kryptik

[symy13]

zdravím stále mi vyskakuje na webových stránkách kryptik zasílám scan předem děkuji za jakoukoliv odpověd jsem laik dik za pochopení projel jsem comp nodem 32 i ccleaner i malware našli hrozby odeslali do karantény ale problem se opakuje
ogfile of random's system information tool 1.09 (written by random/random)
Run by symy13 at 2014-04-02 19:46:03
Microsoft Windows 7 Professional Service Pack 1
System drive C: has 116 GB (39%) free of 300 GB
Total RAM: 3569 MB (59% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 19:46:10, on 2.4.2014
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v11.0 (11.00.9600.16521)
Boot mode: Normal

Running processes:
C:\Windows\system32\Dwm.exe
C:\Windows\system32\taskhost.exe
C:\Windows\Explorer.EXE
C:\Program Files\Malwarebytes Anti-Malware\mbam.exe
C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe
C:\Program Files\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe
C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe
C:\Program Files\HP\HP Software Update\hpwuSchd2.exe
C:\Program Files\Common Files\Java\Java Update\jusched.exe
C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe
C:\Program Files\Steam\Steam.exe
C:\Program Files\Skype\Phone\Skype.exe
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\ESET-phase2.exe
C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
C:\Users\symy13\AppData\Roaming\Seznam.cz\bin\szndesktop.exe
C:\Program Files\HP\Digital Imaging\bin\hpqSTE08.exe
C:\Program Files\HP\Digital Imaging\bin\hpqbam08.exe
C:\Program Files\HP\Digital Imaging\bin\hpqgpc01.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\Mozilla Firefox\plugin-container.exe
C:\Windows\system32\Macromed\Flash\FlashPlayerPlugin_12_0_0_77.exe
C:\Windows\system32\Macromed\Flash\FlashPlayerPlugin_12_0_0_77.exe
D:\Stáhnuté\RSIT.exe
C:\Program Files\trend micro\symy13.exe
C:\Windows\system32\DllHost.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.seznam.cz/?clid=16194
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
O2 - BHO: HP Print Enhancer - {0347C33E-8762-4905-BF09-768834316C61} - C:\Program Files\HP\Digital Imaging\Smart Web Printing\hpswp_printenhancer.dll
O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\PROGRA~1\MICROS~1\Office12\GR469A~1.DLL
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll
O2 - BHO: Pomocník pro přihlášení ke službě Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: SkypeIEPluginBHO - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll
O2 - BHO: HP Smart BHO Class - {FFFFFFFF-CF4E-4F2B-BDC2-0E72E116A856} - C:\Program Files\HP\Digital Imaging\Smart Web Printing\hpswp_BHO.dll
O4 - HKLM\..\Run: [RtHDVCpl] C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe -s
O4 - HKLM\..\Run: [NUSB3MON] "C:\Program Files\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe"
O4 - HKLM\..\Run: [StartCCC] "C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun
O4 - HKLM\..\Run: [GrooveMonitor] "C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe"
O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Common Files\Java\Java Update\jusched.exe"
O4 - HKLM\..\Run: [seznam-listicka-distribuce] "C:\Program Files\Seznam.cz\distribution\szninstall.exe" -s -d listicka 1 szn-software-listicka cz.seznam.software.autoupdate
O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKLM\..\Run: [egui] "C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe" /hide /waitservice
O4 - HKCU\..\Run: [DAEMON Tools Lite] "C:\Program Files\DAEMON Tools Lite\DTLite.exe" -autorun
O4 - HKCU\..\Run: [Steam] "C:\Program Files\Steam\steam.exe" -silent
O4 - HKCU\..\Run: [cz.seznam.software.autoupdate] "C:\Users\symy13\AppData\Roaming\Seznam.cz\szninstall.exe" -c
O4 - HKCU\..\Run: [cz.seznam.software.szndesktop] "C:\Users\symy13\AppData\Roaming\Seznam.cz\bin\wszndesktop.exe" -q
O4 - HKCU\..\Run: [Skype] "C:\Program Files\Skype\Phone\Skype.exe" /minimized /regrun
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'NETWORK SERVICE')
O4 - Global Startup: ESET-phase2.exe
O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Excel - res://C:\PROGRA~1\MICROS~1\Office12\EXCEL.EXE/3000
O9 - Extra button: Odeslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~1\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: Od&eslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~1\Office12\ONBttnIE.dll
O9 - Extra button: PokerStars - {3AD14F0C-ED16-4e43-B6D8-661B03F6A1EF} - C:\Program Files\PokerStars\PokerStarsUpdate.exe
O9 - Extra button: Skype Click to Call - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~1\Office12\REFIEBAR.DLL
O9 - Extra button: Zobrazit nebo skrýt HP Smart Web Printing - {DDE87865-83C5-48c4-8357-2F5B1AA84522} - C:\Program Files\HP\Digital Imaging\Smart Web Printing\hpswp_BHO.dll
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\PROGRA~1\MICROS~1\Office12\GRA32A~1.DLL
O18 - Protocol: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O20 - AppInit_DLLs: C:\Users\symy13\AppData\Local\DProtect\eBP.dll,C:\Users\symy13\AppData\Local\DProtect\eBPSD.dll
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: AMD External Events Utility - AMD - C:\Windows\system32\atiesrxx.exe
O23 - Service: ESET HTTP Server (EhttpSrv) - ESET - C:\Program Files\ESET\ESET NOD32 Antivirus\EHttpSrv.exe
O23 - Service: ESET Service (ekrn) - ESET - C:\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\1150\Intel 32\IDriverT.exe
O23 - Service: Intel® PROSet Monitoring Service - Intel Corporation - C:\Windows\system32\IProsetMonitor.exe
O23 - Service: Intel(R) Management and Security Application Local Management Service (LMS) - Intel Corporation - C:\Program Files\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
O23 - Service: MBAMScheduler - Malwarebytes Corporation - C:\Program Files\Malwarebytes Anti-Malware\mbamscheduler.exe
O23 - Service: MBAMService - Malwarebytes Corporation - C:\Program Files\Malwarebytes Anti-Malware\mbamservice.exe
O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Mozilla Foundation - C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe
O23 - Service: Skype Updater (SkypeUpdate) - Skype Technologies - C:\Program Files\Skype\Updater\Updater.exe
O23 - Service: Steam Client Service - Valve Corporation - C:\Program Files\Common Files\Steam\SteamService.exe
O23 - Service: Intel(R) Management and Security Application User Notification Service (UNS) - Intel Corporation - C:\Program Files\Intel\Intel(R) Management Engine Components\UNS\UNS.exe

--
End of file - 8720 bytes

======Scheduled tasks folder======

C:\Windows\tasks\Adobe Flash Player Updater.job

=========Mozilla firefox=========

ProfilePath - C:\Users\symy13\AppData\Roaming\Mozilla\Firefox\Profiles\os4pm6tq.default

prefs.js - "browser.search.useDBForOrder" - true

"smartwebprinting@hp.com"=C:\Program Files\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3


[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 12.0.0.77 Plugin
"Path"=C:\Windows\system32\Macromed\Flash\NPSWF32_12_0_0_77.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@java.com/DTPlugin,version=10.40.2]
"Description"=Java™ Deployment Toolkit
"Path"=C:\Windows\system32\npDeployJava1.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@java.com/JavaPlugin,version=10.40.2]
"Description"=Oracle® Next Generation Java™ Plug-In
"Path"=C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@microsoft.com/GENUINE]
"Description"=
"Path"=disabled

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\Adobe Reader]
"Description"=Handles PDFs in-place in Firefox
"Path"=C:\Program Files\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll


C:\Users\symy13\AppData\Roaming\Mozilla\Firefox\Profiles\os4pm6tq.default\extensions\
WebSiteRecommendation@weliketheweb.com
{ea614400-e918-4741-9a97-7a972ff7c30b}

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{0347C33E-8762-4905-BF09-768834316C61}]
HP Print Enhancer - C:\Program Files\HP\Digital Imaging\Smart Web Printing\hpswp_printenhancer.dll [2009-05-21 328248]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{72853161-30C5-4D22-B7F9-0BBC1D38A37E}]
Groove GFS Browser Helper - C:\PROGRA~1\MICROS~1\Office12\GR469A~1.DLL [2006-10-27 2210608]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
Java(tm) Plug-In SSV Helper - C:\Program Files\Java\jre7\bin\ssv.dll [2013-09-19 462248]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
Pomocník pro přihlášení ke službě Windows Live - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2009-01-22 408448]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}]
Skype Browser Helper - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll [2013-11-20 4502400]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre7\bin\jp2ssv.dll [2013-09-19 171944]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{FFFFFFFF-CF4E-4F2B-BDC2-0E72E116A856}]
HP Smart BHO Class - C:\Program Files\HP\Digital Imaging\Smart Web Printing\hpswp_BHO.dll [2009-05-21 509496]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"RtHDVCpl"=C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe [2010-10-05 9742952]
"NUSB3MON"=C:\Program Files\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe [2010-04-27 113288]
"StartCCC"=C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [2011-04-19 336384]
"GrooveMonitor"=C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe [2006-10-27 31016]
"HP Software Update"=C:\Program Files\HP\HP Software Update\HPWuSchd2.exe [2007-05-08 54840]
"SunJavaUpdateSched"=C:\Program Files\Common Files\Java\Java Update\jusched.exe [2013-07-02 254336]
"seznam-listicka-distribuce"=C:\Program Files\Seznam.cz\distribution\szninstall.exe [2013-05-16 1062472]
"Adobe ARM"=C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2013-11-21 959904]
"egui"=C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe [2011-01-12 2219184]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"DAEMON Tools Lite"=C:\Program Files\DAEMON Tools Lite\DTLite.exe [2012-11-06 3673728]
"Steam"=C:\Program Files\Steam\steam.exe [2014-02-25 1821888]
"cz.seznam.software.autoupdate"=C:\Users\symy13\AppData\Roaming\Seznam.cz\szninstall.exe [2013-05-16 1062472]
"cz.seznam.software.szndesktop"=C:\Users\symy13\AppData\Roaming\Seznam.cz\bin\wszndesktop.exe [2013-04-12 92664]
"Skype"=C:\Program Files\Skype\Phone\Skype.exe [2014-02-10 20922016]

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup
ESET-phase2.exe
HP Digital Imaging Monitor.lnk - C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
"AppInit_DLLs"="C:\Users\symy13\AppData\Local\DProtect\eBP.dll,C:\Users\symy13\AppData\Local\DProtect\eBPSD.dll"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED}

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{B5A7F190-DDA6-4420-B3BA-52453494E6CD}"=C:\PROGRA~1\MICROS~1\Office12\GR469A~1.DLL [2006-10-27 2210608]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=credssp.dll

