VIRY.CZ

Ahoj, prosím o kontrolu logu. NB je zpomalený, dlouze se načítá.

Děkuji Radim

Logfile of random's system information tool 1.10 (written by random/random)
Run by pc at 2015-05-16 21:48:13
Microsoft Windows 7 Professional Service Pack 1
System drive C: has 71 GB (38%) free of 188 GB
Total RAM: 1976 MB (51% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 21:49:30, on 16.5.2015
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v11.0 (11.00.9600.17801)
Boot mode: Normal

Running processes:
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Windows\system32\taskhost.exe
C:\Windows\System32\igfxtray.exe
C:\Windows\System32\hkcmd.exe
C:\Windows\System32\igfxpers.exe
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\Program Files\Microsoft Security Client\msseces.exe
C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Windows\system32\Macromed\Flash\FlashUtil32_17_0_0_169_ActiveX.exe
C:\Windows\system32\wuauclt.exe
C:\Users\pc\Downloads\RSIT.exe
C:\Program Files\trend micro\pc.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.seznam.cz/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/p/?LinkId=255141
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/p/?LinkId=255141
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
O2 - BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: URLRedirectionBHO - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\PROGRA~1\MICROS~1\Office14\URLREDIR.DLL
O4 - HKLM\..\Run: [IgfxTray] C:\Windows\system32\igfxtray.exe
O4 - HKLM\..\Run: [HotKeysCmds] C:\Windows\system32\hkcmd.exe
O4 - HKLM\..\Run: [Persistence] C:\Windows\system32\igfxpers.exe
O4 - HKLM\..\Run: [SynTPEnh] %ProgramFiles%\Synaptics\SynTP\SynTPEnh.exe
O4 - HKLM\..\Run: [MSC] "C:\Program Files\Microsoft Security Client\msseces.exe" -hide -runkey
O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'NETWORK SERVICE')
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Excel - res://C:\PROGRA~1\MICROS~1\Office14\EXCEL.EXE/3000
O8 - Extra context menu item: Od&eslat do aplikace OneNote - res://C:\PROGRA~1\MICROS~1\Office14\ONBttnIE.dll/105
O9 - Extra button: Odeslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files\Microsoft Office\Office14\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: Od&eslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files\Microsoft Office\Office14\ONBttnIE.dll
O9 - Extra button: P&ropojené poznámky aplikace OneNote - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files\Microsoft Office\Office14\ONBttnIELinkedNotes.dll
O9 - Extra 'Tools' menuitem: P&ropojené poznámky aplikace OneNote - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files\Microsoft Office\Office14\ONBttnIELinkedNotes.dll
O10 - Unknown file in Winsock LSP: c:\program files\common files\microsoft shared\windows live\wlidnsp.dll
O10 - Unknown file in Winsock LSP: c:\program files\common files\microsoft shared\windows live\wlidnsp.dll
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O17 - HKLM\System\CCS\Services\Tcpip\..\{2E9417B4-3734-4B4D-AF76-A756A1C1A416}: NameServer = 217.77.165.81 217.77.161.131
O17 - HKLM\System\CCS\Services\Tcpip\..\{CC47DE53-6297-45A5-8ADD-3309B404E7BB}: NameServer = 217.77.165.81 217.77.161.131
O17 - HKLM\System\CS1\Services\Tcpip\..\{2E9417B4-3734-4B4D-AF76-A756A1C1A416}: NameServer = 217.77.165.81 217.77.161.131
O17 - HKLM\System\CS2\Services\Tcpip\..\{2E9417B4-3734-4B4D-AF76-A756A1C1A416}: NameServer = 217.77.165.81 217.77.161.131
O18 - Protocol: wlpg - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} - C:\Program Files\Windows Live\Photo Gallery\AlbumDownloadProtocolHandler.dll
O18 - Filter hijack: text/xml - {807573E5-5146-11D5-A672-00B0D022E945} - C:\Program Files\Common Files\Microsoft Shared\OFFICE14\MSOXMLMF.DLL
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: Agere Modem Call Progress Audio (AgereModemAudio) - LSI Corporation - C:\Program Files\LSI SoftModem\agrsmsvc.exe

--
End of file - 5355 bytes

======Scheduled tasks folder======

C:\Windows\tasks\Adobe Flash Player Updater.job - C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe
C:\Windows\tasks\WinThruster_DEFAULT.job - C:\Program Files\WinThruster\WinThruster.exe -default
C:\Windows\tasks\WinThruster_UPDATES.job - C:\Program Files\WinThruster\WinThruster.exe -updatecheck

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
Windows Live ID Sign-in Helper - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2012-07-17 441592]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{B4F3A835-0E21-4959-BA22-42B3008E02FF}]
Office Document Cache Handler - C:\PROGRA~1\MICROS~1\Office14\URLREDIR.DLL [2013-03-06 562904]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"IgfxTray"=C:\Windows\system32\igfxtray.exe [2011-02-11 137752]
"HotKeysCmds"=C:\Windows\system32\hkcmd.exe [2011-02-11 171032]
"Persistence"=C:\Windows\system32\igfxpers.exe [2011-02-11 172568]
"SynTPEnh"=C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2010-06-04 1791272]
"MSC"=C:\Program Files\Microsoft Security Client\msseces.exe [2015-04-30 981688]
"Adobe ARM"=C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2014-12-19 1022152]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\igfxcui]
C:\Windows\system32\igfxdev.dll [2011-02-11 228864]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=credssp.dll

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MsMpSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\MsMpSvc]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorAdmin"=5
"ConsentPromptBehaviorUser"=3
"EnableUIADesktopToggle"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.msadpcm"=msadp32.acm
"midimapper"=midimap.dll
"wavemapper"=msacm32.drv
"VIDC.UYVY"=msyuv.dll
"VIDC.YUY2"=msyuv.dll
"VIDC.YVYU"=msyuv.dll
"VIDC.IYUV"=iyuv_32.dll
"vidc.i420"=iyuv_32.dll
"VIDC.YVU9"=tsbyuv.dll
"msacm.l3acm"=l3codeca.acm
"vidc.cvid"=iccvid.dll
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"aux1"=wdmaud.drv
"MSVideo8"=VfWWDM32.dll
"VIDC.LAGS"=lagarith.dll
"VIDC.X264"=x264vfw.dll
"VIDC.XVID"=xvidvfw.dll
"VIDC.FFDS"=ff_vfw.dll
"msacm.ac3acm"=ac3acm.acm
"msacm.l3codecp"=l3codecp.acm
"wave2"=wdmaud.drv
"midi2"=wdmaud.drv
"mixer2"=wdmaud.drv
"aux2"=wdmaud.drv
"wave3"=wdmaud.drv
"midi3"=wdmaud.drv
"mixer3"=wdmaud.drv
"aux3"=wdmaud.drv

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*

======List of files/folders created in the last 1 month======

2015-05-16 21:48:13 ----D---- C:\rsit
2015-05-16 21:48:13 ----D---- C:\Program Files\trend micro
2015-05-16 10:38:05 ----A---- C:\Windows\system32\PresentationCFFRasterizerNative_v0300.dll
2015-05-16 10:37:49 ----SHD---- C:\Config.Msi
2015-05-13 08:40:09 ----A---- C:\Windows\system32\wpdshext.dll
2015-05-13 08:39:59 ----A---- C:\Windows\system32\UtcResources.dll
2015-05-13 08:39:59 ----A---- C:\Windows\system32\ntkrnlpa.exe
2015-05-13 08:39:59 ----A---- C:\Windows\system32\diagtrack.dll
2015-05-13 08:39:58 ----A---- C:\Windows\system32\tdh.dll
2015-05-13 08:39:58 ----A---- C:\Windows\system32\ntoskrnl.exe
2015-05-13 08:39:57 ----A---- C:\Windows\system32\ntdll.dll
2015-05-13 08:39:56 ----A---- C:\Windows\system32\advapi32.dll
2015-05-13 08:39:55 ----A---- C:\Windows\system32\lsasrv.dll
2015-05-13 08:39:54 ----A---- C:\Windows\system32\tracerpt.exe
2015-05-13 08:39:54 ----A---- C:\Windows\system32\srcore.dll
2015-05-13 08:39:54 ----A---- C:\Windows\system32\drivers\ksecpkg.sys
2015-05-13 08:39:54 ----A---- C:\Windows\system32\drivers\ksecdd.sys
2015-05-13 08:39:53 ----A---- C:\Windows\system32\sechost.dll
2015-05-13 08:39:53 ----A---- C:\Windows\system32\rstrui.exe
2015-05-13 08:39:53 ----A---- C:\Windows\system32\logman.exe
2015-05-13 08:39:53 ----A---- C:\Windows\system32\kerberos.dll
2015-05-13 08:39:52 ----A---- C:\Windows\system32\wdigest.dll
2015-05-13 08:39:52 ----A---- C:\Windows\system32\typeperf.exe
2015-05-13 08:39:52 ----A---- C:\Windows\system32\TSpkg.dll
2015-05-13 08:39:52 ----A---- C:\Windows\system32\smss.exe
2015-05-13 08:39:52 ----A---- C:\Windows\system32\relog.exe
2015-05-13 08:39:52 ----A---- C:\Windows\system32\ncrypt.dll
2015-05-13 08:39:52 ----A---- C:\Windows\system32\msv1_0.dll
2015-05-13 08:39:51 ----A---- C:\Windows\system32\sspicli.dll
2015-05-13 08:39:51 ----A---- C:\Windows\system32\srclient.dll
2015-05-13 08:39:51 ----A---- C:\Windows\system32\lsass.exe
2015-05-13 08:39:51 ----A---- C:\Windows\system32\diskperf.exe
2015-05-13 08:39:51 ----A---- C:\Windows\system32\csrsrv.dll
2015-05-13 08:39:51 ----A---- C:\Windows\system32\auditpol.exe
2015-05-13 08:39:50 ----A---- C:\Windows\system32\sspisrv.dll
2015-05-13 08:39:50 ----A---- C:\Windows\system32\secur32.dll
2015-05-13 08:39:50 ----A---- C:\Windows\system32\credssp.dll
2015-05-13 08:39:50 ----A---- C:\Windows\system32\apisetschema.dll
2015-05-13 08:39:49 ----A---- C:\Windows\system32\msobjs.dll
2015-05-13 08:39:49 ----A---- C:\Windows\system32\msaudite.dll
2015-05-13 08:39:49 ----A---- C:\Windows\system32\adtschema.dll
2015-05-13 08:38:52 ----A---- C:\Windows\system32\FntCache.dll
2015-05-13 08:38:51 ----A---- C:\Windows\system32\win32k.sys
2015-05-13 08:38:51 ----A---- C:\Windows\system32\DWrite.dll
2015-05-13 08:38:46 ----A---- C:\Windows\system32\schannel.dll
2015-05-13 08:38:45 ----A---- C:\Windows\system32\certcli.dll
2015-05-13 08:38:39 ----A---- C:\Windows\system32\services.exe
2015-05-13 08:38:37 ----A---- C:\Windows\system32\JavaScriptCollectionAgent.dll
2015-05-13 08:38:37 ----A---- C:\Windows\system32\ieetwproxystub.dll
2015-05-13 08:38:37 ----A---- C:\Windows\system32\ieetwcollector.exe
2015-05-13 08:38:36 ----A---- C:\Windows\system32\MsSpellCheckingFacility.exe
2015-05-13 08:38:36 ----A---- C:\Windows\system32\iernonce.dll
2015-05-13 08:38:36 ----A---- C:\Windows\system32\iedkcs32.dll
2015-05-13 08:38:36 ----A---- C:\Windows\system32\ie4uinit.exe
2015-05-13 08:38:35 ----A---- C:\Windows\system32\urlmon.dll
2015-05-13 08:38:35 ----A---- C:\Windows\system32\jsproxy.dll
2015-05-13 08:38:34 ----A---- C:\Windows\system32\msfeeds.dll
2015-05-13 08:38:34 ----A---- C:\Windows\system32\jscript9diag.dll
2015-05-13 08:38:34 ----A---- C:\Windows\system32\ieUnatt.exe
2015-05-13 08:38:34 ----A---- C:\Windows\system32\ieapfltr.dll
2015-05-13 08:38:34 ----A---- C:\Windows\system32\dxtmsft.dll
2015-05-13 08:38:32 ----A---- C:\Windows\system32\msrating.dll
2015-05-13 08:38:32 ----A---- C:\Windows\system32\iesetup.dll
2015-05-13 08:38:31 ----A---- C:\Windows\system32\wininet.dll
2015-05-13 08:38:31 ----A---- C:\Windows\system32\ieetwcollectorres.dll
2015-05-13 08:38:30 ----A---- C:\Windows\system32\dxtrans.dll
2015-05-13 08:38:29 ----A---- C:\Windows\system32\ieui.dll
2015-05-13 08:38:29 ----A---- C:\Windows\system32\ieframe.dll
2015-05-13 08:38:27 ----A---- C:\Windows\system32\mshtmled.dll
2015-05-13 08:38:26 ----A---- C:\Windows\system32\mshtmlmedia.dll
2015-05-13 08:38:26 ----A---- C:\Windows\system32\MshtmlDac.dll
2015-05-13 08:38:26 ----A---- C:\Windows\system32\iertutil.dll
2015-05-13 08:38:24 ----A---- C:\Windows\system32\mshtml.dll
2015-05-13 08:38:23 ----A---- C:\Windows\system32\jscript9.dll
2015-05-13 08:38:23 ----A---- C:\Windows\system32\jscript.dll
2015-05-13 08:38:22 ----A---- C:\Windows\system32\vbscript.dll
2015-05-13 08:37:44 ----A---- C:\Windows\system32\shimeng.dll
2015-05-13 08:37:44 ----A---- C:\Windows\system32\sdbinst.exe
2015-05-13 08:37:44 ----A---- C:\Windows\system32\apphelp.dll
2015-05-13 08:37:44 ----A---- C:\Windows\system32\aelupsvc.dll
2015-05-13 08:37:31 ----A---- C:\Windows\system32\poqexec.exe

