Problém na email SEZNAM.cz - One Time Password

[čmaja]

ComboFix 15-05-31.01 - Marek 31.05.2015 23:57:11.2.4 - x64
Microsoft Windows 7 Home Premium 6.1.7601.1.1250.420.1029.18.3948.2111 [GMT 2:00]
Spuštěný z: c:\users\Marek\Desktop\ComboFix.exe
Použité ovládací přepínače :: c:\users\Marek\Desktop\CFScript.txt
AV: avast! Antivirus *Disabled/Updated* {17AD7D40-BA12-9C46-7131-94903A54AD8B}
SP: avast! Antivirus *Disabled/Updated* {ACCC9CA4-9C28-93C8-4B81-AFE241D3E736}
SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.
.
((((((((((((((((((((((((( Soubory vytvořené od 2015-04-28 do 2015-05-31 )))))))))))))))))))))))))))))))
.
.
2015-05-31 19:10 . 2015-05-31 19:10 -------- d-----w- c:\programdata\Malwarebytes
2015-05-31 19:10 . 2015-05-31 20:38 -------- d-----w- c:\programdata\Malwarebytes' Anti-Malware (portable)
2015-05-31 19:10 . 2015-05-31 19:44 136408 ----a-w- c:\windows\system32\drivers\MBAMSwissArmy.sys
2015-05-31 18:56 . 2015-05-31 19:43 107736 ----a-w- c:\windows\system32\drivers\mbamchameleon.sys
2015-05-31 13:21 . 2015-05-18 02:57 12214312 ----a-w- c:\programdata\Microsoft\Windows Defender\Definition Updates\{369E935B-06E1-46D8-B37E-4800BD423ED6}\mpengine.dll
2015-05-31 13:18 . 2015-05-31 13:18 -------- d-----w- c:\users\Marek\AppData\Local\Skype
2015-05-31 12:38 . 2015-05-31 12:38 -------- d-----w- c:\users\Marek\AppData\Roaming\AVAST Software
2015-05-31 12:36 . 2015-05-31 12:36 137288 ----a-w- c:\windows\system32\drivers\aswStm.sys
2015-05-31 12:36 . 2015-05-31 12:36 89944 ----a-w- c:\windows\system32\drivers\aswMonFlt.sys
2015-05-31 12:36 . 2015-05-31 12:36 65736 ----a-w- c:\windows\system32\drivers\aswRvrt.sys
2015-05-31 12:36 . 2015-05-31 12:36 442264 ----a-w- c:\windows\system32\drivers\aswSP.sys
2015-05-31 12:36 . 2015-05-31 12:36 29168 ----a-w- c:\windows\system32\drivers\aswHwid.sys
2015-05-31 12:36 . 2015-05-31 12:36 272248 ----a-w- c:\windows\system32\drivers\aswVmm.sys
2015-05-31 12:36 . 2015-05-31 12:36 93528 ----a-w- c:\windows\system32\drivers\aswRdr2.sys
2015-05-31 12:36 . 2015-05-31 12:35 1047320 ----a-w- c:\windows\system32\drivers\aswSnx.sys
2015-05-31 12:36 . 2015-05-31 12:36 364472 ----a-w- c:\windows\system32\aswBoot.exe
2015-05-31 12:36 . 2015-05-31 12:36 43112 ----a-w- c:\windows\avastSS.scr
2015-05-31 12:34 . 2015-05-31 12:34 -------- d-----w- c:\program files\AVAST Software
2015-05-31 12:33 . 2015-05-31 12:33 -------- d-----w- c:\programdata\AVAST Software
2015-05-31 08:09 . 2015-05-31 08:09 -------- d-----w- c:\users\Marek\AppData\Local\Macromedia
2015-05-31 08:07 . 2015-05-31 13:13 778416 ----a-w- c:\windows\SysWow64\FlashPlayerApp.exe
2015-05-29 19:22 . 2015-05-29 19:22 -------- d-----w- c:\users\Marek\AppData\Local\Mozilla
2015-05-29 19:22 . 2015-05-29 19:22 -------- d-----w- c:\program files (x86)\Mozilla Maintenance Service
2015-05-29 15:44 . 2015-01-31 03:48 3179520 ----a-w- c:\windows\system32\rdpcorets.dll