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorAdmin"=5
"ConsentPromptBehaviorUser"=3
"EnableUIADesktopToggle"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.msadpcm"=msadp32.acm
"midimapper"=midimap.dll
"wavemapper"=msacm32.drv
"VIDC.UYVY"=msyuv.dll
"VIDC.YUY2"=msyuv.dll
"VIDC.YVYU"=msyuv.dll
"VIDC.IYUV"=iyuv_32.dll
"vidc.i420"=iyuv_32.dll
"VIDC.YVU9"=tsbyuv.dll
"msacm.l3acm"=l3codeca.acm
"vidc.cvid"=iccvid.dll
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"aux1"=wdmaud.drv
"VIDC.LAGS"=lagarith.dll
"VIDC.X264"=x264vfw.dll
"VIDC.XVID"=xvidvfw.dll
"VIDC.FFDS"=ff_vfw.dll
"msacm.ac3acm"=ac3acm.acm
"msacm.l3codecp"=l3codecp.acm
"wave2"=wdmaud.drv
"midi2"=wdmaud.drv
"mixer2"=wdmaud.drv
"aux2"=wdmaud.drv
"MSVideo8"=VfWWDM32.dll
"VIDC.FPS1"=frapsvid.dll
"wave3"=wdmaud.drv
"midi3"=wdmaud.drv
"mixer3"=wdmaud.drv
"aux3"=wdmaud.drv

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*

======List of files/folders created in the last 1 month======

2014-04-02 19:46:04 ----D---- C:\Program Files\trend micro
2014-04-02 19:46:03 ----D---- C:\rsit
2014-04-01 21:07:09 ----A---- C:\Windows\system32\drivers\mwac.sys
2014-04-01 21:07:09 ----A---- C:\Windows\system32\drivers\mbamchameleon.sys
2014-04-01 21:07:09 ----A---- C:\Windows\system32\drivers\mbam.sys
2014-04-01 21:07:08 ----D---- C:\Program Files\Malwarebytes Anti-Malware
2014-04-01 20:16:06 ----D---- C:\Program Files\ESET
2014-04-01 16:34:08 ----D---- C:\Program Files\Castlevania Lords of Shadow Mirror of Fate HD
2014-03-29 11:16:20 ----D---- C:\Program Files\Mozilla Firefox
2014-03-23 09:23:25 ----D---- C:\Program Files\Common Files\Skype
2014-03-12 07:23:21 ----A---- C:\Windows\system32\MsSpellCheckingFacility.exe
2014-03-12 07:23:21 ----A---- C:\Windows\system32\jsproxy.dll
2014-03-12 07:23:21 ----A---- C:\Windows\system32\jscript9diag.dll
2014-03-12 07:23:21 ----A---- C:\Windows\system32\iernonce.dll
2014-03-12 07:23:21 ----A---- C:\Windows\system32\ieetwproxystub.dll
2014-03-12 07:23:21 ----A---- C:\Windows\system32\ieetwcollectorres.dll
2014-03-12 07:23:21 ----A---- C:\Windows\system32\ieetwcollector.exe
2014-03-12 07:23:21 ----A---- C:\Windows\system32\ieapfltr.dll
2014-03-12 07:23:20 ----A---- C:\Windows\system32\wininet.dll
2014-03-12 07:23:20 ----A---- C:\Windows\system32\ieui.dll
2014-03-12 07:23:19 ----A---- C:\Windows\system32\jscript9.dll
2014-03-12 07:23:19 ----A---- C:\Windows\system32\ieUnatt.exe
2014-03-12 07:23:19 ----A---- C:\Windows\system32\iertutil.dll
2014-03-12 07:23:18 ----A---- C:\Windows\system32\mshtml.dll
2014-03-12 07:23:17 ----A---- C:\Windows\system32\urlmon.dll
2014-03-12 07:23:16 ----A---- C:\Windows\system32\msrating.dll
2014-03-12 07:23:16 ----A---- C:\Windows\system32\msfeeds.dll
2014-03-12 07:23:16 ----A---- C:\Windows\system32\ie4uinit.exe
2014-03-12 07:23:15 ----A---- C:\Windows\system32\iesetup.dll
2014-03-12 07:23:15 ----A---- C:\Windows\system32\ieframe.dll
2014-03-12 07:23:01 ----A---- C:\Windows\system32\win32k.sys
2014-03-12 07:23:01 ----A---- C:\Windows\system32\qedit.dll
2014-03-12 07:23:00 ----A---- C:\Windows\system32\wwansvc.dll
2014-03-12 07:22:52 ----A---- C:\Windows\system32\WindowsCodecs.dll
2014-03-12 07:22:52 ----A---- C:\Windows\system32\wer.dll
2014-03-05 07:46:01 ----A---- C:\Windows\system32\XAudio2_7.dll
2014-03-05 07:46:01 ----A---- C:\Windows\system32\XAPOFX1_5.dll
2014-03-05 07:46:00 ----A---- C:\Windows\system32\xactengine3_7.dll
2014-03-05 07:46:00 ----A---- C:\Windows\system32\d3dcsx_43.dll
2014-03-05 07:45:59 ----A---- C:\Windows\system32\XAudio2_6.dll
2014-03-05 07:45:59 ----A---- C:\Windows\system32\XAPOFX1_4.dll
2014-03-05 07:45:59 ----A---- C:\Windows\system32\xactengine3_6.dll
2014-03-05 07:45:59 ----A---- C:\Windows\system32\X3DAudio1_7.dll
2014-03-05 07:45:58 ----A---- C:\Windows\system32\XAudio2_5.dll
2014-03-05 07:45:58 ----A---- C:\Windows\system32\xactengine3_5.dll
2014-03-05 07:45:58 ----A---- C:\Windows\system32\D3DCompiler_42.dll
2014-03-05 07:45:57 ----A---- C:\Windows\system32\d3dcsx_42.dll
2014-03-05 07:45:55 ----A---- C:\Windows\system32\XAudio2_4.dll
2014-03-05 07:45:55 ----A---- C:\Windows\system32\XAPOFX1_3.dll
2014-03-05 07:45:55 ----A---- C:\Windows\system32\xactengine3_4.dll
2014-03-05 07:45:55 ----A---- C:\Windows\system32\D3DX9_41.dll
2014-03-05 07:45:55 ----A---- C:\Windows\system32\d3dx10_41.dll
2014-03-05 07:45:55 ----A---- C:\Windows\system32\D3DCompiler_41.dll
2014-03-05 07:45:54 ----A---- C:\Windows\system32\X3DAudio1_6.dll
2014-03-05 07:45:54 ----A---- C:\Windows\system32\d3dx10_40.dll
2014-03-05 07:45:54 ----A---- C:\Windows\system32\D3DCompiler_40.dll
2014-03-05 07:45:53 ----A---- C:\Windows\system32\XAudio2_3.dll
2014-03-05 07:45:53 ----A---- C:\Windows\system32\XAPOFX1_2.dll
2014-03-05 07:45:53 ----A---- C:\Windows\system32\D3DX9_40.dll
2014-03-05 07:45:52 ----A---- C:\Windows\system32\XAudio2_2.dll
2014-03-05 07:45:52 ----A---- C:\Windows\system32\XAPOFX1_1.dll
2014-03-05 07:45:52 ----A---- C:\Windows\system32\xactengine3_3.dll
2014-03-05 07:45:52 ----A---- C:\Windows\system32\xactengine3_2.dll
2014-03-05 07:45:52 ----A---- C:\Windows\system32\X3DAudio1_5.dll
2014-03-05 07:45:51 ----A---- C:\Windows\system32\d3dx10_39.dll
2014-03-05 07:45:51 ----A---- C:\Windows\system32\D3DCompiler_39.dll
2014-03-05 07:45:50 ----A---- C:\Windows\system32\XAudio2_1.dll
2014-03-05 07:45:50 ----A---- C:\Windows\system32\XAPOFX1_0.dll
2014-03-05 07:45:50 ----A---- C:\Windows\system32\xactengine3_1.dll
2014-03-05 07:45:50 ----A---- C:\Windows\system32\D3DX9_39.dll
2014-03-05 07:45:49 ----A---- C:\Windows\system32\X3DAudio1_4.dll
2014-03-05 07:45:49 ----A---- C:\Windows\system32\d3dx10_38.dll
2014-03-05 07:45:49 ----A---- C:\Windows\system32\D3DCompiler_38.dll
2014-03-05 07:45:48 ----A---- C:\Windows\system32\XAudio2_0.dll
2014-03-05 07:45:48 ----A---- C:\Windows\system32\xactengine3_0.dll
2014-03-05 07:45:48 ----A---- C:\Windows\system32\X3DAudio1_3.dll
2014-03-05 07:45:48 ----A---- C:\Windows\system32\D3DX9_38.dll
2014-03-05 07:45:47 ----A---- C:\Windows\system32\d3dx10_37.dll
2014-03-05 07:45:47 ----A---- C:\Windows\system32\D3DCompiler_37.dll
2014-03-05 07:45:46 ----A---- C:\Windows\system32\xactengine2_10.dll
2014-03-05 07:45:46 ----A---- C:\Windows\system32\D3DX9_37.dll
2014-03-05 07:45:45 ----A---- C:\Windows\system32\d3dx10_36.dll
2014-03-05 07:45:45 ----A---- C:\Windows\system32\D3DCompiler_36.dll
2014-03-05 07:45:44 ----A---- C:\Windows\system32\xactengine2_9.dll
2014-03-05 07:45:44 ----A---- C:\Windows\system32\d3dx9_36.dll
2014-03-05 07:45:44 ----A---- C:\Windows\system32\d3dx10_35.dll
2014-03-05 07:45:44 ----A---- C:\Windows\system32\D3DCompiler_35.dll
2014-03-05 07:45:43 ----A---- C:\Windows\system32\xactengine2_8.dll
2014-03-05 07:45:43 ----A---- C:\Windows\system32\X3DAudio1_2.dll
2014-03-05 07:45:43 ----A---- C:\Windows\system32\d3dx9_35.dll
2014-03-05 07:45:42 ----A---- C:\Windows\system32\d3dx9_34.dll
2014-03-05 07:45:42 ----A---- C:\Windows\system32\d3dx10_34.dll
2014-03-05 07:45:42 ----A---- C:\Windows\system32\D3DCompiler_34.dll
2014-03-05 07:45:41 ----A---- C:\Windows\system32\xactengine2_7.dll
2014-03-05 07:45:40 ----A---- C:\Windows\system32\d3dx9_33.dll
2014-03-05 07:45:40 ----A---- C:\Windows\system32\d3dx10_33.dll
2014-03-05 07:45:40 ----A---- C:\Windows\system32\D3DCompiler_33.dll
2014-03-05 07:45:39 ----A---- C:\Windows\system32\xactengine2_6.dll
2014-03-05 07:45:39 ----A---- C:\Windows\system32\xactengine2_5.dll
2014-03-05 07:45:38 ----A---- C:\Windows\system32\xactengine2_4.dll
2014-03-05 07:45:38 ----A---- C:\Windows\system32\xactengine2_3.dll
2014-03-05 07:45:38 ----A---- C:\Windows\system32\x3daudio1_1.dll
2014-03-05 07:45:38 ----A---- C:\Windows\system32\d3dx9_32.dll
2014-03-05 07:45:38 ----A---- C:\Windows\system32\d3dx9_31.dll
2014-03-05 07:45:37 ----A---- C:\Windows\system32\xinput1_2.dll
2014-03-05 07:45:37 ----A---- C:\Windows\system32\xinput1_1.dll
2014-03-05 07:45:37 ----A---- C:\Windows\system32\xactengine2_2.dll
2014-03-05 07:45:37 ----A---- C:\Windows\system32\xactengine2_1.dll
2014-03-05 07:45:31 ----A---- C:\Windows\system32\d3dx9_30.dll
2014-03-05 07:45:30 ----A---- C:\Windows\system32\xactengine2_0.dll
2014-03-05 07:45:30 ----A---- C:\Windows\system32\x3daudio1_0.dll
2014-03-05 07:45:30 ----A---- C:\Windows\system32\d3dx9_29.dll
2014-03-05 07:45:29 ----A---- C:\Windows\system32\d3dx9_28.dll
2014-03-05 07:45:29 ----A---- C:\Windows\system32\d3dx9_27.dll
2014-03-05 07:45:28 ----A---- C:\Windows\system32\d3dx9_26.dll
2014-03-05 07:45:26 ----A---- C:\Windows\system32\d3dx9_25.dll
2014-03-05 07:45:25 ----A---- C:\Windows\system32\d3dx9_24.dll
2014-03-05 07:23:53 ----D---- C:\Program Files\ENSLAVED Odyssey to the West Premium Edition
2014-03-04 17:36:14 ----D---- C:\Program Files\THQ
2014-03-04 07:37:23 ----A---- C:\Windows\system32\d3dx11_43.dll
2014-03-04 07:37:23 ----A---- C:\Windows\system32\D3DCompiler_43.dll
2014-03-04 07:37:22 ----A---- C:\Windows\system32\D3DX9_43.dll
2014-03-04 07:37:22 ----A---- C:\Windows\system32\d3dx10_43.dll
2014-03-04 07:37:21 ----A---- C:\Windows\system32\d3dx11_42.dll
2014-03-04 07:37:20 ----A---- C:\Windows\system32\d3dx10_42.dll
2014-03-04 07:37:16 ----A---- C:\Windows\system32\D3DX9_42.dll
2014-03-04 07:37:15 ----A---- C:\Windows\system32\d3dx10.dll

