Kód: Vybrat vše
ComboFix 13-03-14.02 - tomsk . 03. 2013 2:11.2.2 - x64 NETWORK
Microsoft Windows 7 Professional 6.1.7601.1.1250.421.1051.18.4095.3309 [GMT 1:00]
Running from: c:\users\tomsk\Downloads\ComboFix.exe
AV: AVG Anti-Virus Free Edition 2013 *Disabled/Outdated* {0E9420C4-06B3-7FA0-3AB1-6E49CB52ECD9}
SP: AVG Anti-Virus Free Edition 2013 *Disabled/Outdated* {B5F5C120-2089-702E-0001-553BB0D5A664}
SP: IObit Malware Fighter *Disabled/Updated* {A751AC20-3B48-5237-898A-78C4436BB78D}
SP: Spybot - Search and Destroy *Enabled/Outdated* {9BC38DF1-3CCA-732D-A930-C1CA5F20A4B0}
SP: Windows Defender *Disabled/Outdated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
* Created a new restore point
.
.
((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
---- Previous Run -------
.
c:\program files (x86)\BrowserCompanion\blabbers-ff-full.xpi
c:\program files (x86)\BrowserCompanion\logo.ico
c:\program files (x86)\BrowserCompanion\sqlite3.dll
c:\program files (x86)\BrowserCompanion\uninstall.exe
c:\program files (x86)\BrowserCompanion\updater.ini
c:\program files (x86)\codec\uninstall.exe
c:\program files (x86)\codec\WakeSplitter.ax
c:\program files (x86)\P2Pcontrol\config\nodes.dat
c:\program files (x86)\P2Pcontrol\data
c:\program files (x86)\P2Pcontrol\P2Pcontrol.url
c:\program files (x86)\P2Pcontrol\P2Pcontrol_claim.url
c:\program files (x86)\P2Pcontrol\uninst.exe
c:\programdata\Safe\zsinfo.dat
C:\uninstall.exe
c:\users\tomsk\1a.png
c:\users\tomsk\5a.png
c:\users\tomsk\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\P2Pcontrol\Claim money.lnk
c:\users\tomsk\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\P2Pcontrol\P2Pcontrol website.lnk
c:\users\tomsk\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\P2Pcontrol\Uninstall.lnk
c:\users\tomsk\AppData\Roaming\mIRC\logs\status.log
c:\users\tomsk\Desktop\Setup.exe
c:\users\tomsk\Documents\Downloads\CT2776682_BrotherSoft_Extreme.exe
c:\windows\pkunzip.pif
c:\windows\pkzip.pif
c:\windows\SysWow64\Packet.dll
c:\windows\SysWow64\pthreadVC.dll
c:\windows\SysWow64\wpcap.dll
D:\install.exe
.
.
((((((((((((((((((((((((((((((((((((((( Drivers/Services )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
-------\Legacy_NPF
-------\Service_npf
.
.
((((((((((((((((((((((((( Files Created from 2013-02-15 to 2013-03-15 )))))))))))))))))))))))))))))))
.
.
2013-07-03 20:20 . 2013-07-03 20:20 -------- d-----w- c:\users\tomsk\AppData\Local\SplitMediaLabs
2013-07-03 20:19 . 2013-07-03 20:19 -------- d-----w- c:\programdata\SplitMediaLabs
2013-07-03 20:19 . 2013-07-03 20:19 -------- d-----w- c:\program files (x86)\SplitMediaLabs
2013-07-03 20:17 . 2013-07-03 20:17 -------- d-----w- c:\users\tomsk\AppData\Roaming\SplitMediaLabs
2013-03-15 01:19 . 2013-03-15 01:19 -------- d-----w- c:\users\tomsk\AppData\Local\temp
2013-03-15 01:19 . 2013-03-15 01:19 -------- d-----w- c:\users\test\AppData\Local\temp
2013-03-15 01:19 . 2013-03-15 01:19 -------- d-----w- c:\users\Internet\AppData\Local\temp
2013-03-15 01:19 . 2013-03-15 01:19 -------- d-----w- c:\users\DefaultAppPool\AppData\Local\temp
2013-03-15 01:19 . 2013-03-15 01:19 -------- d-----w- c:\users\Default\AppData\Local\temp
2013-03-14 03:41 . 2013-03-14 03:41 -------- d-----w- C:\_OTM
2013-03-03 21:43 . 2013-03-03 21:43 -------- d-----w- c:\program files (x86)\Spirent Communications
2013-03-03 20:45 . 2013-03-04 12:52 -------- d-----w- c:\users\tomsk\AppData\Local\Htc
