procesor ve využití 70% při nečinnosti

[matesfox]

dobře a není to moc v klidu 65 ?

[Reklama]

[Žbeky]

Docela je. Kolik že jsi tam dal té pasty?
Nasadil jsi chladič správně?

[matesfox]

uplně tenkou vrstvu hodně jsem to rozetřel,jo je nasazen správně.asi lepší chaldioč že? ale i tak přece se nemá proč zahřívat když nic nedělám

[Žbeky]

Hraní hry + prohlížeč je že nic neděláš?

[matesfox]

ne když tu hru mám vyplou,teď mám třeba jen prohlížeč jednu kartu a má 72stupňu momentalně,jen prohlížeč je zaplý

[memphisto]

Prach na větrácích chladičů není?

[matesfox]

ne,absolutně vůbec

[jaro3]

Stáhni si TDSSKiller
Na svojí plochu.Ujisti se , že máš zavřeny všechny ostatní aplikace a prohlížeče. Rozbal soubor a spusť TDSSKiller.exe. Restartuj PC . Log z TDSSKilleru najdeš zde:
C:\TDSSKiller.2.2.7.1._(datum)_log.txt , vlož sem prosím celý obsah logu.

Vypni rez. ochranu u antiviru a antispywaru,příp. firewall..

Stáhni si ComboFix (by sUBs)
a ulož si ho na plochu.
Ukonči všechna aktivní okna a spusť ho.
- Po spuštění se zobrazí podmínky užití, potvrď je stiskem tlačítka Ano
- Dále postupuj dle pokynů, během aplikování ComboFixu neklikej do zobrazujícího se okna
- Po dokončení skenování by měl program vytvořit log - C:\ComboFix.txt - zkopíruj sem prosím celý jeho obsah
Pokud budou problémy , spusť ho v nouz. režimu.

Upozornění : Může se stát, že po aplikaci Combofixu a restartu počítače, Windows nenaběhnou , nebo nenajede plocha , budou problémy s připojením, pak znovu restartuj počítač, pokud to nepomůže , po restartu mačkej klávesu F8 a pak zvol poslední známou funkční konfiguraci. , či použij bod obnovy.

[matesfox]

