Internet - ping funguje, prohlížeč ne

[syskey]

Zdravím,
mám problém s připojením k internetu. Ikona počítače vpravo v hlavním panelu značí že je PC připojeno, ale každý prohlížeč po spuštění zobrazí pouze hlášku podobnou "Nepodařilo se načíst stránku, zkuste načíst znovu". Ping funguje na výchozí bránu i na domény (např www.seznam.cz), ale nefunguje na ntb připojený do sítě pomocí WLAN. Hledal jsem na internetu, zkoušel jsem nouzový režim pro práci se sítí (potažmo "čisté spuštění"), ale beze změny, další možnosti spočívaly v možnostech nákazy nějakým virem - Avast ani Spybot nic nenašli, online skener si nepustím, tak vkládám log z RSITu.

Logfile of random's system information tool 1.09 (written by random/random)
Run by LAĎA at 2014-03-07 23:49:56
Microsoft Windows 7 Home Premium Service Pack 1
System drive C: has 31 GB (41%) free of 76 GB
Total RAM: 7935 MB (84% free)

HijackThis download failed

======Scheduled tasks folder======

C:\Windows\tasks\Adobe Flash Player Updater.job
C:\Windows\tasks\AutoKMS.job
C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
C:\Windows\tasks\GoogleUpdateTaskMachineUA.job

=========Mozilla firefox=========

ProfilePath - C:\Users\LAĎA\AppData\Roaming\Mozilla\Firefox\Profiles\jb10vft3.default

"wrc@avast.com"=C:\Program Files\AVAST Software\Avast\WebRep\FF


[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 12.0.0.70 Plugin
"Path"=C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_12_0_0_70.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@foxitsoftware.com/Foxit Reader Plugin,version=1.0,application/pdf]
"Description"=
"Path"=C:\Program Files (x86)\Foxit Software\Foxit Reader\plugins\npFoxitReaderPlugin.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@foxitsoftware.com/Foxit Reader Plugin,version=1.0,application/vnd.fdf]
"Description"=
"Path"=C:\Program Files (x86)\Foxit Software\Foxit Reader\plugins\npFoxitReaderPlugin.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@java.com/DTPlugin,version=10.51.2]
"Description"=Java™ Deployment Toolkit
"Path"=C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@java.com/JavaPlugin,version=10.51.2]
"Description"=Oracle® Next Generation Java™ Plug-In
"Path"=C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@microsoft.com/GENUINE]
"Description"=
"Path"=disabled

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@tools.google.com/Google Update;version=3]
"Description"=Google Update
"Path"=C:\Program Files (x86)\Google\Update\1.3.22.5\npGoogleUpdate3.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@tools.google.com/Google Update;version=9]
"Description"=Google Update
"Path"=C:\Program Files (x86)\Google\Update\1.3.22.5\npGoogleUpdate3.dll

C:\Program Files (x86)\Mozilla Firefox\extensions\
{972ce4c6-7e08-4474-a285-3208198ce6fd}

C:\Users\LAĎA\AppData\Roaming\Mozilla\Firefox\Profiles\jb10vft3.default\extensions\
{a0d7ccb3-214d-498b-b4aa-0e8fda9a7bf7}

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{53707962-6F74-2D53-2644-206D7942484F}]
Spybot-S&D IE Protection - C:\Program Files (x86)\Spybot - Search & Destroy 2\SDHelper.dll [2012-11-13 3214392]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{72853161-30C5-4D22-B7F9-0BBC1D38A37E}]
Groove GFS Browser Helper - C:\Program Files (x86)\Microsoft Office\Office12\GrooveShellExtensions.dll [2009-02-26 2217832]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
Java(tm) Plug-In SSV Helper - C:\Program Files (x86)\Java\jre7\bin\ssv.dll [2013-12-18 462760]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{8E5E2654-AD2D-48bf-AC2D-D17F00898D06}]
avast! Online Security - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2014-02-21 1143168]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll [2013-12-18 171944]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{CC1A175A-E45B-41ED-A30C-C9B1D7A0C02F} - avast! Online Security - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2014-02-21 1143168]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"AvastUI.exe"=C:\Program Files\AVAST Software\Avast\AvastUI.exe [2014-02-21 3767096]
"SunJavaUpdateSched"=C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [2013-07-02 254336]
"StartCCC"=C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [2010-02-10 98304]
"GrooveMonitor"=C:\Program Files (x86)\Microsoft Office\Office12\GrooveMonitor.exe [2009-02-26 30040]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"Spybot-S&D Cleaning"=C:\Program Files (x86)\Spybot - Search & Destroy 2\SDCleaner.exe [2012-11-13 3713032]
"Sidebar"=C:\Program Files\Windows Sidebar\sidebar.exe [2010-11-21 1475584]
"GoogleDriveSync"=C:\Program Files (x86)\Google\Drive\googledrivesync.exe [2014-01-30 21822128]
"Akamai NetSession Interface"=C:\Users\LAĎA\AppData\Local\Akamai\netsession_win.exe [2013-06-05 4489472]

C:\Users\LAĎA\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
AutorunsDisabled

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\SDWinLogon]
SDWinLogon.dll []

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED}

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{B5A7F190-DDA6-4420-B3BA-52453494E6CD}"=C:\Program Files (x86)\Microsoft Office\Office12\GrooveShellExtensions.dll [2009-02-26 2217832]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=credssp.dll

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorAdmin"=5
"ConsentPromptBehaviorUser"=3
"EnableUIADesktopToggle"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoActiveDesktop"=1
"NoActiveDesktopChanges"=1
"ForceActiveDesktopOn"=0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe"="C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe:*:Enabled:Spybot-S&D 2 Tray Icon"
"C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe"="C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe:*:Enabled:Spybot-S&D 2 Scanner Service"
"C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdate.exe"="C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdate.exe:*:Enabled:Spybot-S&D 2 Updater"
"C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe"="C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe:*:Enabled:Spybot-S&D 2 Background update service"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.msadpcm"=msadp32.acm
"midimapper"=midimap.dll
"wavemapper"=msacm32.drv
"vidc.uyvy"=msyuv.dll
"vidc.yuy2"=msyuv.dll
"vidc.yvyu"=msyuv.dll
"vidc.iyuv"=iyuv_32.dll
"vidc.i420"=iyuv_32.dll
"vidc.yvu9"=tsbyuv.dll
"msacm.l3acm"=C:\Windows\SysWOW64\l3codeca.acm
"vidc.cvid"=iccvid.dll
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"aux1"=wdmaud.drv
"VIDC.FMVC"=fmcodec.dll
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv
"wave2"=wdmaud.drv
"mixer2"=wdmaud.drv

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*
.txt - open - C:\Windows\NOTEPAD.EXE %1

======List of files/folders created in the last 1 month======

2014-03-07 23:49:56 ----D---- C:\rsit
2014-03-07 23:49:56 ----D---- C:\Program Files (x86)\trend micro
2014-03-07 23:34:43 ----A---- C:\Windows\ntbtlog.txt
2014-03-01 14:35:13 ----D---- C:\Program Files (x86)\MeeSoft
2014-02-28 23:53:15 ----D---- C:\Windows\Migration
2014-02-15 19:10:39 ----D---- C:\Users\LAĎA\AppData\Roaming\Wireshark
2014-02-15 19:10:02 ----D---- C:\Program Files (x86)\WinPcap
2014-02-14 23:58:39 ----A---- C:\Windows\SysWOW64\vbscript.dll
2014-02-14 23:58:15 ----A---- C:\Windows\SysWOW64\msrating.dll
2014-02-14 23:58:15 ----A---- C:\Windows\SysWOW64\ieui.dll
2014-02-14 23:58:14 ----A---- C:\Windows\SysWOW64\msfeeds.dll
2014-02-14 23:58:13 ----A---- C:\Windows\SysWOW64\jsproxy.dll
2014-02-14 23:58:13 ----A---- C:\Windows\SysWOW64\ieUnatt.exe
2014-02-14 23:58:13 ----A---- C:\Windows\SysWOW64\iesetup.dll
2014-02-14 23:58:13 ----A---- C:\Windows\SysWOW64\iernonce.dll
2014-02-14 23:58:13 ----A---- C:\Windows\SysWOW64\ieetwproxystub.dll
2014-02-14 23:58:12 ----A---- C:\Windows\SysWOW64\jscript9diag.dll
2014-02-14 23:58:12 ----A---- C:\Windows\SysWOW64\iertutil.dll
2014-02-14 23:58:12 ----A---- C:\Windows\SysWOW64\ieapfltr.dll
2014-02-14 23:58:11 ----A---- C:\Windows\SysWOW64\wininet.dll
2014-02-14 23:58:11 ----A---- C:\Windows\SysWOW64\urlmon.dll
2014-02-14 23:58:10 ----A---- C:\Windows\SysWOW64\ieframe.dll
2014-02-14 23:58:09 ----A---- C:\Windows\SysWOW64\mshtml.dll
2014-02-14 23:58:09 ----A---- C:\Windows\SysWOW64\jscript9.dll
2014-02-14 20:36:47 ----A---- C:\Windows\SysWOW64\msxml3r.dll
2014-02-14 20:36:47 ----A---- C:\Windows\SysWOW64\msxml3.dll
2014-02-14 20:36:36 ----A---- C:\Windows\SysWOW64\RMActivate_ssp_isv.exe
2014-02-14 20:36:36 ----A---- C:\Windows\SysWOW64\RMActivate_ssp.exe
2014-02-14 20:36:36 ----A---- C:\Windows\SysWOW64\RMActivate_isv.exe
2014-02-14 20:36:36 ----A---- C:\Windows\SysWOW64\RMActivate.exe
2014-02-14 20:36:35 ----A---- C:\Windows\SysWOW64\secproc_ssp_isv.dll
2014-02-14 20:36:35 ----A---- C:\Windows\SysWOW64\secproc_ssp.dll
2014-02-14 20:36:35 ----A---- C:\Windows\SysWOW64\secproc_isv.dll
2014-02-14 20:36:35 ----A---- C:\Windows\SysWOW64\secproc.dll
2014-02-14 20:36:35 ----A---- C:\Windows\SysWOW64\msdrm.dll
2014-02-14 20:36:20 ----A---- C:\Windows\SysWOW64\d3d10warp.dll
2014-02-14 20:36:19 ----A---- C:\Windows\SysWOW64\d2d1.dll

