VIRY.CZ

Logfile of random's system information tool 1.09 (written by random/random)
Run by Martin at 2013-07-14 15:32:42
Microsoft Windows 7 Home Premium Service Pack 1
System drive C: has 71 GB (71%) free of 100 GB
Total RAM: 2984 MB (21% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 15:33:27, on 14. 7. 2013
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v10.0 (10.00.9200.16635)
Boot mode: Normal

Running processes:
C:\Windows\system32\Dwm.exe
C:\Windows\system32\taskhost.exe
C:\Windows\Explorer.EXE
C:\Windows\system32\taskeng.exe
C:\Windows\system32\taskeng.exe
C:\Program Files\ASUS\P4G\BatteryLife.exe
C:\Program Files\ASUS\ATK Package\ATKOSD2\ATKOSD2.exe
C:\Windows\System32\rundll32.exe
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe
C:\Program Files\Realtek\Audio\HDA\RtHDVBg.exe
C:\Program Files\ASUS\ATK Package\ATK Media\DMedia.exe
C:\Program Files\ASUS\ATK Package\ATK Hotkey\HControlUser.exe
C:\Windows\System32\igfxtray.exe
C:\Windows\System32\hkcmd.exe
C:\Windows\System32\igfxpers.exe
C:\Program Files\Microsoft Security Client\msseces.exe
C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe
C:\Program Files\Bluetooth Suite\BtvStack.exe
C:\Program Files\Bluetooth Suite\AthBtTray.exe
C:\Program Files\Common Files\Java\Java Update\jusched.exe
C:\Program Files\Skype\Phone\Skype.exe
C:\Users\Martin\AppData\Roaming\uTorrent\uTorrent.exe
C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
C:\totalcmd\TOTALCMD.EXE
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Windows\system32\taskhost.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Windows\system32\SearchFilterHost.exe
C:\Users\Martin\Downloads\RSIT.exe
C:\Program Files\trend micro\Martin.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www1.delta-search.com/?affID=119 ... BF4821FFD3
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/p/?LinkId=255141
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/p/?LinkId=255141
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
O2 - BHO: HP Print Enhancer - {0347C33E-8762-4905-BF09-768834316C61} - C:\Program Files\HP\Digital Imaging\Smart Web Printing\hpswp_printenhancer.dll
O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll
O2 - BHO: IESpeakDoc - {8D10F6C4-0E01-4BD4-8601-11AC1FDF8126} - C:\Program Files\Bluetooth Suite\IEPlugIn.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll
O2 - BHO: HP Smart BHO Class - {FFFFFFFF-CF4E-4F2B-BDC2-0E72E116A856} - C:\Program Files\HP\Digital Imaging\Smart Web Printing\hpswp_BHO.dll
O4 - HKLM\..\Run: [SynTPEnh] %ProgramFiles%\Synaptics\SynTP\SynTPEnh.exe
O4 - HKLM\..\Run: [AmIcoSinglun] C:\Program Files\AmIcoSingLun\AmIcoSinglun.exe
O4 - HKLM\..\Run: [SynAsusAcpi] %ProgramFiles%\Synaptics\SynTP\SynAsusAcpi.exe
O4 - HKLM\..\Run: [RtHDVCpl] C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe -s
O4 - HKLM\..\Run: [RtHDVBg] C:\Program Files\Realtek\Audio\HDA\RtHDVBg.exe /SF3
O4 - HKLM\..\Run: [ATKOSD2] C:\Program Files\ASUS\ATK Package\ATKOSD2\ATKOSD2.exe
O4 - HKLM\..\Run: [ATKMEDIA] C:\Program Files\ASUS\ATK Package\ATK Media\DMedia.exe
O4 - HKLM\..\Run: [HControlUser] C:\Program Files\ASUS\ATK Package\ATK Hotkey\HControlUser.exe
O4 - HKLM\..\Run: [IgfxTray] C:\Windows\system32\igfxtray.exe
O4 - HKLM\..\Run: [HotKeysCmds] C:\Windows\system32\hkcmd.exe
O4 - HKLM\..\Run: [Persistence] C:\Windows\system32\igfxpers.exe
O4 - HKLM\..\Run: [MSC] "C:\Program Files\Microsoft Security Client\msseces.exe" -hide -runkey
O4 - HKLM\..\Run: [GrooveMonitor] "C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe"
O4 - HKLM\..\Run: [AtherosBtStack] "C:\Program Files\Bluetooth Suite\btvstack.exe"
O4 - HKLM\..\Run: [AthBtTray] "C:\Program Files\Bluetooth Suite\athbttray.exe"
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Common Files\Java\Java Update\jusched.exe"
O4 - HKCU\..\Run: [Skype] "C:\Program Files\Skype\Phone\Skype.exe" /minimized /regrun
O4 - HKCU\..\Run: [uTorrent] "C:\Users\Martin\AppData\Roaming\uTorrent\uTorrent.exe" /MINIMIZED
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'NETWORK SERVICE')
O4 - Startup: ACSnews.lnk = C:\Auto-diagnostika\ADnews.exe
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Excel - res://C:\PROGRA~1\MICROS~3\Office12\EXCEL.EXE/3000
O9 - Extra button: Odeslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~3\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: Od&eslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~3\Office12\ONBttnIE.dll
O9 - Extra button: (no name) - {7815BE26-237D-41A8-A98F-F7BD75F71086} - C:\Program Files\Bluetooth Suite\IEPlugIn.dll
O9 - Extra 'Tools' menuitem: Send by Bluetooth to - {7815BE26-237D-41A8-A98F-F7BD75F71086} - C:\Program Files\Bluetooth Suite\IEPlugIn.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~3\Office12\REFIEBAR.DLL
O9 - Extra button: Show or hide HP Smart Web Printing - {DDE87865-83C5-48c4-8357-2F5B1AA84522} - C:\Program Files\HP\Digital Imaging\Smart Web Printing\hpswp_BHO.dll
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Program Files\Microsoft Office\Office12\GrooveSystemServices.dll
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: ASLDR Service (ASLDRService) - ASUS - C:\Program Files\ASUS\ATK Package\ATK Hotkey\ASLDRSrv.exe
O23 - Service: AtherosSvc - Atheros Commnucations - C:\Program Files\Bluetooth Suite\adminservice.exe
O23 - Service: ATKGFNEX Service (ATKGFNEXSrv) - ASUS - C:\Program Files\ASUS\ATK Package\ATKGFNEX\GFNEXSrv.exe
O23 - Service: Služba Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: Služba Google Update (gupdatem) (gupdatem) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: Installer Service - Unknown owner - C:\ProgramData\NokiaInstallerCache\ProductCache\{D5878294-C113-43c5-A24F-FC333C52015A}\{0C808377-8C23-44ED-9016-05F42E6D4900}\Installer\InstallerService.exe
O23 - Service: Intel(R) Management and Security Application Local Management Service (LMS) - Intel Corporation - C:\Program Files\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Mozilla Foundation - C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe
O23 - Service: ServiceLayer - Nokia - C:\Program Files\PC Connectivity Solution\ServiceLayer.exe
O23 - Service: Skype Updater (SkypeUpdate) - Skype Technologies - C:\Program Files\Skype\Updater\Updater.exe
O23 - Service: Intel(R) Management and Security Application User Notification Service (UNS) - Intel Corporation - C:\Program Files\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
O23 - Service: ZAtheros Bt and Wlan Coex Agent - Atheros - C:\Program Files\Bluetooth Suite\Ath_CoexAgent.exe

--
End of file - 10483 bytes

======Scheduled tasks folder======

C:\Windows\tasks\Adobe Flash Player Updater.job
C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
C:\Windows\tasks\GoogleUpdateTaskMachineUA.job

=========Mozilla firefox=========

ProfilePath - C:\Users\Martin\AppData\Roaming\Mozilla\Firefox\Profiles\9iuun3nj.default

prefs.js - "browser.search.useDBForOrder" - true

"smartwebprinting@hp.com"=C:\Program Files\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3


[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 11.7.700.224 Plugin
"Path"=C:\Windows\system32\Macromed\Flash\NPSWF32_11_7_700_224.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@java.com/DTPlugin,version=10.25.2]
"Description"=Java™ Deployment Toolkit
"Path"=C:\Windows\system32\npDeployJava1.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@java.com/JavaPlugin,version=10.25.2]
"Description"=Oracle® Next Generation Java™ Plug-In
"Path"=C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@microsoft.com/GENUINE]
"Description"=
"Path"=disabled

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@nokia.com/EnablerPlugin]
"Description"=Nokia Suite Enabler Plugin
"Path"=C:\Program Files\Nokia\Nokia Suite\npNokiaSuiteEnabler.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@tools.google.com/Google Update;version=3]
"Description"=Google Update
"Path"=C:\Program Files\Google\Update\1.3.21.153\npGoogleUpdate3.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@tools.google.com/Google Update;version=9]
"Description"=Google Update
"Path"=C:\Program Files\Google\Update\1.3.21.153\npGoogleUpdate3.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@videolan.org/vlc,version=2.0.6]
"Description"=VLC Multimedia Plugin
"Path"=C:\Program Files\VideoLAN\VLC\npvlc.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\Adobe Reader]
"Description"=Handles PDFs in-place in Firefox
"Path"=C:\Program Files\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll


C:\Users\Martin\AppData\Roaming\Mozilla\Firefox\Profiles\9iuun3nj.default\extensions\
sk@dictionaries.addons.mozilla.org
{37E4D8EA-8BDA-4831-8EA1-89053939A250}
{3d7eb24f-2740-49df-8937-200b1cc08f8a}

C:\Users\Martin\AppData\Roaming\Mozilla\Firefox\Profiles\9iuun3nj.default\searchplugins\
babylon.xml
delta.xml

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{0347C33E-8762-4905-BF09-768834316C61}]
HP Print Enhancer - C:\Program Files\HP\Digital Imaging\Smart Web Printing\hpswp_printenhancer.dll [2009-09-20 328248]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{72853161-30C5-4D22-B7F9-0BBC1D38A37E}]
Groove GFS Browser Helper - C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll [2009-02-26 2217832]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
Java(tm) Plug-In SSV Helper - C:\Program Files\Java\jre7\bin\ssv.dll [2013-07-02 463272]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{8D10F6C4-0E01-4BD4-8601-11AC1FDF8126}]
CIESpeechBHO Class - C:\Program Files\Bluetooth Suite\IEPlugIn.dll [2012-11-29 52352]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre7\bin\jp2ssv.dll [2013-07-02 171944]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{FFFFFFFF-CF4E-4F2B-BDC2-0E72E116A856}]
HP Smart BHO Class - C:\Program Files\HP\Digital Imaging\Smart Web Printing\hpswp_BHO.dll [2009-09-20 509496]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"SynTPEnh"=C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2011-05-05 2262312]
"AmIcoSinglun"=C:\Program Files\AmIcoSingLun\AmIcoSinglun.exe [2011-03-18 258048]
"SynAsusAcpi"=C:\Program Files\Synaptics\SynTP\SynAsusAcpi.exe [2011-05-05 83240]
"RtHDVCpl"=C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe [2011-09-05 10992232]
"RtHDVBg"=C:\Program Files\Realtek\Audio\HDA\RtHDVBg.exe [2011-08-16 1571432]
"ATKOSD2"=C:\Program Files\ASUS\ATK Package\ATKOSD2\ATKOSD2.exe [2011-12-22 318080]
"ATKMEDIA"=C:\Program Files\ASUS\ATK Package\ATK Media\DMedia.exe [2011-10-24 174720]
"HControlUser"=C:\Program Files\ASUS\ATK Package\ATK Hotkey\HControlUser.exe [2009-06-19 105016]
"IgfxTray"=C:\Windows\system32\igfxtray.exe [2011-09-16 142616]
"HotKeysCmds"=C:\Windows\system32\hkcmd.exe [2011-09-16 177432]
"Persistence"=C:\Windows\system32\igfxpers.exe [2011-09-16 176408]
"MSC"=C:\Program Files\Microsoft Security Client\msseces.exe [2013-01-27 947152]
"GrooveMonitor"=C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe [2009-02-26 30040]
"AtherosBtStack"=C:\Program Files\Bluetooth Suite\btvstack.exe [2012-11-29 877184]
"AthBtTray"=C:\Program Files\Bluetooth Suite\athbttray.exe [2012-11-29 696448]
"SunJavaUpdateSched"=C:\Program Files\Common Files\Java\Java Update\jusched.exe [2013-03-12 253816]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"Skype"=C:\Program Files\Skype\Phone\Skype.exe [2013-04-19 18678376]
"uTorrent"=C:\Users\Martin\AppData\Roaming\uTorrent\uTorrent.exe [2013-05-02 802136]
""= []

