Prosím o kontrolu kolísá internet Vyřešeno

[lukas polak]

ComboFix 15-01-02.01 - LUKÁŠ 02.01.2015 21:49:24.1.2 - x64
Microsoft Windows 7 Ultimate 6.1.7601.1.1250.420.1029.18.4094.2849 [GMT 1:00]
Spuštěný z: c:\users\LUK+Ő\Desktop\ComboFix.exe
AV: avast! Antivirus *Enabled/Updated* {17AD7D40-BA12-9C46-7131-94903A54AD8B}
SP: avast! Antivirus *Enabled/Updated* {ACCC9CA4-9C28-93C8-4B81-AFE241D3E736}
SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.
.
((((((((((((((((((((((((( Soubory vytvořené od 2014-12-02 do 2015-01-02 )))))))))))))))))))))))))))))))
.
.
2015-01-02 20:55 . 2015-01-02 20:55 -------- d-----w- c:\users\Default\AppData\Local\temp
2015-01-02 16:45 . 2015-01-02 16:18 24064 ----a-w- c:\windows\zoek-delete.exe
2015-01-02 16:18 . 2015-01-02 16:18 -------- d-----w- C:\zoek_backup
2015-01-02 14:48 . 2015-01-02 16:09 37624 ----a-w- c:\windows\system32\drivers\TrueSight.sys
2015-01-02 14:48 . 2015-01-02 14:48 -------- d-----w- c:\programdata\RogueKiller
2015-01-02 14:26 . 2015-01-02 14:26 -------- d-----w- c:\windows\ERUNT
2015-01-02 12:20 . 2015-01-02 14:19 -------- d-----w- C:\AdwCleaner
2015-01-02 12:01 . 2015-01-02 12:01 116728 ----a-w- c:\windows\system32\drivers\aswStm.sys
2015-01-02 12:01 . 2015-01-02 12:01 436624 ----a-w- c:\windows\system32\drivers\aswSP.sys
2015-01-02 12:01 . 2015-01-02 12:01 267632 ----a-w- c:\windows\system32\drivers\aswVmm.sys
2015-01-02 12:01 . 2015-01-02 12:01 65776 ----a-w- c:\windows\system32\drivers\aswRvrt.sys
2015-01-02 12:01 . 2015-01-02 12:01 83280 ----a-w- c:\windows\system32\drivers\aswMonFlt.sys
2015-01-02 12:01 . 2015-01-02 12:01 29208 ----a-w- c:\windows\system32\drivers\aswHwid.sys
2015-01-02 12:01 . 2015-01-02 12:01 93568 ----a-w- c:\windows\system32\drivers\aswRdr2.sys
2015-01-02 12:01 . 2015-01-02 12:01 1050432 ----a-w- c:\windows\system32\drivers\aswsnx.sys
2015-01-02 12:01 . 2015-01-02 12:01 364512 ----a-w- c:\windows\system32\aswBoot.exe
2015-01-02 12:01 . 2015-01-02 12:01 43152 ----a-w- c:\windows\avastSS.scr
2015-01-02 12:00 . 2015-01-02 12:00 -------- d-----w- c:\program files\AVAST Software
2015-01-02 10:48 . 2014-12-30 14:44 320936 ----a-w- c:\windows\system32\javaws.exe
2014-12-30 14:45 . 2014-12-30 14:45 -------- d-----w- c:\program files (x86)\Common Files\Java
2014-12-30 14:45 . 2015-01-02 10:47 111016 ----a-w- c:\windows\system32\WindowsAccessBridge-64.dll
2014-12-30 09:38 . 2014-12-02 10:26 11870360 ----a-w- c:\programdata\Microsoft\Windows Defender\Definition Updates\{27169526-F3DA-46EA-A345-32282E18D23A}\mpengine.dll
2014-12-29 22:16 . 2015-01-02 16:51 -------- d-----w- c:\programdata\NVIDIA
2014-12-29 22:15 . 2014-12-13 00:47 620176 ----a-w- c:\windows\SysWow64\nvStreaming.exe
2014-12-29 22:15 . 2014-12-13 08:03 6859408 ----a-w- c:\windows\system32\nvcpl.dll
2014-12-29 22:15 . 2014-12-13 08:03 3513488 ----a-w- c:\windows\system32\nvsvc64.dll
2014-12-29 22:15 . 2014-12-13 08:03 935240 ----a-w- c:\windows\system32\nvvsvc.exe
2014-12-29 22:15 . 2014-12-13 08:03 62608 ----a-w- c:\windows\system32\nvshext.dll
2014-12-29 22:15 . 2014-12-13 08:03 386368 ----a-w- c:\windows\system32\nvmctray.dll
2014-12-29 22:15 . 2014-12-13 08:03 2558608 ----a-w- c:\windows\system32\nvsvcr.dll
2014-12-29 22:15 . 2014-12-12 23:11 4151176 ----a-w- c:\windows\system32\nvcoproc.bin
2014-12-29 22:14 . 2014-12-13 10:08 74056 ----a-w- c:\windows\system32\OpenCL.dll
2014-12-29 22:14 . 2014-12-13 10:08 60560 ----a-w- c:\windows\SysWow64\OpenCL.dll
2014-12-29 08:01 . 2014-12-29 08:09 -------- d-----w- c:\programdata\Spybot - Search & Destroy
2014-12-23 08:21 . 2014-12-23 08:21 -------- d-----w- c:\windows\SysWow64\RTCOM
2014-12-23 08:21 . 2014-12-23 08:21 -------- d-----w- c:\program files\Realtek
2014-12-22 20:29 . 2014-12-22 20:29 -------- d-s---w- c:\windows\SysWow64\Microsoft
2014-12-20 18:36 . 1998-10-02 18:00 327168 ----a-w- c:\windows\IsUninst.exe
2014-12-20 15:11 . 2014-12-20 15:11 -------- d-----w- c:\program files (x86)\Common Files\Skype
2014-12-20 15:11 . 2014-12-20 15:11 -------- d-----r- c:\program files (x86)\Skype
2014-12-19 08:37 . 2014-12-19 08:37 -------- d-----w- c:\program files\CCleaner
2014-12-18 08:40 . 2014-12-13 05:09 144384 ----a-w- c:\windows\system32\ieUnatt.exe
2014-12-18 08:40 . 2014-12-13 03:33 115712 ----a-w- c:\windows\SysWow64\ieUnatt.exe
2014-12-17 08:37 . 2014-12-17 08:42 -------- d-----w- c:\programdata\GRAW2
2014-12-16 22:14 . 2014-12-16 22:23 25640 ----a-w- c:\windows\etdrv.sys
2014-12-16 22:14 . 2014-12-17 10:46 30528 ----a-w- c:\windows\GVTDrv64.sys
2014-12-16 17:35 . 2014-12-16 17:35 31648 ----a-w- c:\windows\SysWow64\drivers\HWiNFO64A.SYS
2014-12-16 17:34 . 2014-12-16 17:34 -------- d-----w- c:\program files (x86)\HWiNFO32
2014-12-16 10:11 . 2014-12-16 10:11 -------- d-----w- c:\windows\SysWow64\bitstreams
2014-12-16 10:11 . 2013-10-26 20:30 538126 --s-a-w- c:\windows\SysWow64\libcurl-4.dll
2014-12-16 10:11 . 2013-10-26 20:30 364544 --s-a-w- c:\windows\SysWow64\ssleay32.dll
2014-12-16 10:11 . 2013-10-26 20:30 192512 --s-a-w- c:\windows\SysWow64\libidn-11.dll
2014-12-16 10:11 . 2013-10-26 20:30 171008 --s-a-w- c:\windows\SysWow64\libssh2.dll
2014-12-16 10:11 . 2013-10-26 20:30 1704448 --s-a-w- c:\windows\SysWow64\libeay32.dll
2014-12-16 10:11 . 2013-10-26 20:30 133632 --s-a-w- c:\windows\SysWow64\librtmp.dll
2014-12-16 10:11 . 2013-06-12 15:15 119888 --s-a-w- c:\windows\SysWow64\pthreadGC2.dll
2014-12-16 10:11 . 2013-06-12 15:15 100864 --s-a-w- c:\windows\SysWow64\zlib1.dll
2014-12-16 10:11 . 2012-09-25 23:46 472424 --s-a-w- c:\windows\SysWow64\cudart32_50_35.dll
2014-12-16 10:11 . 2012-05-27 01:36 55808 --s-a-w- c:\windows\SysWow64\pthreadVC2.dll
2014-12-15 22:11 . 2015-01-02 12:00 -------- d-----w- c:\programdata\AVAST Software
2014-12-15 21:34 . 2013-08-11 14:40 43520 --s-a-w- c:\windows\SysWow64\nircmdc.exe
2014-12-13 00:48 . 2014-12-13 00:48 -------- d-----w- c:\programdata\Malwarebytes
2014-12-12 15:27 . 2014-12-12 15:27 -------- d-----w- c:\programdata\Ashampoo
2014-12-12 15:27 . 2014-12-12 15:27 -------- d-----w- c:\program files (x86)\Ashampoo
2014-12-12 07:13 . 2012-05-25 10:06 1706640 ----a-w- c:\windows\RtlExUpd.dll
2014-12-11 14:16 . 2014-12-12 12:13 -------- d-----w- c:\windows\system32\appmgmt
2014-12-11 13:28 . 2014-12-11 13:28 -------- d-----w- C:\Fraps
2014-12-11 13:27 . 2014-12-11 13:36 -------- d-----w- c:\programdata\TmForever
2014-12-11 13:24 . 2014-12-11 13:25 -------- d-----w- c:\program files (x86)\TmNationsForever
2014-12-11 12:08 . 2014-12-12 15:29 -------- d-----w- c:\program files (x86)\Google
2014-12-11 11:35 . 2014-06-27 02:08 2777088 ----a-w- c:\windows\system32\msmpeg2vdec.dll
2014-12-11 11:35 . 2014-06-27 01:45 2285056 ----a-w- c:\windows\SysWow64\msmpeg2vdec.dll
2014-12-11 11:05 . 2013-11-26 08:16 3419136 ----a-w- c:\windows\SysWow64\d2d1.dll
2014-12-11 11:05 . 2013-11-22 22:48 3928064 ----a-w- c:\windows\system32\d2d1.dll
2014-12-11 11:05 . 2011-03-11 06:33 2565632 ----a-w- c:\windows\system32\esent.dll
2014-12-11 11:05 . 2011-03-11 06:30 96768 ----a-w- c:\windows\system32\fsutil.exe
2014-12-11 11:05 . 2011-03-11 06:41 166272 ----a-w- c:\windows\system32\drivers\nvstor.sys
2014-12-11 11:05 . 2011-03-11 06:41 148352 ----a-w- c:\windows\system32\drivers\nvraid.sys
2014-12-11 11:05 . 2011-03-11 06:41 410496 ----a-w- c:\windows\system32\drivers\iaStorV.sys
2014-12-11 11:05 . 2011-03-11 06:41 27008 ----a-w- c:\windows\system32\drivers\amdxata.sys
2014-12-11 11:05 . 2011-03-11 06:41 107904 ----a-w- c:\windows\system32\drivers\amdsata.sys
2014-12-11 11:05 . 2011-03-11 05:33 1699328 ----a-w- c:\windows\SysWow64\esent.dll
2014-12-11 11:05 . 2011-03-11 05:31 74240 ----a-w- c:\windows\SysWow64\fsutil.exe
2014-12-11 11:05 . 2011-03-11 04:37 91648 ----a-w- c:\windows\system32\drivers\USBSTOR.SYS
2014-12-11 11:03 . 2015-01-02 10:44 701616 ----a-w- c:\windows\SysWow64\FlashPlayerApp.exe
2014-12-11 11:03 . 2015-01-02 10:44 71344 ----a-w- c:\windows\SysWow64\FlashPlayerCPLApp.cpl
2014-12-11 11:03 . 2014-12-11 11:03 -------- d-----w- c:\windows\SysWow64\Macromed
2014-12-11 11:03 . 2014-12-11 11:03 -------- d-----w- c:\windows\system32\Macromed
2014-12-11 10:59 . 2012-02-11 06:36 559104 ----a-w- c:\windows\system32\spoolsv.exe
2014-12-11 10:59 . 2012-02-11 06:36 67072 ----a-w- c:\windows\splwow64.exe
2014-12-11 10:41 . 2014-11-11 03:09 1424384 ----a-w- c:\windows\system32\WindowsCodecs.dll
2014-12-11 10:41 . 2014-11-11 02:44 1230336 ----a-w- c:\windows\SysWow64\WindowsCodecs.dll
2014-12-11 10:41 . 2014-11-24 13:04 275080 ------w- c:\windows\system32\MpSigStub.exe
2014-12-11 08:33 . 2014-12-11 08:33 -------- d-----w- c:\windows\SysWow64\Wat
2014-12-11 08:33 . 2014-12-11 08:33 -------- d-----w- c:\windows\system32\Wat
2014-12-11 07:55 . 2013-05-10 05:56 12625920 ----a-w- c:\windows\system32\wmploc.DLL
2014-12-11 07:55 . 2013-05-10 04:30 167424 ----a-w- c:\program files\Windows Media Player\wmplayer.exe
2014-12-11 07:55 . 2013-05-10 03:48 164864 ----a-w- c:\program files (x86)\Windows Media Player\wmplayer.exe
2014-12-11 07:55 . 2013-05-10 04:56 12625408 ----a-w- c:\windows\SysWow64\wmploc.DLL
2014-12-11 07:55 . 2013-05-10 05:56 14631424 ----a-w- c:\windows\system32\wmp.dll
2014-12-11 07:31 . 2014-12-11 07:31 -------- d-----w- c:\windows\Migration
2014-12-11 07:18 . 2013-10-14 17:00 28368 ----a-w- c:\windows\system32\IEUDINIT.EXE
2014-12-11 06:43 . 2014-12-11 06:43 9728 ---ha-w- c:\windows\system32\api-ms-win-downlevel-shlwapi-l1-1-0.dll
2014-12-11 05:42 . 2012-07-26 07:40 2560 ----a-w- c:\windows\system32\drivers\cs-CZ\wdf01000.sys.mui
2014-12-11 04:41 . 2014-07-07 02:06 206848 ----a-w- c:\windows\system32\mfps.dll
2014-12-11 04:41 . 2014-07-07 02:06 55808 ----a-w- c:\windows\system32\rrinstaller.exe
2014-12-11 04:41 . 2014-07-07 02:06 24576 ----a-w- c:\windows\system32\mfpmp.exe
2014-12-11 04:41 . 2014-07-07 02:02 2048 ----a-w- c:\windows\system32\mferror.dll
2014-12-11 04:41 . 2014-07-07 01:40 103424 ----a-w- c:\windows\SysWow64\mfps.dll
2014-12-11 04:41 . 2014-07-07 01:39 50176 ----a-w- c:\windows\SysWow64\rrinstaller.exe
2014-12-11 04:41 . 2014-07-07 01:39 23040 ----a-w- c:\windows\SysWow64\mfpmp.exe
2014-12-11 04:41 . 2014-07-07 01:37 2048 ----a-w- c:\windows\SysWow64\mferror.dll
2014-12-11 04:41 . 2014-10-18 02:05 4121600 ----a-w- c:\windows\system32\mf.dll
2014-12-11 04:41 . 2014-10-18 01:33 3209728 ----a-w- c:\windows\SysWow64\mf.dll
2014-12-11 04:30 . 2012-07-26 02:26 87040 ----a-w- c:\windows\system32\drivers\WUDFPf.sys
2014-12-11 04:30 . 2012-07-26 02:26 198656 ----a-w- c:\windows\system32\drivers\WUDFRd.sys
2014-12-11 04:30 . 2012-07-26 03:08 229888 ----a-w- c:\windows\system32\WUDFHost.exe
2014-12-11 04:30 . 2012-07-26 03:08 84992 ----a-w- c:\windows\system32\WUDFSvc.dll
2014-12-11 04:30 . 2012-07-26 03:08 744448 ----a-w- c:\windows\system32\WUDFx.dll
2014-12-11 04:30 . 2012-07-26 03:08 45056 ----a-w- c:\windows\system32\WUDFCoinstaller.dll
2014-12-11 04:30 . 2012-07-26 03:08 194048 ----a-w- c:\windows\system32\WUDFPlatform.dll
2014-12-11 04:09 . 2012-03-01 06:46 23408 ----a-w- c:\windows\system32\drivers\fs_rec.sys
2014-12-11 04:09 . 2012-03-01 06:28 5120 ----a-w- c:\windows\system32\wmi.dll
2014-12-11 04:09 . 2012-03-01 05:29 5120 ----a-w- c:\windows\SysWow64\wmi.dll
2014-12-11 03:56 . 2014-03-09 21:48 171160 ----a-w- c:\windows\system32\infocardapi.dll
.
.
(((((((((((((((((((((((((((((((((((((((( Find3M výpis ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2014-12-11 07:01 . 2014-12-11 07:01 208384 ----a-w- c:\windows\SysWow64\webcheck.dll
2014-12-11 07:01 . 2014-12-11 07:01 243200 ----a-w- c:\windows\system32\webcheck.dll
2014-12-11 01:19 . 2009-07-14 02:36 152576 ----a-w- c:\windows\SysWow64\msclmd.dll
2014-12-11 01:19 . 2009-07-14 02:36 175616 ----a-w- c:\windows\system32\msclmd.dll
.
.
(((((((((((((((((((((((((((((((((( Spouštěcí body v registru )))))))))))))))))))))))))))))))))))))))))))))
.
.
*Poznámka* prázdné záznamy a legitimní výchozí údaje nejsou zobrazeny.
REGEDIT4
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Sidebar"="c:\program files\Windows Sidebar\sidebar.exe" [2010-11-20 1475584]
"DAEMON Tools Lite"="c:\program files (x86)\DAEMON Tools Lite\DTLite.exe" [2014-03-04 3696912]
"CCleaner Monitoring"="c:\program files\CCleaner\CCleaner64.exe" [2014-12-12 7394584]
"ISUSPM Startup"="c:\progra~2\COMMON~1\INSTAL~1\UPDATE~1\isuspm.exe" [2005-02-17 221184]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]
"ISUSScheduler"="c:\program files (x86)\Common Files\InstallShield\UpdateService\issch.exe" [2005-02-17 81920]
"AvastUI.exe"="c:\program files\AVAST Software\Avast\AvastUI.exe" [2015-01-02 5226600]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorAdmin"= 5 (0x5)
"ConsentPromptBehaviorUser"= 3 (0x3)
"EnableUIADesktopToggle"= 0 (0x0)
"SoftwareSASGeneration"= 1 (0x1)
.
[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\session manager]
BootExecute REG_MULTI_SZ autocheck autochk *\0?????????????\0SmartDefragBootTime.exe
.
R2 aswStm;aswStm;c:\windows\system32\drivers\aswStm.sys;c:\windows\SYSNATIVE\drivers\aswStm.sys [x]
R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [x]
R2 SkypeUpdate;Skype Updater;c:\program files (x86)\Skype\Updater\Updater.exe;c:\program files (x86)\Skype\Updater\Updater.exe [x]
R3 AppleChargerSrv;AppleChargerSrv;c:\windows\system32\AppleChargerSrv.exe;c:\windows\SYSNATIVE\AppleChargerSrv.exe [x]
R3 IEEtwCollectorService;Internet Explorer ETW Collector Service;c:\windows\system32\IEEtwCollector.exe;c:\windows\SYSNATIVE\IEEtwCollector.exe [x]
R3 RdpVideoMiniport;Remote Desktop Video Miniport Driver;c:\windows\system32\drivers\rdpvideominiport.sys;c:\windows\SYSNATIVE\drivers\rdpvideominiport.sys [x]
R3 Synth3dVsc;Synth3dVsc;c:\windows\system32\drivers\synth3dvsc.sys;c:\windows\SYSNATIVE\drivers\synth3dvsc.sys [x]
R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys;c:\windows\SYSNATIVE\drivers\tsusbflt.sys [x]
R3 tsusbhub;tsusbhub;c:\windows\system32\drivers\tsusbhub.sys;c:\windows\SYSNATIVE\drivers\tsusbhub.sys [x]
R3 VGPU;VGPU;c:\windows\system32\drivers\rdvgkmd.sys;c:\windows\SYSNATIVE\drivers\rdvgkmd.sys [x]
R3 WatAdminSvc;Služba Technologie aktivace Windows;c:\windows\system32\Wat\WatAdminSvc.exe;c:\windows\SYSNATIVE\Wat\WatAdminSvc.exe [x]
S0 aswRvrt;avast! Revert; [x]
S0 aswVmm;avast! VM Monitor; [x]
S0 SmartDefragDriver;SmartDefragDriver;c:\windows\System32\Drivers\SmartDefragDriver.sys;c:\windows\SYSNATIVE\Drivers\SmartDefragDriver.sys [x]
S1 AppleCharger;AppleCharger;c:\windows\system32\DRIVERS\AppleCharger.sys;c:\windows\SYSNATIVE\DRIVERS\AppleCharger.sys [x]
S1 aswSnx;aswSnx;c:\windows\system32\drivers\aswSnx.sys;c:\windows\SYSNATIVE\drivers\aswSnx.sys [x]
S1 aswSP;aswSP;c:\windows\system32\drivers\aswSP.sys;c:\windows\SYSNATIVE\drivers\aswSP.sys [x]
S1 dtsoftbus01;DAEMON Tools Virtual Bus Driver;c:\windows\system32\DRIVERS\dtsoftbus01.sys;c:\windows\SYSNATIVE\DRIVERS\dtsoftbus01.sys [x]
S1 HWiNFO32;HWiNFO32/64 Kernel Driver;c:\windows\SysWOW64\drivers\HWiNFO64A.SYS;c:\windows\SysWOW64\drivers\HWiNFO64A.SYS [x]
S2 aswHwid;avast! HardwareID;c:\windows\system32\drivers\aswHwid.sys;c:\windows\SYSNATIVE\drivers\aswHwid.sys [x]
S2 aswMonFlt;aswMonFlt;c:\windows\system32\drivers\aswMonFlt.sys;c:\windows\SYSNATIVE\drivers\aswMonFlt.sys [x]
S2 Stereo Service;NVIDIA Stereoscopic 3D Driver Service;c:\program files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe;c:\program files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe [x]
.
.
Obsah adresáře 'Naplánované úlohy'
.
2015-01-02 c:\windows\Tasks\Adobe Flash Player Updater.job
- c:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2014-12-11 10:44]
.
2015-01-02 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
- c:\program files (x86)\Google\Update\GoogleUpdate.exe [2014-12-11 12:08]
.
2015-01-02 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
- c:\program files (x86)\Google\Update\GoogleUpdate.exe [2014-12-11 12:08]
.
.
--------- X64 Entries -----------

