prosím o kontrolu logu

Zpráva

Loutka · #16 Příspěvek od **Loutka** » 05 lis 2012 13:56

RogueKiller V8.2.2 [11/03/2012] by Tigzy
mail: tigzyRK<at>gmail<dot>com
Podpora: http://www.geekstogo.com/forum/files/fi ... guekiller/
Website: http://tigzy.geekstogo.com/roguekiller.php
Operační systém: Windows 7 (6.1.7601 Service Pack 1) 64 bits version
Spuštěno v : Normální režim
Uživatel : Tonda [Práva správce]
Mód : Kontrola -- Datum : 11/05/2012 13:55:24

¤¤¤ Škodlivé procesy: : 0 ¤¤¤

¤¤¤ ¤¤¤ Záznamy Registrů: : 8 ¤¤¤
[DNS] HKLM\[...]\ControlSet001\Services\Interfaces\{1E0C9175-348B-43B6-9883-2E17D2AC5F2B} : NameServer (192.168.150.237,194.228.2.1) -> NALEZENO
[DNS] HKLM\[...]\ControlSet002\Services\Interfaces\{1E0C9175-348B-43B6-9883-2E17D2AC5F2B} : NameServer (192.168.150.237,194.228.2.1) -> NALEZENO
[HJPOL] HKLM\[...]\System : DisableTaskMgr (0) -> NALEZENO
[HJPOL] HKLM\[...]\System : DisableRegistryTools (0) -> NALEZENO
[HJPOL] HKLM\[...]\Wow6432Node\System : DisableTaskMgr (0) -> NALEZENO
[HJPOL] HKLM\[...]\Wow6432Node\System : DisableRegistryTools (0) -> NALEZENO
[HJ DESK] HKLM\[...]\NewStartPanel : {59031a47-3f72-44a7-89c5-5595fe6b30ee} (1) -> NALEZENO
[HJ DESK] HKLM\[...]\NewStartPanel : {20D04FE0-3AEA-1069-A2D8-08002B30309D} (1) -> NALEZENO

¤¤¤ Zvláštní soubory / Složky: ¤¤¤

¤¤¤ Ovladač : [NENAHRÁNO] ¤¤¤

¤¤¤ Soubor HOSTS: ¤¤¤
--> C:\windows\system32\drivers\etc\hosts

¤¤¤ Kontrola MBR: ¤¤¤

+++++ PhysicalDrive0: ST9750420AS +++++
--- User ---
[MBR] 2fb96464ec36a6e12a9dafb393087304
[BSP] 45b6424c9dd8d09708685277f5ffebff : Windows 7 MBR Code
Partition table:
0 - [XXXXXX] DELL-UTIL (0xde) [VISIBLE] Offset (sectors): 2048 | Size: 100 Mo
1 - [ACTIVE] NTFS (0x07) [VISIBLE] Offset (sectors): 206848 | Size: 15000 Mo
2 - [XXXXXX] NTFS (0x07) [VISIBLE] Offset (sectors): 30926848 | Size: 153000 Mo
3 - [XXXXXX] EXTEN (0x05) [VISIBLE] Offset (sectors): 344270848 | Size: 547303 Mo
User = LL1 ... OK!
User = LL2 ... OK!

Dokončeno : << RKreport[1]_S_11052012_02d1355.txt >>
RKreport[1]_S_11052012_02d1355.txt

#17 Příspěvek od **vyosek** » 05 lis 2012 16:28

Spustte znovu RogueKiller

Pokud pouzivate Win Vista ci W7, kliknete na RogueKiller pravym a dejte Run As Administrator ci Spustit jako spravce
Zvolte moznost Prohledat a pote Smazat a nasledne Zprava - otevre se log, ten sem vlozte
Pak kliknete na Oprava Host a Zprava - otevre se log, ten sem vlozte

Loutka · #18 Příspěvek od **Loutka** » 05 lis 2012 16:42

RogueKiller V8.2.2 [11/03/2012] by Tigzy
mail: tigzyRK<at>gmail<dot>com
Podpora: http://www.geekstogo.com/forum/files/fi ... guekiller/
Website: http://tigzy.geekstogo.com/roguekiller.php
Operační systém: Windows 7 (6.1.7601 Service Pack 1) 64 bits version
Spuštěno v : Normální režim
Uživatel : Tonda [Práva správce]
Mód : Odebrat -- Datum : 11/05/2012 16:40:44

¤¤¤ Škodlivé procesy: : 0 ¤¤¤

¤¤¤ ¤¤¤ Záznamy Registrů: : 6 ¤¤¤
[DNS] HKLM\[...]\ControlSet001\Services\Interfaces\{1E0C9175-348B-43B6-9883-2E17D2AC5F2B} : NameServer (192.168.150.237,194.228.2.1) -> NEBYLO ODSTRANĚNO, POUŽIJTE DNSFIX
[DNS] HKLM\[...]\ControlSet002\Services\Interfaces\{1E0C9175-348B-43B6-9883-2E17D2AC5F2B} : NameServer (192.168.150.237,194.228.2.1) -> NEBYLO ODSTRANĚNO, POUŽIJTE DNSFIX
[HJPOL] HKLM\[...]\System : DisableTaskMgr (0) -> VYMAZÁNO
[HJPOL] HKLM\[...]\System : DisableRegistryTools (0) -> VYMAZÁNO
[HJ DESK] HKLM\[...]\NewStartPanel : {59031a47-3f72-44a7-89c5-5595fe6b30ee} (1) -> NAHRAZENO (0)
[HJ DESK] HKLM\[...]\NewStartPanel : {20D04FE0-3AEA-1069-A2D8-08002B30309D} (1) -> NAHRAZENO (0)

¤¤¤ Zvláštní soubory / Složky: ¤¤¤

¤¤¤ Ovladač : [NENAHRÁNO] ¤¤¤

¤¤¤ Soubor HOSTS: ¤¤¤
--> C:\windows\system32\drivers\etc\hosts

¤¤¤ Kontrola MBR: ¤¤¤

+++++ PhysicalDrive0: ST9750420AS +++++
--- User ---
[MBR] 2fb96464ec36a6e12a9dafb393087304
[BSP] 45b6424c9dd8d09708685277f5ffebff : Windows 7 MBR Code
Partition table:
0 - [XXXXXX] DELL-UTIL (0xde) [VISIBLE] Offset (sectors): 2048 | Size: 100 Mo
1 - [ACTIVE] NTFS (0x07) [VISIBLE] Offset (sectors): 206848 | Size: 15000 Mo
2 - [XXXXXX] NTFS (0x07) [VISIBLE] Offset (sectors): 30926848 | Size: 153000 Mo
3 - [XXXXXX] EXTEN (0x05) [VISIBLE] Offset (sectors): 344270848 | Size: 547303 Mo
User = LL1 ... OK!
User = LL2 ... OK!

Dokončeno : << RKreport[3]_D_11052012_02d1640.txt >>
RKreport[1]_S_11052012_02d1355.txt ; RKreport[2]_S_11052012_02d1640.txt ; RKreport[3]_D_11052012_02d1640.txt

#19 Příspěvek od **vyosek** » 05 lis 2012 16:42

PROSIM CTETE DUKLADNE NAVOD - TATO UTILITA MA VELKOU SCHOPNOST MAZAT A JE NUTNE JI APLIKOVAT JEN NA DOPORUCENI, JINAK VAM MUZE JIT SYSTEM DO KYTEK

Stahnete a ulozte na plochu Combofix http://download.bleepingcomputer.com/sUBs/ComboFix.exe

Vypnete vsechny rezidentni bezpecnostní programy - firewally, antiviry, antispywary apod.
Pokud mate Win XP spustte pod uctem Spravce\Administratora
Pokud mate Win Vista ci Win 7, kliknete na Combofix pravym a dejte Run As Administrator ci Spustit jako spravce
Ihned po startu se zobrazi stranka s licencnim ujednanim, pokracujte kliknutim na Ano
Pokud Vam CF nabidne instalaci Konzoly pro zotaveni, tak souhlaste
Dale postupujte dle pokynu, behem scanu nechte PC naprosto v klidu - nespoustejte zadne aplikace a neklikejte do zobrazujiciho se okna
Scan by mel trvat cca 10 min, ale pokud bude PC hodne zaneseno, muze se cas prodlouzit
Po dokonceni skenu a pripadnem restartu CF zobrazi log, pripadne jej najdete zde C:\ComboFix.txt, jeho obsah sem vlozte
Detailni postup vc. obrazku mate zde http://www.bleepingcomputer.com/combofi ... t-combofix

