Prosím o kontrolu logu

[LuckyCharlie]

ComboFix 14-06-30.01 - Kájík ^^ 01.07.2014 8:57.4.2 - x86 MINIMAL
Microsoft Windows 7 Home Premium 6.1.7601.1.1250.420.1029.18.3583.2591 [GMT 2:00]
Spuštěný z: c:\users\Kájík ^^\Desktop\ComboFix.exe
Použité ovládací přepínače :: c:\users\Kájík ^^\Desktop\CFScript.txt
AV: Microsoft Security Essentials *Enabled/Updated* {641105E6-77ED-3F35-A304-765193BCB75F}
SP: Microsoft Security Essentials *Enabled/Updated* {DF70E402-51D7-30BB-99B4-4D23E83BFDE2}
SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
* Vytvořen nový Bod Obnovení
.
FILE ::
"c:\windows\AutoKMS.exe"
"c:\windows\system32\drivers\{1a147621-8c9a-4d6b-a557-6513a40d3207}Gt.sys"
"c:\windows\system32\drivers\{1a147621-8c9a-4d6b-a557-6513a40d3207}Gw.sys"
"c:\windows\system32\drivers\{1a147621-8c9a-4d6b-a557-6513a40d3207}w.sys"
"c:\windows\Tasks\GoogleUpdateTaskMachineCore.job"
"c:\windows\Tasks\GoogleUpdateTaskMachineUA.job"
.
.
((((((((((((((((((((((((((((((((((((((( Ostatní výmazy )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
c:\program files\Google\Update
c:\program files\Google\Update\1.3.24.15\GoogleCrashHandler.exe
c:\program files\Google\Update\1.3.24.15\GoogleCrashHandler64.exe
c:\program files\Google\Update\1.3.24.15\GoogleUpdate.exe
c:\program files\Google\Update\1.3.24.15\GoogleUpdateBroker.exe
c:\program files\Google\Update\1.3.24.15\GoogleUpdateComRegisterShell64.exe
c:\program files\Google\Update\1.3.24.15\GoogleUpdateHelper.msi
c:\program files\Google\Update\1.3.24.15\GoogleUpdateOnDemand.exe
c:\program files\Google\Update\1.3.24.15\GoogleUpdateSetup.exe
c:\program files\Google\Update\1.3.24.15\goopdate.dll
c:\program files\Google\Update\1.3.24.15\goopdateres_am.dll
c:\program files\Google\Update\1.3.24.15\goopdateres_ar.dll
c:\program files\Google\Update\1.3.24.15\goopdateres_bg.dll
c:\program files\Google\Update\1.3.24.15\goopdateres_bn.dll
c:\program files\Google\Update\1.3.24.15\goopdateres_ca.dll
c:\program files\Google\Update\1.3.24.15\goopdateres_cs.dll
c:\program files\Google\Update\1.3.24.15\goopdateres_da.dll
c:\program files\Google\Update\1.3.24.15\goopdateres_de.dll
c:\program files\Google\Update\1.3.24.15\goopdateres_el.dll
c:\program files\Google\Update\1.3.24.15\goopdateres_en-GB.dll
c:\program files\Google\Update\1.3.24.15\goopdateres_en.dll
c:\program files\Google\Update\1.3.24.15\goopdateres_es-419.dll
c:\program files\Google\Update\1.3.24.15\goopdateres_es.dll
c:\program files\Google\Update\1.3.24.15\goopdateres_et.dll
c:\program files\Google\Update\1.3.24.15\goopdateres_fa.dll
c:\program files\Google\Update\1.3.24.15\goopdateres_fi.dll
c:\program files\Google\Update\1.3.24.15\goopdateres_fil.dll
c:\program files\Google\Update\1.3.24.15\goopdateres_fr.dll
c:\program files\Google\Update\1.3.24.15\goopdateres_gu.dll
c:\program files\Google\Update\1.3.24.15\goopdateres_hi.dll
c:\program files\Google\Update\1.3.24.15\goopdateres_hr.dll
c:\program files\Google\Update\1.3.24.15\goopdateres_hu.dll
c:\program files\Google\Update\1.3.24.15\goopdateres_id.dll
c:\program files\Google\Update\1.3.24.15\goopdateres_is.dll
c:\program files\Google\Update\1.3.24.15\goopdateres_it.dll
c:\program files\Google\Update\1.3.24.15\goopdateres_iw.dll
c:\program files\Google\Update\1.3.24.15\goopdateres_ja.dll
c:\program files\Google\Update\1.3.24.15\goopdateres_kn.dll
c:\program files\Google\Update\1.3.24.15\goopdateres_ko.dll
c:\program files\Google\Update\1.3.24.15\goopdateres_lt.dll
c:\program files\Google\Update\1.3.24.15\goopdateres_lv.dll
c:\program files\Google\Update\1.3.24.15\goopdateres_ml.dll
c:\program files\Google\Update\1.3.24.15\goopdateres_mr.dll
c:\program files\Google\Update\1.3.24.15\goopdateres_ms.dll
c:\program files\Google\Update\1.3.24.15\goopdateres_nl.dll
c:\program files\Google\Update\1.3.24.15\goopdateres_no.dll
c:\program files\Google\Update\1.3.24.15\goopdateres_pl.dll
c:\program files\Google\Update\1.3.24.15\goopdateres_pt-BR.dll
c:\program files\Google\Update\1.3.24.15\goopdateres_pt-PT.dll
c:\program files\Google\Update\1.3.24.15\goopdateres_ro.dll
c:\program files\Google\Update\1.3.24.15\goopdateres_ru.dll
c:\program files\Google\Update\1.3.24.15\goopdateres_sk.dll
c:\program files\Google\Update\1.3.24.15\goopdateres_sl.dll
c:\program files\Google\Update\1.3.24.15\goopdateres_sr.dll
c:\program files\Google\Update\1.3.24.15\goopdateres_sv.dll
c:\program files\Google\Update\1.3.24.15\goopdateres_sw.dll
c:\program files\Google\Update\1.3.24.15\goopdateres_ta.dll
c:\program files\Google\Update\1.3.24.15\goopdateres_te.dll
c:\program files\Google\Update\1.3.24.15\goopdateres_th.dll
c:\program files\Google\Update\1.3.24.15\goopdateres_tr.dll
c:\program files\Google\Update\1.3.24.15\goopdateres_uk.dll
c:\program files\Google\Update\1.3.24.15\goopdateres_ur.dll
c:\program files\Google\Update\1.3.24.15\goopdateres_vi.dll
c:\program files\Google\Update\1.3.24.15\goopdateres_zh-CN.dll
c:\program files\Google\Update\1.3.24.15\goopdateres_zh-TW.dll
c:\program files\Google\Update\1.3.24.15\npGoogleUpdate3.dll
c:\program files\Google\Update\1.3.24.15\psmachine.dll
c:\program files\Google\Update\1.3.24.15\psmachine_64.dll
c:\program files\Google\Update\1.3.24.15\psuser.dll
c:\program files\Google\Update\1.3.24.15\psuser_64.dll
c:\program files\Google\Update\Download\{8A69D345-D564-463C-AFF1-A69D9E530F96}\35.0.1916.153\35.0.1916.153_chrome_installer.exe
c:\program files\Google\Update\GoogleUpdate.exe
c:\program files\Google\Update\Install\{0D4019AE-CD41-4F62-986D-FF7538159B1C}\35.0.1916.153_chrome_installer.exe
c:\program files\Skype\Updater
c:\program files\Skype\Updater\Updater.dll
c:\program files\Skype\Updater\Updater.exe
.
.
((((((((((((((((((((((((((((((((((((((( Ovladače/Služby )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
-------\Legacy_{1A147621-8C9A-4D6B-A557-6513A40D3207}GT
-------\Legacy_{1A147621-8C9A-4D6B-A557-6513A40D3207}GW
-------\Legacy_{1A147621-8C9A-4D6B-A557-6513A40D3207}W
-------\Service_{1a147621-8c9a-4d6b-a557-6513a40d3207}Gt
-------\Service_{1a147621-8c9a-4d6b-a557-6513a40d3207}Gw
-------\Service_{1a147621-8c9a-4d6b-a557-6513a40d3207}w
-------\Service_SkypeUpdate
-------\Service_gupdate
-------\Service_gupdatem
-------\Service_gupdate
-------\Service_gupdatem
.
.
((((((((((((((((((((((((( Soubory vytvořené od 2014-06-01 do 2014-07-01 )))))))))))))))))))))))))))))))
.
.
2014-07-01 07:11 . 2014-07-01 07:11 39464 ----a-w- c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\{B0ACF116-F39D-4829-A019-8C7843B13B7B}\MpKslf0cca367.sys
2014-06-30 17:39 . 2014-06-30 17:39 -------- d-----w- c:\programdata\AlawarEntertainment
2014-06-30 17:19 . 2014-06-30 17:19 -------- d-----w- c:\program files\Alawar.cs
2014-06-30 15:24 . 2014-06-05 10:54 8140904 ----a-w- c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\{B0ACF116-F39D-4829-A019-8C7843B13B7B}\mpengine.dll
2014-06-29 07:17 . 2014-06-05 10:54 8140904 ----a-w- c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\Backup\mpengine.dll
2014-06-28 19:24 . 2014-06-29 08:41 -------- d-----w- c:\users\Kájík ^^\AppData\Roaming\TOMI2.THE GATES OF FATE
2014-06-28 19:23 . 2014-06-28 19:23 -------- d-----w- c:\users\Kájík ^^\AppData\Local\AlawarWrapper
2014-06-28 19:04 . 2014-06-30 17:39 -------- d-----w- c:\programdata\AlawarWrapper
