Prosím o kontrolu logu z RSIT

[melo15]

Ahoj, zkontrolujte mi prosím LOG. PC se mi zdá nějaký pomalejší a RSIT šel spustit pouze v Safe Mode.
Předem moc děkuji.



Logfile of random's system information tool 1.09 (written by random/random)
Run by Majk at 2013-03-29 18:25:30
Microsoft Windows 7 Home Premium Service Pack 1
System drive C: has 519 GB (75%) free of 696 GB
Total RAM: 3690 MB (73% free)

HijackThis download failed

======Listing Processes======

\SystemRoot\System32\smss.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
wininit.exe
winlogon.exe
C:\Windows\system32\services.exe
C:\Windows\system32\lsass.exe
C:\Windows\system32\lsm.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Windows\system32\svchost.exe -k RPCSS
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\system32\svchost.exe -k netsvcs
C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k NetworkService
C:\Windows\system32\userinit.exe
C:\Windows\Explorer.EXE
ctfmon.exe
C:\Windows\system32\wbem\wmiprvse.exe
"C:\Users\Majk\Desktop\RSITx64.exe"
C:\Windows\system32\wbem\wmiprvse.exe
C:\Windows\system32\DllHost.exe /Processid:{3EB3C877-1F16-487C-9050-104DBCD66683}

======Scheduled tasks folder======

C:\Windows\tasks\Adobe Flash Player Updater.job
C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
C:\Windows\tasks\GoogleUpdateTaskMachineUA.job
C:\Windows\tasks\ISM-UpdateService-4e00205a-2ab1-4423-8f77-cc25b82cde1d-Logon.job
C:\Windows\tasks\ISM-UpdateService-4e00205a-2ab1-4423-8f77-cc25b82cde1d.job

=========Mozilla firefox=========

ProfilePath - C:\Users\Majk\AppData\Roaming\Mozilla\Firefox\Profiles\p80ls2zr.default

prefs.js - "browser.startup.homepage" - "http://www.seznam.cz/"

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 11.6.602.180 Plugin
"Path"=C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_6_602_180.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@intel-webapi.intel.com/Intel WebAPI ipt;version=2.0.59]
"Description"=Intel IPT WebApi plugin
"Path"=C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@intel-webapi.intel.com/Intel WebAPI updater]
"Description"=This plugin updates Intel WebAPI component
"Path"=C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@java.com/DTPlugin,version=10.13.2]
"Description"=Java™ Deployment Toolkit
"Path"=C:\Windows\SysWOW64\npDeployJava1.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@java.com/JavaPlugin,version=10.13.2]
"Description"=Oracle® Next Generation Java™ Plug-In
"Path"=C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0]
"Description"=Ag Player Plugin
"Path"=c:\Program Files (x86)\Microsoft Silverlight\5.1.20125.0\npctrl.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@microsoft.com/OfficeAuthz,version=14.0]
"Description"=Office Authorization plug-in for NPAPI browsers
"Path"=C:\PROGRA~2\MICROS~3\Office14\NPAUTHZ.DLL

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@microsoft.com/SharePoint,version=14.0]
"Description"=Microsoft SharePoint Plug-in for Firefox
"Path"=C:\PROGRA~2\MICROS~3\Office14\NPSPWRAP.DLL

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@microsoft.com/WLPG,version=15.4.3502.0922]
"Description"=WLPG Install MIME type
"Path"=C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@microsoft.com/WLPG,version=15.4.3555.0308]
"Description"=WLPG Install MIME type
"Path"=C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@tools.google.com/Google Update;version=3]
"Description"=Google Update
"Path"=C:\Program Files (x86)\Google\Update\1.3.21.135\npGoogleUpdate3.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@tools.google.com/Google Update;version=9]
"Description"=Google Update
"Path"=C:\Program Files (x86)\Google\Update\1.3.21.135\npGoogleUpdate3.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@videolan.org/vlc,version=2.0.5]
"Description"=VLC Multimedia Plugin
"Path"=C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\Adobe Reader]
"Description"=Handles PDFs in-place in Firefox
"Path"=C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll


[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 11.6.602.180 Plugin
"Path"=C:\Windows\system32\Macromed\Flash\NPSWF64_11_6_602_180.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0]
"Description"=Ag Player Plugin
"Path"=c:\Program Files\Microsoft Silverlight\5.1.20125.0\npctrl.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@microsoft.com/OfficeAuthz,version=14.0]
"Description"=Office Authorization plug-in for NPAPI browsers
"Path"=C:\PROGRA~1\MICROS~2\Office14\NPAUTHZ.DLL

C:\Program Files (x86)\Mozilla Firefox\extensions\
{972ce4c6-7e08-4474-a285-3208198ce6fd}

C:\Program Files (x86)\Mozilla Firefox\components\
binary.manifest
browsercomps.dll

C:\Program Files (x86)\Mozilla Firefox\searchplugins\
google.xml
heureka-cz.xml
jyxo-cz.xml
seznam-cz.xml
slunecnice-cz.xml
wikipedia-cz.xml

C:\Users\Majk\AppData\Roaming\Mozilla\Firefox\Profiles\p80ls2zr.default\extensions\
crossriderapp14917@crossrider.com
foxmarks@kei.com
toolbar@ask.com
{1018e4d6-728f-4b20-ad56-37578a4de76b}
{b9db16a4-6edc-47ec-a1f4-b86292ed211d}
{bee6eb20-01e0-ebd1-da83-080329fb9a3a}

C:\Users\Majk\AppData\Roaming\Mozilla\Firefox\Profiles\p80ls2zr.default\searchplugins\
askcom.xml

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{72853161-30C5-4D22-B7F9-0BBC1D38A37E}]
Groove GFS Browser Helper - C:\PROGRA~1\MICROS~2\Office14\GROOVEEX.DLL [2012-08-16 6670496]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{8590886E-EC8C-43C1-A32C-E4C2B0B6395B}]
TrueSuite Browser Helper Object - C:\Program Files\Lenovo Fingerprint Reader\IEBHO.DLL [2012-06-07 1930088]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
Windows Live ID Sign-in Helper - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2011-03-29 529280]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{B4F3A835-0E21-4959-BA22-42B3008E02FF}]
Office Document Cache Handler - C:\PROGRA~1\MICROS~2\Office14\URLREDIR.DLL [2010-12-21 689040]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{C63CD127-A1CB-4D49-A4F7-D6F88A917BE6}]
Symantec VIP Access Add-On - C:\Program Files (x86)\Symantec\VIP Access Client\64bit\VIPAddOnForIE64.dll [2012-04-19 2443376]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
Adobe PDF Link Helper - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2012-09-23 60568]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{72853161-30C5-4D22-B7F9-0BBC1D38A37E}]
Groove GFS Browser Helper - C:\PROGRA~2\MICROS~3\Office14\GROOVEEX.DLL [2012-08-16 4171424]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
Java(tm) Plug-In SSV Helper - C:\Program Files (x86)\Java\jre7\bin\ssv.dll [2013-02-17 461216]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{8590886E-EC8C-43C1-A32C-E4C2B0B6395B}]
TrueSuite Browser Helper Object - C:\Program Files\Lenovo Fingerprint Reader\x86\IEBHO.dll [2012-06-07 1772904]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
Windows Live ID Sign-in Helper - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2011-03-29 441216]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{B4F3A835-0E21-4959-BA22-42B3008E02FF}]
Office Document Cache Handler - C:\PROGRA~2\MICROS~3\Office14\URLREDIR.DLL [2010-12-21 561552]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{C63CD127-A1CB-4D49-A4F7-D6F88A917BE6}]
Symantec VIP Access Add-On - C:\Program Files (x86)\Symantec\VIP Access Client\VIPAddOnForIE.dll [2012-04-19 2109040]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{D4027C7F-154A-4066-A1AD-4243D8127440}]
Ask Toolbar - C:\Program Files (x86)\Ask.com\GenericAskToolbar.dll [2013-02-08 1520776]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll [2013-02-17 170912]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Internet Explorer\Toolbar]
{D4027C7F-154A-4066-A1AD-4243D8127440} - Ask Toolbar - C:\Program Files (x86)\Ask.com\GenericAskToolbar.dll [2013-02-08 1520776]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"IgfxTray"=C:\Windows\system32\igfxtray.exe [2012-06-25 170304]
"HotKeysCmds"=C:\Windows\system32\hkcmd.exe [2012-06-25 398656]
"Persistence"=C:\Windows\system32\igfxpers.exe [2012-06-25 440128]
"BLEServicesCtrl"=C:\Program Files (x86)\Intel\Bluetooth\BleServicesCtrl.exe [2012-03-15 178960]
"BTMTrayAgent"=C:\Program Files (x86)\Intel\Bluetooth\btmshell.dll [2012-03-27 11407120]
"cAudioFilterAgent"=C:\Program Files\Conexant\cAudioFilterAgent\cAudioFilterAgent64.exe [2012-03-01 564352]
"ForteConfig"=C:\Program Files\Conexant\ForteConfig\fmapp.exe [2010-10-26 49056]
"SmartAudio"=C:\Program Files\CONEXANT\SAII\SACpl.exe [2012-02-21 1654400]
"TpShocks"=C:\Windows\system32\TpShocks.exe [2012-02-25 382528]
""= []
"SynTPEnh"=C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2012-06-19 2881336]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"AlcoholAutomount"=C:\Program Files (x86)\Alcohol Soft\Alcohol 120\AxAutoMntSrv.exe [2012-01-05 75624]
"AdobeBridge"= []
""=C:\Program Files (x86)\Samsung\Kies\External\FirmwareUpdate\KiesPDLR.exe [2012-12-20 844296]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Absolute Notifier]
C:\Program Files (x86)\Absolute Software\Absolute Notifier\AbsoluteNotifier.exe [2011-05-10 85672]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe ARM]
C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2012-12-03 946352]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\AdobeAAMUpdater-1.0]
C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [2012-04-04 446392]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\AdobeCS6ServiceManager]
C:\Program Files (x86)\Common Files\Adobe\CS6ServiceManager\CS6ServiceManager.exe [2012-03-09 1073312]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ApnUpdater]
C:\Program Files (x86)\Ask.com\Updater\Updater.exe [2013-02-08 1644680]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\BCSSync]
C:\Program Files\Microsoft Office\Office14\BCSSync.exe [2010-03-13 112512]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Dolby Advanced Audio v2]
C:\Program Files (x86)\Dolby Advanced Audio v2\pcee4.exe [2011-12-21 507744]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Fastboot]
C:\Program Files (x86)\Lenovo\RapidBoot HDD Accelerator\FBConsole.exe [2012-01-17 1091376]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\KiesAirMessage]
C:\Program Files (x86)\Samsung\Kies\KiesAirMessage.exe -startup []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\KiesPreload]
C:\Program Files (x86)\Samsung\Kies\Kies.exe [2012-12-20 1476104]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\KiesTrayAgent]
C:\Program Files (x86)\Samsung\Kies\KiesTrayAgent.exe [2012-12-20 310280]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Lenovo Registration]
C:\Program Files (x86)\Lenovo Registration\LenovoReg.exe [2011-07-14 4351712]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\LENOVO.TPKNRRES]
C:\Program Files\Lenovo\Communications Utility\TPKNRRES.exe [2012-06-02 290160]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SandboxieControl]
C:\Program Files\Sandboxie\SbieCtrl.exe [2012-12-16 765200]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Skype]
C:\Program Files (x86)\Skype\Phone\Skype.exe [2013-01-08 18705664]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SunJavaUpdateSched]
C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [2012-07-03 252848]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SwitchBoard]
C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [2010-02-19 517096]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Users^Majk^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^EvernoteClipper.lnk]
C:\PROGRA~2\Evernote\Evernote\EVERNO~2.EXE [2012-10-26 1017184]

[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]
"IMSS"=C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IMSS\PIconStartup.exe [2012-03-06 133400]
"USB3MON"=C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe [2012-04-13 291608]
"RotateImage"=C:\Program Files (x86)\Integrated Camera Driver\X64\RCIMGDIR.exe [2008-10-30 55808]
"PWMTRV"=rundll32 C:\PROGRA~2\ThinkPad\UTILIT~1\PWMTR64V.DLL,PwrMgrBkGndMonitor []
"avgnt"=C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe [2013-03-21 345312]
""= []

C:\Users\Majk\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
Lingea Update Center.lnk - C:\Program Files (x86)\Common Files\Lingea Shared\luc.exe

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
"AppInit_DLLs"="C:\Windows\system32\nvinitx.dll"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\igfxcui]
C:\Windows\system32\igfxdev.dll [2012-06-25 436224]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED}

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{B5A7F190-DDA6-4420-B3BA-52453494E6CD}"=C:\PROGRA~1\MICROS~2\Office14\GROOVEEX.DLL [2012-08-16 6670496]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{B5A7F190-DDA6-4420-B3BA-52453494E6CD}"=C:\PROGRA~2\MICROS~3\Office14\GROOVEEX.DLL [2012-08-16 4171424]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=credssp.dll

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorAdmin"=0
"ConsentPromptBehaviorUser"=3
"EnableLUA"=0
"EnableUIADesktopToggle"=0
"PromptOnSecureDesktop"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=0

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoActiveDesktop"=1
"NoActiveDesktopChanges"=1
"ForceActiveDesktopOn"=0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.msadpcm"=msadp32.acm
"midimapper"=midimap.dll
"wavemapper"=msacm32.drv
"VIDC.UYVY"=msyuv.dll
"VIDC.YUY2"=msyuv.dll
"VIDC.YVYU"=msyuv.dll
"VIDC.IYUV"=iyuv_32.dll
"vidc.i420"=iyuv_32.dll
"VIDC.YVU9"=tsbyuv.dll
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"MSVideo8"=VfWWDM32.dll
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"aux1"=wdmaud.drv
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv
"wave2"=wdmaud.drv
"midi2"=wdmaud.drv
"mixer2"=wdmaud.drv
"wave3"=wdmaud.drv
"midi3"=wdmaud.drv
"mixer3"=wdmaud.drv
"VIDC.FPS1"=frapsv64.dll

