Doporučená kontrola Logu Vyřešeno

[Joey61]

Nový log z ComboFixu:

ComboFix 12-11-25.01 - Joey 25.11.2012 21:35:16.2.4 - x64
Microsoft Windows 7 Ultimate 6.1.7601.1.1250.420.1029.18.8147.6550 [GMT 1:00]
Spuštěný z: c:\users\Joey\Desktop\PROGRAMS\ComboFix.exe
Použité ovládací přepínače :: c:\users\Joey\Desktop\CFScript.txt.txt
AV: ESET Smart Security 5.0 *Disabled/Updated* {77DEAFED-8149-104B-25A1-21771CA47CD1}
FW: ESET Personal firewall *Enabled* {4FE52EC8-CB26-1113-0EFE-8842E2773BAA}
SP: ESET Smart Security 5.0 *Disabled/Updated* {CCBF4E09-A773-1FC5-1F11-1A056723366C}
SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.
FILE ::
"c:\windows\Tasks\GoogleUpdateTaskMachineCore.job"
"c:\windows\Tasks\GoogleUpdateTaskMachineUA.job"
.
.
((((((((((((((((((((((((((((((((((((((( Ostatní výmazy )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
c:\program files (x86)\Google\Update
c:\program files (x86)\Google\Update\1.3.21.123\GoogleCrashHandler.exe
c:\program files (x86)\Google\Update\1.3.21.123\GoogleCrashHandler64.exe
c:\program files (x86)\Google\Update\1.3.21.123\GoogleUpdate.exe
c:\program files (x86)\Google\Update\1.3.21.123\GoogleUpdateBroker.exe
c:\program files (x86)\Google\Update\1.3.21.123\GoogleUpdateHelper.msi
c:\program files (x86)\Google\Update\1.3.21.123\GoogleUpdateOnDemand.exe
c:\program files (x86)\Google\Update\1.3.21.123\GoogleUpdateSetup.exe
c:\program files (x86)\Google\Update\1.3.21.123\goopdate.dll
c:\program files (x86)\Google\Update\1.3.21.123\goopdateres_am.dll
c:\program files (x86)\Google\Update\1.3.21.123\goopdateres_ar.dll
c:\program files (x86)\Google\Update\1.3.21.123\goopdateres_bg.dll
c:\program files (x86)\Google\Update\1.3.21.123\goopdateres_bn.dll
c:\program files (x86)\Google\Update\1.3.21.123\goopdateres_ca.dll
c:\program files (x86)\Google\Update\1.3.21.123\goopdateres_cs.dll
c:\program files (x86)\Google\Update\1.3.21.123\goopdateres_da.dll
c:\program files (x86)\Google\Update\1.3.21.123\goopdateres_de.dll
c:\program files (x86)\Google\Update\1.3.21.123\goopdateres_el.dll
c:\program files (x86)\Google\Update\1.3.21.123\goopdateres_en-GB.dll
c:\program files (x86)\Google\Update\1.3.21.123\goopdateres_en.dll
c:\program files (x86)\Google\Update\1.3.21.123\goopdateres_es-419.dll
c:\program files (x86)\Google\Update\1.3.21.123\goopdateres_es.dll
c:\program files (x86)\Google\Update\1.3.21.123\goopdateres_et.dll
c:\program files (x86)\Google\Update\1.3.21.123\goopdateres_fa.dll
c:\program files (x86)\Google\Update\1.3.21.123\goopdateres_fi.dll
c:\program files (x86)\Google\Update\1.3.21.123\goopdateres_fil.dll
c:\program files (x86)\Google\Update\1.3.21.123\goopdateres_fr.dll
c:\program files (x86)\Google\Update\1.3.21.123\goopdateres_gu.dll
c:\program files (x86)\Google\Update\1.3.21.123\goopdateres_hi.dll
c:\program files (x86)\Google\Update\1.3.21.123\goopdateres_hr.dll
c:\program files (x86)\Google\Update\1.3.21.123\goopdateres_hu.dll
c:\program files (x86)\Google\Update\1.3.21.123\goopdateres_id.dll
c:\program files (x86)\Google\Update\1.3.21.123\goopdateres_is.dll
c:\program files (x86)\Google\Update\1.3.21.123\goopdateres_it.dll
c:\program files (x86)\Google\Update\1.3.21.123\goopdateres_iw.dll
c:\program files (x86)\Google\Update\1.3.21.123\goopdateres_ja.dll
c:\program files (x86)\Google\Update\1.3.21.123\goopdateres_kn.dll
c:\program files (x86)\Google\Update\1.3.21.123\goopdateres_ko.dll
c:\program files (x86)\Google\Update\1.3.21.123\goopdateres_lt.dll
c:\program files (x86)\Google\Update\1.3.21.123\goopdateres_lv.dll
c:\program files (x86)\Google\Update\1.3.21.123\goopdateres_ml.dll
c:\program files (x86)\Google\Update\1.3.21.123\goopdateres_mr.dll
c:\program files (x86)\Google\Update\1.3.21.123\goopdateres_ms.dll
c:\program files (x86)\Google\Update\1.3.21.123\goopdateres_nl.dll
c:\program files (x86)\Google\Update\1.3.21.123\goopdateres_no.dll
c:\program files (x86)\Google\Update\1.3.21.123\goopdateres_pl.dll
c:\program files (x86)\Google\Update\1.3.21.123\goopdateres_pt-BR.dll
c:\program files (x86)\Google\Update\1.3.21.123\goopdateres_pt-PT.dll
c:\program files (x86)\Google\Update\1.3.21.123\goopdateres_ro.dll
c:\program files (x86)\Google\Update\1.3.21.123\goopdateres_ru.dll
c:\program files (x86)\Google\Update\1.3.21.123\goopdateres_sk.dll
c:\program files (x86)\Google\Update\1.3.21.123\goopdateres_sl.dll
c:\program files (x86)\Google\Update\1.3.21.123\goopdateres_sr.dll
c:\program files (x86)\Google\Update\1.3.21.123\goopdateres_sv.dll
