100% využití cpu Vyřešeno

[tielk0007]

ComboFix 14-04-30.01 - Nekut Karel 04.05.2014 10:59:34.7.2 - x86
Microsoft® Windows Vista™ Home Premium 6.0.6002.2.1250.420.1029.18.3326.2439 [GMT 2:00]
Spuštěný z: c:\users\Nekut Karel\Downloads\ComboFix.exe
Použité ovládací přepínače :: c:\users\Nekut Karel\Desktop\CFScript.txt
AV: avast! Antivirus *Disabled/Updated* {2B2D1395-420B-D5C9-657E-930FE358FC3C}
SP: avast! Antivirus *Disabled/Updated* {904CF271-6431-DA47-5FCE-A87D98DFB681}
SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.
FILE ::
"c:\windows\inf\mncwettgv.vbe"
"c:\windows\Tasks\GoogleUpdateTaskMachineCore.job"
"c:\windows\Tasks\GoogleUpdateTaskMachineUA.job"
.
.
((((((((((((((((((((((((((((((((((((((( Ostatní výmazy )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
c:\program files\Google\Update
c:\program files\Google\Update\1.3.23.9\GoogleCrashHandler.exe
c:\program files\Google\Update\1.3.23.9\GoogleCrashHandler64.exe
c:\program files\Google\Update\1.3.23.9\GoogleUpdate.exe
c:\program files\Google\Update\1.3.23.9\GoogleUpdateBroker.exe
c:\program files\Google\Update\1.3.23.9\GoogleUpdateComRegisterShell64.exe
c:\program files\Google\Update\1.3.23.9\GoogleUpdateHelper.msi
c:\program files\Google\Update\1.3.23.9\GoogleUpdateOnDemand.exe
c:\program files\Google\Update\1.3.23.9\GoogleUpdateSetup.exe
c:\program files\Google\Update\1.3.23.9\goopdate.dll
c:\program files\Google\Update\1.3.23.9\goopdateres_am.dll
c:\program files\Google\Update\1.3.23.9\goopdateres_ar.dll
c:\program files\Google\Update\1.3.23.9\goopdateres_bg.dll
c:\program files\Google\Update\1.3.23.9\goopdateres_bn.dll
c:\program files\Google\Update\1.3.23.9\goopdateres_ca.dll
c:\program files\Google\Update\1.3.23.9\goopdateres_cs.dll
c:\program files\Google\Update\1.3.23.9\goopdateres_da.dll
c:\program files\Google\Update\1.3.23.9\goopdateres_de.dll
c:\program files\Google\Update\1.3.23.9\goopdateres_el.dll
c:\program files\Google\Update\1.3.23.9\goopdateres_en-GB.dll
c:\program files\Google\Update\1.3.23.9\goopdateres_en.dll
c:\program files\Google\Update\1.3.23.9\goopdateres_es-419.dll
c:\program files\Google\Update\1.3.23.9\goopdateres_es.dll
c:\program files\Google\Update\1.3.23.9\goopdateres_et.dll
c:\program files\Google\Update\1.3.23.9\goopdateres_fa.dll
c:\program files\Google\Update\1.3.23.9\goopdateres_fi.dll
c:\program files\Google\Update\1.3.23.9\goopdateres_fil.dll
c:\program files\Google\Update\1.3.23.9\goopdateres_fr.dll
c:\program files\Google\Update\1.3.23.9\goopdateres_gu.dll
c:\program files\Google\Update\1.3.23.9\goopdateres_hi.dll
c:\program files\Google\Update\1.3.23.9\goopdateres_hr.dll
c:\program files\Google\Update\1.3.23.9\goopdateres_hu.dll
c:\program files\Google\Update\1.3.23.9\goopdateres_id.dll
c:\program files\Google\Update\1.3.23.9\goopdateres_is.dll
c:\program files\Google\Update\1.3.23.9\goopdateres_it.dll
c:\program files\Google\Update\1.3.23.9\goopdateres_iw.dll
c:\program files\Google\Update\1.3.23.9\goopdateres_ja.dll
c:\program files\Google\Update\1.3.23.9\goopdateres_kn.dll
c:\program files\Google\Update\1.3.23.9\goopdateres_ko.dll
c:\program files\Google\Update\1.3.23.9\goopdateres_lt.dll
c:\program files\Google\Update\1.3.23.9\goopdateres_lv.dll
c:\program files\Google\Update\1.3.23.9\goopdateres_ml.dll
c:\program files\Google\Update\1.3.23.9\goopdateres_mr.dll
c:\program files\Google\Update\1.3.23.9\goopdateres_ms.dll
c:\program files\Google\Update\1.3.23.9\goopdateres_nl.dll
c:\program files\Google\Update\1.3.23.9\goopdateres_no.dll
c:\program files\Google\Update\1.3.23.9\goopdateres_pl.dll
c:\program files\Google\Update\1.3.23.9\goopdateres_pt-BR.dll
c:\program files\Google\Update\1.3.23.9\goopdateres_pt-PT.dll
c:\program files\Google\Update\1.3.23.9\goopdateres_ro.dll
c:\program files\Google\Update\1.3.23.9\goopdateres_ru.dll
c:\program files\Google\Update\1.3.23.9\goopdateres_sk.dll
c:\program files\Google\Update\1.3.23.9\goopdateres_sl.dll
