

ComboFix 10-01-04.01 - Bender 09.01.2010 21:27:30.1.2 - x86
Microsoft Windows 7 Ultimate 6.1.7600.0.1250.420.1029.18.3004.1446 [GMT 1:00]
Spuštěný z: c:\users\Bender\Desktop\ComboFix.exe
* Rezidentní štít AV je zapnutý
.
((((((((((((((((((((((((((((((((((((((( Ostatní výmazy )))))))))))))))))))))))))))))))))))))))))))))))))
.
c:\$recycle.bin\S-1-5-21-3724293041-2488259726-2622956149-500
c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\Bluetooth.lnk
c:\users\Bender\AppData\Roaming\.#
c:\windows\msa.exe
c:\windows\Suyin.reg
c:\windows\system32\sshnas.dll
c:\windows\Tasks\{35DC3473-A719-4d14-B7C1-FD326CA84A0C}.job
c:\windows\Tasks\{66BA574B-1E11-49b8-909C-8CC9E0E8E015}.job
.
((((((((((((((((((((((((( Soubory vytvořené od 2009-12-09 do 2010-01-09 )))))))))))))))))))))))))))))))
.
2010-01-09 18:46 . 2010-01-09 18:46 -------- d-----w- c:\program files\Trend Micro
2010-01-09 18:19 . 2008-10-10 10:49 90112 ----a-w- c:\windows\unvise32.exe
2010-01-09 16:15 . 2010-01-09 16:15 -------- d-----w- c:\program files\Adobe Media Player
2009-12-24 22:46 . 2009-12-24 22:46 -------- d-----w- c:\users\Bender\AppData\Roaming\Logitech
2009-12-24 21:49 . 2009-12-24 21:49 10134 ----a-r- c:\users\Bender\AppData\Roaming\Microsoft\Installer\{8CC990CD-87C8-475C-AC32-8A7984E2FCFA}\ARPPRODUCTICON.exe
2009-12-24 21:49 . 2007-04-23 03:00 69632 ----a-w- c:\windows\system32\KemXML.dll
2009-12-24 21:49 . 2007-04-23 03:00 163840 ----a-w- c:\windows\system32\kemutb.dll
2009-12-24 21:49 . 2007-04-23 03:00 110592 ----a-w- c:\windows\system32\KemWnd.dll
2009-12-24 21:49 . 2007-04-23 03:00 135168 ----a-w- c:\windows\system32\KemUtil.dll
2009-12-24 21:49 . 2009-12-24 21:49 -------- d-----w- c:\programdata\Logitech
2009-12-24 21:49 . 2009-12-24 21:49 -------- d-----w- c:\program files\Logitech
2009-12-24 21:48 . 2009-12-24 21:49 -------- d-----w- c:\program files\Common Files\Logitech
2009-12-24 21:48 . 2009-12-24 21:48 10134 ----a-r- c:\users\Bender\AppData\Roaming\Microsoft\Installer\{56918C0C-0D87-4CA6-92BF-4975A43AC719}\ARPPRODUCTICON.exe
2009-12-24 21:47 . 2009-12-24 21:47 -------- d-----w- c:\programdata\LogiShrd
2009-12-15 20:03 . 2009-12-15 20:03 -------- d-----w- c:\program files\Lame for Audacity
2009-12-15 19:53 . 2009-12-15 19:53 -------- d-----w- c:\program files\Audacity
2009-12-13 18:21 . 2009-12-13 18:21 -------- d-----w- c:\users\Bender\AppData\Local\FlatOut Ultimate Carnage
2009-12-13 18:20 . 2008-03-05 15:03 479752 ----a-w- c:\windows\system32\XAudio2_0.dll
2009-12-13 18:20 . 2008-03-05 15:03 238088 ----a-w- c:\windows\system32\xactengine3_0.dll
2009-12-13 18:20 . 2008-03-05 15:00 25608 ----a-w- c:\windows\system32\X3DAudio1_3.dll
2009-12-13 18:20 . 2007-10-22 02:39 267272 ----a-w- c:\windows\system32\xactengine2_10.dll
2009-12-13 18:20 . 2007-10-12 14:14 1374232 ----a-w- c:\windows\system32\D3DCompiler_36.dll
