Kontrola logu ( Zatížený procesor ) Vyřešeno

[Voldacz]

ComboFix 13-04-18.03 - Voldacz 19.04.2013 16:19:13.2.2 - x86
Microsoft Windows 7 Ultimate 6.1.7600.0.1250.420.1029.18.3564.2331 [GMT 2:00]
Spuštěný z: c:\users\Voldacz\Desktop\ComboFix.exe
SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.
.
((((((((((((((((((((((((((((((((((((((( Ostatní výmazy )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
C:\install.exe
c:\programdata\ntuser.dat
c:\users\Voldacz\AppData\Roaming\BabMaint.exe
c:\windows\pkunzip.pif
c:\windows\pkzip.pif
.
.
((((((((((((((((((((((((( Soubory vytvořené od 2013-03-19 do 2013-04-19 )))))))))))))))))))))))))))))))
.
.
2013-04-19 14:25 . 2013-04-19 14:25 -------- d-----w- c:\users\UpdatusUser\AppData\Local\temp
2013-04-19 14:25 . 2013-04-19 14:25 -------- d-----w- c:\users\Default\AppData\Local\temp
2013-04-19 13:39 . 2013-04-10 03:08 6906960 ----a-w- c:\programdata\Microsoft\Windows Defender\Definition Updates\{E3E9431D-A250-4226-A115-6BD30941F30D}\mpengine.dll
2013-04-17 18:56 . 2013-04-17 18:57 -------- d-----w- c:\users\Voldacz\AppData\Roaming\Kecal
2013-04-17 18:56 . 2013-04-17 18:56 -------- d-----w- c:\program files\Kecal
2013-04-17 16:34 . 2013-04-17 16:34 26520 ----a-w- c:\program files\Mozilla Firefox\plugin-hang-ui.exe
2013-04-16 18:31 . 2013-04-16 18:31 -------- d-----w- c:\users\Voldacz\AppData\Roaming\Malwarebytes
2013-04-16 18:31 . 2013-04-16 18:31 -------- d-----w- c:\programdata\Malwarebytes
2013-04-16 18:31 . 2013-04-16 18:31 -------- d-----w- c:\program files\Malwarebytes' Anti-Malware
2013-04-16 18:31 . 2013-04-04 12:50 22856 ----a-w- c:\windows\system32\drivers\mbam.sys
2013-04-16 18:06 . 2013-04-16 18:06 -------- d-----w- c:\program files\Common Files\Skype
2013-04-13 12:56 . 2013-04-13 12:56 -------- d-----w- C:\Games
2013-04-11 14:23 . 2013-04-11 14:23 -------- d-----w- c:\program files\CPUID
2013-04-11 14:23 . 2013-04-11 14:23 -------- d-----w- c:\program files\JAM Software
2013-04-10 18:42 . 2013-04-10 18:42 -------- d-----w- c:\users\Voldacz\AppData\Roaming\GameRanger
2013-04-10 16:09 . 2013-04-10 16:09 -------- d-----w- c:\users\Voldacz\AppData\Local\Xenocode
2013-04-10 16:08 . 2013-04-19 13:31 -------- d-----w- c:\program files\Game Cam V2
2013-04-10 16:08 . 2013-04-10 16:11 -------- d-----w- c:\users\Voldacz\AppData\Local\gctmp
2013-04-10 16:06 . 2001-09-05 02:18 77824 ----a-w- c:\program files\Common Files\InstallShield\engine\6\Intel 32\ctor.dll
2013-04-10 16:06 . 2000-01-04 04:39 212992 ----a-w- c:\program files\Common Files\InstallShield\engine\6\Intel 32\ILog.dll
2013-04-10 16:00 . 2013-04-10 16:00 -------- d-----w- c:\users\Voldacz\AppData\Roaming\Thinstall
2013-04-10 16:00 . 2013-04-10 16:00 -------- d-----w- c:\users\Voldacz\AppData\Local\Thinstall
2013-04-10 08:57 . 2013-04-10 08:57 -------- d-----w- c:\windows\system32\Wat
2013-04-10 04:41 . 2012-12-16 14:25 295424 ----a-w- c:\windows\system32\atmfd.dll
2013-04-10 04:41 . 2012-12-16 14:25 34304 ----a-w- c:\windows\system32\atmlib.dll
2013-04-10 04:34 . 2010-12-18 03:19 1448448 ----a-w- c:\windows\system32\inetcpl.cpl
2013-04-10 04:34 . 2010-12-18 03:15 2381824 ----a-w- c:\windows\system32\mshtml.tlb
2013-04-10 04:31 . 2013-01-24 04:51 195816 ----a-w- c:\windows\system32\drivers\fvevol.sys
2013-04-10 04:30 . 2013-03-01 03:11 2345984 ----a-w- c:\windows\system32\win32k.sys
2013-04-10 04:30 . 2013-03-19 05:06 3958120 ----a-w- c:\windows\system32\ntkrnlpa.exe
2013-04-10 04:30 . 2013-03-19 05:06 3902312 ----a-w- c:\windows\system32\ntoskrnl.exe
2013-04-10 04:30 . 2013-03-19 04:54 38912 ----a-w- c:\windows\system32\csrsrv.dll
2013-04-10 04:30 . 2013-03-19 02:50 69632 ----a-w- c:\windows\system32\smss.exe
2013-04-10 04:30 . 2013-02-12 15:13 2691072 ----a-w- c:\windows\system32\mstscax.dll
2013-04-10 04:30 . 2013-02-12 15:07 131072 ----a-w- c:\windows\system32\aaclient.dll
2013-04-10 04:30 . 2013-02-12 13:59 36864 ----a-w- c:\windows\system32\tsgqec.dll
2013-04-10 04:30 . 2013-03-02 05:09 1210712 ----a-w- c:\windows\system32\drivers\ntfs.sys
2013-04-10 04:30 . 2012-07-26 03:39 47720 ----a-w- c:\windows\system32\drivers\WdfLdr.sys
2013-04-10 04:30 . 2012-07-26 03:39 526952 ----a-w- c:\windows\system32\drivers\Wdf01000.sys
2013-04-10 04:30 . 2012-07-26 02:46 9728 ----a-w- c:\windows\system32\Wdfres.dll
2013-04-10 04:29 . 2012-07-26 02:33 66560 ----a-w- c:\windows\system32\drivers\WUDFPf.sys
2013-04-10 04:29 . 2012-07-26 02:32 155136 ----a-w- c:\windows\system32\drivers\WUDFRd.sys
2013-04-10 04:29 . 2012-07-26 03:20 73216 ----a-w- c:\windows\system32\WUDFSvc.dll
2013-04-10 04:29 . 2012-07-26 03:20 38912 ----a-w- c:\windows\system32\WUDFCoinstaller.dll
2013-04-10 04:29 . 2012-07-26 03:20 172032 ----a-w- c:\windows\system32\WUDFPlatform.dll
2013-04-10 04:29 . 2012-07-26 03:21 196608 ----a-w- c:\windows\system32\WUDFHost.exe
2013-04-10 04:29 . 2012-07-26 03:20 613888 ----a-w- c:\windows\system32\WUDFx.dll
2013-04-10 04:28 . 2012-03-01 05:53 19312 ----a-w- c:\windows\system32\drivers\fs_rec.sys
2013-04-10 04:28 . 2012-03-01 05:45 158720 ----a-w- c:\windows\system32\imagehlp.dll
2013-04-10 04:28 . 2012-03-01 05:40 5120 ----a-w- c:\windows\system32\wmi.dll
2013-04-09 04:56 . 2012-02-11 05:41 316928 ----a-w- c:\windows\system32\spoolsv.exe
2013-04-09 04:56 . 2012-11-22 09:33 627712 ----a-w- c:\windows\system32\usp10.dll
2013-04-09 04:56 . 2011-04-29 02:57 311296 ----a-w- c:\windows\system32\drivers\srv.sys
2013-04-09 04:56 . 2011-04-29 02:57 309760 ----a-w- c:\windows\system32\drivers\srv2.sys
2013-04-09 04:56 . 2011-04-29 02:57 114176 ----a-w- c:\windows\system32\drivers\srvnet.sys
2013-04-09 04:56 . 2011-04-25 02:35 338944 ----a-w- c:\windows\system32\drivers\afd.sys
2013-04-09 04:56 . 2013-02-12 13:51 15872 ----a-w- c:\windows\system32\drivers\usb8023.sys
2013-04-09 04:56 . 2012-08-24 17:10 172544 ----a-w- c:\windows\system32\wintrust.dll
2013-04-09 04:56 . 2011-11-17 05:41 1288984 ----a-w- c:\windows\system32\ntdll.dll
2013-04-09 04:55 . 2012-11-02 04:48 376832 ----a-w- c:\windows\system32\dpnet.dll
2013-04-09 04:55 . 2011-02-18 05:33 31232 ----a-w- c:\windows\system32\prevhost.exe
2013-04-09 04:55 . 2012-11-09 04:49 492032 ----a-w- c:\windows\system32\win32spl.dll
2013-04-09 04:55 . 2011-03-03 05:29 132608 ----a-w- c:\windows\system32\dnsrslvr.dll
2013-04-09 04:55 . 2011-03-03 05:27 28672 ----a-w- c:\windows\system32\dnscacheugc.exe
2013-04-09 04:55 . 2011-10-01 04:43 708608 ----a-w- c:\program files\Common Files\System\wab32.dll
2013-04-09 04:53 . 2012-06-02 04:51 134000 ----a-w- c:\windows\system32\drivers\ksecpkg.sys
2013-04-09 04:53 . 2012-06-02 04:50 369336 ----a-w- c:\windows\system32\drivers\cng.sys
2013-04-09 04:53 . 2012-06-02 04:48 225280 ----a-w- c:\windows\system32\schannel.dll
2013-04-09 04:53 . 2012-06-02 04:51 67440 ----a-w- c:\windows\system32\drivers\ksecdd.sys
2013-04-09 04:53 . 2012-06-06 05:09 1236992 ----a-w- c:\windows\system32\msxml3.dll
2013-04-09 04:53 . 2011-07-09 02:26 222720 ----a-w- c:\windows\system32\drivers\mrxsmb10.sys
2013-04-09 04:53 . 2011-05-04 02:43 96256 ----a-w- c:\windows\system32\drivers\mrxsmb20.sys
2013-04-09 04:53 . 2011-05-04 02:43 123392 ----a-w- c:\windows\system32\drivers\mrxsmb.sys
2013-04-09 04:53 . 2011-08-27 04:43 571904 ----a-w- c:\windows\system32\oleaut32.dll
2013-04-09 04:53 . 2011-08-27 04:43 233472 ----a-w- c:\windows\system32\oleacc.dll
2013-04-09 04:52 . 2012-04-02 04:41 1221632 ----a-w- c:\program files\Windows Journal\NBDoc.DLL
2013-04-09 04:52 . 2012-04-02 04:40 936960 ----a-w- c:\program files\Common Files\Microsoft Shared\ink\journal.dll
2013-04-09 04:52 . 2012-04-02 04:40 989184 ----a-w- c:\program files\Windows Journal\JNTFiltr.dll
2013-04-09 04:52 . 2012-04-02 04:40 969216 ----a-w- c:\program files\Windows Journal\JNWDRV.dll
2013-04-09 04:52 . 2012-11-02 04:50 1388544 ----a-w- c:\windows\system32\msxml6.dll
2013-04-09 04:52 . 2011-05-03 04:50 740864 ----a-w- c:\windows\system32\inetcomm.dll
2013-04-09 04:51 . 2013-01-04 04:55 1287528 ----a-w- c:\windows\system32\drivers\tcpip.sys
2013-04-09 04:51 . 2013-01-04 04:55 187240 ----a-w- c:\windows\system32\drivers\FWPKCLNT.SYS
2013-04-09 04:51 . 2011-11-19 14:06 67072 ----a-w- c:\windows\system32\packager.dll
2013-04-09 04:51 . 2011-05-04 04:53 1553920 ----a-w- c:\windows\system32\tquery.dll
2013-04-09 04:51 . 2011-05-04 04:52 666624 ----a-w- c:\windows\system32\mssvp.dll
2013-04-09 04:51 . 2011-05-04 04:52 1401856 ----a-w- c:\windows\system32\mssrch.dll
2013-04-09 04:51 . 2011-05-04 04:52 428032 ----a-w- c:\windows\system32\SearchIndexer.exe
2013-04-09 04:51 . 2011-05-04 04:52 59392 ----a-w- c:\windows\system32\msscntrs.dll
2013-04-09 04:51 . 2011-05-04 04:52 337408 ----a-w- c:\windows\system32\mssph.dll
2013-04-09 04:51 . 2011-05-04 04:52 197120 ----a-w- c:\windows\system32\mssphtb.dll
2013-04-09 04:51 . 2011-05-04 04:52 86528 ----a-w- c:\windows\system32\SearchFilterHost.exe
2013-04-09 04:51 . 2011-05-04 04:52 164352 ----a-w- c:\windows\system32\SearchProtocolHost.exe
2013-04-09 04:50 . 2012-06-06 05:09 987136 ----a-w- c:\program files\Common Files\System\ado\msado15.dll
2013-04-09 04:50 . 2011-02-12 05:30 191488 ----a-w- c:\windows\system32\FXSCOVER.exe
2013-04-09 04:50 . 2012-05-05 07:44 400896 ----a-w- c:\windows\system32\srcore.dll
2013-04-09 04:50 . 2011-10-15 05:48 534528 ----a-w- c:\windows\system32\EncDec.dll
2013-04-09 04:50 . 2012-07-04 21:23 41472 ----a-w- c:\windows\system32\browcli.dll
2013-04-09 04:50 . 2012-07-04 21:23 102912 ----a-w- c:\windows\system32\browser.dll
2013-04-09 04:49 . 2011-03-12 11:31 442880 ----a-w- c:\windows\system32\XpsPrint.dll
2013-04-09 04:49 . 2011-02-24 05:32 288256 ----a-w- c:\windows\system32\XpsGdiConverter.dll
2013-04-09 04:49 . 2010-12-23 05:28 850432 ----a-w- c:\windows\system32\sbe.dll
2013-04-09 04:49 . 2010-12-23 05:28 642048 ----a-w- c:\windows\system32\CPFilters.dll
2013-04-09 04:49 . 2010-12-23 05:24 199680 ----a-w- c:\windows\system32\mpg2splt.ax
2013-04-09 04:48 . 2011-10-26 04:28 1328640 ----a-w- c:\windows\system32\quartz.dll
2013-04-09 04:48 . 2011-10-26 04:28 514560 ----a-w- c:\windows\system32\qdvd.dll
2013-04-09 04:48 . 2012-08-10 23:54 541184 ----a-w- c:\windows\system32\kerberos.dll
2013-04-09 04:48 . 2011-02-26 05:33 2614784 ----a-w- c:\windows\explorer.exe
2013-04-09 04:48 . 2012-04-07 11:34 2342400 ----a-w- c:\windows\system32\msi.dll
2013-04-09 04:45 . 2012-11-20 05:10 219136 ----a-w- c:\windows\system32\ncrypt.dll
2013-04-09 04:45 . 2011-11-17 05:39 314368 ----a-w- c:\windows\system32\webio.dll
2013-04-09 04:45 . 2011-11-17 05:38 1037312 ----a-w- c:\windows\system32\lsasrv.dll
2013-04-09 04:45 . 2011-11-17 05:39 99840 ----a-w- c:\windows\system32\sspicli.dll
2013-04-09 04:45 . 2011-11-17 05:39 15360 ----a-w- c:\windows\system32\sspisrv.dll
2013-04-09 04:45 . 2011-11-17 05:39 22016 ----a-w- c:\windows\system32\secur32.dll
2013-04-09 04:45 . 2011-11-17 05:36 22528 ----a-w- c:\windows\system32\lsass.exe
2013-04-09 04:44 . 2011-06-15 09:04 319488 ----a-w- c:\windows\system32\odbcjt32.dll
2013-04-09 04:44 . 2011-06-15 09:04 81920 ----a-w- c:\windows\system32\odbccr32.dll
2013-04-09 04:44 . 2011-06-15 09:04 122880 ----a-w- c:\windows\system32\odbccp32.dll
2013-04-09 04:44 . 2011-06-15 09:04 86016 ----a-w- c:\windows\system32\odbccu32.dll
2013-04-09 04:44 . 2011-06-15 09:04 163840 ----a-w- c:\windows\system32\odbctrac.dll
2013-04-09 04:44 . 2011-06-15 09:04 94208 ----a-w- c:\program files\Common Files\System\Ole DB\msdaosp.dll
2013-04-09 04:44 . 2012-04-26 04:48 57856 ----a-w- c:\windows\system32\rdpwsx.dll
2013-04-09 04:44 . 2012-04-26 04:48 129536 ----a-w- c:\windows\system32\rdpcorekmts.dll
2013-04-09 04:44 . 2012-04-26 04:43 8192 ----a-w- c:\windows\system32\rdrmemptylst.exe
.
.
(((((((((((((((((((((((((((((((((((((((( Find3M výpis ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2013-03-13 07:42 . 2013-02-02 20:03 73432 ----a-w- c:\windows\system32\FlashPlayerCPLApp.cpl
2013-03-13 07:42 . 2013-02-02 20:03 693976 ----a-w- c:\windows\system32\FlashPlayerApp.exe
2013-03-13 06:36 . 2013-03-13 06:25 1409 ----a-w- c:\windows\vssetup.for
2013-03-11 23:10 . 2013-02-02 20:13 237088 ------w- c:\windows\system32\MpSigStub.exe
2013-03-11 07:50 . 2013-03-11 07:50 118104 ----a-w- c:\windows\dxsdkuninst.exe
2013-03-06 23:33 . 2013-02-03 14:03 368176 ----a-w- c:\windows\system32\drivers\aswSP.sys
2013-03-06 23:33 . 2013-02-03 14:03 62376 ----a-w- c:\windows\system32\drivers\aswTdi.sys
2013-03-06 23:33 . 2013-02-03 14:03 765736 ----a-w- c:\windows\system32\drivers\aswSnx.sys
2013-03-06 23:33 . 2013-02-03 14:03 60656 ----a-w- c:\windows\system32\drivers\aswRdr2.sys
2013-03-06 23:33 . 2013-02-03 14:03 66336 ----a-w- c:\windows\system32\drivers\aswMonFlt.sys
2013-03-06 23:33 . 2013-02-03 14:03 29816 ----a-w- c:\windows\system32\drivers\aswFsBlk.sys
2013-03-06 23:32 . 2013-02-03 14:02 41664 ----a-w- c:\windows\avastSS.scr
