VIRY.CZ

Pomáháme v boji s počítačovou havěti!
https://forum.viry.cz:443/

prosím o kontrolu logu

https://forum.viry.cz:443/viewtopic.php?t=125533

Stránka 2 z 3

Re: prosím o kontrolu logu

Napsal: 05 lis 2012 13:56
od Loutka
RogueKiller V8.2.2 [11/03/2012] by Tigzy
mail: tigzyRK<at>gmail<dot>com
Podpora: http://www.geekstogo.com/forum/files/fi ... guekiller/
Website: http://tigzy.geekstogo.com/roguekiller.php
Operační systém: Windows 7 (6.1.7601 Service Pack 1) 64 bits version
Spuštěno v : Normální režim
Uživatel : Tonda [Práva správce]
Mód : Kontrola -- Datum : 11/05/2012 13:55:24

¤¤¤ Škodlivé procesy: : 0 ¤¤¤

¤¤¤ ¤¤¤ Záznamy Registrů: : 8 ¤¤¤
[DNS] HKLM\[...]\ControlSet001\Services\Interfaces\{1E0C9175-348B-43B6-9883-2E17D2AC5F2B} : NameServer (192.168.150.237,194.228.2.1) -> NALEZENO
[DNS] HKLM\[...]\ControlSet002\Services\Interfaces\{1E0C9175-348B-43B6-9883-2E17D2AC5F2B} : NameServer (192.168.150.237,194.228.2.1) -> NALEZENO
[HJPOL] HKLM\[...]\System : DisableTaskMgr (0) -> NALEZENO
[HJPOL] HKLM\[...]\System : DisableRegistryTools (0) -> NALEZENO
[HJPOL] HKLM\[...]\Wow6432Node\System : DisableTaskMgr (0) -> NALEZENO
[HJPOL] HKLM\[...]\Wow6432Node\System : DisableRegistryTools (0) -> NALEZENO
[HJ DESK] HKLM\[...]\NewStartPanel : {59031a47-3f72-44a7-89c5-5595fe6b30ee} (1) -> NALEZENO
[HJ DESK] HKLM\[...]\NewStartPanel : {20D04FE0-3AEA-1069-A2D8-08002B30309D} (1) -> NALEZENO

¤¤¤ Zvláštní soubory / Složky: ¤¤¤

¤¤¤ Ovladač : [NENAHRÁNO] ¤¤¤

¤¤¤ Soubor HOSTS: ¤¤¤
--> C:\windows\system32\drivers\etc\hosts



¤¤¤ Kontrola MBR: ¤¤¤

+++++ PhysicalDrive0: ST9750420AS +++++
--- User ---
[MBR] 2fb96464ec36a6e12a9dafb393087304
[BSP] 45b6424c9dd8d09708685277f5ffebff : Windows 7 MBR Code
Partition table:
0 - [XXXXXX] DELL-UTIL (0xde) [VISIBLE] Offset (sectors): 2048 | Size: 100 Mo
1 - [ACTIVE] NTFS (0x07) [VISIBLE] Offset (sectors): 206848 | Size: 15000 Mo
2 - [XXXXXX] NTFS (0x07) [VISIBLE] Offset (sectors): 30926848 | Size: 153000 Mo
3 - [XXXXXX] EXTEN (0x05) [VISIBLE] Offset (sectors): 344270848 | Size: 547303 Mo
User = LL1 ... OK!
User = LL2 ... OK!

Dokončeno : << RKreport[1]_S_11052012_02d1355.txt >>
RKreport[1]_S_11052012_02d1355.txt

Re: prosím o kontrolu logu

Napsal: 05 lis 2012 16:28
od vyosek
:arrow: Spustte znovu RogueKiller
  • Pokud pouzivate Win Vista ci W7, kliknete na RogueKiller pravym a dejte Run As Administrator ci Spustit jako spravce
  • Zvolte moznost Prohledat a pote Smazat a nasledne Zprava - otevre se log, ten sem vlozte
  • Pak kliknete na Oprava Host a Zprava - otevre se log, ten sem vlozte

Re: prosím o kontrolu logu

Napsal: 05 lis 2012 16:42
od Loutka
RogueKiller V8.2.2 [11/03/2012] by Tigzy
mail: tigzyRK<at>gmail<dot>com
Podpora: http://www.geekstogo.com/forum/files/fi ... guekiller/
Website: http://tigzy.geekstogo.com/roguekiller.php
Operační systém: Windows 7 (6.1.7601 Service Pack 1) 64 bits version
Spuštěno v : Normální režim
Uživatel : Tonda [Práva správce]
Mód : Odebrat -- Datum : 11/05/2012 16:40:44

¤¤¤ Škodlivé procesy: : 0 ¤¤¤

¤¤¤ ¤¤¤ Záznamy Registrů: : 6 ¤¤¤
[DNS] HKLM\[...]\ControlSet001\Services\Interfaces\{1E0C9175-348B-43B6-9883-2E17D2AC5F2B} : NameServer (192.168.150.237,194.228.2.1) -> NEBYLO ODSTRANĚNO, POUŽIJTE DNSFIX
[DNS] HKLM\[...]\ControlSet002\Services\Interfaces\{1E0C9175-348B-43B6-9883-2E17D2AC5F2B} : NameServer (192.168.150.237,194.228.2.1) -> NEBYLO ODSTRANĚNO, POUŽIJTE DNSFIX
[HJPOL] HKLM\[...]\System : DisableTaskMgr (0) -> VYMAZÁNO
[HJPOL] HKLM\[...]\System : DisableRegistryTools (0) -> VYMAZÁNO
[HJ DESK] HKLM\[...]\NewStartPanel : {59031a47-3f72-44a7-89c5-5595fe6b30ee} (1) -> NAHRAZENO (0)
[HJ DESK] HKLM\[...]\NewStartPanel : {20D04FE0-3AEA-1069-A2D8-08002B30309D} (1) -> NAHRAZENO (0)

¤¤¤ Zvláštní soubory / Složky: ¤¤¤

¤¤¤ Ovladač : [NENAHRÁNO] ¤¤¤

¤¤¤ Soubor HOSTS: ¤¤¤
--> C:\windows\system32\drivers\etc\hosts



¤¤¤ Kontrola MBR: ¤¤¤

+++++ PhysicalDrive0: ST9750420AS +++++
--- User ---
[MBR] 2fb96464ec36a6e12a9dafb393087304
[BSP] 45b6424c9dd8d09708685277f5ffebff : Windows 7 MBR Code
Partition table:
0 - [XXXXXX] DELL-UTIL (0xde) [VISIBLE] Offset (sectors): 2048 | Size: 100 Mo
1 - [ACTIVE] NTFS (0x07) [VISIBLE] Offset (sectors): 206848 | Size: 15000 Mo
2 - [XXXXXX] NTFS (0x07) [VISIBLE] Offset (sectors): 30926848 | Size: 153000 Mo
3 - [XXXXXX] EXTEN (0x05) [VISIBLE] Offset (sectors): 344270848 | Size: 547303 Mo
User = LL1 ... OK!
User = LL2 ... OK!

Dokončeno : << RKreport[3]_D_11052012_02d1640.txt >>
RKreport[1]_S_11052012_02d1355.txt ; RKreport[2]_S_11052012_02d1640.txt ; RKreport[3]_D_11052012_02d1640.txt

Re: prosím o kontrolu logu

Napsal: 05 lis 2012 16:42
od vyosek
PROSIM CTETE DUKLADNE NAVOD - TATO UTILITA MA VELKOU SCHOPNOST MAZAT A JE NUTNE JI APLIKOVAT JEN NA DOPORUCENI, JINAK VAM MUZE JIT SYSTEM DO KYTEK
:arrow: Stahnete a ulozte na plochu Combofix http://download.bleepingcomputer.com/sUBs/ComboFix.exe
  • Vypnete vsechny rezidentni bezpecnostní programy - firewally, antiviry, antispywary apod.
  • Pokud mate Win XP spustte pod uctem Spravce\Administratora
  • Pokud mate Win Vista ci Win 7, kliknete na Combofix pravym a dejte Run As Administrator ci Spustit jako spravce
  • Ihned po startu se zobrazi stranka s licencnim ujednanim, pokracujte kliknutim na Ano
  • Pokud Vam CF nabidne instalaci Konzoly pro zotaveni, tak souhlaste
  • Dale postupujte dle pokynu, behem scanu nechte PC naprosto v klidu - nespoustejte zadne aplikace a neklikejte do zobrazujiciho se okna
  • Scan by mel trvat cca 10 min, ale pokud bude PC hodne zaneseno, muze se cas prodlouzit
  • Po dokonceni skenu a pripadnem restartu CF zobrazi log, pripadne jej najdete zde C:\ComboFix.txt, jeho obsah sem vlozte
  • Detailni postup vc. obrazku mate zde http://www.bleepingcomputer.com/combofi ... t-combofix

