Tato webová stránka není dostupná a padání exploreru

[Márty84]

Tak ten nouzak zkuste

[Mara1681]

Též to nefunguje...
Ach jo, já to nechci reinstalovat...

[Márty84]

Ja tam bohuzel nic nevidim. Logy vypadaji v poradku.


Pokud nemate, zazalohujte si radeji dulezita data (fotky, dokumenty, atd.)

Nepouzivejte ComboFix bez predchozi domluvy! Je to poruseni pravidel fora a ztratite tim narok na pomoc!

Stahnete ComboFix http://download.bleepingcomputer.com/sUBs/ComboFix.exe a ulozte ho na plochu.
Vypnete antivir i dalsi pripadne zabezpeceni.
Kliknete na ComboFix pravym mysidlem a levym na Spustit jako spravce
Odsouhlaste licencni podminky a nechte program pracovat. Jestli vam nabidne instalaci Konzoly pro zotaveni, souhlaste.
Po dobu skenu nic nespoustejte, nikam neklikejte.
Po dokonceni skenovani (muze dojit i k restartu pc) by se mel vytvorit log, ktery bude umisteny zde C:\ComboFix.txt
Jeho obsah sem zkopirujte

Kdyby po restartu nenabehl windows, restartujte znovu, mackejte klavesu F8 a zvolte - Posledni znama funkcni konfigurace
Kdyz windows nabehne, ale pri spousteni ruznych programu bude hlasena chyba, staci restartovat pc a bude to v poradku

[Mara1681]

