Místo vypnutí se PC uspí, probuzení=restart+uspání

Místo pro vaše HiJackThis logy a logy z dalších programů…

Moderátoři: Mods_senior, Security team

Odpovědět
Taska
nováček
Příspěvky: 43
Registrován: listopad 11
Pohlaví: Nespecifikováno
Stav:
Offline

Místo vypnutí se PC uspí, probuzení=restart+uspání

Příspěvekod Taska » 01 pro 2011 20:10

Dobrý večer, prosím o pomoc

Running processes:
C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
C:\Program Files (x86)\AVG\AVG2012\avgtray.exe
C:\Program Files\AVAST Software\Avast\AvastUI.exe
C:\Program Files (x86)\Mozilla Firefox\firefox.exe
C:\Program Files (x86)\Mozilla Firefox\plugin-container.exe
C:\Program Files (x86)\Trend Micro\HiJackThis\HiJackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
O2 - BHO: WormRadar.com IESiteBlocker.NavFilter - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - C:\Program Files (x86)\AVG\AVG2012\avgssie.dll
O2 - BHO: avast! WebRep - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll
O2 - BHO: uTorrentBar - {bf7380fa-e3b4-4db2-af3e-9d8783a45bfc} - C:\Program Files (x86)\uTorrentBar\prxtbuTor.dll
O3 - Toolbar: uTorrentBar Toolbar - {bf7380fa-e3b4-4db2-af3e-9d8783a45bfc} - C:\Program Files (x86)\uTorrentBar\prxtbuTor.dll
O3 - Toolbar: avast! WebRep - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll
O4 - HKLM\..\Run: [IAStorIcon] C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
O4 - HKLM\..\Run: [AVG_TRAY] "C:\Program Files (x86)\AVG\AVG2012\avgtray.exe"
O4 - HKLM\..\Run: [avast] "C:\Program Files\AVAST Software\Avast\avastUI.exe" /nogui
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-21-768311896-3300924832-1790489852-1006\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'UpdatusUser')
O4 - HKUS\S-1-5-21-768311896-3300924832-1790489852-1006\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'UpdatusUser')
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O18 - Protocol: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - C:\Program Files (x86)\AVG\AVG2012\avgpp.dll
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
O23 - Service: avast! Antivirus - AVAST Software - C:\Program Files\AVAST Software\Avast\AvastSvc.exe
O23 - Service: AVG Firewall (avgfws) - AVG Technologies CZ, s.r.o. - C:\Program Files (x86)\AVG\AVG2012\avgfws.exe
O23 - Service: AVGIDSAgent - AVG Technologies CZ, s.r.o. - C:\Program Files (x86)\AVG\AVG2012\AVGIDSAgent.exe
O23 - Service: AVG WatchDog (avgwd) - AVG Technologies CZ, s.r.o. - C:\Program Files (x86)\AVG\AVG2012\avgwdsvc.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)
O23 - Service: Úložná technologie Intel(R) Rapid (IAStorDataMgrSvc) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Logitech Bluetooth Service (LBTServ) - Logitech, Inc. - C:\Program Files\Common Files\LogiShrd\Bluetooth\lbtserv.exe
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: NVIDIA Display Driver Service (nvsvc) - Unknown owner - C:\Windows\system32\nvvsvc.exe (file missing)
O23 - Service: NVIDIA Update Service Daemon (nvUpdatusService) - NVIDIA Corporation - C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe
O23 - Service: PnkBstrA - Unknown owner - C:\Windows\system32\PnkBstrA.exe
O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)
O23 - Service: Spy Emergency Engine Service (SpyEmrgSrv) - NETGATE Technologies s.r.o. - C:\Program Files\NETGATE\Spy Emergency\SpyEmergencySrv.exe
O23 - Service: Steam Client Service - Valve Corporation - C:\Program Files (x86)\Common Files\Steam\SteamService.exe
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\Wat\WatUX.exe,-601 (WatAdminSvc) - Unknown owner - C:\Windows\system32\Wat\WatAdminSvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)

--
End of file - 7372 bytes
Nahoru
Reklama
Top
Uživatelský avatar
Žbeky
Moderátor
Guru Level 13
Guru Level 13
Příspěvky: 22288
Registrován: květen 08
Bydliště: Vsetín - Pardubice
Pohlaví: Muž
Stav:
Offline

Re: Místo vypnutí se PC uspí, probuzení=restart+uspání

Příspěvekod Žbeky » 01 pro 2011 20:21

Máš AVG a Avast. Nech jen jeden a druhý odinstaluj. Odinstaluj i uTorrent toolbar

Fixni:

Kód: Vybrat vše

R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
O2 - BHO: uTorrentBar - {bf7380fa-e3b4-4db2-af3e-9d8783a45bfc} - C:\Program Files (x86)\uTorrentBar\prxtbuTor.dll
O3 - Toolbar: uTorrentBar Toolbar - {bf7380fa-e3b4-4db2-af3e-9d8783a45bfc} - C:\Program Files (x86)\uTorrentBar\prxtbuTor.dll
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'NETWORK SERVICE')

Stáhni si ATF Cleaner
Poklepej na ATF Cleaner.exe, klikni na select all found, poté:
- Pokud používáš Firefox, klikni na Firefox nahoře a vyber: Select All, poté klikni na Empty Selected.
- Pokud používáš Operu, klikni nahoře na Operu a vyber: Select All, poté klikni na Empty Selected.
- Pokud používáš Chrome, nic dalšího nevybírej a dej Empty Selected.
Po vyčištění klikni na Exit k zavření programu.
ATF-Cleaner je jednoduchý nástroj na odstranění historie z webového prohlížeče. Program dokáže odstranit cache, cookies, historii a další stopy po surfování na Internetu. Mezi podporované prohlížeče patří Internet Explorer, Firefox a Opera. Aplikace navíc umí odstranit dočasné soubory Windows, vysypat koš atd.

Stáhni si Malwarebytes' Anti-Malware
Nainstaluj a spusť ho
- na konci instalace se ujisti že máš zvoleny/zatrhnuty obě možnosti:
Update Malwarebytes' Anti-Malware (Aktualizace Malwarebytes' Anti-Malware) a Launch Malwarebytes' Anti-Malware (Spustit aplikaci Malwarebytes' Anti-Malware), pokud jo tak klikni na tlačítko Finish
- pokud bude nalezena aktualizace, tak se stáhne a nainstaluje
- program se po té spustí a nech vybranou možnost Perform Quick Scan (Provést rychlý sken) a klikni na tlačítko Scan (Skenovat)
- po proběhnutí programu se ti objeví hláška tak klikni na OK a pak na tlačítko Show Results
- pak zvol možnost Save Logfile a ulož si log na plochu
- po té klikni na tlačítko Exit, objeví se ti hláška tak zvol Ano
(ZATÍM SÁM NIC NEMAŽ!).
Vlož sem pak obsah toho logu.
V SZ řeším jen záležitosti týkající se fóra. Na prosby a žádosti o technickou podporu nereaguji. Díky za pochopení.

HiJackThis + návod - HW Monitor - Jak označit příspěvek za vyřešený - Pravidla fóra
Nahoru
Taska
nováček
Příspěvky: 43
Registrován: listopad 11
Pohlaví: Nespecifikováno
Stav:
Offline

Re: Místo vypnutí se PC uspí, probuzení=restart+uspání

Příspěvekod Taska » 02 pro 2011 12:08

Nic to nenašlo, teď nevím jestli mam bejt rád

Malwarebytes' Anti-Malware 1.51.2.1300
www.malwarebytes.org

Verze databáze: 8289

Windows 6.1.7601 Service Pack 1
Internet Explorer 9.0.8112.16421

2.12.2011 11:59:11
mbam-log-2011-12-02 (11-59-11).txt

Typ: Rychlá kontrola
Kontrolované objekty: 201260
Uplynulý čas: 55 sekund

Infikované procesy v paměti: 0
Infikované moduly v paměti: 0
Infikované klíče v registru: 0
Infikované hodnoty v registru: 0
Infikované datové položky v registru: 0
Infikované složky: 0
Infikované soubory: 0

Infikované procesy v paměti:
(Žádné škodlivé položky nebyly zjištěny)

Infikované moduly v paměti:
(Žádné škodlivé položky nebyly zjištěny)

Infikované klíče v registru:
(Žádné škodlivé položky nebyly zjištěny)

Infikované hodnoty v registru:
(Žádné škodlivé položky nebyly zjištěny)

Infikované datové položky v registru:
(Žádné škodlivé položky nebyly zjištěny)

Infikované složky:
(Žádné škodlivé položky nebyly zjištěny)

Infikované soubory:
(Žádné škodlivé položky nebyly zjištěny)
Nahoru
Uživatelský avatar
Žbeky
Moderátor
Guru Level 13
Guru Level 13
Příspěvky: 22288
Registrován: květen 08
Bydliště: Vsetín - Pardubice
Pohlaví: Muž
Stav:
Offline

Re: Místo vypnutí se PC uspí, probuzení=restart+uspání

Příspěvekod Žbeky » 02 pro 2011 15:54

Vypni rezidentní štít antiviru a antispywaru
Stáhni si ComboFix (by sUBs)
a ulož si ho na plochu.
Ukonči všechna aktivní okna a spusť ho.
- Po spuštění se zobrazí podmínky užití, potvrď je stiskem tlačítka Ano
- Dále postupuj dle pokynů, během aplikování ComboFixu neklikej do zobrazujícího se okna
- Po dokončení skenování by měl program vytvořit log - C:\ComboFix.txt - zkopíruj sem prosím celý jeho obsah
Pokud bude po kontrole problém spustit aplikace nebo bude vyskakovat hláška o pokusu použít neplatnou operaci na klíč registru, který je označen pro odstranění, stačí restartovat počítač.
V SZ řeším jen záležitosti týkající se fóra. Na prosby a žádosti o technickou podporu nereaguji. Díky za pochopení.

HiJackThis + návod - HW Monitor - Jak označit příspěvek za vyřešený - Pravidla fóra
Nahoru
Taska
nováček
Příspěvky: 43
Registrován: listopad 11
Pohlaví: Nespecifikováno
Stav:
Offline