2015-05-29 15:44 . 2015-01-31 03:48 16384 ----a-w- c:\windows\system32\RdpGroupPolicyExtension.dll
2015-05-29 15:44 . 2015-01-30 23:56 243200 ----a-w- c:\windows\system32\rdpudd.dll
2015-05-29 15:43 . 2014-12-11 17:47 87040 ----a-w- c:\windows\system32\TSWbPrxy.exe
2015-05-29 15:04 . 2014-09-05 01:52 5703168 ----a-w- c:\windows\SysWow64\mstscax.dll
2015-05-29 15:04 . 2014-09-05 02:11 6584320 ----a-w- c:\windows\system32\mstscax.dll
2015-05-28 22:14 . 2015-05-28 22:17 -------- d-s---w- c:\windows\system32\GWX
2015-05-28 22:14 . 2015-05-28 22:14 -------- d-s---w- c:\windows\SysWow64\GWX
2015-05-28 22:14 . 2015-05-28 22:14 -------- d-----w- c:\windows\Migration
2015-05-28 22:12 . 2015-05-28 22:13 -------- d-----w- c:\program files\CCleaner
2015-05-28 22:08 . 2015-05-28 22:08 -------- d-sh--w- c:\users\Marek\AppData\Local\EmieUserList
2015-05-28 22:08 . 2015-05-28 22:08 -------- d-sh--w- c:\users\Marek\AppData\Local\EmieSiteList
2015-05-28 22:08 . 2015-05-28 22:08 -------- d-sh--w- c:\users\Marek\AppData\Local\EmieBrowserModeList
2015-05-28 22:04 . 2012-08-23 14:10 19456 ----a-w- c:\windows\system32\drivers\rdpvideominiport.sys
2015-05-28 22:04 . 2012-08-23 11:12 192000 ----a-w- c:\windows\SysWow64\rdpendp_winip.dll
2015-05-28 22:04 . 2012-08-23 10:51 228864 ----a-w- c:\windows\system32\rdpendp_winip.dll
2015-05-28 22:02 . 2014-06-27 02:08 2777088 ----a-w- c:\windows\system32\msmpeg2vdec.dll
2015-05-28 22:01 . 2014-06-27 01:45 2285056 ----a-w- c:\windows\SysWow64\msmpeg2vdec.dll
2015-05-28 21:59 . 2015-04-11 03:19 69888 ----a-w- c:\windows\system32\drivers\stream.sys
2015-05-28 21:34 . 2015-01-09 03:14 91136 ----a-w- c:\windows\system32\wdi.dll
2015-05-28 21:34 . 2015-01-09 03:14 950272 ----a-w- c:\windows\system32\perftrack.dll
2015-05-28 21:34 . 2015-01-09 03:14 29696 ----a-w- c:\windows\system32\powertracker.dll
2015-05-28 21:34 . 2015-01-09 02:48 76800 ----a-w- c:\windows\SysWow64\wdi.dll
2015-05-28 21:34 . 2015-04-21 16:26 968704 ----a-w- c:\windows\system32\MsSpellCheckingFacility.exe
2015-05-28 21:31 . 2015-04-20 03:17 1179136 ----a-w- c:\windows\system32\FntCache.dll
2015-05-28 21:31 . 2015-04-20 03:17 1647104 ----a-w- c:\windows\system32\DWrite.dll
2015-05-28 21:31 . 2015-04-20 02:56 1250816 ----a-w- c:\windows\SysWow64\DWrite.dll
2015-05-28 21:26 . 2012-02-11 06:36 559104 ----a-w- c:\windows\system32\spoolsv.exe
2015-05-28 21:26 . 2012-02-11 06:36 67072 ----a-w- c:\windows\splwow64.exe
2015-05-28 21:26 . 2015-02-03 03:31 1424896 ----a-w- c:\windows\system32\WindowsCodecs.dll
2015-05-28 21:26 . 2015-02-03 03:12 1230848 ----a-w- c:\windows\SysWow64\WindowsCodecs.dll
2015-05-28 21:25 . 2015-02-04 03:16 465920 ----a-w- c:\windows\system32\WMPhoto.dll
2015-05-28 21:25 . 2015-02-04 02:54 417792 ----a-w- c:\windows\SysWow64\WMPhoto.dll
2015-05-28 19:08 . 2013-10-14 16:00 28368 ----a-w- c:\windows\system32\IEUDINIT.EXE
2015-05-28 18:31 . 2015-05-28 18:31 9728 ---ha-w- c:\windows\SysWow64\api-ms-win-downlevel-shlwapi-l1-1-0.dll
