prosím o kontrolu logu
Napsal: 16 bře 2012 00:43
Zdravím,
Chtěl bych poprosit o kontrolu logu a radu. Dnes se mi do počítače dostal vir a začal mi pomalu vymazávat externí HDD.
Nastesti jsem si toho všiml a HDD rychle odpojil, teď bych rád zjistil jesi vir je(byl) v PC nebo jesi je na externím HDD.
PC jsem projel antivirem a spustil combofix tak prosím o radu.
Předem děkuji
log z Combofix:
ComboFix 12-03-15.03 - David 16.03.2012 0:11.1.4 - x64N
Microsoft Windows 7 Home Premium 6.1.7601.1.1250.420.1029.18.3886.2128 [GMT 1:00]
Spuštěný z: c:\users\David\Downloads\ComboFix.exe
AV: Microsoft Security Essentials *Disabled/Updated* {108DAC43-C256-20B7-BB05-914135DA5160}
SP: Microsoft Security Essentials *Disabled/Updated* {ABEC4DA7-E46C-2F39-81B5-AA334E5D1BDD}
SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
* Vytvořen nový Bod Obnovení
.
.
((((((((((((((((((((((((((((((((((((((( Ostatní výmazy )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
c:\program files (x86)\Common Files\ASPG_icon.ico
c:\programdata\FullRemove.exe
c:\users\David\AppData\Local\Temp\6573b3c6-4299-4ce1-bc75-7f3a9cd9d739\CliSecureRT.dll
c:\windows\SysWow64\muzapp.exe
c:\windows\SysWow64\system32
c:\windows\SysWow64\system32\3DAudio.ax
c:\windows\SysWow64\system32\avrt.dll
c:\windows\SysWow64\system32\cis-2.4.dll
c:\windows\SysWow64\system32\issacapi_bs-2.3.dll
c:\windows\SysWow64\system32\issacapi_pe-2.3.dll
c:\windows\SysWow64\system32\issacapi_se-2.3.dll
c:\windows\SysWow64\system32\MACXMLProto.dll
c:\windows\SysWow64\system32\MaDRM.dll
c:\windows\SysWow64\system32\MaJGUILib.dll
c:\windows\SysWow64\system32\MAMACExtract.dll
c:\windows\SysWow64\system32\MASetupCleaner.exe
c:\windows\SysWow64\system32\MaXMLProto.dll
c:\windows\SysWow64\system32\mfplat.dll
c:\windows\SysWow64\system32\MK_Lyric.dll
c:\windows\SysWow64\system32\MSCLib.dll
c:\windows\SysWow64\system32\MSFLib.dll
c:\windows\SysWow64\system32\MSLUR71.dll
c:\windows\SysWow64\system32\msvcp60.dll
c:\windows\SysWow64\system32\MTTELECHIP.dll
c:\windows\SysWow64\system32\MTXSYNCICON.dll
c:\windows\SysWow64\system32\muzaf1.dll
c:\windows\SysWow64\system32\muzapp.dll
c:\windows\SysWow64\system32\muzapp.exe
c:\windows\SysWow64\system32\muzdecode.ax
c:\windows\SysWow64\system32\muzeffect.ax
c:\windows\SysWow64\system32\muzmp4sp.ax
c:\windows\SysWow64\system32\muzmpgsp.ax
c:\windows\SysWow64\system32\muzoggsp.ax
c:\windows\SysWow64\system32\muzwmts.dll
c:\windows\SysWow64\system32\psapi.dll
c:\windows\SysWow64\tmp2D49.tmp
c:\windows\SysWow64\tmp2D4A.tmp
c:\windows\SysWow64\tmp89FB.tmp
c:\windows\SysWow64\tmp89FC.tmp
D:\install.exe
.
.
((((((((((((((((((((((((( Soubory vytvořené od 2012-02-15 do 2012-03-15 )))))))))))))))))))))))))))))))
.
.
2012-03-15 23:17 . 2012-03-15 23:17 69000 ----a-w- c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\{88042108-0B21-4D1D-98F2-678604B8F079}\offreg.dll
2012-03-15 20:59 . 2012-03-15 20:59 -------- d-----w- C:\rsit
2012-03-15 20:30 . 2012-03-15 20:30 -------- d-----w- c:\users\David\AppData\Roaming\EeeStorageUploader
2012-03-15 20:14 . 2012-03-15 20:14 61440 ----a-w- c:\windows\SysWow64\drivers\mpnogt.sys
2012-03-15 18:36 . 2012-03-15 18:36 -------- d-----w- c:\users\David\AppData\Local\ElevatedDiagnostics
2012-03-15 02:11 . 2011-11-19 15:20 5559152 ----a-w- c:\windows\system32\ntoskrnl.exe
2012-03-15 02:11 . 2011-11-19 14:50 3968368 ----a-w- c:\windows\SysWow64\ntkrnlpa.exe
2012-03-15 02:11 . 2011-11-19 14:50 3913584 ----a-w- c:\windows\SysWow64\ntoskrnl.exe
2012-03-14 17:27 . 2012-02-03 04:34 3145728 ----a-w- c:\windows\system32\win32k.sys
2012-03-14 17:27 . 2012-02-10 06:36 1544192 ----a-w- c:\windows\system32\DWrite.dll
2012-03-14 17:27 . 2012-02-10 05:38 1077248 ----a-w- c:\windows\SysWow64\DWrite.dll
2012-03-13 19:54 . 2012-01-25 06:38 77312 ----a-w- c:\windows\system32\rdpwsx.dll
2012-03-13 19:54 . 2012-01-25 06:38 149504 ----a-w- c:\windows\system32\rdpcorekmts.dll
2012-03-13 19:54 . 2012-01-25 06:33 9216 ----a-w- c:\windows\system32\rdrmemptylst.exe
2012-03-13 19:54 . 2012-02-17 06:38 1031680 ----a-w- c:\windows\system32\rdpcore.dll
2012-03-13 19:54 . 2012-02-17 05:34 826880 ----a-w- c:\windows\SysWow64\rdpcore.dll
2012-03-13 19:54 . 2012-02-17 04:58 210944 ----a-w- c:\windows\system32\drivers\rdpwd.sys
2012-03-13 19:54 . 2012-02-17 04:57 23552 ----a-w- c:\windows\system32\drivers\tdtcp.sys
2012-03-12 20:44 . 2012-03-12 20:44 -------- d-----w- c:\program files (x86)\Runtime Software
2012-03-12 20:23 . 2012-03-12 20:23 -------- d-----w- c:\program files\Recuva
2012-03-10 17:25 . 2012-03-14 17:58 -------- d-----w- c:\program files (x86)\MTA San Andreas 1.3
2012-03-10 15:00 . 2011-12-08 04:22 98616 ----a-w- c:\windows\system32\drivers\ssudbus.sys
2012-03-10 15:00 . 2011-12-08 04:22 203320 ----a-w- c:\windows\system32\drivers\ssudmdm.sys
2012-03-10 14:47 . 2012-03-10 14:47 -------- d-----w- c:\program files (x86)\Common Files\Skype
2012-03-10 13:42 . 2012-03-10 13:42 -------- d-----w- c:\programdata\EA Core
2012-03-10 13:42 . 2012-03-11 14:20 -------- d-----w- c:\programdata\EA Logs
2012-03-10 13:29 . 2012-03-10 13:29 -------- d-----w- c:\users\David\AppData\Roaming\Leadertech
2012-03-10 13:29 . 2012-03-10 13:29 -------- d-----w- c:\program files\Logitech
2012-03-10 13:29 . 2012-03-10 13:29 -------- d-----w- c:\program files (x86)\Logitech
2012-03-10 13:27 . 2012-03-10 13:27 -------- d-----w- c:\programdata\LogiShrd
2012-03-09 13:20 . 2012-03-09 13:20 -------- d-----w- c:\program files (x86)\Origin Games
2012-03-09 12:16 . 2012-03-09 12:16 -------- d-----w- c:\users\David\AppData\Roaming\Auslogics
2012-03-09 12:16 . 2012-03-09 12:16 -------- d-----w- c:\program files (x86)\Auslogics
2012-03-09 12:12 . 2012-03-09 12:12 -------- d-----w- c:\users\UpdatusUser.David-PC
2012-03-09 11:52 . 2012-03-09 13:58 -------- d--h--w- c:\program files (x86)\Common Files\EAInstaller
2012-03-09 10:52 . 2011-12-30 06:26 515584 ----a-w- c:\windows\system32\timedate.cpl
2012-03-09 10:52 . 2011-12-30 05:27 478720 ----a-w- c:\windows\SysWow64\timedate.cpl
2012-03-09 10:52 . 2012-01-04 10:44 509952 ----a-w- c:\windows\system32\ntshrui.dll
2012-03-09 10:52 . 2012-01-04 08:58 442880 ----a-w- c:\windows\SysWow64\ntshrui.dll
2012-03-09 10:52 . 2011-12-28 03:59 498688 ----a-w- c:\windows\system32\drivers\afd.sys
2012-03-09 10:52 . 2011-12-16 08:46 634880 ----a-w- c:\windows\system32\msvcrt.dll
2012-03-09 10:52 . 2011-12-16 07:52 690688 ----a-w- c:\windows\SysWow64\msvcrt.dll
2012-03-09 10:47 . 2012-03-13 20:56 -------- d-----w- c:\users\David\AppData\Local\Origin
2012-03-09 10:47 . 2012-03-09 10:50 -------- d-----w- c:\users\David\AppData\Roaming\Origin
2012-03-09 10:46 . 2012-03-10 14:08 -------- d-----w- c:\programdata\Electronic Arts
2012-03-09 10:46 . 2012-03-10 13:42 -------- d-----w- c:\programdata\Origin
2012-03-09 10:45 . 2012-03-09 10:50 -------- d-----w- c:\program files (x86)\Origin
2012-03-09 10:44 . 2011-10-17 17:05 917840 ------w- c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\NISBackup\gapaengine.dll
2012-03-09 10:44 . 2012-02-09 12:17 927800 ------w- c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\{AD5FBB2A-574A-48D2-B637-EDCCBB9F7B66}\gapaengine.dll
.
.
.