2013-03-03 20:17 . 2012-07-25 11:00 1002728 ----a-w- c:\windows\system32\WinUSBCoInstaller2.dll
2013-03-03 20:15 . 2013-03-03 20:17 -------- d-----w- c:\users\tomsk\AppData\Local\Android-Sync
2013-03-03 19:39 . 2013-03-03 19:39 -------- d-----w- c:\users\tomsk\AppData\Roaming\Teleca
2013-03-03 19:39 . 2013-03-03 20:41 -------- d-----w- c:\program files (x86)\Common Files\Teleca Shared
2013-03-03 19:36 . 2013-03-03 19:36 -------- d-----w- c:\windows\Downloaded Installations
2013-03-02 10:44 . 2013-01-11 10:52 19032 ------w- c:\windows\system32\pwdrvio.sys
2013-03-02 10:44 . 2013-01-11 10:52 3055808 ----a-w- c:\windows\system32\pwNative.exe
2013-03-02 10:44 . 2013-01-11 10:52 12384 ------w- c:\windows\system32\pwdspio.sys
2013-03-02 10:44 . 2013-03-02 10:44 -------- d-----w- c:\program files (x86)\MiniTool Partition Wizard Home Edition 7.7
2013-03-01 21:46 . 2013-03-01 21:46 -------- d-----w- c:\users\tomsk\AppData\Roaming\Mael
2013-03-01 20:10 . 2010-06-11 10:32 708168 ----a-w- c:\windows\system32\WinUSBCoInstaller.dll
2013-03-01 20:10 . 2010-06-11 10:32 1490656 ----a-w- c:\windows\system32\WdfCoInstaller01007.dll
2013-02-27 20:42 . 2013-02-27 21:03 -------- d-----w- c:\users\tomsk\AppData\Local\Temporary Projects
2013-02-26 11:40 . 2009-01-25 11:14 17272 ----a-w- c:\windows\system32\sdnclean64.exe
2013-02-26 11:39 . 2013-02-26 11:40 -------- d-----w- c:\program files (x86)\Spybot - Search & Destroy 2
2013-02-26 11:38 . 2013-02-26 11:38 -------- d-----w- c:\users\tomsk\AppData\Local\Programs
2013-02-26 08:44 . 2013-02-26 08:44 -------- d-----w- c:\users\test\AppData\Local\Mozilla
2013-02-26 08:43 . 2013-02-26 08:43 -------- d-----w- c:\users\test\AppData\Local\Opera
2013-02-26 08:43 . 2013-02-26 08:43 -------- d-----w- c:\users\test\AppData\Local\AVG Secure Search
2013-02-21 20:51 . 2013-01-09 01:10 996352 ----a-w- c:\program files\Common Files\Microsoft Shared\VGX\VGX.dll
2013-02-21 20:51 . 2013-01-08 22:01 768000 ----a-w- c:\program files (x86)\Common Files\Microsoft Shared\VGX\VGX.dll
2013-02-21 20:00 . 2013-01-05 05:53 5553512 ----a-w- c:\windows\system32\ntoskrnl.exe
2013-02-21 20:00 . 2013-01-05 05:00 3967848 ----a-w- c:\windows\SysWow64\ntkrnlpa.exe
2013-02-21 20:00 . 2013-01-05 05:00 3913064 ----a-w- c:\windows\SysWow64\ntoskrnl.exe
2013-02-21 20:00 . 2013-01-04 03:26 3153408 ----a-w- c:\windows\system32\win32k.sys
2013-02-21 20:00 . 2013-01-04 05:46 215040 ----a-w- c:\windows\system32\winsrv.dll
2013-02-21 20:00 . 2013-01-04 04:51 5120 ----a-w- c:\windows\SysWow64\wow32.dll
2013-02-21 20:00 . 2013-01-04 02:47 25600 ----a-w- c:\windows\SysWow64\setup16.exe
2013-02-21 20:00 . 2013-01-04 02:47 7680 ----a-w- c:\windows\SysWow64\instnm.exe
2013-02-21 20:00 . 2013-01-04 02:47 14336 ----a-w- c:\windows\SysWow64\ntvdm64.dll
2013-02-21 20:00 . 2013-01-04 02:47 2048 ----a-w- c:\windows\SysWow64\user.exe
2013-02-21 20:00 . 2013-01-03 06:00 1913192 ----a-w- c:\windows\system32\drivers\tcpip.sys
2013-02-21 20:00 . 2013-01-03 06:00 288088 ----a-w- c:\windows\system32\drivers\FWPKCLNT.SYS
2013-02-17 14:40 . 2013-02-17 14:40 -------- d-----w- c:\program files (x86)\Astroburn Lite
2013-02-15 22:04 . 2013-02-15 22:04 208448 ----a-w- c:\program files (x86)\Internet Explorer\Plugins\nppdf32.dll
2013-02-15 13:41 . 2012-12-19 13:48 237992 ----a-w- c:\windows\system32\drivers\VBoxDrv.sys
2013-02-15 13:41 . 2012-12-19 13:47 120232 ----a-w- c:\windows\system32\drivers\VBoxUSBMon.sys
.
.
.
