Odvirování PC, zrychlení počítače, vzdálená pomoc prostřednictvím služby neslape.cz

Stále se mi snaží něco otevírat v počítači

Máte problém s virem? Vložte sem log z FRST nebo RSIT.

Moderátor: Moderátoři

Pravidla fóra
Pokud chcete pomoc, vložte log z FRST [návod zde] nebo RSIT [návod zde]

Jednotlivé thready budou po vyřešení uzamčeny. Stejně tak ty, které budou nečinné déle než 14 dní. Vizte Pravidlo o zamykání témat. Děkujeme za pochopení.

!NOVINKA!
Nově lze využívat služby vzdálené pomoci, kdy se k vašemu počítači připojí odborník a bližší informace o problému si od vás získá telefonicky! Více na www.neslape.cz
Zamčeno
Zpráva
Autor
Márty84
VIP
VIP
Příspěvky: 21679
Registrován: 05 pro 2009 20:08
Bydliště: Ostrava

Re: Stále se mi snaží něco otevírat v počítači

#31 Příspěvek od Márty84 »

:!: Presunte ComboFix primo na disk C (takze cesta k nemu bude c:\ComboFix.exe )!
:arrow: Otevrete si poznamkovy blok a zkopirujte do nej tento skript

Kód: Vybrat vše

KillAll::

File::
c:\programdata\Microsoft\BingDesktop\BingCore\temp\tmp5644.exe
c:\programdata\Microsoft\BingDesktop\BingCore\temp\tmpE482.exe
c:\programdata\Microsoft\BingDesktop\BingCore\temp\tmpBE1E.exe

Registry::
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]
"QuickTime Task"=-
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"AdobeAAMUpdater-1.0"=-

RegLock::
[HKEY_USERS\S-1-5-21-145347670-2286349297-2966472825-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.eml\UserChoice]
[HKEY_USERS\S-1-5-21-145347670-2286349297-2966472825-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.vcf\UserChoice]
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}]
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\Elevation]
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\LocalServer32]
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\TypeLib]
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}]
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\ProxyStubClsid32]
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\TypeLib]
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}]
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\Elevation]
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\LocalServer32]
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\TypeLib]
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}]
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\InprocServer32]
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\MiscStatus]
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ProgID]
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\TypeLib]
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\Version]
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}]
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\InprocServer32]
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ProgID]
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\TypeLib]
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\Version]
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}]
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\ProxyStubClsid32]
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\TypeLib]
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Nico Mak Computing\WinZip]
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0000\AllUserSettings]
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0001\AllUserSettings]
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0002\AllUserSettings]
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0003\AllUserSettings]
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\PCW\Security]

Reboot::
Vlevo nahore kliknete na napis Soubor
Kliknete na napis Ulozit jako...
Napiste spravne ten cerveny nazev CFScript a ulozte take primo na C (takze cesta k nemu bude c:\CFScript.txt ).
Vypnete antivir i dalsi pripadne zabezpeceni.
Pretahntete mysi tento vytvoreny textovy dokument nad ikonu ComboFix a pustte.
ComboFix by se mel spustit a vykonat prikazy.
Az skonci (muze dojit k restartu pc), mel by se objevit novy log, ten mi sem zase zkopirujte.

:!: Kdyby po restartu nenabehl windows, restartujte znovu, mackejte klavesu F8 a zvolte - Posledni znama funkcni konfigurace
:!: Kdyz windows nabehne, ale pri spousteni ruznych programu bude hlasena chyba, staci restartovat pc a bude to v poradku
Pokud máte dotaz, který není určen pro veřejnost, můžete mi napsat na mail marty84zavináčforum.viry.cz

Možnost podpořit naše fórum https://platba.viry.cz/payment/

Z časových důvodů teď budu na fóru méně často. V případě delšího čekání na odpověď kontaktujte prosím některého z kolegů (většina má mailovou adresu ve svém podpisu).
Nahoru
Uživatelský avatar
zooh
Návštěvník
Návštěvník
Příspěvky: 86
Registrován: 30 lis 2011 15:41
Bydliště: Mělnický kraj

Re: Stále se mi snaží něco otevírat v počítači

#32 Příspěvek od zooh »

