Preventivka Vyřešeno

[jaro3]

Vypni rez. ochranu u antiviru a antispywaru,příp. firewall..

Otevři si Poznámkový blok (Start -> Spustit... a napiš do okna Notepad a dej Ok.
Zkopíruj do něj následující celý text označený zeleně:

Kód: Vybrat vše

ClearJavaCache::

KillAll::
File::
c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
c:\windows\Tasks\GoogleUpdateTaskMachineUA.job

Folder::
c:\program files (x86)\Common Files\Symantec Shared
c:\programdata\Symantec
c:\programdata\Norton
c:\program files (x86)\Skype\Updater
c:\program files (x86)\Google\Update

Driver::
SkypeUpdate


Zvol možnost Soubor -> Uložit jako... a nastav tyto parametry:
Název souboru: zde napiš: CFScript.txt
Uložit jako typ: tak tam vyber Všechny soubory
Ulož soubor na plochu.
Ukonči všechna aktivní okna.

Uchop myší vytvořený skript CFScript.txt, přemísti ho nad stažený program ComboFix.exe a když se oba soubory překryjí, skript upusť.
- Automaticky se spustí ComboFix
- Vlož sem log, který vyběhne v závěru čistícího procesu + nový log z HJT

Upozornění : Může se stát, že po aplikaci Combofixu a restartu počítače, Windows nenaběhnou , nebo nenajede plocha , budou problémy s připojením, pak znovu restartuj počítač, pokud to nepomůže , po restartu mačkej klávesu F8 a pak zvol poslední známou funkční konfiguraci. , či použij bod obnovy.

Stáhni si aswMBR
na svojí plochu. Uzavři všechna okna , programy a prohlížeče. Poklepej na aswMBR.exe. Pokud se objeví hláška o možnosti stáhnutí databáze Avastu , klikni na NE. Poté klikni na „Scan“ . Po skenu klikni na „Save Log“ a ulož si log na plochu .Zkopíruj sem celý obsah toho logu. Pak klikni na „Exit“ k zavření programu.

[Reklama]

[CZechBoY]