2014-06-25 06:18 . 2014-05-02 03:47 765968 ------w- c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\{50AE00B7-C7A0-43FB-BEC9-DF962C7AC973}\gapaengine.dll
2014-06-18 19:28 . 2014-06-19 14:23 26624 ----a-w- c:\windows\system32\drivers\TrueSight.sys
2014-06-18 19:28 . 2014-06-18 19:28 -------- d-----w- c:\programdata\RogueKiller
2014-06-18 16:26 . 2014-06-18 16:27 -------- d-----w- c:\program files\Google
2014-06-18 14:02 . 2014-06-18 14:02 -------- d-----w- c:\windows\ERUNT
2014-06-17 19:43 . 2014-06-18 20:22 110296 ----a-w- c:\windows\system32\drivers\MBAMSwissArmy.sys
2014-06-17 19:43 . 2014-06-17 19:43 -------- d-----w- c:\program files\Malwarebytes Anti-Malware
2014-06-17 19:43 . 2014-06-17 19:43 -------- d-----w- c:\programdata\Malwarebytes
2014-06-17 19:43 . 2014-05-12 05:26 51928 ----a-w- c:\windows\system32\drivers\mwac.sys
2014-06-17 19:43 . 2014-05-12 05:25 74456 ----a-w- c:\windows\system32\drivers\mbamchameleon.sys
2014-06-17 19:43 . 2014-05-12 05:25 23256 ----a-w- c:\windows\system32\drivers\mbam.sys
2014-06-17 18:53 . 2010-08-30 06:34 536576 ----a-w- c:\windows\system32\sqlite3.dll
2014-06-17 18:52 . 2014-06-18 19:19 -------- d-----w- C:\AdwCleaner
2014-06-17 15:54 . 2014-06-17 15:54 -------- d-----w- c:\program files\Common Files\Java
2014-06-17 15:54 . 2014-06-17 15:54 96680 ----a-w- c:\windows\system32\WindowsAccessBridge.dll
2014-06-17 15:16 . 2014-06-17 15:16 -------- d-----w- c:\users\Kájík ^^\AppData\Local\MegaMeerkat
2014-06-17 12:59 . 2014-06-17 13:01 -------- d-----w- c:\users\Kájík ^^\AppData\Local\The_Sun_And_Moon_SOURCE
2014-06-17 11:13 . 2014-06-17 11:13 -------- d-----w- c:\users\Kájík ^^\AppData\Roaming\SPORE
2014-06-09 12:23 . 2014-06-05 12:12 52920 ----a-w- c:\windows\system32\drivers\{1a147621-8c9a-4d6b-a557-6513a40d3207}w.sys
2014-06-08 18:52 . 2014-06-18 13:04 -------- d-----w- c:\users\Kájík ^^\AppData\Local\5846
2014-06-08 16:57 . 2014-06-08 16:57 -------- d-----w- c:\users\Kájík ^^\AppData\Roaming\StunlockStudios
2014-06-06 18:21 . 2014-06-06 18:21 -------- d-----w- c:\program files\Common Files\Skype
.
.
.
(((((((((((((((((((((((((((((((((((((((( Find3M výpis ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2014-05-14 19:33 . 2012-03-30 03:43 70832 ----a-w- c:\windows\system32\FlashPlayerCPLApp.cpl
2014-05-14 19:33 . 2012-03-30 03:43 692400 ----a-w- c:\windows\system32\FlashPlayerApp.exe
2014-05-14 19:33 . 2014-05-14 19:32 17938608 ----a-w- c:\windows\system32\FlashPlayerInstaller.exe
2014-05-02 03:47 . 2014-02-18 07:14 765968 ------w- c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\NISBackup\gapaengine.dll
2014-04-24 10:30 . 2014-04-25 04:33 52920 ----a-w- c:\windows\system32\drivers\{1a147621-8c9a-4d6b-a557-6513a40d3207}Gw.sys
2014-04-24 10:30 . 2014-05-03 12:16 55224 ----a-w- c:\windows\system32\drivers\{1a147621-8c9a-4d6b-a557-6513a40d3207}Gt.sys
2014-04-15 00:34 . 2014-04-15 00:34 1070232 ----a-w- c:\windows\system32\MSCOMCTL.OCX
2014-04-12 02:15 . 2014-05-14 04:41 67520 ----a-w- c:\windows\system32\drivers\ksecdd.sys
2014-04-12 02:15 . 2014-05-14 04:41 136640 ----a-w- c:\windows\system32\drivers\ksecpkg.sys
2014-04-12 02:12 . 2014-05-14 04:41 100352 ----a-w- c:\windows\system32\sspicli.dll
2014-04-12 02:12 . 2014-05-14 04:41 15872 ----a-w- c:\windows\system32\sspisrv.dll
2014-04-12 02:12 . 2014-05-14 04:41 22016 ----a-w- c:\windows\system32\secur32.dll
2014-04-12 02:11 . 2014-05-14 04:41 1059840 ----a-w- c:\windows\system32\lsasrv.dll
2014-04-12 02:11 . 2014-05-14 04:41 22528 ----a-w- c:\windows\system32\lsass.exe
.
.
(((((((((((((((((((((((((((((((((((((((((((( Look )))))))))))))))))))))))))))))))))))))))))))))))))))))))))
.
---- Directory of c:\programdata\{01BD4FC9-2F86-4706-A62E-774BB7E9D308} ----
.
2014-05-27 14:04 . 2014-05-27 14:04 93618176 ----a-w- c:\programdata\{01BD4FC9-2F86-4706-A62E-774BB7E9D308}\{D3742F82-1C1A-4DCC-ABBD-0E831C0185CC}.msi
.
---- Directory of c:\users\Kájík ^^\AppData\Local\5846 ----
.
2014-06-08 18:52 . 2014-06-18 12:47 2053 ----a-w- c:\users\Kájík ^^\AppData\Local\5846\Updater.xml
2014-06-08 18:52 . 2014-06-08 18:52 1 ----a-w- c:\users\Kájík ^^\AppData\Local\5846\status.cfg
.
.
(((((((((((((((((((((((((((((((((( Spouštěcí body v registru )))))))))))))))))))))))))))))))))))))))))))))
.
.
*Poznámka* prázdné záznamy a legitimní výchozí údaje nejsou zobrazeny.
REGEDIT4
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ SkyDrivePro1 (ErrorConflict)]
@="{8BA85C75-763B-4103-94EB-9470F12FE0F7}"
[HKEY_CLASSES_ROOT\CLSID\{8BA85C75-763B-4103-94EB-9470F12FE0F7}]
2014-05-14 06:15 1730264 ----a-w- c:\progra~1\MICROS~2\Office15\GROOVEEX.DLL
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ SkyDrivePro2 (SyncInProgress)]
@="{CD55129A-B1A1-438E-A425-CEBC7DC684EE}"
[HKEY_CLASSES_ROOT\CLSID\{CD55129A-B1A1-438E-A425-CEBC7DC684EE}]
2014-05-14 06:15 1730264 ----a-w- c:\progra~1\MICROS~2\Office15\GROOVEEX.DLL
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ SkyDrivePro3 (InSync)]
@="{E768CD3B-BDDC-436D-9C13-E1B39CA257B1}"
[HKEY_CLASSES_ROOT\CLSID\{E768CD3B-BDDC-436D-9C13-E1B39CA257B1}]
2014-05-14 06:15 1730264 ----a-w- c:\progra~1\MICROS~2\Office15\GROOVEEX.DLL
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"DAEMON Tools Lite"="c:\program files\DAEMON Tools Lite\DTLite.exe" [2013-01-08 3674320]
"BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}"="c:\program files\Common Files\Ahead\Lib\NMBgMonitor.exe" [2007-03-12 153136]
"uTorrent"="c:\users\Kájík ^^\AppData\Roaming\uTorrent\uTorrent.exe" [2014-04-29 1270352]
"WebcamMaxAutoRun"="c:\program files\WebcamMax\wcmmon.exe" [2011-07-17 1038848]
"Skype"="c:\program files\Skype\Phone\Skype.exe" [2014-05-08 21444224]
"EADM"="c:\program files\Origin\Origin.exe" [2014-05-09 3588952]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"RaidCall"="c:\karlos\Programy\RaidCall\raidcall.exe" [2012-03-28 2596536]
"Nvtmru"="c:\program files\NVIDIA Corporation\NVIDIA Update Core\nvtmru.exe" [2013-11-08 1028384]
"BCSSync"="c:\program files\Microsoft Office\Office14\BCSSync.exe" [2012-11-05 89184]
"ShadowPlay"="c:\windows\system32\nvspcap.dll" [2013-11-08 955168]
"MSC"="c:\program files\Microsoft Security Client\msseces.exe" [2014-03-11 951576]
"SunJavaUpdateSched"="c:\program files\Common Files\Java\Java Update\jusched.exe" [2014-05-07 256896]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorAdmin"= 5 (0x5)
"ConsentPromptBehaviorUser"= 3 (0x3)
"EnableUIADesktopToggle"= 0 (0x0)
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MsMpSvc]
@="Service"
.
[HKLM\~\startupfolder\C:^Users^Kájík ^^^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^hamachi.lnk]
path=c:\users\Kájík ^^\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\hamachi.lnk
backup=c:\windows\pss\hamachi.lnk.Startup
backupExtension=.Startup
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\APSDaemon]
2012-10-11 20:56 59280 ----a-w- c:\program files\Common Files\Apple\Apple Application Support\APSDaemon.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NokiaSuite.exe]
2013-10-02 19:28 1090912 ----a-w- c:\program files\Nokia\Nokia Suite\NokiaSuite.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run-]
"Adobe ARM"="c:\program files\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