c:\program files (x86)\Google\Update\1.3.21.123\goopdateres_sw.dll
c:\program files (x86)\Google\Update\1.3.21.123\goopdateres_ta.dll
c:\program files (x86)\Google\Update\1.3.21.123\goopdateres_te.dll
c:\program files (x86)\Google\Update\1.3.21.123\goopdateres_th.dll
c:\program files (x86)\Google\Update\1.3.21.123\goopdateres_tr.dll
c:\program files (x86)\Google\Update\1.3.21.123\goopdateres_uk.dll
c:\program files (x86)\Google\Update\1.3.21.123\goopdateres_ur.dll
c:\program files (x86)\Google\Update\1.3.21.123\goopdateres_vi.dll
c:\program files (x86)\Google\Update\1.3.21.123\goopdateres_zh-CN.dll
c:\program files (x86)\Google\Update\1.3.21.123\goopdateres_zh-TW.dll
c:\program files (x86)\Google\Update\1.3.21.123\npGoogleUpdate3.dll
c:\program files (x86)\Google\Update\1.3.21.123\psmachine.dll
c:\program files (x86)\Google\Update\1.3.21.123\psuser.dll
c:\program files (x86)\Google\Update\Download\{430FD4D0-B729-4F61-AA34-91526481799D}\1.3.21.125\GoogleUpdateB6998767.exe
c:\program files (x86)\Google\Update\Download\{4DC8B4CA-1BDA-483E-B5FA-D3C12E15B62D}\23.0.1271.64\23.0.1271.64_22.0.1229.94_chrome_updater.exe
c:\program files (x86)\Google\Update\GoogleUpdate.exe
c:\program files (x86)\Skype\Updater
c:\program files (x86)\Skype\Updater\Updater.dll
c:\program files (x86)\Skype\Updater\Updater.exe
c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
.
.
((((((((((((((((((((((((((((((((((((((( Ovladače/Služby )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
-------\Service_SkypeUpdate
-------\Service_gupdate
-------\Service_gupdatem
-------\Service_gupdate
-------\Service_gupdatem
.
.
((((((((((((((((((((((((( Soubory vytvořené od 2012-10-25 do 2012-11-25 )))))))))))))))))))))))))))))))
.
.
2012-11-25 20:39 . 2012-11-25 20:39 -------- d-----w- c:\users\Wow\AppData\Local\temp
2012-11-25 20:39 . 2012-11-25 20:39 -------- d-----w- c:\users\UpdatusUser\AppData\Local\temp
2012-11-25 20:39 . 2012-11-25 20:39 -------- d-----w- c:\users\Default\AppData\Local\temp
2012-11-25 00:13 . 2012-11-25 00:13 -------- d-----w- c:\users\Joey\AppData\Local\Skyrim
2012-11-24 21:31 . 2012-11-24 21:31 -------- d-----w- c:\users\Joey\AppData\Roaming\Malwarebytes
2012-11-24 21:31 . 2012-11-24 21:31 -------- d-----w- c:\programdata\Malwarebytes
2012-11-24 21:31 . 2012-11-24 21:31 -------- d-----w- c:\program files (x86)\Malwarebytes' Anti-Malware
2012-11-24 21:31 . 2012-09-29 18:54 25928 ----a-w- c:\windows\system32\drivers\mbam.sys
2012-11-24 02:06 . 2012-11-19 00:01 9125352 ----a-w- c:\programdata\Microsoft\Windows Defender\Definition Updates\{73529BBC-215F-4CF2-AD11-2C48B124AC5B}\mpengine.dll
2012-11-23 21:02 . 2012-11-23 21:02 388096 ----a-r- c:\users\Joey\AppData\Roaming\Microsoft\Installer\{45A66726-69BC-466B-A7A4-12FCBA4883D7}\HiJackThis.exe
2012-11-23 21:02 . 2012-11-23 21:02 -------- d-----w- c:\program files (x86)\Trend Micro
2012-11-23 20:54 . 2012-11-23 20:54 -------- d-sh--w- c:\users\Joey\msdata
2012-11-23 20:47 . 2012-11-23 20:54 -------- d-----w- c:\users\Joey\AppData\Local\Ubisoft Game Launcher
2012-11-23 20:46 . 2012-11-23 20:46 -------- d-----w- c:\program files (x86)\Ubisoft
2012-11-22 21:14 . 2012-11-22 21:14 -------- d-----w- c:\users\Joey\AppData\Roaming\JAM Software
2012-11-22 21:14 . 2012-11-22 21:14 -------- d-----w- c:\program files (x86)\JAM Software
2012-11-22 14:26 . 2012-11-22 14:26 -------- d-----w- c:\users\Wow\AppData\Local\VirtualStore
2012-11-22 14:26 . 2012-11-22 14:28 -------- d-----w- c:\users\Wow\AppData\Roaming\IObit
2012-11-22 12:07 . 2012-08-22 18:12 1913200 ----a-w- c:\windows\system32\drivers\tcpip.sys
2012-11-22 12:07 . 2012-08-22 18:12 376688 ----a-w- c:\windows\system32\drivers\netio.sys
2012-11-22 12:07 . 2012-08-22 18:12 288624 ----a-w- c:\windows\system32\drivers\FWPKCLNT.SYS
2012-11-21 19:38 . 2012-11-21 19:38 -------- d-----w- c:\users\Joey\AppData\Local\ESET
2012-11-21 19:35 . 2012-11-21 19:35 -------- d-----w- c:\program files\ESET
2012-11-21 19:08 . 2012-11-22 18:15 -------- d-----w- c:\programdata\Tunngle
2012-11-21 19:08 . 2012-11-22 18:14 -------- d-----w- c:\users\Joey\AppData\Roaming\Tunngle
2012-11-21 19:08 . 2012-11-21 19:09 -------- d-----w- c:\program files (x86)\Tunngle
2012-11-21 16:04 . 2012-11-25 20:39 -------- d-----r- c:\program files (x86)\Skype
2012-11-21 16:04 . 2012-11-21 16:04 -------- d-----w- c:\program files (x86)\Common Files\Skype
2012-11-21 15:25 . 2012-11-21 15:25 -------- d-----w- c:\windows\system32\SPReview