ComboFix 14-04-30.01 - czech_000 . 05. 2014 11:25:30.5.4 - x64
Microsoft Windows 8 Pro 6.2.9200.0.1250.420.1029.18.3956.2229 [GMT 2:00]
Spuštěný z: c:\users\czech_000\Desktop\ComboFix.exe
Použité ovládací přepínače :: c:\users\czech_000\Desktop\CFScript.txt
AV: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
* Vytvořen nový Bod Obnovení
.
FILE ::
"c:\windows\Tasks\GoogleUpdateTaskMachineCore.job"
"c:\windows\Tasks\GoogleUpdateTaskMachineUA.job"
.
.
((((((((((((((((((((((((((((((((((((((( Ostatní výmazy )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
c:\program files (x86)\Common Files\Symantec Shared
c:\program files (x86)\Google\Update
c:\program files (x86)\Google\Update\1.3.23.9\GoogleCrashHandler.exe
c:\program files (x86)\Google\Update\1.3.23.9\GoogleCrashHandler64.exe
c:\program files (x86)\Google\Update\1.3.23.9\GoogleUpdate.exe
c:\program files (x86)\Google\Update\1.3.23.9\GoogleUpdateBroker.exe
c:\program files (x86)\Google\Update\1.3.23.9\GoogleUpdateComRegisterShell64.exe
c:\program files (x86)\Google\Update\1.3.23.9\GoogleUpdateHelper.msi
c:\program files (x86)\Google\Update\1.3.23.9\GoogleUpdateOnDemand.exe
c:\program files (x86)\Google\Update\1.3.23.9\GoogleUpdateSetup.exe
c:\program files (x86)\Google\Update\1.3.23.9\goopdate.dll
c:\program files (x86)\Google\Update\1.3.23.9\goopdateres_am.dll
c:\program files (x86)\Google\Update\1.3.23.9\goopdateres_ar.dll
c:\program files (x86)\Google\Update\1.3.23.9\goopdateres_bg.dll
c:\program files (x86)\Google\Update\1.3.23.9\goopdateres_bn.dll
c:\program files (x86)\Google\Update\1.3.23.9\goopdateres_ca.dll
c:\program files (x86)\Google\Update\1.3.23.9\goopdateres_cs.dll
c:\program files (x86)\Google\Update\1.3.23.9\goopdateres_da.dll
c:\program files (x86)\Google\Update\1.3.23.9\goopdateres_de.dll
c:\program files (x86)\Google\Update\1.3.23.9\goopdateres_el.dll
c:\program files (x86)\Google\Update\1.3.23.9\goopdateres_en-GB.dll
c:\program files (x86)\Google\Update\1.3.23.9\goopdateres_en.dll
c:\program files (x86)\Google\Update\1.3.23.9\goopdateres_es-419.dll
c:\program files (x86)\Google\Update\1.3.23.9\goopdateres_es.dll
c:\program files (x86)\Google\Update\1.3.23.9\goopdateres_et.dll
c:\program files (x86)\Google\Update\1.3.23.9\goopdateres_fa.dll
c:\program files (x86)\Google\Update\1.3.23.9\goopdateres_fi.dll
c:\program files (x86)\Google\Update\1.3.23.9\goopdateres_fil.dll
c:\program files (x86)\Google\Update\1.3.23.9\goopdateres_fr.dll
c:\program files (x86)\Google\Update\1.3.23.9\goopdateres_gu.dll
c:\program files (x86)\Google\Update\1.3.23.9\goopdateres_hi.dll
c:\program files (x86)\Google\Update\1.3.23.9\goopdateres_hr.dll
c:\program files (x86)\Google\Update\1.3.23.9\goopdateres_hu.dll
c:\program files (x86)\Google\Update\1.3.23.9\goopdateres_id.dll
c:\program files (x86)\Google\Update\1.3.23.9\goopdateres_is.dll
c:\program files (x86)\Google\Update\1.3.23.9\goopdateres_it.dll
c:\program files (x86)\Google\Update\1.3.23.9\goopdateres_iw.dll
c:\program files (x86)\Google\Update\1.3.23.9\goopdateres_ja.dll
c:\program files (x86)\Google\Update\1.3.23.9\goopdateres_kn.dll
c:\program files (x86)\Google\Update\1.3.23.9\goopdateres_ko.dll
c:\program files (x86)\Google\Update\1.3.23.9\goopdateres_lt.dll
c:\program files (x86)\Google\Update\1.3.23.9\goopdateres_lv.dll
c:\program files (x86)\Google\Update\1.3.23.9\goopdateres_ml.dll
c:\program files (x86)\Google\Update\1.3.23.9\goopdateres_mr.dll
c:\program files (x86)\Google\Update\1.3.23.9\goopdateres_ms.dll
c:\program files (x86)\Google\Update\1.3.23.9\goopdateres_nl.dll
c:\program files (x86)\Google\Update\1.3.23.9\goopdateres_no.dll
c:\program files (x86)\Google\Update\1.3.23.9\goopdateres_pl.dll
c:\program files (x86)\Google\Update\1.3.23.9\goopdateres_pt-BR.dll
c:\program files (x86)\Google\Update\1.3.23.9\goopdateres_pt-PT.dll
c:\program files (x86)\Google\Update\1.3.23.9\goopdateres_ro.dll
c:\program files (x86)\Google\Update\1.3.23.9\goopdateres_ru.dll
c:\program files (x86)\Google\Update\1.3.23.9\goopdateres_sk.dll
c:\program files (x86)\Google\Update\1.3.23.9\goopdateres_sl.dll
c:\program files (x86)\Google\Update\1.3.23.9\goopdateres_sr.dll
c:\program files (x86)\Google\Update\1.3.23.9\goopdateres_sv.dll
c:\program files (x86)\Google\Update\1.3.23.9\goopdateres_sw.dll
c:\program files (x86)\Google\Update\1.3.23.9\goopdateres_ta.dll
c:\program files (x86)\Google\Update\1.3.23.9\goopdateres_te.dll
c:\program files (x86)\Google\Update\1.3.23.9\goopdateres_th.dll
c:\program files (x86)\Google\Update\1.3.23.9\goopdateres_tr.dll
c:\program files (x86)\Google\Update\1.3.23.9\goopdateres_uk.dll
c:\program files (x86)\Google\Update\1.3.23.9\goopdateres_ur.dll
c:\program files (x86)\Google\Update\1.3.23.9\goopdateres_vi.dll
c:\program files (x86)\Google\Update\1.3.23.9\goopdateres_zh-CN.dll
c:\program files (x86)\Google\Update\1.3.23.9\goopdateres_zh-TW.dll
c:\program files (x86)\Google\Update\1.3.23.9\npGoogleUpdate3.dll
c:\program files (x86)\Google\Update\1.3.23.9\psmachine.dll
c:\program files (x86)\Google\Update\1.3.23.9\psmachine_64.dll
c:\program files (x86)\Google\Update\1.3.23.9\psuser.dll
c:\program files (x86)\Google\Update\1.3.23.9\psuser_64.dll
c:\program files (x86)\Google\Update\Download\{430FD4D0-B729-4F61-AA34-91526481799D}\1.3.23.9\GoogleUpdateSetup.exe
c:\program files (x86)\Google\Update\Download\{4DC8B4CA-1BDA-483E-B5FA-D3C12E15B62D}\34.0.1847.131\34.0.1847.131_34.0.1847.116_chrome_updater.exe
c:\program files (x86)\Google\Update\Download\{4DC8B4CA-1BDA-483E-B5FA-D3C12E15B62D}\34.0.1847.131\34.0.1847.131_chrome_installer.exe
c:\program files (x86)\Google\Update\GoogleUpdate.exe
c:\program files (x86)\Skype\Updater
c:\program files (x86)\Skype\Updater\Updater.dll
c:\program files (x86)\Skype\Updater\Updater.exe
c:\programdata\Norton
c:\programdata\Norton\{086A63F0-6B13-4F29-9695-134E7A01E963}\LC.INI
c:\programdata\Symantec
c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
.
.
((((((((((((((((((((((((((((((((((((((( Ovladače/Služby )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
-------\Service_SkypeUpdate
-------\Legacy_gupdate
-------\Legacy_gupdatem
-------\Legacy_gupdate
-------\Legacy_gupdatem
-------\Service_gupdate
-------\Service_gupdatem
-------\Service_gupdate
-------\Service_gupdatem
.
.
((((((((((((((((((((((((( Soubory vytvořené od 2014-04-02 do 2014-05-02 )))))))))))))))))))))))))))))))
.
.
2014-05-02 09:35 . 2014-05-02 09:35 -------- d-----w- c:\users\Public\AppData\Local\temp
2014-05-02 09:35 . 2014-05-02 09:35 -------- d-----w- c:\users\Default\AppData\Local\temp
2014-04-28 16:56 . 2014-04-28 16:56 17931952 ----a-w- c:\windows\SysWow64\FlashPlayerInstaller.exe
2014-04-28 09:29 . 2010-08-30 06:34 536576 ----a-w- c:\windows\SysWow64\sqlite3.dll
2014-04-28 09:27 . 2014-04-28 17:40 -------- d-----w- C:\AdwCleaner
2014-04-22 21:54 . 2014-04-22 21:54 -------- d-----w- c:\users\czech_000\AppData\Roaming\JustDecompile
2014-04-22 21:51 . 2014-04-22 21:51 -------- d-----w- d:\program files (x86)\Telerik
2014-04-22 21:49 . 2014-04-22 21:49 -------- d-----w- c:\programdata\Telerik
2014-04-22 21:48 . 2014-04-22 21:48 -------- d-----w- c:\users\czech_000\AppData\Roaming\Telerik
2014-04-22 21:48 . 2014-04-22 21:48 -------- d-----w- c:\users\czech_000\AppData\Local\Telerik_AD
2014-04-21 15:27 . 2014-04-29 21:45 119512 ----a-w- c:\windows\system32\drivers\MBAMSwissArmy.sys
2014-04-21 15:27 . 2014-04-21 15:27 -------- d-----w- d:\program files (x86)\Malwarebytes Anti-Malware
2014-04-21 15:27 . 2014-04-03 07:51 63192 ----a-w- c:\windows\system32\drivers\mwac.sys
2014-04-21 14:57 . 2014-04-21 15:00 -------- d-----w- c:\programdata\LogMeIn
2014-04-21 14:56 . 2014-04-21 16:29 -------- d-----w- c:\users\czech_000\AppData\Local\LogMeIn Hamachi
2014-04-21 14:55 . 2014-04-21 14:55 -------- d-----w- d:\program files (x86)\LogMeIn Hamachi
2014-04-21 14:52 . 2014-04-21 15:00 -------- d-----w- c:\users\czech_000\AppData\Local\LogMeIn
2014-04-21 13:41 . 1999-04-23 20:22 151552 ----a-w- c:\windows\SysWow64\MSOSS.DLL
2014-04-21 13:41 . 2014-04-21 13:41 -------- d-----w- d:\program files (x86)\Codemasters
2014-04-21 13:40 . 2000-08-11 02:17 77824 ----a-w- c:\program files (x86)\Common Files\InstallShield\engine\6\Intel 32\ctor.dll