Re: Místo vypnutí se PC uspí, probuzení=restart+uspání

Příspěvekod Taska » 02 pro 2011 19:35

ComboFix 11-12-02.01 - User 02.12.2011 19:13:47.2.4 - x64
Microsoft Windows 7 Home Premium 6.1.7601.1.1250.420.1029.18.8175.6688 [GMT 1:00]
Spuštěný z: c:\users\User\Downloads\ComboFix.exe
AV: avast! Antivirus *Disabled/Updated* {2B2D1395-420B-D5C9-657E-930FE358FC3C}
AV: Microsoft Security Essentials *Disabled/Updated* {108DAC43-C256-20B7-BB05-914135DA5160}
SP: avast! Antivirus *Disabled/Updated* {904CF271-6431-DA47-5FCE-A87D98DFB681}
SP: Microsoft Security Essentials *Disabled/Updated* {ABEC4DA7-E46C-2F39-81B5-AA334E5D1BDD}
SP: Windows Defender *Disabled/Outdated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.
.
((((((((((((((((((((((((( Soubory vytvořené od 2011-11-02 do 2011-12-02 )))))))))))))))))))))))))))))))
.
.
2011-12-02 18:29 . 2011-12-02 18:29 69000 ----a-w- c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\{49387F23-88D9-4D5F-B218-7613BC81E9C8}\offreg.dll
2011-12-02 18:28 . 2011-12-02 18:28 -------- d-----w- c:\users\Default\AppData\Local\temp
2011-12-02 12:27 . 2011-11-21 11:40 8822856 ----a-w- c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\{49387F23-88D9-4D5F-B218-7613BC81E9C8}\mpengine.dll
2011-12-02 10:57 . 2011-12-02 10:57 -------- d-----w- c:\programdata\Malwarebytes
2011-12-02 10:57 . 2011-08-31 16:00 25416 ----a-w- c:\windows\system32\drivers\mbam.sys
2011-12-02 10:57 . 2011-12-02 10:57 -------- d-----w- c:\program files (x86)\Malwarebytes' Anti-Malware
2011-12-01 18:56 . 2011-12-01 18:57 -------- d-----w- c:\users\Administrator
2011-12-01 14:21 . 2011-12-01 14:21 -------- d-----w- c:\program files (x86)\Trend Micro
2011-12-01 13:58 . 2011-11-28 17:54 591192 ----a-w- c:\windows\system32\drivers\aswSnx.sys
2011-12-01 13:58 . 2011-11-28 17:53 304472 ----a-w- c:\windows\system32\drivers\aswSP.sys
2011-12-01 13:58 . 2011-11-28 17:52 42328 ----a-w- c:\windows\system32\drivers\aswRdr.sys
2011-12-01 13:58 . 2011-11-28 17:52 58712 ----a-w- c:\windows\system32\drivers\aswTdi.sys
2011-12-01 13:58 . 2011-11-28 17:52 66904 ----a-w- c:\windows\system32\drivers\aswMonFlt.sys
2011-12-01 13:58 . 2011-11-28 17:51 24408 ----a-w- c:\windows\system32\drivers\aswFsBlk.sys
2011-12-01 13:58 . 2011-11-28 18:01 256960 ----a-w- c:\windows\system32\aswBoot.exe
2011-12-01 13:58 . 2011-11-28 18:01 41184 ----a-w- c:\windows\avastSS.scr
2011-12-01 13:58 . 2011-11-28 18:01 199816 ----a-w- c:\windows\SysWow64\aswBoot.exe
2011-12-01 13:58 . 2011-12-01 13:58 -------- d-----w- c:\programdata\AVAST Software
2011-12-01 13:58 . 2011-12-01 13:58 -------- d-----w- c:\program files\AVAST Software
2011-11-29 17:59 . 2011-09-09 20:35 2580552 ----a-w- c:\windows\SysWow64\pbsvc.exe
2011-11-28 22:49 . 2011-11-28 22:49 -------- d-----w- c:\windows\SysWow64\RTCOM
2011-11-28 16:39 . 2011-11-28 16:39 -------- d-----w- c:\program files\CCleaner
2011-11-28 12:29 . 2011-04-21 09:31 24408 ----a-w- c:\windows\system32\drivers\spyemrg_access.sys
2011-11-28 12:29 . 2011-04-21 09:31 18776 ----a-w- c:\windows\system32\drivers\spyemrg_guard.sys
2011-11-28 12:29 . 2011-04-21 09:31 17240 ----a-w- c:\windows\system32\drivers\spyemrg.sys
2011-11-28 12:29 . 2011-11-28 12:29 -------- d-----w- c:\programdata\NETGATE
2011-11-28 12:29 . 2011-11-28 12:29 -------- d-----w- c:\program files\NETGATE
2011-11-28 11:57 . 2011-11-28 11:57 -------- d--h--w- c:\programdata\Common Files
2011-11-28 11:57 . 2011-12-02 00:14 -------- d-----w- c:\programdata\MFAData
2011-11-28 10:48 . 2011-11-28 11:44 -------- d-----w- c:\program files (x86)\IObit Toolbar
2011-11-28 10:48 . 2011-11-28 10:48 -------- d-----w- c:\program files (x86)\Common Files\Spigot
2011-11-28 10:48 . 2011-11-28 10:48 -------- d-----w- c:\programdata\IObit
2011-11-28 10:48 . 2011-11-28 10:48 -------- d-----w- c:\program files (x86)\IObit
2011-11-28 00:43 . 2011-11-28 11:45 -------- d-----w- c:\program files\SUPERAntiSpyware
2011-11-28 00:43 . 2011-11-28 00:43 -------- d-----w- c:\programdata\SUPERAntiSpyware.com
2011-11-26 20:50 . 2011-11-26 20:50 -------- d-----w- c:\programdata\vsosdk
2011-11-26 20:01 . 2011-11-28 11:44 -------- d-----w- c:\program files (x86)\VSO
2011-11-26 19:36 . 2011-11-26 19:36 -------- d-----w- c:\programdata\ashampoo
2011-11-26 19:35 . 2011-11-26 19:35 -------- d-----w- c:\program files (x86)\Ashampoo
2011-11-21 09:27 . 2011-11-21 09:27 -------- d-----w- c:\program files (x86)\Conduit
2011-11-21 09:27 . 2011-11-21 09:27 -------- d-----w- c:\program files (x86)\uTorrent
2011-11-15 15:08 . 2011-11-15 15:08 -------- d-----w- c:\program files (x86)\VideoLAN
2011-11-12 13:36 . 2011-04-05 23:23 13416 ----a-w- c:\windows\system32\drivers\nvflash.sys
2011-11-12 12:39 . 2011-11-28 11:47 -------- d-----w- c:\users\UpdatusUser
2011-11-12 12:39 . 2011-11-12 12:39 -------- d-----w- c:\programdata\NVIDIA
2011-11-12 12:38 . 2011-11-08 03:51 837952 ----a-w- c:\windows\system32\easyupdatusapiu64.dll
2011-11-12 12:38 . 2011-11-08 03:51 5067584 ----a-w- c:\windows\system32\nvsvc64.dll
2011-11-12 12:38 . 2011-11-08 03:51 3074368 ----a-w- c:\windows\system32\nvsvcr.dll
2011-11-12 12:38 . 2011-11-08 03:51 222528 ----a-w- c:\windows\system32\nvmctray.dll
2011-11-12 12:38 . 2011-11-08 03:51 1640768 ----a-w- c:\windows\system32\nvvsvc.exe
2011-11-12 12:38 . 2011-11-08 03:51 137536 ----a-w- c:\windows\system32\nvshext.dll
2011-11-12 12:38 . 2011-11-08 03:51 10406208 ----a-w- c:\windows\system32\nvcpl.dll
2011-11-12 12:38 . 2011-11-12 12:38 -------- d-----w- c:\programdata\NVIDIA Corporation
2011-11-10 11:20 . 2008-07-12 07:18 467984 ----a-w- c:\windows\SysWow64\d3dx10_39.dll
2011-11-10 11:20 . 2008-07-12 07:18 3851784 ----a-w- c:\windows\SysWow64\D3DX9_39.dll
2011-11-10 11:20 . 2008-07-12 07:18 1493528 ----a-w- c:\windows\SysWow64\D3DCompiler_39.dll
2011-11-10 11:19 . 2011-11-10 11:19 -------- d-----w- C:\Riot Games
2011-11-10 11:01 . 2011-12-02 17:39 -------- d-----w- c:\programdata\PMB Files
2011-11-10 11:01 . 2011-11-10 11:01 -------- d-----w- c:\program files (x86)\Pando Networks
2011-11-10 09:05 . 2011-10-06 20:16 8570192 ----a-w- c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\Backup\mpengine.dll
2011-11-09 21:32 . 2011-11-09 21:32 -------- d-----w- c:\program files (x86)\TeamSpeak 3 Client
2011-11-09 17:00 . 2011-11-14 10:32 -------- d-----w- c:\program files (x86)\Common Files\Steam
2011-11-09 17:00 . 2011-12-02 18:09 -------- d-----w- c:\program files (x86)\Steam
2011-11-09 16:57 . 2011-11-09 16:57 -------- d-----w- c:\windows\B9DB4C7601A446D58910F7AA6376DBAF.TMP
2011-11-09 13:39 . 2011-11-09 13:39 -------- d-----w- C:\NVIDIA
2011-11-09 13:34 . 2010-12-02 09:12 1359976 ----a-w- c:\windows\system32\nvgenco64hda.dll
2011-11-09 13:34 . 2010-11-11 23:10 29288 ----a-w- c:\windows\system32\nvhdap64.dll
2011-11-09 13:34 . 2010-11-11 23:10 155752 ----a-w- c:\windows\system32\drivers\nvhda64v.sys
2011-11-09 13:33 . 2010-12-30 11:12 1614440 ----a-w- c:\windows\system32\nvdispco642090.dll
2011-11-09 13:33 . 2010-12-30 11:12 1359976 ----a-w- c:\windows\system32\nvgenco642040.dll
2011-11-09 13:31 . 2010-12-30 11:12 11240 ----a-w- c:\windows\system32\drivers\nvBridge.kmd
2011-11-09 13:29 . 2011-12-02 14:09 280904 ----a-w- c:\windows\SysWow64\PnkBstrB.xtr
2011-11-09 13:28 . 2011-11-09 13:28 -------- d-----w- c:\program files (x86)\Battlelog Web Plugins
2011-11-09 13:26 . 2011-11-09 13:26 -------- d-----w- c:\programdata\EA Core
2011-11-09 13:19 . 2011-11-09 13:19 -------- d--h--w- c:\program files (x86)\Common Files\EAInstaller
2011-11-09 12:39 . 2011-11-28 11:44 -------- d-----w- c:\programdata\Origin
2011-11-09 12:39 . 2011-11-09 13:26 -------- d-----w- c:\programdata\Electronic Arts
2011-11-09 12:39 . 2011-11-09 12:55 -------- d-----w- c:\program files (x86)\Origin Games
2011-11-09 12:39 . 2011-11-09 21:52 -------- d-----w- c:\program files (x86)\Origin
2011-11-09 12:32 . 2011-11-09 12:32 -------- d-----w- c:\program files (x86)\Common Files\LogiShrd
2011-11-09 12:31 . 2011-11-09 12:31 18960 ----a-w- c:\windows\system32\drivers\LNonPnP.sys
2011-11-09 12:31 . 2011-11-09 12:32 -------- d-----w- c:\programdata\Logishrd
2011-11-09 12:31 . 2011-11-09 12:31 -------- d-----w- c:\program files\Logitech
2011-11-09 12:31 . 2011-11-09 12:32 -------- d-----w- c:\program files\Common Files\Logishrd
2011-11-09 09:24 . 2011-02-19 12:05 1139200 ----a-w- c:\windows\system32\FntCache.dll
2011-11-09 09:24 . 2011-02-19 12:04 1544192 ----a-w- c:\windows\system32\DWrite.dll
2011-11-09 09:24 . 2011-02-19 12:04 902656 ----a-w- c:\windows\system32\d2d1.dll
2011-11-09 09:24 . 2011-02-19 06:30 1076736 ----a-w- c:\windows\SysWow64\DWrite.dll
2011-11-09 09:24 . 2011-02-19 06:30 739840 ----a-w- c:\windows\SysWow64\d2d1.dll
2011-11-09 09:03 . 2011-11-09 09:03 917840 ------w- c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\{DFBF0D39-18BA-40B9-AFB6-3B93A3056523}\gapaengine.dll
2011-11-09 08:55 . 2011-11-09 13:03 414368 ----a-w- c:\windows\SysWow64\FlashPlayerCPLApp.cpl
2011-11-09 08:55 . 2011-11-09 08:55 -------- d-----w- c:\windows\SysWow64\Macromed
2011-11-09 08:55 . 2011-11-09 08:55 -------- d-----w- c:\windows\system32\Macromed
2011-11-09 08:54 . 2011-11-09 08:54 -------- d-----w- c:\program files (x86)\Microsoft Security Client
2011-11-09 08:54 . 2011-11-09 08:54 -------- d-----w- c:\program files\Microsoft Security Client
2011-11-09 08:44 . 2011-11-09 08:44 -------- d-----w- c:\windows\system32\SPReview
2011-11-09 08:44 . 2011-11-09 08:44 -------- d-----w- c:\windows\system32\EventProviders
2011-11-09 08:42 . 2010-11-20 12:21 363008 ----a-w- c:\windows\SysWow64\wbemcomn.dll
2011-11-09 08:42 . 2010-11-20 12:21 189952 ----a-w- c:\program files (x86)\Windows Portable Devices\sqmapi.dll
2011-11-09 08:42 . 2010-11-20 12:19 606208 ----a-w- c:\windows\SysWow64\wbem\fastprox.dll
2011-11-09 08:42 . 2010-11-20 13:27 529408 ----a-w- c:\windows\system32\wbemcomn.dll
2011-11-09 08:42 . 2010-11-20 13:27 244736 ----a-w- c:\program files\Windows Portable Devices\sqmapi.dll
2011-11-09 08:42 . 2010-11-20 13:27 244736 ----a-w- c:\windows\system32\sqmapi.dll
2011-11-09 08:31 . 2011-11-09 08:31 995328 ----a-w- c:\program files\Common Files\Microsoft Shared\VGX\VGX.dll
2011-11-09 02:00 . 2011-11-09 02:00 -------- d-----w- c:\windows\SysWow64\Wat
2011-11-09 02:00 . 2011-11-09 02:00 -------- d-----w- c:\windows\system32\Wat
2011-11-08 19:58 . 2011-11-28 16:41 -------- d-----w- c:\windows\Panther
2011-11-08 16:28 . 2010-02-23 08:16 294912 ----a-w- c:\windows\system32\browserchoice.exe
2011-11-08 16:24 . 2011-02-25 06:19 2871808 ----a-w- c:\windows\explorer.exe
2011-11-08 16:24 . 2011-02-25 05:30 2616320 ----a-w- c:\windows\SysWow64\explorer.exe
2011-11-08 16:23 . 2011-11-08 16:23 -------- d-----w- c:\program files (x86)\Common Files\Intel Corporation
2011-11-08 16:19 . 2011-11-12 12:39 -------- d-----w- c:\program files (x86)\NVIDIA Corporation
2011-11-08 16:19 . 2011-11-12 12:39 -------- d-----w- c:\program files\NVIDIA Corporation
2011-11-08 16:15 . 2011-11-08 16:15 -------- d-----w- c:\program files (x86)\Etron Technology
2011-11-08 16:15 . 2011-12-02 00:13 -------- d-sh--w- c:\windows\Installer
2011-11-08 16:14 . 2011-11-08 16:14 -------- d-----w- c:\program files (x86)\Marvell
2011-11-08 16:14 . 2011-02-09 12:06 555032 ----a-w- c:\windows\system32\drivers\iaStor.sys
2011-11-08 16:13 . 2011-11-08 16:13 -------- d-----w- c:\program files\Realtek
