Prosím o kontrolu logu z ComboFix

Máte problém s virem? Vložte sem log z FRST nebo RSIT.

Moderátor: Moderátoři

Pravidla fóra
Pokud chcete pomoc, vložte log z FRST [návod zde] nebo RSIT [návod zde]

Jednotlivé thready budou po vyřešení uzamčeny. Stejně tak ty, které budou nečinné déle než 14 dní. Vizte Pravidlo o zamykání témat. Děkujeme za pochopení.

!NOVINKA!
Nově lze využívat služby vzdálené pomoci, kdy se k vašemu počítači připojí odborník a bližší informace o problému si od vás získá telefonicky! Více na www.neslape.cz

Vážení uživaterlé!
Ve dnech 4. - 6-9.2026 budou někteříí naši členové na každoročním srazu fóra. Žádáme vás, abyste měli strpení, nemusí se na na řešení vašeho problému dostat hned. Děkujeme za pochopení.
Zamčeno
Zpráva
Autor
martafan
Návštěvník
Návštěvník
Příspěvky: 34
Registrován: 12 Ún 2014 19:44

Prosím o kontrolu logu z ComboFix

#1 Příspěvek od martafan »

ComboFix 14-02-12.01 - Owner 12.02.2014 18:57:33.4.4 - x64
Microsoft Windows 7 Home Premium 6.1.7601.1.1250.420.1029.18.6038.4070 [GMT 1:00]
Spuštěný z: c:\users\Owner\Desktop\ComboFix.exe
AV: ESET Smart Security 7.0 *Disabled/Updated* {19259FAE-8396-A113-46DB-15B0E7DFA289}
FW: ESET Personální firewall *Enabled* {211E1E8B-C9F9-A04B-6D84-BC85190CE5F2}
SP: ESET Smart Security 7.0 *Disabled/Updated* {A2447E4A-A5AC-AE9D-7C6B-2EC29C58E834}
SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.
.
((((((((((((((((((((((((( Soubory vytvořené od 2014-01-12 do 2014-02-12 )))))))))))))))))))))))))))))))
.
.
2014-02-12 18:10 . 2014-02-12 18:10 -------- d-----w- c:\users\UpdatusUser\AppData\Local\temp
2014-02-12 18:10 . 2014-02-12 18:10 -------- d-----w- c:\users\Martinek\AppData\Local\temp
2014-02-12 18:10 . 2014-02-12 18:10 -------- d-----w- c:\users\Default\AppData\Local\temp
2014-02-12 13:32 . 2013-12-21 09:53 548864 ----a-w- c:\windows\system32\vbscript.dll
2014-02-12 13:32 . 2013-12-21 08:56 454656 ----a-w- c:\windows\SysWow64\vbscript.dll
2014-02-12 12:41 . 2013-12-06 02:30 2048 ----a-w- c:\windows\system32\msxml3r.dll
2014-02-09 18:17 . 2014-02-09 18:17 -------- d-----w- c:\users\Owner\AppData\Roaming\KYE 7Key
2014-02-09 18:17 . 2014-02-09 18:17 -------- d-----w- c:\program files (x86)\Genius
2014-02-09 18:17 . 2014-02-09 18:17 1208831 ----a-w- c:\windows\unins000.exe
2014-02-02 08:48 . 2014-02-03 14:01 -------- d-----w- c:\users\hkqolbmwiyc
2014-02-01 16:36 . 2014-02-01 16:36 -------- d-----w- c:\users\Owner\AppData\Local\Rainbow
2014-01-31 16:15 . 2014-01-31 16:15 -------- d-----w- c:\program files\Microsoft.NET
2014-01-31 16:01 . 2014-01-31 16:01 -------- d-----w- c:\users\Default\AppData\Local\Microsoft Help
2014-01-30 20:01 . 2014-01-30 20:01 -------- d-----w- c:\program files (x86)\Microsoft Visual Studio 8
2014-01-30 19:53 . 2014-01-30 19:53 -------- d-----w- c:\users\Owner\AppData\Local\@ByELDI
2014-01-30 19:39 . 2014-01-30 19:39 -------- d-----w- c:\program files\Common Files\DESIGNER
2014-01-30 19:39 . 2014-01-30 19:39 -------- d-----w- c:\program files (x86)\Microsoft SQL Server
2014-01-30 19:38 . 2014-01-30 19:38 -------- d-----w- c:\programdata\regid.1991-06.com.microsoft
2014-01-30 19:38 . 2014-01-30 19:39 -------- d-----w- c:\program files\Microsoft SQL Server
2014-01-30 19:38 . 2014-01-30 19:38 -------- d-----w- c:\windows\PCHEALTH
2014-01-30 19:36 . 2014-01-30 19:36 -------- d-----w- c:\program files\Microsoft Analysis Services
2014-01-30 19:36 . 2014-01-30 19:36 -------- d-----w- c:\program files (x86)\Microsoft Analysis Services
2014-01-30 19:35 . 2014-01-30 19:35 -------- d-----w- c:\users\Owner\AppData\Local\Microsoft Help
2014-01-30 19:35 . 2014-01-30 19:38 -------- d-----w- c:\program files\Microsoft Office
2014-01-30 19:35 . 2014-01-31 16:12 -------- d-----w- c:\programdata\Microsoft Help
2014-01-30 19:35 . 2014-01-30 19:35 -------- d-----r- C:\MSOCache
2014-01-30 17:54 . 2014-01-30 17:54 -------- d-----w- c:\program files (x86)\Gophoto.it
2014-01-30 17:53 . 2014-01-30 17:53 -------- d-----w- c:\users\Owner\AppData\Local\Cool_Mirage
2014-01-30 17:35 . 2014-02-03 10:34 -------- d-----w- c:\users\Owner\AppData\Roaming\_MDLogs
2014-01-30 17:35 . 2014-01-30 17:35 -------- d-----w- c:\programdata\Easybits
2014-01-30 17:34 . 2013-07-25 11:00 517632 ----a-w- c:\windows\SysWow64\ezSharedSvcHost.exe
2014-01-30 17:34 . 2013-07-25 11:00 353792 ----a-w- c:\windows\SysWow64\ezsvc7x.dll
2014-01-30 17:34 . 2014-01-30 17:34 97792 ----a-w- c:\windows\SysWow64\vcljpg70.bpl
2014-01-30 17:34 . 2014-01-30 17:34 778240 ----a-w- c:\windows\SysWow64\rtl70.bpl
2014-01-30 17:34 . 2014-01-30 17:34 64512 ----a-w- c:\windows\SysWow64\vclsmp70.bpl
2014-01-30 17:34 . 2014-01-30 17:34 325640 ----a-w- c:\windows\SysWow64\ezseng.exe
2014-01-30 17:34 . 2014-01-30 17:34 23624 ----a-w- c:\windows\SysWow64\ezMAPIHelper.exe
2014-01-30 17:34 . 2014-01-30 17:34 215040 ----a-w- c:\windows\SysWow64\vclx70.bpl
2014-01-30 17:34 . 2014-01-30 17:34 1381376 ----a-w- c:\windows\SysWow64\vcl70.bpl
2014-01-30 17:34 . 2014-01-30 17:34 124488 ----a-w- c:\windows\SysWow64\ezUninst.exe
2014-01-30 17:29 . 2014-01-30 17:29 -------- d-----w- c:\users\Owner\.android
2014-01-30 17:29 . 2014-01-30 17:30 -------- d-----w- c:\users\Owner\AppData\Local\cache
2014-01-30 17:29 . 2014-01-30 19:11 -------- d-----w- c:\users\Owner\AppData\Roaming\newnext.me
2014-01-30 17:29 . 2014-01-30 19:10 -------- d-----w- c:\users\Owner\AppData\Local\genienext
2014-01-30 17:29 . 2014-01-30 18:29 -------- d-----w- c:\users\Owner\AppData\Local\Mobogenie
2014-01-30 17:28 . 2014-01-30 18:29 -------- d-----w- c:\users\Owner\AppData\Local\SwvUpdater
2014-01-30 17:28 . 2014-01-30 17:28 -------- d-----w- c:\program files (x86)\Seznam.cz
2014-01-30 17:27 . 2014-02-12 13:50 -------- d-----w- c:\users\Owner\AppData\Roaming\Seznam.cz
2014-01-30 17:27 . 2014-01-30 19:10 -------- d-----w- c:\program files (x86)\GoforFiles
2014-01-30 17:27 . 2014-01-30 17:27 -------- d-----w- c:\users\Owner\AppData\Roaming\GoforFiles
2014-01-23 11:45 . 2014-01-23 11:45 -------- d-----w- c:\program files (x86)\EBLUE MOUSE
2014-01-22 07:52 . 2014-01-22 07:52 206080 ----a-w- c:\windows\system32\drivers\ssudserd.sys
2014-01-22 07:52 . 2014-01-22 07:52 206080 ----a-w- c:\windows\system32\drivers\ssudmdm.sys
2014-01-22 07:52 . 2014-01-22 07:52 108800 ----a-w- c:\windows\system32\drivers\ssudbus.sys
2014-01-15 20:22 . 2013-12-18 20:09 96168 ----a-w- c:\windows\SysWow64\WindowsAccessBridge-32.dll
2014-01-15 14:36 . 2013-11-27 01:42 343040 ----a-w- c:\windows\system32\drivers\usbhub.sys
2014-01-15 14:36 . 2013-11-27 01:42 99840 ----a-w- c:\windows\system32\drivers\usbccgp.sys
2014-01-15 14:36 . 2013-11-27 01:42 325120 ----a-w- c:\windows\system32\drivers\usbport.sys
2014-01-15 14:36 . 2013-11-27 01:42 53248 ----a-w- c:\windows\system32\drivers\usbehci.sys
2014-01-15 14:36 . 2013-11-27 01:42 25600 ----a-w- c:\windows\system32\drivers\usbohci.sys
2014-01-15 14:36 . 2013-11-27 01:42 30720 ----a-w- c:\windows\system32\drivers\usbuhci.sys
2014-01-15 14:36 . 2013-11-27 01:42 7808 ----a-w- c:\windows\system32\drivers\usbd.sys
2014-01-15 14:36 . 2013-11-26 10:22 3160064 ----a-w- c:\windows\system32\win32k.sys
2014-01-15 14:36 . 2013-11-26 11:34 1897408 ----a-w- c:\windows\system32\drivers\tcpip.sys
2014-01-15 14:36 . 2013-11-26 11:34 376768 ----a-w- c:\windows\system32\drivers\netio.sys
2014-01-15 14:36 . 2013-11-26 11:34 288192 ----a-w- c:\windows\system32\drivers\FWPKCLNT.SYS
.
.
.
(((((((((((((((((((((((((((((((((((((((( Find3M výpis ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2014-02-12 13:38 . 2013-10-14 09:42 88567024 ----a-w- c:\windows\system32\MRT.exe
2014-02-07 11:51 . 2013-10-14 09:35 692616 ----a-w- c:\windows\SysWow64\FlashPlayerApp.exe
2014-02-07 11:51 . 2013-10-14 09:35 71048 ----a-w- c:\windows\SysWow64\FlashPlayerCPLApp.cpl
2014-01-03 11:00 . 2014-01-03 11:00 750592 ----a-w- c:\windows\SysWow64\ezUtils7.dll
2014-01-03 11:00 . 2014-01-03 11:00 738888 ----a-w- c:\windows\SysWow64\ezScrSvr.scr
2014-01-03 11:00 . 2014-01-03 11:00 682504 ----a-w- c:\windows\SysWow64\ezLicPrompt7.dll
2014-01-03 11:00 . 2014-01-03 11:00 654920 ----a-w- c:\windows\SysWow64\ezScore7.dll
2014-01-03 11:00 . 2014-01-03 11:00 605704 ----a-w- c:\windows\SysWow64\ezEMail7.dll
2014-01-03 11:00 . 2014-01-03 11:00 571976 ----a-w- c:\windows\SysWow64\ezMenu7.dll
2014-01-03 11:00 . 2014-01-03 11:00 348680 ----a-w- c:\windows\SysWow64\ezHints7.dll
2014-01-03 11:00 . 2014-01-03 11:00 332296 ----a-w- c:\windows\SysWow64\ezWizard7.dll
2014-01-03 11:00 . 2014-01-03 11:00 1376264 ----a-w- c:\windows\SysWow64\ezShell7.dll
2014-01-03 11:00 . 2014-01-03 11:00 1331200 ----a-w- c:\windows\SysWow64\ezBook7.dll
2014-01-03 11:00 . 2014-01-03 11:00 1030664 ----a-w- c:\windows\SysWow64\ezPrint7.dll
2014-01-01 09:19 . 2014-01-01 09:19 48648 ----a-w- c:\programdata\Microsoft\eHome\Packages\MCEClientUX\UpdateableMarkup\Markup.dll
2014-01-01 09:19 . 2014-01-01 09:19 483952 ----a-w- c:\programdata\Microsoft\eHome\Packages\MCESpotlight\MCESpotlight\SpotlightResources.dll
2013-12-19 20:33 . 2014-01-09 20:50 9700224 ----a-w- c:\windows\SysWow64\nvcuda.dll
2013-12-19 20:33 . 2014-01-09 20:50 9657464 ----a-w- c:\windows\SysWow64\nvopencl.dll
2013-12-19 20:33 . 2014-01-09 20:50 882464 ----a-w- c:\windows\system32\NvIFR64.dll
2013-12-19 20:33 . 2014-01-09 20:50 879392 ----a-w- c:\windows\system32\NvFBC64.dll
2013-12-19 20:33 . 2014-01-09 20:50 852768 ----a-w- c:\windows\SysWow64\NvIFR.dll
2013-12-19 20:33 . 2014-01-09 20:50 847648 ----a-w- c:\windows\SysWow64\NvFBC.dll
2013-12-19 20:33 . 2014-01-09 20:50 32544 ----a-w- c:\windows\system32\drivers\nvpciflt.sys
2013-12-19 20:33 . 2014-01-09 20:50 317472 ----a-w- c:\windows\system32\nvoglshim64.dll
2013-12-19 20:33 . 2014-01-09 20:50 3132704 ----a-w- c:\windows\system32\nvcuvid.dll
2013-12-19 20:33 . 2014-01-09 20:50 3125024 ----a-w- c:\windows\system32\nvcuvenc.dll
2013-12-19 20:33 . 2014-01-09 20:50 30372640 ----a-w- c:\windows\system32\nvoglv64.dll
2013-12-19 20:33 . 2014-01-09 20:50 300320 ----a-w- c:\windows\system32\drivers\nvkflt.sys
2013-12-19 20:33 . 2014-01-09 20:50 2947872 ----a-w- c:\windows\SysWow64\nvcuvid.dll
2013-12-19 20:33 . 2014-01-09 20:50 2747680 ----a-w- c:\windows\SysWow64\nvcuvenc.dll
2013-12-19 20:33 . 2014-01-09 20:50 266984 ----a-w- c:\windows\SysWow64\nvoglshim32.dll
2013-12-19 20:33 . 2014-01-09 20:50 22960416 ----a-w- c:\windows\SysWow64\nvoglv32.dll
2013-12-19 20:33 . 2014-01-09 20:50 1884448 ----a-w- c:\windows\system32\nvdispco6433221.dll
2013-12-19 20:33 . 2014-01-09 20:50 18310112 ----a-w- c:\windows\system32\nvwgf2umx.dll
2013-12-19 20:33 . 2014-01-09 20:50 18222008 ----a-w- c:\windows\system32\nvd3dumx.dll
2013-12-19 20:33 . 2014-01-09 20:50 17560352 ----a-w- c:\windows\SysWow64\nvcompiler.dll
2013-12-19 20:33 . 2014-01-09 20:50 15877216 ----a-w- c:\windows\SysWow64\nvwgf2um.dll
2013-12-19 20:33 . 2014-01-09 20:50 1511712 ----a-w- c:\windows\system32\nvdispgenco6433221.dll
2013-12-19 20:33 . 2014-01-09 20:50 12645664 ----a-w- c:\windows\system32\drivers\nvlddmkm.sys