(((((((((((((((((((((((((((((((((((((((( Find3M výpis ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2012-03-15 19:24 . 2012-01-10 19:07 45056 ----a-w- c:\windows\system32\acovcnt.exe
2012-03-09 12:16 . 2011-05-27 19:36 414368 ----a-w- c:\windows\SysWow64\FlashPlayerCPLApp.cpl
2012-03-01 12:21 . 2011-10-17 17:13 8643640 ----a-w- c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\Backup\mpengine.dll
2012-02-10 04:13 . 2012-01-10 19:10 962368 ----a-w- c:\windows\system32\nvumdshimx.dll
2012-02-10 04:13 . 2012-01-10 19:10 2660160 ----a-w- c:\windows\system32\nvapi64.dll
2012-02-10 04:13 . 2012-01-10 19:10 260416 ----a-w- c:\windows\system32\nvinitx.dll
2012-02-10 04:13 . 2012-01-10 19:10 215360 ----a-w- c:\windows\SysWow64\nvinit.dll
2012-02-10 04:13 . 2012-01-10 19:10 1737536 ----a-w- c:\windows\system32\nvdispco64.dll
2012-02-10 04:13 . 2012-01-10 19:10 1466176 ----a-w- c:\windows\system32\nvgenco64.dll
2012-02-10 03:14 . 2012-01-10 19:15 6074176 ----a-w- c:\windows\system32\nvcpl.dll
2012-02-10 03:14 . 2012-01-10 19:15 3089728 ----a-w- c:\windows\system32\nvsvc64.dll
2012-02-10 03:07 . 2012-01-10 19:15 2561856 ----a-w- c:\windows\system32\nvsvcr.dll
2012-02-10 03:07 . 2012-01-10 19:15 849728 ----a-w- c:\windows\system32\nv3dappshext.dll
2012-02-10 03:07 . 2012-01-10 19:15 63296 ----a-w- c:\windows\system32\nvshext.dll
2012-02-10 03:07 . 2012-01-10 19:15 55616 ----a-w- c:\windows\system32\nv3dappshextr.dll
2012-02-10 03:07 . 2012-01-10 19:15 889664 ----a-w- c:\windows\system32\nvvsvc.exe
2012-02-10 03:07 . 2012-01-10 19:15 118080 ----a-w- c:\windows\system32\nvmctray.dll
2012-02-10 03:05 . 2012-01-10 19:15 2497985 ----a-w- c:\windows\system32\nvcoproc.bin
2012-01-31 12:44 . 2011-03-09 16:32 279656 ------w- c:\windows\system32\MpSigStub.exe
2012-01-10 21:43 . 2012-01-10 21:43 167704 ----a-w- c:\windows\system32\igfxtray.exe
2012-01-10 21:43 . 2012-01-10 21:43 510232 ----a-w- c:\windows\system32\igfxsrvc.exe
2012-01-10 21:43 . 2012-01-10 21:43 417560 ----a-w- c:\windows\system32\igfxpers.exe
2012-01-10 21:43 . 2012-01-10 21:43 239896 ----a-w- c:\windows\system32\igfxext.exe
2012-01-10 21:43 . 2012-01-10 21:43 4379416 ----a-w- c:\windows\system32\GfxUI.exe
2012-01-10 21:43 . 2012-01-10 21:43 392984 ----a-w- c:\windows\system32\hkcmd.exe
2012-01-10 21:43 . 2012-01-10 21:43 184600 ----a-w- c:\windows\system32\difx64.exe
2012-01-10 21:37 . 2012-01-10 21:37 90112 ----a-w- c:\windows\system32\igfxCoIn_v2622.dll
2012-01-10 21:28 . 2011-03-06 19:52 8313856 ----a-w- c:\windows\system32\igdumd64.dll
2012-01-10 21:28 . 2012-01-10 21:28 12311904 ----a-w- c:\windows\system32\drivers\igdkmd64.sys
2012-01-10 21:18 . 2010-08-25 18:31 6323712 ----a-w- c:\windows\SysWow64\igdumd32.dll
2012-01-10 21:12 . 2010-03-23 19:27 581120 ----a-w- c:\windows\SysWow64\igdumdx32.dll
2012-01-10 21:06 . 2011-08-31 17:42 9528832 ----a-w- c:\windows\system32\igd10umd64.dll
2012-01-10 20:55 . 2011-04-10 09:31 7988224 ----a-w- c:\windows\SysWow64\igd10umd32.dll
2012-01-10 20:42 . 2012-01-10 20:42 18653696 ----a-w- c:\windows\system32\ig4icd64.dll
2012-01-10 20:29 . 2012-01-10 20:29 13904384 ----a-w- c:\windows\SysWow64\ig4icd32.dll
2012-01-10 20:20 . 2012-01-10 20:20 286720 ----a-w- c:\windows\system32\igfxrrom.lrc
2012-01-10 20:20 . 2012-01-10 20:20 286720 ----a-w- c:\windows\system32\igfxrsky.lrc
2012-01-10 20:20 . 2012-01-10 20:20 286720 ----a-w- c:\windows\system32\igfxrhrv.lrc
2012-01-10 20:20 . 2012-01-10 20:20 286208 ----a-w- c:\windows\system32\igfxrslv.lrc
2012-01-10 20:20 . 2012-01-10 20:20 287232 ----a-w- c:\windows\system32\igfxresn.lrc
2012-01-10 20:20 . 2012-01-10 20:20 286208 ----a-w- c:\windows\system32\igfxrtrk.lrc
2012-01-10 20:20 . 2012-01-10 20:20 286208 ----a-w- c:\windows\system32\igfxrsve.lrc
2012-01-10 20:20 . 2012-01-10 20:20 285696 ----a-w- c:\windows\system32\igfxrtha.lrc
2012-01-10 20:20 . 2012-01-10 20:20 286720 ----a-w- c:\windows\system32\igfxrrus.lrc
2012-01-10 20:20 . 2012-01-10 20:20 286720 ----a-w- c:\windows\system32\igfxrptg.lrc
2012-01-10 20:20 . 2012-01-10 20:20 286208 ----a-w- c:\windows\system32\igfxrptb.lrc
2012-01-10 20:20 . 2012-01-10 20:20 286720 ----a-w- c:\windows\system32\igfxrplk.lrc
2012-01-10 20:20 . 2012-01-10 20:20 286208 ----a-w- c:\windows\system32\igfxrnor.lrc
2012-01-10 20:20 . 2012-01-10 20:20 283136 ----a-w- c:\windows\system32\igfxrkor.lrc
2012-01-10 20:20 . 2012-01-10 20:20 286720 ----a-w- c:\windows\system32\igfxrita.lrc
2012-01-10 20:20 . 2012-01-10 20:20 286208 ----a-w- c:\windows\system32\igfxrhun.lrc
2012-01-10 20:20 . 2012-01-10 20:20 285184 ----a-w- c:\windows\system32\igfxrheb.lrc
2012-01-10 20:20 . 2012-01-10 20:20 283648 ----a-w- c:\windows\system32\igfxrjpn.lrc
2012-01-10 20:20 . 2012-01-10 20:20 287232 ----a-w- c:\windows\system32\igfxrfra.lrc
2012-01-10 20:20 . 2012-01-10 20:20 287232 ----a-w- c:\windows\system32\igfxrell.lrc
2012-01-10 20:20 . 2012-01-10 20:20 286720 ----a-w- c:\windows\system32\igfxrdeu.lrc
2012-01-10 20:20 . 2012-01-10 20:20 286720 ----a-w- c:\windows\system32\igfxrnld.lrc
2012-01-10 20:20 . 2012-01-10 20:20 286720 ----a-w- c:\windows\system32\igfxrcsy.lrc
2012-01-10 20:20 . 2012-01-10 20:20 286208 ----a-w- c:\windows\system32\igfxrfin.lrc
2012-01-10 20:20 . 2012-01-10 20:20 285696 ----a-w- c:\windows\system32\igfxrdan.lrc
2012-01-10 20:20 . 2012-01-10 20:20 285184 ----a-w- c:\windows\system32\igfxrara.lrc
2012-01-10 20:20 . 2012-01-10 20:20 282624 ----a-w- c:\windows\system32\igfxrcht.lrc
2012-01-10 20:20 . 2012-01-10 20:20 282624 ----a-w- c:\windows\system32\igfxrchs.lrc
2012-01-10 20:20 . 2012-01-10 20:20 126976 ----a-w- c:\windows\system32\igfxcpl.cpl
2012-01-10 20:20 . 2012-01-10 20:20 375808 ----a-w- c:\windows\system32\igfxpph.dll
2012-01-10 20:19 . 2012-01-10 20:19 378368 ----a-w- c:\windows\system32\igfxTMM.dll
2012-01-10 20:19 . 2012-01-10 20:19 28672 ----a-w- c:\windows\system32\igfxexps.dll
2012-01-10 20:19 . 2010-03-23 19:02 62464 ----a-w- c:\windows\system32\igfxsrvc.dll
2012-01-10 20:19 . 2010-03-23 19:01 110080 ----a-w- c:\windows\system32\hccutils.dll
2012-01-10 20:19 . 2012-01-10 20:19 4096 ----a-w- c:\windows\system32\IGFXDEVLib.dll
2012-01-10 20:19 . 2012-01-10 20:19 390656 ----a-w- c:\windows\system32\igfxdev.dll
2012-01-10 20:19 . 2012-01-10 20:19 146432 ----a-w- c:\windows\system32\gfxSrvc.dll
2012-01-10 20:18 . 2012-01-10 20:18 285696 ----a-w- c:\windows\system32\igfxrenu.lrc
2012-01-10 20:18 . 2012-01-10 20:18 142336 ----a-w- c:\windows\system32\igfxdo.dll
2012-01-10 20:18 . 2010-03-23 19:01 9014784 ----a-w- c:\windows\system32\igfxress.dll
2012-01-10 20:15 . 2012-01-10 20:15 24576 ----a-w- c:\windows\SysWow64\igfxexps32.dll
2012-01-10 20:14 . 2012-01-10 20:14 294400 ----a-w- c:\windows\SysWow64\igfxdv32.dll
2012-01-10 20:12 . 2012-01-10 20:12 2177536 ----a-w- c:\windows\system32\igfxcmjit64.dll
2012-01-10 20:12 . 2012-01-10 20:12 171520 ----a-w- c:\windows\SysWow64\igfxcmrt32.dll
2012-01-10 20:12 . 2012-01-10 20:12 1663488 ----a-w- c:\windows\SysWow64\igfxcmjit32.dll
2012-01-10 20:12 . 2012-01-10 20:12 148480 ----a-w- c:\windows\system32\igfxcmrt64.dll
2012-01-10 18:55 . 2011-06-06 09:36 466456 ----a-w- c:\windows\system32\wrap_oal.dll
2012-01-10 18:55 . 2011-06-06 09:36 444952 ----a-w- c:\windows\SysWow64\wrap_oal.dll
2012-01-10 18:55 . 2011-06-06 09:36 122904 ----a-w- c:\windows\system32\OpenAL32.dll
2012-01-10 18:55 . 2011-06-06 09:36 109080 ----a-w- c:\windows\SysWow64\OpenAL32.dll
2009-04-08 17:31 . 2009-04-08 17:31 106496 ----a-w- c:\program files (x86)\Common Files\CPInstallAction.dll
2008-08-12 04:45 . 2008-08-12 04:45 155648 ----a-w- c:\program files (x86)\Common Files\MSIactionall.dll
.