ComboFix 14-02-19.01 - Mara . 02. 2014 14:30:48.1.4 - x64
Microsoft Windows 8 Pro 6.2.9200.0.1250.420.1029.18.8190.7172 [GMT 1:00]
Spuštěný z: c:\users\Mara\Desktop\ComboFix.exe
AV: ESET Smart Security 7.0 *Disabled/Updated* {19259FAE-8396-A113-46DB-15B0E7DFA289}
AV: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
FW: ESET Personální firewall *Disabled* {211E1E8B-C9F9-A04B-6D84-BC85190CE5F2}
SP: ESET Smart Security 7.0 *Disabled/Updated* {A2447E4A-A5AC-AE9D-7C6B-2EC29C58E834}
SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
* Vytvořen nový Bod Obnovení
.
.
((((((((((((((((((((((((((((((((((((((( Ostatní výmazy )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
c:\windows\Downloaded Program Files\IDropPTB.dll
c:\windows\SysWow64\frapsvid.dll
.
.
((((((((((((((((((((((((( Soubory vytvořené od 2014-01-20 do 2014-02-20 )))))))))))))))))))))))))))))))
.
.
2014-02-19 17:11 . 2014-02-19 17:11 -------- d-----w- c:\users\Mara\AppData\Local\ElevatedDiagnostics
2014-02-19 16:47 . 2014-02-19 16:56 -------- d-----w- c:\users\Mara\AppData\Roaming\.minecraft
2014-02-18 19:51 . 2014-02-18 23:12 -------- d-----w- c:\users\Mara\AppData\Roaming\.mojam
2014-02-18 19:18 . 2014-02-18 19:18 -------- d-----w- c:\windows\system32\save
2014-02-18 18:41 . 2014-02-18 18:41 -------- d-----w- c:\users\Mara\AppData\Local\Unity
2014-02-16 17:34 . 2014-02-16 17:34 159744 ----a-w- c:\program files\Internet Explorer\Plugins\npqtplugin5.dll
2014-02-16 17:34 . 2014-02-16 17:34 159744 ----a-w- c:\program files\Internet Explorer\Plugins\npqtplugin4.dll
2014-02-16 17:34 . 2014-02-16 17:34 159744 ----a-w- c:\program files\Internet Explorer\Plugins\npqtplugin3.dll
2014-02-16 17:34 . 2014-02-16 17:34 159744 ----a-w- c:\program files\Internet Explorer\Plugins\npqtplugin2.dll
2014-02-16 17:34 . 2014-02-16 17:34 159744 ----a-w- c:\program files\Internet Explorer\Plugins\npqtplugin.dll
2014-02-16 17:33 . 2014-02-16 17:34 -------- d-----w- c:\program files (x86)\QuickTime
2014-02-16 17:33 . 2014-02-16 17:33 -------- d-----w- c:\program files (x86)\Apple Software Update
2014-02-16 16:41 . 2014-02-16 16:41 -------- d-----w- c:\program files\Common Files\Adobe
2014-02-16 13:50 . 2014-02-18 20:00 -------- d-----w- c:\users\Mara\AppData\Local\CrashDumps
2014-02-15 13:24 . 2014-02-15 13:24 -------- d-----w- c:\users\Mara\AppData\Roaming\Malwarebytes
2014-02-15 13:24 . 2014-02-15 13:24 -------- d-----w- c:\programdata\Malwarebytes
2014-02-15 13:24 . 2014-02-15 13:24 -------- d-----w- C:\Malwarebytes' Anti-Malware
2014-02-15 13:24 . 2013-04-04 13:50 25928 ----a-w- c:\windows\system32\drivers\mbam.sys
2014-02-14 21:39 . 2014-02-16 13:39 -------- d-----w- c:\users\Mara\AppData\Roaming\NVIDIA
2014-02-14 20:16 . 2014-02-14 20:16 -------- d-----w- c:\users\Mara\aTubeCatcher
2014-02-14 15:42 . 2014-02-16 13:39 -------- d-----w- c:\program files (x86)\Common Files\Adobe
2014-02-14 15:42 . 2014-02-16 16:53 -------- d-----w- c:\users\Mara\AppData\Local\Adobe
2014-02-14 15:00 . 2014-02-16 13:04 -------- d-----w- c:\program files\trend micro
2014-02-14 14:44 . 2014-02-14 14:44 -------- d-----w- c:\users\Mara\AppData\Local\Autodesk,_Inc
2014-02-14 14:10 . 2014-02-14 14:10 -------- d-----w- c:\users\Mara\AppData\Local\backburner
2014-02-13 23:56 . 2014-02-13 23:56 -------- d-----w- c:\program files (x86)\AGEIA Technologies
2014-02-13 23:55 . 2014-01-15 22:35 599840 ----a-w- c:\windows\SysWow64\nvStreaming.exe
2014-02-13 23:55 . 2014-01-15 21:53 6712608 ----a-w- c:\windows\system32\nvcpl.dll
2014-02-13 23:55 . 2014-01-15 21:53 3498272 ----a-w- c:\windows\system32\nvsvc64.dll
2014-02-13 23:55 . 2014-01-15 21:53 923936 ----a-w- c:\windows\system32\nvvsvc.exe
2014-02-13 23:55 . 2014-01-15 21:53 63776 ----a-w- c:\windows\system32\nvshext.dll
2014-02-13 23:55 . 2014-01-15 21:53 386336 ----a-w- c:\windows\system32\nvmctray.dll
2014-02-13 23:55 . 2014-01-13 22:31 3559557 ----a-w- c:\windows\system32\nvcoproc.bin
2014-02-13 23:55 . 2014-01-15 23:13 61216 ----a-w- c:\windows\system32\OpenCL.dll
2014-02-13 23:55 . 2014-01-15 23:13 53024 ----a-w- c:\windows\SysWow64\OpenCL.dll
2014-02-13 23:46 . 2014-02-13 23:46 -------- d-----w- c:\windows\Sun
2014-02-09 20:32 . 2014-02-09 20:32 -------- d-----w- c:\users\Mara\AppData\Roaming\Ubisoft
2014-02-09 20:31 . 2014-02-09 20:31 -------- d-----w- c:\programdata\Solidshield
2014-02-09 19:27 . 2014-02-09 21:42 -------- d-----w- C:\Fraps
2014-02-09 19:07 . 2014-02-09 19:07 -------- d-----w- c:\programdata\Elder Scrolls Online
2014-02-09 15:26 . 2014-02-09 15:26 -------- d-----w- c:\users\Mara\AppData\Local\Starbound Composer
2014-02-09 15:26 . 2014-02-09 15:26 -------- d-----w- C:\Starbound Composer
2014-02-08 16:52 . 2014-02-08 16:52 -------- d-----w- c:\program files (x86)\Maestro
2014-02-08 16:36 . 2014-02-08 16:36 -------- d-----w- c:\users\Mara\AppData\Roaming\Music Recognition
2014-02-08 16:36 . 2014-02-08 16:36 -------- d-----w- C:\WIDI 3.3 Pro
2014-02-08 13:07 . 2014-02-08 13:07 -------- d-----w- c:\users\Mara\AppData\Roaming\com.immersyve.Paladin.live
2014-02-07 22:10 . 2014-02-07 22:10 -------- d-----w- c:\users\Mara\AppData\Local\Electronic Arts
2014-02-05 19:02 . 2014-02-05 19:02 -------- d-----w- c:\users\Mara\AppData\Roaming\MultiSkypeLauncher
2014-02-04 20:48 . 2014-02-04 20:48 -------- d-----w- c:\users\Mara\AppData\Roaming\Publish Providers
2014-02-04 15:19 . 2014-02-14 12:25 -------- d-----w- C:\xampp
2014-02-01 21:48 . 2014-02-01 21:56 -------- d-----w- c:\users\Mara\AppData\Local\gamemaker_studio
2014-02-01 21:48 . 2014-02-01 21:48 -------- d-----w- c:\programdata\gamemaker_studio
2014-01-31 15:32 . 2014-01-31 15:32 -------- d-----w- c:\users\Mara\AppData\Local\Take On Helicopters
2014-01-30 20:51 . 2012-08-21 12:01 33240 ----a-w- c:\windows\system32\drivers\GEARAspiWDM.sys
2014-01-30 20:51 . 2014-01-30 20:51 -------- d-----w- c:\program files\iPod
2014-01-30 20:51 . 2014-01-30 20:51 -------- d-----w- c:\programdata\34BE82C4-E596-4e99-A191-52C6199EBF69
2014-01-30 20:51 . 2014-01-30 20:51 -------- d-----w- c:\program files\iTunes
2014-01-30 20:51 . 2014-01-30 20:51 -------- d-----w- c:\program files (x86)\iTunes
2014-01-30 20:51 . 2014-01-30 20:51 -------- d-----w- c:\programdata\Apple Computer
2014-01-30 20:50 . 2014-01-30 20:50 -------- d-----w- c:\users\Mara\AppData\Local\Apple
2014-01-30 20:50 . 2014-02-16 17:33 -------- d-----w- c:\program files (x86)\Common Files\Apple
2014-01-30 20:50 . 2014-02-14 11:52 -------- d-----w- c:\programdata\Apple
2014-01-29 15:56 . 2014-01-29 15:56 -------- d--h--w- c:\programdata\CanonIJScan
2014-01-29 15:55 . 2014-01-29 15:56 -------- d-----w- c:\users\Mara\AppData\Roaming\Canon
2014-01-27 16:46 . 2014-01-27 16:46 -------- d-----w- c:\program files (x86)\Microsoft XNA
2014-01-24 15:56 . 2014-01-24 15:56 -------- d-----w- c:\users\Mara\AppData\Local\ArmA 2 OA
2014-01-24 15:53 . 2014-01-24 15:54 -------- d-----w- c:\users\Mara\AppData\Local\ArmA 2
2014-01-22 20:47 . 2014-01-22 20:47 -------- d-----w- c:\users\Mara\AppData\Local\cache
2014-01-22 20:44 . 2014-01-22 20:44 -------- d-----w- c:\programdata\FLEXnet
2014-01-22 17:58 . 2014-01-22 17:58 -------- d-----w- c:\users\Mara\AppData\Roaming\ooVoo Details
2014-01-22 15:46 . 2014-02-17 18:19 -------- d-----w- c:\users\Mara\AppData\Local\Game Dev Tycoon - Steam
2014-01-21 14:09 . 2014-01-21 14:09 -------- d-----w- c:\program files\Canon
2014-01-21 14:07 . 2008-10-09 04:00 82944 ----a-w- c:\windows\system32\Spool\prtprocs\x64\CNMPP9D.DLL
