Nejde nainstalovat ESS6
Napsal: 25 úno 2013 13:37
Zdravím, mám problém při istalacei Eset Smart Security 6. Nejdříve mi to psalo, že to nemůže přečíst nějaký .msi soubor v C:\Windows\Installer\.., tak jsem pročistil registry a kompletně odstranil předchozí verzi. Jenže teď mi to při instalaci píše "Službu 'ESET Service' (ekrn) nelze nainstalovat. Přesvědčte se, zda máte dostatečná oprávnění pro instalaci systémových služeb" - tyto oprávnění kdybych neměl, tak mi tak instalace nedojede takhle daleko..
Přikládám výpis z HijackThis:
Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 13:37:08, on 25.2.2013
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v9.00 (9.00.8112.16464)
Boot mode: Normal
Running processes:
C:\Program Files\Malwarebytes' Anti-Malware\mbamgui.exe
C:\Windows\system32\taskhost.exe
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Windows\System32\rundll32.exe
C:\Program Files\Realtek\Audio\HDA\RtkNGUI.exe
C:\Program Files\Common Files\Java\Java Update\jusched.exe
C:\Program Files\DAEMON Tools Lite\DTLite.exe
C:\Program Files\Skype\Phone\Skype.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\Mozilla Firefox\plugin-container.exe
C:\Program Files\Mozilla Firefox\plugin-container.exe
C:\Program Files\Registry Clean Expert\RCHelper.exe
C:\Program Files\Spybot - Search & Destroy 2\SDTray.exe
C:\Windows\system32\taskhost.exe
C:\Users\wazzir\Desktop\hijackthis.exe
C:\Windows\system32\taskeng.exe
C:\Users\wazzir\AppData\Local\Facebook\Update\FacebookUpdate.exe
C:\Users\wazzir\AppData\Local\Facebook\Messenger\2.1.4651.0\FacebookMessenger.exe
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://eu.ask.com/?l=dis&o=14672
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page =
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files\Spybot - Search & Destroy 2\SDHelper.dll
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll
O4 - HKLM\..\Run: [RTHDVCPL] C:\Program Files\Realtek\Audio\HDA\RtkNGUI.exe -s
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Common Files\Java\Java Update\jusched.exe"
O4 - HKLM\..\RunOnce: [SpybotDeletingE4283] "C:\Program Files\Spybot - Search & Destroy 2\SDDelFile.exe" "C:\Users\wazzir\AppData\Local\Facebook\Messenger\2.1.4651.0\CefSharp.dll_old"
O4 - HKLM\..\RunOnce: [SpybotDeletingE601] "C:\Program Files\Spybot - Search & Destroy 2\SDDelFile.exe" "C:\Users\wazzir\AppData\Local\Facebook\Messenger\2.1.4651.0\CefSharp.WinForms.dll_old"
O4 - HKLM\..\RunOnce: [SpybotDeletingE7236] "C:\Program Files\Spybot - Search & Destroy 2\SDDelFile.exe" "C:\Users\wazzir\AppData\Local\Facebook\Messenger\2.1.4651.0\chrome.pak"
O4 - HKLM\..\RunOnce: [SpybotDeletingE1454] "C:\Program Files\Spybot - Search & Destroy 2\SDDelFile.exe" "C:\Users\wazzir\AppData\Local\Facebook\Messenger\2.1.4651.0\FacebookMessenger.exe_old"
O4 - HKLM\..\RunOnce: [SpybotDeletingE2919] "C:\Program Files\Spybot - Search & Destroy 2\SDDelFile.exe" "C:\Users\wazzir\AppData\Local\Facebook\Messenger\2.1.4651.0\icudt.dll_old"
O4 - HKLM\..\RunOnce: [SpybotDeletingE5170] "C:\Program Files\Spybot - Search & Destroy 2\SDDelFile.exe" "C:\Users\wazzir\AppData\Local\Facebook\Messenger\2.1.4651.0\libcef.dll_old"
O4 - HKLM\..\RunOnce: [SpybotDeletingE6939] "C:\Program Files\Spybot - Search & Destroy 2\SDDelFile.exe" "C:\Users\wazzir\AppData\Local\Facebook\Messenger\2.1.4651.0\locales\en-US.pak"
O4 - HKLM\..\RunOnce: [SpybotDeletingE7240] "C:\Program Files\Spybot - Search & Destroy 2\SDDelFile.exe" "C:\Users\wazzir\AppData\Local\Facebook\Messenger\2.1.4651.0\Newtonsoft.Json.dll_old"
O4 - HKLM\..\RunOnce: [SpybotDeletingE4949] "C:\Program Files\Spybot - Search & Destroy 2\SDDelFile.exe" "C:\Users\wazzir\AppData\Local\Facebook\Messenger\2.1.4651.0\npFbDesktopPlugin.dll_old"
O4 - HKLM\..\RunOnce: [SpybotDeletingE9187] "C:\Program Files\Spybot - Search & Destroy 2\SDDelFile.exe" "C:\Users\wazzir\AppData\Local\Facebook\Messenger\fbmessenger.cache\Cookies"
O4 - HKLM\..\RunOnce: [SpybotDeletingE8364] "C:\Program Files\Spybot - Search & Destroy 2\SDDelFile.exe" "C:\Users\wazzir\AppData\Local\Facebook\Messenger\fbmessenger.cache\Cookies-journal"
O4 - HKLM\..\RunOnce: [SpybotDeletingE132] "C:\Program Files\Spybot - Search & Destroy 2\SDDelFile.exe" "C:\Users\wazzir\AppData\Local\Facebook\Messenger\2.1.4651.0\CefSharp.dll_old"
O4 - HKLM\..\RunOnce: [SpybotDeletingE3497] "C:\Program Files\Spybot - Search & Destroy 2\SDDelFile.exe" "C:\Users\wazzir\AppData\Local\Facebook\Messenger\2.1.4651.0\npFbDesktopPlugin.dll_old"
O4 - HKLM\..\RunOnce: [SpybotDeletingE2138] "C:\Program Files\Spybot - Search & Destroy 2\SDDelFile.exe" "C:\Users\wazzir\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Facebook\Facebook Messenger.lnk"
O4 - HKLM\..\RunOnce: [SpybotDeletingE1732] "C:\Program Files\Spybot - Search & Destroy 2\SDDelFile.exe" "C:\Users\wazzir\AppData\Local\Facebook\Messenger\2.1.4651.0\npFbDesktopPlugin.dll_old"
O4 - HKLM\..\RunOnce: [SpybotDeletingE9374] "C:\Program Files\Spybot - Search & Destroy 2\SDDelFile.exe" "C:\Users\wazzir\AppData\Local\Facebook\Messenger\2.1.4651.0\npFbDesktopPlugin.dll_old"
O4 - HKLM\..\RunOnce: [SpybotDeletingE6416] "C:\Program Files\Spybot - Search & Destroy 2\SDDelFile.exe" "C:\Users\wazzir\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Facebook\Facebook Messenger.lnk"
O4 - HKLM\..\RunOnce: [SpybotDeletingE8442] "C:\Program Files\Spybot - Search & Destroy 2\SDDelFile.exe" "C:\Users\wazzir\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Facebook Messenger.lnk"