bohůžel,tdsskiller tu nemůžu dát celý log má to víc než 60000 znaku tak to dám jako přílohu v txt.
combofix:
ComboFix 13-01-02.02 - martin 02.01.2013 21:28:59.1.4 - x64
Microsoft Windows 7 Ultimate 6.1.7600.0.1250.420.1029.18.8157.6607 [GMT 1:00]
Spuštěný z: c:\users\martin\Desktop\ComboFix.exe
AV: ESET Smart Security 6.0 *Enabled/Updated* {77DEAFED-8149-104B-25A1-21771CA47CD1}
FW: ESET personal firewall *Enabled* {4FE52EC8-CB26-1113-0EFE-8842E2773BAA}
SP: ESET Smart Security 6.0 *Enabled/Updated* {CCBF4E09-A773-1FC5-1F11-1A056723366C}
SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
* Rezidentní štít AV je zapnutý
.
.
.
((((((((((((((((((((((((( Soubory vytvořené od 2012-12-02 do 2013-01-02 )))))))))))))))))))))))))))))))
.
.
2013-01-02 20:32 . 2013-01-02 20:32 -------- d-----w- c:\users\Default\AppData\Local\temp
2013-01-02 10:16 . 2013-01-02 10:16 -------- d-----w- c:\program files\VibrateGameDeviceDriver
2013-01-02 10:16 . 2013-01-02 10:16 -------- d-----w- c:\program files (x86)\VibrateGameDeviceDriver
2013-01-01 17:54 . 2012-11-19 00:01 9125352 ----a-w- c:\programdata\Microsoft\Windows Defender\Definition Updates\{C65B699A-5A04-4425-8A69-9CF3BCE4D21E}\mpengine.dll
2012-12-31 11:26 . 2012-12-31 11:26 -------- d--h--w- c:\program files (x86)\Common Files\EAInstaller
2012-12-31 11:25 . 2012-12-31 11:25 -------- d-----w- c:\programdata\Caphyon
2012-12-31 00:27 . 2013-01-01 17:51 -------- d-----w- c:\program files (x86)\Automatické vypnutí počítače
2012-12-29 23:49 . 2012-12-29 23:49 -------- d-----w- c:\programdata\Malwarebytes
2012-12-29 13:27 . 2012-12-29 13:27 -------- d-----w- c:\windows\system32\wbem\Framework
2012-12-28 12:46 . 2012-12-28 12:46 348160 ----a-w- c:\windows\SysWow64\Msvcr71.dll
2012-12-28 12:46 . 2012-12-28 12:46 1700352 ----a-w- c:\windows\SysWow64\gdiplus.dll
2012-12-28 12:46 . 2012-12-28 12:46 1060864 ----a-w- c:\windows\SysWow64\mfc71.dll
2012-12-28 12:44 . 2012-12-28 12:44 178800 ----a-w- c:\windows\SysWow64\CmdLineExt_x64.dll
2012-12-27 20:53 . 2012-12-27 20:53 -------- d-----w- c:\program files (x86)\SystemRequirementsLab
2012-12-27 20:51 . 2012-12-27 20:51 -------- d-----w- c:\program files (x86)\Common Files\Java
2012-12-27 20:51 . 2012-12-27 20:51 859072 ----a-w- c:\windows\SysWow64\npDeployJava1.dll
2012-12-27 20:51 . 2012-12-27 20:51 779704 ----a-w- c:\windows\SysWow64\deployJava1.dll
2012-12-27 20:51 . 2012-12-27 20:51 95184 ----a-w- c:\windows\SysWow64\WindowsAccessBridge-32.dll
2012-12-27 20:51 . 2012-12-27 20:51 -------- d-----w- c:\program files (x86)\Java
2012-12-27 19:46 . 2012-12-28 12:30 -------- d-----w- c:\program files (x86)\Microsoft Games for Windows - LIVE
2012-12-27 19:46 . 2012-12-27 19:46 -------- d-----w- c:\windows\SysWow64\xlive
2012-12-27 19:31 . 2012-12-27 19:31 283200 ----a-w- c:\windows\system32\drivers\dtsoftbus01.sys
2012-12-27 19:31 . 2012-12-27 19:31 -------- d-----w- c:\program files (x86)\DAEMON Tools Lite
2012-12-27 19:29 . 2012-12-27 19:33 -------- d-----w- c:\programdata\DAEMON Tools Lite
2012-12-27 18:59 . 2012-12-29 21:00 -------- d-----w- c:\program files\CPUID
2012-12-27 18:56 . 2012-12-27 18:56 -------- d-----w- c:\program files\Core Temp
2012-12-26 16:15 . 2012-12-26 16:15 -------- d-----w- c:\program files (x86)\Microsoft.NET
2012-12-26 16:09 . 2012-12-26 16:09 -------- d-----w- c:\windows\SysWow64\Wat
2012-12-26 16:09 . 2012-12-26 16:09 -------- d-----w- c:\windows\system32\Wat
2012-12-25 21:15 . 2010-09-14 06:45 367104 ----a-w- c:\windows\system32\wcncsvc.dll
2012-12-25 21:15 . 2010-09-14 06:07 276992 ----a-w- c:\windows\SysWow64\wcncsvc.dll
2012-12-25 21:01 . 2009-09-10 06:28 311808 ----a-w- c:\windows\system32\msv1_0.dll
2012-12-25 21:01 . 2009-09-10 05:52 257024 ----a-w- c:\windows\SysWow64\msv1_0.dll
2012-12-25 20:55 . 2012-07-26 07:40 2560 ----a-w- c:\windows\system32\drivers\cs-CZ\wdf01000.sys.mui
2012-12-25 20:55 . 2012-07-26 04:55 785512 ----a-w- c:\windows\system32\drivers\Wdf01000.sys
2012-12-25 20:55 . 2012-07-26 04:55 54376 ----a-w- c:\windows\system32\drivers\WdfLdr.sys
2012-12-25 20:55 . 2012-07-26 02:36 9728 ----a-w- c:\windows\system32\Wdfres.dll
2012-12-25 20:49 . 2012-11-28 14:58 67413224 ----a-w- c:\windows\system32\MRT.exe
2012-12-25 20:45 . 2009-11-25 11:47 99176 ----a-w- c:\windows\SysWow64\PresentationHostProxy.dll
2012-12-25 20:45 . 2009-11-25 11:47 49472 ----a-w- c:\windows\SysWow64\netfxperf.dll
2012-12-25 20:45 . 2009-11-25 11:47 48960 ----a-w- c:\windows\system32\netfxperf.dll
2012-12-25 20:45 . 2009-11-25 11:47 297808 ----a-w- c:\windows\SysWow64\mscoree.dll
2012-12-25 20:45 . 2009-11-25 11:47 295264 ----a-w- c:\windows\SysWow64\PresentationHost.exe
2012-12-25 20:45 . 2009-11-25 11:47 1130824 ----a-w- c:\windows\SysWow64\dfshim.dll
2012-12-25 20:45 . 2009-11-25 11:47 109912 ----a-w- c:\windows\system32\PresentationHostProxy.dll
2012-12-25 20:45 . 2009-11-25 11:47 444752 ----a-w- c:\windows\system32\mscoree.dll
2012-12-25 20:45 . 2009-11-25 11:47 320352 ----a-w- c:\windows\system32\PresentationHost.exe
2012-12-25 20:45 . 2009-11-25 11:47 1942856 ----a-w- c:\windows\system32\dfshim.dll
2012-12-25 20:44 . 2010-02-23 08:16 294912 ----a-w- c:\windows\system32\browserchoice.exe
2012-12-25 20:37 . 2012-12-16 16:52 46080 ----a-w- c:\windows\system32\atmlib.dll
2012-12-25 20:37 . 2012-12-16 14:40 367616 ----a-w- c:\windows\system32\atmfd.dll
2012-12-25 20:37 . 2012-12-16 14:25 295424 ----a-w- c:\windows\SysWow64\atmfd.dll
2012-12-25 20:37 . 2012-12-16 14:25 34304 ----a-w- c:\windows\SysWow64\atmlib.dll
2012-12-25 20:37 . 2009-10-19 14:46 100864 ----a-w- c:\windows\system32\fontsub.dll
