Kontrola NTB

[axisskgamer]

Zdravim, prosim o kontrolu ntb... Strasne sa mi prehrieva graficka karta a pritom mam 2 ventilatory a to mam 60° ked som na ploche a ked hram na 80°+ pritom cistim registre z programom CCleaner no neviem ci ten program neni dajaky "fake cleaner" alebo nieco take... Windows som preinstaloval, momentalne mam Windows 7 ale uz to mam nejak pol roka a esce nechapem tomuto, ze ked sa kuknem do Windowsu tak ukazuje ze mam 4GB RAM a z toho dostupne nejak 2GB a nieco uz neviem presne cize mi ide len tych 2GB a dalsich 2GB tak to neviem kde sa to podelo :/ Pouzivam antivir Avast ale vzdy ako dam Uplnu kontrolu tak na konci bude ze presunut do truhly a dam pouzit alebo co to tam je a proste to cele sekne cely Avast a cize s tymi virmi asi nic nebude cize zbytocna kontrola... A esce jedno,napr. ze ked volam s kamosmi na skype tak proste sa mi seka hlas kazdych asi 5 sec no niekedy 1 min ako kedy no tak neviem ci to je internetom lebo ked hram napr. Counter-Strike Source tak ping 20ms cize neviem cim to je ci programom alebo netom...

Log je tu :

Logfile of random's system information tool 1.09 (written by random/random)
Run by Axis at 2013-01-05 18:56:14
Microsoft Windows 7 Professional Service Pack 1
System drive C: has 269 GB (71%) free of 377 GB
Total RAM: 2490 MB (36% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 18:56:25, on 5. 1. 2013
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v9.00 (9.00.8112.16457)
Boot mode: Normal

Running processes:
C:\Windows\system32\taskeng.exe
C:\Windows\system32\Dwm.exe
C:\Windows\system32\taskhost.exe
C:\Windows\Explorer.EXE
C:\Windows\system32\rundll32.exe
C:\Program Files\Common Files\Java\Java Update\jusched.exe
C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe
C:\Windows\System32\igfxpers.exe
C:\Windows\system32\igfxsrvc.exe
C:\Program Files\Skype\Phone\Skype.exe
C:\Program Files\AVAST Software\Avast\AvastUI.exe
C:\Program Files\Steam\Steam.exe
C:\Program Files\SpeedFan\speedfan.exe
C:\Users\Axis\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\Axis\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\Axis\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\Axis\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\Axis\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Windows\system32\SearchFilterHost.exe
C:\Users\Axis\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\Axis\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\Axis\Desktop\RSIT.exe
C:\Program Files\trend micro\Axis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://searchab.com/?aff=7&uid=d2ffdf7e-4797-11e2-85de-0026226767a2
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://searchab.com/?aff=7&uid=d2ffdf7e-4797-11e2-85de-0026226767a2
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
R3 - URLSearchHook: (no name) - {7473b6bd-4691-4744-a82b-7854eb3d70b6} - (no file)
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll
O2 - BHO: avast! WebRep - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll
O3 - Toolbar: avast! WebRep - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll
O4 - HKLM\..\Run: [WinampAgent] "C:\Program Files\Winamp\winampa.exe"
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Common Files\Java\Java Update\jusched.exe"
O4 - HKLM\..\Run: [Gaming 3] "C:\FightMouse Elite\Gaming 3.exe" /hide
O4 - HKLM\..\Run: [RTHDVCPL] C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe -s
O4 - HKLM\..\Run: [avast] "C:\Program Files\AVAST Software\Avast\avastUI.exe" /nogui
O4 - HKLM\..\Run: [IgfxTray] C:\Windows\system32\igfxtray.exe
O4 - HKLM\..\Run: [HotKeysCmds] C:\Windows\system32\hkcmd.exe
O4 - HKLM\..\Run: [Persistence] C:\Windows\system32\igfxpers.exe
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\Windows\system32\NvCpl.dll,NvStartup
O4 - HKCU\..\Run: [Google Update] "C:\Users\Axis\AppData\Local\Google\Update\GoogleUpdate.exe" /c
O4 - HKCU\..\Run: [Steam] "C:\Program Files\Steam\steam.exe" -silent
O4 - HKCU\..\Run: [Skype] "C:\Program Files\Skype\Phone\Skype.exe" /minimized /regrun
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'NETWORK SERVICE')
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O15 - Trusted Zone: *.clonewarsadventures.com
O15 - Trusted Zone: *.freerealms.com
O15 - Trusted Zone: *.soe.com
O15 - Trusted Zone: *.sony.com
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O20 - AppInit_DLLs: c:\progra~1\zoomex\sprote~1.dll
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: avast! Antivirus - AVAST Software - C:\Program Files\AVAST Software\Avast\AvastSvc.exe
O23 - Service: avast! Firewall - AVAST Software - C:\Program Files\AVAST Software\Avast\afwServ.exe
O23 - Service: NVIDIA Display Driver Service (nvsvc) - NVIDIA Corporation - C:\Windows\system32\nvvsvc.exe
O23 - Service: Skype Updater (SkypeUpdate) - Skype Technologies - C:\Program Files\Skype\Updater\Updater.exe
O23 - Service: Steam Client Service - Valve Corporation - C:\Program Files\Common Files\Steam\SteamService.exe
O23 - Service: TeamViewer 8 (TeamViewer8) - TeamViewer GmbH - C:\Program Files\TeamViewer\Version8\TeamViewer_Service.exe

--
End of file - 5577 bytes

======Scheduled tasks folder======

C:\Windows\tasks\Adobe Flash Player Updater.job
C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-844198974-2381402901-1937655265-1000Core.job
C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-844198974-2381402901-1937655265-1000UA.job

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
Java(tm) Plug-In SSV Helper - C:\Program Files\Java\jre7\bin\ssv.dll [2012-09-24 449512]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{8E5E2654-AD2D-48bf-AC2D-D17F00898D06}]
avast! WebRep - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2012-10-30 1227736]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre7\bin\jp2ssv.dll [2012-09-24 155384]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - avast! WebRep - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2012-10-30 1227736]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"WinampAgent"=C:\Program Files\Winamp\winampa.exe [2012-06-28 74752]
"SunJavaUpdateSched"=C:\Program Files\Common Files\Java\Java Update\jusched.exe [2012-07-03 252848]
"Gaming 3"=C:\FightMouse Elite\Gaming 3.exe [2010-02-23 1273856]
"RTHDVCPL"=C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe [2012-06-11 10996368]
"avast"=C:\Program Files\AVAST Software\Avast\avastUI.exe [2012-10-30 4297136]
"IgfxTray"=C:\Windows\system32\igfxtray.exe [2009-09-18 141928]
"HotKeysCmds"=C:\Windows\system32\hkcmd.exe [2009-09-18 174184]
"Persistence"=C:\Windows\system32\igfxpers.exe [2009-09-18 151144]
"NvCplDaemon"=C:\Windows\system32\NvCpl.dll [2009-09-25 13797992]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"Google Update"=C:\Users\Axis\AppData\Local\Google\Update\GoogleUpdate.exe [2012-09-22 116648]
"Steam"=C:\Program Files\Steam\steam.exe [2012-12-03 1354736]
"Skype"=C:\Program Files\Skype\Phone\Skype.exe [2012-11-09 17877168]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\GarenaPlus]
C:\Program Files\Garena Plus\GarenaMessenger.exe [2012-12-17 9152968]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Skype]
C:\Program Files\Skype\Phone\Skype.exe [2012-11-09 17877168]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Users^Axis^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^hamachi.lnk]
C:\PROGRA~1\Hamachi\hamachi.exe [2012-12-18 624416]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Users^Axis^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^Registrace Need for Speed™ Undercover.lnk]
C:\Program Files\EA Games\Need for Speed Undercover\Support\EAregister.exe /remind /language=CS /PRID=GAME-NFSU09 /WHPR=Need for Speed™ Undercover /PRNM=Electronic Arts Product []

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
"AppInit_DLLs"="c:\progra~1\zoomex\sprote~1.dll"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\igfxcui]
C:\Windows\system32\igfxdev.dll [2009-09-02 223848]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED}