[Reklama]

[lukas polak]

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\00avast]
@="{472083B0-C522-11CF-8763-00608CC02F24}"
[HKEY_CLASSES_ROOT\CLSID\{472083B0-C522-11CF-8763-00608CC02F24}]
2015-01-02 12:01 860984 ----a-w- c:\program files\AVAST Software\Avast\ashShA64.dll
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"RtHDVCpl"="c:\program files\Realtek\Audio\HDA\RAVCpl64.exe" [2012-06-11 12503184]
.
------- Doplňkový sken -------
.
uLocal Page = c:\windows\system32\blank.htm
mLocal Page = c:\windows\SysWOW64\blank.htm
TCP: DhcpNameServer = 10.0.0.138
.
- - - - NEPLATNÉ POLOŽKY ODSTRANĚNÉ Z REGISTRU - - - -
.
Wow6432Node-HKU-Default-RunOnce-SPReview - c:\windows\System32\SPReview\SPReview.exe
.
.
.
--------------------- ZAMKNUTÉ KLÍČE V REGISTRU ---------------------
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{B019E3BF-E7E5-453C-A2E4-D2C18CA0866F}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil64_16_0_0_235_ActiveX.exe,-101"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{B019E3BF-E7E5-453C-A2E4-D2C18CA0866F}\Elevation]
"Enabled"=dword:00000001
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{B019E3BF-E7E5-453C-A2E4-D2C18CA0866F}\LocalServer32]
@="c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil64_16_0_0_235_ActiveX.exe"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{B019E3BF-E7E5-453C-A2E4-D2C18CA0866F}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{299817DA-1FAC-4CE2-8F48-A108237013BD}]
@Denied: (A 2) (Everyone)
@="IFlashBroker6"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{299817DA-1FAC-4CE2-8F48-A108237013BD}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{299817DA-1FAC-4CE2-8F48-A108237013BD}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{B019E3BF-E7E5-453C-A2E4-D2C18CA0866F}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil32_16_0_0_235_ActiveX.exe,-101"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{B019E3BF-E7E5-453C-A2E4-D2C18CA0866F}\Elevation]
"Enabled"=dword:00000001
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{B019E3BF-E7E5-453C-A2E4-D2C18CA0866F}\LocalServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil32_16_0_0_235_ActiveX.exe"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{B019E3BF-E7E5-453C-A2E4-D2C18CA0866F}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@="Shockwave Flash Object"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\InprocServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_16_0_0_235.ocx"
"ThreadingModel"="Apartment"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\MiscStatus]
@="0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ProgID]
@="ShockwaveFlash.ShockwaveFlash.16"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_16_0_0_235.ocx, 1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\TypeLib]
@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\Version]
@="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
@="ShockwaveFlash.ShockwaveFlash"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@="Macromedia Flash Factory Object"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\InprocServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_16_0_0_235.ocx"
"ThreadingModel"="Apartment"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ProgID]
@="FlashFactory.FlashFactory.1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_16_0_0_235.ocx, 1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\TypeLib]
@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\Version]
@="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
@="FlashFactory.FlashFactory"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{299817DA-1FAC-4CE2-8F48-A108237013BD}]
@Denied: (A 2) (Everyone)
@="IFlashBroker6"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{299817DA-1FAC-4CE2-8F48-A108237013BD}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{299817DA-1FAC-4CE2-8F48-A108237013BD}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\PCW\Security]
@Denied: (Full) (Everyone)
.
Celkový čas: 2015-01-02 21:57:14
ComboFix-quarantined-files.txt 2015-01-02 20:57
.
Před spuštěním: Volných bajtů: 459 585 335 296
Po spuštění: Volných bajtů: 459 409 797 120
.
- - End Of File - - D569612355B0BEA77861EF1B080B15D2
A36C5E4F47E84449FF07ED3517B43A31

[jaro3]

Vypni rez. ochranu u antiviru a antispywaru,příp. firewall..

Otevři si Poznámkový blok (Start -> Spustit... a napiš do okna Notepad a dej Ok.
Zkopíruj do něj následující celý text označený zeleně:

Kód: Vybrat vše

ClearJavaCache::
KillAll::
File::
c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
c:\windows\Tasks\GoogleUpdateTaskMachineUA.job

Folder::
c:\programdata\Spybot - Search & Destroy
c:\program files (x86)\Skype\Updater
c:\program files (x86)\Google\Update

Driver::
SkypeUpdate

RegLock::
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{B019E3BF-E7E5-453C-A2E4-D2C18CA0866F}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil64_16_0_0_235_ActiveX.exe,-101"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{B019E3BF-E7E5-453C-A2E4-D2C18CA0866F}\Elevation]
"Enabled"=dword:00000001
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{B019E3BF-E7E5-453C-A2E4-D2C18CA0866F}\LocalServer32]
@="c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil64_16_0_0_235_ActiveX.exe"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{B019E3BF-E7E5-453C-A2E4-D2C18CA0866F}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{299817DA-1FAC-4CE2-8F48-A108237013BD}]
@Denied: (A 2) (Everyone)
@="IFlashBroker6"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{299817DA-1FAC-4CE2-8F48-A108237013BD}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{299817DA-1FAC-4CE2-8F48-A108237013BD}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{B019E3BF-E7E5-453C-A2E4-D2C18CA0866F}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil32_16_0_0_235_ActiveX.exe,-101"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{B019E3BF-E7E5-453C-A2E4-D2C18CA0866F}\Elevation]
"Enabled"=dword:00000001
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{B019E3BF-E7E5-453C-A2E4-D2C18CA0866F}\LocalServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil32_16_0_0_235_ActiveX.exe"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{B019E3BF-E7E5-453C-A2E4-D2C18CA0866F}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@="Shockwave Flash Object"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\InprocServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_16_0_0_235.ocx"
"ThreadingModel"="Apartment"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\MiscStatus]
@="0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ProgID]
@="ShockwaveFlash.ShockwaveFlash.16"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_16_0_0_235.ocx, 1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\TypeLib]
@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\Version]
@="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
@="ShockwaveFlash.ShockwaveFlash"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@="Macromedia Flash Factory Object"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\InprocServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_16_0_0_235.ocx"
"ThreadingModel"="Apartment"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ProgID]
@="FlashFactory.FlashFactory.1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_16_0_0_235.ocx, 1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\TypeLib]
@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\Version]
@="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
@="FlashFactory.FlashFactory"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{299817DA-1FAC-4CE2-8F48-A108237013BD}]
@Denied: (A 2) (Everyone)
@="IFlashBroker6"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{299817DA-1FAC-4CE2-8F48-A108237013BD}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{299817DA-1FAC-4CE2-8F48-A108237013BD}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\PCW\Security]
@Denied: (Full) (Everyone)


Zvol možnost Soubor -> Uložit jako... a nastav tyto parametry:
Název souboru: zde napiš: CFScript.txt
Uložit jako typ: tak tam vyber Všechny soubory
Ulož soubor na plochu.
Ukonči všechna aktivní okna.

Uchop myší vytvořený skript CFScript.txt, přemísti ho nad stažený program ComboFix.exe a když se oba soubory překryjí, skript upusť.
- Automaticky se spustí ComboFix
- Vlož sem log, který vyběhne v závěru čistícího procesu + nový log z HJT

Upozornění : Může se stát, že po aplikaci Combofixu a restartu počítače, Windows nenaběhnou , nebo nenajede plocha , budou problémy s připojením, pak znovu restartuj počítač, pokud to nepomůže , po restartu mačkej klávesu F8 a pak zvol poslední známou funkční konfiguraci. , či použij bod obnovy.

Stáhni si aswMBR
na svojí plochu. Uzavři všechna okna , programy a prohlížeče. Poklepej na aswMBR.exe. Pokud se objeví hláška o možnosti stáhnutí databáze Avastu , klikni na NE. Poté klikni na „Scan“ . Po skenu klikni na „Save Log“ a ulož si log na plochu .Zkopíruj sem celý obsah toho logu. Pak klikni na „Exit“ k zavření programu.

[lukas polak]

