Policie Vir ČR

[dpokorna5]

ComboFix 13-11-16.01 - Denisa 16.11.2013 22:00:11.1.2 - x64 NETWORK
Microsoft Windows 7 Home Premium 6.1.7601.1.1250.420.1029.18.4040.3217 [GMT 1:00]
Spuštěný z: c:\users\Denisa\Desktop\ComboFix.exe
AV: Avira Desktop *Enabled/Updated* {F67B4DE5-C0B4-6C3F-0EFF-6C83BD5D0C2C}
FW: Privatefirewall *Disabled* {ADE53067-43C2-2B76-05F6-A92000CC501A}
SP: Avira Desktop *Enabled/Updated* {4D1AAC01-E68E-63B1-344F-57F1C6DA4691}
SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
* Vytvořen nový Bod Obnovení
.
.
((((((((((((((((((((((((((((((((((((((( Ostatní výmazy )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
c:\program files (x86)\autorun.inf
c:\program files (x86)\Setup.exe
c:\programdata\al1brr.pss
c:\users\Denisa\AppData\Local\MSGBOX.EXE
c:\users\Denisa\ForsakenWorld_EN_215_Pando.exe
c:\users\Denisa\OOo_3.3.0_Win_x86_install_cs.exe
c:\users\Guest\AppData\Roaming\msconfig.ini
c:\windows\s.bat
c:\windows\SwSys1.bmp
c:\windows\SwSys2.bmp
c:\windows\SysWow64\FlashPlayerApp.exe
.
.
((((((((((((((((((((((((( Soubory vytvořené od 2013-10-16 do 2013-11-16 )))))))))))))))))))))))))))))))
.
.
2013-11-16 21:08 . 2013-11-16 21:08 -------- d-----w- c:\users\Guest\AppData\Local\temp
2013-11-16 21:07 . 2013-11-16 21:07 -------- d-----w- c:\users\Default\AppData\Local\temp
2013-11-16 18:42 . 2013-11-16 18:42 75888 ----a-w- c:\programdata\Microsoft\Windows Defender\Definition Updates\{0AEC9871-2AA2-4FC4-B17F-2AB010BB18BE}\offreg.dll
2013-11-16 18:37 . 2013-11-16 18:37 -------- d-----w- C:\FRST
2013-11-16 15:15 . 2013-10-14 07:12 10280728 ----a-w- c:\programdata\Microsoft\Windows Defender\Definition Updates\{0AEC9871-2AA2-4FC4-B17F-2AB010BB18BE}\mpengine.dll
2013-11-13 18:56 . 2013-10-05 20:25 1474048 ----a-w- c:\windows\system32\crypt32.dll
2013-11-13 18:56 . 2013-10-05 19:57 1168384 ----a-w- c:\windows\SysWow64\crypt32.dll
2013-11-13 18:55 . 2013-09-28 01:09 497152 ----a-w- c:\windows\system32\drivers\afd.sys
2013-11-13 18:55 . 2013-10-04 02:28 190464 ----a-w- c:\windows\system32\SmartcardCredentialProvider.dll
2013-11-13 18:55 . 2013-10-04 02:25 197120 ----a-w- c:\windows\system32\credui.dll
2013-11-13 18:55 . 2013-10-04 02:24 1930752 ----a-w- c:\windows\system32\authui.dll
2013-11-13 18:55 . 2013-10-04 01:58 152576 ----a-w- c:\windows\SysWow64\SmartcardCredentialProvider.dll
2013-11-13 18:55 . 2013-10-04 01:56 168960 ----a-w- c:\windows\SysWow64\credui.dll
2013-11-13 18:55 . 2013-10-04 01:56 1796096 ----a-w- c:\windows\SysWow64\authui.dll
2013-11-13 18:53 . 2013-10-03 02:23 404480 ----a-w- c:\windows\system32\gdi32.dll
2013-11-13 18:53 . 2013-10-03 02:00 311808 ----a-w- c:\windows\SysWow64\gdi32.dll
2013-11-13 18:53 . 2013-10-12 02:30 830464 ----a-w- c:\windows\system32\nshwfp.dll
2013-11-13 18:53 . 2013-10-12 02:29 859648 ----a-w- c:\windows\system32\IKEEXT.DLL
2013-11-13 18:53 . 2013-10-12 02:29 324096 ----a-w- c:\windows\system32\FWPUCLNT.DLL
2013-11-13 18:53 . 2013-10-12 02:03 656896 ----a-w- c:\windows\SysWow64\nshwfp.dll
2013-11-13 18:53 . 2013-10-12 02:01 216576 ----a-w- c:\windows\SysWow64\FWPUCLNT.DLL
2013-11-07 03:11 . 2013-11-07 03:11 273 ----a-w- c:\programdata\al1brr.reg
.
.
.
(((((((((((((((((((((((((((((((((((((((( Find3M výpis ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2013-11-14 02:01 . 2012-02-11 14:11 82896128 ----a-w- c:\windows\system32\MRT.exe
2013-11-10 14:36 . 2012-06-28 16:15 22240 ----a-w- c:\programdata\Microsoft\IdentityCRL\production\ppcrlconfig600.dll
2013-10-14 01:04 . 2013-10-14 01:04 226304 ----a-w- c:\windows\system32\elshyph.dll
2013-10-14 01:04 . 2013-10-14 01:04 185344 ----a-w- c:\windows\SysWow64\elshyph.dll
2013-10-14 01:04 . 2013-10-14 01:04 1054720 ----a-w- c:\windows\system32\MsSpellCheckingFacility.exe
2013-10-14 01:04 . 2013-10-14 01:04 719360 ----a-w- c:\windows\SysWow64\mshtmlmedia.dll
2013-10-14 01:04 . 2013-10-14 01:04 523264 ----a-w- c:\windows\SysWow64\vbscript.dll
2013-10-14 01:04 . 2013-10-14 01:04 158720 ----a-w- c:\windows\SysWow64\msls31.dll
2013-10-14 01:04 . 2013-10-14 01:04 150528 ----a-w- c:\windows\SysWow64\iexpress.exe
2013-10-14 01:04 . 2013-10-14 01:04 138752 ----a-w- c:\windows\SysWow64\wextract.exe
2013-10-14 01:04 . 2013-10-14 01:04 73728 ----a-w- c:\windows\SysWow64\SetIEInstalledDate.exe
2013-10-14 01:04 . 2013-10-14 01:04 48640 ----a-w- c:\windows\SysWow64\mshtmler.dll
2013-10-14 01:04 . 2013-10-14 01:04 38400 ----a-w- c:\windows\SysWow64\imgutil.dll
2013-10-14 01:04 . 2013-10-14 01:04 137216 ----a-w- c:\windows\SysWow64\ieUnatt.exe
2013-10-14 01:04 . 2013-10-14 01:04 12800 ----a-w- c:\windows\SysWow64\mshta.exe
2013-10-14 01:04 . 2013-10-14 01:04 110592 ----a-w- c:\windows\SysWow64\IEAdvpack.dll
2013-10-14 01:04 . 2013-10-14 01:04 61952 ----a-w- c:\windows\SysWow64\tdc.ocx
2013-10-14 01:04 . 2013-10-14 01:04 361984 ----a-w- c:\windows\SysWow64\html.iec
2013-10-14 01:04 . 2013-10-14 01:04 23040 ----a-w- c:\windows\SysWow64\licmgr10.dll
2013-10-14 01:04 . 2013-10-14 01:04 1441280 ----a-w- c:\windows\SysWow64\inetcpl.cpl
2013-10-14 01:04 . 2013-10-14 01:04 216064 ----a-w- c:\windows\system32\msls31.dll
2013-10-14 01:04 . 2013-10-14 01:04 197120 ----a-w- c:\windows\system32\msrating.dll
2013-10-14 01:04 . 2013-10-14 01:04 97280 ----a-w- c:\windows\system32\mshtmled.dll
2013-10-14 01:04 . 2013-10-14 01:04 905728 ----a-w- c:\windows\system32\mshtmlmedia.dll
2013-10-14 01:04 . 2013-10-14 01:04 81408 ----a-w- c:\windows\system32\icardie.dll
2013-10-14 01:04 . 2013-10-14 01:04 762368 ----a-w- c:\windows\system32\ieapfltr.dll
2013-10-14 01:04 . 2013-10-14 01:04 452096 ----a-w- c:\windows\system32\dxtmsft.dll
2013-10-14 01:04 . 2013-10-14 01:04 441856 ----a-w- c:\windows\system32\html.iec
2013-10-14 01:04 . 2013-10-14 01:04 281600 ----a-w- c:\windows\system32\dxtrans.dll
2013-10-14 01:04 . 2013-10-14 01:04 27648 ----a-w- c:\windows\system32\licmgr10.dll
2013-10-14 01:04 . 2013-10-14 01:04 270848 ----a-w- c:\windows\system32\iedkcs32.dll
2013-10-14 01:04 . 2013-10-14 01:04 247296 ----a-w- c:\windows\system32\webcheck.dll
2013-10-14 01:04 . 2013-10-14 01:04 235008 ----a-w- c:\windows\system32\url.dll
2013-10-14 01:04 . 2013-10-14 01:04 1509376 ----a-w- c:\windows\system32\inetcpl.cpl
2013-10-14 01:04 . 2013-10-14 01:04 1400416 ----a-w- c:\windows\system32\ieapfltr.dat
2013-10-14 01:04 . 2013-10-14 01:04 102912 ----a-w- c:\windows\system32\inseng.dll
2013-10-14 01:04 . 2013-10-14 01:04 92160 ----a-w- c:\windows\system32\SetIEInstalledDate.exe
2013-10-14 01:04 . 2013-10-14 01:04 62976 ----a-w- c:\windows\system32\pngfilt.dll
2013-10-14 01:04 . 2013-10-14 01:04 599552 ----a-w- c:\windows\system32\vbscript.dll
2013-10-14 01:04 . 2013-10-14 01:04 52224 ----a-w- c:\windows\system32\msfeedsbs.dll
2013-10-14 01:04 . 2013-10-14 01:04 51200 ----a-w- c:\windows\system32\imgutil.dll
2013-10-14 01:04 . 2013-10-14 01:04 48640 ----a-w- c:\windows\system32\mshtmler.dll
2013-10-14 01:04 . 2013-10-14 01:04 173568 ----a-w- c:\windows\system32\ieUnatt.exe
2013-10-14 01:04 . 2013-10-14 01:04 167424 ----a-w- c:\windows\system32\iexpress.exe
2013-10-14 01:04 . 2013-10-14 01:04 149504 ----a-w- c:\windows\system32\occache.dll
2013-10-14 01:04 . 2013-10-14 01:04 144896 ----a-w- c:\windows\system32\wextract.exe
2013-10-14 01:04 . 2013-10-14 01:04 13824 ----a-w- c:\windows\system32\mshta.exe
2013-10-14 01:04 . 2013-10-14 01:04 136192 ----a-w- c:\windows\system32\iepeers.dll
2013-10-14 01:04 . 2013-10-14 01:04 135680 ----a-w- c:\windows\system32\IEAdvpack.dll
2013-10-14 01:04 . 2013-10-14 01:04 12800 ----a-w- c:\windows\system32\msfeedssync.exe
