Problém s nějakým procesem Vyřešeno

[Moull]

ComboFix 12-07-06.02 - Acer 06.07.2012 23:15:42.1.2 - x64
Microsoft Windows 7 Home Premium 6.1.7601.1.1250.420.1029.18.3767.2429 [GMT 2:00]
Spuštěný z: c:\users\Acer\Desktop\ComboFix.exe
AV: avast! Internet Security *Disabled/Outdated* {C37D8F93-0602-E43C-40AA-47DAD597F308}
FW: avast! Internet Security *Enabled* {FB460EB6-4C6D-E564-6BF5-EEEF2B44B473}
SP: avast! Internet Security *Disabled/Outdated* {781C6E77-2038-EBB2-7A1A-7CA8AE10B9B5}
SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.
.
((((((((((((((((((((((((((((((((((((((( Ostatní výmazy )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
c:\users\Acer\AppData\Roaming\chrtmp
.
.
((((((((((((((((((((((((( Soubory vytvořené od 2012-06-06 do 2012-07-06 )))))))))))))))))))))))))))))))
.
.
2012-07-06 21:25 . 2012-07-06 21:25 -------- d-----w- c:\users\UpdatusUser\AppData\Local\temp
2012-07-06 21:25 . 2012-07-06 21:25 -------- d-----w- c:\users\Default\AppData\Local\temp
2012-07-06 19:15 . 2012-07-06 19:15 -------- d-----w- c:\users\Acer\AppData\Roaming\Malwarebytes
2012-07-06 19:15 . 2012-07-06 19:15 -------- d-----w- c:\programdata\Malwarebytes
2012-07-06 19:15 . 2012-07-06 19:15 -------- d-----w- c:\program files (x86)\Malwarebytes' Anti-Malware
2012-07-06 19:15 . 2012-04-04 13:56 24904 ----a-w- c:\windows\system32\drivers\mbam.sys
2012-07-06 17:22 . 2012-05-31 04:04 9013136 ----a-w- c:\programdata\Microsoft\Windows Defender\Definition Updates\{D82FC84D-3F96-4944-8E8A-2BE7B2F5192C}\mpengine.dll
2012-07-06 17:17 . 2012-07-06 17:17 -------- d-----w- c:\program files (x86)\LogMeIn Hamachi
2012-07-03 11:57 . 2012-07-03 17:07 -------- d-----w- c:\program files (x86)\Caveman Craig 2 - The Tribes of Boggdrop
2012-07-03 07:45 . 2012-07-03 07:45 -------- d-----w- c:\programdata\Canneverbe Limited
2012-07-03 07:45 . 2012-07-03 07:45 -------- d-----w- c:\users\Acer\AppData\Roaming\Canneverbe Limited
2012-07-03 07:44 . 2012-07-03 07:44 -------- d-----w- c:\users\Acer\AppData\Roaming\OpenCandy
2012-07-03 07:44 . 2012-07-03 07:44 -------- d-----w- c:\program files\CDBurnerXP
2012-07-01 18:01 . 2012-07-01 18:01 -------- d-----w- c:\users\Acer\AppData\Local\Sony
2012-07-01 18:01 . 2012-07-01 18:01 -------- d-----w- c:\users\Acer\AppData\Roaming\Sony
2012-07-01 17:58 . 2012-07-01 17:58 -------- d-----w- c:\windows\SysWow64\spool
2012-07-01 17:58 . 2012-07-01 17:58 -------- d-----w- c:\programdata\Sony
2012-07-01 17:57 . 2012-07-01 17:57 -------- d-----w- c:\program files (x86)\Sony
2012-06-22 16:14 . 2012-07-05 09:40 -------- d-----w- c:\users\Acer\AppData\Roaming\.minecraft
2012-06-22 15:52 . 2002-12-05 12:12 692224 ----a-w- c:\program files (x86)\Common Files\InstallShield\Professional\RunTime\0701\Intel32\iKernel.dll
2012-06-22 15:52 . 2002-12-05 12:10 155648 ----a-w- c:\program files (x86)\Common Files\InstallShield\Professional\RunTime\0701\Intel32\iuser.dll
2012-06-22 15:52 . 2002-12-02 13:22 5632 ----a-w- c:\program files (x86)\Common Files\InstallShield\Professional\RunTime\0701\Intel32\DotNetInstaller.exe
2012-06-22 15:52 . 2002-12-02 11:33 57344 ----a-w- c:\program files (x86)\Common Files\InstallShield\Professional\RunTime\0701\Intel32\ctor.dll
2012-06-22 15:52 . 2002-12-02 11:33 237568 ----a-w- c:\program files (x86)\Common Files\InstallShield\Professional\RunTime\0701\Intel32\iscript.dll
2012-06-22 15:51 . 2012-06-22 15:51 163972 ----a-w- c:\program files (x86)\Common Files\InstallShield\Professional\RunTime\0701\Intel32\iGdi.dll