======List of files/folders modified in the last 1 month======

2015-05-16 21:48:29 ----D---- C:\Windows\Prefetch
2015-05-16 21:48:13 ----RD---- C:\Program Files
2015-05-16 21:47:53 ----D---- C:\Windows\Temp
2015-05-16 21:45:47 ----D---- C:\Windows\System32
2015-05-16 21:45:47 ----A---- C:\Windows\system32\PerfStringBackup.INI
2015-05-16 21:45:46 ----D---- C:\Windows\inf
2015-05-16 21:42:14 ----D---- C:\Windows\system32\Tasks
2015-05-16 15:23:28 ----D---- C:\Windows\system32\config
2015-05-16 15:22:46 ----D---- C:\Windows\rescache
2015-05-16 11:59:33 ----D---- C:\Windows\Microsoft.NET
2015-05-16 11:55:44 ----RSD---- C:\Windows\assembly
2015-05-16 10:59:34 ----D---- C:\Windows\winsxs
2015-05-16 10:58:29 ----D---- C:\Program Files\Microsoft Silverlight
2015-05-16 10:57:19 ----D---- C:\Windows\system32\catroot
2015-05-16 10:56:42 ----D---- C:\Windows\system32\cs-CZ
2015-05-16 10:56:41 ----D---- C:\Windows\system32\drivers
2015-05-16 10:56:41 ----D---- C:\Windows\system32\AdvancedInstallers
2015-05-16 10:56:39 ----D---- C:\Windows\system32\en-US
2015-05-16 10:56:38 ----D---- C:\Program Files\Internet Explorer
2015-05-16 10:56:37 ----D---- C:\Windows\AppPatch
2015-05-16 10:56:31 ----D---- C:\Windows\system32\DriverStore
2015-05-16 10:56:30 ----D---- C:\Windows\system32\drivers\UMDF
2015-05-16 10:40:33 ----SHD---- C:\Windows\Installer
2015-05-16 10:40:24 ----D---- C:\ProgramData\Microsoft Help
2015-05-16 10:39:14 ----D---- C:\Windows
2015-05-16 10:39:10 ----D---- C:\Program Files\Microsoft Security Client
2015-05-16 10:35:10 ----D---- C:\Windows\system32\MRT
2015-05-16 10:30:10 ----A---- C:\Windows\system32\MRT.exe
2015-05-16 08:31:38 ----SHD---- C:\System Volume Information
2015-05-13 08:35:48 ----D---- C:\Windows\system32\catroot2
2015-04-19 17:38:40 ----D---- C:\Windows\AppCompat
2015-04-19 07:26:33 ----SD---- C:\Windows\system32\CompatTel
2015-04-19 07:26:32 ----D---- C:\Windows\system32\wbem
2015-04-19 07:26:32 ----D---- C:\Windows\system32\appraiser
2015-04-19 06:15:21 ----A---- C:\Windows\win.ini

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 MpFilter;Microsoft Malware Protection Driver; C:\Windows\system32\DRIVERS\MpFilter.sys [2015-03-04 245096]
R0 rdyboost;ReadyBoost; C:\Windows\System32\drivers\rdyboost.sys [2010-11-20 173440]
R1 CSC;@%systemroot%\system32\cscsvc.dll,-202; C:\Windows\system32\drivers\csc.sys [2010-11-20 388096]
R1 vwififlt;Virtual WiFi Filter Driver; C:\Windows\system32\DRIVERS\vwififlt.sys [2009-07-14 48128]
R2 NisDrv;Microsoft Network Inspection System; C:\Windows\system32\DRIVERS\NisDrvWFP.sys [2015-03-04 95408]
R3 AgereSoftModem;Agere Systems Soft Modem; C:\Windows\system32\DRIVERS\AGRSM.sys [2010-01-26 1163328]
R3 BthEnum;Ovladač pro Bluetooth Request Block; C:\Windows\system32\drivers\BthEnum.sys [2009-07-14 34816]
R3 BthPan;Zařízení Bluetooth (síť PAN); C:\Windows\system32\DRIVERS\bthpan.sys [2009-07-14 93696]
R3 BTHUSB;Ovladač rozhraní USB radiostanice Bluetooth; C:\Windows\System32\Drivers\BTHUSB.sys [2011-04-28 60416]
R3 huawei_enumerator;huawei_enumerator; C:\Windows\system32\DRIVERS\ew_jubusenum.sys [2012-03-16 73984]
R3 igfx;igfx; C:\Windows\system32\DRIVERS\igdkmd32.sys [2011-02-11 9036800]
R3 netr28;Ralink 802.11n Extensible Wireless Driver; C:\Windows\system32\DRIVERS\netr28.sys [2012-12-06 2046560]
R3 RFCOMM;Zařízení Bluetooth (RFCOMM protokol TDI); C:\Windows\system32\DRIVERS\rfcomm.sys [2009-07-14 129536]
R3 RTL8167;Realtek 8167 NT Driver; C:\Windows\system32\DRIVERS\Rt86win7.sys [2011-06-10 394856]
R3 SynTP;Synaptics TouchPad Driver; C:\Windows\system32\DRIVERS\SynTP.sys [2010-06-04 1303728]
S1 MpKsl1a2d5584;MpKsl1a2d5584; \??\c:\ProgramData\Microsoft\Microsoft Antimalware\Definition Updates\{759479E9-0E20-48FF-B17E-BE62DEBBACE9}\MpKsl1a2d5584.sys []
S2 Parvdm;Parvdm; C:\Windows\system32\drivers\parvdm.sys [2009-07-14 8704]
S3 aic78xx;aic78xx; C:\Windows\system32\drivers\djsvs.sys [2009-07-14 70720]
S3 amdagp;AMD AGP Bus Filter Driver; C:\Windows\system32\drivers\amdagp.sys [2009-07-14 53312]
S3 b57nd60x;Broadcom NetXtreme Gigabit Ethernet - NDIS 6.0; C:\Windows\system32\DRIVERS\b57nd60x.sys [2009-07-14 229888]
S3 BTHPORT;Ovladač portu Bluetooth; C:\Windows\System32\Drivers\BTHport.sys [2012-07-06 393728]
S3 dmvsc;dmvsc; C:\Windows\system32\drivers\dmvsc.sys [2010-11-20 62464]
S3 ew_hwusbdev;Huawei MobileBroadband USB PNP Device; C:\Windows\system32\DRIVERS\ew_hwusbdev.sys [2012-03-16 102784]
S3 ew_usbenumfilter;huawei_CompositeFilter; C:\Windows\system32\DRIVERS\ew_usbenumfilter.sys [2012-03-16 11136]
S3 huawei_cdcacm;huawei_cdcacm; C:\Windows\system32\DRIVERS\ew_jucdcacm.sys [2012-03-16 89856]
S3 huawei_ext_ctrl;huawei_ext_ctrl; C:\Windows\system32\DRIVERS\ew_juextctrl.sys [2012-03-16 26624]
S3 huawei_wwanecm;huawei_wwanecm; C:\Windows\system32\DRIVERS\ew_juwwanecm.sys [2012-03-16 193536]
S3 pciide;pciide; C:\Windows\system32\drivers\pciide.sys [2009-07-14 12368]
S3 RDPDR;Terminal Server Device Redirector Driver; C:\Windows\System32\drivers\rdpdr.sys [2010-11-20 133632]
S3 RdpVideoMiniport;Remote Desktop Video Miniport Driver; C:\Windows\System32\drivers\rdpvideominiport.sys [2012-08-23 14848]
S3 s3cap;s3cap; C:\Windows\system32\drivers\vms3cap.sys [2010-11-20 5632]
S3 sisagp;SIS AGP Bus Filter; C:\Windows\system32\drivers\sisagp.sys [2009-07-14 52304]
S3 storvsc;storvsc; C:\Windows\system32\drivers\storvsc.sys [2010-11-20 28032]
S3 TsUsbFlt;@%SystemRoot%\system32\drivers\tsusbflt.sys,-1; C:\Windows\System32\drivers\tsusbflt.sys [2013-10-02 49152]
S3 TsUsbGD;Remote Desktop Generic USB Device; C:\Windows\system32\drivers\TsUsbGD.sys [2012-08-23 27136]
S3 viaagp;VIA AGP Bus Filter; C:\Windows\system32\drivers\viaagp.sys [2009-07-14 53328]
S3 ViaC7;VIA C7 Processor Driver; C:\Windows\system32\drivers\viac7.sys [2009-07-14 52736]
S3 vmbus;vmbus; C:\Windows\system32\drivers\vmbus.sys [2010-11-20 175360]
S3 VMBusHID;VMBusHID; C:\Windows\system32\drivers\VMBusHID.sys [2010-11-20 17920]
S3 WinUsb;WinUsb; C:\Windows\system32\drivers\WinUsb.sys [2010-11-20 35968]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 AdobeARMservice;Adobe Acrobat Update Service; C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe [2014-12-19 81088]
R2 AgereModemAudio;Agere Modem Call Progress Audio; C:\Program Files\LSI SoftModem\agrsmsvc.exe [2009-12-03 26112]
R2 CscService;@%systemroot%\system32\cscsvc.dll,-200; C:\Windows\System32\svchost.exe [2009-07-14 20992]
R2 DiagTrack;@%SystemRoot%\system32\UtcResources.dll,-3001; C:\Windows\System32\svchost.exe [2009-07-14 20992]
R2 MsMpSvc;Microsoft Antimalware Service; c:\Program Files\Microsoft Security Client\MsMpEng.exe [2015-04-30 22216]
R2 wlidsvc;Windows Live ID Sign-in Assistant; C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE [2012-07-17 1713904]
R3 NisSrv;@C:\Program Files\Microsoft Security Client\MpAsDesc.dll,-243; c:\Program Files\Microsoft Security Client\NisSrv.exe [2015-04-30 284504]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2014-04-12 103608]
S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service; C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2015-04-16 268464]
S3 AppMgmt;@appmgmts.dll,-3250; C:\Windows\system32\svchost.exe [2009-07-14 20992]
S3 IEEtwCollectorService;@%SystemRoot%\system32\ieetwcollectorres.dll,-1000; C:\Windows\system32\IEEtwCollector.exe [2015-04-21 102912]
S3 ose;Office Source Engine; C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2010-01-09 149352]
S3 osppsvc;Office Software Protection Platform; C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE [2010-01-09 4640000]
S3 PeerDistSvc;@%SystemRoot%\system32\peerdistsvc.dll,-9000; C:\Windows\System32\svchost.exe [2009-07-14 20992]
S3 StorSvc;@%SystemRoot%\System32\StorSvc.dll,-100; C:\Windows\System32\svchost.exe [2009-07-14 20992]
S3 UmRdpService;@%SystemRoot%\system32\umrdp.dll,-1000; C:\Windows\System32\svchost.exe [2009-07-14 20992]
S3 WatAdminSvc;@%SystemRoot%\system32\Wat\WatUX.exe,-601; C:\Windows\system32\Wat\WatAdminSvc.exe [2014-01-30 1343400]
S4 aspnet_state;Stavová služba ASP.NET; C:\Windows\Microsoft.NET\Framework\v4.0.30319\aspnet_state.exe [2014-04-12 45744]
S4 NetMsmqActivator;@C:\Windows\Microsoft.NET\Framework\v4.0.30319\\ServiceModelInstallRC.dll,-8195; C:\Windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe [2014-04-12 139944]
S4 NetPipeActivator;@C:\Windows\Microsoft.NET\Framework\v4.0.30319\\ServiceModelInstallRC.dll,-8197; C:\Windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe [2014-04-12 139944]
S4 NetTcpActivator;@C:\Windows\Microsoft.NET\Framework\v4.0.30319\\ServiceModelInstallRC.dll,-8199; C:\Windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe [2014-04-12 139944]

-----------------EOF-----------------

Zdravim

Minule jste kontrolu nedokoncil, doufam, ze tentokrat to dotahnete az do konce. Jinak bude dalsi pripadna zadost ignorovana

Stahnete crystal disk info http://sourceforge.jp/projects/crystald ... 5_0_0.zip/
Spustte jako spravce. Za chvili se zobrazi vysledek.
Kliknete nahore na napis Úpravy a pak na napis Kopírovat. To co se zkopiruje (ulozi se to do pameti) mi sem vlozte (ctrl + V)

Stahnete AdwCleaner https://toolslib.net/downloads/finish/1/ a ulozte ho na plochu.
Ukoncete vsechny programy, jinak to AdwCleaner udela za vas.
Kliknete na nej pravym mysidlem a levym na Spustit jako spravce.
Kliknete na Scan a pockejte, az kontrola dobehne.
Pak kliknete na Cleaning
Program zacne pracovat (muze dojit k restartu pc) a vyplivne log (pripadne bude zde C:\AdwCleaner\AdwCleaner [S?].txt ). Ten mi sem zkopirujte.