2013-10-14 01:04 . 2013-10-14 01:04 77312 ----a-w- c:\windows\system32\tdc.ocx
2013-09-25 02:22 . 2013-11-13 18:54 340992 ----a-w- c:\windows\system32\schannel.dll
2013-09-25 01:57 . 2013-11-13 18:54 247808 ----a-w- c:\windows\SysWow64\schannel.dll
2013-09-08 02:30 . 2013-10-10 22:33 1903552 ----a-w- c:\windows\system32\drivers\tcpip.sys
2013-09-08 02:27 . 2013-10-10 22:33 327168 ----a-w- c:\windows\system32\mswsock.dll
2013-09-08 02:03 . 2013-10-10 22:33 231424 ----a-w- c:\windows\SysWow64\mswsock.dll
2013-09-04 09:26 . 2013-04-01 19:24 105344 ----a-w- c:\windows\system32\drivers\avgntflt.sys
2013-09-03 12:35 . 2010-11-21 03:27 278800 ------w- c:\windows\system32\MpSigStub.exe
2013-08-29 21:19 . 2013-05-06 09:53 81112 ----a-w- c:\windows\system32\drivers\avnetflt.sys
2013-08-29 21:19 . 2013-04-01 19:24 132088 ----a-w- c:\windows\system32\drivers\avipbb.sys
2013-08-29 02:17 . 2013-10-10 22:32 5549504 ----a-w- c:\windows\system32\ntoskrnl.exe
2013-08-29 02:16 . 2013-10-10 22:32 1732032 ----a-w- c:\windows\system32\ntdll.dll
2013-08-29 02:16 . 2013-10-10 22:32 243712 ----a-w- c:\windows\system32\wow64.dll
2013-08-29 02:16 . 2013-10-10 22:32 859648 ----a-w- c:\windows\system32\tdh.dll
2013-08-29 02:13 . 2013-10-10 22:32 878080 ----a-w- c:\windows\system32\advapi32.dll
2013-08-29 01:51 . 2013-10-10 22:32 3969472 ----a-w- c:\windows\SysWow64\ntkrnlpa.exe
2013-08-29 01:51 . 2013-10-10 22:32 3914176 ----a-w- c:\windows\SysWow64\ntoskrnl.exe
2013-08-29 01:50 . 2013-10-10 22:32 5120 ----a-w- c:\windows\SysWow64\wow32.dll
2013-08-29 01:50 . 2013-10-10 22:32 1292192 ----a-w- c:\windows\SysWow64\ntdll.dll
2013-08-29 01:50 . 2013-10-10 22:32 619520 ----a-w- c:\windows\SysWow64\tdh.dll
2013-08-29 01:48 . 2013-10-10 22:32 640512 ----a-w- c:\windows\SysWow64\advapi32.dll
2013-08-29 01:48 . 2013-10-10 22:32 44032 ----a-w- c:\windows\apppatch\acwow64.dll
2013-08-29 00:49 . 2013-10-10 22:32 25600 ----a-w- c:\windows\SysWow64\setup16.exe
2013-08-29 00:49 . 2013-10-10 22:32 7680 ----a-w- c:\windows\SysWow64\instnm.exe
2013-08-29 00:49 . 2013-10-10 22:32 14336 ----a-w- c:\windows\SysWow64\ntvdm64.dll
2013-08-29 00:49 . 2013-10-10 22:32 2048 ----a-w- c:\windows\SysWow64\user.exe
2013-08-28 01:21 . 2013-10-10 22:33 3155968 ----a-w- c:\windows\system32\win32k.sys
2013-08-28 01:12 . 2013-10-10 22:30 461312 ----a-w- c:\windows\system32\scavengeui.dll
2003-04-22 11:39 . 2003-04-22 11:39 2719744 ------w- c:\program files (x86)\aiodrv.msi
2003-04-22 11:34 . 2003-04-22 11:34 2605056 ------w- c:\program files (x86)\aiosw.msi
2003-03-09 19:30 . 2003-03-09 19:30 184320 ----a-w- c:\program files (x86)\hpzscr07.dll
2003-03-09 19:30 . 2003-03-09 19:30 16352 ----a-w- c:\program files (x86)\HPZUCI12.DLL
2003-03-09 19:30 . 2003-03-09 19:30 274432 ----a-w- c:\program files (x86)\hpzglu07.exe
2003-03-09 19:30 . 2003-03-09 19:30 237568 ----a-w- c:\program files (x86)\hpzc3212.dll
2002-09-09 16:48 . 2002-09-09 16:48 22608 ----a-w- c:\program files (x86)\usbprint.sys
2002-09-09 16:48 . 2002-09-09 16:48 12288 ----a-w- c:\program files (x86)\usbmon.dll
2002-09-09 16:48 . 2002-09-09 16:48 458752 ----a-w- c:\program files (x86)\tls704d.dll
2002-09-09 16:47 . 2002-09-09 16:47 254005 ----a-w- c:\program files (x86)\msvcrt.dll
2002-09-09 16:47 . 2002-09-09 16:47 70656 ----a-w- c:\program files (x86)\msvcirt.dll
2002-09-09 16:47 . 2002-09-09 16:47 212992 ----a-w- c:\program files (x86)\hpzpnp07.dll
2002-09-09 16:46 . 2002-09-09 16:46 49212 ----a-w- c:\program files (x86)\hpzjvp01.dll
2002-09-09 16:46 . 2002-09-09 16:46 249913 ----a-w- c:\program files (x86)\hpzjut01.dll
2002-09-09 16:46 . 2002-09-09 16:46 417849 ----a-w- c:\program files (x86)\hpzjpp01.dll
2002-09-09 16:46 . 2002-09-09 16:46 28722 ----a-w- c:\program files (x86)\hpzjlog.dll
2002-09-06 08:54 . 2002-09-06 08:54 995383 ----a-w- c:\program files (x86)\MFC42.DLL
.
.
(((((((((((((((((((((((((((((((((( Spouštěcí body v registru )))))))))))))))))))))))))))))))))))))))))))))
.
.
*Poznámka* prázdné záznamy a legitimní výchozí údaje nejsou zobrazeny.
REGEDIT4
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]
"IAStorIcon"="c:\program files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe" [2011-02-18 283160]
"StartCCC"="c:\program files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" [2011-03-24 336384]
"331BigDog"="c:\program files (x86)\USB Camera\VM331_STI.EXE" [2011-06-15 548864]
"UpdateP2GShortCut"="c:\program files (x86)\Lenovo\Power2Go\MUITransfer\MUIStartMenu.exe" [2010-07-26 222504]
"YouCam Mirage"="c:\program files (x86)\Lenovo\YouCam\YCMMirage.exe" [2011-01-28 136488]
"YouCam Tray"="c:\program files (x86)\Lenovo\YouCam\YouCam.exe" [2011-01-28 228448]
"VeriFaceManager"="c:\program files (x86)\Lenovo\VeriFace\PManage.exe" [2011-09-04 329056]
"UpdatePRCShortCut"="c:\program files\Lenovo\OneKey App\OneKey Recovery\MUITransfer\MUIStartMenu.exe" [2009-05-13 222504]
"Adobe Reader Speed Launcher"="c:\program files (x86)\Adobe\Reader 9.0\Reader\Reader_sl.exe" [2010-09-23 35760]
"Adobe ARM"="c:\program files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2010-09-20 932288]
"Guard.Mail.ru.gui"="c:\program files (x86)\Guard-ICQ\GuardICQ.exe" [2012-01-16 1564368]
"Privatefirewall"="c:\program files (x86)\Privacyware\Privatefirewall 7.0\PFGUI.exe" [2011-10-21 3065568]
"avgnt"="c:\program files (x86)\Avira\AntiVir Desktop\avgnt.exe" [2013-08-29 347192]
"SunJavaUpdateSched"="c:\program files (x86)\Common Files\Java\Java Update\jusched.exe" [2012-07-03 252848]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorAdmin"= 5 (0x5)
"ConsentPromptBehaviorUser"= 3 (0x3)
"EnableUIADesktopToggle"= 0 (0x0)
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\drivers32]
"aux1"=wdmaud.drv
.
R1 avkmgr;avkmgr;c:\windows\system32\DRIVERS\avkmgr.sys;c:\windows\SYSNATIVE\DRIVERS\avkmgr.sys [x]
R1 BPntDrv;BPntDrv;c:\windows\system32\drivers\BPntDrv.sys;c:\windows\SYSNATIVE\drivers\BPntDrv.sys [x]
R2 AMD External Events Utility;AMD External Events Utility;c:\windows\system32\atiesrxx.exe;c:\windows\SYSNATIVE\atiesrxx.exe [x]
R2 AntiVirSchedulerService;Avira Scheduler;c:\program files (x86)\Avira\AntiVir Desktop\sched.exe;c:\program files (x86)\Avira\AntiVir Desktop\sched.exe [x]
R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [x]
R2 Guard.Mail.ru;Guard.Mail.ru;c:\program files (x86)\Guard-ICQ\GuardICQ.exe;c:\program files (x86)\Guard-ICQ\GuardICQ.exe [x]
R2 IAStorDataMgrSvc;Intel(R) Rapid Storage Technology;c:\program files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe;c:\program files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe [x]
R2 SkypeUpdate;Skype Updater;c:\program files (x86)\Skype\Updater\Updater.exe;c:\program files (x86)\Skype\Updater\Updater.exe [x]
R2 sp_rsdrv2;Spyware Terminator Driver Filter;c:\windows\system32\DRIVERS\stflt.sys;c:\windows\SYSNATIVE\DRIVERS\stflt.sys [x]
R2 ST2012_Svc;Spyware Terminator 2012 Realtime Shield Service;c:\program files (x86)\Spyware Terminator\st_rsser64.exe;c:\program files (x86)\Spyware Terminator\st_rsser64.exe [x]
R2 UNS;Intel(R) Management and Security Application User Notification Service;c:\program files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe;c:\program files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe [x]
R3 clwvd;CyberLink WebCam Virtual Driver;c:\windows\system32\DRIVERS\clwvd.sys;c:\windows\SYSNATIVE\DRIVERS\clwvd.sys [x]
R3 IntcDAud;Intel(R) Display Audio;c:\windows\system32\DRIVERS\IntcDAud.sys;c:\windows\SYSNATIVE\DRIVERS\IntcDAud.sys [x]
