VIRY.CZ

Dobrý den,
nemůžu se dostat na stránky facebooku a googlu. Mám tam nějakou havěť. Přikládám log z RSIT.

Logfile of random's system information tool 1.09 (written by random/random)
Run by Mira at 2014-05-13 14:19:55
Microsoft Windows 7 Home Premium Service Pack 1
System drive C: has 126 GB (53%) free of 238 GB
Total RAM: 16351 MB (86% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 14:19:58, on 13.5.2014
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v11.0 (11.00.9600.17041)
Boot mode: Normal

Running processes:
C:\Program Files (x86)\ASUS\AI Suite II\DIGI+ VRM\VRMHelp.exe
C:\Program Files (x86)\ASUS\AI Suite II\AsRoutineController.exe
C:\Program Files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe
C:\Program Files (x86)\Adobe\Acrobat 10.0\Acrobat\acrotray.exe
C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
C:\Program Files (x86)\ASUS\AI Suite II\TurboV EVO\TurboVHelp.exe
C:\Program Files (x86)\ASUS\AI Suite II\AI Suite II.exe
C:\Program Files (x86)\ASUS\AI Suite II\Sensor\AlertHelper\AlertHelper.exe
C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
C:\Program Files\trend micro\Mira.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.seznam.cz/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/p/?LinkId=255141
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/p/?LinkId=255141
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll
O2 - BHO: Adobe PDF Conversion Toolbar Helper - {AE7CD045-E861-484f-8273-0445EE161910} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll
O2 - BHO: SmartSelect - {F4971EE7-DAA0-4053-9964-665D8EE6A077} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll
O3 - Toolbar: Adobe PDF - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll
O4 - HKLM\..\Run: [NUSB3MON] "C:\Program Files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe"
O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKLM\..\Run: [Adobe Acrobat Speed Launcher] "C:\Program Files (x86)\Adobe\Acrobat 10.0\Acrobat\Acrobat_sl.exe"
O4 - HKLM\..\Run: [Acrobat Assistant 8.0] "C:\Program Files (x86)\Adobe\Acrobat 10.0\Acrobat\Acrotray.exe"
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~2\MICROS~3\Office12\EXCEL.EXE/3000
O8 - Extra context menu item: Open using &Advanced JPEG Compressor - C:\Program Files (x86)\Advanced JPEG Compressor\ajcieex.htm
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~2\MICROS~3\Office12\REFIEBAR.DLL
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} (Java Plug-in 10.55.2) - http://javadl-esd.sun.com/update/1.7.0/ ... s-i586.cab
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/f ... wflash.cab
O17 - HKLM\System\CCS\Services\Tcpip\..\{550EE2CE-9C63-4512-B553-F28EEA837AE2}: NameServer = 192.168.1.1,192.168.1.9
O17 - HKLM\System\CS1\Services\Tcpip\..\{550EE2CE-9C63-4512-B553-F28EEA837AE2}: NameServer = 192.168.1.1,192.168.1.9
O17 - HKLM\System\CS2\Services\Tcpip\..\{550EE2CE-9C63-4512-B553-F28EEA837AE2}: NameServer = 192.168.1.1,192.168.1.9
O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Program Files (x86)\Microsoft Office\Office12\GrooveSystemServices.dll
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~2\COMMON~1\Skype\SKYPE4~1.DLL
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
O23 - Service: ASUS Com Service (asComSvc) - Unknown owner - C:\Program Files (x86)\ASUS\AXSP\1.00.14\atkexComSvc.exe
O23 - Service: ASUS HM Com Service (asHmComSvc) - Unknown owner - C:\Program Files (x86)\ASUS\AAHM\1.00.14\aaHMSvc.exe
O23 - Service: ASUS System Control Service (AsSysCtrlService) - Unknown owner - C:\Program Files (x86)\ASUS\AsSysCtrlService\1.00.11\AsSysCtrlService.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)
O23 - Service: Futuremark SystemInfo Service - Futuremark - C:\Program Files (x86)\Futuremark\SystemInfo\FMSISvc.exe
O23 - Service: @%SystemRoot%\system32\ieetwcollectorres.dll,-1000 (IEEtwCollectorService) - Unknown owner - C:\Windows\system32\IEEtwCollector.exe (file missing)
O23 - Service: Intel(R) PROSet Monitoring Service - Unknown owner - C:\Windows\system32\IProsetMonitor.exe (file missing)
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: NVIDIA Display Driver Service (nvsvc) - Unknown owner - C:\Windows\system32\nvvsvc.exe (file missing)
O23 - Service: PnkBstrA - Unknown owner - C:\Windows\system32\PnkBstrA.exe
O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Skype Updater (SkypeUpdate) - Skype Technologies - C:\Program Files (x86)\Skype\Updater\Updater.exe
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)
O23 - Service: Steam Client Service - Valve Corporation - C:\Program Files (x86)\Common Files\Steam\SteamService.exe
O23 - Service: TeamViewer 9 (TeamViewer9) - TeamViewer GmbH - C:\Program Files (x86)\TeamViewer\Version9\TeamViewer_Service.exe
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\Wat\WatUX.exe,-601 (WatAdminSvc) - Unknown owner - C:\Windows\system32\Wat\WatAdminSvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)

--
End of file - 8662 bytes

======Listing Processes======

\SystemRoot\System32\smss.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
wininit.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
winlogon.exe
C:\Windows\system32\services.exe
C:\Windows\system32\lsass.exe
C:\Windows\system32\lsm.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
"C:\Windows\system32\nvvsvc.exe"
C:\Windows\system32\svchost.exe -k RPCSS
"c:\Program Files\Microsoft Security Client\MsMpEng.exe"
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k LocalService
C:\Windows\system32\svchost.exe -k netsvcs
C:\Windows\system32\svchost.exe -k GPSvcGroup
C:\Windows\system32\svchost.exe -k NetworkService
"C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe"
C:\Windows\system32\nvvsvc.exe -session -first
C:\Windows\System32\spoolsv.exe
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
"C:\Windows\system32\Dwm.exe"
C:\Windows\Explorer.EXE
"taskhost.exe"
"C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe"
taskeng.exe {6F823EEB-7456-4019-9D8F-D40978914809}
"C:\Program Files (x86)\ASUS\AXSP\1.00.14\atkexComSvc.exe"
"C:\Program Files (x86)\ASUS\AI Suite II\DIGI+ VRM\VRMHelp.exe"
"C:\Program Files (x86)\ASUS\AI Suite II\AsRoutineController.exe" -open
"C:\Program Files\Microsoft Security Client\msseces.exe" -hide -runkey
"C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe" -s
"C:\Program Files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe"
"C:\Program Files (x86)\Adobe\Acrobat 10.0\Acrobat\acrotray.exe"
"C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"
"C:\Program Files (x86)\ASUS\AAHM\1.00.14\aaHMSvc.exe"
"C:\Program Files (x86)\ASUS\AsSysCtrlService\1.00.11\AsSysCtrlService.exe"
C:\Windows\SysWOW64\svchost.exe -k hpdevmgmt
C:\Windows\system32\IProsetMonitor.exe
C:\Windows\System32\svchost.exe -k HPZ12
C:\Windows\System32\svchost.exe -k HPZ12
C:\Windows\SysWOW64\PnkBstrA.exe
C:\Windows\system32\svchost.exe -k imgsvc
"C:\Program Files (x86)\TeamViewer\Version9\TeamViewer_Service.exe"
C:\Windows\system32\svchost.exe -k HPService
"C:\Program Files (x86)\ASUS\AI Suite II\TurboV EVO\TurboVHelp.exe" -Init
C:\Windows\system32\SearchIndexer.exe /Embedding
"C:\Windows\system32\SearchProtocolHost.exe" Global\UsGthrFltPipeMssGthrPipe_S-1-5-21-2474784068-3967688443-4026768057-10001_ Global\UsGthrCtrlFltPipeMssGthrPipe_S-1-5-21-2474784068-3967688443-4026768057-10001 1 -2147483646 "Software\Microsoft\Windows Search" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT; MS Search 4.0 Robot)" "C:\ProgramData\Microsoft\Search\Data\Temp\usgthrsvc" "DownLevelDaemon" "1"
"C:\Program Files\Windows Media Player\wmpnetwk.exe"
C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
C:\Windows\System32\svchost.exe -k LocalServicePeerNet
C:\Windows\system32\wbem\wmiprvse.exe
"C:\Program Files (x86)\ASUS\AI Suite II\AI Suite II.exe" -hide
"C:\Program Files (x86)\ASUS\AI Suite II\Sensor\AlertHelper\AlertHelper.exe" -hide
"C:\Windows\Microsoft.NET\Framework64\v4.0.30319\dfsvc.exe"
C:\Windows\system32\sppsvc.exe
"C:\Program Files\Internet Explorer\iexplore.exe"
"C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:4420 CREDAT:267521 /prefetch:2
C:\Windows\system32\wbem\wmiprvse.exe
C:\Windows\servicing\TrustedInstaller.exe
"C:\Windows\system32\SearchFilterHost.exe" 0 516 520 528 65536 524
"C:\Windows\system32\SearchProtocolHost.exe" Global\UsGthrFltPipeMssGthrPipe2_ Global\UsGthrCtrlFltPipeMssGthrPipe2 1 -2147483646 "Software\Microsoft\Windows Search" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT; MS Search 4.0 Robot)" "C:\ProgramData\Microsoft\Search\Data\Temp\usgthrsvc" "DownLevelDaemon"
"C:\Users\Mira\Desktop\RSITx64.exe"
C:\Windows\system32\DllHost.exe /Processid:{F9717507-6651-4EDB-BFF7-AE615179BCCF}

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
Java(tm) Plug-In SSV Helper - C:\Program Files (x86)\Java\jre7\bin\ssv.dll [2014-03-17 462760]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AE7CD045-E861-484f-8273-0445EE161910}]
Adobe PDF Conversion Toolbar Helper - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll [2012-01-03 339872]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll [2014-03-17 171944]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{F4971EE7-DAA0-4053-9964-665D8EE6A077}]
SmartSelect Class - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll [2012-01-03 339872]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Internet Explorer\Toolbar]
{47833539-D0C5-4125-9FA8-0819E2EAAC93} - Adobe PDF - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll [2012-01-03 339872]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"MSC"=C:\Program Files\Microsoft Security Client\msseces.exe [2014-03-11 1271072]
"RtHDVCpl"=C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [2010-11-02 11545192]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\DAEMON Tools Lite]
C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe [2013-10-28 3675352]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^HP Digital Imaging Monitor.lnk]
C:\PROGRA~2\HP\DIGITA~1\bin\hpqtra08.exe [2009-09-20 270336]

[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]
"NUSB3MON"=C:\Program Files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe [2010-04-27 113288]
"Adobe ARM"=C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2013-11-21 959904]
""= []
"Adobe Acrobat Speed Launcher"=C:\Program Files (x86)\Adobe\Acrobat 10.0\Acrobat\Acrobat_sl.exe [2012-01-03 36760]
"Acrobat Assistant 8.0"=C:\Program Files (x86)\Adobe\Acrobat 10.0\Acrobat\Acrotray.exe [2012-01-03 815512]
"SunJavaUpdateSched"=C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [2013-07-02 254336]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED}

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{B5A7F190-DDA6-4420-B3BA-52453494E6CD}"=C:\Program Files (x86)\Microsoft Office\Office12\GrooveShellExtensions.dll [2009-02-26 2217832]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=credssp.dll

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MsMpSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\MsMpSvc]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorAdmin"=5
"ConsentPromptBehaviorUser"=3
"EnableUIADesktopToggle"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDrives"=0

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDrives"=0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.msadpcm"=msadp32.acm
"midimapper"=midimap.dll
"wavemapper"=msacm32.drv
"vidc.uyvy"=msyuv.dll
"vidc.yuy2"=msyuv.dll
"vidc.yvyu"=msyuv.dll
"vidc.iyuv"=iyuv_32.dll
"vidc.i420"=iyuv_32.dll
"vidc.yvu9"=tsbyuv.dll
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"aux1"=wdmaud.drv
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv
"wave2"=wdmaud.drv
"midi2"=wdmaud.drv
"mixer2"=wdmaud.drv

