Prosím o preventivku logu, NB se samovolně resetuje

Zpráva

#46 Příspěvek od **Márty84** » 07 lis 2013 17:05

Pokud nemate, zazalohujte si radeji dulezita data (fotky, dokumenty, atd.)

Nepouzivejte ComboFix bez predchozi domluvy! Je to poruseni pravidel fora a ztratite tim narok na pomoc!

Stahnete ComboFix http://download.bleepingcomputer.com/sUBs/ComboFix.exe a ulozte ho na plochu.
Vypnete antivir i dalsi pripadne zabezpeceni.
Kliknete na ComboFix pravym mysidlem a levym na Spustit jako spravce
Odsouhlaste licencni podminky a nechte program pracovat. Jestli vam nabidne instalaci Konzoly pro zotaveni, souhlaste.
Po dobu skenu nic nespoustejte, nikam neklikejte.
Po dokonceni skenovani (muze dojit i k restartu pc) by se mel vytvorit log, ktery bude umisteny zde C:\ComboFix.txt
Jeho obsah sem zkopirujte

Kdyby po restartu nenabehl windows, restartujte znovu, mackejte klavesu F8 a zvolte - Posledni znama funkcni konfigurace

Kdyz windows nabehne, ale pri spousteni ruznych programu bude hlasena chyba, staci restartovat pc a bude to v poradku

nom · #47 Příspěvek od **nom** » 08 lis 2013 22:24

ComboFix 13-11-07.01 - HITTL 08.11.2013 18:20:39.1.4 - x64
Microsoft Windows 7 Ultimate 6.1.7601.1.1250.420.1029.18.4091.2859 [GMT 1:00]
Spuštěný z: c:\users\HITTL\Desktop\ComboFix.exe
AV: ESET NOD32 Antivirus 7.0 *Enabled/Updated* {19259FAE-8396-A113-46DB-15B0E7DFA289}
SP: ESET NOD32 Antivirus 7.0 *Enabled/Updated* {A2447E4A-A5AC-AE9D-7C6B-2EC29C58E834}
SP: Windows Defender *Enabled/Outdated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.
.
((((((((((((((((((((((((((((((((((((((( Ostatní výmazy )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
C:\Install.exe
C:\prefs.js
.
.
((((((((((((((((((((((((( Soubory vytvořené od 2008-12-01 do 2009-01-01 )))))))))))))))))))))))))))))))
.
.
.
.
.
(((((((((((((((((((((((((((((((((((((((( Find3M výpis ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2013-09-06 17:16 . 2013-09-06 17:16 203776 ----a-w- c:\windows\SysWow64\webcheck.dll
2013-09-06 17:15 . 2013-09-06 17:15 249344 ----a-w- c:\windows\system32\webcheck.dll
2013-07-09 04:45 . 2013-09-08 12:01 44032 ----a-w- c:\windows\apppatch\acwow64.dll
2013-06-09 13:59 . 2013-06-09 13:59 46160 ----a-w- c:\windows\system32\mfc110cht.dll
2013-06-09 13:59 . 2013-06-09 13:59 46160 ----a-w- c:\windows\system32\mfc110chs.dll
2013-04-13 05:49 . 2013-09-08 07:06 135168 ----a-w- c:\windows\apppatch\AppPatch64\AcXtrnal.dll
2013-04-13 05:49 . 2013-09-08 07:06 350208 ----a-w- c:\windows\apppatch\AppPatch64\AcLayers.dll
2013-04-13 05:49 . 2013-09-08 07:06 308736 ----a-w- c:\windows\apppatch\AppPatch64\AcGenral.dll
2013-04-13 05:49 . 2013-09-08 07:06 111104 ----a-w- c:\windows\apppatch\AppPatch64\acspecfc.dll
2013-04-13 04:45 . 2013-09-08 07:06 474624 ----a-w- c:\windows\apppatch\AcSpecfc.dll
2013-04-13 04:45 . 2013-09-08 07:06 2176512 ----a-w- c:\windows\apppatch\AcGenral.dll
2012-10-16 07:39 . 2013-09-06 16:38 561664 ----a-w- c:\windows\apppatch\AcLayers.dll
2012-07-26 17:08 . 2012-07-26 17:08 46032 ----a-w- c:\windows\SysWow64\mfc110cht.dll
2012-07-26 17:08 . 2012-07-26 17:08 46032 ----a-w- c:\windows\SysWow64\mfc110chs.dll
2010-11-20 13:27 . 2013-09-07 10:23 340992 ----a-w- c:\windows\system32\srchadmin.dll
2010-11-20 13:24 . 2013-09-07 10:23 777728 ----a-w- c:\windows\system32\autochk.exe
2010-11-20 12:21 . 2013-09-07 10:23 301568 ----a-w- c:\windows\SysWow64\srchadmin.dll
2010-11-20 12:16 . 2013-09-07 10:23 668160 ----a-w- c:\windows\SysWow64\autochk.exe
2010-03-18 07:36 . 2010-03-18 07:36 36176 ----a-w- c:\windows\system32\mfc100cht.dll
2010-03-18 07:36 . 2010-03-18 07:36 36176 ----a-w- c:\windows\system32\mfc100chs.dll
2010-03-18 07:15 . 2010-03-18 07:15 36176 ----a-w- c:\windows\SysWow64\mfc100cht.dll
2010-03-18 07:15 . 2010-03-18 07:15 36176 ----a-w- c:\windows\SysWow64\mfc100chs.dll
2009-07-14 15:17 . 2009-07-14 15:17 2560 ----a-w- c:\windows\SysWow64\drivers\cs-CZ\qwavedrv.sys.mui
2009-07-14 15:17 . 2009-07-14 15:17 5632 ----a-w- c:\windows\SysWow64\drivers\cs-CZ\ndiscap.sys.mui
2009-07-14 15:17 . 2009-07-14 15:17 2560 ----a-w- c:\windows\SysWow64\drivers\cs-CZ\scfilter.sys.mui
2009-07-14 15:17 . 2009-07-14 15:17 50176 ----a-w- c:\windows\SysWow64\drivers\cs-CZ\tcpip.sys.mui
2009-07-14 15:17 . 2009-07-14 15:17 27136 ----a-w- c:\windows\SysWow64\drivers\cs-CZ\bfe.dll.mui
2009-07-14 15:17 . 2009-07-14 15:17 15360 ----a-w- c:\windows\SysWow64\drivers\cs-CZ\pacer.sys.mui
2009-07-14 01:40 . 2009-07-13 23:32 52736 ----a-w- c:\windows\apppatch\AppPatch64\apihex64.dll
2009-07-14 01:39 . 2009-07-13 23:31 51712 ----a-w- c:\windows\system32\sdchange.exe
2009-07-14 01:16 . 2009-07-13 23:29 13312 ----a-w- c:\windows\SysWow64\TSChannel.dll
2009-07-14 01:15 . 2009-07-13 21:03 409600 ----a-w- c:\windows\SysWow64\msexch40.dll
2009-07-14 01:14 . 2009-07-13 23:20 41984 ----a-w- c:\windows\apppatch\apihex86.dll
2009-07-14 01:14 . 2009-07-13 23:26 211968 ----a-w- c:\windows\apppatch\AcXtrnal.dll
2009-07-14 01:03 . 2009-07-13 23:26 2560 ----a-w- c:\windows\apppatch\AcRes.dll
1997-07-21 17:30 1045776 --sha-w- c:\windows\SysWOW64\Msjet35.dll
1997-06-23 01:00 123664 --sha-w- c:\windows\SysWOW64\Msjint35.dll
1997-06-23 10:06 24848 --sha-w- c:\windows\SysWOW64\Msjter35.dll
1997-06-23 10:06 252176 --sha-w- c:\windows\SysWOW64\Msrd2x35.dll
1997-06-23 10:06 287504 --sha-w- c:\windows\SysWOW64\Msxbse35.dll
.
.
(((((((((((((((((((((((((((((((((( Spouštěcí body v registru )))))))))))))))))))))))))))))))))))))))))))))
.
.
*Poznámka* prázdné záznamy a legitimní výchozí údaje nejsou zobrazeny.
REGEDIT4
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\1TortoiseNormal]
@="{C5994560-53D9-4125-87C9-F193FC689CB2}"
[HKEY_CLASSES_ROOT\CLSID\{C5994560-53D9-4125-87C9-F193FC689CB2}]
2011-06-13 08:20 64792 ----a-w- c:\program files (x86)\Common Files\TortoiseOverlays\TortoiseOverlays.dll
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\2TortoiseModified]
@="{C5994561-53D9-4125-87C9-F193FC689CB2}"
[HKEY_CLASSES_ROOT\CLSID\{C5994561-53D9-4125-87C9-F193FC689CB2}]
2011-06-13 08:20 64792 ----a-w- c:\program files (x86)\Common Files\TortoiseOverlays\TortoiseOverlays.dll
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\3TortoiseConflict]
@="{C5994562-53D9-4125-87C9-F193FC689CB2}"
[HKEY_CLASSES_ROOT\CLSID\{C5994562-53D9-4125-87C9-F193FC689CB2}]
2011-06-13 08:20 64792 ----a-w- c:\program files (x86)\Common Files\TortoiseOverlays\TortoiseOverlays.dll
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\4TortoiseLocked]
@="{C5994563-53D9-4125-87C9-F193FC689CB2}"
[HKEY_CLASSES_ROOT\CLSID\{C5994563-53D9-4125-87C9-F193FC689CB2}]
2011-06-13 08:20 64792 ----a-w- c:\program files (x86)\Common Files\TortoiseOverlays\TortoiseOverlays.dll
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\5TortoiseReadOnly]
@="{C5994564-53D9-4125-87C9-F193FC689CB2}"
[HKEY_CLASSES_ROOT\CLSID\{C5994564-53D9-4125-87C9-F193FC689CB2}]
2011-06-13 08:20 64792 ----a-w- c:\program files (x86)\Common Files\TortoiseOverlays\TortoiseOverlays.dll
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\6TortoiseDeleted]
@="{C5994565-53D9-4125-87C9-F193FC689CB2}"
[HKEY_CLASSES_ROOT\CLSID\{C5994565-53D9-4125-87C9-F193FC689CB2}]
2011-06-13 08:20 64792 ----a-w- c:\program files (x86)\Common Files\TortoiseOverlays\TortoiseOverlays.dll
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\7TortoiseAdded]
@="{C5994566-53D9-4125-87C9-F193FC689CB2}"
[HKEY_CLASSES_ROOT\CLSID\{C5994566-53D9-4125-87C9-F193FC689CB2}]
2011-06-13 08:20 64792 ----a-w- c:\program files (x86)\Common Files\TortoiseOverlays\TortoiseOverlays.dll
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\8TortoiseIgnored]
@="{C5994567-53D9-4125-87C9-F193FC689CB2}"
[HKEY_CLASSES_ROOT\CLSID\{C5994567-53D9-4125-87C9-F193FC689CB2}]
2011-06-13 08:20 64792 ----a-w- c:\program files (x86)\Common Files\TortoiseOverlays\TortoiseOverlays.dll
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\9TortoiseUnversioned]
@="{C5994568-53D9-4125-87C9-F193FC689CB2}"
[HKEY_CLASSES_ROOT\CLSID\{C5994568-53D9-4125-87C9-F193FC689CB2}]
2011-06-13 08:20 64792 ----a-w- c:\program files (x86)\Common Files\TortoiseOverlays\TortoiseOverlays.dll
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"DAEMON Tools Lite"="c:\program files (x86)\DAEMON Tools Lite\DTLite.exe" [2013-03-14 3672640]
"ISUSPM Startup"="c:\progra~2\COMMON~1\INSTAL~1\UPDATE~1\ISUSPM.exe" [2004-06-16 221184]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]
"StartCCC"="c:\program files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" [2010-10-28 98304]
"Adobe ARM"="c:\program files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2013-04-04 958576]
"SunJavaUpdateSched"="c:\program files (x86)\Common Files\Java\Java Update\jusched.exe" [2013-07-02 254336]
"ISUSScheduler"="c:\program files (x86)\Common Files\InstallShield\UpdateService\issch.exe" [2004-06-16 81920]
"CorelDRAW Graphics Suite 11b"="c:\program files (x86)\Corel\Corel Graphics 12\Languages\CZ\Programs\registration.exe" [2004-06-22 729088]
"LogMeIn Hamachi Ui"="c:\program files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe" [2013-10-01 2345296]
.
c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\
Akcelerátor spuštění AutoCADu.lnk - c:\program files (x86)\Common Files\Autodesk Shared\acstart16.exe [2004-2-25 10872]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorUser"= 3 (0x3)
"EnableUIADesktopToggle"= 0 (0x0)
"PromptOnSecureDesktop"= 0 (0x0)
.
R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [x]
R2 SkypeUpdate;Skype Updater;c:\program files (x86)\Skype\Updater\Updater.exe;c:\program files (x86)\Skype\Updater\Updater.exe [x]
R3 RdpVideoMiniport;Remote Desktop Video Miniport Driver;c:\windows\system32\drivers\rdpvideominiport.sys;c:\windows\SYSNATIVE\drivers\rdpvideominiport.sys [x]
R3 RSUSBSTOR;RtsUStor.Sys Realtek USB Card Reader;c:\windows\system32\Drivers\RtsUStor.sys;c:\windows\SYSNATIVE\Drivers\RtsUStor.sys [x]
R3 Synth3dVsc;Synth3dVsc;c:\windows\system32\drivers\synth3dvsc.sys;c:\windows\SYSNATIVE\drivers\synth3dvsc.sys [x]
R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys;c:\windows\SYSNATIVE\drivers\tsusbflt.sys [x]
R3 tsusbhub;tsusbhub;c:\windows\system32\drivers\tsusbhub.sys;c:\windows\SYSNATIVE\drivers\tsusbhub.sys [x]
R3 VGPU;VGPU;c:\windows\system32\drivers\rdvgkmd.sys;c:\windows\SYSNATIVE\drivers\rdvgkmd.sys [x]
R3 WatAdminSvc;Služba Technologie aktivace Windows;c:\windows\system32\Wat\WatAdminSvc.exe;c:\windows\SYSNATIVE\Wat\WatAdminSvc.exe [x]
S0 sptd;sptd;c:\windows\\SystemRoot\System32\Drivers\sptd.sys;c:\windows\\SystemRoot\System32\Drivers\sptd.sys [x]
S1 eamonm;eamonm;c:\windows\system32\DRIVERS\eamonm.sys;c:\windows\SYSNATIVE\DRIVERS\eamonm.sys [x]
S1 ehdrv;ehdrv;c:\windows\system32\DRIVERS\ehdrv.sys;c:\windows\SYSNATIVE\DRIVERS\ehdrv.sys [x]
S2 AMD External Events Utility;AMD External Events Utility;c:\windows\system32\atiesrxx.exe;c:\windows\SYSNATIVE\atiesrxx.exe [x]
S2 ArcGIS License Manager;ArcGIS License Manager;c:\program files (x86)\ArcGIS\License10.1\bin\lmgrd.exe;c:\program files (x86)\ArcGIS\License10.1\bin\lmgrd.exe [x]
S2 ekrn;ESET Service;c:\program files\ESET\ESET NOD32 Antivirus\x86\ekrn.exe;c:\program files\ESET\ESET NOD32 Antivirus\x86\ekrn.exe [x]
S2 epfwwfpr;epfwwfpr;c:\windows\system32\DRIVERS\epfwwfpr.sys;c:\windows\SYSNATIVE\DRIVERS\epfwwfpr.sys [x]
S2 Hamachi2Svc;LogMeIn Hamachi Tunneling Engine;c:\program files (x86)\LogMeIn Hamachi\hamachi-2.exe;c:\program files (x86)\LogMeIn Hamachi\hamachi-2.exe [x]
S2 Live Updater Service;Live Updater Service;c:\program files\Acer\Acer Updater\UpdaterService.exe;c:\program files\Acer\Acer Updater\UpdaterService.exe [x]
S2 PanService;PandoraService;c:\program files (x86)\PANDORA.TV\PanService\KMPService.exe;c:\program files (x86)\PANDORA.TV\PanService\KMPService.exe [x]
S2 TeamViewer8;TeamViewer 8;c:\program files (x86)\TeamViewer\Version8\TeamViewer_Service.exe;c:\program files (x86)\TeamViewer\Version8\TeamViewer_Service.exe [x]
S3 AthDfu;Atheros Valkyrie USB BootROM;c:\windows\system32\Drivers\AthDfu.sys;c:\windows\SYSNATIVE\Drivers\AthDfu.sys [x]
S3 AtiHDAudioService;ATI Function Driver for HD Audio Service;c:\windows\system32\drivers\AtihdW76.sys;c:\windows\SYSNATIVE\drivers\AtihdW76.sys [x]
S3 k57nd60a;Broadcom NetLink (TM) Gigabit Ethernet - NDIS 6.0;c:\windows\system32\DRIVERS\k57nd60a.sys;c:\windows\SYSNATIVE\DRIVERS\k57nd60a.sys [x]
S3 usbfilter;AMD USB Filter Driver;c:\windows\system32\DRIVERS\usbfilter.sys;c:\windows\SYSNATIVE\DRIVERS\usbfilter.sys [x]
.
.
--- Ostatní služby/ovladače v paměti ---
.
*NewlyCreated* - WS2IFSL
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\svchost]
iissvcs REG_MULTI_SZ w3svc was
apphost REG_MULTI_SZ apphostsvc
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\active setup\installed components\{8A69D345-D564-463c-AFF1-A69D9E530F96}]
2013-10-18 05:45 1185744 ----a-w- c:\program files (x86)\Google\Chrome\Application\30.0.1599.101\Installer\chrmstp.exe
.
Obsah adresáře 'Naplánované úlohy'
.
2009-01-01 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
- c:\program files (x86)\Google\Update\GoogleUpdate.exe [2013-09-06 14:07]
.
2013-11-08 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
- c:\program files (x86)\Google\Update\GoogleUpdate.exe [2013-09-06 14:07]
.
.
--------- X64 Entries -----------
.
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\1TortoiseNormal]
@="{C5994560-53D9-4125-87C9-F193FC689CB2}"
[HKEY_CLASSES_ROOT\CLSID\{C5994560-53D9-4125-87C9-F193FC689CB2}]
2011-06-13 08:20 75544 ----a-w- c:\program files\Common Files\TortoiseOverlays\TortoiseOverlays.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\2TortoiseModified]
@="{C5994561-53D9-4125-87C9-F193FC689CB2}"
[HKEY_CLASSES_ROOT\CLSID\{C5994561-53D9-4125-87C9-F193FC689CB2}]
2011-06-13 08:20 75544 ----a-w- c:\program files\Common Files\TortoiseOverlays\TortoiseOverlays.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\3TortoiseConflict]
@="{C5994562-53D9-4125-87C9-F193FC689CB2}"
[HKEY_CLASSES_ROOT\CLSID\{C5994562-53D9-4125-87C9-F193FC689CB2}]
2011-06-13 08:20 75544 ----a-w- c:\program files\Common Files\TortoiseOverlays\TortoiseOverlays.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\4TortoiseLocked]
@="{C5994563-53D9-4125-87C9-F193FC689CB2}"
[HKEY_CLASSES_ROOT\CLSID\{C5994563-53D9-4125-87C9-F193FC689CB2}]
2011-06-13 08:20 75544 ----a-w- c:\program files\Common Files\TortoiseOverlays\TortoiseOverlays.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\5TortoiseReadOnly]
@="{C5994564-53D9-4125-87C9-F193FC689CB2}"
[HKEY_CLASSES_ROOT\CLSID\{C5994564-53D9-4125-87C9-F193FC689CB2}]
2011-06-13 08:20 75544 ----a-w- c:\program files\Common Files\TortoiseOverlays\TortoiseOverlays.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\6TortoiseDeleted]
@="{C5994565-53D9-4125-87C9-F193FC689CB2}"
[HKEY_CLASSES_ROOT\CLSID\{C5994565-53D9-4125-87C9-F193FC689CB2}]
2011-06-13 08:20 75544 ----a-w- c:\program files\Common Files\TortoiseOverlays\TortoiseOverlays.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\7TortoiseAdded]
@="{C5994566-53D9-4125-87C9-F193FC689CB2}"
[HKEY_CLASSES_ROOT\CLSID\{C5994566-53D9-4125-87C9-F193FC689CB2}]
2011-06-13 08:20 75544 ----a-w- c:\program files\Common Files\TortoiseOverlays\TortoiseOverlays.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\8TortoiseIgnored]
@="{C5994567-53D9-4125-87C9-F193FC689CB2}"
[HKEY_CLASSES_ROOT\CLSID\{C5994567-53D9-4125-87C9-F193FC689CB2}]
2011-06-13 08:20 75544 ----a-w- c:\program files\Common Files\TortoiseOverlays\TortoiseOverlays.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\9TortoiseUnversioned]
@="{C5994568-53D9-4125-87C9-F193FC689CB2}"
[HKEY_CLASSES_ROOT\CLSID\{C5994568-53D9-4125-87C9-F193FC689CB2}]
2011-06-13 08:20 75544 ----a-w- c:\program files\Common Files\TortoiseOverlays\TortoiseOverlays.dll
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"PLFSetI"="c:\windows\PLFSetI.exe" [2013-09-06 206208]
"RtHDVCpl"="c:\program files\Realtek\Audio\HDA\RAVCpl64.exe" [2013-09-06 10920552]
"egui"="c:\program files\ESET\ESET NOD32 Antivirus\egui.exe" [2013-09-12 5618456]
.
------- Doplňkový sken -------
.
uLocal Page = c:\windows\system32\blank.htm
uStart Page = hxxp://www.google.com
mLocal Page = c:\windows\SysWOW64\blank.htm
TCP: DhcpNameServer = 10.0.0.1
FF - ProfilePath - c:\users\HITTL\AppData\Roaming\Mozilla\Firefox\Profiles\jz76zuw4.default\
FF - ExtSQL: 2013-10-22 20:43; jid1-vW9nopuIAJiRHw@jetpack; c:\users\HITTL\AppData\Roaming\Mozilla\Firefox\Profiles\jz76zuw4.default\extensions\jid1-vW9nopuIAJiRHw@jetpack.xpi
.
- - - - NEPLATNÉ POLOŽKY ODSTRANĚNÉ Z REGISTRU - - - -
.
BHO-{5054562D-5247-006A-76A7-7A786E7484D7} - (no file)
Toolbar-{5054562D-5247-006A-76A7-7A786E7484D7} - (no file)
Wow6432Node-HKU-Default-RunOnce-SPReview - c:\windows\System32\SPReview\SPReview.exe
BHO-{5054562D-5247-006A-76A7-7A786E7484D7} - (no file)
Toolbar-{5054562D-5247-006A-76A7-7A786E7484D7} - (no file)
WebBrowser-{5054562D-5247-006A-76A7-7A786E7484D7} - (no file)
.
.
.
--------------------- ZAMKNUTÉ KLÍČE V REGISTRU ---------------------
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\PCW\Security]
@Denied: (Full) (Everyone)
.
------------------------ Jiné spuštené procesy ------------------------
.
c:\program files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
c:\program files (x86)\ArcGIS\License10.1\bin\ARCGIS.exe
c:\program files (x86)\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
c:\program files (x86)\PANDORA.TV\PanService\KMPProcess.exe
c:\windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe
c:\program files (x86)\Google\Update\1.3.21.165\GoogleCrashHandler.exe
c:\program files (x86)\TeamViewer\Version8\TeamViewer.exe
c:\program files (x86)\TeamViewer\Version8\tv_w32.exe
c:\program files (x86)\Common Files\Java\Java Update\jucheck.exe
c:\program files (x86)\Java\jre7\bin\javaw.exe
.
**************************************************************************
.
Celkový čas: 2009-01-01 01:06:00 - počítač byl restartován
ComboFix-quarantined-files.txt 2009-01-01 00:06
.
Před spuštěním: Volných bajtů: 67 021 250 560
Po spuštění: Volných bajtů: 66 196 803 584
.
- - End Of File - - 0A10099C459173797A5696FA45076D66
A36C5E4F47E84449FF07ED3517B43A31