R3 intelkmd;intelkmd;c:\windows\system32\DRIVERS\igdpmd64.sys;c:\windows\SYSNATIVE\DRIVERS\igdpmd64.sys [x]
R3 RSUSBVSTOR;RtsUVStor.Sys Realtek USB Card Reader;c:\windows\system32\Drivers\RtsUVStor.sys;c:\windows\SYSNATIVE\Drivers\RtsUVStor.sys [x]
R3 RTL8167;Realtek 8167 NT Driver;c:\windows\system32\DRIVERS\Rt64win7.sys;c:\windows\SYSNATIVE\DRIVERS\Rt64win7.sys [x]
R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys;c:\windows\SYSNATIVE\drivers\tsusbflt.sys [x]
R3 TsUsbGD;Remote Desktop Generic USB Device;c:\windows\system32\drivers\TsUsbGD.sys;c:\windows\SYSNATIVE\drivers\TsUsbGD.sys [x]
R3 vm331avs;Digital Camera 1;c:\windows\system32\Drivers\vm331avs.sys;c:\windows\SYSNATIVE\Drivers\vm331avs.sys [x]
R3 vmuvcflt;Vimicro USB Camera Filter;c:\windows\system32\Drivers\vmuvcflt.sys;c:\windows\SYSNATIVE\Drivers\vmuvcflt.sys [x]
R3 WatAdminSvc;Služba Technologie aktivace Windows;c:\windows\system32\Wat\WatAdminSvc.exe;c:\windows\SYSNATIVE\Wat\WatAdminSvc.exe [x]
R3 wsvd;wsvd;c:\windows\system32\DRIVERS\wsvd.sys;c:\windows\SYSNATIVE\DRIVERS\wsvd.sys [x]
R4 wlcrasvc;Windows Live Mesh remote connections service;c:\program files\Windows Live\Mesh\wlcrasvc.exe;c:\program files\Windows Live\Mesh\wlcrasvc.exe [x]
S0 fbfmon;fbfmon;c:\windows\system32\drivers\fbfmon.sys;c:\windows\SYSNATIVE\drivers\fbfmon.sys [x]
S0 LHDmgr;LHDmgr;c:\windows\System32\DRIVERS\LhdX64.sys;c:\windows\SYSNATIVE\DRIVERS\LhdX64.sys [x]
S1 pwipf6;Privacyware Filter Driver;c:\windows\system32\DRIVERS\pwipf6.sys;c:\windows\SYSNATIVE\DRIVERS\pwipf6.sys [x]
S2 PFNet;Privacyware network service;c:\program files (x86)\Privacyware\Privatefirewall 7.0\pfsvc.exe;c:\program files (x86)\Privacyware\Privatefirewall 7.0\pfsvc.exe [x]
S3 ACPIVPC;Lenovo Virtual Power Controller Driver;c:\windows\system32\DRIVERS\AcpiVpc.sys;c:\windows\SYSNATIVE\DRIVERS\AcpiVpc.sys [x]
S3 L1C;NDIS Miniport Driver for Atheros AR813x/AR815x PCI-E Ethernet Controller;c:\windows\system32\DRIVERS\L1C62x64.sys;c:\windows\SYSNATIVE\DRIVERS\L1C62x64.sys [x]
.
.
--- Ostatní služby/ovladače v paměti ---
.
*NewlyCreated* - 68187307
*Deregistered* - 68187307
.
Obsah adresáře 'Naplánované úlohy'
.
2013-11-07 c:\windows\Tasks\Norton Security Scan for Denisa.job
- c:\progra~2\NORTON~2\Engine\361~1.11\Nss.exe [2011-12-10 00:45]
.
.
--------- X64 Entries -----------
.
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\VeriFace Enc]
@="{771C7324-DA80-49D3-8017-753B0AF60951}"
[HKEY_CLASSES_ROOT\CLSID\{771C7324-DA80-49D3-8017-753B0AF60951}]
2011-09-04 13:15 1508192 ----a-w- c:\windows\System32\IcnOvrly.dll
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"IgfxTray"="c:\windows\system32\igfxtray.exe" [2011-03-25 167960]
"HotKeysCmds"="c:\windows\system32\hkcmd.exe" [2011-03-25 391704]
"Persistence"="c:\windows\system32\igfxpers.exe" [2011-03-25 418840]
"Lenovo EE Boot Optimizer"="c:\program files (x86)\Lenovo\Boot Optimizer\PopWnd.exe" [2011-09-04 114688]
"Energy Management"="c:\program files (x86)\Lenovo\Energy Management\Energy Management.exe" [2011-09-04 9753024]
"EnergyUtility"="c:\program files (x86)\Lenovo\Energy Management\Utility.exe" [2011-09-04 5908928]
"SpywareTerminatorShield"="c:\program files (x86)\Spyware Terminator\SpywareTerminatorShield.exe" [2012-01-10 2779824]
.
------- Doplňkový sken -------
.
uLocal Page = c:\windows\system32\blank.htm
mLocal Page = c:\windows\SysWOW64\blank.htm
IE: {{77F665FD-3F60-4B0A-AE14-EC124B7A7FCE} - c:\program files (x86)\ICQ7.7\ICQ.exe
TCP: DhcpNameServer = 94.74.192.252 94.74.192.244
.
- - - - NEPLATNÉ POLOŽKY ODSTRANĚNÉ Z REGISTRU - - - -
.
Wow6432Node-HKCU-Run-RESTART_STICKY_NOTES - c:\windows\System32\StikyNot.exe
HKLM_Wow6432Node-ActiveSetup-{2D46B6DC-2207-486B-B523-A557E6D54B47} - start
Toolbar-Locked - (no file)
HKLM-Run-SynTPEnh - c:\program files (x86)\Synaptics\SynTP\SynTPEnh.exe
AddRemove-Activision_CTP2UninstallKey - c:\progra~2\ACTIVI~1\CALLTO~1\UNINST~1\UNINST~1.EXE
AddRemove-Adobe Shockwave Player - c:\windows\system32\Adobe\Shockwave 11\uninstaller.exe
AddRemove-ChatZum Toolbar - c:\program files (x86)\ChatZum Toolbar\tbunsnCD7.tmp\uninstaller.exe
AddRemove-ICQToolbar - c:\program files (x86)\ICQ6Toolbar\ICQUnToolbar.exe
AddRemove-{2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files (x86)\Google\Google Toolbar\Component\GoogleToolbarManager_A0AC09CE5247ECEF.exe
AddRemove-{79A765E1-C399-405B-85AF-466F52E918B0} - c:\program files (x86)\Ask.com\Updater\Updater.exe
.
.
.
--------------------- ZAMKNUTÉ KLÍČE V REGISTRU ---------------------
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\windows\\system32\\Macromed\\Flash\\FlashUtil64_11_6_602_180_ActiveX.exe,-101"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\Elevation]
"Enabled"=dword:00000001
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\LocalServer32]
@="c:\\windows\\system32\\Macromed\\Flash\\FlashUtil64_11_6_602_180_ActiveX.exe"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="IFlashBroker5"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\windows\\SysWOW64\\Macromed\\Flash\\FlashUtil32_11_6_602_180_ActiveX.exe,-101"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\Elevation]
"Enabled"=dword:00000001
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\LocalServer32]
@="c:\\windows\\SysWOW64\\Macromed\\Flash\\FlashUtil32_11_6_602_180_ActiveX.exe"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@="Shockwave Flash Object"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\InprocServer32]
@="c:\\windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_6_602_180.ocx"
"ThreadingModel"="Apartment"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\MiscStatus]
@="0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ProgID]
@="ShockwaveFlash.ShockwaveFlash.11"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
@="c:\\windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_6_602_180.ocx, 1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\TypeLib]
@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\Version]
@="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
@="ShockwaveFlash.ShockwaveFlash"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@="Macromedia Flash Factory Object"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\InprocServer32]
@="c:\\windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_6_602_180.ocx"
"ThreadingModel"="Apartment"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ProgID]
@="FlashFactory.FlashFactory.1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
@="c:\\windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_6_602_180.ocx, 1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\TypeLib]
@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\Version]
@="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
@="FlashFactory.FlashFactory"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="IFlashBroker5"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\McAfee]
"SymbolicLinkValue"=hex(6):5c,00,72,00,65,00,67,00,69,00,73,00,74,00,72,00,79,
00,5c,00,6d,00,61,00,63,00,68,00,69,00,6e,00,65,00,5c,00,53,00,6f,00,66,00,\
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0000\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0001\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0002\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\PCW\Security]
@Denied: (Full) (Everyone)
.
Celkový čas: 2013-11-16 22:11:21
ComboFix-quarantined-files.txt 2013-11-16 21:11
.
Před spuštěním: Volných bajtů: 206 939 607 040
Po spuštění: Volných bajtů: 207 453 356 032
.
- - End Of File - - 4E196D32073C120FE8A5486CDC857012

