VIRY.CZ

Kód: Vybrat vše

Start
CreateRestorePoint:
CloseProcesses:
HKLM\...\Run: [] => [X]
Winlogon\Notify\!SASWinLogon: C:\Program Files\SUPERAntiSpyware\SASWINLO.DLL [X]
HKLM\...\Run: [SunJavaUpdateSched] => C:\Program Files\Common Files\Java\Java Update\jusched.exe [254336 2013-07-02] (Oracle Corporation)
HKU\S-1-5-21-4071959667-3725815562-1430548339-1000\...\Policies\system: [LogonHoursAction] 2
HKU\S-1-5-21-4071959667-3725815562-1430548339-1000\...\Policies\system: [DontDisplayLogonHoursWarnings] 1
ShellExecuteHooks: - {AEB6717E-7E19-11d0-97EE-00C04FD91972} - No File [ ]
ShellExecuteHooks: - {5AE067D3-9AFB-48E0-853A-EBB7F4A000DA} - No File [ ]
BootExecute:
GroupPolicyUsers\S-1-5-21-4071959667-3725815562-1430548339-1002\User: Restriction <======= ATTENTION
HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer: Restriction <======= ATTENTION
HKU\S-1-5-21-4071959667-3725815562-1430548339-1000\SOFTWARE\Policies\Microsoft\Internet Explorer: Restriction <======= ATTENTION
BHO: No Name -> {2DB66063-BB98-466A-AA0D-3E7ACF5ED853} -> No File
FF DefaultSearchUrl: hxxp://search.seznam.cz/?sourceid=quicksearch_22668&q={searchTerms}&
FF SearchEngineOrder.1: Seznam
FF SelectedSearchEngine: Seznam
FF Keyword.URL: hxxp://search.seznam.cz/?sourceid=quicksearch_22668&q={searchTerms}&
FF Extension: No Name - C:\Program Files\Mozilla Firefox\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A} [2015-12-13] [not signed]
FF HKLM\...\Thunderbird\Extensions: [eplgTb@eset.com] - C:\Program Files\ESET\ESET Smart Security\Mozilla Thunderbird => not found
S4 blbdrive; \SystemRoot\system32\drivers\blbdrive.sys [X]
S3 catchme; \??\C:\ComboFix\catchme.sys [X]
U4 eabfiltr; no ImagePath
S3 IpInIp; system32\DRIVERS\ipinip.sys [X]
S3 NwlnkFlt; system32\DRIVERS\nwlnkflt.sys [X]
S3 NwlnkFwd; system32\DRIVERS\nwlnkfwd.sys [X]
S3 pccsmcfd; system32\DRIVERS\pccsmcfd.sys [X]
S1 SASKUTIL; \??\C:\Program Files\SUPERAntiSpyware\SASKUTIL.SYS [X]
2015-12-14 19:29 - 2015-12-14 19:29 - 00029696 _____ C:\Users\Sparta Praha\AppData\Local\MSGBOX.EXE
2015-12-14 19:29 - 2015-12-14 19:29 - 00015327 _____ C:\Users\Sparta Praha\Desktop\LM.bat
2015-12-14 19:16 - 2015-12-14 19:17 - 00000000 ____D C:\Users\Sparta Praha\Desktop\CrystalDiskInfo6_2_2
2015-12-14 19:14 - 2015-12-14 19:16 - 02817875 _____ C:\Users\Sparta Praha\Desktop\CrystalDiskInfo6_2_2.zip
2015-12-14 18:10 - 2015-12-14 18:11 - 01740288 _____ C:\Users\Sparta Praha\Desktop\adwcleaner_5.025.exe
2015-12-13 14:38 - 2015-12-13 14:40 - 00000000 ____D C:\rsit
2015-12-13 00:32 - 2015-12-14 18:23 - 00000000 ____D C:\AdwCleaner
2015-12-12 22:49 - 2015-12-12 22:50 - 01738240 _____ C:\Users\Sparta Praha\Downloads\adwcleaner_5.024.exe.part
2015-12-13 14:38 - 2011-05-23 11:24 - 00000000 ____D C:\Program Files\trend micro
2014-06-26 19:31 - 2014-06-26 19:31 - 6010880 _____ () C:\Program Files\GUTB442.tmp
CustomCLSID: HKU\S-1-5-21-4071959667-3725815562-1430548339-1000_Classes\CLSID\{16F3DD56-1AF5-4347-846D-7C10C4192619}\InprocServer32 -> no filepath
