VIRY.CZ

ComboFix 12-12-14.01 - Roman 15.12.2012 22:26:48.3.4 - x64
Microsoft Windows 7 Home Premium 6.1.7601.1.1250.420.1029.18.3767.2300 [GMT 1:00]
Spuštěný z: c:\users\Roman\Desktop\ComboFix.exe
Použité ovládací přepínače :: c:\users\Roman\Desktop\CFScript.txt
AV: Avira Desktop *Disabled/Updated* {F67B4DE5-C0B4-6C3F-0EFF-6C83BD5D0C2C}
SP: Avira Desktop *Disabled/Updated* {4D1AAC01-E68E-63B1-344F-57F1C6DA4691}
SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.
FILE ::
"c:\windows\Tasks\GoogleUpdateTaskMachineCore.job"
"c:\windows\Tasks\GoogleUpdateTaskMachineUA.job"
.
.
((((((((((((((((((((((((( Soubory vytvořené od 2012-11-15 do 2012-12-15 )))))))))))))))))))))))))))))))
.
.
2012-12-15 21:36 . 2012-12-15 21:36 -------- d-----w- c:\users\hedev\AppData\Local\temp
2012-12-15 21:36 . 2012-12-15 21:36 -------- d-----w- c:\users\Default\AppData\Local\temp
2012-12-15 18:56 . 2012-12-15 18:59 -------- d-----w- c:\program files\trend micro
2012-12-15 18:56 . 2012-12-15 18:56 -------- d-----w- C:\rsit
2012-12-15 16:36 . 2012-12-15 17:03 -------- d-----w- c:\users\Roman\AppData\Local\Deployment
2012-12-15 14:51 . 2012-12-15 14:51 -------- d-----w- c:\windows\SysWow64\NV
2012-12-15 14:51 . 2012-12-15 14:51 -------- d-----w- c:\windows\system32\NV
2012-12-15 14:46 . 2012-12-15 14:51 -------- d-----w- c:\programdata\NVIDIA
2012-12-15 14:45 . 2012-12-15 14:46 -------- d-----w- c:\users\UpdatusUser
2012-12-15 14:45 . 2012-12-01 05:49 3663213 ----a-w- c:\windows\system32\nvcoproc.bin
2012-12-15 14:45 . 2012-12-01 05:49 2557800 ----a-w- c:\windows\system32\nvsvcr.dll
2012-12-15 14:45 . 2012-12-01 05:49 63336 ----a-w- c:\windows\system32\nvshext.dll
2012-12-15 14:45 . 2012-12-01 05:49 55144 ----a-w- c:\windows\system32\nv3dappshextr.dll
2012-12-15 14:45 . 2012-12-01 05:49 118120 ----a-w- c:\windows\system32\nvmctray.dll
2012-12-15 14:45 . 2012-12-01 05:49 890216 ----a-w- c:\windows\system32\nvvsvc.exe
2012-12-15 14:45 . 2012-12-01 05:49 877928 ----a-w- c:\windows\system32\nv3dappshext.dll
2012-12-15 14:45 . 2012-12-01 05:48 6223208 ----a-w- c:\windows\system32\nvcpl.dll
2012-12-15 14:45 . 2012-12-01 05:48 3311464 ----a-w- c:\windows\system32\nvsvc64.dll
2012-12-15 14:44 . 2012-12-15 14:44 -------- d-----w- c:\programdata\NVIDIA Corporation
2012-12-15 10:13 . 2012-12-15 10:13 -------- d-----w- c:\users\Roman\AppData\Roaming\Malwarebytes
2012-12-15 10:12 . 2012-12-15 10:13 -------- d-----w- c:\program files (x86)\Malwarebytes' Anti-Malware
2012-12-15 10:12 . 2012-09-29 18:54 25928 ----a-w- c:\windows\system32\drivers\mbam.sys
2012-12-14 22:29 . 2012-12-14 22:29 388096 ----a-r- c:\users\Roman\AppData\Roaming\Microsoft\Installer\{45A66726-69BC-466B-A7A4-12FCBA4883D7}\HiJackThis.exe
2012-12-14 22:29 . 2012-12-14 22:29 -------- d-----w- c:\program files (x86)\Trend Micro
2012-12-14 22:15 . 2012-12-11 18:30 270848 ----a-w- c:\windows\SysWow64\sbs_wminet_utils.dat
2012-12-14 17:25 . 2012-12-14 17:25 -------- d-----w- c:\program files (x86)\Reference Assemblies
2012-12-14 17:25 . 2012-12-14 17:25 -------- d-----w- c:\program files (x86)\MSBuild
2012-12-14 17:25 . 2012-12-14 17:25 -------- d-----w- c:\windows\SysWow64\XPSViewer
2012-12-14 17:25 . 2012-12-14 17:25 -------- d-----w- c:\program files\Reference Assemblies
2012-12-14 17:25 . 2012-12-14 17:25 -------- d-----w- c:\program files\MSBuild
2012-12-14 13:35 . 2012-12-14 13:35 0 ----a-w- c:\windows\system32\ngen.exe
2012-12-13 21:42 . 2012-12-13 21:42 -------- d-----w- c:\program files (x86)\DLLSuite
2012-12-13 21:30 . 2012-12-13 21:30 -------- d-----w- c:\users\Roman\AppData\Roaming\Avira
2012-12-13 21:24 . 2012-12-03 14:36 129216 ----a-w- c:\windows\system32\drivers\avipbb.sys
2012-12-13 21:24 . 2012-12-03 14:36 99912 ----a-w- c:\windows\system32\drivers\avgntflt.sys
2012-12-13 21:24 . 2012-11-16 19:17 27800 ----a-w- c:\windows\system32\drivers\avkmgr.sys
2012-12-13 21:24 . 2012-12-13 21:24 -------- d-----w- c:\programdata\Avira
2012-12-13 21:24 . 2012-12-13 21:24 -------- d-----w- c:\program files (x86)\Avira
2012-12-13 18:06 . 2012-12-13 21:01 -------- d-----w- c:\users\Roman\AppData\Roaming\TeamViewer
2012-12-12 18:54 . 2012-12-12 18:54 -------- d-----w- c:\program files (x86)\1C Company
2012-12-12 06:21 . 2012-11-09 05:45 2048 ----a-w- c:\windows\system32\tzres.dll
2012-12-12 06:21 . 2012-11-09 04:42 2048 ----a-w- c:\windows\SysWow64\tzres.dll
2012-12-12 06:21 . 2012-11-22 03:26 3149824 ----a-w- c:\windows\system32\win32k.sys
2012-12-12 06:21 . 2012-11-05 21:35 46080 ----a-w- c:\windows\system32\atmlib.dll
2012-12-12 06:21 . 2012-11-05 20:41 367616 ----a-w- c:\windows\system32\atmfd.dll
2012-12-12 06:21 . 2012-11-05 20:32 295424 ----a-w- c:\windows\SysWow64\atmfd.dll
2012-12-12 06:21 . 2012-11-05 20:32 34304 ----a-w- c:\windows\SysWow64\atmlib.dll
2012-12-11 20:06 . 2012-12-11 20:06 -------- d-----w- c:\program files (x86)\LogMeIn Hamachi
2012-12-11 18:38 . 2012-12-11 18:38 -------- d-----w- c:\users\Roman\AppData\Local\CrashRpt
2012-12-11 18:38 . 2012-12-11 18:38 -------- d-----w- c:\users\Roman\AppData\Local\Arktos
2012-12-11 18:30 . 2012-12-12 18:01 76232 ----a-w- c:\programdata\Microsoft\Windows Defender\Definition Updates\{C99E3AB5-E519-4825-BCC5-66183287388D}\offreg.dll
2012-12-11 18:30 . 2012-12-11 18:30 410112 ----a-w- c:\windows\system32\sbs_mscorrc.dat
2012-12-11 18:30 . 2012-12-11 18:30 309760 ----a-w- c:\windows\system32\SharedReg.dll
2012-12-11 18:30 . 2012-12-11 18:30 270848 ----a-w- c:\windows\system32\sbs_mscorsec.dat
2012-12-11 15:36 . 2012-11-08 17:24 9125352 ----a-w- c:\programdata\Microsoft\Windows Defender\Definition Updates\{C99E3AB5-E519-4825-BCC5-66183287388D}\mpengine.dll