Omlouvám se Vám, přeinstaloval jsem nakonec pc.

----------------------------------------------------------------------------
CrystalDiskInfo 5.0.0 (C) 2008-2012 hiyohiyo
Crystal Dew World : http://crystalmark.info/
----------------------------------------------------------------------------

OS : Windows 7 Professional SP1 [6.1 Build 7601] (x86)
Date : 2015/05/24 14:32:39

-- Controller Map ----------------------------------------------------------
+ Standardní řadič AHCI 1.0 s rozhraním Serial ATA [ATA]
+ ATA Channel 0 (0)
- ST9320325AS ATA Device
+ ATA Channel 1 (1)
- hp CDDVDW TS-L633N ATA Device
- ATA Channel 5 (5)

-- Disk List ---------------------------------------------------------------
(1) ST9320325AS : 320,0 GB [0/0/0, pd1] - st

----------------------------------------------------------------------------
(1) ST9320325AS
----------------------------------------------------------------------------
Model : ST9320325AS
Firmware : 0005HPM1
Serial Number : 6VEE5G1P
Disk Size : 320,0 GB (8,4/137,4/320,0)
Buffer Size : 8192 KB
Queue Depth : 32
# of Sectors : 625142448
Rotation Rate : 5400 RPM
Interface : Serial ATA
Major Version : ATA8-ACS
Minor Version : ATA8-ACS version 4
Transfer Mode : SATA/300
Power On Hours : 6605 hod.
Power On Count : 6349 krát
Temparature : 30 C (86 F)
Health Status : Dobrý
Features : S.M.A.R.T., APM, 48bit LBA, NCQ
APM Level : 8080h [ON]
AAM Level : ----

-- S.M.A.R.T. --------------------------------------------------------------
ID Cur Wor Thr RawValues(6) Attribute Name
01 117 _99 __6 000007C9E979 Počet chyb čtení
03 _98 _98 __0 000000000000 Čas na roztočení ploten
04 _93 _93 __0 000000001F62 Počet spuštění/zastavení
05 100 100 _36 000000000000 Počet přemapovaných sektorů
07 _81 _60 _30 0000073A8E07 Počet chybných hledání
09 _93 _93 __0 0000000019CD Hodin v činnosti
0A 100 100 _97 000000000000 Počet opakovaných pokusů o roztočení ploten
0C _94 _94 _20 0000000018CD Počet cyklů zapnutí zařízení
B7 100 253 __0 000000000000 Neznámý
B8 100 100 _97 000000000000 Ukončovacích chyb
BB 100 100 __0 000000000000 Ohlášeno neopravitelných chyb
BC 100 _99 __0 000100010002 Časový limit příkazu
BD 100 100 __0 000000000000 Vysoká rychlost zápisu
BE _70 _56 _45 00001E19001E Teplota toku vzduchu
BF 100 100 __0 000000000197 Počet udalostí zaznamenaných otřesovým senzorem
C0 100 100 __0 000000000003 Počet vypnutí disku
C1 __1 __1 __0 000000031F92 Počet cyklů načítání/vymazání
C2 _30 _44 __0 00090000001E Teplota
C3 _44 _37 __0 000007C9E979 Počet oprav chybného čtení
C4 100 100 _36 000000000000 Počet udalostí s číslem realokování sektorů
C5 100 100 __0 000000000000 Počet podezřelých sektorů
C6 100 100 __0 000000000000 Počet neopravitelných sektorů
C7 200 200 __0 000000000001 Počet chyb v kontrolním součtu UltraDMA

-- IDENTIFY_DEVICE ---------------------------------------------------------
0 1 2 3 4 5 6 7 8 9
000: 0C5A 3FFF C837 0010 0000 003F 003F 0000 0000 0000
010: 3656 4545 3547 3150 2020 2020 2020 2020 2020 2020
020: 0000 4000 0004 3030 3035 4D31 4D31 5354 3933 3230
030: 3332 3541 5320 2020 2020 2020 2020 2020 2020 2020
040: 2020 2020 2020 2020 2020 2020 2020 8010 0000 2F00
050: 4000 0200 0200 0007 3FFF 003F 003F FC10 00FB 0110
060: FFFF 0FFF 0000 0407 0003 0078 0078 0078 0078 0000
070: 0000 0000 0000 0000 0000 0D06 0D06 0000 004C 0040
080: 01F8 0029 306B 7C09 6123 BC09 BC09 6123 003F 002F
090: 002F 8080 FFFE 0000 0000 0000 0000 0000 0000 0000
100: EAB0 2542 0000 0000 0000 0000 0000 0000 5000 C500
110: 2B68 5397 0000 0000 0000 0000 0000 0000 0000 401C
120: 401C 0000 0000 0000 0000 0000 0000 0000 0029 EAB0
130: 2542 EAB0 2542 2020 0002 0108 0108 5000 3C06 3C0A
140: 0000 0078 0000 0008 0000 001F 001F 0280 0000 0000
150: 0008 0000 0000 0000 0000 0000 0000 0000 3C00 8000
160: 0000 0000 0000 0000 0000 0000 0000 0000 0003 0000
170: 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000
180: 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000
190: 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000
200: 0000 0000 0000 0000 0000 103F 103F 0000 0000 0000
210: 0000 0000 0000 0000 0000 0000 0000 1518 0000 0000
220: 0000 0000 1010 0000 0000 0000 0000 0000 0000 0000
230: 0000 0000 0000 0000 0001 0000 0000 0000 0000 0000
240: 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000
250: 0000 0000 0000 0000 0000 ECA5

# AdwCleaner v4.205 - Log vytvořen 24/05/2015 v 14:36:45
# Aktualizováno 21/05/2015 by Xplode
# Databáze : 2015-05-21.2 [Server]
# Operační system : Windows 7 Professional Service Pack 1 (x86)
# Uživatelské jméno : pc - SABINA_PC
# Spuštěno z : C:\Users\pc\Desktop\adwcleaner_4.205.exe
# Nastavení : Čištění

***** [ Služby ] *****

***** [ Soubory / Složky ] *****

Složka Smazáno : C:\ProgramData\Microsoft\Windows\Start Menu\Programs\FileViewPro
Složka Smazáno : C:\Program Files\FileViewPro
Složka Smazáno : C:\Users\pc\AppData\Local\FileViewPro
Složka Smazáno : C:\Users\pc\AppData\LocalLow\iac
Složka Smazáno : C:\Users\pc\AppData\Roaming\Solvusoft
Soubor Smazáno : C:\Users\Public\Desktop\WinThruster.lnk
Soubor Smazáno : C:\Windows\system32\roboot.exe
Soubor Smazáno : C:\Users\pc\AppData\Local\Temp\Uninstall.exe

***** [ Naplánované úlohy ] *****

Úloha Smazáno : WinThruster
Úloha Smazáno : WinThruster_DEFAULT
Úloha Smazáno : WinThruster_UPDATES

***** [ Zástupci ] *****

***** [ Registry ] *****

Klíč Smazáno : HKLM\SOFTWARE\Classes\APlusGamer_63.ToolbarProtector
Klíč Smazáno : HKLM\SOFTWARE\Classes\APlusGamer_63.ToolbarProtector.1
Klíč Smazáno : HKLM\SOFTWARE\Classes\CLSID\{DE9028D0-5FFA-4E69-94E3-89EE8741F468}
Klíč Smazáno : HKLM\SOFTWARE\Classes\CLSID\{E7DF6BFF-55A5-4EB7-A673-4ED3E9456D39}
Klíč Smazáno : HKLM\SOFTWARE\Classes\CLSID\{ca096e6e-2195-4e12-8b47-f5a15012bea0}
Klíč Smazáno : HKLM\SOFTWARE\Classes\TypeLib\{6be1a0b5-6514-42d3-9277-f515340ab057}
Klíč Smazáno : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{72f3e986-e70f-4892-a4b5-be26e9113529}
Klíč Smazáno : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{ae10260b-0469-4781-8e96-1c8c160fbd39}
Klíč Smazáno : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{70a02aa7-2f3f-41d4-97da-b9db0de80624}
Klíč Smazáno : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{95B7759C-8C7F-4BF1-B163-73684A933233}
Klíč Smazáno : HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{70a02aa7-2f3f-41d4-97da-b9db0de80624}
Klíč Smazáno : HKCU\Software\Solvusoft
Klíč Smazáno : HKLM\SOFTWARE\Solvusoft
Klíč Smazáno : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\WinThruster_is1
Klíč Smazáno : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\FileViewPro_is1
Klíč Smazáno : HKCU\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage\ask.com
Klíč Smazáno : HKCU\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage\icq.com
Klíč Smazáno : HKCU\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage\search.tb.ask.com
Klíč Smazáno : HKCU\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage\wlogin.icq.com

***** [ Prohlížeče ] *****

-\\ Internet Explorer v11.0.9600.17801

*************************

AdwCleaner[R0].txt - [2998 bytů] - [24/05/2015 14:34:47]
AdwCleaner[S0].txt - [2893 bytů] - [24/05/2015 14:36:45]

########## EOF - C:\AdwCleaner\AdwCleaner[S0].txt - [2951 bytů] ##########

mitfara píše:Omlouvám se Vám, přeinstaloval jsem nakonec pc.

Priste to napiste a no problemo

Disk hlasi spoustu chyb. I to muze byt pricina. Uvidime po docisteni.

Udelejte kontrolu s MBAM. Test nastavte podle tohoto navodu (cili Vlastni sken vsech disku) http://forum.viry.cz/viewtopic.php?f=29&t=137928 a dejte sem vysledky. Predem nic nemazte, miva obcas falesne detekce

Malwarebytes Anti-Malware
www.malwarebytes.org

Datum skenování: 25.5.2015
Čas skenování: 5:18:01
Protokol: log.txt
Správce: Ano

Verze: 2.01.6.1022
Databáze malwaru: v2015.05.24.03
Databáze rootkitů: v2015.05.16.01
Licence: Zkušební verze
Ochrana proti malwaru: Zapnuto
Ochrana proti škodlivým webovým stránkám: Zapnuto
Ochrana programu: Vypnuto

OS: Windows 7 Service Pack 1
CPU: x86
Souborový systém: NTFS
Uživatel: pc

Typ skenu: Sken hrozeb
Výsledek: Dokončeno
Prohledaných objektů: 302419
Uplynulý čas: 44 min, 27 sek

Paměť: Zapnuto
Po spuštění: Zapnuto
Souborový systém: Zapnuto
Archivy: Zapnuto
Rootkity: Vypnuto
Heuristika: Zapnuto
PUP: Zapnuto
PUM: Zapnuto

Procesy: 0
(Nenalezeny žádné škodlivé položky)

Moduly: 0
(Nenalezeny žádné škodlivé položky)

Klíče registru: 0
(Nenalezeny žádné škodlivé položky)

Hodnoty registru: 0
(Nenalezeny žádné škodlivé položky)

Data registru: 0
(Nenalezeny žádné škodlivé položky)

Složky: 0
(Nenalezeny žádné škodlivé položky)

Soubory: 3
PUP.Optional.Bitcoin, C:\Windows\System32\acumncnsoxcn.exe, , [c5ae6e293258fc3aa8af89f68c768d73],
Trojan.BitMiner, C:\Windows\System32\dcgmncnsoxcn.exe, , [650e23742f5b1c1aa1b195fb46bc60a0],
PUP.BitCoinMiner, C:\Windows\System32\lcpmncnsoxcn.exe, , [c6ad2770aae03df97d6361e1d1309769],

Fyzické sektory: 0
(Nenalezeny žádné škodlivé položky)

(end)

Nalezy nechte odstranit. Po restartu pc udelejte novy test, ale se spravnym nastavenim. Tohle byl jen Sken hrozeb, ten neprohlizi cely pocitac. Ja chtel Vlastni sken vsech disku.

vypnul se mi nb

, tak jsem nálezy nevymazal a hned udělal znovu vlastní sken. log máte níže

Malwarebytes Anti-Malware
www.malwarebytes.org

Datum skenování: 27.5.2015
Čas skenování: 7:11:39
Protokol: log.txt
Správce: Ano

Verze: 2.01.6.1022
Databáze malwaru: v2015.05.26.07
Databáze rootkitů: v2015.05.24.01
Licence: Zkušební verze
Ochrana proti malwaru: Zapnuto
Ochrana proti škodlivým webovým stránkám: Zapnuto
Ochrana programu: Vypnuto

OS: Windows 7 Service Pack 1
CPU: x86
Souborový systém: NTFS
Uživatel: pc

Typ skenu: Vlastní sken
Výsledek: Dokončeno
Prohledaných objektů: 611463
Uplynulý čas: 2 hod, 46 min, 9 sek

Paměť: Zapnuto
Po spuštění: Zapnuto
Souborový systém: Zapnuto
Archivy: Zapnuto
Rootkity: Vypnuto
Heuristika: Zapnuto
PUP: Zapnuto
PUM: Zapnuto

Procesy: 0
(Nenalezeny žádné škodlivé položky)

Moduly: 0
(Nenalezeny žádné škodlivé položky)

Klíče registru: 0
(Nenalezeny žádné škodlivé položky)

Hodnoty registru: 0
(Nenalezeny žádné škodlivé položky)

Data registru: 0
(Nenalezeny žádné škodlivé položky)

Složky: 0
(Nenalezeny žádné škodlivé položky)

Soubory: 3
PUP.Optional.Bitcoin, C:\Windows\System32\acumncnsoxcn.exe, , [f14e5147266438fe4cd5552c6c9606fa],
Trojan.BitMiner, C:\Windows\System32\dcgmncnsoxcn.exe, , [82bd96023b4f4fe7021aaee45ba701ff],
PUP.BitCoinMiner, C:\Windows\System32\lcpmncnsoxcn.exe, , [99a6d5c3e0aa171f1d221a29fb06bc44],

Fyzické sektory: 0
(Nenalezeny žádné škodlivé položky)

(end)

To jsou zas ti sami zmetci. Nalezy nechte odstranit.