ComboFix 15-01-02.01 - LUKÁŠ 03.01.2015 13:16:35.2.2 - x64
Microsoft Windows 7 Ultimate 6.1.7601.1.1250.420.1029.18.4094.2809 [GMT 1:00]
Spuštěný z: c:\users\LUK+Ő\Desktop\ComboFix.exe
Použité ovládací přepínače :: c:\users\LUK+Ő\Desktop\CFscript.txt
AV: avast! Antivirus *Disabled/Updated* {17AD7D40-BA12-9C46-7131-94903A54AD8B}
SP: avast! Antivirus *Disabled/Updated* {ACCC9CA4-9C28-93C8-4B81-AFE241D3E736}
SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.
.
((((((((((((((((((((((((( Soubory vytvořené od 2014-12-03 do 2015-01-03 )))))))))))))))))))))))))))))))
.
.
2015-01-03 12:27 . 2015-01-03 12:27 -------- d-----w- c:\users\Default\AppData\Local\temp
2015-01-02 16:45 . 2015-01-02 16:18 24064 ----a-w- c:\windows\zoek-delete.exe
2015-01-02 16:18 . 2015-01-02 16:18 -------- d-----w- C:\zoek_backup
2015-01-02 14:48 . 2015-01-02 16:09 37624 ----a-w- c:\windows\system32\drivers\TrueSight.sys
2015-01-02 14:48 . 2015-01-02 14:48 -------- d-----w- c:\programdata\RogueKiller
2015-01-02 14:26 . 2015-01-02 14:26 -------- d-----w- c:\windows\ERUNT
2015-01-02 12:20 . 2015-01-02 14:19 -------- d-----w- C:\AdwCleaner
2015-01-02 12:01 . 2015-01-02 12:01 116728 ----a-w- c:\windows\system32\drivers\aswStm.sys
2015-01-02 12:01 . 2015-01-02 12:01 436624 ----a-w- c:\windows\system32\drivers\aswSP.sys
2015-01-02 12:01 . 2015-01-02 12:01 267632 ----a-w- c:\windows\system32\drivers\aswVmm.sys
2015-01-02 12:01 . 2015-01-02 12:01 65776 ----a-w- c:\windows\system32\drivers\aswRvrt.sys
2015-01-02 12:01 . 2015-01-02 12:01 83280 ----a-w- c:\windows\system32\drivers\aswMonFlt.sys
2015-01-02 12:01 . 2015-01-02 12:01 29208 ----a-w- c:\windows\system32\drivers\aswHwid.sys
2015-01-02 12:01 . 2015-01-02 12:01 93568 ----a-w- c:\windows\system32\drivers\aswRdr2.sys
2015-01-02 12:01 . 2015-01-02 12:01 1050432 ----a-w- c:\windows\system32\drivers\aswsnx.sys
2015-01-02 12:01 . 2015-01-02 12:01 364512 ----a-w- c:\windows\system32\aswBoot.exe
2015-01-02 12:01 . 2015-01-02 12:01 43152 ----a-w- c:\windows\avastSS.scr
2015-01-02 12:00 . 2015-01-02 12:00 -------- d-----w- c:\program files\AVAST Software
2015-01-02 10:48 . 2014-12-30 14:44 320936 ----a-w- c:\windows\system32\javaws.exe
2014-12-30 14:45 . 2014-12-30 14:45 -------- d-----w- c:\program files (x86)\Common Files\Java
2014-12-30 14:45 . 2015-01-02 10:47 111016 ----a-w- c:\windows\system32\WindowsAccessBridge-64.dll
2014-12-30 09:38 . 2014-12-02 10:26 11870360 ----a-w- c:\programdata\Microsoft\Windows Defender\Definition Updates\{27169526-F3DA-46EA-A345-32282E18D23A}\mpengine.dll
2014-12-29 22:16 . 2015-01-03 12:00 -------- d-----w- c:\programdata\NVIDIA
2014-12-29 22:15 . 2014-12-13 00:47 620176 ----a-w- c:\windows\SysWow64\nvStreaming.exe
2014-12-29 22:15 . 2014-12-13 08:03 6859408 ----a-w- c:\windows\system32\nvcpl.dll
2014-12-29 22:15 . 2014-12-13 08:03 3513488 ----a-w- c:\windows\system32\nvsvc64.dll
2014-12-29 22:15 . 2014-12-13 08:03 935240 ----a-w- c:\windows\system32\nvvsvc.exe
2014-12-29 22:15 . 2014-12-13 08:03 62608 ----a-w- c:\windows\system32\nvshext.dll
2014-12-29 22:15 . 2014-12-13 08:03 386368 ----a-w- c:\windows\system32\nvmctray.dll
2014-12-29 22:15 . 2014-12-13 08:03 2558608 ----a-w- c:\windows\system32\nvsvcr.dll
2014-12-29 22:15 . 2014-12-12 23:11 4151176 ----a-w- c:\windows\system32\nvcoproc.bin
2014-12-29 22:14 . 2014-12-13 10:08 74056 ----a-w- c:\windows\system32\OpenCL.dll
2014-12-29 22:14 . 2014-12-13 10:08 60560 ----a-w- c:\windows\SysWow64\OpenCL.dll
2014-12-29 08:01 . 2014-12-29 08:09 -------- d-----w- c:\programdata\Spybot - Search & Destroy
2014-12-23 08:21 . 2014-12-23 08:21 -------- d-----w- c:\windows\SysWow64\RTCOM
2014-12-23 08:21 . 2014-12-23 08:21 -------- d-----w- c:\program files\Realtek
2014-12-22 20:29 . 2014-12-22 20:29 -------- d-s---w- c:\windows\SysWow64\Microsoft
2014-12-20 18:36 . 1998-10-02 18:00 327168 ----a-w- c:\windows\IsUninst.exe
2014-12-20 15:11 . 2014-12-20 15:11 -------- d-----w- c:\program files (x86)\Common Files\Skype
2014-12-20 15:11 . 2014-12-20 15:11 -------- d-----r- c:\program files (x86)\Skype
2014-12-19 08:37 . 2014-12-19 08:37 -------- d-----w- c:\program files\CCleaner
2014-12-18 08:40 . 2014-12-13 05:09 144384 ----a-w- c:\windows\system32\ieUnatt.exe
2014-12-18 08:40 . 2014-12-13 03:33 115712 ----a-w- c:\windows\SysWow64\ieUnatt.exe
2014-12-17 08:37 . 2014-12-17 08:42 -------- d-----w- c:\programdata\GRAW2
2014-12-16 22:14 . 2014-12-16 22:23 25640 ----a-w- c:\windows\etdrv.sys
2014-12-16 22:14 . 2014-12-17 10:46 30528 ----a-w- c:\windows\GVTDrv64.sys
2014-12-16 17:35 . 2014-12-16 17:35 31648 ----a-w- c:\windows\SysWow64\drivers\HWiNFO64A.SYS
2014-12-16 17:34 . 2014-12-16 17:34 -------- d-----w- c:\program files (x86)\HWiNFO32
2014-12-16 10:11 . 2014-12-16 10:11 -------- d-----w- c:\windows\SysWow64\bitstreams
2014-12-16 10:11 . 2013-10-26 20:30 538126 --s-a-w- c:\windows\SysWow64\libcurl-4.dll
2014-12-16 10:11 . 2013-10-26 20:30 364544 --s-a-w- c:\windows\SysWow64\ssleay32.dll
2014-12-16 10:11 . 2013-10-26 20:30 192512 --s-a-w- c:\windows\SysWow64\libidn-11.dll
2014-12-16 10:11 . 2013-10-26 20:30 171008 --s-a-w- c:\windows\SysWow64\libssh2.dll
2014-12-16 10:11 . 2013-10-26 20:30 1704448 --s-a-w- c:\windows\SysWow64\libeay32.dll
2014-12-16 10:11 . 2013-10-26 20:30 133632 --s-a-w- c:\windows\SysWow64\librtmp.dll
2014-12-16 10:11 . 2013-06-12 15:15 119888 --s-a-w- c:\windows\SysWow64\pthreadGC2.dll
2014-12-16 10:11 . 2013-06-12 15:15 100864 --s-a-w- c:\windows\SysWow64\zlib1.dll
2014-12-16 10:11 . 2012-09-25 23:46 472424 --s-a-w- c:\windows\SysWow64\cudart32_50_35.dll
2014-12-16 10:11 . 2012-05-27 01:36 55808 --s-a-w- c:\windows\SysWow64\pthreadVC2.dll
2014-12-15 22:11 . 2015-01-02 12:00 -------- d-----w- c:\programdata\AVAST Software
2014-12-15 21:34 . 2013-08-11 14:40 43520 --s-a-w- c:\windows\SysWow64\nircmdc.exe
2014-12-13 00:48 . 2014-12-13 00:48 -------- d-----w- c:\programdata\Malwarebytes
2014-12-12 15:27 . 2014-12-12 15:27 -------- d-----w- c:\programdata\Ashampoo
2014-12-12 15:27 . 2014-12-12 15:27 -------- d-----w- c:\program files (x86)\Ashampoo
2014-12-12 07:13 . 2012-05-25 10:06 1706640 ----a-w- c:\windows\RtlExUpd.dll
2014-12-11 14:16 . 2014-12-12 12:13 -------- d-----w- c:\windows\system32\appmgmt
2014-12-11 13:28 . 2014-12-11 13:28 -------- d-----w- C:\Fraps
2014-12-11 13:27 . 2014-12-11 13:36 -------- d-----w- c:\programdata\TmForever
2014-12-11 13:24 . 2014-12-11 13:25 -------- d-----w- c:\program files (x86)\TmNationsForever
2014-12-11 12:08 . 2014-12-12 15:29 -------- d-----w- c:\program files (x86)\Google
2014-12-11 11:35 . 2014-06-27 02:08 2777088 ----a-w- c:\windows\system32\msmpeg2vdec.dll
2014-12-11 11:35 . 2014-06-27 01:45 2285056 ----a-w- c:\windows\SysWow64\msmpeg2vdec.dll
2014-12-11 11:05 . 2013-11-26 08:16 3419136 ----a-w- c:\windows\SysWow64\d2d1.dll
2014-12-11 11:05 . 2013-11-22 22:48 3928064 ----a-w- c:\windows\system32\d2d1.dll
2014-12-11 11:05 . 2011-03-11 06:33 2565632 ----a-w- c:\windows\system32\esent.dll
2014-12-11 11:05 . 2011-03-11 06:30 96768 ----a-w- c:\windows\system32\fsutil.exe
2014-12-11 11:05 . 2011-03-11 06:41 166272 ----a-w- c:\windows\system32\drivers\nvstor.sys
2014-12-11 11:05 . 2011-03-11 06:41 148352 ----a-w- c:\windows\system32\drivers\nvraid.sys
2014-12-11 11:05 . 2011-03-11 06:41 410496 ----a-w- c:\windows\system32\drivers\iaStorV.sys
2014-12-11 11:05 . 2011-03-11 06:41 27008 ----a-w- c:\windows\system32\drivers\amdxata.sys
2014-12-11 11:05 . 2011-03-11 06:41 107904 ----a-w- c:\windows\system32\drivers\amdsata.sys
2014-12-11 11:05 . 2011-03-11 05:33 1699328 ----a-w- c:\windows\SysWow64\esent.dll
2014-12-11 11:05 . 2011-03-11 05:31 74240 ----a-w- c:\windows\SysWow64\fsutil.exe
2014-12-11 11:05 . 2011-03-11 04:37 91648 ----a-w- c:\windows\system32\drivers\USBSTOR.SYS
2014-12-11 11:03 . 2015-01-02 10:44 701616 ----a-w- c:\windows\SysWow64\FlashPlayerApp.exe
2014-12-11 11:03 . 2015-01-02 10:44 71344 ----a-w- c:\windows\SysWow64\FlashPlayerCPLApp.cpl
2014-12-11 11:03 . 2014-12-11 11:03 -------- d-----w- c:\windows\SysWow64\Macromed
2014-12-11 11:03 . 2014-12-11 11:03 -------- d-----w- c:\windows\system32\Macromed
2014-12-11 10:59 . 2012-02-11 06:36 559104 ----a-w- c:\windows\system32\spoolsv.exe
2014-12-11 10:59 . 2012-02-11 06:36 67072 ----a-w- c:\windows\splwow64.exe
2014-12-11 10:41 . 2014-11-11 03:09 1424384 ----a-w- c:\windows\system32\WindowsCodecs.dll
2014-12-11 10:41 . 2014-11-11 02:44 1230336 ----a-w- c:\windows\SysWow64\WindowsCodecs.dll
2014-12-11 10:41 . 2014-11-24 13:04 275080 ------w- c:\windows\system32\MpSigStub.exe
2014-12-11 08:33 . 2014-12-11 08:33 -------- d-----w- c:\windows\SysWow64\Wat
2014-12-11 08:33 . 2014-12-11 08:33 -------- d-----w- c:\windows\system32\Wat
2014-12-11 07:55 . 2013-05-10 05:56 12625920 ----a-w- c:\windows\system32\wmploc.DLL
2014-12-11 07:55 . 2013-05-10 04:30 167424 ----a-w- c:\program files\Windows Media Player\wmplayer.exe
2014-12-11 07:55 . 2013-05-10 03:48 164864 ----a-w- c:\program files (x86)\Windows Media Player\wmplayer.exe
2014-12-11 07:55 . 2013-05-10 04:56 12625408 ----a-w- c:\windows\SysWow64\wmploc.DLL
2014-12-11 07:55 . 2013-05-10 05:56 14631424 ----a-w- c:\windows\system32\wmp.dll
2014-12-11 07:31 . 2014-12-11 07:31 -------- d-----w- c:\windows\Migration
2014-12-11 07:18 . 2013-10-14 17:00 28368 ----a-w- c:\windows\system32\IEUDINIT.EXE
2014-12-11 06:43 . 2014-12-11 06:43 9728 ---ha-w- c:\windows\system32\api-ms-win-downlevel-shlwapi-l1-1-0.dll
2014-12-11 05:42 . 2012-07-26 07:40 2560 ----a-w- c:\windows\system32\drivers\cs-CZ\wdf01000.sys.mui
2014-12-11 04:41 . 2014-07-07 02:06 206848 ----a-w- c:\windows\system32\mfps.dll
2014-12-11 04:41 . 2014-07-07 02:06 55808 ----a-w- c:\windows\system32\rrinstaller.exe
2014-12-11 04:41 . 2014-07-07 02:06 24576 ----a-w- c:\windows\system32\mfpmp.exe
2014-12-11 04:41 . 2014-07-07 02:02 2048 ----a-w- c:\windows\system32\mferror.dll
2014-12-11 04:41 . 2014-07-07 01:40 103424 ----a-w- c:\windows\SysWow64\mfps.dll
2014-12-11 04:41 . 2014-07-07 01:39 50176 ----a-w- c:\windows\SysWow64\rrinstaller.exe
2014-12-11 04:41 . 2014-07-07 01:39 23040 ----a-w- c:\windows\SysWow64\mfpmp.exe
2014-12-11 04:41 . 2014-07-07 01:37 2048 ----a-w- c:\windows\SysWow64\mferror.dll
2014-12-11 04:41 . 2014-10-18 02:05 4121600 ----a-w- c:\windows\system32\mf.dll
2014-12-11 04:41 . 2014-10-18 01:33 3209728 ----a-w- c:\windows\SysWow64\mf.dll
2014-12-11 04:30 . 2012-07-26 02:26 87040 ----a-w- c:\windows\system32\drivers\WUDFPf.sys
2014-12-11 04:30 . 2012-07-26 02:26 198656 ----a-w- c:\windows\system32\drivers\WUDFRd.sys
2014-12-11 04:30 . 2012-07-26 03:08 229888 ----a-w- c:\windows\system32\WUDFHost.exe
2014-12-11 04:30 . 2012-07-26 03:08 84992 ----a-w- c:\windows\system32\WUDFSvc.dll
2014-12-11 04:30 . 2012-07-26 03:08 744448 ----a-w- c:\windows\system32\WUDFx.dll
2014-12-11 04:30 . 2012-07-26 03:08 45056 ----a-w- c:\windows\system32\WUDFCoinstaller.dll
2014-12-11 04:30 . 2012-07-26 03:08 194048 ----a-w- c:\windows\system32\WUDFPlatform.dll
2014-12-11 04:09 . 2012-03-01 06:46 23408 ----a-w- c:\windows\system32\drivers\fs_rec.sys
2014-12-11 04:09 . 2012-03-01 06:28 5120 ----a-w- c:\windows\system32\wmi.dll
2014-12-11 04:09 . 2012-03-01 05:29 5120 ----a-w- c:\windows\SysWow64\wmi.dll
2014-12-11 03:56 . 2014-03-09 21:48 171160 ----a-w- c:\windows\system32\infocardapi.dll
.