ComboFix 14-01-16.03 - Zora Všelichová 27.01.2014 18:32:14.2.2 - x64
Microsoft Windows 7 Home Premium 6.1.7601.1.1250.420.1029.18.3912.2370 [GMT 1:00]
Spuštěný z: C:\ComboFix.exe
Použité ovládací přepínače :: C:\CFScript.txt
AV: avast! Antivirus *Disabled/Updated* {2B2D1395-420B-D5C9-657E-930FE358FC3C}
FW: avast! Internet Security *Disabled* {131692B0-0864-D491-4E21-3A3A1D8BBB47}
SP: avast! Antivirus *Disabled/Updated* {904CF271-6431-DA47-5FCE-A87D98DFB681}
SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.
FILE ::
"c:\programdata\Microsoft\BingDesktop\BingCore\temp\tmp5644.exe"
"c:\programdata\Microsoft\BingDesktop\BingCore\temp\tmpBE1E.exe"
"c:\programdata\Microsoft\BingDesktop\BingCore\temp\tmpE482.exe"
.
.
((((((((((((((((((((((((( Soubory vytvořené od 2013-12-27 do 2014-01-27 )))))))))))))))))))))))))))))))
.
.
2014-01-27 17:42 . 2014-01-27 17:42 -------- d-----w- c:\users\Default\AppData\Local\temp
2014-01-27 17:42 . 2014-01-27 17:42 -------- d-----w- c:\users\Administrator\AppData\Local\temp
2014-01-25 19:22 . 2014-01-25 19:22 196608 ----a-w- c:\users\Zora Všelichová\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\EPUHelp.exe
2014-01-25 18:38 . 2014-01-25 18:38 -------- d--h--w- c:\programdata\CanonBJ
2014-01-25 18:38 . 2008-02-25 19:00 82944 ----a-w- c:\windows\system32\Spool\prtprocs\x64\CNMPP9I.DLL
2014-01-25 18:38 . 2008-02-25 19:00 27648 ----a-w- c:\windows\system32\Spool\prtprocs\x64\CNMPD9I.DLL
2014-01-25 18:36 . 2008-02-25 19:00 279040 ----a-w- c:\windows\system32\CNMLM9I.DLL
2014-01-25 00:05 . 2013-12-04 03:28 10315576 ----a-w- c:\programdata\Microsoft\Windows Defender\Definition Updates\{7AFD33DB-6710-4DB2-8AD8-A8A12C8762B0}\mpengine.dll
2014-01-25 00:04 . 2014-01-25 00:04 101225 ----a-w- c:\programdata\Microsoft\BingDesktop\BingCore\temp\tmpA61E.exe
2014-01-22 16:36 . 2014-01-22 16:36 82787 ----a-w- c:\programdata\Microsoft\BingDesktop\BingCore\temp\tmp4A90.exe
2014-01-17 19:16 . 2014-01-17 19:16 356352 ----a-w- c:\programdata\Microsoft\BingDesktop\BingCore\temp\tmpBE1E.exe
2014-01-16 22:45 . 2014-01-16 22:45 -------- d-----w- c:\users\Zora Všelichová\AppData\Local\Apple Computer
2014-01-16 02:37 . 2014-01-16 02:37 -------- d-----w- c:\users\Zora Všelichová\AppData\Roaming\Apple Computer
2014-01-16 00:39 . 2014-01-16 00:39 159744 ----a-w- c:\program files\Internet Explorer\Plugins\npqtplugin5.dll
2014-01-16 00:39 . 2014-01-16 00:39 159744 ----a-w- c:\program files (x86)\Mozilla Firefox\plugins\npqtplugin5.dll
2014-01-16 00:39 . 2014-01-16 00:39 159744 ----a-w- c:\program files\Internet Explorer\Plugins\npqtplugin4.dll
2014-01-16 00:39 . 2014-01-16 00:39 159744 ----a-w- c:\program files\Internet Explorer\Plugins\npqtplugin3.dll
2014-01-16 00:39 . 2014-01-16 00:39 159744 ----a-w- c:\program files (x86)\Mozilla Firefox\plugins\npqtplugin4.dll
2014-01-16 00:39 . 2014-01-16 00:39 159744 ----a-w- c:\program files (x86)\Mozilla Firefox\plugins\npqtplugin3.dll
2014-01-16 00:39 . 2014-01-16 00:39 159744 ----a-w- c:\program files\Internet Explorer\Plugins\npqtplugin2.dll
2014-01-16 00:39 . 2014-01-16 00:39 159744 ----a-w- c:\program files (x86)\Mozilla Firefox\plugins\npqtplugin2.dll
2014-01-16 00:39 . 2014-01-16 00:39 159744 ----a-w- c:\program files\Internet Explorer\Plugins\npqtplugin.dll
2014-01-16 00:39 . 2014-01-16 00:39 159744 ----a-w- c:\program files (x86)\Mozilla Firefox\plugins\npqtplugin.dll
2014-01-16 00:38 . 2014-01-16 00:39 -------- d-----w- c:\program files (x86)\QuickTime
2014-01-16 00:38 . 2014-01-16 00:38 -------- d-----w- c:\programdata\Apple Computer
2014-01-16 00:18 . 2014-01-16 00:18 -------- d-----w- c:\program files (x86)\Common Files\Apple
2014-01-16 00:18 . 2014-01-16 00:18 -------- d-----w- c:\users\Zora Všelichová\AppData\Local\Apple
2014-01-16 00:17 . 2014-01-16 00:17 -------- d-----w- c:\program files (x86)\Apple Software Update
2014-01-16 00:17 . 2014-01-16 00:17 -------- d-----w- c:\programdata\Apple
2014-01-15 23:23 . 2004-02-17 09:11 53248 ----a-w- c:\windows\SysWow64\vp6dec_settings.cpl
2014-01-15 23:22 . 2001-10-31 09:14 1122304 ----a-w- c:\windows\SysWow64\mplvpx.dll
2014-01-15 23:22 . 2001-10-31 09:14 77824 ----a-w- c:\windows\SysWow64\mplaw7.dll
2014-01-15 23:22 . 2001-10-31 09:14 77824 ----a-w- c:\windows\SysWow64\mplaa6.dll
2014-01-15 23:22 . 2001-10-31 09:14 65536 ----a-w- c:\windows\SysWow64\mplapx.dll