Pokud nemate, zazalohujte si radeji dulezita data (fotky, dokumenty, atd.)

Nepouzivejte ComboFix bez predchozi domluvy! Je to poruseni pravidel fora a ztratite tim narok na pomoc!

Stahnete ComboFix http://download.bleepingcomputer.com/sUBs/ComboFix.exe a ulozte ho na plochu.
Vypnete antivir i dalsi pripadne zabezpeceni.
Kliknete na ComboFix pravym mysidlem a levym na Spustit jako spravce
Odsouhlaste licencni podminky a nechte program pracovat. Jestli vam nabidne instalaci Konzoly pro zotaveni, souhlaste.
Po dobu skenu nic nespoustejte, nikam neklikejte.
Po dokonceni skenovani (muze dojit i k restartu pc) by se mel vytvorit log, ktery bude umisteny zde C:\ComboFix.txt
Jeho obsah sem zkopirujte

Kdyby po restartu nenabehl windows, restartujte znovu, mackejte klavesu F8 a zvolte - Posledni znama funkcni konfigurace

Kdyz windows nabehne, ale pri spousteni ruznych programu bude hlasena chyba, staci restartovat pc a bude to v poradku

ComboFix 15-05-25.01 - pc 27.05.2015 20:15:48.1.2 - x86
Microsoft Windows 7 Professional 6.1.7601.1.1250.420.1029.18.1976.1205 [GMT 2:00]
Spuštěný z: c:\users\pc\Desktop\ComboFix.exe
AV: Microsoft Security Essentials *Disabled/Updated* {B7ECF8CD-0188-6703-DBA4-AA65C6ACFB0A}
SP: Microsoft Security Essentials *Disabled/Updated* {0C8D1929-27B2-688D-E114-9117BD2BB1B7}
SP: Windows Defender *Disabled/Outdated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
* Vytvořen nový Bod Obnovení
.
.
((((((((((((((((((((((((((((((((((((((( Ostatní výmazy )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
c:\users\pc\AppData\Local\Microsoft\Windows\Temporary Internet Files\{5A3D4732-846B-48EE-A18B-C151880875B2}.xps
c:\users\pc\AppData\Local\Microsoft\Windows\Temporary Internet Files\{E7B63767-ABF7-4A2B-9F93-E1AAB2F8B4E3}.xps
c:\users\pc\AppData\Local\Microsoft\Windows\Temporary Internet Files\{FC283E1D-29F8-4869-90A7-ADD7948D2886}.xps
c:\windows\msdownld.tmp
.
.
((((((((((((((((((((((((( Soubory vytvořené od 2015-04-27 do 2015-05-27 )))))))))))))))))))))))))))))))
.
.
2015-05-27 18:24 . 2015-05-27 18:24 -------- d-----w- c:\users\pc\AppData\Local\temp
2015-05-27 18:24 . 2015-05-27 18:24 -------- d-----w- c:\users\Default\AppData\Local\temp
2015-05-27 18:10 . 2015-05-27 18:10 39464 ----a-w- c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\{31EE79BE-5421-4D96-92F2-9B19B1CBF845}\MpKsl2ebdcbf3.sys
2015-05-26 18:41 . 2015-05-03 03:42 9265072 ----a-w- c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\{31EE79BE-5421-4D96-92F2-9B19B1CBF845}\mpengine.dll
2015-05-25 15:43 . 2015-03-27 05:10 908832 ----a-w- c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\{EFBD4819-A976-4B14-8DD2-924714C5B1B4}\gapaengine.dll
2015-05-25 15:28 . 2015-05-03 03:42 9265072 ----a-w- c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\Backup\mpengine.dll
2015-05-24 17:57 . 2015-05-27 16:58 119512 ----a-w- c:\windows\system32\drivers\MBAMSwissArmy.sys
2015-05-24 17:54 . 2015-04-14 07:37 51928 ----a-w- c:\windows\system32\drivers\mwac.sys
2015-05-24 17:54 . 2015-04-14 07:37 92888 ----a-w- c:\windows\system32\drivers\mbamchameleon.sys
2015-05-24 17:54 . 2015-04-14 07:37 23256 ----a-w- c:\windows\system32\drivers\mbam.sys
2015-05-24 17:54 . 2015-05-24 17:54 -------- d-----w- c:\program files\Malwarebytes Anti-Malware
2015-05-24 17:54 . 2015-05-24 17:54 -------- d-----w- c:\programdata\Malwarebytes
2015-05-24 12:34 . 2015-05-24 12:36 -------- d-----w- C:\AdwCleaner
2015-05-16 19:48 . 2015-05-16 19:49 -------- d-----w- C:\rsit
2015-05-16 19:48 . 2015-05-16 19:49 -------- d-----w- c:\program files\trend micro
2015-05-16 08:38 . 2015-05-01 13:16 102608 ----a-w- c:\windows\system32\PresentationCFFRasterizerNative_v0300.dll
2015-05-13 06:40 . 2015-01-29 03:02 2311168 ----a-w- c:\windows\system32\wpdshext.dll
2015-05-13 06:40 . 2015-01-29 03:02 844288 ----a-w- c:\windows\system32\drivers\UMDF\WpdMtpDr.dll
2015-05-13 06:38 . 2015-04-20 02:56 909312 ----a-w- c:\windows\system32\FntCache.dll
2015-05-13 06:37 . 2015-03-04 04:11 5120 ----a-w- c:\windows\system32\shimeng.dll
.
.
.
(((((((((((((((((((((((((((((((((((((((( Find3M výpis ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2015-05-24 12:45 . 2014-01-30 08:50 778416 ----a-w- c:\windows\system32\FlashPlayerApp.exe
2015-05-24 12:45 . 2014-01-30 08:50 142512 ----a-w- c:\windows\system32\FlashPlayerCPLApp.cpl
2015-05-05 01:12 . 2015-05-13 06:38 248832 ----a-w- c:\windows\system32\schannel.dll
2015-04-27 19:05 . 2015-05-13 06:39 92160 ----a-w- c:\windows\system32\sechost.dll
2015-04-14 01:38 . 2015-04-14 01:38 1217192 ----a-w- c:\windows\system32\FM20.DLL
2015-03-27 05:10 . 2014-02-18 16:55 908832 ----a-w- c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\NISBackup\gapaengine.dll
2015-03-25 03:00 . 2015-04-15 12:51 3088384 ----a-w- c:\windows\system32\wucltux.dll
2015-03-25 03:00 . 2015-04-15 12:51 92672 ----a-w- c:\windows\system32\wudriver.dll
2015-03-25 03:00 . 2015-04-15 12:51 566784 ----a-w- c:\windows\system32\wuapi.dll
2015-03-25 03:00 . 2015-04-15 12:51 35328 ----a-w- c:\windows\system32\wups2.dll
2015-03-25 03:00 . 2015-04-15 12:51 29696 ----a-w- c:\windows\system32\wups.dll
2015-03-25 03:00 . 2015-04-15 12:51 2020864 ----a-w- c:\windows\system32\wuaueng.dll
2015-03-25 03:00 . 2015-04-15 12:51 173056 ----a-w- c:\windows\system32\wuwebv.dll
2015-03-25 03:00 . 2015-04-15 12:51 50176 ----a-w- c:\windows\system32\WinSetupUI.dll
2015-03-25 03:00 . 2015-04-15 12:51 11776 ----a-w- c:\windows\system32\wu.upgrade.ps.dll
2015-03-25 03:00 . 2015-04-15 12:51 33792 ----a-w- c:\windows\system32\wuapp.exe
2015-03-25 03:00 . 2015-04-15 12:51 131584 ----a-w- c:\windows\system32\wuauclt.exe
2015-03-23 03:06 . 2015-04-15 12:53 576000 ----a-w- c:\windows\system32\generaltel.dll
2015-03-23 03:06 . 2015-04-15 12:53 630784 ----a-w- c:\windows\system32\invagent.dll
2015-03-23 03:06 . 2015-04-15 12:53 331264 ----a-w- c:\windows\system32\devinv.dll
2015-03-23 03:06 . 2015-04-15 12:53 860160 ----a-w- c:\windows\system32\appraiser.dll
2015-03-23 03:06 . 2015-04-15 12:53 26112 ----a-w- c:\windows\system32\acmigration.dll
2015-03-23 03:06 . 2015-04-15 12:53 202752 ----a-w- c:\windows\system32\aepdu.dll
2015-03-23 03:06 . 2015-04-15 12:53 159744 ----a-w- c:\windows\system32\aepic.dll
2015-03-23 02:59 . 2015-04-15 12:53 896000 ----a-w- c:\windows\system32\aeinv.dll
2015-03-10 03:08 . 2015-04-15 12:50 1237504 ----a-w- c:\windows\system32\msxml3.dll
2015-03-10 03:05 . 2015-04-15 12:50 2048 ----a-w- c:\windows\system32\msxml3r.dll
2015-03-05 04:06 . 2015-04-15 12:53 305152 ----a-w- c:\windows\system32\gdi32.dll
2015-03-04 17:34 . 2015-03-04 17:34 245096 ----a-w- c:\windows\system32\drivers\MpFilter.sys
2015-03-04 17:34 . 2013-09-27 08:53 95408 ----a-w- c:\windows\system32\drivers\NisDrvWFP.sys
2015-03-04 04:16 . 2015-04-15 12:53 249784 ----a-w- c:\windows\system32\clfs.sys
2015-03-04 04:10 . 2015-04-15 12:53 58880 ----a-w- c:\windows\system32\clfsw32.dll
2015-03-04 04:10 . 2015-05-13 06:37 470528 ----a-w- c:\windows\apppatch\AcSpecfc.dll
2015-03-04 04:10 . 2015-05-13 06:37 2178560 ----a-w- c:\windows\apppatch\AcGenral.dll
2015-03-04 04:06 . 2015-05-13 06:37 2560 ----a-w- c:\windows\apppatch\AcRes.dll
2015-03-03 13:16 . 2014-01-30 12:28 246920 ------w- c:\windows\system32\MpSigStub.exe
.
.
(((((((((((((((((((((((((((((((((( Spouštěcí body v registru )))))))))))))))))))))))))))))))))))))))))))))
.
.
*Poznámka* prázdné záznamy a legitimní výchozí údaje nejsou zobrazeny.
REGEDIT4
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"IgfxTray"="c:\windows\system32\igfxtray.exe" [2011-02-11 137752]
"HotKeysCmds"="c:\windows\system32\hkcmd.exe" [2011-02-11 171032]
"Persistence"="c:\windows\system32\igfxpers.exe" [2011-02-11 172568]
"SynTPEnh"="c:\program files\Synaptics\SynTP\SynTPEnh.exe" [2010-06-04 1791272]
"MSC"="c:\program files\Microsoft Security Client\msseces.exe" [2015-04-29 981688]
"Adobe ARM"="c:\program files\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2014-12-19 1022152]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorAdmin"= 5 (0x5)
"ConsentPromptBehaviorUser"= 3 (0x3)
"EnableUIADesktopToggle"= 0 (0x0)
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MsMpSvc]
@="Service"
.
R2 MBAMService;MBAMService;c:\program files\Malwarebytes Anti-Malware\mbamservice.exe [2015-04-14 1080120]
R3 dmvsc;dmvsc;c:\windows\system32\drivers\dmvsc.sys [2010-11-20 62464]
R3 ew_hwusbdev;Huawei MobileBroadband USB PNP Device;c:\windows\system32\DRIVERS\ew_hwusbdev.sys [2012-03-16 102784]
R3 ew_usbenumfilter;huawei_CompositeFilter;c:\windows\system32\DRIVERS\ew_usbenumfilter.sys [2012-03-16 11136]
R3 huawei_cdcacm;huawei_cdcacm;c:\windows\system32\DRIVERS\ew_jucdcacm.sys [2012-03-16 89856]
R3 huawei_ext_ctrl;huawei_ext_ctrl;c:\windows\system32\DRIVERS\ew_juextctrl.sys [2012-03-16 26624]
R3 huawei_wwanecm;huawei_wwanecm;c:\windows\system32\DRIVERS\ew_juwwanecm.sys [2012-03-16 193536]
R3 IEEtwCollectorService;Internet Explorer ETW Collector Service;c:\windows\system32\IEEtwCollector.exe [2015-04-21 102912]
R3 MBAMProtector;MBAMProtector;c:\windows\system32\drivers\mbam.sys [2015-04-14 23256]
R3 MBAMWebAccessControl;MBAMWebAccessControl;c:\windows\system32\drivers\mwac.sys [2015-04-14 51928]
S2 DiagTrack;Diagnostics Tracking Service;c:\windows\System32\svchost.exe [2009-07-14 20992]
S3 huawei_enumerator;huawei_enumerator;c:\windows\system32\DRIVERS\ew_jubusenum.sys [2012-03-16 73984]
.
.
--- Ostatní služby/ovladače v paměti ---
.
*NewlyCreated* - MPKSL2EBDCBF3
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost]
utcsvc REG_MULTI_SZ DiagTrack
.
Obsah adresáře 'Naplánované úlohy'
.
2015-05-27 c:\windows\Tasks\Adobe Flash Player Updater.job
- c:\windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2014-01-30 12:45]
.
.
------- Doplňkový sken -------
.
uStart Page = hxxp://www.seznam.cz/
IE: E&xportovat do aplikace Microsoft Excel - c:\progra~1\MICROS~1\Office14\EXCEL.EXE/3000
IE: Od&eslat do aplikace OneNote - c:\progra~1\MICROS~1\Office14\ONBttnIE.dll/105
TCP: DhcpNameServer = 217.196.209.2 192.168.2.1
TCP: Interfaces\{2E9417B4-3734-4B4D-AF76-A756A1C1A416}: NameServer = 217.77.165.81 217.77.161.131
TCP: Interfaces\{CC47DE53-6297-45A5-8ADD-3309B404E7BB}: NameServer = 217.77.165.81 217.77.161.131
.
- - - - NEPLATNÉ POLOŽKY ODSTRANĚNÉ Z REGISTRU - - - -
.
AddRemove-LSI Soft Modem - c:\windows\agrsmdel
AddRemove-SLABCOMM&10C4&EA60 - c:\program files\Silabs\MCU\CP210x\DriverUninstaller.exe VCP CP210x Cardinal\SLABCOMM&10C4&EA60
.
.
.
--------------------- ZAMKNUTÉ KLÍČE V REGISTRU ---------------------
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0000\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
"MSCurrentCountry"=dword:000000b5
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0001\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0002\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\PCW\Security]
@Denied: (Full) (Everyone)
.
Celkový čas: 2015-05-27 20:27:02
ComboFix-quarantined-files.txt 2015-05-27 18:27
.
Před spuštěním: Volných bajtů: 79 361 171 456
Po spuštění: Volných bajtů: 81 011 220 480
.
- - End Of File - - 93C123B1B4E5131624530131958A62D9
A36C5E4F47E84449FF07ED3517B43A31