.
(((((((((((((((((((((((((((((((((( Spouštěcí body v registru )))))))))))))))))))))))))))))))))))))))))))))
.
.
*Poznámka* prázdné záznamy a legitimní výchozí údaje nejsou zobrazeny.
REGEDIT4
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ADSMOverlayIcon1]
@="{A8D448F4-0431-45AC-9F5E-E1B434AB2249}"
[HKEY_CLASSES_ROOT\CLSID\{A8D448F4-0431-45AC-9F5E-E1B434AB2249}]
2007-06-01 16:08 143360 ----a-w- c:\program files (x86)\ASUS\ASUS Data Security Manager\ShlExt\x86\OverlayIconShlExt1.dll
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"KiesPDLR"="c:\program files (x86)\Samsung\Kies\External\FirmwareUpdate\KiesPDLR.exe" [2012-03-15 21416]
"KiesHelper"="c:\program files (x86)\Samsung\Kies\KiesHelper.exe" [2012-02-22 943504]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]
"ATKOSD2"="c:\program files (x86)\ASUS\ATK Package\ATKOSD2\ATKOSD2.exe" [2010-01-13 7109248]
"NUSB3MON"="c:\program files (x86)\NEC Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe" [2009-10-21 106496]
"ASUS Screen Saver Protector"="c:\windows\AsScrPro.exe" [2010-07-08 3058304]
"ADSMTray"="c:\program files (x86)\ASUS\ASUS Data Security Manager\ADSMTray.exe" [2009-06-24 272952]
"SunJavaUpdateSched"="c:\program files (x86)\Common Files\Java\Java Update\jusched.exe" [2011-06-09 254696]
"Logitech G35"="c:\program files (x86)\Logitech\G35\G35.exe" [2010-10-05 1811800]
"HControlUser"="c:\program files (x86)\ASUS\ATK Package\ATK Hotkey\HControlUser.exe" [2009-06-19 105016]
.
c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\
Bluetooth Manager.lnk - c:\program files (x86)\Toshiba\Bluetooth Toshiba Stack\TosBtMng.exe [2009-8-1 2680160]
FancyStart daemon.lnk - c:\windows\Installer\{F0DF4513-3C4C-4EB8-8012-2C5F70AF3988}\_A1DDD39913A1970387B7B3.exe [2010-7-8 12862]
SRS Premium Sound.lnk - c:\windows\Installer\{E5CF6B9C-3ABE-43C9-9413-AD5FFC98F049}\NewShortcut5_21C7B668029A47458B27645FE6E4A715.exe [2010-7-8 156952]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorAdmin"= 5 (0x5)
"ConsentPromptBehaviorUser"= 3 (0x3)
"EnableUIADesktopToggle"= 0 (0x0)
"PromptOnSecureDesktop"= 0 (0x0)
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\windows]
"AppInit_DLLs"=c:\windows\SysWOW64\nvinit.dll
.
[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\lsa]
Security Packages REG_MULTI_SZ kerberos msv1_0 schannel wdigest tspkg pku2u livessp
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MsMpSvc]
@="Service"
.
R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2010-03-18 138576]
R2 gupdate;Google Update Service (gupdate);c:\program files (x86)\Google\Update\GoogleUpdate.exe [2010-07-08 135664]
R2 SkypeUpdate;Skype Updater;c:\program files (x86)\Skype\Updater\Updater.exe [2012-02-29 158856]
R3 AmUStor;AM USB Stroage Driver;c:\windows\system32\drivers\AmUStor.SYS [x]
R3 BBSvc;Bing Bar Update Service;c:\program files (x86)\Microsoft\BingBar\BBSvc.EXE [2011-02-28 183560]
R3 dg_ssudbus;SAMSUNG Mobile USB Composite Device Driver (DEVGURU Ver.);c:\windows\system32\DRIVERS\ssudbus.sys [x]
R3 ETD;ELAN PS/2 Port Input Device;c:\windows\system32\DRIVERS\ETD.sys [x]
R3 gupdatem;Služba Google Update (gupdatem);c:\program files (x86)\Google\Update\GoogleUpdate.exe [2010-07-08 135664]
R3 LADF_DHP2;G35 DHP2 Filter Driver;c:\windows\system32\DRIVERS\ladfDHP2amd64.sys [x]
R3 LADF_SBVM;G35 SBVM Filter Driver;c:\windows\system32\DRIVERS\ladfSBVMamd64.sys [x]
R3 Microsoft SharePoint Workspace Audit Service;Microsoft SharePoint Workspace Audit Service;c:\program files (x86)\Microsoft Office\Office14\GROOVE.EXE [2011-06-12 31125880]
R3 MpNWMon;Microsoft Malware Protection Network Driver;c:\windows\system32\DRIVERS\MpNWMon.sys [x]
R3 netr28ux;RT2870 USB Wireless LAN Card Driver pro systém Windows Vista;c:\windows\system32\DRIVERS\netr28ux.sys [x]
R3 NisDrv;Microsoft Network Inspection System;c:\windows\system32\DRIVERS\NisDrvWFP.sys [x]
R3 NisSrv;Microsoft Network Inspection;c:\program files\Microsoft Security Client\Antimalware\NisSrv.exe [2011-04-27 288272]
R3 osppsvc;Office Software Protection Platform;c:\program files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE [2010-01-09 4925184]
R3 SiSGbeLH;SiS191/SiS190 Ethernet Device NDIS 6.0 Driver;c:\windows\system32\DRIVERS\SiSG664.sys [x]
R3 SMARTMouseFilterx64;HID-compliant mouse;c:\windows\system32\DRIVERS\SMARTMouseFilterx64.sys [x]
R3 SMARTVHidMiniVistaAmd64;SMART HID Device;c:\windows\system32\DRIVERS\SMARTVHidMiniVistaAmd64.sys [x]
R3 SMARTVTabletPCx64;SMART Virtual TabletPC;c:\windows\system32\DRIVERS\SMARTVTabletPCx64.sys [x]
R3 ssadbus;SAMSUNG Android USB Composite Device driver (WDM);c:\windows\system32\DRIVERS\ssadbus.sys [x]
R3 ssadmdfl;SAMSUNG Android USB Modem (Filter);c:\windows\system32\DRIVERS\ssadmdfl.sys [x]
R3 ssadmdm;SAMSUNG Android USB Modem Drivers;c:\windows\system32\DRIVERS\ssadmdm.sys [x]
R3 ssudmdm;SAMSUNG Mobile USB Modem Drivers (DEVGURU Ver.);c:\windows\system32\DRIVERS\ssudmdm.sys [x]
R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys [x]
R3 WatAdminSvc;Služba Technologie aktivace Windows;c:\windows\system32\Wat\WatAdminSvc.exe [x]
R4 wlcrasvc;Windows Live Mesh remote connections service;c:\program files\Windows Live\Mesh\wlcrasvc.exe [2010-09-22 57184]
S0 lullaby;lullaby;c:\windows\system32\DRIVERS\lullaby.sys [x]
S0 nvpciflt;nvpciflt;c:\windows\system32\DRIVERS\nvpciflt.sys [x]
S0 sptd;sptd;c:\windows\System32\Drivers\sptd.sys [x]
S1 vwififlt;Virtual WiFi Filter Driver;c:\windows\system32\DRIVERS\vwififlt.sys [x]
S2 ASMMAP64;ASMMAP64;c:\program files (x86)\ASUS\ATK Package\ATKGFNEX\ASMMAP64.sys [2009-07-03 15416]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;c:\windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
S2 nvUpdatusService;NVIDIA Update Service Daemon;c:\program files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe [2012-02-10 2348352]
S2 UNS;Intel(R) Management & Security Application User Notification Service;c:\program files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe [2009-10-01 2314240]
S3 HECIx64;Intel(R) Management Engine Interface;c:\windows\system32\DRIVERS\HECIx64.sys [x]
S3 Impcd;Impcd;c:\windows\system32\DRIVERS\Impcd.sys [x]
S3 IntcDAud;Intel(R) Display Audio;c:\windows\system32\DRIVERS\IntcDAud.sys [x]
S3 L1C;NDIS Miniport Driver for Atheros AR813x/AR815x PCI-E Ethernet Controller (NDIS 6.20);c:\windows\system32\DRIVERS\L1C62x64.sys [x]
S3 nusb3hub;NEC Electronics USB 3.0 Hub Driver;c:\windows\system32\DRIVERS\nusb3hub.sys [x]
S3 nusb3xhc;NEC Electronics USB 3.0 Host Controller Driver;c:\windows\system32\DRIVERS\nusb3xhc.sys [x]
S3 vwifimp;Microsoft Virtual WiFi Miniport Service;c:\windows\system32\DRIVERS\vwifimp.sys [x]
.
.
Obsah adresáře 'Naplánované úlohy'
.
2012-03-15 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
- c:\program files (x86)\Google\Update\GoogleUpdate.exe [2010-07-08 08:33]
.
