Vysoký ping Vyřešeno

[TheEffectex]

500, 503, 501ms, nějak tak, pokaždý to změří nějak takhle, ale pod 500 to nešlo, testoval jsem to když jsem neměl zapnutej ani steam a jen prohlížeč (firefox).

[Reklama]

[Pic]

Co naměříš zde : http://rychlost.cz/

[TheEffectex]

Nemůže být třeba chyba v kabelu?

[Pic]

Asi nejlépe reklamovat u poskytovatele, protože to nejspíš bude v jeho zařízení do něhož jsi připojen - modem.

[TheEffectex]

Už jsem volal, řekl mi, že modem je v pořádku.

[TheEffectex]

Zkoušel jsem test udělat na mobilu. Zde je výsledek. Ještě zkusím na jiném PC. Ale když i u mobilu vyjde lepší ping, tak si myslím, že bude chyba někde v pc, třeba nějakej vir nebo spyware nebo tak něco. Download a upload asi samozřejmě nebude lepší na mobilu, jde spíš o ping.
.

[Orcus]

Vypni rezidentní štít antiviru a antispywaru
Stáhni si ComboFix (by sUBs)
a ulož si ho na plochu.
Ukonči všechna aktivní okna a spusť ho.
- Po spuštění se zobrazí podmínky užití, potvrď je stiskem tlačítka Ano
- Dále postupuj dle pokynů, během aplikování ComboFixu neklikej do zobrazujícího se okna
- Po dokončení skenování by měl program vytvořit log - C:\ComboFix.txt - zkopíruj sem prosím celý jeho obsah
Pokud bude po kontrole problém spustit aplikace nebo bude vyskakovat hláška o pokusu použít neplatnou operaci na klíč registru, který je označen pro odstranění, stačí restartovat počítač.

Pokud budou problémy , spusť v nouz. režimu.

[TheEffectex]