2014-04-21 13:40 . 2000-08-11 02:17 221184 ------w- c:\program files (x86)\Common Files\InstallShield\IScript\IScript.dll
2014-04-21 13:40 . 2000-08-11 02:12 217088 ------w- c:\program files (x86)\Common Files\InstallShield\engine\6\Intel 32\iuser.dll
2014-04-21 13:40 . 2000-08-11 02:11 32768 ------w- c:\program files (x86)\Common Files\InstallShield\engine\6\Intel 32\objectps.dll
2014-04-21 13:40 . 2000-01-04 04:39 212992 ----a-w- c:\program files (x86)\Common Files\InstallShield\engine\6\Intel 32\ILog.dll
2014-04-21 13:40 . 2000-08-11 09:42 598016 ----a-w- c:\program files (x86)\Common Files\InstallShield\engine\6\Intel 32\IKernel.exe
2014-04-15 16:17 . 2014-04-15 16:17 -------- d-----w- c:\users\czech_000\AppData\Local\i-Knyazev.ru
2014-04-15 08:46 . 2014-04-15 08:46 46136 ---ha-w- c:\windows\system32\drivers\Hamdrv.sys
2014-04-13 13:18 . 2014-04-13 13:18 -------- d-----w- c:\programdata\NortonInstaller
2014-04-11 19:52 . 2014-04-11 19:52 -------- d-----w- c:\windows\SysWow64\Adobe
2014-04-10 09:46 . 2014-04-10 09:46 -------- d-----w- c:\program files (x86)\Common Files\STORMWARE Shared
2014-04-10 08:51 . 2014-02-05 23:41 978432 ----a-w- c:\windows\system32\KernelBase.dll
2014-04-10 08:51 . 2014-02-05 23:41 1257984 ----a-w- c:\windows\system32\kernel32.dll
2014-04-10 08:51 . 2014-02-05 23:26 666112 ----a-w- c:\windows\SysWow64\KernelBase.dll
2014-04-08 12:35 . 2014-03-21 19:43 40392 ----a-w- c:\windows\system32\drivers\nvvad64v.sys
2014-04-08 12:35 . 2014-03-21 19:43 37320 ----a-w- c:\windows\system32\nvaudcap64v.dll
2014-04-08 12:35 . 2014-03-21 19:43 33568 ----a-w- c:\windows\SysWow64\nvaudcap32v.dll
2014-04-06 12:38 . 2014-04-06 12:38 -------- d-----w- c:\users\czech_000\AppData\Roaming\SWI-Prolog
2014-04-06 12:38 . 2014-04-06 12:38 -------- d-----w- d:\program files (x86)\swipl
2014-04-05 09:33 . 2014-04-05 09:33 -------- d-----w- C:\NVIDIA
2014-04-02 14:05 . 2014-04-02 15:41 -------- d-----w- c:\users\czech_000\AppData\Local\RescueTime.com
2014-04-02 14:05 . 2014-04-02 14:05 -------- d-----w- d:\program files (x86)\RescueTime
.
.
.
(((((((((((((((((((((((((((((((((((((((( Find3M výpis ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2014-04-22 23:47 . 2012-07-26 08:14 78296 ----a-w- c:\windows\SysWow64\FlashPlayerCPLApp.cpl
2014-04-22 23:47 . 2012-07-26 08:14 694232 ----a-w- c:\windows\SysWow64\FlashPlayerApp.exe
2014-04-10 11:26 . 2013-07-14 23:28 90655440 ----a-w- c:\windows\system32\MRT.exe
2014-04-03 07:51 . 2014-01-28 20:03 88280 ----a-w- c:\windows\system32\drivers\mbamchameleon.sys
2014-04-03 07:50 . 2013-07-28 10:13 25816 ----a-w- c:\windows\system32\drivers\mbam.sys
2014-04-02 13:27 . 2013-10-30 09:27 1081112 ----a-w- c:\windows\SysWow64\nvspcap.dll
2014-04-02 13:27 . 2013-10-30 09:27 1225920 ----a-w- c:\windows\system32\nvspcap64.dll
2014-03-29 19:39 . 2013-08-31 23:07 1488160 ----a-w- c:\programdata\Microsoft\VisualStudio\11.0\1033\ResourceCache.dll
2014-03-29 19:39 . 2013-08-31 23:27 1496704 ----a-w- c:\programdata\Microsoft\VisualStudio\11.0\1029\ResourceCache.dll
2014-03-10 13:44 . 2014-03-10 13:44 96168 ----a-w- c:\windows\SysWow64\WindowsAccessBridge-32.dll
2014-03-10 12:59 . 2014-03-10 12:59 312744 ----a-w- c:\windows\system32\javaws.exe
2014-03-10 12:59 . 2013-09-28 20:43 189352 ----a-w- c:\windows\system32\javaw.exe
2014-03-10 12:59 . 2013-09-28 20:43 189352 ----a-w- c:\windows\system32\java.exe
2014-03-10 12:59 . 2013-09-28 20:43 108968 ----a-w- c:\windows\system32\WindowsAccessBridge-64.dll
2014-02-08 18:34 . 2014-02-23 14:56 32544 ----a-w- c:\windows\system32\drivers\nvpciflt.sys
2014-02-08 18:34 . 2014-02-23 14:56 18257576 ----a-w- c:\windows\system32\nvwgf2umx.dll
2014-02-08 18:34 . 2014-02-23 14:56 15740232 ----a-w- c:\windows\SysWow64\nvwgf2um.dll
2014-02-08 18:34 . 2014-02-23 14:56 11589272 ----a-w- c:\windows\system32\nvopencl.dll
2014-02-08 18:34 . 2014-02-23 14:56 9690424 ----a-w- c:\windows\SysWow64\nvopencl.dll
2014-02-08 18:34 . 2014-02-23 14:56 353504 ----a-w- c:\windows\system32\nvoglshim64.dll
2014-02-08 18:34 . 2014-02-23 14:56 31432480 ----a-w- c:\windows\system32\nvoglv64.dll
2014-02-08 18:34 . 2014-02-23 14:56 305600 ----a-w- c:\windows\SysWow64\nvoglshim32.dll
2014-02-08 18:34 . 2014-02-23 14:56 23683360 ----a-w- c:\windows\SysWow64\nvoglv32.dll
2014-02-08 18:34 . 2014-02-23 14:56 12324640 ----a-w- c:\windows\system32\drivers\nvlddmkm.sys
2014-02-08 18:34 . 2014-02-23 14:56 892192 ----a-w- c:\windows\system32\NvIFR64.dll
2014-02-08 18:34 . 2014-02-23 14:56 875296 ----a-w- c:\windows\system32\NvFBC64.dll
2014-02-08 18:34 . 2014-02-23 14:56 863520 ----a-w- c:\windows\SysWow64\NvIFR.dll
2014-02-08 18:34 . 2014-02-23 14:56 844576 ----a-w- c:\windows\SysWow64\NvFBC.dll
2014-02-08 18:34 . 2014-02-23 14:56 483104 ----a-w- c:\windows\system32\nvEncodeAPI64.dll
2014-02-08 18:34 . 2014-02-23 14:56 408352 ----a-w- c:\windows\SysWow64\nvEncodeAPI.dll
2014-02-08 18:34 . 2014-02-23 14:56 378656 ----a-w- c:\windows\system32\NvIFROpenGL.dll
2014-02-08 18:34 . 2014-02-23 14:56 333600 ----a-w- c:\windows\SysWow64\NvIFROpenGL.dll
2014-02-08 18:34 . 2014-02-23 14:56 1885472 ----a-w- c:\windows\system32\nvdispco6433489.dll
2014-02-08 18:34 . 2014-02-23 14:56 17715784 ----a-w- c:\windows\system32\nvd3dumx.dll
2014-02-08 18:34 . 2014-02-23 14:56 1515296 ----a-w- c:\windows\system32\nvdispgenco6433489.dll
2014-02-08 18:34 . 2014-02-23 14:56 9728064 ----a-w- c:\windows\SysWow64\nvcuda.dll
2014-02-08 18:34 . 2014-02-23 14:56 3142432 ----a-w- c:\windows\system32\nvcuvid.dll
2014-02-08 18:34 . 2014-02-23 14:56 2956576 ----a-w- c:\windows\SysWow64\nvcuvid.dll
2014-02-08 18:34 . 2014-02-23 14:56 2782496 ----a-w- c:\windows\system32\nvcuvenc.dll
2014-02-08 18:34 . 2014-02-23 14:56 2410784 ----a-w- c:\windows\SysWow64\nvcuvenc.dll
2014-02-08 18:34 . 2014-02-23 14:56 14669032 ----a-w- c:\windows\SysWow64\nvd3dum.dll
2014-02-08 18:34 . 2014-02-23 14:56 11636176 ----a-w- c:\windows\system32\nvcuda.dll
2014-02-08 18:34 . 2014-02-23 14:56 25256224 ----a-w- c:\windows\system32\nvcompiler.dll
2014-02-08 18:34 . 2014-02-23 14:56 17560352 ----a-w- c:\windows\SysWow64\nvcompiler.dll
2014-02-08 18:34 . 2013-07-14 22:41 947296 ----a-w- c:\windows\system32\nvumdshimx.dll
2014-02-08 18:34 . 2013-07-14 22:41 832424 ----a-w- c:\windows\SysWow64\nvumdshim.dll
2014-02-08 18:34 . 2013-07-14 22:41 3090184 ----a-w- c:\windows\system32\nvapi64.dll
2014-02-08 18:34 . 2013-07-14 22:41 2713728 ----a-w- c:\windows\SysWow64\nvapi.dll
2014-02-08 18:34 . 2013-07-14 22:41 174296 ----a-w- c:\windows\system32\nvinitx.dll
2014-02-08 18:34 . 2013-07-14 22:41 148528 ----a-w- c:\windows\SysWow64\nvinit.dll
2014-02-08 17:42 . 2013-07-14 22:43 6712608 ----a-w- c:\windows\system32\nvcpl.dll
2014-02-08 17:42 . 2013-07-14 22:43 3498272 ----a-w- c:\windows\system32\nvsvc64.dll
2014-02-08 17:42 . 2013-07-14 22:43 923936 ----a-w- c:\windows\system32\nvvsvc.exe
2014-02-08 17:42 . 2013-07-14 22:43 67072 ----a-w- c:\windows\system32\nv3dappshextr.dll
2014-02-08 17:42 . 2013-07-14 22:43 63776 ----a-w- c:\windows\system32\nvshext.dll
2014-02-08 17:42 . 2013-07-14 22:43 386336 ----a-w- c:\windows\system32\nvmctray.dll
2014-02-08 17:42 . 2013-07-14 22:43 2559776 ----a-w- c:\windows\system32\nvsvcr.dll
2014-02-08 17:42 . 2013-07-14 22:43 1075488 ----a-w- c:\windows\system32\nv3dappshext.dll
2014-02-08 17:42 . 2013-07-14 22:42 607520 ----a-w- c:\windows\SysWow64\oemdspif.dll
2014-02-08 04:34 . 2014-03-13 14:25 4036608 ----a-w- c:\windows\system32\win32k.sys
2014-02-05 23:41 . 2014-03-13 14:25 595968 ----a-w- c:\windows\system32\qedit.dll
2014-02-05 23:37 . 2014-03-13 14:25 496640 ----a-w- c:\windows\SysWow64\qedit.dll
2014-02-05 17:52 . 2013-07-14 22:43 3573739 ----a-w- c:\windows\system32\nvcoproc.bin
2014-02-02 10:22 . 2014-02-02 10:22 35352 ----a-w- c:\windows\system32\drivers\cnnctfy3.sys
.
.
(((((((((((((((((((((((((((((((((( Spouštěcí body v registru )))))))))))))))))))))))))))))))))))))))))))))
.
.
*Poznámka* prázdné záznamy a legitimní výchozí údaje nejsou zobrazeny.
REGEDIT4
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ SkyDrive1]
@="{F241C880-6982-4CE5-8CF7-7085BA96DA5A}"