2012-11-21 15:25 . 2012-11-21 15:25 -------- d-----w- c:\windows\system32\EventProviders
2012-11-21 15:23 . 2012-10-29 20:04 66395536 ----a-w- c:\windows\system32\MRT.exe
2012-11-21 15:17 . 2010-11-20 13:27 1363968 ----a-w- c:\windows\system32\wdc.dll
2012-11-21 15:16 . 2010-11-20 13:27 529408 ----a-w- c:\windows\system32\wbemcomn.dll
2012-11-21 15:16 . 2010-11-20 13:27 244736 ----a-w- c:\program files\Windows Portable Devices\sqmapi.dll
2012-11-21 15:16 . 2010-11-20 13:27 244736 ----a-w- c:\windows\system32\sqmapi.dll
2012-11-21 15:05 . 2012-11-21 15:05 -------- d-----w- c:\programdata\Local Settings
2012-11-21 14:58 . 2012-10-18 18:25 3149824 ----a-w- c:\windows\system32\win32k.sys
2012-11-21 14:58 . 2012-09-25 22:47 78336 ----a-w- c:\windows\SysWow64\synceng.dll
2012-11-21 14:58 . 2012-09-25 22:46 95744 ----a-w- c:\windows\system32\synceng.dll
2012-11-21 14:18 . 2012-11-22 02:30 -------- d-sh--w- c:\users\Joey\Userdata
2012-11-20 19:03 . 2012-11-20 19:03 -------- d-----w- c:\users\Joey\AppData\Roaming\PunkBuster
2012-11-20 02:58 . 2012-11-24 22:30 -------- d-sh--w- c:\users\Joey\Drivers
2012-11-20 02:09 . 2012-11-20 02:09 -------- d-----w- c:\users\Joey\AppData\Roaming\Assassin's Creed III
2012-11-19 22:41 . 2012-11-20 18:37 -------- d-----w- c:\programdata\Solidshield
2012-11-19 21:13 . 2012-11-24 22:59 -------- d-----w- c:\users\Owner
2012-11-19 21:13 . 2012-11-19 21:13 -------- d-----w- c:\users\Joey\AppData\Roaming\Rovio
2012-11-18 19:35 . 2012-11-18 19:35 -------- d-----w- c:\program files (x86)\Cheat Engine 6.1
2012-11-16 01:57 . 2012-11-16 01:57 -------- d-----w- c:\programdata\Origin
2012-11-15 04:11 . 2012-11-15 04:11 -------- d-----w- c:\windows\Simple Shutdown Timer
2012-11-15 04:11 . 2012-11-15 04:11 -------- d-----w- c:\program files (x86)\Simple Shutdown Timer
2012-11-15 04:11 . 2012-11-15 04:11 -------- d-----w- c:\users\Joey\AppData\Roaming\Sinvise Systems
2012-11-15 04:11 . 2012-11-15 04:11 -------- d-----w- c:\program files\Sinvise Systems
2012-11-15 00:28 . 2012-11-15 00:28 -------- d-----w- c:\users\Joey\AppData\Local\Programs
2012-11-14 18:28 . 2012-11-25 20:01 -------- d-----w- C:\Fraps
2012-11-13 02:33 . 2012-11-13 02:33 -------- d-----w- c:\program files\CCleaner
2012-11-13 02:33 . 2012-11-13 02:33 -------- d-----w- c:\programdata\IObit
2012-11-13 02:33 . 2012-11-24 22:48 -------- d-----w- c:\users\Joey\AppData\Roaming\IObit
2012-11-13 02:33 . 2012-11-13 02:33 -------- d-----w- c:\program files (x86)\IObit
2012-11-13 02:07 . 2012-11-13 02:07 -------- d-----w- c:\program files (x86)\CPUID
2012-11-13 02:07 . 2012-02-14 11:49 114176 ----a-w- c:\windows\SysWow64\PCWizard.cpl
2012-11-10 22:02 . 2012-11-10 22:02 -------- d-----w- c:\users\Joey\AppData\Roaming\Screaming Bee
2012-11-06 00:37 . 2012-11-08 22:13 -------- d-----w- c:\program files (x86)\Prime95
2012-11-05 22:38 . 2012-11-05 22:38 -------- d-----w- c:\users\Joey\AppData\Roaming\AnvSoft
2012-11-05 22:38 . 2012-11-05 22:38 -------- d-----w- c:\program files (x86)\AnvSoft
2012-11-01 21:30 . 2012-10-02 22:21 9146728 ----a-w- c:\windows\system32\nvcuda.dll
2012-10-31 23:28 . 2007-07-19 23:57 411496 ----a-w- c:\windows\system32\xactengine2_9.dll
2012-10-31 23:25 . 2012-10-31 23:25 -------- d-----w- c:\windows\E4D153288C89484BB9AAF5BE9EA6D01C.TMP
2012-10-29 20:40 . 2012-10-29 20:40 -------- d-----w- c:\users\Joey\AppData\Local\2K Games
2012-10-29 20:35 . 2012-10-29 20:35 -------- d-----w- C:\NVIDIA
2012-10-29 19:08 . 2012-10-29 19:08 -------- d-----w- c:\users\Joey\AppData\Roaming\Rockstar Games
2012-10-28 02:58 . 2012-10-28 23:33 1048576 ----a-w- c:\windows\PE_Rom.dll
2012-10-28 02:58 . 2012-10-28 02:58 -------- d-----w- c:\programdata\ASUS OC Profiles
2012-10-28 02:57 . 2012-10-28 02:57 -------- d-----w- c:\programdata\ASUS PowerControl Profiles
2012-10-28 02:47 . 2012-10-28 02:47 -------- d-----w- c:\program files\ASUS
2012-10-28 02:47 . 2012-10-28 02:41 46152 ----a-w- c:\windows\SysWow64\drivers\ASUSFILTER.sys
2012-10-28 02:45 . 2012-10-28 02:41 32400 ----a-w- c:\windows\system32\drivers\ndisrd.sys
2012-10-28 02:44 . 2012-10-28 02:41 14464 ----a-w- c:\windows\SysWow64\drivers\AsUpIO.sys
2012-10-28 02:44 . 2012-04-19 08:19 14848 ----a-w- c:\windows\SysWow64\drivers\AiChargerPlus.sys
2012-10-28 02:43 . 2008-12-02 19:05 184320 ----a-w- c:\windows\SysWow64\drivers\UpdateHelper.dll
2012-10-28 02:43 . 2001-09-05 03:18 225280 ----a-w- c:\program files (x86)\Common Files\InstallShield\IScript\iscript.dll