#48 Příspěvek od **Márty84** » 08 lis 2013 22:35

Otevrete si poznamkovy blok a zkopirujte do nej tento skript

Kód: Vybrat vše

KillAll::

Registry::
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"DAEMON Tools Lite"=-
"ISUSPM Startup"=-
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]
"Adobe ARM"=-
"SunJavaUpdateSched"=-

RegLock::
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\PCW\Security]

Driver::
PanService
SkypeUpdate

Reboot::

Vlevo nahore kliknete na napis Soubor
Kliknete na napis Ulozit jako...
Napiste spravne ten cerveny nazev CFScript a ulozte na plochu.
Vypnete antivir i dalsi pripadne zabezpeceni.
Pretahntete mysi tento vytvoreny textovy dokument nad ikonu ComboFix a pustte.
ComboFix by se mel spustit a vykonat prikazy.
Az skonci (muze dojit k restartu pc), mel by se objevit novy log, ten mi sem zase zkopirujte.

Kdyby po restartu nenabehl windows, restartujte znovu, mackejte klavesu F8 a zvolte - Posledni znama funkcni konfigurace

Kdyz windows nabehne, ale pri spousteni ruznych programu bude hlasena chyba, staci restartovat pc a bude to v poradku

nom · #49 Příspěvek od **nom** » 09 lis 2013 09:08

Zůstalo to viset na Dokončené 4_fazy a nic to neudělalo od 22:11 do teď.

#50 Příspěvek od **Márty84** » 09 lis 2013 09:22

Vypnete ho a zkuste to jeste jednou, ale tentokrat v nouzovem rezimu.

