Neznámý Hardware - přehřívání notebooku Vyřešeno

[Orcus]

Máš tam Win Vista, 7 a 8, tak co myslíš? Prostě ho normálně spusť poklikáním.

[Reklama]

[bbdra]

RogueKiller V11.0.12.0 [Feb 15 2016] (Free) by Adlice Software
mail : http://www.adlice.com/contact/
Feedback : http://forum.adlice.com
Webová stránka : http://www.adlice.com/software/roguekiller/
Blog : http://www.adlice.com

Operační systém : Windows XP (5.1.2600 Service Pack 3) 32 bits version
Spuštěno : Normální režim
Uživatel : Leo [Práva správce]
Started from : C:\Documents and Settings\Leo\Plocha\RogueKiller.exe
Mód : Smazat -- Datum : 02/18/2016 08:13:37

¤¤¤ Procesy : 1 ¤¤¤
[VT.SoftwareBundler:Win32/Tillail] SFAUpdater.exe(1308) -- C:\Program Files\Smart File Advisor\SFAUpdater.exe[7] -> Zastaveno [TermProc]

¤¤¤ Registry : 3 ¤¤¤
[PUP] HKEY_USERS\S-1-5-21-1715567821-1220945662-725345543-1003\SOFTWARE\Microsoft\Internet Explorer\Toolbar\ShellBrowser | {10921475-03CE-4E04-90CE-E2E7EF20C814} : -> Smazáno
[VT.SoftwareBundler:Win32/Tillail] HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run | Smart File Advisor : "C:\Program Files\Smart File Advisor\sfa.exe" /checkassoc [7][x] -> Smazáno
[VT.SoftwareBundler:Win32/Tillail] HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run | SFAUpdater : "C:\Program Files\Smart File Advisor\SFAUpdater.exe" [7] -> Smazáno

¤¤¤ Úlohy : 0 ¤¤¤

¤¤¤ Soubory : 1 ¤¤¤
[PUP][Složka] C:\Program Files\IObit\Advanced SystemCare -> Smazáno
[PUP][Složka] C:\Program Files\IObit\Advanced SystemCare\Update -> Smazáno

¤¤¤ Soubor HOSTS : 0 ¤¤¤

¤¤¤ Antirootkit : 0 (Driver: Nahrán) ¤¤¤

¤¤¤ Webové prohlížeče : 0 ¤¤¤

¤¤¤ Kontrola MBR : ¤¤¤
+++++ PhysicalDrive0: FUJITSU MHW2080BH PL +++++
--- User ---
[MBR] ba02ba575fe53f05ad3db99e034d5ee6
[BSP] 6ad472803822ed7a957453d153b4cb23 : Windows XP|VT.Unknown MBR Code
Partition table:
0 - [ACTIVE] NTFS (0x7) [VISIBLE] Offset (sectors): 63 | Size: 76308 MB [Windows XP Bootstrap | Windows XP Bootloader]
User = LL1 ... OK
User = LL2 ... OK

[bbdra]

Zoek.exe v5.0.0.1 Updated 31-December-2015
Tool run by Leo on źt 18.02.2016 at 8:17:09,32.
Systém Microsoft Windows XP Professional 5.1.2600 Service Pack 3 x86
Running in: Normal Mode Internet Access Detected
Launched: C:\Documents and Settings\Leo\Plocha\zoek.exe [Scan all users] [Script inserted]

==== System Restore Info ======================

18.2.2016 8:17:37 Zoek.exe System Restore Point Created Successfully.

==== Reset Hosts File ======================

# Copyright (c) 1993-2006 Microsoft Corp.
#
# This is a sample HOSTS file used by Microsoft TCP/IP for Windows.
#
# This file contains the mappings of IP addresses to host names. Each
# entry should be kept on an individual line. The IP address should
# be placed in the first column followed by the corresponding host name.
# The IP address and the host name should be separated by at least one
# space.
#
# Additionally, comments (such as these) may be inserted on individual
# lines or following the machine name denoted by a '#' symbol.
#
# For example:
#
# 102.54.94.97 rhino.acme.com # source server
# 38.25.63.10 x.acme.com # x client host

127.0.0.1 localhost

==== Empty Folders Check ======================

C:\Program Files\Alcohol Soft deleted successfully
C:\DOCUME~1\ALLUSE~1\DATAAP~1\Malwarebytes' Anti-Malware (portable) deleted successfully

==== Deleting CLSID Registry Keys ======================


==== Deleting CLSID Registry Values ======================


==== Deleting Services ======================

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\AxAutoMntSrv deleted successfully
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet003\Services\AxAutoMntSrv deleted successfully
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\StarWindServiceAE deleted successfully
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet003\Services\StarWindServiceAE deleted successfully

==== Deleting Files \ Folders ======================

C:\Program Files\Alcohol Soft not found
C:\DOCUME~1\ALLUSE~1\DATAAP~1\Malwarebytes' Anti-Malware (portable) not found
C:\Program Files\ComPlus Applications deleted
C:\Program Files\WindowsUpdate deleted
C:\Program Files\Smart File Advisor deleted
C:\kis16.0.0.614en_8202.exe deleted
C:\DOCUME~1\ALLUSE~1\DATAAP~1\ProductData deleted
C:\DOCUME~1\ALLUSE~1\DATAAP~1\Package Cache deleted
C:\DOCUME~1\ALLUSE~1\NABDKA~1\Programy\Smart File Advisor deleted
C:\WINDOWS\system32\GroupPolicy\ADM deleted
C:\WINDOWS\System32\SET100.tmp deleted
C:\WINDOWS\System32\SET101.tmp deleted
C:\WINDOWS\System32\SET103.tmp deleted
C:\WINDOWS\System32\SET104.tmp deleted
C:\WINDOWS\System32\SET105.tmp deleted
C:\WINDOWS\System32\SET106.tmp deleted
C:\WINDOWS\System32\SET108.tmp deleted
C:\WINDOWS\System32\SET10B.tmp deleted
C:\WINDOWS\System32\SET10C.tmp deleted
C:\WINDOWS\System32\SET10D.tmp deleted
C:\WINDOWS\System32\SET110.tmp deleted
C:\WINDOWS\System32\SET114.tmp deleted
C:\WINDOWS\System32\SET115.tmp deleted
C:\WINDOWS\System32\SET117.tmp deleted
C:\WINDOWS\System32\SET119.tmp deleted
C:\WINDOWS\System32\SET11A.tmp deleted
C:\WINDOWS\System32\SET11B.tmp deleted
C:\WINDOWS\System32\SET11C.tmp deleted
C:\WINDOWS\System32\SET11D.tmp deleted
C:\WINDOWS\System32\SET11E.tmp deleted
C:\WINDOWS\System32\SET11F.tmp deleted
C:\WINDOWS\System32\SET123.tmp deleted
C:\WINDOWS\System32\SET125.tmp deleted
C:\WINDOWS\System32\SET126.tmp deleted
C:\WINDOWS\System32\SET127.tmp deleted
C:\WINDOWS\System32\SET128.tmp deleted
C:\WINDOWS\System32\SET129.tmp deleted
C:\WINDOWS\System32\SET12A.tmp deleted
C:\WINDOWS\System32\SET12C.tmp deleted
C:\WINDOWS\System32\SET12D.tmp deleted
C:\WINDOWS\System32\SET12E.tmp deleted
C:\WINDOWS\System32\SET12F.tmp deleted
C:\WINDOWS\System32\SET131.tmp deleted
C:\WINDOWS\System32\SET132.tmp deleted
C:\WINDOWS\System32\SET133.tmp deleted
C:\WINDOWS\System32\SET134.tmp deleted
C:\WINDOWS\System32\SET136.tmp deleted
C:\WINDOWS\System32\SET18A.tmp deleted
C:\WINDOWS\System32\SET18B.tmp deleted
C:\WINDOWS\System32\SET18D.tmp deleted
C:\WINDOWS\System32\SET18E.tmp deleted
C:\WINDOWS\System32\SET18F.tmp deleted
C:\WINDOWS\System32\SET190.tmp deleted
C:\WINDOWS\System32\SET192.tmp deleted
C:\WINDOWS\System32\SET195.tmp deleted
C:\WINDOWS\System32\SET196.tmp deleted
C:\WINDOWS\System32\SET197.tmp deleted
C:\WINDOWS\System32\SET19A.tmp deleted
C:\WINDOWS\System32\SET19E.tmp deleted
C:\WINDOWS\System32\SET19F.tmp deleted
C:\WINDOWS\System32\SET1A1.tmp deleted
C:\WINDOWS\System32\SET1A3.tmp deleted
C:\WINDOWS\System32\SET1A4.tmp deleted
C:\WINDOWS\System32\SET1A5.tmp deleted
C:\WINDOWS\System32\SET1A6.tmp deleted
C:\WINDOWS\System32\SET1A7.tmp deleted
C:\WINDOWS\System32\SET1A8.tmp deleted
C:\WINDOWS\System32\SET1A9.tmp deleted
C:\WINDOWS\System32\SET1AD.tmp deleted
C:\WINDOWS\System32\SET1AF.tmp deleted
C:\WINDOWS\System32\SET1B0.tmp deleted
C:\WINDOWS\System32\SET1B1.tmp deleted
C:\WINDOWS\System32\SET1B2.tmp deleted
C:\WINDOWS\System32\SET1B3.tmp deleted
C:\WINDOWS\System32\SET1B4.tmp deleted
C:\WINDOWS\System32\SET1B6.tmp deleted
C:\WINDOWS\System32\SET1B7.tmp deleted
C:\WINDOWS\System32\SET1B8.tmp deleted
C:\WINDOWS\System32\SET1B9.tmp deleted
C:\WINDOWS\System32\SET1BB.tmp deleted
C:\WINDOWS\System32\SET1BC.tmp deleted
C:\WINDOWS\System32\SET1BD.tmp deleted
C:\WINDOWS\System32\SET1BE.tmp deleted
C:\WINDOWS\System32\SET1C0.tmp deleted
C:\WINDOWS\System32\SETB4.tmp deleted
C:\WINDOWS\System32\SETB5.tmp deleted
C:\WINDOWS\System32\SETB7.tmp deleted
C:\WINDOWS\System32\SETB8.tmp deleted
C:\WINDOWS\System32\SETB9.tmp deleted
C:\WINDOWS\System32\SETBA.tmp deleted
C:\WINDOWS\System32\SETBC.tmp deleted
C:\WINDOWS\System32\SETBF.tmp deleted
C:\WINDOWS\System32\SETC0.tmp deleted
C:\WINDOWS\System32\SETC1.tmp deleted
C:\WINDOWS\System32\SETC4.tmp deleted
C:\WINDOWS\System32\SETC8.tmp deleted
C:\WINDOWS\System32\SETC9.tmp deleted
C:\WINDOWS\System32\SETCB.tmp deleted
C:\WINDOWS\System32\SETCD.tmp deleted
C:\WINDOWS\System32\SETCE.tmp deleted
C:\WINDOWS\System32\SETCF.tmp deleted
C:\WINDOWS\System32\SETD0.tmp deleted
C:\WINDOWS\System32\SETD1.tmp deleted
C:\WINDOWS\System32\SETD2.tmp deleted
C:\WINDOWS\System32\SETD3.tmp deleted
C:\WINDOWS\System32\SETD7.tmp deleted
C:\WINDOWS\System32\SETD9.tmp deleted
C:\WINDOWS\System32\SETDA.tmp deleted
C:\WINDOWS\System32\SETDB.tmp deleted
C:\WINDOWS\System32\SETDC.tmp deleted
C:\WINDOWS\System32\SETDD.tmp deleted
C:\WINDOWS\System32\SETDE.tmp deleted
C:\WINDOWS\System32\SETE0.tmp deleted
C:\WINDOWS\System32\SETE1.tmp deleted
C:\WINDOWS\System32\SETE2.tmp deleted
C:\WINDOWS\System32\SETE3.tmp deleted
C:\WINDOWS\System32\SETE5.tmp deleted
C:\WINDOWS\System32\SETE6.tmp deleted
C:\WINDOWS\System32\SETE7.tmp deleted
C:\WINDOWS\System32\SETE8.tmp deleted
C:\WINDOWS\System32\SETEA.tmp deleted

==== Firefox Extensions Registry ======================

[HKEY_LOCAL_MACHINE\Software\Mozilla\Firefox\Extensions]
"{20a82645-c095-46ed-80e3-08825760534b}"="c:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension" [09.02.2016 16:24]

