Prosím o kontrolu Vyřešeno

[jaro3]

Stáhněte si a nainstalujte Revo Uninstaller FreePlease download and install Revo Uninstaller Free
http://www.revouninstaller.com/start_fr ... nload.html
Poklepáním na Revo Uninstaller jej spustit.

zkus najít:
F-Secure
AVG
ESET

Ze seznamu programů klikněte dvakrát na programu odstranit
Až budete vyzváni, zda chcete odinstalovat klepněte na tlačítko Ano.
Ujistěte se, že je vybrána možnost Mírný potom klepněte na tlačítko Další.
Program bude probíhat, Pokud budete vyzváni znovu klepněte na tlačítko Ano
Při vestavěný Uninstaller je dokončena klepněte na tlačítko Další.
Jakmile program hledal zbytky klepněte na tlačítko Další.
Zkontrolujte / zaškrtněte položky Bolded jen na seznamu a potom klepněte na tlačítko Odstranit
Po vyzvání klepněte na Ano a pak na další.
dal šek na všechny složky, které se nachází a vyberte možnost odstranění
Po zobrazení výzvy vyberte ano, pak na další
Poté, co udělal na tlačítko Dokončit.

Stáhni si aswMBR
na svojí plochu. Uzavři všechna okna , programy a prohlížeče. Poklepej na aswMBR.exe. Pokud se objeví hláška o možnosti stáhnutí databáze Avastu , klikni na NE. Poté klikni na „Scan“ . Po skenu klikni na „Save Log“ a ulož si log na plochu .Zkopíruj sem celý obsah toho logu. Pak klikni na „Exit“ k zavření programu.

Pak nový log z Combofixu.

[Reklama]

[Kat1]

Revo mi bohužel nenašel ani jeden z programu AVG, ESET, F-Secure

[Kat1]

aswMBR version 1.0.1.2290 Copyright(c) 2014 AVAST Software
Run date: 2016-10-03 14:53:48
-----------------------------
14:53:48.321 OS Version: Windows 6.1.7601 Service Pack 1
14:53:48.321 Number of processors: 4 586 0x3601
14:53:48.321 ComputerName: JANICKANOTASEK UserName:
14:53:49.382 Initialize success
14:53:49.382 VM: initialized successfully
14:53:49.382 VM: Intel CPU virtualization not supported
14:53:51.847 AVAST engine defs: 16092702
14:54:22.626 Disk 0 (boot) \Device\Harddisk0\DR0 -> \Device\Ide\IdeDeviceP0T0L0-0
14:54:22.641 Disk 0 Vendor: ST320LT020-9YG142 0002HPM1 Size: 305245MB BusType: 11
14:54:22.797 Disk 0 MBR read successfully
14:54:22.829 Disk 0 MBR scan
14:54:23.297 Disk 0 Windows 7 default MBR code
14:54:23.328 Disk 0 Partition 1 80 (A) 07 HPFS/NTFS NTFS 100 MB offset 2048
14:54:23.343 Disk 0 Boot: NTFS code=1
14:54:23.499 Disk 0 Partition 2 00 07 HPFS/NTFS NTFS 305143 MB offset 206848
14:54:23.577 Disk 0 scanning sectors +625140400
14:54:23.858 Disk 0 scanning C:\Windows\system32\drivers
14:54:44.091 Service scanning
14:55:09.972 Modules scanning
14:55:10.019 Disk 0 trace - called modules:
14:55:10.097 ntkrnlpa.exe CLASSPNP.SYS disk.sys ataport.SYS halmacpi.dll PCIIDEX.SYS msahci.sys
14:55:10.128 1 nt!IofCallDriver -> \Device\Harddisk0\DR0[0x84f64a40]
14:55:10.159 3 CLASSPNP.SYS[8879b59e] -> nt!IofCallDriver -> \Device\Ide\IdeDeviceP0T0L0-0[0x84df4030]
14:55:11.251 AVAST engine scan C:\Windows
14:55:14.979 AVAST engine scan C:\Windows\system32
14:58:34.738 AVAST engine scan C:\Windows\system32\drivers
14:58:56.422 AVAST engine scan C:\Users\janicka_notasek
15:01:25.043 File: C:\Users\janicka_notasek\Desktop\zoek.exe **INFECTED** Win32:Malware-gen
15:01:29.302 AVAST engine scan C:\ProgramData
15:03:38.907 Disk 0 statistics 2210579/0/0 @ 3,37 MB/s
15:03:38.970 Scan finished successfully
15:05:55.657 Disk 0 MBR has been saved successfully to "C:\Users\janicka_notasek\Desktop\MBR.dat"
15:05:55.688 The log file has been saved successfully to "C:\Users\janicka_notasek\Desktop\aswMBR.txt"

[jaro3]

Můžu se zeptat , který antivir je funkční?
Avast nebo F-Secure?

[Kat1]

Aktuální je Avast, F-secure by měl být odinstalovaný
Děkuji

[Kat1]

