Zpomalené stahování a celkové připojení k internetu.

[Rudy]

Dejte ten log ComboFix, který jste dělal.

[pat_848]

ComboFix 13-03-02.01 - ACER 03.03.2013 11:58:39.1.4 - x64
Microsoft Windows 7 Home Premium 6.1.7601.1.1250.420.1029.18.3948.2502 [GMT 1:00]
Spuštěný z: c:\users\ACER\Desktop\ComboFix.exe
AV: avast! Antivirus *Disabled/Updated* {2B2D1395-420B-D5C9-657E-930FE358FC3C}
SP: avast! Antivirus *Disabled/Updated* {904CF271-6431-DA47-5FCE-A87D98DFB681}
SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
* Vytvořen nový Bod Obnovení
.
.
((((((((((((((((((((((((((((((((((((((( Ostatní výmazy )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
c:\users\ACER\AppData\Roaming\ACERlog.dat
c:\users\ACER\AppData\Roaming\fk1xxx.e2ts
c:\users\ACER\AppData\Roaming\WinDir
.
.
((((((((((((((((((((((((( Soubory vytvořené od 2013-02-03 do 2013-03-03 )))))))))))))))))))))))))))))))
.
.
2013-03-03 11:07 . 2013-03-03 11:07 -------- d-----w- c:\users\Default\AppData\Local\temp
2013-03-03 10:32 . 2013-02-28 08:36 177672 ----a-w- c:\windows\system32\drivers\aswVmm.sys
2013-03-03 10:32 . 2013-02-28 08:36 65408 ----a-w- c:\windows\system32\drivers\aswRvrt.sys
2013-03-01 11:10 . 2013-02-08 00:28 9162192 ----a-w- c:\programdata\Microsoft\Windows Defender\Definition Updates\{54D3B477-F2B2-4C26-B94B-71C32D7A726B}\mpengine.dll
2013-02-27 21:51 . 2013-02-27 21:51 -------- d-----w- c:\windows\SysWow64\NV
2013-02-27 21:51 . 2013-02-27 21:51 -------- d-----w- c:\windows\system32\NV
2013-02-27 21:51 . 2013-02-27 21:51 -------- d-----w- c:\programdata\NVIDIA
2013-02-27 21:50 . 2013-02-10 01:04 6393120 ----a-w- c:\windows\system32\nvcpl.dll
2013-02-27 21:50 . 2013-02-10 01:04 3472672 ----a-w- c:\windows\system32\nvsvc64.dll
2013-02-27 21:50 . 2013-02-10 01:04 877856 ----a-w- c:\windows\system32\nvvsvc.exe
2013-02-27 21:50 . 2013-02-10 01:04 76064 ----a-w- c:\windows\system32\nv3dappshextr.dll
2013-02-27 21:50 . 2013-02-10 01:04 63776 ----a-w- c:\windows\system32\nvshext.dll
2013-02-27 21:50 . 2013-02-10 01:04 2555680 ----a-w- c:\windows\system32\nvsvcr.dll
2013-02-27 21:50 . 2013-02-10 01:04 237856 ----a-w- c:\windows\system32\nvmctray.dll
2013-02-27 21:50 . 2013-02-10 01:04 1012000 ----a-w- c:\windows\system32\nv3dappshext.dll
2013-02-27 21:50 . 2013-02-09 13:25 3035306 ----a-w- c:\windows\system32\nvcoproc.bin
2013-02-27 21:49 . 2013-02-10 03:25 61216 ----a-w- c:\windows\system32\OpenCL.dll
2013-02-27 21:49 . 2013-02-10 03:25 53024 ----a-w- c:\windows\SysWow64\OpenCL.dll
2013-02-27 21:49 . 2013-02-27 21:49 -------- d-----w- c:\programdata\NVIDIA Corporation
2013-02-27 21:36 . 2013-02-27 21:36 -------- d-----w- C:\NVIDIA
2013-02-26 06:27 . 2013-02-26 06:27 95648 ----a-w- c:\windows\SysWow64\WindowsAccessBridge-32.dll
2013-02-26 06:27 . 2013-02-26 06:27 -------- d-----w- c:\program files (x86)\Java
2013-02-25 20:40 . 2012-08-24 18:13 154480 ----a-w- c:\windows\system32\drivers\ksecpkg.sys
2013-02-25 20:40 . 2012-08-24 18:09 458712 ----a-w- c:\windows\system32\drivers\cng.sys
2013-02-25 20:40 . 2012-08-24 18:05 340992 ----a-w- c:\windows\system32\schannel.dll
2013-02-25 20:40 . 2012-08-24 18:03 1448448 ----a-w- c:\windows\system32\lsasrv.dll
2013-02-25 20:40 . 2012-08-24 16:57 247808 ----a-w- c:\windows\SysWow64\schannel.dll
2013-02-25 20:40 . 2012-08-24 16:57 22016 ----a-w- c:\windows\SysWow64\secur32.dll
2013-02-25 20:40 . 2012-08-24 16:53 96768 ----a-w- c:\windows\SysWow64\sspicli.dll
2013-02-25 20:40 . 2012-05-04 11:00 366592 ----a-w- c:\windows\system32\qdvd.dll
2013-02-25 20:40 . 2012-05-04 09:59 514560 ----a-w- c:\windows\SysWow64\qdvd.dll
2013-02-13 06:43 . 2013-01-09 01:10 996352 ----a-w- c:\program files\Common Files\Microsoft Shared\VGX\VGX.dll
2013-02-13 06:43 . 2013-01-08 22:01 768000 ----a-w- c:\program files (x86)\Common Files\Microsoft Shared\VGX\VGX.dll
2013-02-13 06:26 . 2013-01-05 05:53 5553512 ----a-w- c:\windows\system32\ntoskrnl.exe
2013-02-13 06:26 . 2013-01-05 05:00 3967848 ----a-w- c:\windows\SysWow64\ntkrnlpa.exe
2013-02-13 06:26 . 2013-01-05 05:00 3913064 ----a-w- c:\windows\SysWow64\ntoskrnl.exe
2013-02-13 06:26 . 2013-01-04 03:26 3153408 ----a-w- c:\windows\system32\win32k.sys
2013-02-13 06:26 . 2013-01-04 05:46 215040 ----a-w- c:\windows\system32\winsrv.dll
2013-02-13 06:26 . 2013-01-04 04:51 5120 ----a-w- c:\windows\SysWow64\wow32.dll
2013-02-13 06:26 . 2013-01-04 02:47 25600 ----a-w- c:\windows\SysWow64\setup16.exe
2013-02-13 06:26 . 2013-01-04 02:47 7680 ----a-w- c:\windows\SysWow64\instnm.exe
2013-02-13 06:26 . 2013-01-04 02:47 14336 ----a-w- c:\windows\SysWow64\ntvdm64.dll
2013-02-13 06:26 . 2013-01-04 02:47 2048 ----a-w- c:\windows\SysWow64\user.exe
2013-02-13 06:26 . 2013-01-03 06:00 1913192 ----a-w- c:\windows\system32\drivers\tcpip.sys
2013-02-13 06:26 . 2013-01-03 06:00 288088 ----a-w- c:\windows\system32\drivers\FWPKCLNT.SYS
2013-02-10 11:30 . 2013-02-10 13:39 -------- d-----w- c:\program files (x86)\Ashampoo
2013-02-08 21:27 . 2013-02-08 21:27 -------- d-----w- c:\program files (x86)\Common Files\Skype
2013-02-03 18:07 . 2013-02-03 18:08 -------- d-----w- c:\program files\Adobe
2013-02-03 18:07 . 2013-02-03 18:07 -------- d-----w- C:\adobeTemp
2013-02-03 18:04 . 2013-02-03 18:09 -------- d-----w- c:\program files\Common Files\Adobe
2013-02-03 11:07 . 2013-02-03 11:07 -------- d-----w- c:\program files (x86)\BurnAware Free
2013-02-03 10:38 . 2013-02-03 10:38 -------- d-----w- c:\users\ACER\AppData\Roaming\Canneverbe Limited
2013-02-03 10:38 . 2013-02-03 10:38 -------- d-----w- c:\programdata\Canneverbe Limited
2013-02-03 10:38 . 2013-02-03 10:38 -------- d-----w- c:\program files (x86)\CDBurnerXP
2013-02-02 21:11 . 2013-02-02 21:11 -------- d-----w- c:\users\ACER\AppData\Roaming\StageManager.BD092818F67280F4B42B04877600987F0111B594.1
2013-02-02 16:47 . 2013-02-27 13:10 -------- d-----w- c:\users\ACER\AppData\Roaming\NVIDIA
2013-02-02 16:09 . 2013-02-02 16:09 -------- d-----w- c:\users\ACER\AppData\Roaming\PDAppFlex
2013-02-02 15:36 . 2013-02-02 15:36 -------- d-----w- c:\programdata\regid.1986-12.com.adobe
2013-02-01 12:23 . 2013-02-01 12:23 -------- d-----w- c:\users\ACER\AppData\Roaming\Nero
2013-02-01 12:23 . 2013-02-03 10:30 -------- d-----w- c:\programdata\Nero
2013-02-01 12:07 . 2013-02-01 12:07 -------- d-----w- c:\users\ACER\AppData\Local\Programs
.
.
.
(((((((((((((((((((((((((((((((((((((((( Find3M výpis ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2013-02-28 08:36 . 2012-09-28 21:11 68992 ----a-w- c:\windows\system32\drivers\aswTdi.sys
2013-02-28 08:36 . 2012-09-28 21:11 377992 ----a-w- c:\windows\system32\drivers\aswSP.sys
2013-02-28 08:36 . 2012-09-28 21:11 71064 ----a-w- c:\windows\system32\drivers\aswRdr2.sys
2013-02-28 08:36 . 2012-09-28 21:11 1025880 ----a-w- c:\windows\system32\drivers\aswSnx.sys
2013-02-28 08:36 . 2012-09-28 21:11 80888 ----a-w- c:\windows\system32\drivers\aswMonFlt.sys
2013-02-28 08:36 . 2012-09-28 21:11 33472 ----a-w- c:\windows\system32\drivers\aswFsBlk.sys
2013-02-28 08:36 . 2012-09-28 21:11 41664 ----a-w- c:\windows\avastSS.scr
2013-02-28 08:35 . 2012-09-28 21:11 287840 ----a-w- c:\windows\system32\aswBoot.exe
2013-02-27 18:29 . 2012-08-09 09:04 691568 ----a-w- c:\windows\SysWow64\FlashPlayerApp.exe
2013-02-27 18:29 . 2011-08-20 01:03 71024 ----a-w- c:\windows\SysWow64\FlashPlayerCPLApp.cpl
2013-02-26 06:27 . 2012-07-30 21:23 861088 ----a-w- c:\windows\SysWow64\npDeployJava1.dll