==== Chromium Look ======================

Google Chrome Version: 46.0.2490.86

HKEY_LOCAL_MACHINE\SOFTWARE\Google\Chrome\Extensions
eahebamiopdhefndnmappcihfajigkka - https://chrome.google.com/webstore/deta ... ihfajigkka[]

==== Set IE to Default ======================

Old Values:
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchUrl]

New Values:
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
"Start Page"="http://go.microsoft.com/fwlink/?LinkId=69157"
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchUrl]
"(Default)"="http://search.msn.com/results.asp?q=%s"

==== All HKLM and HKCU SearchScopes ======================

HKCU\SearchScopes "DefaultScope"="{0633EE93-D776-472f-A0FF-E1416B8B2E3A}"
HKCU\SearchScopes\{012E1000-F331-11DB-8314-0800200C9A66} - http://www.google.com/search?q={searchTerms}
HKCU\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A} - http://www.bing.com/search?q={searchTerms}&src=IE-SearchBox&FORM=IE8SRC

==== Reset Google Chrome ======================

Nothing found to reset

==== Empty IE Cache ======================

C:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5 emptied successfully
C:\Documents and Settings\Leo\Local Settings\Temporary Internet Files\Content.IE5\index.dat will be deleted at reboot
C:\Documents and Settings\LocalService\Local Settings\Temporary Internet Files\Content.IE5\index.dat will be deleted at reboot

==== Empty FireFox Cache ======================

No FireFox Profiles found

==== Empty Chrome Cache ======================

No Chrome User Data found

==== Empty All Flash Cache ======================

No Flash Cache Found

==== Empty All Java Cache ======================

No Java Cache Found

==== C:\zoek_backup content ======================

C:\zoek_backup (files=140 folders=16 63485427 bytes)

==== Empty Temp Folders ======================

C:\WINDOWS\Temp will be emptied at reboot

==== After Reboot ======================

==== Empty Temp Folders ======================

C:\WINDOWS\Temp successfully emptied
C:\DOCUME~1\Leo\LOCALS~1\Temp successfully emptied

==== Empty Recycle Bin ======================

C:\RECYCLER successfully emptied

==== Deleting Files / Folders ======================

"C:\Documents and Settings\Leo\Local Settings\Temporary Internet Files\Content.IE5\index.dat" not deleted
"C:\Documents and Settings\LocalService\Local Settings\Temporary Internet Files\Content.IE5\index.dat" not found

==== EOF on źt 18.02.2016 at 8:27:48,78 ======================

[bbdra]

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 8:35:03, on 18.2.2016
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP3 (6.00.2900.5512)


Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Analog Devices\Core\smax4pnp.exe
C:\WINDOWS\system32\igfxtray.exe
C:\WINDOWS\system32\hkcmd.exe
C:\WINDOWS\system32\igfxpers.exe
C:\WINDOWS\system32\ctfmon.exe
C:\WINDOWS\system32\igfxsrvc.exe
C:\WINDOWS\system32\agrsmsvc.exe
C:\Program Files\Comodo\Chromodo\chromodo_updater.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\SearchIndexer.exe
C:\WINDOWS\system32\wuauclt.exe
C:\WINDOWS\system32\wscntfy.exe
C:\Documents and Settings\Leo\Plocha\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Odkazy
O2 - BHO: ScriptInjectionPluginBrowserHelperObject - {C66D064F-82FE-4E1A-B06A-B2490BA48B18} - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 16.0.0\IEExt\ie_plugin.dll
O3 - Toolbar: Kaspersky Protection toolbar - {3507FA00-ADA2-4A02-99B9-51AD26CA9120} - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 16.0.0\IEExt\ie_plugin.dll
O4 - HKLM\..\Run: [SoundMAXPnP] C:\Program Files\Analog Devices\Core\smax4pnp.exe
O4 - HKLM\..\Run: [SoundMAX] C:\Program Files\Analog Devices\SoundMAX\Smax4.exe /tray
O4 - HKLM\..\Run: [IgfxTray] C:\WINDOWS\system32\igfxtray.exe
O4 - HKLM\..\Run: [HotKeysCmds] C:\WINDOWS\system32\hkcmd.exe
O4 - HKLM\..\Run: [Persistence] C:\WINDOWS\system32\igfxpers.exe
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [CCleaner Monitoring] "C:\Program Files\CCleaner\CCleaner.exe" /MONITOR
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O9 - Extra button: PokerStars.eu - {07BA1DA9-F501-4796-8728-74D1B91A6CD5} - C:\Program Files\PokerStars.EU\PokerStarsUpdate.exe
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O22 - SharedTaskScheduler: Browseui preloader - {438755C2-A8BA-11D1-B96B-00A0C90312E1} - C:\WINDOWS\system32\browseui.dll
O22 - SharedTaskScheduler: Proces mezipaměti kategorií součástí - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\WINDOWS\system32\browseui.dll
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\WINDOWS\system32\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: Agere Modem Call Progress Audio (AgereModemAudio) - Agere Systems - C:\WINDOWS\system32\agrsmsvc.exe
O23 - Service: Kaspersky Anti-Virus Service 16.0.0 (AVP16.0.0) - Kaspersky Lab ZAO - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 16.0.0\avp.exe
O23 - Service: COMODO Chromodo Update Service (ChromodoUpdater) - Comodo - C:\Program Files\Comodo\Chromodo\chromodo_updater.exe
O23 - Service: Služba Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: Služba Google Update (gupdatem) (gupdatem) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: LiveUpdate (LiveUpdateSvc) - IObit - C:\Program Files\IObit\LiveUpdate\LiveUpdate.exe
O23 - Service: MBAMService - Malwarebytes - C:\Program Files\Malwarebytes Anti-Malware\mbamservice.exe
O23 - Service: Skype Updater (SkypeUpdate) - Skype Technologies - C:\Program Files\Skype\Updater\Updater.exe

--
End of file - 4573 bytes

[bbdra]

MBAM se bohužel při startu win nezapne(píše to chybu viz. příloha)

Nevím čím to je, ale asi cca před měsícem jsem nastavil 32+ místné heslo pro wifi síť a také jsem zabezpečil router, protože jsem měl podezření na evil twin, nebo nějaký hackerský prográmek. Originální heslo mělo 12 znaků, ale po nějaké době se mi na notebooku změnilo wifi heslo na 8-mi místné a snížila se rychlost. Stáhnul jsem tedy AV, zabezpečil Wifi router a změnil heslo. Rychlost připojení notebooku se zpravila, ale heslo se stále mění na 8-mi místné a AV hlásí že není síť dostatečně zabezpečená a v současné chvíli tam mám dva nevyřešené problémy(viz.příloha)

Smart file advisor nadobro zmizel

[jaro3]

Vypni rez. ochranu u antiviru a antispywaru,příp. firewall..

Stáhni si ComboFix (by sUBs)
a ulož si ho na plochu.
Ukonči všechna aktivní okna a spusť ho.
- Po spuštění se zobrazí podmínky užití, potvrď je stiskem tlačítka Ano
- Dále postupuj dle pokynů, během aplikování ComboFixu neklikej do zobrazujícího se okna
- Po dokončení skenování by měl program vytvořit log - C:\ComboFix.txt - zkopíruj sem prosím celý jeho obsah
Pokud budou problémy , spusť ho v nouz. režimu.

Upozornění : Může se stát, že po aplikaci Combofixu a restartu počítače, Windows nenaběhnou , nebo nenajede plocha , budou problémy s připojením, pak znovu restartuj počítač, pokud to nepomůže , po restartu mačkej klávesu F8 a pak zvol poslední známou funkční konfiguraci. , či použij bod obnovy.

[bbdra]

OK, jdu na to.

Btw dnes jsem instaloval ovladače a jako obvykle mi to psalo upozornění.

[bbdra]