Nový log z Cobofix

ComboFix 16-09-28.01 - janicka_notasek 03.10.2016 15:20:12.2.4 - x86
Microsoft Windows 7 Home Premium 6.1.7601.1.1250.420.1029.18.2036.1129 [GMT 2:00]
Spuštěný z: c:\users\janicka_notasek\Desktop\ComboFix.exe
SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
* Vytvořen nový Bod Obnovení
.
.
((((((((((((((((((((((((( Soubory vytvořené od 2016-09-03 do 2016-10-03 )))))))))))))))))))))))))))))))
.
.
2020-09-11 15:42 . 2020-09-11 15:42 -------- d-----w- c:\users\janicka_notasek\WPDNSE
2016-10-03 14:07 . 2016-10-03 14:07 -------- d-----w- c:\users\Default\AppData\Local\temp
2016-10-02 21:05 . 2016-10-02 21:05 -------- d-----w- c:\users\janicka_notasek\AppData\Roaming\ProductData
2016-10-02 21:02 . 2016-10-02 12:33 24064 ----a-w- c:\windows\zoek-delete.exe
2016-10-02 18:46 . 2016-10-02 18:46 -------- d-----w- c:\users\janicka_notasek\AppData\Local\Data aplikacÝ
2016-10-02 12:33 . 2016-10-02 18:39 -------- d-----w- C:\zoek_backup
2016-10-01 13:36 . 2016-10-02 02:31 24688 ----a-w- c:\windows\system32\drivers\TrueSight.sys
2016-10-01 13:25 . 2016-10-01 13:27 -------- d-----w- c:\program files\RogueKiller
2016-10-01 13:13 . 2016-10-02 18:33 -------- d-----w- c:\users\janicka_notasek\AppData\Local\CrashDumps
2016-10-01 12:50 . 2016-10-02 02:28 -------- d-----w- c:\programdata\RogueKiller
2016-10-01 00:47 . 2016-10-01 03:18 170200 ----a-w- c:\windows\system32\drivers\MBAMSwissArmy.sys
2016-10-01 00:46 . 2016-10-01 03:17 -------- d-----w- c:\program files\Malwarebytes Anti-Malware
2016-10-01 00:46 . 2016-03-10 12:09 53120 ----a-w- c:\windows\system32\drivers\mwac.sys
2016-10-01 00:46 . 2016-03-10 12:08 126336 ----a-w- c:\windows\system32\drivers\mbamchameleon.sys
2016-10-01 00:46 . 2016-03-10 12:08 24448 ----a-w- c:\windows\system32\drivers\mbam.sys
2016-10-01 00:43 . 2016-10-01 00:43 -------- d-----w- c:\users\janicka_notasek\AppData\Local\Programs
2016-09-30 23:24 . 2016-09-30 23:24 -------- d-----w- c:\users\janicka_notasek\AppData\Local\CEF
2016-09-30 21:53 . 2011-06-10 12:34 80416 ----a-w- c:\windows\system32\RtNicProp32.dll
2016-09-30 21:53 . 2011-06-10 12:34 100896 ----a-w- c:\windows\system32\RTNUninst32.dll
2016-09-30 21:53 . 2016-09-30 21:53 -------- d-----w- c:\program files\Realtek
2016-09-28 06:50 . 2016-09-28 06:50 -------- dc----w- c:\users\janicka_notasek\AppData\Local\MigWiz
2016-09-27 23:21 . 2016-09-27 23:21 35096 ----a-w- c:\windows\system32\drivers\aswKbd.sys
2016-09-27 23:20 . 2016-09-27 23:20 -------- d-----w- c:\users\janicka_notasek\AppData\Roaming\AVAST Software
2016-09-27 23:19 . 2016-09-27 23:19 -------- d-----w- c:\program files\Common Files\AV
2016-09-27 23:19 . 2016-09-27 23:18 118664 ----a-w- c:\windows\system32\drivers\aswStm.sys
2016-09-27 23:19 . 2016-09-27 23:18 224616 ----a-w- c:\windows\system32\drivers\aswVmm.sys
2016-09-27 23:19 . 2016-09-27 23:19 433768 ----a-w- c:\windows\system32\drivers\aswsp.sys
2016-09-27 23:19 . 2016-09-27 23:18 92256 ----a-w- c:\windows\system32\drivers\aswMonFlt.sys
2016-09-27 23:19 . 2016-09-27 23:18 60424 ----a-w- c:\windows\system32\drivers\aswRvrt.sys
2016-09-27 23:18 . 2016-09-27 23:18 91232 ----a-w- c:\windows\system32\drivers\aswRdr2.sys
2016-09-27 23:18 . 2016-09-27 23:18 34008 ----a-w- c:\windows\system32\drivers\aswHwid.sys
2016-09-27 23:18 . 2016-09-27 23:19 735488 ----a-w- c:\windows\system32\drivers\aswsnx.sys
2016-09-27 23:18 . 2016-09-27 23:18 338936 ----a-w- c:\windows\system32\drivers\aswNetSec.sys
2016-09-27 23:18 . 2016-09-27 23:18 319760 ----a-w- c:\windows\system32\aswBoot.exe
2016-09-27 23:18 . 2016-09-27 23:18 53208 ----a-w- c:\windows\avastSS.scr
2016-09-27 23:18 . 2016-09-27 23:18 26776 ----a-w- c:\windows\system32\drivers\aswNetNd6.sys
2016-09-27 23:17 . 2016-09-27 23:21 -------- d-----w- c:\program files\AVAST Software
2016-09-27 23:15 . 2016-09-30 22:54 -------- d-----w- c:\users\janicka_notasek\AppData\Local\ElevatedDiagnostics
2016-09-27 16:19 . 2016-09-27 16:19 -------- d-----w- C:\Nová složka
2016-09-23 05:28 . 2016-09-23 05:28 -------- d-----w- c:\program files\F-Secure
2016-09-23 05:05 . 2016-09-27 22:44 -------- d-----w- c:\programdata\F-Secure
2016-09-23 05:05 . 2016-09-23 22:13 -------- d-----w- c:\users\janicka_notasek\AppData\Local\F-Secure
2016-09-23 00:08 . 2016-09-28 06:06 -------- d-----w- c:\users\janicka_notasek\AppData\Local\VirtualStore
2016-09-22 20:05 . 2016-09-22 20:58 -------- d-----w- c:\users\janicka_notasek\.oracle_jre_usage
2016-09-22 20:04 . 2016-09-22 20:59 -------- d-----w- c:\programdata\Oracle
2016-09-22 09:37 . 2016-09-22 21:41 -------- d-----w- c:\windows\Panther
2016-09-21 20:58 . 2016-09-21 20:58 -------- d-----w- c:\users\Default\AppData\Local\AVG
2016-09-19 00:15 . 2016-09-19 00:15 62576 ----a-w- c:\programdata\Microsoft\Windows Defender\Definition Updates\{92DA9EFD-13F6-49B9-8167-570E2BBE1D28}\offreg.2420.dll
2016-09-18 23:27 . 2016-08-02 22:19 9654712 ----a-w- c:\programdata\Microsoft\Windows Defender\Definition Updates\{92DA9EFD-13F6-49B9-8167-570E2BBE1D28}\mpengine.dll
2016-09-18 15:13 . 2016-10-01 12:25 -------- d-----w- C:\AdwCleaner
2016-09-18 05:11 . 2016-09-18 05:11 -------- d-----w- c:\users\janicka_notasek\AppData\Roaming\AVG
2016-09-18 05:09 . 2016-09-18 05:09 -------- d-----w- c:\users\janicka_notasek\AppData\Roaming\TuneUp Software
2016-09-18 05:06 . 2016-09-21 20:52 -------- d-----w- c:\programdata\MFAData
2016-09-18 05:06 . 2016-09-18 05:06 -------- d-----w- c:\users\janicka_notasek\AppData\Local\MFAData
2016-09-18 04:44 . 2016-09-22 10:14 -------- d-----w- c:\programdata\Avg
2016-09-18 04:23 . 2016-09-18 04:23 -------- d-----w- c:\windows\Options
2016-09-18 04:21 . 2012-10-23 14:27 12800 ------w- c:\windows\EricssonMobileBroadbandVer.dll
2016-09-18 04:19 . 2016-09-18 04:19 -------- d-----w- c:\users\janicka_notasek\AppData\Roaming\InstallShield
2016-09-18 03:40 . 2011-08-31 21:09 400544 ----a-w- c:\windows\system32\athihvs.dll
2016-09-11 17:21 . 2016-09-11 17:21 38984 ----a-w- c:\windows\system32\drivers\aswTap.sys
2016-09-10 06:37 . 2016-09-10 06:53 -------- d-----w- c:\programdata\Microsoft – kopie (2)
2016-09-10 06:36 . 2016-09-10 06:36 -------- d-----w- c:\programdata\Microsoft – kopie
2016-09-10 05:07 . 2016-09-18 04:31 -------- d-----w- c:\users\janicka_notasek\AppData\Local\ESET
2016-09-09 18:54 . 2016-09-09 18:54 -------- d-----w- c:\programdata\IMSIDesign
.
.
.
(((((((((((((((((((((((((((((((((((((((( Find3M výpis ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2016-09-02 15:16 . 2016-09-17 21:09 254464 ----a-w- c:\windows\system32\schannel.dll
2016-09-02 15:16 . 2016-09-17 21:09 141312 ----a-w- c:\windows\system32\rpchttp.dll