2014-01-15 23:22 . 2001-10-31 09:14 65536 ----a-w- c:\windows\SysWow64\mplam6.dll
2014-01-15 23:22 . 2001-10-31 09:14 1650688 ----a-w- c:\windows\SysWow64\mplva6.dll
2014-01-15 23:22 . 2001-10-31 09:14 1581056 ----a-w- c:\windows\SysWow64\mplvw7.dll
2014-01-15 23:22 . 2001-10-31 09:14 1552384 ----a-w- c:\windows\SysWow64\mplvm6.dll
2014-01-15 23:22 . 2001-09-17 11:20 19968 ----a-w- c:\windows\SysWow64\cpuinf32.dll
2014-01-15 23:22 . 2014-01-15 23:23 -------- d-----w- c:\program files (x86)\ACE Mega CoDecS Pack
2014-01-15 23:20 . 2014-01-15 23:20 -------- d-----w- c:\program files (x86)\Kodek CZ
2014-01-15 11:04 . 2013-11-27 01:41 343040 ----a-w- c:\windows\system32\drivers\usbhub.sys
2014-01-15 11:04 . 2013-11-27 01:41 99840 ----a-w- c:\windows\system32\drivers\usbccgp.sys
2014-01-15 11:04 . 2013-11-27 01:41 53248 ----a-w- c:\windows\system32\drivers\usbehci.sys
2014-01-15 11:04 . 2013-11-27 01:41 325120 ----a-w- c:\windows\system32\drivers\usbport.sys
2014-01-15 11:04 . 2013-11-27 01:41 25600 ----a-w- c:\windows\system32\drivers\usbohci.sys
2014-01-15 11:04 . 2013-11-27 01:41 30720 ----a-w- c:\windows\system32\drivers\usbuhci.sys
2014-01-15 11:04 . 2013-11-27 01:41 7808 ----a-w- c:\windows\system32\drivers\usbd.sys
2014-01-15 11:04 . 2013-11-26 10:32 3156480 ----a-w- c:\windows\system32\win32k.sys
2014-01-15 11:04 . 2013-11-26 11:40 376768 ----a-w- c:\windows\system32\drivers\netio.sys
2014-01-14 09:51 . 2014-01-14 09:51 -------- d-----w- c:\users\Zora Všelichová\AppData\Local\ElevatedDiagnostics
2014-01-14 00:07 . 2014-01-23 19:05 -------- d-----w- c:\users\Zora Všelichová\AppData\Local\YZDPack
2014-01-14 00:06 . 2014-01-14 00:06 114331 ----a-w- c:\programdata\Microsoft\BingDesktop\BingCore\temp\tmpE482.exe
2014-01-10 00:04 . 2014-01-10 00:04 -------- d-----w- c:\program files\CCleaner
2014-01-07 19:25 . 2014-01-07 19:25 2898479 ----a-w- c:\programdata\Microsoft\BingDesktop\BingCore\temp\tmp5644.exe
2014-01-06 12:21 . 2014-01-09 23:03 -------- d-----w- C:\AdwCleaner
2014-01-05 16:36 . 2014-01-05 16:36 -------- d-----w- c:\users\Zora Všelichová\AppData\Roaming\Malwarebytes
2014-01-05 16:36 . 2014-01-05 16:36 -------- d-----w- c:\programdata\Malwarebytes
2014-01-05 15:00 . 2014-01-07 11:18 -------- d-----w- c:\program files\trend micro
.
.
.
(((((((((((((((((((((((((((((((((((((((( Find3M výpis ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2014-01-16 02:04 . 2013-05-06 12:11 86054176 ----a-w- c:\windows\system32\MRT.exe
2013-12-18 05:13 . 2010-11-21 03:27 270496 ------w- c:\windows\system32\MpSigStub.exe
2013-12-17 11:47 . 2013-12-17 11:47 940032 ----a-w- c:\windows\system32\MsSpellCheckingFacility.exe
2013-12-17 11:47 . 2013-12-17 11:47 194048 ----a-w- c:\windows\SysWow64\elshyph.dll
2013-12-17 11:47 . 2013-12-17 11:47 942592 ----a-w- c:\windows\system32\jsIntl.dll
2013-12-17 11:47 . 2013-12-17 11:47 90112 ----a-w- c:\windows\system32\SetIEInstalledDate.exe
2013-12-17 11:47 . 2013-12-17 11:47 86016 ----a-w- c:\windows\SysWow64\iesysprep.dll
2013-12-17 11:47 . 2013-12-17 11:47 86016 ----a-w- c:\windows\system32\RegisterIEPKEYs.exe
2013-12-17 11:47 . 2013-12-17 11:47 84992 ----a-w- c:\windows\system32\mshtmled.dll
2013-12-17 11:47 . 2013-12-17 11:47 81408 ----a-w- c:\windows\system32\icardie.dll
2013-12-17 11:47 . 2013-12-17 11:47 77312 ----a-w- c:\windows\system32\tdc.ocx
2013-12-17 11:47 . 2013-12-17 11:47 74240 ----a-w- c:\windows\SysWow64\SetIEInstalledDate.exe
2013-12-17 11:47 . 2013-12-17 11:47 71680 ----a-w- c:\windows\SysWow64\RegisterIEPKEYs.exe
2013-12-17 11:47 . 2013-12-17 11:47 645120 ----a-w- c:\windows\SysWow64\jsIntl.dll
2013-12-17 11:47 . 2013-12-17 11:47 626176 ----a-w- c:\windows\system32\msfeeds.dll
2013-12-17 11:47 . 2013-12-17 11:47 62464 ----a-w- c:\windows\SysWow64\tdc.ocx
2013-12-17 11:47 . 2013-12-17 11:47 62464 ----a-w- c:\windows\system32\pngfilt.dll
2013-12-17 11:47 . 2013-12-17 11:47 61952 ----a-w- c:\windows\SysWow64\MshtmlDac.dll
2013-12-17 11:47 . 2013-12-17 11:47 61952 ----a-w- c:\windows\SysWow64\iesetup.dll
2013-12-17 11:47 . 2013-12-17 11:47 616104 ----a-w- c:\windows\system32\ieapfltr.dat
2013-12-17 11:47 . 2013-12-17 11:47 548352 ----a-w- c:\windows\system32\vbscript.dll
2013-12-17 11:47 . 2013-12-17 11:47 52224 ----a-w- c:\windows\system32\msfeedsbs.dll
2013-12-17 11:47 . 2013-12-17 11:47 51200 ----a-w- c:\windows\SysWow64\ieetwproxystub.dll
