zasekaný asusA52n Vyřešeno

[zappley]

Combofix log
ComboFix 13-10-16.02 - Vess99 18.10.2013 19:13:01.1.2 - x86
Microsoft Windows 7 Professional 6.1.7601.1.1250.420.1029.18.1790.996 [GMT 2:00]
Spuštěný z: C:\Users\Vess99\Desktop\ComboFix.exe
AV: avast! Antivirus *Enabled/Updated* {2B2D1395-420B-D5C9-657E-930FE358FC3C}
SP: avast! Antivirus *Enabled/Updated* {904CF271-6431-DA47-5FCE-A87D98DFB681}
SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}


((((((((((((((((((((((((((((((((((((((( Ostatní výmazy )))))))))))))))))))))))))))))))))))))))))))))))))


C:\ProgramData\Local Settings\Temp
C:\Windows\Installer\{E5CF6B9C-3ABE-43C9-9413-AD5FFC98F049}\NewShortcut4_E9C83B3EDF9141A39DA5EC05C79BBB91.exe
C:\Windows\system32\frapsvid.dll
C:\Windows\system32\X86


((((((((((((((((((((((((( Soubory vytvořené od 2013-09-18 do 2013-10-18 )))))))))))))))))))))))))))))))


2013-10-18 15:41:25 . 2013-10-14 06:39:45 7796464 ----a-w- C:\ProgramData\Microsoft\Windows Defender\Definition Updates\{575A415E-4233-42F4-A6FA-9A7261ABA8D0}\mpengine.dll
2013-10-18 14:31:39 . 2013-10-18 14:31:39 -------- d-----w- C:\Users\Vess99\AppData\Roaming\AnvSoft
2013-10-18 14:25:44 . 2013-10-18 14:42:48 -------- d-----w- C:\Program Files\AnvSoft
2013-10-18 10:23:21 . 2013-10-18 10:23:21 -------- d-----w- C:\Users\Vess99\AppData\Local\ElevatedDiagnostics
2013-10-17 14:45:58 . 2013-10-17 14:57:55 -------- d-----w- C:\Program Files\Counter-Strike 1.6
2013-10-17 08:58:22 . 2013-10-17 08:58:22 -------- d-----w- C:\Windows\ERUNT
2013-10-17 08:07:57 . 2013-10-17 08:08:54 -------- d-----w- C:\Users\Vess99\AppData\Roaming\SPORE
2013-10-17 06:34:16 . 2013-10-17 06:47:11 -------- d-----w- C:\Program Files\CCleaner
2013-10-17 06:26:39 . 2013-10-17 06:26:39 -------- d-----w- C:\Users\Vess99\AppData\Roaming\StageManager.BD092818F67280F4B42B04877600987F0111B594.1
2013-10-17 06:21:27 . 2013-10-17 06:21:27 -------- d-----w- C:\Users\Vess99\AppData\Roaming\Apple Computer
2013-10-17 05:35:15 . 2013-10-17 06:26:04 -------- d-----w- C:\Users\Vess99\AppData\Local\Adobe
2013-10-16 19:21:55 . 2013-10-16 19:21:55 6016 ----a-w- C:\Windows\system32\drivers\usbd.sys
2013-10-16 19:21:55 . 2013-10-16 19:21:55 43008 ----a-w- C:\Windows\system32\drivers\usbehci.sys
2013-10-16 19:21:55 . 2013-10-16 19:21:55 258560 ----a-w- C:\Windows\system32\drivers\usbhub.sys
2013-10-16 19:21:55 . 2013-10-16 19:21:55 24064 ----a-w- C:\Windows\system32\drivers\usbuhci.sys
2013-10-16 19:21:55 . 2013-10-16 19:21:55 20480 ----a-w- C:\Windows\system32\drivers\usbohci.sys
2013-10-16 19:21:54 . 2013-10-16 19:21:54 76288 ----a-w- C:\Windows\system32\drivers\usbccgp.sys
2013-10-16 19:21:54 . 2013-10-16 19:21:54 284672 ----a-w- C:\Windows\system32\drivers\usbport.sys
2013-10-16 18:19:24 . 2013-10-16 18:19:24 -------- d-----w- C:\Users\Vess99\AppData\Roaming\Malwarebytes
2013-10-16 18:18:41 . 2013-10-16 18:18:41 -------- d-----w- C:\ProgramData\Malwarebytes