ComboFix 14-08-06.02 - Giovanni 11.08.2014 15:59:38.1.4 - x64
Microsoft Windows 7 Ultimate 6.1.7601.1.1250.420.1029.18.4095.2852 [GMT 2:00]
Spuštěný z: c:\users\Giovanni\Desktop\ComboFix.exe
AV: Avira Desktop *Disabled/Updated* {4D041356-F94D-285F-8768-AAE50FA36859}
SP: Avira Desktop *Disabled/Updated* {F665F2B2-DF77-27D1-BDD8-9197742422E4}
SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
* Vytvořen nový Bod Obnovení
.
.
((((((((((((((((((((((((( Soubory vytvořené od 2014-07-11 do 2014-08-11 )))))))))))))))))))))))))))))))
.
.
2014-08-11 14:10 . 2014-08-11 14:10 -------- d-----w- c:\users\Default\AppData\Local\temp
2014-08-09 18:00 . 2014-08-09 18:00 -------- d-----w- c:\users\Giovanni\AppData\Local\CrashDumps
2014-08-09 17:59 . 2014-08-09 17:59 -------- d-----w- c:\users\Giovanni\AppData\Local\CrashRpt
2014-08-09 17:34 . 2014-08-10 09:31 30312 ----a-w- c:\windows\system32\drivers\TrueSight.sys
2014-08-09 17:34 . 2014-08-09 17:34 -------- d-----w- c:\programdata\RogueKiller
2014-08-09 17:26 . 2014-08-09 17:26 -------- d-----w- c:\windows\ERUNT
2014-08-09 12:37 . 2014-08-09 12:57 122584 ----a-w- c:\windows\system32\drivers\MBAMSwissArmy.sys
2014-08-09 12:37 . 2014-08-09 12:37 -------- d-----w- c:\program files (x86)\Malwarebytes Anti-Malware
2014-08-09 12:37 . 2014-08-09 12:37 -------- d-----w- c:\programdata\Malwarebytes
2014-08-09 12:37 . 2014-05-12 05:26 63704 ----a-w- c:\windows\system32\drivers\mwac.sys
2014-08-09 12:37 . 2014-05-12 05:26 91352 ----a-w- c:\windows\system32\drivers\mbamchameleon.sys
2014-08-09 12:37 . 2014-05-12 05:25 25816 ----a-w- c:\windows\system32\drivers\mbam.sys
2014-08-09 12:35 . 2014-08-11 00:00 -------- d-----w- c:\users\Giovanni\AppData\Local\Adobe
2014-08-09 12:26 . 2014-08-09 17:22 -------- d-----w- C:\AdwCleaner
2014-08-08 19:05 . 2014-08-08 19:05 -------- d-----w- c:\program files\CPUID
2014-08-03 18:51 . 2014-08-03 18:52 -------- d-----w- c:\programdata\Package Cache
2014-08-01 01:14 . 2014-08-01 01:14 -------- d-----w- c:\programdata\regid.1986-12.com.adobe
2014-08-01 01:12 . 2014-08-04 02:32 -------- d-----w- c:\program files\Adobe
2014-08-01 01:08 . 2014-08-04 02:37 -------- d-----w- c:\program files\Common Files\Adobe
2014-07-30 23:36 . 2014-07-30 23:36 -------- d-sh--w- c:\programdata\SecuROM
2014-07-30 23:26 . 2014-07-30 23:26 -------- d-----w- c:\users\Giovanni\AppData\Local\Rockstar Games
2014-07-30 23:26 . 2014-07-30 23:26 178800 ----a-w- c:\windows\SysWow64\CmdLineExt_x64.dll
2014-07-30 13:20 . 2014-07-02 17:44 609240 ----a-w- c:\windows\SysWow64\nvStreaming.exe
2014-07-24 10:56 . 2014-08-09 22:02 -------- d-----w- c:\users\Giovanni\AppData\Roaming\.minecraft
2014-07-23 12:21 . 2009-03-18 16:35 33856 ---ha-w- c:\windows\system32\hamachi.sys
2014-07-22 20:32 . 2014-07-22 20:32 -------- d-----w- c:\users\Giovanni\AppData\Local\LogMeIn
2014-07-22 20:32 . 2014-07-22 20:32 -------- d-----w- c:\programdata\LogMeIn
2014-07-18 09:40 . 2014-07-18 09:40 -------- d-----w- c:\users\Giovanni\AppData\Roaming\Oracle
2014-07-18 09:39 . 2014-07-18 09:39 -------- d-----w- c:\program files (x86)\Common Files\Java
2014-07-18 09:39 . 2014-07-11 01:02 98216 ----a-w- c:\windows\SysWow64\WindowsAccessBridge-32.dll
2014-07-16 16:59 . 2014-07-16 16:59 5659136 ----a-w- c:\windows\SysWow64\FlashPlayerInstaller.exe
2014-07-16 15:00 . 2014-07-16 15:00 -------- d-----w- c:\users\Giovanni\AppData\Local\Razer
2014-07-16 14:55 . 2014-07-16 14:55 -------- d-----w- c:\programdata\Razer
2014-07-16 14:55 . 2014-07-16 15:00 -------- d-----w- c:\program files (x86)\Razer
2014-07-16 14:53 . 2014-05-30 08:08 210944 ----a-w- c:\windows\system32\wdigest.dll
.
.
.
(((((((((((((((((((((((((((((((((((((((( Find3M výpis ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2014-07-17 11:18 . 2014-05-10 16:04 42040 ----a-w- c:\windows\system32\drivers\avnetflt.sys
2014-07-16 16:59 . 2014-05-10 15:54 71344 ----a-w- c:\windows\SysWow64\FlashPlayerCPLApp.cpl
2014-07-16 16:59 . 2014-05-10 15:54 699056 ----a-w- c:\windows\SysWow64\FlashPlayerApp.exe
2014-07-16 15:14 . 2014-05-29 14:17 96441528 ----a-w- c:\windows\system32\MRT.exe
2014-07-02 20:48 . 2014-05-10 15:34 75040 ----a-w- c:\windows\system32\OpenCL.dll
2014-07-02 20:48 . 2014-05-10 15:34 61912 ----a-w- c:\windows\SysWow64\OpenCL.dll
2014-07-02 20:48 . 2014-05-10 15:33 14498552 ----a-w- c:\windows\SysWow64\nvd3dum.dll
2014-07-02 20:48 . 2014-05-10 15:32 18626304 ----a-w- c:\windows\system32\nvwgf2umx.dll
2014-07-02 20:48 . 2014-05-10 15:32 965312 ----a-w- c:\windows\system32\nvumdshimx.dll
2014-07-02 20:48 . 2014-05-10 15:32 3196816 ----a-w- c:\windows\system32\nvapi64.dll
2014-07-02 20:48 . 2014-05-10 15:32 2814656 ----a-w- c:\windows\SysWow64\nvapi.dll
2014-07-02 18:55 . 2014-05-10 15:34 3522392 ----a-w- c:\windows\system32\nvsvc64.dll
2014-07-02 18:55 . 2014-05-10 15:34 6783776 ----a-w- c:\windows\system32\nvcpl.dll
2014-07-02 18:55 . 2014-05-10 15:34 935368 ----a-w- c:\windows\system32\nvvsvc.exe
2014-07-02 18:55 . 2014-05-10 15:34 62808 ----a-w- c:\windows\system32\nvshext.dll
2014-07-02 18:55 . 2014-05-10 15:34 386520 ----a-w- c:\windows\system32\nvmctray.dll
2014-07-02 18:55 . 2014-05-10 15:34 2559960 ----a-w- c:\windows\system32\nvsvcr.dll
2014-07-02 10:14 . 2014-05-10 15:34 3826628 ----a-w- c:\windows\system32\nvcoproc.bin
2014-06-24 10:36 . 2014-06-24 10:36 466456 ----a-w- c:\windows\system32\wrap_oal.dll
2014-06-24 10:36 . 2014-06-24 10:36 122904 ----a-w- c:\windows\system32\OpenAL32.dll
2014-06-24 10:36 . 2014-06-24 10:36 444952 ----a-w- c:\windows\SysWow64\wrap_oal.dll
2014-06-24 10:36 . 2014-06-24 10:36 109080 ----a-w- c:\windows\SysWow64\OpenAL32.dll
2014-06-24 09:25 . 2014-05-10 16:04 117712 ----a-w- c:\windows\system32\drivers\avgntflt.sys
2014-05-30 07:52 . 2014-07-16 14:53 247808 ----a-w- c:\windows\SysWow64\schannel.dll
2014-05-29 05:32 . 2014-05-29 05:32 80384 ----a-w- c:\windows\system32\RazerCoinstaller.dll
2014-05-24 02:33 . 2014-05-24 02:33 864256 ----a-w- c:\windows\SysWow64\rzdevicedll.dll
2014-05-24 02:33 . 2014-05-24 02:33 325120 ----a-w- c:\windows\SysWow64\rzaudiodll.dll
2014-05-20 13:38 . 2012-07-17 12:37 23264 ----a-w- c:\programdata\Microsoft\IdentityCRL\production\ppcrlconfig600.dll
2014-05-20 02:44 . 2014-05-28 18:52 1889112 ----a-w- c:\windows\system32\nvdispco6433788.dll
2014-05-20 02:44 . 2014-05-28 18:52 1541576 ----a-w- c:\windows\system32\nvdispgenco6433788.dll
2014-05-19 06:47 . 2014-05-19 06:47 39080 ----a-w- c:\windows\system32\drivers\rzendpt.sys
2014-05-19 06:47 . 2014-05-19 06:47 155816 ----a-w- c:\windows\system32\drivers\rzudd.sys
2014-05-19 06:26 . 2014-05-19 06:26 89088 ----a-w- c:\windows\SysWow64\rzdevinfo.dll
