Prosím o kontrolu logu.

[huklorcz]

ComboFix 15-10-28.01 - Jakub Staněk 30.10.2015 0:15.1.4 - x86
Microsoft Windows 7 Home Premium 6.1.7601.1.1250.420.1029.18.2697.1475 [GMT 1:00]
Spuštěný z: c:\users\Jakub Stanýk\Desktop\ComboFix.exe
AV: avast! Antivirus *Disabled/Updated* {17AD7D40-BA12-9C46-7131-94903A54AD8B}
SP: avast! Antivirus *Disabled/Updated* {ACCC9CA4-9C28-93C8-4B81-AFE241D3E736}
SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.
.
((((((((((((((((((((((((((((((((((((((( Ostatní výmazy )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
c:\windows\PFRO.log
c:\windows\system32\dlumd10.dll
c:\windows\system32\dlumd11.dll
c:\windows\system32\dlumd9.dll
.
.
((((((((((((((((((((((((( Soubory vytvořené od 2015-09-28 do 2015-10-29 )))))))))))))))))))))))))))))))
.
.
2015-10-29 23:22 . 2015-10-29 23:22 -------- d-----w- c:\users\Default\AppData\Local\temp
2015-10-29 23:04 . 2015-10-29 23:04 -------- d-----w- c:\programdata\Validity
2015-10-29 22:59 . 2014-02-13 22:59 24064 ----a-w- c:\windows\zoek-delete.exe
2015-10-29 22:40 . 2015-10-29 22:58 -------- d-----w- C:\zoek_backup
2015-10-29 20:48 . 2015-10-29 22:36 35064 ----a-w- c:\windows\system32\drivers\TrueSight.sys
2015-10-29 20:48 . 2015-10-29 22:15 -------- d-----w- c:\programdata\RogueKiller
2015-10-29 19:25 . 2015-10-29 20:30 170200 ----a-w- c:\windows\system32\drivers\MBAMSwissArmy.sys
2015-10-29 19:24 . 2015-10-29 19:24 -------- d-----w- c:\program files\Malwarebytes Anti-Malware
2015-10-29 19:24 . 2015-10-29 19:24 -------- d-----w- c:\programdata\Malwarebytes
2015-10-29 19:24 . 2015-10-05 08:50 51928 ----a-w- c:\windows\system32\drivers\mwac.sys
2015-10-29 19:24 . 2015-10-05 08:50 94936 ----a-w- c:\windows\system32\drivers\mbamchameleon.sys
2015-10-29 19:24 . 2015-10-05 08:50 23256 ----a-w- c:\windows\system32\drivers\mbam.sys
2015-10-29 19:14 . 2015-10-29 20:39 -------- d-----w- C:\AdwCleaner
2015-10-29 18:47 . 2015-10-29 18:47 -------- d-----w- c:\windows\system32\SPReview
2015-10-29 18:46 . 2015-10-29 18:46 -------- d-----w- c:\windows\system32\EventProviders
2015-10-29 02:43 . 2015-10-29 02:43 -------- d-----w- c:\programdata\AMD
2015-10-29 02:43 . 2015-10-29 02:43 -------- d-----w- c:\program files\AMD AVT
2015-10-29 02:38 . 2015-10-29 02:40 -------- d-----w- c:\program files\ATI Technologies
2015-10-29 02:38 . 2015-10-29 02:38 -------- d-----w- c:\program files\ATI
2015-10-29 02:30 . 2010-11-20 12:17 322048 ----a-w- c:\windows\system32\RMActivate.exe
2015-10-29 02:29 . 2010-11-20 12:21 1175040 ----a-w- c:\windows\system32\WsmSvc.dll
2015-10-29 02:28 . 2010-11-20 12:21 134656 ----a-w- c:\windows\system32\WinSCard.dll
2015-10-29 02:27 . 2010-11-20 12:21 507392 ----a-w- c:\windows\system32\wmdrmdev.dll
2015-10-29 02:26 . 2010-11-20 12:21 189952 ----a-w- c:\windows\system32\wdscore.dll
2015-10-29 02:25 . 2010-11-20 12:21 363008 ----a-w- c:\windows\system32\wbemcomn.dll
2015-10-29 02:25 . 2010-11-20 12:19 606208 ----a-w- c:\windows\system32\wbem\fastprox.dll
2015-10-28 21:14 . 2015-10-28 21:14 -------- d-----w- c:\program files\Intel Driver Update Utility
2015-10-28 21:10 . 2015-10-28 21:10 -------- d-----w- c:\programdata\ATI
2015-10-28 20:53 . 2015-04-23 18:19 42720 ----a-w- c:\windows\system32\drivers\amdkmpfd.sys
2015-10-28 20:50 . 2015-10-28 20:50 0 ----a-w- c:\windows\ativpsrm.bin
2015-10-28 20:47 . 2015-10-28 20:47 -------- d-----w- c:\program files\Common Files\ATI Technologies