2013-12-19 20:33 . 2014-01-09 20:50 11605752 ----a-w- c:\windows\system32\nvcuda.dll
2013-12-19 20:33 . 2014-01-09 20:50 11554264 ----a-w- c:\windows\system32\nvopencl.dll
2013-12-19 20:33 . 2014-01-09 20:50 2698272 ----a-w- c:\windows\SysWow64\nvapi.dll
2013-12-19 20:33 . 2014-01-09 20:50 25257248 ----a-w- c:\windows\system32\nvcompiler.dll
2013-12-19 20:33 . 2013-10-09 15:24 61216 ----a-w- c:\windows\system32\OpenCL.dll
2013-12-19 20:33 . 2013-10-09 15:24 53024 ----a-w- c:\windows\SysWow64\OpenCL.dll
2013-12-19 20:33 . 2013-10-09 15:23 3071656 ----a-w- c:\windows\system32\nvapi64.dll
2013-12-19 20:33 . 2013-10-09 15:23 168616 ----a-w- c:\windows\system32\nvinitx.dll
2013-12-19 20:33 . 2013-10-09 15:23 15230352 ----a-w- c:\windows\SysWow64\nvd3dum.dll
2013-12-19 20:33 . 2013-10-09 15:23 1436528 ----a-w- c:\windows\system32\nvumdshimx.dll
2013-12-19 20:33 . 2013-10-09 15:23 141336 ----a-w- c:\windows\SysWow64\nvinit.dll
2013-12-19 20:33 . 2013-10-09 15:23 1242400 ----a-w- c:\windows\SysWow64\nvumdshim.dll
2013-12-19 18:53 . 2013-10-09 15:25 6671648 ----a-w- c:\windows\system32\nvcpl.dll
2013-12-19 18:53 . 2013-10-09 15:25 3490080 ----a-w- c:\windows\system32\nvsvc64.dll
2013-12-19 18:53 . 2013-10-09 15:25 922912 ----a-w- c:\windows\system32\nvvsvc.exe
2013-12-19 18:53 . 2013-10-09 15:25 67072 ----a-w- c:\windows\system32\nv3dappshextr.dll
2013-12-19 18:53 . 2013-10-09 15:25 63776 ----a-w- c:\windows\system32\nvshext.dll
2013-12-19 18:53 . 2013-10-09 15:25 386336 ----a-w- c:\windows\system32\nvmctray.dll
2013-12-19 18:53 . 2013-10-09 15:25 2559776 ----a-w- c:\windows\system32\nvsvcr.dll
2013-12-19 18:53 . 2013-10-09 15:25 1065248 ----a-w- c:\windows\system32\nv3dappshext.dll
2013-12-19 11:20 . 2013-12-19 11:20 590112 ----a-w- c:\windows\SysWow64\nvStreaming.exe
2013-12-19 05:01 . 2013-10-09 15:25 3539040 ----a-w- c:\windows\system32\nvcoproc.bin
2013-12-10 02:15 . 2014-01-09 20:59 982232 ----a-w- c:\windows\SysWow64\nvspcap.dll
2013-12-10 02:14 . 2014-01-09 20:59 1100248 ----a-w- c:\windows\system32\nvspcap64.dll
2013-12-05 08:42 . 2014-01-09 20:50 39200 ----a-w- c:\windows\system32\drivers\nvvad64v.sys
2013-12-05 08:42 . 2014-01-09 20:50 35104 ----a-w- c:\windows\system32\nvaudcap64v.dll
2013-12-05 08:42 . 2014-01-09 20:50 32544 ----a-w- c:\windows\SysWow64\nvaudcap32v.dll
2013-11-23 18:26 . 2013-12-10 19:37 417792 ----a-w- c:\windows\SysWow64\WMPhoto.dll
2013-11-23 17:47 . 2013-12-10 19:37 465920 ----a-w- c:\windows\system32\WMPhoto.dll
2013-11-18 00:28 . 2013-11-22 06:45 10285968 ----a-w- c:\programdata\Microsoft\Windows Defender\Definition Updates\{5C6BE454-C642-4D4F-AEAC-22E7BD7EE822}\mpengine.dll
.
.
(((((((((((((((((((((((((((((((((( Spouštěcí body v registru )))))))))))))))))))))))))))))))))))))))))))))
.
.
*Poznámka* prázdné záznamy a legitimní výchozí údaje nejsou zobrazeny.
REGEDIT4
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ SkyDrivePro1 (ErrorConflict)]
@="{8BA85C75-763B-4103-94EB-9470F12FE0F7}"
[HKEY_CLASSES_ROOT\CLSID\{8BA85C75-763B-4103-94EB-9470F12FE0F7}]
2013-11-02 11:35 1727176 ----a-w- c:\progra~2\MICROS~2\Office15\GROOVEEX.DLL
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ SkyDrivePro2 (SyncInProgress)]
@="{CD55129A-B1A1-438E-A425-CEBC7DC684EE}"
[HKEY_CLASSES_ROOT\CLSID\{CD55129A-B1A1-438E-A425-CEBC7DC684EE}]
2013-11-02 11:35 1727176 ----a-w- c:\progra~2\MICROS~2\Office15\GROOVEEX.DLL
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ SkyDrivePro3 (InSync)]
@="{E768CD3B-BDDC-436D-9C13-E1B39CA257B1}"
[HKEY_CLASSES_ROOT\CLSID\{E768CD3B-BDDC-436D-9C13-E1B39CA257B1}]
2013-11-02 11:35 1727176 ----a-w- c:\progra~2\MICROS~2\Office15\GROOVEEX.DLL
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"uTorrent"="c:\users\Owner\AppData\Roaming\uTorrent\updates\3.3.2_30488.exe" [2014-02-09 905296]
"AlcoholAutomount"="c:\program files (x86)\Alcohol Soft\Alcohol 120\AxAutoMntSrv.exe" [2012-01-05 75624]
"Alcohol.exe Autorun"="c:\program files (x86)\Alcohol Soft\Alcohol 120\Alcohol.exe" [2013-09-26 1843016]
"NokiaSuite.exe"="c:\program files (x86)\Nokia\Nokia Suite\NokiaSuite.exe" [2013-10-02 1090912]
"KiesPreload"="c:\program files (x86)\Samsung\Kies\Kies.exe" [2013-12-11 1564528]
"KiesAirMessage"="c:\program files (x86)\Samsung\Kies\KiesAirMessage.exe" [2013-10-30 578560]
"Akamai NetSession Interface"="c:\users\Owner\AppData\Local\Akamai\netsession_win.exe" [2013-06-05 4489472]
"eblueMouseRun"="c:\program files (x86)\EBLUE MOUSE\ebluemon.exe" [2013-11-15 3637248]
"cz.seznam.software.autoupdate"="c:\users\Owner\AppData\Roaming\Seznam.cz\szninstall.exe" [2013-05-16 1062472]
"cz.seznam.software.szndesktop"="c:\users\Owner\AppData\Roaming\Seznam.cz\bin\wszndesktop.exe" [2013-04-12 92664]
"HP Deskjet 3510 series (NET)"="c:\program files\HP\HP Deskjet 3510 series\Bin\ScanToPCActivationApp.exe" [2012-10-17 2573416]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]
"NUSB3MON"="c:\program files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe" [2010-11-17 113288]
"Chicony_OSD"="c:\program files (x86)\Dell\Dell KM632 Wireless Keyboard Caps Lock Indicator\LaunchOSDSrv.exe" [2011-01-12 53248]
"Adobe ARM"="c:\program files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2013-11-21 959904]
"HP Software Update"="c:\program files (x86)\Hp\HP Software Update\HPWuSchd2.exe" [2011-10-28 49208]
"KiesTrayAgent"="c:\program files (x86)\Samsung\Kies\KiesTrayAgent.exe" [2013-12-11 311152]
"APSDaemon"="c:\program files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe" [2013-04-21 59720]
"QuickTime Task"="c:\program files (x86)\QuickTime\QTTask.exe" [2013-05-01 421888]
"SunJavaUpdateSched"="c:\program files (x86)\Common Files\Java\Java Update\jusched.exe" [2013-07-02 254336]
"seznam-listicka-distribuce"="c:\program files (x86)\Seznam.cz\distribution\szninstall.exe" [2013-05-16 1062472]
"Maurus"="c:\program files (x86)\Genius\Maurus\mousehid.exe" [2011-11-14 300544]
.
c:\users\Martinek\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\
Monitor technologie Intel(R) Turbo Boost 2.0.lnk - c:\program files\Intel\TurboBoost\SignalIslandUi.exe [2010-11-29 204288]
.
c:\users\Owner\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\
Monitor technologie Intel(R) Turbo Boost 2.0.lnk - c:\program files\Intel\TurboBoost\SignalIslandUi.exe [2010-11-29 204288]
Sledovat výstrahy inkoustu - HP Deskjet 3510 series (Síť).lnk - c:\windows\system32\RunDll32.exe "c:\program files\HP\HP Deskjet 3510 series\bin\HPStatusBL.dll",RunDLLEntry SERIALNUMBER=CN33B1NG3805TY;CONNECTION=NW;MONITOR=1; [2009-7-14 45568]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorAdmin"= 5 (0x5)
"ConsentPromptBehaviorUser"= 3 (0x3)
"EnableUIADesktopToggle"= 0 (0x0)
"HideFastUserSwitching"= 0 (0x0)
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\explorer]
"EnableShellExecuteHooks"= 1 (0x1)
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\windows]
"LoadAppInit_DLLs"=1 (0x1)
"AppInit_DLLs"=c:\windows\SysWOW64\nvinit.dll
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Wdf01000.sys]
@="Driver"
.
R2 AxAutoMntSrv;Alcohol Virtual Drive Auto-mount Service;c:\program files (x86)\Alcohol Soft\Alcohol 120\AxAutoMntSrv.exe;c:\program files (x86)\Alcohol Soft\Alcohol 120\AxAutoMntSrv.exe [x]
R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [x]
R3 ATHDFU;Atheros Valkyrie USB BootROM;c:\windows\system32\Drivers\AthDfu.sys;c:\windows\SYSNATIVE\Drivers\AthDfu.sys [x]
R3 dg_ssudbus;SAMSUNG Mobile USB Composite Device Driver (DEVGURU Ver.);c:\windows\system32\DRIVERS\ssudbus.sys;c:\windows\SYSNATIVE\DRIVERS\ssudbus.sys [x]
R3 dgderdrv;dgderdrv;c:\windows\system32\drivers\dgderdrv.sys;c:\windows\SYSNATIVE\drivers\dgderdrv.sys [x]
R3 Huawei;HUAWEI Mobile Connect - USB Smart Card Reader;c:\windows\system32\DRIVERS\ewdcsc.sys;c:\windows\SYSNATIVE\DRIVERS\ewdcsc.sys [x]
R3 hwusbdev;Huawei DataCard USB PNP Device;c:\windows\system32\DRIVERS\ewusbdev.sys;c:\windows\SYSNATIVE\DRIVERS\ewusbdev.sys [x]
R3 IEEtwCollectorService;Internet Explorer ETW Collector Service;c:\windows\system32\IEEtwCollector.exe;c:\windows\SYSNATIVE\IEEtwCollector.exe [x]
R3 ose64;Office 64 Source Engine;c:\program files\Common Files\Microsoft Shared\Source Engine\OSE.EXE;c:\program files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [x]
R3 RdpVideoMiniport;Remote Desktop Video Miniport Driver;c:\windows\system32\drivers\rdpvideominiport.sys;c:\windows\SYSNATIVE\drivers\rdpvideominiport.sys [x]
R3 RSUSBSTOR;RtsUStor.Sys Realtek USB Card Reader;c:\windows\system32\Drivers\RtsUStor.sys;c:\windows\SYSNATIVE\Drivers\RtsUStor.sys [x]
R3 ssudmdm;SAMSUNG Mobile USB Modem Drivers (DEVGURU Ver.);c:\windows\system32\DRIVERS\ssudmdm.sys;c:\windows\SYSNATIVE\DRIVERS\ssudmdm.sys [x]
R3 ssudserd;SAMSUNG Mobile USB Diagnostic Serial Port(DEVGURU Ver.);c:\windows\system32\DRIVERS\ssudserd.sys;c:\windows\SYSNATIVE\DRIVERS\ssudserd.sys [x]
R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys;c:\windows\SYSNATIVE\drivers\tsusbflt.sys [x]
R3 TsUsbGD;Remote Desktop Generic USB Device;c:\windows\system32\drivers\TsUsbGD.sys;c:\windows\SYSNATIVE\drivers\TsUsbGD.sys [x]
R3 USBPNPA;USB PnP Sound Device Interface;c:\windows\system32\drivers\CM10864.sys;c:\windows\SYSNATIVE\drivers\CM10864.sys [x]
R3 usbrndis6;Adaptér USB RNDIS6;c:\windows\system32\DRIVERS\usb80236.sys;c:\windows\SYSNATIVE\DRIVERS\usb80236.sys [x]
R3 WatAdminSvc;Služba Technologie aktivace Windows;c:\windows\system32\Wat\WatAdminSvc.exe;c:\windows\SYSNATIVE\Wat\WatAdminSvc.exe [x]
S0 epfwwfp;epfwwfp;c:\windows\system32\DRIVERS\epfwwfp.sys;c:\windows\SYSNATIVE\DRIVERS\epfwwfp.sys [x]
S0 nvpciflt;nvpciflt;c:\windows\system32\DRIVERS\nvpciflt.sys;c:\windows\SYSNATIVE\DRIVERS\nvpciflt.sys [x]
S0 sptd;sptd;c:\windows\\SystemRoot\System32\Drivers\sptd.sys;c:\windows\\SystemRoot\System32\Drivers\sptd.sys [x]
S1 eamonm;eamonm;c:\windows\system32\DRIVERS\eamonm.sys;c:\windows\SYSNATIVE\DRIVERS\eamonm.sys [x]
S1 ehdrv;ehdrv;c:\windows\system32\DRIVERS\ehdrv.sys;c:\windows\SYSNATIVE\DRIVERS\ehdrv.sys [x]
S1 EpfwLWF;Epfw NDIS LightWeight Filter;c:\windows\system32\DRIVERS\EpfwLWF.sys;c:\windows\SYSNATIVE\DRIVERS\EpfwLWF.sys [x]
S1 nvkflt;nvkflt;c:\windows\system32\DRIVERS\nvkflt.sys;c:\windows\SYSNATIVE\DRIVERS\nvkflt.sys [x]
S2 AERTFilters;Andrea RT Filters Service;c:\program files\Realtek\Audio\HDA\AERTSr64.exe;c:\program files\Realtek\Audio\HDA\AERTSr64.exe [x]
S2 Atheros Bt&Wlan Coex Agent;Atheros Bt&Wlan Coex Agent;c:\program files (x86)\Dell Wireless\Bluetooth Suite\Ath_CoexAgent.exe;c:\program files (x86)\Dell Wireless\Bluetooth Suite\Ath_CoexAgent.exe [x]
S2 AtherosSvc;AtherosSvc;c:\program files (x86)\Dell Wireless\Bluetooth Suite\adminservice.exe;c:\program files (x86)\Dell Wireless\Bluetooth Suite\adminservice.exe [x]
S2 ekrn;ESET Service;c:\program files\ESET\ESET Smart Security\x86\ekrn.exe;c:\program files\ESET\ESET Smart Security\x86\ekrn.exe [x]
S2 ezSharedSvc;Easybits Services for Windows;c:\windows\System32\ezSharedSvcHost.exe;c:\windows\SYSNATIVE\ezSharedSvcHost.exe [x]
