Prosím o kontrolu logu - seká se notebook

[fandam007]

No odinstaloval. Dam ten combofix znovu.

[Reklama]

[jaro3]

dej.

[fandam007]

Tady je log z combofix:

ComboFix 13-10-30.01 - Jana 30.10.2013 11:10:27.3.4 - x86
Microsoft Windows 7 Starter 6.1.7601.1.1250.420.1029.18.1012.256 [GMT 1:00]
Spuštěný z: c:\users\Jana\Desktop\ComboFix.exe
AV: avast! Antivirus *Disabled/Updated* {2B2D1395-420B-D5C9-657E-930FE358FC3C}
AV: Trend Micro Titanium *Disabled/Updated* {68F968AC-2AA0-091D-848C-803E83E35902}
SP: avast! Antivirus *Disabled/Updated* {904CF271-6431-DA47-5FCE-A87D98DFB681}
SP: Trend Micro Titanium *Disabled/Updated* {D3988948-0C9A-0693-BE3C-BB4CF86413BF}
SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.
.
((((((((((((((((((((((((( Soubory vytvořené od 2013-09-28 do 2013-10-30 )))))))))))))))))))))))))))))))
.
.
2013-10-30 11:10 . 2013-10-30 11:10 -------- d-----w- c:\users\Guest\AppData\Local\temp
2013-10-30 11:10 . 2013-10-30 11:10 -------- d-----w- c:\users\Default\AppData\Local\temp
2013-10-29 17:20 . 2013-10-29 17:20 62576 ----a-w- c:\programdata\Microsoft\Windows Defender\Definition Updates\{B0086F55-92DD-4AA4-A3EE-C328A186AAA7}\offreg.dll
2013-10-28 11:04 . 2013-10-30 11:10 -------- d-----w- c:\users\Jana\AppData\Local\temp
2013-10-28 10:15 . 2013-10-16 00:20 7796464 ----a-w- c:\programdata\Microsoft\Windows Defender\Definition Updates\{B0086F55-92DD-4AA4-A3EE-C328A186AAA7}\mpengine.dll
2013-10-28 10:15 . 2013-09-03 13:35 238872 ------w- c:\windows\system32\MpSigStub.exe
2013-10-28 10:01 . 2010-09-17 08:32 319456 ----a-w- c:\windows\DIFxAPI.dll
2013-10-28 10:01 . 2010-09-17 08:32 203600 ----a-w- c:\windows\TmNSCIns.dll
2013-10-26 20:32 . 2013-10-26 20:32 -------- d-----w- c:\windows\ERUNT
2013-10-20 15:35 . 2013-10-20 15:35 -------- d-----w- c:\users\Jana\AppData\Roaming\Malwarebytes
2013-10-20 15:34 . 2013-10-20 15:34 -------- d-----w- c:\programdata\Malwarebytes
2013-10-20 15:34 . 2013-04-04 12:50 22856 ----a-w- c:\windows\system32\drivers\mbam.sys
2013-10-20 15:34 . 2013-10-20 15:35 -------- d-----w- c:\program files\Malwarebytes' Anti-Malware
2013-10-20 14:49 . 2013-10-20 15:21 -------- d-----w- C:\AdwCleaner
2013-10-17 18:19 . 2013-10-17 18:27 -------- d-----w- c:\windows\system32\MRT
2013-10-15 15:29 . 2013-10-15 15:29 163504 ----a-w- c:\programdata\Microsoft\Windows\Sqm\Manifest\Sqm10145.bin
2013-10-15 15:22 . 2013-07-04 11:50 530432 ----a-w- c:\windows\system32\comctl32.dll
2013-10-15 15:22 . 2013-07-03 04:02 36352 ----a-w- c:\windows\system32\drivers\usbscan.sys
2013-10-15 15:22 . 2013-07-03 03:36 55808 ----a-w- c:\windows\system32\drivers\hidclass.sys
2013-10-15 15:22 . 2013-07-03 03:36 25728 ----a-w- c:\windows\system32\drivers\hidparse.sys
2013-10-15 15:22 . 2013-09-08 02:07 1294272 ----a-w- c:\windows\system32\drivers\tcpip.sys
2013-10-15 15:22 . 2013-09-08 02:03 231424 ----a-w- c:\windows\system32\mswsock.dll
2013-10-15 15:22 . 2013-09-14 00:48 338944 ----a-w- c:\windows\system32\drivers\afd.sys
2013-10-15 15:20 . 2013-07-04 11:57 205824 ----a-w- c:\windows\system32\WebClnt.dll
2013-10-15 15:20 . 2013-07-04 11:51 81920 ----a-w- c:\windows\system32\davclnt.dll
2013-10-15 15:20 . 2013-07-04 09:48 115712 ----a-w- c:\windows\system32\drivers\mrxdav.sys
2013-10-15 15:20 . 2013-07-12 10:08 146816 ----a-w- c:\windows\system32\drivers\usbvideo.sys
2013-10-15 15:20 . 2013-07-12 10:07 86016 ----a-w- c:\windows\system32\drivers\usbcir.sys
2013-10-15 15:20 . 2013-06-25 22:56 527064 ----a-w- c:\windows\system32\drivers\Wdf01000.sys
2013-10-15 15:06 . 2013-10-15 15:06 17813896 ----a-w- c:\windows\system32\FlashPlayerInstaller.exe
2013-10-09 09:58 . 2013-10-09 09:58 4879744 ----a-w- c:\program files\Mozilla Firefox\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A}\components\SkypeFfComponent.dll
2013-10-09 09:58 . 2013-10-09 09:58 4879744 ----a-w- c:\program files\Mozilla Firefox\browser\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A}\components\SkypeFfComponent.dll
.
.
.
(((((((((((((((((((((((((((((((((((((((( Find3M výpis ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2013-10-15 15:06 . 2012-08-18 11:06 692616 ----a-w- c:\windows\system32\FlashPlayerApp.exe
2013-10-15 15:06 . 2012-08-18 11:06 71048 ----a-w- c:\windows\system32\FlashPlayerCPLApp.cpl
2013-10-07 15:33 . 2012-12-08 10:24 2324216 ----a-w- c:\windows\system32\ssins.exe
2013-09-25 13:55 . 2013-09-25 13:55 388096 ----a-r- c:\users\Jana\AppData\Roaming\Microsoft\Installer\{45A66726-69BC-466B-A7A4-12FCBA4883D7}\HiJackThis.exe
2013-09-13 15:57 . 2013-09-13 15:57 745472 ----a-w- c:\windows\system32\MsSpellCheckingFacility.exe
2013-09-13 15:57 . 2013-09-13 15:57 185344 ----a-w- c:\windows\system32\elshyph.dll
2013-09-13 15:57 . 2013-09-13 15:57 158720 ----a-w- c:\windows\system32\msls31.dll
2013-09-13 15:57 . 2013-09-13 15:57 138752 ----a-w- c:\windows\system32\wextract.exe
2013-09-13 15:57 . 2013-09-13 15:57 523264 ----a-w- c:\windows\system32\vbscript.dll
2013-09-13 15:57 . 2013-09-13 15:57 150528 ----a-w- c:\windows\system32\iexpress.exe
2013-09-13 15:57 . 2013-09-13 15:57 137216 ----a-w- c:\windows\system32\ieUnatt.exe
2013-09-13 15:57 . 2013-09-13 15:57 38400 ----a-w- c:\windows\system32\imgutil.dll
2013-09-13 15:57 . 2013-09-13 15:57 12800 ----a-w- c:\windows\system32\mshta.exe
2013-09-13 15:57 . 2013-09-13 15:57 110592 ----a-w- c:\windows\system32\IEAdvpack.dll
2013-09-13 15:57 . 2013-09-13 15:57 73728 ----a-w- c:\windows\system32\SetIEInstalledDate.exe
2013-09-13 15:57 . 2013-09-13 15:57 61952 ----a-w- c:\windows\system32\tdc.ocx
2013-09-13 15:57 . 2013-09-13 15:57 48640 ----a-w- c:\windows\system32\mshtmler.dll
2013-09-13 15:57 . 2013-09-13 15:57 719360 ----a-w- c:\windows\system32\mshtmlmedia.dll
2013-09-13 15:57 . 2013-09-13 15:57 361984 ----a-w- c:\windows\system32\html.iec
2013-09-13 15:57 . 2013-09-13 15:57 23040 ----a-w- c:\windows\system32\licmgr10.dll
2013-09-13 15:57 . 2013-09-13 15:57 204800 ----a-w- c:\windows\system32\webcheck.dll
2013-09-13 15:57 . 2013-09-13 15:57 1441280 ----a-w- c:\windows\system32\inetcpl.cpl
2013-09-13 15:49 . 2013-09-13 15:49 9728 ---ha-w- c:\windows\system32\api-ms-win-downlevel-shlwapi-l1-1-0.dll
2013-09-13 15:49 . 2013-09-13 15:49 5632 ---ha-w- c:\windows\system32\api-ms-win-downlevel-shlwapi-l2-1-0.dll
2013-09-13 15:49 . 2013-09-13 15:49 5632 ---ha-w- c:\windows\system32\api-ms-win-downlevel-ole32-l1-1-0.dll
2013-09-13 15:49 . 2013-09-13 15:49 4096 ---ha-w- c:\windows\system32\api-ms-win-downlevel-user32-l1-1-0.dll
2013-09-13 15:49 . 2013-09-13 15:49 3072 ---ha-w- c:\windows\system32\api-ms-win-downlevel-version-l1-1-0.dll
2013-09-13 15:49 . 2013-09-13 15:49 3072 ---ha-w- c:\windows\system32\api-ms-win-downlevel-shell32-l1-1-0.dll
2013-09-13 15:49 . 2013-09-13 15:49 2560 ---ha-w- c:\windows\system32\api-ms-win-downlevel-normaliz-l1-1-0.dll
2013-09-13 15:49 . 2013-09-13 15:49 3584 ---ha-w- c:\windows\system32\api-ms-win-downlevel-advapi32-l2-1-0.dll
2013-09-13 15:49 . 2013-09-13 15:49 906240 ----a-w- c:\windows\system32\FntCache.dll
2013-09-13 15:49 . 2013-09-13 15:49 417792 ----a-w- c:\windows\system32\WMPhoto.dll
2013-09-13 15:49 . 2013-09-13 15:49 364544 ----a-w- c:\windows\system32\XpsGdiConverter.dll
2013-09-13 15:49 . 2013-09-13 15:49 2284544 ----a-w- c:\windows\system32\msmpeg2vdec.dll
2013-09-13 15:49 . 2013-09-13 15:49 220160 ----a-w- c:\windows\system32\d3d10core.dll
2013-09-13 15:49 . 2013-09-13 15:49 1158144 ----a-w- c:\windows\system32\XpsPrint.dll
2013-09-13 15:49 . 2013-09-13 15:49 10752 ---ha-w- c:\windows\system32\api-ms-win-downlevel-advapi32-l1-1-0.dll
2013-09-13 15:49 . 2013-09-13 15:49 604160 ----a-w- c:\windows\system32\d3d10level9.dll
2013-09-13 15:49 . 2013-09-13 15:49 3419136 ----a-w- c:\windows\system32\d2d1.dll
2013-09-13 15:49 . 2013-09-13 15:49 293376 ----a-w- c:\windows\system32\dxgi.dll
2013-09-13 15:49 . 2013-09-13 15:49 249856 ----a-w- c:\windows\system32\d3d10_1core.dll
