VIRY.CZ

3krát hurá povedlo se tady je log: All processes killed
========== OTL ==========
No active process named explorer.exe was found!
Unable to delete ADS C:\ProgramData\Temp:0B4227B4 .
Unable to delete ADS C:\ProgramData\Temp:BF3D62E7 .
Unable to delete ADS C:\ProgramData\Temp:AB689DEA .
Unable to delete ADS C:\ProgramData\Temp:D1B5B4F1 .
64bit-Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\PROTOCOLS\Handler\grooveLocalGWS\ not found.
File Protocol\Handler\grooveLocalGWS - No CLSID value found not found.
64bit-Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\PROTOCOLS\Handler\ms-help\ not found.
File Protocol\Handler\ms-help - No CLSID value found not found.
64bit-Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\PROTOCOLS\Handler\wlmailhtml\ not found.
File Protocol\Handler\wlmailhtml - No CLSID value found not found.
64bit-Registry value HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\\VMApplet:/pagefile deleted successfully.
64bit-Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Toolbar\\{EE2AC4E5-B0B0-4EC6-88A9-BCA1A32AB107} not found.
64bit-Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{EE2AC4E5-B0B0-4EC6-88A9-BCA1A32AB107}\ not found.
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Toolbar\\{EE2AC4E5-B0B0-4EC6-88A9-BCA1A32AB107} not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{EE2AC4E5-B0B0-4EC6-88A9-BCA1A32AB107}\ not found.
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Toolbar\\Locked not found.
Registry value HKEY_USERS\S-1-5-21-2228829363-2496496693-1347899441-1001\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\\{E7DF6BFF-55A5-4EB7-A673-4ED3E9456D39} not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{E7DF6BFF-55A5-4EB7-A673-4ED3E9456D39}\ not found.
64bit-Registry key HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{8A4A36C2-0535-4D2C-BD3D-496CB7EED6E3}\ not found.
64bit-Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{8A4A36C2-0535-4D2C-BD3D-496CB7EED6E3}\ not found.
Unable to fix default_search_provider items.
Unable to fix default_search_provider items.
64bit-Registry key HKEY_LOCAL_MACHINE\Software\MozillaPlugins\@adobe.com/FlashPlayer\ not found.
Prefs.js: "Ask.com" removed from browser.search.defaultengine
Prefs.js: "AVG Secure Search" removed from browser.search.defaultenginename
Prefs.js: "uTorrentBar Customized Web Search" removed from browser.search.defaultthis.engineName
Prefs.js: "http://search.conduit.com/ResultsExt.as ... earchTerms}" removed from browser.search.defaulturl
Prefs.js: "Ask.com" removed from browser.search.order.1
Prefs.js: "AVG Secure Search" removed from browser.search.selectedEngine
Prefs.js: true removed from browser.search.useDBForOrder
Prefs.js: "http://search.babylon.com/?AF=100789&ba ... 330973c&q=" removed from keyword.URL
HKU\S-1-5-21-2228829363-2496496693-1347899441-1001\SOFTWARE\Microsoft\Internet Explorer\Main\\Start Page| /E : value set successfully!
Registry value HKEY_USERS\S-1-5-21-2228829363-2496496693-1347899441-1001\Software\Microsoft\Internet Explorer\URLSearchHooks\\ not found.
Registry value HKEY_USERS\S-1-5-21-2228829363-2496496693-1347899441-1001\Software\Microsoft\Internet Explorer\URLSearchHooks\\{91da5e8a-3318-4f8c-b67e-5964de3ab546} not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{91da5e8a-3318-4f8c-b67e-5964de3ab546}\ not found.
HKEY_USERS\S-1-5-21-2228829363-2496496693-1347899441-1001\Software\Microsoft\Internet Explorer\SearchScopes\\DefaultScope| /E : value set successfully!
Registry key HKEY_USERS\S-1-5-21-2228829363-2496496693-1347899441-1001\Software\Microsoft\Internet Explorer\SearchScopes\{0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9}\ not found.
Registry key HKEY_USERS\S-1-5-21-2228829363-2496496693-1347899441-1001\Software\Microsoft\Internet Explorer\SearchScopes\{171DEBEB-C3D4-40b7-AC73-056A5EBA4A7E}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{171DEBEB-C3D4-40b7-AC73-056A5EBA4A7E}\ not found.
Registry key HKEY_USERS\S-1-5-21-2228829363-2496496693-1347899441-1001\Software\Microsoft\Internet Explorer\SearchScopes\{6552C7DD-90A4-4387-B795-F8F96747DE19}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{6552C7DD-90A4-4387-B795-F8F96747DE19}\ not found.
Registry key HKEY_USERS\S-1-5-21-2228829363-2496496693-1347899441-1001\Software\Microsoft\Internet Explorer\SearchScopes\{95B7759C-8C7F-4BF1-B163-73684A933233}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{95B7759C-8C7F-4BF1-B163-73684A933233}\ not found.
Registry value HKEY_USERS\.DEFAULT\Software\Microsoft\Internet Explorer\URLSearchHooks\\ not found.
Registry value HKEY_USERS\.DEFAULT\Software\Microsoft\Internet Explorer\URLSearchHooks\\{855F3B16-6D32-4fe6-8A56-BBB695989046} not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{855F3B16-6D32-4fe6-8A56-BBB695989046}\ not found.
HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\\ProxyEnable|dword:0 /E : value set successfully!
Registry value HKEY_USERS\S-1-5-18\Software\Microsoft\Internet Explorer\URLSearchHooks\\ not found.
Registry value HKEY_USERS\S-1-5-18\Software\Microsoft\Internet Explorer\URLSearchHooks\\{855F3B16-6D32-4fe6-8A56-BBB695989046} not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{855F3B16-6D32-4fe6-8A56-BBB695989046}\ not found.
HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings\\ProxyEnable|dword:0 /E : value set successfully!
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{afdbddaa-5d3f-42ee-b79c-185a7020515b}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{afdbddaa-5d3f-42ee-b79c-185a7020515b}\ not found.
64bit-Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}\ not found.
64bit-Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}\ not found.
HKLM\SOFTWARE\Microsoft\Internet Explorer\Main\\Local Page| /E : value set successfully!
Registry value HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\URLSearchHooks\\ not found.
Registry value HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\URLSearchHooks\\{855F3B16-6D32-4fe6-8A56-BBB695989046} not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{855F3B16-6D32-4fe6-8A56-BBB695989046}\ not found.
Registry value HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\URLSearchHooks\\{91da5e8a-3318-4f8c-b67e-5964de3ab546} not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{91da5e8a-3318-4f8c-b67e-5964de3ab546}\ not found.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope| /E : value set successfully!
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{afdbddaa-5d3f-42ee-b79c-185a7020515b}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{afdbddaa-5d3f-42ee-b79c-185a7020515b}\ not found.
========== FILES ==========
File\Folder C:\WINDOWS\system32\*.tmp.dll not found.
File\Folder C:\WINDOWS\system32\SET*.tmp not found.
File\Folder C:\WINDOWS\*.tmp not found.
File\Folder C:\Users\Martin\AppData\Roaming\Babylon not found.
File\Folder C:\Users\Martin\AppData\Roaming\AVG not found.
========== COMMANDS ==========
C:\Windows\System32\drivers\etc\Hosts moved successfully.
HOSTS file reset successfully

