VIRY.CZ

Pomáháme v boji s počítačovou havěti!
https://forum.viry.cz:443/

samootevírání mechaniky - log z Combofixu

https://forum.viry.cz:443/viewtopic.php?t=140349

Stránka 1 z 2

samootevírání mechaniky - log z Combofixu

Napsal: 20 zář 2014 12:45
od djeronic
Dobrý den, mám problém s otevírání mechanikou.. děkuju za pomoct popřípadě. :))

log zde:

ComboFix 14-09-18.01 - Holky 20.09.2014 13:18:36.1.2 - x64
Microsoft Windows 7 Home Premium 6.1.7601.1.1250.420.1029.18.3767.2174 [GMT 2:00]
Spuštěný z: c:\users\Holky\Downloads\ComboFix.exe
AV: Norton Internet Security *Disabled/Updated* {63DF5164-9100-186D-2187-8DC619EFD8BF}
FW: Norton Internet Security *Disabled* {5BE4D041-DB6F-1935-0AD8-24F3E73C9FC4}
SP: Norton Internet Security *Disabled/Updated* {D8BEB080-B73A-17E3-1B37-B6B462689202}
SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.
.
((((((((((((((((((((((((((((((((((((((( Ostatní výmazy )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
c:\windows\wininit.ini
.
.
((((((((((((((((((((((((( Soubory vytvořené od 2014-08-20 do 2014-09-20 )))))))))))))))))))))))))))))))
.
.
2014-09-20 11:26 . 2014-09-20 11:26 -------- d-----w- c:\users\Default\AppData\Local\temp
2014-09-20 10:52 . 2014-09-20 10:52 -------- d-----w- C:\SUPERDelete
2014-09-20 10:30 . 2014-09-20 10:34 -------- d-----w- c:\program files\SUPERAntiSpyware
2014-09-20 10:30 . 2014-09-20 10:30 -------- d-----w- c:\programdata\SUPERAntiSpyware.com
2014-09-18 19:20 . 2014-09-18 19:20 -------- d-----w- c:\program files\Common Files\DESIGNER
2014-09-18 19:20 . 2014-09-18 19:20 -------- d-----w- c:\program files\Microsoft.NET
2014-09-18 19:20 . 2014-09-18 19:20 -------- d-----w- c:\program files (x86)\Microsoft SQL Server
2014-09-18 19:20 . 2014-09-18 19:20 -------- d-----w- c:\programdata\regid.1991-06.com.microsoft
2014-09-18 19:19 . 2014-09-18 19:20 -------- d-----w- c:\program files\Microsoft SQL Server
2014-09-18 19:16 . 2014-09-18 19:16 -------- d-----w- c:\program files\Microsoft Analysis Services
2014-09-18 19:16 . 2014-09-18 19:16 -------- d-----w- c:\program files (x86)\Microsoft Analysis Services
2014-09-18 19:16 . 2014-09-18 19:19 -------- d-----w- c:\program files\Microsoft Office
2014-09-18 19:16 . 2014-09-18 19:24 -------- d-----w- c:\programdata\Microsoft Help
2014-09-18 19:15 . 2014-09-18 19:15 -------- d-----r- C:\MSOCache
2014-09-18 17:27 . 2014-09-18 17:27 -------- d-----w- c:\program files (x86)\TeamViewer
2014-09-17 17:47 . 2014-09-17 17:47 -------- d-----w- c:\program files (x86)\Common Files\Skype
2014-09-17 17:47 . 2014-09-17 17:47 -------- d-----r- c:\program files (x86)\Skype
2014-09-15 19:28 . 2014-09-17 19:59 -------- d-----w- c:\windows\system32\drivers\NISx64\1309010.00E
2014-09-15 00:02 . 2014-09-15 00:02 -------- d-----w- c:\windows\SysWow64\cs
2014-09-15 00:02 . 2014-09-15 00:02 -------- d-----w- c:\windows\SysWow64\XPSViewer
2014-09-15 00:02 . 2014-09-15 00:02 -------- d-----w- c:\windows\SysWow64\drivers\cs-CZ
2014-09-15 00:02 . 2014-09-15 00:02 -------- d-----w- c:\windows\system32\cs
2014-09-15 00:02 . 2014-09-15 00:02 -------- d-----w- c:\windows\cs-CZ
2014-09-15 00:02 . 2014-09-14 14:36 -------- d-----w- c:\windows\SysWow64\wbem\cs-CZ
2014-09-15 00:02 . 2014-09-15 00:02 -------- d-----w- c:\windows\system32\drivers\UMDF\cs-CZ
2014-09-15 00:02 . 2014-09-15 00:02 -------- d-----w- c:\windows\system32\drivers\cs-CZ
2014-09-15 00:02 . 2014-09-14 14:36 -------- d-----w- c:\windows\system32\wbem\cs-CZ
2014-09-15 00:01 . 2014-09-15 00:01 3584 ----a-w- c:\windows\system32\Spool\prtprocs\x64\cs-CZ\LXKPTPRC.DLL.mui
2014-09-14 23:55 . 2014-09-14 23:55 86528 ----a-w- c:\windows\SysWow64\iesysprep.dll
2014-09-14 16:38 . 2014-09-14 16:38 -------- d-----w- c:\program files (x86)\MaxiGet Software Manager
2014-09-14 16:35 . 2014-09-14 16:33 718497 ----a-w- c:\windows\unins000.exe
2014-09-14 16:32 . 2014-09-14 16:32 -------- d-----w- c:\programdata\WindowsMangerProtect
2014-09-14 16:29 . 2014-09-14 16:29 -------- d-----w- c:\program files (x86)\Maxiget
2014-09-14 16:21 . 2014-09-14 16:21 -------- d-----w- c:\programdata\4shared Desktop
2014-09-14 16:21 . 2014-09-14 16:42 -------- d-----w- c:\program files (x86)\4shared Desktop
2014-09-14 16:19 . 2014-09-14 16:19 -------- d-----w- c:\program files (x86)\Common Files\Symantec Shared
2014-09-14 16:00 . 2014-09-14 16:00 -------- d-----w- c:\program files\WinRAR
2014-09-14 15:59 . 2014-09-14 15:59 -------- d-----w- c:\windows\system32\drivers\NSSx64
2014-09-14 15:59 . 2014-09-14 15:59 -------- d-----w- c:\program files (x86)\Norton Security Scan
2014-09-14 15:59 . 2014-09-14 16:00 -------- d-----w- c:\programdata\AVG
2014-09-14 15:59 . 2014-09-14 15:59 -------- d-sh--w- c:\programdata\{01BD4FC9-2F86-4706-A62E-774BB7E9D308}
2014-09-14 15:59 . 2014-09-14 15:59 -------- d--h--w- c:\programdata\Common Files
2014-09-14 15:58 . 2014-09-14 15:58 -------- d-----w- c:\program files (x86)\GRETECH
2014-09-14 15:47 . 2014-09-14 15:48 -------- d-----w- c:\program files (x86)\Google
2014-09-14 15:31 . 2014-09-20 06:34 69792 ----a-w- c:\windows\SysWow64\rpcnet.dll
2014-09-14 15:31 . 2014-09-14 15:31 69792 ------w- c:\windows\SysWow64\rpcnet.exe
2014-09-14 15:31 . 2014-09-14 15:31 -------- d-----w- c:\programdata\regid.1986-12.com.adobe
2014-09-14 15:27 . 2014-09-14 15:27 -------- d-----w- c:\programdata\CyberLink
2014-09-14 15:23 . 2012-02-17 06:38 1031680 ----a-w- c:\windows\system32\rdpcore.dll
2014-09-14 15:23 . 2012-02-17 05:34 826880 ----a-w- c:\windows\SysWow64\rdpcore.dll
2014-09-14 15:23 . 2012-02-17 04:58 210944 ----a-w- c:\windows\system32\drivers\rdpwd.sys
2014-09-14 15:23 . 2012-02-17 04:57 23552 ----a-w- c:\windows\system32\drivers\tdtcp.sys
2014-09-14 15:15 . 2014-09-20 11:09 -------- d-----w- c:\users\Holky
2014-09-14 14:36 . 2014-09-14 14:36 -------- d-----w- c:\program files (x86)\Video Web Camera
2014-09-14 14:32 . 2014-09-14 14:32 -------- d-----w- c:\program files (x86)\Common Files\Adobe AIR
2014-09-14 14:30 . 2010-03-19 01:00 55856 ------w- c:\windows\system32\drivers\PxHlpa64.sys
2014-09-14 14:30 . 2009-10-20 01:00 10224 ------w- c:\windows\system32\drivers\cdralw2k.sys
2014-09-14 14:30 . 2009-10-20 01:00 10224 ------w- c:\windows\system32\drivers\cdr4_xp.sys
2014-09-14 14:29 . 2014-09-14 14:33 -------- d-----w- c:\program files (x86)\Common Files\PX Storage Engine
2014-09-14 14:29 . 2014-09-14 14:29 -------- d-----w- c:\program files (x86)\Common Files\Sonic Shared
2014-09-14 14:27 . 2014-09-14 14:27 -------- d-----w- c:\programdata\CLSK
2014-09-14 14:27 . 2014-09-14 14:27 -------- d-----w- c:\program files (x86)\Social Networks
2014-09-14 14:27 . 2014-09-14 14:27 -------- d-----w- c:\programdata\install_clap
2014-09-14 14:26 . 2014-09-14 15:25 -------- d-----w- c:\program files (x86)\Microsoft
2014-09-14 14:26 . 2014-09-14 14:42 -------- d-----w- c:\windows\SysWow64\NV
2014-09-14 14:26 . 2014-09-14 14:42 -------- d-----w- c:\windows\system32\NV
2014-09-14 14:22 . 2010-12-10 08:05 39464 ----a-w- c:\windows\system32\drivers\btwl2cap.sys
2014-09-14 14:22 . 2010-12-10 08:04 349224 ----a-w- c:\windows\system32\drivers\btwampfl.sys
2014-09-14 14:22 . 2010-09-20 14:20 22056 ----a-w- c:\windows\system32\btwcoins.dll
2014-09-14 14:22 . 2010-09-14 05:59 138280 ----a-w- c:\windows\system32\drivers\btwavdt.sys
2014-09-14 14:22 . 2010-09-14 05:59 21416 ----a-w- c:\windows\system32\drivers\btwrchid.sys
2014-09-14 14:22 . 2010-08-20 07:21 106536 ----a-w- c:\windows\system32\drivers\btwaudio.sys
2014-09-14 14:22 . 2014-09-14 14:22 -------- d-----w- c:\program files\WIDCOMM
2014-09-14 14:18 . 2014-09-14 14:26 -------- d-----w- c:\programdata\NVIDIA
2014-09-14 14:18 . 2014-09-14 14:18 -------- d-----w- c:\users\UpdatusUser
2014-09-14 14:14 . 2014-09-14 14:14 -------- d-----w- c:\program files (x86)\Launch Manager
2014-09-14 14:13 . 2014-09-14 14:13 -------- d---a-w- C:\book
2014-09-14 14:10 . 2014-09-14 14:10 -------- d-----w- c:\program files\Common Files\Intel
