Prosím o kontrolu logu - nestabilní systém! Vyřešeno

[lukas.sei]

Při testu aswMBR spadl PC do bsodu takže log udělám odpoledne.

[Reklama]

[memphisto]

V AdwCleaner nech vše smazat

Otevři si Poznámkový blok (Start -> Spustit... a napiš do okna Notepad a dej Ok.
Zkopíruj do něj následující celý text označený zeleně:
Poznámka: Nepoužij k označení skriptu funkci VYBRAT VŠE

Kód: Vybrat vše

KillAll::
Driver::
IB Updater

Folder::
c:\program files\IB Updater

Registry::
[-HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\~\Browser Helper Objects\{336D0C35-8A85-403a-B9D2-65C292C39087}]


Zvol možnost Soubor -> Uložit jako... a nastav tyto parametry:
Název souboru: zde napiš: CFScript.txt
Uložit jako typ: tak tam vyber Všechny soubory
Ulož soubor na plochu.
Ukonči všechna aktivní okna.

Uchop myší vytvořený skript CFScript.txt, přemísti ho nad stažený program ComboFix.exe a když se oba soubory překryjí, skript upusť?.
- Automaticky se spustí ComboFix
- Vlož sem log, který vyběhne v závěru čistícího procesu

[lukas.sei]

Mohl bych poprosit o radu jak vypnout antivir Norton 360 pokaždé když ímto spusobem zapnu ComboFix ukáže hlášku že je zyplý antispywer norton 360 prosím o radu

[Žbeky]

Určitě jak jej rozklikneš, bude tam možnost ukončit štíty
Kdyžtak to zkus v nouzovém režimu bez ukončování

[lukas.sei]

aswMBR version 0.9.9.1707 Copyright(c) 2011 AVAST Software
Run date: 2013-02-21 14:03:17
-----------------------------
14:03:17.932 OS Version: Windows x64 6.1.7601 Service Pack 1
14:03:17.932 Number of processors: 2 586 0x3A09
14:03:17.932 ComputerName: LUKAS-PC UserName: LUKAS
14:03:20.584 Initialize success
14:03:23.737 Disk 0 (boot) \Device\Harddisk0\DR0 -> \Device\Ide\IAAStorageDevice-1
14:03:23.752 Disk 0 Vendor: ST1000LM 2AR1 Size: 953869MB BusType: 3
14:03:23.768 Disk 0 MBR read successfully
14:03:23.768 Disk 0 MBR scan
14:03:23.768 Disk 0 Windows 7 default MBR code
14:03:23.768 Disk 0 Partition 1 80 (A) 07 HPFS/NTFS NTFS 100 MB offset 2048
14:03:23.783 Disk 0 Partition 2 00 07 HPFS/NTFS NTFS 953767 MB offset 206848
14:03:23.799 Disk 0 scanning C:\Windows\system32\drivers
14:03:29.446 Service scanning
14:03:45.857 Modules scanning
14:03:45.857 Disk 0 trace - called modules:
14:03:45.873 ntoskrnl.exe CLASSPNP.SYS disk.sys iaStor.sys hal.dll
14:03:45.873 1 nt!IofCallDriver -> \Device\Harddisk0\DR0[0xfffffa8005298410]
14:03:45.873 3 CLASSPNP.SYS[fffff880017ac43f] -> nt!IofCallDriver -> \Device\Ide\IAAStorageDevice-1[0xfffffa8004d4e050]
14:03:45.889 Scan finished successfully
14:03:55.483 Disk 0 MBR has been saved successfully to "C:\Users\LUKAS\Desktop\MBR.dat"
14:03:55.483 The log file has been saved successfully to "C:\Users\LUKAS\Desktop\aswMBR.txt"

[lukas.sei]