Re: prosím o kontrolu logu

Napsal: 05 lis 2012 16:56
od Loutka
ComboFix 12-11-05.01 - Tonda 05.11.2012 16:49:51.1.4 - x64
Microsoft Windows 7 Home Premium 6.1.7601.1.1250.420.1029.18.6050.4392 [GMT 1:00]
Spuštěný z: c:\users\Tonda\Desktop\ComboFix.exe
AV: AVG Anti-Virus 2012 *Disabled/Updated* {5A2746B1-DEE9-F85A-FBCD-ADB11639C5F0}
SP: AVG Anti-Virus 2012 *Disabled/Updated* {E146A755-F8D3-F7D4-C17D-96C36DBE8F4D}
SP: Windows Defender *Disabled/Outdated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
* Vytvořen nový Bod Obnovení
.
.
((((((((((((((((((((((((((((((((((((((( Ostatní výmazy )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
c:\programdata\PCDr\6032\AddOnDownloaded\06004c97-c212-44da-81de-706b46554efe.dll
c:\programdata\PCDr\6032\AddOnDownloaded\07439fd5-7039-4014-b635-5bf088a1465b.dll
c:\programdata\PCDr\6032\AddOnDownloaded\087abda5-3ca9-433a-8a4e-6b9fc9285607.dll
c:\programdata\PCDr\6032\AddOnDownloaded\0d461521-7dbf-4cec-a29e-936c88cdf8c9.dll
c:\programdata\PCDr\6032\AddOnDownloaded\0d85b53c-d766-4bf0-8940-17b534910268.dll
c:\programdata\PCDr\6032\AddOnDownloaded\0f6f4769-e33b-4059-ac7e-958f5cedf6f3.dll
c:\programdata\PCDr\6032\AddOnDownloaded\100c3865-0c76-461b-b2fd-042d6d5fa7f6.dll
c:\programdata\PCDr\6032\AddOnDownloaded\16535d13-dd9f-48ff-8ae3-e3135157e6da.dll
c:\programdata\PCDr\6032\AddOnDownloaded\16837627-a839-41c5-a88f-3a0335128383.dll
c:\programdata\PCDr\6032\AddOnDownloaded\173c4dd2-e93c-4725-b006-db1d8f465192.dll
c:\programdata\PCDr\6032\AddOnDownloaded\1e0aaf9a-9947-4a7b-b1ae-8a89919438ed.dll
c:\programdata\PCDr\6032\AddOnDownloaded\263d6ac9-4f87-466c-947c-bd9af71d7035.dll
c:\programdata\PCDr\6032\AddOnDownloaded\2ee79d71-badc-46b4-b731-42b15f3cd1c3.dll
c:\programdata\PCDr\6032\AddOnDownloaded\305a1406-381f-449d-9486-32504a38e5b0.dll
c:\programdata\PCDr\6032\AddOnDownloaded\3410f47b-5e8c-47c6-bf2c-234af4121d4c.dll
c:\programdata\PCDr\6032\AddOnDownloaded\378deb7f-049e-4a5e-83b2-5381dcd9e928.dll
c:\programdata\PCDr\6032\AddOnDownloaded\3972fea3-214c-4935-a7d1-96bf66115683.dll
c:\programdata\PCDr\6032\AddOnDownloaded\3a79f062-8f3e-464f-9815-2c45840494ee.dll
c:\programdata\PCDr\6032\AddOnDownloaded\3b1c7acd-5e3e-4459-ab98-5109117e2341.dll
c:\programdata\PCDr\6032\AddOnDownloaded\3b429c4f-8ba9-4a7d-bbb4-4548bb6d2539.dll
c:\programdata\PCDr\6032\AddOnDownloaded\3c49c05a-0eb3-4044-a0f8-d4ea2a439295.dll
c:\programdata\PCDr\6032\AddOnDownloaded\3e4c86d5-a5c1-4c3f-8fc7-6258992b16c5.dll
c:\programdata\PCDr\6032\AddOnDownloaded\44ddba62-3b58-480f-a775-ae7e9dd9d5df.dll
c:\programdata\PCDr\6032\AddOnDownloaded\4546f2bc-b9d9-4667-abe7-b0bacc90279e.dll
c:\programdata\PCDr\6032\AddOnDownloaded\45d3827c-bce8-440f-bcda-3bd183a7bac3.dll
c:\programdata\PCDr\6032\AddOnDownloaded\4704833a-6508-40cc-b98b-5ebd235e52ca.dll
c:\programdata\PCDr\6032\AddOnDownloaded\4804ced5-915b-48a3-a465-b8a5e02714bf.dll
c:\programdata\PCDr\6032\AddOnDownloaded\4818e109-9489-4cd8-9044-44defd8ec187.dll
c:\programdata\PCDr\6032\AddOnDownloaded\493f295d-1a46-46f6-926c-63b474cedab4.dll
c:\programdata\PCDr\6032\AddOnDownloaded\5cd81d7c-326c-42d2-8929-1ee85c69dc1d.dll
c:\programdata\PCDr\6032\AddOnDownloaded\5e1c102f-bfde-420c-87c0-64fe851888e5.dll
c:\programdata\PCDr\6032\AddOnDownloaded\5f169f6e-cfce-411e-b266-aa53ac35ce83.dll
c:\programdata\PCDr\6032\AddOnDownloaded\62d1f0b0-bc9a-4f6c-bad7-93b19a91276a.dll
c:\programdata\PCDr\6032\AddOnDownloaded\67c3d4fe-b638-467a-9fe2-c5813ade3330.dll
c:\programdata\PCDr\6032\AddOnDownloaded\6820b110-e483-4f1e-9b48-438f7916f078.dll
c:\programdata\PCDr\6032\AddOnDownloaded\684a43a7-04d5-4797-bc20-4db8a316286c.dll
c:\programdata\PCDr\6032\AddOnDownloaded\6b5978fa-48d7-4309-a523-7e157768c0d8.dll
c:\programdata\PCDr\6032\AddOnDownloaded\6f4fb483-ce30-493a-8cb4-3e530ab1be5b.dll
c:\programdata\PCDr\6032\AddOnDownloaded\7014e871-cc3b-4dec-b82b-bc70222b40ed.dll
c:\programdata\PCDr\6032\AddOnDownloaded\739db3eb-d3cd-4c86-a6ea-01a49984fa3b.dll
c:\programdata\PCDr\6032\AddOnDownloaded\7bd83798-7a02-4f50-83a2-b91cabcbd1f9.dll
c:\programdata\PCDr\6032\AddOnDownloaded\7dbfef1a-6148-4748-a1b3-71627763a45a.dll
c:\programdata\PCDr\6032\AddOnDownloaded\813755dc-2229-47a2-b85b-19d0aaa641c9.dll
c:\programdata\PCDr\6032\AddOnDownloaded\819a7f02-352c-4ccc-8fd0-40d8959b0b10.dll
c:\programdata\PCDr\6032\AddOnDownloaded\872965c7-08b7-47fc-a74c-ff167590b71a.dll
c:\programdata\PCDr\6032\AddOnDownloaded\8a6735b1-c078-4648-9416-b6bb29ec3dc1.dll
c:\programdata\PCDr\6032\AddOnDownloaded\8c199aef-9eca-4ab6-863d-c9136ebec654.dll
c:\programdata\PCDr\6032\AddOnDownloaded\8d357f17-07ad-4392-ba06-fb67564c98cd.dll
c:\programdata\PCDr\6032\AddOnDownloaded\934f6059-2d35-4bd9-a130-a17cb5563507.dll
c:\programdata\PCDr\6032\AddOnDownloaded\9ad10df8-6662-488d-9a0f-1fab1ee3403d.dll
c:\programdata\PCDr\6032\AddOnDownloaded\9f8591c3-5048-42f7-9553-387b30449f54.dll
c:\programdata\PCDr\6032\AddOnDownloaded\a4930af9-016c-4915-a740-a3364e7618aa.dll
c:\programdata\PCDr\6032\AddOnDownloaded\a61f44a8-21a3-4c4a-a04b-993dfb73bf96.dll
c:\programdata\PCDr\6032\AddOnDownloaded\a875f6ee-9729-4447-8d2c-63bd2e6396c1.dll
c:\programdata\PCDr\6032\AddOnDownloaded\a9de0c84-9a7c-4638-9653-13aa8cf56e80.dll
c:\programdata\PCDr\6032\AddOnDownloaded\ac96894a-064b-4c44-a457-9d5aaee7032a.dll
c:\programdata\PCDr\6032\AddOnDownloaded\ae67b364-b69e-471e-b177-2459120b84d4.dll
c:\programdata\PCDr\6032\AddOnDownloaded\af728edb-0984-4c06-9a4b-0878bcfa9a26.dll
c:\programdata\PCDr\6032\AddOnDownloaded\b2152f30-7380-4987-8fcf-e4c06952615d.dll
c:\programdata\PCDr\6032\AddOnDownloaded\b2ed8d53-41ce-48e6-b4ac-8b8e5e1a4fdf.dll
c:\programdata\PCDr\6032\AddOnDownloaded\b4cc2a4a-87f5-49cd-935c-18f1a80e65b7.dll
c:\programdata\PCDr\6032\AddOnDownloaded\b510dd11-341c-4dfa-9f1e-dd5ddcc444f4.dll
c:\programdata\PCDr\6032\AddOnDownloaded\b9ce760f-6209-48f2-a4a3-695324591c45.dll
c:\programdata\PCDr\6032\AddOnDownloaded\bbfa36b0-30b0-4e36-8d8c-69df1d87626b.dll
c:\programdata\PCDr\6032\AddOnDownloaded\bc6fc708-5b6b-4a72-b336-09b3089baa7a.dll
c:\programdata\PCDr\6032\AddOnDownloaded\bf647bd7-dfb5-4746-a6b4-b7c2fdbbf3b1.dll
c:\programdata\PCDr\6032\AddOnDownloaded\c4211805-b43b-471d-81af-4e0589f8607b.dll
c:\programdata\PCDr\6032\AddOnDownloaded\cdda52ec-6ccd-425a-8c72-b7bbdc8b3acd.dll
c:\programdata\PCDr\6032\AddOnDownloaded\cf9bce06-e765-4c6f-afa9-0d82a3adc417.dll
c:\programdata\PCDr\6032\AddOnDownloaded\d1f4dc82-bc4c-4916-b37c-3ab9c30ae468.dll
c:\programdata\PCDr\6032\AddOnDownloaded\d34c0cf7-889f-43dd-9283-b2b6f442aae3.dll
c:\programdata\PCDr\6032\AddOnDownloaded\daf30858-49d8-434b-b4b1-068b5dc9267c.dll
c:\programdata\PCDr\6032\AddOnDownloaded\dc959002-1065-4317-b1a1-f360412a88d3.dll
c:\programdata\PCDr\6032\AddOnDownloaded\ddb9fe5d-525c-4d5d-ac37-0bd10f2864f8.dll
c:\programdata\PCDr\6032\AddOnDownloaded\e1ce76af-328a-41dc-b2c4-0dd9771f6aa1.dll
c:\programdata\PCDr\6032\AddOnDownloaded\e3e252fe-80ab-4f89-82a9-b607007220bd.dll
c:\programdata\PCDr\6032\AddOnDownloaded\e45cd45a-4d7c-4802-881f-74582b847e5c.dll
c:\programdata\PCDr\6032\AddOnDownloaded\e9bb45d9-5a2b-47e8-9c48-168276d422cc.dll
c:\programdata\PCDr\6032\AddOnDownloaded\eb115e4d-8592-4082-bffa-e65ae6b21e95.dll
c:\programdata\PCDr\6032\AddOnDownloaded\ed26c1b3-d9f9-42e8-80e0-cd62e65fd901.dll
c:\programdata\PCDr\6032\AddOnDownloaded\ed2cc678-a9e6-4ef7-89b6-9bada02d1a74.dll
c:\programdata\PCDr\6032\AddOnDownloaded\ef78c3e8-1d94-4219-8070-7617e119bba4.dll
c:\programdata\PCDr\6032\AddOnDownloaded\f06c5597-1a85-4d1f-ac16-a6fdd2a6bedc.dll
c:\programdata\PCDr\6032\AddOnDownloaded\f28ef68b-8cc4-4c00-891d-473fb67bd0b0.dll
c:\programdata\PCDr\6032\AddOnDownloaded\f80d4ad1-1fad-43b5-b6f3-347848b5ddd5.dll
c:\programdata\PCDr\6032\AddOnDownloaded\f9dc840b-c6f7-42a5-acec-50cc7a2827fd.dll
c:\programdata\Roaming
Y:\Autorun.inf
.
.
((((((((((((((((((((((((( Soubory vytvořené od 2012-10-05 do 2012-11-05 )))))))))))))))))))))))))))))))
.
.
2012-11-05 08:09 . 2012-11-05 08:09 -------- d-----w- c:\program files\CCleaner
2012-11-05 07:20 . 2012-11-05 07:20 -------- d-----w- c:\users\Tonda\AppData\Roaming\Malwarebytes
2012-11-05 07:19 . 2012-11-05 07:19 -------- d-----w- c:\programdata\Malwarebytes
2012-11-05 07:19 . 2012-11-05 07:19 -------- d-----w- c:\program files (x86)\Malwarebytes' Anti-Malware
2012-11-05 07:19 . 2012-09-29 18:54 25928 ----a-w- c:\windows\system32\drivers\mbam.sys
2012-11-04 18:33 . 2012-11-04 18:33 -------- d-----w- C:\rsit
2012-11-04 18:33 . 2012-11-04 18:33 -------- d-----w- c:\program files\trend micro
2012-11-02 11:06 . 2012-11-02 11:06 -------- d-----w- c:\programdata\PC-Doctor for Windows
2012-11-02 11:05 . 2012-11-02 11:06 -------- d-----w- c:\program files\Dell Support Center
2012-11-02 11:03 . 2012-11-02 11:04 -------- d-----w- c:\users\Tonda\AppData\Roaming\PCDr
2012-10-10 19:18 . 2012-10-10 19:18 -------- d-----w- c:\users\Tonda\AppData\Local\Dell Edoc Viewer
2012-10-10 17:19 . 2012-08-31 18:19 1659760 ----a-w- c:\windows\system32\drivers\ntfs.sys
2012-10-10 17:19 . 2012-08-30 18:03 5559664 ----a-w- c:\windows\system32\ntoskrnl.exe
2012-10-10 17:19 . 2012-08-30 17:12 3968880 ----a-w- c:\windows\SysWow64\ntkrnlpa.exe
2012-10-10 17:19 . 2012-08-30 17:12 3914096 ----a-w- c:\windows\SysWow64\ntoskrnl.exe
2012-10-10 17:17 . 2012-06-02 05:41 1464320 ----a-w- c:\windows\system32\crypt32.dll
2012-10-10 17:17 . 2012-06-02 04:36 1159680 ----a-w- c:\windows\SysWow64\crypt32.dll
2012-10-10 17:17 . 2012-06-02 05:41 184320 ----a-w- c:\windows\system32\cryptsvc.dll
2012-10-10 17:17 . 2012-06-02 05:41 140288 ----a-w- c:\windows\system32\cryptnet.dll
2012-10-10 17:17 . 2012-06-02 04:36 140288 ----a-w- c:\windows\SysWow64\cryptsvc.dll
2012-10-10 17:17 . 2012-06-02 04:36 103936 ----a-w- c:\windows\SysWow64\cryptnet.dll
.
.
.
(((((((((((((((((((((((((((((((((((((((( Find3M výpis ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2012-10-10 17:55 . 2012-03-31 17:54 65309168 ----a-w- c:\windows\system32\MRT.exe
2012-10-10 12:50 . 2012-04-28 18:47 696760 ----a-w- c:\windows\SysWow64\FlashPlayerApp.exe
2012-10-10 12:50 . 2011-12-22 21:41 73656 ----a-w- c:\windows\SysWow64\FlashPlayerCPLApp.cpl
2012-08-24 13:43 . 2012-08-24 13:43 384352 ----a-w- c:\windows\system32\drivers\avgtdia.sys
2012-08-24 11:15 . 2012-09-23 08:36 17810944 ----a-w- c:\windows\system32\mshtml.dll
2012-08-24 10:39 . 2012-09-23 08:36 10925568 ----a-w- c:\windows\system32\ieframe.dll
2012-08-24 10:31 . 2012-09-23 08:36 2312704 ----a-w- c:\windows\system32\jscript9.dll
2012-08-24 10:22 . 2012-09-23 08:36 1346048 ----a-w- c:\windows\system32\urlmon.dll
2012-08-24 10:21 . 2012-09-23 08:36 1392128 ----a-w- c:\windows\system32\wininet.dll
2012-08-24 10:20 . 2012-09-23 08:36 1494528 ----a-w- c:\windows\system32\inetcpl.cpl
2012-08-24 10:18 . 2012-09-23 08:37 237056 ----a-w- c:\windows\system32\url.dll
2012-08-24 10:17 . 2012-09-23 08:36 85504 ----a-w- c:\windows\system32\jsproxy.dll
2012-08-24 10:14 . 2012-09-23 08:37 173056 ----a-w- c:\windows\system32\ieUnatt.exe
2012-08-24 10:14 . 2012-09-23 08:36 816640 ----a-w- c:\windows\system32\jscript.dll
2012-08-24 10:13 . 2012-09-23 08:36 599040 ----a-w- c:\windows\system32\vbscript.dll
2012-08-24 10:12 . 2012-09-23 08:36 2144768 ----a-w- c:\windows\system32\iertutil.dll
2012-08-24 10:11 . 2012-09-23 08:36 729088 ----a-w- c:\windows\system32\msfeeds.dll
2012-08-24 10:10 . 2012-09-23 08:37 96768 ----a-w- c:\windows\system32\mshtmled.dll
2012-08-24 10:09 . 2012-09-23 08:37 2382848 ----a-w- c:\windows\system32\mshtml.tlb
2012-08-24 10:04 . 2012-09-23 08:37 248320 ----a-w- c:\windows\system32\ieui.dll
2012-08-24 06:59 . 2012-09-23 08:36 1800704 ----a-w- c:\windows\SysWow64\jscript9.dll
2012-08-24 06:51 . 2012-09-23 08:36 1129472 ----a-w- c:\windows\SysWow64\wininet.dll
2012-08-24 06:51 . 2012-09-23 08:36 1427968 ----a-w- c:\windows\SysWow64\inetcpl.cpl
2012-08-24 06:47 . 2012-09-23 08:37 142848 ----a-w- c:\windows\SysWow64\ieUnatt.exe
2012-08-24 06:47 . 2012-09-23 08:37 420864 ----a-w- c:\windows\SysWow64\vbscript.dll
2012-08-24 06:43 . 2012-09-23 08:37 2382848 ----a-w- c:\windows\SysWow64\mshtml.tlb
2012-08-22 18:12 . 2012-09-12 19:12 1913200 ----a-w- c:\windows\system32\drivers\tcpip.sys
2012-08-22 18:12 . 2012-09-12 19:12 950128 ----a-w- c:\windows\system32\drivers\ndis.sys
2012-08-22 18:12 . 2012-09-12 19:12 376688 ----a-w- c:\windows\system32\drivers\netio.sys
2012-08-22 18:12 . 2012-09-12 19:12 288624 ----a-w- c:\windows\system32\drivers\FWPKCLNT.SYS
2012-08-21 21:01 . 2012-09-26 18:40 245760 ----a-w- c:\windows\system32\OxpsConverter.exe
2012-08-20 17:38 . 2012-10-10 17:18 44032 ----a-w- c:\windows\apppatch\acwow64.dll
.
.
(((((((((((((((((((((((((((((((((( Spouštěcí body v registru )))))))))))))))))))))))))))))))))))))))))))))
.
.
*Poznámka* prázdné záznamy a legitimní výchozí údaje nejsou zobrazeny.
REGEDIT4
.
[HKEY_LOCAL_MACHINE\Wow6432Node\~\Browser Helper Objects\{95B7759C-8C7F-4BF1-B163-73684A933233}]
2012-07-11 14:17 2074208 ----a-w- c:\program files (x86)\AVG Secure Search\11.1.0.12\AVG Secure Search_toolbar.dll
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Toolbar]
"{95B7759C-8C7F-4BF1-B163-73684A933233}"= "c:\program files (x86)\AVG Secure Search\11.1.0.12\AVG Secure Search_toolbar.dll" [2012-07-11 2074208]
.
[HKEY_CLASSES_ROOT\clsid\{95b7759c-8c7f-4bf1-b163-73684a933233}]
[HKEY_CLASSES_ROOT\AVG Secure Search.PugiObj.1]
[HKEY_CLASSES_ROOT\AVG Secure Search.PugiObj]
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Sidebar"="c:\program files\Windows Sidebar\sidebar.exe" [2010-11-21 1475584]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]
"AVG_TRAY"="c:\program files (x86)\AVG\AVG2012\avgtray.exe" [2012-07-31 2596984]
"IAStorIcon"="c:\program files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe" [2010-11-06 283160]
"vProt"="c:\program files (x86)\AVG Secure Search\vprot.exe" [2012-07-11 1107552]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\RunOnce]
"Malwarebytes Anti-Malware"="c:\program files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe" [2012-09-29 766536]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorAdmin"= 5 (0x5)
"ConsentPromptBehaviorUser"= 3 (0x3)
"EnableUIADesktopToggle"= 0 (0x0)
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\windows]
"LoadAppInit_DLLs"=1 (0x1)
"AppInit_DLLs"=c:\windows\SysWOW64\nvinit.dll
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\drivers32]
"mixer7"=wdmaud.drv
.
[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\session manager]
BootExecute REG_MULTI_SZ autocheck autochk /p \??\y:\0autocheck autochk /p \??\y:\0autocheck autochk /r \??\y:\0autocheck autochk *\0c:\progra~2\AVG\AVG2012\avgrsa.exe /sync /restart
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MCODS]
@=""
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Wdf01000.sys]
@="Driver"
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\run-]
"Adobe ARM"="c:\program files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
"AccuWeatherWidget"="c:\program files (x86)\Dell Stage\Dell Stage\AccuWeather\accuweather.exe" "c:\program files (x86)\Dell Stage\Dell Stage\AccuWeather\start.umj" --startup
"Dell Webcam Central"="c:\program files (x86)\Dell Webcam\Dell Webcam Central\WebcamDell2.exe" /mode2
"GrooveMonitor"="c:\program files (x86)\Microsoft Office\Office12\GrooveMonitor.exe"
"NeroLauncher"=c:\program files (x86)\Nero\SyncUP\NeroLauncher.exe 900
"Desktop Disc Tool"="c:\program files (x86)\Roxio\OEM\Roxio Burn\RoxioBurnLauncher.exe"
"RoxWatchTray"="c:\program files (x86)\Common Files\Roxio Shared\OEM\12.0\SharedCOM\RoxWatchTray12OEM.exe"
"vProt"="c:\program files (x86)\AVG Secure Search\vprot.exe"
"Adobe Reader Speed Launcher"="c:\program files (x86)\Adobe\Reader 10.0\Reader\Reader_sl.exe"
.
R2 AVGIDSAgent;AVGIDSAgent;c:\program files (x86)\AVG\AVG2012\AVGIDSAgent.exe [2012-08-13 5167736]
R2 Bluetooth OBEX Service;Bluetooth OBEX Service;c:\program files (x86)\Intel\Bluetooth\obexsrv.exe [2011-05-19 995392]
R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2010-03-18 138576]
R2 MBAMService;MBAMService;c:\program files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe [2012-09-29 676936]
R2 RoxWatch12;Roxio Hard Drive Watcher 12;c:\program files (x86)\Common Files\Roxio Shared\OEM\12.0\SharedCOM\RoxWatch12OEM.exe [2010-11-25 219632]
R2 Skype C2C Service;Skype C2C Service;c:\programdata\Skype\Toolbars\Skype C2C Service\c2c_service.exe [2012-08-13 3064000]
R2 SkypeUpdate;Skype Updater;c:\program files (x86)\Skype\Updater\Updater.exe [2012-07-13 160944]
R3 AMPPALP;Protokol Intel® Centrino® Wireless Bluetooth® 3.0 + High Speed;c:\windows\system32\DRIVERS\amppal.sys [2011-09-15 299008]
R3 Bluetooth Media Service;Bluetooth Media Service;c:\program files (x86)\Intel\Bluetooth\mediasrv.exe [2011-05-19 1335360]
R3 intaud_WaveExtensible;Intel WiDi Audio Device;c:\windows\system32\drivers\intelaud.sys [2011-06-21 34200]
R3 MBAMProtector;MBAMProtector;c:\windows\system32\drivers\mbam.sys [2012-09-29 25928]
R3 MyWiFiDHCPDNS;Wireless PAN DHCP Server;c:\program files\Intel\WiFi\bin\PanDhcpDns.exe [2011-09-16 340240]
R3 RoxMediaDB12OEM;RoxMediaDB12OEM;c:\program files (x86)\Common Files\Roxio Shared\OEM\12.0\SharedCOM\RoxMediaDB12OEM.exe [2010-11-25 1116656]
R3 RSUSBSTOR;RtsUStor.Sys Realtek USB Card Reader;c:\windows\system32\Drivers\RtsUStor.sys [2010-10-30 250984]
R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys [2010-11-21 59392]
R3 TsUsbGD;Remote Desktop Generic USB Device;c:\windows\system32\drivers\TsUsbGD.sys [2010-11-21 31232]
R3 TurboBoost;Intel(R) Turbo Boost Technology Monitor 2.0;c:\program files\Intel\TurboBoost\TurboBoost.exe [2010-11-29 149504]
R3 WatAdminSvc;Služba Technologie aktivace Windows;c:\windows\system32\Wat\WatAdminSvc.exe [2012-03-31 1255736]
R4 wlcrasvc;Windows Live Mesh remote connections service;c:\program files\Windows Live\Mesh\wlcrasvc.exe [2010-09-23 57184]
S0 AVGIDSHA;AVGIDSHA;c:\windows\system32\DRIVERS\avgidsha.sys [2012-04-19 28480]
S0 Avgrkx64;AVG Anti-Rootkit Driver;c:\windows\system32\DRIVERS\avgrkx64.sys [2012-01-31 36944]
S0 nvpciflt;nvpciflt;c:\windows\system32\DRIVERS\nvpciflt.sys [2011-04-22 25960]
S0 PxHlpa64;PxHlpa64;c:\windows\System32\Drivers\PxHlpa64.sys [2010-03-19 55856]
S1 Avgldx64;AVG AVI Loader Driver;c:\windows\system32\DRIVERS\avgldx64.sys [2012-07-26 291680]
S1 Avgmfx64;AVG Mini-Filter Resident Anti-Virus Shield;c:\windows\system32\DRIVERS\avgmfx64.sys [2011-12-23 47696]
S1 Avgtdia;AVG TDI Driver;c:\windows\system32\DRIVERS\avgtdia.sys [2012-08-24 384352]
S2 AESTFilters;Andrea ST Filters Service;c:\program files\IDT\WDM\AESTSr64.exe [2009-03-03 89600]
S2 AMPPALR3;Intel® Centrino® Wireless Bluetooth® 3.0 + High Speed Service;c:\program files\Intel\BluetoothHS\BTHSAmpPalService.exe [2011-09-15 1166848]
S2 avgwd;AVG WatchDog;c:\program files (x86)\AVG\AVG2012\avgwdsvc.exe [2012-02-14 193288]
S2 Bluetooth Device Monitor;Bluetooth Device Monitor;c:\program files (x86)\Intel\Bluetooth\devmonsrv.exe [2011-05-19 921664]
S2 BTHSSecurityMgr;Intel(R) Centrino(R) Wireless Bluetooth(R) 3.0 + High Speed Security Service;c:\program files\Intel\BluetoothHS\BTHSSecurityMgr.exe [2011-06-03 134928]
S2 IAStorDataMgrSvc;Úložná technologie Intel(R) Rapid;c:\program files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe [2010-11-06 13336]
S2 NAUpdate;Nero Update;c:\program files (x86)\Nero\Update\NASvc.exe [2011-11-25 687400]
S2 SftService;SoftThinks Agent Service;c:\program files (x86)\Dell DataSafe Local Backup\sftservice.EXE [2011-08-18 1692480]
S2 Stereo Service;NVIDIA Stereoscopic 3D Driver Service;c:\program files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe [2011-04-22 378472]
S2 TeamViewer7;TeamViewer 7;c:\program files (x86)\TeamViewer\Version7\TeamViewer_Service.exe [2012-03-19 2666880]
S2 TomTomHOMEService;TomTomHOMEService;c:\program files (x86)\TomTom HOME 2\TomTomHOMEService.exe [2012-07-26 92632]
S2 TuneUp.UtilitiesSvc;TuneUp Utilities Service;c:\program files (x86)\TuneUp Utilities 2011\TuneUpUtilitiesService64.exe [2011-12-08 2028864]
S2 TurboB;Turbo Boost UI Monitor driver;c:\windows\system32\DRIVERS\TurboB.sys [2010-11-29 16120]
S2 UNS;Intel(R) Management and Security Application User Notification Service;c:\program files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe [2010-10-06 2655768]
S2 vToolbarUpdater11.2.0;vToolbarUpdater11.2.0;c:\program files (x86)\Common Files\AVG Secure Search\vToolbarUpdater\11.2.0\ToolbarUpdater.exe [2012-07-11 935008]
S3 AMPPAL;Virtuální adaptér Intel® Centrino® Wireless Bluetooth® 3.0 + High Speed;c:\windows\system32\DRIVERS\AMPPAL.sys [2011-09-15 299008]
S3 AVGIDSDriver;AVGIDSDriver;c:\windows\system32\DRIVERS\avgidsdrivera.sys [2011-12-23 124496]
S3 AVGIDSFilter;AVGIDSFilter;c:\windows\system32\DRIVERS\avgidsfiltera.sys [2011-12-23 29776]
S3 btmaudio;Intel Bluetooth Audio Service;c:\windows\system32\drivers\btmaud.sys [2011-05-19 51712]
S3 btmaux;Intel Bluetooth Auxiliary Service;c:\windows\system32\DRIVERS\btmaux.sys [2011-05-19 53248]
S3 btmhsf;btmhsf;c:\windows\system32\DRIVERS\btmhsf.sys [2011-11-14 327168]
S3 CtClsFlt;Creative Camera Class Upper Filter Driver;c:\windows\system32\DRIVERS\CtClsFlt.sys [2011-01-20 176096]
S3 iBtFltCoex;iBtFltCoex;c:\windows\system32\DRIVERS\iBtFltCoex.sys [2011-12-09 60416]
S3 iwdbus;IWD Bus Enumerator;c:\windows\system32\DRIVERS\iwdbus.sys [2011-06-21 25496]
S3 RTL8167;Realtek 8167 NT Driver;c:\windows\system32\DRIVERS\Rt64win7.sys [2011-06-10 539240]
S3 tihub3;TI USB3 Hub Service;c:\windows\system32\DRIVERS\tihub3.sys [2011-07-20 136000]
S3 tixhci;TI XHCI Service;c:\windows\system32\DRIVERS\tixhci.sys [2011-07-20 406336]
S3 TuneUpUtilitiesDrv;TuneUpUtilitiesDrv;c:\program files (x86)\TuneUp Utilities 2011\TuneUpUtilitiesDriver64.sys [2011-05-31 11856]
.
.
--- Ostatní služby/ovladače v paměti ---
.
*NewlyCreated* - 75460715
*NewlyCreated* - MBAMPROTECTOR
*Deregistered* - 75460715
.
Obsah adresáře 'Naplánované úlohy'
.
2012-11-05 c:\windows\Tasks\Adobe Flash Player Updater.job
- c:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2012-04-28 12:50]
.
2012-11-05 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
- c:\program files (x86)\Google\Update\GoogleUpdate.exe [2012-06-02 18:39]
.
2012-11-05 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
- c:\program files (x86)\Google\Update\GoogleUpdate.exe [2012-06-02 18:39]
.
2012-11-03 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2171802320-3057826182-27557160-1001Core.job
- c:\users\Tonda\AppData\Local\Google\Update\GoogleUpdate.exe [2012-07-11 18:39]
.
2012-11-05 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2171802320-3057826182-27557160-1001UA.job
- c:\users\Tonda\AppData\Local\Google\Update\GoogleUpdate.exe [2012-07-11 18:39]
.
.
--------- X64 Entries -----------
.
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"SysTrayApp"="c:\program files\IDT\WDM\sttray64.exe" [2011-01-25 525312]
"Apoint"="c:\program files\DellTPad\Apoint.exe" [2011-04-12 609144]
"IntelTBRunOnce"="wscript.exe" [2009-07-14 168960]
"IntelPAN"="c:\program files\Common Files\Intel\WirelessCommon\iFrmewrk.exe" [2011-09-16 1935120]
"IgfxTray"="c:\windows\system32\igfxtray.exe" [2011-04-20 168216]
"HotKeysCmds"="c:\windows\system32\hkcmd.exe" [2011-04-20 392472]
"Persistence"="c:\windows\system32\igfxpers.exe" [2011-04-20 416024]
"NVHotkey"="c:\windows\system32\nvHotkey.dll" [2011-04-22 312936]
"BTMTrayAgent"="c:\program files (x86)\Intel\Bluetooth\btmshell.dll" [2011-05-19 10365952]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
"AppInit_DLLs"=c:\windows\System32\nvinitx.dll
.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Svchost - NetSvcs
UxTuneUp
.
------- Doplňkový sken -------
.
uLocal Page = c:\windows\system32\blank.htm
uStart Page = hxxp://www.igoogle.cz/
mStart Page = hxxp://home.sweetim.com
mLocal Page = c:\windows\SysWOW64\blank.htm
IE: E&xportovat do aplikace Microsoft Excel - c:\progra~2\MICROS~1\Office12\EXCEL.EXE/3000
IE: Search the Web - c:\program files (x86)\SweetIM\Toolbars\Internet Explorer\resources\menuext.html
TCP: Interfaces\{1E0C9175-348B-43B6-9883-2E17D2AC5F2B}: NameServer = 192.168.150.237,194.228.2.1
Handler: viprotocol - {B658800C-F66E-4EF3-AB85-6C0C227862A9} - c:\program files (x86)\Common Files\AVG Secure Search\ViProtocolInstaller\11.2.0\ViProtocol.dll
.
- - - - NEPLATNÉ POLOŽKY ODSTRANĚNÉ Z REGISTRU - - - -
.
Wow6432Node-HKLM-Run-<NO NAME> - (no file)
WebBrowser-{EEE6C35B-6118-11DC-9C72-001320C79847} - (no file)
.
.
.
Celkový čas: 2012-11-05 16:56:13
ComboFix-quarantined-files.txt 2012-11-05 15:56
.
Před spuštěním: Volných bajtů: 95 411 814 400
Po spuštění: Volných bajtů: 95 306 907 648
.
- - End Of File - - AA9E9A10E4812EE6F1313C6A53C1FAA8

