Potenciální hrozba v svchost.exe

[boris008]

ComboFix 14-12-25.01 - Martin 01.01.2015 23:00:39.2.4 - x64
Microsoft Windows 7 Professional 6.1.7601.1.1250.420.1029.18.7757.5083 [GMT 1:00]
Spuštěný z: c:\users\Martin\Desktop\ComboFix.exe
Použité ovládací přepínače :: c:\users\Martin\Desktop\CFScript.txt
AV: ESET NOD32 Antivirus 8.0 *Disabled/Updated* {19259FAE-8396-A113-46DB-15B0E7DFA289}
SP: ESET NOD32 Antivirus 8.0 *Disabled/Updated* {A2447E4A-A5AC-AE9D-7C6B-2EC29C58E834}
SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
* Vytvořen nový Bod Obnovení
.
FILE ::
"c:\windows\Tasks\GoogleUpdateTaskMachineCore.job"
"c:\windows\Tasks\GoogleUpdateTaskMachineUA.job"
.
.
((((((((((((((((((((((((((((((((((((((( Ostatní výmazy )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
c:\programdata\ampaolcjllgnllncaepanpipplfoilaa
c:\programdata\ampaolcjllgnllncaepanpipplfoilaa\background.html
c:\programdata\ampaolcjllgnllncaepanpipplfoilaa\content.js
c:\programdata\ampaolcjllgnllncaepanpipplfoilaa\lsdb.js
c:\programdata\ampaolcjllgnllncaepanpipplfoilaa\manifest.json
c:\programdata\hlnchfkgmfaaniplfboaifaimmkcffnn
c:\programdata\hlnchfkgmfaaniplfboaifaimmkcffnn\background.html
c:\programdata\hlnchfkgmfaaniplfboaifaimmkcffnn\content.js
c:\programdata\hlnchfkgmfaaniplfboaifaimmkcffnn\lsdb.js
c:\programdata\hlnchfkgmfaaniplfboaifaimmkcffnn\manifest.json
c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
.
.
((((((((((((((((((((((((( Soubory vytvořené od 2014-12-01 do 2015-01-01 )))))))))))))))))))))))))))))))
.
.
2015-01-01 22:19 . 2015-01-01 22:19 -------- d-----w- c:\users\SQLAgent$SQLSRV12\AppData\Local\temp
2015-01-01 22:19 . 2015-01-01 22:19 -------- d-----w- c:\users\MSSQL$SQLSRV12\AppData\Local\temp
2015-01-01 22:19 . 2015-01-01 22:19 -------- d-----w- c:\users\Default\AppData\Local\temp
2015-01-01 10:36 . 2015-01-01 10:36 -------- d-----w- C:\found.000
2015-01-01 10:32 . 2015-01-01 10:33 -------- d-----w- C:\AdwCleaner
2014-12-28 13:41 . 2014-12-28 13:44 -------- d-----w- C:\FRST
2014-12-27 22:05 . 2014-12-27 22:05 -------- d-----w- c:\users\Martin\AppData\Local\ESET
2014-12-27 22:02 . 2014-12-27 22:02 -------- d-----w- c:\users\Martin\AppData\Roaming\Recordpad
2014-12-27 21:35 . 2015-01-01 10:41 -------- d-----w- c:\users\Martin\AppData\Roaming\uTorrent
2014-12-26 11:07 . 2014-12-26 11:07 -------- d-----w- c:\programdata\AMMYY
2014-12-24 00:08 . 2014-12-24 00:34 -------- d-----w- c:\program files (x86)\DLLEscort
2014-12-23 22:50 . 2014-12-23 22:50 -------- d-----w- c:\program files (x86)\Seagate
2014-12-23 16:28 . 2014-12-02 10:26 11870360 ----a-w- c:\programdata\Microsoft\Windows Defender\Definition Updates\{BCE63C0D-AC9E-49A0-834A-81533567BDAA}\mpengine.dll
2014-12-21 11:01 . 2014-12-21 11:10 -------- d-----w- c:\users\Martin\AppData\Roaming\Sonarca Sound Recorder Free
2014-12-19 21:26 . 2014-12-23 00:20 -------- d-----w- c:\users\Martin\AppData\Roaming\FileZilla
2014-12-19 21:26 . 2014-12-19 21:26 -------- d-----w- c:\program files (x86)\FileZilla FTP Client
2014-12-19 16:05 . 2014-12-19 16:05 -------- d-----w- c:\users\Martin\AppData\Roaming\Oracle
2014-12-19 16:05 . 2014-12-19 16:05 -------- d-----w- c:\windows\Sun
2014-12-19 16:04 . 2014-12-19 16:04 -------- d-----w- c:\program files (x86)\Common Files\Java
2014-12-19 14:38 . 2014-12-19 14:38 -------- d-----w- c:\users\Martin\Aptana Rubles
2014-12-19 14:34 . 2014-12-19 14:34 -------- d-----w- c:\users\Martin\AppData\Local\Caphyon
2014-12-19 14:32 . 2014-12-19 14:33 -------- d-----w- c:\program files (x86)\Git
2014-12-19 14:32 . 2014-12-19 14:32 -------- d-----w- c:\program files (x86)\nodejs
2014-12-19 14:31 . 2014-12-19 16:04 -------- d-----w- c:\programdata\Oracle
2014-12-19 14:31 . 2014-09-26 17:42 98216 ----a-w- c:\windows\SysWow64\WindowsAccessBridge-32.dll
2014-12-19 14:31 . 2014-12-19 16:04 -------- d-----w- c:\program files (x86)\Java
2014-12-19 14:28 . 2014-12-19 14:31 -------- d-----w- c:\users\Martin\AppData\Roaming\Appcelerator
2014-12-19 06:45 . 2006-01-17 21:00 14008 ----a-w- c:\users\Martin\AppData\Roaming\Microsoft\SharePoint Designer\Behaviors\Actions\DOM.JS
2014-12-19 06:45 . 2006-01-17 21:00 14643 ----a-w- c:\users\Martin\AppData\Roaming\Microsoft\SharePoint Designer\Behaviors\Actions\FPLIB.JS
2014-12-19 06:45 . 2006-01-17 21:00 12235 ----a-w- c:\users\Martin\AppData\Roaming\Microsoft\SharePoint Designer\Behaviors\Actions\GETOBJ.JS
2014-12-19 06:45 . 2006-01-17 20:58 18866 ----a-w- c:\users\Martin\AppData\Roaming\Microsoft\SharePoint Designer\Behaviors\Actions\PRELOAD.JS
2014-12-19 06:45 . 2006-01-17 20:58 18466 ----a-w- c:\users\Martin\AppData\Roaming\Microsoft\SharePoint Designer\Behaviors\Actions\SETTEXT.JS
2014-12-19 06:45 . 2006-01-17 20:57 22188 ----a-w- c:\users\Martin\AppData\Roaming\Microsoft\SharePoint Designer\Behaviors\Actions\STRINGS.JS
