Prosim o preventivku + kontrola flashky

Zpráva

Steron · #1 Příspěvek od **Steron** » 20 úno 2013 15:54

Zdravim, prosim o kontrolu logu. Po pripojeni flashky na jednom pochybnem PC se mi na ni vsechny slozky oznacily jako skryte....

Logfile of random's system information tool 1.09 (written by random/random)
Run by Honza at 2013-02-20 15:52:46
Microsoft Windows 7 Professional Service Pack 1
System drive C: has 155 GB (75%) free of 205 GB
Total RAM: 3984 MB (26% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 15:52:50, on 20.2.2013
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v9.00 (9.00.8112.16464)
Boot mode: Normal

Running processes:
C:\Program Files (x86)\Sony\Sony PC Companion\PCCompanion.exe
C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
C:\Program Files (x86)\Sony\Sony PC Companion\PCCompanionInfo.exe
C:\Users\Honza\AppData\Local\Google\Update\1.3.21.135\GoogleCrashHandler.exe
C:\Program Files (x86)\eM Client\MailClient.exe
C:\Users\Honza\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\Honza\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\Honza\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\Honza\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\Honza\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\Honza\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\Honza\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\Honza\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\Honza\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\Honza\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\Honza\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\Honza\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\Honza\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\Honza\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\Honza\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\Honza\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\Honza\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\Honza\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\Honza\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\Honza\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\Honza\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\Honza\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\Honza\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Skype\Phone\Skype.exe
C:\Program Files (x86)\totalcmd\TOTALCMD.EXE
C:\Users\Honza\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\OpenOffice.org 3\program\scalc.exe
C:\Program Files (x86)\OpenOffice.org 3\program\soffice.exe
C:\Program Files (x86)\OpenOffice.org 3\program\soffice.bin
C:\Users\Honza\AppData\Local\Google\Chrome\Application\chrome.exe
G:\Diag\RSIT\RSIT.exe
C:\Program Files (x86)\trend micro\Honza.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.bing.com?pc=CMDTDF
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.cz/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.bing.com?pc=CMDTDF
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.bing.com?pc=CMDTDF
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
F2 - REG:system.ini: UserInit=userinit.exe
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll
O2 - BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll
O4 - HKLM\..\Run: [IMSS] "C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IMSS\PIconStartup.exe"
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"
O4 - HKCU\..\Run: [Google Update] "C:\Users\Honza\AppData\Local\Google\Update\GoogleUpdate.exe" /c
O4 - HKCU\..\Run: [Sony PC Companion] "C:\Program Files (x86)\Sony\Sony PC Companion\PCCompanion.exe" /Background
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'NETWORK SERVICE')
O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll
O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O16 - DPF: {1ABA5FAC-1417-422B-BA82-45C35E2C908B} (20-20 3D Viewer for IKEA) - http://kitchenplanner.ikea.com/CZ/Core/ ... _Win32.cab
O16 - DPF: {45830FF9-D9E6-4F41-86ED-B266933D8E90} (RtspVaPgCtrlNew Class) - http://10.100.53.14/RtspVaPgDec.cab
O16 - DPF: {D67DB088-70B4-4006-B052-57F614FD3AA8} (ChtIEx Control) - http://www.vguard.net/myasp/chtIEx.cab
O17 - HKLM\System\CCS\Services\Tcpip\..\{02F6BBF1-4246-4004-BA5E-F8F7890E9253}: NameServer = 212.96.167.18,89.190.50.18
O17 - HKLM\System\CS1\Services\Tcpip\..\{02F6BBF1-4246-4004-BA5E-F8F7890E9253}: NameServer = 212.96.167.18,89.190.50.18
O17 - HKLM\System\CS2\Services\Tcpip\..\{02F6BBF1-4246-4004-BA5E-F8F7890E9253}: NameServer = 212.96.167.18,89.190.50.18
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~2\COMMON~1\Skype\SKYPE4~1.DLL
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
O23 - Service: Intel(R) Content Protection HECI Service (cphs) - Intel Corporation - C:\Windows\SysWow64\IntelCpHeciSvc.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)
O23 - Service: ESET HTTP Server (EhttpSrv) - ESET - C:\Program Files\ESET\ESET NOD32 Antivirus\EHttpSrv.exe
O23 - Service: ESET Service (ekrn) - ESET - C:\Program Files\ESET\ESET NOD32 Antivirus\x86\ekrn.exe
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)
O23 - Service: Služba Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Služba Google Update (gupdatem) (gupdatem) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: HP Support Assistant Service - Hewlett-Packard Company - C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\hpsa_service.exe
O23 - Service: HP Quick Synchronization Service (HPDrvMntSvc.exe) - Hewlett-Packard Company - C:\Program Files (x86)\Hewlett-Packard\Shared\HPDrvMntSvc.exe
O23 - Service: HP Software Framework Service (hpqwmiex) - Hewlett-Packard Company - C:\Program Files (x86)\Hewlett-Packard\Shared\hpqWmiEx.exe
O23 - Service: Intel(R) PROSet Monitoring Service - Unknown owner - C:\Windows\system32\IProsetMonitor.exe (file missing)
O23 - Service: IviRegMgr - InterVideo - C:\Program Files (x86)\Common Files\InterVideo\RegMgr\iviRegMgr.exe
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Intel(R) Management and Security Application Local Management Service (LMS) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Mozilla Foundation - C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: PDF Document Manager (pdfcDispatcher) - PDF Complete Inc - C:\Program Files (x86)\PDF Complete\pdfsvc.exe
O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Protexis Licensing V2 (PSI_SVC_2) - Protexis Inc. - C:\Program Files (x86)\Common Files\Protexis\License Service\PsiService_2.exe
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Skype Updater (SkypeUpdate) - Skype Technologies - C:\Program Files (x86)\Skype\Updater\Updater.exe
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing)
O23 - Service: Sony PC Companion - Avanquest Software - C:\Program Files (x86)\Sony\Sony PC Companion\PCCService.exe
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)
O23 - Service: TomTomHOMEService - TomTom - C:\Program Files (x86)\TomTom HOME 2\TomTomHOMEService.exe
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
O23 - Service: Intel(R) Management and Security Application User Notification Service (UNS) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
O23 - Service: VMware USB Arbitration Service (VMUSBArbService) - VMware, Inc. - C:\Program Files (x86)\Common Files\VMware\USB\vmware-usbarbitrator.exe
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\Wat\WatUX.exe,-601 (WatAdminSvc) - Unknown owner - C:\Windows\system32\Wat\WatAdminSvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)

--
End of file - 11785 bytes

======Scheduled tasks folder======

C:\Windows\tasks\Adobe Flash Player Updater.job
C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
C:\Windows\tasks\GoogleUpdateTaskMachineUA.job
C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-4171360181-4009674652-647112566-1001Core.job
C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-4171360181-4009674652-647112566-1001UA.job
C:\Windows\tasks\HPCeeScheduleForHonza.job
C:\Windows\tasks\HPCeeScheduleForPRODEJNA$.job

=========Mozilla firefox=========

ProfilePath - C:\Users\Honza\AppData\Roaming\Mozilla\Firefox\Profiles\k0bxvvk9.default

prefs.js - "browser.startup.homepage" - "http://www.google.cz/"
prefs.js - "keyword.URL" - "http://www.bing.com/search?FORM=UP21DF&PC=UP21&q="

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 11.5.502.149 Plugin
"Path"=C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_5_502_149.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@Google.com/GoogleEarthPlugin]
"Description"=Google Earth in your browser
"Path"=C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@java.com/DTPlugin,version=10.13.2]
"Description"=Java™ Deployment Toolkit
"Path"=C:\Windows\SysWOW64\npDeployJava1.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@java.com/JavaPlugin,version=10.13.2]
"Description"=Oracle® Next Generation Java™ Plug-In
"Path"=C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@microsoft.com/GENUINE]
"Description"=
"Path"=disabled

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0]
"Description"=Ag Player Plugin
"Path"=C:\Program Files (x86)\Microsoft Silverlight\5.1.10411.0\npctrl.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@tools.google.com/Google Update;version=3]
"Description"=Google Update
"Path"=C:\Program Files (x86)\Google\Update\1.3.21.123\npGoogleUpdate3.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@tools.google.com/Google Update;version=9]
"Description"=Google Update
"Path"=C:\Program Files (x86)\Google\Update\1.3.21.123\npGoogleUpdate3.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@vmware.com/vmrc,version=2.5.0.00000]
"Description"=VMware VMRC Browser Plugin
"Path"=C:\Program Files (x86)\Common Files\VMware\VMware VMRC Plug-in\Firefox\np-vmware-vmrc.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\Adobe Reader]
"Description"=Handles PDFs in-place in Firefox
"Path"=C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll

C:\Program Files (x86)\Mozilla Firefox\extensions\
{972ce4c6-7e08-4474-a285-3208198ce6fd}

C:\Program Files (x86)\Mozilla Firefox\components\
binary.manifest
browsercomps.dll
nsIQTScriptablePlugin.xpt

C:\Program Files (x86)\Mozilla Firefox\plugins\
np-mswmp.dll
nppdf32.dll
npqtplugin.dll
npqtplugin2.dll
npqtplugin3.dll
npqtplugin4.dll
npqtplugin5.dll
npqtplugin6.dll
npqtplugin7.dll
QuickTimePlugin.class
WMP Firefox Plugin License.rtf
WMP Firefox Plugin RelNotes.txt

C:\Program Files (x86)\Mozilla Firefox\searchplugins\
google.xml
heureka-cz.xml
jyxo-cz.xml
seznam-cz.xml
slunecnice-cz.xml
wikipedia-cz.xml

C:\Users\Honza\AppData\Roaming\Mozilla\Firefox\Profiles\k0bxvvk9.default\searchplugins\
bingp.xml

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
Adobe PDF Link Helper - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2012-12-18 66280]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
Java(tm) Plug-In SSV Helper - C:\Program Files (x86)\Java\jre7\bin\ssv.dll [2013-02-07 461216]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
Windows Live ID Sign-in Helper - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2009-08-18 403840]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll [2013-02-07 170912]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"IMSS"=C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IMSS\PIconStartup.exe [2011-01-17 112152]
"SunJavaUpdateSched"=C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [2012-07-03 252848]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"Google Update"=C:\Users\Honza\AppData\Local\Google\Update\GoogleUpdate.exe [2011-08-03 136176]
"Sony PC Companion"=C:\Program Files (x86)\Sony\Sony PC Companion\PCCompanion.exe [2013-01-07 446648]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED}

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=credssp.dll

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorAdmin"=5
"ConsentPromptBehaviorUser"=3
"EnableUIADesktopToggle"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveAutoRun"=3
"NoDriveTypeAutoRun"=0

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoActiveDesktop"=1
"NoActiveDesktopChanges"=1
"ForceActiveDesktopOn"=0
"NoDriveAutoRun"=3
"NoDriveTypeAutoRun"=0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.msadpcm"=msadp32.acm
"midimapper"=midimap.dll
"wavemapper"=msacm32.drv
"vidc.uyvy"=msyuv.dll
"vidc.yuy2"=msyuv.dll
"vidc.yvyu"=msyuv.dll
"vidc.iyuv"=iyuv_32.dll
"vidc.i420"=iyuv_32.dll
"vidc.yvu9"=tsbyuv.dll
"msacm.l3acm"=C:\Windows\SysWOW64\l3codeca.acm
"vidc.cvid"=iccvid.dll
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"aux1"=wdmaud.drv
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv
"VIDC.FFDS"=C:\PROGRA~2\COMBIN~1\Filters\FFDShow\ff_vfw.dll
"wave2"=wdmaud.drv
"midi2"=wdmaud.drv
"mixer2"=wdmaud.drv
"aux2"=wdmaud.drv

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*

======List of files/folders created in the last 1 month======

2013-02-18 12:01:26 ----D---- C:\Adela
2013-02-18 11:01:52 ----D---- C:\Users\Honza\AppData\Roaming\PSpad
2013-02-18 11:01:48 ----D---- C:\Program Files (x86)\PSPad editor
2013-02-15 15:51:25 ----D---- C:\Windows\Minidump
2013-02-13 18:55:34 ----A---- C:\Windows\SysWOW64\mshtmled.dll
2013-02-13 18:55:33 ----A---- C:\Windows\SysWOW64\vbscript.dll
2013-02-13 18:55:33 ----A---- C:\Windows\SysWOW64\url.dll
2013-02-13 18:55:33 ----A---- C:\Windows\SysWOW64\ieUnatt.exe
2013-02-13 18:55:33 ----A---- C:\Windows\SysWOW64\ieui.dll
2013-02-13 18:55:32 ----A---- C:\Windows\SysWOW64\urlmon.dll
2013-02-13 18:55:31 ----A---- C:\Windows\SysWOW64\wininet.dll
2013-02-13 18:55:31 ----A---- C:\Windows\SysWOW64\msfeeds.dll
2013-02-13 18:55:30 ----A---- C:\Windows\SysWOW64\jscript9.dll
2013-02-13 18:55:30 ----A---- C:\Windows\SysWOW64\jscript.dll
2013-02-13 18:55:29 ----A---- C:\Windows\SysWOW64\iertutil.dll
2013-02-13 18:55:28 ----A---- C:\Windows\SysWOW64\jsproxy.dll
2013-02-13 18:55:27 ----A---- C:\Windows\SysWOW64\mshtml.dll
2013-02-13 18:55:23 ----A---- C:\Windows\SysWOW64\ieframe.dll
2013-02-13 12:57:13 ----A---- C:\Windows\SysWOW64\ntkrnlpa.exe
2013-02-13 12:57:12 ----A---- C:\Windows\SysWOW64\ntoskrnl.exe
2013-02-13 12:57:07 ----A---- C:\Windows\SysWOW64\setup16.exe
2013-02-13 12:57:07 ----A---- C:\Windows\SysWOW64\ntvdm64.dll
2013-02-13 12:57:06 ----A---- C:\Windows\SysWOW64\wow32.dll
2013-02-13 12:57:06 ----A---- C:\Windows\SysWOW64\user.exe
2013-02-13 12:57:06 ----A---- C:\Windows\SysWOW64\instnm.exe
2013-02-07 13:39:13 ----A---- C:\Windows\SysWOW64\WindowsAccessBridge-32.dll
2013-02-04 15:40:39 ----D---- C:\Users\Honza\AppData\Roaming\Nifflas
2013-01-24 10:05:27 ----D---- C:\Program Files (x86)\Common Files\Skype
2013-01-24 10:05:22 ----RD---- C:\Program Files (x86)\Skype