2014-05-19 06:26 . 2014-05-19 06:26 155136 ----a-w- c:\windows\SysWow64\rztouchdll.dll
2014-05-19 06:26 . 2014-05-19 06:26 117248 ----a-w- c:\windows\SysWow64\rzdisplaydll.dll
2014-05-15 12:13 . 2014-05-10 16:04 130584 ----a-w- c:\windows\system32\drivers\avipbb.sys
.
.
(((((((((((((((((((((((((((((((((( Spouštěcí body v registru )))))))))))))))))))))))))))))))))))))))))))))
.
.
*Poznámka* prázdné záznamy a legitimní výchozí údaje nejsou zobrazeny.
REGEDIT4
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]
"avgnt"="c:\program files (x86)\Avira\AntiVir Desktop\avgnt.exe" [2014-07-30 751184]
"Razer Synapse"="c:\program files (x86)\Razer\Synapse\RzSynapse.exe" [2014-06-23 585560]
"SwitchBoard"="c:\program files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe" [2010-02-19 517096]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorAdmin"= 5 (0x5)
"ConsentPromptBehaviorUser"= 3 (0x3)
"EnableUIADesktopToggle"= 0 (0x0)
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon]
"Userinit"="userinit.exe"
.
R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [x]
R2 SkypeUpdate;Skype Updater;c:\program files (x86)\Skype\Updater\Updater.exe;c:\program files (x86)\Skype\Updater\Updater.exe [x]
R3 IEEtwCollectorService;Internet Explorer ETW Collector Service;c:\windows\system32\IEEtwCollector.exe;c:\windows\SYSNATIVE\IEEtwCollector.exe [x]
R3 ose64;Office 64 Source Engine;c:\program files\Common Files\Microsoft Shared\Source Engine\OSE.EXE;c:\program files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [x]
R3 RdpVideoMiniport;Remote Desktop Video Miniport Driver;c:\windows\system32\drivers\rdpvideominiport.sys;c:\windows\SYSNATIVE\drivers\rdpvideominiport.sys [x]
R3 SwitchBoard;SwitchBoard;c:\program files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe;c:\program files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [x]
R3 Synth3dVsc;Synth3dVsc;c:\windows\system32\drivers\synth3dvsc.sys;c:\windows\SYSNATIVE\drivers\synth3dvsc.sys [x]
R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys;c:\windows\SYSNATIVE\drivers\tsusbflt.sys [x]
R3 tsusbhub;tsusbhub;c:\windows\system32\drivers\tsusbhub.sys;c:\windows\SYSNATIVE\drivers\tsusbhub.sys [x]
R3 VGPU;VGPU;c:\windows\system32\drivers\rdvgkmd.sys;c:\windows\SYSNATIVE\drivers\rdvgkmd.sys [x]
R3 WatAdminSvc;Služba Technologie aktivace Windows;c:\windows\system32\Wat\WatAdminSvc.exe;c:\windows\SYSNATIVE\Wat\WatAdminSvc.exe [x]
S1 avfwot;avfwot;c:\windows\system32\DRIVERS\avfwot.sys;c:\windows\SYSNATIVE\DRIVERS\avfwot.sys [x]
S1 avkmgr;avkmgr;c:\windows\system32\DRIVERS\avkmgr.sys;c:\windows\SYSNATIVE\DRIVERS\avkmgr.sys [x]
S2 AntiVirFirewallService;Avira FireWall;c:\program files (x86)\Avira\AntiVir Desktop\avfwsvc.exe;c:\program files (x86)\Avira\AntiVir Desktop\avfwsvc.exe [x]
S2 AntiVirMailService;Avira Mail Protection;c:\program files (x86)\Avira\AntiVir Desktop\avmailc7.exe;c:\program files (x86)\Avira\AntiVir Desktop\avmailc7.exe [x]
S2 AntiVirSchedulerService;Avira Scheduler;c:\program files (x86)\Avira\AntiVir Desktop\sched.exe;c:\program files (x86)\Avira\AntiVir Desktop\sched.exe [x]
S2 AntiVirWebService;Avira Web Protection;c:\program files (x86)\Avira\AntiVir Desktop\avwebg7.exe;c:\program files (x86)\Avira\AntiVir Desktop\avwebg7.exe [x]
S2 avnetflt;avnetflt;c:\windows\system32\DRIVERS\avnetflt.sys;c:\windows\SYSNATIVE\DRIVERS\avnetflt.sys [x]
S2 NvNetworkService;NVIDIA Network Service;c:\program files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe;c:\program files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [x]
S2 NvStreamSvc;NVIDIA Streamer Service;c:\program files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe;c:\program files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [x]
S2 Stereo Service;NVIDIA Stereoscopic 3D Driver Service;c:\program files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe;c:\program files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe [x]
S3 avfwim;AvFw Packet Filter Miniport;c:\windows\system32\DRIVERS\avfwim.sys;c:\windows\SYSNATIVE\DRIVERS\avfwim.sys [x]
S3 dtsoftbus01;DAEMON Tools Virtual Bus Driver;c:\windows\system32\DRIVERS\dtsoftbus01.sys;c:\windows\SYSNATIVE\DRIVERS\dtsoftbus01.sys [x]
S3 nvvad_WaveExtensible;NVIDIA Virtual Audio Device (Wave Extensible) (WDM);c:\windows\system32\drivers\nvvad64v.sys;c:\windows\SYSNATIVE\drivers\nvvad64v.sys [x]
S3 rzendpt;rzendpt;c:\windows\system32\DRIVERS\rzendpt.sys;c:\windows\SYSNATIVE\DRIVERS\rzendpt.sys [x]
S3 rzudd;Razer Mouse Driver;c:\windows\system32\DRIVERS\rzudd.sys;c:\windows\SYSNATIVE\DRIVERS\rzudd.sys [x]
.
.
Obsah adresáře 'Naplánované úlohy'
.
2014-08-11 c:\windows\Tasks\Adobe Flash Player Updater.job
- c:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2014-05-10 17:00]
.
.
--------- X64 Entries -----------
.
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"NvBackend"="c:\program files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe" [2014-02-05 2234144]
"ShadowPlay"="c:\windows\system32\nvspcap64.dll" [2014-02-05 1179576]
"AdobeAAMUpdater-1.0"="c:\program files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe" [2012-09-20 444904]
.
------- Doplňkový sken -------
.
uLocal Page = c:\windows\system32\blank.htm
mLocal Page = c:\windows\SysWOW64\blank.htm
IE: E&xportovat do aplikace Microsoft Excel - c:\progra~1\MICROS~2\Office14\EXCEL.EXE/3000
TCP: DhcpNameServer = 213.46.172.36 213.46.172.37
FF - ProfilePath - c:\users\Giovanni\AppData\Roaming\Mozilla\Firefox\Profiles\8657r0uf.default\
FF - prefs.js: browser.startup.homepage - google.com
.
- - - - NEPLATNÉ POLOŽKY ODSTRANĚNÉ Z REGISTRU - - - -
.
Wow6432Node-HKCU-Run-AdobeBridge - (no file)
Wow6432Node-HKLM-Run-<NO NAME> - (no file)
Wow6432Node-HKU-Default-RunOnce-SPReview - c:\windows\System32\SPReview\SPReview.exe
HKLM_Wow6432Node-ActiveSetup-{2D46B6DC-2207-486B-B523-A557E6D54B47} - start
AddRemove-PunkBusterSvc - c:\windows\system32\pbsvc.exe
.
.
.
--------------------- ZAMKNUTÉ KLÍČE V REGISTRU ---------------------
.
[HKEY_USERS\S-1-5-21-3853214329-1863429105-646852494-1000\Software\SecuROM\License information*]
@Allowed: (Read) (RestrictedCode)
"datasecu"=hex:c4,22,ea,8d,d2,1a,96,33,80,0a,7e,33,73,e3,5a,9d,7a,f1,5b,aa,96,
13,b5,e9,01,04,85,89,41,b8,9f,cc,13,30,11,7d,7d,ad,2e,76,e8,e7,37,07,37,be,\
"rkeysecu"=hex:2f,0f,d5,3e,02,2b,06,63,b1,0b,dd,b6,71,e2,54,98
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\PCW\Security]
@Denied: (Full) (Everyone)
.
Celkový čas: 2014-08-11 16:22:21
ComboFix-quarantined-files.txt 2014-08-11 14:22
.
Před spuštěním: Volných bajtů: 239 791 652 864
Po spuštění: Volných bajtů: 239 678 267 392
.
- - End Of File - - 8E53B946A000580D3902915F140D1CF5
A36C5E4F47E84449FF07ED3517B43A31