2015-05-28 18:30 . 2015-05-28 18:30 363008 ----a-w- c:\windows\system32\dxgi.dll
2015-05-28 16:45 . 2012-07-26 07:40 2560 ----a-w- c:\windows\system32\drivers\cs-CZ\wdf01000.sys.mui
2015-05-28 05:38 . 2015-05-28 05:38 -------- d-----w- c:\program files (x86)\Common Files\Skype
2015-05-28 05:38 . 2015-05-31 13:18 -------- d-----r- c:\program files (x86)\Skype
2015-05-28 05:13 . 2012-07-26 02:26 87040 ----a-w- c:\windows\system32\drivers\WUDFPf.sys
2015-05-28 05:13 . 2012-07-26 02:26 198656 ----a-w- c:\windows\system32\drivers\WUDFRd.sys
2015-05-28 05:13 . 2012-07-26 03:08 84992 ----a-w- c:\windows\system32\WUDFSvc.dll
2015-05-28 05:13 . 2012-07-26 03:08 194048 ----a-w- c:\windows\system32\WUDFPlatform.dll
2015-05-28 05:13 . 2012-07-26 03:08 45056 ----a-w- c:\windows\system32\WUDFCoinstaller.dll
2015-05-28 05:12 . 2012-07-26 03:08 229888 ----a-w- c:\windows\system32\WUDFHost.exe
2015-05-28 05:12 . 2012-07-26 03:08 744448 ----a-w- c:\windows\system32\WUDFx.dll
2015-05-28 04:59 . 2015-05-01 13:17 124112 ----a-w- c:\windows\system32\PresentationCFFRasterizerNative_v0300.dll
2015-05-28 04:59 . 2015-05-01 13:16 102608 ----a-w- c:\windows\SysWow64\PresentationCFFRasterizerNative_v0300.dll
2015-05-27 22:28 . 2012-03-01 06:46 23408 ----a-w- c:\windows\system32\drivers\fs_rec.sys
2015-05-27 22:28 . 2012-03-01 06:28 5120 ----a-w- c:\windows\system32\wmi.dll
2015-05-27 22:28 . 2012-03-01 05:29 5120 ----a-w- c:\windows\SysWow64\wmi.dll
2015-05-27 22:14 . 2014-03-09 21:48 171160 ----a-w- c:\windows\system32\infocardapi.dll
2015-05-27 22:14 . 2014-03-09 21:47 99480 ----a-w- c:\windows\SysWow64\infocardapi.dll
2015-05-27 22:14 . 2014-03-09 21:48 1389208 ----a-w- c:\windows\system32\icardagt.exe
2015-05-27 22:14 . 2014-03-09 21:47 619672 ----a-w- c:\windows\SysWow64\icardagt.exe
2015-05-27 22:14 . 2014-06-30 22:24 8856 ----a-w- c:\windows\system32\icardres.dll
2015-05-27 22:14 . 2014-06-30 22:14 8856 ----a-w- c:\windows\SysWow64\icardres.dll
2015-05-27 22:13 . 2014-06-06 06:16 35480 ----a-w- c:\windows\SysWow64\TsWpfWrp.exe
2015-05-27 22:13 . 2014-06-06 06:12 35480 ----a-w- c:\windows\system32\TsWpfWrp.exe
2015-05-27 22:08 . 2015-03-10 03:25 1882624 ----a-w- c:\windows\system32\msxml3.dll
2015-05-27 22:08 . 2015-03-10 03:08 1237504 ----a-w- c:\windows\SysWow64\msxml3.dll
2015-05-27 22:08 . 2015-03-10 03:21 2048 ----a-w- c:\windows\system32\msxml3r.dll
2015-05-27 22:08 . 2015-03-10 03:05 2048 ----a-w- c:\windows\SysWow64\msxml3r.dll
2015-05-27 22:05 . 2015-01-30 23:56 459336 ----a-w- c:\windows\system32\drivers\cng.sys
2015-05-27 22:03 . 2015-02-03 03:30 102912 ----a-w- c:\program files\Windows Media Player\wmpshare.exe
2015-05-27 22:02 . 2014-03-04 09:44 722944 ----a-w- c:\windows\system32\objsel.dll
2015-05-27 22:01 . 2014-07-17 02:07 455168 ----a-w- c:\windows\system32\winlogon.exe
2015-05-27 22:01 . 2014-07-17 02:07 235520 ----a-w- c:\windows\system32\winsta.dll