ComboFix 13-02-18.02 - LUKAS 21.02.2013 14:09:21.3.2 - x64 MINIMAL
Microsoft Windows 7 Home Premium 6.1.7601.1.1250.420.1029.18.3934.2801 [GMT 1:00]
Spuštěný z: c:\users\LUKAS\Desktop\ComboFix.exe
Použité ovládací přepínače :: c:\users\LUKAS\Desktop\CFScript.txt
AV: Norton 360 *Enabled/Updated* {63DF5164-9100-186D-2187-8DC619EFD8BF}
FW: Norton 360 *Enabled* {5BE4D041-DB6F-1935-0AD8-24F3E73C9FC4}
SP: Norton 360 *Enabled/Updated* {D8BEB080-B73A-17E3-1B37-B6B462689202}
SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
* Vytvořen nový Bod Obnovení
.
.
((((((((((((((((((((((((( Soubory vytvořené od 2013-01-21 do 2013-02-21 )))))))))))))))))))))))))))))))
.
.
2013-02-21 13:15 . 2013-02-21 13:15 -------- d-----w- c:\users\UpdatusUser\AppData\Local\temp
2013-02-21 13:15 . 2013-02-21 13:15 -------- d-----w- c:\users\Default\AppData\Local\temp
2013-02-19 05:45 . 2013-02-19 05:45 -------- d-----w- c:\users\LUKAS\AppData\Local\ElevatedDiagnostics
2013-02-18 16:46 . 2013-02-18 16:46 -------- d-----w- c:\users\LUKAS\AppData\Roaming\(20-54-76-B9-17-38)
2013-02-18 16:16 . 2013-02-18 16:27 -------- d-----w- c:\users\LUKAS\AppData\Roaming\TeamViewer
2013-02-18 16:00 . 2013-02-18 16:00 -------- d-----w- c:\program files (x86)\TeamViewer
2013-02-18 05:34 . 2013-02-18 05:34 -------- d-----w- c:\users\LUKAS\AppData\Roaming\Malwarebytes
2013-02-18 05:34 . 2013-02-18 05:34 -------- d-----w- c:\programdata\Malwarebytes
2013-02-18 05:34 . 2013-02-18 05:34 -------- d-----w- c:\program files (x86)\Malwarebytes' Anti-Malware
2013-02-18 05:34 . 2012-12-14 15:49 24176 ----a-w- c:\windows\system32\drivers\mbam.sys
2013-02-17 16:33 . 2013-02-17 16:33 -------- d-----w- c:\program files (x86)\BlueStacks
2013-02-17 16:32 . 2013-02-17 16:34 -------- d-----w- c:\programdata\BlueStacks
2013-02-17 15:17 . 2013-02-17 15:17 388096 ----a-r- c:\users\LUKAS\AppData\Roaming\Microsoft\Installer\{45A66726-69BC-466B-A7A4-12FCBA4883D7}\HiJackThis.exe
2013-02-17 15:17 . 2013-02-17 15:17 -------- d-----w- c:\program files (x86)\hijak
2013-02-17 14:00 . 2013-02-17 14:01 -------- d-----w- c:\users\LUKAS\AppData\Local\VMware
2013-02-17 14:00 . 2013-02-17 15:13 -------- d-----w- c:\users\LUKAS\AppData\Roaming\VMware
2013-02-17 12:56 . 2013-02-17 12:56 -------- d-----w- c:\program files (x86)\AML Products
2013-02-17 12:56 . 2002-01-05 10:37 344064 ----a-w- c:\windows\SysWow64\msvcr70.dll
2013-02-17 12:56 . 2002-01-05 05:48 974848 ----a-w- c:\windows\SysWow64\mfc70.dll
2013-02-17 12:56 . 2002-01-05 04:40 487424 ----a-w- c:\windows\SysWow64\msvcp70.dll
2013-02-17 09:04 . 2012-09-17 10:56 34656 ----a-w- c:\windows\system32\TURegOpt.exe
2013-02-17 09:04 . 2012-09-17 10:56 25952 ----a-w- c:\windows\system32\authuitu.dll
2013-02-17 09:04 . 2012-09-17 10:56 21344 ----a-w- c:\windows\SysWow64\authuitu.dll
2013-02-17 08:24 . 2013-02-17 08:24 -------- d-----w- c:\users\LUKAS\AppData\Roaming\TuneUp Software
2013-02-15 19:30 . 2013-02-16 17:31 -------- d-----w- c:\programdata\Avanquest Bluetooth SDK
2013-02-15 15:20 . 2013-02-15 15:20 27760 ----a-w- c:\windows\system32\drivers\ggsemc.sys
2013-02-15 15:20 . 2013-02-15 15:20 14448 ----a-w- c:\windows\system32\drivers\ggflt.sys
2013-02-15 15:18 . 2013-02-15 15:18 -------- d-----w- c:\programdata\Sony Ericsson
2013-02-15 15:18 . 2013-02-15 15:18 -------- d-----w- c:\program files (x86)\Sony Ericsson
2013-02-13 19:11 . 2013-01-09 01:10 996352 ----a-w- c:\program files\Common Files\Microsoft Shared\VGX\VGX.dll
2013-02-13 19:11 . 2013-01-08 22:01 768000 ----a-w- c:\program files (x86)\Common Files\Microsoft Shared\VGX\VGX.dll
2013-02-13 13:31 . 2013-02-13 13:31 -------- d-----w- c:\users\LUKAS\AppData\Local\Rockstar Games
2013-02-13 13:21 . 2013-01-05 05:53 5553512 ----a-w- c:\windows\system32\ntoskrnl.exe
2013-02-13 13:21 . 2013-01-05 05:00 3967848 ----a-w- c:\windows\SysWow64\ntkrnlpa.exe
2013-02-13 13:21 . 2013-01-05 05:00 3913064 ----a-w- c:\windows\SysWow64\ntoskrnl.exe
2013-02-13 13:20 . 2013-01-04 03:26 3153408 ----a-w- c:\windows\system32\win32k.sys
2013-02-13 13:19 . 2013-01-04 05:46 215040 ----a-w- c:\windows\system32\winsrv.dll
2013-02-13 13:19 . 2013-01-04 04:51 5120 ----a-w- c:\windows\SysWow64\wow32.dll
2013-02-13 13:19 . 2013-01-04 02:47 25600 ----a-w- c:\windows\SysWow64\setup16.exe
2013-02-13 13:19 . 2013-01-04 02:47 7680 ----a-w- c:\windows\SysWow64\instnm.exe
2013-02-13 13:19 . 2013-01-04 02:47 14336 ----a-w- c:\windows\SysWow64\ntvdm64.dll
2013-02-13 13:19 . 2013-01-04 02:47 2048 ----a-w- c:\windows\SysWow64\user.exe
2013-02-13 13:19 . 2013-01-03 06:00 1913192 ----a-w- c:\windows\system32\drivers\tcpip.sys
2013-02-13 13:19 . 2013-01-03 06:00 288088 ----a-w- c:\windows\system32\drivers\FWPKCLNT.SYS
2013-02-13 05:06 . 2013-02-13 05:06 -------- d-----w- c:\users\LUKAS\AppData\Local\Adobe
2013-02-13 05:05 . 2013-02-13 05:05 -------- d-----w- c:\program files (x86)\Common Files\Adobe
2013-02-12 13:30 . 2013-02-14 14:16 -------- d-----w- c:\users\LUKAS\plugins
2013-02-06 19:04 . 2013-02-17 08:21 -------- d-----w- c:\users\LUKAS\AppData\Roaming\.minecraft
2013-02-06 18:06 . 2013-02-06 18:06 310688 ----a-w- c:\windows\system32\javaws.exe
2013-02-06 18:06 . 2013-02-06 18:06 188832 ----a-w- c:\windows\system32\javaw.exe
2013-02-06 18:06 . 2013-02-06 18:06 108448 ----a-w- c:\windows\system32\WindowsAccessBridge-64.dll
2013-02-06 18:06 . 2013-02-06 18:06 188320 ----a-w- c:\windows\system32\java.exe