2014-01-21 14:07 . 2008-10-09 04:00 27648 ----a-w- c:\windows\system32\Spool\prtprocs\x64\CNMPD9D.DLL
2014-01-21 14:06 . 2014-01-21 14:06 -------- d--h--w- c:\windows\system32\CanonIJ Uninstaller Information
2014-01-21 14:06 . 2008-10-09 04:00 279040 ----a-w- c:\windows\system32\CNMLM9D.DLL
2014-01-21 14:06 . 2009-12-11 12:19 1354240 ----a-w- c:\windows\system32\CNC620C.DLL
2014-01-21 14:06 . 2009-12-11 12:19 92672 ----a-w- c:\windows\system32\CNC620I.DLL
2014-01-21 14:06 . 2009-11-30 15:40 293888 ----a-w- c:\windows\system32\CNC620L.DLL
2014-01-21 14:06 . 2007-03-15 13:13 229888 ----a-w- c:\windows\system32\CNC620O.DLL
2014-01-21 14:06 . 2012-08-30 10:18 152064 ----a-w- c:\windows\system32\CNMN6UI.DLL
2014-01-21 14:06 . 2012-08-30 10:18 252416 ----a-w- c:\windows\system32\CNMN6PPM.DLL
2014-01-21 14:06 . 2012-08-30 10:15 366080 ----a-w- c:\windows\SysWow64\CNMNPPM.DLL
2014-01-21 14:06 . 2014-01-21 14:06 -------- d--h--w- c:\programdata\CanonBJ
2014-01-21 14:06 . 2014-02-17 16:21 -------- d-----w- c:\program files (x86)\Canon
.
.
.
(((((((((((((((((((((((((((((((((((((((( Find3M výpis ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2014-02-11 21:08 . 2014-01-16 23:42 88567024 ----a-w- c:\windows\system32\MRT.exe
2014-01-30 21:10 . 2012-07-26 08:14 78296 ----a-w- c:\windows\SysWow64\FlashPlayerCPLApp.cpl
2014-01-30 21:10 . 2012-07-26 08:14 694240 ----a-w- c:\windows\SysWow64\FlashPlayerApp.exe
2014-01-17 00:43 . 2014-01-17 00:43 381440 ----a-w- c:\windows\system32\drivers\sptd.sys
2014-01-17 00:39 . 2014-01-17 00:39 709719 ----a-w- c:\windows\unins002.exe
2014-01-17 00:22 . 2014-01-17 00:22 1199175 ----a-w- c:\windows\unins001.exe
2014-01-17 00:07 . 2014-01-17 00:07 466520 ----a-w- c:\windows\system32\wrap_oal.dll
2014-01-17 00:07 . 2014-01-17 00:07 445016 ----a-w- c:\windows\SysWow64\wrap_oal.dll
2014-01-17 00:07 . 2014-01-17 00:07 123480 ----a-w- c:\windows\system32\OpenAL32.dll
2014-01-17 00:07 . 2014-01-17 00:07 109144 ----a-w- c:\windows\SysWow64\OpenAL32.dll
2014-01-16 23:42 . 2014-01-16 23:42 108968 ----a-w- c:\windows\system32\WindowsAccessBridge-64.dll
2014-01-16 23:42 . 2014-01-16 23:42 312744 ----a-w- c:\windows\system32\javaws.exe
2014-01-16 23:42 . 2014-01-16 23:42 189352 ----a-w- c:\windows\system32\javaw.exe
2014-01-16 23:42 . 2014-01-16 23:42 189352 ----a-w- c:\windows\system32\java.exe
2014-01-16 23:41 . 2014-01-16 23:41 96168 ----a-w- c:\windows\SysWow64\WindowsAccessBridge-32.dll
2014-01-16 23:20 . 2014-01-16 23:20 17536 ----a-w- c:\programdata\Microsoft\windowssampling\Sqm\Manifest\Sqm3.bin
2014-01-16 23:18 . 2012-07-26 08:13 22240 ----a-w- c:\programdata\Microsoft\IdentityCRL\production\ppcrlconfig600.dll
2014-01-06 19:23 . 2014-01-06 19:23 4558848 ----a-w- c:\windows\SysWow64\GPhotos.scr
2013-12-07 06:37 . 2014-01-16 23:34 688640 ----a-w- c:\windows\system32\WSShared.dll
2013-12-07 06:37 . 2014-01-16 23:34 163840 ----a-w- c:\windows\system32\Windows.ApplicationModel.Store.TestingFramework.dll
2013-12-07 05:15 . 2014-01-16 23:34 562688 ----a-w- c:\windows\SysWow64\WSShared.dll
2013-12-07 05:15 . 2014-01-16 23:34 124928 ----a-w- c:\windows\SysWow64\Windows.ApplicationModel.Store.TestingFramework.dll
2013-12-03 18:28 . 2014-01-17 00:25 10315576 ----a-w- c:\programdata\Microsoft\Windows Defender\Definition Updates\{D6FC39BB-C123-4BCE-BA95-51B1BCB7BAFB}\mpengine.dll
2013-11-25 23:17 . 2014-01-17 00:34 83968 ----a-w- c:\windows\system32\drivers\hidclass.sys
2013-11-23 06:43 . 2014-01-16 23:34 420864 ----a-w- c:\windows\system32\WMPhoto.dll
2013-11-23 05:05 . 2014-01-16 23:34 368640 ----a-w- c:\windows\SysWow64\WMPhoto.dll
.
.
(((((((((((((((((((((((((((((((((( Spouštěcí body v registru )))))))))))))))))))))))))))))))))))))))))))))
.
.
*Poznámka* prázdné záznamy a legitimní výchozí údaje nejsou zobrazeny.
REGEDIT4
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ SkyDrivePro1 (ErrorConflict)]
@="{8BA85C75-763B-4103-94EB-9470F12FE0F7}"
[HKEY_CLASSES_ROOT\CLSID\{8BA85C75-763B-4103-94EB-9470F12FE0F7}]
2013-11-02 11:10 1727176 ----a-w- c:\progra~2\MICROS~2\Office15\GROOVEEX.DLL
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ SkyDrivePro2 (SyncInProgress)]
@="{CD55129A-B1A1-438E-A425-CEBC7DC684EE}"
[HKEY_CLASSES_ROOT\CLSID\{CD55129A-B1A1-438E-A425-CEBC7DC684EE}]
2013-11-02 11:10 1727176 ----a-w- c:\progra~2\MICROS~2\Office15\GROOVEEX.DLL
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ SkyDrivePro3 (InSync)]
@="{E768CD3B-BDDC-436D-9C13-E1B39CA257B1}"
[HKEY_CLASSES_ROOT\CLSID\{E768CD3B-BDDC-436D-9C13-E1B39CA257B1}]
2013-11-02 11:10 1727176 ----a-w- c:\progra~2\MICROS~2\Office15\GROOVEEX.DLL
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt1]
@="{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}"
[HKEY_CLASSES_ROOT\CLSID\{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}]
2013-09-10 23:54 131248 ----a-w- c:\users\Mara\AppData\Roaming\Dropbox\bin\DropboxExt.22.dll
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt2]
@="{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}"
[HKEY_CLASSES_ROOT\CLSID\{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}]
2013-09-10 23:54 131248 ----a-w- c:\users\Mara\AppData\Roaming\Dropbox\bin\DropboxExt.22.dll
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt3]
@="{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}"
[HKEY_CLASSES_ROOT\CLSID\{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}]
2013-09-10 23:54 131248 ----a-w- c:\users\Mara\AppData\Roaming\Dropbox\bin\DropboxExt.22.dll
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt4]
@="{FB314EDC-A251-47B7-93E1-CDD82E34AF8B}"
[HKEY_CLASSES_ROOT\CLSID\{FB314EDC-A251-47B7-93E1-CDD82E34AF8B}]
2013-09-10 23:54 131248 ----a-w- c:\users\Mara\AppData\Roaming\Dropbox\bin\DropboxExt.22.dll
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Autodesk Sync"="c:\program files\Autodesk\Autodesk Sync\AdSync.exe" [2013-02-05 1081224]
"DAEMON Tools Lite"="c:\program files (x86)\DAEMON Tools Lite\DTLite.exe" [2013-10-28 3675352]
"Steam"="c:\steam\steam.exe" [2014-02-18 1822400]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]
"APSDaemon"="c:\program files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe" [2013-04-21 59720]
"QuickTime Task"="c:\program files (x86)\QuickTime\QTTask.exe" [2013-05-01 421888]
.
[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"Autodesk Sync"="c:\program files\Autodesk\Autodesk Sync\AdSync.exe" [2013-02-05 1081224]
.
c:\users\Mara\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\
Dropbox.lnk - c:\users\Mara\AppData\Roaming\Dropbox\bin\Dropbox.exe /systemstartup [2014-1-3 33508336]
Odeslat do OneNote.lnk - c:\program files (x86)\Microsoft Office\Office15\ONENOTEM.EXE /tsr [2013-11-15 193712]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"PromptOnSecureDesktop"= 0 (0x0)
"EnableLUA"= 0 (0x0)
"EnableUIADesktopToggle"= 0 (0x0)
"EnableCursorSuppression"= 1 (0x1)
"ConsentPromptBehaviorUser"= 3 (0x3)
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\drivers32]
"mixer9"=wdmaud.drv
.
R2 mi-raysat_3dsmax2014_64;mental ray Satellite for Autodesk 3ds Max 2014 64-bit;c:\program files\Autodesk\3ds Max 2014\NVIDIA\Satellite\raysat_3dsmax2014_64server.exe;c:\program files\Autodesk\3ds Max 2014\NVIDIA\Satellite\raysat_3dsmax2014_64server.exe [x]
R3 Creative Audio Engine Licensing Service;Creative Audio Engine Licensing Service;c:\program files (x86)\Common Files\Creative Labs Shared\Service\CTAELicensing.exe;c:\program files (x86)\Common Files\Creative Labs Shared\Service\CTAELicensing.exe [x]