2014-12-19 06:45 . 2006-01-17 20:56 15579 ----a-w- c:\users\Martin\AppData\Roaming\Microsoft\SharePoint Designer\Behaviors\Actions\_PRELOAD.JS
2014-12-18 13:20 . 2014-12-19 06:44 28672 ----a-w- c:\users\Martin\AppData\Roaming\Microsoft\SharePoint Designer\ProxyAssemblyCache\14.0.0.6137\System.Web.Proxy.dll
2014-12-18 13:11 . 2014-12-18 13:11 2654208 ----a-w- c:\users\Martin\AppData\Roaming\Microsoft\SharePoint Designer\ProxyAssemblyCache\14.0.0.6137\Microsoft.SharePoint.Proxy.dll
2014-12-18 11:55 . 2014-12-18 11:55 -------- d-----w- c:\program files (x86)\Common Files\Windows Live
2014-12-18 09:21 . 2014-12-18 14:58 -------- d-----w- c:\users\Martin\AppData\Roaming\PC Suite
2014-12-18 09:21 . 2014-12-18 14:58 -------- d-----w- c:\users\Martin\AppData\Roaming\Nokia
2014-12-18 09:21 . 2014-12-18 14:58 -------- d-----w- c:\programdata\PC Suite
2014-12-18 09:21 . 2014-12-18 09:21 -------- d-----w- c:\program files (x86)\Common Files\PCSuite
2014-12-18 09:21 . 2014-12-18 09:21 -------- d-----w- c:\program files (x86)\Common Files\Nokia
2014-12-18 09:21 . 2014-12-18 09:21 -------- d-----w- c:\program files\DIFX
2014-12-18 09:21 . 2014-12-18 09:21 -------- dc----w- c:\windows\system32\DRVSTORE
2014-12-18 09:21 . 2012-06-11 10:33 26112 ----a-w- c:\windows\system32\drivers\pccsmcfdx64.sys
2014-12-18 09:21 . 2014-12-18 09:21 -------- d-----w- c:\program files (x86)\PC Connectivity Solution
2014-12-18 09:21 . 2014-12-18 09:21 -------- d-----w- c:\program files (x86)\Nokia
2014-12-18 09:21 . 2012-01-09 16:28 57856 ----a-w- c:\windows\system32\nmwcdclsX64.dll
2014-12-18 09:20 . 2014-12-18 09:20 -------- d-----w- c:\programdata\Installations
2014-12-15 08:35 . 2014-12-27 22:02 -------- d-----w- c:\program files\Recuva
2014-12-14 11:46 . 2014-12-14 11:46 -------- d-----w- c:\program files\A-FF Find and Mount
2014-12-13 09:44 . 2014-12-13 09:44 -------- d--h--w- c:\programdata\CanonIJScan
2014-12-13 09:43 . 2014-12-13 09:43 -------- d-----w- c:\programdata\Canon IJ Network Tool
2014-12-12 09:24 . 2015-01-01 22:22 -------- d-----w- c:\users\Martin\AppData\Roaming\Dropbox
2014-12-12 06:44 . 2014-12-12 06:44 -------- d-----w- c:\programdata\Malwarebytes
2014-12-04 12:22 . 2014-12-04 12:23 -------- d-----w- c:\program files (x86)\GXStandard16-in-1
2014-12-04 12:22 . 2014-12-04 12:22 -------- d-----w- c:\program files (x86)\16in1
2014-12-03 09:36 . 2014-12-03 09:36 -------- d-----w- c:\program files (x86)\WinSCP
2014-12-03 09:26 . 2014-12-03 19:46 -------- d-----w- c:\users\Martin\AppData\Roaming\PSpad
2014-12-03 09:26 . 2014-12-03 09:26 -------- d-----w- c:\program files (x86)\PSPad editor
2014-12-03 08:59 . 2014-12-03 08:59 -------- d-----r- c:\users\Martin\AppData\Roaming\Brother
2014-12-03 08:50 . 2014-12-03 08:50 -------- d-----w- C:\Brother
2014-12-03 08:49 . 2010-05-10 08:45 103736 ----a-w- c:\windows\SysWow64\BRRBTOOL.EXE
2014-12-03 08:49 . 2005-01-17 07:10 45056 ----a-w- c:\windows\SysWow64\BRTCPCON.DLL
2014-12-03 08:49 . 2014-12-03 08:50 -------- d-----w- c:\program files (x86)\Brother
2014-12-03 08:49 . 2012-09-10 15:31 245760 ------w- c:\windows\SysWow64\NSSearch.dll
2014-12-03 08:49 . 2012-07-09 16:19 5120 ------w- c:\windows\SysWow64\BrDctF2S.dll
2014-12-03 08:49 . 2012-06-05 06:59 25299 ----a-w- c:\windows\SysWow64\BRLM03A.DLL
2014-12-03 08:49 . 2010-03-15 18:45 73728 ------w- c:\windows\SysWow64\BrDctF2.dll
2014-12-03 08:49 . 2010-02-05 02:42 180224 ----a-w- c:\windows\SysWow64\BROSNMP.DLL
2014-12-03 08:49 . 2007-12-13 21:16 5120 ------w- c:\windows\SysWow64\BrDctF2L.dll
2014-12-03 08:49 . 2004-08-09 06:42 77824 ----a-w- c:\windows\SysWow64\BRLMW03A.DLL
2014-12-03 08:48 . 2014-12-03 08:50 -------- d-----w- c:\programdata\Brother
.
.
.
(((((((((((((((((((((((((((((((((((((((( Find3M výpis ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2015-01-01 22:41 . 2015-01-01 22:41 75888 ----a-w- c:\programdata\Microsoft\Windows Defender\Definition Updates\{BCE63C0D-AC9E-49A0-834A-81533567BDAA}\offreg.dll
2014-12-18 11:57 . 2012-07-17 13:37 23256 ----a-w- c:\programdata\Microsoft\IdentityCRL\production\ppcrlconfig600.dll
2014-12-02 14:46 . 2014-11-28 13:36 2066080 ----a-w- c:\programdata\Microsoft\VisualStudio\12.0\1033\ResourceCache.dll
2014-12-02 08:23 . 2014-11-28 22:05 460064 ----a-w- c:\programdata\Microsoft\VisualStudio\10.0\1033\ResourceCache.dll
2014-12-01 20:36 . 2014-12-01 20:36 1560 ----a-w- c:\windows\delpw64.cmd
2014-11-28 22:25 . 2014-11-28 22:25 1581088 ----a-w- c:\windows\system32\drivers\tdrpm174.sys
2014-11-28 22:25 . 2014-11-28 22:25 880160 ----a-w- c:\windows\system32\drivers\timntr.sys
2014-11-28 22:25 . 2014-11-28 22:25 83488 ----a-w- c:\windows\system32\drivers\tifsfilt.sys
2014-11-28 22:25 . 2014-11-28 22:25 237600 ----a-w- c:\windows\system32\drivers\snman380.sys
2014-11-28 13:14 . 2014-11-28 13:14 198944 ----a-w- c:\windows\system32\drivers\snapman.sys