c:\program files\Google\Update\1.3.23.9\goopdateres_sr.dll
c:\program files\Google\Update\1.3.23.9\goopdateres_sv.dll
c:\program files\Google\Update\1.3.23.9\goopdateres_sw.dll
c:\program files\Google\Update\1.3.23.9\goopdateres_ta.dll
c:\program files\Google\Update\1.3.23.9\goopdateres_te.dll
c:\program files\Google\Update\1.3.23.9\goopdateres_th.dll
c:\program files\Google\Update\1.3.23.9\goopdateres_tr.dll
c:\program files\Google\Update\1.3.23.9\goopdateres_uk.dll
c:\program files\Google\Update\1.3.23.9\goopdateres_ur.dll
c:\program files\Google\Update\1.3.23.9\goopdateres_vi.dll
c:\program files\Google\Update\1.3.23.9\goopdateres_zh-CN.dll
c:\program files\Google\Update\1.3.23.9\goopdateres_zh-TW.dll
c:\program files\Google\Update\1.3.23.9\npGoogleUpdate3.dll
c:\program files\Google\Update\1.3.23.9\psmachine.dll
c:\program files\Google\Update\1.3.23.9\psmachine_64.dll
c:\program files\Google\Update\1.3.23.9\psuser.dll
c:\program files\Google\Update\1.3.23.9\psuser_64.dll
c:\program files\Google\Update\Download\{430FD4D0-B729-4F61-AA34-91526481799D}\1.3.23.9\GoogleUpdateSetup.exe
c:\program files\Google\Update\Download\{4DC8B4CA-1BDA-483E-B5FA-D3C12E15B62D}\34.0.1847.131\34.0.1847.131_34.0.1847.116_chrome_updater.exe
c:\program files\Google\Update\GoogleUpdate.exe
.
.
((((((((((((((((((((((((((((((((((((((( Ovladače/Služby )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
-------\Service_gupdate
-------\Service_gupdatem
-------\Service_gupdate
-------\Service_gupdatem
.
.
((((((((((((((((((((((((( Soubory vytvořené od 2014-04-04 do 2014-05-04 )))))))))))))))))))))))))))))))
.
.
2014-05-04 09:09 . 2014-05-04 09:12 -------- d-----w- c:\users\Nekut Karel\AppData\Local\temp
2014-05-04 09:09 . 2014-05-04 09:09 -------- d-----w- c:\users\UpdatusUser\AppData\Local\temp
2014-05-04 09:09 . 2014-05-04 09:09 -------- d-----w- c:\users\Public\AppData\Local\temp
2014-05-04 09:09 . 2014-05-04 09:09 -------- d-----w- c:\users\Nekut\AppData\Local\temp
2014-05-04 09:09 . 2014-05-04 09:09 -------- d-----w- c:\users\Kája\AppData\Local\temp
2014-05-04 09:09 . 2014-05-04 09:09 -------- d-----w- c:\users\Default\AppData\Local\temp
2014-05-03 19:16 . 2014-05-03 19:16 -------- d-----w- C:\GOG Games
2014-05-02 21:25 . 2014-04-29 10:07 2382848 ----a-w- c:\windows\system32\mshtml.tlb
2014-05-02 14:50 . 2010-08-30 06:34 536576 ----a-w- c:\windows\system32\sqlite3.dll
2014-05-02 14:20 . 2014-04-17 03:32 8050496 ----a-w- c:\programdata\Microsoft\Windows Defender\Definition Updates\{FCA4121C-A2C0-435A-AEC1-F1BDAC3A5A08}\mpengine.dll
2014-04-26 18:13 . 2014-04-26 18:13 -------- d-----w- c:\users\Nekut Karel\AppData\Roaming\Godlike
2014-04-26 18:12 . 2014-04-26 18:12 -------- d-----w- c:\program files\WinTools Software
2014-04-26 07:52 . 2014-04-26 07:52 -------- d-----w- c:\users\Nekut Karel\AppData\Roaming\DarkSoulsII
2014-04-20 20:48 . 2014-04-20 20:48 -------- d-----w- c:\program files\GOG.com
2014-04-13 17:00 . 2014-04-13 17:00 -------- d-----w- c:\program files\PCDApp
2014-04-13 08:15 . 2014-04-13 08:15 -------- d-----w- c:\users\Nekut Karel\AppData\Local\Blizzard Entertainment
2014-04-13 08:15 . 2014-04-13 17:10 -------- d-----w- c:\users\Nekut Karel\AppData\Local\Battle.net
2014-04-13 08:15 . 2014-04-13 09:11 -------- d-----w- c:\users\Nekut Karel\AppData\Roaming\Battle.net
2014-04-13 08:14 . 2014-04-13 08:15 -------- d-----w- c:\program files\Common Files\Blizzard Entertainment
2014-04-12 12:46 . 2014-04-12 12:45 66872 ----a-w- c:\windows\system32\PnkBstrA.exe
2014-04-12 12:45 . 2014-04-28 18:53 22328 ----a-w- c:\windows\system32\drivers\PnkBstrK.sys
2014-04-12 12:45 . 2014-04-28 18:53 103736 ----a-w- c:\windows\system32\PnkBstrB.exe
2014-04-10 18:26 . 2014-04-10 18:26 -------- d-----w- c:\users\Nekut Karel\AppData\Local\Skype
2014-04-08 18:27 . 2014-04-08 18:47 -------- d-----w- c:\program files\NASCAR '14