2012-06-22 15:51 . 2012-06-22 15:51 282756 ----a-w- c:\program files (x86)\Common Files\InstallShield\Professional\RunTime\0701\Intel32\setup.dll
2012-06-21 12:50 . 2012-06-02 22:19 57880 ----a-w- c:\windows\system32\wuauclt.exe
2012-06-21 12:50 . 2012-06-02 22:19 44056 ----a-w- c:\windows\system32\wups2.dll
2012-06-21 12:50 . 2012-06-02 22:19 2428952 ----a-w- c:\windows\system32\wuaueng.dll
2012-06-21 12:50 . 2012-06-02 22:15 2622464 ----a-w- c:\windows\system32\wucltux.dll
2012-06-21 12:50 . 2012-06-02 22:19 38424 ----a-w- c:\windows\system32\wups.dll
2012-06-21 12:50 . 2012-06-02 22:19 701976 ----a-w- c:\windows\system32\wuapi.dll
2012-06-21 12:50 . 2012-06-02 22:15 99840 ----a-w- c:\windows\system32\wudriver.dll
2012-06-21 12:50 . 2012-06-02 13:19 186752 ----a-w- c:\windows\system32\wuwebv.dll
2012-06-21 12:50 . 2012-06-02 13:15 36864 ----a-w- c:\windows\system32\wuapp.exe
2012-06-20 17:17 . 2012-06-20 17:17 -------- d-----w- c:\users\Acer\AppData\Roaming\Subversion
2012-06-17 19:31 . 2012-06-17 19:31 -------- d-----w- c:\users\Acer\AppData\Roaming\THQ
2012-06-17 19:18 . 2012-06-17 19:18 -------- d-----w- c:\program files (x86)\THQ
2012-06-16 18:24 . 2012-06-16 18:36 2829 ----a-w- c:\windows\War3Unin.pif
2012-06-16 18:24 . 2012-06-16 18:36 139264 ----a-w- c:\windows\War3Unin.exe
2012-06-14 08:19 . 2012-04-26 05:41 77312 ----a-w- c:\windows\system32\rdpwsx.dll
2012-06-13 20:56 . 2012-06-13 20:56 -------- d-----w- c:\programdata\Dress-up-pups
2012-06-13 20:56 . 2012-06-13 23:01 -------- d-----w- c:\program files (x86)\Psi butik
2012-06-12 17:31 . 2012-06-12 17:31 -------- d-----w- C:\DirectX
2012-06-11 15:40 . 2012-06-11 15:40 -------- d-----w- c:\users\Acer\AppData\Local\Black_Tree_Gaming
2012-06-11 15:40 . 2012-07-01 13:48 -------- d-----w- c:\program files\Nexus Mod Manager
2012-06-11 12:56 . 2012-06-11 12:56 -------- d-----w- c:\program files (x86)\Origin Games
2012-06-11 12:56 . 2012-06-11 12:56 -------- d-----w- c:\users\Acer\AppData\Local\Origin
2012-06-11 12:56 . 2012-06-11 13:00 -------- d-----w- c:\users\Acer\AppData\Roaming\Origin
2012-06-11 12:55 . 2012-06-11 12:56 -------- d-----w- c:\programdata\Origin
2012-06-11 12:54 . 2012-06-11 12:59 -------- d-----w- c:\program files (x86)\Origin
2012-06-10 17:06 . 2012-06-11 12:55 -------- d-----w- c:\programdata\Electronic Arts
2012-06-10 17:03 . 2012-06-10 17:03 -------- d-----w- c:\program files (x86)\Microsoft WSE
2012-06-10 09:15 . 2012-06-10 09:15 -------- d-----w- c:\program files (x86)\GotClip
2012-06-08 18:03 . 2012-06-08 18:08 -------- d-----w- c:\users\Acer\AppData\Roaming\WildTangent
2012-06-08 16:24 . 2012-07-06 21:04 -------- d-----w- c:\users\Acer\AppData\Roaming\BITS
2012-06-08 16:24 . 2012-06-08 16:24 -------- d-----w- c:\users\Acer\AppData\Roaming\FlashgetSetup
2012-06-08 16:23 . 2012-06-08 16:35 -------- d-----w- c:\users\Acer\AppData\Roaming\FlashGet
2012-06-08 16:23 . 2012-06-08 16:23 -------- d-----w- c:\program files (x86)\FlashGet Network
2012-06-07 17:14 . 2012-06-07 17:14 -------- d-----w- c:\users\Acer\AppData\Roaming\dvdcss
.
.
.
(((((((((((((((((((((((((((((((((((((((( Find3M výpis ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2012-06-03 08:30 . 2012-05-04 18:06 955848 ----a-w- c:\windows\system32\npDeployJava1.dll
2012-06-03 08:30 . 2012-05-04 18:06 839112 ----a-w- c:\windows\system32\deployJava1.dll
2012-06-02 09:49 . 2012-06-02 09:49 157 ----a-w- c:\users\Acer\AppData\Roaming\.minecraftdelete.bat
