ComboFix 16-08-15.01 - SYSTEM 18.08.2016 21:27:22.1.2 - x86
Microsoft Windows 7 Home Premium 6.1.7601.1.1250.420.1029.18.3452.1665 [GMT 2:00]
Spuštěný z: c:\windows\system32\config\systemprofile\Desktop\ComboFix.exe
AV: AVG AntiVirus Business Edition *Enabled/Outdated* {0E9420C4-06B3-7FA0-3AB1-6E49CB52ECD9}
AV: AVG update module *Disabled/Updated* {4D41356F-32AD-7C42-C820-63775EE4F413}
SP: AVG AntiVirus Business Edition *Enabled/Outdated* {B5F5C120-2089-702E-0001-553BB0D5A664}
SP: AVG update module *Disabled/Updated* {F620D48B-1497-73CC-F290-58052563BEAE}
SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
* Vytvořen nový Bod Obnovení
.
.
((((((((((((((((((((((((((((((((((((((( Ostatní výmazy )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
c:\programdata\Roaming
c:\windows\system32\Cache
c:\windows\system32\Cache\0a29aee6c594a857.fb
c:\windows\system32\Cache\0b5bbe6c06ae0a05.fb
c:\windows\system32\Cache\1045c68aa6d0ded1.fb
c:\windows\system32\Cache\1125632721ecba6d.fb
c:\windows\system32\Cache\1f038179d773264c.fb
c:\windows\system32\Cache\2e3f73c3a5ed0ceb.fb
c:\windows\system32\Cache\37c446e925d11398.fb
c:\windows\system32\Cache\3b77acbf3f17d1b4.fb
c:\windows\system32\Cache\49cc2e54593cfb38.fb
c:\windows\system32\Cache\54083a442eb648c6.fb
c:\windows\system32\Cache\805c0fab1348a094.fb
c:\windows\system32\Cache\896f12480904f247.fb
c:\windows\system32\Cache\9c363717feff38b8.fb
c:\windows\system32\Cache\ca8b169e98ea99df.fb
c:\windows\system32\Cache\d9f92f24f8fa8d9f.fb
c:\windows\system32\Cache\e89dbeb0d43c07d9.fb
c:\windows\system32\Cache\eaed5da93d14cd38.fb
c:\windows\system32\Cache\tmp\49cc2e54593cfb38
.
.
((((((((((((((((((((((((( Soubory vytvořené od 2016-07-18 do 2016-08-18 )))))))))))))))))))))))))))))))
.
.
2016-08-18 19:35 . 2016-08-18 19:35 -------- d-----w- c:\windows\system32\config\systemprofile\AppData\Local\temp
2016-08-18 19:17 . 2016-08-18 19:17 -------- d-----w- c:\windows\system32\config\systemprofile\AppData\Local\Mozilla
2016-08-18 19:17 . 2016-08-18 19:17 -------- d-----w- c:\windows\system32\config\systemprofile\AppData\Local\AVG SafeGuard toolbar
2016-08-18 19:17 . 2016-08-18 19:17 -------- d-----w- c:\windows\system32\%APPDATA%
2016-08-18 19:15 . 2016-08-18 19:16 -------- d-----w- c:\users\TEMP
2016-08-16 19:12 . 2016-08-16 19:12 -------- d-----w- C:\found.000
2016-07-25 13:57 . 2016-07-25 13:57 -------- d-----w- c:\users\MUDr\AppData\Roaming\Imaging Sciences International
2016-07-25 13:55 . 2016-08-18 18:54 -------- d-----w- C:\ImageRoot
.
.
.