2013-02-06 18:05 . 2013-02-06 18:06 -------- d-----w- c:\program files\Java
2013-02-03 18:23 . 2013-02-17 08:37 -------- dc-h--w- c:\programdata\{B98A2B83-8BB0-42E7-AA1D-D6FA6E7C8F31}
2013-02-03 15:33 . 2013-02-03 16:45 -------- d-----w- c:\users\LUKAS\AppData\Roaming\.techniclauncher
2013-02-03 08:10 . 2013-02-03 10:19 -------- d-----w- c:\windows\SysWow64\NV
2013-02-03 08:10 . 2013-02-03 10:19 -------- d-----w- c:\windows\system32\NV
2013-02-03 08:08 . 2013-02-19 05:07 -------- d-----w- c:\users\UpdatusUser.LUKAS-PC
2013-02-03 08:08 . 2012-03-21 13:12 3092288 ----a-w- c:\windows\system32\nvsvc64.dll
2013-02-03 08:08 . 2012-03-21 13:12 6087488 ----a-w- c:\windows\system32\nvcpl.dll
2013-02-03 08:08 . 2012-03-21 13:10 2529540 ----a-w- c:\windows\system32\nvcoproc.bin
2013-02-03 08:08 . 2012-03-21 13:10 850752 ----a-w- c:\windows\system32\nv3dappshext.dll
2013-02-03 08:08 . 2012-03-21 13:10 63296 ----a-w- c:\windows\system32\nvshext.dll
2013-02-03 08:08 . 2012-03-21 13:10 55616 ----a-w- c:\windows\system32\nv3dappshextr.dll
2013-02-03 08:08 . 2012-03-21 13:10 118080 ----a-w- c:\windows\system32\nvmctray.dll
2013-02-03 08:08 . 2012-03-21 13:10 889664 ----a-w- c:\windows\system32\nvvsvc.exe
2013-02-03 08:08 . 2012-03-21 13:10 2561856 ----a-w- c:\windows\system32\nvsvcr.dll
2013-02-03 08:05 . 2013-02-03 08:08 -------- d-----w- c:\program files\NVIDIA Corporation
2013-02-03 07:38 . 2013-02-03 07:38 -------- d-----w- c:\windows\Sun
2013-02-03 07:37 . 2013-02-03 07:37 861088 ----a-w- c:\windows\SysWow64\npDeployJava1.dll
2013-02-03 07:37 . 2013-02-03 07:37 782240 ----a-w- c:\windows\SysWow64\deployJava1.dll
2013-02-02 20:23 . 2013-02-02 20:23 -------- d-----w- c:\users\LUKAS\AppData\Local\gtk-2.0
2013-02-02 16:34 . 2013-02-17 15:15 -------- d-----w- c:\programdata\VMware
2013-02-02 16:19 . 2013-02-02 19:49 -------- d-----w- c:\program files (x86)\NirSoft
2013-02-02 16:04 . 2013-02-02 16:04 -------- d-----w- c:\windows\SysWow64\Atheros_L1e
2013-02-02 16:03 . 2011-10-14 05:49 108656 ----a-w- c:\windows\system32\drivers\L1C62x64.sys
2013-02-02 15:51 . 2013-02-02 18:35 -------- d-----w- c:\programdata\TamoSoft
2013-02-01 10:25 . 2013-02-01 10:25 -------- d-----w- c:\program files\Elantech
2013-02-01 10:24 . 2012-08-10 08:39 315280 ----a-w- c:\windows\system32\drivers\ETD.sys
2013-01-31 13:53 . 2013-02-10 14:38 -------- d-----w- C:\PacSteamT
2013-01-31 13:42 . 2013-02-17 13:21 -------- d-----w- c:\program files (x86)\Steam
2013-01-31 10:39 . 2013-01-31 12:31 -------- d-----w- c:\users\LUKAS\AppData\Roaming\vlc
2013-01-31 09:26 . 2013-01-31 09:26 -------- d-----w- c:\program files (x86)\VideoLAN
2013-01-31 06:40 . 2013-01-31 06:40 -------- d-----w- c:\users\LUKAS\AppData\Local\Programs
2013-01-31 06:28 . 2013-01-31 13:38 -------- d-----w- c:\program files (x86)\Cracked Steam
2013-01-30 12:45 . 2013-01-30 12:45 -------- d-----w- c:\users\LUKAS\AppData\Local\Update
2013-01-30 12:44 . 2013-01-30 12:44 -------- d-----w- c:\users\LUKAS\AppData\Local\JBS20Soft
2013-01-30 12:42 . 2013-01-30 12:42 -------- d-----w- c:\program files (x86)\JBS20Soft
2013-01-29 16:55 . 2010-11-20 13:34 194944 ----a-w- c:\windows\system32\drivers\vpchbus.sys
2013-01-29 16:55 . 2010-11-20 13:27 15872 ----a-w- c:\windows\system32\vpchbuspipe.dll
2013-01-29 16:55 . 2010-11-20 11:35 95232 ----a-w- c:\windows\system32\drivers\vpcusb.sys
2013-01-29 08:41 . 2013-02-03 16:43 -------- d-----w- c:\program files\fraps
2013-01-29 05:12 . 2013-01-29 05:12 -------- d-----w- c:\users\Default\AppData\Local\Microsoft Help
2013-01-28 10:33 . 2013-01-28 10:33 -------- d-----w- c:\program files (x86)\Stardock
2013-01-28 10:19 . 2013-01-28 10:19 -------- d-----w- c:\programdata\Stardock
2013-01-28 10:19 . 2013-01-28 10:19 -------- d-----w- c:\users\LUKAS\AppData\Local\PackageAware
2013-01-28 09:59 . 2013-02-09 11:41 -------- d-----w- c:\windows\W7SBC
2013-01-28 09:59 . 2011-02-25 06:19 2871808 ----a-w- c:\windows\explorer_edit_w7sbc.exe
2013-01-28 09:59 . 2011-02-25 06:19 2871808 ----a-w- c:\windows\explorer_backup_w7sbc.exe
2013-01-28 09:59 . 2011-02-25 06:19 2871808 ----a-w- c:\windows\explorer.exe
2013-01-28 09:53 . 2009-07-14 01:41 332288 ----a-w- c:\windows\system32\uxtheme.dll.backup
2013-01-28 09:53 . 2010-11-21 03:23 2851840 ----a-w- c:\windows\system32\themeui.dll.backup
2013-01-28 09:53 . 2009-07-14 01:41 44544 ----a-w- c:\windows\system32\themeservice.dll.backup
2013-01-28 08:39 . 2013-01-28 08:39 -------- d-----w- c:\users\LUKAS\AppData\Roaming\Trine2
2013-01-27 18:01 . 2013-01-28 19:25 -------- d-----w- C:\silva turbocad
2013-01-27 17:41 . 2013-01-27 17:41 -------- d-----w- c:\program files (x86)\Spinar-software
2013-01-27 17:38 . 2013-01-27 17:39 -------- d-----w- c:\program files (x86)\TurboCAD Pro 15 Symbols
2013-01-27 17:36 . 2013-01-27 17:36 -------- d-----w- c:\programdata\IMSIDesign
2013-01-27 17:36 . 2013-01-27 17:36 -------- d-----w- c:\program files (x86)\IMSIDesign
2013-01-27 17:35 . 2013-01-27 17:35 -------- d-----w- c:\users\LUKAS\AppData\Roaming\IMSIDesign
2013-01-27 17:35 . 2013-01-27 17:35 -------- d-----w- c:\program files (x86)\TurboCAD Professional 15 Setup
2013-01-26 11:47 . 2013-01-26 11:47 -------- d-----w- c:\program files (x86)\Common Files\Wise Installation Wizard
2013-01-26 08:47 . 2013-01-26 08:47 -------- d-----w- c:\program files (x86)\Microsoft Synchronization Services