2012-10-28 02:43 . 2001-09-05 03:14 176128 ----a-w- c:\program files (x86)\Common Files\InstallShield\Engine\6\Intel 32\iuser.dll
2012-10-28 02:43 . 2001-09-05 03:13 32768 ----a-w- c:\program files (x86)\Common Files\InstallShield\Engine\6\Intel 32\objectps.dll
2012-10-28 02:43 . 2001-09-05 03:18 77824 ----a-w- c:\program files (x86)\Common Files\InstallShield\Engine\6\Intel 32\ctor.dll
2012-10-28 02:42 . 2012-10-28 02:41 614532 ----a-w- c:\program files (x86)\Common Files\InstallShield\Engine\6\Intel 32\IKernel.exe
2012-10-28 02:42 . 2012-10-28 02:42 -------- d-----w- c:\programdata\ASUS
2012-10-28 02:42 . 2012-10-28 02:41 28672 ----a-w- c:\windows\SysWow64\AsIO.dll
2012-10-28 02:42 . 2012-10-28 02:41 15232 ----a-w- c:\windows\SysWow64\drivers\AsIO.sys
2012-10-28 02:42 . 2012-10-28 02:42 -------- d-----w- c:\windows\SysWow64\drivers\MFDLL
2012-10-28 02:42 . 2012-10-28 02:41 11832 ------w- c:\windows\SysWow64\drivers\AsInsHelp64.sys
2012-10-28 02:42 . 2012-10-28 02:41 10216 ------w- c:\windows\SysWow64\drivers\AsInsHelp32.sys
2012-10-28 02:12 . 2012-10-28 02:12 -------- d-----w- c:\windows\SysWow64\Wat
2012-10-28 02:12 . 2012-10-28 02:12 -------- d-----w- c:\windows\system32\Wat
2012-10-28 01:38 . 2010-02-23 08:16 294912 ----a-w- c:\windows\system32\browserchoice.exe
2012-10-28 01:18 . 2012-10-28 01:18 -------- d-----w- c:\users\Default\AppData\Local\Microsoft Help
2012-10-28 01:11 . 2012-03-01 06:46 23408 ----a-w- c:\windows\system32\drivers\fs_rec.sys
2012-10-28 01:11 . 2012-03-01 06:33 81408 ----a-w- c:\windows\system32\imagehlp.dll
2012-10-28 01:11 . 2012-03-01 06:28 5120 ----a-w- c:\windows\system32\wmi.dll
2012-10-28 01:11 . 2012-03-01 05:33 159232 ----a-w- c:\windows\SysWow64\imagehlp.dll
2012-10-28 01:11 . 2012-03-01 05:29 5120 ----a-w- c:\windows\SysWow64\wmi.dll
2012-10-27 15:59 . 2012-03-03 06:35 1544704 ----a-w- c:\windows\system32\DWrite.dll
2012-10-27 15:58 . 2011-10-26 05:25 1572864 ----a-w- c:\windows\system32\quartz.dll
2012-10-27 15:57 . 2011-11-17 06:35 395776 ----a-w- c:\windows\system32\webio.dll
2012-10-27 15:57 . 2011-11-17 05:35 314880 ----a-w- c:\windows\SysWow64\webio.dll
2012-10-27 15:57 . 2012-06-06 06:06 2004480 ----a-w- c:\windows\system32\msxml6.dll
2012-10-27 15:57 . 2012-06-06 06:06 1881600 ----a-w- c:\windows\system32\msxml3.dll
2012-10-27 15:57 . 2012-06-06 05:05 1390080 ----a-w- c:\windows\SysWow64\msxml6.dll
2012-10-27 15:57 . 2012-06-06 05:05 1236992 ----a-w- c:\windows\SysWow64\msxml3.dll
2012-10-27 15:57 . 2010-06-26 03:55 2048 ----a-w- c:\windows\system32\msxml3r.dll
2012-10-27 15:57 . 2010-06-26 03:24 2048 ----a-w- c:\windows\SysWow64\msxml3r.dll
2012-10-27 15:57 . 2011-10-26 05:21 43520 ----a-w- c:\windows\system32\csrsrv.dll
2012-10-27 15:57 . 2011-12-30 06:26 515584 ----a-w- c:\windows\system32\timedate.cpl
2012-10-27 15:57 . 2011-12-30 05:27 478720 ----a-w- c:\windows\SysWow64\timedate.cpl
2012-10-27 15:57 . 2011-02-24 06:15 476160 ----a-w- c:\windows\system32\XpsGdiConverter.dll
2012-10-27 15:57 . 2011-02-24 05:38 288256 ----a-w- c:\windows\SysWow64\XpsGdiConverter.dll
2012-10-27 15:56 . 2012-08-30 18:03 5559664 ----a-w- c:\windows\system32\ntoskrnl.exe
2012-10-27 15:56 . 2012-08-30 17:12 3968880 ----a-w- c:\windows\SysWow64\ntkrnlpa.exe
2012-10-27 15:56 . 2012-08-30 17:12 3914096 ----a-w- c:\windows\SysWow64\ntoskrnl.exe
2012-10-27 15:56 . 2011-03-12 12:08 1465344 ----a-w- c:\windows\system32\XpsPrint.dll
2012-10-27 15:56 . 2011-03-12 11:23 870912 ----a-w- c:\windows\SysWow64\XpsPrint.dll
2012-10-27 15:56 . 2011-03-11 06:34 1359872 ----a-w- c:\windows\system32\mfc42u.dll
2012-10-27 15:56 . 2011-03-11 06:34 1395712 ----a-w- c:\windows\system32\mfc42.dll
2012-10-27 15:56 . 2011-03-11 05:33 1137664 ----a-w- c:\windows\SysWow64\mfc42.dll
2012-10-27 15:56 . 2011-03-11 05:33 1164288 ----a-w- c:\windows\SysWow64\mfc42u.dll
2012-10-27 15:56 . 2012-06-09 05:43 14172672 ----a-w- c:\windows\system32\shell32.dll
2012-10-27 15:54 . 2012-08-02 17:58 574464 ----a-w- c:\windows\system32\d3d10level9.dll
.
.
(((((((((((((((((((((((((((((((((((((((( Find3M výpis ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2012-11-21 15:47 . 2009-07-14 02:36 175616 ----a-w- c:\windows\system32\msclmd.dll
2012-11-21 15:47 . 2009-07-14 02:36 152576 ----a-w- c:\windows\SysWow64\msclmd.dll
2012-11-20 19:03 . 2012-08-27 03:33 75136 ----a-w- c:\windows\SysWow64\PnkBstrA.exe
2012-11-20 19:03 . 2012-08-27 03:26 189248 ----a-w- c:\windows\SysWow64\PnkBstrB.exe
2012-11-16 01:30 . 2012-06-21 08:37 669184 ----a-w- c:\windows\SysWow64\pbsvc.exe