[lukas polak]

.
(((((((((((((((((((((((((((((((((((((((( Find3M výpis ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2014-12-11 07:01 . 2014-12-11 07:01 208384 ----a-w- c:\windows\SysWow64\webcheck.dll
2014-12-11 07:01 . 2014-12-11 07:01 243200 ----a-w- c:\windows\system32\webcheck.dll
2014-12-11 01:19 . 2009-07-14 02:36 152576 ----a-w- c:\windows\SysWow64\msclmd.dll
2014-12-11 01:19 . 2009-07-14 02:36 175616 ----a-w- c:\windows\system32\msclmd.dll
.
.
(((((((((((((((((((((((((((((((((( Spouštěcí body v registru )))))))))))))))))))))))))))))))))))))))))))))
.
.
*Poznámka* prázdné záznamy a legitimní výchozí údaje nejsou zobrazeny.
REGEDIT4
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Sidebar"="c:\program files\Windows Sidebar\sidebar.exe" [2010-11-20 1475584]
"DAEMON Tools Lite"="c:\program files (x86)\DAEMON Tools Lite\DTLite.exe" [2014-03-04 3696912]
"CCleaner Monitoring"="c:\program files\CCleaner\CCleaner64.exe" [2014-12-12 7394584]
"ISUSPM Startup"="c:\progra~2\COMMON~1\INSTAL~1\UPDATE~1\isuspm.exe" [2005-02-17 221184]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]
"ISUSScheduler"="c:\program files (x86)\Common Files\InstallShield\UpdateService\issch.exe" [2005-02-17 81920]
"AvastUI.exe"="c:\program files\AVAST Software\Avast\AvastUI.exe" [2015-01-02 5226600]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorAdmin"= 5 (0x5)
"ConsentPromptBehaviorUser"= 3 (0x3)
"EnableUIADesktopToggle"= 0 (0x0)
"SoftwareSASGeneration"= 1 (0x1)
.
[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\session manager]
BootExecute REG_MULTI_SZ autocheck autochk *\0?????????????\0SmartDefragBootTime.exe
.
R2 aswStm;aswStm;c:\windows\system32\drivers\aswStm.sys;c:\windows\SYSNATIVE\drivers\aswStm.sys [x]
R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [x]
R2 SkypeUpdate;Skype Updater;c:\program files (x86)\Skype\Updater\Updater.exe;c:\program files (x86)\Skype\Updater\Updater.exe [x]
R3 AppleChargerSrv;AppleChargerSrv;c:\windows\system32\AppleChargerSrv.exe;c:\windows\SYSNATIVE\AppleChargerSrv.exe [x]
R3 IEEtwCollectorService;Internet Explorer ETW Collector Service;c:\windows\system32\IEEtwCollector.exe;c:\windows\SYSNATIVE\IEEtwCollector.exe [x]
R3 RdpVideoMiniport;Remote Desktop Video Miniport Driver;c:\windows\system32\drivers\rdpvideominiport.sys;c:\windows\SYSNATIVE\drivers\rdpvideominiport.sys [x]
R3 Synth3dVsc;Synth3dVsc;c:\windows\system32\drivers\synth3dvsc.sys;c:\windows\SYSNATIVE\drivers\synth3dvsc.sys [x]
R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys;c:\windows\SYSNATIVE\drivers\tsusbflt.sys [x]
R3 tsusbhub;tsusbhub;c:\windows\system32\drivers\tsusbhub.sys;c:\windows\SYSNATIVE\drivers\tsusbhub.sys [x]
R3 VGPU;VGPU;c:\windows\system32\drivers\rdvgkmd.sys;c:\windows\SYSNATIVE\drivers\rdvgkmd.sys [x]
R3 WatAdminSvc;Služba Technologie aktivace Windows;c:\windows\system32\Wat\WatAdminSvc.exe;c:\windows\SYSNATIVE\Wat\WatAdminSvc.exe [x]
S0 aswRvrt;avast! Revert; [x]
S0 aswVmm;avast! VM Monitor; [x]
S0 SmartDefragDriver;SmartDefragDriver;c:\windows\System32\Drivers\SmartDefragDriver.sys;c:\windows\SYSNATIVE\Drivers\SmartDefragDriver.sys [x]
S1 AppleCharger;AppleCharger;c:\windows\system32\DRIVERS\AppleCharger.sys;c:\windows\SYSNATIVE\DRIVERS\AppleCharger.sys [x]
S1 aswSnx;aswSnx;c:\windows\system32\drivers\aswSnx.sys;c:\windows\SYSNATIVE\drivers\aswSnx.sys [x]
S1 aswSP;aswSP;c:\windows\system32\drivers\aswSP.sys;c:\windows\SYSNATIVE\drivers\aswSP.sys [x]
S1 dtsoftbus01;DAEMON Tools Virtual Bus Driver;c:\windows\system32\DRIVERS\dtsoftbus01.sys;c:\windows\SYSNATIVE\DRIVERS\dtsoftbus01.sys [x]
S1 HWiNFO32;HWiNFO32/64 Kernel Driver;c:\windows\SysWOW64\drivers\HWiNFO64A.SYS;c:\windows\SysWOW64\drivers\HWiNFO64A.SYS [x]
S2 aswHwid;avast! HardwareID;c:\windows\system32\drivers\aswHwid.sys;c:\windows\SYSNATIVE\drivers\aswHwid.sys [x]
S2 aswMonFlt;aswMonFlt;c:\windows\system32\drivers\aswMonFlt.sys;c:\windows\SYSNATIVE\drivers\aswMonFlt.sys [x]
S2 Stereo Service;NVIDIA Stereoscopic 3D Driver Service;c:\program files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe;c:\program files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe [x]
.
.
--- Ostatní služby/ovladače v paměti ---
.
*NewlyCreated* - WS2IFSL
.
Obsah adresáře 'Naplánované úlohy'
.
2015-01-03 c:\windows\Tasks\Adobe Flash Player Updater.job
- c:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2014-12-11 10:44]
.
2015-01-03 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
- c:\program files (x86)\Google\Update\GoogleUpdate.exe [2014-12-11 12:08]
.
2015-01-03 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
- c:\program files (x86)\Google\Update\GoogleUpdate.exe [2014-12-11 12:08]
.
.
--------- X64 Entries -----------
.
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\00avast]
@="{472083B0-C522-11CF-8763-00608CC02F24}"
[HKEY_CLASSES_ROOT\CLSID\{472083B0-C522-11CF-8763-00608CC02F24}]
2015-01-02 12:01 860984 ----a-w- c:\program files\AVAST Software\Avast\ashShA64.dll
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"RtHDVCpl"="c:\program files\Realtek\Audio\HDA\RAVCpl64.exe" [2012-06-11 12503184]
.
------- Doplňkový sken -------
.
uLocal Page = c:\windows\system32\blank.htm
mLocal Page = c:\windows\SysWOW64\blank.htm
TCP: DhcpNameServer = 10.0.0.138
.
.
--------------------- ZAMKNUTÉ KLÍČE V REGISTRU ---------------------
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{B019E3BF-E7E5-453C-A2E4-D2C18CA0866F}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil64_16_0_0_235_ActiveX.exe,-101"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{B019E3BF-E7E5-453C-A2E4-D2C18CA0866F}\Elevation]
"Enabled"=dword:00000001
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{B019E3BF-E7E5-453C-A2E4-D2C18CA0866F}\LocalServer32]
@="c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil64_16_0_0_235_ActiveX.exe"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{B019E3BF-E7E5-453C-A2E4-D2C18CA0866F}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{299817DA-1FAC-4CE2-8F48-A108237013BD}]
@Denied: (A 2) (Everyone)
@="IFlashBroker6"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{299817DA-1FAC-4CE2-8F48-A108237013BD}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{299817DA-1FAC-4CE2-8F48-A108237013BD}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{B019E3BF-E7E5-453C-A2E4-D2C18CA0866F}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil32_16_0_0_235_ActiveX.exe,-101"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{B019E3BF-E7E5-453C-A2E4-D2C18CA0866F}\Elevation]
"Enabled"=dword:00000001
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{B019E3BF-E7E5-453C-A2E4-D2C18CA0866F}\LocalServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil32_16_0_0_235_ActiveX.exe"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{B019E3BF-E7E5-453C-A2E4-D2C18CA0866F}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@="Shockwave Flash Object"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\InprocServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_16_0_0_235.ocx"
"ThreadingModel"="Apartment"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\MiscStatus]
@="0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ProgID]
@="ShockwaveFlash.ShockwaveFlash.16"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_16_0_0_235.ocx, 1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\TypeLib]
@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\Version]
@="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
@="ShockwaveFlash.ShockwaveFlash"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@="Macromedia Flash Factory Object"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\InprocServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_16_0_0_235.ocx"
"ThreadingModel"="Apartment"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ProgID]
@="FlashFactory.FlashFactory.1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_16_0_0_235.ocx, 1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\TypeLib]
@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\Version]
@="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
@="FlashFactory.FlashFactory"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{299817DA-1FAC-4CE2-8F48-A108237013BD}]
@Denied: (A 2) (Everyone)
@="IFlashBroker6"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{299817DA-1FAC-4CE2-8F48-A108237013BD}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{299817DA-1FAC-4CE2-8F48-A108237013BD}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\PCW\Security]
@Denied: (Full) (Everyone)
.
Celkový čas: 2015-01-03 13:29:46
ComboFix-quarantined-files.txt 2015-01-03 12:29
ComboFix2.txt 2015-01-02 20:57
.
Před spuštěním: Volných bajtů: 458 708 312 064
Po spuštění: Volných bajtů: 458 637 697 024
.
- - End Of File - - 4C26638D37AB4B5AAD4B238EDE1FA67F
A36C5E4F47E84449FF07ED3517B43A31

