Program blokovan zasadami skupiny co stím ?

[Kristina]

Já udělala asi něco špatně žádný log tam nemam je tam hodně soubor§ v tom C:/ combofix ale log tam neni ja to asi omylem restartovala kdyz to hledalo ten log . mam to udelat znovu ?

[Márty84]

Ten log by nebyl ve slozce, je to proste jen poznamkovy blok (se jmenem combofix), ktery je umisteny primo na C:/

Jestli tam fakt neni, spustte ho tedy znovu.

[Kristina]

snad to bude ono :
ComboFix 14-03-24.01 - asus 26.03.2014 14:20:07.1.2 - x86
Microsoft Windows 7 Home Premium 6.1.7601.1.1250.420.1029.18.2038.886 [GMT 1:00]
Spuštěný z: C:\Users\asus\Desktop\ComboFix.exe
AV: Microsoft Security Essentials *Enabled/Updated* {3F839487-C7A2-C958-E30C-E2825BA31FB5}
SP: Microsoft Security Essentials *Enabled/Updated* {84E27563-E198-C6D6-D9BC-D9F020245508}
SP: Windows Defender *Disabled/Outdated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}


((((((((((((((((((((((((((((((((((((((( Ostatní výmazy )))))))))))))))))))))))))))))))))))))))))))))))))


C:\Users\asus\AppData\Local\Microsoft\Windows\Temporary Internet Files\Surftastic_iels
C:\Users\asus\Desktop\Internet Explorer.lnk
C:\windows\IsUn0405.exe
C:\windows\system32\service
C:\windows\system32\service\01022010_TIS17_PccScan.log
C:\windows\system32\service\02022010_TIS17_SfFniAU.log
C:\windows\system32\service\03022010_TIS17_PccScan.log
C:\windows\system32\service\04012010_TIS17_SfFniAU.log
C:\windows\system32\service\04022010_TIS17_SfFniAU.log
C:\windows\system32\service\05012010_TIS17_SfFniAU.log
C:\windows\system32\service\24012010_TIS17_PccScan.log
C:\windows\system32\service\24012010_TIS17_SfFniAU.log
C:\windows\system32\service\24122009_TIS17_PccScan.log
C:\windows\system32\service\25012010_TIS17_SfFniAU.log
C:\windows\system32\service\29122009_TIS17_PcDce.log
C:\windows\system32\service\30122009_TIS17_PccScan.log
C:\windows\system32\service\30122009_TIS17_SfFniAU.log
C:\windows\system32\service\31122009_TIS17_PccScan.log
C:\windows\system32\service\31122009_TIS17_SfFniAU.log


((((((((((((((((((((((((( Soubory vytvořené od 2014-02-26 do 2014-03-26 )))))))))))))))))))))))))))))))


2014-03-26 13:51:00 . 2012-12-02 08:37:22 740840 ----a-w- C:\ProgramData\Microsoft\Microsoft Antimalware\Definition Updates\{E7CC945E-2560-E2CC-6796-EA88227C5273}\GapaEngine.dll
2014-03-26 13:47:48 . 2014-03-26 13:47:48 -------- d-----w- C:\Users\Default\AppData\Local\temp
2014-03-25 20:50:53 . 2014-03-25 20:50:53 -------- d-----w- C:\Users\asus\AppData\Local\Avg2014
2014-03-25 19:07:15 . 2014-03-25 19:07:16 52928 ----a-w- C:\windows\system32\drivers\wStLibG.sys
2014-03-25 17:40:00 . 2014-03-25 17:40:00 -------- d-----w- C:\Program Files\Seznam.cz
2014-03-25 17:36:28 . 2014-03-25 17:36:46 -------- d-----w- C:\Program Files\PCData
2014-03-25 17:34:44 . 2014-03-26 13:49:15 -------- d-----w- C:\Program Files\Surftastic
2014-03-25 17:31:54 . 2014-03-25 17:31:55 -------- d-----w- C:\Users\asus\AppData\Local\87542dc6-8938-4565-f241-7774dad144a1
2014-03-25 16:38:37 . 2014-03-25 16:38:37 -------- d-----w- C:\Users\asus\AppData\Roaming\Origin
2014-03-25 16:38:34 . 2014-03-25 16:38:34 -------- d-----w- C:\Users\asus\AppData\Local\Origin
2014-03-25 16:38:28 . 2014-03-25 16:39:03 -------- d-----w- C:\Users\asus\AppData\Local\CrashDumps
2014-03-25 16:38:24 . 2014-03-25 16:38:37 -------- d-----w- C:\ProgramData\Origin
2014-03-25 16:38:23 . 2014-03-25 16:38:23 -------- d-----w- C:\Program Files\Origin Games
2014-03-25 16:33:52 . 2014-03-25 16:38:17 -------- d-----w- C:\Program Files\Origin
2014-03-25 16:03:11 . 2014-03-25 16:38:23 -------- d-----w- C:\ProgramData\Electronic Arts
2014-03-25 15:34:11 . 2014-03-25 17:16:22 -------- d-----w- C:\Program Files\Electronic Arts
2014-03-25 11:13:27 . 2014-03-25 11:13:29 39464 ----a-w- C:\ProgramData\Microsoft\Microsoft Antimalware\Definition Updates\{22FCF633-EE83-43D6-856D-84B30EE2E340}\MpKsl4947eb5d.sys
2014-03-24 19:52:18 . 2008-09-05 00:22:01 447752 ----a-w- C:\windows\system32\vp6vfw.dll
2014-03-24 19:52:04 . 2014-03-24 19:52:04 -------- d-----w- C:\Program Files\Microsoft WSE
2014-03-24 19:15:24 . 2014-03-07 04:35:10 7969936 ----a-w- C:\ProgramData\Microsoft\Microsoft Antimalware\Definition Updates\{22FCF633-EE83-43D6-856D-84B30EE2E340}\mpengine.dll
2014-03-24 18:51:31 . 2014-03-24 19:00:59 -------- dc----w- C:\AdwCleaner
2014-03-24 17:55:45 . 2014-03-24 18:46:21 -------- d-----w- C:\Program Files\SmartTweak
2014-03-24 17:52:56 . 2014-03-25 17:40:19 -------- d-----w- C:\Users\asus\AppData\Roaming\Seznam.cz
2014-03-24 15:33:49 . 2014-03-24 15:33:49 243128 ----a-w- C:\windows\system32\drivers\dtsoftbus01.sys
2014-03-24 15:33:03 . 2014-03-24 15:33:49 -------- d-----w- C:\Program Files\DAEMON Tools Lite
2014-03-24 15:16:27 . 2014-03-24 15:16:27 -------- d-----w- C:\Users\asus\AppData\Roaming\AVG
2014-03-24 15:14:40 . 2014-03-25 16:12:06 -------- d-----w- C:\Program Files\AVG PC TuneUp 2014
2014-03-24 15:13:25 . 2014-03-24 15:22:53 -------- d-----w- C:\ProgramData\AVG
2014-03-24 15:12:51 . 2014-03-24 17:50:19 -------- d-sh--w- C:\ProgramData\{01BD4FC9-2F86-4706-A62E-774BB7E9D308}
2014-03-24 15:11:06 . 2014-03-24 17:55:26 -------- d-----w- C:\Users\asus\AppData\Roaming\DAEMON Tools Lite
2014-03-24 15:09:49 . 2014-03-24 15:10:09 -------- d-----w- C:\ProgramData\DAEMON Tools Lite
2014-03-23 20:06:20 . 2014-03-23 20:06:20 -------- d-----w- C:\Users\asus\AppData\Roaming\Malwarebytes
2014-03-23 20:04:17 . 2014-03-23 20:04:17 -------- d-----w- C:\ProgramData\Malwarebytes
2014-03-23 20:03:55 . 2014-03-24 18:49:48 -------- d-----w- C:\Program Files\Malwarebytes' Anti-Malware
2014-03-23 20:03:38 . 2014-03-23 20:03:38 -------- d-----w- C:\Users\asus\AppData\Local\Programs
2014-03-23 16:52:02 . 2014-03-23 17:20:23 -------- d-----w- C:\Program Files\trend micro
2014-03-23 16:52:01 . 2014-03-23 17:03:36 -------- dc----w- C:\rsit
2014-03-23 15:56:41 . 2014-03-07 04:35:10 7969936 ----a-w- C:\ProgramData\Microsoft\Microsoft Antimalware\Definition Updates\Backup\mpengine.dll
2014-03-22 09:57:15 . 2014-03-26 13:09:47 -------- d-----w- C:\Users\asus\AppData\Roaming\uTorrent
2014-03-21 18:46:53 . 2014-03-21 18:52:05 -------- d-----w- C:\Users\asus\AppData\Local\Microsoft Games
2014-03-21 18:36:11 . 2014-03-21 18:36:14 -------- d-----w- C:\ProgramData\Oracle
2014-03-21 18:35:34 . 2014-03-21 18:35:34 -------- d-----w- C:\Program Files\Common Files\Java
2014-03-21 18:33:33 . 2014-03-21 18:32:06 94632 ----a-w- C:\windows\system32\WindowsAccessBridge.dll
2014-03-21 18:12:45 . 2014-03-21 18:20:03 -------- d-----w- C:\Users\asus\AppData\Roaming\Dropbox
2014-03-21 18:11:33 . 2014-03-21 18:11:33 -------- d-----w- C:\Users\asus\AppData\Roaming\AVAST Software
2014-03-21 18:06:45 . 2014-03-21 18:06:11 67264 ----a-w- C:\windows\system32\drivers\aswStm.sys
2014-03-21 18:06:44 . 2014-03-21 18:06:10 180760 ----a-w- C:\windows\system32\drivers\aswVmm.sys
2014-03-21 18:06:42 . 2014-03-21 18:06:10 776976 ----a-w- C:\windows\system32\drivers\aswSnx.sys
2014-03-21 18:06:40 . 2014-03-21 18:06:09 411552 ----a-w- C:\windows\system32\drivers\aswSP.sys
2014-03-21 18:06:38 . 2014-03-21 18:06:08 49944 ----a-w- C:\windows\system32\drivers\aswRvrt.sys
2014-03-21 18:06:36 . 2014-03-21 18:06:08 67824 ----a-w- C:\windows\system32\drivers\aswMonFlt.sys
2014-03-21 18:06:35 . 2014-03-21 18:06:07 81768 ----a-w- C:\windows\system32\drivers\aswRdr2.sys
2014-03-21 18:06:27 . 2014-03-21 18:06:02 271264 ----a-w- C:\windows\system32\aswBoot.exe
2014-03-21 18:06:02 . 2014-03-21 18:06:02 43152 ----a-w- C:\windows\avastSS.scr
2014-03-21 18:01:15 . 2014-03-21 18:01:15 -------- d-----w- C:\Program Files\AVAST Software
2014-03-21 17:58:11 . 2014-03-21 17:58:19 -------- d-----w- C:\ProgramData\AVAST Software
2014-03-15 07:06:59 . 2014-03-01 04:11:20 2724864 ----a-w- C:\windows\system32\mshtml.tlb
2014-03-15 07:06:58 . 2014-03-01 02:21:22 271360 ----a-w- C:\Program Files\Internet Explorer\ieproxy.dll
2014-03-15 07:06:57 . 2014-03-01 02:28:51 251392 ----a-w- C:\Program Files\Internet Explorer\IEShims.dll
2014-03-15 07:06:56 . 2014-03-01 03:00:08 1964032 ----a-w- C:\windows\system32\inetcpl.cpl
2014-03-15 07:06:54 . 2014-03-01 03:52:43 61952 ----a-w- C:\windows\system32\iesetup.dll
2014-03-15 07:06:53 . 2014-03-01 22:02:17 808152 ----a-w- C:\Program Files\Internet Explorer\iexplore.exe
2014-03-15 07:06:50 . 2014-03-01 03:14:04 469504 ----a-w- C:\Program Files\Internet Explorer\ieinstal.exe
2014-03-15 07:04:47 . 2014-01-28 02:07:07 185344 ----a-w- C:\windows\system32\wwansvc.dll
2014-03-15 07:04:38 . 2014-02-07 01:07:56 2349056 ----a-w- C:\windows\system32\win32k.sys
2014-03-15 07:04:26 . 2014-02-04 02:04:22 1230336 ----a-w- C:\windows\system32\WindowsCodecs.dll
2014-03-15 07:04:21 . 2014-01-29 02:06:47 381440 ----a-w- C:\windows\system32\wer.dll
2014-03-06 10:59:23 . 2014-03-06 10:59:23 -------- d-----w- C:\windows\Migration
2014-03-06 08:06:33 . 2013-12-21 08:56:47 454656 ----a-w- C:\windows\system32\vbscript.dll
.