2012-03-15 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
- c:\program files (x86)\Google\Update\GoogleUpdate.exe [2010-07-08 08:33]
.
.
--------- x86-64 -----------
.
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ADSMOverlayIcon1]
@="{A8D448F4-0431-45AC-9F5E-E1B434AB2249}"
[HKEY_CLASSES_ROOT\CLSID\{A8D448F4-0431-45AC-9F5E-E1B434AB2249}]
2007-06-01 15:52 159744 ----a-w- c:\program files (x86)\ASUS\ASUS Data Security Manager\ShlExt\x64\OverlayIconShlExt1_64.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\AsusWSShellExt_B]
@="{6D4133E5-0742-4ADC-8A8C-9303440F7190}"
[HKEY_CLASSES_ROOT\CLSID\{6D4133E5-0742-4ADC-8A8C-9303440F7190}]
2009-11-26 05:49 70656 ----a-w- c:\program files (x86)\ASUS\ASUS WebStorage\SERVICE\AsusWSShellExt64.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\AsusWSShellExt_O]
@="{64174815-8D98-4CE6-8646-4C039977D808}"
[HKEY_CLASSES_ROOT\CLSID\{64174815-8D98-4CE6-8646-4C039977D808}]
2009-11-26 05:49 70656 ----a-w- c:\program files (x86)\ASUS\ASUS WebStorage\SERVICE\AsusWSShellExt64.dll
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"AmIcoSinglun64"="c:\program files (x86)\AmIcoSingLun\AmIcoSinglun64.exe" [2009-09-01 323584]
"RtHDVCpl"="c:\program files\Realtek\Audio\HDA\RAVCpl64.exe" [2009-12-10 9643552]
"MSC"="c:\program files\Microsoft Security Client\msseces.exe" [2011-06-15 1436736]
"IgfxTray"="c:\windows\system32\igfxtray.exe" [2012-01-10 167704]
"HotKeysCmds"="c:\windows\system32\hkcmd.exe" [2012-01-10 392984]
"Persistence"="c:\windows\system32\igfxpers.exe" [2012-01-10 417560]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
"LoadAppInit_DLLs"=0x1
"AppInit_DLLs"=c:\windows\System32\nvinitx.dll
.
------- Doplňkový sken -------
.
uStart Page = hxxp://start.icq.com/sk27211/
uLocal Page = c:\windows\system32\blank.htm
mLocal Page = c:\windows\SysWOW64\blank.htm
IE: E&xportovat do aplikace Microsoft Excel - c:\progra~2\MICROS~1\Office14\EXCEL.EXE/3000
IE: Od&eslat do aplikace OneNote - c:\progra~2\MICROS~1\Office14\ONBttnIE.dll/105
TCP: DhcpNameServer = 10.0.0.138
FF - ProfilePath - c:\users\David\AppData\Roaming\Mozilla\Firefox\Profiles\jrii7ewn.default\
FF - prefs.js: browser.search.selectedEngine - Google
FF - prefs.js: browser.startup.homepage - http://www.google.cz
FF - prefs.js: keyword.URL - hxxp://search.icq.com/search/afe_results.php?ch_id=sk27211&tb_ver=1.1.9&q=
.
- - - - NEPLATNÉ POLOŽKY ODSTRANĚNÉ Z REGISTRU - - - -
.
URLSearchHooks-{bf7380fa-e3b4-4db2-af3e-9d8783a45bfc} - (no file)
Toolbar-Locked - (no file)
Toolbar-Locked - (no file)
AddRemove-ASUS_N_Series_Screensaver - c:\windows\system32\ASUS_N_Series_Screensaver.scr
.
.
.
--------------------- ZAMKNUTÉ KLÍČE V REGISTRU ---------------------
.
[HKEY_USERS\S-1-5-21-557655330-2181919475-2068364034-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.eml\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="WindowsLiveMail.Email.1"
.
[HKEY_USERS\S-1-5-21-557655330-2181919475-2068364034-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.vcf\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="WindowsLiveMail.VCard.1"
.
[HKEY_USERS\S-1-5-21-557655330-2181919475-2068364034-1001\Software\SecuROM\License information*]
"datasecu"=hex:21,19,d5,67,69,ca,98,82,7d,a6,fa,76,05,a4,a2,22,8c,d9,ad,1e,e9,
eb,a8,21,22,14,43,0b,05,9e,0a,79,d8,ab,b9,55,66,67,73,39,2c,12,7f,f4,94,d0,\
"rkeysecu"=hex:d1,1b,e9,2d,4a,62,41,e1,34,d2,a5,da,22,c5,da,53
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{19114156-8E9A-4D4E-9EE9-17A0E48D3BBB}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil10c.exe,-101"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{19114156-8E9A-4D4E-9EE9-17A0E48D3BBB}\Elevation]
"Enabled"=dword:00000001
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{19114156-8E9A-4D4E-9EE9-17A0E48D3BBB}\LocalServer32]
@="c:\\Windows\\SysWow64\\Macromed\\Flash\\FlashUtil10c.exe"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{19114156-8E9A-4D4E-9EE9-17A0E48D3BBB}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@="Shockwave Flash Object"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\InprocServer32]
@="c:\\Windows\\SysWow64\\Macromed\\Flash\\Flash10c.ocx"
"ThreadingModel"="Apartment"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\MiscStatus]
@="0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ProgID]
@="ShockwaveFlash.ShockwaveFlash.10"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
@="c:\\Windows\\SysWow64\\Macromed\\Flash\\Flash10c.ocx, 1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\TypeLib]
@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\Version]
@="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
@="ShockwaveFlash.ShockwaveFlash"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@="Macromedia Flash Factory Object"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\InprocServer32]
@="c:\\Windows\\SysWow64\\Macromed\\Flash\\Flash10c.ocx"
"ThreadingModel"="Apartment"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ProgID]
@="FlashFactory.FlashFactory.1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
@="c:\\Windows\\SysWow64\\Macromed\\Flash\\Flash10c.ocx, 1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\TypeLib]
@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\Version]
@="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
@="FlashFactory.FlashFactory"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{1D4C8A81-B7AC-460A-8C23-98713C41D6B3}]
@Denied: (A 2) (Everyone)
@="IFlashBroker3"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{1D4C8A81-B7AC-460A-8C23-98713C41D6B3}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{1D4C8A81-B7AC-460A-8C23-98713C41D6B3}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\System*]
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
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Office\Common\Smart Tag\Actions\{B7EFF951-E52F-45CC-9EF7-57124F2177CC}]
@Denied: (A) (Everyone)
"Solution"="{15727DE6-F92D-4E46-ACB4-0E2C58B31A18}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Schema Library\ActionsPane3]
@Denied: (A) (Everyone)
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Schema Library\ActionsPane3\0]
"Key"="ActionsPane3"
"Location"="c:\\Program Files (x86)\\Common Files\\Microsoft Shared\\VSTO\\ActionsPane3.xsd"
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0000\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0006\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\PCW\Security]
@Denied: (Full) (Everyone)
.
------------------------ Jiné spuštené procesy ------------------------
.
c:\program files (x86)\ASUS\ASUS Data Security Manager\ADSMSrv.exe
c:\program files (x86)\ASUS\ATK Package\ATK Hotkey\ASLDRSrv.exe
c:\program files (x86)\ASUS\ATK Package\ATKGFNEX\GFNEXSrv.exe
c:\program files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
c:\program files (x86)\CyberLink\Shared files\RichVideo.exe
c:\program files (x86)\Microsoft\BingBar\SeaPort.EXE
c:\program files (x86)\ASUS\ASUS Live Update\ALU.exe
c:\program files (x86)\ASUS\ControlDeck\ControlDeckStartUp.exe
c:\program files (x86)\ASUS\SmartLogon\sensorsrv.exe
c:\program files (x86)\ASUS\Wireless Console 3\wcourier.exe
c:\program files (x86)\ASUS\ATK Package\ATK Hotkey\HControl.exe
c:\program files (x86)\ASUS\ATK Package\ATK Hotkey\ATKOSD.exe
c:\program files (x86)\ASUS\ATK Package\ATK Hotkey\KBFiltr.exe
c:\program files (x86)\ASUS\ATK Package\ATK Hotkey\WDC.exe
.
**************************************************************************
.
Celkový čas: 2012-03-16 00:22:11 - počítač byl restartován
ComboFix-quarantined-files.txt 2012-03-15 23:22
.
Před spuštěním: Volných bajtů: 22 773 231 616
Po spuštění: Volných bajtů: 22 900 568 064
.
- - End Of File - - C4D36EED1AD68A4527FA7FC83903ACBB
Chtěl bych poprosit o kontrolu logu a radu. Dnes se mi do počítače dostal vir a začal mi pomalu vymazávat externí HDD.
Nastesti jsem si toho všiml a HDD rychle odpojil, teď bych rád zjistil jesi vir je(byl) v PC nebo jesi je na externím HDD.
PC jsem projel antivirem a spustil combofix tak prosím o radu.
Předem děkuji
log z Combofix:
ComboFix 12-03-15.03 - David 16.03.2012 0:11.1.4 - x64N
Microsoft Windows 7 Home Premium 6.1.7601.1.1250.420.1029.18.3886.2128 [GMT 1:00]
Spuštěný z: c:\users\David\Downloads\ComboFix.exe
AV: Microsoft Security Essentials *Disabled/Updated* {108DAC43-C256-20B7-BB05-914135DA5160}
SP: Microsoft Security Essentials *Disabled/Updated* {ABEC4DA7-E46C-2F39-81B5-AA334E5D1BDD}
SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
* Vytvořen nový Bod Obnovení
.
.