Re: prosím o kontrolu logu

Napsal: 05 lis 2012 17:25
od vyosek
:arrow: Stahnete AdwCleaner http://general-changelog-team.fr/fr/dow ... adwcleaner
  • Ulozte nejlepe na plochu
  • Ukoncete vsechny programy
  • Kliknete na Search
  • Probehne skenovani a pak se objevi log, pripadne bude ulozen na systemovem disku jako AdwCleaner[R?].txt, ten sem vlozte

Re: prosím o kontrolu logu

Napsal: 05 lis 2012 17:45
od Loutka
# AdwCleaner v2.006 - Logfile created 11/05/2012 at 17:44:51
# Updated 30/10/2012 by Xplode
# Operating system : Windows 7 Home Premium Service Pack 1 (64 bits)
# User : Tonda - TONDA-PC
# Boot Mode : Normal
# Running from : C:\Users\Tonda\Desktop\adwcleaner.exe
# Option [Search]


***** [Services] *****

Found : vToolbarUpdater11.2.0

***** [Files / Folders] *****

File Found : C:\Program Files (x86)\Mozilla FireFox\Components\AskSearch.js
Folder Found : C:\Program Files (x86)\AVG Secure Search
Folder Found : C:\Program Files (x86)\Common Files\AVG Secure Search
Folder Found : C:\ProgramData\AVG Secure Search
Folder Found : C:\Users\Tonda\AppData\Local\AVG Secure Search
Folder Found : C:\Users\Tonda\AppData\LocalLow\AVG Secure Search

***** [Registry] *****

Key Found : HKCU\Software\AppDataLow\Software
Key Found : HKCU\Software\AVG Secure Search
Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{95B7759C-8C7F-4BF1-B163-73684A933233}
Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{95B7759C-8C7F-4BF1-B163-73684A933233}
Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{F25AF245-4A81-40DC-92F9-E9021F207706}
Key Found : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{95B7759C-8C7F-4BF1-B163-73684A933233}
Key Found : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{CF739809-1C6C-47C0-85B9-569DBB141420}
Key Found : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{EEE6C360-6118-11DC-9C72-001320C79847}
Key Found : HKLM\Software\AVG Secure Search
Key Found : HKLM\SOFTWARE\Classes\AppID\{1FDFF5A2-7BB1-48E1-8081-7236812B12B2}
Key Found : HKLM\SOFTWARE\Classes\AppID\{BB711CB0-C70B-482E-9852-EC05EBD71DBB}
Key Found : HKLM\SOFTWARE\Classes\AppID\ScriptHelper.EXE
Key Found : HKLM\SOFTWARE\Classes\AppID\ViProtocol.DLL
Key Found : HKLM\SOFTWARE\Classes\AVG Secure Search.BrowserWndAPI
Key Found : HKLM\SOFTWARE\Classes\AVG Secure Search.BrowserWndAPI.1
Key Found : HKLM\SOFTWARE\Classes\AVG Secure Search.PugiObj
Key Found : HKLM\SOFTWARE\Classes\AVG Secure Search.PugiObj.1
Key Found : HKLM\SOFTWARE\Classes\PROTOCOLS\Handler\viprotocol
Key Found : HKLM\SOFTWARE\Classes\ScriptHelper.ScriptHelperApi
Key Found : HKLM\SOFTWARE\Classes\ScriptHelper.ScriptHelperApi.1
Key Found : HKLM\SOFTWARE\Classes\TypeLib\{74FB6AFD-DD77-4CEB-83BD-AB2B63E63C93}
Key Found : HKLM\SOFTWARE\Classes\TypeLib\{9C049BA6-EA47-4AC3-AED6-A66D8DC9E1D8}
Key Found : HKLM\SOFTWARE\Classes\TypeLib\{C2AC8A0E-E48E-484B-A71C-C7A937FAAB94}
Key Found : HKLM\SOFTWARE\Classes\ViProtocol.ViProtocolOLE
Key Found : HKLM\SOFTWARE\Classes\ViProtocol.ViProtocolOLE.1
Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{C6FDD0C3-266A-4DC3-B459-28C697C44CDC}
Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{F25AF245-4A81-40DC-92F9-E9021F207706}
Key Found : HKLM\SOFTWARE\MozillaPlugins\@avg.com/AVG SiteSafety plugin,version=11.0.0.1,application/x-avg-sitesafety-plugin
Key Found : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{4E92DB5F-AAD9-49D3-8EAB-B40CBE5B1FF7}
Key Found : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{95B7759C-8C7F-4BF1-B163-73684A933233}
Key Found : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{B658800C-F66E-4EF3-AB85-6C0C227862A9}
Key Found : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{CC5AD34C-6F10-4CB3-B74A-C2DD4D5060A3}
Key Found : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{E7DF6BFF-55A5-4EB7-A673-4ED3E9456D39}
Key Found : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{F25AF245-4A81-40DC-92F9-E9021F207706}
Key Found : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{03E2A1F3-4402-4121-8B35-733216D61217}
Key Found : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{4E92DB5F-AAD9-49D3-8EAB-B40CBE5B1FF7}
Key Found : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{9E3B11F6-4179-4603-A71B-A55F4BCB0BEC}
Key Found : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{C401D2CE-DC27-45C7-BC0C-8E6EA7F085D6}
Key Found : HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{E7DF6BFF-55A5-4EB7-A673-4ED3E9456D39}
Key Found : HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{F25AF245-4A81-40DC-92F9-E9021F207706}
Key Found : HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\SearchScopes\{EEE6C360-6118-11DC-9C72-001320C79847}
Key Found : HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{95B7759C-8C7F-4BF1-B163-73684A933233}
Key Found : HKLM\SOFTWARE\Classes\Interface\{03E2A1F3-4402-4121-8B35-733216D61217}
Key Found : HKLM\SOFTWARE\Classes\Interface\{4E92DB5F-AAD9-49D3-8EAB-B40CBE5B1FF7}
Key Found : HKLM\SOFTWARE\Classes\Interface\{9E3B11F6-4179-4603-A71B-A55F4BCB0BEC}
Key Found : HKLM\SOFTWARE\Classes\Interface\{C401D2CE-DC27-45C7-BC0C-8E6EA7F085D6}
Key Found : HKU\S-1-5-21-2171802320-3057826182-27557160-1001\Software\Microsoft\Internet Explorer\SearchScopes\{95B7759C-8C7F-4BF1-B163-73684A933233}
Key Found : HKU\S-1-5-21-2171802320-3057826182-27557160-1001\Software\Microsoft\Internet Explorer\SearchScopes\{CF739809-1C6C-47C0-85B9-569DBB141420}
Key Found : HKU\S-1-5-21-2171802320-3057826182-27557160-1001\Software\Microsoft\Internet Explorer\SearchScopes\{EEE6C360-6118-11DC-9C72-001320C79847}
Value Found : HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser [{EEE6C35B-6118-11DC-9C72-001320C79847}]
Value Found : HKLM\SOFTWARE\Mozilla\Firefox\Extensions [Avg@toolbar]
Value Found : HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Toolbar [{95B7759C-8C7F-4BF1-B163-73684A933233}]