2015-10-28 20:46 . 2015-10-29 01:18 -------- d-----w- c:\program files\AMD
2015-10-28 20:34 . 2015-10-28 20:34 207872 ----a-w- c:\windows\PAExec.exe
2015-10-28 20:17 . 2015-10-28 20:19 -------- d-----w- c:\program files\Raptr
2015-10-28 20:10 . 2015-10-29 18:33 -------- d-----w- C:\AMD
2015-10-28 19:40 . 2015-10-28 19:40 -------- d-----w- c:\program files\CCleaner
2015-10-28 19:08 . 2015-10-28 19:08 -------- d-----w- c:\program files\7-Zip
2015-10-28 18:54 . 2009-09-04 16:29 235344 ----a-w- c:\windows\system32\d3dx11_42.dll
2015-10-28 18:53 . 2005-05-26 14:34 2297552 ----a-w- c:\windows\system32\d3dx9_26.dll
2015-10-28 16:18 . 2015-10-28 16:18 -------- d-----w- c:\program files\Microsoft.NET
2015-10-28 00:07 . 2015-10-28 00:07 -------- d-----w- c:\windows\system32\vbox
2015-10-28 00:05 . 2015-10-28 00:05 208664 ----a-w- c:\windows\system32\drivers\aswVmm.sys
2015-10-28 00:05 . 2015-10-28 00:05 115640 ----a-w- c:\windows\system32\drivers\aswStm.sys
2015-10-28 00:05 . 2015-10-28 00:05 49776 ----a-w- c:\windows\system32\drivers\aswRvrt.sys
2015-10-28 00:05 . 2015-10-28 00:05 434184 ----a-w- c:\windows\system32\drivers\aswSP.sys
2015-10-28 00:05 . 2015-10-28 00:05 81728 ----a-w- c:\windows\system32\drivers\aswRdr2.sys
2015-10-28 00:05 . 2015-10-28 00:05 76000 ----a-w- c:\windows\system32\drivers\aswMonFlt.sys
2015-10-28 00:05 . 2015-10-28 00:05 24016 ----a-w- c:\windows\system32\drivers\aswHwid.sys
2015-10-28 00:05 . 2015-10-28 00:05 789296 ----a-w- c:\windows\system32\drivers\aswSnx.sys
2015-10-28 00:05 . 2015-10-28 00:05 107984 ----a-w- c:\windows\system32\drivers\ngvss.sys
2015-10-28 00:05 . 2015-10-28 00:05 313472 ----a-w- c:\windows\system32\aswBoot.exe
2015-10-28 00:05 . 2015-10-28 00:05 43112 ----a-w- c:\windows\avastSS.scr
2015-10-27 23:59 . 2015-10-27 23:59 -------- d-----w- c:\program files\AVAST Software
2015-10-27 23:58 . 2015-10-27 23:58 -------- d-----w- c:\programdata\AVAST Software
2015-10-27 23:28 . 2013-06-18 15:22 77528 ----a-w- c:\windows\system32\RtNicProp32.dll
2015-10-27 23:28 . 2013-06-18 15:22 669912 ----a-w- c:\windows\system32\drivers\Rt86win7.sys
2015-10-27 23:28 . 2013-06-18 15:22 102104 ----a-w- c:\windows\system32\RTNUninst32.dll
2015-10-27 23:27 . 2015-10-27 23:28 -------- d-----w- c:\program files\Realtek
2015-10-27 23:21 . 2015-10-27 23:21 -------- d-----w- c:\program files\Common Files\Intel Corporation
2015-10-27 23:12 . 2015-10-27 23:14 -------- d-----w- c:\windows\system32\MRT
2015-10-27 23:04 . 2015-10-27 23:04 -------- d-----w- c:\windows\system32\ArcVCapRender
2015-10-27 23:04 . 2012-02-03 08:42 31296 ----a-w- c:\windows\system32\arcvcapcoin.dll
2015-10-27 23:04 . 2012-02-03 08:42 37952 ----a-w- c:\windows\system32\drivers\ArcSoftVCapture.sys
2015-10-27 23:04 . 2015-10-27 23:04 -------- d-----w- c:\program files\Arcsoft
2015-10-27 22:57 . 2015-10-27 22:57 -------- d-----w- c:\program files\Synaptics
2015-10-27 22:55 . 2015-10-27 22:55 -------- d-----w- c:\program files\DIFX
2015-10-27 22:55 . 2015-10-27 22:55 -------- d-----w- c:\programdata\HP Mouse Suite Config
2015-10-27 22:52 . 2015-10-27 22:52 -------- d-----w- c:\program files\HP HD Webcam Driver
2015-10-27 22:52 . 2012-09-23 12:02 1894008 ----a-w- c:\windows\system32\drivers\SPUVCBv.sys
2015-10-27 22:52 . 2012-08-29 15:54 210808 ----a-w- c:\windows\system32\DextUVCB.ax