2013-01-26 08:46 . 2013-01-26 08:46 -------- d-----w- c:\program files (x86)\Microsoft Sync Framework
2013-01-26 08:45 . 2013-01-26 08:45 -------- d-----w- c:\program files (x86)\Microsoft Visual Studio 8
2013-01-26 08:45 . 2013-01-26 08:45 -------- d-----w- c:\program files\Microsoft Office
2013-01-26 08:45 . 2013-01-26 08:45 -------- d-----w- c:\program files (x86)\Microsoft Analysis Services
2013-01-26 08:45 . 2013-01-26 08:45 -------- d-----w- c:\users\LUKAS\AppData\Local\Microsoft Help
2013-01-26 08:44 . 2013-02-13 19:18 -------- d-----w- c:\programdata\Microsoft Help
2013-01-26 08:44 . 2013-01-26 08:44 -------- d-----r- C:\MSOCache
2013-01-25 17:27 . 2013-02-21 13:17 -------- d-----w- c:\users\LUKAS\AppData\Local\PMB Files
2013-01-25 17:27 . 2013-02-09 11:41 -------- d-----w- c:\programdata\PMB Files
2013-01-25 17:26 . 2013-01-25 17:26 -------- d-----w- c:\program files (x86)\Pando Networks
2013-01-25 17:26 . 2013-01-25 17:26 -------- d-----w- c:\users\LUKAS\.swt
2013-01-25 15:22 . 2013-01-25 15:22 -------- d-----w- c:\program files (x86)\Seznam.cz
.
.
(((((((((((((((((((((((((((((((((((((((( Find3M výpis ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2013-02-13 19:15 . 2013-01-12 10:53 70004024 ----a-w- c:\windows\system32\MRT.exe
2013-02-13 18:56 . 2009-07-13 23:57 20266496 ----a-w- c:\windows\system32\imageres.dll
2013-02-06 18:06 . 2013-01-19 19:13 963488 ----a-w- c:\windows\system32\deployJava1.dll
2013-02-06 18:06 . 2013-01-19 19:13 1085344 ----a-w- c:\windows\system32\npDeployJava1.dll
2013-01-23 05:59 . 2007-04-27 09:43 120200 ----a-w- c:\windows\SysWow64\DLLDEV32i.dll
2013-01-20 15:47 . 2013-01-20 15:47 178800 ----a-w- c:\windows\SysWow64\CmdLineExt_x64.dll
2013-01-20 15:42 . 2013-01-20 15:42 107832 ----a-w- c:\windows\SysWow64\PnkBstrB.exe
2013-01-20 15:42 . 2013-01-20 15:42 66872 ----a-w- c:\windows\SysWow64\PnkBstrA.exe
2013-01-20 15:42 . 2013-01-20 15:42 2250024 ----a-w- c:\windows\SysWow64\pbsvc.exe
2013-01-20 06:48 . 2013-01-20 06:49 1047552 ----a-w- c:\windows\system32\BCMLogon.dll
2013-01-20 06:48 . 2013-01-20 06:49 35344 ----a-w- c:\windows\system32\drivers\npf.sys
2013-01-20 06:48 . 2013-01-20 06:49 445 ----a-w- c:\windows\system32\vcredist_x64.bat
2013-01-20 06:48 . 2013-01-20 06:49 3161088 ----a-w- c:\windows\system32\vcredist_x64.exe
2013-01-20 06:48 . 2013-01-20 06:48 21568 ----a-w- c:\windows\system32\drivers\bcmvwl64.sys
2013-01-12 10:57 . 2013-01-12 10:56 283200 ----a-w- c:\windows\system32\drivers\dtsoftbus01.sys
2013-01-12 10:43 . 2013-01-12 10:43 91648 ----a-w- c:\windows\system32\SetIEInstalledDate.exe
2013-01-12 10:43 . 2013-01-12 10:43 89088 ----a-w- c:\windows\system32\RegisterIEPKEYs.exe
2013-01-12 10:43 . 2013-01-12 10:43 89088 ----a-w- c:\windows\system32\ie4uinit.exe
2013-01-12 10:43 . 2013-01-12 10:43 86528 ----a-w- c:\windows\SysWow64\iesysprep.dll
2013-01-12 10:43 . 2013-01-12 10:43 85504 ----a-w- c:\windows\system32\iesetup.dll
2013-01-12 10:43 . 2013-01-12 10:43 82432 ----a-w- c:\windows\system32\icardie.dll
2013-01-12 10:43 . 2013-01-12 10:43 76800 ----a-w- c:\windows\SysWow64\SetIEInstalledDate.exe
2013-01-12 10:43 . 2013-01-12 10:43 76800 ----a-w- c:\windows\system32\tdc.ocx
2013-01-12 10:43 . 2013-01-12 10:43 74752 ----a-w- c:\windows\SysWow64\RegisterIEPKEYs.exe
2013-01-12 10:43 . 2013-01-12 10:43 74752 ----a-w- c:\windows\SysWow64\iesetup.dll
2013-01-12 10:43 . 2013-01-12 10:43 65024 ----a-w- c:\windows\system32\pngfilt.dll
2013-01-12 10:43 . 2013-01-12 10:43 63488 ----a-w- c:\windows\SysWow64\tdc.ocx
2013-01-12 10:43 . 2013-01-12 10:43 55296 ----a-w- c:\windows\system32\msfeedsbs.dll
2013-01-12 10:43 . 2013-01-12 10:43 534528 ----a-w- c:\windows\system32\ieapfltr.dll
2013-01-12 10:43 . 2013-01-12 10:43 49664 ----a-w- c:\windows\system32\imgutil.dll
2013-01-12 10:43 . 2013-01-12 10:43 48640 ----a-w- c:\windows\SysWow64\mshtmler.dll
2013-01-12 10:43 . 2013-01-12 10:43 48640 ----a-w- c:\windows\system32\mshtmler.dll
2013-01-12 10:43 . 2013-01-12 10:43 452608 ----a-w- c:\windows\system32\dxtmsft.dll
2013-01-12 10:43 . 2013-01-12 10:43 448512 ----a-w- c:\windows\system32\html.iec
2013-01-12 10:43 . 2013-01-12 10:43 403248 ----a-w- c:\windows\system32\iedkcs32.dll
2013-01-12 10:43 . 2013-01-12 10:43 39936 ----a-w- c:\windows\system32\iernonce.dll
2013-01-12 10:43 . 2013-01-12 10:43 3695416 ----a-w- c:\windows\system32\ieapfltr.dat
2013-01-12 10:43 . 2013-01-12 10:43 367104 ----a-w- c:\windows\SysWow64\html.iec
2013-01-12 10:43 . 2013-01-12 10:43 35840 ----a-w- c:\windows\SysWow64\imgutil.dll
2013-01-12 10:43 . 2013-01-12 10:43 30720 ----a-w- c:\windows\system32\licmgr10.dll
2013-01-12 10:43 . 2013-01-12 10:43 282112 ----a-w- c:\windows\system32\dxtrans.dll
2013-01-12 10:43 . 2013-01-12 10:43 267776 ----a-w- c:\windows\system32\ieaksie.dll
2013-01-12 10:43 . 2013-01-12 10:43 249344 ----a-w- c:\windows\system32\webcheck.dll
2013-01-12 10:43 . 2013-01-12 10:43 23552 ----a-w- c:\windows\SysWow64\licmgr10.dll
2013-01-12 10:43 . 2013-01-12 10:43 222208 ----a-w- c:\windows\system32\msls31.dll
2013-01-12 10:43 . 2013-01-12 10:43 197120 ----a-w- c:\windows\system32\msrating.dll
2013-01-12 10:43 . 2013-01-12 10:43 165888 ----a-w- c:\windows\system32\iexpress.exe
2013-01-12 10:43 . 2013-01-12 10:43 163840 ----a-w- c:\windows\system32\ieakui.dll
