aswMBR version 0.9.9.1771 Copyright(c) 2011 AVAST Software
Run date: 2014-02-22 23:47:29
-----------------------------
23:47:29.622 OS Version: Windows 6.1.7601 Service Pack 1
23:47:29.622 Number of processors: 2 586 0x6B02
23:47:29.622 ComputerName: TOP-PC UserName: top
23:47:30.106 Initialize success
23:47:33.668 AVAST engine defs: 14022201
23:48:18.653 Disk 0 (boot) \Device\Harddisk0\DR0 -> \Device\00000063
23:48:18.668 Disk 0 Vendor: SAMSUNG_ CT10 Size: 381553MB BusType: 3
23:48:18.793 Disk 0 MBR read successfully
23:48:18.809 Disk 0 MBR scan
23:48:18.809 Disk 0 Windows 7 default MBR code
23:48:18.809 Disk 0 Partition 1 80 (A) 07 HPFS/NTFS NTFS 70001 MB offset 63
23:48:18.825 Disk 0 Partition - 00 05 Extended 311110 MB offset 144263637
23:48:18.840 Disk 0 Partition 2 00 07 HPFS/NTFS NTFS 275089 MB offset 144263700
23:48:18.840 Disk 0 Partition - 00 05 Extended 36012 MB offset 707663250
23:48:18.856 Disk 0 scanning sectors +781417665
23:48:18.918 Disk 0 scanning C:\Windows\system32\drivers
23:48:26.840 Service scanning
23:48:45.293 Modules scanning
23:48:54.825 Disk 0 trace - called modules:
23:48:54.856 ntkrnlpa.exe CLASSPNP.SYS disk.sys ACPI.sys halmacpi.dll storport.sys nvstor.sys
23:48:54.872 1 nt!IofCallDriver -> \Device\Harddisk0\DR0[0x863b5030]
23:48:54.887 3 CLASSPNP.SYS[8959959e] -> nt!IofCallDriver -> [0x85bb3450]
23:48:54.903 5 ACPI.sys[8900b3d4] -> nt!IofCallDriver -> \Device\00000063[0x85bb3030]
23:48:55.309 AVAST engine scan C:\Windows
23:48:56.872 AVAST engine scan C:\Windows\system32
23:51:19.950 AVAST engine scan C:\Windows\system32\drivers
23:51:30.106 AVAST engine scan C:\Users\top
23:53:07.528 Disk 0 MBR has been saved successfully to "C:\Users\top\Desktop\MBR.dat"
23:53:07.543 The log file has been saved successfully to "C:\Users\top\Desktop\aswMBR.txt"
prosim o kontrolu logu Vyřešeno
Re: prosim o kontrolu logu
ahoj delam jak pises nevim jestly dobre?
Re: prosim o kontrolu logu
mam jeste jednu otazecku mam externi disk ted ho nemam pripojen kdyz ho potom pripojim tak se stane co? znovu pc zaneradi?JAK HO MAM PROSKENOVAT KDYZ HO PRIPOJIM? predem dik za odpoved formatovat nemuzu mam tam foto rodiny to bych neprezil cau a dik
- jaro3
- člen Security týmu
-
Guru Level 15
- Příspěvky: 43298
- Registrován: červen 07
- Bydliště: Jižní Čechy
- Pohlaví:
- Stav:
Offline
Re: prosim o kontrolu logu
Ten ext. disk připoj nyní.
Vypni rez. ochranu u antiviru a antispywaru,příp. firewall..
Stáhni si ComboFix (by sUBs)
a ulož si ho na plochu.
Ukonči všechna aktivní okna a spusť ho.
- Po spuštění se zobrazí podmínky užití, potvrď je stiskem tlačítka Ano
- Dále postupuj dle pokynů, během aplikování ComboFixu neklikej do zobrazujícího se okna
- Po dokončení skenování by měl program vytvořit log - C:\ComboFix.txt - zkopíruj sem prosím celý jeho obsah
Pokud budou problémy , spusť ho v nouz. režimu.
Upozornění : Může se stát, že po aplikaci Combofixu a restartu počítače, Windows nenaběhnou , nebo nenajede plocha , budou problémy s připojením, pak znovu restartuj počítač, pokud to nepomůže , po restartu mačkej klávesu F8 a pak zvol poslední známou funkční konfiguraci. , či použij bod obnovy.
Vypni rez. ochranu u antiviru a antispywaru,příp. firewall..
Stáhni si ComboFix (by sUBs)
a ulož si ho na plochu.
Ukonči všechna aktivní okna a spusť ho.
- Po spuštění se zobrazí podmínky užití, potvrď je stiskem tlačítka Ano
- Dále postupuj dle pokynů, během aplikování ComboFixu neklikej do zobrazujícího se okna
- Po dokončení skenování by měl program vytvořit log - C:\ComboFix.txt - zkopíruj sem prosím celý jeho obsah
Pokud budou problémy , spusť ho v nouz. režimu.
Upozornění : Může se stát, že po aplikaci Combofixu a restartu počítače, Windows nenaběhnou , nebo nenajede plocha , budou problémy s připojením, pak znovu restartuj počítač, pokud to nepomůže , po restartu mačkej klávesu F8 a pak zvol poslední známou funkční konfiguraci. , či použij bod obnovy.
Při práci s programy HJT, ComboFix,MbAM, SDFix aj. zavřete všechny ostatní aplikace a prohlížeče!
Neposílejte logy do soukromých zpráv.Po dobu mé nepřítomnosti mě zastupuje memphisto , Žbeky a Orcus.
Pokud budete spokojeni , můžete podpořit naše forum:Podpora fóra
Neposílejte logy do soukromých zpráv.Po dobu mé nepřítomnosti mě zastupuje memphisto , Žbeky a Orcus.
Pokud budete spokojeni , můžete podpořit naše forum:Podpora fóra
Re: prosim o kontrolu logu
jeste bychse chtel zeptat jakodinstaluju potom ten combofix? predem dik ComboFix 14-02-23.01 - top 23.02.2014 11:37:13.4.2 - x86
Microsoft Windows 7 Ultimate 6.1.7601.1.1250.420.1029.18.2048.1257 [GMT 1:00]
Spuštěný z: c:\users\top\Desktop\ComboFix.exe
AV: avast! Antivirus *Disabled/Updated* {17AD7D40-BA12-9C46-7131-94903A54AD8B}
FW: avast! Antivirus *Disabled* {2F96FC65-F07D-9D1E-5A6E-3DA5C487EAF0}
SP: avast! Antivirus *Disabled/Updated* {ACCC9CA4-9C28-93C8-4B81-AFE241D3E736}
SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.
.
((((((((((((((((((((((((((((((((((((((( Ostatní výmazy )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
c:\windows\system32\SET16EC.tmp
c:\windows\system32\SET6C09.tmp
c:\windows\system32\SETDAAA.tmp
c:\windows\system32\SETE501.tmp
c:\windows\system32\SETF4A8.tmp
c:\windows\system32\SETF6CC.tmp
c:\windows\system32\SETF8EF.tmp
.
.
((((((((((((((((((((((((( Soubory vytvořené od 2014-01-23 do 2014-02-23 )))))))))))))))))))))))))))))))
.
.
2014-02-23 10:45 . 2014-02-23 10:47 -------- d-----w- c:\users\top\AppData\Local\temp
2014-02-23 10:45 . 2014-02-23 10:45 -------- d-----w- c:\users\Default\AppData\Local\temp
2014-02-23 09:55 . 2014-02-23 09:55 -------- d-----w- c:\users\top\AppData\Local\CrashDumps
2014-02-23 07:46 . 2012-06-11 10:33 19072 ----a-w- c:\windows\system32\drivers\pccsmcfd.sys
2014-02-23 07:46 . 2014-02-23 07:46 -------- d-----w- c:\program files\PC Connectivity Solution
2014-02-22 17:38 . 2014-02-22 17:38 -------- d-----w- c:\users\top\AppData\Local\NVIDIA Corporation
2014-02-22 17:37 . 2014-02-05 09:31 1048152 ----a-w- c:\windows\system32\nvspcap.dll
2014-02-22 17:37 . 2014-02-22 17:39 -------- d-----w- c:\users\top\AppData\Local\NVIDIA
2014-02-22 17:37 . 2014-02-22 17:37 -------- d-----w- c:\program files\AGEIA Technologies
2014-02-22 17:36 . 2014-02-08 16:18 599840 ----a-w- c:\windows\system32\nvStreaming.exe
2014-02-22 17:33 . 2014-02-08 18:27 9690424 ----a-w- c:\windows\system32\nvopencl.dll
2014-02-22 17:33 . 2013-12-27 18:42 34080 ----a-w- c:\windows\system32\drivers\nvvad32v.sys
2014-02-22 17:33 . 2013-12-27 18:42 33056 ----a-w- c:\windows\system32\nvaudcap32v.dll
2014-02-22 17:32 . 2014-02-08 18:27 9728064 ----a-w- c:\windows\system32\nvcuda.dll
2014-02-22 17:32 . 2014-02-08 18:27 895264 ----a-w- c:\windows\system32\nvdispgenco3233489.dll
2014-02-22 17:32 . 2014-02-08 18:27 863520 ----a-w- c:\windows\system32\NvIFR.dll
2014-02-22 17:32 . 2014-02-08 18:27 844576 ----a-w- c:\windows\system32\NvFBC.dll
2014-02-22 17:32 . 2014-02-08 18:27 305600 ----a-w- c:\windows\system32\nvoglshim32.dll
2014-02-22 17:32 . 2014-02-08 18:27 2956576 ----a-w- c:\windows\system32\nvcuvid.dll
2014-02-22 17:32 . 2014-02-08 18:27 2410784 ----a-w- c:\windows\system32\nvcuvenc.dll
2014-02-22 17:32 . 2014-02-08 18:27 23683360 ----a-w- c:\windows\system32\nvoglv32.dll
2014-02-22 17:32 . 2014-02-08 18:27 17560352 ----a-w- c:\windows\system32\nvcompiler.dll
2014-02-22 17:32 . 2014-02-08 18:27 148528 ----a-w- c:\windows\system32\nvinit.dll
2014-02-22 17:32 . 2014-02-08 18:27 1049888 ----a-w- c:\windows\system32\nvdispco3233489.dll
2014-02-22 17:32 . 2014-02-08 18:27 10180896 ----a-w- c:\windows\system32\drivers\nvlddmkm.sys
2014-02-22 17:30 . 2014-02-22 17:30 -------- d-----w- C:\NVIDIA
2014-02-21 23:01 . 2014-02-21 23:01 -------- d-----w- c:\users\top\AppData\Roaming\AVAST Software
2014-02-21 23:00 . 2014-02-21 23:23 64168 ----a-w- c:\windows\system32\drivers\aswstm.sys
2014-02-21 23:00 . 2014-02-21 23:23 775952 ----a-w- c:\windows\system32\drivers\aswSnx.sys
2014-02-21 23:00 . 2014-02-21 23:23 410784 ----a-w- c:\windows\system32\drivers\aswSP.sys
2014-02-21 23:00 . 2014-02-21 23:00 49944 ----a-w- c:\windows\system32\drivers\aswRvrt.sys
2014-02-21 23:00 . 2014-02-21 23:00 180248 ----a-w- c:\windows\system32\drivers\aswVmm.sys
2014-02-21 23:00 . 2014-02-21 23:23 67824 ----a-w- c:\windows\system32\drivers\aswMonFlt.sys
2014-02-21 23:00 . 2014-02-21 23:00 79720 ----a-w- c:\windows\system32\drivers\aswRdr2.sys
2014-02-21 23:00 . 2014-02-21 23:00 26136 ----a-w- c:\windows\system32\drivers\aswKbd.sys
2014-02-21 23:00 . 2014-02-21 23:23 270240 ----a-w- c:\windows\system32\aswBoot.exe
2014-02-21 23:00 . 2014-02-21 23:23 43152 ----a-w- c:\windows\avastSS.scr
2014-02-21 23:00 . 2014-02-21 23:23 265072 ----a-w- c:\windows\system32\drivers\aswndisflt.sys
2014-02-21 22:59 . 2014-02-21 22:59 -------- d-----w- c:\program files\AVAST Software
2014-02-21 21:14 . 2014-02-21 22:59 -------- d-----w- c:\programdata\AVAST Software
2014-02-21 21:12 . 2013-11-26 23:29 5693440 ----a-w- c:\windows\system32\mstscax.dll
2014-02-21 21:11 . 2014-02-17 00:32 7947048 ----a-w- c:\programdata\Microsoft\Windows Defender\Definition Updates\{2E2C903B-E98E-440C-A261-82E89529CE14}\mpengine.dll
2014-02-21 21:00 . 2014-02-21 21:00 -------- d-----w- c:\users\top\AppData\Local\Apple
2014-02-21 17:11 . 2014-02-21 17:11 -------- d-----w- c:\users\top\AppData\Local\Adobe
2014-02-21 17:04 . 2013-10-01 23:45 32256 ----a-w- c:\windows\system32\TsUsbGDCoInstaller.dll
2014-02-21 17:04 . 2013-10-02 00:42 49152 ----a-w- c:\windows\system32\drivers\TsUsbFlt.sys
2014-02-21 17:04 . 2013-10-02 00:32 12800 ----a-w- c:\windows\system32\TsUsbRedirectionGroupPolicyControl.exe
2014-02-21 17:04 . 2013-10-02 00:30 14336 ----a-w- c:\windows\system32\TsUsbRedirectionGroupPolicyExtension.dll
2014-02-21 17:04 . 2013-10-02 00:14 50176 ----a-w- c:\windows\system32\MsRdpWebAccess.dll
2014-02-21 17:04 . 2013-10-02 00:14 17920 ----a-w- c:\windows\system32\wksprtPS.dll
2014-02-21 17:04 . 2013-10-01 23:58 53248 ----a-w- c:\windows\system32\tsgqec.dll
2014-02-21 17:04 . 2013-10-01 23:08 855552 ----a-w- c:\windows\system32\rdvidcrl.dll
2014-02-21 17:04 . 2013-10-01 23:00 76288 ----a-w- c:\windows\system32\TSWbPrxy.exe
2014-02-21 17:04 . 2013-10-01 22:53 350208 ----a-w- c:\windows\system32\wksprt.exe
2014-02-21 17:04 . 2013-10-01 22:34 1068544 ----a-w- c:\windows\system32\mstsc.exe
2014-02-21 17:00 . 2014-02-21 17:00 -------- d-----w- c:\windows\Migration
2014-02-21 16:57 . 2013-09-25 01:57 792576 ----a-w- c:\windows\system32\TSWorkspace.dll
2014-02-21 16:57 . 2013-12-04 02:03 87040 ----a-w- c:\windows\system32\secproc_ssp_isv.dll
2014-02-21 16:57 . 2013-12-04 02:03 87040 ----a-w- c:\windows\system32\secproc_ssp.dll
2014-02-21 16:57 . 2013-12-04 02:03 423936 ----a-w- c:\windows\system32\secproc_isv.dll
2014-02-21 16:57 . 2013-12-04 02:03 428032 ----a-w- c:\windows\system32\secproc.dll
2014-02-21 16:57 . 2013-12-04 02:02 390144 ----a-w- c:\windows\system32\msdrm.dll
2014-02-21 16:57 . 2013-12-04 01:54 510976 ----a-w- c:\windows\system32\RMActivate_ssp.exe
2014-02-21 16:57 . 2013-12-04 01:54 594944 ----a-w- c:\windows\system32\RMActivate_isv.exe
2014-02-21 16:57 . 2013-12-04 01:54 572416 ----a-w- c:\windows\system32\RMActivate.exe
2014-02-21 16:57 . 2013-12-04 01:54 508928 ----a-w- c:\windows\system32\RMActivate_ssp_isv.exe
2014-02-21 15:57 . 2014-02-21 15:57 -------- d-----w- c:\programdata\CDB
2014-02-21 15:57 . 2014-02-21 15:57 -------- d-----w- c:\program files\Reimage
2014-02-21 15:57 . 2014-02-21 15:57 -------- d-----w- C:\rei
2014-02-20 21:14 . 2014-02-20 21:14 -------- d-----w- c:\users\top\AppData\Local\ESET
2014-02-18 16:45 . 2014-02-18 16:45 5801652 ----a-w- c:\windows\system32\drivers\rtvienna.dat
2014-02-18 16:45 . 2014-02-18 16:45 2947160 ----a-w- c:\windows\system32\drivers\RTKVHDA.sys
2014-02-18 16:45 . 2014-02-18 16:45 2329816 ----a-w- c:\windows\system32\RtkAPO.dll
2014-02-18 16:45 . 2014-02-18 16:45 125144 ----a-w- c:\windows\system32\RtkCoInstII.dll
2014-02-18 16:45 . 2014-02-18 16:45 696013 ----a-w- c:\windows\system32\drivers\RTAIODAT.DAT
2014-02-18 16:45 . 2014-02-18 16:45 43342848 ----a-w- c:\windows\system32\RCoRes.dat
2014-02-16 15:08 . 2014-02-19 21:24 -------- d-----w- c:\program files\AviSynth 2.5
2014-02-16 15:08 . 2014-02-16 15:19 -------- d-----w- c:\program files\Gabest
2014-02-16 15:06 . 2014-02-16 15:17 -------- d-----w- c:\program files\AutoGK
2014-02-16 14:54 . 2014-02-16 15:04 -------- d-----w- c:\program files\WM Converter
2014-02-13 19:36 . 2014-02-13 19:36 -------- d-----w- c:\program files\Barbie(TM)
2014-02-12 19:50 . 2014-02-12 19:50 -------- d-----w- c:\program files\CCleaner
2014-02-12 16:46 . 2014-02-06 09:25 4244480 ----a-w- c:\windows\system32\jscript9.dll
2014-02-12 16:38 . 2013-12-21 08:56 454656 ----a-w- c:\windows\system32\vbscript.dll
2014-02-12 16:09 . 2014-02-12 16:09 -------- d-----w- c:\programdata\Innovative Solutions
2014-02-12 16:09 . 2014-02-12 16:09 -------- d-----w- c:\users\top\AppData\Local\Innovative Solutions
2014-02-12 16:09 . 2014-02-12 16:09 -------- d-----w- c:\program files\Common Files\Innovative Solutions
2014-02-12 15:24 . 2014-02-12 15:24 94632 ----a-w- c:\windows\system32\WindowsAccessBridge.dll
2014-02-12 14:37 . 2013-12-06 02:02 2048 ----a-w- c:\windows\system32\msxml3r.dll
2014-02-12 14:37 . 2013-12-06 02:02 1237504 ----a-w- c:\windows\system32\msxml3.dll
2014-02-12 14:37 . 2013-12-24 23:09 1987584 ----a-w- c:\windows\system32\d3d10warp.dll
2014-02-12 14:37 . 2013-11-26 08:16 3419136 ----a-w- c:\windows\system32\d2d1.dll
2014-02-11 22:07 . 2014-02-12 16:03 -------- d-----w- c:\program files\VS Revo Group
2014-02-11 21:42 . 2014-02-11 21:42 -------- d-----w- c:\programdata\Kaspersky Lab Setup Files
2014-02-10 20:35 . 2014-02-10 20:35 -------- d-----w- c:\programdata\Razer
2014-02-10 20:32 . 2013-11-19 15:52 31008 ----a-w- c:\windows\system32\SmartDefragBootTime.exe
2014-02-10 19:20 . 2014-02-10 19:20 893728 ----a-w- c:\windows\system32\nvdispgenco3233221.dll
2014-02-10 19:20 . 2014-02-10 19:20 1049888 ----a-w- c:\windows\system32\nvdispco3233221.dll
2014-02-10 19:20 . 2014-02-10 19:20 10084 ----a-w- c:\windows\system32\drivers\nvphy.bin
2014-02-10 19:20 . 2014-02-10 19:20 758784 ----a-w- c:\windows\system32\cohelper.dll
2014-02-10 19:20 . 2014-02-10 19:20 296936 ----a-w- c:\windows\system32\drivers\nvmf6232.sys
2014-02-10 19:20 . 2014-02-10 19:20 207464 ----a-w- c:\windows\system32\nvconrm.dll
2014-02-10 19:20 . 2014-02-10 19:20 953856 ----a-w- c:\windows\system32\fdco2.dll
2014-02-10 19:17 . 2014-02-10 19:17 926976 ----a-w- c:\windows\system32\MaxxSpeechAPO.dll
2014-02-10 18:52 . 2014-02-10 18:52 240576 ----a-w- c:\windows\system32\drivers\netio.sys
2014-02-10 18:52 . 2014-02-10 18:52 301568 ----a-w- c:\windows\system32\msieftp.dll
2014-02-10 18:52 . 2014-02-10 18:52 164864 ----a-w- c:\program files\Windows Media Player\wmplayer.exe
2014-02-10 18:52 . 2014-02-10 18:52 12625408 ----a-w- c:\windows\system32\wmploc.DLL
2014-02-10 18:52 . 2014-02-10 18:52 417792 ----a-w- c:\windows\system32\WMPhoto.dll
2014-02-10 18:51 . 2014-02-10 18:51 1796096 ----a-w- c:\windows\system32\authui.dll
2014-02-10 18:51 . 2014-02-10 18:51 168960 ----a-w- c:\windows\system32\credui.dll
2014-02-10 18:51 . 2014-02-10 18:51 152576 ----a-w- c:\windows\system32\SmartcardCredentialProvider.dll
2014-02-10 18:51 . 2014-02-10 18:51 81920 ----a-w- c:\windows\system32\davclnt.dll
2014-02-10 18:51 . 2014-02-10 18:51 205824 ----a-w- c:\windows\system32\WebClnt.dll
2014-02-10 18:51 . 2014-02-10 18:51 115712 ----a-w- c:\windows\system32\drivers\mrxdav.sys
2014-02-10 18:51 . 2014-02-10 18:51 434688 ----a-w- c:\windows\system32\scavengeui.dll
2014-02-10 18:50 . 2013-06-27 17:05 24384 ----a-w- c:\windows\system32\RegistryDefragBootTime.exe
2014-02-10 18:20 . 2014-02-18 16:39 -------- d-----w- c:\programdata\ProductData
2014-02-10 18:20 . 2014-02-10 18:20 -------- d-----w- c:\programdata\{3C5CBD7B-3D1D-411E-96C2-513FFCA84D2D}
2014-02-10 18:20 . 2014-02-10 20:35 -------- d-----w- c:\programdata\IObit
2014-02-10 18:20 . 2014-02-21 20:58 -------- d-----w- c:\program files\IObit
2014-02-10 18:20 . 2014-02-10 20:31 -------- d-----w- c:\users\top\AppData\Roaming\IObit
2014-02-10 17:49 . 2014-02-10 17:49 -------- d-----w- c:\program files\Microsoft WSE
2014-02-09 21:37 . 2014-02-09 21:37 640512 ----a-w- c:\windows\system32\advapi32.dll
2014-02-09 21:37 . 2014-02-09 21:37 619520 ----a-w- c:\windows\system32\tdh.dll
.