2011-11-08 16:12 . 2011-01-13 11:58 74272 ----a-w- c:\windows\system32\RtNicProp64.dll
2011-11-08 16:12 . 2011-01-13 11:58 413800 ----a-w- c:\windows\system32\drivers\Rt64win7.sys
2011-11-08 16:12 . 2011-01-13 11:58 107552 ----a-w- c:\windows\system32\RTNUninst64.dll
2011-11-08 16:12 . 2011-11-09 21:45 -------- d-----w- c:\program files (x86)\Realtek
2011-11-08 16:12 . 2011-11-28 22:49 -------- d--h--w- c:\program files (x86)\Temp
2011-11-08 16:12 . 2011-11-28 22:48 -------- d--h--w- c:\program files (x86)\InstallShield Installation Information
2011-11-08 16:12 . 2011-08-31 11:12 1698408 ----a-w- c:\windows\RtlExUpd.dll
.
.
(((((((((((((((((((((((((((((((((((((((( Find3M výpis ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2011-11-09 08:59 . 2009-07-14 02:36 175616 ----a-w- c:\windows\system32\msclmd.dll
2011-11-09 08:59 . 2009-07-14 02:36 152576 ----a-w- c:\windows\SysWow64\msclmd.dll
2011-11-09 08:31 . 2011-11-09 08:31 249344 ----a-w- c:\windows\system32\webcheck.dll
2011-11-09 08:31 . 2011-11-09 08:31 203776 ----a-w- c:\windows\SysWow64\webcheck.dll
.
.
((((((((((((((((((((((((((((( SnapShot@2011-12-02_18.04.22 )))))))))))))))))))))))))))))))))))))))))
.
+ 2009-07-14 04:54 . 2011-12-02 18:29 16384 c:\windows\SysWOW64\config\systemprofile\AppData\Roaming\Microsoft\Windows\Cookies\index.dat
- 2009-07-14 04:54 . 2011-12-02 18:04 16384 c:\windows\SysWOW64\config\systemprofile\AppData\Roaming\Microsoft\Windows\Cookies\index.dat
- 2009-07-14 04:54 . 2011-12-02 18:04 32768 c:\windows\SysWOW64\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat
+ 2009-07-14 04:54 . 2011-12-02 18:29 32768 c:\windows\SysWOW64\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat
- 2009-07-14 04:54 . 2011-12-02 18:04 16384 c:\windows\SysWOW64\config\systemprofile\AppData\Local\Microsoft\Windows\History\History.IE5\index.dat
+ 2009-07-14 04:54 . 2011-12-02 18:29 16384 c:\windows\SysWOW64\config\systemprofile\AppData\Local\Microsoft\Windows\History\History.IE5\index.dat
+ 2011-11-08 16:10 . 2011-12-02 18:11 30872 c:\windows\system32\wdi\ShutdownPerformanceDiagnostics_SystemData.bin
+ 2009-07-14 05:10 . 2011-12-02 18:11 28326 c:\windows\system32\wdi\BootPerformanceDiagnostics_SystemData.bin
+ 2011-11-08 16:10 . 2011-12-02 18:11 7624 c:\windows\system32\wdi\{86432a0b-3c7d-4ddf-a89c-172faa90485d}\S-1-5-21-768311896-3300924832-1790489852-1000_UserData.bin
+ 2011-12-02 18:29 . 2011-12-02 18:29 2048 c:\windows\ServiceProfiles\LocalService\AppData\Local\lastalive0.dat
- 2011-12-02 18:04 . 2011-12-02 18:04 2048 c:\windows\ServiceProfiles\LocalService\AppData\Local\lastalive0.dat
+ 2009-07-14 02:36 . 2011-12-02 18:15 617910 c:\windows\system32\perfh009.dat
- 2009-07-14 02:36 . 2011-12-02 13:49 617910 c:\windows\system32\perfh009.dat
- 2009-07-14 15:18 . 2011-12-02 13:49 633154 c:\windows\system32\perfh005.dat
+ 2009-07-14 15:18 . 2011-12-02 18:15 633154 c:\windows\system32\perfh005.dat
+ 2009-07-14 02:36 . 2011-12-02 18:15 107190 c:\windows\system32\perfc009.dat
- 2009-07-14 02:36 . 2011-12-02 13:49 107190 c:\windows\system32\perfc009.dat
+ 2009-07-14 15:18 . 2011-12-02 18:15 122708 c:\windows\system32\perfc005.dat
- 2009-07-14 15:18 . 2011-12-02 13:49 122708 c:\windows\system32\perfc005.dat
- 2009-07-14 05:01 . 2011-12-02 18:01 228720 c:\windows\ServiceProfiles\LocalService\AppData\Local\FontCache-System.dat
+ 2009-07-14 05:01 . 2011-12-02 18:28 228720 c:\windows\ServiceProfiles\LocalService\AppData\Local\FontCache-System.dat
+ 2011-11-09 09:18 . 2011-12-02 18:28 13051476 c:\windows\ServiceProfiles\LocalService\AppData\Local\FontCache-S-1-5-21-768311896-3300924832-1790489852-1000-8192.dat
- 2011-11-09 09:18 . 2011-12-02 18:01 13051476 c:\windows\ServiceProfiles\LocalService\AppData\Local\FontCache-S-1-5-21-768311896-3300924832-1790489852-1000-8192.dat
.
(((((((((((((((((((((((((((((((((( Spouštěcí body v registru )))))))))))))))))))))))))))))))))))))))))))))
.
.
*Poznámka* prázdné záznamy a legitimní výchozí údaje nejsou zobrazeny.
REGEDIT4
.
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\URLSearchHooks]
"{bf7380fa-e3b4-4db2-af3e-9d8783a45bfc}"= "c:\program files (x86)\uTorrentBar\prxtbuTor.dll" [2011-05-09 176936]
.
[HKEY_CLASSES_ROOT\clsid\{bf7380fa-e3b4-4db2-af3e-9d8783a45bfc}]
.
[HKEY_LOCAL_MACHINE\Wow6432Node\~\Browser Helper Objects\{bf7380fa-e3b4-4db2-af3e-9d8783a45bfc}]
2011-05-09 09:49 176936 ----a-w- c:\program files (x86)\uTorrentBar\prxtbuTor.dll
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Toolbar]
"{bf7380fa-e3b4-4db2-af3e-9d8783a45bfc}"= "c:\program files (x86)\uTorrentBar\prxtbuTor.dll" [2011-05-09 176936]
.
[HKEY_CLASSES_ROOT\clsid\{bf7380fa-e3b4-4db2-af3e-9d8783a45bfc}]
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Steam"="c:\program files (x86)\Steam\steam.exe" [2011-11-09 1242448]
"Pando Media Booster"="c:\program files (x86)\Pando Networks\Media Booster\PMB.exe" [2011-11-10 3077528]
"SpyEmergency"="c:\program files\NETGATE\Spy Emergency\SpyEmergency.exe" [2011-11-17 3465560]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]
"IAStorIcon"="c:\program files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe" [2011-02-09 284184]
"avast"="c:\program files\AVAST Software\Avast\avastUI.exe" [2011-11-28 3744552]
"Malwarebytes' Anti-Malware"="c:\program files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe" [2011-08-31 449608]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorAdmin"= 5 (0x5)
"ConsentPromptBehaviorUser"= 3 (0x3)
"EnableUIADesktopToggle"= 0 (0x0)
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MsMpSvc]
@="Service"
.
R2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;c:\windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2010-03-18 138576]
R2 IAStorDataMgrSvc;Úložná technologie Intel(R) Rapid;c:\program files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe [2011-02-09 13336]
R2 MBAMService;MBAMService;c:\program files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe [2011-08-31 366152]
R2 nvUpdatusService;NVIDIA Update Service Daemon;c:\program files (x86)\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe [2011-11-08 2253120]
R3 MBAMProtector;MBAMProtector;c:\windows\system32\drivers\mbam.sys [x]
R3 MpNWMon;Microsoft Malware Protection Network Driver;c:\windows\system32\DRIVERS\MpNWMon.sys [x]
R3 NisDrv;Microsoft Network Inspection System;c:\windows\system32\DRIVERS\NisDrvWFP.sys [x]
R3 NisSrv;Microsoft Network Inspection;c:\program files\Microsoft Security Client\Antimalware\NisSrv.exe [2011-04-27 288272]
R3 SpyEmrgAccess;Spy Emergency OnAccess Driver;c:\windows\system32\Drivers\spyemrg_access.sys [x]
R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys [x]
R3 WatAdminSvc;Služba Technologie aktivace Windows;c:\windows\system32\Wat\WatAdminSvc.exe [x]
S0 mvs91xx;mvs91xx;c:\windows\system32\DRIVERS\mvs91xx.sys [x]
S1 aswSnx;aswSnx; [x]
S1 aswSP;aswSP; [x]
S1 SpyEmrg;Spy Emergency Driver;c:\windows\system32\Drivers\spyemrg.sys [x]
S2 aswFsBlk;aswFsBlk; [x]
S2 aswMonFlt;aswMonFlt;c:\windows\system32\drivers\aswMonFlt.sys [x]
S2 SpyEmrgSrv;Spy Emergency Engine Service;c:\program files\NETGATE\Spy Emergency\SpyEmergencySrv.exe [2011-09-12 3447328]
S3 EtronHub3;Etron USB 3.0 Extensible Hub Driver;c:\windows\system32\Drivers\EtronHub3.sys [x]
S3 EtronXHCI;Etron USB 3.0 Extensible Host Controller Driver;c:\windows\system32\Drivers\EtronXHCI.sys [x]
S3 MEIx64;Intel(R) Management Engine Interface;c:\windows\system32\DRIVERS\HECIx64.sys [x]
S3 NVHDA;Service for NVIDIA High Definition Audio Driver;c:\windows\system32\drivers\nvhda64v.sys [x]
S3 RTL8167;Realtek 8167 NT Driver;c:\windows\system32\DRIVERS\Rt64win7.sys [x]
S3 SpyEmrgGuard;Spy Emergency Real-Time Shield Driver;c:\windows\system32\Drivers\spyemrg_guard.sys [x]
.
.
.
--------- x86-64 -----------
.
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\00avast]
@="{472083B0-C522-11CF-8763-00608CC02F24}"
[HKEY_CLASSES_ROOT\CLSID\{472083B0-C522-11CF-8763-00608CC02F24}]
2011-11-28 18:01 134384 ----a-w- c:\program files\AVAST Software\Avast\ashShA64.dll
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"MSC"="c:\program files\Microsoft Security Client\msseces.exe" [2011-06-15 1436736]
"EvtMgr6"="c:\program files\Logitech\SetPointP\SetPoint.exe" [2011-10-07 1744152]
.
------- Doplňkový sken -------
.
uLocal Page = c:\windows\system32\blank.htm
uStart Page = hxxp://www.seznam.cz/
mLocal Page = c:\windows\SysWOW64\blank.htm
TCP: DhcpNameServer = 213.46.172.36 213.46.172.37
FF - ProfilePath - c:\users\User\AppData\Roaming\Mozilla\Firefox\Profiles\ovrfxnul.default\
FF - prefs.js: browser.search.selectedEngine - Wikipedie (cs)
FF - prefs.js: browser.startup.homepage - hxxp://seznam.cz/
FF - prefs.js: network.proxy.type - 0
.
- - - - NEPLATNÉ POLOŽKY ODSTRANĚNÉ Z REGISTRU - - - -
.
WebBrowser-{BF7380FA-E3B4-4DB2-AF3E-9D8783A45BFC} - (no file)
.
.
.
--------------------- ZAMKNUTÉ KLÍČE V REGISTRU ---------------------
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil11c_ActiveX.exe,-101"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\Elevation]
"Enabled"=dword:00000001
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\LocalServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil11c_ActiveX.exe"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@="Shockwave Flash Object"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\InprocServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash11c.ocx"
"ThreadingModel"="Apartment"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\MiscStatus]
@="0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ProgID]
@="ShockwaveFlash.ShockwaveFlash.10"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash11c.ocx, 1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\TypeLib]
@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\Version]
@="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
@="ShockwaveFlash.ShockwaveFlash"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@="Macromedia Flash Factory Object"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\InprocServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash11c.ocx"
"ThreadingModel"="Apartment"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ProgID]
@="FlashFactory.FlashFactory.1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash11c.ocx, 1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\TypeLib]
@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\Version]
@="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
@="FlashFactory.FlashFactory"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}]
@Denied: (A 2) (Everyone)
@="IFlashBroker4"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\PCW\Security]
@Denied: (Full) (Everyone)
.
------------------------ Jiné spuštené procesy ------------------------
.
c:\program files\AVAST Software\Avast\AvastSvc.exe
c:\windows\SysWOW64\PnkBstrA.exe
.
**************************************************************************
.
Celkový čas: 2011-12-02 19:30:24 - počítač byl restartován
ComboFix-quarantined-files.txt 2011-12-02 18:30
ComboFix2.txt 2011-12-02 18:06
.
Před spuštěním: Volných bajtů: 39 567 114 240
Po spuštění: Volných bajtů: 39 473 905 664
.
- - End Of File - - 954E8A4934A99624886086116E3DAC12
Nahoru
Uživatelský avatar
Žbeky
Moderátor
Guru Level 13
Guru Level 13
Příspěvky: 22288
Registrován: květen 08
Bydliště: Vsetín - Pardubice
Pohlaví: Muž
Stav:
Offline