2012-12-25 20:37 . 2009-10-19 14:10 70656 ----a-w- c:\windows\SysWow64\fontsub.dll
2012-12-25 20:37 . 2012-07-26 03:08 84992 ----a-w- c:\windows\system32\WUDFSvc.dll
2012-12-25 20:37 . 2012-07-26 03:08 194048 ----a-w- c:\windows\system32\WUDFPlatform.dll
2012-12-25 20:37 . 2012-07-26 02:26 87040 ----a-w- c:\windows\system32\drivers\WUDFPf.sys
2012-12-25 20:37 . 2012-07-26 02:26 198656 ----a-w- c:\windows\system32\drivers\WUDFRd.sys
2012-12-25 20:37 . 2012-07-26 03:08 229888 ----a-w- c:\windows\system32\WUDFHost.exe
2012-12-25 20:37 . 2012-07-26 03:08 744448 ----a-w- c:\windows\system32\WUDFx.dll
2012-12-25 20:37 . 2012-07-26 03:08 45056 ----a-w- c:\windows\system32\WUDFCoinstaller.dll
2012-12-25 20:34 . 2012-03-01 06:54 22896 ----a-w- c:\windows\system32\drivers\fs_rec.sys
2012-12-25 20:34 . 2012-03-01 06:40 80896 ----a-w- c:\windows\system32\imagehlp.dll
2012-12-25 20:34 . 2012-03-01 05:45 158720 ----a-w- c:\windows\SysWow64\imagehlp.dll
2012-12-25 20:34 . 2012-03-01 06:35 5120 ----a-w- c:\windows\system32\wmi.dll
2012-12-25 20:34 . 2012-03-01 05:40 5120 ----a-w- c:\windows\SysWow64\wmi.dll
2012-12-25 20:33 . 2010-03-04 04:40 184832 ----a-w- c:\windows\system32\drivers\usbvideo.sys
2012-12-25 20:33 . 2010-03-04 04:32 243712 ----a-w- c:\windows\system32\drivers\ks.sys
2012-12-25 20:30 . 2010-08-04 07:07 552960 ----a-w- c:\windows\system32\msdri.dll
2012-12-25 20:29 . 2011-10-26 05:22 366592 ----a-w- c:\windows\system32\qdvd.dll
2012-12-25 20:28 . 2012-01-04 09:58 509952 ----a-w- c:\windows\system32\ntshrui.dll
2012-12-25 20:27 . 2012-07-04 22:04 73216 ----a-w- c:\windows\system32\netapi32.dll
2012-12-25 20:21 . 2012-06-06 05:50 1425408 ----a-w- c:\program files\Common Files\System\ado\msado15.dll
2012-12-25 20:18 . 2010-08-27 06:14 236032 ----a-w- c:\windows\system32\srvsvc.dll
2012-12-25 20:18 . 2010-08-27 05:46 9728 ----a-w- c:\windows\SysWow64\sscore.dll
2012-12-25 20:18 . 2011-11-19 15:07 77312 ----a-w- c:\windows\system32\packager.dll
2012-12-25 20:18 . 2011-11-19 14:06 67072 ----a-w- c:\windows\SysWow64\packager.dll
2012-12-25 19:45 . 2012-06-02 22:19 2428952 ----a-w- c:\windows\system32\wuaueng.dll
2012-12-25 19:45 . 2012-06-02 22:19 57880 ----a-w- c:\windows\system32\wuauclt.exe
2012-12-25 19:45 . 2012-06-02 22:19 44056 ----a-w- c:\windows\system32\wups2.dll
2012-12-25 19:45 . 2012-06-02 22:15 2622464 ----a-w- c:\windows\system32\wucltux.dll
2012-12-25 19:45 . 2012-06-02 22:19 38424 ----a-w- c:\windows\system32\wups.dll
2012-12-25 19:45 . 2012-06-02 22:19 701976 ----a-w- c:\windows\system32\wuapi.dll
2012-12-25 19:45 . 2012-06-02 22:15 99840 ----a-w- c:\windows\system32\wudriver.dll
2012-12-25 19:45 . 2012-06-02 14:19 186752 ----a-w- c:\windows\system32\wuwebv.dll
2012-12-25 19:45 . 2012-06-02 14:15 36864 ----a-w- c:\windows\system32\wuapp.exe
2012-12-25 16:03 . 2012-12-25 16:03 -------- d-----w- c:\program files\Common Files\logishrd
2012-12-25 16:02 . 2012-02-15 06:27 1031680 ----a-w- c:\windows\system32\rdpcore.dll
2012-12-25 16:02 . 2012-02-15 05:44 826368 ----a-w- c:\windows\SysWow64\rdpcore.dll
2012-12-25 16:02 . 2012-02-15 04:46 23552 ----a-w- c:\windows\system32\drivers\tdtcp.sys
2012-12-25 16:02 . 2010-01-09 07:19 139264 ----a-w- c:\windows\system32\cabview.dll
2012-12-25 16:02 . 2010-01-09 06:52 132608 ----a-w- c:\windows\SysWow64\cabview.dll
2012-12-25 15:50 . 2012-12-25 15:50 -------- d-----w- c:\program files\ESET
2012-12-25 15:46 . 2012-12-25 15:46 -------- d-----w- c:\program files (x86)\Conduit
2012-12-25 15:46 . 2012-12-25 15:46 -------- d-----w- c:\program files (x86)\uTorrent
2012-12-25 15:41 . 2012-12-25 15:41 -------- d-----w- c:\programdata\ATI
2012-12-25 15:40 . 2012-12-25 15:40 0 ----a-w- c:\windows\ativpsrm.bin
2012-12-25 15:39 . 2012-12-25 15:39 -------- d-----w- c:\program files (x86)\AMD APP
2012-12-25 14:48 . 2010-02-18 08:18 46136 ----a-w- c:\windows\system32\drivers\amdiox64.sys
2012-12-25 14:47 . 2012-12-25 15:36 -------- dc----w- c:\windows\system32\DRVSTORE
2012-12-25 14:47 . 2011-03-17 12:04 188544 ----a-w- c:\windows\system32\drivers\amdxhc.sys
2012-12-25 14:47 . 2011-03-17 12:04 87168 ----a-w- c:\windows\system32\drivers\amdhub30.sys
2012-12-25 14:47 . 2011-12-12 20:52 82048 ----a-w- c:\windows\system32\drivers\amd_sata.sys
2012-12-25 14:47 . 2011-12-12 20:52 42624 ----a-w- c:\windows\system32\drivers\amd_xata.sys
2012-12-25 14:46 . 2013-01-02 10:17 -------- d-sh--w- c:\windows\Installer
2012-12-25 14:45 . 2012-12-25 14:45 -------- d-----w- c:\program files\Realtek
2012-12-25 14:44 . 2012-02-16 05:42 676968 ----a-w- c:\windows\system32\drivers\Rt64win7.sys
2012-12-25 14:44 . 2012-02-16 05:42 74344 ----a-w- c:\windows\system32\RtNicProp64.dll
2012-12-25 14:44 . 2012-02-16 05:42 107624 ----a-w- c:\windows\system32\RTNUninst64.dll
2012-12-25 14:44 . 2012-12-25 18:46 -------- d-----w- c:\program files (x86)\Realtek
2012-12-25 14:44 . 2012-12-28 12:33 -------- d--h--w- c:\program files (x86)\InstallShield Installation Information
2012-12-25 14:44 . 2012-12-25 18:47 -------- d--h--w- c:\program files (x86)\Temp
2012-12-25 14:42 . 2012-12-25 14:42 -------- d-----w- C:\MSI
2012-12-25 14:41 . 2012-12-27 20:52 -------- d-----w- c:\users\martin
2012-12-25 09:58 . 2012-12-25 14:40 -------- d-----w- c:\windows\Panther
2012-12-25 09:57 . 2012-12-25 09:57 -------- d-----w- C:\Boot
.
.
.
(((((((((((((((((((((((((((((((((((((((( Find3M výpis ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2012-12-25 20:42 . 2012-12-25 20:42 203776 ----a-w- c:\windows\SysWow64\webcheck.dll