2015-05-27 22:01 . 2014-07-17 01:21 212480 ----a-w- c:\windows\system32\drivers\rdpwd.sys
2015-05-27 22:01 . 2014-07-17 02:07 150528 ----a-w- c:\windows\system32\rdpcorekmts.dll
2015-05-27 22:01 . 2014-07-17 01:40 157696 ----a-w- c:\windows\SysWow64\winsta.dll
2015-05-27 22:01 . 2012-04-26 05:34 9216 ----a-w- c:\windows\system32\rdrmemptylst.exe
2015-05-27 22:01 . 2014-07-17 01:21 39936 ----a-w- c:\windows\system32\drivers\tssecsrv.sys
2015-05-27 22:01 . 2012-04-26 05:41 77312 ----a-w- c:\windows\system32\rdpwsx.dll
2015-05-27 21:59 . 2015-05-05 01:29 342016 ----a-w- c:\windows\system32\schannel.dll
2015-05-27 21:59 . 2015-05-05 01:12 248832 ----a-w- c:\windows\SysWow64\schannel.dll
2015-05-27 21:59 . 2015-04-18 03:10 460800 ----a-w- c:\windows\system32\certcli.dll
2015-05-27 21:59 . 2015-04-18 02:56 342016 ----a-w- c:\windows\SysWow64\certcli.dll
2015-05-27 21:59 . 2015-03-23 03:25 726528 ----a-w- c:\windows\system32\generaltel.dll
2015-05-27 21:59 . 2015-03-23 03:24 30720 ----a-w- c:\windows\system32\acmigration.dll
2015-05-27 21:59 . 2015-03-23 03:25 769536 ----a-w- c:\windows\system32\invagent.dll
2015-05-27 21:59 . 2015-03-23 03:24 419840 ----a-w- c:\windows\system32\devinv.dll
2015-05-27 21:59 . 2015-03-23 03:24 192000 ----a-w- c:\windows\system32\aepic.dll
2015-05-27 21:59 . 2015-03-23 03:17 1111552 ----a-w- c:\windows\system32\aeinv.dll
2015-05-27 21:59 . 2015-03-23 03:24 227328 ----a-w- c:\windows\system32\aepdu.dll
2015-05-27 21:58 . 2014-10-14 02:13 683520 ----a-w- c:\windows\system32\termsrv.dll
2015-05-27 21:56 . 2015-02-03 03:31 215552 ----a-w- c:\windows\system32\ubpm.dll
2015-05-27 21:56 . 2015-02-03 03:12 171520 ----a-w- c:\windows\SysWow64\ubpm.dll
2015-05-27 21:55 . 2013-05-10 05:49 30720 ----a-w- c:\windows\system32\cryptdlg.dll
2015-05-27 21:55 . 2013-05-10 03:20 24576 ----a-w- c:\windows\SysWow64\cryptdlg.dll
2015-05-27 21:53 . 2013-10-04 02:28 190464 ----a-w- c:\windows\system32\SmartcardCredentialProvider.dll
2015-05-27 21:53 . 2013-10-04 02:25 197120 ----a-w- c:\windows\system32\credui.dll
2015-05-27 21:53 . 2013-10-04 01:58 152576 ----a-w- c:\windows\SysWow64\SmartcardCredentialProvider.dll
2015-05-27 21:53 . 2013-10-04 01:56 168960 ----a-w- c:\windows\SysWow64\credui.dll
2015-05-27 21:53 . 2014-08-01 11:53 1031168 ----a-w- c:\windows\system32\TSWorkspace.dll
2015-05-27 21:53 . 2014-08-01 11:35 793600 ----a-w- c:\windows\SysWow64\TSWorkspace.dll
2015-05-27 21:51 . 2014-06-18 02:19 449024 ----a-w- c:\program files\Common Files\Microsoft Shared\ink\tabskb.dll
2015-05-27 21:50 . 2014-03-26 14:44 2002432 ----a-w- c:\windows\system32\msxml6.dll
2015-05-27 21:49 . 2014-09-04 05:23 424448 ----a-w- c:\windows\system32\rastls.dll
2015-05-27 21:49 . 2014-09-04 05:04 372736 ----a-w- c:\windows\SysWow64\rastls.dll
2015-05-27 21:49 . 2015-02-25 03:18 754688 ----a-w- c:\windows\system32\drivers\http.sys
2015-05-27 21:49 . 2014-10-30 02:03 165888 ----a-w- c:\windows\system32\charmap.exe
.