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=credssp.dll

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorUser"=3
"EnableUIADesktopToggle"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.msadpcm"=msadp32.acm
"midimapper"=midimap.dll
"wavemapper"=msacm32.drv
"VIDC.UYVY"=msyuv.dll
"VIDC.YUY2"=msyuv.dll
"VIDC.YVYU"=msyuv.dll
"VIDC.IYUV"=iyuv_32.dll
"vidc.i420"=iyuv_32.dll
"VIDC.YVU9"=tsbyuv.dll
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"vidc.cvid"=iccvid.dll
"MSVideo8"=VfWWDM32.dll
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv
"wave6"=wdmaud.drv
"midi6"=wdmaud.drv
"mixer6"=wdmaud.drv
"wave7"=wdmaud.drv
"midi7"=wdmaud.drv
"mixer7"=wdmaud.drv
"wave8"=wdmaud.drv
"midi8"=wdmaud.drv
"mixer8"=wdmaud.drv
"wave9"=wdmaud.drv
"midi9"=wdmaud.drv
"mixer9"=wdmaud.drv
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"wave2"=wdmaud.drv
"midi2"=wdmaud.drv
"mixer2"=wdmaud.drv
"wave3"=wdmaud.drv
"midi3"=wdmaud.drv
"mixer3"=wdmaud.drv
"wave4"=wdmaud.drv
"midi4"=wdmaud.drv
"mixer4"=wdmaud.drv
"wave5"=wdmaud.drv
"midi5"=wdmaud.drv
"mixer5"=wdmaud.drv
"aux1"=wdmaud.drv
"VIDC.FPS1"=frapsvid.dll

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*

======List of files/folders created in the last 1 month======

2013-01-05 18:56:15 ----D---- C:\Program Files\trend micro
2013-01-05 18:56:14 ----D---- C:\rsit
2013-01-05 00:36:36 ----A---- C:\Windows\system32\FNTCACHE.DAT
2013-01-04 21:51:03 ----D---- C:\Program Files\WinRAR
2013-01-01 01:03:13 ----D---- C:\Program Files\Nem's Tools
2012-12-26 08:11:33 ----A---- C:\Windows\system32\igfxtvcx.dll
2012-12-26 08:11:29 ----D---- C:\Program Files\Intel
2012-12-24 17:43:53 ----D---- C:\ProgramData\NexonSG
2012-12-24 17:43:52 ----D---- C:\ProgramData\Nexon
2012-12-21 11:47:57 ----A---- C:\Windows\system32\atmlib.dll
2012-12-21 11:47:57 ----A---- C:\Windows\system32\atmfd.dll
2012-12-20 17:18:13 ----D---- C:\Program Files\GTA San Andreas
2012-12-18 18:49:09 ----D---- C:\Users\Axis\AppData\Roaming\Hamachi
2012-12-18 18:48:12 ----A---- C:\Windows\system32\drivers\hamachi.sys
2012-12-18 18:48:11 ----D---- C:\Program Files\Hamachi
2012-12-16 16:47:50 ----D---- C:\ProgramData\%Installer_PublisherName%
2012-12-16 16:47:32 ----D---- C:\ProgramData\Zoomex
2012-12-16 16:47:26 ----D---- C:\ProgramData\InstallMate
2012-12-16 16:47:22 ----A---- C:\prefs.js
2012-12-14 20:24:41 ----D---- C:\Users\Axis\AppData\Roaming\TeamViewer
2012-12-14 20:23:35 ----D---- C:\Program Files\TeamViewer
2012-12-12 21:55:56 ----A---- C:\Windows\system32\mshtmled.dll
2012-12-12 21:55:55 ----A---- C:\Windows\system32\vbscript.dll
2012-12-12 21:55:55 ----A---- C:\Windows\system32\jsproxy.dll
2012-12-12 21:55:55 ----A---- C:\Windows\system32\ieui.dll
2012-12-12 21:55:54 ----A---- C:\Windows\system32\msfeeds.dll
2012-12-12 21:55:54 ----A---- C:\Windows\system32\ieUnatt.exe
2012-12-12 21:55:52 ----A---- C:\Windows\system32\wininet.dll
2012-12-12 21:55:52 ----A---- C:\Windows\system32\jscript.dll
2012-12-12 21:55:51 ----A---- C:\Windows\system32\url.dll
2012-12-12 21:55:51 ----A---- C:\Windows\system32\jscript9.dll
2012-12-12 21:55:50 ----A---- C:\Windows\system32\iertutil.dll
2012-12-12 21:55:49 ----A---- C:\Windows\system32\urlmon.dll
2012-12-12 21:55:48 ----A---- C:\Windows\system32\ieframe.dll
2012-12-12 21:55:46 ----A---- C:\Windows\system32\mshtml.dll
2012-12-12 14:11:22 ----RD---- C:\Program Files\Skype
2012-12-12 14:11:22 ----D---- C:\Program Files\Common Files\Skype
2012-12-12 14:03:52 ----A---- C:\Windows\system32\win32k.sys
2012-12-12 14:03:46 ----A---- C:\Windows\system32\KernelBase.dll
2012-12-12 14:03:45 ----A---- C:\Windows\system32\winsrv.dll
2012-12-12 14:03:45 ----A---- C:\Windows\system32\kernel32.dll
2012-12-12 14:03:45 ----A---- C:\Windows\system32\conhost.exe
2012-12-12 14:03:43 ----AH---- C:\Windows\system32\api-ms-win-core-sysinfo-l1-1-0.dll
2012-12-12 14:03:43 ----AH---- C:\Windows\system32\api-ms-win-core-processthreads-l1-1-0.dll
2012-12-12 14:03:43 ----AH---- C:\Windows\system32\api-ms-win-core-file-l1-1-0.dll
2012-12-12 14:03:42 ----AH---- C:\Windows\system32\api-ms-win-security-base-l1-1-0.dll
2012-12-12 14:03:42 ----AH---- C:\Windows\system32\api-ms-win-core-xstate-l1-1-0.dll
2012-12-12 14:03:42 ----AH---- C:\Windows\system32\api-ms-win-core-util-l1-1-0.dll
2012-12-12 14:03:42 ----AH---- C:\Windows\system32\api-ms-win-core-threadpool-l1-1-0.dll
2012-12-12 14:03:42 ----AH---- C:\Windows\system32\api-ms-win-core-synch-l1-1-0.dll
2012-12-12 14:03:42 ----AH---- C:\Windows\system32\api-ms-win-core-string-l1-1-0.dll
2012-12-12 14:03:42 ----AH---- C:\Windows\system32\api-ms-win-core-rtlsupport-l1-1-0.dll
2012-12-12 14:03:42 ----AH---- C:\Windows\system32\api-ms-win-core-profile-l1-1-0.dll
2012-12-12 14:03:42 ----AH---- C:\Windows\system32\api-ms-win-core-processenvironment-l1-1-0.dll
2012-12-12 14:03:42 ----AH---- C:\Windows\system32\api-ms-win-core-namedpipe-l1-1-0.dll
2012-12-12 14:03:42 ----AH---- C:\Windows\system32\api-ms-win-core-misc-l1-1-0.dll
2012-12-12 14:03:42 ----AH---- C:\Windows\system32\api-ms-win-core-memory-l1-1-0.dll
2012-12-12 14:03:42 ----AH---- C:\Windows\system32\api-ms-win-core-localregistry-l1-1-0.dll
2012-12-12 14:03:42 ----AH---- C:\Windows\system32\api-ms-win-core-localization-l1-1-0.dll
2012-12-12 14:03:42 ----AH---- C:\Windows\system32\api-ms-win-core-libraryloader-l1-1-0.dll
2012-12-12 14:03:42 ----AH---- C:\Windows\system32\api-ms-win-core-io-l1-1-0.dll
2012-12-12 14:03:42 ----AH---- C:\Windows\system32\api-ms-win-core-interlocked-l1-1-0.dll
2012-12-12 14:03:42 ----AH---- C:\Windows\system32\api-ms-win-core-heap-l1-1-0.dll
2012-12-12 14:03:42 ----AH---- C:\Windows\system32\api-ms-win-core-handle-l1-1-0.dll
2012-12-12 14:03:42 ----AH---- C:\Windows\system32\api-ms-win-core-fibers-l1-1-0.dll
2012-12-12 14:03:42 ----AH---- C:\Windows\system32\api-ms-win-core-errorhandling-l1-1-0.dll
2012-12-12 14:03:42 ----AH---- C:\Windows\system32\api-ms-win-core-delayload-l1-1-0.dll
2012-12-12 14:03:42 ----AH---- C:\Windows\system32\api-ms-win-core-debug-l1-1-0.dll
2012-12-12 14:03:42 ----AH---- C:\Windows\system32\api-ms-win-core-datetime-l1-1-0.dll
2012-12-12 14:03:41 ----AH---- C:\Windows\system32\api-ms-win-core-console-l1-1-0.dll
2012-12-12 14:02:53 ----A---- C:\Windows\system32\dpnet.dll
2012-12-12 14:02:43 ----A---- C:\Windows\system32\tzres.dll

