Trojan se porad ukazuje prosim pomoc

Zpráva

redneB · #1 Příspěvek od **redneB** » 29 kvě 2013 13:09

DDS (Ver_2012-11-20.01) - NTFS_AMD64
Internet Explorer: 10.0.9200.16576 BrowserJavaVersion: 10.21.2
Run by Bender at 14:01:04 on 2013-05-29
#Option Extended Search is enabled.
#Option Whitelisting is disabled.
Microsoft Windows 7 Professional 6.1.7601.1.1250.420.1029.18.4093.2580 [GMT 2:00]
.
AV: avast! Antivirus *Enabled/Updated* {2B2D1395-420B-D5C9-657E-930FE358FC3C}
SP: avast! Antivirus *Enabled/Updated* {904CF271-6431-DA47-5FCE-A87D98DFB681}
SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
FW: avast! Internet Security *Disabled* {131692B0-0864-D491-4E21-3A3A1D8BBB47}
.
============== Running Processes ===============
.
C:\Windows\system32\lsm.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Windows\system32\svchost.exe -k RPCSS
C:\Windows\system32\atiesrxx.exe
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k LocalService
C:\Windows\system32\svchost.exe -k netsvcs
C:\Windows\system32\svchost.exe -k GPSvcGroup
C:\Windows\system32\svchost.exe -k NetworkService
C:\Program Files\AVAST Software\Avast\AvastSvc.exe
C:\Windows\system32\atieclxx.exe
C:\Windows\System32\spoolsv.exe
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe
C:\Program Files (x86)\Gigabyte\EasySaver\ESSVR.EXE
C:\Windows\SysWOW64\PnkBstrA.exe
C:\Program Files (x86)\Splashtop\Splashtop Connect\BackService.exe
C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted
C:\Program Files (x86)\Splashtop\Splashtop Connect Firefox Software Updater\WCUService.exe
C:\Program Files (x86)\Splashtop\Splashtop Connect IE Software Updater\WCUService.exe
C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
C:\Windows\system32\taskhost.exe
C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Windows\system32\SearchIndexer.exe
C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe
C:\Program Files\Windows Media Player\wmpnetwk.exe
C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
C:\Program Files\Windows Sidebar\sidebar.exe
C:\Windows\System32\svchost.exe -k LocalServicePeerNet
C:\Program Files (x86)\RocketDock\RocketDock.exe
C:\Program Files (x86)\Steam2\Steam.exe
C:\Windows\SysWOW64\rundll32.exe
C:\Program Files (x86)\Mozilla Firefox\firefox.exe
C:\Program Files (x86)\Splashtop\Splashtop Connect\ZyngaGamesAgent.exe
C:\Program Files\AVAST Software\Avast\AvastUI.exe
C:\Windows\system32\wbem\unsecapp.exe
C:\Windows\sysWOW64\wbem\wmiprvse.exe
C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
C:\Program Files (x86)\Winamp\winampa.exe
C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
C:\Windows\system32\taskeng.exe
C:\Program Files (x86)\Mozilla Firefox\plugin-container.exe
C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_11_7_700_202.exe
C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_11_7_700_202.exe
C:\Windows\System32\svchost.exe -k secsvcs
C:\Windows\servicing\TrustedInstaller.exe
C:\Windows\system32\wbem\wmiprvse.exe
C:\Windows\System32\cscript.exe
.
============== Pseudo HJT Report ===============
.
uStart Page = hxxp://go.microsoft.com/fwlink/?LinkId=69157
uLocal Page = C:\Windows\System32\blank.htm
uSearch Page = hxxp://go.microsoft.com/fwlink/?LinkId=54896
mStart Page = hxxp://go.microsoft.com/fwlink/p/?LinkId=255141
mLocal Page = C:\Windows\SysWOW64\blank.htm
mSearch Page = hxxp://go.microsoft.com/fwlink/?LinkId=54896
mDefault_Page_URL = hxxp://go.microsoft.com/fwlink/p/?LinkId=255141
mDefault_Search_URL = hxxp://go.microsoft.com/fwlink/?LinkId=54896
uURLSearchHooks: Microsoft Url Search Hook: {CFBFAE00-17A6-11D0-99CB-00C04FD64497} - C:\Windows\SysWOW64\ieframe.dll
mWinlogon: Shell = explorer.exe
mWinlogon: Userinit = userinit.exe
BHO: IE Security Component: {0D778FDC-FAD7-4B1D-AB88-7A76A562D65C} - C:\ProgramData\Plugin\ISeekDeal.dll
BHO: SteadyVideoBHO Class: {6C680BAE-655C-4E3D-8FC4-E6A520C3D928} - C:\Program Files (x86)\AMD\SteadyVideo\SteadyVideo.dll
BHO: Java(tm) Plug-In SSV Helper: {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll
BHO: avast! WebRep: {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll
BHO: Windows Live ID Sign-in Helper: {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
BHO: Java(tm) Plug-In 2 SSV Helper: {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll
TB: avast! WebRep: {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll
uRun: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun
uRun: [RocketDock] "C:\Program Files (x86)\RocketDock\RocketDock.exe"
uRun: [DAEMON Tools Lite] "C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe" -autorun
uRun: [WebcamMaxAutoRun] "C:\Program Files (x86)\WebcamMax\WebcamMax.exe" -a
uRun: [Steam] "C:\Program Files (x86)\Steam2\steam.exe" -silent
uRun: [MSIDLL] C:\Windows\SysWOW64\rundll32.exe msikfk32.dll,hMDvZvFIeaIX
mRun: [STCAgent] "C:\Program Files (x86)\Splashtop\Splashtop Connect IE\STCAgent.exe"
mRun: [ZyngaGamesAgent] "C:\Program Files (x86)\Splashtop\Splashtop Connect\ZyngaGamesAgent.exe"
mRun: [avast] "C:\Program Files\AVAST Software\Avast\avastUI.exe" /nogui
mRun: [amd_dc_opt] C:\Program Files (x86)\AMD\Dual-Core Optimizer\amd_dc_opt.exe
mRun: [StartCCC] "C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun
mRun: [SunJavaUpdateSched] "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"
mRun: [WinampAgent] "C:\Program Files (x86)\Winamp\winampa.exe"
mRun: [Adobe ARM] "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
uPolicies-Explorer: NoDriveTypeAutoRun = dword:145
mPolicies-Explorer: NoActiveDesktop = dword:1
mPolicies-Explorer: NoActiveDesktopChanges = dword:1
mPolicies-Explorer: ForceActiveDesktopOn = dword:0
mPolicies-System: ConsentPromptBehaviorAdmin = dword:0
mPolicies-System: ConsentPromptBehaviorUser = dword:3
mPolicies-System: EnableInstallerDetection = dword:1
mPolicies-System: EnableLUA = dword:0
mPolicies-System: EnableSecureUIAPaths = dword:1
mPolicies-System: EnableUIADesktopToggle = dword:0
mPolicies-System: EnableVirtualization = dword:1
mPolicies-System: PromptOnSecureDesktop = dword:0
mPolicies-System: ValidateAdminCodeSignatures = dword:0
mPolicies-System: dontdisplaylastusername = dword:0
mPolicies-System: scforceoption = dword:0
mPolicies-System: shutdownwithoutlogon = dword:1
mPolicies-System: undockwithoutlogon = dword:1
mPolicies-System: FilterAdministratorToken = dword:0
IE: E&xport to Microsoft Excel - C:\PROGRA~2\MICROS~4\Office12\EXCEL.EXE/3000
LSP: %SystemRoot%\system32\mswsock.dll
Trusted Zone: clonewarsadventures.com
Trusted Zone: freerealms.com
Trusted Zone: soe.com
Trusted Zone: sony.com
TCP: Interfaces\{3C5E49D8-A04C-492E-863C-D7DA80B9B3B4} : NameServer = 8.8.8.8,8.8.4.4,4.2.2.1,4.2.2.2,208.67.222.222,208.67.220.220,8.26.56.26,8.20.247.20,156.154.70.1,156.154.71.1
Filter: application/octet-stream - {1E66F26B-79EE-11D2-8710-00C04F79ED0D} -
Filter: application/x-complus - {1E66F26B-79EE-11D2-8710-00C04F79ED0D} -
Filter: application/x-msdownload - {1E66F26B-79EE-11D2-8710-00C04F79ED0D} -
Filter: video/mp4 - {20C75730-7C25-476B-95DC-C65810F9E489} - C:\Program Files (x86)\AMD\SteadyVideo\VideoMIMEFilter.dll
Filter: video/x-flv - {20C75730-7C25-476B-95DC-C65810F9E489} - C:\Program Files (x86)\AMD\SteadyVideo\VideoMIMEFilter.dll
Handler: about - {3050F406-98B5-11CF-BB82-00AA00BDCE0B} - C:\Windows\SysWOW64\mshtml.dll
Handler: cdl - {3dd53d40-7b8b-11D0-b013-00aa0059ce02} - C:\Windows\SysWOW64\urlmon.dll
Handler: dvd - {12D51199-0DB5-46FE-A120-47A3D7D937CC} - C:\Windows\SysWOW64\MSVidCtl.dll
Handler: file - {79eac9e7-baf9-11ce-8c82-00aa004ba90b} - C:\Windows\SysWOW64\urlmon.dll
Handler: ftp - {79eac9e3-baf9-11ce-8c82-00aa004ba90b} - C:\Windows\SysWOW64\urlmon.dll
Handler: http - {79eac9e2-baf9-11ce-8c82-00aa004ba90b} - C:\Windows\SysWOW64\urlmon.dll
Handler: https - {79eac9e5-baf9-11ce-8c82-00aa004ba90b} - C:\Windows\SysWOW64\urlmon.dll
Handler: its - {9D148291-B9C8-11D0-A4CC-0000F80149F6} - C:\Windows\System32\itss.dll
Handler: javascript - {3050F3B2-98B5-11CF-BB82-00AA00BDCE0B} - C:\Windows\SysWOW64\mshtml.dll
Handler: local - {79eac9e7-baf9-11ce-8c82-00aa004ba90b} - C:\Windows\SysWOW64\urlmon.dll
Handler: mailto - {3050f3DA-98B5-11CF-BB82-00AA00BDCE0B} - C:\Windows\SysWOW64\mshtml.dll
Handler: mhtml - {05300401-BCBC-11d0-85E3-00C04FD85AB4} - C:\Windows\System32\inetcomm.dll
Handler: mk - {79eac9e6-baf9-11ce-8c82-00aa004ba90b} - C:\Windows\SysWOW64\urlmon.dll
Handler: ms-its - {9D148291-B9C8-11D0-A4CC-0000F80149F6} - C:\Windows\System32\itss.dll
Handler: res - {3050F3BC-98B5-11CF-BB82-00AA00BDCE0B} - C:\Windows\SysWOW64\mshtml.dll
Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll
Handler: tv - {CBD30858-AF45-11D2-B6D6-00C04FBBDE6E} - C:\Windows\SysWOW64\MSVidCtl.dll
Handler: vbscript - {3050F3B2-98B5-11CF-BB82-00AA00BDCE0B} - C:\Windows\SysWOW64\mshtml.dll
Name-Space Handler: mk\* - {9D148291-B9C8-11D0-A4CC-0000F80149F6} - C:\Windows\System32\itss.dll
SSODL: WebCheck - <orphaned>
SecurityProviders: SecurityProviders = credssp.dll
LSA: Authentication Packages = msv1_0
LSA: Notification Packages = scecli
LSA: Security Packages = kerberos msv1_0 schannel wdigest tspkg pku2u livessp
SubSystems: Windows = basesrv,1 winsrv:UserServerDllInitialization,3 winsrv:ConServerDllInitialization,2 sxssrv,4
mASetup: >{22d6f312-b0f6-11d0-94ab-0080c74c7e95} - C:\Windows\System32\unregmp2.exe /ShowWMP
mASetup: {2C7339CF-2B09-4501-B3F3-F3508C9228ED} - C:\Windows\System32\regsvr32.exe /s /n /i:/UserInstall C:\Windows\System32\themeui.dll
mASetup: {2D46B6DC-2207-486B-B523-A557E6D54B47} - C:\Windows\System32\cmd.exe /D /C start C:\Windows\System32\ie4uinit.exe -ClearIconCache
mASetup: {44BBA840-CC51-11CF-AAFA-00AA00B6015C} - "C:\Program Files (x86)\Windows Mail\WinMail.exe" OCInstallUserConfigOE
mASetup: {6BF52A52-394A-11d3-B153-00C04F79FAA6} - C:\Windows\System32\unregmp2.exe /FirstLogon /Shortcuts /RegBrowsers /ResetMUI
mASetup: {89820200-ECBD-11cf-8B85-00AA005B4340} - regsvr32.exe /s /n /i:U shell32.dll
mASetup: {89B4C1CD-B018-4511-B0A1-5476DBF70820} - C:\Windows\SysWOW64\Rundll32.exe C:\Windows\SysWOW64\mscories.dll,Install
CLSID: {603D3801-BD81-11d0-A3A5-00C04FD706EC} - C:\Windows\System32\shell32.dll
x64-mStart Page = hxxp://go.microsoft.com/fwlink/p/?LinkId=255141
x64-mLocal Page = C:\Windows\System32\blank.htm
x64-mSearch Page = hxxp://go.microsoft.com/fwlink/?LinkId=54896
x64-mDefault_Page_URL = hxxp://go.microsoft.com/fwlink/p/?LinkId=255141
x64-mDefault_Search_URL = hxxp://go.microsoft.com/fwlink/?LinkId=54896
x64-mWinlogon: Shell = explorer.exe
x64-mWinlogon: Userinit = C:\Windows\System32\userinit.exe,
x64-BHO: avast! WebRep: {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll
x64-BHO: SteadyVideoBHO Class: {6C680BAE-655C-4E3D-8FC4-E6A520C3D928} - C:\Program Files\AMD\SteadyVideo\SteadyVideo.dll
x64-BHO: Java(tm) Plug-In SSV Helper: {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll
x64-BHO: Windows Live ID Sign-in Helper: {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
x64-BHO: Java(tm) Plug-In 2 SSV Helper: {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll
x64-TB: avast! WebRep: {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll
x64-Run: [RtHDVCpl] C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe -s
x64-Filter: application/octet-stream - {1E66F26B-79EE-11D2-8710-00C04F79ED0D} -
x64-Filter: application/x-complus - {1E66F26B-79EE-11D2-8710-00C04F79ED0D} -
x64-Filter: application/x-msdownload - {1E66F26B-79EE-11D2-8710-00C04F79ED0D} -
x64-Filter: video/mp4 - {20C75730-7C25-476B-95DC-C65810F9E489} - C:\Program Files\AMD\SteadyVideo\VideoMIMEFilter.dll
x64-Filter: video/x-flv - {20C75730-7C25-476B-95DC-C65810F9E489} - C:\Program Files\AMD\SteadyVideo\VideoMIMEFilter.dll
x64-Handler: about - {3050F406-98B5-11CF-BB82-00AA00BDCE0B} - C:\Windows\System32\mshtml.dll
x64-Handler: cdl - {3dd53d40-7b8b-11D0-b013-00aa0059ce02} - C:\Windows\System32\urlmon.dll
x64-Handler: dvd - {12D51199-0DB5-46FE-A120-47A3D7D937CC} - C:\Windows\System32\MSVidCtl.dll
x64-Handler: file - {79eac9e7-baf9-11ce-8c82-00aa004ba90b} - C:\Windows\System32\urlmon.dll
x64-Handler: ftp - {79eac9e3-baf9-11ce-8c82-00aa004ba90b} - C:\Windows\System32\urlmon.dll
x64-Handler: http - {79eac9e2-baf9-11ce-8c82-00aa004ba90b} - C:\Windows\System32\urlmon.dll
x64-Handler: https - {79eac9e5-baf9-11ce-8c82-00aa004ba90b} - C:\Windows\System32\urlmon.dll
x64-Handler: its - {9D148291-B9C8-11D0-A4CC-0000F80149F6} - C:\Windows\System32\itss.dll
x64-Handler: javascript - {3050F3B2-98B5-11CF-BB82-00AA00BDCE0B} - C:\Windows\System32\mshtml.dll
x64-Handler: local - {79eac9e7-baf9-11ce-8c82-00aa004ba90b} - C:\Windows\System32\urlmon.dll
x64-Handler: mailto - {3050f3DA-98B5-11CF-BB82-00AA00BDCE0B} - C:\Windows\System32\mshtml.dll
x64-Handler: mhtml - {05300401-BCBC-11d0-85E3-00C04FD85AB4} - C:\Windows\System32\inetcomm.dll
x64-Handler: mk - {79eac9e6-baf9-11ce-8c82-00aa004ba90b} - C:\Windows\System32\urlmon.dll
x64-Handler: ms-its - {9D148291-B9C8-11D0-A4CC-0000F80149F6} - C:\Windows\System32\itss.dll
x64-Handler: res - {3050F3BC-98B5-11CF-BB82-00AA00BDCE0B} - C:\Windows\System32\mshtml.dll
x64-Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - <orphaned>
x64-Handler: tv - {CBD30858-AF45-11D2-B6D6-00C04FBBDE6E} - C:\Windows\System32\MSVidCtl.dll
x64-Handler: vbscript - {3050F3B2-98B5-11CF-BB82-00AA00BDCE0B} - C:\Windows\System32\mshtml.dll
x64-Name-Space Handler: mk\* - {9D148291-B9C8-11D0-A4CC-0000F80149F6} - C:\Windows\System32\itss.dll
x64-SSODL: WebCheck - <orphaned>
x64-mASetup: >{22d6f312-b0f6-11d0-94ab-0080c74c7e95} - C:\Windows\System32\unregmp2.exe /ShowWMP
x64-mASetup: {2C7339CF-2B09-4501-B3F3-F3508C9228ED} - C:\Windows\System32\regsvr32.exe /s /n /i:/UserInstall C:\Windows\System32\themeui.dll
x64-mASetup: {2D46B6DC-2207-486B-B523-A557E6D54B47} - C:\Windows\System32\cmd.exe /D /C start C:\Windows\System32\ie4uinit.exe -ClearIconCache
x64-mASetup: {44BBA840-CC51-11CF-AAFA-00AA00B6015C} - "C:\Program Files (x86)\Windows Mail\WinMail.exe" OCInstallUserConfigOE
x64-mASetup: {6BF52A52-394A-11d3-B153-00C04F79FAA6} - C:\Windows\System32\unregmp2.exe /FirstLogon /Shortcuts /RegBrowsers /ResetMUI
x64-mASetup: {89820200-ECBD-11cf-8B85-00AA005B4340} - regsvr32.exe /s /n /i:U shell32.dll
x64-mASetup: {89820200-ECBD-11cf-8B85-00AA005B4383} - C:\Windows\System32\ie4uinit.exe -UserConfig
x64-mASetup: {89B4C1CD-B018-4511-B0A1-5476DBF70820} - C:\Windows\System32\Rundll32.exe C:\Windows\System32\mscories.dll,Install
x64-CLSID: {603D3801-BD81-11d0-A3A5-00C04FD706EC} - C:\Windows\System32\shell32.dll
.
================= FIREFOX ===================
.
FF - ProfilePath - C:\Users\Bender\AppData\Roaming\Mozilla\Firefox\Profiles\1ibnaocq.default\
FF - prefs.js: browser.search.selectedEngine -
FF - prefs.js: browser.startup.homepage - hxxp://www.seznam.cz/
FF - component: C:\Program Files (x86)\Mozilla Firefox\components\browserdirprovider.dll
FF - component: C:\Program Files (x86)\Mozilla Firefox\components\brwsrcmp.dll
FF - component: C:\Program Files (x86)\Splashtop\Splashtop Connect for Firefox\{91c612bf-2a7a-48b8-8c8c-6de28589b7a0}\components\libstutils.dll
FF - plugin: C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll
FF - plugin: C:\Program Files (x86)\Adobe\Reader 11.0\Reader\browser\nppdf32.dll
FF - plugin: C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll
FF - plugin: C:\Program Files (x86)\Microsoft Silverlight\5.1.20125.0\npctrl.dll
FF - plugin: C:\Program Files (x86)\Microsoft Silverlight\5.1.20125.0\npctrlui.dll
FF - plugin: C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll
FF - plugin: C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_7_700_202.dll
FF - ExtSQL: 2012-07-02 19:18; {d9284e50-81fc-11da-a72b-0800200c9a66}; C:\Program Files (x86)\Splashtop\Splashtop Connect for Firefox\{d9284e50-81fc-11da-a72b-0800200c9a66}
FF - ExtSQL: 2012-07-02 19:36; {91c612bf-2a7a-48b8-8c8c-6de28589b7a1}; C:\Program Files (x86)\Splashtop\Splashtop Connect for Firefox\{91c612bf-2a7a-48b8-8c8c-6de28589b7a1}
FF - ExtSQL: 2012-07-02 19:36; {91c612bf-2a7a-48b8-8c8c-6de28589b7a0}; C:\Program Files (x86)\Splashtop\Splashtop Connect for Firefox\{91c612bf-2a7a-48b8-8c8c-6de28589b7a0}
FF - ExtSQL: 2012-07-02 19:43; {972ce4c6-7e08-4474-a285-3208198ce6fd}; C:\Program Files (x86)\Mozilla Firefox\browser\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}
FF - ExtSQL: 2012-07-02 23:42; wrc@avast.com; C:\Program Files\AVAST Software\Avast\WebRep\FF
FF - ExtSQL: 2012-07-05 18:46; {9d1f059c-cada-4111-9696-41a62d64e3ba}; C:\Users\Bender\AppData\Roaming\Mozilla\Firefox\Profiles\1ibnaocq.default\extensions\{9d1f059c-cada-4111-9696-41a62d64e3ba}
FF - ExtSQL: 2012-12-07 22:02; iseekdeal@iseekdeal.com; C:\Users\Bender\AppData\Roaming\Mozilla\Firefox\Profiles\1ibnaocq.default\extensions\iseekdeal@iseekdeal.com.xpi
FF - ExtSQL: 2012-12-22 21:11; websecuritykeeper10@gmail.com; C:\Users\Bender\AppData\Roaming\Mozilla\Firefox\Profiles\1ibnaocq.default\extensions\websecuritykeeper10@gmail.com
.
============= SERVICES / DRIVERS ===============
.
R0 ACPI;Ovladač standardu ACPI společnosti Microsoft;C:\Windows\System32\drivers\acpi.sys [2012-7-4 334208]
R0 amdxata;amdxata;C:\Windows\System32\drivers\amdxata.sys [2012-7-4 27008]
R0 aswKbd;aswKbd;C:\Windows\System32\drivers\aswKbd.sys [2012-7-2 22600]
R0 aswRvrt;aswRvrt;C:\Windows\System32\drivers\aswRvrt.sys [2013-3-15 65336]
R0 aswVmm;aswVmm;C:\Windows\System32\drivers\aswVmm.sys [2013-3-15 189936]
R0 atapi;Kanál IDE;C:\Windows\System32\drivers\atapi.sys [2009-7-14 24128]
R0 CLFS;Systém souborů CLFS;C:\Windows\System32\clfs.sys [2009-7-14 367696]
R0 CNG;CNG;C:\Windows\System32\drivers\cng.sys [2013-2-7 458712]
R0 Disk;Ovladač disku;C:\Windows\System32\drivers\disk.sys [2009-7-14 73280]
R0 FileInfo;File Information FS MiniFilter;C:\Windows\System32\drivers\fileinfo.sys [2009-7-14 70224]
R0 FltMgr;Správce filtrů;C:\Windows\System32\drivers\fltMgr.sys [2012-7-4 289664]
R0 fvevol;Ovladač filtru nástroje Bitlocker Drive Encryption;C:\Windows\System32\drivers\fvevol.sys [2013-4-10 223752]
R0 hwpolicy;Hardware Policy Driver;C:\Windows\System32\drivers\hwpolicy.sys [2012-7-4 14720]
R0 KSecDD;KSecDD;C:\Windows\System32\drivers\ksecdd.sys [2012-7-11 95600]
R0 KSecPkg;KSecPkg;C:\Windows\System32\drivers\ksecpkg.sys [2013-2-7 154480]
R0 mountmgr;Správce přípojných bodů;C:\Windows\System32\drivers\mountmgr.sys [2012-7-4 94592]
R0 msisadrv;msisadrv;C:\Windows\System32\drivers\msisadrv.sys [2009-7-14 15424]
R0 Mup;Mup;C:\Windows\System32\drivers\mup.sys [2009-7-14 60496]
R0 NDIS;Systémový ovladač rozhraní NDIS;C:\Windows\System32\drivers\ndis.sys [2012-9-12 950128]