O4 - HKLM\..\RunOnce: [SpybotDeletingE2622] "C:\Program Files\Spybot - Search & Destroy 2\SDDelFile.exe" "C:\Users\wazzir\AppData\Local\Facebook\Messenger\2.1.4651.0\npFbDesktopPlugin.dll_old"
O4 - HKLM\..\RunOnce: [SpybotDeletingE8456] "C:\Program Files\Spybot - Search & Destroy 2\SDDelFile.exe" "C:\Users\wazzir\AppData\Local\Facebook\Messenger\2.1.4651.0\npFbDesktopPlugin.dll_old"
O4 - HKLM\..\RunOnce: [SpybotDeletingE9060] "C:\Program Files\Spybot - Search & Destroy 2\SDDelFile.exe" "C:\Users\wazzir\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Facebook\Facebook Messenger.lnk"
O4 - HKLM\..\RunOnce: [SpybotDeletingE5838] "C:\Program Files\Spybot - Search & Destroy 2\SDDelFile.exe" "C:\Users\wazzir\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Facebook Messenger.lnk"
O4 - HKCU\..\Run: [DAEMON Tools Lite] "C:\Program Files\DAEMON Tools Lite\DTLite.exe" -autorun
O4 - HKCU\..\Run: [Skype] "C:\Program Files\Skype\Phone\Skype.exe" /minimized /regrun
O4 - HKCU\..\Run: [Facebook Update] "C:\Users\wazzir\AppData\Local\Facebook\Update\FacebookUpdate.exe" /c /nocrashserver
O4 - HKCU\..\RunOnce: [SpybotDeletingF4608] "C:\Program Files\Spybot - Search & Destroy 2\SDDelFile.exe" "C:\Users\wazzir\AppData\Local\Facebook\Messenger\2.1.4651.0\CefSharp.dll_old"
O4 - HKCU\..\RunOnce: [SpybotDeletingF1083] "C:\Program Files\Spybot - Search & Destroy 2\SDDelFile.exe" "C:\Users\wazzir\AppData\Local\Facebook\Messenger\2.1.4651.0\CefSharp.WinForms.dll_old"
O4 - HKCU\..\RunOnce: [SpybotDeletingF7037] "C:\Program Files\Spybot - Search & Destroy 2\SDDelFile.exe" "C:\Users\wazzir\AppData\Local\Facebook\Messenger\2.1.4651.0\chrome.pak"
O4 - HKCU\..\RunOnce: [SpybotDeletingF2414] "C:\Program Files\Spybot - Search & Destroy 2\SDDelFile.exe" "C:\Users\wazzir\AppData\Local\Facebook\Messenger\2.1.4651.0\FacebookMessenger.exe_old"
O4 - HKCU\..\RunOnce: [SpybotDeletingF8442] "C:\Program Files\Spybot - Search & Destroy 2\SDDelFile.exe" "C:\Users\wazzir\AppData\Local\Facebook\Messenger\2.1.4651.0\icudt.dll_old"
O4 - HKCU\..\RunOnce: [SpybotDeletingF9829] "C:\Program Files\Spybot - Search & Destroy 2\SDDelFile.exe" "C:\Users\wazzir\AppData\Local\Facebook\Messenger\2.1.4651.0\libcef.dll_old"
O4 - HKCU\..\RunOnce: [SpybotDeletingF7725] "C:\Program Files\Spybot - Search & Destroy 2\SDDelFile.exe" "C:\Users\wazzir\AppData\Local\Facebook\Messenger\2.1.4651.0\locales\en-US.pak"
O4 - HKCU\..\RunOnce: [SpybotDeletingF2826] "C:\Program Files\Spybot - Search & Destroy 2\SDDelFile.exe" "C:\Users\wazzir\AppData\Local\Facebook\Messenger\2.1.4651.0\Newtonsoft.Json.dll_old"
O4 - HKCU\..\RunOnce: [SpybotDeletingF8947] "C:\Program Files\Spybot - Search & Destroy 2\SDDelFile.exe" "C:\Users\wazzir\AppData\Local\Facebook\Messenger\2.1.4651.0\npFbDesktopPlugin.dll_old"
O4 - HKCU\..\RunOnce: [SpybotDeletingF7723] "C:\Program Files\Spybot - Search & Destroy 2\SDDelFile.exe" "C:\Users\wazzir\AppData\Local\Facebook\Messenger\fbmessenger.cache\Cookies"
O4 - HKCU\..\RunOnce: [SpybotDeletingF1908] "C:\Program Files\Spybot - Search & Destroy 2\SDDelFile.exe" "C:\Users\wazzir\AppData\Local\Facebook\Messenger\fbmessenger.cache\Cookies-journal"
O4 - HKCU\..\RunOnce: [SpybotDeletingF2568] "C:\Program Files\Spybot - Search & Destroy 2\SDDelFile.exe" "C:\Users\wazzir\AppData\Local\Facebook\Messenger\2.1.4651.0\CefSharp.dll_old"
O4 - HKCU\..\RunOnce: [SpybotDeletingF8331] "C:\Program Files\Spybot - Search & Destroy 2\SDDelFile.exe" "C:\Users\wazzir\AppData\Local\Facebook\Messenger\2.1.4651.0\npFbDesktopPlugin.dll_old"
O4 - HKCU\..\RunOnce: [SpybotDeletingF9900] "C:\Program Files\Spybot - Search & Destroy 2\SDDelFile.exe" "C:\Users\wazzir\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Facebook\Facebook Messenger.lnk"
O4 - HKCU\..\RunOnce: [SpybotDeletingF4065] "C:\Program Files\Spybot - Search & Destroy 2\SDDelFile.exe" "C:\Users\wazzir\AppData\Local\Facebook\Messenger\2.1.4651.0\npFbDesktopPlugin.dll_old"
O4 - HKCU\..\RunOnce: [SpybotDeletingF6471] "C:\Program Files\Spybot - Search & Destroy 2\SDDelFile.exe" "C:\Users\wazzir\AppData\Local\Facebook\Messenger\2.1.4651.0\npFbDesktopPlugin.dll_old"
O4 - HKCU\..\RunOnce: [SpybotDeletingF8352] "C:\Program Files\Spybot - Search & Destroy 2\SDDelFile.exe" "C:\Users\wazzir\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Facebook\Facebook Messenger.lnk"
O4 - HKCU\..\RunOnce: [SpybotDeletingF161] "C:\Program Files\Spybot - Search & Destroy 2\SDDelFile.exe" "C:\Users\wazzir\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Facebook Messenger.lnk"
O4 - HKCU\..\RunOnce: [SpybotDeletingF1278] "C:\Program Files\Spybot - Search & Destroy 2\SDDelFile.exe" "C:\Users\wazzir\AppData\Local\Facebook\Messenger\2.1.4651.0\npFbDesktopPlugin.dll_old"
O4 - HKCU\..\RunOnce: [SpybotDeletingF2977] "C:\Program Files\Spybot - Search & Destroy 2\SDDelFile.exe" "C:\Users\wazzir\AppData\Local\Facebook\Messenger\2.1.4651.0\npFbDesktopPlugin.dll_old"
O4 - HKCU\..\RunOnce: [SpybotDeletingF2095] "C:\Program Files\Spybot - Search & Destroy 2\SDDelFile.exe" "C:\Users\wazzir\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Facebook\Facebook Messenger.lnk"
O4 - HKCU\..\RunOnce: [SpybotDeletingF4702] "C:\Program Files\Spybot - Search & Destroy 2\SDDelFile.exe" "C:\Users\wazzir\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Facebook Messenger.lnk"
O4 - HKUS\S-1-5-21-2874122159-4245340976-1931379245-1000\..\Run: [DAEMON Tools Lite] "C:\Program Files\DAEMON Tools Lite\DTLite.exe" -autorun (User '?')