.
(((((((((((((((((((((((((((((((((((((((( Find3M výpis ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2014-02-21 23:00 . 2014-02-21 23:00 66752 ----a-w- c:\windows\system32\drivers\aswstm.sys.1393023989
2014-02-21 16:13 . 2013-03-23 15:46 71048 ----a-w- c:\windows\system32\FlashPlayerCPLApp.cpl
2014-02-21 16:13 . 2013-03-23 15:46 692616 ----a-w- c:\windows\system32\FlashPlayerApp.exe
2014-02-10 19:20 . 2013-02-26 10:13 600680 ----a-w- c:\windows\system32\NVUNINST.EXE
2014-02-10 19:17 . 2013-09-17 20:23 895264 ----a-w- c:\windows\system32\nvhdagenco3220103.dll
2014-02-09 21:38 . 2014-02-09 21:38 208384 ----a-w- c:\windows\system32\webcheck.dll
2014-02-08 18:27 . 2013-02-10 09:44 53024 ----a-w- c:\windows\system32\OpenCL.dll
2014-02-08 18:27 . 2012-10-10 20:15 832424 ----a-w- c:\windows\system32\nvumdshim.dll
2014-02-08 18:27 . 2012-10-10 20:14 15740232 ----a-w- c:\windows\system32\nvwgf2um.dll
2014-02-08 18:27 . 2012-10-10 20:14 14669032 ----a-w- c:\windows\system32\nvd3dum.dll
2014-02-08 18:27 . 2007-06-28 16:43 2713728 ----a-w- c:\windows\system32\nvapi.dll
2014-02-08 17:11 . 2013-02-10 09:44 3045664 ----a-w- c:\windows\system32\nvsvc.dll
2014-02-08 17:11 . 2007-06-28 16:43 4348704 ----a-w- c:\windows\system32\nvcpl.dll
2014-02-08 17:11 . 2013-02-10 09:44 664864 ----a-w- c:\windows\system32\nvvsvc.exe
2014-02-08 17:11 . 2013-02-10 09:44 62752 ----a-w- c:\windows\system32\nvshext.dll
2014-02-08 17:11 . 2013-02-10 09:44 2555168 ----a-w- c:\windows\system32\nvsvcr.dll
2014-02-08 17:11 . 2007-06-28 16:43 376096 ----a-w- c:\windows\system32\nvmctray.dll
2013-12-18 05:13 . 2013-09-03 15:33 231584 ------w- c:\windows\system32\MpSigStub.exe
.
.
(((((((((((((((((((((((((((((((((( Spouštěcí body v registru )))))))))))))))))))))))))))))))))))))))))))))
.
.
*Poznámka* prázdné záznamy a legitimní výchozí údaje nejsou zobrazeny.
REGEDIT4
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\00avast]
@="{472083B0-C522-11CF-8763-00608CC02F24}"
[HKEY_CLASSES_ROOT\CLSID\{472083B0-C522-11CF-8763-00608CC02F24}]
2014-02-21 23:23 259464 ----a-w- c:\program files\AVAST Software\Avast\ashShell.dll
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Skype"="c:\program files\Skype\Phone\Skype.exe" [2013-01-08 18706176]
"swg"="c:\program files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe" [2014-02-11 39408]
"Seznam Postak"="c:\program files\Seznam.cz\bin\postak.exe" [2012-01-10 491040]
"DAEMON Tools Lite"="c:\program files\DAEMON Tools Lite\DTLite.exe" [2013-01-08 3674320]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"BCSSync"="c:\program files\Microsoft Office\Office14\BCSSync.exe" [2010-03-13 91520]
"RTHDVCPL"="c:\program files\Realtek\Audio\HDA\RtHDVCpl.exe" [2014-02-18 12017368]
"SunJavaUpdateSched"="c:\program files\Common Files\Java\Java Update\jusched.exe" [2013-07-02 254336]
"DAEMON Tools Lite"="c:\program files\DAEMON Tools Lite\DTLite.exe" [2013-01-08 3674320]
"AvastUI.exe"="c:\program files\AVAST Software\Avast\AvastUI.exe" [2014-02-21 3767096]
"NvBackend"="c:\program files\NVIDIA Corporation\Update Core\NvBackend.exe" [2014-02-05 2234144]
"ShadowPlay"="c:\windows\system32\nvspcap.dll" [2014-02-05 1048152]
.
[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"Sidebar"="c:\program files\Windows Sidebar\sidebar.exe" [2010-11-20 1174016]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorAdmin"= 5 (0x5)
"ConsentPromptBehaviorUser"= 3 (0x3)
"EnableUIADesktopToggle"= 0 (0x0)
.
[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run-]
"DAEMON Tools Lite"="c:\program files\DAEMON Tools Lite\DTLite.exe" -autorun
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run-]
"SunJavaUpdateSched"="c:\program files\Common Files\Java\Java Update\jusched.exe"
"BCSSync"="c:\program files\Microsoft Office\Office14\BCSSync.exe" /DelayServices
"Adobe ARM"="c:\program files\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
"QuickTime Task"="c:\program files\QuickTime\QTTask.exe" -atboottime
"QuickTime Plugin Install"=c:\program files\QuickTime\Plugins\DeleteMe1.exe
"Služba Acronis Scheduler2"="c:\program files\Common Files\Acronis\Plán2\schedhlp.exe"
"TrueImageMonitor.exe"=c:\program files\Acronis\TrueImageHome\TrueImageMonitor.exe
.
R2 LiveUpdateSvc;LiveUpdate;c:\program files\IObit\LiveUpdate\LiveUpdate.exe [2013-12-03 2151200]
R3 IEEtwCollectorService;Internet Explorer ETW Collector Service;c:\windows\system32\IEEtwCollector.exe [2014-02-06 108032]
R3 RdpVideoMiniport;Remote Desktop Video Miniport Driver;c:\windows\system32\drivers\rdpvideominiport.sys [2012-08-23 14848]
R3 Synth3dVsc;Synth3dVsc;c:\windows\system32\drivers\synth3dvsc.sys [x]
R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys [2013-10-02 49152]
R3 tsusbhub;tsusbhub;c:\windows\system32\drivers\tsusbhub.sys [x]
R3 VGPU;VGPU;c:\windows\system32\drivers\rdvgkmd.sys [x]
R3 WatAdminSvc;Služba Technologie aktivace Windows;c:\windows\system32\Wat\WatAdminSvc.exe [2013-02-10 1343400]
S0 aswRvrt;avast! Revert; [x]
S0 aswVmm;avast! VM Monitor; [x]
S0 tdrpman258;Acronis Try&Decide and Restore Points filter (build 258);c:\windows\system32\DRIVERS\tdrpm258.sys [2013-05-19 911680]
S1 aswKbd;aswKbd;c:\windows\system32\drivers\aswKbd.sys [2014-02-21 26136]
S1 aswNdisFlt;Avast! Firewall Driver;c:\windows\system32\DRIVERS\aswNdisFlt.sys [2014-02-21 265072]
S1 aswSnx;aswSnx;c:\windows\system32\drivers\aswSnx.sys [2014-02-21 775952]
S1 aswSP;aswSP;c:\windows\system32\drivers\aswSP.sys [2014-02-21 410784]
S1 dtsoftbus01;DAEMON Tools Virtual Bus Driver;c:\windows\system32\DRIVERS\dtsoftbus01.sys [2013-02-10 242240]
S2 afcdpsrv;Acronis Nonstop Backup service;c:\program files\Common Files\Acronis\CDP\afcdpsrv.exe [2013-05-19 2480048]
S2 aswMonFlt;aswMonFlt;c:\windows\system32\drivers\aswMonFlt.sys [2014-02-21 67824]
S2 avast! Firewall;avast! Firewall;c:\program files\AVAST Software\Avast\afwServ.exe [2014-02-21 113704]
S2 NvNetworkService;NVIDIA Network Service;c:\program files\NVIDIA Corporation\NetService\NvNetworkService.exe [2014-02-05 1593632]
S2 NvStreamSvc;NVIDIA Streamer Service;c:\program files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [2014-02-05 15904544]
S2 ReimageRealTimeProtection;Reimage Real Time Protection;c:\program files\Reimage\Reimage Repair\ReiGuard.exe [2014-01-15 4030824]
S2 Stereo Service;NVIDIA Stereoscopic 3D Driver Service;c:\program files\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe [2014-02-08 411936]
S3 afcdp;afcdp;c:\windows\system32\DRIVERS\afcdp.sys [2013-05-19 160288]
S3 aswStm;aswStm;c:\windows\system32\drivers\aswStm.sys [2014-02-21 64168]
S3 nvvad_WaveExtensible;NVIDIA Virtual Audio Device (Wave Extensible) (WDM);c:\windows\system32\drivers\nvvad32v.sys [2013-12-27 34080]
.
.
Obsah adresáře 'Naplánované úlohy'
.
2014-02-23 c:\windows\Tasks\Adobe Flash Player Updater.job
- c:\windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2013-03-23 16:13]
.
2014-02-23 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
- c:\program files\Google\Update\GoogleUpdate.exe [2014-02-11 15:22]
.
2014-02-23 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
- c:\program files\Google\Update\GoogleUpdate.exe [2014-02-11 15:22]
.
.
------- Doplňkový sken -------
.
uStart Page = hxxp://www.seznam.cz/
IE: E&xportovat do aplikace Microsoft Excel - c:\progra~1\MICROS~2\Office14\EXCEL.EXE/3000
IE: Od&eslat do aplikace OneNote - c:\progra~1\MICROS~2\Office14\ONBttnIE.dll/105
TCP: DhcpNameServer = 10.10.10.10 10.10.10.1
.
- - - - NEPLATNÉ POLOŽKY ODSTRANĚNÉ Z REGISTRU - - - -
.
BHO-{10921475-03CE-4E04-90CE-E2E7EF20C814} - (no file)
.
.
.
--------------------- ZAMKNUTÉ KLÍČE V REGISTRU ---------------------
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0000\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\PCW\Security]
@Denied: (Full) (Everyone)
.
------------------------ Jiné spuštené procesy ------------------------
.
c:\windows\system32\nvvsvc.exe
c:\program files\AVAST Software\Avast\AvastSvc.exe
c:\program files\NVIDIA Corporation\Display\nvxdsync.exe
c:\windows\system32\nvvsvc.exe
c:\windows\system32\taskhost.exe
c:\program files\Common Files\Acronis\Plán2\schedul2.exe
c:\program files\Common Files\Adobe\ARM\1.0\armsvc.exe
c:\windows\system32\PnkBstrA.exe
c:\windows\system32\conhost.exe
c:\windows\System32\rundll32.exe
c:\windows\System32\WUDFHost.exe
c:\windows\system32\conhost.exe
c:\program files\NVIDIA Corporation\Display\nvtray.exe
c:\windows\system32\sppsvc.exe
.
**************************************************************************
.
Celkový čas: 2014-02-23 11:49:38 - počítač byl restartován
ComboFix-quarantined-files.txt 2014-02-23 10:49
.
Před spuštěním: Volných bajtů: 12 950 052 864
Po spuštění: Volných bajtů: 12 935 397 376
.
- - End Of File - - 9D42ABA809A2CB75F9F906A14DC923E6
A36C5E4F47E84449FF07ED3517B43A31
Microsoft Windows 7 Ultimate 6.1.7601.1.1250.420.1029.18.2048.1257 [GMT 1:00]
Spuštěný z: c:\users\top\Desktop\ComboFix.exe
AV: avast! Antivirus *Disabled/Updated* {17AD7D40-BA12-9C46-7131-94903A54AD8B}
FW: avast! Antivirus *Disabled* {2F96FC65-F07D-9D1E-5A6E-3DA5C487EAF0}
SP: avast! Antivirus *Disabled/Updated* {ACCC9CA4-9C28-93C8-4B81-AFE241D3E736}
SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.
.
((((((((((((((((((((((((((((((((((((((( Ostatní výmazy )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
c:\windows\system32\SET16EC.tmp
c:\windows\system32\SET6C09.tmp
c:\windows\system32\SETDAAA.tmp
c:\windows\system32\SETE501.tmp
c:\windows\system32\SETF4A8.tmp
c:\windows\system32\SETF6CC.tmp
c:\windows\system32\SETF8EF.tmp
.
.
((((((((((((((((((((((((( Soubory vytvořené od 2014-01-23 do 2014-02-23 )))))))))))))))))))))))))))))))
.
.