[TheEffectex]

A zde jsou testy připojení na jiném PC.

[jaro3]

Vypni rez. ochranu u antiviru a antispywaru,příp. firewall..

Otevři si Poznámkový blok (Start -> Spustit... a napiš do okna Notepad a dej Ok.
Zkopíruj do něj následující celý text označený zeleně:

Kód: Vybrat vše

ClearJavaCache::

KillAll::
File::

Folder::
c:\program files (x86)\Skype\Updater

Driver::
SkypeUpdate

RegLock::
[HKEY_USERS\S-1-5-21-3853214329-1863429105-646852494-1000\Software\SecuROM\License information*]
@Allowed: (Read) (RestrictedCode)
"datasecu"=hex:c4,22,ea,8d,d2,1a,96,33,80,0a,7e,33,73,e3,5a,9d,7a,f1,5b,aa,96,
 13,b5,e9,01,04,85,89,41,b8,9f,cc,13,30,11,7d,7d,ad,2e,76,e8,e7,37,07,37,be,\
"rkeysecu"=hex:2f,0f,d5,3e,02,2b,06,63,b1,0b,dd,b6,71,e2,54,98
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\PCW\Security]
@Denied: (Full) (Everyone)


Zvol možnost Soubor -> Uložit jako... a nastav tyto parametry:
Název souboru: zde napiš: CFScript.txt
Uložit jako typ: tak tam vyber Všechny soubory
Ulož soubor na plochu.
Ukonči všechna aktivní okna.

Uchop myší vytvořený skript CFScript.txt, přemísti ho nad stažený program ComboFix.exe a když se oba soubory překryjí, skript upusť.
- Automaticky se spustí ComboFix
- Vlož sem log, který vyběhne v závěru čistícího procesu + nový log z HJT

Upozornění : Může se stát, že po aplikaci Combofixu a restartu počítače, Windows nenaběhnou , nebo nenajede plocha , budou problémy s připojením, pak znovu restartuj počítač, pokud to nepomůže , po restartu mačkej klávesu F8 a pak zvol poslední známou funkční konfiguraci. , či použij bod obnovy.

Stáhni si aswMBR
na svojí plochu. Uzavři všechna okna , programy a prohlížeče. Poklepej na aswMBR.exe. Pokud se objeví hláška o možnosti stáhnutí databáze Avastu , klikni na NE. Poté klikni na „Scan“ . Po skenu klikni na „Save Log“ a ulož si log na plochu .Zkopíruj sem celý obsah toho logu. Pak klikni na „Exit“ k zavření programu.

[TheEffectex]