2016-08-08 08:19 . 2016-08-08 08:19 51872 ----a-w- c:\windows\system32\drivers\EpfwLWF.sys
2016-07-26 12:24 . 2013-08-10 12:18 406184 ------w- c:\windows\system32\MpSigStub.exe
2016-07-12 14:24 . 2016-07-12 14:24 921280 ----a-w- c:\windows\ucrtbase.dll
2016-07-08 15:16 . 2016-08-18 16:54 2048 ----a-w- c:\windows\system32\tzres.dll
.
.
(((((((((((((((((((((((((((((((((( Spouštěcí body v registru )))))))))))))))))))))))))))))))))))))))))))))
.
.
*Poznámka* prázdné záznamy a legitimní výchozí údaje nejsou zobrazeny.
REGEDIT4
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\00avast]
@="{472083B0-C522-11CF-8763-00608CC02F24}"
[HKEY_CLASSES_ROOT\CLSID\{472083B0-C522-11CF-8763-00608CC02F24}]
2016-09-27 23:18 832488 ----a-w- c:\program files\AVAST Software\Avast\ashShell.dll
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"cz.seznam.software.autoupdate"="c:\users\janicka_notasek\AppData\Roaming\Seznam.cz\szninstall.exe" [2013-05-16 1062472]
"BingSvc"="c:\users\janicka_notasek\AppData\Local\Microsoft\BingSvc\BingSvc.exe" [2015-11-05 144008]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"AvastUI.exe"="c:\program files\AVAST Software\Avast\AvastUI.exe" [2016-09-27 9103976]
"SynTPEnh"="c:\program files\Synaptics\SynTP\SynTPEnh.exe" [2011-10-14 2299176]
"seznam-listicka-distribuce"="c:\program files\Seznam.cz\distribution\szninstall.exe" [2013-05-16 1062472]
"Persistence"="c:\windows\system32\igfxpers.exe" [2012-07-04 168256]
"HotKeysCmds"="c:\windows\system32\hkcmd.exe" [2012-07-04 175936]
"GrooveMonitor"="c:\program files\Microsoft Office\Office12\GrooveMonitor.exe" [2009-02-26 30040]
"GfxServiceInstall"="c:\windows\system32\GfxCUIServiceInstall.vbs" [2012-06-27 131]
.
[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\RunOnce]
"SPReview"="c:\windows\System32\SPReview\SPReview.exe" [2013-10-26 280576]
.
c:\users\janicka_notasek\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\
Výřezy obrazovky a spuštění aplikace OneNote 2007.lnk - c:\program files\Microsoft Office\Office12\ONENOTEM.EXE /tsr [2009-2-26 97680]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorUser"= 3 (0x3)
"EnableUIADesktopToggle"= 0 (0x0)
"SoftwareSASGeneration"= 1 (0x1)
.
R0 fsbts;fsbts;c:\windows\system32\Drivers\fsbts.sys [x]
R1 F-Secure HIPS;F-Secure HIPS Driver;c:\program files\F-Secure\SAFE\apps\ComputerSecurity\HIPS\drivers\fshs.sys [x]
R2 fshoster;F-Secure Hoster;c:\program files\F-Secure\SAFE\fshoster32.exe [x]
R2 fsnethoster;F-Secure Hoster (Restricted);c:\program files\F-Secure\SAFE\fshoster32.exe [x]
R2 FSORSPClient;F-Secure ORSP Client;c:\program files\F-Secure\SAFE\apps\CCF_Reputation\fsorsp.exe [x]
R2 LiveUpdateSvc;LiveUpdate;c:\program files\IObit\LiveUpdate\LiveUpdate.exe [2015-11-05 2909472]
R3 AGSService;Adobe Genuine Software Integrity Service;c:\program files\Common Files\Adobe\AdobeGCClient\AGSService.exe [2016-08-12 2159832]
R3 aswTap;avast! SecureLine TAP Adapter v3;c:\windows\system32\DRIVERS\aswTap.sys [2016-09-11 38984]
R3 F-Secure Gatekeeper;F-Secure Gatekeeper;c:\program files\F-Secure\SAFE\apps\ComputerSecurity\Anti-Virus\minifilter\FSgk.sys [x]
R3 fsni;fsni;c:\program files\F-Secure\SAFE\apps\CCF_Scanning\bin\fsni32.sys [x]
R3 IEEtwCollectorService;Internet Explorer ETW Collector Service;c:\windows\system32\IEEtwCollector.exe [2016-09-22 102912]
R3 RTL8167;Realtek 8167 NT Driver;c:\windows\system32\DRIVERS\Rt86win7.sys [2011-06-10 394856]
R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys [2010-11-20 52224]
R3 WatAdminSvc;Služba Technologie aktivace Windows;c:\windows\system32\Wat\WatAdminSvc.exe [2013-08-07 1343400]
S1 CGKDarkWatcher;CGKDarkWatcher;c:\windows\system32\drivers\CGKDarkWatcher.sys [2016-01-17 15128]
S2 DiagTrack;Diagnostics Tracking Service;c:\windows\System32\svchost.exe [2009-07-14 20992]
S3 igddim32;igddim32;c:\windows\system32\DRIVERS\igddim32.sys [2012-06-27 1349120]
S3 igdkmd32;igdkmd32;c:\windows\system32\DRIVERS\igdkmd32.sys [2012-06-27 435200]
.
.
--- Ostatní služby/ovladače v paměti ---
.
*NewlyCreated* - ASWMBR
*NewlyCreated* - WS2IFSL
*Deregistered* - aswMBR
*Deregistered* - aswVmm
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost]
LocalServiceAndNoImpersonation REG_MULTI_SZ SSDPSRV upnphost SCardSvr fdrespub AppIDSvc QWAVE wcncsvc Mcx2Svc SensrSvc
utcsvc REG_MULTI_SZ DiagTrack
.
[HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{8A69D345-D564-463c-AFF1-A69D9E530F96}]
2016-09-27 23:23 1267528 ----a-w- c:\program files\Google\Chrome\Application\53.0.2785.116\Installer\chrmstp.exe
.
Obsah adresáře 'Naplánované úlohy'
.
2016-10-02 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
- c:\program files\Google\Update\GoogleUpdate.exe [2016-09-27 23:27]
.
2016-10-03 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
- c:\program files\Google\Update\GoogleUpdate.exe [2016-09-27 23:27]
.
.
------- Doplňkový sken -------
.
uStart Page = https://www.google.cz/
uInternet Settings,ProxyOverride = *.local
IE: E&xportovat do aplikace Microsoft Excel - c:\progra~1\MICROS~2\Office12\EXCEL.EXE/3000
TCP: DhcpNameServer = 10.0.0.138
.
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\services\fshoster]
"ImagePath"="\"c:\program files\F-Secure\SAFE\fshoster32.exe\" -hosterid:0"
--
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\services\fsnethoster]
"ImagePath"="\"c:\program files\F-Secure\SAFE\fshoster32.exe\" -hosterid:2"
.
--------------------- ZAMKNUTÉ KLÍČE V REGISTRU ---------------------
.
[HKEY_USERS\.Default\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.htm\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ChromeHTML"
.
[HKEY_USERS\.Default\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.html\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ChromeHTML"
.
[HKEY_USERS\.Default\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.shtml\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ChromeHTML"
.
[HKEY_USERS\.Default\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.xht\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ChromeHTML"
.
[HKEY_USERS\.Default\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.xhtml\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ChromeHTML"
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Control\PCW\Security]
@Denied: (Full) (Everyone)
.
Celkový čas: 2016-10-03 16:11:54
ComboFix-quarantined-files.txt 2016-10-03 14:11
ComboFix2.txt 2016-10-02 22:57
.
Před spuštěním: Volných bajtů: 286 280 249 344
Po spuštění: Volných bajtů: 286 211 391 488
.
- - End Of File - - 21CDB2692900964D2ED9EFEC69CEE948
A36C5E4F47E84449FF07ED3517B43A31