Otevrete si poznamkovy blok a zkopirujte do nej tento skript

Kód: Vybrat vše

KillAll::

File::
C:\Windows\System32\acumncnsoxcn.exe
C:\Windows\System32\dcgmncnsoxcn.exe
C:\Windows\System32\lcpmncnsoxcn.exe

Registry::
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Adobe ARM"=-

RegLock::
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0000\AllUserSettings]
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0001\AllUserSettings]
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0002\AllUserSettings]
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\PCW\Security]

Reboot::

Vlevo nahore kliknete na napis Soubor
Kliknete na napis Ulozit jako...
Napiste spravne ten cerveny nazev CFScript a ulozte na plochu.
Vypnete antivir i dalsi pripadne zabezpeceni.
Pretahntete mysi tento vytvoreny textovy dokument nad ikonu ComboFix a pustte.
ComboFix by se mel spustit a vykonat prikazy.
Az skonci (muze dojit k restartu pc), mel by se objevit novy log, ten mi sem zase zkopirujte.

Kdyby po restartu nenabehl windows, restartujte znovu, mackejte klavesu F8 a zvolte - Posledni znama funkcni konfigurace

Kdyz windows nabehne, ale pri spousteni ruznych programu bude hlasena chyba, staci restartovat pc a bude to v poradku

ComboFix 15-05-25.01 - pc 28.05.2015 21:14:36.2.2 - x86
Microsoft Windows 7 Professional 6.1.7601.1.1250.420.1029.18.1976.1234 [GMT 2:00]
Spuštěný z: c:\users\pc\Desktop\ComboFix.exe
Použité ovládací přepínače :: c:\users\pc\Desktop\CFScript.txt
AV: Microsoft Security Essentials *Disabled/Updated* {B7ECF8CD-0188-6703-DBA4-AA65C6ACFB0A}
SP: Microsoft Security Essentials *Disabled/Updated* {0C8D1929-27B2-688D-E114-9117BD2BB1B7}
SP: Windows Defender *Disabled/Outdated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.
FILE ::
"c:\windows\System32\acumncnsoxcn.exe"
"c:\windows\System32\dcgmncnsoxcn.exe"
"c:\windows\System32\lcpmncnsoxcn.exe"
.
.
((((((((((((((((((((((((( Soubory vytvořené od 2015-04-28 do 2015-05-28 )))))))))))))))))))))))))))))))
.
.
2015-05-28 19:23 . 2015-05-28 19:23 -------- d-----w- c:\users\Default\AppData\Local\temp
2015-05-28 19:12 . 2015-05-28 19:12 -------- d-----w- c:\users\pc\AppData\Roaming\Solvusoft
2015-05-28 05:11 . 2015-05-03 03:42 9265072 ----a-w- c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\{15C40FA3-4A11-47C7-9ABC-5BAA7717934D}\mpengine.dll
2015-05-27 18:27 . 2015-05-28 19:25 -------- d-----w- c:\users\pc\AppData\Local\temp
2015-05-26 18:41 . 2015-05-03 03:42 9265072 ----a-w- c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\Backup\mpengine.dll
2015-05-25 15:43 . 2015-03-27 05:10 908832 ----a-w- c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\{EFBD4819-A976-4B14-8DD2-924714C5B1B4}\gapaengine.dll
2015-05-24 17:57 . 2015-05-28 19:25 119512 ----a-w- c:\windows\system32\drivers\MBAMSwissArmy.sys
2015-05-24 17:54 . 2015-04-14 07:37 51928 ----a-w- c:\windows\system32\drivers\mwac.sys
2015-05-24 17:54 . 2015-04-14 07:37 92888 ----a-w- c:\windows\system32\drivers\mbamchameleon.sys
2015-05-24 17:54 . 2015-04-14 07:37 23256 ----a-w- c:\windows\system32\drivers\mbam.sys
2015-05-24 17:54 . 2015-05-24 17:54 -------- d-----w- c:\program files\Malwarebytes Anti-Malware
2015-05-24 17:54 . 2015-05-24 17:54 -------- d-----w- c:\programdata\Malwarebytes
2015-05-24 12:34 . 2015-05-24 12:36 -------- d-----w- C:\AdwCleaner
2015-05-16 19:48 . 2015-05-16 19:49 -------- d-----w- C:\rsit
2015-05-16 19:48 . 2015-05-16 19:49 -------- d-----w- c:\program files\trend micro
2015-05-16 08:38 . 2015-05-01 13:16 102608 ----a-w- c:\windows\system32\PresentationCFFRasterizerNative_v0300.dll
2015-05-13 06:40 . 2015-01-29 03:02 2311168 ----a-w- c:\windows\system32\wpdshext.dll
2015-05-13 06:40 . 2015-01-29 03:02 844288 ----a-w- c:\windows\system32\drivers\UMDF\WpdMtpDr.dll
2015-05-13 06:38 . 2015-04-20 02:56 909312 ----a-w- c:\windows\system32\FntCache.dll
2015-05-13 06:37 . 2015-03-04 04:11 5120 ----a-w- c:\windows\system32\shimeng.dll
.
.
.
(((((((((((((((((((((((((((((((((((((((( Find3M výpis ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2015-05-24 12:45 . 2014-01-30 08:50 778416 ----a-w- c:\windows\system32\FlashPlayerApp.exe
2015-05-24 12:45 . 2014-01-30 08:50 142512 ----a-w- c:\windows\system32\FlashPlayerCPLApp.cpl
2015-05-05 01:12 . 2015-05-13 06:38 248832 ----a-w- c:\windows\system32\schannel.dll
2015-04-27 19:05 . 2015-05-13 06:39 92160 ----a-w- c:\windows\system32\sechost.dll
2015-04-14 01:38 . 2015-04-14 01:38 1217192 ----a-w- c:\windows\system32\FM20.DLL
2015-03-27 05:10 . 2014-02-18 16:55 908832 ----a-w- c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\NISBackup\gapaengine.dll
2015-03-25 03:00 . 2015-04-15 12:51 3088384 ----a-w- c:\windows\system32\wucltux.dll
2015-03-25 03:00 . 2015-04-15 12:51 92672 ----a-w- c:\windows\system32\wudriver.dll
2015-03-25 03:00 . 2015-04-15 12:51 566784 ----a-w- c:\windows\system32\wuapi.dll
2015-03-25 03:00 . 2015-04-15 12:51 35328 ----a-w- c:\windows\system32\wups2.dll
2015-03-25 03:00 . 2015-04-15 12:51 29696 ----a-w- c:\windows\system32\wups.dll
2015-03-25 03:00 . 2015-04-15 12:51 2020864 ----a-w- c:\windows\system32\wuaueng.dll
2015-03-25 03:00 . 2015-04-15 12:51 173056 ----a-w- c:\windows\system32\wuwebv.dll
2015-03-25 03:00 . 2015-04-15 12:51 50176 ----a-w- c:\windows\system32\WinSetupUI.dll
2015-03-25 03:00 . 2015-04-15 12:51 11776 ----a-w- c:\windows\system32\wu.upgrade.ps.dll
2015-03-25 03:00 . 2015-04-15 12:51 33792 ----a-w- c:\windows\system32\wuapp.exe
2015-03-25 03:00 . 2015-04-15 12:51 131584 ----a-w- c:\windows\system32\wuauclt.exe
2015-03-23 03:06 . 2015-04-15 12:53 576000 ----a-w- c:\windows\system32\generaltel.dll
2015-03-23 03:06 . 2015-04-15 12:53 630784 ----a-w- c:\windows\system32\invagent.dll
2015-03-23 03:06 . 2015-04-15 12:53 331264 ----a-w- c:\windows\system32\devinv.dll
2015-03-23 03:06 . 2015-04-15 12:53 860160 ----a-w- c:\windows\system32\appraiser.dll
2015-03-23 03:06 . 2015-04-15 12:53 26112 ----a-w- c:\windows\system32\acmigration.dll
2015-03-23 03:06 . 2015-04-15 12:53 202752 ----a-w- c:\windows\system32\aepdu.dll
2015-03-23 03:06 . 2015-04-15 12:53 159744 ----a-w- c:\windows\system32\aepic.dll
2015-03-23 02:59 . 2015-04-15 12:53 896000 ----a-w- c:\windows\system32\aeinv.dll
2015-03-10 03:08 . 2015-04-15 12:50 1237504 ----a-w- c:\windows\system32\msxml3.dll
2015-03-10 03:05 . 2015-04-15 12:50 2048 ----a-w- c:\windows\system32\msxml3r.dll
2015-03-05 04:06 . 2015-04-15 12:53 305152 ----a-w- c:\windows\system32\gdi32.dll
2015-03-04 17:34 . 2015-03-04 17:34 245096 ----a-w- c:\windows\system32\drivers\MpFilter.sys
2015-03-04 17:34 . 2013-09-27 08:53 95408 ----a-w- c:\windows\system32\drivers\NisDrvWFP.sys
2015-03-04 04:16 . 2015-04-15 12:53 249784 ----a-w- c:\windows\system32\clfs.sys
2015-03-04 04:10 . 2015-04-15 12:53 58880 ----a-w- c:\windows\system32\clfsw32.dll
2015-03-04 04:10 . 2015-05-13 06:37 470528 ----a-w- c:\windows\apppatch\AcSpecfc.dll
2015-03-04 04:10 . 2015-05-13 06:37 2178560 ----a-w- c:\windows\apppatch\AcGenral.dll
2015-03-04 04:06 . 2015-05-13 06:37 2560 ----a-w- c:\windows\apppatch\AcRes.dll
2015-03-03 13:16 . 2014-01-30 12:28 246920 ------w- c:\windows\system32\MpSigStub.exe
.
.
(((((((((((((((((((((((((((((((((( Spouštěcí body v registru )))))))))))))))))))))))))))))))))))))))))))))
.
.
*Poznámka* prázdné záznamy a legitimní výchozí údaje nejsou zobrazeny.
REGEDIT4
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"IgfxTray"="c:\windows\system32\igfxtray.exe" [2011-02-11 137752]
"HotKeysCmds"="c:\windows\system32\hkcmd.exe" [2011-02-11 171032]
"Persistence"="c:\windows\system32\igfxpers.exe" [2011-02-11 172568]
"SynTPEnh"="c:\program files\Synaptics\SynTP\SynTPEnh.exe" [2010-06-04 1791272]
"MSC"="c:\program files\Microsoft Security Client\msseces.exe" [2015-04-29 981688]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorAdmin"= 5 (0x5)
"ConsentPromptBehaviorUser"= 3 (0x3)
"EnableUIADesktopToggle"= 0 (0x0)
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MsMpSvc]
@="Service"
.
R3 dmvsc;dmvsc;c:\windows\system32\drivers\dmvsc.sys [2010-11-20 62464]
R3 ew_hwusbdev;Huawei MobileBroadband USB PNP Device;c:\windows\system32\DRIVERS\ew_hwusbdev.sys [2012-03-16 102784]
R3 ew_usbenumfilter;huawei_CompositeFilter;c:\windows\system32\DRIVERS\ew_usbenumfilter.sys [2012-03-16 11136]
R3 huawei_cdcacm;huawei_cdcacm;c:\windows\system32\DRIVERS\ew_jucdcacm.sys [2012-03-16 89856]
R3 huawei_ext_ctrl;huawei_ext_ctrl;c:\windows\system32\DRIVERS\ew_juextctrl.sys [2012-03-16 26624]
R3 huawei_wwanecm;huawei_wwanecm;c:\windows\system32\DRIVERS\ew_juwwanecm.sys [2012-03-16 193536]
R3 IEEtwCollectorService;Internet Explorer ETW Collector Service;c:\windows\system32\IEEtwCollector.exe [2015-04-21 102912]
R3 NisDrv;Microsoft Network Inspection System;c:\windows\system32\DRIVERS\NisDrvWFP.sys [2015-03-04 95408]
R3 NisSrv;Kontrola sítě Microsoft;c:\program files\Microsoft Security Client\NisSrv.exe [2015-04-29 284504]
R3 RdpVideoMiniport;Remote Desktop Video Miniport Driver;c:\windows\system32\drivers\rdpvideominiport.sys [2012-08-23 14848]
R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys [2013-10-02 49152]
R3 TsUsbGD;Remote Desktop Generic USB Device;c:\windows\system32\drivers\TsUsbGD.sys [2012-08-23 27136]
R3 WatAdminSvc;Služba Technologie aktivace Windows;c:\windows\system32\Wat\WatAdminSvc.exe [2014-01-30 1343400]
S2 DiagTrack;Diagnostics Tracking Service;c:\windows\System32\svchost.exe [2009-07-14 20992]
S2 MBAMService;MBAMService;c:\program files\Malwarebytes Anti-Malware\mbamservice.exe [2015-04-14 1080120]
S3 huawei_enumerator;huawei_enumerator;c:\windows\system32\DRIVERS\ew_jubusenum.sys [2012-03-16 73984]
S3 MBAMProtector;MBAMProtector;c:\windows\system32\drivers\mbam.sys [2015-04-14 23256]
S3 MBAMSwissArmy;MBAMSwissArmy;c:\windows\system32\drivers\MBAMSwissArmy.sys [2015-05-28 119512]
S3 MBAMWebAccessControl;MBAMWebAccessControl;c:\windows\system32\drivers\mwac.sys [2015-04-14 51928]
S3 netr28;Ralink 802.11n Extensible Wireless Driver;c:\windows\system32\DRIVERS\netr28.sys [2012-12-06 2046560]
S3 RTL8167;Realtek 8167 NT Driver;c:\windows\system32\DRIVERS\Rt86win7.sys [2011-06-10 394856]
.
.
--- Ostatní služby/ovladače v paměti ---
.
*NewlyCreated* - MBAMSWISSARMY
*NewlyCreated* - WS2IFSL
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost]
utcsvc REG_MULTI_SZ DiagTrack
.
Obsah adresáře 'Naplánované úlohy'
.
2015-05-28 c:\windows\Tasks\Adobe Flash Player Updater.job
- c:\windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2014-01-30 12:45]
.
2015-05-28 c:\windows\Tasks\WinThruster_DEFAULT.job
- c:\program files\WinThruster\WinThruster.exe [2015-03-03 16:02]
.
2015-05-28 c:\windows\Tasks\WinThruster_UPDATES.job
- c:\program files\WinThruster\WinThruster.exe [2015-03-03 16:02]
.
.
------- Doplňkový sken -------
.
uStart Page = hxxp://www.seznam.cz/
IE: E&xportovat do aplikace Microsoft Excel - c:\progra~1\MICROS~1\Office14\EXCEL.EXE/3000
IE: Od&eslat do aplikace OneNote - c:\progra~1\MICROS~1\Office14\ONBttnIE.dll/105
TCP: DhcpNameServer = 217.196.209.2 192.168.2.1
TCP: Interfaces\{2E9417B4-3734-4B4D-AF76-A756A1C1A416}: NameServer = 217.77.165.81 217.77.161.131
TCP: Interfaces\{CC47DE53-6297-45A5-8ADD-3309B404E7BB}: NameServer = 217.77.165.81 217.77.161.131
.
.
------------------------ Jiné spuštené procesy ------------------------
.
c:\program files\Microsoft Security Client\MsMpEng.exe
c:\program files\Common Files\Adobe\ARM\1.0\armsvc.exe
c:\program files\LSI SoftModem\agrsmsvc.exe
c:\program files\Malwarebytes Anti-Malware\mbamscheduler.exe
c:\program files\Malwarebytes Anti-Malware\mbam.exe
c:\windows\system32\taskhost.exe
c:\program files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
c:\program files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe
c:\windows\system32\conhost.exe
c:\program files\Synaptics\SynTP\SynTPHelper.exe
.
**************************************************************************
.
Celkový čas: 2015-05-28 21:34:44 - počítač byl restartován
ComboFix-quarantined-files.txt 2015-05-28 19:34
ComboFix2.txt 2015-05-27 18:27
.
Před spuštěním: Volných bajtů: 80 207 306 752
Po spuštění: Volných bajtů: 80 140 763 136
.
- - End Of File - - 9B2E82A4A480AA2F87C19D3F544CC572
A36C5E4F47E84449FF07ED3517B43A31