R3 FlexNet Licensing Service 64;FlexNet Licensing Service 64;c:\program files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService64.exe;c:\program files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService64.exe [x]
R3 HTCAND64;HTC Device Driver;c:\windows\System32\Drivers\ANDROIDUSB.sys;c:\windows\SYSNATIVE\Drivers\ANDROIDUSB.sys [x]
R3 htcnprot;HTC NDIS Protocol Driver;c:\windows\system32\DRIVERS\htcnprot.sys;c:\windows\SYSNATIVE\DRIVERS\htcnprot.sys [x]
R3 HtcVCom32;HTC Diagnostic Port;c:\windows\system32\DRIVERS\HtcVComV64.sys;c:\windows\SYSNATIVE\DRIVERS\HtcVComV64.sys [x]
R3 vmicheartbeat;Služba prezenčního signálu technologie Hyper-V;c:\windows\system32\svchost.exe;c:\windows\SYSNATIVE\svchost.exe [x]
R3 WUDFWpdMtp;WUDFWpdMtp;c:\windows\system32\DRIVERS\WUDFRd.sys;c:\windows\SYSNATIVE\DRIVERS\WUDFRd.sys [x]
S0 edevmon;edevmon;c:\windows\system32\DRIVERS\edevmon.sys;c:\windows\SYSNATIVE\DRIVERS\edevmon.sys [x]
S0 epfwwfp;epfwwfp;c:\windows\system32\DRIVERS\epfwwfp.sys;c:\windows\SYSNATIVE\DRIVERS\epfwwfp.sys [x]
S0 PxHlpa64;PxHlpa64;c:\windows\System32\Drivers\PxHlpa64.sys;c:\windows\SYSNATIVE\Drivers\PxHlpa64.sys [x]
S0 sptd;sptd;c:\windows\\SystemRoot\System32\Drivers\sptd.sys;c:\windows\\SystemRoot\System32\Drivers\sptd.sys [x]
S1 eamonm;eamonm;c:\windows\system32\DRIVERS\eamonm.sys;c:\windows\SYSNATIVE\DRIVERS\eamonm.sys [x]
S1 ehdrv;ehdrv;c:\windows\system32\DRIVERS\ehdrv.sys;c:\windows\SYSNATIVE\DRIVERS\ehdrv.sys [x]
S1 EpfwLWF;Epfw NDIS LightWeight Filter;c:\windows\system32\DRIVERS\EpfwLWF.sys;c:\windows\SYSNATIVE\DRIVERS\EpfwLWF.sys [x]
S2 ekrn;ESET Service;c:\program files\ESET\ESET Smart Security\x86\ekrn.exe;c:\program files\ESET\ESET Smart Security\x86\ekrn.exe [x]
S2 mitsijm2014;Správce úloh aplikace Autodesk Simulation Moldflow MITSI 2014;c:\program files\Autodesk\Inventor 2014\Moldflow\bin\mitsijm.exe;c:\program files\Autodesk\Inventor 2014\Moldflow\bin\mitsijm.exe [x]
S2 PassThru Service;Internet Pass-Through Service;c:\program files (x86)\HTC\Internet Pass-Through\PassThruSvr.exe;c:\program files (x86)\HTC\Internet Pass-Through\PassThruSvr.exe [x]
S2 Start8;Stardock Start8;c:\program files (x86)\Stardock\Start8\Start8Srv.exe;c:\program files (x86)\Stardock\Start8\Start8Srv.exe [x]
S2 Stereo Service;NVIDIA Stereoscopic 3D Driver Service;c:\program files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe;c:\program files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe [x]
S2 TeamViewer9;TeamViewer 9;c:\program files (x86)\TeamViewer\Version9\TeamViewer_Service.exe;c:\program files (x86)\TeamViewer\Version9\TeamViewer_Service.exe [x]
S3 LVRS64;Logitech RightSound Filter Driver;c:\windows\system32\DRIVERS\lvrs64.sys;c:\windows\SYSNATIVE\DRIVERS\lvrs64.sys [x]
S3 RTL8168;Realtek 8168 NT Driver;c:\windows\system32\DRIVERS\Rt630x64.sys;c:\windows\SYSNATIVE\DRIVERS\Rt630x64.sys [x]
S3 t3;Sound Blaster X-Fi Xtreme Audio;c:\windows\system32\drivers\t3.sys;c:\windows\SYSNATIVE\drivers\t3.sys [x]
S3 xusb22;Služba ovladače bezdrátového přijímače Xbox 360, 22;c:\windows\System32\drivers\xusb22.sys;c:\windows\SYSNATIVE\drivers\xusb22.sys [x]
.
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\active setup\installed components\{8A69D345-D564-463c-AFF1-A69D9E530F96}]
2014-02-04 17:34 1211720 ----a-w- c:\program files (x86)\Google\Chrome\Application\32.0.1700.107\Installer\chrmstp.exe
.
Obsah adresáře 'Naplánované úlohy'
.
2014-02-16 c:\windows\Tasks\GoogleUpdateTaskMachineUA1cf2b674608f733.job
- c:\program files (x86)\Google\Update\GoogleUpdate.exe [2014-01-16 23:24]
.
.
--------- X64 Entries -----------
.
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ SkyDrivePro1 (ErrorConflict)]
@="{8BA85C75-763B-4103-94EB-9470F12FE0F7}"
[HKEY_CLASSES_ROOT\CLSID\{8BA85C75-763B-4103-94EB-9470F12FE0F7}]
2013-11-02 12:33 2331336 ----a-w- c:\progra~1\MICROS~2\Office15\GROOVEEX.DLL
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ SkyDrivePro2 (SyncInProgress)]
@="{CD55129A-B1A1-438E-A425-CEBC7DC684EE}"
[HKEY_CLASSES_ROOT\CLSID\{CD55129A-B1A1-438E-A425-CEBC7DC684EE}]
2013-11-02 12:33 2331336 ----a-w- c:\progra~1\MICROS~2\Office15\GROOVEEX.DLL
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ SkyDrivePro3 (InSync)]
@="{E768CD3B-BDDC-436D-9C13-E1B39CA257B1}"
[HKEY_CLASSES_ROOT\CLSID\{E768CD3B-BDDC-436D-9C13-E1B39CA257B1}]
2013-11-02 12:33 2331336 ----a-w- c:\progra~1\MICROS~2\Office15\GROOVEEX.DLL
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt1]
@="{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}"
[HKEY_CLASSES_ROOT\CLSID\{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}]
2013-09-10 23:54 164016 ----a-w- c:\users\Mara\AppData\Roaming\Dropbox\bin\DropboxExt64.22.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt2]
@="{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}"
[HKEY_CLASSES_ROOT\CLSID\{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}]
2013-09-10 23:54 164016 ----a-w- c:\users\Mara\AppData\Roaming\Dropbox\bin\DropboxExt64.22.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt3]
@="{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}"
[HKEY_CLASSES_ROOT\CLSID\{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}]
2013-09-10 23:54 164016 ----a-w- c:\users\Mara\AppData\Roaming\Dropbox\bin\DropboxExt64.22.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt4]
@="{FB314EDC-A251-47B7-93E1-CDD82E34AF8B}"
[HKEY_CLASSES_ROOT\CLSID\{FB314EDC-A251-47B7-93E1-CDD82E34AF8B}]
2013-09-10 23:54 164016 ----a-w- c:\users\Mara\AppData\Roaming\Dropbox\bin\DropboxExt64.22.dll
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"egui"="c:\program files\ESET\ESET Smart Security\egui.exe" [2013-09-12 5618456]
.
------- Doplňkový sken -------
.
uLocal Page = c:\windows\system32\blank.htm
uDefault_Search_URL = hxxp://www.google.com/ie
mLocal Page = c:\windows\SysWOW64\blank.htm
uInternet Settings,ProxyOverride = <local>
uSearchAssistant = hxxp://www.google.com/ie
uSearchURL,(Default) = hxxp://www.google.com/search?q=%s
IE: Add to Google Photos Screensa&ver - c:\windows\system32\GPhotos.scr/200
IE: E&xportovat do Microsoft Excelu - c:\progra~2\MICROS~2\Office15\EXCEL.EXE/3000
IE: Od&eslat do OneNotu - c:\progra~2\MICROS~2\Office15\ONBttnIE.dll/105
TCP: DhcpNameServer = 192.168.0.1
Filter: text/xml - {807583E5-5146-11D5-A672-00B0D022E945} - c:\program files (x86)\Common Files\Microsoft Shared\OFFICE15\MSOXMLMF.DLL
.
.
--------------------- ZAMKNUTÉ KLÍČE V REGISTRU ---------------------
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Office\Common\Smart Tag\Actions\{B7EFF951-E52F-45CC-9EF7-57124F2177CC}]
@Denied: (A) (Everyone)
"Solution"="{15727DE6-F92D-4E46-ACB4-0E2C58B31A18}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Schema Library\ActionsPane3]
@Denied: (A) (Everyone)
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Schema Library\ActionsPane3\0]
"Key"="ActionsPane3"
"Location"="c:\\Program Files (x86)\\Common Files\\Microsoft Shared\\VSTO\\ActionsPane3.xsd"
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\PCW\Security]
@Denied: (Full) (Everyone)
@SACL=(02 0000)
.
Celkový čas: 2014-02-20 14:34:49
ComboFix-quarantined-files.txt 2014-02-20 13:34
.
Před spuštěním: 34 943 782 912 bytes free
Po spuštění: 34 671 833 088 bytes free
.
- - End Of File - - 98A0F6B6C276744CEF0354BC9D7F2A70
A36C5E4F47E84449FF07ED3517B43A31