2013-03-06 23:32 . 2013-02-03 14:02 228600 ----a-w- c:\windows\system32\aswBoot.exe
2013-02-25 22:22 . 2013-02-25 22:22 1985824 ----a-w- c:\windows\system32\nvcuvenc.dll
2013-02-25 22:22 . 2013-02-02 19:52 1017120 ----a-w- c:\windows\system32\nvdispco32.dll
2013-02-25 22:22 . 2013-02-25 22:22 6262608 ----a-w- c:\windows\system32\nvopencl.dll
2013-02-25 22:22 . 2012-10-10 20:15 958120 ----a-w- c:\windows\system32\nvumdshim.dll
2013-02-25 22:22 . 2013-02-02 19:52 12641992 ----a-w- c:\windows\system32\nvwgf2um.dll
2013-02-25 22:22 . 2013-02-02 19:51 2505144 ----a-w- c:\windows\system32\nvapi.dll
2013-02-25 22:22 . 2012-10-10 20:14 892704 ----a-w- c:\windows\system32\nvdispgenco32.dll
2013-02-25 22:22 . 2013-02-02 19:52 15129960 ----a-w- c:\windows\system32\nvd3dum.dll
2013-02-25 22:22 . 2013-02-25 22:22 7932256 ----a-w- c:\windows\system32\nvcuda.dll
2013-02-25 22:22 . 2013-02-25 22:22 201576 ----a-w- c:\windows\system32\nvinit.dll
2013-02-25 22:22 . 2013-02-25 22:22 17560352 ----a-w- c:\windows\system32\nvcompiler.dll
2013-02-25 22:22 . 2013-02-25 22:22 20449056 ----a-w- c:\windows\system32\nvoglv32.dll
2013-02-25 22:22 . 2013-02-25 22:22 8939296 ----a-w- c:\windows\system32\drivers\nvlddmkm.sys
2013-02-25 22:22 . 2013-02-25 22:22 2720544 ----a-w- c:\windows\system32\nvcuvid.dll
2013-02-15 09:19 . 2009-07-14 02:05 152064 ----a-w- c:\windows\system32\msclmd.dll
2013-02-12 05:43 . 2013-02-12 05:43 282512 ----a-w- c:\windows\system32\PnkBstrB.exe
2013-02-12 05:43 . 2013-02-12 05:43 76888 ----a-w- c:\windows\system32\PnkBstrA.exe
2013-02-08 05:17 . 2013-02-08 05:17 242240 ----a-w- c:\windows\system32\drivers\dtsoftbus01.sys
2013-02-03 17:50 . 2013-02-02 19:53 24944 ----a-w- c:\windows\system32\drivers\GVTDrv.sys
2013-02-03 17:49 . 2013-02-02 19:48 17488 ----a-w- c:\windows\gdrv.sys
2013-02-03 13:45 . 2013-02-03 13:45 17488 ----a-w- c:\windows\etdrv.sys
2013-02-03 12:18 . 2013-02-03 12:18 94112 ----a-w- c:\windows\system32\WindowsAccessBridge.dll
2013-02-03 12:18 . 2013-02-03 09:28 861088 ----a-w- c:\windows\system32\npdeployJava1.dll
2013-02-03 12:18 . 2013-02-02 20:03 782240 ----a-w- c:\windows\system32\deployJava1.dll
2013-02-02 20:06 . 2013-02-02 20:06 41899 ----a-w- c:\windows\system32\NeonClockUninstall.exe
2013-04-17 16:34 . 2013-03-11 05:40 263064 ----a-w- c:\program files\mozilla firefox\components\browsercomps.dll
.
.
(((((((((((((((((((((((((((((((((( Spouštěcí body v registru )))))))))))))))))))))))))))))))))))))))))))))
.
.
*Poznámka* prázdné záznamy a legitimní výchozí údaje nejsou zobrazeny.
REGEDIT4
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\00avast]
@="{472083B0-C522-11CF-8763-00608CC02F24}"
[HKEY_CLASSES_ROOT\CLSID\{472083B0-C522-11CF-8763-00608CC02F24}]
2013-03-06 23:32 121968 ----a-w- c:\program files\AVAST Software\Avast\ashShell.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\1TortoiseNormal]
@="{C5994560-53D9-4125-87C9-F193FC689CB2}"
[HKEY_CLASSES_ROOT\CLSID\{C5994560-53D9-4125-87C9-F193FC689CB2}]
2011-06-13 09:20 64792 ----a-w- c:\program files\Common Files\TortoiseOverlays\TortoiseOverlays.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\2TortoiseModified]
@="{C5994561-53D9-4125-87C9-F193FC689CB2}"
[HKEY_CLASSES_ROOT\CLSID\{C5994561-53D9-4125-87C9-F193FC689CB2}]
2011-06-13 09:20 64792 ----a-w- c:\program files\Common Files\TortoiseOverlays\TortoiseOverlays.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\3TortoiseConflict]
@="{C5994562-53D9-4125-87C9-F193FC689CB2}"
[HKEY_CLASSES_ROOT\CLSID\{C5994562-53D9-4125-87C9-F193FC689CB2}]
2011-06-13 09:20 64792 ----a-w- c:\program files\Common Files\TortoiseOverlays\TortoiseOverlays.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\4TortoiseLocked]
@="{C5994563-53D9-4125-87C9-F193FC689CB2}"
[HKEY_CLASSES_ROOT\CLSID\{C5994563-53D9-4125-87C9-F193FC689CB2}]
2011-06-13 09:20 64792 ----a-w- c:\program files\Common Files\TortoiseOverlays\TortoiseOverlays.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\5TortoiseReadOnly]
@="{C5994564-53D9-4125-87C9-F193FC689CB2}"
[HKEY_CLASSES_ROOT\CLSID\{C5994564-53D9-4125-87C9-F193FC689CB2}]
2011-06-13 09:20 64792 ----a-w- c:\program files\Common Files\TortoiseOverlays\TortoiseOverlays.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\6TortoiseDeleted]
@="{C5994565-53D9-4125-87C9-F193FC689CB2}"
[HKEY_CLASSES_ROOT\CLSID\{C5994565-53D9-4125-87C9-F193FC689CB2}]
2011-06-13 09:20 64792 ----a-w- c:\program files\Common Files\TortoiseOverlays\TortoiseOverlays.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\7TortoiseAdded]
@="{C5994566-53D9-4125-87C9-F193FC689CB2}"
[HKEY_CLASSES_ROOT\CLSID\{C5994566-53D9-4125-87C9-F193FC689CB2}]
2011-06-13 09:20 64792 ----a-w- c:\program files\Common Files\TortoiseOverlays\TortoiseOverlays.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\8TortoiseIgnored]
@="{C5994567-53D9-4125-87C9-F193FC689CB2}"
[HKEY_CLASSES_ROOT\CLSID\{C5994567-53D9-4125-87C9-F193FC689CB2}]
2011-06-13 09:20 64792 ----a-w- c:\program files\Common Files\TortoiseOverlays\TortoiseOverlays.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\9TortoiseUnversioned]
@="{C5994568-53D9-4125-87C9-F193FC689CB2}"
[HKEY_CLASSES_ROOT\CLSID\{C5994568-53D9-4125-87C9-F193FC689CB2}]
2011-06-13 09:20 64792 ----a-w- c:\program files\Common Files\TortoiseOverlays\TortoiseOverlays.dll
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}"="c:\program files\Common Files\Ahead\Lib\NMBgMonitor.exe" [2007-05-16 153136]
"Skype"="c:\program files\Skype\Phone\Skype.exe" [2013-02-28 18642024]
"Steam"="e:\hry\STEAM\steam.exe" [2013-03-29 1631144]
"Pando Media Booster"="c:\program files\Pando Networks\Media Booster\PMB.exe" [2013-02-13 3093624]
"Sidebar"="c:\program files\Windows Sidebar\sidebar.exe" [2009-07-14 1173504]
"DAEMON Tools Lite"="c:\program files\DAEMON Tools Lite\DTLite.exe" [2013-01-08 3674320]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"STCAgent"="c:\program files\Splashtop\Splashtop Connect IE\STCAgent.exe" [2011-03-04 776064]
"RtHDVCpl"="c:\program files\Realtek\Audio\HDA\RtHDVCpl.exe" [2011-11-18 11483752]
"avast"="c:\program files\AVAST Software\Avast\avastUI.exe" [2013-03-06 4767304]
"amd_dc_opt"="c:\program files\AMD\Dual-Core Optimizer\amd_dc_opt.exe" [2008-07-22 77824]
"ZyngaGamesAgent"="c:\program files\Splashtop\Splashtop Connect\ZyngaGamesAgent.exe" [2010-11-15 841544]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorUser"= 3 (0x3)
"EnableUIADesktopToggle"= 0 (0x0)
"PromptOnSecureDesktop"= 0 (0x0)
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\drivers32]
"mixer4"=wdmaud.drv
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\BitTorrent]
2013-02-26 06:17 1133392 ----a-w- c:\users\Voldacz\AppData\Roaming\BitTorrent\BitTorrent.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\DAEMON Tools Lite]
2013-01-08 08:41 3674320 ----a-w- c:\program files\DAEMON Tools Lite\DTLite.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\LogMeIn Hamachi Ui]
2012-12-14 10:08 2255360 ----a-w- c:\program files\LogMeIn Hamachi\hamachi-2-ui.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\QuickTime Task]
2010-08-10 04:15 421888 ----a-w- c:\program files\QuickTime\QTTask.exe
.
R2 MBAMService;MBAMService;c:\program files\Malwarebytes' Anti-Malware\mbamservice.exe [x]
R2 SkypeUpdate;Skype Updater;c:\program files\Skype\Updater\Updater.exe [x]
R3 AppleChargerSrv;AppleChargerSrv;c:\windows\system32\AppleChargerSrv.exe [x]
R3 aswVmm;aswVmm; [x]
R3 DrvAgent32;DrvAgent32;c:\windows\system32\Drivers\DrvAgent32.sys [x]
R3 etdrv;etdrv;c:\windows\etdrv.sys [x]
R3 GVTDrv;GVTDrv;c:\windows\system32\Drivers\GVTDrv.sys [x]
R3 MBAMProtector;MBAMProtector;c:\windows\system32\drivers\mbam.sys [x]
R3 TunngleService;TunngleService;c:\program files\Tunngle\TnglCtrl.exe [x]
R3 WatAdminSvc;Služba Technologie aktivace Windows;c:\windows\system32\Wat\WatAdminSvc.exe [x]
S0 aswRvrt;aswRvrt; [x]
S1 AppleCharger;AppleCharger;c:\windows\system32\DRIVERS\AppleCharger.sys [x]
S1 aswKbd;aswKbd; [x]
S1 aswSnx;aswSnx; [x]
S1 aswSP;aswSP; [x]
S1 dtsoftbus01;DAEMON Tools Virtual Bus Driver;c:\windows\system32\DRIVERS\dtsoftbus01.sys [x]
S2 aswFsBlk;aswFsBlk; [x]
S2 aswMonFlt;aswMonFlt;c:\windows\system32\drivers\aswMonFlt.sys [x]
S2 Hamachi2Svc;LogMeIn Hamachi Tunneling Engine;c:\program files\LogMeIn Hamachi\hamachi-2.exe [x]
S2 SCBackService;Splashtop Connect Service;c:\program files\Splashtop\Splashtop Connect\BackService.exe [x]
S2 Stereo Service;NVIDIA Stereoscopic 3D Driver Service;c:\program files\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe [x]
S2 TeamViewer6;TeamViewer 6;c:\program files\TeamViewer\Version6\TeamViewer_Service.exe [x]
S2 UNS;Intel(R) Management and Security Application User Notification Service;c:\program files\Intel\Intel(R) Management Engine Components\UNS\UNS.exe [x]
S2 WCUService_STC_FF;Splashtop Connect Firefox Software Updater Service;c:\program files\Splashtop\Splashtop Connect Firefox Software Updater\WCUService.exe [x]
S2 WCUService_STC_IE;Splashtop Connect IE Software Updater Service;c:\program files\Splashtop\Splashtop Connect IE Software Updater\WCUService.exe [x]
S3 L1C;NDIS Miniport Driver for Atheros AR813x/AR815x PCI-E Ethernet Controller;c:\windows\system32\DRIVERS\L1C62x86.sys [x]
S3 MEI;Intel(R) Management Engine Interface;c:\windows\system32\DRIVERS\HECI.sys [x]
S3 tap0901t;TAP-Win32 Adapter V9 (Tunngle);c:\windows\system32\DRIVERS\tap0901t.sys [x]
S3 teamviewervpn;TeamViewer VPN Adapter;c:\windows\system32\DRIVERS\teamviewervpn.sys [x]
.
.
[HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{8A69D345-D564-463c-AFF1-A69D9E530F96}]
2013-04-10 10:18 1642448 ----a-w- c:\program files\Google\Chrome\Application\26.0.1410.64\Installer\chrmstp.exe
.
Obsah adresáře 'Naplánované úlohy'
.
2013-04-19 c:\windows\Tasks\Adobe Flash Player Updater.job
- c:\windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2013-02-02 07:42]
.
2013-04-19 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
- c:\program files\Google\Update\GoogleUpdate.exe [2013-02-03 14:03]
.
2013-04-19 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
- c:\program files\Google\Update\GoogleUpdate.exe [2013-02-03 14:03]
.
2013-03-26 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2296173991-3406249303-2536867189-1000Core.job
- c:\users\Voldacz\AppData\Local\Google\Update\GoogleUpdate.exe [2013-03-26 06:04]
.
.
------- Doplňkový sken -------
.
TCP: DhcpNameServer = 212.20.64.1 212.20.64.2
FF - ProfilePath - c:\users\Voldacz\AppData\Roaming\Mozilla\Firefox\Profiles\y7fxewgb.default\
FF - prefs.js: browser.startup.homepage - hxxps://www.google.cz/
FF - ExtSQL: 2013-02-25 07:01; {e4a8a97b-f2ed-450b-b12d-ee082ba24781}; c:\users\Voldacz\AppData\Roaming\Mozilla\Firefox\Profiles\y7fxewgb.default\extensions\{e4a8a97b-f2ed-450b-b12d-ee082ba24781}.xpi
FF - ExtSQL: 2013-02-25 18:23; {19503e42-ca3c-4c27-b1e2-9cdb2170ee34}; c:\users\Voldacz\AppData\Roaming\Mozilla\Firefox\Profiles\y7fxewgb.default\extensions\{19503e42-ca3c-4c27-b1e2-9cdb2170ee34}.xpi
FF - ExtSQL: 2013-03-01 11:00; firebug@software.joehewitt.com; c:\users\Voldacz\AppData\Roaming\Mozilla\Firefox\Profiles\y7fxewgb.default\extensions\firebug@software.joehewitt.com.xpi
FF - ExtSQL: 2013-03-11 08:22; battlefieldplay4free@ea.com; c:\users\Voldacz\AppData\Roaming\Mozilla\Firefox\Profiles\y7fxewgb.default\extensions\battlefieldplay4free@ea.com
FF - ExtSQL: 2013-03-12 12:46; personas@christopher.beard; c:\users\Voldacz\AppData\Roaming\Mozilla\Firefox\Profiles\y7fxewgb.default\extensions\personas@christopher.beard.xpi
.
- - - - NEPLATNÉ POLOŽKY ODSTRANĚNÉ Z REGISTRU - - - -
.
AddRemove-Half-Life Dedicated Server Update Tool - e:\srcds\UNWISE.EXE
.
.
.
--------------------- ZAMKNUTÉ KLÍČE V REGISTRU ---------------------
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil32_11_6_602_180_ActiveX.exe,-101"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\Elevation]
"Enabled"=dword:00000001
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\LocalServer32]
@="c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil32_11_6_602_180_ActiveX.exe"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="IFlashBroker5"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\VideoLAN.VLCPlugin.*1*]
@="?????????????????? v1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\VideoLAN.VLCPlugin.*1*\CLSID]
@="{E23FE9C6-778E-49D4-B537-38FCDE4887D8}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\VideoLAN.VLCPlugin.*2*]
@="?????????????????? v2"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\VideoLAN.VLCPlugin.*2*\CLSID]
@="{9BE31822-FDAD-461B-AD51-BE1D1C159921}"
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\PCW\Security]
@Denied: (Full) (Everyone)
.
Celkový čas: 2013-04-19 16:27:10
ComboFix-quarantined-files.txt 2013-04-19 14:27
.
Před spuštěním: Volných bajtů: 81 834 897 408
Po spuštění: Volných bajtů: 81 664 905 216
.
- - End Of File - - C308621FDE86CC8CF14929D60C917071