R0 partmgr;Správce oddílů;C:\Windows\System32\drivers\partmgr.sys [2012-7-3 75120]
R0 pci;Řadič sběrnice PCI;C:\Windows\System32\drivers\pci.sys [2012-7-4 184704]
R0 pciide;pciide;C:\Windows\System32\drivers\pciide.sys [2009-7-14 12352]
R0 pcw;Performance Counters for Windows Driver;C:\Windows\System32\drivers\pcw.sys [2009-7-14 50768]
R0 rdyboost;ReadyBoost;C:\Windows\System32\drivers\rdyboost.sys [2012-7-4 213888]
R0 SmartDefragDriver;SmartDefragDriver;C:\Windows\System32\drivers\SmartDefragDriver.sys [2012-7-16 17720]
R0 spldr;Security Processor Loader Driver;C:\Windows\System32\drivers\spldr.sys [2009-7-13 19008]
R0 storflt;Diskový ovladač filtru akcelerace sběrnice virtuálního počítače;C:\Windows\System32\drivers\vmstorfl.sys [2012-7-4 46464]
R0 Tcpip;Ovladač protokolu TCP/IP;C:\Windows\System32\drivers\tcpip.sys [2013-2-13 1913192]
R0 vdrvroot;Ovladač rozpoznávacího modulu virtuální jednotky společnosti Microsoft;C:\Windows\System32\drivers\vdrvroot.sys [2009-7-14 36432]
R0 vmbus;Sběrnice virtuálního počítače;C:\Windows\System32\drivers\vmbus.sys [2012-7-4 199552]
R0 volmgr;Ovladač správce svazků;C:\Windows\System32\drivers\volmgr.sys [2012-7-4 71552]
R0 volmgrx;Správce dynamických svazků;C:\Windows\System32\drivers\volmgrx.sys [2012-7-4 363392]
R0 volsnap;Svazky úložiště;C:\Windows\System32\drivers\volsnap.sys [2012-7-4 295808]
R0 Wdf01000;Služba Architektura ovladačů v režimu jádra;C:\Windows\System32\drivers\Wdf01000.sys [2012-11-15 785512]
R1 AFD;Ancillary Function Driver for Winsock;C:\Windows\System32\drivers\afd.sys [2012-7-3 498688]
R1 AppleCharger;AppleCharger;C:\Windows\System32\drivers\AppleCharger.sys [2012-7-2 21104]
R1 aswRdr;aswRdr;C:\Windows\System32\drivers\aswRdr2.sys [2012-7-2 72016]
R1 aswSnx;aswSnx;C:\Windows\System32\drivers\aswSnx.sys [2012-7-2 1025808]
R1 aswSP;aswSP;C:\Windows\System32\drivers\aswSP.sys [2012-7-2 378432]
R1 aswTdi;avast! Network Shield Support;C:\Windows\System32\drivers\aswTdi.sys [2012-7-2 64288]
R1 Beep;Beep;C:\Windows\System32\drivers\beep.sys [2009-7-14 6656]
R1 blbdrive;blbdrive;C:\Windows\System32\drivers\blbdrive.sys [2009-7-14 45056]
R1 cdrom;Ovladač jednotky CD-ROM;C:\Windows\System32\drivers\cdrom.sys [2012-7-4 147456]
R1 CSC;Ovladač souborů pro režim offline;C:\Windows\System32\drivers\csc.sys [2012-7-4 514560]
R1 DfsC;DFS Namespace Client Driver;C:\Windows\System32\drivers\dfsc.sys [2012-7-4 102400]
R1 discache;System Attribute Cache;C:\Windows\System32\drivers\discache.sys [2009-7-14 40448]
R1 Msfs;Msfs;C:\Windows\System32\drivers\msfs.sys [2009-7-14 26112]
R1 mssmbios;Ovladač Microsoft System Management BIOS;C:\Windows\System32\drivers\mssmbios.sys [2009-7-14 32320]
R1 NetBIOS;NetBIOS Interface;C:\Windows\System32\drivers\netbios.sys [2009-7-14 44544]
R1 NetBT;NetBT;C:\Windows\System32\drivers\netbt.sys [2012-7-4 261632]
R1 Npfs;Npfs;C:\Windows\System32\drivers\npfs.sys [2009-7-14 44032]
R1 nsiproxy;NSI proxy service driver.;C:\Windows\System32\drivers\nsiproxy.sys [2009-7-14 24576]
R1 Null;Null;C:\Windows\System32\drivers\null.sys [2009-7-14 6144]
R1 Psched;Plánovač paketů technologie QoS;C:\Windows\System32\drivers\pacer.sys [2012-7-4 131584]
R1 rdbss;Podsystém přesměrovaného ukládání do vyrovnávací paměti;C:\Windows\System32\drivers\rdbss.sys [2012-7-4 309248]
R1 RDPCDD;RDPCDD;C:\Windows\System32\drivers\RDPCDD.sys [2009-7-14 7680]
R1 RDPENCDD;RDP Encoder Mirror Driver;C:\Windows\System32\drivers\RDPENCDD.sys [2009-7-14 7680]
R1 RDPREFMP;Reflector Display Driver used to gain access to graphics data;C:\Windows\System32\drivers\RDPREFMP.sys [2009-7-14 8192]
R1 Serial;Ovladač sériového portu;C:\Windows\System32\drivers\serial.sys [2009-7-14 94208]
R1 tdx;Ovladač pro podporu zastaralého rozhraní TDI NetIO;C:\Windows\System32\drivers\tdx.sys [2012-7-4 119296]
R1 TermDD;Ovladač terminálového zařízení;C:\Windows\System32\drivers\termdd.sys [2012-7-4 63360]
R1 VgaSave;VgaSave;C:\Windows\System32\drivers\vga.sys [2009-7-14 29184]
R1 Wanarpv6;Ovladač pro vzdálený přístup IPv6 ARP;C:\Windows\System32\drivers\wanarp.sys [2012-7-4 88576]
R1 WfpLwf;WFP Lightweight Filter;C:\Windows\System32\drivers\wfplwf.sys [2009-7-14 12800]
R2 AdobeARMservice;Adobe Acrobat Update Service;C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [2013-5-11 65640]
R2 AMD External Events Utility;AMD External Events Utility;C:\Windows\System32\atiesrxx.exe [2012-12-19 240640]
R2 AMD FUEL Service;AMD FUEL Service;C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe [2012-12-19 361984]
R2 AODDriver4.2;AODDriver4.2;C:\Program Files\ATI Technologies\ATI.ACE\Fuel\amd64\aoddriver2.sys [2012-4-9 57472]
R2 aswFsBlk;aswFsBlk;C:\Windows\System32\drivers\aswFsBlk.sys [2012-7-2 33400]
R2 aswMonFlt;aswMonFlt;C:\Windows\System32\drivers\aswMonFlt.sys [2012-7-2 80816]
R2 AudioEndpointBuilder;Koncové vytváření služby Windows Audio;C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted [2009-7-14 27136]
R2 AudioSrv;Zvuk systému Windows;C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted [2009-7-14 27136]
R2 avast! Antivirus;avast! Antivirus;C:\Program Files\AVAST Software\Avast\AvastSvc.exe [2013-5-23 46808]
R2 BFE;Služba BFE (Base Filtering Engine);C:\Windows\System32\svchost.exe -k LocalServiceNoNetwork [2009-7-14 27136]
R2 CryptSvc;Šifrování;C:\Windows\System32\svchost.exe -k NetworkService [2009-7-14 27136]
R2 CscService;Offline soubory;C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted [2009-7-14 27136]
R2 DcomLaunch;Spouštěč procesů serveru DCOM;C:\Windows\System32\svchost.exe -k DcomLaunch [2009-7-14 27136]
R2 Dhcp;Klient DHCP;C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted [2009-7-14 27136]
R2 Dnscache;Klient DNS;C:\Windows\System32\svchost.exe -k NetworkService [2009-7-14 27136]
R2 DPS;Služba DPS (Diagnostic Policy Service);C:\Windows\System32\svchost.exe -k LocalServiceNoNetwork [2009-7-14 27136]
R2 ES lite Service;ES lite Service for program management.;C:\Program Files (x86)\Gigabyte\EasySaver\essvr.exe [2012-7-2 68136]
R2 eventlog;Protokol událostí systému Windows;C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted [2009-7-14 27136]
R2 EventSystem;Systém událostí COM+;C:\Windows\System32\svchost.exe -k LocalService [2009-7-14 27136]
R2 FontCache;Mezipaměť písem Windows;C:\Windows\System32\svchost.exe -k LocalService [2009-7-14 27136]
R2 gpsvc;Klient zásad skupiny;C:\Windows\System32\svchost.exe -k GPSvcGroup [2009-7-14 27136]
R2 IKEEXT;Služba IKE and AuthIP IPsec Keying Modules;C:\Windows\System32\svchost.exe -k netsvcs [2009-7-14 27136]
R2 iphlpsvc;Pomocná služba protokolu IP;C:\Windows\System32\svchost.exe -k NetSvcs [2009-7-14 27136]
R2 LanmanServer;Server;C:\Windows\System32\svchost.exe -k netsvcs [2009-7-14 27136]
R2 LanmanWorkstation;Pracovní stanice;C:\Windows\System32\svchost.exe -k NetworkService [2009-7-14 27136]
R2 lltdio;Link-Layer Topology Discovery Mapper I/O Driver;C:\Windows\System32\drivers\lltdio.sys [2009-7-14 60928]
R2 lmhosts;Podpora rozhraní NetBIOS nad protokolem TCP/IP;C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted [2009-7-14 27136]
R2 luafv;Virtualizace souborů nástroje Řízení uživatelských účtů;C:\Windows\System32\drivers\luafv.sys [2009-7-14 113152]
R2 MMCSS;Služba Plánovač multimédií;C:\Windows\System32\svchost.exe -k netsvcs [2009-7-14 27136]
R2 MpsSvc;Brána Windows Firewall;C:\Windows\System32\svchost.exe -k LocalServiceNoNetwork [2009-7-14 27136]
R2 NlaSvc;Sledování umístění v síti (NLA);C:\Windows\System32\svchost.exe -k NetworkService [2009-7-14 27136]
R2 nsi;Služba rozhraní síťového úložiště;C:\Windows\System32\svchost.exe -k LocalService [2009-7-14 27136]
R2 PcaSvc;Program Compatibility Assistant Service;C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted [2009-7-14 27136]
R2 PEAUTH;PEAUTH;C:\Windows\System32\drivers\PEAuth.sys [2009-7-14 651264]
R2 PlugPlay;Plug and Play;C:\Windows\System32\svchost.exe -k DcomLaunch [2009-7-14 27136]
R2 PnkBstrA;PnkBstrA;C:\Windows\System32\PnkBstrA.exe --> C:\Windows\System32\PnkBstrA.exe [?]
R2 Power;Napájení;C:\Windows\System32\svchost.exe -k DcomLaunch [2009-7-14 27136]
R2 ProfSvc;Služba Profil uživatele;C:\Windows\System32\svchost.exe -k netsvcs [2009-7-14 27136]
R2 RpcEptMapper;Mapovač koncových bodů protokolu RPC;C:\Windows\System32\svchost.exe -k RPCSS [2009-7-14 27136]
R2 RpcSs;Vzdálené volání procedur (RPC);C:\Windows\System32\svchost.exe -k rpcss [2009-7-14 27136]
R2 rspndr;Link-Layer Topology Discovery Responder;C:\Windows\System32\drivers\rspndr.sys [2009-7-14 76800]
R2 SamSs;Správce zabezpečení účtů;C:\Windows\System32\lsass.exe [2012-7-3 31232]
R2 SCBackService;Splashtop Connect Service;C:\Program Files (x86)\Splashtop\Splashtop Connect\BackService.exe [2010-11-15 477000]
R2 secdrv;Security Driver;C:\Windows\System32\drivers\secdrv.sys [2009-7-14 23040]
R2 SENS;Služba oznamování událostí systému;C:\Windows\System32\svchost.exe -k netsvcs [2009-7-14 27136]
R2 ShellHWDetection;Rozpoznávání hardwaru;C:\Windows\System32\svchost.exe -k netsvcs [2009-7-14 27136]
R2 Schedule;Plánovač úloh;C:\Windows\System32\svchost.exe -k netsvcs [2009-7-14 27136]
R2 Spooler;Služba zařazování tisku;C:\Windows\System32\spoolsv.exe [2012-8-15 559104]
R2 SysMain;Superfetch;C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted [2009-7-14 27136]
R2 tcpipreg;TCP/IP Registry Compatibility;C:\Windows\System32\drivers\tcpipreg.sys [2012-11-15 45568]
R2 Themes;Motivy;C:\Windows\System32\svchost.exe -k netsvcs [2009-7-14 27136]
R2 TrkWks;Klient služby Sledování distribuovaných odkazů;C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted [2009-7-14 27136]
R2 UxSms;Správce relací správce oken plochy;C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted [2009-7-14 27136]
R2 WCUService_STC_FF;Splashtop Connect Firefox Software Updater Service;C:\Program Files (x86)\Splashtop\Splashtop Connect Firefox Software Updater\WCUService.exe [2011-3-24 493384]
R2 WCUService_STC_IE;Splashtop Connect IE Software Updater Service;C:\Program Files (x86)\Splashtop\Splashtop Connect IE Software Updater\WCUService.exe [2011-3-22 497480]
R2 WinDefend;Windows Defender;C:\Windows\System32\svchost.exe -k secsvcs [2009-7-14 27136]
R2 Winmgmt;Služba WMI;C:\Windows\System32\svchost.exe -k netsvcs [2009-7-14 27136]
R2 wlidsvc;Windows Live ID Sign-in Assistant;C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE [2009-8-18 2291568]
R2 WMPNetworkSvc;Služba Windows Media Player Network Sharing;C:\Program Files\Windows Media Player\wmpnetwk.exe [2012-7-4 1525248]
R2 wscsvc;Centrum zabezpečení;C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted [2009-7-14 27136]
R2 WSearch;Windows Search;C:\Windows\System32\SearchIndexer.exe [2012-7-3 591872]
R2 wuauserv;Windows Update;C:\Windows\System32\svchost.exe -k netsvcs [2009-7-14 27136]
R3 1394ohci;Hostitelský řadič pro rozhraní OHCI standardu 1394;C:\Windows\System32\drivers\1394ohci.sys [2012-7-4 229888]
R3 AeLookupSvc;Funkčnost aplikací;C:\Windows\System32\svchost.exe -k netsvcs [2009-7-14 27136]
R3 amdiox64;AMD IO Driver;C:\Windows\System32\drivers\amdiox64.sys [2012-7-31 46136]
R3 amdkmdag;amdkmdag;C:\Windows\System32\drivers\atikmdag.sys [2012-12-19 11278336]
R3 amdkmdap;amdkmdap;C:\Windows\System32\drivers\atikmpag.sys [2012-12-19 552960]
R3 AmdPPM;Ovladač procesoru AMD;C:\Windows\System32\drivers\amdppm.sys [2009-7-14 60928]
R3 AtiHDAudioService;AMD Function Driver for HD Audio Service;C:\Windows\System32\drivers\AtihdW76.sys [2012-11-6 96256]
R3 BITS;Služba inteligentního přenosu na pozadí;C:\Windows\System32\svchost.exe -k netsvcs [2009-7-14 27136]
R3 bowser;Ovladač podpory prohlížeče;C:\Windows\System32\drivers\bowser.sys [2012-7-3 90624]
R3 Browser;Prohledávání počítačů;C:\Windows\System32\svchost.exe -k netsvcs [2009-7-14 27136]
R3 CompositeBus;Ovladač rozpoznávacího modulu složené sběrnice;C:\Windows\System32\drivers\CompositeBus.sys [2012-7-4 38912]
R3 dtsoftbus01;DAEMON Tools Virtual Bus Driver;C:\Windows\System32\drivers\dtsoftbus01.sys [2012-7-3 283200]
R3 DXGKrnl;LDDM Graphics Subsystem;C:\Windows\System32\drivers\dxgkrnl.sys [2013-5-15 983400]
R3 EtronHub3;Etron USB 3.0 Extensible Hub Driver;C:\Windows\System32\drivers\EtronHub3.sys [2011-7-29 56960]
R3 EtronXHCI;Etron USB 3.0 Extensible Host Controller Driver;C:\Windows\System32\drivers\EtronXHCI.sys [2011-7-29 79104]
R3 fdPHost;Hostitel poskytovatele rozpoznávání funkce;C:\Windows\System32\svchost.exe -k LocalService [2009-7-14 27136]
R3 FDResPub;Publikování prostředků rozpoznávání funkcí;C:\Windows\System32\svchost.exe -k LocalServiceAndNoImpersonation [2009-7-14 27136]
R3 gdrv;gdrv;C:\Windows\gdrv.sys [2012-7-2 25640]
R3 HDAudBus;Ovladač sběrnice Microsoft UAA pro zvuk High Definition Audio;C:\Windows\System32\drivers\hdaudbus.sys [2012-7-4 122368]
R3 HidUsb;Ovladač třídy standardu HID Microsoft;C:\Windows\System32\drivers\hidusb.sys [2012-7-4 30208]
R3 HomeGroupListener;Naslouchací proces domácí skupiny;C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted [2009-7-14 27136]
R3 HomeGroupProvider;Zprostředkovatel domácích skupin;C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted [2009-7-14 27136]
R3 HTTP;HTTP;C:\Windows\System32\drivers\http.sys [2012-7-4 753664]
R3 i8042prt;Ovladač portu klávesnice i8042 a myši PS/2;C:\Windows\System32\drivers\i8042prt.sys [2009-7-14 105472]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM);C:\Windows\System32\drivers\RTKVHD64.sys [2012-7-2 3053160]
R3 kbdclass;Keyboard Class Driver;C:\Windows\System32\drivers\kbdclass.sys [2009-7-14 50768]
R3 KeyIso;Izolace klíče CNG;C:\Windows\System32\lsass.exe [2012-7-3 31232]
R3 ksthunk;Kernel Streaming Thunks;C:\Windows\System32\drivers\ksthunk.sys [2009-7-14 20992]
R3 monitor;Služba ovladače funkce třídy monitorů Microsoft;C:\Windows\System32\drivers\monitor.sys [2009-7-14 30208]
R3 mouclass;Mouse Class Driver;C:\Windows\System32\drivers\mouclass.sys [2009-7-14 49216]
R3 mouhid;Ovladač myši standardu HID;C:\Windows\System32\drivers\mouhid.sys [2009-7-14 31232]
R3 mpsdrv;Ovladač ověření brány Windows Firewall;C:\Windows\System32\drivers\mpsdrv.sys [2009-7-14 77312]
R3 mrxsmb;Obálka a jádro minipřesměrovačů SMB;C:\Windows\System32\drivers\mrxsmb.sys [2012-7-3 158208]
R3 mrxsmb10;Mini-přesměrovač SMB 1.x;C:\Windows\System32\drivers\mrxsmb10.sys [2012-7-3 288768]
R3 mrxsmb20;Mini-přesměrovač SMB 2.0;C:\Windows\System32\drivers\mrxsmb20.sys [2012-7-3 128000]
R3 NdisTapi;Ovladač Remote Access NDIS TAPI;C:\Windows\System32\drivers\ndistapi.sys [2009-7-14 24064]
R3 NdisWan;Ovladač Remote Access NDIS WAN;C:\Windows\System32\drivers\ndiswan.sys [2012-7-4 164352]
R3 NDProxy;NDIS Proxy;C:\Windows\System32\drivers\ndproxy.sys [2012-7-4 57856]
R3 Netman;Síťová připojení;C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted [2009-7-14 27136]
R3 netprofm;Služba seznamu sítí;C:\Windows\System32\svchost.exe -k LocalService [2009-7-14 27136]
R3 Ntfs;Ntfs;C:\Windows\System32\drivers\ntfs.sys [2013-4-23 1656680]
R3 p2pimsvc;Správce identit sítě rovnocenných počítačů;C:\Windows\System32\svchost.exe -k LocalServicePeerNet [2009-7-14 27136]
R3 p2psvc;Seskupování v sítích peer-to-peer;C:\Windows\System32\svchost.exe -k LocalServicePeerNet [2009-7-14 27136]
R3 PNRPsvc;Protokol PNRP (Peer Name Resolution Protocol);C:\Windows\System32\svchost.exe -k LocalServicePeerNet [2009-7-14 27136]
R3 PptpMiniport;Připojení WAN Miniport (PPTP);C:\Windows\System32\drivers\raspptp.sys [2012-7-4 111104]
R3 RasAgileVpn;WAN Miniport (IKEv2);C:\Windows\System32\drivers\agilevpn.sys [2009-7-14 60416]
R3 Rasl2tp;Připojení WAN Miniport (L2TP);C:\Windows\System32\drivers\rasl2tp.sys [2012-7-4 129536]
R3 RasPppoe;Ovladač pro vzdálený přístup PPPOE;C:\Windows\System32\drivers\raspppoe.sys [2009-7-14 92672]
R3 RasSstp;Připojení WAN Miniport (SSTP);C:\Windows\System32\drivers\rassstp.sys [2009-7-14 83968]
R3 rdpbus;Remote Desktop Device Redirector Bus Driver;C:\Windows\System32\drivers\rdpbus.sys [2009-7-14 24064]
R3 RTL8167;Realtek 8167 NT Driver;C:\Windows\System32\drivers\Rt64win7.sys [2012-7-2 413800]
R3 Serenum;Ovladač filtru Serenum;C:\Windows\System32\drivers\serenum.sys [2009-7-14 23552]
R3 srv;Ovladač pro server SMB 1.xxx;C:\Windows\System32\drivers\srv.sys [2012-7-3 467456]
R3 srv2;Ovladač pro server SMB 2.xxx;C:\Windows\System32\drivers\srv2.sys [2012-7-3 410112]
R3 srvnet;srvnet;C:\Windows\System32\drivers\srvnet.sys [2012-7-3 168448]
R3 SSDPSRV;SSDP Discovery;C:\Windows\System32\svchost.exe -k LocalServiceAndNoImpersonation [2009-7-14 27136]
R3 swenum;Softwarový ovladač sběrnice;C:\Windows\System32\drivers\swenum.sys [2009-7-14 12496]
R3 TrustedInstaller;Instalační služba modulů systému Windows;C:\Windows\servicing\TrustedInstaller.exe [2012-7-4 194048]
R3 tunnel;Microsoft Tunnel Miniport Adapter Driver;C:\Windows\System32\drivers\tunnel.sys [2012-7-4 125440]
R3 umbus;Ovladač sběrnice UMBus Enumerator;C:\Windows\System32\drivers\umbus.sys [2012-7-4 48640]
R3 upnphost;Hostitel zařízení UPnP;C:\Windows\System32\svchost.exe -k LocalServiceAndNoImpersonation [2009-7-14 27136]
R3 usbehci;Ovladač miniportu vylepšeného hostitelského řadiče Microsoft USB 2.0;C:\Windows\System32\drivers\usbehci.sys [2012-7-4 52736]
R3 usbhub;Ovladač standardního rozbočovače USB;C:\Windows\System32\drivers\usbhub.sys [2012-7-4 343040]
R3 usbohci;Ovladač miniportu otevřeného hostitelského řadiče Microsoft USB;C:\Windows\System32\drivers\usbohci.sys [2012-7-4 25600]
R3 WdiServiceHost;Hostitel diagnostické služby;C:\Windows\System32\svchost.exe -k LocalService [2009-7-14 27136]
R3 WdiSystemHost;Hostitel diagnostického systému;C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted [2009-7-14 27136]
R3 WinHttpAutoProxySvc;Služba WinHTTP WPAD;C:\Windows\System32\svchost.exe -k LocalService [2009-7-14 27136]
R3 WmiAcpi;Microsoft Windows Management Interface for ACPI;C:\Windows\System32\drivers\wmiacpi.sys [2009-7-14 14336]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-3-18 130384]
S2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2010-3-18 138576]
S2 SkypeUpdate;Skype Updater;C:\Program Files (x86)\Skype\Updater\Updater.exe [2012-7-13 160944]
S2 sppsvc;Ochrana softwaru;C:\Windows\System32\sppsvc.exe [2012-7-4 3524608]
S3 AcpiPmi;Ovladač měřiče napájení standardu ACPI;C:\Windows\System32\drivers\acpipmi.sys [2012-7-4 12800]
S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service;C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2012-7-2 256904]
S3 adp94xx;adp94xx;C:\Windows\System32\drivers\adp94xx.sys [2009-6-10 491088]
