Nefunkčí facebook a google

Zpráva

Voren · #1 Příspěvek od **Voren** » 13 kvě 2014 14:24

Dobrý den,
nemůžu se dostat na stránky facebooku a googlu. Mám tam nějakou havěť. Přikládám log z RSIT.

Logfile of random's system information tool 1.09 (written by random/random)
Run by Mira at 2014-05-13 14:19:55
Microsoft Windows 7 Home Premium Service Pack 1
System drive C: has 126 GB (53%) free of 238 GB
Total RAM: 16351 MB (86% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 14:19:58, on 13.5.2014
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v11.0 (11.00.9600.17041)
Boot mode: Normal

Running processes:
C:\Program Files (x86)\ASUS\AI Suite II\DIGI+ VRM\VRMHelp.exe
C:\Program Files (x86)\ASUS\AI Suite II\AsRoutineController.exe
C:\Program Files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe
C:\Program Files (x86)\Adobe\Acrobat 10.0\Acrobat\acrotray.exe
C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
C:\Program Files (x86)\ASUS\AI Suite II\TurboV EVO\TurboVHelp.exe
C:\Program Files (x86)\ASUS\AI Suite II\AI Suite II.exe
C:\Program Files (x86)\ASUS\AI Suite II\Sensor\AlertHelper\AlertHelper.exe
C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
C:\Program Files\trend micro\Mira.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.seznam.cz/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/p/?LinkId=255141
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/p/?LinkId=255141
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll
O2 - BHO: Adobe PDF Conversion Toolbar Helper - {AE7CD045-E861-484f-8273-0445EE161910} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll
O2 - BHO: SmartSelect - {F4971EE7-DAA0-4053-9964-665D8EE6A077} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll
O3 - Toolbar: Adobe PDF - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll
O4 - HKLM\..\Run: [NUSB3MON] "C:\Program Files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe"
O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKLM\..\Run: [Adobe Acrobat Speed Launcher] "C:\Program Files (x86)\Adobe\Acrobat 10.0\Acrobat\Acrobat_sl.exe"
O4 - HKLM\..\Run: [Acrobat Assistant 8.0] "C:\Program Files (x86)\Adobe\Acrobat 10.0\Acrobat\Acrotray.exe"
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~2\MICROS~3\Office12\EXCEL.EXE/3000
O8 - Extra context menu item: Open using &Advanced JPEG Compressor - C:\Program Files (x86)\Advanced JPEG Compressor\ajcieex.htm
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~2\MICROS~3\Office12\REFIEBAR.DLL
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} (Java Plug-in 10.55.2) - http://javadl-esd.sun.com/update/1.7.0/ ... s-i586.cab
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/f ... wflash.cab
O17 - HKLM\System\CCS\Services\Tcpip\..\{550EE2CE-9C63-4512-B553-F28EEA837AE2}: NameServer = 192.168.1.1,192.168.1.9
O17 - HKLM\System\CS1\Services\Tcpip\..\{550EE2CE-9C63-4512-B553-F28EEA837AE2}: NameServer = 192.168.1.1,192.168.1.9
O17 - HKLM\System\CS2\Services\Tcpip\..\{550EE2CE-9C63-4512-B553-F28EEA837AE2}: NameServer = 192.168.1.1,192.168.1.9
O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Program Files (x86)\Microsoft Office\Office12\GrooveSystemServices.dll
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~2\COMMON~1\Skype\SKYPE4~1.DLL
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
O23 - Service: ASUS Com Service (asComSvc) - Unknown owner - C:\Program Files (x86)\ASUS\AXSP\1.00.14\atkexComSvc.exe
O23 - Service: ASUS HM Com Service (asHmComSvc) - Unknown owner - C:\Program Files (x86)\ASUS\AAHM\1.00.14\aaHMSvc.exe
O23 - Service: ASUS System Control Service (AsSysCtrlService) - Unknown owner - C:\Program Files (x86)\ASUS\AsSysCtrlService\1.00.11\AsSysCtrlService.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)
O23 - Service: Futuremark SystemInfo Service - Futuremark - C:\Program Files (x86)\Futuremark\SystemInfo\FMSISvc.exe
O23 - Service: @%SystemRoot%\system32\ieetwcollectorres.dll,-1000 (IEEtwCollectorService) - Unknown owner - C:\Windows\system32\IEEtwCollector.exe (file missing)
O23 - Service: Intel(R) PROSet Monitoring Service - Unknown owner - C:\Windows\system32\IProsetMonitor.exe (file missing)
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: NVIDIA Display Driver Service (nvsvc) - Unknown owner - C:\Windows\system32\nvvsvc.exe (file missing)
O23 - Service: PnkBstrA - Unknown owner - C:\Windows\system32\PnkBstrA.exe
O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Skype Updater (SkypeUpdate) - Skype Technologies - C:\Program Files (x86)\Skype\Updater\Updater.exe
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)
O23 - Service: Steam Client Service - Valve Corporation - C:\Program Files (x86)\Common Files\Steam\SteamService.exe
O23 - Service: TeamViewer 9 (TeamViewer9) - TeamViewer GmbH - C:\Program Files (x86)\TeamViewer\Version9\TeamViewer_Service.exe
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\Wat\WatUX.exe,-601 (WatAdminSvc) - Unknown owner - C:\Windows\system32\Wat\WatAdminSvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)

--
End of file - 8662 bytes

======Listing Processes======

\SystemRoot\System32\smss.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
wininit.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
winlogon.exe
C:\Windows\system32\services.exe
C:\Windows\system32\lsass.exe
C:\Windows\system32\lsm.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
"C:\Windows\system32\nvvsvc.exe"
C:\Windows\system32\svchost.exe -k RPCSS
"c:\Program Files\Microsoft Security Client\MsMpEng.exe"
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k LocalService
C:\Windows\system32\svchost.exe -k netsvcs
C:\Windows\system32\svchost.exe -k GPSvcGroup
C:\Windows\system32\svchost.exe -k NetworkService
"C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe"
C:\Windows\system32\nvvsvc.exe -session -first
C:\Windows\System32\spoolsv.exe
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
"C:\Windows\system32\Dwm.exe"
C:\Windows\Explorer.EXE
"taskhost.exe"
"C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe"
taskeng.exe {6F823EEB-7456-4019-9D8F-D40978914809}
"C:\Program Files (x86)\ASUS\AXSP\1.00.14\atkexComSvc.exe"
"C:\Program Files (x86)\ASUS\AI Suite II\DIGI+ VRM\VRMHelp.exe"
"C:\Program Files (x86)\ASUS\AI Suite II\AsRoutineController.exe" -open
"C:\Program Files\Microsoft Security Client\msseces.exe" -hide -runkey
"C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe" -s
"C:\Program Files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe"
"C:\Program Files (x86)\Adobe\Acrobat 10.0\Acrobat\acrotray.exe"
"C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"
"C:\Program Files (x86)\ASUS\AAHM\1.00.14\aaHMSvc.exe"
"C:\Program Files (x86)\ASUS\AsSysCtrlService\1.00.11\AsSysCtrlService.exe"
C:\Windows\SysWOW64\svchost.exe -k hpdevmgmt
C:\Windows\system32\IProsetMonitor.exe
C:\Windows\System32\svchost.exe -k HPZ12
C:\Windows\System32\svchost.exe -k HPZ12
C:\Windows\SysWOW64\PnkBstrA.exe
C:\Windows\system32\svchost.exe -k imgsvc
"C:\Program Files (x86)\TeamViewer\Version9\TeamViewer_Service.exe"
C:\Windows\system32\svchost.exe -k HPService
"C:\Program Files (x86)\ASUS\AI Suite II\TurboV EVO\TurboVHelp.exe" -Init
C:\Windows\system32\SearchIndexer.exe /Embedding
"C:\Windows\system32\SearchProtocolHost.exe" Global\UsGthrFltPipeMssGthrPipe_S-1-5-21-2474784068-3967688443-4026768057-10001_ Global\UsGthrCtrlFltPipeMssGthrPipe_S-1-5-21-2474784068-3967688443-4026768057-10001 1 -2147483646 "Software\Microsoft\Windows Search" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT; MS Search 4.0 Robot)" "C:\ProgramData\Microsoft\Search\Data\Temp\usgthrsvc" "DownLevelDaemon" "1"
"C:\Program Files\Windows Media Player\wmpnetwk.exe"
C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
C:\Windows\System32\svchost.exe -k LocalServicePeerNet
C:\Windows\system32\wbem\wmiprvse.exe
"C:\Program Files (x86)\ASUS\AI Suite II\AI Suite II.exe" -hide
"C:\Program Files (x86)\ASUS\AI Suite II\Sensor\AlertHelper\AlertHelper.exe" -hide
"C:\Windows\Microsoft.NET\Framework64\v4.0.30319\dfsvc.exe"
C:\Windows\system32\sppsvc.exe
"C:\Program Files\Internet Explorer\iexplore.exe"
"C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:4420 CREDAT:267521 /prefetch:2
C:\Windows\system32\wbem\wmiprvse.exe
C:\Windows\servicing\TrustedInstaller.exe
"C:\Windows\system32\SearchFilterHost.exe" 0 516 520 528 65536 524
"C:\Windows\system32\SearchProtocolHost.exe" Global\UsGthrFltPipeMssGthrPipe2_ Global\UsGthrCtrlFltPipeMssGthrPipe2 1 -2147483646 "Software\Microsoft\Windows Search" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT; MS Search 4.0 Robot)" "C:\ProgramData\Microsoft\Search\Data\Temp\usgthrsvc" "DownLevelDaemon"
"C:\Users\Mira\Desktop\RSITx64.exe"
C:\Windows\system32\DllHost.exe /Processid:{F9717507-6651-4EDB-BFF7-AE615179BCCF}

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
Java(tm) Plug-In SSV Helper - C:\Program Files (x86)\Java\jre7\bin\ssv.dll [2014-03-17 462760]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AE7CD045-E861-484f-8273-0445EE161910}]
Adobe PDF Conversion Toolbar Helper - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll [2012-01-03 339872]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll [2014-03-17 171944]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{F4971EE7-DAA0-4053-9964-665D8EE6A077}]
SmartSelect Class - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll [2012-01-03 339872]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Internet Explorer\Toolbar]
{47833539-D0C5-4125-9FA8-0819E2EAAC93} - Adobe PDF - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll [2012-01-03 339872]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"MSC"=C:\Program Files\Microsoft Security Client\msseces.exe [2014-03-11 1271072]
"RtHDVCpl"=C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [2010-11-02 11545192]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\DAEMON Tools Lite]
C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe [2013-10-28 3675352]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^HP Digital Imaging Monitor.lnk]
C:\PROGRA~2\HP\DIGITA~1\bin\hpqtra08.exe [2009-09-20 270336]

[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]
"NUSB3MON"=C:\Program Files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe [2010-04-27 113288]
"Adobe ARM"=C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2013-11-21 959904]
""= []
"Adobe Acrobat Speed Launcher"=C:\Program Files (x86)\Adobe\Acrobat 10.0\Acrobat\Acrobat_sl.exe [2012-01-03 36760]
"Acrobat Assistant 8.0"=C:\Program Files (x86)\Adobe\Acrobat 10.0\Acrobat\Acrotray.exe [2012-01-03 815512]
"SunJavaUpdateSched"=C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [2013-07-02 254336]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED}

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{B5A7F190-DDA6-4420-B3BA-52453494E6CD}"=C:\Program Files (x86)\Microsoft Office\Office12\GrooveShellExtensions.dll [2009-02-26 2217832]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=credssp.dll

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MsMpSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\MsMpSvc]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorAdmin"=5
"ConsentPromptBehaviorUser"=3
"EnableUIADesktopToggle"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDrives"=0

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDrives"=0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.msadpcm"=msadp32.acm
"midimapper"=midimap.dll
"wavemapper"=msacm32.drv
"vidc.uyvy"=msyuv.dll
"vidc.yuy2"=msyuv.dll
"vidc.yvyu"=msyuv.dll
"vidc.iyuv"=iyuv_32.dll
"vidc.i420"=iyuv_32.dll
"vidc.yvu9"=tsbyuv.dll
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"aux1"=wdmaud.drv
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv
"wave2"=wdmaud.drv
"midi2"=wdmaud.drv
"mixer2"=wdmaud.drv