[dpokorna5]

Kontrola ComboFixem proběhla bez problémů a zatím teda žádné viditelné problémy nejsou ani v normálním režimu. Ještě se zkusím podívat na Guesta, jestli je pryč ten vir.

EDIT: Tak ten vir je pryč. Vážně děkuji ani nevíte, jak moc

Ještě se ale radši koukněte na ten log.. jinak teda viditelně je vše v pořádku, snad kromě toho oprávnění, co mě tu pořád straší a nevím, co s tím mám dělat. Opět se mi při startu objevila instalace aktualizace Adobe Flash Player, dala jsem instalovat a zase akorát proběhla instalace a pak mi vyskočila hláška o tom, že nemám oprávnění a aktualizace se nenainstalovala. Tenhle problém se zákazem oprávnění přetrvává a tipuju, že to nebude jen u Adobe Flash Playeru ale jinak je to ok

[stell]

1:Naloguj sa do uctu admina.
2;Odinstaluj spyware terminatora, mas tam predsa defendera.

3:Stiahni na plochu subor oprava.bat,
Link
http://leteckaposta.co/file/796206111.1 ... d7c74c5/cs
Pravy klik a spust ako administrator, pockaj kym cierne okno nezmizne.

4:Stiahni na plochu, tam kde mas ikonku combofixu, CFScript.txt
http://leteckaposta.co/file/992531785.1 ... 0c5192c/cs
Uchop myskou, a vloz do ikonky combofixu, tak ako je v navode,

novy log Combofixu vloz sem.

[dpokorna5]

Tak to nejde To oprava.bat jsem pustila jen v nouzovym režimu (resp. v nouzovym se sítí), protože mi v normálním režimu zase vyskočila hláška o oprávnění. Okno se ale bohužel neukončilo samo a naskočilo tam jen:

C:\Users\Denisa\Desktop>echo off
Úspěch: Vlastníkem souboru <nebo složky> C:\Users\Denisa\AppData\Local\temp je nyní uživatel Denisa-PC\Denisa.
Neplatný parametr \G
Neplatný parametr \G
C:\Users\Denisa\AppData\Local\Temp\*.*. Jste si jisti? <A/N>

Asi bych se odsud nehla, protože opravdu nevím, co s tím, tak jsem to radši ukončila přes procesy ve Správci úloh.

A s tim Spywarem, to vadí, že tam mám oba? Mně totiž přijde, že Defender nedělá vůbec nic :/

[stell]

Odinstaluj terminatora, je to zbytocne ako hadovi nohy,
ok, takze zostan v ucte admina, zmaz z plochy subor oprava.bat.
Stiahni novy subor oprava.bat
http://leteckaposta.cz/949571295
Pravy klik a spust ako admin.
Ked dostanes hlasku:
C:\Users\Denisa\AppData\Local\Temp\*.*. Jste si jisti? <A/N>
Zatlacis klaves A>>potom enter.
ak budes mat log vloz sem, a potom pokracuj combofixom.