2012-05-25 14:59 . 2012-05-25 14:59 1998168 ----a-w- c:\windows\SysWow64\d3dx9_43.dll
2012-05-20 08:03 . 2012-05-20 08:03 71680 ----a-w- c:\windows\system32\frapsv64.dll
2012-05-20 08:03 . 2012-05-20 08:03 65536 ----a-w- c:\windows\SysWow64\frapsvid.dll
2012-05-13 13:08 . 2012-05-13 13:08 446464 ----a-w- c:\windows\NEXON_EU_DownloaderUpdater.exe
2012-05-13 13:08 . 2012-05-13 13:08 235 ----a-w- c:\windows\SysWow64\nxEuUninstall.bat
2012-05-06 22:39 . 2012-05-06 22:39 283200 ----a-w- c:\windows\system32\drivers\dtsoftbus01.sys
2012-05-04 18:37 . 2012-05-04 18:37 178800 ----a-w- c:\windows\SysWow64\CmdLineExt_x64.dll
2012-05-04 14:45 . 2012-05-04 14:46 476960 ----a-w- c:\windows\SysWow64\npdeployJava1.dll
2012-05-04 14:45 . 2012-05-04 14:46 472864 ----a-w- c:\windows\SysWow64\deployJava1.dll
2012-05-04 14:38 . 2010-06-24 19:33 19352 ----a-w- c:\programdata\Microsoft\IdentityCRL\production\ppcrlconfig600.dll
2012-04-24 22:45 . 2012-04-24 22:45 29480 ----a-w- c:\windows\SysWow64\msxml3a.dll
2012-04-24 22:45 . 2012-04-24 22:45 505128 ----a-w- c:\windows\SysWow64\msvcp71.dll
2012-04-24 22:45 . 2012-04-24 22:45 353576 ----a-w- c:\windows\SysWow64\msvcr71.dll
2012-04-24 22:04 . 2012-04-24 22:04 2560 ----a-w- c:\windows\SysWow64\drivers\cs-CZ\qwavedrv.sys.mui
2012-04-24 22:04 . 2012-04-24 22:04 2560 ----a-w- c:\windows\SysWow64\drivers\cs-CZ\scfilter.sys.mui
2012-04-24 22:04 . 2012-04-24 22:04 5632 ----a-w- c:\windows\SysWow64\drivers\cs-CZ\ndiscap.sys.mui
2012-04-24 22:04 . 2012-04-24 22:04 50176 ----a-w- c:\windows\SysWow64\drivers\cs-CZ\tcpip.sys.mui
2012-04-24 22:04 . 2012-04-24 22:04 27136 ----a-w- c:\windows\SysWow64\drivers\cs-CZ\bfe.dll.mui
2012-04-24 22:04 . 2012-04-24 22:04 15360 ----a-w- c:\windows\SysWow64\drivers\cs-CZ\pacer.sys.mui
2012-04-24 21:56 . 2012-04-24 21:56 91648 ----a-w- c:\windows\system32\SetIEInstalledDate.exe
2012-04-24 21:56 . 2012-04-24 21:56 89088 ----a-w- c:\windows\system32\RegisterIEPKEYs.exe
2012-04-24 21:56 . 2012-04-24 21:56 86528 ----a-w- c:\windows\SysWow64\iesysprep.dll
2012-04-24 21:56 . 2012-04-24 21:56 85504 ----a-w- c:\windows\system32\iesetup.dll
2012-04-24 21:56 . 2012-04-24 21:56 76800 ----a-w- c:\windows\SysWow64\SetIEInstalledDate.exe
2012-04-24 21:56 . 2012-04-24 21:56 76800 ----a-w- c:\windows\system32\tdc.ocx
2012-04-24 21:56 . 2012-04-24 21:56 74752 ----a-w- c:\windows\SysWow64\RegisterIEPKEYs.exe
2012-04-24 21:56 . 2012-04-24 21:56 74752 ----a-w- c:\windows\SysWow64\iesetup.dll
2012-04-24 21:56 . 2012-04-24 21:56 63488 ----a-w- c:\windows\SysWow64\tdc.ocx
2012-04-24 21:56 . 2012-04-24 21:56 603648 ----a-w- c:\windows\system32\vbscript.dll
2012-04-24 21:56 . 2012-04-24 21:56 49664 ----a-w- c:\windows\system32\imgutil.dll
2012-04-24 21:56 . 2012-04-24 21:56 48640 ----a-w- c:\windows\SysWow64\mshtmler.dll
2012-04-24 21:56 . 2012-04-24 21:56 48640 ----a-w- c:\windows\system32\mshtmler.dll
2012-04-24 21:56 . 2012-04-24 21:56 448512 ----a-w- c:\windows\system32\html.iec
2012-04-24 21:56 . 2012-04-24 21:56 420864 ----a-w- c:\windows\SysWow64\vbscript.dll
2012-04-24 21:56 . 2012-04-24 21:56 367104 ----a-w- c:\windows\SysWow64\html.iec
2012-04-24 21:56 . 2012-04-24 21:56 35840 ----a-w- c:\windows\SysWow64\imgutil.dll
2012-04-24 21:56 . 2012-04-24 21:56 30720 ----a-w- c:\windows\system32\licmgr10.dll
2012-04-24 21:56 . 2012-04-24 21:56 23552 ----a-w- c:\windows\SysWow64\licmgr10.dll
2012-04-24 21:56 . 2012-04-24 21:56 222208 ----a-w- c:\windows\system32\msls31.dll