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1

======List of files/folders created in the last 1 month======

2014-05-13 14:19:55 ----D---- C:\rsit
2014-05-13 14:19:55 ----D---- C:\Program Files\trend micro
2014-05-13 14:05:24 ----SHD---- C:\$RECYCLE.BIN
2014-05-13 14:05:22 ----A---- C:\ComboFix.txt
2014-05-13 13:51:28 ----D---- C:\ProgramData\Licenses
2014-05-13 13:51:27 ----AD---- C:\ProgramData\TEMP
2014-05-13 13:38:03 ----A---- C:\Windows\system32\drivers\stflt.sys
2014-05-13 12:49:05 ----A---- C:\Windows\system32\drivers\MBAMSwissArmy.sys
2014-05-13 12:30:07 ----D---- C:\Program Files (x86)\Spybot - Search & Destroy 2
2014-05-13 12:15:19 ----D---- C:\FRST
2014-05-07 21:53:52 ----A---- C:\Windows\SYSWOW64\mshtml.dll
2014-05-07 21:53:52 ----A---- C:\Windows\system32\mshtml.dll
2014-05-06 15:22:08 ----A---- C:\Windows\system32\ieui.dll
2014-05-06 15:22:07 ----A---- C:\Windows\SYSWOW64\vbscript.dll
2014-05-06 15:22:07 ----A---- C:\Windows\SYSWOW64\ieui.dll
2014-05-06 15:22:07 ----A---- C:\Windows\system32\vbscript.dll
2014-05-06 15:22:04 ----A---- C:\Windows\SYSWOW64\dxtmsft.dll
2014-05-06 15:22:04 ----A---- C:\Windows\system32\jscript9diag.dll
2014-05-06 15:22:04 ----A---- C:\Windows\system32\JavaScriptCollectionAgent.dll
2014-05-06 15:22:04 ----A---- C:\Windows\system32\iernonce.dll
2014-05-06 15:22:04 ----A---- C:\Windows\system32\ieetwcollectorres.dll
2014-05-06 15:22:04 ----A---- C:\Windows\system32\ie4uinit.exe
2014-05-06 15:22:04 ----A---- C:\Windows\system32\dxtmsft.dll
2014-05-06 15:22:03 ----A---- C:\Windows\SYSWOW64\msrating.dll
2014-05-06 15:22:03 ----A---- C:\Windows\SYSWOW64\msfeeds.dll
2014-05-06 15:22:03 ----A---- C:\Windows\SYSWOW64\jsproxy.dll
2014-05-06 15:22:03 ----A---- C:\Windows\SYSWOW64\JavaScriptCollectionAgent.dll
2014-05-06 15:22:03 ----A---- C:\Windows\SYSWOW64\ieUnatt.exe
2014-05-06 15:22:03 ----A---- C:\Windows\SYSWOW64\iesetup.dll
2014-05-06 15:22:03 ----A---- C:\Windows\SYSWOW64\iernonce.dll
2014-05-06 15:22:03 ----A---- C:\Windows\SYSWOW64\dxtrans.dll
2014-05-06 15:22:03 ----A---- C:\Windows\system32\msrating.dll
2014-05-06 15:22:03 ----A---- C:\Windows\system32\msfeeds.dll
2014-05-06 15:22:03 ----A---- C:\Windows\system32\jsproxy.dll
2014-05-06 15:22:03 ----A---- C:\Windows\system32\ieUnatt.exe
2014-05-06 15:22:03 ----A---- C:\Windows\system32\iesetup.dll
2014-05-06 15:22:03 ----A---- C:\Windows\system32\dxtrans.dll
2014-05-06 15:22:02 ----A---- C:\Windows\SYSWOW64\jscript9diag.dll
2014-05-06 15:22:02 ----A---- C:\Windows\SYSWOW64\ieetwproxystub.dll
2014-05-06 15:22:01 ----A---- C:\Windows\SYSWOW64\iertutil.dll
2014-05-06 15:22:01 ----A---- C:\Windows\SYSWOW64\ieapfltr.dll
2014-05-06 15:22:01 ----A---- C:\Windows\system32\MsSpellCheckingFacility.exe
2014-05-06 15:22:01 ----A---- C:\Windows\system32\iertutil.dll
2014-05-06 15:22:01 ----A---- C:\Windows\system32\ieetwproxystub.dll
2014-05-06 15:22:01 ----A---- C:\Windows\system32\ieetwcollector.exe
2014-05-06 15:22:01 ----A---- C:\Windows\system32\ieapfltr.dll
2014-05-06 15:22:00 ----A---- C:\Windows\SYSWOW64\wininet.dll
2014-05-06 15:22:00 ----A---- C:\Windows\SYSWOW64\urlmon.dll
2014-05-06 15:22:00 ----A---- C:\Windows\system32\wininet.dll
2014-05-06 15:22:00 ----A---- C:\Windows\system32\urlmon.dll
2014-05-06 15:22:00 ----A---- C:\Windows\system32\ieframe.dll
2014-05-06 15:21:59 ----A---- C:\Windows\SYSWOW64\jscript9.dll
2014-05-06 15:21:59 ----A---- C:\Windows\SYSWOW64\ieframe.dll
2014-05-06 15:21:59 ----A---- C:\Windows\system32\jscript9.dll
2014-05-06 15:21:57 ----SD---- C:\Windows\system32\CompatTel
2014-05-06 14:22:04 ----A---- C:\Windows\system32\aepdu.dll
2014-05-06 14:22:04 ----A---- C:\Windows\system32\aeinv.dll
2014-05-01 18:31:58 ----D---- C:\Users\Mira\AppData\Roaming\com.valve.FTP

======List of files/folders modified in the last 1 month======

2014-05-13 14:19:55 ----RD---- C:\Program Files
2014-05-13 14:19:45 ----D---- C:\Windows\Temp
2014-05-13 14:19:35 ----D---- C:\Windows\system32\config
2014-05-13 14:19:32 ----D---- C:\Windows\SoftwareDistribution
2014-05-13 14:17:42 ----D---- C:\Windows
2014-05-13 14:17:10 ----D---- C:\Windows\inf
2014-05-13 14:15:39 ----RD---- C:\Program Files (x86)
2014-05-13 14:15:39 ----D---- C:\Windows\system32\drivers
2014-05-13 14:15:33 ----D---- C:\ProgramData
2014-05-13 14:05:23 ----RD---- C:\Users
2014-05-13 14:05:23 ----AD---- C:\Qoobox
2014-05-13 14:04:39 ----A---- C:\Windows\system.ini
2014-05-13 14:04:35 ----D---- C:\Windows\system32\drivers\etc
2014-05-13 14:03:36 ----D---- C:\Windows\SYSWOW64\drivers
2014-05-13 14:03:36 ----D---- C:\Windows\SysWOW64
2014-05-13 14:03:36 ----D---- C:\Windows\AppPatch
2014-05-13 14:03:35 ----D---- C:\Program Files (x86)\Common Files
2014-05-13 13:56:49 ----SD---- C:\Users\Mira\AppData\Roaming\Microsoft
2014-05-13 13:53:16 ----D---- C:\Windows\System32
2014-05-13 13:53:16 ----A---- C:\Windows\system32\PerfStringBackup.INI
2014-05-13 13:47:40 ----D---- C:\Windows\debug
2014-05-13 13:47:40 ----D---- C:\Program Files (x86)\Steam
2014-05-13 13:46:45 ----SHD---- C:\System Volume Information
2014-05-13 13:11:56 ----D---- C:\ProgramData\Spybot - Search & Destroy
2014-05-13 13:11:55 ----SD---- C:\ProgramData\Microsoft
2014-05-13 12:56:05 ----D---- C:\Windows\Tasks
2014-05-13 12:48:42 ----D---- C:\ProgramData\Malwarebytes
2014-05-13 12:14:47 ----D---- C:\Users\Mira\AppData\Roaming\Skype
2014-05-10 21:37:12 ----D---- C:\ProgramData\Origin
2014-05-10 21:36:36 ----D---- C:\Program Files (x86)\Origin
2014-05-08 12:02:56 ----D---- C:\Windows\winsxs
2014-05-07 21:53:53 ----D---- C:\Windows\system32\catroot2
2014-05-07 21:53:53 ----D---- C:\Windows\system32\catroot
2014-05-06 15:49:49 ----D---- C:\Windows\rescache
2014-05-06 15:24:15 ----D---- C:\Windows\SYSWOW64\en-US
2014-05-06 15:24:15 ----D---- C:\Windows\SYSWOW64\cs-CZ
2014-05-06 15:24:15 ----D---- C:\Windows\system32\en-US
2014-05-06 15:24:15 ----D---- C:\Windows\system32\cs-CZ
2014-05-06 15:24:15 ----D---- C:\Windows\PolicyDefinitions
2014-05-06 15:24:15 ----D---- C:\Program Files\Internet Explorer
2014-05-06 15:24:15 ----D---- C:\Program Files (x86)\Internet Explorer
2014-05-02 14:06:43 ----D---- C:\Users\Mira\AppData\Roaming\DAEMON Tools Lite
2014-05-02 14:06:42 ----D---- C:\Windows\Logs
2014-05-02 14:06:18 ----D---- C:\Program Files\CCleaner
2014-04-29 11:55:48 ----A---- C:\Windows\SYSWOW64\FlashPlayerApp.exe
2014-04-20 09:26:09 ----D---- C:\Windows\system32\wdi
2014-04-16 20:27:23 ----D---- C:\ProgramData\Oracle
2014-04-16 20:27:21 ----SHD---- C:\Windows\Installer
2014-04-16 20:27:21 ----D---- C:\Config.Msi
2014-04-16 20:27:19 ----D---- C:\Program Files (x86)\Java