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*

======List of files/folders created in the last 1 month======

2013-03-29 18:25:31 ----D---- C:\Program Files\trend micro
2013-03-29 17:44:28 ----D---- C:\Users\Majk\AppData\Roaming\Malwarebytes
2013-03-29 17:44:21 ----D---- C:\ProgramData\Malwarebytes
2013-03-29 17:44:20 ----D---- C:\Program Files (x86)\Malwarebytes' Anti-Malware
2013-03-29 17:44:20 ----A---- C:\Windows\system32\drivers\mbam.sys
2013-03-29 17:41:34 ----D---- C:\rsit
2013-03-25 10:33:54 ----D---- C:\Games
2013-03-25 10:30:44 ----SHD---- C:\Config.Msi
2013-03-23 11:46:03 ----D---- C:\Program Files (x86)\Lingea
2013-03-21 13:11:27 ----A---- C:\Windows\system32\drivers\avkmgr.sys
2013-03-21 13:11:27 ----A---- C:\Windows\system32\drivers\avipbb.sys
2013-03-21 13:11:27 ----A---- C:\Windows\system32\drivers\avgntflt.sys
2013-03-15 17:52:30 ----A---- C:\Windows\SYSWOW64\urlmon.dll
2013-03-15 17:52:30 ----A---- C:\Windows\SYSWOW64\RegisterIEPKEYs.exe
2013-03-15 17:52:30 ----A---- C:\Windows\SYSWOW64\msls31.dll
2013-03-15 17:52:30 ----A---- C:\Windows\SYSWOW64\elshyph.dll
2013-03-15 17:52:30 ----A---- C:\Windows\system32\MsSpellCheckingFacility.exe
2013-03-15 17:52:30 ----A---- C:\Windows\system32\elshyph.dll
2013-03-15 17:52:29 ----A---- C:\Windows\SYSWOW64\wininet.dll
2013-03-15 17:52:29 ----A---- C:\Windows\SYSWOW64\wextract.exe
2013-03-15 17:52:29 ----A---- C:\Windows\SYSWOW64\webcheck.dll
2013-03-15 17:52:29 ----A---- C:\Windows\SYSWOW64\vbscript.dll
2013-03-15 17:52:29 ----A---- C:\Windows\SYSWOW64\pngfilt.dll
2013-03-15 17:52:29 ----A---- C:\Windows\SYSWOW64\msrating.dll
2013-03-15 17:52:29 ----A---- C:\Windows\SYSWOW64\mshtmlmedia.dll
2013-03-15 17:52:29 ----A---- C:\Windows\SYSWOW64\mshtmled.dll
2013-03-15 17:52:29 ----A---- C:\Windows\SYSWOW64\msfeeds.dll
2013-03-15 17:52:29 ----A---- C:\Windows\SYSWOW64\jsproxy.dll
2013-03-15 17:52:29 ----A---- C:\Windows\SYSWOW64\inseng.dll
2013-03-15 17:52:29 ----A---- C:\Windows\SYSWOW64\iexpress.exe
2013-03-15 17:52:29 ----A---- C:\Windows\SYSWOW64\iertutil.dll
2013-03-15 17:52:28 ----A---- C:\Windows\SYSWOW64\url.dll
2013-03-15 17:52:28 ----A---- C:\Windows\SYSWOW64\SetIEInstalledDate.exe
2013-03-15 17:52:28 ----A---- C:\Windows\SYSWOW64\occache.dll
2013-03-15 17:52:28 ----A---- C:\Windows\SYSWOW64\mshtmler.dll
2013-03-15 17:52:28 ----A---- C:\Windows\SYSWOW64\mshtml.dll
2013-03-15 17:52:28 ----A---- C:\Windows\SYSWOW64\mshta.exe
2013-03-15 17:52:28 ----A---- C:\Windows\SYSWOW64\msfeedssync.exe
2013-03-15 17:52:28 ----A---- C:\Windows\SYSWOW64\msfeedsbs.dll
2013-03-15 17:52:28 ----A---- C:\Windows\SYSWOW64\licmgr10.dll
2013-03-15 17:52:28 ----A---- C:\Windows\SYSWOW64\jscript9.dll
2013-03-15 17:52:28 ----A---- C:\Windows\SYSWOW64\jscript.dll
2013-03-15 17:52:28 ----A---- C:\Windows\SYSWOW64\imgutil.dll
2013-03-15 17:52:28 ----A---- C:\Windows\SYSWOW64\ieUnatt.exe
2013-03-15 17:52:28 ----A---- C:\Windows\SYSWOW64\ieui.dll
2013-03-15 17:52:28 ----A---- C:\Windows\SYSWOW64\iesysprep.dll
2013-03-15 17:52:28 ----A---- C:\Windows\SYSWOW64\iesetup.dll
2013-03-15 17:52:28 ----A---- C:\Windows\SYSWOW64\iernonce.dll
2013-03-15 17:52:28 ----A---- C:\Windows\SYSWOW64\iepeers.dll
2013-03-15 17:52:28 ----A---- C:\Windows\SYSWOW64\ieframe.dll
2013-03-15 17:52:28 ----A---- C:\Windows\SYSWOW64\iedkcs32.dll
2013-03-15 17:52:28 ----A---- C:\Windows\SYSWOW64\ieapfltr.dll
2013-03-15 17:52:28 ----A---- C:\Windows\SYSWOW64\ieapfltr.dat
2013-03-15 17:52:28 ----A---- C:\Windows\SYSWOW64\IEAdvpack.dll
2013-03-15 17:52:28 ----A---- C:\Windows\SYSWOW64\icardie.dll
2013-03-15 17:52:28 ----A---- C:\Windows\SYSWOW64\dxtrans.dll
2013-03-15 17:52:28 ----A---- C:\Windows\SYSWOW64\dxtmsft.dll
2013-03-15 17:52:28 ----A---- C:\Windows\system32\wininet.dll
2013-03-15 17:52:28 ----A---- C:\Windows\system32\wextract.exe
2013-03-15 17:52:28 ----A---- C:\Windows\system32\webcheck.dll
2013-03-15 17:52:28 ----A---- C:\Windows\system32\vbscript.dll
2013-03-15 17:52:28 ----A---- C:\Windows\system32\urlmon.dll
2013-03-15 17:52:28 ----A---- C:\Windows\system32\url.dll
2013-03-15 17:52:28 ----A---- C:\Windows\system32\SetIEInstalledDate.exe
2013-03-15 17:52:28 ----A---- C:\Windows\system32\RegisterIEPKEYs.exe
2013-03-15 17:52:28 ----A---- C:\Windows\system32\pngfilt.dll
2013-03-15 17:52:28 ----A---- C:\Windows\system32\occache.dll
2013-03-15 17:52:28 ----A---- C:\Windows\system32\msrating.dll
2013-03-15 17:52:28 ----A---- C:\Windows\system32\msls31.dll
2013-03-15 17:52:28 ----A---- C:\Windows\system32\mshtmlmedia.dll
2013-03-15 17:52:28 ----A---- C:\Windows\system32\mshtmler.dll
2013-03-15 17:52:28 ----A---- C:\Windows\system32\mshtmled.dll
2013-03-15 17:52:28 ----A---- C:\Windows\system32\mshtml.dll
2013-03-15 17:52:28 ----A---- C:\Windows\system32\mshta.exe
2013-03-15 17:52:28 ----A---- C:\Windows\system32\msfeedssync.exe
2013-03-15 17:52:28 ----A---- C:\Windows\system32\msfeedsbs.dll
2013-03-15 17:52:28 ----A---- C:\Windows\system32\msfeeds.dll
2013-03-15 17:52:28 ----A---- C:\Windows\system32\licmgr10.dll
2013-03-15 17:52:28 ----A---- C:\Windows\system32\jsproxy.dll
2013-03-15 17:52:28 ----A---- C:\Windows\system32\jscript9.dll
2013-03-15 17:52:28 ----A---- C:\Windows\system32\jscript.dll
2013-03-15 17:52:28 ----A---- C:\Windows\system32\inseng.dll
2013-03-15 17:52:28 ----A---- C:\Windows\system32\imgutil.dll
2013-03-15 17:52:28 ----A---- C:\Windows\system32\iexpress.exe
2013-03-15 17:52:28 ----A---- C:\Windows\system32\ieUnatt.exe
2013-03-15 17:52:28 ----A---- C:\Windows\system32\iesysprep.dll
2013-03-15 17:52:28 ----A---- C:\Windows\system32\iesetup.dll
2013-03-15 17:52:28 ----A---- C:\Windows\system32\iertutil.dll
2013-03-15 17:52:28 ----A---- C:\Windows\system32\iernonce.dll
2013-03-15 17:52:28 ----A---- C:\Windows\system32\iepeers.dll
2013-03-15 17:52:28 ----A---- C:\Windows\system32\iedkcs32.dll
2013-03-15 17:52:28 ----A---- C:\Windows\system32\ieapfltr.dll
2013-03-15 17:52:28 ----A---- C:\Windows\system32\ieapfltr.dat
2013-03-15 17:52:28 ----A---- C:\Windows\system32\IEAdvpack.dll
2013-03-15 17:52:28 ----A---- C:\Windows\system32\ie4uinit.exe
2013-03-15 17:52:28 ----A---- C:\Windows\system32\icardie.dll
2013-03-15 17:52:28 ----A---- C:\Windows\system32\dxtrans.dll
2013-03-15 17:52:28 ----A---- C:\Windows\system32\dxtmsft.dll
2013-03-15 17:52:27 ----A---- C:\Windows\system32\ieui.dll
2013-03-15 17:52:27 ----A---- C:\Windows\system32\ieframe.dll
2013-03-15 17:51:22 ----AH---- C:\Windows\SYSWOW64\api-ms-win-downlevel-version-l1-1-0.dll
2013-03-15 17:51:22 ----AH---- C:\Windows\SYSWOW64\api-ms-win-downlevel-user32-l1-1-0.dll
2013-03-15 17:51:22 ----AH---- C:\Windows\SYSWOW64\api-ms-win-downlevel-shlwapi-l2-1-0.dll
2013-03-15 17:51:22 ----AH---- C:\Windows\SYSWOW64\api-ms-win-downlevel-shlwapi-l1-1-0.dll
2013-03-15 17:51:22 ----AH---- C:\Windows\SYSWOW64\api-ms-win-downlevel-shell32-l1-1-0.dll
2013-03-15 17:51:22 ----AH---- C:\Windows\SYSWOW64\api-ms-win-downlevel-ole32-l1-1-0.dll
2013-03-15 17:51:22 ----AH---- C:\Windows\SYSWOW64\api-ms-win-downlevel-normaliz-l1-1-0.dll
2013-03-15 17:51:22 ----AH---- C:\Windows\SYSWOW64\api-ms-win-downlevel-advapi32-l2-1-0.dll
2013-03-15 17:51:22 ----AH---- C:\Windows\SYSWOW64\api-ms-win-downlevel-advapi32-l1-1-0.dll
2013-03-15 17:51:22 ----AH---- C:\Windows\system32\api-ms-win-downlevel-version-l1-1-0.dll
2013-03-15 17:51:22 ----AH---- C:\Windows\system32\api-ms-win-downlevel-user32-l1-1-0.dll
2013-03-15 17:51:22 ----AH---- C:\Windows\system32\api-ms-win-downlevel-shlwapi-l2-1-0.dll
2013-03-15 17:51:22 ----AH---- C:\Windows\system32\api-ms-win-downlevel-shlwapi-l1-1-0.dll
2013-03-15 17:51:22 ----AH---- C:\Windows\system32\api-ms-win-downlevel-shell32-l1-1-0.dll
2013-03-15 17:51:22 ----AH---- C:\Windows\system32\api-ms-win-downlevel-ole32-l1-1-0.dll
2013-03-15 17:51:22 ----AH---- C:\Windows\system32\api-ms-win-downlevel-normaliz-l1-1-0.dll
2013-03-15 17:51:22 ----AH---- C:\Windows\system32\api-ms-win-downlevel-advapi32-l2-1-0.dll
2013-03-15 17:51:22 ----AH---- C:\Windows\system32\api-ms-win-downlevel-advapi32-l1-1-0.dll
2013-03-15 17:51:22 ----A---- C:\Windows\SYSWOW64\XpsPrint.dll
2013-03-15 17:51:22 ----A---- C:\Windows\SYSWOW64\XpsGdiConverter.dll
2013-03-15 17:51:22 ----A---- C:\Windows\SYSWOW64\WMPhoto.dll
2013-03-15 17:51:22 ----A---- C:\Windows\SYSWOW64\WindowsCodecsExt.dll
2013-03-15 17:51:22 ----A---- C:\Windows\SYSWOW64\WindowsCodecs.dll
2013-03-15 17:51:22 ----A---- C:\Windows\SYSWOW64\UIAnimation.dll
2013-03-15 17:51:22 ----A---- C:\Windows\SYSWOW64\msmpeg2vdec.dll
2013-03-15 17:51:22 ----A---- C:\Windows\SYSWOW64\dxgi.dll
2013-03-15 17:51:22 ----A---- C:\Windows\SYSWOW64\DWrite.dll
2013-03-15 17:51:22 ----A---- C:\Windows\SYSWOW64\d3d11.dll
2013-03-15 17:51:22 ----A---- C:\Windows\SYSWOW64\d3d10warp.dll
2013-03-15 17:51:22 ----A---- C:\Windows\SYSWOW64\d3d10level9.dll
2013-03-15 17:51:22 ----A---- C:\Windows\SYSWOW64\d3d10core.dll
2013-03-15 17:51:22 ----A---- C:\Windows\SYSWOW64\d3d10_1core.dll
2013-03-15 17:51:22 ----A---- C:\Windows\SYSWOW64\d3d10_1.dll
2013-03-15 17:51:22 ----A---- C:\Windows\SYSWOW64\d3d10.dll
2013-03-15 17:51:22 ----A---- C:\Windows\SYSWOW64\d2d1.dll
2013-03-15 17:51:22 ----A---- C:\Windows\system32\XpsPrint.dll
2013-03-15 17:51:22 ----A---- C:\Windows\system32\XpsGdiConverter.dll
2013-03-15 17:51:22 ----A---- C:\Windows\system32\WMPhoto.dll
2013-03-15 17:51:22 ----A---- C:\Windows\system32\WindowsCodecsExt.dll
2013-03-15 17:51:22 ----A---- C:\Windows\system32\WindowsCodecs.dll
2013-03-15 17:51:22 ----A---- C:\Windows\system32\UIAnimation.dll
2013-03-15 17:51:22 ----A---- C:\Windows\system32\msmpeg2vdec.dll
2013-03-15 17:51:22 ----A---- C:\Windows\system32\FntCache.dll
2013-03-15 17:51:22 ----A---- C:\Windows\system32\dxgi.dll
2013-03-15 17:51:22 ----A---- C:\Windows\system32\DWrite.dll
2013-03-15 17:51:22 ----A---- C:\Windows\system32\d3d11.dll
2013-03-15 17:51:22 ----A---- C:\Windows\system32\d3d10warp.dll
2013-03-15 17:51:22 ----A---- C:\Windows\system32\d3d10level9.dll
2013-03-15 17:51:22 ----A---- C:\Windows\system32\d3d10core.dll
2013-03-15 17:51:22 ----A---- C:\Windows\system32\d3d10_1core.dll
2013-03-15 17:51:22 ----A---- C:\Windows\system32\d3d10_1.dll
2013-03-15 17:51:22 ----A---- C:\Windows\system32\d3d10.dll
2013-03-15 17:51:22 ----A---- C:\Windows\system32\d2d1.dll
2013-03-15 17:48:52 ----A---- C:\Windows\system32\drivers\usb8023.sys
2013-03-13 09:32:19 ----D---- C:\Program Files\Microsoft Silverlight
2013-03-13 09:32:19 ----D---- C:\Program Files (x86)\Microsoft Silverlight
2013-03-08 10:40:56 ----D---- C:\Program Files (x86)\Mozilla Firefox
2013-03-06 15:14:04 ----A---- C:\Windows\SYSWOW64\agremove.exe
2013-03-04 17:01:18 ----RD---- C:\Program Files (x86)\Skype

======List of files/folders modified in the last 1 month======

2013-03-29 18:25:31 ----RD---- C:\Program Files
2013-03-29 18:24:51 ----D---- C:\Windows\inf
2013-03-29 18:24:13 ----D---- C:\Windows\system32\config
2013-03-29 18:24:13 ----A---- C:\Windows\SYSWOW64\log.txt
2013-03-29 18:23:49 ----D---- C:\Windows\pss
2013-03-29 18:23:31 ----D---- C:\Windows\Temp
2013-03-29 18:22:30 ----A---- C:\IFRToolLog.txt
2013-03-29 18:11:42 ----D---- C:\Windows
2013-03-29 17:44:21 ----HD---- C:\ProgramData
2013-03-29 17:44:20 ----RD---- C:\Program Files (x86)
2013-03-29 17:44:20 ----D---- C:\Windows\system32\drivers
2013-03-29 17:33:43 ----D---- C:\Users\Majk\AppData\Roaming\Samsung
2013-03-29 17:27:54 ----D---- C:\Download
2013-03-29 16:27:12 ----D---- C:\Windows\Prefetch
2013-03-29 12:43:21 ----D---- C:\Users\Majk\AppData\Roaming\vlc
2013-03-28 11:07:22 ----D---- C:\Windows\System32
2013-03-28 11:07:22 ----A---- C:\Windows\system32\PerfStringBackup.INI
2013-03-27 18:18:08 ----D---- C:\Users\Majk\AppData\Roaming\Skype
2013-03-25 10:38:01 ----SHD---- C:\Windows\Installer
2013-03-25 10:31:32 ----D---- C:\Games (x86)
2013-03-24 13:24:18 ----D---- C:\Windows\Panther
2013-03-24 13:24:15 ----D---- C:\Windows\Logs
2013-03-24 13:24:14 ----D---- C:\Windows\Minidump
2013-03-24 13:24:14 ----D---- C:\Windows\debug
2013-03-23 15:23:07 ----SHD---- C:\System Volume Information
2013-03-23 11:46:03 ----D---- C:\Program Files (x86)\Common Files
2013-03-21 13:11:35 ----D---- C:\Windows\system32\catroot
2013-03-16 14:52:55 ----D---- C:\Windows\rescache
2013-03-16 11:41:50 ----D---- C:\Windows\system32\catroot2
2013-03-15 18:00:25 ----D---- C:\Windows\winsxs
2013-03-15 17:57:30 ----D---- C:\Windows\SYSWOW64\cs-CZ
2013-03-15 17:57:30 ----D---- C:\Windows\system32\cs-CZ
2013-03-15 17:57:30 ----D---- C:\Program Files\Internet Explorer
2013-03-15 17:57:30 ----D---- C:\Program Files (x86)\Internet Explorer
2013-03-15 17:57:27 ----D---- C:\Windows\SYSWOW64\migration
2013-03-15 17:57:27 ----D---- C:\Windows\SYSWOW64\en-US
2013-03-15 17:57:26 ----D---- C:\Windows\SysWOW64
2013-03-15 17:57:24 ----D---- C:\Windows\system32\migration
2013-03-15 17:57:24 ----D---- C:\Windows\system32\en-US
2013-03-15 17:57:24 ----D---- C:\Windows\PolicyDefinitions
2013-03-15 17:57:21 ----RSD---- C:\Windows\Fonts
2013-03-15 17:57:20 ----D---- C:\Windows\SYSWOW64\zh-TW
2013-03-15 17:57:20 ----D---- C:\Windows\SYSWOW64\zh-HK
2013-03-15 17:57:20 ----D---- C:\Windows\SYSWOW64\zh-CN
2013-03-15 17:57:20 ----D---- C:\Windows\SYSWOW64\tr-TR
2013-03-15 17:57:20 ----D---- C:\Windows\SYSWOW64\sv-SE
2013-03-15 17:57:20 ----D---- C:\Windows\SYSWOW64\ru-RU
2013-03-15 17:57:20 ----D---- C:\Windows\SYSWOW64\pt-PT
2013-03-15 17:57:20 ----D---- C:\Windows\SYSWOW64\pt-BR
2013-03-15 17:57:20 ----D---- C:\Windows\SYSWOW64\pl-PL
2013-03-15 17:57:20 ----D---- C:\Windows\SYSWOW64\nl-NL
2013-03-15 17:57:20 ----D---- C:\Windows\SYSWOW64\nb-NO
2013-03-15 17:57:20 ----D---- C:\Windows\SYSWOW64\ko-KR
2013-03-15 17:57:20 ----D---- C:\Windows\SYSWOW64\ja-JP
2013-03-15 17:57:20 ----D---- C:\Windows\SYSWOW64\it-IT
2013-03-15 17:57:20 ----D---- C:\Windows\SYSWOW64\hu-HU
2013-03-15 17:57:20 ----D---- C:\Windows\SYSWOW64\fr-FR
2013-03-15 17:57:20 ----D---- C:\Windows\SYSWOW64\fi-FI
2013-03-15 17:57:20 ----D---- C:\Windows\SYSWOW64\es-ES
2013-03-15 17:57:20 ----D---- C:\Windows\SYSWOW64\el-GR
2013-03-15 17:57:20 ----D---- C:\Windows\SYSWOW64\de-DE
2013-03-15 17:57:20 ----D---- C:\Windows\SYSWOW64\da-DK
2013-03-15 17:57:19 ----D---- C:\Windows\system32\pt-BR
2013-03-15 17:57:19 ----D---- C:\Windows\system32\it-IT
2013-03-15 17:57:18 ----D---- C:\Windows\system32\zh-TW
2013-03-15 17:57:18 ----D---- C:\Windows\system32\zh-HK
2013-03-15 17:57:18 ----D---- C:\Windows\system32\zh-CN
2013-03-15 17:57:18 ----D---- C:\Windows\system32\tr-TR
2013-03-15 17:57:18 ----D---- C:\Windows\system32\sv-SE
2013-03-15 17:57:18 ----D---- C:\Windows\system32\ru-RU
2013-03-15 17:57:18 ----D---- C:\Windows\system32\pt-PT
2013-03-15 17:57:18 ----D---- C:\Windows\system32\pl-PL
2013-03-15 17:57:18 ----D---- C:\Windows\system32\nl-NL
2013-03-15 17:57:18 ----D---- C:\Windows\system32\nb-NO
2013-03-15 17:57:18 ----D---- C:\Windows\system32\ko-KR
2013-03-15 17:57:18 ----D---- C:\Windows\system32\ja-JP
2013-03-15 17:57:18 ----D---- C:\Windows\system32\hu-HU
2013-03-15 17:57:18 ----D---- C:\Windows\system32\fr-FR
2013-03-15 17:57:18 ----D---- C:\Windows\system32\fi-FI
2013-03-15 17:57:18 ----D---- C:\Windows\system32\es-ES
2013-03-15 17:57:18 ----D---- C:\Windows\system32\el-GR
2013-03-15 17:57:18 ----D---- C:\Windows\system32\de-DE
2013-03-15 17:57:18 ----D---- C:\Windows\system32\da-DK
2013-03-15 17:57:16 ----D---- C:\Windows\system32\DriverStore
2013-03-13 19:51:11 ----A---- C:\Windows\SYSWOW64\FlashPlayerApp.exe
2013-03-13 09:37:26 ----A---- C:\Windows\system32\MRT.exe
2013-03-13 09:37:19 ----D---- C:\ProgramData\Microsoft Help
2013-03-09 10:26:16 ----D---- C:\Program Files (x86)\Mozilla Maintenance Service
2013-03-06 15:10:23 ----A---- C:\Windows\system32\rpcnetp.exe
2013-03-06 15:10:21 ----A---- C:\Windows\SYSWOW64\rpcnet.dll
2013-03-04 17:01:23 ----D---- C:\ProgramData\Skype