Loutka · #20 Příspěvek od **Loutka** » 05 lis 2012 16:56

ComboFix 12-11-05.01 - Tonda 05.11.2012 16:49:51.1.4 - x64
Microsoft Windows 7 Home Premium 6.1.7601.1.1250.420.1029.18.6050.4392 [GMT 1:00]
Spuštěný z: c:\users\Tonda\Desktop\ComboFix.exe
AV: AVG Anti-Virus 2012 *Disabled/Updated* {5A2746B1-DEE9-F85A-FBCD-ADB11639C5F0}
SP: AVG Anti-Virus 2012 *Disabled/Updated* {E146A755-F8D3-F7D4-C17D-96C36DBE8F4D}
SP: Windows Defender *Disabled/Outdated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
* Vytvořen nový Bod Obnovení
.
.
((((((((((((((((((((((((((((((((((((((( Ostatní výmazy )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
c:\programdata\PCDr\6032\AddOnDownloaded\06004c97-c212-44da-81de-706b46554efe.dll
c:\programdata\PCDr\6032\AddOnDownloaded\07439fd5-7039-4014-b635-5bf088a1465b.dll
c:\programdata\PCDr\6032\AddOnDownloaded\087abda5-3ca9-433a-8a4e-6b9fc9285607.dll
c:\programdata\PCDr\6032\AddOnDownloaded\0d461521-7dbf-4cec-a29e-936c88cdf8c9.dll
c:\programdata\PCDr\6032\AddOnDownloaded\0d85b53c-d766-4bf0-8940-17b534910268.dll
c:\programdata\PCDr\6032\AddOnDownloaded\0f6f4769-e33b-4059-ac7e-958f5cedf6f3.dll
c:\programdata\PCDr\6032\AddOnDownloaded\100c3865-0c76-461b-b2fd-042d6d5fa7f6.dll
c:\programdata\PCDr\6032\AddOnDownloaded\16535d13-dd9f-48ff-8ae3-e3135157e6da.dll
c:\programdata\PCDr\6032\AddOnDownloaded\16837627-a839-41c5-a88f-3a0335128383.dll
c:\programdata\PCDr\6032\AddOnDownloaded\173c4dd2-e93c-4725-b006-db1d8f465192.dll
c:\programdata\PCDr\6032\AddOnDownloaded\1e0aaf9a-9947-4a7b-b1ae-8a89919438ed.dll
c:\programdata\PCDr\6032\AddOnDownloaded\263d6ac9-4f87-466c-947c-bd9af71d7035.dll
c:\programdata\PCDr\6032\AddOnDownloaded\2ee79d71-badc-46b4-b731-42b15f3cd1c3.dll
c:\programdata\PCDr\6032\AddOnDownloaded\305a1406-381f-449d-9486-32504a38e5b0.dll
c:\programdata\PCDr\6032\AddOnDownloaded\3410f47b-5e8c-47c6-bf2c-234af4121d4c.dll
c:\programdata\PCDr\6032\AddOnDownloaded\378deb7f-049e-4a5e-83b2-5381dcd9e928.dll
c:\programdata\PCDr\6032\AddOnDownloaded\3972fea3-214c-4935-a7d1-96bf66115683.dll
c:\programdata\PCDr\6032\AddOnDownloaded\3a79f062-8f3e-464f-9815-2c45840494ee.dll
c:\programdata\PCDr\6032\AddOnDownloaded\3b1c7acd-5e3e-4459-ab98-5109117e2341.dll
c:\programdata\PCDr\6032\AddOnDownloaded\3b429c4f-8ba9-4a7d-bbb4-4548bb6d2539.dll
c:\programdata\PCDr\6032\AddOnDownloaded\3c49c05a-0eb3-4044-a0f8-d4ea2a439295.dll
c:\programdata\PCDr\6032\AddOnDownloaded\3e4c86d5-a5c1-4c3f-8fc7-6258992b16c5.dll
c:\programdata\PCDr\6032\AddOnDownloaded\44ddba62-3b58-480f-a775-ae7e9dd9d5df.dll
c:\programdata\PCDr\6032\AddOnDownloaded\4546f2bc-b9d9-4667-abe7-b0bacc90279e.dll
c:\programdata\PCDr\6032\AddOnDownloaded\45d3827c-bce8-440f-bcda-3bd183a7bac3.dll
c:\programdata\PCDr\6032\AddOnDownloaded\4704833a-6508-40cc-b98b-5ebd235e52ca.dll
c:\programdata\PCDr\6032\AddOnDownloaded\4804ced5-915b-48a3-a465-b8a5e02714bf.dll
c:\programdata\PCDr\6032\AddOnDownloaded\4818e109-9489-4cd8-9044-44defd8ec187.dll
c:\programdata\PCDr\6032\AddOnDownloaded\493f295d-1a46-46f6-926c-63b474cedab4.dll
c:\programdata\PCDr\6032\AddOnDownloaded\5cd81d7c-326c-42d2-8929-1ee85c69dc1d.dll
c:\programdata\PCDr\6032\AddOnDownloaded\5e1c102f-bfde-420c-87c0-64fe851888e5.dll
c:\programdata\PCDr\6032\AddOnDownloaded\5f169f6e-cfce-411e-b266-aa53ac35ce83.dll
c:\programdata\PCDr\6032\AddOnDownloaded\62d1f0b0-bc9a-4f6c-bad7-93b19a91276a.dll
c:\programdata\PCDr\6032\AddOnDownloaded\67c3d4fe-b638-467a-9fe2-c5813ade3330.dll
c:\programdata\PCDr\6032\AddOnDownloaded\6820b110-e483-4f1e-9b48-438f7916f078.dll
c:\programdata\PCDr\6032\AddOnDownloaded\684a43a7-04d5-4797-bc20-4db8a316286c.dll
c:\programdata\PCDr\6032\AddOnDownloaded\6b5978fa-48d7-4309-a523-7e157768c0d8.dll
c:\programdata\PCDr\6032\AddOnDownloaded\6f4fb483-ce30-493a-8cb4-3e530ab1be5b.dll
c:\programdata\PCDr\6032\AddOnDownloaded\7014e871-cc3b-4dec-b82b-bc70222b40ed.dll
c:\programdata\PCDr\6032\AddOnDownloaded\739db3eb-d3cd-4c86-a6ea-01a49984fa3b.dll
c:\programdata\PCDr\6032\AddOnDownloaded\7bd83798-7a02-4f50-83a2-b91cabcbd1f9.dll
c:\programdata\PCDr\6032\AddOnDownloaded\7dbfef1a-6148-4748-a1b3-71627763a45a.dll
c:\programdata\PCDr\6032\AddOnDownloaded\813755dc-2229-47a2-b85b-19d0aaa641c9.dll
c:\programdata\PCDr\6032\AddOnDownloaded\819a7f02-352c-4ccc-8fd0-40d8959b0b10.dll
c:\programdata\PCDr\6032\AddOnDownloaded\872965c7-08b7-47fc-a74c-ff167590b71a.dll
c:\programdata\PCDr\6032\AddOnDownloaded\8a6735b1-c078-4648-9416-b6bb29ec3dc1.dll
c:\programdata\PCDr\6032\AddOnDownloaded\8c199aef-9eca-4ab6-863d-c9136ebec654.dll
c:\programdata\PCDr\6032\AddOnDownloaded\8d357f17-07ad-4392-ba06-fb67564c98cd.dll
c:\programdata\PCDr\6032\AddOnDownloaded\934f6059-2d35-4bd9-a130-a17cb5563507.dll
c:\programdata\PCDr\6032\AddOnDownloaded\9ad10df8-6662-488d-9a0f-1fab1ee3403d.dll
c:\programdata\PCDr\6032\AddOnDownloaded\9f8591c3-5048-42f7-9553-387b30449f54.dll
c:\programdata\PCDr\6032\AddOnDownloaded\a4930af9-016c-4915-a740-a3364e7618aa.dll
c:\programdata\PCDr\6032\AddOnDownloaded\a61f44a8-21a3-4c4a-a04b-993dfb73bf96.dll
c:\programdata\PCDr\6032\AddOnDownloaded\a875f6ee-9729-4447-8d2c-63bd2e6396c1.dll
c:\programdata\PCDr\6032\AddOnDownloaded\a9de0c84-9a7c-4638-9653-13aa8cf56e80.dll
c:\programdata\PCDr\6032\AddOnDownloaded\ac96894a-064b-4c44-a457-9d5aaee7032a.dll
c:\programdata\PCDr\6032\AddOnDownloaded\ae67b364-b69e-471e-b177-2459120b84d4.dll
c:\programdata\PCDr\6032\AddOnDownloaded\af728edb-0984-4c06-9a4b-0878bcfa9a26.dll
c:\programdata\PCDr\6032\AddOnDownloaded\b2152f30-7380-4987-8fcf-e4c06952615d.dll
c:\programdata\PCDr\6032\AddOnDownloaded\b2ed8d53-41ce-48e6-b4ac-8b8e5e1a4fdf.dll
c:\programdata\PCDr\6032\AddOnDownloaded\b4cc2a4a-87f5-49cd-935c-18f1a80e65b7.dll
c:\programdata\PCDr\6032\AddOnDownloaded\b510dd11-341c-4dfa-9f1e-dd5ddcc444f4.dll
c:\programdata\PCDr\6032\AddOnDownloaded\b9ce760f-6209-48f2-a4a3-695324591c45.dll
c:\programdata\PCDr\6032\AddOnDownloaded\bbfa36b0-30b0-4e36-8d8c-69df1d87626b.dll
c:\programdata\PCDr\6032\AddOnDownloaded\bc6fc708-5b6b-4a72-b336-09b3089baa7a.dll
c:\programdata\PCDr\6032\AddOnDownloaded\bf647bd7-dfb5-4746-a6b4-b7c2fdbbf3b1.dll
c:\programdata\PCDr\6032\AddOnDownloaded\c4211805-b43b-471d-81af-4e0589f8607b.dll
c:\programdata\PCDr\6032\AddOnDownloaded\cdda52ec-6ccd-425a-8c72-b7bbdc8b3acd.dll
c:\programdata\PCDr\6032\AddOnDownloaded\cf9bce06-e765-4c6f-afa9-0d82a3adc417.dll
c:\programdata\PCDr\6032\AddOnDownloaded\d1f4dc82-bc4c-4916-b37c-3ab9c30ae468.dll
c:\programdata\PCDr\6032\AddOnDownloaded\d34c0cf7-889f-43dd-9283-b2b6f442aae3.dll
c:\programdata\PCDr\6032\AddOnDownloaded\daf30858-49d8-434b-b4b1-068b5dc9267c.dll
c:\programdata\PCDr\6032\AddOnDownloaded\dc959002-1065-4317-b1a1-f360412a88d3.dll
c:\programdata\PCDr\6032\AddOnDownloaded\ddb9fe5d-525c-4d5d-ac37-0bd10f2864f8.dll
c:\programdata\PCDr\6032\AddOnDownloaded\e1ce76af-328a-41dc-b2c4-0dd9771f6aa1.dll
c:\programdata\PCDr\6032\AddOnDownloaded\e3e252fe-80ab-4f89-82a9-b607007220bd.dll
c:\programdata\PCDr\6032\AddOnDownloaded\e45cd45a-4d7c-4802-881f-74582b847e5c.dll
c:\programdata\PCDr\6032\AddOnDownloaded\e9bb45d9-5a2b-47e8-9c48-168276d422cc.dll
c:\programdata\PCDr\6032\AddOnDownloaded\eb115e4d-8592-4082-bffa-e65ae6b21e95.dll
c:\programdata\PCDr\6032\AddOnDownloaded\ed26c1b3-d9f9-42e8-80e0-cd62e65fd901.dll
c:\programdata\PCDr\6032\AddOnDownloaded\ed2cc678-a9e6-4ef7-89b6-9bada02d1a74.dll
c:\programdata\PCDr\6032\AddOnDownloaded\ef78c3e8-1d94-4219-8070-7617e119bba4.dll
c:\programdata\PCDr\6032\AddOnDownloaded\f06c5597-1a85-4d1f-ac16-a6fdd2a6bedc.dll
c:\programdata\PCDr\6032\AddOnDownloaded\f28ef68b-8cc4-4c00-891d-473fb67bd0b0.dll
c:\programdata\PCDr\6032\AddOnDownloaded\f80d4ad1-1fad-43b5-b6f3-347848b5ddd5.dll
c:\programdata\PCDr\6032\AddOnDownloaded\f9dc840b-c6f7-42a5-acec-50cc7a2827fd.dll
c:\programdata\Roaming
Y:\Autorun.inf
.
.
((((((((((((((((((((((((( Soubory vytvořené od 2012-10-05 do 2012-11-05 )))))))))))))))))))))))))))))))
.
.
2012-11-05 08:09 . 2012-11-05 08:09 -------- d-----w- c:\program files\CCleaner
2012-11-05 07:20 . 2012-11-05 07:20 -------- d-----w- c:\users\Tonda\AppData\Roaming\Malwarebytes
2012-11-05 07:19 . 2012-11-05 07:19 -------- d-----w- c:\programdata\Malwarebytes
2012-11-05 07:19 . 2012-11-05 07:19 -------- d-----w- c:\program files (x86)\Malwarebytes' Anti-Malware
2012-11-05 07:19 . 2012-09-29 18:54 25928 ----a-w- c:\windows\system32\drivers\mbam.sys
2012-11-04 18:33 . 2012-11-04 18:33 -------- d-----w- C:\rsit
2012-11-04 18:33 . 2012-11-04 18:33 -------- d-----w- c:\program files\trend micro
2012-11-02 11:06 . 2012-11-02 11:06 -------- d-----w- c:\programdata\PC-Doctor for Windows
2012-11-02 11:05 . 2012-11-02 11:06 -------- d-----w- c:\program files\Dell Support Center
2012-11-02 11:03 . 2012-11-02 11:04 -------- d-----w- c:\users\Tonda\AppData\Roaming\PCDr
2012-10-10 19:18 . 2012-10-10 19:18 -------- d-----w- c:\users\Tonda\AppData\Local\Dell Edoc Viewer
2012-10-10 17:19 . 2012-08-31 18:19 1659760 ----a-w- c:\windows\system32\drivers\ntfs.sys
2012-10-10 17:19 . 2012-08-30 18:03 5559664 ----a-w- c:\windows\system32\ntoskrnl.exe
2012-10-10 17:19 . 2012-08-30 17:12 3968880 ----a-w- c:\windows\SysWow64\ntkrnlpa.exe
2012-10-10 17:19 . 2012-08-30 17:12 3914096 ----a-w- c:\windows\SysWow64\ntoskrnl.exe
2012-10-10 17:17 . 2012-06-02 05:41 1464320 ----a-w- c:\windows\system32\crypt32.dll
2012-10-10 17:17 . 2012-06-02 04:36 1159680 ----a-w- c:\windows\SysWow64\crypt32.dll
2012-10-10 17:17 . 2012-06-02 05:41 184320 ----a-w- c:\windows\system32\cryptsvc.dll
2012-10-10 17:17 . 2012-06-02 05:41 140288 ----a-w- c:\windows\system32\cryptnet.dll
2012-10-10 17:17 . 2012-06-02 04:36 140288 ----a-w- c:\windows\SysWow64\cryptsvc.dll
2012-10-10 17:17 . 2012-06-02 04:36 103936 ----a-w- c:\windows\SysWow64\cryptnet.dll
.
.
.
(((((((((((((((((((((((((((((((((((((((( Find3M výpis ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2012-10-10 17:55 . 2012-03-31 17:54 65309168 ----a-w- c:\windows\system32\MRT.exe
2012-10-10 12:50 . 2012-04-28 18:47 696760 ----a-w- c:\windows\SysWow64\FlashPlayerApp.exe
2012-10-10 12:50 . 2011-12-22 21:41 73656 ----a-w- c:\windows\SysWow64\FlashPlayerCPLApp.cpl
2012-08-24 13:43 . 2012-08-24 13:43 384352 ----a-w- c:\windows\system32\drivers\avgtdia.sys
2012-08-24 11:15 . 2012-09-23 08:36 17810944 ----a-w- c:\windows\system32\mshtml.dll
2012-08-24 10:39 . 2012-09-23 08:36 10925568 ----a-w- c:\windows\system32\ieframe.dll
2012-08-24 10:31 . 2012-09-23 08:36 2312704 ----a-w- c:\windows\system32\jscript9.dll
2012-08-24 10:22 . 2012-09-23 08:36 1346048 ----a-w- c:\windows\system32\urlmon.dll
2012-08-24 10:21 . 2012-09-23 08:36 1392128 ----a-w- c:\windows\system32\wininet.dll
2012-08-24 10:20 . 2012-09-23 08:36 1494528 ----a-w- c:\windows\system32\inetcpl.cpl
2012-08-24 10:18 . 2012-09-23 08:37 237056 ----a-w- c:\windows\system32\url.dll
2012-08-24 10:17 . 2012-09-23 08:36 85504 ----a-w- c:\windows\system32\jsproxy.dll
2012-08-24 10:14 . 2012-09-23 08:37 173056 ----a-w- c:\windows\system32\ieUnatt.exe
2012-08-24 10:14 . 2012-09-23 08:36 816640 ----a-w- c:\windows\system32\jscript.dll
2012-08-24 10:13 . 2012-09-23 08:36 599040 ----a-w- c:\windows\system32\vbscript.dll
2012-08-24 10:12 . 2012-09-23 08:36 2144768 ----a-w- c:\windows\system32\iertutil.dll
2012-08-24 10:11 . 2012-09-23 08:36 729088 ----a-w- c:\windows\system32\msfeeds.dll
2012-08-24 10:10 . 2012-09-23 08:37 96768 ----a-w- c:\windows\system32\mshtmled.dll
2012-08-24 10:09 . 2012-09-23 08:37 2382848 ----a-w- c:\windows\system32\mshtml.tlb
2012-08-24 10:04 . 2012-09-23 08:37 248320 ----a-w- c:\windows\system32\ieui.dll
2012-08-24 06:59 . 2012-09-23 08:36 1800704 ----a-w- c:\windows\SysWow64\jscript9.dll
2012-08-24 06:51 . 2012-09-23 08:36 1129472 ----a-w- c:\windows\SysWow64\wininet.dll
2012-08-24 06:51 . 2012-09-23 08:36 1427968 ----a-w- c:\windows\SysWow64\inetcpl.cpl
2012-08-24 06:47 . 2012-09-23 08:37 142848 ----a-w- c:\windows\SysWow64\ieUnatt.exe
2012-08-24 06:47 . 2012-09-23 08:37 420864 ----a-w- c:\windows\SysWow64\vbscript.dll
2012-08-24 06:43 . 2012-09-23 08:37 2382848 ----a-w- c:\windows\SysWow64\mshtml.tlb
2012-08-22 18:12 . 2012-09-12 19:12 1913200 ----a-w- c:\windows\system32\drivers\tcpip.sys
2012-08-22 18:12 . 2012-09-12 19:12 950128 ----a-w- c:\windows\system32\drivers\ndis.sys
2012-08-22 18:12 . 2012-09-12 19:12 376688 ----a-w- c:\windows\system32\drivers\netio.sys
2012-08-22 18:12 . 2012-09-12 19:12 288624 ----a-w- c:\windows\system32\drivers\FWPKCLNT.SYS
2012-08-21 21:01 . 2012-09-26 18:40 245760 ----a-w- c:\windows\system32\OxpsConverter.exe
2012-08-20 17:38 . 2012-10-10 17:18 44032 ----a-w- c:\windows\apppatch\acwow64.dll
.
.
(((((((((((((((((((((((((((((((((( Spouštěcí body v registru )))))))))))))))))))))))))))))))))))))))))))))
.
.
*Poznámka* prázdné záznamy a legitimní výchozí údaje nejsou zobrazeny.
REGEDIT4
.
[HKEY_LOCAL_MACHINE\Wow6432Node\~\Browser Helper Objects\{95B7759C-8C7F-4BF1-B163-73684A933233}]
2012-07-11 14:17 2074208 ----a-w- c:\program files (x86)\AVG Secure Search\11.1.0.12\AVG Secure Search_toolbar.dll
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Toolbar]
"{95B7759C-8C7F-4BF1-B163-73684A933233}"= "c:\program files (x86)\AVG Secure Search\11.1.0.12\AVG Secure Search_toolbar.dll" [2012-07-11 2074208]
.
[HKEY_CLASSES_ROOT\clsid\{95b7759c-8c7f-4bf1-b163-73684a933233}]
[HKEY_CLASSES_ROOT\AVG Secure Search.PugiObj.1]
[HKEY_CLASSES_ROOT\AVG Secure Search.PugiObj]
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Sidebar"="c:\program files\Windows Sidebar\sidebar.exe" [2010-11-21 1475584]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]
"AVG_TRAY"="c:\program files (x86)\AVG\AVG2012\avgtray.exe" [2012-07-31 2596984]
"IAStorIcon"="c:\program files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe" [2010-11-06 283160]
"vProt"="c:\program files (x86)\AVG Secure Search\vprot.exe" [2012-07-11 1107552]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\RunOnce]
"Malwarebytes Anti-Malware"="c:\program files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe" [2012-09-29 766536]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorAdmin"= 5 (0x5)
"ConsentPromptBehaviorUser"= 3 (0x3)
"EnableUIADesktopToggle"= 0 (0x0)
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\windows]
"LoadAppInit_DLLs"=1 (0x1)
"AppInit_DLLs"=c:\windows\SysWOW64\nvinit.dll
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\drivers32]
"mixer7"=wdmaud.drv
.
[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\session manager]
BootExecute REG_MULTI_SZ autocheck autochk /p \??\y:\0autocheck autochk /p \??\y:\0autocheck autochk /r \??\y:\0autocheck autochk *\0c:\progra~2\AVG\AVG2012\avgrsa.exe /sync /restart
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MCODS]
@=""
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Wdf01000.sys]
@="Driver"
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\run-]
"Adobe ARM"="c:\program files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
"AccuWeatherWidget"="c:\program files (x86)\Dell Stage\Dell Stage\AccuWeather\accuweather.exe" "c:\program files (x86)\Dell Stage\Dell Stage\AccuWeather\start.umj" --startup
"Dell Webcam Central"="c:\program files (x86)\Dell Webcam\Dell Webcam Central\WebcamDell2.exe" /mode2
"GrooveMonitor"="c:\program files (x86)\Microsoft Office\Office12\GrooveMonitor.exe"
"NeroLauncher"=c:\program files (x86)\Nero\SyncUP\NeroLauncher.exe 900
"Desktop Disc Tool"="c:\program files (x86)\Roxio\OEM\Roxio Burn\RoxioBurnLauncher.exe"
"RoxWatchTray"="c:\program files (x86)\Common Files\Roxio Shared\OEM\12.0\SharedCOM\RoxWatchTray12OEM.exe"
"vProt"="c:\program files (x86)\AVG Secure Search\vprot.exe"
"Adobe Reader Speed Launcher"="c:\program files (x86)\Adobe\Reader 10.0\Reader\Reader_sl.exe"
.
R2 AVGIDSAgent;AVGIDSAgent;c:\program files (x86)\AVG\AVG2012\AVGIDSAgent.exe [2012-08-13 5167736]
R2 Bluetooth OBEX Service;Bluetooth OBEX Service;c:\program files (x86)\Intel\Bluetooth\obexsrv.exe [2011-05-19 995392]
R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2010-03-18 138576]
R2 MBAMService;MBAMService;c:\program files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe [2012-09-29 676936]
R2 RoxWatch12;Roxio Hard Drive Watcher 12;c:\program files (x86)\Common Files\Roxio Shared\OEM\12.0\SharedCOM\RoxWatch12OEM.exe [2010-11-25 219632]
R2 Skype C2C Service;Skype C2C Service;c:\programdata\Skype\Toolbars\Skype C2C Service\c2c_service.exe [2012-08-13 3064000]
R2 SkypeUpdate;Skype Updater;c:\program files (x86)\Skype\Updater\Updater.exe [2012-07-13 160944]
R3 AMPPALP;Protokol Intel® Centrino® Wireless Bluetooth® 3.0 + High Speed;c:\windows\system32\DRIVERS\amppal.sys [2011-09-15 299008]
R3 Bluetooth Media Service;Bluetooth Media Service;c:\program files (x86)\Intel\Bluetooth\mediasrv.exe [2011-05-19 1335360]
R3 intaud_WaveExtensible;Intel WiDi Audio Device;c:\windows\system32\drivers\intelaud.sys [2011-06-21 34200]
R3 MBAMProtector;MBAMProtector;c:\windows\system32\drivers\mbam.sys [2012-09-29 25928]
R3 MyWiFiDHCPDNS;Wireless PAN DHCP Server;c:\program files\Intel\WiFi\bin\PanDhcpDns.exe [2011-09-16 340240]
R3 RoxMediaDB12OEM;RoxMediaDB12OEM;c:\program files (x86)\Common Files\Roxio Shared\OEM\12.0\SharedCOM\RoxMediaDB12OEM.exe [2010-11-25 1116656]
R3 RSUSBSTOR;RtsUStor.Sys Realtek USB Card Reader;c:\windows\system32\Drivers\RtsUStor.sys [2010-10-30 250984]
R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys [2010-11-21 59392]
R3 TsUsbGD;Remote Desktop Generic USB Device;c:\windows\system32\drivers\TsUsbGD.sys [2010-11-21 31232]
R3 TurboBoost;Intel(R) Turbo Boost Technology Monitor 2.0;c:\program files\Intel\TurboBoost\TurboBoost.exe [2010-11-29 149504]
R3 WatAdminSvc;Služba Technologie aktivace Windows;c:\windows\system32\Wat\WatAdminSvc.exe [2012-03-31 1255736]
R4 wlcrasvc;Windows Live Mesh remote connections service;c:\program files\Windows Live\Mesh\wlcrasvc.exe [2010-09-23 57184]
S0 AVGIDSHA;AVGIDSHA;c:\windows\system32\DRIVERS\avgidsha.sys [2012-04-19 28480]
S0 Avgrkx64;AVG Anti-Rootkit Driver;c:\windows\system32\DRIVERS\avgrkx64.sys [2012-01-31 36944]
S0 nvpciflt;nvpciflt;c:\windows\system32\DRIVERS\nvpciflt.sys [2011-04-22 25960]
S0 PxHlpa64;PxHlpa64;c:\windows\System32\Drivers\PxHlpa64.sys [2010-03-19 55856]
S1 Avgldx64;AVG AVI Loader Driver;c:\windows\system32\DRIVERS\avgldx64.sys [2012-07-26 291680]
S1 Avgmfx64;AVG Mini-Filter Resident Anti-Virus Shield;c:\windows\system32\DRIVERS\avgmfx64.sys [2011-12-23 47696]
S1 Avgtdia;AVG TDI Driver;c:\windows\system32\DRIVERS\avgtdia.sys [2012-08-24 384352]
S2 AESTFilters;Andrea ST Filters Service;c:\program files\IDT\WDM\AESTSr64.exe [2009-03-03 89600]
S2 AMPPALR3;Intel® Centrino® Wireless Bluetooth® 3.0 + High Speed Service;c:\program files\Intel\BluetoothHS\BTHSAmpPalService.exe [2011-09-15 1166848]
S2 avgwd;AVG WatchDog;c:\program files (x86)\AVG\AVG2012\avgwdsvc.exe [2012-02-14 193288]
S2 Bluetooth Device Monitor;Bluetooth Device Monitor;c:\program files (x86)\Intel\Bluetooth\devmonsrv.exe [2011-05-19 921664]
S2 BTHSSecurityMgr;Intel(R) Centrino(R) Wireless Bluetooth(R) 3.0 + High Speed Security Service;c:\program files\Intel\BluetoothHS\BTHSSecurityMgr.exe [2011-06-03 134928]
S2 IAStorDataMgrSvc;Úložná technologie Intel(R) Rapid;c:\program files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe [2010-11-06 13336]
S2 NAUpdate;Nero Update;c:\program files (x86)\Nero\Update\NASvc.exe [2011-11-25 687400]
S2 SftService;SoftThinks Agent Service;c:\program files (x86)\Dell DataSafe Local Backup\sftservice.EXE [2011-08-18 1692480]
S2 Stereo Service;NVIDIA Stereoscopic 3D Driver Service;c:\program files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe [2011-04-22 378472]
S2 TeamViewer7;TeamViewer 7;c:\program files (x86)\TeamViewer\Version7\TeamViewer_Service.exe [2012-03-19 2666880]
S2 TomTomHOMEService;TomTomHOMEService;c:\program files (x86)\TomTom HOME 2\TomTomHOMEService.exe [2012-07-26 92632]
S2 TuneUp.UtilitiesSvc;TuneUp Utilities Service;c:\program files (x86)\TuneUp Utilities 2011\TuneUpUtilitiesService64.exe [2011-12-08 2028864]
S2 TurboB;Turbo Boost UI Monitor driver;c:\windows\system32\DRIVERS\TurboB.sys [2010-11-29 16120]
S2 UNS;Intel(R) Management and Security Application User Notification Service;c:\program files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe [2010-10-06 2655768]
S2 vToolbarUpdater11.2.0;vToolbarUpdater11.2.0;c:\program files (x86)\Common Files\AVG Secure Search\vToolbarUpdater\11.2.0\ToolbarUpdater.exe [2012-07-11 935008]
S3 AMPPAL;Virtuální adaptér Intel® Centrino® Wireless Bluetooth® 3.0 + High Speed;c:\windows\system32\DRIVERS\AMPPAL.sys [2011-09-15 299008]
S3 AVGIDSDriver;AVGIDSDriver;c:\windows\system32\DRIVERS\avgidsdrivera.sys [2011-12-23 124496]
S3 AVGIDSFilter;AVGIDSFilter;c:\windows\system32\DRIVERS\avgidsfiltera.sys [2011-12-23 29776]
S3 btmaudio;Intel Bluetooth Audio Service;c:\windows\system32\drivers\btmaud.sys [2011-05-19 51712]
S3 btmaux;Intel Bluetooth Auxiliary Service;c:\windows\system32\DRIVERS\btmaux.sys [2011-05-19 53248]
S3 btmhsf;btmhsf;c:\windows\system32\DRIVERS\btmhsf.sys [2011-11-14 327168]
S3 CtClsFlt;Creative Camera Class Upper Filter Driver;c:\windows\system32\DRIVERS\CtClsFlt.sys [2011-01-20 176096]
S3 iBtFltCoex;iBtFltCoex;c:\windows\system32\DRIVERS\iBtFltCoex.sys [2011-12-09 60416]
S3 iwdbus;IWD Bus Enumerator;c:\windows\system32\DRIVERS\iwdbus.sys [2011-06-21 25496]
S3 RTL8167;Realtek 8167 NT Driver;c:\windows\system32\DRIVERS\Rt64win7.sys [2011-06-10 539240]
S3 tihub3;TI USB3 Hub Service;c:\windows\system32\DRIVERS\tihub3.sys [2011-07-20 136000]
S3 tixhci;TI XHCI Service;c:\windows\system32\DRIVERS\tixhci.sys [2011-07-20 406336]
S3 TuneUpUtilitiesDrv;TuneUpUtilitiesDrv;c:\program files (x86)\TuneUp Utilities 2011\TuneUpUtilitiesDriver64.sys [2011-05-31 11856]
.
.
--- Ostatní služby/ovladače v paměti ---
.
*NewlyCreated* - 75460715
*NewlyCreated* - MBAMPROTECTOR
*Deregistered* - 75460715
.
Obsah adresáře 'Naplánované úlohy'
.
2012-11-05 c:\windows\Tasks\Adobe Flash Player Updater.job
- c:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2012-04-28 12:50]
.
2012-11-05 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
- c:\program files (x86)\Google\Update\GoogleUpdate.exe [2012-06-02 18:39]
.
2012-11-05 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
- c:\program files (x86)\Google\Update\GoogleUpdate.exe [2012-06-02 18:39]
.
2012-11-03 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2171802320-3057826182-27557160-1001Core.job
- c:\users\Tonda\AppData\Local\Google\Update\GoogleUpdate.exe [2012-07-11 18:39]
.
2012-11-05 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2171802320-3057826182-27557160-1001UA.job
- c:\users\Tonda\AppData\Local\Google\Update\GoogleUpdate.exe [2012-07-11 18:39]
.
.
--------- X64 Entries -----------
.
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"SysTrayApp"="c:\program files\IDT\WDM\sttray64.exe" [2011-01-25 525312]
"Apoint"="c:\program files\DellTPad\Apoint.exe" [2011-04-12 609144]
"IntelTBRunOnce"="wscript.exe" [2009-07-14 168960]
"IntelPAN"="c:\program files\Common Files\Intel\WirelessCommon\iFrmewrk.exe" [2011-09-16 1935120]
"IgfxTray"="c:\windows\system32\igfxtray.exe" [2011-04-20 168216]
"HotKeysCmds"="c:\windows\system32\hkcmd.exe" [2011-04-20 392472]
"Persistence"="c:\windows\system32\igfxpers.exe" [2011-04-20 416024]
"NVHotkey"="c:\windows\system32\nvHotkey.dll" [2011-04-22 312936]
"BTMTrayAgent"="c:\program files (x86)\Intel\Bluetooth\btmshell.dll" [2011-05-19 10365952]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
"AppInit_DLLs"=c:\windows\System32\nvinitx.dll
.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Svchost - NetSvcs
UxTuneUp
.
------- Doplňkový sken -------
.
uLocal Page = c:\windows\system32\blank.htm
uStart Page = hxxp://www.igoogle.cz/
mStart Page = hxxp://home.sweetim.com
mLocal Page = c:\windows\SysWOW64\blank.htm
IE: E&xportovat do aplikace Microsoft Excel - c:\progra~2\MICROS~1\Office12\EXCEL.EXE/3000
IE: Search the Web - c:\program files (x86)\SweetIM\Toolbars\Internet Explorer\resources\menuext.html
TCP: Interfaces\{1E0C9175-348B-43B6-9883-2E17D2AC5F2B}: NameServer = 192.168.150.237,194.228.2.1
Handler: viprotocol - {B658800C-F66E-4EF3-AB85-6C0C227862A9} - c:\program files (x86)\Common Files\AVG Secure Search\ViProtocolInstaller\11.2.0\ViProtocol.dll
.
- - - - NEPLATNÉ POLOŽKY ODSTRANĚNÉ Z REGISTRU - - - -
.
Wow6432Node-HKLM-Run-<NO NAME> - (no file)
WebBrowser-{EEE6C35B-6118-11DC-9C72-001320C79847} - (no file)
.
.
.
Celkový čas: 2012-11-05 16:56:13
ComboFix-quarantined-files.txt 2012-11-05 15:56
.
Před spuštěním: Volných bajtů: 95 411 814 400
Po spuštění: Volných bajtů: 95 306 907 648
.
- - End Of File - - AA9E9A10E4812EE6F1313C6A53C1FAA8