nom · #51 Příspěvek od **nom** » 09 lis 2013 16:39

ComboFix 13-11-07.01 - HITTL 09.11.2013 19:28:51.4.4 - x64 MINIMAL
Microsoft Windows 7 Ultimate 6.1.7601.1.1250.420.1029.18.4091.3172 [GMT 1:00]
Spuštěný z: c:\users\HITTL\Desktop\ComboFix.exe
Použité ovládací přepínače :: c:\users\HITTL\Desktop\CFScript.txt
AV: ESET NOD32 Antivirus 7.0 *Enabled/Updated* {19259FAE-8396-A113-46DB-15B0E7DFA289}
SP: ESET NOD32 Antivirus 7.0 *Enabled/Updated* {A2447E4A-A5AC-AE9D-7C6B-2EC29C58E834}
SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
* Vytvořen nový Bod Obnovení
.
.
((((((((((((((((((((((((((((((((((((((( Ostatní výmazy )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
c:\users\HITTL\AppData\Local\Temp\MSI7190\eeh.dll
.
.
((((((((((((((((((((((((((((((((((((((( Ovladače/Služby )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
-------\Service_PanService
-------\Service_SkypeUpdate
.
.
((((((((((((((((((((((((( Soubory vytvořené od 2013-10-09 do 2013-11-09 )))))))))))))))))))))))))))))))
.
.
2013-11-09 18:41 . 2009-03-18 16:35 33856 ---ha-w- c:\windows\system32\hamachi.sys
2013-11-09 18:41 . 2013-11-09 18:41 -------- d-----w- c:\program files (x86)\LogMeIn Hamachi
2013-11-09 18:37 . 2013-11-09 18:37 -------- d-----w- c:\users\Public\AppData\Local\temp
2013-11-09 18:37 . 2013-11-09 18:37 -------- d-----w- c:\users\Default\AppData\Local\temp
2013-11-09 14:32 . 2013-11-09 14:33 -------- d-----w- c:\users\HITTL\AppData\Roaming\Tunngle
2013-11-09 14:32 . 2013-11-09 14:32 -------- d-----w- c:\programdata\Tunngle
2013-11-09 14:32 . 2009-09-16 06:02 31232 ----a-w- c:\windows\system32\drivers\tap0901t.sys
2013-11-09 14:32 . 2013-11-09 14:33 -------- d-----w- c:\program files (x86)\Tunngle
2013-11-05 09:44 . 2013-11-05 09:44 -------- d-----w- c:\programdata\ESRI
2013-11-04 23:13 . 2013-11-04 23:13 -------- d-----w- c:\program files\CCleaner
2013-11-04 17:20 . 2013-11-04 17:20 -------- d-----w- c:\program files\Defraggler
2013-11-03 16:25 . 2013-11-03 16:25 -------- d-----w- c:\users\HITTL\AppData\Roaming\Malwarebytes
2013-11-03 16:24 . 2013-11-03 16:24 -------- d-----w- c:\programdata\Malwarebytes
2013-11-03 11:46 . 2008-12-31 23:07 512 ----a-w- C:\PhysicalMBR.bin
2013-11-03 11:39 . 2013-11-03 11:39 -------- d-----w- c:\programdata\{CED89F1A-945F-46EC-B23C-5EAF6D2DB12A}
2013-11-03 10:46 . 2013-11-03 10:46 -------- d-----w- c:\program files\ESET
2013-11-03 10:24 . 2013-11-03 10:26 -------- d-----w- c:\program files\trend micro
2013-11-03 10:24 . 2013-11-03 10:24 -------- d-----w- C:\rsit
2013-11-03 09:39 . 2013-11-03 09:39 -------- d-----w- c:\program files (x86)\MSXML 4.0
2013-11-03 09:23 . 2013-11-03 09:23 -------- d-----w- c:\programdata\{D76294E6-03B8-4971-AF2E-3F846161A690}
2013-11-03 09:23 . 2013-11-03 09:23 -------- d-----w- c:\programdata\{5A85B23A-4B58-47D1-9B9C-DFBD7866099F}
2013-11-03 09:20 . 2013-11-03 09:20 -------- d-----w- c:\users\HITTL\AppData\Local\LogMeIn
2013-11-02 22:29 . 2013-11-09 18:41 -------- d-----w- c:\users\HITTL\AppData\Local\LogMeIn Hamachi
2013-11-02 22:07 . 2013-11-02 22:07 -------- d-----w- c:\program files (x86)\directx
2013-11-02 22:05 . 2002-12-05 13:12 692224 ----a-w- c:\program files (x86)\Common Files\InstallShield\Professional\RunTime\0701\Intel32\iKernel.dll
2013-11-02 22:05 . 2002-12-05 13:10 155648 ----a-w- c:\program files (x86)\Common Files\InstallShield\Professional\RunTime\0701\Intel32\iuser.dll
2013-11-02 22:05 . 2002-12-02 14:22 5632 ----a-w- c:\program files (x86)\Common Files\InstallShield\Professional\RunTime\0701\Intel32\DotNetInstaller.exe
2013-11-02 22:05 . 2002-12-02 12:33 57344 ----a-w- c:\program files (x86)\Common Files\InstallShield\Professional\RunTime\0701\Intel32\ctor.dll
2013-11-02 22:05 . 2002-12-02 12:33 237568 ----a-w- c:\program files (x86)\Common Files\InstallShield\Professional\RunTime\0701\Intel32\iscript.dll
2013-11-02 22:05 . 2013-11-02 22:05 282756 ----a-w- c:\program files (x86)\Common Files\InstallShield\Professional\RunTime\0701\Intel32\setup.dll
2013-11-02 22:05 . 2013-11-02 22:05 163972 ----a-w- c:\program files (x86)\Common Files\InstallShield\Professional\RunTime\0701\Intel32\iGdi.dll
2013-10-31 17:17 . 2013-11-01 14:27 -------- d-----w- c:\users\HITTL\AppData\Roaming\Mumble
2013-10-31 17:16 . 2013-10-31 17:16 -------- d-----w- c:\program files (x86)\Mumble
2013-10-30 11:21 . 2013-10-30 11:21 -------- d-----w- c:\program files (x86)\Win7 MAC Address Changer
2013-10-29 10:49 . 2013-10-29 10:49 -------- dc-h--w- c:\programdata\{3F35882A-B5EA-473D-BCE8-67F488C1E747}
2013-10-29 10:47 . 2013-10-29 10:47 -------- d-----w- c:\users\HITTL\AppData\Roaming\Merver
2013-10-27 04:53 . 2013-10-27 04:53 -------- d-----w- c:\users\HITTL\AppData\Roaming\SqueakyChocolate, LLC
2013-10-25 10:00 . 2013-10-27 13:00 -------- d-----w- C:\Volby
2013-10-23 15:40 . 2013-10-23 15:40 -------- d-----w- c:\users\HITTL\AppData\Roaming\SmileysWeLove
2013-10-22 18:44 . 2013-11-04 08:17 -------- d-----w- c:\program files (x86)\SqueakyChocolate
2013-10-22 18:39 . 2013-10-22 18:39 -------- d-----w- c:\program files (x86)\Cheat Engine 6.3
2013-10-18 06:09 . 2013-10-18 06:09 -------- d-----w- c:\users\HITTL\AppData\Roaming\IrfanView
2013-10-18 06:09 . 2013-10-18 06:09 -------- d-----w- c:\program files (x86)\IrfanView
2013-10-17 18:10 . 2013-10-17 18:10 -------- d-----w- c:\program files\WinHTTrack
2013-10-15 16:44 . 2013-10-15 18:09 -------- d-----w- c:\program files\Recuva
2013-10-13 17:06 . 2013-10-13 17:06 -------- d-----w- c:\program files (x86)\TeamViewer
2013-10-13 15:41 . 2013-10-13 15:41 -------- d-----w- c:\program files (x86)\ESRI
2013-10-12 10:08 . 2013-10-12 10:08 -------- d-----w- c:\users\DefaultAppPool
2013-10-11 15:17 . 2013-10-11 15:17 -------- d-----w- c:\programdata\EAGLE Software
2013-10-11 15:17 . 2013-10-11 15:23 -------- d-----w- c:\program files (x86)\Cyklotrasy
.
.
.
(((((((((((((((((((((((((((((((((((((((( Find3M výpis ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2013-09-30 17:03 . 2013-09-30 17:03 564824 ----a-w- c:\windows\system32\drivers\sptd.sys
2013-09-19 07:06 . 2013-09-19 07:06 96168 ----a-w- c:\windows\SysWow64\WindowsAccessBridge-32.dll
2013-09-19 07:06 . 2013-09-19 07:07 790440 ----a-w- c:\windows\SysWow64\deployJava1.dll
2013-09-19 07:06 . 2013-09-19 07:07 868264 ----a-w- c:\windows\SysWow64\npDeployJava1.dll
2013-09-17 14:17 . 2013-09-17 14:17 239320 ----a-w- c:\windows\system32\drivers\eamonm.sys
2013-09-17 14:17 . 2013-09-17 14:17 239296 ----a-w- c:\windows\system32\drivers\edevmon.sys
2013-09-17 14:17 . 2013-09-17 14:17 168256 ----a-w- c:\windows\system32\drivers\ehdrv.sys
2013-09-17 14:17 . 2013-09-17 14:17 157432 ----a-w- c:\windows\system32\drivers\epfwwfpr.sys
2013-09-12 07:13 . 2013-09-12 07:52 4558848 ----a-w- c:\windows\system\DevComponents.DotNetBar2.dll
2013-09-12 06:52 . 2013-09-12 06:26 1060832 ----a-w- c:\programdata\Microsoft\WDExpress\11.0\1033\ResourceCache.dll
2013-09-12 06:52 . 2013-09-12 06:52 1085024 ----a-w- c:\programdata\Microsoft\WDExpress\11.0\1029\ResourceCache.dll
2013-09-08 05:57 . 2009-07-14 02:36 152576 ----a-w- c:\windows\SysWow64\msclmd.dll
2013-09-08 05:57 . 2009-07-14 02:36 175616 ----a-w- c:\windows\system32\msclmd.dll
2013-09-06 17:16 . 2013-09-06 17:16 74752 ----a-w- c:\windows\SysWow64\RegisterIEPKEYs.exe
2013-09-06 17:16 . 2013-09-06 17:16 161792 ----a-w- c:\windows\SysWow64\msls31.dll
2013-09-06 17:16 . 2013-09-06 17:16 1129472 ----a-w- c:\windows\SysWow64\wininet.dll
2013-09-06 17:16 . 2013-09-06 17:16 1800704 ----a-w- c:\windows\SysWow64\jscript9.dll
2013-09-06 17:16 . 2013-09-06 17:16 86528 ----a-w- c:\windows\SysWow64\iesysprep.dll
2013-09-06 17:16 . 2013-09-06 17:16 76800 ----a-w- c:\windows\SysWow64\SetIEInstalledDate.exe
2013-09-06 17:16 . 2013-09-06 17:16 48640 ----a-w- c:\windows\SysWow64\mshtmler.dll
2013-09-06 17:16 . 2013-09-06 17:16 110592 ----a-w- c:\windows\SysWow64\IEAdvpack.dll
2013-09-06 17:16 . 2013-09-06 17:16 63488 ----a-w- c:\windows\SysWow64\tdc.ocx
2013-09-06 17:16 . 2013-09-06 17:16 367104 ----a-w- c:\windows\SysWow64\html.iec
2013-09-06 17:16 . 2013-09-06 17:16 74752 ----a-w- c:\windows\SysWow64\iesetup.dll
2013-09-06 17:16 . 2013-09-06 17:16 1427968 ----a-w- c:\windows\SysWow64\inetcpl.cpl
2013-09-06 17:16 . 2013-09-06 17:16 420864 ----a-w- c:\windows\SysWow64\vbscript.dll
2013-09-06 17:16 . 2013-09-06 17:16 23552 ----a-w- c:\windows\SysWow64\licmgr10.dll
2013-09-06 17:16 . 2013-09-06 17:16 152064 ----a-w- c:\windows\SysWow64\wextract.exe
2013-09-06 17:16 . 2013-09-06 17:16 150528 ----a-w- c:\windows\SysWow64\iexpress.exe
2013-09-06 17:16 . 2013-09-06 17:16 35840 ----a-w- c:\windows\SysWow64\imgutil.dll
2013-09-06 17:16 . 2013-09-06 17:16 2382848 ----a-w- c:\windows\SysWow64\mshtml.tlb
2013-09-06 17:16 . 2013-09-06 17:16 142848 ----a-w- c:\windows\SysWow64\ieUnatt.exe
2013-09-06 17:16 . 2013-09-06 17:16 11776 ----a-w- c:\windows\SysWow64\mshta.exe
2013-09-06 17:16 . 2013-09-06 17:16 101888 ----a-w- c:\windows\SysWow64\admparse.dll
2013-09-06 17:16 . 2013-09-06 17:16 89088 ----a-w- c:\windows\system32\RegisterIEPKEYs.exe
2013-09-06 17:16 . 2013-09-06 17:16 86016 ----a-w- c:\windows\system32\jsproxy.dll
2013-09-06 17:16 . 2013-09-06 17:16 222208 ----a-w- c:\windows\system32\msls31.dll
2013-09-06 17:16 . 2013-09-06 17:16 2147840 ----a-w- c:\windows\system32\iertutil.dll
2013-09-06 17:16 . 2013-09-06 17:16 197120 ----a-w- c:\windows\system32\msrating.dll
2013-09-06 17:16 . 2013-09-06 17:16 1392128 ----a-w- c:\windows\system32\wininet.dll
2013-09-06 17:16 . 2013-09-06 17:16 1346560 ----a-w- c:\windows\system32\urlmon.dll
2013-09-06 17:16 . 2013-09-06 17:16 17830400 ----a-w- c:\windows\system32\mshtml.dll
2013-09-06 17:16 . 2013-09-06 17:16 816640 ----a-w- c:\windows\system32\jscript.dll
2013-09-06 17:16 . 2013-09-06 17:16 65024 ----a-w- c:\windows\system32\pngfilt.dll
2013-09-06 17:16 . 2013-09-06 17:16 55296 ----a-w- c:\windows\system32\msfeedsbs.dll
2013-09-06 17:16 . 2013-09-06 17:16 49664 ----a-w- c:\windows\system32\imgutil.dll
2013-09-06 17:16 . 2013-09-06 17:16 267776 ----a-w- c:\windows\system32\ieaksie.dll
2013-09-06 17:16 . 2013-09-06 17:16 2382848 ----a-w- c:\windows\system32\mshtml.tlb
2013-09-06 17:16 . 2013-09-06 17:16 2312704 ----a-w- c:\windows\system32\jscript9.dll
2013-09-06 17:16 . 2013-09-06 17:16 173056 ----a-w- c:\windows\system32\ieUnatt.exe
2013-09-06 17:16 . 2013-09-06 17:16 163840 ----a-w- c:\windows\system32\ieakui.dll
2013-09-06 17:16 . 2013-09-06 17:16 149504 ----a-w- c:\windows\system32\occache.dll
2013-09-06 17:16 . 2013-09-06 17:16 145920 ----a-w- c:\windows\system32\iepeers.dll
2013-09-06 17:16 . 2013-09-06 17:16 12288 ----a-w- c:\windows\system32\mshta.exe
2013-09-06 17:16 . 2013-09-06 17:16 114176 ----a-w- c:\windows\system32\admparse.dll
2013-09-06 17:16 . 2013-09-06 17:16 10752 ----a-w- c:\windows\system32\msfeedssync.exe
2013-09-06 17:16 . 2013-09-06 17:16 91648 ----a-w- c:\windows\system32\SetIEInstalledDate.exe
2013-09-06 17:16 . 2013-09-06 17:16 48640 ----a-w- c:\windows\system32\mshtmler.dll
2013-09-06 17:16 . 2013-09-06 17:16 248320 ----a-w- c:\windows\system32\ieui.dll
2013-09-06 17:16 . 2013-09-06 17:16 160256 ----a-w- c:\windows\system32\ieakeng.dll
2013-09-06 17:16 . 2013-09-06 17:16 135168 ----a-w- c:\windows\system32\IEAdvpack.dll
2013-09-06 17:16 . 2013-09-06 17:16 111616 ----a-w- c:\windows\system32\iesysprep.dll
2013-09-06 17:16 . 2013-09-06 17:16 10926080 ----a-w- c:\windows\system32\ieframe.dll
2013-09-06 17:16 . 2013-09-06 17:16 76800 ----a-w- c:\windows\system32\tdc.ocx
2013-09-06 17:16 . 2013-09-06 17:16 452608 ----a-w- c:\windows\system32\dxtmsft.dll
2013-09-06 17:16 . 2013-09-06 17:16 448512 ----a-w- c:\windows\system32\html.iec
2013-09-06 17:16 . 2013-09-06 17:16 3695416 ----a-w- c:\windows\system32\ieapfltr.dat
2013-09-06 17:16 . 2013-09-06 17:16 282112 ----a-w- c:\windows\system32\dxtrans.dll
2013-09-06 17:16 . 2013-09-06 17:16 534528 ----a-w- c:\windows\system32\ieapfltr.dll
2013-09-06 17:16 . 2013-09-06 17:16 89088 ----a-w- c:\windows\system32\ie4uinit.exe
2013-09-06 17:16 . 2013-09-06 17:16 85504 ----a-w- c:\windows\system32\iesetup.dll
2013-09-06 17:16 . 2013-09-06 17:16 82432 ----a-w- c:\windows\system32\icardie.dll
2013-09-06 17:16 . 2013-09-06 17:16 403248 ----a-w- c:\windows\system32\iedkcs32.dll
2013-09-06 17:16 . 2013-09-06 17:16 39936 ----a-w- c:\windows\system32\iernonce.dll
2013-09-06 17:16 . 2013-09-06 17:16 237056 ----a-w- c:\windows\system32\url.dll
2013-09-06 17:16 . 2013-09-06 17:15 1494528 ----a-w- c:\windows\system32\inetcpl.cpl
2013-09-06 17:15 . 2013-09-06 17:15 96768 ----a-w- c:\windows\system32\mshtmled.dll
2013-09-06 17:15 . 2013-09-06 17:15 729088 ----a-w- c:\windows\system32\msfeeds.dll
2013-09-06 17:15 . 2013-09-06 17:15 599040 ----a-w- c:\windows\system32\vbscript.dll
2013-09-06 17:15 . 2013-09-06 17:15 30720 ----a-w- c:\windows\system32\licmgr10.dll
2013-09-06 17:15 . 2013-09-06 17:15 249344 ----a-w- c:\windows\system32\webcheck.dll
2013-09-06 17:15 . 2013-09-06 17:15 165888 ----a-w- c:\windows\system32\iexpress.exe
2013-09-06 17:15 . 2013-09-06 17:15 160256 ----a-w- c:\windows\system32\wextract.exe
2013-09-06 17:15 . 2013-09-06 17:15 103936 ----a-w- c:\windows\system32\inseng.dll
2013-09-06 14:48 . 2010-09-24 06:46 116752 ----a-w- c:\windows\system32\drivers\AtihdW76.sys
2013-09-06 14:48 . 2013-09-06 15:04 38528 ----a-w- c:\windows\system32\drivers\usbfilter.sys
2013-09-06 14:48 . 2013-09-06 15:01 16440 ----a-w- c:\windows\system32\drivers\AtiPcie64.sys
2013-09-06 14:48 . 2010-10-28 09:16 4077568 ----a-w- c:\windows\SysWow64\atiumdag.dll
2013-09-06 14:48 . 2010-10-28 09:11 58880 ----a-w- c:\windows\system32\coinst.dll
2013-09-06 14:48 . 2010-10-28 09:11 3460096 ----a-w- c:\windows\SysWow64\atiumdva.dll
2013-09-06 14:48 . 2010-10-28 09:03 39936 ----a-w- c:\windows\system32\atiuxp64.dll
2013-09-06 14:48 . 2010-10-28 09:02 30720 ----a-w- c:\windows\SysWow64\atiuxpag.dll
2013-09-06 14:47 . 2010-10-28 09:17 3222016 ----a-w- c:\windows\system32\atiumd6a.dll
2013-09-06 14:47 . 2010-10-28 09:10 5240832 ----a-w- c:\windows\system32\atiumd64.dll
2013-09-06 14:47 . 2010-10-28 09:45 16201728 ----a-w- c:\windows\SysWow64\atioglxx.dll
2013-09-06 14:47 . 2010-10-28 09:37 120320 ----a-w- c:\windows\system32\atitmm64.dll
2013-09-06 14:47 . 2010-10-28 09:36 421376 ----a-w- c:\windows\system32\atipdl64.dll
2013-09-06 14:47 . 2010-10-28 09:36 356352 ----a-w- c:\windows\SysWow64\atipdlxx.dll
2013-09-06 14:47 . 2010-10-28 09:02 37888 ----a-w- c:\windows\system32\atiu9p64.dll
2013-09-06 14:47 . 2010-10-28 09:02 28672 ----a-w- c:\windows\SysWow64\atiu9pag.dll
1997-07-21 17:30 1045776 --sha-w- c:\windows\SysWOW64\Msjet35.dll
1997-06-23 01:00 123664 --sha-w- c:\windows\SysWOW64\Msjint35.dll
1997-06-23 10:06 24848 --sha-w- c:\windows\SysWOW64\Msjter35.dll
1997-06-23 10:06 252176 --sha-w- c:\windows\SysWOW64\Msrd2x35.dll
1997-06-23 10:06 287504 --sha-w- c:\windows\SysWOW64\Msxbse35.dll
.
.
(((((((((((((((((((((((((((((((((( Spouštěcí body v registru )))))))))))))))))))))))))))))))))))))))))))))
.
.
*Poznámka* prázdné záznamy a legitimní výchozí údaje nejsou zobrazeny.
REGEDIT4
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\1TortoiseNormal]
@="{C5994560-53D9-4125-87C9-F193FC689CB2}"
[HKEY_CLASSES_ROOT\CLSID\{C5994560-53D9-4125-87C9-F193FC689CB2}]
2011-06-13 08:20 64792 ----a-w- c:\program files (x86)\Common Files\TortoiseOverlays\TortoiseOverlays.dll
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\2TortoiseModified]
@="{C5994561-53D9-4125-87C9-F193FC689CB2}"
[HKEY_CLASSES_ROOT\CLSID\{C5994561-53D9-4125-87C9-F193FC689CB2}]
2011-06-13 08:20 64792 ----a-w- c:\program files (x86)\Common Files\TortoiseOverlays\TortoiseOverlays.dll
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\3TortoiseConflict]
@="{C5994562-53D9-4125-87C9-F193FC689CB2}"
[HKEY_CLASSES_ROOT\CLSID\{C5994562-53D9-4125-87C9-F193FC689CB2}]
2011-06-13 08:20 64792 ----a-w- c:\program files (x86)\Common Files\TortoiseOverlays\TortoiseOverlays.dll
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\4TortoiseLocked]
@="{C5994563-53D9-4125-87C9-F193FC689CB2}"
[HKEY_CLASSES_ROOT\CLSID\{C5994563-53D9-4125-87C9-F193FC689CB2}]
2011-06-13 08:20 64792 ----a-w- c:\program files (x86)\Common Files\TortoiseOverlays\TortoiseOverlays.dll
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\5TortoiseReadOnly]
@="{C5994564-53D9-4125-87C9-F193FC689CB2}"
[HKEY_CLASSES_ROOT\CLSID\{C5994564-53D9-4125-87C9-F193FC689CB2}]
2011-06-13 08:20 64792 ----a-w- c:\program files (x86)\Common Files\TortoiseOverlays\TortoiseOverlays.dll
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\6TortoiseDeleted]
@="{C5994565-53D9-4125-87C9-F193FC689CB2}"
[HKEY_CLASSES_ROOT\CLSID\{C5994565-53D9-4125-87C9-F193FC689CB2}]
2011-06-13 08:20 64792 ----a-w- c:\program files (x86)\Common Files\TortoiseOverlays\TortoiseOverlays.dll
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\7TortoiseAdded]
@="{C5994566-53D9-4125-87C9-F193FC689CB2}"
[HKEY_CLASSES_ROOT\CLSID\{C5994566-53D9-4125-87C9-F193FC689CB2}]
2011-06-13 08:20 64792 ----a-w- c:\program files (x86)\Common Files\TortoiseOverlays\TortoiseOverlays.dll
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\8TortoiseIgnored]
@="{C5994567-53D9-4125-87C9-F193FC689CB2}"
[HKEY_CLASSES_ROOT\CLSID\{C5994567-53D9-4125-87C9-F193FC689CB2}]
2011-06-13 08:20 64792 ----a-w- c:\program files (x86)\Common Files\TortoiseOverlays\TortoiseOverlays.dll
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\9TortoiseUnversioned]
@="{C5994568-53D9-4125-87C9-F193FC689CB2}"
[HKEY_CLASSES_ROOT\CLSID\{C5994568-53D9-4125-87C9-F193FC689CB2}]
2011-06-13 08:20 64792 ----a-w- c:\program files (x86)\Common Files\TortoiseOverlays\TortoiseOverlays.dll
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]
"StartCCC"="c:\program files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" [2010-10-28 98304]
"ISUSScheduler"="c:\program files (x86)\Common Files\InstallShield\UpdateService\issch.exe" [2004-06-16 81920]
"CorelDRAW Graphics Suite 11b"="c:\program files (x86)\Corel\Corel Graphics 12\Languages\CZ\Programs\registration.exe" [2004-06-22 729088]
"LogMeIn Hamachi Ui"="c:\program files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe" [2013-10-31 2349392]
.
c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\
Akcelerátor spuštění AutoCADu.lnk - c:\program files (x86)\Common Files\Autodesk Shared\acstart16.exe [2004-2-25 10872]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorUser"= 3 (0x3)
"EnableUIADesktopToggle"= 0 (0x0)
"PromptOnSecureDesktop"= 0 (0x0)
.
R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [x]
R3 RdpVideoMiniport;Remote Desktop Video Miniport Driver;c:\windows\system32\drivers\rdpvideominiport.sys;c:\windows\SYSNATIVE\drivers\rdpvideominiport.sys [x]
R3 Synth3dVsc;Synth3dVsc;c:\windows\system32\drivers\synth3dvsc.sys;c:\windows\SYSNATIVE\drivers\synth3dvsc.sys [x]
R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys;c:\windows\SYSNATIVE\drivers\tsusbflt.sys [x]
R3 tsusbhub;tsusbhub;c:\windows\system32\drivers\tsusbhub.sys;c:\windows\SYSNATIVE\drivers\tsusbhub.sys [x]
R3 TunngleService;TunngleService;c:\program files (x86)\Tunngle\TnglCtrl.exe;c:\program files (x86)\Tunngle\TnglCtrl.exe [x]
R3 VGPU;VGPU;c:\windows\system32\drivers\rdvgkmd.sys;c:\windows\SYSNATIVE\drivers\rdvgkmd.sys [x]
R3 WatAdminSvc;Služba Technologie aktivace Windows;c:\windows\system32\Wat\WatAdminSvc.exe;c:\windows\SYSNATIVE\Wat\WatAdminSvc.exe [x]
S0 sptd;sptd;c:\windows\\SystemRoot\System32\Drivers\sptd.sys;c:\windows\\SystemRoot\System32\Drivers\sptd.sys [x]
S1 eamonm;eamonm;c:\windows\system32\DRIVERS\eamonm.sys;c:\windows\SYSNATIVE\DRIVERS\eamonm.sys [x]
S1 ehdrv;ehdrv;c:\windows\system32\DRIVERS\ehdrv.sys;c:\windows\SYSNATIVE\DRIVERS\ehdrv.sys [x]
S2 AMD External Events Utility;AMD External Events Utility;c:\windows\system32\atiesrxx.exe;c:\windows\SYSNATIVE\atiesrxx.exe [x]
S2 ArcGIS License Manager;ArcGIS License Manager;c:\program files (x86)\ArcGIS\License10.1\bin\lmgrd.exe;c:\program files (x86)\ArcGIS\License10.1\bin\lmgrd.exe [x]
S2 ekrn;ESET Service;c:\program files\ESET\ESET NOD32 Antivirus\x86\ekrn.exe;c:\program files\ESET\ESET NOD32 Antivirus\x86\ekrn.exe [x]
S2 epfwwfpr;epfwwfpr;c:\windows\system32\DRIVERS\epfwwfpr.sys;c:\windows\SYSNATIVE\DRIVERS\epfwwfpr.sys [x]
S2 Hamachi2Svc;LogMeIn Hamachi Tunneling Engine;c:\program files (x86)\LogMeIn Hamachi\hamachi-2.exe;c:\program files (x86)\LogMeIn Hamachi\hamachi-2.exe [x]
S2 Live Updater Service;Live Updater Service;c:\program files\Acer\Acer Updater\UpdaterService.exe;c:\program files\Acer\Acer Updater\UpdaterService.exe [x]
S2 LMIGuardianSvc;LMIGuardianSvc;c:\program files (x86)\LogMeIn Hamachi\LMIGuardianSvc.exe;c:\program files (x86)\LogMeIn Hamachi\LMIGuardianSvc.exe [x]
S2 TeamViewer8;TeamViewer 8;c:\program files (x86)\TeamViewer\Version8\TeamViewer_Service.exe;c:\program files (x86)\TeamViewer\Version8\TeamViewer_Service.exe [x]
S3 AthDfu;Atheros Valkyrie USB BootROM;c:\windows\system32\Drivers\AthDfu.sys;c:\windows\SYSNATIVE\Drivers\AthDfu.sys [x]
S3 AtiHDAudioService;ATI Function Driver for HD Audio Service;c:\windows\system32\drivers\AtihdW76.sys;c:\windows\SYSNATIVE\drivers\AtihdW76.sys [x]
S3 k57nd60a;Broadcom NetLink (TM) Gigabit Ethernet - NDIS 6.0;c:\windows\system32\DRIVERS\k57nd60a.sys;c:\windows\SYSNATIVE\DRIVERS\k57nd60a.sys [x]
S3 RSUSBSTOR;RtsUStor.Sys Realtek USB Card Reader;c:\windows\system32\Drivers\RtsUStor.sys;c:\windows\SYSNATIVE\Drivers\RtsUStor.sys [x]
S3 tap0901t;TAP-Win32 Adapter V9 (Tunngle);c:\windows\system32\DRIVERS\tap0901t.sys;c:\windows\SYSNATIVE\DRIVERS\tap0901t.sys [x]
S3 usbfilter;AMD USB Filter Driver;c:\windows\system32\DRIVERS\usbfilter.sys;c:\windows\SYSNATIVE\DRIVERS\usbfilter.sys [x]
.
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\svchost]
iissvcs REG_MULTI_SZ w3svc was
apphost REG_MULTI_SZ apphostsvc
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\active setup\installed components\{8A69D345-D564-463c-AFF1-A69D9E530F96}]
2013-10-18 05:45 1185744 ----a-w- c:\program files (x86)\Google\Chrome\Application\30.0.1599.101\Installer\chrmstp.exe
.
Obsah adresáře 'Naplánované úlohy'
.
2013-11-09 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
- c:\program files (x86)\Google\Update\GoogleUpdate.exe [2013-09-06 14:07]
.
2013-11-09 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
- c:\program files (x86)\Google\Update\GoogleUpdate.exe [2013-09-06 14:07]
.
.
--------- X64 Entries -----------
.
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\1TortoiseNormal]
@="{C5994560-53D9-4125-87C9-F193FC689CB2}"
[HKEY_CLASSES_ROOT\CLSID\{C5994560-53D9-4125-87C9-F193FC689CB2}]
2011-06-13 08:20 75544 ----a-w- c:\program files\Common Files\TortoiseOverlays\TortoiseOverlays.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\2TortoiseModified]
@="{C5994561-53D9-4125-87C9-F193FC689CB2}"
[HKEY_CLASSES_ROOT\CLSID\{C5994561-53D9-4125-87C9-F193FC689CB2}]
2011-06-13 08:20 75544 ----a-w- c:\program files\Common Files\TortoiseOverlays\TortoiseOverlays.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\3TortoiseConflict]
@="{C5994562-53D9-4125-87C9-F193FC689CB2}"
[HKEY_CLASSES_ROOT\CLSID\{C5994562-53D9-4125-87C9-F193FC689CB2}]
2011-06-13 08:20 75544 ----a-w- c:\program files\Common Files\TortoiseOverlays\TortoiseOverlays.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\4TortoiseLocked]
@="{C5994563-53D9-4125-87C9-F193FC689CB2}"
[HKEY_CLASSES_ROOT\CLSID\{C5994563-53D9-4125-87C9-F193FC689CB2}]
2011-06-13 08:20 75544 ----a-w- c:\program files\Common Files\TortoiseOverlays\TortoiseOverlays.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\5TortoiseReadOnly]
@="{C5994564-53D9-4125-87C9-F193FC689CB2}"
[HKEY_CLASSES_ROOT\CLSID\{C5994564-53D9-4125-87C9-F193FC689CB2}]
2011-06-13 08:20 75544 ----a-w- c:\program files\Common Files\TortoiseOverlays\TortoiseOverlays.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\6TortoiseDeleted]
@="{C5994565-53D9-4125-87C9-F193FC689CB2}"
[HKEY_CLASSES_ROOT\CLSID\{C5994565-53D9-4125-87C9-F193FC689CB2}]
2011-06-13 08:20 75544 ----a-w- c:\program files\Common Files\TortoiseOverlays\TortoiseOverlays.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\7TortoiseAdded]
@="{C5994566-53D9-4125-87C9-F193FC689CB2}"
[HKEY_CLASSES_ROOT\CLSID\{C5994566-53D9-4125-87C9-F193FC689CB2}]
2011-06-13 08:20 75544 ----a-w- c:\program files\Common Files\TortoiseOverlays\TortoiseOverlays.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\8TortoiseIgnored]
@="{C5994567-53D9-4125-87C9-F193FC689CB2}"
[HKEY_CLASSES_ROOT\CLSID\{C5994567-53D9-4125-87C9-F193FC689CB2}]
2011-06-13 08:20 75544 ----a-w- c:\program files\Common Files\TortoiseOverlays\TortoiseOverlays.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\9TortoiseUnversioned]
@="{C5994568-53D9-4125-87C9-F193FC689CB2}"
[HKEY_CLASSES_ROOT\CLSID\{C5994568-53D9-4125-87C9-F193FC689CB2}]
2011-06-13 08:20 75544 ----a-w- c:\program files\Common Files\TortoiseOverlays\TortoiseOverlays.dll
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"PLFSetI"="c:\windows\PLFSetI.exe" [2013-09-06 206208]
"RtHDVCpl"="c:\program files\Realtek\Audio\HDA\RAVCpl64.exe" [2013-09-06 10920552]
"egui"="c:\program files\ESET\ESET NOD32 Antivirus\egui.exe" [2013-09-12 5618456]
.
------- Doplňkový sken -------
.
uLocal Page = c:\windows\system32\blank.htm
uStart Page = hxxp://www.google.com
mLocal Page = c:\windows\SysWOW64\blank.htm
TCP: DhcpNameServer = 10.0.0.1
FF - ProfilePath - c:\users\HITTL\AppData\Roaming\Mozilla\Firefox\Profiles\jz76zuw4.default\
FF - ExtSQL: 2013-10-22 20:43; jid1-vW9nopuIAJiRHw@jetpack; c:\users\HITTL\AppData\Roaming\Mozilla\Firefox\Profiles\jz76zuw4.default\extensions\jid1-vW9nopuIAJiRHw@jetpack.xpi
.
- - - - NEPLATNÉ POLOŽKY ODSTRANĚNÉ Z REGISTRU - - - -
.
BHO-{5054562D-5247-006A-76A7-7A786E7484D7} - (no file)
Toolbar-{5054562D-5247-006A-76A7-7A786E7484D7} - (no file)
.
.
.
------------------------ Jiné spuštené procesy ------------------------
.
c:\program files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
c:\program files (x86)\ArcGIS\License10.1\bin\ARCGIS.exe
c:\program files (x86)\Google\Update\1.3.21.165\GoogleCrashHandler.exe
c:\program files (x86)\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
c:\program files (x86)\TeamViewer\Version8\TeamViewer.exe
c:\program files (x86)\TeamViewer\Version8\tv_w32.exe
c:\windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe
.
**************************************************************************
.
Celkový čas: 2013-11-09 19:47:07 - počítač byl restartován
ComboFix-quarantined-files.txt 2013-11-09 18:47
ComboFix2.txt 2009-01-01 00:06
.
Před spuštěním: Volných bajtů: 65 517 084 672
Po spuštění: Volných bajtů: 65 037 860 864
.
- - End Of File - - E5D138280470A7BF4BACD1074F47CE73
A36C5E4F47E84449FF07ED3517B43A31