[dpokorna5]

Nepochopila jsem moc to s logem po opravě.bat, protože z toho jsem žádnej nedostala, ale udělala jsem to, co jste radil v předchozím příspěvku, akorát jsem teda smazala tu opravu.bat a stáhla tu z druhého odkazu, co jste poslal. Během kontroly mi vyskočilo nějaký varování a PC se restartoval. Najela jsem do normálního režimu a do admin. účtu s heslem. V Combofixu se objevilo: Přístup odepřen, ale pak to napsalo, že nemám zapínat programy a mám počkat na log, tak jsem počkala a dokončilo se to. Ikonky programů, ke kterým jsem neměla přístup, se změnily. Předtím na nich byl štítek a teď už ne, tak snad by to mohlo být v pořádku , jen mi teď nějak nejde u touchpadu posuvník

Tady je ten log z Combofixu:

ComboFix 13-11-16.01 - Denisa 17.11.2013 20:14:48.2.2 - x64 NETWORK
Microsoft Windows 7 Home Premium 6.1.7601.1.1250.420.1029.18.4040.3270 [GMT 1:00]
Spuštěný z: c:\users\Denisa\Desktop\ComboFix.exe
Použité ovládací přepínače :: c:\users\Denisa\Desktop\CFScript.txt
AV: Avira Desktop *Enabled/Updated* {F67B4DE5-C0B4-6C3F-0EFF-6C83BD5D0C2C}
FW: Privatefirewall *Disabled* {ADE53067-43C2-2B76-05F6-A92000CC501A}
SP: Avira Desktop *Enabled/Updated* {4D1AAC01-E68E-63B1-344F-57F1C6DA4691}
SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
* Vytvořen nový Bod Obnovení
.
FILE ::
"c:\programdata\al1brr.reg"
"c:\windows\Tasks\Norton Security Scan for Denisa.job"
.
.
((((((((((((((((((((((((((((((((((((((( Ostatní výmazy )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
c:\programdata\al1brr.reg
c:\windows\Tasks\Norton Security Scan for Denisa.job
.
.
((((((((((((((((((((((((((((((((((((((( Ovladače/Služby )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
-------\Legacy_68187307
.
.
((((((((((((((((((((((((( Soubory vytvořené od 2013-10-17 do 2013-11-17 )))))))))))))))))))))))))))))))
.
.
2013-11-17 19:23 . 2013-11-17 19:23 -------- d-----w- c:\users\Guest\AppData\Local\temp
2013-11-16 18:37 . 2013-11-16 18:37 -------- d-----w- C:\FRST
2013-11-16 15:15 . 2013-10-14 07:12 10280728 ----a-w- c:\programdata\Microsoft\Windows Defender\Definition Updates\{0AEC9871-2AA2-4FC4-B17F-2AB010BB18BE}\mpengine.dll
2013-11-13 18:56 . 2013-10-05 20:25 1474048 ----a-w- c:\windows\system32\crypt32.dll
2013-11-13 18:56 . 2013-10-05 19:57 1168384 ----a-w- c:\windows\SysWow64\crypt32.dll
2013-11-13 18:55 . 2013-09-28 01:09 497152 ----a-w- c:\windows\system32\drivers\afd.sys
2013-11-13 18:55 . 2013-10-04 02:28 190464 ----a-w- c:\windows\system32\SmartcardCredentialProvider.dll
2013-11-13 18:55 . 2013-10-04 02:25 197120 ----a-w- c:\windows\system32\credui.dll
2013-11-13 18:55 . 2013-10-04 02:24 1930752 ----a-w- c:\windows\system32\authui.dll
2013-11-13 18:55 . 2013-10-04 01:58 152576 ----a-w- c:\windows\SysWow64\SmartcardCredentialProvider.dll
2013-11-13 18:55 . 2013-10-04 01:56 168960 ----a-w- c:\windows\SysWow64\credui.dll
2013-11-13 18:55 . 2013-10-04 01:56 1796096 ----a-w- c:\windows\SysWow64\authui.dll
2013-11-13 18:53 . 2013-10-03 02:23 404480 ----a-w- c:\windows\system32\gdi32.dll
2013-11-13 18:53 . 2013-10-03 02:00 311808 ----a-w- c:\windows\SysWow64\gdi32.dll
2013-11-13 18:53 . 2013-10-12 02:30 830464 ----a-w- c:\windows\system32\nshwfp.dll
2013-11-13 18:53 . 2013-10-12 02:29 859648 ----a-w- c:\windows\system32\IKEEXT.DLL
2013-11-13 18:53 . 2013-10-12 02:29 324096 ----a-w- c:\windows\system32\FWPUCLNT.DLL
2013-11-13 18:53 . 2013-10-12 02:03 656896 ----a-w- c:\windows\SysWow64\nshwfp.dll
2013-11-13 18:53 . 2013-10-12 02:01 216576 ----a-w- c:\windows\SysWow64\FWPUCLNT.DLL
.
.
.
(((((((((((((((((((((((((((((((((((((((( Find3M výpis ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2013-11-14 02:01 . 2012-02-11 14:11 82896128 ----a-w- c:\windows\system32\MRT.exe
2013-11-10 14:36 . 2012-06-28 16:15 22240 ----a-w- c:\programdata\Microsoft\IdentityCRL\production\ppcrlconfig600.dll
2013-10-14 01:04 . 2013-10-14 01:04 226304 ----a-w- c:\windows\system32\elshyph.dll
2013-10-14 01:04 . 2013-10-14 01:04 185344 ----a-w- c:\windows\SysWow64\elshyph.dll
2013-10-14 01:04 . 2013-10-14 01:04 1054720 ----a-w- c:\windows\system32\MsSpellCheckingFacility.exe
2013-10-14 01:04 . 2013-10-14 01:04 719360 ----a-w- c:\windows\SysWow64\mshtmlmedia.dll
2013-10-14 01:04 . 2013-10-14 01:04 523264 ----a-w- c:\windows\SysWow64\vbscript.dll
2013-10-14 01:04 . 2013-10-14 01:04 158720 ----a-w- c:\windows\SysWow64\msls31.dll
2013-10-14 01:04 . 2013-10-14 01:04 150528 ----a-w- c:\windows\SysWow64\iexpress.exe
2013-10-14 01:04 . 2013-10-14 01:04 138752 ----a-w- c:\windows\SysWow64\wextract.exe
2013-10-14 01:04 . 2013-10-14 01:04 73728 ----a-w- c:\windows\SysWow64\SetIEInstalledDate.exe
2013-10-14 01:04 . 2013-10-14 01:04 48640 ----a-w- c:\windows\SysWow64\mshtmler.dll
2013-10-14 01:04 . 2013-10-14 01:04 38400 ----a-w- c:\windows\SysWow64\imgutil.dll
2013-10-14 01:04 . 2013-10-14 01:04 137216 ----a-w- c:\windows\SysWow64\ieUnatt.exe
2013-10-14 01:04 . 2013-10-14 01:04 12800 ----a-w- c:\windows\SysWow64\mshta.exe
2013-10-14 01:04 . 2013-10-14 01:04 110592 ----a-w- c:\windows\SysWow64\IEAdvpack.dll
2013-10-14 01:04 . 2013-10-14 01:04 61952 ----a-w- c:\windows\SysWow64\tdc.ocx
2013-10-14 01:04 . 2013-10-14 01:04 361984 ----a-w- c:\windows\SysWow64\html.iec
2013-10-14 01:04 . 2013-10-14 01:04 23040 ----a-w- c:\windows\SysWow64\licmgr10.dll
2013-10-14 01:04 . 2013-10-14 01:04 1441280 ----a-w- c:\windows\SysWow64\inetcpl.cpl
2013-10-14 01:04 . 2013-10-14 01:04 216064 ----a-w- c:\windows\system32\msls31.dll
2013-10-14 01:04 . 2013-10-14 01:04 197120 ----a-w- c:\windows\system32\msrating.dll
2013-10-14 01:04 . 2013-10-14 01:04 97280 ----a-w- c:\windows\system32\mshtmled.dll
2013-10-14 01:04 . 2013-10-14 01:04 905728 ----a-w- c:\windows\system32\mshtmlmedia.dll
2013-10-14 01:04 . 2013-10-14 01:04 81408 ----a-w- c:\windows\system32\icardie.dll
2013-10-14 01:04 . 2013-10-14 01:04 762368 ----a-w- c:\windows\system32\ieapfltr.dll
2013-10-14 01:04 . 2013-10-14 01:04 452096 ----a-w- c:\windows\system32\dxtmsft.dll
2013-10-14 01:04 . 2013-10-14 01:04 441856 ----a-w- c:\windows\system32\html.iec
2013-10-14 01:04 . 2013-10-14 01:04 281600 ----a-w- c:\windows\system32\dxtrans.dll
2013-10-14 01:04 . 2013-10-14 01:04 27648 ----a-w- c:\windows\system32\licmgr10.dll
2013-10-14 01:04 . 2013-10-14 01:04 270848 ----a-w- c:\windows\system32\iedkcs32.dll
2013-10-14 01:04 . 2013-10-14 01:04 247296 ----a-w- c:\windows\system32\webcheck.dll
2013-10-14 01:04 . 2013-10-14 01:04 235008 ----a-w- c:\windows\system32\url.dll
2013-10-14 01:04 . 2013-10-14 01:04 1509376 ----a-w- c:\windows\system32\inetcpl.cpl
2013-10-14 01:04 . 2013-10-14 01:04 1400416 ----a-w- c:\windows\system32\ieapfltr.dat
2013-10-14 01:04 . 2013-10-14 01:04 102912 ----a-w- c:\windows\system32\inseng.dll
2013-10-14 01:04 . 2013-10-14 01:04 92160 ----a-w- c:\windows\system32\SetIEInstalledDate.exe
2013-10-14 01:04 . 2013-10-14 01:04 62976 ----a-w- c:\windows\system32\pngfilt.dll
2013-10-14 01:04 . 2013-10-14 01:04 599552 ----a-w- c:\windows\system32\vbscript.dll
2013-10-14 01:04 . 2013-10-14 01:04 52224 ----a-w- c:\windows\system32\msfeedsbs.dll
2013-10-14 01:04 . 2013-10-14 01:04 51200 ----a-w- c:\windows\system32\imgutil.dll
2013-10-14 01:04 . 2013-10-14 01:04 48640 ----a-w- c:\windows\system32\mshtmler.dll
2013-10-14 01:04 . 2013-10-14 01:04 173568 ----a-w- c:\windows\system32\ieUnatt.exe