2012-12-11 13:40 . 2012-12-11 13:40 -------- d-sh--w- c:\windows\SysWow64\%APPDATA%
2012-12-10 19:47 . 2012-12-10 19:47 -------- d-----w- c:\users\Roman\AppData\Roaming\HD Tune Pro
2012-12-10 19:46 . 2012-12-10 19:46 -------- d-----w- c:\program files (x86)\HD Tune Pro
2012-12-10 19:12 . 2012-12-14 14:23 -------- d-----w- c:\program files (x86)\SpeedFan
2012-12-05 14:11 . 2012-12-05 14:11 -------- d-----w- c:\users\Roman\AppData\Local\ESN
2012-11-29 20:51 . 2012-11-29 20:51 -------- d-----w- c:\programdata\Orbit
2012-11-29 20:24 . 2012-11-29 21:12 -------- d-----w- c:\program files (x86)\OSCAR Editor
2012-11-29 20:06 . 2012-11-29 20:24 -------- d-----w- C:\Oscar
2012-11-29 18:49 . 2012-11-29 18:49 -------- d-----w- c:\users\hedev\AppData\Local\New Folder
2012-11-28 02:18 . 2012-12-07 13:10 -------- d-----w- c:\programdata\Spybot - Search & Destroy
2012-11-28 02:17 . 2012-11-28 02:17 -------- d-----w- c:\users\Roman\AppData\Local\Programs
2012-11-27 23:00 . 2012-11-27 23:00 -------- d-----w- c:\programdata\Anvisoft
2012-11-27 21:03 . 2012-11-27 21:03 -------- d-----w- c:\programdata\Malwarebytes
2012-11-25 00:37 . 2012-11-25 00:37 -------- d-----w- c:\program files (x86)\AGEIA Technologies
2012-11-24 11:32 . 2011-03-19 14:16 1417216 ----a-w- c:\windows\SysWow64\rapture3d_oal.dll
2012-11-24 11:32 . 2010-09-22 12:12 19087360 ----a-w- c:\windows\SysWow64\mkl_blueripple.dll
2012-11-24 11:32 . 2012-11-24 11:32 -------- d-----w- c:\program files (x86)\BRS
2012-11-24 09:27 . 2012-11-24 09:27 -------- d-----w- c:\users\Roman\AppData\Local\SCE
2012-11-24 09:27 . 2012-11-24 09:27 -------- d-----w- C:\Crash
2012-11-24 09:27 . 2012-11-24 09:27 -------- d-----w- c:\users\Roman\AppData\Local\Sony Online Entertainment
2012-11-23 23:54 . 2012-11-23 23:54 -------- d-----w- c:\users\Roman\AppData\Roaming\Nitro
2012-11-23 23:54 . 2012-11-23 23:54 -------- d-----w- c:\users\Roman\AppData\Roaming\FileOpen
2012-11-23 23:54 . 2012-11-23 23:54 -------- d-----w- c:\programdata\FileOpen
2012-11-23 23:53 . 2012-11-23 23:53 -------- d-----w- c:\programdata\Nitro
2012-11-23 23:49 . 2012-11-23 23:49 -------- d-----w- c:\users\Roman\AppData\Roaming\ProgSense
2012-11-23 23:47 . 2012-11-23 23:56 -------- d-----w- c:\users\Roman\AppData\Roaming\Orbit
2012-11-22 21:52 . 2012-12-04 14:18 -------- d-----w- c:\programdata\Ubisoft
2012-11-22 21:50 . 2012-11-22 21:50 -------- d-----w- c:\users\Roman\AppData\Roaming\PunkBuster
2012-11-22 18:47 . 2012-12-06 13:47 -------- d-----w- c:\users\Roman\AppData\Local\Google
2012-11-22 18:47 . 2012-12-06 13:46 -------- d-----w- c:\program files (x86)\Google
2012-11-20 17:25 . 2012-11-20 17:25 -------- d-----w- c:\users\Roman\AppData\Roaming\Theta
2012-11-20 15:56 . 2012-11-20 15:56 -------- d-----w- c:\programdata\IObit
2012-11-20 15:56 . 2012-11-20 15:56 -------- d-----w- c:\program files (x86)\IObit
2012-11-20 15:48 . 2012-11-20 15:48 -------- d-----w- c:\users\Roman\AppData\Local\Razer
2012-11-20 15:47 . 2012-11-20 15:47 -------- d-----w- c:\programdata\Razer
2012-11-20 15:47 . 2012-11-20 15:47 -------- d-----w- c:\program files (x86)\Razer
2012-11-20 13:45 . 2012-11-20 14:03 -------- d-----w- c:\users\Roman\AppData\Local\Ubisoft Game Launcher
2012-11-20 13:44 . 2012-11-20 19:22 -------- d-----w- c:\users\Roman\AppData\Roaming\Assassin's Creed III
2012-11-20 13:44 . 2012-11-20 13:44 -------- d-----w- c:\program files (x86)\Ubisoft
2012-11-18 19:48 . 2012-11-18 19:48 -------- d-----r- C:\MSOCache
2012-11-18 09:42 . 2012-11-18 09:42 -------- d-----w- c:\users\Roman\AppData\Local\SWTOR
2012-11-16 17:39 . 2012-11-16 17:39 -------- d-----r- C:\Sandbox
2012-11-16 17:19 . 2012-11-18 19:39 -------- d-----w- c:\program files\Sandboxie
.
.
.
(((((((((((((((((((((((((((((((((((((((( Find3M výpis ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2012-12-15 17:04 . 2012-08-28 17:40 281120 ----a-w- c:\windows\SysWow64\PnkBstrB.xtr
2012-12-15 17:04 . 2012-08-24 16:54 281120 ----a-w- c:\windows\SysWow64\PnkBstrB.exe
2012-12-15 17:00 . 2012-08-24 16:54 281120 ----a-w- c:\windows\SysWow64\PnkBstrB.ex0
2012-12-12 17:20 . 2012-08-23 14:24 697272 ----a-w- c:\windows\SysWow64\FlashPlayerApp.exe
2012-12-12 17:20 . 2011-10-18 08:33 73656 ----a-w- c:\windows\SysWow64\FlashPlayerCPLApp.cpl
2012-12-12 14:17 . 2012-08-24 04:52 67413224 ----a-w- c:\windows\system32\MRT.exe
2012-11-24 11:32 . 2012-10-28 13:14 466456 ----a-w- c:\windows\system32\wrap_oal.dll
2012-11-24 11:32 . 2012-10-28 13:14 444952 ----a-w- c:\windows\SysWow64\wrap_oal.dll
2012-11-24 11:32 . 2012-10-28 13:14 122904 ----a-w- c:\windows\system32\OpenAL32.dll
2012-11-24 11:32 . 2012-10-28 13:14 109080 ----a-w- c:\windows\SysWow64\OpenAL32.dll
2012-11-11 11:43 . 2012-11-11 11:43 1700352 ----a-w- c:\windows\SysWow64\gdiplus.dll
2012-10-30 18:12 . 2012-08-24 16:54 76888 ----a-w- c:\windows\SysWow64\PnkBstrA.exe
2012-10-28 17:14 . 2010-11-21 03:23 2851840 ----a-w- c:\windows\system32\themeui.dll
2012-10-28 17:14 . 2009-07-13 23:54 44544 ----a-w- c:\windows\system32\themeservice.dll
2012-10-28 17:14 . 2009-07-13 23:55 332288 ----a-w- c:\windows\system32\uxtheme.dll
2012-10-16 08:38 . 2012-11-28 17:27 135168 ----a-w- c:\windows\apppatch\AppPatch64\AcXtrnal.dll
2012-10-16 08:38 . 2012-11-28 17:27 350208 ----a-w- c:\windows\apppatch\AppPatch64\AcLayers.dll
2012-10-16 07:39 . 2012-11-28 17:27 561664 ----a-w- c:\windows\apppatch\AcLayers.dll
2012-10-09 18:17 . 2012-11-15 13:20 55296 ----a-w- c:\windows\system32\dhcpcsvc6.dll
2012-10-09 18:17 . 2012-11-15 13:20 226816 ----a-w- c:\windows\system32\dhcpcore6.dll
2012-10-09 17:40 . 2012-11-15 13:20 44032 ----a-w- c:\windows\SysWow64\dhcpcsvc6.dll
2012-10-09 17:40 . 2012-11-15 13:20 193536 ----a-w- c:\windows\SysWow64\dhcpcore6.dll
