TDSS - 3. část
14:48:02.0632 1412 [ F6FF8944478594D0E414D3F048F0D778 ] WmiAcpi C:\Windows\system32\DRIVERS\wmiacpi.sys
14:48:02.0632 1412 WmiAcpi - ok
14:48:02.0647 1412 [ 38B84C94C5A8AF291ADFEA478AE54F93 ] wmiApSrv C:\Windows\system32\wbem\WmiApSrv.exe
14:48:02.0663 1412 wmiApSrv - ok
14:48:02.0663 1412 WMPNetworkSvc - ok
14:48:02.0679 1412 [ 8488DD91A3EE54A8E29F02AD7BB8201E ] WmVirHid C:\Windows\system32\drivers\WmVirHid.sys
14:48:02.0679 1412 WmVirHid - ok
14:48:02.0694 1412 [ 14802B3A30AA849C97CB968CCC813BF3 ] WmXlCore C:\Windows\system32\drivers\WmXlCore.sys
14:48:02.0694 1412 WmXlCore - ok
14:48:02.0725 1412 [ 96C6E7100D724C69FCF9E7BF590D1DCA ] WPCSvc C:\Windows\System32\wpcsvc.dll
14:48:02.0725 1412 WPCSvc - ok
14:48:02.0757 1412 [ 93221146D4EBBF314C29B23CD6CC391D ] WPDBusEnum C:\Windows\system32\wpdbusenum.dll
14:48:02.0757 1412 WPDBusEnum - ok
14:48:02.0772 1412 [ 6BCC1D7D2FD2453957C5479A32364E52 ] ws2ifsl C:\Windows\system32\drivers\ws2ifsl.sys
14:48:02.0772 1412 ws2ifsl - ok
14:48:02.0788 1412 [ E8B1FE6669397D1772D8196DF0E57A9E ] wscsvc C:\Windows\System32\wscsvc.dll
14:48:02.0788 1412 wscsvc - ok
14:48:02.0788 1412 WSearch - ok
14:48:02.0835 1412 [ D9EF901DCA379CFE914E9FA13B73B4C4 ] wuauserv C:\Windows\system32\wuaueng.dll
14:48:02.0866 1412 wuauserv - ok
14:48:02.0881 1412 [ AB886378EEB55C6C75B4F2D14B6C869F ] WudfPf C:\Windows\system32\drivers\WudfPf.sys
14:48:02.0881 1412 WudfPf - ok
14:48:02.0928 1412 [ DDA4CAF29D8C0A297F886BFE561E6659 ] WUDFRd C:\Windows\system32\DRIVERS\WUDFRd.sys
14:48:02.0928 1412 WUDFRd - ok
14:48:02.0928 1412 [ B20F051B03A966392364C83F009F7D17 ] wudfsvc C:\Windows\System32\WUDFSvc.dll
14:48:02.0944 1412 wudfsvc - ok
14:48:02.0959 1412 [ FE90B750AB808FB9DD8FBB428B5FF83B ] WwanSvc C:\Windows\System32\wwansvc.dll
14:48:02.0959 1412 WwanSvc - ok
14:48:02.0959 1412 ================ Scan global ===============================
14:48:02.0975 1412 [ BA0CD8C393E8C9F83354106093832C7B ] C:\Windows\system32\basesrv.dll
14:48:02.0991 1412 [ 88EDD0B34EED542745931E581AD21A32 ] C:\Windows\system32\winsrv.dll
14:48:02.0991 1412 [ 88EDD0B34EED542745931E581AD21A32 ] C:\Windows\system32\winsrv.dll
14:48:03.0006 1412 [ D6160F9D869BA3AF0B787F971DB56368 ] C:\Windows\system32\sxssrv.dll
14:48:03.0022 1412 [ 24ACB7E5BE595468E3B9AA488B9B4FCB ] C:\Windows\system32\services.exe
14:48:03.0022 1412 [Global] - ok
14:48:03.0022 1412 ================ Scan MBR ==================================
14:48:03.0037 1412 [ A36C5E4F47E84449FF07ED3517B43A31 ] \Device\Harddisk0\DR0
14:48:03.0256 1412 \Device\Harddisk0\DR0 - ok
14:48:03.0256 1412 ================ Scan VBR ==================================
14:48:03.0256 1412 [ B03444150C320A2013690F5C37D68049 ] \Device\Harddisk0\DR0\Partition1
14:48:03.0256 1412 \Device\Harddisk0\DR0\Partition1 - ok
14:48:03.0287 1412 [ 795D1793895FC4C8A9C3BFBF8A690E3F ] \Device\Harddisk0\DR0\Partition2
14:48:03.0287 1412 \Device\Harddisk0\DR0\Partition2 - ok
14:48:03.0287 1412 ============================================================
14:48:03.0287 1412 Scan finished
14:48:03.0287 1412 ============================================================
14:48:03.0287 4248 Detected object count: 0
14:48:03.0287 4248 Actual detected object count: 0
ComboFix 14-02-05.02 - Administrator 10.02.2014 15:06:16.1.8 - x64
Microsoft Windows 7 Home Premium 6.1.7601.1.1250.420.1029.18.8089.6239 [GMT 1:00]
Spuštěný z: c:\users\Administrator\Desktop\ComboFix.exe
AV: COMODO Antivirus *Disabled/Updated* {B74CC7D2-B407-E1DC-1033-DD315BCDC8C8}
FW: COMODO Firewall *Disabled* {8F7746F7-FE68-E084-3B6C-7404A51E8FB3}
SP: COMODO Antivirus *Disabled/Updated* {0C2D2636-923D-EE52-2A83-E643204A8275}
SP: Windows Defender *Disabled/Outdated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
* Vytvořen nový Bod Obnovení
.