======List of files/folders modified in the last 1 month======

2013-02-20 15:52:49 ----D---- C:\Windows\Temp
2013-02-20 15:52:49 ----D---- C:\Program Files (x86)\trend micro
2013-02-20 15:35:12 ----D---- C:\Users\Honza\AppData\Roaming\Skype
2013-02-20 14:49:20 ----D---- C:\Windows\inf
2013-02-20 14:49:20 ----AD---- C:\Windows\System32
2013-02-20 13:37:57 ----D---- C:\Users\Honza\AppData\Roaming\eM Client
2013-02-20 12:57:34 ----A---- C:\Windows\SysWOW64\log.txt
2013-02-19 10:04:53 ----SHD---- C:\System Volume Information
2013-02-18 11:01:48 ----D---- C:\Program Files (x86)
2013-02-15 15:51:25 ----AD---- C:\Windows
2013-02-15 10:00:38 ----D---- C:\Windows\winsxs
2013-02-15 09:59:47 ----AD---- C:\Windows\SysWOW64
2013-02-14 10:52:17 ----D---- C:\ProgramData\PDFC
2013-02-14 10:45:03 ----D---- C:\Windows\Microsoft.NET
2013-02-14 10:44:40 ----RSD---- C:\Windows\assembly
2013-02-14 10:04:05 ----D---- C:\Windows\Tasks
2013-02-13 19:00:49 ----D---- C:\Windows\SysWOW64\migration
2013-02-13 19:00:49 ----D---- C:\Windows\AppPatch
2013-02-13 19:00:49 ----D---- C:\Program Files (x86)\Internet Explorer
2013-02-09 09:05:48 ----D---- C:\Windows\Prefetch
2013-02-08 15:40:15 ----A---- C:\Windows\SysWOW64\FlashPlayerApp.exe
2013-02-07 13:39:23 ----SHD---- C:\Windows\Installer
2013-02-07 13:39:23 ----HD---- C:\Config.Msi
2013-02-07 13:39:09 ----A---- C:\Windows\SysWOW64\javaws.exe
2013-02-07 13:39:09 ----A---- C:\Windows\SysWOW64\javaw.exe
2013-02-07 13:39:09 ----A---- C:\Windows\SysWOW64\java.exe
2013-02-07 13:39:08 ----A---- C:\Windows\SysWOW64\npDeployJava1.dll
2013-02-07 13:39:08 ----A---- C:\Windows\SysWOW64\deployJava1.dll
2013-02-05 14:06:28 ----D---- C:\Windows\pss
2013-01-29 09:58:40 ----HD---- C:\Program Files (x86)\InstallShield Installation Information
2013-01-25 12:53:53 ----D---- C:\Windows\rescache
2013-01-24 12:10:13 ----D---- C:\ProgramData\Sony Ericsson
2013-01-24 12:10:08 ----D---- C:\Program Files (x86)\Sony Ericsson
2013-01-24 10:05:29 ----D---- C:\ProgramData\Skype
2013-01-24 10:05:27 ----D---- C:\Program Files (x86)\Common Files

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 iaStor;Intel RAID Controller; C:\Windows\system32\drivers\iaStor.sys []
R0 pciide;pciide; C:\Windows\system32\drivers\pciide.sys []
R0 rdyboost;ReadyBoost; C:\Windows\System32\drivers\rdyboost.sys []
R1 CSC;@%systemroot%\system32\cscsvc.dll,-202; C:\Windows\system32\drivers\csc.sys []
R1 ehdrv;ehdrv; C:\Windows\system32\DRIVERS\ehdrv.sys []
R1 VBoxDrv;VirtualBox Service; C:\Windows\system32\DRIVERS\VBoxDrv.sys []
R1 VBoxUSBMon;VirtualBox USB Monitor Driver; C:\Windows\system32\DRIVERS\VBoxUSBMon.sys []
R1 vwififlt;Virtual WiFi Filter Driver; C:\Windows\system32\DRIVERS\vwififlt.sys []
R2 eamonm;eamonm; C:\Windows\system32\DRIVERS\eamonm.sys []
R2 epfwwfpr;epfwwfpr; C:\Windows\system32\DRIVERS\epfwwfpr.sys []
R2 hcmon;VMware hcmon; \??\C:\Windows\system32\drivers\hcmon.sys []
R3 e1cexpress;Intel(R) PRO/1000 PCI Express Network Connection Driver C; C:\Windows\system32\DRIVERS\e1c62x64.sys []
R3 igfx;igfx; C:\Windows\system32\DRIVERS\igdkmd64.sys []
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\Windows\system32\drivers\RTKVHD64.sys []
R3 IntcDAud;Intel(R) Display Audio; C:\Windows\system32\DRIVERS\IntcDAud.sys []
R3 MEIx64;Intel(R) Management Engine Interface; C:\Windows\system32\drivers\HECIx64.sys []
R3 RDPDR;Terminal Server Device Redirector Driver; C:\Windows\System32\drivers\rdpdr.sys []
R3 TPM;TPM; C:\Windows\system32\drivers\tpm.sys []
S3 dmvsc;dmvsc; C:\Windows\system32\drivers\dmvsc.sys []
S3 ggflt;SEMC USB Flash Driver Filter; C:\Windows\system32\DRIVERS\ggflt.sys []
S3 ggsemc;SEMC USB Flash Driver; C:\Windows\system32\DRIVERS\ggsemc.sys []
S3 IFCoEMP;IFCoEMP; C:\Windows\system32\drivers\ifM52x64.sys []
S3 IFCoEVB;IFCoEVB; C:\Windows\system32\drivers\ifP52X64.sys []
S3 Impcd;Impcd; C:\Windows\system32\drivers\Impcd.sys []
S3 NAL;Nal Service ; \??\C:\Windows\system32\Drivers\iqvw64e.sys []
S3 npf;NetGroup Packet Filter Driver; C:\Windows\system32\drivers\npf.sys []
S3 RdpVideoMiniport;Remote Desktop Video Miniport Driver; C:\Windows\System32\drivers\rdpvideominiport.sys []
S3 RHDISK_AMD64;RHDISK_AMD64; \??\G:\_rohos\RHDISK_AMD64.SYS [2009-07-24 31408]
S3 RTL8192su;Realtek RTL8192SU Wireless LAN 802.11n USB 2.0 Network Adapter; C:\Windows\system32\DRIVERS\RTL8192su.sys []
S3 s3cap;s3cap; C:\Windows\system32\drivers\vms3cap.sys []
S3 storvsc;storvsc; C:\Windows\system32\drivers\storvsc.sys []
S3 TsUsbFlt;TsUsbFlt; C:\Windows\system32\drivers\tsusbflt.sys []
S3 TsUsbGD;Remote Desktop Generic USB Device; C:\Windows\system32\drivers\TsUsbGD.sys []
S3 vmbus;vmbus; C:\Windows\system32\drivers\vmbus.sys []
S3 VMBusHID;VMBusHID; C:\Windows\system32\drivers\VMBusHID.sys []
S3 WinUSB;Sony sa0102 ADB Interface; C:\Windows\system32\DRIVERS\WinUSB.sys []

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 AdobeARMservice;Adobe Acrobat Update Service; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [2012-12-18 65192]
R2 CscService;@%systemroot%\system32\cscsvc.dll,-200; C:\Windows\System32\svchost.exe [2009-07-14 20992]
R2 ekrn;ESET Service; C:\Program Files\ESET\ESET NOD32 Antivirus\x86\ekrn.exe [2011-01-12 810144]
R2 HP Support Assistant Service;HP Support Assistant Service; C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\hpsa_service.exe [2011-06-21 85560]
R2 HPDrvMntSvc.exe;HP Quick Synchronization Service; C:\Program Files (x86)\Hewlett-Packard\Shared\HPDrvMntSvc.exe [2011-03-28 94264]
R2 Intel(R) PROSet Monitoring Service;Intel(R) PROSet Monitoring Service; C:\Windows\system32\IProsetMonitor.exe []
R2 IviRegMgr;IviRegMgr; C:\Program Files (x86)\Common Files\InterVideo\RegMgr\iviRegMgr.exe [2010-05-21 110736]
R2 LMS;Intel(R) Management and Security Application Local Management Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe [2011-01-17 326168]
R2 pdfcDispatcher;PDF Document Manager; C:\Program Files (x86)\PDF Complete\pdfsvc.exe [2010-10-22 1121304]
R2 Pml Driver HPZ12;Pml Driver HPZ12; C:\Windows\System32\svchost.exe [2009-07-14 20992]
R2 PSI_SVC_2;Protexis Licensing V2; C:\Program Files (x86)\Common Files\Protexis\License Service\PsiService_2.exe [2010-03-11 193824]
R2 TomTomHOMEService;TomTomHOMEService; C:\Program Files (x86)\TomTom HOME 2\TomTomHOMEService.exe [2012-07-26 92632]
R2 UNS;Intel(R) Management and Security Application User Notification Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe [2011-01-17 2656280]
R2 VMUSBArbService;VMware USB Arbitration Service; C:\Program Files (x86)\Common Files\VMware\USB\vmware-usbarbitrator.exe [2011-06-01 609904]
R2 wlidsvc;Windows Live ID Sign-in Assistant; C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE [2009-08-18 2291568]
R3 UmRdpService;@%SystemRoot%\system32\umrdp.dll,-1000; C:\Windows\System32\svchost.exe [2009-07-14 20992]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2012-04-30 104872]
S2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2012-04-30 123816]
S2 gupdate;Služba Google Update (gupdate); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2011-10-04 136176]
S2 SkypeUpdate;Skype Updater; C:\Program Files (x86)\Skype\Updater\Updater.exe [2013-01-08 161536]
S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service; C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2013-02-08 251248]
S3 AppMgmt;@appmgmts.dll,-3250; C:\Windows\system32\svchost.exe [2009-07-14 20992]
S3 aspnet_state;Stavová služba ASP.NET; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\aspnet_state.exe [2012-04-30 51080]
S3 cphs;Intel(R) Content Protection HECI Service; C:\Windows\SysWow64\IntelCpHeciSvc.exe [2012-12-14 277616]
S3 EhttpSrv;ESET HTTP Server; C:\Program Files\ESET\ESET NOD32 Antivirus\EHttpSrv.exe [2011-01-12 42360]
S3 gupdatem;Služba Google Update (gupdatem); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2011-10-04 136176]
S3 hpqwmiex;HP Software Framework Service; C:\Program Files (x86)\Hewlett-Packard\Shared\hpqWmiEx.exe [2011-03-28 799800]
S3 MozillaMaintenance;Mozilla Maintenance Service; C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe [2012-12-18 115168]
S3 PeerDistSvc;@%SystemRoot%\system32\peerdistsvc.dll,-9000; C:\Windows\System32\svchost.exe [2009-07-14 20992]
S3 Sony PC Companion;Sony PC Companion; C:\Program Files (x86)\Sony\Sony PC Companion\PCCService.exe [2012-01-18 155320]
S3 StorSvc;@%SystemRoot%\System32\StorSvc.dll,-100; C:\Windows\System32\svchost.exe [2009-07-14 20992]
S3 WatAdminSvc;@%SystemRoot%\system32\Wat\WatUX.exe,-601; C:\Windows\system32\Wat\WatAdminSvc.exe []
S4 NetMsmqActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8195; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2012-04-30 142720]
S4 NetPipeActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8197; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2012-04-30 142720]
S4 NetTcpActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8199; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2012-04-30 142720]

-----------------EOF-----------------

#2 Příspěvek od **Rudy** » 20 úno 2013 19:20

Zdravím!
Na flešku pusťte tuto utilitu: http://www.viruskasino.com/2010/12/prog ... tml#UsbFix a dejte log USBFix.

Steron · #3 Příspěvek od **Steron** » 21 úno 2013 10:13

Zdravím!

############################## | UsbFix V 7.108 | [Research]

User: Honza (Administrator) # PRODEJNA
Updated 20/02/2013 by El Desaparecido
Started at 10:08:08 | 21/02/2013

Website: http://sosvirus.org/index.php
Contact: contact@sosvirus.org

PC: Hewlett-Packard (HP Compaq 6200 Pro SFF PC) (x64-based PC)
CPU: Intel(R) Core(TM) i5-2500 CPU @ 3.30GHz (3301)
RAM -> [Total : 3984 | Free : 1599]
BIOS: Default System BIOS
BOOT: Normal boot

OS: Microsoft Windows 7 Professional (6.1.7601 64-Bit) # Service Pack 1
WB: Windows Internet Explorer 9.0.8112.16421

SC: Security Center Service [Enabled]
WU: Windows Update Service [Enabled]
AV: ESET NOD32 Antivirus 4.2 [Enabled | Updated]
FW: Windows FireWall Service [Enabled]

C:\ (%systemdrive%) -> Fixed drive # 201 Gb (151 Mb free - 75%) [diskc] # NTFS
D:\ -> Fixed drive # 7 Gb (861 Mb free - 12%) [HP_RECOVERY] # NTFS
E:\ -> Fixed drive # 258 Gb (98 Mb free - 38%) [Data] # NTFS
F:\ -> CD-ROM
G:\ -> Removable drive # 30 Gb (18 Mb free - 60%) [PATRIOT] # FAT32