======List of files/folders modified in the last 1 month======

2014-03-07 23:49:56 ----RD---- C:\Program Files (x86)
2014-03-07 23:49:30 ----D---- C:\Windows\Temp
2014-03-07 23:45:35 ----D---- C:\Windows\System32
2014-03-07 23:45:35 ----D---- C:\Windows\inf
2014-03-07 23:34:43 ----D---- C:\Windows
2014-03-01 23:31:11 ----SHD---- C:\Windows\Installer
2014-03-01 23:31:10 ----D---- C:\Windows\Microsoft.NET
2014-03-01 23:29:27 ----D---- C:\Windows\SysWOW64
2014-03-01 23:29:27 ----A---- C:\Windows\SysWOW64\PerfStringBackup.INI
2014-03-01 23:28:05 ----SHD---- C:\System Volume Information
2014-02-28 23:55:09 ----RSD---- C:\Windows\assembly
2014-02-28 23:53:18 ----D---- C:\Windows\SysWOW64\en-US
2014-02-28 23:53:15 ----SD---- C:\ProgramData\Microsoft
2014-02-22 13:05:59 ----A---- C:\Windows\SysWOW64\FlashPlayerApp.exe
2014-02-15 21:13:18 ----D---- C:\Program Files (x86)\Opera
2014-02-15 19:09:45 ----RD---- C:\Program Files
2014-02-15 17:48:06 ----D---- C:\Windows\winsxs
2014-02-15 17:46:57 ----D---- C:\Windows\SysWOW64\cs-CZ
2014-02-15 17:46:57 ----D---- C:\Program Files (x86)\Internet Explorer

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 ahcix64;ahcix64; C:\Windows\system32\DRIVERS\ahcix64.sys []
R0 aswRvrt;avast! Revert; C:\Windows\SysWOW64\drivers\aswRvrt.sys []
R0 aswVmm;avast! VM Monitor; C:\Windows\SysWOW64\drivers\aswVmm.sys []
R0 AtiPcie;AMD PCI Express (3GIO) Filter; C:\Windows\system32\DRIVERS\AtiPcie.sys []
R0 pciide;pciide; C:\Windows\system32\drivers\pciide.sys []
R0 rdyboost;ReadyBoost; C:\Windows\System32\drivers\rdyboost.sys []
R1 aswRdr;aswRdr; \??\C:\Windows\system32\drivers\aswRdr2.sys []
R1 aswSnx;aswSnx; \??\C:\Windows\system32\drivers\aswSnx.sys []
R1 aswSP;aswSP; \??\C:\Windows\system32\drivers\aswSP.sys []
R1 VBoxDrv;VirtualBox Service; C:\Windows\system32\DRIVERS\VBoxDrv.sys []
R1 VBoxUSBMon;VirtualBox USB Monitor Driver; C:\Windows\system32\DRIVERS\VBoxUSBMon.sys []
R2 aswMonFlt;aswMonFlt; \??\C:\Windows\system32\drivers\aswMonFlt.sys []
R2 NPF;NetGroup Packet Filter Driver; C:\Windows\system32\drivers\npf.sys []
R3 amdkmdag;amdkmdag; C:\Windows\system32\DRIVERS\atipmdag.sys []
R3 amdkmdap;amdkmdap; C:\Windows\system32\DRIVERS\atikmpag.sys []
R3 asmthub3;ASMedia USB3 Hub Service; C:\Windows\system32\DRIVERS\asmthub3.sys []
R3 asmtxhci;ASMEDIA XHCI Service; C:\Windows\system32\DRIVERS\asmtxhci.sys []
R3 aswStm;aswStm; \??\C:\Windows\system32\drivers\aswStm.sys []
R3 AtiHdmiService;ATI Function Driver for High Definition Audio Service; C:\Windows\system32\drivers\AtiHdmi.sys []
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\Windows\system32\drivers\RTKVHD64.sys []
R3 MTsensor;ATK0110 ACPI UTILITY; C:\Windows\system32\DRIVERS\ASACPI.sys []
R3 RRNetCapMP;RRNetCapMP; C:\Windows\system32\DRIVERS\rrnetcap.sys []
R3 RTL8167;Realtek 8167 NT Driver; C:\Windows\system32\DRIVERS\Rt64win7.sys []
R3 tap0901;TAP-Win32 Adapter V9; C:\Windows\system32\DRIVERS\tap0901.sys []
R3 tbhsd;Audials Sound Capturing; C:\Windows\system32\drivers\tbhsd.sys []
R3 VBoxNetAdp;VirtualBox Host-Only Ethernet Adapter; C:\Windows\system32\DRIVERS\VBoxNetAdp.sys []
R3 VBoxNetFlt;VirtualBox Bridged Networking Service; C:\Windows\system32\DRIVERS\VBoxNetFlt.sys []
R3 WinDriver6;WinDriver6; C:\Windows\system32\drivers\windrvr6.sys []
S3 DrmCAudio;DrmCAudio; C:\Windows\system32\drivers\DrmCAudio.sys []
S3 DrmRAudio;DrmRAudio; C:\Windows\system32\drivers\DrmRAudio.sys []
S3 nmwcd;Nokia USB Phone Parent Driver; C:\Windows\system32\drivers\ccdcmbx64.sys []
S3 nmwcdc;Nokia USB Communication Driver; C:\Windows\system32\drivers\ccdcmbox64.sys []
S3 pccsmcfd;PCCS Mode Change Filter Driver; C:\Windows\system32\DRIVERS\pccsmcfdx64.sys []
S3 RdpVideoMiniport;Remote Desktop Video Miniport Driver; C:\Windows\System32\drivers\rdpvideominiport.sys []
S3 RRNetCap;RRNetCap Service; C:\Windows\system32\DRIVERS\rrnetcap.sys []
S3 taphss;Anchorfree HSS Adapter; C:\Windows\system32\DRIVERS\taphss.sys []
S3 TsUsbFlt;TsUsbFlt; C:\Windows\system32\drivers\tsusbflt.sys []
S3 TsUsbGD;Remote Desktop Generic USB Device; C:\Windows\system32\drivers\TsUsbGD.sys []
S3 upperdev;upperdev; C:\Windows\system32\DRIVERS\usbser_lowerfltx64.sys []
S3 usbser;USB Modem Driver; C:\Windows\system32\drivers\usbser.sys []
S3 WinUsb;WinUsb; C:\Windows\system32\DRIVERS\WinUsb.sys []
S3 WsAudio_Device(1);WsAudio_Device(1); C:\Windows\system32\drivers\VirtualAudio1.sys []
S3 WsAudio_Device(2);WsAudio_Device(2); C:\Windows\system32\drivers\VirtualAudio2.sys []
S3 WsAudio_Device(3);WsAudio_Device(3); C:\Windows\system32\drivers\VirtualAudio3.sys []
S3 WsAudio_Device(4);WsAudio_Device(4); C:\Windows\system32\drivers\VirtualAudio4.sys []
S3 WsAudio_Device(5);WsAudio_Device(5); C:\Windows\system32\drivers\VirtualAudio5.sys []

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 AMD External Events Utility;AMD External Events Utility; C:\Windows\system32\atiesrxx.exe []
R2 avast! Antivirus;avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [2014-02-21 50344]
R2 BitBoxService;BitBoxService - ; C:\Program Files (x86)\Sirrix AG\BitBox\Service\BitBoxService.exe [2012-06-22 718848]
R2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2013-09-11 105144]
R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2013-09-11 124088]
R2 SDScannerService;Spybot-S&D 2 Scanner Service; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe [2012-11-13 1103392]
R2 SDUpdateService;Spybot-S&D 2 Updating Service; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe [2012-11-13 1369624]
R2 SDWSCService;Spybot-S&D 2 Security Center Service; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDWSCSvc.exe [2012-11-13 168384]
S2 gupdate;Služba Google Update (gupdate); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2012-09-05 136176]
S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service; C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2014-02-22 257928]
S3 aspnet_state;Stavová služba ASP.NET; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\aspnet_state.exe [2013-09-11 51808]
S3 CGVPNCliSrvc;CyberGhost VPN Client; C:\Program Files\CyberGhost VPN\CGVPNCliService.exe [2012-04-26 2438696]
S3 gupdatem;Služba Google Update (gupdatem); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2012-09-05 136176]
S3 IEEtwCollectorService;@%SystemRoot%\system32\ieetwcollectorres.dll,-1000; C:\Windows\system32\IEEtwCollector.exe /V []
S3 Microsoft Office Groove Audit Service;Microsoft Office Groove Audit Service; C:\Program Files (x86)\Microsoft Office\Office12\GrooveAuditService.exe [2009-02-26 64856]
S3 MozillaMaintenance;Mozilla Maintenance Service; C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe [2013-11-15 119408]
S3 odserv;Microsoft Office Diagnostics Service; C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE [2011-07-20 440696]
S3 ose;Office Source Engine; C:\Program Files (x86)\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2006-10-26 145184]
S3 rpcapd;Remote Packet Capture Protocol v.0 (experimental); C:\Program Files (x86)\WinPcap\rpcapd.exe [2013-03-01 118520]
S3 WatAdminSvc;@%SystemRoot%\system32\Wat\WatUX.exe,-601; C:\Windows\system32\Wat\WatAdminSvc.exe []
S4 NetMsmqActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8195; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2013-09-11 139856]
S4 NetPipeActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8197; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2013-09-11 139856]
S4 NetTcpActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8199; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2013-09-11 139856]

-----------------EOF-----------------

Díky za každou radu.

