ComboFix 13-11-19.01 - Sambala 20.11.2013 18:20:54.1.4 - x64
Microsoft Windows 7 Ultimate 6.1.7600.0.1250.420.1029.18.4095.2446 [GMT 1:00]
Spuštěný z: c:\users\Sambala\Downloads\ComboFix.exe
SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.
.
((((((((((((((((((((((((((((((((((((((( Ostatní výmazy )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
c:\windows\SysWow64\FlashPlayerApp.exe
.
.
((((((((((((((((((((((((( Soubory vytvořené od 2013-10-20 do 2013-11-20 )))))))))))))))))))))))))))))))
.
.
2013-11-20 17:25 . 2013-11-20 17:25 -------- d-----w- c:\users\Default\AppData\Local\temp
2013-11-20 17:00 . 2013-11-20 17:00 -------- d-----w- c:\program files\CPUID
2013-11-20 15:29 . 2013-11-20 15:29 -------- d-----w- C:\FRST
2013-11-20 14:49 . 2013-11-20 14:52 -------- d-----w- C:\CS 1.6 v48
2013-11-20 13:01 . 2013-11-20 13:01 -------- d-----w- C:\c9d61200188f1fd1f5c7
2013-11-20 12:53 . 2010-09-14 06:45 367104 ----a-w- c:\windows\system32\wcncsvc.dll
2013-11-20 12:53 . 2010-09-14 06:07 276992 ----a-w- c:\windows\SysWow64\wcncsvc.dll
2013-11-20 12:33 . 2009-09-10 06:28 311808 ----a-w- c:\windows\system32\msv1_0.dll
2013-11-20 12:33 . 2009-09-10 05:52 257024 ----a-w- c:\windows\SysWow64\msv1_0.dll
2013-11-20 12:30 . 2013-11-08 03:12 10285968 ----a-w- c:\programdata\Microsoft\Windows Defender\Definition Updates\{02537017-1066-4EA3-8D16-D1B8AD16585B}\mpengine.dll
2013-11-20 12:26 . 2012-07-26 07:40 2560 ----a-w- c:\windows\system32\drivers\cs-CZ\wdf01000.sys.mui
2013-11-20 12:26 . 2012-07-26 04:55 785512 ----a-w- c:\windows\system32\drivers\Wdf01000.sys
2013-11-20 12:26 . 2012-07-26 04:55 54376 ----a-w- c:\windows\system32\drivers\WdfLdr.sys
2013-11-20 12:26 . 2012-07-26 02:36 9728 ----a-w- c:\windows\system32\Wdfres.dll
2013-11-20 12:16 . 2010-02-23 08:16 294912 ----a-w- c:\windows\system32\browserchoice.exe
2013-11-20 12:02 . 2012-12-16 16:52 46080 ----a-w- c:\windows\system32\atmlib.dll
2013-11-20 12:02 . 2012-12-16 14:25 34304 ----a-w- c:\windows\SysWow64\atmlib.dll
2013-11-20 12:02 . 2009-10-19 14:46 100864 ----a-w- c:\windows\system32\fontsub.dll
2013-11-20 12:02 . 2009-10-19 14:10 70656 ----a-w- c:\windows\SysWow64\fontsub.dll
2013-11-20 12:02 . 2012-12-16 14:40 367616 ----a-w- c:\windows\system32\atmfd.dll
2013-11-20 12:02 . 2012-12-16 14:25 295424 ----a-w- c:\windows\SysWow64\atmfd.dll
2013-11-20 12:00 . 2012-07-26 03:08 84992 ----a-w- c:\windows\system32\WUDFSvc.dll
2013-11-20 12:00 . 2012-07-26 03:08 45056 ----a-w- c:\windows\system32\WUDFCoinstaller.dll
2013-11-20 12:00 . 2012-07-26 03:08 194048 ----a-w- c:\windows\system32\WUDFPlatform.dll
2013-11-20 12:00 . 2012-07-26 02:26 87040 ----a-w- c:\windows\system32\drivers\WUDFPf.sys
2013-11-20 12:00 . 2012-07-26 02:26 198656 ----a-w- c:\windows\system32\drivers\WUDFRd.sys
2013-11-20 12:00 . 2012-07-26 03:08 229888 ----a-w- c:\windows\system32\WUDFHost.exe
2013-11-20 12:00 . 2012-07-26 03:08 744448 ----a-w- c:\windows\system32\WUDFx.dll