2013-12-17 11:47 . 2013-12-17 11:47 48640 ----a-w- c:\windows\SysWow64\mshtmler.dll
2013-12-17 11:47 . 2013-12-17 11:47 48640 ----a-w- c:\windows\system32\mshtmler.dll
2013-12-17 11:47 . 2013-12-17 11:47 454656 ----a-w- c:\windows\SysWow64\vbscript.dll
2013-12-17 11:47 . 2013-12-17 11:47 453120 ----a-w- c:\windows\system32\dxtmsft.dll
2013-12-17 11:47 . 2013-12-17 11:47 413696 ----a-w- c:\windows\system32\html.iec
2013-12-17 11:47 . 2013-12-17 11:47 40448 ----a-w- c:\windows\system32\JavaScriptCollectionAgent.dll
2013-12-17 11:47 . 2013-12-17 11:47 36352 ----a-w- c:\windows\SysWow64\imgutil.dll
2013-12-17 11:47 . 2013-12-17 11:47 34816 ----a-w- c:\windows\SysWow64\JavaScriptCollectionAgent.dll
2013-12-17 11:47 . 2013-12-17 11:47 337408 ----a-w- c:\windows\SysWow64\html.iec
2013-12-17 11:47 . 2013-12-17 11:47 30208 ----a-w- c:\windows\system32\licmgr10.dll
2013-12-17 11:47 . 2013-12-17 11:47 296960 ----a-w- c:\windows\system32\dxtrans.dll
2013-12-17 11:47 . 2013-12-17 11:47 263376 ----a-w- c:\windows\system32\iedkcs32.dll
2013-12-17 11:47 . 2013-12-17 11:47 247808 ----a-w- c:\windows\system32\msls31.dll
2013-12-17 11:47 . 2013-12-17 11:47 24576 ----a-w- c:\windows\SysWow64\licmgr10.dll
2013-12-17 11:47 . 2013-12-17 11:47 243200 ----a-w- c:\windows\system32\webcheck.dll
2013-12-17 11:47 . 2013-12-17 11:47 235520 ----a-w- c:\windows\system32\url.dll
2013-12-17 11:47 . 2013-12-17 11:47 235008 ----a-w- c:\windows\system32\elshyph.dll
2013-12-17 11:47 . 2013-12-17 11:47 195584 ----a-w- c:\windows\system32\msrating.dll
2013-12-17 11:47 . 2013-12-17 11:47 182272 ----a-w- c:\windows\SysWow64\msls31.dll
2013-12-17 11:47 . 2013-12-17 11:47 167424 ----a-w- c:\windows\system32\iexpress.exe
2013-12-17 11:47 . 2013-12-17 11:47 151552 ----a-w- c:\windows\SysWow64\iexpress.exe
2013-12-17 11:47 . 2013-12-17 11:47 147968 ----a-w- c:\windows\system32\occache.dll
2013-12-17 11:47 . 2013-12-17 11:47 143872 ----a-w- c:\windows\system32\wextract.exe
2013-12-17 11:47 . 2013-12-17 11:47 139264 ----a-w- c:\windows\SysWow64\wextract.exe
2013-12-17 11:47 . 2013-12-17 11:47 13824 ----a-w- c:\windows\system32\mshta.exe
2013-12-17 11:47 . 2013-12-17 11:47 13312 ----a-w- c:\windows\SysWow64\mshta.exe
2013-12-17 11:47 . 2013-12-17 11:47 13312 ----a-w- c:\windows\system32\msfeedssync.exe
2013-12-17 11:47 . 2013-12-17 11:47 131072 ----a-w- c:\windows\system32\IEAdvpack.dll
2013-12-17 11:47 . 2013-12-17 11:47 1228800 ----a-w- c:\windows\system32\mshtmlmedia.dll
2013-12-17 11:47 . 2013-12-17 11:47 112128 ----a-w- c:\windows\SysWow64\ieUnatt.exe
2013-12-17 11:47 . 2013-12-17 11:47 111616 ----a-w- c:\windows\SysWow64\IEAdvpack.dll
2013-12-17 11:47 . 2013-12-17 11:47 105984 ----a-w- c:\windows\system32\iesysprep.dll
2013-12-17 11:47 . 2013-12-17 11:47 1051136 ----a-w- c:\windows\SysWow64\mshtmlmedia.dll
2013-12-17 11:47 . 2013-12-17 11:47 101376 ----a-w- c:\windows\system32\inseng.dll
2013-12-17 11:47 . 2013-12-17 11:47 83968 ----a-w- c:\windows\system32\MshtmlDac.dll
2013-12-17 11:47 . 2013-12-17 11:47 774144 ----a-w- c:\windows\system32\jscript.dll
2013-12-17 11:47 . 2013-12-17 11:47 48128 ----a-w- c:\windows\system32\imgutil.dll
2013-12-17 11:47 . 2013-12-17 11:47 135680 ----a-w- c:\windows\system32\iepeers.dll
2013-12-11 10:10 . 2013-05-05 08:55 71048 ----a-w- c:\windows\SysWow64\FlashPlayerCPLApp.cpl
2013-12-11 10:10 . 2013-05-05 08:55 692616 ----a-w- c:\windows\SysWow64\FlashPlayerApp.exe
2013-11-26 11:54 . 2013-12-18 12:20 23183360 ----a-w- c:\windows\system32\mshtml.dll
2013-11-26 10:19 . 2013-12-18 12:21 2724864 ----a-w- c:\windows\system32\mshtml.tlb
2013-11-26 10:18 . 2013-12-18 12:21 4096 ----a-w- c:\windows\system32\ieetwcollectorres.dll
2013-11-26 09:48 . 2013-12-18 12:20 66048 ----a-w- c:\windows\system32\iesetup.dll
2013-11-26 09:46 . 2013-12-18 12:20 48640 ----a-w- c:\windows\system32\ieetwproxystub.dll
2013-11-26 09:41 . 2013-12-18 12:20 2764288 ----a-w- c:\windows\system32\iertutil.dll
2013-11-26 09:29 . 2013-12-18 12:21 53760 ----a-w- c:\windows\system32\jsproxy.dll
2013-11-26 09:27 . 2013-12-18 12:20 33792 ----a-w- c:\windows\system32\iernonce.dll
2013-11-26 09:23 . 2013-12-18 12:21 2724864 ----a-w- c:\windows\SysWow64\mshtml.tlb
2013-11-26 09:21 . 2013-12-18 12:21 574976 ----a-w- c:\windows\system32\ieui.dll