2014-11-28 12:25 . 2014-11-28 12:25 40248 ----a-w- c:\windows\system32\drivers\psadd.sys
2014-11-28 12:04 . 2014-11-28 12:04 146 ----a-w- c:\windows\launchpw.cmd
2014-11-28 11:33 . 2014-11-28 10:54 6656 ----a-w- c:\windows\system32\bcmwlrc.dll
2014-11-28 10:54 . 2014-11-28 10:54 96560 ----a-w- c:\windows\system32\bcmwlcoi.dll
2014-11-28 10:54 . 2014-11-28 10:54 8046288 ----a-w- c:\windows\system32\drivers\BCMWL664.SYS
2014-11-28 10:54 . 2014-11-28 10:54 4400128 ----a-w- c:\windows\system32\bcmihvsrv64.dll
2014-11-28 10:54 . 2014-11-28 10:54 3667968 ----a-w- c:\windows\system32\bcmihvui64.dll
2014-11-28 10:14 . 2014-11-28 10:14 194048 ----a-w- c:\windows\SysWow64\elshyph.dll
2014-11-28 10:14 . 2014-11-28 10:14 71680 ----a-w- c:\windows\SysWow64\RegisterIEPKEYs.exe
2014-11-28 10:14 . 2014-11-28 10:14 645120 ----a-w- c:\windows\SysWow64\jsIntl.dll
2014-11-28 10:14 . 2014-11-28 10:14 62464 ----a-w- c:\windows\SysWow64\tdc.ocx
2014-11-28 10:14 . 2014-11-28 10:14 60416 ----a-w- c:\windows\SysWow64\JavaScriptCollectionAgent.dll
2014-11-28 10:14 . 2014-11-28 10:14 235008 ----a-w- c:\windows\system32\elshyph.dll
2014-11-28 10:14 . 2014-11-28 10:14 1892864 ----a-w- c:\windows\SysWow64\wininet.dll
2014-11-28 10:14 . 2014-11-28 10:14 182272 ----a-w- c:\windows\SysWow64\msls31.dll
2014-11-28 10:14 . 2014-11-28 10:14 64000 ----a-w- c:\windows\SysWow64\MshtmlDac.dll
2014-11-28 10:14 . 2014-11-28 10:14 62464 ----a-w- c:\windows\SysWow64\iesetup.dll
2014-11-28 10:14 . 2014-11-28 10:14 501248 ----a-w- c:\windows\SysWow64\vbscript.dll
2014-11-28 10:14 . 2014-11-28 10:14 337408 ----a-w- c:\windows\SysWow64\html.iec
2014-11-28 10:14 . 2014-11-28 10:14 2724864 ----a-w- c:\windows\SysWow64\mshtml.tlb
2014-11-28 10:14 . 2014-11-28 10:14 24576 ----a-w- c:\windows\SysWow64\licmgr10.dll
2014-11-28 10:14 . 2014-11-28 10:14 2051072 ----a-w- c:\windows\SysWow64\inetcpl.cpl
2014-11-28 10:14 . 2014-11-28 10:14 151552 ----a-w- c:\windows\SysWow64\iexpress.exe
2014-11-28 10:14 . 2014-11-28 10:14 139264 ----a-w- c:\windows\SysWow64\wextract.exe
2014-11-28 10:14 . 2014-11-28 10:14 115712 ----a-w- c:\windows\SysWow64\ieUnatt.exe
2014-11-28 10:14 . 2014-11-28 10:14 1155072 ----a-w- c:\windows\SysWow64\mshtmlmedia.dll
2014-11-28 10:14 . 2014-11-28 10:14 942592 ----a-w- c:\windows\system32\jsIntl.dll
2014-11-28 10:14 . 2014-11-28 10:14 86016 ----a-w- c:\windows\SysWow64\iesysprep.dll
2014-11-28 10:14 . 2014-11-28 10:14 86016 ----a-w- c:\windows\system32\RegisterIEPKEYs.exe
2014-11-28 10:14 . 2014-11-28 10:14 74240 ----a-w- c:\windows\SysWow64\SetIEInstalledDate.exe
2014-11-28 10:14 . 2014-11-28 10:14 620032 ----a-w- c:\windows\SysWow64\jscript9diag.dll
2014-11-28 10:14 . 2014-11-28 10:14 54784 ----a-w- c:\windows\system32\jsproxy.dll
2014-11-28 10:14 . 2014-11-28 10:14 52224 ----a-w- c:\windows\system32\msfeedsbs.dll
2014-11-28 10:14 . 2014-11-28 10:14 48640 ----a-w- c:\windows\SysWow64\mshtmler.dll
2014-11-28 10:14 . 2014-11-28 10:14 47616 ----a-w- c:\windows\SysWow64\ieetwproxystub.dll
2014-11-28 10:14 . 2014-11-28 10:14 4298240 ----a-w- c:\windows\SysWow64\jscript9.dll
2014-11-28 10:14 . 2014-11-28 10:14 36352 ----a-w- c:\windows\SysWow64\imgutil.dll
2014-11-28 10:14 . 2014-11-28 10:14 2884096 ----a-w- c:\windows\system32\iertutil.dll
2014-11-28 10:14 . 2014-11-28 10:14 247808 ----a-w- c:\windows\system32\msls31.dll
2014-11-28 10:14 . 2014-11-28 10:14 2365440 ----a-w- c:\windows\system32\wininet.dll
2014-11-28 10:14 . 2014-11-28 10:14 199680 ----a-w- c:\windows\system32\msrating.dll
2014-11-28 10:14 . 2014-11-28 10:14 1550336 ----a-w- c:\windows\system32\urlmon.dll
2014-11-28 10:14 . 2014-11-28 10:14 13312 ----a-w- c:\windows\SysWow64\mshta.exe
2014-11-28 10:14 . 2014-11-28 10:14 13312 ----a-w- c:\windows\system32\msfeedssync.exe
2014-11-28 10:14 . 2014-11-28 10:14 131072 ----a-w- c:\windows\system32\IEAdvpack.dll
2014-11-28 10:14 . 2014-11-28 10:14 111616 ----a-w- c:\windows\SysWow64\IEAdvpack.dll
2014-11-28 10:14 . 2014-11-28 10:14 92160 ----a-w- c:\windows\system32\mshtmled.dll
2014-11-28 10:14 . 2014-11-28 10:14 90112 ----a-w- c:\windows\system32\SetIEInstalledDate.exe
2014-11-28 10:14 . 2014-11-28 10:14 814080 ----a-w- c:\windows\system32\jscript9diag.dll
2014-11-28 10:14 . 2014-11-28 10:14 81408 ----a-w- c:\windows\system32\icardie.dll
2014-11-28 10:14 . 2014-11-28 10:14 800768 ----a-w- c:\windows\system32\msfeeds.dll
2014-11-28 10:14 . 2014-11-28 10:14 799232 ----a-w- c:\windows\system32\ieapfltr.dll
2014-11-28 10:14 . 2014-11-28 10:14 77824 ----a-w- c:\windows\system32\JavaScriptCollectionAgent.dll
2014-11-28 10:14 . 2014-11-28 10:14 77312 ----a-w- c:\windows\system32\tdc.ocx
2014-11-28 10:14 . 2014-11-28 10:14 716800 ----a-w- c:\windows\system32\ie4uinit.exe
2014-11-28 10:14 . 2014-11-28 10:14 66560 ----a-w- c:\windows\system32\iesetup.dll