2014-02-23 10:45 . 2014-02-23 10:47 -------- d-----w- c:\users\top\AppData\Local\temp
2014-02-23 10:45 . 2014-02-23 10:45 -------- d-----w- c:\users\Default\AppData\Local\temp
2014-02-23 09:55 . 2014-02-23 09:55 -------- d-----w- c:\users\top\AppData\Local\CrashDumps
2014-02-23 07:46 . 2012-06-11 10:33 19072 ----a-w- c:\windows\system32\drivers\pccsmcfd.sys
2014-02-23 07:46 . 2014-02-23 07:46 -------- d-----w- c:\program files\PC Connectivity Solution
2014-02-22 17:38 . 2014-02-22 17:38 -------- d-----w- c:\users\top\AppData\Local\NVIDIA Corporation
2014-02-22 17:37 . 2014-02-05 09:31 1048152 ----a-w- c:\windows\system32\nvspcap.dll
2014-02-22 17:37 . 2014-02-22 17:39 -------- d-----w- c:\users\top\AppData\Local\NVIDIA
2014-02-22 17:37 . 2014-02-22 17:37 -------- d-----w- c:\program files\AGEIA Technologies
2014-02-22 17:36 . 2014-02-08 16:18 599840 ----a-w- c:\windows\system32\nvStreaming.exe
2014-02-22 17:33 . 2014-02-08 18:27 9690424 ----a-w- c:\windows\system32\nvopencl.dll
2014-02-22 17:33 . 2013-12-27 18:42 34080 ----a-w- c:\windows\system32\drivers\nvvad32v.sys
2014-02-22 17:33 . 2013-12-27 18:42 33056 ----a-w- c:\windows\system32\nvaudcap32v.dll
2014-02-22 17:32 . 2014-02-08 18:27 9728064 ----a-w- c:\windows\system32\nvcuda.dll
2014-02-22 17:32 . 2014-02-08 18:27 895264 ----a-w- c:\windows\system32\nvdispgenco3233489.dll
2014-02-22 17:32 . 2014-02-08 18:27 863520 ----a-w- c:\windows\system32\NvIFR.dll
2014-02-22 17:32 . 2014-02-08 18:27 844576 ----a-w- c:\windows\system32\NvFBC.dll
2014-02-22 17:32 . 2014-02-08 18:27 305600 ----a-w- c:\windows\system32\nvoglshim32.dll
2014-02-22 17:32 . 2014-02-08 18:27 2956576 ----a-w- c:\windows\system32\nvcuvid.dll
2014-02-22 17:32 . 2014-02-08 18:27 2410784 ----a-w- c:\windows\system32\nvcuvenc.dll
2014-02-22 17:32 . 2014-02-08 18:27 23683360 ----a-w- c:\windows\system32\nvoglv32.dll
2014-02-22 17:32 . 2014-02-08 18:27 17560352 ----a-w- c:\windows\system32\nvcompiler.dll
2014-02-22 17:32 . 2014-02-08 18:27 148528 ----a-w- c:\windows\system32\nvinit.dll
2014-02-22 17:32 . 2014-02-08 18:27 1049888 ----a-w- c:\windows\system32\nvdispco3233489.dll
2014-02-22 17:32 . 2014-02-08 18:27 10180896 ----a-w- c:\windows\system32\drivers\nvlddmkm.sys
2014-02-22 17:30 . 2014-02-22 17:30 -------- d-----w- C:\NVIDIA
2014-02-21 23:01 . 2014-02-21 23:01 -------- d-----w- c:\users\top\AppData\Roaming\AVAST Software
2014-02-21 23:00 . 2014-02-21 23:23 64168 ----a-w- c:\windows\system32\drivers\aswstm.sys
2014-02-21 23:00 . 2014-02-21 23:23 775952 ----a-w- c:\windows\system32\drivers\aswSnx.sys
2014-02-21 23:00 . 2014-02-21 23:23 410784 ----a-w- c:\windows\system32\drivers\aswSP.sys
2014-02-21 23:00 . 2014-02-21 23:00 49944 ----a-w- c:\windows\system32\drivers\aswRvrt.sys
2014-02-21 23:00 . 2014-02-21 23:00 180248 ----a-w- c:\windows\system32\drivers\aswVmm.sys
2014-02-21 23:00 . 2014-02-21 23:23 67824 ----a-w- c:\windows\system32\drivers\aswMonFlt.sys
2014-02-21 23:00 . 2014-02-21 23:00 79720 ----a-w- c:\windows\system32\drivers\aswRdr2.sys
2014-02-21 23:00 . 2014-02-21 23:00 26136 ----a-w- c:\windows\system32\drivers\aswKbd.sys
2014-02-21 23:00 . 2014-02-21 23:23 270240 ----a-w- c:\windows\system32\aswBoot.exe
2014-02-21 23:00 . 2014-02-21 23:23 43152 ----a-w- c:\windows\avastSS.scr
2014-02-21 23:00 . 2014-02-21 23:23 265072 ----a-w- c:\windows\system32\drivers\aswndisflt.sys
2014-02-21 22:59 . 2014-02-21 22:59 -------- d-----w- c:\program files\AVAST Software
2014-02-21 21:14 . 2014-02-21 22:59 -------- d-----w- c:\programdata\AVAST Software
2014-02-21 21:12 . 2013-11-26 23:29 5693440 ----a-w- c:\windows\system32\mstscax.dll
2014-02-21 21:11 . 2014-02-17 00:32 7947048 ----a-w- c:\programdata\Microsoft\Windows Defender\Definition Updates\{2E2C903B-E98E-440C-A261-82E89529CE14}\mpengine.dll
2014-02-21 21:00 . 2014-02-21 21:00 -------- d-----w- c:\users\top\AppData\Local\Apple
2014-02-21 17:11 . 2014-02-21 17:11 -------- d-----w- c:\users\top\AppData\Local\Adobe
2014-02-21 17:04 . 2013-10-01 23:45 32256 ----a-w- c:\windows\system32\TsUsbGDCoInstaller.dll
2014-02-21 17:04 . 2013-10-02 00:42 49152 ----a-w- c:\windows\system32\drivers\TsUsbFlt.sys
2014-02-21 17:04 . 2013-10-02 00:32 12800 ----a-w- c:\windows\system32\TsUsbRedirectionGroupPolicyControl.exe
2014-02-21 17:04 . 2013-10-02 00:30 14336 ----a-w- c:\windows\system32\TsUsbRedirectionGroupPolicyExtension.dll
2014-02-21 17:04 . 2013-10-02 00:14 50176 ----a-w- c:\windows\system32\MsRdpWebAccess.dll
2014-02-21 17:04 . 2013-10-02 00:14 17920 ----a-w- c:\windows\system32\wksprtPS.dll
2014-02-21 17:04 . 2013-10-01 23:58 53248 ----a-w- c:\windows\system32\tsgqec.dll
2014-02-21 17:04 . 2013-10-01 23:08 855552 ----a-w- c:\windows\system32\rdvidcrl.dll
2014-02-21 17:04 . 2013-10-01 23:00 76288 ----a-w- c:\windows\system32\TSWbPrxy.exe
2014-02-21 17:04 . 2013-10-01 22:53 350208 ----a-w- c:\windows\system32\wksprt.exe
2014-02-21 17:04 . 2013-10-01 22:34 1068544 ----a-w- c:\windows\system32\mstsc.exe
2014-02-21 17:00 . 2014-02-21 17:00 -------- d-----w- c:\windows\Migration
2014-02-21 16:57 . 2013-09-25 01:57 792576 ----a-w- c:\windows\system32\TSWorkspace.dll
2014-02-21 16:57 . 2013-12-04 02:03 87040 ----a-w- c:\windows\system32\secproc_ssp_isv.dll
2014-02-21 16:57 . 2013-12-04 02:03 87040 ----a-w- c:\windows\system32\secproc_ssp.dll
2014-02-21 16:57 . 2013-12-04 02:03 423936 ----a-w- c:\windows\system32\secproc_isv.dll
2014-02-21 16:57 . 2013-12-04 02:03 428032 ----a-w- c:\windows\system32\secproc.dll
2014-02-21 16:57 . 2013-12-04 02:02 390144 ----a-w- c:\windows\system32\msdrm.dll
2014-02-21 16:57 . 2013-12-04 01:54 510976 ----a-w- c:\windows\system32\RMActivate_ssp.exe
2014-02-21 16:57 . 2013-12-04 01:54 594944 ----a-w- c:\windows\system32\RMActivate_isv.exe
2014-02-21 16:57 . 2013-12-04 01:54 572416 ----a-w- c:\windows\system32\RMActivate.exe
2014-02-21 16:57 . 2013-12-04 01:54 508928 ----a-w- c:\windows\system32\RMActivate_ssp_isv.exe
2014-02-21 15:57 . 2014-02-21 15:57 -------- d-----w- c:\programdata\CDB
2014-02-21 15:57 . 2014-02-21 15:57 -------- d-----w- c:\program files\Reimage
2014-02-21 15:57 . 2014-02-21 15:57 -------- d-----w- C:\rei
2014-02-20 21:14 . 2014-02-20 21:14 -------- d-----w- c:\users\top\AppData\Local\ESET
2014-02-18 16:45 . 2014-02-18 16:45 5801652 ----a-w- c:\windows\system32\drivers\rtvienna.dat
2014-02-18 16:45 . 2014-02-18 16:45 2947160 ----a-w- c:\windows\system32\drivers\RTKVHDA.sys
2014-02-18 16:45 . 2014-02-18 16:45 2329816 ----a-w- c:\windows\system32\RtkAPO.dll
2014-02-18 16:45 . 2014-02-18 16:45 125144 ----a-w- c:\windows\system32\RtkCoInstII.dll
2014-02-18 16:45 . 2014-02-18 16:45 696013 ----a-w- c:\windows\system32\drivers\RTAIODAT.DAT
2014-02-18 16:45 . 2014-02-18 16:45 43342848 ----a-w- c:\windows\system32\RCoRes.dat
2014-02-16 15:08 . 2014-02-19 21:24 -------- d-----w- c:\program files\AviSynth 2.5
2014-02-16 15:08 . 2014-02-16 15:19 -------- d-----w- c:\program files\Gabest
2014-02-16 15:06 . 2014-02-16 15:17 -------- d-----w- c:\program files\AutoGK
2014-02-16 14:54 . 2014-02-16 15:04 -------- d-----w- c:\program files\WM Converter
2014-02-13 19:36 . 2014-02-13 19:36 -------- d-----w- c:\program files\Barbie(TM)
2014-02-12 19:50 . 2014-02-12 19:50 -------- d-----w- c:\program files\CCleaner
2014-02-12 16:46 . 2014-02-06 09:25 4244480 ----a-w- c:\windows\system32\jscript9.dll
2014-02-12 16:38 . 2013-12-21 08:56 454656 ----a-w- c:\windows\system32\vbscript.dll
2014-02-12 16:09 . 2014-02-12 16:09 -------- d-----w- c:\programdata\Innovative Solutions
2014-02-12 16:09 . 2014-02-12 16:09 -------- d-----w- c:\users\top\AppData\Local\Innovative Solutions
2014-02-12 16:09 . 2014-02-12 16:09 -------- d-----w- c:\program files\Common Files\Innovative Solutions
2014-02-12 15:24 . 2014-02-12 15:24 94632 ----a-w- c:\windows\system32\WindowsAccessBridge.dll
2014-02-12 14:37 . 2013-12-06 02:02 2048 ----a-w- c:\windows\system32\msxml3r.dll
2014-02-12 14:37 . 2013-12-06 02:02 1237504 ----a-w- c:\windows\system32\msxml3.dll
2014-02-12 14:37 . 2013-12-24 23:09 1987584 ----a-w- c:\windows\system32\d3d10warp.dll
2014-02-12 14:37 . 2013-11-26 08:16 3419136 ----a-w- c:\windows\system32\d2d1.dll
2014-02-11 22:07 . 2014-02-12 16:03 -------- d-----w- c:\program files\VS Revo Group
2014-02-11 21:42 . 2014-02-11 21:42 -------- d-----w- c:\programdata\Kaspersky Lab Setup Files
2014-02-10 20:35 . 2014-02-10 20:35 -------- d-----w- c:\programdata\Razer
2014-02-10 20:32 . 2013-11-19 15:52 31008 ----a-w- c:\windows\system32\SmartDefragBootTime.exe
2014-02-10 19:20 . 2014-02-10 19:20 893728 ----a-w- c:\windows\system32\nvdispgenco3233221.dll
2014-02-10 19:20 . 2014-02-10 19:20 1049888 ----a-w- c:\windows\system32\nvdispco3233221.dll
2014-02-10 19:20 . 2014-02-10 19:20 10084 ----a-w- c:\windows\system32\drivers\nvphy.bin
2014-02-10 19:20 . 2014-02-10 19:20 758784 ----a-w- c:\windows\system32\cohelper.dll
2014-02-10 19:20 . 2014-02-10 19:20 296936 ----a-w- c:\windows\system32\drivers\nvmf6232.sys
2014-02-10 19:20 . 2014-02-10 19:20 207464 ----a-w- c:\windows\system32\nvconrm.dll
2014-02-10 19:20 . 2014-02-10 19:20 953856 ----a-w- c:\windows\system32\fdco2.dll
2014-02-10 19:17 . 2014-02-10 19:17 926976 ----a-w- c:\windows\system32\MaxxSpeechAPO.dll
2014-02-10 18:52 . 2014-02-10 18:52 240576 ----a-w- c:\windows\system32\drivers\netio.sys
2014-02-10 18:52 . 2014-02-10 18:52 301568 ----a-w- c:\windows\system32\msieftp.dll
2014-02-10 18:52 . 2014-02-10 18:52 164864 ----a-w- c:\program files\Windows Media Player\wmplayer.exe
2014-02-10 18:52 . 2014-02-10 18:52 12625408 ----a-w- c:\windows\system32\wmploc.DLL
2014-02-10 18:52 . 2014-02-10 18:52 417792 ----a-w- c:\windows\system32\WMPhoto.dll
2014-02-10 18:51 . 2014-02-10 18:51 1796096 ----a-w- c:\windows\system32\authui.dll
2014-02-10 18:51 . 2014-02-10 18:51 168960 ----a-w- c:\windows\system32\credui.dll
2014-02-10 18:51 . 2014-02-10 18:51 152576 ----a-w- c:\windows\system32\SmartcardCredentialProvider.dll
2014-02-10 18:51 . 2014-02-10 18:51 81920 ----a-w- c:\windows\system32\davclnt.dll
2014-02-10 18:51 . 2014-02-10 18:51 205824 ----a-w- c:\windows\system32\WebClnt.dll
2014-02-10 18:51 . 2014-02-10 18:51 115712 ----a-w- c:\windows\system32\drivers\mrxdav.sys
2014-02-10 18:51 . 2014-02-10 18:51 434688 ----a-w- c:\windows\system32\scavengeui.dll
2014-02-10 18:50 . 2013-06-27 17:05 24384 ----a-w- c:\windows\system32\RegistryDefragBootTime.exe
2014-02-10 18:20 . 2014-02-18 16:39 -------- d-----w- c:\programdata\ProductData
2014-02-10 18:20 . 2014-02-10 18:20 -------- d-----w- c:\programdata\{3C5CBD7B-3D1D-411E-96C2-513FFCA84D2D}
2014-02-10 18:20 . 2014-02-10 20:35 -------- d-----w- c:\programdata\IObit
2014-02-10 18:20 . 2014-02-21 20:58 -------- d-----w- c:\program files\IObit
2014-02-10 18:20 . 2014-02-10 20:31 -------- d-----w- c:\users\top\AppData\Roaming\IObit
2014-02-10 17:49 . 2014-02-10 17:49 -------- d-----w- c:\program files\Microsoft WSE
2014-02-09 21:37 . 2014-02-09 21:37 640512 ----a-w- c:\windows\system32\advapi32.dll
2014-02-09 21:37 . 2014-02-09 21:37 619520 ----a-w- c:\windows\system32\tdh.dll
.
.
(((((((((((((((((((((((((((((((((((((((( Find3M výpis ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2014-02-21 23:00 . 2014-02-21 23:00 66752 ----a-w- c:\windows\system32\drivers\aswstm.sys.1393023989
2014-02-21 16:13 . 2013-03-23 15:46 71048 ----a-w- c:\windows\system32\FlashPlayerCPLApp.cpl
2014-02-21 16:13 . 2013-03-23 15:46 692616 ----a-w- c:\windows\system32\FlashPlayerApp.exe
2014-02-10 19:20 . 2013-02-26 10:13 600680 ----a-w- c:\windows\system32\NVUNINST.EXE
2014-02-10 19:17 . 2013-09-17 20:23 895264 ----a-w- c:\windows\system32\nvhdagenco3220103.dll
2014-02-09 21:38 . 2014-02-09 21:38 208384 ----a-w- c:\windows\system32\webcheck.dll
2014-02-08 18:27 . 2013-02-10 09:44 53024 ----a-w- c:\windows\system32\OpenCL.dll
2014-02-08 18:27 . 2012-10-10 20:15 832424 ----a-w- c:\windows\system32\nvumdshim.dll
2014-02-08 18:27 . 2012-10-10 20:14 15740232 ----a-w- c:\windows\system32\nvwgf2um.dll
2014-02-08 18:27 . 2012-10-10 20:14 14669032 ----a-w- c:\windows\system32\nvd3dum.dll
2014-02-08 18:27 . 2007-06-28 16:43 2713728 ----a-w- c:\windows\system32\nvapi.dll
2014-02-08 17:11 . 2013-02-10 09:44 3045664 ----a-w- c:\windows\system32\nvsvc.dll
2014-02-08 17:11 . 2007-06-28 16:43 4348704 ----a-w- c:\windows\system32\nvcpl.dll
2014-02-08 17:11 . 2013-02-10 09:44 664864 ----a-w- c:\windows\system32\nvvsvc.exe
2014-02-08 17:11 . 2013-02-10 09:44 62752 ----a-w- c:\windows\system32\nvshext.dll
2014-02-08 17:11 . 2013-02-10 09:44 2555168 ----a-w- c:\windows\system32\nvsvcr.dll
2014-02-08 17:11 . 2007-06-28 16:43 376096 ----a-w- c:\windows\system32\nvmctray.dll
2013-12-18 05:13 . 2013-09-03 15:33 231584 ------w- c:\windows\system32\MpSigStub.exe
.
.
(((((((((((((((((((((((((((((((((( Spouštěcí body v registru )))))))))))))))))))))))))))))))))))))))))))))
.
.
*Poznámka* prázdné záznamy a legitimní výchozí údaje nejsou zobrazeny.
REGEDIT4
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\00avast]
@="{472083B0-C522-11CF-8763-00608CC02F24}"
[HKEY_CLASSES_ROOT\CLSID\{472083B0-C522-11CF-8763-00608CC02F24}]
2014-02-21 23:23 259464 ----a-w- c:\program files\AVAST Software\Avast\ashShell.dll
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Skype"="c:\program files\Skype\Phone\Skype.exe" [2013-01-08 18706176]
"swg"="c:\program files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe" [2014-02-11 39408]
"Seznam Postak"="c:\program files\Seznam.cz\bin\postak.exe" [2012-01-10 491040]
"DAEMON Tools Lite"="c:\program files\DAEMON Tools Lite\DTLite.exe" [2013-01-08 3674320]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"BCSSync"="c:\program files\Microsoft Office\Office14\BCSSync.exe" [2010-03-13 91520]
"RTHDVCPL"="c:\program files\Realtek\Audio\HDA\RtHDVCpl.exe" [2014-02-18 12017368]
"SunJavaUpdateSched"="c:\program files\Common Files\Java\Java Update\jusched.exe" [2013-07-02 254336]
"DAEMON Tools Lite"="c:\program files\DAEMON Tools Lite\DTLite.exe" [2013-01-08 3674320]
"AvastUI.exe"="c:\program files\AVAST Software\Avast\AvastUI.exe" [2014-02-21 3767096]
"NvBackend"="c:\program files\NVIDIA Corporation\Update Core\NvBackend.exe" [2014-02-05 2234144]
"ShadowPlay"="c:\windows\system32\nvspcap.dll" [2014-02-05 1048152]
.
[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"Sidebar"="c:\program files\Windows Sidebar\sidebar.exe" [2010-11-20 1174016]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorAdmin"= 5 (0x5)
"ConsentPromptBehaviorUser"= 3 (0x3)
"EnableUIADesktopToggle"= 0 (0x0)
.