.
(((((((((((((((((((((((((((((((((((((((( Find3M výpis ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2015-05-31 13:13 . 2012-01-19 13:28 142512 ----a-w- c:\windows\SysWow64\FlashPlayerCPLApp.cpl
2015-05-28 18:46 . 2015-05-28 18:46 208384 ----a-w- c:\windows\SysWow64\webcheck.dll
2015-05-28 18:46 . 2015-05-28 18:46 243200 ----a-w- c:\windows\system32\webcheck.dll
2015-05-27 19:45 . 2009-07-14 02:36 152576 ----a-w- c:\windows\SysWow64\msclmd.dll
2015-05-27 19:45 . 2009-07-14 02:36 175616 ----a-w- c:\windows\system32\msclmd.dll
2015-04-27 19:23 . 2015-05-28 22:00 113664 ----a-w- c:\windows\system32\sechost.dll
2015-04-27 19:05 . 2015-05-28 22:00 92160 ----a-w- c:\windows\SysWow64\sechost.dll
2015-04-27 19:04 . 2015-05-28 22:00 44032 ----a-w- c:\windows\apppatch\acwow64.dll
2015-03-04 04:41 . 2015-05-27 21:51 309248 ----a-w- c:\windows\apppatch\AppPatch64\AcGenral.dll
2015-03-04 04:41 . 2015-05-27 21:51 103424 ----a-w- c:\windows\apppatch\AppPatch64\acspecfc.dll
2015-03-04 04:10 . 2015-05-27 21:51 470528 ----a-w- c:\windows\apppatch\AcSpecfc.dll
2015-03-04 04:10 . 2015-05-27 21:51 2178560 ----a-w- c:\windows\apppatch\AcGenral.dll
2015-03-04 04:06 . 2015-05-27 21:51 2560 ----a-w- c:\windows\apppatch\AcRes.dll
.
.
(((((((((((((((((((((((((((((((((( Spouštěcí body v registru )))))))))))))))))))))))))))))))))))))))))))))
.
.
*Poznámka* prázdné záznamy a legitimní výchozí údaje nejsou zobrazeny.
REGEDIT4
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]
"StartCCC"="c:\program files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" [2010-01-22 98304]
"ATKOSD2"="c:\program files (x86)\ASUS\ATK Package\ATKOSD2\ATKOSD2.exe" [2010-02-04 7350912]
"ATKMEDIA"="c:\program files (x86)\ASUS\ATK Package\ATK Media\DMedia.exe" [2010-01-05 170624]
"HControlUser"="c:\program files (x86)\ASUS\ATK Package\ATK Hotkey\HControlUser.exe" [2009-06-19 105016]
"AvastUI.exe"="c:\program files\AVAST Software\Avast\AvastUI.exe" [2015-05-31 5515496]
.
c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\
Bluetooth.lnk - c:\program files\WIDCOMM\Bluetooth Software\BTTray.exe [2009-7-2 1079584]
SRS Premium Sound.lnk - c:\windows\Installer\{E5CF6B9C-3ABE-43C9-9413-AD5FFC98F049}\NewShortcut5_21C7B668029A47458B27645FE6E4A715.exe /f=srs_premium_sound_nopreset.zip /h [2010-4-24 156952]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorAdmin"= 5 (0x5)
"ConsentPromptBehaviorUser"= 3 (0x3)
"EnableUIADesktopToggle"= 0 (0x0)
"SoftwareSASGeneration"= 1 (0x1)
.