2012-04-24 21:56 . 2012-04-24 21:56 165888 ----a-w- c:\windows\system32\iexpress.exe
2012-04-24 21:56 . 2012-04-24 21:56 161792 ----a-w- c:\windows\SysWow64\msls31.dll
2012-04-24 21:56 . 2012-04-24 21:56 160256 ----a-w- c:\windows\system32\wextract.exe
2012-04-24 21:56 . 2012-04-24 21:56 152064 ----a-w- c:\windows\SysWow64\wextract.exe
2012-04-24 21:56 . 2012-04-24 21:56 150528 ----a-w- c:\windows\SysWow64\iexpress.exe
2012-04-24 21:56 . 2012-04-24 21:56 135168 ----a-w- c:\windows\system32\IEAdvpack.dll
2012-04-24 21:56 . 2012-04-24 21:56 12288 ----a-w- c:\windows\system32\mshta.exe
2012-04-24 21:56 . 2012-04-24 21:56 11776 ----a-w- c:\windows\SysWow64\mshta.exe
2012-04-24 21:56 . 2012-04-24 21:56 114176 ----a-w- c:\windows\system32\admparse.dll
2012-04-24 21:56 . 2012-04-24 21:56 111616 ----a-w- c:\windows\system32\iesysprep.dll
2012-04-24 21:56 . 2012-04-24 21:56 110592 ----a-w- c:\windows\SysWow64\IEAdvpack.dll
2012-04-24 21:56 . 2012-04-24 21:56 101888 ----a-w- c:\windows\SysWow64\admparse.dll
2012-04-18 17:42 . 2012-05-13 18:59 4598592 ----a-w- c:\windows\SysWow64\GameMon.des
.
.
(((((((((((((((((((((((((((((((((( Spouštěcí body v registru )))))))))))))))))))))))))))))))))))))))))))))
.
.
*Poznámka* prázdné záznamy a legitimní výchozí údaje nejsou zobrazeny.
REGEDIT4
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"DAEMON Tools Pro Agent"="c:\program files (x86)\DAEMON Tools Pro\DTAgent.exe" [2012-04-26 3111744]
"KPeerNexonEU"="c:\nexon\NEXON_EU_Downloader\nxEULauncher.exe" [2012-05-13 438272]
"FlashGet 3"="c:\program files (x86)\FlashGet Network\FlashGet 3\FlashGet3.exe" [2012-01-09 3083712]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]
"SuiteTray"="c:\program files (x86)\EgisTec MyWinLockerSuite\x86\SuiteTray.exe" [2011-04-02 340848]
"EgisTecPMMUpdate"="c:\program files (x86)\EgisTec IPS\PmmUpdate.exe" [2011-03-29 408432]
"EgisUpdate"="c:\program files (x86)\EgisTec IPS\EgisUpdate.exe" [2011-03-29 202608]
"Norton Online Backup"="c:\program files (x86)\Symantec\Norton Online Backup\NOBuClient.exe" [2010-06-01 1155928]
"BackupManagerTray"="c:\program files (x86)\NewTech Infosystems\Acer Backup Manager\BackupManagerTray.exe" [2011-06-17 266496]
"LManager"="c:\program files (x86)\Launch Manager\LManager.exe" [2010-08-10 975952]
"LogMeIn Hamachi Ui"="c:\program files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe" [2012-06-27 1996200]
"Malwarebytes' Anti-Malware"="c:\program files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe" [2012-04-04 462408]
.
c:\users\Acer\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\
CurseClientStartup.ccip [2012-5-27 0]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorAdmin"= 5 (0x5)
"ConsentPromptBehaviorUser"= 3 (0x3)
"EnableUIADesktopToggle"= 0 (0x0)
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\windows]
"AppInit_DLLs"=c:\windows\SysWOW64\nvinit.dll
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\drivers32]
"aux"=wdmaud.drv
.
[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\lsa]
Security Packages REG_MULTI_SZ kerberos msv1_0 schannel wdigest tspkg pku2u livessp
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MCODS]
@=""
.
R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2010-03-18 138576]
R2 gupdate;Služba Google Update (gupdate);c:\program files (x86)\Google\Update\GoogleUpdate.exe [2012-06-04 116648]
R2 SkypeUpdate;Skype Updater;c:\program files (x86)\Skype\Updater\Updater.exe [2012-02-29 158856]