Re: Místo vypnutí se PC uspí, probuzení=restart+uspání

Příspěvekod Žbeky » 02 pro 2011 20:37

Máš tam avast a MSE - jedno odinstaluj a dej sem nový log z combofixu
V SZ řeším jen záležitosti týkající se fóra. Na prosby a žádosti o technickou podporu nereaguji. Díky za pochopení.

HiJackThis + návod - HW Monitor - Jak označit příspěvek za vyřešený - Pravidla fóra
Nahoru
Taska
nováček
Příspěvky: 43
Registrován: listopad 11
Pohlaví: Nespecifikováno
Stav:
Offline

Re: Místo vypnutí se PC uspí, probuzení=restart+uspání

Příspěvekod Taska » 02 pro 2011 22:50

ComboFix 11-12-02.02 - User 02.12.2011 22:26:36.3.4 - x64
Microsoft Windows 7 Home Premium 6.1.7601.1.1250.420.1029.18.8175.6671 [GMT 1:00]
Spuštěný z: c:\users\User\Downloads\ComboFix.exe
AV: Microsoft Security Essentials *Disabled/Updated* {108DAC43-C256-20B7-BB05-914135DA5160}
SP: Microsoft Security Essentials *Disabled/Updated* {ABEC4DA7-E46C-2F39-81B5-AA334E5D1BDD}
SP: Windows Defender *Disabled/Outdated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.
.
((((((((((((((((((((((((( Soubory vytvořené od 2011-11-02 do 2011-12-02 )))))))))))))))))))))))))))))))
.
.
2011-12-02 21:41 . 2011-12-02 21:41 69000 ----a-w- c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\{F9A97D27-478E-46A7-8DA3-539443CB8E21}\offreg.dll
2011-12-02 21:41 . 2011-12-02 21:41 -------- d-----w- c:\users\Default\AppData\Local\temp
2011-12-02 18:35 . 2011-11-21 11:40 8822856 ----a-w- c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\{F9A97D27-478E-46A7-8DA3-539443CB8E21}\mpengine.dll
2011-12-02 10:57 . 2011-12-02 10:57 -------- d-----w- c:\programdata\Malwarebytes
2011-12-02 10:57 . 2011-08-31 16:00 25416 ----a-w- c:\windows\system32\drivers\mbam.sys
2011-12-02 10:57 . 2011-12-02 10:57 -------- d-----w- c:\program files (x86)\Malwarebytes' Anti-Malware
2011-12-01 18:56 . 2011-12-01 18:57 -------- d-----w- c:\users\Administrator
2011-12-01 14:21 . 2011-12-01 14:21 -------- d-----w- c:\program files (x86)\Trend Micro
2011-12-01 13:58 . 2011-11-28 18:01 256960 ----a-w- c:\windows\system32\aswBoot.exe
2011-12-01 13:58 . 2011-12-02 21:15 -------- d-----w- c:\programdata\AVAST Software
2011-12-01 13:58 . 2011-12-01 13:58 -------- d-----w- c:\program files\AVAST Software
2011-11-29 17:59 . 2011-09-09 20:35 2580552 ----a-w- c:\windows\SysWow64\pbsvc.exe
2011-11-28 22:49 . 2011-11-28 22:49 -------- d-----w- c:\windows\SysWow64\RTCOM
2011-11-28 16:39 . 2011-11-28 16:39 -------- d-----w- c:\program files\CCleaner
2011-11-28 12:29 . 2011-04-21 09:31 24408 ----a-w- c:\windows\system32\drivers\spyemrg_access.sys
2011-11-28 12:29 . 2011-04-21 09:31 18776 ----a-w- c:\windows\system32\drivers\spyemrg_guard.sys
2011-11-28 12:29 . 2011-04-21 09:31 17240 ----a-w- c:\windows\system32\drivers\spyemrg.sys
2011-11-28 12:29 . 2011-11-28 12:29 -------- d-----w- c:\programdata\NETGATE
2011-11-28 12:29 . 2011-11-28 12:29 -------- d-----w- c:\program files\NETGATE
2011-11-28 11:57 . 2011-11-28 11:57 -------- d--h--w- c:\programdata\Common Files
2011-11-28 11:57 . 2011-12-02 00:14 -------- d-----w- c:\programdata\MFAData
2011-11-28 10:48 . 2011-11-28 11:44 -------- d-----w- c:\program files (x86)\IObit Toolbar
2011-11-28 10:48 . 2011-11-28 10:48 -------- d-----w- c:\program files (x86)\Common Files\Spigot
2011-11-28 10:48 . 2011-11-28 10:48 -------- d-----w- c:\programdata\IObit
2011-11-28 10:48 . 2011-11-28 10:48 -------- d-----w- c:\program files (x86)\IObit
2011-11-28 00:43 . 2011-11-28 11:45 -------- d-----w- c:\program files\SUPERAntiSpyware
2011-11-28 00:43 . 2011-11-28 00:43 -------- d-----w- c:\programdata\SUPERAntiSpyware.com
2011-11-26 20:50 . 2011-11-26 20:50 -------- d-----w- c:\programdata\vsosdk
2011-11-26 20:01 . 2011-11-28 11:44 -------- d-----w- c:\program files (x86)\VSO
2011-11-26 19:36 . 2011-11-26 19:36 -------- d-----w- c:\programdata\ashampoo
2011-11-26 19:35 . 2011-11-26 19:35 -------- d-----w- c:\program files (x86)\Ashampoo
2011-11-21 09:27 . 2011-11-21 09:27 -------- d-----w- c:\program files (x86)\Conduit
2011-11-21 09:27 . 2011-11-21 09:27 -------- d-----w- c:\program files (x86)\uTorrent
2011-11-15 15:08 . 2011-11-15 15:08 -------- d-----w- c:\program files (x86)\VideoLAN
2011-11-12 13:36 . 2011-04-05 23:23 13416 ----a-w- c:\windows\system32\drivers\nvflash.sys
2011-11-12 12:39 . 2011-11-28 11:47 -------- d-----w- c:\users\UpdatusUser
2011-11-12 12:39 . 2011-11-12 12:39 -------- d-----w- c:\programdata\NVIDIA
2011-11-12 12:38 . 2011-11-08 03:51 837952 ----a-w- c:\windows\system32\easyupdatusapiu64.dll
2011-11-12 12:38 . 2011-11-08 03:51 5067584 ----a-w- c:\windows\system32\nvsvc64.dll
2011-11-12 12:38 . 2011-11-08 03:51 3074368 ----a-w- c:\windows\system32\nvsvcr.dll
2011-11-12 12:38 . 2011-11-08 03:51 222528 ----a-w- c:\windows\system32\nvmctray.dll
2011-11-12 12:38 . 2011-11-08 03:51 1640768 ----a-w- c:\windows\system32\nvvsvc.exe
2011-11-12 12:38 . 2011-11-08 03:51 137536 ----a-w- c:\windows\system32\nvshext.dll
2011-11-12 12:38 . 2011-11-08 03:51 10406208 ----a-w- c:\windows\system32\nvcpl.dll
2011-11-12 12:38 . 2011-11-12 12:38 -------- d-----w- c:\programdata\NVIDIA Corporation
2011-11-10 11:20 . 2008-07-12 07:18 467984 ----a-w- c:\windows\SysWow64\d3dx10_39.dll
2011-11-10 11:20 . 2008-07-12 07:18 3851784 ----a-w- c:\windows\SysWow64\D3DX9_39.dll
2011-11-10 11:20 . 2008-07-12 07:18 1493528 ----a-w- c:\windows\SysWow64\D3DCompiler_39.dll
2011-11-10 11:19 . 2011-11-10 11:19 -------- d-----w- C:\Riot Games
2011-11-10 11:01 . 2011-12-02 17:39 -------- d-----w- c:\programdata\PMB Files
2011-11-10 11:01 . 2011-11-10 11:01 -------- d-----w- c:\program files (x86)\Pando Networks
2011-11-10 09:05 . 2011-10-06 20:16 8570192 ----a-w- c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\Backup\mpengine.dll
2011-11-09 21:32 . 2011-11-09 21:32 -------- d-----w- c:\program files (x86)\TeamSpeak 3 Client
2011-11-09 17:00 . 2011-11-14 10:32 -------- d-----w- c:\program files (x86)\Common Files\Steam
2011-11-09 17:00 . 2011-12-02 21:16 -------- d-----w- c:\program files (x86)\Steam
2011-11-09 16:57 . 2011-11-09 16:57 -------- d-----w- c:\windows\B9DB4C7601A446D58910F7AA6376DBAF.TMP
2011-11-09 13:39 . 2011-11-09 13:39 -------- d-----w- C:\NVIDIA
2011-11-09 13:34 . 2010-12-02 09:12 1359976 ----a-w- c:\windows\system32\nvgenco64hda.dll
2011-11-09 13:34 . 2010-11-11 23:10 29288 ----a-w- c:\windows\system32\nvhdap64.dll
2011-11-09 13:34 . 2010-11-11 23:10 155752 ----a-w- c:\windows\system32\drivers\nvhda64v.sys
2011-11-09 13:33 . 2010-12-30 11:12 1614440 ----a-w- c:\windows\system32\nvdispco642090.dll
2011-11-09 13:33 . 2010-12-30 11:12 1359976 ----a-w- c:\windows\system32\nvgenco642040.dll
2011-11-09 13:31 . 2010-12-30 11:12 11240 ----a-w- c:\windows\system32\drivers\nvBridge.kmd
2011-11-09 13:29 . 2011-12-02 19:11 280904 ----a-w- c:\windows\SysWow64\PnkBstrB.xtr
2011-11-09 13:28 . 2011-11-09 13:28 -------- d-----w- c:\program files (x86)\Battlelog Web Plugins
2011-11-09 13:26 . 2011-11-09 13:26 -------- d-----w- c:\programdata\EA Core
2011-11-09 13:19 . 2011-11-09 13:19 -------- d--h--w- c:\program files (x86)\Common Files\EAInstaller
2011-11-09 12:39 . 2011-11-28 11:44 -------- d-----w- c:\programdata\Origin
2011-11-09 12:39 . 2011-11-09 13:26 -------- d-----w- c:\programdata\Electronic Arts
2011-11-09 12:39 . 2011-11-09 12:55 -------- d-----w- c:\program files (x86)\Origin Games
2011-11-09 12:39 . 2011-11-09 21:52 -------- d-----w- c:\program files (x86)\Origin
2011-11-09 12:32 . 2011-11-09 12:32 -------- d-----w- c:\program files (x86)\Common Files\LogiShrd
2011-11-09 12:31 . 2011-11-09 12:31 18960 ----a-w- c:\windows\system32\drivers\LNonPnP.sys
2011-11-09 12:31 . 2011-11-09 12:32 -------- d-----w- c:\programdata\Logishrd
2011-11-09 12:31 . 2011-11-09 12:31 -------- d-----w- c:\program files\Logitech
2011-11-09 12:31 . 2011-11-09 12:32 -------- d-----w- c:\program files\Common Files\Logishrd
2011-11-09 09:24 . 2011-02-19 12:05 1139200 ----a-w- c:\windows\system32\FntCache.dll
2011-11-09 09:24 . 2011-02-19 12:04 1544192 ----a-w- c:\windows\system32\DWrite.dll
2011-11-09 09:24 . 2011-02-19 12:04 902656 ----a-w- c:\windows\system32\d2d1.dll
2011-11-09 09:24 . 2011-02-19 06:30 1076736 ----a-w- c:\windows\SysWow64\DWrite.dll
2011-11-09 09:24 . 2011-02-19 06:30 739840 ----a-w- c:\windows\SysWow64\d2d1.dll
2011-11-09 09:03 . 2011-11-09 09:03 917840 ------w- c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\{DFBF0D39-18BA-40B9-AFB6-3B93A3056523}\gapaengine.dll
2011-11-09 08:55 . 2011-11-09 13:03 414368 ----a-w- c:\windows\SysWow64\FlashPlayerCPLApp.cpl
2011-11-09 08:55 . 2011-11-09 08:55 -------- d-----w- c:\windows\SysWow64\Macromed
2011-11-09 08:55 . 2011-11-09 08:55 -------- d-----w- c:\windows\system32\Macromed
2011-11-09 08:54 . 2011-11-09 08:54 -------- d-----w- c:\program files (x86)\Microsoft Security Client
2011-11-09 08:54 . 2011-11-09 08:54 -------- d-----w- c:\program files\Microsoft Security Client
2011-11-09 08:44 . 2011-11-09 08:44 -------- d-----w- c:\windows\system32\SPReview
2011-11-09 08:44 . 2011-11-09 08:44 -------- d-----w- c:\windows\system32\EventProviders
2011-11-09 08:42 . 2010-11-20 12:21 363008 ----a-w- c:\windows\SysWow64\wbemcomn.dll
2011-11-09 08:42 . 2010-11-20 12:21 189952 ----a-w- c:\program files (x86)\Windows Portable Devices\sqmapi.dll
2011-11-09 08:42 . 2010-11-20 12:19 606208 ----a-w- c:\windows\SysWow64\wbem\fastprox.dll
2011-11-09 08:42 . 2010-11-20 13:27 529408 ----a-w- c:\windows\system32\wbemcomn.dll
2011-11-09 08:42 . 2010-11-20 13:27 244736 ----a-w- c:\program files\Windows Portable Devices\sqmapi.dll
2011-11-09 08:42 . 2010-11-20 13:27 244736 ----a-w- c:\windows\system32\sqmapi.dll
2011-11-09 08:31 . 2011-11-09 08:31 995328 ----a-w- c:\program files\Common Files\Microsoft Shared\VGX\VGX.dll
2011-11-09 02:00 . 2011-11-09 02:00 -------- d-----w- c:\windows\SysWow64\Wat
2011-11-09 02:00 . 2011-11-09 02:00 -------- d-----w- c:\windows\system32\Wat
2011-11-08 19:58 . 2011-11-28 16:41 -------- d-----w- c:\windows\Panther
2011-11-08 16:28 . 2010-02-23 08:16 294912 ----a-w- c:\windows\system32\browserchoice.exe
2011-11-08 16:24 . 2011-02-25 06:19 2871808 ----a-w- c:\windows\explorer.exe
2011-11-08 16:24 . 2011-02-25 05:30 2616320 ----a-w- c:\windows\SysWow64\explorer.exe
2011-11-08 16:23 . 2011-11-08 16:23 -------- d-----w- c:\program files (x86)\Common Files\Intel Corporation
2011-11-08 16:19 . 2011-11-12 12:39 -------- d-----w- c:\program files (x86)\NVIDIA Corporation
2011-11-08 16:19 . 2011-11-12 12:39 -------- d-----w- c:\program files\NVIDIA Corporation
2011-11-08 16:15 . 2011-11-08 16:15 -------- d-----w- c:\program files (x86)\Etron Technology
2011-11-08 16:15 . 2011-12-02 00:13 -------- d-sh--w- c:\windows\Installer
2011-11-08 16:14 . 2011-11-08 16:14 -------- d-----w- c:\program files (x86)\Marvell
2011-11-08 16:14 . 2011-02-09 12:06 555032 ----a-w- c:\windows\system32\drivers\iaStor.sys
2011-11-08 16:13 . 2011-11-08 16:13 -------- d-----w- c:\program files\Realtek
2011-11-08 16:12 . 2011-01-13 11:58 74272 ----a-w- c:\windows\system32\RtNicProp64.dll
2011-11-08 16:12 . 2011-01-13 11:58 413800 ----a-w- c:\windows\system32\drivers\Rt64win7.sys
2011-11-08 16:12 . 2011-01-13 11:58 107552 ----a-w- c:\windows\system32\RTNUninst64.dll
2011-11-08 16:12 . 2011-11-09 21:45 -------- d-----w- c:\program files (x86)\Realtek
2011-11-08 16:12 . 2011-11-28 22:49 -------- d--h--w- c:\program files (x86)\Temp
2011-11-08 16:12 . 2011-11-28 22:48 -------- d--h--w- c:\program files (x86)\InstallShield Installation Information
2011-11-08 16:12 . 2011-08-31 11:12 1698408 ----a-w- c:\windows\RtlExUpd.dll
2011-11-08 16:12 . 2011-11-08 16:14 -------- d-----w- c:\program files (x86)\Intel
2011-11-08 16:12 . 2010-12-23 03:09 53248 ----a-r- c:\windows\SysWow64\CSVer.dll
2011-11-08 16:12 . 2011-11-08 16:12 -------- d-----w- C:\Intel
2011-11-07 17:53 . 2011-11-07 17:53 321856 ----a-w- c:\windows\SysWow64\nvStreaming.exe
.
.
.
(((((((((((((((((((((((((((((((((((((((( Find3M výpis ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2011-11-09 08:59 . 2009-07-14 02:36 175616 ----a-w- c:\windows\system32\msclmd.dll
2011-11-09 08:59 . 2009-07-14 02:36 152576 ----a-w- c:\windows\SysWow64\msclmd.dll
2011-11-09 08:31 . 2011-11-09 08:31 249344 ----a-w- c:\windows\system32\webcheck.dll
2011-11-09 08:31 . 2011-11-09 08:31 203776 ----a-w- c:\windows\SysWow64\webcheck.dll
.
.
((((((((((((((((((((((((((((( SnapShot@2011-12-02_18.04.22 )))))))))))))))))))))))))))))))))))))))))
.
- 2009-07-14 04:54 . 2011-12-02 18:04 16384 c:\windows\SysWOW64\config\systemprofile\AppData\Roaming\Microsoft\Windows\Cookies\index.dat
+ 2009-07-14 04:54 . 2011-12-02 20:34 16384 c:\windows\SysWOW64\config\systemprofile\AppData\Roaming\Microsoft\Windows\Cookies\index.dat
- 2009-07-14 04:54 . 2011-12-02 18:04 32768 c:\windows\SysWOW64\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat
+ 2009-07-14 04:54 . 2011-12-02 20:34 32768 c:\windows\SysWOW64\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat
+ 2009-07-14 04:54 . 2011-12-02 20:34 16384 c:\windows\SysWOW64\config\systemprofile\AppData\Local\Microsoft\Windows\History\History.IE5\index.dat
- 2009-07-14 04:54 . 2011-12-02 18:04 16384 c:\windows\SysWOW64\config\systemprofile\AppData\Local\Microsoft\Windows\History\History.IE5\index.dat
+ 2011-11-08 16:10 . 2011-12-02 21:18 31404 c:\windows\system32\wdi\ShutdownPerformanceDiagnostics_SystemData.bin
+ 2009-07-14 05:10 . 2011-12-02 21:18 28594 c:\windows\system32\wdi\BootPerformanceDiagnostics_SystemData.bin
+ 2011-11-08 16:10 . 2011-12-02 21:18 7656 c:\windows\system32\wdi\{86432a0b-3c7d-4ddf-a89c-172faa90485d}\S-1-5-21-768311896-3300924832-1790489852-1000_UserData.bin
+ 2011-12-02 21:41 . 2011-12-02 21:41 2048 c:\windows\ServiceProfiles\LocalService\AppData\Local\lastalive1.dat
- 2011-12-02 18:04 . 2011-12-02 18:04 2048 c:\windows\ServiceProfiles\LocalService\AppData\Local\lastalive0.dat
+ 2011-12-02 21:41 . 2011-12-02 21:41 2048 c:\windows\ServiceProfiles\LocalService\AppData\Local\lastalive0.dat
- 2011-11-09 13:18 . 2011-12-02 14:09 280904 c:\windows\SysWOW64\PnkBstrB.exe
+ 2011-11-09 13:18 . 2011-12-02 19:11 280904 c:\windows\SysWOW64\PnkBstrB.exe
+ 2009-07-14 02:36 . 2011-12-02 21:21 617910 c:\windows\system32\perfh009.dat
- 2009-07-14 02:36 . 2011-12-02 13:49 617910 c:\windows\system32\perfh009.dat
+ 2009-07-14 15:18 . 2011-12-02 21:21 633154 c:\windows\system32\perfh005.dat
- 2009-07-14 15:18 . 2011-12-02 13:49 633154 c:\windows\system32\perfh005.dat
+ 2009-07-14 02:36 . 2011-12-02 21:21 107190 c:\windows\system32\perfc009.dat
- 2009-07-14 02:36 . 2011-12-02 13:49 107190 c:\windows\system32\perfc009.dat
+ 2009-07-14 15:18 . 2011-12-02 21:21 122708 c:\windows\system32\perfc005.dat
- 2009-07-14 15:18 . 2011-12-02 13:49 122708 c:\windows\system32\perfc005.dat
+ 2009-07-14 05:01 . 2011-12-02 21:41 228720 c:\windows\ServiceProfiles\LocalService\AppData\Local\FontCache-System.dat
- 2009-07-14 05:01 . 2011-12-02 18:01 228720 c:\windows\ServiceProfiles\LocalService\AppData\Local\FontCache-System.dat
+ 2011-11-09 09:18 . 2011-12-02 21:41 13065091 c:\windows\ServiceProfiles\LocalService\AppData\Local\FontCache-S-1-5-21-768311896-3300924832-1790489852-1000-8192.dat
.
(((((((((((((((((((((((((((((((((( Spouštěcí body v registru )))))))))))))))))))))))))))))))))))))))))))))
.
.
*Poznámka* prázdné záznamy a legitimní výchozí údaje nejsou zobrazeny.
REGEDIT4
.
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\URLSearchHooks]
"{bf7380fa-e3b4-4db2-af3e-9d8783a45bfc}"= "c:\program files (x86)\uTorrentBar\prxtbuTor.dll" [2011-05-09 176936]
.
[HKEY_CLASSES_ROOT\clsid\{bf7380fa-e3b4-4db2-af3e-9d8783a45bfc}]
.
[HKEY_LOCAL_MACHINE\Wow6432Node\~\Browser Helper Objects\{bf7380fa-e3b4-4db2-af3e-9d8783a45bfc}]
2011-05-09 09:49 176936 ----a-w- c:\program files (x86)\uTorrentBar\prxtbuTor.dll
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Toolbar]
"{bf7380fa-e3b4-4db2-af3e-9d8783a45bfc}"= "c:\program files (x86)\uTorrentBar\prxtbuTor.dll" [2011-05-09 176936]
.
[HKEY_CLASSES_ROOT\clsid\{bf7380fa-e3b4-4db2-af3e-9d8783a45bfc}]
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Steam"="c:\program files (x86)\Steam\steam.exe" [2011-11-09 1242448]
"Pando Media Booster"="c:\program files (x86)\Pando Networks\Media Booster\PMB.exe" [2011-11-10 3077528]
"SpyEmergency"="c:\program files\NETGATE\Spy Emergency\SpyEmergency.exe" [2011-11-17 3465560]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]
"IAStorIcon"="c:\program files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe" [2011-02-09 284184]
"Malwarebytes' Anti-Malware"="c:\program files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe" [2011-08-31 449608]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorAdmin"= 5 (0x5)
"ConsentPromptBehaviorUser"= 3 (0x3)
"EnableUIADesktopToggle"= 0 (0x0)
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MsMpSvc]
@="Service"
.
R2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;c:\windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2010-03-18 138576]
R2 IAStorDataMgrSvc;Úložná technologie Intel(R) Rapid;c:\program files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe [2011-02-09 13336]
R2 MBAMService;MBAMService;c:\program files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe [2011-08-31 366152]
R2 nvUpdatusService;NVIDIA Update Service Daemon;c:\program files (x86)\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe [2011-11-08 2253120]
R3 MBAMProtector;MBAMProtector;c:\windows\system32\drivers\mbam.sys [x]
R3 MpNWMon;Microsoft Malware Protection Network Driver;c:\windows\system32\DRIVERS\MpNWMon.sys [x]
R3 NisDrv;Microsoft Network Inspection System;c:\windows\system32\DRIVERS\NisDrvWFP.sys [x]
R3 NisSrv;Microsoft Network Inspection;c:\program files\Microsoft Security Client\Antimalware\NisSrv.exe [2011-04-27 288272]
R3 SpyEmrgAccess;Spy Emergency OnAccess Driver;c:\windows\system32\Drivers\spyemrg_access.sys [x]
R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys [x]
R3 WatAdminSvc;Služba Technologie aktivace Windows;c:\windows\system32\Wat\WatAdminSvc.exe [x]
S0 mvs91xx;mvs91xx;c:\windows\system32\DRIVERS\mvs91xx.sys [x]
S1 SpyEmrg;Spy Emergency Driver;c:\windows\system32\Drivers\spyemrg.sys [x]
S2 SpyEmrgSrv;Spy Emergency Engine Service;c:\program files\NETGATE\Spy Emergency\SpyEmergencySrv.exe [2011-09-12 3447328]
S3 EtronHub3;Etron USB 3.0 Extensible Hub Driver;c:\windows\system32\Drivers\EtronHub3.sys [x]
S3 EtronXHCI;Etron USB 3.0 Extensible Host Controller Driver;c:\windows\system32\Drivers\EtronXHCI.sys [x]
S3 MEIx64;Intel(R) Management Engine Interface;c:\windows\system32\DRIVERS\HECIx64.sys [x]
S3 NVHDA;Service for NVIDIA High Definition Audio Driver;c:\windows\system32\drivers\nvhda64v.sys [x]
S3 RTL8167;Realtek 8167 NT Driver;c:\windows\system32\DRIVERS\Rt64win7.sys [x]
S3 SpyEmrgGuard;Spy Emergency Real-Time Shield Driver;c:\windows\system32\Drivers\spyemrg_guard.sys [x]
.
.
.
--------- x86-64 -----------
.
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"MSC"="c:\program files\Microsoft Security Client\msseces.exe" [2011-06-15 1436736]
"EvtMgr6"="c:\program files\Logitech\SetPointP\SetPoint.exe" [2011-10-07 1744152]
.
------- Doplňkový sken -------
.
uLocal Page = c:\windows\system32\blank.htm
uStart Page = hxxp://www.seznam.cz/
mLocal Page = c:\windows\SysWOW64\blank.htm
TCP: DhcpNameServer = 213.46.172.36 213.46.172.37
FF - ProfilePath - c:\users\User\AppData\Roaming\Mozilla\Firefox\Profiles\ovrfxnul.default\
FF - prefs.js: browser.search.selectedEngine - Wikipedie (cs)
FF - prefs.js: browser.startup.homepage - hxxp://seznam.cz/
FF - prefs.js: network.proxy.type - 0
.
- - - - NEPLATNÉ POLOŽKY ODSTRANĚNÉ Z REGISTRU - - - -
.
WebBrowser-{BF7380FA-E3B4-4DB2-AF3E-9D8783A45BFC} - (no file)
.
.
.
--------------------- ZAMKNUTÉ KLÍČE V REGISTRU ---------------------
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil11c_ActiveX.exe,-101"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\Elevation]
"Enabled"=dword:00000001
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\LocalServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil11c_ActiveX.exe"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@="Shockwave Flash Object"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\InprocServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash11c.ocx"
"ThreadingModel"="Apartment"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\MiscStatus]
@="0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ProgID]
@="ShockwaveFlash.ShockwaveFlash.10"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash11c.ocx, 1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\TypeLib]
@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\Version]
@="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
@="ShockwaveFlash.ShockwaveFlash"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@="Macromedia Flash Factory Object"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\InprocServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash11c.ocx"
"ThreadingModel"="Apartment"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ProgID]
@="FlashFactory.FlashFactory.1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash11c.ocx, 1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\TypeLib]
@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\Version]
@="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
@="FlashFactory.FlashFactory"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}]
@Denied: (A 2) (Everyone)
@="IFlashBroker4"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\PCW\Security]
@Denied: (Full) (Everyone)
.
------------------------ Jiné spuštené procesy ------------------------
.
c:\windows\SysWOW64\PnkBstrA.exe
.
**************************************************************************
.
Celkový čas: 2011-12-02 22:42:30 - počítač byl restartován
ComboFix-quarantined-files.txt 2011-12-02 21:42
ComboFix2.txt 2011-12-02 18:30
ComboFix3.txt 2011-12-02 18:06
.
Před spuštěním: Volných bajtů: 39 643 361 280
Po spuštění: Volných bajtů: 39 046 918 144
.
- - End Of File - - 44F444BC3B67EE056D7E625E04CC58B7
Nahoru
Taska
nováček
Příspěvky: 43
Registrován: listopad 11
Pohlaví: Nespecifikováno
Stav:
Offline