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1

======List of files/folders created in the last 1 month======

2014-05-13 14:19:55 ----D---- C:\rsit
2014-05-13 14:19:55 ----D---- C:\Program Files\trend micro
2014-05-13 14:05:24 ----SHD---- C:\$RECYCLE.BIN
2014-05-13 14:05:22 ----A---- C:\ComboFix.txt
2014-05-13 13:51:28 ----D---- C:\ProgramData\Licenses
2014-05-13 13:51:27 ----AD---- C:\ProgramData\TEMP
2014-05-13 13:38:03 ----A---- C:\Windows\system32\drivers\stflt.sys
2014-05-13 12:49:05 ----A---- C:\Windows\system32\drivers\MBAMSwissArmy.sys
2014-05-13 12:30:07 ----D---- C:\Program Files (x86)\Spybot - Search & Destroy 2
2014-05-13 12:15:19 ----D---- C:\FRST
2014-05-07 21:53:52 ----A---- C:\Windows\SYSWOW64\mshtml.dll
2014-05-07 21:53:52 ----A---- C:\Windows\system32\mshtml.dll
2014-05-06 15:22:08 ----A---- C:\Windows\system32\ieui.dll
2014-05-06 15:22:07 ----A---- C:\Windows\SYSWOW64\vbscript.dll
2014-05-06 15:22:07 ----A---- C:\Windows\SYSWOW64\ieui.dll
2014-05-06 15:22:07 ----A---- C:\Windows\system32\vbscript.dll
2014-05-06 15:22:04 ----A---- C:\Windows\SYSWOW64\dxtmsft.dll
2014-05-06 15:22:04 ----A---- C:\Windows\system32\jscript9diag.dll
2014-05-06 15:22:04 ----A---- C:\Windows\system32\JavaScriptCollectionAgent.dll
2014-05-06 15:22:04 ----A---- C:\Windows\system32\iernonce.dll
2014-05-06 15:22:04 ----A---- C:\Windows\system32\ieetwcollectorres.dll
2014-05-06 15:22:04 ----A---- C:\Windows\system32\ie4uinit.exe
2014-05-06 15:22:04 ----A---- C:\Windows\system32\dxtmsft.dll
2014-05-06 15:22:03 ----A---- C:\Windows\SYSWOW64\msrating.dll
2014-05-06 15:22:03 ----A---- C:\Windows\SYSWOW64\msfeeds.dll
2014-05-06 15:22:03 ----A---- C:\Windows\SYSWOW64\jsproxy.dll
2014-05-06 15:22:03 ----A---- C:\Windows\SYSWOW64\JavaScriptCollectionAgent.dll
2014-05-06 15:22:03 ----A---- C:\Windows\SYSWOW64\ieUnatt.exe
2014-05-06 15:22:03 ----A---- C:\Windows\SYSWOW64\iesetup.dll
2014-05-06 15:22:03 ----A---- C:\Windows\SYSWOW64\iernonce.dll
2014-05-06 15:22:03 ----A---- C:\Windows\SYSWOW64\dxtrans.dll
2014-05-06 15:22:03 ----A---- C:\Windows\system32\msrating.dll
2014-05-06 15:22:03 ----A---- C:\Windows\system32\msfeeds.dll
2014-05-06 15:22:03 ----A---- C:\Windows\system32\jsproxy.dll
2014-05-06 15:22:03 ----A---- C:\Windows\system32\ieUnatt.exe
2014-05-06 15:22:03 ----A---- C:\Windows\system32\iesetup.dll
2014-05-06 15:22:03 ----A---- C:\Windows\system32\dxtrans.dll
2014-05-06 15:22:02 ----A---- C:\Windows\SYSWOW64\jscript9diag.dll
2014-05-06 15:22:02 ----A---- C:\Windows\SYSWOW64\ieetwproxystub.dll
2014-05-06 15:22:01 ----A---- C:\Windows\SYSWOW64\iertutil.dll
2014-05-06 15:22:01 ----A---- C:\Windows\SYSWOW64\ieapfltr.dll
2014-05-06 15:22:01 ----A---- C:\Windows\system32\MsSpellCheckingFacility.exe
2014-05-06 15:22:01 ----A---- C:\Windows\system32\iertutil.dll
2014-05-06 15:22:01 ----A---- C:\Windows\system32\ieetwproxystub.dll
2014-05-06 15:22:01 ----A---- C:\Windows\system32\ieetwcollector.exe
2014-05-06 15:22:01 ----A---- C:\Windows\system32\ieapfltr.dll
2014-05-06 15:22:00 ----A---- C:\Windows\SYSWOW64\wininet.dll
2014-05-06 15:22:00 ----A---- C:\Windows\SYSWOW64\urlmon.dll
2014-05-06 15:22:00 ----A---- C:\Windows\system32\wininet.dll
2014-05-06 15:22:00 ----A---- C:\Windows\system32\urlmon.dll
2014-05-06 15:22:00 ----A---- C:\Windows\system32\ieframe.dll
2014-05-06 15:21:59 ----A---- C:\Windows\SYSWOW64\jscript9.dll
2014-05-06 15:21:59 ----A---- C:\Windows\SYSWOW64\ieframe.dll
2014-05-06 15:21:59 ----A---- C:\Windows\system32\jscript9.dll
2014-05-06 15:21:57 ----SD---- C:\Windows\system32\CompatTel
2014-05-06 14:22:04 ----A---- C:\Windows\system32\aepdu.dll
2014-05-06 14:22:04 ----A---- C:\Windows\system32\aeinv.dll
2014-05-01 18:31:58 ----D---- C:\Users\Mira\AppData\Roaming\com.valve.FTP

======List of files/folders modified in the last 1 month======

2014-05-13 14:19:55 ----RD---- C:\Program Files
2014-05-13 14:19:45 ----D---- C:\Windows\Temp
2014-05-13 14:19:35 ----D---- C:\Windows\system32\config
2014-05-13 14:19:32 ----D---- C:\Windows\SoftwareDistribution
2014-05-13 14:17:42 ----D---- C:\Windows
2014-05-13 14:17:10 ----D---- C:\Windows\inf
2014-05-13 14:15:39 ----RD---- C:\Program Files (x86)
2014-05-13 14:15:39 ----D---- C:\Windows\system32\drivers
2014-05-13 14:15:33 ----D---- C:\ProgramData
2014-05-13 14:05:23 ----RD---- C:\Users
2014-05-13 14:05:23 ----AD---- C:\Qoobox
2014-05-13 14:04:39 ----A---- C:\Windows\system.ini
2014-05-13 14:04:35 ----D---- C:\Windows\system32\drivers\etc
2014-05-13 14:03:36 ----D---- C:\Windows\SYSWOW64\drivers
2014-05-13 14:03:36 ----D---- C:\Windows\SysWOW64
2014-05-13 14:03:36 ----D---- C:\Windows\AppPatch
2014-05-13 14:03:35 ----D---- C:\Program Files (x86)\Common Files
2014-05-13 13:56:49 ----SD---- C:\Users\Mira\AppData\Roaming\Microsoft
2014-05-13 13:53:16 ----D---- C:\Windows\System32
2014-05-13 13:53:16 ----A---- C:\Windows\system32\PerfStringBackup.INI
2014-05-13 13:47:40 ----D---- C:\Windows\debug
2014-05-13 13:47:40 ----D---- C:\Program Files (x86)\Steam
2014-05-13 13:46:45 ----SHD---- C:\System Volume Information
2014-05-13 13:11:56 ----D---- C:\ProgramData\Spybot - Search & Destroy
2014-05-13 13:11:55 ----SD---- C:\ProgramData\Microsoft
2014-05-13 12:56:05 ----D---- C:\Windows\Tasks
2014-05-13 12:48:42 ----D---- C:\ProgramData\Malwarebytes
2014-05-13 12:14:47 ----D---- C:\Users\Mira\AppData\Roaming\Skype
2014-05-10 21:37:12 ----D---- C:\ProgramData\Origin
2014-05-10 21:36:36 ----D---- C:\Program Files (x86)\Origin
2014-05-08 12:02:56 ----D---- C:\Windows\winsxs
2014-05-07 21:53:53 ----D---- C:\Windows\system32\catroot2
2014-05-07 21:53:53 ----D---- C:\Windows\system32\catroot
2014-05-06 15:49:49 ----D---- C:\Windows\rescache
2014-05-06 15:24:15 ----D---- C:\Windows\SYSWOW64\en-US
2014-05-06 15:24:15 ----D---- C:\Windows\SYSWOW64\cs-CZ
2014-05-06 15:24:15 ----D---- C:\Windows\system32\en-US
2014-05-06 15:24:15 ----D---- C:\Windows\system32\cs-CZ
2014-05-06 15:24:15 ----D---- C:\Windows\PolicyDefinitions
2014-05-06 15:24:15 ----D---- C:\Program Files\Internet Explorer
2014-05-06 15:24:15 ----D---- C:\Program Files (x86)\Internet Explorer
2014-05-02 14:06:43 ----D---- C:\Users\Mira\AppData\Roaming\DAEMON Tools Lite
2014-05-02 14:06:42 ----D---- C:\Windows\Logs
2014-05-02 14:06:18 ----D---- C:\Program Files\CCleaner
2014-04-29 11:55:48 ----A---- C:\Windows\SYSWOW64\FlashPlayerApp.exe
2014-04-20 09:26:09 ----D---- C:\Windows\system32\wdi
2014-04-16 20:27:23 ----D---- C:\ProgramData\Oracle
2014-04-16 20:27:21 ----SHD---- C:\Windows\Installer
2014-04-16 20:27:21 ----D---- C:\Config.Msi
2014-04-16 20:27:19 ----D---- C:\Program Files (x86)\Java