S3 adpahci;adpahci;C:\Windows\System32\drivers\adpahci.sys [2009-7-13 339536]
S3 adpu320;adpu320;C:\Windows\System32\drivers\adpu320.sys [2009-7-13 182864]
S3 agp440;Filtr Intel sběrnice AGP;C:\Windows\System32\drivers\AGP440.sys [2009-7-14 61008]
S3 ALG;Brána aplikační vrstvy;C:\Windows\System32\alg.exe [2009-7-14 79360]
S3 aliide;aliide;C:\Windows\System32\drivers\aliide.sys [2009-7-14 15440]
S3 amdide;amdide;C:\Windows\System32\drivers\amdide.sys [2009-7-14 15440]
S3 AmdK8;AMD K8 Processor Driver;C:\Windows\System32\drivers\amdk8.sys [2009-7-14 64512]
S3 amdsata;amdsata;C:\Windows\System32\drivers\amdsata.sys [2012-7-4 107904]
S3 amdsbs;amdsbs;C:\Windows\System32\drivers\amdsbs.sys [2009-6-10 194128]
S3 AppID;Ovladač AppID;C:\Windows\System32\drivers\appid.sys [2012-7-4 61440]
S3 AppIDSvc;Identita aplikace;C:\Windows\System32\svchost.exe -k LocalServiceAndNoImpersonation [2009-7-14 27136]
S3 Appinfo;Informace o aplikaci;C:\Windows\System32\svchost.exe -k netsvcs [2009-7-14 27136]
S3 AppleChargerSrv;AppleChargerSrv;system32\AppleChargerSrv.exe --> system32\AppleChargerSrv.exe [?]
S3 AppMgmt;Správa aplikací;C:\Windows\System32\svchost.exe -k netsvcs [2009-7-14 27136]
S3 arc;arc;C:\Windows\System32\drivers\arc.sys [2009-7-13 87632]
S3 arcsas;arcsas;C:\Windows\System32\drivers\arcsas.sys [2009-7-13 97856]
S3 aspnet_state;Stavová služba ASP.NET;C:\Windows\Microsoft.NET\Framework64\v4.0.30319\aspnet_state.exe [2010-3-18 44376]
S3 AsyncMac;Ovladač asynchronních médií připojení RAS;C:\Windows\System32\drivers\asyncmac.sys [2009-7-14 23040]
S3 AxInstSV;Instalační program ovládacích prvků ActiveX (AxInstSV);C:\Windows\System32\svchost.exe -k AxInstSVGroup [2009-7-14 27136]
S3 b06bdrv;Broadcom NetXtreme II VBD;C:\Windows\System32\drivers\bxvbda.sys [2009-6-10 468480]
S3 b57nd60a;Broadcom NetXtreme Gigabit Ethernet - NDIS 6.0;C:\Windows\System32\drivers\b57nd60a.sys [2009-6-10 270848]
S3 BDESVC;Služba BitLocker Drive Encryption;C:\Windows\System32\svchost.exe -k netsvcs [2009-7-14 27136]
S3 BrFiltLo;Brother USB Mass-Storage Lower Filter Driver;C:\Windows\System32\drivers\BrFiltLo.sys [2009-7-14 18432]
S3 BrFiltUp;Brother USB Mass-Storage Upper Filter Driver;C:\Windows\System32\drivers\BrFiltUp.sys [2009-7-14 8704]
S3 Brserid;Brother MFC Serial Port Interface Driver (WDM);C:\Windows\System32\drivers\BrSerId.sys [2009-7-14 286720]
S3 BrSerWdm;Brother WDM Serial driver;C:\Windows\System32\drivers\BrSerWdm.sys [2009-7-14 47104]
S3 BrUsbMdm;Brother MFC USB Fax Only Modem;C:\Windows\System32\drivers\BrUsbMdm.sys [2009-7-14 14976]
S3 BrUsbSer;Brother MFC USB Serial WDM Driver;C:\Windows\System32\drivers\BrUsbSer.sys [2009-7-14 14720]
S3 BTHMODEM;Bluetooth Serial Communications Driver;C:\Windows\System32\drivers\bthmodem.sys [2009-7-14 72192]
S3 bthserv;Služba pro podporu technologie Bluetooth;C:\Windows\System32\svchost.exe -k bthsvcs [2009-7-14 27136]
S3 CertPropSvc;Šíření certifikátů;C:\Windows\System32\svchost.exe -k netsvcs [2009-7-14 27136]
S3 circlass;Consumer IR Devices;C:\Windows\System32\drivers\circlass.sys [2009-7-14 45568]
S3 CmBatt;Microsoft ACPI Control Method Battery Driver;C:\Windows\System32\drivers\CmBatt.sys [2009-7-14 17664]
S3 cmdide;cmdide;C:\Windows\System32\drivers\cmdide.sys [2009-7-14 17488]
S3 Compbatt;Compbatt;C:\Windows\System32\drivers\compbatt.sys [2009-7-14 21584]
S3 COMSysApp;Systémová aplikace modelu COM+;C:\Windows\System32\dllhost.exe [2009-7-14 9728]
S3 defragsvc;Defragmentace disku;C:\Windows\System32\svchost.exe -k defragsvc [2009-7-14 27136]
S3 dot3svc;Wired AutoConfig Service;C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted [2009-7-14 27136]
S3 drmkaud;Ovladače zvuku považované společností Microsoft za důvěryhodné;C:\Windows\System32\drivers\drmkaud.sys [2009-7-14 5632]
S3 EapHost;Protokol EAP (Extensible Authentication Protocol);C:\Windows\System32\svchost.exe -k netsvcs [2009-7-14 27136]
S3 ebdrv;Broadcom NetXtreme II 10 GigE VBD;C:\Windows\System32\drivers\evbda.sys [2009-6-10 3286016]
S3 EFS;Systém souborů EFS (Encrypting File System);C:\Windows\System32\lsass.exe [2012-7-3 31232]
S3 ehRecvr;Služba přijímače aplikace Windows Media Center;C:\Windows\ehome\ehrecvr.exe [2012-7-4 696832]
S3 ehSched;Služba plánování aplikace Windows Media Center;C:\Windows\ehome\ehsched.exe [2009-7-14 127488]
S3 elxstor;elxstor;C:\Windows\System32\drivers\elxstor.sys [2009-6-10 530496]
S3 ErrDev;Ovladače chybového zařízení hardwaru Microsoft;C:\Windows\System32\drivers\errdev.sys [2009-7-14 9728]
S3 etdrv;etdrv;C:\Windows\etdrv.sys [2012-7-2 25640]
S3 exfat;exFAT File System Driver;C:\Windows\System32\drivers\exfat.sys [2009-7-14 195072]
S3 fastfat;FAT12/16/32 File System Driver;C:\Windows\System32\drivers\fastfat.sys [2009-7-14 204800]
S3 Fax;Fax;C:\Windows\System32\FXSSVC.exe [2012-7-4 689152]
S3 fdc;Floppy Disk Controller Driver;C:\Windows\System32\drivers\fdc.sys [2009-7-14 29696]
S3 Filetrace;Filetrace;C:\Windows\System32\drivers\filetrace.sys [2009-7-14 34304]
S3 flpydisk;Floppy Disk Driver;C:\Windows\System32\drivers\flpydisk.sys [2009-7-14 24576]
S3 FontCache3.0.0.0;Windows Presentation Foundation Font Cache 3.0.0.0;C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe [2012-7-4 42856]
S3 FsDepends;File System Dependency Minifilter;C:\Windows\System32\drivers\fsdepends.sys [2009-7-14 55376]
S3 Futuremark SystemInfo Service;Futuremark SystemInfo Service;C:\Program Files (x86)\Common Files\Futuremark Shared\Futuremark SystemInfo\FMSISvc.exe [2012-8-6 128928]
S3 gagp30kx;Microsoft Generic AGPv3.0 Filter for K8 Processor Platforms;C:\Windows\System32\drivers\GAGP30KX.SYS [2009-7-14 65088]
S3 GVTDrv64;GVTDrv64;C:\Windows\GVTDrv64.sys [2012-7-2 30528]
S3 hcw85cir;Hauppauge Consumer Infrared Receiver;C:\Windows\System32\drivers\hcw85cir.sys [2009-7-14 31232]
S3 HdAudAddService;Ovladač funkce Microsoft 1.1 UAA pro službu zvuku High Definition Audio;C:\Windows\System32\drivers\HdAudio.sys [2012-7-4 350208]
S3 HidBatt;HID UPS Battery Driver;C:\Windows\System32\drivers\hidbatt.sys [2009-7-14 26624]
S3 HidBth;Microsoft Bluetooth HID Miniport;C:\Windows\System32\drivers\hidbth.sys [2009-7-14 100864]
S3 HidIr;Microsoft Infrared HID Driver;C:\Windows\System32\drivers\hidir.sys [2009-7-14 46592]
S3 hidserv;Přístup k zařízením standardu HID;C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted [2009-7-14 27136]
S3 hkmsvc;Správa klíčů a certifikátů stavu;C:\Windows\System32\svchost.exe -k netsvcs [2009-7-14 27136]
S3 HpSAMD;HpSAMD;C:\Windows\System32\drivers\HpSAMD.sys [2012-7-4 78720]
S3 iaStorV;Řadič Intel diskového pole RAID – Windows 7;C:\Windows\System32\drivers\iaStorV.sys [2012-7-4 410496]
S3 IDriverT;InstallDriver Table Manager;C:\Program Files (x86)\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe [2005-4-4 69632]
S3 idsvc;Služba Windows CardSpace;C:\Windows\Microsoft.NET\Framework64\v3.0\Windows Communication Foundation\infocard.exe [2012-7-4 856400]
S3 iirsp;iirsp;C:\Windows\System32\drivers\iirsp.sys [2009-7-13 44112]
S3 intelide;intelide;C:\Windows\System32\drivers\intelide.sys [2009-7-14 16960]
S3 intelppm;Intel Processor Driver;C:\Windows\System32\drivers\intelppm.sys [2009-7-14 62464]
S3 IPBusEnum;Rozpoznávací modul sběrnice PnP-X IP;C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted [2009-7-14 27136]
S3 IpFilterDriver;IP Traffic Filter Driver;C:\Windows\System32\drivers\ipfltdrv.sys [2012-7-4 82944]
S3 IPMIDRV;IPMIDRV;C:\Windows\System32\drivers\IPMIDrv.sys [2012-7-4 78848]
S3 IPNAT;IP Network Address Translator;C:\Windows\System32\drivers\ipnat.sys [2009-7-14 116224]
S3 IRENUM;IR Bus Enumerator;C:\Windows\System32\drivers\irenum.sys [2009-7-14 17920]
S3 isapnp;isapnp;C:\Windows\System32\drivers\isapnp.sys [2009-7-14 20544]
S3 iScsiPrt;Ovladač iScsiPort;C:\Windows\System32\drivers\msiscsi.sys [2012-7-4 273792]
S3 kbdhid;Ovladač klávesnice standardu HID;C:\Windows\System32\drivers\kbdhid.sys [2012-7-4 33280]
S3 KtmRm;Služba KTMRM pro koordinátor DTC;C:\Windows\System32\svchost.exe -k NetworkServiceAndNoImpersonation [2009-7-14 27136]
S3 lltdsvc;Mapovač zjišťování topologie linkové vrstvy;C:\Windows\System32\svchost.exe -k LocalService [2009-7-14 27136]
S3 LSI_FC;LSI_FC;C:\Windows\System32\drivers\lsi_fc.sys [2009-7-13 114752]
S3 LSI_SAS;LSI_SAS;C:\Windows\System32\drivers\lsi_sas.sys [2009-7-13 106560]
S3 LSI_SAS2;LSI_SAS2;C:\Windows\System32\drivers\lsi_sas2.sys [2009-7-13 65600]
S3 LSI_SCSI;LSI_SCSI;C:\Windows\System32\drivers\lsi_scsi.sys [2009-7-13 115776]
S3 megasas;megasas;C:\Windows\System32\drivers\megasas.sys [2009-6-10 35392]
S3 MegaSR;MegaSR;C:\Windows\System32\drivers\MegaSR.sys [2009-7-13 284736]
S3 Modem;Modem;C:\Windows\System32\drivers\modem.sys [2009-7-14 40448]
S3 MozillaMaintenance;Mozilla Maintenance Service;C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe [2012-7-2 117144]
S3 mpio;Ovladač sběrnice Microsoft Multi-Path;C:\Windows\System32\drivers\mpio.sys [2012-7-4 155008]
S3 MRxDAV;Ovladač přesměrovače klienta WebDav;C:\Windows\System32\drivers\mrxdav.sys [2012-7-4 140800]
S3 msahci;msahci;C:\Windows\System32\drivers\msahci.sys [2012-7-4 31104]
S3 msdsm;Specifický modul zařízení Microsoft Multi-Path;C:\Windows\System32\drivers\msdsm.sys [2012-7-4 140672]
S3 MSDTC;Služba DTC (Distributed Transaction Coordinator);C:\Windows\System32\msdtc.exe [2009-7-14 141824]
S3 mshidkmdf;Pass-through HID to KMDF Filter Driver;C:\Windows\System32\drivers\mshidkmdf.sys [2009-7-14 8192]
S3 MSiSCSI;Služba iniciátoru iSCSI společnosti Microsoft;C:\Windows\System32\svchost.exe -k netsvcs [2009-7-14 27136]
S3 msiserver;Instalační služba systému Windows;C:\Windows\System32\msiexec.exe [2012-7-4 128000]
S3 MSKSSRV;Server proxy služby datových proudů Microsoft;C:\Windows\System32\drivers\mskssrv.sys [2009-7-14 11136]
S3 MSPCLOCK;Server proxy hodin datových proudů Microsoft;C:\Windows\System32\drivers\mspclock.sys [2009-7-14 7168]
S3 MSPQM;Server proxy správce kvality datových proudů Microsoft;C:\Windows\System32\drivers\mspqm.sys [2009-7-14 6784]
S3 MsRPC;MsRPC;C:\Windows\System32\drivers\msrpc.sys [2012-7-4 366976]
S3 MSTEE;Konvertor jímka-jímka typu T datových proudů Microsoft;C:\Windows\System32\drivers\mstee.sys [2009-7-14 8064]
S3 MTConfig;Microsoft Input Configuration Driver;C:\Windows\System32\drivers\MTConfig.sys [2009-7-14 15360]
S3 napagent;Agent architektury NAP (Network Access Protection);C:\Windows\System32\svchost.exe -k NetworkService [2009-7-14 27136]
S3 NativeWifiP;NativeWiFi Filter;C:\Windows\System32\drivers\nwifi.sys [2009-7-14 318976]
S3 NdisCap;NDIS Capture LightWeight Filter;C:\Windows\System32\drivers\ndiscap.sys [2009-7-14 35328]
S3 Ndisuio;NDIS Usermode I/O Protocol;C:\Windows\System32\drivers\ndisuio.sys [2012-7-4 56832]
S3 Netlogon;Služba Netlogon;C:\Windows\System32\lsass.exe [2012-7-3 31232]
S3 nfrd960;nfrd960;C:\Windows\System32\drivers\nfrd960.sys [2009-7-13 51264]
S3 nv_agp;Filtr sběrnice NVIDIA nForce AGP;C:\Windows\System32\drivers\NV_AGP.SYS [2009-7-14 122960]
S3 nvraid;nvraid;C:\Windows\System32\drivers\nvraid.sys [2012-7-4 148352]
S3 nvstor;nvstor;C:\Windows\System32\drivers\nvstor.sys [2012-7-4 166272]
S3 ohci1394;Hostitelský řadič pro rozhraní OHCI standardu 1394 (zastaralé);C:\Windows\System32\drivers\ohci1394.sys [2009-7-14 72832]
S3 Parport;Parallel port driver;C:\Windows\System32\drivers\parport.sys [2009-7-14 97280]
S3 pcmcia;pcmcia;C:\Windows\System32\drivers\pcmcia.sys [2009-7-14 220752]
S3 PeerDistSvc;BranchCache;C:\Windows\System32\svchost.exe -k PeerDist [2009-7-14 27136]
S3 PerfHost;Hostitel knihoven DLL čítačů výkonu;C:\Windows\SysWOW64\perfhost.exe [2009-7-14 20992]
S3 pla;Výstrahy a protokolování výkonu;C:\Windows\System32\svchost.exe -k LocalServiceNoNetwork [2009-7-14 27136]
S3 PNRPAutoReg;Služba publikování názvu počítače pomocí protokolu PNRP;C:\Windows\System32\svchost.exe -k LocalServicePeerNet [2009-7-14 27136]
S3 PolicyAgent;Agent zásad protokolu IPsec;C:\Windows\System32\svchost.exe -k NetworkServiceNetworkRestricted [2009-7-14 27136]
S3 Processor;Processor Driver;C:\Windows\System32\drivers\processr.sys [2009-7-14 60416]
S3 ProtectedStorage;Chráněné úložiště;C:\Windows\System32\lsass.exe [2012-7-3 31232]
S3 ql2300;ql2300;C:\Windows\System32\drivers\ql2300.sys [2009-6-10 1524816]
S3 ql40xx;ql40xx;C:\Windows\System32\drivers\ql40xx.sys [2009-7-13 128592]
S3 QWAVE;Sada qWave (Quality Windows Audio Video Experience);C:\Windows\System32\svchost.exe -k LocalServiceAndNoImpersonation [2009-7-14 27136]
S3 QWAVEdrv;Ovladač QWAVE;C:\Windows\System32\drivers\qwavedrv.sys [2009-7-14 46592]
S3 RasAcd;Remote Access Auto Connection Driver;C:\Windows\System32\drivers\rasacd.sys [2009-7-14 14848]
S3 RasAuto;Správce automatického připojení pomocí vzdáleného přístupu;C:\Windows\System32\svchost.exe -k netsvcs [2009-7-14 27136]
S3 RasMan;Správce vzdáleného přístupu;C:\Windows\System32\svchost.exe -k netsvcs [2009-7-14 27136]
S3 RDPDR;Terminal Server Device Redirector Driver;C:\Windows\System32\drivers\rdpdr.sys [2012-7-4 165888]
S3 RdpVideoMiniport;Remote Desktop Video Miniport Driver;C:\Windows\System32\drivers\rdpvideominiport.sys [2013-2-7 19456]
S3 RDPWD;RDP Winstation Driver;C:\Windows\System32\drivers\rdpwd.sys [2012-7-3 210944]
S3 RemoteRegistry;Vzdálený registr;C:\Windows\System32\svchost.exe -k regsvc [2009-7-14 27136]
S3 RpcLocator;Lokátor vzdáleného volání procedur (RPC);C:\Windows\System32\Locator.exe [2009-7-14 10240]
S3 RTHDMIAzAudService;Service for HDMI;C:\Windows\System32\drivers\RtHDMIVX.sys [2012-7-2 367976]
S3 s3cap;s3cap;C:\Windows\System32\drivers\vms3cap.sys [2012-7-4 6656]
S3 sbp2port;Ovladač sběrnice pro přenos dat zařízení podporujícího protokol SBP-2;C:\Windows\System32\drivers\sbp2port.sys [2012-7-4 103808]
S3 SCardSvr;Čipová karta;C:\Windows\System32\svchost.exe -k LocalServiceAndNoImpersonation [2009-7-14 27136]
S3 scfilter;Ovladač filtru čipových karet třídy PnP;C:\Windows\System32\drivers\scfilter.sys [2012-7-4 29696]
S3 SCPolicySvc;Zásady odebrání čipové karty;C:\Windows\System32\svchost.exe -k netsvcs [2009-7-14 27136]
S3 SDRSVC;Windows Zálohování;C:\Windows\System32\svchost.exe -k SDRSVC [2009-7-14 27136]
S3 seclogon;Sekundární přihlašování;C:\Windows\System32\svchost.exe -k netsvcs [2009-7-14 27136]
S3 SensrSvc;Adaptivní jas;C:\Windows\System32\svchost.exe -k LocalServiceAndNoImpersonation [2009-7-14 27136]
S3 sermouse;Serial Mouse Driver;C:\Windows\System32\drivers\sermouse.sys [2009-7-14 26624]
S3 SessionEnv;Konfigurace vzdálené plochy;C:\Windows\System32\svchost.exe -k netsvcs [2009-7-14 27136]
S3 sffdisk;Ovladač třídy úložiště SFF;C:\Windows\System32\drivers\sffdisk.sys [2009-7-14 14336]
S3 sffp_mmc;Ovladač protokolu úložiště SFF pro konzolu MMC;C:\Windows\System32\drivers\sffp_mmc.sys [2009-7-14 13824]
S3 sffp_sd;Ovladač protokolu úložiště SFF pro paměť sběrnici SDBus;C:\Windows\System32\drivers\sffp_sd.sys [2012-7-4 14336]
S3 sfloppy;High-Capacity Floppy Disk Drive;C:\Windows\System32\drivers\sfloppy.sys [2009-7-14 16896]
S3 SiSRaid2;SiSRaid2;C:\Windows\System32\drivers\sisraid2.sys [2009-6-10 43584]
S3 SiSRaid4;SiSRaid4;C:\Windows\System32\drivers\sisraid4.sys [2009-7-13 80464]
S3 Smb;Protokol TCP/IP a TCP/IPv6 orientovaný na zprávy (relace SMB);C:\Windows\System32\drivers\smb.sys [2009-7-14 93184]
S3 SNMPTRAP;Zachytávání pro službu SNMP;C:\Windows\System32\snmptrap.exe [2009-7-14 14336]
S3 sppuinotify;Služba Oznámení platformy SPP;C:\Windows\System32\svchost.exe -k LocalService [2009-7-14 27136]
S3 ss_bbus;SAMSUNG USB Mobile Device (WDM);C:\Windows\System32\drivers\ss_bbus.sys [2009-9-19 127488]
S3 ss_bmdfl;SAMSUNG USB Mobile Modem (Filter);C:\Windows\System32\drivers\ss_bmdfl.sys [2009-9-19 18944]
S3 ss_bmdm;SAMSUNG USB Mobile Modem;C:\Windows\System32\drivers\ss_bmdm.sys [2009-9-19 161280]
S3 SstpSvc;Služba SSTP (Secure Socket Tunneling Protocol);C:\Windows\System32\svchost.exe -k LocalService [2009-7-14 27136]
S3 Steam Client Service;Steam Client Service;C:\Program Files (x86)\Common Files\Steam\SteamService.exe [2012-7-7 543144]
S3 stexstor;stexstor;C:\Windows\System32\drivers\stexstor.sys [2009-7-13 24656]
S3 stisvc;Načítání obrázků (WIA);C:\Windows\System32\svchost.exe -k imgsvc [2009-7-14 27136]
S3 StorSvc;Služba úložiště;C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted [2009-7-14 27136]
S3 storvsc;storvsc;C:\Windows\System32\drivers\storvsc.sys [2012-7-4 34688]
S3 swprv;služba Zprostředkovatel softwaru služby Stínová kopie svazků;C:\Windows\System32\svchost.exe -k swprv [2009-7-14 27136]
S3 TabletInputService;Služba Vstupní panel počítače Tablet PC;C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted [2009-7-14 27136]
S3 TapiSrv;Telefonní subsystém;C:\Windows\System32\svchost.exe -k NetworkService [2009-7-14 27136]
S3 TBS;Služba TPM Base Services;C:\Windows\System32\svchost.exe -k LocalServiceAndNoImpersonation [2009-7-14 27136]
S3 TCPIP6;Microsoft IPv6 Protocol Driver;C:\Windows\System32\drivers\tcpip.sys [2013-2-13 1913192]
S3 TDPIPE;TDPIPE;C:\Windows\System32\drivers\tdpipe.sys [2009-7-14 15872]
S3 TDTCP;TDTCP;C:\Windows\System32\drivers\tdtcp.sys [2012-7-2 23552]
S3 TermService;Vzdálená plocha;C:\Windows\System32\svchost.exe -k NetworkService [2009-7-14 27136]
S3 THREADORDER;Server pro řazení podprocesů;C:\Windows\System32\svchost.exe -k LocalService [2009-7-14 27136]
S3 tssecsrv;Remote Desktop Services Security Filter Driver;C:\Windows\System32\drivers\tssecsrv.sys [2012-7-4 39424]
S3 TsUsbFlt;TsUsbFlt;C:\Windows\System32\drivers\TsUsbFlt.sys [2013-2-7 57856]
S3 uagp35;Microsoft AGPv3.5 Filter;C:\Windows\System32\drivers\UAGP35.SYS [2009-7-14 64080]
S3 UI0Detect;Zjišťování interaktivních služeb;C:\Windows\System32\UI0Detect.exe [2009-7-14 40960]
S3 uliagpkx;Filtr sběrnice Uli AGP;C:\Windows\System32\drivers\ULIAGPKX.SYS [2009-7-14 64592]
S3 UmPass;Microsoft UMPass Driver;C:\Windows\System32\drivers\umpass.sys [2009-7-14 9728]
S3 UmRdpService;Přesměrovač portů uživatelského režimu služby Vzdálená plocha;C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted [2009-7-14 27136]
S3 usbaudio;Ovladač zvuků USB (WDM);C:\Windows\System32\drivers\USBAUDIO.sys [2012-7-4 109696]
S3 usbccgp;Obecný nadřazený ovladač Microsoft USB;C:\Windows\System32\drivers\usbccgp.sys [2012-7-4 98816]
S3 usbcir;Infračervený přijímač eHome (USBCIR);C:\Windows\System32\drivers\usbcir.sys [2009-7-14 100352]
S3 usbprint;Microsoft USB PRINTER Class;C:\Windows\System32\drivers\usbprint.sys [2009-7-14 25088]
S3 USBSTOR;Ovladač velkokapacitního paměťového zařízení USB;C:\Windows\System32\drivers\USBSTOR.SYS [2012-7-4 91648]