################## | Active Processes |

C:\Windows\system32\csrss.exe (484)
C:\Windows\system32\wininit.exe (580)
C:\Windows\system32\csrss.exe (604)
C:\Windows\system32\winlogon.exe (652)
C:\Windows\system32\services.exe (692)
C:\Windows\system32\lsass.exe (700)
C:\Windows\system32\lsm.exe (716)
C:\Windows\system32\svchost.exe (804)
C:\Windows\system32\svchost.exe (880)
C:\Windows\System32\svchost.exe (980)
C:\Windows\System32\svchost.exe (120)
C:\Windows\system32\svchost.exe (364)
C:\Windows\system32\svchost.exe (472)
C:\Windows\system32\svchost.exe (864)
C:\Windows\system32\svchost.exe (1108)
C:\Windows\System32\spoolsv.exe (1352)
C:\Windows\system32\svchost.exe (1432)
C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe (1556)
C:\Program Files\ESET\ESET NOD32 Antivirus\x86\ekrn.exe (1596)
C:\Windows\system32\svchost.exe (1672)
C:\Program Files (x86)\Hewlett-Packard\Shared\HPDrvMntSvc.exe (1696)
C:\Windows\system32\IProsetMonitor.exe (1728)
C:\Program Files (x86)\PDF Complete\pdfsvc.exe (1832)
C:\Windows\System32\svchost.exe (1864)
C:\Program Files (x86)\Common Files\Protexis\License Service\PsiService_2.exe (1884)
C:\Program Files (x86)\TomTom HOME 2\TomTomHOMEService.exe (2008)
C:\Program Files (x86)\Common Files\VMware\USB\vmware-usbarbitrator.exe (608)
C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE (1096)
C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe (2248)
C:\Windows\system32\CNAC4RPD.EXE (2272)
C:\Windows\system32\SearchIndexer.exe (2612)
C:\Windows\system32\svchost.exe (2888)
C:\Windows\servicing\TrustedInstaller.exe (2952)
C:\Windows\System32\WUDFHost.exe (3068)
C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\hpsa_service.exe (1368)
C:\Program Files (x86)\Common Files\InterVideo\RegMgr\iviRegMgr.exe (3040)
C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe (1040)
C:\Windows\System32\svchost.exe (456)
C:\Program Files\Windows Media Player\wmpnetwk.exe (1572)
C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe (1924)
C:\Windows\system32\wbem\wmiprvse.exe (2716)
C:\Windows\system32\taskhost.exe (3036)
C:\Windows\system32\Dwm.exe (2420)
C:\Windows\Explorer.EXE (1420)
C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe (3120)
C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe (3132)
C:\Windows\System32\igfxtray.exe (3140)
C:\Windows\System32\hkcmd.exe (3148)
C:\Windows\System32\igfxpers.exe (3156)
C:\Program Files (x86)\Sony\Sony PC Companion\PCCompanion.exe (3216)
C:\Program Files (x86)\Sony\Sony PC Companion\PCCompanionInfo.exe (3436)
C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe (3476)
C:\Users\Honza\AppData\Local\Google\Update\1.3.21.135\GoogleCrashHandler.exe (3564)
C:\Users\Honza\AppData\Local\Google\Update\1.3.21.135\GoogleCrashHandler64.exe (3588)
C:\Program Files (x86)\eM Client\MailClient.exe (3772)
C:\Users\Honza\AppData\Local\Google\Chrome\Application\chrome.exe (3928)
C:\Windows\System32\svchost.exe (3364)
C:\Users\Honza\AppData\Local\Google\Chrome\Application\chrome.exe (924)
C:\Users\Honza\AppData\Local\Google\Chrome\Application\chrome.exe (3780)
C:\Users\Honza\AppData\Local\Google\Chrome\Application\chrome.exe (3456)
C:\Users\Honza\AppData\Local\Google\Chrome\Application\chrome.exe (3732)
C:\Users\Honza\AppData\Local\Google\Chrome\Application\chrome.exe (4108)
C:\Users\Honza\AppData\Local\Google\Chrome\Application\chrome.exe (4144)
C:\Users\Honza\AppData\Local\Google\Chrome\Application\chrome.exe (4236)
C:\Users\Honza\AppData\Local\Google\Chrome\Application\chrome.exe (4300)
C:\Users\Honza\AppData\Local\Google\Chrome\Application\chrome.exe (4336)
C:\Users\Honza\AppData\Local\Google\Chrome\Application\chrome.exe (4380)
C:\Users\Honza\AppData\Local\Google\Chrome\Application\chrome.exe (4448)
C:\Users\Honza\AppData\Local\Google\Chrome\Application\chrome.exe (4500)
C:\Users\Honza\AppData\Local\Google\Chrome\Application\chrome.exe (4532)
C:\Users\Honza\AppData\Local\Google\Chrome\Application\chrome.exe (4580)
C:\Users\Honza\AppData\Local\Google\Chrome\Application\chrome.exe (4616)
C:\Users\Honza\AppData\Local\Google\Chrome\Application\chrome.exe (4676)
C:\Users\Honza\AppData\Local\Google\Chrome\Application\chrome.exe (4740)
C:\Users\Honza\AppData\Local\Google\Chrome\Application\chrome.exe (4780)
C:\Users\Honza\AppData\Local\Google\Chrome\Application\chrome.exe (4956)
C:\Users\Honza\AppData\Local\Google\Chrome\Application\chrome.exe (5044)
C:\Users\Honza\AppData\Local\Google\Chrome\Application\chrome.exe (5112)
C:\Users\Honza\AppData\Local\Google\Chrome\Application\chrome.exe (4140)
C:\Users\Honza\AppData\Local\Google\Chrome\Application\chrome.exe (4564)
C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IMSS\PrivacyIconClient.exe (1976)
C:\Windows\system32\wbem\wmiprvse.exe (5180)
C:\Windows\system32\taskeng.exe (5728)
C:\Users\Honza\AppData\Local\Google\Chrome\Application\chrome.exe (6032)
C:\UsbFix\Go.exe (192)
C:\Users\Honza\AppData\Local\Google\Chrome\Application\chrome.exe (5948)
C:\Users\Honza\AppData\Local\Google\Chrome\Application\chrome.exe (5832)

################## | Files # Infected Folders |

Found ! G:\Rohos mini.exe
Found ! G:\Rohos Mini Drive (Portable).exe
Found ! G:\Recycler\desktop.ini
Found ! G:\syncguid.dat

################## | Registry |

################## | Mountpoints2 |

HKCU\.\.\.\.\Explorer\MountPoints2\{25d6abd3-6604-11e2-a20c-2c27d720e35d}
Shell\AutoRun\Command = G:\Startme.exe

HKCU\.\.\.\.\Explorer\MountPoints2\{b056f72f-518d-11e2-aad8-2c27d720e35d}
Shell\AutoRun\Command = G:\Startme.exe

HKCU\.\.\.\.\Explorer\MountPoints2\{ebc4bc83-0259-11e2-8e18-2c27d720e35d}
Shell\AutoRun\Command = G:\Autorun.exe

################## | Vaccin |

C:\Autorun.inf -> Vaccine created by UsbFix (El Desaparecido)
D:\Autorun.inf -> Vaccine created by UsbFix (El Desaparecido)
E:\Autorun.inf -> Vaccine created by UsbFix (El Desaparecido)
G:\Autorun.inf -> Vaccine created by UsbFix (El Desaparecido)

################## | E.O.F | http://sosvirus.org |

#4 Příspěvek od **Rudy** » 21 úno 2013 19:11

OK. Nyní na PC spusťte komletní sken MBAM: http://www.malwarebytes.org/mbam.php a dejte log. Předem nic nemažte.

Steron · #5 Příspěvek od **Steron** » 22 úno 2013 11:51

Malwarebytes Anti-Malware (Zkušební verze Malwarebytes Anti-Malware.) 1.70.0.1100
www.malwarebytes.org

Verze: v2013.02.22.01

Windows 7 Service Pack 1 x64 NTFS
Internet Explorer 9.0.8112.16421
Honza :: PRODEJNA [administrátor]

Ochrana: Povolena

22.2.2013 10:57:14
MBAM-log-2013-02-22 (11-49-40).txt

Typ: Kompletní kontrola (C:\|D:\|E:\|G:\|)
Nastavení kontroly povoleno: Paměť | Po spuštění | Registr | Systémové soubory | Heuristická analýza Extra | Heuristická analýza Shuriken | PUP | PUM
Nastavení kontroly zakázáno: P2P
Kontrolované objekty: 462707
Uplynulý čas: 49 minut, 9 sekund

Nalezené procesy v paměti: 0
(Žádné škodlivé položky nebyly zjištěny)

Nalezené moduly v paměti: 0
(Žádné škodlivé položky nebyly zjištěny)

Nalezené klíče v registru: 0
(Žádné škodlivé položky nebyly zjištěny)

Nalezené hodnoty v registru: 0
(Žádné škodlivé položky nebyly zjištěny)

Nalezené datové položky v registru: 0
(Žádné škodlivé položky nebyly zjištěny)

Nalezené složky: 0
(Žádné škodlivé položky nebyly zjištěny)

Nalezené soubory: 8
E:\Dvorakova\Dokumenty\pdfcrackerent.exe (Hacktool.Agent) -> Nebyla provedena žádná instrukce.
E:\Install\Honza Flash\20.4.2012\Diag\Wireless Key View\WirelessKeyView.exe (PUP.WirelessKeyView) -> Nebyla provedena žádná instrukce.
E:\Install\Honza Flash\20.4.2012\Diag\WirelessNetView\WirelessNetView.exe (PUP.WirelessNetworkTool) -> Nebyla provedena žádná instrukce.
E:\Install\Wireless Key View\WirelessKeyView.exe (PUP.WirelessKeyView) -> Nebyla provedena žádná instrukce.
E:\Install\WirelessNetView\WirelessNetView.exe (PUP.WirelessNetworkTool) -> Nebyla provedena žádná instrukce.
G:\Diag\Wireless Key View\WirelessKeyView.exe (PUP.WirelessKeyView) -> Nebyla provedena žádná instrukce.
G:\Diag\WirelessNetView\WirelessNetView.exe (PUP.WirelessNetworkTool) -> Nebyla provedena žádná instrukce.
G:\Diag\ProductKey\ProduKey.exe (PUP.PSWTool.ProductKey) -> Nebyla provedena žádná instrukce.

(konec)

#6 Příspěvek od **Rudy** » 22 úno 2013 19:45

Vše, co MBAM nalezl, smažte.

Steron · #7 Příspěvek od **Steron** » 23 úno 2013 09:56

Odstraneno. Adresare na flashce jsou porad "skryte"... Jak dale?

Budu u PC asi az v pondeli...

#8 Příspěvek od **Rudy** » 23 úno 2013 11:28

Klikněte na adresář pravým myšítkem>vlastnosti a dejte mu atribut "Jen pro čtení". Musíte mít zapnuto zobrazení skrytých a systémových souborů/adresářů.

#9 Příspěvek od **vyosek** » 23 úno 2013 11:44

Zdravim

Omlouvam se kolegi za vstup, jen zaskocim...

SPustte znovu USBFix a kliknete na Deletion, vy jste dal jen prohledat (Research) - pripadne postup zde http://forum.viry.cz/viewtopic.php?f=24&t=102308

Steron · #10 Příspěvek od **Steron** » 25 úno 2013 11:42

Zdravim!

Aha, tak to me nejak netrklo...

Deletion provedena, tady je log:

############################## | UsbFix V 7.108 | [Deletion]

User: Honza (Administrator) # PRODEJNA
Updated 20/02/2013 by El Desaparecido
Started at 11:35:36 | 25/02/2013

Website: http://sosvirus.org/index.php
Contact: contact@sosvirus.org

PC: Hewlett-Packard (HP Compaq 6200 Pro SFF PC) (x64-based PC)
CPU: Intel(R) Core(TM) i5-2500 CPU @ 3.30GHz (3301)
RAM -> [Total : 3984 | Free : 1635]
BIOS: Default System BIOS
BOOT: Normal boot

OS: Microsoft Windows 7 Professional (6.1.7601 64-Bit) # Service Pack 1
WB: Windows Internet Explorer 9.0.8112.16421

SC: Security Center Service [Enabled]
WU: Windows Update Service [Enabled]
AV: ESET NOD32 Antivirus 4.2 [(!) Disabled | Updated]
FW: Windows FireWall Service [Enabled]

C:\ (%systemdrive%) -> Fixed drive # 201 Gb (151 Mb free - 75%) [diskc] # NTFS
D:\ -> Fixed drive # 7 Gb (861 Mb free - 12%) [HP_RECOVERY] # NTFS
E:\ -> Fixed drive # 258 Gb (98 Mb free - 38%) [Data] # NTFS
F:\ -> CD-ROM
G:\ -> Removable drive # 30 Gb (18 Mb free - 61%) [PATRIOT] # FAT32