======List of files/folders modified in the last 1 month======

2014-04-02 19:46:10 ----D---- C:\Windows\Prefetch
2014-04-02 19:46:06 ----D---- C:\Windows\Temp
2014-04-02 19:46:04 ----RD---- C:\Program Files
2014-04-02 19:39:14 ----D---- C:\Users\symy13\AppData\Roaming\Skype
2014-04-02 17:50:14 ----D---- C:\Windows\system32\config
2014-04-02 17:44:48 ----D---- C:\Windows\System32
2014-04-02 17:44:48 ----D---- C:\Windows\inf
2014-04-02 17:44:48 ----A---- C:\Windows\system32\PerfStringBackup.INI
2014-04-02 17:44:03 ----D---- C:\Users\symy13\AppData\Roaming\Seznam.cz
2014-04-02 17:41:02 ----A---- C:\Windows\system32\log.txt
2014-04-02 17:39:05 ----D---- C:\Program Files\Steam
2014-04-02 06:29:22 ----SHD---- C:\System Volume Information
2014-04-01 21:34:06 ----D---- C:\Program Files\Gabest
2014-04-01 21:21:50 ----D---- C:\Windows\system32\drivers
2014-04-01 21:21:50 ----D---- C:\Windows\Downloaded Installations
2014-04-01 21:07:08 ----D---- C:\ProgramData\Malwarebytes
2014-04-01 20:16:38 ----SHD---- C:\Windows\Installer
2014-04-01 20:16:38 ----HD---- C:\Config.Msi
2014-04-01 20:16:29 ----D---- C:\Windows\system32\DriverStore
2014-04-01 20:16:29 ----D---- C:\Windows\system32\catroot
2014-04-01 20:16:06 ----D---- C:\ProgramData\ESET
2014-04-01 20:13:10 ----D---- C:\Windows
2014-04-01 18:24:08 ----D---- C:\Users\symy13\AppData\Roaming\uTorrent
2014-03-31 18:51:44 ----D---- C:\Users\symy13\AppData\Roaming\.minecraft
2014-03-31 09:58:52 ----D---- C:\Program Files\Mozilla Maintenance Service
2014-03-25 07:43:17 ----D---- C:\Windows\system32\FxsTmp
2014-03-23 09:23:26 ----RD---- C:\Program Files\Skype
2014-03-23 09:23:25 ----D---- C:\Program Files\Common Files
2014-03-23 09:23:15 ----D---- C:\ProgramData\Skype
2014-03-19 14:21:37 ----D---- C:\Windows\system32\catroot2
2014-03-13 21:39:40 ----D---- C:\Program Files\CCleaner
2014-03-13 21:22:00 ----D---- C:\Windows\Logs
2014-03-13 21:22:00 ----D---- C:\Windows\debug
2014-03-12 12:45:14 ----A---- C:\Windows\system32\FlashPlayerApp.exe
2014-03-12 07:36:17 ----D---- C:\Windows\winsxs
2014-03-12 07:32:40 ----D---- C:\Program Files\Internet Explorer
2014-03-12 07:25:31 ----D---- C:\Windows\system32\MRT
2014-03-12 07:23:54 ----A---- C:\Windows\system32\MRT.exe
2014-03-06 06:15:46 ----D---- C:\Program Files\Common Files\Steam
2014-03-05 07:45:37 ----RSD---- C:\Windows\assembly
2014-03-03 19:37:37 ----D---- C:\Program Files\R.G. Mechanics