2013-02-26 06:27 . 2012-07-30 21:23 782240 ----a-w- c:\windows\SysWow64\deployJava1.dll
2013-02-13 06:46 . 2012-07-31 11:21 70004024 ----a-w- c:\windows\system32\MRT.exe
2013-01-17 00:28 . 2010-11-21 03:27 273840 ------w- c:\windows\system32\MpSigStub.exe
2013-01-04 04:43 . 2013-02-13 06:26 44032 ----a-w- c:\windows\apppatch\acwow64.dll
2013-01-01 07:08 . 2013-01-01 07:08 74752 ----a-w- c:\windows\SysWow64\RegisterIEPKEYs.exe
2013-01-01 07:08 . 2013-01-01 07:08 161792 ----a-w- c:\windows\SysWow64\msls31.dll
2013-01-01 07:08 . 2013-01-01 07:08 91648 ----a-w- c:\windows\system32\SetIEInstalledDate.exe
2013-01-01 07:08 . 2013-01-01 07:08 89088 ----a-w- c:\windows\system32\RegisterIEPKEYs.exe
2013-01-01 07:08 . 2013-01-01 07:08 89088 ----a-w- c:\windows\system32\ie4uinit.exe
2013-01-01 07:08 . 2013-01-01 07:08 86528 ----a-w- c:\windows\SysWow64\iesysprep.dll
2013-01-01 07:08 . 2013-01-01 07:08 85504 ----a-w- c:\windows\system32\iesetup.dll
2013-01-01 07:08 . 2013-01-01 07:08 82432 ----a-w- c:\windows\system32\icardie.dll
2013-01-01 07:08 . 2013-01-01 07:08 76800 ----a-w- c:\windows\SysWow64\SetIEInstalledDate.exe
2013-01-01 07:08 . 2013-01-01 07:08 76800 ----a-w- c:\windows\system32\tdc.ocx
2013-01-01 07:08 . 2013-01-01 07:08 74752 ----a-w- c:\windows\SysWow64\iesetup.dll
2013-01-01 07:08 . 2013-01-01 07:08 65024 ----a-w- c:\windows\system32\pngfilt.dll
2013-01-01 07:08 . 2013-01-01 07:08 63488 ----a-w- c:\windows\SysWow64\tdc.ocx
2013-01-01 07:08 . 2013-01-01 07:08 55296 ----a-w- c:\windows\system32\msfeedsbs.dll
2013-01-01 07:08 . 2013-01-01 07:08 534528 ----a-w- c:\windows\system32\ieapfltr.dll
2013-01-01 07:08 . 2013-01-01 07:08 49664 ----a-w- c:\windows\system32\imgutil.dll
2013-01-01 07:08 . 2013-01-01 07:08 48640 ----a-w- c:\windows\SysWow64\mshtmler.dll
2013-01-01 07:08 . 2013-01-01 07:08 48640 ----a-w- c:\windows\system32\mshtmler.dll
2013-01-01 07:08 . 2013-01-01 07:08 452608 ----a-w- c:\windows\system32\dxtmsft.dll
2013-01-01 07:08 . 2013-01-01 07:08 448512 ----a-w- c:\windows\system32\html.iec
2013-01-01 07:08 . 2013-01-01 07:08 403248 ----a-w- c:\windows\system32\iedkcs32.dll
2013-01-01 07:08 . 2013-01-01 07:08 39936 ----a-w- c:\windows\system32\iernonce.dll
2013-01-01 07:08 . 2013-01-01 07:08 3695416 ----a-w- c:\windows\system32\ieapfltr.dat
2013-01-01 07:08 . 2013-01-01 07:08 367104 ----a-w- c:\windows\SysWow64\html.iec
2013-01-01 07:08 . 2013-01-01 07:08 35840 ----a-w- c:\windows\SysWow64\imgutil.dll
2013-01-01 07:08 . 2013-01-01 07:08 30720 ----a-w- c:\windows\system32\licmgr10.dll
2013-01-01 07:08 . 2013-01-01 07:08 282112 ----a-w- c:\windows\system32\dxtrans.dll
2013-01-01 07:08 . 2013-01-01 07:08 267776 ----a-w- c:\windows\system32\ieaksie.dll
2013-01-01 07:08 . 2013-01-01 07:08 249344 ----a-w- c:\windows\system32\webcheck.dll
2013-01-01 07:08 . 2013-01-01 07:08 23552 ----a-w- c:\windows\SysWow64\licmgr10.dll
2013-01-01 07:08 . 2013-01-01 07:08 222208 ----a-w- c:\windows\system32\msls31.dll
2013-01-01 07:08 . 2013-01-01 07:08 197120 ----a-w- c:\windows\system32\msrating.dll
2013-01-01 07:08 . 2013-01-01 07:08 165888 ----a-w- c:\windows\system32\iexpress.exe
2013-01-01 07:08 . 2013-01-01 07:08 163840 ----a-w- c:\windows\system32\ieakui.dll
2013-01-01 07:08 . 2013-01-01 07:08 160256 ----a-w- c:\windows\system32\wextract.exe
2013-01-01 07:08 . 2013-01-01 07:08 160256 ----a-w- c:\windows\system32\ieakeng.dll
2013-01-01 07:08 . 2013-01-01 07:08 152064 ----a-w- c:\windows\SysWow64\wextract.exe
2013-01-01 07:08 . 2013-01-01 07:08 150528 ----a-w- c:\windows\SysWow64\iexpress.exe
2013-01-01 07:08 . 2013-01-01 07:08 149504 ----a-w- c:\windows\system32\occache.dll
2013-01-01 07:08 . 2013-01-01 07:08 145920 ----a-w- c:\windows\system32\iepeers.dll
2013-01-01 07:08 . 2013-01-01 07:08 135168 ----a-w- c:\windows\system32\IEAdvpack.dll
2013-01-01 07:08 . 2013-01-01 07:08 12288 ----a-w- c:\windows\system32\mshta.exe
2013-01-01 07:08 . 2013-01-01 07:08 11776 ----a-w- c:\windows\SysWow64\mshta.exe
2013-01-01 07:08 . 2013-01-01 07:08 114176 ----a-w- c:\windows\system32\admparse.dll
2013-01-01 07:08 . 2013-01-01 07:08 111616 ----a-w- c:\windows\system32\iesysprep.dll
2013-01-01 07:08 . 2013-01-01 07:08 110592 ----a-w- c:\windows\SysWow64\IEAdvpack.dll
2013-01-01 07:08 . 2013-01-01 07:08 10752 ----a-w- c:\windows\system32\msfeedssync.exe
2013-01-01 07:08 . 2013-01-01 07:08 103936 ----a-w- c:\windows\system32\inseng.dll
2013-01-01 07:08 . 2013-01-01 07:08 101888 ----a-w- c:\windows\SysWow64\admparse.dll
2012-12-22 16:18 . 2012-09-16 13:57 103736 ----a-w- c:\windows\SysWow64\PnkBstrB.exe
2012-12-22 16:18 . 2012-09-16 13:57 66872 ----a-w- c:\windows\SysWow64\PnkBstrA.exe
2012-12-16 17:11 . 2012-12-21 06:01 46080 ----a-w- c:\windows\system32\atmlib.dll
2012-12-16 14:45 . 2012-12-21 06:01 367616 ----a-w- c:\windows\system32\atmfd.dll
2012-12-16 14:13 . 2012-12-21 06:01 295424 ----a-w- c:\windows\SysWow64\atmfd.dll
2012-12-16 14:13 . 2012-12-21 06:01 34304 ----a-w- c:\windows\SysWow64\atmlib.dll
2012-12-07 13:20 . 2013-01-09 06:16 441856 ----a-w- c:\windows\system32\Wpc.dll
2012-12-07 13:15 . 2013-01-09 06:16 2746368 ----a-w- c:\windows\system32\gameux.dll
2012-12-07 12:26 . 2013-01-09 06:16 308736 ----a-w- c:\windows\SysWow64\Wpc.dll
2012-12-07 12:20 . 2013-01-09 06:16 2576384 ----a-w- c:\windows\SysWow64\gameux.dll
2012-12-07 11:20 . 2013-01-09 06:16 30720 ----a-w- c:\windows\system32\usk.rs
2012-12-07 11:20 . 2013-01-09 06:16 43520 ----a-w- c:\windows\system32\csrr.rs
2012-12-07 11:20 . 2013-01-09 06:16 23552 ----a-w- c:\windows\system32\oflc.rs
2012-12-07 11:20 . 2013-01-09 06:16 45568 ----a-w- c:\windows\system32\oflc-nz.rs
2012-12-07 11:20 . 2013-01-09 06:16 44544 ----a-w- c:\windows\system32\pegibbfc.rs
2012-12-07 11:20 . 2013-01-09 06:16 20480 ----a-w- c:\windows\system32\pegi-fi.rs
2012-12-07 11:20 . 2013-01-09 06:16 20480 ----a-w- c:\windows\system32\pegi-pt.rs
2012-12-07 11:19 . 2013-01-09 06:16 20480 ----a-w- c:\windows\system32\pegi.rs
2012-12-07 11:19 . 2013-01-09 06:16 46592 ----a-w- c:\windows\system32\fpb.rs
2012-12-07 11:19 . 2013-01-09 06:16 40960 ----a-w- c:\windows\system32\cob-au.rs
2012-12-07 11:19 . 2013-01-09 06:16 21504 ----a-w- c:\windows\system32\grb.rs
2012-12-07 11:19 . 2013-01-09 06:16 15360 ----a-w- c:\windows\system32\djctq.rs
2012-12-07 11:19 . 2013-01-09 06:16 55296 ----a-w- c:\windows\system32\cero.rs
2012-12-07 11:19 . 2013-01-09 06:16 51712 ----a-w- c:\windows\system32\esrb.rs
2012-12-07 10:46 . 2013-01-09 06:16 43520 ----a-w- c:\windows\SysWow64\csrr.rs
2012-12-07 10:46 . 2013-01-09 06:16 30720 ----a-w- c:\windows\SysWow64\usk.rs
2012-12-07 10:46 . 2013-01-09 06:16 45568 ----a-w- c:\windows\SysWow64\oflc-nz.rs
2012-12-07 10:46 . 2013-01-09 06:16 44544 ----a-w- c:\windows\SysWow64\pegibbfc.rs
2012-12-07 10:46 . 2013-01-09 06:16 20480 ----a-w- c:\windows\SysWow64\pegi-pt.rs
2012-12-07 10:46 . 2013-01-09 06:16 23552 ----a-w- c:\windows\SysWow64\oflc.rs
2012-12-07 10:46 . 2013-01-09 06:16 20480 ----a-w- c:\windows\SysWow64\pegi-fi.rs
2012-12-07 10:46 . 2013-01-09 06:16 46592 ----a-w- c:\windows\SysWow64\fpb.rs
2012-12-07 10:46 . 2013-01-09 06:16 20480 ----a-w- c:\windows\SysWow64\pegi.rs
2012-12-07 10:46 . 2013-01-09 06:16 21504 ----a-w- c:\windows\SysWow64\grb.rs
2012-12-07 10:46 . 2013-01-09 06:16 40960 ----a-w- c:\windows\SysWow64\cob-au.rs
2012-12-07 10:46 . 2013-01-09 06:16 15360 ----a-w- c:\windows\SysWow64\djctq.rs
.
.