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 iaStor;Intel AHCI Controller; C:\Windows\system32\DRIVERS\iaStor.sys [2011-12-23 568600]
R0 iusb3hcs;Intel(R) USB 3.0 Host Controller Switch Driver; C:\Windows\system32\DRIVERS\iusb3hcs.sys [2012-04-13 19224]
R0 nvpciflt;nvpciflt; C:\Windows\system32\DRIVERS\nvpciflt.sys [2012-10-02 30056]
R0 rdyboost;ReadyBoost; C:\Windows\System32\drivers\rdyboost.sys [2010-11-21 213888]
R0 Shockprf;Shockprf; C:\Windows\System32\DRIVERS\Apsx64.sys [2011-12-29 147784]
R0 sptd;sptd; C:\Windows\System32\Drivers\sptd.sys [2012-11-01 560184]
R0 TPDIGIMN;TPDIGIMN; C:\Windows\System32\DRIVERS\ApsHM64.sys [2011-12-29 25416]
R1 PHCORE;PHCORE; \??\C:\Program Files\Lenovo\RapidBoot\PHCORE64.SYS [2012-03-27 33344]
R3 IBMPMDRV;IBMPMDRV; C:\Windows\system32\DRIVERS\ibmpmdrv.sys [2012-04-11 42280]
R3 iusb3hub;Intel(R) USB 3.0 Hub Driver; C:\Windows\system32\DRIVERS\iusb3hub.sys [2012-04-13 356632]
R3 iusb3xhc;Intel(R) USB 3.0 eXtensible Host Controller Driver; C:\Windows\system32\DRIVERS\iusb3xhc.sys [2012-04-13 789272]
R3 iwdbus;IWD Bus Enumerator; C:\Windows\system32\DRIVERS\iwdbus.sys [2011-12-21 25496]
R3 MEIx64;Intel(R) Management Engine Interface ; C:\Windows\system32\DRIVERS\HECIx64.sys [2011-11-10 60184]
R3 SmbDrvIntel;SmbDrvIntel; C:\Windows\system32\DRIVERS\Smb_driver_Intel.sys [2012-06-19 27448]
R3 SynTP;Synaptics TouchPad Driver; C:\Windows\system32\DRIVERS\SynTP.sys [2012-06-19 431928]
S1 avfwot;avfwot; C:\Windows\system32\DRIVERS\avfwot.sys [2013-02-06 141376]
S1 avipbb;avipbb; C:\Windows\system32\DRIVERS\avipbb.sys [2013-03-21 130016]
S1 avkmgr;avkmgr; C:\Windows\system32\DRIVERS\avkmgr.sys [2013-03-21 28600]
S1 TPPWRIF;TPPWRIF; C:\Windows\System32\drivers\Tppwr64v.sys [2012-05-15 19784]
S1 truecrypt;truecrypt; C:\Windows\System32\drivers\truecrypt.sys [2012-12-02 231376]
S1 vwififlt;Virtual WiFi Filter Driver; C:\Windows\system32\DRIVERS\vwififlt.sys [2009-07-14 59904]
S2 avgntflt;avgntflt; C:\Windows\system32\DRIVERS\avgntflt.sys [2013-03-21 100712]
S3 5U877;5U877; C:\Windows\system32\DRIVERS\5U877.sys [2012-03-28 216704]
S3 AMPPAL;Intel® Centrino® Wireless Bluetooth® + High Speed Virtual Adapter; C:\Windows\system32\DRIVERS\AMPPAL.sys [2012-01-09 195584]
S3 AMPPALP;Intel® Centrino® Wireless Bluetooth® + High Speed Protocol; C:\Windows\system32\DRIVERS\amppal.sys [2012-01-09 195584]
S3 avfwim;AvFw Packet Filter Miniport; C:\Windows\system32\DRIVERS\avfwim.sys [2013-02-06 114608]
S3 BthEnum;Bluetooth Enumerator Service; C:\Windows\system32\DRIVERS\BthEnum.sys [2009-07-14 41984]
S3 BthPan;Bluetooth Device (Personal Area Network); C:\Windows\system32\DRIVERS\bthpan.sys [2009-07-14 118784]
S3 BTHPORT;Bluetooth Port Driver; C:\Windows\System32\Drivers\BTHport.sys [2011-12-08 552960]
S3 BTHUSB;Bluetooth Radio USB Driver; C:\Windows\System32\Drivers\BTHUSB.sys [2011-12-08 80384]
S3 btmaux;Intel Bluetooth Auxiliary Service; C:\Windows\system32\DRIVERS\btmaux.sys [2012-02-13 95232]
S3 btmhsf;btmhsf; C:\Windows\system32\DRIVERS\btmhsf.sys [2012-02-13 747008]
S3 CnxtHdAudService;Conexant UAA Function Driver for High Definition Audio Service; C:\Windows\system32\drivers\CHDRT64.sys [2012-03-08 1602688]
S3 dg_ssudbus;SAMSUNG Mobile USB Composite Device Driver (DEVGURU Ver.); C:\Windows\system32\DRIVERS\ssudbus.sys [2012-09-20 102368]
S3 Fastboot;Fastboot; C:\Windows\System32\DRIVERS\Fastboot.sys [2012-01-17 70416]
S3 HTCAND64;HTC Device Driver; C:\Windows\System32\Drivers\ANDROIDUSB.sys [2009-11-02 33736]
S3 htcnprot;HTC NDIS Protocol Driver; C:\Windows\system32\DRIVERS\htcnprot.sys [2012-09-25 36928]
S3 ibtfltcoex;ibtfltcoex; C:\Windows\system32\DRIVERS\iBtFltCoex.sys [2012-03-21 60928]
S3 igfx;igfx; C:\Windows\system32\DRIVERS\igdkmd64.sys [2012-06-25 14760096]
S3 intaud_WaveExtensible;Intel WiDi Audio Device; C:\Windows\system32\drivers\intelaud.sys [2011-12-21 34200]
S3 IntcDAud;Intel(R) Display Audio; C:\Windows\system32\DRIVERS\IntcDAud.sys [2012-06-21 331264]
S3 MBAMProtector;MBAMProtector; \??\C:\Windows\system32\drivers\mbam.sys [2013-02-28 25928]
S3 NETwNs64;___ Intel(R) Wireless WiFi Link 5000 Series Adapter Driver for Windows 7 - 64 Bit; C:\Windows\system32\DRIVERS\Netwsw00.sys [2012-02-20 11471872]
S3 pciide;pciide; C:\Windows\system32\drivers\pciide.sys [2009-07-14 12352]
S3 psadd;Lenovo Parties Service Access Device Driver; C:\Windows\system32\DRIVERS\psadd.sys [2011-12-26 40248]
S3 RFCOMM;Bluetooth Device (RFCOMM Protocol TDI); C:\Windows\system32\DRIVERS\rfcomm.sys [2009-07-14 158720]
S3 RSP2STOR;Realtek PCIE CardReader Driver - P2; C:\Windows\system32\DRIVERS\RtsP2Stor.sys [2011-10-27 259688]
S3 RTL8167;Realtek 8167 NT Driver; C:\Windows\system32\DRIVERS\Rt64win7.sys [2011-08-23 565352]
S3 SbieDrv;SbieDrv; \??\C:\Program Files\Sandboxie\SbieDrv.sys [2012-12-16 202632]
S3 ssudmdm;SAMSUNG Mobile USB Modem Drivers (DEVGURU Ver.); C:\Windows\system32\DRIVERS\ssudmdm.sys [2012-09-20 203104]
S3 TPM;TPM; C:\Windows\system32\drivers\tpm.sys [2009-07-14 38400]
S3 TsUsbFlt;TsUsbFlt; C:\Windows\system32\drivers\tsusbflt.sys [2010-11-21 59392]
S3 TsUsbGD;Remote Desktop Generic USB Device; C:\Windows\system32\drivers\TsUsbGD.sys [2010-11-21 31232]
S3 TVTI2C;Lenovo SM bus driver; C:\Windows\system32\DRIVERS\Tvti2c.sys [2011-05-29 40248]
S3 tvtvcamd;ThinkVantage Virtual Camera; C:\Windows\system32\DRIVERS\tvtvcamd.sys [2011-12-08 27432]
S3 vwifimp;Microsoft Virtual WiFi Miniport Service; C:\Windows\system32\DRIVERS\vwifimp.sys [2009-07-14 17920]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

S2 AbsoluteNotifier;Absolute Notifier; C:\Program Files (x86)\Absolute Software\Absolute Notifier\AbsoluteNotifierService.exe [2011-05-10 10920]
S2 AdobeARMservice;Adobe Acrobat Update Service; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [2012-12-18 65192]
S2 AMPPALR3;Intel® Centrino® Wireless Bluetooth® + High Speed Service; C:\Program Files\Intel\BluetoothHS\BTHSAmpPalService.exe [2012-01-09 659968]
S2 AntiVirFirewallService;Avira FireWall; C:\Program Files (x86)\Avira\AntiVir Desktop\avfwsvc.exe [2013-03-21 657120]
S2 AntiVirMailService;Avira Mail Protection; C:\Program Files (x86)\Avira\AntiVir Desktop\avmailc.exe [2013-03-21 374496]
S2 AntiVirService;Avira Real-Time Protection; C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe [2013-03-21 110816]
S2 AntiVirSchedulerService;Avira Scheduler; C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe [2013-03-21 86752]
S2 AntiVirWebService;Avira Web Protection; C:\Program Files (x86)\Avira\AntiVir Desktop\AVWEBGRD.EXE [2013-03-21 565472]
S2 AxAutoMntSrv;Alcohol Virtual Drive Auto-mount Service; C:\Program Files (x86)\Alcohol Soft\Alcohol 120\AxAutoMntSrv.exe [2012-01-05 75624]
S2 Bluetooth Device Monitor;Bluetooth Device Monitor; C:\Program Files (x86)\Intel\Bluetooth\devmonsrv.exe [2012-03-27 1014096]
S2 Bluetooth OBEX Service;Bluetooth OBEX Service; C:\Program Files (x86)\Intel\Bluetooth\obexsrv.exe [2012-03-27 1104208]
S2 BTHSSecurityMgr;Intel(R) Centrino(R) Wireless Bluetooth(R) + High Speed Security Service; C:\Program Files\Intel\BluetoothHS\BTHSSecurityMgr.exe [2012-01-18 135952]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
S2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2010-03-18 138576]
S2 CxAudMsg;@C:\Windows\system32\CxAudMsg64.exe,-100; C:\Windows\system32\CxAudMsg64.exe [2010-12-17 198784]
S2 EvtEng;Intel(R) PROSet/Wireless Event Log; C:\Program Files\Intel\WiFi\bin\EvtEng.exe [2012-02-26 626960]
S2 FastbootService;FastbootService; C:\Program Files (x86)\Lenovo\RapidBoot HDD Accelerator\FBService.exe [2012-01-17 169776]
S2 FPLService;TrueSuiteService; C:\Program Files\Lenovo Fingerprint Reader\TrueSuiteService.exe [2012-06-07 328552]
S2 gupdate;Google Update Service (gupdate); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2012-09-27 136176]
S2 HTCMonitorService;HTCMonitorService; C:\Program Files (x86)\HTC\HTC Sync Manager\HSMServiceEntry.exe [2012-10-26 87368]
S2 HyperW7Svc;HyperW7 Service; C:\Program Files\Lenovo\RapidBoot\HyperW7Svc64.exe [2012-05-29 144992]
S2 IBMPMSVC;Lenovo PM Service; C:\Windows\system32\ibmpmsvc.exe [2012-04-11 47440]
S2 Intel(R) Capability Licensing Service Interface;Intel(R) Capability Licensing Service Interface; C:\Program Files\Intel\iCLS Client\HeciServer.exe [2012-02-03 628448]
S2 Intel(R) ME Service;Intel(R) ME Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe [2012-03-06 128280]
S2 jhi_service;Intel(R) Dynamic Application Loader Host Interface Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [2012-03-06 163608]
S2 LENOVO.CAMMUTE;Lenovo Camera Mute; C:\Program Files\Lenovo\Communications Utility\CAMMUTE.exe [2012-06-02 58224]
S2 LENOVO.MICMUTE;Lenovo Microphone Mute; C:\Program Files\LENOVO\HOTKEY\MICMUTE.exe [2011-07-12 101736]
S2 LENOVO.TPKNRSVC;Lenovo Keyboard Noise Reduction; C:\Program Files\Lenovo\Communications Utility\TPKNRSVC.exe [2012-06-02 61296]
S2 LENOVO.TVTVCAM;ThinkVantage Virtual Camera Controller; C:\Program Files\Lenovo\Communications Utility\vcamsvc.exe [2012-06-02 179568]
S2 Lenovo.VIRTSCRLSVC;Lenovo Auto Scroll; C:\Program Files\LENOVO\VIRTSCRL\lvvsst.exe [2011-07-12 133992]
S2 LMS;Intel(R) Management and Security Application Local Management Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe [2012-03-06 277784]
S2 MBAMService;MBAMService; C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe [2013-03-08 701512]
S2 MBAMScheduler;MBAMScheduler; C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe [2013-03-08 418376]
S2 nvsvc;NVIDIA Display Driver Service; C:\Windows\system32\nvvsvc.exe [2012-10-02 891240]
S2 nvUpdatusService;NVIDIA Update Service Daemon; C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe [2012-10-02 1258856]
S2 PassThru Service;Internet Pass-Through Service; C:\Program Files (x86)\HTC\Internet Pass-Through\PassThruSvr.exe [2012-10-08 166912]
S2 PSI_SVC_2;Protexis Licensing V2; C:\Program Files (x86)\Common Files\Protexis\License Service\PsiService_2.exe [2010-03-11 193824]
S2 RegSrvc;Intel(R) PROSet/Wireless Registry Service; C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe [2012-02-26 148752]
S2 SAService;Conexant SmartAudio service; C:\Windows\system32\SAsrv.exe []
S2 SbieSvc;Sandboxie Service; C:\Program Files\Sandboxie\SbieSvc.exe [2012-12-16 123664]
S2 SkypeUpdate;Skype Updater; C:\Program Files (x86)\Skype\Updater\Updater.exe [2013-01-08 161536]
S2 StarWindServiceAE;StarWind AE Service; C:\Program Files (x86)\Alcohol Soft\Alcohol 120\StarWind\StarWindServiceAE.exe [2009-12-23 370688]
S2 TPHKLOAD;Lenovo Hotkey Client Loader; C:\Program Files\LENOVO\HOTKEY\TPHKLOAD.exe [2011-07-12 145256]
S2 TPHKSVC;On Screen Display; C:\Program Files\LENOVO\HOTKEY\TPHKSVC.exe [2011-12-29 144960]
S2 UNS;Intel(R) Management and Security Application User Notification Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe [2012-03-06 363800]
S2 VIPAppService;VIPAppService; C:\Program Files (x86)\Symantec\VIP Access Client\VIPAppService.exe [2012-04-19 84080]
S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service; C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2013-03-13 253656]
S3 Bluetooth Media Service;Bluetooth Media Service; C:\Program Files (x86)\Intel\Bluetooth\mediasrv.exe [2012-03-27 1304912]
S3 cphs;Intel(R) Content Protection HECI Service; C:\Windows\SysWow64\IntelCpHeciSvc.exe [2012-06-25 276288]
S3 gupdatem;Google Update Service (gupdatem); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2012-09-27 136176]
S3 Microsoft SharePoint Workspace Audit Service;Microsoft SharePoint Workspace Audit Service; C:\Program Files\Microsoft Office\Office14\GROOVE.EXE [2012-09-20 50899608]
S3 MozillaMaintenance;Mozilla Maintenance Service; C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe [2013-03-08 115608]
S3 MyWiFiDHCPDNS;Wireless PAN DHCP Server; C:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe [2012-02-26 273168]
S3 ose64;Office 64 Source Engine; C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2010-01-09 174440]
S3 osppsvc;Office Software Protection Platform; C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE [2010-01-09 4925184]
S3 Power Manager DBC Service;Power Manager DBC Service; C:\Program Files (x86)\ThinkPad\Utilities\PWMDBSVC.EXE [2012-05-15 1662560]
S3 PwmEWSvc;Cisco EnergyWise Enabler; C:\Program Files (x86)\ThinkPad\Utilities\PWMEWSVC.EXE [2012-05-15 1665120]
S3 SUService;System Update; C:\Program Files (x86)\Lenovo\System Update\SUService.exe [2013-02-04 22376]
S3 SwitchBoard;SwitchBoard; C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [2010-02-19 517096]
S3 TPHDEXLGSVC;ThinkPad HDD APS Logging Service; C:\Windows\System32\TPHDEXLG64.exe [2011-12-29 49480]

-----------------EOF-----------------

[Roli]

Zdravím, smaž nepotřebné soubory

pomocí CCleaneru

návod :

Čistič - tady vyčistíš PC od nepotřebných souborů a vysypeš Koš

Registry - tady vyčistíš registry (před použitím doporučuji udělat jejich zálohu kterou CCleaner nabízí)

čištění registru je třeba několikrát zopakovat !

Nástroje - tady lze odinstalovat programy, upravit co se spustí po Startu systému a obnovit systém


Stáhni a ulož na plochu AdwCleaner,

ukonči všechny programy včetně prohlížeče a dvojklikem spusť,

objeví se okno kde vlevo dole klikni na Search.

Po té proběhne sken a po jeho skončení na Tebe vypadne log, který mi sem zkopíruj.

[melo15]

# AdwCleaner v2.115 - Log vytvooen 30/03/2013 v 09:08:52
# Aktualizováno 17/03/2013 Xplode
# Operaení systém : Windows 7 Home Premium Service Pack 1 (64 bits)
# Uživatel : Majk - MAJK-THINK
# Spuštin systém : Normální
# Spuštino z : C:\Users\Majk\Desktop\adwcleaner.exe
# Volba [Prohledat]


***** [Služby] *****


***** [Soubory / Složky] *****

Složka Nalezeno : C:\ProgramData\Ask
Složka Nalezeno : C:\ProgramData\Partner
Složka Nalezeno : C:\Users\Majk\AppData\Local\Google\Chrome\User Data\Default\Extensions\aaaaojmikegpiepcfdkkjaplodkpfmlo
Složka Nalezeno : C:\Users\Majk\AppData\Roaming\Mozilla\Firefox\Profiles\p80ls2zr.default\extensions\crossriderapp14917@crossrider.com
Soubor Nalezeno : C:\Users\Majk\AppData\Roaming\Mozilla\Firefox\Profiles\p80ls2zr.default\searchplugins\Askcom.xml

***** [Registry] *****

Klíe Nalezeno : HKCU\Software\Alexa Internet
Klíe Nalezeno : HKLM\SOFTWARE\Classes\TypeLib\{11549FE4-7C5A-4C17-9FC3-56FC5162A994}
Klíe Nalezeno : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{66EEF543-A9AC-4A9D-AA3C-1ED148AC8EEE}
Klíe Nalezeno : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{826D7151-8D99-434B-8540-082B8C2AE556}
Klíe Nalezeno : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{66EEF543-A9AC-4A9D-AA3C-1ED148AC8EEE}
Klíe Nalezeno : HKLM\SOFTWARE\Classes\Interface\{66EEF543-A9AC-4A9D-AA3C-1ED148AC8EEE}
Klíe Nalezeno : HKLM\SOFTWARE\Classes\Interface\{79FB5FC8-44B9-4AF5-BADD-CCE547F953E5}
Klíe Nalezeno : HKLM\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\ApnUpdater

***** [Internetové prohlížeee] *****

-\\ Internet Explorer v10.0.9200.16521

[OK] Registry jsou eisté.