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 MpFilter;Microsoft Malware Protection Driver; C:\Windows\system32\DRIVERS\MpFilter.sys [2014-01-25 268512]
R0 pciide;pciide; C:\Windows\system32\drivers\pciide.sys [2009-07-14 12352]
R0 rdyboost;ReadyBoost; C:\Windows\System32\drivers\rdyboost.sys [2010-11-21 213888]
R1 AsIO;AsIO; C:\Windows\SysWow64\drivers\AsIO.sys [2010-08-24 13440]
R1 AsUpIO;AsUpIO; C:\Windows\SysWow64\drivers\AsUpIO.sys [2010-08-03 14464]
R1 dtsoftbus01;DAEMON Tools Virtual Bus Driver; C:\Windows\system32\DRIVERS\dtsoftbus01.sys [2014-03-08 283064]
R3 e1cexpress;Intel(R) PRO/1000 PCI Express Network Connection Driver C; C:\Windows\system32\DRIVERS\e1c62x64.sys [2012-08-11 482128]
R3 ICCWDT;Intel(R) Watchdog Timer Driver (Intel(R) WDT); C:\Windows\system32\DRIVERS\ICCWDT.sys [2010-08-17 26136]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\Windows\system32\drivers\RTKVHD64.sys [2010-11-02 2536040]
R3 MEIx64;Intel(R) Management Engine Interface ; C:\Windows\system32\DRIVERS\HECIx64.sys [2010-10-20 56344]
R3 nusb3hub;Renesas Electronics USB 3.0 Hub Driver; C:\Windows\system32\DRIVERS\nusb3hub.sys [2010-04-27 83080]
R3 nusb3xhc;Renesas Electronics USB 3.0 Host Controller Driver; C:\Windows\system32\DRIVERS\nusb3xhc.sys [2010-04-27 184968]
R3 NVHDA;Service for NVIDIA High Definition Audio Driver; C:\Windows\system32\drivers\nvhda64v.sys [2013-11-28 197408]
S3 BridgeMP;@%SystemRoot%\system32\bridgeres.dll,-1; C:\Windows\system32\DRIVERS\bridge.sys [2009-07-14 95232]
S3 catchme;catchme; \??\C:\ComboFix\catchme.sys []
S3 cpuz137;cpuz137; \??\C:\Windows\TEMP\cpuz137\cpuz137_x64.sys []
S3 Dot4;MS IEEE-1284.4 Driver; C:\Windows\system32\DRIVERS\Dot4.sys [2009-07-14 145920]
S3 Dot4Print;Print Class Driver for IEEE-1284.4; C:\Windows\system32\DRIVERS\Dot4Prt.sys [2010-11-21 19968]
S3 dot4usb;MS Dot4USB Filter Dot4USB Filter; C:\Windows\system32\DRIVERS\dot4usb.sys [2009-07-14 43008]
S3 GPUZ;GPUZ; \??\C:\Windows\TEMP\GPUZ.sys []
S3 NisDrv;Microsoft Network Inspection System; C:\Windows\system32\DRIVERS\NisDrvWFP.sys [2014-03-11 133928]
S3 RdpVideoMiniport;Remote Desktop Video Miniport Driver; C:\Windows\System32\drivers\rdpvideominiport.sys [2012-08-23 19456]
S3 TsUsbFlt;TsUsbFlt; C:\Windows\system32\drivers\tsusbflt.sys [2013-10-02 56832]
S3 TsUsbGD;Remote Desktop Generic USB Device; C:\Windows\system32\drivers\TsUsbGD.sys [2012-08-23 30208]
S3 usbscan;Ovladač skeneru USB; C:\Windows\system32\DRIVERS\usbscan.sys [2013-07-03 42496]
S3 WDC_SAM;WD SCSI Pass Thru driver; C:\Windows\system32\DRIVERS\wdcsam64.sys [2009-02-13 14464]
S3 WinUsb;WinUsb; C:\Windows\system32\DRIVERS\WinUsb.sys [2010-11-21 41984]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 AdobeARMservice;Adobe Acrobat Update Service; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [2013-12-21 65432]
R2 asComSvc;ASUS Com Service; C:\Program Files (x86)\ASUS\AXSP\1.00.14\atkexComSvc.exe [2011-06-13 922240]
R2 asHmComSvc;ASUS HM Com Service; C:\Program Files (x86)\ASUS\AAHM\1.00.14\aaHMSvc.exe [2010-12-02 915584]
R2 AsSysCtrlService;ASUS System Control Service; C:\Program Files (x86)\ASUS\AsSysCtrlService\1.00.11\AsSysCtrlService.exe [2010-10-21 586880]
R2 hpqddsvc;Služba HP CUE DeviceDiscovery; C:\Windows\system32\svchost.exe [2009-07-14 27136]
R2 HPSLPSVC;HP Network Devices Support; C:\Windows\system32\svchost.exe [2009-07-14 27136]
R2 Intel(R) PROSet Monitoring Service;Intel(R) PROSet Monitoring Service; C:\Windows\system32\IProsetMonitor.exe [2012-07-27 170824]
R2 MsMpSvc;Microsoft Antimalware Service; c:\Program Files\Microsoft Security Client\MsMpEng.exe [2014-03-11 23808]
R2 Net Driver HPZ12;Net Driver HPZ12; C:\Windows\System32\svchost.exe [2009-07-14 27136]
R2 nvsvc;NVIDIA Display Driver Service; C:\Windows\system32\nvvsvc.exe [2014-03-27 927520]
R2 Pml Driver HPZ12;Pml Driver HPZ12; C:\Windows\System32\svchost.exe [2009-07-14 27136]
R2 PnkBstrA;PnkBstrA; C:\Windows\syswow64\PnkBstrA.exe [2014-03-08 76888]
R2 TeamViewer9;TeamViewer 9; C:\Program Files (x86)\TeamViewer\Version9\TeamViewer_Service.exe [2014-03-25 4971840]
R3 hpqcxs08;hpqcxs08; C:\Windows\system32\svchost.exe [2009-07-14 27136]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2013-09-11 105144]
S2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2013-09-11 124088]
S2 SkypeUpdate;Skype Updater; C:\Program Files (x86)\Skype\Updater\Updater.exe [2013-10-23 172192]
S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service; C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2014-04-29 257712]
S3 aspnet_state;Stavová služba ASP.NET; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\aspnet_state.exe [2013-09-11 51808]
S3 Futuremark SystemInfo Service;Futuremark SystemInfo Service; C:\Program Files (x86)\Futuremark\SystemInfo\FMSISvc.exe [2014-02-28 520416]
S3 IEEtwCollectorService;@%SystemRoot%\system32\ieetwcollectorres.dll,-1000; C:\Windows\system32\IEEtwCollector.exe [2014-03-06 111616]
S3 Microsoft Office Groove Audit Service;Microsoft Office Groove Audit Service; C:\Program Files (x86)\Microsoft Office\Office12\GrooveAuditService.exe [2009-02-26 64856]
S3 NisSrv;@C:\Program Files\Microsoft Security Client\MpAsDesc.dll,-243; c:\Program Files\Microsoft Security Client\NisSrv.exe [2014-03-11 347872]
S3 odserv;Microsoft Office Diagnostics Service; C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE [2011-07-20 440696]
S3 ose;Office Source Engine; C:\Program Files (x86)\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2006-10-26 145184]
S3 Steam Client Service;Steam Client Service; C:\Program Files (x86)\Common Files\Steam\SteamService.exe [2014-05-13 564416]
S3 WatAdminSvc;@%SystemRoot%\system32\Wat\WatUX.exe,-601; C:\Windows\system32\Wat\WatAdminSvc.exe [2014-03-08 1255736]
S4 NetMsmqActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8195; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2013-09-11 139856]
S4 NetPipeActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8197; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2013-09-11 139856]
S4 NetTcpActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8199; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2013-09-11 139856]

-----------------EOF-----------------

Zdravim

Hazi prohlizec nejakou hlasku?? Delaji to vsechny prohlizece??

Co se tyce ComboFixu, ktery jste pouzil, tak na zaklade licence a pravidel fora ptam, umite s nim pracovat (spusteni, rozlusteni logu, napsani skriptu)?

Licencni podminky ComboFixu hovori jasne "Nikdy by nemel byt pouzit v prostredi bez dozoru zkusene osoby"


Nebezpeci CFka

• Je urcen primarne pro radce - jeho svevolnym pouzitim ztracite narok na podporu
• Maze stopy po haveti, takze v logu z RSIT neni nic videt
• Jeho log je treba dolustit, jelikoz neumi smazat vse - to ovsem tezko zvladnete pokud k tomu nejste vyskolen
• CF muze mit bug = sunda Vam system, pokud nevite kam co uklada, jak co obnovit, mate system v kytkam a ceka Vas reinstal
• CF taky bohuzel prozatim nekontroluje nektere dulezite knihovny (napr. hal.dll) - ty treba mazou nektere typy haveti (napr. angela) - smaze Vam po restartu hal.dll = nenajede Vam system a jste o radek vyse = reinstal

Navic jej opakovane spoustite bez doporuceni

Používám jen IE. K nákaze došlo dnes asi v 11:40. Všechny ostatní weby fungují (na jiný nefunkční sem nenatrefil).
Prohlížeč si jinak divně nechová, jen se mi zdá o pár ml sec. pomalejší načítání.
Přikládám log z FRST a combofixu.

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 11-05-2014 01
Ran by Mira (administrator) on MIRA-PC on 13-05-2014 15:53:15
Running from C:\Users\Mira\Desktop
Platform: Windows 7 Home Premium Service Pack 1 (X64) OS Language: Czech
Internet Explorer Version 11
Boot Mode: Normal

The only official download link for FRST:
Download link for 32-Bit version: http://www.bleepingcomputer.com/downloa ... ool/dl/81/
Download link for 64-Bit Version: http://www.bleepingcomputer.com/downloa ... ool/dl/82/
Download link from any site other than Bleeping Computer is unpermitted or outdated.
See tutorial for FRST: http://www.geekstogo.com/forum/topic/33 ... scan-tool/

==================== Processes (Whitelisted) =================

(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(Microsoft Corporation) C:\Program Files\Microsoft Security Client\MsMpEng.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
() C:\Program Files (x86)\ASUS\AXSP\1.00.14\atkexComSvc.exe
(ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\AI Suite II\DIGI+ VRM\VRMHelp.exe
(ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\AI Suite II\AsRoutineController.exe
(Microsoft Corporation) C:\Program Files\Microsoft Security Client\msseces.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(Renesas Electronics Corporation) C:\Program Files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe
(Adobe Systems Inc.) C:\Program Files (x86)\Adobe\Acrobat 10.0\Acrobat\acrotray.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
() C:\Program Files (x86)\ASUS\AAHM\1.00.14\aaHMSvc.exe
() C:\Program Files (x86)\ASUS\AsSysCtrlService\1.00.11\AsSysCtrlService.exe
(Microsoft Corporation) C:\Windows\SysWOW64\svchost.exe
(Intel Corporation) C:\Windows\System32\IPROSetMonitor.exe
() C:\Windows\SysWOW64\PnkBstrA.exe
(Crawler.com) C:\Program Files (x86)\Spyware Terminator\st_rsser64.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\Version9\TeamViewer_Service.exe
(ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\AI Suite II\TurboV EVO\TurboVHelp.exe
(ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\AI Suite II\AI Suite II.exe
(ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\AI Suite II\Sensor\AlertHelper\AlertHelper.exe
(Microsoft Corporation) C:\Program Files\Internet Explorer\iexplore.exe
(Intel(R) Corporation) C:\Program Files\Intel\NCS2\WMIProv\ncs2prov.exe
(Adobe Systems Incorporated) C:\Windows\System32\Macromed\Flash\FlashUtil64_13_0_0_206_ActiveX.exe


==================== Registry (Whitelisted) ==================

HKLM\...\Run: [MSC] => C:\Program Files\Microsoft Security Client\msseces.exe [1271072 2014-03-11] (Microsoft Corporation)
HKLM\...\Run: [RtHDVCpl] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [11545192 2010-11-02] (Realtek Semiconductor)
HKLM\...\Run: [SpywareTerminatorShield] => C:\Program Files (x86)\Spyware Terminator\SpywareTerminatorShield.exe [2777736 2013-10-22] (Crawler.com)
HKLM\...\Run: [SpywareTerminatorUpdater] => C:\Program Files (x86)\Spyware Terminator\SpywareTerminatorUpdate.exe [3684488 2013-10-22] (Crawler.com)
HKLM-x32\...\Run: [NUSB3MON] => C:\Program Files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe [113288 2010-04-27] (Renesas Electronics Corporation)
HKLM-x32\...\Run: [Adobe ARM] => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959904 2013-11-21] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [] => [X]
HKLM-x32\...\Run: [Adobe Acrobat Speed Launcher] => C:\Program Files (x86)\Adobe\Acrobat 10.0\Acrobat\Acrobat_sl.exe [36760 2012-01-03] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [Acrobat Assistant 8.0] => C:\Program Files (x86)\Adobe\Acrobat 10.0\Acrobat\Acrotray.exe [815512 2012-01-03] (Adobe Systems Inc.)
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [254336 2013-07-02] (Oracle Corporation)

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.microsoft.com/isapi/redir.dl ... r=iesearch
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.seznam.cz/
StartMenuInternet: IEXPLORE.EXE - C:\Program Files (x86)\Internet Explorer\iexplore.exe
SearchScopes: HKCU - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKCU - {D5D33A73-FB59-45D9-A2F5-95DDFB4FE3A7} URL = http://tv.seznam.cz/hledej?w={searchTer ... arch_12454
BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO-x32: Adobe PDF Conversion Toolbar Helper - {AE7CD045-E861-484f-8273-0445EE161910} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated)
BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
BHO-x32: SmartSelect Class - {F4971EE7-DAA0-4053-9964-665D8EE6A077} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated)
Toolbar: HKLM-x32 - Adobe PDF - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated)
DPF: HKLM-x32 {8AD9C840-044E-11D1-B3E9-00805F499D93} http://javadl-esd.sun.com/update/1.7.0/ ... s-i586.cab
DPF: HKLM-x32 {D27CDB6E-AE6D-11CF-96B8-444553540000} http://fpdownload2.macromedia.com/get/f ... wflash.cab
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Tcpip\..\Interfaces\{550EE2CE-9C63-4512-B553-F28EEA837AE2}: [NameServer]192.168.1.1,192.168.1.9

FireFox:
========
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_13_0_0_206.dll ()
FF Plugin: @microsoft.com/GENUINE - disabled No File
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files\Microsoft Silverlight\5.1.30214.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_13_0_0_206.dll ()
FF Plugin-x32: @esn.me/esnsonar,version=0.70.4 - C:\Program Files (x86)\Battlelog Web Plugins\Sonar\0.70.4\npesnsonar.dll (ESN Social Software AB)
FF Plugin-x32: @esn/npbattlelog,version=2.3.2 - C:\Program Files (x86)\Battlelog Web Plugins\2.3.2\npbattlelog.dll (EA Digital Illusions CE AB)
FF Plugin-x32: @java.com/DTPlugin,version=10.55.2 - C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=10.55.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @microsoft.com/GENUINE - disabled No File
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files (x86)\Microsoft Silverlight\5.1.30214.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @videolan.org/vlc,version=2.1.3 - C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: Adobe Acrobat - C:\Program Files (x86)\Adobe\Acrobat 10.0\Acrobat\Air\nppdf32.dll (Adobe Systems Inc.)
FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF HKLM-x32\...\Firefox\Extensions: [web2pdfextension@web2pdf.adobedotcom] - C:\Program Files (x86)\Adobe\Acrobat 10.0\Acrobat\Browser\WCFirefoxExtn
FF Extension: Adobe Acrobat - Create PDF - C:\Program Files (x86)\Adobe\Acrobat 10.0\Acrobat\Browser\WCFirefoxExtn [2014-03-08]

