VIRY.CZ

Dobrý den,
před pár dny, se mi za odkazy přestali ve všech prohlížečích ( IE, FF, GCH) ukazovat ikonky od Norton safe webu, jako kontrola odkazů. Norton toolbar ve všech funguje - je zapnutý.
Chtěl bych tedy poprosit o kontrolu logu, zda se mi někde nenachází nějaký problém, který tuto možnost od Nortonu blokuje.
Předem děkuji.

Logfile of random's system information tool 1.09 (written by random/random)
Run by Vrana at 2013-05-17 23:03:56
Microsoft Windows 7 Home Premium Service Pack 1
System drive C: has 213 GB (77%) free of 278 GB
Total RAM: 3959 MB (52% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 23:04:06, on 17.5.2013
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v10.0 (10.00.9200.16576)
Boot mode: Normal

Running processes:
C:\Program Files (x86)\Norton Internet Security\Engine\20.3.1.22\ccSvcHst.exe
C:\Program Files (x86)\Windows Sidebar\sidebar.exe
C:\Program Files (x86)\Toshiba\Bluetooth Toshiba Stack\TosBtMng.exe
C:\Program Files (x86)\Lenovo\Onekey Theater\OnekeySupport.exe
C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
C:\Program Files (x86)\Lenovo\YouCam\YCMMirage.exe
C:\Program Files (x86)\Toshiba\Bluetooth Toshiba Stack\TosA2dp.exe
C:\Program Files (x86)\Toshiba\Bluetooth Toshiba Stack\TosBtHid.exe
C:\Program Files (x86)\Toshiba\Bluetooth Toshiba Stack\TosBtHsp.exe
C:\Program Files (x86)\Skype\Phone\Skype.exe
C:\Program Files (x86)\Mozilla Firefox\firefox.exe
C:\Program Files\trend micro\Vrana.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = Preserve
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page =
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
F2 - REG:system.ini: UserInit=userinit.exe,
O2 - BHO: Norton Identity Protection - {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} - C:\Program Files (x86)\Norton Internet Security\Engine\20.3.1.22\coIEPlg.dll
O2 - BHO: Norton Vulnerability Protection - {6D53EC84-6AAE-4787-AEEE-F4628F01010C} - C:\Program Files (x86)\Norton Internet Security\Engine\20.3.1.22\IPS\IPSBHO.DLL
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll
O2 - BHO: (no name) - {9030D464-4C02-4ABF-8ECC-5164760863C6} - (no file)
O2 - BHO: Adobe PDF Conversion Toolbar Helper - {AE7CD045-E861-484f-8273-0445EE161910} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll
O2 - BHO: (no name) - {BA0C978D-D909-49B6-AFE2-8BDE245DC7E6} - (no file)
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll
O2 - BHO: SmartSelect - {F4971EE7-DAA0-4053-9964-665D8EE6A077} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll
O3 - Toolbar: Adobe PDF - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll
O3 - Toolbar: Norton Toolbar - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - C:\Program Files (x86)\Norton Internet Security\Engine\20.3.1.22\coIEPlg.dll
O4 - HKLM\..\Run: [UpdateP2GShortCut] "C:\Program Files (x86)\Lenovo\Power2Go\MUITransfer\MUIStartMenu.exe" "C:\Program Files (x86)\Lenovo\Power2Go" UpdateWithCreateOnce "SOFTWARE\CyberLink\Power2Go\5.0"
O4 - HKLM\..\Run: [IAStorIcon] C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
O4 - HKCU\..\Run: [Sidebar] C:\Program Files (x86)\Windows Sidebar\sidebar.exe /autoRun
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-21-2092546283-391122535-3387313911-1002\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'UpdatusUser')
O4 - HKUS\S-1-5-21-2092546283-391122535-3387313911-1002\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'UpdatusUser')
O4 - HKUS\S-1-5-18\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun (User 'Default user')
O4 - Global Startup: Bluetooth Manager.lnk = ?
O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll
O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O16 - DPF: {CF84DAC5-A4F5-419E-A0BA-C01FFD71112F} (SysInfo Class) -
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~2\COMMON~1\Skype\Skype4COM.dll
O18 - Protocol: wlpg - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} - C:\Program Files (x86)\Windows Live\Photo Gallery\AlbumDownloadProtocolHandler.dll
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - (no file)
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\windows\System32\alg.exe (file missing)
O23 - Service: Bonjour Service - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: CLHNServiceForPowerDVD12 - CyberLink Corp. - C:\Program Files (x86)\Cyberlink\PowerDVD12\Kernel\DMP\CLHNServer\CLHNServiceForPowerDVD12.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\windows\System32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\windows\system32\fxssvc.exe (file missing)
O23 - Service: FLEXnet Licensing Service - Macrovision Europe Ltd. - C:\Program Files (x86)\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
O23 - Service: Google Update Service (gupdate) (gupdate) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Google Update Service (gupdatem) (gupdatem) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Úložná technologie Intel(R) Rapid (IAStorDataMgrSvc) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\windows\system32\lsass.exe (file missing)
O23 - Service: Intel(R) Management and Security Application Local Management Service (LMS) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Mozilla Foundation - C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\windows\System32\msdtc.exe (file missing)
O23 - Service: Norton Internet Security (NIS) - Symantec Corporation - C:\Program Files (x86)\Norton Internet Security\Engine\20.3.1.22\ccSvcHst.exe
O23 - Service: NVIDIA Display Driver Service (nvsvc) - Unknown owner - C:\windows\system32\nvvsvc.exe (file missing)
O23 - Service: NVIDIA Update Service Daemon (nvUpdatusService) - NVIDIA Corporation - C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
O23 - Service: Internet Pass-Through Service (PassThru Service) - Unknown owner - C:\Program Files (x86)\HTC\Internet Pass-Through\PassThruSvr.exe
O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\windows\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\windows\system32\lsass.exe (file missing)
O23 - Service: Skype Updater (SkypeUpdate) - Skype Technologies - C:\Program Files (x86)\Skype\Updater\Updater.exe
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\windows\system32\sppsvc.exe (file missing)
O23 - Service: NVIDIA Stereoscopic 3D Driver Service (Stereo Service) - NVIDIA Corporation - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
O23 - Service: System Explorer Service (SystemExplorerHelpService) - Mister Group - C:\Program Files (x86)\System Explorer\service\SystemExplorerService64.exe
O23 - Service: TeamViewer 8 (TeamViewer8) - TeamViewer GmbH - C:\Program Files (x86)\TeamViewer\Version8\TeamViewer_Service.exe
O23 - Service: TOSHIBA Bluetooth Service - TOSHIBA CORPORATION - C:\Program Files (x86)\Toshiba\Bluetooth Toshiba Stack\TosBtSrv.exe
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\windows\system32\UI0Detect.exe (file missing)
O23 - Service: Intel(R) Management & Security Application User Notification Service (UNS) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\windows\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\windows\system32\vssvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\Wat\WatUX.exe,-601 (WatAdminSvc) - Unknown owner - C:\windows\system32\Wat\WatAdminSvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\windows\system32\wbengine.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)

--
End of file - 10092 bytes

======Listing Processes======

\SystemRoot\System32\smss.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
wininit.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
C:\windows\system32\services.exe
C:\windows\system32\lsass.exe
C:\windows\system32\lsm.exe
C:\windows\system32\svchost.exe -k DcomLaunch
"C:\windows\system32\nvvsvc.exe"
"C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe"
winlogon.exe
C:\windows\system32\svchost.exe -k RPCSS
C:\windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\windows\system32\svchost.exe -k LocalService
C:\windows\system32\svchost.exe -k netsvcs
C:\windows\system32\svchost.exe -k GPSvcGroup
C:\windows\system32\svchost.exe -k NetworkService
"C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe"
C:\windows\system32\nvvsvc.exe -session -first
C:\windows\System32\spoolsv.exe
C:\windows\system32\svchost.exe -k LocalServiceNoNetwork
"C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe"
"C:\Program Files\Bonjour\mDNSResponder.exe"
"C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe"
"C:\Program Files (x86)\Norton Internet Security\Engine\20.3.1.22\ccSvcHst.exe" /s "NIS" /m "C:\Program Files (x86)\Norton Internet Security\Engine\20.3.1.22\diMaster.dll" /prefetch:1
"C:\Program Files (x86)\HTC\Internet Pass-Through\PassThruSvr.exe"
C:\windows\system32\svchost.exe -k imgsvc
"taskhost.exe"
"C:\Program Files (x86)\Norton Internet Security\Engine\20.3.1.22\ccSvcHst.exe" /c /a /s UserSession2
"C:\windows\system32\Dwm.exe"
taskeng.exe {C1ED4DD0-84BD-4A99-9E8E-82ACC4119D50}
"\Program Files\Synaptics\SynTP\SynTPEnh.exe"
C:\windows\Explorer.EXE
"C:\Program Files (x86)\Lenovo\Energy Management\Energy Management.exe"
"C:\Program Files (x86)\Lenovo\Energy Management\utility.exe"
"C:\Program Files (x86)\Lenovo\Onekey Theater\OnekeyStudio.exe"
"C:\Program Files (x86)\Windows Sidebar\sidebar.exe" /autoRun
"C:\Program Files (x86)\Toshiba\Bluetooth Toshiba Stack\TosBtMng.exe"
"C:\Program Files (x86)\Lenovo\Onekey Theater\OnekeySupport.exe"
"C:/Program Files/NVIDIA Corporation/Display/nvtray.exe" -user_has_logged_in 1
C:\Windows\ehome\ehmsas.exe -Embedding
"C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe"
"C:\Program Files (x86)\Lenovo\YouCam\YCMMirage.exe"
C:\windows\system32\SearchIndexer.exe /Embedding
C:\windows\system32\wbem\wmiprvse.exe
C:\windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
C:\windows\system32\svchost.exe -k NetworkServiceNetworkRestricted
"C:\Program Files (x86)\Toshiba\Bluetooth Toshiba Stack\TosBtSrv.exe"
"C:\PROGRAM FILES\SYNAPTICS\SYNTP\SYNTPHELPER.EXE"
"C:\windows\System32\WUDFHost.exe" -HostGUID:{193a1820-d9ac-4997-8c55-be817523f6aa} -IoEventPortName:HostProcess-8d902fca-a19e-4976-8bae-3af68d7832e3 -SystemEventPortName:HostProcess-0ecef481-5e28-4995-82cb-9a52ecb18609 -IoCancelEventPortName:HostProcess-08e1b88d-4f6c-4a15-854a-e49d7d0578dc -NonStateChangingEventPortName:HostProcess-fdca64e4-1547-40a7-b20c-f6299e0e4f39 -ServiceSID:S-1-5-80-2652678385-582572993-1835434367-1344795993-749280709 -LifetimeId:1e1069c4-8ba1-4994-aabb-5336147dd0e9 -DeviceGroupId:WpdFsGroup
"C:\Program Files (x86)\Toshiba\Bluetooth Toshiba Stack\\TosA2dp.exe"
C:\windows\System32\svchost.exe -k LocalServicePeerNet
"C:\Program Files (x86)\Toshiba\Bluetooth Toshiba Stack\\TosBtHid.exe"
"C:\Program Files\Windows Media Player\wmpnetwk.exe"
"C:\Program Files (x86)\Toshiba\Bluetooth Toshiba Stack\\TosBtHsp.exe"
"C:\Program Files (x86)\Cyberlink\PowerDVD12\Kernel\DMP\CLHNServer\CLHNServiceForPowerDVD12.exe"
"C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe"
"C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe"
C:\windows\system32\svchost.exe -k WindowsMobile
"C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe"
"C:\Program Files (x86)\Skype\Phone\Skype.exe"
taskeng.exe {D0D0773F-DFCD-4F82-BC10-95B978F239B6}
"C:\Program Files (x86)\Mozilla Firefox\firefox.exe"
"C:\windows\system32\SearchProtocolHost.exe" Global\UsGthrFltPipeMssGthrPipe40_ Global\UsGthrCtrlFltPipeMssGthrPipe40 1 -2147483646 "Software\Microsoft\Windows Search" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT; MS Search 4.0 Robot)" "C:\ProgramData\Microsoft\Search\Data\Temp\usgthrsvc" "DownLevelDaemon"
"C:\windows\system32\SearchFilterHost.exe" 0 520 524 532 65536 528
"C:\Users\Vrana\Desktop\RSITx64.exe"

======Scheduled tasks folder======

C:\windows\tasks\Adobe Flash Player Updater.job
C:\windows\tasks\GoogleUpdateTaskMachineCore.job
C:\windows\tasks\GoogleUpdateTaskMachineUA.job

=========Mozilla firefox=========

ProfilePath - C:\Users\Vrana\AppData\Roaming\Mozilla\Firefox\Profiles\43hupp9e.default

prefs.js - "browser.search.useDBForOrder" - true
prefs.js - "browser.startup.homepage" - "chrome://fvd.speeddial/content/fvd_about_blank.html"

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 11.7.700.202 Plugin
"Path"=C:\windows\SysWOW64\Macromed\Flash\NPSWF32_11_7_700_202.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@java.com/JavaPlugin,version=10.21.2]
"Description"=Oracle® Next Generation Java™ Plug-In
"Path"=C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@microsoft.com/GENUINE]
"Description"=
"Path"=disabled

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0]
"Description"=Ag Player Plugin
"Path"=c:\Program Files (x86)\Microsoft Silverlight\5.1.20125.0\npctrl.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@microsoft.com/WLPG,version=15.4.3502.0922]
"Description"=WLPG Install MIME type
"Path"=C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@microsoft.com/WLPG,version=16.4.3505.0912]
"Description"=WLPG Install MIME type
"Path"=C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@nvidia.com/3DVision]
"Description"=NVIDIA stereo images plugin for Mozilla browsers
"Path"=C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@nvidia.com/3DVisionStreaming]
"Description"=NVIDIA 3D Vision Streaming plugin for Mozilla browsers
"Path"=C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@tools.google.com/Google Update;version=3]
"Description"=Google Update
"Path"=C:\Program Files (x86)\Google\Update\1.3.21.145\npGoogleUpdate3.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@tools.google.com/Google Update;version=9]
"Description"=Google Update
"Path"=C:\Program Files (x86)\Google\Update\1.3.21.145\npGoogleUpdate3.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\Adobe Reader]
"Description"=Handles PDFs in-place in Firefox
"Path"=C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll


[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 11.7.700.202 Plugin
"Path"=C:\windows\system32\Macromed\Flash\NPSWF64_11_7_700_202.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@microsoft.com/GENUINE]
"Description"=
"Path"=disabled

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0]
"Description"=Ag Player Plugin
"Path"=c:\Program Files\Microsoft Silverlight\5.1.20125.0\npctrl.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@videolan.org/vlc,version=2.0.5]
"Description"=VLC Multimedia Plugin
"Path"=C:\Program Files\VideoLAN\VLC\npvlc.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@videolan.org/vlc,version=2.0.6]
"Description"=VLC Multimedia Plugin
"Path"=C:\Program Files\VideoLAN\VLC\npvlc.dll


C:\Program Files (x86)\Mozilla Firefox\components\
nsIQTScriptablePlugin.xpt

C:\Users\Vrana\AppData\Roaming\Mozilla\Firefox\Profiles\43hupp9e.default\extensions\
pavel.sherbakov@gmail.com

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{602ADB0E-4AFF-4217-8AA1-95DAC4DFA408}]
Norton Identity Protection - C:\Program Files (x86)\Norton Internet Security\Engine\20.3.1.22\coIEPlg.dll [2013-04-01 509776]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{6D53EC84-6AAE-4787-AEEE-F4628F01010C}]
Norton Vulnerability Protection - C:\Program Files (x86)\Norton Internet Security\Engine\20.3.1.22\IPS\IPSBHO.DLL [2012-11-15 387040]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
Java(tm) Plug-In SSV Helper - C:\Program Files (x86)\Java\jre7\bin\ssv.dll [2013-04-04 462752]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AE7CD045-E861-484f-8273-0445EE161910}]
Adobe PDF Conversion Toolbar Helper - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll [2008-06-11 345480]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{BA0C978D-D909-49B6-AFE2-8BDE245DC7E6}]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll [2013-04-04 171424]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{F4971EE7-DAA0-4053-9964-665D8EE6A077}]
SmartSelect Class - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll [2008-06-11 345480]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Internet Explorer\Toolbar]
{47833539-D0C5-4125-9FA8-0819E2EAAC93} - Adobe PDF - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll [2008-06-11 345480]
{7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - Norton Toolbar - C:\Program Files (x86)\Norton Internet Security\Engine\20.3.1.22\coIEPlg.dll [2013-04-01 509776]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"Energy Management"=C:\Program Files (x86)\Lenovo\Energy Management\Energy Management.exe [2009-12-17 6988736]
"EnergyUtility"=c:\program files (x86)\lenovo\energy management\utility.exe [2009-12-17 4367808]
"SmartAudio"=C:\Program Files\CONEXANT\SAII\SAIICpl.exe [2011-05-27 307768]
"OnekeyStudio"=c:\program files (x86)\lenovo\onekey theater\onekeystudio.exe [2009-12-19 776608]
"Lenovo EE Boot Optimizer"=C:\Program Files (x86)\Lenovo\Boot Optimizer\PopWnd.exe [2013-01-17 206176]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"Sidebar"=C:\Program Files (x86)\Windows Sidebar\sidebar.exe [2010-11-21 1174016]

[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]
"UpdateP2GShortCut"=C:\Program Files (x86)\Lenovo\Power2Go\MUITransfer\MUIStartMenu.exe [2010-07-26 222504]
"IAStorIcon"=C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe [2010-03-03 284696]

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup
Bluetooth Manager.lnk - C:\Program Files (x86)\Toshiba\Bluetooth Toshiba Stack\TosBtMng.exe

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED}

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=credssp.dll

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorAdmin"=5
"ConsentPromptBehaviorUser"=3
"EnableUIADesktopToggle"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1
"SynchronousMachineGroupPolicy"=1
"SynchronousUserGroupPolicy"=1
"EnableLinkedConnections"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoInstrumentation"=1
"NoDriveAutoRun-"=0
"NoDriveTypeAutoRun-"=0
"NoDriveTypeAutoRun"=221