ComboFix 14-08-06.02 - Giovanni 11.08.2014 20:45:46.2.4 - x64
Microsoft Windows 7 Ultimate 6.1.7601.1.1250.420.1029.18.4095.2719 [GMT 2:00]
Spuštěný z: c:\users\Giovanni\Desktop\Nová složka\ComboFix.exe
Použité ovládací přepínače :: c:\users\Giovanni\Desktop\CFScript.txt
AV: Avira Desktop *Disabled/Updated* {4D041356-F94D-285F-8768-AAE50FA36859}
SP: Avira Desktop *Disabled/Updated* {F665F2B2-DF77-27D1-BDD8-9197742422E4}
SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.
.
((((((((((((((((((((((((((((((((((((((( Ostatní výmazy )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
c:\program files (x86)\Skype\Updater
c:\program files (x86)\Skype\Updater\Updater.dll
c:\program files (x86)\Skype\Updater\Updater.exe
.
.
((((((((((((((((((((((((((((((((((((((( Ovladače/Služby )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
-------\Service_SkypeUpdate
.
.
((((((((((((((((((((((((( Soubory vytvořené od 2014-07-11 do 2014-08-11 )))))))))))))))))))))))))))))))
.
.
2014-08-11 18:57 . 2014-08-11 18:57 -------- d-----w- c:\users\Default\AppData\Local\temp
2014-08-11 16:28 . 2014-08-11 18:17 -------- d-----w- c:\users\Giovanni\AppData\Local\The Witcher
2014-08-09 18:00 . 2014-08-09 18:00 -------- d-----w- c:\users\Giovanni\AppData\Local\CrashDumps
2014-08-09 17:59 . 2014-08-09 17:59 -------- d-----w- c:\users\Giovanni\AppData\Local\CrashRpt
2014-08-09 17:34 . 2014-08-10 09:31 30312 ----a-w- c:\windows\system32\drivers\TrueSight.sys
2014-08-09 17:34 . 2014-08-09 17:34 -------- d-----w- c:\programdata\RogueKiller
2014-08-09 17:26 . 2014-08-09 17:26 -------- d-----w- c:\windows\ERUNT
2014-08-09 12:37 . 2014-08-09 12:57 122584 ----a-w- c:\windows\system32\drivers\MBAMSwissArmy.sys
2014-08-09 12:37 . 2014-08-09 12:37 -------- d-----w- c:\program files (x86)\Malwarebytes Anti-Malware
2014-08-09 12:37 . 2014-08-09 12:37 -------- d-----w- c:\programdata\Malwarebytes
2014-08-09 12:37 . 2014-05-12 05:26 63704 ----a-w- c:\windows\system32\drivers\mwac.sys
2014-08-09 12:37 . 2014-05-12 05:26 91352 ----a-w- c:\windows\system32\drivers\mbamchameleon.sys
2014-08-09 12:37 . 2014-05-12 05:25 25816 ----a-w- c:\windows\system32\drivers\mbam.sys
2014-08-09 12:35 . 2014-08-11 00:00 -------- d-----w- c:\users\Giovanni\AppData\Local\Adobe
2014-08-09 12:26 . 2014-08-09 17:22 -------- d-----w- C:\AdwCleaner
2014-08-08 19:05 . 2014-08-08 19:05 -------- d-----w- c:\program files\CPUID
2014-08-03 18:51 . 2014-08-03 18:52 -------- d-----w- c:\programdata\Package Cache
2014-08-01 01:14 . 2014-08-01 01:14 -------- d-----w- c:\programdata\regid.1986-12.com.adobe
2014-08-01 01:12 . 2014-08-04 02:32 -------- d-----w- c:\program files\Adobe
2014-08-01 01:08 . 2014-08-04 02:37 -------- d-----w- c:\program files\Common Files\Adobe
2014-07-30 23:36 . 2014-07-30 23:36 -------- d-sh--w- c:\programdata\SecuROM
2014-07-30 23:26 . 2014-07-30 23:26 -------- d-----w- c:\users\Giovanni\AppData\Local\Rockstar Games
2014-07-30 23:26 . 2014-07-30 23:26 178800 ----a-w- c:\windows\SysWow64\CmdLineExt_x64.dll
2014-07-30 13:20 . 2014-07-02 17:44 609240 ----a-w- c:\windows\SysWow64\nvStreaming.exe
2014-07-24 10:56 . 2014-08-09 22:02 -------- d-----w- c:\users\Giovanni\AppData\Roaming\.minecraft
2014-07-23 12:21 . 2009-03-18 16:35 33856 ---ha-w- c:\windows\system32\hamachi.sys
2014-07-22 20:32 . 2014-07-22 20:32 -------- d-----w- c:\users\Giovanni\AppData\Local\LogMeIn
2014-07-22 20:32 . 2014-07-22 20:32 -------- d-----w- c:\programdata\LogMeIn
2014-07-18 09:40 . 2014-07-18 09:40 -------- d-----w- c:\users\Giovanni\AppData\Roaming\Oracle
2014-07-18 09:39 . 2014-07-18 09:39 -------- d-----w- c:\program files (x86)\Common Files\Java
2014-07-18 09:39 . 2014-07-11 01:02 98216 ----a-w- c:\windows\SysWow64\WindowsAccessBridge-32.dll
2014-07-16 16:59 . 2014-07-16 16:59 5659136 ----a-w- c:\windows\SysWow64\FlashPlayerInstaller.exe
2014-07-16 15:00 . 2014-07-16 15:00 -------- d-----w- c:\users\Giovanni\AppData\Local\Razer
2014-07-16 14:55 . 2014-07-16 14:55 -------- d-----w- c:\programdata\Razer
2014-07-16 14:55 . 2014-07-16 15:00 -------- d-----w- c:\program files (x86)\Razer
2014-07-16 14:53 . 2014-05-30 08:08 210944 ----a-w- c:\windows\system32\wdigest.dll
.
.
.
(((((((((((((((((((((((((((((((((((((((( Find3M výpis ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2014-07-17 11:18 . 2014-05-10 16:04 42040 ----a-w- c:\windows\system32\drivers\avnetflt.sys
2014-07-16 16:59 . 2014-05-10 15:54 71344 ----a-w- c:\windows\SysWow64\FlashPlayerCPLApp.cpl
2014-07-16 16:59 . 2014-05-10 15:54 699056 ----a-w- c:\windows\SysWow64\FlashPlayerApp.exe
2014-07-16 15:14 . 2014-05-29 14:17 96441528 ----a-w- c:\windows\system32\MRT.exe
2014-07-02 20:48 . 2014-05-10 15:34 75040 ----a-w- c:\windows\system32\OpenCL.dll
2014-07-02 20:48 . 2014-05-10 15:34 61912 ----a-w- c:\windows\SysWow64\OpenCL.dll
2014-07-02 20:48 . 2014-05-10 15:33 14498552 ----a-w- c:\windows\SysWow64\nvd3dum.dll
2014-07-02 20:48 . 2014-05-10 15:32 18626304 ----a-w- c:\windows\system32\nvwgf2umx.dll
2014-07-02 20:48 . 2014-05-10 15:32 965312 ----a-w- c:\windows\system32\nvumdshimx.dll
2014-07-02 20:48 . 2014-05-10 15:32 3196816 ----a-w- c:\windows\system32\nvapi64.dll
2014-07-02 20:48 . 2014-05-10 15:32 2814656 ----a-w- c:\windows\SysWow64\nvapi.dll
2014-07-02 18:55 . 2014-05-10 15:34 3522392 ----a-w- c:\windows\system32\nvsvc64.dll
2014-07-02 18:55 . 2014-05-10 15:34 6783776 ----a-w- c:\windows\system32\nvcpl.dll
2014-07-02 18:55 . 2014-05-10 15:34 935368 ----a-w- c:\windows\system32\nvvsvc.exe
2014-07-02 18:55 . 2014-05-10 15:34 62808 ----a-w- c:\windows\system32\nvshext.dll
2014-07-02 18:55 . 2014-05-10 15:34 386520 ----a-w- c:\windows\system32\nvmctray.dll
2014-07-02 18:55 . 2014-05-10 15:34 2559960 ----a-w- c:\windows\system32\nvsvcr.dll
2014-07-02 10:14 . 2014-05-10 15:34 3826628 ----a-w- c:\windows\system32\nvcoproc.bin
2014-06-24 10:36 . 2014-06-24 10:36 466456 ----a-w- c:\windows\system32\wrap_oal.dll
2014-06-24 10:36 . 2014-06-24 10:36 122904 ----a-w- c:\windows\system32\OpenAL32.dll
2014-06-24 10:36 . 2014-06-24 10:36 444952 ----a-w- c:\windows\SysWow64\wrap_oal.dll
2014-06-24 10:36 . 2014-06-24 10:36 109080 ----a-w- c:\windows\SysWow64\OpenAL32.dll
2014-06-24 09:25 . 2014-05-10 16:04 117712 ----a-w- c:\windows\system32\drivers\avgntflt.sys
2014-05-30 07:52 . 2014-07-16 14:53 247808 ----a-w- c:\windows\SysWow64\schannel.dll
2014-05-29 05:32 . 2014-05-29 05:32 80384 ----a-w- c:\windows\system32\RazerCoinstaller.dll
2014-05-24 02:33 . 2014-05-24 02:33 864256 ----a-w- c:\windows\SysWow64\rzdevicedll.dll
2014-05-24 02:33 . 2014-05-24 02:33 325120 ----a-w- c:\windows\SysWow64\rzaudiodll.dll
2014-05-20 13:38 . 2012-07-17 12:37 23264 ----a-w- c:\programdata\Microsoft\IdentityCRL\production\ppcrlconfig600.dll
2014-05-20 02:44 . 2014-05-28 18:52 1889112 ----a-w- c:\windows\system32\nvdispco6433788.dll
2014-05-20 02:44 . 2014-05-28 18:52 1541576 ----a-w- c:\windows\system32\nvdispgenco6433788.dll