(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2013-02-27 18:45 . 2012-07-06 12:08 691568 ----a-w- c:\windows\SysWow64\FlashPlayerApp.exe
2013-02-27 18:45 . 2011-11-23 19:11 71024 ----a-w- c:\windows\SysWow64\FlashPlayerCPLApp.cpl
2013-02-21 20:54 . 2011-04-10 15:29 70004024 ----a-w- c:\windows\system32\MRT.exe
2013-02-18 20:36 . 2012-10-12 18:42 39768 ----a-w- c:\windows\system32\drivers\avgtpx64.sys
2013-01-04 04:43 . 2013-02-21 20:00 44032 ----a-w- c:\windows\apppatch\acwow64.dll
2012-12-29 20:13 . 2012-12-29 20:13 46080 ----a-w- c:\windows\system32\atmlib.dll
2012-12-29 20:13 . 2012-12-29 20:13 367616 ----a-w- c:\windows\system32\atmfd.dll
2012-12-29 20:13 . 2012-12-29 20:13 34304 ----a-w- c:\windows\SysWow64\atmlib.dll
2012-12-29 20:13 . 2012-12-29 20:13 295424 ----a-w- c:\windows\SysWow64\atmfd.dll
2012-12-29 20:12 . 2012-12-29 20:12 3174912 ----a-w- c:\windows\system32\rdpcorets.dll
2012-12-29 20:12 . 2012-12-29 20:12 243200 ----a-w- c:\windows\system32\rdpudd.dll
2012-12-29 20:12 . 2012-12-29 20:12 19456 ----a-w- c:\windows\system32\drivers\rdpvideominiport.sys
2012-12-29 20:12 . 2012-12-29 20:12 192000 ----a-w- c:\windows\SysWow64\rdpendp_winip.dll
2012-12-29 20:12 . 2012-12-29 20:12 15360 ----a-w- c:\windows\system32\RdpGroupPolicyExtension.dll
2012-12-29 20:12 . 2012-12-29 20:12 62976 ----a-w- c:\windows\system32\TSWbPrxy.exe
2012-12-29 20:12 . 2012-12-29 20:12 54272 ----a-w- c:\windows\system32\MsRdpWebAccess.dll
2012-12-29 20:12 . 2012-12-29 20:12 228864 ----a-w- c:\windows\system32\rdpendp_winip.dll
2012-12-29 20:12 . 2012-12-29 20:12 1048064 ----a-w- c:\windows\SysWow64\mstsc.exe
2012-12-29 20:12 . 2012-12-29 20:12 4916224 ----a-w- c:\windows\SysWow64\mstscax.dll
2012-12-29 20:12 . 2012-12-29 20:12 43520 ----a-w- c:\windows\system32\TsUsbGDCoInstaller.dll
2012-12-29 20:12 . 2012-12-29 20:12 37376 ----a-w- c:\windows\SysWow64\tsgqec.dll
2012-12-29 20:12 . 2012-12-29 20:12 269312 ----a-w- c:\windows\SysWow64\aaclient.dll
2012-12-29 20:12 . 2012-12-29 20:12 13312 ----a-w- c:\windows\system32\TsUsbRedirectionGroupPolicyExtension.dll
2012-12-29 20:12 . 2012-12-29 20:12 13312 ----a-w- c:\windows\system32\TsUsbRedirectionGroupPolicyControl.exe
2012-12-29 20:12 . 2012-12-29 20:12 1123840 ----a-w- c:\windows\system32\mstsc.exe
2012-12-29 20:12 . 2012-12-29 20:12 57856 ----a-w- c:\windows\system32\drivers\TsUsbFlt.sys
2012-12-29 20:12 . 2012-12-29 20:12 5773824 ----a-w- c:\windows\system32\mstscax.dll
2012-12-29 20:12 . 2012-12-29 20:12 46592 ----a-w- c:\windows\SysWow64\MsRdpWebAccess.dll
2012-12-29 20:12 . 2012-12-29 20:12 44032 ----a-w- c:\windows\system32\tsgqec.dll
2012-12-29 20:12 . 2012-12-29 20:12 384000 ----a-w- c:\windows\system32\wksprt.exe
2012-12-29 20:12 . 2012-12-29 20:12 322560 ----a-w- c:\windows\system32\aaclient.dll
2012-12-29 20:12 . 2012-12-29 20:12 18432 ----a-w- c:\windows\system32\wksprtPS.dll
2012-12-29 20:12 . 2012-12-29 20:12 16896 ----a-w- c:\windows\SysWow64\wksprtPS.dll
2012-12-29 20:11 . 2012-12-29 20:11 96768 ----a-w- c:\windows\SysWow64\sspicli.dll
2012-12-29 20:11 . 2012-12-29 20:11 458712 ----a-w- c:\windows\system32\drivers\cng.sys
2012-12-29 20:11 . 2012-12-29 20:11 340992 ----a-w- c:\windows\system32\schannel.dll
2012-12-29 20:11 . 2012-12-29 20:11 22016 ----a-w- c:\windows\SysWow64\secur32.dll
2012-12-29 20:11 . 2012-12-29 20:11 154480 ----a-w- c:\windows\system32\drivers\ksecpkg.sys
2012-12-29 20:11 . 2012-12-29 20:11 1448448 ----a-w- c:\windows\system32\lsasrv.dll
2012-12-29 20:11 . 2012-12-29 20:11 247808 ----a-w- c:\windows\SysWow64\schannel.dll
2012-12-19 13:47 . 2012-12-19 13:47 204200 ----a-w- c:\windows\system32\VBoxNetFltNobj.dll
2012-12-19 13:47 . 2012-12-19 13:47 146856 ----a-w- c:\windows\system32\drivers\VBoxNetFlt.sys
2012-12-19 13:47 . 2012-12-19 13:47 132008 ----a-w- c:\windows\system32\drivers\VBoxNetAdp.sys
2012-12-19 13:47 . 2012-12-19 13:47 106408 ----a-w- c:\windows\system32\drivers\VBoxUSB.sys
2012-12-16 20:00 . 2012-05-13 16:20 280792 ----a-w- c:\windows\SysWow64\PnkBstrB.exe
2012-12-16 20:00 . 2011-08-16 12:35 280792 ----a-w- c:\windows\SysWow64\PnkBstrB.xtr
2012-12-16 19:59 . 2011-07-02 17:16 281032 ----a-w- c:\windows\SysWow64\PnkBstrB.ex0
.
.