S2 NvNetworkService;NVIDIA Network Service;c:\program files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe;c:\program files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [x]
S2 NvStreamSvc;NVIDIA Streamer Service;c:\program files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe;c:\program files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [x]
S2 OSDSvc;ChiconyOSDService;c:\program files (x86)\Dell\Dell KM632 Wireless Keyboard Caps Lock Indicator\OSDSrv.exe;c:\program files (x86)\Dell\Dell KM632 Wireless Keyboard Caps Lock Indicator\OSDSrv.exe [x]
S2 Stereo Service;NVIDIA Stereoscopic 3D Driver Service;c:\program files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe;c:\program files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe [x]
S2 TurboB;Turbo Boost UI Monitor driver;c:\windows\system32\DRIVERS\TurboB.sys;c:\windows\SYSNATIVE\DRIVERS\TurboB.sys [x]
S2 UNS;Intel(R) Management and Security Application User Notification Service;c:\program files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe;c:\program files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe [x]
S3 AthBTPort;Atheros Virtual Bluetooth Class;c:\windows\system32\DRIVERS\btath_flt.sys;c:\windows\SYSNATIVE\DRIVERS\btath_flt.sys [x]
S3 BTATH_A2DP;Bluetooth A2DP Audio Driver;c:\windows\system32\drivers\btath_a2dp.sys;c:\windows\SYSNATIVE\drivers\btath_a2dp.sys [x]
S3 BTATH_BUS;Atheros Bluetooth Bus;c:\windows\system32\DRIVERS\btath_bus.sys;c:\windows\SYSNATIVE\DRIVERS\btath_bus.sys [x]
S3 BTATH_HCRP;Bluetooth HCRP Server driver;c:\windows\system32\DRIVERS\btath_hcrp.sys;c:\windows\SYSNATIVE\DRIVERS\btath_hcrp.sys [x]
S3 BTATH_LWFLT;Bluetooth LWFLT Device;c:\windows\system32\DRIVERS\btath_lwflt.sys;c:\windows\SYSNATIVE\DRIVERS\btath_lwflt.sys [x]
S3 BTATH_RCP;Bluetooth AVRCP Device;c:\windows\system32\DRIVERS\btath_rcp.sys;c:\windows\SYSNATIVE\DRIVERS\btath_rcp.sys [x]
S3 BtFilter;BtFilter;c:\windows\system32\DRIVERS\btfilter.sys;c:\windows\SYSNATIVE\DRIVERS\btfilter.sys [x]
S3 BthMtpEnum;Modul pro výčet zařízení Bluetooth MTP;c:\windows\system32\DRIVERS\BthMtpEnum.sys;c:\windows\SYSNATIVE\DRIVERS\BthMtpEnum.sys [x]
S3 nusb3hub;Renesas Electronics USB 3.0 Hub Driver;c:\windows\system32\DRIVERS\nusb3hub.sys;c:\windows\SYSNATIVE\DRIVERS\nusb3hub.sys [x]
S3 nusb3xhc;Renesas Electronics USB 3.0 Host Controller Driver;c:\windows\system32\DRIVERS\nusb3xhc.sys;c:\windows\SYSNATIVE\DRIVERS\nusb3xhc.sys [x]
S3 nvvad_WaveExtensible;NVIDIA Virtual Audio Device (Wave Extensible) (WDM);c:\windows\system32\drivers\nvvad64v.sys;c:\windows\SYSNATIVE\drivers\nvvad64v.sys [x]
S3 RTL8167;Realtek 8167 NT Driver;c:\windows\system32\DRIVERS\Rt64win7.sys;c:\windows\SYSNATIVE\DRIVERS\Rt64win7.sys [x]
S3 TurboBoost;Intel(R) Turbo Boost Technology Monitor 2.0;c:\program files\Intel\TurboBoost\TurboBoost.exe;c:\program files\Intel\TurboBoost\TurboBoost.exe [x]
.
.
--- Ostatní služby/ovladače v paměti ---
.
*NewlyCreated* - WS2IFSL
.
Obsah adresáře 'Naplánované úlohy'
.
2014-02-12 c:\windows\Tasks\Adobe Flash Player Updater.job
- c:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2013-10-14 11:51]
.
2014-02-11 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-3128138035-3014723401-4134321253-1001Core1cef2cc7f2424c1.job
- c:\users\Owner\AppData\Local\Google\Update\GoogleUpdate.exe [2013-12-05 20:38]
.
2014-02-12 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-3128138035-3014723401-4134321253-1001UA1cef2cc817c274a.job
- c:\users\Owner\AppData\Local\Google\Update\GoogleUpdate.exe [2013-12-05 20:38]
.
.
--------- X64 Entries -----------
.
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ SkyDrivePro1 (ErrorConflict)]
@="{8BA85C75-763B-4103-94EB-9470F12FE0F7}"
[HKEY_CLASSES_ROOT\CLSID\{8BA85C75-763B-4103-94EB-9470F12FE0F7}]
2013-11-02 11:30 2331336 ----a-w- c:\progra~1\MICROS~3\Office15\GROOVEEX.DLL
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ SkyDrivePro2 (SyncInProgress)]
@="{CD55129A-B1A1-438E-A425-CEBC7DC684EE}"
[HKEY_CLASSES_ROOT\CLSID\{CD55129A-B1A1-438E-A425-CEBC7DC684EE}]
2013-11-02 11:30 2331336 ----a-w- c:\progra~1\MICROS~3\Office15\GROOVEEX.DLL
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ SkyDrivePro3 (InSync)]
@="{E768CD3B-BDDC-436D-9C13-E1B39CA257B1}"
[HKEY_CLASSES_ROOT\CLSID\{E768CD3B-BDDC-436D-9C13-E1B39CA257B1}]
2013-11-02 11:30 2331336 ----a-w- c:\progra~1\MICROS~3\Office15\GROOVEEX.DLL
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"IgfxTray"="c:\windows\system32\igfxtray.exe" [2011-08-04 167704]
"HotKeysCmds"="c:\windows\system32\hkcmd.exe" [2011-08-04 392472]
"Persistence"="c:\windows\system32\igfxpers.exe" [2011-08-04 416024]
"RTHDVCPL"="c:\program files\Realtek\Audio\HDA\RtkNGUI64.exe" [2011-05-25 7214696]
"IntelTBRunOnce"="wscript.exe" [2013-10-12 168960]
"Apoint"="c:\program files\DellTPad\Apoint.exe" [2011-04-12 609144]
"egui"="c:\program files\ESET\ESET Smart Security\egui.exe" [2013-09-12 5618456]
"NvBackend"="c:\program files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe" [2013-12-10 2279712]
"ShadowPlay"="c:\windows\system32\nvspcap64.dll" [2013-12-10 1100248]
"Cm108Sound"="c:\windows\Syswow64\cm108.dll" [2013-07-16 12935168]
"AtherosBtStack"="c:\program files (x86)\Dell Wireless\Bluetooth Suite\BtvStack.exe" [2011-05-20 627360]
"AthBtTray"="c:\program files (x86)\Dell Wireless\Bluetooth Suite\AthBtTray.exe" [2011-05-20 379552]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
"AppInit_DLLs"=c:\windows\System32\nvinitx.dll
.
------- Doplňkový sken -------
.
uLocal Page = c:\windows\system32\blank.htm
uStart Page = hxxp://www.seznam.cz/
mLocal Page = c:\windows\SysWOW64\blank.htm
uInternet Settings,ProxyOverride = <local>
Trusted Zone: dell.com
TCP: DhcpNameServer = 192.168.0.1
Filter: text/xml - {807583E5-5146-11D5-A672-00B0D022E945} - c:\program files (x86)\Common Files\microsoft shared\OFFICE15\MSOXMLMF.DLL
FF - ProfilePath - c:\users\Owner\AppData\Roaming\Mozilla\Firefox\Profiles\apprcmds.default\
FF - prefs.js: browser.startup.homepage - chrome://speeddial/content/speeddial.xul
FF - ExtSQL: 2013-12-20 06:29; {0545b830-f0aa-4d7e-8820-50a4629a56fe}; c:\users\Owner\AppData\Roaming\Mozilla\Firefox\Profiles\apprcmds.default\extensions\{0545b830-f0aa-4d7e-8820-50a4629a56fe}
user_pref('extensions.autoDisableScopes', 0);user_pref('security.csp.enable', false);user_pref('security.OCSP.enabled', 0);
.
- - - - NEPLATNÉ POLOŽKY ODSTRANĚNÉ Z REGISTRU - - - -
.
Wow6432Node-HKLM-Run-<NO NAME> - (no file)
Wow6432Node-HKLM-Run-mobilegeni daemon - c:\program files (x86)\Mobogenie\DaemonProcess.exe
Wow6432Node-HKLM-Run-Easybits Recovery - c:\program files (x86)\EasyBits For Kids\ezRecover.exe
HKLM_Wow6432Node-ActiveSetup-{2D46B6DC-2207-486B-B523-A557E6D54B47} - start
.
.
.
--------------------- ZAMKNUTÉ KLÍČE V REGISTRU ---------------------
.
[HKEY_USERS\S-1-5-21-3128138035-3014723401-4134321253-1001\Control Panel\Desktop*]
@Allowed: (Read) (RestrictedCode)
"WheelScrollLines"="3"
DUMPHIVE0.003 (REGF)
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\windows\\system32\\Macromed\\Flash\\FlashUtil64_12_0_0_44_ActiveX.exe,-101"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\Elevation]
"Enabled"=dword:00000001
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\LocalServer32]
@="c:\\windows\\system32\\Macromed\\Flash\\FlashUtil64_12_0_0_44_ActiveX.exe"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
.
[HKEY_LOCAL_MACHINE\software\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="IFlashBroker5"
.
[HKEY_LOCAL_MACHINE\software\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"
.
[HKEY_LOCAL_MACHINE\software\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\windows\\SysWOW64\\Macromed\\Flash\\FlashUtil32_12_0_0_44_ActiveX.exe,-101"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\Elevation]
"Enabled"=dword:00000001
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\LocalServer32]
@="c:\\windows\\SysWOW64\\Macromed\\Flash\\FlashUtil32_12_0_0_44_ActiveX.exe"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@="Shockwave Flash Object"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\InprocServer32]
@="c:\\windows\\SysWOW64\\Macromed\\Flash\\Flash32_12_0_0_44.ocx"
"ThreadingModel"="Apartment"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\MiscStatus]
@="0"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ProgID]
@="ShockwaveFlash.ShockwaveFlash.11"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
@="c:\\windows\\SysWOW64\\Macromed\\Flash\\Flash32_12_0_0_44.ocx, 1"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\TypeLib]
@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\Version]
@="1.0"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
@="ShockwaveFlash.ShockwaveFlash"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@="Macromedia Flash Factory Object"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\InprocServer32]
@="c:\\windows\\SysWOW64\\Macromed\\Flash\\Flash32_12_0_0_44.ocx"
"ThreadingModel"="Apartment"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ProgID]
@="FlashFactory.FlashFactory.1"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
@="c:\\windows\\SysWOW64\\Macromed\\Flash\\Flash32_12_0_0_44.ocx, 1"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\TypeLib]
@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\Version]
@="1.0"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
@="FlashFactory.FlashFactory"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="IFlashBroker5"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
.
[HKEY_LOCAL_MACHINE\system\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0000\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\system\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0001\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\system\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0002\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\system\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0003\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\system\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0004\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\system\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0005\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\system\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0008\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\system\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0009\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\system\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0010\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\system\ControlSet001\Control\PCW\Security]
@Denied: (Full) (Everyone)
.
Celkový čas: 2014-02-12 19:40:28
ComboFix-quarantined-files.txt 2014-02-12 18:40
.
Před spuštěním: Volných bajtů: 233 635 934 208
Po spuštění: Volných bajtů: 233 552 334 848
.
- - End Of File - - D9974AEBC3DE29242993C5BF3E1C35FB
A36C5E4F47E84449FF07ED3517B43A31
Nahoru
Avatar uživatele
vyosek
VIP
VIP
Příspěvky: 56365
Registrován: 07 Lis 2006 15:24
Místo/Bydliště: Šalingrad - Brno