[Reklama]

[jaro3]

Otevři si Poznámkový blok (Start -> Spustit... a napiš do okna Notepad a dej Ok.
Zkopíruj do něj následující celý text označený zeleně:

Kód: Vybrat vše

ClearJavaCache::

KillAll::
File::
c:\windows\etdrv.sys
c:\program files\Splashtop\Splashtop Connect\ZyngaGamesAgent.exe
c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2296173991-3406249303-2536867189-1000Core.job

Folder::
c:\program files\Skype\Updater
c:\program files\Google\Update
c:\users\Voldacz\AppData\Local\Google\Update

Driver::
SkypeUpdate
etdrv


Registry::
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"ZyngaGamesAgent"=-

Firefox::
FF - prefs.js: browser.startup.homepage - hxxps://www.google.cz/
FF - ExtSQL: 2013-02-25 07:01; {e4a8a97b-f2ed-450b-b12d-ee082ba24781}; c:\users\Voldacz\AppData\Roaming\Mozilla\Firefox\Profiles\y7fxewgb.default\extensions\{e4a8a97b-f2ed-450b-b12d-ee082ba24781}.xpi
FF - ExtSQL: 2013-02-25 18:23; {19503e42-ca3c-4c27-b1e2-9cdb2170ee34}; c:\users\Voldacz\AppData\Roaming\Mozilla\Firefox\Profiles\y7fxewgb.default\extensions\{19503e42-ca3c-4c27-b1e2-9cdb2170ee34}.xpi

RegLock::
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil32_11_6_602_180_ActiveX.exe,-101"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\Elevation]
"Enabled"=dword:00000001
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\LocalServer32]
@="c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil32_11_6_602_180_ActiveX.exe"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="IFlashBroker5"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\PCW\Security]


Zvol možnost Soubor -> Uložit jako... a nastav tyto parametry:
Název souboru: zde napiš: CFScript.txt
Uložit jako typ: tak tam vyber Všechny soubory
Ulož soubor na plochu.
Ukonči všechna aktivní okna.

