Prosím o kontrolu logu

[Žbeky]

Stáhni si System lookup dle varianty tvého Windows - 32bit / 64bit
Spusť jej a do hlavního pole dej

Kód: Vybrat vše

:filefind
SearchEngine.rs
SearchIndexer.dll
taskhost.rs
igfxupdate.exe


Pak klikni na Look a dej sem výsledek hledání

[Reklama]

[lukesss]

SystemLook 30.07.11 by jpshortstuff
Log created at 19:47 on 22/12/2012 by Lukesss
Administrator - Elevation successful

========== filefind ==========

Searching for "SearchEngine.rs"
No files found.

Searching for "SearchIndexer.dll"
No files found.

Searching for "taskhost.rs"
No files found.

Searching for "igfxupdate.exe"
No files found.

-= EOF =-

[Žbeky]

ComboFix se odinstaluje takto:
Start-Spustit a zadej ComboFix /Uninstall

vyčisti systém CCleanerem

Stáhni si OTC na plochu, spusť jej a klikni na Clean up!

+ Nový log z HJT

Stáhni si aswMBR na svojí plochu.
Poklepej na aswMBR.exe. Klikni na Scan.
Po skenu klikni na aswASW.log a ulož si ho na plochu, vlož sem celý obsah toho logu.

Jak se chová PC?

[Žbeky]

Pokud jsi už udělal poslední krok, tak znova stáhni combofix a spusť jej s tímto scriptem

Otevři si Poznámkový blok (Start -> Spustit... a napiš do okna Notepad a dej Ok.
Zkopíruj do něj následující celý text označený zeleně:
Poznámka: Nepoužij k označení skriptu funkci VYBRAT VŠE

Kód: Vybrat vše

KillAll::

File::
c:\windows\system32\sbs_mscorrc.dat
c:\windows\system32\SharedReg.dll
c:\windows\SysWow64\sbs_wminet_utils.dat

Folder::
c:\programdata\{C4ABDBC8-1C81-42C9-BFFC-4A68511E9E4F}

Driver::
SharedReg

NetSvcs::
SharedReg


Zvol možnost Soubor -> Uložit jako... a nastav tyto parametry:
Název souboru: zde napiš: CFScript.txt
Uložit jako typ: tak tam vyber Všechny soubory
Ulož soubor na plochu.
Ukonči všechna aktivní okna.

Uchop myší vytvořený skript CFScript.txt, přemísti ho nad stažený program ComboFix.exe a když se oba soubory překryjí, skript upusť.


- Automaticky se spustí ComboFix
- Vlož sem log, který vyběhne v závěru čistícího procesu

[lukesss]

aswMBR version 0.9.9.1707 Copyright(c) 2011 AVAST Software
Run date: 2012-12-23 15:25:19
-----------------------------
15:25:19.214 OS Version: Windows x64 6.1.7600
15:25:19.214 Number of processors: 4 586 0x503
15:25:19.215 ComputerName: LUKESSSPC UserName: Lukesss
15:25:21.071 Initialize success
15:25:21.567 AVAST engine defs: 12122300
15:25:30.673 Disk 0 (boot) \Device\Harddisk0\DR0 -> \Device\Ide\IdeDeviceP1T0L0-4
15:25:30.675 Disk 0 Vendor: SAMSUNG_HD321KJ CP100-12 Size: 305245MB BusType: 3
15:25:30.690 Disk 0 MBR read successfully
15:25:30.692 Disk 0 MBR scan
15:25:30.695 Disk 0 Windows 7 default MBR code
15:25:30.697 Disk 0 Partition 1 80 (A) 07 HPFS/NTFS NTFS 131059 MB offset 63
15:25:30.716 Disk 0 Partition 2 00 07 HPFS/NTFS NTFS 174182 MB offset 268410240
15:25:30.739 Disk 0 scanning C:\Windows\system32\drivers
15:25:38.481 Service scanning
15:25:52.892 Modules scanning
15:25:52.906 Disk 0 trace - called modules:
15:25:52.946 ntoskrnl.exe CLASSPNP.SYS disk.sys ACPI.sys ataport.SYS pciide.sys PCIIDEX.SYS hal.dll atapi.sys
15:25:52.950 1 nt!IofCallDriver -> \Device\Harddisk0\DR0[0xfffffa80092fc060]
15:25:53.284 3 CLASSPNP.SYS[fffff88000c8743f] -> nt!IofCallDriver -> [0xfffffa8009012e40]
15:25:53.295 5 ACPI.sys[fffff88000ef8781] -> nt!IofCallDriver -> \Device\Ide\IdeDeviceP1T0L0-4[0xfffffa800902f060]
15:25:53.819 AVAST engine scan C:\Windows
15:25:54.947 AVAST engine scan C:\Windows\system32
15:27:50.308 AVAST engine scan C:\Windows\system32\drivers
15:28:07.936 AVAST engine scan C:\Users\Lukesss
15:31:02.610 AVAST engine scan C:\ProgramData
15:31:17.900 Scan finished successfully
15:31:39.750 Disk 0 MBR has been saved successfully to "C:\Users\Lukesss\Desktop\MBR.dat"
15:31:39.754 The log file has been saved successfully to "C:\Users\Lukesss\Desktop\aswMBR.txt"

