Doble click na myši Gx gaming pls help

[Manphis]

ogueKiller V10.0.4.0 (x64) [Oct 29 2014] by Adlice Software
mail : http://www.adlice.com/contact/
Feedback : http://forum.adlice.com
Webová stránka : http://www.adlice.com/softwares/roguekiller/
Blog : http://www.adlice.com

Operační systém : Windows 7 (6.1.7601 Service Pack 1) 64 bits version
Spuštěno : Normální režim
Uživatel : Manphis [Práva správce]
Mód : Smazat Přerušeno -- Datum : 11/02/2014 20:23:10

¤¤¤ Procesy : 0 ¤¤¤

¤¤¤ Registry : 0 ¤¤¤

¤¤¤ Úlohy : 0 ¤¤¤

¤¤¤ Soubory : 0 ¤¤¤

¤¤¤ Soubor HOSTS : 0 ¤¤¤

¤¤¤ Antirootkit : 0 (Driver: Nahrán) ¤¤¤

¤¤¤ Webové prohlížeče : 0 ¤¤¤

¤¤¤ Kontrola MBR : ¤¤¤

============================================
RKreport_SCN_11022014_130813.log - RKreport_SCN_11022014_202141.log

[Reklama]

[Manphis]

Zoek.exe v5.0.0.0 Updated 02-November-2014
Tool run by Manphis on ne 02.11.2014 at 20:29:15,70.
Microsoft Windows 7 Ultimate 6.1.7601 Service Pack 1 x64
Running in: Normal Mode Internet Access Detected
Launched: C:\Users\Manphis\Desktop\zoek.exe [Scan all users] [Script inserted]

==== System Restore Info ======================

2.11.2014 20:29:43 Zoek.exe System Restore Point Created Succesfully.

==== Reset Hosts File ======================

# Copyright (c) 1993-2006 Microsoft Corp.
#
# This is a sample HOSTS file used by Microsoft TCP/IP for Windows.
#
# This file contains the mappings of IP addresses to host names. Each
# entry should be kept on an individual line. The IP address should
# be placed in the first column followed by the corresponding host name.
# The IP address and the host name should be separated by at least one
# space.
#
# Additionally, comments (such as these) may be inserted on individual
# lines or following the machine name denoted by a '#' symbol.
#
# For example:
#
# 102.54.94.97 rhino.acme.com # source server
# 38.25.63.10 x.acme.com # x client host

# localhost name resolution is handle within DNS itself.
127.0.0.1 localhost
::1 localhost

==== Deleting CLSID Registry Keys ======================


==== Deleting CLSID Registry Values ======================

HKEY_USERS\S-1-5-21-3707322994-1313551490-3014853183-1001\Software\Microsoft\Internet Explorer\Approved Extensions\{A40DC6C5-79D0-4CA8-A185-8FF989AF1115} deleted successfully

==== Deleting Services ======================


==== Deleting Files \ Folders ======================

C:\PROGRA~3\Package Cache deleted
C:\Users\Manphis\AppData\Local\cache deleted
C:\Windows\SysNative\config\systemprofile\Searches deleted

==== Firefox Extensions Registry ======================

[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Mozilla\Firefox\Extensions]
"wrc@avast.com"="C:\Program Files\AVAST Software\Avast\WebRep\FF" [02.11.2014 20:16]

==== Chromium Look ======================

HKEY_LOCAL_MACHINE\SOFTWARE\Google\Chrome\Extensions
gomekmidlodglbbmalcneegieacbdmki - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChrome.crx[01.11.2014 11:50]

HKEY_CURRENT_USER\SOFTWARE\Google\Chrome\Extensions
pepjgkdpkihjnbdaggonbpphlfkbhdli - C:\Users\Manphis\AppData\Local\Google\Chrome\User Data\Extensions_packages\pepjgkdpkihjnbdaggonbpphlfkbhdli.crx[01.10.2014 16:30]

AdBlock - Manphis\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom
Graffiti Burst - Manphis\AppData\Local\Google\Chrome\User Data\Default\Extensions\pljjmbnhpjnpblmkmmefbopnedifddlo

==== Chromium Fix ======================

C:\Users\Manphis\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_www.search.ask.com_0.localstorage deleted successfully
C:\Users\Manphis\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_www.search.ask.com_0.localstorage-journal deleted successfully

==== Set IE to Default ======================

Old Values:
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
"Start Page"="http://www.google.com"
"Search Page"="http://terra.im/?sid=101"
"Search Bar"="http://terra.im/?sid=101"
"Default_Page_URL"="http://www.google.com"
[HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main]
"Default_Page_URL"="http://www.google.com"
"Start Page"="http://www.google.com"
[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Internet Explorer\Main]
"Default_Page_URL"="http://www.google.com"
"Start Page"="http://www.google.com"
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes]
No DefaultScope Set For HKCU

New Values:
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
"Search Page"="http://go.microsoft.com/fwlink/?LinkId=54896"
"Search Bar"="http://go.microsoft.com/fwlink/?LinkId=54896"
"Default_Page_URL"="http://go.microsoft.com/fwlink/?LinkId=69157"
"Start Page"="http://www.google.com"
[HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main]
"Default_Page_URL"="http://go.microsoft.com/fwlink/?LinkId=69157"
"Start Page"="http://go.microsoft.com/fwlink/?LinkId=69157"
[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Internet Explorer\Main]
"Default_Page_URL"="http://go.microsoft.com/fwlink/?LinkId=69157"
"Start Page"="http://go.microsoft.com/fwlink/?LinkId=69157"
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes]
"DefaultScope"="{012E1000-F331-11DB-8314-0800200C9A66}"

==== All HKCU SearchScopes ======================

HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes
{012E1000-F331-11DB-8314-0800200C9A66} Google Url="http://www.google.com/search?q={searchTerms}"
{0191A6B0-1154-4C22-9182-23A95BBE92D9} Google Url="http://www.google.com/search?q={searchTerms}"
{0633EE93-D776-472f-A0FF-E1416B8B2E3A} Bing Url="http://www.bing.com/search?q={searchTerms}&src=IE-SearchBox&FORM=IE8SRC"
{4187F0FC-AF41-4E4B-AE67-84C8FD35A0AE} terra.im Url="http://terra.im/search?sid=101&q={searchTerms}"

==== Reset Google Chrome ======================

C:\Users\Manphis\AppData\Local\Google\Chrome\User Data\Default\Preferences was reset successfully
C:\Users\Manphis\AppData\Local\Google\Chrome\User Data\Default\Web Data was reset successfully

==== Empty IE Cache ======================

C:\Windows\system32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully
C:\Users\Manphis\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully
C:\Windows\sysWoW64\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully
C:\Windows\serviceprofiles\networkservice\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully
C:\Windows\serviceprofiles\Localservice\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully
C:\Windows\sysWOW64\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully

==== Empty FireFox Cache ======================

No FireFox Profiles found

==== Empty Chrome Cache ======================

C:\Users\Manphis\AppData\Local\Google\Chrome\User Data\Default\Cache emptied successfully

==== Empty All Flash Cache ======================

Flash Cache Emptied Successfully

==== Empty All Java Cache ======================

No Java Cache Found

==== C:\zoek_backup content ======================

C:\zoek_backup (files=86 folders=36 16176696 bytes)

==== Empty Temp Folders ======================

C:\Users\Default\AppData\Local\Temp emptied successfully
C:\Users\Default User\AppData\Local\Temp emptied successfully
C:\Users\Manphis\AppData\Local\Temp will be emptied at reboot
C:\Windows\serviceprofiles\networkservice\AppData\Local\Temp will be emptied at reboot
C:\Windows\serviceprofiles\Localservice\AppData\Local\Temp emptied successfully
C:\Windows\Temp will be emptied at reboot

==== After Reboot ======================

==== Empty Temp Folders ======================

C:\Windows\Temp successfully emptied
C:\Users\Manphis\AppData\Local\Temp successfully emptied

==== Empty Recycle Bin ======================

C:\$RECYCLE.BIN successfully emptied

==== Deleting Files / Folders ======================

"C:\Windows\serviceprofiles\networkservice\AppData\Local\Temp\MpCmdRun.log" not found

==== EOF on ne 02.11.2014 at 20:41:17,97 ======================

[jaro3]

Vypni rez. ochranu u antiviru a antispywaru,příp. firewall..

Stáhni si ComboFix (by sUBs)
a ulož si ho na plochu.
Ukonči všechna aktivní okna a spusť ho.
- Po spuštění se zobrazí podmínky užití, potvrď je stiskem tlačítka Ano
- Dále postupuj dle pokynů, během aplikování ComboFixu neklikej do zobrazujícího se okna
- Po dokončení skenování by měl program vytvořit log - C:\ComboFix.txt - zkopíruj sem prosím celý jeho obsah
Pokud budou problémy , spusť ho v nouz. režimu.

Upozornění : Může se stát, že po aplikaci Combofixu a restartu počítače, Windows nenaběhnou , nebo nenajede plocha , budou problémy s připojením, pak znovu restartuj počítač, pokud to nepomůže , po restartu mačkej klávesu F8 a pak zvol poslední známou funkční konfiguraci. , či použij bod obnovy.

[Manphis]