Uchop myší vytvořený skript CFScript.txt, přemísti ho nad stažený program ComboFix.exe a když se oba soubory překryjí, skript upusť.
- Automaticky se spustí ComboFix
- Vlož sem log, který vyběhne v závěru čistícího procesu + nový log z HJT

Upozornění : Může se stát, že po aplikaci Combofixu a restartu počítače, Windows nenaběhnou , nebo nenajede plocha , budou problémy s připojením, pak znovu restartuj počítač, pokud to nepomůže , po restartu mačkej klávesu F8 a pak zvol poslední známou funkční konfiguraci. , či použij bod obnovy.

Stáhni si aswMBR
na svojí plochu. Uzavři všechna okna , programy a prohlížeče. Poklepej na aswMBR.exe. Pokud se objeví hláška o možnosti stáhnutí databáze Avastu , klikni na NE. Poté klikni na „Scan“ . Po skenu klikni na „Save Log“ a ulož si log na plochu .Zkopíruj sem celý obsah toho logu. Pak klikni na „Exit“ k zavření programu.

[Voldacz]

ComboFix:

ComboFix 13-04-18.03 - Voldacz 20.04.2013 13:46:20.3.2 - x86
Microsoft Windows 7 Ultimate 6.1.7600.0.1250.420.1029.18.3564.2059 [GMT 2:00]
Spuštěný z: c:\users\Voldacz\Desktop\ComboFix.exe
Použité ovládací přepínače :: c:\users\Voldacz\Desktop\CFScript.txt
SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.
FILE ::
"c:\program files\Splashtop\Splashtop Connect\ZyngaGamesAgent.exe"
"c:\windows\etdrv.sys"
"c:\windows\Tasks\GoogleUpdateTaskMachineCore.job"
"c:\windows\Tasks\GoogleUpdateTaskMachineUA.job"
"c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2296173991-3406249303-2536867189-1000Core.job"
.
.
((((((((((((((((((((((((((((((((((((((( Ostatní výmazy )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
c:\program files\Google\Update
c:\program files\Google\Update\1.3.21.135\GoogleCrashHandler.exe
c:\program files\Google\Update\1.3.21.135\GoogleCrashHandler64.exe
c:\program files\Google\Update\1.3.21.135\GoogleUpdate.exe
c:\program files\Google\Update\1.3.21.135\GoogleUpdateBroker.exe
c:\program files\Google\Update\1.3.21.135\GoogleUpdateHelper.msi
c:\program files\Google\Update\1.3.21.135\GoogleUpdateOnDemand.exe
c:\program files\Google\Update\1.3.21.135\GoogleUpdateSetup.exe
c:\program files\Google\Update\1.3.21.135\goopdate.dll
c:\program files\Google\Update\1.3.21.135\goopdateres_am.dll
c:\program files\Google\Update\1.3.21.135\goopdateres_ar.dll
c:\program files\Google\Update\1.3.21.135\goopdateres_bg.dll
c:\program files\Google\Update\1.3.21.135\goopdateres_bn.dll
c:\program files\Google\Update\1.3.21.135\goopdateres_ca.dll
c:\program files\Google\Update\1.3.21.135\goopdateres_cs.dll
c:\program files\Google\Update\1.3.21.135\goopdateres_da.dll
c:\program files\Google\Update\1.3.21.135\goopdateres_de.dll
c:\program files\Google\Update\1.3.21.135\goopdateres_el.dll
c:\program files\Google\Update\1.3.21.135\goopdateres_en-GB.dll
c:\program files\Google\Update\1.3.21.135\goopdateres_en.dll
c:\program files\Google\Update\1.3.21.135\goopdateres_es-419.dll
c:\program files\Google\Update\1.3.21.135\goopdateres_es.dll
c:\program files\Google\Update\1.3.21.135\goopdateres_et.dll
c:\program files\Google\Update\1.3.21.135\goopdateres_fa.dll
c:\program files\Google\Update\1.3.21.135\goopdateres_fi.dll
c:\program files\Google\Update\1.3.21.135\goopdateres_fil.dll
c:\program files\Google\Update\1.3.21.135\goopdateres_fr.dll
c:\program files\Google\Update\1.3.21.135\goopdateres_gu.dll
c:\program files\Google\Update\1.3.21.135\goopdateres_hi.dll
c:\program files\Google\Update\1.3.21.135\goopdateres_hr.dll
c:\program files\Google\Update\1.3.21.135\goopdateres_hu.dll
c:\program files\Google\Update\1.3.21.135\goopdateres_id.dll
c:\program files\Google\Update\1.3.21.135\goopdateres_is.dll
c:\program files\Google\Update\1.3.21.135\goopdateres_it.dll
c:\program files\Google\Update\1.3.21.135\goopdateres_iw.dll
c:\program files\Google\Update\1.3.21.135\goopdateres_ja.dll
c:\program files\Google\Update\1.3.21.135\goopdateres_kn.dll
c:\program files\Google\Update\1.3.21.135\goopdateres_ko.dll
c:\program files\Google\Update\1.3.21.135\goopdateres_lt.dll
c:\program files\Google\Update\1.3.21.135\goopdateres_lv.dll
c:\program files\Google\Update\1.3.21.135\goopdateres_ml.dll
c:\program files\Google\Update\1.3.21.135\goopdateres_mr.dll
c:\program files\Google\Update\1.3.21.135\goopdateres_ms.dll
c:\program files\Google\Update\1.3.21.135\goopdateres_nl.dll
c:\program files\Google\Update\1.3.21.135\goopdateres_no.dll
c:\program files\Google\Update\1.3.21.135\goopdateres_pl.dll
c:\program files\Google\Update\1.3.21.135\goopdateres_pt-BR.dll
c:\program files\Google\Update\1.3.21.135\goopdateres_pt-PT.dll
c:\program files\Google\Update\1.3.21.135\goopdateres_ro.dll
c:\program files\Google\Update\1.3.21.135\goopdateres_ru.dll
c:\program files\Google\Update\1.3.21.135\goopdateres_sk.dll
c:\program files\Google\Update\1.3.21.135\goopdateres_sl.dll
c:\program files\Google\Update\1.3.21.135\goopdateres_sr.dll
c:\program files\Google\Update\1.3.21.135\goopdateres_sv.dll
c:\program files\Google\Update\1.3.21.135\goopdateres_sw.dll
c:\program files\Google\Update\1.3.21.135\goopdateres_ta.dll
c:\program files\Google\Update\1.3.21.135\goopdateres_te.dll
c:\program files\Google\Update\1.3.21.135\goopdateres_th.dll
c:\program files\Google\Update\1.3.21.135\goopdateres_tr.dll
c:\program files\Google\Update\1.3.21.135\goopdateres_uk.dll
c:\program files\Google\Update\1.3.21.135\goopdateres_ur.dll
c:\program files\Google\Update\1.3.21.135\goopdateres_vi.dll
c:\program files\Google\Update\1.3.21.135\goopdateres_zh-CN.dll
c:\program files\Google\Update\1.3.21.135\goopdateres_zh-TW.dll
c:\program files\Google\Update\1.3.21.135\npGoogleUpdate3.dll
c:\program files\Google\Update\1.3.21.135\psmachine.dll
c:\program files\Google\Update\1.3.21.135\psuser.dll
c:\program files\Google\Update\Download\{430FD4D0-B729-4F61-AA34-91526481799D}\1.3.21.135\GoogleUpdateSetup.exe
c:\program files\Google\Update\Download\{4DC8B4CA-1BDA-483E-B5FA-D3C12E15B62D}\26.0.1410.64\26.0.1410.64_26.0.1410.43_chrome_updater.exe
c:\program files\Google\Update\GoogleUpdate.exe
c:\program files\Skype\Updater
c:\program files\Skype\Updater\Updater.dll
c:\program files\Skype\Updater\Updater.exe
c:\program files\Splashtop\Splashtop Connect\ZyngaGamesAgent.exe
c:\users\Voldacz\AppData\Local\Google\Update
c:\users\Voldacz\AppData\Local\Google\Update\1.3.21.135\GoogleCrashHandler.exe
c:\users\Voldacz\AppData\Local\Google\Update\1.3.21.135\GoogleCrashHandler64.exe
c:\users\Voldacz\AppData\Local\Google\Update\1.3.21.135\GoogleUpdate.exe
c:\users\Voldacz\AppData\Local\Google\Update\1.3.21.135\GoogleUpdateBroker.exe
c:\users\Voldacz\AppData\Local\Google\Update\1.3.21.135\GoogleUpdateHelper.msi
c:\users\Voldacz\AppData\Local\Google\Update\1.3.21.135\GoogleUpdateOnDemand.exe
c:\users\Voldacz\AppData\Local\Google\Update\1.3.21.135\GoogleUpdateSetup.exe
c:\users\Voldacz\AppData\Local\Google\Update\1.3.21.135\goopdate.dll
c:\users\Voldacz\AppData\Local\Google\Update\1.3.21.135\goopdateres_am.dll
c:\users\Voldacz\AppData\Local\Google\Update\1.3.21.135\goopdateres_ar.dll
c:\users\Voldacz\AppData\Local\Google\Update\1.3.21.135\goopdateres_bg.dll
c:\users\Voldacz\AppData\Local\Google\Update\1.3.21.135\goopdateres_bn.dll
c:\users\Voldacz\AppData\Local\Google\Update\1.3.21.135\goopdateres_ca.dll
c:\users\Voldacz\AppData\Local\Google\Update\1.3.21.135\goopdateres_cs.dll
c:\users\Voldacz\AppData\Local\Google\Update\1.3.21.135\goopdateres_da.dll
c:\users\Voldacz\AppData\Local\Google\Update\1.3.21.135\goopdateres_de.dll
c:\users\Voldacz\AppData\Local\Google\Update\1.3.21.135\goopdateres_el.dll
c:\users\Voldacz\AppData\Local\Google\Update\1.3.21.135\goopdateres_en-GB.dll
c:\users\Voldacz\AppData\Local\Google\Update\1.3.21.135\goopdateres_en.dll
c:\users\Voldacz\AppData\Local\Google\Update\1.3.21.135\goopdateres_es-419.dll
c:\users\Voldacz\AppData\Local\Google\Update\1.3.21.135\goopdateres_es.dll
c:\users\Voldacz\AppData\Local\Google\Update\1.3.21.135\goopdateres_et.dll
c:\users\Voldacz\AppData\Local\Google\Update\1.3.21.135\goopdateres_fa.dll
c:\users\Voldacz\AppData\Local\Google\Update\1.3.21.135\goopdateres_fi.dll
c:\users\Voldacz\AppData\Local\Google\Update\1.3.21.135\goopdateres_fil.dll
c:\users\Voldacz\AppData\Local\Google\Update\1.3.21.135\goopdateres_fr.dll
c:\users\Voldacz\AppData\Local\Google\Update\1.3.21.135\goopdateres_gu.dll
c:\users\Voldacz\AppData\Local\Google\Update\1.3.21.135\goopdateres_hi.dll
c:\users\Voldacz\AppData\Local\Google\Update\1.3.21.135\goopdateres_hr.dll
c:\users\Voldacz\AppData\Local\Google\Update\1.3.21.135\goopdateres_hu.dll
c:\users\Voldacz\AppData\Local\Google\Update\1.3.21.135\goopdateres_id.dll
c:\users\Voldacz\AppData\Local\Google\Update\1.3.21.135\goopdateres_is.dll
c:\users\Voldacz\AppData\Local\Google\Update\1.3.21.135\goopdateres_it.dll
c:\users\Voldacz\AppData\Local\Google\Update\1.3.21.135\goopdateres_iw.dll
c:\users\Voldacz\AppData\Local\Google\Update\1.3.21.135\goopdateres_ja.dll
c:\users\Voldacz\AppData\Local\Google\Update\1.3.21.135\goopdateres_kn.dll
c:\users\Voldacz\AppData\Local\Google\Update\1.3.21.135\goopdateres_ko.dll
c:\users\Voldacz\AppData\Local\Google\Update\1.3.21.135\goopdateres_lt.dll
c:\users\Voldacz\AppData\Local\Google\Update\1.3.21.135\goopdateres_lv.dll
c:\users\Voldacz\AppData\Local\Google\Update\1.3.21.135\goopdateres_ml.dll