-\\ Mozilla Firefox v19.0.2 (cs)

Soubor : C:\Users\Majk\AppData\Roaming\Mozilla\Firefox\Profiles\p80ls2zr.default\prefs.js

Nalezeno : user_pref("browser.search.order.1", "Ask.com");
Nalezeno : user_pref("extensions.crossriderapp14917.14917.InstallationTime", 1359551132);
Nalezeno : user_pref("extensions.crossriderapp14917.14917.active", true);
Nalezeno : user_pref("extensions.crossriderapp14917.14917.addressbar", "");
Nalezeno : user_pref("extensions.crossriderapp14917.14917.addressbarenhanced", "");
Nalezeno : user_pref("extensions.crossriderapp14917.14917.backgroundjs", "\n\nappAPI.onRequest(function(resourc[...]
Nalezeno : user_pref("extensions.crossriderapp14917.14917.backgroundver", 4);
Nalezeno : user_pref("extensions.crossriderapp14917.14917.can_run_bg_code", true);
Nalezeno : user_pref("extensions.crossriderapp14917.14917.certdomaininstaller", "");
Nalezeno : user_pref("extensions.crossriderapp14917.14917.changeprevious", false);
Nalezeno : user_pref("extensions.crossriderapp14917.14917.cookie.CrossriderNotifier_channels.expiration", "Fri [...]
Nalezeno : user_pref("extensions.crossriderapp14917.14917.cookie.CrossriderNotifier_channels.value", "%7B%22app[...]
Nalezeno : user_pref("extensions.crossriderapp14917.14917.cookie.CrossriderNotifier_css.expiration", "Thu Jan 3[...]
Nalezeno : user_pref("extensions.crossriderapp14917.14917.cookie.CrossriderNotifier_css.value", "%22.%25CSSClas[...]
Nalezeno : user_pref("extensions.crossriderapp14917.14917.cookie.CrossriderNotifier_geolocation.expiration", "W[...]
Nalezeno : user_pref("extensions.crossriderapp14917.14917.cookie.CrossriderNotifier_geolocation.value", "%22CZ%[...]
Nalezeno : user_pref("extensions.crossriderapp14917.14917.cookie.CrossriderNotifier_metadata.expiration", "Thu [...]
Nalezeno : user_pref("extensions.crossriderapp14917.14917.cookie.CrossriderNotifier_metadata.value", "%7B%22app[...]
Nalezeno : user_pref("extensions.crossriderapp14917.14917.cookie.InstallationTime.expiration", "Fri Feb 01 2030[...]
Nalezeno : user_pref("extensions.crossriderapp14917.14917.cookie.InstallationTime.value", "1359551132");
Nalezeno : user_pref("extensions.crossriderapp14917.14917.description", "Chat Undetected lets you disable Faceb[...]
Nalezeno : user_pref("extensions.crossriderapp14917.14917.domain", "");
Nalezeno : user_pref("extensions.crossriderapp14917.14917.enablesearch", false);
Nalezeno : user_pref("extensions.crossriderapp14917.14917.fbremoteurl", "");
Nalezeno : user_pref("extensions.crossriderapp14917.14917.group", 0);
Nalezeno : user_pref("extensions.crossriderapp14917.14917.homepage", "");
Nalezeno : user_pref("extensions.crossriderapp14917.14917.iframe", false);
Nalezeno : user_pref("extensions.crossriderapp14917.14917.internaldb.Resources_appVer.expiration", "Fri Feb 01 [...]
Nalezeno : user_pref("extensions.crossriderapp14917.14917.internaldb.Resources_appVer.value", "47");
Nalezeno : user_pref("extensions.crossriderapp14917.14917.internaldb.Resources_lastVersion.expiration", "Fri Fe[...]
Nalezeno : user_pref("extensions.crossriderapp14917.14917.internaldb.Resources_lastVersion.value", "0");
Nalezeno : user_pref("extensions.crossriderapp14917.14917.internaldb.Resources_meta.expiration", "Fri Feb 01 20[...]
Nalezeno : user_pref("extensions.crossriderapp14917.14917.internaldb.Resources_meta.value", "%7B%7D");
Nalezeno : user_pref("extensions.crossriderapp14917.14917.internaldb.Resources_nextCheck.expiration", "Wed Jan [...]
Nalezeno : user_pref("extensions.crossriderapp14917.14917.internaldb.Resources_nextCheck.value", "true");
Nalezeno : user_pref("extensions.crossriderapp14917.14917.internaldb.Resources_queue.expiration", "Fri Feb 01 2[...]
Nalezeno : user_pref("extensions.crossriderapp14917.14917.internaldb.Resources_queue.value", "%7B%7D");
Nalezeno : user_pref("extensions.crossriderapp14917.14917.internaldb.__crossrider_daily_ping__.expiration", "We[...]
Nalezeno : user_pref("extensions.crossriderapp14917.14917.internaldb.__crossrider_daily_ping__.value", "true");
Nalezeno : user_pref("extensions.crossriderapp14917.14917.js", "\n\n//vamos\n\n\n\n");
Nalezeno : user_pref("extensions.crossriderapp14917.14917.manifesturl", "");
Nalezeno : user_pref("extensions.crossriderapp14917.14917.name", "Chat Undetected");
Nalezeno : user_pref("extensions.crossriderapp14917.14917.newtab", "");
Nalezeno : user_pref("extensions.crossriderapp14917.14917.opensearch", "");
Nalezeno : user_pref("extensions.crossriderapp14917.14917.plugins.plugin_1.code", "appAPI._cr_config={appID:fun[...]
Nalezeno : user_pref("extensions.crossriderapp14917.14917.plugins.plugin_1.name", "base");
Nalezeno : user_pref("extensions.crossriderapp14917.14917.plugins.plugin_1.ver", 3);
Nalezeno : user_pref("extensions.crossriderapp14917.14917.plugins.plugin_13.code", "(function(a){a.selectedText[...]
Nalezeno : user_pref("extensions.crossriderapp14917.14917.plugins.plugin_13.name", "CrossriderAppUtils");
Nalezeno : user_pref("extensions.crossriderapp14917.14917.plugins.plugin_13.ver", 2);
Nalezeno : user_pref("extensions.crossriderapp14917.14917.plugins.plugin_14.code", "if(typeof(appAPI)===\"undef[...]
Nalezeno : user_pref("extensions.crossriderapp14917.14917.plugins.plugin_14.name", "CrossriderUtils");
Nalezeno : user_pref("extensions.crossriderapp14917.14917.plugins.plugin_14.ver", 2);
Nalezeno : user_pref("extensions.crossriderapp14917.14917.plugins.plugin_15.code", "(function(f){var u={};var e[...]
Nalezeno : user_pref("extensions.crossriderapp14917.14917.plugins.plugin_15.name", "FacebookFFIE");
Nalezeno : user_pref("extensions.crossriderapp14917.14917.plugins.plugin_15.ver", 1);
Nalezeno : user_pref("extensions.crossriderapp14917.14917.plugins.plugin_16.code", "if((typeof isBackground===\[...]
Nalezeno : user_pref("extensions.crossriderapp14917.14917.plugins.plugin_16.name", "FFAppAPIWrapper");
Nalezeno : user_pref("extensions.crossriderapp14917.14917.plugins.plugin_16.ver", 4);
Nalezeno : user_pref("extensions.crossriderapp14917.14917.plugins.plugin_17.code", "if(typeof window!==\"undefi[...]
Nalezeno : user_pref("extensions.crossriderapp14917.14917.plugins.plugin_17.name", "jQuery");
Nalezeno : user_pref("extensions.crossriderapp14917.14917.plugins.plugin_17.ver", 3);
Nalezeno : user_pref("extensions.crossriderapp14917.14917.plugins.plugin_21.code", "var CrossriderDebugManager=[...]
Nalezeno : user_pref("extensions.crossriderapp14917.14917.plugins.plugin_21.name", "debug");
Nalezeno : user_pref("extensions.crossriderapp14917.14917.plugins.plugin_21.ver", 3);
Nalezeno : user_pref("extensions.crossriderapp14917.14917.plugins.plugin_22.code", "(function(a){appAPI.queueMa[...]
Nalezeno : user_pref("extensions.crossriderapp14917.14917.plugins.plugin_22.name", "resources");
Nalezeno : user_pref("extensions.crossriderapp14917.14917.plugins.plugin_22.ver", 2);
Nalezeno : user_pref("extensions.crossriderapp14917.14917.plugins.plugin_28.code", "var CrossriderInitializerPl[...]
Nalezeno : user_pref("extensions.crossriderapp14917.14917.plugins.plugin_28.name", "initializer");
Nalezeno : user_pref("extensions.crossriderapp14917.14917.plugins.plugin_28.ver", 2);
Nalezeno : user_pref("extensions.crossriderapp14917.14917.plugins.plugin_4.code", "var jQuery = $jquery_171 = $[...]
Nalezeno : user_pref("extensions.crossriderapp14917.14917.plugins.plugin_4.name", "jquery_1_7_1");
Nalezeno : user_pref("extensions.crossriderapp14917.14917.plugins.plugin_4.ver", 3);
Nalezeno : user_pref("extensions.crossriderapp14917.14917.plugins.plugin_47.code", "(function(){appAPI.ready=fu[...]
Nalezeno : user_pref("extensions.crossriderapp14917.14917.plugins.plugin_47.name", "resources_background");
Nalezeno : user_pref("extensions.crossriderapp14917.14917.plugins.plugin_47.ver", 1);
Nalezeno : user_pref("extensions.crossriderapp14917.14917.plugins.plugin_5.code", "(function(f){f.ui=f.ui||{};v[...]
Nalezeno : user_pref("extensions.crossriderapp14917.14917.plugins.plugin_5.name", "notifications");
Nalezeno : user_pref("extensions.crossriderapp14917.14917.plugins.plugin_5.ver", 2);
Nalezeno : user_pref("extensions.crossriderapp14917.14917.plugins.plugin_64.code", "(function(){var h=\"__CR_EM[...]
Nalezeno : user_pref("extensions.crossriderapp14917.14917.plugins.plugin_64.name", "appApiMessage");
Nalezeno : user_pref("extensions.crossriderapp14917.14917.plugins.plugin_64.ver", 1);
Nalezeno : user_pref("extensions.crossriderapp14917.14917.plugins.plugin_7.code", "appAPI.hooks={$:$jquery_171,[...]
Nalezeno : user_pref("extensions.crossriderapp14917.14917.plugins.plugin_7.name", "hooks");
Nalezeno : user_pref("extensions.crossriderapp14917.14917.plugins.plugin_7.ver", 1);
Nalezeno : user_pref("extensions.crossriderapp14917.14917.plugins.plugin_72.code", "if(appAPI.__should_activate[...]
Nalezeno : user_pref("extensions.crossriderapp14917.14917.plugins.plugin_72.name", "appApiValidation");
Nalezeno : user_pref("extensions.crossriderapp14917.14917.plugins.plugin_72.ver", 1);
Nalezeno : user_pref("extensions.crossriderapp14917.14917.plugins.plugin_78.code", "if(typeof jQuery!==\"undefi[...]
Nalezeno : user_pref("extensions.crossriderapp14917.14917.plugins.plugin_78.name", "CrossriderInfo");
Nalezeno : user_pref("extensions.crossriderapp14917.14917.plugins.plugin_78.ver", 2);
Nalezeno : user_pref("extensions.crossriderapp14917.14917.plugins.plugin_79.code", "(function(){try{if(typeof a[...]
Nalezeno : user_pref("extensions.crossriderapp14917.14917.plugins.plugin_79.name", "CrossriderDailyPing");
Nalezeno : user_pref("extensions.crossriderapp14917.14917.plugins.plugin_79.ver", 2);
Nalezeno : user_pref("extensions.crossriderapp14917.14917.plugins.plugin_9.code", "appAPI.hooks.addHook(\"searc[...]
Nalezeno : user_pref("extensions.crossriderapp14917.14917.plugins.plugin_9.name", "search_engine_hook");
Nalezeno : user_pref("extensions.crossriderapp14917.14917.plugins.plugin_9.ver", 1);
Nalezeno : user_pref("extensions.crossriderapp14917.14917.plugins_lists.plugins_0", "4,14,78,16,64,47,72");
Nalezeno : user_pref("extensions.crossriderapp14917.14917.plugins_lists.plugins_1", "17,14,78,13,16,15,64,4,1,2[...]
Nalezeno : user_pref("extensions.crossriderapp14917.14917.plugins_lists.plugins_5", "4,14,78,13,16,64,47,72");
Nalezeno : user_pref("extensions.crossriderapp14917.14917.pluginsurl", "hxxp://app-static.crossrider.com/plugin[...]
Nalezeno : user_pref("extensions.crossriderapp14917.14917.pluginsversion", 15);
Nalezeno : user_pref("extensions.crossriderapp14917.14917.publisher", "Crossrider");
Nalezeno : user_pref("extensions.crossriderapp14917.14917.searchstatus", 0);
Nalezeno : user_pref("extensions.crossriderapp14917.14917.setnewtab", false);
Nalezeno : user_pref("extensions.crossriderapp14917.14917.settingsurl", "");
Nalezeno : user_pref("extensions.crossriderapp14917.14917.thankyou", "hxxp://crossrider.com/thank_you/14917");
Nalezeno : user_pref("extensions.crossriderapp14917.14917.updateinterval", 360);
Nalezeno : user_pref("extensions.crossriderapp14917.14917.ver", 47);
Nalezeno : user_pref("extensions.crossriderapp14917.apps", "14917");
Nalezeno : user_pref("extensions.crossriderapp14917.bic", "13c8b8ff09fa863a68b5adc95819b9a2");
Nalezeno : user_pref("extensions.crossriderapp14917.cid", 14917);
Nalezeno : user_pref("extensions.crossriderapp14917.firstrun", false);
Nalezeno : user_pref("extensions.crossriderapp14917.hadappinstalled", true);
Nalezeno : user_pref("extensions.crossriderapp14917.installationdate", 1359551132);
Nalezeno : user_pref("extensions.crossriderapp14917.lastcheck", 22659186);
Nalezeno : user_pref("extensions.crossriderapp14917.lastcheckitem", 22659350);
Nalezeno : user_pref("extensions.crossriderapp14917.modetype", "production");
Nalezeno : user_pref("extensions.crossriderapp14917.reportInstall", true);
Nalezeno : user_pref("extensions.crossriderapp14917@crossrider.com.install-event-fired", true);
Nalezeno : user_pref("extensions.toolbar@ask.com.install-event-fired", true);

-\\ Google Chrome v25.0.1364.172

Soubor : C:\Users\Majk\AppData\Local\Google\Chrome\User Data\Default\Preferences

Nalezeno [l.35] : icon_url = "hxxp://www.ask.com/favicon.ico",
Nalezeno [l.38] : keyword = "ask.com",
Nalezeno [l.41] : search_url = "hxxp://websearch.ask.com/redirect?client=cr&src=kw&tb=ORJ&o=&locale=&apn_uid=A94F3CCF-2986-4AB9-A39F-BE0A88A711B3&apn_ptnrs=U3&apn_sauid=7F3DA4BD-2767-459B-B7C4-7107AAC552F4&apn_dtid=OSJ000YYCZ&q={searchTerms}",
Nalezeno [l.42] : suggest_url = "hxxp://ss.websearch.ask.com/query?qsrc=2922&li=ff&sstype=prefix&q={searchTerms}"

*************************

AdwCleaner[R1].txt - [14306 octets] - [30/03/2013 09:08:52]

########## EOF - C:\AdwCleaner[R1].txt - [14367 octets] ##########

[Roli]

Znovu spusť AdwCleaner ale tentokrát klikni na Delete,

proběhne restart PC kdy dojde ke smazání nepořádku.

Po té na Tebe opět vypadne log který mi sem zkopíruj.

[melo15]

# AdwCleaner v2.115 - Log vytvooen 30/03/2013 v 18:12:39
# Aktualizováno 17/03/2013 Xplode
# Operaení systém : Windows 7 Home Premium Service Pack 1 (64 bits)
# Uživatel : Majk - MAJK-THINK
# Spuštin systém : Normální
# Spuštino z : C:\Users\Majk\Desktop\adwcleaner.exe
# Volba [Vymazat]


***** [Služby] *****


***** [Soubory / Složky] *****

Složka Vymazáno : C:\ProgramData\Ask
Složka Vymazáno : C:\ProgramData\Partner
Složka Vymazáno : C:\Users\Majk\AppData\Roaming\Mozilla\Firefox\Profiles\p80ls2zr.default\extensions\crossriderapp14917@crossrider.com
Soubor Vymazáno : C:\Users\Majk\AppData\Roaming\Mozilla\Firefox\Profiles\p80ls2zr.default\searchplugins\Askcom.xml

***** [Registry] *****

Klíe Vymazáno : HKCU\Software\Alexa Internet
Klíe Vymazáno : HKLM\SOFTWARE\Classes\TypeLib\{11549FE4-7C5A-4C17-9FC3-56FC5162A994}
Klíe Vymazáno : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{66EEF543-A9AC-4A9D-AA3C-1ED148AC8EEE}
Klíe Vymazáno : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{826D7151-8D99-434B-8540-082B8C2AE556}
Klíe Vymazáno : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{66EEF543-A9AC-4A9D-AA3C-1ED148AC8EEE}
Klíe Vymazáno : HKLM\SOFTWARE\Classes\Interface\{66EEF543-A9AC-4A9D-AA3C-1ED148AC8EEE}
Klíe Vymazáno : HKLM\SOFTWARE\Classes\Interface\{79FB5FC8-44B9-4AF5-BADD-CCE547F953E5}
Klíe Vymazáno : HKLM\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\ApnUpdater

***** [Internetové prohlížeee] *****

-\\ Internet Explorer v10.0.9200.16521

[OK] Registry jsou eisté.