2013-11-26 09:18 . 2013-12-18 12:20 139264 ----a-w- c:\windows\system32\ieUnatt.exe
2013-11-26 09:18 . 2013-12-18 12:20 111616 ----a-w- c:\windows\system32\ieetwcollector.exe
2013-11-26 09:16 . 2013-12-18 12:20 708608 ----a-w- c:\windows\system32\jscript9diag.dll
2013-11-26 08:57 . 2013-12-18 12:20 218624 ----a-w- c:\windows\system32\ie4uinit.exe
2013-11-26 08:35 . 2013-12-18 12:20 5769216 ----a-w- c:\windows\system32\jscript9.dll
2013-11-26 08:28 . 2013-12-18 12:20 553472 ----a-w- c:\windows\SysWow64\jscript9diag.dll
2013-11-26 08:16 . 2013-12-18 12:20 4243968 ----a-w- c:\windows\SysWow64\jscript9.dll
2013-11-26 08:02 . 2013-12-18 12:20 1995264 ----a-w- c:\windows\system32\inetcpl.cpl
2013-11-26 07:48 . 2013-12-18 12:20 12996608 ----a-w- c:\windows\system32\ieframe.dll
2013-11-26 07:32 . 2013-12-18 12:20 1928192 ----a-w- c:\windows\SysWow64\inetcpl.cpl
2013-11-26 07:07 . 2013-12-18 12:20 2334208 ----a-w- c:\windows\system32\wininet.dll
2013-11-26 06:40 . 2013-12-18 12:20 1395200 ----a-w- c:\windows\system32\urlmon.dll
2013-11-26 06:34 . 2013-12-18 12:20 817664 ----a-w- c:\windows\system32\ieapfltr.dll
2013-11-26 06:33 . 2013-12-18 12:20 1820160 ----a-w- c:\windows\SysWow64\wininet.dll
2013-11-26 00:26 . 2013-11-26 00:26 2179072 ----a-w- c:\programdata\Microsoft\BingDesktop\BingCore\BingDesktopCore.dll
2013-11-23 18:26 . 2013-12-11 22:21 417792 ----a-w- c:\windows\SysWow64\WMPhoto.dll
2013-11-23 17:47 . 2013-12-11 22:21 465920 ----a-w- c:\windows\system32\WMPhoto.dll
2013-11-20 17:52 . 2013-06-17 14:26 46368 ----a-w- c:\windows\system32\drivers\avgtpx64.sys
2013-11-12 02:23 . 2013-12-11 22:21 2048 ----a-w- c:\windows\system32\tzres.dll
2013-11-12 02:07 . 2013-12-11 22:21 2048 ----a-w- c:\windows\SysWow64\tzres.dll
2013-10-30 02:32 . 2013-12-11 22:21 335360 ----a-w- c:\windows\system32\msieftp.dll
2013-10-30 02:19 . 2013-12-11 22:21 301568 ----a-w- c:\windows\SysWow64\msieftp.dll
.
.
(((((((((((((((((((((((((((((((((( Spouštěcí body v registru )))))))))))))))))))))))))))))))))))))))))))))
.
.
*Poznámka* prázdné záznamy a legitimní výchozí údaje nejsou zobrazeny.
REGEDIT4
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"MyTomTomSA.exe"="c:\program files (x86)\MyTomTom 3\MyTomTomSA.exe" [2013-08-01 458680]
"EPLTarget\P0000000000000000"="c:\windows\system32\spool\DRIVERS\x64\3\E_IATIILE.EXE" [2012-02-29 283232]
"YZDPack"="c:\users\Zora Všelichová\AppData\Local\YZDPack\SystemPlugin.dll" [2014-01-23 19456]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]
"IAStorIcon"="c:\program files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIconLaunch.exe" [2012-02-29 56088]
"LManager"="c:\program files (x86)\Launch Manager\LManager.exe" [2012-03-23 1105488]
"avast"="c:\program files\AVAST Software\Avast\avastUI.exe" [2013-05-09 4858968]
"EEventManager"="c:\program files (x86)\Epson Software\Event Manager\EEventManager.exe" [2011-10-31 1058400]
"APSDaemon"="c:\program files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe" [2013-04-21 59720]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorAdmin"= 5 (0x5)
"ConsentPromptBehaviorUser"= 3 (0x3)
"EnableUIADesktopToggle"= 0 (0x0)
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\drivers32]
"aux1"=wdmaud.drv
.
R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [x]
R3 Huawei;HUAWEI Mobile Connect - USB Smart Card Reader;c:\windows\system32\DRIVERS\ewdcsc.sys;c:\windows\SYSNATIVE\DRIVERS\ewdcsc.sys [x]
R3 hwusbdev;Huawei DataCard USB PNP Device;c:\windows\system32\DRIVERS\ewusbdev.sys;c:\windows\SYSNATIVE\DRIVERS\ewusbdev.sys [x]
R3 IEEtwCollectorService;Internet Explorer ETW Collector Service;c:\windows\system32\IEEtwCollector.exe;c:\windows\SYSNATIVE\IEEtwCollector.exe [x]
R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys;c:\windows\SYSNATIVE\drivers\tsusbflt.sys [x]
R3 TsUsbGD;Remote Desktop Generic USB Device;c:\windows\system32\drivers\TsUsbGD.sys;c:\windows\SYSNATIVE\drivers\TsUsbGD.sys [x]
R3 WatAdminSvc;Služba Technologie aktivace Windows;c:\windows\system32\Wat\WatAdminSvc.exe;c:\windows\SYSNATIVE\Wat\WatAdminSvc.exe [x]
S0 aswRvrt;aswRvrt; [x]
S0 aswVmm;aswVmm; [x]
S0 PxHlpa64;PxHlpa64;c:\windows\System32\Drivers\PxHlpa64.sys;c:\windows\SYSNATIVE\Drivers\PxHlpa64.sys [x]
S0 sptd;sptd;c:\windows\\SystemRoot\System32\Drivers\sptd.sys;c:\windows\\SystemRoot\System32\Drivers\sptd.sys [x]
S1 aswKbd;aswKbd; [x]
S1 aswSnx;aswSnx; [x]