c:\users\Voldacz\AppData\Local\Google\Update\1.3.21.135\goopdateres_mr.dll
c:\users\Voldacz\AppData\Local\Google\Update\1.3.21.135\goopdateres_ms.dll
c:\users\Voldacz\AppData\Local\Google\Update\1.3.21.135\goopdateres_nl.dll
c:\users\Voldacz\AppData\Local\Google\Update\1.3.21.135\goopdateres_no.dll
c:\users\Voldacz\AppData\Local\Google\Update\1.3.21.135\goopdateres_pl.dll
c:\users\Voldacz\AppData\Local\Google\Update\1.3.21.135\goopdateres_pt-BR.dll
c:\users\Voldacz\AppData\Local\Google\Update\1.3.21.135\goopdateres_pt-PT.dll
c:\users\Voldacz\AppData\Local\Google\Update\1.3.21.135\goopdateres_ro.dll
c:\users\Voldacz\AppData\Local\Google\Update\1.3.21.135\goopdateres_ru.dll
c:\users\Voldacz\AppData\Local\Google\Update\1.3.21.135\goopdateres_sk.dll
c:\users\Voldacz\AppData\Local\Google\Update\1.3.21.135\goopdateres_sl.dll
c:\users\Voldacz\AppData\Local\Google\Update\1.3.21.135\goopdateres_sr.dll
c:\users\Voldacz\AppData\Local\Google\Update\1.3.21.135\goopdateres_sv.dll
c:\users\Voldacz\AppData\Local\Google\Update\1.3.21.135\goopdateres_sw.dll
c:\users\Voldacz\AppData\Local\Google\Update\1.3.21.135\goopdateres_ta.dll
c:\users\Voldacz\AppData\Local\Google\Update\1.3.21.135\goopdateres_te.dll
c:\users\Voldacz\AppData\Local\Google\Update\1.3.21.135\goopdateres_th.dll
c:\users\Voldacz\AppData\Local\Google\Update\1.3.21.135\goopdateres_tr.dll
c:\users\Voldacz\AppData\Local\Google\Update\1.3.21.135\goopdateres_uk.dll
c:\users\Voldacz\AppData\Local\Google\Update\1.3.21.135\goopdateres_ur.dll
c:\users\Voldacz\AppData\Local\Google\Update\1.3.21.135\goopdateres_vi.dll
c:\users\Voldacz\AppData\Local\Google\Update\1.3.21.135\goopdateres_zh-CN.dll
c:\users\Voldacz\AppData\Local\Google\Update\1.3.21.135\goopdateres_zh-TW.dll
c:\users\Voldacz\AppData\Local\Google\Update\1.3.21.135\npGoogleUpdate3.dll
c:\users\Voldacz\AppData\Local\Google\Update\1.3.21.135\psmachine.dll
c:\users\Voldacz\AppData\Local\Google\Update\1.3.21.135\psuser.dll
c:\users\Voldacz\AppData\Local\Google\Update\Download\{D0AB2EBC-931B-4013-9FEB-C9C4C2225C8C}\3.17.0.12440\googletalkpluginaccel.msi
c:\users\Voldacz\AppData\Local\Google\Update\GoogleUpdate.exe
c:\users\Voldacz\AppData\Roaming\Mozilla\Firefox\Profiles\y7fxewgb.default\extensions\{19503e42-ca3c-4c27-b1e2-9cdb2170ee34}.xpi
c:\users\Voldacz\AppData\Roaming\Mozilla\Firefox\Profiles\y7fxewgb.default\extensions\{e4a8a97b-f2ed-450b-b12d-ee082ba24781}.xpi
c:\windows\etdrv.sys
c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2296173991-3406249303-2536867189-1000Core.job
c:\windows\VM305Cap.exe
.
.
((((((((((((((((((((((((((((((((((((((( Ovladače/Služby )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
-------\Legacy_ETDRV
-------\Service_etdrv
-------\Service_SkypeUpdate
-------\Service_gupdate
-------\Service_gupdatem
-------\Service_gupdate
-------\Service_gupdatem
.
.
((((((((((((((((((((((((( Soubory vytvořené od 2013-03-20 do 2013-04-20 )))))))))))))))))))))))))))))))
.
.
2013-04-20 11:53 . 2013-04-20 11:53 -------- d-----w- c:\users\UpdatusUser\AppData\Local\temp
2013-04-20 11:53 . 2013-04-20 11:53 -------- d-----w- c:\users\Default\AppData\Local\temp
2013-04-20 07:44 . 2013-04-20 07:47 -------- d-----w- c:\users\Voldacz\AppData\Roaming\WebCam Recorder
2013-04-20 07:44 . 2013-04-20 07:44 -------- d-----w- c:\program files\Xvid
2013-04-20 07:44 . 2009-06-07 14:25 77824 ----a-w- c:\windows\system32\xvid.ax
2013-04-20 07:44 . 2009-06-07 14:24 180224 ----a-w- c:\windows\system32\xvidvfw.dll
2013-04-20 07:44 . 2009-06-07 14:16 819200 ----a-w- c:\windows\system32\xvidcore.dll
2013-04-20 07:44 . 2013-04-20 07:44 -------- d-----w- c:\program files\Solent
2013-04-20 07:38 . 2007-08-13 12:51 446464 ----a-w- c:\windows\system32\wmvdmoe.dll
2013-04-20 07:38 . 2013-04-20 07:42 -------- d-----w- c:\program files\Active WebCam
2013-04-20 07:21 . 2013-04-20 07:21 -------- d-----w- c:\windows\EffectResources
2013-04-20 07:20 . 2007-07-03 09:01 98304 ----a-w- c:\windows\system32\vvftprpav_hsm.ax
2013-04-20 07:20 . 2007-06-23 11:52 474368 ----a-w- c:\windows\system32\drivers\vvftav.sys
2013-04-20 07:20 . 2007-02-02 15:12 46080 ----a-w- c:\windows\system32\VvFtCtrl.dll
2013-04-20 07:20 . 2007-04-09 14:46 57344 ----a-w- c:\windows\vm305_sti.exe
2013-04-20 07:20 . 2007-03-08 17:05 1466624 ----a-w- c:\windows\system32\drivers\usbVM305.sys
2013-04-20 07:20 . 2007-02-15 12:27 209026 ----a-w- c:\windows\system32\VM305Prp.Ax
2013-04-20 07:20 . 2007-01-05 11:37 81920 ----a-w- c:\windows\system32\VM305STI.dll
2013-04-20 07:20 . 2013-04-20 07:20 -------- d-----w- c:\program files\Vimicro
2013-04-20 07:20 . 2007-03-08 14:56 122880 ----a-w- c:\windows\rm305.exe
2013-04-20 07:20 . 2007-03-08 14:54 200704 ----a-w- c:\windows\RegUnstal.dll
2013-04-20 07:20 . 2007-01-05 11:37 176128 ----a-w- c:\windows\amcap.exe
2013-04-20 06:47 . 2013-04-20 06:47 -------- dc-h--w- c:\programdata\{A2866E3C-DFD9-4FD0-B6A2-96CB2431AC40}
2013-04-20 06:47 . 2013-04-20 06:47 -------- d-----w- c:\program files\SmartTweak Software
2013-04-20 06:47 . 2013-04-20 06:47 -------- d-----w- c:\users\Voldacz\AppData\Local\PackageAware
2013-04-20 06:42 . 2013-04-20 06:42 -------- d-----w- c:\users\Voldacz\.yawcam
2013-04-20 06:41 . 2013-04-20 07:50 -------- d-----w- c:\program files\Yawcam
2013-04-20 06:36 . 2013-04-20 06:36 -------- d-----w- c:\users\Voldacz\AppData\Roaming\Vimisoft Studio
2013-04-20 06:36 . 2013-04-20 08:02 -------- d-----w- c:\program files\Common Files\Vimisoft Studio
2013-04-20 06:36 . 2013-04-20 06:36 -------- d-----w- c:\program files\Vimicro Corporation
2013-04-20 06:36 . 2013-04-20 08:02 -------- d-----w- c:\program files\IM Magician
2013-04-19 13:39 . 2013-04-10 03:08 6906960 ----a-w- c:\programdata\Microsoft\Windows Defender\Definition Updates\{E3E9431D-A250-4226-A115-6BD30941F30D}\mpengine.dll
2013-04-17 18:56 . 2013-04-17 18:57 -------- d-----w- c:\users\Voldacz\AppData\Roaming\Kecal
2013-04-17 18:56 . 2013-04-17 18:56 -------- d-----w- c:\program files\Kecal
2013-04-17 16:34 . 2013-04-17 16:34 26520 ----a-w- c:\program files\Mozilla Firefox\plugin-hang-ui.exe
2013-04-16 18:31 . 2013-04-16 18:31 -------- d-----w- c:\users\Voldacz\AppData\Roaming\Malwarebytes
2013-04-16 18:31 . 2013-04-16 18:31 -------- d-----w- c:\programdata\Malwarebytes
2013-04-16 18:31 . 2013-04-16 18:31 -------- d-----w- c:\program files\Malwarebytes' Anti-Malware
2013-04-16 18:31 . 2013-04-04 12:50 22856 ----a-w- c:\windows\system32\drivers\mbam.sys
2013-04-16 18:06 . 2013-04-16 18:06 -------- d-----w- c:\program files\Common Files\Skype
2013-04-13 12:56 . 2013-04-13 12:56 -------- d-----w- C:\Games
2013-04-11 14:23 . 2013-04-11 14:23 -------- d-----w- c:\program files\CPUID
2013-04-11 14:23 . 2013-04-11 14:23 -------- d-----w- c:\program files\JAM Software
2013-04-10 18:42 . 2013-04-10 18:42 -------- d-----w- c:\users\Voldacz\AppData\Roaming\GameRanger
2013-04-10 16:09 . 2013-04-10 16:09 -------- d-----w- c:\users\Voldacz\AppData\Local\Xenocode
2013-04-10 16:08 . 2013-04-19 13:31 -------- d-----w- c:\program files\Game Cam V2
2013-04-10 16:08 . 2013-04-10 16:11 -------- d-----w- c:\users\Voldacz\AppData\Local\gctmp
2013-04-10 16:06 . 2001-09-05 02:18 77824 ----a-w- c:\program files\Common Files\InstallShield\engine\6\Intel 32\ctor.dll
2013-04-10 16:06 . 2000-01-04 04:39 212992 ----a-w- c:\program files\Common Files\InstallShield\engine\6\Intel 32\ILog.dll
2013-04-10 16:00 . 2013-04-10 16:00 -------- d-----w- c:\users\Voldacz\AppData\Roaming\Thinstall
2013-04-10 16:00 . 2013-04-10 16:00 -------- d-----w- c:\users\Voldacz\AppData\Local\Thinstall
2013-04-10 08:57 . 2013-04-10 08:57 -------- d-----w- c:\windows\system32\Wat
2013-04-10 04:41 . 2012-12-16 14:25 295424 ----a-w- c:\windows\system32\atmfd.dll
2013-04-10 04:41 . 2012-12-16 14:25 34304 ----a-w- c:\windows\system32\atmlib.dll
2013-04-10 04:34 . 2010-12-18 03:19 1448448 ----a-w- c:\windows\system32\inetcpl.cpl
2013-04-10 04:34 . 2010-12-18 03:15 2381824 ----a-w- c:\windows\system32\mshtml.tlb
2013-04-10 04:31 . 2013-01-24 04:51 195816 ----a-w- c:\windows\system32\drivers\fvevol.sys
2013-04-10 04:30 . 2013-03-01 03:11 2345984 ----a-w- c:\windows\system32\win32k.sys
2013-04-10 04:30 . 2013-03-19 05:06 3958120 ----a-w- c:\windows\system32\ntkrnlpa.exe
2013-04-10 04:30 . 2013-03-19 05:06 3902312 ----a-w- c:\windows\system32\ntoskrnl.exe
2013-04-10 04:30 . 2013-03-19 04:54 38912 ----a-w- c:\windows\system32\csrsrv.dll
2013-04-10 04:30 . 2013-03-19 02:50 69632 ----a-w- c:\windows\system32\smss.exe
2013-04-10 04:30 . 2013-02-12 15:13 2691072 ----a-w- c:\windows\system32\mstscax.dll
2013-04-10 04:30 . 2013-02-12 15:07 131072 ----a-w- c:\windows\system32\aaclient.dll
2013-04-10 04:30 . 2013-02-12 13:59 36864 ----a-w- c:\windows\system32\tsgqec.dll
2013-04-10 04:30 . 2013-03-02 05:09 1210712 ----a-w- c:\windows\system32\drivers\ntfs.sys
2013-04-10 04:30 . 2012-07-26 03:39 47720 ----a-w- c:\windows\system32\drivers\WdfLdr.sys
2013-04-10 04:30 . 2012-07-26 03:39 526952 ----a-w- c:\windows\system32\drivers\Wdf01000.sys
2013-04-10 04:30 . 2012-07-26 02:46 9728 ----a-w- c:\windows\system32\Wdfres.dll
2013-04-10 04:29 . 2012-07-26 02:33 66560 ----a-w- c:\windows\system32\drivers\WUDFPf.sys
2013-04-10 04:29 . 2012-07-26 02:32 155136 ----a-w- c:\windows\system32\drivers\WUDFRd.sys