2014-11-28 10:14 . 2014-11-28 10:14 633856 ----a-w- c:\windows\system32\ieui.dll
2014-11-28 10:14 . 2014-11-28 10:14 616104 ----a-w- c:\windows\system32\ieapfltr.dat
2014-11-28 10:14 . 2014-11-28 10:14 6040064 ----a-w- c:\windows\system32\jscript9.dll
2014-11-28 10:14 . 2014-11-28 10:14 580096 ----a-w- c:\windows\system32\vbscript.dll
2014-11-28 10:14 . 2014-11-28 10:14 490496 ----a-w- c:\windows\system32\dxtmsft.dll
2014-11-28 10:14 . 2014-11-28 10:14 48640 ----a-w- c:\windows\system32\mshtmler.dll
2014-11-28 10:14 . 2014-11-28 10:14 413696 ----a-w- c:\windows\system32\html.iec
2014-11-28 10:14 . 2014-11-28 10:14 388272 ----a-w- c:\windows\system32\iedkcs32.dll
2014-11-28 10:14 . 2014-11-28 10:14 34304 ----a-w- c:\windows\system32\iernonce.dll
2014-11-28 10:14 . 2014-11-28 10:14 316928 ----a-w- c:\windows\system32\dxtrans.dll
2014-11-28 10:14 . 2014-11-28 10:14 30208 ----a-w- c:\windows\system32\licmgr10.dll
2014-11-28 10:14 . 2014-11-28 10:14 243200 ----a-w- c:\windows\system32\webcheck.dll
2014-11-28 10:14 . 2014-11-28 10:14 235520 ----a-w- c:\windows\system32\url.dll
2014-11-28 10:14 . 2014-11-28 10:14 2124288 ----a-w- c:\windows\system32\inetcpl.cpl
2014-11-28 10:14 . 2014-11-28 10:14 167424 ----a-w- c:\windows\system32\iexpress.exe
2014-11-28 10:14 . 2014-11-28 10:14 14390272 ----a-w- c:\windows\system32\ieframe.dll
2014-11-28 10:14 . 2014-11-28 10:14 143872 ----a-w- c:\windows\system32\wextract.exe
2014-11-28 10:14 . 2014-11-28 10:14 1359360 ----a-w- c:\windows\system32\mshtmlmedia.dll
2014-11-28 10:14 . 2014-11-28 10:14 105984 ----a-w- c:\windows\system32\iesysprep.dll
2014-11-28 10:14 . 2014-11-28 10:14 101376 ----a-w- c:\windows\system32\inseng.dll
2014-11-28 10:14 . 2014-11-28 10:14 88064 ----a-w- c:\windows\system32\MshtmlDac.dll
2014-11-28 10:14 . 2014-11-28 10:14 774144 ----a-w- c:\windows\system32\jscript.dll
2014-11-28 10:14 . 2014-11-28 10:14 62464 ----a-w- c:\windows\system32\pngfilt.dll
2014-11-28 10:14 . 2014-11-28 10:14 48640 ----a-w- c:\windows\system32\ieetwproxystub.dll
2014-11-28 10:14 . 2014-11-28 10:14 48128 ----a-w- c:\windows\system32\imgutil.dll
2014-11-28 10:14 . 2014-11-28 10:14 4096 ----a-w- c:\windows\system32\ieetwcollectorres.dll
2014-11-28 10:14 . 2014-11-28 10:14 2724864 ----a-w- c:\windows\system32\mshtml.tlb
2014-11-28 10:14 . 2014-11-28 10:14 25110016 ----a-w- c:\windows\system32\mshtml.dll
2014-11-28 10:14 . 2014-11-28 10:14 147968 ----a-w- c:\windows\system32\occache.dll
2014-11-28 10:14 . 2014-11-28 10:14 144384 ----a-w- c:\windows\system32\ieUnatt.exe
2014-11-28 10:14 . 2014-11-28 10:14 13824 ----a-w- c:\windows\system32\mshta.exe
2014-11-28 10:14 . 2014-11-28 10:14 135680 ----a-w- c:\windows\system32\iepeers.dll
2014-11-28 10:14 . 2014-11-28 10:14 114688 ----a-w- c:\windows\system32\ieetwcollector.exe
2014-11-28 07:28 . 2009-07-14 02:36 175616 ----a-w- c:\windows\system32\msclmd.dll
.
.
(((((((((((((((((((((((((((((((((( Spouštěcí body v registru )))))))))))))))))))))))))))))))))))))))))))))
.
.
*Poznámka* prázdné záznamy a legitimní výchozí údaje nejsou zobrazeny.
REGEDIT4
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ SkyDrivePro1 (ErrorConflict)]
@="{8BA85C75-763B-4103-94EB-9470F12FE0F7}"
[HKEY_CLASSES_ROOT\CLSID\{8BA85C75-763B-4103-94EB-9470F12FE0F7}]
2012-10-01 19:38 1720976 ----a-w- c:\progra~2\MIF5BA~1\Office15\GROOVEEX.DLL
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ SkyDrivePro2 (SyncInProgress)]
@="{CD55129A-B1A1-438E-A425-CEBC7DC684EE}"
[HKEY_CLASSES_ROOT\CLSID\{CD55129A-B1A1-438E-A425-CEBC7DC684EE}]
2012-10-01 19:38 1720976 ----a-w- c:\progra~2\MIF5BA~1\Office15\GROOVEEX.DLL
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ SkyDrivePro3 (InSync)]
@="{E768CD3B-BDDC-436D-9C13-E1B39CA257B1}"
[HKEY_CLASSES_ROOT\CLSID\{E768CD3B-BDDC-436D-9C13-E1B39CA257B1}]
2012-10-01 19:38 1720976 ----a-w- c:\progra~2\MIF5BA~1\Office15\GROOVEEX.DLL
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\"DropboxExt1"]
@="{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}"
[HKEY_CLASSES_ROOT\CLSID\{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}]
2014-08-17 04:09 131480 ----a-w- c:\users\Martin\AppData\Roaming\Dropbox\bin\DropboxExt.24.dll
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\"DropboxExt2"]
@="{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}"
[HKEY_CLASSES_ROOT\CLSID\{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}]
2014-08-17 04:09 131480 ----a-w- c:\users\Martin\AppData\Roaming\Dropbox\bin\DropboxExt.24.dll
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\"DropboxExt3"]
@="{FB314EDD-A251-47B7-93E1-CDD82E34AF8B}"
[HKEY_CLASSES_ROOT\CLSID\{FB314EDD-A251-47B7-93E1-CDD82E34AF8B}]
2014-08-17 04:09 131480 ----a-w- c:\users\Martin\AppData\Roaming\Dropbox\bin\DropboxExt.24.dll
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\"DropboxExt4"]