2013-10-14 01:04 . 2013-10-14 01:04 167424 ----a-w- c:\windows\system32\iexpress.exe
2013-10-14 01:04 . 2013-10-14 01:04 149504 ----a-w- c:\windows\system32\occache.dll
2013-10-14 01:04 . 2013-10-14 01:04 144896 ----a-w- c:\windows\system32\wextract.exe
2013-10-14 01:04 . 2013-10-14 01:04 13824 ----a-w- c:\windows\system32\mshta.exe
2013-10-14 01:04 . 2013-10-14 01:04 136192 ----a-w- c:\windows\system32\iepeers.dll
2013-10-14 01:04 . 2013-10-14 01:04 135680 ----a-w- c:\windows\system32\IEAdvpack.dll
2013-10-14 01:04 . 2013-10-14 01:04 12800 ----a-w- c:\windows\system32\msfeedssync.exe
2013-10-14 01:04 . 2013-10-14 01:04 77312 ----a-w- c:\windows\system32\tdc.ocx
2013-09-25 02:22 . 2013-11-13 18:54 340992 ----a-w- c:\windows\system32\schannel.dll
2013-09-25 01:57 . 2013-11-13 18:54 247808 ----a-w- c:\windows\SysWow64\schannel.dll
2013-09-08 02:30 . 2013-10-10 22:33 1903552 ----a-w- c:\windows\system32\drivers\tcpip.sys
2013-09-08 02:27 . 2013-10-10 22:33 327168 ----a-w- c:\windows\system32\mswsock.dll
2013-09-08 02:03 . 2013-10-10 22:33 231424 ----a-w- c:\windows\SysWow64\mswsock.dll
2013-09-04 09:26 . 2013-04-01 19:24 105344 ----a-w- c:\windows\system32\drivers\avgntflt.sys
2013-09-03 12:35 . 2010-11-21 03:27 278800 ------w- c:\windows\system32\MpSigStub.exe
2013-08-29 21:19 . 2013-05-06 09:53 81112 ----a-w- c:\windows\system32\drivers\avnetflt.sys
2013-08-29 21:19 . 2013-04-01 19:24 132088 ----a-w- c:\windows\system32\drivers\avipbb.sys
2013-08-29 02:17 . 2013-10-10 22:32 5549504 ----a-w- c:\windows\system32\ntoskrnl.exe
2013-08-29 02:16 . 2013-10-10 22:32 1732032 ----a-w- c:\windows\system32\ntdll.dll
2013-08-29 02:16 . 2013-10-10 22:32 243712 ----a-w- c:\windows\system32\wow64.dll
2013-08-29 02:16 . 2013-10-10 22:32 859648 ----a-w- c:\windows\system32\tdh.dll
2013-08-29 02:13 . 2013-10-10 22:32 878080 ----a-w- c:\windows\system32\advapi32.dll
2013-08-29 01:51 . 2013-10-10 22:32 3969472 ----a-w- c:\windows\SysWow64\ntkrnlpa.exe
2013-08-29 01:51 . 2013-10-10 22:32 3914176 ----a-w- c:\windows\SysWow64\ntoskrnl.exe
2013-08-29 01:50 . 2013-10-10 22:32 5120 ----a-w- c:\windows\SysWow64\wow32.dll
2013-08-29 01:50 . 2013-10-10 22:32 1292192 ----a-w- c:\windows\SysWow64\ntdll.dll
2013-08-29 01:50 . 2013-10-10 22:32 619520 ----a-w- c:\windows\SysWow64\tdh.dll
2013-08-29 01:48 . 2013-10-10 22:32 640512 ----a-w- c:\windows\SysWow64\advapi32.dll
2013-08-29 01:48 . 2013-10-10 22:32 44032 ----a-w- c:\windows\apppatch\acwow64.dll
2013-08-29 00:49 . 2013-10-10 22:32 25600 ----a-w- c:\windows\SysWow64\setup16.exe
2013-08-29 00:49 . 2013-10-10 22:32 7680 ----a-w- c:\windows\SysWow64\instnm.exe
2013-08-29 00:49 . 2013-10-10 22:32 14336 ----a-w- c:\windows\SysWow64\ntvdm64.dll
2013-08-29 00:49 . 2013-10-10 22:32 2048 ----a-w- c:\windows\SysWow64\user.exe
2013-08-28 01:21 . 2013-10-10 22:33 3155968 ----a-w- c:\windows\system32\win32k.sys
2013-08-28 01:12 . 2013-10-10 22:30 461312 ----a-w- c:\windows\system32\scavengeui.dll
2003-04-22 11:39 . 2003-04-22 11:39 2719744 ------w- c:\program files (x86)\aiodrv.msi
2003-04-22 11:34 . 2003-04-22 11:34 2605056 ------w- c:\program files (x86)\aiosw.msi
2003-03-09 19:30 . 2003-03-09 19:30 184320 ----a-w- c:\program files (x86)\hpzscr07.dll
2003-03-09 19:30 . 2003-03-09 19:30 16352 ----a-w- c:\program files (x86)\HPZUCI12.DLL
2003-03-09 19:30 . 2003-03-09 19:30 274432 ----a-w- c:\program files (x86)\hpzglu07.exe
2003-03-09 19:30 . 2003-03-09 19:30 237568 ----a-w- c:\program files (x86)\hpzc3212.dll
2002-09-09 16:48 . 2002-09-09 16:48 22608 ----a-w- c:\program files (x86)\usbprint.sys
2002-09-09 16:48 . 2002-09-09 16:48 12288 ----a-w- c:\program files (x86)\usbmon.dll
2002-09-09 16:48 . 2002-09-09 16:48 458752 ----a-w- c:\program files (x86)\tls704d.dll
2002-09-09 16:47 . 2002-09-09 16:47 254005 ----a-w- c:\program files (x86)\msvcrt.dll
2002-09-09 16:47 . 2002-09-09 16:47 70656 ----a-w- c:\program files (x86)\msvcirt.dll
2002-09-09 16:47 . 2002-09-09 16:47 212992 ----a-w- c:\program files (x86)\hpzpnp07.dll
2002-09-09 16:46 . 2002-09-09 16:46 49212 ----a-w- c:\program files (x86)\hpzjvp01.dll
2002-09-09 16:46 . 2002-09-09 16:46 249913 ----a-w- c:\program files (x86)\hpzjut01.dll
2002-09-09 16:46 . 2002-09-09 16:46 417849 ----a-w- c:\program files (x86)\hpzjpp01.dll
2002-09-09 16:46 . 2002-09-09 16:46 28722 ----a-w- c:\program files (x86)\hpzjlog.dll
2002-09-06 08:54 . 2002-09-06 08:54 995383 ----a-w- c:\program files (x86)\MFC42.DLL
.
.
(((((((((((((((((((((((((((((((((( Spouštěcí body v registru )))))))))))))))))))))))))))))))))))))))))))))
.
.
*Poznámka* prázdné záznamy a legitimní výchozí údaje nejsou zobrazeny.
REGEDIT4
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]
"IAStorIcon"="c:\program files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe" [2011-02-18 283160]
"StartCCC"="c:\program files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" [2011-03-24 336384]
"331BigDog"="c:\program files (x86)\USB Camera\VM331_STI.EXE" [2011-06-15 548864]
"UpdateP2GShortCut"="c:\program files (x86)\Lenovo\Power2Go\MUITransfer\MUIStartMenu.exe" [2010-07-26 222504]
"YouCam Mirage"="c:\program files (x86)\Lenovo\YouCam\YCMMirage.exe" [2011-01-28 136488]
"YouCam Tray"="c:\program files (x86)\Lenovo\YouCam\YouCam.exe" [2011-01-28 228448]
"VeriFaceManager"="c:\program files (x86)\Lenovo\VeriFace\PManage.exe" [2011-09-04 329056]
"UpdatePRCShortCut"="c:\program files\Lenovo\OneKey App\OneKey Recovery\MUITransfer\MUIStartMenu.exe" [2009-05-13 222504]
"Guard.Mail.ru.gui"="c:\program files (x86)\Guard-ICQ\GuardICQ.exe" [2012-01-16 1564368]
"Privatefirewall"="c:\program files (x86)\Privacyware\Privatefirewall 7.0\PFGUI.exe" [2011-10-21 3065568]
"avgnt"="c:\program files (x86)\Avira\AntiVir Desktop\avgnt.exe" [2013-08-29 347192]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorAdmin"= 5 (0x5)
"ConsentPromptBehaviorUser"= 3 (0x3)
"EnableUIADesktopToggle"= 0 (0x0)
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon]
"Userinit"="userinit.exe"
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\drivers32]
"aux1"=wdmaud.drv
.
R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [x]
R2 SkypeUpdate;Skype Updater;c:\program files (x86)\Skype\Updater\Updater.exe;c:\program files (x86)\Skype\Updater\Updater.exe [x]
R3 RSUSBVSTOR;RtsUVStor.Sys Realtek USB Card Reader;c:\windows\system32\Drivers\RtsUVStor.sys;c:\windows\SYSNATIVE\Drivers\RtsUVStor.sys [x]
R3 RTL8167;Realtek 8167 NT Driver;c:\windows\system32\DRIVERS\Rt64win7.sys;c:\windows\SYSNATIVE\DRIVERS\Rt64win7.sys [x]
R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys;c:\windows\SYSNATIVE\drivers\tsusbflt.sys [x]
R3 TsUsbGD;Remote Desktop Generic USB Device;c:\windows\system32\drivers\TsUsbGD.sys;c:\windows\SYSNATIVE\drivers\TsUsbGD.sys [x]
R3 WatAdminSvc;Služba Technologie aktivace Windows;c:\windows\system32\Wat\WatAdminSvc.exe;c:\windows\SYSNATIVE\Wat\WatAdminSvc.exe [x]
R3 wsvd;wsvd;c:\windows\system32\DRIVERS\wsvd.sys;c:\windows\SYSNATIVE\DRIVERS\wsvd.sys [x]
R4 wlcrasvc;Windows Live Mesh remote connections service;c:\program files\Windows Live\Mesh\wlcrasvc.exe;c:\program files\Windows Live\Mesh\wlcrasvc.exe [x]
S0 fbfmon;fbfmon;c:\windows\system32\drivers\fbfmon.sys;c:\windows\SYSNATIVE\drivers\fbfmon.sys [x]
S0 LHDmgr;LHDmgr;c:\windows\System32\DRIVERS\LhdX64.sys;c:\windows\SYSNATIVE\DRIVERS\LhdX64.sys [x]
S1 avkmgr;avkmgr;c:\windows\system32\DRIVERS\avkmgr.sys;c:\windows\SYSNATIVE\DRIVERS\avkmgr.sys [x]