O4 - HKUS\S-1-5-21-2874122159-4245340976-1931379245-1000\..\Run: [Skype] "C:\Program Files\Skype\Phone\Skype.exe" /minimized /regrun (User '?')
O4 - HKUS\S-1-5-21-2874122159-4245340976-1931379245-1000\..\Run: [Facebook Update] "C:\Users\wazzir\AppData\Local\Facebook\Update\FacebookUpdate.exe" /c /nocrashserver (User '?')
O4 - HKUS\S-1-5-21-2874122159-4245340976-1931379245-1000\..\RunOnce: [SpybotDeletingF4608] "C:\Program Files\Spybot - Search & Destroy 2\SDDelFile.exe" "C:\Users\wazzir\AppData\Local\Facebook\Messenger\2.1.4651.0\CefSharp.dll_old" (User '?')
O4 - HKUS\S-1-5-21-2874122159-4245340976-1931379245-1000\..\RunOnce: [SpybotDeletingF8442] "C:\Program Files\Spybot - Search & Destroy 2\SDDelFile.exe" "C:\Users\wazzir\AppData\Local\Facebook\Messenger\2.1.4651.0\icudt.dll_old" (User '?')
O4 - HKUS\S-1-5-21-2874122159-4245340976-1931379245-1000\..\RunOnce: [SpybotDeletingF9829] "C:\Program Files\Spybot - Search & Destroy 2\SDDelFile.exe" "C:\Users\wazzir\AppData\Local\Facebook\Messenger\2.1.4651.0\libcef.dll_old" (User '?')
O4 - HKUS\S-1-5-21-2874122159-4245340976-1931379245-1000\..\RunOnce: [SpybotDeletingF7725] "C:\Program Files\Spybot - Search & Destroy 2\SDDelFile.exe" "C:\Users\wazzir\AppData\Local\Facebook\Messenger\2.1.4651.0\locales\en-US.pak" (User '?')
O4 - HKUS\S-1-5-21-2874122159-4245340976-1931379245-1000\..\RunOnce: [SpybotDeletingF2826] "C:\Program Files\Spybot - Search & Destroy 2\SDDelFile.exe" "C:\Users\wazzir\AppData\Local\Facebook\Messenger\2.1.4651.0\Newtonsoft.Json.dll_old" (User '?')
O4 - HKUS\S-1-5-21-2874122159-4245340976-1931379245-1000\..\RunOnce: [SpybotDeletingF8947] "C:\Program Files\Spybot - Search & Destroy 2\SDDelFile.exe" "C:\Users\wazzir\AppData\Local\Facebook\Messenger\2.1.4651.0\npFbDesktopPlugin.dll_old" (User '?')
O4 - HKUS\S-1-5-21-2874122159-4245340976-1931379245-1000\..\RunOnce: [SpybotDeletingF7723] "C:\Program Files\Spybot - Search & Destroy 2\SDDelFile.exe" "C:\Users\wazzir\AppData\Local\Facebook\Messenger\fbmessenger.cache\Cookies" (User '?')
O4 - HKUS\S-1-5-21-2874122159-4245340976-1931379245-1000\..\RunOnce: [SpybotDeletingF1908] "C:\Program Files\Spybot - Search & Destroy 2\SDDelFile.exe" "C:\Users\wazzir\AppData\Local\Facebook\Messenger\fbmessenger.cache\Cookies-journal" (User '?')
O4 - HKUS\S-1-5-21-2874122159-4245340976-1931379245-1000\..\RunOnce: [SpybotDeletingF2568] "C:\Program Files\Spybot - Search & Destroy 2\SDDelFile.exe" "C:\Users\wazzir\AppData\Local\Facebook\Messenger\2.1.4651.0\CefSharp.dll_old" (User '?')
O4 - HKUS\S-1-5-21-2874122159-4245340976-1931379245-1000\..\RunOnce: [SpybotDeletingF8331] "C:\Program Files\Spybot - Search & Destroy 2\SDDelFile.exe" "C:\Users\wazzir\AppData\Local\Facebook\Messenger\2.1.4651.0\npFbDesktopPlugin.dll_old" (User '?')
O4 - HKUS\S-1-5-21-2874122159-4245340976-1931379245-1000\..\RunOnce: [SpybotDeletingF9900] "C:\Program Files\Spybot - Search & Destroy 2\SDDelFile.exe" "C:\Users\wazzir\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Facebook\Facebook Messenger.lnk" (User '?')
O4 - HKUS\S-1-5-21-2874122159-4245340976-1931379245-1000\..\RunOnce: [SpybotDeletingF4065] "C:\Program Files\Spybot - Search & Destroy 2\SDDelFile.exe" "C:\Users\wazzir\AppData\Local\Facebook\Messenger\2.1.4651.0\npFbDesktopPlugin.dll_old" (User '?')