2009-12-13 18:20 . 2007-10-02 08:56 444776 ----a-w- c:\windows\system32\d3dx10_36.dll
2009-12-13 18:20 . 2007-10-12 14:14 3734536 ----a-w- c:\windows\system32\d3dx9_36.dll
2009-12-13 18:20 . 2007-07-19 23:57 267112 ----a-w- c:\windows\system32\xactengine2_9.dll
2009-12-13 18:20 . 2007-07-19 17:14 444776 ----a-w- c:\windows\system32\d3dx10_35.dll
2009-12-13 18:20 . 2007-07-19 17:14 1358192 ----a-w- c:\windows\system32\D3DCompiler_35.dll
2009-12-13 18:20 . 2007-07-19 17:14 3727720 ----a-w- c:\windows\system32\d3dx9_35.dll
2009-12-13 18:07 . 2009-12-13 18:07 -------- d-----w- c:\program files\Empire Interactive
.
(((((((((((((((((((((((((((((((((((((((( Find3M výpis ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2010-01-09 19:28 . 2009-11-24 13:20 -------- d-----w- c:\users\Bender\AppData\Roaming\vlc
2010-01-09 16:21 . 2009-11-11 15:48 98944 ----a-w- c:\users\Bender\AppData\Local\GDIPFONTCACHEV1.DAT
2010-01-09 16:17 . 2009-03-26 14:56 -------- d-----w- c:\program files\Common Files\Adobe
2010-01-08 20:32 . 2009-09-25 20:07 -------- d-----w- c:\users\Bender\AppData\Roaming\dvdcss
2010-01-07 11:32 . 2009-07-14 08:44 622660 ----a-w- c:\windows\system32\perfh005.dat
2010-01-07 11:32 . 2009-07-14 08:44 118810 ----a-w- c:\windows\system32\perfc005.dat
2009-12-29 10:03 . 2009-06-28 07:37 -------- d-----w- c:\program files\ICQ6.5
2009-12-24 21:50 . 2009-12-24 21:50 0 ---ha-w- c:\windows\system32\drivers\Msft_Kernel_LMouFilt_01005.Wdf
2009-12-24 21:48 . 2009-03-26 14:00 -------- d--h--w- c:\program files\InstallShield Installation Information
2009-12-11 10:03 . 2009-12-09 17:42 -------- d-----w- c:\programdata\LightScribe
2009-12-09 17:41 . 2009-12-09 17:41 -------- d-----w- c:\program files\Common Files\LightScribe
2009-12-09 17:25 . 2009-12-09 17:25 -------- d-----w- c:\program files\Acoustica CD Label Maker
2009-12-09 17:25 . 2009-12-09 17:25 -------- d-----w- c:\users\Bender\AppData\Roaming\Acoustica
2009-12-09 13:10 . 2009-03-26 14:13 -------- d-----w- c:\programdata\Microsoft Help
2009-12-09 13:05 . 2009-03-26 14:34 -------- d-----w- c:\program files\Microsoft
2009-12-07 17:06 . 2009-12-07 17:06 484976 ----a-w- c:\programdata\Google\Google Toolbar\Update\gtbAFEF.tmp.exe
2009-12-04 11:33 . 2009-12-04 11:33 -------- d-----w- c:\program files\Selteco
2009-12-04 09:08 . 2009-07-22 18:41 -------- d-----w- c:\program files\Java
2009-11-27 18:36 . 2009-06-27 19:20 -------- d-----w- c:\programdata\CyberLink
2009-11-27 18:34 . 2009-06-27 19:20 36864 ----a-w- c:\programdata\Temp\{2637C347-9DAD-11D6-9EA2-00055D0CA761}\PostBuild.exe
2009-11-16 08:08 . 2009-10-09 13:49 -------- d-----w- c:\users\Bender\AppData\Roaming\Dropbox
2009-11-13 19:54 . 2009-03-26 14:20 -------- d-----w- c:\program files\Acer GameZone
2009-11-13 08:20 . 2009-11-13 08:20 -------- d-----w- c:\program files\ESET