==================== Services (Whitelisted) =================

R2 asComSvc; C:\Program Files (x86)\ASUS\AXSP\1.00.14\atkexComSvc.exe [922240 2011-06-13] ()
R2 asHmComSvc; C:\Program Files (x86)\ASUS\AAHM\1.00.14\aaHMSvc.exe [915584 2010-12-02] ()
R2 AsSysCtrlService; C:\Program Files (x86)\ASUS\AsSysCtrlService\1.00.11\AsSysCtrlService.exe [586880 2010-10-21] ()
S3 Futuremark SystemInfo Service; C:\Program Files (x86)\Futuremark\SystemInfo\FMSISvc.exe [520416 2014-02-28] (Futuremark)
R2 MsMpSvc; c:\Program Files\Microsoft Security Client\MsMpEng.exe [23808 2014-03-11] (Microsoft Corporation)
S3 NisSrv; c:\Program Files\Microsoft Security Client\NisSrv.exe [347872 2014-03-11] (Microsoft Corporation)
R2 PnkBstrA; C:\Windows\SysWOW64\PnkBstrA.exe [76888 2014-03-08] ()
R2 ST2012_Svc; C:\Program Files (x86)\Spyware Terminator\st_rsser64.exe [1149104 2013-10-22] (Crawler.com)

==================== Drivers (Whitelisted) ====================

U5 AppMgmt; C:\Windows\system32\svchost.exe [27136 2009-07-14] (Microsoft Corporation)
R1 AsIO; C:\Windows\SysWow64\drivers\AsIO.sys [13440 2010-08-24] ()
R1 AsUpIO; C:\Windows\SysWow64\drivers\AsUpIO.sys [14464 2010-08-03] ()
R1 dtsoftbus01; C:\Windows\System32\DRIVERS\dtsoftbus01.sys [283064 2014-03-08] (Disc Soft Ltd)
R0 MpFilter; C:\Windows\System32\DRIVERS\MpFilter.sys [268512 2014-01-25] (Microsoft Corporation)
S3 NisDrv; C:\Windows\System32\DRIVERS\NisDrvWFP.sys [133928 2014-03-11] (Microsoft Corporation)
R2 sp_rsdrv2; C:\Windows\System32\DRIVERS\stflt.sys [51496 2014-05-13] (Windows (R) Win 7 DDK provider)
S3 catchme; \??\C:\ComboFix\catchme.sys [X]
S3 cpuz137; \??\C:\Windows\TEMP\cpuz137\cpuz137_x64.sys [X]
S3 GPUZ; \??\C:\Windows\TEMP\GPUZ.sys [X]

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2014-05-13 15:53 - 2014-05-13 15:53 - 00009732 _____ () C:\Users\Mira\Desktop\FRST.txt
2014-05-13 15:51 - 2014-05-13 15:51 - 02066944 _____ (Farbar) C:\Users\Mira\Desktop\FRST64.exe
2014-05-13 15:44 - 2014-05-13 15:44 - 00000000 ____D () C:\ProgramData\Licenses
2014-05-13 15:35 - 2014-05-13 15:35 - 00000258 _____ () C:\ProgramData\Licenses.rar
2014-05-13 15:34 - 2014-05-13 15:34 - 00023905 _____ () C:\ComboFix.txt
2014-05-13 15:30 - 2014-05-13 15:30 - 00001083 _____ () C:\Users\Public\Desktop\SpywareBlaster.lnk
2014-05-13 15:30 - 2014-05-13 15:30 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\SpywareBlaster
2014-05-13 15:30 - 2014-05-13 15:30 - 00000000 ____D () C:\Program Files (x86)\SpywareBlaster
2014-05-13 15:29 - 2014-05-13 15:29 - 04095448 _____ (BrightFort LLC ) C:\Users\Mira\Desktop\spywareblastersetup50.exe
2014-05-13 15:28 - 2014-05-13 15:33 - 00000000 ____D () C:\ProgramData\Spyware Terminator
2014-05-13 15:28 - 2014-05-13 15:28 - 00051496 _____ (Windows (R) Win 7 DDK provider) C:\Windows\system32\Drivers\stflt.sys
2014-05-13 15:28 - 2014-05-13 15:28 - 00001042 _____ () C:\Users\Public\Desktop\Spyware Terminator 2012.lnk
2014-05-13 15:28 - 2014-05-13 15:28 - 00000000 ____D () C:\Users\Mira\AppData\Roaming\Spyware Terminator
2014-05-13 15:28 - 2014-05-13 15:28 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Spyware Terminator 2012
2014-05-13 15:28 - 2014-05-13 15:28 - 00000000 ____D () C:\Program Files (x86)\Spyware Terminator
2014-05-13 15:27 - 2014-05-13 15:27 - 01058232 _____ (Crawler, LLC ) C:\Users\Mira\Desktop\SpywareTerminatorSetup.exe
2014-05-13 15:18 - 2014-05-13 15:18 - 00002225 _____ () C:\Users\Mira\Desktop\RKreport[0]_S_05132014_151828.txt
2014-05-13 15:17 - 2014-05-13 15:18 - 00000000 ____D () C:\Users\Mira\Desktop\RK_Quarantine
2014-05-13 15:17 - 2014-05-13 15:17 - 00002599 _____ () C:\Users\Mira\Desktop\RKreport[0]_D_05132014_151754.txt
2014-05-13 15:17 - 2014-05-13 15:17 - 00002516 _____ () C:\Users\Mira\Desktop\RKreport[0]_S_05132014_151744.txt
2014-05-13 15:15 - 2014-05-13 15:19 - 00000000 ____D () C:\AdwCleaner
2014-05-13 15:14 - 2014-05-13 15:14 - 03972608 _____ () C:\Users\Mira\Desktop\RogueKiller.exe
2014-05-13 15:14 - 2014-05-13 15:14 - 01325827 _____ () C:\Users\Mira\Desktop\adwcleaner.exe
2014-05-13 14:52 - 2014-05-13 14:52 - 00001106 _____ () C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk
2014-05-13 14:52 - 2014-05-13 14:52 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes Anti-Malware
2014-05-13 14:52 - 2014-05-13 14:52 - 00000000 ____D () C:\Program Files (x86)\Malwarebytes Anti-Malware
2014-05-13 14:52 - 2014-04-03 09:51 - 00088280 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys
2014-05-13 14:52 - 2014-04-03 09:51 - 00063192 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys
2014-05-13 14:52 - 2014-04-03 09:50 - 00025816 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys
2014-05-13 14:51 - 2014-05-13 12:47 - 17305616 _____ (Malwarebytes Corporation ) C:\Users\Mira\Desktop\mbam-setup-2.0.1.1004.exe
2014-05-13 14:43 - 2014-05-13 15:37 - 00001732 _____ () C:\Windows\PFRO.log
2014-05-13 14:43 - 2014-05-13 15:37 - 00000224 _____ () C:\Windows\setupact.log
2014-05-13 14:43 - 2014-05-13 14:43 - 00000000 _____ () C:\Windows\setuperr.log
2014-05-13 14:38 - 2014-05-13 14:38 - 05200050 ____R (Swearware) C:\Users\Mira\Desktop\ComboFix.exe
2014-05-13 14:36 - 2014-05-13 14:36 - 00008607 _____ () C:\Users\Mira\Desktop\hijackthis.log
2014-05-13 14:27 - 2014-05-13 15:40 - 00031848 _____ () C:\Windows\WindowsUpdate.log
2014-05-13 14:19 - 2014-05-13 14:37 - 00000000 ____D () C:\Program Files\trend micro
2014-05-13 14:19 - 2014-05-13 14:19 - 00388608 _____ (Trend Micro Inc.) C:\Users\Mira\Desktop\hijackthis.exe
2014-05-13 14:19 - 2014-05-13 14:19 - 00000000 ____D () C:\rsit
2014-05-13 12:49 - 2014-05-13 14:52 - 00119512 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2014-05-13 12:30 - 2014-05-13 13:48 - 00000000 ____D () C:\Program Files (x86)\Spybot - Search & Destroy 2
2014-05-13 12:28 - 2014-05-13 12:29 - 46392680 _____ (Safer-Networking Ltd. ) C:\Users\Mira\Downloads\spybot-2.3.exe
2014-05-13 12:15 - 2014-05-13 15:53 - 00000000 ____D () C:\FRST
2014-05-07 21:53 - 2014-04-29 16:01 - 23547904 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-05-07 21:53 - 2014-04-29 15:40 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2014-05-07 21:53 - 2014-04-29 14:48 - 17384448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2014-05-07 21:53 - 2014-04-29 14:34 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2014-05-06 16:01 - 2014-05-06 16:01 - 00000000 __SHD () C:\Users\Mira\AppData\Local\EmieUserList
2014-05-06 16:01 - 2014-05-06 16:01 - 00000000 __SHD () C:\Users\Mira\AppData\Local\EmieSiteList
2014-05-06 15:22 - 2014-03-06 11:31 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2014-05-06 15:22 - 2014-03-06 10:59 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2014-05-06 15:22 - 2014-03-06 10:57 - 00548352 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2014-05-06 15:22 - 2014-03-06 10:57 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2014-05-06 15:22 - 2014-03-06 10:53 - 02767360 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2014-05-06 15:22 - 2014-03-06 10:40 - 00051200 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2014-05-06 15:22 - 2014-03-06 10:39 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2014-05-06 15:22 - 2014-03-06 10:32 - 00574976 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2014-05-06 15:22 - 2014-03-06 10:29 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2014-05-06 15:22 - 2014-03-06 10:29 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2014-05-06 15:22 - 2014-03-06 10:28 - 00752640 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2014-05-06 15:22 - 2014-03-06 10:15 - 00940032 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2014-05-06 15:22 - 2014-03-06 10:09 - 00453120 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2014-05-06 15:22 - 2014-03-06 10:03 - 00586240 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2014-05-06 15:22 - 2014-03-06 10:02 - 00455168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2014-05-06 15:22 - 2014-03-06 10:02 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2014-05-06 15:22 - 2014-03-06 10:01 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2014-05-06 15:22 - 2014-03-06 09:56 - 00038400 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2014-05-06 15:22 - 2014-03-06 09:48 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2014-05-06 15:22 - 2014-03-06 09:47 - 02178048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2014-05-06 15:22 - 2014-03-06 09:46 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2014-05-06 15:22 - 2014-03-06 09:45 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2014-05-06 15:22 - 2014-03-06 09:42 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2014-05-06 15:22 - 2014-03-06 09:40 - 00440832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2014-05-06 15:22 - 2014-03-06 09:38 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2014-05-06 15:22 - 2014-03-06 09:36 - 00592896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2014-05-06 15:22 - 2014-03-06 09:22 - 00367616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2014-05-06 15:22 - 2014-03-06 09:21 - 00628736 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2014-05-06 15:22 - 2014-03-06 09:13 - 00032256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll
2014-05-06 15:22 - 2014-03-06 09:11 - 02043904 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2014-05-06 15:22 - 2014-03-06 09:07 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2014-05-06 15:22 - 2014-03-06 09:01 - 00244224 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2014-05-06 15:22 - 2014-03-06 08:53 - 13551104 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2014-05-06 15:22 - 2014-03-06 08:46 - 00524288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2014-05-06 15:22 - 2014-03-06 08:40 - 01967104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2014-05-06 15:22 - 2014-03-06 08:22 - 02260480 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2014-05-06 15:22 - 2014-03-06 07:58 - 01400832 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2014-05-06 15:22 - 2014-03-06 07:50 - 00846336 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2014-05-06 15:22 - 2014-03-06 07:43 - 00704512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2014-05-06 15:22 - 2014-03-06 07:41 - 01789440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2014-05-06 15:22 - 2014-03-06 07:36 - 01143808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2014-05-06 15:21 - 2014-05-06 15:21 - 00000000 ___SD () C:\Windows\system32\CompatTel
2014-05-06 15:21 - 2014-03-06 10:11 - 05784064 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2014-05-06 15:21 - 2014-03-06 09:46 - 04254720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2014-05-06 15:21 - 2014-03-06 08:36 - 11745792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2014-05-06 14:22 - 2014-04-14 04:24 - 00465408 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll
2014-05-06 14:22 - 2014-04-14 04:19 - 00424448 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll
2014-05-03 10:58 - 2014-05-03 10:58 - 01404844 _____ () C:\Users\Mira\Downloads\3.mpeg
2014-05-01 18:31 - 2014-05-01 18:31 - 00000000 ____D () C:\Users\Mira\AppData\Roaming\com.valve.FTP
2014-05-01 12:16 - 2014-05-01 12:16 - 00000194 _____ () C:\Users\Mira\Desktop\Free to Play.url
2014-04-18 22:21 - 2014-04-18 22:21 - 03239656 _____ () C:\Users\Mira\Downloads\4.mpeg
2014-04-16 20:27 - 2014-04-16 20:27 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java
2014-04-15 23:26 - 2014-04-15 23:26 - 00449306 _____ () C:\Users\Mira\Downloads\Sdilej_Manager.zip
2014-04-15 23:26 - 2014-04-15 23:26 - 00000318 _____ () C:\Users\Mira\Desktop\CZshare.appref-ms
2014-04-15 23:26 - 2014-04-15 23:26 - 00000000 ____D () C:\Users\Mira\Downloads\Sdilej_Manager
2014-04-15 23:26 - 2014-04-15 23:26 - 00000000 ____D () C:\Users\Mira\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\SDÍLEJ.CZ
2014-04-13 16:19 - 2014-04-13 16:19 - 00012250 _____ () C:\Users\Mira\Downloads\bbtcz-s07e20_v1.zip