***** [Internet Browsers] *****

-\\ Internet Explorer v9.0.8112.16421

[HKLM\SOFTWARE\Microsoft\Internet Explorer\Main - Start Page] = hxxp://home.sweetim.com
[HKLM\SOFTWARE\Microsoft\Internet Explorer\AboutURls - Tabs] = hxxp://isearch.avg.com/tab?cid={6FE2D89C-FE9C-4AA2-9647-98C91EC7148B}&mid=65b88d4dac8c47d09d329dc9d5b3a917-fbcc360ac9c5aeb272a564154f697878f3633c0d&lang=cs&ds=AVG&pr=pr&d=2012-03-30 16:39:43&v=9.0.0.22&sap=nt

-\\ Google Chrome v22.0.1229.94

File : C:\Users\Tonda\AppData\Local\Google\Chrome\User Data\Default\Preferences

[OK] File is clean.

*************************

AdwCleaner[R1].txt - [6218 octets] - [05/11/2012 17:44:51]

########## EOF - C:\AdwCleaner[R1].txt - [6278 octets] ##########

Re: prosím o kontrolu logu

Napsal: 05 lis 2012 17:46
od vyosek
:arrow: Spustte znovu AdwCleaner
  • Pokud pouzivate Win Vista ci W7, kliknete na AdwCleaner pravym a dejte Run As Administrator ci Spustit jako spravce
  • Kliknete na Delete
  • PC provede opravu, restartuje se a da Vam log (C:\AdwCleaner [S1].txt) , jeho obsah vlozte sem

Re: prosím o kontrolu logu

Napsal: 05 lis 2012 17:56
od Loutka
# AdwCleaner v2.006 - Logfile created 11/05/2012 at 17:51:41
# Updated 30/10/2012 by Xplode
# Operating system : Windows 7 Home Premium Service Pack 1 (64 bits)
# User : Tonda - TONDA-PC
# Boot Mode : Normal
# Running from : C:\Users\Tonda\Desktop\adwcleaner.exe
# Option [Delete]


***** [Services] *****

Stopped & Deleted : vToolbarUpdater11.2.0

***** [Files / Folders] *****

File Deleted : C:\Program Files (x86)\Mozilla FireFox\Components\AskSearch.js
Folder Deleted : C:\Program Files (x86)\AVG Secure Search
Folder Deleted : C:\Program Files (x86)\Common Files\AVG Secure Search
Folder Deleted : C:\ProgramData\AVG Secure Search
Folder Deleted : C:\Users\Tonda\AppData\Local\AVG Secure Search
Folder Deleted : C:\Users\Tonda\AppData\LocalLow\AVG Secure Search

***** [Registry] *****

Key Deleted : HKCU\Software\AppDataLow\Software
Key Deleted : HKCU\Software\AVG Secure Search
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{95B7759C-8C7F-4BF1-B163-73684A933233}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{95B7759C-8C7F-4BF1-B163-73684A933233}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{F25AF245-4A81-40DC-92F9-E9021F207706}
Key Deleted : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{95B7759C-8C7F-4BF1-B163-73684A933233}
Key Deleted : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{CF739809-1C6C-47C0-85B9-569DBB141420}
Key Deleted : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{EEE6C360-6118-11DC-9C72-001320C79847}
Key Deleted : HKLM\Software\AVG Secure Search
Key Deleted : HKLM\SOFTWARE\Classes\AppID\{1FDFF5A2-7BB1-48E1-8081-7236812B12B2}
Key Deleted : HKLM\SOFTWARE\Classes\AppID\{BB711CB0-C70B-482E-9852-EC05EBD71DBB}
Key Deleted : HKLM\SOFTWARE\Classes\AppID\ScriptHelper.EXE
Key Deleted : HKLM\SOFTWARE\Classes\AppID\ViProtocol.DLL
Key Deleted : HKLM\SOFTWARE\Classes\AVG Secure Search.BrowserWndAPI
Key Deleted : HKLM\SOFTWARE\Classes\AVG Secure Search.BrowserWndAPI.1
Key Deleted : HKLM\SOFTWARE\Classes\AVG Secure Search.PugiObj
Key Deleted : HKLM\SOFTWARE\Classes\AVG Secure Search.PugiObj.1
Key Deleted : HKLM\SOFTWARE\Classes\PROTOCOLS\Handler\viprotocol
Key Deleted : HKLM\SOFTWARE\Classes\ScriptHelper.ScriptHelperApi
Key Deleted : HKLM\SOFTWARE\Classes\ScriptHelper.ScriptHelperApi.1
Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{74FB6AFD-DD77-4CEB-83BD-AB2B63E63C93}
Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{9C049BA6-EA47-4AC3-AED6-A66D8DC9E1D8}
Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{C2AC8A0E-E48E-484B-A71C-C7A937FAAB94}
Key Deleted : HKLM\SOFTWARE\Classes\ViProtocol.ViProtocolOLE
Key Deleted : HKLM\SOFTWARE\Classes\ViProtocol.ViProtocolOLE.1
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{C6FDD0C3-266A-4DC3-B459-28C697C44CDC}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{F25AF245-4A81-40DC-92F9-E9021F207706}
Key Deleted : HKLM\SOFTWARE\MozillaPlugins\@avg.com/AVG SiteSafety plugin,version=11.0.0.1,application/x-avg-sitesafety-plugin
Key Deleted : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{4E92DB5F-AAD9-49D3-8EAB-B40CBE5B1FF7}
Key Deleted : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{95B7759C-8C7F-4BF1-B163-73684A933233}
Key Deleted : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{B658800C-F66E-4EF3-AB85-6C0C227862A9}
Key Deleted : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{CC5AD34C-6F10-4CB3-B74A-C2DD4D5060A3}
Key Deleted : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{E7DF6BFF-55A5-4EB7-A673-4ED3E9456D39}
Key Deleted : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{F25AF245-4A81-40DC-92F9-E9021F207706}
Key Deleted : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{03E2A1F3-4402-4121-8B35-733216D61217}
Key Deleted : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{4E92DB5F-AAD9-49D3-8EAB-B40CBE5B1FF7}
Key Deleted : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{9E3B11F6-4179-4603-A71B-A55F4BCB0BEC}
Key Deleted : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{C401D2CE-DC27-45C7-BC0C-8E6EA7F085D6}
Key Deleted : HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{E7DF6BFF-55A5-4EB7-A673-4ED3E9456D39}
Key Deleted : HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{F25AF245-4A81-40DC-92F9-E9021F207706}
Key Deleted : HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\SearchScopes\{EEE6C360-6118-11DC-9C72-001320C79847}
Key Deleted : HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{95B7759C-8C7F-4BF1-B163-73684A933233}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{03E2A1F3-4402-4121-8B35-733216D61217}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{4E92DB5F-AAD9-49D3-8EAB-B40CBE5B1FF7}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{9E3B11F6-4179-4603-A71B-A55F4BCB0BEC}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{C401D2CE-DC27-45C7-BC0C-8E6EA7F085D6}
Value Deleted : HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser [{EEE6C35B-6118-11DC-9C72-001320C79847}]
Value Deleted : HKLM\SOFTWARE\Mozilla\Firefox\Extensions [Avg@toolbar]
Value Deleted : HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Toolbar [{95B7759C-8C7F-4BF1-B163-73684A933233}]

***** [Internet Browsers] *****

-\\ Internet Explorer v9.0.8112.16421

Replaced : [HKLM\SOFTWARE\Microsoft\Internet Explorer\Main - Start Page] = hxxp://home.sweetim.com --> hxxp://www.google.com
Replaced : [HKLM\SOFTWARE\Microsoft\Internet Explorer\AboutURls - Tabs] = hxxp://isearch.avg.com/tab?cid={6FE2D89C-FE9C-4AA2-9647-98C91EC7148B}&mid=65b88d4dac8c47d09d329dc9d5b3a917-fbcc360ac9c5aeb272a564154f697878f3633c0d&lang=cs&ds=AVG&pr=pr&d=2012-03-30 16:39:43&v=9.0.0.22&sap=nt --> hxxp://www.google.com

-\\ Google Chrome v22.0.1229.94

File : C:\Users\Tonda\AppData\Local\Google\Chrome\User Data\Default\Preferences

[OK] File is clean.

*************************

AdwCleaner[R1].txt - [6333 octets] - [05/11/2012 17:44:51]
AdwCleaner[S1].txt - [6021 octets] - [05/11/2012 17:51:41]

########## EOF - C:\AdwCleaner[S1].txt - [6081 octets] ##########

Re: prosím o kontrolu logu

Napsal: 05 lis 2012 17:58
od vyosek
:arrow: Pokud nemate, tak presunte Combofix na plochu
  • Spustte poznamkovy blok (Start-spustit-notepad)
  • Zkopirujte skript nize

  • Kód: Vybrat vše

    KillAll::

Folder::
c:\programdata\PC-Doctor for Windows
c:\users\Tonda\AppData\Roaming\PCDr

Registry::
[-HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\run-]

DDS::
mStart Page = hxxp://home.sweetim.com

File::
C:\windows\tasks\Adobe Flash Player Updater.job
C:\windows\tasks\GoogleUpdateTaskMachineCore.job
C:\windows\tasks\GoogleUpdateTaskMachineUA.job
C:\windows\tasks\GoogleUpdateTaskUserS-1-5-21-2171802320-3057826182-27557160-1001Core.job
C:\windows\tasks\GoogleUpdateTaskUserS-1-5-21-2171802320-3057826182-27557160-1001UA.job

ClearJavaCache::

Reboot::
  • Ulozte vytvoreny TXT jako CFScript.txt
  • Pretahnete vytvoreny CFScript.txt nad Combofix a pustte (viz obrazek nize)
    Obrázek
  • Po aplikaci skriptu (a pripadnem restartu) na Vas vypadne log, jeho obsah sem vlozte
:arrow: Pokud vyskoci hlaska "Pokus pouzit neplatnou operaci na klic registru, ktery je oznacen pro odstraneni", tak jen restartujte PC - registr se da do kupy - jedna se o vnitrni chybu, kterou zpusobuje CF a autor ji zatim neumi bohuzel opravit

:arrow: Muze se stat, ze po aplikaci skriptu nenabehnou windows, v tomto pripade restartuje PC a mackejte F8 a zvolte Posledni znamou konfiguraci