2009-11-12 13:03 . 2009-11-12 13:03 0 ---ha-w- c:\windows\system32\drivers\Msft_User_WpdFs_01_09_00.Wdf
2009-11-11 19:40 . 2009-11-11 19:40 0 ---ha-w- c:\windows\system32\drivers\Msft_User_WpdMtpDr_01_09_00.Wdf
2009-11-11 15:43 . 2009-11-11 15:43 -------- d-sh--we c:\programdata\Plocha
2009-11-11 15:43 . 2009-11-11 15:43 -------- d-sh--we c:\programdata\Oblíbené položky
2009-11-11 15:43 . 2009-11-11 15:43 -------- d-sh--we c:\programdata\Šablony
2009-11-11 15:43 . 2009-11-11 15:43 -------- d-sh--we c:\programdata\Nabídka Start
2009-11-11 15:43 . 2009-11-11 15:43 -------- d-sh--we c:\programdata\Dokumenty
2009-11-11 15:43 . 2009-11-11 15:43 -------- d-sh--we c:\programdata\Data aplikací
2009-11-11 15:30 . 2009-11-11 15:30 21496 ----a-w- c:\windows\system32\emptyregdb.dat
2009-11-11 15:24 . 2009-11-11 15:24 -------- d-----w- c:\users\Default\AppData\Roaming\Acer GameZone Console
2009-11-11 15:17 . 2009-09-22 11:01 -------- d-----w- c:\users\Bender\AppData\Roaming\acccore
2009-11-11 15:17 . 2009-08-24 12:18 -------- d-----w- c:\users\Bender\AppData\Roaming\Acer
2009-11-11 15:17 . 2009-06-27 18:54 -------- d-----w- c:\users\Bender\AppData\Roaming\Acer GameZone Console
2009-11-11 15:16 . 2009-09-14 17:33 -------- d-----w- c:\users\Guest\AppData\Roaming\vlc
2009-11-11 15:16 . 2009-09-14 14:39 -------- d-----w- c:\users\Guest\AppData\Roaming\PowerCinema
2009-11-11 15:16 . 2009-09-14 17:31 -------- d-----w- c:\users\Guest\AppData\Roaming\Ashampoo
2009-11-11 15:16 . 2009-09-14 14:39 -------- d-----w- c:\users\Guest\AppData\Roaming\Acer
2009-11-11 15:16 . 2009-09-14 14:38 -------- d-----w- c:\users\Guest\AppData\Roaming\Acer GameZone Console
2009-11-11 15:07 . 2009-11-09 06:11 -------- d-----w- c:\programdata\WindowsSearch
2009-11-11 15:07 . 2009-09-28 14:25 -------- d-----w- c:\programdata\{755AC846-7372-4AC8-8550-C52491DAA8BD}
2009-11-11 15:07 . 2009-08-26 10:12 -------- d-----w- c:\programdata\TechSmith
2009-11-11 15:07 . 2009-08-21 09:21 -------- d-----w- c:\programdata\{8CD7F5AF-ECFA-4793-BF40-D8F42DBFF906}
2009-11-11 15:07 . 2009-06-27 20:31 -------- d-----w- c:\programdata\NVIDIA
2009-11-11 15:07 . 2009-03-26 14:42 -------- d-----w- c:\programdata\SiteAdvisor
2009-11-11 15:05 . 2009-09-28 14:22 -------- d-----w- c:\program files\QuickTime
2009-11-11 15:04 . 2009-11-03 18:34 -------- d-----w- c:\program files\iPod
2009-11-11 15:04 . 2009-03-26 13:54 -------- d-----w- c:\program files\Intel
2009-11-11 15:04 . 2009-06-28 07:38 -------- d-----w- c:\program files\ICQ6Toolbar
2009-11-11 15:03 . 2009-06-28 16:29 -------- d-----w- c:\program files\Hewlett-Packard
2009-11-11 15:03 . 2009-03-26 14:20 -------- d-----w- c:\program files\Google
2009-11-11 15:03 . 2009-03-26 14:57 -------- d-----w- c:\program files\eSobi
2009-11-11 15:03 . 2009-07-01 05:30 -------- d-----w- c:\program files\Electronic Arts