[jaro3]

No Avast nemá v logu ani jeden ovladač.

Nejlíp bude když odinstaluješ Avast tímto:
avast!
http://files.avast.com/files/eng/aswclear.exe

a pak F-Secure tímto:
F-Secure
https://community.f-secure.com/t5/F-Sec ... td-p/31265
ftp://ftp.f-secure.com/support/tools/ui ... l3-420.zip


Je tam s prominutím bordelz antivirů..Zkus oba odinstalovat , zbytek vymažeme v CF .
Takže po odinstalaci znovu Combofix.

Nový antivir zatím neinstaluj.

[Kat1]

Děkuji, udělám to.
Jen mám ještě dotaz. V systémových informacích mi běží úloha smss.exe. , systém a systém idle proces, u všech úloh jsou data (cesta, verze datum atd.), jen u těchto tří nejsou informace k dispozici. Je to ok?

[jaro3]

Je to OK.

[Kat1]

Dobrý večer,
nový log z Combofix

ComboFix 16-09-28.01 - janicka_notasek 04.10.2016 19:23:46.3.4 - x86
Microsoft Windows 7 Home Premium 6.1.7601.1.1250.420.1029.18.2036.1299 [GMT 2:00]
Spuštěný z: c:\users\janicka_notasek\Desktop\ComboFix.exe
SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
* Vytvořen nový Bod Obnovení
.
.
((((((((((((((((((((((((( Soubory vytvořené od 2016-09-04 do 2016-10-04 )))))))))))))))))))))))))))))))
.
.
2020-09-11 15:42 . 2020-09-11 15:42 -------- d-----w- c:\users\janicka_notasek\WPDNSE
2016-10-04 18:11 . 2016-10-04 18:11 -------- d-----w- c:\users\Default\AppData\Local\temp
2016-10-04 02:27 . 2016-10-04 02:29 -------- d-----w- c:\programdata\F-Secure-UninstallationTool
2016-10-03 14:11 . 2016-10-04 18:11 -------- d-----w- c:\users\janicka_notasek\AppData\Local\temp
2016-10-03 11:02 . 2016-10-03 11:02 -------- d-----w- c:\program files\VS Revo Group
2016-10-02 21:05 . 2016-10-02 21:05 -------- d-----w- c:\users\janicka_notasek\AppData\Roaming\ProductData
2016-10-02 21:02 . 2016-10-02 12:33 24064 ----a-w- c:\windows\zoek-delete.exe
2016-10-02 18:46 . 2016-10-02 18:46 -------- d-----w- c:\users\janicka_notasek\AppData\Local\Data aplikacÝ
2016-10-02 12:33 . 2016-10-02 18:39 -------- d-----w- C:\zoek_backup
2016-10-01 13:36 . 2016-10-02 02:31 24688 ----a-w- c:\windows\system32\drivers\TrueSight.sys
2016-10-01 13:25 . 2016-10-01 13:27 -------- d-----w- c:\program files\RogueKiller
2016-10-01 13:13 . 2016-10-02 18:33 -------- d-----w- c:\users\janicka_notasek\AppData\Local\CrashDumps
2016-10-01 12:50 . 2016-10-02 02:28 -------- d-----w- c:\programdata\RogueKiller
2016-10-01 00:47 . 2016-10-01 03:18 170200 ----a-w- c:\windows\system32\drivers\MBAMSwissArmy.sys
2016-10-01 00:46 . 2016-10-01 03:17 -------- d-----w- c:\program files\Malwarebytes Anti-Malware
2016-10-01 00:46 . 2016-03-10 12:09 53120 ----a-w- c:\windows\system32\drivers\mwac.sys
2016-10-01 00:46 . 2016-03-10 12:08 126336 ----a-w- c:\windows\system32\drivers\mbamchameleon.sys
2016-10-01 00:46 . 2016-03-10 12:08 24448 ----a-w- c:\windows\system32\drivers\mbam.sys
2016-10-01 00:43 . 2016-10-01 00:43 -------- d-----w- c:\users\janicka_notasek\AppData\Local\Programs
2016-09-30 23:24 . 2016-09-30 23:24 -------- d-----w- c:\users\janicka_notasek\AppData\Local\CEF
2016-09-30 21:53 . 2011-06-10 12:34 80416 ----a-w- c:\windows\system32\RtNicProp32.dll
2016-09-30 21:53 . 2011-06-10 12:34 100896 ----a-w- c:\windows\system32\RTNUninst32.dll
2016-09-30 21:53 . 2016-09-30 21:53 -------- d-----w- c:\program files\Realtek
2016-09-28 06:50 . 2016-09-28 06:50 -------- dc----w- c:\users\janicka_notasek\AppData\Local\MigWiz
2016-09-27 23:19 . 2016-09-27 23:19 -------- d-----w- c:\program files\Common Files\AV
2016-09-27 23:15 . 2016-09-30 22:54 -------- d-----w- c:\users\janicka_notasek\AppData\Local\ElevatedDiagnostics
2016-09-27 16:19 . 2016-09-27 16:19 -------- d-----w- C:\Nová složka
2016-09-23 05:05 . 2016-10-04 02:30 -------- d-----w- c:\programdata\F-Secure
2016-09-23 05:05 . 2016-09-23 22:13 -------- d-----w- c:\users\janicka_notasek\AppData\Local\F-Secure
2016-09-23 00:08 . 2016-09-28 06:06 -------- d-----w- c:\users\janicka_notasek\AppData\Local\VirtualStore
2016-09-22 20:05 . 2016-09-22 20:58 -------- d-----w- c:\users\janicka_notasek\.oracle_jre_usage
2016-09-22 20:04 . 2016-09-22 20:59 -------- d-----w- c:\programdata\Oracle
2016-09-22 09:37 . 2016-09-22 21:41 -------- d-----w- c:\windows\Panther
2016-09-21 20:58 . 2016-09-21 20:58 -------- d-----w- c:\users\Default\AppData\Local\AVG
2016-09-19 00:15 . 2016-09-19 00:15 62576 ----a-w- c:\programdata\Microsoft\Windows Defender\Definition Updates\{92DA9EFD-13F6-49B9-8167-570E2BBE1D28}\offreg.2420.dll
2016-09-18 23:27 . 2016-08-02 22:19 9654712 ----a-w- c:\programdata\Microsoft\Windows Defender\Definition Updates\{92DA9EFD-13F6-49B9-8167-570E2BBE1D28}\mpengine.dll
2016-09-18 15:13 . 2016-10-01 12:25 -------- d-----w- C:\AdwCleaner
2016-09-18 05:11 . 2016-09-18 05:11 -------- d-----w- c:\users\janicka_notasek\AppData\Roaming\AVG
2016-09-18 05:09 . 2016-09-18 05:09 -------- d-----w- c:\users\janicka_notasek\AppData\Roaming\TuneUp Software
2016-09-18 05:06 . 2016-09-21 20:52 -------- d-----w- c:\programdata\MFAData
2016-09-18 05:06 . 2016-09-18 05:06 -------- d-----w- c:\users\janicka_notasek\AppData\Local\MFAData
2016-09-18 04:44 . 2016-09-22 10:14 -------- d-----w- c:\programdata\Avg
2016-09-18 04:23 . 2016-09-18 04:23 -------- d-----w- c:\windows\Options
2016-09-18 04:21 . 2012-10-23 14:27 12800 ------w- c:\windows\EricssonMobileBroadbandVer.dll
2016-09-18 04:19 . 2016-09-18 04:19 -------- d-----w- c:\users\janicka_notasek\AppData\Roaming\InstallShield
2016-09-18 03:40 . 2011-08-31 21:09 400544 ----a-w- c:\windows\system32\athihvs.dll
2016-09-11 17:21 . 2016-09-11 17:21 38984 ----a-w- c:\windows\system32\drivers\aswTap.sys
2016-09-10 06:37 . 2016-09-10 06:53 -------- d-----w- c:\programdata\Microsoft – kopie (2)
2016-09-10 06:36 . 2016-09-10 06:36 -------- d-----w- c:\programdata\Microsoft – kopie
2016-09-10 05:07 . 2016-09-18 04:31 -------- d-----w- c:\users\janicka_notasek\AppData\Local\ESET
2016-09-09 18:54 . 2016-09-09 18:54 -------- d-----w- c:\programdata\IMSIDesign
.
.
.
(((((((((((((((((((((((((((((((((((((((( Find3M výpis ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2016-09-02 15:16 . 2016-09-17 21:09 254464 ----a-w- c:\windows\system32\schannel.dll
2016-09-02 15:16 . 2016-09-17 21:09 141312 ----a-w- c:\windows\system32\rpchttp.dll
2016-08-08 08:19 . 2016-08-08 08:19 51872 ----a-w- c:\windows\system32\drivers\EpfwLWF.sys
2016-07-26 12:24 . 2013-08-10 12:18 406184 ------w- c:\windows\system32\MpSigStub.exe
2016-07-12 14:24 . 2016-07-12 14:24 921280 ----a-w- c:\windows\ucrtbase.dll
2016-07-08 15:16 . 2016-08-18 16:54 2048 ----a-w- c:\windows\system32\tzres.dll
.
.
(((((((((((((((((((((((((((((((((( Spouštěcí body v registru )))))))))))))))))))))))))))))))))))))))))))))
.
.
*Poznámka* prázdné záznamy a legitimní výchozí údaje nejsou zobrazeny.
REGEDIT4
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"BingSvc"="c:\users\janicka_notasek\AppData\Local\Microsoft\BingSvc\BingSvc.exe" [2015-11-05 144008]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"SynTPEnh"="c:\program files\Synaptics\SynTP\SynTPEnh.exe" [2011-10-14 2299176]
"Persistence"="c:\windows\system32\igfxpers.exe" [2012-07-04 168256]
"HotKeysCmds"="c:\windows\system32\hkcmd.exe" [2012-07-04 175936]
"GfxServiceInstall"="c:\windows\system32\GfxCUIServiceInstall.vbs" [2012-06-27 131]
.
[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\RunOnce]
"SPReview"="c:\windows\System32\SPReview\SPReview.exe" [2013-10-26 280576]
.
c:\users\janicka_notasek\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\
Výřezy obrazovky a spuštění aplikace OneNote 2007.lnk - c:\program files\Microsoft Office\Office12\ONENOTEM.EXE /tsr [2009-2-26 97680]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorUser"= 3 (0x3)
"EnableUIADesktopToggle"= 0 (0x0)
"SoftwareSASGeneration"= 1 (0x1)
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\cz.seznam.software.autoupdate]
2013-05-16 13:25 1062472 ----a-w- c:\users\janicka_notasek\AppData\Roaming\Seznam.cz\szninstall.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\GrooveMonitor]
2009-02-26 16:36 30040 ----a-w- c:\program files\Microsoft Office\Office12\GrooveMonitor.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\seznam-listicka-distribuce]
2013-05-16 13:25 1062472 ----a-w- c:\program files\Seznam.cz\distribution\szninstall.exe
.
R0 aswVmm;aswVmm;c:\windows\c:\users\JANICK~1\AppData\Local\Temp\aswVmm.sys [x]
R2 LiveUpdateSvc;LiveUpdate;c:\program files\IObit\LiveUpdate\LiveUpdate.exe [2015-11-05 2909472]
R3 AGSService;Adobe Genuine Software Integrity Service;c:\program files\Common Files\Adobe\AdobeGCClient\AGSService.exe [2016-08-12 2159832]
R3 aswTap;avast! SecureLine TAP Adapter v3;c:\windows\system32\DRIVERS\aswTap.sys [2016-09-11 38984]
R3 fsni;fsni;c:\program files\F-Secure\SAFE\apps\CCF_Scanning\bin\fsni32.sys [x]
R3 IEEtwCollectorService;Internet Explorer ETW Collector Service;c:\windows\system32\IEEtwCollector.exe [2016-09-22 102912]
R3 RTL8167;Realtek 8167 NT Driver;c:\windows\system32\DRIVERS\Rt86win7.sys [2011-06-10 394856]
R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys [2010-11-20 52224]
R3 WatAdminSvc;Služba Technologie aktivace Windows;c:\windows\system32\Wat\WatAdminSvc.exe [2013-08-07 1343400]
S1 CGKDarkWatcher;CGKDarkWatcher;c:\windows\system32\drivers\CGKDarkWatcher.sys [2016-01-17 15128]
S2 DiagTrack;Diagnostics Tracking Service;c:\windows\System32\svchost.exe [2009-07-14 20992]
S3 igddim32;igddim32;c:\windows\system32\DRIVERS\igddim32.sys [2012-06-27 1349120]
S3 igdkmd32;igdkmd32;c:\windows\system32\DRIVERS\igdkmd32.sys [2012-06-27 435200]
.
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost]
LocalServiceAndNoImpersonation REG_MULTI_SZ SSDPSRV upnphost SCardSvr fdrespub AppIDSvc QWAVE wcncsvc Mcx2Svc SensrSvc
utcsvc REG_MULTI_SZ DiagTrack
.
[HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{8A69D345-D564-463c-AFF1-A69D9E530F96}]
2016-10-03 21:32 1266792 ----a-w- c:\program files\Google\Chrome\Application\53.0.2785.143\Installer\chrmstp.exe
.
Obsah adresáře 'Naplánované úlohy'
.
2016-10-04 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
- c:\program files\Google\Update\GoogleUpdate.exe [2016-09-27 23:27]
.
2016-10-04 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
- c:\program files\Google\Update\GoogleUpdate.exe [2016-09-27 23:27]
.
.
------- Doplňkový sken -------
.
uStart Page = https://www.google.cz/
uInternet Settings,ProxyOverride = *.local
IE: E&xportovat do aplikace Microsoft Excel - c:\progra~1\MICROS~2\Office12\EXCEL.EXE/3000
TCP: DhcpNameServer = 10.0.0.138
.
- - - - NEPLATNÉ POLOŽKY ODSTRANĚNÉ Z REGISTRU - - - -
.
ShellIconOverlayIdentifiers-{472083B0-C522-11CF-8763-00608CC02F24} - (no file)
AddRemove-SafeZone 1.51.2220.53 - c:\program files\AVAST Software\SZBrowser\Launcher.exe
.
.
.
--------------------- ZAMKNUTÉ KLÍČE V REGISTRU ---------------------
.
[HKEY_USERS\.Default\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.htm\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ChromeHTML"
.
[HKEY_USERS\.Default\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.html\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ChromeHTML"
.
[HKEY_USERS\.Default\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.shtml\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ChromeHTML"
.
[HKEY_USERS\.Default\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.xht\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ChromeHTML"
.
[HKEY_USERS\.Default\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.xhtml\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ChromeHTML"
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Control\PCW\Security]
@Denied: (Full) (Everyone)
.
Celkový čas: 2016-10-04 20:15:40
ComboFix-quarantined-files.txt 2016-10-04 18:15
ComboFix2.txt 2016-10-03 14:11
ComboFix3.txt 2016-10-02 22:57
.
Před spuštěním: Volných bajtů: 286 975 729 664
Po spuštění: Volných bajtů: 286 922 407 936
.
- - End Of File - - 1A95EE7B6E05D0BF007600238D24E44B
A36C5E4F47E84449FF07ED3517B43A31