[HKEY_CLASSES_ROOT\CLSID\{F241C880-6982-4CE5-8CF7-7085BA96DA5A}]
2013-08-18 08:20 222832 ----a-w- c:\users\czech_000\AppData\Local\Microsoft\SkyDrive\17.0.2015.0811\SkyDriveShell.dll
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ SkyDrive2]
@="{A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E}"
[HKEY_CLASSES_ROOT\CLSID\{A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E}]
2013-08-18 08:20 222832 ----a-w- c:\users\czech_000\AppData\Local\Microsoft\SkyDrive\17.0.2015.0811\SkyDriveShell.dll
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ SkyDrive3]
@="{BBACC218-34EA-4666-9D7A-C78F2274A524}"
[HKEY_CLASSES_ROOT\CLSID\{BBACC218-34EA-4666-9D7A-C78F2274A524}]
2013-08-18 08:20 222832 ----a-w- c:\users\czech_000\AppData\Local\Microsoft\SkyDrive\17.0.2015.0811\SkyDriveShell.dll
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ SkyDrivePro1 (ErrorConflict)]
@="{8BA85C75-763B-4103-94EB-9470F12FE0F7}"
[HKEY_CLASSES_ROOT\CLSID\{8BA85C75-763B-4103-94EB-9470F12FE0F7}]
2014-03-12 18:07 1728216 ----a-w- d:\program files (x86)\MICROS~1\Office15\GROOVEEX.DLL
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ SkyDrivePro2 (SyncInProgress)]
@="{CD55129A-B1A1-438E-A425-CEBC7DC684EE}"
[HKEY_CLASSES_ROOT\CLSID\{CD55129A-B1A1-438E-A425-CEBC7DC684EE}]
2014-03-12 18:07 1728216 ----a-w- d:\program files (x86)\MICROS~1\Office15\GROOVEEX.DLL
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ SkyDrivePro3 (InSync)]
@="{E768CD3B-BDDC-436D-9C13-E1B39CA257B1}"
[HKEY_CLASSES_ROOT\CLSID\{E768CD3B-BDDC-436D-9C13-E1B39CA257B1}]
2014-03-12 18:07 1728216 ----a-w- d:\program files (x86)\MICROS~1\Office15\GROOVEEX.DLL
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Skype"="c:\program files (x86)\Skype\Phone\Skype.exe" [2014-02-10 20922016]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]
"IAStorIcon"="c:\program files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIconLaunch.exe" [2012-07-16 56128]
"LogMeIn Hamachi Ui"="d:\program files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe" [2014-04-15 3814736]
.
c:\programdata\Microsoft\Windows\Start Menu\Programs\StartUp\
RescueTime.lnk - d:\program files (x86)\RescueTime\RescueTime.exe [2014-4-2 3343360]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"EnableUIADesktopToggle"= 0 (0x0)
"EnableCursorSuppression"= 1 (0x1)
"ConsentPromptBehaviorUser"= 3 (0x3)
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\windows]
"LoadAppInit_DLLs"=1 (0x1)
"AppInit_DLLs"=c:\windows\SysWOW64\nvinit.dll
.
R0 sfdrv01a;StarForce Protection Environment Driver (version 1.x.a);c:\windows\system32\drivers\sfdrv01a.sys;c:\windows\SYSNATIVE\drivers\sfdrv01a.sys [x]
R3 AcuWVSSchedulerv8;Acunetix WVS Scheduler v8;d:\program files (x86)\Acunetix\Web Vulnerability Scanner 8\WVSScheduler.exe;d:\program files (x86)\Acunetix\Web Vulnerability Scanner 8\WVSScheduler.exe [x]
R3 anvsnddrv;AnvSoft Virtual Sound Device;c:\windows\system32\drivers\anvsnddrv.sys;c:\windows\SYSNATIVE\drivers\anvsnddrv.sys [x]
R3 cpuz136;cpuz136;c:\windows\TEMP\cpuz136\cpuz136_x64.sys;c:\windows\TEMP\cpuz136\cpuz136_x64.sys [x]
R3 FLEXnet Licensing Service 64;FLEXnet Licensing Service 64;c:\program files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService64.exe;c:\program files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService64.exe [x]
R3 Futuremark SystemInfo Service;Futuremark SystemInfo Service;c:\program files (x86)\Futuremark\Futuremark SystemInfo\FMSISvc.exe;c:\program files (x86)\Futuremark\Futuremark SystemInfo\FMSISvc.exe [x]
R3 Hamachi2Svc;LogMeIn Hamachi Tunneling Engine;d:\program files (x86)\LogMeIn Hamachi\hamachi-2.exe;d:\program files (x86)\LogMeIn Hamachi\hamachi-2.exe [x]
R3 ICCS;Intel(R) Integrated Clock Controller Service - Intel(R) ICCS;c:\program files (x86)\Intel\Intel(R) Integrated Clock Controller Service\ICCProxy.exe;c:\program files (x86)\Intel\Intel(R) Integrated Clock Controller Service\ICCProxy.exe [x]
R3 MyWiFiDHCPDNS;Wireless PAN DHCP Server;d:\program files\Intel\WiFi\bin\PanDhcpDns.exe;d:\program files\Intel\WiFi\bin\PanDhcpDns.exe [x]
R3 NETwNe64;Ovladač adaptéru řady Intel(R) Wireless WiFi Link 5000 pro systém Windows 8 64 Bit;c:\windows\system32\DRIVERS\NETwew00.sys;c:\windows\SYSNATIVE\DRIVERS\NETwew00.sys [x]
R3 NvStreamSvc;NVIDIA Streamer Service;d:\program files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe;d:\program files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [x]
R3 RSUSBVSTOR;RtsUVStor.Sys Realtek USB Card Reader;c:\windows\System32\Drivers\RtsUVStor.sys;c:\windows\SYSNATIVE\Drivers\RtsUVStor.sys [x]
R3 SolutoRemoteService;Soluto Remote Service;d:\program files\Soluto\SolutoRemoteService.exe;d:\program files\Soluto\SolutoRemoteService.exe [x]
R3 Speechsrv;Glasovne poruke;d:\program files (x86)\LAN Voice Chat\Speechs.exe;d:\program files (x86)\LAN Voice Chat\Speechs.exe [x]
R3 SuperIO;Lenovo ASD HWM Driver;c:\windows\System32\drivers\spio.sys;c:\windows\SYSNATIVE\drivers\spio.sys [x]
R3 SwitchBoard;SwitchBoard;c:\program files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe;c:\program files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [x]
R3 Te.Service;Te.Service;c:\program files (x86)\Windows Kits\8.1\Testing\Runtimes\TAEF\Wex.Services.exe;c:\program files (x86)\Windows Kits\8.1\Testing\Runtimes\TAEF\Wex.Services.exe [x]
R3 TeamViewer9;TeamViewer 9;c:\program files (x86)\TeamViewer\Version9\TeamViewer_Service.exe;c:\program files (x86)\TeamViewer\Version9\TeamViewer_Service.exe [x]
R3 USBAAPL64;Apple Mobile USB Driver;c:\windows\System32\Drivers\usbaapl64.sys;c:\windows\SYSNATIVE\Drivers\usbaapl64.sys [x]
R3 VBoxNetAdp;VirtualBox Host-Only Ethernet Adapter;c:\windows\system32\DRIVERS\VBoxNetAdp.sys;c:\windows\SYSNATIVE\DRIVERS\VBoxNetAdp.sys [x]
R3 VBoxUSB;VirtualBox USB;c:\windows\System32\Drivers\VBoxUSB.sys;c:\windows\SYSNATIVE\Drivers\VBoxUSB.sys [x]
R3 vmicheartbeat;Služba prezenčního signálu technologie Hyper-V;c:\windows\system32\svchost.exe;c:\windows\SYSNATIVE\svchost.exe [x]
R3 VsEtwService120;Visual Studio ETW Event Collection Service;d:\program files\Microsoft Visual Studio 12.0\Common7\Packages\Debugger\Services\VsEtwService.exe;d:\program files\Microsoft Visual Studio 12.0\Common7\Packages\Debugger\Services\VsEtwService.exe [x]
S0 fltsrv;Acronis Storage Filter Management;c:\windows\system32\DRIVERS\fltsrv.sys;c:\windows\SYSNATIVE\DRIVERS\fltsrv.sys [x]
S0 iaStorA;iaStorA;c:\windows\System32\drivers\iaStorA.sys;c:\windows\SYSNATIVE\drivers\iaStorA.sys [x]
S0 LHDmgr;LHDmgr;c:\windows\System32\DRIVERS\LhdX64.sys;c:\windows\SYSNATIVE\DRIVERS\LhdX64.sys [x]
S0 nvpciflt;nvpciflt;c:\windows\system32\DRIVERS\nvpciflt.sys;c:\windows\SYSNATIVE\DRIVERS\nvpciflt.sys [x]
S0 Soluto;Soluto;c:\windows\system32\DRIVERS\Soluto.sys;c:\windows\SYSNATIVE\DRIVERS\Soluto.sys [x]
S1 VBoxDrv;VirtualBox Service;c:\windows\system32\DRIVERS\VBoxDrv.sys;c:\windows\SYSNATIVE\DRIVERS\VBoxDrv.sys [x]
S1 VBoxUSBMon;VirtualBox USB Monitor Driver;c:\windows\system32\DRIVERS\VBoxUSBMon.sys;c:\windows\SYSNATIVE\DRIVERS\VBoxUSBMon.sys [x]
S2 Bluetooth Device Monitor;Bluetooth Device Monitor;c:\program files (x86)\Intel\Bluetooth\devmonsrv.exe;c:\program files (x86)\Intel\Bluetooth\devmonsrv.exe [x]
S2 Bluetooth OBEX Service;Bluetooth OBEX Service;c:\program files (x86)\Intel\Bluetooth\obexsrv.exe;c:\program files (x86)\Intel\Bluetooth\obexsrv.exe [x]
S2 IAStorDataMgrSvc;Úložná technologie Intel® Rapid;c:\program files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe;c:\program files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe [x]
S2 Intel(R) Wireless Bluetooth(R) 4.0 Radio Management;Intel(R) Wireless Bluetooth(R) 4.0 Radio Management;c:\program files (x86)\Intel\Bluetooth\ibtrksrv.exe;c:\program files (x86)\Intel\Bluetooth\ibtrksrv.exe [x]
S2 MBAMService;MBAMService;d:\program files (x86)\Malwarebytes Anti-Malware\mbamservice.exe;d:\program files (x86)\Malwarebytes Anti-Malware\mbamservice.exe [x]
S2 NvNetworkService;NVIDIA Network Service;c:\program files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe;c:\program files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [x]