################## | Stopped processes |

Stopped! C:\Windows\System32\spoolsv.exe (1344)
Stopped! C:\Windows\system32\taskeng.exe (1360)
Stopped! C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe (1576)
Stopped! C:\Program Files\ESET\ESET NOD32 Antivirus\x86\ekrn.exe (1608)
Stopped! C:\Windows\system32\IProsetMonitor.exe (1704)
Stopped! C:\Program Files (x86)\PDF Complete\pdfsvc.exe (1800)
Stopped! C:\Program Files (x86)\Common Files\Protexis\License Service\PsiService_2.exe (1896)
Stopped! C:\Program Files (x86)\TomTom HOME 2\TomTomHOMEService.exe (1976)
Stopped! C:\Windows\system32\taskhost.exe (1488)
Stopped! C:\Program Files (x86)\Common Files\VMware\USB\vmware-usbarbitrator.exe (2228)
Stopped! C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE (2268)
Stopped! C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe (2852)
Stopped! C:\Windows\system32\CNAC4RPD.EXE (2196)
Stopped! C:\Windows\system32\SearchIndexer.exe (2364)
Stopped! C:\Windows\system32\spool\DRIVERS\x64\3\HP1006MC.EXE (3064)
Stopped! C:\Windows\servicing\TrustedInstaller.exe (2588)
Stopped! C:\Windows\System32\rundll32.exe (2576)
Stopped! C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe (3228)
Stopped! C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe (3232)
Stopped! C:\Windows\System32\igfxtray.exe (3344)
Stopped! C:\Windows\System32\hkcmd.exe (2700)
Stopped! C:\Windows\System32\igfxpers.exe (3688)
Stopped! C:\Program Files (x86)\Sony\Sony PC Companion\PCCompanion.exe (3144)
Stopped! C:\Users\Honza\AppData\Local\Google\Update\1.3.21.135\GoogleCrashHandler.exe (3500)
Stopped! C:\Users\Honza\AppData\Local\Google\Update\1.3.21.135\GoogleCrashHandler64.exe (3724)
Stopped! C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe (3816)
Stopped! C:\Program Files (x86)\Sony\Sony PC Companion\PCCompanionInfo.exe (972)
Stopped! C:\Program Files\Windows Media Player\wmpnetwk.exe (3928)
Stopped! C:\Users\Honza\AppData\Local\Google\Chrome\Application\chrome.exe (3588)
Stopped! C:\Users\Honza\AppData\Local\Google\Chrome\Application\chrome.exe (3468)
Stopped! C:\Users\Honza\AppData\Local\Google\Chrome\Application\chrome.exe (3480)
Stopped! C:\Users\Honza\AppData\Local\Google\Chrome\Application\chrome.exe (2148)
Stopped! C:\Users\Honza\AppData\Local\Google\Chrome\Application\chrome.exe (4468)
Stopped! C:\Users\Honza\AppData\Local\Google\Chrome\Application\chrome.exe (4792)
Stopped! C:\Users\Honza\AppData\Local\Google\Chrome\Application\chrome.exe (4832)
Stopped! C:\Users\Honza\AppData\Local\Google\Chrome\Application\chrome.exe (4876)
Stopped! C:\Users\Honza\AppData\Local\Google\Chrome\Application\chrome.exe (5072)
Stopped! C:\Users\Honza\AppData\Local\Google\Chrome\Application\chrome.exe (4252)
Stopped! C:\Users\Honza\AppData\Local\Google\Chrome\Application\chrome.exe (4388)
Stopped! C:\Users\Honza\AppData\Local\Google\Chrome\Application\chrome.exe (4584)
Stopped! C:\Users\Honza\AppData\Local\Google\Chrome\Application\chrome.exe (252)
Stopped! C:\Users\Honza\AppData\Local\Google\Chrome\Application\chrome.exe (4904)
Stopped! C:\Users\Honza\AppData\Local\Google\Chrome\Application\chrome.exe (5100)
Stopped! C:\Users\Honza\AppData\Local\Google\Chrome\Application\chrome.exe (4404)
Stopped! C:\Users\Honza\AppData\Local\Google\Chrome\Application\chrome.exe (4640)
Stopped! C:\Users\Honza\AppData\Local\Google\Chrome\Application\chrome.exe (4900)
Stopped! C:\Users\Honza\AppData\Local\Google\Chrome\Application\chrome.exe (4160)
Stopped! C:\Users\Honza\AppData\Local\Google\Chrome\Application\chrome.exe (4488)
Stopped! C:\Users\Honza\AppData\Local\Google\Chrome\Application\chrome.exe (996)
Stopped! C:\Users\Honza\AppData\Local\Google\Chrome\Application\chrome.exe (4144)
Stopped! C:\Users\Honza\AppData\Local\Google\Chrome\Application\chrome.exe (4516)
Stopped! C:\Users\Honza\AppData\Local\Google\Chrome\Application\chrome.exe (4916)
Stopped! C:\Users\Honza\AppData\Local\Google\Chrome\Application\chrome.exe (4512)
Stopped! C:\Users\Honza\AppData\Local\Google\Chrome\Application\chrome.exe (1252)
Stopped! C:\Users\Honza\AppData\Local\Google\Chrome\Application\chrome.exe (4568)
Stopped! C:\Users\Honza\AppData\Local\Google\Chrome\Application\chrome.exe (4940)
Stopped! C:\Users\Honza\AppData\Local\Google\Chrome\Application\chrome.exe (5372)
Stopped! C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IMSS\PrivacyIconClient.exe (6048)
Stopped! C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe (5492)
Stopped! C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe (756)
Stopped! C:\Windows\System32\WUDFHost.exe (5872)
Stopped! C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\hpsa_service.exe (3488)
Stopped! C:\Program Files (x86)\Common Files\InterVideo\RegMgr\iviRegMgr.exe (5992)
Stopped! C:\Windows\system32\sppsvc.exe (2508)
Stopped! C:\Windows\system32\taskeng.exe (4544)

################## | Files # Infected Folders |

Deleted ! C:\Users\Honza\AppData\Local\Temp\Resource.exe
Deleted ! G:\Rohos mini.exe
Deleted ! G:\Rohos Mini Drive (Portable).exe
Deleted ! G:\syncguid.dat

(!) Temporary files deleted.

################## | Registry |

################## | Mountpoints2 |

Deleted ! HKCU\.\.\.\.\Explorer\MountPoints2\{25d6abd3-6604-11e2-a20c-2c27d720e35d}
Deleted ! HKCU\.\.\.\.\Explorer\MountPoints2\{b056f72f-518d-11e2-aad8-2c27d720e35d}
Deleted ! HKCU\.\.\.\.\Explorer\MountPoints2\{ebc4bc83-0259-11e2-8e18-2c27d720e35d}

################## | Listing |

[02/08/2011 - 12:58:48 | SHD ] C:\$RECYCLE.BIN
[18/02/2013 - 12:18:45 | D ] C:\Adela
[30/09/2011 - 14:07:06 | RASHD ] C:\Autorun.inf
[22/10/2011 - 08:08:39 | D ] C:\BentleyDownloads
[11/02/2011 - 21:13:06 | N | 8192] C:\BOOTSECT.BAK
[23/02/2013 - 09:48:36 | D ] C:\Config.Msi
[14/07/2009 - 06:08:56 | SHD ] C:\Documents and Settings
[25/02/2013 - 11:31:15 | ASH | 3133157376] C:\hiberfil.sys
[02/08/2011 - 12:48:56 | D ] C:\hp
[12/08/2011 - 11:38:33 | D ] C:\install
[16/06/2011 - 13:08:21 | D ] C:\Intel
[02/09/2011 - 15:34:06 | D ] C:\lj1010seriesprintsys
[16/06/2011 - 14:24:02 | N | 0] C:\OS
[25/02/2013 - 10:31:23 | N | 25372] C:\P1005.log
[25/02/2013 - 11:31:16 | ASH | 4177543168] C:\pagefile.sys
[14/07/2009 - 04:20:08 | D ] C:\PerfLogs
[25/02/2013 - 10:30:59 | D ] C:\Program Files
[22/02/2013 - 10:56:19 | D ] C:\Program Files (x86)
[22/02/2013 - 20:34:48 | HD ] C:\ProgramData
[11/02/2011 - 23:08:40 | SHD ] C:\Recovery
[26/04/2012 - 09:23:33 | D ] C:\rsit
[22/02/2013 - 20:33:41 | D ] C:\swsetup
[22/02/2013 - 20:39:48 | SHD ] C:\System Volume Information
[02/08/2011 - 12:58:42 | D ] C:\SYSTEM.SAV
[07/08/2010 - 02:26:40 | ASH | 47104] C:\Thumbs.db
[25/02/2013 - 11:39:59 | D ] C:\UsbFix
[25/02/2013 - 11:25:48 | N | 6830] C:\UsbFix [Clean 1] PRODEJNA.txt
[25/02/2013 - 11:40:04 | A | 7984] C:\UsbFix [Clean 2] PRODEJNA.txt
[21/02/2013 - 10:11:32 | N | 7210] C:\UsbFix [Scan 1] PRODEJNA.txt
[30/09/2011 - 14:09:08 | N | 1649] C:\UsbFix.txt
[02/08/2011 - 12:48:34 | D ] C:\Users
[16/08/2012 - 10:16:31 | N | 2029416] C:\vcredist_x86.log
[15/02/2013 - 15:51:25 | D ] C:\Windows
[02/08/2011 - 12:58:48 | SHD ] D:\$RECYCLE.BIN
[30/09/2011 - 14:07:08 | RASHD ] D:\Autorun.inf
[22/11/2012 - 10:42:03 | D ] D:\Backup
[02/08/2011 - 12:48:19 | SHD ] D:\boot
[20/11/2010 - 07:40:07 | ASH | 383786] D:\bootmgr
[02/08/2011 - 12:48:18 | N | 0] D:\BT_HP.FLG
[16/06/2011 - 14:39:59 | N | 489] D:\CSP.DAT
[16/06/2011 - 14:43:53 | N | 13175] D:\DeployRp.log
[30/08/2011 - 13:11:30 | D ] D:\hp
[30/08/2011 - 13:11:30 | N | 0] D:\hpdrcu.prc
[11/10/2012 - 09:15:52 | N | 22] D:\HPSF_Rep.txt
[17/09/2011 - 09:40:30 | N | 8] D:\HP_WSD.dat
[02/08/2011 - 12:48:08 | N | 44] D:\language.ini
[02/08/2011 - 12:48:19 | SHD ] D:\preload
[02/08/2011 - 12:48:19 | SD ] D:\Recovery
[16/06/2011 - 14:43:53 | N | 0] D:\RPCONFIG.LOG
[16/06/2011 - 13:45:10 | SHD ] D:\System Volume Information
[03/08/2011 - 13:58:41 | SHD ] E:\$RECYCLE.BIN
[03/08/2012 - 14:53:48 | N | 184] E:\8PF8-P9MK.key
[19/12/2011 - 12:46:59 | D ] E:\Aida64
[30/09/2011 - 14:07:09 | RASHD ] E:\Autorun.inf
[25/02/2013 - 10:38:30 | D ] E:\Documents
[25/02/2013 - 10:30:24 | D ] E:\Downloads
[11/12/2012 - 14:33:45 | D ] E:\Dvorakova
[30/07/2012 - 09:27:06 | D ] E:\favoirites
[31/07/2012 - 13:22:22 | D ] E:\Install
[31/07/2012 - 13:37:14 | D ] E:\iso
[14/08/2012 - 13:38:53 | D ] E:\kkk
[24/02/2012 - 13:30:02 | N | 48128] E:\KUPNI_SMLOUVA_A6.doc
[03/08/2011 - 16:44:31 | D ] E:\Mapy
[25/01/2013 - 10:40:29 | D ] E:\Miksanik
[27/12/2011 - 16:38:35 | D ] E:\msdownld.tmp
[08/02/2013 - 16:07:27 | D ] E:\Petr
[23/02/2013 - 11:56:08 | D ] E:\Pohoda
[24/08/2011 - 14:37:48 | D ] E:\rr
[15/11/2012 - 13:25:00 | D ] E:\Svoboda
[22/02/2013 - 20:39:56 | SHD ] E:\System Volume Information
[22/11/2012 - 11:30:39 | D ] E:\temp
[03/08/2011 - 14:02:16 | D ] E:\Users
[03/08/2012 - 14:53:41 | N | 182] E:\W5HN-IUT.key
[16/06/2012 - 10:05:19 | D ] E:\Zaloha_Mi_13_6_2012
[24/01/2012 - 15:29:32 | D ] E:\Zaloha_Mi_24_1_2012
[31/08/2012 - 13:13:01 | D ] E:\Zaloha_Mi_31_8_2012
[03/10/2011 - 12:01:54 | D ] E:\Zaloha_Mi_3_10_11
[08/11/2011 - 16:39:24 | D ] G:\Diag
[21/12/2012 - 12:37:10 | D ] G:\FOUND.000
[22/07/2012 - 19:41:36 | D ] G:\.android_secure
[08/11/2011 - 16:44:44 | D ] G:\Instalace
[15/02/2009 - 04:35:26 | D ] G:\bd_local
[04/02/2013 - 13:19:26 | D ] G:\FOUND.001
[12/02/2013 - 10:14:44 | D ] G:\Danken servis
[09/11/2011 - 01:22:46 | D ] G:\jjj
[26/11/2011 - 13:59:52 | D ] G:\Music
[21/02/2012 - 15:09:38 | D ] G:\David Z podpis email
[20/04/2012 - 15:32:08 | D ] G:\_rohos
[22/07/2012 - 21:40:44 | D ] G:\evolve
[05/09/2012 - 15:44:48 | D ] G:\Autorun.inf
[05/10/2012 - 15:59:46 | D ] G:\SP3
[13/10/2012 - 11:49:58 | D ] G:\SP1 Vista
[13/10/2012 - 11:51:00 | D ] G:\SP1 Win7
[13/10/2012 - 11:52:16 | D ] G:\SP2 Vista
[02/02/2013 - 13:46:28 | N | 34] G:\aa.txt
[22/10/2012 - 14:18:00 | N | 955] G:\Qoobox.zip
[23/10/2012 - 13:16:04 | D ] G:\aaa
[04/02/2013 - 13:19:30 | N | 8730] G:\BOOTEX.LOG

################## | Vaccin |

C:\Autorun.inf -> Vaccine created by UsbFix (El Desaparecido)
D:\Autorun.inf -> Vaccine created by UsbFix (El Desaparecido)
E:\Autorun.inf -> Vaccine created by UsbFix (El Desaparecido)
G:\Autorun.inf -> Vaccine created by UsbFix (El Desaparecido)

################## | E.O.F | http://sosvirus.org |

#11 Příspěvek od **Rudy** » 25 úno 2013 12:17

Teď by to mělo být OK. Protože na ni byly smazány určité podivné soubory, dejte ještě log ComboFix. Možná v PC ještě něco bude.