-\\ Mozilla Firefox v19.0.2 (cs)

Soubor : C:\Users\Majk\AppData\Roaming\Mozilla\Firefox\Profiles\p80ls2zr.default\prefs.js

Vymazáno : user_pref("browser.search.order.1", "Ask.com");
Vymazáno : user_pref("extensions.crossriderapp14917.14917.InstallationTime", 1359551132);
Vymazáno : user_pref("extensions.crossriderapp14917.14917.active", true);
Vymazáno : user_pref("extensions.crossriderapp14917.14917.addressbar", "");
Vymazáno : user_pref("extensions.crossriderapp14917.14917.addressbarenhanced", "");
Vymazáno : user_pref("extensions.crossriderapp14917.14917.backgroundjs", "\n\nappAPI.onRequest(function(resourc[...]
Vymazáno : user_pref("extensions.crossriderapp14917.14917.backgroundver", 4);
Vymazáno : user_pref("extensions.crossriderapp14917.14917.can_run_bg_code", true);
Vymazáno : user_pref("extensions.crossriderapp14917.14917.certdomaininstaller", "");
Vymazáno : user_pref("extensions.crossriderapp14917.14917.changeprevious", false);
Vymazáno : user_pref("extensions.crossriderapp14917.14917.cookie.CrossriderNotifier_channels.expiration", "Fri [...]
Vymazáno : user_pref("extensions.crossriderapp14917.14917.cookie.CrossriderNotifier_channels.value", "%7B%22app[...]
Vymazáno : user_pref("extensions.crossriderapp14917.14917.cookie.CrossriderNotifier_css.expiration", "Thu Jan 3[...]
Vymazáno : user_pref("extensions.crossriderapp14917.14917.cookie.CrossriderNotifier_css.value", "%22.%25CSSClas[...]
Vymazáno : user_pref("extensions.crossriderapp14917.14917.cookie.CrossriderNotifier_geolocation.expiration", "W[...]
Vymazáno : user_pref("extensions.crossriderapp14917.14917.cookie.CrossriderNotifier_geolocation.value", "%22CZ%[...]
Vymazáno : user_pref("extensions.crossriderapp14917.14917.cookie.CrossriderNotifier_metadata.expiration", "Thu [...]
Vymazáno : user_pref("extensions.crossriderapp14917.14917.cookie.CrossriderNotifier_metadata.value", "%7B%22app[...]
Vymazáno : user_pref("extensions.crossriderapp14917.14917.cookie.InstallationTime.expiration", "Fri Feb 01 2030[...]
Vymazáno : user_pref("extensions.crossriderapp14917.14917.cookie.InstallationTime.value", "1359551132");
Vymazáno : user_pref("extensions.crossriderapp14917.14917.description", "Chat Undetected lets you disable Faceb[...]
Vymazáno : user_pref("extensions.crossriderapp14917.14917.domain", "");
Vymazáno : user_pref("extensions.crossriderapp14917.14917.enablesearch", false);
Vymazáno : user_pref("extensions.crossriderapp14917.14917.fbremoteurl", "");
Vymazáno : user_pref("extensions.crossriderapp14917.14917.group", 0);
Vymazáno : user_pref("extensions.crossriderapp14917.14917.homepage", "");
Vymazáno : user_pref("extensions.crossriderapp14917.14917.iframe", false);
Vymazáno : user_pref("extensions.crossriderapp14917.14917.internaldb.Resources_appVer.expiration", "Fri Feb 01 [...]
Vymazáno : user_pref("extensions.crossriderapp14917.14917.internaldb.Resources_appVer.value", "47");
Vymazáno : user_pref("extensions.crossriderapp14917.14917.internaldb.Resources_lastVersion.expiration", "Fri Fe[...]
Vymazáno : user_pref("extensions.crossriderapp14917.14917.internaldb.Resources_lastVersion.value", "0");
Vymazáno : user_pref("extensions.crossriderapp14917.14917.internaldb.Resources_meta.expiration", "Fri Feb 01 20[...]
Vymazáno : user_pref("extensions.crossriderapp14917.14917.internaldb.Resources_meta.value", "%7B%7D");
Vymazáno : user_pref("extensions.crossriderapp14917.14917.internaldb.Resources_nextCheck.expiration", "Wed Jan [...]
Vymazáno : user_pref("extensions.crossriderapp14917.14917.internaldb.Resources_nextCheck.value", "true");
Vymazáno : user_pref("extensions.crossriderapp14917.14917.internaldb.Resources_queue.expiration", "Fri Feb 01 2[...]
Vymazáno : user_pref("extensions.crossriderapp14917.14917.internaldb.Resources_queue.value", "%7B%7D");
Vymazáno : user_pref("extensions.crossriderapp14917.14917.internaldb.__crossrider_daily_ping__.expiration", "We[...]
Vymazáno : user_pref("extensions.crossriderapp14917.14917.internaldb.__crossrider_daily_ping__.value", "true");
Vymazáno : user_pref("extensions.crossriderapp14917.14917.js", "\n\n//vamos\n\n\n\n");
Vymazáno : user_pref("extensions.crossriderapp14917.14917.manifesturl", "");
Vymazáno : user_pref("extensions.crossriderapp14917.14917.name", "Chat Undetected");
Vymazáno : user_pref("extensions.crossriderapp14917.14917.newtab", "");
Vymazáno : user_pref("extensions.crossriderapp14917.14917.opensearch", "");
Vymazáno : user_pref("extensions.crossriderapp14917.14917.plugins.plugin_1.code", "appAPI._cr_config={appID:fun[...]
Vymazáno : user_pref("extensions.crossriderapp14917.14917.plugins.plugin_1.name", "base");
Vymazáno : user_pref("extensions.crossriderapp14917.14917.plugins.plugin_1.ver", 3);
Vymazáno : user_pref("extensions.crossriderapp14917.14917.plugins.plugin_13.code", "(function(a){a.selectedText[...]
Vymazáno : user_pref("extensions.crossriderapp14917.14917.plugins.plugin_13.name", "CrossriderAppUtils");
Vymazáno : user_pref("extensions.crossriderapp14917.14917.plugins.plugin_13.ver", 2);
Vymazáno : user_pref("extensions.crossriderapp14917.14917.plugins.plugin_14.code", "if(typeof(appAPI)===\"undef[...]
Vymazáno : user_pref("extensions.crossriderapp14917.14917.plugins.plugin_14.name", "CrossriderUtils");
Vymazáno : user_pref("extensions.crossriderapp14917.14917.plugins.plugin_14.ver", 2);
Vymazáno : user_pref("extensions.crossriderapp14917.14917.plugins.plugin_15.code", "(function(f){var u={};var e[...]
Vymazáno : user_pref("extensions.crossriderapp14917.14917.plugins.plugin_15.name", "FacebookFFIE");
Vymazáno : user_pref("extensions.crossriderapp14917.14917.plugins.plugin_15.ver", 1);
Vymazáno : user_pref("extensions.crossriderapp14917.14917.plugins.plugin_16.code", "if((typeof isBackground===\[...]
Vymazáno : user_pref("extensions.crossriderapp14917.14917.plugins.plugin_16.name", "FFAppAPIWrapper");
Vymazáno : user_pref("extensions.crossriderapp14917.14917.plugins.plugin_16.ver", 4);
Vymazáno : user_pref("extensions.crossriderapp14917.14917.plugins.plugin_17.code", "if(typeof window!==\"undefi[...]
Vymazáno : user_pref("extensions.crossriderapp14917.14917.plugins.plugin_17.name", "jQuery");
Vymazáno : user_pref("extensions.crossriderapp14917.14917.plugins.plugin_17.ver", 3);
Vymazáno : user_pref("extensions.crossriderapp14917.14917.plugins.plugin_21.code", "var CrossriderDebugManager=[...]
Vymazáno : user_pref("extensions.crossriderapp14917.14917.plugins.plugin_21.name", "debug");
Vymazáno : user_pref("extensions.crossriderapp14917.14917.plugins.plugin_21.ver", 3);
Vymazáno : user_pref("extensions.crossriderapp14917.14917.plugins.plugin_22.code", "(function(a){appAPI.queueMa[...]
Vymazáno : user_pref("extensions.crossriderapp14917.14917.plugins.plugin_22.name", "resources");
Vymazáno : user_pref("extensions.crossriderapp14917.14917.plugins.plugin_22.ver", 2);
Vymazáno : user_pref("extensions.crossriderapp14917.14917.plugins.plugin_28.code", "var CrossriderInitializerPl[...]
Vymazáno : user_pref("extensions.crossriderapp14917.14917.plugins.plugin_28.name", "initializer");
Vymazáno : user_pref("extensions.crossriderapp14917.14917.plugins.plugin_28.ver", 2);
Vymazáno : user_pref("extensions.crossriderapp14917.14917.plugins.plugin_4.code", "var jQuery = $jquery_171 = $[...]
Vymazáno : user_pref("extensions.crossriderapp14917.14917.plugins.plugin_4.name", "jquery_1_7_1");
Vymazáno : user_pref("extensions.crossriderapp14917.14917.plugins.plugin_4.ver", 3);
Vymazáno : user_pref("extensions.crossriderapp14917.14917.plugins.plugin_47.code", "(function(){appAPI.ready=fu[...]
Vymazáno : user_pref("extensions.crossriderapp14917.14917.plugins.plugin_47.name", "resources_background");
Vymazáno : user_pref("extensions.crossriderapp14917.14917.plugins.plugin_47.ver", 1);
Vymazáno : user_pref("extensions.crossriderapp14917.14917.plugins.plugin_5.code", "(function(f){f.ui=f.ui||{};v[...]
Vymazáno : user_pref("extensions.crossriderapp14917.14917.plugins.plugin_5.name", "notifications");
Vymazáno : user_pref("extensions.crossriderapp14917.14917.plugins.plugin_5.ver", 2);
Vymazáno : user_pref("extensions.crossriderapp14917.14917.plugins.plugin_64.code", "(function(){var h=\"__CR_EM[...]
Vymazáno : user_pref("extensions.crossriderapp14917.14917.plugins.plugin_64.name", "appApiMessage");
Vymazáno : user_pref("extensions.crossriderapp14917.14917.plugins.plugin_64.ver", 1);
Vymazáno : user_pref("extensions.crossriderapp14917.14917.plugins.plugin_7.code", "appAPI.hooks={$:$jquery_171,[...]
Vymazáno : user_pref("extensions.crossriderapp14917.14917.plugins.plugin_7.name", "hooks");
Vymazáno : user_pref("extensions.crossriderapp14917.14917.plugins.plugin_7.ver", 1);
Vymazáno : user_pref("extensions.crossriderapp14917.14917.plugins.plugin_72.code", "if(appAPI.__should_activate[...]
Vymazáno : user_pref("extensions.crossriderapp14917.14917.plugins.plugin_72.name", "appApiValidation");
Vymazáno : user_pref("extensions.crossriderapp14917.14917.plugins.plugin_72.ver", 1);
Vymazáno : user_pref("extensions.crossriderapp14917.14917.plugins.plugin_78.code", "if(typeof jQuery!==\"undefi[...]
Vymazáno : user_pref("extensions.crossriderapp14917.14917.plugins.plugin_78.name", "CrossriderInfo");
Vymazáno : user_pref("extensions.crossriderapp14917.14917.plugins.plugin_78.ver", 2);
Vymazáno : user_pref("extensions.crossriderapp14917.14917.plugins.plugin_79.code", "(function(){try{if(typeof a[...]
Vymazáno : user_pref("extensions.crossriderapp14917.14917.plugins.plugin_79.name", "CrossriderDailyPing");
Vymazáno : user_pref("extensions.crossriderapp14917.14917.plugins.plugin_79.ver", 2);
Vymazáno : user_pref("extensions.crossriderapp14917.14917.plugins.plugin_9.code", "appAPI.hooks.addHook(\"searc[...]
Vymazáno : user_pref("extensions.crossriderapp14917.14917.plugins.plugin_9.name", "search_engine_hook");
Vymazáno : user_pref("extensions.crossriderapp14917.14917.plugins.plugin_9.ver", 1);
Vymazáno : user_pref("extensions.crossriderapp14917.14917.plugins_lists.plugins_0", "4,14,78,16,64,47,72");
Vymazáno : user_pref("extensions.crossriderapp14917.14917.plugins_lists.plugins_1", "17,14,78,13,16,15,64,4,1,2[...]
Vymazáno : user_pref("extensions.crossriderapp14917.14917.plugins_lists.plugins_5", "4,14,78,13,16,64,47,72");
Vymazáno : user_pref("extensions.crossriderapp14917.14917.pluginsurl", "hxxp://app-static.crossrider.com/plugin[...]
Vymazáno : user_pref("extensions.crossriderapp14917.14917.pluginsversion", 15);
Vymazáno : user_pref("extensions.crossriderapp14917.14917.publisher", "Crossrider");
Vymazáno : user_pref("extensions.crossriderapp14917.14917.searchstatus", 0);
Vymazáno : user_pref("extensions.crossriderapp14917.14917.setnewtab", false);
Vymazáno : user_pref("extensions.crossriderapp14917.14917.settingsurl", "");
Vymazáno : user_pref("extensions.crossriderapp14917.14917.thankyou", "hxxp://crossrider.com/thank_you/14917");
Vymazáno : user_pref("extensions.crossriderapp14917.14917.updateinterval", 360);
Vymazáno : user_pref("extensions.crossriderapp14917.14917.ver", 47);
Vymazáno : user_pref("extensions.crossriderapp14917.apps", "14917");
Vymazáno : user_pref("extensions.crossriderapp14917.bic", "13c8b8ff09fa863a68b5adc95819b9a2");
Vymazáno : user_pref("extensions.crossriderapp14917.cid", 14917);
Vymazáno : user_pref("extensions.crossriderapp14917.firstrun", false);
Vymazáno : user_pref("extensions.crossriderapp14917.hadappinstalled", true);
Vymazáno : user_pref("extensions.crossriderapp14917.installationdate", 1359551132);
Vymazáno : user_pref("extensions.crossriderapp14917.lastcheck", 22659186);
Vymazáno : user_pref("extensions.crossriderapp14917.lastcheckitem", 22659350);
Vymazáno : user_pref("extensions.crossriderapp14917.modetype", "production");
Vymazáno : user_pref("extensions.crossriderapp14917.reportInstall", true);
Vymazáno : user_pref("extensions.crossriderapp14917@crossrider.com.install-event-fired", true);
Vymazáno : user_pref("extensions.toolbar@ask.com.install-event-fired", true);

-\\ Google Chrome v25.0.1364.172

Soubor : C:\Users\Majk\AppData\Local\Google\Chrome\User Data\Default\Preferences

Vymazáno [l.35] : icon_url = "hxxp://www.ask.com/favicon.ico",
Vymazáno [l.38] : keyword = "ask.com",
Vymazáno [l.41] : search_url = "hxxp://websearch.ask.com/redirect?client=cr&src=kw&tb=ORJ&o=&locale=&apn_uid=A9[...]
Vymazáno [l.42] : suggest_url = "hxxp://ss.websearch.ask.com/query?qsrc=2922&li=ff&sstype=prefix&q={searchTerms[...]

*************************

AdwCleaner[R1].txt - [14431 octets] - [30/03/2013 09:08:52]
AdwCleaner[R2].txt - [14369 octets] - [30/03/2013 18:12:26]
AdwCleaner[S1].txt - [14179 octets] - [30/03/2013 18:12:39]

########## EOF - C:\AdwCleaner[S1].txt - [14240 octets] ##########

[Roli]

Stáhni a ulož na plochu ComboFix,

spusť aplikaci jako Administrátor a povol instalaci Konzole pro zotavení - Recovery Console.

Poté se zobrazí okno s licenčními podmínkami které potvrdíš kliknutím na ANO,

pak ještě jednou klik na ANO a už to jede.

Celá akce trvá okolo 10 minut ale může i déle, během skenu se nepokoušej spouštět nic jiného.

Při skenovaní může být PC i restartováno nelekat se.

Upozornění: po dobu skenu vypni rezidentní štít Antiviru a AntiSpy programu,

protože Combofix se pokouší napadené soubory smazat a tyto programy mu můžou bránit.

Po dokončení skenu nebo následném restartu aplikace vytvoří log, uložený na C:/Combofix.txt

(při opakovaném použití jsou logy číslovány Combofix2.txt atd.), jeho obsah zkopíruj sem.


V případě nejasností je ZDE obrázkový návod.

[melo15]

CF se neptal, zda nainstalovat Konzoli pro zotavení.