2012-11-11 11:01 . 2012-08-15 20:03 73656 ----a-w- c:\windows\SysWow64\FlashPlayerCPLApp.cpl
2012-11-11 11:01 . 2012-08-15 20:03 697272 ----a-w- c:\windows\SysWow64\FlashPlayerApp.exe
2012-10-28 02:41 . 2012-05-17 17:57 26136 ----a-w- c:\windows\system32\drivers\ICCWDT.sys
2012-10-28 02:41 . 2012-05-17 17:57 1721576 ----a-w- c:\windows\system32\wdfcoinstaller01009.dll
2012-10-28 01:33 . 2012-10-28 01:33 203776 ----a-w- c:\windows\SysWow64\webcheck.dll
2012-10-28 01:33 . 2012-10-28 01:33 249344 ----a-w- c:\windows\system32\webcheck.dll
2012-10-27 01:53 . 2012-08-22 23:51 746984 ----a-w- c:\windows\SysWow64\deployJava1.dll
2012-10-27 01:45 . 2012-08-27 03:26 103736 ----a-w- c:\windows\SysWow64\PnkBstrB.ex0
2012-10-08 20:37 . 2012-08-15 20:31 466520 ----a-w- c:\windows\system32\wrap_oal.dll
2012-10-08 20:37 . 2012-08-15 20:31 122968 ----a-w- c:\windows\system32\OpenAL32.dll
2012-10-08 20:37 . 2012-08-15 20:31 445016 ----a-w- c:\windows\SysWow64\wrap_oal.dll
2012-10-08 20:37 . 2012-08-15 20:31 109144 ----a-w- c:\windows\SysWow64\OpenAL32.dll
2012-10-02 22:21 . 2012-10-12 16:00 973672 ----a-w- c:\windows\system32\nvumdshimx.dll
2012-10-02 22:21 . 2012-10-12 16:00 2731880 ----a-w- c:\windows\system32\nvapi64.dll
2012-10-02 22:21 . 2012-10-12 16:00 2428776 ----a-w- c:\windows\SysWow64\nvapi.dll
2012-10-02 22:21 . 2012-10-12 16:00 18252136 ----a-w- c:\windows\system32\nvd3dumx.dll
2012-10-02 22:21 . 2012-10-12 16:00 1760104 ----a-w- c:\windows\system32\nvdispco64.dll
2012-10-02 22:21 . 2012-10-12 16:00 15309160 ----a-w- c:\windows\SysWow64\nvd3dum.dll
2012-10-02 22:21 . 2012-10-12 16:00 14922600 ----a-w- c:\windows\system32\nvwgf2umx.dll
2012-10-02 22:21 . 2012-10-12 16:00 1482600 ----a-w- c:\windows\system32\nvdispgenco64.dll
2012-10-02 19:51 . 2012-10-12 16:02 3536817 ----a-w- c:\windows\system32\nvcoproc.bin
2012-10-02 19:51 . 2012-10-12 16:02 3293544 ----a-w- c:\windows\system32\nvsvc64.dll
2012-10-02 19:51 . 2012-10-12 16:02 6200680 ----a-w- c:\windows\system32\nvcpl.dll
2012-10-02 19:50 . 2012-10-12 16:02 891240 ----a-w- c:\windows\system32\nvvsvc.exe
2012-10-02 19:50 . 2012-10-12 16:02 63336 ----a-w- c:\windows\system32\nvshext.dll
2012-10-02 19:50 . 2012-10-12 16:02 2557800 ----a-w- c:\windows\system32\nvsvcr.dll
2012-10-02 19:50 . 2012-10-12 16:02 118120 ----a-w- c:\windows\system32\nvmctray.dll
2012-10-02 12:15 . 2012-10-02 12:15 430952 ----a-w- c:\windows\SysWow64\nvStreaming.exe
2012-08-30 13:18 . 2012-08-30 13:18 71680 ----a-w- c:\windows\system32\frapsv64.dll
2012-08-30 13:18 . 2012-08-30 13:18 65536 ----a-w- c:\windows\SysWow64\frapsvid.dll
.
.
(((((((((((((((((((((((((((((((((( Spouštěcí body v registru )))))))))))))))))))))))))))))))))))))))))))))
.
.
*Poznámka* prázdné záznamy a legitimní výchozí údaje nejsou zobrazeny.
REGEDIT4
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Sidebar"="c:\program files\Windows Sidebar\sidebar.exe" [2010-11-20 1475584]
"uTorrent"="c:\program files (x86)\uTorrent\uTorrent.exe" [2012-08-15 895376]
"DAEMON Tools Lite"="c:\program files (x86)\DAEMON Tools Lite\DTLite.exe" [2012-04-17 3671872]
"Advanced SystemCare 6"="c:\program files (x86)\IObit\Advanced SystemCare 6\ASCTray.exe" [2012-09-24 490880]
"Skype"="c:\program files (x86)\Skype\Phone\Skype.exe" [2012-11-09 17877168]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]
"USB3MON"="c:\program files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe" [2012-08-15 291648]
"ASUS AiChargerPlus Execute"="c:\program files (x86)\InstallShield Installation Information\{E6931688-DA2B-4E16-8539-3D323D69C677}\AiChargerPlus.exe" [2012-08-20 550272]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\Currentversion\policies\explorer\Run]
"46923"="c:\progra~3\LOCALS~1\Temp\msquqaif.com" [BU]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorAdmin"= 0 (0x0)
"ConsentPromptBehaviorUser"= 3 (0x3)
"EnableUIADesktopToggle"= 0 (0x0)
"PromptOnSecureDesktop"= 0 (0x0)
.
2;2 AsusFanControlService;AsusFanControlService [x]
R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2010-03-18 138576]
R2 MBAMService;MBAMService;c:\program files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe [2012-09-29 676936]
R3 AtiHDAudioService;ATI Function Driver for HD Audio Service;c:\windows\system32\drivers\AtihdW76.sys [2012-08-15 114704]
R3 cpuz135;cpuz135;c:\program files (x86)\CPUID\PC Wizard 2012\pcwiz_x64.sys [2012-08-11 24368]
R3 GGSAFERDriver;GGSAFER Driver;c:\program files (x86)\Garena Plus\Room\safedrv.sys [x]