Re: prosím o kontrolu logu

Napsal: 05 lis 2012 19:15
od Loutka
ComboFix 12-11-05.02 - Tonda 05.11.2012 19:01:13.2.4 - x64
Microsoft Windows 7 Home Premium 6.1.7601.1.1250.420.1029.18.6050.4210 [GMT 1:00]
Spuštěný z: c:\users\Tonda\Desktop\ComboFix.exe
Použité ovládací přepínače :: c:\users\Tonda\Desktop\CFScript.txt
AV: AVG Anti-Virus 2012 *Disabled/Updated* {5A2746B1-DEE9-F85A-FBCD-ADB11639C5F0}
SP: AVG Anti-Virus 2012 *Disabled/Updated* {E146A755-F8D3-F7D4-C17D-96C36DBE8F4D}
SP: Windows Defender *Disabled/Outdated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.
FILE ::
"c:\windows\tasks\Adobe Flash Player Updater.job"
"c:\windows\tasks\GoogleUpdateTaskMachineCore.job"
"c:\windows\tasks\GoogleUpdateTaskMachineUA.job"
"c:\windows\tasks\GoogleUpdateTaskUserS-1-5-21-2171802320-3057826182-27557160-1001Core.job"
"c:\windows\tasks\GoogleUpdateTaskUserS-1-5-21-2171802320-3057826182-27557160-1001UA.job"
.
.
((((((((((((((((((((((((((((((((((((((( Ostatní výmazy )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
c:\programdata\PC-Doctor for Windows
c:\programdata\PC-Doctor for Windows\startmenu\6032.55.bundle.dll.mui
c:\programdata\PC-Doctor for Windows\startmenu\CommandLine.dll
c:\programdata\PC-Doctor for Windows\startmenu\Common.dll
c:\programdata\PC-Doctor for Windows\startmenu\Microsoft.VC90.CRT.manifest
c:\programdata\PC-Doctor for Windows\startmenu\msvcm90.dll
c:\programdata\PC-Doctor for Windows\startmenu\msvcp90.dll
c:\programdata\PC-Doctor for Windows\startmenu\msvcr90.dll
c:\programdata\PC-Doctor for Windows\startmenu\startmenu-localizer.exe
c:\users\Tonda\AppData\Roaming\PCDr
c:\users\Tonda\AppData\Roaming\PCDr\Installer\Logs\full-nsis-wrapper.log
c:\users\Tonda\AppData\Roaming\PCDr\Installer\Logs\install_PC-Doctor for Windows.log
c:\users\Tonda\AppData\Roaming\PCDr\Update\Binaries\full_dsc_6032_55_64_02.exe
c:\users\Tonda\AppData\Roaming\PCDr\Update\Logs\appupdater.2012-11-02 12-03-10-1508.log
c:\users\Tonda\AppData\Roaming\PCDr\Update\Logs\appupdater.2012-11-02 12-04-21-6429.log
c:\users\Tonda\AppData\Roaming\PCDr\Update\Logs\appupdater.2012-11-03 03-40-50-3791.log
c:\users\Tonda\AppData\Roaming\PCDr\Update\Logs\appupdater.2012-11-04 01-01-51-3669.log
c:\users\Tonda\AppData\Roaming\PCDr\Update\Rules\0b958b75-ec6e-4fd1-a4b0-a1281e5733a0\appupdaterrules_dell\AddCertificate.exe
c:\users\Tonda\AppData\Roaming\PCDr\Update\Rules\0b958b75-ec6e-4fd1-a4b0-a1281e5733a0\appupdaterrules_dell\appupdaterrules.dll
c:\users\Tonda\AppData\Roaming\PCDr\Update\Rules\0b958b75-ec6e-4fd1-a4b0-a1281e5733a0\appupdaterrules_dell\appupdaterrules_dell.zip
c:\users\Tonda\AppData\Roaming\PCDr\Update\Rules\0b958b75-ec6e-4fd1-a4b0-a1281e5733a0\appupdaterrules_dell\settings_AuthorizedMachineCheck.xml
c:\users\Tonda\AppData\Roaming\PCDr\Update\Rules\0b958b75-ec6e-4fd1-a4b0-a1281e5733a0\appupdaterrules_dell\settings_CertStoreManager.xml
c:\users\Tonda\AppData\Roaming\PCDr\Update\Rules\0b958b75-ec6e-4fd1-a4b0-a1281e5733a0\appupdaterrules_dell\settings_DiskSpaceCheck.xml
c:\users\Tonda\AppData\Roaming\PCDr\Update\Rules\0b958b75-ec6e-4fd1-a4b0-a1281e5733a0\appupdaterrules_dell\settings_FixModuleCrash.xml
c:\users\Tonda\AppData\Roaming\PCDr\Update\Rules\0b958b75-ec6e-4fd1-a4b0-a1281e5733a0\appupdaterrules_dell\settings_FixMyBuildID.xml
c:\users\Tonda\AppData\Roaming\PCDr\Update\Rules\0b958b75-ec6e-4fd1-a4b0-a1281e5733a0\appupdaterrules_dell\settings_FixUnistallMsiIssue.xml
c:\users\Tonda\AppData\Roaming\PCDr\Update\Rules\0b958b75-ec6e-4fd1-a4b0-a1281e5733a0\appupdaterrules_dell\settings_UpdateFromCheck.xml
c:\users\Tonda\AppData\Roaming\PCDr\Update\Rules\0b958b75-ec6e-4fd1-a4b0-a1281e5733a0\appupdaterrules_dell\strings_AuthorizedMachineCheck.xml
c:\users\Tonda\AppData\Roaming\PCDr\Update\Rules\0b958b75-ec6e-4fd1-a4b0-a1281e5733a0\appupdaterrules_dell\strings_CertStoreManager.xml
c:\users\Tonda\AppData\Roaming\PCDr\Update\Rules\0b958b75-ec6e-4fd1-a4b0-a1281e5733a0\appupdaterrules_dell\strings_DiskSpaceCheck.xml
c:\users\Tonda\AppData\Roaming\PCDr\Update\Rules\0b958b75-ec6e-4fd1-a4b0-a1281e5733a0\appupdaterrules_dell\strings_FixModuleCrash.xml
c:\users\Tonda\AppData\Roaming\PCDr\Update\Rules\0b958b75-ec6e-4fd1-a4b0-a1281e5733a0\appupdaterrules_dell\strings_FixMyBuildID.xml
c:\users\Tonda\AppData\Roaming\PCDr\Update\Rules\0b958b75-ec6e-4fd1-a4b0-a1281e5733a0\appupdaterrules_dell\strings_FixUnistallMsiIssue.xml
c:\users\Tonda\AppData\Roaming\PCDr\Update\Rules\0b958b75-ec6e-4fd1-a4b0-a1281e5733a0\appupdaterrules_dell\strings_UpdateFromCheck.xml
c:\users\Tonda\AppData\Roaming\PCDr\Update\Rules\17c59d39-edf9-43b1-9c7a-ca2ddcf6c628\appupdaterrules_dell\AddCertificate.exe
c:\users\Tonda\AppData\Roaming\PCDr\Update\Rules\17c59d39-edf9-43b1-9c7a-ca2ddcf6c628\appupdaterrules_dell\appupdaterrules.dll
c:\users\Tonda\AppData\Roaming\PCDr\Update\Rules\17c59d39-edf9-43b1-9c7a-ca2ddcf6c628\appupdaterrules_dell\appupdaterrules_dell.zip
c:\users\Tonda\AppData\Roaming\PCDr\Update\Rules\17c59d39-edf9-43b1-9c7a-ca2ddcf6c628\appupdaterrules_dell\settings_AuthorizedMachineCheck.xml
c:\users\Tonda\AppData\Roaming\PCDr\Update\Rules\17c59d39-edf9-43b1-9c7a-ca2ddcf6c628\appupdaterrules_dell\settings_CertStoreManager.xml
c:\users\Tonda\AppData\Roaming\PCDr\Update\Rules\17c59d39-edf9-43b1-9c7a-ca2ddcf6c628\appupdaterrules_dell\settings_DiskSpaceCheck.xml
c:\users\Tonda\AppData\Roaming\PCDr\Update\Rules\17c59d39-edf9-43b1-9c7a-ca2ddcf6c628\appupdaterrules_dell\settings_FixModuleCrash.xml
c:\users\Tonda\AppData\Roaming\PCDr\Update\Rules\17c59d39-edf9-43b1-9c7a-ca2ddcf6c628\appupdaterrules_dell\settings_FixMyBuildID.xml
c:\users\Tonda\AppData\Roaming\PCDr\Update\Rules\17c59d39-edf9-43b1-9c7a-ca2ddcf6c628\appupdaterrules_dell\settings_FixUnistallMsiIssue.xml
c:\users\Tonda\AppData\Roaming\PCDr\Update\Rules\17c59d39-edf9-43b1-9c7a-ca2ddcf6c628\appupdaterrules_dell\settings_UpdateFromCheck.xml
c:\users\Tonda\AppData\Roaming\PCDr\Update\Rules\17c59d39-edf9-43b1-9c7a-ca2ddcf6c628\appupdaterrules_dell\strings_AuthorizedMachineCheck.xml
c:\users\Tonda\AppData\Roaming\PCDr\Update\Rules\17c59d39-edf9-43b1-9c7a-ca2ddcf6c628\appupdaterrules_dell\strings_CertStoreManager.xml
c:\users\Tonda\AppData\Roaming\PCDr\Update\Rules\17c59d39-edf9-43b1-9c7a-ca2ddcf6c628\appupdaterrules_dell\strings_DiskSpaceCheck.xml
c:\users\Tonda\AppData\Roaming\PCDr\Update\Rules\17c59d39-edf9-43b1-9c7a-ca2ddcf6c628\appupdaterrules_dell\strings_FixModuleCrash.xml
c:\users\Tonda\AppData\Roaming\PCDr\Update\Rules\17c59d39-edf9-43b1-9c7a-ca2ddcf6c628\appupdaterrules_dell\strings_FixMyBuildID.xml
c:\users\Tonda\AppData\Roaming\PCDr\Update\Rules\17c59d39-edf9-43b1-9c7a-ca2ddcf6c628\appupdaterrules_dell\strings_FixUnistallMsiIssue.xml
c:\users\Tonda\AppData\Roaming\PCDr\Update\Rules\17c59d39-edf9-43b1-9c7a-ca2ddcf6c628\appupdaterrules_dell\strings_UpdateFromCheck.xml
c:\users\Tonda\AppData\Roaming\PCDr\Update\Rules\2716840b-695e-4088-a3f4-dc82feafd2b0\appupdaterrules_dell\AddCertificate.exe
c:\users\Tonda\AppData\Roaming\PCDr\Update\Rules\2716840b-695e-4088-a3f4-dc82feafd2b0\appupdaterrules_dell\appupdaterrules.dll
c:\users\Tonda\AppData\Roaming\PCDr\Update\Rules\2716840b-695e-4088-a3f4-dc82feafd2b0\appupdaterrules_dell\appupdaterrules_dell.zip
c:\users\Tonda\AppData\Roaming\PCDr\Update\Rules\2716840b-695e-4088-a3f4-dc82feafd2b0\appupdaterrules_dell\settings_AuthorizedMachineCheck.xml
c:\users\Tonda\AppData\Roaming\PCDr\Update\Rules\2716840b-695e-4088-a3f4-dc82feafd2b0\appupdaterrules_dell\settings_CertStoreManager.xml
c:\users\Tonda\AppData\Roaming\PCDr\Update\Rules\2716840b-695e-4088-a3f4-dc82feafd2b0\appupdaterrules_dell\settings_DiskSpaceCheck.xml
c:\users\Tonda\AppData\Roaming\PCDr\Update\Rules\2716840b-695e-4088-a3f4-dc82feafd2b0\appupdaterrules_dell\settings_FixModuleCrash.xml
c:\users\Tonda\AppData\Roaming\PCDr\Update\Rules\2716840b-695e-4088-a3f4-dc82feafd2b0\appupdaterrules_dell\settings_FixMyBuildID.xml
c:\users\Tonda\AppData\Roaming\PCDr\Update\Rules\2716840b-695e-4088-a3f4-dc82feafd2b0\appupdaterrules_dell\settings_FixUnistallMsiIssue.xml
c:\users\Tonda\AppData\Roaming\PCDr\Update\Rules\2716840b-695e-4088-a3f4-dc82feafd2b0\appupdaterrules_dell\settings_UpdateFromCheck.xml
c:\users\Tonda\AppData\Roaming\PCDr\Update\Rules\2716840b-695e-4088-a3f4-dc82feafd2b0\appupdaterrules_dell\strings_AuthorizedMachineCheck.xml
c:\users\Tonda\AppData\Roaming\PCDr\Update\Rules\2716840b-695e-4088-a3f4-dc82feafd2b0\appupdaterrules_dell\strings_CertStoreManager.xml
c:\users\Tonda\AppData\Roaming\PCDr\Update\Rules\2716840b-695e-4088-a3f4-dc82feafd2b0\appupdaterrules_dell\strings_DiskSpaceCheck.xml
c:\users\Tonda\AppData\Roaming\PCDr\Update\Rules\2716840b-695e-4088-a3f4-dc82feafd2b0\appupdaterrules_dell\strings_FixModuleCrash.xml
c:\users\Tonda\AppData\Roaming\PCDr\Update\Rules\2716840b-695e-4088-a3f4-dc82feafd2b0\appupdaterrules_dell\strings_FixMyBuildID.xml
c:\users\Tonda\AppData\Roaming\PCDr\Update\Rules\2716840b-695e-4088-a3f4-dc82feafd2b0\appupdaterrules_dell\strings_FixUnistallMsiIssue.xml
c:\users\Tonda\AppData\Roaming\PCDr\Update\Rules\2716840b-695e-4088-a3f4-dc82feafd2b0\appupdaterrules_dell\strings_UpdateFromCheck.xml
c:\users\Tonda\AppData\Roaming\PCDr\Update\Rules\6f14a5b0-2350-400b-8696-3c88cb2f186f\appupdaterrules_dell\AddCertificate.exe
c:\users\Tonda\AppData\Roaming\PCDr\Update\Rules\6f14a5b0-2350-400b-8696-3c88cb2f186f\appupdaterrules_dell\appupdaterrules.dll
c:\users\Tonda\AppData\Roaming\PCDr\Update\Rules\6f14a5b0-2350-400b-8696-3c88cb2f186f\appupdaterrules_dell\appupdaterrules_dell.zip
c:\users\Tonda\AppData\Roaming\PCDr\Update\Rules\6f14a5b0-2350-400b-8696-3c88cb2f186f\appupdaterrules_dell\settings_AuthorizedMachineCheck.xml
c:\users\Tonda\AppData\Roaming\PCDr\Update\Rules\6f14a5b0-2350-400b-8696-3c88cb2f186f\appupdaterrules_dell\settings_CertStoreManager.xml
c:\users\Tonda\AppData\Roaming\PCDr\Update\Rules\6f14a5b0-2350-400b-8696-3c88cb2f186f\appupdaterrules_dell\settings_DiskSpaceCheck.xml
c:\users\Tonda\AppData\Roaming\PCDr\Update\Rules\6f14a5b0-2350-400b-8696-3c88cb2f186f\appupdaterrules_dell\settings_FixModuleCrash.xml
c:\users\Tonda\AppData\Roaming\PCDr\Update\Rules\6f14a5b0-2350-400b-8696-3c88cb2f186f\appupdaterrules_dell\settings_FixMyBuildID.xml
c:\users\Tonda\AppData\Roaming\PCDr\Update\Rules\6f14a5b0-2350-400b-8696-3c88cb2f186f\appupdaterrules_dell\settings_FixUnistallMsiIssue.xml
c:\users\Tonda\AppData\Roaming\PCDr\Update\Rules\6f14a5b0-2350-400b-8696-3c88cb2f186f\appupdaterrules_dell\settings_UpdateFromCheck.xml
c:\users\Tonda\AppData\Roaming\PCDr\Update\Rules\6f14a5b0-2350-400b-8696-3c88cb2f186f\appupdaterrules_dell\strings_AuthorizedMachineCheck.xml
c:\users\Tonda\AppData\Roaming\PCDr\Update\Rules\6f14a5b0-2350-400b-8696-3c88cb2f186f\appupdaterrules_dell\strings_CertStoreManager.xml
c:\users\Tonda\AppData\Roaming\PCDr\Update\Rules\6f14a5b0-2350-400b-8696-3c88cb2f186f\appupdaterrules_dell\strings_DiskSpaceCheck.xml
c:\users\Tonda\AppData\Roaming\PCDr\Update\Rules\6f14a5b0-2350-400b-8696-3c88cb2f186f\appupdaterrules_dell\strings_FixModuleCrash.xml
c:\users\Tonda\AppData\Roaming\PCDr\Update\Rules\6f14a5b0-2350-400b-8696-3c88cb2f186f\appupdaterrules_dell\strings_FixMyBuildID.xml
c:\users\Tonda\AppData\Roaming\PCDr\Update\Rules\6f14a5b0-2350-400b-8696-3c88cb2f186f\appupdaterrules_dell\strings_FixUnistallMsiIssue.xml
c:\users\Tonda\AppData\Roaming\PCDr\Update\Rules\6f14a5b0-2350-400b-8696-3c88cb2f186f\appupdaterrules_dell\strings_UpdateFromCheck.xml
c:\users\Tonda\AppData\Roaming\PCDr\Update\Rules\92d2bb9a-f2cd-4114-a132-c2ca5d750641\appupdaterrules_dell\AddCertificate.exe
c:\users\Tonda\AppData\Roaming\PCDr\Update\Rules\92d2bb9a-f2cd-4114-a132-c2ca5d750641\appupdaterrules_dell\appupdaterrules.dll
c:\users\Tonda\AppData\Roaming\PCDr\Update\Rules\92d2bb9a-f2cd-4114-a132-c2ca5d750641\appupdaterrules_dell\appupdaterrules_dell.zip
c:\users\Tonda\AppData\Roaming\PCDr\Update\Rules\92d2bb9a-f2cd-4114-a132-c2ca5d750641\appupdaterrules_dell\settings_AuthorizedMachineCheck.xml
c:\users\Tonda\AppData\Roaming\PCDr\Update\Rules\92d2bb9a-f2cd-4114-a132-c2ca5d750641\appupdaterrules_dell\settings_CertStoreManager.xml
c:\users\Tonda\AppData\Roaming\PCDr\Update\Rules\92d2bb9a-f2cd-4114-a132-c2ca5d750641\appupdaterrules_dell\settings_DiskSpaceCheck.xml
c:\users\Tonda\AppData\Roaming\PCDr\Update\Rules\92d2bb9a-f2cd-4114-a132-c2ca5d750641\appupdaterrules_dell\settings_FixModuleCrash.xml
c:\users\Tonda\AppData\Roaming\PCDr\Update\Rules\92d2bb9a-f2cd-4114-a132-c2ca5d750641\appupdaterrules_dell\settings_FixMyBuildID.xml
c:\users\Tonda\AppData\Roaming\PCDr\Update\Rules\92d2bb9a-f2cd-4114-a132-c2ca5d750641\appupdaterrules_dell\settings_FixUnistallMsiIssue.xml
c:\users\Tonda\AppData\Roaming\PCDr\Update\Rules\92d2bb9a-f2cd-4114-a132-c2ca5d750641\appupdaterrules_dell\settings_UpdateFromCheck.xml
c:\users\Tonda\AppData\Roaming\PCDr\Update\Rules\92d2bb9a-f2cd-4114-a132-c2ca5d750641\appupdaterrules_dell\strings_AuthorizedMachineCheck.xml
c:\users\Tonda\AppData\Roaming\PCDr\Update\Rules\92d2bb9a-f2cd-4114-a132-c2ca5d750641\appupdaterrules_dell\strings_CertStoreManager.xml
c:\users\Tonda\AppData\Roaming\PCDr\Update\Rules\92d2bb9a-f2cd-4114-a132-c2ca5d750641\appupdaterrules_dell\strings_DiskSpaceCheck.xml
c:\users\Tonda\AppData\Roaming\PCDr\Update\Rules\92d2bb9a-f2cd-4114-a132-c2ca5d750641\appupdaterrules_dell\strings_FixModuleCrash.xml
c:\users\Tonda\AppData\Roaming\PCDr\Update\Rules\92d2bb9a-f2cd-4114-a132-c2ca5d750641\appupdaterrules_dell\strings_FixMyBuildID.xml
c:\users\Tonda\AppData\Roaming\PCDr\Update\Rules\92d2bb9a-f2cd-4114-a132-c2ca5d750641\appupdaterrules_dell\strings_FixUnistallMsiIssue.xml
c:\users\Tonda\AppData\Roaming\PCDr\Update\Rules\92d2bb9a-f2cd-4114-a132-c2ca5d750641\appupdaterrules_dell\strings_UpdateFromCheck.xml
c:\users\Tonda\AppData\Roaming\PCDr\Update\Rules\97acd83f-32b6-46e9-9412-addaf369ea89\appupdaterrules_dell\AddCertificate.exe
c:\users\Tonda\AppData\Roaming\PCDr\Update\Rules\97acd83f-32b6-46e9-9412-addaf369ea89\appupdaterrules_dell\appupdaterrules.dll
c:\users\Tonda\AppData\Roaming\PCDr\Update\Rules\97acd83f-32b6-46e9-9412-addaf369ea89\appupdaterrules_dell\appupdaterrules_dell.zip
c:\users\Tonda\AppData\Roaming\PCDr\Update\Rules\97acd83f-32b6-46e9-9412-addaf369ea89\appupdaterrules_dell\settings_AuthorizedMachineCheck.xml
c:\users\Tonda\AppData\Roaming\PCDr\Update\Rules\97acd83f-32b6-46e9-9412-addaf369ea89\appupdaterrules_dell\settings_CertStoreManager.xml
c:\users\Tonda\AppData\Roaming\PCDr\Update\Rules\97acd83f-32b6-46e9-9412-addaf369ea89\appupdaterrules_dell\settings_DiskSpaceCheck.xml
c:\users\Tonda\AppData\Roaming\PCDr\Update\Rules\97acd83f-32b6-46e9-9412-addaf369ea89\appupdaterrules_dell\settings_FixModuleCrash.xml
c:\users\Tonda\AppData\Roaming\PCDr\Update\Rules\97acd83f-32b6-46e9-9412-addaf369ea89\appupdaterrules_dell\settings_FixMyBuildID.xml
c:\users\Tonda\AppData\Roaming\PCDr\Update\Rules\97acd83f-32b6-46e9-9412-addaf369ea89\appupdaterrules_dell\settings_FixUnistallMsiIssue.xml
c:\users\Tonda\AppData\Roaming\PCDr\Update\Rules\97acd83f-32b6-46e9-9412-addaf369ea89\appupdaterrules_dell\settings_UpdateFromCheck.xml
c:\users\Tonda\AppData\Roaming\PCDr\Update\Rules\97acd83f-32b6-46e9-9412-addaf369ea89\appupdaterrules_dell\strings_AuthorizedMachineCheck.xml
c:\users\Tonda\AppData\Roaming\PCDr\Update\Rules\97acd83f-32b6-46e9-9412-addaf369ea89\appupdaterrules_dell\strings_CertStoreManager.xml
c:\users\Tonda\AppData\Roaming\PCDr\Update\Rules\97acd83f-32b6-46e9-9412-addaf369ea89\appupdaterrules_dell\strings_DiskSpaceCheck.xml
c:\users\Tonda\AppData\Roaming\PCDr\Update\Rules\97acd83f-32b6-46e9-9412-addaf369ea89\appupdaterrules_dell\strings_FixModuleCrash.xml
c:\users\Tonda\AppData\Roaming\PCDr\Update\Rules\97acd83f-32b6-46e9-9412-addaf369ea89\appupdaterrules_dell\strings_FixMyBuildID.xml
c:\users\Tonda\AppData\Roaming\PCDr\Update\Rules\97acd83f-32b6-46e9-9412-addaf369ea89\appupdaterrules_dell\strings_FixUnistallMsiIssue.xml