[Márty84]

Otevrete si poznamkovy blok a zkopirujte do nej tento skript

Kód: Vybrat vše

KillAll::

File::
c:\windows\Tasks\GoogleUpdateTaskMachineUA1cf2b674608f733.job

Registry::
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"DAEMON Tools Lite"=-
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]
"QuickTime Task"=-

RegLock::
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Office\Common\Smart Tag\Actions\{B7EFF951-E52F-45CC-9EF7-57124F2177CC}]
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Schema Library\ActionsPane3]
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Schema Library\ActionsPane3\0]
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\PCW\Security]

Reboot::

Vlevo nahore kliknete na napis Soubor
Kliknete na napis Ulozit jako...
Napiste spravne ten cerveny nazev CFScript a ulozte na plochu.
Vypnete antivir i dalsi pripadne zabezpeceni.
Pretahntete mysi tento vytvoreny textovy dokument nad ikonu ComboFix a pustte.
ComboFix by se mel spustit a vykonat prikazy.
Az skonci (muze dojit k restartu pc), mel by se objevit novy log, ten mi sem zase zkopirujte.

Kdyby po restartu nenabehl windows, restartujte znovu, mackejte klavesu F8 a zvolte - Posledni znama funkcni konfigurace
Kdyz windows nabehne, ale pri spousteni ruznych programu bude hlasena chyba, staci restartovat pc a bude to v poradku

[Mara1681]

