musela jsem po vypsání logu ještě restartovat, ale zdá se, že už to jede..
ComboFix 13-03-21.02 - Daniela 23.03.2013 15:07:07.2.4 - x64
Microsoft Windows 7 Professional N 6.1.7601.1.1250.420.1029.18.3962.2666 [GMT 1:00]
Spuštěný z: c:\users\Daniela\Desktop\ComboFix.exe
AV: avast! Antivirus *Disabled/Updated* {2B2D1395-420B-D5C9-657E-930FE358FC3C}
SP: avast! Antivirus *Disabled/Updated* {904CF271-6431-DA47-5FCE-A87D98DFB681}
SP: Windows Defender *Enabled/Outdated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.
.
((((((((((((((((((((((((( Soubory vytvořené od 2013-02-23 do 2013-03-23 )))))))))))))))))))))))))))))))
.
.
2013-03-23 14:09 . 2013-03-23 14:09 -------- d-----w- c:\users\Default\AppData\Local\temp
2013-03-23 13:39 . 2013-03-23 13:39 -------- d-----w- C:\_OTL
2013-03-23 12:02 . 2013-03-23 12:57 512 ----a-w- C:\PhysicalMBR.bin
2013-03-23 11:54 . 2013-03-23 11:54 121 ----a-w- c:\windows\DeleteOnReboot.bat
2013-03-23 11:23 . 2013-03-23 11:23 -------- d-----w- c:\program files\trend micro
2013-03-23 11:23 . 2013-03-23 11:23 -------- d-----w- C:\rsit
2013-03-22 10:30 . 2013-03-22 10:30 -------- d-----w- c:\users\Daniela\AppData\Roaming\PCDr
2013-03-22 10:30 . 2013-03-22 10:33 -------- d-----w- C:\temp
2013-03-21 22:30 . 2013-03-23 04:03 -------- d-----w- c:\program files\uTorrent
2013-03-18 21:29 . 2013-02-12 04:12 19968 ----a-w- c:\windows\system32\drivers\usb8023.sys
2013-03-18 20:01 . 2013-03-18 20:05 -------- d-----w- c:\users\Daniela\AppData\Roaming\PSpad
2013-03-18 20:01 . 2013-03-18 20:01 -------- d-----w- c:\program files (x86)\PSPad editor
2013-03-18 19:58 . 2013-03-18 19:59 -------- d-----w- C:\ready to install
2013-03-18 12:47 . 2013-03-18 12:47 -------- d-----w- c:\users\Daniela\AppData\Local\Skyrim
2013-03-17 23:37 . 2013-03-17 23:37 -------- d-----w- c:\program files (x86)\IObit
2013-03-17 22:49 . 2013-03-17 22:49 -------- d-----w- c:\program files (x86)\Foxit Software
2013-03-16 23:07 . 2013-03-16 23:33 -------- d-----w- c:\program files\Recuva
2013-03-16 21:02 . 2013-03-16 21:02 -------- d-----w- c:\program files (x86)\7-Zip
2013-03-16 17:06 . 2013-03-16 17:06 -------- d-----w- c:\users\Daniela\AppData\Local\Sony
2013-03-15 18:01 . 2013-03-15 18:01 -------- d-----w- c:\programdata\Sony
2013-03-15 18:01 . 2013-03-15 18:01 -------- d-----w- c:\program files (x86)\Sony
2013-03-15 17:41 . 2008-01-09 11:28 34032 ----a-w- c:\windows\system32\drivers\seehcri.sys
2013-03-15 17:40 . 2013-03-15 17:40 -------- d-----w- c:\programdata\Avanquest
2013-03-15 17:40 . 2013-03-15 17:40 -------- d-----w- c:\program files (x86)\Avanquest update
2013-03-15 17:35 . 2013-03-15 17:35 -------- d-----w- c:\users\Daniela\AppData\Local\Sony Ericsson
2013-03-15 17:35 . 2013-03-15 17:35 -------- d-----w- c:\programdata\BVRP Software
2013-03-15 17:26 . 2013-03-15 17:26 -------- d-----w- c:\programdata\Sony Ericsson
2013-03-15 17:07 . 2013-03-15 17:07 143360 ----a-w- c:\program files (x86)\Internet Explorer\Plugins\npqtplugin7.dll