O4 - HKUS\S-1-5-21-2874122159-4245340976-1931379245-1000\..\RunOnce: [SpybotDeletingF6471] "C:\Program Files\Spybot - Search & Destroy 2\SDDelFile.exe" "C:\Users\wazzir\AppData\Local\Facebook\Messenger\2.1.4651.0\npFbDesktopPlugin.dll_old" (User '?')
O4 - HKUS\S-1-5-21-2874122159-4245340976-1931379245-1000\..\RunOnce: [SpybotDeletingF8352] "C:\Program Files\Spybot - Search & Destroy 2\SDDelFile.exe" "C:\Users\wazzir\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Facebook\Facebook Messenger.lnk" (User '?')
O4 - HKUS\S-1-5-21-2874122159-4245340976-1931379245-1000\..\RunOnce: [SpybotDeletingF161] "C:\Program Files\Spybot - Search & Destroy 2\SDDelFile.exe" "C:\Users\wazzir\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Facebook Messenger.lnk" (User '?')
O4 - HKUS\S-1-5-21-2874122159-4245340976-1931379245-1000\..\RunOnce: [SpybotDeletingF1278] "C:\Program Files\Spybot - Search & Destroy 2\SDDelFile.exe" "C:\Users\wazzir\AppData\Local\Facebook\Messenger\2.1.4651.0\npFbDesktopPlugin.dll_old" (User '?')
O4 - HKUS\S-1-5-21-2874122159-4245340976-1931379245-1000\..\RunOnce: [SpybotDeletingF2977] "C:\Program Files\Spybot - Search & Destroy 2\SDDelFile.exe" "C:\Users\wazzir\AppData\Local\Facebook\Messenger\2.1.4651.0\npFbDesktopPlugin.dll_old" (User '?')
O4 - HKUS\S-1-5-21-2874122159-4245340976-1931379245-1000\..\RunOnce: [SpybotDeletingF2095] "C:\Program Files\Spybot - Search & Destroy 2\SDDelFile.exe" "C:\Users\wazzir\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Facebook\Facebook Messenger.lnk" (User '?')
O4 - HKUS\S-1-5-21-2874122159-4245340976-1931379245-1000\..\RunOnce: [SpybotDeletingF4702] "C:\Program Files\Spybot - Search & Destroy 2\SDDelFile.exe" "C:\Users\wazzir\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Facebook Messenger.lnk" (User '?')
O4 - S-1-5-21-2874122159-4245340976-1931379245-1000 Startup: debug.log (User '?')
O4 - S-1-5-21-2874122159-4245340976-1931379245-1000 Startup: Facebook Messenger.lnk = wazzir\AppData\Local\Facebook\Messenger\2.1.4651.0\FacebookMessenger.exe (User '?')
O4 - Startup: debug.log
O4 - Startup: Facebook Messenger.lnk = wazzir\AppData\Local\Facebook\Messenger\2.1.4651.0\FacebookMessenger.exe
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MIF5BA~1\Office14\EXCEL.EXE/3000
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Excel - res://C:\PROGRA~1\MIF5BA~1\Office12\EXCEL.EXE/3000
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MIF5BA~1\Office12\REFIEBAR.DLL
O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\Program Files\Spybot - Search & Destroy 2\SDHelper.dll
O9 - Extra 'Tools' menuitem: Spybot - Search && Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\Program Files\Spybot - Search & Destroy 2\SDHelper.dll
O10 - Unknown file in Winsock LSP: c:\program files\common files\microsoft shared\windows live\wlidnsp.dll
O10 - Unknown file in Winsock LSP: c:\program files\common files\microsoft shared\windows live\wlidnsp.dll
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O15 - Trusted Zone: *.clonewarsadventures.com
O15 - Trusted Zone: *.freerealms.com
O15 - Trusted Zone: *.soe.com
O15 - Trusted Zone: *.sony.com
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O18 - Protocol: wlpg - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} - C:\Program Files\Windows Live\Photo Gallery\AlbumDownloadProtocolHandler.dll
O20 - Winlogon Notify: SDWinLogon - SDWinLogon.dll (file missing)
O22 - SharedTaskScheduler: Theme Resource Changer - {F791A188-699D-4FD4-955A-EB59E89B1907} - C:\Program Files\Theme Resource Changer\ThemeResourceChanger.dll
O23 - Service: Acronis OS Selector Reinstall Service (AcronisOSSReinstallSvc) - Unknown owner - c:\Program Files\Common Files\Acronis\Acronis Disk Director\oss_reinstall_svc.exe
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe
O23 - Service: Andrea RT Filters Service (AERTFilters) - Andrea Electronics Corporation - C:\Program Files\Realtek\Audio\HDA\AERTSrv.exe
O23 - Service: Bluetooth Service (btwdins) - Broadcom Corporation. - C:\Program Files\WIDCOMM\Bluetooth Software\btwdins.exe
O23 - Service: Com4QLBEx - Hewlett-Packard Development Company, L.P. - C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\Com4QLBEx.exe
O23 - Service: HP Quick Synchronization Service (HPDrvMntSvc.exe) - Hewlett-Packard Company - C:\Program Files\Hewlett-Packard\Shared\HPDrvMntSvc.exe
O23 - Service: HP Software Framework Service (hpqwmiex) - Hewlett-Packard Company - C:\Program Files\Hewlett-Packard\Shared\hpqWmiEx.exe
O23 - Service: HPWMISVC - Unknown owner - C:\Program Files\Hewlett-Packard\HP Quick Launch\HPWMISVC.exe
O23 - Service: Úložná technologie Intel® Rapid (IAStorDataMgrSvc) - Intel Corporation - C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
O23 - Service: IconMan_R - Realsil Microelectronics Inc. - C:\Program Files\Realtek\Realtek USB 2.0 Card Reader\RIconMan.exe
O23 - Service: MBAMScheduler - Malwarebytes Corporation - C:\Program Files\Malwarebytes' Anti-Malware\mbamscheduler.exe
O23 - Service: MBAMService - Malwarebytes Corporation - C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe
O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Mozilla Foundation - C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe
O23 - Service: PnkBstrA - Unknown owner - C:\Windows\system32\PnkBstrA.exe
O23 - Service: Spybot-S&D 2 Scanner Service (SDScannerService) - Safer-Networking Ltd. - C:\Program Files\Spybot - Search & Destroy 2\SDFSSvc.exe