Steron · #12 Příspěvek od **Steron** » 25 úno 2013 12:36

USBFix vymazal Rohos Mini Drive - viz napr. http://www.slunecnice.cz/sw/rohos-mini-drive/ to asi vypada na falesny poplach, nevim

ComboFix 13-02-24.01 - Honza 25.02.2013 12:22:57.1.4 - x64
Microsoft Windows 7 Professional 6.1.7601.1.1250.420.1029.18.3984.2707 [GMT 1:00]
Spuštěný z: e:\users\Honza\Desktop\ComboFix.exe
AV: ESET NOD32 Antivirus 4.2 *Disabled/Updated* {77DEAFED-8149-104B-25A1-21771CA47CD1}
SP: ESET NOD32 Antivirus 4.2 *Disabled/Updated* {CCBF4E09-A773-1FC5-1F11-1A056723366C}
SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
* Vytvořen nový Bod Obnovení
.
.
((((((((((((((((((((((((((((((((((((((( Ostatní výmazy )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
C:\Thumbs.db
c:\windows\pkunzip.pif
c:\windows\pkzip.pif
c:\windows\SysWow64\Packet.dll
c:\windows\SysWow64\pthreadVC.dll
c:\windows\SysWow64\wpcap.dll
.
.
((((((((((((((((((((((((((((((((((((((( Ovladače/Služby )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
-------\Legacy_NPF
-------\Service_npf
.
.
((((((((((((((((((((((((( Soubory vytvořené od 2013-01-25 do 2013-02-25 )))))))))))))))))))))))))))))))
.
.
2013-02-25 11:26 . 2013-02-25 11:26 -------- d-----w- c:\users\Default\AppData\Local\temp
2013-02-25 09:38 . 2013-02-25 09:38 76232 ----a-w- c:\programdata\Microsoft\Windows Defender\Definition Updates\{FBBA68B4-7E78-4153-B77A-8E85D0E61663}\offreg.dll
2013-02-25 09:30 . 2013-02-25 09:30 -------- d-----w- c:\program files\Avago-HP
2013-02-25 09:30 . 2010-06-29 14:22 373760 ----a-w- c:\windows\system32\Spool\prtprocs\x64\HP1006S.DLL
2013-02-25 09:30 . 2010-01-13 11:41 64512 ----a-w- c:\windows\system32\HPPLVS.dll
2013-02-25 09:30 . 2010-06-29 14:22 403968 ----a-w- c:\windows\system32\HP1006LM.DLL
2013-02-22 19:34 . 2013-02-22 19:34 -------- d-----w- c:\programdata\{9BF4D58B-C6D6-467B-BC5A-FD0C1278F4AF}
2013-02-22 14:07 . 2013-02-08 00:28 9162192 ----a-w- c:\programdata\Microsoft\Windows Defender\Definition Updates\{FBBA68B4-7E78-4153-B77A-8E85D0E61663}\mpengine.dll
2013-02-22 09:56 . 2013-02-22 09:56 -------- d-----w- c:\users\Honza\AppData\Roaming\Malwarebytes
2013-02-22 09:56 . 2013-02-22 09:56 -------- d-----w- c:\program files (x86)\Malwarebytes' Anti-Malware
2013-02-22 09:56 . 2013-02-22 09:56 -------- d-----w- c:\programdata\Malwarebytes
2013-02-22 09:56 . 2012-12-14 15:49 24176 ----a-w- c:\windows\system32\drivers\mbam.sys
2013-02-18 11:01 . 2013-02-18 11:18 -------- d-----w- C:\Adela
2013-02-18 10:01 . 2013-02-18 11:23 -------- d-----w- c:\users\Honza\AppData\Roaming\PSpad
2013-02-18 10:01 . 2013-02-18 10:01 -------- d-----w- c:\program files (x86)\PSPad editor
2013-02-13 17:56 . 2013-01-09 01:10 996352 ----a-w- c:\program files\Common Files\Microsoft Shared\VGX\VGX.dll
2013-02-13 17:56 . 2013-01-08 22:01 768000 ----a-w- c:\program files (x86)\Common Files\Microsoft Shared\VGX\VGX.dll
2013-02-13 11:57 . 2013-01-05 05:53 5553512 ----a-w- c:\windows\system32\ntoskrnl.exe
2013-02-13 11:57 . 2013-01-05 05:00 3967848 ----a-w- c:\windows\SysWow64\ntkrnlpa.exe
2013-02-13 11:57 . 2013-01-05 05:00 3913064 ----a-w- c:\windows\SysWow64\ntoskrnl.exe
2013-02-13 11:57 . 2013-01-04 03:26 3153408 ----a-w- c:\windows\system32\win32k.sys
2013-02-13 11:57 . 2013-01-04 05:46 215040 ----a-w- c:\windows\system32\winsrv.dll
2013-02-13 11:57 . 2013-01-04 02:47 25600 ----a-w- c:\windows\SysWow64\setup16.exe
2013-02-13 11:57 . 2013-01-04 02:47 14336 ----a-w- c:\windows\SysWow64\ntvdm64.dll
2013-02-13 11:57 . 2013-01-04 04:51 5120 ----a-w- c:\windows\SysWow64\wow32.dll
2013-02-13 11:57 . 2013-01-04 02:47 7680 ----a-w- c:\windows\SysWow64\instnm.exe
2013-02-13 11:57 . 2013-01-04 02:47 2048 ----a-w- c:\windows\SysWow64\user.exe
2013-02-13 11:57 . 2013-01-03 06:00 1913192 ----a-w- c:\windows\system32\drivers\tcpip.sys
2013-02-13 11:57 . 2013-01-03 06:00 288088 ----a-w- c:\windows\system32\drivers\FWPKCLNT.SYS
2013-02-07 12:39 . 2013-02-07 12:39 95648 ----a-w- c:\windows\SysWow64\WindowsAccessBridge-32.dll
2013-02-04 14:40 . 2013-02-04 14:40 -------- d-----w- c:\users\Honza\AppData\Roaming\Nifflas
2013-02-04 14:40 . 2013-02-04 14:40 -------- d-----w- c:\users\Honza\AppData\Local\Programs
2013-02-02 09:05 . 2013-02-02 09:05 -------- d-----w- c:\users\Honza\AppData\Local\ElevatedDiagnostics
2013-02-02 09:03 . 2009-07-14 01:41 101376 ----a-w- c:\windows\system32\Spool\prtprocs\x64\HPZPPWN7.DLL
.
.
.
(((((((((((((((((((((((((((((((((((((((( Find3M výpis ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2013-02-13 17:56 . 2011-08-02 12:09 70004024 ----a-w- c:\windows\system32\MRT.exe
2013-02-08 14:40 . 2012-03-30 07:58 697712 ----a-w- c:\windows\SysWow64\FlashPlayerApp.exe
2013-02-08 14:40 . 2011-08-10 13:24 74096 ----a-w- c:\windows\SysWow64\FlashPlayerCPLApp.cpl
2013-02-07 12:39 . 2012-05-23 16:03 861088 ----a-w- c:\windows\SysWow64\npDeployJava1.dll
2013-02-07 12:39 . 2011-08-03 11:19 782240 ----a-w- c:\windows\SysWow64\deployJava1.dll
2013-01-17 00:28 . 2010-11-21 03:27 273840 ------w- c:\windows\system32\MpSigStub.exe
2013-01-04 04:43 . 2013-02-13 11:57 44032 ----a-w- c:\windows\apppatch\acwow64.dll
2012-12-29 08:52 . 2012-12-29 08:52 27760 ----a-w- c:\windows\system32\drivers\ggsemc.sys
2012-12-29 08:52 . 2012-12-29 08:52 14448 ----a-w- c:\windows\system32\drivers\ggflt.sys
2012-12-16 17:11 . 2012-12-21 16:00 46080 ----a-w- c:\windows\system32\atmlib.dll
2012-12-16 14:45 . 2012-12-21 16:00 367616 ----a-w- c:\windows\system32\atmfd.dll
2012-12-16 14:13 . 2012-12-21 16:00 295424 ----a-w- c:\windows\SysWow64\atmfd.dll
2012-12-16 14:13 . 2012-12-21 16:00 34304 ----a-w- c:\windows\SysWow64\atmlib.dll
2012-12-14 01:42 . 2012-12-14 01:42 9728 ----a-w- c:\windows\system32\IGFXDEVLib.dll
2012-12-14 01:42 . 2012-12-14 01:42 437760 ----a-w- c:\windows\system32\igfxrnor.lrc
2012-12-14 01:42 . 2012-12-14 01:42 384512 ----a-w- c:\windows\system32\igfxpph.dll
2012-12-14 01:42 . 2012-12-14 01:42 12615680 ----a-w- c:\windows\system32\igdumd64.dll
2012-12-14 01:42 . 2012-12-14 01:42 64512 ----a-w- c:\windows\SysWow64\igdde32.dll
2012-12-14 01:42 . 2012-12-14 01:42 440320 ----a-w- c:\windows\system32\igfxrell.lrc
2012-12-14 01:42 . 2012-12-14 01:42 437760 ----a-w- c:\windows\system32\igfxrptb.lrc
2012-12-14 01:42 . 2012-12-14 01:42 437248 ----a-w- c:\windows\system32\igfxrtha.lrc
2012-12-14 01:42 . 2012-12-14 01:42 435712 ----a-w- c:\windows\system32\igfxrheb.lrc
2012-12-14 01:42 . 2012-12-14 01:42 435712 ----a-w- c:\windows\system32\igfxrara.lrc
2012-12-14 01:42 . 2012-12-14 01:42 431104 ----a-w- c:\windows\system32\igfxrkor.lrc
2012-12-14 01:42 . 2012-12-14 01:42 429056 ----a-w- c:\windows\system32\igfxrcht.lrc
2012-12-14 01:42 . 2012-12-14 01:42 330752 ----a-w- c:\windows\SysWow64\igfxdv32.dll
2012-12-14 01:42 . 2012-12-14 01:42 28672 ----a-w- c:\windows\system32\igfxexps.dll
2012-12-14 01:42 . 2012-12-14 01:42 11174912 ----a-w- c:\windows\SysWow64\igd10umd32.dll
2012-12-14 01:42 . 2011-06-16 12:03 64000 ----a-w- c:\windows\system32\igfxsrvc.dll
2012-12-14 01:42 . 2011-06-16 12:03 110592 ----a-w- c:\windows\system32\hccutils.dll
2012-12-14 01:42 . 2012-12-14 01:42 640512 ----a-w- c:\windows\SysWow64\igfxcmrt32.dll
2012-12-14 01:42 . 2012-12-14 01:42 512112 ----a-w- c:\windows\system32\igfxsrvc.exe
2012-12-14 01:42 . 2012-12-14 01:42 438784 ----a-w- c:\windows\system32\igfxrnld.lrc
2012-12-14 01:42 . 2012-12-14 01:42 438784 ----a-w- c:\windows\system32\igfxrdeu.lrc
2012-12-14 01:42 . 2012-12-14 01:42 3121152 ----a-w- c:\windows\SysWow64\igfxcmjit32.dll
2012-12-14 01:42 . 2012-12-14 01:42 255088 ----a-w- c:\windows\system32\igfxext.exe
2012-12-14 01:42 . 2012-12-14 01:42 13030400 ----a-w- c:\windows\system32\ig4icd64.dll
2012-12-14 01:42 . 2012-12-14 01:42 483840 ----a-w- c:\windows\system32\igfx11cmrt64.dll
2012-12-14 01:42 . 2012-12-14 01:42 439808 ----a-w- c:\windows\system32\igfxresn.lrc
2012-12-14 01:42 . 2012-12-14 01:42 437760 ----a-w- c:\windows\system32\igfxrtrk.lrc
2012-12-14 01:42 . 2012-12-14 01:42 428544 ----a-w- c:\windows\system32\igfxrchs.lrc
2012-12-14 01:42 . 2011-06-16 12:03 9007616 ----a-w- c:\windows\system32\igfxress.dll
2012-12-14 01:42 . 2011-06-16 12:03 12858368 ----a-w- c:\windows\system32\igd10umd64.dll
2012-12-14 01:42 . 2012-12-14 01:42 80384 ----a-w- c:\windows\system32\igdde64.dll
2012-12-14 01:42 . 2012-12-14 01:42 459264 ----a-w- c:\windows\SysWow64\igfx11cmrt32.dll
2012-12-14 01:42 . 2012-12-14 01:42 439296 ----a-w- c:\windows\system32\igfxrrus.lrc
2012-12-14 01:42 . 2012-12-14 01:42 438784 ----a-w- c:\windows\system32\igfxrptg.lrc
2012-12-14 01:42 . 2012-12-14 01:42 286208 ----a-w- c:\windows\system32\igfxrenu.lrc
2012-12-14 01:42 . 2012-12-14 01:42 142336 ----a-w- c:\windows\system32\igfxdo.dll
2012-12-14 01:42 . 2011-08-31 17:47 11049472 ----a-w- c:\windows\SysWow64\igdumd32.dll
2012-12-14 01:42 . 2012-12-14 01:42 5353888 ----a-w- c:\windows\system32\drivers\igdkmd64.sys
2012-12-14 01:42 . 2012-12-14 01:42 439296 ----a-w- c:\windows\system32\igfxrrom.lrc
2012-12-14 01:42 . 2012-12-14 01:42 438272 ----a-w- c:\windows\system32\igfxrcsy.lrc
2012-12-14 01:42 . 2012-12-14 01:42 25088 ----a-w- c:\windows\SysWow64\igfxexps32.dll
2012-12-14 01:42 . 2012-12-14 01:42 185968 ----a-w- c:\windows\system32\difx64.exe
2012-12-14 01:42 . 2012-12-14 01:42 518656 ----a-w- c:\windows\system32\igfxcmrt64.dll
2012-12-14 01:42 . 2012-12-14 01:42 438272 ----a-w- c:\windows\system32\igfxrfin.lrc
2012-12-14 01:42 . 2012-12-14 01:42 437760 ----a-w- c:\windows\system32\igfxrsve.lrc
2012-12-14 01:42 . 2012-12-14 01:42 432128 ----a-w- c:\windows\system32\igfxrjpn.lrc
2012-12-14 01:42 . 2012-12-14 01:42 116224 ----a-w- c:\windows\system32\igfxCoIn_v2932.dll
2012-12-14 01:42 . 2012-12-14 01:42 10812416 ----a-w- c:\windows\SysWow64\ig4icd32.dll
2012-12-14 01:42 . 2012-12-14 01:42 442880 ----a-w- c:\windows\system32\igfxdev.dll
2012-12-14 01:42 . 2012-12-14 01:42 438784 ----a-w- c:\windows\system32\igfxrita.lrc
2012-12-14 01:42 . 2012-12-14 01:42 438272 ----a-w- c:\windows\system32\igfxrhun.lrc
2012-12-14 01:42 . 2012-12-14 01:42 437248 ----a-w- c:\windows\system32\igfxrdan.lrc
2012-12-14 01:42 . 2012-12-14 01:42 126976 ----a-w- c:\windows\system32\igfxcpl.cpl
2012-12-14 01:42 . 2012-12-14 01:42 441968 ----a-w- c:\windows\system32\igfxpers.exe
2012-12-14 01:42 . 2012-12-14 01:42 439808 ----a-w- c:\windows\system32\igfxrfra.lrc
2012-12-14 01:42 . 2012-12-14 01:42 410112 ----a-w- c:\windows\system32\igfxTMM.dll
2012-12-14 01:42 . 2012-12-14 01:42 172144 ----a-w- c:\windows\system32\igfxtray.exe
2012-12-14 01:42 . 2012-12-14 01:42 5906032 ----a-w- c:\windows\system32\GfxUI.exe
2012-12-14 01:42 . 2012-12-14 01:42 438784 ----a-w- c:\windows\system32\igfxrsky.lrc
2012-12-14 01:42 . 2012-12-14 01:42 438784 ----a-w- c:\windows\system32\igfxrplk.lrc
2012-12-14 01:42 . 2012-12-14 01:42 438784 ----a-w- c:\windows\system32\igfxrhrv.lrc
2012-12-14 01:42 . 2012-12-14 01:42 3511296 ----a-w- c:\windows\system32\igfxcmjit64.dll
2012-12-14 01:42 . 2012-12-14 01:42 175104 ----a-w- c:\windows\system32\gfxSrvc.dll
2012-12-14 01:42 . 2012-12-14 01:42 437760 ----a-w- c:\windows\system32\igfxrslv.lrc
2012-12-14 01:42 . 2012-12-14 01:42 399984 ----a-w- c:\windows\system32\hkcmd.exe
2012-12-14 01:42 . 2012-12-14 01:42 277616 ----a-w- c:\windows\SysWow64\IntelCpHeciSvc.exe