c:\users\Tonda\AppData\Roaming\PCDr\Update\Rules\97acd83f-32b6-46e9-9412-addaf369ea89\appupdaterrules_dell\strings_UpdateFromCheck.xml
c:\users\Tonda\AppData\Roaming\PCDr\Update\Rules\b57bc94a-1c99-42ff-beae-64c217e90eab\appupdaterrules_dell\AddCertificate.exe
c:\users\Tonda\AppData\Roaming\PCDr\Update\Rules\b57bc94a-1c99-42ff-beae-64c217e90eab\appupdaterrules_dell\appupdaterrules.dll
c:\users\Tonda\AppData\Roaming\PCDr\Update\Rules\b57bc94a-1c99-42ff-beae-64c217e90eab\appupdaterrules_dell\appupdaterrules_dell.zip
c:\users\Tonda\AppData\Roaming\PCDr\Update\Rules\b57bc94a-1c99-42ff-beae-64c217e90eab\appupdaterrules_dell\settings_AuthorizedMachineCheck.xml
c:\users\Tonda\AppData\Roaming\PCDr\Update\Rules\b57bc94a-1c99-42ff-beae-64c217e90eab\appupdaterrules_dell\settings_CertStoreManager.xml
c:\users\Tonda\AppData\Roaming\PCDr\Update\Rules\b57bc94a-1c99-42ff-beae-64c217e90eab\appupdaterrules_dell\settings_DiskSpaceCheck.xml
c:\users\Tonda\AppData\Roaming\PCDr\Update\Rules\b57bc94a-1c99-42ff-beae-64c217e90eab\appupdaterrules_dell\settings_FixModuleCrash.xml
c:\users\Tonda\AppData\Roaming\PCDr\Update\Rules\b57bc94a-1c99-42ff-beae-64c217e90eab\appupdaterrules_dell\settings_FixMyBuildID.xml
c:\users\Tonda\AppData\Roaming\PCDr\Update\Rules\b57bc94a-1c99-42ff-beae-64c217e90eab\appupdaterrules_dell\settings_FixUnistallMsiIssue.xml
c:\users\Tonda\AppData\Roaming\PCDr\Update\Rules\b57bc94a-1c99-42ff-beae-64c217e90eab\appupdaterrules_dell\settings_UpdateFromCheck.xml
c:\users\Tonda\AppData\Roaming\PCDr\Update\Rules\b57bc94a-1c99-42ff-beae-64c217e90eab\appupdaterrules_dell\strings_AuthorizedMachineCheck.xml
c:\users\Tonda\AppData\Roaming\PCDr\Update\Rules\b57bc94a-1c99-42ff-beae-64c217e90eab\appupdaterrules_dell\strings_CertStoreManager.xml
c:\users\Tonda\AppData\Roaming\PCDr\Update\Rules\b57bc94a-1c99-42ff-beae-64c217e90eab\appupdaterrules_dell\strings_DiskSpaceCheck.xml
c:\users\Tonda\AppData\Roaming\PCDr\Update\Rules\b57bc94a-1c99-42ff-beae-64c217e90eab\appupdaterrules_dell\strings_FixModuleCrash.xml
c:\users\Tonda\AppData\Roaming\PCDr\Update\Rules\b57bc94a-1c99-42ff-beae-64c217e90eab\appupdaterrules_dell\strings_FixMyBuildID.xml
c:\users\Tonda\AppData\Roaming\PCDr\Update\Rules\b57bc94a-1c99-42ff-beae-64c217e90eab\appupdaterrules_dell\strings_FixUnistallMsiIssue.xml
c:\users\Tonda\AppData\Roaming\PCDr\Update\Rules\b57bc94a-1c99-42ff-beae-64c217e90eab\appupdaterrules_dell\strings_UpdateFromCheck.xml
c:\users\Tonda\AppData\Roaming\PCDr\Update\Rules\b67042fe-3e1b-41c7-851f-39757d71cdb8\appupdaterrules_dell\AddCertificate.exe
c:\users\Tonda\AppData\Roaming\PCDr\Update\Rules\b67042fe-3e1b-41c7-851f-39757d71cdb8\appupdaterrules_dell\appupdaterrules.dll
c:\users\Tonda\AppData\Roaming\PCDr\Update\Rules\b67042fe-3e1b-41c7-851f-39757d71cdb8\appupdaterrules_dell\appupdaterrules_dell.zip
c:\users\Tonda\AppData\Roaming\PCDr\Update\Rules\b67042fe-3e1b-41c7-851f-39757d71cdb8\appupdaterrules_dell\settings_AuthorizedMachineCheck.xml
c:\users\Tonda\AppData\Roaming\PCDr\Update\Rules\b67042fe-3e1b-41c7-851f-39757d71cdb8\appupdaterrules_dell\settings_CertStoreManager.xml
c:\users\Tonda\AppData\Roaming\PCDr\Update\Rules\b67042fe-3e1b-41c7-851f-39757d71cdb8\appupdaterrules_dell\settings_DiskSpaceCheck.xml
c:\users\Tonda\AppData\Roaming\PCDr\Update\Rules\b67042fe-3e1b-41c7-851f-39757d71cdb8\appupdaterrules_dell\settings_FixModuleCrash.xml
c:\users\Tonda\AppData\Roaming\PCDr\Update\Rules\b67042fe-3e1b-41c7-851f-39757d71cdb8\appupdaterrules_dell\settings_FixMyBuildID.xml
c:\users\Tonda\AppData\Roaming\PCDr\Update\Rules\b67042fe-3e1b-41c7-851f-39757d71cdb8\appupdaterrules_dell\settings_FixUnistallMsiIssue.xml
c:\users\Tonda\AppData\Roaming\PCDr\Update\Rules\b67042fe-3e1b-41c7-851f-39757d71cdb8\appupdaterrules_dell\settings_UpdateFromCheck.xml
c:\users\Tonda\AppData\Roaming\PCDr\Update\Rules\b67042fe-3e1b-41c7-851f-39757d71cdb8\appupdaterrules_dell\strings_AuthorizedMachineCheck.xml
c:\users\Tonda\AppData\Roaming\PCDr\Update\Rules\b67042fe-3e1b-41c7-851f-39757d71cdb8\appupdaterrules_dell\strings_CertStoreManager.xml
c:\users\Tonda\AppData\Roaming\PCDr\Update\Rules\b67042fe-3e1b-41c7-851f-39757d71cdb8\appupdaterrules_dell\strings_DiskSpaceCheck.xml
c:\users\Tonda\AppData\Roaming\PCDr\Update\Rules\b67042fe-3e1b-41c7-851f-39757d71cdb8\appupdaterrules_dell\strings_FixModuleCrash.xml
c:\users\Tonda\AppData\Roaming\PCDr\Update\Rules\b67042fe-3e1b-41c7-851f-39757d71cdb8\appupdaterrules_dell\strings_FixMyBuildID.xml
c:\users\Tonda\AppData\Roaming\PCDr\Update\Rules\b67042fe-3e1b-41c7-851f-39757d71cdb8\appupdaterrules_dell\strings_FixUnistallMsiIssue.xml
c:\users\Tonda\AppData\Roaming\PCDr\Update\Rules\b67042fe-3e1b-41c7-851f-39757d71cdb8\appupdaterrules_dell\strings_UpdateFromCheck.xml
c:\users\Tonda\AppData\Roaming\PCDr\Update\Rules\ca4ade65-4cdd-4da0-8f01-6554899cfa05\appupdaterrules_dell\AddCertificate.exe
c:\users\Tonda\AppData\Roaming\PCDr\Update\Rules\ca4ade65-4cdd-4da0-8f01-6554899cfa05\appupdaterrules_dell\appupdaterrules.dll
c:\users\Tonda\AppData\Roaming\PCDr\Update\Rules\ca4ade65-4cdd-4da0-8f01-6554899cfa05\appupdaterrules_dell\appupdaterrules_dell.zip
c:\users\Tonda\AppData\Roaming\PCDr\Update\Rules\ca4ade65-4cdd-4da0-8f01-6554899cfa05\appupdaterrules_dell\settings_AuthorizedMachineCheck.xml
c:\users\Tonda\AppData\Roaming\PCDr\Update\Rules\ca4ade65-4cdd-4da0-8f01-6554899cfa05\appupdaterrules_dell\settings_CertStoreManager.xml
c:\users\Tonda\AppData\Roaming\PCDr\Update\Rules\ca4ade65-4cdd-4da0-8f01-6554899cfa05\appupdaterrules_dell\settings_DiskSpaceCheck.xml
c:\users\Tonda\AppData\Roaming\PCDr\Update\Rules\ca4ade65-4cdd-4da0-8f01-6554899cfa05\appupdaterrules_dell\settings_FixModuleCrash.xml
c:\users\Tonda\AppData\Roaming\PCDr\Update\Rules\ca4ade65-4cdd-4da0-8f01-6554899cfa05\appupdaterrules_dell\settings_FixMyBuildID.xml
c:\users\Tonda\AppData\Roaming\PCDr\Update\Rules\ca4ade65-4cdd-4da0-8f01-6554899cfa05\appupdaterrules_dell\settings_FixUnistallMsiIssue.xml
c:\users\Tonda\AppData\Roaming\PCDr\Update\Rules\ca4ade65-4cdd-4da0-8f01-6554899cfa05\appupdaterrules_dell\settings_UpdateFromCheck.xml
c:\users\Tonda\AppData\Roaming\PCDr\Update\Rules\ca4ade65-4cdd-4da0-8f01-6554899cfa05\appupdaterrules_dell\strings_AuthorizedMachineCheck.xml
c:\users\Tonda\AppData\Roaming\PCDr\Update\Rules\ca4ade65-4cdd-4da0-8f01-6554899cfa05\appupdaterrules_dell\strings_CertStoreManager.xml
c:\users\Tonda\AppData\Roaming\PCDr\Update\Rules\ca4ade65-4cdd-4da0-8f01-6554899cfa05\appupdaterrules_dell\strings_DiskSpaceCheck.xml
c:\users\Tonda\AppData\Roaming\PCDr\Update\Rules\ca4ade65-4cdd-4da0-8f01-6554899cfa05\appupdaterrules_dell\strings_FixModuleCrash.xml
c:\users\Tonda\AppData\Roaming\PCDr\Update\Rules\ca4ade65-4cdd-4da0-8f01-6554899cfa05\appupdaterrules_dell\strings_FixMyBuildID.xml
c:\users\Tonda\AppData\Roaming\PCDr\Update\Rules\ca4ade65-4cdd-4da0-8f01-6554899cfa05\appupdaterrules_dell\strings_FixUnistallMsiIssue.xml
c:\users\Tonda\AppData\Roaming\PCDr\Update\Rules\ca4ade65-4cdd-4da0-8f01-6554899cfa05\appupdaterrules_dell\strings_UpdateFromCheck.xml
c:\users\Tonda\AppData\Roaming\PCDr\Update\Rules\e44ded94-172b-4dbd-b1a0-b408375a701b\appupdaterrules_dell\AddCertificate.exe
c:\users\Tonda\AppData\Roaming\PCDr\Update\Rules\e44ded94-172b-4dbd-b1a0-b408375a701b\appupdaterrules_dell\appupdaterrules.dll
c:\users\Tonda\AppData\Roaming\PCDr\Update\Rules\e44ded94-172b-4dbd-b1a0-b408375a701b\appupdaterrules_dell\appupdaterrules_dell.zip
c:\users\Tonda\AppData\Roaming\PCDr\Update\Rules\e44ded94-172b-4dbd-b1a0-b408375a701b\appupdaterrules_dell\settings_AuthorizedMachineCheck.xml
c:\users\Tonda\AppData\Roaming\PCDr\Update\Rules\e44ded94-172b-4dbd-b1a0-b408375a701b\appupdaterrules_dell\settings_CertStoreManager.xml
c:\users\Tonda\AppData\Roaming\PCDr\Update\Rules\e44ded94-172b-4dbd-b1a0-b408375a701b\appupdaterrules_dell\settings_DiskSpaceCheck.xml
c:\users\Tonda\AppData\Roaming\PCDr\Update\Rules\e44ded94-172b-4dbd-b1a0-b408375a701b\appupdaterrules_dell\settings_FixModuleCrash.xml
c:\users\Tonda\AppData\Roaming\PCDr\Update\Rules\e44ded94-172b-4dbd-b1a0-b408375a701b\appupdaterrules_dell\settings_FixMyBuildID.xml
c:\users\Tonda\AppData\Roaming\PCDr\Update\Rules\e44ded94-172b-4dbd-b1a0-b408375a701b\appupdaterrules_dell\settings_FixUnistallMsiIssue.xml
c:\users\Tonda\AppData\Roaming\PCDr\Update\Rules\e44ded94-172b-4dbd-b1a0-b408375a701b\appupdaterrules_dell\settings_UpdateFromCheck.xml
c:\users\Tonda\AppData\Roaming\PCDr\Update\Rules\e44ded94-172b-4dbd-b1a0-b408375a701b\appupdaterrules_dell\strings_AuthorizedMachineCheck.xml
c:\users\Tonda\AppData\Roaming\PCDr\Update\Rules\e44ded94-172b-4dbd-b1a0-b408375a701b\appupdaterrules_dell\strings_CertStoreManager.xml
c:\users\Tonda\AppData\Roaming\PCDr\Update\Rules\e44ded94-172b-4dbd-b1a0-b408375a701b\appupdaterrules_dell\strings_DiskSpaceCheck.xml
c:\users\Tonda\AppData\Roaming\PCDr\Update\Rules\e44ded94-172b-4dbd-b1a0-b408375a701b\appupdaterrules_dell\strings_FixModuleCrash.xml
c:\users\Tonda\AppData\Roaming\PCDr\Update\Rules\e44ded94-172b-4dbd-b1a0-b408375a701b\appupdaterrules_dell\strings_FixMyBuildID.xml
c:\users\Tonda\AppData\Roaming\PCDr\Update\Rules\e44ded94-172b-4dbd-b1a0-b408375a701b\appupdaterrules_dell\strings_FixUnistallMsiIssue.xml
c:\users\Tonda\AppData\Roaming\PCDr\Update\Rules\e44ded94-172b-4dbd-b1a0-b408375a701b\appupdaterrules_dell\strings_UpdateFromCheck.xml
c:\users\Tonda\AppData\Roaming\PCDr\Update\Rules\eab9f524-88eb-4334-8c7e-895e63f9d5ad\appupdaterrules_dell\AddCertificate.exe
c:\users\Tonda\AppData\Roaming\PCDr\Update\Rules\eab9f524-88eb-4334-8c7e-895e63f9d5ad\appupdaterrules_dell\appupdaterrules.dll
c:\users\Tonda\AppData\Roaming\PCDr\Update\Rules\eab9f524-88eb-4334-8c7e-895e63f9d5ad\appupdaterrules_dell\appupdaterrules_dell.zip
c:\users\Tonda\AppData\Roaming\PCDr\Update\Rules\eab9f524-88eb-4334-8c7e-895e63f9d5ad\appupdaterrules_dell\settings_AuthorizedMachineCheck.xml
c:\users\Tonda\AppData\Roaming\PCDr\Update\Rules\eab9f524-88eb-4334-8c7e-895e63f9d5ad\appupdaterrules_dell\settings_CertStoreManager.xml
c:\users\Tonda\AppData\Roaming\PCDr\Update\Rules\eab9f524-88eb-4334-8c7e-895e63f9d5ad\appupdaterrules_dell\settings_DiskSpaceCheck.xml
c:\users\Tonda\AppData\Roaming\PCDr\Update\Rules\eab9f524-88eb-4334-8c7e-895e63f9d5ad\appupdaterrules_dell\settings_FixModuleCrash.xml
c:\users\Tonda\AppData\Roaming\PCDr\Update\Rules\eab9f524-88eb-4334-8c7e-895e63f9d5ad\appupdaterrules_dell\settings_FixMyBuildID.xml
c:\users\Tonda\AppData\Roaming\PCDr\Update\Rules\eab9f524-88eb-4334-8c7e-895e63f9d5ad\appupdaterrules_dell\settings_FixUnistallMsiIssue.xml
c:\users\Tonda\AppData\Roaming\PCDr\Update\Rules\eab9f524-88eb-4334-8c7e-895e63f9d5ad\appupdaterrules_dell\settings_UpdateFromCheck.xml
c:\users\Tonda\AppData\Roaming\PCDr\Update\Rules\eab9f524-88eb-4334-8c7e-895e63f9d5ad\appupdaterrules_dell\strings_AuthorizedMachineCheck.xml
c:\users\Tonda\AppData\Roaming\PCDr\Update\Rules\eab9f524-88eb-4334-8c7e-895e63f9d5ad\appupdaterrules_dell\strings_CertStoreManager.xml
c:\users\Tonda\AppData\Roaming\PCDr\Update\Rules\eab9f524-88eb-4334-8c7e-895e63f9d5ad\appupdaterrules_dell\strings_DiskSpaceCheck.xml
c:\users\Tonda\AppData\Roaming\PCDr\Update\Rules\eab9f524-88eb-4334-8c7e-895e63f9d5ad\appupdaterrules_dell\strings_FixModuleCrash.xml
c:\users\Tonda\AppData\Roaming\PCDr\Update\Rules\eab9f524-88eb-4334-8c7e-895e63f9d5ad\appupdaterrules_dell\strings_FixMyBuildID.xml
c:\users\Tonda\AppData\Roaming\PCDr\Update\Rules\eab9f524-88eb-4334-8c7e-895e63f9d5ad\appupdaterrules_dell\strings_FixUnistallMsiIssue.xml
c:\users\Tonda\AppData\Roaming\PCDr\Update\Rules\eab9f524-88eb-4334-8c7e-895e63f9d5ad\appupdaterrules_dell\strings_UpdateFromCheck.xml
c:\users\Tonda\AppData\Roaming\PCDr\Update\Rules\f52c270b-1357-4ecf-bf67-8028eea9c21f\appupdaterrules_dell\AddCertificate.exe
c:\users\Tonda\AppData\Roaming\PCDr\Update\Rules\f52c270b-1357-4ecf-bf67-8028eea9c21f\appupdaterrules_dell\appupdaterrules.dll
c:\users\Tonda\AppData\Roaming\PCDr\Update\Rules\f52c270b-1357-4ecf-bf67-8028eea9c21f\appupdaterrules_dell\appupdaterrules_dell.zip
c:\users\Tonda\AppData\Roaming\PCDr\Update\Rules\f52c270b-1357-4ecf-bf67-8028eea9c21f\appupdaterrules_dell\settings_AuthorizedMachineCheck.xml
c:\users\Tonda\AppData\Roaming\PCDr\Update\Rules\f52c270b-1357-4ecf-bf67-8028eea9c21f\appupdaterrules_dell\settings_CertStoreManager.xml
c:\users\Tonda\AppData\Roaming\PCDr\Update\Rules\f52c270b-1357-4ecf-bf67-8028eea9c21f\appupdaterrules_dell\settings_DiskSpaceCheck.xml
c:\users\Tonda\AppData\Roaming\PCDr\Update\Rules\f52c270b-1357-4ecf-bf67-8028eea9c21f\appupdaterrules_dell\settings_FixModuleCrash.xml
c:\users\Tonda\AppData\Roaming\PCDr\Update\Rules\f52c270b-1357-4ecf-bf67-8028eea9c21f\appupdaterrules_dell\settings_FixMyBuildID.xml
c:\users\Tonda\AppData\Roaming\PCDr\Update\Rules\f52c270b-1357-4ecf-bf67-8028eea9c21f\appupdaterrules_dell\settings_FixUnistallMsiIssue.xml
c:\users\Tonda\AppData\Roaming\PCDr\Update\Rules\f52c270b-1357-4ecf-bf67-8028eea9c21f\appupdaterrules_dell\settings_UpdateFromCheck.xml
c:\users\Tonda\AppData\Roaming\PCDr\Update\Rules\f52c270b-1357-4ecf-bf67-8028eea9c21f\appupdaterrules_dell\strings_AuthorizedMachineCheck.xml
c:\users\Tonda\AppData\Roaming\PCDr\Update\Rules\f52c270b-1357-4ecf-bf67-8028eea9c21f\appupdaterrules_dell\strings_CertStoreManager.xml
c:\users\Tonda\AppData\Roaming\PCDr\Update\Rules\f52c270b-1357-4ecf-bf67-8028eea9c21f\appupdaterrules_dell\strings_DiskSpaceCheck.xml
c:\users\Tonda\AppData\Roaming\PCDr\Update\Rules\f52c270b-1357-4ecf-bf67-8028eea9c21f\appupdaterrules_dell\strings_FixModuleCrash.xml
c:\users\Tonda\AppData\Roaming\PCDr\Update\Rules\f52c270b-1357-4ecf-bf67-8028eea9c21f\appupdaterrules_dell\strings_FixMyBuildID.xml
c:\users\Tonda\AppData\Roaming\PCDr\Update\Rules\f52c270b-1357-4ecf-bf67-8028eea9c21f\appupdaterrules_dell\strings_FixUnistallMsiIssue.xml
c:\users\Tonda\AppData\Roaming\PCDr\Update\Rules\f52c270b-1357-4ecf-bf67-8028eea9c21f\appupdaterrules_dell\strings_UpdateFromCheck.xml
c:\windows\tasks\Adobe Flash Player Updater.job
c:\windows\tasks\GoogleUpdateTaskMachineCore.job
c:\windows\tasks\GoogleUpdateTaskMachineUA.job
c:\windows\tasks\GoogleUpdateTaskUserS-1-5-21-2171802320-3057826182-27557160-1001Core.job
c:\windows\tasks\GoogleUpdateTaskUserS-1-5-21-2171802320-3057826182-27557160-1001UA.job
.
.
((((((((((((((((((((((((( Soubory vytvořené od 2012-10-05 do 2012-11-05 )))))))))))))))))))))))))))))))
.
.
2012-11-05 18:04 . 2012-11-05 18:04 -------- d-----w- c:\users\UpdatusUser\AppData\Local\temp
2012-11-05 18:04 . 2012-11-05 18:04 -------- d-----w- c:\users\Default\AppData\Local\temp
2012-11-05 08:09 . 2012-11-05 08:09 -------- d-----w- c:\program files\CCleaner
2012-11-05 07:20 . 2012-11-05 07:20 -------- d-----w- c:\users\Tonda\AppData\Roaming\Malwarebytes
2012-11-05 07:19 . 2012-11-05 07:19 -------- d-----w- c:\programdata\Malwarebytes
2012-11-05 07:19 . 2012-11-05 07:19 -------- d-----w- c:\program files (x86)\Malwarebytes' Anti-Malware
2012-11-05 07:19 . 2012-09-29 18:54 25928 ----a-w- c:\windows\system32\drivers\mbam.sys
2012-11-04 18:33 . 2012-11-04 18:33 -------- d-----w- C:\rsit
2012-11-04 18:33 . 2012-11-04 18:33 -------- d-----w- c:\program files\trend micro
2012-11-02 11:05 . 2012-11-02 11:06 -------- d-----w- c:\program files\Dell Support Center
2012-10-10 19:18 . 2012-10-10 19:18 -------- d-----w- c:\users\Tonda\AppData\Local\Dell Edoc Viewer
2012-10-10 17:19 . 2012-08-31 18:19 1659760 ----a-w- c:\windows\system32\drivers\ntfs.sys
2012-10-10 17:19 . 2012-08-30 18:03 5559664 ----a-w- c:\windows\system32\ntoskrnl.exe
2012-10-10 17:19 . 2012-08-30 17:12 3968880 ----a-w- c:\windows\SysWow64\ntkrnlpa.exe
2012-10-10 17:19 . 2012-08-30 17:12 3914096 ----a-w- c:\windows\SysWow64\ntoskrnl.exe
2012-10-10 17:17 . 2012-06-02 05:41 1464320 ----a-w- c:\windows\system32\crypt32.dll
2012-10-10 17:17 . 2012-06-02 04:36 1159680 ----a-w- c:\windows\SysWow64\crypt32.dll