(((((((((((((((((((((((((((((((((((((((( Find3M výpis ))))))))))))))))))))))))))))))))))))))))))))))))))))

2014-03-15 07:11:06 . 2013-01-22 19:52:43 692616 ----a-w- C:\windows\system32\FlashPlayerApp.exe
2014-03-15 07:11:06 . 2011-10-06 14:35:32 71048 ----a-w- C:\windows\system32\FlashPlayerCPLApp.cpl
2014-01-19 07:32:23 . 2009-12-24 16:35:51 231584 ------w- C:\windows\system32\MpSigStub.exe


(((((((((((((((((((((((((((((((((( Spouštěcí body v registru )))))))))))))))))))))))))))))))))))))))))))))


*Poznámka* prázdné záznamy a legitimní výchozí údaje nejsou zobrazeny.
REGEDIT4

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ SkyDrivePro1 (ErrorConflict)]
@="{8BA85C75-763B-4103-94EB-9470F12FE0F7}"
[HKEY_CLASSES_ROOT\CLSID\{8BA85C75-763B-4103-94EB-9470F12FE0F7}]
2013-11-02 11:10:36 1727176 ----a-w- C:\PROGRA~1\MIF5BA~1\Office15\GROOVEEX.DLL

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ SkyDrivePro2 (SyncInProgress)]
@="{CD55129A-B1A1-438E-A425-CEBC7DC684EE}"
[HKEY_CLASSES_ROOT\CLSID\{CD55129A-B1A1-438E-A425-CEBC7DC684EE}]
2013-11-02 11:10:36 1727176 ----a-w- C:\PROGRA~1\MIF5BA~1\Office15\GROOVEEX.DLL

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ SkyDrivePro3 (InSync)]
@="{E768CD3B-BDDC-436D-9C13-E1B39CA257B1}"
[HKEY_CLASSES_ROOT\CLSID\{E768CD3B-BDDC-436D-9C13-E1B39CA257B1}]
2013-11-02 11:10:36 1727176 ----a-w- C:\PROGRA~1\MIF5BA~1\Office15\GROOVEEX.DLL

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\00avast]
@="{472083B0-C522-11CF-8763-00608CC02F24}"
[HKEY_CLASSES_ROOT\CLSID\{472083B0-C522-11CF-8763-00608CC02F24}]
2014-03-21 18:05:38 260976 ----a-w- C:\Program Files\AVAST Software\Avast\ashShell.dll

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\AsusWSShellExt_B]
@="{CC5FC992-B0AA-47CD-9DC2-83445083CBB8}"
[HKEY_CLASSES_ROOT\CLSID\{CC5FC992-B0AA-47CD-9DC2-83445083CBB8}]

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\AsusWSShellExt_O]
@="{618A47A2-528B-4D9A-AFC8-97D3233511E2}"
[HKEY_CLASSES_ROOT\CLSID\{618A47A2-528B-4D9A-AFC8-97D3233511E2}]

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt1]
@="{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}"
[HKEY_CLASSES_ROOT\CLSID\{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}]
2013-09-11 02:09:56 131248 ----a-w- C:\Users\asus\AppData\Roaming\Dropbox\bin\DropboxExt.22.dll

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt2]
@="{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}"
[HKEY_CLASSES_ROOT\CLSID\{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}]
2013-09-11 02:09:56 131248 ----a-w- C:\Users\asus\AppData\Roaming\Dropbox\bin\DropboxExt.22.dll

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt3]
@="{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}"
[HKEY_CLASSES_ROOT\CLSID\{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}]
2013-09-11 02:09:56 131248 ----a-w- C:\Users\asus\AppData\Roaming\Dropbox\bin\DropboxExt.22.dll

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt4]
@="{FB314EDC-A251-47B7-93E1-CDD82E34AF8B}"
[HKEY_CLASSES_ROOT\CLSID\{FB314EDC-A251-47B7-93E1-CDD82E34AF8B}]
2013-09-11 02:09:56 131248 ----a-w- C:\Users\asus\AppData\Roaming\Dropbox\bin\DropboxExt.22.dll

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"uTorrent"="C:\Users\asus\AppData\Roaming\uTorrent\uTorrent.exe" [2014-03-22 09:59:48 1208152]
"DAEMON Tools Lite"="C:\Program Files\DAEMON Tools Lite\DTLite.exe" [2014-03-04 09:19:52 3696912]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"AvastUI.exe"="C:\Program Files\AVAST Software\Avast\AvastUI.exe" [2014-03-21 18:05:33 3854640]
"seznam-listicka-distribuce"="C:\Program Files\Seznam.cz\distribution\szninstall.exe" [2013-05-16 13:25:04 1062472]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce]
"20131224"="C:\Program Files\AVAST Software\Avast\setup\emupdate\aaae48d4-9fa7-488f-9db9-afa36ba03e03.exe" [2014-03-26 14:01:06 181136]

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorUser"= 3 (0x3)
"EnableUIADesktopToggle"= 0 (0x0)
"PromptOnSecureDesktop"= 0 (0x0)

[Márty84]

Je to ono, ale neni to cele. Vic tam toho neni?