2014-09-14 14:10 . 2014-09-14 14:10 -------- d-----w- c:\program files (x86)\Common Files\Intel
.
.
.
(((((((((((((((((((((((((((((((((((((((( Find3M výpis ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2014-09-20 06:34 . 2011-09-14 11:13 17920 ----a-w- c:\windows\system32\rpcnetp.exe
2014-09-20 06:34 . 2011-09-14 11:14 17920 ----a-w- c:\windows\SysWow64\rpcnetp.dll
2014-09-20 06:34 . 2011-09-14 11:13 17920 ----a-w- c:\windows\SysWow64\rpcnetp.exe
2014-09-15 04:33 . 2011-09-14 12:01 175736 ----a-w- c:\windows\system32\drivers\SYMEVENT64x86.SYS
2014-09-15 00:01 . 2014-09-15 00:01 2560 ----a-w- c:\windows\SysWow64\drivers\cs-CZ\qwavedrv.sys.mui
2014-09-15 00:01 . 2014-09-15 00:01 5632 ----a-w- c:\windows\SysWow64\drivers\cs-CZ\ndiscap.sys.mui
2014-09-15 00:01 . 2014-09-15 00:01 2560 ----a-w- c:\windows\SysWow64\drivers\cs-CZ\scfilter.sys.mui
2014-09-15 00:01 . 2014-09-15 00:01 50176 ----a-w- c:\windows\SysWow64\drivers\cs-CZ\tcpip.sys.mui
2014-09-15 00:01 . 2014-09-15 00:01 27136 ----a-w- c:\windows\SysWow64\drivers\cs-CZ\bfe.dll.mui
2014-09-15 00:01 . 2014-09-15 00:01 15360 ----a-w- c:\windows\SysWow64\drivers\cs-CZ\pacer.sys.mui
2014-09-14 15:21 . 2010-06-24 18:33 23256 ----a-w- c:\programdata\Microsoft\IdentityCRL\production\ppcrlconfig600.dll
.
.
(((((((((((((((((((((((((((((((((( Spouštěcí body v registru )))))))))))))))))))))))))))))))))))))))))))))
.
.
*Poznámka* prázdné záznamy a legitimní výchozí údaje nejsou zobrazeny.
REGEDIT4
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ SkyDrivePro1 (ErrorConflict)]
@="{8BA85C75-763B-4103-94EB-9470F12FE0F7}"
[HKEY_CLASSES_ROOT\CLSID\{8BA85C75-763B-4103-94EB-9470F12FE0F7}]
2012-10-01 18:38 1720976 ----a-w- c:\progra~2\MICROS~4\Office15\GROOVEEX.DLL
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ SkyDrivePro2 (SyncInProgress)]
@="{CD55129A-B1A1-438E-A425-CEBC7DC684EE}"
[HKEY_CLASSES_ROOT\CLSID\{CD55129A-B1A1-438E-A425-CEBC7DC684EE}]
2012-10-01 18:38 1720976 ----a-w- c:\progra~2\MICROS~4\Office15\GROOVEEX.DLL
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ SkyDrivePro3 (InSync)]
@="{E768CD3B-BDDC-436D-9C13-E1B39CA257B1}"
[HKEY_CLASSES_ROOT\CLSID\{E768CD3B-BDDC-436D-9C13-E1B39CA257B1}]
2012-10-01 18:38 1720976 ----a-w- c:\progra~2\MICROS~4\Office15\GROOVEEX.DLL
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"SUPERAntiSpyware"="c:\program files\SUPERAntiSpyware\SUPERAntiSpyware.exe" [2014-09-20 7763736]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]
"Norton Online Backup"="c:\program files (x86)\Symantec\Norton Online Backup\NOBuClient.exe" [2010-06-01 1155928]
"LManager"="c:\program files (x86)\Launch Manager\LManager.exe" [2010-08-10 975952]
"Adobe ARM"="c:\program files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2014-08-21 959176]
.
c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\
Bluetooth.lnk - c:\program files\WIDCOMM\Bluetooth Software\BTTray.exe [2010-12-10 1133856]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorAdmin"= 5 (0x5)
"ConsentPromptBehaviorUser"= 3 (0x3)
"EnableUIADesktopToggle"= 0 (0x0)
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\windows]
"LoadAppInit_DLLs"=1 (0x1)
"AppInit_DLLs"=c:\windows\SysWOW64\nvinit.dll
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\drivers32]
"mixer2"=wdmaud.drv
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\!SASCORE]
@=""
.
R1 SASDIFSV;SASDIFSV;c:\program files\SUPERAntiSpyware\SASDIFSV64.SYS;c:\program files\SUPERAntiSpyware\SASDIFSV64.SYS [x]
R2 mglupdate;Služba Maxiget Update (mglupdate);c:\program files (x86)\Maxiget\Updater\MaxigetUpdater.exe;c:\program files (x86)\Maxiget\Updater\MaxigetUpdater.exe [x]
R2 SkypeUpdate;Skype Updater;c:\program files (x86)\Skype\Updater\Updater.exe;c:\program files (x86)\Skype\Updater\Updater.exe [x]
R2 WindowsMangerProtect;WindowsMangerProtect Service;c:\programdata\WindowsMangerProtect\ProtectWindowsManager.exe;c:\programdata\WindowsMangerProtect\ProtectWindowsManager.exe [x]
R3 BTWAMPFL;BTWAMPFL;c:\windows\system32\DRIVERS\btwampfl.sys;c:\windows\SYSNATIVE\DRIVERS\btwampfl.sys [x]
R3 btwl2cap;Bluetooth L2CAP Service;c:\windows\system32\DRIVERS\btwl2cap.sys;c:\windows\SYSNATIVE\DRIVERS\btwl2cap.sys [x]
R3 GamesAppService;GamesAppService;c:\program files (x86)\WildTangent Games\App\GamesAppService.exe;c:\program files (x86)\WildTangent Games\App\GamesAppService.exe [x]
R3 mglupdatem;Služba Maxiget Update (mglupdatem);c:\program files (x86)\Maxiget\Updater\MaxigetUpdater.exe;c:\program files (x86)\Maxiget\Updater\MaxigetUpdater.exe [x]
R3 ose64;Office 64 Source Engine;c:\program files\Common Files\Microsoft Shared\Source Engine\OSE.EXE;c:\program files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [x]
R3 RSUSBSTOR;RtsUStor.Sys Realtek USB Card Reader;c:\windows\system32\Drivers\RtsUStor.sys;c:\windows\SYSNATIVE\Drivers\RtsUStor.sys [x]
R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys;c:\windows\SYSNATIVE\drivers\tsusbflt.sys [x]
R3 TsUsbGD;Remote Desktop Generic USB Device;c:\windows\system32\drivers\TsUsbGD.sys;c:\windows\SYSNATIVE\drivers\TsUsbGD.sys [x]
R4 wlcrasvc;Windows Live Mesh remote connections service;c:\program files\Windows Live\Mesh\wlcrasvc.exe;c:\program files\Windows Live\Mesh\wlcrasvc.exe [x]
S0 nvpciflt;nvpciflt;c:\windows\system32\DRIVERS\nvpciflt.sys;c:\windows\SYSNATIVE\DRIVERS\nvpciflt.sys [x]
S0 PxHlpa64;PxHlpa64;c:\windows\System32\Drivers\PxHlpa64.sys;c:\windows\SYSNATIVE\Drivers\PxHlpa64.sys [x]
S0 SymDS;Symantec Data Store;c:\windows\system32\drivers\NISx64\1309010.00E\SYMDS64.SYS;c:\windows\SYSNATIVE\drivers\NISx64\1309010.00E\SYMDS64.SYS [x]
S0 SymEFA;Symantec Extended File Attributes;c:\windows\system32\drivers\NISx64\1309010.00E\SYMEFA64.SYS;c:\windows\SYSNATIVE\drivers\NISx64\1309010.00E\SYMEFA64.SYS [x]
S1 BHDrvx64;BHDrvx64;c:\programdata\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_19.0.0.128\Definitions\BASHDefs\20140912.003\BHDrvx64.sys;c:\programdata\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_19.0.0.128\Definitions\BASHDefs\20140912.003\BHDrvx64.sys [x]
S1 ccSet_NIS;Norton Internet Security Settings Manager;c:\windows\system32\drivers\NISx64\1309010.00E\ccSetx64.sys;c:\windows\SYSNATIVE\drivers\NISx64\1309010.00E\ccSetx64.sys [x]
S1 IDSVia64;IDSVia64;c:\programdata\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_19.0.0.128\Definitions\IPSDefs\20140919.001\IDSvia64.sys;c:\programdata\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_19.0.0.128\Definitions\IPSDefs\20140919.001\IDSvia64.sys [x]
S1 SASKUTIL;SASKUTIL;c:\program files\SUPERAntiSpyware\SASKUTIL64.SYS;c:\program files\SUPERAntiSpyware\SASKUTIL64.SYS [x]
S1 SymIRON;Symantec Iron Driver;c:\windows\system32\drivers\NISx64\1309010.00E\Ironx64.SYS;c:\windows\SYSNATIVE\drivers\NISx64\1309010.00E\Ironx64.SYS [x]
S1 SymNetS;Symantec Network Security WFP Driver;c:\windows\System32\Drivers\NISx64\1309010.00E\SYMNETS.SYS;c:\windows\SYSNATIVE\Drivers\NISx64\1309010.00E\SYMNETS.SYS [x]
S2 !SASCORE;SAS Core Service;c:\program files\SUPERAntiSpyware\SASCORE64.EXE;c:\program files\SUPERAntiSpyware\SASCORE64.EXE [x]
S2 AdobeActiveFileMonitor9.0;Adobe Active File Monitor V9;c:\program files (x86)\Adobe\Elements 9 Organizer\PhotoshopElementsFileAgent.exe;c:\program files (x86)\Adobe\Elements 9 Organizer\PhotoshopElementsFileAgent.exe [x]
S2 DsiWMIService;Dritek WMI Service;c:\program files (x86)\Launch Manager\dsiwmis.exe;c:\program files (x86)\Launch Manager\dsiwmis.exe [x]
S2 ePowerSvc;Acer ePower Service;c:\program files\Packard Bell\Packard Bell Power Management\ePowerSvc.exe;c:\program files\Packard Bell\Packard Bell Power Management\ePowerSvc.exe [x]
S2 GREGService;GREGService;c:\program files (x86)\Packard Bell\Registration\GREGsvc.exe;c:\program files (x86)\Packard Bell\Registration\GREGsvc.exe [x]
S2 IAStorDataMgrSvc;Intel(R) Rapid Storage Technology;c:\program files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe;c:\program files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe [x]