2012-12-07 13:20 . 2013-01-09 12:02 441856 ----a-w- c:\windows\system32\Wpc.dll
2012-12-07 13:15 . 2013-01-09 12:02 2746368 ----a-w- c:\windows\system32\gameux.dll
2012-12-07 12:26 . 2013-01-09 12:02 308736 ----a-w- c:\windows\SysWow64\Wpc.dll
2012-12-07 12:20 . 2013-01-09 12:02 2576384 ----a-w- c:\windows\SysWow64\gameux.dll
2012-12-07 11:20 . 2013-01-09 12:02 30720 ----a-w- c:\windows\system32\usk.rs
2012-12-07 11:20 . 2013-01-09 12:02 43520 ----a-w- c:\windows\system32\csrr.rs
2012-12-07 11:20 . 2013-01-09 12:02 23552 ----a-w- c:\windows\system32\oflc.rs
2012-12-07 11:20 . 2013-01-09 12:02 45568 ----a-w- c:\windows\system32\oflc-nz.rs
2012-12-07 11:20 . 2013-01-09 12:02 44544 ----a-w- c:\windows\system32\pegibbfc.rs
2012-12-07 11:20 . 2013-01-09 12:02 20480 ----a-w- c:\windows\system32\pegi-fi.rs
2012-12-07 11:20 . 2013-01-09 12:02 20480 ----a-w- c:\windows\system32\pegi-pt.rs
2012-12-07 11:19 . 2013-01-09 12:02 20480 ----a-w- c:\windows\system32\pegi.rs
2012-12-07 11:19 . 2013-01-09 12:02 46592 ----a-w- c:\windows\system32\fpb.rs
2012-12-07 11:19 . 2013-01-09 12:02 40960 ----a-w- c:\windows\system32\cob-au.rs
2012-12-07 11:19 . 2013-01-09 12:02 21504 ----a-w- c:\windows\system32\grb.rs
2012-12-07 11:19 . 2013-01-09 12:02 15360 ----a-w- c:\windows\system32\djctq.rs
2012-12-07 11:19 . 2013-01-09 12:02 55296 ----a-w- c:\windows\system32\cero.rs
2012-12-07 11:19 . 2013-01-09 12:02 51712 ----a-w- c:\windows\system32\esrb.rs
2012-12-07 10:46 . 2013-01-09 12:02 43520 ----a-w- c:\windows\SysWow64\csrr.rs
2012-12-07 10:46 . 2013-01-09 12:02 30720 ----a-w- c:\windows\SysWow64\usk.rs
2012-12-07 10:46 . 2013-01-09 12:02 45568 ----a-w- c:\windows\SysWow64\oflc-nz.rs
.
.
(((((((((((((((((((((((((((((((((( Spouštěcí body v registru )))))))))))))))))))))))))))))))))))))))))))))
.
.
*Poznámka* prázdné záznamy a legitimní výchozí údaje nejsou zobrazeny.
REGEDIT4
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Sony PC Companion"="c:\program files (x86)\Sony\Sony PC Companion\PCCompanion.exe" [2013-01-07 446648]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]
"IMSS"="c:\program files (x86)\Intel\Intel(R) Management Engine Components\IMSS\PIconStartup.exe" [2011-01-17 112152]
"SunJavaUpdateSched"="c:\program files (x86)\Common Files\Java\Java Update\jusched.exe" [2012-07-03 252848]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorAdmin"= 5 (0x5)
"ConsentPromptBehaviorUser"= 3 (0x3)
"EnableUIADesktopToggle"= 0 (0x0)
.
R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2012-04-30 123816]
R2 SkypeUpdate;Skype Updater;c:\program files (x86)\Skype\Updater\Updater.exe [2013-01-08 161536]
R3 dmvsc;dmvsc;c:\windows\system32\drivers\dmvsc.sys [2010-11-21 71168]
R3 ggflt;SEMC USB Flash Driver Filter;c:\windows\system32\DRIVERS\ggflt.sys [2012-12-29 14448]
R3 IFCoEMP;IFCoEMP;c:\windows\system32\drivers\ifM52x64.sys [2010-08-13 339728]
R3 IFCoEVB;IFCoEVB;c:\windows\system32\drivers\ifP52X64.sys [2010-08-13 65808]
R3 Impcd;Impcd;c:\windows\system32\drivers\Impcd.sys [2010-02-26 158976]
R3 RdpVideoMiniport;Remote Desktop Video Miniport Driver;c:\windows\system32\drivers\rdpvideominiport.sys [2012-08-23 19456]
R3 RHDISK_AMD64;RHDISK_AMD64;g:\_rohos\RHDISK_AMD64.SYS [2009-07-24 31408]
R3 RTL8192su;Realtek RTL8192SU Wireless LAN 802.11n USB 2.0 Network Adapter;c:\windows\system32\DRIVERS\RTL8192su.sys [x]
R3 Sony PC Companion;Sony PC Companion;c:\program files (x86)\Sony\Sony PC Companion\PCCService.exe [2012-01-18 155320]
R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys [2012-08-23 57856]
R3 TsUsbGD;Remote Desktop Generic USB Device;c:\windows\system32\drivers\TsUsbGD.sys [2012-08-23 30208]
R3 WatAdminSvc;Služba Technologie aktivace Windows;c:\windows\system32\Wat\WatAdminSvc.exe [2011-08-02 1255736]
S1 ehdrv;ehdrv;c:\windows\system32\DRIVERS\ehdrv.sys [2010-12-21 141264]
S1 VBoxDrv;VirtualBox Service;c:\windows\system32\DRIVERS\VBoxDrv.sys [2012-08-20 224088]
S1 VBoxUSBMon;VirtualBox USB Monitor Driver;c:\windows\system32\DRIVERS\VBoxUSBMon.sys [2012-08-20 130904]
S2 eamonm;eamonm;c:\windows\system32\DRIVERS\eamonm.sys [2010-12-21 170640]
S2 ekrn;ESET Service;c:\program files\ESET\ESET NOD32 Antivirus\x86\ekrn.exe [2011-01-12 810144]
S2 epfwwfpr;epfwwfpr;c:\windows\system32\DRIVERS\epfwwfpr.sys [2010-12-21 125296]
S2 HP Support Assistant Service;HP Support Assistant Service;c:\program files (x86)\Hewlett-Packard\HP Support Framework\hpsa_service.exe [2012-09-27 86528]
S2 Intel(R) PROSet Monitoring Service;Intel(R) PROSet Monitoring Service;c:\windows\system32\IProsetMonitor.exe [2010-09-22 165032]
S2 MBAMService;MBAMService;c:\program files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe [2012-12-14 682344]
S2 pdfcDispatcher;PDF Document Manager;c:\program files (x86)\PDF Complete\pdfsvc.exe [2010-10-22 1121304]
S2 TomTomHOMEService;TomTomHOMEService;c:\program files (x86)\TomTom HOME 2\TomTomHOMEService.exe [2012-07-26 92632]
S2 UNS;Intel(R) Management and Security Application User Notification Service;c:\program files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe [2011-01-17 2656280]
S2 VMUSBArbService;VMware USB Arbitration Service;c:\program files (x86)\Common Files\VMware\USB\vmware-usbarbitrator.exe [2011-06-01 609904]
S3 IntcDAud;Intel(R) Display Audio;c:\windows\system32\DRIVERS\IntcDAud.sys [2010-10-15 317440]
S3 MBAMProtector;MBAMProtector;c:\windows\system32\drivers\mbam.sys [2012-12-14 24176]
.
.
--- Ostatní služby/ovladače v paměti ---
.
*NewlyCreated* - WS2IFSL
.
Obsah adresáře 'Naplánované úlohy'
.
2013-02-25 c:\windows\Tasks\Adobe Flash Player Updater.job
- c:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2012-03-30 14:40]
.
2013-02-25 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
- c:\program files (x86)\Google\Update\GoogleUpdate.exe [2011-10-04 13:35]
.
2013-02-25 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
- c:\program files (x86)\Google\Update\GoogleUpdate.exe [2011-10-04 13:35]
.
2013-02-25 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-4171360181-4009674652-647112566-1001Core.job
- c:\users\Honza\AppData\Local\Google\Update\GoogleUpdate.exe [2011-08-03 14:45]
.
2013-02-25 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-4171360181-4009674652-647112566-1001UA.job
- c:\users\Honza\AppData\Local\Google\Update\GoogleUpdate.exe [2011-08-03 14:45]
.
2013-02-23 c:\windows\Tasks\HPCeeScheduleForHonza.job
- c:\program files (x86)\Hewlett-Packard\HP Ceement\HPCEE.exe [2010-09-14 05:15]
.
2013-02-04 c:\windows\Tasks\HPCeeScheduleForPRODEJNA$.job
- c:\program files (x86)\Hewlett-Packard\HP Ceement\HPCEE.exe [2010-09-14 05:15]
.
.
--------- X64 Entries -----------
.
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"RtHDVCpl"="c:\program files\Realtek\Audio\HDA\RAVCpl64.exe" [2010-11-30 11660904]
"egui"="c:\program files\ESET\ESET NOD32 Antivirus\egui.exe" [2011-01-12 2918656]
"IgfxTray"="c:\windows\system32\igfxtray.exe" [2012-12-14 172144]
"HotKeysCmds"="c:\windows\system32\hkcmd.exe" [2012-12-14 399984]
"Persistence"="c:\windows\system32\igfxpers.exe" [2012-12-14 441968]
.
------- Doplňkový sken -------
.
uLocal Page = c:\windows\system32\blank.htm
mLocal Page = c:\windows\SysWOW64\blank.htm
TCP: Interfaces\{02F6BBF1-4246-4004-BA5E-F8F7890E9253}: NameServer = 212.96.167.18,89.190.50.18
DPF: {45830FF9-D9E6-4F41-86ED-B266933D8E90} - hxxp://10.100.53.14/RtspVaPgDec.cab
DPF: {D67DB088-70B4-4006-B052-57F614FD3AA8} - hxxp://www.vguard.net/myasp/chtIEx.cab
FF - ProfilePath - c:\users\Honza\AppData\Roaming\Mozilla\Firefox\Profiles\k0bxvvk9.default\
FF - prefs.js: browser.search.selectedEngine - Bing
FF - prefs.js: browser.startup.homepage - hxxp://www.google.cz/
FF - prefs.js: keyword.URL - hxxp://www.bing.com/search?FORM=UP21DF&PC=UP21&q=
.
- - - - NEPLATNÉ POLOŽKY ODSTRANĚNÉ Z REGISTRU - - - -
.
AddRemove-{EE202411-2C26-49E8-9784-1BC1DBF7DE96} - c:\program files (x86)\InstallShield Installation Information\{EE202411-2C26-49E8-9784-1BC1DBF7DE96}\setup.exe
.
.
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\pdfcDispatcher]
"ImagePath"="c:\program files (x86)\PDF Complete\pdfsvc.exe /startedbyscm:66B66708-40E2BE4D-pdfcService"
.
--------------------- ZAMKNUTÉ KLÍČE V REGISTRU ---------------------
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil64_11_5_502_149_ActiveX.exe,-101"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\Elevation]
"Enabled"=dword:00000001
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\LocalServer32]
@="c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil64_11_5_502_149_ActiveX.exe"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="IFlashBroker5"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil32_11_5_502_149_ActiveX.exe,-101"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\Elevation]
"Enabled"=dword:00000001
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\LocalServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil32_11_5_502_149_ActiveX.exe"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@="Shockwave Flash Object"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\InprocServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_5_502_149.ocx"
"ThreadingModel"="Apartment"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\MiscStatus]
@="0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ProgID]
@="ShockwaveFlash.ShockwaveFlash.11"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_5_502_149.ocx, 1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\TypeLib]
@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\Version]
@="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
@="ShockwaveFlash.ShockwaveFlash"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@="Macromedia Flash Factory Object"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\InprocServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_5_502_149.ocx"
"ThreadingModel"="Apartment"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ProgID]
@="FlashFactory.FlashFactory.1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_5_502_149.ocx, 1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\TypeLib]
@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\Version]
@="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
@="FlashFactory.FlashFactory"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="IFlashBroker5"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\PCW\Security]
@Denied: (Full) (Everyone)
.
------------------------ Jiné spuštené procesy ------------------------
.
c:\program files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
c:\program files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe
c:\program files (x86)\Common Files\Protexis\License Service\PsiService_2.exe
c:\program files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe
c:\program files (x86)\Sony\Sony PC Companion\PCCompanionInfo.exe
c:\program files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
c:\program files (x86)\Common Files\InterVideo\RegMgr\iviRegMgr.exe
.
**************************************************************************
.
Celkový čas: 2013-02-25 12:31:27 - počítač byl restartován
ComboFix-quarantined-files.txt 2013-02-25 11:31
.
Před spuštěním: Volných bajtů: 162 303 303 680
Po spuštění: Volných bajtů: 163 478 048 768
.
- - End Of File - - 74F3524CBFF56F6FAB1D955316BF4050