2015-10-27 22:52 . 2012-07-17 15:52 226680 ----a-w- c:\windows\system32\CoInstaller.dll
2015-10-27 22:52 . 2012-01-05 15:30 94776 ----a-w- c:\windows\un_dext.exe
2015-10-27 22:52 . 2012-01-05 15:30 74616 ----a-w- c:\windows\SPRemove.exe
2015-10-27 22:52 . 2012-04-02 14:59 3584 ----a-w- c:\windows\system32\sigfile.exe
2015-10-27 22:50 . 2015-10-27 22:50 -------- d-----w- c:\program files\Validity Sensors
2015-10-27 22:38 . 2013-01-17 22:27 16344 ----a-w- c:\windows\system32\drivers\IntelMEFWVer.dll
2015-10-27 22:38 . 2015-10-28 21:14 -------- d-----w- c:\programdata\Intel
2015-10-27 22:38 . 2015-10-27 22:38 -------- d-----w- c:\program files\Common Files\postureAgent
2015-10-27 22:33 . 2012-10-16 06:52 41984 ----a-w- c:\windows\system32\drivers\USB3Ver.dll
2015-10-27 22:32 . 2012-01-16 11:06 53248 ----a-w- c:\windows\system32\CSVer.dll
2015-10-27 22:28 . 2012-11-12 19:04 8013824 ----a-w- c:\windows\system32\IDTNHP.dll
2015-10-27 22:28 . 2012-11-12 19:04 8003072 ----a-w- c:\windows\system32\IDTNGUI.exe
2015-10-27 22:28 . 2012-11-12 19:04 6111232 ----a-w- c:\windows\system32\stlang.dll
2015-10-27 22:18 . 2015-10-27 22:18 -------- d-----w- c:\program files\JMicron
2015-10-27 22:18 . 2015-10-27 22:18 -------- d-----w- c:\windows\system32\SDA
2015-10-27 21:58 . 2012-07-26 03:39 526952 ----a-w- c:\windows\system32\drivers\Wdf01000.sys
2015-10-27 21:58 . 2012-07-26 03:39 47720 ----a-w- c:\windows\system32\drivers\WdfLdr.sys
2015-10-27 21:58 . 2012-07-26 02:46 9728 ----a-w- c:\windows\system32\Wdfres.dll
2015-10-27 21:56 . 2012-12-04 14:50 12800 ------w- c:\windows\EricssonMobileBroadbandFWMBIMVer.dll
2015-10-27 21:53 . 2012-09-04 06:21 6656 ----a-w- c:\windows\system32\KBDTUQ.DLL
2015-10-27 21:53 . 2012-09-04 06:21 6656 ----a-w- c:\windows\system32\KBDTUF.DLL
2015-10-27 21:53 . 2012-09-04 06:26 626176 ----a-w- c:\windows\system32\usp10.dll
2015-10-27 21:52 . 2011-11-05 02:57 258560 ----a-w- c:\windows\system32\drivers\usbhub.sys
2015-10-27 21:52 . 2011-11-05 02:57 76288 ----a-w- c:\windows\system32\drivers\usbccgp.sys
2015-10-27 21:52 . 2011-11-05 02:57 284672 ----a-w- c:\windows\system32\drivers\usbport.sys
2015-10-27 21:52 . 2011-11-05 02:57 43008 ----a-w- c:\windows\system32\drivers\usbehci.sys
2015-10-27 21:52 . 2011-11-05 02:57 20480 ----a-w- c:\windows\system32\drivers\usbohci.sys
2015-10-27 21:52 . 2011-11-05 02:57 24064 ----a-w- c:\windows\system32\drivers\usbuhci.sys
2015-10-27 21:52 . 2011-11-05 02:57 5888 ----a-w- c:\windows\system32\drivers\usbd.sys
2015-10-27 21:52 . 2011-09-18 00:59 40960 ----a-w- c:\windows\system32\wwanprotdim.dll
2015-10-27 21:52 . 2011-09-18 00:59 186368 ----a-w- c:\windows\system32\wwansvc.dll
2015-10-27 21:52 . 2011-07-15 04:34 728448 ----a-w- c:\windows\system32\drivers\dxgkrnl.sys
2015-10-27 21:52 . 2011-07-15 04:34 219008 ----a-w- c:\windows\system32\drivers\dxgmms1.sys
2015-10-27 21:52 . 2010-11-20 11:56 107520 ----a-w- c:\windows\system32\cdd.dll
2015-10-27 21:51 . 2011-02-25 05:40 246144 ----a-w- c:\windows\system32\drivers\volsnap.sys
2015-10-27 21:51 . 2010-12-29 10:26 712576 ----a-w- c:\windows\system32\drivers\ndis.sys
2015-10-27 21:51 . 2011-01-14 05:38 119808 ----a-w- c:\windows\system32\umpo.dll
2015-10-27 21:42 . 2015-10-27 22:02 -------- d-----w- c:\windows\Hewlett-Packard
2015-10-27 21:13 . 2015-10-27 21:13 -------- d-----w- c:\users\Public\CyberLink