C:\Users\Martin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
ACSnews.lnk - C:\Auto-diagnostika\ADnews.exe

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\igfxcui]
C:\Windows\system32\igfxdev.dll [2011-09-16 294400]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED}

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{B5A7F190-DDA6-4420-B3BA-52453494E6CD}"=C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll [2009-02-26 2217832]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=credssp.dll

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MsMpSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\MsMpSvc]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorAdmin"=5
"ConsentPromptBehaviorUser"=3
"EnableUIADesktopToggle"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.msadpcm"=msadp32.acm
"midimapper"=midimap.dll
"wavemapper"=msacm32.drv
"VIDC.UYVY"=msyuv.dll
"VIDC.YUY2"=msyuv.dll
"VIDC.YVYU"=msyuv.dll
"VIDC.IYUV"=iyuv_32.dll
"vidc.i420"=iyuv_32.dll
"VIDC.YVU9"=tsbyuv.dll
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"vidc.cvid"=iccvid.dll
"MSVideo8"=VfWWDM32.dll
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"aux1"=wdmaud.drv
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv
"wave2"=wdmaud.drv
"mixer2"=wdmaud.drv
"midi2"=wdmaud.drv
"msacm.ac3filter"=ac3filter.acm

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*

======List of files/folders created in the last 1 month======

2013-07-14 15:32:44 ----D---- C:\Program Files\trend micro
2013-07-14 15:32:42 ----D---- C:\rsit
2013-07-14 11:32:02 ----D---- C:\Program Files\ESET
2013-07-12 02:08:10 ----A---- C:\Windows\system32\jscript.dll
2013-07-12 02:08:07 ----A---- C:\Windows\system32\jscript9.dll
2013-07-12 02:08:06 ----A---- C:\Windows\system32\jsproxy.dll
2013-07-12 02:08:06 ----A---- C:\Windows\system32\iesetup.dll
2013-07-12 02:08:04 ----A---- C:\Windows\system32\ieui.dll
2013-07-12 02:08:03 ----A---- C:\Windows\system32\msfeeds.dll
2013-07-12 02:08:03 ----A---- C:\Windows\system32\iernonce.dll
2013-07-12 02:08:03 ----A---- C:\Windows\system32\ie4uinit.exe
2013-07-12 02:08:02 ----A---- C:\Windows\system32\RegisterIEPKEYs.exe
2013-07-12 02:08:02 ----A---- C:\Windows\system32\iesysprep.dll
2013-07-12 02:08:01 ----A---- C:\Windows\system32\urlmon.dll
2013-07-12 02:08:00 ----A---- C:\Windows\system32\iertutil.dll
2013-07-12 02:07:56 ----A---- C:\Windows\system32\wininet.dll
2013-07-12 02:07:52 ----A---- C:\Windows\system32\ieframe.dll
2013-07-12 02:07:48 ----A---- C:\Windows\system32\mshtml.dll
2013-07-11 19:16:52 ----D---- C:\Auto-diagnostika
2013-07-10 15:39:10 ----A---- C:\Windows\system32\DWrite.dll
2013-07-10 15:39:09 ----A---- C:\Windows\system32\win32k.sys
2013-07-10 15:39:08 ----A---- C:\Windows\system32\qedit.dll
2013-07-10 15:39:07 ----A---- C:\Windows\system32\WMVDECOD.DLL
2013-07-03 11:18:15 ----D---- C:\Program Files\Mozilla Firefox
2013-07-02 14:07:14 ----A---- C:\Windows\system32\javaws.exe
2013-07-02 14:07:11 ----A---- C:\Windows\system32\WindowsAccessBridge.dll
2013-07-02 14:07:11 ----A---- C:\Windows\system32\javaw.exe
2013-07-02 14:07:11 ----A---- C:\Windows\system32\java.exe
2013-07-02 14:07:02 ----D---- C:\Program Files\Java
2013-06-21 13:02:28 ----D---- C:\Users\Martin\AppData\Roaming\VSRevoGroup
2013-06-21 12:54:05 ----D---- C:\Users\Martin\AppData\Roaming\HP
2013-06-21 12:54:05 ----D---- C:\ProgramData\WEBREG
2013-06-21 12:37:13 ----D---- C:\ProgramData\HP Product Assistant
2013-06-21 12:35:49 ----D---- C:\Program Files\Common Files\HP
2013-06-21 12:35:24 ----D---- C:\Program Files\Common Files\Hewlett-Packard
2013-06-21 12:34:49 ----D---- C:\Program Files\HP
2013-06-21 12:34:48 ----HD---- C:\Config.Msi
2013-06-21 12:34:13 ----N---- C:\Windows\hpomdl28.dat
2013-06-21 12:34:13 ----A---- C:\Windows\hpoins28.dat
2013-06-21 12:34:09 ----D---- C:\ProgramData\HP
2013-06-21 12:33:44 ----A---- C:\Windows\system32\hpzids01.dll
2013-06-21 12:33:44 ----A---- C:\Windows\system32\hppldcoi.dll
2013-06-21 12:33:44 ----A---- C:\Windows\system32\hpowiax7.dll
2013-06-21 12:33:44 ----A---- C:\Windows\system32\hpovst15.dll
2013-06-21 12:33:43 ----A---- C:\Windows\system32\hpotscl6.dll
2013-06-19 12:46:01 ----D---- C:\ProgramData\Logs
2013-06-16 19:45:05 ----D---- C:\Program Files\Elcom
2013-06-16 19:44:30 ----D---- C:\ALFA plus
2013-06-16 19:43:22 ----D---- C:\Program Files\KROS
2013-06-16 19:42:26 ----D---- C:\ProgramData\KROS
2013-06-16 17:49:32 ----D---- C:\ProgramData\STORMWARE
2013-06-16 17:49:32 ----D---- C:\Program Files\STORMWARE
2013-06-16 12:14:00 ----D---- C:\Kamar
2013-06-16 10:32:01 ----D---- C:\ProgramData\firebird
2013-06-16 10:31:52 ----D---- C:\ProgramData\Licenses
2013-06-16 10:31:51 ----AD---- C:\ProgramData\TEMP
2013-06-16 10:22:11 ----D---- C:\RK Software
2013-06-16 01:39:40 ----D---- C:\Users\Martin\AppData\Roaming\Faktury Plus

======List of files/folders modified in the last 1 month======

2013-07-14 15:33:24 ----D---- C:\Users\Martin\AppData\Roaming\uTorrent
2013-07-14 15:32:58 ----D---- C:\Windows\Prefetch
2013-07-14 15:32:44 ----RD---- C:\Program Files
2013-07-14 15:32:29 ----D---- C:\Windows\Temp
2013-07-14 15:29:46 ----D---- C:\Windows\system32\config
2013-07-14 14:42:45 ----D---- C:\Users\Martin\AppData\Roaming\Skype
2013-07-14 11:22:40 ----D---- C:\Windows\Panther
2013-07-14 11:22:40 ----D---- C:\Windows\inf
2013-07-14 11:22:40 ----D---- C:\Windows\debug
2013-07-14 11:22:40 ----D---- C:\Windows
2013-07-14 10:49:35 ----D---- C:\Windows\System32
2013-07-14 10:49:35 ----A---- C:\Windows\system32\PerfStringBackup.INI
2013-07-14 10:44:33 ----A---- C:\Windows\system32\log.txt
2013-07-14 01:29:03 ----D---- C:\Users\Martin\AppData\Roaming\vlc
2013-07-12 18:26:04 ----D---- C:\Program Files\Opera
2013-07-12 11:01:55 ----RSD---- C:\Windows\assembly
2013-07-12 11:01:55 ----D---- C:\Windows\Microsoft.NET
2013-07-12 09:05:40 ----D---- C:\Windows\winsxs
2013-07-12 09:04:17 ----D---- C:\Program Files\Internet Explorer
2013-07-12 09:04:15 ----D---- C:\Program Files\Windows Journal
2013-07-12 09:04:14 ----D---- C:\Program Files\Windows Defender
2013-07-12 02:14:05 ----SHD---- C:\Windows\Installer
2013-07-12 02:08:27 ----D---- C:\Windows\system32\catroot
2013-07-12 02:08:26 ----D---- C:\Windows\system32\catroot2
2013-07-12 02:07:25 ----D---- C:\ProgramData\Microsoft Help
2013-07-12 02:00:54 ----SHD---- C:\System Volume Information
2013-07-12 01:51:54 ----A---- C:\Windows\system32\MRT.exe
2013-07-11 19:17:56 ----HD---- C:\ProgramData
2013-07-10 14:41:48 ----D---- C:\Windows\system32\drivers
2013-07-04 08:35:45 ----D---- C:\Program Files\Mozilla Maintenance Service
2013-07-03 09:10:08 ----D---- C:\Windows\system32\wdi
2013-07-02 14:16:52 ----D---- C:\Users\Martin\AppData\Roaming\DAEMON Tools Lite
2013-07-02 14:16:33 ----D---- C:\Windows\Logs
2013-07-02 14:07:03 ----A---- C:\Windows\system32\npDeployJava1.dll
2013-07-02 14:07:03 ----A---- C:\Windows\system32\deployJava1.dll
2013-06-21 13:03:18 ----D---- C:\Windows\system32\Tasks
2013-06-21 13:03:17 ----D---- C:\Windows\Tasks
2013-06-21 12:53:41 ----A---- C:\Windows\win.ini
2013-06-21 12:37:23 ----RSD---- C:\Windows\Fonts
2013-06-21 12:35:51 ----D---- C:\Windows\twain_32
2013-06-21 12:35:49 ----D---- C:\Program Files\Common Files
2013-06-21 12:35:01 ----D---- C:\Windows\system32\DriverStore
2013-06-16 19:39:44 ----D---- C:\Windows\SoftwareDistribution
2013-06-16 13:57:05 ----D---- C:\Windows\rescache
2013-06-16 12:14:32 ----D---- C:\ProgramData\Kamar