CustomCLSID: HKU\S-1-5-21-4071959667-3725815562-1430548339-1000_Classes\CLSID\{2916C86E-86A6-43FE-8112-43ABE6BF8DCC}\InprocServer32 -> no filepath
CustomCLSID: HKU\S-1-5-21-4071959667-3725815562-1430548339-1000_Classes\CLSID\{920E6DB1-9907-4370-B3A0-BAFC03D81399}\InprocServer32 -> no filepath
CustomCLSID: HKU\S-1-5-21-4071959667-3725815562-1430548339-1000_Classes\CLSID\{99FD978C-D287-4F50-827F-B2C658EDA8E7}\InprocServer32 -> no filepath
CustomCLSID: HKU\S-1-5-21-4071959667-3725815562-1430548339-1000_Classes\CLSID\{AB5C5600-7E6E-4B06-9197-9ECEF74D31CC}\InprocServer32 -> no filepath
Task: {1991F124-6A53-4DCC-95B4-BE8B3AEFB585} - System32\Tasks\{FD3B2011-2625-4FB7-BA66-98444A084AFA} => pcalua.exe -a E:\setup.exe -d E:\
Task: {3F465A07-3A7F-4147-A5EE-D37A03092427} - System32\Tasks\{9275C8B4-F6C4-40A1-96E4-F65426AF057E} => pcalua.exe -a "C:\Program Files\DAEMON Tools\uninst.exe" -d "C:\Program Files\DAEMON Tools"
Task: {4E50F6AD-28B1-489B-B867-5AB71FCDC320} - System32\Tasks\{DAED931E-5AED-4B47-BA90-3B52671D8585} => pcalua.exe -a "C:\Users\Sparta Praha\Desktop\z flash\PC Translator 2007 full ISO(CZ)+Keygen\TRN2K711.exe" -d "C:\Users\Sparta Praha\Desktop\z flash\PC Translator 2007 full ISO(CZ)+Keygen"
Task: {51CB135B-C3FD-4A5F-A9D0-2955324CBDE9} - System32\Tasks\{EC3C8F8C-9D44-4BB3-87D0-041B738EFC33} => pcalua.exe -a "C:\Users\Sparta Praha\Downloads\daemon410-x64.exe" -d "C:\Users\Sparta Praha\Downloads"
Task: {6F148E8F-CAC0-491A-87C2-04A566987D75} - System32\Tasks\{C135488A-5896-4A1B-A49B-A8D0F36D6C53} => pcalua.exe -a "C:\Program Files\WhenUSearch\Uninst.exe" -c /tWHSE
Task: {A89B9C42-31B8-48D3-BBBF-AB88D978B0DF} - System32\Tasks\{DB146DDC-EEB4-4F96-8E7A-54AF7AF1C8EB} => pcalua.exe -a "C:\Users\Sparta Praha\Desktop\csm_podzim06.exe" -d "C:\Users\Sparta Praha\Desktop"
Task: {B09A7685-1409-4E7F-B553-2E36F4C419CD} - System32\Tasks\{3C74FD5E-E921-4C33-B3C4-B24043094C45} => pcalua.exe -a "C:\Users\Sparta Praha\Downloads\Counter-Strike1.6.exe" -d "C:\Users\Sparta Praha\Downloads"
Task: {BB8DDB2F-63EF-418E-9D1A-06B6991D8CDF} - System32\Tasks\{22BDFA2F-D6A6-4093-AF41-DA6E34DDAA4A} => pcalua.exe -a "C:\Users\Sparta Praha\Desktop\cerberus222_cz\cerberus222_cz.exe" -d "C:\Users\Sparta Praha\Desktop\cerberus222_cz"
Task: {C3BF9A45-0868-426E-AA93-49BCAA3CC42D} - System32\Tasks\{C874CF72-62B1-4DD5-B5AC-573A1EE61B67} => pcalua.exe -a "C:\Program Files\Czech Soccer Manager 2002 FE\uninstall.exe" -d "C:\Program Files\Czech Soccer Manager 2002 FE"
Task: {F96EE235-C238-4B40-991A-19511E884CB3} - System32\Tasks\{BEEE5F51-F555-486C-B557-3C03D8814A75} => pcalua.exe -a "C:\Users\Sparta Praha\Desktop\csm_jaro07.exe" -d "C:\Users\Sparta Praha\Desktop"
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore1cf916e128ba730.job => C:\Program Files\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files\Google\Update\GoogleUpdate.exe
AlternateDataStreams: C:\ProgramData\TEMP:CB0AACC9
HKU\S-1-5-21-4071959667-3725815562-1430548339-1000\Software\Classes\.exe: exefile =>  <===== ATTENTION
EmptyTemp:
End