==================== One Month Modified Files and Folders =======

2014-05-13 15:53 - 2014-05-13 15:53 - 00009732 _____ () C:\Users\Mira\Desktop\FRST.txt
2014-05-13 15:53 - 2014-05-13 12:15 - 00000000 ____D () C:\FRST
2014-05-13 15:51 - 2014-05-13 15:51 - 02066944 _____ (Farbar) C:\Users\Mira\Desktop\FRST64.exe
2014-05-13 15:44 - 2014-05-13 15:44 - 00000000 ____D () C:\ProgramData\Licenses
2014-05-13 15:44 - 2009-07-14 06:45 - 00022064 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-05-13 15:44 - 2009-07-14 06:45 - 00022064 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-05-13 15:41 - 2011-04-12 10:34 - 00668898 _____ () C:\Windows\system32\perfh005.dat
2014-05-13 15:41 - 2011-04-12 10:34 - 00141556 _____ () C:\Windows\system32\perfc005.dat
2014-05-13 15:41 - 2009-07-14 07:13 - 01584684 _____ () C:\Windows\system32\PerfStringBackup.INI
2014-05-13 15:40 - 2014-05-13 14:27 - 00031848 _____ () C:\Windows\WindowsUpdate.log
2014-05-13 15:37 - 2014-05-13 14:43 - 00001732 _____ () C:\Windows\PFRO.log
2014-05-13 15:37 - 2014-05-13 14:43 - 00000224 _____ () C:\Windows\setupact.log
2014-05-13 15:37 - 2009-07-14 07:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2014-05-13 15:35 - 2014-05-13 15:35 - 00000258 _____ () C:\ProgramData\Licenses.rar
2014-05-13 15:34 - 2014-05-13 15:34 - 00023905 _____ () C:\ComboFix.txt
2014-05-13 15:34 - 2014-03-09 00:21 - 00000000 ____D () C:\Qoobox
2014-05-13 15:34 - 2014-03-08 20:27 - 00000000 ____D () C:\Users\Mira\AppData\Local\Apps\2.0
2014-05-13 15:33 - 2014-05-13 15:28 - 00000000 ____D () C:\ProgramData\Spyware Terminator
2014-05-13 15:33 - 2009-07-14 04:34 - 00000215 _____ () C:\Windows\system.ini
2014-05-13 15:30 - 2014-05-13 15:30 - 00001083 _____ () C:\Users\Public\Desktop\SpywareBlaster.lnk
2014-05-13 15:30 - 2014-05-13 15:30 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\SpywareBlaster
2014-05-13 15:30 - 2014-05-13 15:30 - 00000000 ____D () C:\Program Files (x86)\SpywareBlaster
2014-05-13 15:29 - 2014-05-13 15:29 - 04095448 _____ (BrightFort LLC ) C:\Users\Mira\Desktop\spywareblastersetup50.exe
2014-05-13 15:28 - 2014-05-13 15:28 - 00051496 _____ (Windows (R) Win 7 DDK provider) C:\Windows\system32\Drivers\stflt.sys
2014-05-13 15:28 - 2014-05-13 15:28 - 00001042 _____ () C:\Users\Public\Desktop\Spyware Terminator 2012.lnk
2014-05-13 15:28 - 2014-05-13 15:28 - 00000000 ____D () C:\Users\Mira\AppData\Roaming\Spyware Terminator
2014-05-13 15:28 - 2014-05-13 15:28 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Spyware Terminator 2012
2014-05-13 15:28 - 2014-05-13 15:28 - 00000000 ____D () C:\Program Files (x86)\Spyware Terminator
2014-05-13 15:27 - 2014-05-13 15:27 - 01058232 _____ (Crawler, LLC ) C:\Users\Mira\Desktop\SpywareTerminatorSetup.exe
2014-05-13 15:19 - 2014-05-13 15:15 - 00000000 ____D () C:\AdwCleaner
2014-05-13 15:18 - 2014-05-13 15:18 - 00002225 _____ () C:\Users\Mira\Desktop\RKreport[0]_S_05132014_151828.txt
2014-05-13 15:18 - 2014-05-13 15:17 - 00000000 ____D () C:\Users\Mira\Desktop\RK_Quarantine
2014-05-13 15:17 - 2014-05-13 15:17 - 00002599 _____ () C:\Users\Mira\Desktop\RKreport[0]_D_05132014_151754.txt
2014-05-13 15:17 - 2014-05-13 15:17 - 00002516 _____ () C:\Users\Mira\Desktop\RKreport[0]_S_05132014_151744.txt
2014-05-13 15:14 - 2014-05-13 15:14 - 03972608 _____ () C:\Users\Mira\Desktop\RogueKiller.exe
2014-05-13 15:14 - 2014-05-13 15:14 - 01325827 _____ () C:\Users\Mira\Desktop\adwcleaner.exe
2014-05-13 14:52 - 2014-05-13 14:52 - 00001106 _____ () C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk
2014-05-13 14:52 - 2014-05-13 14:52 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes Anti-Malware
2014-05-13 14:52 - 2014-05-13 14:52 - 00000000 ____D () C:\Program Files (x86)\Malwarebytes Anti-Malware
2014-05-13 14:52 - 2014-05-13 12:49 - 00119512 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2014-05-13 14:43 - 2014-05-13 14:43 - 00000000 _____ () C:\Windows\setuperr.log
2014-05-13 14:38 - 2014-05-13 14:38 - 05200050 ____R (Swearware) C:\Users\Mira\Desktop\ComboFix.exe
2014-05-13 14:37 - 2014-05-13 14:19 - 00000000 ____D () C:\Program Files\trend micro
2014-05-13 14:36 - 2014-05-13 14:36 - 00008607 _____ () C:\Users\Mira\Desktop\hijackthis.log
2014-05-13 14:31 - 2014-03-08 19:33 - 00000000 ____D () C:\Users\Mira\AppData\Local\VirtualStore
2014-05-13 14:27 - 2014-03-08 21:09 - 00000000 ____D () C:\Users\Mira\AppData\Local\Deployment
2014-05-13 14:19 - 2014-05-13 14:19 - 00388608 _____ (Trend Micro Inc.) C:\Users\Mira\Desktop\hijackthis.exe
2014-05-13 14:19 - 2014-05-13 14:19 - 00000000 ____D () C:\rsit
2014-05-13 13:54 - 2014-03-18 16:37 - 00000000 ____D () C:\Users\Mira\Desktop\Politické ideologie
2014-05-13 13:48 - 2014-05-13 12:30 - 00000000 ____D () C:\Program Files (x86)\Spybot - Search & Destroy 2
2014-05-13 13:47 - 2014-03-08 20:32 - 00000000 ____D () C:\Program Files (x86)\Steam
2014-05-13 13:11 - 2014-03-09 00:45 - 00000000 ____D () C:\ProgramData\Spybot - Search & Destroy
2014-05-13 12:48 - 2014-03-09 01:19 - 00000000 ____D () C:\ProgramData\Malwarebytes
2014-05-13 12:47 - 2014-05-13 14:51 - 17305616 _____ (Malwarebytes Corporation ) C:\Users\Mira\Desktop\mbam-setup-2.0.1.1004.exe
2014-05-13 12:29 - 2014-05-13 12:28 - 46392680 _____ (Safer-Networking Ltd. ) C:\Users\Mira\Downloads\spybot-2.3.exe
2014-05-13 12:14 - 2014-03-08 20:22 - 00000000 ____D () C:\Users\Mira\AppData\Roaming\Skype
2014-05-12 22:56 - 2014-03-09 02:56 - 00000000 ____D () C:\Users\Mira\AppData\Local\ArmA 2 OA
2014-05-10 21:37 - 2014-03-08 21:21 - 00000000 ____D () C:\ProgramData\Origin
2014-05-10 21:36 - 2014-03-08 21:06 - 00000000 ____D () C:\Program Files (x86)\Origin
2014-05-06 16:01 - 2014-05-06 16:01 - 00000000 __SHD () C:\Users\Mira\AppData\Local\EmieUserList
2014-05-06 16:01 - 2014-05-06 16:01 - 00000000 __SHD () C:\Users\Mira\AppData\Local\EmieSiteList
2014-05-06 15:49 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\rescache
2014-05-06 15:24 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\PolicyDefinitions
2014-05-06 15:21 - 2014-05-06 15:21 - 00000000 ___SD () C:\Windows\system32\CompatTel
2014-05-03 10:58 - 2014-05-03 10:58 - 01404844 _____ () C:\Users\Mira\Downloads\3.mpeg
2014-05-02 14:06 - 2014-03-08 20:43 - 00000000 ____D () C:\Users\Mira\AppData\Roaming\DAEMON Tools Lite
2014-05-02 14:06 - 2014-03-08 20:21 - 00000822 _____ () C:\Users\Public\Desktop\CCleaner.lnk
2014-05-02 14:06 - 2014-03-08 20:21 - 00000000 ____D () C:\Program Files\CCleaner
2014-05-02 11:18 - 2014-03-24 22:24 - 00085504 _____ () C:\Users\Mira\Desktop\OKNA_DVEŘE_2014.xls
2014-05-01 18:31 - 2014-05-01 18:31 - 00000000 ____D () C:\Users\Mira\AppData\Roaming\com.valve.FTP
2014-05-01 12:16 - 2014-05-01 12:16 - 00000194 _____ () C:\Users\Mira\Desktop\Free to Play.url
2014-04-29 16:01 - 2014-05-07 21:53 - 23547904 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-04-29 15:40 - 2014-05-07 21:53 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2014-04-29 14:48 - 2014-05-07 21:53 - 17384448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2014-04-29 14:34 - 2014-05-07 21:53 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2014-04-29 11:55 - 2014-03-08 20:15 - 00692400 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2014-04-29 11:55 - 2014-03-08 20:15 - 00070832 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2014-04-29 11:55 - 2014-03-08 20:15 - 00003852 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater
2014-04-22 16:07 - 2014-03-31 02:03 - 00000000 ____D () C:\Users\Mira\Documents\Moje naskenované obrázky
2014-04-18 22:21 - 2014-04-18 22:21 - 03239656 _____ () C:\Users\Mira\Downloads\4.mpeg
2014-04-16 20:27 - 2014-04-16 20:27 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java
2014-04-16 20:27 - 2014-03-29 12:06 - 00000000 ____D () C:\ProgramData\Oracle
2014-04-16 20:27 - 2014-03-29 12:06 - 00000000 ____D () C:\Program Files (x86)\Java
2014-04-15 23:26 - 2014-04-15 23:26 - 00449306 _____ () C:\Users\Mira\Downloads\Sdilej_Manager.zip
2014-04-15 23:26 - 2014-04-15 23:26 - 00000318 _____ () C:\Users\Mira\Desktop\CZshare.appref-ms
2014-04-15 23:26 - 2014-04-15 23:26 - 00000000 ____D () C:\Users\Mira\Downloads\Sdilej_Manager
2014-04-15 23:26 - 2014-04-15 23:26 - 00000000 ____D () C:\Users\Mira\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\SDÍLEJ.CZ
2014-04-14 18:34 - 2014-03-08 21:34 - 00000000 ____D () C:\Users\Mira\AppData\Local\Adobe
2014-04-14 04:24 - 2014-05-06 14:22 - 00465408 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll
2014-04-14 04:19 - 2014-05-06 14:22 - 00424448 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll
2014-04-13 16:19 - 2014-04-13 16:19 - 00012250 _____ () C:\Users\Mira\Downloads\bbtcz-s07e20_v1.zip