2012-10-07 14:20 . 2012-10-07 14:20 955888 ----a-w- c:\windows\system32\npDeployJava1.dll
2012-10-07 14:20 . 2012-10-07 14:20 839152 ----a-w- c:\windows\system32\deployJava1.dll
2012-10-07 14:20 . 2012-10-07 14:20 268784 ----a-w- c:\windows\system32\javaws.exe
2012-10-07 14:20 . 2012-10-07 14:20 189424 ----a-w- c:\windows\system32\javaw.exe
2012-10-07 14:20 . 2012-10-07 14:20 188912 ----a-w- c:\windows\system32\java.exe
2012-10-04 16:40 . 2012-12-12 06:20 44032 ----a-w- c:\windows\apppatch\acwow64.dll
2012-10-03 17:56 . 2012-11-15 13:22 1914248 ----a-w- c:\windows\system32\drivers\tcpip.sys
2012-10-03 17:44 . 2012-11-15 13:22 303104 ----a-w- c:\windows\system32\nlasvc.dll
2012-10-03 17:44 . 2012-11-15 13:22 70656 ----a-w- c:\windows\system32\nlaapi.dll
2012-10-03 17:44 . 2012-11-15 13:22 246272 ----a-w- c:\windows\system32\netcorehc.dll
2012-10-03 17:44 . 2012-11-15 13:22 18944 ----a-w- c:\windows\system32\netevent.dll
2012-10-03 17:44 . 2012-11-15 13:22 216576 ----a-w- c:\windows\system32\ncsi.dll
2012-10-03 17:42 . 2012-11-15 13:22 569344 ----a-w- c:\windows\system32\iphlpsvc.dll
2012-10-03 16:42 . 2012-11-15 13:22 175104 ----a-w- c:\windows\SysWow64\netcorehc.dll
2012-10-03 16:42 . 2012-11-15 13:22 18944 ----a-w- c:\windows\SysWow64\netevent.dll
2012-10-03 16:42 . 2012-11-15 13:22 156672 ----a-w- c:\windows\SysWow64\ncsi.dll
2012-10-03 16:07 . 2012-11-15 13:22 45568 ----a-w- c:\windows\system32\drivers\tcpipreg.sys
2012-09-25 22:47 . 2012-11-15 13:01 78336 ----a-w- c:\windows\SysWow64\synceng.dll
2012-09-25 22:46 . 2012-11-15 13:01 95744 ----a-w- c:\windows\system32\synceng.dll
2012-09-24 21:16 . 2012-10-20 07:26 95208 ----a-w- c:\windows\SysWow64\WindowsAccessBridge-32.dll
2012-09-18 08:24 . 2012-08-23 14:15 746984 ----a-w- c:\windows\SysWow64\deployJava1.dll
2012-09-18 08:24 . 2012-08-23 14:15 821736 ----a-w- c:\windows\SysWow64\npDeployJava1.dll
.
.
(((((((((((((((((((((((((((((((((( Spouštěcí body v registru )))))))))))))))))))))))))))))))))))))))))))))
.
.
*Poznámka* prázdné záznamy a legitimní výchozí údaje nejsou zobrazeny.
REGEDIT4
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Sidebar"="c:\program files\Windows Sidebar\sidebar.exe" [2010-11-21 1475584]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]
"LManager"="c:\program files (x86)\Launch Manager\LManager.exe" [2010-06-22 968272]
"ACPW05EN"="c:\program files (x86)\ACD Systems\ACDSee Pro\5.0\ACDSeeProInTouch2.exe" [2011-11-16 822384]
"LogMeIn Hamachi Ui"="c:\program files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe" [2012-12-10 2254768]
"avgnt"="c:\program files (x86)\Avira\AntiVir Desktop\avgnt.exe" [2012-12-04 384800]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorAdmin"= 0 (0x0)
"ConsentPromptBehaviorUser"= 3 (0x3)
"EnableLUA"= 0 (0x0)
"EnableUIADesktopToggle"= 0 (0x0)
"PromptOnSecureDesktop"= 0 (0x0)
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\windows]
"LoadAppInit_DLLs"=1 (0x1)
"AppInit_DLLs"=c:\windows\SysWOW64\nvinit.dll
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\drivers32]
"aux"=wdmaud.drv
.
[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\session manager]
BootExecute REG_MULTI_SZ autocheck autochk *\0\0sdnclean64.exe
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MCODS]
@=""
.
R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2010-03-18 138576]
R3 ALSysIO;ALSysIO;c:\users\Roman\AppData\Local\Temp\ALSysIO64.sys [x]
R3 RSUSBSTOR;RtsUStor.Sys Realtek USB Card Reader;c:\windows\system32\Drivers\RtsUStor.sys [2010-09-22 243712]
R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys [2010-11-21 59392]
R3 TsUsbGD;Remote Desktop Generic USB Device;c:\windows\system32\drivers\TsUsbGD.sys [2010-11-21 31232]
R3 TunngleService;TunngleService;c:\program files (x86)\Tunngle\TnglCtrl.exe [2012-10-02 743320]
R3 WatAdminSvc;Služba Technologie aktivace Windows;c:\windows\system32\Wat\WatAdminSvc.exe [2012-08-24 1255736]
R3 WinRing0_1_2_0;WinRing0_1_2_0;c:\program files (x86)\IObit\Game Booster 3\Driver\WinRing0x64.sys [2010-11-01 14544]
R4 wlcrasvc;Windows Live Mesh remote connections service;c:\program files\Windows Live\Mesh\wlcrasvc.exe [2010-09-23 57184]
S0 nvpciflt;nvpciflt;c:\windows\system32\DRIVERS\nvpciflt.sys [2012-12-03 30056]
S1 avkmgr;avkmgr;c:\windows\system32\DRIVERS\avkmgr.sys [2012-11-16 27800]
S1 dtsoftbus01;DAEMON Tools Virtual Bus Driver;c:\windows\system32\DRIVERS\dtsoftbus01.sys [2012-08-23 283200]
S2 AntiVirSchedulerService;Avira Scheduler;c:\program files (x86)\Avira\AntiVir Desktop\sched.exe [2012-12-04 85280]
S2 cvhsvc;Client Virtualization Handler;c:\program files (x86)\Common Files\Microsoft Shared\Virtualization Handler\CVHSVC.EXE [2010-02-28 821664]
S2 DsiWMIService;Dritek WMI Service;c:\program files (x86)\Launch Manager\dsiwmis.exe [2010-06-22 321104]
S2 Hamachi2Svc;LogMeIn Hamachi Tunneling Engine;c:\program files (x86)\LogMeIn Hamachi\hamachi-2.exe [2012-12-10 2465712]
S2 IAStorDataMgrSvc;Intel(R) Rapid Storage Technology;c:\program files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe [2010-04-13 13336]
S2 Live Updater Service;Live Updater Service;c:\program files\Acer\Acer Updater\UpdaterService.exe [2011-04-22 244624]
S2 sftlist;Application Virtualization Client;c:\program files (x86)\Microsoft Application Virtualization Client\sftlist.exe [2009-12-02 483688]
S2 SharedReg;Shared Registry;c:\windows\system32\svchost.exe [2009-07-14 27136]
S2 UNS;Intel(R) Management & Security Application User Notification Service;c:\program files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe [2010-03-18 2320920]
S3 ETD;ELAN PS/2 Port Input Device;c:\windows\system32\DRIVERS\ETD.sys [2010-04-13 135560]