2013-04-10 04:29 . 2012-07-26 03:20 73216 ----a-w- c:\windows\system32\WUDFSvc.dll
2013-04-10 04:29 . 2012-07-26 03:20 38912 ----a-w- c:\windows\system32\WUDFCoinstaller.dll
2013-04-10 04:29 . 2012-07-26 03:20 172032 ----a-w- c:\windows\system32\WUDFPlatform.dll
2013-04-10 04:29 . 2012-07-26 03:21 196608 ----a-w- c:\windows\system32\WUDFHost.exe
2013-04-10 04:29 . 2012-07-26 03:20 613888 ----a-w- c:\windows\system32\WUDFx.dll
2013-04-10 04:28 . 2012-03-01 05:53 19312 ----a-w- c:\windows\system32\drivers\fs_rec.sys
2013-04-10 04:28 . 2012-03-01 05:45 158720 ----a-w- c:\windows\system32\imagehlp.dll
2013-04-10 04:28 . 2012-03-01 05:40 5120 ----a-w- c:\windows\system32\wmi.dll
2013-04-09 04:56 . 2012-02-11 05:41 316928 ----a-w- c:\windows\system32\spoolsv.exe
2013-04-09 04:56 . 2012-11-22 09:33 627712 ----a-w- c:\windows\system32\usp10.dll
2013-04-09 04:56 . 2011-04-29 02:57 311296 ----a-w- c:\windows\system32\drivers\srv.sys
2013-04-09 04:56 . 2011-04-29 02:57 309760 ----a-w- c:\windows\system32\drivers\srv2.sys
2013-04-09 04:56 . 2011-04-29 02:57 114176 ----a-w- c:\windows\system32\drivers\srvnet.sys
2013-04-09 04:56 . 2011-04-25 02:35 338944 ----a-w- c:\windows\system32\drivers\afd.sys
2013-04-09 04:56 . 2013-02-12 13:51 15872 ----a-w- c:\windows\system32\drivers\usb8023.sys
2013-04-09 04:56 . 2012-08-24 17:10 172544 ----a-w- c:\windows\system32\wintrust.dll
2013-04-09 04:56 . 2011-11-17 05:41 1288984 ----a-w- c:\windows\system32\ntdll.dll
2013-04-09 04:55 . 2012-11-02 04:48 376832 ----a-w- c:\windows\system32\dpnet.dll
2013-04-09 04:55 . 2011-02-18 05:33 31232 ----a-w- c:\windows\system32\prevhost.exe
2013-04-09 04:55 . 2012-11-09 04:49 492032 ----a-w- c:\windows\system32\win32spl.dll
2013-04-09 04:55 . 2011-03-03 05:29 132608 ----a-w- c:\windows\system32\dnsrslvr.dll
2013-04-09 04:55 . 2011-03-03 05:27 28672 ----a-w- c:\windows\system32\dnscacheugc.exe
2013-04-09 04:55 . 2011-10-01 04:43 708608 ----a-w- c:\program files\Common Files\System\wab32.dll
2013-04-09 04:53 . 2012-06-02 04:51 134000 ----a-w- c:\windows\system32\drivers\ksecpkg.sys
2013-04-09 04:53 . 2012-06-02 04:50 369336 ----a-w- c:\windows\system32\drivers\cng.sys
2013-04-09 04:53 . 2012-06-02 04:48 225280 ----a-w- c:\windows\system32\schannel.dll
2013-04-09 04:53 . 2012-06-02 04:51 67440 ----a-w- c:\windows\system32\drivers\ksecdd.sys
2013-04-09 04:53 . 2012-06-06 05:09 1236992 ----a-w- c:\windows\system32\msxml3.dll
2013-04-09 04:53 . 2011-07-09 02:26 222720 ----a-w- c:\windows\system32\drivers\mrxsmb10.sys
2013-04-09 04:53 . 2011-05-04 02:43 96256 ----a-w- c:\windows\system32\drivers\mrxsmb20.sys
2013-04-09 04:53 . 2011-05-04 02:43 123392 ----a-w- c:\windows\system32\drivers\mrxsmb.sys
2013-04-09 04:53 . 2011-08-27 04:43 571904 ----a-w- c:\windows\system32\oleaut32.dll
2013-04-09 04:53 . 2011-08-27 04:43 233472 ----a-w- c:\windows\system32\oleacc.dll
2013-04-09 04:52 . 2012-04-02 04:41 1221632 ----a-w- c:\program files\Windows Journal\NBDoc.DLL
2013-04-09 04:52 . 2012-04-02 04:40 936960 ----a-w- c:\program files\Common Files\Microsoft Shared\ink\journal.dll
2013-04-09 04:52 . 2012-04-02 04:40 989184 ----a-w- c:\program files\Windows Journal\JNTFiltr.dll
2013-04-09 04:52 . 2012-04-02 04:40 969216 ----a-w- c:\program files\Windows Journal\JNWDRV.dll
2013-04-09 04:52 . 2012-11-02 04:50 1388544 ----a-w- c:\windows\system32\msxml6.dll
2013-04-09 04:52 . 2011-05-03 04:50 740864 ----a-w- c:\windows\system32\inetcomm.dll
2013-04-09 04:51 . 2013-01-04 04:55 1287528 ----a-w- c:\windows\system32\drivers\tcpip.sys
2013-04-09 04:51 . 2013-01-04 04:55 187240 ----a-w- c:\windows\system32\drivers\FWPKCLNT.SYS
2013-04-09 04:51 . 2011-11-19 14:06 67072 ----a-w- c:\windows\system32\packager.dll
2013-04-09 04:51 . 2011-05-04 04:53 1553920 ----a-w- c:\windows\system32\tquery.dll
2013-04-09 04:51 . 2011-05-04 04:52 666624 ----a-w- c:\windows\system32\mssvp.dll
2013-04-09 04:51 . 2011-05-04 04:52 1401856 ----a-w- c:\windows\system32\mssrch.dll
2013-04-09 04:51 . 2011-05-04 04:52 428032 ----a-w- c:\windows\system32\SearchIndexer.exe
2013-04-09 04:51 . 2011-05-04 04:52 59392 ----a-w- c:\windows\system32\msscntrs.dll
2013-04-09 04:51 . 2011-05-04 04:52 337408 ----a-w- c:\windows\system32\mssph.dll
2013-04-09 04:51 . 2011-05-04 04:52 197120 ----a-w- c:\windows\system32\mssphtb.dll
2013-04-09 04:51 . 2011-05-04 04:52 86528 ----a-w- c:\windows\system32\SearchFilterHost.exe
2013-04-09 04:51 . 2011-05-04 04:52 164352 ----a-w- c:\windows\system32\SearchProtocolHost.exe
2013-04-09 04:50 . 2012-06-06 05:09 987136 ----a-w- c:\program files\Common Files\System\ado\msado15.dll
2013-04-09 04:50 . 2011-02-12 05:30 191488 ----a-w- c:\windows\system32\FXSCOVER.exe
2013-04-09 04:50 . 2012-05-05 07:44 400896 ----a-w- c:\windows\system32\srcore.dll
.
.
(((((((((((((((((((((((((((((((((((((((( Find3M výpis ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2013-03-13 07:42 . 2013-02-02 20:03 73432 ----a-w- c:\windows\system32\FlashPlayerCPLApp.cpl
2013-03-13 07:42 . 2013-02-02 20:03 693976 ----a-w- c:\windows\system32\FlashPlayerApp.exe
2013-03-13 06:36 . 2013-03-13 06:25 1409 ----a-w- c:\windows\vssetup.for
2013-03-11 23:10 . 2013-02-02 20:13 237088 ------w- c:\windows\system32\MpSigStub.exe
2013-03-11 07:50 . 2013-03-11 07:50 118104 ----a-w- c:\windows\dxsdkuninst.exe
2013-03-06 23:33 . 2013-02-03 14:03 368176 ----a-w- c:\windows\system32\drivers\aswSP.sys
2013-03-06 23:33 . 2013-02-03 14:03 62376 ----a-w- c:\windows\system32\drivers\aswTdi.sys
2013-03-06 23:33 . 2013-02-03 14:03 765736 ----a-w- c:\windows\system32\drivers\aswSnx.sys
2013-03-06 23:33 . 2013-02-03 14:03 60656 ----a-w- c:\windows\system32\drivers\aswRdr2.sys
2013-03-06 23:33 . 2013-02-03 14:03 66336 ----a-w- c:\windows\system32\drivers\aswMonFlt.sys
2013-03-06 23:33 . 2013-02-03 14:03 29816 ----a-w- c:\windows\system32\drivers\aswFsBlk.sys
2013-03-06 23:32 . 2013-02-03 14:02 41664 ----a-w- c:\windows\avastSS.scr
2013-03-06 23:32 . 2013-02-03 14:02 228600 ----a-w- c:\windows\system32\aswBoot.exe
2013-02-25 22:22 . 2013-02-25 22:22 1985824 ----a-w- c:\windows\system32\nvcuvenc.dll
2013-02-25 22:22 . 2013-02-02 19:52 1017120 ----a-w- c:\windows\system32\nvdispco32.dll
2013-02-25 22:22 . 2013-02-25 22:22 6262608 ----a-w- c:\windows\system32\nvopencl.dll
2013-02-25 22:22 . 2012-10-10 20:15 958120 ----a-w- c:\windows\system32\nvumdshim.dll
2013-02-25 22:22 . 2013-02-02 19:52 12641992 ----a-w- c:\windows\system32\nvwgf2um.dll
2013-02-25 22:22 . 2013-02-02 19:51 2505144 ----a-w- c:\windows\system32\nvapi.dll
2013-02-25 22:22 . 2012-10-10 20:14 892704 ----a-w- c:\windows\system32\nvdispgenco32.dll
2013-02-25 22:22 . 2013-02-02 19:52 15129960 ----a-w- c:\windows\system32\nvd3dum.dll
2013-02-25 22:22 . 2013-02-25 22:22 7932256 ----a-w- c:\windows\system32\nvcuda.dll
2013-02-25 22:22 . 2013-02-25 22:22 201576 ----a-w- c:\windows\system32\nvinit.dll
2013-02-25 22:22 . 2013-02-25 22:22 17560352 ----a-w- c:\windows\system32\nvcompiler.dll
2013-02-25 22:22 . 2013-02-25 22:22 20449056 ----a-w- c:\windows\system32\nvoglv32.dll
2013-02-25 22:22 . 2013-02-25 22:22 8939296 ----a-w- c:\windows\system32\drivers\nvlddmkm.sys
2013-02-25 22:22 . 2013-02-25 22:22 2720544 ----a-w- c:\windows\system32\nvcuvid.dll
2013-02-15 09:19 . 2009-07-14 02:05 152064 ----a-w- c:\windows\system32\msclmd.dll
2013-02-12 05:43 . 2013-02-12 05:43 282512 ----a-w- c:\windows\system32\PnkBstrB.exe
2013-02-12 05:43 . 2013-02-12 05:43 76888 ----a-w- c:\windows\system32\PnkBstrA.exe
2013-02-08 05:17 . 2013-02-08 05:17 242240 ----a-w- c:\windows\system32\drivers\dtsoftbus01.sys
2013-02-03 17:50 . 2013-02-02 19:53 24944 ----a-w- c:\windows\system32\drivers\GVTDrv.sys
2013-02-03 17:49 . 2013-02-02 19:48 17488 ----a-w- c:\windows\gdrv.sys
2013-02-03 12:18 . 2013-02-03 12:18 94112 ----a-w- c:\windows\system32\WindowsAccessBridge.dll
2013-02-03 12:18 . 2013-02-03 09:28 861088 ----a-w- c:\windows\system32\npdeployJava1.dll
2013-02-03 12:18 . 2013-02-02 20:03 782240 ----a-w- c:\windows\system32\deployJava1.dll
2013-02-02 20:06 . 2013-02-02 20:06 41899 ----a-w- c:\windows\system32\NeonClockUninstall.exe
2013-04-17 16:34 . 2013-03-11 05:40 263064 ----a-w- c:\program files\mozilla firefox\components\browsercomps.dll
.
.
(((((((((((((((((((((((((((((((((( Spouštěcí body v registru )))))))))))))))))))))))))))))))))))))))))))))
.
.
*Poznámka* prázdné záznamy a legitimní výchozí údaje nejsou zobrazeny.
REGEDIT4
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\00avast]
@="{472083B0-C522-11CF-8763-00608CC02F24}"
[HKEY_CLASSES_ROOT\CLSID\{472083B0-C522-11CF-8763-00608CC02F24}]
2013-03-06 23:32 121968 ----a-w- c:\program files\AVAST Software\Avast\ashShell.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\1TortoiseNormal]
@="{C5994560-53D9-4125-87C9-F193FC689CB2}"
[HKEY_CLASSES_ROOT\CLSID\{C5994560-53D9-4125-87C9-F193FC689CB2}]
2011-06-13 09:20 64792 ----a-w- c:\program files\Common Files\TortoiseOverlays\TortoiseOverlays.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\2TortoiseModified]
@="{C5994561-53D9-4125-87C9-F193FC689CB2}"
[HKEY_CLASSES_ROOT\CLSID\{C5994561-53D9-4125-87C9-F193FC689CB2}]
2011-06-13 09:20 64792 ----a-w- c:\program files\Common Files\TortoiseOverlays\TortoiseOverlays.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\3TortoiseConflict]