S3 usbuhci;Ovladač miniportu univerzálního hostitelského řadiče Microsoft USB;C:\Windows\System32\drivers\usbuhci.sys [2012-7-4 30720]
S3 usbvideo;Zobrazovací zařízení USB (WDM);C:\Windows\System32\drivers\usbvideo.sys [2012-7-4 184960]
S3 VaultSvc;Správce pověření;C:\Windows\System32\lsass.exe [2012-7-3 31232]
S3 vds;Virtuální disk;C:\Windows\System32\vds.exe [2012-7-4 533504]
S3 vga;vga;C:\Windows\System32\drivers\vgapnp.sys [2009-7-14 29184]
S3 vhdmp;vhdmp;C:\Windows\System32\drivers\vhdmp.sys [2012-7-4 215936]
S3 viaide;viaide;C:\Windows\System32\drivers\viaide.sys [2009-7-14 17488]
S3 VMBusHID;VMBusHID;C:\Windows\System32\drivers\VMBusHID.sys [2012-7-4 21760]
S3 vsmraid;vsmraid;C:\Windows\System32\drivers\vsmraid.sys [2009-6-10 161872]
S3 VSS;Stínová kopie svazku;C:\Windows\System32\VSSVC.exe [2012-7-4 1600512]
S3 vwifibus;Ovladač sběrnice Virtual WiFi;C:\Windows\System32\drivers\vwifibus.sys [2009-7-14 24576]
S3 W32Time;Systémový čas;C:\Windows\System32\svchost.exe -k LocalService [2009-7-14 27136]
S3 WacomPen;Wacom Serial Pen HID Driver;C:\Windows\System32\drivers\wacompen.sys [2009-7-14 27776]
S3 WANARP;Ovladač pro vzdálený přístup IP ARP;C:\Windows\System32\drivers\wanarp.sys [2012-7-4 88576]
S3 WatAdminSvc;Služba Technologie aktivace Windows;C:\Windows\System32\Wat\WatAdminSvc.exe [2012-7-4 1255736]
S3 wbengine;Služba jádra pro zálohování dat na úrovni bloků;C:\Windows\System32\wbengine.exe [2012-7-4 1504256]
S3 WbioSrvc;Biometrická služba systému Windows;C:\Windows\System32\svchost.exe -k WbioSvcGroup [2009-7-14 27136]
S3 wcncsvc;Technologie Windows Connect Now – Registrátor konfigurací;C:\Windows\System32\svchost.exe -k LocalServiceAndNoImpersonation [2009-7-14 27136]
S3 WcsPlugInService;Systém barev systému Windows;C:\Windows\System32\svchost.exe -k wcssvc [2009-7-14 27136]
S3 Wd;Wd;C:\Windows\System32\drivers\wd.sys [2009-7-14 21056]
S3 WebClient;Webový klient;C:\Windows\System32\svchost.exe -k LocalService [2009-7-14 27136]
S3 Wecsvc;Sběr událostí systému Windows;C:\Windows\System32\svchost.exe -k NetworkService [2009-7-14 27136]
S3 wercplsupport;Podpora ovládacího panelu Oznámení a řešení problémů;C:\Windows\System32\svchost.exe -k netsvcs [2009-7-14 27136]
S3 WerSvc;Služba Zasílání zpráv o chybách systému Windows;C:\Windows\System32\svchost.exe -k WerSvcGroup [2009-7-14 27136]
S3 WIMMount;WIMMount;C:\Windows\System32\drivers\wimmount.sys [2009-7-14 22096]
S3 WinRM;Vzdálená správa systému Windows (WS-Management);C:\Windows\System32\svchost.exe -k NetworkService [2009-7-14 27136]
S3 Wlansvc;Automatická konfigurace sítě WLAN;C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted [2009-7-14 27136]
S3 wmiApSrv;WMI Performance Adapter;C:\Windows\System32\wbem\WmiApSrv.exe [2009-7-14 203264]
S3 WPCSvc;Parental Controls;C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted [2009-7-14 27136]
S3 WPDBusEnum;Služba Výčet přenosných zařízení;C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted [2009-7-14 27136]
S3 WudfPf;User Mode Driver Frameworks Platform Driver;C:\Windows\System32\drivers\WUDFPf.sys [2012-11-15 87040]
S3 WUDFRd;WUDFRd;C:\Windows\System32\drivers\WUDFRd.sys [2012-11-15 198656]
S3 wudfsvc;Platforma WDF (Windows Driver Foundation) – platforma ovladače v uživatelském režimu;C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted [2009-7-14 27136]
S3 WwanSvc;Automatická konfigurace sítě WWAN;C:\Windows\System32\svchost.exe -k LocalServiceNoNetwork [2009-7-14 27136]
S4 cdfs;CD/DVD File System Reader;C:\Windows\System32\drivers\cdfs.sys [2009-7-14 92160]
S4 clr_optimization_v2.0.50727_32;Microsoft .NET Framework NGEN v2.0.50727_X86;C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe [2009-7-13 66384]
S4 clr_optimization_v2.0.50727_64;Microsoft .NET Framework NGEN v2.0.50727_X64;C:\Windows\Microsoft.NET\Framework64\v2.0.50727\mscorsvw.exe [2009-7-13 89920]
S4 crcdisk;Crcdisk Filter Driver;C:\Windows\System32\drivers\crcdisk.sys [2009-7-14 24144]
S4 Mcx2Svc;Služba zařízení Media Center Extender;C:\Windows\System32\svchost.exe -k LocalServiceAndNoImpersonation [2009-7-14 27136]
S4 NetMsmqActivator;Adaptér naslouchání Net.Msmq;C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2010-3-18 124240]
S4 NetPipeActivator;Adaptér naslouchání Net.Pipe;C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2010-3-18 124240]
S4 NetTcpActivator;Adaptér naslouchání Net.Tcp;C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2010-3-18 124240]
S4 NetTcpPortSharing;Služba sdílení portů Net.Tcp;C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2010-3-18 124240]
S4 RemoteAccess;Směrování a vzdálený přístup;C:\Windows\System32\svchost.exe -k netsvcs [2009-7-14 27136]
S4 SharedAccess;Sdílení připojení k Internetu (ICS);C:\Windows\System32\svchost.exe -k netsvcs [2009-7-14 27136]
S4 udfs;udfs;C:\Windows\System32\drivers\udfs.sys [2012-7-4 328192]
S4 ws2ifsl;Ovladač Winsock IFS;C:\Windows\System32\drivers\ws2ifsl.sys [2009-7-14 21504]
.
=============== File Associations ===============
.
FileExt: .bat: batfile="%1" %*
FileExt: .cmd: cmdfile="%1" %*
FileExt: .com: comfile="%1" %*
FileExt: .exe: exefile="%1" %*
FileExt: .pif: piffile="%1" %*
FileExt: .scr: scrfile="%1" /S
FileExt: .reg: regfile=regedit.exe "%1"
FileExt: .txt: txtfile=C:\Windows\System32\NOTEPAD.EXE %1 [UserChoice]
FileExt: .chm: chm.file="C:\Windows\hh.exe" %1
FileExt: .ini: inifile=C:\Windows\System32\NOTEPAD.EXE %1
FileExt: .inf: inffile=C:\Windows\System32\NOTEPAD.EXE %1
ShellExec: AcroRD32.exe: Read="C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AcroRd32.exe" "%1"
ShellExec: dota.exe: open="d:\gamer\dota2\steamapps\common\dota 2 beta\dota.exe" "%1"
ShellExec: DTLite.exe: open="C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe" "%1"
ShellExec: ehshell.exe: open="C:\Windows\eHome\ehshell.exe" "%1"
ShellExec: GOM.EXE: open="C:\Program Files (x86)\GRETECH\GomPlayer\GOM.EXE" "%1"
ShellExec: iexplore.exe: open="C:\Program Files\Internet Explorer\iexplore.exe" %1
ShellExec: Minecraft.exe: open="C:\Users\Bender\Desktop\Games\Minecraft.exe" "%1"
ShellExec: mspaint.exe: edit="C:\Windows\System32\mspaint.exe" "%1"
ShellExec: notepad.exe: edit=C:\Windows\System32\NOTEPAD.EXE %1
ShellExec: notepad.exe: open=C:\Windows\System32\NOTEPAD.EXE %1
ShellExec: photoviewer.dll: open=C:\Windows\System32\rundll32.exe "C:\Program Files (x86)\Windows Photo Viewer\PhotoViewer.dll", ImageView_Fullscreen %1
ShellExec: photoviewer.dll: print=C:\Windows\System32\rundll32.exe "C:\Program Files (x86)\Windows Photo Viewer\PhotoViewer.dll", ImageView_Fullscreen %1
ShellExec: portal2.exe: open="d:\gamer\portal 2\portal2.exe" "%1"
ShellExec: vlc.exe: Open="C:\Program Files (x86)\VideoLAN\VLC\vlc.exe" --started-from-file "%1"
ShellExec: winamp.exe: Enqueue="C:\Program Files (x86)\Winamp\winamp.exe" /ADD "%1"
ShellExec: winamp.exe: ListBookmark="C:\Program Files (x86)\Winamp\winamp.exe" /BOOKMARK "%1"
ShellExec: winamp.exe: open="C:\Program Files (x86)\Winamp\winamp.exe" "%1"
ShellExec: winamp.exe: Play="C:\Program Files (x86)\Winamp\winamp.exe" "%1"
ShellExec: WinRAR.exe: open="C:\Program Files (x86)\WinRAR\WinRAR.exe" "%1"
ShellExec: wmplayer.exe: open="C:\Program Files (x86)\Windows Media Player\wmplayer.exe" /Open "%L"
ShellExec: wmplayer.exe: play="C:\Program Files (x86)\Windows Media Player\wmplayer.exe" /Play "%L"
ShellExec: wordpad.exe: open="C:\Program Files (x86)\Windows NT\Accessories\WORDPAD.EXE" "%1"
.
=============== Created Last 60 ================
.
2013-05-28 18:13:16 -------- d---a-w- C:\ProgramData\TEMP
2013-05-28 18:11:25 75264 ----a-w- C:\Windows\SysWow64\unacev2.dll
2013-05-28 18:11:25 153088 ----a-w- C:\Windows\SysWow64\UNRAR3.dll
2013-05-28 18:11:23 -------- d-----w- C:\Users\Bender\AppData\Roaming\Simply Super Software
2013-05-28 18:11:23 -------- d-----w- C:\ProgramData\Simply Super Software
2013-05-28 18:11:23 -------- d-----w- C:\Program Files (x86)\Trojan Remover
2013-05-28 16:58:43 -------- d-----w- C:\Program Files\Enigma Software Group
2013-05-28 16:58:06 -------- d-----w- C:\Windows\E63D89610BA94CF39E94407ACA42846C.TMP
2013-05-28 12:42:06 9460464 ----a-w- C:\ProgramData\Microsoft\Windows Defender\Definition Updates\{67794A76-2CF5-4E89-80EA-7B47FA0E99C0}\mpengine.dll
2013-05-28 12:28:51 -------- d-----w- C:\Users\Bender\AppData\Local\Programs
2013-05-27 04:51:12 -------- d-----w- C:\Users\Bender\AppData\Local\Deployment
2013-05-27 04:51:12 -------- d-----w- C:\Users\Bender\AppData\Local\Apps
2013-05-24 20:53:09 744448 ----a-w- C:\Windows\SysWow64\msikfk32.dll
2013-05-23 13:18:07 262552 ----a-w- C:\Program Files (x86)\Mozilla Firefox\browser\components\browsercomps.dll
2013-05-15 09:53:36 2706432 ----a-w- C:\Windows\System32\mshtml.tlb
2013-05-15 09:53:35 526336 ----a-w- C:\Windows\System32\ieui.dll
2013-05-15 09:53:35 51712 ----a-w- C:\Windows\System32\ie4uinit.exe
2013-05-15 09:53:35 391168 ----a-w- C:\Windows\SysWow64\ieui.dll
2013-05-15 09:53:35 278528 ----a-w- C:\Program Files\Internet Explorer\sqmapi.dll
2013-05-15 09:53:35 2706432 ----a-w- C:\Windows\SysWow64\mshtml.tlb
2013-05-15 09:53:35 257536 ----a-w- C:\Program Files (x86)\Internet Explorer\ieproxy.dll
2013-05-15 09:53:35 217600 ----a-w- C:\Program Files (x86)\Internet Explorer\sqmapi.dll
2013-05-15 09:53:34 89600 ----a-w- C:\Windows\System32\RegisterIEPKEYs.exe
2013-05-15 09:53:34 71680 ----a-w- C:\Windows\SysWow64\RegisterIEPKEYs.exe
2013-05-15 09:53:34 701952 ----a-w- C:\Program Files\Internet Explorer\ieproxy.dll
2013-05-15 09:53:34 67072 ----a-w- C:\Windows\System32\iesetup.dll
2013-05-15 09:53:34 61440 ----a-w- C:\Windows\SysWow64\iesetup.dll
2013-05-15 09:53:34 603136 ----a-w- C:\Windows\System32\msfeeds.dll
2013-05-15 09:53:34 493056 ----a-w- C:\Windows\SysWow64\msfeeds.dll
2013-05-15 09:53:34 39936 ----a-w- C:\Windows\System32\iernonce.dll
2013-05-15 09:53:34 356352 ----a-w- C:\Program Files\Internet Explorer\IEShims.dll
2013-05-15 09:53:34 33280 ----a-w- C:\Windows\SysWow64\iernonce.dll
2013-05-15 09:53:34 235520 ----a-w- C:\Program Files (x86)\Internet Explorer\IEShims.dll
2013-05-15 09:53:34 136704 ----a-w- C:\Windows\System32\iesysprep.dll
2013-05-15 09:53:34 109056 ----a-w- C:\Windows\SysWow64\iesysprep.dll
2013-05-15 09:53:33 770608 ----a-w- C:\Program Files (x86)\Internet Explorer\iexplore.exe
2013-05-15 09:53:33 2647552 ----a-w- C:\Windows\System32\iertutil.dll
2013-05-15 09:53:33 2046976 ----a-w- C:\Windows\SysWow64\iertutil.dll
2013-05-15 09:53:32 855552 ----a-w- C:\Windows\System32\jscript.dll
2013-05-15 09:53:32 775232 ----a-w- C:\Program Files\Internet Explorer\iexplore.exe
2013-05-15 09:53:32 690688 ----a-w- C:\Windows\SysWow64\jscript.dll
2013-05-15 09:53:32 1365504 ----a-w- C:\Windows\System32\urlmon.dll
2013-05-15 09:53:32 1130496 ----a-w- C:\Windows\SysWow64\urlmon.dll
2013-05-15 09:53:31 3958784 ----a-w- C:\Windows\System32\jscript9.dll
2013-05-15 09:53:31 2877440 ----a-w- C:\Windows\SysWow64\jscript9.dll
2013-05-15 09:53:30 817664 ----a-w- C:\Program Files (x86)\Common Files\Microsoft Shared\VGX\VGX.dll
2013-05-15 09:53:30 53248 ----a-w- C:\Windows\System32\jsproxy.dll
2013-05-15 09:53:30 39424 ----a-w- C:\Windows\SysWow64\jsproxy.dll
2013-05-15 09:53:30 1767424 ----a-w- C:\Windows\SysWow64\wininet.dll
2013-05-15 09:53:30 1084928 ----a-w- C:\Program Files\Common Files\Microsoft Shared\VGX\VGX.dll
2013-05-15 09:53:29 2242048 ----a-w- C:\Windows\System32\wininet.dll
2013-05-15 09:53:28 14323712 ----a-w- C:\Windows\SysWow64\mshtml.dll
2013-05-15 09:53:26 19231232 ----a-w- C:\Windows\System32\mshtml.dll
2013-05-15 09:53:25 15404032 ----a-w- C:\Windows\System32\ieframe.dll
2013-05-15 09:53:24 13760512 ----a-w- C:\Windows\SysWow64\ieframe.dll
2013-05-15 08:40:18 983400 ----a-w- C:\Windows\System32\drivers\dxgkrnl.sys
2013-05-15 08:40:18 265064 ----a-w- C:\Windows\System32\drivers\dxgmms1.sys
2013-05-15 08:40:18 144384 ----a-w- C:\Windows\System32\cdd.dll
2013-05-15 08:40:08 197120 ----a-w- C:\Windows\System32\shdocvw.dll
2013-05-15 08:40:08 1930752 ----a-w- C:\Windows\System32\authui.dll
2013-05-15 08:40:08 14172672 ----a-w- C:\Windows\System32\shell32.dll
2013-05-15 08:40:07 12872704 ----a-w- C:\Windows\SysWow64\shell32.dll
2013-05-15 08:40:06 70144 ----a-w- C:\Windows\System32\appinfo.dll
2013-05-15 08:40:06 180224 ----a-w- C:\Windows\SysWow64\shdocvw.dll
2013-05-15 08:40:06 1796096 ----a-w- C:\Windows\SysWow64\authui.dll
2013-05-15 08:40:06 111448 ----a-w- C:\Windows\System32\consent.exe
2013-05-15 08:40:03 48640 ----a-w- C:\Windows\System32\wwanprotdim.dll
2013-05-15 08:40:03 230400 ----a-w- C:\Windows\System32\wwansvc.dll
2013-05-15 08:40:02 3153920 ----a-w- C:\Windows\System32\win32k.sys
2013-05-11 10:37:28 209472 ----a-w- C:\Program Files (x86)\Mozilla Firefox\Plugins\nppdf32.dll
2013-05-10 23:54:55 -------- d-----w- C:\Program Files (x86)\GSC World Publishing
2013-05-04 08:03:02 -------- d-----w- C:\Program Files (x86)\Winamp Detect
2013-05-04 08:02:47 -------- d-----w- C:\Program Files (x86)\Common Files\PX Storage Engine
2013-05-04 08:02:40 -------- d-----w- C:\Users\Bender\AppData\Roaming\Winamp
2013-05-04 08:02:40 -------- d-----w- C:\Program Files (x86)\Winamp
2013-04-28 16:13:21 -------- d-----w- C:\Users\Bender\AppData\Roaming\StarFriend.net
2013-04-27 16:25:19 -------- d-----w- C:\Users\Bender\AppData\Roaming\AC3Filter
2013-04-26 10:11:43 -------- d-----w- C:\Windows\SysWow64\searchplugins
2013-04-26 10:11:43 -------- d-----w- C:\Windows\SysWow64\Extensions
2013-04-24 21:33:12 -------- d-----w- C:\Users\Bender\AppData\Roaming\InstallShield
2013-04-23 20:32:37 1656680 ----a-w- C:\Windows\System32\drivers\ntfs.sys
2013-04-19 19:11:13 -------- d-----w- C:\Program Files (x86)\Common Files\Java
2013-04-19 19:11:05 95648 ----a-w- C:\Windows\SysWow64\WindowsAccessBridge-32.dll
2013-04-19 19:11:05 174496 ----a-w- C:\Windows\SysWow64\javaw.exe
2013-04-19 19:11:05 174496 ----a-w- C:\Windows\SysWow64\java.exe
2013-04-17 16:29:30 -------- d-----w- C:\ProgramData\Steam
2013-04-13 18:27:49 965120 ----a-w- C:\Windows\SysWow64\ac3filter.acm
2013-04-13 18:27:49 1202688 ----a-w- C:\Windows\System32\ac3filter64.acm
2013-04-13 18:27:48 -------- d-----w- C:\Program Files (x86)\AC3Filter
2013-04-13 06:59:07 26520 ----a-w- C:\Program Files (x86)\Mozilla Firefox\plugin-hang-ui.exe
2013-04-13 06:59:00 96664 ----a-w- C:\Program Files (x86)\Mozilla Firefox\webapprt-stub.exe
2013-04-13 06:59:00 272280 ----a-w- C:\Program Files (x86)\Mozilla Firefox\updater.exe
2013-04-13 06:59:00 19449240 ----a-w- C:\Program Files (x86)\Mozilla Firefox\xul.dll
2013-04-13 06:59:00 19352 ----a-w- C:\Program Files (x86)\Mozilla Firefox\xpcom.dll
2013-04-13 06:59:00 170232 ----a-w- C:\Program Files (x86)\Mozilla Firefox\webapp-uninstaller.exe
2013-04-13 06:58:59 92056 ----a-w- C:\Program Files (x86)\Mozilla Firefox\smime3.dll
2013-04-13 06:58:59 866960 ----a-w- C:\Program Files (x86)\Mozilla Firefox\uninstall\helper.exe
2013-04-13 06:58:59 157080 ----a-w- C:\Program Files (x86)\Mozilla Firefox\ssl3.dll
2013-04-13 06:58:59 152472 ----a-w- C:\Program Files (x86)\Mozilla Firefox\softokn3.dll
2013-04-13 06:58:58 91544 ----a-w- C:\Program Files (x86)\Mozilla Firefox\nssdbm3.dll
2013-04-13 06:58:58 825752 ----a-w- C:\Program Files (x86)\Mozilla Firefox\mozsqlite3.dll
2013-04-13 06:58:58 770384 ----a-w- C:\Program Files (x86)\Mozilla Firefox\msvcr100.dll
2013-04-13 06:58:58 642968 ----a-w- C:\Program Files (x86)\Mozilla Firefox\nss3.dll
2013-04-13 06:58:58 421200 ----a-w- C:\Program Files (x86)\Mozilla Firefox\msvcp100.dll
2013-04-13 06:58:58 375192 ----a-w- C:\Program Files (x86)\Mozilla Firefox\nssckbi.dll
2013-04-13 06:58:58 3128728 ----a-w- C:\Program Files (x86)\Mozilla Firefox\mozjs.dll
2013-04-13 06:58:58 21912 ----a-w- C:\Program Files (x86)\Mozilla Firefox\plc4.dll
2013-04-13 06:58:58 20888 ----a-w- C:\Program Files (x86)\Mozilla Firefox\plds4.dll
2013-04-13 06:58:58 17304 ----a-w- C:\Program Files (x86)\Mozilla Firefox\plugin-container.exe
2013-04-13 06:58:58 172440 ----a-w- C:\Program Files (x86)\Mozilla Firefox\nspr4.dll
2013-04-13 06:58:58 163256 ----a-w- C:\Program Files (x86)\Mozilla Firefox\Plugins\np-mswmp.dll
2013-04-13 06:58:58 104344 ----a-w- C:\Program Files (x86)\Mozilla Firefox\nssutil3.dll
2013-04-13 06:58:57 193824 ----a-w- C:\Program Files (x86)\Mozilla Firefox\maintenanceservice_installer.exe
2013-04-13 06:58:57 16280 ----a-w- C:\Program Files (x86)\Mozilla Firefox\mozalloc.dll
2013-04-13 06:58:57 131480 ----a-w- C:\Program Files (x86)\Mozilla Firefox\mozglue.dll
2013-04-13 06:58:57 117144 ----a-w- C:\Program Files (x86)\Mozilla Firefox\maintenanceservice.exe
2013-04-13 06:58:56 920472 ----a-w- C:\Program Files (x86)\Mozilla Firefox\firefox.exe
2013-04-13 06:58:56 59288 ----a-w- C:\Program Files (x86)\Mozilla Firefox\libEGL.dll
2013-04-13 06:58:56 478104 ----a-w- C:\Program Files (x86)\Mozilla Firefox\libGLESv2.dll
2013-04-13 06:58:56 3076504 ----a-w- C:\Program Files (x86)\Mozilla Firefox\gkmedias.dll
2013-04-13 06:58:56 279448 ----a-w- C:\Program Files (x86)\Mozilla Firefox\freebl3.dll
2013-04-13 06:58:55 2106216 ----a-w- C:\Program Files (x86)\Mozilla Firefox\D3DCompiler_43.dll
2013-04-13 06:58:55 116120 ----a-w- C:\Program Files (x86)\Mozilla Firefox\crashreporter.exe
2013-04-13 06:58:54 74136 ----a-w- C:\Program Files (x86)\Mozilla Firefox\breakpadinjector.dll
2013-04-13 06:58:54 19352 ----a-w- C:\Program Files (x86)\Mozilla Firefox\AccessibleMarshal.dll
2013-04-13 06:58:54 -------- d-----w- C:\Program Files (x86)\Mozilla Firefox
2013-04-12 15:10:27 -------- d-----w- C:\Program Files\Common Files\EPSON
2013-04-12 15:10:16 -------- d-----w- C:\ProgramData\EPSON
2013-04-10 14:50:28 223752 ----a-w- C:\Windows\System32\drivers\fvevol.sys
2013-04-10 14:50:24 5550424 ----a-w- C:\Windows\System32\ntoskrnl.exe
2013-04-10 14:50:23 3913560 ----a-w- C:\Windows\SysWow64\ntoskrnl.exe
2013-04-10 14:50:22 3968856 ----a-w- C:\Windows\SysWow64\ntkrnlpa.exe
2013-04-10 14:50:22 112640 ----a-w- C:\Windows\System32\smss.exe
2013-04-10 14:50:21 6656 ----a-w- C:\Windows\SysWow64\apisetschema.dll
2013-04-10 14:50:21 43520 ----a-w- C:\Windows\System32\csrsrv.dll
2013-04-10 13:57:40 -------- d-----w- C:\Program Files (x86)\Java
2013-04-07 14:27:27 -------- d-----w- C:\MTV_OUTPUT
2013-04-07 13:50:49 -------- d-----w- C:\Program Files (x86)\DsNET Corp
2013-04-01 17:52:45 -------- d-----w- C:\Users\Bender\AppData\Roaming\TuneUp Software
2013-04-01 17:52:39 -------- d-----w- C:\ProgramData\TuneUp Software
2013-04-01 17:52:35 -------- d-sh--w- C:\ProgramData\{C4ABDBC8-1C81-42C9-BFFC-4A68511E9E4F}
2013-04-01 17:52:35 -------- d--h--w- C:\ProgramData\Common Files