((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* empty entries & legit default entries are not shown
REGEDIT4
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\~\Browser Helper Objects\{95B7759C-8C7F-4BF1-B163-73684A933233}]
2013-02-18 20:36 1929392 ----a-w- c:\program files (x86)\AVG Secure Search\14.2.0.1\AVG Secure Search_toolbar.dll
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Toolbar]
"{95B7759C-8C7F-4BF1-B163-73684A933233}"= "c:\program files (x86)\AVG Secure Search\14.2.0.1\AVG Secure Search_toolbar.dll" [2013-02-18 1929392]
.
[HKEY_CLASSES_ROOT\clsid\{95b7759c-8c7f-4bf1-b163-73684a933233}]
[HKEY_CLASSES_ROOT\AVG Secure Search.PugiObj.1]
[HKEY_CLASSES_ROOT\AVG Secure Search.PugiObj]
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"DAEMON Tools Lite"="c:\program files (x86)\DAEMON Tools Lite\DTLite.exe" [2011-01-20 1305408]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorUser"= 3 (0x3)
"EnableUIADesktopToggle"= 0 (0x0)
"SoftwareSASGeneration"= 1 (0x1)
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\windows]
"LoadAppInit_DLLs"=1 (0x1)
.
[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\session manager]
BootExecute REG_MULTI_SZ autocheck autochk *\0OODBS\0\0sdnclean64.exe
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\AVG Anti-Spyware Guard]
@="Service"
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\CLPSLS]
@="Service"
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\run-]
"SunJavaUpdateSched"="c:\program files (x86)\Common Files\Java\Java Update\jusched.exe"
"AdobeCS5.5ServiceManager"="c:\program files (x86)\Common Files\Adobe\CS5.5ServiceManager\CS5.5ServiceManager.exe" -launchedbylogin
"StartCCC"="c:\program files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun
.
R0 sptd;sptd;c:\windows\System32\Drivers\sptd.sys [2011-10-23 503352]
R1 AVGIDSDriver;AVGIDSDriver;c:\windows\system32\DRIVERS\avgidsdrivera.sys [2012-10-22 154464]
R1 Avgldx64;AVG AVI Loader Driver;c:\windows\system32\DRIVERS\avgldx64.sys [2012-10-02 185696]
R1 CFRMD;CFRMD;c:\windows\system32\DRIVERS\CFRMD.sys [2010-12-09 79552]
R1 CFRPD;CFRPD;c:\windows\system32\DRIVERS\CFRPD.sys [2010-12-09 41472]
R1 MpKsl773426dd;MpKsl773426dd;c:\windows\system32\MpEngineStore\MpKsl773426dd.sys [2012-04-11 35664]
R1 VBoxDrv;VirtualBox Service;c:\windows\system32\DRIVERS\VBoxDrv.sys [2012-12-19 237992]
R1 VBoxUSBMon;VirtualBox USB Monitor Driver;c:\windows\system32\DRIVERS\VBoxUSBMon.sys [2012-12-19 120232]
R2 ADExchange;ArcSoft Exchange Service;c:\program files (x86)\Common Files\ArcSoft\esinter\Bin\eservutil.exe [2012-08-14 43624]
R2 AdvancedSystemCareService6;Advanced SystemCare Service 6;c:\program files (x86)\IObit\Advanced SystemCare 6\ASCService.exe [2012-10-12 1026432]
R2 AMD External Events Utility;AMD External Events Utility;c:\windows\system32\atiesrxx.exe [2012-02-15 235520]
R2 avgfws;AVG Firewall;c:\program files (x86)\AVG\AVG2013\avgfws.exe [2012-12-10 1342024]
R2 AVGIDSAgent;AVGIDSAgent;c:\program files (x86)\AVG\AVG2013\avgidsagent.exe [2012-11-15 5814904]
R2 avgwd;AVG WatchDog;c:\program files (x86)\AVG\AVG2013\avgwdsvc.exe [2012-10-22 196664]
R2 BstHdDrv;BlueStacks Hypervisor;c:\program files (x86)\BlueStacks\HD-Hypervisor-amd64.sys [2012-05-31 75144]
R2 BstHdLogRotatorSvc;BlueStacks Log Rotator Service;c:\program files (x86)\BlueStacks\HD-LogRotatorService.exe [2012-05-31 385416]
R2 Cleaner_Validator;COMODO System - Cleaner Service;c:\program files\COMODO\COMODO System-Cleaner\Cleaner_Validator.exe [2010-12-09 371648]
R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2010-03-18 138576]
R2 cpuz135;cpuz135;c:\windows\system32\drivers\cpuz135_x64.sys [2011-09-21 21992]
R2 FreemakeVideoCapture;FreemakeVideoCapture;c:\program files (x86)\Freemake\CaptureLib\CaptureLibService.exe [2012-12-28 9216]
R2 PassThru Service;Internet Pass-Through Service;c:\program files (x86)\HTC\Internet Pass-Through\PassThruSvr.exe [2012-12-07 167424]
R2 PfFilter;PfFilter;c:\program files (x86)\IObit\Protected Folder\pffilter.sys [2011-03-16 36792]
R2 RichVideo64;Cyberlink RichVideo64 Service(CRVS);c:\program files\CyberLink\Shared files\RichVideo64.exe [2012-10-24 390672]
R2 SDScannerService;Spybot-S&D 2 Scanner Service;c:\program files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe [2012-11-13 1103392]
R2 SDUpdateService;Spybot-S&D 2 Updating Service;c:\program files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe [2012-11-13 1369624]
R2 SDWSCService;Spybot-S&D 2 Security Center Service;c:\program files (x86)\Spybot - Search & Destroy 2\SDWSCSvc.exe [2012-11-13 168384]