R3 RdpVideoMiniport;Remote Desktop Video Miniport Driver;c:\windows\system32\drivers\rdpvideominiport.sys [2010-11-20 20992]
R3 ScreamBAudioSvc;ScreamBee Audio;c:\windows\system32\drivers\ScreamingBAudio64.sys [2009-12-01 38992]
R3 Synth3dVsc;Synth3dVsc;c:\windows\system32\drivers\synth3dvsc.sys [x]
R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys [2010-11-20 59392]
R3 tsusbhub;tsusbhub;c:\windows\system32\drivers\tsusbhub.sys [x]
R3 TunngleService;TunngleService;c:\program files (x86)\Tunngle\TnglCtrl.exe [2012-11-14 744856]
R3 VGPU;VGPU;c:\windows\system32\drivers\rdvgkmd.sys [x]
R3 WatAdminSvc;Služba Technologie aktivace Windows;c:\windows\system32\Wat\WatAdminSvc.exe [2012-10-28 1255736]
S0 epfwwfp;epfwwfp;c:\windows\system32\DRIVERS\epfwwfp.sys [2011-08-04 62496]
S0 iusb3hcs;Ovladač přepínání hostitelského řadiče Intel(R) USB 3.0;c:\windows\system32\DRIVERS\iusb3hcs.sys [2012-08-15 19264]
S1 AsUpIO;AsUpIO;SysWow64\drivers\AsUpIO.sys [x]
S1 dtsoftbus01;DAEMON Tools Virtual Bus Driver;c:\windows\system32\DRIVERS\dtsoftbus01.sys [2012-08-15 283200]
S1 ehdrv;ehdrv;c:\windows\system32\DRIVERS\ehdrv.sys [2011-08-04 146432]
S1 EpfwLWF;Epfw NDIS LightWeight Filter;c:\windows\system32\DRIVERS\EpfwLWF.sys [2011-08-04 38288]
S1 ndisrd;WinpkFilter LightWeight Filter;c:\windows\system32\DRIVERS\ndisrd.sys [2012-10-28 32400]
S2 AdvancedSystemCareService6;Advanced SystemCare Service 6;c:\program files (x86)\IObit\Advanced SystemCare 6\ASCService.exe [2012-10-12 1026432]
S2 AMD External Events Utility;AMD External Events Utility;c:\windows\system32\atiesrxx.exe [2012-08-15 204288]
S2 asComSvc;ASUS Com Service;c:\program files (x86)\ASUS\AXSP\1.00.19\atkexComSvc.exe [2012-10-28 920736]
S2 ASGT;ASGT;c:\windows\SysWOW64\ASGT.exe [2012-01-17 55296]
S2 asHmComSvc;ASUS HM Com Service;c:\program files (x86)\ASUS\AAHM\1.00.20\aaHMSvc.exe [2012-10-28 951936]
S2 AsSysCtrlService;ASUS System Control Service;c:\program files (x86)\ASUS\AsSysCtrlService\1.00.13\AsSysCtrlService.exe [2012-10-28 149120]
S2 eamonm;eamonm;c:\windows\system32\DRIVERS\eamonm.sys [2011-08-09 202576]
S2 ekrn;ESET Service;c:\program files\ESET\ESET Smart Security\x86\ekrn.exe [2011-08-09 974944]
S2 Intel(R) Capability Licensing Service Interface;Intel(R) Capability Licensing Service Interface;c:\program files\Intel\iCLS Client\HeciServer.exe [2012-02-02 628448]
S2 Intel(R) PROSet Monitoring Service;Intel(R) PROSet Monitoring Service;c:\windows\system32\IProsetMonitor.exe [2012-03-12 190120]
S2 jhi_service;Intel(R) Dynamic Application Loader Host Interface Service;c:\program files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [2012-02-07 161560]
S2 Stereo Service;NVIDIA Stereoscopic 3D Driver Service;c:\program files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe [2012-10-02 382824]
S2 UNS;Intel(R) Management and Security Application User Notification Service;c:\program files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe [2012-02-07 363800]
S3 AiChargerPlus;AiChargerPlus;SysWow64\drivers\AiChargerPlus.sys [x]
S3 ALSysIO;ALSysIO;c:\users\Joey\AppData\Local\Temp\ALSysIO64.sys [x]
S3 asmthub3;ASMedia USB3 Hub Service;c:\windows\system32\DRIVERS\asmthub3.sys [2011-11-03 130536]
S3 asmtxhci;ASMEDIA XHCI Service;c:\windows\system32\DRIVERS\asmtxhci.sys [2011-11-03 395752]
S3 ASUSFILTER;ASUSFILTER;SysWow64\drivers\ASUSFILTER.sys [x]
S3 hipeer20;Remobo Instant Private Network;c:\windows\system32\DRIVERS\remobo64.sys [2010-08-01 30720]
S3 ICCS;Intel(R) Integrated Clock Controller Service - Intel(R) ICCS;c:\program files (x86)\Intel\Intel(R) Integrated Clock Controller Service\ICCProxy.exe [2011-05-27 160768]
S3 ICCWDT;Intel(R) Watchdog Timer Driver (Intel(R) WDT);c:\windows\system32\DRIVERS\ICCWDT.sys [2012-10-28 26136]
S3 iusb3hub;Ovladač rozbočovače Intel(R) USB 3.0;c:\windows\system32\DRIVERS\iusb3hub.sys [2012-08-15 357184]
S3 iusb3xhc;Ovladač rozšiřitelného hostitelského řadiče Intel(R) USB 3.0;c:\windows\system32\DRIVERS\iusb3xhc.sys [2012-08-15 789824]
S3 MBAMProtector;MBAMProtector;c:\windows\system32\drivers\mbam.sys [2012-09-29 25928]
S3 tap0901t;TAP-Win32 Adapter V9 (Tunngle);c:\windows\system32\DRIVERS\tap0901t.sys [2009-09-16 31232]
S4 IOMap;IOMap;c:\windows\system32\drivers\IOMap64.sys [2010-02-23 23680]
.
.
Obsah adresáře 'Naplánované úlohy'
.
2012-11-25 c:\windows\Tasks\Adobe Flash Player Updater.job
- c:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2012-08-15 11:01]
.
.
--------- X64 Entries -----------