ComboFix 16-02-19.01 - Leo 19.02.2016 14:35:25.1.2 - x86
Systém Microsoft Windows XP Professional 5.1.2600.3.1250.420.1029.18.1015.534 [GMT 1:00]
Spuštěný z: c:\documents and settings\Leo\Plocha\ComboFix.exe
AV: Kaspersky Internet Security *Disabled/Updated* {2C4D4BC6-0793-4956-A9F9-E252435469C0}
FW: Kaspersky Internet Security *Disabled* {2C4D4BC6-0793-4956-A9F9-E252435469C0}
.
VAROVÁNÍ - NA TOMTO POČÍTAČI NENÍ NAINSTALOVÁNA KONZOLA PRO ZOTAVENÍ !!
.
.
((((((((((((((((((((((((((((((((((((((( Ostatní výmazy )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
c:\program files\Internet Explorer\SET154.tmp
c:\program files\Internet Explorer\SET159.tmp
c:\program files\Internet Explorer\SET16F.tmp
c:\program files\Internet Explorer\SET174.tmp
c:\program files\Internet Explorer\SET186.tmp
c:\program files\Internet Explorer\SET18B.tmp
c:\program files\Internet Explorer\SET18D.tmp
c:\program files\Internet Explorer\SET192.tmp
c:\program files\Internet Explorer\SET1AD.tmp
c:\program files\Internet Explorer\SET1B2.tmp
c:\program files\Internet Explorer\SET1BD.tmp
c:\program files\Internet Explorer\SET1C2.tmp
c:\program files\Internet Explorer\SET232.tmp
c:\program files\Internet Explorer\SET237.tmp
c:\program files\Internet Explorer\SET2F5.tmp
c:\program files\Internet Explorer\SET2FA.tmp
c:\program files\Internet Explorer\SET3A1.tmp
c:\program files\Internet Explorer\SET3A6.tmp
c:\program files\Internet Explorer\SET41A.tmp
c:\program files\Internet Explorer\SET41F.tmp
c:\program files\Internet Explorer\SET54.tmp
c:\program files\Internet Explorer\SET59.tmp
c:\program files\Internet Explorer\SET60.tmp
c:\program files\Internet Explorer\SET65.tmp
c:\program files\Internet Explorer\SET76.tmp
c:\program files\Internet Explorer\SET7B.tmp
c:\program files\Internet Explorer\SET81.tmp
c:\program files\Internet Explorer\SET86.tmp
c:\program files\Internet Explorer\SET8D.tmp
c:\program files\Internet Explorer\SET92.tmp
c:\program files\Internet Explorer\SET96.tmp
c:\program files\Internet Explorer\SET9B.tmp
c:\program files\Internet Explorer\SET9C.tmp
c:\program files\Internet Explorer\SETA1.tmp
c:\program files\Internet Explorer\SETA3.tmp
c:\program files\Internet Explorer\SETA8.tmp
c:\program files\Internet Explorer\SETC1.tmp
c:\program files\Internet Explorer\SETC6.tmp
c:\program files\Internet Explorer\SETC9.tmp
c:\program files\Internet Explorer\SETCD.tmp
c:\program files\Internet Explorer\SETCE.tmp
c:\program files\Internet Explorer\SETD3.tmp
c:\program files\Internet Explorer\SETE1.tmp
c:\program files\Internet Explorer\SETE4.tmp
c:\program files\Internet Explorer\SETE6.tmp
c:\program files\Internet Explorer\SETEA.tmp
c:\windows\system32\SET1A8.tmp
c:\windows\system32\SET1A9.tmp
c:\windows\system32\SET1AB.tmp
c:\windows\system32\SET1AC.tmp
c:\windows\system32\SET1AD.tmp
c:\windows\system32\SET1AE.tmp
c:\windows\system32\SET1B0.tmp
c:\windows\system32\SET1B3.tmp
c:\windows\system32\SET1B4.tmp
c:\windows\system32\SET1B5.tmp
c:\windows\system32\SET1B8.tmp
c:\windows\system32\SET1BC.tmp
c:\windows\system32\SET1BD.tmp
c:\windows\system32\SET1BF.tmp
c:\windows\system32\SET1C2.tmp
c:\windows\system32\SET1C3.tmp
c:\windows\system32\SET1C4.tmp
c:\windows\system32\SET1C5.tmp
c:\windows\system32\SET1C6.tmp
c:\windows\system32\SET1C7.tmp
c:\windows\system32\SET1CB.tmp
c:\windows\system32\SET1CD.tmp
c:\windows\system32\SET1CE.tmp
c:\windows\system32\SET1CF.tmp
c:\windows\system32\SET1D0.tmp
c:\windows\system32\SET1D1.tmp
c:\windows\system32\SET1D2.tmp
c:\windows\system32\SET1D4.tmp
c:\windows\system32\SET1D5.tmp
c:\windows\system32\SET1D6.tmp
c:\windows\system32\SET1D7.tmp
c:\windows\system32\SET1D9.tmp
c:\windows\system32\SET1DA.tmp
c:\windows\system32\SET1DB.tmp
c:\windows\system32\SET1DC.tmp
c:\windows\system32\SET1DE.tmp
c:\windows\system32\WifiSecuritzGuard.exe
.
.
((((((((((((((((((((((((( Soubory vytvořené od 2016-01-19 do 2016-02-19 )))))))))))))))))))))))))))))))
.
.
2016-02-19 12:35 . 2010-09-13 12:06 3563776 ----a-w- c:\windows\system32\drivers\snp2uvc.sys
2016-02-19 12:35 . 2009-02-16 17:32 196608 ----a-w- c:\windows\system32\csnp2uvc.dll
2016-02-19 12:35 . 2008-12-29 16:13 28544 ----a-w- c:\windows\system32\drivers\sncduvc.sys
2016-02-19 12:35 . 2010-08-06 14:48 306688 ----a-w- c:\windows\system32\vsnp2uvc.dll
2016-02-19 12:35 . 2009-08-12 14:06 662016 ----a-w- c:\windows\vsnp2uvc.exe
2016-02-19 12:35 . 2009-08-13 19:33 239616 ----a-w- c:\windows\system32\rsnp2uvc.dll
2016-02-19 12:35 . 2016-02-19 12:35 -------- d-----w- c:\program files\Common Files\SNP2UVC
2016-02-19 12:34 . 2016-02-19 12:34 -------- d-----w- c:\documents and settings\Leo\Data aplikací\InstallShield
2016-02-19 10:48 . 2013-09-23 07:39 81920 ----a-w- c:\windows\system32\ieencode.dll
2016-02-19 10:48 . 2013-09-23 07:39 81920 ----a-w- c:\windows\system32\dllcache\ieencode.dll
2016-02-18 07:26 . 2016-02-18 07:17 24064 ----a-w- c:\windows\zoek-delete.exe
2016-02-18 07:17 . 2016-02-18 07:24 -------- d-----w- C:\zoek_backup
2016-02-17 18:57 . 2008-04-13 23:09 5504 -c--a-w- c:\windows\system32\dllcache\mstee.sys
2016-02-17 18:57 . 2008-04-13 23:09 5504 ----a-w- c:\windows\system32\drivers\MSTEE.sys
2016-02-17 18:57 . 2008-04-13 23:16 10880 -c--a-w- c:\windows\system32\dllcache\ndisip.sys
2016-02-17 18:57 . 2008-04-13 23:16 10880 ----a-w- c:\windows\system32\drivers\NdisIP.sys
2016-02-17 18:57 . 2008-04-13 23:16 15232 -c--a-w- c:\windows\system32\dllcache\streamip.sys
2016-02-17 18:57 . 2008-04-13 23:16 15232 ----a-w- c:\windows\system32\drivers\StreamIP.sys
2016-02-17 18:57 . 2008-04-14 07:52 16384 ----a-w- c:\windows\system32\ipsink.ax
2016-02-17 18:57 . 2008-04-13 23:16 11136 -c--a-w- c:\windows\system32\dllcache\slip.sys
2016-02-17 18:57 . 2008-04-13 23:16 11136 ----a-w- c:\windows\system32\drivers\SLIP.sys
2016-02-17 18:57 . 2008-04-13 23:16 19200 -c--a-w- c:\windows\system32\dllcache\wstcodec.sys
2016-02-17 18:57 . 2008-04-13 23:16 19200 ----a-w- c:\windows\system32\drivers\WSTCODEC.SYS
2016-02-17 18:56 . 2008-04-13 23:16 85248 -c--a-w- c:\windows\system32\dllcache\nabtsfec.sys
2016-02-17 18:56 . 2008-04-13 23:16 85248 ----a-w- c:\windows\system32\drivers\NABTSFEC.sys
2016-02-17 18:56 . 2008-04-13 23:16 17024 -c--a-w- c:\windows\system32\dllcache\ccdecode.sys
2016-02-17 18:56 . 2008-04-13 23:16 17024 ----a-w- c:\windows\system32\drivers\CCDECODE.sys
2016-02-17 18:56 . 2008-04-14 07:52 91648 ----a-w- c:\windows\system32\kswdmcap.ax
2016-02-17 18:56 . 2008-04-14 07:52 61952 ----a-w- c:\windows\system32\kstvtune.ax
2016-02-17 18:56 . 2008-04-14 07:52 43008 ----a-w- c:\windows\system32\ksxbar.ax
2016-02-17 18:56 . 2008-04-14 07:52 20992 ----a-w- c:\windows\system32\dshowext.ax
2016-02-17 18:56 . 2008-04-14 07:52 54272 -c--a-w- c:\windows\system32\dllcache\vfwwdm32.dll
2016-02-17 18:56 . 2008-04-14 07:52 54272 ----a-w- c:\windows\system32\vfwwdm32.dll
2016-02-16 14:44 . 2016-02-16 14:44 -------- d-----w- c:\program files\Malwarebytes Anti-Malware
2016-02-15 23:19 . 2016-02-15 23:19 -------- d-----w- C:\TDSSKiller_Quarantine
2016-02-15 17:57 . 2016-02-19 10:49 -------- dc-h--w- c:\windows\ie8
2016-02-15 17:14 . 2016-02-15 17:14 -------- d-----w- c:\windows\system32\x64
2016-02-15 17:14 . 2008-02-15 20:21 920088 ----a-w- c:\windows\system32\igxpun.exe
2016-02-15 17:13 . 2006-11-10 15:25 319456 ----a-w- c:\windows\system32\difxapi.dll
2016-02-15 13:22 . 2016-02-19 13:13 -------- d-----w- c:\program files\PoselSmrti
2016-02-15 13:14 . 2016-02-15 13:14 320120 ----a-w- c:\windows\system32\drivers\sptd.sys
2016-02-15 13:08 . 2016-02-15 13:12 40504 ----a-w- c:\windows\system32\drivers\dtliteusbbus.sys
2016-02-15 12:57 . 2016-02-15 12:57 -------- d-----w- c:\documents and settings\Leo\Local Settings\Data aplikací\Disc_Soft_Ltd
2016-02-12 16:47 . 2006-06-29 12:07 14048 ------w- c:\windows\system32\spmsg2.dll
2016-02-12 16:42 . 2016-02-12 16:42 -------- d-----w- c:\windows\system32\winrm
2016-02-12 16:42 . 2016-02-12 16:42 -------- dc-h--w- c:\windows\$968930Uinstall_KB968930$
2016-02-10 15:40 . 2016-02-10 15:40 -------- d-----r- c:\documents and settings\NetworkService\Oblíbené položky
2016-02-09 15:24 . 2016-02-09 17:03 -------- d-----w- c:\documents and settings\Leo\Local Settings\Data aplikací\ApplicationHistory
2016-02-09 14:06 . 2016-02-12 16:47 -------- d-----w- c:\windows\system32\XPSViewer
2016-02-09 14:05 . 2016-02-09 14:05 -------- d-----w- c:\program files\MSBuild
2016-02-09 14:05 . 2016-02-09 14:05 -------- d-----w- c:\program files\Reference Assemblies
2016-02-09 14:05 . 2008-07-06 12:06 89088 ----a-w- c:\windows\system32\Spool\prtprocs\w32x86\filterpipelineprintproc.dll
2016-02-09 14:04 . 2016-02-09 14:05 -------- d-----w- C:\04aff36bf2c4603848d3965e3b
2016-02-09 14:04 . 2008-07-06 12:06 89088 -c----w- c:\windows\system32\dllcache\filterpipelineprintproc.dll
2016-02-09 14:04 . 2008-07-06 12:06 575488 -c----w- c:\windows\system32\dllcache\xpsshhdr.dll
2016-02-09 14:04 . 2008-07-06 12:06 575488 ------w- c:\windows\system32\xpsshhdr.dll
2016-02-09 14:04 . 2008-07-06 12:06 1676288 -c----w- c:\windows\system32\dllcache\xpssvcs.dll
2016-02-09 14:04 . 2008-07-06 12:06 1676288 ------w- c:\windows\system32\xpssvcs.dll
2016-02-09 14:04 . 2008-07-06 12:06 117760 ------w- c:\windows\system32\prntvpt.dll
2016-02-09 14:04 . 2008-07-06 10:50 597504 -c----w- c:\windows\system32\dllcache\printfilterpipelinesvc.exe
2016-02-09 14:04 . 2008-07-06 10:50 597504 ------w- c:\windows\system32\Spool\prtprocs\w32x86\printfilterpipelinesvc.exe
2016-02-09 13:36 . 2016-02-09 13:36 -------- d-----w- c:\documents and settings\Leo\Local Settings\Data aplikací\Identities
2016-02-09 13:36 . 2016-02-09 13:36 -------- d-----w- c:\documents and settings\Leo\Data aplikací\Windows Desktop Search
2016-02-09 13:35 . 2016-02-18 07:24 -------- d-----w- c:\windows\system32\GroupPolicy
2016-02-09 13:35 . 2016-02-09 16:02 -------- d-----w- c:\program files\Windows Desktop Search
2016-02-09 13:34 . 2008-03-07 17:02 98304 -c----w- c:\windows\system32\dllcache\nlhtml.dll
2016-02-09 13:34 . 2008-03-07 17:02 29696 -c----w- c:\windows\system32\dllcache\mimefilt.dll
2016-02-09 13:34 . 2008-03-07 17:02 192000 -c----w- c:\windows\system32\dllcache\offfilt.dll
2016-02-09 13:34 . 2016-02-09 13:34 -------- d-----w- c:\program files\Windows Media Connect 2
2016-02-09 13:32 . 2016-02-09 13:32 -------- d-----w- c:\windows\system32\drivers\UMDF
2016-02-09 13:32 . 2016-02-09 13:32 -------- d-----w- c:\windows\system32\LogFiles
2016-02-09 13:30 . 2016-02-09 13:30 -------- d-----w- c:\windows\system32\URTTEMP
2016-02-04 02:35 . 2016-02-04 02:35 -------- d-----w- c:\program files\Comodo
2016-02-03 14:25 . 1999-12-17 05:13 49664 ----a-w- c:\windows\unvise32.exe
2016-02-03 14:25 . 2016-02-03 14:25 -------- d-----w- c:\program files\DeviceLock Plug and Play Auditor
2016-02-03 13:53 . 2016-02-03 13:53 -------- d-----w- C:\CCE_Quarantine
2016-02-01 21:36 . 2016-02-01 21:36 -------- d-sh--w- c:\documents and settings\Leo\PrivacIE
2016-01-27 13:33 . 2016-01-27 13:33 -------- d-----w- c:\program files\SecurityXploded
2016-01-26 23:29 . 2016-01-26 23:29 -------- d-----w- c:\program files\FileASSASSIN
2016-01-26 20:54 . 2016-01-26 21:31 11264 ----a-w- c:\windows\system32\drivers\uzi3ndu1.sys
2016-01-22 23:12 . 2016-02-19 12:40 -------- d-----w- c:\documents and settings\All Users\Data aplikací\Kaspersky Lab
2016-01-22 23:12 . 2016-01-22 23:12 -------- d-----w- c:\program files\Kaspersky Lab
2016-01-22 23:12 . 2016-01-22 23:19 150408 ----a-w- c:\windows\system32\drivers\klflt.sys
2016-01-22 23:12 . 2016-01-22 23:19 44216 ----a-w- c:\windows\system32\drivers\klhk.sys
2016-01-22 22:42 . 2016-01-22 22:42 -------- d-----w- c:\documents and settings\All Users\Kaspersky Lab Setup Files
2016-01-22 22:39 . 2016-01-22 22:39 -------- d-----w- C:\KVRT_Data
2016-01-22 21:48 . 2015-10-05 08:50 23256 ----a-w- c:\windows\system32\drivers\mbam.sys
2016-01-22 21:01 . 2015-10-05 08:50 121560 ----a-w- c:\windows\system32\drivers\mbamchameleon.sys
2016-01-22 20:56 . 2016-01-22 21:03 170200 ----a-w- c:\windows\system32\drivers\mbamswissarmy.sys
2016-01-22 20:54 . 2016-01-22 20:55 -------- d-----w- c:\program files\CCleaner
2016-01-22 19:22 . 2016-01-22 19:22 -------- d-----w- c:\documents and settings\Administrator\Local Settings\Data aplikací\Google
2016-01-22 18:30 . 2016-01-22 18:30 -------- d-----w- c:\documents and settings\Administrator\Local Settings\Data aplikací\GHISLER
2016-01-22 18:30 . 2016-01-22 18:30 -------- d-----w- c:\documents and settings\Administrator\Data aplikací\GHISLER
2016-01-22 18:00 . 2016-02-15 23:17 -------- d-----w- c:\program files\Exterminate It!
2016-01-22 17:51 . 2016-01-22 17:52 -------- d-----w- c:\documents and settings\Leo\Data aplikací\ProductData
.
.
.
(((((((((((((((((((((((((((((((((((((((( Find3M výpis ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2016-02-18 07:03 . 2015-10-28 22:33 24688 ----a-w- c:\windows\system32\drivers\TrueSight.sys
2016-02-15 13:12 . 2015-10-23 17:52 26168 ----a-w- c:\windows\system32\drivers\dtlitescsibus.sys
2016-02-10 19:08 . 2015-10-16 00:18 796864 ----a-w- c:\windows\system32\FlashPlayerApp.exe
2016-02-10 19:08 . 2015-10-16 00:18 142528 ----a-w- c:\windows\system32\FlashPlayerCPLApp.cpl
2016-01-26 23:23 . 2015-10-15 23:57 23840 ----a-w- c:\windows\system32\drivers\HWiNFO32.SYS
2016-01-22 23:19 . 2015-06-08 18:43 39304 ----a-w- c:\windows\system32\drivers\klpd.sys
.
.
(((((((((((((((((((((((((((((((((( Spouštěcí body v registru )))))))))))))))))))))))))))))))))))))))))))))
.
.
*Poznámka* prázdné záznamy a legitimní výchozí údaje nejsou zobrazeny.
REGEDIT4
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"CCleaner Monitoring"="c:\program files\CCleaner\CCleaner.exe" [2015-12-08 6602152]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"SoundMAXPnP"="c:\program files\Analog Devices\Core\smax4pnp.exe" [2007-01-05 872448]
"IgfxTray"="c:\windows\system32\igfxtray.exe" [2008-02-15 135168]
"HotKeysCmds"="c:\windows\system32\hkcmd.exe" [2008-02-15 159744]
"Persistence"="c:\windows\system32\igfxpers.exe" [2008-02-15 131072]
"snp2uvc"="c:\windows\vsnp2uvc.exe" [2009-08-12 662016]
"tsnp2uvc"="c:\program files\Common Files\SNP2UVC\tsnp2uvc.exe" [2010-09-20 321024]
.
[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="c:\windows\system32\CTFMON.EXE" [2008-04-14 15360]
.
[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\policies\explorer]
"NoSimpleNetIDList"= 1 (0x1)
.
[hkey_local_machine\software\microsoft\windows\currentversion\explorer\ShellExecuteHooks]
"{56F9679E-7826-4C84-81F3-532071A8BCC5}"= "c:\program files\Windows Desktop Search\MSNLNamespaceMgr.dll" [2009-05-24 304128]
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Wdf01000.sys]
@="Driver"
.
[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\KasperskyAntiVirus]
"DisableMonitoring"=dword:00000001
.
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\system32\\sessmgr.exe"=
"%windir%\\Network Diagnostic\\xpnetdiag.exe"=
"c:\\Program Files\\Google\\Chrome\\Application\\chrome.exe"=
"c:\\Program Files\\Skype\\Phone\\Skype.exe"=
.
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\GloballyOpenPorts\List]
"5985:TCP"= 5985:TCP:*:Disabled:Vzdálená správa systému Windows
.
R0 cm_km;Kaspersky Lab ZAO Cryptographic Module x86 (Weak);c:\windows\system32\drivers\cm_km.sys [6.7.2015 0:10 201912]
R0 klbackupdisk;Kaspersky Lab klbackupdisk;c:\windows\system32\drivers\klbackupdisk.sys [6.6.2015 8:50 46776]
R0 sptd;sptd;\SystemRoot\\SystemRoot\System32\Drivers\sptd.sys --> \SystemRoot\\SystemRoot\System32\Drivers\sptd.sys [?]
R1 HWiNFO32;HWiNFO32/64 Kernel Driver;c:\windows\system32\drivers\HWiNFO32.SYS [16.10.2015 0:57 23840]
R1 klbackupflt;Kaspersky Lab klbackupflt;c:\windows\system32\drivers\klbackupflt.sys [27.6.2015 0:00 57712]
R1 klhk;Kaspersky Lab service driver;c:\windows\system32\drivers\klhk.sys [23.1.2016 0:12 44216]
R1 klpd;Kaspersky Lab format recognizer driver;c:\windows\system32\drivers\klpd.sys [8.6.2015 19:43 39304]
R1 kltdf;kltdf;c:\windows\system32\drivers\kltdf.sys [10.6.2015 18:16 73912]
R1 kltdi;kltdi;c:\windows\system32\drivers\kltdi.sys [11.6.2015 15:52 54328]
R1 kneps;kneps;c:\windows\system32\drivers\kneps.sys [23.6.2015 18:30 156856]
R1 uzi3ndu1;AVZ-RK Kernel Driver;c:\windows\system32\drivers\uzi3ndu1.sys [26.1.2016 21:54 11264]
R2 ChromodoUpdater;COMODO Chromodo Update Service;c:\program files\Comodo\Chromodo\chromodo_updater.exe [3.2.2016 18:10 2062384]
R2 kldisk;kldisk;c:\windows\system32\drivers\kldisk.sys [6.6.2015 8:48 58040]
R3 ATSwpWDF;AuthenTec TruePrint USB Driver;c:\windows\system32\drivers\ATSwpWDF.sys [16.10.2015 1:01 677960]
R3 GTIPCI21;GTIPCI21;c:\windows\system32\drivers\gtipci21.sys [16.10.2015 1:17 97280]
R3 klflt;Kaspersky Lab Kernel DLL;c:\windows\system32\drivers\klflt.sys [23.1.2016 0:12 150408]
R3 klim5;Kaspersky Anti-Virus NDIS Filter;c:\windows\system32\drivers\klim5.sys [19.4.2013 10:44 36448]
R3 klkbdflt;Kaspersky Lab KLKBDFLT;c:\windows\system32\drivers\klkbdflt.sys [4.6.2015 16:38 36024]
R3 klmouflt;Kaspersky Lab KLMOUFLT;c:\windows\system32\drivers\klmouflt.sys [7.6.2015 1:44 37040]
R3 MBAMProtector;MBAMProtector;c:\windows\system32\drivers\mbam.sys [22.1.2016 22:48 23256]
S2 AVP16.0.0;Kaspersky Anti-Virus Service 16.0.0;c:\program files\Kaspersky Lab\Kaspersky Internet Security 16.0.0\avp.exe [9.7.2015 0:02 194000]
S2 LiveUpdateSvc;LiveUpdate;c:\program files\IObit\LiveUpdate\LiveUpdate.exe [16.10.2015 4:00 2934048]
S2 MBAMService;MBAMService;c:\program files\Malwarebytes Anti-Malware\mbamservice.exe [16.2.2016 15:44 1135416]
S2 SkypeUpdate;Skype Updater;c:\program files\Skype\Updater\Updater.exe [9.7.2015 12:14 327296]
S3 cpuz138;cpuz138;\??\c:\docume~1\Leo\LOCALS~1\Temp\cpuz138\cpuz138_x32.sys --> c:\docume~1\Leo\LOCALS~1\Temp\cpuz138\cpuz138_x32.sys [?]
S3 dtlitescsibus;DAEMON Tools Lite Virtual SCSI Bus;c:\windows\system32\drivers\dtlitescsibus.sys [23.10.2015 18:52 26168]
S3 dtliteusbbus;DAEMON Tools Lite Virtual USB Bus;c:\windows\system32\drivers\dtliteusbbus.sys [15.2.2016 14:08 40504]
.
[HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{8A69D345-D564-463c-AFF1-A69D9E530F96}]
2016-02-11 18:08 1090376 ----a-w- c:\program files\Google\Chrome\Application\48.0.2564.109\Installer\chrmstp.exe
.
Obsah adresáře 'Naplánované úlohy'
.
2016-02-19 c:\windows\Tasks\Adobe Flash Player Updater.job
- c:\windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2015-10-16 19:08]
.
2016-02-19 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
- c:\program files\Google\Update\GoogleUpdate.exe [2015-11-05 20:49]
.
2016-02-19 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
- c:\program files\Google\Update\GoogleUpdate.exe [2015-11-05 20:49]
.
2015-11-08 c:\windows\Tasks\Měsíční oznamování konce poskytování služeb pro Microsoft Windows XP.job
- c:\windows\system32\xp_eos.exe [2015-10-16 23:28]
.
2016-02-19 c:\windows\Tasks\Přihlášení k oznamování konce poskytování služeb pro Microsoft Windows XP.job
- c:\windows\system32\xp_eos.exe [2015-10-16 23:28]
.
.
------- Doplňkový sken -------
.
uInternet Connection Wizard,ShellNext = iexplore
IE: {{07BA1DA9-F501-4796-8728-74D1B91A6CD5} - c:\program files\PokerStars.EU\PokerStarsUpdate.exe
TCP: DhcpNameServer = 192.168.0.1
.
- - - - NEPLATNÉ POLOŽKY ODSTRANĚNÉ Z REGISTRU - - - -
.
SafeBoot-37229670.sys
SafeBoot-97001628.sys
SafeBoot-mbamchameleon
AddRemove-Driver Booster_is1 - c:\program files\IObit\Driver Booster\unins000.exe
AddRemove-{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f} - c:\documents and settings\All Users\Data aplikací\Package Cache\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\vcredist_x86.exe
.
.
.
**************************************************************************
.
catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2016-02-19 14:40
Windows 5.1.2600 Service Pack 3 NTFS
.
skenování skrytých procesů ...
.
skenování skrytých položek 'Po spuštění' ...
.
skenování skrytých souborů ...
.
sken byl úspešně dokončen
skryté soubory: 0
.
**************************************************************************
.
--------------------- ZAMKNUTÉ KLÍČE V REGISTRU ---------------------
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{B019E3BF-E7E5-453C-A2E4-D2C18CA0866F}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\WINDOWS\\system32\\Macromed\\Flash\\FlashUtil32_20_0_0_306_ActiveX.exe,-101"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{B019E3BF-E7E5-453C-A2E4-D2C18CA0866F}\Elevation]
"Enabled"=dword:00000001
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{B019E3BF-E7E5-453C-A2E4-D2C18CA0866F}\LocalServer32]
@="c:\\WINDOWS\\system32\\Macromed\\Flash\\FlashUtil32_20_0_0_306_ActiveX.exe"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{B019E3BF-E7E5-453C-A2E4-D2C18CA0866F}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
.
[HKEY_LOCAL_MACHINE\software\Classes\Interface\{299817DA-1FAC-4CE2-8F48-A108237013BD}]
@Denied: (A 2) (Everyone)
@="IFlashBroker6"
.
[HKEY_LOCAL_MACHINE\software\Classes\Interface\{299817DA-1FAC-4CE2-8F48-A108237013BD}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"
.
[HKEY_LOCAL_MACHINE\software\Classes\Interface\{299817DA-1FAC-4CE2-8F48-A108237013BD}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
.
Celkový čas: 2016-02-19 14:42:07
ComboFix-quarantined-files.txt 2016-02-19 13:42
.
Před spuštěním: Volných bajtů: 41 069 699 072
Po spuštění: Volných bajtů: 41 030 840 320
.
- - End Of File - - 907DD48E47E810C733E16D617D56B63C
671B81004FDD1588FA9ED1331C9CECA9