2014-04-07 17:14 . 2014-04-07 17:14 -------- d-----w- c:\users\Nekut Karel\AppData\Roaming\Milestone
2014-04-07 17:02 . 2014-04-07 17:14 -------- d-----w- c:\program files\WRC 4 FIA World Rally Championship
.
.
.
(((((((((((((((((((((((((((((((((((((((( Find3M výpis ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2014-03-31 07:35 . 2010-08-12 09:56 231584 ------w- c:\windows\system32\MpSigStub.exe
2014-03-21 19:02 . 2014-03-21 19:02 724888 ----a-r- c:\users\Nekut Karel\AppData\Roaming\Microsoft\Installer\{31D472DE-C95E-4899-8AB5-42EFB500CFFA}\IconTmpl6.A961A077_4BD0_4C98_86BC_EE4A98CE550D.exe
2014-03-21 19:02 . 2014-03-21 19:02 212480 ----a-r- c:\users\Nekut Karel\AppData\Roaming\Microsoft\Installer\{31D472DE-C95E-4899-8AB5-42EFB500CFFA}\IconTmpl2.108DF49C_3AB4_4A7D_B6FD_8B6286B317FA.exe
2014-03-21 19:02 . 2014-03-21 19:02 2078096 ----a-r- c:\users\Nekut Karel\AppData\Roaming\Microsoft\Installer\{31D472DE-C95E-4899-8AB5-42EFB500CFFA}\IconTmpl4.A961A077_4BD0_4C98_86BC_EE4A98CE550D.exe
2014-02-13 12:46 . 2014-02-13 12:46 354656 ----a-w- c:\windows\system32\DivXControlPanelApplet.cpl
2014-02-08 08:35 . 2014-02-08 08:35 316888 ----a-w- c:\windows\system32\appdrvrem01.exe
2014-02-08 08:35 . 2014-02-08 08:35 2627760 ----a-w- c:\windows\system32\drivers\appdrv01.sys
2014-02-07 10:38 . 2014-03-13 16:53 2050560 ----a-w- c:\windows\system32\win32k.sys
2014-02-05 19:15 . 2013-12-11 17:15 692616 ----a-w- c:\windows\system32\FlashPlayerApp.exe
2014-02-05 19:15 . 2013-11-18 21:06 71048 ----a-w- c:\windows\system32\FlashPlayerCPLApp.cpl
2014-02-03 10:37 . 2014-03-13 16:53 505344 ----a-w- c:\windows\system32\qedit.dll
2013-02-08 14:34 . 2013-11-09 16:14 84 ----a-w- c:\program files\update-DragonAge.bat
2010-08-03 09:11 819200 --sha-w- c:\windows\System32\xvidcore.dll
2010-08-03 09:11 180224 --sha-w- c:\windows\System32\xvidvfw.dll
.
.
(((((((((((((((((((((((((((((((((( Spouštěcí body v registru )))))))))))))))))))))))))))))))))))))))))))))
.
.
*Poznámka* prázdné záznamy a legitimní výchozí údaje nejsou zobrazeny.
REGEDIT4
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\00avast]
@="{472083B0-C522-11CF-8763-00608CC02F24}"
[HKEY_CLASSES_ROOT\CLSID\{472083B0-C522-11CF-8763-00608CC02F24}]
2013-08-30 07:47 121968 ----a-w- c:\program files\AVAST Software\Avast\ashShell.dll
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"WMPNSCFG"="c:\program files\Windows Media Player\WMPNSCFG.exe" [2008-01-18 202240]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"avast"="c:\program files\AVAST Software\Avast\avastUI.exe" [2013-08-30 4858968]
"DivXMediaServer"="c:\program files\DivX\DivX Media Server\DivXMediaServer.exe" [2014-02-14 450560]
"NetFxUpdate_v1.1.4322"="c:\windows\Microsoft.NET\Framework\v1.1.4322\netfxupdate.exe" [2004-08-10 106496]
"DivXUpdate"="c:\program files\DivX\DivX Update\DivXUpdate.exe" [2014-01-10 1861968]
"seznam-listicka-distribuce"="c:\program files\Seznam.cz\distribution\szninstall.exe" [2013-05-16 1062472]
"QuickTime Task"="c:\program files\QuickTime\QTTask.exe" [2010-11-29 421888]
.
c:\users\Nekut Karel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\
CodeMeter Control Center.lnk - c:\program files\CodeMeter\Runtime\bin\CodeMeterCC.exe [2011-1-19 6871952]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"EnableUIADesktopToggle"= 0 (0x0)
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\drivers32]
"mixer3"=wdmaud.drv
.
[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\session manager]
BootExecute REG_MULTI_SZ \0
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WudfSvc]
@="Service"
.
[HKLM\~\startupfolder\C:^Users^Nekut Karel^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^MyPC Backup.lnk]
backupExtension=.Startup
backup=c:\windows\pss\MyPC Backup.lnk.Startup
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\amd_dc_opt]
2008-07-22 12:53 77824 ----a-w- c:\program files\AMD\Dual-Core Optimizer\amd_dc_opt.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\DAEMON Tools Lite]