2013-10-16 15:51:42 . 2013-10-16 15:51:42 -------- d-----w- C:\Users\Vess99\AppData\Roaming\BANDISOFT
2013-10-14 11:38:34 . 2013-10-16 17:19:54 -------- d-----w- C:\Program Files\TeamSpeak 3 Client
2013-10-10 14:34:00 . 2013-07-04 11:50:56 530432 ----a-w- C:\Windows\system32\comctl32.dll
2013-10-10 14:32:59 . 2013-07-04 11:57:28 205824 ----a-w- C:\Windows\system32\WebClnt.dll
2013-10-10 14:32:59 . 2013-07-04 11:51:04 81920 ----a-w- C:\Windows\system32\davclnt.dll
2013-10-10 14:32:57 . 2013-07-04 09:48:52 115712 ----a-w- C:\Windows\system32\drivers\mrxdav.sys
2013-10-10 14:32:50 . 2013-08-28 00:57:20 434688 ----a-w- C:\Windows\system32\scavengeui.dll
2013-10-10 14:32:40 . 2013-08-28 01:04:30 2348544 ----a-w- C:\Windows\system32\win32k.sys
2013-10-10 14:32:28 . 2013-07-12 10:08:19 146816 ----a-w- C:\Windows\system32\drivers\usbvideo.sys
2013-10-10 14:32:28 . 2013-07-12 10:07:54 86016 ----a-w- C:\Windows\system32\drivers\usbcir.sys
2013-10-10 14:32:25 . 2013-06-25 22:56:40 527064 ----a-w- C:\Windows\system32\drivers\Wdf01000.sys
2013-10-09 18:17:53 . 2013-10-18 15:48:52 -------- d-----w- C:\Users\Vess99\AppData\Roaming\uTorrent
2013-10-06 15:42:41 . 2013-10-09 18:31:11 -------- d-----w- C:\Users\Vess99\AppData\Roaming\.minecraft
2013-09-30 19:12:23 . 2013-09-30 19:12:23 -------- d-----w- C:\Program Files\NVIDIA Corporation
2013-09-30 18:19:41 . 2013-09-30 18:19:41 243128 ----a-w- C:\Windows\system32\drivers\dtsoftbus01.sys
2013-09-30 18:19:32 . 2013-10-16 19:20:16 -------- d-----w- C:\Users\Vess99\AppData\Roaming\DAEMON Tools Lite
2013-09-30 18:19:26 . 2013-09-30 18:19:41 -------- d-----w- C:\Program Files\DAEMON Tools Lite
2013-09-30 18:18:58 . 2013-09-30 18:41:58 -------- d-----w- C:\ProgramData\DAEMON Tools Lite
2013-09-30 17:29:17 . 2013-09-30 17:29:17 -------- d-----w- C:\Users\Vess99\AppData\Roaming\Unity
2013-09-22 16:12:14 . 2013-10-17 16:05:09 -------- d-----w- C:\Users\Vess99\AppData\Roaming\TeamViewer
2013-09-22 16:07:34 . 2013-09-22 16:07:34 -------- d-----w- C:\Program Files\TeamViewer
2013-09-22 15:22:07 . 2013-09-22 15:22:08 -------- d-----w- C:\Users\Vess99\AppData\Roaming\Jpeg Resampler
2013-09-22 15:21:51 . 2013-10-16 17:18:38 -------- d-----w- C:\Program Files\JpegResampler2010
2013-09-21 15:01:54 . 2013-09-21 15:02:03 -------- d-----w- C:\Program Files\x264vfw
2013-09-19 19:07:33 . 2013-09-19 19:07:33 369856 ----a-w- C:\Windows\system32\drivers\cng.sys
2013-09-19 19:07:33 . 2013-09-19 19:07:33 247808 ----a-w- C:\Windows\system32\schannel.dll
2013-09-19 19:07:33 . 2013-09-19 19:07:33 136560 ----a-w- C:\Windows\system32\drivers\ksecpkg.sys
2013-09-19 19:07:33 . 2013-09-19 19:07:33 1039360 ----a-w- C:\Windows\system32\lsasrv.dll
2013-09-19 16:42:37 . 2012-07-26 03:39:21 47720 ----a-w- C:\Windows\system32\drivers\WdfLdr.sys
2013-09-19 16:42:37 . 2012-07-26 02:46:47 9728 ----a-w- C:\Windows\system32\Wdfres.dll
2013-09-19 16:41:12 . 2012-07-26 02:33:43 66560 ----a-w- C:\Windows\system32\drivers\WUDFPf.sys