2012-12-25 20:42 . 2012-12-25 20:42 249344 ----a-w- c:\windows\system32\webcheck.dll
2012-11-28 08:07 . 2012-11-28 08:07 57904 ----a-w- c:\windows\system32\drivers\epfwwfp.sys
2012-10-16 21:20 . 2012-12-25 20:29 135168 ----a-w- c:\windows\apppatch\AppPatch64\AcXtrnal.dll
2012-10-16 21:20 . 2012-12-25 20:29 347648 ----a-w- c:\windows\apppatch\AppPatch64\AcLayers.dll
2012-10-16 20:34 . 2012-12-25 20:29 559104 ----a-w- c:\windows\apppatch\AcLayers.dll
2012-10-08 07:21 . 2012-10-08 07:21 59440 ----a-w- c:\windows\system32\drivers\EpfwLWF.sys
2012-10-08 07:21 . 2012-10-08 07:21 189208 ----a-w- c:\windows\system32\drivers\epfw.sys
2012-10-08 07:21 . 2012-10-08 07:21 149592 ----a-w- c:\windows\system32\drivers\ehdrv.sys
2012-10-08 07:21 . 2012-10-08 07:21 211344 ----a-w- c:\windows\system32\drivers\eamonm.sys
.
.
(((((((((((((((((((((((((((((((((( Spouštěcí body v registru )))))))))))))))))))))))))))))))))))))))))))))
.
.
*Poznámka* prázdné záznamy a legitimní výchozí údaje nejsou zobrazeny.
REGEDIT4
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"uTorrent"="c:\program files (x86)\uTorrent\uTorrent.exe" [2012-12-25 969104]
"DAEMON Tools Lite"="c:\program files (x86)\DAEMON Tools Lite\DTLite.exe" [2012-11-06 3673728]
"RGSC"="d:\hry\GTA\Rockstar Games Social Club\RGSCLauncher.exe" [2008-11-14 305064]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]
"StartCCC"="c:\program files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" [2011-10-12 343168]
"SunJavaUpdateSched"="c:\program files (x86)\Common Files\Java\Java Update\jusched.exe" [2012-07-03 252848]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorAdmin"= 5 (0x5)
"ConsentPromptBehaviorUser"= 3 (0x3)
"EnableUIADesktopToggle"= 0 (0x0)
.
R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2010-03-18 138576]
R3 MSICDSetup;MSICDSetup;E:\CDriver64.sys [x]
R3 NTIOLib_1_0_C;NTIOLib_1_0_C;E:\NTIOLib_X64.sys [x]
R3 WatAdminSvc;Služba Technologie aktivace Windows;c:\windows\system32\Wat\WatAdminSvc.exe [2012-12-25 1255736]
S0 amd_sata;amd_sata;c:\windows\system32\DRIVERS\amd_sata.sys [2011-12-12 82048]
S0 amd_xata;amd_xata;c:\windows\system32\DRIVERS\amd_xata.sys [2011-12-12 42624]
S0 epfwwfp;epfwwfp;c:\windows\system32\DRIVERS\epfwwfp.sys [2012-11-28 57904]
S1 dtsoftbus01;DAEMON Tools Virtual Bus Driver;c:\windows\system32\DRIVERS\dtsoftbus01.sys [2012-12-27 283200]
S1 eamonm;eamonm;c:\windows\system32\DRIVERS\eamonm.sys [2012-10-08 211344]
S1 ehdrv;ehdrv;c:\windows\system32\DRIVERS\ehdrv.sys [2012-10-08 149592]
S1 EpfwLWF;Epfw NDIS LightWeight Filter;c:\windows\system32\DRIVERS\EpfwLWF.sys [2012-10-08 59440]
S2 AMD External Events Utility;AMD External Events Utility;c:\windows\system32\atiesrxx.exe [2011-10-12 204288]
S2 AMD FUEL Service;AMD FUEL Service;c:\program files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe [2011-10-12 361984]
S2 AODDriver4.01;AODDriver4.01;c:\program files\ATI Technologies\ATI.ACE\Fuel\amd64\AODDriver2.sys [2011-06-24 55424]
S2 ekrn;ESET Service;c:\program files\ESET\ESET Smart Security\x86\ekrn.exe [2012-11-26 1329304]
S3 amdhub30;AMD USB 3.0 Hub Driver;c:\windows\system32\DRIVERS\amdhub30.sys [2011-03-17 87168]
S3 amdiox64;AMD IO Driver;c:\windows\system32\DRIVERS\amdiox64.sys [2010-02-18 46136]
S3 amdxhc;AMD USB 3.0 Host Controller Driver;c:\windows\system32\DRIVERS\amdxhc.sys [2011-03-17 188544]
S3 athur;Atheros AR9271 Wireless Network Adapter Service;c:\windows\system32\DRIVERS\athurx.sys [2010-01-05 1847296]
S3 AtiHDAudioService;AMD Function Driver for HD Audio Service;c:\windows\system32\drivers\AtihdW76.sys [2011-06-06 231440]
S3 LVUSBS64;Logitech USB Monitor Filter;c:\windows\system32\DRIVERS\LVUSBS64.sys [2008-07-26 50072]
S3 LVUVC64;QuickCam for Notebooks Deluxe(UVC);c:\windows\system32\DRIVERS\lvuvc64.sys [2008-07-26 5068056]
S3 RTL8167;Realtek 8167 NT Driver;c:\windows\system32\DRIVERS\Rt64win7.sys [2012-02-16 676968]
S3 usbfilter;AMD USB Filter Driver;c:\windows\system32\DRIVERS\usbfilter.sys [2010-12-15 47232]
.
.
--- Ostatní služby/ovladače v paměti ---
.
*NewlyCreated* - 54912305
*Deregistered* - 54912305
.
Obsah adresáře 'Naplánované úlohy'
.
2013-01-02 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
- c:\program files (x86)\Google\Update\GoogleUpdate.exe [2012-12-25 14:49]
.
2013-01-02 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
- c:\program files (x86)\Google\Update\GoogleUpdate.exe [2012-12-25 14:49]
.
.
--------- X64 Entries -----------
.
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"egui"="c:\program files\ESET\ESET Smart Security\egui.exe" [2012-11-26 6325936]
"RtHDVCpl"="c:\program files\Realtek\Audio\HDA\RAVCpl64.exe" [2010-10-05 11474024]
.
------- Doplňkový sken -------
.
uLocal Page = c:\windows\system32\blank.htm
mLocal Page = c:\windows\SysWOW64\blank.htm
TCP: DhcpNameServer = 213.46.172.36 213.46.172.37
.
.
--------------------- ZAMKNUTÉ KLÍČE V REGISTRU ---------------------
.
[HKEY_USERS\S-1-5-21-2532040140-1162450897-812575660-1000\Software\SecuROM\License information*]
"datasecu"=hex:63,f3,33,86,f9,59,b4,5c,19,b1,3a,1a,00,f9,de,2f,4a,ea,80,fa,ad,
6f,86,93,31,35,10,03,d0,ff,6e,80,9b,41,46,f0,11,b1,45,c0,85,58,c0,a4,35,7b,\
"rkeysecu"=hex:2f,0f,d5,3e,02,2b,06,63,b1,0b,dd,b6,71,e2,54,98
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\PCW\Security]
@Denied: (Full) (Everyone)
.
Celkový čas: 2013-01-02 21:34:31
ComboFix-quarantined-files.txt 2013-01-02 20:34
.
Před spuštěním: Volných bajtů: 29 717 848 064
Po spuštění: Volných bajtů: 30 064 922 624
.
- - End Of File - - 3EDA1CD0419685E11665B950F4865B69