==================== Bamital & volsnap Check =================

C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\rpcss.dll => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit


LastRegBack: 2014-05-09 15:37

==================== End Of Log ============================



ComboFix 14-05-13.01 - Mira 13.05.2014 15:31:45.6.4 - x64
Microsoft Windows 7 Home Premium 6.1.7601.1.1250.420.1029.18.16351.14111 [GMT 2:00]
Spuštěný z: c:\users\Mira\Desktop\ComboFix.exe
AV: Microsoft Security Essentials *Disabled/Updated* {641105E6-77ED-3F35-A304-765193BCB75F}
SP: Microsoft Security Essentials *Disabled/Updated* {DF70E402-51D7-30BB-99B4-4D23E83BFDE2}
SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.
.
((((((((((((((((((((((((( Soubory vytvořené od 2014-04-13 do 2014-05-13 )))))))))))))))))))))))))))))))
.
.
2014-05-13 13:33 . 2014-05-13 13:33 -------- d-----w- c:\users\Public\AppData\Local\temp
2014-05-13 13:33 . 2014-05-13 13:33 -------- d-----w- c:\users\Default\AppData\Local\temp
2014-05-13 13:30 . 2014-05-13 13:30 -------- d-----w- c:\program files (x86)\SpywareBlaster
2014-05-13 13:28 . 2014-05-13 13:33 -------- d-----w- c:\programdata\Spyware Terminator
2014-05-13 13:28 . 2014-05-13 13:28 51496 ----a-w- c:\windows\system32\drivers\stflt.sys
2014-05-13 13:28 . 2014-05-13 13:28 -------- d-----w- c:\users\Mira\AppData\Roaming\Spyware Terminator
2014-05-13 13:28 . 2014-05-13 13:28 -------- d-----w- c:\program files (x86)\Spyware Terminator
2014-05-13 13:15 . 2014-05-13 13:19 -------- d-----w- C:\AdwCleaner
2014-05-13 12:52 . 2014-05-13 12:52 -------- d-----w- c:\program files (x86)\Malwarebytes Anti-Malware
2014-05-13 12:52 . 2014-04-03 07:51 63192 ----a-w- c:\windows\system32\drivers\mwac.sys
2014-05-13 12:52 . 2014-04-03 07:51 88280 ----a-w- c:\windows\system32\drivers\mbamchameleon.sys
2014-05-13 12:52 . 2014-04-03 07:50 25816 ----a-w- c:\windows\system32\drivers\mbam.sys
2014-05-13 12:43 . 2014-04-16 10:22 10651704 ----a-w- c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\{6DA9A78A-79B1-4688-86C3-9E3379D51A78}\mpengine.dll
2014-05-13 12:19 . 2014-05-13 12:37 -------- d-----w- c:\program files\trend micro
2014-05-13 12:19 . 2014-05-13 12:19 -------- d-----w- C:\rsit
2014-05-13 12:05 . 2014-05-13 12:05 -------- d-----w- c:\users\UpdatusUser
2014-05-13 11:51 . 2014-05-13 11:51 -------- d-----w- c:\programdata\Licenses
2014-05-13 10:49 . 2014-05-13 12:52 119512 ----a-w- c:\windows\system32\drivers\MBAMSwissArmy.sys
2014-05-13 10:30 . 2014-05-13 11:48 -------- d-----w- c:\program files (x86)\Spybot - Search & Destroy 2
2014-05-13 10:15 . 2014-05-13 11:54 -------- d-----w- C:\FRST
2014-05-11 09:22 . 2014-04-16 10:22 10651704 ----a-w- c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\Backup\mpengine.dll
2014-05-08 19:47 . 2014-05-02 09:16 1031560 ------w- c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\{2557F159-F458-48AE-A176-85FE919B8DBD}\gapaengine.dll
2014-05-07 19:53 . 2014-04-29 14:01 23547904 ----a-w- c:\windows\system32\mshtml.dll
2014-05-07 19:53 . 2014-04-29 13:40 2724864 ----a-w- c:\windows\system32\mshtml.tlb
2014-05-07 19:53 . 2014-04-29 12:34 2724864 ----a-w- c:\windows\SysWow64\mshtml.tlb
2014-05-06 14:01 . 2014-05-06 14:01 -------- d-sh--w- c:\users\Mira\AppData\Local\EmieUserList
2014-05-06 14:01 . 2014-05-06 14:01 -------- d-sh--w- c:\users\Mira\AppData\Local\EmieSiteList
2014-05-06 13:21 . 2014-03-06 08:11 5784064 ----a-w- c:\windows\system32\jscript9.dll
2014-05-06 13:21 . 2014-03-06 07:46 4254720 ----a-w- c:\windows\SysWow64\jscript9.dll
2014-05-06 13:21 . 2014-05-06 13:21 -------- d-s---w- c:\windows\system32\CompatTel
2014-05-06 12:22 . 2014-04-14 02:24 465408 ----a-w- c:\windows\system32\aepdu.dll
2014-05-06 12:22 . 2014-04-14 02:19 424448 ----a-w- c:\windows\system32\aeinv.dll
2014-05-01 16:31 . 2014-05-01 16:31 -------- d-----w- c:\users\Mira\AppData\Roaming\com.valve.FTP
.
.
.
(((((((((((((((((((((((((((((((((((((((( Find3M výpis ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2014-05-02 09:16 . 2014-03-14 17:33 1031560 ------w- c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\NISBackup\gapaengine.dll
2014-04-29 09:55 . 2014-03-08 18:15 692400 ----a-w- c:\windows\SysWow64\FlashPlayerApp.exe
2014-04-29 09:55 . 2014-03-08 18:15 70832 ----a-w- c:\windows\SysWow64\FlashPlayerCPLApp.cpl
2014-04-04 17:45 . 2014-03-08 21:27 214392 ----a-w- c:\windows\SysWow64\PnkBstrB.exe
2014-04-01 00:36 . 2014-03-08 21:27 214392 ----a-w- c:\windows\SysWow64\PnkBstrB.ex0
2014-03-31 01:51 . 2014-03-08 18:47 90655440 ----a-w- c:\windows\system32\MRT.exe
2014-03-27 12:45 . 2014-04-07 17:21 9734744 ----a-w- c:\windows\SysWow64\nvcuda.dll
2014-03-27 12:45 . 2014-04-07 17:21 9697128 ----a-w- c:\windows\SysWow64\nvopencl.dll
2014-03-27 12:45 . 2014-04-07 17:21 894752 ----a-w- c:\windows\system32\NvIFR64.dll
2014-03-27 12:45 . 2014-04-07 17:21 891168 ----a-w- c:\windows\system32\NvFBC64.dll
2014-03-27 12:45 . 2014-04-07 17:21 864600 ----a-w- c:\windows\SysWow64\NvIFR.dll
2014-03-27 12:45 . 2014-04-07 17:21 859592 ----a-w- c:\windows\SysWow64\NvFBC.dll
2014-03-27 12:45 . 2014-04-07 17:21 836544 ----a-w- c:\windows\SysWow64\nvumdshim.dll
2014-03-27 12:45 . 2014-04-07 17:21 491864 ----a-w- c:\windows\system32\nvEncodeAPI64.dll
2014-03-27 12:45 . 2014-04-07 17:21 415008 ----a-w- c:\windows\SysWow64\nvEncodeAPI.dll
2014-03-27 12:45 . 2014-04-07 17:21 382240 ----a-w- c:\windows\system32\NvIFROpenGL.dll
2014-03-27 12:45 . 2014-04-07 17:21 354016 ----a-w- c:\windows\system32\nvoglshim64.dll
2014-03-27 12:45 . 2014-04-07 17:21 336672 ----a-w- c:\windows\SysWow64\NvIFROpenGL.dll
2014-03-27 12:45 . 2014-04-07 17:21 3139928 ----a-w- c:\windows\system32\nvcuvid.dll
2014-03-27 12:45 . 2014-04-07 17:21 31270856 ----a-w- c:\windows\system32\nvoglv64.dll
2014-03-27 12:45 . 2014-04-07 17:21 305600 ----a-w- c:\windows\SysWow64\nvoglshim32.dll
2014-03-27 12:45 . 2014-04-07 17:21 2949976 ----a-w- c:\windows\SysWow64\nvcuvid.dll
2014-03-27 12:45 . 2014-04-07 17:21 2785056 ----a-w- c:\windows\system32\nvcuvenc.dll
2014-03-27 12:45 . 2014-04-07 17:21 2728160 ----a-w- c:\windows\SysWow64\nvapi.dll
2014-03-27 12:45 . 2014-04-07 17:21 25257416 ----a-w- c:\windows\system32\nvcompiler.dll
2014-03-27 12:45 . 2014-04-07 17:21 2413344 ----a-w- c:\windows\SysWow64\nvcuvenc.dll
2014-03-27 12:45 . 2014-04-07 17:21 23785416 ----a-w- c:\windows\SysWow64\nvoglv32.dll
2014-03-27 12:45 . 2014-04-07 17:21 1890080 ----a-w- c:\windows\system32\nvdispco6433750.dll
2014-03-27 12:45 . 2014-04-07 17:21 17561544 ----a-w- c:\windows\SysWow64\nvcompiler.dll
2014-03-27 12:45 . 2014-04-07 17:21 17467048 ----a-w- c:\windows\system32\nvd3dumx.dll
2014-03-27 12:45 . 2014-04-07 17:21 166568 ----a-w- c:\windows\system32\nvinitx.dll
2014-03-27 12:45 . 2014-04-07 17:21 15964736 ----a-w- c:\windows\SysWow64\nvwgf2um.dll
2014-03-27 12:45 . 2014-04-07 17:21 1539416 ----a-w- c:\windows\system32\nvdispgenco6433750.dll
2014-03-27 12:45 . 2014-04-07 17:21 146480 ----a-w- c:\windows\SysWow64\nvinit.dll
2014-03-27 12:45 . 2014-04-07 17:21 13158232 ----a-w- c:\windows\system32\drivers\nvlddmkm.sys
2014-03-27 12:45 . 2014-04-07 17:21 11644392 ----a-w- c:\windows\system32\nvcuda.dll
2014-03-27 12:45 . 2014-04-07 17:21 11598560 ----a-w- c:\windows\system32\nvopencl.dll
2014-03-27 12:45 . 2014-03-08 19:04 18493952 ----a-w- c:\windows\system32\nvwgf2umx.dll
2014-03-27 12:45 . 2014-03-08 19:04 14422856 ----a-w- c:\windows\SysWow64\nvd3dum.dll
2014-03-27 12:45 . 2014-03-08 18:47 60248 ----a-w- c:\windows\system32\OpenCL.dll
2014-03-27 12:45 . 2014-03-08 18:47 53024 ----a-w- c:\windows\SysWow64\OpenCL.dll
2014-03-27 12:45 . 2013-10-27 08:12 952440 ----a-w- c:\windows\system32\nvumdshimx.dll
2014-03-27 12:45 . 2013-10-27 08:12 3106688 ----a-w- c:\windows\system32\nvapi64.dll
2014-03-27 02:11 . 2014-03-08 18:47 6768584 ----a-w- c:\windows\system32\nvcpl.dll
2014-03-27 02:11 . 2014-03-08 18:47 3512664 ----a-w- c:\windows\system32\nvsvc64.dll
2014-03-27 02:11 . 2014-03-08 18:47 927520 ----a-w- c:\windows\system32\nvvsvc.exe
2014-03-27 02:11 . 2014-03-08 18:47 63776 ----a-w- c:\windows\system32\nvshext.dll
2014-03-27 02:11 . 2014-03-08 18:47 386336 ----a-w- c:\windows\system32\nvmctray.dll
2014-03-27 02:11 . 2014-03-08 18:47 2558808 ----a-w- c:\windows\system32\nvsvcr.dll
2014-03-24 10:31 . 2014-03-08 18:47 3683457 ----a-w- c:\windows\system32\nvcoproc.bin
2014-03-17 20:11 . 2014-03-29 10:06 96168 ----a-w- c:\windows\SysWow64\WindowsAccessBridge-32.dll
2014-03-11 07:52 . 2013-09-27 08:53 133928 ----a-w- c:\windows\system32\drivers\NisDrvWFP.sys
2014-03-08 21:27 . 2014-03-08 21:27 76888 ----a-w- c:\windows\SysWow64\PnkBstrA.exe
2014-03-08 19:35 . 2014-03-08 19:35 16896 ----a-w- c:\windows\AsTaskSched.dll
2014-03-08 18:43 . 2014-03-08 18:43 283064 ----a-w- c:\windows\system32\drivers\dtsoftbus01.sys
2014-03-08 18:35 . 2014-03-08 18:35 194048 ----a-w- c:\windows\SysWow64\elshyph.dll
2014-03-08 18:35 . 2014-03-08 18:35 942592 ----a-w- c:\windows\system32\jsIntl.dll
2014-03-08 18:35 . 2014-03-08 18:35 90112 ----a-w- c:\windows\system32\SetIEInstalledDate.exe
2014-03-08 18:35 . 2014-03-08 18:35 86016 ----a-w- c:\windows\SysWow64\iesysprep.dll
2014-03-08 18:35 . 2014-03-08 18:35 86016 ----a-w- c:\windows\system32\RegisterIEPKEYs.exe
2014-03-08 18:35 . 2014-03-08 18:35 84992 ----a-w- c:\windows\system32\mshtmled.dll
2014-03-08 18:35 . 2014-03-08 18:35 83968 ----a-w- c:\windows\system32\MshtmlDac.dll
2014-03-08 18:35 . 2014-03-08 18:35 81408 ----a-w- c:\windows\system32\icardie.dll
2014-03-08 18:35 . 2014-03-08 18:35 774144 ----a-w- c:\windows\system32\jscript.dll
2014-03-08 18:35 . 2014-03-08 18:35 77312 ----a-w- c:\windows\system32\tdc.ocx
2014-03-08 18:35 . 2014-03-08 18:35 74240 ----a-w- c:\windows\SysWow64\SetIEInstalledDate.exe
2014-03-08 18:35 . 2014-03-08 18:35 71680 ----a-w- c:\windows\SysWow64\RegisterIEPKEYs.exe
2014-03-08 18:35 . 2014-03-08 18:35 645120 ----a-w- c:\windows\SysWow64\jsIntl.dll
2014-03-08 18:35 . 2014-03-08 18:35 62464 ----a-w- c:\windows\SysWow64\tdc.ocx
2014-03-08 18:35 . 2014-03-08 18:35 62464 ----a-w- c:\windows\system32\pngfilt.dll
2014-03-08 18:35 . 2014-03-08 18:35 61952 ----a-w- c:\windows\SysWow64\MshtmlDac.dll
2014-03-08 18:35 . 2014-03-08 18:35 616104 ----a-w- c:\windows\system32\ieapfltr.dat
2014-03-08 18:35 . 2014-03-08 18:35 52224 ----a-w- c:\windows\system32\msfeedsbs.dll
2014-03-08 18:35 . 2014-03-08 18:35 48640 ----a-w- c:\windows\SysWow64\mshtmler.dll
2014-03-08 18:35 . 2014-03-08 18:35 48640 ----a-w- c:\windows\system32\mshtmler.dll