R3 BBSvc;Bing Bar Update Service;c:\program files (x86)\Microsoft\BingBar\BBSvc.EXE [2011-06-07 191752]
R3 EagleX64;EagleX64;c:\windows\system32\drivers\EagleX64.sys [x]
R3 GamesAppService;GamesAppService;c:\program files (x86)\WildTangent Games\App\GamesAppService.exe [2010-10-12 206072]
R3 gupdatem;Služba Google Update (gupdatem);c:\program files (x86)\Google\Update\GoogleUpdate.exe [2012-06-04 116648]
R3 npggsvc;nProtect GameGuard Service;c:\windows\system32\GameMon.des [x]
R3 RSUSBSTOR;RtsUStor.Sys Realtek USB Card Reader;c:\windows\system32\Drivers\RtsUStor.sys [2010-09-22 243712]
R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys [2010-11-21 59392]
R3 TsUsbGD;Remote Desktop Generic USB Device;c:\windows\system32\drivers\TsUsbGD.sys [2010-11-21 31232]
R3 WatAdminSvc;Služba Technologie aktivace Windows;c:\windows\system32\Wat\WatAdminSvc.exe [2012-05-05 1255736]
R4 wlcrasvc;Windows Live Mesh remote connections service;c:\program files\Windows Live\Mesh\wlcrasvc.exe [2010-09-23 57184]
S0 aswNdis;avast! Firewall NDIS Filter Service;c:\windows\system32\DRIVERS\aswNdis.sys [2011-01-05 12368]
S0 aswNdis2;avast! Firewall Core Firewall Service; [x]
S0 nvpciflt;nvpciflt;c:\windows\system32\DRIVERS\nvpciflt.sys [2011-03-30 25960]
S1 aswFW;avast! TDI Firewall driver; [x]
S1 aswSnx;aswSnx; [x]
S1 aswSP;aswSP; [x]
S1 dtsoftbus01;DAEMON Tools Virtual Bus Driver;c:\windows\system32\DRIVERS\dtsoftbus01.sys [2012-05-06 283200]
S1 mwlPSDFilter;mwlPSDFilter;c:\windows\system32\DRIVERS\mwlPSDFilter.sys [2011-11-07 22648]
S1 mwlPSDNServ;mwlPSDNServ;c:\windows\system32\DRIVERS\mwlPSDNServ.sys [2011-11-07 20520]
S1 mwlPSDVDisk;mwlPSDVDisk;c:\windows\system32\DRIVERS\mwlPSDVDisk.sys [2011-11-07 62776]
S1 vwififlt;Virtual WiFi Filter Driver;c:\windows\system32\DRIVERS\vwififlt.sys [2009-07-14 59904]
S2 AdobeARMservice;Adobe Acrobat Update Service;c:\program files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [2012-04-03 63928]
S2 aswFsBlk;aswFsBlk; [x]
S2 aswMonFlt;aswMonFlt;c:\windows\system32\drivers\aswMonFlt.sys [2011-01-05 62032]
S2 avast! Firewall;avast! Firewall;c:\program files\Alwil Software\Avast5\afwServ.exe [2011-01-05 119200]
S2 BBUpdate;BBUpdate;c:\program files (x86)\Microsoft\BingBar\SeaPort.EXE [2011-05-12 249648]
S2 DsiWMIService;Dritek WMI Service;c:\program files (x86)\Launch Manager\dsiwmis.exe [2010-08-10 321104]
S2 EgisTec Ticket Service;EgisTec Ticket Service;c:\program files (x86)\Common Files\EgisTec\Services\EgisTicketService.exe [2011-04-02 173424]
S2 ePowerSvc;Acer ePower Service;c:\program files\Acer\Acer ePower Management\ePowerSvc.exe [2011-01-05 867712]
S2 GREGService;GREGService;c:\program files (x86)\Acer\Registration\GREGsvc.exe [2011-05-26 29696]
S2 Hamachi2Svc;LogMeIn Hamachi Tunneling Engine;c:\program files (x86)\LogMeIn Hamachi\hamachi-2.exe [2012-06-27 2369960]
S2 IAStorDataMgrSvc;Intel(R) Rapid Storage Technology;c:\program files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe [2010-04-13 13336]
S2 Live Updater Service;Live Updater Service;c:\program files\Acer\Acer Updater\UpdaterService.exe [2011-04-22 244624]
S2 MBAMService;MBAMService;c:\program files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe [2012-04-04 654408]
S2 NOBU;Norton Online Backup;c:\program files (x86)\Symantec\Norton Online Backup\NOBuAgent.exe SERVICE [x]
S2 NTI IScheduleSvc;NTI IScheduleSvc;c:\program files (x86)\NewTech Infosystems\Acer Backup Manager\IScheduleSvc.exe [2011-06-17 255744]