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 MpFilter;Microsoft Malware Protection Driver; C:\Windows\system32\DRIVERS\MpFilter.sys [2014-01-25 268512]
R0 pciide;pciide; C:\Windows\system32\drivers\pciide.sys [2009-07-14 12352]
R0 rdyboost;ReadyBoost; C:\Windows\System32\drivers\rdyboost.sys [2010-11-21 213888]
R1 AsIO;AsIO; C:\Windows\SysWow64\drivers\AsIO.sys [2010-08-24 13440]
R1 AsUpIO;AsUpIO; C:\Windows\SysWow64\drivers\AsUpIO.sys [2010-08-03 14464]
R1 dtsoftbus01;DAEMON Tools Virtual Bus Driver; C:\Windows\system32\DRIVERS\dtsoftbus01.sys [2014-03-08 283064]
R3 e1cexpress;Intel(R) PRO/1000 PCI Express Network Connection Driver C; C:\Windows\system32\DRIVERS\e1c62x64.sys [2012-08-11 482128]
R3 ICCWDT;Intel(R) Watchdog Timer Driver (Intel(R) WDT); C:\Windows\system32\DRIVERS\ICCWDT.sys [2010-08-17 26136]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\Windows\system32\drivers\RTKVHD64.sys [2010-11-02 2536040]
R3 MEIx64;Intel(R) Management Engine Interface ; C:\Windows\system32\DRIVERS\HECIx64.sys [2010-10-20 56344]
R3 nusb3hub;Renesas Electronics USB 3.0 Hub Driver; C:\Windows\system32\DRIVERS\nusb3hub.sys [2010-04-27 83080]
R3 nusb3xhc;Renesas Electronics USB 3.0 Host Controller Driver; C:\Windows\system32\DRIVERS\nusb3xhc.sys [2010-04-27 184968]
R3 NVHDA;Service for NVIDIA High Definition Audio Driver; C:\Windows\system32\drivers\nvhda64v.sys [2013-11-28 197408]
S3 BridgeMP;@%SystemRoot%\system32\bridgeres.dll,-1; C:\Windows\system32\DRIVERS\bridge.sys [2009-07-14 95232]
S3 catchme;catchme; \??\C:\ComboFix\catchme.sys []
S3 cpuz137;cpuz137; \??\C:\Windows\TEMP\cpuz137\cpuz137_x64.sys []
S3 Dot4;MS IEEE-1284.4 Driver; C:\Windows\system32\DRIVERS\Dot4.sys [2009-07-14 145920]
S3 Dot4Print;Print Class Driver for IEEE-1284.4; C:\Windows\system32\DRIVERS\Dot4Prt.sys [2010-11-21 19968]
S3 dot4usb;MS Dot4USB Filter Dot4USB Filter; C:\Windows\system32\DRIVERS\dot4usb.sys [2009-07-14 43008]
S3 GPUZ;GPUZ; \??\C:\Windows\TEMP\GPUZ.sys []
S3 NisDrv;Microsoft Network Inspection System; C:\Windows\system32\DRIVERS\NisDrvWFP.sys [2014-03-11 133928]
S3 RdpVideoMiniport;Remote Desktop Video Miniport Driver; C:\Windows\System32\drivers\rdpvideominiport.sys [2012-08-23 19456]
S3 TsUsbFlt;TsUsbFlt; C:\Windows\system32\drivers\tsusbflt.sys [2013-10-02 56832]
S3 TsUsbGD;Remote Desktop Generic USB Device; C:\Windows\system32\drivers\TsUsbGD.sys [2012-08-23 30208]
S3 usbscan;Ovladač skeneru USB; C:\Windows\system32\DRIVERS\usbscan.sys [2013-07-03 42496]
S3 WDC_SAM;WD SCSI Pass Thru driver; C:\Windows\system32\DRIVERS\wdcsam64.sys [2009-02-13 14464]
S3 WinUsb;WinUsb; C:\Windows\system32\DRIVERS\WinUsb.sys [2010-11-21 41984]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 AdobeARMservice;Adobe Acrobat Update Service; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [2013-12-21 65432]
R2 asComSvc;ASUS Com Service; C:\Program Files (x86)\ASUS\AXSP\1.00.14\atkexComSvc.exe [2011-06-13 922240]
R2 asHmComSvc;ASUS HM Com Service; C:\Program Files (x86)\ASUS\AAHM\1.00.14\aaHMSvc.exe [2010-12-02 915584]
R2 AsSysCtrlService;ASUS System Control Service; C:\Program Files (x86)\ASUS\AsSysCtrlService\1.00.11\AsSysCtrlService.exe [2010-10-21 586880]
R2 hpqddsvc;Služba HP CUE DeviceDiscovery; C:\Windows\system32\svchost.exe [2009-07-14 27136]
R2 HPSLPSVC;HP Network Devices Support; C:\Windows\system32\svchost.exe [2009-07-14 27136]
R2 Intel(R) PROSet Monitoring Service;Intel(R) PROSet Monitoring Service; C:\Windows\system32\IProsetMonitor.exe [2012-07-27 170824]
R2 MsMpSvc;Microsoft Antimalware Service; c:\Program Files\Microsoft Security Client\MsMpEng.exe [2014-03-11 23808]
R2 Net Driver HPZ12;Net Driver HPZ12; C:\Windows\System32\svchost.exe [2009-07-14 27136]
R2 nvsvc;NVIDIA Display Driver Service; C:\Windows\system32\nvvsvc.exe [2014-03-27 927520]
R2 Pml Driver HPZ12;Pml Driver HPZ12; C:\Windows\System32\svchost.exe [2009-07-14 27136]
R2 PnkBstrA;PnkBstrA; C:\Windows\syswow64\PnkBstrA.exe [2014-03-08 76888]
R2 TeamViewer9;TeamViewer 9; C:\Program Files (x86)\TeamViewer\Version9\TeamViewer_Service.exe [2014-03-25 4971840]
R3 hpqcxs08;hpqcxs08; C:\Windows\system32\svchost.exe [2009-07-14 27136]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2013-09-11 105144]
S2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2013-09-11 124088]
S2 SkypeUpdate;Skype Updater; C:\Program Files (x86)\Skype\Updater\Updater.exe [2013-10-23 172192]
S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service; C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2014-04-29 257712]
S3 aspnet_state;Stavová služba ASP.NET; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\aspnet_state.exe [2013-09-11 51808]
S3 Futuremark SystemInfo Service;Futuremark SystemInfo Service; C:\Program Files (x86)\Futuremark\SystemInfo\FMSISvc.exe [2014-02-28 520416]
S3 IEEtwCollectorService;@%SystemRoot%\system32\ieetwcollectorres.dll,-1000; C:\Windows\system32\IEEtwCollector.exe [2014-03-06 111616]
S3 Microsoft Office Groove Audit Service;Microsoft Office Groove Audit Service; C:\Program Files (x86)\Microsoft Office\Office12\GrooveAuditService.exe [2009-02-26 64856]
S3 NisSrv;@C:\Program Files\Microsoft Security Client\MpAsDesc.dll,-243; c:\Program Files\Microsoft Security Client\NisSrv.exe [2014-03-11 347872]
S3 odserv;Microsoft Office Diagnostics Service; C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE [2011-07-20 440696]
S3 ose;Office Source Engine; C:\Program Files (x86)\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2006-10-26 145184]
S3 Steam Client Service;Steam Client Service; C:\Program Files (x86)\Common Files\Steam\SteamService.exe [2014-05-13 564416]
S3 WatAdminSvc;@%SystemRoot%\system32\Wat\WatUX.exe,-601; C:\Windows\system32\Wat\WatAdminSvc.exe [2014-03-08 1255736]
S4 NetMsmqActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8195; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2013-09-11 139856]
S4 NetPipeActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8197; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2013-09-11 139856]
S4 NetTcpActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8199; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2013-09-11 139856]

-----------------EOF-----------------

#2 Příspěvek od **vyosek** » 13 kvě 2014 15:20

Zdravim

Hazi prohlizec nejakou hlasku?? Delaji to vsechny prohlizece??

Co se tyce ComboFixu, ktery jste pouzil, tak na zaklade licence a pravidel fora ptam, umite s nim pracovat (spusteni, rozlusteni logu, napsani skriptu)?

Licencni podminky ComboFixu hovori jasne "Nikdy by nemel byt pouzit v prostredi bez dozoru zkusene osoby"
Obrázek

Nebezpeci CFka

Je urcen primarne pro radce - jeho svevolnym pouzitim ztracite narok na podporu
Maze stopy po haveti, takze v logu z RSIT neni nic videt
Jeho log je treba dolustit, jelikoz neumi smazat vse - to ovsem tezko zvladnete pokud k tomu nejste vyskolen
CF muze mit bug = sunda Vam system, pokud nevite kam co uklada, jak co obnovit, mate system v kytkam a ceka Vas reinstal
CF taky bohuzel prozatim nekontroluje nektere dulezite knihovny (napr. hal.dll) - ty treba mazou nektere typy haveti (napr. angela) - smaze Vam po restartu hal.dll = nenajede Vam system a jste o radek vyse = reinstal

Navic jej opakovane spoustite bez doporuceni

Voren · #3 Příspěvek od **Voren** » 13 kvě 2014 15:27

Používám jen IE. K nákaze došlo dnes asi v 11:40. Všechny ostatní weby fungují (na jiný nefunkční sem nenatrefil).
Prohlížeč si jinak divně nechová, jen se mi zdá o pár ml sec. pomalejší načítání.
Přikládám log z FRST a combofixu.

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 11-05-2014 01
Ran by Mira (administrator) on MIRA-PC on 13-05-2014 15:53:15
Running from C:\Users\Mira\Desktop
Platform: Windows 7 Home Premium Service Pack 1 (X64) OS Language: Czech
Internet Explorer Version 11
Boot Mode: Normal

The only official download link for FRST:
Download link for 32-Bit version: http://www.bleepingcomputer.com/downloa ... ool/dl/81/
Download link for 64-Bit Version: http://www.bleepingcomputer.com/downloa ... ool/dl/82/
Download link from any site other than Bleeping Computer is unpermitted or outdated.
See tutorial for FRST: http://www.geekstogo.com/forum/topic/33 ... scan-tool/

==================== Processes (Whitelisted) =================

(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(Microsoft Corporation) C:\Program Files\Microsoft Security Client\MsMpEng.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
() C:\Program Files (x86)\ASUS\AXSP\1.00.14\atkexComSvc.exe
(ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\AI Suite II\DIGI+ VRM\VRMHelp.exe
(ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\AI Suite II\AsRoutineController.exe
(Microsoft Corporation) C:\Program Files\Microsoft Security Client\msseces.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(Renesas Electronics Corporation) C:\Program Files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe
(Adobe Systems Inc.) C:\Program Files (x86)\Adobe\Acrobat 10.0\Acrobat\acrotray.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
() C:\Program Files (x86)\ASUS\AAHM\1.00.14\aaHMSvc.exe
() C:\Program Files (x86)\ASUS\AsSysCtrlService\1.00.11\AsSysCtrlService.exe
(Microsoft Corporation) C:\Windows\SysWOW64\svchost.exe
(Intel Corporation) C:\Windows\System32\IPROSetMonitor.exe
() C:\Windows\SysWOW64\PnkBstrA.exe
(Crawler.com) C:\Program Files (x86)\Spyware Terminator\st_rsser64.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\Version9\TeamViewer_Service.exe
(ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\AI Suite II\TurboV EVO\TurboVHelp.exe
(ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\AI Suite II\AI Suite II.exe
(ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\AI Suite II\Sensor\AlertHelper\AlertHelper.exe
(Microsoft Corporation) C:\Program Files\Internet Explorer\iexplore.exe
(Intel(R) Corporation) C:\Program Files\Intel\NCS2\WMIProv\ncs2prov.exe
(Adobe Systems Incorporated) C:\Windows\System32\Macromed\Flash\FlashUtil64_13_0_0_206_ActiveX.exe

==================== Registry (Whitelisted) ==================

HKLM\...\Run: [MSC] => C:\Program Files\Microsoft Security Client\msseces.exe [1271072 2014-03-11] (Microsoft Corporation)
HKLM\...\Run: [RtHDVCpl] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [11545192 2010-11-02] (Realtek Semiconductor)
HKLM\...\Run: [SpywareTerminatorShield] => C:\Program Files (x86)\Spyware Terminator\SpywareTerminatorShield.exe [2777736 2013-10-22] (Crawler.com)
HKLM\...\Run: [SpywareTerminatorUpdater] => C:\Program Files (x86)\Spyware Terminator\SpywareTerminatorUpdate.exe [3684488 2013-10-22] (Crawler.com)
HKLM-x32\...\Run: [NUSB3MON] => C:\Program Files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe [113288 2010-04-27] (Renesas Electronics Corporation)
HKLM-x32\...\Run: [Adobe ARM] => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959904 2013-11-21] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [] => [X]
HKLM-x32\...\Run: [Adobe Acrobat Speed Launcher] => C:\Program Files (x86)\Adobe\Acrobat 10.0\Acrobat\Acrobat_sl.exe [36760 2012-01-03] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [Acrobat Assistant 8.0] => C:\Program Files (x86)\Adobe\Acrobat 10.0\Acrobat\Acrotray.exe [815512 2012-01-03] (Adobe Systems Inc.)
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [254336 2013-07-02] (Oracle Corporation)

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.microsoft.com/isapi/redir.dl ... r=iesearch
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.seznam.cz/
StartMenuInternet: IEXPLORE.EXE - C:\Program Files (x86)\Internet Explorer\iexplore.exe
SearchScopes: HKCU - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKCU - {D5D33A73-FB59-45D9-A2F5-95DDFB4FE3A7} URL = http://tv.seznam.cz/hledej?w={searchTer ... arch_12454
BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO-x32: Adobe PDF Conversion Toolbar Helper - {AE7CD045-E861-484f-8273-0445EE161910} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated)
BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
BHO-x32: SmartSelect Class - {F4971EE7-DAA0-4053-9964-665D8EE6A077} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated)
Toolbar: HKLM-x32 - Adobe PDF - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated)
DPF: HKLM-x32 {8AD9C840-044E-11D1-B3E9-00805F499D93} http://javadl-esd.sun.com/update/1.7.0/ ... s-i586.cab
DPF: HKLM-x32 {D27CDB6E-AE6D-11CF-96B8-444553540000} http://fpdownload2.macromedia.com/get/f ... wflash.cab
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Tcpip\..\Interfaces\{550EE2CE-9C63-4512-B553-F28EEA837AE2}: [NameServer]192.168.1.1,192.168.1.9

FireFox:
========
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_13_0_0_206.dll ()
FF Plugin: @microsoft.com/GENUINE - disabled No File
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files\Microsoft Silverlight\5.1.30214.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_13_0_0_206.dll ()
FF Plugin-x32: @esn.me/esnsonar,version=0.70.4 - C:\Program Files (x86)\Battlelog Web Plugins\Sonar\0.70.4\npesnsonar.dll (ESN Social Software AB)
FF Plugin-x32: @esn/npbattlelog,version=2.3.2 - C:\Program Files (x86)\Battlelog Web Plugins\2.3.2\npbattlelog.dll (EA Digital Illusions CE AB)
FF Plugin-x32: @java.com/DTPlugin,version=10.55.2 - C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=10.55.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @microsoft.com/GENUINE - disabled No File
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files (x86)\Microsoft Silverlight\5.1.30214.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @videolan.org/vlc,version=2.1.3 - C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: Adobe Acrobat - C:\Program Files (x86)\Adobe\Acrobat 10.0\Acrobat\Air\nppdf32.dll (Adobe Systems Inc.)
FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF HKLM-x32\...\Firefox\Extensions: [web2pdfextension@web2pdf.adobedotcom] - C:\Program Files (x86)\Adobe\Acrobat 10.0\Acrobat\Browser\WCFirefoxExtn
FF Extension: Adobe Acrobat - Create PDF - C:\Program Files (x86)\Adobe\Acrobat 10.0\Acrobat\Browser\WCFirefoxExtn [2014-03-08]