Re: Místo vypnutí se PC uspí, probuzení=restart+uspání

Příspěvekod Taska » 02 pro 2011 22:52

Po prvním restartu v logu nebyli žádné "Jiné spuštěné procesy ", ale nešlo nic spustit tak jsem musel dát restart
Nahoru
Uživatelský avatar
Žbeky
Moderátor
Guru Level 13
Guru Level 13
Příspěvky: 22288
Registrován: květen 08
Bydliště: Vsetín - Pardubice
Pohlaví: Muž
Stav:
Offline

Re: Místo vypnutí se PC uspí, probuzení=restart+uspání

Příspěvekod Žbeky » 02 pro 2011 23:32

Smaže to SpyEmergency a superantispyware, tak se neděs a hlavně je neinstaluj zpátky

Otevři si Poznámkový blok (Start -> Spustit... a napiš do okna Notepad a dej Ok.
Zkopíruj do něj následující celý text označený zeleně:
Poznámka: Nepoužij k označení skriptu funkci VYBRAT VŠE

Kód: Vybrat vše

KillAll::

File::
c:\windows\system32\aswBoot.exe
c:\windows\system32\drivers\spyemrg_access.sys
c:\windows\system32\drivers\spyemrg_guard.sys
c:\windows\system32\drivers\spyemrg.sys
c:\windows\system32\perfh009.dat
c:\windows\system32\perfh005.dat
c:\windows\system32\perfc009.dat
c:\windows\system32\perfc005.dat

Folder::
c:\programdata\AVAST Software
c:\program files\AVAST Software
c:\programdata\NETGATE
c:\program files\NETGATE
c:\program files (x86)\IObit Toolbar
c:\program files (x86)\Common Files\Spigot
c:\program files\SUPERAntiSpyware
c:\programdata\SUPERAntiSpyware.com
c:\program files (x86)\Conduit
c:\windows\B9DB4C7601A446D58910F7AA6376DBAF.TMP
c:\program files (x86)\uTorrentBar

Registry::
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\URLSearchHooks]
"{bf7380fa-e3b4-4db2-af3e-9d8783a45bfc}"=-
[-HKEY_CLASSES_ROOT\clsid\{bf7380fa-e3b4-4db2-af3e-9d8783a45bfc}]
[-HKEY_LOCAL_MACHINE\Wow6432Node\~\Browser Helper Objects\{bf7380fa-e3b4-4db2-af3e-9d8783a45bfc}]
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Toolbar]
"{bf7380fa-e3b4-4db2-af3e-9d8783a45bfc}"=-
[-HKEY_CLASSES_ROOT\clsid\{bf7380fa-e3b4-4db2-af3e-9d8783a45bfc}]
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"SpyEmergency"=-

Driver::
SpyEmrgAccess
SpyEmrg
SpyEmrgSrv
SpyEmrgGuard

RegLock::
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}]
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\Elevation]
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\LocalServer32]
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\TypeLib]
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}]
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\InprocServer32]
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\MiscStatus]
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ProgID]
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\TypeLib]
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\Version]
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}]
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\InprocServer32]
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ProgID]
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\TypeLib]
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\Version]
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}]
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}\ProxyStubClsid32]
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}\TypeLib]
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\PCW\Security]

Zvol možnost Soubor -> Uložit jako... a nastav tyto parametry:
Název souboru: zde napiš: CFScript.txt
Uložit jako typ: tak tam vyber Všechny soubory
Ulož soubor na plochu.
Ukonči všechna aktivní okna.

Uchop myší vytvořený skript CFScript.txt, přemísti ho nad stažený program ComboFix.exe a když se oba soubory překryjí, skript upusť.
- Automaticky se spustí ComboFix
- Vlož sem log, který vyběhne v závěru čistícího procesu
V SZ řeším jen záležitosti týkající se fóra. Na prosby a žádosti o technickou podporu nereaguji. Díky za pochopení.

HiJackThis + návod - HW Monitor - Jak označit příspěvek za vyřešený - Pravidla fóra
Nahoru
Taska
nováček
Příspěvky: 43
Registrován: listopad 11
Pohlaví: Nespecifikováno
Stav:
Offline