R2 SkypeUpdate;Skype Updater;c:\program files (x86)\Skype\Updater\Updater.exe [2012-11-09 160944]
R2 vToolbarUpdater14.2.0;vToolbarUpdater14.2.0;c:\program files (x86)\Common Files\AVG Secure Search\vToolbarUpdater\14.2.0\ToolbarUpdater.exe [2013-02-18 968880]
R3 AtiHDAudioService;AMD Function Driver for HD Audio Service;c:\windows\system32\drivers\AtihdW76.sys [2011-12-05 95248]
R3 BEService;BattlEye Service;c:\program files (x86)\Common Files\BattlEye\BEService.exe [2002-01-03 49152]
R3 BstHdAndroidSvc;BlueStacks Android Service;c:\program files (x86)\BlueStacks\HD-Service.exe BstHdAndroidSvc Android [x]
R3 Desura Install Service;Desura Install Service;c:\program files (x86)\Common Files\Desura\desura_service.exe [2012-10-02 131912]
R3 dump_wmimmc;dump_wmimmc;e:\heroes in the sky\GameGuard\dump_wmimmc.sys [x]
R3 EagleX64;EagleX64;c:\windows\system32\drivers\EagleX64.sys [2011-09-18 138328]
R3 esihdrv;esihdrv;c:\users\tomsk\AppData\Local\Temp\esihdrv.sys [x]
R3 GGSAFERDriver;GGSAFER Driver;c:\program files (x86)\Garena\safedrv.sys [x]
R3 HTCAND64;HTC Device Driver;c:\windows\system32\Drivers\ANDROIDUSB.sys [2009-11-02 33736]
R3 htcnprot;HTC NDIS Protocol Driver;c:\windows\system32\DRIVERS\htcnprot.sys [2010-06-25 36928]
R3 ksfmonsys;ksfmonsys;c:\program files (x86)\Kingsoft\PCDoctor\ksfmonsys64.sys [x]
R3 LVPr2M64;Logitech LVPr2M64 Driver;c:\windows\system32\DRIVERS\LVPr2M64.sys [2009-10-06 30232]
R3 LVPrcS64;Process Monitor;c:\program files\Common Files\LogiShrd\LVMVFM\LVPrcSrv.exe [2009-10-06 191000]
R3 ManyCam;ManyCam Virtual Webcam, WDM Video Capture Driver;c:\windows\system32\DRIVERS\ManyCam_x64.sys [2008-03-13 27136]
R3 NAUpdate;Nero Update;c:\program files (x86)\Nero\Update\NASvc.exe [2011-09-23 641832]
R3 npggsvc;nProtect GameGuard Service;c:\windows\system32\GameMon.des [x]
R3 pwdrvio;pwdrvio;c:\windows\system32\pwdrvio.sys [2013-01-11 19032]
R3 pwdspio;pwdspio;c:\windows\system32\pwdspio.sys [2013-01-11 12384]
R3 RdpVideoMiniport;Remote Desktop Video Miniport Driver;c:\windows\system32\drivers\rdpvideominiport.sys [2012-12-29 19456]
R3 SwitchBoard;SwitchBoard;c:\program files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [2010-02-19 517096]
R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys [2012-12-29 57856]
R3 TunngleService;TunngleService;c:\program files (x86)\Tunngle\TnglCtrl.exe [2012-11-26 745368]
R3 UrlFilter;UrlFilter;c:\program files (x86)\IObit\IObit Malware Fighter\drivers\win7_amd64\UrlFilter.sys [2011-09-20 21872]
R3 VASDeviceDrm;Virtual Audio Streaming with Drm (WDM);c:\windows\system32\drivers\vasdDev.sys [2012-03-19 1454896]
R3 VBoxUSB;VirtualBox USB;c:\windows\system32\Drivers\VBoxUSB.sys [2012-12-19 106408]
R3 VSPerfDrv100;Performance Tools Driver 10.0;c:\program files (x86)\Microsoft Visual Studio 10.0\Team Tools\Performance Tools\x64\VSPerfDrv100.sys [2010-03-17 68440]
R3 WatAdminSvc;Služba Windows Activation Technologies;c:\windows\system32\Wat\WatAdminSvc.exe [2011-04-10 1255736]
R3 wxpSvc;webcamXP Service;c:\program files (x86)\wLite\wService.exe [2010-05-02 5027328]
R4 Apache2.2;Apache2.2;c:\xampp\apache\bin\httpd.exe [2012-08-18 22016]
R4 FileMonitor;FileMonitor;c:\program files (x86)\IObit\IObit Malware Fighter\Drivers\win7_amd64\FileMonitor.sys [2012-01-05 21384]
R4 hshld;Hotspot Shield Service;c:\program files (x86)\Hotspot Shield\bin\openvpnas.exe [2012-10-13 523632]
R4 HssWd;Hotspot Shield Monitoring Service;c:\program files (x86)\Hotspot Shield\bin\hsswd.exe [2012-10-12 389488]
R4 MSSQLServerADHelper100;SQL Active Directory Helper Service;c:\program files\Microsoft SQL Server\100\Shared\SQLADHLP.EXE [2009-07-22 61976]
S0 AVGIDSHA;AVGIDSHA;c:\windows\system32\DRIVERS\avgidsha.sys [2012-10-15 63328]
S0 Avgloga;AVG Logging Driver;c:\windows\system32\DRIVERS\avgloga.sys [2012-09-21 225120]
S0 Avgmfx64;AVG Mini-Filter Resident Anti-Virus Shield;c:\windows\system32\DRIVERS\avgmfx64.sys [2012-11-15 111968]
S0 Avgrkx64;AVG Anti-Rootkit Driver;c:\windows\system32\DRIVERS\avgrkx64.sys [2012-09-14 40800]
S0 PxHlpa64;PxHlpa64;c:\windows\System32\Drivers\PxHlpa64.sys [2009-07-09 55280]
S1 AvgAsC64;AVG Anti-Spyware Clean Driver;c:\windows\system32\DRIVERS\AvgAsC64.sys [2007-05-30 14072]
S1 Avgtdia;AVG TDI Driver;c:\windows\system32\DRIVERS\avgtdia.sys [2012-09-21 200032]
S1 avgtp;avgtp;c:\windows\system32\drivers\avgtpx64.sys [2013-02-18 39768]
S1 dtsoftbus01;DAEMON Tools Virtual Bus Driver;c:\windows\system32\DRIVERS\dtsoftbus01.sys [2011-04-23 254528]