ComboFix 14-10-29.01 - Manphis 03.11.2014 10:30:55.1.4 - x64
Microsoft Windows 7 Ultimate 6.1.7601.1.1250.420.1029.18.4094.2534 [GMT 1:00]
Spuštěný z: c:\users\Manphis\Desktop\ComboFix.exe
AV: avast! Antivirus *Disabled/Updated* {17AD7D40-BA12-9C46-7131-94903A54AD8B}
SP: avast! Antivirus *Disabled/Updated* {ACCC9CA4-9C28-93C8-4B81-AFE241D3E736}
SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.
.
((((((((((((((((((((((((( Soubory vytvořené od 2014-10-03 do 2014-11-03 )))))))))))))))))))))))))))))))
.
.
2014-11-03 09:36 . 2014-11-03 09:36 -------- d-----w- c:\users\Default\AppData\Local\temp
2014-11-02 19:37 . 2014-11-02 19:29 24064 ----a-w- c:\windows\zoek-delete.exe
2014-11-02 19:37 . 2014-11-03 09:36 -------- d-----w- c:\users\Manphis\AppData\Local\Temp
2014-11-02 19:28 . 2014-11-02 19:36 -------- d-----w- C:\zoek_backup
2014-11-02 19:17 . 2014-11-01 10:50 364512 ----a-w- c:\windows\system32\aswBoot.exe
2014-11-02 12:00 . 2014-11-02 19:20 37624 ----a-w- c:\windows\system32\drivers\TrueSight.sys
2014-11-02 11:59 . 2014-11-02 12:00 -------- d-----w- c:\programdata\RogueKiller
2014-11-02 11:39 . 2014-11-02 11:39 -------- d-----w- c:\windows\ERUNT
2014-11-01 21:32 . 2014-11-02 11:44 129752 ----a-w- c:\windows\system32\drivers\MBAMSwissArmy.sys
2014-11-01 21:31 . 2014-11-01 21:31 -------- d-----w- c:\program files (x86)\Malwarebytes Anti-Malware
2014-11-01 21:31 . 2014-11-01 21:31 -------- d-----w- c:\programdata\Malwarebytes
2014-11-01 21:31 . 2014-10-01 10:11 63704 ----a-w- c:\windows\system32\drivers\mwac.sys
2014-11-01 21:31 . 2014-10-01 10:11 93400 ----a-w- c:\windows\system32\drivers\mbamchameleon.sys
2014-11-01 21:31 . 2014-10-01 10:11 25816 ----a-w- c:\windows\system32\drivers\mbam.sys
2014-11-01 21:14 . 2010-08-30 07:34 536576 ----a-w- c:\windows\SysWow64\sqlite3.dll
2014-11-01 21:13 . 2014-11-02 11:33 -------- d-----w- C:\AdwCleaner
2014-11-01 10:50 . 2014-11-01 10:50 43152 ----a-w- c:\windows\avastSS.scr
2014-10-31 07:14 . 2014-10-14 19:59 11627712 ----a-w- c:\programdata\Microsoft\Windows Defender\Definition Updates\{36D84019-96DF-4129-870E-6F3E8E5EF3E9}\mpengine.dll
2014-10-30 09:50 . 2014-10-30 09:58 -------- d-----w- c:\program files (x86)\Hearthstone
2014-10-30 09:47 . 2014-10-30 09:47 -------- d-----w- c:\program files (x86)\Battle.net
2014-10-28 23:00 . 2014-11-01 21:21 -------- d-----w- c:\windows\system32\log
2014-10-26 21:59 . 2014-10-26 21:59 -------- d-----w- c:\program files\Enigma Software Group
2014-10-26 21:52 . 2014-10-26 21:52 -------- d-----w- c:\users\Manphis\AppData\Roaming\KYE Gila
2014-10-26 21:52 . 2014-10-26 21:52 -------- d-----w- c:\program files (x86)\Genius
2014-10-26 21:52 . 2014-10-26 21:52 1216471 ----a-w- c:\windows\unins000.exe
2014-10-19 09:05 . 2014-10-19 09:05 -------- d-----w- c:\programdata\ATI
2014-10-19 09:05 . 2014-10-19 09:05 -------- d-----w- c:\program files (x86)\AMD AVT
2014-10-16 11:26 . 2014-10-16 11:26 -------- d-----w- c:\program files (x86)\Advanced Port Scanner
2014-10-16 09:51 . 2014-10-16 09:53 -------- d-----w- c:\users\Manphis\AppData\Local\Microsoft Toolkit
2014-10-15 20:56 . 2014-09-18 02:00 3241472 ----a-w- c:\windows\system32\msi.dll
2014-10-15 11:17 . 2014-10-15 11:17 -------- d-----w- c:\users\Manphis\AppData\Roaming\Steam
2014-10-07 08:11 . 2014-10-07 08:11 -------- d-----w- c:\users\Manphis\AppData\Local\Apple Computer
2014-10-04 13:52 . 2014-10-04 13:52 -------- d-----w- c:\users\Manphis\AppData\Roaming\newSI_507
2014-10-04 13:52 . 2014-10-04 13:52 -------- d-----w- c:\users\Manphis\AppData\Roaming\SetMyHomePage
.
.
.
(((((((((((((((((((((((((((((((((((((((( Find3M výpis ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2014-11-02 19:17 . 2014-06-28 20:27 1050432 ----a-w- c:\windows\system32\drivers\aswsnx.sys
2014-11-02 19:17 . 2014-06-28 20:27 83280 ----a-w- c:\windows\system32\drivers\aswmonflt.sys
2014-11-01 10:50 . 2014-06-28 20:27 267632 ----a-w- c:\windows\system32\drivers\aswVmm.sys
2014-11-01 10:50 . 2014-06-28 20:27 116728 ----a-w- c:\windows\system32\drivers\aswStm.sys
2014-11-01 10:50 . 2014-06-28 20:27 436624 ----a-w- c:\windows\system32\drivers\aswsp.sys
2014-11-01 10:50 . 2014-06-28 20:27 65776 ----a-w- c:\windows\system32\drivers\aswRvrt.sys
2014-11-01 10:50 . 2014-06-28 20:27 29208 ----a-w- c:\windows\system32\drivers\aswHwid.sys
2014-11-01 10:50 . 2014-06-28 20:27 93568 ----a-w- c:\windows\system32\drivers\aswRdr2.sys
2014-10-28 23:10 . 2014-09-17 08:56 215128 ----a-w- c:\windows\SysWow64\PnkBstrB.xtr
2014-10-28 23:10 . 2014-09-16 09:22 215128 ----a-w- c:\windows\SysWow64\PnkBstrB.exe
2014-10-28 05:34 . 2014-06-28 18:55 275080 ------w- c:\windows\system32\MpSigStub.exe
2014-10-16 09:21 . 2014-06-28 20:06 103265616 ----a-w- c:\windows\system32\MRT.exe
2014-09-25 02:08 . 2014-10-01 07:02 371712 ----a-w- c:\windows\system32\qdvd.dll
2014-09-25 01:40 . 2014-10-01 07:02 519680 ----a-w- c:\windows\SysWow64\qdvd.dll
2014-09-23 19:09 . 2014-06-28 21:03 71344 ----a-w- c:\windows\SysWow64\FlashPlayerCPLApp.cpl
2014-09-23 19:09 . 2014-06-28 21:03 701104 ----a-w- c:\windows\SysWow64\FlashPlayerApp.exe
2014-09-23 19:09 . 2014-09-23 19:09 3675824 ----a-w- c:\windows\SysWow64\FlashPlayerInstaller.exe
2014-09-20 06:49 . 2014-09-16 09:22 215128 ----a-w- c:\windows\SysWow64\PnkBstrB.ex0
2014-09-17 09:17 . 2014-09-16 09:22 76888 ----a-w- c:\windows\SysWow64\PnkBstrA.exe
2014-09-16 09:22 . 2014-09-16 09:22 2434856 ----a-w- c:\windows\SysWow64\pbsvc.exe
2014-09-15 22:32 . 2014-09-15 22:32 78432 ----a-w- c:\windows\system32\atimpc64.dll
2014-09-15 22:32 . 2014-09-15 22:32 78432 ----a-w- c:\windows\system32\amdpcom64.dll
2014-09-15 22:32 . 2014-09-15 22:32 71704 ----a-w- c:\windows\SysWow64\atimpc32.dll
2014-09-15 22:32 . 2014-09-15 22:32 71704 ----a-w- c:\windows\SysWow64\amdpcom32.dll
2014-09-15 22:31 . 2014-04-18 02:43 144328 ----a-w- c:\windows\system32\atiuxp64.dll
2014-09-15 22:31 . 2014-04-18 02:42 126848 ----a-w- c:\windows\SysWow64\atiuxpag.dll
2014-09-15 22:31 . 2014-09-15 22:31 118096 ----a-w- c:\windows\system32\atiu9p64.dll
2014-09-15 22:31 . 2014-04-18 02:42 100032 ----a-w- c:\windows\SysWow64\atiu9pag.dll
2014-09-15 22:31 . 2014-04-18 02:42 1335544 ----a-w- c:\windows\system32\aticfx64.dll
2014-09-15 22:31 . 2014-04-18 02:42 1113576 ----a-w- c:\windows\SysWow64\aticfx32.dll
2014-09-15 22:31 . 2014-04-18 02:42 10826488 ----a-w- c:\windows\system32\atidxx64.dll
2014-09-15 22:31 . 2014-04-18 02:42 9254184 ----a-w- c:\windows\SysWow64\atidxx32.dll
2014-09-15 22:31 . 2014-04-18 02:42 7207592 ----a-w- c:\windows\SysWow64\atiumdva.dll
2014-09-15 22:31 . 2014-04-18 02:42 7028336 ----a-w- c:\windows\SysWow64\atiumdag.dll
2014-09-15 22:31 . 2014-09-15 22:31 8044976 ----a-w- c:\windows\system32\atiumd6a.dll
2014-09-15 22:31 . 2014-09-15 22:31 8296296 ----a-w- c:\windows\system32\atiumd64.dll
2014-09-15 22:29 . 2014-09-15 22:29 293088 ----a-w- c:\windows\system32\drivers\amdacpksd.sys
2014-09-15 22:26 . 2014-09-15 22:26 16750080 ----a-w- c:\windows\system32\drivers\atikmdag.sys
2014-09-15 22:18 . 2014-09-15 22:18 235008 ----a-w- c:\windows\system32\clinfo.exe
2014-09-15 22:18 . 2014-09-15 22:18 98816 ----a-w- c:\windows\system32\OpenVideo64.dll
2014-09-15 22:17 . 2014-09-15 22:17 83456 ----a-w- c:\windows\SysWow64\OpenVideo.dll
2014-09-15 22:17 . 2014-09-15 22:17 86528 ----a-w- c:\windows\system32\OVDecode64.dll
2014-09-15 22:17 . 2014-09-15 22:17 73216 ----a-w- c:\windows\SysWow64\OVDecode.dll
2014-09-15 22:17 . 2014-09-15 22:17 33867264 ----a-w- c:\windows\system32\amdocl64.dll
2014-09-15 22:17 . 2014-09-15 22:17 28770304 ----a-w- c:\windows\SysWow64\amdocl.dll
2014-09-15 22:16 . 2014-09-15 22:16 65024 ----a-w- c:\windows\system32\OpenCL.dll
2014-09-15 22:16 . 2014-09-15 22:16 58880 ----a-w- c:\windows\SysWow64\OpenCL.dll
2014-09-15 22:13 . 2014-09-15 22:13 27918336 ----a-w- c:\windows\system32\atio6axx.dll
2014-09-15 22:09 . 2014-09-15 22:09 48128 ----a-w- c:\windows\system32\amdmmcl6.dll
2014-09-15 22:09 . 2014-09-15 22:09 37888 ----a-w- c:\windows\SysWow64\amdmmcl.dll
2014-09-15 22:09 . 2014-09-15 22:09 127488 ----a-w- c:\windows\system32\mantle64.dll
2014-09-15 22:09 . 2014-09-15 22:09 113664 ----a-w- c:\windows\SysWow64\mantle32.dll
2014-09-15 22:09 . 2014-09-15 22:09 5639168 ----a-w- c:\windows\system32\amdmantle64.dll
2014-09-15 22:08 . 2014-09-15 22:08 23375360 ----a-w- c:\windows\SysWow64\atioglxx.dll
2014-09-15 22:07 . 2014-09-15 22:07 367104 ----a-w- c:\windows\system32\atiapfxx.exe
2014-09-15 22:07 . 2014-09-15 22:07 62464 ----a-w- c:\windows\system32\aticalrt64.dll
2014-09-15 22:07 . 2014-09-15 22:07 52224 ----a-w- c:\windows\SysWow64\aticalrt.dll
2014-09-15 22:07 . 2014-09-15 22:07 55808 ----a-w- c:\windows\system32\aticalcl64.dll
2014-09-15 22:07 . 2014-09-15 22:07 49152 ----a-w- c:\windows\SysWow64\aticalcl.dll
2014-09-15 22:07 . 2014-09-15 22:07 15716352 ----a-w- c:\windows\system32\aticaldd64.dll
2014-09-15 22:06 . 2014-09-15 22:06 14302208 ----a-w- c:\windows\SysWow64\aticaldd.dll
2014-09-15 22:05 . 2014-09-15 22:05 4480000 ----a-w- c:\windows\SysWow64\amdmantle32.dll
2014-09-15 22:03 . 2014-09-15 22:03 442368 ----a-w- c:\windows\system32\atidemgy.dll
2014-09-15 22:03 . 2014-09-15 22:03 31232 ----a-w- c:\windows\system32\atimuixx.dll
2014-09-15 22:03 . 2014-09-15 22:03 619008 ----a-w- c:\windows\system32\atieclxx.exe
2014-09-15 22:03 . 2014-09-15 22:03 239616 ----a-w- c:\windows\system32\atiesrxx.exe
2014-09-15 22:03 . 2014-09-15 22:03 91648 ----a-w- c:\windows\system32\mantleaxl64.dll
2014-09-15 22:03 . 2014-09-15 22:03 85504 ----a-w- c:\windows\SysWow64\mantleaxl32.dll
2014-09-15 22:03 . 2014-09-15 22:03 190976 ----a-w- c:\windows\system32\atitmm64.dll
2014-09-15 21:59 . 2014-09-15 21:59 827392 ----a-w- c:\windows\system32\coinst_14.30.dll
2014-09-15 21:59 . 2014-09-15 21:59 1210880 ----a-w- c:\windows\system32\atiadlxx.dll
2014-09-15 21:59 . 2014-09-15 21:59 900608 ----a-w- c:\windows\SysWow64\atiadlxy.dll
2014-09-15 21:59 . 2014-09-15 21:59 75264 ----a-w- c:\windows\system32\atig6pxx.dll
2014-09-15 21:59 . 2014-09-15 21:59 69632 ----a-w- c:\windows\SysWow64\atiglpxx.dll
2014-09-15 21:59 . 2014-09-15 21:59 69632 ----a-w- c:\windows\system32\atiglpxx.dll
2014-09-15 21:59 . 2014-09-15 21:59 146944 ----a-w- c:\windows\system32\atig6txx.dll
2014-09-15 21:59 . 2014-09-15 21:59 133632 ----a-w- c:\windows\SysWow64\atigktxx.dll
2014-09-15 21:59 . 2014-09-15 21:59 576000 ----a-w- c:\windows\system32\drivers\atikmpag.sys
2014-09-15 21:58 . 2014-09-15 21:58 43520 ----a-w- c:\windows\system32\drivers\ati2erec.dll
2014-09-15 16:21 . 2014-09-15 16:21 51200 ----a-w- c:\windows\system32\kdbsdk64.dll
2014-09-15 16:19 . 2014-09-15 16:19 38912 ----a-w- c:\windows\SysWow64\kdbsdk32.dll