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoActiveDesktopChanges"=1
"NoResolveTrack"=1
"NoDriveAutoRun-"=0
"NoDriveTypeAutoRun-"=0
"NoDriveTypeAutoRun"=145

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.msadpcm"=msadp32.acm
"midimapper"=midimap.dll
"wavemapper"=msacm32.drv
"VIDC.UYVY"=msyuv.dll
"VIDC.YUY2"=msyuv.dll
"VIDC.YVYU"=msyuv.dll
"VIDC.IYUV"=iyuv_32.dll
"vidc.i420"=iyuv_32.dll
"VIDC.YVU9"=tsbyuv.dll
"msacm.l3acm"=C:\Windows\System32\l3codecp.acm
"MSVideo8"=VfWWDM32.dll
"wave6"=wdmaud.drv
"mixer6"=wdmaud.drv
"wave7"=wdmaud.drv
"mixer7"=wdmaud.drv
"wave8"=wdmaud.drv
"mixer8"=wdmaud.drv
"wave5"=wdmaud.drv
"mixer5"=wdmaud.drv
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv
"wave9"=wdmaud.drv
"mixer9"=wdmaud.drv
"wave4"=wdmaud.drv
"midi4"=wdmaud.drv
"mixer4"=wdmaud.drv
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"wave2"=wdmaud.drv
"midi2"=wdmaud.drv
"mixer2"=wdmaud.drv
"wave3"=wdmaud.drv
"midi3"=wdmaud.drv
"mixer3"=wdmaud.drv
"midi5"=wdmaud.drv
"midi6"=wdmaud.drv
"midi7"=wdmaud.drv
"midi8"=wdmaud.drv
"midi9"=wdmaud.drv

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*

======List of files/folders created in the last 1 month======

2013-05-17 22:15:38 ----D---- C:\rsit
2013-05-17 22:15:38 ----D---- C:\Program Files\trend micro
2013-05-17 22:15:28 ----A---- C:\windows\MouseSuiteFlag.txt
2013-05-17 21:46:23 ----D---- C:\ProgramData\SystemExplorer
2013-05-17 21:46:22 ----D---- C:\Program Files (x86)\System Explorer
2013-05-17 20:32:29 ----D---- C:\ProgramData\RegRun
2013-05-17 19:42:04 ----RA---- C:\windows\system32\drivers\SymIMV.sys
2013-05-17 18:07:38 ----A---- C:\windows\system32\imageres.dll
2013-05-16 00:25:19 ----D---- C:\Program Files (x86)\StreamTransport
2013-05-15 13:00:01 ----A---- C:\windows\SYSWOW64\ieui.dll
2013-05-15 13:00:01 ----A---- C:\windows\system32\ieui.dll
2013-05-15 13:00:01 ----A---- C:\windows\system32\ie4uinit.exe
2013-05-15 13:00:00 ----A---- C:\windows\SYSWOW64\RegisterIEPKEYs.exe
2013-05-15 13:00:00 ----A---- C:\windows\SYSWOW64\msfeeds.dll
2013-05-15 13:00:00 ----A---- C:\windows\SYSWOW64\iesysprep.dll
2013-05-15 13:00:00 ----A---- C:\windows\SYSWOW64\iesetup.dll
2013-05-15 13:00:00 ----A---- C:\windows\SYSWOW64\iertutil.dll
2013-05-15 13:00:00 ----A---- C:\windows\SYSWOW64\iernonce.dll
2013-05-15 13:00:00 ----A---- C:\windows\system32\RegisterIEPKEYs.exe
2013-05-15 13:00:00 ----A---- C:\windows\system32\msfeeds.dll
2013-05-15 13:00:00 ----A---- C:\windows\system32\iesysprep.dll
2013-05-15 13:00:00 ----A---- C:\windows\system32\iesetup.dll
2013-05-15 13:00:00 ----A---- C:\windows\system32\iernonce.dll
2013-05-15 12:59:59 ----A---- C:\windows\system32\iertutil.dll
2013-05-15 12:59:58 ----A---- C:\windows\SYSWOW64\urlmon.dll
2013-05-15 12:59:58 ----A---- C:\windows\system32\urlmon.dll
2013-05-15 12:59:57 ----A---- C:\windows\SYSWOW64\jscript.dll
2013-05-15 12:59:57 ----A---- C:\windows\system32\jscript9.dll
2013-05-15 12:59:57 ----A---- C:\windows\system32\jscript.dll
2013-05-15 12:59:56 ----A---- C:\windows\SYSWOW64\jscript9.dll
2013-05-15 12:59:55 ----A---- C:\windows\SYSWOW64\wininet.dll
2013-05-15 12:59:55 ----A---- C:\windows\SYSWOW64\jsproxy.dll
2013-05-15 12:59:55 ----A---- C:\windows\system32\wininet.dll
2013-05-15 12:59:55 ----A---- C:\windows\system32\jsproxy.dll
2013-05-15 12:59:53 ----A---- C:\windows\SYSWOW64\mshtml.dll
2013-05-15 12:59:52 ----A---- C:\windows\system32\mshtml.dll
2013-05-15 12:59:51 ----A---- C:\windows\system32\ieframe.dll
2013-05-15 12:59:50 ----A---- C:\windows\SYSWOW64\ieframe.dll
2013-05-15 12:59:17 ----A---- C:\windows\system32\drivers\dxgkrnl.sys
2013-05-15 12:59:16 ----A---- C:\windows\system32\drivers\dxgmms1.sys
2013-05-15 12:59:16 ----A---- C:\windows\system32\cdd.dll
2013-05-15 12:59:12 ----A---- C:\windows\system32\shell32.dll
2013-05-15 12:59:11 ----A---- C:\windows\SYSWOW64\shell32.dll
2013-05-15 12:59:11 ----A---- C:\windows\system32\shdocvw.dll
2013-05-15 12:59:11 ----A---- C:\windows\system32\authui.dll
2013-05-15 12:59:10 ----A---- C:\windows\SYSWOW64\shdocvw.dll
2013-05-15 12:59:10 ----A---- C:\windows\SYSWOW64\authui.dll
2013-05-15 12:59:10 ----A---- C:\windows\system32\consent.exe
2013-05-15 12:59:10 ----A---- C:\windows\system32\appinfo.dll
2013-05-15 12:59:07 ----A---- C:\windows\system32\win32k.sys
2013-05-15 12:59:04 ----A---- C:\windows\system32\wwansvc.dll
2013-05-15 12:59:04 ----A---- C:\windows\system32\wwanprotdim.dll
2013-05-15 03:36:47 ----D---- C:\Program Files (x86)\Mozilla Thunderbird
2013-05-15 00:31:34 ----A---- C:\windows\system32\drivers\Apowersoft_AudioDevice.sys
2013-05-15 00:31:27 ----D---- C:\Users\Vrana\AppData\Roaming\Apowersoft
2013-05-14 19:17:55 ----D---- C:\Program Files\Symantec
2013-05-14 19:17:55 ----D---- C:\Program Files\Common Files\Symantec Shared
2013-05-14 19:17:55 ----A---- C:\windows\system32\drivers\SYMEVENT64x86.SYS
2013-05-14 19:17:28 ----D---- C:\windows\system32\drivers\NISx64
2013-05-14 19:17:26 ----D---- C:\Program Files (x86)\Norton Internet Security
2013-05-14 19:17:21 ----D---- C:\Program Files (x86)\NortonInstaller
2013-05-14 19:14:29 ----D---- C:\ProgramData\Norton
2013-05-14 14:59:21 ----D---- C:\ProgramData\Mozilla
2013-05-14 14:59:21 ----D---- C:\Program Files (x86)\Mozilla Firefox
2013-05-14 14:24:52 ----A---- C:\windows\system32\certsentry.dll
2013-05-14 13:06:02 ----D---- C:\windows\system32\catroot2
2013-05-14 12:38:38 ----D---- C:\windows\SoftwareDistribution
2013-05-14 12:30:32 ----HD---- C:\Program Files\Uninstall Information
2013-05-14 12:24:39 ----A---- C:\windows\PSEXESVC.EXE
2013-05-13 01:02:58 ----D---- C:\ProgramData\StarApp
2013-05-11 09:20:55 ----D---- C:\Program Files (x86)\Spirent Communications
2013-05-10 15:42:51 ----D---- C:\Android
2013-05-07 04:50:33 ----D---- C:\ProgramData\Fighters
2013-05-07 04:12:31 ----D---- C:\Downloads
2013-05-06 11:43:12 ----A---- C:\windows\system32\drivers\40727966.sys
2013-05-03 20:19:16 ----D---- C:\ProgramData\TOSHIBA
2013-05-03 20:12:32 ----D---- C:\Program Files (x86)\Toshiba
2013-05-03 19:34:07 ----D---- C:\Users\Vrana\AppData\Roaming\Software Informer
2013-05-03 19:02:54 ----D---- C:\BluetoothExchangeFolder
2013-05-03 18:54:17 ----D---- C:\windows\SYSWOW64\sda
2013-05-03 18:53:56 ----A---- C:\windows\system32\drivers\RtsUVStor.sys
2013-05-03 18:50:57 ----A---- C:\windows\system32\RtNicProp64.dll
2013-05-03 18:50:57 ----A---- C:\windows\system32\drivers\Rt64win7.sys
2013-05-03 18:48:42 ----A---- C:\windows\difxapi.dll
2013-05-03 15:18:41 ----RA---- C:\windows\system32\AdobePDFUI.dll
2013-04-29 23:34:16 ----A---- C:\windows\SYSWOW64\msvcr70.dll
2013-04-28 03:28:24 ----D---- C:\Program Files\PlayReady
2013-04-28 01:07:28 ----D---- C:\ProgramData\YouCam
2013-04-28 01:07:28 ----AD---- C:\ProgramData\Temp
2013-04-26 16:46:25 ----A---- C:\windows\system32\drivers\ElRawDsk.sys
2013-04-26 16:46:21 ----A---- C:\windows\SYSWOW64\mfc45.dat
2013-04-26 13:55:50 ----D---- C:\ProgramData\Apple Computer
2013-04-26 13:55:50 ----D---- C:\Program Files (x86)\QuickTime
2013-04-26 13:54:56 ----D---- C:\ProgramData\Apple
2013-04-26 13:54:56 ----D---- C:\Program Files (x86)\Apple Software Update
2013-04-26 12:33:09 ----D---- C:\Program Files (x86)\Nero
2013-04-26 11:38:59 ----D---- C:\Intel
2013-04-26 10:00:59 ----D---- C:\Users\Vrana\AppData\Roaming\ICQM
2013-04-25 18:47:57 ----D---- C:\ProgramData\Downloaded Installations
2013-04-25 18:46:43 ----A---- C:\windows\system32\drivers\gfibto.sys
2013-04-25 17:53:05 ----D---- C:\ProgramData\HTC
2013-04-24 18:08:52 ----A---- C:\windows\system32\nvvsvc.exe
2013-04-24 18:08:52 ----A---- C:\windows\system32\nvsvcr.dll
2013-04-24 18:08:52 ----A---- C:\windows\system32\nvsvc64.dll
2013-04-24 18:08:52 ----A---- C:\windows\system32\nvshext.dll
2013-04-24 18:08:51 ----A---- C:\windows\system32\nvmctray.dll
2013-04-24 18:08:51 ----A---- C:\windows\system32\nvcpl.dll
2013-04-24 18:08:50 ----A---- C:\windows\SYSWOW64\oemdspif.dll
2013-04-24 18:08:07 ----D---- C:\ProgramData\NVIDIA Corporation
2013-04-24 18:05:46 ----A---- C:\windows\system32\nvhdap64.dll
2013-04-24 18:05:45 ----A---- C:\windows\system32\nvhdagenco6420103.dll
2013-04-24 18:05:45 ----A---- C:\windows\system32\drivers\nvhda64v.sys
2013-04-24 18:05:42 ----A---- C:\windows\system32\nvdispgenco6431422.dll
2013-04-24 18:05:42 ----A---- C:\windows\system32\nvdispco6431422.dll
2013-04-24 18:05:41 ----A---- C:\windows\SYSWOW64\nvapi.dll
2013-04-24 18:05:41 ----A---- C:\windows\system32\nvapi64.dll
2013-04-24 18:05:40 ----A---- C:\windows\SYSWOW64\nvd3dum.dll
2013-04-24 18:05:40 ----A---- C:\windows\SYSWOW64\nvcuvid.dll
2013-04-24 18:05:40 ----A---- C:\windows\SYSWOW64\nvcuvenc.dll
2013-04-24 18:05:40 ----A---- C:\windows\SYSWOW64\nvcuda.dll
2013-04-24 18:05:40 ----A---- C:\windows\SYSWOW64\nvcompiler.dll
2013-04-24 18:05:40 ----A---- C:\windows\system32\nvcuvid.dll
2013-04-24 18:05:40 ----A---- C:\windows\system32\nvcuvenc.dll
2013-04-24 18:05:40 ----A---- C:\windows\system32\nvcuda.dll
2013-04-24 18:05:40 ----A---- C:\windows\system32\nvcompiler.dll
2013-04-24 18:05:39 ----A---- C:\windows\SYSWOW64\nvopencl.dll
2013-04-24 18:05:39 ----A---- C:\windows\SYSWOW64\nvoglv32.dll
2013-04-24 18:05:39 ----A---- C:\windows\system32\nvopencl.dll
2013-04-24 18:05:39 ----A---- C:\windows\system32\nvoglv64.dll
2013-04-24 18:05:39 ----A---- C:\windows\system32\nvd3dumx.dll
2013-04-24 18:05:38 ----A---- C:\windows\SYSWOW64\nvwgf2um.dll
2013-04-24 18:05:38 ----A---- C:\windows\system32\nvwgf2umx.dll
2013-04-24 18:05:38 ----A---- C:\windows\system32\drivers\nvlddmkm.sys
2013-04-23 23:06:28 ----D---- C:\windows\WindowsMobile
2013-04-23 23:06:16 ----A---- C:\windows\system32\drivers\ntfs.sys
2013-04-19 13:31:24 ----D---- C:\Program Files (x86)\VisualRoute Lite Edition
2013-04-19 13:08:19 ----A---- C:\windows\system32\ipconfig_results.txt
2013-04-19 13:08:18 ----A---- C:\windows\system32\drivers\tap0901.sys
2013-04-19 04:14:30 ----D---- C:\Users\Vrana\AppData\Roaming\LizardSystems
2013-04-19 04:14:29 ----D---- C:\Program Files (x86)\LizardSystems
2013-04-19 03:41:55 ----A---- C:\windows\SYSWOW64\WindowsAccessBridge-32.dll
2013-04-19 03:41:55 ----A---- C:\windows\SYSWOW64\javaw.exe
2013-04-19 03:41:55 ----A---- C:\windows\SYSWOW64\java.exe