#21 Příspěvek od **vyosek** » 05 lis 2012 17:25

Stahnete AdwCleaner http://general-changelog-team.fr/fr/dow ... adwcleaner

Ulozte nejlepe na plochu
Ukoncete vsechny programy
Kliknete na Search
Probehne skenovani a pak se objevi log, pripadne bude ulozen na systemovem disku jako AdwCleaner[R?].txt, ten sem vlozte

Loutka · #22 Příspěvek od **Loutka** » 05 lis 2012 17:45

# AdwCleaner v2.006 - Logfile created 11/05/2012 at 17:44:51
# Updated 30/10/2012 by Xplode
# Operating system : Windows 7 Home Premium Service Pack 1 (64 bits)
# User : Tonda - TONDA-PC
# Boot Mode : Normal
# Running from : C:\Users\Tonda\Desktop\adwcleaner.exe
# Option [Search]

***** [Services] *****

Found : vToolbarUpdater11.2.0

***** [Files / Folders] *****

File Found : C:\Program Files (x86)\Mozilla FireFox\Components\AskSearch.js
Folder Found : C:\Program Files (x86)\AVG Secure Search
Folder Found : C:\Program Files (x86)\Common Files\AVG Secure Search
Folder Found : C:\ProgramData\AVG Secure Search
Folder Found : C:\Users\Tonda\AppData\Local\AVG Secure Search
Folder Found : C:\Users\Tonda\AppData\LocalLow\AVG Secure Search

***** [Registry] *****

Key Found : HKCU\Software\AppDataLow\Software
Key Found : HKCU\Software\AVG Secure Search
Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{95B7759C-8C7F-4BF1-B163-73684A933233}
Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{95B7759C-8C7F-4BF1-B163-73684A933233}
Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{F25AF245-4A81-40DC-92F9-E9021F207706}
Key Found : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{95B7759C-8C7F-4BF1-B163-73684A933233}
Key Found : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{CF739809-1C6C-47C0-85B9-569DBB141420}
Key Found : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{EEE6C360-6118-11DC-9C72-001320C79847}
Key Found : HKLM\Software\AVG Secure Search
Key Found : HKLM\SOFTWARE\Classes\AppID\{1FDFF5A2-7BB1-48E1-8081-7236812B12B2}
Key Found : HKLM\SOFTWARE\Classes\AppID\{BB711CB0-C70B-482E-9852-EC05EBD71DBB}
Key Found : HKLM\SOFTWARE\Classes\AppID\ScriptHelper.EXE
Key Found : HKLM\SOFTWARE\Classes\AppID\ViProtocol.DLL
Key Found : HKLM\SOFTWARE\Classes\AVG Secure Search.BrowserWndAPI
Key Found : HKLM\SOFTWARE\Classes\AVG Secure Search.BrowserWndAPI.1
Key Found : HKLM\SOFTWARE\Classes\AVG Secure Search.PugiObj
Key Found : HKLM\SOFTWARE\Classes\AVG Secure Search.PugiObj.1
Key Found : HKLM\SOFTWARE\Classes\PROTOCOLS\Handler\viprotocol
Key Found : HKLM\SOFTWARE\Classes\ScriptHelper.ScriptHelperApi
Key Found : HKLM\SOFTWARE\Classes\ScriptHelper.ScriptHelperApi.1
Key Found : HKLM\SOFTWARE\Classes\TypeLib\{74FB6AFD-DD77-4CEB-83BD-AB2B63E63C93}
Key Found : HKLM\SOFTWARE\Classes\TypeLib\{9C049BA6-EA47-4AC3-AED6-A66D8DC9E1D8}
Key Found : HKLM\SOFTWARE\Classes\TypeLib\{C2AC8A0E-E48E-484B-A71C-C7A937FAAB94}
Key Found : HKLM\SOFTWARE\Classes\ViProtocol.ViProtocolOLE
Key Found : HKLM\SOFTWARE\Classes\ViProtocol.ViProtocolOLE.1
Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{C6FDD0C3-266A-4DC3-B459-28C697C44CDC}
Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{F25AF245-4A81-40DC-92F9-E9021F207706}
Key Found : HKLM\SOFTWARE\MozillaPlugins\@avg.com/AVG SiteSafety plugin,version=11.0.0.1,application/x-avg-sitesafety-plugin
Key Found : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{4E92DB5F-AAD9-49D3-8EAB-B40CBE5B1FF7}
Key Found : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{95B7759C-8C7F-4BF1-B163-73684A933233}
Key Found : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{B658800C-F66E-4EF3-AB85-6C0C227862A9}
Key Found : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{CC5AD34C-6F10-4CB3-B74A-C2DD4D5060A3}
Key Found : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{E7DF6BFF-55A5-4EB7-A673-4ED3E9456D39}
Key Found : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{F25AF245-4A81-40DC-92F9-E9021F207706}
Key Found : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{03E2A1F3-4402-4121-8B35-733216D61217}
Key Found : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{4E92DB5F-AAD9-49D3-8EAB-B40CBE5B1FF7}
Key Found : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{9E3B11F6-4179-4603-A71B-A55F4BCB0BEC}
Key Found : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{C401D2CE-DC27-45C7-BC0C-8E6EA7F085D6}
Key Found : HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{E7DF6BFF-55A5-4EB7-A673-4ED3E9456D39}
Key Found : HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{F25AF245-4A81-40DC-92F9-E9021F207706}
Key Found : HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\SearchScopes\{EEE6C360-6118-11DC-9C72-001320C79847}
Key Found : HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{95B7759C-8C7F-4BF1-B163-73684A933233}
Key Found : HKLM\SOFTWARE\Classes\Interface\{03E2A1F3-4402-4121-8B35-733216D61217}
Key Found : HKLM\SOFTWARE\Classes\Interface\{4E92DB5F-AAD9-49D3-8EAB-B40CBE5B1FF7}
Key Found : HKLM\SOFTWARE\Classes\Interface\{9E3B11F6-4179-4603-A71B-A55F4BCB0BEC}
Key Found : HKLM\SOFTWARE\Classes\Interface\{C401D2CE-DC27-45C7-BC0C-8E6EA7F085D6}
Key Found : HKU\S-1-5-21-2171802320-3057826182-27557160-1001\Software\Microsoft\Internet Explorer\SearchScopes\{95B7759C-8C7F-4BF1-B163-73684A933233}
Key Found : HKU\S-1-5-21-2171802320-3057826182-27557160-1001\Software\Microsoft\Internet Explorer\SearchScopes\{CF739809-1C6C-47C0-85B9-569DBB141420}
Key Found : HKU\S-1-5-21-2171802320-3057826182-27557160-1001\Software\Microsoft\Internet Explorer\SearchScopes\{EEE6C360-6118-11DC-9C72-001320C79847}
Value Found : HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser [{EEE6C35B-6118-11DC-9C72-001320C79847}]
Value Found : HKLM\SOFTWARE\Mozilla\Firefox\Extensions [Avg@toolbar]
Value Found : HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Toolbar [{95B7759C-8C7F-4BF1-B163-73684A933233}]

***** [Internet Browsers] *****

-\\ Internet Explorer v9.0.8112.16421

[HKLM\SOFTWARE\Microsoft\Internet Explorer\Main - Start Page] = hxxp://home.sweetim.com
[HKLM\SOFTWARE\Microsoft\Internet Explorer\AboutURls - Tabs] = hxxp://isearch.avg.com/tab?cid={6FE2D89C-FE9C-4AA2-9647-98C91EC7148B}&mid=65b88d4dac8c47d09d329dc9d5b3a917-fbcc360ac9c5aeb272a564154f697878f3633c0d&lang=cs&ds=AVG&pr=pr&d=2012-03-30 16:39:43&v=9.0.0.22&sap=nt

-\\ Google Chrome v22.0.1229.94

File : C:\Users\Tonda\AppData\Local\Google\Chrome\User Data\Default\Preferences

[OK] File is clean.