2013-03-15 17:07 . 2013-03-15 17:07 143360 ----a-w- c:\program files (x86)\Internet Explorer\Plugins\npqtplugin6.dll
2013-03-15 17:07 . 2013-03-15 17:07 143360 ----a-w- c:\program files (x86)\Internet Explorer\Plugins\npqtplugin5.dll
2013-03-15 17:07 . 2013-03-15 17:07 143360 ----a-w- c:\program files (x86)\Internet Explorer\Plugins\npqtplugin4.dll
2013-03-15 17:07 . 2013-03-15 17:07 143360 ----a-w- c:\program files (x86)\Internet Explorer\Plugins\npqtplugin3.dll
2013-03-15 17:07 . 2013-03-15 17:07 143360 ----a-w- c:\program files (x86)\Internet Explorer\Plugins\npqtplugin2.dll
2013-03-15 17:07 . 2013-03-15 17:07 143360 ----a-w- c:\program files (x86)\Internet Explorer\Plugins\npqtplugin.dll
2013-03-15 17:07 . 2013-03-15 17:07 -------- d-----w- c:\program files (x86)\Common Files\Apple
2013-03-15 17:07 . 2013-03-15 17:07 -------- d-----w- c:\programdata\Apple Computer
2013-03-15 17:06 . 2013-03-15 17:06 -------- d-----w- c:\users\Daniela\AppData\Local\Apple
2013-03-15 17:06 . 2013-03-15 17:06 -------- d-----w- c:\programdata\Apple
2013-03-15 17:06 . 2013-03-15 17:06 -------- d-----w- c:\program files (x86)\Apple Software Update
2013-03-15 17:04 . 2013-03-15 17:04 -------- d-----w- c:\users\Daniela\AppData\Roaming\Sony
2013-03-13 21:07 . 2013-03-06 23:33 65336 ----a-w- c:\windows\system32\drivers\aswRvrt.sys
2013-03-13 21:07 . 2013-03-06 23:33 178624 ----a-w- c:\windows\system32\drivers\aswVmm.sys
2013-03-05 18:54 . 2013-03-05 18:54 -------- d-----w- c:\program files (x86)\Common Files\Java
2013-03-05 18:54 . 2013-03-05 18:53 861088 ----a-w- c:\windows\SysWow64\npDeployJava1.dll
2013-03-05 18:53 . 2013-03-05 18:53 95648 ----a-w- c:\windows\SysWow64\WindowsAccessBridge-32.dll
2013-03-02 23:41 . 2013-03-03 19:16 -------- d-----w- c:\windows\SysWow64\Macromed
2013-03-02 23:41 . 2013-03-02 23:41 -------- d-----w- c:\windows\SysWow64\Adobe
2013-03-01 01:11 . 2013-03-23 03:15 -------- d-----w- c:\users\Daniela\AppData\Local\Diagnostics
2013-02-28 20:11 . 2013-03-14 20:13 -------- d-----w- c:\windows\rescache
2013-02-26 02:36 . 2013-02-26 02:36 224256 ----a-w- c:\programdata\Microsoft\Media Tools\MediaIconsOverlays.dll
2013-02-24 20:41 . 2013-03-23 04:05 -------- d-----w- c:\users\Daniela\AppData\Roaming\uTorrent
2013-02-22 16:07 . 2013-02-22 16:07 -------- d-----w- c:\users\Daniela\AppData\Local\CrashDumps
2013-02-22 15:37 . 2013-02-08 00:28 9162192 ----a-w- c:\programdata\Microsoft\Windows Defender\Definition Updates\{185DDF23-C755-412B-9C80-AB94127696F8}\mpengine.dll
2013-02-22 02:09 . 2012-07-26 07:40 2560 ----a-w- c:\windows\system32\drivers\cs-CZ\wdf01000.sys.mui
2013-02-22 02:09 . 2012-07-26 04:55 785512 ----a-w- c:\windows\system32\drivers\Wdf01000.sys
2013-02-22 02:09 . 2012-07-26 04:55 54376 ----a-w- c:\windows\system32\drivers\WdfLdr.sys
2013-02-22 02:09 . 2012-07-26 02:36 9728 ----a-w- c:\windows\system32\Wdfres.dll
2013-02-22 02:07 . 2013-02-22 02:07 -------- d-----w- c:\users\Default\AppData\Local\Microsoft Help
.