[lukas polak]

aswMBR version 1.0.1.2252 Copyright(c) 2014 AVAST Software
Run date: 2015-01-03 13:32:20
-----------------------------
13:32:20.445 OS Version: Windows x64 6.1.7601 Service Pack 1
13:32:20.445 Number of processors: 2 586 0x603
13:32:20.445 ComputerName: LUK��-PC UserName: LUK��
13:32:21.786 Initialize success
13:32:21.833 VM: initialized successfully
13:32:21.833 VM: Amd CPU BiosDisabled
13:32:25.359 AVAST engine defs: 15010201
13:32:29.898 Disk 0 (boot) \Device\Harddisk0\DR0 -> \Device\0000005e
13:32:29.898 Disk 0 Vendor: ST350041 CV15 Size: 476940MB BusType: 3
13:32:30.023 Disk 0 MBR read successfully
13:32:30.039 Disk 0 MBR scan
13:32:30.039 Disk 0 Windows 7 default MBR code
13:32:30.054 Disk 0 Partition 1 80 (A) 07 HPFS/NTFS NTFS 100 MB offset 2048
13:32:30.070 Disk 0 Boot: NTFS code=1
13:32:30.070 Disk 0 Partition 2 00 07 HPFS/NTFS NTFS 476838 MB offset 206848
13:32:30.101 Disk 0 scanning C:\Windows\system32\drivers
13:32:43.891 Service scanning
13:33:09.616 Modules scanning
13:33:09.631 Disk 0 trace - called modules:
13:33:09.647 ntoskrnl.exe CLASSPNP.SYS disk.sys ACPI.sys storport.sys hal.dll nvstor64.sys
13:33:09.647 1 nt!IofCallDriver -> \Device\Harddisk0\DR0[0xfffffa8004c03060]
13:33:09.663 3 CLASSPNP.SYS[fffff8800140143f] -> nt!IofCallDriver -> [0xfffffa8003c90c60]
13:33:09.663 5 ACPI.sys[fffff88000e0b7a1] -> nt!IofCallDriver -> \Device\0000005e[0xfffffa80049056c0]
13:33:10.099 AVAST engine scan C:\Windows
13:33:12.471 AVAST engine scan C:\Windows\system32
13:36:13.571 AVAST engine scan C:\Windows\system32\drivers
13:36:28.188 AVAST engine scan C:\Users\LUK��
13:37:20.589 Disk 0 MBR has been saved successfully to "C:\Users\LUK��\Documents\MBR.dat"
13:37:20.589 The log file has been saved successfully to "C:\Users\LUK��\Documents\aswMBR.txt"
13:38:02.907 File: C:\Users\LUK��\Downloads\zoek\zoek.exe.com **INFECTED** Win32:Malware-gen
13:38:03.078 File: C:\Users\LUK��\Downloads\zoek\zoek.exe.scr **INFECTED** Win32:Malware-gen
13:38:03.983 AVAST engine scan C:\ProgramData
13:38:44.387 Disk 0 statistics 3762260/0/0 @ 7,77 MB/s
13:38:44.418 Scan finished successfully
13:39:18.535 Disk 0 MBR has been saved successfully to "C:\Users\LUK��\Documents\MBR.dat"
13:39:18.551 The log file has been saved successfully to "C:\Users\LUK��\Documents\aswMBR.txt"

[Orcus]

Combofix nic nevymazal, takže ještě jednou ale v nouzovém režimu.

[lukas polak]

Nejde nouzový režim,, f8 nereaguje

[jaro3]

Stáhni si BootSafe

http://majorgeeks.com/downloadget.php?i ... 22a1a3d1fd

- stáhneš ho, spustíš a zvolíš možnost Safe Mode - Minimal
- klikneš na tlačítko Reboot
V normální režimu použij BootSafe

[lukas polak]