[jaro3]

Otevři si Poznámkový blok (Start -> Spustit... a napiš do okna Notepad a dej Ok.
Zkopíruj do něj následující celý text označený zeleně:

Kód: Vybrat vše

ClearJavaCache::
KillAll::
File::
c:\windows\system32\drivers\aswTap.sys
c:\windows\system32\drivers\EpfwLWF.sys
c:\windows\c:\users\JANICK~1\AppData\Local\Temp\aswVmm.sys
c:\windows\system32\DRIVERS\aswTap.sys
c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
c:\windows\Tasks\GoogleUpdateTaskMachineUA.job

Folder::
c:\programdata\F-Secure
c:\users\janicka_notasek\AppData\Local\F-Secure
c:\users\Default\AppData\Local\AVG
c:\users\janicka_notasek\AppData\Roaming\AVG
c:\users\janicka_notasek\AppData\Roaming\TuneUp Software
c:\programdata\Avg
c:\users\janicka_notasek\AppData\Local\ESET
c:\program files\F-Secure
c:\program files\Google\Update

Driver::
aswVmm
aswTap
fsni

RegLock::
[HKEY_USERS\.Default\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.htm\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ChromeHTML"
.
[HKEY_USERS\.Default\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.html\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ChromeHTML"
.
[HKEY_USERS\.Default\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.shtml\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ChromeHTML"
.
[HKEY_USERS\.Default\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.xht\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ChromeHTML"
.
[HKEY_USERS\.Default\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.xhtml\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ChromeHTML"
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Control\PCW\Security]
@Denied: (Full) (Everyone)


Zvol možnost Soubor -> Uložit jako... a nastav tyto parametry:
Název souboru: zde napiš: CFScript.txt
Uložit jako typ: tak tam vyber Všechny soubory
Ulož soubor na plochu.
Ukonči všechna aktivní okna.

Uchop myší vytvořený skript CFScript.txt, přemísti ho nad stažený program ComboFix.exe a když se oba soubory překryjí, skript upusť.
- Automaticky se spustí ComboFix
- Vlož sem log, který vyběhne v závěru čistícího procesu + nový log z HJT

Upozornění : Může se stát, že po aplikaci Combofixu a restartu počítače, Windows nenaběhnou , nebo nenajede plocha , budou problémy s připojením, pak znovu restartuj počítač, pokud to nepomůže , po restartu mačkej klávesu F8 a pak zvol poslední známou funkční konfiguraci. , či použij bod obnovy.


Pak si znovu nainstaluj Avast.

[Kat1]