Re: Prosím o kontrolu logu z ComboFix

#2 Příspěvek od vyosek »

Zdravim :)

:arrow:Co se tyce ComboFixu, ktery jste pouzil, tak na zaklade licence a pravidel fora ptam, umite s nim pracovat (spusteni, rozlusteni logu, napsani skriptu)?

:arrow: Licencni podminky ComboFixu hovori jasne "Nikdy by nemel byt pouzit v prostredi bez dozoru zkusene osoby"
Obrázek

:arrow: Nebezpeci CFka
  • Je urcen primarne pro radce - jeho svevolnym pouzitim ztracite narok na podporu
  • Maze stopy po haveti, takze v logu z RSIT neni nic videt
  • Jeho log je treba dolustit, jelikoz neumi smazat vse - to ovsem tezko zvladnete pokud k tomu nejste vyskolen
  • CF muze mit bug = sunda Vam system, pokud nevite kam co uklada, jak co obnovit, mate system v kytkam a ceka Vas reinstal
  • CF taky bohuzel prozatim nekontroluje nektere dulezite knihovny (napr. hal.dll) - ty treba mazou nektere typy haveti (napr. angela) - smaze Vam po restartu hal.dll = nenajede Vam system a jste o radek vyse = reinstal
"Kdo víno má a nepije,kdo hrozny má a nejí je, kdo ženu má a nelíbá, kdo zábavě se vyhýbá, na toho vemte bič a hůl, to není člověk, to je vůl."
Člen Obrázek od 1. února 2011.
Nahoru
martafan
Návštěvník
Návštěvník
Příspěvky: 34
Registrován: 12 Ún 2014 19:44

Re: Prosím o kontrolu logu z ComboFix

#3 Příspěvek od martafan »

Máte pravdu, mmnt
Nahoru
Avatar uživatele
vyosek
VIP
VIP
Příspěvky: 56365
Registrován: 07 Lis 2006 15:24
Místo/Bydliště: Šalingrad - Brno

Re: Prosím o kontrolu logu z ComboFix

#4 Příspěvek od vyosek »

Ja pockam, sice nevim na co mam cekat, ale pockam :)
"Kdo víno má a nepije,kdo hrozny má a nejí je, kdo ženu má a nelíbá, kdo zábavě se vyhýbá, na toho vemte bič a hůl, to není člověk, to je vůl."
Člen Obrázek od 1. února 2011.
Nahoru
martafan
Návštěvník
Návštěvník
Příspěvky: 34
Registrován: 12 Ún 2014 19:44

Re: Prosím o kontrolu logu z ComboFix

#5 Příspěvek od martafan »

RSIT zde

Logfile of random's system information tool 1.09 (written by random/random)
Run by Owner at 2014-02-12 20:24:22
Microsoft Windows 7 Home Premium Service Pack 1
System drive C: has 223 GB (31%) free of 715 GB
Total RAM: 6038 MB (57% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 20:24:28, on 12.2.2014
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v11.0 (11.00.9600.16518)
Boot mode: Normal

Running processes:
C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe
C:\Windows\SysWOW64\rundll32.exe
C:\Users\Owner\AppData\Roaming\uTorrent\updates\3.3.2_30488.exe
C:\Program Files (x86)\Alcohol Soft\Alcohol 120\Alcohol.exe
C:\Program Files (x86)\Nokia\Nokia Suite\NokiaSuite.exe
C:\Program Files (x86)\Samsung\Kies\Kies.exe
C:\Program Files (x86)\Samsung\Kies\KiesAirMessage.exe
C:\Users\Owner\AppData\Local\Akamai\netsession_win.exe
C:\Program Files (x86)\EBLUE MOUSE\ebluemon.exe
C:\Users\Owner\AppData\Local\Akamai\netsession_win.exe
C:\Program Files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe
C:\Program Files (x86)\Dell\Dell KM632 Wireless Keyboard Caps Lock Indicator\LaunchOSDSrv.exe
C:\Program Files (x86)\HP\HP Software Update\hpwuschd2.exe
C:\Program Files (x86)\Samsung\Kies\KiesTrayAgent.exe
C:\Users\Owner\AppData\Roaming\Seznam.cz\bin\szndesktop.exe
C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
C:\Program Files (x86)\Genius\Maurus\mousehid.exe
C:\Program Files (x86)\Genius\Maurus\trayicon.exe
C:\Program Files (x86)\PC Connectivity Solution\Transports\NclMSBTSrvEx.exe
C:\Program Files (x86)\Mozilla Firefox\firefox.exe
C:\Program Files (x86)\Mozilla Firefox\plugin-container.exe
C:\windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_12_0_0_44.exe
C:\windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_12_0_0_44.exe
C:\Program Files\trend micro\Owner.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.seznam.cz/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/p/?LinkId=255141
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/p/?LinkId=255141
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
O2 - BHO: Lync Click to Call BHO - {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} - C:\Program Files (x86)\Microsoft Office\Office15\OCHelper.dll
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll
O2 - BHO: IESpeakDoc - {8D10F6C4-0E01-4BD4-8601-11AC1FDF8126} - C:\Program Files (x86)\Dell Wireless\Bluetooth Suite\IEPlugIn.dll
O2 - BHO: URLRedirectionBHO - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\PROGRA~2\MICROS~2\Office15\URLREDIR.DLL
O2 - BHO: Microsoft SkyDrive Pro Browser Helper - {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} - C:\PROGRA~2\MICROS~2\Office15\GROOVEEX.DLL
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll
O4 - HKLM\..\Run: [NUSB3MON] "C:\Program Files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe"
O4 - HKLM\..\Run: [Chicony_OSD] "C:\Program Files (x86)\Dell\Dell KM632 Wireless Keyboard Caps Lock Indicator\LaunchOSDSrv.exe"
O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKLM\..\Run: [HP Software Update] C:\Program Files (x86)\Hp\HP Software Update\HPWuSchd2.exe
O4 - HKLM\..\Run: [KiesTrayAgent] C:\Program Files (x86)\Samsung\Kies\KiesTrayAgent.exe
O4 - HKLM\..\Run: [APSDaemon] "C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files (x86)\QuickTime\QTTask.exe" -atboottime
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"
O4 - HKLM\..\Run: [seznam-listicka-distribuce] "C:\Program Files (x86)\Seznam.cz\distribution\szninstall.exe" -s -d listicka 1 szn-software-listicka cz.seznam.software.autoupdate
O4 - HKLM\..\Run: [Maurus] C:\Program Files (x86)\Genius\Maurus\mousehid.exe
O4 - HKCU\..\Run: [uTorrent] "C:\Users\Owner\AppData\Roaming\uTorrent\updates\3.3.2_30488.exe" /MINIMIZED
O4 - HKCU\..\Run: [AlcoholAutomount] "C:\Program Files (x86)\Alcohol Soft\Alcohol 120\AxAutoMntSrv.exe" -automount
O4 - HKCU\..\Run: [Alcohol.exe Autorun] C:\Program Files (x86)\Alcohol Soft\Alcohol 120\Alcohol.exe /startup
O4 - HKCU\..\Run: [NokiaSuite.exe] C:\Program Files (x86)\Nokia\Nokia Suite\NokiaSuite.exe -tray
O4 - HKCU\..\Run: [KiesPreload] C:\Program Files (x86)\Samsung\Kies\Kies.exe /preload
O4 - HKCU\..\Run: [KiesAirMessage] C:\Program Files (x86)\Samsung\Kies\KiesAirMessage.exe -startup
O4 - HKCU\..\Run: [Akamai NetSession Interface] "C:\Users\Owner\AppData\Local\Akamai\netsession_win.exe"
O4 - HKCU\..\Run: [eblueMouseRun] "C:\Program Files (x86)\EBLUE MOUSE\ebluemon.exe" -runauto
O4 - HKCU\..\Run: [cz.seznam.software.autoupdate] "C:\Users\Owner\AppData\Roaming\Seznam.cz\szninstall.exe" -c
O4 - HKCU\..\Run: [cz.seznam.software.szndesktop] "C:\Users\Owner\AppData\Roaming\Seznam.cz\bin\wszndesktop.exe" -q
O4 - HKCU\..\Run: [HP Deskjet 3510 series (NET)] "C:\Program Files\HP\HP Deskjet 3510 series\Bin\ScanToPCActivationApp.exe" -deviceID "CN33B1NG3805TY:NW" -scfn "HP Deskjet 3510 series (NET)" -AutoStart 1
O4 - Startup: Monitor technologie Intel(R) Turbo Boost 2.0.lnk = C:\Program Files\Intel\TurboBoost\SignalIslandUi.exe
O4 - Startup: Sledovat výstrahy inkoustu - HP Deskjet 3510 series (Síť).lnk = ?
O9 - Extra button: Send to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files (x86)\Microsoft Office\Office15\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: Se&nd to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files (x86)\Microsoft Office\Office15\ONBttnIE.dll
O9 - Extra button: Lync Click to Call - {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} - C:\Program Files (x86)\Microsoft Office\Office15\OCHelper.dll
O9 - Extra 'Tools' menuitem: Lync Click to Call - {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} - C:\Program Files (x86)\Microsoft Office\Office15\OCHelper.dll
O9 - Extra button: (no name) - {7815BE26-237D-41A8-A98F-F7BD75F71086} - C:\Program Files (x86)\Dell Wireless\Bluetooth Suite\IEPlugIn.dll
O9 - Extra 'Tools' menuitem: Send by Bluetooth to - {7815BE26-237D-41A8-A98F-F7BD75F71086} - C:\Program Files (x86)\Dell Wireless\Bluetooth Suite\IEPlugIn.dll
O9 - Extra button: OneNote Lin&ked Notes - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files (x86)\Microsoft Office\Office15\ONBttnIELinkedNotes.dll
O9 - Extra 'Tools' menuitem: OneNote Lin&ked Notes - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files (x86)\Microsoft Office\Office15\ONBttnIELinkedNotes.dll
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O15 - Trusted Zone: *.dell.com
O18 - Protocol: osf - {D924BDC6-C83A-4BD5-90D0-095128A113D1} - C:\Program Files (x86)\Microsoft Office\Office15\MSOSB.DLL
O18 - Filter hijack: text/xml - {807583E5-5146-11D5-A672-00B0D022E945} - C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE15\MSOXMLMF.DLL
O20 - AppInit_DLLs: C:\Windows\SysWOW64\nvinit.dll
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: Andrea RT Filters Service (AERTFilters) - Andrea Electronics Corporation - C:\Program Files\Realtek\Audio\HDA\AERTSr64.exe
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\windows\System32\alg.exe (file missing)
O23 - Service: Atheros Bt&Wlan Coex Agent - Atheros - C:\Program Files (x86)\Dell Wireless\Bluetooth Suite\Ath_CoexAgent.exe
O23 - Service: AtherosSvc - Atheros Commnucations - C:\Program Files (x86)\Dell Wireless\Bluetooth Suite\adminservice.exe
O23 - Service: Alcohol Virtual Drive Auto-mount Service (AxAutoMntSrv) - Alcohol Soft Development Team - C:\Program Files (x86)\Alcohol Soft\Alcohol 120\AxAutoMntSrv.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\windows\System32\lsass.exe (file missing)
O23 - Service: ESET Service (ekrn) - ESET - C:\Program Files\ESET\ESET Smart Security\x86\ekrn.exe
O23 - Service: Easybits Services for Windows (ezSharedSvc) - EasyBits Software AS - C:\windows\System32\ezSharedSvcHost.exe
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\windows\system32\fxssvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\ieetwcollectorres.dll,-1000 (IEEtwCollectorService) - Unknown owner - C:\windows\system32\IEEtwCollector.exe (file missing)
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\windows\system32\lsass.exe (file missing)
O23 - Service: Intel(R) Management and Security Application Local Management Service (LMS) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Mozilla Foundation - C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\windows\System32\msdtc.exe (file missing)
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\windows\system32\lsass.exe (file missing)
O23 - Service: NVIDIA Network Service (NvNetworkService) - NVIDIA Corporation - C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
O23 - Service: NVIDIA Streamer Service (NvStreamSvc) - NVIDIA Corporation - C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
O23 - Service: NVIDIA Display Driver Service (nvsvc) - Unknown owner - C:\windows\system32\nvvsvc.exe (file missing)
O23 - Service: ChiconyOSDService (OSDSvc) - Chicony - C:\Program Files (x86)\Dell\Dell KM632 Wireless Keyboard Caps Lock Indicator\OSDSrv.exe
O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\windows\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\windows\system32\lsass.exe (file missing)
O23 - Service: ServiceLayer - Nokia - C:\Program Files (x86)\PC Connectivity Solution\ServiceLayer.exe
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\windows\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\windows\system32\sppsvc.exe (file missing)
O23 - Service: StarWind AE Service (StarWindServiceAE) - StarWind Software - C:\Program Files (x86)\Alcohol Soft\Alcohol 120\StarWind\StarWindServiceAE.exe
O23 - Service: NVIDIA Stereoscopic 3D Driver Service (Stereo Service) - NVIDIA Corporation - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
O23 - Service: Intel(R) Turbo Boost Technology Monitor 2.0 (TurboBoost) - Intel(R) Corporation - C:\Program Files\Intel\TurboBoost\TurboBoost.exe
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\windows\system32\UI0Detect.exe (file missing)
O23 - Service: Intel(R) Management and Security Application User Notification Service (UNS) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\windows\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\windows\system32\vssvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\Wat\WatUX.exe,-601 (WatAdminSvc) - Unknown owner - C:\windows\system32\Wat\WatAdminSvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\windows\system32\wbengine.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)