[jaro3]

Otevři si Poznámkový blok (Start -> Spustit... a napiš do okna Notepad a dej Ok.
Zkopíruj do něj následující celý text označený zeleně:

Kód: Vybrat vše

ClearJavaCache::

File::
c:\windows\ativpsrm.bin
c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
c:\windows\Tasks\GoogleUpdateTaskMachineUA.job


Folder::
c:\program files (x86)\Conduit
c:\program files (x86)\Google\Update

RegLock::
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\PCW\Security]


Zvol možnost Soubor -> Uložit jako... a nastav tyto parametry:
Název souboru: zde napiš: CFScript.txt
Uložit jako typ: tak tam vyber Všechny soubory
Ulož soubor na plochu.
Ukonči všechna aktivní okna.

Uchop myší vytvořený skript CFScript.txt, přemísti ho nad stažený program ComboFix.exe a když se oba soubory překryjí, skript upusť.
- Automaticky se spustí ComboFix
- Vlož sem log, který vyběhne v závěru čistícího procesu + nový log z HJT

Upozornění : Může se stát, že po aplikaci Combofixu a restartu počítače, Windows nenaběhnou , nebo nenajede plocha , budou problémy s připojením, pak znovu restartuj počítač, pokud to nepomůže , po restartu mačkej klávesu F8 a pak zvol poslední známou funkční konfiguraci. , či použij bod obnovy.

Stáhni si aswMBR
na svojí plochu. Uzavři všechna okna , programy a prohlížeče. Poklepej na aswMBR.exe. Pokud se objeví hláška o možnosti stáhnutí databáze Avastu , klikni na NE. Poté klikni na „Scan“ . Po skenu klikni na „Save Log“ a ulož si log na plochu .Zkopíruj sem celý obsah toho logu. Pak klikni na „Exit“ k zavření programu.

Stáhni AVP Tools
na svojí plochu.

Zaškrtni :
Hidden startup objects
System Memory
Disk boot sectors
Dokumenty
My email
Počítač
Místní disk C
Místní disk D
Jednotka DVD-Rom (E)
Jednotka BD-ROM (G)
A jiné , např. Flash disky , které máš připojeny.

Pokračuj podle instrukcí.Na konci se objeví textový soubor , který si hned ulož (save log) na svojí plochu pod názvem KAS.txt .Poté sem vlož celý obsah toho logu.

Pokud se Ti log nezobrazí:
Pokud máš AVPtool stále zapnutý, zkus zmáčknout tlačítko Zpráva (Report).
Pokud se Ti zobrazí tabulka, klikni na ní pravým myšítkem a dej Maximalize a měli by se Ti zobrazit výsledky.

http://www.sosej.cz/Download/Kaspersky- ... nload.html

[matesfox]

HJT:

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 20:13:02, on 3.1.2013
Platform: Windows 7 (WinNT 6.00.3504)
MSIE: Internet Explorer v9.00 (9.00.8112.16457)
Boot mode: Normal

Running processes:
C:\Program Files (x86)\uTorrent\uTorrent.exe
C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
C:\Users\martin\Desktop\HiJackThis.exe
C:\Windows\SysWOW64\DllHost.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll
O4 - HKLM\..\Run: [StartCCC] "C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"
O4 - HKLM\..\RunOnce: [GrpConv] grpconv -o
O4 - HKCU\..\Run: [uTorrent] "C:\Program Files (x86)\uTorrent\uTorrent.exe" /MINIMIZED
O4 - HKCU\..\Run: [DAEMON Tools Lite] "C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe" -autorun
O4 - HKCU\..\Run: [RGSC] D:\Hry\GTA\Rockstar Games Social Club\RGSCLauncher.exe /silent
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
O23 - Service: AMD External Events Utility - Unknown owner - C:\Windows\system32\atiesrxx.exe (file missing)
O23 - Service: AMD FUEL Service - Advanced Micro Devices, Inc. - C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)
O23 - Service: ESET Service (ekrn) - ESET - C:\Program Files\ESET\ESET Smart Security\x86\ekrn.exe
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\Wat\WatUX.exe,-601 (WatAdminSvc) - Unknown owner - C:\Windows\system32\Wat\WatAdminSvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)