Procesor se chova jak má, uvidím co RAM po delší době

[lukesss]

ComboFix 12-12-22.02 - Lukesss 23.12.2012 15:36:17.3.4 - x64
Microsoft Windows 7 Ultimate 6.1.7600.0.1250.420.1029.18.10239.8326 [GMT 1:00]
Spuštěný z: c:\users\Lukesss\Desktop\ComboFix.exe
Použité ovládací přepínače :: c:\users\Lukesss\Desktop\CFScript.txt
AV: avast! Antivirus *Disabled/Updated* {2B2D1395-420B-D5C9-657E-930FE358FC3C}
SP: avast! Antivirus *Disabled/Updated* {904CF271-6431-DA47-5FCE-A87D98DFB681}
SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.
FILE ::
"c:\windows\system32\sbs_mscorrc.dat"
"c:\windows\system32\SharedReg.dll"
"c:\windows\SysWow64\sbs_wminet_utils.dat"
.
.
((((((((((((((((((((((((((((((((((((((( Ostatní výmazy )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
c:\programdata\{C4ABDBC8-1C81-42C9-BFFC-4A68511E9E4F}
c:\windows\system32\sbs_mscorrc.dat
c:\windows\system32\SharedReg.dll
c:\windows\SysWow64\sbs_wminet_utils.dat
.
.
((((((((((((((((((((((((( Soubory vytvořené od 2012-11-23 do 2012-12-23 )))))))))))))))))))))))))))))))
.
.
2012-12-23 14:41 . 2012-12-23 14:41 -------- d-----w- c:\users\Default\AppData\Local\temp
2012-12-22 14:19 . 2012-12-22 14:19 -------- d-----w- c:\users\Lukesss\AppData\Local\Adobe
2012-12-22 01:50 . 2012-11-29 15:31 34656 ----a-w- c:\windows\system32\TURegOpt.exe
2012-12-22 01:50 . 2012-11-29 15:31 25952 ----a-w- c:\windows\system32\authuitu.dll
2012-12-22 01:50 . 2012-11-29 15:31 21344 ----a-w- c:\windows\SysWow64\authuitu.dll
2012-12-22 01:49 . 2012-12-22 01:49 -------- d-----w- c:\users\Lukesss\AppData\Roaming\TuneUp Software
2012-12-22 01:49 . 2012-12-22 01:50 -------- d-----w- c:\program files (x86)\TuneUp Utilities 2013
2012-12-22 01:48 . 2012-12-22 01:49 -------- d-----w- c:\programdata\TuneUp Software
2012-12-22 01:48 . 2012-12-22 01:48 -------- d--h--w- c:\programdata\Common Files
2012-12-21 11:14 . 2012-12-21 11:14 -------- d-----w- c:\users\Lukesss\AppData\Roaming\Malwarebytes
2012-12-21 11:14 . 2012-12-21 11:14 -------- d-----w- c:\programdata\Malwarebytes
2012-12-21 11:14 . 2012-12-21 11:14 -------- d-----w- c:\program files (x86)\Malwarebytes' Anti-Malware
2012-12-21 11:14 . 2012-09-29 18:54 25928 ----a-w- c:\windows\system32\drivers\mbam.sys
2012-12-20 15:40 . 2012-12-20 15:41 -------- d-----w- c:\programdata\IObit
2012-12-20 15:40 . 2012-12-20 15:40 -------- d-----w- c:\users\Lukesss\AppData\Roaming\IObit
2012-12-20 15:40 . 2012-12-20 15:40 -------- d-----w- c:\program files (x86)\IObit
2012-12-17 23:29 . 2012-12-17 23:29 -------- d-----w- c:\program files\VideoLAN
2012-12-17 16:25 . 2012-12-17 16:25 76232 ----a-w- c:\programdata\Microsoft\Windows Defender\Definition Updates\{CD41D0B7-96A0-4879-8176-7C32267F6F0B}\offreg.dll
2012-12-11 15:13 . 2012-11-08 17:24 9125352 ----a-w- c:\programdata\Microsoft\Windows Defender\Definition Updates\{CD41D0B7-96A0-4879-8176-7C32267F6F0B}\mpengine.dll
2012-12-10 21:57 . 2012-12-10 21:57 -------- d-----w- c:\users\Lukesss\AppData\Local\Pinnacle