S2 Live Updater Service;Live Updater Service;c:\program files\Packard Bell\Packard Bell Updater\UpdaterService.exe;c:\program files\Packard Bell\Packard Bell Updater\UpdaterService.exe [x]
S2 NIS;Norton Internet Security;c:\program files (x86)\Norton Internet Security\Engine\19.9.1.14\ccSvcHst.exe;c:\program files (x86)\Norton Internet Security\Engine\19.9.1.14\ccSvcHst.exe [x]
S2 NOBU;Norton Online Backup;c:\program files (x86)\Symantec\Norton Online Backup\NOBuAgent.exe SERVICE;c:\program files (x86)\Symantec\Norton Online Backup\NOBuAgent.exe SERVICE [x]
S2 TeamViewer9;TeamViewer 9;c:\program files (x86)\TeamViewer\Version9\TeamViewer_Service.exe;c:\program files (x86)\TeamViewer\Version9\TeamViewer_Service.exe [x]
S2 UNS;Intel(R) Management & Security Application User Notification Service;c:\program files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe;c:\program files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe [x]
S3 EraserUtilRebootDrv;EraserUtilRebootDrv;c:\program files (x86)\Common Files\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys;c:\program files (x86)\Common Files\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys [x]
S3 HECIx64;Intel(R) Management Engine Interface;c:\windows\system32\drivers\HECIx64.sys;c:\windows\SYSNATIVE\drivers\HECIx64.sys [x]
S3 Impcd;Impcd;c:\windows\system32\DRIVERS\Impcd.sys;c:\windows\SYSNATIVE\DRIVERS\Impcd.sys [x]
S3 IntcDAud;Intel(R) Display Audio;c:\windows\system32\DRIVERS\IntcDAud.sys;c:\windows\SYSNATIVE\DRIVERS\IntcDAud.sys [x]
S3 k57nd60a;Broadcom NetLink (TM) Gigabit Ethernet - NDIS 6.0;c:\windows\system32\DRIVERS\k57nd60a.sys;c:\windows\SYSNATIVE\DRIVERS\k57nd60a.sys [x]
.
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\active setup\installed components\{8A69D345-D564-463c-AFF1-A69D9E530F96}]
2014-09-14 15:48 1096520 ----a-w- c:\program files (x86)\Google\Chrome\Application\37.0.2062.120\Installer\chrmstp.exe
.
Obsah adresáře 'Naplánované úlohy'
.
2014-09-20 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
- c:\program files (x86)\Google\Update\GoogleUpdate.exe [2014-09-14 15:47]
.
2014-09-20 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
- c:\program files (x86)\Google\Update\GoogleUpdate.exe [2014-09-14 15:47]
.
2014-09-20 c:\windows\Tasks\MaxigetUpdaterTaskMachineCore.job
- c:\program files (x86)\Maxiget\Updater\MaxigetUpdater.exe [2014-09-14 16:35]
.
2014-09-20 c:\windows\Tasks\MaxigetUpdaterTaskMachineUA.job
- c:\program files (x86)\Maxiget\Updater\MaxigetUpdater.exe [2014-09-14 16:35]
.
2014-09-14 c:\windows\Tasks\Norton Security Scan for Holky.job
- c:\progra~2\NORTON~3\Engine\410~1.28\Nss.exe [2014-09-14 06:04]
.
.
--------- X64 Entries -----------
.
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ SkyDrivePro1 (ErrorConflict)]
@="{8BA85C75-763B-4103-94EB-9470F12FE0F7}"
[HKEY_CLASSES_ROOT\CLSID\{8BA85C75-763B-4103-94EB-9470F12FE0F7}]
2012-10-01 18:37 2322576 ----a-w- c:\progra~1\MICROS~2\Office15\GROOVEEX.DLL
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ SkyDrivePro2 (SyncInProgress)]
@="{CD55129A-B1A1-438E-A425-CEBC7DC684EE}"
[HKEY_CLASSES_ROOT\CLSID\{CD55129A-B1A1-438E-A425-CEBC7DC684EE}]
2012-10-01 18:37 2322576 ----a-w- c:\progra~1\MICROS~2\Office15\GROOVEEX.DLL
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ SkyDrivePro3 (InSync)]
@="{E768CD3B-BDDC-436D-9C13-E1B39CA257B1}"
[HKEY_CLASSES_ROOT\CLSID\{E768CD3B-BDDC-436D-9C13-E1B39CA257B1}]
2012-10-01 18:37 2322576 ----a-w- c:\progra~1\MICROS~2\Office15\GROOVEEX.DLL
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"IgfxTray"="c:\windows\system32\igfxtray.exe" [2010-07-23 161304]
"HotKeysCmds"="c:\windows\system32\hkcmd.exe" [2010-07-23 386584]
"Persistence"="c:\windows\system32\igfxpers.exe" [2010-07-23 415256]
"RtHDVCpl"="c:\program files\Realtek\Audio\HDA\RAVCpl64.exe" [2010-06-22 10920552]
"Acer ePower Management"="c:\program files\Packard Bell\Packard Bell Power Management\ePowerTray.exe" [2011-01-05 860040]
"AdobeAAMUpdater-1.0"="c:\program files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe" [2010-07-28 497648]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
"AppInit_DLLs"=c:\windows\System32\nvinitx.dll
.
------- Doplňkový sken -------
.
uStart Page = hxxp://www.istartsurf.com/?type=hp&ts=14107122 ... U4419U4419
uLocal Page = c:\windows\system32\blank.htm
mDefault_Search_URL = hxxp://www.istartsurf.com/web/?type=ds&ts=1410 ... earchTerms}
mDefault_Page_URL = hxxp://www.istartsurf.com/?type=hp&ts=14107122 ... U4419U4419
mStart Page = hxxp://www.istartsurf.com/?type=hp&ts=14107122 ... U4419U4419
mLocal Page = c:\windows\SysWOW64\blank.htm
mSearch Page = hxxp://www.istartsurf.com/web/?type=ds&ts=1410 ... earchTerms}
IE: &Download All using 4shared Desktop - c:\program files (x86)\4shared Desktop\Desktop.32/D_ALL_LINK
IE: &Download using 4shared Desktop - c:\program files (x86)\4shared Desktop\Desktop.32/D_ONE_LINK
IE: E&xportovat do Microsoft Excelu - c:\progra~1\MICROS~2\Office15\EXCEL.EXE/3000
IE: Od&eslat do OneNotu - c:\progra~1\MICROS~2\Office15\ONBttnIE.dll/105
TCP: DhcpNameServer = 79.127.195.194 79.127.192.230
Filter: text/xml - {807583E5-5146-11D5-A672-00B0D022E945} - c:\program files (x86)\Common Files\microsoft shared\OFFICE15\MSOXMLMF.DLL
.
- - - - NEPLATNÉ POLOŽKY ODSTRANĚNÉ Z REGISTRU - - - -
.
Toolbar-Locked - (no file)
Wow6432Node-HKCU-Run-iLivid - c:\users\Holky\AppData\Local\iLivid\iLivid.exe
Toolbar-Locked - (no file)
HKLM-Run-SynTPEnh - c:\program files (x86)\Synaptics\SynTP\SynTPEnh.exe
.
.
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\NIS]
"ImagePath"="\"c:\program files (x86)\Norton Internet Security\Engine\19.9.1.14\ccSvcHst.exe\" /s \"NIS\" /m \"c:\program files (x86)\Norton Internet Security\Engine\19.9.1.14\diMaster.dll\" /prefetch:1"
.
--------------------- ZAMKNUTÉ KLÍČE V REGISTRU ---------------------
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil10u_ActiveX.exe,-101"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\Elevation]
"Enabled"=dword:00000001
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\LocalServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil10u_ActiveX.exe"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@="Shockwave Flash Object"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\InprocServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash10u.ocx"
"ThreadingModel"="Apartment"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\MiscStatus]
@="0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ProgID]
@="ShockwaveFlash.ShockwaveFlash.10"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash10u.ocx, 1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\TypeLib]
@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\Version]
@="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
@="ShockwaveFlash.ShockwaveFlash"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@="Macromedia Flash Factory Object"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\InprocServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash10u.ocx"
"ThreadingModel"="Apartment"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ProgID]
@="FlashFactory.FlashFactory.1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash10u.ocx, 1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\TypeLib]
@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\Version]
@="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
@="FlashFactory.FlashFactory"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}]
@Denied: (A 2) (Everyone)
@="IFlashBroker4"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\PCW\Security]
@Denied: (Full) (Everyone)
.
Celkový čas: 2014-09-20 13:28:25
ComboFix-quarantined-files.txt 2014-09-20 11:28
.
Před spuštěním: Volných bajtů: 569 523 380 224
Po spuštění: Volných bajtů: 569 986 342 912
.
- - End Of File - - E162EF57D5775A26EACEA92829B39361