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 MpFilter;Microsoft Malware Protection Driver; C:\Windows\system32\DRIVERS\MpFilter.sys [2013-01-20 195296]
R0 rdyboost;ReadyBoost; C:\Windows\System32\drivers\rdyboost.sys [2010-11-20 173440]
R1 ATKWMIACPIIO;ATKWMIACPI Driver; \??\C:\Program Files\ASUS\ATK Package\ATK WMIACPI\atkwmiacpi.sys [2011-09-07 14464]
R1 dtsoftbus01;DAEMON Tools Virtual Bus Driver; C:\Windows\system32\DRIVERS\dtsoftbus01.sys [2013-05-20 242240]
R1 vwififlt;Virtual WiFi Filter Driver; C:\Windows\system32\DRIVERS\vwififlt.sys [2009-07-14 48128]
R2 ASMMAP;ASMMAP; \??\C:\Program Files\ASUS\ATK Package\ATKGFNEX\ASMMAP.sys [2009-07-02 13880]
R2 NisDrv;Microsoft Network Inspection System; C:\Windows\system32\DRIVERS\NisDrvWFP.sys [2013-01-20 100328]
R3 asmthub3;ASMedia USB3 Hub Service; C:\Windows\system32\DRIVERS\asmthub3.sys [2011-11-22 102888]
R3 asmtxhci;ASMEDIA XHCI Service; C:\Windows\system32\DRIVERS\asmtxhci.sys [2011-11-22 313832]
R3 AthBTPort;Atheros Virtual Bluetooth Class; C:\Windows\system32\DRIVERS\btath_flt.sys [2012-11-29 35968]
R3 athr;Atheros Extensible Wireless LAN device driver; C:\Windows\system32\DRIVERS\athr.sys [2011-10-03 2205696]
R3 BTATH_A2DP;Bluetooth A2DP Audio Driver; C:\Windows\system32\drivers\btath_a2dp.sys [2012-11-29 299648]
R3 btath_avdt;Atheros Bluetooth AVDT Service; C:\Windows\system32\drivers\btath_avdt.sys [2012-11-29 98432]
R3 BTATH_BUS;Atheros Bluetooth Bus; C:\Windows\system32\DRIVERS\btath_bus.sys [2012-11-29 25728]
R3 BTATH_HCRP;Bluetooth HCRP Server driver; C:\Windows\system32\DRIVERS\btath_hcrp.sys [2012-11-29 148096]
R3 BTATH_LWFLT;Bluetooth LWFLT Device; C:\Windows\system32\DRIVERS\btath_lwflt.sys [2012-11-29 60544]
R3 BTATH_RCP;Bluetooth AVRCP Device; C:\Windows\system32\DRIVERS\btath_rcp.sys [2012-11-29 264704]
R3 BtFilter;BtFilter; C:\Windows\system32\DRIVERS\btfilter.sys [2012-11-29 470656]
R3 BthEnum;Bluetooth Enumerator Service; C:\Windows\system32\DRIVERS\BthEnum.sys [2009-07-14 34816]
R3 BthPan;Bluetooth Device (Personal Area Network); C:\Windows\system32\DRIVERS\bthpan.sys [2009-07-14 93696]
R3 BTHUSB;Bluetooth Radio USB Driver; C:\Windows\System32\Drivers\BTHUSB.sys [2011-04-28 60416]
R3 igfx;igfx; C:\Windows\system32\DRIVERS\igdkmd32.sys [2011-09-16 10843136]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\Windows\system32\drivers\RTKVHDA.sys [2011-09-06 3663848]
R3 IntcDAud;Intel(R) Zvuk pre obrazovky; C:\Windows\system32\DRIVERS\IntcDAud.sys [2011-09-16 269824]
R3 L1C;NDIS Miniport Driver for Atheros AR813x/AR815x PCI-E Ethernet Controller; C:\Windows\system32\DRIVERS\L1C62x86.sys [2010-08-24 68208]
R3 MEI;Intel(R) Management Engine Interface; C:\Windows\system32\DRIVERS\HECI.sys [2010-10-19 41088]
R3 RFCOMM;Bluetooth Device (RFCOMM Protocol TDI); C:\Windows\system32\DRIVERS\rfcomm.sys [2009-07-14 129536]
R3 SynTP;Synaptics TouchPad Driver; C:\Windows\system32\DRIVERS\SynTP.sys [2011-05-05 1344560]
R3 vwifimp;Microsoft Virtual WiFi Miniport Service; C:\Windows\system32\DRIVERS\vwifimp.sys [2009-07-14 14336]
S2 Parvdm;Parvdm; C:\Windows\system32\drivers\parvdm.sys [2009-07-14 8704]
S3 aic78xx;aic78xx; C:\Windows\system32\drivers\djsvs.sys [2009-07-14 70720]
S3 amdagp;AMD AGP Bus Filter Driver; C:\Windows\system32\drivers\amdagp.sys [2009-07-14 53312]
S3 AmUStor;AM USB Stroage Driver; C:\Windows\system32\drivers\AmUStor.SYS [2011-03-18 46680]
S3 b57nd60x;Broadcom NetXtreme Gigabit Ethernet - NDIS 6.0; C:\Windows\system32\DRIVERS\b57nd60x.sys [2009-07-14 229888]
S3 BTHPORT;Bluetooth Port Driver; C:\Windows\System32\Drivers\BTHport.sys [2012-07-06 393728]
S3 Dot4;MS IEEE-1284.4 Driver; C:\Windows\system32\DRIVERS\Dot4.sys [2009-07-14 131072]
S3 Dot4Print;Print Class Driver for IEEE-1284.4; C:\Windows\system32\DRIVERS\Dot4Prt.sys [2010-11-20 16384]
S3 dot4usb;MS Dot4USB Filter Dot4USB Filter; C:\Windows\system32\DRIVERS\dot4usb.sys [2009-07-14 36864]
S3 FTDIBUS;USB Serial Converter Driver; C:\Windows\system32\drivers\ftdibus.sys [2010-08-24 60104]
S3 FTSER2K;USB Serial Port Driver; C:\Windows\system32\drivers\ftser2k.sys [2011-03-18 73096]
S3 nmwcd;Nokia USB Phone Parent Driver; C:\Windows\system32\drivers\ccdcmb.sys [2013-01-23 18560]
S3 nmwcdc;Nokia USB Communication Driver; C:\Windows\system32\drivers\ccdcmbo.sys [2013-01-23 23168]
S3 pccsmcfd;PCCS Mode Change Filter Driver; C:\Windows\system32\DRIVERS\pccsmcfd.sys [2012-10-17 19072]
S3 pciide;pciide; C:\Windows\system32\drivers\pciide.sys [2009-07-14 12368]
S3 RdpVideoMiniport;Remote Desktop Video Miniport Driver; C:\Windows\System32\drivers\rdpvideominiport.sys [2012-08-23 14848]
S3 sisagp;SIS AGP Bus Filter; C:\Windows\system32\drivers\sisagp.sys [2009-07-14 52304]
S3 TsUsbFlt;@%SystemRoot%\system32\drivers\tsusbflt.sys,-1; C:\Windows\System32\drivers\tsusbflt.sys [2012-08-23 49664]
S3 TsUsbGD;Remote Desktop Generic USB Device; C:\Windows\system32\drivers\TsUsbGD.sys [2012-08-23 27136]
S3 upperdev;upperdev; C:\Windows\system32\DRIVERS\usbser_lowerflt.sys [2013-01-23 8192]
S3 usbscan;USB Scanner Driver; C:\Windows\system32\DRIVERS\usbscan.sys [2009-07-14 35840]
S3 usbser;USB Modem Driver; C:\Windows\system32\drivers\usbser.sys [2010-11-20 27648]
S3 UsbserFilt;UsbserFilt; C:\Windows\system32\DRIVERS\usbser_lowerfltj.sys [2013-01-23 8192]
S3 viaagp;VIA AGP Bus Filter; C:\Windows\system32\drivers\viaagp.sys [2009-07-14 53328]
S3 ViaC7;VIA C7 Processor Driver; C:\Windows\system32\drivers\viac7.sys [2009-07-14 52736]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 AdobeARMservice;Adobe Acrobat Update Service; C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe [2013-05-11 65640]
R2 ASLDRService;ASLDR Service; C:\Program Files\ASUS\ATK Package\ATK Hotkey\ASLDRSrv.exe [2011-11-21 80512]
R2 AtherosSvc;AtherosSvc; C:\Program Files\Bluetooth Suite\adminservice.exe [2012-11-29 195200]
R2 ATKGFNEXSrv;ATKGFNEX Service; C:\Program Files\ASUS\ATK Package\ATKGFNEX\GFNEXSrv.exe [2011-11-21 96896]
R2 hpqddsvc;HP CUE DeviceDiscovery Service; C:\Windows\system32\svchost.exe [2009-07-14 20992]
R2 LMS;Intel(R) Management and Security Application Local Management Service; C:\Program Files\Intel\Intel(R) Management Engine Components\LMS\LMS.exe [2010-12-20 325656]
R2 MDM;Machine Debug Manager; C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\mdm.exe [2006-10-26 335872]
R2 MsMpSvc;Microsoft Antimalware Service; C:\Program Files\Microsoft Security Client\MsMpEng.exe [2013-01-27 20456]
R2 Net Driver HPZ12;Net Driver HPZ12; C:\Windows\System32\svchost.exe [2009-07-14 20992]
R2 Pml Driver HPZ12;Pml Driver HPZ12; C:\Windows\System32\svchost.exe [2009-07-14 20992]
R2 UNS;Intel(R) Management and Security Application User Notification Service; C:\Program Files\Intel\Intel(R) Management Engine Components\UNS\UNS.exe [2010-12-20 2656280]
R2 ZAtheros Bt and Wlan Coex Agent;ZAtheros Bt and Wlan Coex Agent; C:\Program Files\Bluetooth Suite\Ath_CoexAgent.exe [2012-11-29 327296]
R3 hpqcxs08;hpqcxs08; C:\Windows\system32\svchost.exe [2009-07-14 20992]
R3 NisSrv;@C:\Program Files\Microsoft Security Client\MpAsDesc.dll,-243; C:\Program Files\Microsoft Security Client\NisSrv.exe [2013-01-27 295232]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
S2 gupdate;Služba Google Update (gupdate); C:\Program Files\Google\Update\GoogleUpdate.exe [2013-05-19 116648]
S2 SkypeUpdate;Skype Updater; C:\Program Files\Skype\Updater\Updater.exe [2013-02-28 161384]
S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service; C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2013-06-11 256904]
S3 aspnet_state;ASP.NET State Service; C:\Windows\Microsoft.NET\Framework\v4.0.30319\aspnet_state.exe [2010-03-18 35160]
S3 gupdatem;Služba Google Update (gupdatem); C:\Program Files\Google\Update\GoogleUpdate.exe [2013-05-19 116648]
S3 Installer Service;Installer Service; C:\ProgramData\NokiaInstallerCache\ProductCache\{D5878294-C113-43c5-A24F-FC333C52015A}\{0C808377-8C23-44ED-9016-05F42E6D4900}\Installer\InstallerService.exe [2013-05-24 125288]
S3 Microsoft Office Groove Audit Service;Microsoft Office Groove Audit Service; C:\Program Files\Microsoft Office\Office12\GrooveAuditService.exe [2009-02-26 64856]
S3 MozillaMaintenance;Mozilla Maintenance Service; C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe [2013-07-03 117144]
S3 odserv;Microsoft Office Diagnostics Service; C:\Program Files\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE [2011-07-20 440696]
S3 ose;Office Source Engine; C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2006-10-26 145184]
S3 ServiceLayer;ServiceLayer; C:\Program Files\PC Connectivity Solution\ServiceLayer.exe [2013-04-18 737616]
S3 WatAdminSvc;@%SystemRoot%\system32\Wat\WatUX.exe,-601; C:\Windows\system32\Wat\WatAdminSvc.exe [2013-05-19 1343400]
S4 NetMsmqActivator;@C:\Windows\Microsoft.NET\Framework\v4.0.30319\\ServiceModelInstallRC.dll,-8195; C:\Windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe [2010-03-18 124240]
S4 NetPipeActivator;@C:\Windows\Microsoft.NET\Framework\v4.0.30319\\ServiceModelInstallRC.dll,-8197; C:\Windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe [2010-03-18 124240]
S4 NetTcpActivator;@C:\Windows\Microsoft.NET\Framework\v4.0.30319\\ServiceModelInstallRC.dll,-8199; C:\Windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe [2010-03-18 124240]

-----------------EOF-----------------

Zdravím, tohle fixni v HJT :

O4 - HKLM\..\Run: [GrooveMonitor] "C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe"
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Common Files\Java\Java Update\jusched.exe"
O4 - HKCU\..\Run: [uTorrent] "C:\Users\Martin\AppData\Roaming\uTorrent\uTorrent.exe" /MINIMIZED

HJT najdeš zde ?