==================== Services (Whitelisted) =================

R2 asComSvc; C:\Program Files (x86)\ASUS\AXSP\1.00.14\atkexComSvc.exe [922240 2011-06-13] ()
R2 asHmComSvc; C:\Program Files (x86)\ASUS\AAHM\1.00.14\aaHMSvc.exe [915584 2010-12-02] ()
R2 AsSysCtrlService; C:\Program Files (x86)\ASUS\AsSysCtrlService\1.00.11\AsSysCtrlService.exe [586880 2010-10-21] ()
S3 Futuremark SystemInfo Service; C:\Program Files (x86)\Futuremark\SystemInfo\FMSISvc.exe [520416 2014-02-28] (Futuremark)
R2 MsMpSvc; c:\Program Files\Microsoft Security Client\MsMpEng.exe [23808 2014-03-11] (Microsoft Corporation)
S3 NisSrv; c:\Program Files\Microsoft Security Client\NisSrv.exe [347872 2014-03-11] (Microsoft Corporation)
R2 PnkBstrA; C:\Windows\SysWOW64\PnkBstrA.exe [76888 2014-03-08] ()
R2 ST2012_Svc; C:\Program Files (x86)\Spyware Terminator\st_rsser64.exe [1149104 2013-10-22] (Crawler.com)

==================== Drivers (Whitelisted) ====================

U5 AppMgmt; C:\Windows\system32\svchost.exe [27136 2009-07-14] (Microsoft Corporation)
R1 AsIO; C:\Windows\SysWow64\drivers\AsIO.sys [13440 2010-08-24] ()
R1 AsUpIO; C:\Windows\SysWow64\drivers\AsUpIO.sys [14464 2010-08-03] ()
R1 dtsoftbus01; C:\Windows\System32\DRIVERS\dtsoftbus01.sys [283064 2014-03-08] (Disc Soft Ltd)
R0 MpFilter; C:\Windows\System32\DRIVERS\MpFilter.sys [268512 2014-01-25] (Microsoft Corporation)
S3 NisDrv; C:\Windows\System32\DRIVERS\NisDrvWFP.sys [133928 2014-03-11] (Microsoft Corporation)
R2 sp_rsdrv2; C:\Windows\System32\DRIVERS\stflt.sys [51496 2014-05-13] (Windows (R) Win 7 DDK provider)
S3 catchme; \??\C:\ComboFix\catchme.sys [X]
S3 cpuz137; \??\C:\Windows\TEMP\cpuz137\cpuz137_x64.sys [X]
S3 GPUZ; \??\C:\Windows\TEMP\GPUZ.sys [X]

==================== NetSvcs (Whitelisted) ===================

==================== One Month Created Files and Folders ========

2014-05-13 15:53 - 2014-05-13 15:53 - 00009732 _____ () C:\Users\Mira\Desktop\FRST.txt
2014-05-13 15:51 - 2014-05-13 15:51 - 02066944 _____ (Farbar) C:\Users\Mira\Desktop\FRST64.exe
2014-05-13 15:44 - 2014-05-13 15:44 - 00000000 ____D () C:\ProgramData\Licenses
2014-05-13 15:35 - 2014-05-13 15:35 - 00000258 _____ () C:\ProgramData\Licenses.rar
2014-05-13 15:34 - 2014-05-13 15:34 - 00023905 _____ () C:\ComboFix.txt
2014-05-13 15:30 - 2014-05-13 15:30 - 00001083 _____ () C:\Users\Public\Desktop\SpywareBlaster.lnk
2014-05-13 15:30 - 2014-05-13 15:30 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\SpywareBlaster
2014-05-13 15:30 - 2014-05-13 15:30 - 00000000 ____D () C:\Program Files (x86)\SpywareBlaster
2014-05-13 15:29 - 2014-05-13 15:29 - 04095448 _____ (BrightFort LLC ) C:\Users\Mira\Desktop\spywareblastersetup50.exe
2014-05-13 15:28 - 2014-05-13 15:33 - 00000000 ____D () C:\ProgramData\Spyware Terminator
2014-05-13 15:28 - 2014-05-13 15:28 - 00051496 _____ (Windows (R) Win 7 DDK provider) C:\Windows\system32\Drivers\stflt.sys
2014-05-13 15:28 - 2014-05-13 15:28 - 00001042 _____ () C:\Users\Public\Desktop\Spyware Terminator 2012.lnk
2014-05-13 15:28 - 2014-05-13 15:28 - 00000000 ____D () C:\Users\Mira\AppData\Roaming\Spyware Terminator
2014-05-13 15:28 - 2014-05-13 15:28 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Spyware Terminator 2012
2014-05-13 15:28 - 2014-05-13 15:28 - 00000000 ____D () C:\Program Files (x86)\Spyware Terminator
2014-05-13 15:27 - 2014-05-13 15:27 - 01058232 _____ (Crawler, LLC ) C:\Users\Mira\Desktop\SpywareTerminatorSetup.exe
2014-05-13 15:18 - 2014-05-13 15:18 - 00002225 _____ () C:\Users\Mira\Desktop\RKreport[0]_S_05132014_151828.txt
2014-05-13 15:17 - 2014-05-13 15:18 - 00000000 ____D () C:\Users\Mira\Desktop\RK_Quarantine
2014-05-13 15:17 - 2014-05-13 15:17 - 00002599 _____ () C:\Users\Mira\Desktop\RKreport[0]_D_05132014_151754.txt
2014-05-13 15:17 - 2014-05-13 15:17 - 00002516 _____ () C:\Users\Mira\Desktop\RKreport[0]_S_05132014_151744.txt
2014-05-13 15:15 - 2014-05-13 15:19 - 00000000 ____D () C:\AdwCleaner
2014-05-13 15:14 - 2014-05-13 15:14 - 03972608 _____ () C:\Users\Mira\Desktop\RogueKiller.exe
2014-05-13 15:14 - 2014-05-13 15:14 - 01325827 _____ () C:\Users\Mira\Desktop\adwcleaner.exe
2014-05-13 14:52 - 2014-05-13 14:52 - 00001106 _____ () C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk
2014-05-13 14:52 - 2014-05-13 14:52 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes Anti-Malware
2014-05-13 14:52 - 2014-05-13 14:52 - 00000000 ____D () C:\Program Files (x86)\Malwarebytes Anti-Malware
2014-05-13 14:52 - 2014-04-03 09:51 - 00088280 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys
2014-05-13 14:52 - 2014-04-03 09:51 - 00063192 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys
2014-05-13 14:52 - 2014-04-03 09:50 - 00025816 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys
2014-05-13 14:51 - 2014-05-13 12:47 - 17305616 _____ (Malwarebytes Corporation ) C:\Users\Mira\Desktop\mbam-setup-2.0.1.1004.exe
2014-05-13 14:43 - 2014-05-13 15:37 - 00001732 _____ () C:\Windows\PFRO.log
2014-05-13 14:43 - 2014-05-13 15:37 - 00000224 _____ () C:\Windows\setupact.log
2014-05-13 14:43 - 2014-05-13 14:43 - 00000000 _____ () C:\Windows\setuperr.log
2014-05-13 14:38 - 2014-05-13 14:38 - 05200050 ____R (Swearware) C:\Users\Mira\Desktop\ComboFix.exe
2014-05-13 14:36 - 2014-05-13 14:36 - 00008607 _____ () C:\Users\Mira\Desktop\hijackthis.log
2014-05-13 14:27 - 2014-05-13 15:40 - 00031848 _____ () C:\Windows\WindowsUpdate.log
2014-05-13 14:19 - 2014-05-13 14:37 - 00000000 ____D () C:\Program Files\trend micro
2014-05-13 14:19 - 2014-05-13 14:19 - 00388608 _____ (Trend Micro Inc.) C:\Users\Mira\Desktop\hijackthis.exe
2014-05-13 14:19 - 2014-05-13 14:19 - 00000000 ____D () C:\rsit
2014-05-13 12:49 - 2014-05-13 14:52 - 00119512 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2014-05-13 12:30 - 2014-05-13 13:48 - 00000000 ____D () C:\Program Files (x86)\Spybot - Search & Destroy 2
2014-05-13 12:28 - 2014-05-13 12:29 - 46392680 _____ (Safer-Networking Ltd. ) C:\Users\Mira\Downloads\spybot-2.3.exe
2014-05-13 12:15 - 2014-05-13 15:53 - 00000000 ____D () C:\FRST
2014-05-07 21:53 - 2014-04-29 16:01 - 23547904 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-05-07 21:53 - 2014-04-29 15:40 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2014-05-07 21:53 - 2014-04-29 14:48 - 17384448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2014-05-07 21:53 - 2014-04-29 14:34 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2014-05-06 16:01 - 2014-05-06 16:01 - 00000000 __SHD () C:\Users\Mira\AppData\Local\EmieUserList
2014-05-06 16:01 - 2014-05-06 16:01 - 00000000 __SHD () C:\Users\Mira\AppData\Local\EmieSiteList
2014-05-06 15:22 - 2014-03-06 11:31 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2014-05-06 15:22 - 2014-03-06 10:59 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2014-05-06 15:22 - 2014-03-06 10:57 - 00548352 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2014-05-06 15:22 - 2014-03-06 10:57 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2014-05-06 15:22 - 2014-03-06 10:53 - 02767360 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2014-05-06 15:22 - 2014-03-06 10:40 - 00051200 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2014-05-06 15:22 - 2014-03-06 10:39 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2014-05-06 15:22 - 2014-03-06 10:32 - 00574976 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2014-05-06 15:22 - 2014-03-06 10:29 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2014-05-06 15:22 - 2014-03-06 10:29 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2014-05-06 15:22 - 2014-03-06 10:28 - 00752640 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2014-05-06 15:22 - 2014-03-06 10:15 - 00940032 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2014-05-06 15:22 - 2014-03-06 10:09 - 00453120 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2014-05-06 15:22 - 2014-03-06 10:03 - 00586240 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2014-05-06 15:22 - 2014-03-06 10:02 - 00455168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2014-05-06 15:22 - 2014-03-06 10:02 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2014-05-06 15:22 - 2014-03-06 10:01 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2014-05-06 15:22 - 2014-03-06 09:56 - 00038400 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2014-05-06 15:22 - 2014-03-06 09:48 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2014-05-06 15:22 - 2014-03-06 09:47 - 02178048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2014-05-06 15:22 - 2014-03-06 09:46 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2014-05-06 15:22 - 2014-03-06 09:45 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2014-05-06 15:22 - 2014-03-06 09:42 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2014-05-06 15:22 - 2014-03-06 09:40 - 00440832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2014-05-06 15:22 - 2014-03-06 09:38 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2014-05-06 15:22 - 2014-03-06 09:36 - 00592896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2014-05-06 15:22 - 2014-03-06 09:22 - 00367616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2014-05-06 15:22 - 2014-03-06 09:21 - 00628736 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2014-05-06 15:22 - 2014-03-06 09:13 - 00032256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll
2014-05-06 15:22 - 2014-03-06 09:11 - 02043904 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2014-05-06 15:22 - 2014-03-06 09:07 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2014-05-06 15:22 - 2014-03-06 09:01 - 00244224 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2014-05-06 15:22 - 2014-03-06 08:53 - 13551104 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2014-05-06 15:22 - 2014-03-06 08:46 - 00524288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2014-05-06 15:22 - 2014-03-06 08:40 - 01967104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2014-05-06 15:22 - 2014-03-06 08:22 - 02260480 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2014-05-06 15:22 - 2014-03-06 07:58 - 01400832 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2014-05-06 15:22 - 2014-03-06 07:50 - 00846336 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2014-05-06 15:22 - 2014-03-06 07:43 - 00704512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2014-05-06 15:22 - 2014-03-06 07:41 - 01789440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2014-05-06 15:22 - 2014-03-06 07:36 - 01143808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2014-05-06 15:21 - 2014-05-06 15:21 - 00000000 ___SD () C:\Windows\system32\CompatTel
2014-05-06 15:21 - 2014-03-06 10:11 - 05784064 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2014-05-06 15:21 - 2014-03-06 09:46 - 04254720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2014-05-06 15:21 - 2014-03-06 08:36 - 11745792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2014-05-06 14:22 - 2014-04-14 04:24 - 00465408 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll
2014-05-06 14:22 - 2014-04-14 04:19 - 00424448 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll
2014-05-03 10:58 - 2014-05-03 10:58 - 01404844 _____ () C:\Users\Mira\Downloads\3.mpeg
2014-05-01 18:31 - 2014-05-01 18:31 - 00000000 ____D () C:\Users\Mira\AppData\Roaming\com.valve.FTP
2014-05-01 12:16 - 2014-05-01 12:16 - 00000194 _____ () C:\Users\Mira\Desktop\Free to Play.url
2014-04-18 22:21 - 2014-04-18 22:21 - 03239656 _____ () C:\Users\Mira\Downloads\4.mpeg
2014-04-16 20:27 - 2014-04-16 20:27 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java
2014-04-15 23:26 - 2014-04-15 23:26 - 00449306 _____ () C:\Users\Mira\Downloads\Sdilej_Manager.zip
2014-04-15 23:26 - 2014-04-15 23:26 - 00000318 _____ () C:\Users\Mira\Desktop\CZshare.appref-ms
2014-04-15 23:26 - 2014-04-15 23:26 - 00000000 ____D () C:\Users\Mira\Downloads\Sdilej_Manager
2014-04-15 23:26 - 2014-04-15 23:26 - 00000000 ____D () C:\Users\Mira\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\SDÍLEJ.CZ
2014-04-13 16:19 - 2014-04-13 16:19 - 00012250 _____ () C:\Users\Mira\Downloads\bbtcz-s07e20_v1.zip