S3 HECIx64;Intel(R) Management Engine Interface;c:\windows\system32\drivers\HECIx64.sys [2009-09-17 56344]
S3 Impcd;Impcd;c:\windows\system32\DRIVERS\Impcd.sys [2010-02-26 158976]
S3 IntcDAud;Intel(R) Display Audio;c:\windows\system32\DRIVERS\IntcDAud.sys [2010-06-21 287232]
S3 k57nd60a;Broadcom NetLink (TM) Gigabit Ethernet - NDIS 6.0;c:\windows\system32\DRIVERS\k57nd60a.sys [2010-05-15 384040]
S3 Sftfs;Sftfs;c:\windows\system32\DRIVERS\Sftfslh.sys [2009-12-02 721768]
S3 Sftplay;Sftplay;c:\windows\system32\DRIVERS\Sftplaylh.sys [2009-12-02 269672]
S3 Sftredir;Sftredir;c:\windows\system32\DRIVERS\Sftredirlh.sys [2009-12-02 25960]
S3 Sftvol;Sftvol;c:\windows\system32\DRIVERS\Sftvollh.sys [2009-12-02 22376]
S3 sftvsa;Application Virtualization Service Agent;c:\program files (x86)\Microsoft Application Virtualization Client\sftvsa.exe [2009-12-02 209768]
S3 tap0901t;TAP-Win32 Adapter V9 (Tunngle);c:\windows\system32\DRIVERS\tap0901t.sys [2009-09-16 31232]
.
.
Obsah adresáře 'Naplánované úlohy'
.
2012-12-15 c:\windows\Tasks\Adobe Flash Player Updater.job
- c:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2012-08-23 17:20]
.
2012-12-15 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
- c:\program files (x86)\Google\Update\GoogleUpdate.exe [2012-11-22 18:47]
.
2012-12-15 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
- c:\program files (x86)\Google\Update\GoogleUpdate.exe [2012-11-22 18:47]
.
.
--------- X64 Entries -----------
.
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"IgfxTray"="c:\windows\system32\igfxtray.exe" [2010-07-23 161304]
"HotKeysCmds"="c:\windows\system32\hkcmd.exe" [2010-07-23 386584]
"Persistence"="c:\windows\system32\igfxpers.exe" [2010-07-23 415256]
"RtHDVCpl"="c:\program files\Realtek\Audio\HDA\RAVCpl64.exe" [2010-06-22 10920552]
"ETDWare"="c:\program files (x86)\Elantech\ETDCtrl.exe" [BU]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
"AppInit_DLLs"=c:\windows\System32\nvinitx.dll
.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Svchost - NetSvcs
SharedReg
.
------- Doplňkový sken -------
.
uLocal Page = c:\windows\system32\blank.htm
mStart Page = hxxp://www.google.com
mLocal Page = c:\windows\SYSTEM32\blank.htm
IE: {{781B39EC-2E18-41FC-9B00-B84E4FFCA85F} - c:\program files (x86)\ICQ7M\ICQ.exe
TCP: DhcpNameServer = 192.168.0.1
FF - ProfilePath - c:\users\Roman\AppData\Roaming\Mozilla\Firefox\Profiles\n0ku17ws.default\
FF - prefs.js: browser.startup.homepage - www.seznam.cz
FF - ExtSQL: 2012-11-30 13:43; {d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}; c:\users\Roman\AppData\Roaming\Mozilla\Firefox\Profiles\n0ku17ws.default\extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi
.
- - - - NEPLATNÉ POLOŽKY ODSTRANĚNÉ Z REGISTRU - - - -
.
Toolbar-Locked - (no file)
AddRemove-Fire Skull - c:\program files (x86)\ScreenSaverGift\Fire Skull\Uninstall Fire Skull Screensaver.exe
AddRemove-High Tech - c:\program files (x86)\ScreenSaverGift\High Tech\Uninstall High Tech Screensaver.exe
.
.
.
--------------------- ZAMKNUTÉ KLÍČE V REGISTRU ---------------------
.
[HKEY_USERS\S-1-5-21-2288038726-1248617806-2769381316-1002\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.032\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee Pro 5.032"
.
[HKEY_USERS\S-1-5-21-2288038726-1248617806-2769381316-1002\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.abr\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee Pro 5.abr"
.
[HKEY_USERS\S-1-5-21-2288038726-1248617806-2769381316-1002\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.ani\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee Pro 5.ani"
.
[HKEY_USERS\S-1-5-21-2288038726-1248617806-2769381316-1002\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.apd\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee Pro 5.apd"
.
[HKEY_USERS\S-1-5-21-2288038726-1248617806-2769381316-1002\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.arw\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee Pro 5.arw"
.
[HKEY_USERS\S-1-5-21-2288038726-1248617806-2769381316-1002\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.bay\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee Pro 5.bay"
.
[HKEY_USERS\S-1-5-21-2288038726-1248617806-2769381316-1002\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.bmp\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee Pro 5.bmp"
.
[HKEY_USERS\S-1-5-21-2288038726-1248617806-2769381316-1002\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.bw\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee Pro 5.bw"
.
[HKEY_USERS\S-1-5-21-2288038726-1248617806-2769381316-1002\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.cr2\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee Pro 5.cr2"
.
[HKEY_USERS\S-1-5-21-2288038726-1248617806-2769381316-1002\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.crw\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee Pro 5.crw"
.
[HKEY_USERS\S-1-5-21-2288038726-1248617806-2769381316-1002\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.cs1\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee Pro 5.cs1"
.
[HKEY_USERS\S-1-5-21-2288038726-1248617806-2769381316-1002\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.cur\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee Pro 5.cur"
.
[HKEY_USERS\S-1-5-21-2288038726-1248617806-2769381316-1002\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.dcr\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee Pro 5.dcr"
.
[HKEY_USERS\S-1-5-21-2288038726-1248617806-2769381316-1002\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.dcx\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee Pro 5.dcx"