2014-09-11 07:46 . 2014-09-11 07:46 286720 ----a-w- c:\windows\iun506.exe
2014-09-09 22:11 . 2014-09-24 07:09 2048 ----a-w- c:\windows\system32\tzres.dll
2014-09-09 21:47 . 2014-09-24 07:09 2048 ----a-w- c:\windows\SysWow64\tzres.dll
2014-08-23 02:07 . 2014-08-28 09:28 404480 ----a-w- c:\windows\system32\gdi32.dll
2014-08-23 01:45 . 2014-08-28 09:28 311808 ----a-w- c:\windows\SysWow64\gdi32.dll
.
.
(((((((((((((((((((((((((((((((((( Spouštěcí body v registru )))))))))))))))))))))))))))))))))))))))))))))
.
.
*Poznámka* prázdné záznamy a legitimní výchozí údaje nejsou zobrazeny.
REGEDIT4
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Raptr"="c:\progra~2\Raptr\raptrstub.exe" [2014-10-17 55568]
"EADM"="c:\program files (x86)\Origin\Origin.exe" [2014-09-16 3600216]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]
"AvastUI.exe"="c:\program files\AVAST Software\Avast\AvastUI.exe" [2014-11-02 5223016]
"GrooveMonitor"="c:\program files (x86)\Microsoft Office\Office12\GrooveMonitor.exe" [2006-10-26 31016]
"Adobe ARM"="c:\program files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2014-08-21 959176]
"APSDaemon"="c:\program files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe" [2011-09-27 59240]
"Gila"="c:\program files (x86)\Genius\Gila\mousehid.exe" [2013-10-10 2055680]
.
c:\users\Manphis\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\
Výřezy obrazovky a spuštění aplikace OneNote 2007.lnk - c:\program files (x86)\Microsoft Office\Office12\ONENOTEM.EXE /tsr [2006-10-26 98632]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorAdmin"= 5 (0x5)
"ConsentPromptBehaviorUser"= 3 (0x3)
"EnableUIADesktopToggle"= 0 (0x0)
"SoftwareSASGeneration"= 1 (0x1)
.
R2 aswStm;aswStm;c:\windows\system32\drivers\aswStm.sys;c:\windows\SYSNATIVE\drivers\aswStm.sys [x]
R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [x]
R2 SkypeUpdate;Skype Updater;c:\program files (x86)\Skype\Updater\Updater.exe;c:\program files (x86)\Skype\Updater\Updater.exe [x]
R3 IEEtwCollectorService;Internet Explorer ETW Collector Service;c:\windows\system32\IEEtwCollector.exe;c:\windows\SYSNATIVE\IEEtwCollector.exe [x]
R3 RdpVideoMiniport;Remote Desktop Video Miniport Driver;c:\windows\system32\drivers\rdpvideominiport.sys;c:\windows\SYSNATIVE\drivers\rdpvideominiport.sys [x]
R3 Synth3dVsc;Synth3dVsc;c:\windows\system32\drivers\synth3dvsc.sys;c:\windows\SYSNATIVE\drivers\synth3dvsc.sys [x]
R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys;c:\windows\SYSNATIVE\drivers\tsusbflt.sys [x]
R3 tsusbhub;tsusbhub;c:\windows\system32\drivers\tsusbhub.sys;c:\windows\SYSNATIVE\drivers\tsusbhub.sys [x]
R3 VGPU;VGPU;c:\windows\system32\drivers\rdvgkmd.sys;c:\windows\SYSNATIVE\drivers\rdvgkmd.sys [x]
R3 vncserver;VNC Server;c:\program files\RealVNC\VNC Server\vncservice.exe vncserver;c:\program files\RealVNC\VNC Server\vncservice.exe vncserver [x]
R3 WatAdminSvc;Služba Technologie aktivace Windows;c:\windows\system32\Wat\WatAdminSvc.exe;c:\windows\SYSNATIVE\Wat\WatAdminSvc.exe [x]
S0 aswRvrt;avast! Revert; [x]
S0 aswVmm;avast! VM Monitor; [x]
S1 aswSnx;aswSnx;c:\windows\system32\drivers\aswSnx.sys;c:\windows\SYSNATIVE\drivers\aswSnx.sys [x]
S1 aswSP;aswSP;c:\windows\system32\drivers\aswSP.sys;c:\windows\SYSNATIVE\drivers\aswSP.sys [x]
S2 AMD External Events Utility;AMD External Events Utility;c:\windows\system32\atiesrxx.exe;c:\windows\SYSNATIVE\atiesrxx.exe [x]
S2 AMD FUEL Service;AMD FUEL Service;c:\program files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe;c:\program files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe [x]
S2 AODDriver4.3;AODDriver4.3;c:\program files\ATI Technologies\ATI.ACE\Fuel\amd64\AODDriver2.sys;c:\program files\ATI Technologies\ATI.ACE\Fuel\amd64\AODDriver2.sys [x]
S2 aswHwid;avast! HardwareID;c:\windows\system32\drivers\aswHwid.sys;c:\windows\SYSNATIVE\drivers\aswHwid.sys [x]
S2 aswMonFlt;aswMonFlt;c:\windows\system32\drivers\aswMonFlt.sys;c:\windows\SYSNATIVE\drivers\aswMonFlt.sys [x]
S2 HiPatchService;Hi-Rez Studios Authenticate and Update Service;x:\smite\HiPatchService.exe;x:\smite\HiPatchService.exe [x]
S3 AtiHDAudioService;AMD Function Driver for HD Audio Service;c:\windows\system32\drivers\AtihdW76.sys;c:\windows\SYSNATIVE\drivers\AtihdW76.sys [x]
S3 RTL8167;Ovladač Realtek 8167 NT;c:\windows\system32\DRIVERS\Rt64win7.sys;c:\windows\SYSNATIVE\DRIVERS\Rt64win7.sys [x]
.
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\active setup\installed components\{8A69D345-D564-463c-AFF1-A69D9E530F96}]
2014-10-28 08:33 1089352 ----a-w- c:\program files (x86)\Google\Chrome\Application\38.0.2125.111\Installer\chrmstp.exe
.
Obsah adresáře 'Naplánované úlohy'
.
2014-11-03 c:\windows\Tasks\Adobe Flash Player Updater.job
- c:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2014-06-28 19:09]
.
2014-11-03 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
- c:\program files (x86)\Google\Update\GoogleUpdate.exe [2014-06-28 20:17]
.
2014-11-03 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
- c:\program files (x86)\Google\Update\GoogleUpdate.exe [2014-06-28 20:17]
.
2014-11-03 c:\windows\Tasks\newSI_507.job
- c:\users\Manphis\AppData\Roaming\newSI_507\s_inst.exe [2014-10-04 13:41]
.
.
--------- X64 Entries -----------
.
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\00avast]
@="{472083B0-C522-11CF-8763-00608CC02F24}"
[HKEY_CLASSES_ROOT\CLSID\{472083B0-C522-11CF-8763-00608CC02F24}]
2014-11-01 10:50 860984 ----a-w- c:\program files\AVAST Software\Avast\ashShA64.dll
.
------- Doplňkový sken -------
.
uLocal Page = c:\windows\system32\blank.htm
uStart Page = hxxp://www.google.com
mLocal Page = c:\windows\SysWOW64\blank.htm
IE: E&xportovat do aplikace Microsoft Excel - c:\progra~2\MICROS~1\Office12\EXCEL.EXE/3000
IE: E&xportovat do Microsoft Excelu - c:\progra~2\MICROS~1\Office15\EXCEL.EXE/3000
IE: Od&eslat do OneNotu - c:\progra~2\MICROS~1\Office15\ONBttnIE.dll/105
TCP: DhcpNameServer = 192.168.1.1
.
- - - - NEPLATNÉ POLOŽKY ODSTRANĚNÉ Z REGISTRU - - - -
.
Wow6432Node-HKCU-Run-SetMyHomePage - c:\users\Manphis\AppData\Roaming\SetMyHomePage\setmyhomepage.exe
Wow6432Node-HKU-Default-RunOnce-SPReview - c:\windows\System32\SPReview\SPReview.exe
HKLM_Wow6432Node-ActiveSetup-{2D46B6DC-2207-486B-B523-A557E6D54B47} - start
AddRemove-PunkBusterSvc - c:\windows\system32\pbsvc.exe
AddRemove-{15134cb0-b767-4960-a911-f2d16ae54797} - c:\programdata\Package Cache\{15134cb0-b767-4960-a911-f2d16ae54797}\vcredist_x64.exe
AddRemove-{22154f09-719a-4619-bb71-5b3356999fbf} - c:\programdata\Package Cache\{22154f09-719a-4619-bb71-5b3356999fbf}\vcredist_x86.exe
.
.
.
--------------------- ZAMKNUTÉ KLÍČE V REGISTRU ---------------------
.
[HKEY_USERS\S-1-5-21-3707322994-1313551490-3014853183-1001\Software\Microsoft\Internet Explorer\Approved Extensions]
@Denied: (2) (LocalSystem)
.
[HKEY_USERS\S-1-5-21-3707322994-1313551490-3014853183-1001\Control Panel\Desktop*]
@Allowed: (Read) (RestrictedCode)
"WheelScrollLines"="3"
DUMPHIVE0.003 (REGF)
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{B019E3BF-E7E5-453C-A2E4-D2C18CA0866F}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil64_15_0_0_167_ActiveX.exe,-101"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{B019E3BF-E7E5-453C-A2E4-D2C18CA0866F}\Elevation]
"Enabled"=dword:00000001
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{B019E3BF-E7E5-453C-A2E4-D2C18CA0866F}\LocalServer32]
@="c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil64_15_0_0_167_ActiveX.exe"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{B019E3BF-E7E5-453C-A2E4-D2C18CA0866F}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{299817DA-1FAC-4CE2-8F48-A108237013BD}]
@Denied: (A 2) (Everyone)
@="IFlashBroker6"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{299817DA-1FAC-4CE2-8F48-A108237013BD}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{299817DA-1FAC-4CE2-8F48-A108237013BD}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{B019E3BF-E7E5-453C-A2E4-D2C18CA0866F}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil32_15_0_0_167_ActiveX.exe,-101"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{B019E3BF-E7E5-453C-A2E4-D2C18CA0866F}\Elevation]
"Enabled"=dword:00000001
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{B019E3BF-E7E5-453C-A2E4-D2C18CA0866F}\LocalServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil32_15_0_0_167_ActiveX.exe"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{B019E3BF-E7E5-453C-A2E4-D2C18CA0866F}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@="Shockwave Flash Object"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\InprocServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_15_0_0_167.ocx"
"ThreadingModel"="Apartment"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\MiscStatus]
@="0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ProgID]
@="ShockwaveFlash.ShockwaveFlash.15"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_15_0_0_167.ocx, 1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\TypeLib]
@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\Version]
@="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
@="ShockwaveFlash.ShockwaveFlash"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@="Macromedia Flash Factory Object"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\InprocServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_15_0_0_167.ocx"
"ThreadingModel"="Apartment"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ProgID]
@="FlashFactory.FlashFactory.1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_15_0_0_167.ocx, 1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\TypeLib]
@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\Version]
@="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
@="FlashFactory.FlashFactory"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{299817DA-1FAC-4CE2-8F48-A108237013BD}]
@Denied: (A 2) (Everyone)
@="IFlashBroker6"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{299817DA-1FAC-4CE2-8F48-A108237013BD}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{299817DA-1FAC-4CE2-8F48-A108237013BD}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Office\Common\Smart Tag\Actions\{B7EFF951-E52F-45CC-9EF7-57124F2177CC}]
@Denied: (A) (Everyone)
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Schema Library\ActionsPane3]
@Denied: (A) (Everyone)
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\PCW\Security]
@Denied: (Full) (Everyone)
.
Celkový čas: 2014-11-03 10:38:57
ComboFix-quarantined-files.txt 2014-11-03 09:38
.
Před spuštěním: Volných bajtů: 48 366 870 528
Po spuštění: Volných bajtů: 47 968 083 968
.
- - End Of File - - FA60DDECF13231EDB3CCEE5E46359908
A36C5E4F47E84449FF07ED3517B43A31