2009-11-11 15:03 . 2009-03-26 14:31 -------- d-----w- c:\program files\EgisTec Egis Software Update
2009-11-11 15:03 . 2009-03-26 14:31 -------- d-----w- c:\program files\EgisTec
2009-11-11 15:02 . 2009-10-25 10:19 -------- d-----w- c:\program files\Counter-Strike Source
2009-11-11 15:02 . 2009-09-11 15:25 -------- d-----w- c:\program files\EA Games
2009-11-11 15:02 . 2009-08-26 09:01 -------- d-----w- c:\program files\DAEMON Tools Lite
2009-11-11 15:02 . 2009-03-26 14:10 -------- d-----w- c:\program files\DIFX
2009-11-11 14:58 . 2009-09-11 15:23 -------- d-----w- c:\program files\Common Files\Wise Installation Wizard
2009-11-11 14:58 . 2009-03-26 14:56 -------- d-----w- c:\program files\Convesoft
2009-11-11 14:58 . 2009-03-26 14:32 -------- d-----w- c:\program files\Common Files\Windows Live
2009-11-11 14:58 . 2009-09-22 11:00 -------- d-----w- c:\program files\Common Files\Software Update Utility
2009-11-11 14:58 . 2009-03-26 14:43 -------- d-----w- c:\program files\Common Files\Oberon Media
2009-11-11 14:58 . 2009-06-28 06:50 -------- d-----w- c:\program files\Common Files\Macrovision Shared
2009-11-11 14:58 . 2009-03-26 14:31 -------- d-----w- c:\program files\Common Files\EgisTec
2009-11-11 14:58 . 2009-03-26 14:00 -------- d-----w- c:\program files\Common Files\InstallShield
2009-11-11 14:58 . 2009-08-21 09:11 -------- d-----w- c:\program files\Common Files\Apple
2009-11-11 14:58 . 2009-07-10 10:29 -------- d-----w- c:\program files\Common Files\Adobe AIR
2009-11-11 14:54 . 2009-09-11 14:43 -------- d-----w- c:\program files\CCleaner
2009-11-11 14:54 . 2009-06-28 06:57 -------- d-----w- c:\program files\Bonjour
2009-11-11 14:54 . 2009-03-26 14:09 -------- d-----w- c:\program files\Broadcom
2009-11-11 14:54 . 2009-08-21 09:12 -------- d-----w- c:\program files\Apple Software Update
2009-11-11 14:54 . 2009-07-01 09:57 -------- d-----w- c:\program files\Ashampoo
2009-11-11 14:54 . 2009-11-08 20:58 -------- d-----w- c:\program files\Apex
2009-11-11 14:54 . 2009-09-11 15:23 -------- d-----w- c:\program files\AGEIA Technologies
2009-11-11 14:51 . 2009-06-27 01:41 -------- d-----w- c:\program files\ACER PATCH LTV2016
2009-11-11 14:51 . 2009-06-27 19:10 -------- d-----w- c:\program files\Acer Inc
2009-11-11 14:50 . 2009-03-26 14:28 -------- d-----w- c:\program files\Acer
2009-11-11 14:49 . 2009-10-28 11:41 -------- d-----w- c:\program files\123 Flash Menu
2009-11-11 14:46 . 2009-11-11 14:46 -------- d-----w- c:\program files\Realtek
2009-11-11 14:46 . 2009-11-11 14:46 0 ---ha-w- c:\windows\system32\drivers\Msft_Kernel_SynTP_01007.Wdf
2009-11-11 14:45 . 2009-11-11 14:45 -------- d-----w- c:\program files\Synaptics
2009-11-06 17:03 . 2009-06-27 01:46 12 ----a-w- c:\windows\bthservsdp.dat
2009-11-06 09:59 . 2009-11-06 09:59 15406728 ----a-w- c:\windows\system32\xlive.dll