.
.
(((((((((((((((((((((((((((((((((((((((( Find3M výpis ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2013-03-14 00:38 . 2013-02-19 14:59 72013344 ----a-w- c:\windows\system32\MRT.exe
2013-03-06 23:33 . 2013-02-18 22:02 70992 ----a-w- c:\windows\system32\drivers\aswRdr2.sys
2013-03-06 23:33 . 2013-02-18 22:02 377920 ----a-w- c:\windows\system32\drivers\aswSP.sys
2013-03-06 23:33 . 2013-02-18 22:02 68920 ----a-w- c:\windows\system32\drivers\aswTdi.sys
2013-03-06 23:33 . 2013-02-18 22:02 1025808 ----a-w- c:\windows\system32\drivers\aswSnx.sys
2013-03-06 23:33 . 2013-02-18 22:02 33400 ----a-w- c:\windows\system32\drivers\aswFsBlk.sys
2013-03-06 23:33 . 2013-02-18 22:02 80816 ----a-w- c:\windows\system32\drivers\aswMonFlt.sys
2013-03-06 23:32 . 2013-02-18 22:02 41664 ----a-w- c:\windows\avastSS.scr
2013-03-06 23:32 . 2013-02-18 22:02 287840 ----a-w- c:\windows\system32\aswBoot.exe
2013-02-19 18:48 . 2013-02-19 18:22 925184 ----a-w- c:\windows\expstart.exe
2013-02-19 14:53 . 2013-02-19 14:53 91648 ----a-w- c:\windows\system32\SetIEInstalledDate.exe
2013-02-19 14:53 . 2013-02-19 14:53 89088 ----a-w- c:\windows\system32\RegisterIEPKEYs.exe
2013-02-19 14:53 . 2013-02-19 14:53 89088 ----a-w- c:\windows\system32\ie4uinit.exe
2013-02-19 14:53 . 2013-02-19 14:53 86528 ----a-w- c:\windows\SysWow64\iesysprep.dll
2013-02-19 14:53 . 2013-02-19 14:53 85504 ----a-w- c:\windows\system32\iesetup.dll
2013-02-19 14:53 . 2013-02-19 14:53 82432 ----a-w- c:\windows\system32\icardie.dll
2013-02-19 14:53 . 2013-02-19 14:53 76800 ----a-w- c:\windows\SysWow64\SetIEInstalledDate.exe
2013-02-19 14:53 . 2013-02-19 14:53 76800 ----a-w- c:\windows\system32\tdc.ocx
2013-02-19 14:53 . 2013-02-19 14:53 74752 ----a-w- c:\windows\SysWow64\RegisterIEPKEYs.exe
2013-02-19 14:53 . 2013-02-19 14:53 74752 ----a-w- c:\windows\SysWow64\iesetup.dll
2013-02-19 14:53 . 2013-02-19 14:53 65024 ----a-w- c:\windows\system32\pngfilt.dll
2013-02-19 14:53 . 2013-02-19 14:53 63488 ----a-w- c:\windows\SysWow64\tdc.ocx
2013-02-19 14:53 . 2013-02-19 14:53 55296 ----a-w- c:\windows\system32\msfeedsbs.dll
2013-02-19 14:53 . 2013-02-19 14:53 534528 ----a-w- c:\windows\system32\ieapfltr.dll
2013-02-19 14:53 . 2013-02-19 14:53 49664 ----a-w- c:\windows\system32\imgutil.dll
2013-02-19 14:53 . 2013-02-19 14:53 48640 ----a-w- c:\windows\SysWow64\mshtmler.dll
2013-02-19 14:53 . 2013-02-19 14:53 48640 ----a-w- c:\windows\system32\mshtmler.dll