(((((((((((((((((((((((((((((((((((((((( Find3M výpis ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2016-06-25 20:01 . 2016-07-13 07:42 37096 ----a-w- c:\windows\system32\CompatTelRunner.exe
2016-06-25 19:54 . 2016-07-13 07:42 497152 ----a-w- c:\windows\system32\win32spl.dll
2016-06-25 19:53 . 2016-07-13 07:42 297472 ----a-w- c:\windows\system32\ntprint.dll
2016-06-25 19:53 . 2016-07-13 07:42 779776 ----a-w- c:\windows\system32\localspl.dll
2016-06-25 19:53 . 2016-07-13 07:42 126464 ----a-w- c:\windows\system32\inetpp.dll
2016-06-25 19:53 . 2016-07-13 07:42 1004544 ----a-w- c:\windows\system32\aeinv.dll
2016-06-25 19:42 . 2016-07-13 07:42 39424 ----a-w- c:\windows\system32\wpnpinst.exe
2016-06-25 19:41 . 2016-07-13 07:42 61952 ----a-w- c:\windows\system32\ntprint.exe
2016-06-25 19:41 . 2016-07-13 07:42 18944 ----a-w- c:\windows\system32\inetppui.dll
2016-06-25 19:40 . 2016-07-13 07:42 29696 ----a-w- c:\windows\system32\Spool\prtprocs\w32x86\winprint.dll
2016-06-22 13:06 . 2016-07-13 07:42 208896 ----a-w- c:\windows\system32\centel.dll
2016-06-17 18:23 . 2016-07-13 07:42 468992 ----a-w- c:\windows\system32\generaltel.dll
2016-06-17 18:23 . 2016-07-13 07:42 461312 ----a-w- c:\windows\system32\devinv.dll
2016-06-17 18:23 . 2016-07-13 07:42 251392 ----a-w- c:\windows\system32\invagent.dll
2016-06-17 18:23 . 2016-07-13 07:42 65536 ----a-w- c:\windows\system32\acmigration.dll
2016-06-17 18:23 . 2016-07-13 07:42 179712 ----a-w- c:\windows\system32\aepic.dll
2016-06-17 18:23 . 2016-07-13 07:42 1288192 ----a-w- c:\windows\system32\appraiser.dll
2016-06-14 15:21 . 2016-07-13 07:42 2560 ----a-w- c:\windows\apppatch\AcRes.dll
2016-06-14 14:57 . 2016-07-13 07:42 2398208 ----a-w- c:\windows\system32\win32k.sys
2016-06-10 19:09 . 2016-07-13 07:42 2724864 ----a-w- c:\windows\system32\mshtml.tlb
2016-06-10 19:09 . 2016-07-13 07:42 4096 ----a-w- c:\windows\system32\ieetwcollectorres.dll
2016-06-10 18:54 . 2016-07-13 07:42 62464 ----a-w- c:\windows\system32\iesetup.dll
2016-06-10 18:53 . 2016-07-13 07:42 497664 ----a-w- c:\windows\system32\vbscript.dll
2016-06-10 18:53 . 2016-07-13 07:42 47616 ----a-w- c:\windows\system32\ieetwproxystub.dll
2016-06-10 18:53 . 2016-07-13 07:42 341504 ----a-w- c:\windows\system32\html.iec
2016-06-10 18:52 . 2016-07-13 07:42 64000 ----a-w- c:\windows\system32\MshtmlDac.dll
2016-06-10 18:41 . 2016-07-13 07:42 102912 ----a-w- c:\windows\system32\ieetwcollector.exe
2016-06-10 18:41 . 2016-07-13 07:42 115712 ----a-w- c:\windows\system32\ieUnatt.exe
2016-06-10 18:41 . 2016-07-13 07:42 620032 ----a-w- c:\windows\system32\jscript9diag.dll
2016-06-10 18:35 . 2016-07-13 07:42 667648 ----a-w- c:\windows\system32\MsSpellCheckingFacility.exe
2016-06-10 18:27 . 2016-07-13 07:42 60416 ----a-w- c:\windows\system32\JavaScriptCollectionAgent.dll
2016-06-10 18:14 . 2016-07-13 07:42 4608000 ----a-w- c:\windows\system32\jscript9.dll
2016-06-10 18:09 . 2016-07-13 07:42 2055680 ----a-w- c:\windows\system32\inetcpl.cpl
2016-06-10 18:09 . 2016-07-13 07:42 1155072 ----a-w- c:\windows\system32\mshtmlmedia.dll
2016-06-10 17:45 . 2016-07-13 07:42 2392576 ----a-w- c:\windows\system32\wininet.dll
.
.
(((((((((((((((((((((((((((((((((( Spouštěcí body v registru )))))))))))))))))))))))))))))))))))))))))))))
.
.
*Poznámka* prázdné záznamy a legitimní výchozí údaje nejsou zobrazeny.
REGEDIT4
.