#52 Příspěvek od **Márty84** » 09 lis 2013 18:59

Dejte novy log z RSIT

nom · #53 Příspěvek od **nom** » 09 lis 2013 19:10

Logfile of random's system information tool 1.08 (written by random/random)
Run by HITTL at 2013-11-09 22:24:35
Microsoft Windows 7 Ultimate Service Pack 1
System drive C: has 62 GB (14%) free of 433 GB
Total RAM: 4091 MB (67% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 22:24:39, on 9.11.2013
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v9.00 (9.00.8112.16502)
Boot mode: Normal

Running processes:
C:\Program Files (x86)\TeamViewer\Version8\TeamViewer.exe
C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe
C:\Program Files\trend micro\HITTL.exe

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
O2 - BHO: Ask Toolbar BHO - {5054562D-5247-006A-76A7-7A786E7484D7} - (no file)
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll
O3 - Toolbar: (no name) - {5054562D-5247-006A-76A7-7A786E7484D7} - (no file)
O4 - HKLM\..\Run: [StartCCC] "C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun
O4 - HKLM\..\Run: [ISUSScheduler] "C:\Program Files (x86)\Common Files\InstallShield\UpdateService\issch.exe" -start
O4 - HKLM\..\Run: [CorelDRAW Graphics Suite 11b] C:\Program Files (x86)\Corel\Corel Graphics 12\Languages\CZ\Programs\registration.exe /title="CorelDRAW Graphics Suite 12" /date=111313 serial=DR12WRZ-6367389-VVS lang=CZ
O4 - HKLM\..\Run: [LogMeIn Hamachi Ui] "C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe" --auto-start
O4 - Global Startup: Akcelerátor spuštění AutoCADu.lnk = C:\Program Files (x86)\Common Files\Autodesk Shared\acstart16.exe
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~2\COMMON~1\Skype\SKYPE4~1.DLL
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
O23 - Service: AMD External Events Utility - Unknown owner - C:\Windows\system32\atiesrxx.exe (file missing)
O23 - Service: ArcGIS License Manager - Flexera Software, Inc. - C:\Program Files (x86)\ArcGIS\License10.1\bin\lmgrd.exe
O23 - Service: Autodesk Licensing Service - Autodesk, Inc. - C:\Program Files (x86)\Common Files\Autodesk Shared\Service\AdskScSrv.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)
O23 - Service: ESET Service (ekrn) - ESET - C:\Program Files\ESET\ESET NOD32 Antivirus\x86\ekrn.exe
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)
O23 - Service: FLEXnet Licensing Service - Flexera Software, Inc. - C:\Program Files (x86)\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
O23 - Service: Služba Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Služba Google Update (gupdatem) (gupdatem) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: LogMeIn Hamachi Tunneling Engine (Hamachi2Svc) - LogMeIn Inc. - C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2.exe
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Live Updater Service - Acer Incorporated - C:\Program Files\Acer\Acer Updater\UpdaterService.exe
O23 - Service: LMIGuardianSvc - LogMeIn, Inc. - C:\Program Files (x86)\LogMeIn Hamachi\LMIGuardianSvc.exe
O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Mozilla Foundation - C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)
O23 - Service: TeamViewer 8 (TeamViewer8) - TeamViewer GmbH - C:\Program Files (x86)\TeamViewer\Version8\TeamViewer_Service.exe
O23 - Service: TunngleService - Tunngle.net GmbH - C:\Program Files (x86)\Tunngle\TnglCtrl.exe
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\Wat\WatUX.exe,-601 (WatAdminSvc) - Unknown owner - C:\Windows\system32\Wat\WatAdminSvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)