==================== One Month Modified Files and Folders =======

2014-05-13 15:53 - 2014-05-13 15:53 - 00009732 _____ () C:\Users\Mira\Desktop\FRST.txt
2014-05-13 15:53 - 2014-05-13 12:15 - 00000000 ____D () C:\FRST
2014-05-13 15:51 - 2014-05-13 15:51 - 02066944 _____ (Farbar) C:\Users\Mira\Desktop\FRST64.exe
2014-05-13 15:44 - 2014-05-13 15:44 - 00000000 ____D () C:\ProgramData\Licenses
2014-05-13 15:44 - 2009-07-14 06:45 - 00022064 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-05-13 15:44 - 2009-07-14 06:45 - 00022064 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-05-13 15:41 - 2011-04-12 10:34 - 00668898 _____ () C:\Windows\system32\perfh005.dat
2014-05-13 15:41 - 2011-04-12 10:34 - 00141556 _____ () C:\Windows\system32\perfc005.dat
2014-05-13 15:41 - 2009-07-14 07:13 - 01584684 _____ () C:\Windows\system32\PerfStringBackup.INI
2014-05-13 15:40 - 2014-05-13 14:27 - 00031848 _____ () C:\Windows\WindowsUpdate.log
2014-05-13 15:37 - 2014-05-13 14:43 - 00001732 _____ () C:\Windows\PFRO.log
2014-05-13 15:37 - 2014-05-13 14:43 - 00000224 _____ () C:\Windows\setupact.log
2014-05-13 15:37 - 2009-07-14 07:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2014-05-13 15:35 - 2014-05-13 15:35 - 00000258 _____ () C:\ProgramData\Licenses.rar
2014-05-13 15:34 - 2014-05-13 15:34 - 00023905 _____ () C:\ComboFix.txt
2014-05-13 15:34 - 2014-03-09 00:21 - 00000000 ____D () C:\Qoobox
2014-05-13 15:34 - 2014-03-08 20:27 - 00000000 ____D () C:\Users\Mira\AppData\Local\Apps\2.0
2014-05-13 15:33 - 2014-05-13 15:28 - 00000000 ____D () C:\ProgramData\Spyware Terminator
2014-05-13 15:33 - 2009-07-14 04:34 - 00000215 _____ () C:\Windows\system.ini
2014-05-13 15:30 - 2014-05-13 15:30 - 00001083 _____ () C:\Users\Public\Desktop\SpywareBlaster.lnk
2014-05-13 15:30 - 2014-05-13 15:30 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\SpywareBlaster
2014-05-13 15:30 - 2014-05-13 15:30 - 00000000 ____D () C:\Program Files (x86)\SpywareBlaster
2014-05-13 15:29 - 2014-05-13 15:29 - 04095448 _____ (BrightFort LLC ) C:\Users\Mira\Desktop\spywareblastersetup50.exe
2014-05-13 15:28 - 2014-05-13 15:28 - 00051496 _____ (Windows (R) Win 7 DDK provider) C:\Windows\system32\Drivers\stflt.sys
2014-05-13 15:28 - 2014-05-13 15:28 - 00001042 _____ () C:\Users\Public\Desktop\Spyware Terminator 2012.lnk
2014-05-13 15:28 - 2014-05-13 15:28 - 00000000 ____D () C:\Users\Mira\AppData\Roaming\Spyware Terminator
2014-05-13 15:28 - 2014-05-13 15:28 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Spyware Terminator 2012
2014-05-13 15:28 - 2014-05-13 15:28 - 00000000 ____D () C:\Program Files (x86)\Spyware Terminator
2014-05-13 15:27 - 2014-05-13 15:27 - 01058232 _____ (Crawler, LLC ) C:\Users\Mira\Desktop\SpywareTerminatorSetup.exe
2014-05-13 15:19 - 2014-05-13 15:15 - 00000000 ____D () C:\AdwCleaner
2014-05-13 15:18 - 2014-05-13 15:18 - 00002225 _____ () C:\Users\Mira\Desktop\RKreport[0]_S_05132014_151828.txt
2014-05-13 15:18 - 2014-05-13 15:17 - 00000000 ____D () C:\Users\Mira\Desktop\RK_Quarantine
2014-05-13 15:17 - 2014-05-13 15:17 - 00002599 _____ () C:\Users\Mira\Desktop\RKreport[0]_D_05132014_151754.txt
2014-05-13 15:17 - 2014-05-13 15:17 - 00002516 _____ () C:\Users\Mira\Desktop\RKreport[0]_S_05132014_151744.txt
2014-05-13 15:14 - 2014-05-13 15:14 - 03972608 _____ () C:\Users\Mira\Desktop\RogueKiller.exe
2014-05-13 15:14 - 2014-05-13 15:14 - 01325827 _____ () C:\Users\Mira\Desktop\adwcleaner.exe
2014-05-13 14:52 - 2014-05-13 14:52 - 00001106 _____ () C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk
2014-05-13 14:52 - 2014-05-13 14:52 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes Anti-Malware
2014-05-13 14:52 - 2014-05-13 14:52 - 00000000 ____D () C:\Program Files (x86)\Malwarebytes Anti-Malware
2014-05-13 14:52 - 2014-05-13 12:49 - 00119512 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2014-05-13 14:43 - 2014-05-13 14:43 - 00000000 _____ () C:\Windows\setuperr.log
2014-05-13 14:38 - 2014-05-13 14:38 - 05200050 ____R (Swearware) C:\Users\Mira\Desktop\ComboFix.exe
2014-05-13 14:37 - 2014-05-13 14:19 - 00000000 ____D () C:\Program Files\trend micro
2014-05-13 14:36 - 2014-05-13 14:36 - 00008607 _____ () C:\Users\Mira\Desktop\hijackthis.log
2014-05-13 14:31 - 2014-03-08 19:33 - 00000000 ____D () C:\Users\Mira\AppData\Local\VirtualStore
2014-05-13 14:27 - 2014-03-08 21:09 - 00000000 ____D () C:\Users\Mira\AppData\Local\Deployment
2014-05-13 14:19 - 2014-05-13 14:19 - 00388608 _____ (Trend Micro Inc.) C:\Users\Mira\Desktop\hijackthis.exe
2014-05-13 14:19 - 2014-05-13 14:19 - 00000000 ____D () C:\rsit
2014-05-13 13:54 - 2014-03-18 16:37 - 00000000 ____D () C:\Users\Mira\Desktop\Politické ideologie
2014-05-13 13:48 - 2014-05-13 12:30 - 00000000 ____D () C:\Program Files (x86)\Spybot - Search & Destroy 2
2014-05-13 13:47 - 2014-03-08 20:32 - 00000000 ____D () C:\Program Files (x86)\Steam
2014-05-13 13:11 - 2014-03-09 00:45 - 00000000 ____D () C:\ProgramData\Spybot - Search & Destroy
2014-05-13 12:48 - 2014-03-09 01:19 - 00000000 ____D () C:\ProgramData\Malwarebytes
2014-05-13 12:47 - 2014-05-13 14:51 - 17305616 _____ (Malwarebytes Corporation ) C:\Users\Mira\Desktop\mbam-setup-2.0.1.1004.exe
2014-05-13 12:29 - 2014-05-13 12:28 - 46392680 _____ (Safer-Networking Ltd. ) C:\Users\Mira\Downloads\spybot-2.3.exe
2014-05-13 12:14 - 2014-03-08 20:22 - 00000000 ____D () C:\Users\Mira\AppData\Roaming\Skype
2014-05-12 22:56 - 2014-03-09 02:56 - 00000000 ____D () C:\Users\Mira\AppData\Local\ArmA 2 OA
2014-05-10 21:37 - 2014-03-08 21:21 - 00000000 ____D () C:\ProgramData\Origin
2014-05-10 21:36 - 2014-03-08 21:06 - 00000000 ____D () C:\Program Files (x86)\Origin
2014-05-06 16:01 - 2014-05-06 16:01 - 00000000 __SHD () C:\Users\Mira\AppData\Local\EmieUserList
2014-05-06 16:01 - 2014-05-06 16:01 - 00000000 __SHD () C:\Users\Mira\AppData\Local\EmieSiteList
2014-05-06 15:49 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\rescache
2014-05-06 15:24 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\PolicyDefinitions
2014-05-06 15:21 - 2014-05-06 15:21 - 00000000 ___SD () C:\Windows\system32\CompatTel
2014-05-03 10:58 - 2014-05-03 10:58 - 01404844 _____ () C:\Users\Mira\Downloads\3.mpeg
2014-05-02 14:06 - 2014-03-08 20:43 - 00000000 ____D () C:\Users\Mira\AppData\Roaming\DAEMON Tools Lite
2014-05-02 14:06 - 2014-03-08 20:21 - 00000822 _____ () C:\Users\Public\Desktop\CCleaner.lnk
2014-05-02 14:06 - 2014-03-08 20:21 - 00000000 ____D () C:\Program Files\CCleaner
2014-05-02 11:18 - 2014-03-24 22:24 - 00085504 _____ () C:\Users\Mira\Desktop\OKNA_DVEŘE_2014.xls
2014-05-01 18:31 - 2014-05-01 18:31 - 00000000 ____D () C:\Users\Mira\AppData\Roaming\com.valve.FTP
2014-05-01 12:16 - 2014-05-01 12:16 - 00000194 _____ () C:\Users\Mira\Desktop\Free to Play.url
2014-04-29 16:01 - 2014-05-07 21:53 - 23547904 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-04-29 15:40 - 2014-05-07 21:53 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2014-04-29 14:48 - 2014-05-07 21:53 - 17384448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2014-04-29 14:34 - 2014-05-07 21:53 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2014-04-29 11:55 - 2014-03-08 20:15 - 00692400 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2014-04-29 11:55 - 2014-03-08 20:15 - 00070832 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2014-04-29 11:55 - 2014-03-08 20:15 - 00003852 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater
2014-04-22 16:07 - 2014-03-31 02:03 - 00000000 ____D () C:\Users\Mira\Documents\Moje naskenované obrázky
2014-04-18 22:21 - 2014-04-18 22:21 - 03239656 _____ () C:\Users\Mira\Downloads\4.mpeg
2014-04-16 20:27 - 2014-04-16 20:27 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java
2014-04-16 20:27 - 2014-03-29 12:06 - 00000000 ____D () C:\ProgramData\Oracle
2014-04-16 20:27 - 2014-03-29 12:06 - 00000000 ____D () C:\Program Files (x86)\Java
2014-04-15 23:26 - 2014-04-15 23:26 - 00449306 _____ () C:\Users\Mira\Downloads\Sdilej_Manager.zip
2014-04-15 23:26 - 2014-04-15 23:26 - 00000318 _____ () C:\Users\Mira\Desktop\CZshare.appref-ms
2014-04-15 23:26 - 2014-04-15 23:26 - 00000000 ____D () C:\Users\Mira\Downloads\Sdilej_Manager
2014-04-15 23:26 - 2014-04-15 23:26 - 00000000 ____D () C:\Users\Mira\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\SDÍLEJ.CZ
2014-04-14 18:34 - 2014-03-08 21:34 - 00000000 ____D () C:\Users\Mira\AppData\Local\Adobe
2014-04-14 04:24 - 2014-05-06 14:22 - 00465408 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll
2014-04-14 04:19 - 2014-05-06 14:22 - 00424448 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll
2014-04-13 16:19 - 2014-04-13 16:19 - 00012250 _____ () C:\Users\Mira\Downloads\bbtcz-s07e20_v1.zip