ComboFix 14-02-20.01 - Mara . 02. 2014 17:21:33.2.4 - x64
Microsoft Windows 8 Pro 6.2.9200.0.1250.420.1029.18.8190.7127 [GMT 1:00]
Spuštěný z: c:\users\Mara\Desktop\ComboFix.exe
Použité ovládací přepínače :: c:\users\Mara\Desktop\CFScript
AV: ESET Smart Security 7.0 *Disabled/Updated* {19259FAE-8396-A113-46DB-15B0E7DFA289}
AV: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
FW: ESET Personální firewall *Disabled* {211E1E8B-C9F9-A04B-6D84-BC85190CE5F2}
SP: ESET Smart Security 7.0 *Disabled/Updated* {A2447E4A-A5AC-AE9D-7C6B-2EC29C58E834}
SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.
FILE ::
"c:\windows\Tasks\GoogleUpdateTaskMachineUA1cf2b674608f733.job"
.
.
((((((((((((((((((((((((((((((((((((((( Ostatní výmazy )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
c:\windows\Tasks\GoogleUpdateTaskMachineUA1cf2b674608f733.job
.
.
((((((((((((((((((((((((( Soubory vytvořené od 2014-01-20 do 2014-02-20 )))))))))))))))))))))))))))))))
.
.
2014-02-20 16:24 . 2014-02-20 16:25 -------- d-----w- c:\users\Mara\AppData\Local\temp
2014-02-20 16:24 . 2014-02-20 16:24 -------- d-----w- c:\users\Default\AppData\Local\temp
2014-02-20 13:50 . 2014-02-20 13:50 -------- d-----w- c:\program files (x86)\Origin Games
2014-02-20 13:50 . 2014-02-20 13:50 -------- d-----w- c:\users\Mara\AppData\Roaming\Origin
2014-02-20 13:50 . 2014-02-20 13:50 -------- d-----w- c:\users\Mara\AppData\Local\Origin
2014-02-20 13:49 . 2014-02-20 14:04 -------- d-----w- c:\programdata\Origin
2014-02-20 13:49 . 2014-02-20 13:49 -------- d-----w- c:\programdata\Electronic Arts
2014-02-20 13:49 . 2014-02-20 13:50 -------- d-----w- c:\program files (x86)\Origin
2014-02-19 17:11 . 2014-02-19 17:11 -------- d-----w- c:\users\Mara\AppData\Local\ElevatedDiagnostics
2014-02-19 16:47 . 2014-02-19 16:56 -------- d-----w- c:\users\Mara\AppData\Roaming\.minecraft
2014-02-18 19:51 . 2014-02-18 23:12 -------- d-----w- c:\users\Mara\AppData\Roaming\.mojam
2014-02-18 19:18 . 2014-02-18 19:18 -------- d-----w- c:\windows\system32\save
2014-02-18 18:41 . 2014-02-18 18:41 -------- d-----w- c:\users\Mara\AppData\Local\Unity
2014-02-16 17:34 . 2014-02-16 17:34 159744 ----a-w- c:\program files\Internet Explorer\Plugins\npqtplugin5.dll
2014-02-16 17:34 . 2014-02-16 17:34 159744 ----a-w- c:\program files\Internet Explorer\Plugins\npqtplugin4.dll
2014-02-16 17:34 . 2014-02-16 17:34 159744 ----a-w- c:\program files\Internet Explorer\Plugins\npqtplugin3.dll
2014-02-16 17:34 . 2014-02-16 17:34 159744 ----a-w- c:\program files\Internet Explorer\Plugins\npqtplugin2.dll
2014-02-16 17:34 . 2014-02-16 17:34 159744 ----a-w- c:\program files\Internet Explorer\Plugins\npqtplugin.dll
2014-02-16 17:33 . 2014-02-16 17:34 -------- d-----w- c:\program files (x86)\QuickTime
2014-02-16 17:33 . 2014-02-16 17:33 -------- d-----w- c:\program files (x86)\Apple Software Update
2014-02-16 16:41 . 2014-02-16 16:41 -------- d-----w- c:\program files\Common Files\Adobe
2014-02-16 13:50 . 2014-02-20 14:06 -------- d-----w- c:\users\Mara\AppData\Local\CrashDumps
2014-02-15 13:24 . 2014-02-15 13:24 -------- d-----w- c:\users\Mara\AppData\Roaming\Malwarebytes
2014-02-15 13:24 . 2014-02-15 13:24 -------- d-----w- c:\programdata\Malwarebytes
2014-02-15 13:24 . 2014-02-15 13:24 -------- d-----w- C:\Malwarebytes' Anti-Malware
2014-02-15 13:24 . 2013-04-04 13:50 25928 ----a-w- c:\windows\system32\drivers\mbam.sys
2014-02-14 21:39 . 2014-02-16 13:39 -------- d-----w- c:\users\Mara\AppData\Roaming\NVIDIA
2014-02-14 20:16 . 2014-02-14 20:16 -------- d-----w- c:\users\Mara\aTubeCatcher
2014-02-14 15:42 . 2014-02-16 13:39 -------- d-----w- c:\program files (x86)\Common Files\Adobe
2014-02-14 15:42 . 2014-02-16 16:53 -------- d-----w- c:\users\Mara\AppData\Local\Adobe
2014-02-14 15:00 . 2014-02-16 13:04 -------- d-----w- c:\program files\trend micro
2014-02-14 14:44 . 2014-02-14 14:44 -------- d-----w- c:\users\Mara\AppData\Local\Autodesk,_Inc
2014-02-14 14:10 . 2014-02-14 14:10 -------- d-----w- c:\users\Mara\AppData\Local\backburner
2014-02-13 23:56 . 2014-02-13 23:56 -------- d-----w- c:\program files (x86)\AGEIA Technologies
2014-02-13 23:55 . 2014-01-15 22:35 599840 ----a-w- c:\windows\SysWow64\nvStreaming.exe
2014-02-13 23:55 . 2014-01-15 21:53 6712608 ----a-w- c:\windows\system32\nvcpl.dll
2014-02-13 23:55 . 2014-01-15 21:53 3498272 ----a-w- c:\windows\system32\nvsvc64.dll
2014-02-13 23:55 . 2014-01-15 21:53 923936 ----a-w- c:\windows\system32\nvvsvc.exe
2014-02-13 23:55 . 2014-01-15 21:53 63776 ----a-w- c:\windows\system32\nvshext.dll
2014-02-13 23:55 . 2014-01-15 21:53 386336 ----a-w- c:\windows\system32\nvmctray.dll
2014-02-13 23:55 . 2014-01-13 22:31 3559557 ----a-w- c:\windows\system32\nvcoproc.bin
2014-02-13 23:55 . 2014-01-15 23:13 61216 ----a-w- c:\windows\system32\OpenCL.dll
2014-02-13 23:55 . 2014-01-15 23:13 53024 ----a-w- c:\windows\SysWow64\OpenCL.dll
2014-02-13 23:46 . 2014-02-13 23:46 -------- d-----w- c:\windows\Sun
2014-02-09 20:32 . 2014-02-09 20:32 -------- d-----w- c:\users\Mara\AppData\Roaming\Ubisoft
2014-02-09 20:31 . 2014-02-09 20:31 -------- d-----w- c:\programdata\Solidshield
2014-02-09 19:27 . 2014-02-09 21:42 -------- d-----w- C:\Fraps
2014-02-09 19:07 . 2014-02-09 19:07 -------- d-----w- c:\programdata\Elder Scrolls Online
2014-02-09 15:26 . 2014-02-09 15:26 -------- d-----w- c:\users\Mara\AppData\Local\Starbound Composer
2014-02-09 15:26 . 2014-02-09 15:26 -------- d-----w- C:\Starbound Composer
2014-02-08 16:52 . 2014-02-08 16:52 -------- d-----w- c:\program files (x86)\Maestro
2014-02-08 16:36 . 2014-02-08 16:36 -------- d-----w- c:\users\Mara\AppData\Roaming\Music Recognition
2014-02-08 16:36 . 2014-02-08 16:36 -------- d-----w- C:\WIDI 3.3 Pro
2014-02-08 13:07 . 2014-02-08 13:07 -------- d-----w- c:\users\Mara\AppData\Roaming\com.immersyve.Paladin.live
2014-02-07 22:10 . 2014-02-07 22:10 -------- d-----w- c:\users\Mara\AppData\Local\Electronic Arts
2014-02-05 19:02 . 2014-02-05 19:02 -------- d-----w- c:\users\Mara\AppData\Roaming\MultiSkypeLauncher
2014-02-04 20:48 . 2014-02-04 20:48 -------- d-----w- c:\users\Mara\AppData\Roaming\Publish Providers
2014-02-04 15:19 . 2014-02-14 12:25 -------- d-----w- C:\xampp
2014-02-01 21:48 . 2014-02-01 21:56 -------- d-----w- c:\users\Mara\AppData\Local\gamemaker_studio
2014-02-01 21:48 . 2014-02-01 21:48 -------- d-----w- c:\programdata\gamemaker_studio
2014-01-31 15:32 . 2014-01-31 15:32 -------- d-----w- c:\users\Mara\AppData\Local\Take On Helicopters
2014-01-30 20:51 . 2012-08-21 12:01 33240 ----a-w- c:\windows\system32\drivers\GEARAspiWDM.sys
2014-01-30 20:51 . 2014-01-30 20:51 -------- d-----w- c:\program files\iPod
2014-01-30 20:51 . 2014-01-30 20:51 -------- d-----w- c:\programdata\34BE82C4-E596-4e99-A191-52C6199EBF69
2014-01-30 20:51 . 2014-01-30 20:51 -------- d-----w- c:\program files\iTunes
2014-01-30 20:51 . 2014-01-30 20:51 -------- d-----w- c:\program files (x86)\iTunes
2014-01-30 20:51 . 2014-01-30 20:51 -------- d-----w- c:\programdata\Apple Computer
2014-01-30 20:50 . 2014-01-30 20:50 -------- d-----w- c:\users\Mara\AppData\Local\Apple
2014-01-30 20:50 . 2014-02-16 17:33 -------- d-----w- c:\program files (x86)\Common Files\Apple
2014-01-30 20:50 . 2014-02-14 11:52 -------- d-----w- c:\programdata\Apple
2014-01-29 15:56 . 2014-01-29 15:56 -------- d--h--w- c:\programdata\CanonIJScan
2014-01-29 15:55 . 2014-01-29 15:56 -------- d-----w- c:\users\Mara\AppData\Roaming\Canon
2014-01-27 16:46 . 2014-01-27 16:46 -------- d-----w- c:\program files (x86)\Microsoft XNA
2014-01-24 15:56 . 2014-01-24 15:56 -------- d-----w- c:\users\Mara\AppData\Local\ArmA 2 OA
2014-01-24 15:53 . 2014-01-24 15:54 -------- d-----w- c:\users\Mara\AppData\Local\ArmA 2
2014-01-22 20:47 . 2014-01-22 20:47 -------- d-----w- c:\users\Mara\AppData\Local\cache
2014-01-22 20:44 . 2014-01-22 20:44 -------- d-----w- c:\programdata\FLEXnet
2014-01-22 17:58 . 2014-01-22 17:58 -------- d-----w- c:\users\Mara\AppData\Roaming\ooVoo Details
2014-01-22 15:46 . 2014-02-17 18:19 -------- d-----w- c:\users\Mara\AppData\Local\Game Dev Tycoon - Steam
.
.
.
(((((((((((((((((((((((((((((((((((((((( Find3M výpis ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2014-02-11 21:08 . 2014-01-16 23:42 88567024 ----a-w- c:\windows\system32\MRT.exe
2014-01-30 21:10 . 2012-07-26 08:14 78296 ----a-w- c:\windows\SysWow64\FlashPlayerCPLApp.cpl
2014-01-30 21:10 . 2012-07-26 08:14 694240 ----a-w- c:\windows\SysWow64\FlashPlayerApp.exe
2014-01-17 00:43 . 2014-01-17 00:43 381440 ----a-w- c:\windows\system32\drivers\sptd.sys
2014-01-17 00:39 . 2014-01-17 00:39 709719 ----a-w- c:\windows\unins002.exe
2014-01-17 00:22 . 2014-01-17 00:22 1199175 ----a-w- c:\windows\unins001.exe
2014-01-17 00:07 . 2014-01-17 00:07 466520 ----a-w- c:\windows\system32\wrap_oal.dll
2014-01-17 00:07 . 2014-01-17 00:07 445016 ----a-w- c:\windows\SysWow64\wrap_oal.dll
2014-01-17 00:07 . 2014-01-17 00:07 123480 ----a-w- c:\windows\system32\OpenAL32.dll
2014-01-17 00:07 . 2014-01-17 00:07 109144 ----a-w- c:\windows\SysWow64\OpenAL32.dll
2014-01-16 23:42 . 2014-01-16 23:42 108968 ----a-w- c:\windows\system32\WindowsAccessBridge-64.dll
2014-01-16 23:42 . 2014-01-16 23:42 312744 ----a-w- c:\windows\system32\javaws.exe
2014-01-16 23:42 . 2014-01-16 23:42 189352 ----a-w- c:\windows\system32\javaw.exe
2014-01-16 23:42 . 2014-01-16 23:42 189352 ----a-w- c:\windows\system32\java.exe
2014-01-16 23:41 . 2014-01-16 23:41 96168 ----a-w- c:\windows\SysWow64\WindowsAccessBridge-32.dll
2014-01-16 23:20 . 2014-01-16 23:20 17536 ----a-w- c:\programdata\Microsoft\windowssampling\Sqm\Manifest\Sqm3.bin
2014-01-16 23:18 . 2012-07-26 08:13 22240 ----a-w- c:\programdata\Microsoft\IdentityCRL\production\ppcrlconfig600.dll
2014-01-06 19:23 . 2014-01-06 19:23 4558848 ----a-w- c:\windows\SysWow64\GPhotos.scr
2013-12-07 06:37 . 2014-01-16 23:34 688640 ----a-w- c:\windows\system32\WSShared.dll
2013-12-07 06:37 . 2014-01-16 23:34 163840 ----a-w- c:\windows\system32\Windows.ApplicationModel.Store.TestingFramework.dll
2013-12-07 05:15 . 2014-01-16 23:34 562688 ----a-w- c:\windows\SysWow64\WSShared.dll
2013-12-07 05:15 . 2014-01-16 23:34 124928 ----a-w- c:\windows\SysWow64\Windows.ApplicationModel.Store.TestingFramework.dll
2013-12-03 18:28 . 2014-01-17 00:25 10315576 ----a-w- c:\programdata\Microsoft\Windows Defender\Definition Updates\{D6FC39BB-C123-4BCE-BA95-51B1BCB7BAFB}\mpengine.dll
2013-11-25 23:17 . 2014-01-17 00:34 83968 ----a-w- c:\windows\system32\drivers\hidclass.sys
2013-11-23 06:43 . 2014-01-16 23:34 420864 ----a-w- c:\windows\system32\WMPhoto.dll