2012-10-10 17:17 . 2012-06-02 05:41 184320 ----a-w- c:\windows\system32\cryptsvc.dll
2012-10-10 17:17 . 2012-06-02 05:41 140288 ----a-w- c:\windows\system32\cryptnet.dll
2012-10-10 17:17 . 2012-06-02 04:36 140288 ----a-w- c:\windows\SysWow64\cryptsvc.dll
2012-10-10 17:17 . 2012-06-02 04:36 103936 ----a-w- c:\windows\SysWow64\cryptnet.dll
.
.
.
(((((((((((((((((((((((((((((((((((((((( Find3M výpis ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2012-10-10 17:55 . 2012-03-31 17:54 65309168 ----a-w- c:\windows\system32\MRT.exe
2012-10-10 12:50 . 2012-04-28 18:47 696760 ----a-w- c:\windows\SysWow64\FlashPlayerApp.exe
2012-10-10 12:50 . 2011-12-22 21:41 73656 ----a-w- c:\windows\SysWow64\FlashPlayerCPLApp.cpl
2012-08-24 13:43 . 2012-08-24 13:43 384352 ----a-w- c:\windows\system32\drivers\avgtdia.sys
2012-08-24 11:15 . 2012-09-23 08:36 17810944 ----a-w- c:\windows\system32\mshtml.dll
2012-08-24 10:39 . 2012-09-23 08:36 10925568 ----a-w- c:\windows\system32\ieframe.dll
2012-08-24 10:31 . 2012-09-23 08:36 2312704 ----a-w- c:\windows\system32\jscript9.dll
2012-08-24 10:22 . 2012-09-23 08:36 1346048 ----a-w- c:\windows\system32\urlmon.dll
2012-08-24 10:21 . 2012-09-23 08:36 1392128 ----a-w- c:\windows\system32\wininet.dll
2012-08-24 10:20 . 2012-09-23 08:36 1494528 ----a-w- c:\windows\system32\inetcpl.cpl
2012-08-24 10:18 . 2012-09-23 08:37 237056 ----a-w- c:\windows\system32\url.dll
2012-08-24 10:17 . 2012-09-23 08:36 85504 ----a-w- c:\windows\system32\jsproxy.dll
2012-08-24 10:14 . 2012-09-23 08:37 173056 ----a-w- c:\windows\system32\ieUnatt.exe
2012-08-24 10:14 . 2012-09-23 08:36 816640 ----a-w- c:\windows\system32\jscript.dll
2012-08-24 10:13 . 2012-09-23 08:36 599040 ----a-w- c:\windows\system32\vbscript.dll
2012-08-24 10:12 . 2012-09-23 08:36 2144768 ----a-w- c:\windows\system32\iertutil.dll
2012-08-24 10:11 . 2012-09-23 08:36 729088 ----a-w- c:\windows\system32\msfeeds.dll
2012-08-24 10:10 . 2012-09-23 08:37 96768 ----a-w- c:\windows\system32\mshtmled.dll
2012-08-24 10:09 . 2012-09-23 08:37 2382848 ----a-w- c:\windows\system32\mshtml.tlb
2012-08-24 10:04 . 2012-09-23 08:37 248320 ----a-w- c:\windows\system32\ieui.dll
2012-08-24 06:59 . 2012-09-23 08:36 1800704 ----a-w- c:\windows\SysWow64\jscript9.dll
2012-08-24 06:51 . 2012-09-23 08:36 1129472 ----a-w- c:\windows\SysWow64\wininet.dll
2012-08-24 06:51 . 2012-09-23 08:36 1427968 ----a-w- c:\windows\SysWow64\inetcpl.cpl
2012-08-24 06:47 . 2012-09-23 08:37 142848 ----a-w- c:\windows\SysWow64\ieUnatt.exe
2012-08-24 06:47 . 2012-09-23 08:37 420864 ----a-w- c:\windows\SysWow64\vbscript.dll
2012-08-24 06:43 . 2012-09-23 08:37 2382848 ----a-w- c:\windows\SysWow64\mshtml.tlb
2012-08-22 18:12 . 2012-09-12 19:12 1913200 ----a-w- c:\windows\system32\drivers\tcpip.sys
2012-08-22 18:12 . 2012-09-12 19:12 950128 ----a-w- c:\windows\system32\drivers\ndis.sys
2012-08-22 18:12 . 2012-09-12 19:12 376688 ----a-w- c:\windows\system32\drivers\netio.sys
2012-08-22 18:12 . 2012-09-12 19:12 288624 ----a-w- c:\windows\system32\drivers\FWPKCLNT.SYS
2012-08-21 21:01 . 2012-09-26 18:40 245760 ----a-w- c:\windows\system32\OxpsConverter.exe
2012-08-20 17:38 . 2012-10-10 17:18 44032 ----a-w- c:\windows\apppatch\acwow64.dll
.
.
(((((((((((((((((((((((((((((((((( Spouštěcí body v registru )))))))))))))))))))))))))))))))))))))))))))))
.
.
*Poznámka* prázdné záznamy a legitimní výchozí údaje nejsou zobrazeny.
REGEDIT4
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Sidebar"="c:\program files\Windows Sidebar\sidebar.exe" [2010-11-21 1475584]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]
"AVG_TRAY"="c:\program files (x86)\AVG\AVG2012\avgtray.exe" [2012-07-31 2596984]
"IAStorIcon"="c:\program files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe" [2010-11-06 283160]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorAdmin"= 5 (0x5)
"ConsentPromptBehaviorUser"= 3 (0x3)
"EnableUIADesktopToggle"= 0 (0x0)
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\windows]
"LoadAppInit_DLLs"=1 (0x1)
"AppInit_DLLs"=c:\windows\SysWOW64\nvinit.dll
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\drivers32]
"mixer7"=wdmaud.drv
.
[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\session manager]
BootExecute REG_MULTI_SZ autocheck autochk /p \??\y:\0autocheck autochk /p \??\y:\0autocheck autochk /r \??\y:\0autocheck autochk *\0c:\progra~2\AVG\AVG2012\avgrsa.exe /sync /restart
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MCODS]
@=""
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Wdf01000.sys]
@="Driver"
.
R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2010-03-18 138576]
R2 RoxWatch12;Roxio Hard Drive Watcher 12;c:\program files (x86)\Common Files\Roxio Shared\OEM\12.0\SharedCOM\RoxWatch12OEM.exe [2010-11-25 219632]
R2 SkypeUpdate;Skype Updater;c:\program files (x86)\Skype\Updater\Updater.exe [2012-07-13 160944]
R3 AMPPALP;Protokol Intel® Centrino® Wireless Bluetooth® 3.0 + High Speed;c:\windows\system32\DRIVERS\amppal.sys [2011-09-15 299008]
R3 Bluetooth Media Service;Bluetooth Media Service;c:\program files (x86)\Intel\Bluetooth\mediasrv.exe [2011-05-19 1335360]
R3 intaud_WaveExtensible;Intel WiDi Audio Device;c:\windows\system32\drivers\intelaud.sys [2011-06-21 34200]
R3 MyWiFiDHCPDNS;Wireless PAN DHCP Server;c:\program files\Intel\WiFi\bin\PanDhcpDns.exe [2011-09-16 340240]
R3 RoxMediaDB12OEM;RoxMediaDB12OEM;c:\program files (x86)\Common Files\Roxio Shared\OEM\12.0\SharedCOM\RoxMediaDB12OEM.exe [2010-11-25 1116656]
R3 RSUSBSTOR;RtsUStor.Sys Realtek USB Card Reader;c:\windows\system32\Drivers\RtsUStor.sys [2010-10-30 250984]
R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys [2010-11-21 59392]
R3 TsUsbGD;Remote Desktop Generic USB Device;c:\windows\system32\drivers\TsUsbGD.sys [2010-11-21 31232]
R3 TurboBoost;Intel(R) Turbo Boost Technology Monitor 2.0;c:\program files\Intel\TurboBoost\TurboBoost.exe [2010-11-29 149504]
R3 WatAdminSvc;Služba Technologie aktivace Windows;c:\windows\system32\Wat\WatAdminSvc.exe [2012-03-31 1255736]
R4 wlcrasvc;Windows Live Mesh remote connections service;c:\program files\Windows Live\Mesh\wlcrasvc.exe [2010-09-23 57184]
S0 AVGIDSHA;AVGIDSHA;c:\windows\system32\DRIVERS\avgidsha.sys [2012-04-19 28480]
S0 Avgrkx64;AVG Anti-Rootkit Driver;c:\windows\system32\DRIVERS\avgrkx64.sys [2012-01-31 36944]
S0 nvpciflt;nvpciflt;c:\windows\system32\DRIVERS\nvpciflt.sys [2011-04-22 25960]
S0 PxHlpa64;PxHlpa64;c:\windows\System32\Drivers\PxHlpa64.sys [2010-03-19 55856]
S1 Avgldx64;AVG AVI Loader Driver;c:\windows\system32\DRIVERS\avgldx64.sys [2012-07-26 291680]
S1 Avgmfx64;AVG Mini-Filter Resident Anti-Virus Shield;c:\windows\system32\DRIVERS\avgmfx64.sys [2011-12-23 47696]
S1 Avgtdia;AVG TDI Driver;c:\windows\system32\DRIVERS\avgtdia.sys [2012-08-24 384352]
S2 AESTFilters;Andrea ST Filters Service;c:\program files\IDT\WDM\AESTSr64.exe [2009-03-03 89600]
S2 AMPPALR3;Intel® Centrino® Wireless Bluetooth® 3.0 + High Speed Service;c:\program files\Intel\BluetoothHS\BTHSAmpPalService.exe [2011-09-15 1166848]
S2 AVGIDSAgent;AVGIDSAgent;c:\program files (x86)\AVG\AVG2012\AVGIDSAgent.exe [2012-08-13 5167736]
S2 avgwd;AVG WatchDog;c:\program files (x86)\AVG\AVG2012\avgwdsvc.exe [2012-02-14 193288]
S2 Bluetooth Device Monitor;Bluetooth Device Monitor;c:\program files (x86)\Intel\Bluetooth\devmonsrv.exe [2011-05-19 921664]
S2 Bluetooth OBEX Service;Bluetooth OBEX Service;c:\program files (x86)\Intel\Bluetooth\obexsrv.exe [2011-05-19 995392]
S2 BTHSSecurityMgr;Intel(R) Centrino(R) Wireless Bluetooth(R) 3.0 + High Speed Security Service;c:\program files\Intel\BluetoothHS\BTHSSecurityMgr.exe [2011-06-03 134928]
S2 IAStorDataMgrSvc;Úložná technologie Intel(R) Rapid;c:\program files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe [2010-11-06 13336]
S2 MBAMService;MBAMService;c:\program files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe [2012-09-29 676936]
S2 NAUpdate;Nero Update;c:\program files (x86)\Nero\Update\NASvc.exe [2011-11-25 687400]
S2 SftService;SoftThinks Agent Service;c:\program files (x86)\Dell DataSafe Local Backup\sftservice.EXE [2011-08-18 1692480]
S2 Skype C2C Service;Skype C2C Service;c:\programdata\Skype\Toolbars\Skype C2C Service\c2c_service.exe [2012-08-13 3064000]
S2 Stereo Service;NVIDIA Stereoscopic 3D Driver Service;c:\program files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe [2011-04-22 378472]
S2 TeamViewer7;TeamViewer 7;c:\program files (x86)\TeamViewer\Version7\TeamViewer_Service.exe [2012-03-19 2666880]
S2 TomTomHOMEService;TomTomHOMEService;c:\program files (x86)\TomTom HOME 2\TomTomHOMEService.exe [2012-07-26 92632]
S2 TuneUp.UtilitiesSvc;TuneUp Utilities Service;c:\program files (x86)\TuneUp Utilities 2011\TuneUpUtilitiesService64.exe [2011-12-08 2028864]
S2 TurboB;Turbo Boost UI Monitor driver;c:\windows\system32\DRIVERS\TurboB.sys [2010-11-29 16120]
S2 UNS;Intel(R) Management and Security Application User Notification Service;c:\program files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe [2010-10-06 2655768]
S3 AMPPAL;Virtuální adaptér Intel® Centrino® Wireless Bluetooth® 3.0 + High Speed;c:\windows\system32\DRIVERS\AMPPAL.sys [2011-09-15 299008]
S3 AVGIDSDriver;AVGIDSDriver;c:\windows\system32\DRIVERS\avgidsdrivera.sys [2011-12-23 124496]
S3 AVGIDSFilter;AVGIDSFilter;c:\windows\system32\DRIVERS\avgidsfiltera.sys [2011-12-23 29776]
S3 btmaudio;Intel Bluetooth Audio Service;c:\windows\system32\drivers\btmaud.sys [2011-05-19 51712]
S3 btmaux;Intel Bluetooth Auxiliary Service;c:\windows\system32\DRIVERS\btmaux.sys [2011-05-19 53248]
S3 btmhsf;btmhsf;c:\windows\system32\DRIVERS\btmhsf.sys [2011-11-14 327168]
S3 CtClsFlt;Creative Camera Class Upper Filter Driver;c:\windows\system32\DRIVERS\CtClsFlt.sys [2011-01-20 176096]
S3 iBtFltCoex;iBtFltCoex;c:\windows\system32\DRIVERS\iBtFltCoex.sys [2011-12-09 60416]
S3 iwdbus;IWD Bus Enumerator;c:\windows\system32\DRIVERS\iwdbus.sys [2011-06-21 25496]
S3 MBAMProtector;MBAMProtector;c:\windows\system32\drivers\mbam.sys [2012-09-29 25928]
S3 RTL8167;Realtek 8167 NT Driver;c:\windows\system32\DRIVERS\Rt64win7.sys [2011-06-10 539240]
S3 tihub3;TI USB3 Hub Service;c:\windows\system32\DRIVERS\tihub3.sys [2011-07-20 136000]
S3 tixhci;TI XHCI Service;c:\windows\system32\DRIVERS\tixhci.sys [2011-07-20 406336]
S3 TuneUpUtilitiesDrv;TuneUpUtilitiesDrv;c:\program files (x86)\TuneUp Utilities 2011\TuneUpUtilitiesDriver64.sys [2011-05-31 11856]
.
.
.
--------- X64 Entries -----------
.
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"SysTrayApp"="c:\program files\IDT\WDM\sttray64.exe" [2011-01-25 525312]
"Apoint"="c:\program files\DellTPad\Apoint.exe" [2011-04-12 609144]
"IntelTBRunOnce"="wscript.exe" [2009-07-14 168960]
"IntelPAN"="c:\program files\Common Files\Intel\WirelessCommon\iFrmewrk.exe" [2011-09-16 1935120]
"IgfxTray"="c:\windows\system32\igfxtray.exe" [2011-04-20 168216]
"HotKeysCmds"="c:\windows\system32\hkcmd.exe" [2011-04-20 392472]
"Persistence"="c:\windows\system32\igfxpers.exe" [2011-04-20 416024]
"NVHotkey"="c:\windows\system32\nvHotkey.dll" [2011-04-22 312936]
"BTMTrayAgent"="c:\program files (x86)\Intel\Bluetooth\btmshell.dll" [2011-05-19 10365952]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
"AppInit_DLLs"=c:\windows\System32\nvinitx.dll
.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Svchost - NetSvcs
UxTuneUp
.
------- Doplňkový sken -------
.
uLocal Page = c:\windows\system32\blank.htm
uStart Page = hxxp://www.igoogle.cz/
mStart Page = hxxp://www.google.com
mLocal Page = c:\windows\SysWOW64\blank.htm
IE: E&xportovat do aplikace Microsoft Excel - c:\progra~2\MICROS~1\Office12\EXCEL.EXE/3000
IE: Search the Web - c:\program files (x86)\SweetIM\Toolbars\Internet Explorer\resources\menuext.html
TCP: Interfaces\{1E0C9175-348B-43B6-9883-2E17D2AC5F2B}: NameServer = 192.168.150.237,194.228.2.1
.
- - - - NEPLATNÉ POLOŽKY ODSTRANĚNÉ Z REGISTRU - - - -
.
Wow6432Node-HKLM-Run-<NO NAME> - (no file)
Wow6432Node-HKLM-Run-vProt - c:\program files (x86)\AVG Secure Search\vprot.exe
.
.
.
--------------------- ZAMKNUTÉ KLÍČE V REGISTRU ---------------------
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\windows\\system32\\Macromed\\Flash\\FlashUtil64_11_4_402_287_ActiveX.exe,-101"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\Elevation]
"Enabled"=dword:00000001
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\LocalServer32]
@="c:\\windows\\system32\\Macromed\\Flash\\FlashUtil64_11_4_402_287_ActiveX.exe"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="IFlashBroker5"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\windows\\SysWOW64\\Macromed\\Flash\\FlashUtil32_11_4_402_287_ActiveX.exe,-101"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\Elevation]
"Enabled"=dword:00000001
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\LocalServer32]
@="c:\\windows\\SysWOW64\\Macromed\\Flash\\FlashUtil32_11_4_402_287_ActiveX.exe"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@="Shockwave Flash Object"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\InprocServer32]
@="c:\\windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_4_402_287.ocx"
"ThreadingModel"="Apartment"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\MiscStatus]
@="0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ProgID]
@="ShockwaveFlash.ShockwaveFlash.11"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
@="c:\\windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_4_402_287.ocx, 1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\TypeLib]
@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\Version]
@="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
@="ShockwaveFlash.ShockwaveFlash"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@="Macromedia Flash Factory Object"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\InprocServer32]
@="c:\\windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_4_402_287.ocx"
"ThreadingModel"="Apartment"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ProgID]
@="FlashFactory.FlashFactory.1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
@="c:\\windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_4_402_287.ocx, 1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\TypeLib]
@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\Version]
@="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
@="FlashFactory.FlashFactory"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="IFlashBroker5"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\McAfee]
"SymbolicLinkValue"=hex(6):5c,00,72,00,65,00,67,00,69,00,73,00,74,00,72,00,79,
00,5c,00,6d,00,61,00,63,00,68,00,69,00,6e,00,65,00,5c,00,53,00,6f,00,66,00,\
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\PCW\Security]
@Denied: (Full) (Everyone)
.
------------------------ Jiné spuštené procesy ------------------------
.
c:\program files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
c:\program files (x86)\Google\Update\GoogleUpdate.exe
c:\program files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe
c:\program files (x86)\AVG\AVG PC Tuneup\BoostSpeed.exe
c:\program files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe
c:\program files (x86)\Dell DataSafe Local Backup\TOASTER.EXE
c:\program files (x86)\Dell DataSafe Local Backup\COMPONENTS\SCHEDULER\STSERVICE.EXE
c:\program files (x86)\Dell DataSafe Local Backup\Components\DSUpdate\DSUpd.exe
c:\program files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
c:\program files (x86)\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe
.
**************************************************************************
.
Celkový čas: 2012-11-05 19:09:18 - počítač byl restartován
ComboFix-quarantined-files.txt 2012-11-05 18:09
ComboFix2.txt 2012-11-05 15:56
.
Před spuštěním: Volných bajtů: 94 514 208 768
Po spuštění: Volných bajtů: 94 181 859 328
.
- - End Of File - - 7C2DA1589D339D5B172B7B242D485A55