======List of files/folders modified in the last 1 month======

2013-05-18 02:19:59 ----D---- C:\windows\ulead.dat
2013-05-18 02:19:59 ----D---- C:\windows\TAPI
2013-05-18 02:19:59 ----D---- C:\windows\SYSWOW64\Recovery
2013-05-18 02:19:59 ----D---- C:\windows\SYSWOW64\config
2013-05-18 02:19:59 ----D---- C:\windows\system32\wfp
2013-05-18 02:19:59 ----D---- C:\windows\system32\ias
2013-05-18 02:19:57 ----D---- C:\windows\system32\drivers\etc
2013-05-18 02:19:56 ----D---- C:\windows\sk
2013-05-18 02:19:56 ----D---- C:\windows\rescache
2013-05-18 02:19:56 ----D---- C:\windows\pss
2013-05-18 02:19:56 ----D---- C:\windows\Offline Web Pages
2013-05-18 02:19:55 ----RSD---- C:\windows\Media
2013-05-18 02:19:44 ----RSD---- C:\windows\Fonts
2013-05-18 02:19:44 ----RD---- C:\Users
2013-05-18 02:19:44 ----D---- C:\windows\en
2013-05-18 02:19:44 ----D---- C:\windows\Downloaded Program Files
2013-05-18 02:19:44 ----D---- C:\windows\cs
2013-05-18 02:19:44 ----D---- C:\windows\Acronis
2013-05-18 02:19:44 ----D---- C:\Users\Vrana\AppData\Roaming\vlc
2013-05-18 02:19:44 ----D---- C:\Users\Vrana\AppData\Roaming\GHISLER
2013-05-18 02:19:43 ----D---- C:\ProgramData\Microsoft Help
2013-05-18 02:19:43 ----D---- C:\Program Files\WinRAR
2013-05-18 02:19:43 ----D---- C:\Program Files\Windows Sidebar
2013-05-18 02:19:43 ----D---- C:\Program Files\NVIDIA Corporation
2013-05-18 02:19:42 ----D---- C:\Program Files\Microsoft Silverlight
2013-05-18 02:19:42 ----D---- C:\Program Files\CCleaner
2013-05-18 02:19:42 ----D---- C:\Program Files (x86)\Windows Sidebar
2013-05-18 02:19:41 ----D---- C:\Program Files (x86)\SystemRequirementsLab
2013-05-18 02:19:41 ----D---- C:\Program Files (x86)\Mozilla Maintenance Service
2013-05-18 02:19:41 ----D---- C:\Program Files (x86)\Microsoft SkyDrive
2013-05-18 02:19:41 ----D---- C:\Program Files (x86)\Microsoft Silverlight
2013-05-18 02:19:41 ----D---- C:\Program Files (x86)\Java
2013-05-18 02:19:40 ----D---- C:\Program Files (x86)\ICQ7M
2013-05-18 02:19:40 ----D---- C:\Program Files (x86)\Diablo III
2013-05-18 02:19:40 ----D---- C:\Program Files (x86)\DAEMON Tools Lite
2013-05-18 02:19:27 ----D---- C:\Program Files (x86)\Bonjour
2013-05-18 02:19:27 ----D---- C:\Program Files (x86)\BisonCam
2013-05-18 02:19:26 ----D---- C:\Drivers
2013-05-18 02:19:02 ----D---- C:\Program Files (x86)\K-Lite Codec Pack
2013-05-18 02:18:42 ----D---- C:\windows\SYSWOW64\wbem
2013-05-18 02:18:41 ----D---- C:\windows\SYSWOW64\en-US
2013-05-18 02:18:41 ----D---- C:\windows\SYSWOW64\cs-CZ
2013-05-18 02:18:40 ----D---- C:\windows\system32\wbem
2013-05-18 02:18:40 ----D---- C:\windows\system
2013-05-18 02:18:06 ----D---- C:\windows\ShellNew
2013-05-18 02:18:06 ----AD---- C:\windows\sysprep32
2013-05-18 02:18:05 ----D---- C:\windows\OKR70
2013-05-18 02:18:05 ----D---- C:\windows\Microsoft.NET
2013-05-18 02:17:42 ----D---- C:\windows\Cursors
2013-05-18 02:17:35 ----D---- C:\windows\AppCompat
2013-05-18 02:17:34 ----D---- C:\Users\Vrana\AppData\Roaming\Ulozto File Manager
2013-05-18 02:17:34 ----D---- C:\Users\Vrana\AppData\Roaming\TS3Client
2013-05-18 02:17:34 ----D---- C:\Users\Vrana\AppData\Roaming\Thunderbird
2013-05-18 02:17:28 ----D---- C:\Users\Vrana\AppData\Roaming\BSplayer Pro
2013-05-18 02:17:25 ----D---- C:\totalcmd
2013-05-18 02:17:25 ----D---- C:\ProgramData\VeriFace
2013-05-18 02:17:24 ----D---- C:\ProgramData\Stardock
2013-05-18 02:17:15 ----D---- C:\ProgramData\Microsoft SkyDrive
2013-05-18 02:17:15 ----D---- C:\ProgramData\Google
2013-05-18 02:17:15 ----D---- C:\ProgramData\FLEXnet
2013-05-18 02:17:15 ----D---- C:\ProgramData\DAEMON Tools Lite
2013-05-18 02:17:15 ----D---- C:\ProgramData\CyberLink
2013-05-18 02:17:07 ----D---- C:\Program Files (x86)\Yaho's Miranda IM
2013-05-18 02:17:01 ----D---- C:\Program Files (x86)\Winamp
2013-05-18 02:16:44 ----D---- C:\Program Files (x86)\Mumble
2013-05-18 02:16:42 ----D---- C:\Program Files (x86)\Miranda IM
2013-05-18 02:15:47 ----SHD---- C:\$Recycle.Bin
2013-05-18 02:12:28 ----D---- C:\windows\registration
2013-05-18 01:54:36 ----D---- C:\ProgramData\Synaptics
2013-05-18 01:54:22 ----D---- C:\ProgramData\Nero
2013-05-18 01:54:04 ----SD---- C:\ProgramData\Microsoft
2013-05-18 01:52:40 ----D---- C:\ProgramData\Battle.net
2013-05-18 01:42:13 ----D---- C:\Program Files (x86)\Common Files
2013-05-18 00:55:33 ----D---- C:\windows\Prefetch
2013-05-18 00:53:03 ----RD---- C:\Program Files (x86)
2013-05-18 00:52:24 ----D---- C:\windows\SysWOW64
2013-05-18 00:48:55 ----D---- C:\Users\Vrana\AppData\Roaming\Skype
2013-05-18 00:36:07 ----AHD---- C:\ProgramData
2013-05-18 00:09:58 ----D---- C:\Program Files\Common Files
2013-05-17 23:58:38 ----D---- C:\windows\inf
2013-05-17 22:48:09 ----D---- C:\windows\Temp
2013-05-17 22:15:38 ----RD---- C:\Program Files
2013-05-17 22:15:28 ----D---- C:\Windows
2013-05-17 22:15:20 ----D---- C:\windows\system32\DriverStore
2013-05-17 22:15:20 ----D---- C:\windows\system32\drivers
2013-05-17 22:15:20 ----D---- C:\windows\system32\catroot
2013-05-17 21:53:21 ----D---- C:\windows\SYSWOW64\drivers
2013-05-17 21:53:20 ----D---- C:\windows\system32\Tasks
2013-05-17 21:35:00 ----D---- C:\windows\System32
2013-05-17 21:33:03 ----SHD---- C:\System Volume Information
2013-05-17 21:30:40 ----D---- C:\windows\system32\config
2013-05-17 21:20:51 ----A---- C:\windows\system32\PerfStringBackup.INI
2013-05-17 21:15:10 ----A---- C:\windows\SYSWOW64\log.txt
2013-05-17 21:15:05 ----D---- C:\ProgramData\NVIDIA
2013-05-17 21:15:01 ----A---- C:\windows\SYSWOW64\PARTIZAN.TXT
2013-05-17 20:36:17 ----D---- C:\windows\Tasks
2013-05-17 20:32:07 ----RASHOT---- C:\windows\winstart.bat
2013-05-17 19:36:11 ----SHD---- C:\Config.Msi
2013-05-17 19:11:10 ----D---- C:\Users\Vrana\AppData\Roaming\Winamp
2013-05-17 17:34:19 ----SHD---- C:\windows\Installer
2013-05-17 17:34:19 ----D---- C:\ProgramData\Skype
2013-05-17 17:34:15 ----RD---- C:\Program Files (x86)\Skype
2013-05-17 16:57:59 ----D---- C:\Program Files (x86)\Internet Explorer
2013-05-17 16:51:32 ----D---- C:\ProgramData\Adobe
2013-05-17 16:43:20 ----A---- C:\windows\SYSWOW64\FlashPlayerApp.exe
2013-05-16 07:15:28 ----D---- C:\windows\Panther
2013-05-16 07:15:28 ----D---- C:\windows\debug
2013-05-15 14:27:34 ----RSD---- C:\windows\assembly
2013-05-15 13:11:30 ----D---- C:\windows\winsxs
2013-05-15 13:08:09 ----D---- C:\windows\AppPatch
2013-05-15 13:08:08 ----D---- C:\windows\system32\cs-CZ
2013-05-15 13:08:07 ----D---- C:\Program Files\Internet Explorer
2013-05-15 13:04:12 ----A---- C:\windows\system32\MRT.exe
2013-05-15 12:57:58 ----D---- C:\windows\Logs
2013-05-14 12:30:44 ----A---- C:\windows\win.ini
2013-05-13 04:04:47 ----D---- C:\Users\Vrana\AppData\Roaming\NVIDIA
2013-05-12 17:13:00 ----D---- C:\Users\Vrana\AppData\Roaming\TeamViewer
2013-05-11 20:59:06 ----D---- C:\Users\Vrana\AppData\Roaming\Mumble
2013-05-11 09:20:55 ----D---- C:\Program Files (x86)\HTC
2013-05-08 11:00:02 ----D---- C:\windows\system32\LogFiles
2013-05-03 19:33:33 ----D---- C:\windows\system32\zh-TW
2013-05-03 19:33:33 ----D---- C:\windows\system32\zh-CN
2013-05-03 19:33:33 ----D---- C:\windows\system32\ko-KR
2013-05-03 19:33:33 ----D---- C:\windows\system32\ja-JP
2013-05-03 19:33:33 ----D---- C:\windows\system32\en-US
2013-05-03 18:50:57 ----D---- C:\Program Files (x86)\Realtek
2013-05-03 18:48:50 ----D---- C:\Program Files\Lenovo
2013-05-02 02:06:08 ----N---- C:\windows\system32\MpSigStub.exe
2013-05-02 00:18:15 ----SD---- C:\Users\Vrana\AppData\Roaming\Microsoft
2013-04-28 01:27:31 ----HD---- C:\Program Files (x86)\InstallShield Installation Information
2013-04-28 01:26:24 ----D---- C:\Program Files (x86)\Lenovo
2013-04-26 12:41:49 ----D---- C:\Users\Vrana\AppData\Roaming\Nero
2013-04-26 11:42:59 ----D---- C:\Program Files (x86)\Intel
2013-04-25 17:26:46 ----D---- C:\windows\SYSWOW64\Microsoft
2013-04-24 18:10:13 ----D---- C:\Program Files (x86)\NVIDIA Corporation
2013-04-24 03:45:02 ----D---- C:\Program Files (x86)\Google
2013-04-24 03:34:16 ----D---- C:\Users\Vrana\AppData\Roaming\Systweak
2013-04-24 03:33:18 ----D---- C:\Program Files (x86)\Auslogics
2013-04-23 23:47:42 ----SD---- C:\windows\system32\Microsoft
2013-04-23 16:04:10 ----A---- C:\windows\SYSWOW64\guard32.dll
2013-04-23 16:04:10 ----A---- C:\windows\system32\guard64.dll
2013-04-23 13:41:31 ----D---- C:\windows\system32\CodeIntegrity
2013-04-22 12:28:50 ----A---- C:\windows\cce.INI

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 fbfmon;fbfmon; C:\windows\system32\drivers\fbfmon.sys [2013-01-17 57952]
R0 gfibto;gfibto; C:\windows\system32\drivers\gfibto.sys [2013-04-25 14456]
R0 iaStor;Intel AHCI Controller; C:\windows\system32\DRIVERS\iaStor.sys [2009-08-07 408600]
R0 rdyboost;ReadyBoost; C:\windows\System32\drivers\rdyboost.sys [2010-11-21 213888]
R0 snapman;Acronis Snapshots Manager; C:\windows\system32\DRIVERS\snapman.sys [2012-07-31 276576]
R0 SymDS;Symantec Data Store; C:\windows\system32\drivers\NISx64\1403010.016\SYMDS64.SYS [2013-01-21 493656]
R0 SymEFA;Symantec Extended File Attributes; C:\windows\system32\drivers\NISx64\1403010.016\SYMEFA64.SYS [2013-01-30 1139800]
R1 BHDrvx64;BHDrvx64; \??\C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_20.3.1.22\Definitions\BASHDefs\20130502.001\BHDrvx64.sys [2013-05-03 1390680]
R1 BPntDrv;BPntDrv; C:\windows\system32\drivers\BPntDrv.sys [2013-01-17 13408]
R1 ccSet_NIS;Norton Internet Security Settings Manager; C:\windows\system32\drivers\NISx64\1403010.016\ccSetx64.sys [2012-11-15 168096]
R1 dtsoftbus01;DAEMON Tools Virtual Bus Driver; C:\windows\system32\DRIVERS\dtsoftbus01.sys [2012-07-31 283200]
R1 eeCtrl;Symantec Eraser Control driver; \??\C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\eeCtrl64.sys [2013-05-13 484512]
R1 ElRawDisk;ElRawDisk; \??\C:\windows\system32\drivers\ElRawDsk.sys [2012-08-02 30752]
R1 IDSVia64;IDSVia64; \??\C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_20.3.1.22\Definitions\IPSDefs\20130516.001_cce\IDSvia64.sys [2013-05-11 513184]
R1 SRTSPX;Symantec Real Time Storage Protection (PEL) x64; C:\windows\system32\drivers\NISx64\1403010.016\SRTSPX64.SYS [2013-01-28 36952]
R1 SymIM;Symantec Network Security Intermediate Filter Driver; C:\windows\system32\DRIVERS\SymIMv.sys [2012-11-15 43680]
R1 SymIRON;Symantec Iron Driver; C:\windows\system32\drivers\NISx64\1403010.016\Ironx64.SYS [2012-11-15 224416]
R1 SymNetS;Symantec Network Security WFP Driver; C:\windows\system32\drivers\NISx64\1403010.016\SYMNETS.SYS [2013-01-30 432800]
R1 Tosrfcom;Bluetooth RFCOMM; C:\windows\System32\Drivers\tosrfcom.sys [2009-07-28 81768]
R1 vwififlt;Virtual WiFi Filter Driver; C:\windows\system32\DRIVERS\vwififlt.sys [2009-07-14 59904]
R2 ntk_PowerDVD12;ntk_PowerDVD12; \??\C:\Program Files (x86)\Cyberlink\PowerDVD12\Kernel\DMP\CLHNServer\ntk_PowerDVD12_64.sys [2011-10-27 82928]
R3 ACPIVPC;Lenovo Virtual Power Controller Driver; C:\windows\system32\DRIVERS\AcpiVpc.sys [2009-10-19 28176]
R3 athr;Qualcomm Atheros Extensible Wireless LAN device driver; C:\windows\system32\DRIVERS\athrx.sys [2012-11-22 3831808]
R3 Cam5607;Lenovo EasyCamera ; C:\windows\System32\Drivers\BisonC07.sys [2010-08-07 1326928]
R3 clwvd;CyberLink WebCam Virtual Driver; C:\windows\system32\DRIVERS\clwvd.sys [2011-01-28 31088]
R3 CnxtHdAudService;Conexant UAA Function Driver for High Definition Audio Service; C:\windows\system32\drivers\CHDRT64.sys [2011-05-27 736896]
R3 EraserUtilRebootDrv;EraserUtilRebootDrv; \??\C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys [2013-05-13 138912]
R3 HECIx64;Intel(R) Management Engine Interface; C:\windows\system32\DRIVERS\HECIx64.sys [2009-09-17 56344]
R3 NAVENG;NAVENG; \??\C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_20.3.1.22\Definitions\VirusDefs\20130517.008\ENG64.SYS [2013-05-17 126192]
R3 NAVEX15;NAVEX15; \??\C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_20.3.1.22\Definitions\VirusDefs\20130517.008\EX64.SYS [2013-05-17 2087664]
R3 NVHDA;Service for NVIDIA High Definition Audio Driver; C:\windows\system32\drivers\nvhda64v.sys [2012-12-19 194488]
R3 RSUSBSTOR;RtsUStor.Sys Realtek USB Card Reader; C:\windows\System32\Drivers\RtsUStor.sys [2000-01-01 252520]
R3 RTL8167;Realtek 8167 NT Driver; C:\windows\system32\DRIVERS\Rt64win7.sys [2011-11-23 648808]
R3 SmbDrvI;SmbDrvI; C:\windows\system32\DRIVERS\Smb_driver_Intel.sys [2012-08-24 43832]
R3 SRTSP;Symantec Real Time Storage Protection x64; C:\windows\system32\drivers\NISx64\1403010.016\SRTSP64.SYS [2013-01-28 796248]
R3 SymEvent;SymEvent; \??\C:\windows\system32\Drivers\SYMEVENT64x86.SYS [2013-05-14 177312]
R3 SynTP;Synaptics TouchPad Driver; C:\windows\system32\DRIVERS\SynTP.sys [2012-11-06 461624]
R3 tosporte;Bluetooth COM Port; C:\windows\system32\DRIVERS\tosporte.sys [2009-06-17 54664]
S0 nmfmfx;nmfmfx; C:\windows\system32\drivers\nmfmfx.sys []
S0 Partizan;Partizan; C:\windows\system32\drivers\Partizan.sys []
S0 vqdtrh;vqdtrh; C:\windows\system32\drivers\vqdtrh.sys []
S0 vxoqkw;vxoqkw; C:\windows\system32\drivers\vxoqkw.sys []
S2 ATE_PROCMON;ATE_PROCMON; C:\windows\system32\drivers\ATE_PROCMON.sys []
S3 Apowersoft_AudioDevice;Apowersoft_AudioDevice; C:\windows\system32\drivers\Apowersoft_AudioDevice.sys [2012-10-08 31968]
S3 bdfsfltr;bdfsfltr; C:\windows\system32\DRIVERS\bdfsfltr.sys [2011-03-24 431176]
S3 BthEnum;Služba Bluetooth Enumerator; C:\windows\system32\DRIVERS\BthEnum.sys [2009-07-14 41984]
S3 BthPan;Zařízení Bluetooth (síť PAN); C:\windows\system32\DRIVERS\bthpan.sys [2009-07-14 118784]
S3 BTHPORT;Ovladač portu Bluetooth; C:\windows\System32\Drivers\BTHport.sys [2012-07-06 552960]
S3 BTHUSB;Ovladač rozhraní USB radiostanice Bluetooth; C:\windows\System32\Drivers\BTHUSB.sys [2011-09-29 80384]
S3 BTKRNL;Bluetooth Bus Enumerator; C:\windows\system32\DRIVERS\btkrnl.sys [2006-01-17 1106944]
S3 CsrBtPort;Csr Bluetooth Device Driver; C:\windows\system32\DRIVERS\CsrBtPort.sys []
S3 csrusb;CSR USB driver for Bluetooth dongle; C:\windows\System32\Drivers\csrusb.sys []
S3 emAudio;USB EMP Audio Device; C:\windows\system32\drivers\emAudio64.sys [2009-09-17 34304]
S3 fssfltr;FssFltr; C:\windows\system32\DRIVERS\fssfltr.sys [2012-09-12 57856]
S3 HTCAND64;HTC Device Driver; C:\windows\System32\Drivers\ANDROIDUSB.sys [2009-11-02 33736]
S3 htcnprot;HTC NDIS Protocol Driver; C:\windows\system32\DRIVERS\htcnprot.sys [2010-06-25 36928]
S3 Huawei;HUAWEI Mobile Connect - USB Smart Card Reader; C:\windows\system32\DRIVERS\ewdcsc.sys [2009-12-15 29696]
S3 hwdatacard;Huawei DataCard USB Modem and USB Serial; C:\windows\system32\DRIVERS\ewusbmdm.sys [2009-12-15 117248]
S3 hwusbdev;Huawei DataCard USB PNP Device; C:\windows\system32\DRIVERS\ewusbdev.sys [2009-12-15 114304]
S3 NANMp50;NANMp50 NDIS Protocol Driver; C:\windows\System32\Drivers\NANMp50.sys []
S3 NANSp50;NANSp50 NDIS Protocol Driver; C:\windows\System32\Drivers\NANSp50.sys []
S3 pciide;pciide; C:\windows\system32\drivers\pciide.sys [2009-07-14 12352]
S3 RFCOMM;Zařízení Bluetooth (RFCOMM protokol TDI); C:\windows\system32\DRIVERS\rfcomm.sys [2009-07-14 158720]
S3 tap0901;TAP-Win32 Adapter V9; C:\windows\system32\DRIVERS\tap0901.sys [2011-07-01 31232]
S3 tosrfbd;Bluetooth RFBUS; C:\windows\system32\DRIVERS\tosrfbd.sys [2009-08-28 211560]
S3 tosrfbnp;Bluetooth RFBNEP; C:\windows\System32\Drivers\tosrfbnp.sys [2009-06-19 50664]
S3 Tosrfhid;Bluetooth RFHID; C:\windows\system32\DRIVERS\Tosrfhid.sys [2009-06-19 94336]
S3 tosrfnds;Bluetooth Personal Area Network; C:\windows\system32\DRIVERS\tosrfnds.sys [2009-07-24 26472]
S3 TosRfSnd;Bluetooth Audio; C:\windows\system32\drivers\tosrfsnd.sys [2009-08-05 63856]
S3 Tosrfusb;Bluetooth USB Controller; C:\windows\system32\DRIVERS\tosrfusb.sys [2009-08-05 58744]
S3 TsUsbFlt;TsUsbFlt; C:\windows\system32\drivers\tsusbflt.sys [2012-08-23 57856]
S3 TsUsbGD;Remote Desktop Generic USB Device; C:\windows\system32\drivers\TsUsbGD.sys [2012-08-23 30208]
S3 USB28xxBGA;USB 2881 Device; C:\windows\system32\DRIVERS\emBDA64.sys [2007-01-12 461824]
S3 USB28xxOEM;USB 28xx OEM Filter; C:\windows\system32\DRIVERS\emOEM64.sys [2006-12-21 40704]
S3 usbscan;Ovladač skeneru USB; C:\windows\system32\DRIVERS\usbscan.sys [2009-07-14 41984]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 AdobeARMservice;Adobe Acrobat Update Service; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [2013-05-11 65640]
R2 Bonjour Service;Bonjour Service; C:\Program Files\Bonjour\mDNSResponder.exe [2011-08-30 462184]
R2 CLHNServiceForPowerDVD12;CLHNServiceForPowerDVD12; C:\Program Files (x86)\Cyberlink\PowerDVD12\Kernel\DMP\CLHNServer\CLHNServiceForPowerDVD12.exe [2012-01-12 87336]
R2 IAStorDataMgrSvc;Úložná technologie Intel(R) Rapid; C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe [2010-03-03 13336]
R2 LMS;Intel(R) Management and Security Application Local Management Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe [2009-12-09 268824]
R2 NIS;Norton Internet Security; C:\Program Files (x86)\Norton Internet Security\Engine\20.3.1.22\ccSvcHst.exe [2012-12-23 144520]
R2 nvsvc;NVIDIA Display Driver Service; C:\windows\system32\nvvsvc.exe [2013-03-15 877856]
R2 nvUpdatusService;NVIDIA Update Service Daemon; C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe [2013-03-15 1266464]
R2 PassThru Service;Internet Pass-Through Service; C:\Program Files (x86)\HTC\Internet Pass-Through\PassThruSvr.exe [2011-03-31 80896]
R2 RapiMgr;@%windir%\WindowsMobile\rapimgr.dll,-104; C:\windows\system32\svchost.exe [2009-07-14 27136]
R2 Stereo Service;NVIDIA Stereoscopic 3D Driver Service; C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe [2013-03-14 383264]
R2 UNS;Intel(R) Management & Security Application User Notification Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe [2009-12-09 2320920]
R3 TOSHIBA Bluetooth Service;TOSHIBA Bluetooth Service; C:\Program Files (x86)\Toshiba\Bluetooth Toshiba Stack\TosBtSrv.exe [2009-07-30 192368]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
S2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64; C:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2010-03-18 138576]
S2 gupdate;Google Update Service (gupdate); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2012-12-05 116648]
S2 NetMsmqActivator;@C:\windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8195; C:\windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2010-03-18 124240]
S2 NetPipeActivator;@C:\windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8197; C:\windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2010-03-18 124240]
S2 NetTcpActivator;@C:\windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8199; C:\windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2010-03-18 124240]
S2 SkypeUpdate;Skype Updater; C:\Program Files (x86)\Skype\Updater\Updater.exe [2013-02-28 161384]
S2 TeamViewer8;TeamViewer 8; C:\Program Files (x86)\TeamViewer\Version8\TeamViewer_Service.exe [2013-04-23 3574624]
S3 aspnet_state;ASP.NET State Service; C:\windows\Microsoft.NET\Framework64\v4.0.30319\aspnet_state.exe [2010-03-18 44376]
S3 FLEXnet Licensing Service;FLEXnet Licensing Service; C:\Program Files (x86)\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe [2013-05-03 651720]
S3 fsssvc;Windows Live Family Safety Service; C:\Program Files (x86)\Windows Live\Family Safety\fsssvc.exe [2012-09-12 1512448]
S3 gupdatem;Google Update Service (gupdatem); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2012-12-05 116648]
S3 MozillaMaintenance;Mozilla Maintenance Service; C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe [2013-05-14 117144]
S3 odserv;Microsoft Office Diagnostics Service; C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE [2011-07-20 440696]
S3 ose;Office Source Engine; C:\Program Files (x86)\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2010-01-09 149352]
S3 SystemExplorerHelpService;System Explorer Service; C:\Program Files (x86)\System Explorer\service\SystemExplorerService64.exe [2012-11-25 821720]
S4 CyberLink PowerDVD 12 Media Server Monitor Service;CyberLink PowerDVD 12 Media Server Monitor Service; C:\Program Files (x86)\Cyberlink\PowerDVD12\Kernel\DMS\CLMSMonitorServicePDVD12.exe [2012-01-12 75048]
S4 CyberLink PowerDVD 12 Media Server Service;CyberLink PowerDVD 12 Media Server Service; C:\Program Files (x86)\Cyberlink\PowerDVD12\Kernel\DMS\CLMSServerPDVD12.exe [2012-01-12 296232]