Postupujte podle navodu kolegy

vyosek píše: Stahnete Malwarebytes Anti-Rootkit http://www.bleepingcomputer.com/downloa ... i-rootkit/
Ulozte nejlepe na Plochu a rozbalte

Spustte kliknutim na mbar

Nyni postupne kliknete na Next a Update

Po dokonceni update (aktualizace) databaze kliknete opet na Next

Nechte zaskrtnute vsechny tri moznosti a klinete na Scan cimz spustite prohledavani PC

Po dokonceni skenu (cca 5 minutek) zkontrolujte, zda-li je u vsech nalezu (samozrejme pokud budou) zatrzitko

Tez zkontrolujte, jetsli je zatrzitko u Create Restore point

Nyni kliknete na CleanUp cimz nalezenou infekci odstranime

PC bude restartovan

Slozka mbar by mela obsahovat log (a zrejme se i sam otevre) mbar-log-rok-mesic-den (hodina-minuta-sekunda).txt, ten mi sem dejte

Udelejte novou kontrolu s MBAM, opet vlastni sken vsech disku.

Malwarebytes Anti-Rootkit BETA 1.09.1.1004
www.malwarebytes.org

Database version:
main: v2015.05.29.04
rootkit: v2015.05.24.01

Windows 7 Service Pack 1 x86 NTFS
Internet Explorer 11.0.9600.17801
pc :: SABINA_PC [administrator]

29.5.2015 17:48:34
mbar-log-2015-05-29 (17-48-34).txt

Scan type: Quick scan
Scan options enabled: Anti-Rootkit | Drivers | MBR | Physical Sectors | Memory | Startup | Registry | File System | Heuristics/Extra | Heuristics/Shuriken
Scan options disabled:
Objects scanned: 325195
Time elapsed: 28 minute(s), 36 second(s)

Memory Processes Detected: 0
(No malicious items detected)

Memory Modules Detected: 0
(No malicious items detected)

Registry Keys Detected: 0
(No malicious items detected)

Registry Values Detected: 0
(No malicious items detected)

Registry Data Items Detected: 0
(No malicious items detected)

Folders Detected: 0
(No malicious items detected)

Files Detected: 0
(No malicious items detected)

Physical Sectors Detected: 0
(No malicious items detected)

(end)

Malwarebytes Anti-Malware
http://www.malwarebytes.org

Datum skenování: 1.6.2015
Čas skenování: 17:33:40
Protokol: log.txt
Správce: Ano

Verze: 2.01.6.1022
Databáze malwaru: v2015.06.01.03
Databáze rootkitů: v2015.05.31.01
Licence: Zkušební verze
Ochrana proti malwaru: Zapnuto
Ochrana proti škodlivým webovým stránkám: Zapnuto
Ochrana programu: Vypnuto

OS: Windows 7 Service Pack 1
CPU: x86
Souborový systém: NTFS
Uživatel: pc

Typ skenu: Vlastní sken
Výsledek: Dokončeno
Prohledaných objektů: 621562
Uplynulý čas: 2 hod, 33 min, 26 sek

Paměť: Zapnuto
Po spuštění: Zapnuto
Souborový systém: Zapnuto
Archivy: Zapnuto
Rootkity: Vypnuto
Heuristika: Zapnuto
PUP: Zapnuto
PUM: Zapnuto

Procesy: 0
(Nenalezeny žádné škodlivé položky)

Moduly: 0
(Nenalezeny žádné škodlivé položky)

Klíče registru: 0
(Nenalezeny žádné škodlivé položky)

Hodnoty registru: 0
(Nenalezeny žádné škodlivé položky)

Data registru: 0
(Nenalezeny žádné škodlivé položky)

Složky: 0
(Nenalezeny žádné škodlivé položky)

Soubory: 0
(Nenalezeny žádné škodlivé položky)

Fyzické sektory: 0
(Nenalezeny žádné škodlivé položky)

(end)

Odinstalujte MBAM.

Dejte novy log z RSIT

Dejte logy podle tohoto navodu http://forum.viry.cz/viewtopic.php?f=13&t=133100 - vypnete na chvili antivir, je mozne, ze to bude blokovat jako skodnou, ale pouzivame to porad, jedna se o falesny poplach

Logfile of random's system information tool 1.10 (written by random/random)
Run by pc at 2015-06-02 14:16:21
Microsoft Windows 7 Professional Service Pack 1
System drive C: has 76 GB (41%) free of 188 GB
Total RAM: 1976 MB (56% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 14:16:22, on 2.6.2015
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v11.0 (11.00.9600.17801)
Boot mode: Normal

Running processes:
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Windows\system32\taskhost.exe
C:\Windows\System32\igfxtray.exe
C:\Windows\System32\hkcmd.exe
C:\Windows\System32\igfxpers.exe
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\Program Files\Microsoft Security Client\msseces.exe
C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
C:\Windows\system32\GWX\GWX.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Windows\system32\Macromed\Flash\FlashUtil32_17_0_0_188_ActiveX.exe
C:\Users\pc\Downloads\RSIT.exe
C:\Program Files\trend micro\pc.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.seznam.cz/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/p/?LinkId=255141
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
O2 - BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: URLRedirectionBHO - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\PROGRA~1\MICROS~1\Office14\URLREDIR.DLL
O4 - HKLM\..\Run: [IgfxTray] C:\Windows\system32\igfxtray.exe
O4 - HKLM\..\Run: [HotKeysCmds] C:\Windows\system32\hkcmd.exe
O4 - HKLM\..\Run: [Persistence] C:\Windows\system32\igfxpers.exe
O4 - HKLM\..\Run: [SynTPEnh] %ProgramFiles%\Synaptics\SynTP\SynTPEnh.exe
O4 - HKLM\..\Run: [MSC] "C:\Program Files\Microsoft Security Client\msseces.exe" -hide -runkey
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Excel - res://C:\PROGRA~1\MICROS~1\Office14\EXCEL.EXE/3000
O8 - Extra context menu item: Od&eslat do aplikace OneNote - res://C:\PROGRA~1\MICROS~1\Office14\ONBttnIE.dll/105
O9 - Extra button: Odeslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files\Microsoft Office\Office14\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: Od&eslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files\Microsoft Office\Office14\ONBttnIE.dll
O9 - Extra button: P&ropojené poznámky aplikace OneNote - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files\Microsoft Office\Office14\ONBttnIELinkedNotes.dll
O9 - Extra 'Tools' menuitem: P&ropojené poznámky aplikace OneNote - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files\Microsoft Office\Office14\ONBttnIELinkedNotes.dll
O10 - Unknown file in Winsock LSP: c:\program files\common files\microsoft shared\windows live\wlidnsp.dll
O10 - Unknown file in Winsock LSP: c:\program files\common files\microsoft shared\windows live\wlidnsp.dll
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O17 - HKLM\System\CCS\Services\Tcpip\..\{2E9417B4-3734-4B4D-AF76-A756A1C1A416}: NameServer = 217.77.165.81 217.77.161.131
O17 - HKLM\System\CCS\Services\Tcpip\..\{CC47DE53-6297-45A5-8ADD-3309B404E7BB}: NameServer = 217.77.165.81 217.77.161.131
O17 - HKLM\System\CS1\Services\Tcpip\..\{2E9417B4-3734-4B4D-AF76-A756A1C1A416}: NameServer = 217.77.165.81 217.77.161.131
O17 - HKLM\System\CS2\Services\Tcpip\..\{2E9417B4-3734-4B4D-AF76-A756A1C1A416}: NameServer = 217.77.165.81 217.77.161.131
O18 - Protocol: wlpg - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} - C:\Program Files\Windows Live\Photo Gallery\AlbumDownloadProtocolHandler.dll
O18 - Filter hijack: text/xml - {807573E5-5146-11D5-A672-00B0D022E945} - C:\Program Files\Common Files\Microsoft Shared\OFFICE14\MSOXMLMF.DLL
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: Agere Modem Call Progress Audio (AgereModemAudio) - LSI Corporation - C:\Program Files\LSI SoftModem\agrsmsvc.exe