2013-09-13 15:49 . 2013-09-13 15:49 207872 ----a-w- c:\windows\system32\WindowsCodecsExt.dll
2013-09-13 15:49 . 2013-09-13 15:49 1988096 ----a-w- c:\windows\system32\d3d10warp.dll
2013-09-13 15:49 . 2013-09-13 15:49 187392 ----a-w- c:\windows\system32\UIAnimation.dll
2013-09-13 15:49 . 2013-09-13 15:49 161792 ----a-w- c:\windows\system32\d3d10_1.dll
2013-09-13 15:49 . 2013-09-13 15:49 1080832 ----a-w- c:\windows\system32\d3d10.dll
2013-09-13 15:33 . 2013-09-13 15:33 1505280 ----a-w- c:\windows\system32\d3d11.dll
2013-08-05 01:56 . 2013-09-13 16:04 133056 ----a-w- c:\windows\system32\drivers\ataport.sys
2013-08-02 01:50 . 2013-09-13 15:32 169984 ----a-w- c:\windows\system32\winsrv.dll
2013-08-02 01:49 . 2013-09-13 15:32 293376 ----a-w- c:\windows\system32\KernelBase.dll
2013-08-02 01:48 . 2013-09-13 15:32 5120 ---ha-w- c:\windows\system32\api-ms-win-core-file-l1-1-0.dll
2013-08-02 01:48 . 2013-09-13 15:32 3584 ---ha-w- c:\windows\system32\api-ms-win-core-namedpipe-l1-1-0.dll
2013-08-02 01:48 . 2013-09-13 15:32 4096 ---ha-w- c:\windows\system32\api-ms-win-core-sysinfo-l1-1-0.dll
2013-08-02 01:48 . 2013-09-13 15:32 4096 ---ha-w- c:\windows\system32\api-ms-win-core-synch-l1-1-0.dll
2013-08-02 01:48 . 2013-09-13 15:32 3072 ---ha-w- c:\windows\system32\api-ms-win-core-string-l1-1-0.dll
2013-08-02 01:48 . 2013-09-13 15:32 3072 ---ha-w- c:\windows\system32\api-ms-win-core-rtlsupport-l1-1-0.dll
2013-08-02 01:48 . 2013-09-13 15:32 3072 ---ha-w- c:\windows\system32\api-ms-win-core-profile-l1-1-0.dll
2013-08-02 01:48 . 2013-09-13 15:32 4608 ---ha-w- c:\windows\system32\api-ms-win-core-processthreads-l1-1-0.dll
2013-08-02 01:48 . 2013-09-13 15:32 3584 ---ha-w- c:\windows\system32\api-ms-win-core-processenvironment-l1-1-0.dll
2013-08-02 01:48 . 2013-09-13 15:32 4096 ---ha-w- c:\windows\system32\api-ms-win-core-misc-l1-1-0.dll
2013-08-02 01:48 . 2013-09-13 15:32 3584 ---ha-w- c:\windows\system32\api-ms-win-core-memory-l1-1-0.dll
2013-08-02 01:48 . 2013-09-13 15:32 4096 ---ha-w- c:\windows\system32\api-ms-win-core-localregistry-l1-1-0.dll
2013-08-02 01:48 . 2013-09-13 15:32 3584 ---ha-w- c:\windows\system32\api-ms-win-core-libraryloader-l1-1-0.dll
2013-08-02 01:48 . 2013-09-13 15:32 3072 ---ha-w- c:\windows\system32\api-ms-win-core-io-l1-1-0.dll
2013-08-02 01:48 . 2013-09-13 15:32 3584 ---ha-w- c:\windows\system32\api-ms-win-core-interlocked-l1-1-0.dll
2013-08-02 01:48 . 2013-09-13 15:32 3584 ---ha-w- c:\windows\system32\api-ms-win-core-heap-l1-1-0.dll
2013-08-02 01:48 . 2013-09-13 15:32 3072 ---ha-w- c:\windows\system32\api-ms-win-core-handle-l1-1-0.dll
2013-08-02 01:48 . 2013-09-13 15:32 3072 ---ha-w- c:\windows\system32\api-ms-win-core-fibers-l1-1-0.dll
2013-08-02 01:48 . 2013-09-13 15:32 3072 ---ha-w- c:\windows\system32\api-ms-win-core-errorhandling-l1-1-0.dll
2013-08-02 01:48 . 2013-09-13 15:32 4096 ---ha-w- c:\windows\system32\api-ms-win-core-localization-l1-1-0.dll
2013-08-02 01:48 . 2013-09-13 15:32 3072 ---ha-w- c:\windows\system32\api-ms-win-core-delayload-l1-1-0.dll
2013-08-02 01:48 . 2013-09-13 15:32 3072 ---ha-w- c:\windows\system32\api-ms-win-core-debug-l1-1-0.dll
2013-08-02 01:48 . 2013-09-13 15:32 3072 ---ha-w- c:\windows\system32\api-ms-win-core-datetime-l1-1-0.dll
2013-08-02 01:48 . 2013-09-13 15:32 3072 ---ha-w- c:\windows\system32\api-ms-win-core-console-l1-1-0.dll
2013-08-02 00:52 . 2013-09-13 15:32 271360 ----a-w- c:\windows\system32\conhost.exe
2013-08-02 00:43 . 2013-09-13 15:32 3584 ---ha-w- c:\windows\system32\api-ms-win-core-xstate-l1-1-0.dll
2013-08-02 00:43 . 2013-09-13 15:32 4608 ---ha-w- c:\windows\system32\api-ms-win-core-threadpool-l1-1-0.dll
2013-08-02 00:43 . 2013-09-13 15:32 6144 ---ha-w- c:\windows\system32\api-ms-win-security-base-l1-1-0.dll
2013-08-02 00:43 . 2013-09-13 15:32 3072 ---ha-w- c:\windows\system32\api-ms-win-core-util-l1-1-0.dll
2012-11-29 08:26 . 2012-12-08 07:39 262112 ----a-w- c:\program files\mozilla firefox\components\browsercomps.dll
.
.
(((((((((((((((((((((((((((((((((( Spouštěcí body v registru )))))))))))))))))))))))))))))))))))))))))))))
.
.
*Poznámka* prázdné záznamy a legitimní výchozí údaje nejsou zobrazeny.
REGEDIT4
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\00avast]
@="{472083B0-C522-11CF-8763-00608CC02F24}"
[HKEY_CLASSES_ROOT\CLSID\{472083B0-C522-11CF-8763-00608CC02F24}]
2013-03-06 23:32 121968 ----a-w- c:\program files\AVAST Software\Avast\ashShell.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\AsusWSShellExt_B]
@="{CC5FC992-B0AA-47CD-9DC2-83445083CBB8}"
[HKEY_CLASSES_ROOT\CLSID\{CC5FC992-B0AA-47CD-9DC2-83445083CBB8}]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\AsusWSShellExt_O]
@="{618A47A2-528B-4D9A-AFC8-97D3233511E2}"
[HKEY_CLASSES_ROOT\CLSID\{618A47A2-528B-4D9A-AFC8-97D3233511E2}]
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Advanced SystemCare 6"="c:\program files\IObit\Advanced SystemCare 6\ASCTray.exe" [2012-09-24 490880]
"DAEMON Tools Lite"="c:\program files\DAEMON Tools Lite\DTLite.exe" [2012-11-06 3673728]
"Facebook Update"="c:\users\Jana\AppData\Local\Facebook\Update\FacebookUpdate.exe" [2012-12-28 138096]
"Jet Screenshot"="c:\program files\Jet Screenshot\jetScreenshot.exe" [2013-01-11 1954056]
"Skype"="c:\program files\Skype\Phone\Skype.exe" [2013-06-21 19875432]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"GfxServiceInstall"="c:\windows\system32\GfxCUIServiceInstall.vbs" [2012-06-27 131]
"Adobe Reader Speed Launcher"="c:\program files\Adobe\Reader 9.0\Reader\Reader_sl.exe" [2012-12-19 41208]
"HotkeyMon"="AsusSender.exe" [2012-01-05 34728]
"HotkeyService"="AsusSender.exe" [2012-01-05 34728]
"SuperHybridEngine"="AsusSender.exe" [2012-01-05 34728]
"LiveUpdate"="AsusSender.exe" [2012-01-05 34728]
"CapsHook"="AsusSender.exe" [2012-01-05 34728]
"ASUSWebStorage"="c:\program files\ASUS\ASUS WebStorage\3.0.108.222\AsusWSPanel.exe" [2011-07-29 737104]
"VAWinAgent"="c:\expressgateutil\VAWinAgent.exe" [2012-01-12 45448]
"IgfxTray"="c:\windows\system32\igfxtray.exe" [2012-07-04 142144]
"HotKeysCmds"="c:\windows\system32\hkcmd.exe" [2012-07-04 175936]
"Persistence"="c:\windows\system32\igfxpers.exe" [2012-07-04 168256]
"RtHDVCpl"="c:\program files\Realtek\Audio\HDA\RtHDVCpl.exe" [2011-09-02 10828392]
"SynTPEnh"="c:\program files\Synaptics\SynTP\SynTPEnh.exe" [2011-05-05 2262312]
"ASUSPRP"="c:\program files\ASUS\APRP\APRP.EXE" [2012-08-18 3331312]
"Adobe ARM"="c:\program files\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2012-12-03 946352]
"avast"="c:\program files\AVAST Software\Avast\avastUI.exe" [2013-03-06 4767304]
"SunJavaUpdateSched"="c:\program files\Common Files\Java\Java Update\jusched.exe" [2012-07-03 252848]
"WebcamMaxMoniter"="c:\program files\WebcamMax\wcmmon.exe" [2007-08-01 450048]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce]
"000_TmTdiUninstall"="c:\windows\TmNSCIns.dll" [2010-09-17 203600]
.
c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\
AsusVibeLauncher.lnk - c:\program files\Asus\AsusVibe\AsusVibeLauncher.exe /start [2012-8-18 549040]
Bluetooth.lnk - c:\program files\WIDCOMM\Bluetooth Software\BTTray.exe [2010-5-21 828704]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorAdmin"= 5 (0x5)
"ConsentPromptBehaviorUser"= 3 (0x3)
"EnableUIADesktopToggle"= 0 (0x0)
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\drivers32]
"mixer2"=wdmaud.drv
.
R2 Skype C2C Service;Skype C2C Service;c:\programdata\Skype\Toolbars\Skype C2C Service\c2c_service.exe [2013-10-09 3275136]
R2 SkypeUpdate;Skype Updater;c:\program files\Skype\Updater\Updater.exe [2013-06-21 162408]
R3 aswVmm;aswVmm; [x]
R3 btwampfl;Bluetooth AMP USB Filter;c:\windows\system32\drivers\btwampfl.sys [2010-05-21 293928]
R3 btwl2cap;Bluetooth L2CAP Service;c:\windows\system32\DRIVERS\btwl2cap.sys [2010-05-21 33320]
R3 RdpVideoMiniport;Remote Desktop Video Miniport Driver;c:\windows\system32\drivers\rdpvideominiport.sys [2013-01-20 14848]
R3 ss_bbus;SAMSUNG USB Mobile Device (WDM);c:\windows\system32\DRIVERS\ss_bbus.sys [2009-09-19 98432]