[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run-]
"DAEMON Tools Lite"="c:\program files\DAEMON Tools Lite\DTLite.exe" -autorun
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run-]
"SunJavaUpdateSched"="c:\program files\Common Files\Java\Java Update\jusched.exe"
"BCSSync"="c:\program files\Microsoft Office\Office14\BCSSync.exe" /DelayServices
"Adobe ARM"="c:\program files\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
"QuickTime Task"="c:\program files\QuickTime\QTTask.exe" -atboottime
"QuickTime Plugin Install"=c:\program files\QuickTime\Plugins\DeleteMe1.exe
"Služba Acronis Scheduler2"="c:\program files\Common Files\Acronis\Plán2\schedhlp.exe"
"TrueImageMonitor.exe"=c:\program files\Acronis\TrueImageHome\TrueImageMonitor.exe
.
R2 LiveUpdateSvc;LiveUpdate;c:\program files\IObit\LiveUpdate\LiveUpdate.exe [2013-12-03 2151200]
R3 IEEtwCollectorService;Internet Explorer ETW Collector Service;c:\windows\system32\IEEtwCollector.exe [2014-02-06 108032]
R3 RdpVideoMiniport;Remote Desktop Video Miniport Driver;c:\windows\system32\drivers\rdpvideominiport.sys [2012-08-23 14848]
R3 Synth3dVsc;Synth3dVsc;c:\windows\system32\drivers\synth3dvsc.sys [x]
R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys [2013-10-02 49152]
R3 tsusbhub;tsusbhub;c:\windows\system32\drivers\tsusbhub.sys [x]
R3 VGPU;VGPU;c:\windows\system32\drivers\rdvgkmd.sys [x]
R3 WatAdminSvc;Služba Technologie aktivace Windows;c:\windows\system32\Wat\WatAdminSvc.exe [2013-02-10 1343400]
S0 aswRvrt;avast! Revert; [x]
S0 aswVmm;avast! VM Monitor; [x]
S0 tdrpman258;Acronis Try&Decide and Restore Points filter (build 258);c:\windows\system32\DRIVERS\tdrpm258.sys [2013-05-19 911680]
S1 aswKbd;aswKbd;c:\windows\system32\drivers\aswKbd.sys [2014-02-21 26136]
S1 aswNdisFlt;Avast! Firewall Driver;c:\windows\system32\DRIVERS\aswNdisFlt.sys [2014-02-21 265072]
S1 aswSnx;aswSnx;c:\windows\system32\drivers\aswSnx.sys [2014-02-21 775952]
S1 aswSP;aswSP;c:\windows\system32\drivers\aswSP.sys [2014-02-21 410784]
S1 dtsoftbus01;DAEMON Tools Virtual Bus Driver;c:\windows\system32\DRIVERS\dtsoftbus01.sys [2013-02-10 242240]
S2 afcdpsrv;Acronis Nonstop Backup service;c:\program files\Common Files\Acronis\CDP\afcdpsrv.exe [2013-05-19 2480048]
S2 aswMonFlt;aswMonFlt;c:\windows\system32\drivers\aswMonFlt.sys [2014-02-21 67824]
S2 avast! Firewall;avast! Firewall;c:\program files\AVAST Software\Avast\afwServ.exe [2014-02-21 113704]
S2 NvNetworkService;NVIDIA Network Service;c:\program files\NVIDIA Corporation\NetService\NvNetworkService.exe [2014-02-05 1593632]
S2 NvStreamSvc;NVIDIA Streamer Service;c:\program files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [2014-02-05 15904544]
S2 ReimageRealTimeProtection;Reimage Real Time Protection;c:\program files\Reimage\Reimage Repair\ReiGuard.exe [2014-01-15 4030824]
S2 Stereo Service;NVIDIA Stereoscopic 3D Driver Service;c:\program files\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe [2014-02-08 411936]
S3 afcdp;afcdp;c:\windows\system32\DRIVERS\afcdp.sys [2013-05-19 160288]
S3 aswStm;aswStm;c:\windows\system32\drivers\aswStm.sys [2014-02-21 64168]
S3 nvvad_WaveExtensible;NVIDIA Virtual Audio Device (Wave Extensible) (WDM);c:\windows\system32\drivers\nvvad32v.sys [2013-12-27 34080]
.
.
Obsah adresáře 'Naplánované úlohy'
.
2014-02-23 c:\windows\Tasks\Adobe Flash Player Updater.job
- c:\windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2013-03-23 16:13]
.
2014-02-23 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
- c:\program files\Google\Update\GoogleUpdate.exe [2014-02-11 15:22]
.
2014-02-23 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
- c:\program files\Google\Update\GoogleUpdate.exe [2014-02-11 15:22]
.
.
------- Doplňkový sken -------
.
uStart Page = hxxp://www.seznam.cz/
IE: E&xportovat do aplikace Microsoft Excel - c:\progra~1\MICROS~2\Office14\EXCEL.EXE/3000
IE: Od&eslat do aplikace OneNote - c:\progra~1\MICROS~2\Office14\ONBttnIE.dll/105
TCP: DhcpNameServer = 10.10.10.10 10.10.10.1
.
- - - - NEPLATNÉ POLOŽKY ODSTRANĚNÉ Z REGISTRU - - - -
.
BHO-{10921475-03CE-4E04-90CE-E2E7EF20C814} - (no file)
.
.
.
--------------------- ZAMKNUTÉ KLÍČE V REGISTRU ---------------------
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0000\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\PCW\Security]
@Denied: (Full) (Everyone)
.
------------------------ Jiné spuštené procesy ------------------------
.
c:\windows\system32\nvvsvc.exe
c:\program files\AVAST Software\Avast\AvastSvc.exe
c:\program files\NVIDIA Corporation\Display\nvxdsync.exe
c:\windows\system32\nvvsvc.exe
c:\windows\system32\taskhost.exe
c:\program files\Common Files\Acronis\Plán2\schedul2.exe
c:\program files\Common Files\Adobe\ARM\1.0\armsvc.exe
c:\windows\system32\PnkBstrA.exe
c:\windows\system32\conhost.exe
c:\windows\System32\rundll32.exe
c:\windows\System32\WUDFHost.exe
c:\windows\system32\conhost.exe
c:\program files\NVIDIA Corporation\Display\nvtray.exe
c:\windows\system32\sppsvc.exe
.
**************************************************************************
.
Celkový čas: 2014-02-23 11:49:38 - počítač byl restartován
ComboFix-quarantined-files.txt 2014-02-23 10:49
.
Před spuštěním: Volných bajtů: 12 950 052 864
Po spuštění: Volných bajtů: 12 935 397 376
.
- - End Of File - - 9D42ABA809A2CB75F9F906A14DC923E6
A36C5E4F47E84449FF07ED3517B43A31
- jaro3
- člen Security týmu
-
Guru Level 15
- Příspěvky: 43298
- Registrován: červen 07
- Bydliště: Jižní Čechy
- Pohlaví:
- Stav:
Offline
Re: prosim o kontrolu logu
Vypni rez. ochranu u antiviru a antispywaru,příp. firewall..
Otevři si Poznámkový blok (Start -> Spustit... a napiš do okna Notepad a dej Ok.
Zkopíruj do něj následující celý text označený zeleně:
Zvol možnost Soubor -> Uložit jako... a nastav tyto parametry:
Název souboru: zde napiš: CFScript.txt
Uložit jako typ: tak tam vyber Všechny soubory
Ulož soubor na plochu.
Ukonči všechna aktivní okna.
Uchop myší vytvořený skript CFScript.txt, přemísti ho nad stažený program ComboFix.exe a když se oba soubory překryjí, skript upusť.
- Automaticky se spustí ComboFix
- Vlož sem log, který vyběhne v závěru čistícího procesu + nový log z HJT
Upozornění : Může se stát, že po aplikaci Combofixu a restartu počítače, Windows nenaběhnou , nebo nenajede plocha , budou problémy s připojením, pak znovu restartuj počítač, pokud to nepomůže , po restartu mačkej klávesu F8 a pak zvol poslední známou funkční konfiguraci. , či použij bod obnovy.
Stáhni si aswMBR
na svojí plochu. Uzavři všechna okna , programy a prohlížeče. Poklepej na aswMBR.exe. Pokud se objeví hláška o možnosti stáhnutí databáze Avastu , klikni na NE. Poté klikni na „Scan“ . Po skenu klikni na „Save Log“ a ulož si log na plochu .Zkopíruj sem celý obsah toho logu. Pak klikni na „Exit“ k zavření programu.
C:\rei znáš tu složku?
Otevři si Poznámkový blok (Start -> Spustit... a napiš do okna Notepad a dej Ok.
Zkopíruj do něj následující celý text označený zeleně:
Kód: Vybrat vše
ClearJavaCache::
KillAll::
File::
c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
Folder::
c:\users\top\AppData\Local\ESET
c:\program files\Google\Update
RegLock::
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0000\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\PCW\Security]
@Denied: (Full) (Everyone)
Zvol možnost Soubor -> Uložit jako... a nastav tyto parametry:
Název souboru: zde napiš: CFScript.txt
Uložit jako typ: tak tam vyber Všechny soubory
Ulož soubor na plochu.
Ukonči všechna aktivní okna.
Uchop myší vytvořený skript CFScript.txt, přemísti ho nad stažený program ComboFix.exe a když se oba soubory překryjí, skript upusť.
- Automaticky se spustí ComboFix
- Vlož sem log, který vyběhne v závěru čistícího procesu + nový log z HJT
Upozornění : Může se stát, že po aplikaci Combofixu a restartu počítače, Windows nenaběhnou , nebo nenajede plocha , budou problémy s připojením, pak znovu restartuj počítač, pokud to nepomůže , po restartu mačkej klávesu F8 a pak zvol poslední známou funkční konfiguraci. , či použij bod obnovy.
Stáhni si aswMBR
na svojí plochu. Uzavři všechna okna , programy a prohlížeče. Poklepej na aswMBR.exe. Pokud se objeví hláška o možnosti stáhnutí databáze Avastu , klikni na NE. Poté klikni na „Scan“ . Po skenu klikni na „Save Log“ a ulož si log na plochu .Zkopíruj sem celý obsah toho logu. Pak klikni na „Exit“ k zavření programu.
C:\rei znáš tu složku?
Při práci s programy HJT, ComboFix,MbAM, SDFix aj. zavřete všechny ostatní aplikace a prohlížeče!
Neposílejte logy do soukromých zpráv.Po dobu mé nepřítomnosti mě zastupuje memphisto , Žbeky a Orcus.
Pokud budete spokojeni , můžete podpořit naše forum:Podpora fóra
Neposílejte logy do soukromých zpráv.Po dobu mé nepřítomnosti mě zastupuje memphisto , Žbeky a Orcus.
Pokud budete spokojeni , můžete podpořit naše forum:Podpora fóra
Re: prosim o kontrolu logu
ComboFix 14-02-24.02 - top 24.02.2014 19:09:50.5.2 - x86
Microsoft Windows 7 Ultimate 6.1.7601.1.1250.420.1029.18.2048.1315 [GMT 1:00]
Spuštěný z: c:\users\top\Desktop\ComboFix.exe
Použité ovládací přepínače :: c:\users\top\Desktop\CFScript.txt
AV: avast! Antivirus *Disabled/Updated* {17AD7D40-BA12-9C46-7131-94903A54AD8B}
FW: avast! Antivirus *Disabled* {2F96FC65-F07D-9D1E-5A6E-3DA5C487EAF0}
SP: avast! Antivirus *Disabled/Updated* {ACCC9CA4-9C28-93C8-4B81-AFE241D3E736}
SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.
FILE ::
"c:\windows\Tasks\GoogleUpdateTaskMachineCore.job"
"c:\windows\Tasks\GoogleUpdateTaskMachineUA.job"
.
.
((((((((((((((((((((((((((((((((((((((( Ostatní výmazy )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
c:\program files\Google\Update
c:\program files\Google\Update\1.3.22.5\GoogleCrashHandler.exe
c:\program files\Google\Update\1.3.22.5\GoogleCrashHandler64.exe
c:\program files\Google\Update\1.3.22.5\GoogleUpdate.exe
c:\program files\Google\Update\1.3.22.5\GoogleUpdateBroker.exe
c:\program files\Google\Update\1.3.22.5\GoogleUpdateHelper.msi
c:\program files\Google\Update\1.3.22.5\GoogleUpdateOnDemand.exe
c:\program files\Google\Update\1.3.22.5\GoogleUpdateSetup.exe
c:\program files\Google\Update\1.3.22.5\goopdate.dll
c:\program files\Google\Update\1.3.22.5\goopdateres_am.dll
c:\program files\Google\Update\1.3.22.5\goopdateres_ar.dll
c:\program files\Google\Update\1.3.22.5\goopdateres_bg.dll
c:\program files\Google\Update\1.3.22.5\goopdateres_bn.dll
c:\program files\Google\Update\1.3.22.5\goopdateres_ca.dll
c:\program files\Google\Update\1.3.22.5\goopdateres_cs.dll
c:\program files\Google\Update\1.3.22.5\goopdateres_da.dll
c:\program files\Google\Update\1.3.22.5\goopdateres_de.dll
c:\program files\Google\Update\1.3.22.5\goopdateres_el.dll
c:\program files\Google\Update\1.3.22.5\goopdateres_en-GB.dll
c:\program files\Google\Update\1.3.22.5\goopdateres_en.dll
c:\program files\Google\Update\1.3.22.5\goopdateres_es-419.dll
c:\program files\Google\Update\1.3.22.5\goopdateres_es.dll
c:\program files\Google\Update\1.3.22.5\goopdateres_et.dll
c:\program files\Google\Update\1.3.22.5\goopdateres_fa.dll
c:\program files\Google\Update\1.3.22.5\goopdateres_fi.dll
c:\program files\Google\Update\1.3.22.5\goopdateres_fil.dll
c:\program files\Google\Update\1.3.22.5\goopdateres_fr.dll
c:\program files\Google\Update\1.3.22.5\goopdateres_gu.dll
c:\program files\Google\Update\1.3.22.5\goopdateres_hi.dll
c:\program files\Google\Update\1.3.22.5\goopdateres_hr.dll
c:\program files\Google\Update\1.3.22.5\goopdateres_hu.dll
c:\program files\Google\Update\1.3.22.5\goopdateres_id.dll
c:\program files\Google\Update\1.3.22.5\goopdateres_is.dll
c:\program files\Google\Update\1.3.22.5\goopdateres_it.dll
c:\program files\Google\Update\1.3.22.5\goopdateres_iw.dll
c:\program files\Google\Update\1.3.22.5\goopdateres_ja.dll
c:\program files\Google\Update\1.3.22.5\goopdateres_kn.dll
c:\program files\Google\Update\1.3.22.5\goopdateres_ko.dll
c:\program files\Google\Update\1.3.22.5\goopdateres_lt.dll
c:\program files\Google\Update\1.3.22.5\goopdateres_lv.dll
c:\program files\Google\Update\1.3.22.5\goopdateres_ml.dll
c:\program files\Google\Update\1.3.22.5\goopdateres_mr.dll
c:\program files\Google\Update\1.3.22.5\goopdateres_ms.dll
c:\program files\Google\Update\1.3.22.5\goopdateres_nl.dll
c:\program files\Google\Update\1.3.22.5\goopdateres_no.dll
c:\program files\Google\Update\1.3.22.5\goopdateres_pl.dll
c:\program files\Google\Update\1.3.22.5\goopdateres_pt-BR.dll
c:\program files\Google\Update\1.3.22.5\goopdateres_pt-PT.dll
c:\program files\Google\Update\1.3.22.5\goopdateres_ro.dll
c:\program files\Google\Update\1.3.22.5\goopdateres_ru.dll
c:\program files\Google\Update\1.3.22.5\goopdateres_sk.dll
c:\program files\Google\Update\1.3.22.5\goopdateres_sl.dll
c:\program files\Google\Update\1.3.22.5\goopdateres_sr.dll
c:\program files\Google\Update\1.3.22.5\goopdateres_sv.dll
c:\program files\Google\Update\1.3.22.5\goopdateres_sw.dll
c:\program files\Google\Update\1.3.22.5\goopdateres_ta.dll
c:\program files\Google\Update\1.3.22.5\goopdateres_te.dll
c:\program files\Google\Update\1.3.22.5\goopdateres_th.dll
c:\program files\Google\Update\1.3.22.5\goopdateres_tr.dll
c:\program files\Google\Update\1.3.22.5\goopdateres_uk.dll
c:\program files\Google\Update\1.3.22.5\goopdateres_ur.dll
c:\program files\Google\Update\1.3.22.5\goopdateres_vi.dll
c:\program files\Google\Update\1.3.22.5\goopdateres_zh-CN.dll
c:\program files\Google\Update\1.3.22.5\goopdateres_zh-TW.dll
c:\program files\Google\Update\1.3.22.5\npGoogleUpdate3.dll
c:\program files\Google\Update\1.3.22.5\psmachine.dll
c:\program files\Google\Update\1.3.22.5\psuser.dll
c:\program files\Google\Update\Download\{430FD4D0-B729-4F61-AA34-91526481799D}\1.3.22.5\GoogleUpdateSetup.exe
c:\program files\Google\Update\Download\{8A69D345-D564-463C-AFF1-A69D9E530F96}\33.0.1750.117\33.0.1750.117_chrome_installer.exe
c:\program files\Google\Update\Download\{F69EABDD-A4BB-4555-BE7E-1EA5F59BBA24}\0.0.0.0\googletoolbarinstaller_en_signed.exe
c:\program files\Google\Update\GoogleUpdate.exe
c:\users\top\AppData\Local\ESET
c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
.
Nakažená kopie c:\windows\system32\userinit.exe byla nalezena a vyléčena.
Obnovena kopie z - c:\windows\erdnt\cache\userinit.exe
.
.
((((((((((((((((((((((((((((((((((((((( Ovladače/Služby )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
-------\Service_gupdate
-------\Service_gupdatem
-------\Service_gupdate
-------\Service_gupdatem
.
.
((((((((((((((((((((((((( Soubory vytvořené od 2014-01-24 do 2014-02-24 )))))))))))))))))))))))))))))))
.
.