ComboFix 15-01-02.01 - LUKÁŠ 03.01.2015 18:51:57.3.2 - x64 NETWORK
Microsoft Windows 7 Ultimate 6.1.7601.1.1250.420.1029.18.4094.2946 [GMT 1:00]
Spuštěný z: c:\users\LUKÁŠ\Desktop\ComboFix.exe
Použité ovládací přepínače :: c:\users\LUKÁŠ\Desktop\CFscript.txt
AV: avast! Antivirus *Enabled/Updated* {17AD7D40-BA12-9C46-7131-94903A54AD8B}
SP: avast! Antivirus *Enabled/Updated* {ACCC9CA4-9C28-93C8-4B81-AFE241D3E736}
SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
* Vytvořen nový Bod Obnovení
.
FILE ::
"c:\windows\Tasks\GoogleUpdateTaskMachineCore.job"
"c:\windows\Tasks\GoogleUpdateTaskMachineUA.job"
.
.
((((((((((((((((((((((((((((((((((((((( Ostatní výmazy )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
c:\program files (x86)\Google\Update
c:\program files (x86)\Google\Update\1.3.25.11\GoogleCrashHandler.exe
c:\program files (x86)\Google\Update\1.3.25.11\GoogleCrashHandler64.exe
c:\program files (x86)\Google\Update\1.3.25.11\GoogleUpdate.exe
c:\program files (x86)\Google\Update\1.3.25.11\GoogleUpdateBroker.exe
c:\program files (x86)\Google\Update\1.3.25.11\GoogleUpdateComRegisterShell64.exe
c:\program files (x86)\Google\Update\1.3.25.11\GoogleUpdateHelper.msi
c:\program files (x86)\Google\Update\1.3.25.11\GoogleUpdateOnDemand.exe
c:\program files (x86)\Google\Update\1.3.25.11\GoogleUpdateSetup.exe
c:\program files (x86)\Google\Update\1.3.25.11\goopdate.dll
c:\program files (x86)\Google\Update\1.3.25.11\goopdateres_am.dll
c:\program files (x86)\Google\Update\1.3.25.11\goopdateres_ar.dll
c:\program files (x86)\Google\Update\1.3.25.11\goopdateres_bg.dll
c:\program files (x86)\Google\Update\1.3.25.11\goopdateres_bn.dll
c:\program files (x86)\Google\Update\1.3.25.11\goopdateres_ca.dll
c:\program files (x86)\Google\Update\1.3.25.11\goopdateres_cs.dll
c:\program files (x86)\Google\Update\1.3.25.11\goopdateres_da.dll
c:\program files (x86)\Google\Update\1.3.25.11\goopdateres_de.dll
c:\program files (x86)\Google\Update\1.3.25.11\goopdateres_el.dll
c:\program files (x86)\Google\Update\1.3.25.11\goopdateres_en-GB.dll
c:\program files (x86)\Google\Update\1.3.25.11\goopdateres_en.dll
c:\program files (x86)\Google\Update\1.3.25.11\goopdateres_es-419.dll
c:\program files (x86)\Google\Update\1.3.25.11\goopdateres_es.dll
c:\program files (x86)\Google\Update\1.3.25.11\goopdateres_et.dll
c:\program files (x86)\Google\Update\1.3.25.11\goopdateres_fa.dll
c:\program files (x86)\Google\Update\1.3.25.11\goopdateres_fi.dll
c:\program files (x86)\Google\Update\1.3.25.11\goopdateres_fil.dll
c:\program files (x86)\Google\Update\1.3.25.11\goopdateres_fr.dll
c:\program files (x86)\Google\Update\1.3.25.11\goopdateres_gu.dll
c:\program files (x86)\Google\Update\1.3.25.11\goopdateres_hi.dll
c:\program files (x86)\Google\Update\1.3.25.11\goopdateres_hr.dll
c:\program files (x86)\Google\Update\1.3.25.11\goopdateres_hu.dll
c:\program files (x86)\Google\Update\1.3.25.11\goopdateres_id.dll
c:\program files (x86)\Google\Update\1.3.25.11\goopdateres_is.dll
c:\program files (x86)\Google\Update\1.3.25.11\goopdateres_it.dll
c:\program files (x86)\Google\Update\1.3.25.11\goopdateres_iw.dll
c:\program files (x86)\Google\Update\1.3.25.11\goopdateres_ja.dll
c:\program files (x86)\Google\Update\1.3.25.11\goopdateres_kn.dll
c:\program files (x86)\Google\Update\1.3.25.11\goopdateres_ko.dll
c:\program files (x86)\Google\Update\1.3.25.11\goopdateres_lt.dll
c:\program files (x86)\Google\Update\1.3.25.11\goopdateres_lv.dll
c:\program files (x86)\Google\Update\1.3.25.11\goopdateres_ml.dll
c:\program files (x86)\Google\Update\1.3.25.11\goopdateres_mr.dll
c:\program files (x86)\Google\Update\1.3.25.11\goopdateres_ms.dll
c:\program files (x86)\Google\Update\1.3.25.11\goopdateres_nl.dll
c:\program files (x86)\Google\Update\1.3.25.11\goopdateres_no.dll
c:\program files (x86)\Google\Update\1.3.25.11\goopdateres_pl.dll
c:\program files (x86)\Google\Update\1.3.25.11\goopdateres_pt-BR.dll
c:\program files (x86)\Google\Update\1.3.25.11\goopdateres_pt-PT.dll
c:\program files (x86)\Google\Update\1.3.25.11\goopdateres_ro.dll
c:\program files (x86)\Google\Update\1.3.25.11\goopdateres_ru.dll
c:\program files (x86)\Google\Update\1.3.25.11\goopdateres_sk.dll
c:\program files (x86)\Google\Update\1.3.25.11\goopdateres_sl.dll
c:\program files (x86)\Google\Update\1.3.25.11\goopdateres_sr.dll
c:\program files (x86)\Google\Update\1.3.25.11\goopdateres_sv.dll
c:\program files (x86)\Google\Update\1.3.25.11\goopdateres_sw.dll
c:\program files (x86)\Google\Update\1.3.25.11\goopdateres_ta.dll
c:\program files (x86)\Google\Update\1.3.25.11\goopdateres_te.dll
c:\program files (x86)\Google\Update\1.3.25.11\goopdateres_th.dll
c:\program files (x86)\Google\Update\1.3.25.11\goopdateres_tr.dll
c:\program files (x86)\Google\Update\1.3.25.11\goopdateres_uk.dll
c:\program files (x86)\Google\Update\1.3.25.11\goopdateres_ur.dll
c:\program files (x86)\Google\Update\1.3.25.11\goopdateres_vi.dll
c:\program files (x86)\Google\Update\1.3.25.11\goopdateres_zh-CN.dll
c:\program files (x86)\Google\Update\1.3.25.11\goopdateres_zh-TW.dll
c:\program files (x86)\Google\Update\1.3.25.11\npGoogleUpdate3.dll
c:\program files (x86)\Google\Update\1.3.25.11\psmachine.dll
c:\program files (x86)\Google\Update\1.3.25.11\psmachine_64.dll
c:\program files (x86)\Google\Update\1.3.25.11\psuser.dll
c:\program files (x86)\Google\Update\1.3.25.11\psuser_64.dll
c:\program files (x86)\Google\Update\Download\{8A69D345-D564-463C-AFF1-A69D9E530F96}\39.0.2171.95\39.0.2171.95_chrome64_installer.exe
c:\program files (x86)\Google\Update\GoogleUpdate.exe
c:\program files (x86)\Skype\Updater
c:\program files (x86)\Skype\Updater\Updater.dll
c:\program files (x86)\Skype\Updater\Updater.exe
c:\programdata\Spybot - Search & Destroy
c:\programdata\Spybot - Search & Destroy\ClientCount.bin
c:\programdata\Spybot - Search & Destroy\Logs\Firewall.log
c:\programdata\Spybot - Search & Destroy\Logs\Scanner.log
c:\programdata\Spybot - Search & Destroy\Logs\Updates.log
c:\windows\PFRO.log
c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
.
.
((((((((((((((((((((((((((((((((((((((( Ovladače/Služby )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
-------\Service_SkypeUpdate
-------\Service_gupdate
-------\Service_gupdatem
-------\Service_gupdate
-------\Service_gupdatem
.
.
((((((((((((((((((((((((( Soubory vytvořené od 2014-12-03 do 2015-01-03 )))))))))))))))))))))))))))))))
.
.
2015-01-03 17:56 . 2015-01-03 17:56 -------- d-----w- c:\users\Default\AppData\Local\temp
2015-01-03 12:41 . 2014-12-02 10:26 11870360 ----a-w- c:\programdata\Microsoft\Windows Defender\Definition Updates\{660BBD6C-4991-4104-8556-3C8E755B2EB3}\mpengine.dll
2015-01-02 16:45 . 2015-01-02 16:18 24064 ----a-w- c:\windows\zoek-delete.exe
2015-01-02 16:18 . 2015-01-02 16:18 -------- d-----w- C:\zoek_backup
2015-01-02 14:48 . 2015-01-02 16:09 37624 ----a-w- c:\windows\system32\drivers\TrueSight.sys
2015-01-02 14:48 . 2015-01-02 14:48 -------- d-----w- c:\programdata\RogueKiller
2015-01-02 14:26 . 2015-01-02 14:26 -------- d-----w- c:\windows\ERUNT
2015-01-02 12:20 . 2015-01-02 14:19 -------- d-----w- C:\AdwCleaner
2015-01-02 12:01 . 2015-01-02 12:01 116728 ----a-w- c:\windows\system32\drivers\aswStm.sys
2015-01-02 12:01 . 2015-01-02 12:01 436624 ----a-w- c:\windows\system32\drivers\aswSP.sys
2015-01-02 12:01 . 2015-01-02 12:01 267632 ----a-w- c:\windows\system32\drivers\aswVmm.sys
2015-01-02 12:01 . 2015-01-02 12:01 65776 ----a-w- c:\windows\system32\drivers\aswRvrt.sys
2015-01-02 12:01 . 2015-01-02 12:01 83280 ----a-w- c:\windows\system32\drivers\aswMonFlt.sys
2015-01-02 12:01 . 2015-01-02 12:01 29208 ----a-w- c:\windows\system32\drivers\aswHwid.sys
2015-01-02 12:01 . 2015-01-02 12:01 93568 ----a-w- c:\windows\system32\drivers\aswRdr2.sys
2015-01-02 12:01 . 2015-01-02 12:01 1050432 ----a-w- c:\windows\system32\drivers\aswsnx.sys
2015-01-02 12:01 . 2015-01-02 12:01 364512 ----a-w- c:\windows\system32\aswBoot.exe
2015-01-02 12:01 . 2015-01-02 12:01 43152 ----a-w- c:\windows\avastSS.scr
2015-01-02 12:00 . 2015-01-02 12:00 -------- d-----w- c:\program files\AVAST Software
2015-01-02 10:48 . 2014-12-30 14:44 320936 ----a-w- c:\windows\system32\javaws.exe
2014-12-30 14:45 . 2014-12-30 14:45 -------- d-----w- c:\program files (x86)\Common Files\Java
2014-12-30 14:45 . 2015-01-02 10:47 111016 ----a-w- c:\windows\system32\WindowsAccessBridge-64.dll
2014-12-29 22:16 . 2015-01-03 17:26 -------- d-----w- c:\programdata\NVIDIA
2014-12-29 22:15 . 2014-12-13 00:47 620176 ----a-w- c:\windows\SysWow64\nvStreaming.exe
2014-12-29 22:15 . 2014-12-13 08:03 6859408 ----a-w- c:\windows\system32\nvcpl.dll
2014-12-29 22:15 . 2014-12-13 08:03 3513488 ----a-w- c:\windows\system32\nvsvc64.dll
2014-12-29 22:15 . 2014-12-13 08:03 935240 ----a-w- c:\windows\system32\nvvsvc.exe
2014-12-29 22:15 . 2014-12-13 08:03 62608 ----a-w- c:\windows\system32\nvshext.dll
2014-12-29 22:15 . 2014-12-13 08:03 386368 ----a-w- c:\windows\system32\nvmctray.dll
2014-12-29 22:15 . 2014-12-13 08:03 2558608 ----a-w- c:\windows\system32\nvsvcr.dll
2014-12-29 22:15 . 2014-12-12 23:11 4151176 ----a-w- c:\windows\system32\nvcoproc.bin
2014-12-29 22:14 . 2014-12-13 10:08 74056 ----a-w- c:\windows\system32\OpenCL.dll
2014-12-29 22:14 . 2014-12-13 10:08 60560 ----a-w- c:\windows\SysWow64\OpenCL.dll
2014-12-23 08:21 . 2014-12-23 08:21 -------- d-----w- c:\windows\SysWow64\RTCOM