2013-09-19 16:41:12 . 2012-07-26 02:32:51 155136 ----a-w- C:\Windows\system32\drivers\WUDFRd.sys
2013-09-19 16:41:09 . 2012-07-26 03:20:40 73216 ----a-w- C:\Windows\system32\WUDFSvc.dll
2013-09-19 16:41:09 . 2012-07-26 03:20:40 172032 ----a-w- C:\Windows\system32\WUDFPlatform.dll
2013-09-19 16:41:06 . 2012-07-26 03:21:03 196608 ----a-w- C:\Windows\system32\WUDFHost.exe
2013-09-19 16:41:06 . 2012-07-26 03:20:40 38912 ----a-w- C:\Windows\system32\WUDFCoinstaller.dll
2013-09-19 16:41:05 . 2012-07-26 03:20:40 613888 ----a-w- C:\Windows\system32\WUDFx.dll
2013-09-19 16:40:23 . 2012-03-01 05:46:57 19824 ----a-w- C:\Windows\system32\drivers\fs_rec.sys
2013-09-19 16:40:23 . 2012-03-01 05:33:23 159232 ----a-w- C:\Windows\system32\imagehlp.dll
2013-09-19 16:40:23 . 2012-03-01 05:29:16 5120 ----a-w- C:\Windows\system32\wmi.dll
2013-09-19 16:39:15 . 2010-02-11 07:10:14 293376 ----a-w- C:\Windows\system32\browserchoice.exe
2013-09-19 16:30:26 . 2013-09-19 16:30:26 1505280 ----a-w- C:\Windows\system32\d3d11.dll
2013-09-19 14:16:00 . 2013-07-09 04:50:42 652800 ----a-w- C:\Windows\system32\rpcrt4.dll
2013-09-19 14:15:48 . 2013-07-09 04:52:10 175104 ----a-w- C:\Windows\system32\wintrust.dll
2013-09-19 14:15:48 . 2013-07-09 04:46:31 1166848 ----a-w- C:\Windows\system32\crypt32.dll
2013-09-19 14:15:47 . 2013-07-09 04:46:31 140288 ----a-w- C:\Windows\system32\cryptsvc.dll
2013-09-19 14:15:47 . 2013-07-09 04:46:31 103936 ----a-w- C:\Windows\system32\cryptnet.dll
2013-09-19 14:14:49 . 2013-04-09 23:34:01 1247744 ----a-w- C:\Windows\system32\DWrite.dll
2013-09-19 14:14:34 . 2013-05-10 03:20:54 24576 ----a-w- C:\Windows\system32\cryptdlg.dll
2013-09-19 14:12:59 . 2013-08-02 01:48:15 3584 ---ha-w- C:\Windows\system32\api-ms-win-core-heap-l1-1-0.dll
2013-09-19 14:11:27 . 2013-07-25 08:57:27 1620992 ----a-w- C:\Windows\system32\WMVDECOD.DLL
2013-09-19 14:11:24 . 2013-08-05 01:56:47 133056 ----a-w- C:\Windows\system32\drivers\ataport.sys
2013-09-19 14:11:22 . 2013-04-17 07:02:06 1230336 ----a-w- C:\Windows\system32\WindowsCodecs.dll
2013-09-19 14:10:48 . 2013-07-19 01:41:01 2048 ----a-w- C:\Windows\system32\tzres.dll
2013-09-19 13:41:37 . 2013-05-27 04:57:27 680960 ----a-w- C:\Program Files\Windows Defender\MpSvc.dll
2013-09-19 13:41:36 . 2013-05-27 04:57:25 392704 ----a-w- C:\Program Files\Windows Defender\MpClient.dll
2013-09-19 13:41:32 . 2013-05-27 04:57:25 224768 ----a-w- C:\Program Files\Windows Defender\MpCommu.dll
2013-09-19 13:28:00 . 2013-06-15 03:38:43 31232 ----a-w- C:\Windows\system32\drivers\tssecsrv.sys
2013-09-19 12:16:39 . 2013-09-19 12:16:41 -------- d-----w- C:\Users\Vess99\AppData\Roaming\GHISLER
2013-09-19 12:03:20 . 2013-10-17 06:48:19 -------- d-----w- C:\Users\Vess99\AppData\Local\Windows Live
2013-09-19 11:51:15 . 2013-09-19 12:12:45 -------- d-----w- C:\ProgramData\CyberLink
2013-09-19 11:47:46 . 2011-04-14 03:47:40 27760 ----a-w- C:\Windows\system32\drivers\clwvd.sys
2013-09-19 11:41:27 . 2013-09-19 12:09:51 -------- d-----w- C:\ProgramData\install_clap
.