R3 ss_bmdfl;SAMSUNG USB Mobile Modem (Filter);c:\windows\system32\DRIVERS\ss_bmdfl.sys [2009-09-19 14848]
R3 ss_bmdm;SAMSUNG USB Mobile Modem;c:\windows\system32\DRIVERS\ss_bmdm.sys [2009-09-19 123648]
S0 aswRvrt;aswRvrt; [x]
S1 AsUpIO;AsUpIO;c:\windows\system32\drivers\AsUpIO.sys [2010-08-03 11832]
S1 aswSnx;aswSnx; [x]
S1 aswSP;aswSP; [x]
S1 dtsoftbus01;DAEMON Tools Virtual Bus Driver;c:\windows\system32\DRIVERS\dtsoftbus01.sys [2012-12-08 242240]
S2 AdvancedSystemCareService6;Advanced SystemCare Service 6;c:\program files\IObit\Advanced SystemCare 6\ASCService.exe [2012-10-31 464256]
S2 ASUS InstantOn;ASUS InstantOn Service;c:\program files\ASUS\InstantOn for EPC\InsOnSrv.exe [2011-12-01 92800]
S2 AsusService;Asus Launcher Service;c:\windows\system32\AsusService.exe [2012-01-11 224680]
S2 aswFsBlk;aswFsBlk; [x]
S2 aswMonFlt;aswMonFlt;c:\windows\system32\drivers\aswMonFlt.sys [2013-03-06 66336]
S2 CamthWDM;WebcamMax, WDM Video Capture;c:\windows\system32\DRIVERS\CamthWDM.sys [2007-01-11 243584]
S2 MBAMService;MBAMService;c:\program files\Malwarebytes' Anti-Malware\mbamservice.exe [2013-04-04 701512]
S2 ssinstall;SInstalátor;c:\windows\System32\ssins.exe [2013-10-07 2324216]
S3 igddim32;igddim32;c:\windows\system32\DRIVERS\igddim32.sys [2012-06-27 1349120]
S3 igdkmd32;igdkmd32;c:\windows\system32\DRIVERS\igdkmd32.sys [2012-06-27 435200]
S3 IntcDAud;Intel(R) Display Audio;c:\windows\system32\DRIVERS\IntcDAud.sys [2011-06-09 278528]
S3 L1C;NDIS Miniport Driver for Atheros AR81xx PCI-E Ethernet Controller;c:\windows\system32\DRIVERS\L1C62x86.sys [2011-11-01 91760]
S3 MBAMProtector;MBAMProtector;c:\windows\system32\drivers\mbam.sys [2013-04-04 22856]
.
.
--- Ostatní služby/ovladače v paměti ---
.
*NewlyCreated* - WS2IFSL
*Deregistered* - tmactmon
*Deregistered* - tmcomm
*Deregistered* - tmevtmgr
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost]
LocalServiceAndNoImpersonation REG_MULTI_SZ SSDPSRV upnphost SCardSvr TBS fdrespub AppIDSvc QWAVE wcncsvc
.
[HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{8A69D345-D564-463c-AFF1-A69D9E530F96}]
2013-10-19 19:31 1185744 ----a-w- c:\program files\Google\Chrome\Application\30.0.1599.101\Installer\chrmstp.exe
.
Obsah adresáře 'Naplánované úlohy'
.
2013-10-30 c:\windows\Tasks\Adobe Flash Player Updater.job
- c:\windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2012-08-18 15:06]
.
2013-10-29 c:\windows\Tasks\FacebookUpdateTaskUserS-1-5-21-2982817381-1060741672-405086574-1000Core.job
- c:\users\Jana\AppData\Local\Facebook\Update\FacebookUpdate.exe [2012-12-28 13:44]
.
2013-10-30 c:\windows\Tasks\FacebookUpdateTaskUserS-1-5-21-2982817381-1060741672-405086574-1000UA.job
- c:\users\Jana\AppData\Local\Facebook\Update\FacebookUpdate.exe [2012-12-28 13:44]
.
2013-10-29 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
- c:\program files\Google\Update\GoogleUpdate.exe [2013-04-28 10:58]
.
2013-10-30 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
- c:\program files\Google\Update\GoogleUpdate.exe [2013-04-28 10:58]
.
2013-10-30 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2982817381-1060741672-405086574-1000Core.job
- c:\users\Jana\AppData\Local\Google\Update\GoogleUpdate.exe [2013-05-12 16:04]
.
2013-10-30 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2982817381-1060741672-405086574-1000UA.job
- c:\users\Jana\AppData\Local\Google\Update\GoogleUpdate.exe [2013-05-12 16:04]
.
.
------- Doplňkový sken -------
.
uStart Page = hxxp://www.google.com
IE: E&xportovat do aplikace Microsoft Excel - c:\progra~1\MIF5BA~1\Office12\EXCEL.EXE/3000
IE: Odeslat obrázek do zařízení &Bluetooth... - c:\program files\WIDCOMM\Bluetooth Software\btsendto_ie_ctx.htm
IE: Odeslat stránku do zařízení &Bluetooth... - c:\program files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
TCP: DhcpNameServer = 192.168.0.1
FF - ProfilePath - c:\users\Jana\AppData\Roaming\Mozilla\Firefox\Profiles\mvo7k138.default\
.
.
--------------------- ZAMKNUTÉ KLÍČE V REGISTRU ---------------------
.
[HKEY_USERS\.Default\Software\Microsoft\Internet Explorer\Approved Extensions]
@Denied: (2) (LocalSystem)
"{8E5E2654-AD2D-48BF-AC2D-D17F00898D06}"=hex:51,66,7a,6c,4c,1d,38,12,3a,25,4d,
8a,1f,e3,d1,0d,d3,3b,92,3f,05,d7,c9,12
"{9E35E959-D723-4B5F-9207-2A94F8AB9068}"=hex:51,66,7a,6c,4c,1d,38,12,37,ea,26,
9a,11,99,31,0e,ed,11,69,d4,fd,f5,d4,7c
"{18DF081C-E8AD-4283-A596-FA578C2EBDC3}"=hex:51,66,7a,6c,4c,1d,38,12,72,0b,cc,
1c,9f,a6,ed,07,da,80,b9,17,89,70,f9,d7
"{1CA1377B-DC1D-4A52-9585-6E06050FAC53}"=hex:51,66,7a,6c,4c,1d,38,12,15,34,b2,
18,2f,92,3c,0f,ea,93,2d,46,00,51,e8,47
"{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}"=hex:51,66,7a,6c,4c,1d,38,12,d5,94,07,
72,c2,98,42,03,c9,fd,97,9a,f4,87,69,57
"{9030D464-4C02-4ABF-8ECC-5164760863C6}"=hex:51,66,7a,6c,4c,1d,38,12,0a,d7,23,
94,30,02,d1,0f,f1,da,12,24,73,56,27,d2
"{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}"=hex:51,66,7a,6c,4c,1d,38,12,07,5b,93,
aa,6e,60,ba,0b,f0,6d,b2,b7,80,44,00,83
"{BBACBAFD-FA5E-4079-8B33-00EB9F13D4AC}"=hex:51,66,7a,6c,4c,1d,38,12,93,b9,bf,
bf,6c,b4,17,05,f4,25,43,ab,9a,4d,90,b8
"{D381FF29-7CFB-4D4E-B92A-C4EDDC696614}"=hex:51,66,7a,6c,4c,1d,38,12,47,fc,92,
d7,c9,32,20,08,c6,3c,87,ad,d9,37,22,00
"{DBC80044-A445-435B-BC74-9C25C1C588A9}"=hex:51,66,7a,6c,4c,1d,38,12,2a,03,db,
df,77,ea,35,06,c3,62,df,65,c4,9b,cc,bd
"{FF059E31-CC5A-4E2E-BF3B-96E929D65503}"=hex:51,66,7a,6c,4c,1d,38,12,5f,9d,16,
fb,68,82,40,0b,c0,2d,d5,a9,2c,88,11,17
"{BDEADE7F-C265-11D0-BCED-00A0C90AB50F}"=hex:51,66,7a,6c,4c,1d,38,12,11,dd,f9,
b9,57,8c,be,54,c3,fb,43,e0,cc,54,f1,1b
.
[HKEY_USERS\.Default\Software\Microsoft\Internet Explorer\ApprovedExtensionsMigration]
@Denied: (2) (LocalSystem)
"Timestamp"=hex:0e,32,02,52,ac,b0,ce,01
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\windows\\system32\\Macromed\\Flash\\FlashUtil32_11_9_900_117_ActiveX.exe,-101"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\Elevation]
"Enabled"=dword:00000001
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\LocalServer32]
@="c:\\windows\\system32\\Macromed\\Flash\\FlashUtil32_11_9_900_117_ActiveX.exe"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
.
[HKEY_LOCAL_MACHINE\software\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="IFlashBroker5"
.
[HKEY_LOCAL_MACHINE\software\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"
.
[HKEY_LOCAL_MACHINE\software\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
.
[HKEY_LOCAL_MACHINE\software\Classes\VideoLAN.VLCPlugin.*1*]
@="?????????????????? v1"
.
[HKEY_LOCAL_MACHINE\software\Classes\VideoLAN.VLCPlugin.*1*\CLSID]
@="{E23FE9C6-778E-49D4-B537-38FCDE4887D8}"
.
[HKEY_LOCAL_MACHINE\software\Classes\VideoLAN.VLCPlugin.*2*]
@="?????????????????? v2"
.
[HKEY_LOCAL_MACHINE\software\Classes\VideoLAN.VLCPlugin.*2*\CLSID]
@="{9BE31822-FDAD-461B-AD51-BE1D1C159921}"
.
[HKEY_LOCAL_MACHINE\system\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0000\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\system\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0001\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\system\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0002\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\system\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0003\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\system\ControlSet001\Control\PCW\Security]
@Denied: (Full) (Everyone)
.
--------------------- Knihovny navázané na běžící procesy ---------------------
.
- - - - - - - > 'Explorer.exe'(25644)
c:\progra~1\ASUS\ASUSWE~1\30108~1.222\ASUSWS~1.DLL
.
Celkový čas: 2013-10-30 12:21:38
ComboFix-quarantined-files.txt 2013-10-30 11:21
ComboFix2.txt 2013-10-28 11:04
ComboFix3.txt 2013-10-27 15:45
.
Před spuštěním: Volných bajtů: 62 582 149 120
Po spuštění: Volných bajtů: 62 336 802 816
.
- - End Of File - - 761A807B1F1BE9D90104183E048BE594
A36C5E4F47E84449FF07ED3517B43A31