"SunJavaUpdateSched"="c:\program files\Common Files\Java\Java Update\jusched.exe"
"QuickTime Task"="c:\program files\QuickTime\QTTask.exe" -atboottime
"CmPCIaudio"=RunDll32 CMICNFG3.cpl,CMICtrlWnd
"BCSSync"="c:\program files\Microsoft Office\Office14\BCSSync.exe" /DelayServices
"PAC7302_Monitor"=c:\windows\PixArt\PAC7302\Monitor.exe
"NeroFilterCheck"=c:\program files\Common Files\Ahead\Lib\NeroCheck.exe
.
R2 2db04d42;Browser Stabilizer;c:\windows\system32\rundll32.exe [2009-07-14 44544]
R2 MBAMService;MBAMService;c:\program files\Malwarebytes Anti-Malware\mbamservice.exe [2014-05-12 860472]
R3 IEEtwCollectorService;Internet Explorer ETW Collector Service;c:\windows\system32\IEEtwCollector.exe [2014-05-30 108032]
R3 MBAMWebAccessControl;MBAMWebAccessControl;c:\windows\system32\drivers\mwac.sys [2014-05-12 51928]
R3 SCREAMINGBDRIVER;Screaming Bee Audio;c:\windows\system32\drivers\ScreamingBAudio.sys [2010-07-01 34896]
R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys [2010-11-20 52224]
R3 WatAdminSvc;Služba Technologie aktivace Windows;c:\windows\system32\Wat\WatAdminSvc.exe [2012-03-15 1343400]
S0 sptd;sptd;c:\windows\\SystemRoot\System32\Drivers\sptd.sys [x]
S1 dtsoftbus01;DAEMON Tools Virtual Bus Driver;c:\windows\system32\DRIVERS\dtsoftbus01.sys [2013-02-05 242240]
S1 MpKslf0cca367;MpKslf0cca367;c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\{B0ACF116-F39D-4829-A019-8C7843B13B7B}\MpKslf0cca367.sys [2014-07-01 39464]
S2 NisDrv;Microsoft Network Inspection System;c:\windows\system32\DRIVERS\NisDrvWFP.sys [2014-03-11 104264]
S2 NvStreamSvc;NVIDIA Streamer Service;c:\program files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [2013-11-08 14652704]
S2 Stereo Service;NVIDIA Stereoscopic 3D Driver Service;c:\program files\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe [2013-10-23 414496]
S2 TeamViewer9;TeamViewer 9;c:\program files\TeamViewer\Version9\TeamViewer_Service.exe [2013-12-04 5316448]
S2 WCMVCAM;WebcamMax, WDM Video Capture;c:\windows\system32\DRIVERS\wcmvcam.sys [2012-04-15 1068216]
S3 CamSuiteVAC;CamSuite Virtual Audio;c:\windows\system32\DRIVERS\CamSuiteVAC.sys [2008-09-19 37560]
S3 MBAMProtector;MBAMProtector;c:\windows\system32\drivers\mbam.sys [2014-05-12 23256]
S3 NisSrv;Kontrola sítě Microsoft;c:\program files\Microsoft Security Client\NisSrv.exe [2014-03-11 279776]
S3 nvvad_WaveExtensible;NVIDIA Virtual Audio Device (Wave Extensible) (WDM);c:\windows\system32\drivers\nvvad32v.sys [2013-09-27 33568]
S3 RTL8167;Realtek 8167 NT Driver;c:\windows\system32\DRIVERS\Rt86win7.sys [2011-06-10 394856]
.
.
--- Ostatní služby/ovladače v paměti ---
.
*NewlyCreated* - MPKSLF0CCA367
.
[HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{8A69D345-D564-463c-AFF1-A69D9E530F96}]
2014-06-18 16:27 1091912 ----a-w- c:\program files\Google\Chrome\Application\35.0.1916.153\Installer\chrmstp.exe
.
Obsah adresáře 'Naplánované úlohy'
.
2014-07-01 c:\windows\Tasks\Adobe Flash Player Updater.job
- c:\windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2012-03-30 19:33]
.
.
------- Doplňkový sken -------
.
uStart Page = hxxp://www.google.com
mStart Page = hxxp://www.google.com
IE: E&xportovat do aplikace Microsoft Excel - c:\progra~1\MICROS~2\Office14\EXCEL.EXE/3000
IE: E&xportovat do Microsoft Excelu - c:\progra~1\MICROS~2\Office15\EXCEL.EXE/3000
IE: Od&eslat do aplikace OneNote - c:\progra~1\MICROS~2\Office14\ONBttnIE.dll/105
IE: Od&eslat do OneNotu - c:\progra~1\MICROS~2\Office15\ONBttnIE.dll/105
IE: {{77F665FD-3F60-4B0A-AE14-EC124B7A7FCE} - c:\program files\ICQ7.7\ICQ.exe
FF - ProfilePath -
.
.
--------------------- ZAMKNUTÉ KLÍČE V REGISTRU ---------------------
.
[HKEY_USERS\S-1-5-21-3389663500-2208976189-3857907485-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.*%*2*0*A*l*e*s*s*o*%*2*0*-*%*2*0*I*f*%*2*0*I*ë·'f\OpenWithList]
@Class="Shell"
"a"="vlc.exe"
"MRUList"="a"
.
[HKEY_USERS\S-1-5-21-3389663500-2208976189-3857907485-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.*m*p*3*jí&\OpenWithList]
@Class="Shell"
"a"="vlc.exe"
"MRUList"="a"
.
[HKEY_USERS\S-1-5-21-3389663500-2208976189-3857907485-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.*,.]
@Class="Shell"
.
[HKEY_USERS\S-1-5-21-3389663500-2208976189-3857907485-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.*,.\OpenWithList]
@Class="Shell"
"a"="vlc.exe"
"MRUList"="a"
.
[HKEY_USERS\S-1-5-21-3389663500-2208976189-3857907485-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.*†GŤ/f€*€˙˙]
@Class="Shell"
.
[HKEY_USERS\S-1-5-21-3389663500-2208976189-3857907485-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.*†GŤ/f€*€˙˙\OpenWithList]
@Class="Shell"
"a"="vlc.exe"
"MRUList"="a"
.
[HKEY_USERS\S-1-5-21-3389663500-2208976189-3857907485-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\RecentDocs\.*,.]
@Allowed: (Read) (RestrictedCode)
"0"=hex:66,69,6c,65,3a,2f,2f,2f,43,3a,2f,55,73,65,72,73,2f,4b,25,43,33,25,41,
31,6a,25,43,33,25,41,44,6b,25,32,30,25,35,45,25,35,45,2f,44,65,73,6b,74,6f,\
"MRUListEx"=hex:00,00,00,00,ff,ff,ff,ff
.
[HKEY_USERS\S-1-5-21-3389663500-2208976189-3857907485-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\RecentDocs\.*†GŤ/f€*€˙˙]
@Allowed: (Read) (RestrictedCode)
"0"=hex:66,69,6c,65,3a,2f,2f,2f,43,3a,2f,55,73,65,72,73,2f,4b,25,43,33,25,41,
31,6a,25,43,33,25,41,44,6b,25,32,30,25,35,45,25,35,45,2f,44,65,73,6b,74,6f,\
"MRUListEx"=hex:00,00,00,00,ff,ff,ff,ff
.
[HKEY_USERS\S-1-5-21-3389663500-2208976189-3857907485-1000\Software\SecuROM\License information*]
"datasecu"=hex:ff,af,e8,0b,a4,e1,e3,4b,29,64,0f,61,43,4e,bd,16,41,84,cb,22,fd,
d3,1b,a2,c5,36,77,72,58,8a,54,ab,f2,f1,c0,37,39,92,02,87,10,24,08,41,14,eb,\
"rkeysecu"=hex:4b,18,35,05,0b,c8,96,ce,2d,2e,3e,86,30,e0,3c,95
.
[HKEY_USERS\S-1-5-21-3389663500-2208976189-3857907485-1004\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.*m*p*3*jí&\OpenWithList]
"a"="vlc.exe"
"MRUList"="a"
.
------------------------ Jiné spuštené procesy ------------------------
.
c:\windows\system32\nvvsvc.exe
c:\program files\Microsoft Security Client\MsMpEng.exe
c:\program files\NVIDIA Corporation\Display\nvxdsync.exe
c:\windows\system32\nvvsvc.exe
c:\windows\system32\taskhost.exe
c:\program files\Common Files\Adobe\ARM\1.0\armsvc.exe
c:\program files\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
c:\windows\system32\PnkBstrA.exe
c:\program files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
c:\program files\NVIDIA Corporation\Display\nvtray.exe
c:\program files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe
c:\windows\servicing\TrustedInstaller.exe
c:\windows\system32\conhost.exe
c:\windows\system32\conhost.exe
c:\program files\Microsoft Office\Office15\MsoSync.exe
c:\windows\system32\sppsvc.exe
c:\program files\Windows Media Player\wmpnetwk.exe
.
**************************************************************************
.
Celkový čas: 2014-07-01 09:16:20 - počítač byl restartován
ComboFix-quarantined-files.txt 2014-07-01 07:16
ComboFix2.txt 2014-06-30 14:58
ComboFix3.txt 2014-06-19 18:34
ComboFix4.txt 2014-02-02 15:40
.
Před spuštěním: Volných bajtů: 144 021 176 320
Po spuštění: Volných bajtů: 144 323 694 592
.
- - End Of File - - 9F354886FFA96021CA51B214F70B603E
A36C5E4F47E84449FF07ED3517B43A31