S1 aswSP;aswSP; [x]
S2 ABBYY.Licensing.FineReader.Sprint.9.0;ABBYY FineReader 9.0 Sprint Licensing Service;c:\program files (x86)\Common Files\ABBYY\FineReaderSprint\9.00\Licensing\NetworkLicenseServer.exe;c:\program files (x86)\Common Files\ABBYY\FineReaderSprint\9.00\Licensing\NetworkLicenseServer.exe [x]
S2 aswFsBlk;aswFsBlk; [x]
S2 aswMonFlt;aswMonFlt;c:\windows\system32\drivers\aswMonFlt.sys;c:\windows\SYSNATIVE\drivers\aswMonFlt.sys [x]
S2 DsiWMIService;Dritek WMI Service;c:\program files (x86)\Launch Manager\dsiwmis.exe;c:\program files (x86)\Launch Manager\dsiwmis.exe [x]
S2 EpsonCustomerResearchParticipation;EpsonCustomerResearchParticipation;c:\program files\EPSON\EpsonCustomerResearchParticipation\EPCP.exe;c:\program files\EPSON\EpsonCustomerResearchParticipation\EPCP.exe [x]
S2 EpsonScanSvc;Epson Scanner Service;c:\windows\system32\EscSvc64.exe;c:\windows\SYSNATIVE\EscSvc64.exe [x]
S2 IAStorDataMgrSvc;Úložná technologie Intel(R) Rapid;c:\program files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe;c:\program files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe [x]
S2 Intel(R) Capability Licensing Service Interface;Intel(R) Capability Licensing Service Interface;c:\program files\Intel\iCLS Client\HeciServer.exe;c:\program files\Intel\iCLS Client\HeciServer.exe [x]
S2 jhi_service;Intel(R) Dynamic Application Loader Host Interface Service;c:\program files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe;c:\program files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [x]
S2 UNS;Intel(R) Management and Security Application User Notification Service;c:\program files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe;c:\program files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe [x]
S3 b57xdbd;Broadcom xD Picture Bus Driver Service;c:\windows\system32\DRIVERS\b57xdbd.sys;c:\windows\SYSNATIVE\DRIVERS\b57xdbd.sys [x]
S3 b57xdmp;Broadcom xD Picture vstorp client drv;c:\windows\system32\DRIVERS\b57xdmp.sys;c:\windows\SYSNATIVE\DRIVERS\b57xdmp.sys [x]
S3 bScsiMSa;bScsiMSa;c:\windows\system32\DRIVERS\bScsiMSa.sys;c:\windows\SYSNATIVE\DRIVERS\bScsiMSa.sys [x]
S3 bScsiSDa;bScsiSDa;c:\windows\system32\DRIVERS\bScsiSDa.sys;c:\windows\SYSNATIVE\DRIVERS\bScsiSDa.sys [x]
S3 IntcDAud;Intel(R) Display Audio;c:\windows\system32\DRIVERS\IntcDAud.sys;c:\windows\SYSNATIVE\DRIVERS\IntcDAud.sys [x]
S3 k57nd60a;Broadcom NetLink (TM) Gigabit Ethernet - NDIS 6.0;c:\windows\system32\DRIVERS\k57nd60a.sys;c:\windows\SYSNATIVE\DRIVERS\k57nd60a.sys [x]
S3 SmbDrv;SmbDrv;c:\windows\system32\DRIVERS\Smb_driver.sys;c:\windows\SYSNATIVE\DRIVERS\Smb_driver.sys [x]
.
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\active setup\installed components\{8A69D345-D564-463c-AFF1-A69D9E530F96}]
2014-01-15 22:21 1211672 ----a-w- c:\program files (x86)\Google\Chrome\Application\32.0.1700.76\Installer\chrmstp.exe
.
.
--------- X64 Entries -----------
.
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\00avast]
@="{472083B0-C522-11CF-8763-00608CC02F24}"
[HKEY_CLASSES_ROOT\CLSID\{472083B0-C522-11CF-8763-00608CC02F24}]
2013-05-09 08:58 133840 ----a-w- c:\program files\AVAST Software\Avast\ashShA64.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\1BingDesktopOverlays]
@="{B82655E9-B81D-4A97-8154-0D84A4C048E4}"
[HKEY_CLASSES_ROOT\CLSID\{B82655E9-B81D-4A97-8154-0D84A4C048E4}]
2013-11-26 00:26 2492416 ----a-w- c:\programdata\Microsoft\BingDesktop\BingCore\BingDesktopOverlays.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\GDriveBlacklistedOverlay]
@="{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D42}"
[HKEY_CLASSES_ROOT\CLSID\{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D42}]
2013-12-06 14:47 778704 ----a-w- c:\program files (x86)\Google\Drive\googledrivesync64.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\GDriveSharedEditOverlay]
@="{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D44}"
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\GDriveSharedOverlay]
@="{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D44}"
[HKEY_CLASSES_ROOT\CLSID\{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D44}]
2013-12-06 14:47 778704 ----a-w- c:\program files (x86)\Google\Drive\googledrivesync64.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\GDriveSharedEditOverlay]
@="{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D44}"