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 pciide;pciide; C:\Windows\system32\drivers\pciide.sys [2009-07-14 12368]
R0 rdyboost;ReadyBoost; C:\Windows\System32\drivers\rdyboost.sys [2010-11-20 173440]
R0 vmbus;@%SystemRoot%\system32\vmbusres.dll,-1000; C:\Windows\system32\drivers\vmbus.sys [2010-11-20 175360]
R1 CSC;@%systemroot%\system32\cscsvc.dll,-202; C:\Windows\system32\drivers\csc.sys [2010-11-20 388096]
R1 ehdrv;ehdrv; C:\Windows\system32\DRIVERS\ehdrv.sys [2010-12-21 115008]
R2 atksgt;atksgt; C:\Windows\system32\DRIVERS\atksgt.sys [2014-02-04 281760]
R2 eamonm;eamonm; C:\Windows\system32\DRIVERS\eamonm.sys [2010-12-21 137144]
R2 epfwwfpr;epfwwfpr; C:\Windows\system32\DRIVERS\epfwwfpr.sys [2010-12-21 95384]
R2 lirsgt;lirsgt; C:\Windows\system32\DRIVERS\lirsgt.sys [2014-02-04 25888]
R3 amdkmdag;amdkmdag; C:\Windows\system32\DRIVERS\atikmdag.sys [2011-04-20 7772160]
R3 amdkmdap;amdkmdap; C:\Windows\system32\DRIVERS\atikmpag.sys [2011-04-20 243712]
R3 AtiHDAudioService;ATI Function Driver for HD Audio Service; C:\Windows\system32\drivers\AtihdW73.sys [2011-03-30 100880]
R3 Dot4;MS IEEE-1284.4 Driver; C:\Windows\system32\DRIVERS\Dot4.sys [2009-07-14 131072]
R3 Dot4Print;Print Class Driver for IEEE-1284.4; C:\Windows\system32\DRIVERS\Dot4Prt.sys [2010-11-20 16384]
R3 dot4usb;MS Dot4USB Filter Dot4USB Filter; C:\Windows\system32\DRIVERS\dot4usb.sys [2009-07-14 36864]
R3 dtsoftbus01;DAEMON Tools Virtual Bus Driver; C:\Windows\system32\DRIVERS\dtsoftbus01.sys [2013-09-18 242240]
R3 e1cexpress;Intel(R) PRO/1000 PCI Express Network Connection Driver C; C:\Windows\system32\DRIVERS\e1c6232.sys [2010-09-21 238248]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\Windows\system32\drivers\RTKVHDA.sys [2010-10-05 3211432]
R3 MBAMProtector;MBAMProtector; \??\C:\Windows\system32\drivers\mbam.sys [2014-03-05 23256]
R3 MBAMSwissArmy;MBAMSwissArmy; \??\C:\Windows\system32\drivers\MBAMSwissArmy.sys [2014-04-02 107736]
R3 MBAMWebAccessControl;MBAMWebAccessControl; \??\C:\Windows\system32\drivers\mwac.sys [2014-03-05 51416]
R3 MEI;Intel(R) Management Engine Interface; C:\Windows\system32\DRIVERS\HECI.sys [2010-09-21 41088]
R3 nusb3hub;Renesas Electronics USB 3.0 Hub Driver; C:\Windows\system32\DRIVERS\nusb3hub.sys [2010-04-27 64904]
R3 nusb3xhc;Renesas Electronics USB 3.0 Host Controller Driver; C:\Windows\system32\DRIVERS\nusb3xhc.sys [2010-04-27 146568]
R3 usbscan;Ovladač skeneru USB; C:\Windows\system32\drivers\usbscan.sys [2013-07-03 36352]
R3 xusb21;Xbox 360 Wireless Receiver Driver Service 21; C:\Windows\system32\DRIVERS\xusb21.sys [2009-08-13 60160]
S2 Parvdm;Parvdm; C:\Windows\system32\DRIVERS\parvdm.sys [2009-07-14 8704]
S3 aic78xx;aic78xx; C:\Windows\system32\DRIVERS\djsvs.sys [2009-07-14 70720]
S3 amdagp;Ovladač filtru AMD portu AGP; C:\Windows\system32\drivers\amdagp.sys [2009-07-14 53312]
S3 b57nd60x;Broadcom NetXtreme Gigabit Ethernet - NDIS 6.0; C:\Windows\system32\DRIVERS\b57nd60x.sys [2009-07-14 229888]
S3 RDPDR;Terminal Server Device Redirector Driver; C:\Windows\System32\drivers\rdpdr.sys [2010-11-20 133632]
S3 s3cap;s3cap; C:\Windows\system32\drivers\vms3cap.sys [2010-11-20 5632]
S3 sisagp;Filtr SIS sběrnice AGP; C:\Windows\system32\drivers\sisagp.sys [2009-07-14 52304]
S3 ss_bbus;SAMSUNG USB Mobile Device (WDM); C:\Windows\system32\DRIVERS\ss_bbus.sys [2009-09-19 98432]
S3 ss_bmdfl;SAMSUNG USB Mobile Modem (Filter); C:\Windows\system32\DRIVERS\ss_bmdfl.sys [2009-09-19 14848]
S3 ss_bmdm;SAMSUNG USB Mobile Modem; C:\Windows\system32\DRIVERS\ss_bmdm.sys [2009-09-19 123648]
S3 storvsc;storvsc; C:\Windows\system32\drivers\storvsc.sys [2010-11-20 28032]
S3 TsUsbFlt;@%SystemRoot%\system32\drivers\tsusbflt.sys,-1; C:\Windows\System32\drivers\tsusbflt.sys [2010-11-20 52224]
S3 usb_rndisx;Adaptér USB RNDIS; C:\Windows\system32\DRIVERS\usb8023x.sys [2013-02-12 15872]
S3 viaagp;Filtr VIA sběrnice AGP; C:\Windows\system32\drivers\viaagp.sys [2009-07-14 53328]
S3 ViaC7;VIA C7 Processor Driver; C:\Windows\system32\DRIVERS\viac7.sys [2009-07-14 52736]
S3 VMBusHID;VMBusHID; C:\Windows\system32\drivers\VMBusHID.sys [2010-11-20 17920]
S3 WinUsb;WinUsb; C:\Windows\system32\DRIVERS\WinUsb.sys [2010-11-20 35968]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 AdobeARMservice;Adobe Acrobat Update Service; C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe [2013-12-21 65432]
R2 AMD External Events Utility;AMD External Events Utility; C:\Windows\system32\atiesrxx.exe [2011-04-20 176128]
R2 c2cautoupdatesvc;Skype Click to Call Updater; C:\Program Files\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe [2014-03-03 1363584]
R2 c2cpnrsvc;Skype Click to Call PNR Service; C:\Program Files\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe [2014-03-03 1748608]
R2 CscService;@%systemroot%\system32\cscsvc.dll,-200; C:\Windows\System32\svchost.exe [2009-07-14 20992]
R2 ekrn;ESET Service; C:\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe [2011-01-12 810144]
R2 hpqddsvc;Služba HP CUE DeviceDiscovery; C:\Windows\system32\svchost.exe [2009-07-14 20992]
R2 Intel® PROSet Monitoring Service;Intel® PROSet Monitoring Service; C:\Windows\system32\IProsetMonitor.exe [2010-08-12 87712]
R2 LMS;Intel(R) Management and Security Application Local Management Service; C:\Program Files\Intel\Intel(R) Management Engine Components\LMS\LMS.exe [2010-10-06 325656]
R2 MBAMService;MBAMService; C:\Program Files\Malwarebytes Anti-Malware\mbamservice.exe [2014-03-05 857912]
R2 MBAMScheduler;MBAMScheduler; C:\Program Files\Malwarebytes Anti-Malware\mbamscheduler.exe [2014-03-05 1809720]
R2 Net Driver HPZ12;Net Driver HPZ12; C:\Windows\System32\svchost.exe [2009-07-14 20992]
R2 Pml Driver HPZ12;Pml Driver HPZ12; C:\Windows\System32\svchost.exe [2009-07-14 20992]
R2 UNS;Intel(R) Management and Security Application User Notification Service; C:\Program Files\Intel\Intel(R) Management Engine Components\UNS\UNS.exe [2010-10-06 2655768]
R3 hpqcxs08;hpqcxs08; C:\Windows\system32\svchost.exe [2009-07-14 20992]
R3 Steam Client Service;Steam Client Service; C:\Program Files\Common Files\Steam\SteamService.exe [2014-02-25 568512]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2013-09-11 105144]
S2 SkypeUpdate;Skype Updater; C:\Program Files\Skype\Updater\Updater.exe [2013-10-23 172192]
S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service; C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2014-03-12 257928]
S3 AppMgmt;@appmgmts.dll,-3250; C:\Windows\system32\svchost.exe [2009-07-14 20992]
S3 EhttpSrv;ESET HTTP Server; C:\Program Files\ESET\ESET NOD32 Antivirus\EHttpSrv.exe [2011-01-12 33584]
S3 IDriverT;InstallDriver Table Manager; C:\Program Files\Common Files\InstallShield\Driver\1150\Intel 32\IDriverT.exe [2005-11-14 69632]
S3 IEEtwCollectorService;@%SystemRoot%\system32\ieetwcollectorres.dll,-1000; C:\Windows\system32\IEEtwCollector.exe [2014-03-01 108032]
S3 Microsoft Office Groove Audit Service;Microsoft Office Groove Audit Service; C:\Program Files\Microsoft Office\Office12\GrooveAuditService.exe [2006-10-27 65824]
S3 MozillaMaintenance;Mozilla Maintenance Service; C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe [2014-03-29 119408]
S3 odserv;Microsoft Office Diagnostics Service; C:\Program Files\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE [2006-10-26 441136]
S3 ose;Office Source Engine; C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2006-10-26 145184]
S3 PeerDistSvc;@%SystemRoot%\system32\peerdistsvc.dll,-9000; C:\Windows\System32\svchost.exe [2009-07-14 20992]
S3 StorSvc;@%SystemRoot%\System32\StorSvc.dll,-100; C:\Windows\System32\svchost.exe [2009-07-14 20992]
S3 UmRdpService;@%SystemRoot%\system32\umrdp.dll,-1000; C:\Windows\System32\svchost.exe [2009-07-14 20992]
S3 WatAdminSvc;@%SystemRoot%\system32\Wat\WatUX.exe,-601; C:\Windows\system32\Wat\WatAdminSvc.exe [2013-09-19 1343400]
S4 aspnet_state;Stavová služba ASP.NET; C:\Windows\Microsoft.NET\Framework\v4.0.30319\aspnet_state.exe [2013-09-11 46688]
S4 NetMsmqActivator;@C:\Windows\Microsoft.NET\Framework\v4.0.30319\\ServiceModelInstallRC.dll,-8195; C:\Windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe [2013-09-11 139856]
S4 NetPipeActivator;@C:\Windows\Microsoft.NET\Framework\v4.0.30319\\ServiceModelInstallRC.dll,-8197; C:\Windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe [2013-09-11 139856]
S4 NetTcpActivator;@C:\Windows\Microsoft.NET\Framework\v4.0.30319\\ServiceModelInstallRC.dll,-8199; C:\Windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe [2013-09-11 139856]

-----------------EOF-----------------

[Rudy]

Zdravím!
Dejte log ComboFix:

Stahnete a ulozte nejlepe na plochu ComboFix: http://download.bleepingcomputer.com/sUBs/ComboFix.exe

pote spustte aplikaci pod uctem s administratorskym opravnenim

hned po startu se zobrazi obrazovka s licencnimi podminkami, pokracujte kliknutim na tlacitko Ano.

v klidu si postavte na kafe (cela akce trva cca. 5-10 minut, nekdy i dele - dle toho, o jak rychly stroj se

jedna a kolika soubory se skener bude muset prodirat), behem skenu se nepokousejte spoustet zadne jine

aplikace ani nic jineho

behem skenovani nepropadejte panice, vas stroj muze byt restartovan (predevsim pri prvni aplikaci skeneru)

upozorneni: pokud pouzivate antispyware s rezidentnim stitem, prepnete jeho rezidentni stit do Install Mode,

pripadne jej po dobu skenu uplne deaktivujte, protoze dochazi pri skenu a vymazu pripadneho malware k

nezadoucim kolizim s rezidentem antispyware.

[symy13]