2015-10-27 21:10 . 2015-10-27 21:10 -------- d-----w- c:\programdata\CyberLink
2015-10-27 21:10 . 2015-10-27 21:10 -------- dc----w- c:\windows\system32\DRVSTORE
2015-10-27 21:10 . 2011-12-26 20:37 73712 ----a-w- c:\windows\system32\drivers\CLVirtualDrive.sys
2015-10-27 21:10 . 2015-10-27 21:10 -------- d-----w- c:\program files\Common Files\CyberLink
2015-10-27 21:09 . 2015-10-27 21:10 -------- d-----w- c:\program files\CyberLink
2015-10-27 21:08 . 2015-10-27 21:10 -------- d-----w- c:\programdata\install_clap
2015-10-27 20:47 . 2015-10-27 20:47 -------- d-----w- c:\programdata\McAfee
2015-10-27 20:41 . 2015-10-29 01:43 -------- d-----w- c:\programdata\HPQLOG
2015-10-27 20:41 . 2015-10-27 20:41 -------- d-----w- c:\programdata\Macrovision
2015-10-27 20:23 . 2015-10-27 20:23 -------- d-----w- c:\program files\HP USB Port Replicator
2015-10-27 20:22 . 2015-10-27 20:22 -------- d-----w- c:\program files\HP
2015-10-27 20:22 . 2015-10-27 20:22 -------- d-----w- c:\program files\DisplayLink Core Software
2015-10-27 20:16 . 2015-10-27 20:16 -------- d-----w- c:\program files\Common Files\Telespree
2015-10-27 20:10 . 2015-10-27 20:10 -------- d-----w- c:\program files\Evernote
2015-10-27 20:05 . 2013-06-05 15:38 16504 ----a-w- c:\windows\system32\pdfc_port.dll
2015-10-27 20:05 . 2015-10-27 20:05 -------- d-----w- c:\program files\PDF Complete
.
.
(((((((((((((((((((((((((((((((((((((((( Find3M výpis ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2015-10-29 18:55 . 2009-07-14 02:05 152576 ----a-w- c:\windows\system32\msclmd.dll
2015-08-04 06:28 . 2015-08-04 06:28 71704 ----a-w- c:\windows\system32\atimpc32.dll
2015-08-04 06:28 . 2015-08-04 06:28 71704 ----a-w- c:\windows\system32\amdpcom32.dll
2015-08-04 06:28 . 2015-08-04 06:28 133016 ----a-w- c:\windows\system32\atiuxpag.dll
2015-08-04 06:28 . 2015-08-04 06:28 102616 ----a-w- c:\windows\system32\atiu9pag.dll
2015-08-04 06:28 . 2015-08-04 06:28 1193904 ----a-w- c:\windows\system32\aticfx32.dll
2015-08-04 06:28 . 2015-08-04 06:28 10094152 ----a-w- c:\windows\system32\atidxx32.dll
2015-08-04 06:28 . 2015-08-04 06:28 7929616 ----a-w- c:\windows\system32\atiumdva.dll
2015-08-04 06:28 . 2015-08-04 06:28 7408936 ----a-w- c:\windows\system32\atiumdag.dll
2015-08-04 06:25 . 2015-08-04 06:25 268488 ----a-w- c:\windows\system32\drivers\amdacpksd.sys
2015-08-04 06:21 . 2015-08-04 06:21 19503104 ----a-w- c:\windows\system32\drivers\atikmdag.sys
2015-08-04 06:19 . 2015-08-04 06:19 203776 ----a-w- c:\windows\system32\clinfo.exe
2015-08-04 06:19 . 2015-08-04 06:19 995342 ----a-w- c:\windows\system32\amdocl_as32.exe
2015-08-04 06:19 . 2015-08-04 06:19 798734 ----a-w- c:\windows\system32\amdocl_ld32.exe
2015-08-04 06:14 . 2015-08-04 06:14 39714304 ----a-w- c:\windows\system32\amdocl.dll
2015-08-04 06:09 . 2015-08-04 06:09 59392 ----a-w- c:\windows\system32\OpenCL.dll
2015-08-04 05:57 . 2015-08-04 05:57 22318592 ----a-w- c:\windows\system32\amdocl12cl.dll
2015-08-04 04:12 . 2015-08-04 04:12 113664 ----a-w- c:\windows\system32\mantle32.dll
2015-08-04 03:43 . 2015-08-04 03:43 5068288 ----a-w- c:\windows\system32\amdmantle32.dll
2015-08-04 03:21 . 2015-08-04 03:21 86528 ----a-w- c:\windows\system32\mantleaxl32.dll
2015-08-04 02:32 . 2015-08-04 02:32 25299968 ----a-w- c:\windows\system32\atioglxx.dll
2015-08-04 02:25 . 2015-08-04 02:25 367104 ----a-w- c:\windows\system32\atiapfxx.exe