S2 CLPSLS;COMODO livePCsupport Service;c:\program files\COMODO\COMODO GeekBuddy\CLPSLS.exe [2011-11-23 1267000]
S3 AtcL001;NDIS Miniport Driver for Atheros L1 Gigabit Ethernet Controller;c:\windows\system32\DRIVERS\l160x64.sys [2009-06-25 58368]
S3 tap0901t;TAP-Win32 Adapter V9 (Tunngle);c:\windows\system32\DRIVERS\tap0901t.sys [2009-09-16 31232]
S3 VBoxNetAdp;VirtualBox Host-Only Ethernet Adapter;c:\windows\system32\DRIVERS\VBoxNetAdp.sys [2012-12-19 132008]
S3 VBoxNetFlt;VirtualBox Bridged Networking Service;c:\windows\system32\DRIVERS\VBoxNetFlt.sys [2012-12-19 146856]
.
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\svchost]
iissvcs REG_MULTI_SZ w3svc was
apphost REG_MULTI_SZ apphostsvc
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\active setup\installed components\{8A69D345-D564-463c-AFF1-A69D9E530F96}]
2013-03-05 08:10 1630672 ----a-w- c:\program files (x86)\Google\Chrome\Application\25.0.1364.152\Installer\chrmstp.exe
.
Contents of the 'Scheduled Tasks' folder
.
2013-03-15 c:\windows\Tasks\Adobe Flash Player Updater.job
- c:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2012-07-06 18:45]
.
2013-07-04 c:\windows\Tasks\COMODO Updater.job
- c:\program files\COMODO\COMODO System-Cleaner\Updater.exe [2010-12-09 12:08]
.
.
--------- X64 Entries -----------
.
.
[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{F9E4A054-E9B1-4BC3-83A3-76A1AE736170}]
2012-10-10 16:30 287048 ----a-w- c:\program files (x86)\Hotspot Shield\HssIE\HssIE_64.dll
.
------- Supplementary Scan -------
.
uLocal Page = c:\windows\system32\blank.htm
uStart Page = hxxp://www.google.sk/
mLocal Page = c:\windows\SysWOW64\blank.htm
IE: E&xportovať do programu Microsoft Excel - c:\progra~2\MICROS~1\OFFICE11\EXCEL.EXE/3000
IE: Prevziať pomocou FDM - file://c:\program files (x86)\Free Download Manager\dllink.htm
IE: Prevziať video pomocou FDM - file://c:\program files (x86)\Free Download Manager\dlfvideo.htm
IE: Prevziať vybrané pomocou FDM - file://c:\program files (x86)\Free Download Manager\dlselected.htm
IE: Prevziať všetko pomocou FDM - file://c:\program files (x86)\Free Download Manager\dlall.htm
IE: {{7578ADEA-D65F-4C89-A249-B1C88B6FFC20} - c:\program files (x86)\ICQ7.5\ICQ.exe
IE: {{d9288080-1baa-4bc4-9cf8-a92d743db949} - c:\users\tomsk\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\IMVU\Run IMVU.lnk
Trusted Zone: clonewarsadventures.com
Trusted Zone: freerealms.com
Trusted Zone: soe.com
Trusted Zone: sony.com
Handler: viprotocol - {B658800C-F66E-4EF3-AB85-6C0C227862A9} - c:\program files (x86)\Common Files\AVG Secure Search\ViProtocolInstaller\14.2.0\ViProtocol.dll
DPF: {6685D182-E710-4193-9678-785C6B7290E5} - hxxp://snehuliak.dynalias.net/Option/Media.CAB
DPF: {79EE81BD-6194-4240-A04F-131A81513DCB} - hxxp://snehuliak.dynalias.net/Media.CAB
FF - ProfilePath - c:\users\tomsk\AppData\Roaming\Mozilla\Firefox\Profiles\t413u9ml.default-1355690283645\
FF - ExtSQL: 2013-02-05 12:45; cryenginebrowserplugin@crytek.com; c:\users\tomsk\AppData\Roaming\Mozilla\Firefox\Profiles\t413u9ml.default-1355690283645\extensions\cryenginebrowserplugin@crytek.com
FF - user.js: extentions.y2layers.installId - df2bafcc-9324-4d1f-b18f-acc90ae6979c
FF - user.js: extentions.y2layers.defaultEnableAppsList - DropDownDeals,buzzdock,YontooNewOffers
FF - user.js: extensions.autoDisableScopes - 14
FF - user.js: network.http.pipelining.maxrequests - 8
FF - user.js: network.http.request.max-start-delay - 0
FF - user.js: browser.turbo.enabled - true
FF - user.js: browser.display.show_image_placeholders - true
FF - user.js: browser.chrome.favicons - false
FF - user.js: browser.urlbar.autocomplete.enabled - true
FF - user.js: browser.cache.memory.capacity - 65536
FF - user.js: content.notify.ontimer - true
FF - user.js: content.interrupt.parsing - true
FF - user.js: content.switch.threshold - 750000
FF - user.js: plugin.expose_full_path - true
FF - user.js: ui.submenuDelay - 0
FF - user.js: network.http.pipelining - true
FF - user.js: network.http.proxy.pipelining - true
FF - user.js: network.http.max-connections - 32
FF - user.js: network.http.max-connections-per-server - 8
FF - user.js: network.http.max-persistent-connections-per-proxy - 8
FF - user.js: network.http.max-persistent-connections-per-server - 4
FF - user.js: browser.urlbar.autofill - true
FF - user.js: browser.xul.error_pages.enabled - true
FF - user.js: content.notify.backoffcount - 5
FF - user.js: content.maxtextrun - 8191
FF - user.js: content.notify.interval - 750000
FF - user.js: content.max.tokenizing.time - 3000000
FF - user.js: nglayout.initialpaint.delay - 0
.