R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [x]
R2 SkypeUpdate;Skype Updater;c:\program files (x86)\Skype\Updater\Updater.exe;c:\program files (x86)\Skype\Updater\Updater.exe [x]
R3 btwl2cap;Bluetooth L2CAP Service;c:\windows\system32\DRIVERS\btwl2cap.sys;c:\windows\SYSNATIVE\DRIVERS\btwl2cap.sys [x]
R3 IEEtwCollectorService;Internet Explorer ETW Collector Service;c:\windows\system32\IEEtwCollector.exe;c:\windows\SYSNATIVE\IEEtwCollector.exe [x]
R3 RdpVideoMiniport;Remote Desktop Video Miniport Driver;c:\windows\system32\drivers\rdpvideominiport.sys;c:\windows\SYSNATIVE\drivers\rdpvideominiport.sys [x]
R3 SiSGbeLH;SiS191/SiS190 Ethernet Device NDIS 6.0 Driver;c:\windows\system32\DRIVERS\SiSG664.sys;c:\windows\SYSNATIVE\DRIVERS\SiSG664.sys [x]
R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys;c:\windows\SYSNATIVE\drivers\tsusbflt.sys [x]
R3 WatAdminSvc;Služba Technologie aktivace Windows;c:\windows\system32\Wat\WatAdminSvc.exe;c:\windows\SYSNATIVE\Wat\WatAdminSvc.exe [x]
S0 aswRvrt;avast! Revert; [x]
S0 aswVmm;avast! VM Monitor; [x]
S1 aswSnx;aswSnx;c:\windows\system32\drivers\aswSnx.sys;c:\windows\SYSNATIVE\drivers\aswSnx.sys [x]
S1 aswSP;aswSP;c:\windows\system32\drivers\aswSP.sys;c:\windows\SYSNATIVE\drivers\aswSP.sys [x]
S2 AFBAgent;AFBAgent;c:\windows\system32\FBAgent.exe;c:\windows\SYSNATIVE\FBAgent.exe [x]
S2 AMD External Events Utility;AMD External Events Utility;c:\windows\system32\atiesrxx.exe;c:\windows\SYSNATIVE\atiesrxx.exe [x]
S2 ASMMAP64;ASMMAP64;c:\program files (x86)\ASUS\ATK Package\ATKGFNEX\ASMMAP64.sys;c:\program files (x86)\ASUS\ATK Package\ATKGFNEX\ASMMAP64.sys [x]
S2 aswHwid;avast! HardwareID;c:\windows\system32\drivers\aswHwid.sys;c:\windows\SYSNATIVE\drivers\aswHwid.sys [x]
S2 aswMonFlt;aswMonFlt;c:\windows\system32\drivers\aswMonFlt.sys;c:\windows\SYSNATIVE\drivers\aswMonFlt.sys [x]
S2 aswStm;aswStm;c:\windows\system32\drivers\aswStm.sys;c:\windows\SYSNATIVE\drivers\aswStm.sys [x]
S2 DiagTrack;Diagnostics Tracking Service;c:\windows\System32\svchost.exe;c:\windows\SYSNATIVE\svchost.exe [x]
S2 UNS;Intel(R) Management & Security Application User Notification Service;c:\program files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe;c:\program files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe [x]
S3 ETD;ELAN PS/2 Port Input Device;c:\windows\system32\DRIVERS\ETD.sys;c:\windows\SYSNATIVE\DRIVERS\ETD.sys [x]
S3 HECIx64;Intel(R) Management Engine Interface;c:\windows\system32\DRIVERS\HECIx64.sys;c:\windows\SYSNATIVE\DRIVERS\HECIx64.sys [x]
S3 JMCR;JMCR;c:\windows\system32\DRIVERS\jmcr.sys;c:\windows\SYSNATIVE\DRIVERS\jmcr.sys [x]
S3 JME;JMicron Ethernet Adapter NDIS6.20 Driver (Amd64 Bits);c:\windows\system32\DRIVERS\JME.sys;c:\windows\SYSNATIVE\DRIVERS\JME.sys [x]
.
.
--- Ostatní služby/ovladače v paměti ---
.
*NewlyCreated* - WS2IFSL
.
Obsah adresáře 'Naplánované úlohy'
.
2015-05-31 c:\windows\Tasks\Adobe Flash Player Updater.job
- c:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2015-05-31 13:13]
.
.
--------- X64 Entries -----------
.
.
[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{10921475-03CE-4E04-90CE-E2E7EF20C814}]
c:\program files (x86)\IObit\IObit Uninstaller\UninstallExplorer64.dll [BU]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\00avast]
@="{472083B0-C522-11CF-8763-00608CC02F24}"
[HKEY_CLASSES_ROOT\CLSID\{472083B0-C522-11CF-8763-00608CC02F24}]
2015-05-31 12:36 722400 ----a-w- c:\program files\AVAST Software\Avast\ashShA64.dll
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"ETDWare"="c:\program files (x86)\Elantech\ETDCtrl.exe" [BU]
"SmartAudio"="c:\program files\CONEXANT\SAII\SAIICpl.exe" [2009-11-19 307768]
.