S1 BPntDrv;BPntDrv;c:\windows\system32\drivers\BPntDrv.sys;c:\windows\SYSNATIVE\drivers\BPntDrv.sys [x]
S1 pwipf6;Privacyware Filter Driver;c:\windows\system32\DRIVERS\pwipf6.sys;c:\windows\SYSNATIVE\DRIVERS\pwipf6.sys [x]
S2 AMD External Events Utility;AMD External Events Utility;c:\windows\system32\atiesrxx.exe;c:\windows\SYSNATIVE\atiesrxx.exe [x]
S2 AntiVirSchedulerService;Avira Scheduler;c:\program files (x86)\Avira\AntiVir Desktop\sched.exe;c:\program files (x86)\Avira\AntiVir Desktop\sched.exe [x]
S2 Guard.Mail.ru;Guard.Mail.ru;c:\program files (x86)\Guard-ICQ\GuardICQ.exe;c:\program files (x86)\Guard-ICQ\GuardICQ.exe [x]
S2 IAStorDataMgrSvc;Intel(R) Rapid Storage Technology;c:\program files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe;c:\program files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe [x]
S2 PFNet;Privacyware network service;c:\program files (x86)\Privacyware\Privatefirewall 7.0\pfsvc.exe;c:\program files (x86)\Privacyware\Privatefirewall 7.0\pfsvc.exe [x]
S2 UNS;Intel(R) Management and Security Application User Notification Service;c:\program files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe;c:\program files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe [x]
S3 ACPIVPC;Lenovo Virtual Power Controller Driver;c:\windows\system32\DRIVERS\AcpiVpc.sys;c:\windows\SYSNATIVE\DRIVERS\AcpiVpc.sys [x]
S3 clwvd;CyberLink WebCam Virtual Driver;c:\windows\system32\DRIVERS\clwvd.sys;c:\windows\SYSNATIVE\DRIVERS\clwvd.sys [x]
S3 IntcDAud;Intel(R) Display Audio;c:\windows\system32\DRIVERS\IntcDAud.sys;c:\windows\SYSNATIVE\DRIVERS\IntcDAud.sys [x]
S3 intelkmd;intelkmd;c:\windows\system32\DRIVERS\igdpmd64.sys;c:\windows\SYSNATIVE\DRIVERS\igdpmd64.sys [x]
S3 L1C;NDIS Miniport Driver for Atheros AR813x/AR815x PCI-E Ethernet Controller;c:\windows\system32\DRIVERS\L1C62x64.sys;c:\windows\SYSNATIVE\DRIVERS\L1C62x64.sys [x]
S3 vm331avs;Digital Camera 1;c:\windows\system32\Drivers\vm331avs.sys;c:\windows\SYSNATIVE\Drivers\vm331avs.sys [x]
S3 vmuvcflt;Vimicro USB Camera Filter;c:\windows\system32\Drivers\vmuvcflt.sys;c:\windows\SYSNATIVE\Drivers\vmuvcflt.sys [x]
.
.
.
--------- X64 Entries -----------
.
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\VeriFace Enc]
@="{771C7324-DA80-49D3-8017-753B0AF60951}"
[HKEY_CLASSES_ROOT\CLSID\{771C7324-DA80-49D3-8017-753B0AF60951}]
2011-09-04 13:15 1508192 ----a-w- c:\windows\System32\IcnOvrly.dll
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"IgfxTray"="c:\windows\system32\igfxtray.exe" [2011-03-25 167960]
"HotKeysCmds"="c:\windows\system32\hkcmd.exe" [2011-03-25 391704]
"Persistence"="c:\windows\system32\igfxpers.exe" [2011-03-25 418840]
"SynTPEnh"="c:\program files (x86)\Synaptics\SynTP\SynTPEnh.exe" [BU]
"Lenovo EE Boot Optimizer"="c:\program files (x86)\Lenovo\Boot Optimizer\PopWnd.exe" [2011-09-04 114688]
"Energy Management"="c:\program files (x86)\Lenovo\Energy Management\Energy Management.exe" [2011-09-04 9753024]
"EnergyUtility"="c:\program files (x86)\Lenovo\Energy Management\Utility.exe" [2011-09-04 5908928]
.
------- Doplňkový sken -------
.
uLocal Page = c:\windows\system32\blank.htm
mLocal Page = c:\windows\SysWOW64\blank.htm
IE: {{77F665FD-3F60-4B0A-AE14-EC124B7A7FCE} - c:\program files (x86)\ICQ7.7\ICQ.exe
TCP: DhcpNameServer = 94.74.192.252 94.74.192.244
.
- - - - NEPLATNÉ POLOŽKY ODSTRANĚNÉ Z REGISTRU - - - -
.
Toolbar-Locked - (no file)
HKLM-Run-SpywareTerminatorShield - c:\program files (x86)\Spyware Terminator\SpywareTerminatorShield.exe
AddRemove-Activision_CTP2UninstallKey - c:\progra~2\ACTIVI~1\CALLTO~1\UNINST~1\UNINST~1.EXE
AddRemove-Adobe Shockwave Player - c:\windows\system32\Adobe\Shockwave 11\uninstaller.exe
AddRemove-ChatZum Toolbar - c:\program files (x86)\ChatZum Toolbar\tbunsnCD7.tmp\uninstaller.exe
AddRemove-ICQToolbar - c:\program files (x86)\ICQ6Toolbar\ICQUnToolbar.exe
AddRemove-{2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files (x86)\Google\Google Toolbar\Component\GoogleToolbarManager_A0AC09CE5247ECEF.exe
.
.
.
--------------------- ZAMKNUTÉ KLÍČE V REGISTRU ---------------------
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\windows\\system32\\Macromed\\Flash\\FlashUtil64_11_6_602_180_ActiveX.exe,-101"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\Elevation]
"Enabled"=dword:00000001
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\LocalServer32]
@="c:\\windows\\system32\\Macromed\\Flash\\FlashUtil64_11_6_602_180_ActiveX.exe"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="IFlashBroker5"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\windows\\SysWOW64\\Macromed\\Flash\\FlashUtil32_11_6_602_180_ActiveX.exe,-101"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\Elevation]
"Enabled"=dword:00000001
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\LocalServer32]
@="c:\\windows\\SysWOW64\\Macromed\\Flash\\FlashUtil32_11_6_602_180_ActiveX.exe"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@="Shockwave Flash Object"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\InprocServer32]
@="c:\\windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_6_602_180.ocx"
"ThreadingModel"="Apartment"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\MiscStatus]
@="0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ProgID]
@="ShockwaveFlash.ShockwaveFlash.11"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
@="c:\\windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_6_602_180.ocx, 1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\TypeLib]
@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\Version]
@="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
@="ShockwaveFlash.ShockwaveFlash"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@="Macromedia Flash Factory Object"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\InprocServer32]
@="c:\\windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_6_602_180.ocx"
"ThreadingModel"="Apartment"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ProgID]
@="FlashFactory.FlashFactory.1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
@="c:\\windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_6_602_180.ocx, 1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\TypeLib]
@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\Version]
@="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
@="FlashFactory.FlashFactory"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="IFlashBroker5"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\McAfee]
"SymbolicLinkValue"=hex(6):5c,00,72,00,65,00,67,00,69,00,73,00,74,00,72,00,79,
00,5c,00,6d,00,61,00,63,00,68,00,69,00,6e,00,65,00,5c,00,53,00,6f,00,66,00,\
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\PCW\Security]
@Denied: (Full) (Everyone)
.
------------------------ Jiné spuštené procesy ------------------------
.
c:\program files (x86)\Avira\AntiVir Desktop\avguard.exe
c:\program files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
.
**************************************************************************
.
Celkový čas: 2013-11-17 20:32:02 - počítač byl restartován
ComboFix-quarantined-files.txt 2013-11-17 19:32
ComboFix2.txt 2013-11-16 21:11
.
Před spuštěním: Volných bajtů: 208 036 159 488
Po spuštění: Volných bajtů: 207 335 702 528
.
- - End Of File - - 0689D3D4F00BBB9A9A8D7ED827AFB62D