zdravím toto mi vyšlo
ComboFix 14-04-03.01 - symy13 03.04.2014 21:11:10.3.2 - x86
Microsoft Windows 7 Professional 6.1.7601.1.1250.420.1029.18.3569.2419 [GMT 2:00]
Spuštěný z: c:\users\symy13\Desktop\ComboFix.exe
AV: ESET NOD32 Antivirus 4.2 *Disabled/Updated* {77DEAFED-8149-104B-25A1-21771CA47CD1}
SP: ESET NOD32 Antivirus 4.2 *Disabled/Updated* {CCBF4E09-A773-1FC5-1F11-1A056723366C}
SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.
.
((((((((((((((((((((((((( Soubory vytvořené od 2014-03-03 do 2014-04-03 )))))))))))))))))))))))))))))))
.
.
2014-04-03 19:14 . 2014-04-03 19:14 -------- d-----w- c:\users\Default\AppData\Local\temp
2014-04-03 16:14 . 2014-04-03 16:14 -------- d-----w- c:\program files\SQUARE ENIX
2014-04-02 17:46 . 2014-04-02 17:46 -------- d-----w- c:\program files\trend micro
2014-04-02 17:46 . 2014-04-02 17:46 -------- d-----w- C:\rsit
2014-04-02 05:40 . 2014-04-03 16:08 62576 ----a-w- c:\programdata\Microsoft\Windows Defender\Definition Updates\{1DCEBAAB-C375-4A6D-9D4B-4317011F4A4A}\offreg.dll
2014-04-02 04:36 . 2014-03-07 04:35 7969936 ----a-w- c:\programdata\Microsoft\Windows Defender\Definition Updates\{1DCEBAAB-C375-4A6D-9D4B-4317011F4A4A}\mpengine.dll
2014-04-01 18:16 . 2014-04-01 18:16 -------- d-----w- c:\program files\ESET
2014-04-01 14:34 . 2014-04-01 14:37 -------- d-----w- c:\program files\Castlevania Lords of Shadow Mirror of Fate HD
2014-03-23 07:23 . 2014-03-23 07:23 -------- d-----w- c:\users\symy13\AppData\Local\Skype
2014-03-23 07:23 . 2014-03-23 07:23 -------- d-----w- c:\program files\Common Files\Skype
2014-03-12 05:22 . 2014-02-04 02:04 1230336 ----a-w- c:\windows\system32\WindowsCodecs.dll
2014-03-12 05:22 . 2014-01-29 02:06 381440 ----a-w- c:\windows\system32\wer.dll
2014-03-05 05:46 . 2010-06-02 03:55 74072 ----a-w- c:\windows\system32\XAPOFX1_5.dll
2014-03-05 05:46 . 2010-06-02 03:55 527192 ----a-w- c:\windows\system32\XAudio2_7.dll
2014-03-05 05:46 . 2010-06-02 03:55 239960 ----a-w- c:\windows\system32\xactengine3_7.dll
2014-03-05 05:46 . 2010-05-26 10:41 1868128 ----a-w- c:\windows\system32\d3dcsx_43.dll
2014-03-05 05:23 . 2014-03-05 05:44 -------- d-----w- c:\program files\ENSLAVED Odyssey to the West Premium Edition
.
.
.
(((((((((((((((((((((((((((((((((((((((( Find3M výpis ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2014-04-03 17:38 . 2013-10-16 10:56 107736 ----a-w- c:\windows\system32\drivers\mbamswissarmy.sys
2014-03-12 10:45 . 2013-09-18 16:31 71048 ----a-w- c:\windows\system32\FlashPlayerCPLApp.cpl
2014-03-12 10:45 . 2013-09-18 16:31 692616 ----a-w- c:\windows\system32\FlashPlayerApp.exe
2014-02-09 06:19 . 2013-09-26 17:54 119296 ----a-w- c:\windows\system32\zlib.dll
2014-02-04 19:54 . 2014-02-04 19:54 281760 ----a-w- c:\windows\system32\drivers\atksgt.sys
2014-02-04 19:54 . 2014-02-04 19:54 25888 ----a-w- c:\windows\system32\drivers\lirsgt.sys
.
.
(((((((((((((((((((((((((((((((((( Spouštěcí body v registru )))))))))))))))))))))))))))))))))))))))))))))
.
.
*Poznámka* prázdné záznamy a legitimní výchozí údaje nejsou zobrazeny.
REGEDIT4
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"DAEMON Tools Lite"="c:\program files\DAEMON Tools Lite\DTLite.exe" [2012-11-06 3673728]
"Steam"="c:\program files\Steam\steam.exe" [2014-02-25 1821888]
"cz.seznam.software.autoupdate"="c:\users\symy13\AppData\Roaming\Seznam.cz\szninstall.exe" [2013-05-16 1062472]
"cz.seznam.software.szndesktop"="c:\users\symy13\AppData\Roaming\Seznam.cz\bin\wszndesktop.exe" [2013-04-12 92664]
"Skype"="c:\program files\Skype\Phone\Skype.exe" [2014-02-10 20922016]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"RtHDVCpl"="c:\program files\Realtek\Audio\HDA\RtHDVCpl.exe" [2010-10-05 9742952]
"NUSB3MON"="c:\program files\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe" [2010-04-27 113288]
"StartCCC"="c:\program files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" [2011-04-19 336384]
"GrooveMonitor"="c:\program files\Microsoft Office\Office12\GrooveMonitor.exe" [2006-10-26 31016]
"HP Software Update"="c:\program files\HP\HP Software Update\HPWuSchd2.exe" [2007-05-08 54840]
"SunJavaUpdateSched"="c:\program files\Common Files\Java\Java Update\jusched.exe" [2013-07-02 254336]
"seznam-listicka-distribuce"="c:\program files\Seznam.cz\distribution\szninstall.exe" [2013-05-16 1062472]
"Adobe ARM"="c:\program files\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2013-11-21 959904]
"egui"="c:\program files\ESET\ESET NOD32 Antivirus\egui.exe" [2011-01-12 2219184]
.
c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\
HP Digital Imaging Monitor.lnk - c:\program files\HP\Digital Imaging\bin\hpqtra08.exe [2009-5-21 275768]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorAdmin"= 5 (0x5)
"ConsentPromptBehaviorUser"= 3 (0x3)
"EnableUIADesktopToggle"= 0 (0x0)
.
R2 SkypeUpdate;Skype Updater;c:\program files\Skype\Updater\Updater.exe [2013-10-23 172192]
R3 IEEtwCollectorService;Internet Explorer ETW Collector Service;c:\windows\system32\IEEtwCollector.exe [2014-03-01 108032]
R3 ss_bbus;SAMSUNG USB Mobile Device (WDM);c:\windows\system32\DRIVERS\ss_bbus.sys [2009-09-19 98432]
R3 ss_bmdfl;SAMSUNG USB Mobile Modem (Filter);c:\windows\system32\DRIVERS\ss_bmdfl.sys [2009-09-19 14848]
R3 ss_bmdm;SAMSUNG USB Mobile Modem;c:\windows\system32\DRIVERS\ss_bmdm.sys [2009-09-19 123648]
R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys [2010-11-20 52224]
R3 WatAdminSvc;Služba Technologie aktivace Windows;c:\windows\system32\Wat\WatAdminSvc.exe [2013-09-19 1343400]
S1 ehdrv;ehdrv;c:\windows\system32\DRIVERS\ehdrv.sys [2010-12-21 115008]
S2 AMD External Events Utility;AMD External Events Utility;c:\windows\system32\atiesrxx.exe [2011-04-20 176128]
S2 c2cautoupdatesvc;Skype Click to Call Updater;c:\program files\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe [2014-03-03 1363584]
S2 c2cpnrsvc;Skype Click to Call PNR Service;c:\program files\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe [2014-03-03 1748608]
S2 eamonm;eamonm;c:\windows\system32\DRIVERS\eamonm.sys [2010-12-21 137144]
S2 ekrn;ESET Service;c:\program files\ESET\ESET NOD32 Antivirus\ekrn.exe [2011-01-12 810144]
S2 epfwwfpr;epfwwfpr;c:\windows\system32\DRIVERS\epfwwfpr.sys [2010-12-21 95384]
S2 Intel® PROSet Monitoring Service;Intel® PROSet Monitoring Service;c:\windows\system32\IProsetMonitor.exe [2010-08-12 87712]
S2 UNS;Intel(R) Management and Security Application User Notification Service;c:\program files\Intel\Intel(R) Management Engine Components\UNS\UNS.exe [2010-10-06 2655768]
S3 AtiHDAudioService;ATI Function Driver for HD Audio Service;c:\windows\system32\drivers\AtihdW73.sys [2011-03-30 100880]
S3 dtsoftbus01;DAEMON Tools Virtual Bus Driver;c:\windows\system32\DRIVERS\dtsoftbus01.sys [2013-09-18 242240]
S3 MBAMSwissArmy;MBAMSwissArmy;c:\windows\system32\drivers\MBAMSwissArmy.sys [2014-04-03 107736]
S3 MEI;Intel(R) Management Engine Interface;c:\windows\system32\DRIVERS\HECI.sys [2010-09-21 41088]
S3 nusb3hub;Renesas Electronics USB 3.0 Hub Driver;c:\windows\system32\DRIVERS\nusb3hub.sys [2010-04-27 64904]
S3 nusb3xhc;Renesas Electronics USB 3.0 Host Controller Driver;c:\windows\system32\DRIVERS\nusb3xhc.sys [2010-04-27 146568]
.
.
--- Ostatní služby/ovladače v paměti ---
.
*NewlyCreated* - MBAMSWISSARMY
*NewlyCreated* - MBAMWEBACCESSCONTROL
*Deregistered* - MBAMWebAccessControl
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost]
HPZ12 REG_MULTI_SZ Pml Driver HPZ12 Net Driver HPZ12
hpdevmgmt REG_MULTI_SZ hpqcxs08 hpqddsvc
.
Obsah adresáře 'Naplánované úlohy'
.
2014-04-03 c:\windows\Tasks\Adobe Flash Player Updater.job
- c:\windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2013-09-18 10:45]
.
.
------- Doplňkový sken -------
.
uStart Page = hxxp://www.seznam.cz/?clid=16194
mStart Page = hxxp://www.google.com
IE: E&xportovat do aplikace Microsoft Excel - c:\progra~1\MICROS~1\Office12\EXCEL.EXE/3000
TCP: DhcpNameServer = 10.0.0.138
FF - ProfilePath - c:\users\symy13\AppData\Roaming\Mozilla\Firefox\Profiles\os4pm6tq.default\
FF - ExtSQL: !HIDDEN! 2013-09-18 21:59; smartwebprinting@hp.com; c:\program files\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3
.
.
--------------------- ZAMKNUTÉ KLÍČE V REGISTRU ---------------------
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0000\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\PCW\Security]
@Denied: (Full) (Everyone)
.
Celkový čas: 2014-04-03 21:15:12
ComboFix-quarantined-files.txt 2014-04-03 19:15
ComboFix2.txt 2014-04-03 19:09
ComboFix3.txt 2014-04-03 18:54
.
Před spuštěním: Volných bajtů: 122 842 750 976
Po spuštění: Volných bajtů: 122 788 311 040
.
- - End Of File - - F54DCBA74906CF8787F9B4F4983AD51F
A36C5E4F47E84449FF07ED3517B43A31

[Rudy]

Otevřte poznámkový blok a zkopírujte do něj:

KillAll::

Registry::
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"SunJavaUpdateSched"=-

RegLock::
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0000\AllUserSettings]
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\PCW\Security]

Reboot::

Uložte na plochu jako CFScript.txt. Pak jej myší přetáhněte nad ikonu ComboFix a pusťte. CF se spustí a vykoná příkazy ze skriptu.

[symy13]

zdravičko nevím jestli jsem to dobře pochopil fakt tomu moc nerozumím skopiroval jsem co bylo v rámečku viz.

Registry::
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"SunJavaUpdateSched"=-

RegLock::
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0000\AllUserSettings]
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\PCW\Security]

Reboot:
uložil jako cfscript.txt a přetahl do cf ale spustil se mi opet scan po té vyjel opět log ale problém pořád trvá ikona cfscript.txt zmizela prosím poradtě kde dělám chybu děkuji mnoho

[Rudy]

Nikde. Po přetažení se CF normálně spustí, ale smaže jen to, co má ve skriptu. Log, který se na konci akce zobrazí se pak musí analyzovat a zjistit, zdy položky byly opravdu smazány.

[symy13]