2014-05-19 06:47 . 2014-05-19 06:47 39080 ----a-w- c:\windows\system32\drivers\rzendpt.sys
2014-05-19 06:47 . 2014-05-19 06:47 155816 ----a-w- c:\windows\system32\drivers\rzudd.sys
2014-05-19 06:26 . 2014-05-19 06:26 89088 ----a-w- c:\windows\SysWow64\rzdevinfo.dll
2014-05-19 06:26 . 2014-05-19 06:26 155136 ----a-w- c:\windows\SysWow64\rztouchdll.dll
2014-05-19 06:26 . 2014-05-19 06:26 117248 ----a-w- c:\windows\SysWow64\rzdisplaydll.dll
2014-05-15 12:13 . 2014-05-10 16:04 130584 ----a-w- c:\windows\system32\drivers\avipbb.sys
.
.
(((((((((((((((((((((((((((((((((( Spouštěcí body v registru )))))))))))))))))))))))))))))))))))))))))))))
.
.
*Poznámka* prázdné záznamy a legitimní výchozí údaje nejsou zobrazeny.
REGEDIT4
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]
"avgnt"="c:\program files (x86)\Avira\AntiVir Desktop\avgnt.exe" [2014-07-30 751184]
"Razer Synapse"="c:\program files (x86)\Razer\Synapse\RzSynapse.exe" [2014-06-23 585560]
"SwitchBoard"="c:\program files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe" [2010-02-19 517096]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorAdmin"= 5 (0x5)
"ConsentPromptBehaviorUser"= 3 (0x3)
"EnableUIADesktopToggle"= 0 (0x0)
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon]
"Userinit"="userinit.exe"
.
R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [x]
R3 IEEtwCollectorService;Internet Explorer ETW Collector Service;c:\windows\system32\IEEtwCollector.exe;c:\windows\SYSNATIVE\IEEtwCollector.exe [x]
R3 ose64;Office 64 Source Engine;c:\program files\Common Files\Microsoft Shared\Source Engine\OSE.EXE;c:\program files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [x]
R3 RdpVideoMiniport;Remote Desktop Video Miniport Driver;c:\windows\system32\drivers\rdpvideominiport.sys;c:\windows\SYSNATIVE\drivers\rdpvideominiport.sys [x]
R3 SwitchBoard;SwitchBoard;c:\program files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe;c:\program files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [x]
R3 Synth3dVsc;Synth3dVsc;c:\windows\system32\drivers\synth3dvsc.sys;c:\windows\SYSNATIVE\drivers\synth3dvsc.sys [x]
R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys;c:\windows\SYSNATIVE\drivers\tsusbflt.sys [x]
R3 tsusbhub;tsusbhub;c:\windows\system32\drivers\tsusbhub.sys;c:\windows\SYSNATIVE\drivers\tsusbhub.sys [x]
R3 VGPU;VGPU;c:\windows\system32\drivers\rdvgkmd.sys;c:\windows\SYSNATIVE\drivers\rdvgkmd.sys [x]
R3 WatAdminSvc;Služba Technologie aktivace Windows;c:\windows\system32\Wat\WatAdminSvc.exe;c:\windows\SYSNATIVE\Wat\WatAdminSvc.exe [x]
S1 avfwot;avfwot;c:\windows\system32\DRIVERS\avfwot.sys;c:\windows\SYSNATIVE\DRIVERS\avfwot.sys [x]
S1 avkmgr;avkmgr;c:\windows\system32\DRIVERS\avkmgr.sys;c:\windows\SYSNATIVE\DRIVERS\avkmgr.sys [x]
S2 AntiVirFirewallService;Avira FireWall;c:\program files (x86)\Avira\AntiVir Desktop\avfwsvc.exe;c:\program files (x86)\Avira\AntiVir Desktop\avfwsvc.exe [x]
S2 AntiVirMailService;Avira Mail Protection;c:\program files (x86)\Avira\AntiVir Desktop\avmailc7.exe;c:\program files (x86)\Avira\AntiVir Desktop\avmailc7.exe [x]
S2 AntiVirSchedulerService;Avira Scheduler;c:\program files (x86)\Avira\AntiVir Desktop\sched.exe;c:\program files (x86)\Avira\AntiVir Desktop\sched.exe [x]
S2 AntiVirWebService;Avira Web Protection;c:\program files (x86)\Avira\AntiVir Desktop\avwebg7.exe;c:\program files (x86)\Avira\AntiVir Desktop\avwebg7.exe [x]
S2 avnetflt;avnetflt;c:\windows\system32\DRIVERS\avnetflt.sys;c:\windows\SYSNATIVE\DRIVERS\avnetflt.sys [x]
S2 NvNetworkService;NVIDIA Network Service;c:\program files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe;c:\program files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [x]
S2 NvStreamSvc;NVIDIA Streamer Service;c:\program files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe;c:\program files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [x]
S2 Stereo Service;NVIDIA Stereoscopic 3D Driver Service;c:\program files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe;c:\program files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe [x]
S3 avfwim;AvFw Packet Filter Miniport;c:\windows\system32\DRIVERS\avfwim.sys;c:\windows\SYSNATIVE\DRIVERS\avfwim.sys [x]
S3 dtsoftbus01;DAEMON Tools Virtual Bus Driver;c:\windows\system32\DRIVERS\dtsoftbus01.sys;c:\windows\SYSNATIVE\DRIVERS\dtsoftbus01.sys [x]
S3 nvvad_WaveExtensible;NVIDIA Virtual Audio Device (Wave Extensible) (WDM);c:\windows\system32\drivers\nvvad64v.sys;c:\windows\SYSNATIVE\drivers\nvvad64v.sys [x]
S3 rzendpt;rzendpt;c:\windows\system32\DRIVERS\rzendpt.sys;c:\windows\SYSNATIVE\DRIVERS\rzendpt.sys [x]
S3 rzudd;Razer Mouse Driver;c:\windows\system32\DRIVERS\rzudd.sys;c:\windows\SYSNATIVE\DRIVERS\rzudd.sys [x]
.
.
Obsah adresáře 'Naplánované úlohy'
.
2014-08-11 c:\windows\Tasks\Adobe Flash Player Updater.job
- c:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2014-05-10 17:00]
.
.
--------- X64 Entries -----------
.
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"NvBackend"="c:\program files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe" [2014-02-05 2234144]
"ShadowPlay"="c:\windows\system32\nvspcap64.dll" [2014-02-05 1179576]
"AdobeAAMUpdater-1.0"="c:\program files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe" [2012-09-20 444904]
.
------- Doplňkový sken -------
.
uLocal Page = c:\windows\system32\blank.htm
mLocal Page = c:\windows\SysWOW64\blank.htm
IE: E&xportovat do aplikace Microsoft Excel - c:\progra~1\MICROS~2\Office14\EXCEL.EXE/3000
TCP: DhcpNameServer = 213.46.172.36 213.46.172.37
FF - ProfilePath - c:\users\Giovanni\AppData\Roaming\Mozilla\Firefox\Profiles\8657r0uf.default\
FF - prefs.js: browser.startup.homepage - google.com
.
- - - - NEPLATNÉ POLOŽKY ODSTRANĚNÉ Z REGISTRU - - - -
.
Wow6432Node-HKLM-Run-<NO NAME> - (no file)
AddRemove-PunkBusterSvc - c:\windows\system32\pbsvc.exe
.
.
.
--------------------- ZAMKNUTÉ KLÍČE V REGISTRU ---------------------
.
[HKEY_USERS\S-1-5-21-3853214329-1863429105-646852494-1000\Software\SecuROM\License information*]
@Allowed: (Read) (RestrictedCode)
"datasecu"=hex:c4,22,ea,8d,d2,1a,96,33,80,0a,7e,33,73,e3,5a,9d,7a,f1,5b,aa,96,
13,b5,e9,01,04,85,89,41,b8,9f,cc,13,30,11,7d,7d,ad,2e,76,e8,e7,37,07,37,be,\
"rkeysecu"=hex:2f,0f,d5,3e,02,2b,06,63,b1,0b,dd,b6,71,e2,54,98
.
------------------------ Jiné spuštené procesy ------------------------
.
c:\program files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
c:\program files (x86)\Avira\AntiVir Desktop\avguard.exe
c:\windows\SysWOW64\PnkBstrA.exe
.
**************************************************************************
.
Celkový čas: 2014-08-11 21:13:45 - počítač byl restartován
ComboFix-quarantined-files.txt 2014-08-11 19:13
ComboFix2.txt 2014-08-11 14:22
.
Před spuštěním: Volných bajtů: 235 295 719 424
Po spuštění: Volných bajtů: 235 069 870 080
.
- - End Of File - - 0848E1228BD4C027B5DAEF947A2E7B76
A36C5E4F47E84449FF07ED3517B43A31