2012-12-10 21:45 . 2012-12-10 21:45 -------- d-----w- c:\program files (x86)\Common Files\Pinnacle
2012-12-10 21:43 . 2012-12-22 01:54 -------- d-----w- c:\users\Lukesss\AppData\Local\Downloaded Installations
2012-12-10 21:41 . 2012-12-10 21:41 -------- d-----w- c:\programdata\Pinnacle Studio Ultimate Collection
2012-12-10 21:16 . 2012-12-10 21:16 -------- d-----w- c:\program files (x86)\Common Files\Pegasus Imaging
2012-12-10 21:15 . 2012-12-10 21:15 -------- d-----w- c:\programdata\Studio 15
2012-12-10 21:15 . 2012-12-10 21:15 -------- d-----w- c:\programdata\Pinnacle Studio Plus
2012-12-10 21:01 . 2012-12-10 21:15 -------- d-----w- c:\program files (x86)\Pinnacle
2012-12-10 20:56 . 2012-12-10 21:40 -------- d-----w- c:\programdata\Pinnacle
2012-12-04 22:08 . 2012-12-15 10:10 -------- d-----w- c:\program files\Defraggler
2012-12-04 22:04 . 2012-12-04 22:04 -------- d-----w- c:\program files (x86)\FileHippo.com
2012-12-04 14:05 . 2012-12-04 14:05 -------- d-----w- c:\program files\CCleaner
2012-12-02 21:01 . 2011-02-19 06:37 1135104 ----a-w- c:\windows\system32\FntCache.dll
2012-12-02 19:50 . 2012-12-03 14:53 -------- d-----w- c:\users\Lukesss\AppData\Roaming\Origin
2012-12-02 19:48 . 2012-12-03 14:55 -------- d-----w- c:\programdata\Origin
2012-12-02 08:19 . 2006-03-31 11:41 3927248 ----a-w- c:\windows\system32\d3dx9_30.dll
2012-11-29 21:08 . 2012-12-21 06:01 -------- d-----w- c:\users\Lukesss\AppData\Roaming\vlc
2012-11-29 21:07 . 2012-11-29 21:07 -------- d-----w- c:\program files (x86)\VideoLAN
2012-11-26 17:37 . 2012-11-26 17:38 -------- d-----w- c:\program files (x86)\Common Files\Adobe
2012-11-26 06:01 . 2012-11-26 06:01 -------- d-----w- c:\windows\SysWow64\Wat
2012-11-26 06:01 . 2012-11-26 06:01 -------- d-----w- c:\windows\system32\Wat
2012-11-26 03:07 . 2010-09-14 06:45 367104 ----a-w- c:\windows\system32\wcncsvc.dll
2012-11-26 03:07 . 2010-09-14 06:07 276992 ----a-w- c:\windows\SysWow64\wcncsvc.dll
2012-11-26 00:07 . 2009-09-10 05:52 257024 ----a-w- c:\windows\SysWow64\msv1_0.dll
2012-11-26 00:07 . 2009-09-10 06:28 311808 ----a-w- c:\windows\system32\msv1_0.dll
2012-11-25 23:59 . 2012-07-26 07:40 2560 ----a-w- c:\windows\system32\drivers\cs-CZ\wdf01000.sys.mui
2012-11-25 23:59 . 2012-07-26 04:55 785512 ----a-w- c:\windows\system32\drivers\Wdf01000.sys
2012-11-25 23:59 . 2012-07-26 04:55 54376 ----a-w- c:\windows\system32\drivers\WdfLdr.sys
2012-11-25 23:59 . 2012-07-26 02:36 9728 ----a-w- c:\windows\system32\Wdfres.dll
2012-11-25 23:46 . 2009-11-25 11:47 99176 ----a-w- c:\windows\SysWow64\PresentationHostProxy.dll
2012-11-25 23:46 . 2009-11-25 11:47 49472 ----a-w- c:\windows\SysWow64\netfxperf.dll
2012-11-25 23:46 . 2009-11-25 11:47 48960 ----a-w- c:\windows\system32\netfxperf.dll
2012-11-25 23:46 . 2009-11-25 11:47 297808 ----a-w- c:\windows\SysWow64\mscoree.dll
2012-11-25 23:46 . 2009-11-25 11:47 295264 ----a-w- c:\windows\SysWow64\PresentationHost.exe
2012-11-25 23:46 . 2009-11-25 11:47 1130824 ----a-w- c:\windows\SysWow64\dfshim.dll