2013-11-20 11:57 . 2013-11-20 11:58 -------- d-----w- c:\windows\system32\MRT
2013-11-20 11:55 . 2012-03-01 06:54 22896 ----a-w- c:\windows\system32\drivers\fs_rec.sys
2013-11-20 11:55 . 2012-03-01 06:40 80896 ----a-w- c:\windows\system32\imagehlp.dll
2013-11-20 11:55 . 2012-03-01 06:35 5120 ----a-w- c:\windows\system32\wmi.dll
2013-11-20 11:55 . 2012-03-01 05:45 158720 ----a-w- c:\windows\SysWow64\imagehlp.dll
2013-11-20 11:55 . 2012-03-01 05:40 5120 ----a-w- c:\windows\SysWow64\wmi.dll
2013-11-20 11:52 . 2010-03-04 04:32 243712 ----a-w- c:\windows\system32\drivers\ks.sys
2013-11-20 11:49 . 2011-03-12 12:03 662528 ----a-w- c:\windows\system32\XpsPrint.dll
2013-11-20 11:49 . 2011-03-12 11:31 442880 ----a-w- c:\windows\SysWow64\XpsPrint.dll
2013-11-20 11:49 . 2012-11-09 05:34 751104 ----a-w- c:\windows\system32\win32spl.dll
2013-11-20 11:49 . 2012-11-09 04:49 492032 ----a-w- c:\windows\SysWow64\win32spl.dll
2013-11-20 11:47 . 2012-11-09 05:34 2048 ----a-w- c:\windows\system32\tzres.dll
2013-11-20 11:46 . 2013-01-04 05:37 362496 ----a-w- c:\windows\system32\wow64win.dll
2013-11-20 11:45 . 2012-04-28 03:50 204800 ----a-w- c:\windows\system32\drivers\rdpwd.sys
2013-11-20 11:43 . 2012-02-15 06:27 1031680 ----a-w- c:\windows\system32\rdpcore.dll
2013-11-20 11:43 . 2012-02-15 05:44 826368 ----a-w- c:\windows\SysWow64\rdpcore.dll
2013-11-20 11:43 . 2012-02-15 04:46 23552 ----a-w- c:\windows\system32\drivers\tdtcp.sys
2013-11-20 11:43 . 2011-11-17 07:14 1739160 ----a-w- c:\windows\system32\ntdll.dll
2013-11-20 11:43 . 2011-11-17 05:41 1292592 ----a-w- c:\windows\SysWow64\ntdll.dll
2013-11-20 11:43 . 2012-06-06 05:50 1425408 ----a-w- c:\program files\Common Files\System\ado\msado15.dll
2013-11-20 11:43 . 2012-06-06 05:09 987136 ----a-w- c:\program files (x86)\Common Files\System\ado\msado15.dll
2013-11-20 11:41 . 2012-05-14 05:20 956416 ----a-w- c:\windows\system32\localspl.dll
2013-11-20 11:39 . 2011-02-23 05:15 90624 ----a-w- c:\windows\system32\drivers\bowser.sys
2013-11-20 11:39 . 2010-01-09 07:19 139264 ----a-w- c:\windows\system32\cabview.dll
2013-11-20 11:39 . 2010-01-09 06:52 132608 ----a-w- c:\windows\SysWow64\cabview.dll
2013-11-20 11:37 . 2012-06-02 05:25 1462784 ----a-w- c:\windows\system32\crypt32.dll
2013-11-20 11:37 . 2012-06-02 05:25 182272 ----a-w- c:\windows\system32\cryptsvc.dll
2013-11-20 11:37 . 2012-06-02 05:25 140288 ----a-w- c:\windows\system32\cryptnet.dll
2013-11-20 11:37 . 2012-06-02 04:45 139264 ----a-w- c:\windows\SysWow64\cryptsvc.dll
2013-11-20 11:37 . 2012-06-02 04:45 1157632 ----a-w- c:\windows\SysWow64\crypt32.dll
2013-11-20 11:37 . 2012-06-02 04:45 103936 ----a-w- c:\windows\SysWow64\cryptnet.dll
2013-11-20 11:31 . 2011-11-19 15:07 77312 ----a-w- c:\windows\system32\packager.dll
2013-11-20 11:31 . 2011-11-19 14:06 67072 ----a-w- c:\windows\SysWow64\packager.dll
2013-11-20 11:27 . 2012-06-02 22:19 44056 ----a-w- c:\windows\system32\wups2.dll