2014-03-08 18:35 . 2014-03-08 18:35 48128 ----a-w- c:\windows\system32\imgutil.dll
2014-03-08 18:35 . 2014-03-08 18:35 413696 ----a-w- c:\windows\system32\html.iec
2014-03-08 18:35 . 2014-03-08 18:35 36352 ----a-w- c:\windows\SysWow64\imgutil.dll
2014-03-08 18:35 . 2014-03-08 18:35 337408 ----a-w- c:\windows\SysWow64\html.iec
2014-03-08 18:35 . 2014-03-08 18:35 30208 ----a-w- c:\windows\system32\licmgr10.dll
2014-03-08 18:35 . 2014-03-08 18:35 263376 ----a-w- c:\windows\system32\iedkcs32.dll
2014-03-08 18:35 . 2014-03-08 18:35 247808 ----a-w- c:\windows\system32\msls31.dll
2014-03-08 18:35 . 2014-03-08 18:35 24576 ----a-w- c:\windows\SysWow64\licmgr10.dll
2014-03-08 18:35 . 2014-03-08 18:35 243200 ----a-w- c:\windows\system32\webcheck.dll
2014-03-08 18:35 . 2014-03-08 18:35 235520 ----a-w- c:\windows\system32\url.dll
2014-03-08 18:35 . 2014-03-08 18:35 235008 ----a-w- c:\windows\system32\elshyph.dll
2014-03-08 18:35 . 2014-03-08 18:35 182272 ----a-w- c:\windows\SysWow64\msls31.dll
2014-03-08 18:35 . 2014-03-08 18:35 167424 ----a-w- c:\windows\system32\iexpress.exe
2014-03-08 18:35 . 2014-03-08 18:35 151552 ----a-w- c:\windows\SysWow64\iexpress.exe
2014-03-08 18:35 . 2014-03-08 18:35 147968 ----a-w- c:\windows\system32\occache.dll
2014-03-08 18:35 . 2014-03-08 18:35 143872 ----a-w- c:\windows\system32\wextract.exe
2014-03-08 18:35 . 2014-03-08 18:35 139264 ----a-w- c:\windows\SysWow64\wextract.exe
2014-03-08 18:35 . 2014-03-08 18:35 13824 ----a-w- c:\windows\system32\mshta.exe
2014-03-08 18:35 . 2014-03-08 18:35 135680 ----a-w- c:\windows\system32\iepeers.dll
2014-03-08 18:35 . 2014-03-08 18:35 13312 ----a-w- c:\windows\SysWow64\mshta.exe
2014-03-08 18:35 . 2014-03-08 18:35 13312 ----a-w- c:\windows\system32\msfeedssync.exe
2014-03-08 18:35 . 2014-03-08 18:35 131072 ----a-w- c:\windows\system32\IEAdvpack.dll
2014-03-08 18:35 . 2014-03-08 18:35 1228800 ----a-w- c:\windows\system32\mshtmlmedia.dll
2014-03-08 18:35 . 2014-03-08 18:35 111616 ----a-w- c:\windows\SysWow64\IEAdvpack.dll
2014-03-08 18:35 . 2014-03-08 18:35 105984 ----a-w- c:\windows\system32\iesysprep.dll
.
.
(((((((((((((((((((((((((((((((((( Spouštěcí body v registru )))))))))))))))))))))))))))))))))))))))))))))
.
.
*Poznámka* prázdné záznamy a legitimní výchozí údaje nejsou zobrazeny.
REGEDIT4
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]
"NUSB3MON"="c:\program files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe" [2010-04-27 113288]
"Adobe ARM"="c:\program files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2013-11-21 959904]
"Adobe Acrobat Speed Launcher"="c:\program files (x86)\Adobe\Acrobat 10.0\Acrobat\Acrobat_sl.exe" [2012-01-03 36760]
"Acrobat Assistant 8.0"="c:\program files (x86)\Adobe\Acrobat 10.0\Acrobat\Acrotray.exe" [2012-01-03 815512]
"SunJavaUpdateSched"="c:\program files (x86)\Common Files\Java\Java Update\jusched.exe" [2013-07-02 254336]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorAdmin"= 5 (0x5)
"ConsentPromptBehaviorUser"= 3 (0x3)
"EnableUIADesktopToggle"= 0 (0x0)
.
[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\session manager]
BootExecute REG_MULTI_SZ autocheck autochk *\0\0sdnclean64.exe
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MsMpSvc]
@="Service"
.
R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [x]
R2 SkypeUpdate;Skype Updater;c:\program files (x86)\Skype\Updater\Updater.exe;c:\program files (x86)\Skype\Updater\Updater.exe [x]
R3 cpuz137;cpuz137;c:\windows\TEMP\cpuz137\cpuz137_x64.sys;c:\windows\TEMP\cpuz137\cpuz137_x64.sys [x]
R3 Futuremark SystemInfo Service;Futuremark SystemInfo Service;c:\program files (x86)\Futuremark\SystemInfo\FMSISvc.exe;c:\program files (x86)\Futuremark\SystemInfo\FMSISvc.exe [x]
R3 GPUZ;GPUZ;c:\windows\TEMP\GPUZ.sys;c:\windows\TEMP\GPUZ.sys [x]
R3 IEEtwCollectorService;Internet Explorer ETW Collector Service;c:\windows\system32\IEEtwCollector.exe;c:\windows\SYSNATIVE\IEEtwCollector.exe [x]
R3 NisDrv;Microsoft Network Inspection System;c:\windows\system32\DRIVERS\NisDrvWFP.sys;c:\windows\SYSNATIVE\DRIVERS\NisDrvWFP.sys [x]
R3 NisSrv;Kontrola sítě Microsoft;c:\program files\Microsoft Security Client\NisSrv.exe;c:\program files\Microsoft Security Client\NisSrv.exe [x]
R3 RdpVideoMiniport;Remote Desktop Video Miniport Driver;c:\windows\system32\drivers\rdpvideominiport.sys;c:\windows\SYSNATIVE\drivers\rdpvideominiport.sys [x]
R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys;c:\windows\SYSNATIVE\drivers\tsusbflt.sys [x]
R3 TsUsbGD;Remote Desktop Generic USB Device;c:\windows\system32\drivers\TsUsbGD.sys;c:\windows\SYSNATIVE\drivers\TsUsbGD.sys [x]
R3 WatAdminSvc;Služba Technologie aktivace Windows;c:\windows\system32\Wat\WatAdminSvc.exe;c:\windows\SYSNATIVE\Wat\WatAdminSvc.exe [x]
R3 WDC_SAM;WD SCSI Pass Thru driver;c:\windows\system32\DRIVERS\wdcsam64.sys;c:\windows\SYSNATIVE\DRIVERS\wdcsam64.sys [x]
S1 AsUpIO;AsUpIO;SysWow64\drivers\AsUpIO.sys;SysWow64\drivers\AsUpIO.sys [x]
S1 dtsoftbus01;DAEMON Tools Virtual Bus Driver;c:\windows\system32\DRIVERS\dtsoftbus01.sys;c:\windows\SYSNATIVE\DRIVERS\dtsoftbus01.sys [x]
S2 asComSvc;ASUS Com Service;c:\program files (x86)\ASUS\AXSP\1.00.14\atkexComSvc.exe;c:\program files (x86)\ASUS\AXSP\1.00.14\atkexComSvc.exe [x]
S2 asHmComSvc;ASUS HM Com Service;c:\program files (x86)\ASUS\AAHM\1.00.14\aaHMSvc.exe;c:\program files (x86)\ASUS\AAHM\1.00.14\aaHMSvc.exe [x]
S2 AsSysCtrlService;ASUS System Control Service;c:\program files (x86)\ASUS\AsSysCtrlService\1.00.11\AsSysCtrlService.exe;c:\program files (x86)\ASUS\AsSysCtrlService\1.00.11\AsSysCtrlService.exe [x]
S2 Intel(R) PROSet Monitoring Service;Intel(R) PROSet Monitoring Service;c:\windows\system32\IProsetMonitor.exe;c:\windows\SYSNATIVE\IProsetMonitor.exe [x]
S2 sp_rsdrv2;Spyware Terminator Driver Filter;c:\windows\system32\DRIVERS\stflt.sys;c:\windows\SYSNATIVE\DRIVERS\stflt.sys [x]
S2 ST2012_Svc;Spyware Terminator 2012 Realtime Shield Service;c:\program files (x86)\Spyware Terminator\st_rsser64.exe;c:\program files (x86)\Spyware Terminator\st_rsser64.exe [x]
S2 TeamViewer9;TeamViewer 9;c:\program files (x86)\TeamViewer\Version9\TeamViewer_Service.exe;c:\program files (x86)\TeamViewer\Version9\TeamViewer_Service.exe [x]
S3 ICCWDT;Intel(R) Watchdog Timer Driver (Intel(R) WDT);c:\windows\system32\DRIVERS\ICCWDT.sys;c:\windows\SYSNATIVE\DRIVERS\ICCWDT.sys [x]
S3 nusb3hub;Renesas Electronics USB 3.0 Hub Driver;c:\windows\system32\DRIVERS\nusb3hub.sys;c:\windows\SYSNATIVE\DRIVERS\nusb3hub.sys [x]
S3 nusb3xhc;Renesas Electronics USB 3.0 Host Controller Driver;c:\windows\system32\DRIVERS\nusb3xhc.sys;c:\windows\SYSNATIVE\DRIVERS\nusb3xhc.sys [x]
.
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\svchost]
hpdevmgmt REG_MULTI_SZ hpqcxs08 hpqddsvc
.
.
--------- X64 Entries -----------
.
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"MSC"="c:\program files\Microsoft Security Client\msseces.exe" [2014-03-11 1271072]
"RtHDVCpl"="c:\program files\Realtek\Audio\HDA\RAVCpl64.exe" [2010-11-02 11545192]
"SpywareTerminatorShield"="c:\program files (x86)\Spyware Terminator\SpywareTerminatorShield.exe" [2013-10-22 2777736]
"SpywareTerminatorUpdater"="c:\program files (x86)\Spyware Terminator\SpywareTerminatorUpdate.exe" [2013-10-22 3684488]
.
------- Doplňkový sken -------
.
uLocal Page = c:\windows\system32\blank.htm
uStart Page = hxxp://www.seznam.cz/
mLocal Page = c:\windows\SysWOW64\blank.htm
IE: E&xport to Microsoft Excel - c:\progra~2\MICROS~3\Office12\EXCEL.EXE/3000
IE: Open using &Advanced JPEG Compressor - c:\program files (x86)\Advanced JPEG Compressor\ajcieex.htm
TCP: Interfaces\{550EE2CE-9C63-4512-B553-F28EEA837AE2}: NameServer = 192.168.1.1,192.168.1.9
.
- - - - NEPLATNÉ POLOŽKY ODSTRANĚNÉ Z REGISTRU - - - -
.
Wow6432Node-HKLM-Run-<NO NAME> - (no file)
.
.
.
--------------------- ZAMKNUTÉ KLÍČE V REGISTRU ---------------------
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil64_13_0_0_206_ActiveX.exe,-101"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\Elevation]
"Enabled"=dword:00000001
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\LocalServer32]
@="c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil64_13_0_0_206_ActiveX.exe"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="IFlashBroker5"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil32_13_0_0_206_ActiveX.exe,-101"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\Elevation]
"Enabled"=dword:00000001
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\LocalServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil32_13_0_0_206_ActiveX.exe"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@="Shockwave Flash Object"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\InprocServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_13_0_0_206.ocx"
"ThreadingModel"="Apartment"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\MiscStatus]
@="0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ProgID]
@="ShockwaveFlash.ShockwaveFlash.13"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_13_0_0_206.ocx, 1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\TypeLib]
@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\Version]
@="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
@="ShockwaveFlash.ShockwaveFlash"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@="Macromedia Flash Factory Object"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\InprocServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_13_0_0_206.ocx"
"ThreadingModel"="Apartment"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ProgID]
@="FlashFactory.FlashFactory.1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_13_0_0_206.ocx, 1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\TypeLib]
@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\Version]
@="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
@="FlashFactory.FlashFactory"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="IFlashBroker5"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\PCW\Security]
@Denied: (Full) (Everyone)
.
Celkový čas: 2014-05-13 15:34:36
ComboFix-quarantined-files.txt 2014-05-13 13:34
ComboFix2.txt 2014-05-13 12:41
ComboFix3.txt 2014-05-13 12:25
ComboFix4.txt 2014-05-13 12:05
ComboFix5.txt 2014-05-13 13:31
.
Před spuštěním: Volných bajtů: 131 627 712 512
Po spuštění: Volných bajtů: 131 572 281 344
.
- - End Of File - - 2894B38D67CE12DFEBB17B64153D9F49
413FC2A0C716421B3158746D63736515