2013-01-12 10:43 . 2013-01-12 10:43 161792 ----a-w- c:\windows\SysWow64\msls31.dll
2013-01-12 10:43 . 2013-01-12 10:43 160256 ----a-w- c:\windows\system32\wextract.exe
2013-01-12 10:43 . 2013-01-12 10:43 160256 ----a-w- c:\windows\system32\ieakeng.dll
2013-01-12 10:43 . 2013-01-12 10:43 152064 ----a-w- c:\windows\SysWow64\wextract.exe
2013-01-12 10:43 . 2013-01-12 10:43 150528 ----a-w- c:\windows\SysWow64\iexpress.exe
2013-01-12 10:43 . 2013-01-12 10:43 149504 ----a-w- c:\windows\system32\occache.dll
2013-01-12 10:43 . 2013-01-12 10:43 145920 ----a-w- c:\windows\system32\iepeers.dll
2013-01-12 10:43 . 2013-01-12 10:43 135168 ----a-w- c:\windows\system32\IEAdvpack.dll
2013-01-12 10:43 . 2013-01-12 10:43 12288 ----a-w- c:\windows\system32\mshta.exe
2013-01-12 10:43 . 2013-01-12 10:43 11776 ----a-w- c:\windows\SysWow64\mshta.exe
2013-01-12 10:43 . 2013-01-12 10:43 114176 ----a-w- c:\windows\system32\admparse.dll
2013-01-12 10:43 . 2013-01-12 10:43 111616 ----a-w- c:\windows\system32\iesysprep.dll
2013-01-12 10:43 . 2013-01-12 10:43 110592 ----a-w- c:\windows\SysWow64\IEAdvpack.dll
2013-01-12 10:43 . 2013-01-12 10:43 10752 ----a-w- c:\windows\system32\msfeedssync.exe
2013-01-12 10:43 . 2013-01-12 10:43 103936 ----a-w- c:\windows\system32\inseng.dll
2013-01-12 10:43 . 2013-01-12 10:43 101888 ----a-w- c:\windows\SysWow64\admparse.dll
2013-01-12 09:26 . 2013-01-12 09:26 177312 ----a-w- c:\windows\system32\drivers\SYMEVENT64x86.SYS
2013-01-11 05:28 . 2013-01-12 09:14 41984 ----a-w- c:\windows\system32\drivers\USB3Ver.dll
2013-01-11 05:28 . 2013-01-11 19:27 788760 ----a-w- c:\windows\system32\drivers\iusb3xhc.sys
2013-01-11 05:28 . 2013-01-11 19:27 356120 ----a-w- c:\windows\system32\drivers\iusb3hub.sys
2013-01-11 05:28 . 2013-01-11 19:27 1721576 ----a-w- c:\windows\system32\WdfCoInstaller01009.dll
2013-01-11 05:28 . 2013-01-11 19:27 16152 ----a-w- c:\windows\system32\drivers\iusb3hcs.sys
2013-01-11 05:27 . 2013-01-12 09:15 339048 ----a-w- c:\windows\system32\drivers\RtsPStor.sys
2013-01-11 05:27 . 2013-01-12 09:15 9887848 ----a-w- c:\windows\SysWow64\RtsPStorIcon.dll
2013-01-11 05:20 . 2013-01-11 19:30 331264 ----a-w- c:\windows\system32\drivers\IntcDAud.sys
2013-01-11 05:20 . 2013-01-11 19:30 14848 ----a-w- c:\windows\system32\IntcDAuC.dll
2013-01-11 05:20 . 2013-01-11 19:30 52736 ----a-w- c:\windows\system32\OpenCL.dll
2013-01-11 05:20 . 2013-01-11 19:30 51200 ----a-w- c:\windows\SysWow64\OpenCL.dll
2013-01-11 05:20 . 2013-01-11 19:30 276248 ----a-w- c:\windows\SysWow64\IntelCpHeciSvc.exe
2013-01-11 05:20 . 2013-01-11 19:30 236032 ----a-w- c:\windows\system32\IntelOpenCL64.dll
2013-01-11 05:20 . 2013-01-11 19:30 188416 ----a-w- c:\windows\SysWow64\IntelOpenCL32.dll
2013-01-11 05:20 . 2013-01-11 19:30 90112 ----a-w- c:\windows\system32\igfxCoIn_v2653.dll
2013-01-11 05:20 . 2013-01-11 19:30 524800 ----a-w- c:\windows\system32\iglhsip64.dll
2013-01-11 05:20 . 2013-01-11 19:30 519680 ----a-w- c:\windows\SysWow64\iglhsip32.dll
2013-01-11 05:20 . 2013-01-11 19:30 213504 ----a-w- c:\windows\system32\iglhcp64.dll
2013-01-11 05:20 . 2013-01-11 19:30 177152 ----a-w- c:\windows\SysWow64\iglhcp32.dll
2013-01-11 05:20 . 2013-01-11 19:30 735796 ----a-w- c:\windows\system32\igkrng700.bin
2013-01-11 05:20 . 2013-01-11 19:30 511768 ----a-w- c:\windows\system32\igfxsrvc.exe
2013-01-11 05:20 . 2013-01-11 19:30 410624 ----a-w- c:\windows\system32\igfxTMM.dll
2013-01-11 05:20 . 2013-01-11 19:30 170264 ----a-w- c:\windows\system32\igfxtray.exe
2013-01-11 05:20 . 2013-01-11 19:30 63488 ----a-w- c:\windows\system32\igfxsrvc.dll
2013-01-11 05:20 . 2013-01-11 19:30 437760 ----a-w- c:\windows\system32\igfxrtrk.lrc
2013-01-11 05:20 . 2013-01-11 19:30 437760 ----a-w- c:\windows\system32\igfxrsve.lrc
2013-01-11 05:20 . 2013-01-11 19:30 437248 ----a-w- c:\windows\system32\igfxrtha.lrc
2013-01-11 05:20 . 2013-01-11 19:30 439296 ----a-w- c:\windows\system32\igfxrrus.lrc
2013-01-11 05:20 . 2013-01-11 19:30 439296 ----a-w- c:\windows\system32\igfxrrom.lrc
2013-01-11 05:20 . 2013-01-11 19:30 438784 ----a-w- c:\windows\system32\igfxrptg.lrc
2013-01-11 05:20 . 2013-01-11 19:30 438272 ----a-w- c:\windows\system32\igfxrsky.lrc
2013-01-11 05:20 . 2013-01-11 19:30 437760 ----a-w- c:\windows\system32\igfxrslv.lrc
2013-01-11 05:20 . 2013-01-11 19:30 437760 ----a-w- c:\windows\system32\igfxrptb.lrc
2013-01-11 05:20 . 2013-01-11 19:30 438784 ----a-w- c:\windows\system32\igfxrplk.lrc
2013-01-11 05:20 . 2013-01-11 19:30 438784 ----a-w- c:\windows\system32\igfxrnld.lrc
.
.
(((((((((((((((((((((((((((((((((( Spouštěcí body v registru )))))))))))))))))))))))))))))))))))))))))))))
.
.
*Poznámka* prázdné záznamy a legitimní výchozí údaje nejsou zobrazeny.
REGEDIT4
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"DAEMON Tools Lite"="c:\program files (x86)\DAEMON Tools Lite\DTLite.exe" [2013-01-08 3674320]
"Sidebar"="c:\program files\Windows Sidebar\sidebar.exe" [2010-11-21 1475584]
"Skype"="c:\program files (x86)\Skype\Phone\Skype.exe" [2013-01-08 18705664]
"Pando Media Booster"="c:\program files (x86)\Pando Networks\Media Booster\PMB.exe" [2013-01-25 3093624]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]
"USB3MON"="c:\program files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe" [2013-01-11 291608]
"Dolby Home Theater v4"="c:\dolby pcee4\pcee4.exe" [2011-06-01 506712]