@="{FB314EDE-A251-47B7-93E1-CDD82E34AF8B}"
[HKEY_CLASSES_ROOT\CLSID\{FB314EDE-A251-47B7-93E1-CDD82E34AF8B}]
2014-08-17 04:09 131480 ----a-w- c:\users\Martin\AppData\Roaming\Dropbox\bin\DropboxExt.24.dll
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\"DropboxExt5"]
@="{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}"
[HKEY_CLASSES_ROOT\CLSID\{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}]
2014-08-17 04:09 131480 ----a-w- c:\users\Martin\AppData\Roaming\Dropbox\bin\DropboxExt.24.dll
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\"DropboxExt6"]
@="{FB314EDF-A251-47B7-93E1-CDD82E34AF8B}"
[HKEY_CLASSES_ROOT\CLSID\{FB314EDF-A251-47B7-93E1-CDD82E34AF8B}]
2014-08-17 04:09 131480 ----a-w- c:\users\Martin\AppData\Roaming\Dropbox\bin\DropboxExt.24.dll
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\"DropboxExt7"]
@="{FB314EDC-A251-47B7-93E1-CDD82E34AF8B}"
[HKEY_CLASSES_ROOT\CLSID\{FB314EDC-A251-47B7-93E1-CDD82E34AF8B}]
2014-08-17 04:09 131480 ----a-w- c:\users\Martin\AppData\Roaming\Dropbox\bin\DropboxExt.24.dll
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\"DropboxExt8"]
@="{FB314EE0-A251-47B7-93E1-CDD82E34AF8B}"
[HKEY_CLASSES_ROOT\CLSID\{FB314EE0-A251-47B7-93E1-CDD82E34AF8B}]
2014-08-17 04:09 131480 ----a-w- c:\users\Martin\AppData\Roaming\Dropbox\bin\DropboxExt.24.dll
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Spotify"="c:\users\Martin\AppData\Roaming\Spotify\Spotify.exe" [2014-12-12 6737976]
"Spotify Web Helper"="c:\users\Martin\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe" [2014-12-12 1676344]
"CCleaner Monitoring"="c:\program files\CCleaner\CCleaner64.exe" [2014-12-12 7394584]
"OscarEditor"="c:\program files (x86)\GXStandard16-in-1\GXStandard16in1.exe" [2011-09-02 3343360]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]
"331BigDog"="c:\program files (x86)\USB Camera\VM331STI.EXE" [2013-03-12 548864]
"IMSS"="c:\program files (x86)\Intel\Intel(R) Management Engine Components\IMSS\PIconStartup.exe" [2013-05-14 134616]
"PWMTRV"="c:\program files (x86)\ThinkPad\Utilities\PWMTR64V.DLL" [2014-09-10 6363424]
"USB3MON"="c:\program files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe" [2012-05-21 291648]
"TrueImageMonitor.exe"="c:\program files (x86)\Acronis\TrueImageHome\TrueImageMonitor.exe" [2008-12-16 4375032]
"AcronisTimounterMonitor"="c:\program files (x86)\Acronis\TrueImageHome\TimounterMonitor.exe" [2008-12-16 962128]
"IJNetworkScannerSelectorEX"="c:\program files (x86)\Canon\IJ Network Scanner Selector EX\CNMNSST.exe" [2011-01-15 452016]
.
c:\users\Martin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\
Dropbox.lnk - c:\users\Martin\AppData\Roaming\Dropbox\bin\Dropbox.exe /systemstartup [2014-12-9 39207112]
Mozilla Thunderbird.lnk - c:\program files (x86)\Mozilla Thunderbird\thunderbird.exe [2014-12-2 389744]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorAdmin"= 0 (0x0)
"ConsentPromptBehaviorUser"= 3 (0x3)
"EnableLUA"= 0 (0x0)
"EnableUIADesktopToggle"= 0 (0x0)
"PromptOnSecureDesktop"= 0 (0x0)
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\windows]
"LoadAppInit_DLLs"=1 (0x1)
"AppInit_DLLs"=c:\windows\SysWOW64\nvinit.dll
.
[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\lsa]
Notification Packages REG_MULTI_SZ scecli c:\program files\Lenovo\Bluetooth Software\BtwProximityCP.dll
.
R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [x]
R2 CxAudMsg;Conexant Audio Message Service;c:\windows\system32\CxAudMsg64.exe;c:\windows\SYSNATIVE\CxAudMsg64.exe [x]
R2 SkypeUpdate;Skype Updater;c:\program files (x86)\Skype\Updater\Updater.exe;c:\program files (x86)\Skype\Updater\Updater.exe [x]
R3 bcbtums;Bluetooth RAM Firmware Download USB Filter;c:\windows\system32\drivers\bcbtums.sys;c:\windows\SYSNATIVE\drivers\bcbtums.sys [x]
R3 btwampfl;btwampfl Bluetooth filter driver;c:\windows\system32\drivers\btwampfl.sys;c:\windows\SYSNATIVE\drivers\btwampfl.sys [x]
R3 btwl2cap;Bluetooth L2CAP Service;c:\windows\system32\DRIVERS\btwl2cap.sys;c:\windows\SYSNATIVE\DRIVERS\btwl2cap.sys [x]
R3 c2wts;Claims to Windows Token Service;c:\program files\Windows Identity Foundation\v3.5\c2wtshost.exe;c:\program files\Windows Identity Foundation\v3.5\c2wtshost.exe [x]
R3 IEEtwCollectorService;Internet Explorer ETW Collector Service;c:\windows\system32\IEEtwCollector.exe;c:\windows\SYSNATIVE\IEEtwCollector.exe [x]
R3 Intel(R) Capability Licensing Service TCP IP Interface;Intel(R) Capability Licensing Service TCP IP Interface;c:\program files\Intel\iCLS Client\SocketHeciServer.exe;c:\program files\Intel\iCLS Client\SocketHeciServer.exe [x]
R3 LSCWinService;LSCWinService;c:\program files\Lenovo\Lenovo Solution Center\App\LSCWinService.exe;c:\program files\Lenovo\Lenovo Solution Center\App\LSCWinService.exe [x]