======List of files/folders modified in the last 1 month======

2013-01-05 18:56:25 ----D---- C:\Windows\Prefetch
2013-01-05 18:56:17 ----D---- C:\Windows\Temp
2013-01-05 18:56:15 ----RD---- C:\Program Files
2013-01-05 18:48:24 ----D---- C:\Users\Axis\AppData\Roaming\Skype
2013-01-05 18:06:13 ----D---- C:\Program Files\Steam
2013-01-05 17:43:43 ----D---- C:\Program Files\SpeedFan
2013-01-05 13:31:49 ----D---- C:\Users\Axis\AppData\Roaming\GarenaPlus
2013-01-05 13:31:49 ----D---- C:\ProgramData\GarenaMessenger
2013-01-05 12:35:00 ----D---- C:\Windows\system32\drivers
2013-01-05 11:41:26 ----D---- C:\Windows\system32\LogFiles
2013-01-05 07:04:14 ----D---- C:\Windows\system32\config
2013-01-05 04:24:21 ----SHD---- C:\System Volume Information
2013-01-05 00:37:40 ----D---- C:\Windows\system32\Tasks
2013-01-05 00:37:16 ----D---- C:\Windows\inf
2013-01-05 00:37:14 ----D---- C:\Windows
2013-01-05 00:36:36 ----D---- C:\Windows\System32
2013-01-05 00:00:08 ----D---- C:\Users\Axis\AppData\Roaming\Winamp
2013-01-04 21:45:27 ----SHD---- C:\Windows\Installer
2013-01-04 21:45:26 ----SHD---- C:\Windows\system32\AI_RecycleBin
2013-01-04 21:45:26 ----D---- C:\Config.Msi
2013-01-04 15:21:58 ----D---- C:\Users\Axis\AppData\Roaming\.minecraft
2013-01-01 04:05:03 ----A---- C:\Windows\system32\FlashPlayerApp.exe
2012-12-31 19:44:43 ----D---- C:\Program Files\Garena Plus
2012-12-30 23:37:54 ----D---- C:\ProgramData\Adobe
2012-12-30 01:52:11 ----D---- C:\Users\Axis\AppData\Roaming\gtk-2.0
2012-12-30 01:19:06 ----RSD---- C:\Windows\Fonts
2012-12-26 08:12:06 ----D---- C:\ProgramData\NVIDIA
2012-12-25 20:48:28 ----D---- C:\Windows\pss
2012-12-25 20:45:28 ----D---- C:\ProgramData
2012-12-25 20:45:27 ----D---- C:\Windows\Tasks
2012-12-25 15:33:16 ----D---- C:\Users\Axis\AppData\Roaming\TS3Client
2012-12-22 07:47:39 ----D---- C:\Windows\winsxs
2012-12-21 11:48:18 ----D---- C:\Windows\system32\catroot2
2012-12-21 11:48:18 ----D---- C:\Windows\system32\catroot
2012-12-20 17:09:30 ----D---- C:\Program Files\Common Files\Steam
2012-12-14 12:03:06 ----D---- C:\Windows\rescache
2012-12-14 06:44:16 ----D---- C:\Windows\debug
2012-12-13 22:11:18 ----D---- C:\Program Files\Defraggler
2012-12-13 13:35:03 ----D---- C:\Windows\system32\sk-SK
2012-12-13 13:35:03 ----D---- C:\Windows\system32\migration
2012-12-13 13:35:02 ----D---- C:\Program Files\Internet Explorer
2012-12-12 14:11:27 ----D---- C:\ProgramData\Skype
2012-12-12 14:11:22 ----D---- C:\Program Files\Common Files
2012-12-12 14:00:33 ----A---- C:\Windows\system32\MRT.exe

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 aswNdis;avast! Firewall NDIS Filter Service; C:\Windows\system32\DRIVERS\aswNdis.sys [2012-07-13 12112]
R0 aswNdis2;avast! Firewall Core Firewall Service; C:\Windows\system32\drivers\aswNdis2.sys [2012-10-30 199320]
R0 giveio;giveio; C:\Windows\system32\giveio.sys [1996-04-03 5248]
R0 pciide;pciide; C:\Windows\system32\drivers\pciide.sys [2009-07-14 12368]
R0 rdyboost;ReadyBoost; C:\Windows\System32\drivers\rdyboost.sys [2010-11-20 173440]
R0 speedfan;speedfan; C:\Windows\system32\speedfan.sys [2011-03-18 25240]
R0 vmbus;@%SystemRoot%\system32\vmbusres.dll,-1000; C:\Windows\system32\drivers\vmbus.sys [2010-11-20 175360]
R1 aswFW;avast! TDI Firewall driver; C:\Windows\system32\drivers\aswFW.sys [2012-10-30 106560]
R1 aswKbd;aswKbd; C:\Windows\system32\drivers\aswKbd.sys [2012-10-30 20624]
R1 aswRdr;aswRdr; C:\Windows\System32\Drivers\aswrdr2.sys [2012-10-15 44784]
R1 aswSnx;aswSnx; C:\Windows\system32\drivers\aswSnx.sys [2012-10-30 738504]
R1 aswSP;aswSP; C:\Windows\system32\drivers\aswSP.sys [2012-10-30 361032]
R1 aswTdi;avast! Network Shield Support; C:\Windows\system32\drivers\aswTdi.sys [2012-10-30 54232]
R1 CSC;@%systemroot%\system32\cscsvc.dll,-202; C:\Windows\system32\drivers\csc.sys [2010-11-20 388096]
R2 aswFsBlk;aswFsBlk; C:\Windows\system32\drivers\aswFsBlk.sys [2012-10-30 21256]
R2 aswMonFlt;aswMonFlt; \??\C:\Windows\system32\drivers\aswMonFlt.sys [2012-10-30 58680]
R3 b57nd60x;Broadcom NetXtreme Gigabit Ethernet - NDIS 6.0; C:\Windows\system32\DRIVERS\b57nd60x.sys [2009-07-13 229888]
R3 GGSAFERDriver;GGSAFER Driver; \??\C:\Program Files\Garena Plus\Room\safedrv.sys []
R3 hamachi;Hamachi Network Interface; C:\Windows\system32\DRIVERS\hamachi.sys [2012-12-18 25280]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\Windows\system32\drivers\RTKVHDA.sys [2012-06-19 3240400]
R3 NVHDA;Service for NVIDIA High Definition Audio Driver; C:\Windows\system32\drivers\nvhda32v.sys [2009-06-26 66080]
R3 sdbus;sdbus; C:\Windows\system32\DRIVERS\sdbus.sys [2010-11-20 84992]
S2 Parvdm;Parvdm; C:\Windows\system32\DRIVERS\parvdm.sys [2009-07-14 8704]
S3 aic78xx;aic78xx; C:\Windows\system32\DRIVERS\djsvs.sys [2009-07-14 70720]
S3 amdagp;AMD AGP Bus Filter Driver; C:\Windows\system32\drivers\amdagp.sys [2009-07-14 53312]
S3 BthEnum;Bluetooth Enumerator Service; C:\Windows\system32\DRIVERS\BthEnum.sys [2009-07-14 34816]
S3 BthPan;Bluetooth Device (Personal Area Network); C:\Windows\system32\DRIVERS\bthpan.sys [2009-07-14 93696]
S3 BTHPORT;Bluetooth Port Driver; C:\Windows\System32\Drivers\BTHport.sys [2009-07-14 392704]
S3 BTHUSB;Bluetooth Radio USB Driver; C:\Windows\System32\Drivers\BTHUSB.sys [2009-07-14 58880]
S3 EagleXNt;EagleXNt; \??\C:\Windows\system32\drivers\EagleXNt.sys []
S3 igfx;igfx; C:\Windows\system32\DRIVERS\igdkmd32.sys [2009-09-03 5953128]
S3 netw5v32;Intel(R) Wireless WiFi Link 5000 Series Adapter Driver for Windows Vista 32 Bit; C:\Windows\system32\DRIVERS\netw5v32.sys [2009-07-13 4231168]
S3 RDPDR;Terminal Server Device Redirector Driver; C:\Windows\System32\drivers\rdpdr.sys [2010-11-20 133632]
S3 RFCOMM;Bluetooth Device (RFCOMM Protocol TDI); C:\Windows\system32\DRIVERS\rfcomm.sys [2009-07-14 129536]
S3 s3cap;s3cap; C:\Windows\system32\drivers\vms3cap.sys [2010-11-20 5632]
S3 sisagp;SIS AGP Bus Filter; C:\Windows\system32\drivers\sisagp.sys [2009-07-14 52304]
S3 storvsc;storvsc; C:\Windows\system32\drivers\storvsc.sys [2010-11-20 28032]
S3 TsUsbFlt;TsUsbFlt; C:\Windows\system32\drivers\tsusbflt.sys [2010-11-20 52224]
S3 viaagp;VIA AGP Bus Filter; C:\Windows\system32\drivers\viaagp.sys [2009-07-14 53328]
S3 ViaC7;VIA C7 Processor Driver; C:\Windows\system32\DRIVERS\viac7.sys [2009-07-14 52736]
S3 VMBusHID;VMBusHID; C:\Windows\system32\drivers\VMBusHID.sys [2010-11-20 17920]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 avast! Antivirus;avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [2012-10-30 44808]
R2 avast! Firewall;avast! Firewall; C:\Program Files\AVAST Software\Avast\afwServ.exe [2012-10-30 133912]
R2 CscService;@%systemroot%\system32\cscsvc.dll,-200; C:\Windows\System32\svchost.exe [2009-07-14 20992]
R2 nvsvc;NVIDIA Display Driver Service; C:\Windows\system32\nvvsvc.exe [2009-09-25 211560]
R2 TeamViewer8;TeamViewer 8; C:\Program Files\TeamViewer\Version8\TeamViewer_Service.exe [2012-11-29 3463080]
R3 Steam Client Service;Steam Client Service; C:\Program Files\Common Files\Steam\SteamService.exe [2012-12-20 541760]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
S2 SkypeUpdate;Skype Updater; C:\Program Files\Skype\Updater\Updater.exe [2012-11-09 160944]
S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service; C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2012-12-11 250808]
S3 AppMgmt;@appmgmts.dll,-3250; C:\Windows\system32\svchost.exe [2009-07-14 20992]
S3 aspnet_state;ASP.NET State Service; C:\Windows\Microsoft.NET\Framework\v4.0.30319\aspnet_state.exe [2010-03-18 35160]
S3 PeerDistSvc;@%SystemRoot%\system32\peerdistsvc.dll,-9000; C:\Windows\System32\svchost.exe [2009-07-14 20992]
S3 StorSvc;@%SystemRoot%\System32\StorSvc.dll,-100; C:\Windows\System32\svchost.exe [2009-07-14 20992]
S3 UmRdpService;@%SystemRoot%\system32\umrdp.dll,-1000; C:\Windows\System32\svchost.exe [2009-07-14 20992]
S3 WatAdminSvc;@%SystemRoot%\system32\Wat\WatUX.exe,-601; C:\Windows\system32\Wat\WatAdminSvc.exe [2012-08-21 1343400]
S4 NetMsmqActivator;@C:\Windows\Microsoft.NET\Framework\v4.0.30319\\ServiceModelInstallRC.dll,-8195; C:\Windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe [2010-03-18 124240]
S4 NetPipeActivator;@C:\Windows\Microsoft.NET\Framework\v4.0.30319\\ServiceModelInstallRC.dll,-8197; C:\Windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe [2010-03-18 124240]
S4 NetTcpActivator;@C:\Windows\Microsoft.NET\Framework\v4.0.30319\\ServiceModelInstallRC.dll,-8199; C:\Windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe [2010-03-18 124240]