.
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"RTHDVCPL"="c:\program files\Realtek\Audio\HDA\RtkNGUI64.exe" [2012-08-15 6548112]
"XboxStat"="c:\program files\Microsoft Xbox 360 Accessories\XboxStat.exe" [2009-09-30 825184]
"egui"="c:\program files\ESET\ESET Smart Security\egui.exe" [2011-08-09 4030008]
.
------- Doplňkový sken -------
.
uLocal Page = %SystemRoot%\system32\blank.htm
mStart Page = hxxp://home.sweetim.com/?crg=3.1010000.10005&barid={7A8E1D87-EFEF-11E1-B26D-C86000A1A650}
mLocal Page = c:\windows\SYSTEM32\blank.htm
IE: E&xportovat do aplikace Microsoft Excel - c:\progra~2\MICROS~2\Office14\EXCEL.EXE/3000
IE: Od&eslat do aplikace OneNote - c:\progra~2\MICROS~2\Office14\ONBttnIE.dll/105
TCP: DhcpNameServer = 192.168.20.1
FF - ProfilePath - c:\users\Joey\AppData\Roaming\Mozilla\Firefox\Profiles\66tjd9x7.default\
FF - prefs.js: browser.startup.homepage - szn.cz
FF - ExtSQL: 2012-10-01 20:31; {d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}; c:\users\Joey\AppData\Roaming\Mozilla\Firefox\Profiles\66tjd9x7.default\extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi
FF - ExtSQL: 2012-10-08 18:09; {ab4b5718-3998-4a2c-91ae-18a7c2db513e}; c:\users\Joey\AppData\Roaming\Mozilla\Firefox\Profiles\66tjd9x7.default\extensions\{ab4b5718-3998-4a2c-91ae-18a7c2db513e}.xpi
FF - user.js: network.http.pipelining.maxrequests - 8
FF - user.js: network.http.request.max-start-delay - 0
FF - user.js: network.http.max-connections - 48
FF - user.js: network.http.max-connections-per-server - 16
FF - user.js: network.http.max-persistent-connections-per-proxy - 16
FF - user.js: network.http.max-persistent-connections-per-server - 8
FF - user.js: browser.turbo.enabled - true
FF - user.js: browser.display.show_image_placeholders - true
FF - user.js: browser.chrome.favicons - false
FF - user.js: browser.urlbar.autocomplete.enabled - true
FF - user.js: browser.cache.memory.capacity - 65536
FF - user.js: content.notify.ontimer - true
FF - user.js: content.interrupt.parsing - true
FF - user.js: content.max.tokenizing.time - 2250000
FF - user.js: content.switch.threshold - 750000
FF - user.js: plugin.expose_full_path - true
FF - user.js: ui.submenuDelay - 0
.
- - - - NEPLATNÉ POLOŽKY ODSTRANĚNÉ Z REGISTRU - - - -
.
WebBrowser-{EEE6C35B-6118-11DC-9C72-001320C79847} - (no file)
.
.
.
--------------------- ZAMKNUTÉ KLÍČE V REGISTRU ---------------------
.
[HKEY_USERS\S-1-5-21-1931917541-2785547761-4208433868-1000\Software\SecuROM\!CAUTION! NEVER A OR CHANGE ANY KEY*]
"??"=hex:1f,3f,28,23,07,5d,85,26,03,67,ff,f0,bd,99,06,33,f2,02,4a,dc,e7,be,22,
21,c4,26,28,4b,0e,8e,54,9b,74,df,70,b5,3f,9c,c4,68,11,9e,93,c6,bd,84,b0,26,\
"??"=hex:4a,54,a8,c1,e8,10,ed,c8,8e,27,cf,f3,e0,fa,36,55
.
[HKEY_USERS\S-1-5-21-1931917541-2785547761-4208433868-1000\Software\SecuROM\License information*]
"datasecu"=hex:7d,e8,c4,d4,86,f7,f2,1d,75,fe,7b,71,75,21,d4,47,2a,95,a6,a2,6d,
48,f6,50,75,c8,c3,22,9d,3f,c4,b3,b6,1d,da,63,12,31,f7,b6,8a,61,b0,9f,b7,84,\
"rkeysecu"=hex:bb,4c,51,c5,ce,bb,49,4d,2f,ed,f4,cb,6d,44,f5,ef
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Office\Common\Smart Tag\Actions\{B7EFF951-E52F-45CC-9EF7-57124F2177CC}]
@Denied: (A) (Everyone)
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Schema Library\ActionsPane3]
@Denied: (A) (Everyone)
.
------------------------ Jiné spuštené procesy ------------------------
.
c:\program files (x86)\ASUS\AsusFanControlService\1.01.14\AsusFanControlService.exe
c:\program files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe
c:\windows\SysWOW64\PnkBstrA.exe
c:\program files (x86)\ASUS\AI Suite II\DIGI+ Power Control\PowerControlHelp.exe
c:\program files (x86)\ASUS\AI Suite II\AsRoutineController.exe
c:\fraps\fraps.exe
c:\program files (x86)\ASUS\AI Suite II\TurboV EVO\TurboVHelp.exe
c:\program files (x86)\ASUS\AI Suite II\AI Suite II.exe
c:\program files (x86)\ASUS\AI Suite II\Sensor\AlertHelper\AlertHelper.exe
c:\program files (x86)\Internet Explorer\IELowutil.exe
c:\program files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
c:\program files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
.
**************************************************************************
.
Celkový čas: 2012-11-25 21:46:05 - počítač byl restartován
ComboFix-quarantined-files.txt 2012-11-25 20:46
ComboFix2.txt 2012-11-24 22:59
.
Před spuštěním: Volných bajtů: 495 562 817 536
Po spuštění: Volných bajtů: 494 822 932 480
.
- - End Of File - - 40CDCF4B14CD2ACC9B58B19F67F68E22