--
End of file - 5126 bytes

[matesfox]

combofix


ComboFix 13-01-02.02 - martin 03.01.2013 19:59:32.2.4 - x64
Microsoft Windows 7 Ultimate 6.1.7600.0.1250.420.1029.18.8157.6779 [GMT 1:00]
Spuštěný z: c:\users\martin\Desktop\ComboFix.exe
Použité ovládací přepínače :: c:\users\martin\Desktop\CFScript.txt
AV: ESET Smart Security 6.0 *Enabled/Updated* {77DEAFED-8149-104B-25A1-21771CA47CD1}
FW: ESET personal firewall *Enabled* {4FE52EC8-CB26-1113-0EFE-8842E2773BAA}
SP: ESET Smart Security 6.0 *Enabled/Updated* {CCBF4E09-A773-1FC5-1F11-1A056723366C}
SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
* Rezidentní štít AV je zapnutý
.
.
FILE ::
"c:\windows\ativpsrm.bin"
"c:\windows\Tasks\GoogleUpdateTaskMachineCore.job"
"c:\windows\Tasks\GoogleUpdateTaskMachineUA.job"
.
.
((((((((((((((((((((((((((((((((((((((( Ostatní výmazy )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
c:\program files (x86)\Conduit
c:\program files (x86)\Conduit\Community Alerts\Alert.dll
c:\program files (x86)\Google\Update
c:\program files (x86)\Google\Update\1.3.21.99\GoogleCrashHandler.exe
c:\program files (x86)\Google\Update\1.3.21.99\GoogleCrashHandler64.exe
c:\program files (x86)\Google\Update\1.3.21.99\GoogleUpdate.exe
c:\program files (x86)\Google\Update\1.3.21.99\GoogleUpdateBroker.exe
c:\program files (x86)\Google\Update\1.3.21.99\GoogleUpdateHelper.msi
c:\program files (x86)\Google\Update\1.3.21.99\GoogleUpdateOnDemand.exe
c:\program files (x86)\Google\Update\1.3.21.99\goopdate.dll
c:\program files (x86)\Google\Update\1.3.21.99\goopdateres_am.dll
c:\program files (x86)\Google\Update\1.3.21.99\goopdateres_ar.dll
c:\program files (x86)\Google\Update\1.3.21.99\goopdateres_bg.dll
c:\program files (x86)\Google\Update\1.3.21.99\goopdateres_bn.dll
c:\program files (x86)\Google\Update\1.3.21.99\goopdateres_ca.dll
c:\program files (x86)\Google\Update\1.3.21.99\goopdateres_cs.dll
c:\program files (x86)\Google\Update\1.3.21.99\goopdateres_da.dll
c:\program files (x86)\Google\Update\1.3.21.99\goopdateres_de.dll
c:\program files (x86)\Google\Update\1.3.21.99\goopdateres_el.dll
c:\program files (x86)\Google\Update\1.3.21.99\goopdateres_en-GB.dll
c:\program files (x86)\Google\Update\1.3.21.99\goopdateres_en.dll
c:\program files (x86)\Google\Update\1.3.21.99\goopdateres_es-419.dll
c:\program files (x86)\Google\Update\1.3.21.99\goopdateres_es.dll
c:\program files (x86)\Google\Update\1.3.21.99\goopdateres_et.dll
c:\program files (x86)\Google\Update\1.3.21.99\goopdateres_fa.dll
c:\program files (x86)\Google\Update\1.3.21.99\goopdateres_fi.dll
c:\program files (x86)\Google\Update\1.3.21.99\goopdateres_fil.dll
c:\program files (x86)\Google\Update\1.3.21.99\goopdateres_fr.dll
c:\program files (x86)\Google\Update\1.3.21.99\goopdateres_gu.dll
c:\program files (x86)\Google\Update\1.3.21.99\goopdateres_hi.dll
c:\program files (x86)\Google\Update\1.3.21.99\goopdateres_hr.dll
c:\program files (x86)\Google\Update\1.3.21.99\goopdateres_hu.dll
c:\program files (x86)\Google\Update\1.3.21.99\goopdateres_id.dll
c:\program files (x86)\Google\Update\1.3.21.99\goopdateres_is.dll
c:\program files (x86)\Google\Update\1.3.21.99\goopdateres_it.dll
c:\program files (x86)\Google\Update\1.3.21.99\goopdateres_iw.dll
c:\program files (x86)\Google\Update\1.3.21.99\goopdateres_ja.dll
c:\program files (x86)\Google\Update\1.3.21.99\goopdateres_kn.dll
c:\program files (x86)\Google\Update\1.3.21.99\goopdateres_ko.dll
c:\program files (x86)\Google\Update\1.3.21.99\goopdateres_lt.dll
c:\program files (x86)\Google\Update\1.3.21.99\goopdateres_lv.dll
c:\program files (x86)\Google\Update\1.3.21.99\goopdateres_ml.dll
c:\program files (x86)\Google\Update\1.3.21.99\goopdateres_mr.dll
c:\program files (x86)\Google\Update\1.3.21.99\goopdateres_ms.dll
c:\program files (x86)\Google\Update\1.3.21.99\goopdateres_nl.dll
c:\program files (x86)\Google\Update\1.3.21.99\goopdateres_no.dll
c:\program files (x86)\Google\Update\1.3.21.99\goopdateres_pl.dll
c:\program files (x86)\Google\Update\1.3.21.99\goopdateres_pt-BR.dll
c:\program files (x86)\Google\Update\1.3.21.99\goopdateres_pt-PT.dll
c:\program files (x86)\Google\Update\1.3.21.99\goopdateres_ro.dll
c:\program files (x86)\Google\Update\1.3.21.99\goopdateres_ru.dll
c:\program files (x86)\Google\Update\1.3.21.99\goopdateres_sk.dll
c:\program files (x86)\Google\Update\1.3.21.99\goopdateres_sl.dll
c:\program files (x86)\Google\Update\1.3.21.99\goopdateres_sr.dll
c:\program files (x86)\Google\Update\1.3.21.99\goopdateres_sv.dll
c:\program files (x86)\Google\Update\1.3.21.99\goopdateres_sw.dll
c:\program files (x86)\Google\Update\1.3.21.99\goopdateres_ta.dll
c:\program files (x86)\Google\Update\1.3.21.99\goopdateres_te.dll
c:\program files (x86)\Google\Update\1.3.21.99\goopdateres_th.dll
c:\program files (x86)\Google\Update\1.3.21.99\goopdateres_tr.dll
c:\program files (x86)\Google\Update\1.3.21.99\goopdateres_uk.dll
c:\program files (x86)\Google\Update\1.3.21.99\goopdateres_ur.dll
c:\program files (x86)\Google\Update\1.3.21.99\goopdateres_vi.dll
c:\program files (x86)\Google\Update\1.3.21.99\goopdateres_zh-CN.dll
c:\program files (x86)\Google\Update\1.3.21.99\goopdateres_zh-TW.dll
c:\program files (x86)\Google\Update\1.3.21.99\npGoogleUpdate3.dll
c:\program files (x86)\Google\Update\1.3.21.99\psmachine.dll
c:\program files (x86)\Google\Update\1.3.21.99\psuser.dll
c:\program files (x86)\Google\Update\Download\{8A69D345-D564-463C-AFF1-A69D9E530F96}\18.0.1025.142\chrome_installer.exe
c:\program files (x86)\Google\Update\GoogleUpdate.exe
c:\windows\ativpsrm.bin
c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
.
.
((((((((((((((((((((((((((((((((((((((( Ovladače/Služby )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
-------\Service_gupdate
-------\Service_gupdatem
-------\Service_gupdate
-------\Service_gupdatem
.
.
((((((((((((((((((((((((( Soubory vytvořené od 2012-12-03 do 2013-01-03 )))))))))))))))))))))))))))))))
.
.
2013-01-02 10:16 . 2013-01-02 10:16 -------- d-----w- c:\program files\VibrateGameDeviceDriver
2013-01-02 10:16 . 2013-01-02 10:16 -------- d-----w- c:\program files (x86)\VibrateGameDeviceDriver
2013-01-01 17:54 . 2012-11-19 00:01 9125352 ----a-w- c:\programdata\Microsoft\Windows Defender\Definition Updates\{C65B699A-5A04-4425-8A69-9CF3BCE4D21E}\mpengine.dll
2012-12-31 11:26 . 2012-12-31 11:26 -------- d--h--w- c:\program files (x86)\Common Files\EAInstaller
2012-12-31 11:25 . 2012-12-31 11:25 -------- d-----w- c:\programdata\Caphyon
2012-12-31 00:27 . 2013-01-01 17:51 -------- d-----w- c:\program files (x86)\Automatické vypnutí počítače
2012-12-29 23:49 . 2012-12-29 23:49 -------- d-----w- c:\programdata\Malwarebytes
2012-12-29 13:27 . 2012-12-29 13:27 -------- d-----w- c:\windows\system32\wbem\Framework
2012-12-28 12:46 . 2012-12-28 12:46 348160 ----a-w- c:\windows\SysWow64\Msvcr71.dll
2012-12-28 12:46 . 2012-12-28 12:46 1700352 ----a-w- c:\windows\SysWow64\gdiplus.dll
2012-12-28 12:46 . 2012-12-28 12:46 1060864 ----a-w- c:\windows\SysWow64\mfc71.dll
2012-12-28 12:44 . 2012-12-28 12:44 178800 ----a-w- c:\windows\SysWow64\CmdLineExt_x64.dll