--
End of file - 4524 bytes

======Scheduled tasks folder======

C:\Windows\tasks\Adobe Flash Player Updater.job - C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe
C:\Windows\tasks\WinThruster_DEFAULT.job - C:\Program Files\WinThruster\WinThruster.exe -default
C:\Windows\tasks\WinThruster_UPDATES.job - C:\Program Files\WinThruster\WinThruster.exe -updatecheck

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
Windows Live ID Sign-in Helper - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2012-07-17 441592]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{B4F3A835-0E21-4959-BA22-42B3008E02FF}]
Office Document Cache Handler - C:\PROGRA~1\MICROS~1\Office14\URLREDIR.DLL [2013-03-06 562904]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"IgfxTray"=C:\Windows\system32\igfxtray.exe [2011-02-11 137752]
"HotKeysCmds"=C:\Windows\system32\hkcmd.exe [2011-02-11 171032]
"Persistence"=C:\Windows\system32\igfxpers.exe [2011-02-11 172568]
"SynTPEnh"=C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2010-06-04 1791272]
"MSC"=C:\Program Files\Microsoft Security Client\msseces.exe [2015-04-30 981688]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\igfxcui]
C:\Windows\system32\igfxdev.dll [2011-02-11 228864]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=credssp.dll

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MsMpSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\MsMpSvc]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorAdmin"=5
"ConsentPromptBehaviorUser"=3
"EnableUIADesktopToggle"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDrives"=0

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDrives"=0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.msadpcm"=msadp32.acm
"midimapper"=midimap.dll
"wavemapper"=msacm32.drv
"VIDC.UYVY"=msyuv.dll
"VIDC.YUY2"=msyuv.dll
"VIDC.YVYU"=msyuv.dll
"VIDC.IYUV"=iyuv_32.dll
"vidc.i420"=iyuv_32.dll
"VIDC.YVU9"=tsbyuv.dll
"msacm.l3acm"=l3codeca.acm
"vidc.cvid"=iccvid.dll
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"aux1"=wdmaud.drv
"MSVideo8"=VfWWDM32.dll
"VIDC.LAGS"=lagarith.dll
"VIDC.X264"=x264vfw.dll
"VIDC.XVID"=xvidvfw.dll
"VIDC.FFDS"=ff_vfw.dll
"msacm.ac3acm"=ac3acm.acm
"msacm.l3codecp"=l3codecp.acm
"wave2"=wdmaud.drv
"midi2"=wdmaud.drv
"mixer2"=wdmaud.drv
"aux2"=wdmaud.drv
"wave3"=wdmaud.drv
"midi3"=wdmaud.drv
"mixer3"=wdmaud.drv
"aux3"=wdmaud.drv

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1

======List of files/folders created in the last 1 month======

2015-05-29 17:48:19 ----D---- C:\ProgramData\Malwarebytes' Anti-Malware (portable)
2015-05-28 21:35:02 ----D---- C:\Windows\temp
2015-05-28 21:34:50 ----A---- C:\ComboFix.txt
2015-05-28 21:25:12 ----D---- C:\$RECYCLE.BIN
2015-05-28 21:12:16 ----D---- C:\Users\pc\AppData\Roaming\Solvusoft
2015-05-27 20:13:00 ----A---- C:\Windows\zip.exe
2015-05-27 20:13:00 ----A---- C:\Windows\SWSC.exe
2015-05-27 20:13:00 ----A---- C:\Windows\SWREG.exe
2015-05-27 20:13:00 ----A---- C:\Windows\sed.exe
2015-05-27 20:13:00 ----A---- C:\Windows\PEV.exe
2015-05-27 20:13:00 ----A---- C:\Windows\NIRCMD.exe
2015-05-27 20:13:00 ----A---- C:\Windows\MBR.exe
2015-05-27 20:13:00 ----A---- C:\Windows\grep.exe
2015-05-27 20:10:24 ----D---- C:\Qoobox
2015-05-27 20:10:05 ----D---- C:\Windows\erdnt
2015-05-24 19:54:39 ----D---- C:\ProgramData\Malwarebytes
2015-05-24 14:34:41 ----D---- C:\AdwCleaner
2015-05-16 21:48:13 ----D---- C:\rsit
2015-05-16 21:48:13 ----D---- C:\Program Files\trend micro
2015-05-16 10:38:05 ----A---- C:\Windows\system32\PresentationCFFRasterizerNative_v0300.dll
2015-05-16 10:37:49 ----D---- C:\Config.Msi
2015-05-13 08:40:09 ----A---- C:\Windows\system32\wpdshext.dll
2015-05-13 08:39:59 ----A---- C:\Windows\system32\UtcResources.dll
2015-05-13 08:39:59 ----A---- C:\Windows\system32\ntkrnlpa.exe
2015-05-13 08:39:59 ----A---- C:\Windows\system32\diagtrack.dll
2015-05-13 08:39:58 ----A---- C:\Windows\system32\tdh.dll
2015-05-13 08:39:58 ----A---- C:\Windows\system32\ntoskrnl.exe
2015-05-13 08:39:57 ----A---- C:\Windows\system32\ntdll.dll
2015-05-13 08:39:56 ----A---- C:\Windows\system32\advapi32.dll
2015-05-13 08:39:55 ----A---- C:\Windows\system32\lsasrv.dll
2015-05-13 08:39:54 ----A---- C:\Windows\system32\tracerpt.exe
2015-05-13 08:39:54 ----A---- C:\Windows\system32\srcore.dll
2015-05-13 08:39:54 ----A---- C:\Windows\system32\drivers\ksecpkg.sys
2015-05-13 08:39:54 ----A---- C:\Windows\system32\drivers\ksecdd.sys
2015-05-13 08:39:53 ----A---- C:\Windows\system32\sechost.dll
2015-05-13 08:39:53 ----A---- C:\Windows\system32\rstrui.exe
2015-05-13 08:39:53 ----A---- C:\Windows\system32\logman.exe
2015-05-13 08:39:53 ----A---- C:\Windows\system32\kerberos.dll
2015-05-13 08:39:52 ----A---- C:\Windows\system32\wdigest.dll
2015-05-13 08:39:52 ----A---- C:\Windows\system32\typeperf.exe
2015-05-13 08:39:52 ----A---- C:\Windows\system32\TSpkg.dll
2015-05-13 08:39:52 ----A---- C:\Windows\system32\smss.exe
2015-05-13 08:39:52 ----A---- C:\Windows\system32\relog.exe
2015-05-13 08:39:52 ----A---- C:\Windows\system32\ncrypt.dll
2015-05-13 08:39:52 ----A---- C:\Windows\system32\msv1_0.dll
2015-05-13 08:39:51 ----A---- C:\Windows\system32\sspicli.dll
2015-05-13 08:39:51 ----A---- C:\Windows\system32\srclient.dll
2015-05-13 08:39:51 ----A---- C:\Windows\system32\lsass.exe
2015-05-13 08:39:51 ----A---- C:\Windows\system32\diskperf.exe
2015-05-13 08:39:51 ----A---- C:\Windows\system32\csrsrv.dll
2015-05-13 08:39:51 ----A---- C:\Windows\system32\auditpol.exe
2015-05-13 08:39:50 ----A---- C:\Windows\system32\sspisrv.dll
2015-05-13 08:39:50 ----A---- C:\Windows\system32\secur32.dll
2015-05-13 08:39:50 ----A---- C:\Windows\system32\credssp.dll
2015-05-13 08:39:50 ----A---- C:\Windows\system32\apisetschema.dll
2015-05-13 08:39:49 ----A---- C:\Windows\system32\msobjs.dll
2015-05-13 08:39:49 ----A---- C:\Windows\system32\msaudite.dll
2015-05-13 08:39:49 ----A---- C:\Windows\system32\adtschema.dll
2015-05-13 08:38:52 ----A---- C:\Windows\system32\FntCache.dll
2015-05-13 08:38:51 ----A---- C:\Windows\system32\win32k.sys
2015-05-13 08:38:51 ----A---- C:\Windows\system32\DWrite.dll
2015-05-13 08:38:46 ----A---- C:\Windows\system32\schannel.dll
2015-05-13 08:38:45 ----A---- C:\Windows\system32\certcli.dll
2015-05-13 08:38:39 ----A---- C:\Windows\system32\services.exe
2015-05-13 08:38:37 ----A---- C:\Windows\system32\JavaScriptCollectionAgent.dll
2015-05-13 08:38:37 ----A---- C:\Windows\system32\ieetwproxystub.dll
2015-05-13 08:38:37 ----A---- C:\Windows\system32\ieetwcollector.exe
2015-05-13 08:38:36 ----A---- C:\Windows\system32\MsSpellCheckingFacility.exe
2015-05-13 08:38:36 ----A---- C:\Windows\system32\iernonce.dll
2015-05-13 08:38:36 ----A---- C:\Windows\system32\iedkcs32.dll
2015-05-13 08:38:36 ----A---- C:\Windows\system32\ie4uinit.exe
2015-05-13 08:38:35 ----A---- C:\Windows\system32\urlmon.dll
2015-05-13 08:38:35 ----A---- C:\Windows\system32\jsproxy.dll
2015-05-13 08:38:34 ----A---- C:\Windows\system32\msfeeds.dll
2015-05-13 08:38:34 ----A---- C:\Windows\system32\jscript9diag.dll
2015-05-13 08:38:34 ----A---- C:\Windows\system32\ieUnatt.exe
2015-05-13 08:38:34 ----A---- C:\Windows\system32\ieapfltr.dll
2015-05-13 08:38:34 ----A---- C:\Windows\system32\dxtmsft.dll
2015-05-13 08:38:32 ----A---- C:\Windows\system32\msrating.dll
2015-05-13 08:38:32 ----A---- C:\Windows\system32\iesetup.dll
2015-05-13 08:38:31 ----A---- C:\Windows\system32\wininet.dll
2015-05-13 08:38:31 ----A---- C:\Windows\system32\ieetwcollectorres.dll
2015-05-13 08:38:30 ----A---- C:\Windows\system32\dxtrans.dll
2015-05-13 08:38:29 ----A---- C:\Windows\system32\ieui.dll
2015-05-13 08:38:29 ----A---- C:\Windows\system32\ieframe.dll
2015-05-13 08:38:27 ----A---- C:\Windows\system32\mshtmled.dll
2015-05-13 08:38:26 ----A---- C:\Windows\system32\mshtmlmedia.dll
2015-05-13 08:38:26 ----A---- C:\Windows\system32\MshtmlDac.dll
2015-05-13 08:38:26 ----A---- C:\Windows\system32\iertutil.dll
2015-05-13 08:38:24 ----A---- C:\Windows\system32\mshtml.dll
2015-05-13 08:38:23 ----A---- C:\Windows\system32\jscript9.dll
2015-05-13 08:38:23 ----A---- C:\Windows\system32\jscript.dll
2015-05-13 08:38:22 ----A---- C:\Windows\system32\vbscript.dll
2015-05-13 08:37:44 ----A---- C:\Windows\system32\shimeng.dll
2015-05-13 08:37:44 ----A---- C:\Windows\system32\sdbinst.exe
2015-05-13 08:37:44 ----A---- C:\Windows\system32\apphelp.dll
2015-05-13 08:37:44 ----A---- C:\Windows\system32\aelupsvc.dll
2015-05-13 08:37:39 ----A---- C:\Windows\system32\InkEd.dll
2015-05-13 08:37:38 ----A---- C:\Windows\system32\jnwmon.dll
2015-05-13 08:37:31 ----A---- C:\Windows\system32\poqexec.exe