(((((((((((((((((((((((((((((((((((((((( Find3M výpis ))))))))))))))))))))))))))))))))))))))))))))))))))))

2013-10-06 09:51:21 . 2013-10-06 09:51:21 3072 ----a-w- C:\Windows\system32\drivers\en-US\tsusbflt.sys.mui
2013-09-20 22:16:18 . 2013-09-20 22:16:18 204800 ----a-w- C:\Windows\system32\webcheck.dll
2013-09-14 16:50:06 . 2013-09-14 16:50:06 514560 ----a-w- C:\Windows\system32\qdvd.dll
2013-09-10 06:50:00 . 2013-09-18 15:42:38 545 ----a-w- C:\Windows\UC.PIF
2013-09-10 06:50:00 . 2013-09-18 15:42:38 545 ----a-w- C:\Windows\RAR.PIF
2013-09-10 06:50:00 . 2013-09-18 15:42:38 545 ----a-w- C:\Windows\PKZIP.PIF
2013-09-10 06:50:00 . 2013-09-18 15:42:38 545 ----a-w- C:\Windows\PKUNZIP.PIF
2013-09-10 06:50:00 . 2013-09-18 15:42:38 545 ----a-w- C:\Windows\LHA.PIF
2013-09-10 06:50:00 . 2013-09-18 15:42:38 545 ----a-w- C:\Windows\ARJ.PIF
2013-09-07 19:49:17 . 2013-06-15 19:32:02 98304 ----a-w- C:\Windows\system32\CmdLineExt.dll
2013-09-03 12:35:12 . 2013-03-15 15:12:47 238872 ------w- C:\Windows\system32\MpSigStub.exe
2013-08-26 13:36:01 . 2013-08-26 13:36:04 715038 ----a-w- C:\Windows\unins000.exe
2013-08-12 15:16:17 . 2013-03-21 15:44:16 81920 ----a-w- C:\Windows\system32\OpenAL32.dll
2013-08-05 06:15:10 . 2013-08-05 06:15:10 66104 ----a-w- C:\Windows\system32\bdmpega.acm
2013-08-05 06:15:08 . 2013-08-05 06:15:08 66104 ----a-w- C:\Windows\system32\bdmpegv.dll
2013-08-05 06:15:06 . 2013-08-05 06:15:06 23080 ----a-w- C:\Windows\system32\bdmjpeg.dll
2013-08-02 09:40:02 . 2013-08-02 09:39:59 24576 ----a-w- C:\Windows\MadUnInst.exe