[HKEY_LOCAL_MACHINE\SOFTWARE\~\Browser Helper Objects\{95B7759C-8C7F-4BF1-B163-73684A933233}]
2016-04-18 05:23 3775560 ----a-w- c:\program files\AVG SafeGuard toolbar\19.4.0.508\AVG SafeGuard toolbar_toolbar.dll
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
"{95B7759C-8C7F-4BF1-B163-73684A933233}"= "c:\program files\AVG SafeGuard toolbar\19.4.0.508\AVG SafeGuard toolbar_toolbar.dll" [2016-04-18 3775560]
.
[HKEY_CLASSES_ROOT\clsid\{95b7759c-8c7f-4bf1-b163-73684a933233}]
[HKEY_CLASSES_ROOT\AVG SafeGuard toolbar.PugiObj.1]
[HKEY_CLASSES_ROOT\AVG SafeGuard toolbar.PugiObj]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"IgfxTray"="c:\windows\system32\igfxtray.exe" [2012-06-28 144704]
"HotKeysCmds"="c:\windows\system32\hkcmd.exe" [2012-06-28 180544]
"Persistence"="c:\windows\system32\igfxpers.exe" [2012-06-28 187712]
"RTHDVCPL"="c:\program files\Realtek\Audio\HDA\RtHDVCpl.exe" [2011-12-13 11487848]
"RtHDVBg_DTS"="c:\program files\Realtek\Audio\HDA\RtHDVBg.exe" [2011-11-15 1571432]
"Apoint"="c:\program files\Apoint2K\Apoint.exe" [2011-12-20 468856]
"BTMTrayAgent"="c:\program files\Intel\Bluetooth\btmshell.dll" [2011-12-19 10881296]
"IndicatorUtility"="c:\program files\Fujitsu\Fujitsu Hotkey Utility\IndicatorUty.exe" [2010-09-29 48752]
"LoadFUJ02E3"="c:\program files\Fujitsu\FUJ02E3\fuj02e3.exe" [2011-11-23 65864]
"PSUTility"="c:\program files\Fujitsu\PSUtility\TrayManager.exe" [2012-06-29 138648]
"LoadBtnHnd"="c:\program files\Fujitsu\Application Panel\BtnHnd.exe" [2011-09-30 21832]
"LoadFujitsuQuickTouch"="c:\program files\Fujitsu\Application Panel\QuickTouch.exe" [2011-09-30 139080]
"BCSSync"="c:\program files\Microsoft Office\Office14\BCSSync.exe" [2012-11-05 89184]
"vProt"="c:\program files\AVG SafeGuard toolbar\vprot.exe" [2016-04-18 2662472]
"AVG_UI"="c:\program files\AVG\AVG2013\avgui.exe" [2015-12-15 4431848]
"DBSLog"="c:\program files\Duerr\LogServer\DBSLOG.EXE" [2013-11-07 1640448]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorAdmin"= 0 (0x0)
"ConsentPromptBehaviorUser"= 3 (0x3)
"EnableLUA"= 0 (0x0)
"EnableUIADesktopToggle"= 0 (0x0)
"PromptOnSecureDesktop"= 0 (0x0)
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Wdf01000.sys]
@="Driver"
.
R2 AVGIDSAgent;AVGIDSAgent;c:\program files\AVG\AVG2013\avgidsagent.exe [2015-10-05 4948456]
R3 AMPPALP;Protokol Intel® Centrino® Wireless Bluetooth® + High Speed;c:\windows\system32\DRIVERS\amppal.sys [2012-03-01 141312]
R3 IEEtwCollectorService;Internet Explorer ETW Collector Service;c:\windows\system32\IEEtwCollector.exe [2016-06-10 102912]
R3 MyWiFiDHCPDNS;Wireless PAN DHCP Server;c:\program files\Intel\WiFi\bin\PanDhcpDns.exe [2012-04-17 241936]
R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys [2010-11-20 52224]
R3 TsUsbGD;Remote Desktop Generic USB Device;c:\windows\system32\drivers\TsUsbGD.sys [2010-11-20 27264]
R3 WatAdminSvc;Služba Technologie aktivace Windows;c:\windows\system32\Wat\WatAdminSvc.exe [2014-06-04 1343400]
R3 WSDScan;Podpora skenování WSD přes UMB;c:\windows\system32\DRIVERS\WSDScan.sys [2009-07-14 20480]
S0 AVGIDSHX;AVGIDSHX;c:\windows\system32\DRIVERS\avgidshx.sys [2015-05-21 122320]
S0 Avglogx;AVG Logging Driver;c:\windows\system32\DRIVERS\avglogx.sys [2015-05-21 278992]
S0 Avgrkx86;AVG Anti-Rootkit Driver;c:\windows\system32\DRIVERS\avgrkx86.sys [2013-10-22 39224]
S0 FBIOSDRV;Fujitsu BIOS Driver;c:\windows\System32\Drivers\FBIOSDRV.sys [2009-06-24 17008]
S1 AVGIDSDriver;AVGIDSDriver;c:\windows\system32\DRIVERS\avgidsdriverx.sys [2013-11-24 208184]