-----------------EOF-----------------

Zdravím!
V logu nevidím nic nebezpečného. Zkoušel jste aplikaci přeinstalovat?

Dobrý den,
tuto možnost reinstalace NIS jsem už jednou zkoušel i proto, že v mozille mi to vypisovalo v podelném okně, chyba parsování xml nedefinovaná entita. Zjistil jsem, že když jsem vypl norton toolbar, tak to přestalo.
Nic méně jsem zkusil odinstalovat dneska norton internet security 2013, samozřejmě legálně zakoupený na rok, a pro legraci nainstaloval avast free antivirus, a jen tak zkusil, zda něco nenajde.
Našel, a bylo toho hodně, asi 20 kousku rootkitu. Ani jsem nestíhl dát aspoň rychlý test, a už na mě avast křičel.
Všechny tyhle havěti odstranil.
Vůbec nechápu, kde jsem takové havěti mohl nabrat. Neinstaluju žádné crack věci, nechodím po žádných warez stránkách, a jsem proti tomu. Systém funguje, a načítá bez problémů.
Jsem hodně šokovaný, a nevím co si mám myslet. Mám docela chuť napsat do Symantecu, jak je tohle možný, že člověk utratí kolem 1589,- kč za antivirovou ochranu, nedělá nic aby si tahal viry do systému. Neinstaluje žádné nesmysly, a nakonec free antivirový program odhalý hromadu virů v systému, do kterého se dostali nechápu jak.
Ironicky řečeno asi tím, že si člověk vybere poštu, přečte si noviny, nebo poslechne hudbu, nebo video na youtube?
Hlavně, že se každá firma s antivirama se chvástá, jakou má nepřekonatelnou ochranu, a přitom při normálním slušným používání se systém zaviruje, a "užasná" ochrana nereaguje na nic.
Jaký je podle Vás opravdu dobrý antivirový program, hlavně spolehlivý.
Moc Vám děkuji za Váš čas.
S pozdravem pěkného dne

Dejte log ComboFix:

Stahnete a ulozte nejlepe na plochu ComboFix: http://download.bleepingcomputer.com/sUBs/ComboFix.exe

pote spustte aplikaci pod uctem s administratorskym opravnenim

hned po startu se zobrazi obrazovka s licencnimi podminkami, pokracujte kliknutim na tlacitko Ano.

v klidu si postavte na kafe (cela akce trva cca. 5-10 minut, nekdy i dele - dle toho, o jak rychly stroj se

jedna a kolika soubory se skener bude muset prodirat), behem skenu se nepokousejte spoustet zadne jine

aplikace ani nic jineho

behem skenovani nepropadejte panice, vas stroj muze byt restartovan (predevsim pri prvni aplikaci skeneru)

upozorneni: pokud pouzivate antispyware s rezidentnim stitem, prepnete jeho rezidentni stit do Install Mode,

pripadne jej po dobu skenu uplne deaktivujte, protoze dochazi pri skenu a vymazu pripadneho malware k

nezadoucim kolizim s rezidentem antispyware

Dobrý den,
přikládám tedy log.