------- Doplňkový sken -------
.
uStart Page = hxxp://www.seznam.cz/
uLocal Page = c:\windows\system32\blank.htm
mLocal Page = c:\windows\SysWOW64\blank.htm
IE: E&xport to Microsoft Excel - c:\progra~2\MICROS~1\Office12\EXCEL.EXE/3000
IE: E&xportovat do aplikace Microsoft Office Excel - c:\progra~2\MICROS~1\OFFICE11\EXCEL.EXE/3000
IE: Odeslat obrázek do zařízení &Bluetooth... - c:\program files\WIDCOMM\Bluetooth Software\btsendto_ie_ctx.htm
IE: Odeslat stránku do zařízení &Bluetooth... - c:\program files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
TCP: DhcpNameServer = 192.168.254.1
TCP: Interfaces\{57DB1D98-632A-46C0-8AC9-2AE47C49450E}: NameServer = 212.96.160.7,212.96.161.6
FF - ProfilePath - c:\users\Marek\AppData\Roaming\Mozilla\Firefox\Profiles\knipf1xa.default\
FF - prefs.js: browser.startup.homepage - www.seznam.cz
.
- - - - NEPLATNÉ POLOŽKY ODSTRANĚNÉ Z REGISTRU - - - -
.
AddRemove-K_Series_ScreenSaver_EN - c:\windows\system32\K_Series_ScreenSaver_EN.scr
.
.
.
--------------------- ZAMKNUTÉ KLÍČE V REGISTRU ---------------------
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{B019E3BF-E7E5-453C-A2E4-D2C18CA0866F}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil64_17_0_0_188_ActiveX.exe,-101"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{B019E3BF-E7E5-453C-A2E4-D2C18CA0866F}\Elevation]
"Enabled"=dword:00000001
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{B019E3BF-E7E5-453C-A2E4-D2C18CA0866F}\LocalServer32]
@="c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil64_17_0_0_188_ActiveX.exe"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{B019E3BF-E7E5-453C-A2E4-D2C18CA0866F}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{299817DA-1FAC-4CE2-8F48-A108237013BD}]
@Denied: (A 2) (Everyone)
@="IFlashBroker6"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{299817DA-1FAC-4CE2-8F48-A108237013BD}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{299817DA-1FAC-4CE2-8F48-A108237013BD}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
.
------------------------ Jiné spuštené procesy ------------------------
.
c:\program files (x86)\ASUS\ATK Package\ATK Hotkey\ASLDRSrv.exe
c:\program files (x86)\ASUS\ATK Package\ATKGFNEX\GFNEXSrv.exe
c:\program files\AVAST Software\Avast\AvastSvc.exe
c:\program files (x86)\ASUS\ATK Package\ATK Hotkey\HControl.exe
c:\windows\AsScrPro.exe
c:\program files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
c:\program files (x86)\CyberLink\Power2Go\CLMLSvc.exe
c:\program files (x86)\ASUS\ControlDeck\ControlDeckStartUp.exe
.
**************************************************************************
.
Celkový čas: 2015-06-01 00:16:11 - počítač byl restartován
ComboFix-quarantined-files.txt 2015-05-31 22:16
ComboFix2.txt 2015-05-31 21:42
.
Před spuštěním: Volných bajtů: 23 354 814 464
Po spuštění: Volných bajtů: 23 410 839 552
.
- - End Of File - - BD82FDAB13C559B9DD46E731319CAFFC

[altrok]

• Prejmenujte ComboFix na Uninstall a spustte jako spravce
• ComboFix se odinstaluje.

• Stahnete a spustte DelFix - https://toolslib.net/downloads/viewdownload/2-delfix/
• Oznacte jen moznost "Remove disinfection tools"
• kliknete na Run

Vas pocitac je na malware cisty (utility ani ja v logach nevidim nic nebezpecneho).

[čmaja]

V tom případě moc děkuji za vyčištění počítače. A můžete téma odfajfkovat za vyřešené.

[altrok]

Nemate zac, rad jsem pomohl


Mejte se krasne a treba zase nekdy