(((((((((((((((((((((((((((((((((( Spouštěcí body v registru )))))))))))))))))))))))))))))))))))))))))))))


*Poznámka* prázdné záznamy a legitimní výchozí údaje nejsou zobrazeny.
REGEDIT4

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\00avast]
@="{472083B0-C522-11CF-8763-00608CC02F24}"
[HKEY_CLASSES_ROOT\CLSID\{472083B0-C522-11CF-8763-00608CC02F24}]
2013-05-09 08:58:16 121968 ----a-w- C:\Program Files\AVAST Software\Avast\ashShell.dll

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"DAEMON Tools Lite"="C:\Program Files\DAEMON Tools Lite\DTLite.exe" [2013-07-03 13:16:46 3673184]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"avast"="C:\Program Files\AVAST Software\Avast\avastUI.exe" [2013-05-09 08:58:30 4858968]
"StartCCC"="C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" [2010-09-21 20:31:16 98304]
"RtHDVCpl"="C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe" [2010-04-13 15:25:00 8555040]
"msisnogSrv"="C:\Windows\inf\msisnog.vbe" [2013-08-27 20:55:42 1558]
"AdobeAAMUpdater-1.0"="C:\Program Files\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe" [2012-04-04 04:09:46 446392]
"SwitchBoard"="C:\Program Files\Common Files\Adobe\SwitchBoard\SwitchBoard.exe" [2010-02-19 11:37:14 517096]
"AdobeCS6ServiceManager"="C:\Program Files\Common Files\Adobe\CS6ServiceManager\CS6ServiceManager.exe" [2012-03-09 14:26:58 1073312]
"mssgjmSrv"="C:\Windows\inf\mssgjm.vbe" [2013-08-27 20:55:42 1558]

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorAdmin"= 0 (0x0)
"ConsentPromptBehaviorUser"= 3 (0x3)
"EnableLUA"= 0 (0x0)
"EnableUIADesktopToggle"= 0 (0x0)
"PromptOnSecureDesktop"= 0 (0x0)

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\drivers32]
"aux"=wdmaud.drv

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SunJavaUpdateSched]
2013-03-12 05:32:50 253816 ----a-w- c:\Program Files\Common Files\Java\Java Update\jusched.exe

R2 BstHdDrv;BlueStacks Hypervisor; [x]
R2 SkypeUpdate;Skype Updater;C:\Program Files\Skype\Updater\Updater.exe [2013-06-21 07:53:36 162408]
R2 TeamViewer8;TeamViewer 8;C:\Program Files\TeamViewer\Version8\TeamViewer_Service.exe [2013-10-01 12:14:40 5087584]
R3 AtiHDAudioService;ATI Function Driver for HD Audio Service;C:\Windows\system32\drivers\AtihdW73.sys [2013-03-15 15:29:54 102416]
R3 FairplayKD;FairplayKD;C:\ProgramData\MTA San Andreas All\Common\temp\FairplayKD.sys [x]
R3 Huawei;HUAWEI Mobile Connect - USB Smart Card Reader;C:\Windows\system32\DRIVERS\ewdcsc.sys [x]
R3 hwusbdev;Huawei DataCard USB PNP Device;C:\Windows\system32\DRIVERS\ewusbdev.sys [x]
R3 RdpVideoMiniport;Remote Desktop Video Miniport Driver;C:\Windows\system32\drivers\rdpvideominiport.sys [2013-10-06 09:51:21 14848]
R3 SwitchBoard;SwitchBoard;C:\Program Files\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [2010-02-19 11:37:14 517096]
R3 TsUsbFlt;TsUsbFlt;C:\Windows\system32\drivers\tsusbflt.sys [2013-10-06 09:51:21 49664]
R3 WatAdminSvc;Služba Technologie aktivace Windows;C:\Windows\system32\Wat\WatAdminSvc.exe [2013-09-09 19:26:33 1343400]
S0 aswRvrt;aswRvrt; [x]
S0 aswVmm;aswVmm; [x]
S1 aswSnx;aswSnx; [x]
S1 aswSP;aswSP; [x]
S1 dtsoftbus01;DAEMON Tools Virtual Bus Driver;C:\Windows\system32\DRIVERS\dtsoftbus01.sys [2013-09-30 18:19:41 243128]
S2 AMD External Events Utility;AMD External Events Utility;C:\Windows\system32\atiesrxx.exe [2013-03-15 15:29:35 176128]
S2 aswFsBlk;aswFsBlk; [x]
S2 aswMonFlt;aswMonFlt;C:\Windows\system32\drivers\aswMonFlt.sys [2013-05-09 08:59:09 66336]
S3 clwvd;CyberLink WebCam Virtual Driver;C:\Windows\system32\DRIVERS\clwvd.sys [2011-04-14 03:47:40 27760]
S3 JMCR;JMCR;C:\Windows\system32\DRIVERS\jmcr.sys [2009-08-19 05:23:28 119408]
S3 usbfilter;AMD USB Filter Driver;C:\Windows\system32\DRIVERS\usbfilter.sys [2013-03-15 15:29:53 30464]