"IAStorIcon"="c:\program files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe" [2011-11-29 284440]
"BCSSync"="c:\program files (x86)\Microsoft Office\Office14\BCSSync.exe" [2010-03-13 91520]
"BlueStacks Agent"="c:\program files (x86)\BlueStacks\HD-Agent.exe" [2013-02-15 601976]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorAdmin"= 0 (0x0)
"ConsentPromptBehaviorUser"= 3 (0x3)
"EnableLUA"= 0 (0x0)
"EnableUIADesktopToggle"= 0 (0x0)
"PromptOnSecureDesktop"= 0 (0x0)
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\windows]
"LoadAppInit_DLLs"=1 (0x1)
"AppInit_DLLs"=c:\windows\SysWOW64\nvinit.dll
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\drivers32]
"midi3"=wdmaud.drv
.
R2 BstHdAndroidSvc;BlueStacks Android Service;c:\program files (x86)\BlueStacks\HD-Service.exe BstHdAndroidSvc Android [x]
R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2010-03-18 138576]
R3 ALSysIO;ALSysIO; [x]
R3 BcmVWL;Broadcom Virtual Wireless;c:\windows\system32\DRIVERS\bcmvwl64.sys [2013-01-20 21568]
R3 FirebirdServerMAGIXInstance;Firebird Server - MAGIX Instance;c:\program files (x86)\Common Files\MAGIX Services\Database\bin\fbserver.exe [2011-04-26 2702848]
R3 ggflt;SEMC USB Flash Driver Filter;c:\windows\system32\DRIVERS\ggflt.sys [2013-02-15 14448]
R3 RdpVideoMiniport;Remote Desktop Video Miniport Driver;c:\windows\system32\drivers\rdpvideominiport.sys [2012-08-23 19456]
R3 RSPCIESTOR;Realtek PCIE CardReader Driver;c:\windows\system32\DRIVERS\RtsPStor.sys [2013-01-11 339048]
R3 Sony PC Companion;Sony PC Companion;c:\program files (x86)\Sony\Sony PC Companion\PCCService.exe [2012-01-18 155320]
R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys [2012-08-23 57856]
R3 TsUsbGD;Remote Desktop Generic USB Device;c:\windows\system32\drivers\TsUsbGD.sys [2012-08-23 30208]
R3 USBMULCD;USB Multi-Channel Audio Device Interface;c:\windows\system32\drivers\CM10664.sys [2011-04-28 1310720]
R3 vmci;VMware VMCI Bus Driver;c:\windows\system32\DRIVERS\vmci.sys [x]
R3 WatAdminSvc;Služba Technologie aktivace Windows;c:\windows\system32\Wat\WatAdminSvc.exe [2013-01-12 1255736]
S0 iusb3hcs;Ovladač přepínání hostitelského řadiče Intel(R) USB 3.0;c:\windows\system32\DRIVERS\iusb3hcs.sys [2013-01-11 16152]
S0 nvpciflt;nvpciflt;c:\windows\system32\DRIVERS\nvpciflt.sys [2012-03-21 28992]
S0 SymDS;Symantec Data Store;c:\windows\system32\drivers\N360x64\1402010.016\SYMDS64.SYS [2012-10-04 493216]
S0 SymEFA;Symantec Extended File Attributes;c:\windows\system32\drivers\N360x64\1402010.016\SYMEFA64.SYS [2012-10-04 1133216]
S1 BHDrvx64;BHDrvx64;c:\programdata\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_20.1.0.24\Definitions\BASHDefs\20130208.001\BHDrvx64.sys [2013-01-16 1388120]
S1 ccSet_N360;Norton 360 Settings Manager;c:\windows\system32\drivers\N360x64\1402010.016\ccSetx64.sys [2012-08-20 168096]
S1 dtsoftbus01;DAEMON Tools Virtual Bus Driver;c:\windows\system32\DRIVERS\dtsoftbus01.sys [2013-01-12 283200]
S1 IDSVia64;IDSVia64;c:\programdata\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_20.1.0.24\Definitions\IPSDefs\20130220.002\IDSvia64.sys [2013-01-11 513184]
S1 SymIRON;Symantec Iron Driver;c:\windows\system32\drivers\N360x64\1402010.016\Ironx64.SYS [2012-09-07 224416]
S1 SymNetS;Symantec Network Security WFP Driver;c:\windows\System32\Drivers\N360x64\1402010.016\SYMNETS.SYS [2012-09-07 432800]
S2 AtherosSvc;AtherosSvc;c:\program files (x86)\Bluetooth Suite\adminservice.exe [2012-03-08 107648]
S2 BstHdDrv;BlueStacks Hypervisor;c:\program files (x86)\BlueStacks\HD-Hypervisor-amd64.sys [2013-02-15 71032]
S2 BstHdLogRotatorSvc;BlueStacks Log Rotator Service;c:\program files (x86)\BlueStacks\HD-LogRotatorService.exe [2013-02-15 384888]
S2 Fabs;FABS - Helping agent for MAGIX media database;c:\program files (x86)\Common Files\MAGIX Services\Database\bin\FABS.exe [2011-05-24 1840128]
S2 Hamachi2Svc;LogMeIn Hamachi Tunneling Engine;c:\program files (x86)\LogMeIn Hamachi\hamachi-2.exe [2012-12-10 2465712]
S2 IAStorDataMgrSvc;Úložná technologie Intel(R) Rapid;c:\program files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe [2011-11-29 13592]
S2 IconMan_R;IconMan_R;c:\program files (x86)\Realtek\Realtek PCIE Card Reader\RIconMan.exe [2013-01-11 2425960]
S2 Live Updater Service;Live Updater Service;c:\program files\Acer\Acer Updater\UpdaterService.exe [2012-04-05 255376]
S2 MBAMService;MBAMService;c:\program files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe [2012-12-14 682344]
S2 N360;Norton 360;c:\program files (x86)\Norton 360\Engine\20.2.1.22\ccSvcHst.exe [2012-12-05 143928]
S2 TeamViewer8;TeamViewer 8;c:\program files (x86)\TeamViewer\Version8\TeamViewer_Service.exe [2012-12-14 3467768]
S2 TuneUp.UtilitiesSvc;TuneUp Utilities Service;c:\program files (x86)\TuneUp Utilities 2013\TuneUpUtilitiesService64.exe [2012-09-17 2365792]
S2 ZAtheros Wlan Agent;ZAtheros Wlan Agent;c:\program files (x86)\Atheros\Ath_WlanAgent.exe [2012-02-19 72864]
S3 AthBTPort;Atheros Virtual Bluetooth Class;c:\windows\system32\DRIVERS\btath_flt.sys [2012-03-08 36480]
S3 BTATH_A2DP;Bluetooth A2DP Audio Driver;c:\windows\system32\drivers\btath_a2dp.sys [2012-03-08 340096]
S3 btath_avdt;Atheros Bluetooth AVDT Service;c:\windows\system32\drivers\btath_avdt.sys [2012-03-08 111232]
S3 BTATH_BUS;Atheros Bluetooth Bus;c:\windows\system32\DRIVERS\btath_bus.sys [2012-03-08 30848]