2013-02-19 14:53 . 2013-02-19 14:53 452608 ----a-w- c:\windows\system32\dxtmsft.dll
2013-02-19 14:53 . 2013-02-19 14:53 448512 ----a-w- c:\windows\system32\html.iec
2013-02-19 14:53 . 2013-02-19 14:53 403248 ----a-w- c:\windows\system32\iedkcs32.dll
2013-02-19 14:53 . 2013-02-19 14:53 39936 ----a-w- c:\windows\system32\iernonce.dll
2013-02-19 14:53 . 2013-02-19 14:53 3695416 ----a-w- c:\windows\system32\ieapfltr.dat
2013-02-19 14:53 . 2013-02-19 14:53 367104 ----a-w- c:\windows\SysWow64\html.iec
2013-02-19 14:53 . 2013-02-19 14:53 35840 ----a-w- c:\windows\SysWow64\imgutil.dll
2013-02-19 14:53 . 2013-02-19 14:53 30720 ----a-w- c:\windows\system32\licmgr10.dll
2013-02-19 14:53 . 2013-02-19 14:53 282112 ----a-w- c:\windows\system32\dxtrans.dll
2013-02-19 14:53 . 2013-02-19 14:53 267776 ----a-w- c:\windows\system32\ieaksie.dll
2013-02-19 14:53 . 2013-02-19 14:53 249344 ----a-w- c:\windows\system32\webcheck.dll
2013-02-19 14:53 . 2013-02-19 14:53 23552 ----a-w- c:\windows\SysWow64\licmgr10.dll
2013-02-19 14:53 . 2013-02-19 14:53 222208 ----a-w- c:\windows\system32\msls31.dll
2013-02-19 14:53 . 2013-02-19 14:53 197120 ----a-w- c:\windows\system32\msrating.dll
2013-02-19 14:53 . 2013-02-19 14:53 165888 ----a-w- c:\windows\system32\iexpress.exe
2013-02-19 14:53 . 2013-02-19 14:53 163840 ----a-w- c:\windows\system32\ieakui.dll
2013-02-19 14:53 . 2013-02-19 14:53 161792 ----a-w- c:\windows\SysWow64\msls31.dll
2013-02-19 14:53 . 2013-02-19 14:53 160256 ----a-w- c:\windows\system32\wextract.exe
2013-02-19 14:53 . 2013-02-19 14:53 160256 ----a-w- c:\windows\system32\ieakeng.dll
2013-02-19 14:53 . 2013-02-19 14:53 152064 ----a-w- c:\windows\SysWow64\wextract.exe
2013-02-19 14:53 . 2013-02-19 14:53 150528 ----a-w- c:\windows\SysWow64\iexpress.exe
2013-02-19 14:53 . 2013-02-19 14:53 149504 ----a-w- c:\windows\system32\occache.dll
2013-02-19 14:53 . 2013-02-19 14:53 145920 ----a-w- c:\windows\system32\iepeers.dll
2013-02-19 14:53 . 2013-02-19 14:53 135168 ----a-w- c:\windows\system32\IEAdvpack.dll
2013-02-19 14:53 . 2013-02-19 14:53 12288 ----a-w- c:\windows\system32\mshta.exe
2013-02-19 14:53 . 2013-02-19 14:53 11776 ----a-w- c:\windows\SysWow64\mshta.exe
2013-02-19 14:53 . 2013-02-19 14:53 114176 ----a-w- c:\windows\system32\admparse.dll
2013-02-19 14:53 . 2013-02-19 14:53 111616 ----a-w- c:\windows\system32\iesysprep.dll