C:\Program Files\trend micro\Martin.exe

Fix znamená že spustíš HJT jako admin

v okně které se ti otevře klikneš na Do a system scan only

v dalším okně najdeš řádky které jsem ti vypsal,

vedle nich je čtvereček do kterého uděláš zatržítko,

pak klikneš na Fix checked které je vlevo dole,

program se ti zeptá zda opravdu ANO s tím samozřejmě souhlasíš a je hotovo.


Smaž nepotřebné soubory

pomocí CCleaneru

návod :

Čistič - tady vyčistíš PC od nepotřebných souborů a vysypeš Koš

Registry - tady vyčistíš registry (před použitím doporučuji udělat jejich zálohu kterou CCleaner nabízí)

čištění registru je třeba několikrát zopakovat !

Nástroje - tady lze odinstalovat programy, upravit co se spustí po Startu systému a obnovit systém


Defragmentuj disk buď integrovaným windows nástrojem,

nebo jinou aplikací, například Defragglerem


Stáhni a ulož na plochu AdwCleaner,

ukonči všechny programy včetně prohlížeče a dvojklikem spusť,

objeví se okno kde vlevo dole klikni na Search.

Po té proběhne sken a po jeho skončení na Tebe vypadne log, který mi sem zkopíruj.

Ďakujem

# AdwCleaner v2.305 - Log vytvorený 14/07/2013 o 18:33:49
# Aktualizované 11/07/2013 Xplode
# Operaený systém : Windows 7 Home Premium Service Pack 1 (32 bits)
# Uživateľ : Martin - MARTIN-PC
# Spustený systém : Normálny
# Spustené z : C:\Users\Martin\Desktop\adwcleaner.exe
# Voľba [Prehľada?]


***** [Služby] *****


***** [Súbory / Adresáre] *****

Adresár Nájdené : C:\ProgramData\Babylon
Adresár Nájdené : C:\Users\Martin\AppData\Roaming\Babylon
Adresár Nájdené : C:\Users\Martin\AppData\Roaming\pdfforge
Súbor Nájdené : C:\Users\Martin\AppData\Roaming\Mozilla\Firefox\Profiles\9iuun3nj.default\searchplugins\Babylon.xml
Súbor Nájdené : C:\Users\Martin\AppData\Roaming\Mozilla\Firefox\Profiles\9iuun3nj.default\searchplugins\delta.xml

***** [Registre] *****

Kľúe Nájdené : HKCU\Software\BabSolution
Kľúe Nájdené : HKCU\Software\BI
Kľúe Nájdené : HKCU\Software\DataMngr
Kľúe Nájdené : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{0ECDF796-C2DC-4D79-A620-CCE0C0A66CC9}
Kľúe Nájdené : HKLM\Software\Babylon
Kľúe Nájdené : HKLM\SOFTWARE\Classes\AppID\{C26644C4-2A12-4CA6-8F2E-0EDE6CF018F3}
Kľúe Nájdené : HKLM\SOFTWARE\Classes\Interface\{813A22E0-3E2B-4188-9BDA-ECA9878B8D48}
Kľúe Nájdené : HKLM\SOFTWARE\Classes\Interface\{BCFF5F55-6F44-11D2-86F8-00104B265ED5}
Kľúe Nájdené : HKLM\SOFTWARE\Classes\Prod.cap
Kľúe Nájdené : HKLM\Software\DataMngr
Kľúe Nájdené : HKLM\SOFTWARE\Google\Chrome\Extensions\eooncjejnppfjjklapaamhcdmjbilmde
Kľúe Nájdené : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\0FF2AEFF45EEA0A48A4B33C1973B6094
Kľúe Nájdené : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\305B09CE8C53A214DB58887F62F25536
Kľúe Nájdené : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\bi_uninstaller
Kľúe Nájdené : HKLM\SOFTWARE\Software
Kľúe Nájdené : HKU\S-1-5-21-616477033-3631907855-1866218665-1000\Software\Microsoft\Internet Explorer\SearchScopes\{0ECDF796-C2DC-4D79-A620-CCE0C0A66CC9}

***** [Internetové prehliadaee] *****

-\\ Internet Explorer v10.0.9200.16635

[HKCU\Software\Microsoft\Internet Explorer\Main - Start Page] = hxxp://www1.delta-search.com/?affID=119816&tt=gc_&babsrc=HP_ss&mntrId=123810BF4821FFD3

-\\ Mozilla Firefox v22.0 (sk)

Súbor : C:\Users\Martin\AppData\Roaming\Mozilla\Firefox\Profiles\9iuun3nj.default\prefs.js

Nájdené : user_pref("avg.install.userHPSettings", "hxxp://www.delta-search.com/?affID=119816&tt=190313_wo2&bab[...]
Nájdené : user_pref("avg.install.userSPSettings", "Delta Search");
Nájdené : user_pref("extensions.delta.admin", false);
Nájdené : user_pref("extensions.delta.aflt", "babsst");
Nájdené : user_pref("extensions.delta.appId", "{C26644C4-2A12-4CA6-8F2E-0EDE6CF018F3}");
Nájdené : user_pref("extensions.delta.autoRvrt", "false");
Nájdené : user_pref("extensions.delta.dfltLng", "en");
Nájdené : user_pref("extensions.delta.excTlbr", false);
Nájdené : user_pref("extensions.delta.ffxUnstlRst", true);
Nájdené : user_pref("extensions.delta.id", "1238df3600000000000010bf4821ffd3");
Nájdené : user_pref("extensions.delta.instlDay", "15845");
Nájdené : user_pref("extensions.delta.instlRef", "sst");
Nájdené : user_pref("extensions.delta.newTab", false);
Nájdené : user_pref("extensions.delta.prdct", "delta");
Nájdené : user_pref("extensions.delta.prtnrId", "delta");
Nájdené : user_pref("extensions.delta.rvrt", "false");
Nájdené : user_pref("extensions.delta.smplGrp", "none");
Nájdené : user_pref("extensions.delta.tlbrId", "base");
Nájdené : user_pref("extensions.delta.tlbrSrchUrl", "");
Nájdené : user_pref("extensions.delta.vrsn", "1.8.21.0");
Nájdené : user_pref("extensions.delta.vrsnTs", "1.8.21.011:13:17");
Nájdené : user_pref("extensions.delta.vrsni", "1.8.21.0");
Nájdené : user_pref("extensions.delta_i.babExt", "");
Nájdené : user_pref("extensions.delta_i.babTrack", "affID=119816&tt=gc_");
Nájdené : user_pref("extensions.delta_i.srcExt", "ss");

-\\ Google Chrome v28.0.1500.72

Súbor : C:\Users\Martin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Nájdené [l.3] : homepage = "hxxp://www1.delta-search.com/?affID=119816&tt=gc_&babsrc=HP_ss&mntrId=123810BF4821FFD3",
Nájdené [l.496] : urls_to_restore_on_startup ="session": {"restore_on_startup": 4, [ "hxxp://www1.delta-search.com/?affID=119816&tt=gc_&babsrc=HP_ss&mntrId=123810BF4821FFD3" ]},

-\\ Opera v12.16.1860.0

Súbor : C:\Users\Martin\AppData\Roaming\Opera\Opera\operaprefs.ini

[OK] Súbor je eistý.

*************************

AdwCleaner[R1].txt - [4568 octets] - [14/07/2013 18:33:49]

########## EOF - C:\AdwCleaner[R1].txt - [4628 octets] ##########

Znovu spusť AdwCleaner ale tentokrát klikni na Delete,

proběhne restart PC kdy dojde ke smazání nepořádku.

Po té na Tebe opět vypadne log který mi sem zkopíruj.

# AdwCleaner v2.305 - Log vytvorený 15/07/2013 o 16:26:41
# Aktualizované 11/07/2013 Xplode
# Operaený systém : Windows 7 Home Premium Service Pack 1 (32 bits)
# Uživateľ : Martin - MARTIN-PC
# Spustený systém : Normálny
# Spustené z : C:\Users\Martin\Desktop\adwcleaner.exe
# Voľba [Vymaza?]


***** [Služby] *****


***** [Súbory / Adresáre] *****

Adresár Vymazané : C:\ProgramData\Babylon
Adresár Vymazané : C:\Users\Martin\AppData\Roaming\Babylon
Adresár Vymazané : C:\Users\Martin\AppData\Roaming\pdfforge
Súbor Vymazané : C:\Users\Martin\AppData\Roaming\Mozilla\Firefox\Profiles\9iuun3nj.default\searchplugins\Babylon.xml
Súbor Vymazané : C:\Users\Martin\AppData\Roaming\Mozilla\Firefox\Profiles\9iuun3nj.default\searchplugins\delta.xml

***** [Registre] *****

Kľúe Vymazané : HKCU\Software\BabSolution
Kľúe Vymazané : HKCU\Software\BI
Kľúe Vymazané : HKCU\Software\DataMngr
Kľúe Vymazané : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{0ECDF796-C2DC-4D79-A620-CCE0C0A66CC9}
Kľúe Vymazané : HKLM\Software\Babylon
Kľúe Vymazané : HKLM\SOFTWARE\Classes\AppID\{C26644C4-2A12-4CA6-8F2E-0EDE6CF018F3}
Kľúe Vymazané : HKLM\SOFTWARE\Classes\Interface\{813A22E0-3E2B-4188-9BDA-ECA9878B8D48}
Kľúe Vymazané : HKLM\SOFTWARE\Classes\Interface\{BCFF5F55-6F44-11D2-86F8-00104B265ED5}
Kľúe Vymazané : HKLM\SOFTWARE\Classes\Prod.cap
Kľúe Vymazané : HKLM\Software\DataMngr
Kľúe Vymazané : HKLM\SOFTWARE\Google\Chrome\Extensions\eooncjejnppfjjklapaamhcdmjbilmde
Kľúe Vymazané : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\0FF2AEFF45EEA0A48A4B33C1973B6094
Kľúe Vymazané : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\305B09CE8C53A214DB58887F62F25536
Kľúe Vymazané : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\bi_uninstaller
Kľúe Vymazané : HKLM\SOFTWARE\Software

***** [Internetové prehliadaee] *****

-\\ Internet Explorer v10.0.9200.16635

Zamenené : [HKCU\Software\Microsoft\Internet Explorer\Main - Start Page] = hxxp://www1.delta-search.com/?affID=119816&tt=gc_&babsrc=HP_ss&mntrId=123810BF4821FFD3 --> hxxp://www.google.com

-\\ Mozilla Firefox v22.0 (sk)

Súbor : C:\Users\Martin\AppData\Roaming\Mozilla\Firefox\Profiles\9iuun3nj.default\prefs.js

C:\Users\Martin\AppData\Roaming\Mozilla\Firefox\Profiles\9iuun3nj.default\user.js ... Vymazané !