2012-11-25 23:46 . 2009-11-25 11:47 109912 ----a-w- c:\windows\system32\PresentationHostProxy.dll
2012-11-25 23:46 . 2009-11-25 11:47 444752 ----a-w- c:\windows\system32\mscoree.dll
2012-11-25 23:46 . 2009-11-25 11:47 320352 ----a-w- c:\windows\system32\PresentationHost.exe
2012-11-25 23:46 . 2009-11-25 11:47 1942856 ----a-w- c:\windows\system32\dfshim.dll
2012-11-25 23:44 . 2010-02-23 08:16 294912 ----a-w- c:\windows\system32\browserchoice.exe
2012-11-25 23:31 . 2012-07-26 02:26 87040 ----a-w- c:\windows\system32\drivers\WUDFPf.sys
2012-11-25 23:31 . 2012-07-26 02:26 198656 ----a-w- c:\windows\system32\drivers\WUDFRd.sys
2012-11-25 23:31 . 2012-07-26 03:08 84992 ----a-w- c:\windows\system32\WUDFSvc.dll
2012-11-25 23:31 . 2012-07-26 03:08 194048 ----a-w- c:\windows\system32\WUDFPlatform.dll
2012-11-25 23:31 . 2012-07-26 03:08 45056 ----a-w- c:\windows\system32\WUDFCoinstaller.dll
2012-11-25 23:31 . 2012-07-26 03:08 229888 ----a-w- c:\windows\system32\WUDFHost.exe
2012-11-25 23:31 . 2012-07-26 03:08 744448 ----a-w- c:\windows\system32\WUDFx.dll
2012-11-25 23:23 . 2012-11-25 23:23 -------- d-----w- c:\users\Default\AppData\Local\Microsoft Help
2012-11-25 23:20 . 2012-03-01 06:54 22896 ----a-w- c:\windows\system32\drivers\fs_rec.sys
2012-11-25 23:20 . 2012-03-01 06:40 80896 ----a-w- c:\windows\system32\imagehlp.dll
2012-11-25 23:20 . 2012-03-01 05:45 158720 ----a-w- c:\windows\SysWow64\imagehlp.dll
2012-11-25 23:20 . 2012-03-01 06:35 5120 ----a-w- c:\windows\system32\wmi.dll
2012-11-25 23:20 . 2012-03-01 05:40 5120 ----a-w- c:\windows\SysWow64\wmi.dll
2012-11-25 23:18 . 2010-03-04 04:32 243712 ----a-w- c:\windows\system32\drivers\ks.sys
2012-11-25 20:50 . 2011-10-26 04:28 1328640 ----a-w- c:\windows\SysWow64\quartz.dll
2012-11-25 20:49 . 2009-09-03 07:36 1975296 ----a-w- c:\windows\system32\CertEnroll.dll
2012-11-25 20:48 . 2010-08-21 06:31 633856 ----a-w- c:\windows\system32\comctl32.dll
2012-11-25 20:47 . 2012-08-18 15:22 6144 ---ha-w- c:\windows\system32\api-ms-win-security-base-l1-1-0.dll
2012-11-25 20:46 . 2011-01-26 06:53 265088 ----a-w- c:\windows\system32\drivers\dxgmms1.sys
2012-11-25 20:45 . 2012-09-14 19:23 2048 ----a-w- c:\windows\system32\tzres.dll
2012-11-25 20:44 . 2012-09-25 22:39 95744 ----a-w- c:\windows\system32\synceng.dll
2012-11-25 20:44 . 2012-09-25 21:55 78336 ----a-w- c:\windows\SysWow64\synceng.dll
2012-11-25 20:44 . 2011-02-05 12:41 640896 ----a-w- c:\windows\system32\winload.efi
2012-11-25 20:44 . 2011-02-05 12:39 603976 ----a-w- c:\windows\system32\winload.exe
2012-11-25 20:44 . 2011-02-05 12:39 518160 ----a-w- c:\windows\system32\winresume.exe
2012-11-25 20:44 . 2011-02-05 12:41 20352 ----a-w- c:\windows\system32\kdusb.dll
2012-11-25 20:44 . 2011-02-05 12:41 19328 ----a-w- c:\windows\system32\kd1394.dll
2012-11-25 20:44 . 2011-02-05 12:41 556928 ----a-w- c:\windows\system32\winresume.efi
2012-11-25 20:44 . 2011-02-05 12:41 17792 ----a-w- c:\windows\system32\kdcom.dll
2012-11-25 20:44 . 2010-08-31 04:32 954752 ----a-w- c:\windows\SysWow64\mfc40.dll