======List of files/folders modified in the last 1 month======

2015-06-02 14:15:12 ----RD---- C:\Program Files
2015-06-02 14:15:12 ----D---- C:\Windows\system32\drivers
2015-06-01 17:39:04 ----SHD---- C:\System Volume Information
2015-06-01 17:25:29 ----D---- C:\Windows\system32\Tasks
2015-05-30 21:14:46 ----D---- C:\Windows\system32\config
2015-05-30 06:18:22 ----D---- C:\Windows\System32
2015-05-30 06:18:22 ----D---- C:\Windows\inf
2015-05-30 06:18:22 ----A---- C:\Windows\system32\PerfStringBackup.INI
2015-05-29 17:48:19 ----D---- C:\ProgramData
2015-05-28 21:35:02 ----D---- C:\Windows
2015-05-28 21:25:27 ----D---- C:\Windows\Prefetch
2015-05-28 21:25:27 ----A---- C:\Windows\system.ini
2015-05-28 21:25:07 ----D---- C:\Windows\system32\drivers\etc
2015-05-28 21:18:57 ----D---- C:\Windows\AppPatch
2015-05-28 21:18:55 ----D---- C:\Program Files\Common Files
2015-05-28 21:12:24 ----D---- C:\Windows\Tasks
2015-05-25 16:59:10 ----D---- C:\Windows\winsxs
2015-05-25 16:58:13 ----SD---- C:\Windows\system32\GWX
2015-05-24 14:45:41 ----A---- C:\Windows\system32\FlashPlayerApp.exe
2015-05-17 08:50:58 ----D---- C:\Program Files\Windows Journal
2015-05-16 15:22:46 ----D---- C:\Windows\rescache
2015-05-16 11:59:33 ----D---- C:\Windows\Microsoft.NET
2015-05-16 11:55:44 ----RSD---- C:\Windows\assembly
2015-05-16 10:58:29 ----D---- C:\Program Files\Microsoft Silverlight
2015-05-16 10:57:19 ----D---- C:\Windows\system32\catroot
2015-05-16 10:56:42 ----D---- C:\Windows\system32\cs-CZ
2015-05-16 10:56:41 ----D---- C:\Windows\system32\AdvancedInstallers
2015-05-16 10:56:39 ----D---- C:\Windows\system32\en-US
2015-05-16 10:56:38 ----D---- C:\Program Files\Internet Explorer
2015-05-16 10:56:31 ----D---- C:\Windows\system32\DriverStore
2015-05-16 10:56:30 ----D---- C:\Windows\system32\drivers\UMDF
2015-05-16 10:40:33 ----SHD---- C:\Windows\Installer
2015-05-16 10:40:24 ----D---- C:\ProgramData\Microsoft Help
2015-05-16 10:39:10 ----D---- C:\Program Files\Microsoft Security Client
2015-05-16 10:35:10 ----D---- C:\Windows\system32\MRT
2015-05-16 10:30:10 ----A---- C:\Windows\system32\MRT.exe
2015-05-13 08:35:48 ----D---- C:\Windows\system32\catroot2

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 MpFilter;Microsoft Malware Protection Driver; C:\Windows\system32\DRIVERS\MpFilter.sys [2015-03-04 245096]
R0 rdyboost;ReadyBoost; C:\Windows\System32\drivers\rdyboost.sys [2010-11-20 173440]
R1 CSC;@%systemroot%\system32\cscsvc.dll,-202; C:\Windows\system32\drivers\csc.sys [2010-11-20 388096]
R1 vwififlt;Virtual WiFi Filter Driver; C:\Windows\system32\DRIVERS\vwififlt.sys [2009-07-14 48128]
R3 AgereSoftModem;Agere Systems Soft Modem; C:\Windows\system32\DRIVERS\AGRSM.sys [2010-01-26 1163328]
R3 BthEnum;Ovladač pro Bluetooth Request Block; C:\Windows\system32\drivers\BthEnum.sys [2009-07-14 34816]
R3 BthPan;Zařízení Bluetooth (síť PAN); C:\Windows\system32\DRIVERS\bthpan.sys [2009-07-14 93696]
R3 BTHUSB;Ovladač rozhraní USB radiostanice Bluetooth; C:\Windows\System32\Drivers\BTHUSB.sys [2011-04-28 60416]
R3 huawei_enumerator;huawei_enumerator; C:\Windows\system32\DRIVERS\ew_jubusenum.sys [2012-03-16 73984]
R3 igfx;igfx; C:\Windows\system32\DRIVERS\igdkmd32.sys [2011-02-11 9036800]
R3 MBAMSwissArmy;MBAMSwissArmy; \??\C:\Windows\system32\drivers\MBAMSwissArmy.sys []
R3 netr28;Ralink 802.11n Extensible Wireless Driver; C:\Windows\system32\DRIVERS\netr28.sys [2012-12-06 2046560]
R3 RFCOMM;Zařízení Bluetooth (RFCOMM protokol TDI); C:\Windows\system32\DRIVERS\rfcomm.sys [2009-07-14 129536]
R3 RTL8167;Realtek 8167 NT Driver; C:\Windows\system32\DRIVERS\Rt86win7.sys [2011-06-10 394856]
R3 SynTP;Synaptics TouchPad Driver; C:\Windows\system32\DRIVERS\SynTP.sys [2010-06-04 1303728]
S2 Parvdm;Parvdm; C:\Windows\system32\drivers\parvdm.sys [2009-07-14 8704]
S3 aic78xx;aic78xx; C:\Windows\system32\drivers\djsvs.sys [2009-07-14 70720]
S3 amdagp;AMD AGP Bus Filter Driver; C:\Windows\system32\drivers\amdagp.sys [2009-07-14 53312]
S3 b57nd60x;Broadcom NetXtreme Gigabit Ethernet - NDIS 6.0; C:\Windows\system32\DRIVERS\b57nd60x.sys [2009-07-14 229888]
S3 BridgeMP;@%SystemRoot%\system32\bridgeres.dll,-1; C:\Windows\system32\DRIVERS\bridge.sys [2009-07-14 78336]
S3 BTHPORT;Ovladač portu Bluetooth; C:\Windows\System32\Drivers\BTHport.sys [2012-07-06 393728]
S3 catchme;catchme; \??\C:\Users\pc\AppData\Local\Temp\catchme.sys []
S3 dmvsc;dmvsc; C:\Windows\system32\drivers\dmvsc.sys [2010-11-20 62464]
S3 ew_hwusbdev;Huawei MobileBroadband USB PNP Device; C:\Windows\system32\DRIVERS\ew_hwusbdev.sys [2012-03-16 102784]
S3 ew_usbenumfilter;huawei_CompositeFilter; C:\Windows\system32\DRIVERS\ew_usbenumfilter.sys [2012-03-16 11136]
S3 huawei_cdcacm;huawei_cdcacm; C:\Windows\system32\DRIVERS\ew_jucdcacm.sys [2012-03-16 89856]
S3 huawei_ext_ctrl;huawei_ext_ctrl; C:\Windows\system32\DRIVERS\ew_juextctrl.sys [2012-03-16 26624]
S3 huawei_wwanecm;huawei_wwanecm; C:\Windows\system32\DRIVERS\ew_juwwanecm.sys [2012-03-16 193536]
S3 NisDrv;Microsoft Network Inspection System; C:\Windows\system32\DRIVERS\NisDrvWFP.sys [2015-03-04 95408]
S3 pciide;pciide; C:\Windows\system32\drivers\pciide.sys [2009-07-14 12368]
S3 RDPDR;Terminal Server Device Redirector Driver; C:\Windows\System32\drivers\rdpdr.sys [2010-11-20 133632]
S3 RdpVideoMiniport;Remote Desktop Video Miniport Driver; C:\Windows\System32\drivers\rdpvideominiport.sys [2012-08-23 14848]
S3 s3cap;s3cap; C:\Windows\system32\drivers\vms3cap.sys [2010-11-20 5632]
S3 sisagp;SIS AGP Bus Filter; C:\Windows\system32\drivers\sisagp.sys [2009-07-14 52304]
S3 storvsc;storvsc; C:\Windows\system32\drivers\storvsc.sys [2010-11-20 28032]
S3 TsUsbFlt;@%SystemRoot%\system32\drivers\tsusbflt.sys,-1; C:\Windows\System32\drivers\tsusbflt.sys [2013-10-02 49152]
S3 TsUsbGD;Remote Desktop Generic USB Device; C:\Windows\system32\drivers\TsUsbGD.sys [2012-08-23 27136]
S3 viaagp;VIA AGP Bus Filter; C:\Windows\system32\drivers\viaagp.sys [2009-07-14 53328]
S3 ViaC7;VIA C7 Processor Driver; C:\Windows\system32\drivers\viac7.sys [2009-07-14 52736]
S3 vmbus;vmbus; C:\Windows\system32\drivers\vmbus.sys [2010-11-20 175360]
S3 VMBusHID;VMBusHID; C:\Windows\system32\drivers\VMBusHID.sys [2010-11-20 17920]
S3 WinUsb;WinUsb; C:\Windows\system32\DRIVERS\WinUsb.sys [2010-11-20 35968]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 AdobeARMservice;Adobe Acrobat Update Service; C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe [2014-12-19 81088]
R2 AgereModemAudio;Agere Modem Call Progress Audio; C:\Program Files\LSI SoftModem\agrsmsvc.exe [2009-12-03 26112]
R2 CscService;@%systemroot%\system32\cscsvc.dll,-200; C:\Windows\System32\svchost.exe [2009-07-14 20992]
R2 DiagTrack;@%SystemRoot%\system32\UtcResources.dll,-3001; C:\Windows\System32\svchost.exe [2009-07-14 20992]
R2 MsMpSvc;Microsoft Antimalware Service; c:\Program Files\Microsoft Security Client\MsMpEng.exe [2015-04-30 22216]
R2 wlidsvc;Windows Live ID Sign-in Assistant; C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE [2012-07-17 1713904]
R3 osppsvc;Office Software Protection Platform; C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE [2010-01-09 4640000]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2014-04-12 103608]
S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service; C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2015-05-24 268464]
S3 AppMgmt;@appmgmts.dll,-3250; C:\Windows\system32\svchost.exe [2009-07-14 20992]
S3 IEEtwCollectorService;@%SystemRoot%\system32\ieetwcollectorres.dll,-1000; C:\Windows\system32\IEEtwCollector.exe [2015-04-21 102912]
S3 NisSrv;@C:\Program Files\Microsoft Security Client\MpAsDesc.dll,-243; c:\Program Files\Microsoft Security Client\NisSrv.exe [2015-04-30 284504]
S3 ose;Office Source Engine; C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2010-01-09 149352]
S3 PeerDistSvc;@%SystemRoot%\system32\peerdistsvc.dll,-9000; C:\Windows\System32\svchost.exe [2009-07-14 20992]
S3 StorSvc;@%SystemRoot%\System32\StorSvc.dll,-100; C:\Windows\System32\svchost.exe [2009-07-14 20992]
S3 UmRdpService;@%SystemRoot%\system32\umrdp.dll,-1000; C:\Windows\System32\svchost.exe [2009-07-14 20992]
S3 WatAdminSvc;@%SystemRoot%\system32\Wat\WatUX.exe,-601; C:\Windows\system32\Wat\WatAdminSvc.exe [2014-01-30 1343400]
S4 aspnet_state;Stavová služba ASP.NET; C:\Windows\Microsoft.NET\Framework\v4.0.30319\aspnet_state.exe [2014-04-12 45744]
S4 NetMsmqActivator;@C:\Windows\Microsoft.NET\Framework\v4.0.30319\\ServiceModelInstallRC.dll,-8195; C:\Windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe [2014-04-12 139944]
S4 NetPipeActivator;@C:\Windows\Microsoft.NET\Framework\v4.0.30319\\ServiceModelInstallRC.dll,-8197; C:\Windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe [2014-04-12 139944]
S4 NetTcpActivator;@C:\Windows\Microsoft.NET\Framework\v4.0.30319\\ServiceModelInstallRC.dll,-8199; C:\Windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe [2014-04-12 139944]

-----------------EOF-----------------

VIRY.CZ

Zpomalený pc, dlouhé načítání

Zpomalený pc, dlouhé načítání

Re: Zpomalený pc, dlouhé načítání

Re: Zpomalený pc, dlouhé načítání

Re: Zpomalený pc, dlouhé načítání

Re: Zpomalený pc, dlouhé načítání

Re: Zpomalený pc, dlouhé načítání

Re: Zpomalený pc, dlouhé načítání

Re: Zpomalený pc, dlouhé načítání

Re: Zpomalený pc, dlouhé načítání

Re: Zpomalený pc, dlouhé načítání

Re: Zpomalený pc, dlouhé načítání

Re: Zpomalený pc, dlouhé načítání

Re: Zpomalený pc, dlouhé načítání

Re: Zpomalený pc, dlouhé načítání

Re: Zpomalený pc, dlouhé načítání