2013-11-20 11:27 . 2012-06-02 22:19 2428952 ----a-w- c:\windows\system32\wuaueng.dll
2013-11-20 11:27 . 2012-06-02 22:19 57880 ----a-w- c:\windows\system32\wuauclt.exe
2013-11-20 11:27 . 2012-06-02 22:15 2622464 ----a-w- c:\windows\system32\wucltux.dll
2013-11-20 11:27 . 2012-06-02 22:19 38424 ----a-w- c:\windows\system32\wups.dll
2013-11-20 11:27 . 2012-06-02 22:19 701976 ----a-w- c:\windows\system32\wuapi.dll
2013-11-20 11:27 . 2012-06-02 22:15 99840 ----a-w- c:\windows\system32\wudriver.dll
2013-11-20 11:26 . 2012-06-02 14:19 186752 ----a-w- c:\windows\system32\wuwebv.dll
2013-11-20 11:26 . 2012-06-02 14:15 36864 ----a-w- c:\windows\system32\wuapp.exe
2013-11-19 08:03 . 2010-02-20 04:36 228352 ----a-w- c:\windows\system32\drivers\1394ohci.sys
2013-11-18 15:38 . 2013-11-18 15:39 -------- d-----w- c:\program files (x86)\MSI Afterburner
2013-11-18 05:09 . 2013-11-19 08:09 -------- d-----w- c:\program files (x86)\Assassins Creed III
2013-11-17 19:42 . 2013-11-17 19:42 189248 ----a-w- c:\windows\SysWow64\PnkBstrB.exe
2013-11-17 19:42 . 2013-11-17 19:42 75136 ----a-w- c:\windows\SysWow64\PnkBstrA.exe
2013-11-17 19:34 . 2013-11-17 19:42 -------- d-----w- c:\program files (x86)\Ubisoft
2013-11-16 16:16 . 2013-11-16 16:16 -------- d-----w- c:\program files (x86)\CrystalDiskInfo
2013-11-16 07:26 . 2013-11-16 07:26 -------- d-----w- c:\program files (x86)\Lavalys
2013-11-15 11:04 . 2013-11-15 11:04 -------- d-----w- c:\program files (x86)\Six Networks
2013-11-15 10:55 . 2013-11-15 10:55 -------- d-----w- c:\programdata\Bohemia Interactive Studio
2013-11-15 10:31 . 2013-11-15 10:31 -------- d-----w- c:\programdata\SIX Networks
2013-11-15 09:19 . 2013-11-15 10:10 -------- d-----w- c:\program files (x86)\ArmA 2
2013-11-14 12:59 . 2013-11-14 12:59 -------- d-----w- c:\program files\McAfee Security Scan
2013-11-11 13:38 . 2013-11-11 13:38 -------- d-----w- c:\program files (x86)\PowerISO
2013-11-11 13:38 . 2013-04-15 09:50 127384 ----a-w- c:\windows\system32\drivers\scdemu.sys
2013-11-10 08:25 . 2013-11-10 08:25 -------- d-----w- c:\windows\system32\appmgmt
2013-11-10 07:10 . 2013-11-10 07:10 -------- d-----w- c:\programdata\Steam
2013-11-10 06:42 . 2013-11-19 08:02 -------- d-----w- C:\Nová složka
2013-11-09 07:54 . 2013-11-18 15:39 -------- d--h--w- c:\windows\msdownld.tmp
2013-11-09 06:31 . 2013-10-18 01:36 1063200 ----a-w- c:\windows\system32\nvspcap64.dll
2013-11-09 06:31 . 2013-10-18 01:36 955168 ----a-w- c:\windows\SysWow64\nvspcap.dll
2013-11-09 06:30 . 2013-11-09 06:30 -------- d-----w- c:\program files (x86)\AGEIA Technologies
2013-11-09 06:03 . 2013-11-09 06:03 -------- d-----w- c:\program files\CCleaner
2013-11-07 13:32 . 2010-02-04 09:01 78680 ----a-w- c:\windows\system32\XAPOFX1_4.dll
2013-11-07 13:32 . 2010-02-04 09:01 74072 ----a-w- c:\windows\SysWow64\XAPOFX1_4.dll
2013-11-07 13:32 . 2010-02-04 09:01 530776 ----a-w- c:\windows\system32\XAudio2_6.dll