ComboFix 13-05-18.03 - Vrana 18.05.2013 23:42:53.1.4 - x64
Microsoft Windows 7 Home Premium 6.1.7601.1.1250.420.1029.18.3959.2279 [GMT 2:00]
Spuštěný z: c:\users\Vrana\Desktop\ComboFix.exe
SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.
.
((((((((((((((((((((((((((((((((((((((( Ostatní výmazy )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
c:\programdata\1368878803.bdinstall.bin
c:\programdata\1368879384.bdinstall.bin
c:\programdata\1368879648.bdinstall.bin
c:\programdata\1368885216.bdinstall.bin
c:\users\Vrana\AppData\Roaming\InstallDir
c:\users\Vrana\AppData\Roaming\Microsoft\Windows\C0kAc4.cfg
c:\users\Vrana\AppData\Roaming\Microsoft\Windows\C0kAc4.dat
c:\users\Vrana\x.exe
c:\windows\BACKUP.50320836.killproc.exe
c:\windows\s.bat
.
.
((((((((((((((((((((((((((((((((((((((( Ovladače/Služby )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
-------\Legacy_NPF
.
.
((((((((((((((((((((((((( Soubory vytvořené od 2013-04-18 do 2013-05-18 )))))))))))))))))))))))))))))))
.
.
2013-05-18 21:27 . 2013-05-18 21:40 -------- d-----w- C:\rsit
2013-05-18 21:09 . 2013-05-18 21:09 -------- d-----w- c:\windows\SysWow64\wbem\Logs
2013-05-18 21:09 . 2013-05-18 21:09 -------- d-----w- c:\users\Public\Recorded TV
2013-05-18 14:11 . 2013-05-18 14:11 16944 ----a-w- c:\windows\system32\drivers\GdPhyMem.sys
2013-05-18 12:35 . 2013-05-13 06:37 9460464 ----a-w- c:\programdata\Microsoft\Windows Defender\Definition Updates\{7025643E-1503-4E79-A6FD-C726B65BBA32}\mpengine.dll
2013-05-18 04:30 . 2013-05-09 08:58 287840 ----a-w- c:\windows\system32\aswBoot.exe
2013-05-18 03:04 . 2013-05-18 03:04 95648 ----a-w- c:\windows\SysWow64\WindowsAccessBridge-32.dll
2013-05-18 02:46 . 2013-05-18 02:46 -------- d-----w- c:\programdata\{CED89F1A-945F-46EC-B23C-5EAF6D2DB12A}
2013-05-17 20:15 . 2013-05-18 21:27 -------- d-----w- c:\program files\trend micro
2013-05-17 19:46 . 2013-05-18 02:17 -------- d-----w- c:\programdata\SystemExplorer
2013-05-17 18:32 . 2013-05-17 19:49 -------- d-----w- c:\programdata\RegRun
2013-05-15 10:59 . 2013-04-05 06:50 2647552 ----a-w- c:\windows\system32\iertutil.dll
2013-05-15 01:36 . 2013-05-18 02:32 -------- d-----w- c:\program files (x86)\Mozilla Thunderbird
2013-05-14 22:31 . 2012-10-08 17:52 31968 ----a-w- c:\windows\system32\drivers\Apowersoft_AudioDevice.sys
2013-05-14 17:19 . 2013-05-18 05:01 -------- d-----w- c:\program files (x86)\Common Files\Symantec Shared
2013-05-14 12:24 . 2013-05-14 12:25 56072 ----a-w- c:\windows\system32\certsentry.dll
2013-05-14 11:06 . 2013-05-18 02:33 -------- d-----w- c:\windows\system32\catroot2
2013-05-14 10:30 . 2013-05-14 10:30 -------- d--h--w- c:\program files\Uninstall Information
2013-05-14 10:28 . 2013-05-18 02:31 -------- d-----w- c:\windows\SysWow64\wbem\Performance
2013-05-14 10:24 . 2013-05-14 10:33 181064 ----a-w- c:\windows\PSEXESVC.EXE
2013-05-14 10:23 . 2013-05-14 10:23 21088768 ----a-w- c:\windows\system32\imageres.dll
2013-05-13 23:19 . 2013-03-28 17:50 41304 ----a-w- c:\windows\system32\drivers\eve.sys
2013-05-13 02:50 . 2013-05-13 02:50 -------- d-----w- c:\users\Vrana\.objectdb
2013-05-12 23:02 . 2013-05-12 23:02 -------- d-----w- c:\programdata\StarApp
2013-05-11 10:37 . 2013-05-11 10:37 209472 ----a-w- c:\program files (x86)\Internet Explorer\Plugins\nppdf32.dll
2013-05-11 07:20 . 2013-05-18 02:22 -------- d-----w- c:\program files (x86)\Spirent Communications
2013-05-10 13:48 . 2013-05-18 02:33 -------- d-----w- c:\users\Vrana\.android
2013-05-10 13:42 . 2013-05-18 02:31 -------- d-----w- C:\Android
2013-05-07 20:59 . 2013-05-07 20:59 21986 ----a-w- c:\windows\cscmondump.bin
2013-05-07 02:50 . 2013-05-07 02:50 -------- d-----w- c:\programdata\Fighters
2013-05-07 02:12 . 2013-05-16 05:14 -------- d-----w- C:\Downloads
2013-05-06 09:43 . 2013-05-06 10:24 460888 ----a-w- c:\windows\system32\drivers\40727966.sys
2013-05-03 18:19 . 2013-05-03 18:19 -------- d-----w- c:\users\Vrana\AppData\Local\Toshiba
2013-05-03 18:19 . 2013-05-03 18:19 -------- d-----w- c:\programdata\TOSHIBA
2013-05-03 18:12 . 2013-05-03 18:12 -------- d-----w- c:\program files (x86)\Toshiba
2013-05-03 17:34 . 2013-05-03 17:38 -------- d-----w- c:\users\Vrana\AppData\Roaming\Software Informer
2013-05-03 17:02 . 2013-05-03 17:22 -------- d-----w- C:\BluetoothExchangeFolder
2013-05-03 16:54 . 2013-05-18 02:31 -------- d-----w- c:\windows\SysWow64\sda
2013-05-03 16:53 . 2000-01-01 00:00 313960 ----a-w- c:\windows\system32\drivers\RtsUVStor.sys
2013-05-03 16:50 . 2011-11-23 21:02 74272 ----a-w- c:\windows\system32\RtNicProp64.dll
2013-05-03 16:50 . 2011-11-23 21:02 648808 ----a-w- c:\windows\system32\drivers\Rt64win7.sys
2013-05-03 16:49 . 2009-11-02 14:36 11776 ----a-w- c:\windows\system32\drivers\PELVENDR.SYS
2013-05-03 16:48 . 2011-09-28 13:26 33280 ----a-w- c:\windows\system32\drivers\PELUSBLF.SYS
2013-05-03 16:48 . 2010-10-20 12:42 23040 ----a-w- c:\windows\system32\drivers\PELMOUSE.SYS
2013-05-03 16:48 . 2009-06-30 08:09 14336 ----a-w- c:\windows\system32\drivers\PELPS2M.SYS
2013-05-03 16:48 . 2009-04-23 12:58 22016 ----a-w- c:\windows\system32\drivers\PELMOUBT.SYS
2013-05-03 16:48 . 2007-09-20 11:11 16384 ----a-w- c:\windows\system32\drivers\PELBTM.SYS
2013-05-03 16:48 . 2005-11-16 21:46 414632 ----a-w- c:\windows\difxapi.dll
2013-05-03 13:18 . 2008-04-07 03:38 24416 ----a-r- c:\windows\system32\AdobePDFUI.dll
2013-04-30 14:20 . 2013-05-18 02:52 -------- d-----w- c:\users\UpdatusUser
2013-04-28 01:28 . 2013-05-18 02:33 -------- d-----w- c:\program files\PlayReady
2013-04-27 23:07 . 2013-04-27 23:07 -------- d-----w- c:\programdata\YouCam
2013-04-26 14:46 . 2012-08-02 09:21 30752 ----a-w- c:\windows\system32\drivers\ElRawDsk.sys
2013-04-26 14:46 . 2013-04-26 14:46 74703 ----a-w- c:\windows\SysWow64\mfc45.dat
2013-04-26 11:56 . 2013-04-26 11:56 159744 ----a-w- c:\program files\Internet Explorer\Plugins\npqtplugin7.dll
2013-04-26 11:56 . 2013-04-26 11:56 159744 ----a-w- c:\program files\Internet Explorer\Plugins\npqtplugin6.dll
2013-04-26 11:56 . 2013-04-26 11:56 159744 ----a-w- c:\program files\Internet Explorer\Plugins\npqtplugin5.dll
2013-04-26 11:56 . 2013-04-26 11:56 159744 ----a-w- c:\program files\Internet Explorer\Plugins\npqtplugin4.dll
2013-04-26 11:56 . 2013-04-26 11:56 159744 ----a-w- c:\program files\Internet Explorer\Plugins\npqtplugin3.dll
2013-04-26 11:56 . 2013-04-26 11:56 159744 ----a-w- c:\program files\Internet Explorer\Plugins\npqtplugin2.dll
2013-04-26 11:56 . 2013-04-26 11:56 159744 ----a-w- c:\program files\Internet Explorer\Plugins\npqtplugin.dll
2013-04-26 11:55 . 2013-05-18 02:32 -------- d-----w- c:\program files (x86)\QuickTime
2013-04-26 11:55 . 2013-05-18 02:22 -------- d-----w- c:\programdata\Apple Computer
2013-04-26 11:55 . 2013-04-26 11:55 -------- d-----w- c:\program files (x86)\Common Files\Apple
2013-04-26 11:54 . 2013-05-18 02:37 -------- d-----w- c:\program files (x86)\Apple Software Update
2013-04-26 11:54 . 2013-05-18 02:22 -------- d-----w- c:\programdata\Apple
2013-04-26 10:33 . 2013-04-26 10:33 -------- d-----w- c:\program files (x86)\Nero
2013-04-26 09:38 . 2013-04-26 09:38 -------- d-----w- C:\Intel
2013-04-26 08:00 . 2013-05-18 02:33 -------- d-----w- c:\users\Vrana\AppData\Roaming\ICQM
2013-04-25 16:47 . 2013-05-06 10:17 -------- d-----w- c:\programdata\Downloaded Installations
2013-04-25 16:46 . 2013-04-25 16:46 14456 ----a-w- c:\windows\system32\drivers\gfibto.sys
2013-04-25 15:53 . 2013-04-25 15:53 -------- d-----w- c:\programdata\HTC
2013-04-24 16:08 . 2013-03-15 04:16 3477280 ----a-w- c:\windows\system32\nvsvc64.dll
2013-04-24 16:08 . 2013-03-15 04:16 877856 ----a-w- c:\windows\system32\nvvsvc.exe
2013-04-24 16:08 . 2013-03-15 04:16 63776 ----a-w- c:\windows\system32\nvshext.dll
2013-04-24 16:08 . 2013-03-15 04:16 2555680 ----a-w- c:\windows\system32\nvsvcr.dll
2013-04-24 16:08 . 2013-03-15 04:16 6398240 ----a-w- c:\windows\system32\nvcpl.dll
2013-04-24 16:08 . 2013-03-15 04:16 237856 ----a-w- c:\windows\system32\nvmctray.dll
2013-04-24 16:08 . 2013-03-15 04:16 568608 ----a-w- c:\windows\SysWow64\oemdspif.dll
2013-04-24 16:08 . 2013-04-24 16:08 -------- d-----w- c:\programdata\NVIDIA Corporation
2013-04-23 21:06 . 2013-05-18 02:34 -------- d-----w- c:\windows\WindowsMobile
2013-04-23 21:06 . 2013-04-12 14:45 1656680 ----a-w- c:\windows\system32\drivers\ntfs.sys
2013-04-19 11:33 . 2013-04-19 11:48 -------- d-----w- c:\users\Vrana\VisualRoute
2013-04-19 11:31 . 2013-05-18 02:33 -------- d-----w- c:\program files (x86)\VisualRoute Lite Edition
2013-04-19 11:19 . 2013-04-19 11:48 -------- d-----w- c:\users\Vrana\vw
2013-04-19 11:08 . 2011-07-01 03:46 31232 ----a-w- c:\windows\system32\drivers\tap0901.sys
2013-04-19 10:00 . 2013-05-18 02:23 -------- d-----w- c:\users\TEMP
2013-04-19 02:14 . 2013-05-18 17:31 -------- d-----w- c:\users\Vrana\AppData\Roaming\LizardSystems
2013-04-19 02:14 . 2013-05-18 17:31 -------- d-----w- c:\program files (x86)\LizardSystems
2013-04-19 01:42 . 2013-05-17 23:41 -------- d-----w- c:\program files (x86)\Common Files\Java
.
.
.
(((((((((((((((((((((((((((((((((((((((( Find3M výpis ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2013-05-18 03:04 . 2012-07-31 16:15 866720 ----a-w- c:\windows\SysWow64\npDeployJava1.dll
2013-05-18 03:04 . 2012-07-31 16:15 788896 ----a-w- c:\windows\SysWow64\deployJava1.dll
2013-05-16 05:17 . 2012-10-14 02:34 71048 ----a-w- c:\windows\SysWow64\FlashPlayerCPLApp.cpl
2013-05-16 05:17 . 2012-10-14 02:34 692104 ----a-w- c:\windows\SysWow64\FlashPlayerApp.exe
2013-05-15 11:04 . 2012-07-31 15:50 75016696 ----a-w- c:\windows\system32\MRT.exe
2013-05-10 19:25 . 2013-03-07 01:32 22240 ----a-w- c:\programdata\Microsoft\IdentityCRL\production\ppcrlconfig600.dll
2013-05-02 00:06 . 2010-11-21 03:27 278800 ------w- c:\windows\system32\MpSigStub.exe
2013-04-25 10:05 . 2013-01-16 17:51 96800 ----a-w- c:\windows\system32\drivers\inspect.sys
2013-04-23 14:04 . 2013-01-24 21:43 437176 ----a-w- c:\windows\system32\guard64.dll
2013-04-23 14:04 . 2013-01-24 21:43 348048 ----a-w- c:\windows\SysWow64\guard32.dll
2013-04-15 17:38 . 2013-01-24 21:43 43216 ----a-w- c:\windows\system32\cmdcsr.dll
2013-04-15 17:38 . 2013-01-24 21:42 343760 ----a-w- c:\windows\system32\cmdvrt64.dll
2013-04-15 17:38 . 2013-01-24 21:42 45776 ----a-w- c:\windows\system32\cmdkbd64.dll
2013-04-15 17:38 . 2013-01-24 21:42 276688 ----a-w- c:\windows\SysWow64\cmdvrt32.dll
2013-04-15 17:38 . 2013-01-24 21:42 40656 ----a-w- c:\windows\SysWow64\cmdkbd32.dll
2013-04-13 05:49 . 2013-05-15 10:59 135168 ----a-w- c:\windows\apppatch\AppPatch64\AcXtrnal.dll
2013-04-13 05:49 . 2013-05-15 10:59 350208 ----a-w- c:\windows\apppatch\AppPatch64\AcLayers.dll
2013-04-13 05:49 . 2013-05-15 10:59 308736 ----a-w- c:\windows\apppatch\AppPatch64\AcGenral.dll
2013-04-13 05:49 . 2013-05-15 10:59 111104 ----a-w- c:\windows\apppatch\AppPatch64\acspecfc.dll
2013-04-13 04:45 . 2013-05-15 10:59 474624 ----a-w- c:\windows\apppatch\AcSpecfc.dll
2013-04-13 04:45 . 2013-05-15 10:59 2176512 ----a-w- c:\windows\apppatch\AcGenral.dll
2013-03-27 16:01 . 2012-10-14 11:45 25160 ----a-w- c:\windows\system32\drivers\hitmanpro35.sys
2013-03-19 06:04 . 2013-04-10 01:46 5550424 ----a-w- c:\windows\system32\ntoskrnl.exe
2013-03-19 05:46 . 2013-04-10 01:46 43520 ----a-w- c:\windows\system32\csrsrv.dll
2013-03-19 05:04 . 2013-04-10 01:46 3968856 ----a-w- c:\windows\SysWow64\ntkrnlpa.exe
2013-03-19 05:04 . 2013-04-10 01:46 3913560 ----a-w- c:\windows\SysWow64\ntoskrnl.exe
2013-03-19 04:47 . 2013-04-10 01:46 6656 ----a-w- c:\windows\SysWow64\apisetschema.dll
2013-03-19 03:06 . 2013-04-10 01:46 112640 ----a-w- c:\windows\system32\smss.exe
2013-03-14 20:07 . 2013-03-14 20:07 559904 ----a-w- c:\windows\SysWow64\nvStreaming.exe
2013-03-10 07:18 . 2013-03-10 07:18 95392 ----a-w- c:\windows\system32\drivers\SMR311.SYS
2013-03-10 05:37 . 2013-03-10 05:37 51496 ----a-w- c:\windows\system32\drivers\stflt.sys
2013-03-09 03:23 . 2013-03-09 03:21 20665522 ----a-w- c:\windows\REGBK00.ZIP
2013-03-09 02:58 . 2013-03-09 02:24 80104 ----a-w- c:\windows\killproc.exe
2013-03-09 02:40 . 2013-03-09 02:40 572928 ----a-w- c:\windows\SysWow64\msvcp90.dll
2013-03-09 02:40 . 2013-03-09 02:40 655872 ----a-w- c:\windows\SysWow64\msvcr90.dll
2013-03-09 02:26 . 2013-03-09 02:26 5254 ----a-w- c:\windows\winsbak.reg
2013-03-09 02:26 . 2013-03-09 02:26 158906 ----a-w- c:\windows\winsbak2.reg
2013-03-09 01:58 . 2013-03-09 01:58 632064 ----a-w- c:\windows\SysWow64\msvcr80.dll
2013-03-09 01:58 . 2013-03-09 01:58 554240 ----a-w- c:\windows\SysWow64\msvcp80.dll
2013-03-06 04:00 . 2013-03-06 04:00 1054720 ----a-w- c:\windows\system32\MsSpellCheckingFacility.exe
2013-03-06 04:00 . 2013-03-06 04:00 719360 ----a-w- c:\windows\SysWow64\mshtmlmedia.dll
2013-03-06 04:00 . 2013-03-06 04:00 523264 ----a-w- c:\windows\SysWow64\vbscript.dll
2013-03-06 04:00 . 2013-03-06 04:00 226304 ----a-w- c:\windows\system32\elshyph.dll
2013-03-06 04:00 . 2013-03-06 04:00 185344 ----a-w- c:\windows\SysWow64\elshyph.dll
2013-03-06 04:00 . 2013-03-06 04:00 158720 ----a-w- c:\windows\SysWow64\msls31.dll
2013-03-06 04:00 . 2013-03-06 04:00 150528 ----a-w- c:\windows\SysWow64\iexpress.exe
2013-03-06 04:00 . 2013-03-06 04:00 138752 ----a-w- c:\windows\SysWow64\wextract.exe
2013-03-06 04:00 . 2013-03-06 04:00 73728 ----a-w- c:\windows\SysWow64\SetIEInstalledDate.exe
2013-03-06 04:00 . 2013-03-06 04:00 61952 ----a-w- c:\windows\SysWow64\tdc.ocx
2013-03-06 04:00 . 2013-03-06 04:00 48640 ----a-w- c:\windows\SysWow64\mshtmler.dll
2013-03-06 04:00 . 2013-03-06 04:00 38400 ----a-w- c:\windows\SysWow64\imgutil.dll
2013-03-06 04:00 . 2013-03-06 04:00 361984 ----a-w- c:\windows\SysWow64\html.iec
2013-03-06 04:00 . 2013-03-06 04:00 23040 ----a-w- c:\windows\SysWow64\licmgr10.dll
2013-03-06 04:00 . 2013-03-06 04:00 1441280 ----a-w- c:\windows\SysWow64\inetcpl.cpl
2013-03-06 04:00 . 2013-03-06 04:00 137216 ----a-w- c:\windows\SysWow64\ieUnatt.exe
2013-03-06 04:00 . 2013-03-06 04:00 12800 ----a-w- c:\windows\SysWow64\mshta.exe
2013-03-06 04:00 . 2013-03-06 04:00 110592 ----a-w- c:\windows\SysWow64\IEAdvpack.dll
2013-03-06 04:00 . 2013-03-06 04:00 97280 ----a-w- c:\windows\system32\mshtmled.dll
2013-03-06 04:00 . 2013-03-06 04:00 905728 ----a-w- c:\windows\system32\mshtmlmedia.dll
2013-03-06 04:00 . 2013-03-06 04:00 81408 ----a-w- c:\windows\system32\icardie.dll
2013-03-06 04:00 . 2013-03-06 04:00 762368 ----a-w- c:\windows\system32\ieapfltr.dll
2013-03-06 04:00 . 2013-03-06 04:00 599552 ----a-w- c:\windows\system32\vbscript.dll
2013-03-06 04:00 . 2013-03-06 04:00 452096 ----a-w- c:\windows\system32\dxtmsft.dll
2013-03-06 04:00 . 2013-03-06 04:00 441856 ----a-w- c:\windows\system32\html.iec
2013-03-06 04:00 . 2013-03-06 04:00 281600 ----a-w- c:\windows\system32\dxtrans.dll
2013-03-06 04:00 . 2013-03-06 04:00 27648 ----a-w- c:\windows\system32\licmgr10.dll
2013-03-06 04:00 . 2013-03-06 04:00 270848 ----a-w- c:\windows\system32\iedkcs32.dll
2013-03-06 04:00 . 2013-03-06 04:00 247296 ----a-w- c:\windows\system32\webcheck.dll
2013-03-06 04:00 . 2013-03-06 04:00 235008 ----a-w- c:\windows\system32\url.dll
2013-03-06 04:00 . 2013-03-06 04:00 216064 ----a-w- c:\windows\system32\msls31.dll