[Reklama]

[jaro3]

Odinstaluj:
Browser Stabilizer (obsahuje Adware)

Zavři ostatní aplikace a prohlížeče, odpoj se od netu a fixni v HJT:
Návod

Kód: Vybrat vše

R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
R3 - URLSearchHook: (no name) - {09900DE8-1DCA-443F-9243-26FF581438AF} - (no file)
O2 - BHO: (no name) - {C9C42510-9B41-42c1-9DCD-7282A2D07C61}C - (no file)
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Common Files\Java\Java Update\jusched.exe"
O4 - HKCU\..\Run: [uTorrent] "C:\Users\Kájík ^^\AppData\Roaming\uTorrent\uTorrent.exe" /MINIMIZED
O4 - HKUS\S-1-5-21-3389663500-2208976189-3857907485-1004\..\Run: [Facebook Update] "C:\Users\Kájík ^^\AppData\Local\Facebook\Update\FacebookUpdate.exe" /c /nocrashserver (User 'UpdatusUser')
O4 - HKUS\S-1-5-21-3389663500-2208976189-3857907485-1004\..\Run: [Google Update] "C:\Users\Kájík ^^\AppData\Local\Google\Update\GoogleUpdate.exe" /c (User 'UpdatusUser')
O4 - HKUS\S-1-5-21-3389663500-2208976189-3857907485-1004\..\Run: [] (User 'UpdatusUser')


Vypni rez. ochranu u antiviru a antispywaru,příp. firewall..

Otevři si Poznámkový blok (Start -> Spustit... a napiš do okna Notepad a dej Ok.
Zkopíruj do něj následující celý text označený zeleně:

Kód: Vybrat vše

Driver::
2db04d42

RegLock::
[HKEY_USERS\S-1-5-21-3389663500-2208976189-3857907485-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.*%*2*0*A*l*e*s*s*o*%*2*0*-*%*2*0*I*f*%*2*0*I*ë•'f\OpenWithList]
@Class="Shell"
"a"="vlc.exe"
"MRUList"="a"
.
[HKEY_USERS\S-1-5-21-3389663500-2208976189-3857907485-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.*m*p*3* jí&\OpenWithList]
@Class="Shell"
"a"="vlc.exe"
"MRUList"="a"
.
[HKEY_USERS\S-1-5-21-3389663500-2208976189-3857907485-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.*,  .]
@Class="Shell"
.
[HKEY_USERS\S-1-5-21-3389663500-2208976189-3857907485-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.*,  .\OpenWithList]
@Class="Shell"
"a"="vlc.exe"
"MRUList"="a"
.
[HKEY_USERS\S-1-5-21-3389663500-2208976189-3857907485-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.*†GŤ/f€*€˙˙]
@Class="Shell"
.
[HKEY_USERS\S-1-5-21-3389663500-2208976189-3857907485-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.*†GŤ/f€*€˙˙\OpenWithList]
@Class="Shell"
"a"="vlc.exe"
"MRUList"="a"
.
[HKEY_USERS\S-1-5-21-3389663500-2208976189-3857907485-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\RecentDocs\.*,  .]
@Allowed: (Read) (RestrictedCode)
"0"=hex:66,69,6c,65,3a,2f,2f,2f,43,3a,2f,55,73,65,72,73,2f,4b,25,43,33,25,41,
 31,6a,25,43,33,25,41,44,6b,25,32,30,25,35,45,25,35,45,2f,44,65,73,6b,74,6f,\
"MRUListEx"=hex:00,00,00,00,ff,ff,ff,ff
.
[HKEY_USERS\S-1-5-21-3389663500-2208976189-3857907485-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\RecentDocs\.*†GŤ/f€*€˙˙]
@Allowed: (Read) (RestrictedCode)
"0"=hex:66,69,6c,65,3a,2f,2f,2f,43,3a,2f,55,73,65,72,73,2f,4b,25,43,33,25,41,
 31,6a,25,43,33,25,41,44,6b,25,32,30,25,35,45,25,35,45,2f,44,65,73,6b,74,6f,\
"MRUListEx"=hex:00,00,00,00,ff,ff,ff,ff
.
[HKEY_USERS\S-1-5-21-3389663500-2208976189-3857907485-1000\Software\SecuROM\License information*]
"datasecu"=hex:ff,af,e8,0b,a4,e1,e3,4b,29,64,0f,61,43,4e,bd,16,41,84,cb,22,fd,
 d3,1b,a2,c5,36,77,72,58,8a,54,ab,f2,f1,c0,37,39,92,02,87,10,24,08,41,14,eb,\
"rkeysecu"=hex:4b,18,35,05,0b,c8,96,ce,2d,2e,3e,86,30,e0,3c,95
.
[HKEY_USERS\S-1-5-21-3389663500-2208976189-3857907485-1004\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.*m*p*3* jí&\OpenWithList]
"a"="vlc.exe"
"MRUList"="a"

Zvol možnost Soubor -> Uložit jako... a nastav tyto parametry:
Název souboru: zde napiš: CFScript.txt
Uložit jako typ: tak tam vyber Všechny soubory
Ulož soubor na plochu.
Ukonči všechna aktivní okna.

Uchop myší vytvořený skript CFScript.txt, přemísti ho nad stažený program ComboFix.exe a když se oba soubory překryjí, skript upusť.
- Automaticky se spustí ComboFix
- Vlož sem log, který vyběhne v závěru čistícího procesu + nový log z HJT

Upozornění : Může se stát, že po aplikaci Combofixu a restartu počítače, Windows nenaběhnou , nebo nenajede plocha , budou problémy s připojením, pak znovu restartuj počítač, pokud to nepomůže , po restartu mačkej klávesu F8 a pak zvol poslední známou funkční konfiguraci. , či použij bod obnovy.