((((((((((((((((((((((((((((((((((((((( Ostatní výmazy )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
c:\program files (x86)\Common Files\ASPG_icon.ico
c:\programdata\FullRemove.exe
c:\users\David\AppData\Local\Temp\6573b3c6-4299-4ce1-bc75-7f3a9cd9d739\CliSecureRT.dll
c:\windows\SysWow64\muzapp.exe
c:\windows\SysWow64\system32
c:\windows\SysWow64\system32\3DAudio.ax
c:\windows\SysWow64\system32\avrt.dll
c:\windows\SysWow64\system32\cis-2.4.dll
c:\windows\SysWow64\system32\issacapi_bs-2.3.dll
c:\windows\SysWow64\system32\issacapi_pe-2.3.dll
c:\windows\SysWow64\system32\issacapi_se-2.3.dll
c:\windows\SysWow64\system32\MACXMLProto.dll
c:\windows\SysWow64\system32\MaDRM.dll
c:\windows\SysWow64\system32\MaJGUILib.dll
c:\windows\SysWow64\system32\MAMACExtract.dll
c:\windows\SysWow64\system32\MASetupCleaner.exe
c:\windows\SysWow64\system32\MaXMLProto.dll
c:\windows\SysWow64\system32\mfplat.dll
c:\windows\SysWow64\system32\MK_Lyric.dll
c:\windows\SysWow64\system32\MSCLib.dll
c:\windows\SysWow64\system32\MSFLib.dll
c:\windows\SysWow64\system32\MSLUR71.dll
c:\windows\SysWow64\system32\msvcp60.dll
c:\windows\SysWow64\system32\MTTELECHIP.dll
c:\windows\SysWow64\system32\MTXSYNCICON.dll
c:\windows\SysWow64\system32\muzaf1.dll
c:\windows\SysWow64\system32\muzapp.dll
c:\windows\SysWow64\system32\muzapp.exe
c:\windows\SysWow64\system32\muzdecode.ax
c:\windows\SysWow64\system32\muzeffect.ax
c:\windows\SysWow64\system32\muzmp4sp.ax
c:\windows\SysWow64\system32\muzmpgsp.ax
c:\windows\SysWow64\system32\muzoggsp.ax
c:\windows\SysWow64\system32\muzwmts.dll
c:\windows\SysWow64\system32\psapi.dll
c:\windows\SysWow64\tmp2D49.tmp
c:\windows\SysWow64\tmp2D4A.tmp
c:\windows\SysWow64\tmp89FB.tmp
c:\windows\SysWow64\tmp89FC.tmp
D:\install.exe
.
.
((((((((((((((((((((((((( Soubory vytvořené od 2012-02-15 do 2012-03-15 )))))))))))))))))))))))))))))))
.
.
2012-03-15 23:17 . 2012-03-15 23:17 69000 ----a-w- c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\{88042108-0B21-4D1D-98F2-678604B8F079}\offreg.dll
2012-03-15 20:59 . 2012-03-15 20:59 -------- d-----w- C:\rsit
2012-03-15 20:30 . 2012-03-15 20:30 -------- d-----w- c:\users\David\AppData\Roaming\EeeStorageUploader
2012-03-15 20:14 . 2012-03-15 20:14 61440 ----a-w- c:\windows\SysWow64\drivers\mpnogt.sys
2012-03-15 18:36 . 2012-03-15 18:36 -------- d-----w- c:\users\David\AppData\Local\ElevatedDiagnostics
2012-03-15 02:11 . 2011-11-19 15:20 5559152 ----a-w- c:\windows\system32\ntoskrnl.exe
2012-03-15 02:11 . 2011-11-19 14:50 3968368 ----a-w- c:\windows\SysWow64\ntkrnlpa.exe
2012-03-15 02:11 . 2011-11-19 14:50 3913584 ----a-w- c:\windows\SysWow64\ntoskrnl.exe
2012-03-14 17:27 . 2012-02-03 04:34 3145728 ----a-w- c:\windows\system32\win32k.sys
2012-03-14 17:27 . 2012-02-10 06:36 1544192 ----a-w- c:\windows\system32\DWrite.dll
2012-03-14 17:27 . 2012-02-10 05:38 1077248 ----a-w- c:\windows\SysWow64\DWrite.dll
2012-03-13 19:54 . 2012-01-25 06:38 77312 ----a-w- c:\windows\system32\rdpwsx.dll
2012-03-13 19:54 . 2012-01-25 06:38 149504 ----a-w- c:\windows\system32\rdpcorekmts.dll
2012-03-13 19:54 . 2012-01-25 06:33 9216 ----a-w- c:\windows\system32\rdrmemptylst.exe
2012-03-13 19:54 . 2012-02-17 06:38 1031680 ----a-w- c:\windows\system32\rdpcore.dll
2012-03-13 19:54 . 2012-02-17 05:34 826880 ----a-w- c:\windows\SysWow64\rdpcore.dll
2012-03-13 19:54 . 2012-02-17 04:58 210944 ----a-w- c:\windows\system32\drivers\rdpwd.sys
2012-03-13 19:54 . 2012-02-17 04:57 23552 ----a-w- c:\windows\system32\drivers\tdtcp.sys
2012-03-12 20:44 . 2012-03-12 20:44 -------- d-----w- c:\program files (x86)\Runtime Software
2012-03-12 20:23 . 2012-03-12 20:23 -------- d-----w- c:\program files\Recuva
2012-03-10 17:25 . 2012-03-14 17:58 -------- d-----w- c:\program files (x86)\MTA San Andreas 1.3
2012-03-10 15:00 . 2011-12-08 04:22 98616 ----a-w- c:\windows\system32\drivers\ssudbus.sys
2012-03-10 15:00 . 2011-12-08 04:22 203320 ----a-w- c:\windows\system32\drivers\ssudmdm.sys
2012-03-10 14:47 . 2012-03-10 14:47 -------- d-----w- c:\program files (x86)\Common Files\Skype
2012-03-10 13:42 . 2012-03-10 13:42 -------- d-----w- c:\programdata\EA Core
2012-03-10 13:42 . 2012-03-11 14:20 -------- d-----w- c:\programdata\EA Logs
2012-03-10 13:29 . 2012-03-10 13:29 -------- d-----w- c:\users\David\AppData\Roaming\Leadertech
2012-03-10 13:29 . 2012-03-10 13:29 -------- d-----w- c:\program files\Logitech
2012-03-10 13:29 . 2012-03-10 13:29 -------- d-----w- c:\program files (x86)\Logitech
2012-03-10 13:27 . 2012-03-10 13:27 -------- d-----w- c:\programdata\LogiShrd
2012-03-09 13:20 . 2012-03-09 13:20 -------- d-----w- c:\program files (x86)\Origin Games
2012-03-09 12:16 . 2012-03-09 12:16 -------- d-----w- c:\users\David\AppData\Roaming\Auslogics
2012-03-09 12:16 . 2012-03-09 12:16 -------- d-----w- c:\program files (x86)\Auslogics
2012-03-09 12:12 . 2012-03-09 12:12 -------- d-----w- c:\users\UpdatusUser.David-PC
2012-03-09 11:52 . 2012-03-09 13:58 -------- d--h--w- c:\program files (x86)\Common Files\EAInstaller
2012-03-09 10:52 . 2011-12-30 06:26 515584 ----a-w- c:\windows\system32\timedate.cpl
2012-03-09 10:52 . 2011-12-30 05:27 478720 ----a-w- c:\windows\SysWow64\timedate.cpl
2012-03-09 10:52 . 2012-01-04 10:44 509952 ----a-w- c:\windows\system32\ntshrui.dll
2012-03-09 10:52 . 2012-01-04 08:58 442880 ----a-w- c:\windows\SysWow64\ntshrui.dll
2012-03-09 10:52 . 2011-12-28 03:59 498688 ----a-w- c:\windows\system32\drivers\afd.sys
2012-03-09 10:52 . 2011-12-16 08:46 634880 ----a-w- c:\windows\system32\msvcrt.dll
2012-03-09 10:52 . 2011-12-16 07:52 690688 ----a-w- c:\windows\SysWow64\msvcrt.dll
2012-03-09 10:47 . 2012-03-13 20:56 -------- d-----w- c:\users\David\AppData\Local\Origin
2012-03-09 10:47 . 2012-03-09 10:50 -------- d-----w- c:\users\David\AppData\Roaming\Origin
2012-03-09 10:46 . 2012-03-10 14:08 -------- d-----w- c:\programdata\Electronic Arts
2012-03-09 10:46 . 2012-03-10 13:42 -------- d-----w- c:\programdata\Origin
2012-03-09 10:45 . 2012-03-09 10:50 -------- d-----w- c:\program files (x86)\Origin
2012-03-09 10:44 . 2011-10-17 17:05 917840 ------w- c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\NISBackup\gapaengine.dll
2012-03-09 10:44 . 2012-02-09 12:17 927800 ------w- c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\{AD5FBB2A-574A-48D2-B637-EDCCBB9F7B66}\gapaengine.dll
.
.
.