[Rudy]

Zdravím!
Na zkoušku vypněte antivir a zkuste se připojit.

[syskey]

To jsem už zkoušel, dokonce i firewall jsem měl vypnutý.

[Rudy]

Klik na ikonu sítě pravým myšítkem>odstranit potíže. Na konci procesu vyskočí okno s popisem problému. Sdělte, co bude hlásit.

[syskey]

"Poradce při potížích neidentifikoval problém".

[Rudy]

Zkuste do adresního řádku prohlížeče zadat:

77.75.76.3

a odentrujte. Pokud se otevře Seznam, je problém na serveru DNS. Předpokládám, že máte připojení k internetu nastaveno v souladu se smlouvou o připojení.

[syskey]

Žádná novinka - "Tato webová stránka není dostupná"

[Rudy]

Přeinstalujte ovladač síť. karty.

[syskey]

Tak ovladač jsem přeinstaloval (ani to nechtělo restart) a problém pořád přetrvává :/

[Rudy]

Dejte log ComboFix:

Stahnete a ulozte nejlepe na plochu ComboFix: http://download.bleepingcomputer.com/sUBs/ComboFix.exe

pote spustte aplikaci pod uctem s administratorskym opravnenim

hned po startu se zobrazi obrazovka s licencnimi podminkami, pokracujte kliknutim na tlacitko Ano.

v klidu si postavte na kafe (cela akce trva cca. 5-10 minut, nekdy i dele - dle toho, o jak rychly stroj se

jedna a kolika soubory se skener bude muset prodirat), behem skenu se nepokousejte spoustet zadne jine

aplikace ani nic jineho

behem skenovani nepropadejte panice, vas stroj muze byt restartovan (predevsim pri prvni aplikaci skeneru)

upozorneni: pokud pouzivate antispyware s rezidentnim stitem, prepnete jeho rezidentni stit do Install Mode,

pripadne jej po dobu skenu uplne deaktivujte, protoze dochazi pri skenu a vymazu pripadneho malware k

nezadoucim kolizim s rezidentem antispyware.

[syskey]