2013-03-06 04:00 . 2013-03-06 04:00 197120 ----a-w- c:\windows\system32\msrating.dll
2013-03-06 04:00 . 2013-03-06 04:00 167424 ----a-w- c:\windows\system32\iexpress.exe
2013-03-06 04:00 . 2013-03-06 04:00 1509376 ----a-w- c:\windows\system32\inetcpl.cpl
2013-03-06 04:00 . 2013-03-06 04:00 144896 ----a-w- c:\windows\system32\wextract.exe
2013-03-06 04:00 . 2013-03-06 04:00 102912 ----a-w- c:\windows\system32\inseng.dll
2013-03-06 04:00 . 2013-03-06 04:00 92160 ----a-w- c:\windows\system32\SetIEInstalledDate.exe
2013-03-06 04:00 . 2013-03-06 04:00 77312 ----a-w- c:\windows\system32\tdc.ocx
2013-03-06 04:00 . 2013-03-06 04:00 62976 ----a-w- c:\windows\system32\pngfilt.dll
2013-03-06 04:00 . 2013-03-06 04:00 52224 ----a-w- c:\windows\system32\msfeedsbs.dll
2013-03-06 04:00 . 2013-03-06 04:00 51200 ----a-w- c:\windows\system32\imgutil.dll
2013-03-06 04:00 . 2013-03-06 04:00 48640 ----a-w- c:\windows\system32\mshtmler.dll
2013-03-06 04:00 . 2013-03-06 04:00 173568 ----a-w- c:\windows\system32\ieUnatt.exe
2013-03-06 04:00 . 2013-03-06 04:00 149504 ----a-w- c:\windows\system32\occache.dll
2013-03-06 04:00 . 2013-03-06 04:00 13824 ----a-w- c:\windows\system32\mshta.exe
2013-03-06 04:00 . 2013-03-06 04:00 136192 ----a-w- c:\windows\system32\iepeers.dll
2013-03-06 04:00 . 2013-03-06 04:00 135680 ----a-w- c:\windows\system32\IEAdvpack.dll
2013-03-06 04:00 . 2013-03-06 04:00 12800 ----a-w- c:\windows\system32\msfeedssync.exe
2013-03-06 03:59 . 2013-03-06 03:59 4096 ---ha-w- c:\windows\system32\api-ms-win-downlevel-user32-l1-1-0.dll
2013-03-06 03:59 . 2013-03-06 03:59 9728 ---ha-w- c:\windows\SysWow64\api-ms-win-downlevel-shlwapi-l1-1-0.dll
2013-03-06 03:59 . 2013-03-06 03:59 9728 ---ha-w- c:\windows\system32\api-ms-win-downlevel-shlwapi-l1-1-0.dll
2013-03-06 03:59 . 2013-03-06 03:59 5632 ---ha-w- c:\windows\SysWow64\api-ms-win-downlevel-shlwapi-l2-1-0.dll
2013-03-06 03:59 . 2013-03-06 03:59 5632 ---ha-w- c:\windows\SysWow64\api-ms-win-downlevel-ole32-l1-1-0.dll
2013-03-06 03:59 . 2013-03-06 03:59 5632 ---ha-w- c:\windows\system32\api-ms-win-downlevel-shlwapi-l2-1-0.dll
2013-03-06 03:59 . 2013-03-06 03:59 5632 ---ha-w- c:\windows\system32\api-ms-win-downlevel-ole32-l1-1-0.dll
2013-03-06 03:59 . 2013-03-06 03:59 4096 ---ha-w- c:\windows\SysWow64\api-ms-win-downlevel-user32-l1-1-0.dll
2013-03-06 03:59 . 2013-03-06 03:59 3584 ---ha-w- c:\windows\SysWow64\api-ms-win-downlevel-advapi32-l2-1-0.dll
2013-03-06 03:59 . 2013-03-06 03:59 3072 ---ha-w- c:\windows\SysWow64\api-ms-win-downlevel-version-l1-1-0.dll
2013-03-06 03:59 . 2013-03-06 03:59 3072 ---ha-w- c:\windows\SysWow64\api-ms-win-downlevel-shell32-l1-1-0.dll
2013-03-06 03:59 . 2013-03-06 03:59 3072 ---ha-w- c:\windows\system32\api-ms-win-downlevel-version-l1-1-0.dll
2013-03-06 03:59 . 2013-03-06 03:59 3072 ---ha-w- c:\windows\system32\api-ms-win-downlevel-shell32-l1-1-0.dll
.
.
(((((((((((((((((((((((((((((((((( Spouštěcí body v registru )))))))))))))))))))))))))))))))))))))))))))))
.
.
*Poznámka* prázdné záznamy a legitimní výchozí údaje nejsou zobrazeny.
REGEDIT4
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Sidebar"="c:\program files\Windows Sidebar\sidebar.exe" [2010-11-21 1475584]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]
"UpdateP2GShortCut"="c:\program files (x86)\Lenovo\Power2Go\MUITransfer\MUIStartMenu.exe" [2010-07-26 222504]
"IAStorIcon"="c:\program files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe" [2010-03-03 284696]
"SunJavaUpdateSched"="c:\program files (x86)\Common Files\Java\Java Update\jusched.exe" [2013-03-12 253816]
.
[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"Sidebar"="c:\program files\Windows Sidebar\sidebar.exe" [2010-11-21 1475584]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorAdmin"= 5 (0x5)
"ConsentPromptBehaviorUser"= 3 (0x3)
"EnableUIADesktopToggle"= 0 (0x0)
"SynchronousMachineGroupPolicy"= 1 (0x1)
"SynchronousUserGroupPolicy"= 1 (0x1)
"EnableLinkedConnections"= 1 (0x1)
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\explorer]
"NoResolveTrack"= 1 (0x1)
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\windows]
"LoadAppInit_DLLs"=1 (0x1)
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MCODS]
@=""
.
R0 nmfmfx;nmfmfx; [x]
R0 vqdtrh;vqdtrh; [x]
R0 vxoqkw;vxoqkw; [x]
R0 wayuia;wayuia; [x]
R2 ATE_PROCMON;ATE_PROCMON; [x]
R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2010-03-18 138576]
R2 SkypeUpdate;Skype Updater;c:\program files (x86)\Skype\Updater\Updater.exe [2013-02-28 161384]
R3 CsrBtPort;Csr Bluetooth Device Driver;c:\windows\system32\DRIVERS\CsrBtPort.sys [x]
R3 csrusb;CSR USB driver for Bluetooth dongle;c:\windows\system32\Drivers\csrusb.sys [x]
R3 HTCAND64;HTC Device Driver;c:\windows\system32\Drivers\ANDROIDUSB.sys [2009-11-02 33736]
R3 htcnprot;HTC NDIS Protocol Driver;c:\windows\system32\DRIVERS\htcnprot.sys [2010-06-25 36928]
R3 Huawei;HUAWEI Mobile Connect - USB Smart Card Reader;c:\windows\system32\DRIVERS\ewdcsc.sys [2009-12-15 29696]
R3 hwusbdev;Huawei DataCard USB PNP Device;c:\windows\system32\DRIVERS\ewusbdev.sys [2009-12-15 114304]
R3 NANMp50;NANMp50 NDIS Protocol Driver;c:\windows\system32\Drivers\NANMp50.sys [x]
R3 NANSp50;NANSp50 NDIS Protocol Driver;c:\windows\system32\Drivers\NANSp50.sys [x]
R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys [2012-08-23 57856]
R3 TsUsbGD;Remote Desktop Generic USB Device;c:\windows\system32\drivers\TsUsbGD.sys [2012-08-23 30208]
R3 WatAdminSvc;Služba Technologie aktivace Windows;c:\windows\system32\Wat\WatAdminSvc.exe [2012-07-31 1255736]
R3 wsvd;wsvd;c:\windows\system32\DRIVERS\wsvd.sys [2009-07-21 121840]
R4 CyberLink PowerDVD 12 Media Server Monitor Service;CyberLink PowerDVD 12 Media Server Monitor Service;c:\program files (x86)\Cyberlink\PowerDVD12\Kernel\DMS\CLMSMonitorServicePDVD12.exe [2012-01-12 75048]
R4 CyberLink PowerDVD 12 Media Server Service;CyberLink PowerDVD 12 Media Server Service;c:\program files (x86)\Cyberlink\PowerDVD12\Kernel\DMS\CLMSServerPDVD12.exe [2012-01-12 296232]
S0 fbfmon;fbfmon;c:\windows\system32\drivers\fbfmon.sys [2013-01-17 57952]
S0 gfibto;gfibto;c:\windows\system32\drivers\gfibto.sys [2013-04-25 14456]
S1 BPntDrv;BPntDrv;c:\windows\system32\drivers\BPntDrv.sys [2013-01-17 13408]
S1 dtsoftbus01;DAEMON Tools Virtual Bus Driver;c:\windows\system32\DRIVERS\dtsoftbus01.sys [2012-07-31 283200]
S1 ElRawDisk;ElRawDisk;c:\windows\system32\drivers\ElRawDsk.sys [2012-08-02 30752]
S1 Eve;EVE Protocol Driver;c:\windows\system32\DRIVERS\eve.sys [2013-03-28 41304]
S2 CLHNServiceForPowerDVD12;CLHNServiceForPowerDVD12;c:\program files (x86)\Cyberlink\PowerDVD12\Kernel\DMP\CLHNServer\CLHNServiceForPowerDVD12.exe [2012-01-12 87336]
S2 IAStorDataMgrSvc;Úložná technologie Intel(R) Rapid;c:\program files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe [2010-03-03 13336]
S2 ntk_PowerDVD12;ntk_PowerDVD12;c:\program files (x86)\Cyberlink\PowerDVD12\Kernel\DMP\CLHNServer\ntk_PowerDVD12_64.sys [2011-10-27 82928]
S2 PassThru Service;Internet Pass-Through Service;c:\program files (x86)\HTC\Internet Pass-Through\PassThruSvr.exe [2011-03-31 80896]
S2 PelService;Session Launcher Service;c:\program files\Lenovo\Lenovo Mouse Suite\PelService.exe [2010-04-21 177152]
S2 Stereo Service;NVIDIA Stereoscopic 3D Driver Service;c:\program files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe [2013-03-14 383264]
S2 TeamViewer8;TeamViewer 8;c:\program files (x86)\TeamViewer\Version8\TeamViewer_Service.exe [2013-04-23 3574624]
S2 UNS;Intel(R) Management & Security Application User Notification Service;c:\program files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe [2009-12-09 2320920]
S3 ACPIVPC;Lenovo Virtual Power Controller Driver;c:\windows\system32\DRIVERS\AcpiVpc.sys [2009-10-19 28176]
S3 clwvd;CyberLink WebCam Virtual Driver;c:\windows\system32\DRIVERS\clwvd.sys [2011-01-28 31088]
S3 HECIx64;Intel(R) Management Engine Interface;c:\windows\system32\DRIVERS\HECIx64.sys [2009-09-17 56344]
S3 RSUSBSTOR;RtsUStor.Sys Realtek USB Card Reader;c:\windows\system32\Drivers\RtsUStor.sys [2000-01-01 252520]
S3 RTL8167;Realtek 8167 NT Driver;c:\windows\system32\DRIVERS\Rt64win7.sys [2011-11-23 648808]
S3 SmbDrvI;SmbDrvI;c:\windows\system32\DRIVERS\Smb_driver_Intel.sys [2012-08-24 43832]
.
.
Obsah adresáře 'Naplánované úlohy'
.
2013-05-18 c:\windows\Tasks\Adobe Flash Player Updater.job
- c:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2012-10-14 05:17]
.
.
--------- X64 Entries -----------
.
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\VeriFace Enc]
@="{771C7324-DA80-49D3-8017-753B0AF60951}"
[HKEY_CLASSES_ROOT\CLSID\{771C7324-DA80-49D3-8017-753B0AF60951}]
2012-04-17 05:42 1508192 ----a-w- c:\windows\System32\IcnOvrly.dll
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Energy Management"="c:\program files (x86)\Lenovo\Energy Management\Energy Management.exe" [2009-12-17 6988736]
"EnergyUtility"="c:\program files (x86)\lenovo\energy management\utility.exe" [2009-12-17 4367808]
"SmartAudio"="c:\program files\CONEXANT\SAII\SAIICpl.exe" [2011-05-27 307768]
"OnekeyStudio"="c:\program files (x86)\lenovo\onekey theater\onekeystudio.exe" [2009-12-19 776608]
"Lenovo EE Boot Optimizer"="c:\program files (x86)\Lenovo\Boot Optimizer\PopWnd.exe" [2013-01-17 206176]
.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Svchost - LocalService
FontCache
.
------- Doplňkový sken -------
.
uStart Page = hxxp://www.google.com
mStart Page = hxxp://www.google.com
TCP: DhcpNameServer = 10.0.0.138
FF - ProfilePath - c:\users\Vrana\AppData\Roaming\Mozilla\Firefox\Profiles\43hupp9e.default\
FF - prefs.js: browser.startup.homepage - chrome://fvd.speeddial/content/fvd_about_blank.html
FF - ExtSQL: 2013-04-15 19:07; {d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}; c:\users\Vrana\AppData\Roaming\Mozilla\Firefox\Profiles\43hupp9e.default\extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi
FF - ExtSQL: 2013-05-18 02:00; {a0d7ccb3-214d-498b-b4aa-0e8fda9a7bf7}; c:\users\Vrana\AppData\Roaming\Mozilla\Firefox\Profiles\43hupp9e.default\extensions\{a0d7ccb3-214d-498b-b4aa-0e8fda9a7bf7}
FF - ExtSQL: 2013-05-18 14:54; pavel.sherbakov@gmail.com; c:\users\Vrana\AppData\Roaming\Mozilla\Firefox\Profiles\43hupp9e.default\extensions\pavel.sherbakov@gmail.com
FF - user.js: network.http.pipelining.maxrequests - 8
FF - user.js: network.http.request.max-start-delay - 0
FF - user.js: network.http.max-connections - 48
FF - user.js: network.http.max-connections-per-server - 16
FF - user.js: network.http.max-persistent-connections-per-proxy - 16
FF - user.js: network.http.max-persistent-connections-per-server - 8
FF - user.js: browser.turbo.enabled - true
FF - user.js: browser.display.show_image_placeholders - true
FF - user.js: browser.chrome.favicons - false
FF - user.js: browser.urlbar.autocomplete.enabled - true
FF - user.js: browser.cache.memory.capacity - 65536
FF - user.js: content.notify.ontimer - true
FF - user.js: content.interrupt.parsing - true
FF - user.js: content.max.tokenizing.time - 2250000
FF - user.js: content.switch.threshold - 750000
FF - user.js: plugin.expose_full_path - true
FF - user.js: ui.submenuDelay - 0
.
- - - - NEPLATNÉ POLOŽKY ODSTRANĚNÉ Z REGISTRU - - - -
.
Toolbar-Locked - (no file)
SafeBoot-86113272.sys
SafeBoot-BsScanner
Toolbar-Locked - (no file)
.
.
.
--------------------- ZAMKNUTÉ KLÍČE V REGISTRU ---------------------
.
[HKEY_USERS\S-1-5-21-2092546283-391122535-3387313911-1000\Software\SecuROM\License information*]
@Allowed: (Read) (RestrictedCode)
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\windows\\system32\\Macromed\\Flash\\FlashUtil64_11_7_700_202_ActiveX.exe,-101"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\Elevation]
"Enabled"=dword:00000001
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\LocalServer32]
@="c:\\windows\\system32\\Macromed\\Flash\\FlashUtil64_11_7_700_202_ActiveX.exe"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
.
[HKEY_LOCAL_MACHINE\software\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="IFlashBroker5"
.
[HKEY_LOCAL_MACHINE\software\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"
.
[HKEY_LOCAL_MACHINE\software\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\windows\\SysWOW64\\Macromed\\Flash\\FlashUtil32_11_7_700_202_ActiveX.exe,-101"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\Elevation]
"Enabled"=dword:00000001
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\LocalServer32]
@="c:\\windows\\SysWOW64\\Macromed\\Flash\\FlashUtil32_11_7_700_202_ActiveX.exe"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@="Shockwave Flash Object"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\InprocServer32]
@="c:\\windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_7_700_202.ocx"
"ThreadingModel"="Apartment"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\MiscStatus]
@="0"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ProgID]
@="ShockwaveFlash.ShockwaveFlash.11"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
@="c:\\windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_7_700_202.ocx, 1"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\TypeLib]
@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\Version]
@="1.0"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
@="ShockwaveFlash.ShockwaveFlash"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@="Macromedia Flash Factory Object"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\InprocServer32]
@="c:\\windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_7_700_202.ocx"
"ThreadingModel"="Apartment"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ProgID]
@="FlashFactory.FlashFactory.1"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
@="c:\\windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_7_700_202.ocx, 1"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\TypeLib]
@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\Version]
@="1.0"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
@="FlashFactory.FlashFactory"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="IFlashBroker5"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
.
[HKEY_LOCAL_MACHINE\software\McAfee]
"SymbolicLinkValue"=hex(6):5c,00,72,00,65,00,67,00,69,00,73,00,74,00,72,00,79,
00,5c,00,6d,00,61,00,63,00,68,00,69,00,6e,00,65,00,5c,00,53,00,6f,00,66,00,\
.
[HKEY_LOCAL_MACHINE\software\Wow6432Node\Microsoft\Windows CE Services]
"SymbolicLinkValue"=hex(6):5c,00,72,00,65,00,67,00,69,00,73,00,74,00,72,00,79,
00,5c,00,4d,00,41,00,43,00,48,00,49,00,4e,00,45,00,5c,00,53,00,4f,00,46,00,\
.
------------------------ Jiné spuštené procesy ------------------------
.
c:\program files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
c:\program files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
c:\program files (x86)\Lenovo\YouCam\YCMMirage.exe
c:\program files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
.
**************************************************************************
.
Celkový čas: 2013-05-18 23:55:42 - počítač byl restartován
ComboFix-quarantined-files.txt 2013-05-18 21:55
.
Před spuštěním: Volných bajtů: 225 145 896 960
Po spuštění: Volných bajtů: 224 484 241 408
.
- - End Of File - - 84620D2A81406B4BF8D735F90C0DA549