(((((((((((((((((((((((((((((((((( Spouštěcí body v registru )))))))))))))))))))))))))))))))))))))))))))))
.
.
*Poznámka* prázdné záznamy a legitimní výchozí údaje nejsou zobrazeny.
REGEDIT4
.
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\URLSearchHooks]
"{124d001a-bdcb-472f-aa59-bbe7e4bc3204}"= "c:\program files (x86)\Ashampoo_US\prxtbAsha.dll" [2011-05-09 176936]
"{7473b6bd-4691-4744-a82b-7854eb3d70b6}"= "c:\program files (x86)\uTorrentControl_v2\prxtbuTor.dll" [2011-05-09 176936]
.
[HKEY_CLASSES_ROOT\clsid\{124d001a-bdcb-472f-aa59-bbe7e4bc3204}]
.
[HKEY_CLASSES_ROOT\clsid\{7473b6bd-4691-4744-a82b-7854eb3d70b6}]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\~\Browser Helper Objects\{124d001a-bdcb-472f-aa59-bbe7e4bc3204}]
2011-05-09 09:49 176936 ----a-w- c:\program files (x86)\Ashampoo_US\prxtbAsha.dll
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\~\Browser Helper Objects\{7473b6bd-4691-4744-a82b-7854eb3d70b6}]
2011-05-09 09:49 176936 ----a-w- c:\program files (x86)\uTorrentControl_v2\prxtbuTor.dll
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Toolbar]
"{124d001a-bdcb-472f-aa59-bbe7e4bc3204}"= "c:\program files (x86)\Ashampoo_US\prxtbAsha.dll" [2011-05-09 176936]
"{7473b6bd-4691-4744-a82b-7854eb3d70b6}"= "c:\program files (x86)\uTorrentControl_v2\prxtbuTor.dll" [2011-05-09 176936]
.
[HKEY_CLASSES_ROOT\clsid\{124d001a-bdcb-472f-aa59-bbe7e4bc3204}]
.
[HKEY_CLASSES_ROOT\clsid\{7473b6bd-4691-4744-a82b-7854eb3d70b6}]
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Sidebar"="c:\program files\Windows Sidebar\sidebar.exe" [2010-11-21 1475584]
"DAEMON Tools Lite"="c:\program files (x86)\DAEMON Tools Lite\DTLite.exe" [2012-11-06 3673728]
"WebcamMaxAutoRun"="c:\program files (x86)\WebcamMax\wcmmon.exe" [2011-07-17 1038848]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]
"BackupManagerTray"="c:\program files (x86)\NTI\Acer Backup Manager\BackupManagerTray.exe" [2011-04-24 297280]
"LManager"="c:\program files (x86)\Launch Manager\LManager.exe" [2011-07-01 1110096]
"BCSSync"="c:\program files (x86)\Microsoft Office\Office14\BCSSync.exe" [2010-03-13 91520]
"avast"="c:\program files\AVAST Software\Avast\avastUI.exe" [2013-02-28 4767304]
"Adobe ARM"="c:\program files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2012-12-03 946352]
"SwitchBoard"="c:\program files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe" [2010-02-19 517096]
"AdobeCS6ServiceManager"="c:\program files (x86)\Common Files\Adobe\CS6ServiceManager\CS6ServiceManager.exe" [2012-03-09 1073312]
"SunJavaUpdateSched"="c:\program files (x86)\Common Files\Java\Java Update\jusched.exe" [2012-07-03 252848]
.
c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\
Acer VCM.lnk - c:\program files (x86)\Acer\Acer VCM\AcerVCM.exe [2011-8-20 723560]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorAdmin"= 5 (0x5)
"ConsentPromptBehaviorUser"= 3 (0x3)
"EnableUIADesktopToggle"= 0 (0x0)
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\windows]
"LoadAppInit_DLLs"=1 (0x1)
"AppInit_DLLs"=c:\windows\SysWOW64\nvinit.dll
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\drivers32]
"midi1"=wdmaud.drv
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MCODS]
@=""
.
R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2010-03-18 138576]
R2 EgisTec Ticket Service;EgisTec Ticket Service;c:\program files\Common Files\EgisTec\Services\EgisTicketService.exe [x]
R2 SkypeUpdate;Skype Updater;c:\program files (x86)\Skype\Updater\Updater.exe [2013-01-08 161536]
R3 AthBTPort;Atheros Virtual Bluetooth Class;c:\windows\system32\DRIVERS\btath_flt.sys [2011-08-02 36000]
R3 BBSvc;Bing Bar Update Service;c:\program files (x86)\Microsoft\BingBar\BBSvc.EXE [2011-06-07 191752]
R3 BTATH_A2DP;Bluetooth A2DP Audio Driver;c:\windows\system32\drivers\btath_a2dp.sys [2011-08-02 330912]
R3 btath_avdt;Atheros Bluetooth AVDT Service;c:\windows\system32\drivers\btath_avdt.sys [2011-08-02 110240]
R3 BTATH_HCRP;Bluetooth HCRP Server driver;c:\windows\system32\DRIVERS\btath_hcrp.sys [2011-08-02 167584]
R3 BTATH_LWFLT;Bluetooth LWFLT Device;c:\windows\system32\DRIVERS\btath_lwflt.sys [2011-08-02 68256]
R3 BTATH_RCP;Bluetooth AVRCP Device;c:\windows\system32\DRIVERS\btath_rcp.sys [2011-08-02 280992]
R3 BtFilter;BtFilter;c:\windows\system32\DRIVERS\btfilter.sys [2011-08-02 511136]
R3 RdpVideoMiniport;Remote Desktop Video Miniport Driver;c:\windows\system32\drivers\rdpvideominiport.sys [2012-08-23 19456]
R3 SwitchBoard;SwitchBoard;c:\program files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [2010-02-19 517096]
R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys [2012-08-23 57856]
R3 TsUsbGD;Remote Desktop Generic USB Device;c:\windows\system32\drivers\TsUsbGD.sys [2012-08-23 30208]
R3 TurboBoost;Intel(R) Turbo Boost Technology Monitor 2.0;c:\program files\Intel\TurboBoost\TurboBoost.exe [2010-10-08 150016]
R3 WatAdminSvc;Služba Technologie aktivace Windows;c:\windows\system32\Wat\WatAdminSvc.exe [2012-07-31 1255736]
R4 wlcrasvc;Windows Live Mesh remote connections service;c:\program files\Windows Live\Mesh\wlcrasvc.exe [2010-09-23 57184]
S0 aswRvrt;aswRvrt; [x]
S0 aswVmm;aswVmm; [x]
S0 nvpciflt;nvpciflt;c:\windows\system32\DRIVERS\nvpciflt.sys [2013-02-10 30496]
S1 aswKbd;aswKbd; [x]
S1 aswSnx;aswSnx; [x]
S1 aswSP;aswSP; [x]
S1 nvkflt;nvkflt;c:\windows\system32\DRIVERS\nvkflt.sys [2013-02-10 284448]
S2 aswFsBlk;aswFsBlk; [x]
S2 aswMonFlt;aswMonFlt;c:\windows\system32\drivers\aswMonFlt.sys [2013-02-28 80888]
S2 AtherosSvc;AtherosSvc;c:\program files (x86)\Bluetooth Suite\adminservice.exe [2011-08-02 103584]
S2 BBUpdate;BBUpdate;c:\program files (x86)\Microsoft\BingBar\SeaPort.EXE [2011-05-13 249648]
S2 CxAudMsg;Conexant Audio Message Service;c:\windows\system32\CxAudMsg64.exe [2010-12-16 198784]
S2 DsiWMIService;Dritek WMI Service;c:\program files (x86)\Launch Manager\dsiwmis.exe [2011-07-01 353872]
S2 ePowerSvc;Acer ePower Service;c:\program files\Acer\Acer ePower Management\ePowerSvc.exe [2011-05-10 872552]
S2 GREGService;GREGService;c:\program files (x86)\Acer\Registration\GREGsvc.exe [2011-05-26 29696]
S2 IAStorDataMgrSvc;Intel(R) Rapid Storage Technology;c:\program files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe [2011-01-13 13336]
S2 IconMan_R;IconMan_R;c:\program files (x86)\Realtek\Realtek PCIE Card Reader\RIconMan.exe [2011-01-13 1751656]
S2 Live Updater Service;Live Updater Service;c:\program files\Acer\Acer Updater\UpdaterService.exe [2012-04-05 255376]
S2 NTI IScheduleSvc;NTI IScheduleSvc;c:\program files (x86)\NTI\Acer Backup Manager\IScheduleSvc.exe [2011-04-24 256832]
S2 RS_Service;Raw Socket Service;c:\program files (x86)\Acer\Acer VCM\RS_Service.exe [2010-01-29 260640]
S2 Skype C2C Service;Skype C2C Service;c:\programdata\Skype\Toolbars\Skype C2C Service\c2c_service.exe [2013-01-31 3289208]
S2 TurboB;Turbo Boost UI Monitor driver;c:\windows\system32\DRIVERS\TurboB.sys [2010-10-08 19192]
S2 UNS;Intel(R) Management and Security Application User Notification Service;c:\program files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe [2010-12-20 2656280]
S2 WCMVCAM;WebcamMax, WDM Video Capture;c:\windows\system32\DRIVERS\wcmvcam64.sys [2012-04-15 1071032]
S3 BTATH_BUS;Atheros Bluetooth Bus;c:\windows\system32\DRIVERS\btath_bus.sys [2011-08-02 30368]
S3 dtsoftbus01;DAEMON Tools Virtual Bus Driver;c:\windows\system32\DRIVERS\dtsoftbus01.sys [2012-11-07 283200]