-----------------EOF-----------------

[Roli]

Zdravím, vezmeme to pěkně popořadě.

Teplota grafické karty je sice trošku vyšší, ale zase ne nějak výrazně.
Zkontroluj tedy všechny větrací otvory jestli nejsou zanešené, případně je opatrně vyluxuj.

CCleaner je to nejlepší z free programů na úklid v PC.

Jestliže máš 4GB RAM a dostupných pouze 2GB tak to je celkem normální.
Systém sám o sobě sebere až 1,5GB, k tomu antivir a pár dalších nutností a 2GB jsou pryč.

To že se Ti kousne Avast už normální není a stím je možná spojený i ten problém s netem.


Tak že, tohle fixni v HJT :

R3 - URLSearchHook: (no name) - {7473b6bd-4691-4744-a82b-7854eb3d70b6} - (no file)
O2 - BHO: avast! WebRep - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll
O3 - Toolbar: avast! WebRep - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll
O4 - HKLM\..\Run: [WinampAgent] "C:\Program Files\Winamp\winampa.exe"
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Common Files\Java\Java Update\jusched.exe"
O4 - HKCU\..\Run: [Google Update] "C:\Users\Axis\AppData\Local\Google\Update\GoogleUpdate.exe" /c

HJT najdeš zde :

C:\Program Files\trend micro\Axis.exe

Fix znamená že spustíš HJT jako admin

v okně které se ti otevře klikneš na Do a system scan only

v dalším okně najdeš řádky které jsem ti vypsal,

vedle nich je čtvereček do kterého uděláš zatržítko,

pak klikneš na Fix checked které je vlevo dole,

program se ti zeptá zda opravdu ANO s tím samozřejmě souhlasíš a je hotovo.


Pak použij Mbam z mého podpisu a dej mi sem z něj log, předem nic nemazat !!!

[axisskgamer]

Sorry ale teraz uz nemam cas ... Dnes rano ti poslem ten log

[axisskgamer]

Tu je log z Mbam :


Malwarebytes Anti-Malware (Skúšobná verzia) 1.70.0.1100
www.malwarebytes.org

Verzia databázy: v2013.01.05.09

Windows 7 Service Pack 1 x86 NTFS
Internet Explorer 9.0.8112.16421
Axis :: AXIS-PC [administrátor]

Ochrana: Zapnuté

5. 1. 2013 23:57:27
MBAM-log-2013-01-06 (10-43-28).txt

Typ kontroly: Úplná kontrola (C:\|D:\|F:\|)
Možnosti kontroly zapnuté: Pamäť | Po spustení | Registre | Systémové súbory | Heuristika/Extra | Heuristika/Shuriken | PUP | PUM
Možnosti kontroly vypnuté: P2P
Objektov kontrolovaných: 580317
Uplynutý čas: 3 hod, 18 min, 10 sek

Detegované služby pamäte: 0
(Škodlivé položky neboli zistené)

Detegované moduly pamäte: 0
(Škodlivé položky neboli zistené)

Detegované registračné kľúče: 0
(Škodlivé položky neboli zistené)

Detegované registračné hodnoty: 0
(Škodlivé položky neboli zistené)

Detegované položky registračných dát: 0
(Škodlivé položky neboli zistené)

Detegované priečinky: 0
(Škodlivé položky neboli zistené)