*************************

AdwCleaner[R1].txt - [6218 octets] - [05/11/2012 17:44:51]

########## EOF - C:\AdwCleaner[R1].txt - [6278 octets] ##########

#23 Příspěvek od **vyosek** » 05 lis 2012 17:46

Spustte znovu AdwCleaner

Pokud pouzivate Win Vista ci W7, kliknete na AdwCleaner pravym a dejte Run As Administrator ci Spustit jako spravce
Kliknete na Delete
PC provede opravu, restartuje se a da Vam log (C:\AdwCleaner [S1].txt) , jeho obsah vlozte sem

Loutka · #24 Příspěvek od **Loutka** » 05 lis 2012 17:56

# AdwCleaner v2.006 - Logfile created 11/05/2012 at 17:51:41
# Updated 30/10/2012 by Xplode
# Operating system : Windows 7 Home Premium Service Pack 1 (64 bits)
# User : Tonda - TONDA-PC
# Boot Mode : Normal
# Running from : C:\Users\Tonda\Desktop\adwcleaner.exe
# Option [Delete]

***** [Services] *****

Stopped & Deleted : vToolbarUpdater11.2.0

***** [Files / Folders] *****

File Deleted : C:\Program Files (x86)\Mozilla FireFox\Components\AskSearch.js
Folder Deleted : C:\Program Files (x86)\AVG Secure Search
Folder Deleted : C:\Program Files (x86)\Common Files\AVG Secure Search
Folder Deleted : C:\ProgramData\AVG Secure Search
Folder Deleted : C:\Users\Tonda\AppData\Local\AVG Secure Search
Folder Deleted : C:\Users\Tonda\AppData\LocalLow\AVG Secure Search

***** [Registry] *****

Key Deleted : HKCU\Software\AppDataLow\Software
Key Deleted : HKCU\Software\AVG Secure Search
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{95B7759C-8C7F-4BF1-B163-73684A933233}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{95B7759C-8C7F-4BF1-B163-73684A933233}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{F25AF245-4A81-40DC-92F9-E9021F207706}
Key Deleted : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{95B7759C-8C7F-4BF1-B163-73684A933233}
Key Deleted : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{CF739809-1C6C-47C0-85B9-569DBB141420}
Key Deleted : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{EEE6C360-6118-11DC-9C72-001320C79847}
Key Deleted : HKLM\Software\AVG Secure Search
Key Deleted : HKLM\SOFTWARE\Classes\AppID\{1FDFF5A2-7BB1-48E1-8081-7236812B12B2}
Key Deleted : HKLM\SOFTWARE\Classes\AppID\{BB711CB0-C70B-482E-9852-EC05EBD71DBB}
Key Deleted : HKLM\SOFTWARE\Classes\AppID\ScriptHelper.EXE
Key Deleted : HKLM\SOFTWARE\Classes\AppID\ViProtocol.DLL
Key Deleted : HKLM\SOFTWARE\Classes\AVG Secure Search.BrowserWndAPI
Key Deleted : HKLM\SOFTWARE\Classes\AVG Secure Search.BrowserWndAPI.1
Key Deleted : HKLM\SOFTWARE\Classes\AVG Secure Search.PugiObj
Key Deleted : HKLM\SOFTWARE\Classes\AVG Secure Search.PugiObj.1
Key Deleted : HKLM\SOFTWARE\Classes\PROTOCOLS\Handler\viprotocol
Key Deleted : HKLM\SOFTWARE\Classes\ScriptHelper.ScriptHelperApi
Key Deleted : HKLM\SOFTWARE\Classes\ScriptHelper.ScriptHelperApi.1
Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{74FB6AFD-DD77-4CEB-83BD-AB2B63E63C93}
Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{9C049BA6-EA47-4AC3-AED6-A66D8DC9E1D8}
Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{C2AC8A0E-E48E-484B-A71C-C7A937FAAB94}
Key Deleted : HKLM\SOFTWARE\Classes\ViProtocol.ViProtocolOLE
Key Deleted : HKLM\SOFTWARE\Classes\ViProtocol.ViProtocolOLE.1
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{C6FDD0C3-266A-4DC3-B459-28C697C44CDC}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{F25AF245-4A81-40DC-92F9-E9021F207706}
Key Deleted : HKLM\SOFTWARE\MozillaPlugins\@avg.com/AVG SiteSafety plugin,version=11.0.0.1,application/x-avg-sitesafety-plugin
Key Deleted : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{4E92DB5F-AAD9-49D3-8EAB-B40CBE5B1FF7}
Key Deleted : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{95B7759C-8C7F-4BF1-B163-73684A933233}
Key Deleted : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{B658800C-F66E-4EF3-AB85-6C0C227862A9}
Key Deleted : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{CC5AD34C-6F10-4CB3-B74A-C2DD4D5060A3}
Key Deleted : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{E7DF6BFF-55A5-4EB7-A673-4ED3E9456D39}
Key Deleted : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{F25AF245-4A81-40DC-92F9-E9021F207706}
Key Deleted : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{03E2A1F3-4402-4121-8B35-733216D61217}
Key Deleted : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{4E92DB5F-AAD9-49D3-8EAB-B40CBE5B1FF7}
Key Deleted : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{9E3B11F6-4179-4603-A71B-A55F4BCB0BEC}
Key Deleted : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{C401D2CE-DC27-45C7-BC0C-8E6EA7F085D6}
Key Deleted : HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{E7DF6BFF-55A5-4EB7-A673-4ED3E9456D39}
Key Deleted : HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{F25AF245-4A81-40DC-92F9-E9021F207706}
Key Deleted : HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\SearchScopes\{EEE6C360-6118-11DC-9C72-001320C79847}
Key Deleted : HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{95B7759C-8C7F-4BF1-B163-73684A933233}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{03E2A1F3-4402-4121-8B35-733216D61217}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{4E92DB5F-AAD9-49D3-8EAB-B40CBE5B1FF7}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{9E3B11F6-4179-4603-A71B-A55F4BCB0BEC}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{C401D2CE-DC27-45C7-BC0C-8E6EA7F085D6}
Value Deleted : HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser [{EEE6C35B-6118-11DC-9C72-001320C79847}]
Value Deleted : HKLM\SOFTWARE\Mozilla\Firefox\Extensions [Avg@toolbar]
Value Deleted : HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Toolbar [{95B7759C-8C7F-4BF1-B163-73684A933233}]

***** [Internet Browsers] *****

-\\ Internet Explorer v9.0.8112.16421

Replaced : [HKLM\SOFTWARE\Microsoft\Internet Explorer\Main - Start Page] = hxxp://home.sweetim.com --> hxxp://www.google.com
Replaced : [HKLM\SOFTWARE\Microsoft\Internet Explorer\AboutURls - Tabs] = hxxp://isearch.avg.com/tab?cid={6FE2D89C-FE9C-4AA2-9647-98C91EC7148B}&mid=65b88d4dac8c47d09d329dc9d5b3a917-fbcc360ac9c5aeb272a564154f697878f3633c0d&lang=cs&ds=AVG&pr=pr&d=2012-03-30 16:39:43&v=9.0.0.22&sap=nt --> hxxp://www.google.com

-\\ Google Chrome v22.0.1229.94

File : C:\Users\Tonda\AppData\Local\Google\Chrome\User Data\Default\Preferences

[OK] File is clean.

*************************

AdwCleaner[R1].txt - [6333 octets] - [05/11/2012 17:44:51]
AdwCleaner[S1].txt - [6021 octets] - [05/11/2012 17:51:41]

########## EOF - C:\AdwCleaner[S1].txt - [6081 octets] ##########

#25 Příspěvek od **vyosek** » 05 lis 2012 17:58

Pokud nemate, tak presunte Combofix na plochu

Spustte poznamkovy blok (Start-spustit-notepad)
Zkopirujte skript nize

Kód: Vybrat vše

KillAll::

Folder::
c:\programdata\PC-Doctor for Windows
c:\users\Tonda\AppData\Roaming\PCDr

Registry::
[-HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\run-]

DDS::
mStart Page = hxxp://home.sweetim.com

File::
C:\windows\tasks\Adobe Flash Player Updater.job
C:\windows\tasks\GoogleUpdateTaskMachineCore.job
C:\windows\tasks\GoogleUpdateTaskMachineUA.job
C:\windows\tasks\GoogleUpdateTaskUserS-1-5-21-2171802320-3057826182-27557160-1001Core.job
C:\windows\tasks\GoogleUpdateTaskUserS-1-5-21-2171802320-3057826182-27557160-1001UA.job

ClearJavaCache::

Reboot::

Ulozte vytvoreny TXT jako CFScript.txt
Pretahnete vytvoreny CFScript.txt nad Combofix a pustte (viz obrazek nize)
Po aplikaci skriptu (a pripadnem restartu) na Vas vypadne log, jeho obsah sem vlozte

Pokud vyskoci hlaska "Pokus pouzit neplatnou operaci na klic registru, ktery je oznacen pro odstraneni", tak jen restartujte PC - registr se da do kupy - jedna se o vnitrni chybu, kterou zpusobuje CF a autor ji zatim neumi bohuzel opravit

Muze se stat, ze po aplikaci skriptu nenabehnou windows, v tomto pripade restartuje PC a mackejte F8 a zvolte Posledni znamou konfiguraci