[jaro3]

Vypni rez. ochranu u antiviru a antispywaru,příp. firewall..

Otevři si Poznámkový blok (Start -> Spustit... a napiš do okna Notepad a dej Ok.
Zkopíruj do něj následující celý text označený zeleně:

Kód: Vybrat vše

ClearJavaCache::
KillAll::
File::
c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
c:\windows\Tasks\newSI_507.job

Folder::
c:\program files (x86)\Skype\Updater
c:\program files (x86)\Google\Update
c:\users\Manphis\AppData\Roaming\newSI_507

Driver::
SkypeUpdate

RegLock::
[HKEY_USERS\S-1-5-21-3707322994-1313551490-3014853183-1001\Software\Microsoft\Internet Explorer\Approved Extensions]
@Denied: (2) (LocalSystem)
.
[HKEY_USERS\S-1-5-21-3707322994-1313551490-3014853183-1001\Control Panel\Desktop*]
@Allowed: (Read) (RestrictedCode)
"WheelScrollLines"="3"
DUMPHIVE0.003 (REGF)
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{B019E3BF-E7E5-453C-A2E4-D2C18CA0866F}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil64_15_0_0_167_ActiveX.exe,-101"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{B019E3BF-E7E5-453C-A2E4-D2C18CA0866F}\Elevation]
"Enabled"=dword:00000001
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{B019E3BF-E7E5-453C-A2E4-D2C18CA0866F}\LocalServer32]
@="c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil64_15_0_0_167_ActiveX.exe"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{B019E3BF-E7E5-453C-A2E4-D2C18CA0866F}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{299817DA-1FAC-4CE2-8F48-A108237013BD}]
@Denied: (A 2) (Everyone)
@="IFlashBroker6"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{299817DA-1FAC-4CE2-8F48-A108237013BD}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{299817DA-1FAC-4CE2-8F48-A108237013BD}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{B019E3BF-E7E5-453C-A2E4-D2C18CA0866F}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil32_15_0_0_167_ActiveX.exe,-101"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{B019E3BF-E7E5-453C-A2E4-D2C18CA0866F}\Elevation]
"Enabled"=dword:00000001
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{B019E3BF-E7E5-453C-A2E4-D2C18CA0866F}\LocalServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil32_15_0_0_167_ActiveX.exe"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{B019E3BF-E7E5-453C-A2E4-D2C18CA0866F}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@="Shockwave Flash Object"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\InprocServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_15_0_0_167.ocx"
"ThreadingModel"="Apartment"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\MiscStatus]
@="0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ProgID]
@="ShockwaveFlash.ShockwaveFlash.15"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_15_0_0_167.ocx, 1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\TypeLib]
@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\Version]
@="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
@="ShockwaveFlash.ShockwaveFlash"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@="Macromedia Flash Factory Object"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\InprocServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_15_0_0_167.ocx"
"ThreadingModel"="Apartment"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ProgID]
@="FlashFactory.FlashFactory.1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_15_0_0_167.ocx, 1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\TypeLib]
@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\Version]
@="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
@="FlashFactory.FlashFactory"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{299817DA-1FAC-4CE2-8F48-A108237013BD}]
@Denied: (A 2) (Everyone)
@="IFlashBroker6"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{299817DA-1FAC-4CE2-8F48-A108237013BD}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{299817DA-1FAC-4CE2-8F48-A108237013BD}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Office\Common\Smart Tag\Actions\{B7EFF951-E52F-45CC-9EF7-57124F2177CC}]
@Denied: (A) (Everyone)
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Schema Library\ActionsPane3]
@Denied: (A) (Everyone)
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\PCW\Security]
@Denied: (Full) (Everyone)

Zvol možnost Soubor -> Uložit jako... a nastav tyto parametry:
Název souboru: zde napiš: CFScript.txt
Uložit jako typ: tak tam vyber Všechny soubory
Ulož soubor na plochu.
Ukonči všechna aktivní okna.

Uchop myší vytvořený skript CFScript.txt, přemísti ho nad stažený program ComboFix.exe a když se oba soubory překryjí, skript upusť.
- Automaticky se spustí ComboFix
- Vlož sem log, který vyběhne v závěru čistícího procesu + nový log z HJT

Upozornění : Může se stát, že po aplikaci Combofixu a restartu počítače, Windows nenaběhnou , nebo nenajede plocha , budou problémy s připojením, pak znovu restartuj počítač, pokud to nepomůže , po restartu mačkej klávesu F8 a pak zvol poslední známou funkční konfiguraci. , či použij bod obnovy.

Stáhni si aswMBR
na svojí plochu. Uzavři všechna okna , programy a prohlížeče. Poklepej na aswMBR.exe. Pokud se objeví hláška o možnosti stáhnutí databáze Avastu , klikni na NE. Poté klikni na „Scan“ . Po skenu klikni na „Save Log“ a ulož si log na plochu .Zkopíruj sem celý obsah toho logu. Pak klikni na „Exit“ k zavření programu.

V možnostech složky si povol zobrazování skrytých souborů a složek+ odškrtni zatržítko skrýt chráněné soubory operačního systému

Toto otestuj na Virustotal
c:\windows\unins000.exe
c:\windows\iun506.exe

Klikni vpravo od okénka na Vybrat a v Exploreru najdi požadovaný soubor v Tvém PC. Označ ho myší a klikni na Otevřít , poté klikni na Send File. Pokud už byl soubor testován , objeví se okno ve kterém klikni na Reanalyze. Soubor se začne postupně testovat více antivirovými programy. Až skončí test posledního antiviru , objeví se nahoře result a červeně počet nákaz , např. 0/43 , nebo 1/43. Pak zkopíruj myší odkaz na tuto stránku a vlož ji do svého příspěvku.