Detegované súbory: 25
C:\Windows.old.000\Users\Axis\AppData\Local\Temp\install.exe (Trojan.Agent) -> Žiadna úloha nevykonaná.
C:\Windows.old.000\Users\Axis\AppData\Local\Temp\$inst\17.tmp (Trojan.Genome) -> Žiadna úloha nevykonaná.
D:\Documents and Settings\Spravca\My Documents\Downloads\installer_cheat_engine (1).exe (PUP.BundleInstaller.BT) -> Žiadna úloha nevykonaná.
D:\Documents and Settings\Spravca\My Documents\Downloads\installer_cheat_engine.exe (PUP.BundleInstaller.BT) -> Žiadna úloha nevykonaná.
D:\Documents and Settings\Spravca\My Documents\Downloads\installer_winamp_full.exe (PUP.BundleInstaller.BT) -> Žiadna úloha nevykonaná.
D:\Documents and Settings\Spravca\My Documents\Downloads\Barresi.D1.part01.rar.exe (PUP.Adware.Agent) -> Žiadna úloha nevykonaná.
D:\Documents and Settings\Spravca\My Documents\Downloads\platinum_samples_releases_real_jazz_midi_groove_pack.2010.rar.exe (PUP.Adware.Agent) -> Žiadna úloha nevykonaná.
D:\Documents and Settings\Spravca\My Documents\Downloads\veh2_fx_pack_download.[bookgod].rar.exe (PUP.Adware.Agent) -> Žiadna úloha nevykonaná.
D:\Documents and Settings\Spravca\My Documents\Downloads\Barresi.D2.part01.rar.exe (PUP.Adware.Agent) -> Žiadna úloha nevykonaná.
D:\Documents and Settings\Spravca\My Documents\Downloads\Barresi.D3.part01.rar.exe (PUP.Adware.Agent) -> Žiadna úloha nevykonaná.
D:\Documents and Settings\Spravca\My Documents\Downloads\bluezone_corporation_electro_fx_wav_scdsonitus.exe (PUP.Adware.MediaGet) -> Žiadna úloha nevykonaná.
D:\Documents and Settings\Spravca\My Documents\Downloads\platinum.samples.joe.barresi.evil.drums.sdx.expansion.zip (1).exe (PUP.Adware.Agent) -> Žiadna úloha nevykonaná.
D:\Documents and Settings\Spravca\My Documents\Downloads\platinum.samples.joe.barresi.evil.drums.sdx.expansion.zip.exe (PUP.Adware.Agent) -> Žiadna úloha nevykonaná.
D:\Documents and Settings\Spravca\My Documents\Downloads\platinum.samples.releases.real.jazz.midi.groove.pack-install.zip.exe (PUP.Adware.Agent) -> Žiadna úloha nevykonaná.
D:\Documents and Settings\Spravca\My Documents\Downloads\platinum_samples_releases_real_jazz_midi_groove_pack.2010.rar (1).exe (PUP.Adware.Agent) -> Žiadna úloha nevykonaná.
D:\Documents and Settings\Spravca\My Documents\Downloads\Toontrack-Custom.Vintage.MI…rar.exe (PUP.Adware.Agent) -> Žiadna úloha nevykonaná.
D:\Documents and Settings\Spravca\My Documents\Downloads\Toontrack-Custom_.Vintage.MIDI.rar (1).exe (PUP.Adware.Agent) -> Žiadna úloha nevykonaná.
D:\Documents and Settings\Spravca\My Documents\Downloads\Toontrack-Custom_.Vintage.MIDI.rar.exe (PUP.Adware.Agent) -> Žiadna úloha nevykonaná.
D:\Documents and Settings\Spravca\My Documents\Downloads\ToonTrack.Americana.EZX.Win.EXPANSION-AudioP2P.rar.exe (PUP.Adware.Agent) -> Žiadna úloha nevykonaná.
D:\Documents and Settings\Spravca\My Documents\Downloads\Toontrack_-_Songwriters_Drumpack_3.rar.exe (PUP.Adware.Agent) -> Žiadna úloha nevykonaná.
D:\Documents and Settings\Spravca\My Documents\Downloads\platinum_samples_releases_real_jazz_midi_groove_pack.last.avi.exe (PUP.Adware.Agent) -> Žiadna úloha nevykonaná.
D:\Documents and Settings\Spravca\My Documents\Downloads\Rob_Papen_-_Blue_-_1.01.rar.exe (PUP.Adware.Agent) -> Žiadna úloha nevykonaná.
D:\WINDOWS\system32\qckdycm.dll (Worm.Conficker) -> Žiadna úloha nevykonaná.
F:\Metiny\MT2 United\metin2client.bin (RiskWare.Tool.CK) -> Žiadna úloha nevykonaná.
F:\System Volume Information\_restore{4C924A43-263D-49A9-A274-3482F2D6C635}\RP13\A0026902.exe (HackTool.GamesCheat.Gen) -> Žiadna úloha nevykonaná.

(koniec)

[Roli]

Vše co Mbam našel po jeho znovuspuštění smazat.


Nyní použijeme větší kalibr tak že pozorně čti, protože tenhle softík netoleruje chyby.

Stáhni a ulož na plochu ComboFix,

spusť aplikaci jako Administrátor a povol instalaci Konzole pro zotavení - Recovery Console.

Poté se zobrazí okno s licenčními podmínkami které potvrdíš kliknutím na ANO,

pak ještě jednou klik na ANO a už to jede.

Celá akce trvá okolo 10 minut ale může i déle, během skenu se nepokoušej spouštět nic jiného.

Při skenovaní může být PC i restartováno nelekat se.

Upozornění: po dobu skenu vypni rezidentní štít Antiviru a AntiSpy programu,

protože Combofix se pokouší napadené soubory smazat a tyto programy mu můžou bránit.

Po dokončení skenu nebo následném restartu aplikace vytvoří log, uložený na C:/Combofix.txt

(při opakovaném použití jsou logy číslovány Combofix2.txt atd.), jeho obsah zkopíruj sem.


V případě nejasností je ZDE obrázkový návod.

[axisskgamer]

Log z ComboFixu :