==================== Bamital & volsnap Check =================

C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\rpcss.dll => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit

LastRegBack: 2014-05-09 15:37

==================== End Of Log ============================

ComboFix 14-05-13.01 - Mira 13.05.2014 15:31:45.6.4 - x64
Microsoft Windows 7 Home Premium 6.1.7601.1.1250.420.1029.18.16351.14111 [GMT 2:00]
Spuštěný z: c:\users\Mira\Desktop\ComboFix.exe
AV: Microsoft Security Essentials *Disabled/Updated* {641105E6-77ED-3F35-A304-765193BCB75F}
SP: Microsoft Security Essentials *Disabled/Updated* {DF70E402-51D7-30BB-99B4-4D23E83BFDE2}
SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.
.
((((((((((((((((((((((((( Soubory vytvořené od 2014-04-13 do 2014-05-13 )))))))))))))))))))))))))))))))
.
.
2014-05-13 13:33 . 2014-05-13 13:33 -------- d-----w- c:\users\Public\AppData\Local\temp
2014-05-13 13:33 . 2014-05-13 13:33 -------- d-----w- c:\users\Default\AppData\Local\temp
2014-05-13 13:30 . 2014-05-13 13:30 -------- d-----w- c:\program files (x86)\SpywareBlaster
2014-05-13 13:28 . 2014-05-13 13:33 -------- d-----w- c:\programdata\Spyware Terminator
2014-05-13 13:28 . 2014-05-13 13:28 51496 ----a-w- c:\windows\system32\drivers\stflt.sys
2014-05-13 13:28 . 2014-05-13 13:28 -------- d-----w- c:\users\Mira\AppData\Roaming\Spyware Terminator
2014-05-13 13:28 . 2014-05-13 13:28 -------- d-----w- c:\program files (x86)\Spyware Terminator
2014-05-13 13:15 . 2014-05-13 13:19 -------- d-----w- C:\AdwCleaner
2014-05-13 12:52 . 2014-05-13 12:52 -------- d-----w- c:\program files (x86)\Malwarebytes Anti-Malware
2014-05-13 12:52 . 2014-04-03 07:51 63192 ----a-w- c:\windows\system32\drivers\mwac.sys
2014-05-13 12:52 . 2014-04-03 07:51 88280 ----a-w- c:\windows\system32\drivers\mbamchameleon.sys
2014-05-13 12:52 . 2014-04-03 07:50 25816 ----a-w- c:\windows\system32\drivers\mbam.sys
2014-05-13 12:43 . 2014-04-16 10:22 10651704 ----a-w- c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\{6DA9A78A-79B1-4688-86C3-9E3379D51A78}\mpengine.dll
2014-05-13 12:19 . 2014-05-13 12:37 -------- d-----w- c:\program files\trend micro
2014-05-13 12:19 . 2014-05-13 12:19 -------- d-----w- C:\rsit
2014-05-13 12:05 . 2014-05-13 12:05 -------- d-----w- c:\users\UpdatusUser
2014-05-13 11:51 . 2014-05-13 11:51 -------- d-----w- c:\programdata\Licenses
2014-05-13 10:49 . 2014-05-13 12:52 119512 ----a-w- c:\windows\system32\drivers\MBAMSwissArmy.sys
2014-05-13 10:30 . 2014-05-13 11:48 -------- d-----w- c:\program files (x86)\Spybot - Search & Destroy 2
2014-05-13 10:15 . 2014-05-13 11:54 -------- d-----w- C:\FRST
2014-05-11 09:22 . 2014-04-16 10:22 10651704 ----a-w- c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\Backup\mpengine.dll
2014-05-08 19:47 . 2014-05-02 09:16 1031560 ------w- c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\{2557F159-F458-48AE-A176-85FE919B8DBD}\gapaengine.dll
2014-05-07 19:53 . 2014-04-29 14:01 23547904 ----a-w- c:\windows\system32\mshtml.dll
2014-05-07 19:53 . 2014-04-29 13:40 2724864 ----a-w- c:\windows\system32\mshtml.tlb
2014-05-07 19:53 . 2014-04-29 12:34 2724864 ----a-w- c:\windows\SysWow64\mshtml.tlb
2014-05-06 14:01 . 2014-05-06 14:01 -------- d-sh--w- c:\users\Mira\AppData\Local\EmieUserList
2014-05-06 14:01 . 2014-05-06 14:01 -------- d-sh--w- c:\users\Mira\AppData\Local\EmieSiteList
2014-05-06 13:21 . 2014-03-06 08:11 5784064 ----a-w- c:\windows\system32\jscript9.dll
2014-05-06 13:21 . 2014-03-06 07:46 4254720 ----a-w- c:\windows\SysWow64\jscript9.dll
2014-05-06 13:21 . 2014-05-06 13:21 -------- d-s---w- c:\windows\system32\CompatTel
2014-05-06 12:22 . 2014-04-14 02:24 465408 ----a-w- c:\windows\system32\aepdu.dll
2014-05-06 12:22 . 2014-04-14 02:19 424448 ----a-w- c:\windows\system32\aeinv.dll
2014-05-01 16:31 . 2014-05-01 16:31 -------- d-----w- c:\users\Mira\AppData\Roaming\com.valve.FTP
.
.
.
(((((((((((((((((((((((((((((((((((((((( Find3M výpis ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2014-05-02 09:16 . 2014-03-14 17:33 1031560 ------w- c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\NISBackup\gapaengine.dll
2014-04-29 09:55 . 2014-03-08 18:15 692400 ----a-w- c:\windows\SysWow64\FlashPlayerApp.exe
2014-04-29 09:55 . 2014-03-08 18:15 70832 ----a-w- c:\windows\SysWow64\FlashPlayerCPLApp.cpl
2014-04-04 17:45 . 2014-03-08 21:27 214392 ----a-w- c:\windows\SysWow64\PnkBstrB.exe
2014-04-01 00:36 . 2014-03-08 21:27 214392 ----a-w- c:\windows\SysWow64\PnkBstrB.ex0
2014-03-31 01:51 . 2014-03-08 18:47 90655440 ----a-w- c:\windows\system32\MRT.exe
2014-03-27 12:45 . 2014-04-07 17:21 9734744 ----a-w- c:\windows\SysWow64\nvcuda.dll
2014-03-27 12:45 . 2014-04-07 17:21 9697128 ----a-w- c:\windows\SysWow64\nvopencl.dll
2014-03-27 12:45 . 2014-04-07 17:21 894752 ----a-w- c:\windows\system32\NvIFR64.dll
2014-03-27 12:45 . 2014-04-07 17:21 891168 ----a-w- c:\windows\system32\NvFBC64.dll
2014-03-27 12:45 . 2014-04-07 17:21 864600 ----a-w- c:\windows\SysWow64\NvIFR.dll
2014-03-27 12:45 . 2014-04-07 17:21 859592 ----a-w- c:\windows\SysWow64\NvFBC.dll
2014-03-27 12:45 . 2014-04-07 17:21 836544 ----a-w- c:\windows\SysWow64\nvumdshim.dll
2014-03-27 12:45 . 2014-04-07 17:21 491864 ----a-w- c:\windows\system32\nvEncodeAPI64.dll
2014-03-27 12:45 . 2014-04-07 17:21 415008 ----a-w- c:\windows\SysWow64\nvEncodeAPI.dll
2014-03-27 12:45 . 2014-04-07 17:21 382240 ----a-w- c:\windows\system32\NvIFROpenGL.dll
2014-03-27 12:45 . 2014-04-07 17:21 354016 ----a-w- c:\windows\system32\nvoglshim64.dll
2014-03-27 12:45 . 2014-04-07 17:21 336672 ----a-w- c:\windows\SysWow64\NvIFROpenGL.dll
2014-03-27 12:45 . 2014-04-07 17:21 3139928 ----a-w- c:\windows\system32\nvcuvid.dll
2014-03-27 12:45 . 2014-04-07 17:21 31270856 ----a-w- c:\windows\system32\nvoglv64.dll
2014-03-27 12:45 . 2014-04-07 17:21 305600 ----a-w- c:\windows\SysWow64\nvoglshim32.dll
2014-03-27 12:45 . 2014-04-07 17:21 2949976 ----a-w- c:\windows\SysWow64\nvcuvid.dll
2014-03-27 12:45 . 2014-04-07 17:21 2785056 ----a-w- c:\windows\system32\nvcuvenc.dll
2014-03-27 12:45 . 2014-04-07 17:21 2728160 ----a-w- c:\windows\SysWow64\nvapi.dll
2014-03-27 12:45 . 2014-04-07 17:21 25257416 ----a-w- c:\windows\system32\nvcompiler.dll
2014-03-27 12:45 . 2014-04-07 17:21 2413344 ----a-w- c:\windows\SysWow64\nvcuvenc.dll
2014-03-27 12:45 . 2014-04-07 17:21 23785416 ----a-w- c:\windows\SysWow64\nvoglv32.dll
2014-03-27 12:45 . 2014-04-07 17:21 1890080 ----a-w- c:\windows\system32\nvdispco6433750.dll
2014-03-27 12:45 . 2014-04-07 17:21 17561544 ----a-w- c:\windows\SysWow64\nvcompiler.dll
2014-03-27 12:45 . 2014-04-07 17:21 17467048 ----a-w- c:\windows\system32\nvd3dumx.dll
2014-03-27 12:45 . 2014-04-07 17:21 166568 ----a-w- c:\windows\system32\nvinitx.dll
2014-03-27 12:45 . 2014-04-07 17:21 15964736 ----a-w- c:\windows\SysWow64\nvwgf2um.dll
2014-03-27 12:45 . 2014-04-07 17:21 1539416 ----a-w- c:\windows\system32\nvdispgenco6433750.dll
2014-03-27 12:45 . 2014-04-07 17:21 146480 ----a-w- c:\windows\SysWow64\nvinit.dll
2014-03-27 12:45 . 2014-04-07 17:21 13158232 ----a-w- c:\windows\system32\drivers\nvlddmkm.sys
2014-03-27 12:45 . 2014-04-07 17:21 11644392 ----a-w- c:\windows\system32\nvcuda.dll
2014-03-27 12:45 . 2014-04-07 17:21 11598560 ----a-w- c:\windows\system32\nvopencl.dll
2014-03-27 12:45 . 2014-03-08 19:04 18493952 ----a-w- c:\windows\system32\nvwgf2umx.dll
2014-03-27 12:45 . 2014-03-08 19:04 14422856 ----a-w- c:\windows\SysWow64\nvd3dum.dll
2014-03-27 12:45 . 2014-03-08 18:47 60248 ----a-w- c:\windows\system32\OpenCL.dll
2014-03-27 12:45 . 2014-03-08 18:47 53024 ----a-w- c:\windows\SysWow64\OpenCL.dll
2014-03-27 12:45 . 2013-10-27 08:12 952440 ----a-w- c:\windows\system32\nvumdshimx.dll
2014-03-27 12:45 . 2013-10-27 08:12 3106688 ----a-w- c:\windows\system32\nvapi64.dll
2014-03-27 02:11 . 2014-03-08 18:47 6768584 ----a-w- c:\windows\system32\nvcpl.dll
2014-03-27 02:11 . 2014-03-08 18:47 3512664 ----a-w- c:\windows\system32\nvsvc64.dll
2014-03-27 02:11 . 2014-03-08 18:47 927520 ----a-w- c:\windows\system32\nvvsvc.exe
2014-03-27 02:11 . 2014-03-08 18:47 63776 ----a-w- c:\windows\system32\nvshext.dll
2014-03-27 02:11 . 2014-03-08 18:47 386336 ----a-w- c:\windows\system32\nvmctray.dll
2014-03-27 02:11 . 2014-03-08 18:47 2558808 ----a-w- c:\windows\system32\nvsvcr.dll
2014-03-24 10:31 . 2014-03-08 18:47 3683457 ----a-w- c:\windows\system32\nvcoproc.bin
2014-03-17 20:11 . 2014-03-29 10:06 96168 ----a-w- c:\windows\SysWow64\WindowsAccessBridge-32.dll
2014-03-11 07:52 . 2013-09-27 08:53 133928 ----a-w- c:\windows\system32\drivers\NisDrvWFP.sys
2014-03-08 21:27 . 2014-03-08 21:27 76888 ----a-w- c:\windows\SysWow64\PnkBstrA.exe
2014-03-08 19:35 . 2014-03-08 19:35 16896 ----a-w- c:\windows\AsTaskSched.dll
2014-03-08 18:43 . 2014-03-08 18:43 283064 ----a-w- c:\windows\system32\drivers\dtsoftbus01.sys
2014-03-08 18:35 . 2014-03-08 18:35 194048 ----a-w- c:\windows\SysWow64\elshyph.dll
2014-03-08 18:35 . 2014-03-08 18:35 942592 ----a-w- c:\windows\system32\jsIntl.dll
2014-03-08 18:35 . 2014-03-08 18:35 90112 ----a-w- c:\windows\system32\SetIEInstalledDate.exe
2014-03-08 18:35 . 2014-03-08 18:35 86016 ----a-w- c:\windows\SysWow64\iesysprep.dll
2014-03-08 18:35 . 2014-03-08 18:35 86016 ----a-w- c:\windows\system32\RegisterIEPKEYs.exe
2014-03-08 18:35 . 2014-03-08 18:35 84992 ----a-w- c:\windows\system32\mshtmled.dll
2014-03-08 18:35 . 2014-03-08 18:35 83968 ----a-w- c:\windows\system32\MshtmlDac.dll
2014-03-08 18:35 . 2014-03-08 18:35 81408 ----a-w- c:\windows\system32\icardie.dll
2014-03-08 18:35 . 2014-03-08 18:35 774144 ----a-w- c:\windows\system32\jscript.dll
2014-03-08 18:35 . 2014-03-08 18:35 77312 ----a-w- c:\windows\system32\tdc.ocx
2014-03-08 18:35 . 2014-03-08 18:35 74240 ----a-w- c:\windows\SysWow64\SetIEInstalledDate.exe
2014-03-08 18:35 . 2014-03-08 18:35 71680 ----a-w- c:\windows\SysWow64\RegisterIEPKEYs.exe
2014-03-08 18:35 . 2014-03-08 18:35 645120 ----a-w- c:\windows\SysWow64\jsIntl.dll
2014-03-08 18:35 . 2014-03-08 18:35 62464 ----a-w- c:\windows\SysWow64\tdc.ocx
2014-03-08 18:35 . 2014-03-08 18:35 62464 ----a-w- c:\windows\system32\pngfilt.dll
2014-03-08 18:35 . 2014-03-08 18:35 61952 ----a-w- c:\windows\SysWow64\MshtmlDac.dll
2014-03-08 18:35 . 2014-03-08 18:35 616104 ----a-w- c:\windows\system32\ieapfltr.dat
2014-03-08 18:35 . 2014-03-08 18:35 52224 ----a-w- c:\windows\system32\msfeedsbs.dll
2014-03-08 18:35 . 2014-03-08 18:35 48640 ----a-w- c:\windows\SysWow64\mshtmler.dll
2014-03-08 18:35 . 2014-03-08 18:35 48640 ----a-w- c:\windows\system32\mshtmler.dll