#13 Příspěvek od **Rudy** » 25 úno 2013 13:03

Ještě dočistíme. Otevřte poznámkový blok a zkopírujte do něj:

KillAll::

File::
c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-4171360181-4009674652-647112566-1001Core.job
c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-4171360181-4009674652-647112566-1001UA.job

Registry::
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]
"SunJavaUpdateSched"=-

Firefox::
FF - ProfilePath - c:\users\Honza\AppData\Roaming\Mozilla\Firefox\Profiles\k0bxvvk9.default\
FF - prefs.js: browser.search.selectedEngine - Bing
FF - prefs.js: keyword.URL - hxxp://www.bing.com/search?FORM=UP21DF&PC=UP21&q=

RegLock::
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}]
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\Elevation]
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\LocalServer32]
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\TypeLib]
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}]
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\ProxyStubClsid32]
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\TypeLib]
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}]
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\Elevation]
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\LocalServer32]
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\TypeLib]
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}]
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\InprocServer32]
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\MiscStatus]
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ProgID]
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\TypeLib]
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\Version]
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}]
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\InprocServer32]
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ProgID]
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\Version]
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}]
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\ProxyStubClsid32]
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\TypeLib]

Reboot::

Uložte na plochu jako CFScript.txt. pak jej myší přetáhněte nad ikonu ComboFix a pusťte. CF se spustí a vykoná příkazy ze skriptu.