[memphisto]

To Trend Micro je odinstalováno?

[fandam007]

Ano

[jaro3]

Otevři si Poznámkový blok (Start -> Spustit... a napiš do okna Notepad a dej Ok.
Zkopíruj do něj následující celý text označený zeleně:

Kód: Vybrat vše

KillAll::
SecCenter::
AV: Trend Micro Titanium *Disabled/Updated* {68F968AC-2AA0-091D-848C-803E83E35902}
SP: Trend Micro Titanium *Disabled/Updated* {D3988948-0C9A-0693-BE3C-BB4CF86413BF}

File::
c:\windows\Tasks\FacebookUpdateTaskUserS-1-5-21-2982817381-1060741672-405086574-1000Core.job
c:\windows\Tasks\FacebookUpdateTaskUserS-1-5-21-2982817381-1060741672-405086574-1000UA.job
c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2982817381-1060741672-405086574-1000Core.job
c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2982817381-1060741672-405086574-1000UA.job

Folder::
c:\users\Jana\AppData\Local\Facebook\Update
c:\program files\Skype\Updater
c:\program files\Google\Update
c:\users\Jana\AppData\Local\Google\Update

Driver::
SkypeUpdate

Registry::
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Facebook Update"=-

RegLock::
[HKEY_USERS\.Default\Software\Microsoft\Internet Explorer\Approved Extensions]
@Denied: (2) (LocalSystem)
"{8E5E2654-AD2D-48BF-AC2D-D17F00898D06}"=hex:51,66,7a,6c,4c,1d,38,12,3a,25,4d,
 8a,1f,e3,d1,0d,d3,3b,92,3f,05,d7,c9,12
"{9E35E959-D723-4B5F-9207-2A94F8AB9068}"=hex:51,66,7a,6c,4c,1d,38,12,37,ea,26,
 9a,11,99,31,0e,ed,11,69,d4,fd,f5,d4,7c
"{18DF081C-E8AD-4283-A596-FA578C2EBDC3}"=hex:51,66,7a,6c,4c,1d,38,12,72,0b,cc,
 1c,9f,a6,ed,07,da,80,b9,17,89,70,f9,d7
"{1CA1377B-DC1D-4A52-9585-6E06050FAC53}"=hex:51,66,7a,6c,4c,1d,38,12,15,34,b2,
 18,2f,92,3c,0f,ea,93,2d,46,00,51,e8,47
"{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}"=hex:51,66,7a,6c,4c,1d,38,12,d5,94,07,
 72,c2,98,42,03,c9,fd,97,9a,f4,87,69,57
"{9030D464-4C02-4ABF-8ECC-5164760863C6}"=hex:51,66,7a,6c,4c,1d,38,12,0a,d7,23,
 94,30,02,d1,0f,f1,da,12,24,73,56,27,d2
"{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}"=hex:51,66,7a,6c,4c,1d,38,12,07,5b,93,
 aa,6e,60,ba,0b,f0,6d,b2,b7,80,44,00,83
"{BBACBAFD-FA5E-4079-8B33-00EB9F13D4AC}"=hex:51,66,7a,6c,4c,1d,38,12,93,b9,bf,
 bf,6c,b4,17,05,f4,25,43,ab,9a,4d,90,b8
"{D381FF29-7CFB-4D4E-B92A-C4EDDC696614}"=hex:51,66,7a,6c,4c,1d,38,12,47,fc,92,
 d7,c9,32,20,08,c6,3c,87,ad,d9,37,22,00
"{DBC80044-A445-435B-BC74-9C25C1C588A9}"=hex:51,66,7a,6c,4c,1d,38,12,2a,03,db,
 df,77,ea,35,06,c3,62,df,65,c4,9b,cc,bd
"{FF059E31-CC5A-4E2E-BF3B-96E929D65503}"=hex:51,66,7a,6c,4c,1d,38,12,5f,9d,16,
 fb,68,82,40,0b,c0,2d,d5,a9,2c,88,11,17
"{BDEADE7F-C265-11D0-BCED-00A0C90AB50F}"=hex:51,66,7a,6c,4c,1d,38,12,11,dd,f9,
 b9,57,8c,be,54,c3,fb,43,e0,cc,54,f1,1b
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\windows\\system32\\Macromed\\Flash\\FlashUtil32_11_9_900_117_ActiveX.exe,-101"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\Elevation]
"Enabled"=dword:00000001
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\LocalServer32]
@="c:\\windows\\system32\\Macromed\\Flash\\FlashUtil32_11_9_900_117_ActiveX.exe"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
.
[HKEY_LOCAL_MACHINE\software\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="IFlashBroker5"
.
[HKEY_LOCAL_MACHINE\software\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"
.
[HKEY_LOCAL_MACHINE\software\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
[HKEY_LOCAL_MACHINE\system\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0000\AllUserSettings]
[HKEY_LOCAL_MACHINE\system\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0001\AllUserSettings]
[HKEY_LOCAL_MACHINE\system\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0002\AllUserSettings]
[HKEY_LOCAL_MACHINE\system\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0003\AllUserSettings]
[HKEY_LOCAL_MACHINE\system\ControlSet001\Control\PCW\Security]
@Denied: (Full) (Everyone)


Zvol možnost Soubor -> Uložit jako... a nastav tyto parametry:
Název souboru: zde napiš: CFScript.txt
Uložit jako typ: tak tam vyber Všechny soubory
Ulož soubor na plochu.
Ukonči všechna aktivní okna.

Uchop myší vytvořený skript CFScript.txt, přemísti ho nad stažený program ComboFix.exe a když se oba soubory překryjí, skript upusť.
- Automaticky se spustí ComboFix
- Vlož sem log, který vyběhne v závěru čistícího procesu + nový log z HJT

Upozornění : Může se stát, že po aplikaci Combofixu a restartu počítače, Windows nenaběhnou , nebo nenajede plocha , budou problémy s připojením, pak znovu restartuj počítač, pokud to nepomůže , po restartu mačkej klávesu F8 a pak zvol poslední známou funkční konfiguraci. , či použij bod obnovy.

Stáhni si aswMBR
na svojí plochu. Uzavři všechna okna , programy a prohlížeče. Poklepej na aswMBR.exe. Pokud se objeví hláška o možnosti stáhnutí databáze Avastu , klikni na NE. Poté klikni na „Scan“ . Po skenu klikni na „Save Log“ a ulož si log na plochu .Zkopíruj sem celý obsah toho logu. Pak klikni na „Exit“ k zavření programu.

V možnostech složky si povol zobrazování skrytých souborů a složek+ odškrtni zatržítko skrýt chráněné soubory operačního systému

Toto otestuj na Virustotal
c:\windows\system32\ssins.exe

Klikni vpravo od okénka na Vybrat a v Exploreru najdi požadovaný soubor v Tvém PC. Označ ho myší a klikni na Otevřít , poté klikni na Send File. Pokud už byl soubor testován , objeví se okno ve kterém klikni na Reanalyze. Soubor se začne postupně testovat více antivirovými programy. Až skončí test posledního antiviru , objeví se nahoře result a červeně počet nákaz , např. 0/43 , nebo 1/43. Pak zkopíruj myší odkaz na tuto stránku a vlož ji do svého příspěvku.

Nebo na:
http://www.virscan.org/

[fandam007]

Tady je log z ComboFix:

ComboFix 13-10-30.01 - Jana 02.11.2013 10:52:30.4.4 - x86
Microsoft Windows 7 Starter 6.1.7601.1.1250.420.1029.18.1012.180 [GMT 1:00]
Spuštěný z: c:\users\Jana\Desktop\ComboFix.exe
Použité ovládací přepínače :: c:\users\Jana\Desktop\CFScript.txt
AV: avast! Antivirus *Disabled/Updated* {2B2D1395-420B-D5C9-657E-930FE358FC3C}
SP: avast! Antivirus *Disabled/Updated* {904CF271-6431-DA47-5FCE-A87D98DFB681}
SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.
FILE ::
"c:\windows\Tasks\FacebookUpdateTaskUserS-1-5-21-2982817381-1060741672-405086574-1000Core.job"
"c:\windows\Tasks\FacebookUpdateTaskUserS-1-5-21-2982817381-1060741672-405086574-1000UA.job"
"c:\windows\Tasks\GoogleUpdateTaskMachineCore.job"
"c:\windows\Tasks\GoogleUpdateTaskMachineUA.job"
"c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2982817381-1060741672-405086574-1000Core.job"
"c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2982817381-1060741672-405086574-1000UA.job"
.
.
((((((((((((((((((((((((((((((((((((((( Ostatní výmazy )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
.
((((((((((((((((((((((((((((((((((((((( Ovladače/Služby )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
-------\Service_SkypeUpdate
-------\Service_gupdate
-------\Service_gupdatem
.
.
((((((((((((((((((((((((( Soubory vytvořené od 2013-10-02 do 2013-11-02 )))))))))))))))))))))))))))))))
.
.
2013-11-02 10:22 . 2013-11-02 10:22 -------- d-----w- c:\users\Default\AppData\Local\temp
2013-11-02 10:22 . 2013-11-02 10:22 -------- d-----w- c:\users\Guest\AppData\Local\temp
2013-10-29 17:20 . 2013-10-29 17:20 62576 ----a-w- c:\programdata\Microsoft\Windows Defender\Definition Updates\{B0086F55-92DD-4AA4-A3EE-C328A186AAA7}\offreg.dll
2013-10-28 11:04 . 2013-11-02 10:35 -------- d-----w- c:\users\Jana\AppData\Local\temp
2013-10-28 10:15 . 2013-10-16 00:20 7796464 ----a-w- c:\programdata\Microsoft\Windows Defender\Definition Updates\{B0086F55-92DD-4AA4-A3EE-C328A186AAA7}\mpengine.dll
2013-10-28 10:15 . 2013-09-03 13:35 238872 ------w- c:\windows\system32\MpSigStub.exe
2013-10-26 20:32 . 2013-10-26 20:32 -------- d-----w- c:\windows\ERUNT
2013-10-20 15:35 . 2013-10-20 15:35 -------- d-----w- c:\users\Jana\AppData\Roaming\Malwarebytes
2013-10-20 15:34 . 2013-10-20 15:34 -------- d-----w- c:\programdata\Malwarebytes
2013-10-20 15:34 . 2013-04-04 12:50 22856 ----a-w- c:\windows\system32\drivers\mbam.sys
2013-10-20 15:34 . 2013-10-20 15:35 -------- d-----w- c:\program files\Malwarebytes' Anti-Malware
2013-10-20 14:49 . 2013-10-20 15:21 -------- d-----w- C:\AdwCleaner
2013-10-17 18:19 . 2013-10-17 18:27 -------- d-----w- c:\windows\system32\MRT
2013-10-15 15:29 . 2013-10-15 15:29 163504 ----a-w- c:\programdata\Microsoft\Windows\Sqm\Manifest\Sqm10145.bin
2013-10-15 15:22 . 2013-07-04 11:50 530432 ----a-w- c:\windows\system32\comctl32.dll
2013-10-15 15:22 . 2013-07-03 04:02 36352 ----a-w- c:\windows\system32\drivers\usbscan.sys
2013-10-15 15:22 . 2013-07-03 03:36 55808 ----a-w- c:\windows\system32\drivers\hidclass.sys
2013-10-15 15:22 . 2013-07-03 03:36 25728 ----a-w- c:\windows\system32\drivers\hidparse.sys
2013-10-15 15:22 . 2013-09-08 02:07 1294272 ----a-w- c:\windows\system32\drivers\tcpip.sys
2013-10-15 15:22 . 2013-09-08 02:03 231424 ----a-w- c:\windows\system32\mswsock.dll
2013-10-15 15:22 . 2013-09-14 00:48 338944 ----a-w- c:\windows\system32\drivers\afd.sys
2013-10-15 15:20 . 2013-07-04 11:57 205824 ----a-w- c:\windows\system32\WebClnt.dll
2013-10-15 15:20 . 2013-07-04 11:51 81920 ----a-w- c:\windows\system32\davclnt.dll
2013-10-15 15:20 . 2013-07-04 09:48 115712 ----a-w- c:\windows\system32\drivers\mrxdav.sys
2013-10-15 15:20 . 2013-07-12 10:08 146816 ----a-w- c:\windows\system32\drivers\usbvideo.sys
2013-10-15 15:20 . 2013-07-12 10:07 86016 ----a-w- c:\windows\system32\drivers\usbcir.sys
2013-10-15 15:20 . 2013-06-25 22:56 527064 ----a-w- c:\windows\system32\drivers\Wdf01000.sys
2013-10-15 15:06 . 2013-10-15 15:06 17813896 ----a-w- c:\windows\system32\FlashPlayerInstaller.exe
2013-10-09 09:58 . 2013-10-09 09:58 4879744 ----a-w- c:\program files\Mozilla Firefox\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A}\components\SkypeFfComponent.dll
2013-10-09 09:58 . 2013-10-09 09:58 4879744 ----a-w- c:\program files\Mozilla Firefox\browser\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A}\components\SkypeFfComponent.dll
.
.
.
(((((((((((((((((((((((((((((((((((((((( Find3M výpis ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2013-10-15 15:06 . 2012-08-18 11:06 692616 ----a-w- c:\windows\system32\FlashPlayerApp.exe
2013-10-15 15:06 . 2012-08-18 11:06 71048 ----a-w- c:\windows\system32\FlashPlayerCPLApp.cpl
2013-10-07 15:33 . 2012-12-08 10:24 2324216 ----a-w- c:\windows\system32\ssins.exe
2013-09-25 13:55 . 2013-09-25 13:55 388096 ----a-r- c:\users\Jana\AppData\Roaming\Microsoft\Installer\{45A66726-69BC-466B-A7A4-12FCBA4883D7}\HiJackThis.exe
2013-09-13 15:57 . 2013-09-13 15:57 745472 ----a-w- c:\windows\system32\MsSpellCheckingFacility.exe
2013-09-13 15:57 . 2013-09-13 15:57 185344 ----a-w- c:\windows\system32\elshyph.dll
2013-09-13 15:57 . 2013-09-13 15:57 158720 ----a-w- c:\windows\system32\msls31.dll
2013-09-13 15:57 . 2013-09-13 15:57 138752 ----a-w- c:\windows\system32\wextract.exe
2013-09-13 15:57 . 2013-09-13 15:57 523264 ----a-w- c:\windows\system32\vbscript.dll
2013-09-13 15:57 . 2013-09-13 15:57 150528 ----a-w- c:\windows\system32\iexpress.exe
2013-09-13 15:57 . 2013-09-13 15:57 137216 ----a-w- c:\windows\system32\ieUnatt.exe
2013-09-13 15:57 . 2013-09-13 15:57 38400 ----a-w- c:\windows\system32\imgutil.dll
2013-09-13 15:57 . 2013-09-13 15:57 12800 ----a-w- c:\windows\system32\mshta.exe
2013-09-13 15:57 . 2013-09-13 15:57 110592 ----a-w- c:\windows\system32\IEAdvpack.dll
2013-09-13 15:57 . 2013-09-13 15:57 73728 ----a-w- c:\windows\system32\SetIEInstalledDate.exe
2013-09-13 15:57 . 2013-09-13 15:57 61952 ----a-w- c:\windows\system32\tdc.ocx
2013-09-13 15:57 . 2013-09-13 15:57 48640 ----a-w- c:\windows\system32\mshtmler.dll
2013-09-13 15:57 . 2013-09-13 15:57 719360 ----a-w- c:\windows\system32\mshtmlmedia.dll
2013-09-13 15:57 . 2013-09-13 15:57 361984 ----a-w- c:\windows\system32\html.iec
2013-09-13 15:57 . 2013-09-13 15:57 23040 ----a-w- c:\windows\system32\licmgr10.dll
2013-09-13 15:57 . 2013-09-13 15:57 204800 ----a-w- c:\windows\system32\webcheck.dll