Tak ted jsem si zcela jist, ze nevyctu vuuubec nic

Opakovane spousteny ComboFix - proc??? Aplikoval jste pro nej nejaky skript?? myslite, ze opakovane spousteni neco vyleci?

Procisteni RogueKillerem a MBAMem

Aplikovani zastaraleho SpywareTerminatora a pochybneho SpywareBlaster

Vy jste odbornik stylem pokus omyl a kdz po pokazim jeste vic, tak se zeptam co Pravidla fora Vam toho tez moc nerikaji...Nebo kdo Vam raditl pouzit vsechny tyhle nastroje??

Tak asi je ted pozdě sypat si popel na hlavu . Ale pokaždé když jsem nějaký problém měl tak jsem aplikoval combofix a problém byl vyřešen (dnes né).

Jediné co combofix smazal je

c:\windows\wininit.ini nic jiného .

Zabalte mi do raru tyhle slozky a nekam jej uploadnete - zkusim neco vycist

• C:\Qoobox
• C:\Users\Mira\Desktop\RK_Quarantine
• C:\Users\Mira\Desktop\RKreport[0]_S_05132014_151828.txt
• C:\Users\Mira\Desktop\RKreport[0]_D_05132014_151754.txt
• C:\Users\Mira\Desktop\RKreport[0]_S_05132014_151744.txt
• Logy AdwCleaneru, mely by byt na c:\AdwCleaner\AdwCleaner[??].txt
• Log z MBAMu - Historie - Zaznamy aplikace

Vše je v raru. Už se mi to jednou dneska podařilo odstranit, a vše bylo ok. Ale po třech zkušebních restartech pc se to vrátilo. Ještě jednou moc děkuju a sypu si popel na hlavu

Nejdriv si udelame poradek v zabezpeceni

Odinstalujte SpywareTerminatora, SpywareBlaster, Spybot - Search & Destroy 2 i MBAM

Tvorba fixlistu pro FRST

• Spustte poznamkovy blok (Start-spustit-notepad)
• Zkopirujte skript nize

• Kód: Vybrat vše

  Start
  HKLM\...\Run: [SpywareTerminatorShield] => C:\Program Files (x86)\Spyware Terminator\SpywareTerminatorShield.exe [2777736 2013-10-22] (Crawler.com)
  HKLM\...\Run: [SpywareTerminatorUpdater] => C:\Program Files (x86)\Spyware Terminator\SpywareTerminatorUpdate.exe [3684488 2013-10-22] (Crawler.com)
  HKLM-x32\...\Run: [Adobe ARM] => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959904 2013-11-21] (Adobe Systems Incorporated)
  HKLM-x32\...\Run: [] => [X]
  HKLM-x32\...\Run: [Adobe Acrobat Speed Launcher] => C:\Program Files (x86)\Adobe\Acrobat 10.0\Acrobat\Acrobat_sl.exe [36760 2012-01-03] (Adobe Systems Incorporated)
  HKLM-x32\...\Run: [Acrobat Assistant 8.0] => C:\Program Files (x86)\Adobe\Acrobat 10.0\Acrobat\Acrotray.exe [815512 2012-01-03] (Adobe Systems Inc.)
  HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [254336 2013-07-02] (Oracle Corporation)
  
  HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.microsoft.com/isapi/redir.dl ... r=iesearch
  HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.seznam.cz/
  StartMenuInternet: IEXPLORE.EXE - C:\Program Files (x86)\Internet Explorer\iexplore.exe
  SearchScopes: HKCU - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
  SearchScopes: HKCU - {D5D33A73-FB59-45D9-A2F5-95DDFB4FE3A7} URL = http://tv.seznam.cz/hledej?w={searchTerms}&sourceid=QuickSearch_12454
  
  R2 ST2012_Svc; C:\Program Files (x86)\Spyware Terminator\st_rsser64.exe [1149104 2013-10-22] (Crawler.com)
  
  S3 catchme; \??\C:\ComboFix\catchme.sys [X]
  S3 cpuz137; \??\C:\Windows\TEMP\cpuz137\cpuz137_x64.sys [X]
  S3 GPUZ; \??\C:\Windows\TEMP\GPUZ.sys [X]
  
  2014-05-13 15:53 - 2014-05-13 15:53 - 00009732 _____ () C:\Users\Mira\Desktop\FRST.txt
  2014-05-13 15:30 - 2014-05-13 15:30 - 00001083 _____ () C:\Users\Public\Desktop\SpywareBlaster.lnk
  2014-05-13 15:30 - 2014-05-13 15:30 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\SpywareBlaster
  2014-05-13 15:30 - 2014-05-13 15:30 - 00000000 ____D () C:\Program Files (x86)\SpywareBlaster
  2014-05-13 15:29 - 2014-05-13 15:29 - 04095448 _____ (BrightFort LLC ) C:\Users\Mira\Desktop\spywareblastersetup50.exe
  2014-05-13 15:28 - 2014-05-13 15:33 - 00000000 ____D () C:\ProgramData\Spyware Terminator
  2014-05-13 15:28 - 2014-05-13 15:28 - 00001042 _____ () C:\Users\Public\Desktop\Spyware Terminator 2012.lnk
  2014-05-13 15:28 - 2014-05-13 15:28 - 00000000 ____D () C:\Users\Mira\AppData\Roaming\Spyware Terminator
  2014-05-13 15:28 - 2014-05-13 15:28 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Spyware Terminator 2012
  2014-05-13 15:28 - 2014-05-13 15:28 - 00000000 ____D () C:\Program Files (x86)\Spyware Terminator
  2014-05-13 15:27 - 2014-05-13 15:27 - 01058232 _____ (Crawler, LLC ) C:\Users\Mira\Desktop\SpywareTerminatorSetup.exe
  2014-05-13 15:18 - 2014-05-13 15:18 - 00002225 _____ () C:\Users\Mira\Desktop\RKreport[0]_S_05132014_151828.txt
  2014-05-13 15:17 - 2014-05-13 15:18 - 00000000 ____D () C:\Users\Mira\Desktop\RK_Quarantine
  2014-05-13 15:17 - 2014-05-13 15:17 - 00002599 _____ () C:\Users\Mira\Desktop\RKreport[0]_D_05132014_151754.txt
  2014-05-13 15:17 - 2014-05-13 15:17 - 00002516 _____ () C:\Users\Mira\Desktop\RKreport[0]_S_05132014_151744.txt
  2014-05-13 15:15 - 2014-05-13 15:19 - 00000000 ____D () C:\AdwCleaner
  2014-05-13 15:14 - 2014-05-13 15:14 - 03972608 _____ () C:\Users\Mira\Desktop\RogueKiller.exe
  2014-05-13 15:14 - 2014-05-13 15:14 - 01325827 _____ () C:\Users\Mira\Desktop\adwcleaner.exe
  2014-05-13 14:52 - 2014-05-13 14:52 - 00001106 _____ () C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk
  2014-05-13 14:52 - 2014-05-13 14:52 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes Anti-Malware
  2014-05-13 14:52 - 2014-05-13 14:52 - 00000000 ____D () C:\Program Files (x86)\Malwarebytes Anti-Malware
  2014-05-13 14:52 - 2014-04-03 09:51 - 00088280 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys
  2014-05-13 14:52 - 2014-04-03 09:51 - 00063192 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys
  2014-05-13 14:52 - 2014-04-03 09:50 - 00025816 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys
  2014-05-13 14:51 - 2014-05-13 12:47 - 17305616 _____ (Malwarebytes Corporation ) C:\Users\Mira\Desktop\mbam-setup-2.0.1.1004.exe
  2014-05-13 14:36 - 2014-05-13 14:36 - 00008607 _____ () C:\Users\Mira\Desktop\hijackthis.log
  2014-05-13 12:30 - 2014-05-13 13:48 - 00000000 ____D () C:\Program Files (x86)\Spybot - Search & Destroy 2
  2014-05-13 12:28 - 2014-05-13 12:29 - 46392680 _____ (Safer-Networking Ltd. ) C:\Users\Mira\Downloads\spybot-2.3.exe
  2014-05-13 13:11 - 2014-03-09 00:45 - 00000000 ____D () C:\ProgramData\Spybot - Search & Destroy
  
  Hosts:
  
  CMD: ipconfig /flushdns
  CMD: nslookup facebook.com
  CMD: ping -n 3 facebook.com
  
  End
  

• Ulozte vytvoreny TXT jako fixlist.txt
• Presunte vytvoreny fixlist vedle FRST

Spustte znovu FRST.exe

• Kliknete na Fix
• Probehne oprava a vytvori log Fixlog.txt

Restart PC a dejte mi sem fixlog.txt

Ještě před aplikací scriptu bylo pc reinstalováno. Po reinstalaci problém není. Děkuju za pomoc

Tak se rozhodnete priste drive, usetrite cas me i sobe

Takze