[Orcus]

Otevři si Poznámkový blok (Start -> Spustit... a napiš do okna Notepad a dej Ok).
Zkopíruj do něj následující celý text označený červeně:

ClearJavaCache::
KillAll::

File::
c:\windows\Tasks\Adobe Flash Player Updater.job
c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
c:\windows\Tasks\Měsíční oznamování konce poskytování služeb pro Microsoft Windows XP.job
c:\windows\Tasks\Přihlášení k oznamování konce poskytování služeb pro Microsoft Windows XP.job

Folder::
c:\program files\Google\Update
c:\program files\Skype\Updater
c:\program files\IObit\LiveUpdate

Driver::
SkypeUpdate
LiveUpdateSvc

DDS::
IE: {{07BA1DA9-F501-4796-8728-74D1B91A6CD5} - c:\program files\PokerStars.EU\PokerStarsUpdate.exe

RegLock::
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{B019E3BF-E7E5-453C-A2E4-D2C18CA0866F}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\WINDOWS\\system32\\Macromed\\Flash\\FlashUtil32_20_0_0_306_ActiveX.exe,-101"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{B019E3BF-E7E5-453C-A2E4-D2C18CA0866F}\Elevation]
"Enabled"=dword:00000001
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{B019E3BF-E7E5-453C-A2E4-D2C18CA0866F}\LocalServer32]
@="c:\\WINDOWS\\system32\\Macromed\\Flash\\FlashUtil32_20_0_0_306_ActiveX.exe"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{B019E3BF-E7E5-453C-A2E4-D2C18CA0866F}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
.
[HKEY_LOCAL_MACHINE\software\Classes\Interface\{299817DA-1FAC-4CE2-8F48-A108237013BD}]
@Denied: (A 2) (Everyone)
@="IFlashBroker6"
.
[HKEY_LOCAL_MACHINE\software\Classes\Interface\{299817DA-1FAC-4CE2-8F48-A108237013BD}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"
.
[HKEY_LOCAL_MACHINE\software\Classes\Interface\{299817DA-1FAC-4CE2-8F48-A108237013BD}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
.