S1 AVGIDSShim;AVGIDSShim;c:\windows\system32\DRIVERS\avgidsshimx.sys [2015-11-24 32672]
S1 Avgldx86;AVG AVI Loader Driver;c:\windows\system32\DRIVERS\avgldx86.sys [2014-11-03 172856]
S1 Avgtdix;AVG TDI Driver;c:\windows\system32\DRIVERS\avgtdix.sys [2015-05-26 191440]
S2 AMPPALR3;Intel® Centrino® Wireless Bluetooth® + High Speed Service;c:\program files\Intel\BluetoothHS\BTHSAmpPalService.exe [2012-03-01 509448]
S2 avgwd;AVG WatchDog;c:\program files\AVG\AVG2013\avgwdsvc.exe [2013-11-19 283136]
S2 Bluetooth Device Monitor;Bluetooth Device Monitor;c:\program files\Intel\Bluetooth\devmonsrv.exe [2011-12-19 1014096]
S2 Bluetooth OBEX Service;Bluetooth OBEX Service;c:\program files\Intel\Bluetooth\obexsrv.exe [2011-12-19 1104208]
S2 BTHSSecurityMgr;Intel(R) Centrino(R) Wireless Bluetooth(R) + High Speed Security Service;c:\program files\Intel\BluetoothHS\BTHSSecurityMgr.exe [2012-03-08 104208]
S2 DiagTrack;Diagnostics Tracking Service;c:\windows\System32\svchost.exe [2009-07-14 20992]
S2 DTSAudioSvc;DTSAudioSvc;c:\program files\Realtek\Audio\HDA\DTSU2PAuSrv32.exe [2011-08-05 182272]
S2 FUJ02E3Service;FUJ02E3Service;c:\program files\Fujitsu\FUJ02E3\FUJ02E3.exe [2011-11-23 65864]
S2 Intel(R) Capability Licensing Service Interface;Intel(R) Capability Licensing Service Interface;c:\program files\Intel\iCLS Client\HeciServer.exe [2012-04-20 462048]
S2 jhi_service;Intel(R) Dynamic Application Loader Host Interface Service;c:\program files\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [2012-07-17 165760]
S2 PFNService;PFNService;c:\program files\Fujitsu\Plugfree NETWORK\PFNService.exe [2011-12-22 1513984]
S2 PowerSavingUtilityService;PowerSavingUtilityService;c:\program files\Fujitsu\PSUtility\PSUService.exe [2012-06-29 43416]
S2 TeamViewer7;TeamViewer 7;c:\program files\TeamViewer\Version7\TeamViewer_Service.exe [2013-02-22 2849120]
S2 UNS;Intel(R) Management and Security Application User Notification Service;c:\program files\Intel\Intel(R) Management Engine Components\UNS\UNS.exe [2012-07-17 364416]
S2 vToolbarUpdater19.4.0;vToolbarUpdater19.4.0;c:\program files\Common Files\AVG Secure Search\vToolbarUpdater\19.4.0\ToolbarUpdater.exe [2016-04-18 1888328]
S2 ZeroConfigService;Intel(R) PROSet/Wireless Zero Configuration Service;c:\program files\Intel\WiFi\bin\ZeroConfigService.exe [2012-04-17 2326288]
S3 AMPPAL;Virtuální adaptér Intel® Centrino® Wireless Bluetooth® + High Speed;c:\windows\system32\DRIVERS\AMPPAL.sys [2012-03-01 141312]
S3 Bluetooth Media Service;Bluetooth Media Service;c:\program files\Intel\Bluetooth\mediasrv.exe [2011-12-19 1304912]
S3 btmaux;Intel Bluetooth Auxiliary Service;c:\windows\system32\DRIVERS\btmaux.sys [2011-12-13 76800]
S3 btmhsf;btmhsf;c:\windows\system32\DRIVERS\btmhsf.sys [2011-12-13 558592]
S3 FUJ02E3;Fujitsu FUJ02E3 Device Driver;c:\windows\system32\DRIVERS\FUJ02E3.sys [2006-11-01 5632]
S3 ibtfltcoex;ibtfltcoex;c:\windows\system32\DRIVERS\iBtFltCoex.sys [2011-12-14 47616]
S3 IntcDAud;Intel(R) Display Audio;c:\windows\system32\DRIVERS\IntcDAud.sys [2011-12-05 280576]
S3 MEI;Intel(R) Management Engine Interface ;c:\windows\system32\DRIVERS\HECI.sys [2012-07-02 55104]
S3 NETwNs32;___ Ovladač adaptéru řady Intel(R) Wireless WiFi Link 5000 pro systém Windows 7 32 Bit;c:\windows\system32\DRIVERS\Netwsn00.sys [2012-03-12 10339840]
S3 RSUSBSTOR;RtsUStor.Sys Realtek USB Card Reader;c:\windows\system32\Drivers\RtsUStor.sys [2011-07-22 197736]
S3 RTL8167;Realtek 8167 NT Driver;c:\windows\system32\DRIVERS\Rt86win7.sys [2012-02-16 514152]
.