Nebo na:
http://www.virscan.org/

[Manphis]

ComboFix 14-10-29.01 - Manphis 05.11.2014 21:01:57.2.4 - x64
Microsoft Windows 7 Ultimate 6.1.7601.1.1250.420.1029.18.4094.2731 [GMT 1:00]
Spuštěný z: c:\users\Manphis\Desktop\ComboFix.exe
Použité ovládací přepínače :: c:\users\Manphis\Desktop\CFScript.txt
AV: avast! Antivirus *Disabled/Updated* {17AD7D40-BA12-9C46-7131-94903A54AD8B}
SP: avast! Antivirus *Disabled/Updated* {ACCC9CA4-9C28-93C8-4B81-AFE241D3E736}
SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.
FILE ::
"c:\windows\Tasks\GoogleUpdateTaskMachineCore.job"
"c:\windows\Tasks\GoogleUpdateTaskMachineUA.job"
"c:\windows\Tasks\newSI_507.job"
.
.
((((((((((((((((((((((((((((((((((((((( Ostatní výmazy )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
c:\program files (x86)\Google\Update
c:\program files (x86)\Google\Update\1.3.25.5\GoogleCrashHandler.exe
c:\program files (x86)\Google\Update\1.3.25.5\GoogleCrashHandler64.exe
c:\program files (x86)\Google\Update\1.3.25.5\GoogleUpdate.exe
c:\program files (x86)\Google\Update\1.3.25.5\GoogleUpdateBroker.exe
c:\program files (x86)\Google\Update\1.3.25.5\GoogleUpdateComRegisterShell64.exe
c:\program files (x86)\Google\Update\1.3.25.5\GoogleUpdateHelper.msi
c:\program files (x86)\Google\Update\1.3.25.5\GoogleUpdateOnDemand.exe
c:\program files (x86)\Google\Update\1.3.25.5\GoogleUpdateSetup.exe
c:\program files (x86)\Google\Update\1.3.25.5\goopdate.dll
c:\program files (x86)\Google\Update\1.3.25.5\goopdateres_am.dll
c:\program files (x86)\Google\Update\1.3.25.5\goopdateres_ar.dll
c:\program files (x86)\Google\Update\1.3.25.5\goopdateres_bg.dll
c:\program files (x86)\Google\Update\1.3.25.5\goopdateres_bn.dll
c:\program files (x86)\Google\Update\1.3.25.5\goopdateres_ca.dll
c:\program files (x86)\Google\Update\1.3.25.5\goopdateres_cs.dll
c:\program files (x86)\Google\Update\1.3.25.5\goopdateres_da.dll
c:\program files (x86)\Google\Update\1.3.25.5\goopdateres_de.dll
c:\program files (x86)\Google\Update\1.3.25.5\goopdateres_el.dll
c:\program files (x86)\Google\Update\1.3.25.5\goopdateres_en-GB.dll
c:\program files (x86)\Google\Update\1.3.25.5\goopdateres_en.dll
c:\program files (x86)\Google\Update\1.3.25.5\goopdateres_es-419.dll
c:\program files (x86)\Google\Update\1.3.25.5\goopdateres_es.dll
c:\program files (x86)\Google\Update\1.3.25.5\goopdateres_et.dll
c:\program files (x86)\Google\Update\1.3.25.5\goopdateres_fa.dll
c:\program files (x86)\Google\Update\1.3.25.5\goopdateres_fi.dll
c:\program files (x86)\Google\Update\1.3.25.5\goopdateres_fil.dll
c:\program files (x86)\Google\Update\1.3.25.5\goopdateres_fr.dll
c:\program files (x86)\Google\Update\1.3.25.5\goopdateres_gu.dll
c:\program files (x86)\Google\Update\1.3.25.5\goopdateres_hi.dll
c:\program files (x86)\Google\Update\1.3.25.5\goopdateres_hr.dll
c:\program files (x86)\Google\Update\1.3.25.5\goopdateres_hu.dll
c:\program files (x86)\Google\Update\1.3.25.5\goopdateres_id.dll
c:\program files (x86)\Google\Update\1.3.25.5\goopdateres_is.dll
c:\program files (x86)\Google\Update\1.3.25.5\goopdateres_it.dll
c:\program files (x86)\Google\Update\1.3.25.5\goopdateres_iw.dll
c:\program files (x86)\Google\Update\1.3.25.5\goopdateres_ja.dll
c:\program files (x86)\Google\Update\1.3.25.5\goopdateres_kn.dll
c:\program files (x86)\Google\Update\1.3.25.5\goopdateres_ko.dll
c:\program files (x86)\Google\Update\1.3.25.5\goopdateres_lt.dll
c:\program files (x86)\Google\Update\1.3.25.5\goopdateres_lv.dll
c:\program files (x86)\Google\Update\1.3.25.5\goopdateres_ml.dll
c:\program files (x86)\Google\Update\1.3.25.5\goopdateres_mr.dll
c:\program files (x86)\Google\Update\1.3.25.5\goopdateres_ms.dll
c:\program files (x86)\Google\Update\1.3.25.5\goopdateres_nl.dll
c:\program files (x86)\Google\Update\1.3.25.5\goopdateres_no.dll
c:\program files (x86)\Google\Update\1.3.25.5\goopdateres_pl.dll
c:\program files (x86)\Google\Update\1.3.25.5\goopdateres_pt-BR.dll
c:\program files (x86)\Google\Update\1.3.25.5\goopdateres_pt-PT.dll
c:\program files (x86)\Google\Update\1.3.25.5\goopdateres_ro.dll
c:\program files (x86)\Google\Update\1.3.25.5\goopdateres_ru.dll
c:\program files (x86)\Google\Update\1.3.25.5\goopdateres_sk.dll
c:\program files (x86)\Google\Update\1.3.25.5\goopdateres_sl.dll
c:\program files (x86)\Google\Update\1.3.25.5\goopdateres_sr.dll
c:\program files (x86)\Google\Update\1.3.25.5\goopdateres_sv.dll
c:\program files (x86)\Google\Update\1.3.25.5\goopdateres_sw.dll
c:\program files (x86)\Google\Update\1.3.25.5\goopdateres_ta.dll
c:\program files (x86)\Google\Update\1.3.25.5\goopdateres_te.dll
c:\program files (x86)\Google\Update\1.3.25.5\goopdateres_th.dll
c:\program files (x86)\Google\Update\1.3.25.5\goopdateres_tr.dll
c:\program files (x86)\Google\Update\1.3.25.5\goopdateres_uk.dll
c:\program files (x86)\Google\Update\1.3.25.5\goopdateres_ur.dll
c:\program files (x86)\Google\Update\1.3.25.5\goopdateres_vi.dll
c:\program files (x86)\Google\Update\1.3.25.5\goopdateres_zh-CN.dll
c:\program files (x86)\Google\Update\1.3.25.5\goopdateres_zh-TW.dll
c:\program files (x86)\Google\Update\1.3.25.5\npGoogleUpdate3.dll
c:\program files (x86)\Google\Update\1.3.25.5\psmachine.dll
c:\program files (x86)\Google\Update\1.3.25.5\psmachine_64.dll
c:\program files (x86)\Google\Update\1.3.25.5\psuser.dll
c:\program files (x86)\Google\Update\1.3.25.5\psuser_64.dll
c:\program files (x86)\Google\Update\Download\{430FD4D0-B729-4F61-AA34-91526481799D}\1.3.25.5\GoogleUpdateSetup.exe
c:\program files (x86)\Google\Update\Download\{4DC8B4CA-1BDA-483E-B5FA-D3C12E15B62D}\38.0.2125.111\38.0.2125.111_38.0.2125.104_chrome_updater.exe
c:\program files (x86)\Google\Update\Download\{B210701E-FFC4-49E3-932B-370728C72662}\0.0.0.0\chromeremotedesktophost-38.0.2125.9.msi
c:\program files (x86)\Google\Update\GoogleUpdate.exe
c:\program files (x86)\Skype\Updater
c:\program files (x86)\Skype\Updater\Updater.dll
c:\program files (x86)\Skype\Updater\Updater.exe
c:\users\Manphis\AppData\Roaming\newSI_507
c:\users\Manphis\AppData\Roaming\newSI_507\cp.bat
c:\users\Manphis\AppData\Roaming\newSI_507\chr\pepjgkdpkihjnbdaggonbpphlfkbhdli.crx
c:\users\Manphis\AppData\Roaming\newSI_507\chr\pepjgkdpkihjnbdaggonbpphlfkbhdli.ini
c:\users\Manphis\AppData\Roaming\newSI_507\chrome\vkwall\config.json
c:\users\Manphis\AppData\Roaming\newSI_507\chrome\vkwall\pepjgkdpkihjnbdaggonbpphlfkbhdli\_locales\en\messages.json
c:\users\Manphis\AppData\Roaming\newSI_507\chrome\vkwall\pepjgkdpkihjnbdaggonbpphlfkbhdli\_locales\ru\messages.json
c:\users\Manphis\AppData\Roaming\newSI_507\chrome\vkwall\pepjgkdpkihjnbdaggonbpphlfkbhdli\_metadata\verified_contents.json
c:\users\Manphis\AppData\Roaming\newSI_507\chrome\vkwall\pepjgkdpkihjnbdaggonbpphlfkbhdli\background.html
c:\users\Manphis\AppData\Roaming\newSI_507\chrome\vkwall\pepjgkdpkihjnbdaggonbpphlfkbhdli\background.js
c:\users\Manphis\AppData\Roaming\newSI_507\chrome\vkwall\pepjgkdpkihjnbdaggonbpphlfkbhdli\content_script.js
c:\users\Manphis\AppData\Roaming\newSI_507\chrome\vkwall\pepjgkdpkihjnbdaggonbpphlfkbhdli\img\favicon.png
c:\users\Manphis\AppData\Roaming\newSI_507\chrome\vkwall\pepjgkdpkihjnbdaggonbpphlfkbhdli\img\icon_16.png
c:\users\Manphis\AppData\Roaming\newSI_507\chrome\vkwall\pepjgkdpkihjnbdaggonbpphlfkbhdli\img\icon128.png
c:\users\Manphis\AppData\Roaming\newSI_507\chrome\vkwall\pepjgkdpkihjnbdaggonbpphlfkbhdli\img\icon32.png
c:\users\Manphis\AppData\Roaming\newSI_507\chrome\vkwall\pepjgkdpkihjnbdaggonbpphlfkbhdli\img\icon48.png
c:\users\Manphis\AppData\Roaming\newSI_507\chrome\vkwall\pepjgkdpkihjnbdaggonbpphlfkbhdli\manifest.json
c:\users\Manphis\AppData\Roaming\newSI_507\chrome\vkwall\pepjgkdpkihjnbdaggonbpphlfkbhdli\options.html
c:\users\Manphis\AppData\Roaming\newSI_507\chrome\vkwall\pepjgkdpkihjnbdaggonbpphlfkbhdli\options.js
c:\users\Manphis\AppData\Roaming\newSI_507\chrome\vkwall\pepjgkdpkihjnbdaggonbpphlfkbhdli\ping.js
c:\users\Manphis\AppData\Roaming\newSI_507\chrome\vkwall\pepjgkdpkihjnbdaggonbpphlfkbhdli\style.css
c:\users\Manphis\AppData\Roaming\newSI_507\chrome\vkwall\pepjgkdpkihjnbdaggonbpphlfkbhdli\wp_background.js
c:\users\Manphis\AppData\Roaming\newSI_507\chrome\vkwall\pepjgkdpkihjnbdaggonbpphlfkbhdli\wp_content_script.js
c:\users\Manphis\AppData\Roaming\newSI_507\main.ini
c:\users\Manphis\AppData\Roaming\newSI_507\moz\vkwall\wp_loader@wall-pepper.ru\defaults\preferences\prefs.js
c:\users\Manphis\AppData\Roaming\newSI_507\moz\vkwall\wp_loader@wall-pepper.ru\chrome.manifest
c:\users\Manphis\AppData\Roaming\newSI_507\moz\vkwall\wp_loader@wall-pepper.ru\chrome\content\background.js
c:\users\Manphis\AppData\Roaming\newSI_507\moz\vkwall\wp_loader@wall-pepper.ru\chrome\content\content_script.js
c:\users\Manphis\AppData\Roaming\newSI_507\moz\vkwall\wp_loader@wall-pepper.ru\chrome\content\ff-overlay.xul
c:\users\Manphis\AppData\Roaming\newSI_507\moz\vkwall\wp_loader@wall-pepper.ru\chrome\content\options.xul
c:\users\Manphis\AppData\Roaming\newSI_507\moz\vkwall\wp_loader@wall-pepper.ru\chrome\content\ping.js
c:\users\Manphis\AppData\Roaming\newSI_507\moz\vkwall\wp_loader@wall-pepper.ru\chrome\locale\en-us\overlay.dtd
c:\users\Manphis\AppData\Roaming\newSI_507\moz\vkwall\wp_loader@wall-pepper.ru\chrome\locale\en-us\overlay.properties
c:\users\Manphis\AppData\Roaming\newSI_507\moz\vkwall\wp_loader@wall-pepper.ru\chrome\skin\icon.png
c:\users\Manphis\AppData\Roaming\newSI_507\moz\vkwall\wp_loader@wall-pepper.ru\chrome\skin\icon64.png
c:\users\Manphis\AppData\Roaming\newSI_507\moz\vkwall\wp_loader@wall-pepper.ru\chrome\skin\overlay.css