2015-08-04 02:25 . 2015-08-04 02:25 52224 ----a-w- c:\windows\system32\aticalrt.dll
2015-08-04 02:24 . 2015-08-04 02:24 49152 ----a-w- c:\windows\system32\aticalcl.dll
2015-08-04 02:21 . 2015-08-04 02:21 14302208 ----a-w- c:\windows\system32\aticaldd.dll
2015-08-04 02:21 . 2015-08-04 02:21 39424 ----a-w- c:\windows\system32\amdmmcl.dll
2015-08-04 02:07 . 2015-08-04 02:07 442368 ----a-w- c:\windows\system32\atidemgy.dll
2015-08-04 02:07 . 2015-08-04 02:07 143872 ----a-w- c:\windows\system32\atieah32.exe
2015-08-04 02:07 . 2015-08-04 02:07 189952 ----a-w- c:\windows\system32\amdgfxinfo32.dll
2015-08-04 02:07 . 2015-08-04 02:07 29184 ----a-w- c:\windows\system32\atimuixx.dll
2015-08-04 02:06 . 2015-08-04 02:06 543744 ----a-w- c:\windows\system32\atieclxx.exe
2015-08-04 02:06 . 2015-08-04 02:06 214528 ----a-w- c:\windows\system32\atiesrxx.exe
2015-08-04 02:05 . 2015-08-04 02:05 164352 ----a-w- c:\windows\system32\atitmmxx.dll
2015-08-04 01:48 . 2015-08-04 01:48 670208 ----a-w- c:\windows\system32\coinst_15.20.dll
2015-08-04 01:43 . 2015-08-04 01:43 926720 ----a-w- c:\windows\system32\atiadlxx.dll
2015-08-04 01:43 . 2015-08-04 01:43 69632 ----a-w- c:\windows\system32\atiglpxx.dll
2015-08-04 01:42 . 2015-08-04 01:42 141824 ----a-w- c:\windows\system32\atigktxx.dll
2015-08-04 01:41 . 2015-08-04 01:41 532480 ----a-w- c:\windows\system32\drivers\atikmpag.sys
2015-08-04 01:37 . 2015-08-04 01:37 102400 ----a-w- c:\windows\system32\hsa-thunk.dll
2015-08-04 01:35 . 2015-08-04 01:35 43520 ----a-w- c:\windows\system32\drivers\ati2erec.dll
.
.
(((((((((((((((((((((((((((((((((( Spouštěcí body v registru )))))))))))))))))))))))))))))))))))))))))))))
.
.
*Poznámka* prázdné záznamy a legitimní výchozí údaje nejsou zobrazeny.
REGEDIT4
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\00avast]
@="{472083B0-C522-11CF-8763-00608CC02F24}"
[HKEY_CLASSES_ROOT\CLSID\{472083B0-C522-11CF-8763-00608CC02F24}]
2015-10-28 00:05 696120 ----a-w- c:\program files\AVAST Software\Avast\ashShell.dll
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"HPPowerAssistant"="c:\program files\Hewlett-Packard\HP Power Assistant\DelayedAppStarter.exe" [2012-03-14 15232]
"PDF Complete"="c:\program files\PDF Complete\pdfsty.exe" [2013-06-05 683656]
"HPConnectionManager"="c:\program files\Hewlett-Packard\HP Connection Manager\HPCMDelayStart.exe" [2013-10-31 185144]
"File Sanitizer"="c:\program files\Hewlett-Packard\File Sanitizer\CoreShredder.exe" [2013-03-06 13685464]
"CLMLServer_For_P2G8"="c:\program files\CyberLink\Power2Go8\CLMLSvc_P2G8.exe" [2013-08-05 111576]
"CLVirtualDrive"="c:\program files\CyberLink\Power2Go8\VirtualDrive.exe" [2013-08-07 490760]
"IAStorIcon"="c:\program files\Intel\Intel(R) Rapid Storage Technology\IAStorIconLaunch.exe" [2012-02-29 56088]
"SysTrayApp"="c:\program files\IDT\WDM\sttray.exe" [2012-11-12 1667164]
"USB3MON"="c:\program files\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe" [2012-10-24 290688]
"IMSS"="c:\program files\Intel\Intel(R) Management Engine Components\IMSS\PIconStartup.exe" [2013-01-14 134616]
"QLBController"="c:\program files\Hewlett-Packard\HP Hotkey Support\QLBController.exe" [2013-10-16 337184]
"SynTPEnh"="c:\program files\Synaptics\SynTP\SynTPEnh.exe" [2013-10-25 2444016]
"AvastUI.exe"="c:\program files\AVAST Software\Avast\AvastUI.exe" [2015-10-28 6134544]
"Raptr"="c:\progra~1\Raptr\raptrstub.exe" [2015-10-01 56080]
.