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost]
LocalServiceAndNoImpersonation REG_MULTI_SZ SSDPSRV upnphost SCardSvr fdrespub AppIDSvc QWAVE wcncsvc Mcx2Svc SensrSvc
utcsvc REG_MULTI_SZ DiagTrack
.
[HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{8A69D345-D564-463c-AFF1-A69D9E530F96}]
2016-06-27 04:47 1245848 ----a-w- c:\program files\Google\Chrome\Application\51.0.2704.103\Installer\chrmstp.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{A6EADE66-0000-0000-484E-7E8A45000000}]
2016-05-03 14:41 287416 ----a-w- c:\program files\Adobe\Acrobat Reader DC\Esl\AiodLite.dll
.
Obsah adresáře 'Naplánované úlohy'
.
2016-08-18 c:\windows\Tasks\Adobe Flash Player Updater.job
- c:\windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2014-06-28 11:04]
.
2016-08-18 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
- c:\program files\Google\Update\GoogleUpdate.exe [2014-06-28 05:39]
.
2016-08-18 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
- c:\program files\Google\Update\GoogleUpdate.exe [2014-06-28 05:39]
.
.
------- Doplňkový sken -------
.
TCP: Interfaces\{A2A31FEC-4257-46FB-B93F-92521023D086}: NameServer = 192.168.0.1,8.8.8.8
Handler: viprotocol - {B658800C-F66E-4EF3-AB85-6C0C227862A9} - c:\program files\Common Files\AVG Secure Search\ViProtocolInstaller\19.4.0\ViProtocol.dll
FF - ProfilePath - c:\windows\System32\config\systemprofile\AppData\Roaming\Mozilla\Firefox\Profiles\j2r7pg3x.default\
.
.
--------------------- ZAMKNUTÉ KLÍČE V REGISTRU ---------------------
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{B019E3BF-E7E5-453C-A2E4-D2C18CA0866F}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil32_21_0_0_242_ActiveX.exe,-101"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{B019E3BF-E7E5-453C-A2E4-D2C18CA0866F}\Elevation]
"Enabled"=dword:00000001
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{B019E3BF-E7E5-453C-A2E4-D2C18CA0866F}\LocalServer32]
@="c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil32_21_0_0_242_ActiveX.exe"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{B019E3BF-E7E5-453C-A2E4-D2C18CA0866F}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{299817DA-1FAC-4CE2-8F48-A108237013BD}]
@Denied: (A 2) (Everyone)
@="IFlashBroker6"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{299817DA-1FAC-4CE2-8F48-A108237013BD}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{299817DA-1FAC-4CE2-8F48-A108237013BD}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\PCW\Security]
@Denied: (Full) (Everyone)
.
Celkový čas: 2016-08-18 21:43:13
ComboFix-quarantined-files.txt 2016-08-18 19:43
.
Před spuštěním: Volných bajtů: 154 914 021 376
Po spuštění: Volných bajtů: 154 987 503 616
.
- - End Of File - - CF7BD74BA2919251CECF2E067136BA52
A36C5E4F47E84449FF07ED3517B43A31
Přispějete na provoz fóra?