.
[HKEY_USERS\S-1-5-21-2288038726-1248617806-2769381316-1002\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.dib\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee Pro 5.dib"
.
[HKEY_USERS\S-1-5-21-2288038726-1248617806-2769381316-1002\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.djv\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee Pro 5.djv"
.
[HKEY_USERS\S-1-5-21-2288038726-1248617806-2769381316-1002\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.djvu\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee Pro 5.djvu"
.
[HKEY_USERS\S-1-5-21-2288038726-1248617806-2769381316-1002\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.dng\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee Pro 5.dng"
.
[HKEY_USERS\S-1-5-21-2288038726-1248617806-2769381316-1002\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.emf\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee Pro 5.emf"
.
[HKEY_USERS\S-1-5-21-2288038726-1248617806-2769381316-1002\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.eps\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee Pro 5.eps"
.
[HKEY_USERS\S-1-5-21-2288038726-1248617806-2769381316-1002\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.erf\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee Pro 5.erf"
.
[HKEY_USERS\S-1-5-21-2288038726-1248617806-2769381316-1002\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.fff\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee Pro 5.fff"
.
[HKEY_USERS\S-1-5-21-2288038726-1248617806-2769381316-1002\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.fpx\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee Pro 5.fpx"
.
[HKEY_USERS\S-1-5-21-2288038726-1248617806-2769381316-1002\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.gif\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee Pro 5.gif"
.
[HKEY_USERS\S-1-5-21-2288038726-1248617806-2769381316-1002\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.hdr\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee Pro 5.hdr"
.
[HKEY_USERS\S-1-5-21-2288038726-1248617806-2769381316-1002\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.icl\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee Pro 5.icl"
.
[HKEY_USERS\S-1-5-21-2288038726-1248617806-2769381316-1002\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.icn\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee Pro 5.icn"
.
[HKEY_USERS\S-1-5-21-2288038726-1248617806-2769381316-1002\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.iff\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee Pro 5.iff"
.
[HKEY_USERS\S-1-5-21-2288038726-1248617806-2769381316-1002\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.ilbm\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee Pro 5.ilbm"
.
[HKEY_USERS\S-1-5-21-2288038726-1248617806-2769381316-1002\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.int\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee Pro 5.int"
.
[HKEY_USERS\S-1-5-21-2288038726-1248617806-2769381316-1002\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.inta\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee Pro 5.inta"
.
[HKEY_USERS\S-1-5-21-2288038726-1248617806-2769381316-1002\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.iw4\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee Pro 5.iw4"
.
[HKEY_USERS\S-1-5-21-2288038726-1248617806-2769381316-1002\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.j2c\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee Pro 5.j2c"
.
[HKEY_USERS\S-1-5-21-2288038726-1248617806-2769381316-1002\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.j2k\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee Pro 5.j2k"
.
[HKEY_USERS\S-1-5-21-2288038726-1248617806-2769381316-1002\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.jbr\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee Pro 5.jbr"
.
[HKEY_USERS\S-1-5-21-2288038726-1248617806-2769381316-1002\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.jfif\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee Pro 5.jfif"
.
[HKEY_USERS\S-1-5-21-2288038726-1248617806-2769381316-1002\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.jif\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee Pro 5.jif"
.
[HKEY_USERS\S-1-5-21-2288038726-1248617806-2769381316-1002\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.jp2\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee Pro 5.jp2"
.
[HKEY_USERS\S-1-5-21-2288038726-1248617806-2769381316-1002\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.jpc\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee Pro 5.jpc"
.
[HKEY_USERS\S-1-5-21-2288038726-1248617806-2769381316-1002\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.jpe\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee Pro 5.jpe"
.
[HKEY_USERS\S-1-5-21-2288038726-1248617806-2769381316-1002\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.jpeg\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee Pro 5.jpeg"
.
[HKEY_USERS\S-1-5-21-2288038726-1248617806-2769381316-1002\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.jpg\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee Pro 5.jpg"
.
[HKEY_USERS\S-1-5-21-2288038726-1248617806-2769381316-1002\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.jpk\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee Pro 5.jpk"
.
[HKEY_USERS\S-1-5-21-2288038726-1248617806-2769381316-1002\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.jpx\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee Pro 5.jpx"
.