(((((((((((((((((((((((((((((((((((((((( Find3M výpis ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2012-03-15 19:24 . 2012-01-10 19:07 45056 ----a-w- c:\windows\system32\acovcnt.exe
2012-03-09 12:16 . 2011-05-27 19:36 414368 ----a-w- c:\windows\SysWow64\FlashPlayerCPLApp.cpl
2012-03-01 12:21 . 2011-10-17 17:13 8643640 ----a-w- c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\Backup\mpengine.dll
2012-02-10 04:13 . 2012-01-10 19:10 962368 ----a-w- c:\windows\system32\nvumdshimx.dll
2012-02-10 04:13 . 2012-01-10 19:10 2660160 ----a-w- c:\windows\system32\nvapi64.dll
2012-02-10 04:13 . 2012-01-10 19:10 260416 ----a-w- c:\windows\system32\nvinitx.dll
2012-02-10 04:13 . 2012-01-10 19:10 215360 ----a-w- c:\windows\SysWow64\nvinit.dll
2012-02-10 04:13 . 2012-01-10 19:10 1737536 ----a-w- c:\windows\system32\nvdispco64.dll
2012-02-10 04:13 . 2012-01-10 19:10 1466176 ----a-w- c:\windows\system32\nvgenco64.dll
2012-02-10 03:14 . 2012-01-10 19:15 6074176 ----a-w- c:\windows\system32\nvcpl.dll
2012-02-10 03:14 . 2012-01-10 19:15 3089728 ----a-w- c:\windows\system32\nvsvc64.dll
2012-02-10 03:07 . 2012-01-10 19:15 2561856 ----a-w- c:\windows\system32\nvsvcr.dll
2012-02-10 03:07 . 2012-01-10 19:15 849728 ----a-w- c:\windows\system32\nv3dappshext.dll
2012-02-10 03:07 . 2012-01-10 19:15 63296 ----a-w- c:\windows\system32\nvshext.dll
2012-02-10 03:07 . 2012-01-10 19:15 55616 ----a-w- c:\windows\system32\nv3dappshextr.dll
2012-02-10 03:07 . 2012-01-10 19:15 889664 ----a-w- c:\windows\system32\nvvsvc.exe
2012-02-10 03:07 . 2012-01-10 19:15 118080 ----a-w- c:\windows\system32\nvmctray.dll
2012-02-10 03:05 . 2012-01-10 19:15 2497985 ----a-w- c:\windows\system32\nvcoproc.bin
2012-01-31 12:44 . 2011-03-09 16:32 279656 ------w- c:\windows\system32\MpSigStub.exe
2012-01-10 21:43 . 2012-01-10 21:43 167704 ----a-w- c:\windows\system32\igfxtray.exe
2012-01-10 21:43 . 2012-01-10 21:43 510232 ----a-w- c:\windows\system32\igfxsrvc.exe
2012-01-10 21:43 . 2012-01-10 21:43 417560 ----a-w- c:\windows\system32\igfxpers.exe
2012-01-10 21:43 . 2012-01-10 21:43 239896 ----a-w- c:\windows\system32\igfxext.exe
2012-01-10 21:43 . 2012-01-10 21:43 4379416 ----a-w- c:\windows\system32\GfxUI.exe
2012-01-10 21:43 . 2012-01-10 21:43 392984 ----a-w- c:\windows\system32\hkcmd.exe
2012-01-10 21:43 . 2012-01-10 21:43 184600 ----a-w- c:\windows\system32\difx64.exe
2012-01-10 21:37 . 2012-01-10 21:37 90112 ----a-w- c:\windows\system32\igfxCoIn_v2622.dll
2012-01-10 21:28 . 2011-03-06 19:52 8313856 ----a-w- c:\windows\system32\igdumd64.dll
2012-01-10 21:28 . 2012-01-10 21:28 12311904 ----a-w- c:\windows\system32\drivers\igdkmd64.sys
2012-01-10 21:18 . 2010-08-25 18:31 6323712 ----a-w- c:\windows\SysWow64\igdumd32.dll
2012-01-10 21:12 . 2010-03-23 19:27 581120 ----a-w- c:\windows\SysWow64\igdumdx32.dll
2012-01-10 21:06 . 2011-08-31 17:42 9528832 ----a-w- c:\windows\system32\igd10umd64.dll
2012-01-10 20:55 . 2011-04-10 09:31 7988224 ----a-w- c:\windows\SysWow64\igd10umd32.dll
2012-01-10 20:42 . 2012-01-10 20:42 18653696 ----a-w- c:\windows\system32\ig4icd64.dll
2012-01-10 20:29 . 2012-01-10 20:29 13904384 ----a-w- c:\windows\SysWow64\ig4icd32.dll
2012-01-10 20:20 . 2012-01-10 20:20 286720 ----a-w- c:\windows\system32\igfxrrom.lrc
2012-01-10 20:20 . 2012-01-10 20:20 286720 ----a-w- c:\windows\system32\igfxrsky.lrc
2012-01-10 20:20 . 2012-01-10 20:20 286720 ----a-w- c:\windows\system32\igfxrhrv.lrc
2012-01-10 20:20 . 2012-01-10 20:20 286208 ----a-w- c:\windows\system32\igfxrslv.lrc
2012-01-10 20:20 . 2012-01-10 20:20 287232 ----a-w- c:\windows\system32\igfxresn.lrc
2012-01-10 20:20 . 2012-01-10 20:20 286208 ----a-w- c:\windows\system32\igfxrtrk.lrc
2012-01-10 20:20 . 2012-01-10 20:20 286208 ----a-w- c:\windows\system32\igfxrsve.lrc
2012-01-10 20:20 . 2012-01-10 20:20 285696 ----a-w- c:\windows\system32\igfxrtha.lrc
2012-01-10 20:20 . 2012-01-10 20:20 286720 ----a-w- c:\windows\system32\igfxrrus.lrc
2012-01-10 20:20 . 2012-01-10 20:20 286720 ----a-w- c:\windows\system32\igfxrptg.lrc
2012-01-10 20:20 . 2012-01-10 20:20 286208 ----a-w- c:\windows\system32\igfxrptb.lrc
2012-01-10 20:20 . 2012-01-10 20:20 286720 ----a-w- c:\windows\system32\igfxrplk.lrc
2012-01-10 20:20 . 2012-01-10 20:20 286208 ----a-w- c:\windows\system32\igfxrnor.lrc
2012-01-10 20:20 . 2012-01-10 20:20 283136 ----a-w- c:\windows\system32\igfxrkor.lrc
2012-01-10 20:20 . 2012-01-10 20:20 286720 ----a-w- c:\windows\system32\igfxrita.lrc
2012-01-10 20:20 . 2012-01-10 20:20 286208 ----a-w- c:\windows\system32\igfxrhun.lrc
2012-01-10 20:20 . 2012-01-10 20:20 285184 ----a-w- c:\windows\system32\igfxrheb.lrc
2012-01-10 20:20 . 2012-01-10 20:20 283648 ----a-w- c:\windows\system32\igfxrjpn.lrc
2012-01-10 20:20 . 2012-01-10 20:20 287232 ----a-w- c:\windows\system32\igfxrfra.lrc
2012-01-10 20:20 . 2012-01-10 20:20 287232 ----a-w- c:\windows\system32\igfxrell.lrc
2012-01-10 20:20 . 2012-01-10 20:20 286720 ----a-w- c:\windows\system32\igfxrdeu.lrc
2012-01-10 20:20 . 2012-01-10 20:20 286720 ----a-w- c:\windows\system32\igfxrnld.lrc
2012-01-10 20:20 . 2012-01-10 20:20 286720 ----a-w- c:\windows\system32\igfxrcsy.lrc
2012-01-10 20:20 . 2012-01-10 20:20 286208 ----a-w- c:\windows\system32\igfxrfin.lrc
2012-01-10 20:20 . 2012-01-10 20:20 285696 ----a-w- c:\windows\system32\igfxrdan.lrc
2012-01-10 20:20 . 2012-01-10 20:20 285184 ----a-w- c:\windows\system32\igfxrara.lrc
2012-01-10 20:20 . 2012-01-10 20:20 282624 ----a-w- c:\windows\system32\igfxrcht.lrc
2012-01-10 20:20 . 2012-01-10 20:20 282624 ----a-w- c:\windows\system32\igfxrchs.lrc
2012-01-10 20:20 . 2012-01-10 20:20 126976 ----a-w- c:\windows\system32\igfxcpl.cpl
2012-01-10 20:20 . 2012-01-10 20:20 375808 ----a-w- c:\windows\system32\igfxpph.dll
2012-01-10 20:19 . 2012-01-10 20:19 378368 ----a-w- c:\windows\system32\igfxTMM.dll
2012-01-10 20:19 . 2012-01-10 20:19 28672 ----a-w- c:\windows\system32\igfxexps.dll
2012-01-10 20:19 . 2010-03-23 19:02 62464 ----a-w- c:\windows\system32\igfxsrvc.dll
2012-01-10 20:19 . 2010-03-23 19:01 110080 ----a-w- c:\windows\system32\hccutils.dll
2012-01-10 20:19 . 2012-01-10 20:19 4096 ----a-w- c:\windows\system32\IGFXDEVLib.dll
2012-01-10 20:19 . 2012-01-10 20:19 390656 ----a-w- c:\windows\system32\igfxdev.dll
2012-01-10 20:19 . 2012-01-10 20:19 146432 ----a-w- c:\windows\system32\gfxSrvc.dll
2012-01-10 20:18 . 2012-01-10 20:18 285696 ----a-w- c:\windows\system32\igfxrenu.lrc
2012-01-10 20:18 . 2012-01-10 20:18 142336 ----a-w- c:\windows\system32\igfxdo.dll
2012-01-10 20:18 . 2010-03-23 19:01 9014784 ----a-w- c:\windows\system32\igfxress.dll
2012-01-10 20:15 . 2012-01-10 20:15 24576 ----a-w- c:\windows\SysWow64\igfxexps32.dll
2012-01-10 20:14 . 2012-01-10 20:14 294400 ----a-w- c:\windows\SysWow64\igfxdv32.dll
2012-01-10 20:12 . 2012-01-10 20:12 2177536 ----a-w- c:\windows\system32\igfxcmjit64.dll
2012-01-10 20:12 . 2012-01-10 20:12 171520 ----a-w- c:\windows\SysWow64\igfxcmrt32.dll
2012-01-10 20:12 . 2012-01-10 20:12 1663488 ----a-w- c:\windows\SysWow64\igfxcmjit32.dll
2012-01-10 20:12 . 2012-01-10 20:12 148480 ----a-w- c:\windows\system32\igfxcmrt64.dll
2012-01-10 18:55 . 2011-06-06 09:36 466456 ----a-w- c:\windows\system32\wrap_oal.dll
2012-01-10 18:55 . 2011-06-06 09:36 444952 ----a-w- c:\windows\SysWow64\wrap_oal.dll
2012-01-10 18:55 . 2011-06-06 09:36 122904 ----a-w- c:\windows\system32\OpenAL32.dll
2012-01-10 18:55 . 2011-06-06 09:36 109080 ----a-w- c:\windows\SysWow64\OpenAL32.dll
2009-04-08 17:31 . 2009-04-08 17:31 106496 ----a-w- c:\program files (x86)\Common Files\CPInstallAction.dll
2008-08-12 04:45 . 2008-08-12 04:45 155648 ----a-w- c:\program files (x86)\Common Files\MSIactionall.dll
.
.
(((((((((((((((((((((((((((((((((( Spouštěcí body v registru )))))))))))))))))))))))))))))))))))))))))))))
.
.
*Poznámka* prázdné záznamy a legitimní výchozí údaje nejsou zobrazeny.