Odinstalujte AVG PC TuneUp. Umi to v pc udelat poradnou paseku.

Odinstalujte i Avast. V pc mate Microsoft Security Essentials. Tlucou se mezi sebou.

[Kristina]

víc tam toho není asi se to nestihlo cele udelat protoze jsem omylem ten pocitac restartovala.. Avast mi odinstalovat nejde pise mi tam :Eror 1260-Tento program je blokovan zasadami skupiny obratte se na spravce systemu

[Márty84]

Avast zkuste odinstalovat v nouzovem rezimu a pak pouzit http://www.avast.com/cs-cz/uninstall-utility


Pak spustte znovu ComboFix a nechte ho tedy tentokrat dobehnout az do konce

[Kristina]

aha a to se dela jak v tom uspornem rezimu ?

[Márty84]

Do nouzoveho rezimu se dostanete takto:
restartujte pc, mackejte klavesu F8 - pripadne jinou, zalezi na typu stroje - a zvolte moznost nouzovy rezim.
Kdyby to neslo, zde je jiny postup http://forum.viry.cz/viewtopic.php?f=46&t=7554

[Kristina]

Poslala jsem vám na email prtsreen kterej se mi ukazuje pri tom combofix nevim jak ten antivirus vypnout nemam ho taky smazat ?

[Márty84]

Nemusite ho mazat. Bud hlasku ignorujte (MSE vetsinou nedela problemy), nebo muzete pripadne ComboFix spustit v nouzovem rezimu, kde antivir do niceho nekeca A protoze ve 2 rano vstavam, jdu spat. Takze pokracovani zase zitra

[Kristina]

Dobře zatim dekuji

[Kristina]