[EMPTYTEMP]

User: Administrator
->Temp folder emptied: 0 bytes

User: All Users

User: Default
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 67 bytes

User: Default User
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes

User: Martin
->Temp folder emptied: 10208447 bytes
->Temporary Internet Files folder emptied: 4004197 bytes
->FireFox cache emptied: 6211933 bytes
->Google Chrome cache emptied: 0 bytes
->Opera cache emptied: 5905102 bytes
->Flash cache emptied: 2422 bytes

User: Public
->Temp folder emptied: 0 bytes

%systemdrive% .tmp files removed: 0 bytes
%systemroot% .tmp files removed: 0 bytes
%systemroot%\System32 .tmp files removed: 0 bytes
%systemroot%\System32 (64bit) .tmp files removed: 0 bytes
%systemroot%\System32\drivers .tmp files removed: 0 bytes
Windows Temp folder emptied: 0 bytes
%systemroot%\sysnative\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files folder emptied: 369481 bytes
RecycleBin emptied: 0 bytes

Total Files Cleaned = 25,00 mb


[EMPTYFLASH]

User: Administrator

User: All Users

User: Default

User: Default User

User: Martin
->Flash cache emptied: 0 bytes

User: Public

Total Flash Files Cleaned = 0,00 mb


OTL by OldTimer - Version 3.2.35.1 log created on 03062012_105304

Files\Folders moved on Reboot...
C:\Users\Martin\AppData\Local\Temp\FXSAPIDebugLogFile.txt moved successfully.

Registry entries deleted on Reboot...

Ještě znovu spustte OTL, klikněte na tlačítko vyčisti, uklidí po sobě

Provedeno vše ok. Děkuji Motji

Není zač

Kdyby byl nějaký prablém tak se ozvu. Mohu do tohoto přízpěvku, kdyžtak abych zase nezakládal nový???

Můžete zde

Dobrý večer milá rádkině měl bych jěště na vás prozbu- dotaz. Už jsem to sice tady řešil s kolegou a vlastně s vámi též, ale pořád mi vrtá jedna věc hlavou: Když jsem měl Avg IS tak mi nešla brána windows firewall což je pochopitelné neboť ve spuštění jí bránil Avg. Ale teď mám avira a brána nejde zapnout též a hlásí to pořád stejnou chybu. Dokonce jsem šel pro ranu na stánky Microsoftu kde byla zmiňovaná chyba popisována a následně tam byla popsána i náprava.Vše podle microsoftu jsem vyzkoušel ale marně. Následně jsem narazil na stránku pro podporu oprava windows pomocí -sada nástrojů microsoft fixit což je užitečná věc ale opět u brány windows firewall bezvýsledná. Zarazilomne že po aplikaci tohoto programu mi to napsalo : Není mi jasné tedy proč, ale pořád mi to píše že je v pc avg což nějak nechápu. Jinak než jsem nainstaloval avira neměl jem tak hodinu antivirový program a zmiňovanou bránu jsem se pokoušel zapnout ale nešla a psalo to chybu jako by ve windows vůbec nebyla.

Zde je zmiňovaná chyba: Zde jsem čerpal nápovědu: http://support.microsoft.com/kb/2530126/cs. Jde mi jen o to aby popřípadě v budoucnu šla brána windows firewall zapnout. O napadení z venčí strach nemám, protože mám comodo firewall ale jak se říká nenechám nic náhodě. Takže až budete mít malinkou chvilu mrkněte prosím jestli jsete se s podobným případem třeba již nesetkala. Předem děkuji za váš čas.

Stáhněte SecurityCheck http://screen317.spywareinfoforum.org/SecurityCheck.exe
-program spusťte a postupujte podle instrukcí. Log vložte zde

Tady je log : Results of screen317's Security Check version 0.99.31
Windows 7 x64 (UAC is disabled!)
Internet Explorer 9
``````````````````````````````
Antivirus/Firewall Check:
Windows Security Center service is not running! This report may not be accurate!
Avira Antivirus Premium 2012
WMI entry may not exist for antivirus; attempting automatic update.
Avira successfully updated!
```````````````````````````````
Anti-malware/Other Utilities Check:
TuneUp Utilities 2012
TuneUp Utilities Language Pack (en-US)
Adobe Reader X (10.1.2)
Mozilla Firefox (10.0.)
````````````````````````````````
Process Check:
objlist.exe by Laurent
Malwarebytes' Anti-Malware mbamservice.exe
Avira Antivir avgnt.exe
Avira Antivir avguard.exe
Comodo Firewall cmdagent.exe
Comodo Firewall cfp.exe
``````````End of Log````````````

Nevidím tam AVG..zkusíme combofix.

Spusťte combofix podle tohoto návodu
http://www.bleepingcomputer.com/combofi ... t-combofix

Spustil jsem combofix a mám tam toto: mám i přesto pokračovat?

Ano pokračujte

Brána windows firewall jde zapnout takže zřejmě kombofix něco opravil. Zde je log:

ComboFix 12-03-11.01 - Martin 11.03.2012 21:50:18.5.2 - x64
Microsoft Windows 7 Ultimate 6.1.7601.1.1250.420.1029.18.4061.1984 [GMT 1:00]
Spuštěný z: c:\users\Martin\Desktop\ComboFix.exe
AV: AVG Internet Security 2012 *Enabled/Updated* {5A2746B1-DEE9-F85A-FBCD-ADB11639C5F0}
FW: AVG Firewall *Enabled* {621CC794-9486-F902-D092-0484E8EA828B}
SP: AVG Internet Security 2012 *Enabled/Updated* {E146A755-F8D3-F7D4-C17D-96C36DBE8F4D}
.
.
((((((((((((((((((((((((((((((((((((((( Ostatní výmazy )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
c:\program files (x86)\Downloaded Installers
c:\program files (x86)\Downloaded Installers\{F8116030-96CA-401C-BA85-50265E7C0A96}\setup.msi
c:\windows\assembly\tmp\U
.
.
((((((((((((((((((((((((( Soubory vytvořené od 2012-02-11 do 2012-03-11 )))))))))))))))))))))))))))))))
.
.
2012-03-11 21:01 . 2012-03-11 21:01 -------- d-----w- c:\users\Public\AppData\Local\temp
2012-03-11 21:01 . 2012-03-11 21:01 -------- d-----w- c:\users\Default\AppData\Local\temp
2012-03-11 21:01 . 2012-03-11 21:01 -------- d-----w- c:\users\Administrator\AppData\Local\temp
2012-03-11 20:27 . 2012-03-11 21:05 4194304 ----a-w- c:\windows\ServiceProfiles\NetworkService\msmqlog.bin
2012-03-11 20:27 . 2012-03-11 20:27 -------- d-----w- c:\windows\system32\msmq
2012-03-11 20:27 . 2012-03-11 20:27 -------- d-----w- C:\inetpub
2012-03-09 08:03 . 2012-03-09 08:03 -------- d-----w- C:\found.000
2012-03-06 22:05 . 2012-03-06 22:05 -------- d-----w- C:\MFT 3407
2012-03-06 21:59 . 2012-03-10 11:40 -------- d-----w- c:\users\Martin\AppData\Local\ElevatedDiagnostics
2012-03-06 21:50 . 2012-03-06 21:50 -------- d-----w- c:\users\Martin\AppData\Roaming\AVG
2012-03-06 07:39 . 2012-03-06 07:39 484176 ----a-w- c:\programdata\Microsoft\eHome\Packages\MCESpotlight\MCESpotlight-2\SpotlightResources.dll
2012-03-03 17:35 . 2012-03-03 17:35 -------- d-----w- c:\users\Martin\AppData\Roaming\Avira
2012-03-03 17:33 . 2012-03-11 17:58 132320 ----a-w- c:\windows\system32\drivers\avipbb.sys
2012-03-03 17:33 . 2011-12-09 11:40 97312 ----a-w- c:\windows\system32\drivers\avgntflt.sys
2012-03-03 17:33 . 2011-12-09 11:40 27760 ----a-w- c:\windows\system32\drivers\avkmgr.sys
2012-03-03 17:33 . 2012-03-11 17:56 -------- d-----w- c:\programdata\Avira
2012-03-03 17:33 . 2012-03-03 17:33 -------- d-----w- c:\program files (x86)\Avira
2012-03-03 17:23 . 2012-03-03 17:23 -------- d-----w- c:\users\Martin\AppData\Local\Comodo
2012-03-03 17:22 . 2012-03-03 17:22 -------- d-----w- c:\programdata\CPA_VA
2012-03-03 17:16 . 2012-03-03 20:30 -------- d-----w- c:\programdata\Comodo
2012-03-03 17:16 . 2012-03-03 17:16 -------- d-----w- c:\program files\COMODO
2012-03-03 17:16 . 2012-03-03 17:16 -------- d-----w- c:\program files (x86)\Comodo
2012-03-03 17:16 . 2012-03-03 17:16 1700352 ----a-w- c:\windows\SysWow64\gdiplus.dll
2012-03-03 17:16 . 2012-03-03 17:16 1060864 ----a-w- c:\windows\SysWow64\mfc71.dll
2012-02-27 20:53 . 2012-02-27 20:53 -------- d-----w- c:\users\Martin\AppData\Roaming\CheckPoint
2012-02-27 20:52 . 2012-02-27 21:08 -------- d-----w- c:\program files\CheckPoint
2012-02-27 20:52 . 2012-02-27 20:52 -------- d-----w- c:\programdata\CheckPoint
2012-02-27 20:52 . 2012-02-27 21:08 -------- d-----w- c:\program files (x86)\CheckPoint
2012-02-27 19:51 . 2012-02-27 19:51 -------- d-----w- C:\My Backups
2012-02-27 19:51 . 2011-12-22 22:09 189576 ----a-w- c:\windows\system32\drivers\EuFdDisk.sys
2012-02-27 19:51 . 2011-12-22 22:09 19592 ----a-w- c:\windows\system32\drivers\eudskacs.sys
2012-02-27 19:51 . 2011-12-22 22:09 51336 ----a-w- c:\windows\system32\drivers\EUBKMON.sys
2012-02-27 19:51 . 2011-12-22 22:09 57480 ----a-w- c:\windows\system32\drivers\eubakup.sys
2012-02-27 19:15 . 2012-02-27 19:48 -------- d-----w- c:\program files (x86)\EASEUS
2012-02-27 07:22 . 2012-03-11 19:03 -------- d-----w- c:\users\Martin\AppData\Roaming\vlc
2012-02-26 19:05 . 2012-02-26 19:05 -------- d-----w- c:\users\Martin\AppData\Local\DDMSettings
2012-02-26 19:02 . 2012-03-03 20:15 -------- d-----w- c:\users\Martin\AppData\Roaming\DivX
2012-02-26 19:02 . 2012-02-26 19:02 -------- d-----w- c:\program files (x86)\Common Files\PX Storage Engine
2012-02-26 19:02 . 2012-02-26 19:02 -------- d-----w- c:\program files\DivX
2012-02-26 19:02 . 2012-02-26 19:02 -------- d-----w- c:\program files (x86)\Common Files\DivX Shared
2012-02-26 19:01 . 2012-02-03 12:35 512472 ----a-w- c:\windows\SysWow64\msxml.dll
2012-02-26 19:01 . 2012-02-03 12:35 40408 ----a-w- c:\windows\system32\CleanMFT64.exe
2012-02-26 19:01 . 2008-04-02 15:54 1101824 ----a-w- c:\windows\SysWow64\UniBox210.ocx
2012-02-26 19:01 . 2008-04-02 15:53 212992 ----a-w- c:\windows\SysWow64\UniBoxVB12.ocx
2012-02-26 19:01 . 2008-04-02 15:53 880640 ----a-w- c:\windows\SysWow64\UniBox10.ocx
2012-02-26 19:01 . 2008-09-17 21:17 658432 ----a-w- c:\windows\SysWow64\MSCOMCT2.OCX
2012-02-26 19:01 . 2012-02-26 19:01 -------- d-----w- c:\program files (x86)\Common Files\PC Tools
2012-02-26 19:01 . 2012-02-27 19:04 -------- d-----w- c:\program files (x86)\PC Tools Registry Mechanic