2012-11-06 10:46 3673728 ----a-w- c:\program files\DAEMON Tools Lite\DTLite.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\EADM]
2014-03-22 15:22 3588952 ----a-w- c:\program files\Origin\Origin.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ehTray.exe]
2008-01-18 21:33 125952 ----a-w- c:\windows\ehome\ehtray.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Nvtmru]
2013-11-14 11:56 1028384 ----a-w- c:\program files\NVIDIA Corporation\NVIDIA Update Core\NvTmru.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\RtHDVCpl]
2010-04-30 15:24 9210400 ----a-w- c:\program files\Realtek\Audio\HDA\RtHDVCpl.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Sidebar]
2009-04-10 21:28 1233920 ----a-w- c:\program files\Windows Sidebar\sidebar.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Skype]
2014-02-10 15:46 20922016 ----a-r- c:\program files\Skype\Phone\Skype.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Start WingMan Profiler]
2010-06-14 23:10 153672 ----a-w- c:\program files\Logitech\Gaming Software\LWEMon.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SunJavaUpdateSched]
2013-03-12 05:32 253816 ----a-w- c:\program files\Common Files\Java\Java Update\jusched.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\TkBellExe]
2013-09-27 22:23 295512 ----a-w- c:\program files\Real\RealPlayer\Update\realsched.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\WinFast Schedule]
2009-03-11 16:22 2912256 ----a-w- c:\program files\WinFast\WFDTV\WFWIZ.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\WinFastDTV]
2009-10-02 13:17 90112 ----a-w- c:\program files\WinFast\WFDTV\DTVSchdl.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\WMPNSCFG]
2008-01-18 21:33 202240 ----a-w- c:\program files\Windows Media Player\wmpnscfg.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run-disabled]
"Microsoft Default Manager"="c:\program files\Microsoft\Search Enhancement Pack\Default Manager\DefMgr.exe" -resume
.
[HKEY_LOCAL_MACHINE\software\microsoft\security center\Svc\S-1-5-21-3175436897-955967646-652882917-1001]
"EnableNotificationsRef"=dword:00000001
.
R3 1394hub;1394 Enabled Hub;c:\windows\System32\svchost.exe [2008-01-18 21504]
.
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost]
LocalServiceAndNoImpersonation REG_MULTI_SZ FontCache
.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Svchost - NetSvcs
SearchIndexer
SearchIndexer
.
[HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{8A69D345-D564-463c-AFF1-A69D9E530F96}]
2014-05-01 10:03 1078088 ----a-w- c:\program files\Google\Chrome\Application\34.0.1847.131\Installer\chrmstp.exe
.
Obsah adresáře 'Naplánované úlohy'
.
2014-05-04 c:\windows\Tasks\Adobe Flash Player Updater.job
- c:\windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2013-11-18 19:15]
.
.
------- Doplňkový sken -------
.
uStart Page = hxxp://www.seznam.cz/?clid=13415
mStart Page = hxxp://www.google.com
uInternet Settings,ProxyOverride = 127.0.0.1:9421
IE: E&xportovať do programu Microsoft Excel - c:\progra~1\MI1933~1\OFFICE11\EXCEL.EXE/3000
IE: Search the Web
Trusted Zone: clonewarsadventures.com
Trusted Zone: freerealms.com
Trusted Zone: soe.com
Trusted Zone: sony.com
.
.
**************************************************************************
.
catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2014-05-04 11:11
Windows 6.0.6002 Service Pack 2 NTFS
.
skenování skrytých procesů ...
.
skenování skrytých položek 'Po spuštění' ...
.
skenování skrytých souborů ...
.
sken byl úspešně dokončen
skryté soubory: 0
.
**************************************************************************
.
[HKEY_LOCAL_MACHINE\system\ControlSet006\Services\npggsvc]
"ImagePath"="c:\windows\system32\GameMon.des -service"
.
--------------------- ZAMKNUTÉ KLÍČE V REGISTRU ---------------------
.
[HKEY_USERS\S-1-5-21-3175436897-955967646-652882917-1000\*"!~