[HKEY_USERS\S-1-5-21-2288038726-1248617806-2769381316-1002\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.kdc\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee Pro 5.kdc"
.
[HKEY_USERS\S-1-5-21-2288038726-1248617806-2769381316-1002\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.lbm\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee Pro 5.lbm"
.
[HKEY_USERS\S-1-5-21-2288038726-1248617806-2769381316-1002\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.mef\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee Pro 5.mef"
.
[HKEY_USERS\S-1-5-21-2288038726-1248617806-2769381316-1002\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.mos\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee Pro 5.mos"
.
[HKEY_USERS\S-1-5-21-2288038726-1248617806-2769381316-1002\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.mrw\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee Pro 5.mrw"
.
[HKEY_USERS\S-1-5-21-2288038726-1248617806-2769381316-1002\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.nef\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee Pro 5.nef"
.
[HKEY_USERS\S-1-5-21-2288038726-1248617806-2769381316-1002\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.nrw\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee Pro 5.nrw"
.
[HKEY_USERS\S-1-5-21-2288038726-1248617806-2769381316-1002\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.orf\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee Pro 5.orf"
.
[HKEY_USERS\S-1-5-21-2288038726-1248617806-2769381316-1002\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.pbm\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee Pro 5.pbm"
.
[HKEY_USERS\S-1-5-21-2288038726-1248617806-2769381316-1002\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.pbr\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee Pro 5.pbr"
.
[HKEY_USERS\S-1-5-21-2288038726-1248617806-2769381316-1002\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.pcd\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee Pro 5.pcd"
.
[HKEY_USERS\S-1-5-21-2288038726-1248617806-2769381316-1002\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.pct\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee Pro 5.pct"
.
[HKEY_USERS\S-1-5-21-2288038726-1248617806-2769381316-1002\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.pcx\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee Pro 5.pcx"
.
[HKEY_USERS\S-1-5-21-2288038726-1248617806-2769381316-1002\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.pef\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee Pro 5.pef"
.
[HKEY_USERS\S-1-5-21-2288038726-1248617806-2769381316-1002\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.pgm\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee Pro 5.pgm"
.
[HKEY_USERS\S-1-5-21-2288038726-1248617806-2769381316-1002\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.pic\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee Pro 5.pic"
.
[HKEY_USERS\S-1-5-21-2288038726-1248617806-2769381316-1002\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.pict\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee Pro 5.pict"
.
[HKEY_USERS\S-1-5-21-2288038726-1248617806-2769381316-1002\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.pix\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee Pro 5.pix"
.
[HKEY_USERS\S-1-5-21-2288038726-1248617806-2769381316-1002\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.png\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee Pro 5.png"
.
[HKEY_USERS\S-1-5-21-2288038726-1248617806-2769381316-1002\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.ppm\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee Pro 5.ppm"
.
[HKEY_USERS\S-1-5-21-2288038726-1248617806-2769381316-1002\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.psd\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee Pro 5.psd"
.
[HKEY_USERS\S-1-5-21-2288038726-1248617806-2769381316-1002\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.psp\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee Pro 5.psp"
.
[HKEY_USERS\S-1-5-21-2288038726-1248617806-2769381316-1002\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.pspbrush\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee Pro 5.pspbrush"
.
[HKEY_USERS\S-1-5-21-2288038726-1248617806-2769381316-1002\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.pspimage\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee Pro 5.pspimage"
.
[HKEY_USERS\S-1-5-21-2288038726-1248617806-2769381316-1002\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.raf\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee Pro 5.raf"
.
[HKEY_USERS\S-1-5-21-2288038726-1248617806-2769381316-1002\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.ras\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee Pro 5.ras"
.
[HKEY_USERS\S-1-5-21-2288038726-1248617806-2769381316-1002\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.raw\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee Pro 5.raw"
.
[HKEY_USERS\S-1-5-21-2288038726-1248617806-2769381316-1002\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.rgb\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee Pro 5.rgb"
.
[HKEY_USERS\S-1-5-21-2288038726-1248617806-2769381316-1002\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.rgba\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee Pro 5.rgba"
.
[HKEY_USERS\S-1-5-21-2288038726-1248617806-2769381316-1002\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.rle\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee Pro 5.rle"
.