2012-02-26 18:59 . 2012-02-26 19:03 -------- d-----w- c:\program files (x86)\DivX
2012-02-26 18:57 . 2012-02-26 19:03 -------- d-----w- c:\programdata\DivX
2012-02-26 18:49 . 2012-03-01 20:58 -------- d-----w- c:\program files (x86)\Win7codecs
2012-02-26 18:48 . 2012-03-01 20:58 -------- d-----w- c:\programdata\Win7codecs
2012-02-24 11:12 . 2012-02-24 11:12 -------- d-----w- c:\users\Martin\AppData\Local\MediaGet2
2012-02-24 11:12 . 2012-02-24 11:12 -------- d-----w- c:\users\Martin\AppData\Local\Media Get LLC
2012-02-24 10:57 . 2012-02-24 10:59 -------- d-sh--w- c:\users\Martin\AppData\Local\721e063c
2012-02-23 20:31 . 2011-12-10 14:24 23152 ----a-w- c:\windows\system32\drivers\mbam.sys
2012-02-23 19:41 . 2012-02-23 21:03 -------- d-----r- C:\BOOTWIZ
2012-02-23 19:41 . 2012-02-23 20:47 24576 --sh--r- C:\bootwiz.sys
2012-02-23 19:39 . 2012-02-09 13:13 34624 ----a-w- c:\windows\system32\TURegOpt.exe
2012-02-23 19:39 . 2012-02-09 13:13 25920 ----a-w- c:\windows\system32\authuitu.dll
2012-02-23 19:39 . 2012-02-09 13:13 21312 ----a-w- c:\windows\SysWow64\authuitu.dll
2012-02-21 14:48 . 2012-02-23 19:39 -------- d-----w- c:\program files (x86)\TuneUp Utilities 2012
2012-02-20 22:30 . 2010-08-16 14:31 13280 ------w- c:\windows\system32\pwdspio.sys
2012-02-20 22:25 . 2010-08-16 14:31 801352 ----a-w- c:\windows\system32\pwNative.exe
2012-02-20 22:25 . 2010-08-16 14:31 19936 ------w- c:\windows\system32\pwdrvio.sys
2012-02-20 21:05 . 2012-02-20 21:05 310368 ----a-w- c:\windows\system32\drivers\snapman.sys
2012-02-20 21:05 . 2012-02-20 21:05 132704 ----a-w- c:\windows\system32\drivers\fltsrv.sys
2012-02-20 21:05 . 2012-02-20 21:05 -------- d-----w- c:\program files (x86)\Acronis
2012-02-20 21:05 . 2012-02-20 21:05 -------- d-----w- c:\program files (x86)\Common Files\Acronis
2012-02-20 12:01 . 2012-02-20 12:01 -------- d-----w- c:\program files\Mz Ultimate Tools
2012-02-20 10:46 . 2012-02-20 10:46 -------- d-----w- c:\programdata\GroupPolicy
2012-02-20 10:42 . 2012-02-20 10:42 -------- d-----w- c:\windows\SysWow64\wbem\Performance
2012-02-20 10:02 . 2012-02-20 10:02 -------- d-----w- c:\program files (x86)\Yamicsoft
2012-02-19 18:24 . 2012-02-19 18:24 -------- d-----w- c:\programdata\Electronic Arts
2012-02-19 18:24 . 2012-02-19 18:24 -------- d-----w- c:\programdata\EA Core
2012-02-19 16:20 . 2012-02-19 16:20 -------- d-----w- c:\program files (x86)\LucasArts
2012-02-19 16:00 . 2012-02-20 13:23 -------- d-----w- c:\program files\LucasArts
2012-02-19 11:39 . 2012-02-24 15:41 -------- d-----w- c:\users\Martin\AppData\Local\Nero
2012-02-16 07:35 . 2012-03-06 07:39 48648 ----a-w- c:\programdata\Microsoft\eHome\Packages\MCEClientUX\UpdateableMarkup-2\Markup.dll
2012-02-15 06:25 . 2012-02-15 06:25 -------- d-----w- c:\programdata\Symantec
2012-02-14 22:19 . 2011-12-30 06:26 515584 ----a-w- c:\windows\system32\timedate.cpl
2012-02-14 22:19 . 2011-12-30 05:27 478720 ----a-w- c:\windows\SysWow64\timedate.cpl
2012-02-14 22:19 . 2012-01-04 10:44 509952 ----a-w- c:\windows\system32\ntshrui.dll
2012-02-14 22:19 . 2012-01-04 08:58 442880 ----a-w- c:\windows\SysWow64\ntshrui.dll
2012-02-14 22:18 . 2012-01-14 04:06 3145728 ----a-w- c:\windows\system32\win32k.sys
2012-02-14 22:18 . 2011-12-28 03:59 498688 ----a-w- c:\windows\system32\drivers\afd.sys
2012-02-14 22:18 . 2011-12-16 08:46 634880 ----a-w- c:\windows\system32\msvcrt.dll
2012-02-14 22:18 . 2011-12-16 07:52 690688 ----a-w- c:\windows\SysWow64\msvcrt.dll
2012-02-14 21:40 . 2012-02-14 21:40 -------- dc-h--w- c:\programdata\{83C3B2FD-37EA-4C06-A228-E9B5E32FF0B1}
2012-02-14 20:39 . 2012-02-14 20:40 -------- d-----w- c:\programdata\IMinent
2012-02-14 20:39 . 2012-02-14 20:39 -------- d-----w- c:\program files (x86)\Iminent
2012-02-14 18:55 . 2010-10-16 04:49 145843 ----a-w- c:\windows\SysWow64\sllaunch.exe
2012-02-13 18:48 . 2012-02-24 12:17 -------- d-----w- c:\programdata\Malwarebytes
2012-02-13 18:48 . 2012-02-23 20:31 -------- d-----w- c:\program files (x86)\Malwarebytes' Anti-Malware
2012-02-11 21:34 . 2000-01-01 00:00 2182768 ----a-w- c:\windows\system32\drivers\viahduaa.sys
2012-02-11 21:34 . 2000-01-01 00:00 87152 ----a-w- c:\windows\system32\ViaMicArrayPropPageExt.dll
2012-02-11 21:34 . 2000-01-01 00:00 675440 ----a-w- c:\windows\system32\VIASysFx.dll
2012-02-11 21:34 . 2000-01-01 00:00 2914416 ----a-w- c:\windows\system32\VIAPropPageExt.dll
2012-02-11 21:34 . 2000-01-01 00:00 202864 ----a-w- c:\windows\system32\ViaMicArrayAPO.dll
2012-02-11 21:34 . 2000-01-01 00:00 116848 ----a-w- c:\windows\system32\ViaKaraokePropPageExt.dll
2012-02-11 21:34 . 2000-01-01 00:00 1161328 ----a-w- c:\windows\system32\ViaKaraokeApo.dll
2012-02-11 21:34 . 2000-01-01 00:00 27760 ----a-w- c:\windows\system32\ViakaraokeSrv.exe
.
.
.
(((((((((((((((((((((((((((((((((((((((( Find3M výpis ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2012-03-06 21:54 . 2012-02-07 18:21 15672 ----a-w- c:\windows\system32\drivers\SWDUMon.sys
2012-02-21 07:25 . 2012-02-01 10:54 48648 ----a-w- c:\programdata\Microsoft\eHome\Packages\MCEClientUX\UpdateableMarkup\Markup.dll