Dobrý večer,
Log CombF

ComboFix 16-09-28.01 - janicka_notasek 05.10.2016 21:55:22.4.4 - x86
Microsoft Windows 7 Home Premium 6.1.7601.1.1250.420.1029.18.2036.1324 [GMT 2:00]
Spuštěný z: c:\users\janicka_notasek\Desktop\ComboFix.exe
Použité ovládací přepínače :: c:\users\janicka_notasek\Desktop\CFScript.txt
SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
* Vytvořen nový Bod Obnovení
.
FILE ::
"c:\windows\c:\users\JANICK~1\AppData\Local\Temp\aswVmm.sys"
"c:\windows\system32\drivers\aswTap.sys"
"c:\windows\system32\drivers\EpfwLWF.sys"
"c:\windows\Tasks\GoogleUpdateTaskMachineCore.job"
"c:\windows\Tasks\GoogleUpdateTaskMachineUA.job"
.
.
((((((((((((((((((((((((((((((((((((((( Ostatní výmazy )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
c:\program files\Google\Update
c:\program files\Google\Update\1.3.31.5\GoogleCrashHandler.exe
c:\program files\Google\Update\1.3.31.5\GoogleCrashHandler64.exe
c:\program files\Google\Update\1.3.31.5\GoogleUpdate.exe
c:\program files\Google\Update\1.3.31.5\GoogleUpdateBroker.exe
c:\program files\Google\Update\1.3.31.5\GoogleUpdateComRegisterShell64.exe
c:\program files\Google\Update\1.3.31.5\GoogleUpdateHelper.msi
c:\program files\Google\Update\1.3.31.5\GoogleUpdateOnDemand.exe
c:\program files\Google\Update\1.3.31.5\GoogleUpdateSetup.exe
c:\program files\Google\Update\1.3.31.5\GoogleUpdateWebPlugin.exe
c:\program files\Google\Update\1.3.31.5\goopdate.dll
c:\program files\Google\Update\1.3.31.5\goopdateres_am.dll
c:\program files\Google\Update\1.3.31.5\goopdateres_ar.dll
c:\program files\Google\Update\1.3.31.5\goopdateres_bg.dll
c:\program files\Google\Update\1.3.31.5\goopdateres_bn.dll
c:\program files\Google\Update\1.3.31.5\goopdateres_ca.dll
c:\program files\Google\Update\1.3.31.5\goopdateres_cs.dll
c:\program files\Google\Update\1.3.31.5\goopdateres_da.dll
c:\program files\Google\Update\1.3.31.5\goopdateres_de.dll
c:\program files\Google\Update\1.3.31.5\goopdateres_el.dll
c:\program files\Google\Update\1.3.31.5\goopdateres_en-GB.dll
c:\program files\Google\Update\1.3.31.5\goopdateres_en.dll
c:\program files\Google\Update\1.3.31.5\goopdateres_es-419.dll
c:\program files\Google\Update\1.3.31.5\goopdateres_es.dll
c:\program files\Google\Update\1.3.31.5\goopdateres_et.dll
c:\program files\Google\Update\1.3.31.5\goopdateres_fa.dll
c:\program files\Google\Update\1.3.31.5\goopdateres_fi.dll
c:\program files\Google\Update\1.3.31.5\goopdateres_fil.dll
c:\program files\Google\Update\1.3.31.5\goopdateres_fr.dll
c:\program files\Google\Update\1.3.31.5\goopdateres_gu.dll
c:\program files\Google\Update\1.3.31.5\goopdateres_hi.dll
c:\program files\Google\Update\1.3.31.5\goopdateres_hr.dll
c:\program files\Google\Update\1.3.31.5\goopdateres_hu.dll
c:\program files\Google\Update\1.3.31.5\goopdateres_id.dll
c:\program files\Google\Update\1.3.31.5\goopdateres_is.dll
c:\program files\Google\Update\1.3.31.5\goopdateres_it.dll
c:\program files\Google\Update\1.3.31.5\goopdateres_iw.dll
c:\program files\Google\Update\1.3.31.5\goopdateres_ja.dll
c:\program files\Google\Update\1.3.31.5\goopdateres_kn.dll
c:\program files\Google\Update\1.3.31.5\goopdateres_ko.dll
c:\program files\Google\Update\1.3.31.5\goopdateres_lt.dll
c:\program files\Google\Update\1.3.31.5\goopdateres_lv.dll
c:\program files\Google\Update\1.3.31.5\goopdateres_ml.dll
c:\program files\Google\Update\1.3.31.5\goopdateres_mr.dll
c:\program files\Google\Update\1.3.31.5\goopdateres_ms.dll
c:\program files\Google\Update\1.3.31.5\goopdateres_nl.dll
c:\program files\Google\Update\1.3.31.5\goopdateres_no.dll
c:\program files\Google\Update\1.3.31.5\goopdateres_pl.dll
c:\program files\Google\Update\1.3.31.5\goopdateres_pt-BR.dll
c:\program files\Google\Update\1.3.31.5\goopdateres_pt-PT.dll
c:\program files\Google\Update\1.3.31.5\goopdateres_ro.dll
c:\program files\Google\Update\1.3.31.5\goopdateres_ru.dll
c:\program files\Google\Update\1.3.31.5\goopdateres_sk.dll
c:\program files\Google\Update\1.3.31.5\goopdateres_sl.dll
c:\program files\Google\Update\1.3.31.5\goopdateres_sr.dll
c:\program files\Google\Update\1.3.31.5\goopdateres_sv.dll
c:\program files\Google\Update\1.3.31.5\goopdateres_sw.dll
c:\program files\Google\Update\1.3.31.5\goopdateres_ta.dll
c:\program files\Google\Update\1.3.31.5\goopdateres_te.dll
c:\program files\Google\Update\1.3.31.5\goopdateres_th.dll
c:\program files\Google\Update\1.3.31.5\goopdateres_tr.dll
c:\program files\Google\Update\1.3.31.5\goopdateres_uk.dll
c:\program files\Google\Update\1.3.31.5\goopdateres_ur.dll
c:\program files\Google\Update\1.3.31.5\goopdateres_vi.dll
c:\program files\Google\Update\1.3.31.5\goopdateres_zh-CN.dll
c:\program files\Google\Update\1.3.31.5\goopdateres_zh-TW.dll
c:\program files\Google\Update\1.3.31.5\npGoogleUpdate3.dll
c:\program files\Google\Update\1.3.31.5\psmachine.dll
c:\program files\Google\Update\1.3.31.5\psmachine_64.dll
c:\program files\Google\Update\1.3.31.5\psuser.dll
c:\program files\Google\Update\1.3.31.5\psuser_64.dll
c:\program files\Google\Update\Download\{430FD4D0-B729-4F61-AA34-91526481799D}\1.3.31.5\GoogleUpdateSetup.exe
c:\program files\Google\Update\Download\{4DC8B4CA-1BDA-483E-B5FA-D3C12E15B62D}\53.0.2785.143\53.0.2785.143_53.0.2785.116_chrome_updater.exe
c:\program files\Google\Update\Download\{F69EABDD-A4BB-4555-BE7E-1EA5F59BBA24}\0.0.0.0\googletoolbarinstaller_en_signed.exe
c:\program files\Google\Update\GoogleUpdate.exe
c:\programdata\Avg
c:\programdata\Avg\AV\cfgall\telemetry.cfg
c:\programdata\Avg\AWL\appdata.dat
c:\programdata\Avg\AWL\AvgRep.xml
c:\programdata\Avg\AWL\Program Statistics\ProgramStatistics.2013.tudb
c:\programdata\Avg\AWL\TUProgMan.10.tudb
c:\programdata\Avg\AWL\TUProgManagerCache.10.tudb
c:\programdata\Avg\AWL\TUProgRating.10.tudb
c:\programdata\Avg\AWL\TUReportData.10.tudb
c:\programdata\Avg\AWL\TUUtilitiesSvc.13.tudb
c:\programdata\F-Secure
c:\programdata\F-Secure\Logs\CCF\downloaded_files.log
c:\programdata\F-Secure\Logs\daas2\daas2.log
c:\programdata\F-Secure\Logs\DART\cleanup_tool.log
c:\programdata\F-Secure\Logs\DART\fssos.log
c:\programdata\F-Secure\Logs\DART\fssos_admin_helper.log
c:\programdata\F-Secure\Logs\tool\stub_download.log
c:\users\Default\AppData\Local\AVG
c:\users\Default\AppData\Local\AVG\Log\tu16\avglng.log
c:\users\Default\AppData\Local\AVG\Log\tu16\avglng.log.lock
c:\users\Default\AppData\Local\AVG\Log\tu16\sqldb.log
c:\users\Default\AppData\Local\AVG\Log\tu16\tuinstallhelper.log
c:\users\Default\AppData\Local\AVG\Log\tu16\tupk.log
c:\users\Default\AppData\Local\AVG\Log\tu16\tupk.log.lock
c:\users\janicka_notasek\AppData\Local\ESET
c:\users\janicka_notasek\AppData\Local\ESET\ESETOnlineScanner\esets_apiW.dll
c:\users\janicka_notasek\AppData\Local\ESET\ESETOnlineScanner\esets_apiW_a.dll
c:\users\janicka_notasek\AppData\Local\ESET\ESETOnlineScanner\Char_Cache\CACHE.NDB
c:\users\janicka_notasek\AppData\Local\ESET\ESETOnlineScanner\Modules\data\updfiles\http_update.eset.com\download\engineols3\update.ver
c:\users\janicka_notasek\AppData\Local\ESET\ESETOnlineScanner\Modules\data\updfiles\lastupd.ver
c:\users\janicka_notasek\AppData\Local\ESET\ESETOnlineScanner\Modules\data\updfiles\nod23F3.nup
c:\users\janicka_notasek\AppData\Local\ESET\ESETOnlineScanner\Modules\data\updfiles\nod2518.nup
c:\users\janicka_notasek\AppData\Local\ESET\ESETOnlineScanner\Modules\data\updfiles\nod2793.nup
c:\users\janicka_notasek\AppData\Local\ESET\ESETOnlineScanner\Modules\data\updfiles\nod29D9.nup
c:\users\janicka_notasek\AppData\Local\ESET\ESETOnlineScanner\Modules\data\updfiles\nod38CA.nup
c:\users\janicka_notasek\AppData\Local\ESET\ESETOnlineScanner\Modules\data\updfiles\nod3EA7.nup
c:\users\janicka_notasek\AppData\Local\ESET\ESETOnlineScanner\Modules\data\updfiles\nod456B.nup
c:\users\janicka_notasek\AppData\Local\ESET\ESETOnlineScanner\Modules\data\updfiles\nod4B33.nup
c:\users\janicka_notasek\AppData\Local\ESET\ESETOnlineScanner\Modules\data\updfiles\nod50E5.nup
c:\users\janicka_notasek\AppData\Local\ESET\ESETOnlineScanner\Modules\data\updfiles\nod5122.nup
c:\users\janicka_notasek\AppData\Local\ESET\ESETOnlineScanner\Modules\data\updfiles\nod57D8.nup
c:\users\janicka_notasek\AppData\Local\ESET\ESETOnlineScanner\Modules\data\updfiles\nod59AA.nup
c:\users\janicka_notasek\AppData\Local\ESET\ESETOnlineScanner\Modules\data\updfiles\nod5BD2.nup
c:\users\janicka_notasek\AppData\Local\ESET\ESETOnlineScanner\Modules\data\updfiles\nod653E.nup