--- Ostatní služby/ovladače v paměti ---

*NewlyCreated* - WS2IFSL

[HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{8A69D345-D564-463c-AFF1-A69D9E530F96}]
2013-10-18 15:51:57 1185744 ----a-w- C:\Program Files\Google\Chrome\Application\30.0.1599.101\Installer\chrmstp.exe

Obsah adresáře 'Naplánované úlohy'

2013-10-18 C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
- C:\Program Files\Google\Update\GoogleUpdate.exe [2013-03-15 15:05:16 . 2013-03-15 15:05:16]

2013-10-18 C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
- C:\Program Files\Google\Update\GoogleUpdate.exe [2013-03-15 15:05:16 . 2013-03-15 15:05:16]


------- Doplňkový sken -------

uStart Page = hxxp://www.bing.com
TCP: DhcpNameServer = 192.168.0.1

- - - - NEPLATNÉ POLOŽKY ODSTRANĚNÉ Z REGISTRU - - - -

HKCU-Run-AdobeBridge - (no file)
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\SRS Premium Sound.lnk - C:\Windows\Installer\{E5CF6B9C-3ABE-43C9-9413-AD5FFC98F049}\NewShortcut4_E9C83B3EDF9141A39DA5EC05C79BBB91.exe /f=srs_premium_sound_nopreset.zip /h
SafeBoot-IMFservice

[Reklama]

[jaro3]

Log není celý..vlož celý.

V možnostech složky si povol zobrazování skrytých souborů a složek+ odškrtni zatržítko skrýt chráněné soubory operačního systému

Toto otestuj na Virustotal
C:\Windows\MadUnInst.exe

Klikni vpravo od okénka na Vybrat a v Exploreru najdi požadovaný soubor v Tvém PC. Označ ho myší a klikni na Otevřít , poté klikni na Send File. Pokud už byl soubor testován , objeví se okno ve kterém klikni na Reanalyze. Soubor se začne postupně testovat více antivirovými programy. Až skončí test posledního antiviru , objeví se nahoře result a červeně počet nákaz , např. 0/43 , nebo 1/43. Pak zkopíruj myší odkaz na tuto stránku a vlož ji do svého příspěvku.

Nebo na:
http://www.virscan.org/

Stáhni si aswMBR
na svojí plochu. Uzavři všechna okna , programy a prohlížeče. Poklepej na aswMBR.exe. Pokud se objeví hláška o možnosti stáhnutí databáze Avastu , klikni na NE. Poté klikni na „Scan“ . Po skenu klikni na „Save Log“ a ulož si log na plochu .Zkopíruj sem celý obsah toho logu. Pak klikni na „Exit“ k zavření programu.