zdravím tak tohle je nový log co mi vyšel

Microsoft Windows 7 Professional 6.1.7601.1.1250.420.1029.18.3569.2423 [GMT 2:00]
Spuštěný z: c:\users\symy13\Desktop\ComboFix.exe
Použité ovládací přepínače :: c:\users\symy13\Desktop\cfscript.txt
AV: ESET NOD32 Antivirus 4.2 *Disabled/Updated* {77DEAFED-8149-104B-25A1-21771CA47CD1}
SP: ESET NOD32 Antivirus 4.2 *Disabled/Updated* {CCBF4E09-A773-1FC5-1F11-1A056723366C}
SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.
.
((((((((((((((((((((((((( Soubory vytvořené od 2014-03-04 do 2014-04-04 )))))))))))))))))))))))))))))))
.
.
2014-04-04 15:34 . 2014-04-04 15:34 -------- d-----w- c:\users\Default\AppData\Local\temp
2014-04-04 15:01 . 2014-04-04 15:34 62576 ----a-w- c:\programdata\Microsoft\Windows Defender\Definition Updates\{80E3EA93-0745-4E45-BCB8-0EF99A4D742D}\offreg.dll
2014-04-04 08:41 . 2014-03-07 04:35 7969936 ----a-w- c:\programdata\Microsoft\Windows Defender\Definition Updates\{80E3EA93-0745-4E45-BCB8-0EF99A4D742D}\mpengine.dll
2014-04-03 16:14 . 2014-04-03 16:14 -------- d-----w- c:\program files\SQUARE ENIX
2014-04-02 17:46 . 2014-04-02 17:46 -------- d-----w- c:\program files\trend micro
2014-04-02 17:46 . 2014-04-02 17:46 -------- d-----w- C:\rsit
2014-04-01 18:16 . 2014-04-01 18:16 -------- d-----w- c:\program files\ESET
2014-04-01 14:34 . 2014-04-01 14:37 -------- d-----w- c:\program files\Castlevania Lords of Shadow Mirror of Fate HD
2014-03-23 07:23 . 2014-03-23 07:23 -------- d-----w- c:\users\symy13\AppData\Local\Skype
2014-03-23 07:23 . 2014-03-23 07:23 -------- d-----w- c:\program files\Common Files\Skype
2014-03-12 05:22 . 2014-02-04 02:04 1230336 ----a-w- c:\windows\system32\WindowsCodecs.dll
2014-03-12 05:22 . 2014-01-29 02:06 381440 ----a-w- c:\windows\system32\wer.dll
.
.
.
(((((((((((((((((((((((((((((((((((((((( Find3M výpis ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2014-04-03 17:38 . 2013-10-16 10:56 107736 ----a-w- c:\windows\system32\drivers\mbamswissarmy.sys
2014-03-31 07:35 . 2013-09-18 15:52 231584 ------w- c:\windows\system32\MpSigStub.exe
2014-03-12 10:45 . 2013-09-18 16:31 71048 ----a-w- c:\windows\system32\FlashPlayerCPLApp.cpl
2014-03-12 10:45 . 2013-09-18 16:31 692616 ----a-w- c:\windows\system32\FlashPlayerApp.exe
2014-02-09 06:19 . 2013-09-26 17:54 119296 ----a-w- c:\windows\system32\zlib.dll
2014-02-04 19:54 . 2014-02-04 19:54 281760 ----a-w- c:\windows\system32\drivers\atksgt.sys
2014-02-04 19:54 . 2014-02-04 19:54 25888 ----a-w- c:\windows\system32\drivers\lirsgt.sys
.
.
(((((((((((((((((((((((((((((((((( Spouštěcí body v registru )))))))))))))))))))))))))))))))))))))))))))))
.
.
*Poznámka* prázdné záznamy a legitimní výchozí údaje nejsou zobrazeny.
REGEDIT4
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"DAEMON Tools Lite"="c:\program files\DAEMON Tools Lite\DTLite.exe" [2012-11-06 3673728]
"Steam"="c:\program files\Steam\steam.exe" [2014-02-25 1821888]
"cz.seznam.software.autoupdate"="c:\users\symy13\AppData\Roaming\Seznam.cz\szninstall.exe" [2013-05-16 1062472]
"cz.seznam.software.szndesktop"="c:\users\symy13\AppData\Roaming\Seznam.cz\bin\wszndesktop.exe" [2013-04-12 92664]
"Skype"="c:\program files\Skype\Phone\Skype.exe" [2014-02-10 20922016]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"RtHDVCpl"="c:\program files\Realtek\Audio\HDA\RtHDVCpl.exe" [2010-10-05 9742952]
"NUSB3MON"="c:\program files\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe" [2010-04-27 113288]
"StartCCC"="c:\program files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" [2011-04-19 336384]
"GrooveMonitor"="c:\program files\Microsoft Office\Office12\GrooveMonitor.exe" [2006-10-26 31016]
"HP Software Update"="c:\program files\HP\HP Software Update\HPWuSchd2.exe" [2007-05-08 54840]
"seznam-listicka-distribuce"="c:\program files\Seznam.cz\distribution\szninstall.exe" [2013-05-16 1062472]
"Adobe ARM"="c:\program files\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2013-11-21 959904]
"egui"="c:\program files\ESET\ESET NOD32 Antivirus\egui.exe" [2011-01-12 2219184]
.
c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\
HP Digital Imaging Monitor.lnk - c:\program files\HP\Digital Imaging\bin\hpqtra08.exe [2009-5-21 275768]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorAdmin"= 5 (0x5)
"ConsentPromptBehaviorUser"= 3 (0x3)
"EnableUIADesktopToggle"= 0 (0x0)
.
R2 SkypeUpdate;Skype Updater;c:\program files\Skype\Updater\Updater.exe [2013-10-23 172192]
R3 IEEtwCollectorService;Internet Explorer ETW Collector Service;c:\windows\system32\IEEtwCollector.exe [2014-03-01 108032]
R3 MBAMSwissArmy;MBAMSwissArmy;c:\windows\system32\drivers\MBAMSwissArmy.sys [2014-04-03 107736]
R3 ss_bbus;SAMSUNG USB Mobile Device (WDM);c:\windows\system32\DRIVERS\ss_bbus.sys [2009-09-19 98432]
R3 ss_bmdfl;SAMSUNG USB Mobile Modem (Filter);c:\windows\system32\DRIVERS\ss_bmdfl.sys [2009-09-19 14848]
R3 ss_bmdm;SAMSUNG USB Mobile Modem;c:\windows\system32\DRIVERS\ss_bmdm.sys [2009-09-19 123648]
R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys [2010-11-20 52224]
R3 WatAdminSvc;Služba Technologie aktivace Windows;c:\windows\system32\Wat\WatAdminSvc.exe [2013-09-19 1343400]
S1 ehdrv;ehdrv;c:\windows\system32\DRIVERS\ehdrv.sys [2010-12-21 115008]
S2 AMD External Events Utility;AMD External Events Utility;c:\windows\system32\atiesrxx.exe [2011-04-20 176128]
S2 c2cautoupdatesvc;Skype Click to Call Updater;c:\program files\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe [2014-03-03 1363584]
S2 c2cpnrsvc;Skype Click to Call PNR Service;c:\program files\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe [2014-03-03 1748608]
S2 eamonm;eamonm;c:\windows\system32\DRIVERS\eamonm.sys [2010-12-21 137144]
S2 ekrn;ESET Service;c:\program files\ESET\ESET NOD32 Antivirus\ekrn.exe [2011-01-12 810144]
S2 epfwwfpr;epfwwfpr;c:\windows\system32\DRIVERS\epfwwfpr.sys [2010-12-21 95384]
S2 Intel® PROSet Monitoring Service;Intel® PROSet Monitoring Service;c:\windows\system32\IProsetMonitor.exe [2010-08-12 87712]
S2 UNS;Intel(R) Management and Security Application User Notification Service;c:\program files\Intel\Intel(R) Management Engine Components\UNS\UNS.exe [2010-10-06 2655768]
S3 AtiHDAudioService;ATI Function Driver for HD Audio Service;c:\windows\system32\drivers\AtihdW73.sys [2011-03-30 100880]
S3 dtsoftbus01;DAEMON Tools Virtual Bus Driver;c:\windows\system32\DRIVERS\dtsoftbus01.sys [2013-09-18 242240]
S3 MEI;Intel(R) Management Engine Interface;c:\windows\system32\DRIVERS\HECI.sys [2010-09-21 41088]
S3 nusb3hub;Renesas Electronics USB 3.0 Hub Driver;c:\windows\system32\DRIVERS\nusb3hub.sys [2010-04-27 64904]
S3 nusb3xhc;Renesas Electronics USB 3.0 Host Controller Driver;c:\windows\system32\DRIVERS\nusb3xhc.sys [2010-04-27 146568]
.
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost]
HPZ12 REG_MULTI_SZ Pml Driver HPZ12 Net Driver HPZ12
hpdevmgmt REG_MULTI_SZ hpqcxs08 hpqddsvc
.
Obsah adresáře 'Naplánované úlohy'
.
2014-04-04 c:\windows\Tasks\Adobe Flash Player Updater.job
- c:\windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2013-09-18 10:45]
.
.
------- Doplňkový sken -------
.
uStart Page = hxxp://www.seznam.cz/?clid=16194
mStart Page = hxxp://www.google.com
IE: E&xportovat do aplikace Microsoft Excel - c:\progra~1\MICROS~1\Office12\EXCEL.EXE/3000
TCP: DhcpNameServer = 10.0.0.138
FF - ProfilePath - c:\users\symy13\AppData\Roaming\Mozilla\Firefox\Profiles\os4pm6tq.default\
FF - ExtSQL: !HIDDEN! 2013-09-18 21:59; smartwebprinting@hp.com; c:\program files\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3
.
.
--------------------- Knihovny navázané na běžící procesy ---------------------
.
- - - - - - - > 'Explorer.exe'(2628)
c:\windows\System32\SyncCenter.dll
.
------------------------ Jiné spuštené procesy ------------------------
.
c:\program files\Common Files\Adobe\ARM\1.0\armsvc.exe
c:\windows\system32\atieclxx.exe
c:\windows\system32\taskhost.exe
c:\windows\system32\conhost.exe
c:\program files\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
c:\users\symy13\AppData\Roaming\Seznam.cz\bin\szndesktop.exe
c:\program files\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
c:\program files\HP\Digital Imaging\bin\hpqSTE08.exe
c:\program files\HP\Digital Imaging\bin\hpqbam08.exe
c:\program files\HP\Digital Imaging\bin\hpqgpc01.exe
c:\program files\Common Files\Steam\SteamService.exe
c:\windows\Microsoft.Net\Framework\v3.0\WPF\PresentationFontCache.exe
c:\program files\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
c:\windows\system32\sppsvc.exe
.
**************************************************************************
.
Celkový čas: 2014-04-04 17:39:04 - počítač byl restartován
ComboFix-quarantined-files.txt 2014-04-04 15:39
ComboFix2.txt 2014-04-04 15:22
ComboFix3.txt 2014-04-04 15:05
ComboFix4.txt 2014-04-03 19:15
ComboFix5.txt 2014-04-04 15:29
.
Před spuštěním: Volných bajtů: 122 731 982 848
Po spuštění: Volných bajtů: 122 680 078 336
.
- - End Of File - - 0FEBAF19E8E3EFA10D5BB0FFE0A1BCDB
A36C5E4F47E84449FF07ED3517B43A31

[Rudy]

Smazáno. Nastala nějaká změna?

[symy13]

právě že ne.piše mi to objekt :http://utils.cdneurope.com/js/mo.js
jestli vám to pomůže.děkuji

[Rudy]

OK. Dejte log ComboFix:

Stahnete a ulozte nejlepe na plochu ComboFix: http://download.bleepingcomputer.com/sUBs/ComboFix.exe

pote spustte aplikaci pod uctem s administratorskym opravnenim

hned po startu se zobrazi obrazovka s licencnimi podminkami, pokracujte kliknutim na tlacitko Ano.

v klidu si postavte na kafe (cela akce trva cca. 5-10 minut, nekdy i dele - dle toho, o jak rychly stroj se

jedna a kolika soubory se skener bude muset prodirat), behem skenu se nepokousejte spoustet zadne jine

aplikace ani nic jineho

behem skenovani nepropadejte panice, vas stroj muze byt restartovan (predevsim pri prvni aplikaci skeneru)

upozorneni: pokud pouzivate antispyware s rezidentnim stitem, prepnete jeho rezidentni stit do Install Mode,

pripadne jej po dobu skenu uplne deaktivujte, protoze dochazi pri skenu a vymazu pripadneho malware k

nezadoucim kolizim s rezidentem antispyware.