2013-02-19 14:53 . 2013-02-19 14:53 110592 ----a-w- c:\windows\SysWow64\IEAdvpack.dll
2013-02-19 14:53 . 2013-02-19 14:53 10752 ----a-w- c:\windows\system32\msfeedssync.exe
2013-02-19 14:53 . 2013-02-19 14:53 103936 ----a-w- c:\windows\system32\inseng.dll
2013-02-19 14:53 . 2013-02-19 14:53 101888 ----a-w- c:\windows\SysWow64\admparse.dll
2013-02-12 05:45 . 2013-03-13 13:04 135168 ----a-w- c:\windows\apppatch\AppPatch64\AcXtrnal.dll
2013-02-12 05:45 . 2013-03-13 13:04 350208 ----a-w- c:\windows\apppatch\AppPatch64\AcLayers.dll
2013-02-12 05:45 . 2013-03-13 13:04 308736 ----a-w- c:\windows\apppatch\AppPatch64\AcGenral.dll
2013-02-12 05:45 . 2013-03-13 13:04 111104 ----a-w- c:\windows\apppatch\AppPatch64\acspecfc.dll
2013-02-12 04:48 . 2013-03-13 13:04 474112 ----a-w- c:\windows\apppatch\AcSpecfc.dll
2013-02-12 04:48 . 2013-03-13 13:04 2176512 ----a-w- c:\windows\apppatch\AcGenral.dll
2013-01-31 13:28 . 2013-01-31 13:28 773968 ----a-w- c:\windows\SysWow64\msvcr100.dll
2013-01-31 13:28 . 2013-01-31 13:28 421200 ----a-w- c:\windows\SysWow64\msvcp100.dll
2013-01-17 00:28 . 2010-11-21 03:27 273840 ------w- c:\windows\system32\MpSigStub.exe
2013-01-05 05:53 . 2013-02-19 13:36 5553512 ----a-w- c:\windows\system32\ntoskrnl.exe
2013-01-05 05:00 . 2013-02-19 13:36 3967848 ----a-w- c:\windows\SysWow64\ntkrnlpa.exe
2013-01-05 05:00 . 2013-02-19 13:36 3913064 ----a-w- c:\windows\SysWow64\ntoskrnl.exe
2013-01-04 05:46 . 2013-02-19 13:34 215040 ----a-w- c:\windows\system32\winsrv.dll
2013-01-04 04:51 . 2013-02-19 13:34 5120 ----a-w- c:\windows\SysWow64\wow32.dll
2013-01-04 04:43 . 2013-02-19 13:34 44032 ----a-w- c:\windows\apppatch\acwow64.dll
2013-01-04 03:26 . 2013-02-19 13:35 3153408 ----a-w- c:\windows\system32\win32k.sys
2013-01-04 02:47 . 2013-02-19 13:34 25600 ----a-w- c:\windows\SysWow64\setup16.exe
2013-01-04 02:47 . 2013-02-19 13:34 7680 ----a-w- c:\windows\SysWow64\instnm.exe
2013-01-04 02:47 . 2013-02-19 13:34 2048 ----a-w- c:\windows\SysWow64\user.exe
2013-01-04 02:47 . 2013-02-19 13:34 14336 ----a-w- c:\windows\SysWow64\ntvdm64.dll
2013-01-03 06:00 . 2013-02-19 13:33 1913192 ----a-w- c:\windows\system32\drivers\tcpip.sys
2013-01-03 06:00 . 2013-02-19 13:33 288088 ----a-w- c:\windows\system32\drivers\FWPKCLNT.SYS
.
.
(((((((((((((((((((((((((((((((((( Spouštěcí body v registru )))))))))))))))))))))))))))))))))))))))))))))
.
.
*Poznámka* prázdné záznamy a legitimní výchozí údaje nejsou zobrazeny.