ComboFix 14-03-05.01 - LAĎA 08.03.2014 20:24:08.1.4 - x64
Microsoft Windows 7 Home Premium 6.1.7601.1.1250.420.1029.18.7935.6332 [GMT 1:00]
Spuštěný z: c:\users\LA¤A\Desktop\ComboFix.exe
AV: avast! Antivirus *Disabled/Outdated* {17AD7D40-BA12-9C46-7131-94903A54AD8B}
SP: avast! Antivirus *Disabled/Outdated* {ACCC9CA4-9C28-93C8-4B81-AFE241D3E736}
SP: Spybot - Search and Destroy *Disabled/Outdated* {9BC38DF1-3CCA-732D-A930-C1CA5F20A4B0}
SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.
.
((((((((((((((((((((((((((((((((((((((( Ostatní výmazy )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
c:\users\LAĎA\AppData\Local\Temp\_MEI19442\_ctypes.pyd
c:\users\LAĎA\AppData\Local\Temp\_MEI19442\_elementtree.pyd
c:\users\LAĎA\AppData\Local\Temp\_MEI19442\_hashlib.pyd
c:\users\LAĎA\AppData\Local\Temp\_MEI19442\_multiprocessing.pyd
c:\users\LAĎA\AppData\Local\Temp\_MEI19442\_socket.pyd
c:\users\LAĎA\AppData\Local\Temp\_MEI19442\_ssl.pyd
c:\users\LAĎA\AppData\Local\Temp\_MEI19442\pyexpat.pyd
c:\users\LAĎA\AppData\Local\Temp\_MEI19442\pysqlite2._sqlite.pyd
c:\users\LAĎA\AppData\Local\Temp\_MEI19442\python27.dll
c:\users\LAĎA\AppData\Local\Temp\_MEI19442\pythoncom27.dll
c:\users\LAĎA\AppData\Local\Temp\_MEI19442\PyWinTypes27.dll
c:\users\LAĎA\AppData\Local\Temp\_MEI19442\select.pyd
c:\users\LAĎA\AppData\Local\Temp\_MEI19442\unicodedata.pyd
c:\users\LAĎA\AppData\Local\Temp\_MEI19442\win32api.pyd
c:\users\LAĎA\AppData\Local\Temp\_MEI19442\win32com.shell.shell.pyd
c:\users\LAĎA\AppData\Local\Temp\_MEI19442\win32crypt.pyd
c:\users\LAĎA\AppData\Local\Temp\_MEI19442\win32event.pyd
c:\users\LAĎA\AppData\Local\Temp\_MEI19442\win32file.pyd
c:\users\LAĎA\AppData\Local\Temp\_MEI19442\win32inet.pyd
c:\users\LAĎA\AppData\Local\Temp\_MEI19442\win32pdh.pyd
c:\users\LAĎA\AppData\Local\Temp\_MEI19442\win32pipe.pyd
c:\users\LAĎA\AppData\Local\Temp\_MEI19442\win32process.pyd
c:\users\LAĎA\AppData\Local\Temp\_MEI19442\win32profile.pyd
c:\users\LAĎA\AppData\Local\Temp\_MEI19442\win32security.pyd
c:\users\LAĎA\AppData\Local\Temp\_MEI19442\win32ts.pyd
c:\users\LAĎA\AppData\Local\Temp\_MEI19442\windows._lib_cacheinvalidation.pyd
c:\users\LAĎA\AppData\Local\Temp\_MEI19442\wx._controls_.pyd
c:\users\LAĎA\AppData\Local\Temp\_MEI19442\wx._core_.pyd
c:\users\LAĎA\AppData\Local\Temp\_MEI19442\wx._gdi_.pyd
c:\users\LAĎA\AppData\Local\Temp\_MEI19442\wx._html2.pyd
c:\users\LAĎA\AppData\Local\Temp\_MEI19442\wx._misc_.pyd
c:\users\LAĎA\AppData\Local\Temp\_MEI19442\wx._windows_.pyd
c:\users\LAĎA\AppData\Local\Temp\_MEI19442\wx._wizard.pyd
c:\users\LAĎA\AppData\Local\Temp\_MEI19442\wxbase294u_net_vc90.dll
c:\users\LAĎA\AppData\Local\Temp\_MEI19442\wxbase294u_vc90.dll
c:\users\LAĎA\AppData\Local\Temp\_MEI19442\wxmsw294u_adv_vc90.dll
c:\users\LAĎA\AppData\Local\Temp\_MEI19442\wxmsw294u_core_vc90.dll
c:\users\LAĎA\AppData\Local\Temp\_MEI19442\wxmsw294u_html_vc90.dll
c:\users\LAĎA\AppData\Local\Temp\_MEI19442\wxmsw294u_webview_vc90.dll
c:\users\LAA~1\AppData\Local\Temp\_MEI19442\_ctypes.pyd
c:\users\LAA~1\AppData\Local\Temp\_MEI19442\_elementtree.pyd
c:\users\LAA~1\AppData\Local\Temp\_MEI19442\_hashlib.pyd
c:\users\LAA~1\AppData\Local\Temp\_MEI19442\_multiprocessing.pyd
c:\users\LAA~1\AppData\Local\Temp\_MEI19442\_socket.pyd
c:\users\LAA~1\AppData\Local\Temp\_MEI19442\_ssl.pyd
c:\users\LAA~1\AppData\Local\Temp\_MEI19442\pyexpat.pyd
c:\users\LAA~1\AppData\Local\Temp\_MEI19442\pysqlite2._sqlite.pyd
c:\users\LAA~1\AppData\Local\Temp\_MEI19442\python27.dll
c:\users\LAA~1\AppData\Local\Temp\_MEI19442\pythoncom27.dll
c:\users\LAA~1\AppData\Local\Temp\_MEI19442\PyWinTypes27.dll
c:\users\LAA~1\AppData\Local\Temp\_MEI19442\select.pyd
c:\users\LAA~1\AppData\Local\Temp\_MEI19442\unicodedata.pyd
c:\users\LAA~1\AppData\Local\Temp\_MEI19442\win32api.pyd
c:\users\LAA~1\AppData\Local\Temp\_MEI19442\win32com.shell.shell.pyd
c:\users\LAA~1\AppData\Local\Temp\_MEI19442\win32crypt.pyd
c:\users\LAA~1\AppData\Local\Temp\_MEI19442\win32event.pyd
c:\users\LAA~1\AppData\Local\Temp\_MEI19442\win32file.pyd
c:\users\LAA~1\AppData\Local\Temp\_MEI19442\win32inet.pyd
c:\users\LAA~1\AppData\Local\Temp\_MEI19442\win32pdh.pyd
c:\users\LAA~1\AppData\Local\Temp\_MEI19442\win32pipe.pyd
c:\users\LAA~1\AppData\Local\Temp\_MEI19442\win32process.pyd
c:\users\LAA~1\AppData\Local\Temp\_MEI19442\win32profile.pyd
c:\users\LAA~1\AppData\Local\Temp\_MEI19442\win32security.pyd
c:\users\LAA~1\AppData\Local\Temp\_MEI19442\win32ts.pyd
c:\users\LAA~1\AppData\Local\Temp\_MEI19442\windows._lib_cacheinvalidation.pyd
c:\users\LAA~1\AppData\Local\Temp\_MEI19442\wx._controls_.pyd
c:\users\LAA~1\AppData\Local\Temp\_MEI19442\wx._core_.pyd
c:\users\LAA~1\AppData\Local\Temp\_MEI19442\wx._gdi_.pyd
c:\users\LAA~1\AppData\Local\Temp\_MEI19442\wx._html2.pyd
c:\users\LAA~1\AppData\Local\Temp\_MEI19442\wx._misc_.pyd
c:\users\LAA~1\AppData\Local\Temp\_MEI19442\wx._windows_.pyd
c:\users\LAA~1\AppData\Local\Temp\_MEI19442\wx._wizard.pyd
c:\users\LAA~1\AppData\Local\Temp\_MEI19442\wxbase294u_net_vc90.dll
c:\users\LAA~1\AppData\Local\Temp\_MEI19442\wxbase294u_vc90.dll
c:\users\LAA~1\AppData\Local\Temp\_MEI19442\wxmsw294u_adv_vc90.dll
c:\users\LAA~1\AppData\Local\Temp\_MEI19442\wxmsw294u_core_vc90.dll
c:\users\LAA~1\AppData\Local\Temp\_MEI19442\wxmsw294u_html_vc90.dll
c:\users\LAA~1\AppData\Local\Temp\_MEI19442\wxmsw294u_webview_vc90.dll
.
.
((((((((((((((((((((((((( Soubory vytvořené od 2014-02-08 do 2014-03-08 )))))))))))))))))))))))))))))))
.
.
2014-03-08 19:27 . 2014-03-08 19:27 -------- d-----w- c:\users\Default\AppData\Local\temp
2014-03-08 18:17 . 2014-03-08 18:17 -------- d-----w- c:\windows\LastGood.Tmp
2014-03-08 18:17 . 2012-02-03 20:01 74344 ----a-w- c:\windows\system32\RtNicProp64.dll
2014-03-08 18:17 . 2012-02-03 20:01 677480 ----a-w- c:\windows\system32\drivers\Rt64win7.sys
2014-03-08 18:17 . 2012-02-03 20:01 107552 ----a-w- c:\windows\system32\RTNUninst64.dll
2014-03-08 16:12 . 2014-03-08 16:12 -------- d-----w- c:\users\LAĎA\AppData\Local\Diagnostics
2014-03-07 22:49 . 2014-03-07 22:50 -------- d-----w- C:\rsit
2014-03-07 22:49 . 2014-03-07 22:49 -------- d-----w- c:\program files (x86)\trend micro
2014-03-01 13:35 . 2014-03-01 13:35 -------- d-----w- c:\program files (x86)\MeeSoft
2014-02-28 22:53 . 2014-02-28 22:53 -------- d-----w- c:\windows\Migration
2014-02-28 18:32 . 2014-02-06 09:01 10536864 ----a-w- c:\programdata\Microsoft\Windows Defender\Definition Updates\{000D82D7-6E02-4738-917B-A14720C9400E}\mpengine.dll
2014-02-21 22:35 . 2014-02-21 22:35 80184 ----a-w- c:\windows\system32\drivers\aswStm.sys
2014-02-15 18:10 . 2014-02-15 18:10 -------- d-----w- c:\users\LAĎA\AppData\Roaming\Wireshark
2014-02-15 18:10 . 2014-02-15 18:10 -------- d-----w- c:\program files (x86)\WinPcap
2014-02-15 18:09 . 2014-02-15 18:10 -------- d-----w- c:\program files\Wireshark
2014-02-14 19:36 . 2013-12-06 02:30 2048 ----a-w- c:\windows\system32\msxml3r.dll
.
.
.
(((((((((((((((((((((((((((((((((((((((( Find3M výpis ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2014-02-22 12:05 . 2012-09-05 20:08 71048 ----a-w- c:\windows\SysWow64\FlashPlayerCPLApp.cpl
2014-02-22 12:05 . 2012-09-05 20:08 692616 ----a-w- c:\windows\SysWow64\FlashPlayerApp.exe
2014-02-21 22:35 . 2013-03-22 17:34 207904 ----a-w- c:\windows\system32\drivers\aswVmm.sys
2014-02-21 22:35 . 2013-01-27 12:03 421704 ----a-w- c:\windows\system32\drivers\aswSP.sys
2014-02-21 22:35 . 2013-01-27 12:03 78648 ----a-w- c:\windows\system32\drivers\aswMonFlt.sys
2014-02-21 22:35 . 2013-01-27 12:03 334136 ----a-w- c:\windows\system32\aswBoot.exe
2014-02-21 22:35 . 2013-01-27 12:03 1038072 ----a-w- c:\windows\system32\drivers\aswSnx.sys
2014-02-21 22:35 . 2013-01-27 12:03 43152 ----a-w- c:\windows\avastSS.scr
2014-02-16 22:32 . 2012-09-05 20:49 88567024 ----a-w- c:\windows\system32\MRT.exe
2013-12-18 20:09 . 2013-10-15 19:12 96168 ----a-w- c:\windows\SysWow64\WindowsAccessBridge-32.dll
2013-12-18 05:13 . 2010-11-21 03:27 270496 ------w- c:\windows\system32\MpSigStub.exe
.
.
(((((((((((((((((((((((((((((((((( Spouštěcí body v registru )))))))))))))))))))))))))))))))))))))))))))))
.
.
*Poznámka* prázdné záznamy a legitimní výchozí údaje nejsou zobrazeny.
REGEDIT4
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Sidebar"="c:\program files\Windows Sidebar\sidebar.exe" [2010-11-21 1475584]
"GoogleDriveSync"="c:\program files (x86)\Google\Drive\googledrivesync.exe" [2014-01-30 21822128]
"Akamai NetSession Interface"="c:\users\LAĎA\AppData\Local\Akamai\netsession_win.exe" [2013-06-04 4489472]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]
"AvastUI.exe"="c:\program files\AVAST Software\Avast\AvastUI.exe" [2014-02-21 3767096]
"SunJavaUpdateSched"="c:\program files (x86)\Common Files\Java\Java Update\jusched.exe" [2013-07-02 254336]
"StartCCC"="c:\program files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" [2010-02-10 98304]
"GrooveMonitor"="c:\program files (x86)\Microsoft Office\Office12\GrooveMonitor.exe" [2009-02-26 30040]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorAdmin"= 5 (0x5)
"ConsentPromptBehaviorUser"= 3 (0x3)
"EnableUIADesktopToggle"= 0 (0x0)
.
[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\session manager]
BootExecute REG_MULTI_SZ autocheck autochk *\0\0sdnclean64.exe
.
R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [x]
R3 aswStm;aswStm;c:\windows\system32\drivers\aswStm.sys;c:\windows\SYSNATIVE\drivers\aswStm.sys [x]
R3 CGVPNCliSrvc;CyberGhost VPN Client;c:\program files\CyberGhost VPN\CGVPNCliService.exe;c:\program files\CyberGhost VPN\CGVPNCliService.exe [x]
R3 DrmCAudio;DrmCAudio;c:\windows\system32\drivers\DrmCAudio.sys;c:\windows\SYSNATIVE\drivers\DrmCAudio.sys [x]
R3 DrmRAudio;DrmRAudio;c:\windows\system32\drivers\DrmRAudio.sys;c:\windows\SYSNATIVE\drivers\DrmRAudio.sys [x]
R3 IEEtwCollectorService;Internet Explorer ETW Collector Service;c:\windows\system32\IEEtwCollector.exe;c:\windows\SYSNATIVE\IEEtwCollector.exe [x]
R3 RdpVideoMiniport;Remote Desktop Video Miniport Driver;c:\windows\system32\drivers\rdpvideominiport.sys;c:\windows\SYSNATIVE\drivers\rdpvideominiport.sys [x]
R3 RRNetCap;RRNetCap Service;c:\windows\system32\DRIVERS\rrnetcap.sys;c:\windows\SYSNATIVE\DRIVERS\rrnetcap.sys [x]
R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys;c:\windows\SYSNATIVE\drivers\tsusbflt.sys [x]
R3 TsUsbGD;Remote Desktop Generic USB Device;c:\windows\system32\drivers\TsUsbGD.sys;c:\windows\SYSNATIVE\drivers\TsUsbGD.sys [x]