--
End of file - 13116 bytes

======Listing Processes======

\SystemRoot\System32\smss.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
wininit.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
C:\windows\system32\services.exe
C:\windows\system32\lsass.exe
C:\windows\system32\lsm.exe
winlogon.exe
C:\windows\system32\svchost.exe -k DcomLaunch
"C:\windows\system32\nvvsvc.exe"
"C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe"
C:\windows\system32\svchost.exe -k RPCSS
C:\windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\windows\system32\svchost.exe -k LocalService
C:\windows\system32\svchost.exe -k netsvcs
C:\windows\system32\svchost.exe -k GPSvcGroup
C:\windows\system32\svchost.exe -k NetworkService
"C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe"
C:\windows\system32\nvvsvc.exe -session -first
C:\windows\System32\spoolsv.exe
C:\windows\system32\svchost.exe -k LocalServiceNoNetwork
"C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe"
"C:\Program Files\Realtek\Audio\HDA\AERTSr64.exe"
"C:\Program Files (x86)\Dell Wireless\Bluetooth Suite\Ath_CoexAgent.exe"
"C:\Program Files (x86)\Dell Wireless\Bluetooth Suite\adminservice.exe"
"C:\Program Files\ESET\ESET Smart Security\x86\ekrn.exe"
C:\windows\SysWOW64\ezSharedSvcHost.exe
C:\windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
"C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe"
"C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe"
"C:\Program Files (x86)\Dell\Dell KM632 Wireless Keyboard Caps Lock Indicator\OSDSrv.exe"
"C:\Program Files (x86)\Alcohol Soft\Alcohol 120\StarWind\StarWindServiceAE.exe"
C:\windows\system32\svchost.exe -k imgsvc
"C:\windows\system32\rundll32.exe" Shell32.dll,Control_RunDLL mmsys.cpl
"taskhost.exe"
"C:\windows\system32\Dwm.exe"
C:\windows\Explorer.EXE
C:\windows\system32\svchost.exe -k bthsvcs
C:\windows\system32\svchost.exe -k NetworkServiceNetworkRestricted
"C:\Windows\System32\igfxtray.exe"
"C:\Windows\System32\hkcmd.exe"
"C:\Windows\System32\igfxpers.exe"
"C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe" -s
"C:\Program Files\DellTPad\Apoint.exe"
"C:\Program Files\DellTPad\ApMsgFwd.exe" -s{05FA8492-C047-4207-BE65-780D8591C113}
"C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe" serviceapp
\??\C:\windows\system32\conhost.exe "-1212427921773236361708258201-9529392002122312863119193668920328893161179559523
"C:\Program Files\ESET\ESET Smart Security\egui.exe" /hide /waitservice
"Apntex.exe"
\??\C:\windows\system32\conhost.exe "-633506625-9777244981437833760-2073187184-120833370820456374911744050206-483440978
"C:\Program Files\DellTPad\HidFind.exe"
"C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe"
"C:\Windows\SysWOW64\rundll32.exe" C:\windows\Syswow64\cm108.dll,CMICtrlWnd
"C:\Program Files (x86)\Dell Wireless\Bluetooth Suite\BtvStack.exe"
"C:/Program Files/NVIDIA Corporation/Display/nvtray.exe" -user_has_logged_in 1
"C:\Program Files (x86)\Dell Wireless\Bluetooth Suite\AthBtTray.exe"
"C:\Users\Owner\AppData\Roaming\uTorrent\updates\3.3.2_30488.exe" /MINIMIZED
"C:\Program Files (x86)\Alcohol Soft\Alcohol 120\Alcohol.exe" /startup
"C:\Program Files (x86)\Nokia\Nokia Suite\NokiaSuite.exe" -tray
"C:\Program Files (x86)\Samsung\Kies\Kies.exe" /preload
"C:\Program Files (x86)\Samsung\Kies\KiesAirMessage.exe" -startup
"C:\Users\Owner\AppData\Local\Akamai\netsession_win.exe"
C:\windows\system32\SearchIndexer.exe /Embedding
"C:\Program Files (x86)\EBLUE MOUSE\ebluemon.exe" -runauto
"C:\Program Files\HP\HP Deskjet 3510 series\Bin\ScanToPCActivationApp.exe" -deviceID "CN33B1NG3805TY:NW" -scfn "HP Deskjet 3510 series (NET)" -AutoStart 1
"C:\Program Files\Intel\TurboBoost\SignalIslandUi.exe"
"C:\windows\system32\RunDll32.exe" "C:\Program Files\HP\HP Deskjet 3510 series\bin\HPStatusBL.dll",RunDLLEntry SERIALNUMBER=CN33B1NG3805TY;CONNECTION=NW;MONITOR=1;
"C:/Users/Owner/AppData/Local/Akamai/netsession_win.exe" --client
"C:\Program Files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe"
"C:\Program Files (x86)\Dell\Dell KM632 Wireless Keyboard Caps Lock Indicator\LaunchOSDSrv.exe"
"C:\Program Files (x86)\HP\HP Software Update\hpwuschd2.exe"
"C:\Program Files (x86)\Samsung\Kies\KiesTrayAgent.exe"
"C:\Program Files (x86)\Dell\Dell KM632 Wireless Keyboard Caps Lock Indicator\IndicatorOSD.exe"
szndesktop.exe default start
"C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"
"C:\Users\Owner\AppData\Roaming\Seznam.cz\bin\listicka-x64.exe"
\??\C:\windows\system32\conhost.exe "-107666764241251984519003368721322372575-2081942024-165801373716001182511036020099
"C:\Program Files\HP\HP Deskjet 3510 series\Bin\HPNetworkCommunicatorCom.exe" -Embedding
"C:\Program Files (x86)\Genius\Maurus\mousehid.exe"
"C:\Program Files (x86)\Genius\Maurus\trayicon.exe"
"C:\Program Files (x86)\PC Connectivity Solution\ServiceLayer.exe"
{EE3A3FC8-B478-4BE0-BBA9-AC7FEE2A0877}
{544E3088-658F-4C8C-B67C-02E893C65605}
"C:\Program Files\Windows Media Player\wmpnetwk.exe"
C:\windows\System32\svchost.exe -k LocalServicePeerNet
"C:\Program Files\Intel\TurboBoost\TurboBoost.exe"
C:\windows\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe
"C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe"
"C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe"
"C:\Program Files (x86)\Mozilla Firefox\firefox.exe"
"C:\Program Files (x86)\Mozilla Firefox\plugin-container.exe" --channel=1508.1bda7c00.234255740 "C:\windows\SysWOW64\Macromed\Flash\NPSWF32_12_0_0_44.dll" -greomni "C:\Program Files (x86)\Mozilla Firefox\omni.ja" -appomni "C:\Program Files (x86)\Mozilla Firefox\browser\omni.ja" -appdir "C:\Program Files (x86)\Mozilla Firefox\browser" E7CF176E110C211B 1508 "\\.\pipe\gecko-crash-server-pipe.1508" plugin
"C:\windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_12_0_0_44.exe" --proxy-stub-channel=Flash5840.6846C7B8.11267 --host-broker-channel=Flash5840.6846C7B8.26472 --host-pid=5840 --host-npapi-version=27 --plugin-path="C:\windows\SysWOW64\Macromed\Flash\NPSWF32_12_0_0_44.dll"
"C:\windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_12_0_0_44.exe" --channel=4528.0043F4E0.1067641437 --proxy-stub-channel=Flash5840.6846C7B8.11267 --plugin-path="C:\windows\SysWOW64\Macromed\Flash\NPSWF32_12_0_0_44.dll" --host-npapi-version=27 --type=renderer
C:\windows\system32\wbem\wmiprvse.exe
"C:\Users\Owner\Downloads\RSITx64.exe"
C:\windows\system32\DllHost.exe /Processid:{F9717507-6651-4EDB-BFF7-AE615179BCCF}

======Scheduled tasks folder======

C:\windows\tasks\Adobe Flash Player Updater.job
C:\windows\tasks\GoogleUpdateTaskUserS-1-5-21-3128138035-3014723401-4134321253-1001Core1cef2cc7f2424c1.job
C:\windows\tasks\GoogleUpdateTaskUserS-1-5-21-3128138035-3014723401-4134321253-1001UA1cef2cc817c274a.job

=========Mozilla firefox=========

ProfilePath - C:\Users\Owner\AppData\Roaming\Mozilla\Firefox\Profiles\apprcmds.default

prefs.js - "browser.startup.homepage" - "chrome://speeddial/content/speeddial.xul"

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 12.0.0.44 Plugin
"Path"=C:\windows\SysWOW64\Macromed\Flash\NPSWF32_12_0_0_44.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@java.com/DTPlugin,version=10.51.2]
"Description"=Java™ Deployment Toolkit
"Path"=C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@java.com/JavaPlugin,version=10.51.2]
"Description"=Oracle® Next Generation Java™ Plug-In
"Path"=C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@microsoft.com/GENUINE]
"Description"=
"Path"=disabled

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@microsoft.com/Lync,version=15.0]
"Description"=Microsoft Lync Plug-in for Firefox
"Path"=C:\Program Files (x86)\Mozilla Firefox\plugins\npmeetingjoinpluginoc.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0]
"Description"=Ag Player Plugin
"Path"=c:\Program Files (x86)\Microsoft Silverlight\5.1.20913.0\npctrl.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@microsoft.com/SharePoint,version=14.0]
"Description"=Microsoft SharePoint Plug-in for Firefox
"Path"=C:\PROGRA~2\MICROS~2\Office15\NPSPWRAP.DLL

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@nokia.com/EnablerPlugin]
"Description"=Nokia Suite Enabler Plugin
"Path"=C:\Program Files (x86)\Nokia\Nokia Suite\npNokiaSuiteEnabler.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@nvidia.com/3DVision]
"Description"=NVIDIA stereo images plugin for Mozilla browsers
"Path"=C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@nvidia.com/3DVisionStreaming]
"Description"=NVIDIA 3D Vision Streaming plugin for Mozilla browsers
"Path"=C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\Adobe Reader]
"Description"=Handles PDFs in-place in Firefox
"Path"=C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll


[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 12.0.0.43 Plugin
"Path"=C:\windows\system32\Macromed\Flash\NPSWF64_12_0_0_43.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@microsoft.com/GENUINE]
"Description"=
"Path"=disabled

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0]
"Description"=Ag Player Plugin
"Path"=c:\Program Files\Microsoft Silverlight\5.1.20913.0\npctrl.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@microsoft.com/SharePoint,version=14.0]
"Description"=Microsoft SharePoint Plug-in for Firefox
"Path"=C:\PROGRA~1\MICROS~3\Office15\NPSPWRAP.DLL


C:\Program Files (x86)\Mozilla Firefox\plugins\
npMeetingJoinPluginOC.dll

C:\Users\Owner\AppData\Roaming\Mozilla\Firefox\Profiles\apprcmds.default\extensions\
{0545b830-f0aa-4d7e-8820-50a4629a56fe}
{ea614400-e918-4741-9a97-7a972ff7c30b}