ComboFix 14-03-24.01 - asus 26.03.2014 20:35:16.2.2 - x86
Microsoft Windows 7 Home Premium 6.1.7601.1.1250.420.1029.18.2038.1041 [GMT 1:00]
Spuštěný z: c:\users\asus\Desktop\ComboFix.exe
AV: Microsoft Security Essentials *Enabled/Updated* {641105E6-77ED-3F35-A304-765193BCB75F}
SP: Microsoft Security Essentials *Enabled/Updated* {DF70E402-51D7-30BB-99B4-4D23E83BFDE2}
SP: Windows Defender *Disabled/Outdated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.
.
((((((((((((((((((((((((((((((((((((((( Ostatní výmazy )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
c:\users\asus\notepad.exe
c:\windows\system32\Thumbs.db
.
---- Předchozí spuštění -------
.
c:\users\asus\AppData\Local\Microsoft\Windows\Temporary Internet Files\Surftastic_iels
c:\users\asus\Desktop\Internet Explorer.lnk
c:\windows\IsUn0405.exe
c:\windows\system32\service\01022010_TIS17_PccScan.log
c:\windows\system32\service\02022010_TIS17_SfFniAU.log
c:\windows\system32\service\03022010_TIS17_PccScan.log
c:\windows\system32\service\04012010_TIS17_SfFniAU.log
c:\windows\system32\service\04022010_TIS17_SfFniAU.log
c:\windows\system32\service\05012010_TIS17_SfFniAU.log
c:\windows\system32\service\24012010_TIS17_PccScan.log
c:\windows\system32\service\24012010_TIS17_SfFniAU.log
c:\windows\system32\service\24122009_TIS17_PccScan.log
c:\windows\system32\service\25012010_TIS17_SfFniAU.log
c:\windows\system32\service\29122009_TIS17_PcDce.log
c:\windows\system32\service\30122009_TIS17_PccScan.log
c:\windows\system32\service\30122009_TIS17_SfFniAU.log
c:\windows\system32\service\31122009_TIS17_PccScan.log
c:\windows\system32\service\31122009_TIS17_SfFniAU.log
.
.
((((((((((((((((((((((((( Soubory vytvořené od 2014-02-26 do 2014-03-26 )))))))))))))))))))))))))))))))
.
.
2014-03-26 19:53 . 2014-03-26 19:54 -------- d-----w- c:\users\asus\AppData\Local\temp
2014-03-26 19:53 . 2014-03-26 19:53 -------- d-----w- c:\users\Default\AppData\Local\temp
2014-03-26 19:07 . 2014-03-26 19:07 39464 ----a-w- c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\{7EC93FBA-A785-48AB-966C-8299E70609ED}\MpKsleeaad1a4.sys
2014-03-26 14:24 . 2014-03-26 14:22 765968 ----a-w- c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\{BE8AACE6-2B52-49F4-8798-D625B0E1BA68}\gapaengine.dll
2014-03-26 14:23 . 2014-03-07 04:35 7969936 ----a-w- c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\{7EC93FBA-A785-48AB-966C-8299E70609ED}\mpengine.dll
2014-03-25 20:50 . 2014-03-25 20:50 -------- d-----w- c:\users\asus\AppData\Local\Avg2014
2014-03-25 19:07 . 2014-03-25 19:07 52928 ----a-w- c:\windows\system32\drivers\wStLibG.sys
2014-03-25 17:40 . 2014-03-25 17:40 -------- d-----w- c:\program files\Seznam.cz
2014-03-25 17:36 . 2014-03-26 14:08 -------- d-----w- c:\program files\PCData
2014-03-25 17:34 . 2014-03-26 13:49 -------- d-----w- c:\program files\Surftastic
2014-03-25 17:31 . 2014-03-25 17:31 -------- d-----w- c:\users\asus\AppData\Local\87542dc6-8938-4565-f241-7774dad144a1
2014-03-25 16:38 . 2014-03-25 16:38 -------- d-----w- c:\users\asus\AppData\Roaming\Origin
2014-03-25 16:38 . 2014-03-25 16:38 -------- d-----w- c:\users\asus\AppData\Local\Origin
2014-03-25 16:38 . 2014-03-26 14:50 -------- d-----w- c:\users\asus\AppData\Local\CrashDumps
2014-03-25 16:38 . 2014-03-25 16:38 -------- d-----w- c:\programdata\Origin
2014-03-25 16:38 . 2014-03-25 16:38 -------- d-----w- c:\program files\Origin Games
2014-03-25 16:33 . 2014-03-25 16:38 -------- d-----w- c:\program files\Origin
2014-03-25 16:03 . 2014-03-25 16:38 -------- d-----w- c:\programdata\Electronic Arts
2014-03-25 15:34 . 2014-03-26 15:51 -------- d-----w- c:\program files\Electronic Arts
2014-03-24 19:52 . 2008-09-05 00:22 447752 ----a-w- c:\windows\system32\vp6vfw.dll
2014-03-24 19:52 . 2014-03-24 19:52 -------- d-----w- c:\program files\Microsoft WSE
2014-03-24 19:15 . 2014-03-07 04:35 7969936 ----a-w- c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\Backup\mpengine.dll
2014-03-24 18:51 . 2014-03-24 19:00 -------- dc----w- C:\AdwCleaner
2014-03-24 17:55 . 2014-03-24 18:46 -------- d-----w- c:\program files\SmartTweak
2014-03-24 17:52 . 2014-03-25 17:40 -------- d-----w- c:\users\asus\AppData\Roaming\Seznam.cz
2014-03-24 15:33 . 2014-03-24 15:33 243128 ----a-w- c:\windows\system32\drivers\dtsoftbus01.sys
2014-03-24 15:33 . 2014-03-24 15:33 -------- d-----w- c:\program files\DAEMON Tools Lite
2014-03-24 15:16 . 2014-03-24 15:16 -------- d-----w- c:\users\asus\AppData\Roaming\AVG
2014-03-24 15:13 . 2014-03-24 15:22 -------- d-----w- c:\programdata\AVG
2014-03-24 15:12 . 2014-03-24 17:50 -------- d-sh--w- c:\programdata\{01BD4FC9-2F86-4706-A62E-774BB7E9D308}
2014-03-24 15:11 . 2014-03-24 17:55 -------- d-----w- c:\users\asus\AppData\Roaming\DAEMON Tools Lite
2014-03-24 15:09 . 2014-03-24 15:10 -------- d-----w- c:\programdata\DAEMON Tools Lite
2014-03-23 20:06 . 2014-03-23 20:06 -------- d-----w- c:\users\asus\AppData\Roaming\Malwarebytes
2014-03-23 20:04 . 2014-03-23 20:04 -------- d-----w- c:\programdata\Malwarebytes
2014-03-23 20:03 . 2014-03-24 18:49 -------- d-----w- c:\program files\Malwarebytes' Anti-Malware
2014-03-23 20:03 . 2014-03-23 20:03 -------- d-----w- c:\users\asus\AppData\Local\Programs
2014-03-23 16:52 . 2014-03-23 17:20 -------- d-----w- c:\program files\trend micro
2014-03-23 16:52 . 2014-03-23 17:03 -------- dc----w- C:\rsit
2014-03-22 09:57 . 2014-03-26 19:05 -------- d-----w- c:\users\asus\AppData\Roaming\uTorrent
2014-03-21 18:46 . 2014-03-21 18:52 -------- d-----w- c:\users\asus\AppData\Local\Microsoft Games
2014-03-21 18:36 . 2014-03-21 18:36 -------- d-----w- c:\programdata\Oracle
2014-03-21 18:35 . 2014-03-21 18:35 -------- d-----w- c:\program files\Common Files\Java
2014-03-21 18:33 . 2014-03-21 18:32 94632 ----a-w- c:\windows\system32\WindowsAccessBridge.dll
2014-03-21 18:12 . 2014-03-21 18:20 -------- d-----w- c:\users\asus\AppData\Roaming\Dropbox
2014-03-21 17:58 . 2014-03-26 18:58 -------- d-----w- c:\programdata\AVAST Software
2014-03-15 07:06 . 2014-03-01 04:11 2724864 ----a-w- c:\windows\system32\mshtml.tlb
2014-03-15 07:06 . 2014-03-01 02:21 271360 ----a-w- c:\program files\Internet Explorer\ieproxy.dll
2014-03-15 07:06 . 2014-03-01 02:28 251392 ----a-w- c:\program files\Internet Explorer\IEShims.dll
2014-03-15 07:06 . 2014-03-01 03:00 1964032 ----a-w- c:\windows\system32\inetcpl.cpl
2014-03-15 07:06 . 2014-03-01 03:52 61952 ----a-w- c:\windows\system32\iesetup.dll
2014-03-15 07:06 . 2014-03-01 22:02 808152 ----a-w- c:\program files\Internet Explorer\iexplore.exe
2014-03-15 07:06 . 2014-03-01 03:14 469504 ----a-w- c:\program files\Internet Explorer\ieinstal.exe
2014-03-15 07:04 . 2014-01-28 02:07 185344 ----a-w- c:\windows\system32\wwansvc.dll
2014-03-15 07:04 . 2014-02-07 01:07 2349056 ----a-w- c:\windows\system32\win32k.sys
2014-03-15 07:04 . 2014-02-04 02:04 1230336 ----a-w- c:\windows\system32\WindowsCodecs.dll
2014-03-15 07:04 . 2014-01-29 02:06 381440 ----a-w- c:\windows\system32\wer.dll
2014-03-06 10:59 . 2014-03-06 10:59 -------- d-----w- c:\windows\Migration
2014-03-06 08:06 . 2013-12-21 08:56 454656 ----a-w- c:\windows\system32\vbscript.dll
.
.
.
(((((((((((((((((((((((((((((((((((((((( Find3M výpis ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2014-03-15 07:11 . 2013-01-22 19:52 692616 ----a-w- c:\windows\system32\FlashPlayerApp.exe
2014-03-15 07:11 . 2011-10-06 14:35 71048 ----a-w- c:\windows\system32\FlashPlayerCPLApp.cpl
2014-01-19 07:32 . 2009-12-24 16:35 231584 ------w- c:\windows\system32\MpSigStub.exe
.
.
(((((((((((((((((((((((((((((((((( Spouštěcí body v registru )))))))))))))))))))))))))))))))))))))))))))))
.
.
*Poznámka* prázdné záznamy a legitimní výchozí údaje nejsou zobrazeny.
REGEDIT4
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ SkyDrivePro1 (ErrorConflict)]
@="{8BA85C75-763B-4103-94EB-9470F12FE0F7}"
[HKEY_CLASSES_ROOT\CLSID\{8BA85C75-763B-4103-94EB-9470F12FE0F7}]
2013-11-02 11:10 1727176 ----a-w- c:\progra~1\MIF5BA~1\Office15\GROOVEEX.DLL
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ SkyDrivePro2 (SyncInProgress)]
@="{CD55129A-B1A1-438E-A425-CEBC7DC684EE}"
[HKEY_CLASSES_ROOT\CLSID\{CD55129A-B1A1-438E-A425-CEBC7DC684EE}]
2013-11-02 11:10 1727176 ----a-w- c:\progra~1\MIF5BA~1\Office15\GROOVEEX.DLL
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ SkyDrivePro3 (InSync)]
@="{E768CD3B-BDDC-436D-9C13-E1B39CA257B1}"
[HKEY_CLASSES_ROOT\CLSID\{E768CD3B-BDDC-436D-9C13-E1B39CA257B1}]
2013-11-02 11:10 1727176 ----a-w- c:\progra~1\MIF5BA~1\Office15\GROOVEEX.DLL
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\AsusWSShellExt_B]
@="{CC5FC992-B0AA-47CD-9DC2-83445083CBB8}"
[HKEY_CLASSES_ROOT\CLSID\{CC5FC992-B0AA-47CD-9DC2-83445083CBB8}]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\AsusWSShellExt_O]
@="{618A47A2-528B-4D9A-AFC8-97D3233511E2}"
[HKEY_CLASSES_ROOT\CLSID\{618A47A2-528B-4D9A-AFC8-97D3233511E2}]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt1]
@="{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}"
[HKEY_CLASSES_ROOT\CLSID\{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}]
2013-09-11 02:09 131248 ----a-w- c:\users\asus\AppData\Roaming\Dropbox\bin\DropboxExt.22.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt2]
@="{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}"
[HKEY_CLASSES_ROOT\CLSID\{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}]
2013-09-11 02:09 131248 ----a-w- c:\users\asus\AppData\Roaming\Dropbox\bin\DropboxExt.22.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt3]
@="{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}"
[HKEY_CLASSES_ROOT\CLSID\{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}]
2013-09-11 02:09 131248 ----a-w- c:\users\asus\AppData\Roaming\Dropbox\bin\DropboxExt.22.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt4]
@="{FB314EDC-A251-47B7-93E1-CDD82E34AF8B}"
[HKEY_CLASSES_ROOT\CLSID\{FB314EDC-A251-47B7-93E1-CDD82E34AF8B}]