S3 FPSensor;EgisTec-Corp Fingerprint Reader Driver (FPSensor.sys);c:\windows\system32\Drivers\FPSensor.sys [2011-04-22 36656]
S3 L1C;NDIS Miniport Driver for Atheros AR813x/AR815x PCI-E Ethernet Controller;c:\windows\system32\DRIVERS\L1C62x64.sys [2010-10-20 76912]
S3 RSPCIESTOR;Realtek PCIE CardReader Driver;c:\windows\system32\DRIVERS\RtsPStor.sys [2011-01-12 333928]
.
.
--- Ostatní služby/ovladače v paměti ---
.
*NewlyCreated* - WS2IFSL
.
Obsah adresáře 'Naplánované úlohy'
.
2013-03-03 c:\windows\Tasks\Adobe Flash Player Updater.job
- c:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2012-08-09 18:29]
.
2013-02-28 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-210841846-1009514852-3515281851-1001Core.job
- c:\users\ACER\AppData\Local\Google\Update\GoogleUpdate.exe [2012-07-30 15:00]
.
2013-03-03 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-210841846-1009514852-3515281851-1001UA.job
- c:\users\ACER\AppData\Local\Google\Update\GoogleUpdate.exe [2012-07-30 15:00]
.
.
--------- X64 Entries -----------
.
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\00avast]
@="{472083B0-C522-11CF-8763-00608CC02F24}"
[HKEY_CLASSES_ROOT\CLSID\{472083B0-C522-11CF-8763-00608CC02F24}]
2013-02-28 08:35 133840 ----a-w- c:\program files\AVAST Software\Avast\ashShA64.dll
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"IgfxTray"="c:\windows\system32\igfxtray.exe" [2011-03-31 167960]
"HotKeysCmds"="c:\windows\system32\hkcmd.exe" [2011-03-31 392216]
"Persistence"="c:\windows\system32\igfxpers.exe" [2011-03-31 415768]
"AtherosBtStack"="c:\program files (x86)\Bluetooth Suite\BtvStack.exe" [2011-08-02 961184]
"AthBtTray"="c:\program files (x86)\Bluetooth Suite\AthBtTray.exe" [2011-08-02 798880]
"IntelTBRunOnce"="wscript.exe" [2009-07-14 168960]
"Power Management"="c:\program files\Acer\Acer ePower Management\ePowerTray.exe" [2011-05-10 1831528]
"AutoKMS"="c:\windows\AutoKMS.exe" [2012-10-27 615936]
"AdobeAAMUpdater-1.0"="c:\program files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe" [2012-04-04 446392]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
"AppInit_DLLs"=c:\windows\System32\nvinitx.dll
.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Svchost - LocalService
FontCache
.
------- Doplňkový sken -------
.
uStart Page = hxxp://www.seznam.cz/
uLocal Page = c:\windows\system32\blank.htm
mDefault_Page_URL = hxxp://acer.msn.com
mStart Page = hxxp://acer.msn.com
mLocal Page = c:\windows\SysWOW64\blank.htm
IE: E&xportovat do aplikace Microsoft Excel - c:\progra~2\MICROS~4\Office14\EXCEL.EXE/3000
IE: Od&eslat do aplikace OneNote - c:\progra~2\MICROS~4\Office14\ONBttnIE.dll/105
IE: {{781B39EC-2E18-41FC-9B00-B84E4FFCA85F} - c:\program files (x86)\ICQ7M\ICQ.exe
TCP: DhcpNameServer = 192.168.2.1
.
- - - - NEPLATNÉ POLOŽKY ODSTRANĚNÉ Z REGISTRU - - - -
.
Toolbar-Locked - (no file)
Wow6432Node-HKCU-Run-rsclient.exe - c:\users\ACER\Desktop\rsclient.exe
Wow6432Node-HKCU-Run-AdobeBridge - (no file)
HKLM_Wow6432Node-ActiveSetup-{2D46B6DC-2207-486B-B523-A557E6D54B47} - start
Toolbar-Locked - (no file)
WebBrowser-{124D001A-BDCB-472F-AA59-BBE7E4BC3204} - (no file)
WebBrowser-{7473B6BD-4691-4744-A82B-7854EB3D70B6} - (no file)
HKLM-Run-FortKnoxPersonalFirewall - c:\program files\NETGATE\FortKnox Personal Firewall\FortKnoxGUI.exe
.
.
.
--------------------- ZAMKNUTÉ KLÍČE V REGISTRU ---------------------
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil64_11_6_602_171_ActiveX.exe,-101"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\Elevation]
"Enabled"=dword:00000001
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\LocalServer32]
@="c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil64_11_6_602_171_ActiveX.exe"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
.
[HKEY_LOCAL_MACHINE\software\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="IFlashBroker5"
.
[HKEY_LOCAL_MACHINE\software\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"
.
[HKEY_LOCAL_MACHINE\software\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil32_11_6_602_171_ActiveX.exe,-101"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\Elevation]
"Enabled"=dword:00000001
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\LocalServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil32_11_6_602_171_ActiveX.exe"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@="Shockwave Flash Object"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\InprocServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_6_602_171.ocx"
"ThreadingModel"="Apartment"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\MiscStatus]
@="0"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ProgID]
@="ShockwaveFlash.ShockwaveFlash.11"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_6_602_171.ocx, 1"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\TypeLib]
@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\Version]
@="1.0"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
@="ShockwaveFlash.ShockwaveFlash"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@="Macromedia Flash Factory Object"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\InprocServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_6_602_171.ocx"
"ThreadingModel"="Apartment"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ProgID]
@="FlashFactory.FlashFactory.1"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_6_602_171.ocx, 1"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\TypeLib]
@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\Version]
@="1.0"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
@="FlashFactory.FlashFactory"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="IFlashBroker5"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
.
[HKEY_LOCAL_MACHINE\software\McAfee]
"SymbolicLinkValue"=hex(6):5c,00,72,00,65,00,67,00,69,00,73,00,74,00,72,00,79,
00,5c,00,6d,00,61,00,63,00,68,00,69,00,6e,00,65,00,5c,00,53,00,6f,00,66,00,\
.
[HKEY_LOCAL_MACHINE\software\Wow6432Node\Microsoft\Office\Common\Smart Tag\Actions\{B7EFF951-E52F-45CC-9EF7-57124F2177CC}]
@Denied: (A) (Everyone)
"Solution"="{15727DE6-F92D-4E46-ACB4-0E2C58B31A18}"
.
[HKEY_LOCAL_MACHINE\software\Wow6432Node\Microsoft\Schema Library\ActionsPane3]
@Denied: (A) (Everyone)
.
[HKEY_LOCAL_MACHINE\software\Wow6432Node\Microsoft\Schema Library\ActionsPane3\0]
"Key"="ActionsPane3"
"Location"="c:\\Program Files (x86)\\Common Files\\Microsoft Shared\\VSTO\\ActionsPane3.xsd"
.
[HKEY_LOCAL_MACHINE\system\ControlSet001\Control\PCW\Security]
@Denied: (Full) (Everyone)
.
------------------------ Jiné spuštené procesy ------------------------
.
c:\program files\AVAST Software\Avast\AvastSvc.exe
c:\program files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
c:\program files (x86)\Launch Manager\LMutilps32.exe
c:\progra~2\ICQ6TO~1\ICQSER~1.EXE
c:\windows\SysWOW64\PnkBstrA.exe
c:\windows\SysWOW64\PnkBstrB.exe
c:\program files (x86)\Common Files\Protexis\License Service\PsiService_2.exe
c:\program files (x86)\Common Files\InterVideo\RegMgr\iviRegMgr.exe
c:\program files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
.
**************************************************************************
.
Celkový čas: 2013-03-03 12:14:42 - počítač byl restartován
ComboFix-quarantined-files.txt 2013-03-03 11:14
.
Před spuštěním: Volných bajtů: 643 815 108 608
Po spuštění: Volných bajtů: 652 826 800 128
.
- - End Of File - - 62284A2DC121A1B9453835BE4377D328