**]
@Allowed: (Read) (RestrictedCode)
.
------------------------ Jiné spuštené procesy ------------------------
.
c:\program files\AVAST Software\Avast\AvastSvc.exe
c:\program files\Malwarebytes' Anti-Malware\mbamscheduler.exe
c:\program files\Malwarebytes' Anti-Malware\mbamservice.exe
c:\windows\system32\PnkBstrA.exe
c:\program files\PCDApp\dgen.exe
c:\program files\Malwarebytes' Anti-Malware\mbamgui.exe
c:\program files\RealNetworks\RealDownloader\rndlresolversvc.exe
c:\program files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
c:\program files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe
c:\program files\CodeMeter\Runtime\bin\CodeMeter.exe
c:\windows\system32\conime.exe
c:\program files\Windows Media Player\wmpnetwk.exe
c:\windows\system32\wbem\unsecapp.exe
.
**************************************************************************
.
Celkový čas: 2014-05-04 11:17:30 - počítač byl restartován
ComboFix-quarantined-files.txt 2014-05-04 09:17
ComboFix2.txt 2014-05-03 20:19
ComboFix3.txt 2013-11-29 16:14
ComboFix4.txt 2013-11-28 17:43
ComboFix5.txt 2014-05-04 08:57
.
Před spuštěním: Volných bajtů: 22 684 868 608
Po spuštění: Volných bajtů: 22 143 041 536
.
- - End Of File - - 7C7694EA0C4975889FEF3EC4E3007579
5C616939100B85E558DA92B899A0FC36