- - - - ORPHANS REMOVED - - - -
.
Notify-SDWinLogon - SDWinLogon.dll
SafeBoot-AVG Anti-Spyware Driver
SafeBoot-IMFservice
ShellIconOverlayIdentifiers-{2012DE06-50C0-48BD-ACDE-88F95D4CAD1F} - (no file)
ShellIconOverlayIdentifiers-{C72C6188-BEF2-46E5-A89A-52F0ED75219E} - (no file)
ShellIconOverlayIdentifiers-{C92F6BC2-AF61-4C0E-80E0-939B8282DDB7} - (no file)
ShellIconOverlayIdentifiers-{CB1EFEF8-D5E0-49D1-B768-41B48B1D7803} - (no file)
AddRemove-BrowserCompanion - c:\program files (x86)\BrowserCompanion\uninstall.exe
AddRemove-Codec - c:\program files (x86)\Codec\uninstall.exe
AddRemove-Minecraft Klient - Nový Věk & Svět Dávných Bohů 1.0 - MC 1.4.6 - C:\Uninstall.exe
AddRemove-Minecraft Klient Update - Nový Věk & Svět Dávných Bohů 1.1 - MC 1.4.6 - C:\Uninstall.exe
AddRemove-P2Pcontrol - c:\program files (x86)\P2Pcontrol\uninst.exe
AddRemove-_{AA902C31-B49D-4608-BCCF-2519EB77722D} - c:\program files (x86)\Corel\Corel VideoStudio Pro X4\Setup\{AA902C31-B49D-4608-BCCF-2519EB77722D}\SetupARP.exe
AddRemove-GoforFiles - c:\program files (x86)\GoforFiles\uninstall.exe
AddRemove-Planet Side 2 - d:\planet side 2\Uninstaller.exe
AddRemove-PlanetSide 2 - d:\planetside 2\Uninstaller.exe
AddRemove-soe-PlanetSide 2 - d:\planetside 2\Uninstaller.exe
AddRemove-soe-PlanetSide 2 (2) - d:\planetside 2\Uninstaller.exe
AddRemove-YourFileDownloader - c:\program files (x86)\YourFileDownloader\uninstall.exe
.
.
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\wxpSvc]
"ImagePath"="c:\program files (x86)\wLite\wService.exe /startedbyscm:5053B757-40E35B3B-webcamSRV"
"ImagePath"="\"c:\program files\CyberLink\Shared files\RichVideo64.exe\"\00Z
[\]^_Ž\00\00Ž\00\00\00\00\0b\00JKLMNO\00\00\00\00\00\00\00\00\03\00\00\00|}~Ž\00\00Ž\00\00\00\00Ž\00\00\00\00\00\00\00‘’“"
.
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\npggsvc]
"ImagePath"="c:\windows\system32\GameMon.des -service"
.
--------------------- LOCKED REGISTRY KEYS ---------------------
.
[HKEY_USERS\S-1-5-21-158558460-2646869902-57166230-1001\Software\SecuROM\!CAUTION! NEVER A OR CHANGE ANY KEY*]
@Allowed: (Read) (RestrictedCode)
"??"=hex:04,65,2e,7d,52,b0,f8,b7,12,6d,f5,33,3b,3d,69,2d,7d,df,f7,fb,d8,16,43,
9b,f0,66,3d,86,37,54,c2,6d,ea,6d,86,d4,09,e9,d5,f7,a0,3d,48,4c,35,6a,1b,fe,\
"??"=hex:a1,5e,47,db,25,65,bb,27,8b,92,55,34,10,3f,d9,49
.
[HKEY_USERS\S-1-5-21-158558460-2646869902-57166230-1001\Software\SecuROM\License information*]
"datasecu"=hex:88,ae,fd,0d,54,eb,51,85,ed,f7,0e,18,57,04,2e,11,fb,2a,d3,4b,a5,
5a,5a,8d,3c,5b,60,02,e9,08,96,c9,17,73,b2,72,0a,95,c7,4a,c0,cb,2b,46,cb,9c,\
"rkeysecu"=hex:bd,bf,c7,35,48,27,b4,45,d6,86,c3,d2,3d,62,32,b6
.