.
((((((((((((((((((((((((( Soubory vytvořené od 2014-01-10 do 2014-02-10 )))))))))))))))))))))))))))))))
.
.
2014-02-10 14:14 . 2014-02-10 14:14 -------- d-----w- c:\users\Default\AppData\Local\temp
2014-02-09 22:06 . 2014-02-10 13:40 -------- d-----w- c:\users\Administrator\AppData\Local\CrashDumps
2014-02-09 18:49 . 2014-02-09 18:49 -------- d-----w- c:\users\Administrator\AppData\Local\SniperV2
2014-02-09 18:21 . 2014-02-09 18:21 -------- d-----w- c:\windows\ERUNT
2014-02-08 22:01 . 2014-02-08 22:01 -------- d-----w- c:\users\Administrator\AppData\Local\Secunia PSI
2014-02-08 21:57 . 2014-02-08 21:57 -------- d-----w- c:\program files (x86)\Secunia
2014-02-08 21:32 . 2014-02-08 21:32 -------- d-----w- c:\users\Administrator\AppData\Roaming\Malwarebytes
2014-02-08 21:32 . 2014-02-08 21:32 -------- d-----w- c:\programdata\Malwarebytes
2014-02-08 21:32 . 2013-04-04 13:50 25928 ----a-w- c:\windows\system32\drivers\mbam.sys
2014-02-08 21:27 . 2014-02-09 10:39 -------- d-----w- C:\AdwCleaner
2014-02-05 20:15 . 2014-02-05 20:15 348160 ----a-w- c:\windows\SysWow64\msvcr71.dll
2014-02-05 20:15 . 2014-02-05 20:15 1700352 ----a-w- c:\windows\SysWow64\gdiplus.dll
2014-02-05 20:15 . 2014-02-05 20:15 1060864 ----a-w- c:\windows\SysWow64\mfc71.dll
2014-02-05 17:49 . 2014-02-05 17:50 -------- d-s---w- c:\programdata\Shared Space
2014-02-05 17:48 . 2014-02-05 17:49 -------- d-----w- c:\programdata\COMODO
2014-02-05 17:48 . 2014-02-05 17:49 -------- d-----w- c:\program files\COMODO
2014-02-05 17:48 . 2014-02-06 19:30 -------- d-----w- c:\program files (x86)\Comodo
2014-02-05 17:48 . 2014-02-05 17:48 -------- d-----w- c:\programdata\Comodo Downloader
2014-02-05 15:02 . 2014-02-05 15:02 388096 ----a-r- c:\users\Administrator\AppData\Roaming\Microsoft\Installer\{45A66726-69BC-466B-A7A4-12FCBA4883D7}\HiJackThis.exe
2014-02-04 15:27 . 2014-02-04 15:27 21840 ----a-w- c:\windows\SysWow64\SIntfNT.dll
2014-02-04 15:27 . 2014-02-04 15:27 17212 ----a-w- c:\windows\SysWow64\SIntf32.dll
2014-02-04 15:27 . 2014-02-04 15:27 12067 ----a-w- c:\windows\SysWow64\SIntf16.dll
2014-02-03 16:28 . 2014-02-05 14:12 -------- d-----w- c:\programdata\Overwolf
2014-02-03 00:14 . 2014-02-03 00:14 -------- d-----w- c:\users\Administrator\AppData\Local\Logitech
2014-02-02 22:13 . 2014-02-02 22:13 -------- d-----w- c:\program files\Common Files\Logitech
2014-02-02 22:13 . 2014-02-02 22:13 -------- d-----w- c:\program files\Logitech
2014-02-02 21:03 . 2014-02-02 21:03 466456 ----a-w- c:\windows\system32\wrap_oal.dll
2014-02-02 21:03 . 2014-02-02 21:03 444952 ----a-w- c:\windows\SysWow64\wrap_oal.dll
2014-02-02 21:03 . 2014-02-02 21:03 122904 ----a-w- c:\windows\system32\OpenAL32.dll
2014-02-02 21:03 . 2014-02-02 21:03 -------- d-----w- c:\program files (x86)\OpenAL
2014-02-02 20:40 . 2014-02-02 21:03 109080 ----a-w- c:\windows\SysWow64\OpenAL32.dll
2014-02-02 20:40 . 2014-02-02 20:40 -------- d-----w- c:\programdata\Logs
2014-02-02 20:20 . 2014-02-02 20:20 -------- d-----w- c:\users\Administrator\AppData\Local\Codemasters
2014-02-02 18:55 . 2014-02-05 15:33 282104 ----a-w- c:\windows\SysWow64\PnkBstrB.xtr