2012-11-25 20:44 . 2010-08-31 04:32 954288 ----a-w- c:\windows\SysWow64\mfc40u.dll
2012-11-25 20:44 . 2009-08-29 07:50 46592 ----a-w- c:\windows\system32\msasn1.dll
2012-11-25 20:44 . 2009-08-29 06:57 34816 ----a-w- c:\windows\SysWow64\msasn1.dll
2012-11-25 20:42 . 2012-05-14 05:20 956416 ----a-w- c:\windows\system32\localspl.dll
2012-11-25 20:31 . 2012-06-02 05:25 1462784 ----a-w- c:\windows\system32\crypt32.dll
2012-11-25 20:31 . 2012-06-02 05:25 182272 ----a-w- c:\windows\system32\cryptsvc.dll
2012-11-25 20:31 . 2012-06-02 05:25 140288 ----a-w- c:\windows\system32\cryptnet.dll
2012-11-25 20:31 . 2012-06-02 04:45 1157632 ----a-w- c:\windows\SysWow64\crypt32.dll
2012-11-25 20:31 . 2012-06-02 04:45 139264 ----a-w- c:\windows\SysWow64\cryptsvc.dll
2012-11-25 20:31 . 2012-06-02 04:45 103936 ----a-w- c:\windows\SysWow64\cryptnet.dll
2012-11-25 20:30 . 2011-11-19 15:07 77312 ----a-w- c:\windows\system32\packager.dll
2012-11-25 20:30 . 2011-11-19 14:06 67072 ----a-w- c:\windows\SysWow64\packager.dll
2012-11-25 20:28 . 2012-02-15 06:27 1031680 ----a-w- c:\windows\system32\rdpcore.dll
2012-11-25 20:28 . 2012-02-15 05:44 826368 ----a-w- c:\windows\SysWow64\rdpcore.dll
2012-11-25 20:28 . 2012-02-15 04:46 23552 ----a-w- c:\windows\system32\drivers\tdtcp.sys
2012-11-25 20:28 . 2010-01-09 07:19 139264 ----a-w- c:\windows\system32\cabview.dll
2012-11-25 20:28 . 2010-01-09 06:52 132608 ----a-w- c:\windows\SysWow64\cabview.dll
2012-11-25 14:57 . 2012-11-28 02:04 -------- d-----w- c:\program files (x86)\Microsoft Works
2012-11-25 14:56 . 2012-11-27 14:16 -------- d-----w- c:\program files (x86)\Microsoft.NET
2012-11-25 14:56 . 2012-11-25 14:56 -------- d-----w- c:\windows\PCHEALTH
2012-11-25 14:54 . 2012-11-25 14:54 -------- d-----w- c:\program files\Microsoft Office
2012-11-25 14:53 . 2012-11-25 14:53 -------- d-----w- c:\program files (x86)\Microsoft Visual Studio 8
2012-11-25 14:53 . 2012-11-25 14:53 -------- d-----w- c:\users\Lukesss\AppData\Local\Microsoft Help
2012-11-25 14:53 . 2012-11-29 02:45 -------- d-----w- c:\programdata\Microsoft Help
.
.
.
(((((((((((((((((((((((((((((((((((((((( Find3M výpis ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2012-11-25 23:40 . 2012-11-25 23:40 203776 ----a-w- c:\windows\SysWow64\webcheck.dll
2012-11-25 23:40 . 2012-11-25 23:40 249344 ----a-w- c:\windows\system32\webcheck.dll
2012-11-18 10:47 . 2012-03-17 11:22 283200 ----a-w- c:\windows\system32\drivers\dtsoftbus01.sys
2012-10-30 22:51 . 2012-11-18 14:27 59728 ----a-w- c:\windows\system32\drivers\aswTdi.sys
2012-10-30 22:51 . 2012-11-18 14:27 370288 ----a-w- c:\windows\system32\drivers\aswSP.sys
2012-10-30 22:51 . 2012-11-18 14:27 984144 ----a-w- c:\windows\system32\drivers\aswSnx.sys
2012-10-30 22:51 . 2012-11-18 14:27 71600 ----a-w- c:\windows\system32\drivers\aswMonFlt.sys
2012-10-30 22:51 . 2012-11-18 14:27 25232 ----a-w- c:\windows\system32\drivers\aswFsBlk.sys
2012-10-30 22:51 . 2012-11-18 14:26 41224 ----a-w- c:\windows\avastSS.scr
2012-10-30 22:50 . 2012-11-18 14:26 227648 ----a-w- c:\windows\SysWow64\aswBoot.exe