ComboFix 13-03-30.01 - Majk 30.03.2013 18:39:38.1.2 - x64
Microsoft Windows 7 Home Premium 6.1.7601.1.1250.420.1029.18.3690.2296 [GMT 1:00]
Spuštěný z: c:\users\Majk\Desktop\ComboFix.exe
AV: Avira Desktop *Disabled/Updated* {F67B4DE5-C0B4-6C3F-0EFF-6C83BD5D0C2C}
SP: Avira Desktop *Disabled/Updated* {4D1AAC01-E68E-63B1-344F-57F1C6DA4691}
SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.
.
((((((((((((((((((((((((((((((((((((((( Ostatní výmazy )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
c:\programdata\Roaming
c:\users\Public\AlexaNSISPlugin.4536.dll
Q:\AUTORUN.INF
.
.
((((((((((((((((((((((((( Soubory vytvořené od 2013-02-28 do 2013-03-30 )))))))))))))))))))))))))))))))
.
.
2013-03-30 17:49 . 2013-03-30 17:49 -------- d-----w- c:\users\UpdatusUser\AppData\Local\temp
2013-03-30 17:49 . 2013-03-30 17:49 -------- d-----w- c:\users\Default\AppData\Local\temp
2013-03-30 12:40 . 2013-03-30 12:40 -------- d-----w- c:\program files (x86)\AGEIA Technologies
2013-03-29 17:25 . 2013-03-29 17:25 -------- d-----w- c:\program files\trend micro
2013-03-29 16:44 . 2013-03-29 16:44 -------- d-----w- c:\users\Majk\AppData\Roaming\Malwarebytes
2013-03-29 16:44 . 2013-03-29 16:44 -------- d-----w- c:\programdata\Malwarebytes
2013-03-29 16:44 . 2013-03-29 16:44 -------- d-----w- c:\program files (x86)\Malwarebytes' Anti-Malware
2013-03-29 16:44 . 2013-02-28 15:00 25928 ----a-w- c:\windows\system32\drivers\mbam.sys
2013-03-29 16:41 . 2013-03-29 17:25 -------- d-----w- C:\rsit
2013-03-25 09:33 . 2013-03-25 09:33 -------- d-----w- C:\Games
2013-03-23 10:46 . 2013-03-23 10:46 -------- d-----w- c:\program files (x86)\Common Files\Lingea Shared
2013-03-23 10:46 . 2013-03-23 10:46 -------- d-----w- c:\program files (x86)\Lingea
2013-03-21 12:11 . 2013-03-21 12:11 28600 ----a-w- c:\windows\system32\drivers\avkmgr.sys
2013-03-21 12:11 . 2013-03-21 12:11 130016 ----a-w- c:\windows\system32\drivers\avipbb.sys
2013-03-21 12:11 . 2013-03-21 12:11 100712 ----a-w- c:\windows\system32\drivers\avgntflt.sys
2013-03-15 16:51 . 2013-03-15 16:51 9728 ---ha-w- c:\windows\SysWow64\api-ms-win-downlevel-shlwapi-l1-1-0.dll
2013-03-15 16:48 . 2013-02-12 04:12 19968 ----a-w- c:\windows\system32\drivers\usb8023.sys
2013-03-13 08:32 . 2013-03-13 08:32 -------- d-----w- c:\program files\Microsoft Silverlight
2013-03-13 08:32 . 2013-03-13 08:32 -------- d-----w- c:\program files (x86)\Microsoft Silverlight
2013-03-06 14:14 . 2013-03-06 14:14 44544 ----a-w- c:\windows\SysWow64\agremove.exe
2013-03-04 16:01 . 2013-03-04 16:01 -------- d-----w- c:\program files (x86)\Common Files\Skype
2013-03-04 16:01 . 2013-03-04 16:01 -------- d-----r- c:\program files (x86)\Skype
.
.
.
(((((((((((((((((((((((((((((((((((((((( Find3M výpis ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2013-03-15 05:53 . 2012-09-27 17:40 2864144 ----a-w- c:\windows\system32\nvapi64.dll
2013-03-15 05:53 . 2012-09-27 17:40 250504 ----a-w- c:\windows\system32\nvinitx.dll
2013-03-15 05:53 . 2012-09-27 17:40 205184 ----a-w- c:\windows\SysWow64\nvinit.dll
2013-03-15 05:53 . 2012-09-27 17:40 1118776 ----a-w- c:\windows\system32\nvumdshimx.dll
2013-03-15 04:16 . 2012-09-27 17:41 3477280 ----a-w- c:\windows\system32\nvsvc64.dll
2013-03-15 04:16 . 2012-09-27 17:41 6398240 ----a-w- c:\windows\system32\nvcpl.dll
2013-03-15 04:16 . 2012-09-27 17:41 877856 ----a-w- c:\windows\system32\nvvsvc.exe
2013-03-15 04:16 . 2012-09-27 17:41 76064 ----a-w- c:\windows\system32\nv3dappshextr.dll
2013-03-15 04:16 . 2012-09-27 17:41 63776 ----a-w- c:\windows\system32\nvshext.dll
2013-03-15 04:16 . 2012-09-27 17:41 568608 ----a-w- c:\windows\SysWow64\oemdspif.dll
2013-03-15 04:16 . 2012-09-27 17:41 2555680 ----a-w- c:\windows\system32\nvsvcr.dll
2013-03-15 04:16 . 2012-09-27 17:41 237856 ----a-w- c:\windows\system32\nvmctray.dll
2013-03-15 04:16 . 2012-09-27 17:41 1016096 ----a-w- c:\windows\system32\nv3dappshext.dll
2013-03-13 18:51 . 2012-11-01 23:37 73432 ----a-w- c:\windows\SysWow64\FlashPlayerCPLApp.cpl
2013-03-13 18:51 . 2012-11-01 23:37 693976 ----a-w- c:\windows\SysWow64\FlashPlayerApp.exe
2013-03-13 16:24 . 2012-09-27 17:41 3065455 ----a-w- c:\windows\system32\nvcoproc.bin
2013-03-13 08:37 . 2012-11-02 09:20 72013344 ----a-w- c:\windows\system32\MRT.exe
2013-03-06 14:10 . 2012-11-03 14:33 17920 ----a-w- c:\windows\system32\rpcnetp.exe
2013-03-06 14:10 . 2012-11-03 08:40 52736 ----a-w- c:\windows\SysWow64\rpcnet.dll
2013-02-25 18:54 . 2013-02-25 18:54 75776 ----a-w- c:\windows\cadkasdeinst01e.exe
2013-02-17 13:54 . 2013-02-17 13:54 95648 ----a-w- c:\windows\SysWow64\WindowsAccessBridge-32.dll
2013-02-17 13:54 . 2012-11-03 08:27 861088 ----a-w- c:\windows\SysWow64\npDeployJava1.dll
2013-02-17 13:54 . 2012-11-03 08:27 782240 ----a-w- c:\windows\SysWow64\deployJava1.dll
2013-02-06 10:22 . 2012-11-03 11:14 141376 ----a-w- c:\windows\system32\drivers\avfwot.sys
2013-02-06 10:22 . 2012-11-03 11:14 114608 ----a-w- c:\windows\system32\drivers\avfwim.sys
2013-01-05 05:53 . 2013-02-13 10:13 5553512 ----a-w- c:\windows\system32\ntoskrnl.exe
2013-01-05 05:00 . 2013-02-13 10:13 3967848 ----a-w- c:\windows\SysWow64\ntkrnlpa.exe
2013-01-05 05:00 . 2013-02-13 10:13 3913064 ----a-w- c:\windows\SysWow64\ntoskrnl.exe
2013-01-04 05:46 . 2013-02-13 10:13 215040 ----a-w- c:\windows\system32\winsrv.dll
2013-01-04 04:51 . 2013-02-13 10:13 5120 ----a-w- c:\windows\SysWow64\wow32.dll
2013-01-04 04:43 . 2013-02-13 10:13 44032 ----a-w- c:\windows\apppatch\acwow64.dll
2013-01-04 03:26 . 2013-02-13 10:13 3153408 ----a-w- c:\windows\system32\win32k.sys
2013-01-04 02:47 . 2013-02-13 10:13 25600 ----a-w- c:\windows\SysWow64\setup16.exe
2013-01-04 02:47 . 2013-02-13 10:13 7680 ----a-w- c:\windows\SysWow64\instnm.exe
2013-01-04 02:47 . 2013-02-13 10:13 2048 ----a-w- c:\windows\SysWow64\user.exe
2013-01-04 02:47 . 2013-02-13 10:13 14336 ----a-w- c:\windows\SysWow64\ntvdm64.dll
2013-01-03 06:00 . 2013-02-13 10:13 1913192 ----a-w- c:\windows\system32\drivers\tcpip.sys
2013-01-03 06:00 . 2013-02-13 10:13 288088 ----a-w- c:\windows\system32\drivers\FWPKCLNT.SYS
.
.
(((((((((((((((((((((((((((((((((( Spouštěcí body v registru )))))))))))))))))))))))))))))))))))))))))))))
.
.
*Poznámka* prázdné záznamy a legitimní výchozí údaje nejsou zobrazeny.
REGEDIT4
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"AlcoholAutomount"="c:\program files (x86)\Alcohol Soft\Alcohol 120\AxAutoMntSrv.exe" [2012-01-05 75624]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]
"IMSS"="c:\program files (x86)\Intel\Intel(R) Management Engine Components\IMSS\PIconStartup.exe" [2012-03-06 133400]
"USB3MON"="c:\program files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe" [2012-04-13 291608]
"RotateImage"="c:\program files (x86)\Integrated Camera Driver\X64\RCIMGDIR.exe" [2008-10-30 55808]
"PWMTRV"="c:\progra~2\ThinkPad\UTILIT~1\PWMTR64V.DLL" [2012-05-15 5941344]
"avgnt"="c:\program files (x86)\Avira\AntiVir Desktop\avgnt.exe" [2013-03-21 345312]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorAdmin"= 0 (0x0)
"ConsentPromptBehaviorUser"= 3 (0x3)
"EnableLUA"= 0 (0x0)
"EnableUIADesktopToggle"= 0 (0x0)
"PromptOnSecureDesktop"= 0 (0x0)
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon]
"Userinit"="userinit.exe"
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\windows]
"LoadAppInit_DLLs"=1 (0x1)
"AppInit_DLLs"=c:\windows\SysWOW64\nvinit.dll
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\drivers32]
"mixer3"=wdmaud.drv
.
R2 AxAutoMntSrv;Alcohol Virtual Drive Auto-mount Service;c:\program files (x86)\Alcohol Soft\Alcohol 120\AxAutoMntSrv.exe [2012-01-05 75624]
R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2010-03-18 138576]
R2 HyperW7Svc;HyperW7 Service;c:\program files\Lenovo\RapidBoot\HyperW7Svc64.exe [2012-05-29 144992]
R2 MBAMService;MBAMService;c:\program files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe [2013-03-08 701512]
R2 SkypeUpdate;Skype Updater;c:\program files (x86)\Skype\Updater\Updater.exe [2013-01-08 161536]
R3 AMPPALP;Intel® Centrino® Wireless Bluetooth® + High Speed Protocol;c:\windows\system32\DRIVERS\amppal.sys [2012-01-09 195584]
R3 btmaux;Intel Bluetooth Auxiliary Service;c:\windows\system32\DRIVERS\btmaux.sys [2012-02-13 95232]
R3 btmhsf;btmhsf;c:\windows\system32\DRIVERS\btmhsf.sys [2012-02-13 747008]
R3 dg_ssudbus;SAMSUNG Mobile USB Composite Device Driver (DEVGURU Ver.);c:\windows\system32\DRIVERS\ssudbus.sys [2012-09-20 102368]
R3 Fastboot;Fastboot;c:\windows\system32\DRIVERS\Fastboot.sys [2012-01-17 70416]
R3 HTCAND64;HTC Device Driver;c:\windows\system32\Drivers\ANDROIDUSB.sys [2009-11-02 33736]
R3 htcnprot;HTC NDIS Protocol Driver;c:\windows\system32\DRIVERS\htcnprot.sys [2012-09-25 36928]
R3 ibtfltcoex;ibtfltcoex;c:\windows\system32\DRIVERS\iBtFltCoex.sys [2012-03-21 60928]
R3 intaud_WaveExtensible;Intel WiDi Audio Device;c:\windows\system32\drivers\intelaud.sys [2011-12-21 34200]
R3 MyWiFiDHCPDNS;Wireless PAN DHCP Server;c:\program files\Intel\WiFi\bin\PanDhcpDns.exe [2012-02-26 273168]
R3 ose64;Office 64 Source Engine;c:\program files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2010-01-09 174440]
R3 Power Manager DBC Service;Power Manager DBC Service;c:\program files (x86)\ThinkPad\Utilities\PWMDBSVC.EXE [2012-05-15 1662560]
R3 PwmEWSvc;Cisco EnergyWise Enabler;c:\program files (x86)\ThinkPad\Utilities\PWMEWSVC.EXE [2012-05-15 1665120]
R3 ssudmdm;SAMSUNG Mobile USB Modem Drivers (DEVGURU Ver.);c:\windows\system32\DRIVERS\ssudmdm.sys [2012-09-20 203104]
R3 SwitchBoard;SwitchBoard;c:\program files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [2010-02-19 517096]
R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys [2010-11-21 59392]
R3 TsUsbGD;Remote Desktop Generic USB Device;c:\windows\system32\drivers\TsUsbGD.sys [2010-11-21 31232]
R4 wlcrasvc;Windows Live Mesh remote connections service;c:\program files\Windows Live\Mesh\wlcrasvc.exe [2010-09-23 57184]
S0 iusb3hcs;Intel(R) USB 3.0 Host Controller Switch Driver;c:\windows\system32\DRIVERS\iusb3hcs.sys [2012-04-13 19224]
S0 nvpciflt;nvpciflt;c:\windows\system32\DRIVERS\nvpciflt.sys [2013-03-15 30496]
S0 sptd;sptd;c:\windows\\SystemRoot\System32\Drivers\sptd.sys [x]
S0 TPDIGIMN;TPDIGIMN;c:\windows\System32\DRIVERS\ApsHM64.sys [2011-12-29 25416]
S1 avfwot;avfwot;c:\windows\system32\DRIVERS\avfwot.sys [2013-02-06 141376]
S1 avkmgr;avkmgr;c:\windows\system32\DRIVERS\avkmgr.sys [2013-03-21 28600]
S1 PHCORE;PHCORE;c:\program files\Lenovo\RapidBoot\PHCORE64.SYS [2012-03-26 33344]
S2 AMPPALR3;Intel® Centrino® Wireless Bluetooth® + High Speed Service;c:\program files\Intel\BluetoothHS\BTHSAmpPalService.exe [2012-01-09 659968]
S2 AntiVirFirewallService;Avira FireWall;c:\program files (x86)\Avira\AntiVir Desktop\avfwsvc.exe [2013-03-21 657120]
S2 AntiVirMailService;Avira Mail Protection;c:\program files (x86)\Avira\AntiVir Desktop\avmailc.exe [2013-03-21 374496]
S2 AntiVirSchedulerService;Avira Scheduler;c:\program files (x86)\Avira\AntiVir Desktop\sched.exe [2013-03-21 86752]
S2 AntiVirWebService;Avira Web Protection;c:\program files (x86)\Avira\AntiVir Desktop\AVWEBGRD.EXE [2013-03-21 565472]
S2 Bluetooth Device Monitor;Bluetooth Device Monitor;c:\program files (x86)\Intel\Bluetooth\devmonsrv.exe [2012-03-27 1014096]
S2 Bluetooth OBEX Service;Bluetooth OBEX Service;c:\program files (x86)\Intel\Bluetooth\obexsrv.exe [2012-03-27 1104208]
S2 BTHSSecurityMgr;Intel(R) Centrino(R) Wireless Bluetooth(R) + High Speed Security Service;c:\program files\Intel\BluetoothHS\BTHSSecurityMgr.exe [2012-01-17 135952]
S2 CxAudMsg;Conexant Audio Message Service;c:\windows\system32\CxAudMsg64.exe [2010-12-17 198784]
S2 FastbootService;FastbootService;c:\program files (x86)\Lenovo\RapidBoot HDD Accelerator\FBService.exe [2012-01-17 169776]
S2 FPLService;TrueSuiteService;c:\program files\Lenovo Fingerprint Reader\TrueSuiteService.exe [2012-06-07 328552]
S2 HTCMonitorService;HTCMonitorService;c:\program files (x86)\HTC\HTC Sync Manager\HSMServiceEntry.exe [2012-10-26 87368]
S2 Intel(R) Capability Licensing Service Interface;Intel(R) Capability Licensing Service Interface;c:\program files\Intel\iCLS Client\HeciServer.exe [2012-02-03 628448]
S2 Intel(R) ME Service;Intel(R) ME Service;c:\program files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe [2012-03-06 128280]
S2 jhi_service;Intel(R) Dynamic Application Loader Host Interface Service;c:\program files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [2012-03-06 163608]
S2 LENOVO.CAMMUTE;Lenovo Camera Mute;c:\program files\Lenovo\Communications Utility\CAMMUTE.exe [2012-06-02 58224]
S2 LENOVO.MICMUTE;Lenovo Microphone Mute;c:\program files\LENOVO\HOTKEY\MICMUTE.exe [2011-07-12 101736]
S2 LENOVO.TPKNRSVC;Lenovo Keyboard Noise Reduction;c:\program files\Lenovo\Communications Utility\TPKNRSVC.exe [2012-06-02 61296]
S2 LENOVO.TVTVCAM;ThinkVantage Virtual Camera Controller;c:\program files\Lenovo\Communications Utility\vcamsvc.exe [2012-06-02 179568]
S2 Lenovo.VIRTSCRLSVC;Lenovo Auto Scroll;c:\program files\LENOVO\VIRTSCRL\lvvsst.exe [2011-07-12 133992]
S2 PassThru Service;Internet Pass-Through Service;c:\program files (x86)\HTC\Internet Pass-Through\PassThruSvr.exe [2012-10-08 166912]
S2 SAService;Conexant SmartAudio service;c:\windows\system32\SAsrv.exe [x]
S2 TPHKLOAD;Lenovo Hotkey Client Loader;c:\program files\LENOVO\HOTKEY\TPHKLOAD.exe [2011-07-12 145256]
S2 TPHKSVC;On Screen Display;c:\program files\LENOVO\HOTKEY\TPHKSVC.exe [2011-12-29 144960]
S2 UNS;Intel(R) Management and Security Application User Notification Service;c:\program files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe [2012-03-06 363800]
S2 VIPAppService;VIPAppService;c:\program files (x86)\Symantec\VIP Access Client\VIPAppService.exe [2012-04-19 84080]
S2 ZeroConfigService;Intel(R) PROSet/Wireless Zero Configuration Service;c:\program files\Intel\WiFi\bin\ZeroConfigService.exe [2012-02-26 2669840]
S3 5U877;5U877;c:\windows\system32\DRIVERS\5U877.sys [2012-03-28 216704]
S3 AMPPAL;Intel® Centrino® Wireless Bluetooth® + High Speed Virtual Adapter;c:\windows\system32\DRIVERS\AMPPAL.sys [2012-01-09 195584]
S3 avfwim;AvFw Packet Filter Miniport;c:\windows\system32\DRIVERS\avfwim.sys [2013-02-06 114608]
S3 Bluetooth Media Service;Bluetooth Media Service;c:\program files (x86)\Intel\Bluetooth\mediasrv.exe [2012-03-27 1304912]
S3 IntcDAud;Intel(R) Display Audio;c:\windows\system32\DRIVERS\IntcDAud.sys [2012-06-21 331264]
S3 iusb3hub;Intel(R) USB 3.0 Hub Driver;c:\windows\system32\DRIVERS\iusb3hub.sys [2012-04-13 356632]
S3 iusb3xhc;Intel(R) USB 3.0 eXtensible Host Controller Driver;c:\windows\system32\DRIVERS\iusb3xhc.sys [2012-04-13 789272]
S3 iwdbus;IWD Bus Enumerator;c:\windows\system32\DRIVERS\iwdbus.sys [2011-12-21 25496]
S3 MBAMProtector;MBAMProtector;c:\windows\system32\drivers\mbam.sys [2013-02-28 25928]
S3 RSP2STOR;Realtek PCIE CardReader Driver - P2;c:\windows\system32\DRIVERS\RtsP2Stor.sys [2011-10-27 259688]
S3 RTL8167;Realtek 8167 NT Driver;c:\windows\system32\DRIVERS\Rt64win7.sys [2011-08-23 565352]
S3 SmbDrvIntel;SmbDrvIntel;c:\windows\system32\DRIVERS\Smb_driver_Intel.sys [2012-06-19 27448]
S3 TVTI2C;Lenovo SM bus driver;c:\windows\system32\DRIVERS\Tvti2c.sys [2011-05-29 40248]
S3 tvtvcamd;ThinkVantage Virtual Camera;c:\windows\system32\DRIVERS\tvtvcamd.sys [2011-12-08 27432]
.
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\active setup\installed components\{8A69D345-D564-463c-AFF1-A69D9E530F96}]
2013-03-14 20:57 1629648 ----a-w- c:\program files (x86)\Google\Chrome\Application\25.0.1364.172\Installer\chrmstp.exe
.
Obsah adresáře 'Naplánované úlohy'
.
2013-03-30 c:\windows\Tasks\Adobe Flash Player Updater.job
- c:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2012-11-01 18:51]
.
2013-03-30 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
- c:\program files (x86)\Google\Update\GoogleUpdate.exe [2012-09-27 17:55]
.
2013-03-30 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
- c:\program files (x86)\Google\Update\GoogleUpdate.exe [2012-09-27 17:55]
.
2013-03-30 c:\windows\Tasks\ISM-UpdateService-4e00205a-2ab1-4423-8f77-cc25b82cde1d-Logon.job
- c:\program files (x86)\Intel\Intel(R) ME FW Recovery Agent\bin\Bootstrap.exe [2011-11-25 20:41]
.
2013-03-30 c:\windows\Tasks\ISM-UpdateService-4e00205a-2ab1-4423-8f77-cc25b82cde1d.job
- c:\program files (x86)\Intel\Intel(R) ME FW Recovery Agent\bin\Bootstrap.exe [2011-11-25 20:41]
.
.
--------- X64 Entries -----------
.
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\SugarSyncBackedUp]
@="{0C4A258A-3F3B-4FFF-80A7-9B3BEC139472}"
[HKEY_CLASSES_ROOT\CLSID\{0C4A258A-3F3B-4FFF-80A7-9B3BEC139472}]
2012-05-14 17:39 463952 ----a-w- c:\program files (x86)\SugarSync\SugarSyncShellExt_x64.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\SugarSyncPending]
@="{62CCD8E3-9C21-41E1-B55E-1E26DFC68511}"
[HKEY_CLASSES_ROOT\CLSID\{62CCD8E3-9C21-41E1-B55E-1E26DFC68511}]
2012-05-14 17:39 463952 ----a-w- c:\program files (x86)\SugarSync\SugarSyncShellExt_x64.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\SugarSyncRoot]
@="{A759AFF6-5851-457D-A540-F4ECED148351}"
[HKEY_CLASSES_ROOT\CLSID\{A759AFF6-5851-457D-A540-F4ECED148351}]
2012-05-14 17:39 463952 ----a-w- c:\program files (x86)\SugarSync\SugarSyncShellExt_x64.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\SugarSyncShared]
@="{1574C9EF-7D58-488F-B358-8B78C1538F51}"
[HKEY_CLASSES_ROOT\CLSID\{1574C9EF-7D58-488F-B358-8B78C1538F51}]
2012-05-14 17:39 463952 ----a-w- c:\program files (x86)\SugarSync\SugarSyncShellExt_x64.dll
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"IgfxTray"="c:\windows\system32\igfxtray.exe" [2012-06-25 170304]
"HotKeysCmds"="c:\windows\system32\hkcmd.exe" [2012-06-25 398656]
"Persistence"="c:\windows\system32\igfxpers.exe" [2012-06-25 440128]
"BLEServicesCtrl"="c:\program files (x86)\Intel\Bluetooth\BleServicesCtrl.exe" [2012-03-15 178960]
"BTMTrayAgent"="c:\program files (x86)\Intel\Bluetooth\btmshell.dll" [2012-03-27 11407120]
"cAudioFilterAgent"="c:\program files\Conexant\cAudioFilterAgent\cAudioFilterAgent64.exe" [2012-03-01 564352]
"ForteConfig"="c:\program files\Conexant\ForteConfig\fmapp.exe" [2010-10-26 49056]
"SmartAudio"="c:\program files\CONEXANT\SAII\SACpl.exe" [2012-02-21 1654400]
"TpShocks"="TpShocks.exe" [2012-02-25 382528]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
"AppInit_DLLs"=c:\windows\System32\nvinitx.dll
.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Svchost - LocalService
FontCache
.
------- Doplňkový sken -------
.
uStart Page = hxxp://www.google.com/ig/redirectdomain?brand=LENP&bmod=LENP
uLocal Page = c:\windows\system32\blank.htm
mLocal Page = c:\windows\SysWOW64\blank.htm
IE: Add to Evernote 4.0 - c:\program files (x86)\Evernote\Evernote\EvernoteIE.dll/204
IE: E&xportovat do aplikace Microsoft Excel - c:\progra~1\MICROS~2\Office14\EXCEL.EXE/3000
IE: Od&eslat do aplikace OneNote - c:\progra~1\MICROS~2\Office14\ONBttnIE.dll/105
LSP: c:\program files (x86)\Avira\AntiVir Desktop\avsda.dll
TCP: DhcpNameServer = 10.10.10.10 10.10.11.11
FF - ProfilePath - c:\users\Majk\AppData\Roaming\Mozilla\Firefox\Profiles\p80ls2zr.default\
FF - prefs.js: browser.search.selectedEngine - Google
FF - prefs.js: browser.startup.homepage - hxxp://www.seznam.cz/
FF - ExtSQL: 2013-03-02 11:51; {bee6eb20-01e0-ebd1-da83-080329fb9a3a}; c:\users\Majk\AppData\Roaming\Mozilla\Firefox\Profiles\p80ls2zr.default\extensions\{bee6eb20-01e0-ebd1-da83-080329fb9a3a}
.
- - - - NEPLATNÉ POLOŽKY ODSTRANĚNÉ Z REGISTRU - - - -
.
Toolbar-Locked - (no file)
Wow6432Node-HKCU-Run-AdobeBridge - (no file)
HKLM_Wow6432Node-ActiveSetup-{2D46B6DC-2207-486B-B523-A557E6D54B47} - start
Toolbar-Locked - (no file)
HKLM-Run-SynTPEnh - c:\program files (x86)\Synaptics\SynTP\SynTPEnh.exe
.
.
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Fastboot]
"ImagePath"=multi:"System32\DRIVERS\Fastboot.sys\00"
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Fastboot]
"ImagePath"=multi:"System32\DRIVERS\Fastboot.sys\00"
.
--------------------- ZAMKNUTÉ KLÍČE V REGISTRU ---------------------
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{19114156-8E9A-4D4E-9EE9-17A0E48D3BBB}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil10c.exe,-101"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{19114156-8E9A-4D4E-9EE9-17A0E48D3BBB}\Elevation]
"Enabled"=dword:00000001
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{19114156-8E9A-4D4E-9EE9-17A0E48D3BBB}\LocalServer32]
@="c:\\Windows\\SysWow64\\Macromed\\Flash\\FlashUtil10c.exe"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{19114156-8E9A-4D4E-9EE9-17A0E48D3BBB}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@="Shockwave Flash Object"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\InprocServer32]
@="c:\\Windows\\SysWow64\\Macromed\\Flash\\Flash10c.ocx"
"ThreadingModel"="Apartment"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\MiscStatus]
@="0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ProgID]
@="ShockwaveFlash.ShockwaveFlash.10"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
@="c:\\Windows\\SysWow64\\Macromed\\Flash\\Flash10c.ocx, 1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\TypeLib]
@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\Version]
@="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
@="ShockwaveFlash.ShockwaveFlash"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@="Macromedia Flash Factory Object"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\InprocServer32]
@="c:\\Windows\\SysWow64\\Macromed\\Flash\\Flash10c.ocx"
"ThreadingModel"="Apartment"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ProgID]
@="FlashFactory.FlashFactory.1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
@="c:\\Windows\\SysWow64\\Macromed\\Flash\\Flash10c.ocx, 1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\TypeLib]
@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\Version]
@="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
@="FlashFactory.FlashFactory"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{1D4C8A81-B7AC-460A-8C23-98713C41D6B3}]
@Denied: (A 2) (Everyone)
@="IFlashBroker3"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{1D4C8A81-B7AC-460A-8C23-98713C41D6B3}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{1D4C8A81-B7AC-460A-8C23-98713C41D6B3}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\VideoLAN.VLCPlugin.*1*]
@="?????????????????? v1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\VideoLAN.VLCPlugin.*1*\CLSID]
@="{E23FE9C6-778E-49D4-B537-38FCDE4887D8}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\VideoLAN.VLCPlugin.*2*]
@="?????????????????? v2"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\VideoLAN.VLCPlugin.*2*\CLSID]
@="{9BE31822-FDAD-461B-AD51-BE1D1C159921}"
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0000\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0001\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0002\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\PCW\Security]
@Denied: (Full) (Everyone)
.
Celkový čas: 2013-03-30 18:54:00
ComboFix-quarantined-files.txt 2013-03-30 17:53
.
Před spuštěním: Volných bajtů: 554 678 370 304
Po spuštění: Volných bajtů: 554 285 391 872
.
- - End Of File - - 48D9FE6ABA362F6584E20A593A1362E7