Re: Místo vypnutí se PC uspí, probuzení=restart+uspání

Příspěvekod Taska » 03 pro 2011 11:47

ComboFix 11-12-02.02 - User 03.12.2011 1:36.4.4 - x64
Microsoft Windows 7 Home Premium 6.1.7601.1.1250.420.1029.18.8175.6748 [GMT 1:00]
Spuštěný z: c:\users\User\Downloads\ComboFix.exe
Použité ovládací přepínače :: c:\users\User\Desktop\CFScript.txt
AV: Microsoft Security Essentials *Disabled/Updated* {108DAC43-C256-20B7-BB05-914135DA5160}
SP: Microsoft Security Essentials *Disabled/Updated* {ABEC4DA7-E46C-2F39-81B5-AA334E5D1BDD}
SP: Windows Defender *Disabled/Outdated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.
FILE ::
"c:\windows\system32\aswBoot.exe"
"c:\windows\system32\drivers\spyemrg.sys"
"c:\windows\system32\drivers\spyemrg_access.sys"
"c:\windows\system32\drivers\spyemrg_guard.sys"
"c:\windows\system32\perfc005.dat"
"c:\windows\system32\perfc009.dat"
"c:\windows\system32\perfh005.dat"
"c:\windows\system32\perfh009.dat"
.
.
((((((((((((((((((((((((((((((((((((((( Ostatní výmazy )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
c:\program files (x86)\Common Files\Spigot
c:\program files (x86)\Common Files\Spigot\Search Settings\baidu_ff.xml
c:\program files (x86)\Common Files\Spigot\Search Settings\baidu_ie.xml
c:\program files (x86)\Common Files\Spigot\Search Settings\yahoo_ff.xml
c:\program files (x86)\Common Files\Spigot\Search Settings\yahoo_ie.xml
c:\program files (x86)\Common Files\Spigot\Search Settings\yandex_ff.xml
c:\program files (x86)\Common Files\Spigot\Search Settings\yandex_ie.xml
c:\program files (x86)\Common Files\Spigot\wtxpcom\components\IFBHOHelperWidgiToolbar.xpt
c:\program files (x86)\Common Files\Spigot\wtxpcom\components\IFBHOWidgiToolbar.xpt
c:\program files (x86)\Common Files\Spigot\wtxpcom\components\WidgiToolbarFF.dll.10
c:\program files (x86)\Common Files\Spigot\wtxpcom\components\WidgiToolbarFF.dll.5
c:\program files (x86)\Common Files\Spigot\wtxpcom\components\WidgiToolbarFF.dll.6
c:\program files (x86)\Common Files\Spigot\wtxpcom\components\WidgiToolbarFF.dll.7
c:\program files (x86)\Common Files\Spigot\wtxpcom\components\WidgiToolbarFF.dll.8
c:\program files (x86)\Common Files\Spigot\wtxpcom\components\WidgiToolbarFF.dll.9
c:\program files (x86)\Common Files\Spigot\wtxpcom\install.rdf
c:\program files (x86)\Conduit
c:\program files (x86)\IObit Toolbar
c:\program files (x86)\IObit Toolbar\FF\chrome\content\chevron.xul
c:\program files (x86)\IObit Toolbar\FF\chrome\content\login.xul
c:\program files (x86)\IObit Toolbar\FF\chrome\content\RadioWidget.xul
c:\program files (x86)\IObit Toolbar\FF\chrome\content\searchbox.xul
c:\program files (x86)\IObit Toolbar\FF\chrome\content\widgitoolbarplugin.xul
c:\program files (x86)\IObit Toolbar\FF\chrome\locale\EN-US\searchbox.dtd
c:\program files (x86)\IObit Toolbar\FF\chrome\locale\EN-US\widgitoolbarplugin.dtd
c:\program files (x86)\IObit Toolbar\FF\chrome\skin\amazon.gif
c:\program files (x86)\IObit Toolbar\FF\chrome\skin\ebay.gif
c:\program files (x86)\IObit Toolbar\FF\chrome\skin\facebook.gif
c:\program files (x86)\IObit Toolbar\FF\chrome\skin\googleplus.gif
c:\program files (x86)\IObit Toolbar\FF\chrome\skin\chevron.gif
c:\program files (x86)\IObit Toolbar\FF\chrome\skin\icon_settings.gif
c:\program files (x86)\IObit Toolbar\FF\chrome\skin\iobit_logo.gif
c:\program files (x86)\IObit Toolbar\FF\chrome\skin\iobit_logo_hover.gif
c:\program files (x86)\IObit Toolbar\FF\chrome\skin\radio-close.gif
c:\program files (x86)\IObit Toolbar\FF\chrome\skin\radio-minimize.gif
c:\program files (x86)\IObit Toolbar\FF\chrome\skin\radiobeta.gif
c:\program files (x86)\IObit Toolbar\FF\chrome\skin\search-button-hover.gif
c:\program files (x86)\IObit Toolbar\FF\chrome\skin\search-button.gif
c:\program files (x86)\IObit Toolbar\FF\chrome\skin\search-chevron-hover.gif
c:\program files (x86)\IObit Toolbar\FF\chrome\skin\search-chevron.gif
c:\program files (x86)\IObit Toolbar\FF\chrome\skin\search-wmrk-baidu.gif
c:\program files (x86)\IObit Toolbar\FF\chrome\skin\search-wmrk-yahoo.gif
c:\program files (x86)\IObit Toolbar\FF\chrome\skin\search-wmrk-yandex.gif
c:\program files (x86)\IObit Toolbar\FF\chrome\skin\search_amazon.gif
c:\program files (x86)\IObit Toolbar\FF\chrome\skin\search_baidu.gif
c:\program files (x86)\IObit Toolbar\FF\chrome\skin\search_ebay.gif
c:\program files (x86)\IObit Toolbar\FF\chrome\skin\search_yahoo.gif
c:\program files (x86)\IObit Toolbar\FF\chrome\skin\search_yandex.gif
c:\program files (x86)\IObit Toolbar\FF\chrome\skin\searchbox.css
c:\program files (x86)\IObit Toolbar\FF\chrome\skin\security.gif
c:\program files (x86)\IObit Toolbar\FF\chrome\skin\splitter.gif
c:\program files (x86)\IObit Toolbar\FF\chrome\skin\system.gif
c:\program files (x86)\IObit Toolbar\FF\chrome\skin\twitter.gif
c:\program files (x86)\IObit Toolbar\FF\chrome\skin\widgitoolbarplugin.css
c:\program files (x86)\IObit Toolbar\FF\install.rdf
c:\program files (x86)\IObit Toolbar\Res\amazon.gif
c:\program files (x86)\IObit Toolbar\Res\ebay.gif
c:\program files (x86)\IObit Toolbar\Res\facebook.gif
c:\program files (x86)\IObit Toolbar\Res\googleplus.gif
c:\program files (x86)\IObit Toolbar\Res\icon_settings.gif
c:\program files (x86)\IObit Toolbar\Res\iobit_logo.gif
c:\program files (x86)\IObit Toolbar\Res\iobit_logo_hover.gif
c:\program files (x86)\IObit Toolbar\Res\radio-close.gif
c:\program files (x86)\IObit Toolbar\Res\radio-minimize.gif
c:\program files (x86)\IObit Toolbar\Res\radiobeta.gif
c:\program files (x86)\IObit Toolbar\Res\search-button-hover.gif
c:\program files (x86)\IObit Toolbar\Res\search-button.gif
c:\program files (x86)\IObit Toolbar\Res\search-chevron-hover.gif
c:\program files (x86)\IObit Toolbar\Res\search-chevron.gif
c:\program files (x86)\IObit Toolbar\Res\search_amazon.gif
c:\program files (x86)\IObit Toolbar\Res\search_baidu.gif
c:\program files (x86)\IObit Toolbar\Res\search_ebay.gif
c:\program files (x86)\IObit Toolbar\Res\search_yahoo.gif
c:\program files (x86)\IObit Toolbar\Res\search_yandex.gif
c:\program files (x86)\IObit Toolbar\Res\security.gif
c:\program files (x86)\IObit Toolbar\Res\system.gif
c:\program files (x86)\IObit Toolbar\Res\twitter.gif
c:\program files (x86)\IObit Toolbar\Res\widgets.xml
c:\program files (x86)\uTorrentBar
c:\program files (x86)\uTorrentBar\GottenAppsContextMenu.xml
c:\program files (x86)\uTorrentBar\ldrtbuTor.dll
c:\program files (x86)\uTorrentBar\OtherAppsContextMenu.xml
c:\program files (x86)\uTorrentBar\prxtbuTor.dll
c:\program files (x86)\uTorrentBar\SharedAppsContextMenu.xml
c:\program files (x86)\uTorrentBar\tbuTor.dll
c:\program files (x86)\uTorrentBar\toolbar.cfg
c:\program files (x86)\uTorrentBar\ToolbarContextMenu.xml
c:\program files (x86)\uTorrentBar\uninstall.exe
c:\program files (x86)\uTorrentBar\uTorrentBarToolbarHelper.exe
c:\program files\AVAST Software
c:\program files\AVAST Software\Avast\Setup\setup.ini
c:\program files\NETGATE
c:\program files\NETGATE\Spy Emergency\SpyEmergencyWow64.exe
c:\program files\NETGATE\Spy Emergency\webspam.dll
c:\program files\NETGATE\Spy Emergency\webspamwow64.dll
c:\program files\SUPERAntiSpyware
c:\program files\SUPERAntiSpyware\appdata.sas
c:\program files\SUPERAntiSpyware\detect.wav
c:\program files\SUPERAntiSpyware\Language\Arabic.lng
c:\program files\SUPERAntiSpyware\Language\Bulgarian (BG).lng
c:\program files\SUPERAntiSpyware\Language\Danish (DK).lng
c:\program files\SUPERAntiSpyware\Language\Dutch (NL).lng
c:\program files\SUPERAntiSpyware\Language\English (US).lng
c:\program files\SUPERAntiSpyware\Language\Estonian (EST).lng
c:\program files\SUPERAntiSpyware\Language\French (FR).lng
c:\program files\SUPERAntiSpyware\Language\German (DE).lng
c:\program files\SUPERAntiSpyware\Language\Hebrew (IL).lng
c:\program files\SUPERAntiSpyware\Language\Hungarian (HU).lng
c:\program files\SUPERAntiSpyware\Language\Chinese Simplified (GB).lng
c:\program files\SUPERAntiSpyware\Language\Italian (IT).lng
c:\program files\SUPERAntiSpyware\Language\Macedonian (MK).lng
c:\program files\SUPERAntiSpyware\Language\Norwegian (NO).lng
c:\program files\SUPERAntiSpyware\Language\Polish (PL).lng
c:\program files\SUPERAntiSpyware\Language\Portuguese (BR).lng
c:\program files\SUPERAntiSpyware\Language\Spanish (ES).lng
c:\program files\SUPERAntiSpyware\Language\Swedish (SE).lng
c:\program files\SUPERAntiSpyware\PROCESSLIST.DB
c:\program files\SUPERAntiSpyware\PROCESSLISTRELATED.DB
c:\program files\SUPERAntiSpyware\SAS_Preconfig.db3
c:\program files\SUPERAntiSpyware\SASREPAIRS.STG
c:\program files\SUPERAntiSpyware\superantispyware.db3
c:\program files\SUPERAntiSpyware\SUPERAntiSpyware.chm
c:\program files\SUPERAntiSpyware\Uninstall.dat
c:\programdata\AVAST Software
c:\programdata\SUPERAntiSpyware.com
c:\programdata\SUPERAntiSpyware.com\SUPERAntiSpyware\PROCESSLIST.BIN
c:\programdata\SUPERAntiSpyware.com\SUPERAntiSpyware\PROCESSLIST.DB
c:\programdata\SUPERAntiSpyware.com\SUPERAntiSpyware\PROCESSLISTRELATED.DB
c:\programdata\SUPERAntiSpyware.com\SUPERAntiSpyware\SAS_ALLUSER.DB3
c:\programdata\SUPERAntiSpyware.com\SUPERAntiSpyware\sas_background.bmp
c:\programdata\SUPERAntiSpyware.com\SUPERAntiSpyware\sas_header.bmp
c:\programdata\SUPERAntiSpyware.com\SUPERAntiSpyware\SUPERANTISPYWARE.DB3
c:\windows\B9DB4C7601A446D58910F7AA6376DBAF.TMP
c:\windows\B9DB4C7601A446D58910F7AA6376DBAF.TMP\WiseCustomCalla.dll
c:\windows\system32\aswBoot.exe
c:\windows\system32\perfc005.dat
c:\windows\system32\perfh005.dat
.
.
((((((((((((((((((((((((((((((((((((((( Ovladače/Služby )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
-------\Legacy_SPYEMRG
-------\Legacy_SPYEMRGGUARD
-------\Service_SpyEmrg
-------\Service_SpyEmrgGuard
.
.
((((((((((((((((((((((((( Soubory vytvořené od 2011-11-03 do 2011-12-03 )))))))))))))))))))))))))))))))
.
.
2011-12-03 00:51 . 2011-12-03 00:51 69000 ----a-w- c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\{F9A97D27-478E-46A7-8DA3-539443CB8E21}\offreg.dll
2011-12-03 00:51 . 2011-12-03 00:51 -------- d-----w- c:\users\Default\AppData\Local\temp
2011-12-02 18:35 . 2011-11-21 11:40 8822856 ----a-w- c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\{F9A97D27-478E-46A7-8DA3-539443CB8E21}\mpengine.dll
2011-12-02 10:57 . 2011-12-02 10:57 -------- d-----w- c:\programdata\Malwarebytes
2011-12-02 10:57 . 2011-08-31 16:00 25416 ----a-w- c:\windows\system32\drivers\mbam.sys
2011-12-01 18:56 . 2011-12-01 18:57 -------- d-----w- c:\users\Administrator
2011-12-01 14:21 . 2011-12-01 14:21 -------- d-----w- c:\program files (x86)\Trend Micro
2011-11-29 17:59 . 2011-09-09 20:35 2580552 ----a-w- c:\windows\SysWow64\pbsvc.exe
2011-11-28 22:49 . 2011-11-28 22:49 -------- d-----w- c:\windows\SysWow64\RTCOM
2011-11-28 16:39 . 2011-11-28 16:39 -------- d-----w- c:\program files\CCleaner
2011-11-28 11:57 . 2011-11-28 11:57 -------- d--h--w- c:\programdata\Common Files
2011-11-28 11:57 . 2011-12-02 00:14 -------- d-----w- c:\programdata\MFAData
2011-11-28 10:48 . 2011-11-28 10:48 -------- d-----w- c:\programdata\IObit
2011-11-28 10:48 . 2011-11-28 10:48 -------- d-----w- c:\program files (x86)\IObit
2011-11-26 20:50 . 2011-11-26 20:50 -------- d-----w- c:\programdata\vsosdk
2011-11-26 20:01 . 2011-11-28 11:44 -------- d-----w- c:\program files (x86)\VSO
2011-11-26 19:36 . 2011-11-26 19:36 -------- d-----w- c:\programdata\ashampoo
2011-11-26 19:35 . 2011-11-26 19:35 -------- d-----w- c:\program files (x86)\Ashampoo
2011-11-21 09:27 . 2011-11-21 09:27 -------- d-----w- c:\program files (x86)\uTorrent
2011-11-15 15:08 . 2011-11-15 15:08 -------- d-----w- c:\program files (x86)\VideoLAN
2011-11-12 13:36 . 2011-04-05 23:23 13416 ----a-w- c:\windows\system32\drivers\nvflash.sys
2011-11-12 12:39 . 2011-11-28 11:47 -------- d-----w- c:\users\UpdatusUser
2011-11-12 12:39 . 2011-11-12 12:39 -------- d-----w- c:\programdata\NVIDIA
2011-11-12 12:38 . 2011-11-08 03:51 837952 ----a-w- c:\windows\system32\easyupdatusapiu64.dll
2011-11-12 12:38 . 2011-11-08 03:51 5067584 ----a-w- c:\windows\system32\nvsvc64.dll
2011-11-12 12:38 . 2011-11-08 03:51 3074368 ----a-w- c:\windows\system32\nvsvcr.dll
2011-11-12 12:38 . 2011-11-08 03:51 222528 ----a-w- c:\windows\system32\nvmctray.dll
2011-11-12 12:38 . 2011-11-08 03:51 1640768 ----a-w- c:\windows\system32\nvvsvc.exe
2011-11-12 12:38 . 2011-11-08 03:51 137536 ----a-w- c:\windows\system32\nvshext.dll
2011-11-12 12:38 . 2011-11-08 03:51 10406208 ----a-w- c:\windows\system32\nvcpl.dll
2011-11-12 12:38 . 2011-11-12 12:38 -------- d-----w- c:\programdata\NVIDIA Corporation
2011-11-10 11:20 . 2008-07-12 07:18 467984 ----a-w- c:\windows\SysWow64\d3dx10_39.dll
2011-11-10 11:20 . 2008-07-12 07:18 3851784 ----a-w- c:\windows\SysWow64\D3DX9_39.dll
2011-11-10 11:20 . 2008-07-12 07:18 1493528 ----a-w- c:\windows\SysWow64\D3DCompiler_39.dll
2011-11-10 11:19 . 2011-11-10 11:19 -------- d-----w- C:\Riot Games
2011-11-10 11:01 . 2011-12-02 17:39 -------- d-----w- c:\programdata\PMB Files
2011-11-10 11:01 . 2011-11-10 11:01 -------- d-----w- c:\program files (x86)\Pando Networks