c:\users\Manphis\AppData\Roaming\newSI_507\moz\vkwall\wp_loader@wall-pepper.ru\install.rdf
c:\users\Manphis\AppData\Roaming\newSI_507\oldopera\vkwall\opera.white.txt
c:\users\Manphis\AppData\Roaming\newSI_507\oldopera\vkwall\opera_wuid.txt
c:\users\Manphis\AppData\Roaming\newSI_507\oldopera\vkwall\WallPepper__opera.oex
c:\users\Manphis\AppData\Roaming\newSI_507\oldopera\vkwall\wuid-0e4d079a-5507-0d46-89e1-c87aebb84778\cache\activity.opr
c:\users\Manphis\AppData\Roaming\newSI_507\oldopera\vkwall\wuid-0e4d079a-5507-0d46-89e1-c87aebb84778\cookies4.dat
c:\users\Manphis\AppData\Roaming\newSI_507\oldopera\vkwall\wuid-0e4d079a-5507-0d46-89e1-c87aebb84778\prefs.dat
c:\users\Manphis\AppData\Roaming\newSI_507\oldopera\vkwall\wuid-0e4d079a-5507-0d46-89e1-c87aebb84778\pstorage\00\01\00000000
c:\users\Manphis\AppData\Roaming\newSI_507\oldopera\vkwall\wuid-0e4d079a-5507-0d46-89e1-c87aebb84778\pstorage\psindex.dat
c:\users\Manphis\AppData\Roaming\newSI_507\s_inst.exe
.
.
((((((((((((((((((((((((((((((((((((((( Ovladače/Služby )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
-------\Service_SkypeUpdate
-------\Service_gupdate
-------\Service_gupdatem
-------\Service_gupdate
-------\Service_gupdatem
.
.
((((((((((((((((((((((((( Soubory vytvořené od 2014-10-05 do 2014-11-05 )))))))))))))))))))))))))))))))
.
.
2014-11-05 20:07 . 2014-11-05 20:07 -------- d-----w- c:\users\Default\AppData\Local\temp
2014-11-04 07:42 . 2014-10-14 19:59 11627712 ----a-w- c:\programdata\Microsoft\Windows Defender\Definition Updates\{A79330B3-EA1B-4D83-8035-DB2D5F966D1E}\mpengine.dll
2014-11-02 19:37 . 2014-11-02 19:29 24064 ----a-w- c:\windows\zoek-delete.exe
2014-11-02 19:37 . 2014-11-05 20:11 -------- d-----w- c:\users\Manphis\AppData\Local\Temp
2014-11-02 19:28 . 2014-11-02 19:36 -------- d-----w- C:\zoek_backup
2014-11-02 19:17 . 2014-11-01 10:50 364512 ----a-w- c:\windows\system32\aswBoot.exe
2014-11-02 12:00 . 2014-11-02 19:20 37624 ----a-w- c:\windows\system32\drivers\TrueSight.sys
2014-11-02 11:59 . 2014-11-02 12:00 -------- d-----w- c:\programdata\RogueKiller
2014-11-02 11:39 . 2014-11-02 11:39 -------- d-----w- c:\windows\ERUNT
2014-11-01 21:32 . 2014-11-02 11:44 129752 ----a-w- c:\windows\system32\drivers\MBAMSwissArmy.sys
2014-11-01 21:31 . 2014-11-01 21:31 -------- d-----w- c:\program files (x86)\Malwarebytes Anti-Malware
2014-11-01 21:31 . 2014-11-01 21:31 -------- d-----w- c:\programdata\Malwarebytes
2014-11-01 21:31 . 2014-10-01 10:11 63704 ----a-w- c:\windows\system32\drivers\mwac.sys
2014-11-01 21:31 . 2014-10-01 10:11 93400 ----a-w- c:\windows\system32\drivers\mbamchameleon.sys
2014-11-01 21:31 . 2014-10-01 10:11 25816 ----a-w- c:\windows\system32\drivers\mbam.sys
2014-11-01 21:14 . 2010-08-30 07:34 536576 ----a-w- c:\windows\SysWow64\sqlite3.dll
2014-11-01 21:13 . 2014-11-02 11:33 -------- d-----w- C:\AdwCleaner
2014-11-01 10:50 . 2014-11-01 10:50 43152 ----a-w- c:\windows\avastSS.scr
2014-10-30 09:50 . 2014-10-30 09:58 -------- d-----w- c:\program files (x86)\Hearthstone
2014-10-30 09:47 . 2014-10-30 09:47 -------- d-----w- c:\program files (x86)\Battle.net
2014-10-28 23:00 . 2014-11-01 21:21 -------- d-----w- c:\windows\system32\log
2014-10-26 21:59 . 2014-10-26 21:59 -------- d-----w- c:\program files\Enigma Software Group
2014-10-26 21:52 . 2014-10-26 21:52 -------- d-----w- c:\users\Manphis\AppData\Roaming\KYE Gila
2014-10-26 21:52 . 2014-10-26 21:52 -------- d-----w- c:\program files (x86)\Genius
2014-10-26 21:52 . 2014-10-26 21:52 1216471 ----a-w- c:\windows\unins000.exe
2014-10-19 09:05 . 2014-10-19 09:05 -------- d-----w- c:\programdata\ATI
2014-10-19 09:05 . 2014-10-19 09:05 -------- d-----w- c:\program files (x86)\AMD AVT
2014-10-16 11:26 . 2014-10-16 11:26 -------- d-----w- c:\program files (x86)\Advanced Port Scanner
2014-10-16 09:51 . 2014-10-16 09:53 -------- d-----w- c:\users\Manphis\AppData\Local\Microsoft Toolkit
2014-10-15 20:56 . 2014-09-18 02:00 3241472 ----a-w- c:\windows\system32\msi.dll
2014-10-15 11:17 . 2014-10-15 11:17 -------- d-----w- c:\users\Manphis\AppData\Roaming\Steam
2014-10-07 08:11 . 2014-10-07 08:11 -------- d-----w- c:\users\Manphis\AppData\Local\Apple Computer
.
.
.
(((((((((((((((((((((((((((((((((((((((( Find3M výpis ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2014-11-02 19:17 . 2014-06-28 20:27 1050432 ----a-w- c:\windows\system32\drivers\aswsnx.sys
2014-11-02 19:17 . 2014-06-28 20:27 83280 ----a-w- c:\windows\system32\drivers\aswmonflt.sys
2014-11-01 10:50 . 2014-06-28 20:27 267632 ----a-w- c:\windows\system32\drivers\aswVmm.sys
2014-11-01 10:50 . 2014-06-28 20:27 116728 ----a-w- c:\windows\system32\drivers\aswStm.sys
2014-11-01 10:50 . 2014-06-28 20:27 436624 ----a-w- c:\windows\system32\drivers\aswsp.sys
2014-11-01 10:50 . 2014-06-28 20:27 65776 ----a-w- c:\windows\system32\drivers\aswRvrt.sys
2014-11-01 10:50 . 2014-06-28 20:27 29208 ----a-w- c:\windows\system32\drivers\aswHwid.sys
2014-11-01 10:50 . 2014-06-28 20:27 93568 ----a-w- c:\windows\system32\drivers\aswRdr2.sys
2014-10-28 23:10 . 2014-09-17 08:56 215128 ----a-w- c:\windows\SysWow64\PnkBstrB.xtr
2014-10-28 23:10 . 2014-09-16 09:22 215128 ----a-w- c:\windows\SysWow64\PnkBstrB.exe
2014-10-28 05:34 . 2014-06-28 18:55 275080 ------w- c:\windows\system32\MpSigStub.exe
2014-10-16 09:21 . 2014-06-28 20:06 103265616 ----a-w- c:\windows\system32\MRT.exe
2014-09-25 02:08 . 2014-10-01 07:02 371712 ----a-w- c:\windows\system32\qdvd.dll
2014-09-25 01:40 . 2014-10-01 07:02 519680 ----a-w- c:\windows\SysWow64\qdvd.dll
2014-09-23 19:09 . 2014-06-28 21:03 71344 ----a-w- c:\windows\SysWow64\FlashPlayerCPLApp.cpl
2014-09-23 19:09 . 2014-06-28 21:03 701104 ----a-w- c:\windows\SysWow64\FlashPlayerApp.exe
2014-09-23 19:09 . 2014-09-23 19:09 3675824 ----a-w- c:\windows\SysWow64\FlashPlayerInstaller.exe
2014-09-20 06:49 . 2014-09-16 09:22 215128 ----a-w- c:\windows\SysWow64\PnkBstrB.ex0
2014-09-17 09:17 . 2014-09-16 09:22 76888 ----a-w- c:\windows\SysWow64\PnkBstrA.exe
2014-09-16 09:22 . 2014-09-16 09:22 2434856 ----a-w- c:\windows\SysWow64\pbsvc.exe
2014-09-15 22:32 . 2014-09-15 22:32 78432 ----a-w- c:\windows\system32\atimpc64.dll
2014-09-15 22:32 . 2014-09-15 22:32 78432 ----a-w- c:\windows\system32\amdpcom64.dll
2014-09-15 22:32 . 2014-09-15 22:32 71704 ----a-w- c:\windows\SysWow64\atimpc32.dll
2014-09-15 22:32 . 2014-09-15 22:32 71704 ----a-w- c:\windows\SysWow64\amdpcom32.dll
2014-09-15 22:31 . 2014-04-18 02:43 144328 ----a-w- c:\windows\system32\atiuxp64.dll
2014-09-15 22:31 . 2014-04-18 02:42 126848 ----a-w- c:\windows\SysWow64\atiuxpag.dll
2014-09-15 22:31 . 2014-09-15 22:31 118096 ----a-w- c:\windows\system32\atiu9p64.dll
2014-09-15 22:31 . 2014-04-18 02:42 100032 ----a-w- c:\windows\SysWow64\atiu9pag.dll
2014-09-15 22:31 . 2014-04-18 02:42 1335544 ----a-w- c:\windows\system32\aticfx64.dll
2014-09-15 22:31 . 2014-04-18 02:42 1113576 ----a-w- c:\windows\SysWow64\aticfx32.dll
2014-09-15 22:31 . 2014-04-18 02:42 10826488 ----a-w- c:\windows\system32\atidxx64.dll
2014-09-15 22:31 . 2014-04-18 02:42 9254184 ----a-w- c:\windows\SysWow64\atidxx32.dll
2014-09-15 22:31 . 2014-04-18 02:42 7207592 ----a-w- c:\windows\SysWow64\atiumdva.dll
2014-09-15 22:31 . 2014-04-18 02:42 7028336 ----a-w- c:\windows\SysWow64\atiumdag.dll
2014-09-15 22:31 . 2014-09-15 22:31 8044976 ----a-w- c:\windows\system32\atiumd6a.dll
2014-09-15 22:31 . 2014-09-15 22:31 8296296 ----a-w- c:\windows\system32\atiumd64.dll
2014-09-15 22:29 . 2014-09-15 22:29 293088 ----a-w- c:\windows\system32\drivers\amdacpksd.sys
2014-09-15 22:26 . 2014-09-15 22:26 16750080 ----a-w- c:\windows\system32\drivers\atikmdag.sys
2014-09-15 22:18 . 2014-09-15 22:18 235008 ----a-w- c:\windows\system32\clinfo.exe
2014-09-15 22:18 . 2014-09-15 22:18 98816 ----a-w- c:\windows\system32\OpenVideo64.dll
2014-09-15 22:17 . 2014-09-15 22:17 83456 ----a-w- c:\windows\SysWow64\OpenVideo.dll
2014-09-15 22:17 . 2014-09-15 22:17 86528 ----a-w- c:\windows\system32\OVDecode64.dll
2014-09-15 22:17 . 2014-09-15 22:17 73216 ----a-w- c:\windows\SysWow64\OVDecode.dll
2014-09-15 22:17 . 2014-09-15 22:17 33867264 ----a-w- c:\windows\system32\amdocl64.dll
2014-09-15 22:17 . 2014-09-15 22:17 28770304 ----a-w- c:\windows\SysWow64\amdocl.dll
2014-09-15 22:16 . 2014-09-15 22:16 65024 ----a-w- c:\windows\system32\OpenCL.dll
2014-09-15 22:16 . 2014-09-15 22:16 58880 ----a-w- c:\windows\SysWow64\OpenCL.dll
2014-09-15 22:13 . 2014-09-15 22:13 27918336 ----a-w- c:\windows\system32\atio6axx.dll
2014-09-15 22:09 . 2014-09-15 22:09 48128 ----a-w- c:\windows\system32\amdmmcl6.dll
2014-09-15 22:09 . 2014-09-15 22:09 37888 ----a-w- c:\windows\SysWow64\amdmmcl.dll
2014-09-15 22:09 . 2014-09-15 22:09 127488 ----a-w- c:\windows\system32\mantle64.dll
2014-09-15 22:09 . 2014-09-15 22:09 113664 ----a-w- c:\windows\SysWow64\mantle32.dll
2014-09-15 22:09 . 2014-09-15 22:09 5639168 ----a-w- c:\windows\system32\amdmantle64.dll
2014-09-15 22:08 . 2014-09-15 22:08 23375360 ----a-w- c:\windows\SysWow64\atioglxx.dll
2014-09-15 22:07 . 2014-09-15 22:07 367104 ----a-w- c:\windows\system32\atiapfxx.exe
2014-09-15 22:07 . 2014-09-15 22:07 62464 ----a-w- c:\windows\system32\aticalrt64.dll
2014-09-15 22:07 . 2014-09-15 22:07 52224 ----a-w- c:\windows\SysWow64\aticalrt.dll
2014-09-15 22:07 . 2014-09-15 22:07 55808 ----a-w- c:\windows\system32\aticalcl64.dll
2014-09-15 22:07 . 2014-09-15 22:07 49152 ----a-w- c:\windows\SysWow64\aticalcl.dll
2014-09-15 22:07 . 2014-09-15 22:07 15716352 ----a-w- c:\windows\system32\aticaldd64.dll
2014-09-15 22:06 . 2014-09-15 22:06 14302208 ----a-w- c:\windows\SysWow64\aticaldd.dll