R3 WatAdminSvc;Služba Technologie aktivace Windows;c:\windows\system32\Wat\WatAdminSvc.exe;c:\windows\SYSNATIVE\Wat\WatAdminSvc.exe [x]
R3 WsAudio_Device(1);WsAudio_Device(1);c:\windows\system32\drivers\VirtualAudio1.sys;c:\windows\SYSNATIVE\drivers\VirtualAudio1.sys [x]
R3 WsAudio_Device(2);WsAudio_Device(2);c:\windows\system32\drivers\VirtualAudio2.sys;c:\windows\SYSNATIVE\drivers\VirtualAudio2.sys [x]
R3 WsAudio_Device(3);WsAudio_Device(3);c:\windows\system32\drivers\VirtualAudio3.sys;c:\windows\SYSNATIVE\drivers\VirtualAudio3.sys [x]
R3 WsAudio_Device(4);WsAudio_Device(4);c:\windows\system32\drivers\VirtualAudio4.sys;c:\windows\SYSNATIVE\drivers\VirtualAudio4.sys [x]
R3 WsAudio_Device(5);WsAudio_Device(5);c:\windows\system32\drivers\VirtualAudio5.sys;c:\windows\SYSNATIVE\drivers\VirtualAudio5.sys [x]
S0 ahcix64;ahcix64;c:\windows\system32\DRIVERS\ahcix64.sys;c:\windows\SYSNATIVE\DRIVERS\ahcix64.sys [x]
S0 aswRvrt;avast! Revert; [x]
S0 aswVmm;avast! VM Monitor; [x]
S1 aswSnx;aswSnx;c:\windows\system32\drivers\aswSnx.sys;c:\windows\SYSNATIVE\drivers\aswSnx.sys [x]
S1 aswSP;aswSP;c:\windows\system32\drivers\aswSP.sys;c:\windows\SYSNATIVE\drivers\aswSP.sys [x]
S1 VBoxDrv;VirtualBox Service;c:\windows\system32\DRIVERS\VBoxDrv.sys;c:\windows\SYSNATIVE\DRIVERS\VBoxDrv.sys [x]
S1 VBoxUSBMon;VirtualBox USB Monitor Driver;c:\windows\system32\DRIVERS\VBoxUSBMon.sys;c:\windows\SYSNATIVE\DRIVERS\VBoxUSBMon.sys [x]
S2 AMD External Events Utility;AMD External Events Utility;c:\windows\system32\atiesrxx.exe;c:\windows\SYSNATIVE\atiesrxx.exe [x]
S2 aswMonFlt;aswMonFlt;c:\windows\system32\drivers\aswMonFlt.sys;c:\windows\SYSNATIVE\drivers\aswMonFlt.sys [x]
S2 BitBoxService;BitBoxService - ;c:\program files (x86)\Sirrix AG\BitBox\Service\BitBoxService.exe;c:\program files (x86)\Sirrix AG\BitBox\Service\BitBoxService.exe [x]
S2 NPF;NetGroup Packet Filter Driver;c:\windows\system32\drivers\npf.sys;c:\windows\SYSNATIVE\drivers\npf.sys [x]
S3 asmthub3;ASMedia USB3 Hub Service;c:\windows\system32\DRIVERS\asmthub3.sys;c:\windows\SYSNATIVE\DRIVERS\asmthub3.sys [x]
S3 asmtxhci;ASMEDIA XHCI Service;c:\windows\system32\DRIVERS\asmtxhci.sys;c:\windows\SYSNATIVE\DRIVERS\asmtxhci.sys [x]
S3 RRNetCapMP;RRNetCapMP;c:\windows\system32\DRIVERS\rrnetcap.sys;c:\windows\SYSNATIVE\DRIVERS\rrnetcap.sys [x]
S3 RTL8167;Realtek 8167 NT Driver;c:\windows\system32\DRIVERS\Rt64win7.sys;c:\windows\SYSNATIVE\DRIVERS\Rt64win7.sys [x]
S3 VBoxNetAdp;VirtualBox Host-Only Ethernet Adapter;c:\windows\system32\DRIVERS\VBoxNetAdp.sys;c:\windows\SYSNATIVE\DRIVERS\VBoxNetAdp.sys [x]
S3 VBoxNetFlt;VirtualBox Bridged Networking Service;c:\windows\system32\DRIVERS\VBoxNetFlt.sys;c:\windows\SYSNATIVE\DRIVERS\VBoxNetFlt.sys [x]
.
.
--- Ostatní služby/ovladače v paměti ---
.
*NewlyCreated* - WS2IFSL
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\active setup\installed components\{8A69D345-D564-463c-AFF1-A69D9E530F96}]
2014-02-21 22:27 1150280 ----a-w- c:\program files (x86)\Google\Chrome\Application\33.0.1750.117\Installer\chrmstp.exe
.
Obsah adresáře 'Naplánované úlohy'
.
2014-03-08 c:\windows\Tasks\Adobe Flash Player Updater.job
- c:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2012-09-05 12:05]
.
2014-03-08 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
- c:\program files (x86)\Google\Update\GoogleUpdate.exe [2012-09-05 20:08]
.
2014-03-08 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
- c:\program files (x86)\Google\Update\GoogleUpdate.exe [2012-09-05 20:08]
.
.
--------- X64 Entries -----------
.
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\00avast]
@="{472083B0-C522-11CF-8763-00608CC02F24}"
[HKEY_CLASSES_ROOT\CLSID\{472083B0-C522-11CF-8763-00608CC02F24}]
2014-02-21 22:35 287280 ----a-w- c:\program files\AVAST Software\Avast\ashShA64.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\GDriveBlacklistedOverlay]
@="{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D42}"
[HKEY_CLASSES_ROOT\CLSID\{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D42}]
2014-01-30 14:05 777032 ----a-w- c:\program files (x86)\Google\Drive\googledrivesync64.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\GDriveSharedEditOverlay]
@="{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D44}"
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\GDriveSharedOverlay]
@="{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D44}"
[HKEY_CLASSES_ROOT\CLSID\{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D44}]
2014-01-30 14:05 777032 ----a-w- c:\program files (x86)\Google\Drive\googledrivesync64.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\GDriveSharedEditOverlay]
@="{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D44}"
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\GDriveSharedOverlay]
@="{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D44}"
[HKEY_CLASSES_ROOT\CLSID\{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D44}]
2014-01-30 14:05 777032 ----a-w- c:\program files (x86)\Google\Drive\googledrivesync64.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\GDriveSharedViewOverlay]
@="{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D43}"
[HKEY_CLASSES_ROOT\CLSID\{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D43}]
2014-01-30 14:05 777032 ----a-w- c:\program files (x86)\Google\Drive\googledrivesync64.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\GDriveSyncedOverlay]
@="{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D40}"
[HKEY_CLASSES_ROOT\CLSID\{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D40}]
2014-01-30 14:05 777032 ----a-w- c:\program files (x86)\Google\Drive\googledrivesync64.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\GDriveSyncingOverlay]
@="{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D41}"
[HKEY_CLASSES_ROOT\CLSID\{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D41}]
2014-01-30 14:05 777032 ----a-w- c:\program files (x86)\Google\Drive\googledrivesync64.dll
.
------- Doplňkový sken -------
.
uLocal Page = c:\windows\system32\blank.htm
mLocal Page = c:\windows\SysWOW64\blank.htm
uInternet Settings,ProxyOverride = <local>
IE: E&xportovat do aplikace Microsoft Excel - c:\progra~2\MICROS~1\Office12\EXCEL.EXE/3000
IE: Od&eslat do aplikace OneNote - c:\progra~2\MICROS~1\Office14\ONBttnIE.dll/105
TCP: DhcpNameServer = 10.0.0.138
FF - ProfilePath - c:\users\LAĎA\AppData\Roaming\Mozilla\Firefox\Profiles\jb10vft3.default\
.
- - - - NEPLATNÉ POLOŽKY ODSTRANĚNÉ Z REGISTRU - - - -
.
URLSearchHooks-{D8278076-BC68-4484-9233-6E7F1628B56C} - (no file)
c:\users\LAĎA\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\AutorunsDisabled\BBC iPlayer Desktop.lnk - c:\program files (x86)\BBC iPlayer Desktop\BBC iPlayer Desktop.exe
HKLM_Wow6432Node-ActiveSetup-{2D46B6DC-2207-486B-B523-A557E6D54B47} - start
BHO-{3706EE7C-3CAD-445D-8A43-03EBC3B75908} - (no file)
.
.
.
--------------------- ZAMKNUTÉ KLÍČE V REGISTRU ---------------------
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil64_12_0_0_70_ActiveX.exe,-101"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\Elevation]
"Enabled"=dword:00000001
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\LocalServer32]
@="c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil64_12_0_0_70_ActiveX.exe"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
.
[HKEY_LOCAL_MACHINE\software\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="IFlashBroker5"
.
[HKEY_LOCAL_MACHINE\software\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"
.
[HKEY_LOCAL_MACHINE\software\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil32_12_0_0_70_ActiveX.exe,-101"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\Elevation]
"Enabled"=dword:00000001
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\LocalServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil32_12_0_0_70_ActiveX.exe"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@="Shockwave Flash Object"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\InprocServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_12_0_0_70.ocx"
"ThreadingModel"="Apartment"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\MiscStatus]
@="0"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ProgID]
@="ShockwaveFlash.ShockwaveFlash.12"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_12_0_0_70.ocx, 1"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\TypeLib]
@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\Version]
@="1.0"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
@="ShockwaveFlash.ShockwaveFlash"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@="Macromedia Flash Factory Object"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\InprocServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_12_0_0_70.ocx"
"ThreadingModel"="Apartment"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ProgID]
@="FlashFactory.FlashFactory.1"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_12_0_0_70.ocx, 1"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\TypeLib]
@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\Version]
@="1.0"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
@="FlashFactory.FlashFactory"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="IFlashBroker5"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
.
[HKEY_LOCAL_MACHINE\software\Wow6432Node\Microsoft\Office\Common\Smart Tag\Actions\{B7EFF951-E52F-45CC-9EF7-57124F2177CC}]
@Denied: (A) (Everyone)
.
[HKEY_LOCAL_MACHINE\software\Wow6432Node\Microsoft\Schema Library\ActionsPane3]
@Denied: (A) (Everyone)
.
[HKEY_LOCAL_MACHINE\system\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0000\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\system\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0001\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\system\ControlSet001\Control\PCW\Security]
@Denied: (Full) (Everyone)
.
------------------------ Jiné spuštené procesy ------------------------
.
c:\program files\AVAST Software\Avast\AvastSvc.exe
c:\program files\AVAST Software\Avast\setup\instup.exe
c:\windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe
.
**************************************************************************
.
Celkový čas: 2014-03-08 20:30:48 - počítač byl restartován
ComboFix-quarantined-files.txt 2014-03-08 19:30
.
Před spuštěním: Volných bajtů: 36 965 232 640
Po spuštění: Volných bajtů: 38 171 926 528
.
- - End Of File - - 60175CCB030A27015F8B0B29728B1ABD