redneB · #2 Příspěvek od **redneB** » 29 kvě 2013 13:11

.
==================== Find6M ====================
.
2013-05-29 11:52:17 25640 ----a-w- C:\Windows\gdrv.sys
2013-05-25 19:07:56 103736 ----a-w- C:\Windows\SysWow64\PnkBstrB.exe
2013-05-24 21:02:12 66872 ----a-w- C:\Windows\SysWow64\PnkBstrA.exe
2013-05-24 21:02:12 2337865 ----a-w- C:\Windows\SysWow64\pbsvc.exe
2013-05-15 09:54:16 75016696 ----a-w- C:\Windows\System32\MRT.exe
2013-05-14 21:42:57 71048 ----a-w- C:\Windows\SysWow64\FlashPlayerCPLApp.cpl
2013-05-14 21:42:57 692104 ----a-w- C:\Windows\SysWow64\FlashPlayerApp.exe
2013-05-09 08:59:07 72016 ----a-w- C:\Windows\System32\drivers\aswRdr2.sys
2013-05-09 08:59:07 65336 ----a-w- C:\Windows\System32\drivers\aswRvrt.sys
2013-05-09 08:59:07 64288 ----a-w- C:\Windows\System32\drivers\aswTdi.sys
2013-05-09 08:59:07 378432 ----a-w- C:\Windows\System32\drivers\aswSP.sys
2013-05-09 08:59:07 189936 ----a-w- C:\Windows\System32\drivers\aswVmm.sys
2013-05-09 08:59:07 1025808 ----a-w- C:\Windows\System32\drivers\aswSnx.sys
2013-05-09 08:59:06 80816 ----a-w- C:\Windows\System32\drivers\aswMonFlt.sys
2013-05-09 08:59:06 33400 ----a-w- C:\Windows\System32\drivers\aswFsBlk.sys
2013-05-09 08:58:37 41664 ----a-w- C:\Windows\avastSS.scr
2013-05-09 08:58:11 287840 ----a-w- C:\Windows\System32\aswBoot.exe
2013-05-02 00:06:08 278800 ------w- C:\Windows\System32\MpSigStub.exe
2013-04-16 15:36:09 281768 ----a-w- C:\Windows\SysWow64\PnkBstrB.xtr
2013-04-16 15:36:09 281768 ----a-w- C:\Windows\SysWow64\PnkBstrB.ex0
2013-04-13 05:49:23 135168 ----a-w- C:\Windows\apppatch\AppPatch64\AcXtrnal.dll
2013-04-13 05:49:19 350208 ----a-w- C:\Windows\apppatch\AppPatch64\AcLayers.dll
2013-04-13 05:49:19 308736 ----a-w- C:\Windows\apppatch\AppPatch64\AcGenral.dll
2013-04-13 05:49:19 111104 ----a-w- C:\Windows\apppatch\AppPatch64\acspecfc.dll
2013-04-13 04:45:16 474624 ----a-w- C:\Windows\apppatch\AcSpecfc.dll
2013-04-13 04:45:15 2176512 ----a-w- C:\Windows\apppatch\AcGenral.dll
2013-04-10 13:57:40 861088 ----a-w- C:\Windows\SysWow64\npDeployJava1.dll
2013-04-10 13:57:40 782240 ----a-w- C:\Windows\SysWow64\deployJava1.dll
2013-03-06 23:33:20 22600 ----a-w- C:\Windows\System32\drivers\aswKbd.sys
2013-02-19 10:32:03 108448 ----a-w- C:\Windows\System32\WindowsAccessBridge-64.dll
2013-02-19 10:32:02 963488 ----a-w- C:\Windows\System32\deployJava1.dll
2013-02-19 10:32:02 310688 ----a-w- C:\Windows\System32\javaws.exe
2013-02-19 10:32:02 188832 ----a-w- C:\Windows\System32\javaw.exe
2013-02-19 10:32:02 188320 ----a-w- C:\Windows\System32\java.exe
2013-02-19 10:32:02 1085344 ----a-w- C:\Windows\System32\npDeployJava1.dll
2013-02-12 04:12:05 19968 ----a-w- C:\Windows\System32\drivers\usb8023.sys
2013-01-15 17:49:06 26432 ----a-w- C:\Windows\System32\RegistryDefragBootTime.exe
2013-01-13 21:17:03 9728 ---ha-w- C:\Windows\SysWow64\api-ms-win-downlevel-shlwapi-l1-1-0.dll
2013-01-13 21:17:02 2560 ---ha-w- C:\Windows\SysWow64\api-ms-win-downlevel-normaliz-l1-1-0.dll
2013-01-13 21:16:42 10752 ---ha-w- C:\Windows\SysWow64\api-ms-win-downlevel-advapi32-l1-1-0.dll
2013-01-13 21:12:46 3584 ---ha-w- C:\Windows\SysWow64\api-ms-win-downlevel-advapi32-l2-1-0.dll
2013-01-13 21:11:21 4096 ---ha-w- C:\Windows\SysWow64\api-ms-win-downlevel-user32-l1-1-0.dll
2013-01-13 21:11:08 5632 ---ha-w- C:\Windows\SysWow64\api-ms-win-downlevel-ole32-l1-1-0.dll
2013-01-13 21:11:07 5632 ---ha-w- C:\Windows\SysWow64\api-ms-win-downlevel-shlwapi-l2-1-0.dll
2013-01-13 21:11:07 3072 ---ha-w- C:\Windows\SysWow64\api-ms-win-downlevel-version-l1-1-0.dll
2013-01-13 21:11:07 3072 ---ha-w- C:\Windows\SysWow64\api-ms-win-downlevel-shell32-l1-1-0.dll
2013-01-13 20:35:31 9728 ---ha-w- C:\Windows\System32\api-ms-win-downlevel-shlwapi-l1-1-0.dll
2013-01-13 20:35:31 2560 ---ha-w- C:\Windows\System32\api-ms-win-downlevel-normaliz-l1-1-0.dll
2013-01-13 20:35:18 10752 ---ha-w- C:\Windows\System32\api-ms-win-downlevel-advapi32-l1-1-0.dll
2013-01-13 20:32:07 3584 ---ha-w- C:\Windows\System32\api-ms-win-downlevel-advapi32-l2-1-0.dll
2013-01-13 20:31:48 4096 ---ha-w- C:\Windows\System32\api-ms-win-downlevel-user32-l1-1-0.dll
2013-01-13 20:31:41 5632 ---ha-w- C:\Windows\System32\api-ms-win-downlevel-ole32-l1-1-0.dll
2013-01-13 20:31:40 5632 ---ha-w- C:\Windows\System32\api-ms-win-downlevel-shlwapi-l2-1-0.dll
2013-01-13 20:31:40 3072 ---ha-w- C:\Windows\System32\api-ms-win-downlevel-version-l1-1-0.dll
2013-01-13 20:31:40 3072 ---ha-w- C:\Windows\System32\api-ms-win-downlevel-shell32-l1-1-0.dll
2013-01-13 20:31:00 1247744 ----a-w- C:\Windows\SysWow64\DWrite.dll
2013-01-13 20:22:22 1988096 ----a-w- C:\Windows\SysWow64\d3d10warp.dll
2013-01-13 20:20:31 293376 ----a-w- C:\Windows\SysWow64\dxgi.dll
2013-01-13 20:09:00 249856 ----a-w- C:\Windows\SysWow64\d3d10_1core.dll
2013-01-13 20:08:43 220160 ----a-w- C:\Windows\SysWow64\d3d10core.dll
2013-01-13 20:08:35 1504768 ----a-w- C:\Windows\SysWow64\d3d11.dll
2013-01-13 19:59:04 1643520 ----a-w- C:\Windows\System32\DWrite.dll
2013-01-13 19:58:28 1175552 ----a-w- C:\Windows\System32\FntCache.dll
2013-01-13 19:54:01 604160 ----a-w- C:\Windows\SysWow64\d3d10level9.dll
2013-01-13 19:53:58 207872 ----a-w- C:\Windows\SysWow64\WindowsCodecsExt.dll
2013-01-13 19:53:14 187392 ----a-w- C:\Windows\SysWow64\UIAnimation.dll
2013-01-13 19:51:30 2565120 ----a-w- C:\Windows\System32\d3d10warp.dll
2013-01-13 19:49:17 363008 ----a-w- C:\Windows\System32\dxgi.dll
2013-01-13 19:48:47 161792 ----a-w- C:\Windows\SysWow64\d3d10_1.dll
2013-01-13 19:46:25 1080832 ----a-w- C:\Windows\SysWow64\d3d10.dll
2013-01-13 19:43:21 1230336 ----a-w- C:\Windows\SysWow64\WindowsCodecs.dll
2013-01-13 19:38:39 333312 ----a-w- C:\Windows\System32\d3d10_1core.dll
2013-01-13 19:38:32 1887232 ----a-w- C:\Windows\System32\d3d11.dll
2013-01-13 19:38:21 296960 ----a-w- C:\Windows\System32\d3d10core.dll
2013-01-13 19:37:57 3419136 ----a-w- C:\Windows\SysWow64\d2d1.dll
2013-01-13 19:25:04 245248 ----a-w- C:\Windows\System32\WindowsCodecsExt.dll
2013-01-13 19:24:33 648192 ----a-w- C:\Windows\System32\d3d10level9.dll
2013-01-13 19:24:30 221184 ----a-w- C:\Windows\System32\UIAnimation.dll
2013-01-13 19:20:42 194560 ----a-w- C:\Windows\System32\d3d10_1.dll
2013-01-13 19:20:04 1238528 ----a-w- C:\Windows\System32\d3d10.dll
2013-01-13 19:15:40 1424384 ----a-w- C:\Windows\System32\WindowsCodecs.dll
2013-01-13 19:10:36 3928064 ----a-w- C:\Windows\System32\d2d1.dll
2013-01-13 19:02:06 417792 ----a-w- C:\Windows\SysWow64\WMPhoto.dll
2013-01-13 18:34:58 364544 ----a-w- C:\Windows\SysWow64\XpsGdiConverter.dll
2013-01-13 18:32:43 465920 ----a-w- C:\Windows\System32\WMPhoto.dll
2013-01-13 18:09:52 522752 ----a-w- C:\Windows\System32\XpsGdiConverter.dll
2013-01-13 17:26:42 1158144 ----a-w- C:\Windows\SysWow64\XpsPrint.dll
2013-01-13 17:05:09 1682432 ----a-w- C:\Windows\System32\XpsPrint.dll
2013-01-04 06:11:21 2284544 ----a-w- C:\Windows\SysWow64\msmpeg2vdec.dll
2013-01-04 06:11:13 2776576 ----a-w- C:\Windows\System32\msmpeg2vdec.dll
2013-01-04 05:46:09 215040 ----a-w- C:\Windows\System32\winsrv.dll
2013-01-04 04:51:16 5120 ----a-w- C:\Windows\SysWow64\wow32.dll
2013-01-04 04:43:21 44032 ----a-w- C:\Windows\apppatch\acwow64.dll
2013-01-04 02:47:35 25600 ----a-w- C:\Windows\SysWow64\setup16.exe
2013-01-04 02:47:34 7680 ----a-w- C:\Windows\SysWow64\instnm.exe
2013-01-04 02:47:34 2048 ----a-w- C:\Windows\SysWow64\user.exe
2013-01-04 02:47:33 14336 ----a-w- C:\Windows\SysWow64\ntvdm64.dll
2013-01-03 06:00:54 1913192 ----a-w- C:\Windows\System32\drivers\tcpip.sys
2013-01-03 06:00:42 288088 ----a-w- C:\Windows\System32\drivers\FWPKCLNT.SYS
2012-12-19 20:50:14 5630200 ----a-w- C:\Windows\SysWow64\atiumdag.dll
2012-12-19 20:48:48 11278336 ----a-w- C:\Windows\System32\drivers\atikmdag.sys
2012-12-19 20:29:36 23461376 ----a-w- C:\Windows\System32\atio6axx.dll
2012-12-19 20:22:50 70144 ----a-w- C:\Windows\System32\coinst_9.012.dll
2012-12-19 20:19:46 163840 ----a-w- C:\Windows\System32\atiapfxx.exe
2012-12-19 20:18:04 51200 ----a-w- C:\Windows\System32\aticalrt64.dll
2012-12-19 20:18:02 46080 ----a-w- C:\Windows\SysWow64\aticalrt.dll
2012-12-19 20:17:54 44544 ----a-w- C:\Windows\System32\aticalcl64.dll
2012-12-19 20:17:52 44032 ----a-w- C:\Windows\SysWow64\aticalcl.dll
2012-12-19 20:17:40 16082944 ----a-w- C:\Windows\System32\aticaldd64.dll
2012-12-19 20:13:24 13703168 ----a-w- C:\Windows\SysWow64\aticaldd.dll
2012-12-19 20:12:44 18982400 ----a-w- C:\Windows\SysWow64\atioglxx.dll
2012-12-19 20:09:52 960512 ----a-w- C:\Windows\SysWow64\aticfx32.dll
2012-12-19 20:08:04 1151488 ----a-w- C:\Windows\System32\aticfx64.dll
2012-12-19 20:06:00 6681088 ----a-w- C:\Windows\SysWow64\atidxx32.dll
2012-12-19 19:59:44 5087744 ----a-w- C:\Windows\System32\atiumd6a.dll
2012-12-19 19:57:00 442368 ----a-w- C:\Windows\System32\atidemgy.dll
2012-12-19 19:56:46 550912 ----a-w- C:\Windows\System32\atieclxx.exe
2012-12-19 19:56:00 240640 ----a-w- C:\Windows\System32\atiesrxx.exe
2012-12-19 19:54:38 120320 ----a-w- C:\Windows\System32\atitmm64.dll
2012-12-19 19:54:22 21504 ----a-w- C:\Windows\System32\atimuixx.dll
2012-12-19 19:54:18 59392 ----a-w- C:\Windows\System32\atiedu64.dll
2012-12-19 19:54:12 43520 ----a-w- C:\Windows\SysWow64\ati2edxx.dll
2012-12-19 19:49:00 7370752 ----a-w- C:\Windows\System32\atidxx64.dll
2012-12-19 19:44:28 4162048 ----a-w- C:\Windows\SysWow64\atiumdva.dll
2012-12-19 19:44:12 6786560 ----a-w- C:\Windows\System32\atiumd64.dll
2012-12-19 19:34:28 79360 ----a-w- C:\Windows\System32\amdave64.dll
2012-12-19 19:34:22 78336 ----a-w- C:\Windows\SysWow64\amdave32.dll
2012-12-19 19:34:10 74240 ----a-w- C:\Windows\System32\atisamu64.dll
2012-12-19 19:34:04 71168 ----a-w- C:\Windows\SysWow64\atisamu32.dll
2012-12-19 19:33:50 56320 ----a-w- C:\Windows\System32\atimpc64.dll
2012-12-19 19:33:50 56320 ----a-w- C:\Windows\System32\amdpcom64.dll
2012-12-19 19:33:42 619008 ----a-w- C:\Windows\System32\atiadlxx.dll
2012-12-19 19:33:40 56832 ----a-w- C:\Windows\SysWow64\atimpc32.dll
2012-12-19 19:33:40 56832 ----a-w- C:\Windows\SysWow64\amdpcom32.dll
2012-12-19 19:33:32 421888 ----a-w- C:\Windows\SysWow64\atiadlxy.dll
2012-12-19 19:33:18 17920 ----a-w- C:\Windows\System32\atig6pxx.dll
2012-12-19 19:33:14 14848 ----a-w- C:\Windows\SysWow64\atiglpxx.dll
2012-12-19 19:33:14 14848 ----a-w- C:\Windows\System32\atiglpxx.dll
2012-12-19 19:33:10 41984 ----a-w- C:\Windows\System32\atig6txx.dll
2012-12-19 19:33:04 33280 ----a-w- C:\Windows\SysWow64\atigktxx.dll
2012-12-19 19:32:54 552960 ----a-w- C:\Windows\System32\drivers\atikmpag.sys
2012-12-19 19:31:14 130048 ----a-w- C:\Windows\System32\atiuxp64.dll
2012-12-19 19:31:08 109568 ----a-w- C:\Windows\SysWow64\atiuxpag.dll
2012-12-19 19:31:00 104448 ----a-w- C:\Windows\System32\atiu9p64.dll
2012-12-19 19:30:52 83968 ----a-w- C:\Windows\SysWow64\atiu9pag.dll
2012-12-19 19:30:16 53248 ----a-w- C:\Windows\System32\drivers\ati2erec.dll
2012-12-19 14:45:12 222720 ----a-w- C:\Windows\System32\clinfo.exe
2012-12-19 14:44:48 76288 ----a-w- C:\Windows\System32\OpenVideo64.dll
2012-12-19 14:44:42 65536 ----a-w- C:\Windows\SysWow64\OpenVideo.dll
2012-12-19 14:44:36 64000 ----a-w- C:\Windows\System32\OVDecode64.dll
2012-12-19 14:44:32 56320 ----a-w- C:\Windows\SysWow64\OVDecode.dll
2012-12-19 14:44:20 34518016 ----a-w- C:\Windows\System32\amdocl64.dll
2012-12-19 14:38:48 28732928 ----a-w- C:\Windows\SysWow64\amdocl.dll
2012-12-19 14:34:40 54784 ----a-w- C:\Windows\System32\OpenCL.dll
2012-12-19 14:34:38 50176 ----a-w- C:\Windows\SysWow64\OpenCL.dll
2012-12-16 17:11:22 46080 ----a-w- C:\Windows\System32\atmlib.dll
2012-12-16 14:45:03 367616 ----a-w- C:\Windows\System32\atmfd.dll
2012-12-16 14:13:28 295424 ----a-w- C:\Windows\SysWow64\atmfd.dll
2012-12-16 14:13:20 34304 ----a-w- C:\Windows\SysWow64\atmlib.dll
2012-12-07 13:20:16 441856 ----a-w- C:\Windows\System32\Wpc.dll
2012-12-07 13:15:31 2746368 ----a-w- C:\Windows\System32\gameux.dll
2012-12-07 12:26:17 308736 ----a-w- C:\Windows\SysWow64\Wpc.dll
2012-12-07 12:20:43 2576384 ----a-w- C:\Windows\SysWow64\gameux.dll
2012-12-07 11:20:04 30720 ----a-w- C:\Windows\System32\usk.rs
2012-12-07 11:20:03 43520 ----a-w- C:\Windows\System32\csrr.rs
2012-12-07 11:20:03 23552 ----a-w- C:\Windows\System32\oflc.rs
2012-12-07 11:20:01 45568 ----a-w- C:\Windows\System32\oflc-nz.rs
2012-12-07 11:20:01 44544 ----a-w- C:\Windows\System32\pegibbfc.rs
2012-12-07 11:20:01 20480 ----a-w- C:\Windows\System32\pegi-fi.rs
2012-12-07 11:20:00 20480 ----a-w- C:\Windows\System32\pegi-pt.rs
2012-12-07 11:19:59 20480 ----a-w- C:\Windows\System32\pegi.rs
2012-12-07 11:19:58 46592 ----a-w- C:\Windows\System32\fpb.rs
2012-12-07 11:19:57 40960 ----a-w- C:\Windows\System32\cob-au.rs
2012-12-07 11:19:57 21504 ----a-w- C:\Windows\System32\grb.rs
2012-12-07 11:19:57 15360 ----a-w- C:\Windows\System32\djctq.rs
2012-12-07 11:19:56 55296 ----a-w- C:\Windows\System32\cero.rs
2012-12-07 11:19:55 51712 ----a-w- C:\Windows\System32\esrb.rs
.
============= FINISH: 14:01:20,67 ===============