S2 nvUpdatusService;NVIDIA Update Service Daemon;c:\program files (x86)\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe [2011-03-30 2009704]
S2 TeamViewer7;TeamViewer 7;c:\program files (x86)\TeamViewer\Version7\TeamViewer_Service.exe [2012-03-19 2666880]
S2 UNS;Intel(R) Management & Security Application User Notification Service;c:\program files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe [2010-03-18 2320920]
S3 ETD;ELAN PS/2 Port Input Device;c:\windows\system32\DRIVERS\ETD.sys [2010-04-13 135560]
S3 HECIx64;Intel(R) Management Engine Interface;c:\windows\system32\DRIVERS\HECIx64.sys [2009-09-17 56344]
S3 Impcd;Impcd;c:\windows\system32\DRIVERS\Impcd.sys [2010-02-26 158976]
S3 IntcDAud;Intel(R) Display Audio;c:\windows\system32\DRIVERS\IntcDAud.sys [2010-06-21 287232]
S3 k57nd60a;Broadcom NetLink (TM) Gigabit Ethernet - NDIS 6.0;c:\windows\system32\DRIVERS\k57nd60a.sys [2010-05-15 384040]
S3 MBAMProtector;MBAMProtector;c:\windows\system32\drivers\mbam.sys [2012-04-04 24904]
.
.
--- Ostatní služby/ovladače v paměti ---
.
*NewlyCreated* - WS2IFSL
.
Obsah adresáře 'Naplánované úlohy'
.
2012-07-06 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
- c:\program files (x86)\Google\Update\GoogleUpdate.exe [2012-06-04 14:46]
.
2012-07-06 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
- c:\program files (x86)\Google\Update\GoogleUpdate.exe [2012-06-04 14:46]
.
2012-07-04 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2451203615-349451005-3616792112-1001Core.job
- c:\users\Acer\AppData\Local\Google\Update\GoogleUpdate.exe [2012-05-04 14:39]
.
2012-07-06 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2451203615-349451005-3616792112-1001UA.job
- c:\users\Acer\AppData\Local\Google\Update\GoogleUpdate.exe [2012-05-04 14:39]
.
.
--------- X64 Entries -----------
.
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\00avast]
@="{472083B0-C522-11CF-8763-00608CC02F24}"
[HKEY_CLASSES_ROOT\CLSID\{472083B0-C522-11CF-8763-00608CC02F24}]
2011-01-05 16:19 132584 ----a-w- c:\program files\Alwil Software\Avast5\ashShA64.dll
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"IgfxTray"="c:\windows\system32\igfxtray.exe" [2010-07-23 161304]
"HotKeysCmds"="c:\windows\system32\hkcmd.exe" [2010-07-23 386584]
"Persistence"="c:\windows\system32\igfxpers.exe" [2010-07-23 415256]
"RtHDVCpl"="c:\program files\Realtek\Audio\HDA\RAVCpl64.exe" [2010-06-22 10920552]
"Acer ePower Management"="c:\program files\Acer\Acer ePower Management\ePowerTray.exe" [2011-01-05 860040]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
"LoadAppInit_DLLs"=0x1
"AppInit_DLLs"=c:\windows\System32\nvinitx.dll
.
------- Doplňkový sken -------
.
uStart Page = hxxp://search.babylon.com/?affID=112555 ... df9ae20526
uLocal Page = c:\windows\system32\blank.htm
mStart Page = hxxp://acer.msn.com
mLocal Page = c:\windows\SYSTEM32\blank.htm
IE: Download all links by FlashGet3 - c:\program files (x86)\FlashGet Network\FlashGet 3\BHO\fdgetallurl.htm
IE: Download by FlashGet3 - c:\program files (x86)\FlashGet Network\FlashGet 3\BHO\fdgeturl.htm
IE: Stáhnout pomocí &BitSpiritu - c:\program files (x86)\BitSpirit\bsurl.htm
TCP: DhcpNameServer = 79.98.72.2 192.168.100.1
.
- - - - NEPLATNÉ POLOŽKY ODSTRANĚNÉ Z REGISTRU - - - -
.
Toolbar-Locked - (no file)
Wow6432Node-HKCU-Run-RGSC - d:\gta iv\Rockstar Games Social Club\RGSCLauncher.exe
Wow6432Node-HKCU-Run-EA Core - c:\program files (x86)\Electronic Arts\EADM\Core.exe
Toolbar-Locked - (no file)