S2 SolutoLauncherService;Soluto Launcher Service;d:\program files\Soluto\SolutoLauncherService.exe;d:\program files\Soluto\SolutoLauncherService.exe [x]
S2 SolutoService;Soluto PCGenome Core Service;d:\program files\Soluto\SolutoService.exe;d:\program files\Soluto\SolutoService.exe [x]
S2 ZeroConfigService;Intel(R) PROSet/Wireless Zero Configuration Service;d:\program files\Intel\WiFi\bin\ZeroConfigService.exe;d:\program files\Intel\WiFi\bin\ZeroConfigService.exe [x]
S3 ACPIVPC;Lenovo Virtual Power Controller Driver;c:\windows\System32\drivers\AcpiVpc.sys;c:\windows\SYSNATIVE\drivers\AcpiVpc.sys [x]
S3 BthLEEnum;Ovladač úspory energie technologie Bluetooth;c:\windows\system32\DRIVERS\BthLEEnum.sys;c:\windows\SYSNATIVE\DRIVERS\BthLEEnum.sys [x]
S3 btmaux;Intel Bluetooth Auxiliary Service;c:\windows\system32\DRIVERS\btmaux.sys;c:\windows\SYSNATIVE\DRIVERS\btmaux.sys [x]
S3 btmhsf;btmhsf;c:\windows\system32\DRIVERS\btmhsf.sys;c:\windows\SYSNATIVE\DRIVERS\btmhsf.sys [x]
S3 ibtfltcoex;ibtfltcoex;c:\windows\system32\DRIVERS\iBtFltCoex.sys;c:\windows\SYSNATIVE\DRIVERS\iBtFltCoex.sys [x]
S3 IntcDAud;Intel(R) Display Audio;c:\windows\system32\DRIVERS\IntcDAud.sys;c:\windows\SYSNATIVE\DRIVERS\IntcDAud.sys [x]
S3 MBAMProtector;MBAMProtector;c:\windows\system32\drivers\mbam.sys;c:\windows\SYSNATIVE\drivers\mbam.sys [x]
S3 MBAMWebAccessControl;MBAMWebAccessControl;c:\windows\system32\drivers\mwac.sys;c:\windows\SYSNATIVE\drivers\mwac.sys [x]
S3 nvvad_WaveExtensible;NVIDIA Virtual Audio Device (Wave Extensible) (WDM);c:\windows\system32\drivers\nvvad64v.sys;c:\windows\SYSNATIVE\drivers\nvvad64v.sys [x]
S3 RTL8168;Realtek 8168 NT Driver;c:\windows\system32\DRIVERS\Rt630x64.sys;c:\windows\SYSNATIVE\DRIVERS\Rt630x64.sys [x]
S3 rtsuvc;Lenovo EasyCamera;c:\windows\system32\DRIVERS\rtsuvc.sys;c:\windows\SYSNATIVE\DRIVERS\rtsuvc.sys [x]
S3 SmbDrvI;SmbDrvI;c:\windows\system32\DRIVERS\Smb_driver_Intel.sys;c:\windows\SYSNATIVE\DRIVERS\Smb_driver_Intel.sys [x]
S3 VBoxNetFlt;VirtualBox Bridged Networking Service;c:\windows\system32\DRIVERS\VBoxNetFlt.sys;c:\windows\SYSNATIVE\DRIVERS\VBoxNetFlt.sys [x]
.
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\active setup\installed components\{8A69D345-D564-463c-AFF1-A69D9E530F96}]
2014-04-25 08:44 1078088 ----a-w- c:\program files (x86)\Google\Chrome\Application\34.0.1847.131\Installer\chrmstp.exe
.
Obsah adresáře 'Naplánované úlohy'
.
2014-05-01 c:\windows\Tasks\Adobe Flash Player Updater.job
- c:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2013-07-15 16:56]
.
.
--------- X64 Entries -----------
.
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ SkyDrive1]
@="{F241C880-6982-4CE5-8CF7-7085BA96DA5A}"
[HKEY_CLASSES_ROOT\CLSID\{F241C880-6982-4CE5-8CF7-7085BA96DA5A}]
2013-08-18 08:20 261744 ----a-w- c:\users\czech_000\AppData\Local\Microsoft\SkyDrive\17.0.2015.0811\amd64\SkyDriveShell64.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ SkyDrive2]
@="{A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E}"
[HKEY_CLASSES_ROOT\CLSID\{A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E}]
2013-08-18 08:20 261744 ----a-w- c:\users\czech_000\AppData\Local\Microsoft\SkyDrive\17.0.2015.0811\amd64\SkyDriveShell64.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ SkyDrive3]
@="{BBACC218-34EA-4666-9D7A-C78F2274A524}"
[HKEY_CLASSES_ROOT\CLSID\{BBACC218-34EA-4666-9D7A-C78F2274A524}]
2013-08-18 08:20 261744 ----a-w- c:\users\czech_000\AppData\Local\Microsoft\SkyDrive\17.0.2015.0811\amd64\SkyDriveShell64.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ SkyDrivePro1 (ErrorConflict)]
@="{8BA85C75-763B-4103-94EB-9470F12FE0F7}"
[HKEY_CLASSES_ROOT\CLSID\{8BA85C75-763B-4103-94EB-9470F12FE0F7}]
2014-03-12 18:11 2333400 ----a-w- d:\program files\MICROS~2\Office15\GROOVEEX.DLL
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ SkyDrivePro2 (SyncInProgress)]
@="{CD55129A-B1A1-438E-A425-CEBC7DC684EE}"
[HKEY_CLASSES_ROOT\CLSID\{CD55129A-B1A1-438E-A425-CEBC7DC684EE}]
2014-03-12 18:11 2333400 ----a-w- d:\program files\MICROS~2\Office15\GROOVEEX.DLL
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ SkyDrivePro3 (InSync)]
@="{E768CD3B-BDDC-436D-9C13-E1B39CA257B1}"
[HKEY_CLASSES_ROOT\CLSID\{E768CD3B-BDDC-436D-9C13-E1B39CA257B1}]
2014-03-12 18:11 2333400 ----a-w- d:\program files\MICROS~2\Office15\GROOVEEX.DLL
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"IgfxTray"="c:\windows\system32\igfxtray.exe" [2012-12-19 172168]
"Persistence"="c:\windows\system32\igfxpers.exe" [2012-12-19 441992]
"SynLenovoGestureMgr"="d:\program files (x86)\Synaptics\SynTP\SynLenovoGestureMgr.exe" [BU]
"NvBackend"="c:\program files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe" [2014-04-02 2201032]
"Energy Management"="c:\program files (x86)\Lenovo\Energy Management\Energy Management.exe" [2013-07-14 17080376]
"EnergyUtility"="c:\program files (x86)\Lenovo\Energy Management\Utility.exe" [2013-07-14 191544]
"ShadowPlay"="c:\windows\system32\nvspcap64.dll" [2014-04-02 1225920]
"BTMTrayAgent"="c:\program files (x86)\Intel\Bluetooth\btmshellex.dll" [2013-09-19 7818040]
"Soluto"="d:\program files\soluto\soluto.exe" [2013-08-17 1252896]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
"AppInit_DLLs"=c:\windows\System32\nvinitx.dll
.
------- Doplňkový sken -------
.
uLocal Page = %SystemRoot%\system32\blank.htm
uStart Page = about:blank
mLocal Page = c:\windows\SYSTEM32\blank.htm
uInternet Settings,ProxyOverride = <local>
IE: E&xport to Microsoft Excel - d:\program files (x86)\MICROS~1\Office15\EXCEL.EXE/3000
IE: Inspect Element with DebugBar - d:\program files (x86)\Core Services\DebugBar\DebugInfoBar.dll/247
IE: Odeslat do Bluetooth - c:\program files (x86)\Intel\Bluetooth\btSendToObject.htm
TCP: DhcpNameServer = 10.0.0.100 10.0.0.200
TCP: Interfaces\{71455945-BABD-4FB1-B236-685344ED7763}: NameServer = 8.8.8.8
TCP: Interfaces\{E9489A65-DA61-493A-B076-7DD4756071B6}: NameServer = 8.8.8.8
TCP: Interfaces\{E9489A65-DA61-493A-B076-7DD4756071B6}\55026537563686023456274757: NameServer = 8.8.8.8
TCP: Interfaces\{E9489A65-DA61-493A-B076-7DD4756071B6}\D4F647F62756374724973747: NameServer = 8.8.8.8
Filter: text/xml - {807583E5-5146-11D5-A672-00B0D022E945} - c:\program files (x86)\Common Files\Microsoft Shared\OFFICE15\MSOXMLMF.DLL
FF - ProfilePath - c:\users\czech_000\AppData\Roaming\Mozilla\Firefox\Profiles\qtewduse.default-1376041014175\
.
Binary file temp00 matches
.
--------------------- ZAMKNUTÉ KLÍČE V REGISTRU ---------------------
.
[HKEY_LOCAL_MACHINE\software\Wow6432Node\Microsoft\Office\Common\Smart Tag\Actions\{B7EFF951-E52F-45CC-9EF7-57124F2177CC}]
@Denied: (A) (Everyone)
"Solution"="{15727DE6-F92D-4E46-ACB4-0E2C58B31A18}"
.
[HKEY_LOCAL_MACHINE\software\Wow6432Node\Microsoft\Schema Library\ActionsPane3]
@Denied: (A) (Everyone)
.
[HKEY_LOCAL_MACHINE\software\Wow6432Node\Microsoft\Schema Library\ActionsPane3\0]
"Key"="ActionsPane3"
"Location"="c:\\Program Files (x86)\\Common Files\\Microsoft Shared\\VSTO\\ActionsPane3.xsd"
.
------------------------ Jiné spuštené procesy ------------------------
.
d:\program files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe
c:\program files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
d:\program files (x86)\Opera\20.0.1387.91\opera.exe
d:\program files (x86)\Opera\20.0.1387.91\opera_crashreporter.exe
d:\program files (x86)\Opera\20.0.1387.91\opera.exe
d:\program files (x86)\Opera\20.0.1387.91\opera.exe
d:\program files (x86)\Opera\20.0.1387.91\opera.exe
d:\program files (x86)\Opera\20.0.1387.91\opera.exe
d:\program files (x86)\Opera\20.0.1387.91\opera.exe
d:\program files (x86)\Opera\20.0.1387.91\opera.exe
d:\program files (x86)\Opera\20.0.1387.91\opera.exe
d:\program files (x86)\Opera\20.0.1387.91\opera.exe
d:\program files (x86)\Opera\20.0.1387.91\opera.exe
d:\program files (x86)\Opera\20.0.1387.91\opera.exe
.
**************************************************************************
.
Celkový čas: 2014-05-02 11:44:11 - počítač byl restartován
ComboFix-quarantined-files.txt 2014-05-02 09:44
ComboFix2.txt 2014-05-01 17:51
.
Před spuštěním: 59 201 056 768 bytes free
Po spuštění: 59 025 047 552 bytes free
.
- - End Of File - - 36F7372FA9A2CD8516E6778C33866697