c:\users\janicka_notasek\AppData\Local\ESET\ESETOnlineScanner\Modules\data\updfiles\nod6B36.nup
c:\users\janicka_notasek\AppData\Local\ESET\ESETOnlineScanner\Modules\data\updfiles\nod7AC8.nup
c:\users\janicka_notasek\AppData\Local\ESET\ESETOnlineScanner\Modules\data\updfiles\nod7D4A.nup
c:\users\janicka_notasek\AppData\Local\ESET\ESETOnlineScanner\Modules\data\updfiles\upd.ver
c:\users\janicka_notasek\AppData\Local\ESET\ESETOnlineScanner\Modules\em000_32.dat
c:\users\janicka_notasek\AppData\Local\ESET\ESETOnlineScanner\Modules\em001_32.dat
c:\users\janicka_notasek\AppData\Local\ESET\ESETOnlineScanner\Modules\em002_32.dat
c:\users\janicka_notasek\AppData\Local\ESET\ESETOnlineScanner\Modules\em003_32.dat
c:\users\janicka_notasek\AppData\Local\ESET\ESETOnlineScanner\Modules\em004_32.dat
c:\users\janicka_notasek\AppData\Local\ESET\ESETOnlineScanner\Modules\em005_32.dat
c:\users\janicka_notasek\AppData\Local\ESET\ESETOnlineScanner\Modules\em006_32.dat
c:\users\janicka_notasek\AppData\Local\ESET\ESETOnlineScanner\Modules\em023_32.dat
c:\users\janicka_notasek\AppData\Local\ESET\ESETOnlineScanner\Modules\esets_api.stg
c:\users\janicka_notasek\AppData\Local\F-Secure
c:\users\janicka_notasek\AppData\Local\F-Secure\Antivirus\ScanningReports\scan_report.html
c:\users\janicka_notasek\AppData\Local\F-Secure\Antivirus\ScanningReports\scan_report_00-24-11_28.09.16.html
c:\users\janicka_notasek\AppData\Local\F-Secure\Antivirus\ScanningReports\scan_report_02-03-29_24.09.16.html
c:\users\janicka_notasek\AppData\Local\F-Secure\Antivirus\ScheduledScanReports\FSAV_CMD_00-13-15_24.09.16.htm
c:\users\janicka_notasek\AppData\Local\F-Secure\fs19035148.tmp\CleanupTool.exe
c:\users\janicka_notasek\AppData\Local\F-Secure\fs19035148.tmp\networkinstaller_import.ccf_settings
c:\users\janicka_notasek\AppData\Local\F-Secure\fs19035148.tmp\serviceenabler.msi
c:\users\janicka_notasek\AppData\Local\F-Secure\fs19035148.tmp\stubConfig.xml
c:\users\janicka_notasek\AppData\Local\F-Secure\Log\CCF\ActionCenter.log
c:\users\janicka_notasek\AppData\Local\F-Secure\Log\CCF\ActionCenterSentMessages.log
c:\users\janicka_notasek\AppData\Local\F-Secure\Log\CCF\CCFDLLHosterAPI.log
c:\users\janicka_notasek\AppData\Local\F-Secure\Log\CCF\CCFLaunch.log
c:\users\janicka_notasek\AppData\Local\F-Secure\Log\CCF\CuifApi.log
c:\users\janicka_notasek\AppData\Local\F-Secure\Log\CCF\downloaded_files.log
c:\users\janicka_notasek\AppData\Local\F-Secure\Log\CCF\fs_customization_reader.log
c:\users\janicka_notasek\AppData\Local\F-Secure\Log\CCF\fs_se_buy.log
c:\users\janicka_notasek\AppData\Local\F-Secure\Log\CCF\GUTS2_AUAAPI.log
c:\users\janicka_notasek\AppData\Local\F-Secure\Log\CCF\Hoster.log
c:\users\janicka_notasek\AppData\Local\F-Secure\Log\ComputerSecurity\DnsCheck.log
c:\users\janicka_notasek\AppData\Local\F-Secure\Log\ComputerSecurity\FSGUI\AntiVirus.log
c:\users\janicka_notasek\AppData\Local\F-Secure\Log\ComputerSecurity\FSGUI\fsavaui.exe.log
c:\users\janicka_notasek\AppData\Local\F-Secure\Log\ComputerSecurity\FSGUI\ModernApi.log
c:\users\janicka_notasek\AppData\Local\F-Secure\Log\ComputerSecurity\FSGUI\OasAlertQueue.log
c:\users\janicka_notasek\AppData\Local\F-Secure\Log\CUIF\About.dll.log
c:\users\janicka_notasek\AppData\Local\F-Secure\Log\CUIF\AboutPlugin.dll.log
c:\users\janicka_notasek\AppData\Local\F-Secure\Log\CUIF\ActionCenterPlugin.dll.log
c:\users\janicka_notasek\AppData\Local\F-Secure\Log\CUIF\addproductui.dll.log
c:\users\janicka_notasek\AppData\Local\F-Secure\Log\CUIF\CommonSettingsPlugin.dll.log
c:\users\janicka_notasek\AppData\Local\F-Secure\Log\CUIF\ControlLayer.dll.1.log
c:\users\janicka_notasek\AppData\Local\F-Secure\Log\CUIF\ControlLayer.dll.2.log
c:\users\janicka_notasek\AppData\Local\F-Secure\Log\CUIF\ControlLayer.dll.log
c:\users\janicka_notasek\AppData\Local\F-Secure\Log\CUIF\ControlPanelTools.dll.log
c:\users\janicka_notasek\AppData\Local\F-Secure\Log\CUIF\CuifSimpleAction.dll.log
c:\users\janicka_notasek\AppData\Local\F-Secure\Log\CUIF\CUIFWebKit.dll.1.log
c:\users\janicka_notasek\AppData\Local\F-Secure\Log\CUIF\CUIFWebKit.dll.log
c:\users\janicka_notasek\AppData\Local\F-Secure\Log\CUIF\fs_cs_status_notification.dll.log
c:\users\janicka_notasek\AppData\Local\F-Secure\Log\CUIF\fs_gaming_mode_ui.dll.log
c:\users\janicka_notasek\AppData\Local\F-Secure\Log\CUIF\Help.dll.log
c:\users\janicka_notasek\AppData\Local\F-Secure\Log\CUIF\HelpPlugin.dll.log
c:\users\janicka_notasek\AppData\Local\F-Secure\Log\CUIF\checkforupdatesui.dll.log
c:\users\janicka_notasek\AppData\Local\F-Secure\Log\CUIF\LaunchPadPlugin.dll.log
c:\users\janicka_notasek\AppData\Local\F-Secure\Log\CUIF\LegacyLink.dll.log
c:\users\janicka_notasek\AppData\Local\F-Secure\Log\CUIF\Licensing.dll.log
c:\users\janicka_notasek\AppData\Local\F-Secure\Log\CUIF\LocaleInfo.dll.log
c:\users\janicka_notasek\AppData\Local\F-Secure\Log\CUIF\Localization.dll.log
c:\users\janicka_notasek\AppData\Local\F-Secure\Log\CUIF\ManagementAgent.dll.log
c:\users\janicka_notasek\AppData\Local\F-Secure\Log\CUIF\ManagementAgentDatabaseVersionSettings.log
c:\users\janicka_notasek\AppData\Local\F-Secure\Log\CUIF\ManagementAgentPump.log
c:\users\janicka_notasek\AppData\Local\F-Secure\Log\CUIF\NotificationsHistoryPlugin.dll.log
c:\users\janicka_notasek\AppData\Local\F-Secure\Log\CUIF\OnlineSafety.dll.log
c:\users\janicka_notasek\AppData\Local\F-Secure\Log\CUIF\ProductInfo.dll.log
c:\users\janicka_notasek\AppData\Local\F-Secure\Log\CUIF\RemoteDataPeerServer.log
c:\users\janicka_notasek\AppData\Local\F-Secure\Log\CUIF\safesearchapp.dll.log
c:\users\janicka_notasek\AppData\Local\F-Secure\Log\CUIF\serviceinstallerui.dll.log
c:\users\janicka_notasek\AppData\Local\F-Secure\Log\CUIF\Status.dll.log
c:\users\janicka_notasek\AppData\Local\F-Secure\Log\CUIF\SystemInfo.dll.log
c:\users\janicka_notasek\AppData\Local\F-Secure\Log\CUIF\WinFirewall.dll.log
c:\users\janicka_notasek\AppData\Local\F-Secure\Log\DART\fssos.log
c:\users\janicka_notasek\AppData\Local\F-Secure\Log\fsav\spapi.log
c:\users\janicka_notasek\AppData\Local\F-Secure\Log\FSCC\ControlPanelTools.log
c:\users\janicka_notasek\AppData\Local\F-Secure\Log\FSCC\FsIeHttps.log
c:\users\janicka_notasek\AppData\Local\F-Secure\Log\FSCC\OnlineSafety.log
c:\users\janicka_notasek\AppData\Local\F-Secure\Log\FSCC\OnlineSafetyWidgets.log
c:\users\janicka_notasek\AppData\Local\F-Secure\Log\MySA\AddProductUI.log
c:\users\janicka_notasek\AppData\Local\F-Secure\Log\MySA\FsGuiStarter.log
c:\users\janicka_notasek\AppData\Local\F-Secure\Log\MySA\ServiceInstallerUI.log
c:\users\janicka_notasek\AppData\Local\F-Secure\Log\MySA\stub.log
c:\users\janicka_notasek\AppData\Local\F-Secure\Log\MySA\TrayIconPlugin.log
c:\users\janicka_notasek\AppData\Local\F-Secure\Log\SafeSearch\SafeSearch.log
c:\users\janicka_notasek\AppData\Local\F-Secure\Log\tool\stub_download.log
c:\users\janicka_notasek\AppData\Local\F-Secure\stubdl\F-SecureOnlineScanner.exe
c:\users\janicka_notasek\AppData\Local\F-Secure\stubdl\fsdart.exe
c:\users\janicka_notasek\AppData\Local\F-Secure\temp\compsec\desktop_1.png
c:\users\janicka_notasek\AppData\Roaming\AVG
c:\users\janicka_notasek\AppData\Roaming\AVG\AV\cfgall\filevault.cfg
c:\users\janicka_notasek\AppData\Roaming\AVG\AV\cfgall\fixcfg.lock
c:\users\janicka_notasek\AppData\Roaming\AVG\AV\cfgall\usergui.cfg
c:\users\janicka_notasek\AppData\Roaming\AVG\AV\cfgall\userguistate.cfg
c:\users\janicka_notasek\AppData\Roaming\TuneUp Software
c:\windows\system32\drivers\aswTap.sys
c:\windows\system32\drivers\EpfwLWF.sys
c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
.
.
((((((((((((((((((((((((((((((((((((((( Ovladače/Služby )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
-------\Legacy_ASWVMM
-------\Legacy_FSNI
-------\Service_aswTap
-------\Service_aswVmm
-------\Service_fsni
.
.
((((((((((((((((((((((((( Soubory vytvořené od 2016-09-05 do 2016-10-05 )))))))))))))))))))))))))))))))
.
.
2020-09-11 15:42 . 2020-09-11 15:42 -------- d-----w- c:\users\janicka_notasek\WPDNSE
2016-10-05 20:43 . 2016-10-05 20:47 -------- d-----w- c:\users\janicka_notasek\AppData\Local\temp
2016-10-05 20:43 . 2016-10-05 20:43 -------- d-----w- c:\users\Default\AppData\Local\temp
2016-10-05 09:56 . 2016-10-05 09:57 -------- d-----w- c:\users\janicka_notasek\AppData\Local\Adobe
2016-10-04 02:27 . 2016-10-04 02:29 -------- d-----w- c:\programdata\F-Secure-UninstallationTool