2014-12-23 08:21 . 2014-12-23 08:21 -------- d-----w- c:\program files\Realtek
2014-12-22 20:29 . 2014-12-22 20:29 -------- d-s---w- c:\windows\SysWow64\Microsoft
2014-12-20 18:36 . 1998-10-02 18:00 327168 ----a-w- c:\windows\IsUninst.exe
2014-12-20 15:11 . 2015-01-03 17:56 -------- d-----r- c:\program files (x86)\Skype
2014-12-20 15:11 . 2014-12-20 15:11 -------- d-----w- c:\program files (x86)\Common Files\Skype
2014-12-19 08:37 . 2014-12-19 08:37 -------- d-----w- c:\program files\CCleaner
2014-12-18 08:40 . 2014-12-13 05:09 144384 ----a-w- c:\windows\system32\ieUnatt.exe
2014-12-18 08:40 . 2014-12-13 03:33 115712 ----a-w- c:\windows\SysWow64\ieUnatt.exe
2014-12-17 08:37 . 2014-12-17 08:42 -------- d-----w- c:\programdata\GRAW2
2014-12-16 22:14 . 2014-12-16 22:23 25640 ----a-w- c:\windows\etdrv.sys
2014-12-16 22:14 . 2014-12-17 10:46 30528 ----a-w- c:\windows\GVTDrv64.sys
2014-12-16 17:35 . 2014-12-16 17:35 31648 ----a-w- c:\windows\SysWow64\drivers\HWiNFO64A.SYS
2014-12-16 17:34 . 2014-12-16 17:34 -------- d-----w- c:\program files (x86)\HWiNFO32
2014-12-16 10:11 . 2014-12-16 10:11 -------- d-----w- c:\windows\SysWow64\bitstreams
2014-12-16 10:11 . 2013-10-26 20:30 538126 --s-a-w- c:\windows\SysWow64\libcurl-4.dll
2014-12-16 10:11 . 2013-10-26 20:30 364544 --s-a-w- c:\windows\SysWow64\ssleay32.dll
2014-12-16 10:11 . 2013-10-26 20:30 192512 --s-a-w- c:\windows\SysWow64\libidn-11.dll
2014-12-16 10:11 . 2013-10-26 20:30 171008 --s-a-w- c:\windows\SysWow64\libssh2.dll
2014-12-16 10:11 . 2013-10-26 20:30 1704448 --s-a-w- c:\windows\SysWow64\libeay32.dll
2014-12-16 10:11 . 2013-10-26 20:30 133632 --s-a-w- c:\windows\SysWow64\librtmp.dll
2014-12-16 10:11 . 2013-06-12 15:15 119888 --s-a-w- c:\windows\SysWow64\pthreadGC2.dll
2014-12-16 10:11 . 2013-06-12 15:15 100864 --s-a-w- c:\windows\SysWow64\zlib1.dll
2014-12-16 10:11 . 2012-09-25 23:46 472424 --s-a-w- c:\windows\SysWow64\cudart32_50_35.dll
2014-12-16 10:11 . 2012-05-27 01:36 55808 --s-a-w- c:\windows\SysWow64\pthreadVC2.dll
2014-12-15 22:11 . 2015-01-02 12:00 -------- d-----w- c:\programdata\AVAST Software
2014-12-15 21:34 . 2013-08-11 14:40 43520 --s-a-w- c:\windows\SysWow64\nircmdc.exe
2014-12-13 00:48 . 2014-12-13 00:48 -------- d-----w- c:\programdata\Malwarebytes
2014-12-12 15:27 . 2014-12-12 15:27 -------- d-----w- c:\programdata\Ashampoo
2014-12-12 15:27 . 2014-12-12 15:27 -------- d-----w- c:\program files (x86)\Ashampoo
2014-12-12 07:13 . 2012-05-25 10:06 1706640 ----a-w- c:\windows\RtlExUpd.dll
2014-12-11 14:16 . 2014-12-12 12:13 -------- d-----w- c:\windows\system32\appmgmt
2014-12-11 13:28 . 2014-12-11 13:28 -------- d-----w- C:\Fraps
2014-12-11 13:27 . 2014-12-11 13:36 -------- d-----w- c:\programdata\TmForever
2014-12-11 13:24 . 2014-12-11 13:25 -------- d-----w- c:\program files (x86)\TmNationsForever
2014-12-11 12:08 . 2014-12-12 15:29 -------- d-----w- c:\program files (x86)\Google
2014-12-11 11:35 . 2014-06-27 02:08 2777088 ----a-w- c:\windows\system32\msmpeg2vdec.dll
2014-12-11 11:35 . 2014-06-27 01:45 2285056 ----a-w- c:\windows\SysWow64\msmpeg2vdec.dll
2014-12-11 11:05 . 2013-11-26 08:16 3419136 ----a-w- c:\windows\SysWow64\d2d1.dll
2014-12-11 11:05 . 2013-11-22 22:48 3928064 ----a-w- c:\windows\system32\d2d1.dll
2014-12-11 11:05 . 2011-03-11 06:33 2565632 ----a-w- c:\windows\system32\esent.dll
2014-12-11 11:05 . 2011-03-11 06:30 96768 ----a-w- c:\windows\system32\fsutil.exe
2014-12-11 11:05 . 2011-03-11 06:41 166272 ----a-w- c:\windows\system32\drivers\nvstor.sys
2014-12-11 11:05 . 2011-03-11 06:41 148352 ----a-w- c:\windows\system32\drivers\nvraid.sys
2014-12-11 11:05 . 2011-03-11 06:41 410496 ----a-w- c:\windows\system32\drivers\iaStorV.sys
2014-12-11 11:05 . 2011-03-11 06:41 27008 ----a-w- c:\windows\system32\drivers\amdxata.sys
2014-12-11 11:05 . 2011-03-11 06:41 107904 ----a-w- c:\windows\system32\drivers\amdsata.sys
2014-12-11 11:05 . 2011-03-11 05:33 1699328 ----a-w- c:\windows\SysWow64\esent.dll
2014-12-11 11:05 . 2011-03-11 05:31 74240 ----a-w- c:\windows\SysWow64\fsutil.exe
2014-12-11 11:05 . 2011-03-11 04:37 91648 ----a-w- c:\windows\system32\drivers\USBSTOR.SYS
2014-12-11 11:03 . 2015-01-02 10:44 701616 ----a-w- c:\windows\SysWow64\FlashPlayerApp.exe
2014-12-11 11:03 . 2015-01-02 10:44 71344 ----a-w- c:\windows\SysWow64\FlashPlayerCPLApp.cpl
2014-12-11 11:03 . 2014-12-11 11:03 -------- d-----w- c:\windows\SysWow64\Macromed
2014-12-11 11:03 . 2014-12-11 11:03 -------- d-----w- c:\windows\system32\Macromed
2014-12-11 10:59 . 2012-02-11 06:36 559104 ----a-w- c:\windows\system32\spoolsv.exe
2014-12-11 10:59 . 2012-02-11 06:36 67072 ----a-w- c:\windows\splwow64.exe
2014-12-11 10:41 . 2014-11-11 03:09 1424384 ----a-w- c:\windows\system32\WindowsCodecs.dll
2014-12-11 10:41 . 2014-11-11 02:44 1230336 ----a-w- c:\windows\SysWow64\WindowsCodecs.dll
2014-12-11 10:41 . 2014-11-24 13:04 275080 ------w- c:\windows\system32\MpSigStub.exe
2014-12-11 08:33 . 2014-12-11 08:33 -------- d-----w- c:\windows\SysWow64\Wat
2014-12-11 08:33 . 2014-12-11 08:33 -------- d-----w- c:\windows\system32\Wat
2014-12-11 07:55 . 2013-05-10 05:56 12625920 ----a-w- c:\windows\system32\wmploc.DLL
2014-12-11 07:55 . 2013-05-10 04:30 167424 ----a-w- c:\program files\Windows Media Player\wmplayer.exe
2014-12-11 07:55 . 2013-05-10 03:48 164864 ----a-w- c:\program files (x86)\Windows Media Player\wmplayer.exe
2014-12-11 07:55 . 2013-05-10 04:56 12625408 ----a-w- c:\windows\SysWow64\wmploc.DLL
2014-12-11 07:55 . 2013-05-10 05:56 14631424 ----a-w- c:\windows\system32\wmp.dll
2014-12-11 07:31 . 2014-12-11 07:31 -------- d-----w- c:\windows\Migration
2014-12-11 07:18 . 2013-10-14 17:00 28368 ----a-w- c:\windows\system32\IEUDINIT.EXE
2014-12-11 06:43 . 2014-12-11 06:43 9728 ---ha-w- c:\windows\system32\api-ms-win-downlevel-shlwapi-l1-1-0.dll
2014-12-11 05:42 . 2012-07-26 07:40 2560 ----a-w- c:\windows\system32\drivers\cs-CZ\wdf01000.sys.mui
2014-12-11 04:41 . 2014-07-07 02:06 206848 ----a-w- c:\windows\system32\mfps.dll
2014-12-11 04:41 . 2014-07-07 02:06 55808 ----a-w- c:\windows\system32\rrinstaller.exe
2014-12-11 04:41 . 2014-07-07 02:06 24576 ----a-w- c:\windows\system32\mfpmp.exe
2014-12-11 04:41 . 2014-07-07 02:02 2048 ----a-w- c:\windows\system32\mferror.dll
2014-12-11 04:41 . 2014-07-07 01:40 103424 ----a-w- c:\windows\SysWow64\mfps.dll
2014-12-11 04:41 . 2014-07-07 01:39 50176 ----a-w- c:\windows\SysWow64\rrinstaller.exe
2014-12-11 04:41 . 2014-07-07 01:39 23040 ----a-w- c:\windows\SysWow64\mfpmp.exe
2014-12-11 04:41 . 2014-07-07 01:37 2048 ----a-w- c:\windows\SysWow64\mferror.dll
2014-12-11 04:41 . 2014-10-18 02:05 4121600 ----a-w- c:\windows\system32\mf.dll
2014-12-11 04:41 . 2014-10-18 01:33 3209728 ----a-w- c:\windows\SysWow64\mf.dll
2014-12-11 04:30 . 2012-07-26 02:26 87040 ----a-w- c:\windows\system32\drivers\WUDFPf.sys
2014-12-11 04:30 . 2012-07-26 02:26 198656 ----a-w- c:\windows\system32\drivers\WUDFRd.sys
2014-12-11 04:30 . 2012-07-26 03:08 229888 ----a-w- c:\windows\system32\WUDFHost.exe
2014-12-11 04:30 . 2012-07-26 03:08 84992 ----a-w- c:\windows\system32\WUDFSvc.dll
2014-12-11 04:30 . 2012-07-26 03:08 744448 ----a-w- c:\windows\system32\WUDFx.dll
2014-12-11 04:30 . 2012-07-26 03:08 45056 ----a-w- c:\windows\system32\WUDFCoinstaller.dll
2014-12-11 04:30 . 2012-07-26 03:08 194048 ----a-w- c:\windows\system32\WUDFPlatform.dll
2014-12-11 04:09 . 2012-03-01 06:46 23408 ----a-w- c:\windows\system32\drivers\fs_rec.sys
2014-12-11 04:09 . 2012-03-01 06:28 5120 ----a-w- c:\windows\system32\wmi.dll
2014-12-11 04:09 . 2012-03-01 05:29 5120 ----a-w- c:\windows\SysWow64\wmi.dll
2014-12-11 03:56 . 2014-03-09 21:48 171160 ----a-w- c:\windows\system32\infocardapi.dll
2014-12-11 03:56 . 2014-03-09 21:48 1389208 ----a-w- c:\windows\system32\icardagt.exe
.
.
(((((((((((((((((((((((((((((((((((((((( Find3M výpis ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2014-12-11 07:01 . 2014-12-11 07:01 208384 ----a-w- c:\windows\SysWow64\webcheck.dll
2014-12-11 07:01 . 2014-12-11 07:01 243200 ----a-w- c:\windows\system32\webcheck.dll
2014-12-11 01:19 . 2009-07-14 02:36 152576 ----a-w- c:\windows\SysWow64\msclmd.dll
2014-12-11 01:19 . 2009-07-14 02:36 175616 ----a-w- c:\windows\system32\msclmd.dll
.
.
(((((((((((((((((((((((((((((((((( Spouštěcí body v registru )))))))))))))))))))))))))))))))))))))))))))))
.
.
*Poznámka* prázdné záznamy a legitimní výchozí údaje nejsou zobrazeny.
REGEDIT4
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Sidebar"="c:\program files\Windows Sidebar\sidebar.exe" [2010-11-20 1475584]
"DAEMON Tools Lite"="c:\program files (x86)\DAEMON Tools Lite\DTLite.exe" [2014-03-04 3696912]
"CCleaner Monitoring"="c:\program files\CCleaner\CCleaner64.exe" [2014-12-12 7394584]
"ISUSPM Startup"="c:\progra~2\COMMON~1\INSTAL~1\UPDATE~1\isuspm.exe" [2005-02-17 221184]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]
"ISUSScheduler"="c:\program files (x86)\Common Files\InstallShield\UpdateService\issch.exe" [2005-02-17 81920]
"AvastUI.exe"="c:\program files\AVAST Software\Avast\AvastUI.exe" [2015-01-02 5226600]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorAdmin"= 5 (0x5)
"ConsentPromptBehaviorUser"= 3 (0x3)
"EnableUIADesktopToggle"= 0 (0x0)
"SoftwareSASGeneration"= 1 (0x1)
.
[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\session manager]
BootExecute REG_MULTI_SZ autocheck autochk *\0?????????????\0SmartDefragBootTime.exe
.