HKLM-Run-ETDWare - c:\program files (x86)\Elantech\ETDCtrl.exe
.
.
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\npggsvc]
"ImagePath"="c:\windows\system32\GameMon.des -service"
.
--------------------- ZAMKNUTÉ KLÍČE V REGISTRU ---------------------
.
[HKEY_USERS\S-1-5-21-2451203615-349451005-3616792112-1001\Software\SecuROM\!CAUTION! NEVER A OR CHANGE ANY KEY*]
@Allowed: (Read) (RestrictedCode)
"??"=hex:50,58,b3,3a,a4,55,89,12,a3,24,86,93,e1,74,2c,21,a6,95,a5,28,17,26,a9,
c5,cc,b9,c2,76,f2,be,25,b4,11,67,f6,0f,37,37,af,ee,60,cb,c7,7b,50,41,4f,89,\
"??"=hex:32,6d,17,bd,ce,bc,fe,c7,b0,58,a8,8f,4a,f8,bf,a3
.
[HKEY_USERS\S-1-5-21-2451203615-349451005-3616792112-1001\Software\SecuROM\License information*]
"datasecu"=hex:81,92,05,d9,95,97,7f,88,71,99,64,7b,cd,2a,07,1d,34,f1,ab,95,a3,
57,d9,93,e7,b5,7d,be,08,dc,be,ca,04,22,15,09,05,82,de,d1,b0,72,20,f0,ce,7e,\
"rkeysecu"=hex:2f,0f,d5,3e,02,2b,06,63,b1,0b,dd,b6,71,e2,54,98
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil10u_ActiveX.exe,-101"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\Elevation]
"Enabled"=dword:00000001
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\LocalServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil10u_ActiveX.exe"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@="Shockwave Flash Object"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\InprocServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash10u.ocx"
"ThreadingModel"="Apartment"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\MiscStatus]
@="0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ProgID]
@="ShockwaveFlash.ShockwaveFlash.10"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash10u.ocx, 1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\TypeLib]
@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\Version]
@="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
@="ShockwaveFlash.ShockwaveFlash"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@="Macromedia Flash Factory Object"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\InprocServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash10u.ocx"
"ThreadingModel"="Apartment"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ProgID]
@="FlashFactory.FlashFactory.1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash10u.ocx, 1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\TypeLib]
@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\Version]
@="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
@="FlashFactory.FlashFactory"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}]
@Denied: (A 2) (Everyone)
@="IFlashBroker4"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\McAfee]
"SymbolicLinkValue"=hex(6):5c,00,72,00,65,00,67,00,69,00,73,00,74,00,72,00,79,
00,5c,00,6d,00,61,00,63,00,68,00,69,00,6e,00,65,00,5c,00,53,00,6f,00,66,00,\
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\PCW\Security]
@Denied: (Full) (Everyone)
.
------------------------ Jiné spuštené procesy ------------------------
.
c:\program files\Alwil Software\Avast5\AvastSvc.exe
c:\program files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
.
**************************************************************************
.
Celkový čas: 2012-07-06 23:41:08 - počítač byl restartován
ComboFix-quarantined-files.txt 2012-07-06 21:41
.
Před spuštěním: Volných bajtů: 121 212 284 928
Po spuštění: Volných bajtů: 132 359 737 344
.
- - End Of File - - 235214B87532E3F23789114FE38EDF33