[HKEY_USERS\S-1-5-21-2288038726-1248617806-2769381316-1002\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.rsb\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee Pro 5.rsb"
.
[HKEY_USERS\S-1-5-21-2288038726-1248617806-2769381316-1002\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.rw2\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee Pro 5.rw2"
.
[HKEY_USERS\S-1-5-21-2288038726-1248617806-2769381316-1002\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.rwl\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee Pro 5.rwl"
.
[HKEY_USERS\S-1-5-21-2288038726-1248617806-2769381316-1002\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.sgi\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee Pro 5.sgi"
.
[HKEY_USERS\S-1-5-21-2288038726-1248617806-2769381316-1002\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.sr2\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee Pro 5.sr2"
.
[HKEY_USERS\S-1-5-21-2288038726-1248617806-2769381316-1002\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.srf\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee Pro 5.srf"
.
[HKEY_USERS\S-1-5-21-2288038726-1248617806-2769381316-1002\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.srw\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee Pro 5.srw"
.
[HKEY_USERS\S-1-5-21-2288038726-1248617806-2769381316-1002\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.tga\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee Pro 5.tga"
.
[HKEY_USERS\S-1-5-21-2288038726-1248617806-2769381316-1002\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.thm\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee Pro 5.thm"
.
[HKEY_USERS\S-1-5-21-2288038726-1248617806-2769381316-1002\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.tif\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee Pro 5.tif"
.
[HKEY_USERS\S-1-5-21-2288038726-1248617806-2769381316-1002\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.tiff\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee Pro 5.tiff"
.
[HKEY_USERS\S-1-5-21-2288038726-1248617806-2769381316-1002\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.ttc\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee Pro 5.ttc"
.
[HKEY_USERS\S-1-5-21-2288038726-1248617806-2769381316-1002\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.ttf\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee Pro 5.ttf"
.
[HKEY_USERS\S-1-5-21-2288038726-1248617806-2769381316-1002\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.v50po\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee Pro 5.v50po"
.
[HKEY_USERS\S-1-5-21-2288038726-1248617806-2769381316-1002\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.v50pp\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee Pro 5.v50pp"
.
[HKEY_USERS\S-1-5-21-2288038726-1248617806-2769381316-1002\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.v50ppf\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee Pro 5.v50ppf"
.
[HKEY_USERS\S-1-5-21-2288038726-1248617806-2769381316-1002\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.wbm\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee Pro 5.wbm"
.
[HKEY_USERS\S-1-5-21-2288038726-1248617806-2769381316-1002\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.wbmp\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee Pro 5.wbmp"
.
[HKEY_USERS\S-1-5-21-2288038726-1248617806-2769381316-1002\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.wmf\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee Pro 5.wmf"
.
[HKEY_USERS\S-1-5-21-2288038726-1248617806-2769381316-1002\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.xbm\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee Pro 5.xbm"
.
[HKEY_USERS\S-1-5-21-2288038726-1248617806-2769381316-1002\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.xif\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee Pro 5.xif"
.
[HKEY_USERS\S-1-5-21-2288038726-1248617806-2769381316-1002\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.xmp\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee Pro 5.xmp"
.
[HKEY_USERS\S-1-5-21-2288038726-1248617806-2769381316-1002\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.xpm\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee Pro 5.xpm"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil64_11_5_502_135_ActiveX.exe,-101"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\Elevation]
"Enabled"=dword:00000001
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\LocalServer32]
@="c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil64_11_5_502_135_ActiveX.exe"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="IFlashBroker5"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\McAfee]
"SymbolicLinkValue"=hex(6):5c,00,72,00,65,00,67,00,69,00,73,00,74,00,72,00,79,
00,5c,00,6d,00,61,00,63,00,68,00,69,00,6e,00,65,00,5c,00,53,00,6f,00,66,00,\
.
------------------------ Jiné spuštené procesy ------------------------
.
c:\program files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
c:\program files (x86)\Avira\AntiVir Desktop\avguard.exe
c:\program files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
c:\windows\SysWOW64\PnkBstrA.exe
c:\windows\SysWOW64\mscorsvw.exe
c:\program files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
.
**************************************************************************
.
Celkový čas: 2012-12-15 22:44:10 - počítač byl restartován
ComboFix-quarantined-files.txt 2012-12-15 21:44
ComboFix2.txt 2012-12-15 21:19
ComboFix3.txt 2012-12-15 18:51
.
Před spuštěním: Volných bajtů: 152 425 525 248
Po spuštění: Volných bajtů: 152 329 977 856
.
- - End Of File - - 9CC075787B109F0125D60BDCD24A192E