Zvol možnost Soubor -> Uložit jako... a nastav tyto parametry:
Název souboru: zde napiš: CFScript.txt
Uložit jako typ: tak tam vyber Všechny soubory
Ulož soubor na plochu.
Ukonči všechna aktivní okna.


Uchop myší vytvořený skript CFScript.txt, přemísti ho nad stažený program ComboFix.exe
a když se oba soubory překryjí, skript upusť.




- Automaticky se spustí ComboFix, oprava může trvat i déle než 10 minut. ! Nech ComboFix dokončit svou práci !
- Vlož sem log, který vyběhne v závěru čistícího procesu

Upozornění : Může se stát, že po aplikaci skriptu a restartu počítače Windows nenaběhnou, pak znovu restartuj počítač, mačkej F8 a pak zvol poslední známou funkční konfiguraci.

====================================================

Stáhni si aswMBR
na svojí plochu. Uzavři všechna okna , programy a prohlížeče. Poklepej na aswMBR.exe. Pokud se objeví hláška o možnosti stáhnutí databáze Avastu , klikni na NE. Poté klikni na „Scan“ . Po skenu klikni na „Save Log“ a ulož si log na plochu .Zkopíruj sem celý obsah toho logu. Pak klikni na „Exit“ k zavření programu.

[bbdra]