[Rudy]

Otevřte poznámkový blok a zkopírujte do něj:

KillAll::

File::
c:\program files (x86)\uTorrentControl_v2\prxtbuTor.dll

Registry::
[-HKEY_CLASSES_ROOT\clsid\{124d001a-bdcb-472f-aa59-bbe7e4bc3204}]
[-HKEY_CLASSES_ROOT\clsid\{7473b6bd-4691-4744-a82b-7854eb3d70b6}]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\~\Browser Helper Objects\{7473b6bd-4691-4744-a82b-7854eb3d70b6}]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Toolbar]
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]
"SunJavaUpdateSched"=-

Driver::
BBSvc
BBUpdate

RegLock::
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}]
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\Elevation]
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\LocalServer32]
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\TypeLib]
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}]
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\ProxyStubClsid32]
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\TypeLib]
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}]
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\Elevation]
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\LocalServer32]
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\TypeLib]
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}]
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\InprocServer32]
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\MiscStatus]
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ProgID]
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\TypeLib]
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\Version]
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}]
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\InprocServer32]
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ProgID]
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\Version]
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}]
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\ProxyStubClsid32]
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\TypeLib]
[HKEY_LOCAL_MACHINE\software\Wow6432Node\Microsoft\Office\Common\Smart Tag\Actions\{B7EFF951-E52F-45CC-9EF7-57124F2177CC}]

Reboot::

Uložte na plochu jako CFScript.txt. Pak jej myší přetáhněte nad ikonu ComboFix a pusťte. CF se spustí a vykoná příkazy ze skriptu.

[pat_848]

Udělal jsem, omlouvám se za zpožděnou reakci
Co teď?

[Rudy]

Nastala nějaká změna?

[pat_848]

Určitě nějaká ano. Přijde mi, že se všechno rychleji načítá (i co se týče Win7), ale jak dojde na načítání např. na Youtube, tak se stává, že to načítání je hold pomalejší. Zase si tu nechci stěžovat, jak nějakej uplakánek pořád mátě určitě na práci důležitější věci, než sou tyhle.

Takže jedinej problém, kterej sem zaznamenal (Po tomhle "cyklu") je, že upload opakovaně převyšuje download, což nevím jestli se normálně, běžně děje. . jinak s ničim jinym problém není |:) kdyžtak hodim výsledky z měření rychlosti opět

http://rychlost.cz/rs/201310102894.png - ale asi je to normální, nevim nevyznám se, tak jako vy

[Rudy]

Potřeboval bych vidět log z posledního skenu CF. Najdete ho v c:\combofix.txt.

[pat_848]

Ano, tak tady ho máte a jinak prozatím děkuju za spolupráci snad to nějak dotáhnem do vítězného konce.
A konkrétně u RSITu se nastavujou měsíce, už je to delší dobu, co mi to takhle blbne. Neni potřeba nastavit maximální dobu?