Vymazané : user_pref("avg.install.userHPSettings", "hxxp://www.delta-search.com/?affID=119816&tt=190313_wo2&bab[...]
Vymazané : user_pref("avg.install.userSPSettings", "Delta Search");
Vymazané : user_pref("extensions.delta.admin", false);
Vymazané : user_pref("extensions.delta.aflt", "babsst");
Vymazané : user_pref("extensions.delta.appId", "{C26644C4-2A12-4CA6-8F2E-0EDE6CF018F3}");
Vymazané : user_pref("extensions.delta.autoRvrt", "false");
Vymazané : user_pref("extensions.delta.dfltLng", "en");
Vymazané : user_pref("extensions.delta.excTlbr", false);
Vymazané : user_pref("extensions.delta.ffxUnstlRst", true);
Vymazané : user_pref("extensions.delta.id", "1238df3600000000000010bf4821ffd3");
Vymazané : user_pref("extensions.delta.instlDay", "15845");
Vymazané : user_pref("extensions.delta.instlRef", "sst");
Vymazané : user_pref("extensions.delta.newTab", false);
Vymazané : user_pref("extensions.delta.prdct", "delta");
Vymazané : user_pref("extensions.delta.prtnrId", "delta");
Vymazané : user_pref("extensions.delta.rvrt", "false");
Vymazané : user_pref("extensions.delta.smplGrp", "none");
Vymazané : user_pref("extensions.delta.tlbrId", "base");
Vymazané : user_pref("extensions.delta.tlbrSrchUrl", "");
Vymazané : user_pref("extensions.delta.vrsn", "1.8.21.0");
Vymazané : user_pref("extensions.delta.vrsnTs", "1.8.21.011:13:17");
Vymazané : user_pref("extensions.delta.vrsni", "1.8.21.0");
Vymazané : user_pref("extensions.delta_i.babExt", "");
Vymazané : user_pref("extensions.delta_i.babTrack", "affID=119816&tt=gc_");
Vymazané : user_pref("extensions.delta_i.srcExt", "ss");

-\\ Google Chrome v28.0.1500.72

Súbor : C:\Users\Martin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Vymazané [l.3] : homepage = "hxxp://www1.delta-search.com/?affID=119816&tt=gc_&babsrc=HP_ss&mntrId=123810BF4821FFD3"[...]
Vymazané [l.496] : urls_to_restore_on_startup ="session": {"restore_on_startup": 4, [ "hxxp://www1.delta-search.co[...]

-\\ Opera v12.16.1860.0

Súbor : C:\Users\Martin\AppData\Roaming\Opera\Opera\operaprefs.ini

[OK] Súbor je eistý.

*************************

AdwCleaner[R1].txt - [4697 octets] - [14/07/2013 18:33:49]
AdwCleaner[S1].txt - [4600 octets] - [15/07/2013 16:26:41]

########## EOF - C:\AdwCleaner[S1].txt - [4660 octets] ##########

Stáhni a ulož na plochu ComboFix,

spusť aplikaci jako Administrátor a povol instalaci Konzole pro zotavení - Recovery Console.

Poté se zobrazí okno s licenčními podmínkami které potvrdíš kliknutím na ANO,

pak ještě jednou klik na ANO a už to jede.

Celá akce trvá okolo 10 minut ale může i déle, během skenu se nepokoušej spouštět nic jiného.

Při skenovaní může být PC i restartováno nelekat se.

Upozornění: po dobu skenu vypni rezidentní štít Antiviru a AntiSpy programu,

protože Combofix se pokouší napadené soubory smazat a tyto programy mu můžou bránit.

Po dokončení skenu nebo následném restartu aplikace vytvoří log, uložený na C:/Combofix.txt

(při opakovaném použití jsou logy číslovány Combofix2.txt atd.), jeho obsah zkopíruj sem.


V případě nejasností je ZDE obrázkový návod.