2016-10-03 11:02 . 2016-10-03 11:02 -------- d-----w- c:\program files\VS Revo Group
2016-10-02 21:05 . 2016-10-02 21:05 -------- d-----w- c:\users\janicka_notasek\AppData\Roaming\ProductData
2016-10-02 21:02 . 2016-10-02 12:33 24064 ----a-w- c:\windows\zoek-delete.exe
2016-10-02 18:46 . 2016-10-02 18:46 -------- d-----w- c:\users\janicka_notasek\AppData\Local\Data aplikacÝ
2016-10-02 12:33 . 2016-10-02 18:39 -------- d-----w- C:\zoek_backup
2016-10-01 13:36 . 2016-10-02 02:31 24688 ----a-w- c:\windows\system32\drivers\TrueSight.sys
2016-10-01 13:25 . 2016-10-01 13:27 -------- d-----w- c:\program files\RogueKiller
2016-10-01 13:13 . 2016-10-02 18:33 -------- d-----w- c:\users\janicka_notasek\AppData\Local\CrashDumps
2016-10-01 12:50 . 2016-10-02 02:28 -------- d-----w- c:\programdata\RogueKiller
2016-10-01 00:47 . 2016-10-01 03:18 170200 ----a-w- c:\windows\system32\drivers\MBAMSwissArmy.sys
2016-10-01 00:46 . 2016-10-01 03:17 -------- d-----w- c:\program files\Malwarebytes Anti-Malware
2016-10-01 00:46 . 2016-03-10 12:09 53120 ----a-w- c:\windows\system32\drivers\mwac.sys
2016-10-01 00:46 . 2016-03-10 12:08 126336 ----a-w- c:\windows\system32\drivers\mbamchameleon.sys
2016-10-01 00:46 . 2016-03-10 12:08 24448 ----a-w- c:\windows\system32\drivers\mbam.sys
2016-10-01 00:43 . 2016-10-01 00:43 -------- d-----w- c:\users\janicka_notasek\AppData\Local\Programs
2016-09-30 23:24 . 2016-09-30 23:24 -------- d-----w- c:\users\janicka_notasek\AppData\Local\CEF
2016-09-30 21:53 . 2011-06-10 12:34 80416 ----a-w- c:\windows\system32\RtNicProp32.dll
2016-09-30 21:53 . 2011-06-10 12:34 100896 ----a-w- c:\windows\system32\RTNUninst32.dll
2016-09-30 21:53 . 2016-09-30 21:53 -------- d-----w- c:\program files\Realtek
2016-09-28 06:50 . 2016-09-28 06:50 -------- dc----w- c:\users\janicka_notasek\AppData\Local\MigWiz
2016-09-27 23:19 . 2016-09-27 23:19 -------- d-----w- c:\program files\Common Files\AV
2016-09-27 23:15 . 2016-09-30 22:54 -------- d-----w- c:\users\janicka_notasek\AppData\Local\ElevatedDiagnostics
2016-09-27 16:19 . 2016-09-27 16:19 -------- d-----w- C:\Nová složka
2016-09-23 00:08 . 2016-09-28 06:06 -------- d-----w- c:\users\janicka_notasek\AppData\Local\VirtualStore
2016-09-22 20:05 . 2016-09-22 20:58 -------- d-----w- c:\users\janicka_notasek\.oracle_jre_usage
2016-09-22 20:04 . 2016-09-22 20:59 -------- d-----w- c:\programdata\Oracle
2016-09-22 09:37 . 2016-09-22 21:41 -------- d-----w- c:\windows\Panther
2016-09-19 00:15 . 2016-09-19 00:15 62576 ----a-w- c:\programdata\Microsoft\Windows Defender\Definition Updates\{92DA9EFD-13F6-49B9-8167-570E2BBE1D28}\offreg.2420.dll
2016-09-18 23:27 . 2016-08-02 22:19 9654712 ----a-w- c:\programdata\Microsoft\Windows Defender\Definition Updates\{92DA9EFD-13F6-49B9-8167-570E2BBE1D28}\mpengine.dll
2016-09-18 15:13 . 2016-10-01 12:25 -------- d-----w- C:\AdwCleaner
2016-09-18 05:06 . 2016-09-21 20:52 -------- d-----w- c:\programdata\MFAData
2016-09-18 05:06 . 2016-09-18 05:06 -------- d-----w- c:\users\janicka_notasek\AppData\Local\MFAData
2016-09-18 04:23 . 2016-09-18 04:23 -------- d-----w- c:\windows\Options
2016-09-18 04:21 . 2012-10-23 14:27 12800 ------w- c:\windows\EricssonMobileBroadbandVer.dll
2016-09-18 04:19 . 2016-09-18 04:19 -------- d-----w- c:\users\janicka_notasek\AppData\Roaming\InstallShield
2016-09-18 03:40 . 2011-08-31 21:09 400544 ----a-w- c:\windows\system32\athihvs.dll
2016-09-10 06:37 . 2016-09-10 06:53 -------- d-----w- c:\programdata\Microsoft – kopie (2)
2016-09-10 06:36 . 2016-09-10 06:36 -------- d-----w- c:\programdata\Microsoft – kopie
2016-09-09 18:54 . 2016-09-09 18:54 -------- d-----w- c:\programdata\IMSIDesign
.
.
.
(((((((((((((((((((((((((((((((((((((((( Find3M výpis ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2016-09-02 15:16 . 2016-09-17 21:09 254464 ----a-w- c:\windows\system32\schannel.dll
2016-09-02 15:16 . 2016-09-17 21:09 141312 ----a-w- c:\windows\system32\rpchttp.dll
2016-07-26 12:24 . 2013-08-10 12:18 406184 ------w- c:\windows\system32\MpSigStub.exe
2016-07-12 14:24 . 2016-07-12 14:24 921280 ----a-w- c:\windows\ucrtbase.dll
2016-07-08 15:16 . 2016-08-18 16:54 2048 ----a-w- c:\windows\system32\tzres.dll
.
.
(((((((((((((((((((((((((((((((((( Spouštěcí body v registru )))))))))))))))))))))))))))))))))))))))))))))
.
.
*Poznámka* prázdné záznamy a legitimní výchozí údaje nejsou zobrazeny.
REGEDIT4
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"BingSvc"="c:\users\janicka_notasek\AppData\Local\Microsoft\BingSvc\BingSvc.exe" [2015-11-05 144008]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"SynTPEnh"="c:\program files\Synaptics\SynTP\SynTPEnh.exe" [2011-10-14 2299176]
"Persistence"="c:\windows\system32\igfxpers.exe" [2012-07-04 168256]
"HotKeysCmds"="c:\windows\system32\hkcmd.exe" [2012-07-04 175936]
"GfxServiceInstall"="c:\windows\system32\GfxCUIServiceInstall.vbs" [2012-06-27 131]
.
[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\RunOnce]
"SPReview"="c:\windows\System32\SPReview\SPReview.exe" [2013-10-26 280576]
.
c:\users\janicka_notasek\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\
Výřezy obrazovky a spuštění aplikace OneNote 2007.lnk - c:\program files\Microsoft Office\Office12\ONENOTEM.EXE /tsr [2009-2-26 97680]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorUser"= 3 (0x3)
"EnableUIADesktopToggle"= 0 (0x0)
"SoftwareSASGeneration"= 1 (0x1)
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\cz.seznam.software.autoupdate]
2013-05-16 13:25 1062472 ----a-w- c:\users\janicka_notasek\AppData\Roaming\Seznam.cz\szninstall.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\GrooveMonitor]
2009-02-26 16:36 30040 ----a-w- c:\program files\Microsoft Office\Office12\GrooveMonitor.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\seznam-listicka-distribuce]
2013-05-16 13:25 1062472 ----a-w- c:\program files\Seznam.cz\distribution\szninstall.exe
.
R2 LiveUpdateSvc;LiveUpdate;c:\program files\IObit\LiveUpdate\LiveUpdate.exe [2015-11-05 2909472]
R3 AGSService;Adobe Genuine Software Integrity Service;c:\program files\Common Files\Adobe\AdobeGCClient\AGSService.exe [2016-08-12 2159832]
R3 IEEtwCollectorService;Internet Explorer ETW Collector Service;c:\windows\system32\IEEtwCollector.exe [2016-09-22 102912]
R3 RTL8167;Realtek 8167 NT Driver;c:\windows\system32\DRIVERS\Rt86win7.sys [2011-06-10 394856]
R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys [2010-11-20 52224]
R3 WatAdminSvc;Služba Technologie aktivace Windows;c:\windows\system32\Wat\WatAdminSvc.exe [2013-08-07 1343400]
S1 CGKDarkWatcher;CGKDarkWatcher;c:\windows\system32\drivers\CGKDarkWatcher.sys [2016-01-17 15128]
S2 DiagTrack;Diagnostics Tracking Service;c:\windows\System32\svchost.exe [2009-07-14 20992]
S3 igddim32;igddim32;c:\windows\system32\DRIVERS\igddim32.sys [2012-06-27 1349120]
S3 igdkmd32;igdkmd32;c:\windows\system32\DRIVERS\igdkmd32.sys [2012-06-27 435200]
.
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost]
LocalServiceAndNoImpersonation REG_MULTI_SZ SSDPSRV upnphost SCardSvr fdrespub AppIDSvc QWAVE wcncsvc Mcx2Svc SensrSvc
utcsvc REG_MULTI_SZ DiagTrack
.
[HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{8A69D345-D564-463c-AFF1-A69D9E530F96}]
2016-10-03 21:32 1266792 ----a-w- c:\program files\Google\Chrome\Application\53.0.2785.143\Installer\chrmstp.exe
.
.
------- Doplňkový sken -------
.
uStart Page = https://www.google.cz/
uInternet Settings,ProxyOverride = *.local
IE: E&xportovat do aplikace Microsoft Excel - c:\progra~1\MICROS~2\Office12\EXCEL.EXE/3000
TCP: DhcpNameServer = 10.0.0.138
.
.
------------------------ Jiné spuštené procesy ------------------------
.
c:\program files\Common Files\Adobe\ARM\1.0\armsvc.exe
c:\windows\system32\msiexec.exe
c:\windows\system32\taskhost.exe
c:\windows\system32\conhost.exe
c:\windows\system32\sppsvc.exe
c:\program files\Windows Media Player\wmpnetwk.exe
c:\windows\servicing\TrustedInstaller.exe
.
**************************************************************************
.
Celkový čas: 2016-10-05 22:52:46 - počítač byl restartován
ComboFix-quarantined-files.txt 2016-10-05 20:52
ComboFix2.txt 2016-10-04 18:15
ComboFix3.txt 2016-10-03 14:11
ComboFix4.txt 2016-10-02 22:57
.
Před spuštěním: Volných bajtů: 286 913 978 368
Po spuštění: Volných bajtů: 286 589 644 800
.
- - End Of File - - 512A1E0EE5EC5D63A6A6BDAFEFAFCFC0
A36C5E4F47E84449FF07ED3517B43A31