2012-12-27 20:53 . 2012-12-27 20:53 -------- d-----w- c:\program files (x86)\SystemRequirementsLab
2012-12-27 20:51 . 2012-12-27 20:51 -------- d-----w- c:\program files (x86)\Common Files\Java
2012-12-27 20:51 . 2012-12-27 20:51 859072 ----a-w- c:\windows\SysWow64\npDeployJava1.dll
2012-12-27 20:51 . 2012-12-27 20:51 779704 ----a-w- c:\windows\SysWow64\deployJava1.dll
2012-12-27 20:51 . 2012-12-27 20:51 95184 ----a-w- c:\windows\SysWow64\WindowsAccessBridge-32.dll
2012-12-27 20:51 . 2012-12-27 20:51 -------- d-----w- c:\program files (x86)\Java
2012-12-27 19:46 . 2012-12-28 12:30 -------- d-----w- c:\program files (x86)\Microsoft Games for Windows - LIVE
2012-12-27 19:46 . 2012-12-27 19:46 -------- d-----w- c:\windows\SysWow64\xlive
2012-12-27 19:31 . 2012-12-27 19:31 283200 ----a-w- c:\windows\system32\drivers\dtsoftbus01.sys
2012-12-27 19:31 . 2012-12-27 19:31 -------- d-----w- c:\program files (x86)\DAEMON Tools Lite
2012-12-27 19:29 . 2012-12-27 19:33 -------- d-----w- c:\programdata\DAEMON Tools Lite
2012-12-27 18:59 . 2012-12-29 21:00 -------- d-----w- c:\program files\CPUID
2012-12-27 18:56 . 2012-12-27 18:56 -------- d-----w- c:\program files\Core Temp
2012-12-26 16:15 . 2012-12-26 16:15 -------- d-----w- c:\program files (x86)\Microsoft.NET
2012-12-26 16:09 . 2012-12-26 16:09 -------- d-----w- c:\windows\SysWow64\Wat
2012-12-26 16:09 . 2012-12-26 16:09 -------- d-----w- c:\windows\system32\Wat
2012-12-25 21:15 . 2010-09-14 06:45 367104 ----a-w- c:\windows\system32\wcncsvc.dll
2012-12-25 21:15 . 2010-09-14 06:07 276992 ----a-w- c:\windows\SysWow64\wcncsvc.dll
2012-12-25 21:01 . 2009-09-10 06:28 311808 ----a-w- c:\windows\system32\msv1_0.dll
2012-12-25 21:01 . 2009-09-10 05:52 257024 ----a-w- c:\windows\SysWow64\msv1_0.dll
2012-12-25 20:55 . 2012-07-26 07:40 2560 ----a-w- c:\windows\system32\drivers\cs-CZ\wdf01000.sys.mui
2012-12-25 20:55 . 2012-07-26 04:55 785512 ----a-w- c:\windows\system32\drivers\Wdf01000.sys
2012-12-25 20:55 . 2012-07-26 04:55 54376 ----a-w- c:\windows\system32\drivers\WdfLdr.sys
2012-12-25 20:55 . 2012-07-26 02:36 9728 ----a-w- c:\windows\system32\Wdfres.dll
2012-12-25 20:49 . 2012-11-28 14:58 67413224 ----a-w- c:\windows\system32\MRT.exe
2012-12-25 20:45 . 2009-11-25 11:47 99176 ----a-w- c:\windows\SysWow64\PresentationHostProxy.dll
2012-12-25 20:45 . 2009-11-25 11:47 49472 ----a-w- c:\windows\SysWow64\netfxperf.dll
2012-12-25 20:45 . 2009-11-25 11:47 48960 ----a-w- c:\windows\system32\netfxperf.dll
2012-12-25 20:45 . 2009-11-25 11:47 297808 ----a-w- c:\windows\SysWow64\mscoree.dll
2012-12-25 20:45 . 2009-11-25 11:47 295264 ----a-w- c:\windows\SysWow64\PresentationHost.exe
2012-12-25 20:45 . 2009-11-25 11:47 1130824 ----a-w- c:\windows\SysWow64\dfshim.dll
2012-12-25 20:45 . 2009-11-25 11:47 109912 ----a-w- c:\windows\system32\PresentationHostProxy.dll
2012-12-25 20:45 . 2009-11-25 11:47 444752 ----a-w- c:\windows\system32\mscoree.dll
2012-12-25 20:45 . 2009-11-25 11:47 320352 ----a-w- c:\windows\system32\PresentationHost.exe
2012-12-25 20:45 . 2009-11-25 11:47 1942856 ----a-w- c:\windows\system32\dfshim.dll
2012-12-25 20:44 . 2010-02-23 08:16 294912 ----a-w- c:\windows\system32\browserchoice.exe
2012-12-25 20:37 . 2012-12-16 16:52 46080 ----a-w- c:\windows\system32\atmlib.dll
2012-12-25 20:37 . 2012-12-16 14:40 367616 ----a-w- c:\windows\system32\atmfd.dll
2012-12-25 20:37 . 2012-12-16 14:25 295424 ----a-w- c:\windows\SysWow64\atmfd.dll
2012-12-25 20:37 . 2012-12-16 14:25 34304 ----a-w- c:\windows\SysWow64\atmlib.dll
2012-12-25 20:37 . 2009-10-19 14:46 100864 ----a-w- c:\windows\system32\fontsub.dll
2012-12-25 20:37 . 2009-10-19 14:10 70656 ----a-w- c:\windows\SysWow64\fontsub.dll
2012-12-25 20:37 . 2012-07-26 03:08 84992 ----a-w- c:\windows\system32\WUDFSvc.dll
2012-12-25 20:37 . 2012-07-26 03:08 194048 ----a-w- c:\windows\system32\WUDFPlatform.dll
2012-12-25 20:37 . 2012-07-26 02:26 87040 ----a-w- c:\windows\system32\drivers\WUDFPf.sys
2012-12-25 20:37 . 2012-07-26 02:26 198656 ----a-w- c:\windows\system32\drivers\WUDFRd.sys
2012-12-25 20:37 . 2012-07-26 03:08 229888 ----a-w- c:\windows\system32\WUDFHost.exe
2012-12-25 20:37 . 2012-07-26 03:08 744448 ----a-w- c:\windows\system32\WUDFx.dll
2012-12-25 20:37 . 2012-07-26 03:08 45056 ----a-w- c:\windows\system32\WUDFCoinstaller.dll
2012-12-25 20:34 . 2012-03-01 06:54 22896 ----a-w- c:\windows\system32\drivers\fs_rec.sys
2012-12-25 20:34 . 2012-03-01 06:40 80896 ----a-w- c:\windows\system32\imagehlp.dll
2012-12-25 20:34 . 2012-03-01 05:45 158720 ----a-w- c:\windows\SysWow64\imagehlp.dll
2012-12-25 20:34 . 2012-03-01 06:35 5120 ----a-w- c:\windows\system32\wmi.dll
2012-12-25 20:34 . 2012-03-01 05:40 5120 ----a-w- c:\windows\SysWow64\wmi.dll
2012-12-25 20:33 . 2010-03-04 04:40 184832 ----a-w- c:\windows\system32\drivers\usbvideo.sys
2012-12-25 20:33 . 2010-03-04 04:32 243712 ----a-w- c:\windows\system32\drivers\ks.sys
2012-12-25 20:30 . 2010-08-04 07:07 552960 ----a-w- c:\windows\system32\msdri.dll
2012-12-25 20:29 . 2011-10-26 05:22 366592 ----a-w- c:\windows\system32\qdvd.dll
2012-12-25 20:28 . 2012-01-04 09:58 509952 ----a-w- c:\windows\system32\ntshrui.dll
2012-12-25 20:27 . 2012-07-04 22:04 73216 ----a-w- c:\windows\system32\netapi32.dll
2012-12-25 20:21 . 2012-06-06 05:50 1425408 ----a-w- c:\program files\Common Files\System\ado\msado15.dll
2012-12-25 20:18 . 2010-08-27 06:14 236032 ----a-w- c:\windows\system32\srvsvc.dll
2012-12-25 20:18 . 2010-08-27 05:46 9728 ----a-w- c:\windows\SysWow64\sscore.dll
2012-12-25 20:18 . 2011-11-19 15:07 77312 ----a-w- c:\windows\system32\packager.dll
2012-12-25 20:18 . 2011-11-19 14:06 67072 ----a-w- c:\windows\SysWow64\packager.dll
2012-12-25 19:45 . 2012-06-02 22:19 2428952 ----a-w- c:\windows\system32\wuaueng.dll
2012-12-25 19:45 . 2012-06-02 22:19 57880 ----a-w- c:\windows\system32\wuauclt.exe
2012-12-25 19:45 . 2012-06-02 22:19 44056 ----a-w- c:\windows\system32\wups2.dll
2012-12-25 19:45 . 2012-06-02 22:15 2622464 ----a-w- c:\windows\system32\wucltux.dll
2012-12-25 19:45 . 2012-06-02 22:19 38424 ----a-w- c:\windows\system32\wups.dll
2012-12-25 19:45 . 2012-06-02 22:19 701976 ----a-w- c:\windows\system32\wuapi.dll
2012-12-25 19:45 . 2012-06-02 22:15 99840 ----a-w- c:\windows\system32\wudriver.dll
2012-12-25 19:45 . 2012-06-02 14:19 186752 ----a-w- c:\windows\system32\wuwebv.dll
2012-12-25 19:45 . 2012-06-02 14:15 36864 ----a-w- c:\windows\system32\wuapp.exe
2012-12-25 16:03 . 2012-12-25 16:03 -------- d-----w- c:\program files\Common Files\logishrd
2012-12-25 16:02 . 2012-02-15 06:27 1031680 ----a-w- c:\windows\system32\rdpcore.dll
2012-12-25 16:02 . 2012-02-15 05:44 826368 ----a-w- c:\windows\SysWow64\rdpcore.dll
2012-12-25 16:02 . 2012-02-15 04:46 23552 ----a-w- c:\windows\system32\drivers\tdtcp.sys
2012-12-25 16:02 . 2010-01-09 07:19 139264 ----a-w- c:\windows\system32\cabview.dll
2012-12-25 16:02 . 2010-01-09 06:52 132608 ----a-w- c:\windows\SysWow64\cabview.dll
2012-12-25 15:50 . 2012-12-25 15:50 -------- d-----w- c:\program files\ESET