ComboFix 16-02-19.01 - Leo 21.02.2016 10:36:19.2.2 - x86
Systém Microsoft Windows XP Professional 5.1.2600.3.1250.420.1029.18.1015.628 [GMT 1:00]
Spuštěný z: c:\documents and settings\Leo\Plocha\ComboFix.exe
Použité ovládací přepínače :: c:\documents and settings\Leo\Plocha\CFScript.txt
AV: Kaspersky Internet Security *Disabled/Updated* {2C4D4BC6-0793-4956-A9F9-E252435469C0}
FW: Kaspersky Internet Security *Disabled* {2C4D4BC6-0793-4956-A9F9-E252435469C0}
.
VAROVÁNÍ - NA TOMTO POČÍTAČI NENÍ NAINSTALOVÁNA KONZOLA PRO ZOTAVENÍ !!
.
FILE ::
"c:\windows\Tasks\Adobe Flash Player Updater.job"
"c:\windows\Tasks\GoogleUpdateTaskMachineCore.job"
"c:\windows\Tasks\GoogleUpdateTaskMachineUA.job"
"c:\windows\Tasks\Měsíční oznamování konce poskytování služeb pro Microsoft Windows XP.job"
"c:\windows\Tasks\Přihlášení k oznamování konce poskytování služeb pro Microsoft Windows XP.job"
.
.
((((((((((((((((((((((((((((((((((((((( Ostatní výmazy )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
c:\program files\Google\Update
c:\program files\Google\Update\1.3.29.5\GoogleCrashHandler.exe
c:\program files\Google\Update\1.3.29.5\GoogleCrashHandler64.exe
c:\program files\Google\Update\1.3.29.5\GoogleUpdate.exe
c:\program files\Google\Update\1.3.29.5\GoogleUpdateBroker.exe
c:\program files\Google\Update\1.3.29.5\GoogleUpdateComRegisterShell64.exe
c:\program files\Google\Update\1.3.29.5\GoogleUpdateHelper.msi
c:\program files\Google\Update\1.3.29.5\GoogleUpdateOnDemand.exe
c:\program files\Google\Update\1.3.29.5\GoogleUpdateSetup.exe
c:\program files\Google\Update\1.3.29.5\GoogleUpdateWebPlugin.exe
c:\program files\Google\Update\1.3.29.5\goopdate.dll
c:\program files\Google\Update\1.3.29.5\goopdateres_am.dll
c:\program files\Google\Update\1.3.29.5\goopdateres_ar.dll
c:\program files\Google\Update\1.3.29.5\goopdateres_bg.dll
c:\program files\Google\Update\1.3.29.5\goopdateres_bn.dll
c:\program files\Google\Update\1.3.29.5\goopdateres_ca.dll
c:\program files\Google\Update\1.3.29.5\goopdateres_cs.dll
c:\program files\Google\Update\1.3.29.5\goopdateres_da.dll
c:\program files\Google\Update\1.3.29.5\goopdateres_de.dll
c:\program files\Google\Update\1.3.29.5\goopdateres_el.dll
c:\program files\Google\Update\1.3.29.5\goopdateres_en-GB.dll
c:\program files\Google\Update\1.3.29.5\goopdateres_en.dll
c:\program files\Google\Update\1.3.29.5\goopdateres_es-419.dll
c:\program files\Google\Update\1.3.29.5\goopdateres_es.dll
c:\program files\Google\Update\1.3.29.5\goopdateres_et.dll
c:\program files\Google\Update\1.3.29.5\goopdateres_fa.dll
c:\program files\Google\Update\1.3.29.5\goopdateres_fi.dll
c:\program files\Google\Update\1.3.29.5\goopdateres_fil.dll
c:\program files\Google\Update\1.3.29.5\goopdateres_fr.dll
c:\program files\Google\Update\1.3.29.5\goopdateres_gu.dll
c:\program files\Google\Update\1.3.29.5\goopdateres_hi.dll
c:\program files\Google\Update\1.3.29.5\goopdateres_hr.dll
c:\program files\Google\Update\1.3.29.5\goopdateres_hu.dll
c:\program files\Google\Update\1.3.29.5\goopdateres_id.dll
c:\program files\Google\Update\1.3.29.5\goopdateres_is.dll
c:\program files\Google\Update\1.3.29.5\goopdateres_it.dll
c:\program files\Google\Update\1.3.29.5\goopdateres_iw.dll
c:\program files\Google\Update\1.3.29.5\goopdateres_ja.dll
c:\program files\Google\Update\1.3.29.5\goopdateres_kn.dll
c:\program files\Google\Update\1.3.29.5\goopdateres_ko.dll
c:\program files\Google\Update\1.3.29.5\goopdateres_lt.dll
c:\program files\Google\Update\1.3.29.5\goopdateres_lv.dll
c:\program files\Google\Update\1.3.29.5\goopdateres_ml.dll
c:\program files\Google\Update\1.3.29.5\goopdateres_mr.dll
c:\program files\Google\Update\1.3.29.5\goopdateres_ms.dll
c:\program files\Google\Update\1.3.29.5\goopdateres_nl.dll
c:\program files\Google\Update\1.3.29.5\goopdateres_no.dll
c:\program files\Google\Update\1.3.29.5\goopdateres_pl.dll
c:\program files\Google\Update\1.3.29.5\goopdateres_pt-BR.dll
c:\program files\Google\Update\1.3.29.5\goopdateres_pt-PT.dll
c:\program files\Google\Update\1.3.29.5\goopdateres_ro.dll
c:\program files\Google\Update\1.3.29.5\goopdateres_ru.dll
c:\program files\Google\Update\1.3.29.5\goopdateres_sk.dll
c:\program files\Google\Update\1.3.29.5\goopdateres_sl.dll
c:\program files\Google\Update\1.3.29.5\goopdateres_sr.dll
c:\program files\Google\Update\1.3.29.5\goopdateres_sv.dll
c:\program files\Google\Update\1.3.29.5\goopdateres_sw.dll
c:\program files\Google\Update\1.3.29.5\goopdateres_ta.dll
c:\program files\Google\Update\1.3.29.5\goopdateres_te.dll
c:\program files\Google\Update\1.3.29.5\goopdateres_th.dll
c:\program files\Google\Update\1.3.29.5\goopdateres_tr.dll
c:\program files\Google\Update\1.3.29.5\goopdateres_uk.dll
c:\program files\Google\Update\1.3.29.5\goopdateres_ur.dll
c:\program files\Google\Update\1.3.29.5\goopdateres_vi.dll
c:\program files\Google\Update\1.3.29.5\goopdateres_zh-CN.dll
c:\program files\Google\Update\1.3.29.5\goopdateres_zh-TW.dll
c:\program files\Google\Update\1.3.29.5\npGoogleUpdate3.dll
c:\program files\Google\Update\1.3.29.5\psmachine.dll
c:\program files\Google\Update\1.3.29.5\psmachine_64.dll
c:\program files\Google\Update\1.3.29.5\psuser.dll
c:\program files\Google\Update\1.3.29.5\psuser_64.dll
c:\program files\Google\Update\Download\{430FD4D0-B729-4F61-AA34-91526481799D}\1.3.29.5\GoogleUpdateSetup.exe
c:\program files\Google\Update\Download\{4DC8B4CA-1BDA-483E-B5FA-D3C12E15B62D}\48.0.2564.116\48.0.2564.116_48.0.2564.109_chrome_updater.exe
c:\program files\Google\Update\GoogleUpdate.exe
c:\program files\Internet Explorer\SET1D9.tmp
c:\program files\Internet Explorer\SET1DE.tmp
c:\program files\Internet Explorer\SET2B7.tmp
c:\program files\Internet Explorer\SET2BC.tmp
c:\program files\IObit\LiveUpdate
c:\program files\IObit\LiveUpdate\Downloader.log
c:\program files\IObit\LiveUpdate\Language\Arabic.lng
c:\program files\IObit\LiveUpdate\Language\Belarusian.lng
c:\program files\IObit\LiveUpdate\Language\Czech.lng
c:\program files\IObit\LiveUpdate\Language\Danish.lng
c:\program files\IObit\LiveUpdate\Language\Dinka.lng
c:\program files\IObit\LiveUpdate\Language\Dutch.lng
c:\program files\IObit\LiveUpdate\Language\English.lng
c:\program files\IObit\LiveUpdate\Language\Finnish.lng
c:\program files\IObit\LiveUpdate\Language\Flemish.lng
c:\program files\IObit\LiveUpdate\Language\French.lng
c:\program files\IObit\LiveUpdate\Language\German.lng
c:\program files\IObit\LiveUpdate\Language\Greek.lng
c:\program files\IObit\LiveUpdate\Language\Hebrew.lng
c:\program files\IObit\LiveUpdate\Language\Hungarian.lng
c:\program files\IObit\LiveUpdate\Language\ChineseSimp.lng
c:\program files\IObit\LiveUpdate\Language\ChineseTrad.lng
c:\program files\IObit\LiveUpdate\Language\Indonesia.lng
c:\program files\IObit\LiveUpdate\Language\Italian.lng
c:\program files\IObit\LiveUpdate\Language\Japanese.lng
c:\program files\IObit\LiveUpdate\Language\Korean.lng
c:\program files\IObit\LiveUpdate\Language\Latvian.lng
c:\program files\IObit\LiveUpdate\Language\Malayalam.lng
c:\program files\IObit\LiveUpdate\Language\Polish.lng
c:\program files\IObit\LiveUpdate\Language\Portuguese(PT-BR).lng
c:\program files\IObit\LiveUpdate\Language\Portuguese(PT-PT).lng
c:\program files\IObit\LiveUpdate\Language\Romanian.lng
c:\program files\IObit\LiveUpdate\Language\Russian.lng
c:\program files\IObit\LiveUpdate\Language\Serbian (cyrillic).lng
c:\program files\IObit\LiveUpdate\Language\Serbian (latin).lng
c:\program files\IObit\LiveUpdate\Language\Slovak.lng
c:\program files\IObit\LiveUpdate\Language\Slovenian.lng
c:\program files\IObit\LiveUpdate\Language\Spanish.lng
c:\program files\IObit\LiveUpdate\Language\Swedish.lng
c:\program files\IObit\LiveUpdate\Language\Turkish.lng
c:\program files\IObit\LiveUpdate\Language\Ukrainian.lng
c:\program files\IObit\LiveUpdate\Language\Vietnamese.lng
c:\program files\IObit\LiveUpdate\LiveUpdate.exe
c:\program files\IObit\LiveUpdate\LiveUpdate.log
c:\program files\IObit\LiveUpdate\LiveUpdateSrvUpt.log
c:\program files\IObit\LiveUpdate\ProductStatistics.dll
c:\program files\IObit\LiveUpdate\ProductStatistics.log
c:\program files\IObit\LiveUpdate\ProductUpt.log
c:\program files\IObit\LiveUpdate\system.ini
c:\program files\IObit\LiveUpdate\update\Surfing Protection\Database\ASCSpecialUrl.db.dat
c:\program files\IObit\LiveUpdate\update\Surfing Protection\FFPluginCleaner.exe.dat
c:\program files\IObit\LiveUpdate\update\UninstallerFreeWeb\BigUpgrade_IU.exe.dat
c:\program files\IObit\LiveUpdate\update\update.spt
c:\program files\Skype\Updater
c:\program files\Skype\Updater\Updater.dll
c:\program files\Skype\Updater\Updater.exe
c:\windows\system32\SET1F4.tmp
c:\windows\system32\SET1F5.tmp
c:\windows\system32\SET1F7.tmp
c:\windows\system32\SET1F8.tmp
c:\windows\system32\SET1F9.tmp
c:\windows\system32\SET1FA.tmp
c:\windows\system32\SET1FC.tmp
c:\windows\system32\SET1FF.tmp
c:\windows\system32\SET200.tmp
c:\windows\system32\SET201.tmp
c:\windows\system32\SET204.tmp
c:\windows\system32\SET208.tmp
c:\windows\system32\SET209.tmp
c:\windows\system32\SET20B.tmp
c:\windows\system32\SET20E.tmp
c:\windows\system32\SET20F.tmp
c:\windows\system32\SET210.tmp
c:\windows\system32\SET211.tmp
c:\windows\system32\SET212.tmp
c:\windows\system32\SET213.tmp
c:\windows\system32\SET217.tmp
c:\windows\system32\SET219.tmp
c:\windows\system32\SET21A.tmp
c:\windows\system32\SET21B.tmp
c:\windows\system32\SET21C.tmp
c:\windows\system32\SET21D.tmp
c:\windows\system32\SET21E.tmp
c:\windows\system32\SET220.tmp
c:\windows\system32\SET221.tmp
c:\windows\system32\SET222.tmp
c:\windows\system32\SET223.tmp
c:\windows\system32\SET225.tmp
c:\windows\system32\SET226.tmp
c:\windows\system32\SET227.tmp
c:\windows\system32\SET228.tmp
c:\windows\system32\SET22A.tmp
c:\windows\system32\SET2D2.tmp
c:\windows\system32\SET2D3.tmp
c:\windows\system32\SET2D5.tmp
c:\windows\system32\SET2D6.tmp
c:\windows\system32\SET2D7.tmp
c:\windows\system32\SET2D8.tmp
c:\windows\system32\SET2DA.tmp
c:\windows\system32\SET2DD.tmp
c:\windows\system32\SET2DE.tmp
c:\windows\system32\SET2DF.tmp
c:\windows\system32\SET2E2.tmp
c:\windows\system32\SET2E6.tmp
c:\windows\system32\SET2E7.tmp
c:\windows\system32\SET2E9.tmp
c:\windows\system32\SET2EC.tmp
c:\windows\system32\SET2ED.tmp
c:\windows\system32\SET2EE.tmp
c:\windows\system32\SET2EF.tmp
c:\windows\system32\SET2F0.tmp
c:\windows\system32\SET2F1.tmp
c:\windows\system32\SET2F5.tmp
c:\windows\system32\SET2F7.tmp
c:\windows\system32\SET2F8.tmp
c:\windows\system32\SET2F9.tmp
c:\windows\system32\SET2FA.tmp
c:\windows\system32\SET2FB.tmp
c:\windows\system32\SET2FC.tmp
c:\windows\system32\SET2FE.tmp
c:\windows\system32\SET2FF.tmp
c:\windows\system32\SET300.tmp
c:\windows\system32\SET301.tmp
c:\windows\system32\SET303.tmp
c:\windows\system32\SET304.tmp
c:\windows\system32\SET305.tmp
c:\windows\system32\SET306.tmp
c:\windows\system32\SET308.tmp
.
.
((((((((((((((((((((((((((((((((((((((( Ovladače/Služby )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
-------\Legacy_LIVEUPDATESVC
-------\Legacy_SKYPEUPDATE
-------\Service_LiveUpdateSvc
-------\Service_SkypeUpdate
-------\Legacy_gupdate
-------\Legacy_gupdate
-------\Service_gupdate
-------\Service_gupdatem
-------\Service_gupdate
-------\Service_gupdatem
.
.
((((((((((((((((((((((((( Soubory vytvořené od 2016-01-21 do 2016-02-21 )))))))))))))))))))))))))))))))
.
.
2016-02-21 04:47 . 2013-09-23 07:39 81920 ----a-w- c:\windows\system32\ieencode.dll
2016-02-21 04:47 . 2013-09-23 07:39 81920 ----a-w- c:\windows\system32\dllcache\ieencode.dll
2016-02-19 12:35 . 2010-09-13 12:06 3563776 ----a-w- c:\windows\system32\drivers\snp2uvc.sys
2016-02-19 12:35 . 2009-02-16 17:32 196608 ----a-w- c:\windows\system32\csnp2uvc.dll
2016-02-19 12:35 . 2008-12-29 16:13 28544 ----a-w- c:\windows\system32\drivers\sncduvc.sys
2016-02-19 12:35 . 2010-08-06 14:48 306688 ----a-w- c:\windows\system32\vsnp2uvc.dll
2016-02-19 12:35 . 2009-08-12 14:06 662016 ----a-w- c:\windows\vsnp2uvc.exe
2016-02-19 12:35 . 2009-08-13 19:33 239616 ----a-w- c:\windows\system32\rsnp2uvc.dll
2016-02-19 12:35 . 2016-02-19 12:35 -------- d-----w- c:\program files\Common Files\SNP2UVC
2016-02-19 12:34 . 2016-02-19 12:34 -------- d-----w- c:\documents and settings\Leo\Data aplikací\InstallShield
2016-02-18 07:26 . 2016-02-18 07:17 24064 ----a-w- c:\windows\zoek-delete.exe
2016-02-18 07:17 . 2016-02-18 07:24 -------- d-----w- C:\zoek_backup
2016-02-17 18:57 . 2008-04-13 23:09 5504 -c--a-w- c:\windows\system32\dllcache\mstee.sys
2016-02-17 18:57 . 2008-04-13 23:09 5504 ----a-w- c:\windows\system32\drivers\MSTEE.sys
2016-02-17 18:57 . 2008-04-13 23:16 10880 -c--a-w- c:\windows\system32\dllcache\ndisip.sys
2016-02-17 18:57 . 2008-04-13 23:16 10880 ----a-w- c:\windows\system32\drivers\NdisIP.sys
2016-02-17 18:57 . 2008-04-13 23:16 15232 -c--a-w- c:\windows\system32\dllcache\streamip.sys
2016-02-17 18:57 . 2008-04-13 23:16 15232 ----a-w- c:\windows\system32\drivers\StreamIP.sys
2016-02-17 18:57 . 2008-04-14 07:52 16384 ----a-w- c:\windows\system32\ipsink.ax
2016-02-17 18:57 . 2008-04-13 23:16 11136 -c--a-w- c:\windows\system32\dllcache\slip.sys
2016-02-17 18:57 . 2008-04-13 23:16 11136 ----a-w- c:\windows\system32\drivers\SLIP.sys
2016-02-17 18:57 . 2008-04-13 23:16 19200 -c--a-w- c:\windows\system32\dllcache\wstcodec.sys
2016-02-17 18:57 . 2008-04-13 23:16 19200 ----a-w- c:\windows\system32\drivers\WSTCODEC.SYS
2016-02-17 18:56 . 2008-04-13 23:16 85248 -c--a-w- c:\windows\system32\dllcache\nabtsfec.sys
2016-02-17 18:56 . 2008-04-13 23:16 85248 ----a-w- c:\windows\system32\drivers\NABTSFEC.sys
2016-02-17 18:56 . 2008-04-13 23:16 17024 -c--a-w- c:\windows\system32\dllcache\ccdecode.sys
2016-02-17 18:56 . 2008-04-13 23:16 17024 ----a-w- c:\windows\system32\drivers\CCDECODE.sys
2016-02-17 18:56 . 2008-04-14 07:52 91648 ----a-w- c:\windows\system32\kswdmcap.ax
2016-02-17 18:56 . 2008-04-14 07:52 61952 ----a-w- c:\windows\system32\kstvtune.ax
2016-02-17 18:56 . 2008-04-14 07:52 43008 ----a-w- c:\windows\system32\ksxbar.ax