REGEDIT4
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\0MediaIconsOerlay]
@="{1EC23CFF-4C58-458f-924C-8519AEF61B32}"
[HKEY_CLASSES_ROOT\CLSID\{1EC23CFF-4C58-458f-924C-8519AEF61B32}]
2013-02-26 02:36 224256 ----a-w- c:\programdata\Microsoft\Media Tools\MediaIconsOverlays.dll
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]
"IAStorIcon"="c:\program files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIconLaunch.exe" [2012-02-29 56088]
"avast"="c:\program files\AVAST Software\Avast\avastUI.exe" [2013-03-06 4767304]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorAdmin"= 5 (0x5)
"ConsentPromptBehaviorUser"= 3 (0x3)
"EnableUIADesktopToggle"= 0 (0x0)
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\drivers32]
"midi2"=wdmaud.drv
.
[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\session manager]
BootExecute REG_MULTI_SZ autocheck autochk *\0\0sdnclean64.exe
.
R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2010-03-18 138576]
R2 IAStorDataMgrSvc;Úložná technologie Intel(R) Rapid;c:\program files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe [2012-02-01 13592]
R3 aswVmm;aswVmm; [x]
R3 dmvsc;dmvsc;c:\windows\system32\drivers\dmvsc.sys [2010-11-21 71168]
R3 ose64;Office 64 Source Engine;c:\program files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2010-01-09 174440]
R3 s1018bus;Sony Ericsson Device 1018 driver (WDM);c:\windows\system32\DRIVERS\s1018bus.sys [2009-03-25 113704]
R3 s1018mdfl;Sony Ericsson Device 1018 USB WMC Modem Filter;c:\windows\system32\DRIVERS\s1018mdfl.sys [2009-03-25 19496]
R3 s1018mdm;Sony Ericsson Device 1018 USB WMC Modem Driver;c:\windows\system32\DRIVERS\s1018mdm.sys [2009-03-25 153128]
R3 s1018mgmt;Sony Ericsson Device 1018 USB WMC Device Management Drivers (WDM);c:\windows\system32\DRIVERS\s1018mgmt.sys [2009-03-25 133160]
R3 s1018nd5;Sony Ericsson Device 1018 USB Ethernet Emulation (NDIS);c:\windows\system32\DRIVERS\s1018nd5.sys [2009-03-25 34856]
R3 s1018obex;Sony Ericsson Device 1018 USB WMC OBEX Interface;c:\windows\system32\DRIVERS\s1018obex.sys [2009-03-25 128552]
R3 s1018unic;Sony Ericsson Device 1018 USB Ethernet Emulation (WDM);c:\windows\system32\DRIVERS\s1018unic.sys [2009-03-25 146472]
R3 Sony PC Companion;Sony PC Companion;c:\program files (x86)\Sony\Sony PC Companion\PCCService.exe [2013-02-04 155824]
R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys [2010-11-21 59392]
R3 TsUsbGD;Remote Desktop Generic USB Device;c:\windows\system32\drivers\TsUsbGD.sys [2010-11-21 31232]
R3 WatAdminSvc;Služba Technologie aktivace Windows;c:\windows\system32\Wat\WatAdminSvc.exe [2013-02-19 1255736]
R4 SkypeUpdate;Skype Updater;c:\program files (x86)\Skype\Updater\Updater.exe [2013-02-07 161384]
S0 aswRvrt;aswRvrt; [x]
S1 aswSnx;aswSnx; [x]
S1 aswSP;aswSP; [x]
S2 aswFsBlk;aswFsBlk; [x]
S2 aswMonFlt;aswMonFlt;c:\windows\system32\drivers\aswMonFlt.sys [2013-03-06 80816]
S2 AtherosSvc;AtherosSvc;c:\program files (x86)\Dell Wireless\Bluetooth Suite\adminservice.exe [2012-10-16 219776]
S2 ZAtheros Bt and Wlan Coex Agent;ZAtheros Bt and Wlan Coex Agent;c:\program files (x86)\Dell Wireless\Bluetooth Suite\Ath_CoexAgent.exe [2012-10-16 327296]
S2 ZAtheros Wlan Agent;ZAtheros Wlan Agent;c:\program files (x86)\Dell Wireless\Ath_WlanAgent.exe [2012-10-24 81536]
S3 AthBTPort;Atheros Virtual Bluetooth Class;c:\windows\system32\DRIVERS\btath_flt.sys [2012-10-16 36480]
S3 BTATH_A2DP;Bluetooth A2DP Audio Driver;c:\windows\system32\drivers\btath_a2dp.sys [2012-10-16 341120]