R3 ose64;Office 64 Source Engine;c:\program files\Common Files\Microsoft Shared\Source Engine\OSE.EXE;c:\program files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [x]
R3 PwmEWSvc;Cisco EnergyWise Enabler;c:\program files (x86)\ThinkPad\Utilities\PWMEWSVC.EXE;c:\program files (x86)\ThinkPad\Utilities\PWMEWSVC.EXE [x]
R3 RdpVideoMiniport;Remote Desktop Video Miniport Driver;c:\windows\system32\drivers\rdpvideominiport.sys;c:\windows\SYSNATIVE\drivers\rdpvideominiport.sys [x]
R3 SliceDisk5;SliceDisk5;c:\program files\A-FF Find and Mount\slicedisk-x64.sys;c:\program files\A-FF Find and Mount\slicedisk-x64.sys [x]
R3 SQLAgent$SQLSRV12;SQL Server Agent (SQLSRV12);d:\program files\Microsoft SQL Server\MSSQL11.SQLSRV12\MSSQL\Binn\SQLAGENT.EXE;d:\program files\Microsoft SQL Server\MSSQL11.SQLSRV12\MSSQL\Binn\SQLAGENT.EXE [x]
R3 Te.Service;Te.Service;c:\program files (x86)\Windows Kits\8.1\Testing\Runtimes\TAEF\Wex.Services.exe;c:\program files (x86)\Windows Kits\8.1\Testing\Runtimes\TAEF\Wex.Services.exe [x]
R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys;c:\windows\SYSNATIVE\drivers\tsusbflt.sys [x]
R3 VsEtwService120;Visual Studio ETW Event Collection Service;c:\program files\Microsoft Visual Studio 12.0\Common7\Packages\Debugger\Services\VsEtwService.exe;c:\program files\Microsoft Visual Studio 12.0\Common7\Packages\Debugger\Services\VsEtwService.exe [x]
R3 WatAdminSvc;Služba Technologie aktivace Windows;c:\windows\system32\Wat\WatAdminSvc.exe;c:\windows\SYSNATIVE\Wat\WatAdminSvc.exe [x]
R4 RsFx0201;RsFx0201 Driver;c:\windows\system32\DRIVERS\RsFx0201.sys;c:\windows\SYSNATIVE\DRIVERS\RsFx0201.sys [x]
S0 iusb3hcs;Ovladač přepínání hostitelského řadiče Intel(R) USB 3.0;c:\windows\system32\DRIVERS\iusb3hcs.sys;c:\windows\SYSNATIVE\DRIVERS\iusb3hcs.sys [x]
S0 nvpciflt;nvpciflt;c:\windows\system32\DRIVERS\nvpciflt.sys;c:\windows\SYSNATIVE\DRIVERS\nvpciflt.sys [x]
S0 TPDIGIMN;TPDIGIMN;c:\windows\System32\DRIVERS\ApsHM64.sys;c:\windows\SYSNATIVE\DRIVERS\ApsHM64.sys [x]
S1 eamonm;eamonm;c:\windows\system32\DRIVERS\eamonm.sys;c:\windows\SYSNATIVE\DRIVERS\eamonm.sys [x]
S1 ehdrv;ehdrv;c:\windows\system32\DRIVERS\ehdrv.sys;c:\windows\SYSNATIVE\DRIVERS\ehdrv.sys [x]
S2 ekrn;ESET Service;c:\program files\ESET\ESET NOD32 Antivirus\x86\ekrn.exe;c:\program files\ESET\ESET NOD32 Antivirus\x86\ekrn.exe [x]
S2 epfwwfpr;epfwwfpr;c:\windows\system32\DRIVERS\epfwwfpr.sys;c:\windows\SYSNATIVE\DRIVERS\epfwwfpr.sys [x]
S2 GfExperienceService;NVIDIA GeForce Experience Service;c:\program files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe;c:\program files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe [x]
S2 igfxCUIService1.0.0.0;Intel(R) HD Graphics Control Panel Service;c:\windows\system32\igfxCUIService.exe;c:\windows\SYSNATIVE\igfxCUIService.exe [x]
S2 Intel(R) Capability Licensing Service Interface;Intel(R) Capability Licensing Service Interface;c:\program files\Intel\iCLS Client\HeciServer.exe;c:\program files\Intel\iCLS Client\HeciServer.exe [x]
S2 Intel(R) ME Service;Intel(R) ME Service;c:\program files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe;c:\program files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe [x]
S2 jhi_service;Intel(R) Dynamic Application Loader Host Interface Service;c:\program files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe;c:\program files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [x]
S2 LENOVO.CAMMUTE;Lenovo Camera Mute;c:\program files\Lenovo\Communications Utility\CAMMUTE.exe;c:\program files\Lenovo\Communications Utility\CAMMUTE.exe [x]
S2 LENOVO.MICMUTE;Lenovo Microphone Mute;c:\program files\LENOVO\HOTKEY\MICMUTE.exe;c:\program files\LENOVO\HOTKEY\MICMUTE.exe [x]
S2 LENOVO.TPKNRSVC;Lenovo Keyboard Noise Reduction;c:\program files\Lenovo\Communications Utility\TPKNRSVC.exe;c:\program files\Lenovo\Communications Utility\TPKNRSVC.exe [x]
S2 LENOVO.TVTVCAM;Lenovo Virtual Camera Controller;c:\program files\Lenovo\Communications Utility\vcamsvc.exe;c:\program files\Lenovo\Communications Utility\vcamsvc.exe [x]
S2 Lenovo.VIRTSCRLSVC;Lenovo Auto Scroll;c:\program files\LENOVO\VIRTSCRL\lvvsst.exe;c:\program files\LENOVO\VIRTSCRL\lvvsst.exe [x]
S2 MSSQL$SQLSRV12;SQL Server (SQLSRV12);d:\program files\Microsoft SQL Server\MSSQL11.SQLSRV12\MSSQL\Binn\sqlservr.exe;d:\program files\Microsoft SQL Server\MSSQL11.SQLSRV12\MSSQL\Binn\sqlservr.exe [x]
S2 NvNetworkService;NVIDIA Network Service;c:\program files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe;c:\program files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [x]
S2 NvStreamSvc;NVIDIA Streamer Service;c:\program files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe;c:\program files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [x]
S2 SAService;Conexant SmartAudio service;c:\windows\system32\SAsrv.exe;c:\windows\SYSNATIVE\SAsrv.exe [x]