2013-09-13 15:57 . 2013-09-13 15:57 1441280 ----a-w- c:\windows\system32\inetcpl.cpl
2013-09-13 15:49 . 2013-09-13 15:49 9728 ---ha-w- c:\windows\system32\api-ms-win-downlevel-shlwapi-l1-1-0.dll
2013-09-13 15:49 . 2013-09-13 15:49 5632 ---ha-w- c:\windows\system32\api-ms-win-downlevel-shlwapi-l2-1-0.dll
2013-09-13 15:49 . 2013-09-13 15:49 5632 ---ha-w- c:\windows\system32\api-ms-win-downlevel-ole32-l1-1-0.dll
2013-09-13 15:49 . 2013-09-13 15:49 4096 ---ha-w- c:\windows\system32\api-ms-win-downlevel-user32-l1-1-0.dll
2013-09-13 15:49 . 2013-09-13 15:49 3072 ---ha-w- c:\windows\system32\api-ms-win-downlevel-version-l1-1-0.dll
2013-09-13 15:49 . 2013-09-13 15:49 3072 ---ha-w- c:\windows\system32\api-ms-win-downlevel-shell32-l1-1-0.dll
2013-09-13 15:49 . 2013-09-13 15:49 2560 ---ha-w- c:\windows\system32\api-ms-win-downlevel-normaliz-l1-1-0.dll
2013-09-13 15:49 . 2013-09-13 15:49 3584 ---ha-w- c:\windows\system32\api-ms-win-downlevel-advapi32-l2-1-0.dll
2013-09-13 15:49 . 2013-09-13 15:49 906240 ----a-w- c:\windows\system32\FntCache.dll
2013-09-13 15:49 . 2013-09-13 15:49 417792 ----a-w- c:\windows\system32\WMPhoto.dll
2013-09-13 15:49 . 2013-09-13 15:49 364544 ----a-w- c:\windows\system32\XpsGdiConverter.dll
2013-09-13 15:49 . 2013-09-13 15:49 2284544 ----a-w- c:\windows\system32\msmpeg2vdec.dll
2013-09-13 15:49 . 2013-09-13 15:49 220160 ----a-w- c:\windows\system32\d3d10core.dll
2013-09-13 15:49 . 2013-09-13 15:49 1158144 ----a-w- c:\windows\system32\XpsPrint.dll
2013-09-13 15:49 . 2013-09-13 15:49 10752 ---ha-w- c:\windows\system32\api-ms-win-downlevel-advapi32-l1-1-0.dll
2013-09-13 15:49 . 2013-09-13 15:49 604160 ----a-w- c:\windows\system32\d3d10level9.dll
2013-09-13 15:49 . 2013-09-13 15:49 3419136 ----a-w- c:\windows\system32\d2d1.dll
2013-09-13 15:49 . 2013-09-13 15:49 293376 ----a-w- c:\windows\system32\dxgi.dll
2013-09-13 15:49 . 2013-09-13 15:49 249856 ----a-w- c:\windows\system32\d3d10_1core.dll
2013-09-13 15:49 . 2013-09-13 15:49 207872 ----a-w- c:\windows\system32\WindowsCodecsExt.dll
2013-09-13 15:49 . 2013-09-13 15:49 1988096 ----a-w- c:\windows\system32\d3d10warp.dll
2013-09-13 15:49 . 2013-09-13 15:49 187392 ----a-w- c:\windows\system32\UIAnimation.dll
2013-09-13 15:49 . 2013-09-13 15:49 161792 ----a-w- c:\windows\system32\d3d10_1.dll
2013-09-13 15:49 . 2013-09-13 15:49 1080832 ----a-w- c:\windows\system32\d3d10.dll
2013-09-13 15:33 . 2013-09-13 15:33 1505280 ----a-w- c:\windows\system32\d3d11.dll
2013-08-05 01:56 . 2013-09-13 16:04 133056 ----a-w- c:\windows\system32\drivers\ataport.sys
2012-11-29 08:26 . 2012-12-08 07:39 262112 ----a-w- c:\program files\mozilla firefox\components\browsercomps.dll
.
.
(((((((((((((((((((((((((((((((((( Spouštěcí body v registru )))))))))))))))))))))))))))))))))))))))))))))
.
.
*Poznámka* prázdné záznamy a legitimní výchozí údaje nejsou zobrazeny.
REGEDIT4
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\00avast]
@="{472083B0-C522-11CF-8763-00608CC02F24}"
[HKEY_CLASSES_ROOT\CLSID\{472083B0-C522-11CF-8763-00608CC02F24}]
2013-03-06 23:32 121968 ----a-w- c:\program files\AVAST Software\Avast\ashShell.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\AsusWSShellExt_B]
@="{CC5FC992-B0AA-47CD-9DC2-83445083CBB8}"
[HKEY_CLASSES_ROOT\CLSID\{CC5FC992-B0AA-47CD-9DC2-83445083CBB8}]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\AsusWSShellExt_O]
@="{618A47A2-528B-4D9A-AFC8-97D3233511E2}"
[HKEY_CLASSES_ROOT\CLSID\{618A47A2-528B-4D9A-AFC8-97D3233511E2}]
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Advanced SystemCare 6"="c:\program files\IObit\Advanced SystemCare 6\ASCTray.exe" [2012-09-24 490880]
"DAEMON Tools Lite"="c:\program files\DAEMON Tools Lite\DTLite.exe" [2012-11-06 3673728]
"Jet Screenshot"="c:\program files\Jet Screenshot\jetScreenshot.exe" [2013-01-11 1954056]
"Skype"="c:\program files\Skype\Phone\Skype.exe" [2013-06-21 19875432]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"GfxServiceInstall"="c:\windows\system32\GfxCUIServiceInstall.vbs" [2012-06-27 131]
"Adobe Reader Speed Launcher"="c:\program files\Adobe\Reader 9.0\Reader\Reader_sl.exe" [2012-12-19 41208]
"HotkeyMon"="AsusSender.exe" [2012-01-05 34728]
"HotkeyService"="AsusSender.exe" [2012-01-05 34728]
"SuperHybridEngine"="AsusSender.exe" [2012-01-05 34728]
"LiveUpdate"="AsusSender.exe" [2012-01-05 34728]
"CapsHook"="AsusSender.exe" [2012-01-05 34728]
"ASUSWebStorage"="c:\program files\ASUS\ASUS WebStorage\3.0.108.222\AsusWSPanel.exe" [2011-07-29 737104]
"VAWinAgent"="c:\expressgateutil\VAWinAgent.exe" [2012-01-12 45448]
"IgfxTray"="c:\windows\system32\igfxtray.exe" [2012-07-04 142144]
"HotKeysCmds"="c:\windows\system32\hkcmd.exe" [2012-07-04 175936]
"Persistence"="c:\windows\system32\igfxpers.exe" [2012-07-04 168256]
"RtHDVCpl"="c:\program files\Realtek\Audio\HDA\RtHDVCpl.exe" [2011-09-02 10828392]
"SynTPEnh"="c:\program files\Synaptics\SynTP\SynTPEnh.exe" [2011-05-05 2262312]
"ASUSPRP"="c:\program files\ASUS\APRP\APRP.EXE" [2012-08-18 3331312]
"Adobe ARM"="c:\program files\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2012-12-03 946352]
"avast"="c:\program files\AVAST Software\Avast\avastUI.exe" [2013-03-06 4767304]
"SunJavaUpdateSched"="c:\program files\Common Files\Java\Java Update\jusched.exe" [2012-07-03 252848]
"WebcamMaxMoniter"="c:\program files\WebcamMax\wcmmon.exe" [2007-08-01 450048]
.
c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\
AsusVibeLauncher.lnk - c:\program files\Asus\AsusVibe\AsusVibeLauncher.exe /start [2012-8-18 549040]
Bluetooth.lnk - c:\program files\WIDCOMM\Bluetooth Software\BTTray.exe [2010-5-21 828704]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorAdmin"= 5 (0x5)
"ConsentPromptBehaviorUser"= 3 (0x3)
"EnableUIADesktopToggle"= 0 (0x0)
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\drivers32]
"mixer2"=wdmaud.drv
.
R3 aswVmm;aswVmm; [x]
R3 btwampfl;Bluetooth AMP USB Filter;c:\windows\system32\drivers\btwampfl.sys [2010-05-21 293928]
R3 btwl2cap;Bluetooth L2CAP Service;c:\windows\system32\DRIVERS\btwl2cap.sys [2010-05-21 33320]
R3 RdpVideoMiniport;Remote Desktop Video Miniport Driver;c:\windows\system32\drivers\rdpvideominiport.sys [2013-01-20 14848]
R3 ss_bbus;SAMSUNG USB Mobile Device (WDM);c:\windows\system32\DRIVERS\ss_bbus.sys [2009-09-19 98432]
R3 ss_bmdfl;SAMSUNG USB Mobile Modem (Filter);c:\windows\system32\DRIVERS\ss_bmdfl.sys [2009-09-19 14848]