2013-11-07 13:32 . 2010-02-04 09:01 528216 ----a-w- c:\windows\SysWow64\XAudio2_6.dll
2013-11-07 13:32 . 2010-02-04 09:01 24920 ----a-w- c:\windows\system32\X3DAudio1_7.dll
2013-11-07 13:32 . 2010-02-04 09:01 238936 ----a-w- c:\windows\SysWow64\xactengine3_6.dll
2013-11-07 13:32 . 2010-02-04 09:01 22360 ----a-w- c:\windows\SysWow64\X3DAudio1_7.dll
2013-11-07 13:32 . 2010-02-04 09:01 176984 ----a-w- c:\windows\system32\xactengine3_6.dll
2013-11-07 13:28 . 2013-11-07 13:39 -------- d-----w- c:\program files (x86)\The Elder Scrolls V Skyrim
2013-11-07 13:23 . 2013-11-08 14:28 -------- d-----w- c:\program files (x86)\Common Files\Steam
2013-11-06 16:56 . 2013-11-16 06:27 -------- d-----w- c:\programdata\WarThunder
2013-11-06 16:19 . 2013-11-06 16:19 -------- d-----w- C:\Lineage II
2013-11-06 14:01 . 2013-11-06 14:01 -------- d-----w- c:\program files\WinRAR
2013-11-06 05:16 . 2013-11-06 06:16 -------- d-----w- c:\program files (x86)\Lineage II
2013-11-03 13:04 . 2010-05-26 10:41 2106216 ----a-w- c:\windows\SysWow64\D3DCompiler_43.dll
2013-11-03 13:04 . 2010-05-26 10:41 1998168 ----a-w- c:\windows\SysWow64\D3DX9_43.dll
2013-11-03 13:02 . 2013-11-03 13:03 -------- d-----w- c:\program files (x86)\XBMC
2013-11-01 11:35 . 2013-11-01 11:35 -------- d-----w- c:\program files\TeamSpeak 3 Client
2013-11-01 11:26 . 2013-11-18 17:24 -------- d-----w- c:\programdata\NVIDIA
2013-11-01 11:26 . 2013-11-18 05:40 -------- d-----w- c:\users\UpdatusUser
2013-11-01 11:23 . 2013-11-01 11:23 -------- d-----w- c:\program files (x86)\Microsoft.NET
2013-11-01 11:20 . 2009-11-25 19:47 49472 ----a-w- c:\windows\SysWow64\netfxperf.dll
2013-11-01 11:20 . 2009-11-25 19:47 297808 ----a-w- c:\windows\SysWow64\mscoree.dll
2013-11-01 11:20 . 2009-11-25 19:47 99176 ----a-w- c:\windows\SysWow64\PresentationHostProxy.dll
2013-11-01 11:20 . 2009-11-25 19:47 48960 ----a-w- c:\windows\system32\netfxperf.dll
2013-11-01 11:20 . 2009-11-25 19:47 295264 ----a-w- c:\windows\SysWow64\PresentationHost.exe
2013-11-01 11:20 . 2009-11-25 19:47 1130824 ----a-w- c:\windows\SysWow64\dfshim.dll
2013-11-01 11:20 . 2009-11-25 19:47 109912 ----a-w- c:\windows\system32\PresentationHostProxy.dll
2013-11-01 11:20 . 2009-11-25 19:47 444752 ----a-w- c:\windows\system32\mscoree.dll
2013-11-01 11:20 . 2009-11-25 19:47 320352 ----a-w- c:\windows\system32\PresentationHost.exe
2013-11-01 11:20 . 2009-11-25 19:47 1942856 ----a-w- c:\windows\system32\dfshim.dll
2013-11-01 11:19 . 2013-10-23 08:20 6669600 ----a-w- c:\windows\system32\nvcpl.dll
.
.
(((((((((((((((((((((((((((((((((((((((( Find3M výpis ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2013-11-20 12:13 . 2013-11-20 12:13 203776 ----a-w- c:\windows\SysWow64\webcheck.dll
2013-11-20 12:13 . 2013-11-20 12:13 249344 ----a-w- c:\windows\system32\webcheck.dll
.
.
(((((((((((((((((((((((((((((((((( Spouštěcí body v registru )))))))))))))))))))))))))))))))))))))))))))))
.
.