[LuckyCharlie]

ComboFix 14-06-30.01 - Kájík ^^ 01.07.2014 11:05:18.5.2 - x86 MINIMAL
Microsoft Windows 7 Home Premium 6.1.7601.1.1250.420.1029.18.3583.2541 [GMT 2:00]
Spuštěný z: c:\users\KßjÝk ^^\Desktop\ComboFix.exe
Použité ovládací přepínače :: c:\users\KßjÝk ^^\Desktop\CFScript.txt
AV: Microsoft Security Essentials *Enabled/Updated* {641105E6-77ED-3F35-A304-765193BCB75F}
SP: Microsoft Security Essentials *Enabled/Updated* {DF70E402-51D7-30BB-99B4-4D23E83BFDE2}
SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
* Vytvořen nový Bod Obnovení
.
.
((((((((((((((((((((((((( Soubory vytvořené od 2014-06-01 do 2014-07-01 )))))))))))))))))))))))))))))))
.
.
2014-07-01 07:11 . 2014-07-01 07:11 39464 ----a-w- c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\{B0ACF116-F39D-4829-A019-8C7843B13B7B}\MpKslf0cca367.sys
2014-07-01 07:08 . 2014-07-01 09:15 -------- d-----w- c:\users\Kájík ^^\AppData\Local\temp
2014-06-30 17:39 . 2014-06-30 17:39 -------- d-----w- c:\programdata\AlawarEntertainment
2014-06-30 17:19 . 2014-06-30 17:19 -------- d-----w- c:\program files\Alawar.cs
2014-06-30 15:24 . 2014-06-05 10:54 8140904 ----a-w- c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\{B0ACF116-F39D-4829-A019-8C7843B13B7B}\mpengine.dll
2014-06-29 07:17 . 2014-06-05 10:54 8140904 ----a-w- c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\Backup\mpengine.dll
2014-06-28 19:24 . 2014-06-29 08:41 -------- d-----w- c:\users\Kájík ^^\AppData\Roaming\TOMI2.THE GATES OF FATE
2014-06-28 19:23 . 2014-06-28 19:23 -------- d-----w- c:\users\Kájík ^^\AppData\Local\AlawarWrapper
2014-06-28 19:04 . 2014-06-30 17:39 -------- d-----w- c:\programdata\AlawarWrapper
2014-06-25 06:18 . 2014-05-02 03:47 765968 ------w- c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\{50AE00B7-C7A0-43FB-BEC9-DF962C7AC973}\gapaengine.dll
2014-06-18 19:28 . 2014-06-19 14:23 26624 ----a-w- c:\windows\system32\drivers\TrueSight.sys
2014-06-18 19:28 . 2014-06-18 19:28 -------- d-----w- c:\programdata\RogueKiller
2014-06-18 16:26 . 2014-06-18 16:27 -------- d-----w- c:\program files\Google
2014-06-18 14:02 . 2014-06-18 14:02 -------- d-----w- c:\windows\ERUNT
2014-06-17 19:43 . 2014-06-18 20:22 110296 ----a-w- c:\windows\system32\drivers\MBAMSwissArmy.sys
2014-06-17 19:43 . 2014-06-17 19:43 -------- d-----w- c:\program files\Malwarebytes Anti-Malware
2014-06-17 19:43 . 2014-06-17 19:43 -------- d-----w- c:\programdata\Malwarebytes
2014-06-17 19:43 . 2014-05-12 05:26 51928 ----a-w- c:\windows\system32\drivers\mwac.sys
2014-06-17 19:43 . 2014-05-12 05:25 74456 ----a-w- c:\windows\system32\drivers\mbamchameleon.sys
2014-06-17 19:43 . 2014-05-12 05:25 23256 ----a-w- c:\windows\system32\drivers\mbam.sys
2014-06-17 18:53 . 2010-08-30 06:34 536576 ----a-w- c:\windows\system32\sqlite3.dll
2014-06-17 18:52 . 2014-06-18 19:19 -------- d-----w- C:\AdwCleaner
2014-06-17 15:54 . 2014-06-17 15:54 -------- d-----w- c:\program files\Common Files\Java
2014-06-17 15:54 . 2014-06-17 15:54 96680 ----a-w- c:\windows\system32\WindowsAccessBridge.dll
2014-06-17 15:16 . 2014-06-17 15:16 -------- d-----w- c:\users\Kájík ^^\AppData\Local\MegaMeerkat
2014-06-17 12:59 . 2014-06-17 13:01 -------- d-----w- c:\users\Kájík ^^\AppData\Local\The_Sun_And_Moon_SOURCE
2014-06-17 11:13 . 2014-06-17 11:13 -------- d-----w- c:\users\Kájík ^^\AppData\Roaming\SPORE
2014-06-09 12:23 . 2014-06-05 12:12 52920 ----a-w- c:\windows\system32\drivers\{1a147621-8c9a-4d6b-a557-6513a40d3207}w.sys
2014-06-08 18:52 . 2014-06-18 13:04 -------- d-----w- c:\users\Kájík ^^\AppData\Local\5846
2014-06-08 16:57 . 2014-06-08 16:57 -------- d-----w- c:\users\Kájík ^^\AppData\Roaming\StunlockStudios
2014-06-06 18:21 . 2014-06-06 18:21 -------- d-----w- c:\program files\Common Files\Skype
.
.
.
(((((((((((((((((((((((((((((((((((((((( Find3M výpis ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2014-05-14 19:33 . 2012-03-30 03:43 70832 ----a-w- c:\windows\system32\FlashPlayerCPLApp.cpl
2014-05-14 19:33 . 2012-03-30 03:43 692400 ----a-w- c:\windows\system32\FlashPlayerApp.exe
2014-05-14 19:33 . 2014-05-14 19:32 17938608 ----a-w- c:\windows\system32\FlashPlayerInstaller.exe
2014-05-02 03:47 . 2014-02-18 07:14 765968 ------w- c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\NISBackup\gapaengine.dll
2014-04-24 10:30 . 2014-04-25 04:33 52920 ----a-w- c:\windows\system32\drivers\{1a147621-8c9a-4d6b-a557-6513a40d3207}Gw.sys
2014-04-24 10:30 . 2014-05-03 12:16 55224 ----a-w- c:\windows\system32\drivers\{1a147621-8c9a-4d6b-a557-6513a40d3207}Gt.sys
2014-04-15 00:34 . 2014-04-15 00:34 1070232 ----a-w- c:\windows\system32\MSCOMCTL.OCX
2014-04-12 02:15 . 2014-05-14 04:41 67520 ----a-w- c:\windows\system32\drivers\ksecdd.sys
2014-04-12 02:15 . 2014-05-14 04:41 136640 ----a-w- c:\windows\system32\drivers\ksecpkg.sys
2014-04-12 02:12 . 2014-05-14 04:41 100352 ----a-w- c:\windows\system32\sspicli.dll
2014-04-12 02:12 . 2014-05-14 04:41 15872 ----a-w- c:\windows\system32\sspisrv.dll
2014-04-12 02:12 . 2014-05-14 04:41 22016 ----a-w- c:\windows\system32\secur32.dll
2014-04-12 02:11 . 2014-05-14 04:41 1059840 ----a-w- c:\windows\system32\lsasrv.dll
2014-04-12 02:11 . 2014-05-14 04:41 22528 ----a-w- c:\windows\system32\lsass.exe
.
.
(((((((((((((((((((((((((((((((((( Spouštěcí body v registru )))))))))))))))))))))))))))))))))))))))))))))
.
.
*Poznámka* prázdné záznamy a legitimní výchozí údaje nejsou zobrazeny.
REGEDIT4
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ SkyDrivePro1 (ErrorConflict)]
@="{8BA85C75-763B-4103-94EB-9470F12FE0F7}"
[HKEY_CLASSES_ROOT\CLSID\{8BA85C75-763B-4103-94EB-9470F12FE0F7}]
2014-05-14 06:15 1730264 ----a-w- c:\progra~1\MICROS~2\Office15\GROOVEEX.DLL
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ SkyDrivePro2 (SyncInProgress)]
@="{CD55129A-B1A1-438E-A425-CEBC7DC684EE}"
[HKEY_CLASSES_ROOT\CLSID\{CD55129A-B1A1-438E-A425-CEBC7DC684EE}]
2014-05-14 06:15 1730264 ----a-w- c:\progra~1\MICROS~2\Office15\GROOVEEX.DLL
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ SkyDrivePro3 (InSync)]
@="{E768CD3B-BDDC-436D-9C13-E1B39CA257B1}"
[HKEY_CLASSES_ROOT\CLSID\{E768CD3B-BDDC-436D-9C13-E1B39CA257B1}]
2014-05-14 06:15 1730264 ----a-w- c:\progra~1\MICROS~2\Office15\GROOVEEX.DLL
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"DAEMON Tools Lite"="c:\program files\DAEMON Tools Lite\DTLite.exe" [2013-01-08 3674320]
"BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}"="c:\program files\Common Files\Ahead\Lib\NMBgMonitor.exe" [2007-03-12 153136]
"WebcamMaxAutoRun"="c:\program files\WebcamMax\wcmmon.exe" [2011-07-17 1038848]
"Skype"="c:\program files\Skype\Phone\Skype.exe" [2014-05-08 21444224]
"EADM"="c:\program files\Origin\Origin.exe" [2014-05-09 3588952]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"RaidCall"="c:\karlos\Programy\RaidCall\raidcall.exe" [2012-03-28 2596536]
"Nvtmru"="c:\program files\NVIDIA Corporation\NVIDIA Update Core\nvtmru.exe" [2013-11-08 1028384]
"BCSSync"="c:\program files\Microsoft Office\Office14\BCSSync.exe" [2012-11-05 89184]
"ShadowPlay"="c:\windows\system32\nvspcap.dll" [2013-11-08 955168]