[symy13]

Microsoft Windows 7 Professional 6.1.7601.1.1250.420.1029.18.3569.2614 [GMT 2:00]
Spuštěný z: c:\users\symy13\Desktop\ComboFix.exe
AV: ESET NOD32 Antivirus 4.2 *Disabled/Updated* {77DEAFED-8149-104B-25A1-21771CA47CD1}
SP: ESET NOD32 Antivirus 4.2 *Disabled/Updated* {CCBF4E09-A773-1FC5-1F11-1A056723366C}
SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
* Vytvořen nový Bod Obnovení
.
.
((((((((((((((((((((((((( Soubory vytvořené od 2014-03-07 do 2014-04-07 )))))))))))))))))))))))))))))))
.
.
2014-04-07 14:47 . 2014-04-07 14:47 -------- d-----w- c:\users\Default\AppData\Local\temp
2014-04-03 16:14 . 2014-04-03 16:14 -------- d-----w- c:\program files\SQUARE ENIX
2014-04-02 17:46 . 2014-04-02 17:46 -------- d-----w- c:\program files\trend micro
2014-04-02 17:46 . 2014-04-02 17:46 -------- d-----w- C:\rsit
2014-04-01 18:16 . 2014-04-01 18:16 -------- d-----w- c:\program files\ESET
2014-04-01 14:34 . 2014-04-01 14:37 -------- d-----w- c:\program files\Castlevania Lords of Shadow Mirror of Fate HD
2014-03-23 07:23 . 2014-03-23 07:23 -------- d-----w- c:\users\symy13\AppData\Local\Skype
2014-03-23 07:23 . 2014-03-23 07:23 -------- d-----w- c:\program files\Common Files\Skype
2014-03-12 05:22 . 2014-02-04 02:04 1230336 ----a-w- c:\windows\system32\WindowsCodecs.dll
2014-03-12 05:22 . 2014-01-29 02:06 381440 ----a-w- c:\windows\system32\wer.dll
.
.
.
(((((((((((((((((((((((((((((((((((((((( Find3M výpis ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2014-04-03 17:38 . 2013-10-16 10:56 107736 ----a-w- c:\windows\system32\drivers\mbamswissarmy.sys
2014-03-31 07:35 . 2013-09-18 15:52 231584 ------w- c:\windows\system32\MpSigStub.exe
2014-03-12 10:45 . 2013-09-18 16:31 71048 ----a-w- c:\windows\system32\FlashPlayerCPLApp.cpl
2014-03-12 10:45 . 2013-09-18 16:31 692616 ----a-w- c:\windows\system32\FlashPlayerApp.exe
2014-02-09 06:19 . 2013-09-26 17:54 119296 ----a-w- c:\windows\system32\zlib.dll
2014-02-04 19:54 . 2014-02-04 19:54 281760 ----a-w- c:\windows\system32\drivers\atksgt.sys
2014-02-04 19:54 . 2014-02-04 19:54 25888 ----a-w- c:\windows\system32\drivers\lirsgt.sys
.
.
(((((((((((((((((((((((((((((((((( Spouštěcí body v registru )))))))))))))))))))))))))))))))))))))))))))))
.
.
*Poznámka* prázdné záznamy a legitimní výchozí údaje nejsou zobrazeny.
REGEDIT4
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"DAEMON Tools Lite"="c:\program files\DAEMON Tools Lite\DTLite.exe" [2012-11-06 3673728]
"Steam"="c:\program files\Steam\steam.exe" [2014-02-25 1821888]
"cz.seznam.software.autoupdate"="c:\users\symy13\AppData\Roaming\Seznam.cz\szninstall.exe" [2013-05-16 1062472]
"cz.seznam.software.szndesktop"="c:\users\symy13\AppData\Roaming\Seznam.cz\bin\wszndesktop.exe" [2013-04-12 92664]
"Skype"="c:\program files\Skype\Phone\Skype.exe" [2014-02-10 20922016]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"RtHDVCpl"="c:\program files\Realtek\Audio\HDA\RtHDVCpl.exe" [2010-10-05 9742952]
"NUSB3MON"="c:\program files\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe" [2010-04-27 113288]
"StartCCC"="c:\program files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" [2011-04-19 336384]
"GrooveMonitor"="c:\program files\Microsoft Office\Office12\GrooveMonitor.exe" [2006-10-26 31016]
"HP Software Update"="c:\program files\HP\HP Software Update\HPWuSchd2.exe" [2007-05-08 54840]
"seznam-listicka-distribuce"="c:\program files\Seznam.cz\distribution\szninstall.exe" [2013-05-16 1062472]
"Adobe ARM"="c:\program files\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2013-11-21 959904]
"egui"="c:\program files\ESET\ESET NOD32 Antivirus\egui.exe" [2011-01-12 2219184]
.
c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\
HP Digital Imaging Monitor.lnk - c:\program files\HP\Digital Imaging\bin\hpqtra08.exe [2009-5-21 275768]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorAdmin"= 5 (0x5)
"ConsentPromptBehaviorUser"= 3 (0x3)
"EnableUIADesktopToggle"= 0 (0x0)
.
R2 SkypeUpdate;Skype Updater;c:\program files\Skype\Updater\Updater.exe [2013-10-23 172192]
R3 IEEtwCollectorService;Internet Explorer ETW Collector Service;c:\windows\system32\IEEtwCollector.exe [2014-03-01 108032]
R3 MBAMSwissArmy;MBAMSwissArmy;c:\windows\system32\drivers\MBAMSwissArmy.sys [2014-04-03 107736]
R3 ss_bbus;SAMSUNG USB Mobile Device (WDM);c:\windows\system32\DRIVERS\ss_bbus.sys [2009-09-19 98432]
R3 ss_bmdfl;SAMSUNG USB Mobile Modem (Filter);c:\windows\system32\DRIVERS\ss_bmdfl.sys [2009-09-19 14848]
R3 ss_bmdm;SAMSUNG USB Mobile Modem;c:\windows\system32\DRIVERS\ss_bmdm.sys [2009-09-19 123648]
R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys [2010-11-20 52224]
R3 WatAdminSvc;Služba Technologie aktivace Windows;c:\windows\system32\Wat\WatAdminSvc.exe [2013-09-19 1343400]
S1 ehdrv;ehdrv;c:\windows\system32\DRIVERS\ehdrv.sys [2010-12-21 115008]
S2 AMD External Events Utility;AMD External Events Utility;c:\windows\system32\atiesrxx.exe [2011-04-20 176128]
S2 c2cautoupdatesvc;Skype Click to Call Updater;c:\program files\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe [2014-03-03 1363584]
S2 c2cpnrsvc;Skype Click to Call PNR Service;c:\program files\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe [2014-03-03 1748608]
S2 eamonm;eamonm;c:\windows\system32\DRIVERS\eamonm.sys [2010-12-21 137144]
S2 ekrn;ESET Service;c:\program files\ESET\ESET NOD32 Antivirus\ekrn.exe [2011-01-12 810144]
S2 epfwwfpr;epfwwfpr;c:\windows\system32\DRIVERS\epfwwfpr.sys [2010-12-21 95384]
S2 Intel® PROSet Monitoring Service;Intel® PROSet Monitoring Service;c:\windows\system32\IProsetMonitor.exe [2010-08-12 87712]
S2 UNS;Intel(R) Management and Security Application User Notification Service;c:\program files\Intel\Intel(R) Management Engine Components\UNS\UNS.exe [2010-10-06 2655768]
S3 AtiHDAudioService;ATI Function Driver for HD Audio Service;c:\windows\system32\drivers\AtihdW73.sys [2011-03-30 100880]
S3 dtsoftbus01;DAEMON Tools Virtual Bus Driver;c:\windows\system32\DRIVERS\dtsoftbus01.sys [2013-09-18 242240]
S3 MEI;Intel(R) Management Engine Interface;c:\windows\system32\DRIVERS\HECI.sys [2010-09-21 41088]
S3 nusb3hub;Renesas Electronics USB 3.0 Hub Driver;c:\windows\system32\DRIVERS\nusb3hub.sys [2010-04-27 64904]
S3 nusb3xhc;Renesas Electronics USB 3.0 Host Controller Driver;c:\windows\system32\DRIVERS\nusb3xhc.sys [2010-04-27 146568]
.
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost]
HPZ12 REG_MULTI_SZ Pml Driver HPZ12 Net Driver HPZ12
hpdevmgmt REG_MULTI_SZ hpqcxs08 hpqddsvc
.
Obsah adresáře 'Naplánované úlohy'
.
2014-04-07 c:\windows\Tasks\Adobe Flash Player Updater.job
- c:\windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2013-09-18 10:45]
.
.
------- Doplňkový sken -------
.
uStart Page = hxxp://www.seznam.cz/?clid=16194
mStart Page = hxxp://www.google.com
IE: E&xportovat do aplikace Microsoft Excel - c:\progra~1\MICROS~1\Office12\EXCEL.EXE/3000
TCP: DhcpNameServer = 10.0.0.138
FF - ProfilePath - c:\users\symy13\AppData\Roaming\Mozilla\Firefox\Profiles\os4pm6tq.default\
FF - ExtSQL: !HIDDEN! 2013-09-18 21:59; smartwebprinting@hp.com; c:\program files\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3
.
.
Celkový čas: 2014-04-07 16:48:00
ComboFix-quarantined-files.txt 2014-04-07 14:47
ComboFix2.txt 2014-04-04 15:39
ComboFix3.txt 2014-04-04 15:22
ComboFix4.txt 2014-04-04 15:05
ComboFix5.txt 2014-04-07 14:41
.
Před spuštěním: Volných bajtů: 122 018 836 480
Po spuštění: Volných bajtů: 124 282 789 888
.
- - End Of File - - 4C13C73BA70ED94B66DC122B7E76B523
A36C5E4F47E84449FF07ED3517B43A31

[Rudy]

Nastala nějaká změna po tomto skenu?

[symy13]

zdá se být všechno v pořádku děkuji mockrát jen se chci zeptat jak se to mu příště vyvarovat ještě jednou děkuji

[Rudy]

zdá se být všechno v pořádku děkuji mockrát jen se chci zeptat jak se to mu příště vyvarovat ještě jednou děkuji

OK, to jsem rád. Nechoďte do "temných zákoutí" internetu a vždy si dobře rozmyslete, než na něco kliknete. AV udržujte stále aktuální.