O23 - Service: Spybot-S&D 2 Updating Service (SDUpdateService) - Safer-Networking Ltd. - C:\Program Files\Spybot - Search & Destroy 2\SDUpdSvc.exe
O23 - Service: Spybot-S&D 2 Security Center Service (SDWSCService) - Safer-Networking Ltd. - C:\Program Files\Spybot - Search & Destroy 2\SDWSCSvc.exe
O23 - Service: Skype Updater (SkypeUpdate) - Skype Technologies - C:\Program Files\Skype\Updater\Updater.exe
O23 - Service: SwitchBoard - Adobe Systems Incorporated - C:\Program Files\Common Files\Adobe\SwitchBoard\SwitchBoard.exe
--
End of file - 21256 bytes
Přikládám výpis z HijackThis:
Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 13:37:08, on 25.2.2013
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v9.00 (9.00.8112.16464)
Boot mode: Normal
Running processes:
C:\Program Files\Malwarebytes' Anti-Malware\mbamgui.exe
C:\Windows\system32\taskhost.exe
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Windows\System32\rundll32.exe
C:\Program Files\Realtek\Audio\HDA\RtkNGUI.exe
C:\Program Files\Common Files\Java\Java Update\jusched.exe
C:\Program Files\DAEMON Tools Lite\DTLite.exe
C:\Program Files\Skype\Phone\Skype.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\Mozilla Firefox\plugin-container.exe
C:\Program Files\Mozilla Firefox\plugin-container.exe
C:\Program Files\Registry Clean Expert\RCHelper.exe
C:\Program Files\Spybot - Search & Destroy 2\SDTray.exe
C:\Windows\system32\taskhost.exe
C:\Users\wazzir\Desktop\hijackthis.exe
C:\Windows\system32\taskeng.exe
C:\Users\wazzir\AppData\Local\Facebook\Update\FacebookUpdate.exe
C:\Users\wazzir\AppData\Local\Facebook\Messenger\2.1.4651.0\FacebookMessenger.exe
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://eu.ask.com/?l=dis&o=14672
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page =
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files\Spybot - Search & Destroy 2\SDHelper.dll
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll
O4 - HKLM\..\Run: [RTHDVCPL] C:\Program Files\Realtek\Audio\HDA\RtkNGUI.exe -s
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Common Files\Java\Java Update\jusched.exe"
O4 - HKLM\..\RunOnce: [SpybotDeletingE4283] "C:\Program Files\Spybot - Search & Destroy 2\SDDelFile.exe" "C:\Users\wazzir\AppData\Local\Facebook\Messenger\2.1.4651.0\CefSharp.dll_old"
O4 - HKLM\..\RunOnce: [SpybotDeletingE601] "C:\Program Files\Spybot - Search & Destroy 2\SDDelFile.exe" "C:\Users\wazzir\AppData\Local\Facebook\Messenger\2.1.4651.0\CefSharp.WinForms.dll_old"
O4 - HKLM\..\RunOnce: [SpybotDeletingE7236] "C:\Program Files\Spybot - Search & Destroy 2\SDDelFile.exe" "C:\Users\wazzir\AppData\Local\Facebook\Messenger\2.1.4651.0\chrome.pak"
O4 - HKLM\..\RunOnce: [SpybotDeletingE1454] "C:\Program Files\Spybot - Search & Destroy 2\SDDelFile.exe" "C:\Users\wazzir\AppData\Local\Facebook\Messenger\2.1.4651.0\FacebookMessenger.exe_old"
O4 - HKLM\..\RunOnce: [SpybotDeletingE2919] "C:\Program Files\Spybot - Search & Destroy 2\SDDelFile.exe" "C:\Users\wazzir\AppData\Local\Facebook\Messenger\2.1.4651.0\icudt.dll_old"
O4 - HKLM\..\RunOnce: [SpybotDeletingE5170] "C:\Program Files\Spybot - Search & Destroy 2\SDDelFile.exe" "C:\Users\wazzir\AppData\Local\Facebook\Messenger\2.1.4651.0\libcef.dll_old"
O4 - HKLM\..\RunOnce: [SpybotDeletingE6939] "C:\Program Files\Spybot - Search & Destroy 2\SDDelFile.exe" "C:\Users\wazzir\AppData\Local\Facebook\Messenger\2.1.4651.0\locales\en-US.pak"
O4 - HKLM\..\RunOnce: [SpybotDeletingE7240] "C:\Program Files\Spybot - Search & Destroy 2\SDDelFile.exe" "C:\Users\wazzir\AppData\Local\Facebook\Messenger\2.1.4651.0\Newtonsoft.Json.dll_old"
O4 - HKLM\..\RunOnce: [SpybotDeletingE4949] "C:\Program Files\Spybot - Search & Destroy 2\SDDelFile.exe" "C:\Users\wazzir\AppData\Local\Facebook\Messenger\2.1.4651.0\npFbDesktopPlugin.dll_old"
O4 - HKLM\..\RunOnce: [SpybotDeletingE9187] "C:\Program Files\Spybot - Search & Destroy 2\SDDelFile.exe" "C:\Users\wazzir\AppData\Local\Facebook\Messenger\fbmessenger.cache\Cookies"
O4 - HKLM\..\RunOnce: [SpybotDeletingE8364] "C:\Program Files\Spybot - Search & Destroy 2\SDDelFile.exe" "C:\Users\wazzir\AppData\Local\Facebook\Messenger\fbmessenger.cache\Cookies-journal"
O4 - HKLM\..\RunOnce: [SpybotDeletingE132] "C:\Program Files\Spybot - Search & Destroy 2\SDDelFile.exe" "C:\Users\wazzir\AppData\Local\Facebook\Messenger\2.1.4651.0\CefSharp.dll_old"
O4 - HKLM\..\RunOnce: [SpybotDeletingE3497] "C:\Program Files\Spybot - Search & Destroy 2\SDDelFile.exe" "C:\Users\wazzir\AppData\Local\Facebook\Messenger\2.1.4651.0\npFbDesktopPlugin.dll_old"
O4 - HKLM\..\RunOnce: [SpybotDeletingE2138] "C:\Program Files\Spybot - Search & Destroy 2\SDDelFile.exe" "C:\Users\wazzir\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Facebook\Facebook Messenger.lnk"
O4 - HKLM\..\RunOnce: [SpybotDeletingE1732] "C:\Program Files\Spybot - Search & Destroy 2\SDDelFile.exe" "C:\Users\wazzir\AppData\Local\Facebook\Messenger\2.1.4651.0\npFbDesktopPlugin.dll_old"
O4 - HKLM\..\RunOnce: [SpybotDeletingE9374] "C:\Program Files\Spybot - Search & Destroy 2\SDDelFile.exe" "C:\Users\wazzir\AppData\Local\Facebook\Messenger\2.1.4651.0\npFbDesktopPlugin.dll_old"
O4 - HKLM\..\RunOnce: [SpybotDeletingE6416] "C:\Program Files\Spybot - Search & Destroy 2\SDDelFile.exe" "C:\Users\wazzir\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Facebook\Facebook Messenger.lnk"
O4 - HKLM\..\RunOnce: [SpybotDeletingE8442] "C:\Program Files\Spybot - Search & Destroy 2\SDDelFile.exe" "C:\Users\wazzir\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Facebook Messenger.lnk"