Loutka · #26 Příspěvek od **Loutka** » 05 lis 2012 19:15

ComboFix 12-11-05.02 - Tonda 05.11.2012 19:01:13.2.4 - x64
Microsoft Windows 7 Home Premium 6.1.7601.1.1250.420.1029.18.6050.4210 [GMT 1:00]
Spuštěný z: c:\users\Tonda\Desktop\ComboFix.exe
Použité ovládací přepínače :: c:\users\Tonda\Desktop\CFScript.txt
AV: AVG Anti-Virus 2012 *Disabled/Updated* {5A2746B1-DEE9-F85A-FBCD-ADB11639C5F0}
SP: AVG Anti-Virus 2012 *Disabled/Updated* {E146A755-F8D3-F7D4-C17D-96C36DBE8F4D}
SP: Windows Defender *Disabled/Outdated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.
FILE ::
"c:\windows\tasks\Adobe Flash Player Updater.job"
"c:\windows\tasks\GoogleUpdateTaskMachineCore.job"
"c:\windows\tasks\GoogleUpdateTaskMachineUA.job"
"c:\windows\tasks\GoogleUpdateTaskUserS-1-5-21-2171802320-3057826182-27557160-1001Core.job"
"c:\windows\tasks\GoogleUpdateTaskUserS-1-5-21-2171802320-3057826182-27557160-1001UA.job"
.
.
((((((((((((((((((((((((((((((((((((((( Ostatní výmazy )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
c:\programdata\PC-Doctor for Windows
c:\programdata\PC-Doctor for Windows\startmenu\6032.55.bundle.dll.mui
c:\programdata\PC-Doctor for Windows\startmenu\CommandLine.dll
c:\programdata\PC-Doctor for Windows\startmenu\Common.dll
c:\programdata\PC-Doctor for Windows\startmenu\Microsoft.VC90.CRT.manifest
c:\programdata\PC-Doctor for Windows\startmenu\msvcm90.dll
c:\programdata\PC-Doctor for Windows\startmenu\msvcp90.dll
c:\programdata\PC-Doctor for Windows\startmenu\msvcr90.dll
c:\programdata\PC-Doctor for Windows\startmenu\startmenu-localizer.exe
c:\users\Tonda\AppData\Roaming\PCDr
c:\users\Tonda\AppData\Roaming\PCDr\Installer\Logs\full-nsis-wrapper.log
c:\users\Tonda\AppData\Roaming\PCDr\Installer\Logs\install_PC-Doctor for Windows.log
c:\users\Tonda\AppData\Roaming\PCDr\Update\Binaries\full_dsc_6032_55_64_02.exe
c:\users\Tonda\AppData\Roaming\PCDr\Update\Logs\appupdater.2012-11-02 12-03-10-1508.log
c:\users\Tonda\AppData\Roaming\PCDr\Update\Logs\appupdater.2012-11-02 12-04-21-6429.log
c:\users\Tonda\AppData\Roaming\PCDr\Update\Logs\appupdater.2012-11-03 03-40-50-3791.log
c:\users\Tonda\AppData\Roaming\PCDr\Update\Logs\appupdater.2012-11-04 01-01-51-3669.log
c:\users\Tonda\AppData\Roaming\PCDr\Update\Rules\0b958b75-ec6e-4fd1-a4b0-a1281e5733a0\appupdaterrules_dell\AddCertificate.exe
c:\users\Tonda\AppData\Roaming\PCDr\Update\Rules\0b958b75-ec6e-4fd1-a4b0-a1281e5733a0\appupdaterrules_dell\appupdaterrules.dll
c:\users\Tonda\AppData\Roaming\PCDr\Update\Rules\0b958b75-ec6e-4fd1-a4b0-a1281e5733a0\appupdaterrules_dell\appupdaterrules_dell.zip
c:\users\Tonda\AppData\Roaming\PCDr\Update\Rules\0b958b75-ec6e-4fd1-a4b0-a1281e5733a0\appupdaterrules_dell\settings_AuthorizedMachineCheck.xml
c:\users\Tonda\AppData\Roaming\PCDr\Update\Rules\0b958b75-ec6e-4fd1-a4b0-a1281e5733a0\appupdaterrules_dell\settings_CertStoreManager.xml
c:\users\Tonda\AppData\Roaming\PCDr\Update\Rules\0b958b75-ec6e-4fd1-a4b0-a1281e5733a0\appupdaterrules_dell\settings_DiskSpaceCheck.xml
c:\users\Tonda\AppData\Roaming\PCDr\Update\Rules\0b958b75-ec6e-4fd1-a4b0-a1281e5733a0\appupdaterrules_dell\settings_FixModuleCrash.xml
c:\users\Tonda\AppData\Roaming\PCDr\Update\Rules\0b958b75-ec6e-4fd1-a4b0-a1281e5733a0\appupdaterrules_dell\settings_FixMyBuildID.xml
c:\users\Tonda\AppData\Roaming\PCDr\Update\Rules\0b958b75-ec6e-4fd1-a4b0-a1281e5733a0\appupdaterrules_dell\settings_FixUnistallMsiIssue.xml
c:\users\Tonda\AppData\Roaming\PCDr\Update\Rules\0b958b75-ec6e-4fd1-a4b0-a1281e5733a0\appupdaterrules_dell\settings_UpdateFromCheck.xml
c:\users\Tonda\AppData\Roaming\PCDr\Update\Rules\0b958b75-ec6e-4fd1-a4b0-a1281e5733a0\appupdaterrules_dell\strings_AuthorizedMachineCheck.xml
c:\users\Tonda\AppData\Roaming\PCDr\Update\Rules\0b958b75-ec6e-4fd1-a4b0-a1281e5733a0\appupdaterrules_dell\strings_CertStoreManager.xml
c:\users\Tonda\AppData\Roaming\PCDr\Update\Rules\0b958b75-ec6e-4fd1-a4b0-a1281e5733a0\appupdaterrules_dell\strings_DiskSpaceCheck.xml
c:\users\Tonda\AppData\Roaming\PCDr\Update\Rules\0b958b75-ec6e-4fd1-a4b0-a1281e5733a0\appupdaterrules_dell\strings_FixModuleCrash.xml
c:\users\Tonda\AppData\Roaming\PCDr\Update\Rules\0b958b75-ec6e-4fd1-a4b0-a1281e5733a0\appupdaterrules_dell\strings_FixMyBuildID.xml
c:\users\Tonda\AppData\Roaming\PCDr\Update\Rules\0b958b75-ec6e-4fd1-a4b0-a1281e5733a0\appupdaterrules_dell\strings_FixUnistallMsiIssue.xml
c:\users\Tonda\AppData\Roaming\PCDr\Update\Rules\0b958b75-ec6e-4fd1-a4b0-a1281e5733a0\appupdaterrules_dell\strings_UpdateFromCheck.xml
c:\users\Tonda\AppData\Roaming\PCDr\Update\Rules\17c59d39-edf9-43b1-9c7a-ca2ddcf6c628\appupdaterrules_dell\AddCertificate.exe
c:\users\Tonda\AppData\Roaming\PCDr\Update\Rules\17c59d39-edf9-43b1-9c7a-ca2ddcf6c628\appupdaterrules_dell\appupdaterrules.dll
c:\users\Tonda\AppData\Roaming\PCDr\Update\Rules\17c59d39-edf9-43b1-9c7a-ca2ddcf6c628\appupdaterrules_dell\appupdaterrules_dell.zip
c:\users\Tonda\AppData\Roaming\PCDr\Update\Rules\17c59d39-edf9-43b1-9c7a-ca2ddcf6c628\appupdaterrules_dell\settings_AuthorizedMachineCheck.xml
c:\users\Tonda\AppData\Roaming\PCDr\Update\Rules\17c59d39-edf9-43b1-9c7a-ca2ddcf6c628\appupdaterrules_dell\settings_CertStoreManager.xml
c:\users\Tonda\AppData\Roaming\PCDr\Update\Rules\17c59d39-edf9-43b1-9c7a-ca2ddcf6c628\appupdaterrules_dell\settings_DiskSpaceCheck.xml
c:\users\Tonda\AppData\Roaming\PCDr\Update\Rules\17c59d39-edf9-43b1-9c7a-ca2ddcf6c628\appupdaterrules_dell\settings_FixModuleCrash.xml
c:\users\Tonda\AppData\Roaming\PCDr\Update\Rules\17c59d39-edf9-43b1-9c7a-ca2ddcf6c628\appupdaterrules_dell\settings_FixMyBuildID.xml
c:\users\Tonda\AppData\Roaming\PCDr\Update\Rules\17c59d39-edf9-43b1-9c7a-ca2ddcf6c628\appupdaterrules_dell\settings_FixUnistallMsiIssue.xml
c:\users\Tonda\AppData\Roaming\PCDr\Update\Rules\17c59d39-edf9-43b1-9c7a-ca2ddcf6c628\appupdaterrules_dell\settings_UpdateFromCheck.xml
c:\users\Tonda\AppData\Roaming\PCDr\Update\Rules\17c59d39-edf9-43b1-9c7a-ca2ddcf6c628\appupdaterrules_dell\strings_AuthorizedMachineCheck.xml
c:\users\Tonda\AppData\Roaming\PCDr\Update\Rules\17c59d39-edf9-43b1-9c7a-ca2ddcf6c628\appupdaterrules_dell\strings_CertStoreManager.xml
c:\users\Tonda\AppData\Roaming\PCDr\Update\Rules\17c59d39-edf9-43b1-9c7a-ca2ddcf6c628\appupdaterrules_dell\strings_DiskSpaceCheck.xml
c:\users\Tonda\AppData\Roaming\PCDr\Update\Rules\17c59d39-edf9-43b1-9c7a-ca2ddcf6c628\appupdaterrules_dell\strings_FixModuleCrash.xml
c:\users\Tonda\AppData\Roaming\PCDr\Update\Rules\17c59d39-edf9-43b1-9c7a-ca2ddcf6c628\appupdaterrules_dell\strings_FixMyBuildID.xml
c:\users\Tonda\AppData\Roaming\PCDr\Update\Rules\17c59d39-edf9-43b1-9c7a-ca2ddcf6c628\appupdaterrules_dell\strings_FixUnistallMsiIssue.xml
c:\users\Tonda\AppData\Roaming\PCDr\Update\Rules\17c59d39-edf9-43b1-9c7a-ca2ddcf6c628\appupdaterrules_dell\strings_UpdateFromCheck.xml
c:\users\Tonda\AppData\Roaming\PCDr\Update\Rules\2716840b-695e-4088-a3f4-dc82feafd2b0\appupdaterrules_dell\AddCertificate.exe
c:\users\Tonda\AppData\Roaming\PCDr\Update\Rules\2716840b-695e-4088-a3f4-dc82feafd2b0\appupdaterrules_dell\appupdaterrules.dll
c:\users\Tonda\AppData\Roaming\PCDr\Update\Rules\2716840b-695e-4088-a3f4-dc82feafd2b0\appupdaterrules_dell\appupdaterrules_dell.zip
c:\users\Tonda\AppData\Roaming\PCDr\Update\Rules\2716840b-695e-4088-a3f4-dc82feafd2b0\appupdaterrules_dell\settings_AuthorizedMachineCheck.xml
c:\users\Tonda\AppData\Roaming\PCDr\Update\Rules\2716840b-695e-4088-a3f4-dc82feafd2b0\appupdaterrules_dell\settings_CertStoreManager.xml
c:\users\Tonda\AppData\Roaming\PCDr\Update\Rules\2716840b-695e-4088-a3f4-dc82feafd2b0\appupdaterrules_dell\settings_DiskSpaceCheck.xml
c:\users\Tonda\AppData\Roaming\PCDr\Update\Rules\2716840b-695e-4088-a3f4-dc82feafd2b0\appupdaterrules_dell\settings_FixModuleCrash.xml
c:\users\Tonda\AppData\Roaming\PCDr\Update\Rules\2716840b-695e-4088-a3f4-dc82feafd2b0\appupdaterrules_dell\settings_FixMyBuildID.xml
c:\users\Tonda\AppData\Roaming\PCDr\Update\Rules\2716840b-695e-4088-a3f4-dc82feafd2b0\appupdaterrules_dell\settings_FixUnistallMsiIssue.xml
c:\users\Tonda\AppData\Roaming\PCDr\Update\Rules\2716840b-695e-4088-a3f4-dc82feafd2b0\appupdaterrules_dell\settings_UpdateFromCheck.xml
c:\users\Tonda\AppData\Roaming\PCDr\Update\Rules\2716840b-695e-4088-a3f4-dc82feafd2b0\appupdaterrules_dell\strings_AuthorizedMachineCheck.xml
c:\users\Tonda\AppData\Roaming\PCDr\Update\Rules\2716840b-695e-4088-a3f4-dc82feafd2b0\appupdaterrules_dell\strings_CertStoreManager.xml
c:\users\Tonda\AppData\Roaming\PCDr\Update\Rules\2716840b-695e-4088-a3f4-dc82feafd2b0\appupdaterrules_dell\strings_DiskSpaceCheck.xml
c:\users\Tonda\AppData\Roaming\PCDr\Update\Rules\2716840b-695e-4088-a3f4-dc82feafd2b0\appupdaterrules_dell\strings_FixModuleCrash.xml
c:\users\Tonda\AppData\Roaming\PCDr\Update\Rules\2716840b-695e-4088-a3f4-dc82feafd2b0\appupdaterrules_dell\strings_FixMyBuildID.xml
c:\users\Tonda\AppData\Roaming\PCDr\Update\Rules\2716840b-695e-4088-a3f4-dc82feafd2b0\appupdaterrules_dell\strings_FixUnistallMsiIssue.xml
c:\users\Tonda\AppData\Roaming\PCDr\Update\Rules\2716840b-695e-4088-a3f4-dc82feafd2b0\appupdaterrules_dell\strings_UpdateFromCheck.xml
c:\users\Tonda\AppData\Roaming\PCDr\Update\Rules\6f14a5b0-2350-400b-8696-3c88cb2f186f\appupdaterrules_dell\AddCertificate.exe
c:\users\Tonda\AppData\Roaming\PCDr\Update\Rules\6f14a5b0-2350-400b-8696-3c88cb2f186f\appupdaterrules_dell\appupdaterrules.dll
c:\users\Tonda\AppData\Roaming\PCDr\Update\Rules\6f14a5b0-2350-400b-8696-3c88cb2f186f\appupdaterrules_dell\appupdaterrules_dell.zip
c:\users\Tonda\AppData\Roaming\PCDr\Update\Rules\6f14a5b0-2350-400b-8696-3c88cb2f186f\appupdaterrules_dell\settings_AuthorizedMachineCheck.xml
c:\users\Tonda\AppData\Roaming\PCDr\Update\Rules\6f14a5b0-2350-400b-8696-3c88cb2f186f\appupdaterrules_dell\settings_CertStoreManager.xml
c:\users\Tonda\AppData\Roaming\PCDr\Update\Rules\6f14a5b0-2350-400b-8696-3c88cb2f186f\appupdaterrules_dell\settings_DiskSpaceCheck.xml
c:\users\Tonda\AppData\Roaming\PCDr\Update\Rules\6f14a5b0-2350-400b-8696-3c88cb2f186f\appupdaterrules_dell\settings_FixModuleCrash.xml
c:\users\Tonda\AppData\Roaming\PCDr\Update\Rules\6f14a5b0-2350-400b-8696-3c88cb2f186f\appupdaterrules_dell\settings_FixMyBuildID.xml
c:\users\Tonda\AppData\Roaming\PCDr\Update\Rules\6f14a5b0-2350-400b-8696-3c88cb2f186f\appupdaterrules_dell\settings_FixUnistallMsiIssue.xml
c:\users\Tonda\AppData\Roaming\PCDr\Update\Rules\6f14a5b0-2350-400b-8696-3c88cb2f186f\appupdaterrules_dell\settings_UpdateFromCheck.xml
c:\users\Tonda\AppData\Roaming\PCDr\Update\Rules\6f14a5b0-2350-400b-8696-3c88cb2f186f\appupdaterrules_dell\strings_AuthorizedMachineCheck.xml
c:\users\Tonda\AppData\Roaming\PCDr\Update\Rules\6f14a5b0-2350-400b-8696-3c88cb2f186f\appupdaterrules_dell\strings_CertStoreManager.xml
c:\users\Tonda\AppData\Roaming\PCDr\Update\Rules\6f14a5b0-2350-400b-8696-3c88cb2f186f\appupdaterrules_dell\strings_DiskSpaceCheck.xml
c:\users\Tonda\AppData\Roaming\PCDr\Update\Rules\6f14a5b0-2350-400b-8696-3c88cb2f186f\appupdaterrules_dell\strings_FixModuleCrash.xml
c:\users\Tonda\AppData\Roaming\PCDr\Update\Rules\6f14a5b0-2350-400b-8696-3c88cb2f186f\appupdaterrules_dell\strings_FixMyBuildID.xml
c:\users\Tonda\AppData\Roaming\PCDr\Update\Rules\6f14a5b0-2350-400b-8696-3c88cb2f186f\appupdaterrules_dell\strings_FixUnistallMsiIssue.xml
c:\users\Tonda\AppData\Roaming\PCDr\Update\Rules\6f14a5b0-2350-400b-8696-3c88cb2f186f\appupdaterrules_dell\strings_UpdateFromCheck.xml
c:\users\Tonda\AppData\Roaming\PCDr\Update\Rules\92d2bb9a-f2cd-4114-a132-c2ca5d750641\appupdaterrules_dell\AddCertificate.exe
c:\users\Tonda\AppData\Roaming\PCDr\Update\Rules\92d2bb9a-f2cd-4114-a132-c2ca5d750641\appupdaterrules_dell\appupdaterrules.dll
c:\users\Tonda\AppData\Roaming\PCDr\Update\Rules\92d2bb9a-f2cd-4114-a132-c2ca5d750641\appupdaterrules_dell\appupdaterrules_dell.zip
c:\users\Tonda\AppData\Roaming\PCDr\Update\Rules\92d2bb9a-f2cd-4114-a132-c2ca5d750641\appupdaterrules_dell\settings_AuthorizedMachineCheck.xml
c:\users\Tonda\AppData\Roaming\PCDr\Update\Rules\92d2bb9a-f2cd-4114-a132-c2ca5d750641\appupdaterrules_dell\settings_CertStoreManager.xml
c:\users\Tonda\AppData\Roaming\PCDr\Update\Rules\92d2bb9a-f2cd-4114-a132-c2ca5d750641\appupdaterrules_dell\settings_DiskSpaceCheck.xml
c:\users\Tonda\AppData\Roaming\PCDr\Update\Rules\92d2bb9a-f2cd-4114-a132-c2ca5d750641\appupdaterrules_dell\settings_FixModuleCrash.xml
c:\users\Tonda\AppData\Roaming\PCDr\Update\Rules\92d2bb9a-f2cd-4114-a132-c2ca5d750641\appupdaterrules_dell\settings_FixMyBuildID.xml
c:\users\Tonda\AppData\Roaming\PCDr\Update\Rules\92d2bb9a-f2cd-4114-a132-c2ca5d750641\appupdaterrules_dell\settings_FixUnistallMsiIssue.xml
c:\users\Tonda\AppData\Roaming\PCDr\Update\Rules\92d2bb9a-f2cd-4114-a132-c2ca5d750641\appupdaterrules_dell\settings_UpdateFromCheck.xml
c:\users\Tonda\AppData\Roaming\PCDr\Update\Rules\92d2bb9a-f2cd-4114-a132-c2ca5d750641\appupdaterrules_dell\strings_AuthorizedMachineCheck.xml
c:\users\Tonda\AppData\Roaming\PCDr\Update\Rules\92d2bb9a-f2cd-4114-a132-c2ca5d750641\appupdaterrules_dell\strings_CertStoreManager.xml
c:\users\Tonda\AppData\Roaming\PCDr\Update\Rules\92d2bb9a-f2cd-4114-a132-c2ca5d750641\appupdaterrules_dell\strings_DiskSpaceCheck.xml
c:\users\Tonda\AppData\Roaming\PCDr\Update\Rules\92d2bb9a-f2cd-4114-a132-c2ca5d750641\appupdaterrules_dell\strings_FixModuleCrash.xml
c:\users\Tonda\AppData\Roaming\PCDr\Update\Rules\92d2bb9a-f2cd-4114-a132-c2ca5d750641\appupdaterrules_dell\strings_FixMyBuildID.xml
c:\users\Tonda\AppData\Roaming\PCDr\Update\Rules\92d2bb9a-f2cd-4114-a132-c2ca5d750641\appupdaterrules_dell\strings_FixUnistallMsiIssue.xml
c:\users\Tonda\AppData\Roaming\PCDr\Update\Rules\92d2bb9a-f2cd-4114-a132-c2ca5d750641\appupdaterrules_dell\strings_UpdateFromCheck.xml
c:\users\Tonda\AppData\Roaming\PCDr\Update\Rules\97acd83f-32b6-46e9-9412-addaf369ea89\appupdaterrules_dell\AddCertificate.exe
c:\users\Tonda\AppData\Roaming\PCDr\Update\Rules\97acd83f-32b6-46e9-9412-addaf369ea89\appupdaterrules_dell\appupdaterrules.dll
c:\users\Tonda\AppData\Roaming\PCDr\Update\Rules\97acd83f-32b6-46e9-9412-addaf369ea89\appupdaterrules_dell\appupdaterrules_dell.zip
c:\users\Tonda\AppData\Roaming\PCDr\Update\Rules\97acd83f-32b6-46e9-9412-addaf369ea89\appupdaterrules_dell\settings_AuthorizedMachineCheck.xml
c:\users\Tonda\AppData\Roaming\PCDr\Update\Rules\97acd83f-32b6-46e9-9412-addaf369ea89\appupdaterrules_dell\settings_CertStoreManager.xml
c:\users\Tonda\AppData\Roaming\PCDr\Update\Rules\97acd83f-32b6-46e9-9412-addaf369ea89\appupdaterrules_dell\settings_DiskSpaceCheck.xml
c:\users\Tonda\AppData\Roaming\PCDr\Update\Rules\97acd83f-32b6-46e9-9412-addaf369ea89\appupdaterrules_dell\settings_FixModuleCrash.xml
c:\users\Tonda\AppData\Roaming\PCDr\Update\Rules\97acd83f-32b6-46e9-9412-addaf369ea89\appupdaterrules_dell\settings_FixMyBuildID.xml
c:\users\Tonda\AppData\Roaming\PCDr\Update\Rules\97acd83f-32b6-46e9-9412-addaf369ea89\appupdaterrules_dell\settings_FixUnistallMsiIssue.xml
c:\users\Tonda\AppData\Roaming\PCDr\Update\Rules\97acd83f-32b6-46e9-9412-addaf369ea89\appupdaterrules_dell\settings_UpdateFromCheck.xml
c:\users\Tonda\AppData\Roaming\PCDr\Update\Rules\97acd83f-32b6-46e9-9412-addaf369ea89\appupdaterrules_dell\strings_AuthorizedMachineCheck.xml
c:\users\Tonda\AppData\Roaming\PCDr\Update\Rules\97acd83f-32b6-46e9-9412-addaf369ea89\appupdaterrules_dell\strings_CertStoreManager.xml
c:\users\Tonda\AppData\Roaming\PCDr\Update\Rules\97acd83f-32b6-46e9-9412-addaf369ea89\appupdaterrules_dell\strings_DiskSpaceCheck.xml
c:\users\Tonda\AppData\Roaming\PCDr\Update\Rules\97acd83f-32b6-46e9-9412-addaf369ea89\appupdaterrules_dell\strings_FixModuleCrash.xml
c:\users\Tonda\AppData\Roaming\PCDr\Update\Rules\97acd83f-32b6-46e9-9412-addaf369ea89\appupdaterrules_dell\strings_FixMyBuildID.xml
c:\users\Tonda\AppData\Roaming\PCDr\Update\Rules\97acd83f-32b6-46e9-9412-addaf369ea89\appupdaterrules_dell\strings_FixUnistallMsiIssue.xml