2014-02-24 18:18 . 2014-02-24 18:20 -------- d-----w- c:\users\top\AppData\Local\temp
2014-02-24 18:18 . 2014-02-24 18:18 -------- d-----w- c:\users\Public\AppData\Local\temp
2014-02-24 18:18 . 2014-02-24 18:18 -------- d-----w- c:\users\Default\AppData\Local\temp
2014-02-23 09:55 . 2014-02-23 09:55 -------- d-----w- c:\users\top\AppData\Local\CrashDumps
2014-02-23 07:46 . 2012-06-11 10:33 19072 ----a-w- c:\windows\system32\drivers\pccsmcfd.sys
2014-02-23 07:46 . 2014-02-23 07:46 -------- d-----w- c:\program files\PC Connectivity Solution
2014-02-22 17:38 . 2014-02-22 17:38 -------- d-----w- c:\users\top\AppData\Local\NVIDIA Corporation
2014-02-22 17:37 . 2014-02-05 09:31 1048152 ----a-w- c:\windows\system32\nvspcap.dll
2014-02-22 17:37 . 2014-02-22 17:39 -------- d-----w- c:\users\top\AppData\Local\NVIDIA
2014-02-22 17:37 . 2014-02-22 17:37 -------- d-----w- c:\program files\AGEIA Technologies
2014-02-22 17:36 . 2014-02-08 16:18 599840 ----a-w- c:\windows\system32\nvStreaming.exe
2014-02-22 17:33 . 2014-02-08 18:27 9690424 ----a-w- c:\windows\system32\nvopencl.dll
2014-02-22 17:33 . 2013-12-27 18:42 34080 ----a-w- c:\windows\system32\drivers\nvvad32v.sys
2014-02-22 17:33 . 2013-12-27 18:42 33056 ----a-w- c:\windows\system32\nvaudcap32v.dll
2014-02-22 17:32 . 2014-02-08 18:27 9728064 ----a-w- c:\windows\system32\nvcuda.dll
2014-02-22 17:32 . 2014-02-08 18:27 895264 ----a-w- c:\windows\system32\nvdispgenco3233489.dll
2014-02-22 17:32 . 2014-02-08 18:27 863520 ----a-w- c:\windows\system32\NvIFR.dll
2014-02-22 17:32 . 2014-02-08 18:27 844576 ----a-w- c:\windows\system32\NvFBC.dll
2014-02-22 17:32 . 2014-02-08 18:27 305600 ----a-w- c:\windows\system32\nvoglshim32.dll
2014-02-22 17:32 . 2014-02-08 18:27 2956576 ----a-w- c:\windows\system32\nvcuvid.dll
2014-02-22 17:32 . 2014-02-08 18:27 2410784 ----a-w- c:\windows\system32\nvcuvenc.dll
2014-02-22 17:32 . 2014-02-08 18:27 23683360 ----a-w- c:\windows\system32\nvoglv32.dll
2014-02-22 17:32 . 2014-02-08 18:27 17560352 ----a-w- c:\windows\system32\nvcompiler.dll
2014-02-22 17:32 . 2014-02-08 18:27 148528 ----a-w- c:\windows\system32\nvinit.dll
2014-02-22 17:32 . 2014-02-08 18:27 1049888 ----a-w- c:\windows\system32\nvdispco3233489.dll
2014-02-22 17:32 . 2014-02-08 18:27 10180896 ----a-w- c:\windows\system32\drivers\nvlddmkm.sys
2014-02-22 17:30 . 2014-02-22 17:30 -------- d-----w- C:\NVIDIA
2014-02-21 23:01 . 2014-02-21 23:01 -------- d-----w- c:\users\top\AppData\Roaming\AVAST Software
2014-02-21 23:00 . 2014-02-21 23:23 64168 ----a-w- c:\windows\system32\drivers\aswstm.sys
2014-02-21 23:00 . 2014-02-21 23:23 775952 ----a-w- c:\windows\system32\drivers\aswSnx.sys
2014-02-21 23:00 . 2014-02-21 23:23 410784 ----a-w- c:\windows\system32\drivers\aswSP.sys
2014-02-21 23:00 . 2014-02-21 23:00 49944 ----a-w- c:\windows\system32\drivers\aswRvrt.sys
2014-02-21 23:00 . 2014-02-21 23:00 180248 ----a-w- c:\windows\system32\drivers\aswVmm.sys
2014-02-21 23:00 . 2014-02-21 23:23 67824 ----a-w- c:\windows\system32\drivers\aswMonFlt.sys
2014-02-21 23:00 . 2014-02-21 23:00 79720 ----a-w- c:\windows\system32\drivers\aswRdr2.sys
2014-02-21 23:00 . 2014-02-21 23:00 26136 ----a-w- c:\windows\system32\drivers\aswKbd.sys
2014-02-21 23:00 . 2014-02-21 23:23 270240 ----a-w- c:\windows\system32\aswBoot.exe
2014-02-21 23:00 . 2014-02-21 23:23 43152 ----a-w- c:\windows\avastSS.scr
2014-02-21 23:00 . 2014-02-21 23:23 265072 ----a-w- c:\windows\system32\drivers\aswndisflt.sys
2014-02-21 22:59 . 2014-02-21 22:59 -------- d-----w- c:\program files\AVAST Software
2014-02-21 21:14 . 2014-02-21 22:59 -------- d-----w- c:\programdata\AVAST Software
2014-02-21 21:12 . 2013-11-26 23:29 5693440 ----a-w- c:\windows\system32\mstscax.dll
2014-02-21 21:11 . 2014-02-17 00:32 7947048 ----a-w- c:\programdata\Microsoft\Windows Defender\Definition Updates\{2E2C903B-E98E-440C-A261-82E89529CE14}\mpengine.dll
2014-02-21 21:00 . 2014-02-21 21:00 -------- d-----w- c:\users\top\AppData\Local\Apple
2014-02-21 17:11 . 2014-02-21 17:11 -------- d-----w- c:\users\top\AppData\Local\Adobe
2014-02-21 17:04 . 2013-10-01 23:45 32256 ----a-w- c:\windows\system32\TsUsbGDCoInstaller.dll
2014-02-21 17:04 . 2013-10-02 00:42 49152 ----a-w- c:\windows\system32\drivers\TsUsbFlt.sys
2014-02-21 17:04 . 2013-10-02 00:32 12800 ----a-w- c:\windows\system32\TsUsbRedirectionGroupPolicyControl.exe
2014-02-21 17:04 . 2013-10-02 00:30 14336 ----a-w- c:\windows\system32\TsUsbRedirectionGroupPolicyExtension.dll
2014-02-21 17:04 . 2013-10-02 00:14 50176 ----a-w- c:\windows\system32\MsRdpWebAccess.dll
2014-02-21 17:04 . 2013-10-02 00:14 17920 ----a-w- c:\windows\system32\wksprtPS.dll
2014-02-21 17:04 . 2013-10-01 23:58 53248 ----a-w- c:\windows\system32\tsgqec.dll
2014-02-21 17:04 . 2013-10-01 23:08 855552 ----a-w- c:\windows\system32\rdvidcrl.dll
2014-02-21 17:04 . 2013-10-01 23:00 76288 ----a-w- c:\windows\system32\TSWbPrxy.exe
2014-02-21 17:04 . 2013-10-01 22:53 350208 ----a-w- c:\windows\system32\wksprt.exe
2014-02-21 17:04 . 2013-10-01 22:34 1068544 ----a-w- c:\windows\system32\mstsc.exe
2014-02-21 17:00 . 2014-02-21 17:00 -------- d-----w- c:\windows\Migration
2014-02-21 16:57 . 2013-09-25 01:57 792576 ----a-w- c:\windows\system32\TSWorkspace.dll
2014-02-21 16:57 . 2013-12-04 02:03 87040 ----a-w- c:\windows\system32\secproc_ssp_isv.dll
2014-02-21 16:57 . 2013-12-04 02:03 87040 ----a-w- c:\windows\system32\secproc_ssp.dll
2014-02-21 16:57 . 2013-12-04 02:03 423936 ----a-w- c:\windows\system32\secproc_isv.dll
2014-02-21 16:57 . 2013-12-04 02:03 428032 ----a-w- c:\windows\system32\secproc.dll
2014-02-21 16:57 . 2013-12-04 02:02 390144 ----a-w- c:\windows\system32\msdrm.dll
2014-02-21 16:57 . 2013-12-04 01:54 510976 ----a-w- c:\windows\system32\RMActivate_ssp.exe
2014-02-21 16:57 . 2013-12-04 01:54 594944 ----a-w- c:\windows\system32\RMActivate_isv.exe
2014-02-21 16:57 . 2013-12-04 01:54 572416 ----a-w- c:\windows\system32\RMActivate.exe
2014-02-21 16:57 . 2013-12-04 01:54 508928 ----a-w- c:\windows\system32\RMActivate_ssp_isv.exe
2014-02-21 15:57 . 2014-02-21 15:57 -------- d-----w- c:\programdata\CDB
2014-02-21 15:57 . 2014-02-21 15:57 -------- d-----w- c:\program files\Reimage
2014-02-21 15:57 . 2014-02-21 15:57 -------- d-----w- C:\rei
2014-02-18 16:45 . 2014-02-18 16:45 5801652 ----a-w- c:\windows\system32\drivers\rtvienna.dat
2014-02-18 16:45 . 2014-02-18 16:45 2947160 ----a-w- c:\windows\system32\drivers\RTKVHDA.sys
2014-02-18 16:45 . 2014-02-18 16:45 2329816 ----a-w- c:\windows\system32\RtkAPO.dll
2014-02-18 16:45 . 2014-02-18 16:45 125144 ----a-w- c:\windows\system32\RtkCoInstII.dll
2014-02-18 16:45 . 2014-02-18 16:45 696013 ----a-w- c:\windows\system32\drivers\RTAIODAT.DAT
2014-02-18 16:45 . 2014-02-18 16:45 43342848 ----a-w- c:\windows\system32\RCoRes.dat
2014-02-16 15:08 . 2014-02-19 21:24 -------- d-----w- c:\program files\AviSynth 2.5
2014-02-16 15:08 . 2014-02-16 15:19 -------- d-----w- c:\program files\Gabest
2014-02-16 15:06 . 2014-02-16 15:17 -------- d-----w- c:\program files\AutoGK
2014-02-16 14:54 . 2014-02-16 15:04 -------- d-----w- c:\program files\WM Converter
2014-02-13 19:36 . 2014-02-13 19:36 -------- d-----w- c:\program files\Barbie(TM)
2014-02-12 19:50 . 2014-02-12 19:50 -------- d-----w- c:\program files\CCleaner
2014-02-12 16:46 . 2014-02-06 09:25 4244480 ----a-w- c:\windows\system32\jscript9.dll
2014-02-12 16:38 . 2013-12-21 08:56 454656 ----a-w- c:\windows\system32\vbscript.dll
2014-02-12 16:09 . 2014-02-12 16:09 -------- d-----w- c:\programdata\Innovative Solutions
2014-02-12 16:09 . 2014-02-12 16:09 -------- d-----w- c:\users\top\AppData\Local\Innovative Solutions
2014-02-12 16:09 . 2014-02-12 16:09 -------- d-----w- c:\program files\Common Files\Innovative Solutions
2014-02-12 15:24 . 2014-02-12 15:24 94632 ----a-w- c:\windows\system32\WindowsAccessBridge.dll
2014-02-12 14:37 . 2013-12-06 02:02 2048 ----a-w- c:\windows\system32\msxml3r.dll
2014-02-12 14:37 . 2013-12-06 02:02 1237504 ----a-w- c:\windows\system32\msxml3.dll
2014-02-12 14:37 . 2013-12-24 23:09 1987584 ----a-w- c:\windows\system32\d3d10warp.dll
2014-02-12 14:37 . 2013-11-26 08:16 3419136 ----a-w- c:\windows\system32\d2d1.dll
2014-02-11 22:07 . 2014-02-12 16:03 -------- d-----w- c:\program files\VS Revo Group
2014-02-11 21:42 . 2014-02-11 21:42 -------- d-----w- c:\programdata\Kaspersky Lab Setup Files
2014-02-10 20:35 . 2014-02-10 20:35 -------- d-----w- c:\programdata\Razer
2014-02-10 20:32 . 2013-11-19 15:52 31008 ----a-w- c:\windows\system32\SmartDefragBootTime.exe
2014-02-10 19:20 . 2014-02-10 19:20 893728 ----a-w- c:\windows\system32\nvdispgenco3233221.dll
2014-02-10 19:20 . 2014-02-10 19:20 1049888 ----a-w- c:\windows\system32\nvdispco3233221.dll
2014-02-10 19:20 . 2014-02-10 19:20 10084 ----a-w- c:\windows\system32\drivers\nvphy.bin
2014-02-10 19:20 . 2014-02-10 19:20 758784 ----a-w- c:\windows\system32\cohelper.dll
2014-02-10 19:20 . 2014-02-10 19:20 296936 ----a-w- c:\windows\system32\drivers\nvmf6232.sys
2014-02-10 19:20 . 2014-02-10 19:20 207464 ----a-w- c:\windows\system32\nvconrm.dll
2014-02-10 19:20 . 2014-02-10 19:20 953856 ----a-w- c:\windows\system32\fdco2.dll
2014-02-10 19:17 . 2014-02-10 19:17 926976 ----a-w- c:\windows\system32\MaxxSpeechAPO.dll
2014-02-10 18:52 . 2014-02-10 18:52 240576 ----a-w- c:\windows\system32\drivers\netio.sys
2014-02-10 18:52 . 2014-02-10 18:52 301568 ----a-w- c:\windows\system32\msieftp.dll
2014-02-10 18:52 . 2014-02-10 18:52 164864 ----a-w- c:\program files\Windows Media Player\wmplayer.exe
2014-02-10 18:52 . 2014-02-10 18:52 12625408 ----a-w- c:\windows\system32\wmploc.DLL
2014-02-10 18:52 . 2014-02-10 18:52 417792 ----a-w- c:\windows\system32\WMPhoto.dll
2014-02-10 18:51 . 2014-02-10 18:51 1796096 ----a-w- c:\windows\system32\authui.dll
2014-02-10 18:51 . 2014-02-10 18:51 168960 ----a-w- c:\windows\system32\credui.dll
2014-02-10 18:51 . 2014-02-10 18:51 152576 ----a-w- c:\windows\system32\SmartcardCredentialProvider.dll
2014-02-10 18:51 . 2014-02-10 18:51 81920 ----a-w- c:\windows\system32\davclnt.dll
2014-02-10 18:51 . 2014-02-10 18:51 205824 ----a-w- c:\windows\system32\WebClnt.dll
2014-02-10 18:51 . 2014-02-10 18:51 115712 ----a-w- c:\windows\system32\drivers\mrxdav.sys
2014-02-10 18:51 . 2014-02-10 18:51 434688 ----a-w- c:\windows\system32\scavengeui.dll
2014-02-10 18:50 . 2013-06-27 17:05 24384 ----a-w- c:\windows\system32\RegistryDefragBootTime.exe
2014-02-10 18:20 . 2014-02-18 16:39 -------- d-----w- c:\programdata\ProductData
2014-02-10 18:20 . 2014-02-10 18:20 -------- d-----w- c:\programdata\{3C5CBD7B-3D1D-411E-96C2-513FFCA84D2D}
2014-02-10 18:20 . 2014-02-10 20:35 -------- d-----w- c:\programdata\IObit
2014-02-10 18:20 . 2014-02-21 20:58 -------- d-----w- c:\program files\IObit
2014-02-10 18:20 . 2014-02-10 20:31 -------- d-----w- c:\users\top\AppData\Roaming\IObit
2014-02-10 17:49 . 2014-02-10 17:49 -------- d-----w- c:\program files\Microsoft WSE
2014-02-09 21:37 . 2014-02-09 21:37 640512 ----a-w- c:\windows\system32\advapi32.dll
2014-02-09 21:37 . 2014-02-09 21:37 619520 ----a-w- c:\windows\system32\tdh.dll
.
.
(((((((((((((((((((((((((((((((((((((((( Find3M výpis ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2014-02-21 23:00 . 2014-02-21 23:00 66752 ----a-w- c:\windows\system32\drivers\aswstm.sys.1393023989
2014-02-21 16:13 . 2013-03-23 15:46 71048 ----a-w- c:\windows\system32\FlashPlayerCPLApp.cpl
2014-02-21 16:13 . 2013-03-23 15:46 692616 ----a-w- c:\windows\system32\FlashPlayerApp.exe
2014-02-10 19:20 . 2013-02-26 10:13 600680 ----a-w- c:\windows\system32\NVUNINST.EXE
2014-02-10 19:17 . 2013-09-17 20:23 895264 ----a-w- c:\windows\system32\nvhdagenco3220103.dll
2014-02-09 21:38 . 2014-02-09 21:38 208384 ----a-w- c:\windows\system32\webcheck.dll
2014-02-08 18:27 . 2013-02-10 09:44 53024 ----a-w- c:\windows\system32\OpenCL.dll
2014-02-08 18:27 . 2012-10-10 20:15 832424 ----a-w- c:\windows\system32\nvumdshim.dll
2014-02-08 18:27 . 2012-10-10 20:14 15740232 ----a-w- c:\windows\system32\nvwgf2um.dll
2014-02-08 18:27 . 2012-10-10 20:14 14669032 ----a-w- c:\windows\system32\nvd3dum.dll
2014-02-08 18:27 . 2007-06-28 16:43 2713728 ----a-w- c:\windows\system32\nvapi.dll
2014-02-08 17:11 . 2013-02-10 09:44 3045664 ----a-w- c:\windows\system32\nvsvc.dll
2014-02-08 17:11 . 2007-06-28 16:43 4348704 ----a-w- c:\windows\system32\nvcpl.dll
2014-02-08 17:11 . 2013-02-10 09:44 664864 ----a-w- c:\windows\system32\nvvsvc.exe
2014-02-08 17:11 . 2013-02-10 09:44 62752 ----a-w- c:\windows\system32\nvshext.dll
2014-02-08 17:11 . 2013-02-10 09:44 2555168 ----a-w- c:\windows\system32\nvsvcr.dll
2014-02-08 17:11 . 2007-06-28 16:43 376096 ----a-w- c:\windows\system32\nvmctray.dll
2013-12-18 05:13 . 2013-09-03 15:33 231584 ------w- c:\windows\system32\MpSigStub.exe
.
.
(((((((((((((((((((((((((((((((((( Spouštěcí body v registru )))))))))))))))))))))))))))))))))))))))))))))
.
.
*Poznámka* prázdné záznamy a legitimní výchozí údaje nejsou zobrazeny.