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\GDriveSharedOverlay]
@="{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D44}"
[HKEY_CLASSES_ROOT\CLSID\{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D44}]
2013-12-06 14:47 778704 ----a-w- c:\program files (x86)\Google\Drive\googledrivesync64.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\GDriveSharedViewOverlay]
@="{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D43}"
[HKEY_CLASSES_ROOT\CLSID\{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D43}]
2013-12-06 14:47 778704 ----a-w- c:\program files (x86)\Google\Drive\googledrivesync64.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\GDriveSyncedOverlay]
@="{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D40}"
[HKEY_CLASSES_ROOT\CLSID\{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D40}]
2013-12-06 14:47 778704 ----a-w- c:\program files (x86)\Google\Drive\googledrivesync64.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\GDriveSyncingOverlay]
@="{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D41}"
[HKEY_CLASSES_ROOT\CLSID\{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D41}]
2013-12-06 14:47 778704 ----a-w- c:\program files (x86)\Google\Drive\googledrivesync64.dll
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"IgfxTray"="c:\windows\system32\igfxtray.exe" [2012-04-23 170264]
"HotKeysCmds"="c:\windows\system32\hkcmd.exe" [2012-04-23 398616]
"Persistence"="c:\windows\system32\igfxpers.exe" [2012-04-23 439064]
"SynTPEnh"="c:\program files (x86)\Synaptics\SynTP\SynTPEnh.exe" [BU]
"RTHDVCPL"="c:\program files\Realtek\Audio\HDA\RAVCpl64.exe" [2011-12-27 12343400]
.
------- Doplňkový sken -------
.
uLocal Page = c:\windows\system32\blank.htm
uStart Page = hxxp://www.google.com
mLocal Page = c:\windows\SysWOW64\blank.htm
TCP: DhcpNameServer = 194.228.41.113 160.218.161.54
FF - ProfilePath - c:\users\Zora Všelichová\AppData\Roaming\Mozilla\Firefox\Profiles\7g1a9gkq.default\
FF - prefs.js: browser.startup.homepage - hxxp://www.seznam.cz/
FF - ExtSQL: 2013-12-12 20:59; jid0-lW9gUBSnRfZgrKpg0RmiLTIco4I@jetpack; c:\users\Zora Všelichová\AppData\Roaming\Mozilla\Firefox\Profiles\7g1a9gkq.default\extensions\jid0-lW9gUBSnRfZgrKpg0RmiLTIco4I@jetpack.xpi
.
- - - - NEPLATNÉ POLOŽKY ODSTRANĚNÉ Z REGISTRU - - - -
.
AddRemove-Cool's_Codec_pack_4.12 - c:\windows\iun6002.exe
.
.
.
--------------------- ZAMKNUTÉ KLÍČE V REGISTRU ---------------------
.
[HKEY_USERS\S-1-5-21-145347670-2286349297-2966472825-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.*j*p*g*mages*ŃĽw\OpenWithList]
@Class="Shell"
.
[HKEY_USERS\S-1-5-21-145347670-2286349297-2966472825-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.*p*n*g*ges*|0WI\OpenWithList]
@Class="Shell"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil64_11_9_900_170_ActiveX.exe,-101"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\Elevation]
"Enabled"=dword:00000001
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\LocalServer32]
@="c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil64_11_9_900_170_ActiveX.exe"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="IFlashBroker5"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Nico Mak Computing\WinZip]
"SymbolicLinkValue"=hex(6):5c,00,52,00,65,00,67,00,69,00,73,00,74,00,72,00,79,
00,5c,00,4d,00,41,00,43,00,48,00,49,00,4e,00,45,00,5c,00,53,00,6f,00,66,00,\
.
------------------------ Jiné spuštené procesy ------------------------
.
c:\program files\AVAST Software\Avast\AvastSvc.exe
c:\program files (x86)\Common Files\EPSON\EBAPI\eEBSVC.exe
c:\program files (x86)\Google\Update\GoogleUpdate.exe
c:\program files (x86)\Google\Update\1.3.22.3\GoogleCrashHandler.exe
c:\program files (x86)\Launch Manager\LMworker.exe
c:\program files (x86)\Launch Manager\LMutilps32.exe
c:\program files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
.
**************************************************************************
.
Celkový čas: 2014-01-27 18:51:04 - počítač byl restartován
ComboFix-quarantined-files.txt 2014-01-27 17:51
ComboFix2.txt 2014-01-19 23:58
.
Před spuštěním: Volných bajtů: 237 252 476 928
Po spuštění: Volných bajtů: 236 842 856 448
.
- - End Of File - - C96B24BBA78DF1CCE2F886C82D41950F
Nahoru
Márty84
VIP
VIP
Příspěvky: 21679
Registrován: 05 pro 2009 20:08
Bydliště: Ostrava

