09 20:34 . 2012-08-09 20:34 603648 ----a-w- c:\windows\system32\vbscript.dll
2012-08-09 20:34 . 2012-08-09 20:34 55296 ----a-w- c:\windows\system32\msfeedsbs.dll
2012-08-09 20:34 . 2012-08-09 20:34 534528 ----a-w- c:\windows\system32\ieapfltr.dll
2012-08-09 20:34 . 2012-08-09 20:34 49664 ----a-w- c:\windows\system32\imgutil.dll
2012-08-09 20:34 . 2012-08-09 20:34 48640 ----a-w- c:\windows\SysWow64\mshtmler.dll
2012-08-09 20:34 . 2012-08-09 20:34 48640 ----a-w- c:\windows\system32\mshtmler.dll
2012-08-09 20:34 . 2012-08-09 20:34 452608 ----a-w- c:\windows\system32\dxtmsft.dll
2012-08-09 20:34 . 2012-08-09 20:34 448512 ----a-w- c:\windows\system32\html.iec
2012-08-09 20:34 . 2012-08-09 20:34 420864 ----a-w- c:\windows\SysWow64\vbscript.dll
2012-08-09 20:34 . 2012-08-09 20:34 403248 ----a-w- c:\windows\system32\iedkcs32.dll
2012-08-09 20:34 . 2012-08-09 20:34 39936 ----a-w- c:\windows\system32\iernonce.dll
2012-08-09 20:34 . 2012-08-09 20:34 3695416 ----a-w- c:\windows\system32\ieapfltr.dat
2012-08-09 20:34 . 2012-08-09 20:34 367104 ----a-w- c:\windows\SysWow64\html.iec
2012-08-09 20:34 . 2012-08-09 20:34 35840 ----a-w- c:\windows\SysWow64\imgutil.dll
2012-08-09 20:34 . 2012-08-09 20:34 30720 ----a-w- c:\windows\system32\licmgr10.dll
2012-08-09 20:34 . 2012-08-09 20:34 282112 ----a-w- c:\windows\system32\dxtrans.dll
2012-08-09 20:34 . 2012-08-09 20:34 267776 ----a-w- c:\windows\system32\ieaksie.dll
2012-08-09 20:34 . 2012-08-09 20:34 249344 ----a-w- c:\windows\system32\webcheck.dll
2012-08-09 20:34 . 2012-08-09 20:34 248320 ----a-w- c:\windows\system32\ieui.dll
2012-08-09 20:34 . 2012-08-09 20:34 2382848 ----a-w- c:\windows\SysWow64\mshtml.tlb
2012-08-09 20:34 . 2012-08-09 20:34 2382848 ----a-w- c:\windows\system32\mshtml.tlb
2012-08-09 20:34 . 2012-08-09 20:34 237056 ----a-w- c:\windows\system32\url.dll
2012-08-09 20:34 . 2012-08-09 20:34 23552 ----a-w- c:\windows\SysWow64\licmgr10.dll
2012-08-09 20:34 . 2012-08-09 20:34 2311680 ----a-w- c:\windows\system32\jscript9.dll
2012-08-09 20:34 . 2012-08-09 20:34 222208 ----a-w- c:\windows\system32\msls31.dll
2012-08-09 20:34 . 2012-08-09 20:34 2144768 ----a-w- c:\windows\system32\iertutil.dll
2012-08-09 20:34 . 2012-08-09 20:34 197120 ----a-w- c:\windows\system32\msrating.dll
2012-08-09 20:34 . 2012-08-09 20:34 1800192 ----a-w- c:\windows\SysWow64\jscript9.dll
2012-08-09 20:34 . 2012-08-09 20:34 17807360 ----a-w- c:\windows\system32\mshtml.dll
2012-08-09 20:34 . 2012-08-09 20:34 173056 ----a-w- c:\windows\system32\ieUnatt.exe
2012-08-09 20:34 . 2012-08-09 20:34 165888 ----a-w- c:\windows\system32\iexpress.exe
2012-08-09 20:34 . 2012-08-09 20:34 163840 ----a-w- c:\windows\system32\ieakui.dll
2012-08-09 20:34 . 2012-08-09 20:34 161792 ----a-w- c:\windows\SysWow64\msls31.dll
2012-08-09 20:34 . 2012-08-09 20:34 160256 ----a-w- c:\windows\system32\wextract.exe
2012-08-09 20:34 . 2012-08-09 20:34 160256 ----a-w- c:\windows\system32\ieakeng.dll
2012-08-09 20:34 . 2012-08-09 20:34 152064 ----a-w- c:\windows\SysWow64\wextract.exe
2012-08-09 20:34 . 2012-08-09 20:34 150528 ----a-w- c:\windows\SysWow64\iexpress.exe
2012-08-09 20:34 . 2012-08-09 20:34 149504 ----a-w- c:\windows\system32\occache.dll
2012-08-09 20:34 . 2012-08-09 20:34 1494528 ----a-w- c:\windows\system32\inetcpl.cpl
2012-08-09 20:34 . 2012-08-09 20:34 145920 ----a-w- c:\windows\system32\iepeers.dll
2012-08-09 20:34 . 2012-08-09 20:34 142848 ----a-w- c:\windows\SysWow64\ieUnatt.exe