REGEDIT4
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\00avast]
@="{472083B0-C522-11CF-8763-00608CC02F24}"
[HKEY_CLASSES_ROOT\CLSID\{472083B0-C522-11CF-8763-00608CC02F24}]
2014-02-21 23:23 259464 ----a-w- c:\program files\AVAST Software\Avast\ashShell.dll
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Skype"="c:\program files\Skype\Phone\Skype.exe" [2013-01-08 18706176]
"swg"="c:\program files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe" [2014-02-11 39408]
"Seznam Postak"="c:\program files\Seznam.cz\bin\postak.exe" [2012-01-10 491040]
"DAEMON Tools Lite"="c:\program files\DAEMON Tools Lite\DTLite.exe" [2013-01-08 3674320]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"BCSSync"="c:\program files\Microsoft Office\Office14\BCSSync.exe" [2010-03-13 91520]
"RTHDVCPL"="c:\program files\Realtek\Audio\HDA\RtHDVCpl.exe" [2014-02-18 12017368]
"SunJavaUpdateSched"="c:\program files\Common Files\Java\Java Update\jusched.exe" [2013-07-02 254336]
"DAEMON Tools Lite"="c:\program files\DAEMON Tools Lite\DTLite.exe" [2013-01-08 3674320]
"AvastUI.exe"="c:\program files\AVAST Software\Avast\AvastUI.exe" [2014-02-21 3767096]
"NvBackend"="c:\program files\NVIDIA Corporation\Update Core\NvBackend.exe" [2014-02-05 2234144]
"ShadowPlay"="c:\windows\system32\nvspcap.dll" [2014-02-05 1048152]
.
[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"Sidebar"="c:\program files\Windows Sidebar\sidebar.exe" [2010-11-20 1174016]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorAdmin"= 5 (0x5)
"ConsentPromptBehaviorUser"= 3 (0x3)
"EnableUIADesktopToggle"= 0 (0x0)
.
[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run-]
"DAEMON Tools Lite"="c:\program files\DAEMON Tools Lite\DTLite.exe" -autorun
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run-]
"SunJavaUpdateSched"="c:\program files\Common Files\Java\Java Update\jusched.exe"
"BCSSync"="c:\program files\Microsoft Office\Office14\BCSSync.exe" /DelayServices
"Adobe ARM"="c:\program files\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
"QuickTime Task"="c:\program files\QuickTime\QTTask.exe" -atboottime
"QuickTime Plugin Install"=c:\program files\QuickTime\Plugins\DeleteMe1.exe
"Služba Acronis Scheduler2"="c:\program files\Common Files\Acronis\Plán2\schedhlp.exe"
"TrueImageMonitor.exe"=c:\program files\Acronis\TrueImageHome\TrueImageMonitor.exe
.
R2 LiveUpdateSvc;LiveUpdate;c:\program files\IObit\LiveUpdate\LiveUpdate.exe [2013-12-03 2151200]
R3 aswStm;aswStm;c:\windows\system32\drivers\aswStm.sys [2014-02-21 64168]
R3 IEEtwCollectorService;Internet Explorer ETW Collector Service;c:\windows\system32\IEEtwCollector.exe [2014-02-06 108032]
R3 RdpVideoMiniport;Remote Desktop Video Miniport Driver;c:\windows\system32\drivers\rdpvideominiport.sys [2012-08-23 14848]
R3 Synth3dVsc;Synth3dVsc;c:\windows\system32\drivers\synth3dvsc.sys [x]
R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys [2013-10-02 49152]
R3 tsusbhub;tsusbhub;c:\windows\system32\drivers\tsusbhub.sys [x]
R3 VGPU;VGPU;c:\windows\system32\drivers\rdvgkmd.sys [x]
R3 WatAdminSvc;Služba Technologie aktivace Windows;c:\windows\system32\Wat\WatAdminSvc.exe [2013-02-10 1343400]
S0 aswRvrt;avast! Revert; [x]
S0 aswVmm;avast! VM Monitor; [x]
S0 tdrpman258;Acronis Try&Decide and Restore Points filter (build 258);c:\windows\system32\DRIVERS\tdrpm258.sys [2013-05-19 911680]
S1 aswKbd;aswKbd;c:\windows\system32\drivers\aswKbd.sys [2014-02-21 26136]
S1 aswNdisFlt;Avast! Firewall Driver;c:\windows\system32\DRIVERS\aswNdisFlt.sys [2014-02-21 265072]
S1 aswSnx;aswSnx;c:\windows\system32\drivers\aswSnx.sys [2014-02-21 775952]
S1 aswSP;aswSP;c:\windows\system32\drivers\aswSP.sys [2014-02-21 410784]
S1 dtsoftbus01;DAEMON Tools Virtual Bus Driver;c:\windows\system32\DRIVERS\dtsoftbus01.sys [2013-02-10 242240]
S2 afcdpsrv;Acronis Nonstop Backup service;c:\program files\Common Files\Acronis\CDP\afcdpsrv.exe [2013-05-19 2480048]
S2 aswMonFlt;aswMonFlt;c:\windows\system32\drivers\aswMonFlt.sys [2014-02-21 67824]
S2 avast! Firewall;avast! Firewall;c:\program files\AVAST Software\Avast\afwServ.exe [2014-02-21 113704]
S2 NvNetworkService;NVIDIA Network Service;c:\program files\NVIDIA Corporation\NetService\NvNetworkService.exe [2014-02-05 1593632]
S2 NvStreamSvc;NVIDIA Streamer Service;c:\program files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [2014-02-05 15904544]
S2 ReimageRealTimeProtection;Reimage Real Time Protection;c:\program files\Reimage\Reimage Repair\ReiGuard.exe [2014-01-15 4030824]
S2 Stereo Service;NVIDIA Stereoscopic 3D Driver Service;c:\program files\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe [2014-02-08 411936]
S3 afcdp;afcdp;c:\windows\system32\DRIVERS\afcdp.sys [2013-05-19 160288]
S3 nvvad_WaveExtensible;NVIDIA Virtual Audio Device (Wave Extensible) (WDM);c:\windows\system32\drivers\nvvad32v.sys [2013-12-27 34080]
.
.
Obsah adresáře 'Naplánované úlohy'
.
2014-02-24 c:\windows\Tasks\Adobe Flash Player Updater.job
- c:\windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2013-03-23 16:13]
.
.
------- Doplňkový sken -------
.
uStart Page = hxxp://www.seznam.cz/
IE: E&xportovat do aplikace Microsoft Excel - c:\progra~1\MICROS~2\Office14\EXCEL.EXE/3000
IE: Od&eslat do aplikace OneNote - c:\progra~1\MICROS~2\Office14\ONBttnIE.dll/105
TCP: DhcpNameServer = 10.10.10.10 10.10.10.1
.
.
------------------------ Jiné spuštené procesy ------------------------
.
c:\windows\system32\nvvsvc.exe
c:\program files\AVAST Software\Avast\AvastSvc.exe
c:\program files\NVIDIA Corporation\Display\nvxdsync.exe
c:\windows\system32\nvvsvc.exe
c:\windows\system32\taskhost.exe
c:\program files\Common Files\Acronis\Plán2\schedul2.exe
c:\program files\Common Files\Adobe\ARM\1.0\armsvc.exe
c:\windows\system32\PnkBstrA.exe
c:\windows\system32\conhost.exe
c:\windows\System32\WUDFHost.exe
c:\windows\System32\rundll32.exe
c:\windows\system32\conhost.exe
c:\program files\NVIDIA Corporation\Display\nvtray.exe
c:\windows\system32\sppsvc.exe
.
**************************************************************************
.
Celkový čas: 2014-02-24 19:22:33 - počítač byl restartován
ComboFix-quarantined-files.txt 2014-02-24 18:22
ComboFix2.txt 2014-02-23 10:49
.
Před spuštěním: Volných bajtů: 12 969 635 840
Po spuštění: Volných bajtů: 12 769 337 344
.
- - End Of File - - AFD811F151B5AA9AB51D8A061A0722B4
A36C5E4F47E84449FF07ED3517B43A31
Microsoft Windows 7 Ultimate 6.1.7601.1.1250.420.1029.18.2048.1315 [GMT 1:00]
Spuštěný z: c:\users\top\Desktop\ComboFix.exe
Použité ovládací přepínače :: c:\users\top\Desktop\CFScript.txt
AV: avast! Antivirus *Disabled/Updated* {17AD7D40-BA12-9C46-7131-94903A54AD8B}
FW: avast! Antivirus *Disabled* {2F96FC65-F07D-9D1E-5A6E-3DA5C487EAF0}
SP: avast! Antivirus *Disabled/Updated* {ACCC9CA4-9C28-93C8-4B81-AFE241D3E736}
SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.
FILE ::
"c:\windows\Tasks\GoogleUpdateTaskMachineCore.job"
"c:\windows\Tasks\GoogleUpdateTaskMachineUA.job"
.
.
((((((((((((((((((((((((((((((((((((((( Ostatní výmazy )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
c:\program files\Google\Update
c:\program files\Google\Update\1.3.22.5\GoogleCrashHandler.exe
c:\program files\Google\Update\1.3.22.5\GoogleCrashHandler64.exe
c:\program files\Google\Update\1.3.22.5\GoogleUpdate.exe
c:\program files\Google\Update\1.3.22.5\GoogleUpdateBroker.exe
c:\program files\Google\Update\1.3.22.5\GoogleUpdateHelper.msi
c:\program files\Google\Update\1.3.22.5\GoogleUpdateOnDemand.exe
c:\program files\Google\Update\1.3.22.5\GoogleUpdateSetup.exe
c:\program files\Google\Update\1.3.22.5\goopdate.dll
c:\program files\Google\Update\1.3.22.5\goopdateres_am.dll
c:\program files\Google\Update\1.3.22.5\goopdateres_ar.dll
c:\program files\Google\Update\1.3.22.5\goopdateres_bg.dll
c:\program files\Google\Update\1.3.22.5\goopdateres_bn.dll
c:\program files\Google\Update\1.3.22.5\goopdateres_ca.dll
c:\program files\Google\Update\1.3.22.5\goopdateres_cs.dll
c:\program files\Google\Update\1.3.22.5\goopdateres_da.dll
c:\program files\Google\Update\1.3.22.5\goopdateres_de.dll
c:\program files\Google\Update\1.3.22.5\goopdateres_el.dll
c:\program files\Google\Update\1.3.22.5\goopdateres_en-GB.dll
c:\program files\Google\Update\1.3.22.5\goopdateres_en.dll
c:\program files\Google\Update\1.3.22.5\goopdateres_es-419.dll
c:\program files\Google\Update\1.3.22.5\goopdateres_es.dll
c:\program files\Google\Update\1.3.22.5\goopdateres_et.dll
c:\program files\Google\Update\1.3.22.5\goopdateres_fa.dll
c:\program files\Google\Update\1.3.22.5\goopdateres_fi.dll
c:\program files\Google\Update\1.3.22.5\goopdateres_fil.dll
c:\program files\Google\Update\1.3.22.5\goopdateres_fr.dll
c:\program files\Google\Update\1.3.22.5\goopdateres_gu.dll
c:\program files\Google\Update\1.3.22.5\goopdateres_hi.dll
c:\program files\Google\Update\1.3.22.5\goopdateres_hr.dll
c:\program files\Google\Update\1.3.22.5\goopdateres_hu.dll
c:\program files\Google\Update\1.3.22.5\goopdateres_id.dll
c:\program files\Google\Update\1.3.22.5\goopdateres_is.dll
c:\program files\Google\Update\1.3.22.5\goopdateres_it.dll
c:\program files\Google\Update\1.3.22.5\goopdateres_iw.dll
c:\program files\Google\Update\1.3.22.5\goopdateres_ja.dll
c:\program files\Google\Update\1.3.22.5\goopdateres_kn.dll
c:\program files\Google\Update\1.3.22.5\goopdateres_ko.dll
c:\program files\Google\Update\1.3.22.5\goopdateres_lt.dll
c:\program files\Google\Update\1.3.22.5\goopdateres_lv.dll
c:\program files\Google\Update\1.3.22.5\goopdateres_ml.dll
c:\program files\Google\Update\1.3.22.5\goopdateres_mr.dll
c:\program files\Google\Update\1.3.22.5\goopdateres_ms.dll
c:\program files\Google\Update\1.3.22.5\goopdateres_nl.dll
c:\program files\Google\Update\1.3.22.5\goopdateres_no.dll
c:\program files\Google\Update\1.3.22.5\goopdateres_pl.dll
c:\program files\Google\Update\1.3.22.5\goopdateres_pt-BR.dll
c:\program files\Google\Update\1.3.22.5\goopdateres_pt-PT.dll
c:\program files\Google\Update\1.3.22.5\goopdateres_ro.dll
c:\program files\Google\Update\1.3.22.5\goopdateres_ru.dll
c:\program files\Google\Update\1.3.22.5\goopdateres_sk.dll
c:\program files\Google\Update\1.3.22.5\goopdateres_sl.dll
c:\program files\Google\Update\1.3.22.5\goopdateres_sr.dll
c:\program files\Google\Update\1.3.22.5\goopdateres_sv.dll
c:\program files\Google\Update\1.3.22.5\goopdateres_sw.dll
c:\program files\Google\Update\1.3.22.5\goopdateres_ta.dll
c:\program files\Google\Update\1.3.22.5\goopdateres_te.dll
c:\program files\Google\Update\1.3.22.5\goopdateres_th.dll
c:\program files\Google\Update\1.3.22.5\goopdateres_tr.dll
c:\program files\Google\Update\1.3.22.5\goopdateres_uk.dll
c:\program files\Google\Update\1.3.22.5\goopdateres_ur.dll
c:\program files\Google\Update\1.3.22.5\goopdateres_vi.dll
c:\program files\Google\Update\1.3.22.5\goopdateres_zh-CN.dll
c:\program files\Google\Update\1.3.22.5\goopdateres_zh-TW.dll
c:\program files\Google\Update\1.3.22.5\npGoogleUpdate3.dll
c:\program files\Google\Update\1.3.22.5\psmachine.dll
c:\program files\Google\Update\1.3.22.5\psuser.dll
c:\program files\Google\Update\Download\{430FD4D0-B729-4F61-AA34-91526481799D}\1.3.22.5\GoogleUpdateSetup.exe
c:\program files\Google\Update\Download\{8A69D345-D564-463C-AFF1-A69D9E530F96}\33.0.1750.117\33.0.1750.117_chrome_installer.exe
c:\program files\Google\Update\Download\{F69EABDD-A4BB-4555-BE7E-1EA5F59BBA24}\0.0.0.0\googletoolbarinstaller_en_signed.exe
c:\program files\Google\Update\GoogleUpdate.exe
c:\users\top\AppData\Local\ESET
c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
.
Nakažená kopie c:\windows\system32\userinit.exe byla nalezena a vyléčena.
Obnovena kopie z - c:\windows\erdnt\cache\userinit.exe
.
.
((((((((((((((((((((((((((((((((((((((( Ovladače/Služby )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
-------\Service_gupdate
-------\Service_gupdatem
-------\Service_gupdate
-------\Service_gupdatem
.
.
((((((((((((((((((((((((( Soubory vytvořené od 2014-01-24 do 2014-02-24 )))))))))))))))))))))))))))))))
.
.