S2 Stereo Service;NVIDIA Stereoscopic 3D Driver Service;c:\program files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe;c:\program files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe [x]
S2 TPHKLOAD;Lenovo Hotkey Client Loader;c:\program files\LENOVO\HOTKEY\TPHKLOAD.exe;c:\program files\LENOVO\HOTKEY\TPHKLOAD.exe [x]
S2 TPHKSVC;On Screen Display;c:\program files\LENOVO\HOTKEY\TPHKSVC.exe;c:\program files\LENOVO\HOTKEY\TPHKSVC.exe [x]
S2 ValBioService;ValBioService;c:\program files\Lenovo Fingerprint Reader\ValBioService.exe;c:\program files\Lenovo Fingerprint Reader\ValBioService.exe [x]
S2 valWBFPolicyService;Synaptics FP WBF Policy Service;c:\windows\system32\valWBFPolicyService.exe;c:\windows\SYSNATIVE\valWBFPolicyService.exe [x]
S3 iusb3hub;Ovladač rozbočovače Intel(R) USB 3.0;c:\windows\system32\DRIVERS\iusb3hub.sys;c:\windows\SYSNATIVE\DRIVERS\iusb3hub.sys [x]
S3 iusb3xhc;Ovladač rozšiřitelného hostitelského řadiče Intel(R) USB 3.0;c:\windows\system32\DRIVERS\iusb3xhc.sys;c:\windows\SYSNATIVE\DRIVERS\iusb3xhc.sys [x]
S3 NvStreamKms;NvStreamKms;c:\program files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys;c:\program files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [x]
S3 nvvad_WaveExtensible;NVIDIA Virtual Audio Device (Wave Extensible) (WDM);c:\windows\system32\drivers\nvvad64v.sys;c:\windows\SYSNATIVE\drivers\nvvad64v.sys [x]
S3 Power Manager DBC Service;Power Manager Service;c:\program files (x86)\ThinkPad\Utilities\PWMDBSVC.EXE;c:\program files (x86)\ThinkPad\Utilities\PWMDBSVC.EXE [x]
S3 RSP2STOR;Realtek PCIE CardReader Driver - P2;c:\windows\system32\DRIVERS\RtsP2Stor.sys;c:\windows\SYSNATIVE\DRIVERS\RtsP2Stor.sys [x]
S3 RTL8167;Realtek 8167 NT Driver;c:\windows\system32\DRIVERS\Rt64win7.sys;c:\windows\SYSNATIVE\DRIVERS\Rt64win7.sys [x]
S3 SmbDrvI;SmbDrvI;c:\windows\system32\DRIVERS\Smb_driver_Intel.sys;c:\windows\SYSNATIVE\DRIVERS\Smb_driver_Intel.sys [x]
S3 vm331avs;Digital Camera 1;c:\windows\system32\Drivers\vm331avs.sys;c:\windows\SYSNATIVE\Drivers\vm331avs.sys [x]
.
.
--- Ostatní služby/ovladače v paměti ---
.
*NewlyCreated* - LDIAGIO_UEFI
*Deregistered* - ldiagio_uefi
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\active setup\installed components\{8A69D345-D564-463c-AFF1-A69D9E530F96}]
2014-12-12 06:30 1087816 ----a-w- c:\program files (x86)\Google\Chrome\Application\39.0.2171.95\Installer\chrmstp.exe
.
.
--------- X64 Entries -----------
.
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ SkyDrivePro1 (ErrorConflict)]
@="{8BA85C75-763B-4103-94EB-9470F12FE0F7}"
[HKEY_CLASSES_ROOT\CLSID\{8BA85C75-763B-4103-94EB-9470F12FE0F7}]
2012-10-01 19:37 2322576 ----a-w- c:\progra~1\MIF5BA~1\Office15\GROOVEEX.DLL
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ SkyDrivePro2 (SyncInProgress)]
@="{CD55129A-B1A1-438E-A425-CEBC7DC684EE}"
[HKEY_CLASSES_ROOT\CLSID\{CD55129A-B1A1-438E-A425-CEBC7DC684EE}]
2012-10-01 19:37 2322576 ----a-w- c:\progra~1\MIF5BA~1\Office15\GROOVEEX.DLL
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ SkyDrivePro3 (InSync)]
@="{E768CD3B-BDDC-436D-9C13-E1B39CA257B1}"
[HKEY_CLASSES_ROOT\CLSID\{E768CD3B-BDDC-436D-9C13-E1B39CA257B1}]
2012-10-01 19:37 2322576 ----a-w- c:\progra~1\MIF5BA~1\Office15\GROOVEEX.DLL
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\"DropboxExt1"]
@="{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}"
[HKEY_CLASSES_ROOT\CLSID\{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}]
2014-08-17 04:10 164760 ----a-w- c:\users\Martin\AppData\Roaming\Dropbox\bin\DropboxExt64.24.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\"DropboxExt2"]
@="{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}"
[HKEY_CLASSES_ROOT\CLSID\{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}]
2014-08-17 04:10 164760 ----a-w- c:\users\Martin\AppData\Roaming\Dropbox\bin\DropboxExt64.24.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\"DropboxExt3"]
@="{FB314EDD-A251-47B7-93E1-CDD82E34AF8B}"
[HKEY_CLASSES_ROOT\CLSID\{FB314EDD-A251-47B7-93E1-CDD82E34AF8B}]
2014-08-17 04:10 164760 ----a-w- c:\users\Martin\AppData\Roaming\Dropbox\bin\DropboxExt64.24.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\"DropboxExt4"]
@="{FB314EDE-A251-47B7-93E1-CDD82E34AF8B}"
[HKEY_CLASSES_ROOT\CLSID\{FB314EDE-A251-47B7-93E1-CDD82E34AF8B}]
2014-08-17 04:10 164760 ----a-w- c:\users\Martin\AppData\Roaming\Dropbox\bin\DropboxExt64.24.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\"DropboxExt5"]
@="{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}"
[HKEY_CLASSES_ROOT\CLSID\{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}]
2014-08-17 04:10 164760 ----a-w- c:\users\Martin\AppData\Roaming\Dropbox\bin\DropboxExt64.24.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\"DropboxExt6"]
@="{FB314EDF-A251-47B7-93E1-CDD82E34AF8B}"