S3 BTATH_HCRP;Bluetooth HCRP Server driver;c:\windows\system32\DRIVERS\btath_hcrp.sys [2012-03-08 168064]
S3 BTATH_LWFLT;Bluetooth LWFLT Device;c:\windows\system32\DRIVERS\btath_lwflt.sys [2012-03-08 68736]
S3 BTATH_RCP;Bluetooth AVRCP Device;c:\windows\system32\DRIVERS\btath_rcp.sys [2012-03-08 281472]
S3 BtFilter;BtFilter;c:\windows\system32\DRIVERS\btfilter.sys [2012-03-08 551552]
S3 EraserUtilRebootDrv;EraserUtilRebootDrv;c:\program files (x86)\Common Files\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys [2012-08-18 138912]
S3 ETD;ELAN PS/2 Port Input Device;c:\windows\system32\DRIVERS\ETD.sys [2012-08-10 315280]
S3 IntcDAud;Intel(R) Display Audio;c:\windows\system32\DRIVERS\IntcDAud.sys [2013-01-11 331264]
S3 iusb3hub;Ovladač rozbočovače Intel(R) USB 3.0;c:\windows\system32\DRIVERS\iusb3hub.sys [2013-01-11 356120]
S3 iusb3xhc;Ovladač rozšiřitelného hostitelského řadiče Intel(R) USB 3.0;c:\windows\system32\DRIVERS\iusb3xhc.sys [2013-01-11 788760]
S3 L1C;NDIS Miniport Driver for Atheros AR81xx PCI-E Ethernet Controller;c:\windows\system32\DRIVERS\L1C62x64.sys [2011-10-14 108656]
S3 MBAMProtector;MBAMProtector;c:\windows\system32\drivers\mbam.sys [2012-12-14 24176]
S3 TuneUpUtilitiesDrv;TuneUpUtilitiesDrv;c:\program files (x86)\TuneUp Utilities 2013\TuneUpUtilitiesDriver64.sys [2012-08-29 11880]
.
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\active setup\installed components\{8A69D345-D564-463c-AFF1-A69D9E530F96}]
2013-02-02 08:21 1607120 ----a-w- c:\program files (x86)\Google\Chrome\Application\24.0.1312.57\Installer\chrmstp.exe
.
.
--------- X64 Entries -----------
.
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"IgfxTray"="c:\windows\system32\igfxtray.exe" [2013-01-11 170264]
"HotKeysCmds"="c:\windows\system32\hkcmd.exe" [2013-01-11 398616]
"Persistence"="c:\windows\system32\igfxpers.exe" [2013-01-11 440600]
"AtherosBtStack"="c:\program files (x86)\Bluetooth Suite\BtvStack.exe" [2012-03-08 1021056]
"AthBtTray"="c:\program files (x86)\Bluetooth Suite\AthBtTray.exe" [2012-03-08 800896]
"RtHDVCpl"="c:\program files\Realtek\Audio\HDA\RAVCpl64.exe" [2012-02-14 12448872]
"RtHDVBg_Dolby"="c:\program files\Realtek\Audio\HDA\RAVBg64.exe" [2012-02-08 1158248]
"Cm106Sound"="c:\windows\Syswow64\cm106.dll" [2011-04-28 8757248]
"ETDCtrl"="c:\program files (x86)\Elantech\ETDCtrl.exe" [BU]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
"AppInit_DLLs"=c:\windows\System32\nvinitx.dll
.
------- Doplňkový sken -------
.
uStart Page = hxxp://www.seznam.cz/
mLocal Page = c:\windows\SYSTEM32\blank.htm
IE: E&xportovat do aplikace Microsoft Excel - c:\progra~2\MICROS~3\Office14\EXCEL.EXE/3000
IE: Od&eslat do aplikace OneNote - c:\progra~2\MICROS~3\Office14\ONBttnIE.dll/105
.
- - - - NEPLATNÉ POLOŽKY ODSTRANĚNÉ Z REGISTRU - - - -
.
WebBrowser-{7473B6BD-4691-4744-A82B-7854EB3D70B6} - (no file)
AddRemove-PunkBusterSvc - c:\windows\system32\pbsvc.exe
.
.
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\N360]
"ImagePath"="\"c:\program files (x86)\Norton 360\Engine\20.2.1.22\ccSvcHst.exe\" /s \"N360\" /m \"c:\program files (x86)\Norton 360\Engine\20.2.1.22\diMaster.dll\" /prefetch:1"
.
--------------------- ZAMKNUTÉ KLÍČE V REGISTRU ---------------------
.
[HKEY_LOCAL_MACHINE\SOFTWARE\BlueStacks]
"SymbolicLinkValue"=hex(6):5c,00,52,00,65,00,67,00,69,00,73,00,74,00,72,00,79,
00,5c,00,4d,00,61,00,63,00,68,00,69,00,6e,00,65,00,5c,00,53,00,6f,00,66,00,\
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\VideoLAN.VLCPlugin.*1*]
@="?????????????????? v1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\VideoLAN.VLCPlugin.*1*\CLSID]
@="{E23FE9C6-778E-49D4-B537-38FCDE4887D8}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\VideoLAN.VLCPlugin.*2*]
@="?????????????????? v2"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\VideoLAN.VLCPlugin.*2*\CLSID]
@="{9BE31822-FDAD-461B-AD51-BE1D1C159921}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Office\Common\Smart Tag\Actions\{B7EFF951-E52F-45CC-9EF7-57124F2177CC}]
@Denied: (A) (Everyone)
"Solution"="{15727DE6-F92D-4E46-ACB4-0E2C58B31A18}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Schema Library\ActionsPane3]
@Denied: (A) (Everyone)
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Schema Library\ActionsPane3\0]
"Key"="ActionsPane3"
"Location"="c:\\Program Files (x86)\\Common Files\\Microsoft Shared\\VSTO\\ActionsPane3.xsd"
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\PCW\Security]
@Denied: (Full) (Everyone)
.
------------------------ Jiné spuštené procesy ------------------------
.
c:\program files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe
c:\program files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe
c:\windows\SysWOW64\PnkBstrA.exe
c:\windows\SysWOW64\PnkBstrB.exe
c:\program files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe
c:\windows\SysWOW64\rundll32.exe
c:\program files (x86)\DAEMON Tools Lite\DTShellHlp.exe
c:\program files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
.
**************************************************************************
.
Celkový čas: 2013-02-21 14:21:58 - počítač byl restartován
ComboFix-quarantined-files.txt 2013-02-21 13:21
ComboFix2.txt 2013-02-19 05:44
ComboFix3.txt 2013-02-18 14:06
.
Před spuštěním: Volných bajtů: 878 036 250 624
Po spuštění: Volných bajtů: 877 963 902 976
.
- - End Of File - - 61EA667237BA1458B14356F7B30D7B88