2016-02-17 18:56 . 2008-04-14 07:52 20992 ----a-w- c:\windows\system32\dshowext.ax
2016-02-17 18:56 . 2008-04-14 07:52 54272 -c--a-w- c:\windows\system32\dllcache\vfwwdm32.dll
2016-02-17 18:56 . 2008-04-14 07:52 54272 ----a-w- c:\windows\system32\vfwwdm32.dll
2016-02-16 14:44 . 2016-02-16 14:44 -------- d-----w- c:\program files\Malwarebytes Anti-Malware
2016-02-15 23:19 . 2016-02-15 23:19 -------- d-----w- C:\TDSSKiller_Quarantine
2016-02-15 17:57 . 2016-02-21 04:48 -------- dc-h--w- c:\windows\ie8
2016-02-15 17:14 . 2016-02-15 17:14 -------- d-----w- c:\windows\system32\x64
2016-02-15 17:14 . 2008-02-15 20:21 920088 ----a-w- c:\windows\system32\igxpun.exe
2016-02-15 17:13 . 2006-11-10 15:25 319456 ----a-w- c:\windows\system32\difxapi.dll
2016-02-15 13:22 . 2016-02-19 13:13 -------- d-----w- c:\program files\PoselSmrti
2016-02-15 13:14 . 2016-02-15 13:14 320120 ----a-w- c:\windows\system32\drivers\sptd.sys
2016-02-15 13:08 . 2016-02-15 13:12 40504 ----a-w- c:\windows\system32\drivers\dtliteusbbus.sys
2016-02-15 12:57 . 2016-02-15 12:57 -------- d-----w- c:\documents and settings\Leo\Local Settings\Data aplikací\Disc_Soft_Ltd
2016-02-12 16:47 . 2006-06-29 12:07 14048 ------w- c:\windows\system32\spmsg2.dll
2016-02-12 16:42 . 2016-02-12 16:42 -------- d-----w- c:\windows\system32\winrm
2016-02-12 16:42 . 2016-02-12 16:42 -------- dc-h--w- c:\windows\$968930Uinstall_KB968930$
2016-02-10 15:40 . 2016-02-10 15:40 -------- d-----r- c:\documents and settings\NetworkService\Oblíbené položky
2016-02-09 15:24 . 2016-02-09 17:03 -------- d-----w- c:\documents and settings\Leo\Local Settings\Data aplikací\ApplicationHistory
2016-02-09 14:06 . 2016-02-12 16:47 -------- d-----w- c:\windows\system32\XPSViewer
2016-02-09 14:05 . 2016-02-09 14:05 -------- d-----w- c:\program files\MSBuild
2016-02-09 14:05 . 2016-02-09 14:05 -------- d-----w- c:\program files\Reference Assemblies
2016-02-09 14:05 . 2008-07-06 12:06 89088 ----a-w- c:\windows\system32\Spool\prtprocs\w32x86\filterpipelineprintproc.dll
2016-02-09 14:04 . 2016-02-09 14:05 -------- d-----w- C:\04aff36bf2c4603848d3965e3b
2016-02-09 14:04 . 2008-07-06 12:06 89088 -c----w- c:\windows\system32\dllcache\filterpipelineprintproc.dll
2016-02-09 14:04 . 2008-07-06 12:06 575488 -c----w- c:\windows\system32\dllcache\xpsshhdr.dll
2016-02-09 14:04 . 2008-07-06 12:06 575488 ------w- c:\windows\system32\xpsshhdr.dll
2016-02-09 14:04 . 2008-07-06 12:06 1676288 -c----w- c:\windows\system32\dllcache\xpssvcs.dll
2016-02-09 14:04 . 2008-07-06 12:06 1676288 ------w- c:\windows\system32\xpssvcs.dll
2016-02-09 14:04 . 2008-07-06 12:06 117760 ------w- c:\windows\system32\prntvpt.dll
2016-02-09 14:04 . 2008-07-06 10:50 597504 -c----w- c:\windows\system32\dllcache\printfilterpipelinesvc.exe
2016-02-09 14:04 . 2008-07-06 10:50 597504 ------w- c:\windows\system32\Spool\prtprocs\w32x86\printfilterpipelinesvc.exe
2016-02-09 13:36 . 2016-02-09 13:36 -------- d-----w- c:\documents and settings\Leo\Local Settings\Data aplikací\Identities
2016-02-09 13:36 . 2016-02-09 13:36 -------- d-----w- c:\documents and settings\Leo\Data aplikací\Windows Desktop Search
2016-02-09 13:35 . 2016-02-18 07:24 -------- d-----w- c:\windows\system32\GroupPolicy
2016-02-09 13:35 . 2016-02-09 16:02 -------- d-----w- c:\program files\Windows Desktop Search
2016-02-09 13:34 . 2008-03-07 17:02 98304 -c----w- c:\windows\system32\dllcache\nlhtml.dll
2016-02-09 13:34 . 2008-03-07 17:02 29696 -c----w- c:\windows\system32\dllcache\mimefilt.dll
2016-02-09 13:34 . 2008-03-07 17:02 192000 -c----w- c:\windows\system32\dllcache\offfilt.dll
2016-02-09 13:34 . 2016-02-09 13:34 -------- d-----w- c:\program files\Windows Media Connect 2
2016-02-09 13:32 . 2016-02-09 13:32 -------- d-----w- c:\windows\system32\drivers\UMDF
2016-02-09 13:32 . 2016-02-09 13:32 -------- d-----w- c:\windows\system32\LogFiles
2016-02-09 13:30 . 2016-02-09 13:30 -------- d-----w- c:\windows\system32\URTTEMP
2016-02-04 02:35 . 2016-02-04 02:35 -------- d-----w- c:\program files\Comodo
2016-02-03 14:25 . 1999-12-17 05:13 49664 ----a-w- c:\windows\unvise32.exe
2016-02-03 14:25 . 2016-02-03 14:25 -------- d-----w- c:\program files\DeviceLock Plug and Play Auditor
2016-02-03 13:53 . 2016-02-03 13:53 -------- d-----w- C:\CCE_Quarantine
2016-02-01 21:36 . 2016-02-01 21:36 -------- d-sh--w- c:\documents and settings\Leo\PrivacIE
2016-01-27 13:33 . 2016-01-27 13:33 -------- d-----w- c:\program files\SecurityXploded
2016-01-26 23:29 . 2016-01-26 23:29 -------- d-----w- c:\program files\FileASSASSIN
2016-01-26 20:54 . 2016-01-26 21:31 11264 ----a-w- c:\windows\system32\drivers\uzi3ndu1.sys
2016-01-22 23:12 . 2016-02-21 09:44 -------- d-----w- c:\documents and settings\All Users\Data aplikací\Kaspersky Lab
2016-01-22 23:12 . 2016-01-22 23:12 -------- d-----w- c:\program files\Kaspersky Lab
2016-01-22 23:12 . 2016-01-22 23:19 150408 ----a-w- c:\windows\system32\drivers\klflt.sys
2016-01-22 23:12 . 2016-01-22 23:19 44216 ----a-w- c:\windows\system32\drivers\klhk.sys
2016-01-22 22:42 . 2016-01-22 22:42 -------- d-----w- c:\documents and settings\All Users\Kaspersky Lab Setup Files
2016-01-22 22:39 . 2016-01-22 22:39 -------- d-----w- C:\KVRT_Data
2016-01-22 21:48 . 2015-10-05 08:50 23256 ----a-w- c:\windows\system32\drivers\mbam.sys
2016-01-22 21:01 . 2015-10-05 08:50 121560 ----a-w- c:\windows\system32\drivers\mbamchameleon.sys
2016-01-22 20:56 . 2016-01-22 21:03 170200 ----a-w- c:\windows\system32\drivers\mbamswissarmy.sys
2016-01-22 20:54 . 2016-01-22 20:55 -------- d-----w- c:\program files\CCleaner
2016-01-22 19:22 . 2016-01-22 19:22 -------- d-----w- c:\documents and settings\Administrator\Local Settings\Data aplikací\Google
2016-01-22 18:30 . 2016-01-22 18:30 -------- d-----w- c:\documents and settings\Administrator\Local Settings\Data aplikací\GHISLER
2016-01-22 18:30 . 2016-01-22 18:30 -------- d-----w- c:\documents and settings\Administrator\Data aplikací\GHISLER
2016-01-22 18:00 . 2016-02-15 23:17 -------- d-----w- c:\program files\Exterminate It!
2016-01-22 17:51 . 2016-01-22 17:52 -------- d-----w- c:\documents and settings\Leo\Data aplikací\ProductData
.
.
.
(((((((((((((((((((((((((((((((((((((((( Find3M výpis ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2016-02-18 07:03 . 2015-10-28 22:33 24688 ----a-w- c:\windows\system32\drivers\TrueSight.sys
2016-02-15 13:12 . 2015-10-23 17:52 26168 ----a-w- c:\windows\system32\drivers\dtlitescsibus.sys
2016-02-10 19:08 . 2015-10-16 00:18 796864 ----a-w- c:\windows\system32\FlashPlayerApp.exe
2016-02-10 19:08 . 2015-10-16 00:18 142528 ----a-w- c:\windows\system32\FlashPlayerCPLApp.cpl
2016-01-26 23:23 . 2015-10-15 23:57 23840 ----a-w- c:\windows\system32\drivers\HWiNFO32.SYS
2016-01-22 23:19 . 2015-06-08 18:43 39304 ----a-w- c:\windows\system32\drivers\klpd.sys
.
.
(((((((((((((((((((((((((((((((((( Spouštěcí body v registru )))))))))))))))))))))))))))))))))))))))))))))
.
.
*Poznámka* prázdné záznamy a legitimní výchozí údaje nejsou zobrazeny.
REGEDIT4
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"CCleaner Monitoring"="c:\program files\CCleaner\CCleaner.exe" [2015-12-08 6602152]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"SoundMAXPnP"="c:\program files\Analog Devices\Core\smax4pnp.exe" [2007-01-05 872448]
"IgfxTray"="c:\windows\system32\igfxtray.exe" [2008-02-15 135168]
"HotKeysCmds"="c:\windows\system32\hkcmd.exe" [2008-02-15 159744]
"Persistence"="c:\windows\system32\igfxpers.exe" [2008-02-15 131072]
"snp2uvc"="c:\windows\vsnp2uvc.exe" [2009-08-12 662016]
"tsnp2uvc"="c:\program files\Common Files\SNP2UVC\tsnp2uvc.exe" [2010-09-20 321024]
.
[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="c:\windows\system32\CTFMON.EXE" [2008-04-14 15360]
.
[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\policies\explorer]
"NoSimpleNetIDList"= 1 (0x1)
.
[hkey_local_machine\software\microsoft\windows\currentversion\explorer\ShellExecuteHooks]
"{56F9679E-7826-4C84-81F3-532071A8BCC5}"= "c:\program files\Windows Desktop Search\MSNLNamespaceMgr.dll" [2009-05-24 304128]
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Wdf01000.sys]
@="Driver"
.
[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\KasperskyAntiVirus]
"DisableMonitoring"=dword:00000001
.
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile]
"EnableFirewall"= 0 (0x0)
.
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\system32\\sessmgr.exe"=
"%windir%\\Network Diagnostic\\xpnetdiag.exe"=
"c:\\Program Files\\Google\\Chrome\\Application\\chrome.exe"=
"c:\\Program Files\\Skype\\Phone\\Skype.exe"=
.
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\GloballyOpenPorts\List]
"5985:TCP"= 5985:TCP:*:Disabled:Vzdálená správa systému Windows
.
R?2 MBAMService;MBAMService;c:\program files\Malwarebytes Anti-Malware\mbamservice.exe [16.2.2016 15:44 1135416]
R0 cm_km;Kaspersky Lab ZAO Cryptographic Module x86 (Weak);c:\windows\system32\drivers\cm_km.sys [6.7.2015 0:10 201912]
R0 klbackupdisk;Kaspersky Lab klbackupdisk;c:\windows\system32\drivers\klbackupdisk.sys [6.6.2015 8:50 46776]
R0 sptd;sptd;\SystemRoot\\SystemRoot\System32\Drivers\sptd.sys --> \SystemRoot\\SystemRoot\System32\Drivers\sptd.sys [?]
R1 HWiNFO32;HWiNFO32/64 Kernel Driver;c:\windows\system32\drivers\HWiNFO32.SYS [16.10.2015 0:57 23840]
R1 klbackupflt;Kaspersky Lab klbackupflt;c:\windows\system32\drivers\klbackupflt.sys [27.6.2015 0:00 57712]
R1 klhk;Kaspersky Lab service driver;c:\windows\system32\drivers\klhk.sys [23.1.2016 0:12 44216]
R1 klpd;Kaspersky Lab format recognizer driver;c:\windows\system32\drivers\klpd.sys [8.6.2015 19:43 39304]
R1 kltdf;kltdf;c:\windows\system32\drivers\kltdf.sys [10.6.2015 18:16 73912]
R1 kltdi;kltdi;c:\windows\system32\drivers\kltdi.sys [11.6.2015 15:52 54328]
R1 kneps;kneps;c:\windows\system32\drivers\kneps.sys [23.6.2015 18:30 156856]
R1 uzi3ndu1;AVZ-RK Kernel Driver;c:\windows\system32\drivers\uzi3ndu1.sys [26.1.2016 21:54 11264]
R2 AVP16.0.0;Kaspersky Anti-Virus Service 16.0.0;c:\program files\Kaspersky Lab\Kaspersky Internet Security 16.0.0\avp.exe [9.7.2015 0:02 194000]
R2 ChromodoUpdater;COMODO Chromodo Update Service;c:\program files\Comodo\Chromodo\chromodo_updater.exe [3.2.2016 18:10 2062384]
R2 kldisk;kldisk;c:\windows\system32\drivers\kldisk.sys [6.6.2015 8:48 58040]
R3 ATSwpWDF;AuthenTec TruePrint USB Driver;c:\windows\system32\drivers\ATSwpWDF.sys [16.10.2015 1:01 677960]
R3 GTIPCI21;GTIPCI21;c:\windows\system32\drivers\gtipci21.sys [16.10.2015 1:17 97280]
R3 klflt;Kaspersky Lab Kernel DLL;c:\windows\system32\drivers\klflt.sys [23.1.2016 0:12 150408]
R3 klim5;Kaspersky Anti-Virus NDIS Filter;c:\windows\system32\drivers\klim5.sys [19.4.2013 10:44 36448]
R3 klkbdflt;Kaspersky Lab KLKBDFLT;c:\windows\system32\drivers\klkbdflt.sys [4.6.2015 16:38 36024]
R3 klmouflt;Kaspersky Lab KLMOUFLT;c:\windows\system32\drivers\klmouflt.sys [7.6.2015 1:44 37040]
R3 MBAMProtector;MBAMProtector;c:\windows\system32\drivers\mbam.sys [22.1.2016 22:48 23256]
S3 cpuz138;cpuz138;\??\c:\docume~1\Leo\LOCALS~1\Temp\cpuz138\cpuz138_x32.sys --> c:\docume~1\Leo\LOCALS~1\Temp\cpuz138\cpuz138_x32.sys [?]
S3 dtlitescsibus;DAEMON Tools Lite Virtual SCSI Bus;c:\windows\system32\drivers\dtlitescsibus.sys [23.10.2015 18:52 26168]
S3 dtliteusbbus;DAEMON Tools Lite Virtual USB Bus;c:\windows\system32\drivers\dtliteusbbus.sys [15.2.2016 14:08 40504]
.
[HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{8A69D345-D564-463c-AFF1-A69D9E530F96}]
2016-02-19 22:07 1088664 ----a-w- c:\program files\Google\Chrome\Application\48.0.2564.116\Installer\chrmstp.exe
.
Obsah adresáře 'Naplánované úlohy'
.
2016-02-21 c:\windows\Tasks\Adobe Flash Player Updater.job
- c:\windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2015-10-16 19:08]
.
2015-11-08 c:\windows\Tasks\Měsíční oznamování konce poskytování služeb pro Microsoft Windows XP.job
- c:\windows\system32\xp_eos.exe [2015-10-16 23:28]
.
2016-02-21 c:\windows\Tasks\Přihlášení k oznamování konce poskytování služeb pro Microsoft Windows XP.job
- c:\windows\system32\xp_eos.exe [2015-10-16 23:28]
.
.
------- Doplňkový sken -------
.
uInternet Connection Wizard,ShellNext = iexplore
IE: {{07BA1DA9-F501-4796-8728-74D1B91A6CD5} - c:\program files\PokerStars.EU\PokerStarsUpdate.exe
TCP: DhcpNameServer = 192.168.0.1
.
.
**************************************************************************
.
catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2016-02-21 10:45
Windows 5.1.2600 Service Pack 3 NTFS
.
skenování skrytých procesů ...
.
skenování skrytých položek 'Po spuštění' ...
.
skenování skrytých souborů ...
.
sken byl úspešně dokončen
skryté soubory: 0
.
**************************************************************************
.
--------------------- Knihovny navázané na běžící procesy ---------------------
.
- - - - - - - > 'explorer.exe'(6812)
c:\program files\Windows Desktop Search\deskbar.dll
c:\program files\Windows Desktop Search\cs-cz\dbres.dll.mui
c:\program files\Windows Desktop Search\dbres.dll
c:\program files\Windows Desktop Search\wordwheel.dll
c:\program files\Windows Desktop Search\cs-cz\msnlExtRes.dll.mui
c:\program files\Windows Desktop Search\msnlExtRes.dll
c:\windows\system32\WPDShServiceObj.dll
c:\windows\system32\PortableDeviceTypes.dll
c:\windows\system32\PortableDeviceApi.dll
.
------------------------ Jiné spuštené procesy ------------------------
.
c:\windows\System32\SCardSvr.exe
c:\windows\system32\igfxsrvc.exe
c:\windows\system32\agrsmsvc.exe
c:\windows\system32\SearchIndexer.exe
c:\program files\Kaspersky Lab\Kaspersky Internet Security 16.0.0\avpui.exe
c:\windows\Microsoft.NET\Framework\v4.0.30319\WPF\WPFFontCache_v0400.exe
.
**************************************************************************
.
Celkový čas: 2016-02-21 10:47:23 - počítač byl restartován
ComboFix-quarantined-files.txt 2016-02-21 09:47
ComboFix2.txt 2016-02-19 13:42
.
Před spuštěním: Volných bajtů: 46 750 081 024
Po spuštění: Volných bajtů: 46 660 804 608
.
- - End Of File - - B28813197390D7358E4CC84D2D70AB12
671B81004FDD1588FA9ED1331C9CECA9