ComboFix 13-03-10.02 - ACER 10.03.2013 17:39:49.2.4 - x64
Microsoft Windows 7 Home Premium 6.1.7601.1.1250.420.1029.18.3948.2412 [GMT 1:00]
Spuštěný z: c:\users\ACER\Desktop\ComboFix.exe
Použité ovládací přepínače :: c:\users\ACER\Desktop\CFScript.txt.txt
AV: avast! Antivirus *Enabled/Updated* {2B2D1395-420B-D5C9-657E-930FE358FC3C}
SP: avast! Antivirus *Enabled/Updated* {904CF271-6431-DA47-5FCE-A87D98DFB681}
SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.
FILE ::
"c:\program files (x86)\uTorrentControl_v2\prxtbuTor.dll"
.
.
((((((((((((((((((((((((((((((((((((((( Ostatní výmazy )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
c:\users\ACER\AppData\Roaming\inst.exe
.
.
((((((((((((((((((((((((( Soubory vytvořené od 2013-02-10 do 2013-03-10 )))))))))))))))))))))))))))))))
.
.
2013-03-10 16:54 . 2013-03-10 16:54 -------- d-----w- c:\users\Default\AppData\Local\temp
2013-03-09 17:55 . 2013-03-09 17:55 -------- d-----w- c:\programdata\vsosdk
2013-03-09 17:08 . 2013-03-09 18:04 -------- d-----w- c:\users\ACER\AppData\Roaming\Vso
2013-03-09 17:08 . 2013-03-09 17:08 82816 ----a-w- c:\users\ACER\AppData\Roaming\pcouffin.sys
2013-03-09 17:08 . 2012-11-21 19:16 626688 ----a-w- c:\windows\SysWow64\vp7vfw.dll
2013-03-09 17:08 . 2012-11-21 19:16 1184984 ----a-w- c:\windows\SysWow64\wvc1dmod.dll
2013-03-09 17:08 . 2013-03-09 17:08 -------- d-----w- c:\programdata\VSO
2013-03-09 17:08 . 2013-03-09 17:08 -------- d-----w- c:\program files (x86)\VSO
2013-03-08 12:47 . 2013-02-08 00:28 9162192 ----a-w- c:\programdata\Microsoft\Windows Defender\Definition Updates\{33B9C435-0AA1-4FAF-9B88-7F6639CCACD6}\mpengine.dll
2013-03-07 14:29 . 2013-03-07 14:29 -------- d-----w- c:\users\ACER\AppData\Local\BMExplorer
2013-03-03 12:56 . 2013-03-07 21:22 -------- d-----w- c:\program files\trend micro
2013-03-03 10:32 . 2013-02-28 08:36 177672 ----a-w- c:\windows\system32\drivers\aswVmm.sys
2013-03-03 10:32 . 2013-02-28 08:36 65408 ----a-w- c:\windows\system32\drivers\aswRvrt.sys
2013-02-27 21:51 . 2013-02-27 21:51 -------- d-----w- c:\windows\SysWow64\NV
2013-02-27 21:51 . 2013-02-27 21:51 -------- d-----w- c:\windows\system32\NV
2013-02-27 21:51 . 2013-02-27 21:51 -------- d-----w- c:\programdata\NVIDIA
2013-02-27 21:50 . 2013-02-10 01:04 6393120 ----a-w- c:\windows\system32\nvcpl.dll
2013-02-27 21:50 . 2013-02-10 01:04 3472672 ----a-w- c:\windows\system32\nvsvc64.dll
2013-02-27 21:50 . 2013-02-10 01:04 877856 ----a-w- c:\windows\system32\nvvsvc.exe
2013-02-27 21:50 . 2013-02-10 01:04 76064 ----a-w- c:\windows\system32\nv3dappshextr.dll
2013-02-27 21:50 . 2013-02-10 01:04 63776 ----a-w- c:\windows\system32\nvshext.dll
2013-02-27 21:50 . 2013-02-10 01:04 2555680 ----a-w- c:\windows\system32\nvsvcr.dll
2013-02-27 21:50 . 2013-02-10 01:04 237856 ----a-w- c:\windows\system32\nvmctray.dll
2013-02-27 21:50 . 2013-02-10 01:04 1012000 ----a-w- c:\windows\system32\nv3dappshext.dll
2013-02-27 21:50 . 2013-02-09 13:25 3035306 ----a-w- c:\windows\system32\nvcoproc.bin
2013-02-27 21:49 . 2013-02-10 03:25 61216 ----a-w- c:\windows\system32\OpenCL.dll
2013-02-27 21:49 . 2013-02-10 03:25 53024 ----a-w- c:\windows\SysWow64\OpenCL.dll
2013-02-27 21:49 . 2013-02-27 21:49 -------- d-----w- c:\programdata\NVIDIA Corporation
2013-02-27 21:36 . 2013-02-27 21:36 -------- d-----w- C:\NVIDIA
2013-02-26 06:27 . 2013-02-26 06:27 95648 ----a-w- c:\windows\SysWow64\WindowsAccessBridge-32.dll
2013-02-26 06:27 . 2013-02-26 06:27 -------- d-----w- c:\program files (x86)\Java
2013-02-25 20:40 . 2012-08-24 18:13 154480 ----a-w- c:\windows\system32\drivers\ksecpkg.sys
2013-02-25 20:40 . 2012-08-24 18:09 458712 ----a-w- c:\windows\system32\drivers\cng.sys
2013-02-25 20:40 . 2012-08-24 18:05 340992 ----a-w- c:\windows\system32\schannel.dll
2013-02-25 20:40 . 2012-08-24 18:03 1448448 ----a-w- c:\windows\system32\lsasrv.dll
2013-02-25 20:40 . 2012-08-24 16:57 247808 ----a-w- c:\windows\SysWow64\schannel.dll
2013-02-25 20:40 . 2012-08-24 16:57 22016 ----a-w- c:\windows\SysWow64\secur32.dll
2013-02-25 20:40 . 2012-08-24 16:53 96768 ----a-w- c:\windows\SysWow64\sspicli.dll
2013-02-25 20:40 . 2012-05-04 11:00 366592 ----a-w- c:\windows\system32\qdvd.dll
2013-02-25 20:40 . 2012-05-04 09:59 514560 ----a-w- c:\windows\SysWow64\qdvd.dll
2013-02-13 06:43 . 2013-01-09 01:10 996352 ----a-w- c:\program files\Common Files\Microsoft Shared\VGX\VGX.dll
2013-02-13 06:43 . 2013-01-08 22:01 768000 ----a-w- c:\program files (x86)\Common Files\Microsoft Shared\VGX\VGX.dll
2013-02-13 06:26 . 2013-01-05 05:53 5553512 ----a-w- c:\windows\system32\ntoskrnl.exe
2013-02-13 06:26 . 2013-01-05 05:00 3967848 ----a-w- c:\windows\SysWow64\ntkrnlpa.exe
2013-02-13 06:26 . 2013-01-05 05:00 3913064 ----a-w- c:\windows\SysWow64\ntoskrnl.exe
2013-02-13 06:26 . 2013-01-04 03:26 3153408 ----a-w- c:\windows\system32\win32k.sys
2013-02-13 06:26 . 2013-01-04 05:46 215040 ----a-w- c:\windows\system32\winsrv.dll
2013-02-13 06:26 . 2013-01-04 04:51 5120 ----a-w- c:\windows\SysWow64\wow32.dll
2013-02-13 06:26 . 2013-01-04 02:47 25600 ----a-w- c:\windows\SysWow64\setup16.exe
2013-02-13 06:26 . 2013-01-04 02:47 7680 ----a-w- c:\windows\SysWow64\instnm.exe
2013-02-13 06:26 . 2013-01-04 02:47 14336 ----a-w- c:\windows\SysWow64\ntvdm64.dll
2013-02-13 06:26 . 2013-01-04 02:47 2048 ----a-w- c:\windows\SysWow64\user.exe
2013-02-13 06:26 . 2013-01-03 06:00 1913192 ----a-w- c:\windows\system32\drivers\tcpip.sys
2013-02-13 06:26 . 2013-01-03 06:00 288088 ----a-w- c:\windows\system32\drivers\FWPKCLNT.SYS
2013-02-10 11:30 . 2013-02-10 13:39 -------- d-----w- c:\program files (x86)\Ashampoo
2013-02-08 21:27 . 2013-02-08 21:27 -------- d-----w- c:\program files (x86)\Common Files\Skype
.
.
.
(((((((((((((((((((((((((((((((((((((((( Find3M výpis ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2013-02-28 08:36 . 2012-09-28 21:11 68992 ----a-w- c:\windows\system32\drivers\aswTdi.sys
2013-02-28 08:36 . 2012-09-28 21:11 377992 ----a-w- c:\windows\system32\drivers\aswSP.sys
2013-02-28 08:36 . 2012-09-28 21:11 71064 ----a-w- c:\windows\system32\drivers\aswRdr2.sys
2013-02-28 08:36 . 2012-09-28 21:11 1025880 ----a-w- c:\windows\system32\drivers\aswSnx.sys
2013-02-28 08:36 . 2012-09-28 21:11 80888 ----a-w- c:\windows\system32\drivers\aswMonFlt.sys
2013-02-28 08:36 . 2012-09-28 21:11 33472 ----a-w- c:\windows\system32\drivers\aswFsBlk.sys
2013-02-28 08:36 . 2012-09-28 21:11 41664 ----a-w- c:\windows\avastSS.scr
2013-02-28 08:35 . 2012-09-28 21:11 287840 ----a-w- c:\windows\system32\aswBoot.exe
2013-02-27 18:29 . 2012-08-09 09:04 691568 ----a-w- c:\windows\SysWow64\FlashPlayerApp.exe
2013-02-27 18:29 . 2011-08-20 01:03 71024 ----a-w- c:\windows\SysWow64\FlashPlayerCPLApp.cpl
2013-02-26 06:27 . 2012-07-30 21:23 861088 ----a-w- c:\windows\SysWow64\npDeployJava1.dll
2013-02-26 06:27 . 2012-07-30 21:23 782240 ----a-w- c:\windows\SysWow64\deployJava1.dll
2013-02-13 06:46 . 2012-07-31 11:21 70004024 ----a-w- c:\windows\system32\MRT.exe
2013-01-17 00:28 . 2010-11-21 03:27 273840 ------w- c:\windows\system32\MpSigStub.exe
2013-01-04 04:43 . 2013-02-13 06:26 44032 ----a-w- c:\windows\apppatch\acwow64.dll
2013-01-01 07:08 . 2013-01-01 07:08 74752 ----a-w- c:\windows\SysWow64\RegisterIEPKEYs.exe
2013-01-01 07:08 . 2013-01-01 07:08 161792 ----a-w- c:\windows\SysWow64\msls31.dll
2013-01-01 07:08 . 2013-01-01 07:08 91648 ----a-w- c:\windows\system32\SetIEInstalledDate.exe
2013-01-01 07:08 . 2013-01-01 07:08 89088 ----a-w- c:\windows\system32\RegisterIEPKEYs.exe