2012-02-07 07:50 . 2012-02-01 10:54 484176 ----a-w- c:\programdata\Microsoft\eHome\Packages\MCESpotlight\MCESpotlight\SpotlightResources.dll
2012-01-29 19:45 . 2012-01-29 19:19 414368 ----a-w- c:\windows\SysWow64\FlashPlayerCPLApp.cpl
2012-01-28 17:26 . 2012-01-28 17:26 21712 ----a-w- c:\windows\SysWow64\drivers\DrvAgent64.SYS
2012-01-22 14:03 . 2009-07-14 02:36 152576 ----a-w- c:\windows\SysWow64\msclmd.dll
2012-01-22 14:03 . 2009-07-14 02:36 175616 ----a-w- c:\windows\system32\msclmd.dll
2012-01-21 23:05 . 2012-01-21 23:05 272448 ----a-w- c:\windows\system32\drivers\dtsoftbus01.sys
2012-01-21 19:30 . 2012-01-21 19:30 74752 ----a-w- c:\windows\SysWow64\RegisterIEPKEYs.exe
2012-01-21 19:30 . 2012-01-21 19:30 161792 ----a-w- c:\windows\SysWow64\msls31.dll
2012-01-21 19:30 . 2012-01-21 19:30 110592 ----a-w- c:\windows\SysWow64\IEAdvpack.dll
2012-01-21 19:30 . 2012-01-21 19:30 86528 ----a-w- c:\windows\SysWow64\iesysprep.dll
2012-01-21 19:30 . 2012-01-21 19:30 76800 ----a-w- c:\windows\SysWow64\SetIEInstalledDate.exe
2012-01-21 19:30 . 2012-01-21 19:30 63488 ----a-w- c:\windows\SysWow64\tdc.ocx
2012-01-21 19:30 . 2012-01-21 19:30 48640 ----a-w- c:\windows\SysWow64\mshtmler.dll
2012-01-21 19:30 . 2012-01-21 19:30 367104 ----a-w- c:\windows\SysWow64\html.iec
2012-01-21 19:30 . 2012-01-21 19:30 74752 ----a-w- c:\windows\SysWow64\iesetup.dll
2012-01-21 19:30 . 2012-01-21 19:30 23552 ----a-w- c:\windows\SysWow64\licmgr10.dll
2012-01-21 19:30 . 2012-01-21 19:30 152064 ----a-w- c:\windows\SysWow64\wextract.exe
2012-01-21 19:30 . 2012-01-21 19:30 150528 ----a-w- c:\windows\SysWow64\iexpress.exe
2012-01-21 19:30 . 2012-01-21 19:30 420864 ----a-w- c:\windows\SysWow64\vbscript.dll
2012-01-21 19:30 . 2012-01-21 19:30 35840 ----a-w- c:\windows\SysWow64\imgutil.dll
2012-01-21 19:30 . 2012-01-21 19:30 142848 ----a-w- c:\windows\SysWow64\ieUnatt.exe
2012-01-21 19:30 . 2012-01-21 19:30 11776 ----a-w- c:\windows\SysWow64\mshta.exe
2012-01-21 19:30 . 2012-01-21 19:30 101888 ----a-w- c:\windows\SysWow64\admparse.dll
2012-01-21 19:30 . 2012-01-21 19:30 89088 ----a-w- c:\windows\system32\RegisterIEPKEYs.exe
2012-01-21 19:30 . 2012-01-21 19:30 222208 ----a-w- c:\windows\system32\msls31.dll
2012-01-21 19:30 . 2012-01-21 19:30 13088768 ----a-w- c:\windows\system32\ieframe.dll.stp
2012-01-21 19:30 . 2012-01-21 19:30 49664 ----a-w- c:\windows\system32\imgutil.dll
2012-01-21 19:30 . 2012-01-21 19:30 173056 ----a-w- c:\windows\system32\ieUnatt.exe
2012-01-21 19:30 . 2012-01-21 19:30 12288 ----a-w- c:\windows\system32\mshta.exe
2012-01-21 19:30 . 2012-01-21 19:30 114176 ----a-w- c:\windows\system32\admparse.dll
2012-01-21 19:30 . 2012-01-21 19:30 91648 ----a-w- c:\windows\system32\SetIEInstalledDate.exe
2012-01-21 19:30 . 2012-01-21 19:30 48640 ----a-w- c:\windows\system32\mshtmler.dll
2012-01-21 19:30 . 2012-01-21 19:30 135168 ----a-w- c:\windows\system32\IEAdvpack.dll
2012-01-21 19:30 . 2012-01-21 19:30 111616 ----a-w- c:\windows\system32\iesysprep.dll
2012-01-21 19:30 . 2012-01-21 19:30 85504 ----a-w- c:\windows\system32\iesetup.dll
2012-01-21 19:30 . 2012-01-21 19:30 76800 ----a-w- c:\windows\system32\tdc.ocx
2012-01-21 19:30 . 2012-01-21 19:30 448512 ----a-w- c:\windows\system32\html.iec
2012-01-21 19:30 . 2012-01-21 19:30 603648 ----a-w- c:\windows\system32\vbscript.dll
2012-01-21 19:30 . 2012-01-21 19:30 30720 ----a-w- c:\windows\system32\licmgr10.dll
2012-01-21 19:30 . 2012-01-21 19:30 165888 ----a-w- c:\windows\system32\iexpress.exe
2012-01-21 19:30 . 2012-01-21 19:30 160256 ----a-w- c:\windows\system32\wextract.exe
2012-01-17 20:00 . 2012-01-17 20:00 577824 ----a-w- c:\windows\system32\drivers\cmdGuard.sys
2012-01-17 03:39 . 2012-01-21 17:36 8602168 ----a-w- c:\programdata\Microsoft\Windows Defender\Definition Updates\{4E04855C-9FA9-4E5A-8C4C-EA9732E87ED0}\mpengine.dll
2012-01-04 00:48 . 2012-01-04 00:48 354176 ----a-w- c:\windows\SysWow64\DivXControlPanelApplet.cpl
2011-12-19 17:59 . 2011-12-19 17:59 93200 ----a-w- c:\windows\system32\drivers\inspect.sys
2011-12-19 17:59 . 2011-12-19 17:59 43248 ----a-w- c:\windows\system32\drivers\cmdhlp.sys
2011-12-19 17:59 . 2011-12-19 17:59 22696 ----a-w- c:\windows\system32\drivers\cmderd.sys
2011-12-19 17:58 . 2011-12-19 17:58 41200 ----a-w- c:\windows\system32\cmdcsr.dll
2011-12-19 17:58 . 2011-12-19 17:58 389840 ----a-w- c:\windows\system32\guard64.dll
2011-12-19 17:58 . 2011-12-19 17:58 301224 ----a-w- c:\windows\SysWow64\guard32.dll
2009-04-08 17:31 . 2009-04-08 17:31 106496 ----a-w- c:\program files (x86)\Common Files\CPInstallAction.dll
2008-08-12 04:45 . 2008-08-12 04:45 155648 ----a-w- c:\program files (x86)\Common Files\MSIactionall.dll
.
.
(((((((((((((((((((((((((((((((((( Spouštěcí body v registru )))))))))))))))))))))))))))))))))))))))))))))
.
.
*Poznámka* prázdné záznamy a legitimní výchozí údaje nejsou zobrazeny.
REGEDIT4
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ADSMOverlayIcon1]
@="{A8D448F4-0431-45AC-9F5E-E1B434AB2249}"
[HKEY_CLASSES_ROOT\CLSID\{A8D448F4-0431-45AC-9F5E-E1B434AB2249}]
2007-06-02 00:08 143360 ----a-w- c:\program files (x86)\ASUS\ASUS Data Security Manager\ShlExt\x86\OverlayIconShlExt1.dll