--
End of file - 6407 bytes

======Listing Processes======

\SystemRoot\System32\smss.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
wininit.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
C:\Windows\system32\services.exe
C:\Windows\system32\lsass.exe
C:\Windows\system32\lsm.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Windows\system32\svchost.exe -k RPCSS
C:\Windows\system32\atiesrxx.exe
winlogon.exe
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k LocalService
C:\Windows\system32\svchost.exe -k netsvcs
C:\Windows\system32\svchost.exe -k GPSvcGroup
atieclxx
C:\Windows\system32\svchost.exe -k NetworkService
C:\Windows\System32\spoolsv.exe
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
"C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe"
C:\Windows\system32\svchost.exe -k apphost
"C:\Program Files (x86)\ArcGIS\License10.1\bin\lmgrd.exe"
\??\C:\Windows\system32\conhost.exe "1256936973868516347-45305452-312647307844949843-360012479188117926922653731
"C:\Program Files\ESET\ESET NOD32 Antivirus\x86\ekrn.exe"
"C:\Program Files (x86)\ArcGIS\License10.1\bin\lmgrd.exe" -c "C:\Program Files (x86)\ArcGIS\License10.1\bin\service.txt" -l "C:\Program Files (x86)\ArcGIS\License10.1\bin\lmgrd9.log" -z -local
ARCGIS.exe -T HITTL-PC 11.10 -1 -c "C:\Program Files (x86)\ArcGIS\License10.1\bin\service.txt" --lmgrd_start 527e8164 -l "C:\Program Files (x86)\ArcGIS\License10.1\bin\lmgrd9.log"
"C:\Program Files\Acer\Acer Updater\UpdaterService.exe"
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe
"C:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe"
"C:\Program Files (x86)\TeamViewer\Version8\TeamViewer_Service.exe"
"taskhost.exe"
"C:\Windows\system32\Dwm.exe"
"C:\Program Files (x86)\Google\Update\1.3.21.165\GoogleCrashHandler.exe"
"C:\Program Files (x86)\Google\Update\1.3.21.165\GoogleCrashHandler64.exe"
C:\Windows\system32\svchost.exe -k iissvcs
C:\Windows\System32\svchost.exe -k secsvcs
"C:\Program Files (x86)\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe"
"C:\Windows\System32\WUDFHost.exe" -HostGUID:{193a1820-d9ac-4997-8c55-be817523f6aa} -IoEventPortName:HostProcess-eed1f3ec-e5e4-43ea-9f4d-85c70d4acc32 -SystemEventPortName:HostProcess-4231dded-7d58-4cca-b6dc-0e8681e78d95 -IoCancelEventPortName:HostProcess-259e86f4-fd79-48fe-8f93-7abcd0ae6a8f -NonStateChangingEventPortName:HostProcess-187bd727-06e6-4ef4-800e-7445f9ee70ff -ServiceSID:S-1-5-80-2652678385-582572993-1835434367-1344795993-749280709 -LifetimeId:8be80b6a-b98b-4479-8949-790151e1047d -DeviceGroupId:WpdFsGroup
"C:\Program Files (x86)\TeamViewer\Version8\TeamViewer.exe"
"C:\Program Files (x86)\TeamViewer\Version8\tv_w32.exe" --action hooks --log C:\Program Files (x86)\TeamViewer\Version8\TeamViewer8_Logfile.log
"C:\Program Files (x86)\TeamViewer\Version8\tv_x64.exe" --action hooks --log C:\Program Files (x86)\TeamViewer\Version8\TeamViewer8_Logfile.log
C:\Windows\System32\rundll32.exe shell32.dll,SHCreateLocalServerRunDll {995C996E-D918-4a8c-A302-45719A6F4EA7} -Embedding
C:\Windows\system32\SearchIndexer.exe /Embedding
"C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2.exe" -s
"C:\Program Files (x86)\LogMeIn Hamachi\LMIGuardianSvc.exe"
"C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe" -c "C:\Users\HITTL\AppData\Local\LogMeIn Hamachi"
C:\Windows\explorer.exe
"C:\Program Files\TortoiseSVN\bin\TSVNCache.exe"
C:\Windows\system32\wbem\wmiprvse.exe
"C:\Users\HITTL\Desktop\RSITx64.exe"

======Scheduled tasks folder======

C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
C:\Windows\tasks\GoogleUpdateTaskMachineUA.job

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{5054562D-5247-006A-76A7-7A786E7484D7}]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
Java(tm) Plug-In SSV Helper - C:\Program Files (x86)\Java\jre7\bin\ssv.dll [2013-09-19 462248]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll [2013-09-19 171944]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Internet Explorer\Toolbar]
{5054562D-5247-006A-76A7-7A786E7484D7}

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"PLFSetI"=C:\Windows\PLFSetI.exe [2013-09-06 206208]
"RtHDVCpl"=C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [2013-09-06 10920552]
"egui"=C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe [2013-09-12 5618456]

[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]
"StartCCC"=C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [2010-10-28 98304]
"ISUSScheduler"=C:\Program Files (x86)\Common Files\InstallShield\UpdateService\issch.exe [2004-06-16 81920]
"CorelDRAW Graphics Suite 11b"=C:\Program Files (x86)\Corel\Corel Graphics 12\Languages\CZ\Programs\registration.exe [2004-06-22 729088]
"LogMeIn Hamachi Ui"=C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe [2013-10-31 2349392]

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup
Akcelerátor spuštění AutoCADu.lnk - C:\Program Files (x86)\Common Files\Autodesk Shared\acstart16.exe

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED}

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=credssp.dll

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Hamachi2Svc]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorUser"=3
"EnableUIADesktopToggle"=0
"PromptOnSecureDesktop"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=145
"NoDrives"=0

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDrives"=0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1
.scr - open - "C:\Windows\notepad.exe" "%1"
.scr - install -
.scr - config -

======List of files/folders created in the last 1 months======

2013-11-09 19:47:09 ----D---- C:\Windows\temp
2013-11-09 19:47:07 ----A---- C:\ComboFix.txt
2013-11-09 19:41:45 ----AH---- C:\Windows\system32\hamachi.sys
2013-11-09 19:41:37 ----D---- C:\Program Files (x86)\LogMeIn Hamachi
2013-11-09 19:40:44 ----SHD---- C:\$RECYCLE.BIN
2013-11-09 19:26:34 ----A---- C:\Windows\NIRCMD.exe
2013-11-09 15:32:25 ----D---- C:\Users\HITTL\AppData\Roaming\Tunngle
2013-11-09 15:32:25 ----D---- C:\ProgramData\Tunngle
2013-11-09 15:32:24 ----A---- C:\Windows\system32\drivers\tap0901t.sys
2013-11-09 15:32:22 ----D---- C:\Program Files (x86)\Tunngle
2013-11-08 18:17:53 ----A---- C:\Windows\zip.exe
2013-11-08 18:17:53 ----A---- C:\Windows\SWSC.exe
2013-11-08 18:17:53 ----A---- C:\Windows\SWREG.exe
2013-11-08 18:17:53 ----A---- C:\Windows\sed.exe
2013-11-08 18:17:53 ----A---- C:\Windows\PEV.exe
2013-11-08 18:17:53 ----A---- C:\Windows\MBR.exe
2013-11-08 18:17:53 ----A---- C:\Windows\grep.exe
2013-11-08 18:17:08 ----D---- C:\Qoobox
2013-11-08 18:16:25 ----D---- C:\Windows\erdnt
2013-11-05 10:44:18 ----D---- C:\ProgramData\ESRI
2013-11-05 00:13:25 ----D---- C:\Program Files\CCleaner
2013-11-04 18:20:42 ----D---- C:\Program Files\Defraggler
2013-11-03 17:25:07 ----D---- C:\Users\HITTL\AppData\Roaming\Malwarebytes
2013-11-03 17:24:56 ----D---- C:\ProgramData\Malwarebytes
2013-11-03 12:39:21 ----D---- C:\ProgramData\{CED89F1A-945F-46EC-B23C-5EAF6D2DB12A}
2013-11-03 11:46:27 ----D---- C:\ProgramData\ESET
2013-11-03 11:46:27 ----D---- C:\Program Files\ESET
2013-11-03 11:24:25 ----D---- C:\Program Files\trend micro
2013-11-03 11:24:24 ----D---- C:\rsit
2013-11-03 10:39:58 ----D---- C:\Program Files (x86)\MSXML 4.0
2013-11-03 10:23:17 ----D---- C:\ProgramData\{D76294E6-03B8-4971-AF2E-3F846161A690}
2013-11-03 10:23:15 ----D---- C:\ProgramData\{5A85B23A-4B58-47D1-9B9C-DFBD7866099F}
2013-11-02 23:07:04 ----D---- C:\Program Files (x86)\directx
2013-10-31 18:17:11 ----D---- C:\Users\HITTL\AppData\Roaming\Mumble
2013-10-31 18:16:32 ----D---- C:\Program Files (x86)\Mumble
2013-10-30 12:21:35 ----D---- C:\Program Files (x86)\Win7 MAC Address Changer
2013-10-29 11:49:23 ----HDC---- C:\ProgramData\{3F35882A-B5EA-473D-BCE8-67F488C1E747}
2013-10-29 11:47:31 ----D---- C:\Users\HITTL\AppData\Roaming\Merver
2013-10-27 05:53:40 ----D---- C:\Users\HITTL\AppData\Roaming\SqueakyChocolate, LLC
2013-10-25 11:00:51 ----D---- C:\Volby
2013-10-23 16:40:12 ----D---- C:\Users\HITTL\AppData\Roaming\SmileysWeLove
2013-10-22 19:44:09 ----D---- C:\Program Files (x86)\SqueakyChocolate
2013-10-22 19:39:47 ----D---- C:\Program Files (x86)\Cheat Engine 6.3
2013-10-18 07:09:08 ----D---- C:\Users\HITTL\AppData\Roaming\IrfanView
2013-10-18 07:09:08 ----D---- C:\Program Files (x86)\IrfanView
2013-10-17 19:10:54 ----D---- C:\Program Files\WinHTTrack
2013-10-15 17:44:16 ----D---- C:\Program Files\Recuva
2013-10-13 18:06:51 ----D---- C:\Program Files (x86)\TeamViewer
2013-10-13 16:41:48 ----D---- C:\Program Files (x86)\ESRI
2013-10-11 16:17:29 ----D---- C:\ProgramData\EAGLE Software
2013-10-11 16:17:27 ----D---- C:\Program Files (x86)\Cyklotrasy

======List of files/folders modified in the last 1 months======

2013-11-09 22:24:26 ----D---- C:\Windows\Prefetch
2013-11-09 21:57:41 ----D---- C:\Users\HITTL\AppData\Roaming\inkscape
2013-11-09 21:57:40 ----D---- C:\Users\HITTL\AppData\Roaming\TS3Client
2013-11-09 21:57:39 ----D---- C:\Windows\inf
2013-11-09 21:57:37 ----D---- C:\Windows
2013-11-09 19:53:02 ----D---- C:\Windows\Microsoft.NET
2013-11-09 19:53:00 ----D---- C:\Windows\system32\config
2013-11-09 19:47:10 ----D---- C:\Windows\system32\drivers
2013-11-09 19:45:30 ----D---- C:\Windows\System32
2013-11-09 19:45:30 ----A---- C:\Windows\system32\PerfStringBackup.INI
2013-11-09 19:41:54 ----SHD---- C:\Windows\Installer
2013-11-09 19:41:54 ----D---- C:\Config.Msi
2013-11-09 19:41:37 ----RD---- C:\Program Files (x86)
2013-11-09 19:40:48 ----A---- C:\Windows\system.ini
2013-11-09 19:40:36 ----D---- C:\Windows\system32\drivers\etc
2013-11-09 19:34:09 ----D---- C:\Windows\SYSWOW64\drivers
2013-11-09 19:34:09 ----D---- C:\Windows\SysWOW64
2013-11-09 19:34:09 ----D---- C:\Windows\AppPatch
2013-11-09 19:34:08 ----D---- C:\Program Files (x86)\Common Files
2013-11-09 15:33:03 ----D---- C:\Windows\system32\catroot
2013-11-09 15:33:01 ----D---- C:\Windows\system32\DriverStore
2013-11-09 15:32:53 ----SHD---- C:\System Volume Information
2013-11-09 15:32:25 ----D---- C:\ProgramData
2013-11-09 15:32:24 ----RSD---- C:\Windows\Fonts
2013-11-07 02:55:22 ----D---- C:\Users\HITTL\AppData\Roaming\Skype
2013-11-05 10:56:03 ----D---- C:\AdwCleaner
2013-11-05 00:13:29 ----D---- C:\Windows\system32\Tasks
2013-11-05 00:13:25 ----RD---- C:\Program Files
2013-11-03 22:49:15 ----SD---- C:\Users\HITTL\AppData\Roaming\Microsoft
2013-11-03 17:31:38 ----D---- C:\Users\HITTL\AppData\Roaming\Seznam.cz
2013-11-03 17:31:17 ----D---- C:\Program Files (x86)\Seznam.cz
2013-11-03 12:57:55 ----D---- C:\Users\HITTL\AppData\Roaming\DAEMON Tools Lite
2013-11-03 12:57:54 ----D---- C:\Users\HITTL\AppData\Roaming\uTorrent
2013-11-03 12:57:16 ----D---- C:\Windows\Panther
2013-11-03 12:57:14 ----D---- C:\Windows\Logs
2013-11-03 12:38:43 ----D---- C:\Program Files (x86)\IObit
2013-11-03 12:37:48 ----D---- C:\ProgramData\IObit
2013-11-03 11:01:51 ----A---- C:\Windows\SYSWOW64\PerfStringBackup.INI
2013-11-03 10:49:44 ----D---- C:\Windows\SYSWOW64\cs-CZ
2013-11-03 10:49:44 ----D---- C:\Windows\system32\cs-CZ
2013-11-03 10:45:34 ----D---- C:\Windows\SYSWOW64\en-US
2013-11-03 10:45:34 ----D---- C:\Windows\system32\en-US
2013-11-03 10:40:26 ----D---- C:\Windows\winsxs
2013-11-03 10:20:14 ----D---- C:\ProgramData\LogMeIn
2013-11-02 23:06:41 ----HD---- C:\Program Files (x86)\InstallShield Installation Information
2013-11-02 23:06:04 ----D---- C:\Games
2013-11-02 18:39:15 ----D---- C:\ProgramData\Skype
2013-11-02 18:39:11 ----RD---- C:\Program Files (x86)\Skype
2013-10-29 21:39:41 ----D---- C:\Windows\system32\NDF
2013-10-29 12:32:20 ----D---- C:\Program Files (x86)\Inkscape
2013-10-12 11:08:52 ----RD---- C:\Users