[Reklama]

[Joey61]

Nový log z HJT:

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 21:53:01, on 25.11.2012
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v9.00 (9.00.8112.16455)
Boot mode: Normal

Running processes:
C:\Program Files (x86)\ASUS\AI Suite II\DIGI+ Power Control\PowerControlHelp.exe
C:\Program Files (x86)\ASUS\AI Suite II\AsRoutineController.exe
C:\Fraps\fraps.exe
C:\Program Files (x86)\ASUS\AI Suite II\TurboV EVO\TurboVHelp.exe
C:\Program Files (x86)\ASUS\AI Suite II\AI Suite II.exe
C:\Program Files (x86)\ASUS\AI Suite II\Sensor\AlertHelper\AlertHelper.exe
C:\Program Files (x86)\uTorrent\uTorrent.exe
C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe
C:\Program Files (x86)\IObit\Advanced SystemCare 6\ASCTray.exe
C:\Program Files (x86)\Skype\Phone\Skype.exe
C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe
C:\Program Files (x86)\Trend Micro\HiJackThis\HiJackThis.exe
C:\Windows\SysWOW64\DllHost.exe

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://home.sweetim.com/?crg=3.1010000.10005&barid={7A8E1D87-EFEF-11E1-B26D-C86000A1A650}
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll
O2 - BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll
O4 - HKLM\..\Run: [USB3MON] "C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe"
O4 - HKLM\..\Run: [ASUS AiChargerPlus Execute] C:\Program Files (x86)\InstallShield Installation Information\{E6931688-DA2B-4E16-8539-3D323D69C677}\AiChargerPlus.exe
O4 - HKCU\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun
O4 - HKCU\..\Run: [uTorrent] "C:\Program Files (x86)\uTorrent\uTorrent.exe" /MINIMIZED
O4 - HKCU\..\Run: [DAEMON Tools Lite] "C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe" -autorun
O4 - HKCU\..\Run: [Advanced SystemCare 6] "C:\Program Files (x86)\IObit\Advanced SystemCare 6\ASCTray.exe" /AutoStart
O4 - HKCU\..\Run: [Skype] "C:\Program Files (x86)\Skype\Phone\Skype.exe" /minimized /regrun
O4 - HKLM\..\Policies\Explorer\Run: [46923] C:\PROGRA~3\LOCALS~1\Temp\msquqaif.com
O4 - HKUS\S-1-5-21-1931917541-2785547761-4208433868-1004\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'UpdatusUser')
O4 - HKUS\S-1-5-21-1931917541-2785547761-4208433868-1004\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'UpdatusUser')
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Excel - res://C:\PROGRA~2\MICROS~2\Office14\EXCEL.EXE/3000
O8 - Extra context menu item: Od&eslat do aplikace OneNote - res://C:\PROGRA~2\MICROS~2\Office14\ONBttnIE.dll/105
O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll
O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~2\COMMON~1\Skype\SKYPE4~1.DLL
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: Advanced SystemCare Service 6 (AdvancedSystemCareService6) - IObit - C:\Program Files (x86)\IObit\Advanced SystemCare 6\ASCService.exe
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
O23 - Service: AMD External Events Utility - Unknown owner - C:\Windows\system32\atiesrxx.exe (file missing)
O23 - Service: ASUS Com Service (asComSvc) - Unknown owner - C:\Program Files (x86)\ASUS\AXSP\1.00.19\atkexComSvc.exe
O23 - Service: ASGT - Unknown owner - C:\Windows\SysWOW64\ASGT.exe
O23 - Service: ASUS HM Com Service (asHmComSvc) - ASUSTeK Computer Inc. - C:\Program Files (x86)\ASUS\AAHM\1.00.20\aaHMSvc.exe
O23 - Service: Stavová služba ASP.NET (aspnet_state) - Unknown owner - C:\Windows\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe (file missing)
O23 - Service: ASUS System Control Service (AsSysCtrlService) - ASUSTeK Computer Inc. - C:\Program Files (x86)\ASUS\AsSysCtrlService\1.00.13\AsSysCtrlService.exe
O23 - Service: AsusFanControlService - ASUSTeK Computer Inc. - C:\Program Files (x86)\ASUS\AsusFanControlService\1.01.14\AsusFanControlService.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)
O23 - Service: ESET Service (ekrn) - ESET - C:\Program Files\ESET\ESET Smart Security\x86\ekrn.exe
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)
O23 - Service: Intel(R) Integrated Clock Controller Service - Intel(R) ICCS (ICCS) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Integrated Clock Controller Service\ICCProxy.exe
O23 - Service: Intel(R) Capability Licensing Service Interface - Intel(R) Corporation - C:\Program Files\Intel\iCLS Client\HeciServer.exe
O23 - Service: Intel(R) PROSet Monitoring Service - Unknown owner - C:\Windows\system32\IProsetMonitor.exe (file missing)
O23 - Service: Intel(R) Dynamic Application Loader Host Interface Service (jhi_service) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Intel(R) Management and Security Application Local Management Service (LMS) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
O23 - Service: MBAMScheduler - Malwarebytes Corporation - C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe
O23 - Service: MBAMService - Malwarebytes Corporation - C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe
O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Mozilla Foundation - C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: NVIDIA Display Driver Service (nvsvc) - Unknown owner - C:\Windows\system32\nvvsvc.exe (file missing)
O23 - Service: NVIDIA Update Service Daemon (nvUpdatusService) - NVIDIA Corporation - C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
O23 - Service: PnkBstrA - Unknown owner - C:\Windows\system32\PnkBstrA.exe
O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)
O23 - Service: Steam Client Service - Valve Corporation - C:\Program Files (x86)\Common Files\Steam\SteamService.exe
O23 - Service: NVIDIA Stereoscopic 3D Driver Service (Stereo Service) - NVIDIA Corporation - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
O23 - Service: TunngleService - Tunngle.net GmbH - C:\Program Files (x86)\Tunngle\TnglCtrl.exe
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
O23 - Service: Intel(R) Management and Security Application User Notification Service (UNS) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\Wat\WatUX.exe,-601 (WatAdminSvc) - Unknown owner - C:\Windows\system32\Wat\WatAdminSvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)

--
End of file - 10002 bytes

[Joey61]

Log z aswMBR:

aswMBR version 0.9.9.1707 Copyright(c) 2011 AVAST Software
Run date: 2012-11-25 22:11:30
-----------------------------
22:11:30.852 OS Version: Windows x64 6.1.7601 Service Pack 1
22:11:30.852 Number of processors: 4 586 0x3A09
22:11:30.852 ComputerName: JOEY-TUF UserName: Joey
22:11:32.381 Initialize success
22:11:51.461 Disk 0 (boot) \Device\Harddisk0\DR0 -> \Device\Ide\IdeDeviceP4T0L0-4
22:11:51.461 Disk 0 Vendor: ST1500DM003-9YN16G CC82 Size: 1430799MB BusType: 11
22:11:51.477 Disk 0 MBR read successfully
22:11:51.477 Disk 0 MBR scan
22:11:51.477 Disk 0 Windows 7 default MBR code
22:11:51.477 Disk 0 Partition 1 80 (A) 07 HPFS/NTFS NTFS 100 MB offset 2048
22:11:51.493 Disk 0 Partition 2 00 07 HPFS/NTFS NTFS 1430697 MB offset 206848
22:11:51.508 Disk 0 scanning C:\Windows\system32\drivers
22:12:00.338 Service scanning
22:12:10.244 Modules scanning
22:12:10.244 Disk 0 trace - called modules:
22:12:10.244 ntoskrnl.exe CLASSPNP.SYS disk.sys ataport.SYS PCIIDEX.SYS hal.dll msahci.sys
22:12:10.244 1 nt!IofCallDriver -> \Device\Harddisk0\DR0[0xfffffa800775d060]
22:12:10.244 3 CLASSPNP.SYS[fffff880019bd43f] -> nt!IofCallDriver -> \Device\Ide\IdeDeviceP4T0L0-4[0xfffffa800753a680]
22:12:10.244 Scan finished successfully
22:12:16.702 Disk 0 MBR has been saved successfully to "C:\Users\Joey\Desktop\MBR.dat"
22:12:16.702 The log file has been saved successfully to "C:\Users\Joey\Desktop\aswMBR.txt"

[jaro3]

ComboFix se odinstaluje takto:
Start-Spustit a zadej ComboFix /Uninstall

Vyčisti systém CCleanerem

Stáhni si OTC

na plochu. Poklepej na něj. Potom klikni na Clean up!.
Restartuj PC , pokud Ti bude doporučeno.

Jak to vypadá nyní?

[Joey61]

čekal jsem že mi někdo napíše že už je to čistý nevím jestli se to z toho logu dá něak poznat, ale abych řekl pravdu, problém se kterým jsem sem přišel se už neukázal, plus mi přijde že systémy a pak plocha se všemi programy nabíhá rychleji, tak bych chtěl všem co mi pomáhali poděkovat, a ještě mám otázku, dá se tomuhle něak vyhnout? všem těm nežádoucím programům atd.. tak třeba Babylon Toolbar chápu, a podobné sajrajty neinstalovat, ale koukal jsem že sem mazal např. Java update, nebo něco ze skypu, to nepovažuju za škodlivý software, tak je něaká možnost se tomuhle vyhnout nebo se toto čištění musí po něaké době dělat znovu?

[memphisto]

Jednoduchá rada. Neinstalovat vše stylem Next -Next - Next a dívat se, co to nabízí a vyhneš se toolbarům, otravným updatům, apod.