2011-11-10 09:05 . 2011-10-06 20:16 8570192 ----a-w- c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\Backup\mpengine.dll
2011-11-09 21:32 . 2011-11-09 21:32 -------- d-----w- c:\program files (x86)\TeamSpeak 3 Client
2011-11-09 17:00 . 2011-11-14 10:32 -------- d-----w- c:\program files (x86)\Common Files\Steam
2011-11-09 17:00 . 2011-12-02 21:46 -------- d-----w- c:\program files (x86)\Steam
2011-11-09 13:39 . 2011-11-09 13:39 -------- d-----w- C:\NVIDIA
2011-11-09 13:34 . 2010-12-02 09:12 1359976 ----a-w- c:\windows\system32\nvgenco64hda.dll
2011-11-09 13:34 . 2010-11-11 23:10 29288 ----a-w- c:\windows\system32\nvhdap64.dll
2011-11-09 13:34 . 2010-11-11 23:10 155752 ----a-w- c:\windows\system32\drivers\nvhda64v.sys
2011-11-09 13:33 . 2010-12-30 11:12 1614440 ----a-w- c:\windows\system32\nvdispco642090.dll
2011-11-09 13:33 . 2010-12-30 11:12 1359976 ----a-w- c:\windows\system32\nvgenco642040.dll
2011-11-09 13:31 . 2010-12-30 11:12 11240 ----a-w- c:\windows\system32\drivers\nvBridge.kmd
2011-11-09 13:29 . 2011-12-02 23:18 280904 ----a-w- c:\windows\SysWow64\PnkBstrB.xtr
2011-11-09 13:28 . 2011-11-09 13:28 -------- d-----w- c:\program files (x86)\Battlelog Web Plugins
2011-11-09 13:26 . 2011-11-09 13:26 -------- d-----w- c:\programdata\EA Core
2011-11-09 13:19 . 2011-11-09 13:19 -------- d--h--w- c:\program files (x86)\Common Files\EAInstaller
2011-11-09 12:39 . 2011-11-28 11:44 -------- d-----w- c:\programdata\Origin
2011-11-09 12:39 . 2011-11-09 13:26 -------- d-----w- c:\programdata\Electronic Arts
2011-11-09 12:39 . 2011-11-09 12:55 -------- d-----w- c:\program files (x86)\Origin Games
2011-11-09 12:39 . 2011-11-09 21:52 -------- d-----w- c:\program files (x86)\Origin
2011-11-09 12:32 . 2011-11-09 12:32 -------- d-----w- c:\program files (x86)\Common Files\LogiShrd
2011-11-09 12:31 . 2011-11-09 12:31 18960 ----a-w- c:\windows\system32\drivers\LNonPnP.sys
2011-11-09 12:31 . 2011-11-09 12:32 -------- d-----w- c:\programdata\Logishrd
2011-11-09 12:31 . 2011-11-09 12:31 -------- d-----w- c:\program files\Logitech
2011-11-09 12:31 . 2011-11-09 12:32 -------- d-----w- c:\program files\Common Files\Logishrd
2011-11-09 09:24 . 2011-02-19 12:05 1139200 ----a-w- c:\windows\system32\FntCache.dll
2011-11-09 09:24 . 2011-02-19 12:04 1544192 ----a-w- c:\windows\system32\DWrite.dll
2011-11-09 09:24 . 2011-02-19 12:04 902656 ----a-w- c:\windows\system32\d2d1.dll
2011-11-09 09:24 . 2011-02-19 06:30 1076736 ----a-w- c:\windows\SysWow64\DWrite.dll
2011-11-09 09:24 . 2011-02-19 06:30 739840 ----a-w- c:\windows\SysWow64\d2d1.dll
2011-11-09 09:03 . 2011-11-09 09:03 917840 ------w- c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\{DFBF0D39-18BA-40B9-AFB6-3B93A3056523}\gapaengine.dll
2011-11-09 08:55 . 2011-11-09 13:03 414368 ----a-w- c:\windows\SysWow64\FlashPlayerCPLApp.cpl
2011-11-09 08:55 . 2011-11-09 08:55 -------- d-----w- c:\windows\SysWow64\Macromed
2011-11-09 08:55 . 2011-11-09 08:55 -------- d-----w- c:\windows\system32\Macromed
2011-11-09 08:54 . 2011-11-09 08:54 -------- d-----w- c:\program files (x86)\Microsoft Security Client
2011-11-09 08:54 . 2011-11-09 08:54 -------- d-----w- c:\program files\Microsoft Security Client
2011-11-09 08:44 . 2011-11-09 08:44 -------- d-----w- c:\windows\system32\SPReview
2011-11-09 08:44 . 2011-11-09 08:44 -------- d-----w- c:\windows\system32\EventProviders
2011-11-09 08:42 . 2010-11-20 12:21 363008 ----a-w- c:\windows\SysWow64\wbemcomn.dll
2011-11-09 08:42 . 2010-11-20 12:21 189952 ----a-w- c:\program files (x86)\Windows Portable Devices\sqmapi.dll
2011-11-09 08:42 . 2010-11-20 12:19 606208 ----a-w- c:\windows\SysWow64\wbem\fastprox.dll
2011-11-09 08:42 . 2010-11-20 13:27 529408 ----a-w- c:\windows\system32\wbemcomn.dll
2011-11-09 08:42 . 2010-11-20 13:27 244736 ----a-w- c:\program files\Windows Portable Devices\sqmapi.dll
2011-11-09 08:42 . 2010-11-20 13:27 244736 ----a-w- c:\windows\system32\sqmapi.dll
2011-11-09 08:31 . 2011-11-09 08:31 995328 ----a-w- c:\program files\Common Files\Microsoft Shared\VGX\VGX.dll
2011-11-09 02:00 . 2011-11-09 02:00 -------- d-----w- c:\windows\SysWow64\Wat
2011-11-09 02:00 . 2011-11-09 02:00 -------- d-----w- c:\windows\system32\Wat
2011-11-08 19:58 . 2011-11-28 16:41 -------- d-----w- c:\windows\Panther
2011-11-08 16:28 . 2010-02-23 08:16 294912 ----a-w- c:\windows\system32\browserchoice.exe
2011-11-08 16:24 . 2011-02-25 06:19 2871808 ----a-w- c:\windows\explorer.exe
2011-11-08 16:24 . 2011-02-25 05:30 2616320 ----a-w- c:\windows\SysWow64\explorer.exe
2011-11-08 16:23 . 2011-11-08 16:23 -------- d-----w- c:\program files (x86)\Common Files\Intel Corporation
2011-11-08 16:19 . 2011-11-12 12:39 -------- d-----w- c:\program files (x86)\NVIDIA Corporation
2011-11-08 16:19 . 2011-11-12 12:39 -------- d-----w- c:\program files\NVIDIA Corporation
2011-11-08 16:15 . 2011-11-08 16:15 -------- d-----w- c:\program files (x86)\Etron Technology
2011-11-08 16:15 . 2011-12-02 00:13 -------- d-sh--w- c:\windows\Installer
2011-11-08 16:14 . 2011-11-08 16:14 -------- d-----w- c:\program files (x86)\Marvell
2011-11-08 16:14 . 2011-02-09 12:06 555032 ----a-w- c:\windows\system32\drivers\iaStor.sys
2011-11-08 16:13 . 2011-11-08 16:13 -------- d-----w- c:\program files\Realtek
2011-11-08 16:12 . 2011-01-13 11:58 74272 ----a-w- c:\windows\system32\RtNicProp64.dll
2011-11-08 16:12 . 2011-01-13 11:58 413800 ----a-w- c:\windows\system32\drivers\Rt64win7.sys
2011-11-08 16:12 . 2011-01-13 11:58 107552 ----a-w- c:\windows\system32\RTNUninst64.dll
2011-11-08 16:12 . 2011-11-09 21:45 -------- d-----w- c:\program files (x86)\Realtek
2011-11-08 16:12 . 2011-11-28 22:49 -------- d--h--w- c:\program files (x86)\Temp
2011-11-08 16:12 . 2011-11-28 22:48 -------- d--h--w- c:\program files (x86)\InstallShield Installation Information
2011-11-08 16:12 . 2011-08-31 11:12 1698408 ----a-w- c:\windows\RtlExUpd.dll
2011-11-08 16:12 . 2011-11-08 16:14 -------- d-----w- c:\program files (x86)\Intel
2011-11-08 16:12 . 2010-12-23 03:09 53248 ----a-r- c:\windows\SysWow64\CSVer.dll
2011-11-08 16:12 . 2011-11-08 16:12 -------- d-----w- C:\Intel
2011-11-07 17:53 . 2011-11-07 17:53 321856 ----a-w- c:\windows\SysWow64\nvStreaming.exe
.
.
.
(((((((((((((((((((((((((((((((((((((((( Find3M výpis ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2011-11-09 08:59 . 2009-07-14 02:36 175616 ----a-w- c:\windows\system32\msclmd.dll
2011-11-09 08:59 . 2009-07-14 02:36 152576 ----a-w- c:\windows\SysWow64\msclmd.dll
2011-11-09 08:31 . 2011-11-09 08:31 249344 ----a-w- c:\windows\system32\webcheck.dll
2011-11-09 08:31 . 2011-11-09 08:31 203776 ----a-w- c:\windows\SysWow64\webcheck.dll
.
.
((((((((((((((((((((((((((((( SnapShot@2011-12-02_18.04.22 )))))))))))))))))))))))))))))))))))))))))
.
- 2009-07-14 04:54 . 2011-12-02 18:04 16384 c:\windows\SysWOW64\config\systemprofile\AppData\Roaming\Microsoft\Windows\Cookies\index.dat
+ 2009-07-14 04:54 . 2011-12-02 20:34 16384 c:\windows\SysWOW64\config\systemprofile\AppData\Roaming\Microsoft\Windows\Cookies\index.dat
- 2009-07-14 04:54 . 2011-12-02 18:04 32768 c:\windows\SysWOW64\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat
+ 2009-07-14 04:54 . 2011-12-02 20:34 32768 c:\windows\SysWOW64\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat
+ 2009-07-14 04:54 . 2011-12-02 20:34 16384 c:\windows\SysWOW64\config\systemprofile\AppData\Local\Microsoft\Windows\History\History.IE5\index.dat
- 2009-07-14 04:54 . 2011-12-02 18:04 16384 c:\windows\SysWOW64\config\systemprofile\AppData\Local\Microsoft\Windows\History\History.IE5\index.dat
+ 2011-11-08 16:10 . 2011-12-02 21:48 31608 c:\windows\system32\wdi\ShutdownPerformanceDiagnostics_SystemData.bin
+ 2009-07-14 05:10 . 2011-12-02 21:48 28642 c:\windows\system32\wdi\BootPerformanceDiagnostics_SystemData.bin
+ 2011-11-08 16:10 . 2011-12-02 21:48 7656 c:\windows\system32\wdi\{86432a0b-3c7d-4ddf-a89c-172faa90485d}\S-1-5-21-768311896-3300924832-1790489852-1000_UserData.bin
+ 2011-12-03 00:51 . 2011-12-03 00:51 2048 c:\windows\ServiceProfiles\LocalService\AppData\Local\lastalive1.dat
- 2011-12-02 18:04 . 2011-12-02 18:04 2048 c:\windows\ServiceProfiles\LocalService\AppData\Local\lastalive0.dat
+ 2011-12-03 00:51 . 2011-12-03 00:51 2048 c:\windows\ServiceProfiles\LocalService\AppData\Local\lastalive0.dat
+ 2011-11-09 13:18 . 2011-12-02 23:18 280904 c:\windows\SysWOW64\PnkBstrB.exe
- 2011-11-09 13:18 . 2011-12-02 14:09 280904 c:\windows\SysWOW64\PnkBstrB.exe
- 2009-07-14 02:36 . 2011-12-02 13:49 617910 c:\windows\system32\perfh009.dat
+ 2009-07-14 02:36 . 2011-12-03 00:55 617910 c:\windows\system32\perfh009.dat
- 2009-07-14 02:36 . 2011-12-02 13:49 107190 c:\windows\system32\perfc009.dat
+ 2009-07-14 02:36 . 2011-12-03 00:55 107190 c:\windows\system32\perfc009.dat
+ 2009-07-14 05:01 . 2011-12-03 00:51 228720 c:\windows\ServiceProfiles\LocalService\AppData\Local\FontCache-System.dat
- 2009-07-14 05:01 . 2011-12-02 18:01 228720 c:\windows\ServiceProfiles\LocalService\AppData\Local\FontCache-System.dat
+ 2011-11-09 09:18 . 2011-12-03 00:51 13095404 c:\windows\ServiceProfiles\LocalService\AppData\Local\FontCache-S-1-5-21-768311896-3300924832-1790489852-1000-8192.dat
.
(((((((((((((((((((((((((((((((((( Spouštěcí body v registru )))))))))))))))))))))))))))))))))))))))))))))
.
.
*Poznámka* prázdné záznamy a legitimní výchozí údaje nejsou zobrazeny.
REGEDIT4
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Steam"="c:\program files (x86)\Steam\steam.exe" [2011-11-09 1242448]
"Pando Media Booster"="c:\program files (x86)\Pando Networks\Media Booster\PMB.exe" [2011-11-10 3077528]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]
"IAStorIcon"="c:\program files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe" [2011-02-09 284184]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorAdmin"= 5 (0x5)
"ConsentPromptBehaviorUser"= 3 (0x3)
"EnableUIADesktopToggle"= 0 (0x0)
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MsMpSvc]
@="Service"
.
R2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;c:\windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2010-03-18 138576]
R3 MpNWMon;Microsoft Malware Protection Network Driver;c:\windows\system32\DRIVERS\MpNWMon.sys [x]
R3 NisDrv;Microsoft Network Inspection System;c:\windows\system32\DRIVERS\NisDrvWFP.sys [x]
R3 NisSrv;Microsoft Network Inspection;c:\program files\Microsoft Security Client\Antimalware\NisSrv.exe [2011-04-27 288272]
R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys [x]
R3 WatAdminSvc;Služba Technologie aktivace Windows;c:\windows\system32\Wat\WatAdminSvc.exe [x]
S0 mvs91xx;mvs91xx;c:\windows\system32\DRIVERS\mvs91xx.sys [x]
S2 IAStorDataMgrSvc;Úložná technologie Intel(R) Rapid;c:\program files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe [2011-02-09 13336]
S2 nvUpdatusService;NVIDIA Update Service Daemon;c:\program files (x86)\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe [2011-11-08 2253120]
S3 EtronHub3;Etron USB 3.0 Extensible Hub Driver;c:\windows\system32\Drivers\EtronHub3.sys [x]
S3 EtronXHCI;Etron USB 3.0 Extensible Host Controller Driver;c:\windows\system32\Drivers\EtronXHCI.sys [x]
S3 MEIx64;Intel(R) Management Engine Interface;c:\windows\system32\DRIVERS\HECIx64.sys [x]
S3 NVHDA;Service for NVIDIA High Definition Audio Driver;c:\windows\system32\drivers\nvhda64v.sys [x]
S3 RTL8167;Realtek 8167 NT Driver;c:\windows\system32\DRIVERS\Rt64win7.sys [x]
.
.
.
--------- x86-64 -----------
.
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"MSC"="c:\program files\Microsoft Security Client\msseces.exe" [2011-06-15 1436736]
"EvtMgr6"="c:\program files\Logitech\SetPointP\SetPoint.exe" [2011-10-07 1744152]
"combofix"="c:\combofix\CF8651.3XE" [2010-11-20 345088]
.
------- Doplňkový sken -------
.
uLocal Page = c:\windows\system32\blank.htm
uStart Page = hxxp://www.seznam.cz/
mLocal Page = c:\windows\SysWOW64\blank.htm
TCP: DhcpNameServer = 213.46.172.36 213.46.172.37
FF - ProfilePath - c:\users\User\AppData\Roaming\Mozilla\Firefox\Profiles\ovrfxnul.default\
FF - prefs.js: browser.search.selectedEngine - Wikipedie (cs)
FF - prefs.js: browser.startup.homepage - hxxp://seznam.cz/
FF - prefs.js: network.proxy.type - 0
.
- - - - NEPLATNÉ POLOŽKY ODSTRANĚNÉ Z REGISTRU - - - -
.
AddRemove-uTorrentBar Toolbar - c:\program files (x86)\uTorrentBar\uninstall.exe
.
.
.
------------------------ Jiné spuštené procesy ------------------------
.
c:\windows\SysWOW64\PnkBstrA.exe
.
**************************************************************************
.
Celkový čas: 2011-12-03 01:58:59 - počítač byl restartován
ComboFix-quarantined-files.txt 2011-12-03 00:58
ComboFix2.txt 2011-12-02 21:42
ComboFix3.txt 2011-12-02 18:30
ComboFix4.txt 2011-12-02 18:06
.
Před spuštěním: Volných bajtů: 39 258 914 816
Po spuštění: Volných bajtů: 39 037 407 232
.
- - End Of File - - 0159E4221933D2B2F31E5AC68FFEA604
Nahoru
Uživatelský avatar
Žbeky
Moderátor
Guru Level 13
Guru Level 13
Příspěvky: 22288
Registrován: květen 08
Bydliště: Vsetín - Pardubice
Pohlaví: Muž
Stav:
Offline