R3 ss_bmdm;SAMSUNG USB Mobile Modem;c:\windows\system32\DRIVERS\ss_bmdm.sys [2009-09-19 123648]
R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys [2013-01-20 49664]
R3 TsUsbGD;Remote Desktop Generic USB Device;c:\windows\system32\drivers\TsUsbGD.sys [2013-01-20 27136]
R4 wlcrasvc;Windows Live Mesh remote connections service;c:\program files\Windows Live\Mesh\wlcrasvc.exe [2010-09-22 51040]
S0 aswRvrt;aswRvrt; [x]
S1 AsUpIO;AsUpIO;c:\windows\system32\drivers\AsUpIO.sys [2010-08-03 11832]
S1 aswSnx;aswSnx; [x]
S1 aswSP;aswSP; [x]
S1 dtsoftbus01;DAEMON Tools Virtual Bus Driver;c:\windows\system32\DRIVERS\dtsoftbus01.sys [2012-12-08 242240]
S2 AdvancedSystemCareService6;Advanced SystemCare Service 6;c:\program files\IObit\Advanced SystemCare 6\ASCService.exe [2012-10-31 464256]
S2 ASUS InstantOn;ASUS InstantOn Service;c:\program files\ASUS\InstantOn for EPC\InsOnSrv.exe [2011-12-01 92800]
S2 AsusService;Asus Launcher Service;c:\windows\system32\AsusService.exe [2012-01-11 224680]
S2 aswFsBlk;aswFsBlk; [x]
S2 aswMonFlt;aswMonFlt;c:\windows\system32\drivers\aswMonFlt.sys [2013-03-06 66336]
S2 CamthWDM;WebcamMax, WDM Video Capture;c:\windows\system32\DRIVERS\CamthWDM.sys [2007-01-11 243584]
S2 MBAMService;MBAMService;c:\program files\Malwarebytes' Anti-Malware\mbamservice.exe [2013-04-04 701512]
S2 Skype C2C Service;Skype C2C Service;c:\programdata\Skype\Toolbars\Skype C2C Service\c2c_service.exe [2013-10-09 3275136]
S2 ssinstall;SInstalátor;c:\windows\System32\ssins.exe [2013-10-07 2324216]
S2 VideAceWindowsService;VideAceWindowsService;c:\expressgateutil\VAWinService.exe [2011-03-26 91464]
S3 igddim32;igddim32;c:\windows\system32\DRIVERS\igddim32.sys [2012-06-27 1349120]
S3 igdkmd32;igdkmd32;c:\windows\system32\DRIVERS\igdkmd32.sys [2012-06-27 435200]
S3 IntcDAud;Intel(R) Display Audio;c:\windows\system32\DRIVERS\IntcDAud.sys [2011-06-09 278528]
S3 L1C;NDIS Miniport Driver for Atheros AR81xx PCI-E Ethernet Controller;c:\windows\system32\DRIVERS\L1C62x86.sys [2011-11-01 91760]
S3 MBAMProtector;MBAMProtector;c:\windows\system32\drivers\mbam.sys [2013-04-04 22856]
.
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost]
LocalServiceAndNoImpersonation REG_MULTI_SZ SSDPSRV upnphost SCardSvr TBS fdrespub AppIDSvc QWAVE wcncsvc
.
[HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{8A69D345-D564-463c-AFF1-A69D9E530F96}]
2013-10-19 19:31 1185744 ----a-w- c:\program files\Google\Chrome\Application\30.0.1599.101\Installer\chrmstp.exe
.
Obsah adresáře 'Naplánované úlohy'
.
2013-11-02 c:\windows\Tasks\Adobe Flash Player Updater.job
- c:\windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2012-08-18 15:06]
.
2013-11-02 c:\windows\Tasks\FacebookUpdateTaskUserS-1-5-21-2982817381-1060741672-405086574-1000Core.job
- c:\users\Jana\AppData\Local\Facebook\Update\FacebookUpdate.exe [2012-12-28 13:44]
.
2013-11-02 c:\windows\Tasks\FacebookUpdateTaskUserS-1-5-21-2982817381-1060741672-405086574-1000UA.job
- c:\users\Jana\AppData\Local\Facebook\Update\FacebookUpdate.exe [2012-12-28 13:44]
.
2013-11-02 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
- c:\program files\Google\Update\GoogleUpdate.exe [2013-04-28 10:58]
.
2013-11-02 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
- c:\program files\Google\Update\GoogleUpdate.exe [2013-04-28 10:58]
.
2013-11-02 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2982817381-1060741672-405086574-1000Core.job
- c:\users\Jana\AppData\Local\Google\Update\GoogleUpdate.exe [2013-05-12 16:04]
.
2013-11-02 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2982817381-1060741672-405086574-1000UA.job
- c:\users\Jana\AppData\Local\Google\Update\GoogleUpdate.exe [2013-05-12 16:04]
.
.
------- Doplňkový sken -------
.
uStart Page = hxxp://www.google.com
IE: E&xportovat do aplikace Microsoft Excel - c:\progra~1\MIF5BA~1\Office12\EXCEL.EXE/3000
IE: Odeslat obrázek do zařízení &Bluetooth... - c:\program files\WIDCOMM\Bluetooth Software\btsendto_ie_ctx.htm
IE: Odeslat stránku do zařízení &Bluetooth... - c:\program files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
TCP: DhcpNameServer = 192.168.0.1
FF - ProfilePath - c:\users\Jana\AppData\Roaming\Mozilla\Firefox\Profiles\mvo7k138.default\
.
.
--------------------- ZAMKNUTÉ KLÍČE V REGISTRU ---------------------
.
[HKEY_USERS\.Default\Software\Microsoft\Internet Explorer\ApprovedExtensionsMigration]
@Denied: (2) (LocalSystem)
"Timestamp"=hex:0e,32,02,52,ac,b0,ce,01
.
[HKEY_LOCAL_MACHINE\software\Classes\VideoLAN.VLCPlugin.*1*]
@="?????????????????? v1"
.
[HKEY_LOCAL_MACHINE\software\Classes\VideoLAN.VLCPlugin.*1*\CLSID]
@="{E23FE9C6-778E-49D4-B537-38FCDE4887D8}"
.
[HKEY_LOCAL_MACHINE\software\Classes\VideoLAN.VLCPlugin.*2*]
@="?????????????????? v2"
.
[HKEY_LOCAL_MACHINE\software\Classes\VideoLAN.VLCPlugin.*2*\CLSID]
@="{9BE31822-FDAD-461B-AD51-BE1D1C159921}"
.
--------------------- Knihovny navázané na běžící procesy ---------------------
.
- - - - - - - > 'Explorer.exe'(2108)
c:\progra~1\ASUS\ASUSWE~1\30108~1.222\ASUSWS~1.DLL
c:\program files\WIDCOMM\Bluetooth Software\btncopy.dll
.
------------------------ Jiné spuštené procesy ------------------------
.
c:\program files\AVAST Software\Avast\AvastSvc.exe
c:\windows\system32\WLANExt.exe
c:\windows\system32\conhost.exe
c:\windows\system32\taskhost.exe
c:\program files\IObit\Advanced SystemCare 6\Monitor.exe
c:\program files\WIDCOMM\Bluetooth Software\btwdins.exe
c:\program files\Malwarebytes' Anti-Malware\mbamscheduler.exe
c:\program files\Malwarebytes' Anti-Malware\mbamgui.exe
c:\program files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
c:\program files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe
c:\program files\ASUS\InstantOn for EPC\InsOnWMI.exe
c:\windows\system32\conhost.exe
c:\windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe
c:\program files\Windows Media Player\wmpnetwk.exe
.
**************************************************************************
.
Celkový čas: 2013-11-02 11:47:11 - počítač byl restartován
ComboFix-quarantined-files.txt 2013-11-02 10:47
ComboFix2.txt 2013-10-30 11:21
ComboFix3.txt 2013-10-28 11:04
ComboFix4.txt 2013-10-27 15:45
.
Před spuštěním: Volných bajtů: 63 011 950 592
Po spuštění: Volných bajtů: 62 852 034 560
.
- - End Of File - - 2CC4EF3147635200C64CBABB753F6F0A
A36C5E4F47E84449FF07ED3517B43A31