Log již vypadá OK. Virus, který se tváří jako nVidia ovladač však v PC nebyl. Nastala nějaká změna?

ne pořád vytížení CPU 100% a z 45 stupňů se to zvedne i na 80 a to jen na ploše ale když zapnu správce úloh tak se to přeruší. a při všem co jste psal tak sem správce vypnul aby to bylo aktivováno a aby to našlo

Otevřte správce úloh a zjistěte, který proces nejvíce zatěžuje systém.

no to je právě to že když otevřu správce úloh tak to zmizí tak budu muset sehnat nějaký jiný program který to ukáže a nezmizí to. klidně natočím video aby jste viděl jak to je protože se to blbě popisuje ale trochu to pomohlo protože grafiku už to vynechalo a nevyťežuje ji takže je pokrok a ty teploty už jsou jenom kolem 60 °C CPU takže taky už se to ochladilo ale správně má být kolem 35-40 °C

Vyzkoušejte ProcessExplorer: http://www.stahuj.centrum.cz/utility_a_ ... -explorer/ . Je trochu sofistikovanější, než správce úloh. Pokud nebudeme vědět, co PC zatěžuje, nelza dát kvalifikovanou radu.

taky to neukáže vždy když to pustím tak to vyťížení CPU zase klesne zkusím natočit video...

http://www.ulozto.cz/xuHm1pz/20121216-1220-30-avi tak tady to je a je tam jako malý vyťížení CPU z důvodu natáčení jinak mám normálně kolem 5% ale jakmile se vypne správce úloh naskočí teploty a 100% vyťížení a trochu se to seká ale de to tam vidět

Lituji, ale nic tam nevidím. V taskmanageru je přes 70% volných syst. prostředků, takže nechápu, co to může zatěžovat. Udělejte sken AVPTool: http://www.viry.cz/forum/viewtopic.php?f=29&t=58179 a dejte log.

Status: Deleted (events: 1)
16.12.2012 20:49:17 Deleted malware HackTool.Win32.BruteForce.it C:\Program Files (x86)\GamePark\GameparkUpdate.exe Medium
měl jsem zapnutý správce úloh kvůli zahřívání tak nevim jestli to vadí kdyžtak to udělám znova...

Nastala nějaká změna?

vůbec nic se nestalo

OK. V správci úloh postupně vypínejte nejprve ne-microsoftí položky a zjistěte, po které z nich klesne zatížení. Nevypínejte antivir, příp firewall.

nechcete si stáhnout team wiever a udělat to ? já tomu moc nerozumim a když jsem vymazal tenhle soubor sbs_wminet_utils tak to přestalo ale po restartování PC to znovu naskočilo a soubor tam byl vytížení a bylo zas

Žádným wieverem vám do PC zasahovat nebudu, neboť je to proti pravidlům fóra a není to právně ošetřeno. Jednoduše Ctrl>alt>del, správce úloh>procesy. Nevšímejte si procesů od MS, host procesů a antiviru. Ostatní můžete vypínat bez nebezpečí, že celé PC spadne. Pokud by to nepomohlo, udělejte sken AVPTool: http://www.viry.cz/forum/viewtopic.php?f=29&t=58179 a dejte log.