Re: Místo vypnutí se PC uspí, probuzení=restart+uspání

Příspěvekod Žbeky » 03 pro 2011 18:09

ComboFix se odinstaluje takto:
Start-Spustit a zadej ComboFix /Uninstall

vyčisti systém CCleanerem

a použij i T-Cleaner
smaže vše po Combu,MWAVu atd.-stáhneš>spustíš

pozn. před stažením T-Cleaneru a po dobu čištění deaktivuj AVG , Avast,Avira či Microsoft Security Essentials následně T-Cleaner smaž a zapni si AVG , Avast, Avira či Microsoft Security Essentials

+ Nový log z HJT

Jak se chová PC?
V SZ řeším jen záležitosti týkající se fóra. Na prosby a žádosti o technickou podporu nereaguji. Díky za pochopení.

HiJackThis + návod - HW Monitor - Jak označit příspěvek za vyřešený - Pravidla fóra
Nahoru
Taska
nováček
Příspěvky: 43
Registrován: listopad 11
Pohlaví: Nespecifikováno
Stav:
Offline

Re: Místo vypnutí se PC uspí, probuzení=restart+uspání

Příspěvekod Taska » 03 pro 2011 20:45

Chová se normálně až na to, že nejde vypnout. Dotaz, co je to HJT ?
Nahoru
Odpovědět

Zpět na “HiJackThis”

Kdo je online

Uživatelé prohlížející si toto fórum: Žádní registrovaní uživatelé a 71 hostů