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 AtiPcie;AMD PCI Express (3GIO) Filter; C:\Windows\system32\DRIVERS\AtiPcie64.sys [2013-09-06 16440]
R0 rdyboost;ReadyBoost; C:\Windows\System32\drivers\rdyboost.sys [2010-11-20 213888]
R0 sptd;sptd; C:\Windows\System32\Drivers\sptd.sys [2013-09-30 564824]
R0 vmbus;@%SystemRoot%\system32\vmbusres.dll,-1000; C:\Windows\system32\drivers\vmbus.sys [2010-11-20 199552]
R1 CSC;@%systemroot%\system32\cscsvc.dll,-202; C:\Windows\system32\drivers\csc.sys [2010-11-20 514560]
R1 eamonm;eamonm; C:\Windows\system32\DRIVERS\eamonm.sys [2013-09-17 239320]
R1 ehdrv;ehdrv; C:\Windows\system32\DRIVERS\ehdrv.sys [2013-09-17 168256]
R1 vwififlt;Virtual WiFi Filter Driver; C:\Windows\system32\DRIVERS\vwififlt.sys [2009-07-14 59904]
R2 epfwwfpr;epfwwfpr; C:\Windows\system32\DRIVERS\epfwwfpr.sys [2013-09-17 157432]
R3 amdkmdag;amdkmdag; C:\Windows\system32\DRIVERS\atikmdag.sys [2013-09-06 7877120]
R3 amdkmdap;amdkmdap; C:\Windows\system32\DRIVERS\atikmpag.sys [2013-09-06 285696]
R3 AthDfu;Atheros Valkyrie USB BootROM; C:\Windows\System32\Drivers\AthDfu.sys [2010-07-29 51872]
R3 athr;Qualcomm Atheros Extensible Wireless LAN device driver; C:\Windows\system32\DRIVERS\athrx.sys [2012-08-07 3718144]
R3 AtiHDAudioService;ATI Function Driver for HD Audio Service; C:\Windows\system32\drivers\AtihdW76.sys [2013-09-06 116752]
R3 hamachi;Hamachi Network Interface; C:\Windows\system32\DRIVERS\hamachi.sys [2009-03-18 33856]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\Windows\system32\drivers\RTKVHD64.sys [2013-09-06 2399848]
R3 k57nd60a;Broadcom NetLink (TM) Gigabit Ethernet - NDIS 6.0; C:\Windows\system32\DRIVERS\k57nd60a.sys [2010-05-15 384040]
R3 RSUSBSTOR;RtsUStor.Sys Realtek USB Card Reader; C:\Windows\System32\Drivers\RtsUStor.sys [2010-06-17 246376]
R3 tap0901t;TAP-Win32 Adapter V9 (Tunngle); C:\Windows\system32\DRIVERS\tap0901t.sys [2009-09-16 31232]
R3 usbfilter;AMD USB Filter Driver; C:\Windows\system32\DRIVERS\usbfilter.sys [2013-09-06 38528]
S3 a9jjn7xk;a9jjn7xk; C:\Windows\system32\drivers\a9jjn7xk.sys []
S3 BridgeMP;@%SystemRoot%\system32\bridgeres.dll,-1; C:\Windows\system32\DRIVERS\bridge.sys [2009-07-14 95232]
S3 BthEnum;Ovladač pro Bluetooth Request Block; C:\Windows\system32\drivers\BthEnum.sys [2009-07-14 41984]
S3 BthPan;Zařízení Bluetooth (síť PAN); C:\Windows\system32\DRIVERS\bthpan.sys [2009-07-14 118784]
S3 BTHPORT;Ovladač portu Bluetooth; C:\Windows\System32\Drivers\BTHport.sys [2012-07-06 552960]
S3 BTHUSB;Ovladač rozhraní USB radiostanice Bluetooth; C:\Windows\System32\Drivers\BTHUSB.sys [2011-04-28 80384]
S3 catchme;catchme; \??\C:\ComboFix\catchme.sys []
S3 pciide;pciide; C:\Windows\system32\drivers\pciide.sys [2009-07-14 12352]
S3 RDPDR;Terminal Server Device Redirector Driver; C:\Windows\System32\drivers\rdpdr.sys [2010-11-20 165888]
S3 RdpVideoMiniport;Remote Desktop Video Miniport Driver; C:\Windows\System32\drivers\rdpvideominiport.sys [2012-08-23 19456]
S3 RFCOMM;Zařízení Bluetooth (RFCOMM protokol TDI); C:\Windows\system32\DRIVERS\rfcomm.sys [2009-07-14 158720]
S3 RTHDMIAzAudService;Service for HDMI; C:\Windows\system32\drivers\RtHDMIVX.sys [2013-09-06 231328]
S3 s3cap;s3cap; C:\Windows\system32\drivers\vms3cap.sys [2010-11-20 6656]
S3 storvsc;storvsc; C:\Windows\system32\drivers\storvsc.sys [2010-11-20 34688]
S3 Synth3dVsc;Synth3dVsc; C:\Windows\System32\drivers\synth3dvsc.sys []
S3 TsUsbFlt;@%SystemRoot%\system32\drivers\tsusbflt.sys,-1; C:\Windows\System32\drivers\tsusbflt.sys [2012-08-23 57856]
S3 tsusbhub;@%SystemRoot%\system32\drivers\tsusbhub.sys,-1; C:\Windows\system32\drivers\tsusbhub.sys []
S3 VGPU;VGPU; C:\Windows\System32\drivers\rdvgkmd.sys []
S3 VMBusHID;VMBusHID; C:\Windows\system32\drivers\VMBusHID.sys [2010-11-20 21760]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 AdobeARMservice;Adobe Acrobat Update Service; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [2013-09-05 65640]
R2 AMD External Events Utility;AMD External Events Utility; C:\Windows\system32\atiesrxx.exe [2013-09-06 203264]
R2 AppHostSvc;@%windir%\system32\inetsrv\iisres.dll,-30011; C:\Windows\system32\svchost.exe [2009-07-14 27136]
R2 ArcGIS License Manager;ArcGIS License Manager; C:\Program Files (x86)\ArcGIS\License10.1\bin\lmgrd.exe [2012-01-05 1408904]
R2 ekrn;ESET Service; C:\Program Files\ESET\ESET NOD32 Antivirus\x86\ekrn.exe [2013-09-12 1337752]
R2 Hamachi2Svc;LogMeIn Hamachi Tunneling Engine; C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2.exe [2013-10-31 2756944]
R2 Live Updater Service;Live Updater Service; C:\Program Files\Acer\Acer Updater\UpdaterService.exe [2012-04-05 255376]
R2 LMIGuardianSvc;LMIGuardianSvc; C:\Program Files (x86)\LogMeIn Hamachi\LMIGuardianSvc.exe [2013-10-11 377104]
R2 NetPipeActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8197; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2012-07-09 139696]
R2 NetTcpActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8199; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2012-07-09 139696]
R2 SQLWriter;SQL Server VSS Writer; C:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe [2012-02-11 129624]
R2 TeamViewer8;TeamViewer 8; C:\Program Files (x86)\TeamViewer\Version8\TeamViewer_Service.exe [2013-10-01 5087584]
R2 W3SVC;@%windir%\system32\inetsrv\iisres.dll,-30003; C:\Windows\system32\svchost.exe [2009-07-14 27136]
R3 FLEXnet Licensing Service;FLEXnet Licensing Service; C:\Program Files (x86)\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe [2013-09-30 1044816]
R3 WAS;@%windir%\system32\inetsrv\iisres.dll,-30001; C:\Windows\system32\svchost.exe [2009-07-14 27136]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2012-07-09 104912]
S2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2012-07-08 123856]
S2 gupdate;Služba Google Update (gupdate); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2013-09-06 116648]
S3 Autodesk Licensing Service;Autodesk Licensing Service; C:\Program Files (x86)\Common Files\Autodesk Shared\Service\AdskScSrv.exe [2013-10-02 74360]
S3 gupdatem;Služba Google Update (gupdatem); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2013-09-06 116648]
S3 MozillaMaintenance;Mozilla Maintenance Service; C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe [2013-08-14 117656]
S3 TunngleService;TunngleService; C:\Program Files (x86)\Tunngle\TnglCtrl.exe [2013-11-06 758224]
S3 UmRdpService;@%SystemRoot%\system32\umrdp.dll,-1000; C:\Windows\System32\svchost.exe [2009-07-14 27136]
S3 WatAdminSvc;@%SystemRoot%\system32\Wat\WatUX.exe,-601; C:\Windows\system32\Wat\WatAdminSvc.exe [2013-09-07 1255736]
S4 AppMgmt;@appmgmts.dll,-3250; C:\Windows\system32\svchost.exe [2009-07-14 27136]
S4 aspnet_state;Stavová služba ASP.NET; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\aspnet_state.exe [2012-07-08 51648]
S4 CscService;@%systemroot%\system32\cscsvc.dll,-200; C:\Windows\System32\svchost.exe [2009-07-14 27136]
S4 NetMsmqActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8195; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2012-07-09 139696]
S4 PeerDistSvc;@%SystemRoot%\system32\peerdistsvc.dll,-9000; C:\Windows\System32\svchost.exe [2009-07-14 27136]

-----------------EOF-----------------

#54 Příspěvek od **Márty84** » 09 lis 2013 19:13

Zopakujte prosim sken s OTL, vcetne vlozeni toho textu http://forum.viry.cz/viewtopic.php?f=30 ... 5#p1266708 Jestli bude zase log tak dlouhy, dejte ho treba na leteckou postu a sem dejte jen odkaz

Pak budem mazat

nom · #55 Příspěvek od **nom** » 13 lis 2013 13:00

Log OTL.txt zde
http://leteckaposta.cz/676793212

#56 Příspěvek od **Márty84** » 13 lis 2013 13:25

Vypnete antivir, at nebrani programu v praci.

Znovu spustte OTL jako spravce
Do spodniho okna vlozte nasledujici text (vcetne te dvojtecky pred slovem commands)

Kód: Vybrat vše

:commands
[EMPTYTEMP]
[EMPTYFLASH]
[Purity]
[CreateRestorePoint]

:services
AdobeARMservice
gupdate
gupdatem

:files
%windir%\system32\*.tmp.dll /s
%windir%\system32\SET*.tmp /s
%windir%\*.tmp
C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
C:\Windows\tasks\GoogleUpdateTaskMachineUA.job
C:\Program Files (x86)\IObit
C:\ProgramData\IObit
C:\Windows\Tasks\Adobe Flash Player Updater.job

:otl
IE:[b]64bit:[/b] - HKLM\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
IE:[b]64bit:[/b] - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&FORM=IE8SRC
IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&FORM=IE8SRC
IE - HKU\S-1-5-21-4213383215-2496601313-572650833-1000\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
IE - HKU\S-1-5-21-4213383215-2496601313-572650833-1000\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&src=IE-SearchBox&FORM=IE8SRC
[2013.10.17 06:47:47 | 000,478,798 | ---- | M] () (No name found) -- C:\Users\HITTL\AppData\Roaming\Mozilla\Firefox\Profiles\jz76zuw4.default\extensions\toolbar_PTV-RG@apn.ask.com.xpi
File not found (No name found) -- C:\USERS\HITTL\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\JZ76ZUW4.DEFAULT\EXTENSIONS\ASCSURFINGPROTECTION@IOBIT.COM
O2 - BHO: (no name) - {5054562D-5247-006A-76A7-7A786E7484D7} - No CLSID value found.
O3 - HKLM\..\Toolbar: (no name) - {5054562D-5247-006A-76A7-7A786E7484D7} - No CLSID value found.
O15 - HKU\S-1-5-21-4213383215-2496601313-572650833-1000\..Trusted Domains: localhost ([]http in Internet)
O21:[b]64bit:[/b] - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.
[2013.08.25 16:37:07 | 000,000,000 | ---D | M] -- C:\Users\HITTL\AppData\Roaming\IObit
[157 C:\Windows\assembly\NativeImages_v2.0.50727_32\Temp\*.tmp files -> C:\Windows\assembly\NativeImages_v2.0.50727_32\Temp\*.tmp -> ]
[8 C:\Windows\assembly\NativeImages_v2.0.50727_64\Temp\*.tmp files -> C:\Windows\assembly\NativeImages_v2.0.50727_64\Temp\*.tmp -> ]
[1 C:\Windows\Installer\*.tmp files -> C:\Windows\Installer\*.tmp -> ]
[13 C:\Windows\temp\*.tmp files -> C:\Windows\temp\*.tmp -> ]
[4 \Program Files\QGIS Dufour\bin\*.tmp files -> \Program Files\QGIS Dufour\bin\*.tmp -> ]
[2013.11.03 12:38:03 | 000,001,698 | ---- | M] () -- \Users\All Users\IObit\ASCDownloader\Downloader.log
@Alternate Data Stream - 21 bytes -> \Backup\Public\Sony Online Entertainment\Installed Games\Magic The Gathering Tactics\LaunchPad.libs\wws_crashreport_uploader.exe:crc
@Alternate Data Stream - 21 bytes -> \Backup\Public\Sony Online Entertainment\Installed Games\Magic The Gathering Tactics\export_win32\resources\pssg\props\plains_manaDeviceCracked.PSSG.gz:crc
@Alternate Data Stream - 21 bytes -> \Backup\Public\Sony Online Entertainment\Installed Games\Magic The Gathering Tactics\export_win32\resources\particles\cha_fidget_colossus_crack.tga:crc
@Alternate Data Stream - 21 bytes -> \Backup\Public\Sony Online Entertainment\Installed Games\Magic The Gathering Tactics\export_win32\resources\particles\eff_animals_crackedearth.tga:crc
@Alternate Data Stream - 21 bytes -> \Backup\Public\Sony Online Entertainment\Installed Games\Magic The Gathering Tactics\export_win32\resources\gfx\preloaderBG.dds:crc
@Alternate Data Stream - 21 bytes -> \Backup\Public\Sony Online Entertainment\Installed Games\Magic The Gathering Tactics\export_win32\resources\gfx\campaignPreloader.gfx:crc

:reg
[-HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{5054562D-5247-006A-76A7-7A786E7484D7}]
[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Internet Explorer\Toolbar]
"{5054562D-5247-006A-76A7-7A786E7484D7}"=-
[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]
"ISUSScheduler"=-
"CorelDRAW Graphics Suite 11b"=-

Kliknete na Opravit a nechte program pracovat. Pri otazce na restart souhlaste.
Po restartu se objevi novy log, ten sem dejte.

nom · #57 Příspěvek od **nom** » 13 lis 2013 17:15

All processes killed
========== COMMANDS ==========

[EMPTYTEMP]

User: All Users

User: Default
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes

User: Default User
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes

User: DefaultAppPool
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes

User: HITTL
->Temp folder emptied: 14569284 bytes
->Temporary Internet Files folder emptied: 9878670 bytes
->Java cache emptied: 0 bytes
->FireFox cache emptied: 2255822 bytes
->Google Chrome cache emptied: 372457446 bytes
->Flash cache emptied: 835 bytes

User: Public
->Temp folder emptied: 0 bytes

%systemdrive% .tmp files removed: 0 bytes
%systemroot% .tmp files removed: 0 bytes
%systemroot%\System32 .tmp files removed: 0 bytes
%systemroot%\System32 (64bit) .tmp files removed: 0 bytes
%systemroot%\System32\drivers .tmp files removed: 0 bytes
Windows Temp folder emptied: 10670 bytes
%systemroot%\sysnative\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files folder emptied: 50507 bytes
RecycleBin emptied: 0 bytes

Total Files Cleaned = 381,00 mb

[EMPTYFLASH]