[HKEY_USERS\S-1-5-21-158558460-2646869902-57166230-1001\Software\Trolltech\OrganizationDefaults\Qt Factory Cache 4.7\com.trolltech.Qt.QImageIOHandlerFactoryInterface:\e:\B*a*t*t*l*e*f*i*e*l*d* *3*"!\Core\imageformats]
"qgif4.dll"=multi:"2011-10-10T17:42\00gif\00\00"
"qico4.dll"=multi:"2011-10-10T17:42\00ico\00\00"
"qjpeg4.dll"=multi:"2011-10-10T17:42\00jpeg\00jpg\00\00"
.
[HKEY_USERS\S-1-5-21-158558460-2646869902-57166230-1001\Software\Trolltech\OrganizationDefaults\Qt Factory Cache 4.7\com.trolltech.Qt.QTextCodecFactoryInterface:\e:\B*a*t*t*l*e*f*i*e*l*d* *3*"!\Core\codecs]
"qcncodecs4.dll"=multi:"2011-10-10T17:42\00GB18030\00GBK\00GB2312\00CP936\00MS936\00windows-936\00MIB: 114\00MIB: 113\00MIB: 2025\00\00"
"qkrcodecs4.dll"=multi:"2011-10-10T17:42\00EUC-KR\00cp949\00MIB: 38\00MIB: -949\00\00"
"qtwcodecs4.dll"=multi:"2011-10-10T17:42\00Big5\00Big5-HKSCS\00Big5-ETen\00CP950\00MIB: 2026\00MIB: 2101\00\00"
.
[HKEY_USERS\S-1-5-21-158558460-2646869902-57166230-1001\Software\Trolltech\OrganizationDefaults\Qt Plugin Cache 4.7.false\e:\b*a*t*t*l*e*f*i*e*l*d* *3*"!\Core\codecs]
"qcncodecs4.dll"=multi:"40703\000\00Windows msvc release full-config QT_NO_DRAGANDDROP\002011-10-10T17:42\00\00"
"qjpcodecs4.dll"=multi:"40602\000\00Windows msvc release full-config\002011-10-10T17:42\00\00"
"qjpcodecsd4.dll"=multi:"40703\001\00Windows msvc debug full-config QT_NO_DRAGANDDROP\002011-10-10T17:42\00\00"
"qkrcodecs4.dll"=multi:"40703\000\00Windows msvc release full-config QT_NO_DRAGANDDROP\002011-10-10T17:42\00\00"
"qtwcodecs4.dll"=multi:"40703\000\00Windows msvc release full-config QT_NO_DRAGANDDROP\002011-10-10T17:42\00\00"
.
[HKEY_USERS\S-1-5-21-158558460-2646869902-57166230-1001\Software\Trolltech\OrganizationDefaults\Qt Plugin Cache 4.7.false\e:\b*a*t*t*l*e*f*i*e*l*d* *3*"!\Core\imageformats]
"Microsoft.VC80.CRT.manifest"=multi:"0\001\00unknown\002011-10-10T17:42\00\00"
"msvcr80.dll"=multi:"0\001\00unknown\002011-10-10T17:42\00\00"
"qgif4.dll"=multi:"40703\000\00Windows msvc release full-config QT_NO_DRAGANDDROP\002011-10-10T17:42\00\00"
"qico4.dll"=multi:"40703\000\00Windows msvc release full-config QT_NO_DRAGANDDROP\002011-10-10T17:42\00\00"
"qjpeg4.dll"=multi:"40703\000\00Windows msvc release full-config QT_NO_DRAGANDDROP\002011-10-10T17:42\00\00"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\BlueStacks]
"SymbolicLinkValue"=hex(6):5c,00,52,00,65,00,67,00,69,00,73,00,74,00,72,00,79,
00,5c,00,4d,00,61,00,63,00,68,00,69,00,6e,00,65,00,5c,00,53,00,6f,00,66,00,\
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil64_11_6_602_171_ActiveX.exe,-101"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\Elevation]
"Enabled"=dword:00000001
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\LocalServer32]
@="c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil64_11_6_602_171_ActiveX.exe"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="IFlashBroker5"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil32_11_6_602_171_ActiveX.exe,-101"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\Elevation]
"Enabled"=dword:00000001
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\LocalServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil32_11_6_602_171_ActiveX.exe"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@="Shockwave Flash Object"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\InprocServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_6_602_171.ocx"
"ThreadingModel"="Apartment"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\MiscStatus]
@="0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ProgID]
@="ShockwaveFlash.ShockwaveFlash.11"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_6_602_171.ocx, 1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\TypeLib]
@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\Version]
@="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
@="ShockwaveFlash.ShockwaveFlash"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@="Macromedia Flash Factory Object"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\InprocServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_6_602_171.ocx"
"ThreadingModel"="Apartment"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ProgID]
@="FlashFactory.FlashFactory.1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_6_602_171.ocx, 1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\TypeLib]
@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\Version]
@="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
@="FlashFactory.FlashFactory"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="IFlashBroker5"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\System*]
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
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\PCW\Security]
@Denied: (Full) (Everyone)
.
Completion time: 2013-03-15 02:21:40
ComboFix-quarantined-files.txt 2013-03-15 01:21
.
Pre-Run: 16 804 990 976 bytes free
Post-Run: 16 387 604 480 bytes free
.
- - End Of File - - 7F9128705360C7DEA62EAD432B2BF1B3
no nizsie dodavam log z RSIT + konfiguracie mojho PC