Obrázek

Steron · #14 Příspěvek od **Steron** » 25 úno 2013 13:23

ComboFix 13-02-24.01 - Honza 25.02.2013 13:14:39.2.4 - x64
Microsoft Windows 7 Professional 6.1.7601.1.1250.420.1029.18.3984.2681 [GMT 1:00]
Spuštěný z: e:\users\Honza\Desktop\ComboFix.exe
Použité ovládací přepínače :: e:\users\Honza\Desktop\CFScript.txt
AV: ESET NOD32 Antivirus 4.2 *Disabled/Updated* {77DEAFED-8149-104B-25A1-21771CA47CD1}
SP: ESET NOD32 Antivirus 4.2 *Disabled/Updated* {CCBF4E09-A773-1FC5-1F11-1A056723366C}
SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.
FILE ::
"c:\windows\Tasks\GoogleUpdateTaskMachineCore.job"
"c:\windows\Tasks\GoogleUpdateTaskMachineUA.job"
"c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-4171360181-4009674652-647112566-1001Core.job"
"c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-4171360181-4009674652-647112566-1001UA.job"
.
.
((((((((((((((((((((((((((((((((((((((( Ostatní výmazy )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-4171360181-4009674652-647112566-1001Core.job
c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-4171360181-4009674652-647112566-1001UA.job
.
.
((((((((((((((((((((((((( Soubory vytvořené od 2013-01-25 do 2013-02-25 )))))))))))))))))))))))))))))))
.
.
2013-02-25 12:17 . 2013-02-25 12:17 -------- d-----w- c:\users\Default\AppData\Local\temp
2013-02-25 09:38 . 2013-02-25 09:38 76232 ----a-w- c:\programdata\Microsoft\Windows Defender\Definition Updates\{FBBA68B4-7E78-4153-B77A-8E85D0E61663}\offreg.dll
2013-02-25 09:30 . 2013-02-25 09:30 -------- d-----w- c:\program files\Avago-HP
2013-02-25 09:30 . 2010-06-29 14:22 373760 ----a-w- c:\windows\system32\Spool\prtprocs\x64\HP1006S.DLL
2013-02-25 09:30 . 2010-01-13 11:41 64512 ----a-w- c:\windows\system32\HPPLVS.dll
2013-02-25 09:30 . 2010-06-29 14:22 403968 ----a-w- c:\windows\system32\HP1006LM.DLL
2013-02-22 19:34 . 2013-02-22 19:34 -------- d-----w- c:\programdata\{9BF4D58B-C6D6-467B-BC5A-FD0C1278F4AF}
2013-02-22 14:07 . 2013-02-08 00:28 9162192 ----a-w- c:\programdata\Microsoft\Windows Defender\Definition Updates\{FBBA68B4-7E78-4153-B77A-8E85D0E61663}\mpengine.dll
2013-02-22 09:56 . 2013-02-22 09:56 -------- d-----w- c:\users\Honza\AppData\Roaming\Malwarebytes
2013-02-22 09:56 . 2013-02-22 09:56 -------- d-----w- c:\program files (x86)\Malwarebytes' Anti-Malware
2013-02-22 09:56 . 2013-02-22 09:56 -------- d-----w- c:\programdata\Malwarebytes
2013-02-22 09:56 . 2012-12-14 15:49 24176 ----a-w- c:\windows\system32\drivers\mbam.sys
2013-02-18 11:01 . 2013-02-18 11:18 -------- d-----w- C:\Adela
2013-02-18 10:01 . 2013-02-18 11:23 -------- d-----w- c:\users\Honza\AppData\Roaming\PSpad
2013-02-18 10:01 . 2013-02-18 10:01 -------- d-----w- c:\program files (x86)\PSPad editor
2013-02-13 17:56 . 2013-01-09 01:10 996352 ----a-w- c:\program files\Common Files\Microsoft Shared\VGX\VGX.dll
2013-02-13 17:56 . 2013-01-08 22:01 768000 ----a-w- c:\program files (x86)\Common Files\Microsoft Shared\VGX\VGX.dll
2013-02-13 11:57 . 2013-01-05 05:53 5553512 ----a-w- c:\windows\system32\ntoskrnl.exe
2013-02-13 11:57 . 2013-01-05 05:00 3967848 ----a-w- c:\windows\SysWow64\ntkrnlpa.exe
2013-02-13 11:57 . 2013-01-05 05:00 3913064 ----a-w- c:\windows\SysWow64\ntoskrnl.exe
2013-02-13 11:57 . 2013-01-04 03:26 3153408 ----a-w- c:\windows\system32\win32k.sys
2013-02-13 11:57 . 2013-01-04 05:46 215040 ----a-w- c:\windows\system32\winsrv.dll
2013-02-13 11:57 . 2013-01-04 02:47 25600 ----a-w- c:\windows\SysWow64\setup16.exe
2013-02-13 11:57 . 2013-01-04 02:47 14336 ----a-w- c:\windows\SysWow64\ntvdm64.dll
2013-02-13 11:57 . 2013-01-04 04:51 5120 ----a-w- c:\windows\SysWow64\wow32.dll
2013-02-13 11:57 . 2013-01-04 02:47 7680 ----a-w- c:\windows\SysWow64\instnm.exe
2013-02-13 11:57 . 2013-01-04 02:47 2048 ----a-w- c:\windows\SysWow64\user.exe
2013-02-13 11:57 . 2013-01-03 06:00 1913192 ----a-w- c:\windows\system32\drivers\tcpip.sys
2013-02-13 11:57 . 2013-01-03 06:00 288088 ----a-w- c:\windows\system32\drivers\FWPKCLNT.SYS
2013-02-07 12:39 . 2013-02-07 12:39 95648 ----a-w- c:\windows\SysWow64\WindowsAccessBridge-32.dll
2013-02-04 14:40 . 2013-02-04 14:40 -------- d-----w- c:\users\Honza\AppData\Roaming\Nifflas
2013-02-04 14:40 . 2013-02-04 14:40 -------- d-----w- c:\users\Honza\AppData\Local\Programs
2013-02-02 09:05 . 2013-02-02 09:05 -------- d-----w- c:\users\Honza\AppData\Local\ElevatedDiagnostics
2013-02-02 09:03 . 2009-07-14 01:41 101376 ----a-w- c:\windows\system32\Spool\prtprocs\x64\HPZPPWN7.DLL
.
.
.
(((((((((((((((((((((((((((((((((((((((( Find3M výpis ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2013-02-13 17:56 . 2011-08-02 12:09 70004024 ----a-w- c:\windows\system32\MRT.exe
2013-02-08 14:40 . 2012-03-30 07:58 697712 ----a-w- c:\windows\SysWow64\FlashPlayerApp.exe
2013-02-08 14:40 . 2011-08-10 13:24 74096 ----a-w- c:\windows\SysWow64\FlashPlayerCPLApp.cpl
2013-02-07 12:39 . 2012-05-23 16:03 861088 ----a-w- c:\windows\SysWow64\npDeployJava1.dll
2013-02-07 12:39 . 2011-08-03 11:19 782240 ----a-w- c:\windows\SysWow64\deployJava1.dll
2013-01-17 00:28 . 2010-11-21 03:27 273840 ------w- c:\windows\system32\MpSigStub.exe
2013-01-04 04:43 . 2013-02-13 11:57 44032 ----a-w- c:\windows\apppatch\acwow64.dll
2012-12-29 08:52 . 2012-12-29 08:52 27760 ----a-w- c:\windows\system32\drivers\ggsemc.sys
2012-12-29 08:52 . 2012-12-29 08:52 14448 ----a-w- c:\windows\system32\drivers\ggflt.sys
2012-12-16 17:11 . 2012-12-21 16:00 46080 ----a-w- c:\windows\system32\atmlib.dll
2012-12-16 14:45 . 2012-12-21 16:00 367616 ----a-w- c:\windows\system32\atmfd.dll
2012-12-16 14:13 . 2012-12-21 16:00 295424 ----a-w- c:\windows\SysWow64\atmfd.dll
2012-12-16 14:13 . 2012-12-21 16:00 34304 ----a-w- c:\windows\SysWow64\atmlib.dll
2012-12-14 01:42 . 2012-12-14 01:42 9728 ----a-w- c:\windows\system32\IGFXDEVLib.dll
2012-12-14 01:42 . 2012-12-14 01:42 437760 ----a-w- c:\windows\system32\igfxrnor.lrc
2012-12-14 01:42 . 2012-12-14 01:42 384512 ----a-w- c:\windows\system32\igfxpph.dll
2012-12-14 01:42 . 2012-12-14 01:42 12615680 ----a-w- c:\windows\system32\igdumd64.dll
2012-12-14 01:42 . 2012-12-14 01:42 64512 ----a-w- c:\windows\SysWow64\igdde32.dll
2012-12-14 01:42 . 2012-12-14 01:42 440320 ----a-w- c:\windows\system32\igfxrell.lrc
2012-12-14 01:42 . 2012-12-14 01:42 437760 ----a-w- c:\windows\system32\igfxrptb.lrc
2012-12-14 01:42 . 2012-12-14 01:42 437248 ----a-w- c:\windows\system32\igfxrtha.lrc
2012-12-14 01:42 . 2012-12-14 01:42 435712 ----a-w- c:\windows\system32\igfxrheb.lrc
2012-12-14 01:42 . 2012-12-14 01:42 435712 ----a-w- c:\windows\system32\igfxrara.lrc
2012-12-14 01:42 . 2012-12-14 01:42 431104 ----a-w- c:\windows\system32\igfxrkor.lrc
2012-12-14 01:42 . 2012-12-14 01:42 429056 ----a-w- c:\windows\system32\igfxrcht.lrc
2012-12-14 01:42 . 2012-12-14 01:42 330752 ----a-w- c:\windows\SysWow64\igfxdv32.dll
2012-12-14 01:42 . 2012-12-14 01:42 28672 ----a-w- c:\windows\system32\igfxexps.dll
2012-12-14 01:42 . 2012-12-14 01:42 11174912 ----a-w- c:\windows\SysWow64\igd10umd32.dll
2012-12-14 01:42 . 2011-06-16 12:03 64000 ----a-w- c:\windows\system32\igfxsrvc.dll
2012-12-14 01:42 . 2011-06-16 12:03 110592 ----a-w- c:\windows\system32\hccutils.dll
2012-12-14 01:42 . 2012-12-14 01:42 640512 ----a-w- c:\windows\SysWow64\igfxcmrt32.dll
2012-12-14 01:42 . 2012-12-14 01:42 512112 ----a-w- c:\windows\system32\igfxsrvc.exe
2012-12-14 01:42 . 2012-12-14 01:42 438784 ----a-w- c:\windows\system32\igfxrnld.lrc
2012-12-14 01:42 . 2012-12-14 01:42 438784 ----a-w- c:\windows\system32\igfxrdeu.lrc
2012-12-14 01:42 . 2012-12-14 01:42 3121152 ----a-w- c:\windows\SysWow64\igfxcmjit32.dll
2012-12-14 01:42 . 2012-12-14 01:42 255088 ----a-w- c:\windows\system32\igfxext.exe
2012-12-14 01:42 . 2012-12-14 01:42 13030400 ----a-w- c:\windows\system32\ig4icd64.dll
2012-12-14 01:42 . 2012-12-14 01:42 483840 ----a-w- c:\windows\system32\igfx11cmrt64.dll
2012-12-14 01:42 . 2012-12-14 01:42 439808 ----a-w- c:\windows\system32\igfxresn.lrc
2012-12-14 01:42 . 2012-12-14 01:42 437760 ----a-w- c:\windows\system32\igfxrtrk.lrc
2012-12-14 01:42 . 2012-12-14 01:42 428544 ----a-w- c:\windows\system32\igfxrchs.lrc
2012-12-14 01:42 . 2011-06-16 12:03 9007616 ----a-w- c:\windows\system32\igfxress.dll
2012-12-14 01:42 . 2011-06-16 12:03 12858368 ----a-w- c:\windows\system32\igd10umd64.dll
2012-12-14 01:42 . 2012-12-14 01:42 80384 ----a-w- c:\windows\system32\igdde64.dll
2012-12-14 01:42 . 2012-12-14 01:42 459264 ----a-w- c:\windows\SysWow64\igfx11cmrt32.dll
2012-12-14 01:42 . 2012-12-14 01:42 439296 ----a-w- c:\windows\system32\igfxrrus.lrc
2012-12-14 01:42 . 2012-12-14 01:42 438784 ----a-w- c:\windows\system32\igfxrptg.lrc
2012-12-14 01:42 . 2012-12-14 01:42 286208 ----a-w- c:\windows\system32\igfxrenu.lrc
2012-12-14 01:42 . 2012-12-14 01:42 142336 ----a-w- c:\windows\system32\igfxdo.dll
2012-12-14 01:42 . 2011-08-31 17:47 11049472 ----a-w- c:\windows\SysWow64\igdumd32.dll
2012-12-14 01:42 . 2012-12-14 01:42 5353888 ----a-w- c:\windows\system32\drivers\igdkmd64.sys
2012-12-14 01:42 . 2012-12-14 01:42 439296 ----a-w- c:\windows\system32\igfxrrom.lrc
2012-12-14 01:42 . 2012-12-14 01:42 438272 ----a-w- c:\windows\system32\igfxrcsy.lrc
2012-12-14 01:42 . 2012-12-14 01:42 25088 ----a-w- c:\windows\SysWow64\igfxexps32.dll
2012-12-14 01:42 . 2012-12-14 01:42 185968 ----a-w- c:\windows\system32\difx64.exe
2012-12-14 01:42 . 2012-12-14 01:42 518656 ----a-w- c:\windows\system32\igfxcmrt64.dll
2012-12-14 01:42 . 2012-12-14 01:42 438272 ----a-w- c:\windows\system32\igfxrfin.lrc
2012-12-14 01:42 . 2012-12-14 01:42 437760 ----a-w- c:\windows\system32\igfxrsve.lrc
2012-12-14 01:42 . 2012-12-14 01:42 432128 ----a-w- c:\windows\system32\igfxrjpn.lrc
2012-12-14 01:42 . 2012-12-14 01:42 116224 ----a-w- c:\windows\system32\igfxCoIn_v2932.dll
2012-12-14 01:42 . 2012-12-14 01:42 10812416 ----a-w- c:\windows\SysWow64\ig4icd32.dll
2012-12-14 01:42 . 2012-12-14 01:42 442880 ----a-w- c:\windows\system32\igfxdev.dll
2012-12-14 01:42 . 2012-12-14 01:42 438784 ----a-w- c:\windows\system32\igfxrita.lrc
2012-12-14 01:42 . 2012-12-14 01:42 438272 ----a-w- c:\windows\system32\igfxrhun.lrc
2012-12-14 01:42 . 2012-12-14 01:42 437248 ----a-w- c:\windows\system32\igfxrdan.lrc
2012-12-14 01:42 . 2012-12-14 01:42 126976 ----a-w- c:\windows\system32\igfxcpl.cpl
2012-12-14 01:42 . 2012-12-14 01:42 441968 ----a-w- c:\windows\system32\igfxpers.exe
2012-12-14 01:42 . 2012-12-14 01:42 439808 ----a-w- c:\windows\system32\igfxrfra.lrc
2012-12-14 01:42 . 2012-12-14 01:42 410112 ----a-w- c:\windows\system32\igfxTMM.dll
2012-12-14 01:42 . 2012-12-14 01:42 172144 ----a-w- c:\windows\system32\igfxtray.exe
2012-12-14 01:42 . 2012-12-14 01:42 5906032 ----a-w- c:\windows\system32\GfxUI.exe
2012-12-14 01:42 . 2012-12-14 01:42 438784 ----a-w- c:\windows\system32\igfxrsky.lrc
2012-12-14 01:42 . 2012-12-14 01:42 438784 ----a-w- c:\windows\system32\igfxrplk.lrc
2012-12-14 01:42 . 2012-12-14 01:42 438784 ----a-w- c:\windows\system32\igfxrhrv.lrc
2012-12-14 01:42 . 2012-12-14 01:42 3511296 ----a-w- c:\windows\system32\igfxcmjit64.dll
2012-12-14 01:42 . 2012-12-14 01:42 175104 ----a-w- c:\windows\system32\gfxSrvc.dll
2012-12-14 01:42 . 2012-12-14 01:42 437760 ----a-w- c:\windows\system32\igfxrslv.lrc
2012-12-14 01:42 . 2012-12-14 01:42 399984 ----a-w- c:\windows\system32\hkcmd.exe
2012-12-14 01:42 . 2012-12-14 01:42 277616 ----a-w- c:\windows\SysWow64\IntelCpHeciSvc.exe
2012-12-07 13:20 . 2013-01-09 12:02 441856 ----a-w- c:\windows\system32\Wpc.dll
2012-12-07 13:15 . 2013-01-09 12:02 2746368 ----a-w- c:\windows\system32\gameux.dll
2012-12-07 12:26 . 2013-01-09 12:02 308736 ----a-w- c:\windows\SysWow64\Wpc.dll
2012-12-07 12:20 . 2013-01-09 12:02 2576384 ----a-w- c:\windows\SysWow64\gameux.dll
2012-12-07 11:20 . 2013-01-09 12:02 30720 ----a-w- c:\windows\system32\usk.rs
2012-12-07 11:20 . 2013-01-09 12:02 43520 ----a-w- c:\windows\system32\csrr.rs
2012-12-07 11:20 . 2013-01-09 12:02 23552 ----a-w- c:\windows\system32\oflc.rs
2012-12-07 11:20 . 2013-01-09 12:02 45568 ----a-w- c:\windows\system32\oflc-nz.rs
2012-12-07 11:20 . 2013-01-09 12:02 44544 ----a-w- c:\windows\system32\pegibbfc.rs
2012-12-07 11:20 . 2013-01-09 12:02 20480 ----a-w- c:\windows\system32\pegi-fi.rs
2012-12-07 11:20 . 2013-01-09 12:02 20480 ----a-w- c:\windows\system32\pegi-pt.rs
2012-12-07 11:19 . 2013-01-09 12:02 20480 ----a-w- c:\windows\system32\pegi.rs
2012-12-07 11:19 . 2013-01-09 12:02 46592 ----a-w- c:\windows\system32\fpb.rs
2012-12-07 11:19 . 2013-01-09 12:02 40960 ----a-w- c:\windows\system32\cob-au.rs
2012-12-07 11:19 . 2013-01-09 12:02 21504 ----a-w- c:\windows\system32\grb.rs
2012-12-07 11:19 . 2013-01-09 12:02 15360 ----a-w- c:\windows\system32\djctq.rs
2012-12-07 11:19 . 2013-01-09 12:02 55296 ----a-w- c:\windows\system32\cero.rs
2012-12-07 11:19 . 2013-01-09 12:02 51712 ----a-w- c:\windows\system32\esrb.rs
2012-12-07 10:46 . 2013-01-09 12:02 43520 ----a-w- c:\windows\SysWow64\csrr.rs
2012-12-07 10:46 . 2013-01-09 12:02 30720 ----a-w- c:\windows\SysWow64\usk.rs
2012-12-07 10:46 . 2013-01-09 12:02 45568 ----a-w- c:\windows\SysWow64\oflc-nz.rs
.
.
(((((((((((((((((((((((((((((((((( Spouštěcí body v registru )))))))))))))))))))))))))))))))))))))))))))))
.
.
*Poznámka* prázdné záznamy a legitimní výchozí údaje nejsou zobrazeny.
REGEDIT4
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Sony PC Companion"="c:\program files (x86)\Sony\Sony PC Companion\PCCompanion.exe" [2013-01-07 446648]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]
"IMSS"="c:\program files (x86)\Intel\Intel(R) Management Engine Components\IMSS\PIconStartup.exe" [2011-01-17 112152]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorAdmin"= 5 (0x5)
"ConsentPromptBehaviorUser"= 3 (0x3)
"EnableUIADesktopToggle"= 0 (0x0)
.
R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2012-04-30 123816]
R2 SkypeUpdate;Skype Updater;c:\program files (x86)\Skype\Updater\Updater.exe [2013-01-08 161536]
R3 dmvsc;dmvsc;c:\windows\system32\drivers\dmvsc.sys [2010-11-21 71168]
R3 ggflt;SEMC USB Flash Driver Filter;c:\windows\system32\DRIVERS\ggflt.sys [2012-12-29 14448]
R3 IFCoEMP;IFCoEMP;c:\windows\system32\drivers\ifM52x64.sys [2010-08-13 339728]
R3 IFCoEVB;IFCoEVB;c:\windows\system32\drivers\ifP52X64.sys [2010-08-13 65808]
R3 Impcd;Impcd;c:\windows\system32\drivers\Impcd.sys [2010-02-26 158976]
R3 RdpVideoMiniport;Remote Desktop Video Miniport Driver;c:\windows\system32\drivers\rdpvideominiport.sys [2012-08-23 19456]
R3 RHDISK_AMD64;RHDISK_AMD64;g:\_rohos\RHDISK_AMD64.SYS [2009-07-24 31408]
R3 RTL8192su;Realtek RTL8192SU Wireless LAN 802.11n USB 2.0 Network Adapter;c:\windows\system32\DRIVERS\RTL8192su.sys [x]
R3 Sony PC Companion;Sony PC Companion;c:\program files (x86)\Sony\Sony PC Companion\PCCService.exe [2012-01-18 155320]
R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys [2012-08-23 57856]
R3 TsUsbGD;Remote Desktop Generic USB Device;c:\windows\system32\drivers\TsUsbGD.sys [2012-08-23 30208]
R3 WatAdminSvc;Služba Technologie aktivace Windows;c:\windows\system32\Wat\WatAdminSvc.exe [2011-08-02 1255736]
S1 ehdrv;ehdrv;c:\windows\system32\DRIVERS\ehdrv.sys [2010-12-21 141264]
S1 VBoxDrv;VirtualBox Service;c:\windows\system32\DRIVERS\VBoxDrv.sys [2012-08-20 224088]
S1 VBoxUSBMon;VirtualBox USB Monitor Driver;c:\windows\system32\DRIVERS\VBoxUSBMon.sys [2012-08-20 130904]
S2 eamonm;eamonm;c:\windows\system32\DRIVERS\eamonm.sys [2010-12-21 170640]
S2 ekrn;ESET Service;c:\program files\ESET\ESET NOD32 Antivirus\x86\ekrn.exe [2011-01-12 810144]
S2 epfwwfpr;epfwwfpr;c:\windows\system32\DRIVERS\epfwwfpr.sys [2010-12-21 125296]
S2 HP Support Assistant Service;HP Support Assistant Service;c:\program files (x86)\Hewlett-Packard\HP Support Framework\hpsa_service.exe [2012-09-27 86528]
S2 Intel(R) PROSet Monitoring Service;Intel(R) PROSet Monitoring Service;c:\windows\system32\IProsetMonitor.exe [2010-09-22 165032]
S2 MBAMService;MBAMService;c:\program files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe [2012-12-14 682344]
S2 pdfcDispatcher;PDF Document Manager;c:\program files (x86)\PDF Complete\pdfsvc.exe [2010-10-22 1121304]
S2 TomTomHOMEService;TomTomHOMEService;c:\program files (x86)\TomTom HOME 2\TomTomHOMEService.exe [2012-07-26 92632]
S2 UNS;Intel(R) Management and Security Application User Notification Service;c:\program files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe [2011-01-17 2656280]
S2 VMUSBArbService;VMware USB Arbitration Service;c:\program files (x86)\Common Files\VMware\USB\vmware-usbarbitrator.exe [2011-06-01 609904]
S3 IntcDAud;Intel(R) Display Audio;c:\windows\system32\DRIVERS\IntcDAud.sys [2010-10-15 317440]
S3 MBAMProtector;MBAMProtector;c:\windows\system32\drivers\mbam.sys [2012-12-14 24176]
.
.
Obsah adresáře 'Naplánované úlohy'
.
2013-02-25 c:\windows\Tasks\Adobe Flash Player Updater.job
- c:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2012-03-30 14:40]
.
2013-02-23 c:\windows\Tasks\HPCeeScheduleForHonza.job
- c:\program files (x86)\Hewlett-Packard\HP Ceement\HPCEE.exe [2010-09-14 05:15]
.
2013-02-04 c:\windows\Tasks\HPCeeScheduleForPRODEJNA$.job
- c:\program files (x86)\Hewlett-Packard\HP Ceement\HPCEE.exe [2010-09-14 05:15]
.
.
--------- X64 Entries -----------
.
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"RtHDVCpl"="c:\program files\Realtek\Audio\HDA\RAVCpl64.exe" [2010-11-30 11660904]
"egui"="c:\program files\ESET\ESET NOD32 Antivirus\egui.exe" [2011-01-12 2918656]
"IgfxTray"="c:\windows\system32\igfxtray.exe" [2012-12-14 172144]
"HotKeysCmds"="c:\windows\system32\hkcmd.exe" [2012-12-14 399984]
"Persistence"="c:\windows\system32\igfxpers.exe" [2012-12-14 441968]
.
------- Doplňkový sken -------
.
uLocal Page = c:\windows\system32\blank.htm
mLocal Page = c:\windows\SysWOW64\blank.htm
TCP: Interfaces\{02F6BBF1-4246-4004-BA5E-F8F7890E9253}: NameServer = 212.96.167.18,89.190.50.18
DPF: {45830FF9-D9E6-4F41-86ED-B266933D8E90} - hxxp://10.100.53.14/RtspVaPgDec.cab
DPF: {D67DB088-70B4-4006-B052-57F614FD3AA8} - hxxp://www.vguard.net/myasp/chtIEx.cab
FF - ProfilePath - c:\users\Honza\AppData\Roaming\Mozilla\Firefox\Profiles\k0bxvvk9.default\
FF - prefs.js: browser.startup.homepage - hxxp://www.google.cz/
.
- - - - NEPLATNÉ POLOŽKY ODSTRANĚNÉ Z REGISTRU - - - -
.
AddRemove-{EE202411-2C26-49E8-9784-1BC1DBF7DE96} - c:\program files (x86)\InstallShield Installation Information\{EE202411-2C26-49E8-9784-1BC1DBF7DE96}\setup.exe
.
.
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\pdfcDispatcher]
"ImagePath"="c:\program files (x86)\PDF Complete\pdfsvc.exe /startedbyscm:66B66708-40E2BE4D-pdfcService"
.
--------------------- ZAMKNUTÉ KLÍČE V REGISTRU ---------------------
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil64_11_5_502_149_ActiveX.exe,-101"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\Elevation]
"Enabled"=dword:00000001
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\LocalServer32]
@="c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil64_11_5_502_149_ActiveX.exe"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="IFlashBroker5"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\PCW\Security]
@Denied: (Full) (Everyone)
.
------------------------ Jiné spuštené procesy ------------------------
.
c:\program files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
c:\program files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe
c:\program files (x86)\Common Files\Protexis\License Service\PsiService_2.exe
c:\program files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe
c:\program files (x86)\Google\Update\GoogleUpdate.exe
c:\program files (x86)\Sony\Sony PC Companion\PCCompanionInfo.exe
c:\program files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
c:\program files (x86)\Common Files\InterVideo\RegMgr\iviRegMgr.exe
.
**************************************************************************
.
Celkový čas: 2013-02-25 13:21:55 - počítač byl restartován
ComboFix-quarantined-files.txt 2013-02-25 12:21
ComboFix2.txt 2013-02-25 11:31
.
Před spuštěním: Volných bajtů: 163 224 195 072
Po spuštění: Volných bajtů: 162 914 627 584
.
- - End Of File - - E66437D679C321ADE284638CAF35F750

#15 Příspěvek od **Rudy** » 25 úno 2013 17:12

Log již vypadá čistý.

VIRY.CZ

Prosim o preventivku + kontrola flashky

Prosim o preventivku + kontrola flashky

Re: Prosim o preventivku + kontrola flashky

Re: Prosim o preventivku + kontrola flashky

Re: Prosim o preventivku + kontrola flashky

Re: Prosim o preventivku + kontrola flashky

Re: Prosim o preventivku + kontrola flashky

Re: Prosim o preventivku + kontrola flashky

Re: Prosim o preventivku + kontrola flashky

Re: Prosim o preventivku + kontrola flashky

Re: Prosim o preventivku + kontrola flashky

Re: Prosim o preventivku + kontrola flashky

Re: Prosim o preventivku + kontrola flashky

Re: Prosim o preventivku + kontrola flashky

Re: Prosim o preventivku + kontrola flashky

Re: Prosim o preventivku + kontrola flashky