----------------------------------------------------------------------------------------------------------------------------------------


aswMBR version 1.0.1.2041 Copyright(c) 2014 AVAST Software
Run date: 2014-08-11 21:16:05
-----------------------------
21:16:05.368 OS Version: Windows x64 6.1.7601 Service Pack 1
21:16:05.368 Number of processors: 4 586 0x502
21:16:05.383 ComputerName: GIOVANNI-PC UserName: Giovanni
21:16:08.040 Initialize success
21:16:08.040 VM: initialized successfully
21:16:08.040 VM: Amd CPU supported
21:16:09.501 VM: supported disk I/O storport.sys
21:16:13.213 Disk 0 (boot) \Device\Harddisk0\DR0 -> \Device\00000063
21:16:13.213 Disk 0 Vendor: STM35004 CC38 Size: 476940MB BusType: 3
21:16:13.291 Disk 0 MBR read successfully
21:16:13.307 Disk 0 MBR scan
21:16:13.307 Disk 0 Windows 7 default MBR code
21:16:13.307 Disk 0 Partition 1 80 (A) 07 HPFS/NTFS NTFS 476837 MB offset 206848
21:16:13.323 Disk 0 Boot: NTFS code=2
21:16:13.338 Disk 0 scanning C:\Windows\system32\drivers
21:16:23.229 Service scanning
21:16:35.198 Modules scanning
21:16:35.213 Disk 0 trace - called modules:
21:16:35.229 ntoskrnl.exe CLASSPNP.SYS disk.sys ACPI.sys storport.sys hal.dll nvstor.sys
21:16:35.245 1 nt!IofCallDriver -> \Device\Harddisk0\DR0[0xfffffa8004738060]
21:16:35.260 3 CLASSPNP.SYS[fffff8800145143f] -> nt!IofCallDriver -> [0xfffffa80044bc200]
21:16:35.260 5 ACPI.sys[fffff88000f5c7a1] -> nt!IofCallDriver -> \Device\00000063[0xfffffa80044c6060]
21:16:35.276 Scan finished successfully
21:16:40.698 Disk 0 MBR has been saved successfully to "C:\Users\Giovanni\Desktop\MBR.dat"
21:16:40.698 The log file has been saved successfully to "C:\Users\Giovanni\Desktop\aswMBR.txt"