2014-09-15 22:05 . 2014-09-15 22:05 4480000 ----a-w- c:\windows\SysWow64\amdmantle32.dll
2014-09-15 22:03 . 2014-09-15 22:03 442368 ----a-w- c:\windows\system32\atidemgy.dll
2014-09-15 22:03 . 2014-09-15 22:03 31232 ----a-w- c:\windows\system32\atimuixx.dll
2014-09-15 22:03 . 2014-09-15 22:03 619008 ----a-w- c:\windows\system32\atieclxx.exe
2014-09-15 22:03 . 2014-09-15 22:03 239616 ----a-w- c:\windows\system32\atiesrxx.exe
2014-09-15 22:03 . 2014-09-15 22:03 91648 ----a-w- c:\windows\system32\mantleaxl64.dll
2014-09-15 22:03 . 2014-09-15 22:03 85504 ----a-w- c:\windows\SysWow64\mantleaxl32.dll
2014-09-15 22:03 . 2014-09-15 22:03 190976 ----a-w- c:\windows\system32\atitmm64.dll
2014-09-15 21:59 . 2014-09-15 21:59 827392 ----a-w- c:\windows\system32\coinst_14.30.dll
2014-09-15 21:59 . 2014-09-15 21:59 1210880 ----a-w- c:\windows\system32\atiadlxx.dll
2014-09-15 21:59 . 2014-09-15 21:59 900608 ----a-w- c:\windows\SysWow64\atiadlxy.dll
2014-09-15 21:59 . 2014-09-15 21:59 75264 ----a-w- c:\windows\system32\atig6pxx.dll
2014-09-15 21:59 . 2014-09-15 21:59 69632 ----a-w- c:\windows\SysWow64\atiglpxx.dll
2014-09-15 21:59 . 2014-09-15 21:59 69632 ----a-w- c:\windows\system32\atiglpxx.dll
2014-09-15 21:59 . 2014-09-15 21:59 146944 ----a-w- c:\windows\system32\atig6txx.dll
2014-09-15 21:59 . 2014-09-15 21:59 133632 ----a-w- c:\windows\SysWow64\atigktxx.dll
2014-09-15 21:59 . 2014-09-15 21:59 576000 ----a-w- c:\windows\system32\drivers\atikmpag.sys
2014-09-15 21:58 . 2014-09-15 21:58 43520 ----a-w- c:\windows\system32\drivers\ati2erec.dll
2014-09-15 16:21 . 2014-09-15 16:21 51200 ----a-w- c:\windows\system32\kdbsdk64.dll
2014-09-15 16:19 . 2014-09-15 16:19 38912 ----a-w- c:\windows\SysWow64\kdbsdk32.dll
2014-09-11 07:46 . 2014-09-11 07:46 286720 ----a-w- c:\windows\iun506.exe
2014-09-09 22:11 . 2014-09-24 07:09 2048 ----a-w- c:\windows\system32\tzres.dll
2014-09-09 21:47 . 2014-09-24 07:09 2048 ----a-w- c:\windows\SysWow64\tzres.dll
2014-08-23 02:07 . 2014-08-28 09:28 404480 ----a-w- c:\windows\system32\gdi32.dll
2014-08-23 01:45 . 2014-08-28 09:28 311808 ----a-w- c:\windows\SysWow64\gdi32.dll
.
.
(((((((((((((((((((((((((((((((((( Spouštěcí body v registru )))))))))))))))))))))))))))))))))))))))))))))
.
.
*Poznámka* prázdné záznamy a legitimní výchozí údaje nejsou zobrazeny.
REGEDIT4
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Raptr"="c:\progra~2\Raptr\raptrstub.exe" [2014-10-17 55568]
"EADM"="c:\program files (x86)\Origin\Origin.exe" [2014-11-04 3618648]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]
"AvastUI.exe"="c:\program files\AVAST Software\Avast\AvastUI.exe" [2014-11-02 5223016]
"GrooveMonitor"="c:\program files (x86)\Microsoft Office\Office12\GrooveMonitor.exe" [2006-10-26 31016]
"Adobe ARM"="c:\program files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2014-08-21 959176]
"APSDaemon"="c:\program files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe" [2011-09-27 59240]
"Gila"="c:\program files (x86)\Genius\Gila\mousehid.exe" [2013-10-10 2055680]
.
c:\users\Manphis\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\
Výřezy obrazovky a spuštění aplikace OneNote 2007.lnk - c:\program files (x86)\Microsoft Office\Office12\ONENOTEM.EXE /tsr [2006-10-26 98632]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorAdmin"= 5 (0x5)
"ConsentPromptBehaviorUser"= 3 (0x3)
"EnableUIADesktopToggle"= 0 (0x0)
"SoftwareSASGeneration"= 1 (0x1)
.
R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [x]
R3 IEEtwCollectorService;Internet Explorer ETW Collector Service;c:\windows\system32\IEEtwCollector.exe;c:\windows\SYSNATIVE\IEEtwCollector.exe [x]
R3 RdpVideoMiniport;Remote Desktop Video Miniport Driver;c:\windows\system32\drivers\rdpvideominiport.sys;c:\windows\SYSNATIVE\drivers\rdpvideominiport.sys [x]
R3 Synth3dVsc;Synth3dVsc;c:\windows\system32\drivers\synth3dvsc.sys;c:\windows\SYSNATIVE\drivers\synth3dvsc.sys [x]
R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys;c:\windows\SYSNATIVE\drivers\tsusbflt.sys [x]
R3 tsusbhub;tsusbhub;c:\windows\system32\drivers\tsusbhub.sys;c:\windows\SYSNATIVE\drivers\tsusbhub.sys [x]
R3 VGPU;VGPU;c:\windows\system32\drivers\rdvgkmd.sys;c:\windows\SYSNATIVE\drivers\rdvgkmd.sys [x]
R3 vncserver;VNC Server;c:\program files\RealVNC\VNC Server\vncservice.exe vncserver;c:\program files\RealVNC\VNC Server\vncservice.exe vncserver [x]
R3 WatAdminSvc;Služba Technologie aktivace Windows;c:\windows\system32\Wat\WatAdminSvc.exe;c:\windows\SYSNATIVE\Wat\WatAdminSvc.exe [x]
S0 aswRvrt;avast! Revert; [x]
S0 aswVmm;avast! VM Monitor; [x]
S1 aswSnx;aswSnx;c:\windows\system32\drivers\aswSnx.sys;c:\windows\SYSNATIVE\drivers\aswSnx.sys [x]
S1 aswSP;aswSP;c:\windows\system32\drivers\aswSP.sys;c:\windows\SYSNATIVE\drivers\aswSP.sys [x]
S2 AMD External Events Utility;AMD External Events Utility;c:\windows\system32\atiesrxx.exe;c:\windows\SYSNATIVE\atiesrxx.exe [x]
S2 AMD FUEL Service;AMD FUEL Service;c:\program files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe;c:\program files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe [x]
S2 AODDriver4.3;AODDriver4.3;c:\program files\ATI Technologies\ATI.ACE\Fuel\amd64\AODDriver2.sys;c:\program files\ATI Technologies\ATI.ACE\Fuel\amd64\AODDriver2.sys [x]
S2 aswHwid;avast! HardwareID;c:\windows\system32\drivers\aswHwid.sys;c:\windows\SYSNATIVE\drivers\aswHwid.sys [x]
S2 aswMonFlt;aswMonFlt;c:\windows\system32\drivers\aswMonFlt.sys;c:\windows\SYSNATIVE\drivers\aswMonFlt.sys [x]
S2 aswStm;aswStm;c:\windows\system32\drivers\aswStm.sys;c:\windows\SYSNATIVE\drivers\aswStm.sys [x]
S2 HiPatchService;Hi-Rez Studios Authenticate and Update Service;x:\smite\HiPatchService.exe;x:\smite\HiPatchService.exe [x]
S3 AtiHDAudioService;AMD Function Driver for HD Audio Service;c:\windows\system32\drivers\AtihdW76.sys;c:\windows\SYSNATIVE\drivers\AtihdW76.sys [x]
S3 RTL8167;Ovladač Realtek 8167 NT;c:\windows\system32\DRIVERS\Rt64win7.sys;c:\windows\SYSNATIVE\DRIVERS\Rt64win7.sys [x]
.
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\active setup\installed components\{8A69D345-D564-463c-AFF1-A69D9E530F96}]
2014-10-28 08:33 1089352 ----a-w- c:\program files (x86)\Google\Chrome\Application\38.0.2125.111\Installer\chrmstp.exe
.
Obsah adresáře 'Naplánované úlohy'
.
2014-11-05 c:\windows\Tasks\Adobe Flash Player Updater.job
- c:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2014-06-28 19:09]
.
.
--------- X64 Entries -----------
.
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\00avast]
@="{472083B0-C522-11CF-8763-00608CC02F24}"
[HKEY_CLASSES_ROOT\CLSID\{472083B0-C522-11CF-8763-00608CC02F24}]
2014-11-01 10:50 860984 ----a-w- c:\program files\AVAST Software\Avast\ashShA64.dll
.
------- Doplňkový sken -------
.
uLocal Page = c:\windows\system32\blank.htm
uStart Page = hxxp://www.google.com
mLocal Page = c:\windows\SysWOW64\blank.htm
IE: E&xportovat do aplikace Microsoft Excel - c:\progra~2\MICROS~1\Office12\EXCEL.EXE/3000
IE: E&xportovat do Microsoft Excelu - c:\progra~2\MICROS~1\Office15\EXCEL.EXE/3000
IE: Od&eslat do OneNotu - c:\progra~2\MICROS~1\Office15\ONBttnIE.dll/105
TCP: DhcpNameServer = 192.168.1.1
.
- - - - NEPLATNÉ POLOŽKY ODSTRANĚNÉ Z REGISTRU - - - -
.
AddRemove-PunkBusterSvc - c:\windows\system32\pbsvc.exe
AddRemove-{15134cb0-b767-4960-a911-f2d16ae54797} - c:\programdata\Package Cache\{15134cb0-b767-4960-a911-f2d16ae54797}\vcredist_x64.exe
AddRemove-{22154f09-719a-4619-bb71-5b3356999fbf} - c:\programdata\Package Cache\{22154f09-719a-4619-bb71-5b3356999fbf}\vcredist_x86.exe
.
.
.
--------------------- ZAMKNUTÉ KLÍČE V REGISTRU ---------------------
.
[HKEY_USERS\S-1-5-21-3707322994-1313551490-3014853183-1001\Control Panel\Desktop*]
@Allowed: (Read) (RestrictedCode)
"WheelScrollLines"="3"
DUMPHIVE0.003 (REGF)
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{B019E3BF-E7E5-453C-A2E4-D2C18CA0866F}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil64_15_0_0_167_ActiveX.exe,-101"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{B019E3BF-E7E5-453C-A2E4-D2C18CA0866F}\Elevation]
"Enabled"=dword:00000001
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{B019E3BF-E7E5-453C-A2E4-D2C18CA0866F}\LocalServer32]
@="c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil64_15_0_0_167_ActiveX.exe"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{B019E3BF-E7E5-453C-A2E4-D2C18CA0866F}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{299817DA-1FAC-4CE2-8F48-A108237013BD}]
@Denied: (A 2) (Everyone)
@="IFlashBroker6"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{299817DA-1FAC-4CE2-8F48-A108237013BD}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{299817DA-1FAC-4CE2-8F48-A108237013BD}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
.
------------------------ Jiné spuštené procesy ------------------------
.
c:\program files\AVAST Software\Avast\AvastSvc.exe
c:\program files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
c:\program files (x86)\Google\Chrome Remote Desktop\38.0.2125.9\remoting_host.exe
c:\program files (x86)\Google\Chrome Remote Desktop\38.0.2125.9\remoting_host.exe
c:\windows\SysWOW64\PnkBstrA.exe
c:\windows\SysWOW64\PnkBstrB.exe
.
**************************************************************************
.
Celkový čas: 2014-11-05 21:16:28 - počítač byl restartován
ComboFix-quarantined-files.txt 2014-11-05 20:16
ComboFix2.txt 2014-11-03 09:38
.
Před spuštěním: Volných bajtů: 53 340 393 472
Po spuštění: Volných bajtů: 53 183 049 728
.
- - End Of File - - C57F64BF037F4765CDC7CDFEC68A4F46
A36C5E4F47E84449FF07ED3517B43A31