2012-10-30 22:50 . 2012-11-18 14:27 285328 ----a-w- c:\windows\system32\aswBoot.exe
2012-10-16 21:20 . 2012-11-28 09:31 135168 ----a-w- c:\windows\apppatch\AppPatch64\AcXtrnal.dll
2012-10-16 21:20 . 2012-11-28 09:31 347648 ----a-w- c:\windows\apppatch\AppPatch64\AcLayers.dll
2012-10-16 20:34 . 2012-11-28 09:31 559104 ----a-w- c:\windows\apppatch\AcLayers.dll
2012-10-15 16:59 . 2012-11-18 14:27 54072 ----a-w- c:\windows\system32\drivers\aswRdr2.sys
.
.
(((((((((((((((((((((((((((((((((( Spouštěcí body v registru )))))))))))))))))))))))))))))))))))))))))))))
.
.
*Poznámka* prázdné záznamy a legitimní výchozí údaje nejsou zobrazeny.
REGEDIT4
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Advanced SystemCare 6"="c:\program files (x86)\IObit\Advanced SystemCare 6\ASCTray.exe" [2012-09-24 490880]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]
"avast"="c:\program files\AVAST Software\Avast\avastUI.exe" [2012-10-30 4297136]
"StartCCC"="c:\program files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" [2012-07-04 641704]
"GrooveMonitor"="c:\program files (x86)\Microsoft Office\Office12\GrooveMonitor.exe" [2009-02-26 30040]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorAdmin"= 5 (0x5)
"ConsentPromptBehaviorUser"= 3 (0x3)
"EnableUIADesktopToggle"= 0 (0x0)
.
R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2010-03-18 138576]
R3 WatAdminSvc;Služba Technologie aktivace Windows;c:\windows\system32\Wat\WatAdminSvc.exe [2012-11-25 1255736]
S1 aswSnx;aswSnx; [x]
S1 aswSP;aswSP; [x]
S1 dtsoftbus01;DAEMON Tools Virtual Bus Driver;c:\windows\system32\DRIVERS\dtsoftbus01.sys [2012-11-18 283200]
S2 AdvancedSystemCareService6;Advanced SystemCare Service 6;c:\program files (x86)\IObit\Advanced SystemCare 6\ASCService.exe [2012-10-31 464256]
S2 AMD External Events Utility;AMD External Events Utility;c:\windows\system32\atiesrxx.exe [2012-07-04 238080]
S2 AMD FUEL Service;AMD FUEL Service;c:\program files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe [2012-07-04 361984]
S2 AODDriver4.1;AODDriver4.1;c:\program files\ATI Technologies\ATI.ACE\Fuel\amd64\AODDriver2.sys [2012-03-05 53888]
S2 aswFsBlk;aswFsBlk; [x]
S2 aswMonFlt;aswMonFlt;c:\windows\system32\drivers\aswMonFlt.sys [2012-10-30 71600]
S2 MBAMService;MBAMService;c:\program files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe [2012-09-29 676936]
S2 TeamViewer7;TeamViewer 7;c:\program files (x86)\TeamViewer\Version7\TeamViewer_Service.exe [2012-10-23 2848168]
S2 TuneUp.UtilitiesSvc;TuneUp Utilities Service;c:\program files (x86)\TuneUp Utilities 2013\TuneUpUtilitiesService64.exe [2012-11-29 2401632]
S3 amdiox64;AMD IO Driver;c:\windows\system32\DRIVERS\amdiox64.sys [2010-02-18 46136]
S3 athur;Wireless Network Adapter Service;c:\windows\system32\DRIVERS\athurx.sys [2010-01-06 1847296]
S3 AtiHDAudioService;AMD Function Driver for HD Audio Service;c:\windows\system32\drivers\AtihdW76.sys [2012-02-23 95760]
S3 MBAMProtector;MBAMProtector;c:\windows\system32\drivers\mbam.sys [2012-09-29 25928]