[Rudy]

Přesuňte ComoboFix na kořenový adresář c:\. Otevřte poznámkový blok a zkopírujte do něj:

KillAll::

File::
c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
c:\windows\Tasks\GoogleUpdateTaskMachineUA.job

Folder::
c:\users\LAĎA\AppData\Local\Akamai

Registry::
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Akamai NetSession Interface"=-

RegLock::
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}]
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\Elevation]
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\LocalServer32]
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\TypeLib]
[HKEY_LOCAL_MACHINE\software\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}]
[HKEY_LOCAL_MACHINE\software\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\ProxyStubClsid32]
[HKEY_LOCAL_MACHINE\software\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\TypeLib]
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}]
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\Elevation]
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\LocalServer32]
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\TypeLib]
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}]
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\InprocServer32]
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\MiscStatus]
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ProgID]
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\TypeLib]
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\Version]
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}]
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\InprocServer32]
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ProgID]
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\TypeLib]
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\Version]
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}]
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\ProxyStubClsid32]
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\TypeLib]
[HKEY_LOCAL_MACHINE\software\Wow6432Node\Microsoft\Office\Common\Smart Tag\Actions\{B7EFF951-E52F-45CC-9EF7-57124F2177CC}]
[HKEY_LOCAL_MACHINE\software\Wow6432Node\Microsoft\Schema Library\ActionsPane3]
[HKEY_LOCAL_MACHINE\system\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0000\AllUserSettings]
[HKEY_LOCAL_MACHINE\system\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0001\AllUserSettings]
[HKEY_LOCAL_MACHINE\system\ControlSet001\Control\PCW\Security]

Reboot::

Uložte rovněž na kořenový adresář c:\ jako CFScript.txt. Pak jej myší přetáhněte v průzkumníku windows (nebo jiném souborovém manažeru) nad ikonu Comobofix a pusťte. CF se spustí a vykoná příkazy ze skriptu.

[syskey]