@="{C5994562-53D9-4125-87C9-F193FC689CB2}"
[HKEY_CLASSES_ROOT\CLSID\{C5994562-53D9-4125-87C9-F193FC689CB2}]
2011-06-13 09:20 64792 ----a-w- c:\program files\Common Files\TortoiseOverlays\TortoiseOverlays.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\4TortoiseLocked]
@="{C5994563-53D9-4125-87C9-F193FC689CB2}"
[HKEY_CLASSES_ROOT\CLSID\{C5994563-53D9-4125-87C9-F193FC689CB2}]
2011-06-13 09:20 64792 ----a-w- c:\program files\Common Files\TortoiseOverlays\TortoiseOverlays.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\5TortoiseReadOnly]
@="{C5994564-53D9-4125-87C9-F193FC689CB2}"
[HKEY_CLASSES_ROOT\CLSID\{C5994564-53D9-4125-87C9-F193FC689CB2}]
2011-06-13 09:20 64792 ----a-w- c:\program files\Common Files\TortoiseOverlays\TortoiseOverlays.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\6TortoiseDeleted]
@="{C5994565-53D9-4125-87C9-F193FC689CB2}"
[HKEY_CLASSES_ROOT\CLSID\{C5994565-53D9-4125-87C9-F193FC689CB2}]
2011-06-13 09:20 64792 ----a-w- c:\program files\Common Files\TortoiseOverlays\TortoiseOverlays.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\7TortoiseAdded]
@="{C5994566-53D9-4125-87C9-F193FC689CB2}"
[HKEY_CLASSES_ROOT\CLSID\{C5994566-53D9-4125-87C9-F193FC689CB2}]
2011-06-13 09:20 64792 ----a-w- c:\program files\Common Files\TortoiseOverlays\TortoiseOverlays.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\8TortoiseIgnored]
@="{C5994567-53D9-4125-87C9-F193FC689CB2}"
[HKEY_CLASSES_ROOT\CLSID\{C5994567-53D9-4125-87C9-F193FC689CB2}]
2011-06-13 09:20 64792 ----a-w- c:\program files\Common Files\TortoiseOverlays\TortoiseOverlays.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\9TortoiseUnversioned]
@="{C5994568-53D9-4125-87C9-F193FC689CB2}"
[HKEY_CLASSES_ROOT\CLSID\{C5994568-53D9-4125-87C9-F193FC689CB2}]
2011-06-13 09:20 64792 ----a-w- c:\program files\Common Files\TortoiseOverlays\TortoiseOverlays.dll
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}"="c:\program files\Common Files\Ahead\Lib\NMBgMonitor.exe" [2007-05-16 153136]
"Skype"="c:\program files\Skype\Phone\Skype.exe" [2013-02-28 18642024]
"Steam"="e:\hry\STEAM\steam.exe" [2013-03-29 1631144]
"Pando Media Booster"="c:\program files\Pando Networks\Media Booster\PMB.exe" [2013-02-13 3093624]
"DAEMON Tools Lite"="c:\program files\DAEMON Tools Lite\DTLite.exe" [2013-01-08 3674320]
"UpdateMyDrivers"="c:\program files\SmartTweak Software\UpdateMyDrivers\UpdateMyDrivers.exe" [2012-12-27 2391304]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"STCAgent"="c:\program files\Splashtop\Splashtop Connect IE\STCAgent.exe" [2011-03-04 776064]
"RtHDVCpl"="c:\program files\Realtek\Audio\HDA\RtHDVCpl.exe" [2011-11-18 11483752]
"avast"="c:\program files\AVAST Software\Avast\avastUI.exe" [2013-03-06 4767304]
"amd_dc_opt"="c:\program files\AMD\Dual-Core Optimizer\amd_dc_opt.exe" [2008-07-22 77824]
"BigDog305"="c:\windows\VM305_STI.EXE" [2007-04-09 57344]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorAdmin"= 0 (0x0)
"ConsentPromptBehaviorUser"= 3 (0x3)
"EnableLUA"= 0 (0x0)
"EnableUIADesktopToggle"= 0 (0x0)
"PromptOnSecureDesktop"= 0 (0x0)
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\drivers32]
"mixer4"=wdmaud.drv
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\BitTorrent]
2013-02-26 06:17 1133392 ----a-w- c:\users\Voldacz\AppData\Roaming\BitTorrent\BitTorrent.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\DAEMON Tools Lite]
2013-01-08 08:41 3674320 ----a-w- c:\program files\DAEMON Tools Lite\DTLite.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\LogMeIn Hamachi Ui]
2012-12-14 10:08 2255360 ----a-w- c:\program files\LogMeIn Hamachi\hamachi-2-ui.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\QuickTime Task]
2010-08-10 04:15 421888 ----a-w- c:\program files\QuickTime\QTTask.exe
.
R3 AppleChargerSrv;AppleChargerSrv;c:\windows\system32\AppleChargerSrv.exe [x]
R3 aswVmm;aswVmm; [x]
R3 DrvAgent32;DrvAgent32;c:\windows\system32\Drivers\DrvAgent32.sys [x]
R3 GVTDrv;GVTDrv;c:\windows\system32\Drivers\GVTDrv.sys [x]
R3 TunngleService;TunngleService;c:\program files\Tunngle\TnglCtrl.exe [x]
R3 WatAdminSvc;Služba Technologie aktivace Windows;c:\windows\system32\Wat\WatAdminSvc.exe [x]
S0 aswRvrt;aswRvrt; [x]
S1 AppleCharger;AppleCharger;c:\windows\system32\DRIVERS\AppleCharger.sys [x]
S1 aswKbd;aswKbd; [x]
S1 aswSnx;aswSnx; [x]
S1 aswSP;aswSP; [x]
S1 dtsoftbus01;DAEMON Tools Virtual Bus Driver;c:\windows\system32\DRIVERS\dtsoftbus01.sys [x]
S2 aswFsBlk;aswFsBlk; [x]
S2 aswMonFlt;aswMonFlt;c:\windows\system32\drivers\aswMonFlt.sys [x]
S2 Hamachi2Svc;LogMeIn Hamachi Tunneling Engine;c:\program files\LogMeIn Hamachi\hamachi-2.exe [x]
S2 MBAMService;MBAMService;c:\program files\Malwarebytes' Anti-Malware\mbamservice.exe [x]
S2 SCBackService;Splashtop Connect Service;c:\program files\Splashtop\Splashtop Connect\BackService.exe [x]
S2 Stereo Service;NVIDIA Stereoscopic 3D Driver Service;c:\program files\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe [x]
S2 TeamViewer6;TeamViewer 6;c:\program files\TeamViewer\Version6\TeamViewer_Service.exe [x]
S2 UNS;Intel(R) Management and Security Application User Notification Service;c:\program files\Intel\Intel(R) Management Engine Components\UNS\UNS.exe [x]
S2 WCUService_STC_FF;Splashtop Connect Firefox Software Updater Service;c:\program files\Splashtop\Splashtop Connect Firefox Software Updater\WCUService.exe [x]
S2 WCUService_STC_IE;Splashtop Connect IE Software Updater Service;c:\program files\Splashtop\Splashtop Connect IE Software Updater\WCUService.exe [x]
S3 L1C;NDIS Miniport Driver for Atheros AR813x/AR815x PCI-E Ethernet Controller;c:\windows\system32\DRIVERS\L1C62x86.sys [x]
S3 MBAMProtector;MBAMProtector;c:\windows\system32\drivers\mbam.sys [x]
S3 MEI;Intel(R) Management Engine Interface;c:\windows\system32\DRIVERS\HECI.sys [x]
S3 tap0901t;TAP-Win32 Adapter V9 (Tunngle);c:\windows\system32\DRIVERS\tap0901t.sys [x]
S3 teamviewervpn;TeamViewer VPN Adapter;c:\windows\system32\DRIVERS\teamviewervpn.sys [x]
S3 vvftav;vvftav;c:\windows\system32\drivers\vvftav.sys [x]
S3 ZSMC0305;A4 TECH PC Camera V;c:\windows\system32\Drivers\usbVM305.sys [x]
.
.
[HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{8A69D345-D564-463c-AFF1-A69D9E530F96}]
2013-04-10 10:18 1642448 ----a-w- c:\program files\Google\Chrome\Application\26.0.1410.64\Installer\chrmstp.exe
.
Obsah adresáře 'Naplánované úlohy'
.
2013-04-20 c:\windows\Tasks\Adobe Flash Player Updater.job
- c:\windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2013-02-02 07:42]
.
.
------- Doplňkový sken -------
.
FF - ProfilePath - c:\users\Voldacz\AppData\Roaming\Mozilla\Firefox\Profiles\y7fxewgb.default\
FF - prefs.js: browser.startup.homepage - hxxps://www.google.cz/
FF - ExtSQL: 2013-02-25 07:01; {e4a8a97b-f2ed-450b-b12d-ee082ba24781}; c:\users\Voldacz\AppData\Roaming\Mozilla\Firefox\Profiles\y7fxewgb.default\extensions\{e4a8a97b-f2ed-450b-b12d-ee082ba24781}.xpi
FF - ExtSQL: 2013-02-25 18:23; {19503e42-ca3c-4c27-b1e2-9cdb2170ee34}; c:\users\Voldacz\AppData\Roaming\Mozilla\Firefox\Profiles\y7fxewgb.default\extensions\{19503e42-ca3c-4c27-b1e2-9cdb2170ee34}.xpi
FF - ExtSQL: 2013-03-01 11:00; firebug@software.joehewitt.com; c:\users\Voldacz\AppData\Roaming\Mozilla\Firefox\Profiles\y7fxewgb.default\extensions\firebug@software.joehewitt.com.xpi
FF - ExtSQL: 2013-03-11 08:22; battlefieldplay4free@ea.com; c:\users\Voldacz\AppData\Roaming\Mozilla\Firefox\Profiles\y7fxewgb.default\extensions\battlefieldplay4free@ea.com
FF - ExtSQL: 2013-03-12 12:46; personas@christopher.beard; c:\users\Voldacz\AppData\Roaming\Mozilla\Firefox\Profiles\y7fxewgb.default\extensions\personas@christopher.beard.xpi
.
.
------------------------ Jiné spuštené procesy ------------------------
.
c:\windows\system32\nvvsvc.exe
c:\program files\AVAST Software\Avast\AvastSvc.exe
c:\program files\NVIDIA Corporation\Display\nvxdsync.exe
c:\windows\system32\nvvsvc.exe
c:\program files\Common Files\Adobe\ARM\1.0\armsvc.exe
c:\program files\Malwarebytes' Anti-Malware\mbamscheduler.exe
c:\windows\system32\PnkBstrA.exe
c:\windows\system32\taskhost.exe
c:\windows\system32\sppsvc.exe
c:\program files\Malwarebytes' Anti-Malware\mbamgui.exe
c:\program files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
c:\program files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe
c:\windows\system32\conhost.exe
c:\windows\System32\WUDFHost.exe
c:\program files\TortoiseSVN\bin\TSVNCache.exe
c:\program files\NVIDIA Corporation\Display\nvtray.exe
c:\program files\Common Files\Ahead\Lib\NMIndexingService.exe
c:\program files\Common Files\Ahead\Lib\NMIndexStoreSvr.exe
c:\program files\Windows Media Player\wmpnetwk.exe
c:\windows\system32\DllHost.exe
c:\program files\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
c:\program files\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
.
**************************************************************************
.
Celkový čas: 2013-04-20 13:58:24 - počítač byl restartován
ComboFix-quarantined-files.txt 2013-04-20 11:58
ComboFix2.txt 2013-04-19 14:27
.
Před spuštěním: Volných bajtů: 69 857 357 824
Po spuštění: Volných bajtů: 69 518 688 256
.
- - End Of File - - E8084250362F65D7DDFE6E60867C8D7F