Re: prosím o kontrolu logu

Napsal: 05 lis 2012 20:51
od vyosek
Jak se chova PC :???:

Re: prosím o kontrolu logu

Napsal: 05 lis 2012 20:57
od Loutka
zatím dobrý......

Re: prosím o kontrolu logu

Napsal: 05 lis 2012 21:00
od vyosek
Tak jeste uklidime :James008:

:arrow: Odinstalujte Combofix
  • Prejmenujte ComboFix na Uninstall
  • Spustte jej
  • Tohle smaze Combofix a jeho slozky
:arrow: T-Cleaner http://vyosek.ic.cz/pro_usery/T-Cleaner.exe
  • Stahnete a spustte
  • Pro potvrzeni volby mackejte A, Enter
  • Po pouziti utilitu smazte
  • Antiviry touhou utilitu chybne oznacit jako vir - jedna se o falesny poplach - takze v pohode stahnete (pripadne vypnete pri stahovani antivir)
:arrow: OTC http://oldtimer.geekstogo.com/OTC.exe
  • Stahnete a spustte
  • Kliknete na CleanUp a potvrdte YES
  • Program uklidi a restartuje PC

:arrow: TFC http://oldtimer.geekstogo.com/TFC.exe
  • Stahnete a spustte
  • Kliknete na Start a potvrdte OK
  • Program uklidi a restartuje pc
  • Po pouziti utilitu smazte
:arrow: Stahnete Ccleaner http://forum.viry.cz/viewtopic.php?t=7478
Panel čistič
  • Vse nechte jak je, jen dejte Analyzovat a pote Spustit CCleaner
Panel registry
  • dejte Hledej problémy
  • nasledne Opravit problémy - zalohu registru doporucuji udelat, opravte vsechny problemy
  • postup opakujte dokud nebude bez problemu - vetsinou cca 3x
Panel nástroje
  • Zde muzete odinstalovat nepotrebne programy
CCleaner doporucuji pouzivat cca jednou za tyden

:arrow: A pokud nejsou problemy ci dotazy, je to z me strany vse :|

Re: prosím o kontrolu logu

Napsal: 05 lis 2012 21:23
od Loutka
Děkuji mnohokrát :closed:
Všechny časy jsou v UTC+01:00
Stránka 2 z 3

Založeno na phpBB® Forum Software © phpBB Limited

Český překlad – phpBB.cz