2012-08-09 20:34 . 2012-08-09 20:34 1427968 ----a-w- c:\windows\SysWow64\inetcpl.cpl
2012-08-09 20:34 . 2012-08-09 20:34 1392128 ----a-w- c:\windows\system32\wininet.dll
2012-08-09 20:34 . 2012-08-09 20:34 135168 ----a-w- c:\windows\system32\IEAdvpack.dll
2012-08-09 20:34 . 2012-08-09 20:34 1346048 ----a-w- c:\windows\system32\urlmon.dll
2012-08-09 20:34 . 2012-08-09 20:34 12288 ----a-w- c:\windows\system32\mshta.exe
2012-08-09 20:34 . 2012-08-09 20:34 11776 ----a-w- c:\windows\SysWow64\mshta.exe
2012-08-09 20:34 . 2012-08-09 20:34 114176 ----a-w- c:\windows\system32\admparse.dll
2012-08-09 20:34 . 2012-08-09 20:34 1129472 ----a-w- c:\windows\SysWow64\wininet.dll
2012-08-09 20:34 . 2012-08-09 20:34 111616 ----a-w- c:\windows\system32\iesysprep.dll
2012-08-09 20:34 . 2012-08-09 20:34 110592 ----a-w- c:\windows\SysWow64\IEAdvpack.dll
2012-08-09 20:34 . 2012-08-09 20:34 10924032 ----a-w- c:\windows\system32\ieframe.dll
2012-08-09 20:34 . 2012-08-09 20:34 10752 ----a-w- c:\windows\system32\msfeedssync.exe
2012-08-09 20:34 . 2012-08-09 20:34 103936 ----a-w- c:\windows\system32\inseng.dll
2012-08-09 20:34 . 2012-08-09 20:34 101888 ----a-w- c:\windows\SysWow64\admparse.dll
2012-07-16 00:40 . 2012-08-09 20:30 9133488 ----a-w- c:\programdata\Microsoft\Windows Defender\Definition Updates\{2BF5C997-B45E-487F-9B76-C0C58A3E1DDB}\mpengine.dll
2012-07-03 01:19 . 2012-08-09 20:31 59701280 ----a-w- c:\windows\system32\MRT.exe
.
.
((((((((((((((((((((((((((((( SnapShot@2012-09-13_05.45.44 )))))))))))))))))))))))))))))))))))))))))
.
- 2009-07-14 04:54 . 2012-09-13 05:44 16384 c:\windows\SysWOW64\config\systemprofile\AppData\Roaming\Microsoft\Windows\Cookies\index.dat
+ 2009-07-14 04:54 . 2012-09-13 14:01 16384 c:\windows\SysWOW64\config\systemprofile\AppData\Roaming\Microsoft\Windows\Cookies\index.dat
+ 2012-09-12 06:56 . 2012-09-13 14:01 32768 c:\windows\SysWOW64\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat
- 2012-09-12 06:56 . 2012-09-13 05:44 32768 c:\windows\SysWOW64\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat
+ 2009-07-14 04:54 . 2012-09-13 14:01 16384 c:\windows\SysWOW64\config\systemprofile\AppData\Local\Microsoft\Windows\History\History.IE5\index.dat
- 2009-07-14 04:54 . 2012-09-13 05:44 16384 c:\windows\SysWOW64\config\systemprofile\AppData\Local\Microsoft\Windows\History\History.IE5\index.dat
+ 2010-11-21 03:09 . 2012-09-13 09:13 30202 c:\windows\system32\wdi\ShutdownPerformanceDiagnostics_SystemData.bin
+ 2009-07-14 05:10 . 2012-09-13 09:13 36654 c:\windows\system32\wdi\BootPerformanceDiagnostics_SystemData.bin
+ 2012-08-09 16:21 . 2012-09-13 09:13 5620 c:\windows\system32\wdi\{86432a0b-3c7d-4ddf-a89c-172faa90485d}\S-1-5-21-3740855383-2078987175-4238702576-1000_UserData.bin
+ 2012-09-13 14:00 . 2012-09-13 14:00 2048 c:\windows\ServiceProfiles\LocalService\AppData\Local\lastalive1.dat
- 2012-09-13 05:44 . 2012-09-13 05:44 2048 c:\windows\ServiceProfiles\LocalService\AppData\Local\lastalive1.dat
+ 2012-09-13 14:00 . 2012-09-13 14:00 2048 c:\windows\ServiceProfiles\LocalService\AppData\Local\lastalive0.dat
- 2012-09-13 05:44 . 2012-09-13 05:44 2048 c:\windows\ServiceProfiles\LocalService\AppData\Local\lastalive0.dat
+ 2012-08-23 11:40 . 2012-09-13 10:57 220976 c:\windows\system32\wdi\SuspendPerformanceDiagnostics_SystemData_S3.bin
- 2009-07-14 05:01 . 2012-09-13 05:43 385816 c:\windows\ServiceProfiles\LocalService\AppData\Local\FontCache-System.dat