Re: samootevírání mechaniky - log z Combofixu

Napsal: 20 zář 2014 14:31
od Rudy
Zdravím!
Proč spouštíte ComboFix, utilitu určenou pouze profesionálům? Hodláte si nabořit systém, nebo některou aplikaci?

Přesuňte ComboFix na plochu. Otevřte poznámkový blok a zkopírujte do něj:
KillAll::

File::
c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
c:\windows\Tasks\MaxigetUpdaterTaskMachineCore.job
c:\windows\Tasks\MaxigetUpdaterTaskMachineUA.job

Registry::
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ SkyDrivePro1 (ErrorConflict)]
@=-

RegLock::
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}]
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\Elevation]
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\LocalServer32]
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\TypeLib]
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}]
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\InprocServer32]
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\MiscStatus]
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ProgID]
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\TypeLib]
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\Version]
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}]
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\InprocServer32]
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ProgID]
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\TypeLib]
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\Version]
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}]
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}\ProxyStubClsid32]
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}\TypeLib]
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\PCW\Security]

Reboot::
Uložte na plochu jako CFScript.txt. Pak jej myší přetáhněte nad ikonu ComboFix a pusťte. CF se spustí a vykoná příkazy ze skriptu.

Obrázek

Re: samootevírání mechaniky - log z Combofixu

Napsal: 20 zář 2014 21:10
od djeronic
Otevírá se to neustále po tomto ,jak jste mi řekli co jsem měl udělat se mi udělal tento log, děkuju za váš čas. :))

LOG:

ComboFix 14-09-18.01 - Holky 20.09.2014 21:44:07.2.2 - x64
Microsoft Windows 7 Home Premium 6.1.7601.1.1250.420.1029.18.3767.2380 [GMT 2:00]
Spuštěný z: c:\users\Holky\Desktop\ComboFix.exe
Použité ovládací přepínače :: c:\users\Holky\Desktop\CFSaaacript.txt
AV: Norton Internet Security *Disabled/Updated* {63DF5164-9100-186D-2187-8DC619EFD8BF}
FW: Norton Internet Security *Enabled* {5BE4D041-DB6F-1935-0AD8-24F3E73C9FC4}
SP: Norton Internet Security *Enabled/Updated* {D8BEB080-B73A-17E3-1B37-B6B462689202}
SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.
FILE ::
"c:\windows\Tasks\GoogleUpdateTaskMachineCore.job"
"c:\windows\Tasks\GoogleUpdateTaskMachineUA.job"
"c:\windows\Tasks\MaxigetUpdaterTaskMachineCore.job"
"c:\windows\Tasks\MaxigetUpdaterTaskMachineUA.job"
.
.
((((((((((((((((((((((((((((((((((((((( Ostatní výmazy )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
c:\windows\Tasks\MaxigetUpdaterTaskMachineCore.job
c:\windows\Tasks\MaxigetUpdaterTaskMachineUA.job
.
.
((((((((((((((((((((((((( Soubory vytvořené od 2014-08-20 do 2014-09-20 )))))))))))))))))))))))))))))))
.
.
2014-09-20 10:52 . 2014-09-20 10:52 -------- d-----w- C:\SUPERDelete
2014-09-20 10:30 . 2014-09-20 10:30 -------- d-----w- c:\programdata\SUPERAntiSpyware.com
2014-09-18 19:20 . 2014-09-18 19:20 -------- d-----w- c:\program files\Common Files\DESIGNER
2014-09-18 19:20 . 2014-09-18 19:20 -------- d-----w- c:\program files\Microsoft.NET
2014-09-18 19:20 . 2014-09-18 19:20 -------- d-----w- c:\program files (x86)\Microsoft SQL Server
2014-09-18 19:20 . 2014-09-18 19:20 -------- d-----w- c:\programdata\regid.1991-06.com.microsoft
2014-09-18 19:19 . 2014-09-18 19:20 -------- d-----w- c:\program files\Microsoft SQL Server
2014-09-18 19:16 . 2014-09-18 19:16 -------- d-----w- c:\program files\Microsoft Analysis Services
2014-09-18 19:16 . 2014-09-18 19:16 -------- d-----w- c:\program files (x86)\Microsoft Analysis Services
2014-09-18 19:16 . 2014-09-18 19:19 -------- d-----w- c:\program files\Microsoft Office
2014-09-18 19:16 . 2014-09-20 12:23 -------- d-----w- c:\programdata\Microsoft Help
2014-09-18 19:15 . 2014-09-18 19:15 -------- d-----r- C:\MSOCache
2014-09-18 17:27 . 2014-09-18 17:27 -------- d-----w- c:\program files (x86)\TeamViewer
2014-09-17 17:47 . 2014-09-17 17:47 -------- d-----w- c:\program files (x86)\Common Files\Skype
2014-09-17 17:47 . 2014-09-17 17:47 -------- d-----r- c:\program files (x86)\Skype
2014-09-15 19:28 . 2014-09-17 19:59 -------- d-----w- c:\windows\system32\drivers\NISx64\1309010.00E
2014-09-15 00:02 . 2014-09-15 00:02 -------- d-----w- c:\windows\SysWow64\cs
2014-09-15 00:02 . 2014-09-15 00:02 -------- d-----w- c:\windows\SysWow64\XPSViewer
2014-09-15 00:02 . 2014-09-15 00:02 -------- d-----w- c:\windows\SysWow64\drivers\cs-CZ
2014-09-15 00:02 . 2014-09-15 00:02 -------- d-----w- c:\windows\system32\cs
2014-09-15 00:02 . 2014-09-15 00:02 -------- d-----w- c:\windows\cs-CZ
2014-09-15 00:02 . 2014-09-14 14:36 -------- d-----w- c:\windows\SysWow64\wbem\cs-CZ
2014-09-15 00:02 . 2014-09-15 00:02 -------- d-----w- c:\windows\system32\drivers\UMDF\cs-CZ
2014-09-15 00:02 . 2014-09-15 00:02 -------- d-----w- c:\windows\system32\drivers\cs-CZ
2014-09-15 00:02 . 2014-09-14 14:36 -------- d-----w- c:\windows\system32\wbem\cs-CZ
2014-09-15 00:01 . 2014-09-15 00:01 3584 ----a-w- c:\windows\system32\Spool\prtprocs\x64\cs-CZ\LXKPTPRC.DLL.mui
2014-09-14 23:55 . 2014-09-14 23:55 86528 ----a-w- c:\windows\SysWow64\iesysprep.dll
2014-09-14 16:38 . 2014-09-14 16:38 -------- d-----w- c:\program files (x86)\MaxiGet Software Manager
2014-09-14 16:35 . 2014-09-14 16:33 718497 ----a-w- c:\windows\unins000.exe
2014-09-14 16:32 . 2014-09-14 16:32 -------- d-----w- c:\programdata\WindowsMangerProtect
2014-09-14 16:29 . 2014-09-14 16:29 -------- d-----w- c:\program files (x86)\Maxiget
2014-09-14 16:21 . 2014-09-14 16:21 -------- d-----w- c:\programdata\4shared Desktop
2014-09-14 16:21 . 2014-09-14 16:42 -------- d-----w- c:\program files (x86)\4shared Desktop
2014-09-14 16:19 . 2014-09-14 16:19 -------- d-----w- c:\program files (x86)\Common Files\Symantec Shared
2014-09-14 16:00 . 2014-09-14 16:00 -------- d-----w- c:\program files\WinRAR
2014-09-14 15:59 . 2014-09-14 15:59 -------- d-----w- c:\windows\system32\drivers\NSSx64
2014-09-14 15:59 . 2014-09-14 15:59 -------- d-----w- c:\program files (x86)\Norton Security Scan
2014-09-14 15:59 . 2014-09-14 16:00 -------- d-----w- c:\programdata\AVG
2014-09-14 15:59 . 2014-09-14 15:59 -------- d-sh--w- c:\programdata\{01BD4FC9-2F86-4706-A62E-774BB7E9D308}
2014-09-14 15:59 . 2014-09-14 15:59 -------- d--h--w- c:\programdata\Common Files
2014-09-14 15:58 . 2014-09-14 15:58 -------- d-----w- c:\program files (x86)\GRETECH
2014-09-14 15:47 . 2014-09-14 15:48 -------- d-----w- c:\program files (x86)\Google
2014-09-14 15:31 . 2014-09-20 19:49 69792 ----a-w- c:\windows\SysWow64\rpcnet.dll
2014-09-14 15:31 . 2014-09-14 15:31 69792 ------w- c:\windows\SysWow64\rpcnet.exe
2014-09-14 15:31 . 2014-09-14 15:31 -------- d-----w- c:\programdata\regid.1986-12.com.adobe
2014-09-14 15:27 . 2014-09-14 15:27 -------- d-----w- c:\programdata\CyberLink
2014-09-14 15:23 . 2012-02-17 06:38 1031680 ----a-w- c:\windows\system32\rdpcore.dll
2014-09-14 15:23 . 2012-02-17 05:34 826880 ----a-w- c:\windows\SysWow64\rdpcore.dll
2014-09-14 15:23 . 2012-02-17 04:58 210944 ----a-w- c:\windows\system32\drivers\rdpwd.sys
2014-09-14 15:23 . 2012-02-17 04:57 23552 ----a-w- c:\windows\system32\drivers\tdtcp.sys
2014-09-14 15:15 . 2014-09-20 11:09 -------- d-----w- c:\users\Holky
2014-09-14 14:36 . 2014-09-14 14:36 -------- d-----w- c:\program files (x86)\Video Web Camera
2014-09-14 14:32 . 2014-09-14 14:32 -------- d-----w- c:\program files (x86)\Common Files\Adobe AIR
2014-09-14 14:30 . 2010-03-19 01:00 55856 ------w- c:\windows\system32\drivers\PxHlpa64.sys
2014-09-14 14:30 . 2009-10-20 01:00 10224 ------w- c:\windows\system32\drivers\cdralw2k.sys
2014-09-14 14:30 . 2009-10-20 01:00 10224 ------w- c:\windows\system32\drivers\cdr4_xp.sys
2014-09-14 14:29 . 2014-09-14 14:33 -------- d-----w- c:\program files (x86)\Common Files\PX Storage Engine
2014-09-14 14:29 . 2014-09-14 14:29 -------- d-----w- c:\program files (x86)\Common Files\Sonic Shared
2014-09-14 14:27 . 2014-09-14 14:27 -------- d-----w- c:\programdata\CLSK
2014-09-14 14:27 . 2014-09-14 14:27 -------- d-----w- c:\program files (x86)\Social Networks
2014-09-14 14:27 . 2014-09-14 14:27 -------- d-----w- c:\programdata\install_clap
2014-09-14 14:26 . 2014-09-14 15:25 -------- d-----w- c:\program files (x86)\Microsoft
2014-09-14 14:26 . 2014-09-14 14:42 -------- d-----w- c:\windows\SysWow64\NV
2014-09-14 14:26 . 2014-09-14 14:42 -------- d-----w- c:\windows\system32\NV
2014-09-14 14:22 . 2010-12-10 08:05 39464 ----a-w- c:\windows\system32\drivers\btwl2cap.sys
2014-09-14 14:22 . 2010-12-10 08:04 349224 ----a-w- c:\windows\system32\drivers\btwampfl.sys