[symy13]

zdravičko opět se mi to vrátilo.uplně to same kryptik vyskakuje pří otevření stránek prosím ještě o pomoc zasílam cf

Microsoft Windows 7 Professional 6.1.7601.1.1250.420.1029.18.3569.2426 [GMT 2:00]
Spuštěný z: c:\users\symy13\Desktop\ComboFix.exe
AV: ESET NOD32 Antivirus 4.2 *Disabled/Updated* {77DEAFED-8149-104B-25A1-21771CA47CD1}
SP: ESET NOD32 Antivirus 4.2 *Disabled/Updated* {CCBF4E09-A773-1FC5-1F11-1A056723366C}
SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.
.
((((((((((((((((((((((((( Soubory vytvořené od 2014-03-16 do 2014-04-16 )))))))))))))))))))))))))))))))
.
.
2014-04-16 04:40 . 2014-04-16 04:40 -------- d-----w- c:\users\Default\AppData\Local\temp
2014-04-15 06:19 . 2014-03-07 04:35 7969936 ----a-w- c:\programdata\Microsoft\Windows Defender\Definition Updates\{B79107DE-9F8F-40BD-AFEA-FFE7355EF3E1}\mpengine.dll
2014-04-09 19:26 . 2014-01-09 02:22 5694464 ----a-w- c:\windows\system32\mstscax.dll
2014-04-09 18:32 . 2014-03-06 08:02 455168 ----a-w- c:\windows\system32\vbscript.dll
2014-04-09 18:30 . 2013-09-25 01:57 792576 ----a-w- c:\windows\system32\TSWorkspace.dll
2014-04-09 18:30 . 2012-05-04 09:59 514560 ----a-w- c:\windows\system32\qdvd.dll
2014-04-09 04:41 . 2014-02-04 02:07 149440 ----a-w- c:\windows\system32\drivers\storport.sys
2014-04-09 04:41 . 2014-02-04 02:07 234432 ----a-w- c:\windows\system32\drivers\msiscsi.sys
2014-04-09 04:41 . 2014-02-04 02:07 27072 ----a-w- c:\windows\system32\drivers\Diskdump.sys
2014-04-09 04:41 . 2014-02-04 02:00 2048 ----a-w- c:\windows\system32\iologmsg.dll
2014-04-09 04:41 . 2014-01-24 02:18 1212352 ----a-w- c:\windows\system32\drivers\ntfs.sys
2014-04-03 16:14 . 2014-04-03 16:14 -------- d-----w- c:\program files\SQUARE ENIX
2014-04-02 17:46 . 2014-04-02 17:46 -------- d-----w- c:\program files\trend micro
2014-04-02 17:46 . 2014-04-02 17:46 -------- d-----w- C:\rsit
2014-04-01 18:16 . 2014-04-01 18:16 -------- d-----w- c:\program files\ESET
2014-04-01 14:34 . 2014-04-01 14:37 -------- d-----w- c:\program files\Castlevania Lords of Shadow Mirror of Fate HD
2014-03-23 07:23 . 2014-03-23 07:23 -------- d-----w- c:\users\symy13\AppData\Local\Skype
2014-03-23 07:23 . 2014-03-23 07:23 -------- d-----w- c:\program files\Common Files\Skype
.
.
.
(((((((((((((((((((((((((((((((((((((((( Find3M výpis ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2014-04-03 17:38 . 2013-10-16 10:56 107736 ----a-w- c:\windows\system32\drivers\mbamswissarmy.sys
2014-03-31 07:35 . 2013-09-18 15:52 231584 ------w- c:\windows\system32\MpSigStub.exe
2014-03-12 10:45 . 2013-09-18 16:31 71048 ----a-w- c:\windows\system32\FlashPlayerCPLApp.cpl
2014-03-12 10:45 . 2013-09-18 16:31 692616 ----a-w- c:\windows\system32\FlashPlayerApp.exe
2014-02-09 06:19 . 2013-09-26 17:54 119296 ----a-w- c:\windows\system32\zlib.dll
2014-02-07 01:07 . 2014-03-12 05:23 2349056 ----a-w- c:\windows\system32\win32k.sys
2014-02-04 19:54 . 2014-02-04 19:54 281760 ----a-w- c:\windows\system32\drivers\atksgt.sys
2014-02-04 19:54 . 2014-02-04 19:54 25888 ----a-w- c:\windows\system32\drivers\lirsgt.sys
2014-02-04 02:04 . 2014-03-12 05:22 1230336 ----a-w- c:\windows\system32\WindowsCodecs.dll
2014-02-04 02:04 . 2014-03-12 05:23 509440 ----a-w- c:\windows\system32\qedit.dll
2014-01-29 02:06 . 2014-03-12 05:22 381440 ----a-w- c:\windows\system32\wer.dll
2014-01-28 02:07 . 2014-03-12 05:23 185344 ----a-w- c:\windows\system32\wwansvc.dll
.
.
(((((((((((((((((((((((((((((((((( Spouštěcí body v registru )))))))))))))))))))))))))))))))))))))))))))))
.
.
*Poznámka* prázdné záznamy a legitimní výchozí údaje nejsou zobrazeny.
REGEDIT4
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"DAEMON Tools Lite"="c:\program files\DAEMON Tools Lite\DTLite.exe" [2012-11-06 3673728]
"Steam"="c:\program files\Steam\steam.exe" [2014-02-25 1821888]
"cz.seznam.software.autoupdate"="c:\users\symy13\AppData\Roaming\Seznam.cz\szninstall.exe" [2013-05-16 1062472]
"cz.seznam.software.szndesktop"="c:\users\symy13\AppData\Roaming\Seznam.cz\bin\wszndesktop.exe" [2013-04-12 92664]
"Skype"="c:\program files\Skype\Phone\Skype.exe" [2014-02-10 20922016]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"RtHDVCpl"="c:\program files\Realtek\Audio\HDA\RtHDVCpl.exe" [2010-10-05 9742952]
"NUSB3MON"="c:\program files\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe" [2010-04-27 113288]
"StartCCC"="c:\program files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" [2011-04-19 336384]
"GrooveMonitor"="c:\program files\Microsoft Office\Office12\GrooveMonitor.exe" [2006-10-26 31016]
"HP Software Update"="c:\program files\HP\HP Software Update\HPWuSchd2.exe" [2007-05-08 54840]
"seznam-listicka-distribuce"="c:\program files\Seznam.cz\distribution\szninstall.exe" [2013-05-16 1062472]
"Adobe ARM"="c:\program files\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2013-11-21 959904]
"egui"="c:\program files\ESET\ESET NOD32 Antivirus\egui.exe" [2011-01-12 2219184]
.
c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\
HP Digital Imaging Monitor.lnk - c:\program files\HP\Digital Imaging\bin\hpqtra08.exe [2009-5-21 275768]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorAdmin"= 5 (0x5)
"ConsentPromptBehaviorUser"= 3 (0x3)
"EnableUIADesktopToggle"= 0 (0x0)
.
R2 SkypeUpdate;Skype Updater;c:\program files\Skype\Updater\Updater.exe [2013-10-23 172192]
R3 IEEtwCollectorService;Internet Explorer ETW Collector Service;c:\windows\system32\IEEtwCollector.exe [2014-03-06 108032]
R3 MBAMSwissArmy;MBAMSwissArmy;c:\windows\system32\drivers\MBAMSwissArmy.sys [2014-04-03 107736]
R3 RdpVideoMiniport;Remote Desktop Video Miniport Driver;c:\windows\system32\drivers\rdpvideominiport.sys [2012-08-23 14848]
R3 ss_bbus;SAMSUNG USB Mobile Device (WDM);c:\windows\system32\DRIVERS\ss_bbus.sys [2009-09-19 98432]
R3 ss_bmdfl;SAMSUNG USB Mobile Modem (Filter);c:\windows\system32\DRIVERS\ss_bmdfl.sys [2009-09-19 14848]
R3 ss_bmdm;SAMSUNG USB Mobile Modem;c:\windows\system32\DRIVERS\ss_bmdm.sys [2009-09-19 123648]
R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys [2013-10-02 49152]
R3 WatAdminSvc;Služba Technologie aktivace Windows;c:\windows\system32\Wat\WatAdminSvc.exe [2013-09-19 1343400]
S1 ehdrv;ehdrv;c:\windows\system32\DRIVERS\ehdrv.sys [2010-12-21 115008]
S2 AMD External Events Utility;AMD External Events Utility;c:\windows\system32\atiesrxx.exe [2011-04-20 176128]
S2 c2cautoupdatesvc;Skype Click to Call Updater;c:\program files\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe [2014-03-03 1363584]
S2 c2cpnrsvc;Skype Click to Call PNR Service;c:\program files\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe [2014-03-03 1748608]
S2 eamonm;eamonm;c:\windows\system32\DRIVERS\eamonm.sys [2010-12-21 137144]
S2 ekrn;ESET Service;c:\program files\ESET\ESET NOD32 Antivirus\ekrn.exe [2011-01-12 810144]
S2 epfwwfpr;epfwwfpr;c:\windows\system32\DRIVERS\epfwwfpr.sys [2010-12-21 95384]
S2 Intel® PROSet Monitoring Service;Intel® PROSet Monitoring Service;c:\windows\system32\IProsetMonitor.exe [2010-08-12 87712]
S2 UNS;Intel(R) Management and Security Application User Notification Service;c:\program files\Intel\Intel(R) Management Engine Components\UNS\UNS.exe [2010-10-06 2655768]
S3 AtiHDAudioService;ATI Function Driver for HD Audio Service;c:\windows\system32\drivers\AtihdW73.sys [2011-03-30 100880]
S3 dtsoftbus01;DAEMON Tools Virtual Bus Driver;c:\windows\system32\DRIVERS\dtsoftbus01.sys [2013-09-18 242240]
S3 MEI;Intel(R) Management Engine Interface ;c:\windows\system32\DRIVERS\HECI.sys [2010-10-19 41088]
S3 nusb3hub;Renesas Electronics USB 3.0 Hub Driver;c:\windows\system32\DRIVERS\nusb3hub.sys [2010-04-27 64904]
S3 nusb3xhc;Renesas Electronics USB 3.0 Host Controller Driver;c:\windows\system32\DRIVERS\nusb3xhc.sys [2010-04-27 146568]
.
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost]
HPZ12 REG_MULTI_SZ Pml Driver HPZ12 Net Driver HPZ12
hpdevmgmt REG_MULTI_SZ hpqcxs08 hpqddsvc
.
Obsah adresáře 'Naplánované úlohy'
.
2014-04-15 c:\windows\Tasks\Adobe Flash Player Updater.job
- c:\windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2013-09-18 10:45]
.
.
------- Doplňkový sken -------
.
uStart Page = hxxp://www.seznam.cz/?clid=16194
mStart Page = hxxp://www.google.com
IE: E&xportovat do aplikace Microsoft Excel - c:\progra~1\MICROS~1\Office12\EXCEL.EXE/3000
TCP: DhcpNameServer = 10.0.0.138
FF - ProfilePath - c:\users\symy13\AppData\Roaming\Mozilla\Firefox\Profiles\os4pm6tq.default\
FF - ExtSQL: !HIDDEN! 2013-09-18 21:59; smartwebprinting@hp.com; c:\program files\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3
.
.
Celkový čas: 2014-04-16 06:41:42
ComboFix-quarantined-files.txt 2014-04-16 04:41
ComboFix2.txt 2014-04-07 14:48
ComboFix3.txt 2014-04-04 15:39
ComboFix4.txt 2014-04-04 15:22
ComboFix5.txt 2014-04-16 04:34
.
Před spuštěním: Volných bajtů: 121 740 083 200
Po spuštění: Volných bajtů: 121 687 932 928
.
- - End Of File - - 7F5247DE923988EE8424D2D0015948C3
A36C5E4F47E84449FF07ED3517B43A31

předem děkuji