+ 2009-07-14 05:01 . 2012-09-13 14:00 385816 c:\windows\ServiceProfiles\LocalService\AppData\Local\FontCache-System.dat
+ 2012-08-10 07:41 . 2012-09-13 14:00 385816 c:\windows\ServiceProfiles\LocalService\AppData\Local\FontCache-S-1-5-21-3740855383-2078987175-4238702576-1000-8192.dat
- 2012-08-10 07:41 . 2012-09-12 19:26 385816 c:\windows\ServiceProfiles\LocalService\AppData\Local\FontCache-S-1-5-21-3740855383-2078987175-4238702576-1000-8192.dat
.
(((((((((((((((((((((((((((((((((( Spouštěcí body v registru )))))))))))))))))))))))))))))))))))))))))))))
.
.
*Poznámka* prázdné záznamy a legitimní výchozí údaje nejsou zobrazeny.
REGEDIT4
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Steam"="c:\hry\Steam\steam.exe" [2012-08-10 1353080]
"SnippingTool"="c:\program files (x86)\ScreenCaptureTool\ScreenCapture.exe" [2011-04-12 3501056]
"googletalk"="c:\users\pc\AppData\Roaming\Google\Google Talk\googletalk.exe" [2007-01-01 3739648]
"DAEMON Tools Lite"="c:\program files (x86)\DAEMON Tools Lite\DTLite.exe" [2012-04-11 3672384]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]
"avast"="c:\program files\AVAST Software\Avast\avastUI.exe" [2012-08-21 4282728]
"HDAudDeck"="c:\program files (x86)\VIA\VIAudioi\VDeck\VDeck.exe" [2009-09-21 2583040]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorAdmin"= 5 (0x5)
"ConsentPromptBehaviorUser"= 3 (0x3)
"EnableUIADesktopToggle"= 0 (0x0)
.
R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2010-03-18 138576]
R3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service;c:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2012-09-02 250568]
R3 androidusb;SAMSUNG Android Composite ADB Interface Driver;c:\windows\system32\Drivers\ssadadb.sys [2011-05-13 36328]
R3 Microsoft SharePoint Workspace Audit Service;Microsoft SharePoint Workspace Audit Service;c:\program files\Microsoft Office\Office14\GROOVE.EXE [2010-03-25 51456888]
R3 MozillaMaintenance;Mozilla Maintenance Service;c:\program files (x86)\Mozilla Maintenance Service\maintenanceservice.exe [2012-07-14 113120]
R3 ose64;Office 64 Source Engine;c:\program files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2010-01-09 174440]
R3 ssadbus;SAMSUNG Android USB Composite Device driver (WDM);c:\windows\system32\DRIVERS\ssadbus.sys [2011-05-13 157672]
R3 ssadmdfl;SAMSUNG Android USB Modem (Filter);c:\windows\system32\DRIVERS\ssadmdfl.sys [2011-05-13 16872]
R3 ssadmdm;SAMSUNG Android USB Modem Drivers;c:\windows\system32\DRIVERS\ssadmdm.sys [2011-05-13 177640]
R3 ssadserd;SAMSUNG Android USB Diagnostic Serial Port (WDM);c:\windows\system32\DRIVERS\ssadserd.sys [2011-05-13 146920]
R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys [2010-11-21 59392]
R3 TsUsbGD;Remote Desktop Generic USB Device;c:\windows\system32\drivers\TsUsbGD.sys [2010-11-21 31232]
S1 aswSnx;aswSnx; [x]
S1 aswSP;aswSP; [x]
S1 dtsoftbus01;DAEMON Tools Virtual Bus Driver;c:\windows\system32\DRIVERS\dtsoftbus01.sys [2012-08-14 283200]
S2 AMD External Events Utility;AMD External Events Utility;c:\windows\system32\atiesrxx.exe [2009-08-18 203264]
S2 aswFsBlk;aswFsBlk; [x]
S2 aswMonFlt;aswMonFlt;c:\windows\system32\drivers\aswMonFlt.sys [2012-08-21 71600]
S2 MBAMService;MBAMService;c:\program files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe [2012-09-07 676936]
S2 PanService;PandoraService;c:\program files (x86)\PANDORA.TV\PanService\PandoraService.exe [2012-06-22 625816]