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{31D09BA0-12F5-4CCE-BE8A-2923E76605DA}]
Lync Browser Helper - C:\Program Files\Microsoft Office\Office15\OCHelper.dll [2013-11-15 218784]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{B4F3A835-0E21-4959-BA22-42B3008E02FF}]
Office Document Cache Handler - C:\PROGRA~1\MICROS~3\Office15\URLREDIR.DLL [2013-09-13 878296]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF}]
Microsoft SkyDrive Pro Browser Helper - C:\PROGRA~1\MICROS~3\Office15\GROOVEEX.DLL [2013-11-02 2331336]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{31D09BA0-12F5-4CCE-BE8A-2923E76605DA}]
Lync Browser Helper - C:\Program Files (x86)\Microsoft Office\Office15\OCHelper.dll [2013-11-15 153248]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
Java(tm) Plug-In SSV Helper - C:\Program Files (x86)\Java\jre7\bin\ssv.dll [2013-12-18 462760]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{8D10F6C4-0E01-4BD4-8601-11AC1FDF8126}]
CIESpeechBHO Class - C:\Program Files (x86)\Dell Wireless\Bluetooth Suite\IEPlugIn.dll [2011-05-20 60576]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{B4F3A835-0E21-4959-BA22-42B3008E02FF}]
Office Document Cache Handler - C:\PROGRA~2\MICROS~2\Office15\URLREDIR.DLL [2013-09-13 705240]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF}]
Microsoft SkyDrive Pro Browser Helper - C:\PROGRA~2\MICROS~2\Office15\GROOVEEX.DLL [2013-11-02 1727176]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll [2013-12-18 171944]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"IgfxTray"=C:\windows\system32\igfxtray.exe [2011-08-04 167704]
"HotKeysCmds"=C:\windows\system32\hkcmd.exe [2011-08-04 392472]
"Persistence"=C:\windows\system32\igfxpers.exe [2011-08-04 416024]
"RTHDVCPL"=C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [2011-05-25 7214696]
"IntelTBRunOnce"=wscript.exe //b //nologo C:\Program Files\Intel\TurboBoost\RunTBGadgetOnce.vbs []
"Apoint"=C:\Program Files\DellTPad\Apoint.exe [2011-04-12 609144]
"egui"=C:\Program Files\ESET\ESET Smart Security\egui.exe [2013-09-12 5618456]
"NvBackend"=C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2013-12-10 2279712]
"ShadowPlay"=C:\windows\system32\nvspcap64.dll [2013-12-10 1100248]
"Cm108Sound"=C:\windows\syswow64\RunDll32.exe [2009-07-14 44544]
"AtherosBtStack"=C:\Program Files (x86)\Dell Wireless\Bluetooth Suite\BtvStack.exe [2011-05-20 627360]
"AthBtTray"=C:\Program Files (x86)\Dell Wireless\Bluetooth Suite\AthBtTray.exe [2011-05-20 379552]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"uTorrent"=C:\Users\Owner\AppData\Roaming\uTorrent\updates\3.3.2_30488.exe [2014-02-09 905296]
"AlcoholAutomount"=C:\Program Files (x86)\Alcohol Soft\Alcohol 120\AxAutoMntSrv.exe [2012-01-05 75624]
"Alcohol.exe Autorun"=C:\Program Files (x86)\Alcohol Soft\Alcohol 120\Alcohol.exe [2013-09-26 1843016]
"NokiaSuite.exe"=C:\Program Files (x86)\Nokia\Nokia Suite\NokiaSuite.exe [2013-10-02 1090912]
"KiesPreload"=C:\Program Files (x86)\Samsung\Kies\Kies.exe [2013-12-11 1564528]
"KiesAirMessage"=C:\Program Files (x86)\Samsung\Kies\KiesAirMessage.exe [2013-10-30 578560]
"Akamai NetSession Interface"=C:\Users\Owner\AppData\Local\Akamai\netsession_win.exe [2013-06-05 4489472]
"eblueMouseRun"=C:\Program Files (x86)\EBLUE MOUSE\ebluemon.exe [2013-11-15 3637248]
"cz.seznam.software.autoupdate"=C:\Users\Owner\AppData\Roaming\Seznam.cz\szninstall.exe [2013-05-16 1062472]
"cz.seznam.software.szndesktop"=C:\Users\Owner\AppData\Roaming\Seznam.cz\bin\wszndesktop.exe [2013-04-12 92664]
"HP Deskjet 3510 series (NET)"=C:\Program Files\HP\HP Deskjet 3510 series\Bin\ScanToPCActivationApp.exe [2012-10-17 2573416]

[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]
"NUSB3MON"=C:\Program Files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe [2010-11-17 113288]
"Chicony_OSD"=C:\Program Files (x86)\Dell\Dell KM632 Wireless Keyboard Caps Lock Indicator\LaunchOSDSrv.exe [2011-01-12 53248]
"Adobe ARM"=C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2013-11-21 959904]
"HP Software Update"=C:\Program Files (x86)\Hp\HP Software Update\HPWuSchd2.exe [2011-10-28 49208]
""= []
"KiesTrayAgent"=C:\Program Files (x86)\Samsung\Kies\KiesTrayAgent.exe [2013-12-11 311152]
"APSDaemon"=C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [2013-04-21 59720]
"QuickTime Task"=C:\Program Files (x86)\QuickTime\QTTask.exe [2013-05-01 421888]
"SunJavaUpdateSched"=C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [2013-07-02 254336]
"seznam-listicka-distribuce"=C:\Program Files (x86)\Seznam.cz\distribution\szninstall.exe [2013-05-16 1062472]
"Maurus"=C:\Program Files (x86)\Genius\Maurus\mousehid.exe [2011-11-14 300544]

C:\Users\Owner\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
Monitor technologie Intel(R) Turbo Boost 2.0.lnk - C:\Program Files\Intel\TurboBoost\SignalIslandUi.exe
Sledovat výstrahy inkoustu - HP Deskjet 3510 series (Síť).lnk - C:\windows\system32\RunDll32.exe

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
"AppInit_DLLs"="C:\Windows\System32\nvinitx.dll"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\igfxcui]
C:\windows\system32\igfxdev.dll [2011-07-19 390144]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED}

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=credssp.dll

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Wdf01000.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Wdf01000.sys]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"DisableLockWorkstation"=0
"DisableChangePassword"=0

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorAdmin"=5
"ConsentPromptBehaviorUser"=3
"EnableUIADesktopToggle"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1
"HideFastUserSwitching"=0

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDrives"=0

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"EnableShellExecuteHooks"=1
"NoDrives"=0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.msadpcm"=msadp32.acm
"midimapper"=midimap.dll
"wavemapper"=msacm32.drv
"VIDC.UYVY"=msyuv.dll
"VIDC.YUY2"=msyuv.dll
"VIDC.YVYU"=msyuv.dll
"VIDC.IYUV"=iyuv_32.dll
"vidc.i420"=iyuv_32.dll
"VIDC.YVU9"=tsbyuv.dll
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"MSVideo8"=VfWWDM32.dll
"wave1"=wdmaud.drv
"mixer1"=wdmaud.drv
"midi1"=wdmaud.drv
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv
"wave2"=wdmaud.drv
"midi2"=wdmaud.drv
"mixer2"=wdmaud.drv
"wave3"=wdmaud.drv
"midi3"=wdmaud.drv
"mixer3"=wdmaud.drv
"aux1"=wdmaud.drv
"wave4"=wdmaud.drv
"midi4"=wdmaud.drv
"mixer4"=wdmaud.drv
"wave5"=wdmaud.drv
"mixer5"=wdmaud.drv
"midi5"=wdmaud.drv
"wave6"=wdmaud.drv
"mixer6"=wdmaud.drv
"midi6"=wdmaud.drv
"wave7"=wdmaud.drv
"mixer7"=wdmaud.drv
"midi7"=wdmaud.drv

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1

======List of files/folders created in the last 1 month======

2014-02-12 20:24:22 ----D---- C:\rsit
2014-02-12 20:24:22 ----D---- C:\Program Files\trend micro
2014-02-12 19:42:36 ----SHD---- C:\$RECYCLE.BIN
2014-02-12 19:41:38 ----D---- C:\windows\temp
2014-02-12 19:40:59 ----A---- C:\ComboFix.txt
2014-02-12 16:35:36 ----A---- C:\windows\zip.exe
2014-02-12 16:35:36 ----A---- C:\windows\SWSC.exe
2014-02-12 16:35:36 ----A---- C:\windows\SWREG.exe
2014-02-12 16:35:36 ----A---- C:\windows\sed.exe
2014-02-12 16:35:36 ----A---- C:\windows\PEV.exe
2014-02-12 16:35:36 ----A---- C:\windows\NIRCMD.exe
2014-02-12 16:35:36 ----A---- C:\windows\MBR.exe
2014-02-12 16:35:36 ----A---- C:\windows\grep.exe
2014-02-12 16:33:37 ----D---- C:\Qoobox
2014-02-12 16:33:21 ----D---- C:\windows\erdnt
2014-02-12 14:36:36 ----D---- C:\Config.Msi
2014-02-12 14:32:47 ----A---- C:\windows\SYSWOW64\vbscript.dll
2014-02-12 14:32:47 ----A---- C:\windows\system32\vbscript.dll
2014-02-12 14:31:58 ----A---- C:\windows\SYSWOW64\msrating.dll
2014-02-12 14:31:58 ----A---- C:\windows\SYSWOW64\ieui.dll
2014-02-12 14:31:58 ----A---- C:\windows\system32\msrating.dll
2014-02-12 14:31:58 ----A---- C:\windows\system32\ieui.dll
2014-02-12 14:31:57 ----A---- C:\windows\SYSWOW64\msfeeds.dll
2014-02-12 14:31:57 ----A---- C:\windows\system32\msfeeds.dll
2014-02-12 14:31:57 ----A---- C:\windows\system32\jsproxy.dll
2014-02-12 14:31:57 ----A---- C:\windows\system32\iernonce.dll
2014-02-12 14:31:57 ----A---- C:\windows\system32\ieetwcollectorres.dll
2014-02-12 14:31:57 ----A---- C:\windows\system32\ie4uinit.exe
2014-02-12 14:31:56 ----A---- C:\windows\SYSWOW64\jsproxy.dll
2014-02-12 14:31:56 ----A---- C:\windows\SYSWOW64\ieUnatt.exe
2014-02-12 14:31:56 ----A---- C:\windows\SYSWOW64\iesetup.dll
2014-02-12 14:31:56 ----A---- C:\windows\SYSWOW64\iernonce.dll
2014-02-12 14:31:56 ----A---- C:\windows\SYSWOW64\ieetwproxystub.dll
2014-02-12 14:31:56 ----A---- C:\windows\system32\ieUnatt.exe
2014-02-12 14:31:56 ----A---- C:\windows\system32\iesetup.dll
2014-02-12 14:31:56 ----A---- C:\windows\system32\ieetwproxystub.dll
2014-02-12 14:31:56 ----A---- C:\windows\system32\ieetwcollector.exe
2014-02-12 14:31:55 ----A---- C:\windows\SYSWOW64\wininet.dll
2014-02-12 14:31:55 ----A---- C:\windows\SYSWOW64\jscript9diag.dll
2014-02-12 14:31:55 ----A---- C:\windows\SYSWOW64\iertutil.dll
2014-02-12 14:31:55 ----A---- C:\windows\SYSWOW64\ieapfltr.dll
2014-02-12 14:31:55 ----A---- C:\windows\system32\mshtml.dll
2014-02-12 14:31:55 ----A---- C:\windows\system32\jscript9diag.dll
2014-02-12 14:31:55 ----A---- C:\windows\system32\iertutil.dll
2014-02-12 14:31:55 ----A---- C:\windows\system32\ieapfltr.dll
2014-02-12 14:31:54 ----A---- C:\windows\SYSWOW64\urlmon.dll
2014-02-12 14:31:54 ----A---- C:\windows\system32\wininet.dll
2014-02-12 14:31:54 ----A---- C:\windows\system32\urlmon.dll
2014-02-12 14:31:54 ----A---- C:\windows\system32\ieframe.dll
2014-02-12 14:31:53 ----A---- C:\windows\SYSWOW64\ieframe.dll
2014-02-12 14:31:52 ----A---- C:\windows\SYSWOW64\mshtml.dll
2014-02-12 14:31:52 ----A---- C:\windows\SYSWOW64\jscript9.dll
2014-02-12 14:31:52 ----A---- C:\windows\system32\jscript9.dll
2014-02-12 13:41:52 ----A---- C:\windows\SYSWOW64\msxml3r.dll
2014-02-12 13:41:52 ----A---- C:\windows\SYSWOW64\msxml3.dll
2014-02-12 13:41:52 ----A---- C:\windows\system32\msxml3r.dll
2014-02-12 13:41:52 ----A---- C:\windows\system32\msxml3.dll
2014-02-12 13:41:42 ----A---- C:\windows\SYSWOW64\secproc_ssp_isv.dll
2014-02-12 13:41:42 ----A---- C:\windows\SYSWOW64\secproc_ssp.dll
2014-02-12 13:41:42 ----A---- C:\windows\SYSWOW64\secproc_isv.dll
2014-02-12 13:41:42 ----A---- C:\windows\SYSWOW64\secproc.dll
2014-02-12 13:41:42 ----A---- C:\windows\SYSWOW64\RMActivate_ssp_isv.exe
2014-02-12 13:41:42 ----A---- C:\windows\SYSWOW64\RMActivate_ssp.exe
2014-02-12 13:41:42 ----A---- C:\windows\SYSWOW64\RMActivate_isv.exe
2014-02-12 13:41:42 ----A---- C:\windows\SYSWOW64\RMActivate.exe
2014-02-12 13:41:42 ----A---- C:\windows\SYSWOW64\msdrm.dll
2014-02-12 13:41:42 ----A---- C:\windows\system32\secproc_ssp_isv.dll
2014-02-12 13:41:42 ----A---- C:\windows\system32\secproc_ssp.dll
2014-02-12 13:41:42 ----A---- C:\windows\system32\secproc_isv.dll
2014-02-12 13:41:42 ----A---- C:\windows\system32\secproc.dll
2014-02-12 13:41:42 ----A---- C:\windows\system32\RMActivate_ssp_isv.exe
2014-02-12 13:41:42 ----A---- C:\windows\system32\RMActivate_ssp.exe
2014-02-12 13:41:42 ----A---- C:\windows\system32\RMActivate_isv.exe
2014-02-12 13:41:42 ----A---- C:\windows\system32\RMActivate.exe
2014-02-12 13:41:42 ----A---- C:\windows\system32\msdrm.dll
2014-02-12 13:41:38 ----A---- C:\windows\SYSWOW64\mstscax.dll
2014-02-12 13:41:38 ----A---- C:\windows\system32\mstscax.dll
2014-02-12 13:41:37 ----A---- C:\windows\SYSWOW64\d3d10warp.dll
2014-02-12 13:41:37 ----A---- C:\windows\system32\d3d10warp.dll
2014-02-12 13:41:37 ----A---- C:\windows\system32\d2d1.dll
2014-02-12 13:41:36 ----A---- C:\windows\SYSWOW64\d2d1.dll
2014-02-09 19:17:31 ----D---- C:\Users\Owner\AppData\Roaming\KYE 7Key
2014-02-09 19:17:29 ----D---- C:\Program Files (x86)\Genius
2014-02-09 19:17:29 ----A---- C:\windows\unins000.exe
2014-02-09 19:17:29 ----A---- C:\windows\unins000.dat
2014-02-07 11:24:39 ----D---- C:\Program Files (x86)\Mozilla Firefox
2014-01-31 17:15:10 ----D---- C:\Program Files\Microsoft.NET
2014-01-30 21:01:44 ----D---- C:\Program Files (x86)\Microsoft Visual Studio 8
2014-01-30 20:39:50 ----D---- C:\Program Files\Common Files\DESIGNER
2014-01-30 20:39:14 ----D---- C:\Program Files (x86)\Microsoft SQL Server
2014-01-30 20:38:59 ----D---- C:\ProgramData\regid.1991-06.com.microsoft
2014-01-30 20:38:31 ----D---- C:\windows\PCHEALTH
2014-01-30 20:38:31 ----D---- C:\Program Files\Microsoft SQL Server
2014-01-30 20:36:12 ----D---- C:\Program Files\Microsoft Analysis Services
2014-01-30 20:36:12 ----D---- C:\Program Files (x86)\Microsoft Analysis Services
2014-01-30 20:35:56 ----D---- C:\Program Files (x86)\Microsoft Office
2014-01-30 20:35:47 ----D---- C:\Program Files\Microsoft Office
2014-01-30 20:35:45 ----D---- C:\ProgramData\Microsoft Help
2014-01-30 20:35:13 ----RD---- C:\MSOCache
2014-01-30 18:54:03 ----D---- C:\Program Files (x86)\Gophoto.it
2014-01-30 18:37:13 ----AH---- C:\windows\SYSWOW64\ezsidmv.dat
2014-01-30 18:35:20 ----D---- C:\Users\Owner\AppData\Roaming\_MDLogs
2014-01-30 18:35:09 ----D---- C:\ProgramData\Easybits
2014-01-30 18:34:42 ----A---- C:\windows\SYSWOW64\ezsvc7x.dll
2014-01-30 18:34:42 ----A---- C:\windows\SYSWOW64\ezSharedSvcHost.exe
2014-01-30 18:34:41 ----A---- C:\windows\SYSWOW64\ezUninst.exe
2014-01-30 18:34:41 ----A---- C:\windows\SYSWOW64\ezseng.exe
2014-01-30 18:34:41 ----A---- C:\windows\SYSWOW64\ezMAPIHelper.exe
2014-01-30 18:29:21 ----D---- C:\Users\Owner\AppData\Roaming\newnext.me
2014-01-30 18:28:13 ----D---- C:\Program Files (x86)\Seznam.cz
2014-01-30 18:27:57 ----D---- C:\Users\Owner\AppData\Roaming\Seznam.cz
2014-01-30 18:27:45 ----D---- C:\Users\Owner\AppData\Roaming\GoforFiles
2014-01-30 18:27:45 ----D---- C:\Program Files (x86)\GoforFiles
2014-01-23 12:45:11 ----D---- C:\Program Files (x86)\EBLUE MOUSE
2014-01-22 08:52:12 ----A---- C:\windows\system32\drivers\ssudserd.sys
2014-01-22 08:52:10 ----A---- C:\windows\system32\drivers\ssudmdm.sys
2014-01-22 08:52:10 ----A---- C:\windows\system32\drivers\ssudbus.sys
2014-01-15 21:22:59 ----A---- C:\windows\SYSWOW64\javaws.exe
2014-01-15 21:22:56 ----A---- C:\windows\SYSWOW64\WindowsAccessBridge-32.dll
2014-01-15 21:22:56 ----A---- C:\windows\SYSWOW64\javaw.exe
2014-01-15 21:22:56 ----A---- C:\windows\SYSWOW64\java.exe
2014-01-15 15:36:42 ----A---- C:\windows\system32\drivers\usbuhci.sys
2014-01-15 15:36:42 ----A---- C:\windows\system32\drivers\usbport.sys
2014-01-15 15:36:42 ----A---- C:\windows\system32\drivers\usbohci.sys
2014-01-15 15:36:42 ----A---- C:\windows\system32\drivers\usbhub.sys
2014-01-15 15:36:42 ----A---- C:\windows\system32\drivers\usbehci.sys
2014-01-15 15:36:42 ----A---- C:\windows\system32\drivers\usbd.sys
2014-01-15 15:36:42 ----A---- C:\windows\system32\drivers\usbccgp.sys
2014-01-15 15:36:41 ----A---- C:\windows\system32\win32k.sys
2014-01-15 15:36:40 ----A---- C:\windows\system32\drivers\tcpip.sys
2014-01-15 15:36:40 ----A---- C:\windows\system32\drivers\netio.sys
2014-01-15 15:36:40 ----A---- C:\windows\system32\drivers\FWPKCLNT.SYS