Logfile of Trend Micro HijackThis v2.0.5
Scan saved at 11:20:40, on 4.5.2014
Platform: Windows Vista SP2 (WinNT 6.00.1906)
MSIE: Internet Explorer v9.00 (9.00.8112.16545)

FIREFOX: 14.0.1 (en-US)
Boot mode: Normal

Running processes:
C:\Windows\system32\Dwm.exe
C:\Program Files\Malwarebytes' Anti-Malware\mbamgui.exe
C:\Windows\system32\taskeng.exe
C:\Program Files\AVAST Software\Avast\AvastUI.exe
C:\Program Files\DivX\DivX Update\DivXUpdate.exe
C:\Windows\system32\wbem\unsecapp.exe
C:\Windows\Explorer.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Users\Nekut Karel\Downloads\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.seznam.cz/?clid=13415
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page =
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = 127.0.0.1:9421
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
R3 - URLSearchHook: (no name) - - (no file)
O2 - BHO: Podpora odkazu pro Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: RealNetworks Download and Record Plugin for Internet Explorer - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\IE\rndlbrowserrecordplugin.dll
O2 - BHO: Search Helper - {6EBF7485-159F-4bff-A14F-B9E3AAC4465B} - C:\Program Files\Microsoft\Search Enhancement Pack\Search Helper\SEPsearchhelperie.dll
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll
O2 - BHO: avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll
O2 - BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Windows Live Messenger Companion Helper - {9FDDE16B-836F-4806-AB1F-1455CBEFF289} - C:\Program Files\Windows Live\Companion\companioncore.dll
O2 - BHO: Bing Bar BHO - {d2ce3e00-f94a-4740-988e-03dc2f38c34f} - C:\Program Files\MSN Toolbar\Platform\6.3.2348.0\npwinext.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll
O3 - Toolbar: @C:\Program Files\MSN Toolbar\Platform\6.3.2348.0\npwinext.dll,-100 - {8dcb7100-df86-4384-8842-8fa844297b3f} - C:\Program Files\MSN Toolbar\Platform\6.3.2348.0\npwinext.dll
O3 - Toolbar: avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll
O4 - HKLM\..\Run: [avast] "C:\Program Files\AVAST Software\Avast\avastUI.exe" /nogui
O4 - HKLM\..\Run: [DivXMediaServer] C:\Program Files\DivX\DivX Media Server\DivXMediaServer.exe
O4 - HKLM\..\Run: [NetFxUpdate_v1.1.4322] "C:\Windows\Microsoft.NET\Framework\v1.1.4322\netfxupdate.exe" 1 v1.1.4322 GAC + NI NID
O4 - HKLM\..\Run: [DivXUpdate] "C:\Program Files\DivX\DivX Update\DivXUpdate.exe" /CHECKNOW
O4 - HKLM\..\Run: [seznam-listicka-distribuce] "C:\Program Files\Seznam.cz\distribution\szninstall.exe" -s -d listicka 1 szn-software-listicka cz.seznam.software.autoupdate
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime
O4 - HKCU\..\Run: [WMPNSCFG] C:\Program Files\Windows Media Player\WMPNSCFG.exe
O4 - Startup: CodeMeter Control Center.lnk = C:\Program Files\CodeMeter\Runtime\bin\CodeMeterCC.exe
O8 - Extra context menu item: E&xportovať do programu Microsoft Excel - res://C:\PROGRA~1\MI1933~1\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: @C:\Program Files\Windows Live\Companion\companionlang.dll,-600 - {0000036B-C524-4050-81A0-243669A86B9F} - C:\Program Files\Windows Live\Companion\companioncore.dll
O9 - Extra button: @C:\Program Files\Windows Live\Writer\WindowsLiveWriterShortcuts.dll,-1004 - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra 'Tools' menuitem: @C:\Program Files\Windows Live\Writer\WindowsLiveWriterShortcuts.dll,-1003 - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra button: Skype Click to Call - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O9 - Extra button: Zdroje informácií - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MI1933~1\OFFICE11\REFIEBAR.DLL
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O12 - Plugin for .spop: C:\Program Files\Internet Explorer\Plugins\NPDocBox.dll
O15 - Trusted Zone: *.clonewarsadventures.com
O15 - Trusted Zone: *.freerealms.com
O15 - Trusted Zone: *.soe.com
O15 - Trusted Zone: *.sony.com
O16 - DPF: {0067DBFC-A752-458C-AE6E-B9C7E63D4824} (Detekce zařízení) - http://www.logitech.com/devicedetector/ ... tion32.cab
O18 - Protocol: linkscanner - (no CLSID) - (no file)
O18 - Protocol: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O18 - Protocol: wlpg - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} - C:\Program Files\Windows Live\Photo Gallery\AlbumDownloadProtocolHandler.dll
O22 - SharedTaskScheduler: Component Categories cache daemon - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\Windows\system32\browseui.dll
O23 - Service: avast! Antivirus - AVAST Software - C:\Program Files\AVAST Software\Avast\AvastSvc.exe
O23 - Service: CodeMeter Runtime Server (CodeMeter.exe) - WIBU-SYSTEMS AG - C:\Program Files\CodeMeter\Runtime\bin\CodeMeter.exe
O23 - Service: MBAMScheduler - Malwarebytes Corporation - C:\Program Files\Malwarebytes' Anti-Malware\mbamscheduler.exe
O23 - Service: MBAMService - Malwarebytes Corporation - C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe
O23 - Service: PnkBstrA - Unknown owner - C:\Windows\system32\PnkBstrA.exe
O23 - Service: Protect Monitor (ProtectMonitor) - Unknown owner - C:\Program Files\PCDApp\StartHelp.exe
O23 - Service: RealNetworks Downloader Resolver Service - Unknown owner - C:\Program Files\RealNetworks\RealDownloader\rndlresolversvc.exe
O23 - Service: Skype Updater (SkypeUpdate) - Skype Technologies - C:\Program Files\Skype\Updater\Updater.exe
O23 - Service: TunngleService - Tunngle.net GmbH - C:\Program Files\Tunngle\TnglCtrl.exe