c:\users\Tonda\AppData\Roaming\PCDr\Update\Rules\97acd83f-32b6-46e9-9412-addaf369ea89\appupdaterrules_dell\strings_UpdateFromCheck.xml
c:\users\Tonda\AppData\Roaming\PCDr\Update\Rules\b57bc94a-1c99-42ff-beae-64c217e90eab\appupdaterrules_dell\AddCertificate.exe
c:\users\Tonda\AppData\Roaming\PCDr\Update\Rules\b57bc94a-1c99-42ff-beae-64c217e90eab\appupdaterrules_dell\appupdaterrules.dll
c:\users\Tonda\AppData\Roaming\PCDr\Update\Rules\b57bc94a-1c99-42ff-beae-64c217e90eab\appupdaterrules_dell\appupdaterrules_dell.zip
c:\users\Tonda\AppData\Roaming\PCDr\Update\Rules\b57bc94a-1c99-42ff-beae-64c217e90eab\appupdaterrules_dell\settings_AuthorizedMachineCheck.xml
c:\users\Tonda\AppData\Roaming\PCDr\Update\Rules\b57bc94a-1c99-42ff-beae-64c217e90eab\appupdaterrules_dell\settings_CertStoreManager.xml
c:\users\Tonda\AppData\Roaming\PCDr\Update\Rules\b57bc94a-1c99-42ff-beae-64c217e90eab\appupdaterrules_dell\settings_DiskSpaceCheck.xml
c:\users\Tonda\AppData\Roaming\PCDr\Update\Rules\b57bc94a-1c99-42ff-beae-64c217e90eab\appupdaterrules_dell\settings_FixModuleCrash.xml
c:\users\Tonda\AppData\Roaming\PCDr\Update\Rules\b57bc94a-1c99-42ff-beae-64c217e90eab\appupdaterrules_dell\settings_FixMyBuildID.xml
c:\users\Tonda\AppData\Roaming\PCDr\Update\Rules\b57bc94a-1c99-42ff-beae-64c217e90eab\appupdaterrules_dell\settings_FixUnistallMsiIssue.xml
c:\users\Tonda\AppData\Roaming\PCDr\Update\Rules\b57bc94a-1c99-42ff-beae-64c217e90eab\appupdaterrules_dell\settings_UpdateFromCheck.xml
c:\users\Tonda\AppData\Roaming\PCDr\Update\Rules\b57bc94a-1c99-42ff-beae-64c217e90eab\appupdaterrules_dell\strings_AuthorizedMachineCheck.xml
c:\users\Tonda\AppData\Roaming\PCDr\Update\Rules\b57bc94a-1c99-42ff-beae-64c217e90eab\appupdaterrules_dell\strings_CertStoreManager.xml
c:\users\Tonda\AppData\Roaming\PCDr\Update\Rules\b57bc94a-1c99-42ff-beae-64c217e90eab\appupdaterrules_dell\strings_DiskSpaceCheck.xml
c:\users\Tonda\AppData\Roaming\PCDr\Update\Rules\b57bc94a-1c99-42ff-beae-64c217e90eab\appupdaterrules_dell\strings_FixModuleCrash.xml
c:\users\Tonda\AppData\Roaming\PCDr\Update\Rules\b57bc94a-1c99-42ff-beae-64c217e90eab\appupdaterrules_dell\strings_FixMyBuildID.xml
c:\users\Tonda\AppData\Roaming\PCDr\Update\Rules\b57bc94a-1c99-42ff-beae-64c217e90eab\appupdaterrules_dell\strings_FixUnistallMsiIssue.xml
c:\users\Tonda\AppData\Roaming\PCDr\Update\Rules\b57bc94a-1c99-42ff-beae-64c217e90eab\appupdaterrules_dell\strings_UpdateFromCheck.xml
c:\users\Tonda\AppData\Roaming\PCDr\Update\Rules\b67042fe-3e1b-41c7-851f-39757d71cdb8\appupdaterrules_dell\AddCertificate.exe
c:\users\Tonda\AppData\Roaming\PCDr\Update\Rules\b67042fe-3e1b-41c7-851f-39757d71cdb8\appupdaterrules_dell\appupdaterrules.dll
c:\users\Tonda\AppData\Roaming\PCDr\Update\Rules\b67042fe-3e1b-41c7-851f-39757d71cdb8\appupdaterrules_dell\appupdaterrules_dell.zip
c:\users\Tonda\AppData\Roaming\PCDr\Update\Rules\b67042fe-3e1b-41c7-851f-39757d71cdb8\appupdaterrules_dell\settings_AuthorizedMachineCheck.xml
c:\users\Tonda\AppData\Roaming\PCDr\Update\Rules\b67042fe-3e1b-41c7-851f-39757d71cdb8\appupdaterrules_dell\settings_CertStoreManager.xml
c:\users\Tonda\AppData\Roaming\PCDr\Update\Rules\b67042fe-3e1b-41c7-851f-39757d71cdb8\appupdaterrules_dell\settings_DiskSpaceCheck.xml
c:\users\Tonda\AppData\Roaming\PCDr\Update\Rules\b67042fe-3e1b-41c7-851f-39757d71cdb8\appupdaterrules_dell\settings_FixModuleCrash.xml
c:\users\Tonda\AppData\Roaming\PCDr\Update\Rules\b67042fe-3e1b-41c7-851f-39757d71cdb8\appupdaterrules_dell\settings_FixMyBuildID.xml
c:\users\Tonda\AppData\Roaming\PCDr\Update\Rules\b67042fe-3e1b-41c7-851f-39757d71cdb8\appupdaterrules_dell\settings_FixUnistallMsiIssue.xml
c:\users\Tonda\AppData\Roaming\PCDr\Update\Rules\b67042fe-3e1b-41c7-851f-39757d71cdb8\appupdaterrules_dell\settings_UpdateFromCheck.xml
c:\users\Tonda\AppData\Roaming\PCDr\Update\Rules\b67042fe-3e1b-41c7-851f-39757d71cdb8\appupdaterrules_dell\strings_AuthorizedMachineCheck.xml
c:\users\Tonda\AppData\Roaming\PCDr\Update\Rules\b67042fe-3e1b-41c7-851f-39757d71cdb8\appupdaterrules_dell\strings_CertStoreManager.xml
c:\users\Tonda\AppData\Roaming\PCDr\Update\Rules\b67042fe-3e1b-41c7-851f-39757d71cdb8\appupdaterrules_dell\strings_DiskSpaceCheck.xml
c:\users\Tonda\AppData\Roaming\PCDr\Update\Rules\b67042fe-3e1b-41c7-851f-39757d71cdb8\appupdaterrules_dell\strings_FixModuleCrash.xml
c:\users\Tonda\AppData\Roaming\PCDr\Update\Rules\b67042fe-3e1b-41c7-851f-39757d71cdb8\appupdaterrules_dell\strings_FixMyBuildID.xml
c:\users\Tonda\AppData\Roaming\PCDr\Update\Rules\b67042fe-3e1b-41c7-851f-39757d71cdb8\appupdaterrules_dell\strings_FixUnistallMsiIssue.xml
c:\users\Tonda\AppData\Roaming\PCDr\Update\Rules\b67042fe-3e1b-41c7-851f-39757d71cdb8\appupdaterrules_dell\strings_UpdateFromCheck.xml
c:\users\Tonda\AppData\Roaming\PCDr\Update\Rules\ca4ade65-4cdd-4da0-8f01-6554899cfa05\appupdaterrules_dell\AddCertificate.exe
c:\users\Tonda\AppData\Roaming\PCDr\Update\Rules\ca4ade65-4cdd-4da0-8f01-6554899cfa05\appupdaterrules_dell\appupdaterrules.dll
c:\users\Tonda\AppData\Roaming\PCDr\Update\Rules\ca4ade65-4cdd-4da0-8f01-6554899cfa05\appupdaterrules_dell\appupdaterrules_dell.zip
c:\users\Tonda\AppData\Roaming\PCDr\Update\Rules\ca4ade65-4cdd-4da0-8f01-6554899cfa05\appupdaterrules_dell\settings_AuthorizedMachineCheck.xml
c:\users\Tonda\AppData\Roaming\PCDr\Update\Rules\ca4ade65-4cdd-4da0-8f01-6554899cfa05\appupdaterrules_dell\settings_CertStoreManager.xml
c:\users\Tonda\AppData\Roaming\PCDr\Update\Rules\ca4ade65-4cdd-4da0-8f01-6554899cfa05\appupdaterrules_dell\settings_DiskSpaceCheck.xml
c:\users\Tonda\AppData\Roaming\PCDr\Update\Rules\ca4ade65-4cdd-4da0-8f01-6554899cfa05\appupdaterrules_dell\settings_FixModuleCrash.xml
c:\users\Tonda\AppData\Roaming\PCDr\Update\Rules\ca4ade65-4cdd-4da0-8f01-6554899cfa05\appupdaterrules_dell\settings_FixMyBuildID.xml
c:\users\Tonda\AppData\Roaming\PCDr\Update\Rules\ca4ade65-4cdd-4da0-8f01-6554899cfa05\appupdaterrules_dell\settings_FixUnistallMsiIssue.xml
c:\users\Tonda\AppData\Roaming\PCDr\Update\Rules\ca4ade65-4cdd-4da0-8f01-6554899cfa05\appupdaterrules_dell\settings_UpdateFromCheck.xml
c:\users\Tonda\AppData\Roaming\PCDr\Update\Rules\ca4ade65-4cdd-4da0-8f01-6554899cfa05\appupdaterrules_dell\strings_AuthorizedMachineCheck.xml
c:\users\Tonda\AppData\Roaming\PCDr\Update\Rules\ca4ade65-4cdd-4da0-8f01-6554899cfa05\appupdaterrules_dell\strings_CertStoreManager.xml
c:\users\Tonda\AppData\Roaming\PCDr\Update\Rules\ca4ade65-4cdd-4da0-8f01-6554899cfa05\appupdaterrules_dell\strings_DiskSpaceCheck.xml
c:\users\Tonda\AppData\Roaming\PCDr\Update\Rules\ca4ade65-4cdd-4da0-8f01-6554899cfa05\appupdaterrules_dell\strings_FixModuleCrash.xml
c:\users\Tonda\AppData\Roaming\PCDr\Update\Rules\ca4ade65-4cdd-4da0-8f01-6554899cfa05\appupdaterrules_dell\strings_FixMyBuildID.xml
c:\users\Tonda\AppData\Roaming\PCDr\Update\Rules\ca4ade65-4cdd-4da0-8f01-6554899cfa05\appupdaterrules_dell\strings_FixUnistallMsiIssue.xml
c:\users\Tonda\AppData\Roaming\PCDr\Update\Rules\ca4ade65-4cdd-4da0-8f01-6554899cfa05\appupdaterrules_dell\strings_UpdateFromCheck.xml
c:\users\Tonda\AppData\Roaming\PCDr\Update\Rules\e44ded94-172b-4dbd-b1a0-b408375a701b\appupdaterrules_dell\AddCertificate.exe
c:\users\Tonda\AppData\Roaming\PCDr\Update\Rules\e44ded94-172b-4dbd-b1a0-b408375a701b\appupdaterrules_dell\appupdaterrules.dll
c:\users\Tonda\AppData\Roaming\PCDr\Update\Rules\e44ded94-172b-4dbd-b1a0-b408375a701b\appupdaterrules_dell\appupdaterrules_dell.zip
c:\users\Tonda\AppData\Roaming\PCDr\Update\Rules\e44ded94-172b-4dbd-b1a0-b408375a701b\appupdaterrules_dell\settings_AuthorizedMachineCheck.xml
c:\users\Tonda\AppData\Roaming\PCDr\Update\Rules\e44ded94-172b-4dbd-b1a0-b408375a701b\appupdaterrules_dell\settings_CertStoreManager.xml
c:\users\Tonda\AppData\Roaming\PCDr\Update\Rules\e44ded94-172b-4dbd-b1a0-b408375a701b\appupdaterrules_dell\settings_DiskSpaceCheck.xml
c:\users\Tonda\AppData\Roaming\PCDr\Update\Rules\e44ded94-172b-4dbd-b1a0-b408375a701b\appupdaterrules_dell\settings_FixModuleCrash.xml
c:\users\Tonda\AppData\Roaming\PCDr\Update\Rules\e44ded94-172b-4dbd-b1a0-b408375a701b\appupdaterrules_dell\settings_FixMyBuildID.xml
c:\users\Tonda\AppData\Roaming\PCDr\Update\Rules\e44ded94-172b-4dbd-b1a0-b408375a701b\appupdaterrules_dell\settings_FixUnistallMsiIssue.xml
c:\users\Tonda\AppData\Roaming\PCDr\Update\Rules\e44ded94-172b-4dbd-b1a0-b408375a701b\appupdaterrules_dell\settings_UpdateFromCheck.xml
c:\users\Tonda\AppData\Roaming\PCDr\Update\Rules\e44ded94-172b-4dbd-b1a0-b408375a701b\appupdaterrules_dell\strings_AuthorizedMachineCheck.xml
c:\users\Tonda\AppData\Roaming\PCDr\Update\Rules\e44ded94-172b-4dbd-b1a0-b408375a701b\appupdaterrules_dell\strings_CertStoreManager.xml
c:\users\Tonda\AppData\Roaming\PCDr\Update\Rules\e44ded94-172b-4dbd-b1a0-b408375a701b\appupdaterrules_dell\strings_DiskSpaceCheck.xml
c:\users\Tonda\AppData\Roaming\PCDr\Update\Rules\e44ded94-172b-4dbd-b1a0-b408375a701b\appupdaterrules_dell\strings_FixModuleCrash.xml
c:\users\Tonda\AppData\Roaming\PCDr\Update\Rules\e44ded94-172b-4dbd-b1a0-b408375a701b\appupdaterrules_dell\strings_FixMyBuildID.xml
c:\users\Tonda\AppData\Roaming\PCDr\Update\Rules\e44ded94-172b-4dbd-b1a0-b408375a701b\appupdaterrules_dell\strings_FixUnistallMsiIssue.xml
c:\users\Tonda\AppData\Roaming\PCDr\Update\Rules\e44ded94-172b-4dbd-b1a0-b408375a701b\appupdaterrules_dell\strings_UpdateFromCheck.xml
c:\users\Tonda\AppData\Roaming\PCDr\Update\Rules\eab9f524-88eb-4334-8c7e-895e63f9d5ad\appupdaterrules_dell\AddCertificate.exe
c:\users\Tonda\AppData\Roaming\PCDr\Update\Rules\eab9f524-88eb-4334-8c7e-895e63f9d5ad\appupdaterrules_dell\appupdaterrules.dll
c:\users\Tonda\AppData\Roaming\PCDr\Update\Rules\eab9f524-88eb-4334-8c7e-895e63f9d5ad\appupdaterrules_dell\appupdaterrules_dell.zip
c:\users\Tonda\AppData\Roaming\PCDr\Update\Rules\eab9f524-88eb-4334-8c7e-895e63f9d5ad\appupdaterrules_dell\settings_AuthorizedMachineCheck.xml
c:\users\Tonda\AppData\Roaming\PCDr\Update\Rules\eab9f524-88eb-4334-8c7e-895e63f9d5ad\appupdaterrules_dell\settings_CertStoreManager.xml
c:\users\Tonda\AppData\Roaming\PCDr\Update\Rules\eab9f524-88eb-4334-8c7e-895e63f9d5ad\appupdaterrules_dell\settings_DiskSpaceCheck.xml
c:\users\Tonda\AppData\Roaming\PCDr\Update\Rules\eab9f524-88eb-4334-8c7e-895e63f9d5ad\appupdaterrules_dell\settings_FixModuleCrash.xml
c:\users\Tonda\AppData\Roaming\PCDr\Update\Rules\eab9f524-88eb-4334-8c7e-895e63f9d5ad\appupdaterrules_dell\settings_FixMyBuildID.xml
c:\users\Tonda\AppData\Roaming\PCDr\Update\Rules\eab9f524-88eb-4334-8c7e-895e63f9d5ad\appupdaterrules_dell\settings_FixUnistallMsiIssue.xml
c:\users\Tonda\AppData\Roaming\PCDr\Update\Rules\eab9f524-88eb-4334-8c7e-895e63f9d5ad\appupdaterrules_dell\settings_UpdateFromCheck.xml
c:\users\Tonda\AppData\Roaming\PCDr\Update\Rules\eab9f524-88eb-4334-8c7e-895e63f9d5ad\appupdaterrules_dell\strings_AuthorizedMachineCheck.xml
c:\users\Tonda\AppData\Roaming\PCDr\Update\Rules\eab9f524-88eb-4334-8c7e-895e63f9d5ad\appupdaterrules_dell\strings_CertStoreManager.xml
c:\users\Tonda\AppData\Roaming\PCDr\Update\Rules\eab9f524-88eb-4334-8c7e-895e63f9d5ad\appupdaterrules_dell\strings_DiskSpaceCheck.xml
c:\users\Tonda\AppData\Roaming\PCDr\Update\Rules\eab9f524-88eb-4334-8c7e-895e63f9d5ad\appupdaterrules_dell\strings_FixModuleCrash.xml
c:\users\Tonda\AppData\Roaming\PCDr\Update\Rules\eab9f524-88eb-4334-8c7e-895e63f9d5ad\appupdaterrules_dell\strings_FixMyBuildID.xml
c:\users\Tonda\AppData\Roaming\PCDr\Update\Rules\eab9f524-88eb-4334-8c7e-895e63f9d5ad\appupdaterrules_dell\strings_FixUnistallMsiIssue.xml
c:\users\Tonda\AppData\Roaming\PCDr\Update\Rules\eab9f524-88eb-4334-8c7e-895e63f9d5ad\appupdaterrules_dell\strings_UpdateFromCheck.xml
c:\users\Tonda\AppData\Roaming\PCDr\Update\Rules\f52c270b-1357-4ecf-bf67-8028eea9c21f\appupdaterrules_dell\AddCertificate.exe
c:\users\Tonda\AppData\Roaming\PCDr\Update\Rules\f52c270b-1357-4ecf-bf67-8028eea9c21f\appupdaterrules_dell\appupdaterrules.dll
c:\users\Tonda\AppData\Roaming\PCDr\Update\Rules\f52c270b-1357-4ecf-bf67-8028eea9c21f\appupdaterrules_dell\appupdaterrules_dell.zip
c:\users\Tonda\AppData\Roaming\PCDr\Update\Rules\f52c270b-1357-4ecf-bf67-8028eea9c21f\appupdaterrules_dell\settings_AuthorizedMachineCheck.xml
c:\users\Tonda\AppData\Roaming\PCDr\Update\Rules\f52c270b-1357-4ecf-bf67-8028eea9c21f\appupdaterrules_dell\settings_CertStoreManager.xml
c:\users\Tonda\AppData\Roaming\PCDr\Update\Rules\f52c270b-1357-4ecf-bf67-8028eea9c21f\appupdaterrules_dell\settings_DiskSpaceCheck.xml
c:\users\Tonda\AppData\Roaming\PCDr\Update\Rules\f52c270b-1357-4ecf-bf67-8028eea9c21f\appupdaterrules_dell\settings_FixModuleCrash.xml
c:\users\Tonda\AppData\Roaming\PCDr\Update\Rules\f52c270b-1357-4ecf-bf67-8028eea9c21f\appupdaterrules_dell\settings_FixMyBuildID.xml
c:\users\Tonda\AppData\Roaming\PCDr\Update\Rules\f52c270b-1357-4ecf-bf67-8028eea9c21f\appupdaterrules_dell\settings_FixUnistallMsiIssue.xml
c:\users\Tonda\AppData\Roaming\PCDr\Update\Rules\f52c270b-1357-4ecf-bf67-8028eea9c21f\appupdaterrules_dell\settings_UpdateFromCheck.xml
c:\users\Tonda\AppData\Roaming\PCDr\Update\Rules\f52c270b-1357-4ecf-bf67-8028eea9c21f\appupdaterrules_dell\strings_AuthorizedMachineCheck.xml
c:\users\Tonda\AppData\Roaming\PCDr\Update\Rules\f52c270b-1357-4ecf-bf67-8028eea9c21f\appupdaterrules_dell\strings_CertStoreManager.xml
c:\users\Tonda\AppData\Roaming\PCDr\Update\Rules\f52c270b-1357-4ecf-bf67-8028eea9c21f\appupdaterrules_dell\strings_DiskSpaceCheck.xml
c:\users\Tonda\AppData\Roaming\PCDr\Update\Rules\f52c270b-1357-4ecf-bf67-8028eea9c21f\appupdaterrules_dell\strings_FixModuleCrash.xml
c:\users\Tonda\AppData\Roaming\PCDr\Update\Rules\f52c270b-1357-4ecf-bf67-8028eea9c21f\appupdaterrules_dell\strings_FixMyBuildID.xml
c:\users\Tonda\AppData\Roaming\PCDr\Update\Rules\f52c270b-1357-4ecf-bf67-8028eea9c21f\appupdaterrules_dell\strings_FixUnistallMsiIssue.xml
c:\users\Tonda\AppData\Roaming\PCDr\Update\Rules\f52c270b-1357-4ecf-bf67-8028eea9c21f\appupdaterrules_dell\strings_UpdateFromCheck.xml
c:\windows\tasks\Adobe Flash Player Updater.job
c:\windows\tasks\GoogleUpdateTaskMachineCore.job
c:\windows\tasks\GoogleUpdateTaskMachineUA.job
c:\windows\tasks\GoogleUpdateTaskUserS-1-5-21-2171802320-3057826182-27557160-1001Core.job
c:\windows\tasks\GoogleUpdateTaskUserS-1-5-21-2171802320-3057826182-27557160-1001UA.job
.
.
((((((((((((((((((((((((( Soubory vytvořené od 2012-10-05 do 2012-11-05 )))))))))))))))))))))))))))))))
.
.
2012-11-05 18:04 . 2012-11-05 18:04 -------- d-----w- c:\users\UpdatusUser\AppData\Local\temp
2012-11-05 18:04 . 2012-11-05 18:04 -------- d-----w- c:\users\Default\AppData\Local\temp
2012-11-05 08:09 . 2012-11-05 08:09 -------- d-----w- c:\program files\CCleaner
2012-11-05 07:20 . 2012-11-05 07:20 -------- d-----w- c:\users\Tonda\AppData\Roaming\Malwarebytes
2012-11-05 07:19 . 2012-11-05 07:19 -------- d-----w- c:\programdata\Malwarebytes
2012-11-05 07:19 . 2012-11-05 07:19 -------- d-----w- c:\program files (x86)\Malwarebytes' Anti-Malware
2012-11-05 07:19 . 2012-09-29 18:54 25928 ----a-w- c:\windows\system32\drivers\mbam.sys
2012-11-04 18:33 . 2012-11-04 18:33 -------- d-----w- C:\rsit
2012-11-04 18:33 . 2012-11-04 18:33 -------- d-----w- c:\program files\trend micro
2012-11-02 11:05 . 2012-11-02 11:06 -------- d-----w- c:\program files\Dell Support Center
2012-10-10 19:18 . 2012-10-10 19:18 -------- d-----w- c:\users\Tonda\AppData\Local\Dell Edoc Viewer
2012-10-10 17:19 . 2012-08-31 18:19 1659760 ----a-w- c:\windows\system32\drivers\ntfs.sys
2012-10-10 17:19 . 2012-08-30 18:03 5559664 ----a-w- c:\windows\system32\ntoskrnl.exe
2012-10-10 17:19 . 2012-08-30 17:12 3968880 ----a-w- c:\windows\SysWow64\ntkrnlpa.exe
2012-10-10 17:19 . 2012-08-30 17:12 3914096 ----a-w- c:\windows\SysWow64\ntoskrnl.exe
2012-10-10 17:17 . 2012-06-02 05:41 1464320 ----a-w- c:\windows\system32\crypt32.dll
2012-10-10 17:17 . 2012-06-02 04:36 1159680 ----a-w- c:\windows\SysWow64\crypt32.dll