"MSC"="c:\program files\Microsoft Security Client\msseces.exe" [2014-03-11 951576]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorAdmin"= 5 (0x5)
"ConsentPromptBehaviorUser"= 3 (0x3)
"EnableUIADesktopToggle"= 0 (0x0)
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MsMpSvc]
@="Service"
.
[HKLM\~\startupfolder\C:^Users^Kájík ^^^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^hamachi.lnk]
path=c:\users\Kájík ^^\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\hamachi.lnk
backup=c:\windows\pss\hamachi.lnk.Startup
backupExtension=.Startup
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\APSDaemon]
2012-10-11 20:56 59280 ----a-w- c:\program files\Common Files\Apple\Apple Application Support\APSDaemon.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NokiaSuite.exe]
2013-10-02 19:28 1090912 ----a-w- c:\program files\Nokia\Nokia Suite\NokiaSuite.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run-]
"Adobe ARM"="c:\program files\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
"SunJavaUpdateSched"="c:\program files\Common Files\Java\Java Update\jusched.exe"
"QuickTime Task"="c:\program files\QuickTime\QTTask.exe" -atboottime
"CmPCIaudio"=RunDll32 CMICNFG3.cpl,CMICtrlWnd
"BCSSync"="c:\program files\Microsoft Office\Office14\BCSSync.exe" /DelayServices
"PAC7302_Monitor"=c:\windows\PixArt\PAC7302\Monitor.exe
"NeroFilterCheck"=c:\program files\Common Files\Ahead\Lib\NeroCheck.exe
.
R1 MpKslf0cca367;MpKslf0cca367;c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\{B0ACF116-F39D-4829-A019-8C7843B13B7B}\MpKslf0cca367.sys [2014-07-01 39464]
R2 2db04d42;Browser Stabilizer;c:\windows\system32\rundll32.exe [2009-07-14 44544]
R2 MBAMService;MBAMService;c:\program files\Malwarebytes Anti-Malware\mbamservice.exe [2014-05-12 860472]
R2 NisDrv;Microsoft Network Inspection System;c:\windows\system32\DRIVERS\NisDrvWFP.sys [2014-03-11 104264]
R2 NvStreamSvc;NVIDIA Streamer Service;c:\program files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [2013-11-08 14652704]
R2 Stereo Service;NVIDIA Stereoscopic 3D Driver Service;c:\program files\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe [2013-10-23 414496]
R2 TeamViewer9;TeamViewer 9;c:\program files\TeamViewer\Version9\TeamViewer_Service.exe [2013-12-04 5316448]
R2 WCMVCAM;WebcamMax, WDM Video Capture;c:\windows\system32\DRIVERS\wcmvcam.sys [2012-04-15 1068216]
R3 CamSuiteVAC;CamSuite Virtual Audio;c:\windows\system32\DRIVERS\CamSuiteVAC.sys [2008-09-19 37560]
R3 IEEtwCollectorService;Internet Explorer ETW Collector Service;c:\windows\system32\IEEtwCollector.exe [2014-05-30 108032]
R3 MBAMProtector;MBAMProtector;c:\windows\system32\drivers\mbam.sys [2014-05-12 23256]
R3 MBAMWebAccessControl;MBAMWebAccessControl;c:\windows\system32\drivers\mwac.sys [2014-05-12 51928]
R3 NisSrv;Kontrola sítě Microsoft;c:\program files\Microsoft Security Client\NisSrv.exe [2014-03-11 279776]
R3 nvvad_WaveExtensible;NVIDIA Virtual Audio Device (Wave Extensible) (WDM);c:\windows\system32\drivers\nvvad32v.sys [2013-09-27 33568]
R3 RTL8167;Realtek 8167 NT Driver;c:\windows\system32\DRIVERS\Rt86win7.sys [2011-06-10 394856]
R3 SCREAMINGBDRIVER;Screaming Bee Audio;c:\windows\system32\drivers\ScreamingBAudio.sys [2010-07-01 34896]
R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys [2010-11-20 52224]
R3 WatAdminSvc;Služba Technologie aktivace Windows;c:\windows\system32\Wat\WatAdminSvc.exe [2012-03-15 1343400]
S0 sptd;sptd;c:\windows\\SystemRoot\System32\Drivers\sptd.sys [x]
S1 dtsoftbus01;DAEMON Tools Virtual Bus Driver;c:\windows\system32\DRIVERS\dtsoftbus01.sys [2013-02-05 242240]
.
.
[HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{8A69D345-D564-463c-AFF1-A69D9E530F96}]
2014-06-18 16:27 1091912 ----a-w- c:\program files\Google\Chrome\Application\35.0.1916.153\Installer\chrmstp.exe
.
Obsah adresáře 'Naplánované úlohy'
.
2014-07-01 c:\windows\Tasks\Adobe Flash Player Updater.job
- c:\windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2012-03-30 19:33]
.
.
------- Doplňkový sken -------
.
uStart Page = hxxp://www.google.com
mStart Page = hxxp://www.google.com
IE: E&xportovat do aplikace Microsoft Excel - c:\progra~1\MICROS~2\Office14\EXCEL.EXE/3000
IE: E&xportovat do Microsoft Excelu - c:\progra~1\MICROS~2\Office15\EXCEL.EXE/3000
IE: Od&eslat do aplikace OneNote - c:\progra~1\MICROS~2\Office14\ONBttnIE.dll/105
IE: Od&eslat do OneNotu - c:\progra~1\MICROS~2\Office15\ONBttnIE.dll/105
IE: {{77F665FD-3F60-4B0A-AE14-EC124B7A7FCE} - c:\program files\ICQ7.7\ICQ.exe
FF - ProfilePath -
.
.
--------------------- ZAMKNUTÉ KLÍČE V REGISTRU ---------------------
.
[HKEY_USERS\S-1-5-21-3389663500-2208976189-3857907485-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.*%*2*0*A*l*e*s*s*o*%*2*0*-*%*2*0*I*f*%*2*0*I*ë·'f\OpenWithList]
@Class="Shell"
"a"="vlc.exe"
"MRUList"="a"
.
[HKEY_USERS\S-1-5-21-3389663500-2208976189-3857907485-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.*m*p*3*jí&\OpenWithList]
@Class="Shell"
"a"="vlc.exe"
"MRUList"="a"
.
[HKEY_USERS\S-1-5-21-3389663500-2208976189-3857907485-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.*,.]
@Class="Shell"
.
[HKEY_USERS\S-1-5-21-3389663500-2208976189-3857907485-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.*,.\OpenWithList]
@Class="Shell"
"a"="vlc.exe"
"MRUList"="a"
.
[HKEY_USERS\S-1-5-21-3389663500-2208976189-3857907485-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.*†GŤ/f€*€˙˙]
@Class="Shell"
.
[HKEY_USERS\S-1-5-21-3389663500-2208976189-3857907485-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.*†GŤ/f€*€˙˙\OpenWithList]
@Class="Shell"
"a"="vlc.exe"
"MRUList"="a"
.
[HKEY_USERS\S-1-5-21-3389663500-2208976189-3857907485-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\RecentDocs\.*,.]
@Allowed: (Read) (RestrictedCode)
"0"=hex:66,69,6c,65,3a,2f,2f,2f,43,3a,2f,55,73,65,72,73,2f,4b,25,43,33,25,41,
31,6a,25,43,33,25,41,44,6b,25,32,30,25,35,45,25,35,45,2f,44,65,73,6b,74,6f,\
"MRUListEx"=hex:00,00,00,00,ff,ff,ff,ff
.
[HKEY_USERS\S-1-5-21-3389663500-2208976189-3857907485-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\RecentDocs\.*†GŤ/f€*€˙˙]
@Allowed: (Read) (RestrictedCode)
"0"=hex:66,69,6c,65,3a,2f,2f,2f,43,3a,2f,55,73,65,72,73,2f,4b,25,43,33,25,41,
31,6a,25,43,33,25,41,44,6b,25,32,30,25,35,45,25,35,45,2f,44,65,73,6b,74,6f,\
"MRUListEx"=hex:00,00,00,00,ff,ff,ff,ff
.
[HKEY_USERS\S-1-5-21-3389663500-2208976189-3857907485-1000\Software\SecuROM\License information*]
"datasecu"=hex:ff,af,e8,0b,a4,e1,e3,4b,29,64,0f,61,43,4e,bd,16,41,84,cb,22,fd,
d3,1b,a2,c5,36,77,72,58,8a,54,ab,f2,f1,c0,37,39,92,02,87,10,24,08,41,14,eb,\
"rkeysecu"=hex:4b,18,35,05,0b,c8,96,ce,2d,2e,3e,86,30,e0,3c,95
.
Celkový čas: 2014-07-01 11:17:09
ComboFix-quarantined-files.txt 2014-07-01 09:17
ComboFix2.txt 2014-07-01 07:16
ComboFix3.txt 2014-06-30 14:58
ComboFix4.txt 2014-06-19 18:34
ComboFix5.txt 2014-07-01 09:03
.
Před spuštěním: Volných bajtů: 143 805 247 488
Po spuštění: Volných bajtů: 143 664 238 592
.
- - End Of File - - 04501C7280787FB8E1DFF91F370766D7
A36C5E4F47E84449FF07ED3517B43A31