#3 Příspěvek od **vyosek** » 29 kvě 2013 13:37

Zdravim

Stahnete RKill http://download.bleepingcomputer.com/grinler/rkill.com

Pokud ho havet blokuje, pouzijte jeden z nasledujicich - i ty prejmenovane
Rkill EXE:
http://download.bleepingcomputer.com/grinler/rkill.exe

Rkill iExplore.exe:
http://download.bleepingcomputer.com/gr ... xplore.exe

Rkill uSeRiNiT.exe:
http://download.bleepingcomputer.com/gr ... eRiNiT.exe

Rkill WiNlOgOn.exe:
http://download.bleepingcomputer.com/gr ... NlOgOn.exe
Ulozte nejlepena plochu a ukoncete vsechny aplikace (jinak to udela RKill za Vas)
Spustte tradicne dvojklikem - program probehne do par sekund a ukonci i svou cinnost
RKill ukonci vsechny ne-systemove procesy - tedy i procesy, pod kterymi bezi havet
Na plose vznikne log Rkill.txt ten mi sem vlozte
Ted nerestartujte PC - prisli byste o ucinek RKillu

PROSIM CTETE DUKLADNE NAVOD - TATO UTILITA MA VELKOU SCHOPNOST MAZAT A JE NUTNE JI APLIKOVAT JEN NA DOPORUCENI, JINAK VAM MUZE JIT SYSTEM DO KYTEK

Stahnete a ulozte na plochu Combofix http://download.bleepingcomputer.com/sUBs/ComboFix.exe

Vypnete vsechny rezidentni bezpecnostní programy - firewally, antiviry, antispywary apod.
Pokud mate Win XP spustte pod uctem Spravce\Administratora
Pokud mate Win Vista ci Win 7, kliknete na Combofix pravym a dejte Run As Administrator ci Spustit jako spravce
Ihned po startu se zobrazi stranka s licencnim ujednanim, pokracujte kliknutim na Ano
Pokud Vam CF nabidne instalaci Konzoly pro zotaveni, tak souhlaste
Dale postupujte dle pokynu, behem scanu nechte PC naprosto v klidu - nespoustejte zadne aplikace a neklikejte do zobrazujiciho se okna
Scan by mel trvat cca 10 min, ale pokud bude PC hodne zaneseno, muze se cas prodlouzit
Po dokonceni skenu a pripadnem restartu CF zobrazi log, pripadne jej najdete zde C:\ComboFix.txt, jeho obsah sem vlozte
Detailni postup vc. obrazku mate zde http://www.bleepingcomputer.com/combofi ... t-combofix

redneB · #4 Příspěvek od **redneB** » 29 kvě 2013 13:40

Rkill 2.5.0 by Lawrence Abrams (Grinler)
http://www.bleepingcomputer.com/
Copyright 2008-2013 BleepingComputer.com
More Information about Rkill can be found at this link:
http://www.bleepingcomputer.com/forums/topic308364.html

Program started at: 05/29/2013 02:39:25 PM in x64 mode.
Windows Version: Windows 7 Professional Service Pack 1

Checking for Windows services to stop:

* No malware services found to stop.

Checking for processes to terminate:

* No malware processes found to kill.

Checking Registry for malware related settings:

* Explorer Policy Removed: NoActiveDesktopChanges [HKLM]

Backup Registry file created at:
C:\Users\Bender\Desktop\rkill\rkill-05-29-2013-02-39-27.reg

Resetting .EXE, .COM, & .BAT associations in the Windows Registry.

Performing miscellaneous checks:

* No issues found.

Checking Windows Service Integrity:

* No issues found.

Searching for Missing Digital Signatures:

* No issues found.

Checking HOSTS File:

* HOSTS file entries found:

127.0.0.1 static3.cdn.ubi.com
127.0.0.1 ubisoft-orbit.s3.amazonaws.com
127.0.0.1 onlineconfigservice.ubi.com
127.0.0.1 orbitservice.ubi.com
127.0.0.1 ubisoft-orbit-savegames.s3.amazonaws.com

Program finished at: 05/29/2013 02:39:50 PM
Execution time: 0 hours(s), 0 minute(s), and 25 seconds(s)

#5 Příspěvek od **vyosek** » 29 kvě 2013 13:51

Pokracujte ComboFixem

redneB · #6 Příspěvek od **redneB** » 29 kvě 2013 14:01

ComboFix 13-05-29.01 - Bender 29.05.2013 14:54:28.1.4 - x64
Microsoft Windows 7 Professional 6.1.7601.1.1250.420.1029.18.4093.2287 [GMT 2:00]
Spuštěný z: d:\stazeno\ComboFix.exe
AV: avast! Antivirus *Enabled/Updated* {2B2D1395-420B-D5C9-657E-930FE358FC3C}
FW: avast! Internet Security *Disabled* {131692B0-0864-D491-4E21-3A3A1D8BBB47}
SP: avast! Antivirus *Enabled/Updated* {904CF271-6431-DA47-5FCE-A87D98DFB681}
SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.
.
((((((((((((((((((((((((((((((((((((((( Ostatní výmazy )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
c:\programdata\ntuser.dat
c:\users\Bender\AppData\Local\Temp\iswizard\dwm.exe
c:\users\Bender\AppData\Local\Temp\iswizard\libcurl.dll
c:\users\Bender\AppData\Local\Temp\iswizard\libeay32.dll
c:\users\Bender\AppData\Local\Temp\iswizard\libidn-11.dll
c:\users\Bender\AppData\Local\Temp\iswizard\libusb-1.0.dll
c:\users\Bender\AppData\Local\Temp\iswizard\ssleay32.dll
c:\users\Bender\AppData\Local\Temp\iswizard\zlib1.dll
c:\users\Bender\AppData\Roaming\technic-launcher.jar
c:\windows\SysWow64\frapsvid.dll
c:\windows\SysWow64\URTTemp
c:\windows\SysWow64\URTTemp\regtlib.exe
.
.
((((((((((((((((((((((((( Soubory vytvořené od 2013-04-28 do 2013-05-29 )))))))))))))))))))))))))))))))
.
.
2013-05-29 12:57 . 2013-05-29 12:57 -------- d-----w- c:\users\Default\AppData\Local\temp
2013-05-28 18:11 . 2003-02-02 18:06 153088 ----a-w- c:\windows\SysWow64\UNRAR3.dll
2013-05-28 18:11 . 2002-03-05 23:00 75264 ----a-w- c:\windows\SysWow64\unacev2.dll
2013-05-28 18:11 . 2013-05-28 18:18 -------- d-----w- c:\program files (x86)\Trojan Remover
2013-05-28 18:11 . 2013-05-28 18:11 -------- d-----w- c:\users\Bender\AppData\Roaming\Simply Super Software
2013-05-28 18:11 . 2013-05-28 18:11 -------- d-----w- c:\programdata\Simply Super Software
2013-05-28 16:58 . 2013-05-28 16:58 -------- d-----w- c:\program files\Enigma Software Group
2013-05-28 16:58 . 2013-05-28 18:06 -------- d-----w- c:\windows\E63D89610BA94CF39E94407ACA42846C.TMP
2013-05-28 12:42 . 2013-05-13 06:37 9460464 ----a-w- c:\programdata\Microsoft\Windows Defender\Definition Updates\{67794A76-2CF5-4E89-80EA-7B47FA0E99C0}\mpengine.dll
2013-05-28 12:28 . 2013-05-28 12:28 -------- d-----w- c:\users\Bender\AppData\Local\Programs
2013-05-27 04:51 . 2013-05-27 04:51 -------- d-----w- c:\users\Bender\AppData\Local\Deployment
2013-05-27 04:51 . 2013-05-27 04:51 -------- d-----w- c:\users\Bender\AppData\Local\Apps
2013-05-24 20:53 . 2013-05-24 20:53 744448 ----a-w- c:\windows\SysWow64\msikfk32.dll
2013-05-23 13:18 . 2013-05-23 13:18 262552 ----a-w- c:\program files (x86)\Mozilla Firefox\browser\components\browsercomps.dll
2013-05-15 08:40 . 2013-04-10 06:01 265064 ----a-w- c:\windows\system32\drivers\dxgmms1.sys
2013-05-11 10:37 . 2013-05-11 10:37 209472 ----a-w- c:\program files (x86)\Mozilla Firefox\Plugins\nppdf32.dll
2013-05-10 23:54 . 2013-05-10 23:54 -------- d-----w- c:\program files (x86)\GSC World Publishing
2013-05-04 08:03 . 2013-05-04 08:03 -------- d-----w- c:\program files (x86)\Winamp Detect
2013-05-04 08:02 . 2013-05-04 08:02 -------- d-----w- c:\program files (x86)\Common Files\PX Storage Engine
2013-05-04 08:02 . 2013-05-28 12:44 -------- d-----w- c:\users\Bender\AppData\Roaming\Winamp
2013-05-04 08:02 . 2013-05-04 08:03 -------- d-----w- c:\program files (x86)\Winamp
.
.
.
(((((((((((((((((((((((((((((((((((((((( Find3M výpis ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2013-05-29 11:52 . 2012-07-02 17:27 25640 ----a-w- c:\windows\gdrv.sys
2013-05-25 19:07 . 2012-07-03 09:38 103736 ----a-w- c:\windows\SysWow64\PnkBstrB.exe
2013-05-24 21:02 . 2012-07-07 07:04 2337865 ----a-w- c:\windows\SysWow64\pbsvc.exe
2013-05-24 21:02 . 2012-07-03 09:38 66872 ----a-w- c:\windows\SysWow64\PnkBstrA.exe
2013-05-15 09:54 . 2012-07-05 18:45 75016696 ----a-w- c:\windows\system32\MRT.exe
2013-05-14 21:42 . 2012-07-02 19:35 71048 ----a-w- c:\windows\SysWow64\FlashPlayerCPLApp.cpl
2013-05-14 21:42 . 2012-07-02 19:35 692104 ----a-w- c:\windows\SysWow64\FlashPlayerApp.exe
2013-05-09 08:59 . 2013-03-15 08:24 189936 ----a-w- c:\windows\system32\drivers\aswVmm.sys
2013-05-09 08:59 . 2013-03-15 08:24 65336 ----a-w- c:\windows\system32\drivers\aswRvrt.sys
2013-05-09 08:59 . 2012-07-02 21:43 378432 ----a-w- c:\windows\system32\drivers\aswSP.sys
2013-05-09 08:59 . 2012-07-02 21:43 72016 ----a-w- c:\windows\system32\drivers\aswRdr2.sys
2013-05-09 08:59 . 2012-07-02 21:43 64288 ----a-w- c:\windows\system32\drivers\aswTdi.sys
2013-05-09 08:59 . 2012-07-02 21:43 1025808 ----a-w- c:\windows\system32\drivers\aswSnx.sys
2013-05-09 08:59 . 2012-07-02 21:43 33400 ----a-w- c:\windows\system32\drivers\aswFsBlk.sys
2013-05-09 08:59 . 2012-07-02 21:43 80816 ----a-w- c:\windows\system32\drivers\aswMonFlt.sys
2013-05-09 08:58 . 2012-07-02 21:42 41664 ----a-w- c:\windows\avastSS.scr
2013-05-09 08:58 . 2012-07-02 21:43 287840 ----a-w- c:\windows\system32\aswBoot.exe
2013-05-02 00:06 . 2012-07-02 17:53 278800 ------w- c:\windows\system32\MpSigStub.exe
2013-04-16 15:36 . 2012-12-14 19:29 281768 ----a-w- c:\windows\SysWow64\PnkBstrB.xtr
2013-04-16 15:36 . 2012-07-03 09:38 281768 ----a-w- c:\windows\SysWow64\PnkBstrB.ex0
2013-04-13 05:49 . 2013-05-15 08:40 135168 ----a-w- c:\windows\apppatch\AppPatch64\AcXtrnal.dll
2013-04-13 05:49 . 2013-05-15 08:40 350208 ----a-w- c:\windows\apppatch\AppPatch64\AcLayers.dll
2013-04-13 05:49 . 2013-05-15 08:40 308736 ----a-w- c:\windows\apppatch\AppPatch64\AcGenral.dll
2013-04-13 05:49 . 2013-05-15 08:40 111104 ----a-w- c:\windows\apppatch\AppPatch64\acspecfc.dll
2013-04-13 04:45 . 2013-05-15 08:40 474624 ----a-w- c:\windows\apppatch\AcSpecfc.dll
2013-04-13 04:45 . 2013-05-15 08:40 2176512 ----a-w- c:\windows\apppatch\AcGenral.dll
2013-04-12 14:45 . 2013-04-23 20:32 1656680 ----a-w- c:\windows\system32\drivers\ntfs.sys
2013-04-10 13:57 . 2012-07-03 18:04 861088 ----a-w- c:\windows\SysWow64\npDeployJava1.dll
2013-04-10 13:57 . 2012-07-03 18:04 782240 ----a-w- c:\windows\SysWow64\deployJava1.dll
2013-04-04 03:35 . 2013-04-19 19:11 95648 ----a-w- c:\windows\SysWow64\WindowsAccessBridge-32.dll
2013-03-22 21:26 . 2013-03-22 21:26 97280 ----a-w- c:\windows\system32\mshtmled.dll
2013-03-22 21:26 . 2013-03-22 21:26 92160 ----a-w- c:\windows\system32\SetIEInstalledDate.exe
2013-03-22 21:26 . 2013-03-22 21:26 905728 ----a-w- c:\windows\system32\mshtmlmedia.dll
2013-03-22 21:26 . 2013-03-22 21:26 81408 ----a-w- c:\windows\system32\icardie.dll
2013-03-22 21:26 . 2013-03-22 21:26 77312 ----a-w- c:\windows\system32\tdc.ocx
2013-03-22 21:26 . 2013-03-22 21:26 762368 ----a-w- c:\windows\system32\ieapfltr.dll
2013-03-22 21:26 . 2013-03-22 21:26 73728 ----a-w- c:\windows\SysWow64\SetIEInstalledDate.exe
2013-03-22 21:26 . 2013-03-22 21:26 719360 ----a-w- c:\windows\SysWow64\mshtmlmedia.dll
2013-03-22 21:26 . 2013-03-22 21:26 62976 ----a-w- c:\windows\system32\pngfilt.dll
2013-03-22 21:26 . 2013-03-22 21:26 61952 ----a-w- c:\windows\SysWow64\tdc.ocx
2013-03-22 21:26 . 2013-03-22 21:26 599552 ----a-w- c:\windows\system32\vbscript.dll
2013-03-22 21:26 . 2013-03-22 21:26 523264 ----a-w- c:\windows\SysWow64\vbscript.dll
2013-03-22 21:26 . 2013-03-22 21:26 52224 ----a-w- c:\windows\system32\msfeedsbs.dll
2013-03-22 21:26 . 2013-03-22 21:26 51200 ----a-w- c:\windows\system32\imgutil.dll
2013-03-22 21:26 . 2013-03-22 21:26 48640 ----a-w- c:\windows\SysWow64\mshtmler.dll
2013-03-22 21:26 . 2013-03-22 21:26 48640 ----a-w- c:\windows\system32\mshtmler.dll
2013-03-22 21:26 . 2013-03-22 21:26 452096 ----a-w- c:\windows\system32\dxtmsft.dll
2013-03-22 21:26 . 2013-03-22 21:26 441856 ----a-w- c:\windows\system32\html.iec
2013-03-22 21:26 . 2013-03-22 21:26 38400 ----a-w- c:\windows\SysWow64\imgutil.dll
2013-03-22 21:26 . 2013-03-22 21:26 361984 ----a-w- c:\windows\SysWow64\html.iec
2013-03-22 21:26 . 2013-03-22 21:26 281600 ----a-w- c:\windows\system32\dxtrans.dll
2013-03-22 21:26 . 2013-03-22 21:26 27648 ----a-w- c:\windows\system32\licmgr10.dll
2013-03-22 21:26 . 2013-03-22 21:26 270848 ----a-w- c:\windows\system32\iedkcs32.dll
2013-03-22 21:26 . 2013-03-22 21:26 247296 ----a-w- c:\windows\system32\webcheck.dll
2013-03-22 21:26 . 2013-03-22 21:26 235008 ----a-w- c:\windows\system32\url.dll
2013-03-22 21:26 . 2013-03-22 21:26 23040 ----a-w- c:\windows\SysWow64\licmgr10.dll
2013-03-22 21:26 . 2013-03-22 21:26 226304 ----a-w- c:\windows\system32\elshyph.dll
2013-03-22 21:26 . 2013-03-22 21:26 216064 ----a-w- c:\windows\system32\msls31.dll
2013-03-22 21:26 . 2013-03-22 21:26 197120 ----a-w- c:\windows\system32\msrating.dll
2013-03-22 21:26 . 2013-03-22 21:26 185344 ----a-w- c:\windows\SysWow64\elshyph.dll
2013-03-22 21:26 . 2013-03-22 21:26 173568 ----a-w- c:\windows\system32\ieUnatt.exe
2013-03-22 21:26 . 2013-03-22 21:26 167424 ----a-w- c:\windows\system32\iexpress.exe
2013-03-22 21:26 . 2013-03-22 21:26 158720 ----a-w- c:\windows\SysWow64\msls31.dll
2013-03-22 21:26 . 2013-03-22 21:26 1509376 ----a-w- c:\windows\system32\inetcpl.cpl
2013-03-22 21:26 . 2013-03-22 21:26 150528 ----a-w- c:\windows\SysWow64\iexpress.exe
2013-03-22 21:26 . 2013-03-22 21:26 149504 ----a-w- c:\windows\system32\occache.dll
2013-03-22 21:26 . 2013-03-22 21:26 144896 ----a-w- c:\windows\system32\wextract.exe
2013-03-22 21:26 . 2013-03-22 21:26 1441280 ----a-w- c:\windows\SysWow64\inetcpl.cpl
2013-03-22 21:26 . 2013-03-22 21:26 1400416 ----a-w- c:\windows\system32\ieapfltr.dat
2013-03-22 21:26 . 2013-03-22 21:26 138752 ----a-w- c:\windows\SysWow64\wextract.exe
2013-03-22 21:26 . 2013-03-22 21:26 13824 ----a-w- c:\windows\system32\mshta.exe
2013-03-22 21:26 . 2013-03-22 21:26 137216 ----a-w- c:\windows\SysWow64\ieUnatt.exe
2013-03-22 21:26 . 2013-03-22 21:26 136192 ----a-w- c:\windows\system32\iepeers.dll
2013-03-22 21:26 . 2013-03-22 21:26 135680 ----a-w- c:\windows\system32\IEAdvpack.dll
2013-03-22 21:26 . 2013-03-22 21:26 12800 ----a-w- c:\windows\SysWow64\mshta.exe
2013-03-22 21:26 . 2013-03-22 21:26 12800 ----a-w- c:\windows\system32\msfeedssync.exe
2013-03-22 21:26 . 2013-03-22 21:26 110592 ----a-w- c:\windows\SysWow64\IEAdvpack.dll
2013-03-22 21:26 . 2013-03-22 21:26 1054720 ----a-w- c:\windows\system32\MsSpellCheckingFacility.exe
2013-03-22 21:26 . 2013-03-22 21:26 102912 ----a-w- c:\windows\system32\inseng.dll
2013-03-19 06:04 . 2013-04-10 14:50 5550424 ----a-w- c:\windows\system32\ntoskrnl.exe
2013-03-19 05:46 . 2013-04-10 14:50 43520 ----a-w- c:\windows\system32\csrsrv.dll
2013-03-19 05:04 . 2013-04-10 14:50 3968856 ----a-w- c:\windows\SysWow64\ntkrnlpa.exe
2013-03-19 05:04 . 2013-04-10 14:50 3913560 ----a-w- c:\windows\SysWow64\ntoskrnl.exe
2013-03-19 04:47 . 2013-04-10 14:50 6656 ----a-w- c:\windows\SysWow64\apisetschema.dll
2013-03-19 03:06 . 2013-04-10 14:50 112640 ----a-w- c:\windows\system32\smss.exe
2013-03-06 23:33 . 2012-07-02 21:45 22600 ----a-w- c:\windows\system32\drivers\aswKbd.sys
.
.
(((((((((((((((((((((((((((((((((( Spouštěcí body v registru )))))))))))))))))))))))))))))))))))))))))))))
.
.
*Poznámka* prázdné záznamy a legitimní výchozí údaje nejsou zobrazeny.
REGEDIT4
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\~\Browser Helper Objects\{0D778FDC-FAD7-4B1D-AB88-7A76A562D65C}]
2012-12-07 21:02 590232 ----a-w- c:\programdata\Plugin\ISeekDeal.dll
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Sidebar"="c:\program files\Windows Sidebar\sidebar.exe" [2010-11-20 1475584]
"RocketDock"="c:\program files (x86)\RocketDock\RocketDock.exe" [2007-09-02 495616]
"DAEMON Tools Lite"="c:\program files (x86)\DAEMON Tools Lite\DTLite.exe" [2012-04-17 3671872]
"WebcamMaxAutoRun"="c:\program files (x86)\WebcamMax\WebcamMax.exe" [2010-05-19 6043888]
"Steam"="c:\program files (x86)\Steam2\steam.exe" [2013-05-03 1635752]
"MSIDLL"="msikfk32.dll" [2013-05-24 744448]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]
"STCAgent"="c:\program files (x86)\Splashtop\Splashtop Connect IE\STCAgent.exe" [2011-03-04 776064]
"ZyngaGamesAgent"="c:\program files (x86)\Splashtop\Splashtop Connect\ZyngaGamesAgent.exe" [2010-11-15 841544]
"avast"="c:\program files\AVAST Software\Avast\avastUI.exe" [2013-05-09 4858968]
"amd_dc_opt"="c:\program files (x86)\AMD\Dual-Core Optimizer\amd_dc_opt.exe" [2008-07-22 77824]
"StartCCC"="c:\program files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" [2012-12-19 642808]
"SunJavaUpdateSched"="c:\program files (x86)\Common Files\Java\Java Update\jusched.exe" [2013-03-12 253816]
"WinampAgent"="c:\program files (x86)\Winamp\winampa.exe" [2011-12-09 74752]
"Adobe ARM"="c:\program files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2013-04-04 958576]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorAdmin"= 0 (0x0)
"ConsentPromptBehaviorUser"= 3 (0x3)
"EnableLUA"= 0 (0x0)
"EnableUIADesktopToggle"= 0 (0x0)
"PromptOnSecureDesktop"= 0 (0x0)
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\windows]
"LoadAppInit_DLLs"=1 (0x1)
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\drivers32]
"aux4"=wdmaud.drv
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\run-]
"Adobe ARM"="c:\program files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
.
R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2010-03-18 138576]
R2 SkypeUpdate;Skype Updater;c:\program files (x86)\Skype\Updater\Updater.exe [2012-07-13 160944]
R3 AppleChargerSrv;AppleChargerSrv;c:\windows\system32\AppleChargerSrv.exe [2010-04-06 31272]
R3 etdrv;etdrv;c:\windows\etdrv.sys [2012-07-02 25640]
R3 Futuremark SystemInfo Service;Futuremark SystemInfo Service;c:\program files (x86)\Common Files\Futuremark Shared\Futuremark SystemInfo\FMSISvc.exe [2010-12-14 128928]
R3 GVTDrv64;GVTDrv64;c:\windows\GVTDrv64.sys [2012-07-08 30528]
R3 RdpVideoMiniport;Remote Desktop Video Miniport Driver;c:\windows\system32\drivers\rdpvideominiport.sys [2012-08-23 19456]
R3 ss_bbus;SAMSUNG USB Mobile Device (WDM);c:\windows\system32\DRIVERS\ss_bbus.sys [2009-09-19 127488]
R3 ss_bmdfl;SAMSUNG USB Mobile Modem (Filter);c:\windows\system32\DRIVERS\ss_bmdfl.sys [2009-09-19 18944]
R3 ss_bmdm;SAMSUNG USB Mobile Modem;c:\windows\system32\DRIVERS\ss_bmdm.sys [2009-09-19 161280]
R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys [2012-08-23 57856]
R3 WatAdminSvc;Služba Technologie aktivace Windows;c:\windows\system32\Wat\WatAdminSvc.exe [2012-07-03 1255736]
S0 aswKbd;aswKbd; [x]
S0 aswRvrt;aswRvrt; [x]
S0 aswVmm;aswVmm; [x]
S0 SmartDefragDriver;SmartDefragDriver;c:\windows\System32\Drivers\SmartDefragDriver.sys [2010-11-26 17720]
S1 AppleCharger;AppleCharger;c:\windows\system32\DRIVERS\AppleCharger.sys [2011-01-10 21104]
S1 aswSnx;aswSnx; [x]
S1 aswSP;aswSP; [x]
S2 AMD External Events Utility;AMD External Events Utility;c:\windows\system32\atiesrxx.exe [2012-12-19 240640]
S2 AMD FUEL Service;AMD FUEL Service;c:\program files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe [2012-12-19 361984]
S2 AODDriver4.2;AODDriver4.2;c:\program files\ATI Technologies\ATI.ACE\Fuel\amd64\AODDriver2.sys [2012-04-09 57472]
S2 aswFsBlk;aswFsBlk; [x]
S2 aswMonFlt;aswMonFlt;c:\windows\system32\drivers\aswMonFlt.sys [2013-05-09 80816]
S2 ES lite Service;ES lite Service for program management.;c:\program files (x86)\Gigabyte\EasySaver\ESSVR.EXE [2009-08-24 68136]
S2 SCBackService;Splashtop Connect Service;c:\program files (x86)\Splashtop\Splashtop Connect\BackService.exe [2010-11-15 477000]
S2 WCUService_STC_FF;Splashtop Connect Firefox Software Updater Service;c:\program files (x86)\Splashtop\Splashtop Connect Firefox Software Updater\WCUService.exe [2011-03-24 493384]
S2 WCUService_STC_IE;Splashtop Connect IE Software Updater Service;c:\program files (x86)\Splashtop\Splashtop Connect IE Software Updater\WCUService.exe [2011-03-22 497480]
S3 amdiox64;AMD IO Driver;c:\windows\system32\DRIVERS\amdiox64.sys [2010-02-18 46136]
S3 AtiHDAudioService;AMD Function Driver for HD Audio Service;c:\windows\system32\drivers\AtihdW76.sys [2012-11-06 96256]
S3 dtsoftbus01;DAEMON Tools Virtual Bus Driver;c:\windows\system32\DRIVERS\dtsoftbus01.sys [2012-07-03 283200]
S3 EtronHub3;Etron USB 3.0 Extensible Hub Driver;c:\windows\system32\Drivers\EtronHub3.sys [2011-07-29 56960]
S3 EtronXHCI;Etron USB 3.0 Extensible Host Controller Driver;c:\windows\system32\Drivers\EtronXHCI.sys [2011-07-29 79104]
S3 RTL8167;Realtek 8167 NT Driver;c:\windows\system32\DRIVERS\Rt64win7.sys [2011-01-13 413800]
.
.
Obsah adresáře 'Naplánované úlohy'
.
2013-05-29 c:\windows\Tasks\Adobe Flash Player Updater.job
- c:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2012-07-02 21:42]
.
.
--------- X64 Entries -----------
.
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\00avast]
@="{472083B0-C522-11CF-8763-00608CC02F24}"
[HKEY_CLASSES_ROOT\CLSID\{472083B0-C522-11CF-8763-00608CC02F24}]
2013-05-09 08:58 133840 ----a-w- c:\program files\AVAST Software\Avast\ashShA64.dll
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"RtHDVCpl"="c:\program files\Realtek\Audio\HDA\RAVCpl64.exe" [2011-08-09 12666984]
.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Svchost - LocalService
FontCache
.
------- Doplňkový sken -------
.
uLocal Page = c:\windows\system32\blank.htm
mLocal Page = c:\windows\SysWOW64\blank.htm
IE: E&xport to Microsoft Excel - c:\progra~2\MICROS~4\Office12\EXCEL.EXE/3000
Trusted Zone: clonewarsadventures.com
Trusted Zone: freerealms.com
Trusted Zone: mojebanka.cz\.www
Trusted Zone: mojebanka.cz\etrading
Trusted Zone: mojebanka.cz\www
Trusted Zone: soe.com
Trusted Zone: sony.com
Trusted Zone: mojebanka.cz\etrading
Trusted Zone: mojebanka.cz\www
TCP: Interfaces\{3C5E49D8-A04C-492E-863C-D7DA80B9B3B4}: NameServer = 8.8.8.8,8.8.4.4,4.2.2.1,4.2.2.2,208.67.222.222,208.67.220.220,8.26.56.26,8.20.247.20,156.154.70.1,156.154.71.1
FF - ProfilePath - c:\users\Bender\AppData\Roaming\Mozilla\Firefox\Profiles\1ibnaocq.default\
FF - prefs.js: browser.search.selectedEngine -
FF - prefs.js: browser.startup.homepage - hxxp://www.seznam.cz/
.
- - - - NEPLATNÉ POLOŽKY ODSTRANĚNÉ Z REGISTRU - - - -
.
HKLM_Wow6432Node-ActiveSetup-{2D46B6DC-2207-486B-B523-A557E6D54B47} - start
AddRemove-PunkBusterSvc - c:\windows\system32\pbsvc.exe
.
.
.
--------------------- ZAMKNUTÉ KLÍČE V REGISTRU ---------------------
.
[HKEY_USERS\S-1-5-21-3311327032-918779867-2011593617-1000\Software\SecuROM\License information*]
"datasecu"=hex:d6,45,77,9d,84,88,89,98,4e,ad,f1,d3,76,79,5c,9f,7b,89,37,1d,cb,
9f,0f,64,20,9d,4f,9a,58,fe,cd,12,89,8e,11,10,aa,2d,88,56,9e,82,bb,92,68,8b,\
"rkeysecu"=hex:68,c0,1c,0d,9a,83,09,e8,65,52,52,2d,7b,a3,e5,20
.
[HKEY_LOCAL_MACHINE\system\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0000\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\system\ControlSet001\Control\PCW\Security]
@Denied: (Full) (Everyone)
.
Celkový čas: 2013-05-29 14:59:01
ComboFix-quarantined-files.txt 2013-05-29 12:59
.
Před spuštěním: Volných bajtů: 15 950 319 616
Po spuštění: Volných bajtů: 15 472 590 848
.
- - End Of File - - E4F7409598D1303A0D589E136C332335