--
End of file - 7374 bytes















aswMBR version 0.9.9.1771 Copyright(c) 2011 AVAST Software
Run date: 2014-05-04 12:05:21
-----------------------------
12:05:21.173 OS Version: Windows 6.0.6002 Service Pack 2
12:05:21.173 Number of processors: 2 586 0x6B02
12:05:21.175 ComputerName: NEKUTKAREL-PC UserName: Nekut Karel
12:05:25.329 Initialize success
12:05:26.360 AVAST engine defs: 14050400
12:05:30.470 Disk 0 (boot) \Device\Harddisk0\DR0 -> \Device\Ide\IdeDeviceP2T1L0-4
12:05:30.473 Disk 0 Vendor: ST3500320AS SD1A Size: 476940MB BusType: 3
12:05:30.567 Disk 0 MBR read successfully
12:05:30.569 Disk 0 MBR scan
12:05:30.573 Disk 0 Windows VISTA default MBR code
12:05:30.606 Disk 0 Partition 1 80 (A) 07 HPFS/NTFS NTFS 476938 MB offset 2048
12:05:30.702 Disk 0 scanning sectors +976771072
12:05:30.886 Disk 0 scanning C:\Windows\system32\drivers
12:06:07.763 Service scanning
12:06:32.659 Modules scanning
12:07:14.772 Disk 0 trace - called modules:
12:07:14.801 ntkrnlpa.exe CLASSPNP.SYS disk.sys acpi.sys hal.dll >>UNKNOWN [0xc27ed1f8]<<
12:07:14.805 1 nt!IofCallDriver -> \Device\Harddisk0\DR0[0xc36f7ac8]
12:07:15.226 3 CLASSPNP.SYS[bb9af8b3] -> nt!IofCallDriver -> [0xc2b53530]
12:07:15.233 5 acpi.sys[bb3216bc] -> nt!IofCallDriver -> \Device\Ide\IdeDeviceP2T1L0-4[0xc2b53030]
12:07:15.238 \Driver\atapi[0xc34f24c0] -> IRP_MJ_CREATE -> 0xc27ed1f8
12:07:20.540 AVAST engine scan C:\Windows
12:08:43.994 Disk 0 MBR has been saved successfully to "C:\Users\Nekut Karel\Desktop\MBR.dat"
12:08:44.002 The log file has been saved successfully to "C:\Users\Nekut Karel\Desktop\aswMBR.txt"