ComboFix 13-01-05.01 - Axis . 01. 2013 22:49:21.1.2 - x86
Microsoft Windows 7 Professional 6.1.7601.1.1250.421.1051.18.2490.1570 [GMT 1:00]
Running from: c:\users\Axis\Desktop\ComboFix.exe
AV: avast! Internet Security *Disabled/Updated* {2B2D1395-420B-D5C9-657E-930FE358FC3C}
FW: avast! Internet Security *Disabled* {131692B0-0864-D491-4E21-3A3A1D8BBB47}
SP: avast! Internet Security *Disabled/Updated* {904CF271-6431-DA47-5FCE-A87D98DFB681}
SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.
.
((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
C:\prefs.js
c:\users\Axis\AppData\Roaming\Microsoft\Windows\Recent\Arctic Combat.url
c:\windows\security\Database\tmp.edb
c:\windows\system32\explorer.exe
D:\boot.inf
.
.
((((((((((((((((((((((((( Files Created from 2012-12-06 to 2013-01-06 )))))))))))))))))))))))))))))))
.
.
2013-01-06 22:01 . 2013-01-06 22:01 -------- d-----w- c:\users\Axis\AppData\Local\temp
2013-01-06 22:01 . 2013-01-06 22:01 -------- d-----w- c:\users\Default\AppData\Local\temp
2013-01-06 18:45 . 2013-01-06 17:44 2932736 ----a-w- c:\windows\system32\nvoglnt.dll
2013-01-05 22:51 . 2013-01-05 22:51 40776 ----a-w- c:\windows\system32\drivers\mbamswissarmy.sys
2013-01-05 22:51 . 2013-01-05 22:51 -------- d-----w- c:\users\Axis\AppData\Roaming\Malwarebytes
2013-01-05 22:51 . 2013-01-05 22:51 -------- d-----w- c:\programdata\Malwarebytes
2013-01-05 22:51 . 2013-01-05 22:51 -------- d-----w- c:\program files\Malwarebytes' Anti-Malware
2013-01-05 22:51 . 2012-12-14 15:49 21104 ----a-w- c:\windows\system32\drivers\mbam.sys
2013-01-05 22:50 . 2013-01-05 22:50 -------- d-----w- c:\users\Axis\AppData\Local\Programs
2013-01-05 17:56 . 2013-01-05 22:48 -------- d-----w- c:\program files\trend micro
2013-01-05 17:56 . 2013-01-05 17:56 -------- d-----w- C:\rsit
2013-01-04 08:50 . 2012-11-08 18:00 6812136 ----a-w- c:\programdata\Microsoft\Windows Defender\Definition Updates\{5E78C890-AE50-44D5-B30C-897559A38EA7}\mpengine.dll
2013-01-01 00:03 . 2013-01-01 00:03 -------- d-----w- c:\program files\Nem's Tools
2012-12-26 07:11 . 2009-09-02 10:18 140288 ----a-w- c:\windows\system32\igfxtvcx.dll
2012-12-26 07:11 . 2012-12-26 07:11 -------- d-----w- c:\program files\Intel
2012-12-24 16:43 . 2012-12-24 16:43 -------- d-----w- c:\programdata\Nexon
2012-12-24 16:27 . 2012-12-24 18:48 -------- d-----w- c:\users\Axis\AppData\Local\CSO
2012-12-21 10:47 . 2012-12-16 14:13 295424 ----a-w- c:\windows\system32\atmfd.dll
2012-12-21 10:47 . 2012-12-16 14:13 34304 ----a-w- c:\windows\system32\atmlib.dll
2012-12-20 16:18 . 2012-12-20 16:21 -------- d-----w- c:\program files\GTA San Andreas
2012-12-18 17:49 . 2013-01-02 18:58 -------- d-----w- c:\users\Axis\AppData\Roaming\Hamachi
2012-12-18 17:48 . 2012-12-18 17:48 25280 ----a-w- c:\windows\system32\drivers\hamachi.sys
2012-12-18 17:48 . 2012-12-18 17:49 -------- d-----w- c:\program files\Hamachi
2012-12-16 15:47 . 2012-12-16 15:47 -------- d-----w- c:\programdata\%Installer_PublisherName%
2012-12-16 15:47 . 2012-12-25 19:45 -------- d-----w- c:\programdata\Zoomex
2012-12-16 15:47 . 2012-12-25 19:45 -------- d-----w- c:\programdata\InstallMate
2012-12-14 19:24 . 2012-12-14 19:37 -------- d-----w- c:\users\Axis\AppData\Roaming\TeamViewer
2012-12-14 19:23 . 2012-12-14 19:23 -------- d-----w- c:\program files\TeamViewer
2012-12-12 13:11 . 2012-12-12 13:11 -------- d-----r- c:\program files\Skype
2012-12-12 13:11 . 2012-12-12 13:11 -------- d-----w- c:\program files\Common Files\Skype
2012-12-12 13:02 . 2012-11-02 05:11 376832 ----a-w- c:\windows\system32\dpnet.dll
2012-12-12 13:02 . 2012-11-09 04:42 2048 ----a-w- c:\windows\system32\tzres.dll
.
.
.
(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2013-01-01 03:05 . 2012-08-21 13:49 73656 ----a-w- c:\windows\system32\FlashPlayerCPLApp.cpl
2013-01-01 03:05 . 2012-08-21 13:49 697272 ----a-w- c:\windows\system32\FlashPlayerApp.exe
2012-12-03 18:18 . 2012-12-03 18:18 282312 ----a-w- c:\windows\system32\PnkBstrB.xtr
2012-12-03 18:18 . 2012-12-03 18:17 283312 ----a-w- c:\windows\system32\PnkBstrB.ex0
2012-11-28 17:25 . 2009-07-13 23:40 249856 ----a-w- c:\windows\system32\uxtheme.dll
2012-11-28 17:25 . 2009-07-13 23:39 37376 ----a-w- c:\windows\system32\themeservice.dll
2012-11-28 17:25 . 2012-09-27 11:41 2755072 ----a-w- c:\windows\system32\themeui.dll
2012-11-23 20:36 . 2012-11-23 19:55 140280 ----a-w- c:\windows\system32\PnkBstrK.sys
2012-11-23 19:55 . 2012-11-23 19:55 138904 ----a-w- c:\users\Axis\AppData\Roaming\PnkBstrK.sys
2012-10-30 22:51 . 2012-12-04 16:50 361032 ----a-w- c:\windows\system32\drivers\aswSP.sys
2012-10-30 22:51 . 2012-12-04 16:50 199320 ----a-w- c:\windows\system32\drivers\aswNdis2.sys
2012-10-30 22:51 . 2012-12-04 16:49 54232 ----a-w- c:\windows\system32\drivers\aswTdi.sys
2012-10-30 22:51 . 2012-12-04 16:49 738504 ----a-w- c:\windows\system32\drivers\aswSnx.sys
2012-10-30 22:51 . 2012-12-04 16:49 58680 ----a-w- c:\windows\system32\drivers\aswMonFlt.sys
2012-10-30 22:51 . 2012-12-04 16:50 21256 ----a-w- c:\windows\system32\drivers\aswFsBlk.sys
2012-10-30 22:51 . 2012-12-04 16:50 106560 ----a-w- c:\windows\system32\drivers\aswFW.sys
2012-10-30 22:51 . 2012-12-04 16:49 20624 ----a-w- c:\windows\system32\drivers\aswKbd.sys
2012-10-30 22:51 . 2012-12-04 16:48 41224 ----a-w- c:\windows\avastSS.scr
2012-10-30 22:50 . 2012-12-04 16:48 227648 ----a-w- c:\windows\system32\aswBoot.exe
2012-10-16 07:39 . 2012-11-28 18:54 561664 ----a-w- c:\windows\apppatch\AcLayers.dll
2012-10-15 16:59 . 2012-12-04 16:49 44784 ----a-w- c:\windows\system32\drivers\aswRdr2.sys
2012-10-09 17:40 . 2012-11-16 12:31 44032 ----a-w- c:\windows\system32\dhcpcsvc6.dll
2012-10-09 17:40 . 2012-11-16 12:31 193536 ----a-w- c:\windows\system32\dhcpcore6.dll
.
.
((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* empty entries & legit default entries are not shown
REGEDIT4
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\00avast]
@="{472083B0-C522-11CF-8763-00608CC02F24}"
[HKEY_CLASSES_ROOT\CLSID\{472083B0-C522-11CF-8763-00608CC02F24}]
2012-10-30 22:50 121528 ----a-w- c:\program files\AVAST Software\Avast\ashShell.dll
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Steam"="c:\program files\Steam\steam.exe" [2012-12-03 1354736]
"Skype"="c:\program files\Skype\Phone\Skype.exe" [2012-11-09 17877168]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Gaming 3"="c:\fightmouse elite\Gaming 3.exe" [2010-02-23 1273856]
"RTHDVCPL"="c:\program files\Realtek\Audio\HDA\RtHDVCpl.exe" [2012-06-11 10996368]
"avast"="c:\program files\AVAST Software\Avast\avastUI.exe" [2012-10-30 4297136]
"IgfxTray"="c:\windows\system32\igfxtray.exe" [2009-09-18 141928]
"HotKeysCmds"="c:\windows\system32\hkcmd.exe" [2009-09-18 174184]
"Persistence"="c:\windows\system32\igfxpers.exe" [2009-09-18 151144]
"NvCplDaemon"="c:\windows\system32\NvCpl.dll" [2009-09-25 13797992]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorUser"= 3 (0x3)
"EnableUIADesktopToggle"= 0 (0x0)
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\drivers32]
"aux1"=wdmaud.drv
.
[HKLM\~\startupfolder\C:^Users^Axis^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^hamachi.lnk]
path=c:\users\Axis\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\hamachi.lnk
backup=c:\windows\pss\hamachi.lnk.Startup
backupExtension=.Startup
.
[HKLM\~\startupfolder\C:^Users^Axis^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^Registrace Need for Speed™ Undercover.lnk]
path=c:\users\Axis\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Registrace Need for Speed™ Undercover.lnk
backup=c:\windows\pss\Registrace Need for Speed™ Undercover.lnk.Startup
backupExtension=.Startup
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\GarenaPlus]
2012-12-17 03:02 9152968 ----a-w- c:\program files\Garena Plus\GarenaMessenger.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Skype]
2012-11-09 10:27 17877168 ----a-r- c:\program files\Skype\Phone\Skype.exe
.
R2 SkypeUpdate;Skype Updater;c:\program files\Skype\Updater\Updater.exe [x]
R3 EagleXNt;EagleXNt;c:\windows\system32\drivers\EagleXNt.sys [x]
R3 GGSAFERDriver;GGSAFER Driver;c:\program files\Garena Plus\Room\safedrv.sys [x]
R3 MBAMSwissArmy;MBAMSwissArmy;c:\windows\system32\drivers\mbamswissarmy.sys [x]
R3 netw5v32;Intel(R) Wireless WiFi Link 5000 Series Adapter Driver for Windows Vista 32 Bit;c:\windows\system32\DRIVERS\netw5v32.sys [x]
R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys [x]
R3 WatAdminSvc;Služba Windows Activation Technologies;c:\windows\system32\Wat\WatAdminSvc.exe [x]
S0 aswNdis;avast! Firewall NDIS Filter Service;c:\windows\system32\DRIVERS\aswNdis.sys [x]
S0 aswNdis2;avast! Firewall Core Firewall Service; [x]
S1 aswFW;avast! TDI Firewall driver; [x]
S1 aswKbd;aswKbd; [x]
S1 aswSnx;aswSnx; [x]
S1 aswSP;aswSP; [x]
S2 aswFsBlk;aswFsBlk; [x]
S2 aswMonFlt;aswMonFlt;c:\windows\system32\drivers\aswMonFlt.sys [x]
S2 avast! Firewall;avast! Firewall;c:\program files\AVAST Software\Avast\afwServ.exe [x]
S2 MBAMService;MBAMService;c:\program files\Malwarebytes' Anti-Malware\mbamservice.exe [x]
S2 TeamViewer8;TeamViewer 8;c:\program files\TeamViewer\Version8\TeamViewer_Service.exe [x]
S3 MBAMProtector;MBAMProtector;c:\windows\system32\drivers\mbam.sys [x]
.
.
Contents of the 'Scheduled Tasks' folder
.
2013-01-06 c:\windows\Tasks\Adobe Flash Player Updater.job
- c:\windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2012-08-21 18:59]
.
2013-01-06 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-844198974-2381402901-1937655265-1000Core.job
- c:\users\Axis\AppData\Local\Google\Update\GoogleUpdate.exe [2012-09-22 09:17]
.
2013-01-06 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-844198974-2381402901-1937655265-1000UA.job
- c:\users\Axis\AppData\Local\Google\Update\GoogleUpdate.exe [2012-09-22 09:17]
.
.
------- Supplementary Scan -------
.
uStart Page = hxxp://searchab.com/?aff=7&uid=d2ffdf7e-4797-11e2-85de-0026226767a2
mStart Page = hxxp://searchab.com/?aff=7&uid=d2ffdf7e-4797-11e2-85de-0026226767a2
Trusted Zone: clonewarsadventures.com
Trusted Zone: freerealms.com
Trusted Zone: soe.com
Trusted Zone: sony.com
.
.
--------------------- LOCKED REGISTRY KEYS ---------------------
.
[HKEY_LOCAL_MACHINE\system\ControlSet001\Control\PCW\Security]
@Denied: (Full) (Everyone)
.
Completion time: 2013-01-06 23:05:50
ComboFix-quarantined-files.txt 2013-01-06 22:05
.
Pre-Run: 281 039 630 336 bytes free
Post-Run: 280 722 763 776 bytes free
.
- - End Of File - - F4DB03FB81E57921B8BACC744439FB10

[Roli]

Ještě doladíme.