[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\RunOnce]
"SPReview"="c:\windows\System32\SPReview\SPReview.exe" [2015-10-29 280576]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorAdmin"= 5 (0x5)
"ConsentPromptBehaviorUser"= 3 (0x3)
"EnableUIADesktopToggle"= 0 (0x0)
"SoftwareSASGeneration"= 1 (0x1)
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\DeviceNP]
2012-11-19 09:12 75648 ----a-w- c:\windows\System32\DeviceNP.dll
.
[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\lsa]
Notification Packages REG_MULTI_SZ DPPassFilter scecli
.
R2 MBAMService;MBAMService;c:\program files\Malwarebytes Anti-Malware\mbamservice.exe [2015-10-05 1135416]
R3 DAMDrv;DAMDrv;c:\windows\system32\DRIVERS\DAMDrv.sys [2012-11-09 50592]
R3 FLCDLOCK;Auditování/zamknutí zařízení nástroje HP ProtectTools;c:\windows\system32\flcdlock.exe [2012-11-19 477056]
R3 ICCS;Intel(R) Integrated Clock Controller Service - Intel(R) ICCS;c:\program files\Intel\Intel(R) Integrated Clock Controller Service\ICCProxy.exe [2012-04-24 169752]
R3 Intel(R) Capability Licensing Service TCP IP Interface;Intel(R) Capability Licensing Service TCP IP Interface;c:\program files\Intel\iCLS Client\SocketHeciServer.exe [2012-12-10 627744]
R3 MBAMSwissArmy;MBAMSwissArmy;c:\windows\system32\drivers\MBAMSwissArmy.sys [2015-10-29 170200]
R3 MBAMWebAccessControl;MBAMWebAccessControl;c:\windows\system32\drivers\mwac.sys [2015-10-05 51928]
R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys [2010-11-20 52224]
R3 USER_ESRV_SVC_WILLAMETTE;User Energy Server Service WILLAMETTE;c:\program files\Intel\SUR\WILLAMETTE\ESRV\esrv_svc.exe [2015-09-14 383640]
R4 PdiService;Portrait Displays SDK Service;c:\program files\Common Files\Portrait Displays\Drivers\pdisrvc.exe [2012-03-09 117552]
S0 amdkmpfd;AMD PCI Root Bus Lower Filter;c:\windows\system32\DRIVERS\amdkmpfd.sys [2015-04-23 42720]
S0 aswRvrt;avast! Revert; [x]
S0 aswVmm;avast! VM Monitor; [x]
S0 iusb3hcs;Ovladač přepínání hostitelského řadiče Intel(R) USB 3.0;c:\windows\system32\DRIVERS\iusb3hcs.sys [2012-10-16 16440]
S0 MfeEpeOpal;MfeEpeOpal; [x]
S0 MfeEpePc;MfeEpePc; [x]
S0 ngvss;ngvss; [x]
S1 aswSnx;aswSnx;c:\windows\system32\drivers\aswSnx.sys [2015-10-28 789296]
S1 aswSP;aswSP;c:\windows\system32\drivers\aswSP.sys [2015-10-28 434184]
S1 CLVirtualDrive;CLVirtualDrive;c:\windows\system32\DRIVERS\CLVirtualDrive.sys [2011-12-26 73712]
S2 AMD External Events Utility;AMD External Events Utility;c:\windows\system32\atiesrxx.exe [2015-08-04 214528]
S2 aswHwid;avast! HardwareID;c:\windows\system32\drivers\aswHwid.sys [2015-10-28 24016]
S2 aswMonFlt;aswMonFlt;c:\windows\system32\drivers\aswMonFlt.sys [2015-10-28 76000]
S2 aswStm;aswStm;c:\windows\system32\drivers\aswStm.sys [2015-10-28 115640]
S2 DisplayLinkService;DisplayLinkManager;c:\program files\DisplayLink Core Software\DisplayLinkManager.exe [2013-11-29 8216368]
S2 ESRV_SVC_WILLAMETTE;Energy Server Service WILLAMETTE;c:\program files\Intel\SUR\WILLAMETTE\ESRV\esrv_svc.exe --AUTO_START --start --address 127.0.0.1 [x]
S2 HP Power Assistant Service;HP Power Assistant Service;c:\program files\Hewlett-Packard\HP Power Assistant\HPPA_Service.exe [2012-03-14 152992]
S2 HPFSService;HP File Sanitizer;c:\program files\Hewlett-Packard\File Sanitizer\HPFSService.exe [2013-03-06 1730776]