2009-11-06 09:59 . 2009-11-06 09:59 13642888 ----a-w- c:\windows\system32\xlivefnt.dll
2009-11-03 18:24 . 2009-11-03 18:24 79144 ----a-w- c:\programdata\Apple Computer\Installer Cache\iTunes 9.0.2.25\SetupAdmin.exe
2009-11-02 19:42 . 2009-11-13 08:43 195456 ------w- c:\windows\system32\MpSigStub.exe
2009-11-02 17:05 . 2009-11-02 17:05 167064 ----a-w- c:\windows\system32\xliveinstall.dll
2009-11-02 17:05 . 2009-11-02 17:05 71832 ----a-w- c:\windows\system32\xliveinstallhost.exe
2009-10-29 07:22 . 2009-11-28 07:57 2048 ----a-w- c:\windows\system32\tzres.dll
2009-10-15 05:07 . 2009-10-15 05:07 515832 ----a-w- c:\programdata\Microsoft\eHome\Packages\MCESpotlight\MCESpotlight\SpotlightResources.dll
2009-06-10 21:26 . 2009-07-14 02:04 9633792 --sha-r- c:\windows\Fonts\StaticCache.dat
2009-07-14 01:14 . 2009-07-13 23:42 396800 --sha-w- c:\windows\winsxs\x86_microsoft-windows-mail-app_31bf3856ad364e35_6.1.7600.16385_none_f12e83abb108c86c\WinMail.exe
.
(((((((((((((((((((((((((((((((((( Spouštěcí body v registru )))))))))))))))))))))))))))))))))))))))))))))
.
.
*Poznámka* prázdné záznamy a legitimní výchozí údaje nejsou zobrazeny.
REGEDIT4
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\egisPSDP]
@="{30A0A3F6-38AC-4C53-BB8B-0D95238E25BA}"
[HKEY_CLASSES_ROOT\CLSID\{30A0A3F6-38AC-4C53-BB8B-0D95238E25BA}]
2008-10-27 11:05 40496 ----a-w- c:\program files\EgisTec\MyWinLocker 3\x86\PSDProtect.dll
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"ehTray.exe"="c:\windows\ehome\ehTray.exe" [2009-07-14 144384]
"swg"="c:\program files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe" [2009-06-27 68856]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"NvCplDaemon"="c:\windows\system32\NvCpl.dll" [2009-06-27 13740576]
"IgfxTray"="c:\windows\system32\igfxtray.exe" [2009-06-27 141848]
"HotKeysCmds"="c:\windows\system32\hkcmd.exe" [2009-06-27 173592]
"Persistence"="c:\windows\system32\igfxpers.exe" [2009-06-27 150552]
"SynTPEnh"="c:\program files\Synaptics\SynTP\SynTPEnh.exe" [2005-12-18 1430824]
"RtHDVCpl"="c:\program files\Realtek\Audio\HDA\RtHDVCpl.exe" [2005-12-26 6957600]
"Skytel"="c:\program files\Realtek\Audio\HDA\Skytel.exe" [2005-12-26 1833504]
"Acer ePower Management"="c:\program files\Acer\Acer PowerSmart Manager\ePowerTrayLauncher.exe" [2009-04-15 440864]
"PLFSetI"="c:\windows\PLFSetI.exe" [2008-07-29 200704]
"LManager"="c:\progra~1\LAUNCH~1\LManager.exe" [2009-02-12 862728]
"egui"="c:\program files\ESET\ESET Smart Security\egui.exe" [2009-09-11 2054360]
"Adobe Reader Speed Launcher"="c:\program files\Adobe\Reader 9.0\Reader\Reader_sl.exe" [2009-10-03 35696]
"Adobe ARM"="c:\program files\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2009-09-04 935288]
"Kernel and Hardware Abstraction Layer"="KHALMNPR.EXE" [2007-04-11 56080]