2013-09-11 02:09 131248 ----a-w- c:\users\asus\AppData\Roaming\Dropbox\bin\DropboxExt.22.dll
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"uTorrent"="c:\users\asus\AppData\Roaming\uTorrent\uTorrent.exe" [2014-03-22 1208152]
"DAEMON Tools Lite"="c:\program files\DAEMON Tools Lite\DTLite.exe" [2014-03-04 3696912]
"EA Core"="c:\program files\Electronic Arts\EADM\Core.exe" [BU]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"seznam-listicka-distribuce"="c:\program files\Seznam.cz\distribution\szninstall.exe" [2013-05-16 1062472]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorUser"= 3 (0x3)
"EnableUIADesktopToggle"= 0 (0x0)
"PromptOnSecureDesktop"= 0 (0x0)
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\drivers32]
"mixer2"=wdmaud.drv
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MsMpSvc]
@="Service"
.
[HKLM\~\startupfolder\C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^AsusVibeLauncher.lnk]
backup=c:\windows\pss\AsusVibeLauncher.lnk.CommonStartup
backupExtension=.CommonStartup
path=c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\AsusVibeLauncher.lnk
.
[HKLM\~\startupfolder\C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^HotKeyMon.lnk]
backup=c:\windows\pss\HotKeyMon.lnk.CommonStartup
backupExtension=.CommonStartup
path=c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\HotKeyMon.lnk
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe ARM]
2013-11-21 16:57 959904 ----a-w- c:\program files\Common Files\Adobe\ARM\1.0\AdobeARM.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ASUSWebStorage]
2011-07-29 09:43 737104 ----a-w- c:\program files\ASUS\Asus WebStorage\3.0.108.222\AsusWSPanel.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\EeeStorageBackup]
2009-07-31 08:08 947472 ----a-w- c:\program files\ASUS\Asus WebStorage\BackupService.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\HotKeyMon]
2010-05-24 14:47 35304 ----a-w- c:\windows\System32\AsusSender.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\HotKeysCmds]
2009-10-15 19:26 354840 ----a-w- c:\windows\System32\hkcmd.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\HotkeyService]
2010-05-24 14:47 35304 ----a-w- c:\windows\System32\AsusSender.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\IgfxExt]
2009-10-15 19:26 174616 ----a-w- c:\windows\System32\IgfxExt.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\IgfxTray]
2009-10-15 19:26 137752 ----a-w- c:\windows\System32\igfxtray.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\LiveUpdate]
2010-05-24 14:47 35304 ----a-w- c:\windows\System32\AsusSender.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\MSC]
2013-10-23 13:55 948440 ----a-w- c:\program files\Microsoft Security Client\msseces.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SunJavaUpdateSched]
2013-07-02 08:16 254336 ----a-w- c:\program files\Common Files\Java\Java Update\jusched.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SuperHybridEngine]
2010-05-24 14:47 35304 ----a-w- c:\windows\System32\AsusSender.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SynAsusAcpi]
2009-11-19 19:44 83240 ----a-w- c:\program files\Synaptics\SynTP\SynAsusAcpi.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SynTPEnh]
2009-11-19 19:44 1594664 ----a-w- c:\program files\Synaptics\SynTP\SynTPEnh.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\uTorrent]
2014-03-22 09:59 1208152 ----a-w- c:\users\asus\AppData\Roaming\uTorrent\uTorrent.exe
.
[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run-]
"SpeedUpMyComputer"=c:\program files\SmartTweak\SpeedUpMyComputer\SpeedUpMyComputer.exe /ot /as
.
R3 FlashUSB;FlashUSB;c:\windows\system32\DRIVERS\FlashUSB.sys [2010-05-12 16896]
R3 IEEtwCollectorService;Internet Explorer ETW Collector Service;c:\windows\system32\IEEtwCollector.exe [2014-03-01 108032]
R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys [2010-11-20 52224]
R3 WatAdminSvc;Služba Technologie aktivace Windows;c:\windows\system32\Wat\WatAdminSvc.exe [2010-05-24 1343400]
R4 AsusService;Asus Launcher Service;c:\windows\System32\AsusService.exe [2009-08-19 219136]
R4 wlcrasvc;Windows Live Mesh remote connections service;c:\program files\Windows Live\Mesh\wlcrasvc.exe [2010-09-22 51040]
S1 AsUpIO;AsUpIO;c:\windows\system32\drivers\AsUpIO.sys [2009-07-06 11448]
S1 dtsoftbus01;DAEMON Tools Virtual Bus Driver;c:\windows\system32\DRIVERS\dtsoftbus01.sys [2014-03-24 243128]
S1 MpKsleeaad1a4;MpKsleeaad1a4;c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\{7EC93FBA-A785-48AB-966C-8299E70609ED}\MpKsleeaad1a4.sys [2014-03-26 39464]
S1 wStLibG;wStLibG;c:\windows\system32\drivers\wStLibG.sys [2014-03-25 52928]
S2 NisDrv;Microsoft Network Inspection System;c:\windows\system32\DRIVERS\NisDrvWFP.sys [2013-09-27 104768]
S2 Update Surftastic;Update Surftastic;c:\program files\Surftastic\updateSurftastic.exe [2014-03-24 348448]
S2 Util Surftastic;Util Surftastic;c:\program files\Surftastic\bin\utilSurftastic.exe [2014-03-25 348448]
S3 BthMtpEnum;Modul pro výčet zařízení Bluetooth MTP;c:\windows\system32\DRIVERS\BthMtpEnum.sys [2009-07-14 51200]
S3 btwl2cap;Bluetooth L2CAP Service;c:\windows\system32\DRIVERS\btwl2cap.sys [2009-04-07 29472]
S3 igd;igd;c:\windows\system32\DRIVERS\igdkmd32.sys [2009-10-10 635552]
S3 L1C;NDIS Miniport Driver for Atheros AR8131/AR8132 PCI-E Ethernet Controller (NDIS 6.20);c:\windows\system32\DRIVERS\L1C62x86.sys [2009-07-13 50688]
S3 NisSrv;Kontrola sítě Microsoft;c:\program files\Microsoft Security Client\NisSrv.exe [2013-10-23 280288]
.
.
--- Ostatní služby/ovladače v paměti ---
.
*NewlyCreated* - MPKSLEEAAD1A4
.
[HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{8A69D345-D564-463c-AFF1-A69D9E530F96}]
2014-03-20 20:46 1150280 ----a-w- c:\program files\Google\Chrome\Application\33.0.1750.154\Installer\chrmstp.exe
.
Obsah adresáře 'Naplánované úlohy'
.
2014-03-26 c:\windows\Tasks\Adobe Flash Player Updater.job
- c:\windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2013-01-22 07:11]
.
2014-03-26 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
- c:\program files\Google\Update\GoogleUpdate.exe [2014-03-20 20:29]
.
2014-03-26 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
- c:\program files\Google\Update\GoogleUpdate.exe [2014-03-20 20:29]
.
.
------- Doplňkový sken -------
.
uStart Page = hxxp://www.seznam.cz/
IE: E&xport to Microsoft Excel - c:\progra~1\MIF5BA~1\Office15\EXCEL.EXE/3000
IE: Odeslat obrázek do zařízení &Bluetooth... - c:\program files\WIDCOMM\Bluetooth Software\btsendto_ie_ctx.htm
IE: Odeslat stránku do zařízení &Bluetooth... - c:\program files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
IE: Se&nd to OneNote - c:\progra~1\MIF5BA~1\Office15\ONBttnIE.dll/105
TCP: DhcpNameServer = 192.168.1.1
TCP: Interfaces\{9F3D4AA1-E73D-48EF-976F-4C4B4121FB32}\7495D4242555: DhcpNameServer = 10.0.1.1
TCP: Interfaces\{9F3D4AA1-E73D-48EF-976F-4C4B4121FB32}\94E6475627E65647: DhcpNameServer = 10.0.0.138
TCP: Interfaces\{9F3D4AA1-E73D-48EF-976F-4C4B4121FB32}\B414D494: DhcpNameServer = 192.168.2.1
Filter: text/xml - {807583E5-5146-11D5-A672-00B0D022E945} - c:\program files\Common Files\microsoft shared\OFFICE15\MSOXMLMF.DLL
.
- - - - NEPLATNÉ POLOŽKY ODSTRANĚNÉ Z REGISTRU - - - -
.
Toolbar-Locked - (no file)
Toolbar-10 - (no file)
ShellIconOverlayIdentifiers-{472083B0-C522-11CF-8763-00608CC02F24} - (no file)
ShellIconOverlayIdentifiers-{2012DE06-50C0-48BD-ACDE-88F95D4CAD1F} - (no file)
ShellIconOverlayIdentifiers-{C72C6188-BEF2-46E5-A89A-52F0ED75219E} - (no file)
ShellIconOverlayIdentifiers-{C92F6BC2-AF61-4C0E-80E0-939B8282DDB7} - (no file)
MSConfigStartUp-Adobe Reader Speed Launcher - c:\program files\Adobe\Reader 9.0\Reader\Reader_sl.exe
MSConfigStartUp-ApnTBMon - c:\program files\AskPartnerNetwork\Toolbar\Updater\TBNotifier.exe
MSConfigStartUp-oxrwzv - c:\programdata\oxrwzv.dat
AddRemove-Easy-WebPrint - c:\windows\IsUn0405.exe
.
.
.
--------------------- ZAMKNUTÉ KLÍČE V REGISTRU ---------------------
.
[HKEY_USERS\S-1-5-21-2318946186-1565977137-1874626250-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.eml\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="WindowsLiveMail.Email.1"
.
[HKEY_USERS\S-1-5-21-2318946186-1565977137-1874626250-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.vcf\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="WindowsLiveMail.VCard.1"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\windows\\system32\\Macromed\\Flash\\FlashUtil32_12_0_0_77_ActiveX.exe,-101"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\Elevation]
"Enabled"=dword:00000001
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\LocalServer32]
@="c:\\windows\\system32\\Macromed\\Flash\\FlashUtil32_12_0_0_77_ActiveX.exe"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
.
[HKEY_LOCAL_MACHINE\software\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="IFlashBroker5"
.
[HKEY_LOCAL_MACHINE\software\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"
.
[HKEY_LOCAL_MACHINE\software\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
.
[HKEY_LOCAL_MACHINE\system\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0000\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\system\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0001\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\system\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0002\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\system\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0003\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\system\ControlSet001\Control\PCW\Security]
@Denied: (Full) (Everyone)
.
Celkový čas: 2014-03-26 21:01:36
ComboFix-quarantined-files.txt 2014-03-26 20:01
.
Před spuštěním: Volných bajtů: 30 009 511 936
Po spuštění: Volných bajtů: 29 465 210 880
.
- - End Of File - - A842439D833D54B1BE952D5795C4F68F
A36C5E4F47E84449FF07ED3517B43A31