ComboFix 13-07-15.01 - Martin . 07. 2013 10:31:32.1.2 - x86
Microsoft Windows 7 Home Premium 6.1.7601.1.1250.421.1051.18.2984.2009 [GMT 2:00]
Running from: c:\users\Martin\Desktop\ComboFix.exe
AV: Microsoft Security Essentials *Disabled/Updated* {3F839487-C7A2-C958-E30C-E2825BA31FB5}
SP: Microsoft Security Essentials *Disabled/Updated* {84E27563-E198-C6D6-D9BC-D9F020245508}
SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.
.
((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
c:\windows\pkunzip.pif
c:\windows\pkzip.pif
.
.
((((((((((((((((((((((((( Files Created from 2013-06-16 to 2013-07-16 )))))))))))))))))))))))))))))))
.
.
2013-07-16 08:35 . 2013-07-16 08:35 -------- d-----w- c:\users\Martin\AppData\Local\temp
2013-07-16 08:35 . 2013-07-16 08:35 -------- d-----w- c:\users\Default\AppData\Local\temp
2013-07-16 08:28 . 2013-07-16 08:28 -------- d-----w- c:\program files\Nvu
2013-07-15 14:41 . 2013-06-12 04:18 7068072 ----a-w- c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\{A4E1E2C3-7BA6-47B1-A37E-56FF25351C41}\mpengine.dll
2013-07-14 13:32 . 2013-07-14 13:33 -------- d-----w- c:\program files\trend micro
2013-07-14 13:32 . 2013-07-14 13:33 -------- d-----w- C:\rsit
2013-07-14 13:30 . 2013-06-12 04:18 7068072 ----a-w- c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\Backup\mpengine.dll
2013-07-14 09:32 . 2013-07-14 09:32 -------- d-----w- c:\program files\ESET
2013-07-12 00:07 . 2013-06-11 23:43 817664 ----a-w- c:\program files\Common Files\Microsoft Shared\VGX\VGX.dll
2013-07-12 00:07 . 2013-06-12 00:23 770648 ----a-w- c:\program files\Internet Explorer\iexplore.exe
2013-07-12 00:07 . 2013-06-11 23:43 1767936 ----a-w- c:\windows\system32\wininet.dll
2013-07-11 17:16 . 2013-07-11 17:17 -------- d-----w- C:\Auto-diagnostika
2013-07-10 13:39 . 2013-04-09 23:34 1247744 ----a-w- c:\windows\system32\DWrite.dll
2013-07-10 13:39 . 2013-06-05 03:05 2347520 ----a-w- c:\windows\system32\win32k.sys
2013-07-10 13:39 . 2013-06-04 04:53 509440 ----a-w- c:\windows\system32\qedit.dll
2013-07-10 13:39 . 2013-05-06 04:56 1620480 ----a-w- c:\windows\system32\WMVDECOD.DLL
2013-07-10 13:39 . 2013-04-10 05:03 936448 ----a-w- c:\program files\Common Files\Microsoft Shared\ink\journal.dll
2013-07-10 13:39 . 2013-04-10 05:03 988672 ----a-w- c:\program files\Windows Journal\JNTFiltr.dll
2013-07-10 13:39 . 2013-04-10 05:03 969216 ----a-w- c:\program files\Windows Journal\JNWDRV.dll
2013-07-10 13:39 . 2013-04-10 05:04 1221632 ----a-w- c:\program files\Windows Journal\NBDoc.DLL
2013-07-10 13:38 . 2013-05-27 04:57 680960 ----a-w- c:\program files\Windows Defender\MpSvc.dll
2013-07-10 13:38 . 2013-05-27 04:57 392704 ----a-w- c:\program files\Windows Defender\MpClient.dll
2013-07-10 13:38 . 2013-05-27 04:57 224768 ----a-w- c:\program files\Windows Defender\MpCommu.dll
2013-07-02 12:07 . 2013-07-02 12:07 94632 ----a-w- c:\windows\system32\WindowsAccessBridge.dll
2013-07-02 12:07 . 2013-07-02 12:07 -------- d-----w- c:\program files\Java
2013-06-21 14:38 . 2013-06-21 14:37 724464 ------w- c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\{44ADFA30-6D6A-4693-A9EF-6F191DA09863}\gapaengine.dll
2013-06-21 11:02 . 2013-06-21 11:02 -------- d-----w- c:\users\Martin\AppData\Roaming\VSRevoGroup
2013-06-21 10:54 . 2013-06-21 10:54 -------- d-----w- c:\users\Martin\AppData\Local\HP
2013-06-21 10:54 . 2013-06-21 10:54 -------- d-----w- c:\users\Martin\AppData\Roaming\HP
2013-06-21 10:54 . 2013-06-21 10:54 -------- d-----w- c:\programdata\WEBREG
2013-06-21 10:37 . 2013-06-21 10:37 -------- d-----w- c:\programdata\HP Product Assistant
2013-06-21 10:35 . 2013-06-21 10:35 -------- d-----w- c:\program files\Common Files\HP
2013-06-21 10:35 . 2013-06-21 10:35 -------- d-----w- c:\program files\Common Files\Hewlett-Packard
2013-06-21 10:34 . 2013-06-21 10:37 -------- d-----w- c:\program files\HP
2013-06-21 10:34 . 2013-07-08 12:17 -------- d-----w- c:\programdata\HP
2013-06-21 10:33 . 2009-07-08 10:51 729088 ----a-w- c:\windows\system32\hpowiax7.dll
2013-06-21 10:33 . 2009-07-08 10:51 452408 ----a-w- c:\windows\system32\hpzids01.dll
2013-06-21 10:33 . 2009-07-08 10:51 372736 ----a-w- c:\windows\system32\hppldcoi.dll
2013-06-21 10:33 . 2009-07-08 10:51 303104 ----a-w- c:\windows\system32\hpovst15.dll
2013-06-21 10:33 . 2009-07-08 10:51 581632 ----a-w- c:\windows\system32\hpotscl6.dll
2013-06-19 10:46 . 2013-06-19 10:46 -------- d-----w- c:\programdata\Logs
2013-06-16 18:14 . 2013-06-16 18:14 -------- d-----w- c:\users\Martin\AppData\Local\KROS_a.s
2013-06-16 17:45 . 2013-06-17 15:29 -------- d-----w- c:\program files\Elcom
2013-06-16 17:44 . 2013-06-16 17:44 -------- d-----w- C:\ALFA plus
2013-06-16 17:43 . 2013-06-21 13:39 -------- d-----w- c:\users\Public\KROS
2013-06-16 17:43 . 2013-06-21 13:25 -------- d-----w- c:\program files\KROS
2013-06-16 17:42 . 2013-06-16 17:42 -------- d-----w- c:\programdata\KROS
2013-06-16 15:50 . 2009-07-14 01:15 90624 ----a-w- c:\windows\system32\Spool\prtprocs\w32x86\HPZPPWN7.DLL
2013-06-16 15:50 . 1999-05-06 22:00 140288 ----a-w- c:\windows\system32\comdlg32.OCX
2013-06-16 15:49 . 2013-06-17 15:44 -------- d-----w- c:\program files\STORMWARE
2013-06-16 15:49 . 2013-06-16 15:49 -------- d-----w- c:\programdata\STORMWARE
2013-06-16 10:14 . 2013-06-30 14:02 -------- d-----w- C:\Kamar
.
.
.
(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2013-07-02 12:07 . 2013-05-19 14:04 867240 ----a-w- c:\windows\system32\npDeployJava1.dll
2013-07-02 12:07 . 2013-05-19 14:04 789416 ----a-w- c:\windows\system32\deployJava1.dll
2013-06-11 20:30 . 2013-05-19 14:01 71048 ----a-w- c:\windows\system32\FlashPlayerCPLApp.cpl
2013-06-11 20:30 . 2013-05-19 14:01 692104 ----a-w- c:\windows\system32\FlashPlayerApp.exe
2013-05-22 05:35 . 2013-05-22 05:36 724464 ------w- c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\NISBackup\gapaengine.dll
2013-05-20 17:53 . 2012-11-29 07:40 246804 ----a-w- c:\windows\system32\drivers\AtherosBt.bin
2013-05-20 09:15 . 2013-05-20 09:15 242240 ----a-w- c:\windows\system32\drivers\dtsoftbus01.sys
2013-05-20 07:06 . 2013-05-20 07:06 163504 ----a-w- c:\programdata\Microsoft\Windows\Sqm\Manifest\Sqm10144.bin
2013-05-19 14:58 . 2013-05-19 14:58 745472 ----a-w- c:\windows\system32\MsSpellCheckingFacility.exe
2013-05-19 14:58 . 2013-05-19 14:58 185344 ----a-w- c:\windows\system32\elshyph.dll
2013-05-19 14:58 . 2013-05-19 14:58 158720 ----a-w- c:\windows\system32\msls31.dll
2013-05-19 14:58 . 2013-05-19 14:58 523264 ----a-w- c:\windows\system32\vbscript.dll
2013-05-19 14:58 . 2013-05-19 14:58 150528 ----a-w- c:\windows\system32\iexpress.exe
2013-05-19 14:58 . 2013-05-19 14:58 138752 ----a-w- c:\windows\system32\wextract.exe
2013-05-19 14:58 . 2013-05-19 14:58 73728 ----a-w- c:\windows\system32\SetIEInstalledDate.exe
2013-05-19 14:58 . 2013-05-19 14:58 38400 ----a-w- c:\windows\system32\imgutil.dll
2013-05-19 14:58 . 2013-05-19 14:58 137216 ----a-w- c:\windows\system32\ieUnatt.exe
2013-05-19 14:58 . 2013-05-19 14:58 12800 ----a-w- c:\windows\system32\mshta.exe
2013-05-19 14:58 . 2013-05-19 14:58 110592 ----a-w- c:\windows\system32\IEAdvpack.dll
2013-05-19 14:58 . 2013-05-19 14:58 61952 ----a-w- c:\windows\system32\tdc.ocx
2013-05-19 14:58 . 2013-05-19 14:58 48640 ----a-w- c:\windows\system32\mshtmler.dll
2013-05-19 14:58 . 2013-05-19 14:58 361984 ----a-w- c:\windows\system32\html.iec
2013-05-19 14:58 . 2013-05-19 14:58 719360 ----a-w- c:\windows\system32\mshtmlmedia.dll
2013-05-19 14:58 . 2013-05-19 14:58 23040 ----a-w- c:\windows\system32\licmgr10.dll
2013-05-19 14:58 . 2013-05-19 14:58 1441280 ----a-w- c:\windows\system32\inetcpl.cpl
2013-05-13 04:45 . 2013-06-12 06:39 140288 ----a-w- c:\windows\system32\cryptsvc.dll
2013-05-13 04:45 . 2013-06-12 06:39 1160192 ----a-w- c:\windows\system32\crypt32.dll
2013-05-13 04:45 . 2013-06-12 06:39 103936 ----a-w- c:\windows\system32\cryptnet.dll
2013-05-13 03:08 . 2013-06-12 06:39 903168 ----a-w- c:\windows\system32\certutil.exe
2013-05-13 03:08 . 2013-06-12 06:39 43008 ----a-w- c:\windows\system32\certenc.dll
2013-05-10 03:20 . 2013-06-12 06:39 24576 ----a-w- c:\windows\system32\cryptdlg.dll
2013-05-08 05:38 . 2013-06-12 06:39 1293672 ----a-w- c:\windows\system32\drivers\tcpip.sys
2013-05-06 05:06 . 2013-06-12 06:39 3968872 ----a-w- c:\windows\system32\ntkrnlpa.exe
2013-05-06 05:06 . 2013-06-12 06:39 3913576 ----a-w- c:\windows\system32\ntoskrnl.exe
2013-05-02 15:28 . 2013-05-19 13:28 238872 ------w- c:\windows\system32\MpSigStub.exe
2013-04-26 04:55 . 2013-06-12 06:39 492544 ----a-w- c:\windows\system32\win32spl.dll
2013-04-25 23:30 . 2013-06-12 06:40 1505280 ----a-w- c:\windows\system32\d3d11.dll
.
.
((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* empty entries & legit default entries are not shown
REGEDIT4
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Skype"="c:\program files\Skype\Phone\Skype.exe" [2013-04-19 18678376]
"uTorrent"="c:\users\Martin\AppData\Roaming\uTorrent\uTorrent.exe" [2013-05-02 802136]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"SynTPEnh"="c:\program files\Synaptics\SynTP\SynTPEnh.exe" [2011-05-05 2262312]
"AmIcoSinglun"="c:\program files\AmIcoSingLun\AmIcoSinglun.exe" [2011-03-18 258048]
"SynAsusAcpi"="c:\program files\Synaptics\SynTP\SynAsusAcpi.exe" [2011-05-05 83240]
"RtHDVCpl"="c:\program files\Realtek\Audio\HDA\RtHDVCpl.exe" [2011-09-05 10992232]
"RtHDVBg"="c:\program files\Realtek\Audio\HDA\RtHDVBg.exe" [2011-08-16 1571432]
"ATKOSD2"="c:\program files\ASUS\ATK Package\ATKOSD2\ATKOSD2.exe" [2011-12-22 318080]
"ATKMEDIA"="c:\program files\ASUS\ATK Package\ATK Media\DMedia.exe" [2011-10-24 174720]
"HControlUser"="c:\program files\ASUS\ATK Package\ATK Hotkey\HControlUser.exe" [2009-06-19 105016]
"IgfxTray"="c:\windows\system32\igfxtray.exe" [2011-09-16 142616]
"HotKeysCmds"="c:\windows\system32\hkcmd.exe" [2011-09-16 177432]
"Persistence"="c:\windows\system32\igfxpers.exe" [2011-09-16 176408]
"MSC"="c:\program files\Microsoft Security Client\msseces.exe" [2013-01-27 947152]
"GrooveMonitor"="c:\program files\Microsoft Office\Office12\GrooveMonitor.exe" [2009-02-26 30040]
"AtherosBtStack"="c:\program files\Bluetooth Suite\btvstack.exe" [2012-11-29 877184]
"AthBtTray"="c:\program files\Bluetooth Suite\athbttray.exe" [2012-11-29 696448]
"SunJavaUpdateSched"="c:\program files\Common Files\Java\Java Update\jusched.exe" [2013-03-12 253816]
.
c:\users\Martin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\
ACSnews.lnk - c:\auto-diagnostika\ADnews.exe [2013-7-11 733184]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorAdmin"= 5 (0x5)
"ConsentPromptBehaviorUser"= 3 (0x3)
"EnableUIADesktopToggle"= 0 (0x0)
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\drivers32]
"midi2"=wdmaud.drv
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MsMpSvc]
@="Service"
.
R2 SkypeUpdate;Skype Updater;c:\program files\Skype\Updater\Updater.exe [2013-02-28 161384]
R3 AmUStor;AM USB Stroage Driver;c:\windows\system32\drivers\AmUStor.SYS [2011-03-18 46680]
R3 Installer Service;Installer Service;c:\programdata\NokiaInstallerCache\ProductCache\{D5878294-C113-43c5-A24F-FC333C52015A}\{0C808377-8C23-44ED-9016-05F42E6D4900}\Installer\InstallerService.exe [2013-05-24 125288]
R3 NisDrv;Microsoft Network Inspection System;c:\windows\system32\DRIVERS\NisDrvWFP.sys [2013-01-20 100328]
R3 NisSrv;Microsoft Network Inspection;c:\program files\Microsoft Security Client\NisSrv.exe [2013-01-27 295232]
R3 RdpVideoMiniport;Remote Desktop Video Miniport Driver;c:\windows\system32\drivers\rdpvideominiport.sys [2012-08-23 14848]
R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys [2012-08-23 49664]
R3 TsUsbGD;Remote Desktop Generic USB Device;c:\windows\system32\drivers\TsUsbGD.sys [2012-08-23 27136]
R3 WatAdminSvc;Služba Windows Activation Technologies;c:\windows\system32\Wat\WatAdminSvc.exe [2013-05-19 1343400]
S1 ATKWMIACPIIO;ATKWMIACPI Driver;c:\program files\ASUS\ATK Package\ATK WMIACPI\atkwmiacpi.sys [2011-09-07 14464]
S1 dtsoftbus01;DAEMON Tools Virtual Bus Driver;c:\windows\system32\DRIVERS\dtsoftbus01.sys [2013-05-20 242240]
S2 AtherosSvc;AtherosSvc;c:\program files\Bluetooth Suite\adminservice.exe [2012-11-29 195200]
S2 UNS;Intel(R) Management and Security Application User Notification Service;c:\program files\Intel\Intel(R) Management Engine Components\UNS\UNS.exe [2010-12-20 2656280]
S2 ZAtheros Bt and Wlan Coex Agent;ZAtheros Bt and Wlan Coex Agent;c:\program files\Bluetooth Suite\Ath_CoexAgent.exe [2012-11-29 327296]
S3 asmthub3;ASMedia USB3 Hub Service;c:\windows\system32\DRIVERS\asmthub3.sys [2011-11-22 102888]
S3 asmtxhci;ASMEDIA XHCI Service;c:\windows\system32\DRIVERS\asmtxhci.sys [2011-11-22 313832]
S3 AthBTPort;Atheros Virtual Bluetooth Class;c:\windows\system32\DRIVERS\btath_flt.sys [2012-11-29 35968]
S3 BTATH_A2DP;Bluetooth A2DP Audio Driver;c:\windows\system32\drivers\btath_a2dp.sys [2012-11-29 299648]
S3 btath_avdt;Atheros Bluetooth AVDT Service;c:\windows\system32\drivers\btath_avdt.sys [2012-11-29 98432]
S3 BTATH_BUS;Atheros Bluetooth Bus;c:\windows\system32\DRIVERS\btath_bus.sys [2012-11-29 25728]
S3 BTATH_HCRP;Bluetooth HCRP Server driver;c:\windows\system32\DRIVERS\btath_hcrp.sys [2012-11-29 148096]
S3 BTATH_LWFLT;Bluetooth LWFLT Device;c:\windows\system32\DRIVERS\btath_lwflt.sys [2012-11-29 60544]
S3 BTATH_RCP;Bluetooth AVRCP Device;c:\windows\system32\DRIVERS\btath_rcp.sys [2012-11-29 264704]
S3 BtFilter;BtFilter;c:\windows\system32\DRIVERS\btfilter.sys [2012-11-29 470656]
S3 IntcDAud;Intel(R) Zvuk pre obrazovky;c:\windows\system32\DRIVERS\IntcDAud.sys [2011-09-16 269824]
S3 L1C;NDIS Miniport Driver for Atheros AR813x/AR815x PCI-E Ethernet Controller;c:\windows\system32\DRIVERS\L1C62x86.sys [2010-08-24 68208]
S3 MEI;Intel(R) Management Engine Interface;c:\windows\system32\DRIVERS\HECI.sys [2010-10-19 41088]
.
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost]
HPZ12 REG_MULTI_SZ Pml Driver HPZ12 Net Driver HPZ12
hpdevmgmt REG_MULTI_SZ hpqcxs08 hpqddsvc
.
[HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{8A69D345-D564-463c-AFF1-A69D9E530F96}]
2013-07-13 13:29 1173456 ----a-w- c:\program files\Google\Chrome\Application\28.0.1500.72\Installer\chrmstp.exe
.
Contents of the 'Scheduled Tasks' folder
.
2013-07-16 c:\windows\Tasks\Adobe Flash Player Updater.job
- c:\windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2013-05-19 20:30]
.
2013-07-16 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
- c:\program files\Google\Update\GoogleUpdate.exe [2013-05-19 13:14]
.
2013-07-16 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
- c:\program files\Google\Update\GoogleUpdate.exe [2013-05-19 13:14]
.
.
------- Supplementary Scan -------
.
uStart Page = hxxp://www.google.com
IE: E&xportovat do aplikace Microsoft Excel - c:\progra~1\MICROS~3\Office12\EXCEL.EXE/3000
TCP: DhcpNameServer = 192.168.1.1
FF - ProfilePath - c:\users\Martin\AppData\Roaming\Mozilla\Firefox\Profiles\9iuun3nj.default\
FF - prefs.js: network.proxy.type - 4
FF - ExtSQL: 2013-06-21 12:37; smartwebprinting@hp.com; c:\program files\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3
FF - ExtSQL: !HIDDEN! 2013-06-21 12:37; smartwebprinting@hp.com; c:\program files\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3
.
.
--------------------- LOCKED REGISTRY KEYS ---------------------
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0000\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0001\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0002\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\PCW\Security]
@Denied: (Full) (Everyone)
.
Completion time: 2013-07-16 10:37:25
ComboFix-quarantined-files.txt 2013-07-16 08:37
.
Pre-Run: 75 754 409 984 bytes free
Post-Run: 75 679 604 736 bytes free
.
- - End Of File - - 128A79FA3DAFDF01BBB36B5860E9212A
A36C5E4F47E84449FF07ED3517B43A31