O4 - HKLM\..\RunOnce: [SpybotDeletingE2622] "C:\Program Files\Spybot - Search & Destroy 2\SDDelFile.exe" "C:\Users\wazzir\AppData\Local\Facebook\Messenger\2.1.4651.0\npFbDesktopPlugin.dll_old"
O4 - HKLM\..\RunOnce: [SpybotDeletingE8456] "C:\Program Files\Spybot - Search & Destroy 2\SDDelFile.exe" "C:\Users\wazzir\AppData\Local\Facebook\Messenger\2.1.4651.0\npFbDesktopPlugin.dll_old"
O4 - HKLM\..\RunOnce: [SpybotDeletingE9060] "C:\Program Files\Spybot - Search & Destroy 2\SDDelFile.exe" "C:\Users\wazzir\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Facebook\Facebook Messenger.lnk"
O4 - HKLM\..\RunOnce: [SpybotDeletingE5838] "C:\Program Files\Spybot - Search & Destroy 2\SDDelFile.exe" "C:\Users\wazzir\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Facebook Messenger.lnk"
O4 - HKCU\..\Run: [DAEMON Tools Lite] "C:\Program Files\DAEMON Tools Lite\DTLite.exe" -autorun
O4 - HKCU\..\Run: [Skype] "C:\Program Files\Skype\Phone\Skype.exe" /minimized /regrun
O4 - HKCU\..\Run: [Facebook Update] "C:\Users\wazzir\AppData\Local\Facebook\Update\FacebookUpdate.exe" /c /nocrashserver
O4 - HKCU\..\RunOnce: [SpybotDeletingF4608] "C:\Program Files\Spybot - Search & Destroy 2\SDDelFile.exe" "C:\Users\wazzir\AppData\Local\Facebook\Messenger\2.1.4651.0\CefSharp.dll_old"
O4 - HKCU\..\RunOnce: [SpybotDeletingF1083] "C:\Program Files\Spybot - Search & Destroy 2\SDDelFile.exe" "C:\Users\wazzir\AppData\Local\Facebook\Messenger\2.1.4651.0\CefSharp.WinForms.dll_old"
O4 - HKCU\..\RunOnce: [SpybotDeletingF7037] "C:\Program Files\Spybot - Search & Destroy 2\SDDelFile.exe" "C:\Users\wazzir\AppData\Local\Facebook\Messenger\2.1.4651.0\chrome.pak"
O4 - HKCU\..\RunOnce: [SpybotDeletingF2414] "C:\Program Files\Spybot - Search & Destroy 2\SDDelFile.exe" "C:\Users\wazzir\AppData\Local\Facebook\Messenger\2.1.4651.0\FacebookMessenger.exe_old"
O4 - HKCU\..\RunOnce: [SpybotDeletingF8442] "C:\Program Files\Spybot - Search & Destroy 2\SDDelFile.exe" "C:\Users\wazzir\AppData\Local\Facebook\Messenger\2.1.4651.0\icudt.dll_old"
O4 - HKCU\..\RunOnce: [SpybotDeletingF9829] "C:\Program Files\Spybot - Search & Destroy 2\SDDelFile.exe" "C:\Users\wazzir\AppData\Local\Facebook\Messenger\2.1.4651.0\libcef.dll_old"
O4 - HKCU\..\RunOnce: [SpybotDeletingF7725] "C:\Program Files\Spybot - Search & Destroy 2\SDDelFile.exe" "C:\Users\wazzir\AppData\Local\Facebook\Messenger\2.1.4651.0\locales\en-US.pak"
O4 - HKCU\..\RunOnce: [SpybotDeletingF2826] "C:\Program Files\Spybot - Search & Destroy 2\SDDelFile.exe" "C:\Users\wazzir\AppData\Local\Facebook\Messenger\2.1.4651.0\Newtonsoft.Json.dll_old"
O4 - HKCU\..\RunOnce: [SpybotDeletingF8947] "C:\Program Files\Spybot - Search & Destroy 2\SDDelFile.exe" "C:\Users\wazzir\AppData\Local\Facebook\Messenger\2.1.4651.0\npFbDesktopPlugin.dll_old"
O4 - HKCU\..\RunOnce: [SpybotDeletingF7723] "C:\Program Files\Spybot - Search & Destroy 2\SDDelFile.exe" "C:\Users\wazzir\AppData\Local\Facebook\Messenger\fbmessenger.cache\Cookies"
O4 - HKCU\..\RunOnce: [SpybotDeletingF1908] "C:\Program Files\Spybot - Search & Destroy 2\SDDelFile.exe" "C:\Users\wazzir\AppData\Local\Facebook\Messenger\fbmessenger.cache\Cookies-journal"
O4 - HKCU\..\RunOnce: [SpybotDeletingF2568] "C:\Program Files\Spybot - Search & Destroy 2\SDDelFile.exe" "C:\Users\wazzir\AppData\Local\Facebook\Messenger\2.1.4651.0\CefSharp.dll_old"
O4 - HKCU\..\RunOnce: [SpybotDeletingF8331] "C:\Program Files\Spybot - Search & Destroy 2\SDDelFile.exe" "C:\Users\wazzir\AppData\Local\Facebook\Messenger\2.1.4651.0\npFbDesktopPlugin.dll_old"
O4 - HKCU\..\RunOnce: [SpybotDeletingF9900] "C:\Program Files\Spybot - Search & Destroy 2\SDDelFile.exe" "C:\Users\wazzir\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Facebook\Facebook Messenger.lnk"
O4 - HKCU\..\RunOnce: [SpybotDeletingF4065] "C:\Program Files\Spybot - Search & Destroy 2\SDDelFile.exe" "C:\Users\wazzir\AppData\Local\Facebook\Messenger\2.1.4651.0\npFbDesktopPlugin.dll_old"
O4 - HKCU\..\RunOnce: [SpybotDeletingF6471] "C:\Program Files\Spybot - Search & Destroy 2\SDDelFile.exe" "C:\Users\wazzir\AppData\Local\Facebook\Messenger\2.1.4651.0\npFbDesktopPlugin.dll_old"
O4 - HKCU\..\RunOnce: [SpybotDeletingF8352] "C:\Program Files\Spybot - Search & Destroy 2\SDDelFile.exe" "C:\Users\wazzir\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Facebook\Facebook Messenger.lnk"
O4 - HKCU\..\RunOnce: [SpybotDeletingF161] "C:\Program Files\Spybot - Search & Destroy 2\SDDelFile.exe" "C:\Users\wazzir\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Facebook Messenger.lnk"
O4 - HKCU\..\RunOnce: [SpybotDeletingF1278] "C:\Program Files\Spybot - Search & Destroy 2\SDDelFile.exe" "C:\Users\wazzir\AppData\Local\Facebook\Messenger\2.1.4651.0\npFbDesktopPlugin.dll_old"
O4 - HKCU\..\RunOnce: [SpybotDeletingF2977] "C:\Program Files\Spybot - Search & Destroy 2\SDDelFile.exe" "C:\Users\wazzir\AppData\Local\Facebook\Messenger\2.1.4651.0\npFbDesktopPlugin.dll_old"
O4 - HKCU\..\RunOnce: [SpybotDeletingF2095] "C:\Program Files\Spybot - Search & Destroy 2\SDDelFile.exe" "C:\Users\wazzir\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Facebook\Facebook Messenger.lnk"
O4 - HKCU\..\RunOnce: [SpybotDeletingF4702] "C:\Program Files\Spybot - Search & Destroy 2\SDDelFile.exe" "C:\Users\wazzir\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Facebook Messenger.lnk"
O4 - HKUS\S-1-5-21-2874122159-4245340976-1931379245-1000\..\Run: [DAEMON Tools Lite] "C:\Program Files\DAEMON Tools Lite\DTLite.exe" -autorun (User '?')