2012-10-10 17:17 . 2012-06-02 05:41 184320 ----a-w- c:\windows\system32\cryptsvc.dll
2012-10-10 17:17 . 2012-06-02 05:41 140288 ----a-w- c:\windows\system32\cryptnet.dll
2012-10-10 17:17 . 2012-06-02 04:36 140288 ----a-w- c:\windows\SysWow64\cryptsvc.dll
2012-10-10 17:17 . 2012-06-02 04:36 103936 ----a-w- c:\windows\SysWow64\cryptnet.dll
.
.
.
(((((((((((((((((((((((((((((((((((((((( Find3M výpis ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2012-10-10 17:55 . 2012-03-31 17:54 65309168 ----a-w- c:\windows\system32\MRT.exe
2012-10-10 12:50 . 2012-04-28 18:47 696760 ----a-w- c:\windows\SysWow64\FlashPlayerApp.exe
2012-10-10 12:50 . 2011-12-22 21:41 73656 ----a-w- c:\windows\SysWow64\FlashPlayerCPLApp.cpl
2012-08-24 13:43 . 2012-08-24 13:43 384352 ----a-w- c:\windows\system32\drivers\avgtdia.sys
2012-08-24 11:15 . 2012-09-23 08:36 17810944 ----a-w- c:\windows\system32\mshtml.dll
2012-08-24 10:39 . 2012-09-23 08:36 10925568 ----a-w- c:\windows\system32\ieframe.dll
2012-08-24 10:31 . 2012-09-23 08:36 2312704 ----a-w- c:\windows\system32\jscript9.dll
2012-08-24 10:22 . 2012-09-23 08:36 1346048 ----a-w- c:\windows\system32\urlmon.dll
2012-08-24 10:21 . 2012-09-23 08:36 1392128 ----a-w- c:\windows\system32\wininet.dll
2012-08-24 10:20 . 2012-09-23 08:36 1494528 ----a-w- c:\windows\system32\inetcpl.cpl
2012-08-24 10:18 . 2012-09-23 08:37 237056 ----a-w- c:\windows\system32\url.dll
2012-08-24 10:17 . 2012-09-23 08:36 85504 ----a-w- c:\windows\system32\jsproxy.dll
2012-08-24 10:14 . 2012-09-23 08:37 173056 ----a-w- c:\windows\system32\ieUnatt.exe
2012-08-24 10:14 . 2012-09-23 08:36 816640 ----a-w- c:\windows\system32\jscript.dll
2012-08-24 10:13 . 2012-09-23 08:36 599040 ----a-w- c:\windows\system32\vbscript.dll
2012-08-24 10:12 . 2012-09-23 08:36 2144768 ----a-w- c:\windows\system32\iertutil.dll
2012-08-24 10:11 . 2012-09-23 08:36 729088 ----a-w- c:\windows\system32\msfeeds.dll
2012-08-24 10:10 . 2012-09-23 08:37 96768 ----a-w- c:\windows\system32\mshtmled.dll
2012-08-24 10:09 . 2012-09-23 08:37 2382848 ----a-w- c:\windows\system32\mshtml.tlb
2012-08-24 10:04 . 2012-09-23 08:37 248320 ----a-w- c:\windows\system32\ieui.dll
2012-08-24 06:59 . 2012-09-23 08:36 1800704 ----a-w- c:\windows\SysWow64\jscript9.dll
2012-08-24 06:51 . 2012-09-23 08:36 1129472 ----a-w- c:\windows\SysWow64\wininet.dll
2012-08-24 06:51 . 2012-09-23 08:36 1427968 ----a-w- c:\windows\SysWow64\inetcpl.cpl
2012-08-24 06:47 . 2012-09-23 08:37 142848 ----a-w- c:\windows\SysWow64\ieUnatt.exe
2012-08-24 06:47 . 2012-09-23 08:37 420864 ----a-w- c:\windows\SysWow64\vbscript.dll
2012-08-24 06:43 . 2012-09-23 08:37 2382848 ----a-w- c:\windows\SysWow64\mshtml.tlb
2012-08-22 18:12 . 2012-09-12 19:12 1913200 ----a-w- c:\windows\system32\drivers\tcpip.sys
2012-08-22 18:12 . 2012-09-12 19:12 950128 ----a-w- c:\windows\system32\drivers\ndis.sys
2012-08-22 18:12 . 2012-09-12 19:12 376688 ----a-w- c:\windows\system32\drivers\netio.sys
2012-08-22 18:12 . 2012-09-12 19:12 288624 ----a-w- c:\windows\system32\drivers\FWPKCLNT.SYS
2012-08-21 21:01 . 2012-09-26 18:40 245760 ----a-w- c:\windows\system32\OxpsConverter.exe
2012-08-20 17:38 . 2012-10-10 17:18 44032 ----a-w- c:\windows\apppatch\acwow64.dll
.
.
(((((((((((((((((((((((((((((((((( Spouštěcí body v registru )))))))))))))))))))))))))))))))))))))))))))))
.
.
*Poznámka* prázdné záznamy a legitimní výchozí údaje nejsou zobrazeny.
REGEDIT4
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Sidebar"="c:\program files\Windows Sidebar\sidebar.exe" [2010-11-21 1475584]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]
"AVG_TRAY"="c:\program files (x86)\AVG\AVG2012\avgtray.exe" [2012-07-31 2596984]
"IAStorIcon"="c:\program files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe" [2010-11-06 283160]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorAdmin"= 5 (0x5)
"ConsentPromptBehaviorUser"= 3 (0x3)
"EnableUIADesktopToggle"= 0 (0x0)
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\windows]
"LoadAppInit_DLLs"=1 (0x1)
"AppInit_DLLs"=c:\windows\SysWOW64\nvinit.dll
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\drivers32]
"mixer7"=wdmaud.drv
.
[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\session manager]
BootExecute REG_MULTI_SZ autocheck autochk /p \??\y:\0autocheck autochk /p \??\y:\0autocheck autochk /r \??\y:\0autocheck autochk *\0c:\progra~2\AVG\AVG2012\avgrsa.exe /sync /restart
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MCODS]
@=""
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Wdf01000.sys]
@="Driver"
.
R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2010-03-18 138576]
R2 RoxWatch12;Roxio Hard Drive Watcher 12;c:\program files (x86)\Common Files\Roxio Shared\OEM\12.0\SharedCOM\RoxWatch12OEM.exe [2010-11-25 219632]
R2 SkypeUpdate;Skype Updater;c:\program files (x86)\Skype\Updater\Updater.exe [2012-07-13 160944]
R3 AMPPALP;Protokol Intel® Centrino® Wireless Bluetooth® 3.0 + High Speed;c:\windows\system32\DRIVERS\amppal.sys [2011-09-15 299008]
R3 Bluetooth Media Service;Bluetooth Media Service;c:\program files (x86)\Intel\Bluetooth\mediasrv.exe [2011-05-19 1335360]
R3 intaud_WaveExtensible;Intel WiDi Audio Device;c:\windows\system32\drivers\intelaud.sys [2011-06-21 34200]
R3 MyWiFiDHCPDNS;Wireless PAN DHCP Server;c:\program files\Intel\WiFi\bin\PanDhcpDns.exe [2011-09-16 340240]
R3 RoxMediaDB12OEM;RoxMediaDB12OEM;c:\program files (x86)\Common Files\Roxio Shared\OEM\12.0\SharedCOM\RoxMediaDB12OEM.exe [2010-11-25 1116656]
R3 RSUSBSTOR;RtsUStor.Sys Realtek USB Card Reader;c:\windows\system32\Drivers\RtsUStor.sys [2010-10-30 250984]
R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys [2010-11-21 59392]
R3 TsUsbGD;Remote Desktop Generic USB Device;c:\windows\system32\drivers\TsUsbGD.sys [2010-11-21 31232]
R3 TurboBoost;Intel(R) Turbo Boost Technology Monitor 2.0;c:\program files\Intel\TurboBoost\TurboBoost.exe [2010-11-29 149504]
R3 WatAdminSvc;Služba Technologie aktivace Windows;c:\windows\system32\Wat\WatAdminSvc.exe [2012-03-31 1255736]
R4 wlcrasvc;Windows Live Mesh remote connections service;c:\program files\Windows Live\Mesh\wlcrasvc.exe [2010-09-23 57184]
S0 AVGIDSHA;AVGIDSHA;c:\windows\system32\DRIVERS\avgidsha.sys [2012-04-19 28480]
S0 Avgrkx64;AVG Anti-Rootkit Driver;c:\windows\system32\DRIVERS\avgrkx64.sys [2012-01-31 36944]
S0 nvpciflt;nvpciflt;c:\windows\system32\DRIVERS\nvpciflt.sys [2011-04-22 25960]
S0 PxHlpa64;PxHlpa64;c:\windows\System32\Drivers\PxHlpa64.sys [2010-03-19 55856]
S1 Avgldx64;AVG AVI Loader Driver;c:\windows\system32\DRIVERS\avgldx64.sys [2012-07-26 291680]
S1 Avgmfx64;AVG Mini-Filter Resident Anti-Virus Shield;c:\windows\system32\DRIVERS\avgmfx64.sys [2011-12-23 47696]
S1 Avgtdia;AVG TDI Driver;c:\windows\system32\DRIVERS\avgtdia.sys [2012-08-24 384352]
S2 AESTFilters;Andrea ST Filters Service;c:\program files\IDT\WDM\AESTSr64.exe [2009-03-03 89600]
S2 AMPPALR3;Intel® Centrino® Wireless Bluetooth® 3.0 + High Speed Service;c:\program files\Intel\BluetoothHS\BTHSAmpPalService.exe [2011-09-15 1166848]
S2 AVGIDSAgent;AVGIDSAgent;c:\program files (x86)\AVG\AVG2012\AVGIDSAgent.exe [2012-08-13 5167736]
S2 avgwd;AVG WatchDog;c:\program files (x86)\AVG\AVG2012\avgwdsvc.exe [2012-02-14 193288]
S2 Bluetooth Device Monitor;Bluetooth Device Monitor;c:\program files (x86)\Intel\Bluetooth\devmonsrv.exe [2011-05-19 921664]
S2 Bluetooth OBEX Service;Bluetooth OBEX Service;c:\program files (x86)\Intel\Bluetooth\obexsrv.exe [2011-05-19 995392]
S2 BTHSSecurityMgr;Intel(R) Centrino(R) Wireless Bluetooth(R) 3.0 + High Speed Security Service;c:\program files\Intel\BluetoothHS\BTHSSecurityMgr.exe [2011-06-03 134928]
S2 IAStorDataMgrSvc;Úložná technologie Intel(R) Rapid;c:\program files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe [2010-11-06 13336]
S2 MBAMService;MBAMService;c:\program files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe [2012-09-29 676936]
S2 NAUpdate;Nero Update;c:\program files (x86)\Nero\Update\NASvc.exe [2011-11-25 687400]
S2 SftService;SoftThinks Agent Service;c:\program files (x86)\Dell DataSafe Local Backup\sftservice.EXE [2011-08-18 1692480]
S2 Skype C2C Service;Skype C2C Service;c:\programdata\Skype\Toolbars\Skype C2C Service\c2c_service.exe [2012-08-13 3064000]
S2 Stereo Service;NVIDIA Stereoscopic 3D Driver Service;c:\program files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe [2011-04-22 378472]
S2 TeamViewer7;TeamViewer 7;c:\program files (x86)\TeamViewer\Version7\TeamViewer_Service.exe [2012-03-19 2666880]
S2 TomTomHOMEService;TomTomHOMEService;c:\program files (x86)\TomTom HOME 2\TomTomHOMEService.exe [2012-07-26 92632]
S2 TuneUp.UtilitiesSvc;TuneUp Utilities Service;c:\program files (x86)\TuneUp Utilities 2011\TuneUpUtilitiesService64.exe [2011-12-08 2028864]
S2 TurboB;Turbo Boost UI Monitor driver;c:\windows\system32\DRIVERS\TurboB.sys [2010-11-29 16120]
S2 UNS;Intel(R) Management and Security Application User Notification Service;c:\program files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe [2010-10-06 2655768]
S3 AMPPAL;Virtuální adaptér Intel® Centrino® Wireless Bluetooth® 3.0 + High Speed;c:\windows\system32\DRIVERS\AMPPAL.sys [2011-09-15 299008]
S3 AVGIDSDriver;AVGIDSDriver;c:\windows\system32\DRIVERS\avgidsdrivera.sys [2011-12-23 124496]
S3 AVGIDSFilter;AVGIDSFilter;c:\windows\system32\DRIVERS\avgidsfiltera.sys [2011-12-23 29776]
S3 btmaudio;Intel Bluetooth Audio Service;c:\windows\system32\drivers\btmaud.sys [2011-05-19 51712]
S3 btmaux;Intel Bluetooth Auxiliary Service;c:\windows\system32\DRIVERS\btmaux.sys [2011-05-19 53248]
S3 btmhsf;btmhsf;c:\windows\system32\DRIVERS\btmhsf.sys [2011-11-14 327168]
S3 CtClsFlt;Creative Camera Class Upper Filter Driver;c:\windows\system32\DRIVERS\CtClsFlt.sys [2011-01-20 176096]
S3 iBtFltCoex;iBtFltCoex;c:\windows\system32\DRIVERS\iBtFltCoex.sys [2011-12-09 60416]
S3 iwdbus;IWD Bus Enumerator;c:\windows\system32\DRIVERS\iwdbus.sys [2011-06-21 25496]
S3 MBAMProtector;MBAMProtector;c:\windows\system32\drivers\mbam.sys [2012-09-29 25928]
S3 RTL8167;Realtek 8167 NT Driver;c:\windows\system32\DRIVERS\Rt64win7.sys [2011-06-10 539240]
S3 tihub3;TI USB3 Hub Service;c:\windows\system32\DRIVERS\tihub3.sys [2011-07-20 136000]
S3 tixhci;TI XHCI Service;c:\windows\system32\DRIVERS\tixhci.sys [2011-07-20 406336]
S3 TuneUpUtilitiesDrv;TuneUpUtilitiesDrv;c:\program files (x86)\TuneUp Utilities 2011\TuneUpUtilitiesDriver64.sys [2011-05-31 11856]
.
.
.
--------- X64 Entries -----------
.
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"SysTrayApp"="c:\program files\IDT\WDM\sttray64.exe" [2011-01-25 525312]
"Apoint"="c:\program files\DellTPad\Apoint.exe" [2011-04-12 609144]
"IntelTBRunOnce"="wscript.exe" [2009-07-14 168960]
"IntelPAN"="c:\program files\Common Files\Intel\WirelessCommon\iFrmewrk.exe" [2011-09-16 1935120]
"IgfxTray"="c:\windows\system32\igfxtray.exe" [2011-04-20 168216]
"HotKeysCmds"="c:\windows\system32\hkcmd.exe" [2011-04-20 392472]
"Persistence"="c:\windows\system32\igfxpers.exe" [2011-04-20 416024]
"NVHotkey"="c:\windows\system32\nvHotkey.dll" [2011-04-22 312936]
"BTMTrayAgent"="c:\program files (x86)\Intel\Bluetooth\btmshell.dll" [2011-05-19 10365952]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
"AppInit_DLLs"=c:\windows\System32\nvinitx.dll
.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Svchost - NetSvcs
UxTuneUp
.
------- Doplňkový sken -------
.
uLocal Page = c:\windows\system32\blank.htm
uStart Page = hxxp://www.igoogle.cz/
mStart Page = hxxp://www.google.com
mLocal Page = c:\windows\SysWOW64\blank.htm
IE: E&xportovat do aplikace Microsoft Excel - c:\progra~2\MICROS~1\Office12\EXCEL.EXE/3000
IE: Search the Web - c:\program files (x86)\SweetIM\Toolbars\Internet Explorer\resources\menuext.html
TCP: Interfaces\{1E0C9175-348B-43B6-9883-2E17D2AC5F2B}: NameServer = 192.168.150.237,194.228.2.1
.
- - - - NEPLATNÉ POLOŽKY ODSTRANĚNÉ Z REGISTRU - - - -
.
Wow6432Node-HKLM-Run-<NO NAME> - (no file)
Wow6432Node-HKLM-Run-vProt - c:\program files (x86)\AVG Secure Search\vprot.exe
.
.
.
--------------------- ZAMKNUTÉ KLÍČE V REGISTRU ---------------------
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\windows\\system32\\Macromed\\Flash\\FlashUtil64_11_4_402_287_ActiveX.exe,-101"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\Elevation]
"Enabled"=dword:00000001
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\LocalServer32]
@="c:\\windows\\system32\\Macromed\\Flash\\FlashUtil64_11_4_402_287_ActiveX.exe"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="IFlashBroker5"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\windows\\SysWOW64\\Macromed\\Flash\\FlashUtil32_11_4_402_287_ActiveX.exe,-101"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\Elevation]
"Enabled"=dword:00000001
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\LocalServer32]
@="c:\\windows\\SysWOW64\\Macromed\\Flash\\FlashUtil32_11_4_402_287_ActiveX.exe"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@="Shockwave Flash Object"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\InprocServer32]
@="c:\\windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_4_402_287.ocx"
"ThreadingModel"="Apartment"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\MiscStatus]
@="0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ProgID]
@="ShockwaveFlash.ShockwaveFlash.11"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
@="c:\\windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_4_402_287.ocx, 1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\TypeLib]
@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\Version]
@="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
@="ShockwaveFlash.ShockwaveFlash"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@="Macromedia Flash Factory Object"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\InprocServer32]
@="c:\\windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_4_402_287.ocx"
"ThreadingModel"="Apartment"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ProgID]
@="FlashFactory.FlashFactory.1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
@="c:\\windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_4_402_287.ocx, 1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\TypeLib]
@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\Version]
@="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
@="FlashFactory.FlashFactory"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="IFlashBroker5"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\McAfee]
"SymbolicLinkValue"=hex(6):5c,00,72,00,65,00,67,00,69,00,73,00,74,00,72,00,79,
00,5c,00,6d,00,61,00,63,00,68,00,69,00,6e,00,65,00,5c,00,53,00,6f,00,66,00,\
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\PCW\Security]
@Denied: (Full) (Everyone)
.
------------------------ Jiné spuštené procesy ------------------------
.
c:\program files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
c:\program files (x86)\Google\Update\GoogleUpdate.exe
c:\program files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe
c:\program files (x86)\AVG\AVG PC Tuneup\BoostSpeed.exe
c:\program files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe
c:\program files (x86)\Dell DataSafe Local Backup\TOASTER.EXE
c:\program files (x86)\Dell DataSafe Local Backup\COMPONENTS\SCHEDULER\STSERVICE.EXE
c:\program files (x86)\Dell DataSafe Local Backup\Components\DSUpdate\DSUpd.exe
c:\program files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
c:\program files (x86)\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe
.
**************************************************************************
.
Celkový čas: 2012-11-05 19:09:18 - počítač byl restartován
ComboFix-quarantined-files.txt 2012-11-05 18:09
ComboFix2.txt 2012-11-05 15:56
.
Před spuštěním: Volných bajtů: 94 514 208 768
Po spuštění: Volných bajtů: 94 181 859 328
.
- - End Of File - - 7C2DA1589D339D5B172B7B242D485A55