2013-01-01 07:08 . 2013-01-01 07:08 89088 ----a-w- c:\windows\system32\ie4uinit.exe
2013-01-01 07:08 . 2013-01-01 07:08 86528 ----a-w- c:\windows\SysWow64\iesysprep.dll
2013-01-01 07:08 . 2013-01-01 07:08 85504 ----a-w- c:\windows\system32\iesetup.dll
2013-01-01 07:08 . 2013-01-01 07:08 82432 ----a-w- c:\windows\system32\icardie.dll
2013-01-01 07:08 . 2013-01-01 07:08 76800 ----a-w- c:\windows\SysWow64\SetIEInstalledDate.exe
2013-01-01 07:08 . 2013-01-01 07:08 76800 ----a-w- c:\windows\system32\tdc.ocx
2013-01-01 07:08 . 2013-01-01 07:08 74752 ----a-w- c:\windows\SysWow64\iesetup.dll
2013-01-01 07:08 . 2013-01-01 07:08 65024 ----a-w- c:\windows\system32\pngfilt.dll
2013-01-01 07:08 . 2013-01-01 07:08 63488 ----a-w- c:\windows\SysWow64\tdc.ocx
2013-01-01 07:08 . 2013-01-01 07:08 55296 ----a-w- c:\windows\system32\msfeedsbs.dll
2013-01-01 07:08 . 2013-01-01 07:08 534528 ----a-w- c:\windows\system32\ieapfltr.dll
2013-01-01 07:08 . 2013-01-01 07:08 49664 ----a-w- c:\windows\system32\imgutil.dll
2013-01-01 07:08 . 2013-01-01 07:08 48640 ----a-w- c:\windows\SysWow64\mshtmler.dll
2013-01-01 07:08 . 2013-01-01 07:08 48640 ----a-w- c:\windows\system32\mshtmler.dll
2013-01-01 07:08 . 2013-01-01 07:08 452608 ----a-w- c:\windows\system32\dxtmsft.dll
2013-01-01 07:08 . 2013-01-01 07:08 448512 ----a-w- c:\windows\system32\html.iec
2013-01-01 07:08 . 2013-01-01 07:08 403248 ----a-w- c:\windows\system32\iedkcs32.dll
2013-01-01 07:08 . 2013-01-01 07:08 39936 ----a-w- c:\windows\system32\iernonce.dll
2013-01-01 07:08 . 2013-01-01 07:08 3695416 ----a-w- c:\windows\system32\ieapfltr.dat
2013-01-01 07:08 . 2013-01-01 07:08 367104 ----a-w- c:\windows\SysWow64\html.iec
2013-01-01 07:08 . 2013-01-01 07:08 35840 ----a-w- c:\windows\SysWow64\imgutil.dll
2013-01-01 07:08 . 2013-01-01 07:08 30720 ----a-w- c:\windows\system32\licmgr10.dll
2013-01-01 07:08 . 2013-01-01 07:08 282112 ----a-w- c:\windows\system32\dxtrans.dll
2013-01-01 07:08 . 2013-01-01 07:08 267776 ----a-w- c:\windows\system32\ieaksie.dll
2013-01-01 07:08 . 2013-01-01 07:08 249344 ----a-w- c:\windows\system32\webcheck.dll
2013-01-01 07:08 . 2013-01-01 07:08 23552 ----a-w- c:\windows\SysWow64\licmgr10.dll
2013-01-01 07:08 . 2013-01-01 07:08 222208 ----a-w- c:\windows\system32\msls31.dll
2013-01-01 07:08 . 2013-01-01 07:08 197120 ----a-w- c:\windows\system32\msrating.dll
2013-01-01 07:08 . 2013-01-01 07:08 165888 ----a-w- c:\windows\system32\iexpress.exe
2013-01-01 07:08 . 2013-01-01 07:08 163840 ----a-w- c:\windows\system32\ieakui.dll
2013-01-01 07:08 . 2013-01-01 07:08 160256 ----a-w- c:\windows\system32\wextract.exe
2013-01-01 07:08 . 2013-01-01 07:08 160256 ----a-w- c:\windows\system32\ieakeng.dll
2013-01-01 07:08 . 2013-01-01 07:08 152064 ----a-w- c:\windows\SysWow64\wextract.exe
2013-01-01 07:08 . 2013-01-01 07:08 150528 ----a-w- c:\windows\SysWow64\iexpress.exe
2013-01-01 07:08 . 2013-01-01 07:08 149504 ----a-w- c:\windows\system32\occache.dll
2013-01-01 07:08 . 2013-01-01 07:08 145920 ----a-w- c:\windows\system32\iepeers.dll
2013-01-01 07:08 . 2013-01-01 07:08 135168 ----a-w- c:\windows\system32\IEAdvpack.dll
2013-01-01 07:08 . 2013-01-01 07:08 12288 ----a-w- c:\windows\system32\mshta.exe
2013-01-01 07:08 . 2013-01-01 07:08 11776 ----a-w- c:\windows\SysWow64\mshta.exe
2013-01-01 07:08 . 2013-01-01 07:08 114176 ----a-w- c:\windows\system32\admparse.dll
2013-01-01 07:08 . 2013-01-01 07:08 111616 ----a-w- c:\windows\system32\iesysprep.dll
2013-01-01 07:08 . 2013-01-01 07:08 110592 ----a-w- c:\windows\SysWow64\IEAdvpack.dll
2013-01-01 07:08 . 2013-01-01 07:08 10752 ----a-w- c:\windows\system32\msfeedssync.exe
2013-01-01 07:08 . 2013-01-01 07:08 103936 ----a-w- c:\windows\system32\inseng.dll
2013-01-01 07:08 . 2013-01-01 07:08 101888 ----a-w- c:\windows\SysWow64\admparse.dll
2012-12-22 16:18 . 2012-09-16 13:57 103736 ----a-w- c:\windows\SysWow64\PnkBstrB.exe
2012-12-22 16:18 . 2012-09-16 13:57 66872 ----a-w- c:\windows\SysWow64\PnkBstrA.exe
2012-12-16 17:11 . 2012-12-21 06:01 46080 ----a-w- c:\windows\system32\atmlib.dll
2012-12-16 14:45 . 2012-12-21 06:01 367616 ----a-w- c:\windows\system32\atmfd.dll
2012-12-16 14:13 . 2012-12-21 06:01 295424 ----a-w- c:\windows\SysWow64\atmfd.dll
2012-12-16 14:13 . 2012-12-21 06:01 34304 ----a-w- c:\windows\SysWow64\atmlib.dll
.
.
(((((((((((((((((((((((((((((((((( Spouštěcí body v registru )))))))))))))))))))))))))))))))))))))))))))))
.
.
*Poznámka* prázdné záznamy a legitimní výchozí údaje nejsou zobrazeny.
REGEDIT4
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Sidebar"="c:\program files\Windows Sidebar\sidebar.exe" [2010-11-21 1475584]
"DAEMON Tools Lite"="c:\program files (x86)\DAEMON Tools Lite\DTLite.exe" [2012-11-06 3673728]
"WebcamMaxAutoRun"="c:\program files (x86)\WebcamMax\wcmmon.exe" [2011-07-17 1038848]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]
"BackupManagerTray"="c:\program files (x86)\NTI\Acer Backup Manager\BackupManagerTray.exe" [2011-04-24 297280]
"LManager"="c:\program files (x86)\Launch Manager\LManager.exe" [2011-07-01 1110096]
"avast"="c:\program files\AVAST Software\Avast\avastUI.exe" [2013-02-28 4767304]
"Adobe ARM"="c:\program files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2012-12-03 946352]
"SwitchBoard"="c:\program files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe" [2010-02-19 517096]
"AdobeCS6ServiceManager"="c:\program files (x86)\Common Files\Adobe\CS6ServiceManager\CS6ServiceManager.exe" [2012-03-09 1073312]
.
c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\
Acer VCM.lnk - c:\program files (x86)\Acer\Acer VCM\AcerVCM.exe [2011-8-20 723560]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorAdmin"= 5 (0x5)
"ConsentPromptBehaviorUser"= 3 (0x3)
"EnableUIADesktopToggle"= 0 (0x0)
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\windows]
"LoadAppInit_DLLs"=1 (0x1)
"AppInit_DLLs"=c:\windows\SysWOW64\nvinit.dll
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MCODS]
@=""
.
R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2010-03-18 138576]
R2 EgisTec Ticket Service;EgisTec Ticket Service;c:\program files\Common Files\EgisTec\Services\EgisTicketService.exe [x]
R2 SkypeUpdate;Skype Updater;c:\program files (x86)\Skype\Updater\Updater.exe [2013-01-08 161536]
R3 AthBTPort;Atheros Virtual Bluetooth Class;c:\windows\system32\DRIVERS\btath_flt.sys [2011-08-02 36000]
R3 BTATH_A2DP;Bluetooth A2DP Audio Driver;c:\windows\system32\drivers\btath_a2dp.sys [2011-08-02 330912]
R3 btath_avdt;Atheros Bluetooth AVDT Service;c:\windows\system32\drivers\btath_avdt.sys [2011-08-02 110240]
R3 BTATH_HCRP;Bluetooth HCRP Server driver;c:\windows\system32\DRIVERS\btath_hcrp.sys [2011-08-02 167584]
R3 BTATH_LWFLT;Bluetooth LWFLT Device;c:\windows\system32\DRIVERS\btath_lwflt.sys [2011-08-02 68256]
R3 BTATH_RCP;Bluetooth AVRCP Device;c:\windows\system32\DRIVERS\btath_rcp.sys [2011-08-02 280992]
R3 BtFilter;BtFilter;c:\windows\system32\DRIVERS\btfilter.sys [2011-08-02 511136]
R3 RdpVideoMiniport;Remote Desktop Video Miniport Driver;c:\windows\system32\drivers\rdpvideominiport.sys [2012-08-23 19456]
R3 SwitchBoard;SwitchBoard;c:\program files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [2010-02-19 517096]
R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys [2012-08-23 57856]
R3 TsUsbGD;Remote Desktop Generic USB Device;c:\windows\system32\drivers\TsUsbGD.sys [2012-08-23 30208]
R3 TurboBoost;Intel(R) Turbo Boost Technology Monitor 2.0;c:\program files\Intel\TurboBoost\TurboBoost.exe [2010-10-08 150016]