redneB · #7 Příspěvek od **redneB** » 29 kvě 2013 15:31

Halo je tu nekdo ???

redneB · #8 Příspěvek od **redneB** » 29 kvě 2013 19:39

#9 Příspěvek od **vyosek** » 29 kvě 2013 20:07

Hele, tohle fakt nemam rad

My jsme tu ZDARMA a ve svem VOLNEM case

Takze podobne popohaneni atd fakt neee. Jestli na to spechate, tak si zaplatte technika, ktery Vam to milerad a hned opravi, za prislusnou cenu. U nas si bud pockate, nebo vlevo nahore mate tlacitko Odhlasit

Odinstalujte Trojan Remover a Enigma Software Group

Pokud nemate, tak presunte Combofix na plochu

Spustte poznamkovy blok (Start-spustit-notepad)
Zkopirujte skript nize

Kód: Vybrat vše

KillAll::

Folder::
c:\program files\Enigma Software Group
c:\windows\E63D89610BA94CF39E94407ACA42846C.TMP
c:\program files (x86)\Trojan Remover

Registry::
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"DAEMON Tools Lite"=-
"Steam"=-
"MSIDLL"=-
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]
"ZyngaGamesAgent"=-
"SunJavaUpdateSched"=-
"WinampAgent"=-
"Adobe ARM"=-
[-HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\run-]

File::
c:\windows\Tasks\Adobe Flash Player Updater.job

DDS::
Trusted Zone: clonewarsadventures.com
Trusted Zone: freerealms.com
Trusted Zone: mojebanka.cz\.www
Trusted Zone: mojebanka.cz\etrading
Trusted Zone: mojebanka.cz\www
Trusted Zone: soe.com
Trusted Zone: sony.com

RegNull::
[HKEY_USERS\S-1-5-21-3311327032-918779867-2011593617-1000\Software\SecuROM\License information*]

RegLock::
[HKEY_LOCAL_MACHINE\system\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}]
[HKEY_LOCAL_MACHINE\system\ControlSet001\Control\PCW\Security]

ClearJavaCache::

Reboot::

Ulozte vytvoreny TXT jako CFScript.txt
Pretahnete vytvoreny CFScript.txt nad Combofix a pustte (viz obrazek nize)
Po aplikaci skriptu (a pripadnem restartu) na Vas vypadne log, jeho obsah sem vlozte

Pokud vyskoci hlaska "Pokus pouzit neplatnou operaci na klic registru, ktery je oznacen pro odstraneni", tak jen restartujte PC - registr se da do kupy - jedna se o vnitrni chybu, kterou zpusobuje CF a autor ji zatim neumi bohuzel opravit

Muze se stat, ze po aplikaci skriptu nenabehnou windows, v tomto pripade restartuje PC a mackejte F8 a zvolte Posledni znamou konfiguraci