2012-12-25 15:46 . 2012-12-25 15:46 -------- d-----w- c:\program files (x86)\uTorrent
2012-12-25 15:41 . 2012-12-25 15:41 -------- d-----w- c:\programdata\ATI
2012-12-25 15:39 . 2012-12-25 15:39 -------- d-----w- c:\program files (x86)\AMD APP
2012-12-25 14:48 . 2010-02-18 08:18 46136 ----a-w- c:\windows\system32\drivers\amdiox64.sys
2012-12-25 14:47 . 2012-12-25 15:36 -------- dc----w- c:\windows\system32\DRVSTORE
2012-12-25 14:47 . 2011-03-17 12:04 188544 ----a-w- c:\windows\system32\drivers\amdxhc.sys
2012-12-25 14:47 . 2011-03-17 12:04 87168 ----a-w- c:\windows\system32\drivers\amdhub30.sys
2012-12-25 14:47 . 2011-12-12 20:52 82048 ----a-w- c:\windows\system32\drivers\amd_sata.sys
2012-12-25 14:47 . 2011-12-12 20:52 42624 ----a-w- c:\windows\system32\drivers\amd_xata.sys
2012-12-25 14:46 . 2013-01-02 10:17 -------- d-sh--w- c:\windows\Installer
2012-12-25 14:45 . 2012-12-25 14:45 -------- d-----w- c:\program files\Realtek
2012-12-25 14:44 . 2012-02-16 05:42 676968 ----a-w- c:\windows\system32\drivers\Rt64win7.sys
2012-12-25 14:44 . 2012-02-16 05:42 74344 ----a-w- c:\windows\system32\RtNicProp64.dll
2012-12-25 14:44 . 2012-02-16 05:42 107624 ----a-w- c:\windows\system32\RTNUninst64.dll
2012-12-25 14:44 . 2012-12-25 18:46 -------- d-----w- c:\program files (x86)\Realtek
2012-12-25 14:44 . 2012-12-28 12:33 -------- d--h--w- c:\program files (x86)\InstallShield Installation Information
2012-12-25 14:44 . 2012-12-25 18:47 -------- d--h--w- c:\program files (x86)\Temp
2012-12-25 14:42 . 2012-12-25 14:42 -------- d-----w- C:\MSI
2012-12-25 14:41 . 2012-12-27 20:52 -------- d-----w- c:\users\martin
2012-12-25 09:58 . 2012-12-25 14:40 -------- d-----w- c:\windows\Panther
2012-12-25 09:57 . 2012-12-25 09:57 -------- d-----w- C:\Boot
.
.
.
(((((((((((((((((((((((((((((((((((((((( Find3M výpis ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2012-12-25 20:42 . 2012-12-25 20:42 203776 ----a-w- c:\windows\SysWow64\webcheck.dll
2012-12-25 20:42 . 2012-12-25 20:42 249344 ----a-w- c:\windows\system32\webcheck.dll
2012-11-28 08:07 . 2012-11-28 08:07 57904 ----a-w- c:\windows\system32\drivers\epfwwfp.sys
2012-10-16 21:20 . 2012-12-25 20:29 135168 ----a-w- c:\windows\apppatch\AppPatch64\AcXtrnal.dll
2012-10-16 21:20 . 2012-12-25 20:29 347648 ----a-w- c:\windows\apppatch\AppPatch64\AcLayers.dll
2012-10-16 20:34 . 2012-12-25 20:29 559104 ----a-w- c:\windows\apppatch\AcLayers.dll
2012-10-08 07:21 . 2012-10-08 07:21 59440 ----a-w- c:\windows\system32\drivers\EpfwLWF.sys
2012-10-08 07:21 . 2012-10-08 07:21 189208 ----a-w- c:\windows\system32\drivers\epfw.sys
2012-10-08 07:21 . 2012-10-08 07:21 149592 ----a-w- c:\windows\system32\drivers\ehdrv.sys
2012-10-08 07:21 . 2012-10-08 07:21 211344 ----a-w- c:\windows\system32\drivers\eamonm.sys
.
.
(((((((((((((((((((((((((((((((((( Spouštěcí body v registru )))))))))))))))))))))))))))))))))))))))))))))
.
.
*Poznámka* prázdné záznamy a legitimní výchozí údaje nejsou zobrazeny.
REGEDIT4
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"uTorrent"="c:\program files (x86)\uTorrent\uTorrent.exe" [2012-12-25 969104]
"DAEMON Tools Lite"="c:\program files (x86)\DAEMON Tools Lite\DTLite.exe" [2012-11-06 3673728]
"RGSC"="d:\hry\GTA\Rockstar Games Social Club\RGSCLauncher.exe" [2008-11-14 305064]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]
"StartCCC"="c:\program files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" [2011-10-12 343168]
"SunJavaUpdateSched"="c:\program files (x86)\Common Files\Java\Java Update\jusched.exe" [2012-07-03 252848]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorAdmin"= 5 (0x5)
"ConsentPromptBehaviorUser"= 3 (0x3)
"EnableUIADesktopToggle"= 0 (0x0)
.
R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2010-03-18 138576]
R3 MSICDSetup;MSICDSetup;E:\CDriver64.sys [x]
R3 NTIOLib_1_0_C;NTIOLib_1_0_C;E:\NTIOLib_X64.sys [x]
R3 WatAdminSvc;Služba Technologie aktivace Windows;c:\windows\system32\Wat\WatAdminSvc.exe [2012-12-25 1255736]
S0 amd_sata;amd_sata;c:\windows\system32\DRIVERS\amd_sata.sys [2011-12-12 82048]
S0 amd_xata;amd_xata;c:\windows\system32\DRIVERS\amd_xata.sys [2011-12-12 42624]
S0 epfwwfp;epfwwfp;c:\windows\system32\DRIVERS\epfwwfp.sys [2012-11-28 57904]
S1 dtsoftbus01;DAEMON Tools Virtual Bus Driver;c:\windows\system32\DRIVERS\dtsoftbus01.sys [2012-12-27 283200]
S1 eamonm;eamonm;c:\windows\system32\DRIVERS\eamonm.sys [2012-10-08 211344]
S1 ehdrv;ehdrv;c:\windows\system32\DRIVERS\ehdrv.sys [2012-10-08 149592]
S1 EpfwLWF;Epfw NDIS LightWeight Filter;c:\windows\system32\DRIVERS\EpfwLWF.sys [2012-10-08 59440]
S2 AMD External Events Utility;AMD External Events Utility;c:\windows\system32\atiesrxx.exe [2011-10-12 204288]
S2 AMD FUEL Service;AMD FUEL Service;c:\program files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe [2011-10-12 361984]
S2 AODDriver4.01;AODDriver4.01;c:\program files\ATI Technologies\ATI.ACE\Fuel\amd64\AODDriver2.sys [2011-06-24 55424]
S2 ekrn;ESET Service;c:\program files\ESET\ESET Smart Security\x86\ekrn.exe [2012-11-26 1329304]
S3 amdhub30;AMD USB 3.0 Hub Driver;c:\windows\system32\DRIVERS\amdhub30.sys [2011-03-17 87168]
S3 amdiox64;AMD IO Driver;c:\windows\system32\DRIVERS\amdiox64.sys [2010-02-18 46136]
S3 amdxhc;AMD USB 3.0 Host Controller Driver;c:\windows\system32\DRIVERS\amdxhc.sys [2011-03-17 188544]
S3 athur;Atheros AR9271 Wireless Network Adapter Service;c:\windows\system32\DRIVERS\athurx.sys [2010-01-05 1847296]
S3 AtiHDAudioService;AMD Function Driver for HD Audio Service;c:\windows\system32\drivers\AtihdW76.sys [2011-06-06 231440]
S3 LVUSBS64;Logitech USB Monitor Filter;c:\windows\system32\DRIVERS\LVUSBS64.sys [2008-07-26 50072]
S3 LVUVC64;QuickCam for Notebooks Deluxe(UVC);c:\windows\system32\DRIVERS\lvuvc64.sys [2008-07-26 5068056]
S3 RTL8167;Realtek 8167 NT Driver;c:\windows\system32\DRIVERS\Rt64win7.sys [2012-02-16 676968]
S3 usbfilter;AMD USB Filter Driver;c:\windows\system32\DRIVERS\usbfilter.sys [2010-12-15 47232]
.
.
.
--------- X64 Entries -----------
.
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"egui"="c:\program files\ESET\ESET Smart Security\egui.exe" [2012-11-26 6325936]
"RtHDVCpl"="c:\program files\Realtek\Audio\HDA\RAVCpl64.exe" [2010-10-05 11474024]
.
------- Doplňkový sken -------
.
uLocal Page = c:\windows\system32\blank.htm
mLocal Page = c:\windows\SysWOW64\blank.htm
TCP: DhcpNameServer = 213.46.172.36 213.46.172.37
.
.
--------------------- ZAMKNUTÉ KLÍČE V REGISTRU ---------------------
.
[HKEY_USERS\S-1-5-21-2532040140-1162450897-812575660-1000\Software\SecuROM\License information*]
"datasecu"=hex:63,f3,33,86,f9,59,b4,5c,19,b1,3a,1a,00,f9,de,2f,4a,ea,80,fa,ad,
6f,86,93,31,35,10,03,d0,ff,6e,80,9b,41,46,f0,11,b1,45,c0,85,58,c0,a4,35,7b,\
"rkeysecu"=hex:2f,0f,d5,3e,02,2b,06,63,b1,0b,dd,b6,71,e2,54,98
.
Celkový čas: 2013-01-03 20:06:23 - počítač byl restartován
ComboFix-quarantined-files.txt 2013-01-03 19:06
ComboFix2.txt 2013-01-02 20:34
.
Před spuštěním: Volných bajtů: 29 474 934 784
Po spuštění: Volných bajtů: 29 234 606 080
.
- - End Of File - - 781DA1E809D1BF17B8E0C6E234813FE8