R3 WatAdminSvc;Služba Technologie aktivace Windows;c:\windows\system32\Wat\WatAdminSvc.exe [2012-07-31 1255736]
R4 wlcrasvc;Windows Live Mesh remote connections service;c:\program files\Windows Live\Mesh\wlcrasvc.exe [2010-09-23 57184]
S0 aswRvrt;aswRvrt; [x]
S0 aswVmm;aswVmm; [x]
S0 nvpciflt;nvpciflt;c:\windows\system32\DRIVERS\nvpciflt.sys [2013-02-10 30496]
S1 aswKbd;aswKbd; [x]
S1 aswSnx;aswSnx; [x]
S1 aswSP;aswSP; [x]
S1 nvkflt;nvkflt;c:\windows\system32\DRIVERS\nvkflt.sys [2013-02-10 284448]
S2 aswFsBlk;aswFsBlk; [x]
S2 aswMonFlt;aswMonFlt;c:\windows\system32\drivers\aswMonFlt.sys [2013-02-28 80888]
S2 AtherosSvc;AtherosSvc;c:\program files (x86)\Bluetooth Suite\adminservice.exe [2011-08-02 103584]
S2 CxAudMsg;Conexant Audio Message Service;c:\windows\system32\CxAudMsg64.exe [2010-12-16 198784]
S2 DsiWMIService;Dritek WMI Service;c:\program files (x86)\Launch Manager\dsiwmis.exe [2011-07-01 353872]
S2 ePowerSvc;Acer ePower Service;c:\program files\Acer\Acer ePower Management\ePowerSvc.exe [2011-05-10 872552]
S2 GREGService;GREGService;c:\program files (x86)\Acer\Registration\GREGsvc.exe [2011-05-26 29696]
S2 IAStorDataMgrSvc;Intel(R) Rapid Storage Technology;c:\program files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe [2011-01-13 13336]
S2 IconMan_R;IconMan_R;c:\program files (x86)\Realtek\Realtek PCIE Card Reader\RIconMan.exe [2011-01-13 1751656]
S2 Live Updater Service;Live Updater Service;c:\program files\Acer\Acer Updater\UpdaterService.exe [2012-04-05 255376]
S2 NTI IScheduleSvc;NTI IScheduleSvc;c:\program files (x86)\NTI\Acer Backup Manager\IScheduleSvc.exe [2011-04-24 256832]
S2 RS_Service;Raw Socket Service;c:\program files (x86)\Acer\Acer VCM\RS_Service.exe [2010-01-29 260640]
S2 TurboB;Turbo Boost UI Monitor driver;c:\windows\system32\DRIVERS\TurboB.sys [2010-10-08 19192]
S2 UNS;Intel(R) Management and Security Application User Notification Service;c:\program files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe [2010-12-20 2656280]
S2 WCMVCAM;WebcamMax, WDM Video Capture;c:\windows\system32\DRIVERS\wcmvcam64.sys [2012-04-15 1071032]
S3 BTATH_BUS;Atheros Bluetooth Bus;c:\windows\system32\DRIVERS\btath_bus.sys [2011-08-02 30368]
S3 dtsoftbus01;DAEMON Tools Virtual Bus Driver;c:\windows\system32\DRIVERS\dtsoftbus01.sys [2012-11-07 283200]
S3 FPSensor;EgisTec-Corp Fingerprint Reader Driver (FPSensor.sys);c:\windows\system32\Drivers\FPSensor.sys [2011-04-22 36656]
S3 L1C;NDIS Miniport Driver for Atheros AR813x/AR815x PCI-E Ethernet Controller;c:\windows\system32\DRIVERS\L1C62x64.sys [2010-10-20 76912]
S3 RSPCIESTOR;Realtek PCIE CardReader Driver;c:\windows\system32\DRIVERS\RtsPStor.sys [2011-01-12 333928]
.
.
Obsah adresáře 'Naplánované úlohy'
.
2013-03-10 c:\windows\Tasks\Adobe Flash Player Updater.job
- c:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2012-08-09 18:29]
.
.
--------- X64 Entries -----------
.
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\00avast]
@="{472083B0-C522-11CF-8763-00608CC02F24}"
[HKEY_CLASSES_ROOT\CLSID\{472083B0-C522-11CF-8763-00608CC02F24}]
2013-02-28 08:35 133840 ----a-w- c:\program files\AVAST Software\Avast\ashShA64.dll
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"IgfxTray"="c:\windows\system32\igfxtray.exe" [2011-03-31 167960]
"HotKeysCmds"="c:\windows\system32\hkcmd.exe" [2011-03-31 392216]
"Persistence"="c:\windows\system32\igfxpers.exe" [2011-03-31 415768]
"AtherosBtStack"="c:\program files (x86)\Bluetooth Suite\BtvStack.exe" [2011-08-02 961184]
"AthBtTray"="c:\program files (x86)\Bluetooth Suite\AthBtTray.exe" [2011-08-02 798880]
"IntelTBRunOnce"="wscript.exe" [2009-07-14 168960]
"Power Management"="c:\program files\Acer\Acer ePower Management\ePowerTray.exe" [2011-05-10 1831528]
"AutoKMS"="c:\windows\AutoKMS.exe" [2012-10-27 615936]
"AdobeAAMUpdater-1.0"="c:\program files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe" [2012-04-04 446392]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
"AppInit_DLLs"=c:\windows\System32\nvinitx.dll
.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Svchost - LocalService
FontCache
.
------- Doplňkový sken -------
.
uStart Page = hxxp://www.seznam.cz/
uLocal Page = c:\windows\system32\blank.htm
mDefault_Page_URL = hxxp://acer.msn.com
mStart Page = hxxp://acer.msn.com
mLocal Page = c:\windows\SysWOW64\blank.htm
IE: E&xportovat do aplikace Microsoft Excel - c:\progra~2\MICROS~4\Office14\EXCEL.EXE/3000
IE: Od&eslat do aplikace OneNote - c:\progra~2\MICROS~4\Office14\ONBttnIE.dll/105
IE: {{781B39EC-2E18-41FC-9B00-B84E4FFCA85F} - c:\program files (x86)\ICQ7M\ICQ.exe
TCP: DhcpNameServer = 192.168.2.1
.
- - - - NEPLATNÉ POLOŽKY ODSTRANĚNÉ Z REGISTRU - - - -
.
HKLM-Run-FortKnoxPersonalFirewall - c:\program files\NETGATE\FortKnox Personal Firewall\FortKnoxGUI.exe
.
.
.
--------------------- ZAMKNUTÉ KLÍČE V REGISTRU ---------------------
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil64_11_6_602_171_ActiveX.exe,-101"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\Elevation]
"Enabled"=dword:00000001
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\LocalServer32]
@="c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil64_11_6_602_171_ActiveX.exe"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
.
[HKEY_LOCAL_MACHINE\software\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="IFlashBroker5"
.
[HKEY_LOCAL_MACHINE\software\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"
.
[HKEY_LOCAL_MACHINE\software\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
.
[HKEY_LOCAL_MACHINE\software\McAfee]
"SymbolicLinkValue"=hex(6):5c,00,72,00,65,00,67,00,69,00,73,00,74,00,72,00,79,
00,5c,00,6d,00,61,00,63,00,68,00,69,00,6e,00,65,00,5c,00,53,00,6f,00,66,00,\
.
[HKEY_LOCAL_MACHINE\software\Wow6432Node\Microsoft\Schema Library\ActionsPane3]
@Denied: (A) (Everyone)
.
[HKEY_LOCAL_MACHINE\system\ControlSet001\Control\PCW\Security]
@Denied: (Full) (Everyone)
.
------------------------ Jiné spuštené procesy ------------------------
.
c:\program files\AVAST Software\Avast\AvastSvc.exe
c:\program files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
c:\program files (x86)\Launch Manager\LMutilps32.exe
c:\windows\SysWOW64\PnkBstrA.exe
c:\windows\SysWOW64\PnkBstrB.exe
c:\program files (x86)\Common Files\Protexis\License Service\PsiService_2.exe
c:\program files (x86)\Common Files\InterVideo\RegMgr\iviRegMgr.exe
c:\program files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
c:\program files (x86)\Adobe\Reader 10.0\Reader\Reader_sl.exe
.
**************************************************************************
.
Celkový čas: 2013-03-10 17:59:50 - počítač byl restartován
ComboFix-quarantined-files.txt 2013-03-10 16:59
.
Před spuštěním: Volných bajtů: 655 409 078 272
Po spuštění: Volných bajtů: 655 207 587 840
.
- - End Of File - - 31E5F10258C1559C6A423B1DA8DAB709

[Rudy]

Log je již OK. Udělejte sken AVPTool: http://www.viry.cz/forum/viewtopic.php?f=29&t=58179 a dejte log.

[pat_848]

Vyskytnul se takovej menší problémek
Žádnou hrozbu to nenašlo, tudíž jediný co mi šlo, bylo "sejvnutí" toho celkovýho logu - (437 954 eventů) a ten je příliš ultra dlouhej na to, aby zde mohl být vložen.
Ale vše bylo OK

[Rudy]

Virový problém to tedy není. V tom případě je dost pravděpodobné, že problém je u poskytovatele, případně v síť. prvcích v datové cestě.

[pat_848]

To je možné, nebo jak píšete, dosti pravděpodobné
Tak děkuju za ochotu mi pomoct a za strávenej čas nad logama. . a to by bylo teda asi vše.
Mějte se hezky.

[Rudy]

Vy se mějte též a nemáte zač!