REGEDIT4
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ADSMOverlayIcon1]
@="{A8D448F4-0431-45AC-9F5E-E1B434AB2249}"
[HKEY_CLASSES_ROOT\CLSID\{A8D448F4-0431-45AC-9F5E-E1B434AB2249}]
2007-06-01 16:08 143360 ----a-w- c:\program files (x86)\ASUS\ASUS Data Security Manager\ShlExt\x86\OverlayIconShlExt1.dll
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"KiesPDLR"="c:\program files (x86)\Samsung\Kies\External\FirmwareUpdate\KiesPDLR.exe" [2012-03-15 21416]
"KiesHelper"="c:\program files (x86)\Samsung\Kies\KiesHelper.exe" [2012-02-22 943504]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]
"ATKOSD2"="c:\program files (x86)\ASUS\ATK Package\ATKOSD2\ATKOSD2.exe" [2010-01-13 7109248]
"NUSB3MON"="c:\program files (x86)\NEC Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe" [2009-10-21 106496]
"ASUS Screen Saver Protector"="c:\windows\AsScrPro.exe" [2010-07-08 3058304]
"ADSMTray"="c:\program files (x86)\ASUS\ASUS Data Security Manager\ADSMTray.exe" [2009-06-24 272952]
"SunJavaUpdateSched"="c:\program files (x86)\Common Files\Java\Java Update\jusched.exe" [2011-06-09 254696]
"Logitech G35"="c:\program files (x86)\Logitech\G35\G35.exe" [2010-10-05 1811800]
"HControlUser"="c:\program files (x86)\ASUS\ATK Package\ATK Hotkey\HControlUser.exe" [2009-06-19 105016]
.
c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\
Bluetooth Manager.lnk - c:\program files (x86)\Toshiba\Bluetooth Toshiba Stack\TosBtMng.exe [2009-8-1 2680160]
FancyStart daemon.lnk - c:\windows\Installer\{F0DF4513-3C4C-4EB8-8012-2C5F70AF3988}\_A1DDD39913A1970387B7B3.exe [2010-7-8 12862]
SRS Premium Sound.lnk - c:\windows\Installer\{E5CF6B9C-3ABE-43C9-9413-AD5FFC98F049}\NewShortcut5_21C7B668029A47458B27645FE6E4A715.exe [2010-7-8 156952]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorAdmin"= 5 (0x5)
"ConsentPromptBehaviorUser"= 3 (0x3)
"EnableUIADesktopToggle"= 0 (0x0)
"PromptOnSecureDesktop"= 0 (0x0)
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\windows]
"AppInit_DLLs"=c:\windows\SysWOW64\nvinit.dll
.
[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\lsa]
Security Packages REG_MULTI_SZ kerberos msv1_0 schannel wdigest tspkg pku2u livessp
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MsMpSvc]
@="Service"
.
R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2010-03-18 138576]
R2 gupdate;Google Update Service (gupdate);c:\program files (x86)\Google\Update\GoogleUpdate.exe [2010-07-08 135664]
R2 SkypeUpdate;Skype Updater;c:\program files (x86)\Skype\Updater\Updater.exe [2012-02-29 158856]
R3 AmUStor;AM USB Stroage Driver;c:\windows\system32\drivers\AmUStor.SYS [x]
R3 BBSvc;Bing Bar Update Service;c:\program files (x86)\Microsoft\BingBar\BBSvc.EXE [2011-02-28 183560]
R3 dg_ssudbus;SAMSUNG Mobile USB Composite Device Driver (DEVGURU Ver.);c:\windows\system32\DRIVERS\ssudbus.sys [x]
R3 ETD;ELAN PS/2 Port Input Device;c:\windows\system32\DRIVERS\ETD.sys [x]
R3 gupdatem;Služba Google Update (gupdatem);c:\program files (x86)\Google\Update\GoogleUpdate.exe [2010-07-08 135664]
R3 LADF_DHP2;G35 DHP2 Filter Driver;c:\windows\system32\DRIVERS\ladfDHP2amd64.sys [x]
R3 LADF_SBVM;G35 SBVM Filter Driver;c:\windows\system32\DRIVERS\ladfSBVMamd64.sys [x]
R3 Microsoft SharePoint Workspace Audit Service;Microsoft SharePoint Workspace Audit Service;c:\program files (x86)\Microsoft Office\Office14\GROOVE.EXE [2011-06-12 31125880]
R3 MpNWMon;Microsoft Malware Protection Network Driver;c:\windows\system32\DRIVERS\MpNWMon.sys [x]
R3 netr28ux;RT2870 USB Wireless LAN Card Driver pro systém Windows Vista;c:\windows\system32\DRIVERS\netr28ux.sys [x]
R3 NisDrv;Microsoft Network Inspection System;c:\windows\system32\DRIVERS\NisDrvWFP.sys [x]
R3 NisSrv;Microsoft Network Inspection;c:\program files\Microsoft Security Client\Antimalware\NisSrv.exe [2011-04-27 288272]
R3 osppsvc;Office Software Protection Platform;c:\program files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE [2010-01-09 4925184]
R3 SiSGbeLH;SiS191/SiS190 Ethernet Device NDIS 6.0 Driver;c:\windows\system32\DRIVERS\SiSG664.sys [x]
R3 SMARTMouseFilterx64;HID-compliant mouse;c:\windows\system32\DRIVERS\SMARTMouseFilterx64.sys [x]
R3 SMARTVHidMiniVistaAmd64;SMART HID Device;c:\windows\system32\DRIVERS\SMARTVHidMiniVistaAmd64.sys [x]
R3 SMARTVTabletPCx64;SMART Virtual TabletPC;c:\windows\system32\DRIVERS\SMARTVTabletPCx64.sys [x]
R3 ssadbus;SAMSUNG Android USB Composite Device driver (WDM);c:\windows\system32\DRIVERS\ssadbus.sys [x]
R3 ssadmdfl;SAMSUNG Android USB Modem (Filter);c:\windows\system32\DRIVERS\ssadmdfl.sys [x]
R3 ssadmdm;SAMSUNG Android USB Modem Drivers;c:\windows\system32\DRIVERS\ssadmdm.sys [x]
R3 ssudmdm;SAMSUNG Mobile USB Modem Drivers (DEVGURU Ver.);c:\windows\system32\DRIVERS\ssudmdm.sys [x]
R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys [x]
R3 WatAdminSvc;Služba Technologie aktivace Windows;c:\windows\system32\Wat\WatAdminSvc.exe [x]
R4 wlcrasvc;Windows Live Mesh remote connections service;c:\program files\Windows Live\Mesh\wlcrasvc.exe [2010-09-22 57184]
S0 lullaby;lullaby;c:\windows\system32\DRIVERS\lullaby.sys [x]
S0 nvpciflt;nvpciflt;c:\windows\system32\DRIVERS\nvpciflt.sys [x]
S0 sptd;sptd;c:\windows\System32\Drivers\sptd.sys [x]
S1 vwififlt;Virtual WiFi Filter Driver;c:\windows\system32\DRIVERS\vwififlt.sys [x]
S2 ASMMAP64;ASMMAP64;c:\program files (x86)\ASUS\ATK Package\ATKGFNEX\ASMMAP64.sys [2009-07-03 15416]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;c:\windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
S2 nvUpdatusService;NVIDIA Update Service Daemon;c:\program files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe [2012-02-10 2348352]
S2 UNS;Intel(R) Management & Security Application User Notification Service;c:\program files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe [2009-10-01 2314240]
S3 HECIx64;Intel(R) Management Engine Interface;c:\windows\system32\DRIVERS\HECIx64.sys [x]
S3 Impcd;Impcd;c:\windows\system32\DRIVERS\Impcd.sys [x]
S3 IntcDAud;Intel(R) Display Audio;c:\windows\system32\DRIVERS\IntcDAud.sys [x]
S3 L1C;NDIS Miniport Driver for Atheros AR813x/AR815x PCI-E Ethernet Controller (NDIS 6.20);c:\windows\system32\DRIVERS\L1C62x64.sys [x]
S3 nusb3hub;NEC Electronics USB 3.0 Hub Driver;c:\windows\system32\DRIVERS\nusb3hub.sys [x]
S3 nusb3xhc;NEC Electronics USB 3.0 Host Controller Driver;c:\windows\system32\DRIVERS\nusb3xhc.sys [x]
S3 vwifimp;Microsoft Virtual WiFi Miniport Service;c:\windows\system32\DRIVERS\vwifimp.sys [x]
.
.
Obsah adresáře 'Naplánované úlohy'
.
2012-03-15 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
- c:\program files (x86)\Google\Update\GoogleUpdate.exe [2010-07-08 08:33]
.
2012-03-15 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
- c:\program files (x86)\Google\Update\GoogleUpdate.exe [2010-07-08 08:33]
.
.
--------- x86-64 -----------
.
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ADSMOverlayIcon1]
@="{A8D448F4-0431-45AC-9F5E-E1B434AB2249}"
[HKEY_CLASSES_ROOT\CLSID\{A8D448F4-0431-45AC-9F5E-E1B434AB2249}]
2007-06-01 15:52 159744 ----a-w- c:\program files (x86)\ASUS\ASUS Data Security Manager\ShlExt\x64\OverlayIconShlExt1_64.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\AsusWSShellExt_B]
@="{6D4133E5-0742-4ADC-8A8C-9303440F7190}"
[HKEY_CLASSES_ROOT\CLSID\{6D4133E5-0742-4ADC-8A8C-9303440F7190}]
2009-11-26 05:49 70656 ----a-w- c:\program files (x86)\ASUS\ASUS WebStorage\SERVICE\AsusWSShellExt64.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\AsusWSShellExt_O]
@="{64174815-8D98-4CE6-8646-4C039977D808}"
[HKEY_CLASSES_ROOT\CLSID\{64174815-8D98-4CE6-8646-4C039977D808}]
2009-11-26 05:49 70656 ----a-w- c:\program files (x86)\ASUS\ASUS WebStorage\SERVICE\AsusWSShellExt64.dll
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"AmIcoSinglun64"="c:\program files (x86)\AmIcoSingLun\AmIcoSinglun64.exe" [2009-09-01 323584]
"RtHDVCpl"="c:\program files\Realtek\Audio\HDA\RAVCpl64.exe" [2009-12-10 9643552]
"MSC"="c:\program files\Microsoft Security Client\msseces.exe" [2011-06-15 1436736]
"IgfxTray"="c:\windows\system32\igfxtray.exe" [2012-01-10 167704]
"HotKeysCmds"="c:\windows\system32\hkcmd.exe" [2012-01-10 392984]
"Persistence"="c:\windows\system32\igfxpers.exe" [2012-01-10 417560]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
"LoadAppInit_DLLs"=0x1
"AppInit_DLLs"=c:\windows\System32\nvinitx.dll
.