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"RocketDock"="c:\program files (x86)\RocketDock\RocketDock.exe" [2007-09-02 495616]
"Skype"="c:\program files (x86)\Skype\Phone\Skype.exe" [2011-10-13 17351304]
"Sidebar"="c:\program files\Windows Sidebar\sidebar.exe" [2010-11-20 1475584]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]
"UpdateP2GoShortCut"="c:\program files (x86)\CyberLink\Power2Go\MUITransfer\MUIStartMenu.exe" [2009-05-20 222504]
"HControlUser"="c:\program files (x86)\ASUS\ATK Hotkey\HControlUser.exe" [2009-06-19 105016]
"ATKOSD2"="c:\program files (x86)\ASUS\ATKOSD2\ATKOSD2.exe" [2009-08-17 6859392]
"ATKMEDIA"="c:\program files (x86)\ASUS\ATK Media\DMedia.exe" [2009-08-20 170624]
"TkBellExe"="c:\program files (x86)\Real\RealPlayer\update\realsched.exe" [2012-01-21 296056]
"HDAudDeck"="c:\program files (x86)\VIA\VIAudioi\VDeck\VDeck.exe" [2000-01-01 4935792]
"sllaunch"="c:\windows\SysWOW64\sllaunch.exe" [2010-10-16 145843]
"SSDMonitor"="c:\program files (x86)\Common Files\PC Tools\sMonitor\SSDMonitor.exe" [2012-02-03 103896]
"COMODO"="c:\program files\COMODO\COMODO GeekBuddy\CLPSLA.exe" [2011-11-23 213304]
"CPA"="c:\program files\COMODO\COMODO GeekBuddy\VALA.exe" [2011-11-23 184120]
"avgnt"="c:\program files (x86)\Avira\AntiVir Desktop\avgnt.exe" [2011-10-11 258512]
.
c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\
FancyStart daemon.lnk - c:\windows\Installer\{2B81872B-A054-48DA-BE3B-FA5C164C303A}\_C4A2FC3E3722966204FDD8.exe [2010-4-20 12862]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorAdmin"= 0 (0x0)
"ConsentPromptBehaviorUser"= 3 (0x3)
"EnableLUA"= 0 (0x0)
"EnableUIADesktopToggle"= 0 (0x0)
"PromptOnSecureDesktop"= 0 (0x0)
"EnableLinkedConnections"= 1 (0x1)
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\windows]
"AppInit_DLLs"=c:\windows\SysWOW64\guard32.dll
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\drivers32]
"aux"=wdmaud.drv
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\CLPSLS]
@="Service"
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\run-]
"TkBellExe"="c:\program files (x86)\Real\RealPlayer\update\realsched.exe" -osboot
"QuickTime Task"="c:\program files (x86)\QuickTime\QTTask.exe" -atboottime
"GrooveMonitor"="c:\program files (x86)\Microsoft Office\Office12\GrooveMonitor.exe"
"UpdateLBPShortCut"="c:\program files (x86)\CyberLink\LabelPrint\MUITransfer\MUIStartMenu.exe" "c:\program files (x86)\CyberLink\LabelPrint" UpdateWithCreateOnce "Software\CyberLink\LabelPrint\2.5"
"NBAgent"="c:\program files (x86)\Nero\Nero 10\Nero BackItUp\NBAgent.exe" /WinStart
"ExpressFiles"="c:\program files (x86)\ExpressFiles\ExpressFiles.exe" -tray
"Malwarebytes' Anti-Malware"="c:\program files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe" /starttray
"DivXUpdate"="c:\program files (x86)\DivX\DivX Update\DivXUpdate.exe" /CHECKNOW
.
R2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;c:\windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2010-03-18 138576]
R3 AmUStor;AM USB Stroage Driver;c:\windows\system32\drivers\AmUStor.SYS [x]
R3 BTMCOM;Bluetooth Serial Port;c:\windows\system32\Drivers\btmcom.sys [x]
R3 BTMUSB;Motorola Bluetooth Radio Service;c:\windows\system32\Drivers\btmusb.sys [x]
R3 btnetBUs;Bluetooth PAN Bus Service;c:\windows\system32\Drivers\btnetBus.sys [x]
R3 DrvAgent64;DrvAgent64;c:\windows\SysWOW64\Drivers\DrvAgent64.SYS [2012-01-28 21712]
R3 FLEXnet Licensing Service 64;FLEXnet Licensing Service 64;c:\program files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService64.exe [2012-01-27 1028096]
R3 IvtBtBUs;IVT Bluetooth Bus Service;c:\windows\system32\Drivers\IvtBtBus.sys [x]
R3 pwdrvio;pwdrvio;c:\windows\system32\pwdrvio.sys [x]
R3 pwdspio;pwdspio;c:\windows\system32\pwdspio.sys [x]
R3 RdpVideoMiniport;Remote Desktop Video Miniport Driver;c:\windows\system32\drivers\rdpvideominiport.sys [x]
R3 SiSGbeLH;SiS191/SiS190 Ethernet Device NDIS 6.0 Driver;c:\windows\system32\DRIVERS\SiSG664.sys [x]
R3 SWDUMon;SWDUMon;c:\windows\system32\DRIVERS\SWDUMon.sys [x]
R3 Synth3dVsc;Synth3dVsc;c:\windows\system32\drivers\synth3dvsc.sys [x]
R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys [x]
R3 tsusbhub;tsusbhub;c:\windows\system32\drivers\tsusbhub.sys [x]
R3 VGPU;VGPU;c:\windows\system32\drivers\rdvgkmd.sys [x]
R3 WatAdminSvc;Služba Technologie aktivace Windows;c:\windows\system32\Wat\WatAdminSvc.exe [x]
R4 AdobeARMservice;Adobe Acrobat Update Service;c:\program files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [2012-01-03 63928]
R4 gupdate;Google Update Service (gupdate);c:\program files (x86)\Google\Update\GoogleUpdate.exe [2010-04-20 135664]
R4 gupdatem;Služba Google Update (gupdatem);c:\program files (x86)\Google\Update\GoogleUpdate.exe [2010-04-20 135664]
R4 NAUpdate;Nero Update;c:\program files (x86)\Nero\Update\NASvc.exe [2010-03-25 490280]
R4 PCToolsSSDMonitorSvc;PC Tools Startup and Shutdown Monitor service;c:\program files (x86)\Common Files\PC Tools\sMonitor\StartManSvc.exe [2012-02-03 793048]
S0 BtHidBus;Bluetooth HID Bus Service;c:\windows\System32\Drivers\BtHidBus.sys [x]