[memphisto]

Dodej ještě ten zbytek

[fandam007]

LOG Z aswMBRr:

aswMBR version 0.9.9.1771 Copyright(c) 2011 AVAST Software
Run date: 2013-11-02 19:07:33
-----------------------------
19:07:33.469 OS Version: Windows 6.1.7601 Service Pack 1
19:07:33.469 Number of processors: 4 586 0x3601
19:07:33.485 ComputerName: MININOTAS UserName: Jana
19:07:39.600 Initialize success
19:07:41.113 AVAST engine defs: 13110200
19:07:50.333 Disk 0 (boot) \Device\Harddisk0\DR0 -> \Device\Ide\IAAStorageDevice-0
19:07:50.349 Disk 0 Vendor: ST932032 0003 Size: 305245MB BusType: 3
19:07:50.567 Disk 0 MBR read successfully
19:07:50.583 Disk 0 MBR scan
19:07:50.614 Disk 0 Windows 7 default MBR code
19:07:50.645 Disk 0 Partition 1 80 (A) 07 HPFS/NTFS NTFS 102400 MB offset 2048
19:07:50.707 Disk 0 Partition 2 00 1B Hidd FAT32 MSDOS5.0 15360 MB offset 209717248
19:07:50.739 Disk 0 Partition 3 00 07 HPFS/NTFS NTFS 187468 MB offset 241174528
19:07:50.817 Disk 0 Partition 4 00 EF EFI FAT 16 MB offset 625108992
19:07:50.879 Disk 0 scanning sectors +625141760
19:07:51.191 Disk 0 scanning C:\windows\system32\drivers
19:08:27.024 Service scanning
19:09:34.245 Modules scanning
19:10:03.495 Disk 0 trace - called modules:
19:10:03.620 ntkrnlpa.exe CLASSPNP.SYS disk.sys ACPI.sys halmacpi.dll iaStor.sys
19:10:03.651 1 nt!IofCallDriver -> \Device\Harddisk0\DR0[0x85bc0948]
19:10:03.682 3 CLASSPNP.SYS[86d8959e] -> nt!IofCallDriver -> [0x844a9958]
19:10:03.713 5 ACPI.sys[866d03d4] -> nt!IofCallDriver -> \Device\Ide\IAAStorageDevice-0[0x84465028]
19:10:04.946 AVAST engine scan C:\windows
19:10:10.827 AVAST engine scan C:\windows\system32
19:16:15.415 AVAST engine scan C:\windows\system32\drivers
19:17:01.404 AVAST engine scan C:\Users\Jana
19:21:34.436 AVAST engine scan C:\ProgramData
19:24:24.382 Scan finished successfully
19:33:49.078 Disk 0 MBR has been saved successfully to "C:\Users\Jana\Desktop\MBR.dat"
19:33:49.094 The log file has been saved successfully to "C:\Users\Jana\Desktop\aswMBR.txt"

[jaro3]

ComboFix se odinstaluje takto:
Start-Spustit a zadej ComboFix /Uninstall

Vyčisti systém CCleanerem

Stáhni si OTC

na plochu. Poklepej na něj. Potom klikni na Clean up!.
Restartuj PC , pokud Ti bude doporučeno.

Pokud nejsou problémy , je to vše a můžeš dát vyřešeno , zelenou fajfku.