[lukas polak]

R0 aswRvrt;avast! Revert; [x]
R0 aswVmm;avast! VM Monitor; [x]
R1 AppleCharger;AppleCharger;c:\windows\system32\DRIVERS\AppleCharger.sys;c:\windows\SYSNATIVE\DRIVERS\AppleCharger.sys [x]
R1 aswSnx;aswSnx;c:\windows\system32\drivers\aswSnx.sys;c:\windows\SYSNATIVE\drivers\aswSnx.sys [x]
R1 aswSP;aswSP;c:\windows\system32\drivers\aswSP.sys;c:\windows\SYSNATIVE\drivers\aswSP.sys [x]
R1 HWiNFO32;HWiNFO32/64 Kernel Driver;c:\windows\SysWOW64\drivers\HWiNFO64A.SYS;c:\windows\SysWOW64\drivers\HWiNFO64A.SYS [x]
R2 aswHwid;avast! HardwareID;c:\windows\system32\drivers\aswHwid.sys;c:\windows\SYSNATIVE\drivers\aswHwid.sys [x]
R2 aswMonFlt;aswMonFlt;c:\windows\system32\drivers\aswMonFlt.sys;c:\windows\SYSNATIVE\drivers\aswMonFlt.sys [x]
R2 aswStm;aswStm;c:\windows\system32\drivers\aswStm.sys;c:\windows\SYSNATIVE\drivers\aswStm.sys [x]
R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [x]
R2 Stereo Service;NVIDIA Stereoscopic 3D Driver Service;c:\program files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe;c:\program files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe [x]
R3 AppleChargerSrv;AppleChargerSrv;c:\windows\system32\AppleChargerSrv.exe;c:\windows\SYSNATIVE\AppleChargerSrv.exe [x]
R3 IEEtwCollectorService;Internet Explorer ETW Collector Service;c:\windows\system32\IEEtwCollector.exe;c:\windows\SYSNATIVE\IEEtwCollector.exe [x]
R3 RdpVideoMiniport;Remote Desktop Video Miniport Driver;c:\windows\system32\drivers\rdpvideominiport.sys;c:\windows\SYSNATIVE\drivers\rdpvideominiport.sys [x]
R3 Synth3dVsc;Synth3dVsc;c:\windows\system32\drivers\synth3dvsc.sys;c:\windows\SYSNATIVE\drivers\synth3dvsc.sys [x]
R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys;c:\windows\SYSNATIVE\drivers\tsusbflt.sys [x]
R3 tsusbhub;tsusbhub;c:\windows\system32\drivers\tsusbhub.sys;c:\windows\SYSNATIVE\drivers\tsusbhub.sys [x]
R3 VGPU;VGPU;c:\windows\system32\drivers\rdvgkmd.sys;c:\windows\SYSNATIVE\drivers\rdvgkmd.sys [x]
R3 WatAdminSvc;Služba Technologie aktivace Windows;c:\windows\system32\Wat\WatAdminSvc.exe;c:\windows\SYSNATIVE\Wat\WatAdminSvc.exe [x]
S0 SmartDefragDriver;SmartDefragDriver;c:\windows\System32\Drivers\SmartDefragDriver.sys;c:\windows\SYSNATIVE\Drivers\SmartDefragDriver.sys [x]
S1 dtsoftbus01;DAEMON Tools Virtual Bus Driver;c:\windows\system32\DRIVERS\dtsoftbus01.sys;c:\windows\SYSNATIVE\DRIVERS\dtsoftbus01.sys [x]
.
.
Obsah adresáře 'Naplánované úlohy'
.
2015-01-03 c:\windows\Tasks\Adobe Flash Player Updater.job
- c:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2014-12-11 10:44]
.
.
--------- X64 Entries -----------
.
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\00avast]
@="{472083B0-C522-11CF-8763-00608CC02F24}"
[HKEY_CLASSES_ROOT\CLSID\{472083B0-C522-11CF-8763-00608CC02F24}]
2015-01-02 12:01 860984 ----a-w- c:\program files\AVAST Software\Avast\ashShA64.dll
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"RtHDVCpl"="c:\program files\Realtek\Audio\HDA\RAVCpl64.exe" [2012-06-11 12503184]
.
------- Doplňkový sken -------
.
uLocal Page = c:\windows\system32\blank.htm
mLocal Page = c:\windows\SysWOW64\blank.htm
TCP: DhcpNameServer = 10.0.0.138
.
.
--------------------- ZAMKNUTÉ KLÍČE V REGISTRU ---------------------
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{B019E3BF-E7E5-453C-A2E4-D2C18CA0866F}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil64_16_0_0_235_ActiveX.exe,-101"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{B019E3BF-E7E5-453C-A2E4-D2C18CA0866F}\Elevation]
"Enabled"=dword:00000001
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{B019E3BF-E7E5-453C-A2E4-D2C18CA0866F}\LocalServer32]
@="c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil64_16_0_0_235_ActiveX.exe"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{B019E3BF-E7E5-453C-A2E4-D2C18CA0866F}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{299817DA-1FAC-4CE2-8F48-A108237013BD}]
@Denied: (A 2) (Everyone)
@="IFlashBroker6"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{299817DA-1FAC-4CE2-8F48-A108237013BD}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{299817DA-1FAC-4CE2-8F48-A108237013BD}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
.
Celkový čas: 2015-01-03 19:01:00 - počítač byl restartován
ComboFix-quarantined-files.txt 2015-01-03 18:01
ComboFix2.txt 2015-01-03 12:29
ComboFix3.txt 2015-01-02 20:57
.
Před spuštěním: Volných bajtů: 458 829 303 808
Po spuštění: Volných bajtů: 458 329 853 952
.
- - End Of File - - 37A728DEC3F7979EE82A51A66DEBF564
A36C5E4F47E84449FF07ED3517B43A31

[jaro3]

ComboFix se odinstaluje takto:
Start-Spustit a zadej ComboFix /Uninstall

Vyčisti systém CCleanerem

Stáhni si OTC

na plochu. Poklepej na něj. Potom klikni na Clean up!.
Restartuj PC , pokud Ti bude doporučeno.


Vlož nový log z HJT + info o problémech.