Pokud jsi tak ještě neučinil, přesuň Combofix na plochu

otevři si Poznámkový blok

do něj zkopíruj skript z následujícího okna:

Kód: Vybrat vše

RegLock:: 
[HKEY_LOCAL_MACHINE\system\ControlSet001\Control\PCW\Security]

ulož Tebou vytvořený TXT soubor jako CFScript.txt na plochu,

po uložení uchop vytvořený skript levým myšítkem a přesuň ho nad ikonu Combofixu, kde ho upustíš:



Po aplikaci na Tebe vypadne další log, zkopíruj ho sem

Upozornění : může se stát, že po aplikaci skriptu a restartu Windows nenaběhnou,

v tom případě znovu restartuj a přitom mačkej F8 poté zvol Poslední známou funkční konfiguraci


Stáhni MEMTEST

soubor rozbal a obraz (ISO) vypal jako z image CD, nikoliv jako data.

V Bios Setup do kterého se dostaneš při restartu mačkáním klávesy :

* DEL
* F2
* F1
* F10

záleží na PC, ale vždy je to na monitoru napsáno,

otevři nabídku ADVANCED BIOS FEATURES a vyhledej Boot Devices 0 až 4 nebo Boot Sequence.

Na první místo nastav CD-ROM,

na druhé pevný disk HDD, u obou položek bývá napsán i výrobce.

Stisknutím Save většinou je to F10 a potvrzením Entrem uložíš nastavení,

pak ještě stisknutím Save and Exit se dostaneš z Biosu.

Vlož CD z Memetestem do mechaniky a po restartu z něj PC nabootuje.

Test nech projet minimálně jednou, ideálně však několikrát třeba přes noc a s každým RAM modulem zvlášť.

Pak dej vědět jak to dopadlo.

[axisskgamer]

Urobil som co som mal... log mi to vypisalo,po dokonceni skenu mi nic neslo otvorit a musel som restartovat ntb...