S2 hpHotkeyMonitor;hpHotkeyMonitor;c:\program files\Hewlett-Packard\HP Hotkey Support\HPHotkeyMonitor.exe [2013-10-16 681760]
S2 hpsrv;HP Service;c:\windows\system32\Hpservice.exe [2013-07-30 30528]
S2 HPSupportSolutionsFrameworkService;HP Support Solutions Framework Service;c:\program files\Hewlett-Packard\HP Support Solutions\HPSupportSolutionsFrameworkService.exe [2015-09-28 25800]
S2 IAStorDataMgrSvc;Úložná technologie Intel(R) Rapid;c:\program files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe [2012-02-29 13592]
S2 igfxCUIService1.0.0.0;Intel(R) HD Graphics Control Panel Service;c:\windows\system32\igfxCUIService.exe [2014-12-04 280680]
S2 Intel(R) Capability Licensing Service Interface;Intel(R) Capability Licensing Service Interface;c:\program files\Intel\iCLS Client\HeciServer.exe [2012-12-10 583680]
S2 Intel(R) ME Service;Intel(R) ME Service;c:\program files\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe [2013-01-14 131032]
S2 jhi_service;Intel(R) Dynamic Application Loader Host Interface Service;c:\program files\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [2013-01-14 165336]
S2 McAfee Endpoint Encryption Agent;McAfee Endpoint Encryption Agent;c:\program files\Hewlett-Packard\Drive Encryption\EEAgent\MfeEpeHost.exe [2013-03-27 1327104]
S2 pdfcDispatcher;PDF Document Manager;c:\program files\PDF Complete\pdfsvc.exe [2013-06-05 1143432]
S2 SystemUsageReportSvc_WILLAMETTE;Intel(R) System Usage Report Service SystemUsageReportSvc_WILLAMETTE;c:\program files\Intel Driver Update Utility\SUR\SurSvc.exe [2015-09-14 112792]
S2 uArcCapture;ArcCapture;c:\windows\system32\ArcVCapRender\uArcCapture.exe [2012-04-05 498352]
S2 UNS;Intel(R) Management and Security Application User Notification Service;c:\program files\Intel\Intel(R) Management Engine Components\UNS\UNS.exe [2013-01-14 366040]
S2 VBoxAswDrv;VBoxAsw Support Driver;c:\program files\AVAST Software\Avast\ng\vbox\VBoxAswDrv.sys [2015-10-28 220752]
S2 vcsFPService;Validity VCS Fingerprint Service;c:\windows\system32\vcsFPService.exe [2013-09-12 2741648]
S3 ARCVCAM;ARCVCAM, ArcSoft Webcam Sharing Manager Driver;c:\windows\system32\DRIVERS\ArcSoftVCapture.sys [2012-02-03 37952]
S3 AvastVBoxSvc;AvastVBox COM Service;c:\program files\AVAST Software\Avast\ng\vbox\AvastVBoxSVC.exe [2015-10-28 3219136]
S3 hpCMSrv;HP Connection Manager 4 Service;c:\program files\Hewlett-Packard\HP Connection Manager\hpCMSrv.exe [2013-10-31 1421112]
S3 IntcDAud;Intel(R) Display Audio;c:\windows\system32\DRIVERS\IntcDAud.sys [2014-12-04 368912]
S3 iusb3hub;Ovladač rozbočovače Intel(R) USB 3.0;c:\windows\system32\DRIVERS\iusb3hub.sys [2012-10-16 351288]
S3 iusb3xhc;Ovladač rozšiřitelného hostitelského řadiče Intel(R) USB 3.0;c:\windows\system32\DRIVERS\iusb3xhc.sys [2012-10-16 796216]
S3 JMCR;JMCR;c:\windows\system32\DRIVERS\jmcr.sys [2013-04-26 148720]
S3 MBAMProtector;MBAMProtector;c:\windows\system32\drivers\mbam.sys [2015-10-05 23256]
S3 MEI;Intel(R) Management Engine Interface ;c:\windows\system32\DRIVERS\HECI.sys [2012-07-13 55104]
S3 RTL8167;Realtek 8167 NT Driver;c:\windows\system32\DRIVERS\Rt86win7.sys [2013-06-18 669912]
S3 SPUVCbv;SPUVCb Driver Service;c:\windows\system32\Drivers\SPUVCbv.sys [2012-09-23 1894008]
.