Ještě dočistíme. Otevřte poznámkový blok a zkopírujte do něj:

KillAll::

Registry::
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]
"SunJavaUpdateSched"=-

Drivers::
nmfmfx
vqdtrh
vxoqkw
wayuia

Firefox::
FF - ProfilePath - c:\users\Vrana\AppData\Roaming\Mozilla\Firefox\Profiles\43hupp9e.default\
FF - prefs.js: browser.startup.homepage - chrome://fvd.speeddial/content/fvd_about_blank.html
FF - ExtSQL: 2013-04-15 19:07; {d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}; c:\users\Vrana\AppData\Roaming\Mozilla\Firefox\Profiles\43hupp9e.default\extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi
FF - ExtSQL: 2013-05-18 02:00; {a0d7ccb3-214d-498b-b4aa-0e8fda9a7bf7}; c:\users\Vrana\AppData\Roaming\Mozilla\Firefox\Profiles\43hupp9e.default\extensions\{a0d7ccb3-214d-498b-b4aa-0e8fda9a7bf7}
FF - ExtSQL: 2013-05-18 14:54; pavel.sherbakov@gmail.com; c:\users\Vrana\AppData\Roaming\Mozilla\Firefox\Profiles\43hupp9e.default\extensions\pavel.sherbakov@gmail.com
FF - user.js: network.http.pipelining.maxrequests - 8
FF - user.js: network.http.request.max-start-delay - 0
FF - user.js: network.http.max-connections - 48
FF - user.js: network.http.max-connections-per-server - 16
FF - user.js: network.http.max-persistent-connections-per-proxy - 16
FF - user.js: network.http.max-persistent-connections-per-server - 8
FF - user.js: browser.turbo.enabled - true
FF - user.js: browser.display.show_image_placeholders - true
FF - user.js: browser.chrome.favicons - false
FF - user.js: browser.urlbar.autocomplete.enabled - true
FF - user.js: browser.cache.memory.capacity - 65536
FF - user.js: content.notify.ontimer - true
FF - user.js: content.interrupt.parsing - true
FF - user.js: content.max.tokenizing.time - 2250000
FF - user.js: content.switch.threshold - 750000
FF - user.js: plugin.expose_full_path - true
FF - user.js: ui.submenuDelay - 0

RegLock::
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}]
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\Elevation]
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\LocalServer32]
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\TypeLib]
[HKEY_LOCAL_MACHINE\software\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}]
[HKEY_LOCAL_MACHINE\software\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\ProxyStubClsid32]
[HKEY_LOCAL_MACHINE\software\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\TypeLib]
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}]
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\Elevation]
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\LocalServer32]
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\TypeLib]
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}]
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\InprocServer32]
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\MiscStatus]
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ProgID]
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\TypeLib]
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\Version]
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}]
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\InprocServer32]
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ProgID]
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\TypeLib]
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\Version]
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}]
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\ProxyStubClsid32]
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\TypeLib]
[HKEY_LOCAL_MACHINE\software\McAfee]
[HKEY_LOCAL_MACHINE\software\Wow6432Node\Microsoft\Windows CE Services]

Regnull::
[HKEY_USERS\S-1-5-21-2092546283-391122535-3387313911-1000\Software\SecuROM\License information*]

Reboot::

Uložte na plochu jako CFScript.txt. Pak jej myší přetáhněte nad ikonu ComboFix a pusťte. CF se spustí a vykoná příkazy ze skriptu.

Dobrý den,
tak jsem provedl, co jste mi poradil, a tady je zavěrečný log po té.
Bylo to vážné, co program našel? Jinak jaký antivir tedy používat, nebo lze NIS nějak nastavit aby dobře reagoval?
Předem Vám moc děkuji za Váš čas, a pomoc.