[Márty84]

Jestli to jeste v pc je, odinstalujte toto c:\program files\Surftastic a c:\program files\SmartTweak\SpeedUpMyComputer . Taky to dela vic skody, nez uzitku


Otevrete si poznamkovy blok a zkopirujte do nej tento skript

Kód: Vybrat vše

KillAll::

Folder::
c:\users\asus\AppData\Local\Avg2014
c:\users\asus\AppData\Roaming\AVG
c:\programdata\AVG
c:\programdata\AVAST Software
c:\program files\Surftastic
c:\program files\SmartTweak

Registry::
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"uTorrent"=-
"DAEMON Tools Lite"=-
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"seznam-listicka-distribuce"=-
[-HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe ARM]
[-HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SunJavaUpdateSched]
[-HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\uTorrent]
[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run-]
"SpeedUpMyComputer"=-

RegLock::
[HKEY_USERS\S-1-5-21-2318946186-1565977137-1874626250-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.eml\UserChoice]
[HKEY_USERS\S-1-5-21-2318946186-1565977137-1874626250-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.vcf\UserChoice]
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}]
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\Elevation]
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\LocalServer32]
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\TypeLib]
[HKEY_LOCAL_MACHINE\software\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}]
[HKEY_LOCAL_MACHINE\software\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\ProxyStubClsid32]
[HKEY_LOCAL_MACHINE\software\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\TypeLib]
[HKEY_LOCAL_MACHINE\system\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0000\AllUserSettings]
[HKEY_LOCAL_MACHINE\system\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0001\AllUserSettings]
[HKEY_LOCAL_MACHINE\system\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0002\AllUserSettings]
[HKEY_LOCAL_MACHINE\system\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0003\AllUserSettings]
[HKEY_LOCAL_MACHINE\system\ControlSet001\Control\PCW\Security]

Driver::
wStLibG
Update Surftastic
Util Surftastic

Reboot::

Vlevo nahore kliknete na napis Soubor
Kliknete na napis Ulozit jako...
Napiste spravne ten cerveny nazev CFScript a ulozte na plochu.
Vypnete antivir i dalsi pripadne zabezpeceni.
Pretahntete mysi tento vytvoreny textovy dokument nad ikonu ComboFix a pustte.
ComboFix by se mel spustit a vykonat prikazy.
Az skonci (muze dojit k restartu pc), mel by se objevit novy log, ten mi sem zase zkopirujte.

Kdyby po restartu nenabehl windows, restartujte znovu, mackejte klavesu F8 a zvolte - Posledni znama funkcni konfigurace
Kdyz windows nabehne, ale pri spousteni ruznych programu bude hlasena chyba, staci restartovat pc a bude to v poradku

[Kristina]