----------------------------------------------------------------------------------------------------------------------------------------


Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 21:16:56, on 11.8.2014
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v11.0 (11.00.9600.17207)

FIREFOX: 31.0 (x86 cs)
Boot mode: Normal

Running processes:
C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe
C:\Users\Giovanni\Desktop\Nová složka\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/p/?LinkId=255141
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/p/?LinkId=255141
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
F2 - REG:system.ini: UserInit=userinit.exe
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll
O2 - BHO: Pomocná služba pro přihlášení k účtu Microsoft - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: URLRedirectionBHO - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\PROGRA~2\MICROS~2\Office14\URLREDIR.DLL
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll
O4 - HKLM\..\Run: [avgnt] "C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe" /min
O4 - HKLM\..\Run: [Razer Synapse] "C:\Program Files (x86)\Razer\Synapse\RzSynapse.exe"
O4 - HKLM\..\Run: [SwitchBoard] C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office14\EXCEL.EXE/3000
O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll
O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O18 - Protocol: wlpg - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} - C:\Program Files (x86)\Windows Live\Photo Gallery\AlbumDownloadProtocolHandler.dll
O18 - Filter hijack: text/xml - {807573E5-5146-11D5-A672-00B0D022E945} - C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\MSOXMLMF.DLL
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
O23 - Service: Avira FireWall (AntiVirFirewallService) - Avira Operations GmbH & Co. KG - C:\Program Files (x86)\Avira\AntiVir Desktop\avfwsvc.exe
O23 - Service: Avira Mail Protection (AntiVirMailService) - Avira Operations GmbH & Co. KG - C:\Program Files (x86)\Avira\AntiVir Desktop\avmailc7.exe
O23 - Service: Avira Scheduler (AntiVirSchedulerService) - Avira Operations GmbH & Co. KG - C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe
O23 - Service: Avira Real-Time Protection (AntiVirService) - Avira Operations GmbH & Co. KG - C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe
O23 - Service: Avira Web Protection (AntiVirWebService) - Avira Operations GmbH & Co. KG - C:\Program Files (x86)\Avira\AntiVir Desktop\avwebg7.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\ieetwcollectorres.dll,-1000 (IEEtwCollectorService) - Unknown owner - C:\Windows\system32\IEEtwCollector.exe (file missing)
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Mozilla Foundation - C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: NVIDIA Network Service (NvNetworkService) - NVIDIA Corporation - C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
O23 - Service: NVIDIA Streamer Service (NvStreamSvc) - NVIDIA Corporation - C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
O23 - Service: NVIDIA Display Driver Service (nvsvc) - Unknown owner - C:\Windows\system32\nvvsvc.exe (file missing)
O23 - Service: PnkBstrA - Unknown owner - C:\Windows\system32\PnkBstrA.exe
O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)
O23 - Service: Steam Client Service - Valve Corporation - C:\Program Files (x86)\Common Files\Steam\SteamService.exe
O23 - Service: NVIDIA Stereoscopic 3D Driver Service (Stereo Service) - NVIDIA Corporation - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
O23 - Service: SwitchBoard - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\Wat\WatUX.exe,-601 (WatAdminSvc) - Unknown owner - C:\Windows\system32\Wat\WatAdminSvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)

--
End of file - 7796 bytes

[jaro3]

ComboFix se odinstaluje takto:
Start-Spustit a zadej ComboFix /Uninstall

Vyčisti systém CCleanerem

Stáhni si OTC

na plochu. Poklepej na něj. Potom klikni na Clean up!.
Restartuj PC , pokud Ti bude doporučeno.

Zavři ostatní aplikace a prohlížeče, odpoj se od netu a fixni v HJT:
Návod

Kód: Vybrat vše

R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
F2 - REG:system.ini: UserInit=userinit.exe

Prosím stáhni příslušnou verzi programu pro Tvůj systém 32-bit/64-bit FarbarRecovery Scan Tool (FrSt)
32bit.:
http://www.bleepingcomputer.com/downloa ... ool/dl/81/
64bit.:
http://www.bleepingcomputer.com/downloa ... ool/dl/82/
a ulož jej na plochu. ,pak spusť FrSt.
Potvrď způsob užití.
Neměň žádné z výchozích nastavení a klikni na položku „Scan“ („Skenovat“) .Když je skenování dokončeno, ukážou se dva logy = FRST.txt a Addition.txt a uloží se na ploše.Prosím zkopíruj sem celý jejich obsah.