c:\users\Bender\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\
Věýezy obrazovky a spuçtŘnˇ aplikace OneNote 2007.lnk - c:\program files\Microsoft Office\Office12\ONENOTEM.EXE [2008-10-25 98696]
c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\
Logitech SetPoint.lnk - c:\program files\Logitech\SetPoint\SetPoint.exe [2009-12-24 692224]
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorAdmin"= 5 (0x5)
"ConsentPromptBehaviorUser"= 3 (0x3)
"EnableUIADesktopToggle"= 0 (0x0)
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\drivers32]
"aux"=wdmaud.drv
[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\lsa]
Security Packages REG_MULTI_SZ kerberos msv1_0 schannel wdigest tspkg pku2u livessp
[HKLM\~\startupfolder\C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^Acer VCM.lnk]
path=c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\Acer VCM.lnk
backup=c:\windows\pss\Acer VCM.lnk.CommonStartup
backupExtension=.CommonStartup
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe Reader Speed Launcher]
2009-10-03 03:08 35696 ----a-w- c:\program files\Adobe\Reader 9.0\Reader\reader_sl.exe
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\BackupManagerTray]
2009-04-11 17:31 249600 ----a-w- c:\program files\NewTech Infosystems\Acer Backup Manager\BackupManagerTray.exe
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\EgisTecLiveUpdate]
2008-10-27 14:09 199464 ----a-w- c:\program files\EgisTec Egis Software Update\EgisUpdate.exe
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Google Update]
2009-09-19 19:35 133104 ----atw- c:\users\Bender\AppData\Local\Google\Update\GoogleUpdate.exe
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\iTunesHelper]
2009-10-28 19:21 141600 ----a-w- c:\program files\iTunes\iTunesHelper.exe
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\LightScribe Control Panel]
2009-04-13 14:11 2387968 ----a-w- c:\program files\Common Files\LightScribe\LightScribeControlPanel.exe
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\mwlDaemon]
2008-10-27 11:05 346672 ----a-w- c:\program files\EgisTec\MyWinLocker 3\x86\mwlDaemon.exe
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ProductReg]
2008-11-17 07:47 135168 ----a-w- c:\program files\Acer\WR_PopUp\ProductReg.exe
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\QuickTime Task]
2009-09-04 23:54 417792 ----a-w- c:\program files\QuickTime\QTTask.exe
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\RGSC]
2009-06-28 12:48 306088 ----a-w- c:\program files\Rockstar Games\Rockstar Games Social Club\RGSCLauncher.exe
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SunJavaUpdateSched]
2009-10-11 03:17 149280 ----a-w- c:\program files\Java\jre6\bin\jusched.exe
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\WMPNSCFG]
2009-07-14 01:14 65024 ----a-w- c:\program files\Windows Media Player\wmpnscfg.exe