ComboFix 14-03-05.01 - LAĎA 08.03.2014 21:25:16.2.4 - x64
Microsoft Windows 7 Home Premium 6.1.7601.1.1250.420.1029.18.7935.6504 [GMT 1:00]
Spuštěný z: C:\ComboFix.exe
Použité ovládací přepínače :: C:\CFScript.txt
AV: avast! Antivirus *Disabled/Outdated* {17AD7D40-BA12-9C46-7131-94903A54AD8B}
SP: avast! Antivirus *Disabled/Outdated* {ACCC9CA4-9C28-93C8-4B81-AFE241D3E736}
SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.
FILE ::
"c:\windows\Tasks\GoogleUpdateTaskMachineCore.job"
"c:\windows\Tasks\GoogleUpdateTaskMachineUA.job"
.
.
((((((((((((((((((((((((((((((((((((((( Ostatní výmazy )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
c:\users\LAĎA\AppData\Local\Temp\_MEI18642\_ctypes.pyd
c:\users\LAĎA\AppData\Local\Temp\_MEI18642\_elementtree.pyd
c:\users\LAĎA\AppData\Local\Temp\_MEI18642\_hashlib.pyd
c:\users\LAĎA\AppData\Local\Temp\_MEI18642\_multiprocessing.pyd
c:\users\LAĎA\AppData\Local\Temp\_MEI18642\_socket.pyd
c:\users\LAĎA\AppData\Local\Temp\_MEI18642\_ssl.pyd
c:\users\LAĎA\AppData\Local\Temp\_MEI18642\pyexpat.pyd
c:\users\LAĎA\AppData\Local\Temp\_MEI18642\pysqlite2._sqlite.pyd
c:\users\LAĎA\AppData\Local\Temp\_MEI18642\python27.dll
c:\users\LAĎA\AppData\Local\Temp\_MEI18642\pythoncom27.dll
c:\users\LAĎA\AppData\Local\Temp\_MEI18642\PyWinTypes27.dll
c:\users\LAĎA\AppData\Local\Temp\_MEI18642\select.pyd
c:\users\LAĎA\AppData\Local\Temp\_MEI18642\unicodedata.pyd
c:\users\LAĎA\AppData\Local\Temp\_MEI18642\win32api.pyd
c:\users\LAĎA\AppData\Local\Temp\_MEI18642\win32com.shell.shell.pyd
c:\users\LAĎA\AppData\Local\Temp\_MEI18642\win32crypt.pyd
c:\users\LAĎA\AppData\Local\Temp\_MEI18642\win32event.pyd
c:\users\LAĎA\AppData\Local\Temp\_MEI18642\win32file.pyd
c:\users\LAĎA\AppData\Local\Temp\_MEI18642\win32inet.pyd
c:\users\LAĎA\AppData\Local\Temp\_MEI18642\win32pdh.pyd
c:\users\LAĎA\AppData\Local\Temp\_MEI18642\win32pipe.pyd
c:\users\LAĎA\AppData\Local\Temp\_MEI18642\win32process.pyd
c:\users\LAĎA\AppData\Local\Temp\_MEI18642\win32profile.pyd
c:\users\LAĎA\AppData\Local\Temp\_MEI18642\win32security.pyd
c:\users\LAĎA\AppData\Local\Temp\_MEI18642\win32ts.pyd
c:\users\LAĎA\AppData\Local\Temp\_MEI18642\windows._lib_cacheinvalidation.pyd
c:\users\LAĎA\AppData\Local\Temp\_MEI18642\wx._controls_.pyd
c:\users\LAĎA\AppData\Local\Temp\_MEI18642\wx._core_.pyd
c:\users\LAĎA\AppData\Local\Temp\_MEI18642\wx._gdi_.pyd
c:\users\LAĎA\AppData\Local\Temp\_MEI18642\wx._html2.pyd
c:\users\LAĎA\AppData\Local\Temp\_MEI18642\wx._misc_.pyd
c:\users\LAĎA\AppData\Local\Temp\_MEI18642\wx._windows_.pyd
c:\users\LAĎA\AppData\Local\Temp\_MEI18642\wx._wizard.pyd
c:\users\LAĎA\AppData\Local\Temp\_MEI18642\wxbase294u_net_vc90.dll
c:\users\LAĎA\AppData\Local\Temp\_MEI18642\wxbase294u_vc90.dll
c:\users\LAĎA\AppData\Local\Temp\_MEI18642\wxmsw294u_adv_vc90.dll
c:\users\LAĎA\AppData\Local\Temp\_MEI18642\wxmsw294u_core_vc90.dll
c:\users\LAĎA\AppData\Local\Temp\_MEI18642\wxmsw294u_html_vc90.dll
c:\users\LAĎA\AppData\Local\Temp\_MEI18642\wxmsw294u_webview_vc90.dll
c:\users\LAA~1\AppData\Local\Temp\_MEI18642\_ctypes.pyd
c:\users\LAA~1\AppData\Local\Temp\_MEI18642\_elementtree.pyd
c:\users\LAA~1\AppData\Local\Temp\_MEI18642\_hashlib.pyd
c:\users\LAA~1\AppData\Local\Temp\_MEI18642\_multiprocessing.pyd
c:\users\LAA~1\AppData\Local\Temp\_MEI18642\_socket.pyd
c:\users\LAA~1\AppData\Local\Temp\_MEI18642\_ssl.pyd
c:\users\LAA~1\AppData\Local\Temp\_MEI18642\pyexpat.pyd
c:\users\LAA~1\AppData\Local\Temp\_MEI18642\pysqlite2._sqlite.pyd
c:\users\LAA~1\AppData\Local\Temp\_MEI18642\python27.dll
c:\users\LAA~1\AppData\Local\Temp\_MEI18642\pythoncom27.dll
c:\users\LAA~1\AppData\Local\Temp\_MEI18642\PyWinTypes27.dll
c:\users\LAA~1\AppData\Local\Temp\_MEI18642\select.pyd
c:\users\LAA~1\AppData\Local\Temp\_MEI18642\unicodedata.pyd
c:\users\LAA~1\AppData\Local\Temp\_MEI18642\win32api.pyd
c:\users\LAA~1\AppData\Local\Temp\_MEI18642\win32com.shell.shell.pyd
c:\users\LAA~1\AppData\Local\Temp\_MEI18642\win32crypt.pyd
c:\users\LAA~1\AppData\Local\Temp\_MEI18642\win32event.pyd
c:\users\LAA~1\AppData\Local\Temp\_MEI18642\win32file.pyd
c:\users\LAA~1\AppData\Local\Temp\_MEI18642\win32inet.pyd
c:\users\LAA~1\AppData\Local\Temp\_MEI18642\win32pdh.pyd
c:\users\LAA~1\AppData\Local\Temp\_MEI18642\win32pipe.pyd
c:\users\LAA~1\AppData\Local\Temp\_MEI18642\win32process.pyd
c:\users\LAA~1\AppData\Local\Temp\_MEI18642\win32profile.pyd
c:\users\LAA~1\AppData\Local\Temp\_MEI18642\win32security.pyd
c:\users\LAA~1\AppData\Local\Temp\_MEI18642\win32ts.pyd
c:\users\LAA~1\AppData\Local\Temp\_MEI18642\windows._lib_cacheinvalidation.pyd
c:\users\LAA~1\AppData\Local\Temp\_MEI18642\wx._controls_.pyd
c:\users\LAA~1\AppData\Local\Temp\_MEI18642\wx._core_.pyd
c:\users\LAA~1\AppData\Local\Temp\_MEI18642\wx._gdi_.pyd
c:\users\LAA~1\AppData\Local\Temp\_MEI18642\wx._html2.pyd
c:\users\LAA~1\AppData\Local\Temp\_MEI18642\wx._misc_.pyd
c:\users\LAA~1\AppData\Local\Temp\_MEI18642\wx._windows_.pyd
c:\users\LAA~1\AppData\Local\Temp\_MEI18642\wx._wizard.pyd
c:\users\LAA~1\AppData\Local\Temp\_MEI18642\wxbase294u_net_vc90.dll
c:\users\LAA~1\AppData\Local\Temp\_MEI18642\wxbase294u_vc90.dll
c:\users\LAA~1\AppData\Local\Temp\_MEI18642\wxmsw294u_adv_vc90.dll
c:\users\LAA~1\AppData\Local\Temp\_MEI18642\wxmsw294u_core_vc90.dll
c:\users\LAA~1\AppData\Local\Temp\_MEI18642\wxmsw294u_html_vc90.dll
c:\users\LAA~1\AppData\Local\Temp\_MEI18642\wxmsw294u_webview_vc90.dll
c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
.
.
((((((((((((((((((((((((( Soubory vytvořené od 2014-02-08 do 2014-03-08 )))))))))))))))))))))))))))))))
.
.
2014-03-08 20:28 . 2014-03-08 20:28 -------- d-----w- c:\users\Default\AppData\Local\temp
2014-03-08 18:17 . 2012-02-03 20:01 74344 ----a-w- c:\windows\system32\RtNicProp64.dll
2014-03-08 18:17 . 2012-02-03 20:01 677480 ----a-w- c:\windows\system32\drivers\Rt64win7.sys
2014-03-08 18:17 . 2012-02-03 20:01 107552 ----a-w- c:\windows\system32\RTNUninst64.dll
2014-03-08 16:12 . 2014-03-08 16:12 -------- d-----w- c:\users\LAĎA\AppData\Local\Diagnostics
2014-03-07 22:49 . 2014-03-07 22:50 -------- d-----w- C:\rsit
2014-03-07 22:49 . 2014-03-07 22:49 -------- d-----w- c:\program files (x86)\trend micro
2014-03-01 13:35 . 2014-03-01 13:35 -------- d-----w- c:\program files (x86)\MeeSoft
2014-02-28 22:53 . 2014-02-28 22:53 -------- d-----w- c:\windows\Migration
2014-02-28 18:32 . 2014-02-06 09:01 10536864 ----a-w- c:\programdata\Microsoft\Windows Defender\Definition Updates\{000D82D7-6E02-4738-917B-A14720C9400E}\mpengine.dll
2014-02-21 22:35 . 2014-02-21 22:35 80184 ----a-w- c:\windows\system32\drivers\aswStm.sys
2014-02-15 18:10 . 2014-02-15 18:10 -------- d-----w- c:\users\LAĎA\AppData\Roaming\Wireshark
2014-02-15 18:10 . 2014-02-15 18:10 -------- d-----w- c:\program files (x86)\WinPcap
2014-02-15 18:09 . 2014-02-15 18:10 -------- d-----w- c:\program files\Wireshark
2014-02-14 19:36 . 2013-12-06 02:30 2048 ----a-w- c:\windows\system32\msxml3r.dll
.
.
.
(((((((((((((((((((((((((((((((((((((((( Find3M výpis ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2014-02-22 12:05 . 2012-09-05 20:08 71048 ----a-w- c:\windows\SysWow64\FlashPlayerCPLApp.cpl
2014-02-22 12:05 . 2012-09-05 20:08 692616 ----a-w- c:\windows\SysWow64\FlashPlayerApp.exe
2014-02-21 22:35 . 2013-03-22 17:34 207904 ----a-w- c:\windows\system32\drivers\aswVmm.sys
2014-02-21 22:35 . 2013-01-27 12:03 421704 ----a-w- c:\windows\system32\drivers\aswSP.sys
2014-02-21 22:35 . 2013-01-27 12:03 78648 ----a-w- c:\windows\system32\drivers\aswMonFlt.sys
2014-02-21 22:35 . 2013-01-27 12:03 334136 ----a-w- c:\windows\system32\aswBoot.exe
2014-02-21 22:35 . 2013-01-27 12:03 1038072 ----a-w- c:\windows\system32\drivers\aswSnx.sys
2014-02-21 22:35 . 2013-01-27 12:03 43152 ----a-w- c:\windows\avastSS.scr
2014-02-16 22:32 . 2012-09-05 20:49 88567024 ----a-w- c:\windows\system32\MRT.exe
2013-12-18 20:09 . 2013-10-15 19:12 96168 ----a-w- c:\windows\SysWow64\WindowsAccessBridge-32.dll
2013-12-18 05:13 . 2010-11-21 03:27 270496 ------w- c:\windows\system32\MpSigStub.exe
.
.
(((((((((((((((((((((((((((((((((( Spouštěcí body v registru )))))))))))))))))))))))))))))))))))))))))))))
.
.
*Poznámka* prázdné záznamy a legitimní výchozí údaje nejsou zobrazeny.
REGEDIT4
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Sidebar"="c:\program files\Windows Sidebar\sidebar.exe" [2010-11-21 1475584]
"GoogleDriveSync"="c:\program files (x86)\Google\Drive\googledrivesync.exe" [2014-01-30 21822128]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]
"AvastUI.exe"="c:\program files\AVAST Software\Avast\AvastUI.exe" [2014-02-21 3767096]
"SunJavaUpdateSched"="c:\program files (x86)\Common Files\Java\Java Update\jusched.exe" [2013-07-02 254336]
"StartCCC"="c:\program files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" [2010-02-10 98304]
"GrooveMonitor"="c:\program files (x86)\Microsoft Office\Office12\GrooveMonitor.exe" [2009-02-26 30040]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorAdmin"= 5 (0x5)
"ConsentPromptBehaviorUser"= 3 (0x3)
"EnableUIADesktopToggle"= 0 (0x0)
.