[HKEY_CLASSES_ROOT\CLSID\{FB314EDF-A251-47B7-93E1-CDD82E34AF8B}]
2014-08-17 04:10 164760 ----a-w- c:\users\Martin\AppData\Roaming\Dropbox\bin\DropboxExt64.24.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\"DropboxExt7"]
@="{FB314EDC-A251-47B7-93E1-CDD82E34AF8B}"
[HKEY_CLASSES_ROOT\CLSID\{FB314EDC-A251-47B7-93E1-CDD82E34AF8B}]
2014-08-17 04:10 164760 ----a-w- c:\users\Martin\AppData\Roaming\Dropbox\bin\DropboxExt64.24.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\"DropboxExt8"]
@="{FB314EE0-A251-47B7-93E1-CDD82E34AF8B}"
[HKEY_CLASSES_ROOT\CLSID\{FB314EE0-A251-47B7-93E1-CDD82E34AF8B}]
2014-08-17 04:10 164760 ----a-w- c:\users\Martin\AppData\Roaming\Dropbox\bin\DropboxExt64.24.dll
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"egui"="c:\program files\ESET\ESET NOD32 Antivirus\egui.exe" [2014-10-01 5595336]
"LENOVO.TPKNRRES"="c:\program files\Lenovo\Communications Utility\TPKNRRES.exe" [2014-08-07 295712]
"NvBackend"="c:\program files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe" [2014-11-17 2465088]
"ShadowPlay"="c:\windows\system32\nvspcap64.dll" [2014-11-17 2800296]
"SynTPEnh"="c:\program files (x86)\Synaptics\SynTP\SynTPEnh.exe" [BU]
"AcWin7Hlpr"="c:\program files (x86)\Lenovo\Access Connections\AcTBenabler.exe" [2014-03-14 63832]
"cAudioFilterAgent"="c:\program files\Conexant\cAudioFilterAgent\cAudioFilterAgent64.exe" [2012-06-14 887968]
"ForteConfig"="c:\program files\Conexant\ForteConfig\fmapp.exe" [2010-10-26 49056]
"TpShocks"="TpShocks.exe" [2014-02-17 384344]
"Acronis Scheduler2 Service"="c:\program files (x86)\Common Files\Acronis\Schedule2\schedhlp.exe" [2008-12-16 165144]
"SmartAudio"="c:\program files\CONEXANT\SAII\SACpl.exe" [2012-06-13 1647616]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
"AppInit_DLLs"=c:\windows\System32\nvinitx.dll c:\windows\System32\nvinitx.dll
.
------- Doplňkový sken -------
.
uLocal Page = c:\windows\system32\blank.htm
uStart Page = hxxp://intranet.cs21nextnet.cz/
mLocal Page = c:\windows\SysWOW64\blank.htm
IE: E&xportovat do Microsoft Excelu - d:\progra~2\MICROS~1\Office15\EXCEL.EXE/3000
IE: Od&eslat do OneNotu - d:\progra~2\MICROS~1\Office15\ONBttnIE.dll/105
TCP: DhcpNameServer = 192.168.1.1
.
- - - - NEPLATNÉ POLOŽKY ODSTRANĚNÉ Z REGISTRU - - - -
.
AddRemove-VideoPad - c:\program files (x86)\NCH Software\VideoPad\videopad.exe
.
.
.
------------------------ Jiné spuštené procesy ------------------------
.
c:\program files (x86)\Lenovo\Access Connections\AcPrfMgrSvc.exe
c:\program files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
c:\windows\SysWOW64\SAsrv.exe
c:\program files (x86)\Microsoft SQL Server\90\Shared\sqlbrowser.exe
c:\program files (x86)\Google\Update\GoogleUpdate.exe
c:\program files (x86)\Lenovo\Access Connections\AcSvc.exe
c:\progra~1\Lenovo\HOTKEY\TPONSCR.EXE
c:\users\Martin\AppData\Roaming\Dropbox\bin\Dropbox.exe
c:\windows\SysWOW64\rundll32.exe
c:\program files (x86)\ThinkPad\Utilities\SCHTASK.exe
c:\users\Martin\AppData\Roaming\Spotify\Data\SpotifyHelper.exe
c:\users\Martin\AppData\Roaming\Spotify\Data\SpotifyHelper.exe
c:\users\Martin\AppData\Roaming\Spotify\Data\SpotifyHelper.exe
c:\users\Martin\AppData\Roaming\Spotify\Data\SpotifyHelper.exe
c:\program files (x86)\Lenovo\Access Connections\SvcGuiHlpr.exe
c:\program files\Lenovo\Lenovo Solution Center\LSCNotify.exe
c:\program files (x86)\Lenovo\message center plus\mcplaunch.exe
c:\program files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
c:\program files (x86)\TeamViewer\TeamViewer_Service.exe
c:\program files (x86)\TeamViewer\TeamViewer.exe
.
**************************************************************************
.
Celkový čas: 2015-01-02 00:12:36 - počítač byl restartován
ComboFix-quarantined-files.txt 2015-01-01 23:12
ComboFix2.txt 2014-12-28 15:26
.
Před spuštěním: Volných bajtů: 58 231 631 872
Po spuštění: Volných bajtů: 58 647 760 896
.
- - End Of File - - E8B8BFF30A292B7AC1FF9A0C9CF25C29

[vyosek]

Jak se chova PC

[boris008]

Přijde mi jako nový Takže díky moc

[vyosek]

Tak jeste uklidime

Odinstalujte Combofix

• Prejmenujte ComboFix na Uninstall
• Spustte jej
• Tohle smaze Combofix a jeho slozky

DelFix https://toolslib.net/downloads/finish/2/

• Stahnete a spustte
• Ponechte zatrzitkou pouze u volby Remote disinfection tools
• Kliknete na Run

Stahnete Ccleaner https://www.piriform.com/ccleaner/download/standard
Panel čistič

• Vse nechte jak je, jen dejte Analyzovat a pote Spustit CCleaner

Panel registry

• dejte Hledej problémy
• nasledne Opravit problémy - zalohu registru doporucuji udelat, opravte vsechny problemy
• postup opakujte dokud nebude bez problemu - vetsinou cca 3x

Panel nástroje

• Zde muzete odinstalovat nepotrebne programy

CCleaner doporucuji pouzivat cca jednou za tyden

A pokud nejsou problemy ci dotazy, je to z me strany vse