2014-02-24 18:18 . 2014-02-24 18:20 -------- d-----w- c:\users\top\AppData\Local\temp
2014-02-24 18:18 . 2014-02-24 18:18 -------- d-----w- c:\users\Public\AppData\Local\temp
2014-02-24 18:18 . 2014-02-24 18:18 -------- d-----w- c:\users\Default\AppData\Local\temp
2014-02-23 09:55 . 2014-02-23 09:55 -------- d-----w- c:\users\top\AppData\Local\CrashDumps
2014-02-23 07:46 . 2012-06-11 10:33 19072 ----a-w- c:\windows\system32\drivers\pccsmcfd.sys
2014-02-23 07:46 . 2014-02-23 07:46 -------- d-----w- c:\program files\PC Connectivity Solution
2014-02-22 17:38 . 2014-02-22 17:38 -------- d-----w- c:\users\top\AppData\Local\NVIDIA Corporation
2014-02-22 17:37 . 2014-02-05 09:31 1048152 ----a-w- c:\windows\system32\nvspcap.dll
2014-02-22 17:37 . 2014-02-22 17:39 -------- d-----w- c:\users\top\AppData\Local\NVIDIA
2014-02-22 17:37 . 2014-02-22 17:37 -------- d-----w- c:\program files\AGEIA Technologies
2014-02-22 17:36 . 2014-02-08 16:18 599840 ----a-w- c:\windows\system32\nvStreaming.exe
2014-02-22 17:33 . 2014-02-08 18:27 9690424 ----a-w- c:\windows\system32\nvopencl.dll
2014-02-22 17:33 . 2013-12-27 18:42 34080 ----a-w- c:\windows\system32\drivers\nvvad32v.sys
2014-02-22 17:33 . 2013-12-27 18:42 33056 ----a-w- c:\windows\system32\nvaudcap32v.dll
2014-02-22 17:32 . 2014-02-08 18:27 9728064 ----a-w- c:\windows\system32\nvcuda.dll
2014-02-22 17:32 . 2014-02-08 18:27 895264 ----a-w- c:\windows\system32\nvdispgenco3233489.dll
2014-02-22 17:32 . 2014-02-08 18:27 863520 ----a-w- c:\windows\system32\NvIFR.dll
2014-02-22 17:32 . 2014-02-08 18:27 844576 ----a-w- c:\windows\system32\NvFBC.dll
2014-02-22 17:32 . 2014-02-08 18:27 305600 ----a-w- c:\windows\system32\nvoglshim32.dll
2014-02-22 17:32 . 2014-02-08 18:27 2956576 ----a-w- c:\windows\system32\nvcuvid.dll
2014-02-22 17:32 . 2014-02-08 18:27 2410784 ----a-w- c:\windows\system32\nvcuvenc.dll
2014-02-22 17:32 . 2014-02-08 18:27 23683360 ----a-w- c:\windows\system32\nvoglv32.dll
2014-02-22 17:32 . 2014-02-08 18:27 17560352 ----a-w- c:\windows\system32\nvcompiler.dll
2014-02-22 17:32 . 2014-02-08 18:27 148528 ----a-w- c:\windows\system32\nvinit.dll
2014-02-22 17:32 . 2014-02-08 18:27 1049888 ----a-w- c:\windows\system32\nvdispco3233489.dll
2014-02-22 17:32 . 2014-02-08 18:27 10180896 ----a-w- c:\windows\system32\drivers\nvlddmkm.sys
2014-02-22 17:30 . 2014-02-22 17:30 -------- d-----w- C:\NVIDIA
2014-02-21 23:01 . 2014-02-21 23:01 -------- d-----w- c:\users\top\AppData\Roaming\AVAST Software
2014-02-21 23:00 . 2014-02-21 23:23 64168 ----a-w- c:\windows\system32\drivers\aswstm.sys
2014-02-21 23:00 . 2014-02-21 23:23 775952 ----a-w- c:\windows\system32\drivers\aswSnx.sys
2014-02-21 23:00 . 2014-02-21 23:23 410784 ----a-w- c:\windows\system32\drivers\aswSP.sys
2014-02-21 23:00 . 2014-02-21 23:00 49944 ----a-w- c:\windows\system32\drivers\aswRvrt.sys
2014-02-21 23:00 . 2014-02-21 23:00 180248 ----a-w- c:\windows\system32\drivers\aswVmm.sys
2014-02-21 23:00 . 2014-02-21 23:23 67824 ----a-w- c:\windows\system32\drivers\aswMonFlt.sys
2014-02-21 23:00 . 2014-02-21 23:00 79720 ----a-w- c:\windows\system32\drivers\aswRdr2.sys
2014-02-21 23:00 . 2014-02-21 23:00 26136 ----a-w- c:\windows\system32\drivers\aswKbd.sys
2014-02-21 23:00 . 2014-02-21 23:23 270240 ----a-w- c:\windows\system32\aswBoot.exe
2014-02-21 23:00 . 2014-02-21 23:23 43152 ----a-w- c:\windows\avastSS.scr
2014-02-21 23:00 . 2014-02-21 23:23 265072 ----a-w- c:\windows\system32\drivers\aswndisflt.sys
2014-02-21 22:59 . 2014-02-21 22:59 -------- d-----w- c:\program files\AVAST Software
2014-02-21 21:14 . 2014-02-21 22:59 -------- d-----w- c:\programdata\AVAST Software
2014-02-21 21:12 . 2013-11-26 23:29 5693440 ----a-w- c:\windows\system32\mstscax.dll
2014-02-21 21:11 . 2014-02-17 00:32 7947048 ----a-w- c:\programdata\Microsoft\Windows Defender\Definition Updates\{2E2C903B-E98E-440C-A261-82E89529CE14}\mpengine.dll
2014-02-21 21:00 . 2014-02-21 21:00 -------- d-----w- c:\users\top\AppData\Local\Apple
2014-02-21 17:11 . 2014-02-21 17:11 -------- d-----w- c:\users\top\AppData\Local\Adobe
2014-02-21 17:04 . 2013-10-01 23:45 32256 ----a-w- c:\windows\system32\TsUsbGDCoInstaller.dll
2014-02-21 17:04 . 2013-10-02 00:42 49152 ----a-w- c:\windows\system32\drivers\TsUsbFlt.sys
2014-02-21 17:04 . 2013-10-02 00:32 12800 ----a-w- c:\windows\system32\TsUsbRedirectionGroupPolicyControl.exe
2014-02-21 17:04 . 2013-10-02 00:30 14336 ----a-w- c:\windows\system32\TsUsbRedirectionGroupPolicyExtension.dll
2014-02-21 17:04 . 2013-10-02 00:14 50176 ----a-w- c:\windows\system32\MsRdpWebAccess.dll
2014-02-21 17:04 . 2013-10-02 00:14 17920 ----a-w- c:\windows\system32\wksprtPS.dll
2014-02-21 17:04 . 2013-10-01 23:58 53248 ----a-w- c:\windows\system32\tsgqec.dll
2014-02-21 17:04 . 2013-10-01 23:08 855552 ----a-w- c:\windows\system32\rdvidcrl.dll
2014-02-21 17:04 . 2013-10-01 23:00 76288 ----a-w- c:\windows\system32\TSWbPrxy.exe
2014-02-21 17:04 . 2013-10-01 22:53 350208 ----a-w- c:\windows\system32\wksprt.exe
2014-02-21 17:04 . 2013-10-01 22:34 1068544 ----a-w- c:\windows\system32\mstsc.exe
2014-02-21 17:00 . 2014-02-21 17:00 -------- d-----w- c:\windows\Migration
2014-02-21 16:57 . 2013-09-25 01:57 792576 ----a-w- c:\windows\system32\TSWorkspace.dll
2014-02-21 16:57 . 2013-12-04 02:03 87040 ----a-w- c:\windows\system32\secproc_ssp_isv.dll
2014-02-21 16:57 . 2013-12-04 02:03 87040 ----a-w- c:\windows\system32\secproc_ssp.dll
2014-02-21 16:57 . 2013-12-04 02:03 423936 ----a-w- c:\windows\system32\secproc_isv.dll
2014-02-21 16:57 . 2013-12-04 02:03 428032 ----a-w- c:\windows\system32\secproc.dll
2014-02-21 16:57 . 2013-12-04 02:02 390144 ----a-w- c:\windows\system32\msdrm.dll
2014-02-21 16:57 . 2013-12-04 01:54 510976 ----a-w- c:\windows\system32\RMActivate_ssp.exe
2014-02-21 16:57 . 2013-12-04 01:54 594944 ----a-w- c:\windows\system32\RMActivate_isv.exe
2014-02-21 16:57 . 2013-12-04 01:54 572416 ----a-w- c:\windows\system32\RMActivate.exe
2014-02-21 16:57 . 2013-12-04 01:54 508928 ----a-w- c:\windows\system32\RMActivate_ssp_isv.exe
2014-02-21 15:57 . 2014-02-21 15:57 -------- d-----w- c:\programdata\CDB
2014-02-21 15:57 . 2014-02-21 15:57 -------- d-----w- c:\program files\Reimage
2014-02-21 15:57 . 2014-02-21 15:57 -------- d-----w- C:\rei
2014-02-18 16:45 . 2014-02-18 16:45 5801652 ----a-w- c:\windows\system32\drivers\rtvienna.dat
2014-02-18 16:45 . 2014-02-18 16:45 2947160 ----a-w- c:\windows\system32\drivers\RTKVHDA.sys
2014-02-18 16:45 . 2014-02-18 16:45 2329816 ----a-w- c:\windows\system32\RtkAPO.dll
2014-02-18 16:45 . 2014-02-18 16:45 125144 ----a-w- c:\windows\system32\RtkCoInstII.dll
2014-02-18 16:45 . 2014-02-18 16:45 696013 ----a-w- c:\windows\system32\drivers\RTAIODAT.DAT
2014-02-18 16:45 . 2014-02-18 16:45 43342848 ----a-w- c:\windows\system32\RCoRes.dat
2014-02-16 15:08 . 2014-02-19 21:24 -------- d-----w- c:\program files\AviSynth 2.5
2014-02-16 15:08 . 2014-02-16 15:19 -------- d-----w- c:\program files\Gabest
2014-02-16 15:06 . 2014-02-16 15:17 -------- d-----w- c:\program files\AutoGK
2014-02-16 14:54 . 2014-02-16 15:04 -------- d-----w- c:\program files\WM Converter
2014-02-13 19:36 . 2014-02-13 19:36 -------- d-----w- c:\program files\Barbie(TM)
2014-02-12 19:50 . 2014-02-12 19:50 -------- d-----w- c:\program files\CCleaner
2014-02-12 16:46 . 2014-02-06 09:25 4244480 ----a-w- c:\windows\system32\jscript9.dll
2014-02-12 16:38 . 2013-12-21 08:56 454656 ----a-w- c:\windows\system32\vbscript.dll
2014-02-12 16:09 . 2014-02-12 16:09 -------- d-----w- c:\programdata\Innovative Solutions
2014-02-12 16:09 . 2014-02-12 16:09 -------- d-----w- c:\users\top\AppData\Local\Innovative Solutions
2014-02-12 16:09 . 2014-02-12 16:09 -------- d-----w- c:\program files\Common Files\Innovative Solutions
2014-02-12 15:24 . 2014-02-12 15:24 94632 ----a-w- c:\windows\system32\WindowsAccessBridge.dll
2014-02-12 14:37 . 2013-12-06 02:02 2048 ----a-w- c:\windows\system32\msxml3r.dll
2014-02-12 14:37 . 2013-12-06 02:02 1237504 ----a-w- c:\windows\system32\msxml3.dll
2014-02-12 14:37 . 2013-12-24 23:09 1987584 ----a-w- c:\windows\system32\d3d10warp.dll
2014-02-12 14:37 . 2013-11-26 08:16 3419136 ----a-w- c:\windows\system32\d2d1.dll
2014-02-11 22:07 . 2014-02-12 16:03 -------- d-----w- c:\program files\VS Revo Group
2014-02-11 21:42 . 2014-02-11 21:42 -------- d-----w- c:\programdata\Kaspersky Lab Setup Files
2014-02-10 20:35 . 2014-02-10 20:35 -------- d-----w- c:\programdata\Razer
2014-02-10 20:32 . 2013-11-19 15:52 31008 ----a-w- c:\windows\system32\SmartDefragBootTime.exe
2014-02-10 19:20 . 2014-02-10 19:20 893728 ----a-w- c:\windows\system32\nvdispgenco3233221.dll
2014-02-10 19:20 . 2014-02-10 19:20 1049888 ----a-w- c:\windows\system32\nvdispco3233221.dll
2014-02-10 19:20 . 2014-02-10 19:20 10084 ----a-w- c:\windows\system32\drivers\nvphy.bin
2014-02-10 19:20 . 2014-02-10 19:20 758784 ----a-w- c:\windows\system32\cohelper.dll
2014-02-10 19:20 . 2014-02-10 19:20 296936 ----a-w- c:\windows\system32\drivers\nvmf6232.sys
2014-02-10 19:20 . 2014-02-10 19:20 207464 ----a-w- c:\windows\system32\nvconrm.dll
2014-02-10 19:20 . 2014-02-10 19:20 953856 ----a-w- c:\windows\system32\fdco2.dll
2014-02-10 19:17 . 2014-02-10 19:17 926976 ----a-w- c:\windows\system32\MaxxSpeechAPO.dll
2014-02-10 18:52 . 2014-02-10 18:52 240576 ----a-w- c:\windows\system32\drivers\netio.sys
2014-02-10 18:52 . 2014-02-10 18:52 301568 ----a-w- c:\windows\system32\msieftp.dll
2014-02-10 18:52 . 2014-02-10 18:52 164864 ----a-w- c:\program files\Windows Media Player\wmplayer.exe
2014-02-10 18:52 . 2014-02-10 18:52 12625408 ----a-w- c:\windows\system32\wmploc.DLL
2014-02-10 18:52 . 2014-02-10 18:52 417792 ----a-w- c:\windows\system32\WMPhoto.dll
2014-02-10 18:51 . 2014-02-10 18:51 1796096 ----a-w- c:\windows\system32\authui.dll
2014-02-10 18:51 . 2014-02-10 18:51 168960 ----a-w- c:\windows\system32\credui.dll
2014-02-10 18:51 . 2014-02-10 18:51 152576 ----a-w- c:\windows\system32\SmartcardCredentialProvider.dll
2014-02-10 18:51 . 2014-02-10 18:51 81920 ----a-w- c:\windows\system32\davclnt.dll
2014-02-10 18:51 . 2014-02-10 18:51 205824 ----a-w- c:\windows\system32\WebClnt.dll
2014-02-10 18:51 . 2014-02-10 18:51 115712 ----a-w- c:\windows\system32\drivers\mrxdav.sys
2014-02-10 18:51 . 2014-02-10 18:51 434688 ----a-w- c:\windows\system32\scavengeui.dll
2014-02-10 18:50 . 2013-06-27 17:05 24384 ----a-w- c:\windows\system32\RegistryDefragBootTime.exe
2014-02-10 18:20 . 2014-02-18 16:39 -------- d-----w- c:\programdata\ProductData
2014-02-10 18:20 . 2014-02-10 18:20 -------- d-----w- c:\programdata\{3C5CBD7B-3D1D-411E-96C2-513FFCA84D2D}
2014-02-10 18:20 . 2014-02-10 20:35 -------- d-----w- c:\programdata\IObit
2014-02-10 18:20 . 2014-02-21 20:58 -------- d-----w- c:\program files\IObit
2014-02-10 18:20 . 2014-02-10 20:31 -------- d-----w- c:\users\top\AppData\Roaming\IObit
2014-02-10 17:49 . 2014-02-10 17:49 -------- d-----w- c:\program files\Microsoft WSE
2014-02-09 21:37 . 2014-02-09 21:37 640512 ----a-w- c:\windows\system32\advapi32.dll
2014-02-09 21:37 . 2014-02-09 21:37 619520 ----a-w- c:\windows\system32\tdh.dll
.
.
(((((((((((((((((((((((((((((((((((((((( Find3M výpis ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2014-02-21 23:00 . 2014-02-21 23:00 66752 ----a-w- c:\windows\system32\drivers\aswstm.sys.1393023989
2014-02-21 16:13 . 2013-03-23 15:46 71048 ----a-w- c:\windows\system32\FlashPlayerCPLApp.cpl
2014-02-21 16:13 . 2013-03-23 15:46 692616 ----a-w- c:\windows\system32\FlashPlayerApp.exe
2014-02-10 19:20 . 2013-02-26 10:13 600680 ----a-w- c:\windows\system32\NVUNINST.EXE
2014-02-10 19:17 . 2013-09-17 20:23 895264 ----a-w- c:\windows\system32\nvhdagenco3220103.dll
2014-02-09 21:38 . 2014-02-09 21:38 208384 ----a-w- c:\windows\system32\webcheck.dll
2014-02-08 18:27 . 2013-02-10 09:44 53024 ----a-w- c:\windows\system32\OpenCL.dll
2014-02-08 18:27 . 2012-10-10 20:15 832424 ----a-w- c:\windows\system32\nvumdshim.dll
2014-02-08 18:27 . 2012-10-10 20:14 15740232 ----a-w- c:\windows\system32\nvwgf2um.dll
2014-02-08 18:27 . 2012-10-10 20:14 14669032 ----a-w- c:\windows\system32\nvd3dum.dll
2014-02-08 18:27 . 2007-06-28 16:43 2713728 ----a-w- c:\windows\system32\nvapi.dll
2014-02-08 17:11 . 2013-02-10 09:44 3045664 ----a-w- c:\windows\system32\nvsvc.dll
2014-02-08 17:11 . 2007-06-28 16:43 4348704 ----a-w- c:\windows\system32\nvcpl.dll
2014-02-08 17:11 . 2013-02-10 09:44 664864 ----a-w- c:\windows\system32\nvvsvc.exe
2014-02-08 17:11 . 2013-02-10 09:44 62752 ----a-w- c:\windows\system32\nvshext.dll
2014-02-08 17:11 . 2013-02-10 09:44 2555168 ----a-w- c:\windows\system32\nvsvcr.dll
2014-02-08 17:11 . 2007-06-28 16:43 376096 ----a-w- c:\windows\system32\nvmctray.dll
2013-12-18 05:13 . 2013-09-03 15:33 231584 ------w- c:\windows\system32\MpSigStub.exe
.
.
(((((((((((((((((((((((((((((((((( Spouštěcí body v registru )))))))))))))))))))))))))))))))))))))))))))))
.
.
*Poznámka* prázdné záznamy a legitimní výchozí údaje nejsou zobrazeny.
REGEDIT4
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\00avast]
@="{472083B0-C522-11CF-8763-00608CC02F24}"
[HKEY_CLASSES_ROOT\CLSID\{472083B0-C522-11CF-8763-00608CC02F24}]
2014-02-21 23:23 259464 ----a-w- c:\program files\AVAST Software\Avast\ashShell.dll
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Skype"="c:\program files\Skype\Phone\Skype.exe" [2013-01-08 18706176]
"swg"="c:\program files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe" [2014-02-11 39408]
"Seznam Postak"="c:\program files\Seznam.cz\bin\postak.exe" [2012-01-10 491040]
"DAEMON Tools Lite"="c:\program files\DAEMON Tools Lite\DTLite.exe" [2013-01-08 3674320]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"BCSSync"="c:\program files\Microsoft Office\Office14\BCSSync.exe" [2010-03-13 91520]
"RTHDVCPL"="c:\program files\Realtek\Audio\HDA\RtHDVCpl.exe" [2014-02-18 12017368]
"SunJavaUpdateSched"="c:\program files\Common Files\Java\Java Update\jusched.exe" [2013-07-02 254336]
"DAEMON Tools Lite"="c:\program files\DAEMON Tools Lite\DTLite.exe" [2013-01-08 3674320]
"AvastUI.exe"="c:\program files\AVAST Software\Avast\AvastUI.exe" [2014-02-21 3767096]
"NvBackend"="c:\program files\NVIDIA Corporation\Update Core\NvBackend.exe" [2014-02-05 2234144]
"ShadowPlay"="c:\windows\system32\nvspcap.dll" [2014-02-05 1048152]
.
[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"Sidebar"="c:\program files\Windows Sidebar\sidebar.exe" [2010-11-20 1174016]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorAdmin"= 5 (0x5)
"ConsentPromptBehaviorUser"= 3 (0x3)
"EnableUIADesktopToggle"= 0 (0x0)
.
[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run-]
"DAEMON Tools Lite"="c:\program files\DAEMON Tools Lite\DTLite.exe" -autorun
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run-]
"SunJavaUpdateSched"="c:\program files\Common Files\Java\Java Update\jusched.exe"
"BCSSync"="c:\program files\Microsoft Office\Office14\BCSSync.exe" /DelayServices
"Adobe ARM"="c:\program files\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
"QuickTime Task"="c:\program files\QuickTime\QTTask.exe" -atboottime
"QuickTime Plugin Install"=c:\program files\QuickTime\Plugins\DeleteMe1.exe
"Služba Acronis Scheduler2"="c:\program files\Common Files\Acronis\Plán2\schedhlp.exe"
"TrueImageMonitor.exe"=c:\program files\Acronis\TrueImageHome\TrueImageMonitor.exe
.