[Voldacz]

HJT:

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 14:02:22, on 20.4.2013
Platform: Windows 7 (WinNT 6.00.3504)
MSIE: Internet Explorer v9.00 (9.00.7930.16406)
Boot mode: Normal

Running processes:
C:\Windows\system32\taskhost.exe
C:\Program Files\Malwarebytes' Anti-Malware\mbamgui.exe
C:\Windows\system32\Dwm.exe
C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe
C:\Program Files\AVAST Software\Avast\AvastUI.exe
C:\Program Files\TortoiseSVN\bin\TSVNCache.exe
C:\Windows\vm305_sti.exe
C:\Program Files\Common Files\Ahead\Lib\NMBgMonitor.exe
C:\Program Files\Skype\Phone\Skype.exe
E:\HRY\STEAM\Steam.exe
C:\Program Files\Pando Networks\Media Booster\PMB.exe
C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
C:\Program Files\Common Files\Ahead\Lib\NMIndexStoreSvr.exe
C:\Windows\Explorer.exe
C:\Program Files\Mozilla Firefox\firefox.exe
E:\Hry\League of Legends\League of Legends\RADS\system\rads_user_kernel.exe
E:\Hry\League of Legends\League of Legends\RADS\projects\lol_launcher\releases\0.0.0.134\deploy\LoLLauncher.exe
C:\Program Files\Mozilla Firefox\plugin-container.exe
C:\Windows\system32\Macromed\Flash\FlashPlayerPlugin_11_6_602_180.exe
C:\Windows\system32\Macromed\Flash\FlashPlayerPlugin_11_6_602_180.exe
C:\Windows\system32\SearchFilterHost.exe
C:\Users\Voldacz\Downloads\HiJackThis.exe

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll
O2 - BHO: avast! WebRep - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll
O2 - BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll
O3 - Toolbar: avast! WebRep - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll
O4 - HKLM\..\Run: [STCAgent] "C:\Program Files\Splashtop\Splashtop Connect IE\STCAgent.exe"
O4 - HKLM\..\Run: [RtHDVCpl] C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe -s
O4 - HKLM\..\Run: [avast] "C:\Program Files\AVAST Software\Avast\avastUI.exe" /nogui
O4 - HKLM\..\Run: [amd_dc_opt] C:\Program Files\AMD\Dual-Core Optimizer\amd_dc_opt.exe
O4 - HKLM\..\Run: [BigDog305] C:\Windows\VM305_STI.EXE VIMICRO USB PC Camera (ZC0305)
O4 - HKCU\..\Run: [BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] "C:\Program Files\Common Files\Ahead\Lib\NMBgMonitor.exe"
O4 - HKCU\..\Run: [Skype] "C:\Program Files\Skype\Phone\Skype.exe" /minimized /regrun
O4 - HKCU\..\Run: [Steam] "E:\HRY\STEAM\steam.exe" -silent
O4 - HKCU\..\Run: [Pando Media Booster] "C:\Program Files\Pando Networks\Media Booster\PMB.exe"
O4 - HKCU\..\Run: [DAEMON Tools Lite] "C:\Program Files\DAEMON Tools Lite\DTLite.exe" -autorun
O4 - HKCU\..\Run: [UpdateMyDrivers] C:\Program Files\SmartTweak Software\UpdateMyDrivers\UpdateMyDrivers.exe /ot /as /ss
O4 - HKUS\S-1-5-21-2296173991-3406249303-2536867189-1003\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'UpdatusUser')
O4 - HKUS\S-1-5-21-2296173991-3406249303-2536867189-1003\..\Run: [uTorrent] "C:\Program Files\uTorrent\uTorrent.exe" (User 'UpdatusUser')
O4 - HKUS\S-1-5-21-2296173991-3406249303-2536867189-1003\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'UpdatusUser')
O10 - Unknown file in Winsock LSP: c:\program files\common files\microsoft shared\windows live\wlidnsp.dll
O10 - Unknown file in Winsock LSP: c:\program files\common files\microsoft shared\windows live\wlidnsp.dll
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O18 - Protocol: wlpg - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} - C:\Program Files\Windows Live\Photo Gallery\AlbumDownloadProtocolHandler.dll
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: AppleChargerSrv - Unknown owner - C:\Windows\system32\AppleChargerSrv.exe
O23 - Service: avast! Antivirus - AVAST Software - C:\Program Files\AVAST Software\Avast\AvastSvc.exe
O23 - Service: LogMeIn Hamachi Tunneling Engine (Hamachi2Svc) - LogMeIn Inc. - C:\Program Files\LogMeIn Hamachi\hamachi-2.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: Intel(R) Management and Security Application Local Management Service (LMS) - Intel Corporation - C:\Program Files\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
O23 - Service: MBAMScheduler - Malwarebytes Corporation - C:\Program Files\Malwarebytes' Anti-Malware\mbamscheduler.exe
O23 - Service: MBAMService - Malwarebytes Corporation - C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe
O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Mozilla Foundation - C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe
O23 - Service: NBService - Nero AG - C:\Program Files\Nero\Nero 7\Nero BackItUp\NBService.exe
O23 - Service: NMIndexingService - Nero AG - C:\Program Files\Common Files\Ahead\Lib\NMIndexingService.exe
O23 - Service: NVIDIA Display Driver Service (nvsvc) - NVIDIA Corporation - C:\Windows\system32\nvvsvc.exe
O23 - Service: NVIDIA Update Service Daemon (nvUpdatusService) - NVIDIA Corporation - C:\Program Files\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
O23 - Service: PnkBstrA - Unknown owner - C:\Windows\system32\PnkBstrA.exe
O23 - Service: Splashtop Connect Service (SCBackService) - Splashtop Inc. - C:\Program Files\Splashtop\Splashtop Connect\BackService.exe
O23 - Service: Steam Client Service - Valve Corporation - C:\Program Files\Common Files\Steam\SteamService.exe
O23 - Service: NVIDIA Stereoscopic 3D Driver Service (Stereo Service) - NVIDIA Corporation - C:\Program Files\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
O23 - Service: TeamViewer 6 (TeamViewer6) - TeamViewer GmbH - C:\Program Files\TeamViewer\Version6\TeamViewer_Service.exe
O23 - Service: TunngleService - Tunngle.net GmbH - C:\Program Files\Tunngle\TnglCtrl.exe
O23 - Service: Intel(R) Management and Security Application User Notification Service (UNS) - Intel Corporation - C:\Program Files\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
O23 - Service: Splashtop Connect Firefox Software Updater Service (WCUService_STC_FF) - Splashtop Inc. - C:\Program Files\Splashtop\Splashtop Connect Firefox Software Updater\WCUService.exe
O23 - Service: Splashtop Connect IE Software Updater Service (WCUService_STC_IE) - Splashtop Inc. - C:\Program Files\Splashtop\Splashtop Connect IE Software Updater\WCUService.exe

--
End of file - 7577 bytes

[Voldacz]

aswMBR:

aswMBR version 0.9.9.1771 Copyright(c) 2011 AVAST Software
Run date: 2013-04-20 14:47:37
-----------------------------
14:47:37.440 OS Version: Windows 6.1.7600
14:47:37.440 Number of processors: 2 586 0x2A07
14:47:37.443 ComputerName: VOLDACZ UserName: Voldacz
14:47:38.237 Initialize success
14:47:39.570 AVAST engine defs: 13042000
14:47:46.059 Disk 0 (boot) \Device\Harddisk0\DR0 -> \Device\Ide\IdeDeviceP3T0L0-3
14:47:46.062 Disk 0 Vendor: WDC_WD5000AAKX-001CA0 15.01H15 Size: 476940MB BusType: 3
14:47:46.172 Disk 0 MBR read successfully
14:47:46.175 Disk 0 MBR scan
14:47:46.179 Disk 0 Windows 7 default MBR code
14:47:46.182 Disk 0 Partition 1 80 (A) 07 HPFS/NTFS NTFS 199996 MB offset 63
14:47:46.186 Disk 0 Partition - 00 0F Extended LBA 276932 MB offset 409593240
14:47:46.205 Disk 0 Partition 2 00 07 HPFS/NTFS NTFS 120001 MB offset 409593303
14:47:46.210 Disk 0 Partition - 00 05 Extended 156931 MB offset 655355610
14:47:46.230 Disk 0 Partition 3 00 07 HPFS/NTFS NTFS 156931 MB offset 655355673
14:47:46.239 Disk 0 scanning sectors +976752000
14:47:46.287 Disk 0 scanning C:\Windows\system32\drivers
14:47:54.870 Service scanning
14:48:09.365 Modules scanning
14:48:16.140 Disk 0 trace - called modules:
14:48:16.148
14:48:16.429 AVAST engine scan C:\Windows
14:48:18.864 AVAST engine scan C:\Windows\system32
14:49:43.089 AVAST engine scan C:\Windows\system32\drivers
14:49:51.515 AVAST engine scan C:\Users\Voldacz
14:52:12.614 AVAST engine scan C:\ProgramData
14:52:42.965 Scan finished successfully
14:53:05.937 Disk 0 MBR has been saved successfully to "C:\Users\Voldacz\Desktop\MBR.dat"
14:53:05.942 The log file has been saved successfully to "C:\Users\Voldacz\Desktop\aswMBR.txt"

[Žbeky]

ComboFix se odinstaluje takto:
Start-Spustit a zadej ComboFix /Uninstall

vyčisti systém CCleanerem

Stáhni si OTC na plochu, spusť jej a klikni na Clean up!

Fixni:

Kód: Vybrat vše

O4 - HKCU\..\Run: [UpdateMyDrivers] C:\Program Files\SmartTweak Software\UpdateMyDrivers\UpdateMyDrivers.exe /ot /as /ss
O4 - HKUS\S-1-5-21-2296173991-3406249303-2536867189-1003\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'UpdatusUser')

Jak se chová PC?

[Voldacz]

Jak koukám tak se výkon procesoru výrazně snížil ...

[jaro3]

V možnostech složky si povol zobrazování skrytých souborů a složek+ odškrtni zatržítko skrýt chráněné soubory operačního systému

Toto otestuj na Virustotal
c:\windows\rm305.exe

Klikni vpravo od okénka na Vybrat a v Exploreru najdi požadovaný soubor v Tvém PC. Označ ho myší a klikni na Otevřít , poté klikni na Send File. Pokud už byl soubor testován , objeví se okno ve kterém klikni na Reanalyze. Soubor se začne postupně testovat více antivirovými programy. Až skončí test posledního antiviru , objeví se nahoře result a červeně počet nákaz , např. 0/43 , nebo 1/43. Pak zkopíruj myší odkaz na tuto stránku a vlož ji do svého příspěvku.

Nebo na:
http://www.virscan.org/

Fix v HJT:

Kód: Vybrat vše

O4 - HKUS\S-1-5-21-2296173991-3406249303-2536867189-1003\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'UpdatusUser')

Jak je to s tím vytížením?

[Voldacz]

A má to být .exe soubor nebo soubor typu nastavení konfigurace ?

[Voldacz]

https://www.virustotal.com/cs/file/1e54 ... 366534876/

[Voldacz]

Jak koukám tak se výkon procesoru výrazně snížil ...

[Žbeky]

Výkon nebo vytížení se snížilo?