redneB · #10 Příspěvek od **redneB** » 30 kvě 2013 14:14

Chapu uz se to nebude opakovat

ComboFix 13-05-30.02 - Bender 30.05.2013 15:02:21.2.4 - x64
Microsoft Windows 7 Professional 6.1.7601.1.1250.420.1029.18.4093.2765 [GMT 2:00]
Spuštěný z: c:\users\Bender\Desktop\ComboFix.exe
Použité ovládací přepínače :: c:\users\Bender\Desktop\CFScript.txt
AV: avast! Antivirus *Disabled/Updated* {2B2D1395-420B-D5C9-657E-930FE358FC3C}
FW: avast! Internet Security *Disabled* {131692B0-0864-D491-4E21-3A3A1D8BBB47}
SP: avast! Antivirus *Disabled/Updated* {904CF271-6431-DA47-5FCE-A87D98DFB681}
SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.
FILE ::
"c:\windows\Tasks\Adobe Flash Player Updater.job"
.
.
((((((((((((((((((((((((((((((((((((((( Ostatní výmazy )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
c:\program files\Enigma Software Group
c:\users\Bender\AppData\Local\Temp\iswizard\dwm.exe
c:\users\Bender\AppData\Local\Temp\iswizard\libcurl-4.dll
c:\users\Bender\AppData\Local\Temp\iswizard\libcurl.dll
c:\users\Bender\AppData\Local\Temp\iswizard\libeay32.dll
c:\users\Bender\AppData\Local\Temp\iswizard\libidn-11.dll
c:\users\Bender\AppData\Local\Temp\iswizard\librtmp.dll
c:\users\Bender\AppData\Local\Temp\iswizard\libssh2.dll
c:\users\Bender\AppData\Local\Temp\iswizard\libusb-1.0.dll
c:\users\Bender\AppData\Local\Temp\iswizard\pthreadGC2.dll
c:\users\Bender\AppData\Local\Temp\iswizard\ssleay32.dll
c:\users\Bender\AppData\Local\Temp\iswizard\wuaudit.exe
c:\users\Bender\AppData\Local\Temp\iswizard\zlib1.dll
c:\windows\E63D89610BA94CF39E94407ACA42846C.TMP
c:\windows\E63D89610BA94CF39E94407ACA42846C.TMP\WiseCustomCall.dll
c:\windows\E63D89610BA94CF39E94407ACA42846C.TMP\WiseCustomCalla.dll
c:\windows\E63D89610BA94CF39E94407ACA42846C.TMP\WiseCustomCalla2.dll
c:\windows\E63D89610BA94CF39E94407ACA42846C.TMP\WiseCustomCalla21.dll
c:\windows\E63D89610BA94CF39E94407ACA42846C.TMP\WiseCustomCalla31.exe
c:\windows\E63D89610BA94CF39E94407ACA42846C.TMP\WiseCustomCalla32.dll
c:\windows\E63D89610BA94CF39E94407ACA42846C.TMP\WiseCustomCalla33.dll
c:\windows\E63D89610BA94CF39E94407ACA42846C.TMP\WiseCustomCalla34.dll
c:\windows\E63D89610BA94CF39E94407ACA42846C.TMP\WiseCustomCalla36.dll
c:\windows\E63D89610BA94CF39E94407ACA42846C.TMP\WiseCustomCalla36.exe
c:\windows\E63D89610BA94CF39E94407ACA42846C.TMP\WiseData.ini
c:\windows\Tasks\Adobe Flash Player Updater.job
.
.
((((((((((((((((((((((((( Soubory vytvořené od 2013-04-28 do 2013-05-30 )))))))))))))))))))))))))))))))
.
.
2013-05-30 13:08 . 2013-05-30 13:08 9310 ----a-w- c:\programdata\Microsoft\IdentityCRL\production\temp\wlidui_WLIDSVC\TEXTBOX.JS
2013-05-30 13:08 . 2013-05-30 13:08 8646 ----a-w- c:\programdata\Microsoft\IdentityCRL\production\temp\wlidui_WLIDSVC\TILEBOX.JS
2013-05-30 13:08 . 2013-05-30 13:08 8613 ----a-w- c:\programdata\Microsoft\IdentityCRL\production\temp\wlidui_WLIDSVC\SAVEDUSER.JS
2013-05-30 13:08 . 2013-05-30 13:08 6910 ----a-w- c:\programdata\Microsoft\IdentityCRL\production\temp\wlidui_WLIDSVC\NEWUSERCOMM.JS
2013-05-30 13:08 . 2013-05-30 13:08 6429 ----a-w- c:\programdata\Microsoft\IdentityCRL\production\temp\wlidui_WLIDSVC\UICORE.JS
2013-05-30 13:06 . 2013-05-30 13:06 -------- d-----w- c:\users\Default\AppData\Local\temp
2013-05-28 18:11 . 2013-05-28 18:11 -------- d-----w- c:\programdata\Simply Super Software
2013-05-28 12:42 . 2013-05-13 06:37 9460464 ----a-w- c:\programdata\Microsoft\Windows Defender\Definition Updates\{67794A76-2CF5-4E89-80EA-7B47FA0E99C0}\mpengine.dll
2013-05-28 12:28 . 2013-05-28 12:28 -------- d-----w- c:\users\Bender\AppData\Local\Programs
2013-05-27 04:51 . 2013-05-27 04:51 -------- d-----w- c:\users\Bender\AppData\Local\Deployment
2013-05-27 04:51 . 2013-05-27 04:51 -------- d-----w- c:\users\Bender\AppData\Local\Apps
2013-05-24 20:53 . 2013-05-24 20:53 744448 ----a-w- c:\windows\SysWow64\msikfk32.dll
2013-05-23 13:18 . 2013-05-23 13:18 262552 ----a-w- c:\program files (x86)\Mozilla Firefox\browser\components\browsercomps.dll
2013-05-15 08:40 . 2013-04-10 06:01 265064 ----a-w- c:\windows\system32\drivers\dxgmms1.sys
2013-05-11 10:37 . 2013-05-11 10:37 209472 ----a-w- c:\program files (x86)\Mozilla Firefox\Plugins\nppdf32.dll
2013-05-10 23:54 . 2013-05-10 23:54 -------- d-----w- c:\program files (x86)\GSC World Publishing
2013-05-04 08:03 . 2013-05-04 08:03 -------- d-----w- c:\program files (x86)\Winamp Detect
2013-05-04 08:02 . 2013-05-04 08:02 -------- d-----w- c:\program files (x86)\Common Files\PX Storage Engine
2013-05-04 08:02 . 2013-05-28 12:44 -------- d-----w- c:\users\Bender\AppData\Roaming\Winamp
2013-05-04 08:02 . 2013-05-04 08:03 -------- d-----w- c:\program files (x86)\Winamp
.
.
.
(((((((((((((((((((((((((((((((((((((((( Find3M výpis ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2013-05-30 13:07 . 2012-07-02 17:27 25640 ----a-w- c:\windows\gdrv.sys
2013-05-25 19:07 . 2012-07-03 09:38 103736 ----a-w- c:\windows\SysWow64\PnkBstrB.exe
2013-05-24 21:02 . 2012-07-07 07:04 2337865 ----a-w- c:\windows\SysWow64\pbsvc.exe
2013-05-24 21:02 . 2012-07-03 09:38 66872 ----a-w- c:\windows\SysWow64\PnkBstrA.exe
2013-05-15 09:54 . 2012-07-05 18:45 75016696 ----a-w- c:\windows\system32\MRT.exe
2013-05-14 21:42 . 2012-07-02 19:35 71048 ----a-w- c:\windows\SysWow64\FlashPlayerCPLApp.cpl
2013-05-14 21:42 . 2012-07-02 19:35 692104 ----a-w- c:\windows\SysWow64\FlashPlayerApp.exe
2013-05-09 08:59 . 2013-03-15 08:24 189936 ----a-w- c:\windows\system32\drivers\aswVmm.sys
2013-05-09 08:59 . 2013-03-15 08:24 65336 ----a-w- c:\windows\system32\drivers\aswRvrt.sys
2013-05-09 08:59 . 2012-07-02 21:43 378432 ----a-w- c:\windows\system32\drivers\aswSP.sys
2013-05-09 08:59 . 2012-07-02 21:43 72016 ----a-w- c:\windows\system32\drivers\aswRdr2.sys
2013-05-09 08:59 . 2012-07-02 21:43 64288 ----a-w- c:\windows\system32\drivers\aswTdi.sys
2013-05-09 08:59 . 2012-07-02 21:43 1025808 ----a-w- c:\windows\system32\drivers\aswSnx.sys
2013-05-09 08:59 . 2012-07-02 21:43 33400 ----a-w- c:\windows\system32\drivers\aswFsBlk.sys
2013-05-09 08:59 . 2012-07-02 21:43 80816 ----a-w- c:\windows\system32\drivers\aswMonFlt.sys
2013-05-09 08:58 . 2012-07-02 21:42 41664 ----a-w- c:\windows\avastSS.scr
2013-05-09 08:58 . 2012-07-02 21:43 287840 ----a-w- c:\windows\system32\aswBoot.exe
2013-05-02 00:06 . 2012-07-02 17:53 278800 ------w- c:\windows\system32\MpSigStub.exe
2013-04-16 15:36 . 2012-12-14 19:29 281768 ----a-w- c:\windows\SysWow64\PnkBstrB.xtr
2013-04-16 15:36 . 2012-07-03 09:38 281768 ----a-w- c:\windows\SysWow64\PnkBstrB.ex0
2013-04-13 05:49 . 2013-05-15 08:40 135168 ----a-w- c:\windows\apppatch\AppPatch64\AcXtrnal.dll
2013-04-13 05:49 . 2013-05-15 08:40 350208 ----a-w- c:\windows\apppatch\AppPatch64\AcLayers.dll
2013-04-13 05:49 . 2013-05-15 08:40 308736 ----a-w- c:\windows\apppatch\AppPatch64\AcGenral.dll
2013-04-13 05:49 . 2013-05-15 08:40 111104 ----a-w- c:\windows\apppatch\AppPatch64\acspecfc.dll
2013-04-13 04:45 . 2013-05-15 08:40 474624 ----a-w- c:\windows\apppatch\AcSpecfc.dll
2013-04-13 04:45 . 2013-05-15 08:40 2176512 ----a-w- c:\windows\apppatch\AcGenral.dll
2013-04-12 14:45 . 2013-04-23 20:32 1656680 ----a-w- c:\windows\system32\drivers\ntfs.sys
2013-04-10 13:57 . 2012-07-03 18:04 861088 ----a-w- c:\windows\SysWow64\npDeployJava1.dll
2013-04-10 13:57 . 2012-07-03 18:04 782240 ----a-w- c:\windows\SysWow64\deployJava1.dll
2013-04-04 03:35 . 2013-04-19 19:11 95648 ----a-w- c:\windows\SysWow64\WindowsAccessBridge-32.dll
2013-03-22 21:26 . 2013-03-22 21:26 97280 ----a-w- c:\windows\system32\mshtmled.dll
2013-03-22 21:26 . 2013-03-22 21:26 92160 ----a-w- c:\windows\system32\SetIEInstalledDate.exe
2013-03-22 21:26 . 2013-03-22 21:26 905728 ----a-w- c:\windows\system32\mshtmlmedia.dll
2013-03-22 21:26 . 2013-03-22 21:26 81408 ----a-w- c:\windows\system32\icardie.dll
2013-03-22 21:26 . 2013-03-22 21:26 77312 ----a-w- c:\windows\system32\tdc.ocx
2013-03-22 21:26 . 2013-03-22 21:26 762368 ----a-w- c:\windows\system32\ieapfltr.dll
2013-03-22 21:26 . 2013-03-22 21:26 73728 ----a-w- c:\windows\SysWow64\SetIEInstalledDate.exe
2013-03-22 21:26 . 2013-03-22 21:26 719360 ----a-w- c:\windows\SysWow64\mshtmlmedia.dll
2013-03-22 21:26 . 2013-03-22 21:26 62976 ----a-w- c:\windows\system32\pngfilt.dll
2013-03-22 21:26 . 2013-03-22 21:26 61952 ----a-w- c:\windows\SysWow64\tdc.ocx
2013-03-22 21:26 . 2013-03-22 21:26 599552 ----a-w- c:\windows\system32\vbscript.dll
2013-03-22 21:26 . 2013-03-22 21:26 523264 ----a-w- c:\windows\SysWow64\vbscript.dll
2013-03-22 21:26 . 2013-03-22 21:26 52224 ----a-w- c:\windows\system32\msfeedsbs.dll
2013-03-22 21:26 . 2013-03-22 21:26 51200 ----a-w- c:\windows\system32\imgutil.dll
2013-03-22 21:26 . 2013-03-22 21:26 48640 ----a-w- c:\windows\SysWow64\mshtmler.dll
2013-03-22 21:26 . 2013-03-22 21:26 48640 ----a-w- c:\windows\system32\mshtmler.dll
2013-03-22 21:26 . 2013-03-22 21:26 452096 ----a-w- c:\windows\system32\dxtmsft.dll
2013-03-22 21:26 . 2013-03-22 21:26 441856 ----a-w- c:\windows\system32\html.iec
2013-03-22 21:26 . 2013-03-22 21:26 38400 ----a-w- c:\windows\SysWow64\imgutil.dll
2013-03-22 21:26 . 2013-03-22 21:26 361984 ----a-w- c:\windows\SysWow64\html.iec
2013-03-22 21:26 . 2013-03-22 21:26 281600 ----a-w- c:\windows\system32\dxtrans.dll
2013-03-22 21:26 . 2013-03-22 21:26 27648 ----a-w- c:\windows\system32\licmgr10.dll
2013-03-22 21:26 . 2013-03-22 21:26 270848 ----a-w- c:\windows\system32\iedkcs32.dll
2013-03-22 21:26 . 2013-03-22 21:26 247296 ----a-w- c:\windows\system32\webcheck.dll
2013-03-22 21:26 . 2013-03-22 21:26 235008 ----a-w- c:\windows\system32\url.dll
2013-03-22 21:26 . 2013-03-22 21:26 23040 ----a-w- c:\windows\SysWow64\licmgr10.dll
2013-03-22 21:26 . 2013-03-22 21:26 226304 ----a-w- c:\windows\system32\elshyph.dll
2013-03-22 21:26 . 2013-03-22 21:26 216064 ----a-w- c:\windows\system32\msls31.dll
2013-03-22 21:26 . 2013-03-22 21:26 197120 ----a-w- c:\windows\system32\msrating.dll
2013-03-22 21:26 . 2013-03-22 21:26 185344 ----a-w- c:\windows\SysWow64\elshyph.dll
2013-03-22 21:26 . 2013-03-22 21:26 173568 ----a-w- c:\windows\system32\ieUnatt.exe
2013-03-22 21:26 . 2013-03-22 21:26 167424 ----a-w- c:\windows\system32\iexpress.exe
2013-03-22 21:26 . 2013-03-22 21:26 158720 ----a-w- c:\windows\SysWow64\msls31.dll
2013-03-22 21:26 . 2013-03-22 21:26 1509376 ----a-w- c:\windows\system32\inetcpl.cpl
2013-03-22 21:26 . 2013-03-22 21:26 150528 ----a-w- c:\windows\SysWow64\iexpress.exe
2013-03-22 21:26 . 2013-03-22 21:26 149504 ----a-w- c:\windows\system32\occache.dll
2013-03-22 21:26 . 2013-03-22 21:26 144896 ----a-w- c:\windows\system32\wextract.exe
2013-03-22 21:26 . 2013-03-22 21:26 1441280 ----a-w- c:\windows\SysWow64\inetcpl.cpl
2013-03-22 21:26 . 2013-03-22 21:26 1400416 ----a-w- c:\windows\system32\ieapfltr.dat
2013-03-22 21:26 . 2013-03-22 21:26 138752 ----a-w- c:\windows\SysWow64\wextract.exe
2013-03-22 21:26 . 2013-03-22 21:26 13824 ----a-w- c:\windows\system32\mshta.exe
2013-03-22 21:26 . 2013-03-22 21:26 137216 ----a-w- c:\windows\SysWow64\ieUnatt.exe
2013-03-22 21:26 . 2013-03-22 21:26 136192 ----a-w- c:\windows\system32\iepeers.dll
2013-03-22 21:26 . 2013-03-22 21:26 135680 ----a-w- c:\windows\system32\IEAdvpack.dll
2013-03-22 21:26 . 2013-03-22 21:26 12800 ----a-w- c:\windows\SysWow64\mshta.exe
2013-03-22 21:26 . 2013-03-22 21:26 12800 ----a-w- c:\windows\system32\msfeedssync.exe
2013-03-22 21:26 . 2013-03-22 21:26 110592 ----a-w- c:\windows\SysWow64\IEAdvpack.dll
2013-03-22 21:26 . 2013-03-22 21:26 1054720 ----a-w- c:\windows\system32\MsSpellCheckingFacility.exe
2013-03-22 21:26 . 2013-03-22 21:26 102912 ----a-w- c:\windows\system32\inseng.dll
2013-03-19 06:04 . 2013-04-10 14:50 5550424 ----a-w- c:\windows\system32\ntoskrnl.exe
2013-03-19 05:46 . 2013-04-10 14:50 43520 ----a-w- c:\windows\system32\csrsrv.dll
2013-03-19 05:04 . 2013-04-10 14:50 3968856 ----a-w- c:\windows\SysWow64\ntkrnlpa.exe
2013-03-19 05:04 . 2013-04-10 14:50 3913560 ----a-w- c:\windows\SysWow64\ntoskrnl.exe
2013-03-19 04:47 . 2013-04-10 14:50 6656 ----a-w- c:\windows\SysWow64\apisetschema.dll
2013-03-19 03:06 . 2013-04-10 14:50 112640 ----a-w- c:\windows\system32\smss.exe
2013-03-06 23:33 . 2012-07-02 21:45 22600 ----a-w- c:\windows\system32\drivers\aswKbd.sys
.
.
(((((((((((((((((((((((((((((((((( Spouštěcí body v registru )))))))))))))))))))))))))))))))))))))))))))))
.
.
*Poznámka* prázdné záznamy a legitimní výchozí údaje nejsou zobrazeny.
REGEDIT4
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\~\Browser Helper Objects\{0D778FDC-FAD7-4B1D-AB88-7A76A562D65C}]
2012-12-07 21:02 590232 ----a-w- c:\programdata\Plugin\ISeekDeal.dll
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Sidebar"="c:\program files\Windows Sidebar\sidebar.exe" [2010-11-20 1475584]
"RocketDock"="c:\program files (x86)\RocketDock\RocketDock.exe" [2007-09-02 495616]
"WebcamMaxAutoRun"="c:\program files (x86)\WebcamMax\WebcamMax.exe" [2010-05-19 6043888]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]
"STCAgent"="c:\program files (x86)\Splashtop\Splashtop Connect IE\STCAgent.exe" [2011-03-04 776064]
"avast"="c:\program files\AVAST Software\Avast\avastUI.exe" [2013-05-09 4858968]
"amd_dc_opt"="c:\program files (x86)\AMD\Dual-Core Optimizer\amd_dc_opt.exe" [2008-07-22 77824]
"StartCCC"="c:\program files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" [2012-12-19 642808]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorAdmin"= 0 (0x0)
"ConsentPromptBehaviorUser"= 3 (0x3)
"EnableLUA"= 0 (0x0)
"EnableUIADesktopToggle"= 0 (0x0)
"PromptOnSecureDesktop"= 0 (0x0)
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\windows]
"LoadAppInit_DLLs"=1 (0x1)
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\drivers32]
"aux4"=wdmaud.drv
.
R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2010-03-18 138576]
R2 SkypeUpdate;Skype Updater;c:\program files (x86)\Skype\Updater\Updater.exe [2012-07-13 160944]
R3 AppleChargerSrv;AppleChargerSrv;c:\windows\system32\AppleChargerSrv.exe [2010-04-06 31272]
R3 etdrv;etdrv;c:\windows\etdrv.sys [2012-07-02 25640]
R3 Futuremark SystemInfo Service;Futuremark SystemInfo Service;c:\program files (x86)\Common Files\Futuremark Shared\Futuremark SystemInfo\FMSISvc.exe [2010-12-14 128928]
R3 GVTDrv64;GVTDrv64;c:\windows\GVTDrv64.sys [2012-07-08 30528]
R3 RdpVideoMiniport;Remote Desktop Video Miniport Driver;c:\windows\system32\drivers\rdpvideominiport.sys [2012-08-23 19456]
R3 ss_bbus;SAMSUNG USB Mobile Device (WDM);c:\windows\system32\DRIVERS\ss_bbus.sys [2009-09-19 127488]
R3 ss_bmdfl;SAMSUNG USB Mobile Modem (Filter);c:\windows\system32\DRIVERS\ss_bmdfl.sys [2009-09-19 18944]
R3 ss_bmdm;SAMSUNG USB Mobile Modem;c:\windows\system32\DRIVERS\ss_bmdm.sys [2009-09-19 161280]
R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys [2012-08-23 57856]
R3 WatAdminSvc;Služba Technologie aktivace Windows;c:\windows\system32\Wat\WatAdminSvc.exe [2012-07-03 1255736]
S0 aswKbd;aswKbd; [x]
S0 aswRvrt;aswRvrt; [x]
S0 aswVmm;aswVmm; [x]
S0 SmartDefragDriver;SmartDefragDriver;c:\windows\System32\Drivers\SmartDefragDriver.sys [2010-11-26 17720]
S1 AppleCharger;AppleCharger;c:\windows\system32\DRIVERS\AppleCharger.sys [2011-01-10 21104]
S1 aswSnx;aswSnx; [x]
S1 aswSP;aswSP; [x]
S2 AMD External Events Utility;AMD External Events Utility;c:\windows\system32\atiesrxx.exe [2012-12-19 240640]
S2 AMD FUEL Service;AMD FUEL Service;c:\program files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe [2012-12-19 361984]
S2 AODDriver4.2;AODDriver4.2;c:\program files\ATI Technologies\ATI.ACE\Fuel\amd64\AODDriver2.sys [2012-04-09 57472]
S2 aswFsBlk;aswFsBlk; [x]
S2 aswMonFlt;aswMonFlt;c:\windows\system32\drivers\aswMonFlt.sys [2013-05-09 80816]
S2 ES lite Service;ES lite Service for program management.;c:\program files (x86)\Gigabyte\EasySaver\ESSVR.EXE [2009-08-24 68136]
S2 SCBackService;Splashtop Connect Service;c:\program files (x86)\Splashtop\Splashtop Connect\BackService.exe [2010-11-15 477000]
S2 WCUService_STC_FF;Splashtop Connect Firefox Software Updater Service;c:\program files (x86)\Splashtop\Splashtop Connect Firefox Software Updater\WCUService.exe [2011-03-24 493384]
S2 WCUService_STC_IE;Splashtop Connect IE Software Updater Service;c:\program files (x86)\Splashtop\Splashtop Connect IE Software Updater\WCUService.exe [2011-03-22 497480]
S3 amdiox64;AMD IO Driver;c:\windows\system32\DRIVERS\amdiox64.sys [2010-02-18 46136]
S3 AtiHDAudioService;AMD Function Driver for HD Audio Service;c:\windows\system32\drivers\AtihdW76.sys [2012-11-06 96256]
S3 dtsoftbus01;DAEMON Tools Virtual Bus Driver;c:\windows\system32\DRIVERS\dtsoftbus01.sys [2012-07-03 283200]
S3 EtronHub3;Etron USB 3.0 Extensible Hub Driver;c:\windows\system32\Drivers\EtronHub3.sys [2011-07-29 56960]
S3 EtronXHCI;Etron USB 3.0 Extensible Host Controller Driver;c:\windows\system32\Drivers\EtronXHCI.sys [2011-07-29 79104]
S3 RTL8167;Realtek 8167 NT Driver;c:\windows\system32\DRIVERS\Rt64win7.sys [2011-01-13 413800]
.
.
.
--------- X64 Entries -----------
.
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\00avast]
@="{472083B0-C522-11CF-8763-00608CC02F24}"
[HKEY_CLASSES_ROOT\CLSID\{472083B0-C522-11CF-8763-00608CC02F24}]
2013-05-09 08:58 133840 ----a-w- c:\program files\AVAST Software\Avast\ashShA64.dll
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"RtHDVCpl"="c:\program files\Realtek\Audio\HDA\RAVCpl64.exe" [2011-08-09 12666984]
.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Svchost - LocalService
FontCache
.
------- Doplňkový sken -------
.
uLocal Page = c:\windows\system32\blank.htm
mLocal Page = c:\windows\SysWOW64\blank.htm
IE: E&xport to Microsoft Excel - c:\progra~2\MICROS~4\Office12\EXCEL.EXE/3000
Trusted Zone: mojebanka.cz\etrading
Trusted Zone: mojebanka.cz\www
TCP: Interfaces\{3C5E49D8-A04C-492E-863C-D7DA80B9B3B4}: NameServer = 8.8.8.8,8.8.4.4,4.2.2.1,4.2.2.2,208.67.222.222,208.67.220.220,8.26.56.26,8.20.247.20,156.154.70.1,156.154.71.1
FF - ProfilePath - c:\users\Bender\AppData\Roaming\Mozilla\Firefox\Profiles\1ibnaocq.default\
FF - prefs.js: browser.search.selectedEngine -
FF - prefs.js: browser.startup.homepage - hxxp://www.seznam.cz/
.
- - - - NEPLATNÉ POLOŽKY ODSTRANĚNÉ Z REGISTRU - - - -
.
AddRemove-PunkBusterSvc - c:\windows\system32\pbsvc.exe
.
.
.
------------------------ Jiné spuštené procesy ------------------------
.
c:\program files\AVAST Software\Avast\AvastSvc.exe
c:\program files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
c:\windows\SysWOW64\PnkBstrA.exe
.
**************************************************************************
.
Celkový čas: 2013-05-30 15:11:51 - počítač byl restartován
ComboFix-quarantined-files.txt 2013-05-30 13:11
ComboFix2.txt 2013-05-29 12:59
.
Před spuštěním: Volných bajtů: 16 279 793 664
Po spuštění: Volných bajtů: 16 089 821 184
.
- - End Of File - - AFB0ACE934B41B25D237FD3DEAAED99F

#11 Příspěvek od **vyosek** » 30 kvě 2013 20:35

Stahnete aswMBR http://public.avast.com/%7Egmerek/aswMBR.exe a ulozte jej na plochu.

Utilitu spustte a prikazte ji, at skenuje - klik na Scan
Kliknutim na Save log ulozte log aswMBR na plochu
Obsah logu aswMBR mi sem vlozte

redneB · #12 Příspěvek od **redneB** » 31 kvě 2013 05:50

aswMBR version 0.9.9.1771 Copyright(c) 2011 AVAST Software
Run date: 2013-05-31 06:42:38
-----------------------------
06:42:38.268 OS Version: Windows x64 6.1.7601 Service Pack 1
06:42:38.268 Number of processors: 4 586 0x403
06:42:38.269 ComputerName: MASINAMANIFIKA UserName: Bender
06:42:38.489 Initialize success
06:42:38.531 AVAST engine defs: 13053001
06:42:48.258 Disk 0 (boot) \Device\Harddisk0\DR0 -> \Device\Ide\IdeDeviceP2T0L0-2
06:42:48.263 Disk 0 Vendor: WDC_WD5000AAKX-001CA0 15.01H15 Size: 476940MB BusType: 3
06:42:48.337 Disk 0 MBR read successfully
06:42:48.342 Disk 0 MBR scan
06:42:48.349 Disk 0 Windows 7 default MBR code
06:42:48.355 Disk 0 Partition 1 80 (A) 07 HPFS/NTFS NTFS 49999 MB offset 63
06:42:48.362 Disk 0 Partition - 00 0F Extended LBA 426930 MB offset 102398310
06:42:48.382 Disk 0 Partition 2 00 07 HPFS/NTFS NTFS 426930 MB offset 102398373
06:42:48.399 Disk 0 scanning C:\Windows\system32\drivers
06:42:57.661 Service scanning
06:43:14.436 Modules scanning
06:43:14.453 Disk 0 trace - called modules:
06:43:14.476 ntoskrnl.exe CLASSPNP.SYS disk.sys ACPI.sys ataport.SYS pciide.sys PCIIDEX.SYS hal.dll atapi.sys
06:43:14.488 1 nt!IofCallDriver -> \Device\Harddisk0\DR0[0xfffffa8004a39060]
06:43:14.499 3 CLASSPNP.SYS[fffff8800194443f] -> nt!IofCallDriver -> [0xfffffa8003b20520]
06:43:14.505 5 ACPI.sys[fffff88000f057a1] -> nt!IofCallDriver -> \Device\Ide\IdeDeviceP2T0L0-2[0xfffffa8003b22060]
06:43:14.719 AVAST engine scan C:\Windows
06:43:16.236 AVAST engine scan C:\Windows\system32
06:45:32.258 AVAST engine scan C:\Windows\system32\drivers
06:45:50.807 AVAST engine scan C:\Users\Bender
06:47:36.739 AVAST engine scan C:\ProgramData
06:49:02.145 Scan finished successfully
06:49:19.476 Disk 0 MBR has been saved successfully to "C:\Users\Bender\Desktop\MBR.dat"
06:49:19.480 The log file has been saved successfully to "C:\Users\Bender\Desktop\aswMBR.txt"

#13 Příspěvek od **vyosek** » 01 čer 2013 20:13

Tak jeste uklidime

Odinstalujte Combofix

Prejmenujte ComboFix na Uninstall
Spustte jej
Tohle smaze Combofix a jeho slozky

T-Cleaner http://vyosek.ic.cz/pro_usery/T-Cleaner.exe

Stahnete a spustte
Pro potvrzeni volby mackejte A, Enter
Po pouziti utilitu smazte
Antiviry touhou utilitu chybne oznacit jako vir - jedna se o falesny poplach - takze v pohode stahnete (pripadne vypnete pri stahovani antivir)

OTC http://oldtimer.geekstogo.com/OTC.exe

Stahnete a spustte
Kliknete na CleanUp a potvrdte YES
Program uklidi a restartuje PC

TFC http://oldtimer.geekstogo.com/TFC.exe

Stahnete a spustte
Kliknete na Start a potvrdte OK
Program uklidi a restartuje pc
Po pouziti utilitu smazte

Stahnete Ccleaner http://forum.viry.cz/viewtopic.php?t=7478
Panel čistič

Vse nechte jak je, jen dejte Analyzovat a pote Spustit CCleaner

Panel registry

dejte Hledej problémy
nasledne Opravit problémy - zalohu registru doporucuji udelat, opravte vsechny problemy
postup opakujte dokud nebude bez problemu - vetsinou cca 3x

Panel nástroje

Zde muzete odinstalovat nepotrebne programy

CCleaner doporucuji pouzivat cca jednou za tyden

A pokud nejsou problemy ci dotazy, je to z me strany vse

redneB · #14 Příspěvek od **redneB** » 01 čer 2013 20:46

Dekuji mockrat za pomoc a hlavne za ochotu. Ste nej

#15 Příspěvek od **vyosek** » 01 čer 2013 20:50

Nemate zac, rad jsem pomohl

Zase nekdy Obrázek

A na zaklade Pravidla o zamykani temat

VIRY.CZ

Trojan se porad ukazuje prosim pomoc

Trojan se porad ukazuje prosim pomoc

Re: Trojan se porad ukazuje prosim pomoc

Re: Trojan se porad ukazuje prosim pomoc

Re: Trojan se porad ukazuje prosim pomoc

Re: Trojan se porad ukazuje prosim pomoc

Re: Trojan se porad ukazuje prosim pomoc

Re: Trojan se porad ukazuje prosim pomoc

Re: Trojan se porad ukazuje prosim pomoc

Re: Trojan se porad ukazuje prosim pomoc

Re: Trojan se porad ukazuje prosim pomoc

Re: Trojan se porad ukazuje prosim pomoc

Re: Trojan se porad ukazuje prosim pomoc

Re: Trojan se porad ukazuje prosim pomoc

Re: Trojan se porad ukazuje prosim pomoc

Re: Trojan se porad ukazuje prosim pomoc