ComboFix 13-01-08.01 - Axis . 01. 2013 21:33:08.2.2 - x86
Microsoft Windows 7 Professional 6.1.7601.1.1250.421.1051.18.2490.1334 [GMT 1:00]
Running from: c:\users\Axis\Desktop\ComboFix.exe
Command switches used :: c:\users\Axis\Desktop\CFScript.txt
AV: avast! Internet Security *Disabled/Updated* {2B2D1395-420B-D5C9-657E-930FE358FC3C}
FW: avast! Internet Security *Disabled* {131692B0-0864-D491-4E21-3A3A1D8BBB47}
SP: avast! Internet Security *Disabled/Updated* {904CF271-6431-DA47-5FCE-A87D98DFB681}
SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.
.
((((((((((((((((((((((((( Files Created from 2012-12-08 to 2013-01-08 )))))))))))))))))))))))))))))))
.
.
2013-01-08 20:44 . 2013-01-08 20:44 -------- d-----w- c:\users\Default\AppData\Local\temp
2013-01-08 12:50 . 2012-11-08 18:00 6812136 ----a-w- c:\programdata\Microsoft\Windows Defender\Definition Updates\{ADBAB815-8EBB-42D8-AE96-AFEAADC5E206}\mpengine.dll
2013-01-06 22:05 . 2013-01-08 20:44 -------- d-----w- c:\users\Axis\AppData\Local\temp
2013-01-06 18:45 . 2013-01-06 17:44 2932736 ----a-w- c:\windows\system32\nvoglnt.dll
2013-01-05 22:51 . 2013-01-05 22:51 40776 ----a-w- c:\windows\system32\drivers\mbamswissarmy.sys
2013-01-05 22:51 . 2013-01-05 22:51 -------- d-----w- c:\users\Axis\AppData\Roaming\Malwarebytes
2013-01-05 22:51 . 2013-01-05 22:51 -------- d-----w- c:\programdata\Malwarebytes
2013-01-05 22:51 . 2013-01-05 22:51 -------- d-----w- c:\program files\Malwarebytes' Anti-Malware
2013-01-05 22:51 . 2012-12-14 15:49 21104 ----a-w- c:\windows\system32\drivers\mbam.sys
2013-01-05 22:50 . 2013-01-05 22:50 -------- d-----w- c:\users\Axis\AppData\Local\Programs
2013-01-05 17:56 . 2013-01-05 22:48 -------- d-----w- c:\program files\trend micro
2013-01-05 17:56 . 2013-01-05 17:56 -------- d-----w- C:\rsit
2013-01-01 00:03 . 2013-01-01 00:03 -------- d-----w- c:\program files\Nem's Tools
2012-12-26 07:11 . 2009-09-02 10:18 140288 ----a-w- c:\windows\system32\igfxtvcx.dll
2012-12-26 07:11 . 2012-12-26 07:11 -------- d-----w- c:\program files\Intel
2012-12-24 16:43 . 2012-12-24 16:43 -------- d-----w- c:\programdata\Nexon
2012-12-24 16:27 . 2012-12-24 18:48 -------- d-----w- c:\users\Axis\AppData\Local\CSO
2012-12-21 10:47 . 2012-12-16 14:13 295424 ----a-w- c:\windows\system32\atmfd.dll
2012-12-21 10:47 . 2012-12-16 14:13 34304 ----a-w- c:\windows\system32\atmlib.dll
2012-12-20 16:18 . 2012-12-20 16:21 -------- d-----w- c:\program files\GTA San Andreas
2012-12-18 17:49 . 2013-01-02 18:58 -------- d-----w- c:\users\Axis\AppData\Roaming\Hamachi
2012-12-18 17:48 . 2012-12-18 17:48 25280 ----a-w- c:\windows\system32\drivers\hamachi.sys
2012-12-18 17:48 . 2012-12-18 17:49 -------- d-----w- c:\program files\Hamachi
2012-12-16 15:47 . 2012-12-16 15:47 -------- d-----w- c:\programdata\%Installer_PublisherName%
2012-12-16 15:47 . 2012-12-25 19:45 -------- d-----w- c:\programdata\Zoomex
2012-12-16 15:47 . 2012-12-25 19:45 -------- d-----w- c:\programdata\InstallMate
2012-12-14 19:24 . 2012-12-14 19:37 -------- d-----w- c:\users\Axis\AppData\Roaming\TeamViewer
2012-12-14 19:23 . 2012-12-14 19:23 -------- d-----w- c:\program files\TeamViewer
2012-12-12 13:11 . 2012-12-12 13:11 -------- d-----r- c:\program files\Skype
2012-12-12 13:11 . 2012-12-12 13:11 -------- d-----w- c:\program files\Common Files\Skype
2012-12-12 13:02 . 2012-11-02 05:11 376832 ----a-w- c:\windows\system32\dpnet.dll
2012-12-12 13:02 . 2012-11-09 04:42 2048 ----a-w- c:\windows\system32\tzres.dll
.
.
.
(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2013-01-01 03:05 . 2012-08-21 13:49 73656 ----a-w- c:\windows\system32\FlashPlayerCPLApp.cpl
2013-01-01 03:05 . 2012-08-21 13:49 697272 ----a-w- c:\windows\system32\FlashPlayerApp.exe
2012-12-03 18:18 . 2012-12-03 18:18 282312 ----a-w- c:\windows\system32\PnkBstrB.xtr
2012-12-03 18:18 . 2012-12-03 18:17 283312 ----a-w- c:\windows\system32\PnkBstrB.ex0
2012-11-28 17:25 . 2009-07-13 23:40 249856 ----a-w- c:\windows\system32\uxtheme.dll
2012-11-28 17:25 . 2009-07-13 23:39 37376 ----a-w- c:\windows\system32\themeservice.dll
2012-11-28 17:25 . 2012-09-27 11:41 2755072 ----a-w- c:\windows\system32\themeui.dll
2012-11-23 20:36 . 2012-11-23 19:55 140280 ----a-w- c:\windows\system32\PnkBstrK.sys
2012-11-23 19:55 . 2012-11-23 19:55 138904 ----a-w- c:\users\Axis\AppData\Roaming\PnkBstrK.sys
2012-10-30 22:51 . 2012-12-04 16:50 361032 ----a-w- c:\windows\system32\drivers\aswSP.sys
2012-10-30 22:51 . 2012-12-04 16:50 199320 ----a-w- c:\windows\system32\drivers\aswNdis2.sys
2012-10-30 22:51 . 2012-12-04 16:49 54232 ----a-w- c:\windows\system32\drivers\aswTdi.sys
2012-10-30 22:51 . 2012-12-04 16:49 738504 ----a-w- c:\windows\system32\drivers\aswSnx.sys
2012-10-30 22:51 . 2012-12-04 16:49 58680 ----a-w- c:\windows\system32\drivers\aswMonFlt.sys
2012-10-30 22:51 . 2012-12-04 16:50 21256 ----a-w- c:\windows\system32\drivers\aswFsBlk.sys
2012-10-30 22:51 . 2012-12-04 16:50 106560 ----a-w- c:\windows\system32\drivers\aswFW.sys
2012-10-30 22:51 . 2012-12-04 16:49 20624 ----a-w- c:\windows\system32\drivers\aswKbd.sys
2012-10-30 22:51 . 2012-12-04 16:48 41224 ----a-w- c:\windows\avastSS.scr
2012-10-30 22:50 . 2012-12-04 16:48 227648 ----a-w- c:\windows\system32\aswBoot.exe
2012-10-16 07:39 . 2012-11-28 18:54 561664 ----a-w- c:\windows\apppatch\AcLayers.dll
2012-10-15 16:59 . 2012-12-04 16:49 44784 ----a-w- c:\windows\system32\drivers\aswRdr2.sys
.
.
((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* empty entries & legit default entries are not shown
REGEDIT4
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\00avast]
@="{472083B0-C522-11CF-8763-00608CC02F24}"
[HKEY_CLASSES_ROOT\CLSID\{472083B0-C522-11CF-8763-00608CC02F24}]
2012-10-30 22:50 121528 ----a-w- c:\program files\AVAST Software\Avast\ashShell.dll
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Steam"="c:\program files\Steam\steam.exe" [2012-12-03 1354736]
"Skype"="c:\program files\Skype\Phone\Skype.exe" [2012-11-09 17877168]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Gaming 3"="c:\fightmouse elite\Gaming 3.exe" [2010-02-23 1273856]
"RTHDVCPL"="c:\program files\Realtek\Audio\HDA\RtHDVCpl.exe" [2012-06-11 10996368]
"avast"="c:\program files\AVAST Software\Avast\avastUI.exe" [2012-10-30 4297136]
"IgfxTray"="c:\windows\system32\igfxtray.exe" [2009-09-18 141928]
"HotKeysCmds"="c:\windows\system32\hkcmd.exe" [2009-09-18 174184]
"Persistence"="c:\windows\system32\igfxpers.exe" [2009-09-18 151144]
"NvCplDaemon"="c:\windows\system32\NvCpl.dll" [2009-09-25 13797992]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorUser"= 3 (0x3)
"EnableUIADesktopToggle"= 0 (0x0)
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\drivers32]
"aux1"=wdmaud.drv
.
[HKLM\~\startupfolder\C:^Users^Axis^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^hamachi.lnk]
path=c:\users\Axis\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\hamachi.lnk
backup=c:\windows\pss\hamachi.lnk.Startup
backupExtension=.Startup
.
[HKLM\~\startupfolder\C:^Users^Axis^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^Registrace Need for Speed™ Undercover.lnk]
path=c:\users\Axis\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Registrace Need for Speed™ Undercover.lnk
backup=c:\windows\pss\Registrace Need for Speed™ Undercover.lnk.Startup
backupExtension=.Startup
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\GarenaPlus]
2012-12-17 03:02 9152968 ----a-w- c:\program files\Garena Plus\GarenaMessenger.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Skype]
2012-11-09 10:27 17877168 ----a-r- c:\program files\Skype\Phone\Skype.exe
.
R2 SkypeUpdate;Skype Updater;c:\program files\Skype\Updater\Updater.exe [x]
R3 EagleXNt;EagleXNt;c:\windows\system32\drivers\EagleXNt.sys [x]
R3 GGSAFERDriver;GGSAFER Driver;c:\program files\Garena Plus\Room\safedrv.sys [x]
R3 MBAMSwissArmy;MBAMSwissArmy;c:\windows\system32\drivers\mbamswissarmy.sys [x]
R3 netw5v32;Intel(R) Wireless WiFi Link 5000 Series Adapter Driver for Windows Vista 32 Bit;c:\windows\system32\DRIVERS\netw5v32.sys [x]
R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys [x]
R3 WatAdminSvc;Služba Windows Activation Technologies;c:\windows\system32\Wat\WatAdminSvc.exe [x]
S0 aswNdis;avast! Firewall NDIS Filter Service;c:\windows\system32\DRIVERS\aswNdis.sys [x]
S0 aswNdis2;avast! Firewall Core Firewall Service; [x]
S1 aswFW;avast! TDI Firewall driver; [x]
S1 aswKbd;aswKbd; [x]
S1 aswSnx;aswSnx; [x]
S1 aswSP;aswSP; [x]
S2 aswFsBlk;aswFsBlk; [x]
S2 aswMonFlt;aswMonFlt;c:\windows\system32\drivers\aswMonFlt.sys [x]
S2 avast! Firewall;avast! Firewall;c:\program files\AVAST Software\Avast\afwServ.exe [x]
S2 MBAMService;MBAMService;c:\program files\Malwarebytes' Anti-Malware\mbamservice.exe [x]
S2 TeamViewer8;TeamViewer 8;c:\program files\TeamViewer\Version8\TeamViewer_Service.exe [x]
S3 MBAMProtector;MBAMProtector;c:\windows\system32\drivers\mbam.sys [x]
.
.
Contents of the 'Scheduled Tasks' folder
.
2013-01-08 c:\windows\Tasks\Adobe Flash Player Updater.job
- c:\windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2012-08-21 18:59]
.
2013-01-08 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-844198974-2381402901-1937655265-1000Core.job
- c:\users\Axis\AppData\Local\Google\Update\GoogleUpdate.exe [2012-09-22 09:17]
.
2013-01-08 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-844198974-2381402901-1937655265-1000UA.job
- c:\users\Axis\AppData\Local\Google\Update\GoogleUpdate.exe [2012-09-22 09:17]
.
.
------- Supplementary Scan -------
.
uStart Page = hxxp://searchab.com/?aff=7&uid=d2ffdf7e-4797-11e2-85de-0026226767a2
mStart Page = hxxp://searchab.com/?aff=7&uid=d2ffdf7e-4797-11e2-85de-0026226767a2
Trusted Zone: clonewarsadventures.com
Trusted Zone: freerealms.com
Trusted Zone: soe.com
Trusted Zone: sony.com
TCP: DhcpNameServer = 217.119.113.244 87.244.248.13 217.119.113.245
.
.
Completion time: 2013-01-08 21:49:07
ComboFix-quarantined-files.txt 2013-01-08 20:49
ComboFix2.txt 2013-01-06 22:05
.
Pre-Run: 279 924 924 416 bytes free
Post-Run: 279 867 039 744 bytes free
.
- - End Of File - - 6EE96EC8457D1FA4A3F00F59810EAC55

[Roli]

Přes Start >> Spustit zkopíruj do okna:

ComboFix /Uninstall

a stiskni Enter

To odinstaluje ComboFix a smaže s ním související soubory a složky.


Použij T-Cleaner, který smaže případné zbytky po aplikacích které jsme použili.

Jen před jeho stažením a při použití stopni antivir, protože ho muže detekovat jako vir ale není tomu tak.


Pak ještě testni ty RAMky a dej vědět jak to dopadlo.