ComboFix 13-05-18.03 - Vrana 19.05.2013 13:15:58.2.4 - x64
Microsoft Windows 7 Home Premium 6.1.7601.1.1250.420.1029.18.3959.2474 [GMT 2:00]
Spuštěný z: c:\users\Vrana\Desktop\ComboFix.exe
Použité ovládací přepínače :: c:\users\Vrana\Desktop\CFScript.txt
SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.
.
((((((((((((((((((((((((( Soubory vytvořené od 2013-04-19 do 2013-05-19 )))))))))))))))))))))))))))))))
.
.
2013-05-19 11:23 . 2013-05-19 11:23 -------- d-----w- c:\users\Default\AppData\Local\temp
2013-05-19 10:22 . 2013-05-19 10:24 -------- d-----w- c:\users\Vrana\AppData\Local\Adobe
2013-05-19 00:46 . 2013-05-19 00:46 -------- d-----w- c:\program files (x86)\Google
2013-05-19 00:46 . 2013-05-19 00:46 -------- d-----w- c:\users\Vrana\AppData\Local\Google
2013-05-18 21:27 . 2013-05-18 21:40 -------- d-----w- C:\rsit
2013-05-18 21:09 . 2013-05-18 21:09 -------- d-----w- c:\windows\SysWow64\wbem\Logs
2013-05-18 21:09 . 2013-05-18 21:09 -------- d-----w- c:\users\Public\Recorded TV
2013-05-18 14:11 . 2013-05-18 14:11 16944 ----a-w- c:\windows\system32\drivers\GdPhyMem.sys
2013-05-18 12:35 . 2013-05-13 06:37 9460464 ----a-w- c:\programdata\Microsoft\Windows Defender\Definition Updates\{7025643E-1503-4E79-A6FD-C726B65BBA32}\mpengine.dll
2013-05-18 04:30 . 2013-05-09 08:58 287840 ----a-w- c:\windows\system32\aswBoot.exe
2013-05-18 03:04 . 2013-05-18 03:04 95648 ----a-w- c:\windows\SysWow64\WindowsAccessBridge-32.dll
2013-05-18 02:46 . 2013-05-18 02:46 -------- d-----w- c:\programdata\{CED89F1A-945F-46EC-B23C-5EAF6D2DB12A}
2013-05-17 20:15 . 2013-05-18 21:27 -------- d-----w- c:\program files\trend micro
2013-05-17 19:46 . 2013-05-18 02:17 -------- d-----w- c:\programdata\SystemExplorer
2013-05-17 18:32 . 2013-05-17 19:49 -------- d-----w- c:\programdata\RegRun
2013-05-15 10:59 . 2013-04-05 06:50 2647552 ----a-w- c:\windows\system32\iertutil.dll
2013-05-15 01:36 . 2013-05-18 02:32 -------- d-----w- c:\program files (x86)\Mozilla Thunderbird
2013-05-14 22:31 . 2012-10-08 17:52 31968 ----a-w- c:\windows\system32\drivers\Apowersoft_AudioDevice.sys
2013-05-14 17:19 . 2013-05-18 05:01 -------- d-----w- c:\program files (x86)\Common Files\Symantec Shared
2013-05-14 12:24 . 2013-05-14 12:25 56072 ----a-w- c:\windows\system32\certsentry.dll
2013-05-14 11:06 . 2013-05-18 02:33 -------- d-----w- c:\windows\system32\catroot2
2013-05-14 10:30 . 2013-05-14 10:30 -------- d--h--w- c:\program files\Uninstall Information
2013-05-14 10:28 . 2013-05-18 02:31 -------- d-----w- c:\windows\SysWow64\wbem\Performance
2013-05-14 10:24 . 2013-05-14 10:33 181064 ----a-w- c:\windows\PSEXESVC.EXE
2013-05-14 10:23 . 2013-05-14 10:23 21088768 ----a-w- c:\windows\system32\imageres.dll
2013-05-13 23:19 . 2013-03-28 17:50 41304 ----a-w- c:\windows\system32\drivers\eve.sys
2013-05-13 02:50 . 2013-05-13 02:50 -------- d-----w- c:\users\Vrana\.objectdb
2013-05-12 23:02 . 2013-05-12 23:02 -------- d-----w- c:\programdata\StarApp
2013-05-11 10:37 . 2013-05-11 10:37 209472 ----a-w- c:\program files (x86)\Internet Explorer\Plugins\nppdf32.dll
2013-05-11 07:20 . 2013-05-18 02:22 -------- d-----w- c:\program files (x86)\Spirent Communications
2013-05-10 13:48 . 2013-05-18 02:33 -------- d-----w- c:\users\Vrana\.android
2013-05-10 13:42 . 2013-05-18 02:31 -------- d-----w- C:\Android
2013-05-07 20:59 . 2013-05-07 20:59 21986 ----a-w- c:\windows\cscmondump.bin
2013-05-07 02:50 . 2013-05-07 02:50 -------- d-----w- c:\programdata\Fighters
2013-05-07 02:12 . 2013-05-16 05:14 -------- d-----w- C:\Downloads
2013-05-06 09:43 . 2013-05-06 10:24 460888 ----a-w- c:\windows\system32\drivers\40727966.sys
2013-05-03 18:19 . 2013-05-03 18:19 -------- d-----w- c:\users\Vrana\AppData\Local\Toshiba
2013-05-03 18:19 . 2013-05-03 18:19 -------- d-----w- c:\programdata\TOSHIBA
2013-05-03 18:12 . 2013-05-03 18:12 -------- d-----w- c:\program files (x86)\Toshiba
2013-05-03 17:34 . 2013-05-03 17:38 -------- d-----w- c:\users\Vrana\AppData\Roaming\Software Informer
2013-05-03 17:02 . 2013-05-03 17:22 -------- d-----w- C:\BluetoothExchangeFolder
2013-05-03 16:54 . 2013-05-18 02:31 -------- d-----w- c:\windows\SysWow64\sda
2013-05-03 16:53 . 2000-01-01 00:00 313960 ----a-w- c:\windows\system32\drivers\RtsUVStor.sys
2013-05-03 16:50 . 2011-11-23 21:02 74272 ----a-w- c:\windows\system32\RtNicProp64.dll
2013-05-03 16:50 . 2011-11-23 21:02 648808 ----a-w- c:\windows\system32\drivers\Rt64win7.sys
2013-05-03 16:49 . 2009-11-02 14:36 11776 ----a-w- c:\windows\system32\drivers\PELVENDR.SYS
2013-05-03 16:48 . 2011-09-28 13:26 33280 ----a-w- c:\windows\system32\drivers\PELUSBLF.SYS
2013-05-03 16:48 . 2010-10-20 12:42 23040 ----a-w- c:\windows\system32\drivers\PELMOUSE.SYS
2013-05-03 16:48 . 2009-06-30 08:09 14336 ----a-w- c:\windows\system32\drivers\PELPS2M.SYS
2013-05-03 16:48 . 2009-04-23 12:58 22016 ----a-w- c:\windows\system32\drivers\PELMOUBT.SYS
2013-05-03 16:48 . 2007-09-20 11:11 16384 ----a-w- c:\windows\system32\drivers\PELBTM.SYS
2013-05-03 16:48 . 2005-11-16 21:46 414632 ----a-w- c:\windows\difxapi.dll
2013-05-03 13:18 . 2008-04-07 03:38 24416 ----a-r- c:\windows\system32\AdobePDFUI.dll
2013-04-30 14:20 . 2013-05-18 02:52 -------- d-----w- c:\users\UpdatusUser
2013-04-28 01:28 . 2013-05-18 02:33 -------- d-----w- c:\program files\PlayReady
2013-04-27 23:07 . 2013-04-27 23:07 -------- d-----w- c:\programdata\YouCam
2013-04-26 14:46 . 2012-08-02 09:21 30752 ----a-w- c:\windows\system32\drivers\ElRawDsk.sys
2013-04-26 14:46 . 2013-04-26 14:46 74703 ----a-w- c:\windows\SysWow64\mfc45.dat
2013-04-26 11:56 . 2013-04-26 11:56 159744 ----a-w- c:\program files\Internet Explorer\Plugins\npqtplugin7.dll
2013-04-26 11:56 . 2013-04-26 11:56 159744 ----a-w- c:\program files\Internet Explorer\Plugins\npqtplugin6.dll
2013-04-26 11:56 . 2013-04-26 11:56 159744 ----a-w- c:\program files\Internet Explorer\Plugins\npqtplugin5.dll
2013-04-26 11:56 . 2013-04-26 11:56 159744 ----a-w- c:\program files\Internet Explorer\Plugins\npqtplugin4.dll
2013-04-26 11:56 . 2013-04-26 11:56 159744 ----a-w- c:\program files\Internet Explorer\Plugins\npqtplugin3.dll
2013-04-26 11:56 . 2013-04-26 11:56 159744 ----a-w- c:\program files\Internet Explorer\Plugins\npqtplugin2.dll
2013-04-26 11:56 . 2013-04-26 11:56 159744 ----a-w- c:\program files\Internet Explorer\Plugins\npqtplugin.dll
2013-04-26 11:55 . 2013-05-18 02:32 -------- d-----w- c:\program files (x86)\QuickTime
2013-04-26 11:55 . 2013-05-18 02:22 -------- d-----w- c:\programdata\Apple Computer
2013-04-26 11:55 . 2013-04-26 11:55 -------- d-----w- c:\program files (x86)\Common Files\Apple
2013-04-26 11:54 . 2013-05-18 02:37 -------- d-----w- c:\program files (x86)\Apple Software Update
2013-04-26 11:54 . 2013-05-18 02:22 -------- d-----w- c:\programdata\Apple
2013-04-26 10:33 . 2013-04-26 10:33 -------- d-----w- c:\program files (x86)\Nero
2013-04-26 09:38 . 2013-04-26 09:38 -------- d-----w- C:\Intel
2013-04-26 08:00 . 2013-05-18 02:33 -------- d-----w- c:\users\Vrana\AppData\Roaming\ICQM
2013-04-25 16:47 . 2013-05-06 10:17 -------- d-----w- c:\programdata\Downloaded Installations
2013-04-25 16:46 . 2013-04-25 16:46 14456 ----a-w- c:\windows\system32\drivers\gfibto.sys
2013-04-25 15:53 . 2013-04-25 15:53 -------- d-----w- c:\programdata\HTC
2013-04-24 16:08 . 2013-03-15 04:16 3477280 ----a-w- c:\windows\system32\nvsvc64.dll
2013-04-24 16:08 . 2013-03-15 04:16 877856 ----a-w- c:\windows\system32\nvvsvc.exe
2013-04-24 16:08 . 2013-03-15 04:16 63776 ----a-w- c:\windows\system32\nvshext.dll
2013-04-24 16:08 . 2013-03-15 04:16 2555680 ----a-w- c:\windows\system32\nvsvcr.dll
2013-04-24 16:08 . 2013-03-15 04:16 6398240 ----a-w- c:\windows\system32\nvcpl.dll
2013-04-24 16:08 . 2013-03-15 04:16 237856 ----a-w- c:\windows\system32\nvmctray.dll
2013-04-24 16:08 . 2013-03-15 04:16 568608 ----a-w- c:\windows\SysWow64\oemdspif.dll
2013-04-24 16:08 . 2013-04-24 16:08 -------- d-----w- c:\programdata\NVIDIA Corporation
2013-04-23 21:06 . 2013-05-18 02:34 -------- d-----w- c:\windows\WindowsMobile
2013-04-23 21:06 . 2013-04-12 14:45 1656680 ----a-w- c:\windows\system32\drivers\ntfs.sys
2013-04-19 11:39 . 2013-05-18 02:23 -------- d-----w- c:\users\TEMP.Vrana-NTB
2013-04-19 11:33 . 2013-04-19 11:48 -------- d-----w- c:\users\Vrana\VisualRoute
2013-04-19 11:31 . 2013-05-18 02:33 -------- d-----w- c:\program files (x86)\VisualRoute Lite Edition
.
.
.
(((((((((((((((((((((((((((((((((((((((( Find3M výpis ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2013-05-18 03:04 . 2012-07-31 16:15 866720 ----a-w- c:\windows\SysWow64\npDeployJava1.dll
2013-05-18 03:04 . 2012-07-31 16:15 788896 ----a-w- c:\windows\SysWow64\deployJava1.dll
2013-05-16 05:17 . 2012-10-14 02:34 71048 ----a-w- c:\windows\SysWow64\FlashPlayerCPLApp.cpl
2013-05-16 05:17 . 2012-10-14 02:34 692104 ----a-w- c:\windows\SysWow64\FlashPlayerApp.exe
2013-05-15 11:04 . 2012-07-31 15:50 75016696 ----a-w- c:\windows\system32\MRT.exe
2013-05-10 19:25 . 2013-03-07 01:32 22240 ----a-w- c:\programdata\Microsoft\IdentityCRL\production\ppcrlconfig600.dll
2013-05-02 00:06 . 2010-11-21 03:27 278800 ------w- c:\windows\system32\MpSigStub.exe
2013-04-25 10:05 . 2013-01-16 17:51 96800 ----a-w- c:\windows\system32\drivers\inspect.sys
2013-04-23 14:04 . 2013-01-24 21:43 437176 ----a-w- c:\windows\system32\guard64.dll
2013-04-23 14:04 . 2013-01-24 21:43 348048 ----a-w- c:\windows\SysWow64\guard32.dll
2013-04-15 17:38 . 2013-01-24 21:43 43216 ----a-w- c:\windows\system32\cmdcsr.dll
2013-04-15 17:38 . 2013-01-24 21:42 343760 ----a-w- c:\windows\system32\cmdvrt64.dll
2013-04-15 17:38 . 2013-01-24 21:42 45776 ----a-w- c:\windows\system32\cmdkbd64.dll
2013-04-15 17:38 . 2013-01-24 21:42 276688 ----a-w- c:\windows\SysWow64\cmdvrt32.dll
2013-04-15 17:38 . 2013-01-24 21:42 40656 ----a-w- c:\windows\SysWow64\cmdkbd32.dll
2013-04-13 05:49 . 2013-05-15 10:59 135168 ----a-w- c:\windows\apppatch\AppPatch64\AcXtrnal.dll
2013-04-13 05:49 . 2013-05-15 10:59 350208 ----a-w- c:\windows\apppatch\AppPatch64\AcLayers.dll
2013-04-13 05:49 . 2013-05-15 10:59 308736 ----a-w- c:\windows\apppatch\AppPatch64\AcGenral.dll
2013-04-13 05:49 . 2013-05-15 10:59 111104 ----a-w- c:\windows\apppatch\AppPatch64\acspecfc.dll
2013-04-13 04:45 . 2013-05-15 10:59 474624 ----a-w- c:\windows\apppatch\AcSpecfc.dll
2013-04-13 04:45 . 2013-05-15 10:59 2176512 ----a-w- c:\windows\apppatch\AcGenral.dll
2013-03-27 16:01 . 2012-10-14 11:45 25160 ----a-w- c:\windows\system32\drivers\hitmanpro35.sys
2013-03-19 06:04 . 2013-04-10 01:46 5550424 ----a-w- c:\windows\system32\ntoskrnl.exe
2013-03-19 05:46 . 2013-04-10 01:46 43520 ----a-w- c:\windows\system32\csrsrv.dll
2013-03-19 05:04 . 2013-04-10 01:46 3968856 ----a-w- c:\windows\SysWow64\ntkrnlpa.exe
2013-03-19 05:04 . 2013-04-10 01:46 3913560 ----a-w- c:\windows\SysWow64\ntoskrnl.exe
2013-03-19 04:47 . 2013-04-10 01:46 6656 ----a-w- c:\windows\SysWow64\apisetschema.dll
2013-03-19 03:06 . 2013-04-10 01:46 112640 ----a-w- c:\windows\system32\smss.exe
2013-03-14 20:07 . 2013-03-14 20:07 559904 ----a-w- c:\windows\SysWow64\nvStreaming.exe
2013-03-10 07:18 . 2013-03-10 07:18 95392 ----a-w- c:\windows\system32\drivers\SMR311.SYS
2013-03-10 05:37 . 2013-03-10 05:37 51496 ----a-w- c:\windows\system32\drivers\stflt.sys
2013-03-09 03:23 . 2013-03-09 03:21 20665522 ----a-w- c:\windows\REGBK00.ZIP
2013-03-09 02:58 . 2013-03-09 02:24 80104 ----a-w- c:\windows\killproc.exe
2013-03-09 02:40 . 2013-03-09 02:40 572928 ----a-w- c:\windows\SysWow64\msvcp90.dll
2013-03-09 02:40 . 2013-03-09 02:40 655872 ----a-w- c:\windows\SysWow64\msvcr90.dll
2013-03-09 02:26 . 2013-03-09 02:26 5254 ----a-w- c:\windows\winsbak.reg
2013-03-09 02:26 . 2013-03-09 02:26 158906 ----a-w- c:\windows\winsbak2.reg
2013-03-09 01:58 . 2013-03-09 01:58 632064 ----a-w- c:\windows\SysWow64\msvcr80.dll
2013-03-09 01:58 . 2013-03-09 01:58 554240 ----a-w- c:\windows\SysWow64\msvcp80.dll
2013-03-06 04:00 . 2013-03-06 04:00 1054720 ----a-w- c:\windows\system32\MsSpellCheckingFacility.exe
2013-03-06 04:00 . 2013-03-06 04:00 719360 ----a-w- c:\windows\SysWow64\mshtmlmedia.dll
2013-03-06 04:00 . 2013-03-06 04:00 523264 ----a-w- c:\windows\SysWow64\vbscript.dll
2013-03-06 04:00 . 2013-03-06 04:00 226304 ----a-w- c:\windows\system32\elshyph.dll
2013-03-06 04:00 . 2013-03-06 04:00 185344 ----a-w- c:\windows\SysWow64\elshyph.dll
2013-03-06 04:00 . 2013-03-06 04:00 158720 ----a-w- c:\windows\SysWow64\msls31.dll
2013-03-06 04:00 . 2013-03-06 04:00 150528 ----a-w- c:\windows\SysWow64\iexpress.exe
2013-03-06 04:00 . 2013-03-06 04:00 138752 ----a-w- c:\windows\SysWow64\wextract.exe
2013-03-06 04:00 . 2013-03-06 04:00 73728 ----a-w- c:\windows\SysWow64\SetIEInstalledDate.exe
2013-03-06 04:00 . 2013-03-06 04:00 61952 ----a-w- c:\windows\SysWow64\tdc.ocx
2013-03-06 04:00 . 2013-03-06 04:00 48640 ----a-w- c:\windows\SysWow64\mshtmler.dll
2013-03-06 04:00 . 2013-03-06 04:00 38400 ----a-w- c:\windows\SysWow64\imgutil.dll
2013-03-06 04:00 . 2013-03-06 04:00 361984 ----a-w- c:\windows\SysWow64\html.iec
2013-03-06 04:00 . 2013-03-06 04:00 23040 ----a-w- c:\windows\SysWow64\licmgr10.dll
2013-03-06 04:00 . 2013-03-06 04:00 1441280 ----a-w- c:\windows\SysWow64\inetcpl.cpl
2013-03-06 04:00 . 2013-03-06 04:00 137216 ----a-w- c:\windows\SysWow64\ieUnatt.exe
2013-03-06 04:00 . 2013-03-06 04:00 12800 ----a-w- c:\windows\SysWow64\mshta.exe
2013-03-06 04:00 . 2013-03-06 04:00 110592 ----a-w- c:\windows\SysWow64\IEAdvpack.dll
2013-03-06 04:00 . 2013-03-06 04:00 97280 ----a-w- c:\windows\system32\mshtmled.dll
2013-03-06 04:00 . 2013-03-06 04:00 905728 ----a-w- c:\windows\system32\mshtmlmedia.dll
2013-03-06 04:00 . 2013-03-06 04:00 81408 ----a-w- c:\windows\system32\icardie.dll
2013-03-06 04:00 . 2013-03-06 04:00 762368 ----a-w- c:\windows\system32\ieapfltr.dll
2013-03-06 04:00 . 2013-03-06 04:00 599552 ----a-w- c:\windows\system32\vbscript.dll
2013-03-06 04:00 . 2013-03-06 04:00 452096 ----a-w- c:\windows\system32\dxtmsft.dll
2013-03-06 04:00 . 2013-03-06 04:00 441856 ----a-w- c:\windows\system32\html.iec
2013-03-06 04:00 . 2013-03-06 04:00 281600 ----a-w- c:\windows\system32\dxtrans.dll
2013-03-06 04:00 . 2013-03-06 04:00 27648 ----a-w- c:\windows\system32\licmgr10.dll
2013-03-06 04:00 . 2013-03-06 04:00 270848 ----a-w- c:\windows\system32\iedkcs32.dll
2013-03-06 04:00 . 2013-03-06 04:00 247296 ----a-w- c:\windows\system32\webcheck.dll
2013-03-06 04:00 . 2013-03-06 04:00 235008 ----a-w- c:\windows\system32\url.dll
2013-03-06 04:00 . 2013-03-06 04:00 216064 ----a-w- c:\windows\system32\msls31.dll
2013-03-06 04:00 . 2013-03-06 04:00 197120 ----a-w- c:\windows\system32\msrating.dll
2013-03-06 04:00 . 2013-03-06 04:00 167424 ----a-w- c:\windows\system32\iexpress.exe
2013-03-06 04:00 . 2013-03-06 04:00 1509376 ----a-w- c:\windows\system32\inetcpl.cpl
2013-03-06 04:00 . 2013-03-06 04:00 144896 ----a-w- c:\windows\system32\wextract.exe
2013-03-06 04:00 . 2013-03-06 04:00 102912 ----a-w- c:\windows\system32\inseng.dll
2013-03-06 04:00 . 2013-03-06 04:00 92160 ----a-w- c:\windows\system32\SetIEInstalledDate.exe
2013-03-06 04:00 . 2013-03-06 04:00 77312 ----a-w- c:\windows\system32\tdc.ocx
2013-03-06 04:00 . 2013-03-06 04:00 62976 ----a-w- c:\windows\system32\pngfilt.dll
2013-03-06 04:00 . 2013-03-06 04:00 52224 ----a-w- c:\windows\system32\msfeedsbs.dll
2013-03-06 04:00 . 2013-03-06 04:00 51200 ----a-w- c:\windows\system32\imgutil.dll
2013-03-06 04:00 . 2013-03-06 04:00 48640 ----a-w- c:\windows\system32\mshtmler.dll
2013-03-06 04:00 . 2013-03-06 04:00 173568 ----a-w- c:\windows\system32\ieUnatt.exe
2013-03-06 04:00 . 2013-03-06 04:00 149504 ----a-w- c:\windows\system32\occache.dll
2013-03-06 04:00 . 2013-03-06 04:00 13824 ----a-w- c:\windows\system32\mshta.exe
2013-03-06 04:00 . 2013-03-06 04:00 136192 ----a-w- c:\windows\system32\iepeers.dll
2013-03-06 04:00 . 2013-03-06 04:00 135680 ----a-w- c:\windows\system32\IEAdvpack.dll
2013-03-06 04:00 . 2013-03-06 04:00 12800 ----a-w- c:\windows\system32\msfeedssync.exe
2013-03-06 03:59 . 2013-03-06 03:59 4096 ---ha-w- c:\windows\system32\api-ms-win-downlevel-user32-l1-1-0.dll
2013-03-06 03:59 . 2013-03-06 03:59 9728 ---ha-w- c:\windows\SysWow64\api-ms-win-downlevel-shlwapi-l1-1-0.dll
2013-03-06 03:59 . 2013-03-06 03:59 9728 ---ha-w- c:\windows\system32\api-ms-win-downlevel-shlwapi-l1-1-0.dll
2013-03-06 03:59 . 2013-03-06 03:59 5632 ---ha-w- c:\windows\SysWow64\api-ms-win-downlevel-shlwapi-l2-1-0.dll
2013-03-06 03:59 . 2013-03-06 03:59 5632 ---ha-w- c:\windows\SysWow64\api-ms-win-downlevel-ole32-l1-1-0.dll
2013-03-06 03:59 . 2013-03-06 03:59 5632 ---ha-w- c:\windows\system32\api-ms-win-downlevel-shlwapi-l2-1-0.dll
2013-03-06 03:59 . 2013-03-06 03:59 5632 ---ha-w- c:\windows\system32\api-ms-win-downlevel-ole32-l1-1-0.dll
2013-03-06 03:59 . 2013-03-06 03:59 4096 ---ha-w- c:\windows\SysWow64\api-ms-win-downlevel-user32-l1-1-0.dll
2013-03-06 03:59 . 2013-03-06 03:59 3584 ---ha-w- c:\windows\SysWow64\api-ms-win-downlevel-advapi32-l2-1-0.dll
2013-03-06 03:59 . 2013-03-06 03:59 3072 ---ha-w- c:\windows\SysWow64\api-ms-win-downlevel-version-l1-1-0.dll
2013-03-06 03:59 . 2013-03-06 03:59 3072 ---ha-w- c:\windows\SysWow64\api-ms-win-downlevel-shell32-l1-1-0.dll
2013-03-06 03:59 . 2013-03-06 03:59 3072 ---ha-w- c:\windows\system32\api-ms-win-downlevel-version-l1-1-0.dll
2013-03-06 03:59 . 2013-03-06 03:59 3072 ---ha-w- c:\windows\system32\api-ms-win-downlevel-shell32-l1-1-0.dll
.
.
(((((((((((((((((((((((((((((((((( Spouštěcí body v registru )))))))))))))))))))))))))))))))))))))))))))))
.
.
*Poznámka* prázdné záznamy a legitimní výchozí údaje nejsou zobrazeny.
REGEDIT4
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Sidebar"="c:\program files\Windows Sidebar\sidebar.exe" [2010-11-21 1475584]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]
"UpdateP2GShortCut"="c:\program files (x86)\Lenovo\Power2Go\MUITransfer\MUIStartMenu.exe" [2010-07-26 222504]
"IAStorIcon"="c:\program files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe" [2010-03-03 284696]
.
[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"Sidebar"="c:\program files\Windows Sidebar\sidebar.exe" [2010-11-21 1475584]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorAdmin"= 5 (0x5)
"ConsentPromptBehaviorUser"= 3 (0x3)
"EnableUIADesktopToggle"= 0 (0x0)
"SynchronousMachineGroupPolicy"= 1 (0x1)
"SynchronousUserGroupPolicy"= 1 (0x1)
"EnableLinkedConnections"= 1 (0x1)
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\explorer]
"NoResolveTrack"= 1 (0x1)
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\windows]
"LoadAppInit_DLLs"=1 (0x1)
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MCODS]
@=""
.
R0 nmfmfx;nmfmfx; [x]
R0 vqdtrh;vqdtrh; [x]
R0 vxoqkw;vxoqkw; [x]
R0 wayuia;wayuia; [x]
R2 ATE_PROCMON;ATE_PROCMON; [x]
R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2010-03-18 138576]
R2 SkypeUpdate;Skype Updater;c:\program files (x86)\Skype\Updater\Updater.exe [2013-02-28 161384]
R3 CsrBtPort;Csr Bluetooth Device Driver;c:\windows\system32\DRIVERS\CsrBtPort.sys [x]
R3 csrusb;CSR USB driver for Bluetooth dongle;c:\windows\system32\Drivers\csrusb.sys [x]
R3 HTCAND64;HTC Device Driver;c:\windows\system32\Drivers\ANDROIDUSB.sys [2009-11-02 33736]
R3 htcnprot;HTC NDIS Protocol Driver;c:\windows\system32\DRIVERS\htcnprot.sys [2010-06-25 36928]
R3 Huawei;HUAWEI Mobile Connect - USB Smart Card Reader;c:\windows\system32\DRIVERS\ewdcsc.sys [2009-12-15 29696]
R3 hwusbdev;Huawei DataCard USB PNP Device;c:\windows\system32\DRIVERS\ewusbdev.sys [2009-12-15 114304]
R3 NANMp50;NANMp50 NDIS Protocol Driver;c:\windows\system32\Drivers\NANMp50.sys [x]
R3 NANSp50;NANSp50 NDIS Protocol Driver;c:\windows\system32\Drivers\NANSp50.sys [x]
R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys [2012-08-23 57856]
R3 TsUsbGD;Remote Desktop Generic USB Device;c:\windows\system32\drivers\TsUsbGD.sys [2012-08-23 30208]
R3 WatAdminSvc;Služba Technologie aktivace Windows;c:\windows\system32\Wat\WatAdminSvc.exe [2012-07-31 1255736]
R3 wsvd;wsvd;c:\windows\system32\DRIVERS\wsvd.sys [2009-07-21 121840]
R4 CyberLink PowerDVD 12 Media Server Monitor Service;CyberLink PowerDVD 12 Media Server Monitor Service;c:\program files (x86)\Cyberlink\PowerDVD12\Kernel\DMS\CLMSMonitorServicePDVD12.exe [2012-01-12 75048]
R4 CyberLink PowerDVD 12 Media Server Service;CyberLink PowerDVD 12 Media Server Service;c:\program files (x86)\Cyberlink\PowerDVD12\Kernel\DMS\CLMSServerPDVD12.exe [2012-01-12 296232]
S0 fbfmon;fbfmon;c:\windows\system32\drivers\fbfmon.sys [2013-01-17 57952]
S0 gfibto;gfibto;c:\windows\system32\drivers\gfibto.sys [2013-04-25 14456]
S1 BPntDrv;BPntDrv;c:\windows\system32\drivers\BPntDrv.sys [2013-01-17 13408]
S1 dtsoftbus01;DAEMON Tools Virtual Bus Driver;c:\windows\system32\DRIVERS\dtsoftbus01.sys [2012-07-31 283200]
S1 ElRawDisk;ElRawDisk;c:\windows\system32\drivers\ElRawDsk.sys [2012-08-02 30752]
S1 Eve;EVE Protocol Driver;c:\windows\system32\DRIVERS\eve.sys [2013-03-28 41304]
S2 CLHNServiceForPowerDVD12;CLHNServiceForPowerDVD12;c:\program files (x86)\Cyberlink\PowerDVD12\Kernel\DMP\CLHNServer\CLHNServiceForPowerDVD12.exe [2012-01-12 87336]
S2 IAStorDataMgrSvc;Úložná technologie Intel(R) Rapid;c:\program files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe [2010-03-03 13336]
S2 ntk_PowerDVD12;ntk_PowerDVD12;c:\program files (x86)\Cyberlink\PowerDVD12\Kernel\DMP\CLHNServer\ntk_PowerDVD12_64.sys [2011-10-27 82928]
S2 PassThru Service;Internet Pass-Through Service;c:\program files (x86)\HTC\Internet Pass-Through\PassThruSvr.exe [2011-03-31 80896]
S2 PelService;Session Launcher Service;c:\program files\Lenovo\Lenovo Mouse Suite\PelService.exe [2010-04-21 177152]
S2 Stereo Service;NVIDIA Stereoscopic 3D Driver Service;c:\program files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe [2013-03-14 383264]
S2 TeamViewer8;TeamViewer 8;c:\program files (x86)\TeamViewer\Version8\TeamViewer_Service.exe [2013-04-23 3574624]
S2 UNS;Intel(R) Management & Security Application User Notification Service;c:\program files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe [2009-12-09 2320920]
S3 ACPIVPC;Lenovo Virtual Power Controller Driver;c:\windows\system32\DRIVERS\AcpiVpc.sys [2009-10-19 28176]
S3 clwvd;CyberLink WebCam Virtual Driver;c:\windows\system32\DRIVERS\clwvd.sys [2011-01-28 31088]
S3 HECIx64;Intel(R) Management Engine Interface;c:\windows\system32\DRIVERS\HECIx64.sys [2009-09-17 56344]
S3 RSUSBSTOR;RtsUStor.Sys Realtek USB Card Reader;c:\windows\system32\Drivers\RtsUStor.sys [2000-01-01 252520]
S3 RTL8167;Realtek 8167 NT Driver;c:\windows\system32\DRIVERS\Rt64win7.sys [2011-11-23 648808]
S3 SmbDrvI;SmbDrvI;c:\windows\system32\DRIVERS\Smb_driver_Intel.sys [2012-08-24 43832]
.
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\active setup\installed components\{8A69D345-D564-463c-AFF1-A69D9E530F96}]
2013-05-19 00:46 1642448 ----a-w- c:\program files (x86)\Google\Chrome\Application\26.0.1410.64\Installer\chrmstp.exe
.
Obsah adresáře 'Naplánované úlohy'
.
2013-05-19 c:\windows\Tasks\Adobe Flash Player Updater.job
- c:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2012-10-14 05:17]
.
2013-05-19 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
- c:\program files (x86)\Google\Update\GoogleUpdate.exe [2013-05-19 00:46]
.
2013-05-19 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
- c:\program files (x86)\Google\Update\GoogleUpdate.exe [2013-05-19 00:46]
.
.
--------- X64 Entries -----------
.
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\VeriFace Enc]
@="{771C7324-DA80-49D3-8017-753B0AF60951}"
[HKEY_CLASSES_ROOT\CLSID\{771C7324-DA80-49D3-8017-753B0AF60951}]
2012-04-17 05:42 1508192 ----a-w- c:\windows\System32\IcnOvrly.dll
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Energy Management"="c:\program files (x86)\Lenovo\Energy Management\Energy Management.exe" [2009-12-17 6988736]
"EnergyUtility"="c:\program files (x86)\lenovo\energy management\utility.exe" [2009-12-17 4367808]
"SmartAudio"="c:\program files\CONEXANT\SAII\SAIICpl.exe" [2011-05-27 307768]
"OnekeyStudio"="c:\program files (x86)\lenovo\onekey theater\onekeystudio.exe" [2009-12-19 776608]
"Lenovo EE Boot Optimizer"="c:\program files (x86)\Lenovo\Boot Optimizer\PopWnd.exe" [2013-01-17 206176]
.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Svchost - LocalService
FontCache
.
------- Doplňkový sken -------
.
uStart Page = hxxp://www.google.com
mStart Page = hxxp://www.google.com
TCP: DhcpNameServer = 10.0.0.138
FF - ProfilePath - c:\users\Vrana\AppData\Roaming\Mozilla\Firefox\Profiles\43hupp9e.default\
FF - ExtSQL: 2013-04-15 19:07; {d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}; c:\users\Vrana\AppData\Roaming\Mozilla\Firefox\Profiles\43hupp9e.default\extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi
FF - ExtSQL: 2013-05-18 02:00; {a0d7ccb3-214d-498b-b4aa-0e8fda9a7bf7}; c:\users\Vrana\AppData\Roaming\Mozilla\Firefox\Profiles\43hupp9e.default\extensions\{a0d7ccb3-214d-498b-b4aa-0e8fda9a7bf7}
FF - ExtSQL: 2013-05-18 14:54; pavel.sherbakov@gmail.com; c:\users\Vrana\AppData\Roaming\Mozilla\Firefox\Profiles\43hupp9e.default\extensions\pavel.sherbakov@gmail.com
FF - user.js: network.http.pipelining.maxrequests - 8
FF - user.js: network.http.request.max-start-delay - 0
FF - user.js: network.http.max-connections - 48
FF - user.js: network.http.max-connections-per-server - 16
FF - user.js: network.http.max-persistent-connections-per-proxy - 16
FF - user.js: network.http.max-persistent-connections-per-server - 8
FF - user.js: browser.turbo.enabled - true
FF - user.js: browser.display.show_image_placeholders - true
FF - user.js: browser.chrome.favicons - false
FF - user.js: browser.urlbar.autocomplete.enabled - true
FF - user.js: browser.cache.memory.capacity - 65536
FF - user.js: content.notify.ontimer - true
FF - user.js: content.interrupt.parsing - true
FF - user.js: content.max.tokenizing.time - 2250000
FF - user.js: content.switch.threshold - 750000
FF - user.js: plugin.expose_full_path - true
FF - user.js: ui.submenuDelay - 0
.
- - - - NEPLATNÉ POLOŽKY ODSTRANĚNÉ Z REGISTRU - - - -
.
Toolbar-Locked - (no file)
.
.
.
--------------------- ZAMKNUTÉ KLÍČE V REGISTRU ---------------------
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\windows\\system32\\Macromed\\Flash\\FlashUtil64_11_7_700_202_ActiveX.exe,-101"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\Elevation]
"Enabled"=dword:00000001
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\LocalServer32]
@="c:\\windows\\system32\\Macromed\\Flash\\FlashUtil64_11_7_700_202_ActiveX.exe"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
.
[HKEY_LOCAL_MACHINE\software\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="IFlashBroker5"
.
[HKEY_LOCAL_MACHINE\software\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"
.
[HKEY_LOCAL_MACHINE\software\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
.
[HKEY_LOCAL_MACHINE\software\McAfee]
"SymbolicLinkValue"=hex(6):5c,00,72,00,65,00,67,00,69,00,73,00,74,00,72,00,79,
00,5c,00,6d,00,61,00,63,00,68,00,69,00,6e,00,65,00,5c,00,53,00,6f,00,66,00,\
.
[HKEY_LOCAL_MACHINE\software\Wow6432Node\Microsoft\Windows CE Services]
"SymbolicLinkValue"=hex(6):5c,00,72,00,65,00,67,00,69,00,73,00,74,00,72,00,79,
00,5c,00,4d,00,41,00,43,00,48,00,49,00,4e,00,45,00,5c,00,53,00,4f,00,46,00,\
.
------------------------ Jiné spuštené procesy ------------------------
.
c:\program files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
c:\program files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
c:\program files (x86)\Lenovo\YouCam\YCMMirage.exe
c:\program files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
.
**************************************************************************
.
Celkový čas: 2013-05-19 13:28:32 - počítač byl restartován
ComboFix-quarantined-files.txt 2013-05-19 11:28
ComboFix2.txt 2013-05-18 21:55
.
Před spuštěním: Volných bajtů: 224 272 384 000
Po spuštění: Volných bajtů: 224 134 860 800
.
- - End Of File - - 14EA1602AEE15064464CE46D1742DA0A

CF našel jednoho rootkita a nějaké zbytky po vyléčené nákaze. Sám nechápu, proč NIS nereagoval. Nemá prošlou licenci? Pro domácí použití bohatě vyhoví Avast, nebo Avira. Také je ovšem nutné se chovat na netu zodpovědně a nechodit zejména do jeho "temných zákoutí" a rozmyslet si, na co kliám. Log CF je již OK.

Dobrý den,
ne licence prošlá není, měla by končit za 170 dní cca. Je pravda, že jsem třeba scháněl legální program pro záznam zvuku, ale většinou to dělají chytře, že chtějí aby jste si nainstaloval jejich downloader, který následně obsahuje babylon toolbar, delta a podobné. Po jeho nainstalování pravě začne samotné stahování programu. Na to bohužel některé antiviry nereagují co jsem se dočetl, a sám zjistil. Tohle se pak nahrává do prohlížečů, a dělá problémy. Také mě dost překvapuje, že NIS nereagoval.
Moc Vám děkuji za pomoc.

Downloadery jsou pěkné svinstvo (obecně), my je zde likvidujeme. Pomocí takového downloaderu si pak stáhnete i to, co nechcete. S těmi toolbary je tom přesně tak, jak říkáte. Nemáte zač!