2014-03-08 18:35 . 2014-03-08 18:35 48128 ----a-w- c:\windows\system32\imgutil.dll
2014-03-08 18:35 . 2014-03-08 18:35 413696 ----a-w- c:\windows\system32\html.iec
2014-03-08 18:35 . 2014-03-08 18:35 36352 ----a-w- c:\windows\SysWow64\imgutil.dll
2014-03-08 18:35 . 2014-03-08 18:35 337408 ----a-w- c:\windows\SysWow64\html.iec
2014-03-08 18:35 . 2014-03-08 18:35 30208 ----a-w- c:\windows\system32\licmgr10.dll
2014-03-08 18:35 . 2014-03-08 18:35 263376 ----a-w- c:\windows\system32\iedkcs32.dll
2014-03-08 18:35 . 2014-03-08 18:35 247808 ----a-w- c:\windows\system32\msls31.dll
2014-03-08 18:35 . 2014-03-08 18:35 24576 ----a-w- c:\windows\SysWow64\licmgr10.dll
2014-03-08 18:35 . 2014-03-08 18:35 243200 ----a-w- c:\windows\system32\webcheck.dll
2014-03-08 18:35 . 2014-03-08 18:35 235520 ----a-w- c:\windows\system32\url.dll
2014-03-08 18:35 . 2014-03-08 18:35 235008 ----a-w- c:\windows\system32\elshyph.dll
2014-03-08 18:35 . 2014-03-08 18:35 182272 ----a-w- c:\windows\SysWow64\msls31.dll
2014-03-08 18:35 . 2014-03-08 18:35 167424 ----a-w- c:\windows\system32\iexpress.exe
2014-03-08 18:35 . 2014-03-08 18:35 151552 ----a-w- c:\windows\SysWow64\iexpress.exe
2014-03-08 18:35 . 2014-03-08 18:35 147968 ----a-w- c:\windows\system32\occache.dll
2014-03-08 18:35 . 2014-03-08 18:35 143872 ----a-w- c:\windows\system32\wextract.exe
2014-03-08 18:35 . 2014-03-08 18:35 139264 ----a-w- c:\windows\SysWow64\wextract.exe
2014-03-08 18:35 . 2014-03-08 18:35 13824 ----a-w- c:\windows\system32\mshta.exe
2014-03-08 18:35 . 2014-03-08 18:35 135680 ----a-w- c:\windows\system32\iepeers.dll
2014-03-08 18:35 . 2014-03-08 18:35 13312 ----a-w- c:\windows\SysWow64\mshta.exe
2014-03-08 18:35 . 2014-03-08 18:35 13312 ----a-w- c:\windows\system32\msfeedssync.exe
2014-03-08 18:35 . 2014-03-08 18:35 131072 ----a-w- c:\windows\system32\IEAdvpack.dll
2014-03-08 18:35 . 2014-03-08 18:35 1228800 ----a-w- c:\windows\system32\mshtmlmedia.dll
2014-03-08 18:35 . 2014-03-08 18:35 111616 ----a-w- c:\windows\SysWow64\IEAdvpack.dll
2014-03-08 18:35 . 2014-03-08 18:35 105984 ----a-w- c:\windows\system32\iesysprep.dll
.
.
(((((((((((((((((((((((((((((((((( Spouštěcí body v registru )))))))))))))))))))))))))))))))))))))))))))))
.
.
*Poznámka* prázdné záznamy a legitimní výchozí údaje nejsou zobrazeny.
REGEDIT4
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]
"NUSB3MON"="c:\program files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe" [2010-04-27 113288]
"Adobe ARM"="c:\program files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2013-11-21 959904]
"Adobe Acrobat Speed Launcher"="c:\program files (x86)\Adobe\Acrobat 10.0\Acrobat\Acrobat_sl.exe" [2012-01-03 36760]
"Acrobat Assistant 8.0"="c:\program files (x86)\Adobe\Acrobat 10.0\Acrobat\Acrotray.exe" [2012-01-03 815512]
"SunJavaUpdateSched"="c:\program files (x86)\Common Files\Java\Java Update\jusched.exe" [2013-07-02 254336]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorAdmin"= 5 (0x5)
"ConsentPromptBehaviorUser"= 3 (0x3)
"EnableUIADesktopToggle"= 0 (0x0)
.
[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\session manager]
BootExecute REG_MULTI_SZ autocheck autochk *\0\0sdnclean64.exe
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MsMpSvc]
@="Service"
.
R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [x]
R2 SkypeUpdate;Skype Updater;c:\program files (x86)\Skype\Updater\Updater.exe;c:\program files (x86)\Skype\Updater\Updater.exe [x]
R3 cpuz137;cpuz137;c:\windows\TEMP\cpuz137\cpuz137_x64.sys;c:\windows\TEMP\cpuz137\cpuz137_x64.sys [x]
R3 Futuremark SystemInfo Service;Futuremark SystemInfo Service;c:\program files (x86)\Futuremark\SystemInfo\FMSISvc.exe;c:\program files (x86)\Futuremark\SystemInfo\FMSISvc.exe [x]
R3 GPUZ;GPUZ;c:\windows\TEMP\GPUZ.sys;c:\windows\TEMP\GPUZ.sys [x]
R3 IEEtwCollectorService;Internet Explorer ETW Collector Service;c:\windows\system32\IEEtwCollector.exe;c:\windows\SYSNATIVE\IEEtwCollector.exe [x]
R3 NisDrv;Microsoft Network Inspection System;c:\windows\system32\DRIVERS\NisDrvWFP.sys;c:\windows\SYSNATIVE\DRIVERS\NisDrvWFP.sys [x]
R3 NisSrv;Kontrola sítě Microsoft;c:\program files\Microsoft Security Client\NisSrv.exe;c:\program files\Microsoft Security Client\NisSrv.exe [x]
R3 RdpVideoMiniport;Remote Desktop Video Miniport Driver;c:\windows\system32\drivers\rdpvideominiport.sys;c:\windows\SYSNATIVE\drivers\rdpvideominiport.sys [x]
R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys;c:\windows\SYSNATIVE\drivers\tsusbflt.sys [x]
R3 TsUsbGD;Remote Desktop Generic USB Device;c:\windows\system32\drivers\TsUsbGD.sys;c:\windows\SYSNATIVE\drivers\TsUsbGD.sys [x]
R3 WatAdminSvc;Služba Technologie aktivace Windows;c:\windows\system32\Wat\WatAdminSvc.exe;c:\windows\SYSNATIVE\Wat\WatAdminSvc.exe [x]
R3 WDC_SAM;WD SCSI Pass Thru driver;c:\windows\system32\DRIVERS\wdcsam64.sys;c:\windows\SYSNATIVE\DRIVERS\wdcsam64.sys [x]
S1 AsUpIO;AsUpIO;SysWow64\drivers\AsUpIO.sys;SysWow64\drivers\AsUpIO.sys [x]
S1 dtsoftbus01;DAEMON Tools Virtual Bus Driver;c:\windows\system32\DRIVERS\dtsoftbus01.sys;c:\windows\SYSNATIVE\DRIVERS\dtsoftbus01.sys [x]
S2 asComSvc;ASUS Com Service;c:\program files (x86)\ASUS\AXSP\1.00.14\atkexComSvc.exe;c:\program files (x86)\ASUS\AXSP\1.00.14\atkexComSvc.exe [x]
S2 asHmComSvc;ASUS HM Com Service;c:\program files (x86)\ASUS\AAHM\1.00.14\aaHMSvc.exe;c:\program files (x86)\ASUS\AAHM\1.00.14\aaHMSvc.exe [x]
S2 AsSysCtrlService;ASUS System Control Service;c:\program files (x86)\ASUS\AsSysCtrlService\1.00.11\AsSysCtrlService.exe;c:\program files (x86)\ASUS\AsSysCtrlService\1.00.11\AsSysCtrlService.exe [x]
S2 Intel(R) PROSet Monitoring Service;Intel(R) PROSet Monitoring Service;c:\windows\system32\IProsetMonitor.exe;c:\windows\SYSNATIVE\IProsetMonitor.exe [x]
S2 sp_rsdrv2;Spyware Terminator Driver Filter;c:\windows\system32\DRIVERS\stflt.sys;c:\windows\SYSNATIVE\DRIVERS\stflt.sys [x]
S2 ST2012_Svc;Spyware Terminator 2012 Realtime Shield Service;c:\program files (x86)\Spyware Terminator\st_rsser64.exe;c:\program files (x86)\Spyware Terminator\st_rsser64.exe [x]
S2 TeamViewer9;TeamViewer 9;c:\program files (x86)\TeamViewer\Version9\TeamViewer_Service.exe;c:\program files (x86)\TeamViewer\Version9\TeamViewer_Service.exe [x]
S3 ICCWDT;Intel(R) Watchdog Timer Driver (Intel(R) WDT);c:\windows\system32\DRIVERS\ICCWDT.sys;c:\windows\SYSNATIVE\DRIVERS\ICCWDT.sys [x]
S3 nusb3hub;Renesas Electronics USB 3.0 Hub Driver;c:\windows\system32\DRIVERS\nusb3hub.sys;c:\windows\SYSNATIVE\DRIVERS\nusb3hub.sys [x]
S3 nusb3xhc;Renesas Electronics USB 3.0 Host Controller Driver;c:\windows\system32\DRIVERS\nusb3xhc.sys;c:\windows\SYSNATIVE\DRIVERS\nusb3xhc.sys [x]
.
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\svchost]
hpdevmgmt REG_MULTI_SZ hpqcxs08 hpqddsvc
.
.
--------- X64 Entries -----------
.
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"MSC"="c:\program files\Microsoft Security Client\msseces.exe" [2014-03-11 1271072]
"RtHDVCpl"="c:\program files\Realtek\Audio\HDA\RAVCpl64.exe" [2010-11-02 11545192]
"SpywareTerminatorShield"="c:\program files (x86)\Spyware Terminator\SpywareTerminatorShield.exe" [2013-10-22 2777736]
"SpywareTerminatorUpdater"="c:\program files (x86)\Spyware Terminator\SpywareTerminatorUpdate.exe" [2013-10-22 3684488]
.
------- Doplňkový sken -------
.
uLocal Page = c:\windows\system32\blank.htm
uStart Page = hxxp://www.seznam.cz/
mLocal Page = c:\windows\SysWOW64\blank.htm
IE: E&xport to Microsoft Excel - c:\progra~2\MICROS~3\Office12\EXCEL.EXE/3000
IE: Open using &Advanced JPEG Compressor - c:\program files (x86)\Advanced JPEG Compressor\ajcieex.htm
TCP: Interfaces\{550EE2CE-9C63-4512-B553-F28EEA837AE2}: NameServer = 192.168.1.1,192.168.1.9
.
- - - - NEPLATNÉ POLOŽKY ODSTRANĚNÉ Z REGISTRU - - - -
.
Wow6432Node-HKLM-Run-<NO NAME> - (no file)
.
.
.
--------------------- ZAMKNUTÉ KLÍČE V REGISTRU ---------------------
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil64_13_0_0_206_ActiveX.exe,-101"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\Elevation]
"Enabled"=dword:00000001
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\LocalServer32]
@="c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil64_13_0_0_206_ActiveX.exe"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="IFlashBroker5"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil32_13_0_0_206_ActiveX.exe,-101"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\Elevation]
"Enabled"=dword:00000001
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\LocalServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil32_13_0_0_206_ActiveX.exe"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@="Shockwave Flash Object"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\InprocServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_13_0_0_206.ocx"
"ThreadingModel"="Apartment"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\MiscStatus]
@="0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ProgID]
@="ShockwaveFlash.ShockwaveFlash.13"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_13_0_0_206.ocx, 1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\TypeLib]
@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\Version]
@="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
@="ShockwaveFlash.ShockwaveFlash"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@="Macromedia Flash Factory Object"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\InprocServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_13_0_0_206.ocx"
"ThreadingModel"="Apartment"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ProgID]
@="FlashFactory.FlashFactory.1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_13_0_0_206.ocx, 1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\TypeLib]
@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\Version]
@="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
@="FlashFactory.FlashFactory"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="IFlashBroker5"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\PCW\Security]
@Denied: (Full) (Everyone)
.
Celkový čas: 2014-05-13 15:34:36
ComboFix-quarantined-files.txt 2014-05-13 13:34
ComboFix2.txt 2014-05-13 12:41
ComboFix3.txt 2014-05-13 12:25
ComboFix4.txt 2014-05-13 12:05
ComboFix5.txt 2014-05-13 13:31
.
Před spuštěním: Volných bajtů: 131 627 712 512
Po spuštění: Volných bajtů: 131 572 281 344
.
- - End Of File - - 2894B38D67CE12DFEBB17B64153D9F49
413FC2A0C716421B3158746D63736515