[Roli]

CF se neptal, zda nainstalovat Konzoli pro zotavení.

No jo no nikdo není dokonalý


Pokud jsi tak ještě neučinil, přesuň Combofix na plochu

otevři si Poznámkový blok

do něj zkopíruj skript z následujícího okna:

Kód: Vybrat vše

RegLock::
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0000\AllUserSettings]
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0001\AllUserSettings]
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0002\AllUserSettings]
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\PCW\Security]

ulož Tebou vytvořený TXT soubor jako CFScript.txt na plochu,

po uložení uchop vytvořený skript levým myšítkem a přesuň ho nad ikonu Combofixu, kde ho upustíš:



Po aplikaci na Tebe vypadne další log, zkopíruj ho sem

Upozornění : může se stát, že po aplikaci skriptu a restartu Windows nenaběhnou,

v tom případě znovu restartuj a přitom mačkej F8 poté zvol Poslední známou funkční konfiguraci

[melo15]

ComboFix 13-03-31.01 - Majk 31.03.2013 12:36:07.3.2 - x64
Microsoft Windows 7 Home Premium 6.1.7601.1.1250.420.1029.18.3690.2358 [GMT 2:00]
Spuštěný z: c:\users\Majk\Desktop\ComboFix.exe
Použité ovládací přepínače :: c:\users\Majk\Desktop\CFScript.txt
AV: Avira Desktop *Disabled/Updated* {F67B4DE5-C0B4-6C3F-0EFF-6C83BD5D0C2C}
SP: Avira Desktop *Disabled/Updated* {4D1AAC01-E68E-63B1-344F-57F1C6DA4691}
SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.
.
((((((((((((((((((((((((((((((((((((((( Ostatní výmazy )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
c:\windows\SysWow64\muzapp.exe
.
.
((((((((((((((((((((((((( Soubory vytvořené od 2013-02-28 do 2013-03-31 )))))))))))))))))))))))))))))))
.
.
2013-03-31 10:53 . 2013-03-31 10:53 -------- d-----w- c:\users\UpdatusUser\AppData\Local\temp
2013-03-31 10:53 . 2013-03-31 10:53 -------- d-----w- c:\users\Default\AppData\Local\temp
2013-03-30 18:34 . 2013-03-30 18:33 95648 ----a-w- c:\windows\SysWow64\WindowsAccessBridge-32.dll
2013-03-30 18:33 . 2013-03-30 18:33 -------- d-----w- c:\program files (x86)\Java
2013-03-30 12:40 . 2013-03-30 12:40 -------- d-----w- c:\program files (x86)\AGEIA Technologies
2013-03-29 17:25 . 2013-03-30 18:05 -------- d-----w- c:\program files\trend micro
2013-03-29 16:44 . 2013-03-29 16:44 -------- d-----w- c:\users\Majk\AppData\Roaming\Malwarebytes
2013-03-29 16:44 . 2013-03-29 16:44 -------- d-----w- c:\programdata\Malwarebytes
2013-03-29 16:44 . 2013-03-29 16:44 -------- d-----w- c:\program files (x86)\Malwarebytes' Anti-Malware
2013-03-29 16:44 . 2013-02-28 15:00 25928 ----a-w- c:\windows\system32\drivers\mbam.sys
2013-03-29 16:41 . 2013-03-29 17:25 -------- d-----w- C:\rsit
2013-03-25 09:33 . 2013-03-25 09:33 -------- d-----w- C:\Games
2013-03-23 10:46 . 2013-03-23 10:46 -------- d-----w- c:\program files (x86)\Common Files\Lingea Shared
2013-03-23 10:46 . 2013-03-23 10:46 -------- d-----w- c:\program files (x86)\Lingea
2013-03-21 12:11 . 2013-03-21 12:11 28600 ----a-w- c:\windows\system32\drivers\avkmgr.sys
2013-03-21 12:11 . 2013-03-21 12:11 130016 ----a-w- c:\windows\system32\drivers\avipbb.sys
2013-03-21 12:11 . 2013-03-21 12:11 100712 ----a-w- c:\windows\system32\drivers\avgntflt.sys
2013-03-15 16:51 . 2013-03-15 16:51 9728 ---ha-w- c:\windows\SysWow64\api-ms-win-downlevel-shlwapi-l1-1-0.dll
2013-03-15 16:48 . 2013-02-12 04:12 19968 ----a-w- c:\windows\system32\drivers\usb8023.sys
2013-03-13 08:32 . 2013-03-13 08:32 -------- d-----w- c:\program files\Microsoft Silverlight
2013-03-13 08:32 . 2013-03-13 08:32 -------- d-----w- c:\program files (x86)\Microsoft Silverlight
2013-03-06 14:14 . 2013-03-06 14:14 44544 ----a-w- c:\windows\SysWow64\agremove.exe
2013-03-04 16:01 . 2013-03-04 16:01 -------- d-----w- c:\program files (x86)\Common Files\Skype
2013-03-04 16:01 . 2013-03-04 16:01 -------- d-----r- c:\program files (x86)\Skype
.
.
.
(((((((((((((((((((((((((((((((((((((((( Find3M výpis ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2013-03-30 18:33 . 2012-11-03 08:27 861088 ----a-w- c:\windows\SysWow64\npDeployJava1.dll
2013-03-30 18:33 . 2012-11-03 08:27 782240 ----a-w- c:\windows\SysWow64\deployJava1.dll
2013-03-15 05:53 . 2012-09-27 17:40 2864144 ----a-w- c:\windows\system32\nvapi64.dll
2013-03-15 05:53 . 2012-09-27 17:40 250504 ----a-w- c:\windows\system32\nvinitx.dll
2013-03-15 05:53 . 2012-09-27 17:40 205184 ----a-w- c:\windows\SysWow64\nvinit.dll
2013-03-15 05:53 . 2012-09-27 17:40 1118776 ----a-w- c:\windows\system32\nvumdshimx.dll
2013-03-15 04:16 . 2012-09-27 17:41 3477280 ----a-w- c:\windows\system32\nvsvc64.dll
2013-03-15 04:16 . 2012-09-27 17:41 6398240 ----a-w- c:\windows\system32\nvcpl.dll
2013-03-15 04:16 . 2012-09-27 17:41 877856 ----a-w- c:\windows\system32\nvvsvc.exe
2013-03-15 04:16 . 2012-09-27 17:41 76064 ----a-w- c:\windows\system32\nv3dappshextr.dll
2013-03-15 04:16 . 2012-09-27 17:41 63776 ----a-w- c:\windows\system32\nvshext.dll
2013-03-15 04:16 . 2012-09-27 17:41 568608 ----a-w- c:\windows\SysWow64\oemdspif.dll
2013-03-15 04:16 . 2012-09-27 17:41 2555680 ----a-w- c:\windows\system32\nvsvcr.dll
2013-03-15 04:16 . 2012-09-27 17:41 237856 ----a-w- c:\windows\system32\nvmctray.dll
2013-03-15 04:16 . 2012-09-27 17:41 1016096 ----a-w- c:\windows\system32\nv3dappshext.dll
2013-03-13 18:51 . 2012-11-01 23:37 73432 ----a-w- c:\windows\SysWow64\FlashPlayerCPLApp.cpl
2013-03-13 18:51 . 2012-11-01 23:37 693976 ----a-w- c:\windows\SysWow64\FlashPlayerApp.exe
2013-03-13 16:24 . 2012-09-27 17:41 3065455 ----a-w- c:\windows\system32\nvcoproc.bin
2013-03-13 08:37 . 2012-11-02 09:20 72013344 ----a-w- c:\windows\system32\MRT.exe
2013-03-06 14:10 . 2012-11-03 14:33 17920 ----a-w- c:\windows\system32\rpcnetp.exe
2013-03-06 14:10 . 2012-11-03 08:40 52736 ----a-w- c:\windows\SysWow64\rpcnet.dll
2013-02-25 18:54 . 2013-02-25 18:54 75776 ----a-w- c:\windows\cadkasdeinst01e.exe
2013-02-06 10:22 . 2012-11-03 11:14 141376 ----a-w- c:\windows\system32\drivers\avfwot.sys
2013-02-06 10:22 . 2012-11-03 11:14 114608 ----a-w- c:\windows\system32\drivers\avfwim.sys
2013-01-05 05:53 . 2013-02-13 10:13 5553512 ----a-w- c:\windows\system32\ntoskrnl.exe
2013-01-05 05:00 . 2013-02-13 10:13 3967848 ----a-w- c:\windows\SysWow64\ntkrnlpa.exe
2013-01-05 05:00 . 2013-02-13 10:13 3913064 ----a-w- c:\windows\SysWow64\ntoskrnl.exe
2013-01-04 05:46 . 2013-02-13 10:13 215040 ----a-w- c:\windows\system32\winsrv.dll
2013-01-04 04:51 . 2013-02-13 10:13 5120 ----a-w- c:\windows\SysWow64\wow32.dll
2013-01-04 04:43 . 2013-02-13 10:13 44032 ----a-w- c:\windows\apppatch\acwow64.dll
2013-01-04 03:26 . 2013-02-13 10:13 3153408 ----a-w- c:\windows\system32\win32k.sys
2013-01-04 02:47 . 2013-02-13 10:13 25600 ----a-w- c:\windows\SysWow64\setup16.exe
2013-01-04 02:47 . 2013-02-13 10:13 7680 ----a-w- c:\windows\SysWow64\instnm.exe
2013-01-04 02:47 . 2013-02-13 10:13 2048 ----a-w- c:\windows\SysWow64\user.exe
2013-01-04 02:47 . 2013-02-13 10:13 14336 ----a-w- c:\windows\SysWow64\ntvdm64.dll
2013-01-03 06:00 . 2013-02-13 10:13 1913192 ----a-w- c:\windows\system32\drivers\tcpip.sys
2013-01-03 06:00 . 2013-02-13 10:13 288088 ----a-w- c:\windows\system32\drivers\FWPKCLNT.SYS
.
.
(((((((((((((((((((((((((((((((((( Spouštěcí body v registru )))))))))))))))))))))))))))))))))))))))))))))
.
.
*Poznámka* prázdné záznamy a legitimní výchozí údaje nejsou zobrazeny.
REGEDIT4
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"AlcoholAutomount"="c:\program files (x86)\Alcohol Soft\Alcohol 120\AxAutoMntSrv.exe" [2012-01-05 75624]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]
"IMSS"="c:\program files (x86)\Intel\Intel(R) Management Engine Components\IMSS\PIconStartup.exe" [2012-03-06 133400]
"USB3MON"="c:\program files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe" [2012-04-13 291608]
"RotateImage"="c:\program files (x86)\Integrated Camera Driver\X64\RCIMGDIR.exe" [2008-10-30 55808]
"PWMTRV"="c:\progra~2\ThinkPad\UTILIT~1\PWMTR64V.DLL" [2012-05-15 5941344]
"SunJavaUpdateSched"="c:\program files (x86)\Common Files\Java\Java Update\jusched.exe" [2012-07-03 252848]
"avgnt"="c:\program files (x86)\Avira\AntiVir Desktop\avgnt.exe" [2013-03-21 345312]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorAdmin"= 0 (0x0)
"ConsentPromptBehaviorUser"= 3 (0x3)
"EnableLUA"= 0 (0x0)
"EnableUIADesktopToggle"= 0 (0x0)
"PromptOnSecureDesktop"= 0 (0x0)
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\windows]
"LoadAppInit_DLLs"=1 (0x1)
"AppInit_DLLs"=c:\windows\SysWOW64\nvinit.dll
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\drivers32]
"mixer3"=wdmaud.drv
.
R2 AxAutoMntSrv;Alcohol Virtual Drive Auto-mount Service;c:\program files (x86)\Alcohol Soft\Alcohol 120\AxAutoMntSrv.exe [2012-01-05 75624]
R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2010-03-18 138576]
R2 HyperW7Svc;HyperW7 Service;c:\program files\Lenovo\RapidBoot\HyperW7Svc64.exe [2012-05-29 144992]
R2 MBAMService;MBAMService;c:\program files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe [2013-03-08 701512]
R2 SkypeUpdate;Skype Updater;c:\program files (x86)\Skype\Updater\Updater.exe [2013-01-08 161536]
R3 AMPPALP;Intel® Centrino® Wireless Bluetooth® + High Speed Protocol;c:\windows\system32\DRIVERS\amppal.sys [2012-01-09 195584]
R3 btmaux;Intel Bluetooth Auxiliary Service;c:\windows\system32\DRIVERS\btmaux.sys [2012-02-13 95232]
R3 btmhsf;btmhsf;c:\windows\system32\DRIVERS\btmhsf.sys [2012-02-13 747008]
R3 dg_ssudbus;SAMSUNG Mobile USB Composite Device Driver (DEVGURU Ver.);c:\windows\system32\DRIVERS\ssudbus.sys [2012-09-20 102368]
R3 Fastboot;Fastboot;c:\windows\system32\DRIVERS\Fastboot.sys [2012-01-17 70416]
R3 HTCAND64;HTC Device Driver;c:\windows\system32\Drivers\ANDROIDUSB.sys [2009-11-02 33736]
R3 htcnprot;HTC NDIS Protocol Driver;c:\windows\system32\DRIVERS\htcnprot.sys [2012-09-25 36928]
R3 ibtfltcoex;ibtfltcoex;c:\windows\system32\DRIVERS\iBtFltCoex.sys [2012-03-21 60928]
R3 intaud_WaveExtensible;Intel WiDi Audio Device;c:\windows\system32\drivers\intelaud.sys [2011-12-21 34200]
R3 MyWiFiDHCPDNS;Wireless PAN DHCP Server;c:\program files\Intel\WiFi\bin\PanDhcpDns.exe [2012-02-26 273168]
R3 ose64;Office 64 Source Engine;c:\program files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2010-01-09 174440]
R3 Power Manager DBC Service;Power Manager DBC Service;c:\program files (x86)\ThinkPad\Utilities\PWMDBSVC.EXE [2012-05-15 1662560]
R3 PwmEWSvc;Cisco EnergyWise Enabler;c:\program files (x86)\ThinkPad\Utilities\PWMEWSVC.EXE [2012-05-15 1665120]
R3 ssudmdm;SAMSUNG Mobile USB Modem Drivers (DEVGURU Ver.);c:\windows\system32\DRIVERS\ssudmdm.sys [2012-09-20 203104]
R3 SwitchBoard;SwitchBoard;c:\program files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [2010-02-19 517096]
R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys [2010-11-21 59392]
R3 TsUsbGD;Remote Desktop Generic USB Device;c:\windows\system32\drivers\TsUsbGD.sys [2010-11-21 31232]
R4 wlcrasvc;Windows Live Mesh remote connections service;c:\program files\Windows Live\Mesh\wlcrasvc.exe [2010-09-23 57184]
S0 iusb3hcs;Intel(R) USB 3.0 Host Controller Switch Driver;c:\windows\system32\DRIVERS\iusb3hcs.sys [2012-04-13 19224]
S0 nvpciflt;nvpciflt;c:\windows\system32\DRIVERS\nvpciflt.sys [2013-03-15 30496]
S0 sptd;sptd;c:\windows\\SystemRoot\System32\Drivers\sptd.sys [x]
S0 TPDIGIMN;TPDIGIMN;c:\windows\System32\DRIVERS\ApsHM64.sys [2011-12-29 25416]
S1 avfwot;avfwot;c:\windows\system32\DRIVERS\avfwot.sys [2013-02-06 141376]
S1 avkmgr;avkmgr;c:\windows\system32\DRIVERS\avkmgr.sys [2013-03-21 28600]
S1 PHCORE;PHCORE;c:\program files\Lenovo\RapidBoot\PHCORE64.SYS [2012-03-26 33344]
S2 AMPPALR3;Intel® Centrino® Wireless Bluetooth® + High Speed Service;c:\program files\Intel\BluetoothHS\BTHSAmpPalService.exe [2012-01-09 659968]
S2 AntiVirFirewallService;Avira FireWall;c:\program files (x86)\Avira\AntiVir Desktop\avfwsvc.exe [2013-03-21 657120]
S2 AntiVirMailService;Avira Mail Protection;c:\program files (x86)\Avira\AntiVir Desktop\avmailc.exe [2013-03-21 374496]
S2 AntiVirSchedulerService;Avira Scheduler;c:\program files (x86)\Avira\AntiVir Desktop\sched.exe [2013-03-21 86752]
S2 AntiVirWebService;Avira Web Protection;c:\program files (x86)\Avira\AntiVir Desktop\AVWEBGRD.EXE [2013-03-21 565472]