O4 - HKUS\S-1-5-21-2874122159-4245340976-1931379245-1000\..\Run: [Skype] "C:\Program Files\Skype\Phone\Skype.exe" /minimized /regrun (User '?')
O4 - HKUS\S-1-5-21-2874122159-4245340976-1931379245-1000\..\Run: [Facebook Update] "C:\Users\wazzir\AppData\Local\Facebook\Update\FacebookUpdate.exe" /c /nocrashserver (User '?')
O4 - HKUS\S-1-5-21-2874122159-4245340976-1931379245-1000\..\RunOnce: [SpybotDeletingF4608] "C:\Program Files\Spybot - Search & Destroy 2\SDDelFile.exe" "C:\Users\wazzir\AppData\Local\Facebook\Messenger\2.1.4651.0\CefSharp.dll_old" (User '?')
O4 - HKUS\S-1-5-21-2874122159-4245340976-1931379245-1000\..\RunOnce: [SpybotDeletingF8442] "C:\Program Files\Spybot - Search & Destroy 2\SDDelFile.exe" "C:\Users\wazzir\AppData\Local\Facebook\Messenger\2.1.4651.0\icudt.dll_old" (User '?')
O4 - HKUS\S-1-5-21-2874122159-4245340976-1931379245-1000\..\RunOnce: [SpybotDeletingF9829] "C:\Program Files\Spybot - Search & Destroy 2\SDDelFile.exe" "C:\Users\wazzir\AppData\Local\Facebook\Messenger\2.1.4651.0\libcef.dll_old" (User '?')
O4 - HKUS\S-1-5-21-2874122159-4245340976-1931379245-1000\..\RunOnce: [SpybotDeletingF7725] "C:\Program Files\Spybot - Search & Destroy 2\SDDelFile.exe" "C:\Users\wazzir\AppData\Local\Facebook\Messenger\2.1.4651.0\locales\en-US.pak" (User '?')
O4 - HKUS\S-1-5-21-2874122159-4245340976-1931379245-1000\..\RunOnce: [SpybotDeletingF2826] "C:\Program Files\Spybot - Search & Destroy 2\SDDelFile.exe" "C:\Users\wazzir\AppData\Local\Facebook\Messenger\2.1.4651.0\Newtonsoft.Json.dll_old" (User '?')
O4 - HKUS\S-1-5-21-2874122159-4245340976-1931379245-1000\..\RunOnce: [SpybotDeletingF8947] "C:\Program Files\Spybot - Search & Destroy 2\SDDelFile.exe" "C:\Users\wazzir\AppData\Local\Facebook\Messenger\2.1.4651.0\npFbDesktopPlugin.dll_old" (User '?')
O4 - HKUS\S-1-5-21-2874122159-4245340976-1931379245-1000\..\RunOnce: [SpybotDeletingF7723] "C:\Program Files\Spybot - Search & Destroy 2\SDDelFile.exe" "C:\Users\wazzir\AppData\Local\Facebook\Messenger\fbmessenger.cache\Cookies" (User '?')
O4 - HKUS\S-1-5-21-2874122159-4245340976-1931379245-1000\..\RunOnce: [SpybotDeletingF1908] "C:\Program Files\Spybot - Search & Destroy 2\SDDelFile.exe" "C:\Users\wazzir\AppData\Local\Facebook\Messenger\fbmessenger.cache\Cookies-journal" (User '?')
O4 - HKUS\S-1-5-21-2874122159-4245340976-1931379245-1000\..\RunOnce: [SpybotDeletingF2568] "C:\Program Files\Spybot - Search & Destroy 2\SDDelFile.exe" "C:\Users\wazzir\AppData\Local\Facebook\Messenger\2.1.4651.0\CefSharp.dll_old" (User '?')
O4 - HKUS\S-1-5-21-2874122159-4245340976-1931379245-1000\..\RunOnce: [SpybotDeletingF8331] "C:\Program Files\Spybot - Search & Destroy 2\SDDelFile.exe" "C:\Users\wazzir\AppData\Local\Facebook\Messenger\2.1.4651.0\npFbDesktopPlugin.dll_old" (User '?')
O4 - HKUS\S-1-5-21-2874122159-4245340976-1931379245-1000\..\RunOnce: [SpybotDeletingF9900] "C:\Program Files\Spybot - Search & Destroy 2\SDDelFile.exe" "C:\Users\wazzir\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Facebook\Facebook Messenger.lnk" (User '?')
O4 - HKUS\S-1-5-21-2874122159-4245340976-1931379245-1000\..\RunOnce: [SpybotDeletingF4065] "C:\Program Files\Spybot - Search & Destroy 2\SDDelFile.exe" "C:\Users\wazzir\AppData\Local\Facebook\Messenger\2.1.4651.0\npFbDesktopPlugin.dll_old" (User '?')
O4 - HKUS\S-1-5-21-2874122159-4245340976-1931379245-1000\..\RunOnce: [SpybotDeletingF6471] "C:\Program Files\Spybot - Search & Destroy 2\SDDelFile.exe" "C:\Users\wazzir\AppData\Local\Facebook\Messenger\2.1.4651.0\npFbDesktopPlugin.dll_old" (User '?')