[memphisto]

Ten Cracked Steam je tam jak pěst na oko...

ComboFix se odinstaluje takto:
Start-Spustit a zadej ComboFix /Uninstall

Vyčisti systém CCleanerem
a použij i T-Cleaner
smaže vše po Combu,MWAVu atd.-stáhneš>spustíš

pozn. před stažením T-Cleaneru a po dobu čištění deaktivuj antivir a antispyware ,následně T-Cleaner smaž a zapni si znovu antivir a antispyware.


+ HJT

Jak se chová PC?

[lukas.sei]

Tak PC se poslední dobou chová OK dlouho uz nespadlo naposled spadlo při aswMBR ale podruhé už bylo vše v poho.
tak nevím akorát včera se system choval divně pořád vytěžoval cpu na 100% a to mám I5 2xjadro 2.5ghz a to sem byl jen na ploše ale ted je to po restartu zase v poho tak to udelam a poslu log ten cracked steam sem už smazal stejně sem ho nepoužíval protože ted nehraju hry

[lukas.sei]

Ten T-Cleaner mi smaže všechny aplikace ??? Pokud jo tak ho bohužel nemužu pustit ten pc nemam sam!

[Žbeky]

Proč bychom ti tam dávali něco, co ti smaže všehny aplikace? Normálně to pusť

[lukas.sei]

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 15:36:05, on 22.2.2013
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v9.00 (9.00.8112.16464)
Boot mode: Normal

Running processes:
C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe
C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe
C:\Program Files (x86)\Norton 360\Engine\20.2.1.22\ccSvcHst.exe
C:\Windows\SysWOW64\rundll32.exe
C:\Program Files (x86)\Pando Networks\Media Booster\PMB.exe
C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe
C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
C:\Program Files (x86)\BlueStacks\HD-Agent.exe
C:\Program Files (x86)\DAEMON Tools Lite\DTShellHlp.exe
C:\Program Files (x86)\hijak\Trend Micro\HiJackThis\HiJackThis.exe
C:\Windows\SysWOW64\DllHost.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.seznam.cz/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
O2 - BHO: Norton Identity Protection - {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} - C:\Program Files (x86)\Norton 360\Engine\20.2.1.22\coIEPlg.dll
O2 - BHO: Norton Vulnerability Protection - {6D53EC84-6AAE-4787-AEEE-F4628F01010C} - C:\Program Files (x86)\Norton 360\Engine\20.2.1.22\IPS\IPSBHO.DLL
O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\PROGRA~2\MICROS~3\Office14\GROOVEEX.DLL
O2 - BHO: IESpeakDoc - {8D10F6C4-0E01-4BD4-8601-11AC1FDF8126} - C:\Program Files (x86)\Bluetooth Suite\IEPlugIn.dll
O2 - BHO: Pomocná služba pro přihlášení k účtu Microsoft - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: URLRedirectionBHO - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\PROGRA~2\MICROS~3\Office14\URLREDIR.DLL
O3 - Toolbar: Norton Toolbar - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - C:\Program Files (x86)\Norton 360\Engine\20.2.1.22\coIEPlg.dll
O4 - HKLM\..\Run: [USB3MON] "C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe"
O4 - HKLM\..\Run: [Dolby Home Theater v4] "C:\Dolby PCEE4\pcee4.exe" -autostart
O4 - HKLM\..\Run: [IAStorIcon] C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
O4 - HKLM\..\Run: [BCSSync] "C:\Program Files (x86)\Microsoft Office\Office14\BCSSync.exe" /DelayServices
O4 - HKLM\..\Run: [BlueStacks Agent] C:\Program Files (x86)\BlueStacks\HD-Agent.exe
O4 - HKCU\..\Run: [DAEMON Tools Lite] "C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe" -autorun
O4 - HKCU\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun
O4 - HKCU\..\Run: [Skype] "C:\Program Files (x86)\Skype\Phone\Skype.exe" /minimized /regrun
O4 - HKCU\..\Run: [Pando Media Booster] C:\Program Files (x86)\Pando Networks\Media Booster\PMB.exe
O4 - HKUS\S-1-5-21-893147023-1356533548-2514911879-1000\..\Run: [DAEMON Tools Lite] "C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe" -autorun (User '?')
O4 - HKUS\S-1-5-21-893147023-1356533548-2514911879-1000\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun (User '?')
O4 - HKUS\S-1-5-21-893147023-1356533548-2514911879-1000\..\Run: [Skype] "C:\Program Files (x86)\Skype\Phone\Skype.exe" /minimized /regrun (User '?')
O4 - HKUS\S-1-5-21-893147023-1356533548-2514911879-1000\..\Run: [Pando Media Booster] C:\Program Files (x86)\Pando Networks\Media Booster\PMB.exe (User '?')
O4 - HKUS\S-1-5-21-893147023-1356533548-2514911879-1005\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User '?')
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Excel - res://C:\PROGRA~2\MICROS~3\Office14\EXCEL.EXE/3000
O8 - Extra context menu item: Od&eslat do aplikace OneNote - res://C:\PROGRA~2\MICROS~3\Office14\ONBttnIE.dll/105
O9 - Extra button: Odeslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: Od&eslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIE.dll
O9 - Extra button: (no name) - {7815BE26-237D-41A8-A98F-F7BD75F71086} - C:\Program Files (x86)\Bluetooth Suite\IEPlugIn.dll
O9 - Extra 'Tools' menuitem: Send by Bluetooth to - {7815BE26-237D-41A8-A98F-F7BD75F71086} - C:\Program Files (x86)\Bluetooth Suite\IEPlugIn.dll
O9 - Extra button: P&ropojené poznámky aplikace OneNote - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIELinkedNotes.dll
O9 - Extra 'Tools' menuitem: P&ropojené poznámky aplikace OneNote - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIELinkedNotes.dll
O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll
O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~2\COMMON~1\Skype\SKYPE4~1.DLL
O18 - Protocol: wlpg - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} - C:\Program Files (x86)\Windows Live\Photo Gallery\AlbumDownloadProtocolHandler.dll
O18 - Filter hijack: text/xml - {807573E5-5146-11D5-A672-00B0D022E945} - C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\MSOXMLMF.DLL
O20 - AppInit_DLLs: C:\Windows\SysWOW64\nvinit.dll
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
O23 - Service: AtherosSvc - Atheros Commnucations - C:\Program Files (x86)\Bluetooth Suite\adminservice.exe
O23 - Service: BlueStacks Android Service (BstHdAndroidSvc) - BlueStack Systems, Inc. - C:\Program Files (x86)\BlueStacks\HD-Service.exe
O23 - Service: BlueStacks Log Rotator Service (BstHdLogRotatorSvc) - BlueStack Systems, Inc. - C:\Program Files (x86)\BlueStacks\HD-LogRotatorService.exe
O23 - Service: Intel(R) Content Protection HECI Service (cphs) - Intel Corporation - C:\Windows\SysWow64\IntelCpHeciSvc.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)
O23 - Service: FABS - Helping agent for MAGIX media database (Fabs) - MAGIX AG - C:\Program Files (x86)\Common Files\MAGIX Services\Database\bin\FABS.exe
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)
O23 - Service: Firebird Server - MAGIX Instance (FirebirdServerMAGIXInstance) - MAGIX® - C:\Program Files (x86)\Common Files\MAGIX Services\Database\bin\fbserver.exe
O23 - Service: LogMeIn Hamachi Tunneling Engine (Hamachi2Svc) - LogMeIn Inc. - C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2.exe
O23 - Service: Úložná technologie Intel(R) Rapid (IAStorDataMgrSvc) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
O23 - Service: IconMan_R - Realsil Microelectronics Inc. - C:\Program Files (x86)\Realtek\Realtek PCIE Card Reader\RIconMan.exe
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Live Updater Service - Acer Incorporated - C:\Program Files\Acer\Acer Updater\UpdaterService.exe
O23 - Service: MBAMScheduler - Malwarebytes Corporation - C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe
O23 - Service: MBAMService - Malwarebytes Corporation - C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
O23 - Service: Norton 360 (N360) - Symantec Corporation - C:\Program Files (x86)\Norton 360\Engine\20.2.1.22\ccSvcHst.exe
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: NVIDIA Update Service Daemon (nvUpdatusService) - NVIDIA Corporation - C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
O23 - Service: PnkBstrA - Unknown owner - C:\Windows\system32\PnkBstrA.exe
O23 - Service: PnkBstrB - Unknown owner - C:\Windows\system32\PnkBstrB.exe
O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing)
O23 - Service: Sony PC Companion - Avanquest Software - C:\Program Files (x86)\Sony\Sony PC Companion\PCCService.exe
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)
O23 - Service: Steam Client Service - Valve Corporation - C:\Program Files (x86)\Common Files\Steam\SteamService.exe
O23 - Service: TeamViewer 8 (TeamViewer8) - TeamViewer GmbH - C:\Program Files (x86)\TeamViewer\Version8\TeamViewer_Service.exe
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\Wat\WatUX.exe,-601 (WatAdminSvc) - Unknown owner - C:\Windows\system32\Wat\WatAdminSvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)
O23 - Service: ZAtheros Wlan Agent - Atheros - C:\Program Files (x86)\Atheros\Ath_WlanAgent.exe

--
End of file - 11382 bytes

[Žbeky]

Jak se to teda chová teď?