Snad jsem udelala vse dobre

ComboFix 14-03-24.01 - asus 27.03.2014 16:02:53.3.2 - x86
Microsoft Windows 7 Home Premium 6.1.7601.1.1250.420.1029.18.2038.904 [GMT 1:00]
Spuštěný z: c:\users\asus\Desktop\ComboFix.exe
Použité ovládací přepínače :: c:\users\asus\Desktop\CFScript.txt
AV: Microsoft Security Essentials *Enabled/Updated* {641105E6-77ED-3F35-A304-765193BCB75F}
SP: Microsoft Security Essentials *Enabled/Updated* {DF70E402-51D7-30BB-99B4-4D23E83BFDE2}
SP: Windows Defender *Disabled/Outdated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.
.
((((((((((((((((((((((((((((((((((((((( Ostatní výmazy )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
.
((((((((((((((((((((((((((((((((((((((( Ovladače/Služby )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
-------\Legacy_WSTLIBG
-------\Service_Update Surftastic
-------\Service_wStLibG
.
.
((((((((((((((((((((((((( Soubory vytvořené od 2014-02-27 do 2014-03-27 )))))))))))))))))))))))))))))))
.
.
2014-03-27 15:24 . 2014-03-27 15:24 -------- d-----w- c:\users\wangzhisong\AppData\Local\temp
2014-03-27 15:24 . 2014-03-27 15:24 -------- d-----w- c:\users\Default\AppData\Local\temp
2014-03-27 14:58 . 2014-03-07 04:35 7969936 ----a-w- c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\{9A77BD69-DC01-401E-A58B-C5CAB729A9D1}\mpengine.dll
2014-03-26 20:01 . 2014-03-27 17:49 -------- d-----w- c:\users\asus\AppData\Local\temp
2014-03-26 14:24 . 2014-03-26 14:22 765968 ------w- c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\{BE8AACE6-2B52-49F4-8798-D625B0E1BA68}\gapaengine.dll
2014-03-26 14:23 . 2014-03-07 04:35 7969936 ----a-w- c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\Backup\mpengine.dll
2014-03-25 20:50 . 2014-03-25 20:50 -------- d-----w- c:\users\asus\AppData\Local\Avg2014
2014-03-25 19:07 . 2014-03-25 19:07 52928 ----a-w- c:\windows\system32\drivers\wStLibG.sys
2014-03-25 17:40 . 2014-03-25 17:40 -------- d-----w- c:\program files\Seznam.cz
2014-03-25 17:36 . 2014-03-26 14:08 -------- d-----w- c:\program files\PCData
2014-03-25 17:34 . 2014-03-27 14:47 -------- d-----w- c:\program files\Surftastic
2014-03-25 17:31 . 2014-03-25 17:31 -------- d-----w- c:\users\asus\AppData\Local\87542dc6-8938-4565-f241-7774dad144a1
2014-03-25 16:38 . 2014-03-25 16:38 -------- d-----w- c:\users\asus\AppData\Roaming\Origin
2014-03-25 16:38 . 2014-03-25 16:38 -------- d-----w- c:\users\asus\AppData\Local\Origin
2014-03-25 16:38 . 2014-03-26 14:50 -------- d-----w- c:\users\asus\AppData\Local\CrashDumps
2014-03-25 16:38 . 2014-03-25 16:38 -------- d-----w- c:\programdata\Origin
2014-03-25 16:38 . 2014-03-25 16:38 -------- d-----w- c:\program files\Origin Games
2014-03-25 16:33 . 2014-03-25 16:38 -------- d-----w- c:\program files\Origin
2014-03-25 16:03 . 2014-03-25 16:38 -------- d-----w- c:\programdata\Electronic Arts
2014-03-25 15:34 . 2014-03-26 15:51 -------- d-----w- c:\program files\Electronic Arts
2014-03-24 19:52 . 2008-09-05 00:22 447752 ----a-w- c:\windows\system32\vp6vfw.dll
2014-03-24 19:52 . 2014-03-24 19:52 -------- d-----w- c:\program files\Microsoft WSE
2014-03-24 18:51 . 2014-03-24 19:00 -------- dc----w- C:\AdwCleaner
2014-03-24 17:55 . 2014-03-24 18:46 -------- d-----w- c:\program files\SmartTweak
2014-03-24 17:52 . 2014-03-25 17:40 -------- d-----w- c:\users\asus\AppData\Roaming\Seznam.cz
2014-03-24 15:33 . 2014-03-24 15:33 243128 ----a-w- c:\windows\system32\drivers\dtsoftbus01.sys
2014-03-24 15:33 . 2014-03-24 15:33 -------- d-----w- c:\program files\DAEMON Tools Lite
2014-03-24 15:16 . 2014-03-24 15:16 -------- d-----w- c:\users\asus\AppData\Roaming\AVG
2014-03-24 15:13 . 2014-03-24 15:22 -------- d-----w- c:\programdata\AVG
2014-03-24 15:12 . 2014-03-24 17:50 -------- d-sh--w- c:\programdata\{01BD4FC9-2F86-4706-A62E-774BB7E9D308}
2014-03-24 15:11 . 2014-03-24 17:55 -------- d-----w- c:\users\asus\AppData\Roaming\DAEMON Tools Lite
2014-03-24 15:09 . 2014-03-24 15:10 -------- d-----w- c:\programdata\DAEMON Tools Lite
2014-03-23 20:06 . 2014-03-23 20:06 -------- d-----w- c:\users\asus\AppData\Roaming\Malwarebytes
2014-03-23 20:04 . 2014-03-23 20:04 -------- d-----w- c:\programdata\Malwarebytes
2014-03-23 20:03 . 2014-03-24 18:49 -------- d-----w- c:\program files\Malwarebytes' Anti-Malware
2014-03-23 20:03 . 2014-03-23 20:03 -------- d-----w- c:\users\asus\AppData\Local\Programs
2014-03-23 16:52 . 2014-03-23 17:20 -------- d-----w- c:\program files\trend micro
2014-03-23 16:52 . 2014-03-23 17:03 -------- dc----w- C:\rsit
2014-03-22 09:57 . 2014-03-27 14:53 -------- d-----w- c:\users\asus\AppData\Roaming\uTorrent
2014-03-21 18:46 . 2014-03-21 18:52 -------- d-----w- c:\users\asus\AppData\Local\Microsoft Games
2014-03-21 18:36 . 2014-03-21 18:36 -------- d-----w- c:\programdata\Oracle
2014-03-21 18:35 . 2014-03-21 18:35 -------- d-----w- c:\program files\Common Files\Java
2014-03-21 18:33 . 2014-03-21 18:32 94632 ----a-w- c:\windows\system32\WindowsAccessBridge.dll
2014-03-21 18:12 . 2014-03-21 18:20 -------- d-----w- c:\users\asus\AppData\Roaming\Dropbox
2014-03-21 17:58 . 2014-03-26 18:58 -------- d-----w- c:\programdata\AVAST Software
2014-03-15 07:06 . 2014-03-01 04:11 2724864 ----a-w- c:\windows\system32\mshtml.tlb
2014-03-15 07:06 . 2014-03-01 02:21 271360 ----a-w- c:\program files\Internet Explorer\ieproxy.dll
2014-03-15 07:06 . 2014-03-01 02:28 251392 ----a-w- c:\program files\Internet Explorer\IEShims.dll
2014-03-15 07:06 . 2014-03-01 03:00 1964032 ----a-w- c:\windows\system32\inetcpl.cpl
2014-03-15 07:06 . 2014-03-01 03:52 61952 ----a-w- c:\windows\system32\iesetup.dll
2014-03-15 07:06 . 2014-03-01 22:02 808152 ----a-w- c:\program files\Internet Explorer\iexplore.exe
2014-03-15 07:06 . 2014-03-01 03:14 469504 ----a-w- c:\program files\Internet Explorer\ieinstal.exe
2014-03-15 07:04 . 2014-01-28 02:07 185344 ----a-w- c:\windows\system32\wwansvc.dll
2014-03-15 07:04 . 2014-02-07 01:07 2349056 ----a-w- c:\windows\system32\win32k.sys
2014-03-15 07:04 . 2014-02-04 02:04 1230336 ----a-w- c:\windows\system32\WindowsCodecs.dll
2014-03-15 07:04 . 2014-01-29 02:06 381440 ----a-w- c:\windows\system32\wer.dll
2014-03-06 10:59 . 2014-03-06 10:59 -------- d-----w- c:\windows\Migration
2014-03-06 08:06 . 2013-12-21 08:56 454656 ----a-w- c:\windows\system32\vbscript.dll
.
.
.
(((((((((((((((((((((((((((((((((((((((( Find3M výpis ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2014-03-27 17:50 . 2014-03-27 17:50 39464 ----a-w- c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\{9A77BD69-DC01-401E-A58B-C5CAB729A9D1}\MpKsl961fa0af.sys
2014-03-15 07:11 . 2013-01-22 19:52 692616 ----a-w- c:\windows\system32\FlashPlayerApp.exe
2014-03-15 07:11 . 2011-10-06 14:35 71048 ----a-w- c:\windows\system32\FlashPlayerCPLApp.cpl
2014-01-19 07:32 . 2009-12-24 16:35 231584 ------w- c:\windows\system32\MpSigStub.exe
.
.
(((((((((((((((((((((((((((((((((( Spouštěcí body v registru )))))))))))))))))))))))))))))))))))))))))))))
.
.
*Poznámka* prázdné záznamy a legitimní výchozí údaje nejsou zobrazeny.
REGEDIT4
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ SkyDrivePro1 (ErrorConflict)]
@="{8BA85C75-763B-4103-94EB-9470F12FE0F7}"
[HKEY_CLASSES_ROOT\CLSID\{8BA85C75-763B-4103-94EB-9470F12FE0F7}]
2013-11-02 11:10 1727176 ----a-w- c:\progra~1\MIF5BA~1\Office15\GROOVEEX.DLL
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ SkyDrivePro2 (SyncInProgress)]
@="{CD55129A-B1A1-438E-A425-CEBC7DC684EE}"
[HKEY_CLASSES_ROOT\CLSID\{CD55129A-B1A1-438E-A425-CEBC7DC684EE}]
2013-11-02 11:10 1727176 ----a-w- c:\progra~1\MIF5BA~1\Office15\GROOVEEX.DLL
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ SkyDrivePro3 (InSync)]
@="{E768CD3B-BDDC-436D-9C13-E1B39CA257B1}"
[HKEY_CLASSES_ROOT\CLSID\{E768CD3B-BDDC-436D-9C13-E1B39CA257B1}]
2013-11-02 11:10 1727176 ----a-w- c:\progra~1\MIF5BA~1\Office15\GROOVEEX.DLL
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\AsusWSShellExt_B]
@="{CC5FC992-B0AA-47CD-9DC2-83445083CBB8}"
[HKEY_CLASSES_ROOT\CLSID\{CC5FC992-B0AA-47CD-9DC2-83445083CBB8}]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\AsusWSShellExt_O]
@="{618A47A2-528B-4D9A-AFC8-97D3233511E2}"