R2 LiveUpdateSvc;LiveUpdate;c:\program files\IObit\LiveUpdate\LiveUpdate.exe [2013-12-03 2151200]
R3 aswStm;aswStm;c:\windows\system32\drivers\aswStm.sys [2014-02-21 64168]
R3 IEEtwCollectorService;Internet Explorer ETW Collector Service;c:\windows\system32\IEEtwCollector.exe [2014-02-06 108032]
R3 RdpVideoMiniport;Remote Desktop Video Miniport Driver;c:\windows\system32\drivers\rdpvideominiport.sys [2012-08-23 14848]
R3 Synth3dVsc;Synth3dVsc;c:\windows\system32\drivers\synth3dvsc.sys [x]
R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys [2013-10-02 49152]
R3 tsusbhub;tsusbhub;c:\windows\system32\drivers\tsusbhub.sys [x]
R3 VGPU;VGPU;c:\windows\system32\drivers\rdvgkmd.sys [x]
R3 WatAdminSvc;Služba Technologie aktivace Windows;c:\windows\system32\Wat\WatAdminSvc.exe [2013-02-10 1343400]
S0 aswRvrt;avast! Revert; [x]
S0 aswVmm;avast! VM Monitor; [x]
S0 tdrpman258;Acronis Try&Decide and Restore Points filter (build 258);c:\windows\system32\DRIVERS\tdrpm258.sys [2013-05-19 911680]
S1 aswKbd;aswKbd;c:\windows\system32\drivers\aswKbd.sys [2014-02-21 26136]
S1 aswNdisFlt;Avast! Firewall Driver;c:\windows\system32\DRIVERS\aswNdisFlt.sys [2014-02-21 265072]
S1 aswSnx;aswSnx;c:\windows\system32\drivers\aswSnx.sys [2014-02-21 775952]
S1 aswSP;aswSP;c:\windows\system32\drivers\aswSP.sys [2014-02-21 410784]
S1 dtsoftbus01;DAEMON Tools Virtual Bus Driver;c:\windows\system32\DRIVERS\dtsoftbus01.sys [2013-02-10 242240]
S2 afcdpsrv;Acronis Nonstop Backup service;c:\program files\Common Files\Acronis\CDP\afcdpsrv.exe [2013-05-19 2480048]
S2 aswMonFlt;aswMonFlt;c:\windows\system32\drivers\aswMonFlt.sys [2014-02-21 67824]
S2 avast! Firewall;avast! Firewall;c:\program files\AVAST Software\Avast\afwServ.exe [2014-02-21 113704]
S2 NvNetworkService;NVIDIA Network Service;c:\program files\NVIDIA Corporation\NetService\NvNetworkService.exe [2014-02-05 1593632]
S2 NvStreamSvc;NVIDIA Streamer Service;c:\program files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [2014-02-05 15904544]
S2 ReimageRealTimeProtection;Reimage Real Time Protection;c:\program files\Reimage\Reimage Repair\ReiGuard.exe [2014-01-15 4030824]
S2 Stereo Service;NVIDIA Stereoscopic 3D Driver Service;c:\program files\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe [2014-02-08 411936]
S3 afcdp;afcdp;c:\windows\system32\DRIVERS\afcdp.sys [2013-05-19 160288]
S3 nvvad_WaveExtensible;NVIDIA Virtual Audio Device (Wave Extensible) (WDM);c:\windows\system32\drivers\nvvad32v.sys [2013-12-27 34080]
.
.
Obsah adresáře 'Naplánované úlohy'
.
2014-02-24 c:\windows\Tasks\Adobe Flash Player Updater.job
- c:\windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2013-03-23 16:13]
.
.
------- Doplňkový sken -------
.
uStart Page = hxxp://www.seznam.cz/
IE: E&xportovat do aplikace Microsoft Excel - c:\progra~1\MICROS~2\Office14\EXCEL.EXE/3000
IE: Od&eslat do aplikace OneNote - c:\progra~1\MICROS~2\Office14\ONBttnIE.dll/105
TCP: DhcpNameServer = 10.10.10.10 10.10.10.1
.
.
------------------------ Jiné spuštené procesy ------------------------
.
c:\windows\system32\nvvsvc.exe
c:\program files\AVAST Software\Avast\AvastSvc.exe
c:\program files\NVIDIA Corporation\Display\nvxdsync.exe
c:\windows\system32\nvvsvc.exe
c:\windows\system32\taskhost.exe
c:\program files\Common Files\Acronis\Plán2\schedul2.exe
c:\program files\Common Files\Adobe\ARM\1.0\armsvc.exe
c:\windows\system32\PnkBstrA.exe
c:\windows\system32\conhost.exe
c:\windows\System32\WUDFHost.exe
c:\windows\System32\rundll32.exe
c:\windows\system32\conhost.exe
c:\program files\NVIDIA Corporation\Display\nvtray.exe
c:\windows\system32\sppsvc.exe
.
**************************************************************************
.
Celkový čas: 2014-02-24 19:22:33 - počítač byl restartován
ComboFix-quarantined-files.txt 2014-02-24 18:22
ComboFix2.txt 2014-02-23 10:49
.
Před spuštěním: Volných bajtů: 12 969 635 840
Po spuštění: Volných bajtů: 12 769 337 344
.
- - End Of File - - AFD811F151B5AA9AB51D8A061A0722B4
A36C5E4F47E84449FF07ED3517B43A31
Re: prosim o kontrolu logu
tu slozku rei nemam potuchy co to je
- jaro3
- člen Security týmu
-
Guru Level 15
- Příspěvky: 43298
- Registrován: červen 07
- Bydliště: Jižní Čechy
- Pohlaví:
- Stav:
Offline
Re: prosim o kontrolu logu
Tak jí smaž.
ComboFix se odinstaluje takto:
Start-Spustit a zadej ComboFix /Uninstall
Vyčisti systém CCleanerem
Stáhni si OTC
na plochu. Poklepej na něj. Potom klikni na Clean up!.
Restartuj PC , pokud Ti bude doporučeno.
Vlož nový log z HJT + info o problémech.
ComboFix se odinstaluje takto:
Start-Spustit a zadej ComboFix /Uninstall
Vyčisti systém CCleanerem
Stáhni si OTC
na plochu. Poklepej na něj. Potom klikni na Clean up!.
Restartuj PC , pokud Ti bude doporučeno.
Vlož nový log z HJT + info o problémech.
Při práci s programy HJT, ComboFix,MbAM, SDFix aj. zavřete všechny ostatní aplikace a prohlížeče!
Neposílejte logy do soukromých zpráv.Po dobu mé nepřítomnosti mě zastupuje memphisto , Žbeky a Orcus.
Pokud budete spokojeni , můžete podpořit naše forum:Podpora fóra
Neposílejte logy do soukromých zpráv.Po dobu mé nepřítomnosti mě zastupuje memphisto , Žbeky a Orcus.
Pokud budete spokojeni , můžete podpořit naše forum:Podpora fóra
Re: prosim o kontrolu logu
ta slozka rei nejde smazat pise to ze je otevrena v nejakem programu, a log stoho programu aswMBR se mi nedari otevrit asi nemam nejaky program na otevreni
Re: prosim o kontrolu logu
Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 20:23:52, on 24.2.2014
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v11.0 (11.00.9600.16518)
Boot mode: Normal
Running processes:
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Windows\system32\taskhost.exe
C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe
C:\Program Files\Common Files\Java\Java Update\jusched.exe
C:\Program Files\AVAST Software\Avast\AvastUI.exe
C:\Program Files\NVIDIA Corporation\Update Core\NvBackend.exe
C:\Program Files\Skype\Phone\Skype.exe
C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
C:\Program Files\Seznam.cz\bin\postak.exe
C:\Program Files\DAEMON Tools Lite\DTLite.exe
C:\Program Files\Internet Explorer\IELowutil.exe
C:\Users\top\Desktop\HiJackThis.exe
C:\Windows\system32\DllHost.exe
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.seznam.cz/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/p/?LinkId=255141
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\PROGRA~1\MICROS~2\Office14\GROOVEEX.DLL
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll
O2 - BHO: avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll
O2 - BHO: URLRedirectionBHO - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\PROGRA~1\MICROS~2\Office14\URLREDIR.DLL
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll
O2 - BHO: Ukazatel S-Rank - {EA837F48-5AD1-443E-AE34-FFE03CBF3099} - C:\Program Files\Seznam.cz\bin\core.4.dll
O3 - Toolbar: Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll
O3 - Toolbar: avast! Online Security - {CC1A175A-E45B-41ED-A30C-C9B1D7A0C02F} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll
O4 - HKLM\..\Run: [BCSSync] "C:\Program Files\Microsoft Office\Office14\BCSSync.exe" /DelayServices
O4 - HKLM\..\Run: [RTHDVCPL] "C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe" -s
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Common Files\Java\Java Update\jusched.exe"
O4 - HKLM\..\Run: [DAEMON Tools Lite] "C:\Program Files\DAEMON Tools Lite\DTLite.exe" -autorun
O4 - HKLM\..\Run: [AvastUI.exe] "C:\Program Files\AVAST Software\Avast\AvastUI.exe" /nogui
O4 - HKLM\..\Run: [NvBackend] "C:\Program Files\NVIDIA Corporation\Update Core\NvBackend.exe"
O4 - HKLM\..\Run: [ShadowPlay] C:\Windows\system32\rundll32.exe C:\Windows\system32\nvspcap.dll,ShadowPlayOnSystemStart
O4 - HKCU\..\Run: [Skype] "C:\Program Files\Skype\Phone\Skype.exe" /minimized /regrun
O4 - HKCU\..\Run: [swg] "C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe"
O4 - HKCU\..\Run: [Seznam Postak] "C:\Program Files\Seznam.cz\bin\postak.exe" -s
O4 - HKCU\..\Run: [DAEMON Tools Lite] "C:\Program Files\DAEMON Tools Lite\DTLite.exe" -autorun
O4 - HKUS\S-1-5-18\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun (User 'Default user')
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office14\EXCEL.EXE/3000
O8 - Extra context menu item: Od&eslat do aplikace OneNote - res://C:\PROGRA~1\MICROS~2\Office14\ONBttnIE.dll/105
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - (no file)
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - (no file)
O9 - Extra button: Odeslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files\Microsoft Office\Office14\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: Od&eslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files\Microsoft Office\Office14\ONBttnIE.dll
O9 - Extra button: P&ropojené poznámky aplikace OneNote - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files\Microsoft Office\Office14\ONBttnIELinkedNotes.dll
O9 - Extra 'Tools' menuitem: P&ropojené poznámky aplikace OneNote - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files\Microsoft Office\Office14\ONBttnIELinkedNotes.dll
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O18 - Protocol: linkscanner - (no CLSID) - (no file)
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O18 - Filter hijack: text/xml - {807573E5-5146-11D5-A672-00B0D022E945} - C:\Program Files\Common Files\Microsoft Shared\OFFICE14\MSOXMLMF.DLL
O23 - Service: Služba Acronis Scheduler2 (AcrSch2Svc) - Acronis - C:\Program Files\Common Files\Acronis\Plán2\schedul2.exe
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: Acronis Nonstop Backup service (afcdpsrv) - Acronis - C:\Program Files\Common Files\Acronis\CDP\afcdpsrv.exe
O23 - Service: avast! Antivirus - AVAST Software - C:\Program Files\AVAST Software\Avast\AvastSvc.exe
O23 - Service: avast! Firewall - AVAST Software - C:\Program Files\AVAST Software\Avast\afwServ.exe
O23 - Service: Google Software Updater (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: LiveUpdate (LiveUpdateSvc) - IObit - C:\Program Files\IObit\LiveUpdate\LiveUpdate.exe
O23 - Service: NVIDIA Network Service (NvNetworkService) - NVIDIA Corporation - C:\Program Files\NVIDIA Corporation\NetService\NvNetworkService.exe
O23 - Service: NVIDIA Streamer Service (NvStreamSvc) - NVIDIA Corporation - C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
O23 - Service: NVIDIA Display Driver Service (nvsvc) - NVIDIA Corporation - C:\Windows\system32\nvvsvc.exe
O23 - Service: PnkBstrA - Unknown owner - C:\Windows\system32\PnkBstrA.exe
O23 - Service: Reimage Real Time Protection (ReimageRealTimeProtection) - Reimage® - C:\Program Files\Reimage\Reimage Repair\ReiGuard.exe
O23 - Service: ServiceLayer - Nokia - C:\Program Files\PC Connectivity Solution\ServiceLayer.exe
O23 - Service: Steam Client Service - Valve Corporation - C:\Program Files\Common Files\Steam\SteamService.exe
O23 - Service: NVIDIA Stereoscopic 3D Driver Service (Stereo Service) - NVIDIA Corporation - C:\Program Files\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
--
End of file - 7399 bytes pc ted jede perfekt je to ohodne lepsi ale ta slozka rei nejde odstranit ani po restartu
Scan saved at 20:23:52, on 24.2.2014
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v11.0 (11.00.9600.16518)
Boot mode: Normal
Running processes:
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Windows\system32\taskhost.exe
C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe
C:\Program Files\Common Files\Java\Java Update\jusched.exe
C:\Program Files\AVAST Software\Avast\AvastUI.exe
C:\Program Files\NVIDIA Corporation\Update Core\NvBackend.exe
C:\Program Files\Skype\Phone\Skype.exe
C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
C:\Program Files\Seznam.cz\bin\postak.exe
C:\Program Files\DAEMON Tools Lite\DTLite.exe
C:\Program Files\Internet Explorer\IELowutil.exe
C:\Users\top\Desktop\HiJackThis.exe
C:\Windows\system32\DllHost.exe
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.seznam.cz/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/p/?LinkId=255141
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\PROGRA~1\MICROS~2\Office14\GROOVEEX.DLL
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll
O2 - BHO: avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll
O2 - BHO: URLRedirectionBHO - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\PROGRA~1\MICROS~2\Office14\URLREDIR.DLL
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll
O2 - BHO: Ukazatel S-Rank - {EA837F48-5AD1-443E-AE34-FFE03CBF3099} - C:\Program Files\Seznam.cz\bin\core.4.dll
O3 - Toolbar: Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll
O3 - Toolbar: avast! Online Security - {CC1A175A-E45B-41ED-A30C-C9B1D7A0C02F} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll
O4 - HKLM\..\Run: [BCSSync] "C:\Program Files\Microsoft Office\Office14\BCSSync.exe" /DelayServices
O4 - HKLM\..\Run: [RTHDVCPL] "C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe" -s
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Common Files\Java\Java Update\jusched.exe"
O4 - HKLM\..\Run: [DAEMON Tools Lite] "C:\Program Files\DAEMON Tools Lite\DTLite.exe" -autorun
O4 - HKLM\..\Run: [AvastUI.exe] "C:\Program Files\AVAST Software\Avast\AvastUI.exe" /nogui
O4 - HKLM\..\Run: [NvBackend] "C:\Program Files\NVIDIA Corporation\Update Core\NvBackend.exe"
O4 - HKLM\..\Run: [ShadowPlay] C:\Windows\system32\rundll32.exe C:\Windows\system32\nvspcap.dll,ShadowPlayOnSystemStart
O4 - HKCU\..\Run: [Skype] "C:\Program Files\Skype\Phone\Skype.exe" /minimized /regrun
O4 - HKCU\..\Run: [swg] "C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe"
O4 - HKCU\..\Run: [Seznam Postak] "C:\Program Files\Seznam.cz\bin\postak.exe" -s
O4 - HKCU\..\Run: [DAEMON Tools Lite] "C:\Program Files\DAEMON Tools Lite\DTLite.exe" -autorun
O4 - HKUS\S-1-5-18\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun (User 'Default user')
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office14\EXCEL.EXE/3000
O8 - Extra context menu item: Od&eslat do aplikace OneNote - res://C:\PROGRA~1\MICROS~2\Office14\ONBttnIE.dll/105
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - (no file)
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - (no file)
O9 - Extra button: Odeslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files\Microsoft Office\Office14\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: Od&eslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files\Microsoft Office\Office14\ONBttnIE.dll
O9 - Extra button: P&ropojené poznámky aplikace OneNote - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files\Microsoft Office\Office14\ONBttnIELinkedNotes.dll
O9 - Extra 'Tools' menuitem: P&ropojené poznámky aplikace OneNote - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files\Microsoft Office\Office14\ONBttnIELinkedNotes.dll
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O18 - Protocol: linkscanner - (no CLSID) - (no file)
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O18 - Filter hijack: text/xml - {807573E5-5146-11D5-A672-00B0D022E945} - C:\Program Files\Common Files\Microsoft Shared\OFFICE14\MSOXMLMF.DLL
O23 - Service: Služba Acronis Scheduler2 (AcrSch2Svc) - Acronis - C:\Program Files\Common Files\Acronis\Plán2\schedul2.exe
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: Acronis Nonstop Backup service (afcdpsrv) - Acronis - C:\Program Files\Common Files\Acronis\CDP\afcdpsrv.exe
O23 - Service: avast! Antivirus - AVAST Software - C:\Program Files\AVAST Software\Avast\AvastSvc.exe
O23 - Service: avast! Firewall - AVAST Software - C:\Program Files\AVAST Software\Avast\afwServ.exe
O23 - Service: Google Software Updater (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: LiveUpdate (LiveUpdateSvc) - IObit - C:\Program Files\IObit\LiveUpdate\LiveUpdate.exe
O23 - Service: NVIDIA Network Service (NvNetworkService) - NVIDIA Corporation - C:\Program Files\NVIDIA Corporation\NetService\NvNetworkService.exe
O23 - Service: NVIDIA Streamer Service (NvStreamSvc) - NVIDIA Corporation - C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
O23 - Service: NVIDIA Display Driver Service (nvsvc) - NVIDIA Corporation - C:\Windows\system32\nvvsvc.exe
O23 - Service: PnkBstrA - Unknown owner - C:\Windows\system32\PnkBstrA.exe
O23 - Service: Reimage Real Time Protection (ReimageRealTimeProtection) - Reimage® - C:\Program Files\Reimage\Reimage Repair\ReiGuard.exe
O23 - Service: ServiceLayer - Nokia - C:\Program Files\PC Connectivity Solution\ServiceLayer.exe
O23 - Service: Steam Client Service - Valve Corporation - C:\Program Files\Common Files\Steam\SteamService.exe
O23 - Service: NVIDIA Stereoscopic 3D Driver Service (Stereo Service) - NVIDIA Corporation - C:\Program Files\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
--
End of file - 7399 bytes pc ted jede perfekt je to ohodne lepsi ale ta slozka rei nejde odstranit ani po restartu
- jaro3
- člen Security týmu
-
Guru Level 15
- Příspěvky: 43298
- Registrován: červen 07
- Bydliště: Jižní Čechy
- Pohlaví:
- Stav:
Offline
Re: prosim o kontrolu logu
Co je v té složce?
Při práci s programy HJT, ComboFix,MbAM, SDFix aj. zavřete všechny ostatní aplikace a prohlížeče!
Neposílejte logy do soukromých zpráv.Po dobu mé nepřítomnosti mě zastupuje memphisto , Žbeky a Orcus.
Pokud budete spokojeni , můžete podpořit naše forum:Podpora fóra
Neposílejte logy do soukromých zpráv.Po dobu mé nepřítomnosti mě zastupuje memphisto , Žbeky a Orcus.
Pokud budete spokojeni , můžete podpořit naše forum:Podpora fóra
Kdo je online
Uživatelé prohlížející si toto fórum: Seznam[Bot] a 5 hostů