[bbdra]

aswMBR version 1.0.1.2290 Copyright(c) 2014 AVAST Software
Run date: 2016-02-21 10:50:37
-----------------------------
10:50:37.093 OS Version: Windows 5.1.2600 Service Pack 3
10:50:37.093 Number of processors: 2 586 0xF06
10:50:37.093 ComputerName: IKONA UserName: Leo
10:50:45.343 Initialize success
10:50:45.796 VM: initialized successfully
10:50:45.796 VM: Intel CPU BiosDisabled
10:51:00.156 Disk 0 (boot) \Device\Harddisk0\DR0 -> \Device\Ide\IdeDeviceP0T0L0-3
10:51:00.156 Disk 0 Vendor: FUJITSU_MHW2080BH_PL 891F Size: 76319MB BusType: 3
10:51:00.328 Disk 0 MBR read successfully
10:51:00.328 Disk 0 MBR scan
10:51:00.328 Disk 0 unknown MBR code
10:51:01.328 Disk 0 Partition 1 80 (A) 07 HPFS/NTFS NTFS 76308 MB offset 63
10:51:01.328 Disk 0 Boot: NTFS code=1
10:51:01.328 Disk 0 scanning sectors +156280320
10:51:01.343 Disk 0 scanning C:\WINDOWS\system32\drivers
10:51:09.171 Service scanning
10:51:11.765 Service cm_km C:\WINDOWS\system32\DRIVERS\cm_km.sys **LOCKED** 5
10:51:14.765 Service kl1 C:\WINDOWS\system32\DRIVERS\kl1.sys **LOCKED** 5
10:51:15.328 Service klbackupdisk C:\WINDOWS\system32\DRIVERS\klbackupdisk.sys **LOCKED** 5
10:51:15.375 Service kldisk C:\WINDOWS\system32\DRIVERS\kldisk.sys **LOCKED** 5
10:51:15.421 Service klflt C:\WINDOWS\system32\DRIVERS\klflt.sys **LOCKED** 5
10:51:15.453 Service klhk C:\WINDOWS\system32\DRIVERS\klhk.sys **LOCKED** 5
10:51:15.562 Service klim5 C:\WINDOWS\system32\DRIVERS\klim5.sys **LOCKED** 5
10:51:15.578 Service klkbdflt C:\WINDOWS\system32\DRIVERS\klkbdflt.sys **LOCKED** 5
10:51:15.609 Service klmouflt C:\WINDOWS\system32\DRIVERS\klmouflt.sys **LOCKED** 5
10:51:15.671 Service kltdf C:\WINDOWS\system32\DRIVERS\kltdf.sys **LOCKED** 5
10:51:15.734 Service kltdi C:\WINDOWS\system32\DRIVERS\kltdi.sys **LOCKED** 5
10:51:15.812 Service kneps C:\WINDOWS\system32\DRIVERS\kneps.sys **LOCKED** 5
10:51:22.984 Modules scanning
10:51:22.984 \Driver\atapi DriverInit @ 0x86d84298 suspicious
10:51:22.984 \Driver\usbuhci MajorFunction[ IRP_MJ_CREATE ] @ 0x86ae21f8 suspicious
10:51:22.984 \Driver\usbuhci MajorFunction[ IRP_MJ_CLOSE ] @ 0x86ae21f8 suspicious
10:51:22.984 \Driver\usbuhci MajorFunction[ IRP_MJ_DEVICE_CONTROL ] @ 0x86ae21f8 suspicious
10:51:23.000 \Driver\usbuhci MajorFunction[ IRP_MJ_INTERNAL_DEVICE_CONTROL ] @ 0x86ae21f8 suspicious
10:51:23.000 \Driver\usbuhci MajorFunction[ IRP_MJ_POWER ] @ 0x86ae21f8 suspicious
10:51:23.000 \Driver\usbuhci MajorFunction[ IRP_MJ_SYSTEM_CONTROL ] @ 0x86ae21f8 suspicious
10:51:23.000 \Driver\NetBT MajorFunction[ IRP_MJ_CREATE ] @ 0x8637e1f8 suspicious
10:51:23.000 \Driver\NetBT MajorFunction[ IRP_MJ_CLOSE ] @ 0x8637e1f8 suspicious
10:51:23.015 \Driver\NetBT MajorFunction[ IRP_MJ_DEVICE_CONTROL ] @ 0x8637e1f8 suspicious
10:51:23.015 \Driver\NetBT MajorFunction[ IRP_MJ_INTERNAL_DEVICE_CONTROL ] @ 0x8637e1f8 suspicious
10:51:23.015 \Driver\NetBT MajorFunction[ IRP_MJ_CLEANUP ] @ 0x8637e1f8 suspicious
10:51:23.015 \Driver\Cdrom MajorFunction[ IRP_MJ_CREATE ] @ 0x86baa1f8 suspicious
10:51:23.015 \Driver\Cdrom MajorFunction[ IRP_MJ_CLOSE ] @ 0x86baa1f8 suspicious
10:51:23.031 \Driver\Cdrom MajorFunction[ IRP_MJ_READ ] @ 0x86baa1f8 suspicious
10:51:23.031 \Driver\Cdrom MajorFunction[ IRP_MJ_WRITE ] @ 0x86baa1f8 suspicious
10:51:23.031 \Driver\Cdrom MajorFunction[ IRP_MJ_FLUSH_BUFFERS ] @ 0x86baa1f8 suspicious
10:51:23.031 \Driver\Cdrom MajorFunction[ IRP_MJ_DEVICE_CONTROL ] @ 0x86baa1f8 suspicious
10:51:23.031 \Driver\Cdrom MajorFunction[ IRP_MJ_INTERNAL_DEVICE_CONTROL ] @ 0x86baa1f8 suspicious
10:51:23.046 \Driver\Cdrom MajorFunction[ IRP_MJ_SHUTDOWN ] @ 0x86baa1f8 suspicious
10:51:23.046 \Driver\Cdrom MajorFunction[ IRP_MJ_POWER ] @ 0x86baa1f8 suspicious
10:51:23.046 \Driver\Cdrom MajorFunction[ IRP_MJ_SYSTEM_CONTROL ] @ 0x86baa1f8 suspicious
10:51:23.046 \Driver\usbehci MajorFunction[ IRP_MJ_CREATE ] @ 0x86acb1f8 suspicious
10:51:23.046 \Driver\usbehci MajorFunction[ IRP_MJ_CLOSE ] @ 0x86acb1f8 suspicious
10:51:23.062 \Driver\usbehci MajorFunction[ IRP_MJ_DEVICE_CONTROL ] @ 0x86acb1f8 suspicious
10:51:23.062 \Driver\usbehci MajorFunction[ IRP_MJ_INTERNAL_DEVICE_CONTROL ] @ 0x86acb1f8 suspicious
10:51:23.062 \Driver\usbehci MajorFunction[ IRP_MJ_POWER ] @ 0x86acb1f8 suspicious
10:51:23.062 \Driver\usbehci MajorFunction[ IRP_MJ_SYSTEM_CONTROL ] @ 0x86acb1f8 suspicious
10:51:23.078 Disk 0 trace - called modules:
10:51:23.109 ntkrnlpa.exe CLASSPNP.SYS disk.sys ACPI.sys hal.dll atapi.sys sptd.sys intelide.sys PCIIDEX.SYS
10:51:23.109 1 nt!IofCallDriver -> \Device\Harddisk0\DR0[0x86d6eab8]
10:51:23.125 3 CLASSPNP.SYS[f76b1fd7] -> nt!IofCallDriver -> \Device\0000009d[0x86dd0738]
10:51:23.125 5 ACPI.sys[f6f41620] -> nt!IofCallDriver -> \Device\Ide\IdeDeviceP0T0L0-3[0x86d4e940]
10:51:23.125 Disk 0 statistics 110528/0/0 @ 6,30 MB/s
10:51:23.125 Scan finished successfully
10:51:32.921 Disk 0 MBR has been saved successfully to "C:\Documents and Settings\Leo\Plocha\MBR.dat"
10:51:32.921 The log file has been saved successfully to "C:\Documents and Settings\Leo\Plocha\aswMBR.txt"

[jerabina]

aswMBR spusť znova a po skenu dej Fix a FixMBR. Následně Save log.

ComboFix se odinstaluje takto:
Start-Spustit a zadej ComboFix /Uninstall

Vyčisti systém CCleanerem

Stáhni si OTC

na plochu. Poklepej na něj. Potom klikni na Clean up!.
Restartuj PC , pokud Ti bude doporučeno.

Co problémy?