======List of files/folders modified in the last 1 month======

2014-02-12 20:24:22 ----RD---- C:\Program Files
2014-02-12 20:22:30 ----D---- C:\Users\Owner\AppData\Roaming\uTorrent
2014-02-12 20:09:48 ----D---- C:\windows\system32\config
2014-02-12 20:08:21 ----A---- C:\windows\SYSWOW64\log.txt
2014-02-12 20:05:55 ----D---- C:\ProgramData\NVIDIA
2014-02-12 19:47:45 ----D---- C:\Program Files\totalcmd
2014-02-12 19:41:38 ----AD---- C:\Windows
2014-02-12 19:11:09 ----A---- C:\windows\system.ini
2014-02-12 19:00:28 ----D---- C:\windows\SYSWOW64\drivers
2014-02-12 19:00:28 ----D---- C:\windows\SysWOW64
2014-02-12 19:00:28 ----D---- C:\windows\AppPatch
2014-02-12 19:00:27 ----D---- C:\Program Files (x86)\Common Files
2014-02-12 18:56:29 ----D---- C:\windows\system32\drivers
2014-02-12 18:52:24 ----D---- C:\windows\Prefetch
2014-02-12 17:00:48 ----D---- C:\windows\system32\drivers\etc
2014-02-12 15:24:25 ----D---- C:\windows\Microsoft.NET
2014-02-12 15:21:39 ----RSD---- C:\windows\assembly
2014-02-12 14:44:53 ----D---- C:\windows\winsxs
2014-02-12 14:42:57 ----D---- C:\windows\SYSWOW64\cs-CZ
2014-02-12 14:42:57 ----D---- C:\windows\system32\cs-CZ
2014-02-12 14:42:57 ----D---- C:\windows\System32
2014-02-12 14:42:56 ----D---- C:\Program Files\Internet Explorer
2014-02-12 14:42:56 ----D---- C:\Program Files (x86)\Internet Explorer
2014-02-12 14:42:31 ----D---- C:\windows\system32\MRT
2014-02-12 14:38:58 ----D---- C:\windows\debug
2014-02-12 14:38:56 ----A---- C:\windows\system32\MRT.exe
2014-02-12 14:38:07 ----SHD---- C:\windows\Installer
2014-02-12 14:35:01 ----A---- C:\windows\SYSWOW64\PerfStringBackup.INI
2014-02-12 14:34:51 ----D---- C:\windows\inf
2014-02-12 14:34:47 ----A---- C:\windows\system32\PerfStringBackup.INI
2014-02-12 14:33:56 ----D---- C:\windows\system32\catroot
2014-02-12 14:32:18 ----D---- C:\windows\system32\catroot2
2014-02-12 14:31:41 ----SHD---- C:\System Volume Information
2014-02-11 20:57:02 ----D---- C:\Filmy
2014-02-09 19:19:09 ----D---- C:\Program Files (x86)\Mozilla Maintenance Service
2014-02-09 19:17:29 ----RD---- C:\Program Files (x86)
2014-02-07 12:51:10 ----A---- C:\windows\SYSWOW64\FlashPlayerApp.exe
2014-02-02 09:49:34 ----D---- C:\ProgramData\Atheros
2014-02-02 09:48:57 ----AD---- C:\Users
2014-02-01 06:49:00 ----D---- C:\windows\system32\wdi
2014-01-31 20:47:15 ----D---- C:\ProgramData\PCDr
2014-01-31 17:15:10 ----D---- C:\Program Files (x86)\Microsoft.NET
2014-01-31 17:08:04 ----A---- C:\windows\win.ini
2014-01-30 21:03:44 ----RSD---- C:\windows\Fonts
2014-01-30 21:00:49 ----D---- C:\windows\ShellNew
2014-01-30 21:00:16 ----D---- C:\Program Files\Common Files\Microsoft Shared
2014-01-30 20:41:25 ----D---- C:\windows\system32\DriverStore
2014-01-30 20:41:01 ----D---- C:\windows\system32\Tasks
2014-01-30 20:39:50 ----D---- C:\Program Files\Common Files
2014-01-30 20:38:59 ----D---- C:\ProgramData
2014-01-30 20:38:31 ----SD---- C:\ProgramData\Microsoft
2014-01-30 20:37:32 ----D---- C:\Program Files\Common Files\System
2014-01-30 19:33:56 ----D---- C:\windows\Tasks
2014-01-24 07:31:01 ----SD---- C:\Users\Owner\AppData\Roaming\Microsoft
2014-01-23 12:44:56 ----D---- C:\Install
2014-01-15 21:23:12 ----D---- C:\ProgramData\Oracle
2014-01-15 21:22:56 ----D---- C:\Program Files (x86)\Java