[Reklama]

[jaro3]

Otevři si Poznámkový blok (Start -> Spustit... a napiš do okna Notepad a dej Ok.
Zkopíruj do něj následující celý text označený zeleně:

Kód: Vybrat vše

File::
c:\program files (x86)\Google\Update\GoogleUpdate.exe
c:\program files (x86)\Skype\Updater\Updater.exe
c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2451203615-349451005-3616792112-1001Core.job
c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2451203615-349451005-3616792112-1001UA.job
c:\users\Acer\AppData\Local\Google\Update\GoogleUpdate.exe

Driver::
gupdate
SkypeUpdate
gupdatem


DDS::
uStart Page = hxxp://search.babylon.com/?affID=112555 ... df9ae20526
uLocal Page = c:\windows\system32\blank.htm
mLocal Page = c:\windows\SYSTEM32\blank.htm

RegLock::
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-
BF93-872502E8144E}]
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\Elevation]
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\LocalServer32]
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\TypeLib]
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}]
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\InprocServer32]
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\MiscStatus]
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ProgID]
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\TypeLib]
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\Version]
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}]
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\InprocServer32]
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ProgID]
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\TypeLib]
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\Version]
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}]
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}\ProxyStubClsid32]
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}\TypeLib]
[HKEY_LOCAL_MACHINE\SOFTWARE\McAfee]
"SymbolicLinkValue"=hex(6):5c,00,72,00,65,00,67,00,69,00,73,00,74,00,72,00,79,
 00,5c,00,6d,00,61,00,63,00,68,00,69,00,6e,00,65,00,5c,00,53,00,6f,00,66,00,\
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\PCW\Security]


Zvol možnost Soubor -> Uložit jako... a nastav tyto parametry:
Název souboru: zde napiš: CFScript.txt
Uložit jako typ: tak tam vyber Všechny soubory
Ulož soubor na plochu.
Ukonči všechna aktivní okna.

Uchop myší vytvořený skript CFScript.txt, přemísti ho nad stažený program ComboFix.exe a když se oba soubory překryjí, skript upusť.
- Automaticky se spustí ComboFix
- Vlož sem log, který vyběhne v závěru čistícího procesu + nový log z HJT

Upozornění : Může se stát, že po aplikaci Combofixu a restartu počítače, Windows nenaběhnou , nebo nenajede plocha , budou problémy s připojením, pak znovu restartuj počítač, pokud to nepomůže , po restartu mačkej klávesu F8 a pak zvol poslední známou funkční konfiguraci. , či použij bod obnovy.

Stáhni si aswMBR
na svojí plochu. Uzavři všechna okna , programy a prohlížeče. Poklepej na aswMBR.exe. Pokud se objeví hláška o možnosti stáhnutí databáze Avastu , klikni na NE. Poté klikni na „Scan“ . Po skenu klikni na „Save Log“ a ulož si log na plochu .Zkopíruj sem celý obsah toho logu. Pak klikni na „Exit“ k zavření programu.

[Moull]

Hele mě se to už zprovozdnilo , každopádně dik za pomoc.

[jaro3]

Pokud nejsou problémy , je to vše a můžeš dát vyřešeno , zelenou fajfku.