2014-09-14 14:22 . 2010-09-20 14:20 22056 ----a-w- c:\windows\system32\btwcoins.dll
2014-09-14 14:22 . 2010-09-14 05:59 138280 ----a-w- c:\windows\system32\drivers\btwavdt.sys
2014-09-14 14:22 . 2010-09-14 05:59 21416 ----a-w- c:\windows\system32\drivers\btwrchid.sys
2014-09-14 14:22 . 2010-08-20 07:21 106536 ----a-w- c:\windows\system32\drivers\btwaudio.sys
2014-09-14 14:22 . 2014-09-14 14:22 -------- d-----w- c:\program files\WIDCOMM
2014-09-14 14:18 . 2014-09-14 14:26 -------- d-----w- c:\programdata\NVIDIA
2014-09-14 14:18 . 2014-09-14 14:18 -------- d-----w- c:\users\UpdatusUser
2014-09-14 14:14 . 2014-09-14 14:14 -------- d-----w- c:\program files (x86)\Launch Manager
2014-09-14 14:13 . 2014-09-14 14:13 -------- d---a-w- C:\book
2014-09-14 14:10 . 2014-09-14 14:10 -------- d-----w- c:\program files\Common Files\Intel
2014-09-14 14:10 . 2014-09-14 14:10 -------- d-----w- c:\program files (x86)\Common Files\Intel
.
.
.
(((((((((((((((((((((((((((((((((((((((( Find3M výpis ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2014-09-20 19:50 . 2011-09-14 11:13 17920 ----a-w- c:\windows\system32\rpcnetp.exe
2014-09-20 19:49 . 2011-09-14 11:14 17920 ----a-w- c:\windows\SysWow64\rpcnetp.dll
2014-09-20 19:49 . 2011-09-14 11:13 17920 ----a-w- c:\windows\SysWow64\rpcnetp.exe
2014-09-15 04:33 . 2011-09-14 12:01 175736 ----a-w- c:\windows\system32\drivers\SYMEVENT64x86.SYS
2014-09-15 00:01 . 2014-09-15 00:01 2560 ----a-w- c:\windows\SysWow64\drivers\cs-CZ\qwavedrv.sys.mui
2014-09-15 00:01 . 2014-09-15 00:01 5632 ----a-w- c:\windows\SysWow64\drivers\cs-CZ\ndiscap.sys.mui
2014-09-15 00:01 . 2014-09-15 00:01 2560 ----a-w- c:\windows\SysWow64\drivers\cs-CZ\scfilter.sys.mui
2014-09-15 00:01 . 2014-09-15 00:01 50176 ----a-w- c:\windows\SysWow64\drivers\cs-CZ\tcpip.sys.mui
2014-09-15 00:01 . 2014-09-15 00:01 27136 ----a-w- c:\windows\SysWow64\drivers\cs-CZ\bfe.dll.mui
2014-09-15 00:01 . 2014-09-15 00:01 15360 ----a-w- c:\windows\SysWow64\drivers\cs-CZ\pacer.sys.mui
2014-09-14 15:21 . 2010-06-24 18:33 23256 ----a-w- c:\programdata\Microsoft\IdentityCRL\production\ppcrlconfig600.dll
.
.
(((((((((((((((((((((((((((((((((( Spouštěcí body v registru )))))))))))))))))))))))))))))))))))))))))))))
.
.
*Poznámka* prázdné záznamy a legitimní výchozí údaje nejsou zobrazeny.
REGEDIT4
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ SkyDrivePro2 (SyncInProgress)]
@="{CD55129A-B1A1-438E-A425-CEBC7DC684EE}"
[HKEY_CLASSES_ROOT\CLSID\{CD55129A-B1A1-438E-A425-CEBC7DC684EE}]
2012-10-01 18:38 1720976 ----a-w- c:\progra~2\MICROS~4\Office15\GROOVEEX.DLL
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ SkyDrivePro3 (InSync)]
@="{E768CD3B-BDDC-436D-9C13-E1B39CA257B1}"
[HKEY_CLASSES_ROOT\CLSID\{E768CD3B-BDDC-436D-9C13-E1B39CA257B1}]
2012-10-01 18:38 1720976 ----a-w- c:\progra~2\MICROS~4\Office15\GROOVEEX.DLL
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]
"Norton Online Backup"="c:\program files (x86)\Symantec\Norton Online Backup\NOBuClient.exe" [2010-06-01 1155928]
"LManager"="c:\program files (x86)\Launch Manager\LManager.exe" [2010-08-10 975952]
"Adobe ARM"="c:\program files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2014-08-21 959176]
.
c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\
Bluetooth.lnk - c:\program files\WIDCOMM\Bluetooth Software\BTTray.exe [2010-12-10 1133856]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorAdmin"= 5 (0x5)
"ConsentPromptBehaviorUser"= 3 (0x3)
"EnableUIADesktopToggle"= 0 (0x0)
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\windows]
"LoadAppInit_DLLs"=1 (0x1)
"AppInit_DLLs"=c:\windows\SysWOW64\nvinit.dll
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\drivers32]
"mixer2"=wdmaud.drv
.
2;2 UNS;Intel(R) Management & Security Application User Notification Service;c:\program files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe;c:\program files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe [x]
R2 mglupdate;Služba Maxiget Update (mglupdate);c:\program files (x86)\Maxiget\Updater\MaxigetUpdater.exe;c:\program files (x86)\Maxiget\Updater\MaxigetUpdater.exe [x]
R2 SkypeUpdate;Skype Updater;c:\program files (x86)\Skype\Updater\Updater.exe;c:\program files (x86)\Skype\Updater\Updater.exe [x]
R3 BTWAMPFL;BTWAMPFL;c:\windows\system32\DRIVERS\btwampfl.sys;c:\windows\SYSNATIVE\DRIVERS\btwampfl.sys [x]
R3 btwl2cap;Bluetooth L2CAP Service;c:\windows\system32\DRIVERS\btwl2cap.sys;c:\windows\SYSNATIVE\DRIVERS\btwl2cap.sys [x]
R3 GamesAppService;GamesAppService;c:\program files (x86)\WildTangent Games\App\GamesAppService.exe;c:\program files (x86)\WildTangent Games\App\GamesAppService.exe [x]
R3 mglupdatem;Služba Maxiget Update (mglupdatem);c:\program files (x86)\Maxiget\Updater\MaxigetUpdater.exe;c:\program files (x86)\Maxiget\Updater\MaxigetUpdater.exe [x]
R3 ose64;Office 64 Source Engine;c:\program files\Common Files\Microsoft Shared\Source Engine\OSE.EXE;c:\program files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [x]
R3 RSUSBSTOR;RtsUStor.Sys Realtek USB Card Reader;c:\windows\system32\Drivers\RtsUStor.sys;c:\windows\SYSNATIVE\Drivers\RtsUStor.sys [x]
R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys;c:\windows\SYSNATIVE\drivers\tsusbflt.sys [x]
R3 TsUsbGD;Remote Desktop Generic USB Device;c:\windows\system32\drivers\TsUsbGD.sys;c:\windows\SYSNATIVE\drivers\TsUsbGD.sys [x]
R4 wlcrasvc;Windows Live Mesh remote connections service;c:\program files\Windows Live\Mesh\wlcrasvc.exe;c:\program files\Windows Live\Mesh\wlcrasvc.exe [x]
S0 nvpciflt;nvpciflt;c:\windows\system32\DRIVERS\nvpciflt.sys;c:\windows\SYSNATIVE\DRIVERS\nvpciflt.sys [x]
S0 PxHlpa64;PxHlpa64;c:\windows\System32\Drivers\PxHlpa64.sys;c:\windows\SYSNATIVE\Drivers\PxHlpa64.sys [x]
S0 SymDS;Symantec Data Store;c:\windows\system32\drivers\NISx64\1309010.00E\SYMDS64.SYS;c:\windows\SYSNATIVE\drivers\NISx64\1309010.00E\SYMDS64.SYS [x]
S0 SymEFA;Symantec Extended File Attributes;c:\windows\system32\drivers\NISx64\1309010.00E\SYMEFA64.SYS;c:\windows\SYSNATIVE\drivers\NISx64\1309010.00E\SYMEFA64.SYS [x]
S1 BHDrvx64;BHDrvx64;c:\programdata\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_19.0.0.128\Definitions\BASHDefs\20140912.003\BHDrvx64.sys;c:\programdata\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_19.0.0.128\Definitions\BASHDefs\20140912.003\BHDrvx64.sys [x]
S1 ccSet_NIS;Norton Internet Security Settings Manager;c:\windows\system32\drivers\NISx64\1309010.00E\ccSetx64.sys;c:\windows\SYSNATIVE\drivers\NISx64\1309010.00E\ccSetx64.sys [x]
S1 IDSVia64;IDSVia64;c:\programdata\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_19.0.0.128\Definitions\IPSDefs\20140919.001\IDSvia64.sys;c:\programdata\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_19.0.0.128\Definitions\IPSDefs\20140919.001\IDSvia64.sys [x]
S1 SymIRON;Symantec Iron Driver;c:\windows\system32\drivers\NISx64\1309010.00E\Ironx64.SYS;c:\windows\SYSNATIVE\drivers\NISx64\1309010.00E\Ironx64.SYS [x]