#4 Příspěvek od **vyosek** » 13 kvě 2014 15:33

Tak ted jsem si zcela jist, ze nevyctu vuuubec nic

Opakovane spousteny ComboFix - proc??? Aplikoval jste pro nej nejaky skript?? myslite, ze opakovane spousteni neco vyleci?

Procisteni RogueKillerem a MBAMem

Aplikovani zastaraleho SpywareTerminatora a pochybneho SpywareBlaster

Vy jste odbornik stylem pokus omyl a kdz po pokazim jeste vic, tak se zeptam co

Pravidla fora Vam toho tez moc nerikaji...Nebo kdo Vam raditl pouzit vsechny tyhle nastroje??

Voren · #5 Příspěvek od **Voren** » 13 kvě 2014 15:41

Tak asi je ted pozdě sypat si popel na hlavu

. Ale pokaždé když jsem nějaký problém měl tak jsem aplikoval combofix a problém byl vyřešen (dnes né).

Jediné co combofix smazal je

c:\windows\wininit.ini nic jiného .

#6 Příspěvek od **vyosek** » 13 kvě 2014 15:46

Zabalte mi do raru tyhle slozky a nekam jej uploadnete - zkusim neco vycist

C:\Qoobox
C:\Users\Mira\Desktop\RK_Quarantine
C:\Users\Mira\Desktop\RKreport[0]_S_05132014_151828.txt
C:\Users\Mira\Desktop\RKreport[0]_D_05132014_151754.txt
C:\Users\Mira\Desktop\RKreport[0]_S_05132014_151744.txt
Logy AdwCleaneru, mely by byt na c:\AdwCleaner\AdwCleaner[??].txt
Log z MBAMu - Historie - Zaznamy aplikace

Voren · #7 Příspěvek od **Voren** » 13 kvě 2014 15:55

Vše je v raru. Už se mi to jednou dneska podařilo odstranit, a vše bylo ok. Ale po třech zkušebních restartech pc se to vrátilo. Ještě jednou moc děkuju

a sypu si popel na hlavu

#8 Příspěvek od **vyosek** » 13 kvě 2014 20:07

Nejdriv si udelame poradek v zabezpeceni

Odinstalujte SpywareTerminatora, SpywareBlaster, Spybot - Search & Destroy 2 i MBAM

Tvorba fixlistu pro FRST

Spustte poznamkovy blok (Start-spustit-notepad)
Zkopirujte skript nize

Kód: Vybrat vše

Start
HKLM\...\Run: [SpywareTerminatorShield] => C:\Program Files (x86)\Spyware Terminator\SpywareTerminatorShield.exe [2777736 2013-10-22] (Crawler.com)
HKLM\...\Run: [SpywareTerminatorUpdater] => C:\Program Files (x86)\Spyware Terminator\SpywareTerminatorUpdate.exe [3684488 2013-10-22] (Crawler.com)
HKLM-x32\...\Run: [Adobe ARM] => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959904 2013-11-21] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [] => [X]
HKLM-x32\...\Run: [Adobe Acrobat Speed Launcher] => C:\Program Files (x86)\Adobe\Acrobat 10.0\Acrobat\Acrobat_sl.exe [36760 2012-01-03] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [Acrobat Assistant 8.0] => C:\Program Files (x86)\Adobe\Acrobat 10.0\Acrobat\Acrotray.exe [815512 2012-01-03] (Adobe Systems Inc.)
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [254336 2013-07-02] (Oracle Corporation)

HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.microsoft.com/isapi/redir.dl ... r=iesearch
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.seznam.cz/
StartMenuInternet: IEXPLORE.EXE - C:\Program Files (x86)\Internet Explorer\iexplore.exe
SearchScopes: HKCU - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKCU - {D5D33A73-FB59-45D9-A2F5-95DDFB4FE3A7} URL = http://tv.seznam.cz/hledej?w={searchTerms}&sourceid=QuickSearch_12454

R2 ST2012_Svc; C:\Program Files (x86)\Spyware Terminator\st_rsser64.exe [1149104 2013-10-22] (Crawler.com)

S3 catchme; \??\C:\ComboFix\catchme.sys [X]
S3 cpuz137; \??\C:\Windows\TEMP\cpuz137\cpuz137_x64.sys [X]
S3 GPUZ; \??\C:\Windows\TEMP\GPUZ.sys [X]

2014-05-13 15:53 - 2014-05-13 15:53 - 00009732 _____ () C:\Users\Mira\Desktop\FRST.txt
2014-05-13 15:30 - 2014-05-13 15:30 - 00001083 _____ () C:\Users\Public\Desktop\SpywareBlaster.lnk
2014-05-13 15:30 - 2014-05-13 15:30 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\SpywareBlaster
2014-05-13 15:30 - 2014-05-13 15:30 - 00000000 ____D () C:\Program Files (x86)\SpywareBlaster
2014-05-13 15:29 - 2014-05-13 15:29 - 04095448 _____ (BrightFort LLC ) C:\Users\Mira\Desktop\spywareblastersetup50.exe
2014-05-13 15:28 - 2014-05-13 15:33 - 00000000 ____D () C:\ProgramData\Spyware Terminator
2014-05-13 15:28 - 2014-05-13 15:28 - 00001042 _____ () C:\Users\Public\Desktop\Spyware Terminator 2012.lnk
2014-05-13 15:28 - 2014-05-13 15:28 - 00000000 ____D () C:\Users\Mira\AppData\Roaming\Spyware Terminator
2014-05-13 15:28 - 2014-05-13 15:28 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Spyware Terminator 2012
2014-05-13 15:28 - 2014-05-13 15:28 - 00000000 ____D () C:\Program Files (x86)\Spyware Terminator
2014-05-13 15:27 - 2014-05-13 15:27 - 01058232 _____ (Crawler, LLC ) C:\Users\Mira\Desktop\SpywareTerminatorSetup.exe
2014-05-13 15:18 - 2014-05-13 15:18 - 00002225 _____ () C:\Users\Mira\Desktop\RKreport[0]_S_05132014_151828.txt
2014-05-13 15:17 - 2014-05-13 15:18 - 00000000 ____D () C:\Users\Mira\Desktop\RK_Quarantine
2014-05-13 15:17 - 2014-05-13 15:17 - 00002599 _____ () C:\Users\Mira\Desktop\RKreport[0]_D_05132014_151754.txt
2014-05-13 15:17 - 2014-05-13 15:17 - 00002516 _____ () C:\Users\Mira\Desktop\RKreport[0]_S_05132014_151744.txt
2014-05-13 15:15 - 2014-05-13 15:19 - 00000000 ____D () C:\AdwCleaner
2014-05-13 15:14 - 2014-05-13 15:14 - 03972608 _____ () C:\Users\Mira\Desktop\RogueKiller.exe
2014-05-13 15:14 - 2014-05-13 15:14 - 01325827 _____ () C:\Users\Mira\Desktop\adwcleaner.exe
2014-05-13 14:52 - 2014-05-13 14:52 - 00001106 _____ () C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk
2014-05-13 14:52 - 2014-05-13 14:52 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes Anti-Malware
2014-05-13 14:52 - 2014-05-13 14:52 - 00000000 ____D () C:\Program Files (x86)\Malwarebytes Anti-Malware
2014-05-13 14:52 - 2014-04-03 09:51 - 00088280 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys
2014-05-13 14:52 - 2014-04-03 09:51 - 00063192 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys
2014-05-13 14:52 - 2014-04-03 09:50 - 00025816 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys
2014-05-13 14:51 - 2014-05-13 12:47 - 17305616 _____ (Malwarebytes Corporation ) C:\Users\Mira\Desktop\mbam-setup-2.0.1.1004.exe
2014-05-13 14:36 - 2014-05-13 14:36 - 00008607 _____ () C:\Users\Mira\Desktop\hijackthis.log
2014-05-13 12:30 - 2014-05-13 13:48 - 00000000 ____D () C:\Program Files (x86)\Spybot - Search & Destroy 2
2014-05-13 12:28 - 2014-05-13 12:29 - 46392680 _____ (Safer-Networking Ltd. ) C:\Users\Mira\Downloads\spybot-2.3.exe
2014-05-13 13:11 - 2014-03-09 00:45 - 00000000 ____D () C:\ProgramData\Spybot - Search & Destroy

Hosts:

CMD: ipconfig /flushdns
CMD: nslookup facebook.com
CMD: ping -n 3 facebook.com

End

Ulozte vytvoreny TXT jako fixlist.txt
Presunte vytvoreny fixlist vedle FRST

Spustte znovu FRST.exe

Kliknete na Fix
Probehne oprava a vytvori log Fixlog.txt

Restart PC a dejte mi sem fixlog.txt

Voren · #9 Příspěvek od **Voren** » 15 kvě 2014 17:21

Ještě před aplikací scriptu bylo pc reinstalováno. Po reinstalaci problém není. Děkuju za pomoc

#10 Příspěvek od **vyosek** » 15 kvě 2014 17:27

Tak se rozhodnete priste drive, usetrite cas me i sobe

Takze

VIRY.CZ

Nefunkčí facebook a google

Nefunkčí facebook a google

Re: Nefunkčí facebook a google

Re: Nefunkčí facebook a google

Re: Nefunkčí facebook a google

Re: Nefunkčí facebook a google

Re: Nefunkčí facebook a google

Re: Nefunkčí facebook a google

Re: Nefunkčí facebook a google

Re: Nefunkčí facebook a google

Re: Nefunkčí facebook a google