S0 fltsrv;Acronis Storage Filter Management;c:\windows\system32\DRIVERS\fltsrv.sys [x]
S0 lullaby;lullaby;c:\windows\system32\DRIVERS\lullaby.sys [x]
S0 sptd;sptd;c:\windows\\SystemRoot\System32\Drivers\sptd.sys [x]
S1 avkmgr;avkmgr;c:\windows\system32\DRIVERS\avkmgr.sys [x]
S1 cmdGuard;COMODO Internet Security Sandbox Driver;c:\windows\system32\DRIVERS\cmdguard.sys [x]
S1 cmdHlp;COMODO Internet Security Helper Driver;c:\windows\system32\DRIVERS\cmdhlp.sys [x]
S1 dtsoftbus01;DAEMON Tools Virtual Bus Driver;c:\windows\system32\DRIVERS\dtsoftbus01.sys [x]
S1 HWiNFO32;HWiNFO32/64 Kernel Driver;c:\program files (x86)\HWiNFO32\HWiNFO64A.SYS [2011-12-19 30080]
S1 vwififlt;Virtual WiFi Filter Driver;c:\windows\system32\DRIVERS\vwififlt.sys [x]
S2 AFBAgent;AFBAgent;c:\windows\system32\FBAgent.exe [x]
S2 AntiVirMailService;Avira Mail Protection;c:\program files (x86)\Avira\AntiVir Desktop\avmailc.exe [2012-03-11 342480]
S2 AntiVirSchedulerService;Avira Scheduler;c:\program files (x86)\Avira\AntiVir Desktop\sched.exe [2011-10-11 86224]
S2 AntiVirWebService;Avira Web Protection;c:\program files (x86)\Avira\AntiVir Desktop\AVWEBGRD.EXE [2011-10-11 463824]
S2 ASMMAP64;ASMMAP64;c:\program files\ATKGFNEX\ASMMAP64.sys [2007-07-24 14904]
S2 CLPSLS;COMODO livePCsupport Service;c:\program files\COMODO\COMODO GeekBuddy\CLPSLS.exe [2011-11-23 1267000]
S2 MBAMService;MBAMService;c:\program files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe [2012-01-13 652360]
S2 TuneUp.UtilitiesSvc;TuneUp Utilities Service;c:\program files (x86)\TuneUp Utilities 2012\TuneUpUtilitiesService64.exe [2012-02-09 2143552]
S2 VIAKaraokeService;VIA Karaoke digital mixer Service;c:\windows\system32\viakaraokesrv.exe [x]
S3 anvsnddrv;AnvSoft Virtual Sound Device;c:\windows\system32\drivers\anvsnddrv.sys [x]
S3 ETD;ELAN PS/2 Port Input Device;c:\windows\system32\DRIVERS\ETD.sys [x]
S3 MBAMProtector;MBAMProtector;c:\windows\system32\drivers\mbam.sys [x]
S3 TuneUpUtilitiesDrv;TuneUpUtilitiesDrv;c:\program files (x86)\TuneUp Utilities 2012\TuneUpUtilitiesDriver64.sys [2012-02-09 11856]
S3 VIAHdAudAddService;VIA High Definition Audio Driver Service;c:\windows\system32\drivers\viahduaa.sys [x]
S3 vwifimp;Microsoft Virtual WiFi Miniport Service;c:\windows\system32\DRIVERS\vwifimp.sys [x]
.
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\svchost]
iissvcs REG_MULTI_SZ w3svc was
apphost REG_MULTI_SZ apphostsvc
.
Obsah adresáře 'Naplánované úlohy'
.
2012-02-23 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
- c:\program files (x86)\Google\Update\GoogleUpdate.exe [2010-04-20 04:11]
.
2012-02-23 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
- c:\program files (x86)\Google\Update\GoogleUpdate.exe [2010-04-20 04:11]
.
2012-03-07 c:\windows\Tasks\SlimDrivers Startup.job
- c:\program files (x86)\SlimDrivers\SlimDrivers.exe [2012-02-01 12:42]
.
.
--------- x86-64 -----------
.
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ADSMOverlayIcon1]
@="{A8D448F4-0431-45AC-9F5E-E1B434AB2249}"
[HKEY_CLASSES_ROOT\CLSID\{A8D448F4-0431-45AC-9F5E-E1B434AB2249}]
2007-06-01 23:52 159744 ----a-w- c:\program files (x86)\ASUS\ASUS Data Security Manager\ShlExt\x64\OverlayIconShlExt1_64.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\AsusWSShellExt_B]
@="{6D4133E5-0742-4ADC-8A8C-9303440F7190}"
[HKEY_CLASSES_ROOT\CLSID\{6D4133E5-0742-4ADC-8A8C-9303440F7190}]
2009-11-26 05:49 70656 ----a-w- c:\program files (x86)\ASUS\ASUS WebStorage\SERVICE\AsusWSShellExt64.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\AsusWSShellExt_O]
@="{64174815-8D98-4CE6-8646-4C039977D808}"
[HKEY_CLASSES_ROOT\CLSID\{64174815-8D98-4CE6-8646-4C039977D808}]
2009-11-26 05:49 70656 ----a-w- c:\program files (x86)\ASUS\ASUS WebStorage\SERVICE\AsusWSShellExt64.dll
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"IgfxTray"="c:\windows\system32\igfxtray.exe" [2011-10-13 162584]
"HotKeysCmds"="c:\windows\system32\hkcmd.exe" [2011-10-13 386840]
"COMODO Internet Security"="c:\program files\COMODO\COMODO Internet Security\cfp.exe" [2011-12-20 9454920]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
"LoadAppInit_DLLs"=0x1
"AppInit_DLLs"=c:\windows\System32\guard64.dll
.
------- Doplňkový sken -------
.
uStart Page =
uLocal Page = c:\windows\system32\blank.htm
mLocal Page =
IE: E&xport to Microsoft Excel - c:\progra~2\MICROS~1\Office12\EXCEL.EXE/3000
IE: E&xportovat do aplikace Microsoft Excel - c:\progra~2\MICROS~1\Office12\EXCEL.EXE/3000
IE: Send to &Bluetooth Device... - c:\program files (x86)\WIDCOMM\Bluetooth Software\btsendto_ie_ctx.htm
IE: {{77F665FD-3F60-4B0A-AE14-EC124B7A7FCE} - c:\program files (x86)\ICQ7.7\ICQ.exe
IE: {{bd707fe6-39f6-4bda-9265-86a76719bdc5} - c:\program files\Motorola\Bluetooth\btmiesend.htm
LSP: c:\program files (x86)\Avira\AntiVir Desktop\avsda.dll
TCP: Interfaces\{36ED9489-9C73-4458-A2F2-7E7F192B8C74}: NameServer = 8.26.56.26,156.154.70.22
TCP: Interfaces\{36ED9489-9C73-4458-A2F2-7E7F192B8C74}\65F49405: NameServer = 8.26.56.26,156.154.70.22
TCP: Interfaces\{7CFB3A70-C84F-4431-BF87-1901F690909F}: NameServer = 8.26.56.26,156.154.70.22