User: All Users

User: Default

User: Default User

User: DefaultAppPool

User: HITTL
->Flash cache emptied: 0 bytes

User: Public

Total Flash Files Cleaned = 0,00 mb

Restore point Set: OTL Restore Point
========== SERVICES/DRIVERS ==========
Service AdobeARMservice stopped successfully!
Service AdobeARMservice deleted successfully!
Service gupdate stopped successfully!
Service gupdate deleted successfully!
Service gupdatem stopped successfully!
Service gupdatem deleted successfully!
========== FILES ==========
File/Folder C:\Windows\system32\*.tmp.dll not found.
File/Folder C:\Windows\system32\SET*.tmp not found.
File/Folder C:\Windows\*.tmp not found.
C:\Windows\tasks\GoogleUpdateTaskMachineCore.job moved successfully.
C:\Windows\tasks\GoogleUpdateTaskMachineUA.job moved successfully.
C:\Program Files (x86)\IObit\Smart Defrag 2\Log folder moved successfully.
C:\Program Files (x86)\IObit\Smart Defrag 2\LatestNews folder moved successfully.
C:\Program Files (x86)\IObit\Smart Defrag 2\Freeware folder moved successfully.
C:\Program Files (x86)\IObit\Smart Defrag 2 folder moved successfully.
C:\Program Files (x86)\IObit\Advanced SystemCare Ultimate\Update folder moved successfully.
C:\Program Files (x86)\IObit\Advanced SystemCare Ultimate\SecurityHole_Backup folder moved successfully.
C:\Program Files (x86)\IObit\Advanced SystemCare Ultimate\LatestNews folder moved successfully.
C:\Program Files (x86)\IObit\Advanced SystemCare Ultimate\BrowerProtect\images folder moved successfully.
C:\Program Files (x86)\IObit\Advanced SystemCare Ultimate\BrowerProtect folder moved successfully.
C:\Program Files (x86)\IObit\Advanced SystemCare Ultimate\ASCServiceLog folder moved successfully.
C:\Program Files (x86)\IObit\Advanced SystemCare Ultimate\Antivirus\Scan folder moved successfully.
C:\Program Files (x86)\IObit\Advanced SystemCare Ultimate\Antivirus\Plugins folder moved successfully.
C:\Program Files (x86)\IObit\Advanced SystemCare Ultimate\Antivirus\BackupRec folder moved successfully.
C:\Program Files (x86)\IObit\Advanced SystemCare Ultimate\Antivirus folder moved successfully.
C:\Program Files (x86)\IObit\Advanced SystemCare Ultimate folder moved successfully.
C:\Program Files (x86)\IObit\Advanced SystemCare 6\LatestNews folder moved successfully.
C:\Program Files (x86)\IObit\Advanced SystemCare 6\BrowerProtect\images folder moved successfully.
C:\Program Files (x86)\IObit\Advanced SystemCare 6\BrowerProtect folder moved successfully.
C:\Program Files (x86)\IObit\Advanced SystemCare 6 folder moved successfully.
C:\Program Files (x86)\IObit folder moved successfully.
C:\ProgramData\IObit\ASCDownloader folder moved successfully.
C:\ProgramData\IObit\Advanced SystemCare V6\Log folder moved successfully.
C:\ProgramData\IObit\Advanced SystemCare V6 folder moved successfully.
C:\ProgramData\IObit folder moved successfully.
C:\Windows\Tasks\Adobe Flash Player Updater.job moved successfully.
========== OTL ==========
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope| /E : value set successfully!
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}\ not found.
HKEY_USERS\S-1-5-21-4213383215-2496601313-572650833-1000\Software\Microsoft\Internet Explorer\SearchScopes\\DefaultScope| /E : value set successfully!
Registry key HKEY_USERS\S-1-5-21-4213383215-2496601313-572650833-1000\Software\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}\ not found.
C:\Users\HITTL\AppData\Roaming\Mozilla\Firefox\Profiles\jz76zuw4.default\extensions\toolbar_PTV-RG@apn.ask.com.xpi moved successfully.
Registry key HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{5054562D-5247-006A-76A7-7A786E7484D7}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{5054562D-5247-006A-76A7-7A786E7484D7}\ not found.
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Toolbar\\{5054562D-5247-006A-76A7-7A786E7484D7} deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{5054562D-5247-006A-76A7-7A786E7484D7}\ not found.
Registry key HKEY_USERS\S-1-5-21-4213383215-2496601313-572650833-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\localhost\ deleted successfully.
C:\Users\HITTL\AppData\Roaming\IObit\Smart Defrag 2 folder moved successfully.
C:\Users\HITTL\AppData\Roaming\IObit\Advanced SystemCare V6\SmartRAM folder moved successfully.
C:\Users\HITTL\AppData\Roaming\IObit\Advanced SystemCare V6\Registrycleaner\backup\Registry folder moved successfully.
C:\Users\HITTL\AppData\Roaming\IObit\Advanced SystemCare V6\Registrycleaner\backup folder moved successfully.
C:\Users\HITTL\AppData\Roaming\IObit\Advanced SystemCare V6\Registrycleaner folder moved successfully.
C:\Users\HITTL\AppData\Roaming\IObit\Advanced SystemCare V6\Log folder moved successfully.
C:\Users\HITTL\AppData\Roaming\IObit\Advanced SystemCare V6\Internet Booster folder moved successfully.
C:\Users\HITTL\AppData\Roaming\IObit\Advanced SystemCare V6\EmptyFolder folder moved successfully.
C:\Users\HITTL\AppData\Roaming\IObit\Advanced SystemCare V6\Driver Manager\DriverBackup folder moved successfully.
C:\Users\HITTL\AppData\Roaming\IObit\Advanced SystemCare V6\Driver Manager folder moved successfully.
C:\Users\HITTL\AppData\Roaming\IObit\Advanced SystemCare V6\ClonedFilesScanner folder moved successfully.
C:\Users\HITTL\AppData\Roaming\IObit\Advanced SystemCare V6\Boottime folder moved successfully.
C:\Users\HITTL\AppData\Roaming\IObit\Advanced SystemCare V6\Backup folder moved successfully.
C:\Users\HITTL\AppData\Roaming\IObit\Advanced SystemCare V6 folder moved successfully.
C:\Users\HITTL\AppData\Roaming\IObit folder moved successfully.
C:\Windows\assembly\NativeImages_v2.0.50727_32\Temp\ZAP1084.tmp folder deleted successfully.
C:\Windows\assembly\NativeImages_v2.0.50727_32\Temp\ZAP128C.tmp folder deleted successfully.
C:\Windows\assembly\NativeImages_v2.0.50727_32\Temp\ZAP130D.tmp folder deleted successfully.
C:\Windows\assembly\NativeImages_v2.0.50727_32\Temp\ZAP149C.tmp folder deleted successfully.
C:\Windows\assembly\NativeImages_v2.0.50727_32\Temp\ZAP14A0.tmp folder deleted successfully.
C:\Windows\assembly\NativeImages_v2.0.50727_32\Temp\ZAP155C.tmp folder deleted successfully.
C:\Windows\assembly\NativeImages_v2.0.50727_32\Temp\ZAP15A1.tmp folder deleted successfully.
C:\Windows\assembly\NativeImages_v2.0.50727_32\Temp\ZAP16.tmp folder deleted successfully.
C:\Windows\assembly\NativeImages_v2.0.50727_32\Temp\ZAP1633.tmp folder deleted successfully.
C:\Windows\assembly\NativeImages_v2.0.50727_32\Temp\ZAP167A.tmp folder deleted successfully.
C:\Windows\assembly\NativeImages_v2.0.50727_32\Temp\ZAP183C.tmp folder deleted successfully.
C:\Windows\assembly\NativeImages_v2.0.50727_32\Temp\ZAP18D6.tmp folder deleted successfully.
C:\Windows\assembly\NativeImages_v2.0.50727_32\Temp\ZAP19F3.tmp folder deleted successfully.
C:\Windows\assembly\NativeImages_v2.0.50727_32\Temp\ZAP1D25.tmp folder deleted successfully.
C:\Windows\assembly\NativeImages_v2.0.50727_32\Temp\ZAP1DC9.tmp folder deleted successfully.
C:\Windows\assembly\NativeImages_v2.0.50727_32\Temp\ZAP1E4E.tmp folder deleted successfully.
C:\Windows\assembly\NativeImages_v2.0.50727_32\Temp\ZAP1FD6.tmp folder deleted successfully.
C:\Windows\assembly\NativeImages_v2.0.50727_32\Temp\ZAP2053.tmp folder deleted successfully.
C:\Windows\assembly\NativeImages_v2.0.50727_32\Temp\ZAP20BF.tmp folder deleted successfully.
C:\Windows\assembly\NativeImages_v2.0.50727_32\Temp\ZAP2370.tmp folder deleted successfully.
C:\Windows\assembly\NativeImages_v2.0.50727_32\Temp\ZAP24D2.tmp folder deleted successfully.
C:\Windows\assembly\NativeImages_v2.0.50727_32\Temp\ZAP2592.tmp folder deleted successfully.
C:\Windows\assembly\NativeImages_v2.0.50727_32\Temp\ZAP26D3.tmp folder deleted successfully.
C:\Windows\assembly\NativeImages_v2.0.50727_32\Temp\ZAP283.tmp folder deleted successfully.
C:\Windows\assembly\NativeImages_v2.0.50727_32\Temp\ZAP2877.tmp folder deleted successfully.
C:\Windows\assembly\NativeImages_v2.0.50727_32\Temp\ZAP2A38.tmp folder deleted successfully.
C:\Windows\assembly\NativeImages_v2.0.50727_32\Temp\ZAP2A54.tmp folder deleted successfully.
C:\Windows\assembly\NativeImages_v2.0.50727_32\Temp\ZAP2B3.tmp folder deleted successfully.
C:\Windows\assembly\NativeImages_v2.0.50727_32\Temp\ZAP2CCE.tmp folder deleted successfully.
C:\Windows\assembly\NativeImages_v2.0.50727_32\Temp\ZAP2DA2.tmp folder deleted successfully.
C:\Windows\assembly\NativeImages_v2.0.50727_32\Temp\ZAP3314.tmp folder deleted successfully.
C:\Windows\assembly\NativeImages_v2.0.50727_32\Temp\ZAP34C.tmp folder deleted successfully.
C:\Windows\assembly\NativeImages_v2.0.50727_32\Temp\ZAP353A.tmp folder deleted successfully.
C:\Windows\assembly\NativeImages_v2.0.50727_32\Temp\ZAP3561.tmp folder deleted successfully.
C:\Windows\assembly\NativeImages_v2.0.50727_32\Temp\ZAP363.tmp folder deleted successfully.
C:\Windows\assembly\NativeImages_v2.0.50727_32\Temp\ZAP37D2.tmp folder deleted successfully.
C:\Windows\assembly\NativeImages_v2.0.50727_32\Temp\ZAP3828.tmp folder deleted successfully.
C:\Windows\assembly\NativeImages_v2.0.50727_32\Temp\ZAP38EE.tmp folder deleted successfully.
C:\Windows\assembly\NativeImages_v2.0.50727_32\Temp\ZAP39F8.tmp folder deleted successfully.
C:\Windows\assembly\NativeImages_v2.0.50727_32\Temp\ZAP3A13.tmp folder deleted successfully.
C:\Windows\assembly\NativeImages_v2.0.50727_32\Temp\ZAP3A15.tmp folder deleted successfully.
C:\Windows\assembly\NativeImages_v2.0.50727_32\Temp\ZAP3A44.tmp folder deleted successfully.
C:\Windows\assembly\NativeImages_v2.0.50727_32\Temp\ZAP3AD0.tmp folder deleted successfully.
C:\Windows\assembly\NativeImages_v2.0.50727_32\Temp\ZAP3CDA.tmp folder deleted successfully.
C:\Windows\assembly\NativeImages_v2.0.50727_32\Temp\ZAP3D49.tmp folder deleted successfully.
C:\Windows\assembly\NativeImages_v2.0.50727_32\Temp\ZAP3D83.tmp folder deleted successfully.
C:\Windows\assembly\NativeImages_v2.0.50727_32\Temp\ZAP3F33.tmp folder deleted successfully.
C:\Windows\assembly\NativeImages_v2.0.50727_32\Temp\ZAP3F78.tmp folder deleted successfully.
C:\Windows\assembly\NativeImages_v2.0.50727_32\Temp\ZAP4302.tmp folder deleted successfully.
C:\Windows\assembly\NativeImages_v2.0.50727_32\Temp\ZAP436B.tmp folder deleted successfully.
C:\Windows\assembly\NativeImages_v2.0.50727_32\Temp\ZAP445F.tmp folder deleted successfully.
C:\Windows\assembly\NativeImages_v2.0.50727_32\Temp\ZAP47AF.tmp folder deleted successfully.
C:\Windows\assembly\NativeImages_v2.0.50727_32\Temp\ZAP484C.tmp folder deleted successfully.
C:\Windows\assembly\NativeImages_v2.0.50727_32\Temp\ZAP48FF.tmp folder deleted successfully.
C:\Windows\assembly\NativeImages_v2.0.50727_32\Temp\ZAP4919.tmp folder deleted successfully.
C:\Windows\assembly\NativeImages_v2.0.50727_32\Temp\ZAP4CB.tmp folder deleted successfully.
C:\Windows\assembly\NativeImages_v2.0.50727_32\Temp\ZAP4FA6.tmp folder deleted successfully.
C:\Windows\assembly\NativeImages_v2.0.50727_32\Temp\ZAP5368.tmp folder deleted successfully.
C:\Windows\assembly\NativeImages_v2.0.50727_32\Temp\ZAP53BD.tmp folder deleted successfully.
C:\Windows\assembly\NativeImages_v2.0.50727_32\Temp\ZAP58C1.tmp folder deleted successfully.
C:\Windows\assembly\NativeImages_v2.0.50727_32\Temp\ZAP59A9.tmp folder deleted successfully.
C:\Windows\assembly\NativeImages_v2.0.50727_32\Temp\ZAP5D8E.tmp folder deleted successfully.
C:\Windows\assembly\NativeImages_v2.0.50727_32\Temp\ZAP603D.tmp folder deleted successfully.
C:\Windows\assembly\NativeImages_v2.0.50727_32\Temp\ZAP6418.tmp folder deleted successfully.
C:\Windows\assembly\NativeImages_v2.0.50727_32\Temp\ZAP6564.tmp folder deleted successfully.
C:\Windows\assembly\NativeImages_v2.0.50727_32\Temp\ZAP6603.tmp folder deleted successfully.
C:\Windows\assembly\NativeImages_v2.0.50727_32\Temp\ZAP66E4.tmp folder deleted successfully.
C:\Windows\assembly\NativeImages_v2.0.50727_32\Temp\ZAP68CE.tmp folder deleted successfully.
C:\Windows\assembly\NativeImages_v2.0.50727_32\Temp\ZAP6AA4.tmp folder deleted successfully.
C:\Windows\assembly\NativeImages_v2.0.50727_32\Temp\ZAP6B16.tmp folder deleted successfully.
C:\Windows\assembly\NativeImages_v2.0.50727_32\Temp\ZAP6D2C.tmp folder deleted successfully.
C:\Windows\assembly\NativeImages_v2.0.50727_32\Temp\ZAP6E04.tmp folder deleted successfully.
C:\Windows\assembly\NativeImages_v2.0.50727_32\Temp\ZAP6F76.tmp folder deleted successfully.
C:\Windows\assembly\NativeImages_v2.0.50727_32\Temp\ZAP7046.tmp folder deleted successfully.
C:\Windows\assembly\NativeImages_v2.0.50727_32\Temp\ZAP7333.tmp folder deleted successfully.
C:\Windows\assembly\NativeImages_v2.0.50727_32\Temp\ZAP7365.tmp folder deleted successfully.
C:\Windows\assembly\NativeImages_v2.0.50727_32\Temp\ZAP7503.tmp folder deleted successfully.
C:\Windows\assembly\NativeImages_v2.0.50727_32\Temp\ZAP7B5E.tmp folder deleted successfully.
C:\Windows\assembly\NativeImages_v2.0.50727_32\Temp\ZAP7C1E.tmp folder deleted successfully.
C:\Windows\assembly\NativeImages_v2.0.50727_32\Temp\ZAP7D38.tmp folder deleted successfully.
C:\Windows\assembly\NativeImages_v2.0.50727_32\Temp\ZAP7F02.tmp folder deleted successfully.
C:\Windows\assembly\NativeImages_v2.0.50727_32\Temp\ZAP7F6C.tmp folder deleted successfully.
C:\Windows\assembly\NativeImages_v2.0.50727_32\Temp\ZAP7FE2.tmp folder deleted successfully.
C:\Windows\assembly\NativeImages_v2.0.50727_32\Temp\ZAP854B.tmp folder deleted successfully.
C:\Windows\assembly\NativeImages_v2.0.50727_32\Temp\ZAP86BB.tmp folder deleted successfully.
C:\Windows\assembly\NativeImages_v2.0.50727_32\Temp\ZAP8ADF.tmp folder deleted successfully.
C:\Windows\assembly\NativeImages_v2.0.50727_32\Temp\ZAP8F1A.tmp folder deleted successfully.
C:\Windows\assembly\NativeImages_v2.0.50727_32\Temp\ZAP9063.tmp folder deleted successfully.
C:\Windows\assembly\NativeImages_v2.0.50727_32\Temp\ZAP922D.tmp folder deleted successfully.
C:\Windows\assembly\NativeImages_v2.0.50727_32\Temp\ZAP9375.tmp folder deleted successfully.
C:\Windows\assembly\NativeImages_v2.0.50727_32\Temp\ZAP9387.tmp folder deleted successfully.
C:\Windows\assembly\NativeImages_v2.0.50727_32\Temp\ZAP9721.tmp folder deleted successfully.
C:\Windows\assembly\NativeImages_v2.0.50727_32\Temp\ZAP97CE.tmp folder deleted successfully.
C:\Windows\assembly\NativeImages_v2.0.50727_32\Temp\ZAP9A6E.tmp folder deleted successfully.
C:\Windows\assembly\NativeImages_v2.0.50727_32\Temp\ZAP9AF5.tmp folder deleted successfully.
C:\Windows\assembly\NativeImages_v2.0.50727_32\Temp\ZAP9D64.tmp folder deleted successfully.
C:\Windows\assembly\NativeImages_v2.0.50727_32\Temp\ZAP9DE7.tmp folder deleted successfully.
C:\Windows\assembly\NativeImages_v2.0.50727_32\Temp\ZAP9E41.tmp folder deleted successfully.
C:\Windows\assembly\NativeImages_v2.0.50727_32\Temp\ZAP9F8.tmp folder deleted successfully.
C:\Windows\assembly\NativeImages_v2.0.50727_32\Temp\ZAPA369.tmp folder deleted successfully.
C:\Windows\assembly\NativeImages_v2.0.50727_32\Temp\ZAPA4B1.tmp folder deleted successfully.
C:\Windows\assembly\NativeImages_v2.0.50727_32\Temp\ZAPA50F.tmp folder deleted successfully.
C:\Windows\assembly\NativeImages_v2.0.50727_32\Temp\ZAPA631.tmp folder deleted successfully.
C:\Windows\assembly\NativeImages_v2.0.50727_32\Temp\ZAPA8B2.tmp folder deleted successfully.
C:\Windows\assembly\NativeImages_v2.0.50727_32\Temp\ZAPA8C8.tmp folder deleted successfully.
C:\Windows\assembly\NativeImages_v2.0.50727_32\Temp\ZAPAB4A.tmp folder deleted successfully.
C:\Windows\assembly\NativeImages_v2.0.50727_32\Temp\ZAPAC67.tmp folder deleted successfully.
C:\Windows\assembly\NativeImages_v2.0.50727_32\Temp\ZAPACA1.tmp folder deleted successfully.
C:\Windows\assembly\NativeImages_v2.0.50727_32\Temp\ZAPB268.tmp folder deleted successfully.
C:\Windows\assembly\NativeImages_v2.0.50727_32\Temp\ZAPB8EC.tmp folder deleted successfully.
C:\Windows\assembly\NativeImages_v2.0.50727_32\Temp\ZAPB9A2.tmp folder deleted successfully.
C:\Windows\assembly\NativeImages_v2.0.50727_32\Temp\ZAPBCB9.tmp folder deleted successfully.
C:\Windows\assembly\NativeImages_v2.0.50727_32\Temp\ZAPBD23.tmp folder deleted successfully.
C:\Windows\assembly\NativeImages_v2.0.50727_32\Temp\ZAPBD49.tmp folder deleted successfully.
C:\Windows\assembly\NativeImages_v2.0.50727_32\Temp\ZAPBE4A.tmp folder deleted successfully.
C:\Windows\assembly\NativeImages_v2.0.50727_32\Temp\ZAPBE6B.tmp folder deleted successfully.
C:\Windows\assembly\NativeImages_v2.0.50727_32\Temp\ZAPC0D.tmp folder deleted successfully.
C:\Windows\assembly\NativeImages_v2.0.50727_32\Temp\ZAPC33A.tmp folder deleted successfully.
C:\Windows\assembly\NativeImages_v2.0.50727_32\Temp\ZAPC504.tmp folder deleted successfully.
C:\Windows\assembly\NativeImages_v2.0.50727_32\Temp\ZAPC559.tmp folder deleted successfully.
C:\Windows\assembly\NativeImages_v2.0.50727_32\Temp\ZAPC9A8.tmp folder deleted successfully.
C:\Windows\assembly\NativeImages_v2.0.50727_32\Temp\ZAPCAAD.tmp folder deleted successfully.
C:\Windows\assembly\NativeImages_v2.0.50727_32\Temp\ZAPCC0D.tmp folder deleted successfully.
C:\Windows\assembly\NativeImages_v2.0.50727_32\Temp\ZAPCE1C.tmp folder deleted successfully.
C:\Windows\assembly\NativeImages_v2.0.50727_32\Temp\ZAPD2B4.tmp folder deleted successfully.
C:\Windows\assembly\NativeImages_v2.0.50727_32\Temp\ZAPD43F.tmp folder deleted successfully.
C:\Windows\assembly\NativeImages_v2.0.50727_32\Temp\ZAPD501.tmp folder deleted successfully.
C:\Windows\assembly\NativeImages_v2.0.50727_32\Temp\ZAPD6B0.tmp folder deleted successfully.
C:\Windows\assembly\NativeImages_v2.0.50727_32\Temp\ZAPD7CD.tmp folder deleted successfully.
C:\Windows\assembly\NativeImages_v2.0.50727_32\Temp\ZAPD8C1.tmp folder deleted successfully.
C:\Windows\assembly\NativeImages_v2.0.50727_32\Temp\ZAPD937.tmp folder deleted successfully.
C:\Windows\assembly\NativeImages_v2.0.50727_32\Temp\ZAPDB14.tmp folder deleted successfully.
C:\Windows\assembly\NativeImages_v2.0.50727_32\Temp\ZAPDBB0.tmp folder deleted successfully.
C:\Windows\assembly\NativeImages_v2.0.50727_32\Temp\ZAPDD51.tmp folder deleted successfully.
C:\Windows\assembly\NativeImages_v2.0.50727_32\Temp\ZAPDD68.tmp folder deleted successfully.
C:\Windows\assembly\NativeImages_v2.0.50727_32\Temp\ZAPDE10.tmp folder deleted successfully.
C:\Windows\assembly\NativeImages_v2.0.50727_32\Temp\ZAPE0FD.tmp folder deleted successfully.
C:\Windows\assembly\NativeImages_v2.0.50727_32\Temp\ZAPE366.tmp folder deleted successfully.
C:\Windows\assembly\NativeImages_v2.0.50727_32\Temp\ZAPE3C5.tmp folder deleted successfully.
C:\Windows\assembly\NativeImages_v2.0.50727_32\Temp\ZAPE437.tmp folder deleted successfully.
C:\Windows\assembly\NativeImages_v2.0.50727_32\Temp\ZAPE45E.tmp folder deleted successfully.
C:\Windows\assembly\NativeImages_v2.0.50727_32\Temp\ZAPE5D.tmp folder deleted successfully.
C:\Windows\assembly\NativeImages_v2.0.50727_32\Temp\ZAPE8D.tmp folder deleted successfully.
C:\Windows\assembly\NativeImages_v2.0.50727_32\Temp\ZAPEC58.tmp folder deleted successfully.
C:\Windows\assembly\NativeImages_v2.0.50727_32\Temp\ZAPECA9.tmp folder deleted successfully.
C:\Windows\assembly\NativeImages_v2.0.50727_32\Temp\ZAPEE02.tmp folder deleted successfully.
C:\Windows\assembly\NativeImages_v2.0.50727_32\Temp\ZAPF2A6.tmp folder deleted successfully.
C:\Windows\assembly\NativeImages_v2.0.50727_32\Temp\ZAPF4BE.tmp folder deleted successfully.
C:\Windows\assembly\NativeImages_v2.0.50727_32\Temp\ZAPF6A3.tmp folder deleted successfully.
C:\Windows\assembly\NativeImages_v2.0.50727_32\Temp\ZAPF6B4.tmp folder deleted successfully.
C:\Windows\assembly\NativeImages_v2.0.50727_32\Temp\ZAPF89D.tmp folder deleted successfully.
C:\Windows\assembly\NativeImages_v2.0.50727_32\Temp\ZAPF95.tmp folder deleted successfully.
C:\Windows\assembly\NativeImages_v2.0.50727_32\Temp\ZAPFB3B.tmp folder deleted successfully.
C:\Windows\assembly\NativeImages_v2.0.50727_32\Temp\ZAPFCAC.tmp folder deleted successfully.
C:\Windows\assembly\NativeImages_v2.0.50727_32\Temp\ZAPFCCF.tmp folder deleted successfully.
C:\Windows\assembly\NativeImages_v2.0.50727_32\Temp\ZAPFD72.tmp folder deleted successfully.
C:\Windows\assembly\NativeImages_v2.0.50727_32\Temp\ZAPFE7B.tmp folder deleted successfully.
C:\Windows\assembly\NativeImages_v2.0.50727_64\Temp\ZAP42F2.tmp folder deleted successfully.
C:\Windows\assembly\NativeImages_v2.0.50727_64\Temp\ZAP4C7A.tmp folder deleted successfully.
C:\Windows\assembly\NativeImages_v2.0.50727_64\Temp\ZAP6FB0.tmp folder deleted successfully.
C:\Windows\assembly\NativeImages_v2.0.50727_64\Temp\ZAP76F.tmp folder deleted successfully.
C:\Windows\assembly\NativeImages_v2.0.50727_64\Temp\ZAPADAC.tmp\Narrator.exe deleted successfully.
C:\Windows\assembly\NativeImages_v2.0.50727_64\Temp\ZAPADAC.tmp folder deleted successfully.
C:\Windows\assembly\NativeImages_v2.0.50727_64\Temp\ZAPBFD5.tmp folder deleted successfully.
C:\Windows\assembly\NativeImages_v2.0.50727_64\Temp\ZAPE291.tmp folder deleted successfully.
C:\Windows\assembly\NativeImages_v2.0.50727_64\Temp\ZAPE56E.tmp folder deleted successfully.
C:\Windows\Installer\MSI9F1.tmp deleted successfully.
\Program Files\QGIS Dufour\bin\pyuic4.bat.tmpl deleted successfully.
\Program Files\QGIS Dufour\bin\qgis-browser.bat.tmpl deleted successfully.
\Program Files\QGIS Dufour\bin\qgis.bat.tmpl deleted successfully.
\Program Files\QGIS Dufour\bin\qt.conf.tmpl deleted successfully.
File \Users\All Users\IObit\ASCDownloader\Downloader.log not found.
ADS \Backup\Public\Sony Online Entertainment\Installed Games\Magic The Gathering Tactics\LaunchPad.libs\wws_crashreport_uploader.exe:crc deleted successfully.
ADS \Backup\Public\Sony Online Entertainment\Installed Games\Magic The Gathering Tactics\export_win32\resources\pssg\props\plains_manaDeviceCracked.PSSG.gz:crc deleted successfully.
ADS \Backup\Public\Sony Online Entertainment\Installed Games\Magic The Gathering Tactics\export_win32\resources\particles\cha_fidget_colossus_crack.tga:crc deleted successfully.
ADS \Backup\Public\Sony Online Entertainment\Installed Games\Magic The Gathering Tactics\export_win32\resources\particles\eff_animals_crackedearth.tga:crc deleted successfully.
ADS \Backup\Public\Sony Online Entertainment\Installed Games\Magic The Gathering Tactics\export_win32\resources\gfx\preloaderBG.dds:crc deleted successfully.
ADS \Backup\Public\Sony Online Entertainment\Installed Games\Magic The Gathering Tactics\export_win32\resources\gfx\campaignPreloader.gfx:crc deleted successfully.
========== REGISTRY ==========
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{5054562D-5247-006A-76A7-7A786E7484D7}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{5054562D-5247-006A-76A7-7A786E7484D7}\ not found.
Registry value HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Internet Explorer\Toolbar\\{5054562D-5247-006A-76A7-7A786E7484D7} not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{5054562D-5247-006A-76A7-7A786E7484D7}\ not found.
Registry value HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run\\ISUSScheduler deleted successfully.
Registry value HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run\\CorelDRAW Graphics Suite 11b deleted successfully.