S2 Bluetooth Device Monitor;Bluetooth Device Monitor;c:\program files (x86)\Intel\Bluetooth\devmonsrv.exe [2012-03-27 1014096]
S2 Bluetooth OBEX Service;Bluetooth OBEX Service;c:\program files (x86)\Intel\Bluetooth\obexsrv.exe [2012-03-27 1104208]
S2 BTHSSecurityMgr;Intel(R) Centrino(R) Wireless Bluetooth(R) + High Speed Security Service;c:\program files\Intel\BluetoothHS\BTHSSecurityMgr.exe [2012-01-17 135952]
S2 CxAudMsg;Conexant Audio Message Service;c:\windows\system32\CxAudMsg64.exe [2010-12-17 198784]
S2 FastbootService;FastbootService;c:\program files (x86)\Lenovo\RapidBoot HDD Accelerator\FBService.exe [2012-01-17 169776]
S2 FPLService;TrueSuiteService;c:\program files\Lenovo Fingerprint Reader\TrueSuiteService.exe [2012-06-07 328552]
S2 HTCMonitorService;HTCMonitorService;c:\program files (x86)\HTC\HTC Sync Manager\HSMServiceEntry.exe [2012-10-26 87368]
S2 Intel(R) Capability Licensing Service Interface;Intel(R) Capability Licensing Service Interface;c:\program files\Intel\iCLS Client\HeciServer.exe [2012-02-03 628448]
S2 Intel(R) ME Service;Intel(R) ME Service;c:\program files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe [2012-03-06 128280]
S2 jhi_service;Intel(R) Dynamic Application Loader Host Interface Service;c:\program files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [2012-03-06 163608]
S2 LENOVO.CAMMUTE;Lenovo Camera Mute;c:\program files\Lenovo\Communications Utility\CAMMUTE.exe [2012-06-02 58224]
S2 LENOVO.MICMUTE;Lenovo Microphone Mute;c:\program files\LENOVO\HOTKEY\MICMUTE.exe [2011-07-12 101736]
S2 LENOVO.TPKNRSVC;Lenovo Keyboard Noise Reduction;c:\program files\Lenovo\Communications Utility\TPKNRSVC.exe [2012-06-02 61296]
S2 LENOVO.TVTVCAM;ThinkVantage Virtual Camera Controller;c:\program files\Lenovo\Communications Utility\vcamsvc.exe [2012-06-02 179568]
S2 Lenovo.VIRTSCRLSVC;Lenovo Auto Scroll;c:\program files\LENOVO\VIRTSCRL\lvvsst.exe [2011-07-12 133992]
S2 PassThru Service;Internet Pass-Through Service;c:\program files (x86)\HTC\Internet Pass-Through\PassThruSvr.exe [2012-10-08 166912]
S2 SAService;Conexant SmartAudio service;c:\windows\system32\SAsrv.exe [x]
S2 TPHKLOAD;Lenovo Hotkey Client Loader;c:\program files\LENOVO\HOTKEY\TPHKLOAD.exe [2011-07-12 145256]
S2 TPHKSVC;On Screen Display;c:\program files\LENOVO\HOTKEY\TPHKSVC.exe [2011-12-29 144960]
S2 UNS;Intel(R) Management and Security Application User Notification Service;c:\program files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe [2012-03-06 363800]
S2 VIPAppService;VIPAppService;c:\program files (x86)\Symantec\VIP Access Client\VIPAppService.exe [2012-04-19 84080]
S2 ZeroConfigService;Intel(R) PROSet/Wireless Zero Configuration Service;c:\program files\Intel\WiFi\bin\ZeroConfigService.exe [2012-02-26 2669840]
S3 5U877;5U877;c:\windows\system32\DRIVERS\5U877.sys [2012-03-28 216704]
S3 AMPPAL;Intel® Centrino® Wireless Bluetooth® + High Speed Virtual Adapter;c:\windows\system32\DRIVERS\AMPPAL.sys [2012-01-09 195584]
S3 avfwim;AvFw Packet Filter Miniport;c:\windows\system32\DRIVERS\avfwim.sys [2013-02-06 114608]
S3 Bluetooth Media Service;Bluetooth Media Service;c:\program files (x86)\Intel\Bluetooth\mediasrv.exe [2012-03-27 1304912]
S3 IntcDAud;Intel(R) Display Audio;c:\windows\system32\DRIVERS\IntcDAud.sys [2012-06-21 331264]
S3 iusb3hub;Intel(R) USB 3.0 Hub Driver;c:\windows\system32\DRIVERS\iusb3hub.sys [2012-04-13 356632]
S3 iusb3xhc;Intel(R) USB 3.0 eXtensible Host Controller Driver;c:\windows\system32\DRIVERS\iusb3xhc.sys [2012-04-13 789272]
S3 iwdbus;IWD Bus Enumerator;c:\windows\system32\DRIVERS\iwdbus.sys [2011-12-21 25496]
S3 MBAMProtector;MBAMProtector;c:\windows\system32\drivers\mbam.sys [2013-02-28 25928]
S3 RSP2STOR;Realtek PCIE CardReader Driver - P2;c:\windows\system32\DRIVERS\RtsP2Stor.sys [2011-10-27 259688]
S3 RTL8167;Realtek 8167 NT Driver;c:\windows\system32\DRIVERS\Rt64win7.sys [2011-08-23 565352]
S3 SmbDrvIntel;SmbDrvIntel;c:\windows\system32\DRIVERS\Smb_driver_Intel.sys [2012-06-19 27448]
S3 TVTI2C;Lenovo SM bus driver;c:\windows\system32\DRIVERS\Tvti2c.sys [2011-05-29 40248]
S3 tvtvcamd;ThinkVantage Virtual Camera;c:\windows\system32\DRIVERS\tvtvcamd.sys [2011-12-08 27432]
.
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\active setup\installed components\{8A69D345-D564-463c-AFF1-A69D9E530F96}]
2013-03-14 20:57 1629648 ----a-w- c:\program files (x86)\Google\Chrome\Application\25.0.1364.172\Installer\chrmstp.exe
.
Obsah adresáře 'Naplánované úlohy'
.
2013-03-31 c:\windows\Tasks\Adobe Flash Player Updater.job
- c:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2012-11-01 18:51]
.
2013-03-31 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
- c:\program files (x86)\Google\Update\GoogleUpdate.exe [2012-09-27 17:55]
.
2013-03-31 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
- c:\program files (x86)\Google\Update\GoogleUpdate.exe [2012-09-27 17:55]
.
2013-03-31 c:\windows\Tasks\ISM-UpdateService-4e00205a-2ab1-4423-8f77-cc25b82cde1d-Logon.job
- c:\program files (x86)\Intel\Intel(R) ME FW Recovery Agent\bin\Bootstrap.exe [2011-11-25 20:41]
.
2013-03-31 c:\windows\Tasks\ISM-UpdateService-4e00205a-2ab1-4423-8f77-cc25b82cde1d.job
- c:\program files (x86)\Intel\Intel(R) ME FW Recovery Agent\bin\Bootstrap.exe [2011-11-25 20:41]
.
.
--------- X64 Entries -----------
.
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\SugarSyncBackedUp]
@="{0C4A258A-3F3B-4FFF-80A7-9B3BEC139472}"
[HKEY_CLASSES_ROOT\CLSID\{0C4A258A-3F3B-4FFF-80A7-9B3BEC139472}]
2012-05-14 17:39 463952 ----a-w- c:\program files (x86)\SugarSync\SugarSyncShellExt_x64.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\SugarSyncPending]
@="{62CCD8E3-9C21-41E1-B55E-1E26DFC68511}"
[HKEY_CLASSES_ROOT\CLSID\{62CCD8E3-9C21-41E1-B55E-1E26DFC68511}]
2012-05-14 17:39 463952 ----a-w- c:\program files (x86)\SugarSync\SugarSyncShellExt_x64.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\SugarSyncRoot]
@="{A759AFF6-5851-457D-A540-F4ECED148351}"
[HKEY_CLASSES_ROOT\CLSID\{A759AFF6-5851-457D-A540-F4ECED148351}]
2012-05-14 17:39 463952 ----a-w- c:\program files (x86)\SugarSync\SugarSyncShellExt_x64.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\SugarSyncShared]
@="{1574C9EF-7D58-488F-B358-8B78C1538F51}"
[HKEY_CLASSES_ROOT\CLSID\{1574C9EF-7D58-488F-B358-8B78C1538F51}]
2012-05-14 17:39 463952 ----a-w- c:\program files (x86)\SugarSync\SugarSyncShellExt_x64.dll
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"IgfxTray"="c:\windows\system32\igfxtray.exe" [2012-06-25 170304]
"HotKeysCmds"="c:\windows\system32\hkcmd.exe" [2012-06-25 398656]
"Persistence"="c:\windows\system32\igfxpers.exe" [2012-06-25 440128]
"BLEServicesCtrl"="c:\program files (x86)\Intel\Bluetooth\BleServicesCtrl.exe" [2012-03-15 178960]
"BTMTrayAgent"="c:\program files (x86)\Intel\Bluetooth\btmshell.dll" [2012-03-27 11407120]
"cAudioFilterAgent"="c:\program files\Conexant\cAudioFilterAgent\cAudioFilterAgent64.exe" [2012-03-01 564352]
"ForteConfig"="c:\program files\Conexant\ForteConfig\fmapp.exe" [2010-10-26 49056]
"SmartAudio"="c:\program files\CONEXANT\SAII\SACpl.exe" [2012-02-21 1654400]
"TpShocks"="TpShocks.exe" [2012-02-25 382528]
"SynTPEnh"="c:\program files (x86)\Synaptics\SynTP\SynTPEnh.exe" [BU]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
"AppInit_DLLs"=c:\windows\System32\nvinitx.dll
.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Svchost - LocalService
FontCache
.
------- Doplňkový sken -------
.
uStart Page = hxxp://www.google.com/ig/redirectdomain?brand=LENP&bmod=LENP
uLocal Page = c:\windows\system32\blank.htm
mLocal Page = c:\windows\SysWOW64\blank.htm
IE: Add to Evernote 4.0 - c:\program files (x86)\Evernote\Evernote\EvernoteIE.dll/204
IE: E&xportovat do aplikace Microsoft Excel - c:\progra~1\MICROS~2\Office14\EXCEL.EXE/3000
IE: Od&eslat do aplikace OneNote - c:\progra~1\MICROS~2\Office14\ONBttnIE.dll/105
LSP: c:\program files (x86)\Avira\AntiVir Desktop\avsda.dll
TCP: DhcpNameServer = 10.10.10.10 10.10.11.11
FF - ProfilePath - c:\users\Majk\AppData\Roaming\Mozilla\Firefox\Profiles\p80ls2zr.default\
FF - prefs.js: browser.search.selectedEngine - Google
FF - prefs.js: browser.startup.homepage - hxxp://www.seznam.cz/
FF - ExtSQL: 2013-03-02 11:51; {bee6eb20-01e0-ebd1-da83-080329fb9a3a}; c:\users\Majk\AppData\Roaming\Mozilla\Firefox\Profiles\p80ls2zr.default\extensions\{bee6eb20-01e0-ebd1-da83-080329fb9a3a}
.
- - - - NEPLATNÉ POLOŽKY ODSTRANĚNÉ Z REGISTRU - - - -
.
Toolbar-Locked - (no file)
.
.
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Fastboot]
"ImagePath"=multi:"System32\DRIVERS\Fastboot.sys\00"
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Fastboot]
"ImagePath"=multi:"System32\DRIVERS\Fastboot.sys\00"
.
--------------------- ZAMKNUTÉ KLÍČE V REGISTRU ---------------------
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{19114156-8E9A-4D4E-9EE9-17A0E48D3BBB}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil10c.exe,-101"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{19114156-8E9A-4D4E-9EE9-17A0E48D3BBB}\Elevation]
"Enabled"=dword:00000001
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{19114156-8E9A-4D4E-9EE9-17A0E48D3BBB}\LocalServer32]
@="c:\\Windows\\SysWow64\\Macromed\\Flash\\FlashUtil10c.exe"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{19114156-8E9A-4D4E-9EE9-17A0E48D3BBB}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@="Shockwave Flash Object"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\InprocServer32]
@="c:\\Windows\\SysWow64\\Macromed\\Flash\\Flash10c.ocx"
"ThreadingModel"="Apartment"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\MiscStatus]
@="0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ProgID]
@="ShockwaveFlash.ShockwaveFlash.10"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
@="c:\\Windows\\SysWow64\\Macromed\\Flash\\Flash10c.ocx, 1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\TypeLib]
@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\Version]
@="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
@="ShockwaveFlash.ShockwaveFlash"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@="Macromedia Flash Factory Object"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\InprocServer32]
@="c:\\Windows\\SysWow64\\Macromed\\Flash\\Flash10c.ocx"
"ThreadingModel"="Apartment"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ProgID]
@="FlashFactory.FlashFactory.1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
@="c:\\Windows\\SysWow64\\Macromed\\Flash\\Flash10c.ocx, 1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\TypeLib]
@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\Version]
@="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
@="FlashFactory.FlashFactory"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{1D4C8A81-B7AC-460A-8C23-98713C41D6B3}]
@Denied: (A 2) (Everyone)
@="IFlashBroker3"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{1D4C8A81-B7AC-460A-8C23-98713C41D6B3}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{1D4C8A81-B7AC-460A-8C23-98713C41D6B3}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\VideoLAN.VLCPlugin.*1*]
@="?????????????????? v1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\VideoLAN.VLCPlugin.*1*\CLSID]
@="{E23FE9C6-778E-49D4-B537-38FCDE4887D8}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\VideoLAN.VLCPlugin.*2*]
@="?????????????????? v2"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\VideoLAN.VLCPlugin.*2*\CLSID]
@="{9BE31822-FDAD-461B-AD51-BE1D1C159921}"
.
Celkový čas: 2013-03-31 13:39:08
ComboFix-quarantined-files.txt 2013-03-31 11:38
ComboFix2.txt 2013-03-30 17:54
.
Před spuštěním: Volných bajtů: 553 841 401 856
Po spuštění: Volných bajtů: 553 774 534 656
.
- - End Of File - - 3CDCD09DE0D066EC9CD618190ADA02E8

[Roli]

Přes Start >> Spustit zkopíruj do okna:

ComboFix /Uninstall

a stiskni Enter

To odinstaluje ComboFix a smaže s ním související soubory a složky.


Použij T-Cleaner, který smaže případné zbytky po aplikacích které jsme použili.

Jen před jeho stažením a při použití stopni antivir, protože ho muže detekovat jako vir ale není tomu tak.


Pak dej vědět jaký je stav PC.

[melo15]

PC je svižný a RSIT už nehází tu chybu při spuštění.
Patří Ti velký dík

[Roli]

Bezva, v tom případě je to z mé strany vše a