Pokud jsi tak ještě neučinil, přesuň Combofix na plochu

otevři si Poznámkový blok

do něj zkopíruj skript z následujícího okna:
ulož Tebou vytvořený TXT soubor jako CFScript.txt na plochu,

po uložení uchop vytvořený skript levým myšítkem a přesuň ho nad ikonu Combofixu, kde ho upustíš:



Po aplikaci na Tebe vypadne další log, zkopíruj ho sem

Upozornění : může se stát, že po aplikaci skriptu a restartu Windows nenaběhnou,

v tom případě znovu restartuj a přitom mačkej F8 poté zvol Poslední známou funkční konfiguraci

ComboFix 13-07-15.01 - Martin . 07. 2013 9:36.2.2 - x86
Microsoft Windows 7 Home Premium 6.1.7601.1.1250.421.1051.18.2984.2089 [GMT 2:00]
Running from: c:\users\Martin\Desktop\ComboFix.exe
Command switches used :: c:\users\Martin\Desktop\CFScript.txt
AV: Microsoft Security Essentials *Enabled/Updated* {3F839487-C7A2-C958-E30C-E2825BA31FB5}
SP: Microsoft Security Essentials *Enabled/Updated* {84E27563-E198-C6D6-D9BC-D9F020245508}
SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
* Created a new restore point
.
.
((((((((((((((((((((((((( Files Created from 2013-06-17 to 2013-07-17 )))))))))))))))))))))))))))))))
.
.
2013-07-17 07:46 . 2013-07-17 07:46 -------- d-----w- c:\users\Default\AppData\Local\temp
2013-07-17 07:32 . 2013-07-17 07:32 29904 ----a-w- c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\{DE264AC6-D083-40EA-9EE4-CF200F70C2E8}\MpKsld5895bdb.sys
2013-07-17 06:49 . 2013-07-17 06:47 698504 ----a-w- c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\{D497360E-D539-48D2-A8BE-213FE262B263}\gapaengine.dll
2013-07-17 06:48 . 2013-07-02 06:54 7143960 ----a-w- c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\{DE264AC6-D083-40EA-9EE4-CF200F70C2E8}\mpengine.dll
2013-07-16 10:53 . 2013-06-12 04:18 7068072 ----a-w- c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\Backup\mpengine.dll
2013-07-16 08:37 . 2013-07-17 07:46 -------- d-----w- c:\users\Martin\AppData\Local\temp
2013-07-16 08:28 . 2013-07-16 08:28 -------- d-----w- c:\program files\Nvu
2013-07-14 13:32 . 2013-07-14 13:33 -------- d-----w- c:\program files\trend micro
2013-07-14 13:32 . 2013-07-14 13:33 -------- d-----w- C:\rsit
2013-07-14 09:32 . 2013-07-14 09:32 -------- d-----w- c:\program files\ESET
2013-07-12 00:07 . 2013-06-11 23:43 817664 ----a-w- c:\program files\Common Files\Microsoft Shared\VGX\VGX.dll
2013-07-12 00:07 . 2013-06-12 00:23 770648 ----a-w- c:\program files\Internet Explorer\iexplore.exe
2013-07-12 00:07 . 2013-06-11 23:43 1767936 ----a-w- c:\windows\system32\wininet.dll
2013-07-11 17:16 . 2013-07-11 17:17 -------- d-----w- C:\Auto-diagnostika
2013-07-10 13:39 . 2013-04-09 23:34 1247744 ----a-w- c:\windows\system32\DWrite.dll
2013-07-10 13:39 . 2013-06-05 03:05 2347520 ----a-w- c:\windows\system32\win32k.sys
2013-07-10 13:39 . 2013-06-04 04:53 509440 ----a-w- c:\windows\system32\qedit.dll
2013-07-10 13:39 . 2013-05-06 04:56 1620480 ----a-w- c:\windows\system32\WMVDECOD.DLL
2013-07-10 13:39 . 2013-04-10 05:03 936448 ----a-w- c:\program files\Common Files\Microsoft Shared\ink\journal.dll
2013-07-10 13:39 . 2013-04-10 05:03 988672 ----a-w- c:\program files\Windows Journal\JNTFiltr.dll
2013-07-10 13:39 . 2013-04-10 05:03 969216 ----a-w- c:\program files\Windows Journal\JNWDRV.dll
2013-07-10 13:39 . 2013-04-10 05:04 1221632 ----a-w- c:\program files\Windows Journal\NBDoc.DLL
2013-07-10 13:38 . 2013-05-27 04:57 680960 ----a-w- c:\program files\Windows Defender\MpSvc.dll
2013-07-10 13:38 . 2013-05-27 04:57 392704 ----a-w- c:\program files\Windows Defender\MpClient.dll
2013-07-10 13:38 . 2013-05-27 04:57 224768 ----a-w- c:\program files\Windows Defender\MpCommu.dll
2013-07-02 12:07 . 2013-07-02 12:07 94632 ----a-w- c:\windows\system32\WindowsAccessBridge.dll
2013-07-02 12:07 . 2013-07-02 12:07 -------- d-----w- c:\program files\Java
2013-06-21 14:38 . 2013-06-21 14:37 724464 ------w- c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\{44ADFA30-6D6A-4693-A9EF-6F191DA09863}\gapaengine.dll
2013-06-21 11:02 . 2013-06-21 11:02 -------- d-----w- c:\users\Martin\AppData\Roaming\VSRevoGroup
2013-06-21 10:54 . 2013-06-21 10:54 -------- d-----w- c:\users\Martin\AppData\Local\HP
2013-06-21 10:54 . 2013-06-21 10:54 -------- d-----w- c:\users\Martin\AppData\Roaming\HP
2013-06-21 10:54 . 2013-06-21 10:54 -------- d-----w- c:\programdata\WEBREG
2013-06-21 10:37 . 2013-06-21 10:37 -------- d-----w- c:\programdata\HP Product Assistant
2013-06-21 10:35 . 2013-06-21 10:35 -------- d-----w- c:\program files\Common Files\HP
2013-06-21 10:35 . 2013-06-21 10:35 -------- d-----w- c:\program files\Common Files\Hewlett-Packard
2013-06-21 10:34 . 2013-06-21 10:37 -------- d-----w- c:\program files\HP
2013-06-21 10:34 . 2013-07-08 12:17 -------- d-----w- c:\programdata\HP
2013-06-21 10:33 . 2009-07-08 10:51 729088 ----a-w- c:\windows\system32\hpowiax7.dll
2013-06-21 10:33 . 2009-07-08 10:51 452408 ----a-w- c:\windows\system32\hpzids01.dll
2013-06-21 10:33 . 2009-07-08 10:51 372736 ----a-w- c:\windows\system32\hppldcoi.dll
2013-06-21 10:33 . 2009-07-08 10:51 303104 ----a-w- c:\windows\system32\hpovst15.dll
2013-06-21 10:33 . 2009-07-08 10:51 581632 ----a-w- c:\windows\system32\hpotscl6.dll
2013-06-19 10:46 . 2013-06-19 10:46 -------- d-----w- c:\programdata\Logs
.
.
.
(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2013-07-02 12:07 . 2013-05-19 14:04 867240 ----a-w- c:\windows\system32\npDeployJava1.dll
2013-07-02 12:07 . 2013-05-19 14:04 789416 ----a-w- c:\windows\system32\deployJava1.dll
2013-06-21 14:37 . 2013-05-22 05:36 724464 ----a-w- c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\NISBackup\gapaengine.dll
2013-06-11 20:30 . 2013-05-19 14:01 71048 ----a-w- c:\windows\system32\FlashPlayerCPLApp.cpl
2013-06-11 20:30 . 2013-05-19 14:01 692104 ----a-w- c:\windows\system32\FlashPlayerApp.exe
2013-05-20 17:53 . 2012-11-29 07:40 246804 ----a-w- c:\windows\system32\drivers\AtherosBt.bin
2013-05-20 09:15 . 2013-05-20 09:15 242240 ----a-w- c:\windows\system32\drivers\dtsoftbus01.sys
2013-05-20 07:06 . 2013-05-20 07:06 163504 ----a-w- c:\programdata\Microsoft\Windows\Sqm\Manifest\Sqm10144.bin
2013-05-19 14:58 . 2013-05-19 14:58 745472 ----a-w- c:\windows\system32\MsSpellCheckingFacility.exe
2013-05-19 14:58 . 2013-05-19 14:58 185344 ----a-w- c:\windows\system32\elshyph.dll
2013-05-19 14:58 . 2013-05-19 14:58 158720 ----a-w- c:\windows\system32\msls31.dll
2013-05-19 14:58 . 2013-05-19 14:58 523264 ----a-w- c:\windows\system32\vbscript.dll
2013-05-19 14:58 . 2013-05-19 14:58 150528 ----a-w- c:\windows\system32\iexpress.exe
2013-05-19 14:58 . 2013-05-19 14:58 138752 ----a-w- c:\windows\system32\wextract.exe
2013-05-19 14:58 . 2013-05-19 14:58 73728 ----a-w- c:\windows\system32\SetIEInstalledDate.exe
2013-05-19 14:58 . 2013-05-19 14:58 38400 ----a-w- c:\windows\system32\imgutil.dll
2013-05-19 14:58 . 2013-05-19 14:58 137216 ----a-w- c:\windows\system32\ieUnatt.exe
2013-05-19 14:58 . 2013-05-19 14:58 12800 ----a-w- c:\windows\system32\mshta.exe
2013-05-19 14:58 . 2013-05-19 14:58 110592 ----a-w- c:\windows\system32\IEAdvpack.dll
2013-05-19 14:58 . 2013-05-19 14:58 61952 ----a-w- c:\windows\system32\tdc.ocx
2013-05-19 14:58 . 2013-05-19 14:58 48640 ----a-w- c:\windows\system32\mshtmler.dll
2013-05-19 14:58 . 2013-05-19 14:58 361984 ----a-w- c:\windows\system32\html.iec
2013-05-19 14:58 . 2013-05-19 14:58 719360 ----a-w- c:\windows\system32\mshtmlmedia.dll
2013-05-19 14:58 . 2013-05-19 14:58 23040 ----a-w- c:\windows\system32\licmgr10.dll
2013-05-19 14:58 . 2013-05-19 14:58 1441280 ----a-w- c:\windows\system32\inetcpl.cpl
2013-05-13 04:45 . 2013-06-12 06:39 140288 ----a-w- c:\windows\system32\cryptsvc.dll
2013-05-13 04:45 . 2013-06-12 06:39 1160192 ----a-w- c:\windows\system32\crypt32.dll
2013-05-13 04:45 . 2013-06-12 06:39 103936 ----a-w- c:\windows\system32\cryptnet.dll
2013-05-13 03:08 . 2013-06-12 06:39 903168 ----a-w- c:\windows\system32\certutil.exe
2013-05-13 03:08 . 2013-06-12 06:39 43008 ----a-w- c:\windows\system32\certenc.dll
2013-05-10 03:20 . 2013-06-12 06:39 24576 ----a-w- c:\windows\system32\cryptdlg.dll