O4 - HKUS\S-1-5-21-2874122159-4245340976-1931379245-1000\..\RunOnce: [SpybotDeletingF8352] "C:\Program Files\Spybot - Search & Destroy 2\SDDelFile.exe" "C:\Users\wazzir\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Facebook\Facebook Messenger.lnk" (User '?')
O4 - HKUS\S-1-5-21-2874122159-4245340976-1931379245-1000\..\RunOnce: [SpybotDeletingF161] "C:\Program Files\Spybot - Search & Destroy 2\SDDelFile.exe" "C:\Users\wazzir\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Facebook Messenger.lnk" (User '?')
O4 - HKUS\S-1-5-21-2874122159-4245340976-1931379245-1000\..\RunOnce: [SpybotDeletingF1278] "C:\Program Files\Spybot - Search & Destroy 2\SDDelFile.exe" "C:\Users\wazzir\AppData\Local\Facebook\Messenger\2.1.4651.0\npFbDesktopPlugin.dll_old" (User '?')
O4 - HKUS\S-1-5-21-2874122159-4245340976-1931379245-1000\..\RunOnce: [SpybotDeletingF2977] "C:\Program Files\Spybot - Search & Destroy 2\SDDelFile.exe" "C:\Users\wazzir\AppData\Local\Facebook\Messenger\2.1.4651.0\npFbDesktopPlugin.dll_old" (User '?')
O4 - HKUS\S-1-5-21-2874122159-4245340976-1931379245-1000\..\RunOnce: [SpybotDeletingF2095] "C:\Program Files\Spybot - Search & Destroy 2\SDDelFile.exe" "C:\Users\wazzir\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Facebook\Facebook Messenger.lnk" (User '?')
O4 - HKUS\S-1-5-21-2874122159-4245340976-1931379245-1000\..\RunOnce: [SpybotDeletingF4702] "C:\Program Files\Spybot - Search & Destroy 2\SDDelFile.exe" "C:\Users\wazzir\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Facebook Messenger.lnk" (User '?')
O4 - S-1-5-21-2874122159-4245340976-1931379245-1000 Startup: debug.log (User '?')
O4 - S-1-5-21-2874122159-4245340976-1931379245-1000 Startup: Facebook Messenger.lnk = wazzir\AppData\Local\Facebook\Messenger\2.1.4651.0\FacebookMessenger.exe (User '?')
O4 - Startup: debug.log
O4 - Startup: Facebook Messenger.lnk = wazzir\AppData\Local\Facebook\Messenger\2.1.4651.0\FacebookMessenger.exe
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MIF5BA~1\Office14\EXCEL.EXE/3000
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Excel - res://C:\PROGRA~1\MIF5BA~1\Office12\EXCEL.EXE/3000
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MIF5BA~1\Office12\REFIEBAR.DLL
O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\Program Files\Spybot - Search & Destroy 2\SDHelper.dll
O9 - Extra 'Tools' menuitem: Spybot - Search && Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\Program Files\Spybot - Search & Destroy 2\SDHelper.dll
O10 - Unknown file in Winsock LSP: c:\program files\common files\microsoft shared\windows live\wlidnsp.dll
O10 - Unknown file in Winsock LSP: c:\program files\common files\microsoft shared\windows live\wlidnsp.dll
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O15 - Trusted Zone: *.clonewarsadventures.com
O15 - Trusted Zone: *.freerealms.com
O15 - Trusted Zone: *.soe.com
O15 - Trusted Zone: *.sony.com
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O18 - Protocol: wlpg - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} - C:\Program Files\Windows Live\Photo Gallery\AlbumDownloadProtocolHandler.dll
O20 - Winlogon Notify: SDWinLogon - SDWinLogon.dll (file missing)
O22 - SharedTaskScheduler: Theme Resource Changer - {F791A188-699D-4FD4-955A-EB59E89B1907} - C:\Program Files\Theme Resource Changer\ThemeResourceChanger.dll
O23 - Service: Acronis OS Selector Reinstall Service (AcronisOSSReinstallSvc) - Unknown owner - c:\Program Files\Common Files\Acronis\Acronis Disk Director\oss_reinstall_svc.exe
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe
O23 - Service: Andrea RT Filters Service (AERTFilters) - Andrea Electronics Corporation - C:\Program Files\Realtek\Audio\HDA\AERTSrv.exe
O23 - Service: Bluetooth Service (btwdins) - Broadcom Corporation. - C:\Program Files\WIDCOMM\Bluetooth Software\btwdins.exe
O23 - Service: Com4QLBEx - Hewlett-Packard Development Company, L.P. - C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\Com4QLBEx.exe
O23 - Service: HP Quick Synchronization Service (HPDrvMntSvc.exe) - Hewlett-Packard Company - C:\Program Files\Hewlett-Packard\Shared\HPDrvMntSvc.exe
O23 - Service: HP Software Framework Service (hpqwmiex) - Hewlett-Packard Company - C:\Program Files\Hewlett-Packard\Shared\hpqWmiEx.exe
O23 - Service: HPWMISVC - Unknown owner - C:\Program Files\Hewlett-Packard\HP Quick Launch\HPWMISVC.exe
O23 - Service: Úložná technologie Intel® Rapid (IAStorDataMgrSvc) - Intel Corporation - C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
O23 - Service: IconMan_R - Realsil Microelectronics Inc. - C:\Program Files\Realtek\Realtek USB 2.0 Card Reader\RIconMan.exe
O23 - Service: MBAMScheduler - Malwarebytes Corporation - C:\Program Files\Malwarebytes' Anti-Malware\mbamscheduler.exe
O23 - Service: MBAMService - Malwarebytes Corporation - C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe
O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Mozilla Foundation - C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe
O23 - Service: PnkBstrA - Unknown owner - C:\Windows\system32\PnkBstrA.exe
O23 - Service: Spybot-S&D 2 Scanner Service (SDScannerService) - Safer-Networking Ltd. - C:\Program Files\Spybot - Search & Destroy 2\SDFSSvc.exe
O23 - Service: Spybot-S&D 2 Updating Service (SDUpdateService) - Safer-Networking Ltd. - C:\Program Files\Spybot - Search & Destroy 2\SDUpdSvc.exe
O23 - Service: Spybot-S&D 2 Security Center Service (SDWSCService) - Safer-Networking Ltd. - C:\Program Files\Spybot - Search & Destroy 2\SDWSCSvc.exe
O23 - Service: Skype Updater (SkypeUpdate) - Skype Technologies - C:\Program Files\Skype\Updater\Updater.exe
O23 - Service: SwitchBoard - Adobe Systems Incorporated - C:\Program Files\Common Files\Adobe\SwitchBoard\SwitchBoard.exe
--
End of file - 21256 bytes