S3 MBAMProtector;MBAMProtector;c:\windows\system32\drivers\mbam.sys [2012-09-07 25928]
S3 osppsvc;Office Software Protection Platform;c:\program files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE [2010-01-09 4925184]
S3 RTL8167;Realtek 8167 NT Driver;c:\windows\system32\DRIVERS\Rt64win7.sys [2009-08-20 239616]
S3 VIAHdAudAddService;VIA High Definition Audio Driver Service;c:\windows\system32\drivers\viahduaa.sys [2009-09-17 1250816]
.
.
Obsah adresáře 'Naplánované úlohy'
.
2012-09-13 c:\windows\Tasks\Adobe Flash Player Updater.job
- c:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2012-08-10 06:55]
.
.
--------- X64 Entries -----------
.
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\00avast]
@="{472083B0-C522-11CF-8763-00608CC02F24}"
[HKEY_CLASSES_ROOT\CLSID\{472083B0-C522-11CF-8763-00608CC02F24}]
2012-08-21 09:11 133400 ----a-w- c:\program files\AVAST Software\Avast\ashShA64.dll
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"RunDLLEntry"="c:\windows\system32\AmbRunE.dll" [2009-02-26 17920]
"BCSSync"="c:\program files\Microsoft Office\Office14\BCSSync.exe" [2010-03-13 112512]
"NetWorx"="c:\program files\NetWorx\networx.exe" [2012-06-09 4707368]
"combofix"="c:\combofix\CF32608.3XE" [2010-11-21 345088]
.
------- Doplňkový sken -------
.
uLocal Page = c:\windows\system32\blank.htm
mLocal Page = c:\windows\SYSTEM32\blank.htm
IE: E&xportovat do aplikace Microsoft Excel - c:\progra~1\MICROS~2\Office14\EXCEL.EXE/3000
IE: Od&eslat do aplikace OneNote - c:\progra~1\MICROS~2\Office14\ONBttnIE.dll/105
TCP: DhcpNameServer = 213.46.172.36 213.46.172.37
FF - ProfilePath - c:\users\pc\AppData\Roaming\Mozilla\Firefox\Profiles\m5itbmhl.default\
FF - prefs.js: browser.startup.homepage - hxxp://seznam.cz/
.
.
--------------------- ZAMKNUTÉ KLÍČE V REGISTRU ---------------------
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil64_11_4_402_265_ActiveX.exe,-101"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\Elevation]
"Enabled"=dword:00000001
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\LocalServer32]
@="c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil64_11_4_402_265_ActiveX.exe"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="IFlashBroker5"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
.
------------------------ Jiné spuštené procesy ------------------------
.
c:\program files\AVAST Software\Avast\AvastSvc.exe
c:\program files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe
c:\program files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe
.
**************************************************************************
.
Celkový čas: 2012-09-13 16:04:21 - počítač byl restartován
ComboFix-quarantined-files.txt 2012-09-13 14:04
ComboFix2.txt 2012-09-13 09:07
ComboFix3.txt 2012-09-13 05:48
.
Před spuštěním: Volných bajtů: 540 657 074 176
Po spuštění: Volných bajtů: 540 578 803 712
.
- - End Of File - - 9B6914920DD42D1FADC499F502C29A52

[jaro3]

ComboFix se odinstaluje takto:
Start-Spustit a zadej ComboFix /Uninstall

Vyčisti systém CCleanerem

Stáhni si OTC

na plochu. Poklepej na něj. Potom klikni na Clean up!.
Restartuj PC , pokud Ti bude doporučeno.


Jak to vypadá nyní?

[Habasko]

už to šlape pěkně ,díky

ale mám ještě jeden problém a to s režimem spánku , když ho pustím tak se zhasne monitor ale počítac (větráky) beží pořád

[Žbeky]

To je o nastavení režimu spánku v BIOSu. Musíš nastavit režim S3, teď máš asi S1