S3 RTL8167;Ovladač Realtek 8167 NT;c:\windows\system32\DRIVERS\Rt64win7.sys [2009-06-10 187392]
S3 TuneUpUtilitiesDrv;TuneUpUtilitiesDrv;c:\program files (x86)\TuneUp Utilities 2013\TuneUpUtilitiesDriver64.sys [2012-11-16 11880]
.
.
.
--------- X64 Entries -----------
.
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\00avast]
@="{472083B0-C522-11CF-8763-00608CC02F24}"
[HKEY_CLASSES_ROOT\CLSID\{472083B0-C522-11CF-8763-00608CC02F24}]
2012-10-30 22:50 133400 ----a-w- c:\program files\AVAST Software\Avast\ashShA64.dll
.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Svchost - NetSvcs
SharedReg
SharedReg
SharedReg
.
------- Doplňkový sken -------
.
uLocal Page = c:\windows\system32\blank.htm
mLocal Page = c:\windows\SYSTEM32\blank.htm
IE: E&xportovat do aplikace Microsoft Excel - c:\progra~2\MICROS~1\Office12\EXCEL.EXE/3000
TCP: DhcpNameServer = 192.168.1.1 192.168.2.1
.
.
--------------------- ZAMKNUTÉ KLÍČE V REGISTRU ---------------------
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\VideoLAN.VLCPlugin.*1*]
@="?????????????????? v1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\VideoLAN.VLCPlugin.*1*\CLSID]
@="{E23FE9C6-778E-49D4-B537-38FCDE4887D8}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\VideoLAN.VLCPlugin.*2*]
@="?????????????????? v2"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\VideoLAN.VLCPlugin.*2*\CLSID]
@="{9BE31822-FDAD-461B-AD51-BE1D1C159921}"
.
------------------------ Jiné spuštené procesy ------------------------
.
c:\program files\AVAST Software\Avast\AvastSvc.exe
c:\program files (x86)\IObit\Advanced SystemCare 6\Monitor.exe
c:\program files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe
c:\program files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe
c:\program files (x86)\TeamViewer\Version7\TeamViewer.exe
c:\program files (x86)\TeamViewer\Version7\tv_w32.exe
c:\program files (x86)\teamviewer\version7\TeamViewer_Desktop.exe
.
**************************************************************************
.
Celkový čas: 2012-12-23 15:45:22 - počítač byl restartován
ComboFix-quarantined-files.txt 2012-12-23 14:45
.
Před spuštěním: Volných bajtů: 25 446 129 664
Po spuštění: Volných bajtů: 25 320 882 176
.
- - End Of File - - 023CBE22722F71D2E6BFDB4A2596ED38

[Žbeky]

Ještě jeden skript, špatná syntaxe :(

Otevři si Poznámkový blok (Start -> Spustit... a napiš do okna Notepad a dej Ok.
Zkopíruj do něj následující celý text označený zeleně:
Poznámka: Nepoužij k označení skriptu funkci VYBRAT VŠE

Kód: Vybrat vše

KillAll::

NetSvc::
SharedReg


Zvol možnost Soubor -> Uložit jako... a nastav tyto parametry:
Název souboru: zde napiš: CFScript.txt
Uložit jako typ: tak tam vyber Všechny soubory
Ulož soubor na plochu.
Ukonči všechna aktivní okna.

Uchop myší vytvořený skript CFScript.txt, přemísti ho nad stažený program ComboFix.exe a když se oba soubory překryjí, skript upusť.


- Automaticky se spustí ComboFix
- Vlož sem log, který vyběhne v závěru čistícího procesu