[HKEY_CLASSES_ROOT\CLSID\{618A47A2-528B-4D9A-AFC8-97D3233511E2}]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt1]
@="{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}"
[HKEY_CLASSES_ROOT\CLSID\{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}]
2013-09-11 02:09 131248 ----a-w- c:\users\asus\AppData\Roaming\Dropbox\bin\DropboxExt.22.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt2]
@="{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}"
[HKEY_CLASSES_ROOT\CLSID\{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}]
2013-09-11 02:09 131248 ----a-w- c:\users\asus\AppData\Roaming\Dropbox\bin\DropboxExt.22.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt3]
@="{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}"
[HKEY_CLASSES_ROOT\CLSID\{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}]
2013-09-11 02:09 131248 ----a-w- c:\users\asus\AppData\Roaming\Dropbox\bin\DropboxExt.22.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt4]
@="{FB314EDC-A251-47B7-93E1-CDD82E34AF8B}"
[HKEY_CLASSES_ROOT\CLSID\{FB314EDC-A251-47B7-93E1-CDD82E34AF8B}]
2013-09-11 02:09 131248 ----a-w- c:\users\asus\AppData\Roaming\Dropbox\bin\DropboxExt.22.dll
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"EA Core"="c:\program files\Electronic Arts\EADM\Core.exe" [BU]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorUser"= 3 (0x3)
"EnableUIADesktopToggle"= 0 (0x0)
"PromptOnSecureDesktop"= 0 (0x0)
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\drivers32]
"mixer2"=wdmaud.drv
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MsMpSvc]
@="Service"
.
[HKLM\~\startupfolder\C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^AsusVibeLauncher.lnk]
backup=c:\windows\pss\AsusVibeLauncher.lnk.CommonStartup
backupExtension=.CommonStartup
path=c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\AsusVibeLauncher.lnk
.
[HKLM\~\startupfolder\C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^HotKeyMon.lnk]
backup=c:\windows\pss\HotKeyMon.lnk.CommonStartup
backupExtension=.CommonStartup
path=c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\HotKeyMon.lnk
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ASUSWebStorage]
2011-07-29 09:43 737104 ----a-w- c:\program files\ASUS\Asus WebStorage\3.0.108.222\AsusWSPanel.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\EeeStorageBackup]
2009-07-31 08:08 947472 ----a-w- c:\program files\ASUS\Asus WebStorage\BackupService.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\HotKeyMon]
2010-05-24 14:47 35304 ----a-w- c:\windows\System32\AsusSender.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\HotKeysCmds]
2009-10-15 19:26 354840 ----a-w- c:\windows\System32\hkcmd.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\HotkeyService]
2010-05-24 14:47 35304 ----a-w- c:\windows\System32\AsusSender.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\IgfxExt]
2009-10-15 19:26 174616 ----a-w- c:\windows\System32\IgfxExt.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\IgfxTray]
2009-10-15 19:26 137752 ----a-w- c:\windows\System32\igfxtray.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\LiveUpdate]
2010-05-24 14:47 35304 ----a-w- c:\windows\System32\AsusSender.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\MSC]
2013-10-23 13:55 948440 ----a-w- c:\program files\Microsoft Security Client\msseces.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SuperHybridEngine]
2010-05-24 14:47 35304 ----a-w- c:\windows\System32\AsusSender.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SynAsusAcpi]
2009-11-19 19:44 83240 ----a-w- c:\program files\Synaptics\SynTP\SynAsusAcpi.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SynTPEnh]
2009-11-19 19:44 1594664 ----a-w- c:\program files\Synaptics\SynTP\SynTPEnh.exe
.
R3 FlashUSB;FlashUSB;c:\windows\system32\DRIVERS\FlashUSB.sys [2010-05-12 16896]
R3 IEEtwCollectorService;Internet Explorer ETW Collector Service;c:\windows\system32\IEEtwCollector.exe [2014-03-01 108032]
R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys [2010-11-20 52224]
R3 WatAdminSvc;Služba Technologie aktivace Windows;c:\windows\system32\Wat\WatAdminSvc.exe [2010-05-24 1343400]
R4 AsusService;Asus Launcher Service;c:\windows\System32\AsusService.exe [2009-08-19 219136]
R4 wlcrasvc;Windows Live Mesh remote connections service;c:\program files\Windows Live\Mesh\wlcrasvc.exe [2010-09-22 51040]
S1 AsUpIO;AsUpIO;c:\windows\system32\drivers\AsUpIO.sys [2009-07-06 11448]
S1 dtsoftbus01;DAEMON Tools Virtual Bus Driver;c:\windows\system32\DRIVERS\dtsoftbus01.sys [2014-03-24 243128]
S1 MpKsl961fa0af;MpKsl961fa0af;c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\{9A77BD69-DC01-401E-A58B-C5CAB729A9D1}\MpKsl961fa0af.sys [2014-03-27 39464]
S2 NisDrv;Microsoft Network Inspection System;c:\windows\system32\DRIVERS\NisDrvWFP.sys [2013-09-27 104768]
S3 BthMtpEnum;Modul pro výčet zařízení Bluetooth MTP;c:\windows\system32\DRIVERS\BthMtpEnum.sys [2009-07-14 51200]
S3 btwl2cap;Bluetooth L2CAP Service;c:\windows\system32\DRIVERS\btwl2cap.sys [2009-04-07 29472]
S3 igd;igd;c:\windows\system32\DRIVERS\igdkmd32.sys [2009-10-10 635552]
S3 L1C;NDIS Miniport Driver for Atheros AR8131/AR8132 PCI-E Ethernet Controller (NDIS 6.20);c:\windows\system32\DRIVERS\L1C62x86.sys [2009-07-13 50688]
S3 NisSrv;Kontrola sítě Microsoft;c:\program files\Microsoft Security Client\NisSrv.exe [2013-10-23 280288]
.
.
--- Ostatní služby/ovladače v paměti ---
.
*NewlyCreated* - MPKSL961FA0AF
.
[HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{8A69D345-D564-463c-AFF1-A69D9E530F96}]
2014-03-20 20:46 1150280 ----a-w- c:\program files\Google\Chrome\Application\33.0.1750.154\Installer\chrmstp.exe
.
Obsah adresáře 'Naplánované úlohy'
.
2014-03-27 c:\windows\Tasks\Adobe Flash Player Updater.job
- c:\windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2013-01-22 07:11]
.
2014-03-27 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
- c:\program files\Google\Update\GoogleUpdate.exe [2014-03-20 20:29]
.
2014-03-27 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
- c:\program files\Google\Update\GoogleUpdate.exe [2014-03-20 20:29]
.
.
------- Doplňkový sken -------
.
uStart Page = hxxp://www.seznam.cz/
IE: E&xport to Microsoft Excel - c:\progra~1\MIF5BA~1\Office15\EXCEL.EXE/3000
IE: Odeslat obrázek do zařízení &Bluetooth... - c:\program files\WIDCOMM\Bluetooth Software\btsendto_ie_ctx.htm
IE: Odeslat stránku do zařízení &Bluetooth... - c:\program files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
IE: Se&nd to OneNote - c:\progra~1\MIF5BA~1\Office15\ONBttnIE.dll/105
TCP: DhcpNameServer = 192.168.1.1
TCP: Interfaces\{9F3D4AA1-E73D-48EF-976F-4C4B4121FB32}\7495D4242555: DhcpNameServer = 10.0.1.1
TCP: Interfaces\{9F3D4AA1-E73D-48EF-976F-4C4B4121FB32}\94E6475627E65647: DhcpNameServer = 10.0.0.138
TCP: Interfaces\{9F3D4AA1-E73D-48EF-976F-4C4B4121FB32}\B414D494: DhcpNameServer = 192.168.2.1
Filter: text/xml - {807583E5-5146-11D5-A672-00B0D022E945} - c:\program files\Common Files\microsoft shared\OFFICE15\MSOXMLMF.DLL
.
.
--------------------- Knihovny navázané na běžící procesy ---------------------
.
- - - - - - - > 'Explorer.exe'(2276)
c:\progra~1\ASUS\ASUSWE~1\30108~1.222\ASUSWS~1.DLL
c:\program files\WIDCOMM\Bluetooth Software\btncopy.dll
.
------------------------ Jiné spuštené procesy ------------------------
.
c:\program files\Microsoft Security Client\MsMpEng.exe
c:\program files\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe
c:\program files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
c:\program files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe
c:\program files\Windows Media Player\wmpnetwk.exe
c:\windows\system32\taskhost.exe
c:\windows\system32\conhost.exe
c:\windows\system32\DllHost.exe
.
**************************************************************************
.
Celkový čas: 2014-03-27 18:56:26 - počítač byl restartován
ComboFix-quarantined-files.txt 2014-03-27 17:56
ComboFix2.txt 2014-03-26 20:01
.
Před spuštěním: Volných bajtů: 32 171 753 472
Po spuštění: Volných bajtů: 34 695 700 480
.
- - End Of File - - 451C3F555AC4F8C848C8B0C3AD25D992
A36C5E4F47E84449FF07ED3517B43A31

[Márty84]

Snad jsem udelala vse dobre

Jo jo

Dejte mi sem novy log z RSIT