S1 SymNetS;Symantec Network Security WFP Driver;c:\windows\System32\Drivers\NISx64\1309010.00E\SYMNETS.SYS;c:\windows\SYSNATIVE\Drivers\NISx64\1309010.00E\SYMNETS.SYS [x]
S2 AdobeActiveFileMonitor9.0;Adobe Active File Monitor V9;c:\program files (x86)\Adobe\Elements 9 Organizer\PhotoshopElementsFileAgent.exe;c:\program files (x86)\Adobe\Elements 9 Organizer\PhotoshopElementsFileAgent.exe [x]
S2 DsiWMIService;Dritek WMI Service;c:\program files (x86)\Launch Manager\dsiwmis.exe;c:\program files (x86)\Launch Manager\dsiwmis.exe [x]
S2 ePowerSvc;Acer ePower Service;c:\program files\Packard Bell\Packard Bell Power Management\ePowerSvc.exe;c:\program files\Packard Bell\Packard Bell Power Management\ePowerSvc.exe [x]
S2 GREGService;GREGService;c:\program files (x86)\Packard Bell\Registration\GREGsvc.exe;c:\program files (x86)\Packard Bell\Registration\GREGsvc.exe [x]
S2 IAStorDataMgrSvc;Intel(R) Rapid Storage Technology;c:\program files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe;c:\program files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe [x]
S2 Live Updater Service;Live Updater Service;c:\program files\Packard Bell\Packard Bell Updater\UpdaterService.exe;c:\program files\Packard Bell\Packard Bell Updater\UpdaterService.exe [x]
S2 NIS;Norton Internet Security;c:\program files (x86)\Norton Internet Security\Engine\19.9.1.14\ccSvcHst.exe;c:\program files (x86)\Norton Internet Security\Engine\19.9.1.14\ccSvcHst.exe [x]
S2 NOBU;Norton Online Backup;c:\program files (x86)\Symantec\Norton Online Backup\NOBuAgent.exe SERVICE;c:\program files (x86)\Symantec\Norton Online Backup\NOBuAgent.exe SERVICE [x]
S2 TeamViewer9;TeamViewer 9;c:\program files (x86)\TeamViewer\Version9\TeamViewer_Service.exe;c:\program files (x86)\TeamViewer\Version9\TeamViewer_Service.exe [x]
S2 WindowsMangerProtect;WindowsMangerProtect Service;c:\programdata\WindowsMangerProtect\ProtectWindowsManager.exe;c:\programdata\WindowsMangerProtect\ProtectWindowsManager.exe [x]
S3 EraserUtilRebootDrv;EraserUtilRebootDrv;c:\program files (x86)\Common Files\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys;c:\program files (x86)\Common Files\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys [x]
S3 HECIx64;Intel(R) Management Engine Interface;c:\windows\system32\drivers\HECIx64.sys;c:\windows\SYSNATIVE\drivers\HECIx64.sys [x]
S3 Impcd;Impcd;c:\windows\system32\DRIVERS\Impcd.sys;c:\windows\SYSNATIVE\DRIVERS\Impcd.sys [x]
S3 IntcDAud;Intel(R) Display Audio;c:\windows\system32\DRIVERS\IntcDAud.sys;c:\windows\SYSNATIVE\DRIVERS\IntcDAud.sys [x]
S3 k57nd60a;Broadcom NetLink (TM) Gigabit Ethernet - NDIS 6.0;c:\windows\system32\DRIVERS\k57nd60a.sys;c:\windows\SYSNATIVE\DRIVERS\k57nd60a.sys [x]
.
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\active setup\installed components\{8A69D345-D564-463c-AFF1-A69D9E530F96}]
2014-09-14 15:48 1096520 ----a-w- c:\program files (x86)\Google\Chrome\Application\37.0.2062.120\Installer\chrmstp.exe
.
Obsah adresáře 'Naplánované úlohy'
.
2014-09-14 c:\windows\Tasks\Norton Security Scan for Holky.job
- c:\progra~2\NORTON~3\Engine\410~1.28\Nss.exe [2014-09-14 06:04]
.
.
--------- X64 Entries -----------
.
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ SkyDrivePro1 (ErrorConflict)]
@="{8BA85C75-763B-4103-94EB-9470F12FE0F7}"
[HKEY_CLASSES_ROOT\CLSID\{8BA85C75-763B-4103-94EB-9470F12FE0F7}]
2012-10-01 18:37 2322576 ----a-w- c:\progra~1\MICROS~2\Office15\GROOVEEX.DLL
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ SkyDrivePro2 (SyncInProgress)]
@="{CD55129A-B1A1-438E-A425-CEBC7DC684EE}"
[HKEY_CLASSES_ROOT\CLSID\{CD55129A-B1A1-438E-A425-CEBC7DC684EE}]
2012-10-01 18:37 2322576 ----a-w- c:\progra~1\MICROS~2\Office15\GROOVEEX.DLL
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ SkyDrivePro3 (InSync)]
@="{E768CD3B-BDDC-436D-9C13-E1B39CA257B1}"
[HKEY_CLASSES_ROOT\CLSID\{E768CD3B-BDDC-436D-9C13-E1B39CA257B1}]
2012-10-01 18:37 2322576 ----a-w- c:\progra~1\MICROS~2\Office15\GROOVEEX.DLL
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"IgfxTray"="c:\windows\system32\igfxtray.exe" [2010-07-23 161304]
"HotKeysCmds"="c:\windows\system32\hkcmd.exe" [2010-07-23 386584]
"Persistence"="c:\windows\system32\igfxpers.exe" [2010-07-23 415256]
"SynTPEnh"="c:\program files (x86)\Synaptics\SynTP\SynTPEnh.exe" [BU]
"RtHDVCpl"="c:\program files\Realtek\Audio\HDA\RAVCpl64.exe" [2010-06-22 10920552]
"Acer ePower Management"="c:\program files\Packard Bell\Packard Bell Power Management\ePowerTray.exe" [2011-01-05 860040]
"AdobeAAMUpdater-1.0"="c:\program files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe" [2010-07-28 497648]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
"AppInit_DLLs"=c:\windows\System32\nvinitx.dll
.
------- Doplňkový sken -------
.
uStart Page = hxxp://www.istartsurf.com/?type=hp&ts=14107122 ... U4419U4419
uLocal Page = c:\windows\system32\blank.htm
mDefault_Search_URL = hxxp://www.istartsurf.com/web/?type=ds&ts=1410 ... earchTerms}
mDefault_Page_URL = hxxp://www.istartsurf.com/?type=hp&ts=14107122 ... U4419U4419
mStart Page = hxxp://www.istartsurf.com/?type=hp&ts=14107122 ... U4419U4419
mLocal Page = c:\windows\SysWOW64\blank.htm
mSearch Page = hxxp://www.istartsurf.com/web/?type=ds&ts=1410 ... earchTerms}
IE: &Download All using 4shared Desktop - c:\program files (x86)\4shared Desktop\Desktop.32/D_ALL_LINK
IE: &Download using 4shared Desktop - c:\program files (x86)\4shared Desktop\Desktop.32/D_ONE_LINK
IE: E&xportovat do Microsoft Excelu - c:\progra~1\MICROS~2\Office15\EXCEL.EXE/3000
IE: Od&eslat do OneNotu - c:\progra~1\MICROS~2\Office15\ONBttnIE.dll/105
TCP: DhcpNameServer = 79.127.195.194 79.127.192.230
Filter: text/xml - {807583E5-5146-11D5-A672-00B0D022E945} - c:\program files (x86)\Common Files\microsoft shared\OFFICE15\MSOXMLMF.DLL
.
- - - - NEPLATNÉ POLOŽKY ODSTRANĚNÉ Z REGISTRU - - - -
.
Toolbar-Locked - (no file)
.
.
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\NIS]
"ImagePath"="\"c:\program files (x86)\Norton Internet Security\Engine\19.9.1.14\ccSvcHst.exe\" /s \"NIS\" /m \"c:\program files (x86)\Norton Internet Security\Engine\19.9.1.14\diMaster.dll\" /prefetch:1"
.
------------------------ Jiné spuštené procesy ------------------------
.
c:\program files (x86)\Google\Update\GoogleUpdate.exe
c:\program files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
c:\program files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
c:\windows\SysWOW64\rpcnet.exe
c:\program files (x86)\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe
.
**************************************************************************
.
Celkový čas: 2014-09-20 21:53:59 - počítač byl restartován
ComboFix-quarantined-files.txt 2014-09-20 19:53
ComboFix2.txt 2014-09-20 11:28
.
Před spuštěním: Volných bajtů: 569 329 192 960
Po spuštění: Volných bajtů: 569 109 737 472
.
- - End Of File - - 8E9600C17C8E3104AD6CD66F02A3674A