#27 Příspěvek od **vyosek** » 05 lis 2012 20:51

Jak se chova PC

Loutka · #28 Příspěvek od **Loutka** » 05 lis 2012 20:57

zatím dobrý......

#29 Příspěvek od **vyosek** » 05 lis 2012 21:00

Tak jeste uklidime

Odinstalujte Combofix

Prejmenujte ComboFix na Uninstall
Spustte jej
Tohle smaze Combofix a jeho slozky

T-Cleaner http://vyosek.ic.cz/pro_usery/T-Cleaner.exe

Stahnete a spustte
Pro potvrzeni volby mackejte A, Enter
Po pouziti utilitu smazte
Antiviry touhou utilitu chybne oznacit jako vir - jedna se o falesny poplach - takze v pohode stahnete (pripadne vypnete pri stahovani antivir)

OTC http://oldtimer.geekstogo.com/OTC.exe

Stahnete a spustte
Kliknete na CleanUp a potvrdte YES
Program uklidi a restartuje PC

TFC http://oldtimer.geekstogo.com/TFC.exe

Stahnete a spustte
Kliknete na Start a potvrdte OK
Program uklidi a restartuje pc
Po pouziti utilitu smazte

Stahnete Ccleaner http://forum.viry.cz/viewtopic.php?t=7478
Panel čistič

Vse nechte jak je, jen dejte Analyzovat a pote Spustit CCleaner

Panel registry

dejte Hledej problémy
nasledne Opravit problémy - zalohu registru doporucuji udelat, opravte vsechny problemy
postup opakujte dokud nebude bez problemu - vetsinou cca 3x

Panel nástroje

Zde muzete odinstalovat nepotrebne programy

CCleaner doporucuji pouzivat cca jednou za tyden

A pokud nejsou problemy ci dotazy, je to z me strany vse

Loutka · #30 Příspěvek od **Loutka** » 05 lis 2012 21:23

Děkuji mnohokrát

VIRY.CZ

prosím o kontrolu logu

Re: prosím o kontrolu logu

Re: prosím o kontrolu logu

Re: prosím o kontrolu logu

Re: prosím o kontrolu logu

Re: prosím o kontrolu logu

Re: prosím o kontrolu logu

Re: prosím o kontrolu logu

Re: prosím o kontrolu logu

Re: prosím o kontrolu logu

Re: prosím o kontrolu logu

Re: prosím o kontrolu logu

Re: prosím o kontrolu logu

Re: prosím o kontrolu logu

Re: prosím o kontrolu logu

Re: prosím o kontrolu logu