.
[HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{8A69D345-D564-463c-AFF1-A69D9E530F96}]
2015-10-27 19:30 997704 ----a-w- c:\program files\Google\Chrome\Application\46.0.2490.80\Installer\chrmstp.exe
.
Obsah adresáře 'Naplánované úlohy'
.
2015-10-29 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
- c:\program files\Google\Update\GoogleUpdate.exe [2015-10-27 19:28]
.
2015-10-29 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
- c:\program files\Google\Update\GoogleUpdate.exe [2015-10-27 19:28]
.
.
------- Doplňkový sken -------
.
TCP: DhcpNameServer = 10.0.0.138
.
- - - - NEPLATNÉ POLOŽKY ODSTRANĚNÉ Z REGISTRU - - - -
.
AddRemove-{22154f09-719a-4619-bb71-5b3356999fbf} - c:\programdata\Package Cache\{22154f09-719a-4619-bb71-5b3356999fbf}\vcredist_x86.exe
AddRemove-{61EB474B-67A6-47F4-B1B7-386851BAB3D0} - c:\program files\InstallShield Installation Information\{61EB474B-67A6-47F4-B1B7-386851BAB3D0}\setup.exe
AddRemove-{fe92d390-13ee-4660-a2f8-39a066fdffe0} - c:\programdata\Package Cache\{fe92d390-13ee-4660-a2f8-39a066fdffe0}\Intel Driver Update Utility Installer.exe
.
.
.
[HKEY_LOCAL_MACHINE\system\ControlSet001\services\pdfcDispatcher]
"ImagePath"="c:\program files\PDF Complete\pdfsvc.exe /startedbyscm:66B66708-40E2BE4D-pdfcService"
.
--------------------- ZAMKNUTÉ KLÍČE V REGISTRU ---------------------
.
[HKEY_LOCAL_MACHINE\system\ControlSet001\Control\PCW\Security]
@Denied: (Full) (Everyone)
.
--------------------- Knihovny navázané na běžící procesy ---------------------
.
- - - - - - - > 'lsass.exe'(728)
c:\windows\system32\DPFPApi.DLL
.
Celkový čas: 2015-10-30 00:24:01
ComboFix-quarantined-files.txt 2015-10-29 23:24
.
Před spuštěním: Volných bajtů: 709 322 137 600
Po spuštění: Volných bajtů: 709 228 613 632
.
- - End Of File - - 9911E0C2842996274F2ADD89ECDC52E2
A36C5E4F47E84449FF07ED3517B43A31

[Reklama]

[jaro3]

Vypni rez. ochranu u antiviru a antispywaru,příp. firewall..

Otevři si Poznámkový blok (Start -> Spustit... a napiš do okna Notepad a dej Ok.
Zkopíruj do něj následující celý text označený zeleně:

Kód: Vybrat vše

ClearJavaCache::
KillAll::
File::
c:\windows\SPRemove.exe
c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
c:\windows\Tasks\GoogleUpdateTaskMachineUA.job

Folder::
c:\program files\Google\Update

RegLock::
[HKEY_LOCAL_MACHINE\system\ControlSet001\Control\PCW\Security]
@Denied: (Full) (Everyone)


Zvol možnost Soubor -> Uložit jako... a nastav tyto parametry:
Název souboru: zde napiš: CFScript.txt
Uložit jako typ: tak tam vyber Všechny soubory
Ulož soubor na plochu.
Ukonči všechna aktivní okna.

Uchop myší vytvořený skript CFScript.txt, přemísti ho nad stažený program ComboFix.exe a když se oba soubory překryjí, skript upusť.
- Automaticky se spustí ComboFix
- Vlož sem log, který vyběhne v závěru čistícího procesu + nový log z HJT

Upozornění : Může se stát, že po aplikaci Combofixu a restartu počítače, Windows nenaběhnou , nebo nenajede plocha , budou problémy s připojením, pak znovu restartuj počítač, pokud to nepomůže , po restartu mačkej klávesu F8 a pak zvol poslední známou funkční konfiguraci. , či použij bod obnovy.

Stáhni si aswMBR
na svojí plochu. Uzavři všechna okna , programy a prohlížeče. Poklepej na aswMBR.exe. Pokud se objeví hláška o možnosti stáhnutí databáze Avastu , klikni na NE. Poté klikni na „Scan“ . Po skenu klikni na „Save Log“ a ulož si log na plochu .Zkopíruj sem celý obsah toho logu. Pak klikni na „Exit“ k zavření programu.