Re: samootevírání mechaniky - log z Combofixu

Napsal: 20 zář 2014 21:29
od Rudy
Ono to obvykle nebývá způsobeno virem. Co jste instaloval těsně před tím, než se problém objevil? Vše bylo smazáno, CF odinstalujte pomocí T-Cleaneru: http://vyosek.tym.cz/pro_usery/T-Cleaner.exe .

Re: samootevírání mechaniky - log z Combofixu

Napsal: 20 zář 2014 22:46
od djeronic
Combofix jsem normálně smazal do koše a pak vyhodil.. vadí to? jinak nic jsem neinstaloval.. reinstaloval jsem celý počítač a problémy pořád.. tak nevím co s tím. :/ Jestli nějaký program ,který tam byl před reinstalací a dal jsem ho tam znova.. což asi ne.. protože mám uplně normálně použivané programy a nikdo s tím problém nemá. :)

Re: samootevírání mechaniky - log z Combofixu

Napsal: 20 zář 2014 22:55
od djeronic
Použil jsem ten program T-Cleaner.. a odstranil pozůstatky po aplikaci.

Re: samootevírání mechaniky - log z Combofixu

Napsal: 21 zář 2014 09:20
od Rudy
Problém určitě není virový. Vysledujte, při kterém spuštěném programu se mechanika otevírá. Nelze vyloučit ani hw chybu.

Re: samootevírání mechaniky - log z Combofixu

Napsal: 21 zář 2014 09:24
od djeronic
A jak to mám vysledovat myslíte? Nějaký návrh? Jinak děkuju moc za pomoc. :)

Re: samootevírání mechaniky - log z Combofixu

Napsal: 21 zář 2014 09:28
od Rudy
Když se vám mechanika otevře, tak snad víte, co máte právě spuštěno.

Re: samootevírání mechaniky - log z Combofixu

Napsal: 21 zář 2014 09:56
od djeronic
To vím, stává se asi nejčastějí ,když mám otevřený chrome, ale to je spíš tím ,že ho mám furt otevřený, ale jinak nemám nic otevřeného.. může to být nějakou stránkou?

Re: samootevírání mechaniky - log z Combofixu

Napsal: 21 zář 2014 10:02
od djeronic
Ještě jsem se chtěl zeptat? Co když mám správce úlol.. tam dám procesy a tam je 10x ukazáný chrom

Re: samootevírání mechaniky - log z Combofixu

Napsal: 21 zář 2014 10:48
od Rudy
Jediné programy, přes které lze běžně machaniku otevřít, jsou programy vypalovací, nebo přehrávače. U žádného jiného jsem to neviděl. Jiný program by mechaniku neměl otevírat. Chrome má na každý doplněk zvláštní proces. To by mělo být v pořádku.

Re: samootevírání mechaniky - log z Combofixu

Napsal: 21 zář 2014 13:17
od djeronic
Já jsem ty programy vypalovací odstranil kdysi před reinstalací a možná od té doby se to otevírá ,ale nevím jestli to je možné. To by bylo divné ne?

Re: samootevírání mechaniky - log z Combofixu

Napsal: 21 zář 2014 16:16
od Rudy
To jistě. Stále nevím, jestli to dělá systém, nebo je to problém mechaniky samotné.

Re: samootevírání mechaniky - log z Combofixu

Napsal: 21 zář 2014 17:54
od djeronic
Dá se to nějak zjistit? Abych nemuselo třeba zbytečně kupovat nová mechanika.. ale to nechcu ,protože už ntb má nějaký ten rok, ale zase není do koše právě. :)
Všechny časy jsou v UTC+01:00
Stránka 1 z 2

Založeno na phpBB® Forum Software © phpBB Limited

Český překlad – phpBB.cz