[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\session manager]
BootExecute REG_MULTI_SZ autocheck autochk *\0\0sdnclean64.exe
.
R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [x]
R3 aswStm;aswStm;c:\windows\system32\drivers\aswStm.sys;c:\windows\SYSNATIVE\drivers\aswStm.sys [x]
R3 CGVPNCliSrvc;CyberGhost VPN Client;c:\program files\CyberGhost VPN\CGVPNCliService.exe;c:\program files\CyberGhost VPN\CGVPNCliService.exe [x]
R3 DrmCAudio;DrmCAudio;c:\windows\system32\drivers\DrmCAudio.sys;c:\windows\SYSNATIVE\drivers\DrmCAudio.sys [x]
R3 DrmRAudio;DrmRAudio;c:\windows\system32\drivers\DrmRAudio.sys;c:\windows\SYSNATIVE\drivers\DrmRAudio.sys [x]
R3 IEEtwCollectorService;Internet Explorer ETW Collector Service;c:\windows\system32\IEEtwCollector.exe;c:\windows\SYSNATIVE\IEEtwCollector.exe [x]
R3 RdpVideoMiniport;Remote Desktop Video Miniport Driver;c:\windows\system32\drivers\rdpvideominiport.sys;c:\windows\SYSNATIVE\drivers\rdpvideominiport.sys [x]
R3 RRNetCap;RRNetCap Service;c:\windows\system32\DRIVERS\rrnetcap.sys;c:\windows\SYSNATIVE\DRIVERS\rrnetcap.sys [x]
R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys;c:\windows\SYSNATIVE\drivers\tsusbflt.sys [x]
R3 TsUsbGD;Remote Desktop Generic USB Device;c:\windows\system32\drivers\TsUsbGD.sys;c:\windows\SYSNATIVE\drivers\TsUsbGD.sys [x]
R3 WatAdminSvc;Služba Technologie aktivace Windows;c:\windows\system32\Wat\WatAdminSvc.exe;c:\windows\SYSNATIVE\Wat\WatAdminSvc.exe [x]
R3 WsAudio_Device(1);WsAudio_Device(1);c:\windows\system32\drivers\VirtualAudio1.sys;c:\windows\SYSNATIVE\drivers\VirtualAudio1.sys [x]
R3 WsAudio_Device(2);WsAudio_Device(2);c:\windows\system32\drivers\VirtualAudio2.sys;c:\windows\SYSNATIVE\drivers\VirtualAudio2.sys [x]
R3 WsAudio_Device(3);WsAudio_Device(3);c:\windows\system32\drivers\VirtualAudio3.sys;c:\windows\SYSNATIVE\drivers\VirtualAudio3.sys [x]
R3 WsAudio_Device(4);WsAudio_Device(4);c:\windows\system32\drivers\VirtualAudio4.sys;c:\windows\SYSNATIVE\drivers\VirtualAudio4.sys [x]
R3 WsAudio_Device(5);WsAudio_Device(5);c:\windows\system32\drivers\VirtualAudio5.sys;c:\windows\SYSNATIVE\drivers\VirtualAudio5.sys [x]
S0 ahcix64;ahcix64;c:\windows\system32\DRIVERS\ahcix64.sys;c:\windows\SYSNATIVE\DRIVERS\ahcix64.sys [x]
S0 aswRvrt;avast! Revert; [x]
S0 aswVmm;avast! VM Monitor; [x]
S1 aswSnx;aswSnx;c:\windows\system32\drivers\aswSnx.sys;c:\windows\SYSNATIVE\drivers\aswSnx.sys [x]
S1 aswSP;aswSP;c:\windows\system32\drivers\aswSP.sys;c:\windows\SYSNATIVE\drivers\aswSP.sys [x]
S1 VBoxDrv;VirtualBox Service;c:\windows\system32\DRIVERS\VBoxDrv.sys;c:\windows\SYSNATIVE\DRIVERS\VBoxDrv.sys [x]
S1 VBoxUSBMon;VirtualBox USB Monitor Driver;c:\windows\system32\DRIVERS\VBoxUSBMon.sys;c:\windows\SYSNATIVE\DRIVERS\VBoxUSBMon.sys [x]
S2 AMD External Events Utility;AMD External Events Utility;c:\windows\system32\atiesrxx.exe;c:\windows\SYSNATIVE\atiesrxx.exe [x]
S2 aswMonFlt;aswMonFlt;c:\windows\system32\drivers\aswMonFlt.sys;c:\windows\SYSNATIVE\drivers\aswMonFlt.sys [x]
S2 BitBoxService;BitBoxService - ;c:\program files (x86)\Sirrix AG\BitBox\Service\BitBoxService.exe;c:\program files (x86)\Sirrix AG\BitBox\Service\BitBoxService.exe [x]
S2 NPF;NetGroup Packet Filter Driver;c:\windows\system32\drivers\npf.sys;c:\windows\SYSNATIVE\drivers\npf.sys [x]
S3 asmthub3;ASMedia USB3 Hub Service;c:\windows\system32\DRIVERS\asmthub3.sys;c:\windows\SYSNATIVE\DRIVERS\asmthub3.sys [x]
S3 asmtxhci;ASMEDIA XHCI Service;c:\windows\system32\DRIVERS\asmtxhci.sys;c:\windows\SYSNATIVE\DRIVERS\asmtxhci.sys [x]
S3 RRNetCapMP;RRNetCapMP;c:\windows\system32\DRIVERS\rrnetcap.sys;c:\windows\SYSNATIVE\DRIVERS\rrnetcap.sys [x]
S3 RTL8167;Realtek 8167 NT Driver;c:\windows\system32\DRIVERS\Rt64win7.sys;c:\windows\SYSNATIVE\DRIVERS\Rt64win7.sys [x]
S3 VBoxNetAdp;VirtualBox Host-Only Ethernet Adapter;c:\windows\system32\DRIVERS\VBoxNetAdp.sys;c:\windows\SYSNATIVE\DRIVERS\VBoxNetAdp.sys [x]
S3 VBoxNetFlt;VirtualBox Bridged Networking Service;c:\windows\system32\DRIVERS\VBoxNetFlt.sys;c:\windows\SYSNATIVE\DRIVERS\VBoxNetFlt.sys [x]
.
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\active setup\installed components\{8A69D345-D564-463c-AFF1-A69D9E530F96}]
2014-02-21 22:27 1150280 ----a-w- c:\program files (x86)\Google\Chrome\Application\33.0.1750.117\Installer\chrmstp.exe
.
Obsah adresáře 'Naplánované úlohy'
.
2014-03-08 c:\windows\Tasks\Adobe Flash Player Updater.job
- c:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2012-09-05 12:05]
.
.
--------- X64 Entries -----------
.
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\00avast]
@="{472083B0-C522-11CF-8763-00608CC02F24}"
[HKEY_CLASSES_ROOT\CLSID\{472083B0-C522-11CF-8763-00608CC02F24}]
2014-02-21 22:35 287280 ----a-w- c:\program files\AVAST Software\Avast\ashShA64.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\GDriveBlacklistedOverlay]
@="{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D42}"
[HKEY_CLASSES_ROOT\CLSID\{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D42}]
2014-01-30 14:05 777032 ----a-w- c:\program files (x86)\Google\Drive\googledrivesync64.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\GDriveSharedEditOverlay]
@="{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D44}"
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\GDriveSharedOverlay]
@="{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D44}"
[HKEY_CLASSES_ROOT\CLSID\{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D44}]
2014-01-30 14:05 777032 ----a-w- c:\program files (x86)\Google\Drive\googledrivesync64.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\GDriveSharedEditOverlay]
@="{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D44}"
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\GDriveSharedOverlay]
@="{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D44}"
[HKEY_CLASSES_ROOT\CLSID\{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D44}]
2014-01-30 14:05 777032 ----a-w- c:\program files (x86)\Google\Drive\googledrivesync64.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\GDriveSharedViewOverlay]
@="{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D43}"
[HKEY_CLASSES_ROOT\CLSID\{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D43}]
2014-01-30 14:05 777032 ----a-w- c:\program files (x86)\Google\Drive\googledrivesync64.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\GDriveSyncedOverlay]
@="{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D40}"
[HKEY_CLASSES_ROOT\CLSID\{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D40}]
2014-01-30 14:05 777032 ----a-w- c:\program files (x86)\Google\Drive\googledrivesync64.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\GDriveSyncingOverlay]
@="{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D41}"
[HKEY_CLASSES_ROOT\CLSID\{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D41}]
2014-01-30 14:05 777032 ----a-w- c:\program files (x86)\Google\Drive\googledrivesync64.dll
.
------- Doplňkový sken -------
.
uLocal Page = c:\windows\system32\blank.htm
mLocal Page = c:\windows\SysWOW64\blank.htm
uInternet Settings,ProxyOverride = <local>
IE: E&xportovat do aplikace Microsoft Excel - c:\progra~2\MICROS~1\Office12\EXCEL.EXE/3000
IE: Od&eslat do aplikace OneNote - c:\progra~2\MICROS~1\Office14\ONBttnIE.dll/105
TCP: DhcpNameServer = 10.0.0.138
FF - ProfilePath - c:\users\LAĎA\AppData\Roaming\Mozilla\Firefox\Profiles\jb10vft3.default\
.
- - - - NEPLATNÉ POLOŽKY ODSTRANĚNÉ Z REGISTRU - - - -
.
BHO-{3706EE7C-3CAD-445D-8A43-03EBC3B75908} - (no file)
.
.
.
--------------------- ZAMKNUTÉ KLÍČE V REGISTRU ---------------------
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil64_12_0_0_70_ActiveX.exe,-101"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\Elevation]
"Enabled"=dword:00000001
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\LocalServer32]
@="c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil64_12_0_0_70_ActiveX.exe"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
.
[HKEY_LOCAL_MACHINE\software\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="IFlashBroker5"
.
[HKEY_LOCAL_MACHINE\software\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"
.
[HKEY_LOCAL_MACHINE\software\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
.
------------------------ Jiné spuštené procesy ------------------------
.
c:\program files\AVAST Software\Avast\AvastSvc.exe
c:\program files (x86)\Google\Update\GoogleUpdate.exe
c:\program files (x86)\Google\Update\GoogleUpdate.exe
c:\program files\AVAST Software\Avast\setup\instup.exe
c:\program files (x86)\Google\Update\GoogleUpdate.exe
.
**************************************************************************
.
Celkový čas: 2014-03-08 21:30:54 - počítač byl restartován
ComboFix-quarantined-files.txt 2014-03-08 20:30
ComboFix2.txt 2014-03-08 19:30
.
Před spuštěním: Volných bajtů: 38 217 105 408
Po spuštění: Volných bajtů: 37 968 044 032
.
- - End Of File - - 0AFB0F45B4F3053B2878685648BF910A

[Rudy]

Smazáno. Nastala nějaká změna?

[syskey]

Internet v prohlížeči pořád nejede :/.