2013-11-23 05:05 . 2014-01-16 23:34 368640 ----a-w- c:\windows\SysWow64\WMPhoto.dll
.
.
(((((((((((((((((((((((((((((((((( Spouštěcí body v registru )))))))))))))))))))))))))))))))))))))))))))))
.
.
*Poznámka* prázdné záznamy a legitimní výchozí údaje nejsou zobrazeny.
REGEDIT4
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ SkyDrivePro1 (ErrorConflict)]
@="{8BA85C75-763B-4103-94EB-9470F12FE0F7}"
[HKEY_CLASSES_ROOT\CLSID\{8BA85C75-763B-4103-94EB-9470F12FE0F7}]
2013-11-02 11:10 1727176 ----a-w- c:\progra~2\MICROS~2\Office15\GROOVEEX.DLL
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ SkyDrivePro2 (SyncInProgress)]
@="{CD55129A-B1A1-438E-A425-CEBC7DC684EE}"
[HKEY_CLASSES_ROOT\CLSID\{CD55129A-B1A1-438E-A425-CEBC7DC684EE}]
2013-11-02 11:10 1727176 ----a-w- c:\progra~2\MICROS~2\Office15\GROOVEEX.DLL
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ SkyDrivePro3 (InSync)]
@="{E768CD3B-BDDC-436D-9C13-E1B39CA257B1}"
[HKEY_CLASSES_ROOT\CLSID\{E768CD3B-BDDC-436D-9C13-E1B39CA257B1}]
2013-11-02 11:10 1727176 ----a-w- c:\progra~2\MICROS~2\Office15\GROOVEEX.DLL
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt1]
@="{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}"
[HKEY_CLASSES_ROOT\CLSID\{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}]
2013-09-10 23:54 131248 ----a-w- c:\users\Mara\AppData\Roaming\Dropbox\bin\DropboxExt.22.dll
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt2]
@="{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}"
[HKEY_CLASSES_ROOT\CLSID\{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}]
2013-09-10 23:54 131248 ----a-w- c:\users\Mara\AppData\Roaming\Dropbox\bin\DropboxExt.22.dll
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt3]
@="{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}"
[HKEY_CLASSES_ROOT\CLSID\{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}]
2013-09-10 23:54 131248 ----a-w- c:\users\Mara\AppData\Roaming\Dropbox\bin\DropboxExt.22.dll
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt4]
@="{FB314EDC-A251-47B7-93E1-CDD82E34AF8B}"
[HKEY_CLASSES_ROOT\CLSID\{FB314EDC-A251-47B7-93E1-CDD82E34AF8B}]
2013-09-10 23:54 131248 ----a-w- c:\users\Mara\AppData\Roaming\Dropbox\bin\DropboxExt.22.dll
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Autodesk Sync"="c:\program files\Autodesk\Autodesk Sync\AdSync.exe" [2013-02-05 1081224]
"Steam"="c:\steam\steam.exe" [2014-02-19 1822400]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]
"APSDaemon"="c:\program files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe" [2013-04-21 59720]
.
[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"Autodesk Sync"="c:\program files\Autodesk\Autodesk Sync\AdSync.exe" [2013-02-05 1081224]
.
c:\users\Mara\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\
Dropbox.lnk - c:\users\Mara\AppData\Roaming\Dropbox\bin\Dropbox.exe /systemstartup [2014-1-3 33508336]
Odeslat do OneNote.lnk - c:\program files (x86)\Microsoft Office\Office15\ONENOTEM.EXE /tsr [2013-11-15 193712]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"PromptOnSecureDesktop"= 0 (0x0)
"EnableLUA"= 0 (0x0)
"EnableUIADesktopToggle"= 0 (0x0)
"EnableCursorSuppression"= 1 (0x1)
"ConsentPromptBehaviorUser"= 3 (0x3)
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\drivers32]
"mixer9"=wdmaud.drv
.
R3 Creative Audio Engine Licensing Service;Creative Audio Engine Licensing Service;c:\program files (x86)\Common Files\Creative Labs Shared\Service\CTAELicensing.exe;c:\program files (x86)\Common Files\Creative Labs Shared\Service\CTAELicensing.exe [x]
R3 FlexNet Licensing Service 64;FlexNet Licensing Service 64;c:\program files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService64.exe;c:\program files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService64.exe [x]
R3 HTCAND64;HTC Device Driver;c:\windows\System32\Drivers\ANDROIDUSB.sys;c:\windows\SYSNATIVE\Drivers\ANDROIDUSB.sys [x]
R3 htcnprot;HTC NDIS Protocol Driver;c:\windows\system32\DRIVERS\htcnprot.sys;c:\windows\SYSNATIVE\DRIVERS\htcnprot.sys [x]
R3 HtcVCom32;HTC Diagnostic Port;c:\windows\system32\DRIVERS\HtcVComV64.sys;c:\windows\SYSNATIVE\DRIVERS\HtcVComV64.sys [x]
R3 vmicheartbeat;Služba prezenčního signálu technologie Hyper-V;c:\windows\system32\svchost.exe;c:\windows\SYSNATIVE\svchost.exe [x]
R3 WUDFWpdMtp;WUDFWpdMtp;c:\windows\system32\DRIVERS\WUDFRd.sys;c:\windows\SYSNATIVE\DRIVERS\WUDFRd.sys [x]
S0 epfwwfp;epfwwfp;c:\windows\system32\DRIVERS\epfwwfp.sys;c:\windows\SYSNATIVE\DRIVERS\epfwwfp.sys [x]
S0 PxHlpa64;PxHlpa64;c:\windows\System32\Drivers\PxHlpa64.sys;c:\windows\SYSNATIVE\Drivers\PxHlpa64.sys [x]
S0 sptd;sptd;c:\windows\\SystemRoot\System32\Drivers\sptd.sys;c:\windows\\SystemRoot\System32\Drivers\sptd.sys [x]
S1 eamonm;eamonm;c:\windows\system32\DRIVERS\eamonm.sys;c:\windows\SYSNATIVE\DRIVERS\eamonm.sys [x]
S1 ehdrv;ehdrv;c:\windows\system32\DRIVERS\ehdrv.sys;c:\windows\SYSNATIVE\DRIVERS\ehdrv.sys [x]
S1 EpfwLWF;Epfw NDIS LightWeight Filter;c:\windows\system32\DRIVERS\EpfwLWF.sys;c:\windows\SYSNATIVE\DRIVERS\EpfwLWF.sys [x]
S2 ekrn;ESET Service;c:\program files\ESET\ESET Smart Security\x86\ekrn.exe;c:\program files\ESET\ESET Smart Security\x86\ekrn.exe [x]
S2 mi-raysat_3dsmax2014_64;mental ray Satellite for Autodesk 3ds Max 2014 64-bit;c:\program files\Autodesk\3ds Max 2014\NVIDIA\Satellite\raysat_3dsmax2014_64server.exe;c:\program files\Autodesk\3ds Max 2014\NVIDIA\Satellite\raysat_3dsmax2014_64server.exe [x]
S2 mitsijm2014;Správce úloh aplikace Autodesk Simulation Moldflow MITSI 2014;c:\program files\Autodesk\Inventor 2014\Moldflow\bin\mitsijm.exe;c:\program files\Autodesk\Inventor 2014\Moldflow\bin\mitsijm.exe [x]
S2 PassThru Service;Internet Pass-Through Service;c:\program files (x86)\HTC\Internet Pass-Through\PassThruSvr.exe;c:\program files (x86)\HTC\Internet Pass-Through\PassThruSvr.exe [x]
S2 Start8;Stardock Start8;c:\program files (x86)\Stardock\Start8\Start8Srv.exe;c:\program files (x86)\Stardock\Start8\Start8Srv.exe [x]
S2 Stereo Service;NVIDIA Stereoscopic 3D Driver Service;c:\program files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe;c:\program files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe [x]
S2 TeamViewer9;TeamViewer 9;c:\program files (x86)\TeamViewer\Version9\TeamViewer_Service.exe;c:\program files (x86)\TeamViewer\Version9\TeamViewer_Service.exe [x]
S3 LVRS64;Logitech RightSound Filter Driver;c:\windows\system32\DRIVERS\lvrs64.sys;c:\windows\SYSNATIVE\DRIVERS\lvrs64.sys [x]
S3 RTL8168;Realtek 8168 NT Driver;c:\windows\system32\DRIVERS\Rt630x64.sys;c:\windows\SYSNATIVE\DRIVERS\Rt630x64.sys [x]
S3 t3;Sound Blaster X-Fi Xtreme Audio;c:\windows\system32\drivers\t3.sys;c:\windows\SYSNATIVE\drivers\t3.sys [x]
S3 xusb22;Služba ovladače bezdrátového přijímače Xbox 360, 22;c:\windows\System32\drivers\xusb22.sys;c:\windows\SYSNATIVE\drivers\xusb22.sys [x]
.
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\active setup\installed components\{8A69D345-D564-463c-AFF1-A69D9E530F96}]
2014-02-04 17:34 1211720 ----a-w- c:\program files (x86)\Google\Chrome\Application\32.0.1700.107\Installer\chrmstp.exe
.
.
--------- X64 Entries -----------
.
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ SkyDrivePro1 (ErrorConflict)]
@="{8BA85C75-763B-4103-94EB-9470F12FE0F7}"
[HKEY_CLASSES_ROOT\CLSID\{8BA85C75-763B-4103-94EB-9470F12FE0F7}]
2013-11-02 12:33 2331336 ----a-w- c:\progra~1\MICROS~2\Office15\GROOVEEX.DLL
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ SkyDrivePro2 (SyncInProgress)]
@="{CD55129A-B1A1-438E-A425-CEBC7DC684EE}"
[HKEY_CLASSES_ROOT\CLSID\{CD55129A-B1A1-438E-A425-CEBC7DC684EE}]
2013-11-02 12:33 2331336 ----a-w- c:\progra~1\MICROS~2\Office15\GROOVEEX.DLL
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ SkyDrivePro3 (InSync)]
@="{E768CD3B-BDDC-436D-9C13-E1B39CA257B1}"
[HKEY_CLASSES_ROOT\CLSID\{E768CD3B-BDDC-436D-9C13-E1B39CA257B1}]
2013-11-02 12:33 2331336 ----a-w- c:\progra~1\MICROS~2\Office15\GROOVEEX.DLL
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt1]
@="{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}"
[HKEY_CLASSES_ROOT\CLSID\{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}]
2013-09-10 23:54 164016 ----a-w- c:\users\Mara\AppData\Roaming\Dropbox\bin\DropboxExt64.22.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt2]
@="{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}"
[HKEY_CLASSES_ROOT\CLSID\{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}]
2013-09-10 23:54 164016 ----a-w- c:\users\Mara\AppData\Roaming\Dropbox\bin\DropboxExt64.22.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt3]
@="{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}"
[HKEY_CLASSES_ROOT\CLSID\{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}]
2013-09-10 23:54 164016 ----a-w- c:\users\Mara\AppData\Roaming\Dropbox\bin\DropboxExt64.22.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt4]
@="{FB314EDC-A251-47B7-93E1-CDD82E34AF8B}"
[HKEY_CLASSES_ROOT\CLSID\{FB314EDC-A251-47B7-93E1-CDD82E34AF8B}]
2013-09-10 23:54 164016 ----a-w- c:\users\Mara\AppData\Roaming\Dropbox\bin\DropboxExt64.22.dll
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"egui"="c:\program files\ESET\ESET Smart Security\egui.exe" [2013-09-12 5618456]
.
------- Doplňkový sken -------
.
uLocal Page = c:\windows\system32\blank.htm
uDefault_Search_URL = hxxp://www.google.com/ie
mLocal Page = c:\windows\SysWOW64\blank.htm
uInternet Settings,ProxyOverride = <local>
uSearchAssistant = hxxp://www.google.com/ie
uSearchURL,(Default) = hxxp://www.google.com/search?q=%s
IE: Add to Google Photos Screensa&ver - c:\windows\system32\GPhotos.scr/200
IE: E&xportovat do Microsoft Excelu - c:\progra~2\MICROS~2\Office15\EXCEL.EXE/3000
IE: Od&eslat do OneNotu - c:\progra~2\MICROS~2\Office15\ONBttnIE.dll/105
TCP: DhcpNameServer = 192.168.0.1
Filter: text/xml - {807583E5-5146-11D5-A672-00B0D022E945} - c:\program files (x86)\Common Files\Microsoft Shared\OFFICE15\MSOXMLMF.DLL
.
.
------------------------ Jiné spuštené procesy ------------------------
.
c:\program files (x86)\Creative\Shared Files\CTAudSvc.exe
c:\program files (x86)\Google\Update\GoogleUpdate.exe
c:\users\Mara\AppData\Roaming\Dropbox\bin\Dropbox.exe
.
**************************************************************************
.
Celkový čas: 2014-02-20 17:26:44 - počítač byl restartován
ComboFix-quarantined-files.txt 2014-02-20 16:26
ComboFix2.txt 2014-02-20 13:34
.
Před spuštěním: 34 391 162 880 bytes free
Po spuštění: 34 261 192 704 bytes free
.
- - End Of File - - F3ED198FAFB71C32A2777299FB840E5C
A36C5E4F47E84449FF07ED3517B43A31