FF - ProfilePath - c:\users\Martin\AppData\Roaming\Mozilla\Firefox\Profiles\x22ecfqi.default\
FF - prefs.js: browser.search.defaulturl -
FF - prefs.js: browser.search.selectedEngine -
FF - prefs.js: browser.startup.homepage - hxxp://www.seznam.cz/
FF - prefs.js: network.proxy.http - 58.58.180.122
FF - prefs.js: network.proxy.type - 4
FF - user.js: network.http.max-persistent-connections-per-server - 4
FF - user.js: nglayout.initialpaint.delay - 600
FF - user.js: content.notify.interval - 600000
FF - user.js: content.max.tokenizing.time - 1800000
FF - user.js: content.switch.threshold - 600000
FF - user.js: extensions.BabylonToolbar_i.babTrack - affID=100789
FF - user.js: extensions.BabylonToolbar_i.babExt - somoto
FF - user.js: extensions.BabylonToolbar_i.srcExt - ss
FF - user.js: extensions.BabylonToolbar_i.id - 0cdd3cc500000000000000158330973c
FF - user.js: extensions.BabylonToolbar_i.hardId - 0cdd3cc500000000000000158330973c
FF - user.js: extensions.BabylonToolbar_i.instlDay - 15364
FF - user.js: extensions.BabylonToolbar_i.vrsn - 1.5.3.17
FF - user.js: extensions.BabylonToolbar_i.vrsni - 1.5.3.17
FF - user.js: extensions.BabylonToolbar_i.vrsnTs - 1.5.3.1717:07
FF - user.js: extensions.BabylonToolbar_i.prtnrId - babylon
FF - user.js: extensions.BabylonToolbar_i.prdct - BabylonToolbar
FF - user.js: extensions.BabylonToolbar_i.aflt - babsst
FF - user.js: extensions.BabylonToolbar_i.smplGrp - none
FF - user.js: extensions.BabylonToolbar_i.tlbrId - tb5
FF - user.js: extensions.BabylonToolbar_i.instlRef - sst
.
- - - - NEPLATNÉ POLOŽKY ODSTRANĚNÉ Z REGISTRU - - - -
.
AddRemove-Adobe Shockwave Player - c:\windows\system32\Adobe\Shockwave 11\uninstaller.exe
AddRemove-ASUS_Screensaver - c:\windows\system32\ASUS_Screensaver.scr
.
.
Binary file temp00 matches
.
--------------------- ZAMKNUTÉ KLÍČE V REGISTRU ---------------------
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil11e_ActiveX.exe,-101"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\Elevation]
"Enabled"=dword:00000001
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\LocalServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil11e_ActiveX.exe"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@="Shockwave Flash Object"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\InprocServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash11e.ocx"
"ThreadingModel"="Apartment"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\MiscStatus]
@="0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ProgID]
@="ShockwaveFlash.ShockwaveFlash.10"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash11e.ocx, 1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\TypeLib]
@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\Version]
@="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
@="ShockwaveFlash.ShockwaveFlash"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@="Macromedia Flash Factory Object"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\InprocServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash11e.ocx"
"ThreadingModel"="Apartment"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ProgID]
@="FlashFactory.FlashFactory.1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash11e.ocx, 1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\TypeLib]
@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\Version]
@="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
@="FlashFactory.FlashFactory"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}]
@Denied: (A 2) (Everyone)
@="IFlashBroker4"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0000\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0001\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Control\PCW\Security]
@Denied: (Full) (Everyone)
.
------------------------ Jiné spuštené procesy ------------------------
.
c:\program files (x86)\ASUS\ATK Hotkey\ASLDRSrv.exe
c:\program files\ATKGFNEX\GFNEXSrv.exe
c:\program files (x86)\Avira\AntiVir Desktop\avguard.exe
c:\program files (x86)\ASUS\ControlDeck\ControlDeckStartUp.exe
c:\program files (x86)\ASUS\ATK Hotkey\HControl.exe
c:\program files (x86)\ASUS\ATK Hotkey\ATKOSD.exe
c:\windows\AsScrPro.exe
c:\program files (x86)\ASUS\ATK Hotkey\KBFiltr.exe
c:\program files (x86)\ASUS\ATK Hotkey\WDC.exe
c:\program files (x86)\CyberLink\Power2Go\CLMLSvc.exe
c:\program files (x86)\DAEMON Tools Pro\DTShellHlp.exe
c:\program files (x86)\ASUS\ASUS Data Security Manager\ADSMSrv.exe
c:\progra~2\Yzshadow\YzShadow.exe
c:\progra~2\VIRTUA~1\VIRTUA~1.EXE
c:\progra~2\VIRTUA~1\modules\WinList.exe
c:\program files (x86)\IVT Corporation\BlueSoleil\BlueSoleil.exe
c:\program files (x86)\Opera\opera.exe
.
**************************************************************************
.
Celkový čas: 2012-03-11 22:15:23 - počítač byl restartován
ComboFix-quarantined-files.txt 2012-03-11 21:15
.
Před spuštěním: Volných bajtů: 222 709 915 648
Po spuštění: Volných bajtů: 222 645 166 080
.
- - End Of File - - 16FD624494563A6A4554CB72756DD7F2

Já jsem Vás přehlídla
Tento počítač je ten, co se nechce vypínat?