[LuckyCharlie]

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 11:33:11, on 1.7.2014
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v11.0 (11.00.9600.17126)

FIREFOX: 28.0 (cs)
Boot mode: Normal

Running processes:
C:\Windows\system32\taskhost.exe
C:\Windows\system32\taskeng.exe
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Program Files\NVIDIA Corporation\NVIDIA Update Core\NvTmru.exe
C:\Program Files\Microsoft Security Client\msseces.exe
C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
C:\Program Files\DAEMON Tools Lite\DTLite.exe
C:\Program Files\Common Files\Ahead\Lib\NMBgMonitor.exe
C:\Program Files\WebcamMax\wcmmon.exe
C:\Program Files\Skype\Phone\Skype.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Program Files\Common Files\Ahead\Lib\NMIndexStoreSvr.exe
C:\Windows\system32\SearchFilterHost.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Users\Kájík ^^\Desktop\HijackThis.exe

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
O2 - BHO: Lync Click to Call BHO - {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} - C:\Program Files\Microsoft Office\Office15\OCHelper.dll
O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\PROGRA~1\MICROS~2\Office14\GROOVEEX.DLL
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll
O2 - BHO: URLRedirectionBHO - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\PROGRA~1\MICROS~2\Office15\URLREDIR.DLL
O2 - BHO: Microsoft SkyDrive Pro Browser Helper - {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} - C:\PROGRA~1\MICROS~2\Office15\GROOVEEX.DLL
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll
O4 - HKLM\..\Run: [RaidCall] C:\Karlos\Programy\RaidCall\raidcall.exe
O4 - HKLM\..\Run: [Nvtmru] "C:\Program Files\NVIDIA Corporation\NVIDIA Update Core\nvtmru.exe"
O4 - HKLM\..\Run: [BCSSync] "C:\Program Files\Microsoft Office\Office14\BCSSync.exe" /DelayServices
O4 - HKLM\..\Run: [ShadowPlay] C:\Windows\system32\rundll32.exe C:\Windows\system32\nvspcap.dll,ShadowPlayOnSystemStart
O4 - HKLM\..\Run: [MSC] "c:\Program Files\Microsoft Security Client\msseces.exe" -hide -runkey
O4 - HKCU\..\Run: [DAEMON Tools Lite] "C:\Program Files\DAEMON Tools Lite\DTLite.exe" -autorun
O4 - HKCU\..\Run: [BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] "C:\Program Files\Common Files\Ahead\Lib\NMBgMonitor.exe"
O4 - HKCU\..\Run: [WebcamMaxAutoRun] "C:\Program Files\WebcamMax\wcmmon.exe" -a
O4 - HKCU\..\Run: [Skype] "C:\Program Files\Skype\Phone\Skype.exe" /minimized /regrun
O4 - HKCU\..\Run: [EADM] "C:\Program Files\Origin\Origin.exe" -AutoStart
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office14\EXCEL.EXE/3000
O8 - Extra context menu item: E&xportovat do Microsoft Excelu - res://C:\PROGRA~1\MICROS~2\Office15\EXCEL.EXE/3000
O8 - Extra context menu item: Od&eslat do aplikace OneNote - res://C:\PROGRA~1\MICROS~2\Office14\ONBttnIE.dll/105
O8 - Extra context menu item: Od&eslat do OneNotu - res://C:\PROGRA~1\MICROS~2\Office15\ONBttnIE.dll/105
O9 - Extra button: Odeslat do OneNotu - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files\Microsoft Office\Office15\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: Od&eslat do OneNotu - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files\Microsoft Office\Office15\ONBttnIE.dll
O9 - Extra button: Volání kliknutím v Lyncu - {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} - C:\Program Files\Microsoft Office\Office15\OCHelper.dll
O9 - Extra 'Tools' menuitem: Volání kliknutím v Lyncu - {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} - C:\Program Files\Microsoft Office\Office15\OCHelper.dll
O9 - Extra button: ICQ7.7 - {77F665FD-3F60-4B0A-AE14-EC124B7A7FCE} - C:\Program Files\ICQ7.7\ICQ.exe
O9 - Extra 'Tools' menuitem: ICQ7.7 - {77F665FD-3F60-4B0A-AE14-EC124B7A7FCE} - C:\Program Files\ICQ7.7\ICQ.exe
O9 - Extra button: P&ropojené poznámky aplikace OneNote - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files\Microsoft Office\Office15\ONBttnIELinkedNotes.dll
O9 - Extra 'Tools' menuitem: P&ropojené poznámky aplikace OneNote - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files\Microsoft Office\Office15\ONBttnIELinkedNotes.dll
O10 - Unknown file in Winsock LSP: c:\program files\common files\microsoft shared\windows live\wlidnsp.dll
O10 - Unknown file in Winsock LSP: c:\program files\common files\microsoft shared\windows live\wlidnsp.dll
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O18 - Protocol: osf - {D924BDC6-C83A-4BD5-90D0-095128A113D1} - C:\Program Files\Microsoft Office\Office15\MSOSB.DLL
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O18 - Protocol: wlpg - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} - C:\Program Files\Windows Live\Photo Gallery\AlbumDownloadProtocolHandler.dll
O18 - Filter hijack: text/xml - {807573E5-5146-11D5-A672-00B0D022E945} - C:\Program Files\Common Files\Microsoft Shared\OFFICE14\MSOXMLMF.DLL
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: FLEXnet Licensing Service - Acresso Software Inc. - C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
O23 - Service: MBAMService - Malwarebytes Corporation - C:\Program Files\Malwarebytes Anti-Malware\mbamservice.exe
O23 - Service: NBService - Nero AG - C:\Program Files\Nero\Nero 7\Nero BackItUp\NBService.exe
O23 - Service: NMIndexingService - Nero AG - C:\Program Files\Common Files\Ahead\Lib\NMIndexingService.exe
O23 - Service: NVIDIA Streamer Service (NvStreamSvc) - NVIDIA Corporation - C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
O23 - Service: NVIDIA Display Driver Service (nvsvc) - NVIDIA Corporation - C:\Windows\system32\nvvsvc.exe
O23 - Service: NVIDIA Update Service Daemon (nvUpdatusService) - NVIDIA Corporation - C:\Program Files\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
O23 - Service: PnkBstrA - Unknown owner - C:\Windows\system32\PnkBstrA.exe
O23 - Service: Steam Client Service - Valve Corporation - C:\Program Files\Common Files\Steam\SteamService.exe
O23 - Service: NVIDIA Stereoscopic 3D Driver Service (Stereo Service) - NVIDIA Corporation - C:\Program Files\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
O23 - Service: TeamViewer 9 (TeamViewer9) - TeamViewer GmbH - C:\Program Files\TeamViewer\Version9\TeamViewer_Service.exe

--
End of file - 7346 bytes

[jaro3]

Stáhni si program OTM (by OldTimer)
a ulož si ho na disk C a spusť ho.
- Do levého sloupce (Paste Instructions for Items to be Moved) zkopíruj tyto cesty:

Kód: Vybrat vše

:Processes
explorer.exe

:Services

:Reg

:Files
C:\WINDOWS\System32\*.tmp
C:\WINDOWS\*.tmp
C:\WINDOWS\system32\*.tmp.dll
C:\WINDOWS\System32\dllcache\*.tmp
C:\WINDOWS\system32\SET*.tmp
C:\WINDOWS\system32\DUMP*.tmp
c:\windows\Tasks\*.job /s
C:\*.tmp
C:\WINDOWS\System32\drivers\*.tmp
C:\Program Files\*.tmp
C:\Documents and Settings\All Users\Data aplikací\*.tmp
c:\windows\system32\drivers\{1a147621-8c9a-4d6b-a557-6513a40d3207}Gw.sys
c:\windows\system32\drivers\{1a147621-8c9a-4d6b-a557-6513a40d3207}Gt.sys
c:\windows\system32\drivers\{1a147621-8c9a-4d6b-a557-6513a40d3207}w.sys

:Commands
[purity]
[emptytemp]
[start explorer]
[Reboot]

- Po zkopírování klikni na tlačítko MoveIt! a vlož sem následně celý obsah z pravého sloupce, jinak uložený ve složce C:\_OTMoveIt\MovedFiles\, který bude informovat o výsledcích
- Je možné, že pokud nebudou moci být soubory odstraněny, budeš dotázán na restart počítače, v tom případě restart potvrď.
C:\_OTMoveIt\MovedFiles\********_******.log

[LuckyCharlie]

All processes killed
========== PROCESSES ==========
No active process named explorer.exe was found!
========== SERVICES/DRIVERS ==========
========== REGISTRY ==========
========== FILES ==========
File/Folder C:\WINDOWS\System32\*.tmp not found.
File/Folder C:\WINDOWS\*.tmp not found.
File/Folder C:\WINDOWS\system32\*.tmp.dll not found.
File/Folder C:\WINDOWS\System32\dllcache\*.tmp not found.
File/Folder C:\WINDOWS\system32\SET*.tmp not found.
File/Folder C:\WINDOWS\system32\DUMP*.tmp not found.
c:\windows\Tasks\Adobe Flash Player Updater.job moved successfully.
File/Folder C:\*.tmp not found.
File/Folder C:\WINDOWS\System32\drivers\*.tmp not found.
File/Folder C:\Program Files\*.tmp not found.
File/Folder C:\Documents and Settings\All Users\Data aplikací\*.tmp not found.
c:\windows\system32\drivers\{1a147621-8c9a-4d6b-a557-6513a40d3207}Gw.sys moved successfully.
c:\windows\system32\drivers\{1a147621-8c9a-4d6b-a557-6513a40d3207}Gt.sys moved successfully.
c:\windows\system32\drivers\{1a147621-8c9a-4d6b-a557-6513a40d3207}w.sys moved successfully.
========== COMMANDS ==========

[EMPTYTEMP]

User: Administrator
->Temp folder emptied: 0 bytes

User: All Users

User: Default
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes
->Flash cache emptied: 0 bytes

User: Default User
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes
->Flash cache emptied: 0 bytes

User: Guest
->Temp folder emptied: 0 bytes

User: Guest.Kájík-PC
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes
->Flash cache emptied: 0 bytes

User: K jˇk ^^
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes

User: Kájík ^^
->Temp folder emptied: 164880 bytes
->Temporary Internet Files folder emptied: 20534165 bytes
->Java cache emptied: 0 bytes
->FireFox cache emptied: 985606 bytes
->Google Chrome cache emptied: 680416087 bytes
->Flash cache emptied: 6578 bytes

User: Kájík ^^
->Temp folder emptied: 0 bytes

User: K�j�k ^^
->Temp folder emptied: 0 bytes

User: matt
->Temp folder emptied: 0 bytes

User: Public
->Temp folder emptied: 0 bytes

User: UpdatusUser
->Temp folder emptied: 0 bytes

User: UpdatusUser.Kájík-PC
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes
->Flash cache emptied: 0 bytes

User: ~1
->Temp folder emptied: 0 bytes

%systemdrive% .tmp files removed: 0 bytes
%systemroot% .tmp files removed: 0 bytes
%systemroot%\System32 .tmp files removed: 0 bytes
%systemroot%\System32\drivers .tmp files removed: 0 bytes
Windows Temp folder emptied: 4324 bytes
%systemroot%\system32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files folder emptied: 5590 bytes
RecycleBin emptied: 9736 bytes

Total Files Cleaned = 670,00 mb


OTM by OldTimer - Version 3.1.21.0 log created on 07012014_174723

Files moved on Reboot...
File C:\Users\Kájík ^^\AppData\Local\Temp\etilqs_H1n6vv1MVlzcLLq not found!
File C:\Users\Kájík ^^\AppData\Local\Temp\etilqs_nk1c2tBzh9uM91z not found!
File C:\Users\Kájík ^^\AppData\Local\Temp\etilqs_WZBEKeROqdXb29X not found!

Registry entries deleted on Reboot...

[jaro3]

ComboFix se odinstaluje takto:
Start-Spustit a zadej ComboFix /Uninstall

Vyčisti systém CCleanerem

Stáhni si OTC

na plochu. Poklepej na něj. Potom klikni na Clean up!.
Restartuj PC , pokud Ti bude doporučeno.

Spusť OTM a klikni na Clean Up!

Co problémy?

[jaro3]

OTC momentálně odkaz nefunguje,

Použij tohle:
Stáhni si zde DelFix

ulož si soubor na plochu.
Poklepáním na ikonu spusť nástroj Delfix.exe
( Ve Windows Vista, Windows 7 a 8, musíš spustit soubor pravým tlačítkem myši -> Spustit jako správce .
V hlavním menu, zkontroluj tyto možnosti - Odstranění dezinfekce nástrojů (Remove desinfection tools) – Vyčistit body obnovy (Purge System Restore)
Poté klikněte na tlačítko Spustit (Run) a nech nástroj dělat svoji práci

Poté se zpráva se otevře (DelFix.txt). Vlož celý obsah zprávy sem.Jinak je zpráva zde:
v C: \ DelFix.txt

Co problémy?

[LuckyCharlie]

OTC hází error na stránce tudíž nejde stáhnout. Neměl by jsi jiný web ze kterého by to bylo možné stáhnout ?

[jaro3]

právě jsem Ti odpověděl.

[LuckyCharlie]

# DelFix v10.7 - Logfile created 02/07/2014 at 10:12:43
# Updated 27/04/2014 by Xplode
# Username : Kájík ^^ - KÁJÍK-PC
# Operating System : Windows 7 Home Premium Service Pack 1 (32 bits)

~ Removing disinfection tools ...

Deleted : C:\Qoobox
Deleted : C:\_OTM
Deleted : C:\AdwCleaner
Deleted : C:\ComboFix.txt
Deleted : C:\TDSSKiller.3.0.0.39_19.06.2014_16.46.40_log.txt
Deleted : C:\Users\Kájík ^^\Desktop\AdwCleaner.exe
Deleted : C:\Users\Kájík ^^\Desktop\aswmbr.exe
Deleted : C:\Users\Kájík ^^\Desktop\JRT.exe
Deleted : C:\Users\Kájík ^^\Desktop\HijackThis.exe
Deleted : C:\Users\Kájík ^^\Desktop\OTM.exe
Deleted : C:\Users\Kájík ^^\Desktop\RogueKiller.exe
Deleted : C:\Users\Kájík ^^\Desktop\tdsskiller.exe
Deleted : C:\Windows\grep.exe
Deleted : C:\Windows\PEV.exe
Deleted : C:\Windows\NIRCMD.exe
Deleted : C:\Windows\MBR.exe
Deleted : C:\Windows\SED.exe
Deleted : C:\Windows\SWREG.exe
Deleted : C:\Windows\SWSC.exe
Deleted : C:\Windows\SWXCACLS.exe
Deleted : C:\Windows\Zip.exe
Deleted : HKLM\SOFTWARE\OldTimer Tools
Deleted : HKLM\SOFTWARE\AdwCleaner
Deleted : HKLM\SOFTWARE\Swearware
Deleted : HKLM\SOFTWARE\TrendMicro\Hijackthis
Deleted : HKLM\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_ASWMBR

~ Cleaning system restore ...

Deleted : RP #770 [Windows Update | 06/30/2014 15:23:21]

New restore point created !

########## - EOF - ##########
-----------------------------------------------------
Co problémy ? Zkoušel jsem hrát FIFU 14 a nemohu uvěřit tomu jak si to dokázal .. Dříve byla absolutně nehratelná. Nyní to běželo (na můj počítač) plynule. Fyzická paměť nyní už nepřesahuje více jak 45%. Jen to využití procesoru je stále kolem 60-75%

[LuckyCharlie]

No .. ale LoLko to furt neutáhne .. :( | To využití procáku skáče stále do výše kolem 90% ..