Re: Stále se mi snaží něco otevírat v počítači

#33 Příspěvek od Márty84 »

:arrow: Presunte ComboFix opet na plochu.


:!: Vsechny tyto programy - vcetne pripadne instalace - spoustejte jako spravce (kliknete na ne pravym mysidlem a zvolte - Spustit jako spravce)

:arrow: Prejmenujte ComboFix na Uninstall a spustte ho. CF by se mel odinstalovat.

:arrow:
vyosek píše: :arrow: T-Cleaner http://tharifas.sweb.cz/T-Cleaner.exe
  • Stahnete a spustte
  • Pro potvrzeni volby mackejte A, Enter
  • Po pouziti utilitu smazte
  • Antiviry mohou utilitu chybne oznacit jako vir - jedna se o falesny poplach - takze v pohode stahnete (pripadne vypnete pri stahovani antivir)

:???: Nastala nejaka zmena?
Pokud máte dotaz, který není určen pro veřejnost, můžete mi napsat na mail marty84zavináčforum.viry.cz

Možnost podpořit naše fórum https://platba.viry.cz/payment/

Z časových důvodů teď budu na fóru méně často. V případě delšího čekání na odpověď kontaktujte prosím některého z kolegů (většina má mailovou adresu ve svém podpisu).
Nahoru
Uživatelský avatar
zooh
Návštěvník
Návštěvník
Příspěvky: 86
Registrován: 30 lis 2011 15:41
Bydliště: Mělnický kraj

Re: Stále se mi snaží něco otevírat v počítači

#34 Příspěvek od zooh »

Márty84 píše::arrow:


:???: Nastala nejaka zmena?

Zatím nic nevyskakuje :) snad mu to chvíli vydrží. Díky
Nahoru
Márty84
VIP
VIP
Příspěvky: 21679
Registrován: 05 pro 2009 20:08
Bydliště: Ostrava

Re: Stále se mi snaží něco otevírat v počítači

#35 Příspěvek od Márty84 »

Nemate zac :)

Necham tedy tema chvili otevrene, kdyby nahodou.



27.2. :lock: http://forum.viry.cz/viewtopic.php?f=12&t=123975
Pokud máte dotaz, který není určen pro veřejnost, můžete mi napsat na mail marty84zavináčforum.viry.cz

Možnost podpořit naše fórum https://platba.viry.cz/payment/

Z časových důvodů teď budu na fóru méně často. V případě delšího čekání na odpověď kontaktujte prosím některého z kolegů (většina má mailovou adresu ve svém podpisu).
Nahoru
Zamčeno

Zpět na „Řešení problémů, logy“