[hubis.cz]

Nevím jestli do toho můžu vstupovat. Jestli máš Gilu GX Gaming od geniusu. Tak by jsi k tomu měl mít i software. Zkus kouknout k výrobci, třeba ho má na stažení a tam si pak můžeš přidat co chceš na tlačítka.

[Manphis]

Klidne vstupuj jen je problem v tom že co se tyče double click tak se to obevuje jen nekdy tím pádem si myslím že že to nebude nastavení na myši a + to že když přepnu na jinej profil či default tak se stejne tak kolem 6 clicku objeví doublle

[Manphis]

aswMBR version 1.0.1.2201 Copyright(c) 2014 AVAST Software
Run date: 2014-11-05 21:24:53
-----------------------------
21:24:53.553 OS Version: Windows x64 6.1.7601 Service Pack 1
21:24:53.553 Number of processors: 4 586 0x403
21:24:53.553 ComputerName: MANPHIS-PC UserName: Manphis
21:24:54.661 Initialize success
21:24:54.708 VM: initialized successfully
21:24:54.708 VM: Amd CPU BiosDisabled
21:24:59.169 AVAST engine defs: 14110501
21:25:14.286 Disk 0 \Device\Harddisk0\DR0 -> \Device\Ide\IdeDeviceP2T1L0-8
21:25:14.286 Disk 0 Vendor: ST1000DM003-1CH162 CC47 Size: 953869MB BusType: 3
21:25:14.286 Disk 1 (boot) \Device\Harddisk1\DR1 -> \Device\Ide\IdeDeviceP7T1L0-f
21:25:14.301 Disk 1 Vendor: ST3320418AS CC44 Size: 305245MB BusType: 3
21:25:14.395 Disk 1 MBR read successfully
21:25:14.395 Disk 1 MBR scan
21:25:14.410 Disk 1 Windows 7 default MBR code
21:25:14.410 Disk 1 Partition 1 80 (A) 07 HPFS/NTFS NTFS 305234 MB offset 63
21:25:14.426 Disk 1 Boot: NTFS code=1
21:25:14.457 Disk 1 scanning C:\Windows\system32\drivers
21:25:25.923 Service scanning
21:25:40.587 Service TrustedInstaller C:\Windows\servicing\TrustedInstaller.exe **HIDDEN**
21:25:44.222 Modules scanning
21:25:44.222 Disk 1 trace - called modules:
21:25:44.269 ntoskrnl.exe CLASSPNP.SYS disk.sys ataport.SYS pciide.sys PCIIDEX.SYS hal.dll atapi.sys
21:25:44.269 1 nt!IofCallDriver -> \Device\Harddisk1\DR1[0xfffffa8004a5b060]
21:25:44.269 3 CLASSPNP.SYS[fffff8800187443f] -> nt!IofCallDriver -> \Device\Ide\IdeDeviceP7T1L0-f[0xfffffa80047fe680]
21:25:48.325 AVAST engine scan C:\Windows
21:25:50.774 AVAST engine scan C:\Windows\system32
21:29:17.006 AVAST engine scan C:\Windows\system32\drivers
21:29:30.235 AVAST engine scan C:\Users\Manphis
21:33:39.399 AVAST engine scan C:\ProgramData
21:34:41.487 Disk 1 statistics 4149693/0/0 @ 5,61 MB/s
21:34:41.503 Scan finished successfully
01:42:44.422 Disk 1 MBR has been saved successfully to "C:\Users\Manphis\Desktop\MBR.dat"
01:42:44.437 The log file has been saved successfully to "C:\Users\Manphis\Desktop\aswMBR.txt"

[Manphis]

https://www.virustotal.com/cs/file/dd18 ... 415235017/
to je ten Unins000¨

a ten druhý nic nenašel https://www.virustotal.com/cs/file/df68 ... 415235279/

[carrypto]

Ono to taky nemusí ani souviset s SW problémem.Mám Razer naga,myš která dvojklikem hodně trpí.Stačí ji jen rozdělat a vyčistit.

Mrkni na Youtube je tam o tom dost videí.

[jaro3]

ComboFix se odinstaluje takto:
Start-Spustit a zadej ComboFix /Uninstall

Vyčisti systém CCleanerem

Stáhni si OTC

na plochu. Poklepej na něj. Potom klikni na Clean up!.
Restartuj PC , pokud Ti bude doporučeno.


Vlož nový log z HJT

To nebude viry.