R1 ehdrv;ehdrv;c:\windows\System32\drivers\ehdrv.sys [11.9.2009 7:23 108792]
R1 VWiFiFlt;Virtual WiFi Filter Driver;c:\windows\System32\drivers\vwififlt.sys [14.7.2009 0:52 48128]
R2 ekrn;ESET Service;c:\program files\ESET\ESET Smart Security\ekrn.exe [11.9.2009 7:24 735960]
R2 epfwwfp;epfwwfp;c:\windows\System32\drivers\epfwwfp.sys [11.9.2009 7:26 38240]
R2 ePowerSvc;Acer ePower Service;c:\program files\Acer\Acer PowerSmart Manager\ePowerSvc.exe [26.3.2009 15:28 703008]
R2 mwlPSDFilter;mwlPSDFilter;c:\windows\System32\drivers\mwlPSDFilter.sys [9.10.2008 16:47 19504]
R2 mwlPSDNServ;mwlPSDNServ;c:\windows\System32\drivers\mwlPSDNserv.sys [9.10.2008 16:47 16432]
R2 mwlPSDVDisk;mwlPSDVDisk;c:\windows\System32\drivers\mwlPSDVDisk.sys [9.10.2008 16:47 59952]
R2 MWLService;MyWinLocker Service;c:\program files\EgisTec\MyWinLocker 3\x86\MWLService.exe [27.10.2008 12:05 306736]
R2 NTI IScheduleSvc;NTI IScheduleSvc;c:\program files\NewTech Infosystems\Acer Backup Manager\IScheduleSvc.exe [11.4.2009 18:32 61184]
R2 NTISchedulerSvc;NTI Backup Now 5 Scheduler Service;c:\program files\NewTech Infosystems\NTI Backup Now 5\SchedulerSvc.exe [23.9.2008 14:11 144632]
R2 RS_Service;Raw Socket Service;c:\program files\Acer\Acer VCM\RS_Service.exe [26.3.2009 15:58 237568]
R3 enecir;ENE CIR Receiver;c:\windows\System32\drivers\enecir.sys [26.3.2009 22:04 57856]
R3 JMCR;JMCR;c:\windows\System32\drivers\jmcr.sys [26.3.2009 22:04 112992]
R3 NETw5s32;Ovladač adaptéru Intel(R) Wireless WiFi Link pro systém Windows 7 32 Bit;c:\windows\System32\drivers\NETw5s32.sys [15.9.2009 19:40 6114816]
R3 vwifimp;Microsoft Virtual WiFi Miniport Service;c:\windows\System32\drivers\vwifimp.sys [14.7.2009 0:52 14336]
S0 sptd;sptd;c:\windows\System32\drivers\sptd.sys [26.8.2009 9:57 717296]
S3 KMWDFILTERx86;HIDServiceDesc;c:\windows\System32\drivers\KMWDFILTER.sys [29.4.2009 15:37 25088]
S3 netw5v32;Intel(R) Wireless WiFi Link 5000 Series – ovladač adaptéru pro 32bitový systém Windows Vista;c:\windows\System32\drivers\netw5v32.sys [10.6.2009 22:18 4231168]
S3 NTIBackupSvc;NTI Backup Now 5 Backup Service;c:\program files\NewTech Infosystems\NTI Backup Now 5\BackupSvc.exe [23.9.2008 14:11 50424]
[HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{10880D85-AAD9-4558-ABDC-2AB1552D831F}]
2009-04-13 14:08 451872 ----a-w- c:\program files\Common Files\LightScribe\LSRunOnce.exe
.
Obsah adresáře 'Naplánované úlohy'
2010-01-09 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-4041523357-817286183-2146052312-1000Core.job
- c:\users\Bender\AppData\Local\Google\Update\GoogleUpdate.exe [2009-09-19 19:35]
2010-01-09 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-4041523357-817286183-2146052312-1000UA.job
- c:\users\Bender\AppData\Local\Google\Update\GoogleUpdate.exe [2009-09-19 19:35]
.
.