aswMBR version 0.9.9.1771 Copyright(c) 2011 AVAST Software
Run date: 2014-05-02 11:45:08
-----------------------------
11:45:08.254 OS Version: Windows x64 6.2.9200
11:45:08.254 Number of processors: 4 586 0x2A07
11:45:08.255 ComputerName: NTB UserName:
11:45:09.299 Initialize success
11:45:14.606 Disk 0 (boot) \Device\Harddisk0\DR0 -> \Device\00000048
11:45:14.609 Disk 0 Vendor: ST1000LM024_HN-M101MBB 2AR20002 Size: 953869MB BusType: 11
11:45:14.745 Disk 0 MBR read successfully
11:45:14.747 Disk 0 MBR scan
11:45:14.748 Disk 0 Windows 7 default MBR code
11:45:14.763 Disk 0 Partition 1 80 (A) 07 HPFS/NTFS NTFS 350 MB offset 2048
11:45:14.766 Disk 0 Partition 2 00 07 HPFS/NTFS NTFS 150775 MB offset 718848
11:45:14.790 Disk 0 Partition 3 00 12 Compaq diag NTFS 1500 MB offset 309506048
11:45:14.808 Disk 0 Partition 4 00 07 HPFS/NTFS NTFS 801242 MB offset 312578048
11:45:14.838 Disk 0 scanning C:\Windows\system32\drivers
11:45:21.380 Service scanning
11:45:36.594 Modules scanning
11:45:36.600 Disk 0 trace - called modules:
11:45:36.633 ntoskrnl.exe CLASSPNP.SYS disk.sys storport.sys hal.dll iaStorA.sys
11:45:36.968 1 nt!IofCallDriver -> \Device\Harddisk0\DR0[0xfffffa80062ba5b0]
11:45:36.974 3 CLASSPNP.SYS[fffff88002185e0a] -> nt!IofCallDriver -> \Device\00000048[0xfffffa8004a10060]
11:45:36.981 Scan finished successfully
11:45:43.675 Disk 0 MBR has been saved successfully to "C:\Users\czech_000\Desktop\MBR.dat"
11:45:43.678 The log file has been saved successfully to "C:\Users\czech_000\Desktop\aswMBR.txt"