S3 btath_avdt;Atheros Bluetooth AVDT Service;c:\windows\system32\drivers\btath_avdt.sys [2012-10-16 111232]
S3 BTATH_BUS;Atheros Bluetooth Bus;c:\windows\system32\DRIVERS\btath_bus.sys [2012-10-16 30848]
S3 BTATH_HCRP;Bluetooth HCRP Server driver;c:\windows\system32\DRIVERS\btath_hcrp.sys [2012-10-16 168064]
S3 BTATH_LWFLT;Bluetooth LWFLT Device;c:\windows\system32\DRIVERS\btath_lwflt.sys [2012-10-16 68736]
S3 BTATH_RCP;Bluetooth AVRCP Device;c:\windows\system32\DRIVERS\btath_rcp.sys [2012-10-16 281728]
S3 BtFilter;BtFilter;c:\windows\system32\DRIVERS\btfilter.sys [2012-10-16 551040]
S3 L1C;NDIS Miniport Driver for Atheros AR81xx PCI-E Ethernet Controller;c:\windows\system32\DRIVERS\L1C62x64.sys [2011-12-23 104048]
S3 seehcri;Sony Ericsson seehcri Device Driver;c:\windows\system32\DRIVERS\seehcri.sys [2008-01-09 34032]
S3 SmbDrvIntel;SmbDrvIntel;c:\windows\system32\DRIVERS\Smb_driver_Intel.sys [2012-04-08 27408]
.
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\active setup\installed components\{8A69D345-D564-463c-AFF1-A69D9E530F96}]
2013-03-14 19:28 1629648 ----a-w- c:\program files (x86)\Google\Chrome\Application\25.0.1364.172\Installer\chrmstp.exe
.
.
--------- X64 Entries -----------
.
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\00avast]
@="{472083B0-C522-11CF-8763-00608CC02F24}"
[HKEY_CLASSES_ROOT\CLSID\{472083B0-C522-11CF-8763-00608CC02F24}]
2013-03-06 23:32 133840 ----a-w- c:\program files\AVAST Software\Avast\ashShA64.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\GDriveBlacklistedOverlay]
@="{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D42}"
[HKEY_CLASSES_ROOT\CLSID\{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D42}]
2012-12-17 18:50 755816 ----a-w- c:\program files (x86)\Google\Drive\googledrivesync64.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\GDriveSharedOverlay]
@="{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D43}"
[HKEY_CLASSES_ROOT\CLSID\{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D43}]
2012-12-17 18:50 755816 ----a-w- c:\program files (x86)\Google\Drive\googledrivesync64.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\GDriveSyncedOverlay]
@="{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D40}"
[HKEY_CLASSES_ROOT\CLSID\{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D40}]
2012-12-17 18:50 755816 ----a-w- c:\program files (x86)\Google\Drive\googledrivesync64.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\GDriveSyncingOverlay]
@="{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D41}"
[HKEY_CLASSES_ROOT\CLSID\{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D41}]
2012-12-17 18:50 755816 ----a-w- c:\program files (x86)\Google\Drive\googledrivesync64.dll
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"AtherosBtStack"="c:\program files (x86)\Dell Wireless\Bluetooth Suite\btvstack.exe" [2012-10-16 1023104]
"AthBtTray"="c:\program files (x86)\Dell Wireless\Bluetooth Suite\athbttray.exe" [2012-10-16 801920]
"SynTPEnh"="c:\program files (x86)\Synaptics\SynTP\SynTPEnh.exe" [BU]
"IgfxTray"="c:\windows\system32\igfxtray.exe" [2012-12-14 172144]
"HotKeysCmds"="c:\windows\system32\hkcmd.exe" [2012-12-14 399984]
"Persistence"="c:\windows\system32\igfxpers.exe" [2012-12-14 441968]
"Classic Start Menu"="c:\program files\Classic Shell\ClassicStartMenu.exe" [2012-12-29 160256]
.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Svchost - LocalService
FontCache
.