------- Doplňkový sken -------
.
uStart Page = hxxp://homepage.acer.com/rdr.aspx?b=ACAW&l=0405&s=2&o=vp32&d=0609&m=aspire_5935
mStart Page = hxxp://homepage.acer.com/rdr.aspx?b=ACAW&l=0405&s=2&o=vp32&d=0609&m=aspire_5935
uInternet Settings,ProxyOverride = *.local
IE: E&xportovat do aplikace Microsoft Excel - c:\progra~1\MICROS~4\Office12\EXCEL.EXE/3000
IE: Send image to &Bluetooth Device... - c:\program files\WIDCOMM\Bluetooth Software\btsendto_ie_ctx.htm
IE: Send page to &Bluetooth Device... - c:\program files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
IE: WikiKomentáře Google... - c:\program files\Google\Google Toolbar\Component\GoogleToolbarDynamic_mui_en_60D6097707281E79.dll/cmsidewiki.html
FF - ProfilePath - c:\users\Bender\AppData\Roaming\Mozilla\Firefox\Profiles\roj957m7.default\
FF - prefs.js: browser.startup.homepage - hxxp://www.google.cz/
FF - prefs.js: network.proxy.type - 2
FF - plugin: c:\program files\Microsoft\Office Live\npOLW.dll
FF - plugin: c:\program files\Mozilla Firefox\plugins\np-mswmp.dll
FF - plugin: c:\program files\Mozilla Firefox\plugins\npdnupdater2.dll
FF - plugin: c:\program files\Opera 10 Beta\program\plugins\NPOFF12.DLL
FF - plugin: c:\program files\Opera 10 Beta\program\plugins\npqtplugin.dll
FF - plugin: c:\program files\Opera 10 Beta\program\plugins\npqtplugin2.dll
FF - plugin: c:\program files\Opera 10 Beta\program\plugins\npqtplugin3.dll
FF - plugin: c:\program files\Opera 10 Beta\program\plugins\npqtplugin4.dll
FF - plugin: c:\program files\Opera 10 Beta\program\plugins\npqtplugin5.dll
FF - plugin: c:\program files\Opera 10 Beta\program\plugins\npqtplugin6.dll
FF - plugin: c:\program files\Opera 10 Beta\program\plugins\npqtplugin7.dll
FF - plugin: c:\program files\Opera 10 Beta\program\plugins\NPSWF32.dll
FF - plugin: c:\program files\Windows Live\Photo Gallery\NPWLPG.dll
FF - plugin: c:\users\Bender\AppData\Local\Google\Update\1.2.183.13\npGoogleOneClick8.dll
FF - HiddenExtension: Microsoft .NET Framework Assistant: {20a82645-c095-46ed-80e3-08825760534b} - c:\windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\
---- NASTAVENÍ FIREFOXU ----
c:\program files\Mozilla Firefox\defaults\pref\firefox-l10n.js - pref("browser.fixup.alternate.suffix", ".cz");
.
- - - - NEPLATNÉ POLOŽKY ODSTRANĚNÉ Z REGISTRU - - - -
WebBrowser-{8FF5E180-ABDE-46EB-B09E-D2AAB95CABE3} - (no file)
HKCU-Run-LosAlamos - c:\windows\system32\sshnas.dll
MSConfigStartUp-ArcadeDeluxeAgent - c:\program files\Acer Arcade Deluxe\Acer Arcade Deluxe\ArcadeDeluxeAgent.exe
MSConfigStartUp-CLMLServer - c:\program files\Acer Arcade Deluxe\Acer Arcade Deluxe\Kernel\CLML\CLMLSvc.exe
MSConfigStartUp-PlayMovie - c:\program files\Acer Arcade Deluxe\PlayMovie\PMVService.exe
.
--------------------- ZAMKNUTÉ KLÍČE V REGISTRU ---------------------
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\PCW\Security]
@Denied: (Full) (Everyone)
.
Celkový čas: 2010-01-09 21:38:18
ComboFix-quarantined-files.txt 2010-01-09 20:38
Před spuštěním: Volných bajtů: 227 203 411 968
Po spuštění: Volných bajtů: 227 150 360 576
- - End Of File - - 058E172FF5A0E9116CF6F9054FFAD4DF