*Poznámka* prázdné záznamy a legitimní výchozí údaje nejsou zobrazeny.
REGEDIT4
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]
"PWRISOVM.EXE"="c:\program files (x86)\PowerISO\PWRISOVM.EXE" [2013-04-15 337432]
.
c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\
McAfee Security Scan Plus.lnk - c:\program files\McAfee Security Scan\3.8.130\SSScheduler.exe [2013-9-6 324320]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorAdmin"= 5 (0x5)
"ConsentPromptBehaviorUser"= 3 (0x3)
"EnableUIADesktopToggle"= 0 (0x0)
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\drivers32]
"mixer6"=wdmaud.drv
.
R3 cpuz136;cpuz136;c:\users\Sambala\AppData\Local\Temp\cpuz136\cpuz136_x64.sys;c:\users\Sambala\AppData\Local\Temp\cpuz136\cpuz136_x64.sys [x]
R3 EverestDriver;Lavalys EVEREST Kernel Driver;c:\program files (x86)\Lavalys\EVEREST Ultimate Edition\kerneld.amd64;c:\program files (x86)\Lavalys\EVEREST Ultimate Edition\kerneld.amd64 [x]
R3 McComponentHostService;McAfee Security Scan Component Host Service;c:\program files\McAfee Security Scan\3.8.130\McCHSvc.exe;c:\program files\McAfee Security Scan\3.8.130\McCHSvc.exe [x]
R3 RTCore64;RTCore64;c:\program files (x86)\MSI Afterburner\RTCore64.sys;c:\program files (x86)\MSI Afterburner\RTCore64.sys [x]
S2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [x]
S2 NvStreamSvc;NVIDIA Streamer Service;c:\program files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe;c:\program files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [x]
S3 nvvad_WaveExtensible;NVIDIA Virtual Audio Device (Wave Extensible) (WDM);c:\windows\system32\drivers\nvvad64v.sys;c:\windows\SYSNATIVE\drivers\nvvad64v.sys [x]
S3 RTL8167;Ovladač Realtek 8167 NT;c:\windows\system32\DRIVERS\Rt64win7.sys;c:\windows\SYSNATIVE\DRIVERS\Rt64win7.sys [x]
.
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\active setup\installed components\{8A69D345-D564-463c-AFF1-A69D9E530F96}]
2013-11-15 06:00 1210320 ----a-w- c:\program files (x86)\Google\Chrome\Application\31.0.1650.57\Installer\chrmstp.exe
.
Obsah adresáře 'Naplánované úlohy'
.
2013-11-20 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
- c:\program files (x86)\Google\Update\GoogleUpdate.exe [2013-11-01 10:55]
.
2013-11-20 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
- c:\program files (x86)\Google\Update\GoogleUpdate.exe [2013-11-01 10:55]
.
.
--------- X64 Entries -----------
.
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Nvtmru"="c:\program files (x86)\NVIDIA Corporation\NVIDIA Update Core\nvtmru.exe" [2013-10-18 1028384]
"ShadowPlay"="c:\windows\system32\nvspcap64.dll" [2013-10-18 1063200]
.
------- Doplňkový sken -------
.
uLocal Page = c:\windows\system32\blank.htm
uStart Page = hxxp://
www.seznam.cz/
mLocal Page = c:\windows\SysWOW64\blank.htm
TCP: DhcpNameServer = 195.250.128.34 195.250.128.234 8.8.8.8
.
- - - - NEPLATNÉ POLOŽKY ODSTRANĚNÉ Z REGISTRU - - - -
.
AddRemove-NVIDIAStereo - c:\program files (x86)\NVIDIA Corporation\3D Vision\nvStInst.exe
.
.
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\EverestDriver]
"ImagePath"="\??\c:\program files (x86)\Lavalys\EVEREST Ultimate Edition\kerneld.amd64"
.
--------------------- ZAMKNUTÉ KLÍČE V REGISTRU ---------------------
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\PCW\Security]
@Denied: (Full) (Everyone)
.
Celkový čas: 2013-11-20 18:26:41
ComboFix-quarantined-files.txt 2013-11-20 17:26
.
Před spuštěním: Volných bajtů: 394 316 484 608
Po spuštění: Volných bajtů: 395 752 034 304
.
- - End Of File - - 928F9A3883683E9A6E9A331894716E78
A36C5E4F47E84449FF07ED3517B43A31