[stell]

jen mi teď nějak nejde u touchpadu posuvník

no log uz vyzera dobre, no zmazal som este jeden ovladac, pretoze nepoznam a aj google mlci.
68187307

1:Skus vypnut pocitac, pockaj chvilku a zapni, vyskusaj aj ucet Guest, a napis, ak nebude fungovat u touchpadu posuvník
tak ovladac namontujeme nazad.tak zisti to vsetko, a napis problemy.

[stell]

No Deniska, ja dnes koncim, ak budu, tak napis sem problemy s Pc, a napis kedy tu budes, ja sa prisposobim, ale cez den, nie v noci, ok.

[dpokorna5]

Jú, tak už to funguje
Teda obdivuju Vás, jak se v těch lozích (doufám že to neskloňuju blbě ) tak skvěle a rychle vyznáte. Je to vážně obdivuhodný! Děkuji mockrát

Jenom mám ještě nějaký otázky
Je ještě něco třeba udělat?
Co s těmi programy apod. na čištění teď? Mám to nechat v PC, nebo se to musí smazat - příp. jak?

[stell]

1:Odinstaluj combofix
Pravy klik na ikonku combofixu a Premenuj na uninstall
Spust,odklikaj to,ok,ok,ok,,, combofix sa odinstaluje z pocitaca.
2:Logy a programy co sme pouzili tak zmaz z plochy.
3:podla tohto mojho navodu,stiahni spust ADWCLEANER>.SCAN a potom Clean.
http://www.viruskasino.com/2012/09/adwcleaner.html
4:Pouzi TFCleaner
http://www.viruskasino.com/2010/12/prog ... TF-Cleaner
5:Odstránenie všetkých bodov obnovenia
Navod
http://windows.microsoft.com/sk-SK/wind ... tore-point

Restartuj pocitac.
Odskusaj pocitac, ak vsetko bude fungovat korektne tak to je vsetko.
Nemas zaco.

[dpokorna5]

Že není zaco? (Vím, že se to jen tak říká, ale stejně si neodpustím malý komentář.) Já bych věděla - třeba za přímo svatou trpělivost se mnou a za čas strávený nad řešením mýho zavirovanýho apod. PC, který se pořád všema způsobama brání vyčištění

Jak už jsem naznačila předchozí větou, tak to bohužel nejde Říká se, že člověk se nikdy nemá radovat předčasně a já to tak nějak porušila, protože jsem se nemohla dočkat, až dodělám ten kousek, co zbývá Musim říct, že mě to podle Vašich návodů i celkem baví , ale dvakrát tomu jako laik nerozumím.

Takže sotva jsem stáhla AdwCleaner a TFCleaner, zase se mi u jejich ikon objevily modrožlutý štíty vpravo dole. Stejně tak u Combofixu po tom, co jsem ho přejmenovala. Takže po kliknutí na ikonku Combofixu s názvem uninstall.exe, mi to opět vyhazuje hlášku o oprávnění a dál mě to už nepustí, přestože jsem (tedy doufám) Správce PC, a tudíž bych měla mít i práva admina - nevím, proč nemám . V nouzovym režimu to jde, nechápu, co je tady za problém. Myslíte, že můžu vyloučit, že to dělá vir a i přesto provést smazání těch souborů v nouz. režimu? Ráda bych věděla, co ty zákazy způsobuje, ale nevím, jak to zjistit - existuje na to log? Brání mi to v instalacích, aktualizacích a kontrolách antivirem a spouštění programů, které stáhnu.

[stell]

V torom ucte to ri robi???
Pretoze >>

Účet Guest je účet pro uživatele, kteří nemají trvalý účet v počítači nebo doméně. Umožňuje lidem použít váš počítač, aniž by měli přístup k osobním souborům. Uživatelé používající účet Guest nemohou instalovat software ani hardware, nemohou změnit nastavení ani vytvořit heslo

Ak v ucte admina, tak napis kedy tu bufes a pokracujeme Dal.

[dpokorna5]

Je to samozřejmě u Administrátora. Vypadá to, že všechno, pro co je nutný oprávnění správce, mi v normálním režimu nejde. S Guestem bych se asi ani neobtěžovala a spouštěla to všechno jako správce zadáním hesla (tak to fungovalo, když to ještě šlo), ale teď nemá z neznámý příčiny práva ani jeden z účtů. Nejde ani Scan Avirou - resp. jde, ale jedině "Use smart extensions" a navíc s omezenými možnostmi (tzn. v "Additional settings" je stejně většina položek nezaškrtnutá a když je chci zaškrtnout, aby se taky prohledaly, tak mi po potvrzení na OK zase vyskočí to otravný okno s oprávněním)..

[stell]

Start>>do pola HLADAT>>napis regedit>>
spust editor registra>>preklikaj sa sem:
HKEY_LOCAL_MACHINE\SAM\SAM\Domains\Account\Users\000001F4
Klikni na zlozku 000001F4,
v pravej časti okna Pravy klik na položku F (REG_BINARY) a zvolíme možnosť Zmeniť.
Najdi riadok začínajúci 0038a napis sem ake je prve cislo-10-ci 11.

[dpokorna5]

Tak v normálním režimu mě to vůbec do Editoru registrů nepustí kvůli tý hlášce, ale zkusila jsem to v nouzovym (se sítí, odkud teď píšu, abych se nemusela pořád přehlašovat z nouz. do normál.) a dostala jsem se jen ke druhý složce SAM. Je tam jediný soubor, ale složka Domains nikde