2013-05-08 05:38 . 2013-06-12 06:39 1293672 ----a-w- c:\windows\system32\drivers\tcpip.sys
2013-05-06 05:06 . 2013-06-12 06:39 3968872 ----a-w- c:\windows\system32\ntkrnlpa.exe
2013-05-06 05:06 . 2013-06-12 06:39 3913576 ----a-w- c:\windows\system32\ntoskrnl.exe
2013-05-02 15:28 . 2013-05-19 13:28 238872 ------w- c:\windows\system32\MpSigStub.exe
2013-04-26 04:55 . 2013-06-12 06:39 492544 ----a-w- c:\windows\system32\win32spl.dll
2013-04-25 23:30 . 2013-06-12 06:40 1505280 ----a-w- c:\windows\system32\d3d11.dll
.
.
((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* empty entries & legit default entries are not shown
REGEDIT4
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Skype"="c:\program files\Skype\Phone\Skype.exe" [2013-04-19 18678376]
"uTorrent"="c:\users\Martin\AppData\Roaming\uTorrent\uTorrent.exe" [2013-05-02 802136]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"SynTPEnh"="c:\program files\Synaptics\SynTP\SynTPEnh.exe" [2011-05-05 2262312]
"AmIcoSinglun"="c:\program files\AmIcoSingLun\AmIcoSinglun.exe" [2011-03-18 258048]
"SynAsusAcpi"="c:\program files\Synaptics\SynTP\SynAsusAcpi.exe" [2011-05-05 83240]
"RtHDVCpl"="c:\program files\Realtek\Audio\HDA\RtHDVCpl.exe" [2011-09-05 10992232]
"RtHDVBg"="c:\program files\Realtek\Audio\HDA\RtHDVBg.exe" [2011-08-16 1571432]
"ATKOSD2"="c:\program files\ASUS\ATK Package\ATKOSD2\ATKOSD2.exe" [2011-12-22 318080]
"ATKMEDIA"="c:\program files\ASUS\ATK Package\ATK Media\DMedia.exe" [2011-10-24 174720]
"HControlUser"="c:\program files\ASUS\ATK Package\ATK Hotkey\HControlUser.exe" [2009-06-19 105016]
"IgfxTray"="c:\windows\system32\igfxtray.exe" [2011-09-16 142616]
"HotKeysCmds"="c:\windows\system32\hkcmd.exe" [2011-09-16 177432]
"Persistence"="c:\windows\system32\igfxpers.exe" [2011-09-16 176408]
"MSC"="c:\program files\Microsoft Security Client\msseces.exe" [2013-01-27 947152]
"GrooveMonitor"="c:\program files\Microsoft Office\Office12\GrooveMonitor.exe" [2009-02-26 30040]
"AtherosBtStack"="c:\program files\Bluetooth Suite\btvstack.exe" [2012-11-29 877184]
"AthBtTray"="c:\program files\Bluetooth Suite\athbttray.exe" [2012-11-29 696448]
"SunJavaUpdateSched"="c:\program files\Common Files\Java\Java Update\jusched.exe" [2013-03-12 253816]
.
c:\users\Martin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\
ACSnews.lnk - c:\auto-diagnostika\ADnews.exe [2013-7-11 733184]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorAdmin"= 5 (0x5)
"ConsentPromptBehaviorUser"= 3 (0x3)
"EnableUIADesktopToggle"= 0 (0x0)
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\drivers32]
"midi2"=wdmaud.drv
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MsMpSvc]
@="Service"
.
R2 SkypeUpdate;Skype Updater;c:\program files\Skype\Updater\Updater.exe [2013-02-28 161384]
R3 AmUStor;AM USB Stroage Driver;c:\windows\system32\drivers\AmUStor.SYS [2011-03-18 46680]
R3 Installer Service;Installer Service;c:\programdata\NokiaInstallerCache\ProductCache\{D5878294-C113-43c5-A24F-FC333C52015A}\{0C808377-8C23-44ED-9016-05F42E6D4900}\Installer\InstallerService.exe [2013-05-24 125288]
R3 NisDrv;Microsoft Network Inspection System;c:\windows\system32\DRIVERS\NisDrvWFP.sys [2013-01-20 100328]
R3 NisSrv;Microsoft Network Inspection;c:\program files\Microsoft Security Client\NisSrv.exe [2013-01-27 295232]
R3 RdpVideoMiniport;Remote Desktop Video Miniport Driver;c:\windows\system32\drivers\rdpvideominiport.sys [2012-08-23 14848]
R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys [2012-08-23 49664]
R3 TsUsbGD;Remote Desktop Generic USB Device;c:\windows\system32\drivers\TsUsbGD.sys [2012-08-23 27136]
R3 WatAdminSvc;Služba Windows Activation Technologies;c:\windows\system32\Wat\WatAdminSvc.exe [2013-05-19 1343400]
S1 ATKWMIACPIIO;ATKWMIACPI Driver;c:\program files\ASUS\ATK Package\ATK WMIACPI\atkwmiacpi.sys [2011-09-07 14464]
S1 dtsoftbus01;DAEMON Tools Virtual Bus Driver;c:\windows\system32\DRIVERS\dtsoftbus01.sys [2013-05-20 242240]
S1 MpKsld5895bdb;MpKsld5895bdb;c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\{DE264AC6-D083-40EA-9EE4-CF200F70C2E8}\MpKsld5895bdb.sys [2013-07-17 29904]
S2 AtherosSvc;AtherosSvc;c:\program files\Bluetooth Suite\adminservice.exe [2012-11-29 195200]
S2 UNS;Intel(R) Management and Security Application User Notification Service;c:\program files\Intel\Intel(R) Management Engine Components\UNS\UNS.exe [2010-12-20 2656280]
S2 ZAtheros Bt and Wlan Coex Agent;ZAtheros Bt and Wlan Coex Agent;c:\program files\Bluetooth Suite\Ath_CoexAgent.exe [2012-11-29 327296]
S3 asmthub3;ASMedia USB3 Hub Service;c:\windows\system32\DRIVERS\asmthub3.sys [2011-11-22 102888]
S3 asmtxhci;ASMEDIA XHCI Service;c:\windows\system32\DRIVERS\asmtxhci.sys [2011-11-22 313832]
S3 AthBTPort;Atheros Virtual Bluetooth Class;c:\windows\system32\DRIVERS\btath_flt.sys [2012-11-29 35968]
S3 BTATH_A2DP;Bluetooth A2DP Audio Driver;c:\windows\system32\drivers\btath_a2dp.sys [2012-11-29 299648]
S3 btath_avdt;Atheros Bluetooth AVDT Service;c:\windows\system32\drivers\btath_avdt.sys [2012-11-29 98432]
S3 BTATH_BUS;Atheros Bluetooth Bus;c:\windows\system32\DRIVERS\btath_bus.sys [2012-11-29 25728]
S3 BTATH_HCRP;Bluetooth HCRP Server driver;c:\windows\system32\DRIVERS\btath_hcrp.sys [2012-11-29 148096]
S3 BTATH_LWFLT;Bluetooth LWFLT Device;c:\windows\system32\DRIVERS\btath_lwflt.sys [2012-11-29 60544]
S3 BTATH_RCP;Bluetooth AVRCP Device;c:\windows\system32\DRIVERS\btath_rcp.sys [2012-11-29 264704]
S3 BtFilter;BtFilter;c:\windows\system32\DRIVERS\btfilter.sys [2012-11-29 470656]
S3 IntcDAud;Intel(R) Zvuk pre obrazovky;c:\windows\system32\DRIVERS\IntcDAud.sys [2011-09-16 269824]
S3 L1C;NDIS Miniport Driver for Atheros AR813x/AR815x PCI-E Ethernet Controller;c:\windows\system32\DRIVERS\L1C62x86.sys [2010-08-24 68208]
S3 MEI;Intel(R) Management Engine Interface;c:\windows\system32\DRIVERS\HECI.sys [2010-10-19 41088]
.
.
--- Other Services/Drivers In Memory ---
.
*NewlyCreated* - MPKSLD5895BDB
*NewlyCreated* - WS2IFSL
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost]
HPZ12 REG_MULTI_SZ Pml Driver HPZ12 Net Driver HPZ12
hpdevmgmt REG_MULTI_SZ hpqcxs08 hpqddsvc
.
[HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{8A69D345-D564-463c-AFF1-A69D9E530F96}]
2013-07-13 13:29 1173456 ----a-w- c:\program files\Google\Chrome\Application\28.0.1500.72\Installer\chrmstp.exe
.
Contents of the 'Scheduled Tasks' folder
.
2013-07-17 c:\windows\Tasks\Adobe Flash Player Updater.job
- c:\windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2013-05-19 20:30]
.
2013-07-17 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
- c:\program files\Google\Update\GoogleUpdate.exe [2013-05-19 13:14]
.
2013-07-17 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
- c:\program files\Google\Update\GoogleUpdate.exe [2013-05-19 13:14]
.
.
------- Supplementary Scan -------
.
uStart Page = hxxp://www.google.com
IE: E&xportovat do aplikace Microsoft Excel - c:\progra~1\MICROS~3\Office12\EXCEL.EXE/3000
TCP: DhcpNameServer = 192.168.1.1
FF - ProfilePath - c:\users\Martin\AppData\Roaming\Mozilla\Firefox\Profiles\9iuun3nj.default\
FF - prefs.js: network.proxy.type - 4
FF - ExtSQL: 2013-06-21 12:37; smartwebprinting@hp.com; c:\program files\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3
FF - ExtSQL: !HIDDEN! 2013-06-21 12:37; smartwebprinting@hp.com; c:\program files\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3
.
.
Completion time: 2013-07-17 09:48:50
ComboFix-quarantined-files.txt 2013-07-17 07:48
ComboFix2.txt 2013-07-16 08:37
.
Pre-Run: 75 044 425 728 bytes free
Post-Run: 75 664 732 160 bytes free
.
- - End Of File - - F17083E068C05B4A443BC892376AB8B2
A36C5E4F47E84449FF07ED3517B43A31

Přes Start >> Spustit zkopíruj do okna:

ComboFix /Uninstall

a stiskni Enter

To odinstaluje ComboFix a smaže s ním související soubory a složky.


Použij T-Cleaner, který smaže případné zbytky po aplikacích které jsme použili.

Jen před jeho stažením a při použití stopni antivir, protože ho muže detekovat jako vir ale není tomu tak.


Pak dej vědět jaký je stav PC.

Hotovo, počítač ide ako nový ďakujem.

Není zač a