[Reklama]

[Orcus]

V HJT fixni:
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = 127.0.0.1:9421
R3 - URLSearchHook: (no name) - - (no file)

====================================================

ComboFix se odinstaluje takto:
Start-Spustit a zadej ComboFix /Uninstall

====================================================

Vyčisti systém CCleanerem

====================================================

Stáhni si zde DelFix
http://general-changelog-team.fr/fr/dow ... e/9-delfix

ulož si soubor na plochu.
Poklepáním na ikonu spusť nástroj Delfix.exe
( Ve Windows Vista, Windows 7 a 8, musíš spustit soubor pravým tlačítkem myši -> Spustit jako správce .
V hlavním menu, zkontroluj tyto možnosti - Odstranění dezinfekce nástrojů (Remove desinfection tools) – Vyčistit body obnovy (Purge System Restore)
Poté klikněte na tlačítko Spustit (Run) a nech nástroj dělat svoji práci

Poté se zpráva se otevře (DelFix.txt). Vlož celý obsah zprávy sem. Jinak je zpráva zde:
v C: \ DelFix.txt

====================================================

Co problémy?

[tielk0007]

Zdá se mi že problém je z cela vyřešen využití cpu při prohlížení internetových stránek nepřesáhne 10% ,.. to samé při prohlížení pc, složek atd.,...

Vše fixnuto a vyčištěno, přikládám log z Delfix:

# DelFix v10.7 - Logfile created 04/05/2014 at 20:11:23
# Updated 27/04/2014 by Xplode
# Username : Nekut Karel - NEKUTKAREL-PC
# Operating System : Windows Vista (TM) Home Premium Service Pack 2 (32 bits)

~ Removing disinfection tools ...

Deleted : C:\RSIT
Deleted : C:\32788R22FWJFW
Deleted : C:\AdwCleaner
Deleted : C:\Users\Nekut Karel\Desktop\RK_Quarantine
Deleted : C:\ComboFix.txt
Deleted : C:\Users\Nekut Karel\Desktop\adwcleaner.exe
Deleted : C:\Users\Nekut Karel\Desktop\log 2.txt
Deleted : C:\Users\Nekut Karel\Desktop\MBR.dat
Deleted : C:\Users\Nekut Karel\Desktop\RKreport[0]_D_05032014_112604.txt
Deleted : C:\Users\Nekut Karel\Downloads\HijackThis.exe
Deleted : C:\Users\Nekut Karel\Downloads\hijackthis.log
Deleted : HKLM\SOFTWARE\AdwCleaner
Deleted : HKLM\SOFTWARE\Swearware
Deleted : HKLM\SOFTWARE\TrendMicro\Hijackthis
Deleted : HKLM\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_ASWMBR

~ Cleaning system restore ...

Deleted : RP #1313 [Windows Update | 04/29/2014 16:10:33]
Deleted : RP #1314 [Windows Update | 05/02/2014 21:25:04]
Deleted : RP #1315 [Naplánovaný kontrolní bod | 05/03/2014 22:28:52]
Deleted : RP #1316 [Naplánovaný kontrolní bod | 05/04/2014 17:08:24]

New restore point created !

########## - EOF - ##########

[jaro3]

Pokud nejsou problémy , je to vše a můžeš dát vyřešeno , zelenou fajfku.