[Orcus]

ComboFix se odinstaluje takto:
Start-Spustit a zadej ComboFix /Uninstall

====================================================

Vyčisti systém CCleanerem

====================================================

Stáhni si zde DelFix
http://general-changelog-team.fr/fr/dow ... e/9-delfix

ulož si soubor na plochu.
Poklepáním na ikonu spusť nástroj Delfix.exe
( Ve Windows Vista, Windows 7 a 8, musíš spustit soubor pravým tlačítkem myši -> Spustit jako správce .
V hlavním menu, zkontroluj tyto možnosti - Odstranění dezinfekce nástrojů (Remove desinfection tools) – Vyčistit body obnovy (Purge System Restore)
Poté klikněte na tlačítko Spustit (Run) a nech nástroj dělat svoji práci

Poté se zpráva se otevře (DelFix.txt). Vlož celý obsah zprávy sem. Jinak je zpráva zde:
v C: \ DelFix.txt

Co problémy? + nový log z HJT

[CZechBoY]

# DelFix v10.7 - Logfile created 02/05/2014 at 14:25:37
# Updated 27/04/2014 by Xplode
# Username : czech_000 - NTB
# Operating System : Windows 8 Pro (64 bits)

~ Removing disinfection tools ...

Deleted : C:\AdwCleaner
Deleted : C:\Users\czech_000\Desktop\mbar
Deleted : C:\ComboFix.txt
Deleted : C:\TDSSKiller.2.8.16.0_30.04.2014_11.47.41_log.txt
Deleted : C:\TDSSKiller.2.8.16.0_30.04.2014_21.02.45_log.txt
Deleted : C:\TDSSKiller.3.0.0.34_30.04.2014_11.47.54_log.txt
Deleted : C:\Users\czech_000\Desktop\aswmbr.exe
Deleted : C:\Users\czech_000\Desktop\MBR.dat
Deleted : HKLM\SOFTWARE\AdwCleaner
Deleted : HKLM\SOFTWARE\Swearware
Deleted : HKLM\SOFTWARE\TrendMicro\Hijackthis
Deleted : HKLM\SYSTEM\CurrentControlSet\Services\aswMBR

~ Cleaning system restore ...

Deleted : RP #129 [ComboFix created restore point | 05/02/2014 12:12:02]

New restore point created !

########## - EOF - ##########




Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 14:26:26, on 2. 5. 2014
Platform: Unknown Windows (WinNT 6.02.1008)
MSIE: Internet Explorer v10.0 (10.00.9200.16537)
Boot mode: Normal