------- Doplňkový sken -------
.
uStart Page = hxxp://start.icq.com/sk27211/
uLocal Page = c:\windows\system32\blank.htm
mLocal Page = c:\windows\SysWOW64\blank.htm
IE: E&xportovat do aplikace Microsoft Excel - c:\progra~2\MICROS~1\Office14\EXCEL.EXE/3000
IE: Od&eslat do aplikace OneNote - c:\progra~2\MICROS~1\Office14\ONBttnIE.dll/105
TCP: DhcpNameServer = 10.0.0.138
FF - ProfilePath - c:\users\David\AppData\Roaming\Mozilla\Firefox\Profiles\jrii7ewn.default\
FF - prefs.js: browser.search.selectedEngine - Google
FF - prefs.js: browser.startup.homepage - http://www.google.cz
FF - prefs.js: keyword.URL - hxxp://search.icq.com/search/afe_results.php?ch_id=sk27211&tb_ver=1.1.9&q=
.
- - - - NEPLATNÉ POLOŽKY ODSTRANĚNÉ Z REGISTRU - - - -
.
URLSearchHooks-{bf7380fa-e3b4-4db2-af3e-9d8783a45bfc} - (no file)
Toolbar-Locked - (no file)
Toolbar-Locked - (no file)
AddRemove-ASUS_N_Series_Screensaver - c:\windows\system32\ASUS_N_Series_Screensaver.scr
.
.
.
--------------------- ZAMKNUTÉ KLÍČE V REGISTRU ---------------------
.
[HKEY_USERS\S-1-5-21-557655330-2181919475-2068364034-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.eml\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="WindowsLiveMail.Email.1"
.
[HKEY_USERS\S-1-5-21-557655330-2181919475-2068364034-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.vcf\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="WindowsLiveMail.VCard.1"
.
[HKEY_USERS\S-1-5-21-557655330-2181919475-2068364034-1001\Software\SecuROM\License information*]
"datasecu"=hex:21,19,d5,67,69,ca,98,82,7d,a6,fa,76,05,a4,a2,22,8c,d9,ad,1e,e9,
eb,a8,21,22,14,43,0b,05,9e,0a,79,d8,ab,b9,55,66,67,73,39,2c,12,7f,f4,94,d0,\
"rkeysecu"=hex:d1,1b,e9,2d,4a,62,41,e1,34,d2,a5,da,22,c5,da,53
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{19114156-8E9A-4D4E-9EE9-17A0E48D3BBB}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil10c.exe,-101"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{19114156-8E9A-4D4E-9EE9-17A0E48D3BBB}\Elevation]
"Enabled"=dword:00000001
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{19114156-8E9A-4D4E-9EE9-17A0E48D3BBB}\LocalServer32]
@="c:\\Windows\\SysWow64\\Macromed\\Flash\\FlashUtil10c.exe"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{19114156-8E9A-4D4E-9EE9-17A0E48D3BBB}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@="Shockwave Flash Object"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\InprocServer32]
@="c:\\Windows\\SysWow64\\Macromed\\Flash\\Flash10c.ocx"
"ThreadingModel"="Apartment"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\MiscStatus]
@="0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ProgID]
@="ShockwaveFlash.ShockwaveFlash.10"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
@="c:\\Windows\\SysWow64\\Macromed\\Flash\\Flash10c.ocx, 1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\TypeLib]
@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\Version]
@="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
@="ShockwaveFlash.ShockwaveFlash"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@="Macromedia Flash Factory Object"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\InprocServer32]
@="c:\\Windows\\SysWow64\\Macromed\\Flash\\Flash10c.ocx"
"ThreadingModel"="Apartment"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ProgID]
@="FlashFactory.FlashFactory.1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
@="c:\\Windows\\SysWow64\\Macromed\\Flash\\Flash10c.ocx, 1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\TypeLib]
@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\Version]
@="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
@="FlashFactory.FlashFactory"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{1D4C8A81-B7AC-460A-8C23-98713C41D6B3}]
@Denied: (A 2) (Everyone)
@="IFlashBroker3"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{1D4C8A81-B7AC-460A-8C23-98713C41D6B3}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{1D4C8A81-B7AC-460A-8C23-98713C41D6B3}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\System*]
"OODEFRAG14.00.00.01PROFESSIONAL"="6CE7330D232874B03567985307124E46CF4AA3CFA35203C8F325CE58283A5D8635D0651CCFDA88F9ADDA986DFEBC9E127BECC74CFEBC9E127BECC74CFEBC9E127BECC74CFEBC9E127BECC74CFEBC9E127BECC74CFEBC9E127BECC74C5D575E7D6A3B98088EDD5E5BE2F6E667A2D97226D213B555C038D530D6EB3452C3E41900AFFBA2E1C44F22E5E456216657EF1775AD50F55332BB4A9050DE81CF165A8F68B1DC7D4292D3A343090B101F9AD565D45810A9C7EB85D9A13A9E36FBBDE08EF8FD189F514AB435F695C89CCB201AA8214F35D0724B0CAB07E3F1BF81410B86FBD48C88AEAFCB6EDC960B7B6C88FD3EE68B72F7D16B9AFE1D54611E865ACABD406A3ECC3CB855B8540D6C76C52626D5B6FB9BBB2F205EE846861EE3EDF576CD18665694228F70D4BFED30E85F001DF22582ABCE90E96BD16769793964B54B26DAE59E9DCA1423530A233946065250ECCA75C1F7C4043678EA60E9D8D66EE706E2768935E556559C9A899094488D8FF0441E1D11DB5A99EA3FC10C1276ABCF048E9E2842E620536B657064697CD312FCB2BB26882B8CD510D3D81E48BC296A0B41D435BC84E8CCCCDA1F85F5B8FC6FE53BFEE5DF4DF08A9F206482F15FD9035760070B2FB86157A4734D6779DA952753058E0A2E1E8E40271D18C01C5F6249FCD71329BBC46B6AABAB292449815C1840BC83639DBDA1E006C81B8364FE9BCF5F964EB4162B9CE2E903D178CE13C38AFD95ED6A6C939CB9F2A38819FE44930FB78D80F4863241023E7CDEC50835F5262F404E376DC6217EF4356D76B2F60DE217B365D56866566A5D1F560F0655CB77CB799B0885478B45E9054FAFDA28FB885C84ACE62E158FA54CF838FEECA35672207B3FBEB0C2E48882A2A40167298AA43F7FFADCD953D120679773E27715D7EA4A861761FB306F26429FD74ADA8F96BF4825681084773929DB0F6D29F1DEC99AC060F49A0A499FE08410C78CCCB531C255FD01F95B9C9477AC7700E83E80561E49529FB6100B1EDE738FC770E83A1F00181344BC9C21642032EB77DAD138DDF780A7D0A8DA34C62B11B99FBEEDFDDB299774271B1F2AE0A2168C155B340AF10ED5B1B686464DA93332B108E82E299354ABB4907E499CF45ED6FC8EEA85405D288DC47389471D8C4B7F1CB30093A3A7000469DD7018263D1747E40CAFF46498F33FB99C10DFB26727F4A3C1BB179DAE89212D5DA31CB38DF48EEF2AF148C8D484D5ECBB1BAE5DE66265F54C77C809713559A05469F8786C8528CC7A1E59FEF4CC91BFD05260326BFC73C3DCB04C9AECA9D6E37A3B66EC1439E0B003C5946290280717CB7D360D0A5698C3738B574CD27216207C35324C7263DDD23B1D7B8CF3521DD9938C07090AB7222E024EB75F8A7F69FC7916BC942C3D14ED12FDA45E9DEE907582903F86E8492F426FE3CAD12BA3772C"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Office\Common\Smart Tag\Actions\{B7EFF951-E52F-45CC-9EF7-57124F2177CC}]
@Denied: (A) (Everyone)
"Solution"="{15727DE6-F92D-4E46-ACB4-0E2C58B31A18}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Schema Library\ActionsPane3]
@Denied: (A) (Everyone)
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Schema Library\ActionsPane3\0]
"Key"="ActionsPane3"
"Location"="c:\\Program Files (x86)\\Common Files\\Microsoft Shared\\VSTO\\ActionsPane3.xsd"
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0000\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0006\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\PCW\Security]
@Denied: (Full) (Everyone)
.
------------------------ Jiné spuštené procesy ------------------------
.
c:\program files (x86)\ASUS\ASUS Data Security Manager\ADSMSrv.exe
c:\program files (x86)\ASUS\ATK Package\ATK Hotkey\ASLDRSrv.exe
c:\program files (x86)\ASUS\ATK Package\ATKGFNEX\GFNEXSrv.exe
c:\program files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
c:\program files (x86)\CyberLink\Shared files\RichVideo.exe
c:\program files (x86)\Microsoft\BingBar\SeaPort.EXE
c:\program files (x86)\ASUS\ASUS Live Update\ALU.exe
c:\program files (x86)\ASUS\ControlDeck\ControlDeckStartUp.exe
c:\program files (x86)\ASUS\SmartLogon\sensorsrv.exe
c:\program files (x86)\ASUS\Wireless Console 3\wcourier.exe
c:\program files (x86)\ASUS\ATK Package\ATK Hotkey\HControl.exe
c:\program files (x86)\ASUS\ATK Package\ATK Hotkey\ATKOSD.exe
c:\program files (x86)\ASUS\ATK Package\ATK Hotkey\KBFiltr.exe
c:\program files (x86)\ASUS\ATK Package\ATK Hotkey\WDC.exe
.
**************************************************************************
.
Celkový čas: 2012-03-16 00:22:11 - počítač byl restartován
ComboFix-quarantined-files.txt 2012-03-15 23:22
.
Před spuštěním: Volných bajtů: 22 773 231 616
Po spuštění: Volných bajtů: 22 900 568 064
.
- - End Of File - - C4D36EED1AD68A4527FA7FC83903ACBB