[Márty84]

Vsechny tyto programy - vcetne pripadne instalace - spoustejte jako spravce (kliknete na ne pravym mysidlem a zvolte - Spustit jako spravce)

Prejmenujte ComboFix na Uninstall a spustte ho. CF by se mel odinstalovat.

T-Cleaner http://tharifas.sweb.cz/T-Cleaner.exe

• Stahnete a spustte
• Pro potvrzeni volby mackejte A, Enter
• Po pouziti utilitu smazte
• Antiviry mohou utilitu chybne oznacit jako vir - jedna se o falesny poplach - takze v pohode stahnete (pripadne vypnete pri stahovani antivir)

Nastala nejaka zmena?

Uz jste zkousel jiny prohlizec?

[Mara1681]

Ne, je mi líto, ale nic z toho mi nepomohlo, a explorer padá také.

[Márty84]

Cili to dela ve vsech prohlizecich?

Kazdopadne havet tam neni.

[Mara1681]

Ano, jak jsem psal na začátku, chodím na ajťáckou školu, takže mám o něco víc zkušeností než většina běžných uživatelů, takže jsem zkoušel všechno, včetně jiných prohlížečů. A taky jak jsem psal nedávno, tak mi to dělá i Steam, což není oficiální internetový prohlížeč.

[Márty84]

No, kdyby to v nouzovem rezimu jelo normalne, mohl by byt na vine treba antivir (firewall atd.), nekdy se stava, ze si proste s necim nesedne. Ale kdyz je to i v nouzovem rezimu a blbnou vsechny prohlizece, mozna neni problem v pc, ale v pripojeni. Mate stejne pripojeny jeste jiny stroj?

[Mara1681]

Ano, moje přítelkyně je na WiFi na NB, což je ten stejný internet a té to nezlobí...

[Márty84]

Mate moznost vas pc vyzkouset jinde?

Jeste by me zajimalo, jestli se ty problemy s netem projevuji i mimo prohlizece (skype, icq atd.)

[Mara1681]

Ne, vše ostatní běží dobře... a bohužel nemám možnost to jinde otestovat, ale internetem to být nemůže podle mě.
Škoda že to nemohu nějak průběžně testovat, že by mi to zaznamenávalo například aktivitu sítě a prohlížeče.

[Márty84]

To ze sranka neni dostupna mi dela taky, ale je to tim, ze tu mam kolisavy a slaby signal (router je o patro vys a navic ne primo nademnou (v panelaku). Kdyz ale prejdu s notasem do kuchyne, signal je silnejsi a problem se jeste nikdy neobjevil.
To ale nejspis u vas neni ten pripad. Cili nezbyva, nez to proste preinstalovat. Havet tam urcite neni a takhle asi nenajdu pricinu. Bohuzel