OTL by OldTimer - Version 3.2.69.0 log created on 11132013_171006

Files\Folders moved on Reboot...
C:\Users\HITTL\AppData\Local\Temp\FXSAPIDebugLogFile.txt moved successfully.

PendingFileRenameOperations files...

Registry entries deleted on Reboot...

#58 Příspěvek od **Márty84** » 14 lis 2013 02:36

Vsechny tyto programy - vcetne pripadne instalace - spoustejte jako spravce (kliknete na ne pravym mysidlem a zvolte - Spustit jako spravce)

Prejmenujte ComboFix na Uninstall a spustte ho. CF by se mel odinstalovat.

vyosek píše: T-Cleaner http://tharifas.sweb.cz/T-Cleaner.exe
Stahnete a spustte

Pro potvrzeni volby mackejte A, Enter

Po pouziti utilitu smazte

Antiviry mohou utilitu chybne oznacit jako vir - jedna se o falesny poplach - takze v pohode stahnete (pripadne vypnete pri stahovani antivir)

Stahnete OTC http://oldtimer.geekstogo.com/OTC.exe , ulozte a spustte.
Kliknete na napis CleanUp a pote OK - Po uklidu dojde k restartu pc.

Stahnete TFC http://oldtimer.geekstogo.com/TFC.exe , ulozte a spustte
Kliknete na START a pote OK - Po uklidu dojde k restartu pc.
Po pouziti muzete programek smazat

Stahnete Ccleaner http://www.stahuj.centrum.cz/utility_a_ ... /ccleaner/ a spustte.
Pri instalaci pozor na toolbar (ci jine doplnky), jestli vam nabidne jeho instalaci, tak zruste zatrzitko.
Po spusteni se ocitnete ve funkci Cistic. Vlevo je spousta zatrzitek. Pozor dejte hlavne na kos, pokud nechate zatrzene, vzdy ho vysype.
Dale, podle toho jak je nastaven, smaze vsechna hesla ulozena na netu!!! Takze jestli mate nastavene, at si pocitac hesla pamatuje (coz neni pro bezpecnost dobre), budete je muset pak napsat znova rucne (napr mail, facebook, ruzna fora atd.)
Kliknete na Analyzovat a az dokonci analyzu, kliknete na Spustit Cleaner.
Potom kliknete vlevo na funkci Registry
Kliknete na Hledej problemy, kdyz najde, kliknete na Opravit problemy. Nabidne Vam zalohu, tu udelejte a ulozte ji tak, at ji v pripade potreby najdete.
Funkce Nastroje umoznuje odinstalovani programu. Je dukladnejsi nez samotny windows!

Defragmentujte disk(y)
Stahnete program Defraggler http://www.stahuj.centrum.cz/utility_a_ ... efraggler/
Pri instalaci opet pozor na toolbar
Po nainstalovani program spustte a kliknete na Analyzovat, po analyze kliknete na Defragmentovat a programek odvede svou praci.

Pak napiste, jak je na tom pc.

nom · #59 Příspěvek od **nom** » 17 lis 2013 10:26

Stále má NB problém s tím ,že pokud jde do spánku tak se již nevzbudí a stále se resetuje čas na 1.1.2009 0:00 .

#60 Příspěvek od **Márty84** » 17 lis 2013 10:42

To ale vypada na hw problem. Pravdepodobne vadna/vybita zalohovaci baterie v biosu. Budete ji muset zkusit vymenit.

VIRY.CZ

Prosím o preventivku logu, NB se samovolně resetuje

Re: Prosím o preventivku logu, NB se samovolně resetuje

Re: Prosím o preventivku logu, NB se samovolně resetuje

Re: Prosím o preventivku logu, NB se samovolně resetuje

Re: Prosím o preventivku logu, NB se samovolně resetuje

Re: Prosím o preventivku logu, NB se samovolně resetuje

Re: Prosím o preventivku logu, NB se samovolně resetuje

Re: Prosím o preventivku logu, NB se samovolně resetuje

Re: Prosím o preventivku logu, NB se samovolně resetuje

Re: Prosím o preventivku logu, NB se samovolně resetuje

Re: Prosím o preventivku logu, NB se samovolně resetuje

Re: Prosím o preventivku logu, NB se samovolně resetuje

Re: Prosím o preventivku logu, NB se samovolně resetuje

Re: Prosím o preventivku logu, NB se samovolně resetuje

Re: Prosím o preventivku logu, NB se samovolně resetuje

Re: Prosím o preventivku logu, NB se samovolně resetuje