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 epfwwfp;epfwwfp; C:\windows\system32\DRIVERS\epfwwfp.sys [2013-09-17 62136]
R0 nvpciflt;nvpciflt; C:\windows\system32\DRIVERS\nvpciflt.sys [2013-12-19 32544]
R0 rdyboost;ReadyBoost; C:\windows\System32\drivers\rdyboost.sys [2010-11-21 213888]
R0 sptd;sptd; C:\windows\System32\Drivers\sptd.sys [2013-10-28 381440]
R1 eamonm;eamonm; C:\windows\system32\DRIVERS\eamonm.sys [2013-09-17 239320]
R1 ehdrv;ehdrv; C:\windows\system32\DRIVERS\ehdrv.sys [2013-09-17 168256]
R1 EpfwLWF;Epfw NDIS LightWeight Filter; C:\windows\system32\DRIVERS\EpfwLWF.sys [2013-09-17 44120]
R1 nvkflt;nvkflt; C:\windows\system32\DRIVERS\nvkflt.sys [2013-12-19 300320]
R1 vwififlt;Virtual WiFi Filter Driver; C:\windows\system32\DRIVERS\vwififlt.sys [2009-07-14 59904]
R2 epfw;epfw; C:\windows\system32\DRIVERS\epfw.sys [2013-09-17 220232]
R2 TurboB;Turbo Boost UI Monitor driver; C:\windows\system32\DRIVERS\TurboB.sys [2010-11-29 16120]
R3 ApfiltrService;Alps Touch Pad Filter Driver for Windows x64; C:\windows\system32\DRIVERS\Apfiltr.sys [2011-05-12 363856]
R3 AthBTPort;Atheros Virtual Bluetooth Class; C:\windows\system32\DRIVERS\btath_flt.sys [2011-05-20 36000]
R3 athr;Dell Extensible Wireless LAN device driver; C:\windows\system32\DRIVERS\athrx.sys [2011-04-21 2727424]
R3 BTATH_A2DP;Bluetooth A2DP Audio Driver; C:\windows\system32\drivers\btath_a2dp.sys [2011-05-20 298656]
R3 BTATH_BUS;Atheros Bluetooth Bus; C:\windows\system32\DRIVERS\btath_bus.sys [2011-05-20 29344]
R3 BTATH_HCRP;Bluetooth HCRP Server driver; C:\windows\system32\DRIVERS\btath_hcrp.sys [2011-05-20 201376]
R3 BTATH_LWFLT;Bluetooth LWFLT Device; C:\windows\system32\DRIVERS\btath_lwflt.sys [2011-05-20 55456]
R3 BTATH_RCP;Bluetooth AVRCP Device; C:\windows\system32\DRIVERS\btath_rcp.sys [2011-05-20 154272]
R3 BtFilter;BtFilter; C:\windows\system32\DRIVERS\btfilter.sys [2011-05-20 282272]
R3 BthEnum;Ovladač pro Bluetooth Request Block; C:\windows\system32\DRIVERS\BthEnum.sys [2009-07-14 41984]
R3 BthMtpEnum;Modul pro výčet zařízení Bluetooth MTP; C:\windows\system32\DRIVERS\BthMtpEnum.sys [2009-07-14 64512]
R3 BthPan;Zařízení Bluetooth (síť PAN); C:\windows\system32\DRIVERS\bthpan.sys [2013-07-02 118784]
R3 BTHUSB;Ovladač rozhraní USB radiostanice Bluetooth; C:\windows\System32\Drivers\BTHUSB.sys [2013-07-02 80384]
R3 igfx;igfx; C:\windows\system32\DRIVERS\igdkmd64.sys [2011-07-19 12287456]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\windows\system32\drivers\RTKVHD64.sys [2011-05-31 2886888]
R3 MEIx64;Intel(R) Management Engine Interface; C:\windows\system32\DRIVERS\HECIx64.sys [2010-10-19 56344]
R3 nusb3hub;Renesas Electronics USB 3.0 Hub Driver; C:\windows\system32\DRIVERS\nusb3hub.sys [2011-02-10 82432]
R3 nusb3xhc;Renesas Electronics USB 3.0 Host Controller Driver; C:\windows\system32\DRIVERS\nusb3xhc.sys [2011-02-10 181760]
R3 nvvad_WaveExtensible;NVIDIA Virtual Audio Device (Wave Extensible) (WDM); C:\windows\system32\drivers\nvvad64v.sys [2013-12-05 39200]
R3 RFCOMM;Zařízení Bluetooth (RFCOMM protokol TDI); C:\windows\system32\DRIVERS\rfcomm.sys [2009-07-14 158720]
R3 RTL8167;Realtek 8167 NT Driver; C:\windows\system32\DRIVERS\Rt64win7.sys [2011-06-10 539240]
R3 StillCam;Ovladač digitálního fotoaparátu pro sériový port; C:\windows\system32\DRIVERS\serscan.sys [2009-07-14 12288]
R3 vwifimp;Microsoft Virtual WiFi Miniport Service; C:\windows\system32\DRIVERS\vwifimp.sys [2009-07-14 17920]
S3 ATHDFU;Atheros Valkyrie USB BootROM; C:\windows\System32\Drivers\AthDfu.sys [2011-05-20 51872]
S3 BridgeMP;@%SystemRoot%\system32\bridgeres.dll,-1; C:\windows\system32\DRIVERS\bridge.sys [2013-07-01 95232]
S3 BTHPORT;Ovladač portu Bluetooth; C:\windows\System32\Drivers\BTHport.sys [2013-07-02 552960]
S3 catchme;catchme; \??\C:\ComboFix\catchme.sys []
S3 dg_ssudbus;SAMSUNG Mobile USB Composite Device Driver (DEVGURU Ver.); C:\windows\system32\DRIVERS\ssudbus.sys [2014-01-22 108800]
S3 dgderdrv;dgderdrv; C:\windows\System32\drivers\dgderdrv.sys []
S3 Huawei;HUAWEI Mobile Connect - USB Smart Card Reader; C:\windows\system32\DRIVERS\ewdcsc.sys [2009-12-15 29696]
S3 hwdatacard;Huawei DataCard USB Modem and USB Serial; C:\windows\system32\DRIVERS\ewusbmdm.sys [2009-12-15 117248]
S3 hwusbdev;Huawei DataCard USB PNP Device; C:\windows\system32\DRIVERS\ewusbdev.sys [2009-12-15 114304]
S3 nmwcd;Nokia USB Phone Parent Driver; C:\windows\system32\drivers\ccdcmbx64.sys [2013-01-23 19968]
S3 nmwcdc;Nokia USB Communication Driver; C:\windows\system32\drivers\ccdcmbox64.sys [2013-01-23 27136]
S3 NVHDA;Service for NVIDIA High Definition Audio Driver; C:\windows\system32\drivers\nvhda64v.sys [2012-07-03 189288]
S3 pccsmcfd;PCCS Mode Change Filter Driver; C:\windows\system32\DRIVERS\pccsmcfdx64.sys [2012-10-17 26112]
S3 pciide;pciide; C:\windows\system32\drivers\pciide.sys [2009-07-14 12352]
S3 RdpVideoMiniport;Remote Desktop Video Miniport Driver; C:\windows\System32\drivers\rdpvideominiport.sys [2012-08-23 19456]
S3 RSUSBSTOR;RtsUStor.Sys Realtek USB Card Reader; C:\windows\System32\Drivers\RtsUStor.sys [2010-12-01 250984]
S3 ssudmdm;SAMSUNG Mobile USB Modem Drivers (DEVGURU Ver.); C:\windows\system32\DRIVERS\ssudmdm.sys [2014-01-22 206080]
S3 ssudserd;SAMSUNG Mobile USB Diagnostic Serial Port(DEVGURU Ver.); C:\windows\system32\DRIVERS\ssudserd.sys [2014-01-22 206080]
S3 TsUsbFlt;TsUsbFlt; C:\windows\system32\drivers\tsusbflt.sys [2013-10-02 56832]
S3 TsUsbGD;Remote Desktop Generic USB Device; C:\windows\system32\drivers\TsUsbGD.sys [2012-08-23 30208]
S3 upperdev;upperdev; C:\windows\system32\DRIVERS\usbser_lowerfltx64.sys [2013-01-23 9216]
S3 USBPNPA;USB PnP Sound Device Interface; C:\windows\system32\drivers\CM10864.sys [2013-02-01 4333568]
S3 usbrndis6;Adaptér USB RNDIS6; C:\windows\system32\DRIVERS\usb80236.sys [2013-07-02 19968]
S3 usbser;USB Modem Driver; C:\windows\system32\DRIVERS\usbser.sys [2013-08-29 33280]
S3 UsbserFilt;UsbserFilt; C:\windows\system32\DRIVERS\usbser_lowerfltjx64.sys [2013-01-23 9216]
S3 WinUsb;WinUsb; C:\windows\system32\DRIVERS\WinUsb.sys [2010-11-21 41984]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 AdobeARMservice;Adobe Acrobat Update Service; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [2013-12-18 65432]
R2 AERTFilters;Andrea RT Filters Service; C:\Program Files\Realtek\Audio\HDA\AERTSr64.exe [2009-11-17 98208]
R2 Atheros Bt&Wlan Coex Agent;Atheros Bt&Wlan Coex Agent; C:\Program Files (x86)\Dell Wireless\Bluetooth Suite\Ath_CoexAgent.exe [2011-05-20 146592]
R2 AtherosSvc;AtherosSvc; C:\Program Files (x86)\Dell Wireless\Bluetooth Suite\adminservice.exe [2011-05-20 80032]
R2 ekrn;ESET Service; C:\Program Files\ESET\ESET Smart Security\x86\ekrn.exe [2013-09-12 1337752]
R2 ezSharedSvc;Easybits Services for Windows; C:\windows\syswow64\ezSharedSvcHost.exe [2013-07-25 517632]
R2 LMS;Intel(R) Management and Security Application Local Management Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe [2010-12-20 325656]
R2 NvNetworkService;NVIDIA Network Service; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [2013-12-10 1494304]
R2 NvStreamSvc;NVIDIA Streamer Service; C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [2013-12-10 15129376]
R2 nvsvc;NVIDIA Display Driver Service; C:\windows\system32\nvvsvc.exe [2013-12-19 922912]
R2 OSDSvc;ChiconyOSDService; C:\Program Files (x86)\Dell\Dell KM632 Wireless Keyboard Caps Lock Indicator\OSDSrv.exe [2010-12-01 176128]
R2 StarWindServiceAE;StarWind AE Service; C:\Program Files (x86)\Alcohol Soft\Alcohol 120\StarWind\StarWindServiceAE.exe [2009-12-23 370688]
R2 Stereo Service;NVIDIA Stereoscopic 3D Driver Service; C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe [2013-12-19 411936]
R2 UNS;Intel(R) Management and Security Application User Notification Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe [2010-12-20 2656280]
R3 ServiceLayer;ServiceLayer; C:\Program Files (x86)\PC Connectivity Solution\ServiceLayer.exe [2013-04-18 737616]
R3 TurboBoost;Intel(R) Turbo Boost Technology Monitor 2.0; C:\Program Files\Intel\TurboBoost\TurboBoost.exe [2010-11-29 149504]
S2 AxAutoMntSrv;Alcohol Virtual Drive Auto-mount Service; C:\Program Files (x86)\Alcohol Soft\Alcohol 120\AxAutoMntSrv.exe [2012-01-05 75624]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2013-09-11 105144]
S2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64; C:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2013-09-11 124088]
S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service; C:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2014-02-07 257928]
S3 aspnet_state;Stavová služba ASP.NET; C:\windows\Microsoft.NET\Framework64\v4.0.30319\aspnet_state.exe [2013-09-11 51808]
S3 IEEtwCollectorService;@%SystemRoot%\system32\ieetwcollectorres.dll,-1000; C:\windows\system32\IEEtwCollector.exe [2014-02-06 111616]
S3 MozillaMaintenance;Mozilla Maintenance Service; C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe [2014-02-07 118896]
S3 ose64;Office 64 Source Engine; C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2012-12-08 178760]
S3 osppsvc;Office Software Protection Platform; C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE [2012-10-01 5132888]
S3 WatAdminSvc;@%SystemRoot%\system32\Wat\WatUX.exe,-601; C:\windows\system32\Wat\WatAdminSvc.exe [2013-10-14 1255736]
S4 NetMsmqActivator;@c:\windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8195; c:\windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2013-09-11 139856]
S4 NetPipeActivator;@c:\windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8197; c:\windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2013-09-11 139856]
S4 NetTcpActivator;@c:\windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8199; c:\windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2013-09-11 139856]

-----------------EOF-----------------
Nahoru
Avatar uživatele
vyosek
VIP
VIP
Příspěvky: 56365
Registrován: 07 Lis 2006 15:24
Místo/Bydliště: Šalingrad - Brno

Re: Prosím o kontrolu logu z ComboFix

#6 Příspěvek od vyosek »

A proc sem ted ten RSIT davate, kdyz jsem napsal, ze RSIT po spustenem ComboFixu je zcela zbytecny...

Naopak jsem se ptal, jestli s CF umite, pripadne kdo Vam jej doporucil...

A jeste bych se zeptal, jestli pouzivate legalni system?
"Kdo víno má a nepije,kdo hrozny má a nejí je, kdo ženu má a nelíbá, kdo zábavě se vyhýbá, na toho vemte bič a hůl, to není člověk, to je vůl."
Člen Obrázek od 1. února 2011.
Nahoru
martafan
Návštěvník
Návštěvník
Příspěvky: 34
Registrován: 12 Ún 2014 19:44

Re: Prosím o kontrolu logu z ComboFix

#7 Příspěvek od martafan »

JJ, pouzivam windows7x64 zcela legalni - koupil jsem notase dell inspiron se systemem, dal jsem za nej 17.000. Mam i legalni antivir eset 7 na čtyri kompy.
S combofix moc neumim, tak jsem dal radeji na vasi radu. Nezlobte se, nejsem moc zbehly s compem.
Nahoru
martafan
Návštěvník
Návštěvník
Příspěvky: 34
Registrován: 12 Ún 2014 19:44

Re: Prosím o kontrolu logu z ComboFix

#8 Příspěvek od martafan »

Znamená to, že je ted comp čistý?
Nahoru
Avatar uživatele
vyosek
VIP
VIP
Příspěvky: 56365
Registrován: 07 Lis 2006 15:24
Místo/Bydliště: Šalingrad - Brno

Re: Prosím o kontrolu logu z ComboFix

#9 Příspěvek od vyosek »

martafan napsal:Znamená to, že je ted comp čistý?
Dle ceho tak usuzujete :???: :???:

Pisete, ze nejste zkuseny s PC, ale spustite tam utilitu urcenou jen profesionalum a zkusenym lidem z oblasti malware :?:

:arrow: Stahnete AdwCleaner http://general-changelog-team.fr/fr/dow ... adwcleaner
  • Ulozte nejlepe na plochu
  • Ukoncete vsechny programy
  • Kliknete na Scan a nasledne Clean
  • Probehne oprava, restart PC a pak se objevi log, pripadne bude ulozen ve slozce c:\AdwCleaner\AdwCleaner[S?].txt, ten sem vlozte
"Kdo víno má a nepije,kdo hrozny má a nejí je, kdo ženu má a nelíbá, kdo zábavě se vyhýbá, na toho vemte bič a hůl, to není člověk, to je vůl."
Člen Obrázek od 1. února 2011.
Nahoru
martafan
Návštěvník
Návštěvník
Příspěvky: 34
Registrován: 12 Ún 2014 19:44

Re: Prosím o kontrolu logu z ComboFix

#10 Příspěvek od martafan »

Vzdyt jsem to nasel na netu a stacilo to jenom spustit a cekat, nejakou praxi mam, toto zvladne kazdy. :). Ja nechci byt drzy, ale o co jde??? Chtel jsem jenom pomoct... :roll:
Nahoru
Avatar uživatele
vyosek
VIP
VIP
Příspěvky: 56365
Registrován: 07 Lis 2006 15:24
Místo/Bydliště: Šalingrad - Brno

Re: Prosím o kontrolu logu z ComboFix

#11 Příspěvek od vyosek »

Spustit - pockat na dokonceni skenu a log, ktery vypadne rozlustit a vycistit - o toto jde - ze jste treba porusil licenci CF a pravidla fora...

Ja tez nechci byt drzy ci nadrazeny, ja bych jen rad vedel s kym mam spolupracovat, kdyz si dovoli spoustet takto silnou utilitu...
"Kdo víno má a nepije,kdo hrozny má a nejí je, kdo ženu má a nelíbá, kdo zábavě se vyhýbá, na toho vemte bič a hůl, to není člověk, to je vůl."
Člen Obrázek od 1. února 2011.
Nahoru
martafan
Návštěvník
Návštěvník
Příspěvky: 34
Registrován: 12 Ún 2014 19:44

Re: Prosím o kontrolu logu z ComboFix

#12 Příspěvek od martafan »

Tak rozlustit a vycist - to je nad me sily, par veci mi neco malo rika - tak 5%. Za ten combofix se omlouvam, ale je zdarma ke stazeni na offic. strankach. Jestli jde o legalni programy, tak mam win7x64, ten eset smart sec. (tři lic. v praci, jednu doma), diablo III orig, homam V orig., a to je vse - jinac vse free verze. Pracuji jako asistent podnikatele a mam penez dost, nemusim piratit.
Nahoru
martafan
Návštěvník
Návštěvník
Příspěvky: 34
Registrován: 12 Ún 2014 19:44

Re: Prosím o kontrolu logu z ComboFix

#13 Příspěvek od martafan »

Poradite mi co ted s tim compem? Jeste jsem chtel napsat, ze eset mi napsal asi 16 potencionalne nechtenych aplikaci a mam od te doby ucet pod windows nejaky ascxcvdfgdfg, nejde smazat.
Nahoru
Avatar uživatele
vyosek
VIP
VIP
Příspěvky: 56365
Registrován: 07 Lis 2006 15:24
Místo/Bydliště: Šalingrad - Brno

Re: Prosím o kontrolu logu z ComboFix

#14 Příspěvek od vyosek »

:arrow: Pockam si na log z AdwCleaneru jak jsem psal vyse

:arrow: Muzete dat seznam tech nechtenych aplikaci?
"Kdo víno má a nepije,kdo hrozny má a nejí je, kdo ženu má a nelíbá, kdo zábavě se vyhýbá, na toho vemte bič a hůl, to není člověk, to je vůl."
Člen Obrázek od 1. února 2011.
Nahoru
martafan
Návštěvník
Návštěvník
Příspěvky: 34
Registrován: 12 Ún 2014 19:44

Re: Prosím o kontrolu logu z ComboFix

#15 Příspěvek od martafan »

Vidim ty apl. v karantene, ale nejdou zkopirovat do schranky.
Nahoru
Zamčeno

Vrátit se na „Řešení problémů, logy“