------- Doplňkový sken -------
.
uLocal Page = c:\windows\system32\blank.htm
mLocal Page =
IE: E&xportovat do aplikace Microsoft Excel - c:\progra~1\MICROS~1\Office14\EXCEL.EXE/3000
IE: Od&eslat do aplikace OneNote - c:\progra~1\MICROS~1\Office14\ONBttnIE.dll/105
TCP: DhcpNameServer = 176.102.128.2 176.102.128.3
.
- - - - NEPLATNÉ POLOŽKY ODSTRANĚNÉ Z REGISTRU - - - -
.
AddRemove-aTube Catcher - d:\programs\atube\aTube Catcher 2.0\uninstall.exe
.
.
.
--------------------- ZAMKNUTÉ KLÍČE V REGISTRU ---------------------
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{0BE09CC1-42E0-11DD-AE16-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil10b.exe,-101"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{0BE09CC1-42E0-11DD-AE16-0800200C9A66}\Elevation]
"Enabled"=dword:00000001
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{0BE09CC1-42E0-11DD-AE16-0800200C9A66}\LocalServer32]
@="c:\\Windows\\SysWow64\\Macromed\\Flash\\FlashUtil10b.exe"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{0BE09CC1-42E0-11DD-AE16-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@="Shockwave Flash Object"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\InprocServer32]
@="c:\\Windows\\SysWow64\\Macromed\\Flash\\Flash10b.ocx"
"ThreadingModel"="Apartment"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\MiscStatus]
@="0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ProgID]
@="ShockwaveFlash.ShockwaveFlash.10"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
@="c:\\Windows\\SysWow64\\Macromed\\Flash\\Flash10b.ocx, 1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\TypeLib]
@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\Version]
@="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
@="ShockwaveFlash.ShockwaveFlash"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@="Macromedia Flash Factory Object"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\InprocServer32]
@="c:\\Windows\\SysWow64\\Macromed\\Flash\\Flash10b.ocx"
"ThreadingModel"="Apartment"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ProgID]
@="FlashFactory.FlashFactory.1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
@="c:\\Windows\\SysWow64\\Macromed\\Flash\\Flash10b.ocx, 1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\TypeLib]
@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\Version]
@="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
@="FlashFactory.FlashFactory"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{DDF4CE26-4BDA-42BC-B0F0-0E75243AD285}]
@Denied: (A 2) (Everyone)
@="IFlashBroker2"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{DDF4CE26-4BDA-42BC-B0F0-0E75243AD285}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{DDF4CE26-4BDA-42BC-B0F0-0E75243AD285}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Nico Mak Computing\WinZip]
"SymbolicLinkValue"=hex(6):5c,00,52,00,65,00,67,00,69,00,73,00,74,00,72,00,79,
00,5c,00,4d,00,41,00,43,00,48,00,49,00,4e,00,45,00,5c,00,53,00,6f,00,66,00,\
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0000\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0001\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Control\PCW\Security]
@Denied: (Full) (Everyone)
.
------------------------ Jiné spuštené procesy ------------------------
.
c:\program files\AVAST Software\Avast\AvastSvc.exe
c:\program files (x86)\Google\Update\GoogleUpdate.exe
.
**************************************************************************
.
Celkový čas: 2013-03-23 15:11:53 - počítač byl restartován
ComboFix-quarantined-files.txt 2013-03-23 14:11
ComboFix2.txt 2013-03-23 13:54
.
Před spuštěním: Volných bajtů: 10 870 464 512
Po spuštění: Volných bajtů: 10 790 821 888
.
- - End Of File - - 26ACB3CFC759CC2420F2F3445AEB7545