Running processes:
C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe
C:\Program Files (x86)\Skype\Phone\Skype.exe
C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
D:\Program Files (x86)\Opera\20.0.1387.91\opera.exe
D:\Program Files (x86)\Opera\20.0.1387.91\opera_crashreporter.exe
D:\Program Files (x86)\Opera\20.0.1387.91\opera.exe
D:\Program Files (x86)\Opera\20.0.1387.91\opera.exe
D:\Program Files (x86)\Opera\20.0.1387.91\opera.exe
D:\Program Files (x86)\Opera\20.0.1387.91\opera.exe
D:\Program Files (x86)\Opera\20.0.1387.91\opera.exe
D:\Program Files (x86)\Opera\20.0.1387.91\opera.exe
D:\Program Files (x86)\Opera\20.0.1387.91\opera.exe
D:\Program Files (x86)\Opera\20.0.1387.91\opera.exe
D:\Program Files (x86)\Opera\20.0.1387.91\opera.exe
D:\Program Files (x86)\Opera\20.0.1387.91\opera.exe
D:\Program Files (x86)\Opera\20.0.1387.91\opera.exe
D:\Program Files (x86)\Opera\20.0.1387.91\opera.exe
D:\Program Files (x86)\Trend Micro\HiJackThis\HiJackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/p/?LinkId=255141
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/p/?LinkId=255141
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
O2 - BHO: Lync Click to Call BHO - {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} - D:\Program Files (x86)\Microsoft Office\Office15\OCHelper.dll
O2 - BHO: Microsoft Web Test Recorder 12.0 Helper - {432dd630-7e03-4c97-9d62-b99f52df4fc2} - D:\Program Files (x86)\Microsoft Visual Studio 12.0\Common7\IDE\PrivateAssemblies\Microsoft.VisualStudio.QualityTools.RecorderBarBHO100.dll
O2 - BHO: DebugBar BHO - {69FC0024-10EB-480A-BBF2-3BF4E78E17B1} - D:\Program Files (x86)\Core Services\DebugBar\DebugInfoBar.dll
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll
O2 - BHO: Microsoft Web Test Recorder 10.0 Helper - {876d9f09-c6d6-4324-a2cc-04dd9a4de12f} - D:\Program Files (x86)\Microsoft Visual Studio 11.0\Common7\IDE\PrivateAssemblies\Microsoft.VisualStudio.QualityTools.RecorderBarBHO100.dll
O2 - BHO: Microsoft SkyDrive Pro Browser Helper - {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} - D:\Program Files (x86)\MICROS~1\Office15\GROOVEEX.DLL
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll
O4 - HKLM\..\Run: [IAStorIcon] C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIconLaunch.exe "C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe" 60
O4 - HKLM\..\Run: [LogMeIn Hamachi Ui] "D:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe" --auto-start
O4 - HKCU\..\Run: [Skype] "C:\Program Files (x86)\Skype\Phone\Skype.exe" /minimized /regrun
O4 - Global Startup: RescueTime.lnk = D:\Program Files (x86)\RescueTime\RescueTime.exe
O8 - Extra context menu item: E&xport to Microsoft Excel - res://D:\Program Files (x86)\MICROS~1\Office15\EXCEL.EXE/3000
O8 - Extra context menu item: Inspect Element with DebugBar - res://D:\Program Files (x86)\Core Services\DebugBar\DebugInfoBar.dll/247
O8 - Extra context menu item: Odeslat do Bluetooth - C:\Program Files (x86)\Intel\Bluetooth\btSendToObject.htm
O9 - Extra button: Lync Click to Call - {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} - D:\Program Files (x86)\Microsoft Office\Office15\OCHelper.dll
O9 - Extra 'Tools' menuitem: Lync Click to Call - {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} - D:\Program Files (x86)\Microsoft Office\Office15\OCHelper.dll
O9 - Extra button: Odeslat do Bluetooth - {2F56DCAA-153B-4479-B4E2-547405B34FB9} - C:\Program Files (x86)\Intel\Bluetooth\btSendToPage.htm (file missing) (HKCU)
O9 - Extra 'Tools' menuitem: Odeslat do Bluetooth - {2F56DCAA-153B-4479-B4E2-547405B34FB9} - C:\Program Files (x86)\Intel\Bluetooth\btSendToPage.htm (file missing) (HKCU)
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O15 - ESC Trusted Zone: http://*.connectify.me
O15 - ESC Trusted Zone: http://*.fastspring.com
O15 - ESC Trusted Zone: http://*.connectify.me (HKLM)
O15 - ESC Trusted Zone: http://*.fastspring.com (HKLM)
O16 - DPF: {CF84DAC5-A4F5-419E-A0BA-C01FFD71112F} (SysInfo Class) - http://content.systemrequirementslab.co ... 5.15.0.cab
O17 - HKLM\System\CCS\Services\Tcpip\..\{71455945-BABD-4FB1-B236-685344ED7763}: NameServer = 8.8.8.8
O17 - HKLM\System\CCS\Services\Tcpip\..\{E9489A65-DA61-493A-B076-7DD4756071B6}: NameServer = 8.8.8.8
O18 - Protocol: osf - {D924BDC6-C83A-4BD5-90D0-095128A113D1} - D:\Program Files (x86)\Microsoft Office\Office15\MSOSB.DLL
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~2\COMMON~1\Skype\SKYPE4~1.DLL
O18 - Filter hijack: text/xml - {807583E5-5146-11D5-A672-00B0D022E945} - C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE15\MSOXMLMF.DLL
O20 - AppInit_DLLs: C:\Windows\SysWOW64\nvinit.dll
O23 - Service: Acunetix WVS Scheduler v8 (AcuWVSSchedulerv8) - Unknown owner - D:\Program Files (x86)\Acunetix\Web Vulnerability Scanner 8\WVSScheduler.exe
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
O23 - Service: Bluetooth Device Monitor - Motorola Solutions, Inc. - C:\Program Files (x86)\Intel\Bluetooth\devmonsrv.exe
O23 - Service: Bluetooth OBEX Service - Motorola Solutions, Inc. - C:\Program Files (x86)\Intel\Bluetooth\obexsrv.exe
O23 - Service: Bonjour Service - Apple Inc. - D:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: Intel(R) Content Protection HECI Service (cphs) - Intel Corporation - C:\Windows\SysWow64\IntelCpHeciSvc.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)
O23 - Service: Intel(R) PROSet/Wireless Event Log (EvtEng) - Intel(R) Corporation - D:\Program Files\Intel\WiFi\bin\EvtEng.exe
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)
O23 - Service: FLEXnet Licensing Service 64 - Acresso Software Inc. - C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService64.exe
O23 - Service: Futuremark SystemInfo Service - Futuremark Corporation - C:\Program Files (x86)\Futuremark\Futuremark SystemInfo\FMSISvc.exe
O23 - Service: LogMeIn Hamachi Tunneling Engine (Hamachi2Svc) - LogMeIn Inc. - D:\Program Files (x86)\LogMeIn Hamachi\hamachi-2.exe
O23 - Service: Úložná technologie Intel® Rapid (IAStorDataMgrSvc) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
O23 - Service: Intel(R) Integrated Clock Controller Service - Intel(R) ICCS (ICCS) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Integrated Clock Controller Service\ICCProxy.exe
O23 - Service: Intel(R) Wireless Bluetooth(R) 4.0 Radio Management - Intel Corporation - C:\Program Files (x86)\Intel\Bluetooth\ibtrksrv.exe
O23 - Service: iPod Service - Apple Inc. - D:\Program Files\iPod\bin\iPodService.exe
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: MBAMScheduler - Malwarebytes Corporation - D:\Program Files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe
O23 - Service: MBAMService - Malwarebytes Corporation - D:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe
O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Mozilla Foundation - C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
O23 - Service: Wireless PAN DHCP Server (MyWiFiDHCPDNS) - Unknown owner - D:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: NVIDIA Network Service (NvNetworkService) - NVIDIA Corporation - C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
O23 - Service: NVIDIA Streamer Service (NvStreamSvc) - NVIDIA Corporation - D:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
O23 - Service: NVIDIA Display Driver Service (nvsvc) - Unknown owner - C:\Windows\system32\nvvsvc.exe (file missing)
O23 - Service: OpenVPN Service (OpenVPNService) - Unknown owner - D:\Program Files (x86)\OpenVPN\bin\openvpnserv.exe
O23 - Service: Intel(R) PROSet/Wireless Registry Service (RegSrvc) - Intel(R) Corporation - C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: SF FrontLine Drivers Auto Removal (v1) (sfrem01) - Unknown owner - C:\Windows\system32\sfrem01.exe (file missing)
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing)
O23 - Service: Soluto Launcher Service (SolutoLauncherService) - Soluto - D:\Program Files\Soluto\SolutoLauncherService.exe
O23 - Service: Soluto Remote Service (SolutoRemoteService) - GlavSoft LLC. - D:\Program Files\Soluto\SolutoRemoteService.exe
O23 - Service: Soluto PCGenome Core Service (SolutoService) - Soluto - D:\Program Files\Soluto\SolutoService.exe
O23 - Service: Glasovne poruke (Speechsrv) - Unknown owner - D:\Program Files (x86)\LAN Voice Chat\Speechs.exe
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)
O23 - Service: Aktivátor Správce výběru OS Acronis (Správce výběru OS) - Unknown owner - D:\Program Files (x86)\Acronis\DiskDirector\OSS\reinstall_svc.exe
O23 - Service: SwitchBoard - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe
O23 - Service: TeamViewer 9 (TeamViewer9) - TeamViewer GmbH - C:\Program Files (x86)\TeamViewer\Version9\TeamViewer_Service.exe
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)
O23 - Service: @%ProgramFiles%\Windows Defender\MpAsDesc.dll,-310 (WinDefend) - Unknown owner - D:\Program Files (x86)\Windows Defender\MsMpEng.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - D:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)
O23 - Service: Intel(R) PROSet/Wireless Zero Configuration Service (ZeroConfigService) - Intel® Corporation - D:\Program Files\Intel\WiFi\bin\ZeroConfigService.exe

--
End of file - 12625 bytes

[Orcus]

Za nás čisto. V HJT fixni jen tohle:
O16 - DPF: {CF84DAC5-A4F5-419E-A0BA-C01FFD71112F} (SysInfo Class) - http://content.systemrequirementslab.co ... 5.15.0.cab

Pokud je to vše a stále má FIFA lagy, zkusil bych defragmentaci disku, případně její reinstall.

[CZechBoY]

jj díky.
No já myslim že to bude spíš problém netu :( už aby nám tu začali makat cikáni na kanalizaci a byla optika :)
Práce měly začít v dubnu, takže doteď se tu nic neděje

[jaro3]

Pokud nejsou problémy , je to vše a můžeš dát vyřešeno , zelenou fajfku.