2014-02-02 18:54 . 2014-02-02 18:54 -------- d-----w- c:\users\Administrator\AppData\Local\PunkBuster
2014-02-02 15:05 . 2014-02-05 15:33 282104 ----a-w- c:\windows\SysWow64\PnkBstrB.exe
2014-02-02 15:05 . 2014-02-05 15:33 234768 ----a-w- c:\windows\SysWow64\PnkBstrB.ex0
2014-02-02 15:05 . 2014-02-02 19:02 76888 ----a-w- c:\windows\SysWow64\PnkBstrA.exe
2014-02-02 15:05 . 2014-02-01 04:14 2484592 ----a-w- c:\windows\SysWow64\pbsvc_p4f.exe
2014-01-30 20:12 . 2014-01-30 20:12 -------- d-----w- c:\programdata\Oracle
2014-01-30 20:12 . 2014-01-30 20:12 -------- d-----w- c:\program files (x86)\Common Files\Java
2014-01-30 20:11 . 2014-01-30 20:11 96168 ----a-w- c:\windows\SysWow64\WindowsAccessBridge-32.dll
2014-01-30 20:11 . 2014-01-30 20:11 -------- d-----w- c:\program files (x86)\Java
2014-01-30 20:04 . 2014-02-06 22:15 -------- d-----w- c:\users\Administrator\AppData\Roaming\.minecraft
2014-01-30 19:02 . 2014-01-30 19:02 -------- d-----w- c:\program files (x86)\Microsoft Works
2014-01-30 19:01 . 2014-01-30 19:01 -------- d-----w- c:\windows\PCHEALTH
2014-01-30 19:00 . 2014-01-30 19:00 -------- d-----w- c:\program files\Microsoft Office
2014-01-30 19:00 . 2014-01-30 19:00 -------- d-----w- c:\users\Administrator\AppData\Local\Microsoft Help
2014-01-30 19:00 . 2014-01-30 19:02 -------- d-----w- c:\programdata\Microsoft Help
2014-01-30 18:59 . 2014-01-30 18:59 -------- d-----r- C:\MSOCache
2014-01-26 23:33 . 2014-01-26 23:33 -------- d-----w- c:\users\Administrator\AppData\Roaming\Guild Wars 2
2014-01-22 15:24 . 2014-01-22 16:28 -------- d-----w- c:\program files (x86)\McAfee Security Scan
2014-01-22 15:24 . 2014-01-22 15:24 -------- d-----w- c:\programdata\McAfee
2014-01-21 17:04 . 2014-01-21 17:04 -------- d-----w- c:\programdata\Caphyon
2014-01-21 17:03 . 2014-01-23 16:19 -------- d-----w- c:\program files (x86)\QuadCoreM2
2014-01-21 17:01 . 2014-01-21 17:01 -------- d-----w- c:\users\Administrator\AppData\Roaming\Quadcore Games
2014-01-20 16:21 . 2014-01-20 16:21 -------- d-----w- c:\users\Administrator\AppData\Local\Microsoft Games
2014-01-18 18:57 . 2014-01-18 18:57 -------- d-----w- c:\users\Administrator\AppData\Local\Gameforge4d
2014-01-18 18:56 . 2014-01-30 15:51 -------- d-----w- c:\program files (x86)\GameforgeLive
2014-01-17 15:28 . 2013-12-16 00:54 10315576 ----a-w- c:\programdata\Microsoft\Windows Defender\Definition Updates\{9B130038-512D-49F1-9649-CCED10083234}\mpengine.dll
2014-01-15 14:22 . 2013-11-27 01:41 343040 ----a-w- c:\windows\system32\drivers\usbhub.sys
2014-01-15 14:22 . 2013-11-27 01:41 99840 ----a-w- c:\windows\system32\drivers\usbccgp.sys
2014-01-15 14:22 . 2013-11-27 01:41 53248 ----a-w- c:\windows\system32\drivers\usbehci.sys
2014-01-15 14:22 . 2013-11-27 01:41 325120 ----a-w- c:\windows\system32\drivers\usbport.sys
2014-01-15 14:22 . 2013-11-27 01:41 25600 ----a-w- c:\windows\system32\drivers\usbohci.sys
2014-01-15 14:22 . 2013-11-27 01:41 30720 ----a-w- c:\windows\system32\drivers\usbuhci.sys
2014-01-15 14:22 . 2013-11-27 01:41 7808 ----a-w- c:\windows\system32\drivers\usbd.sys
2014-01-15 14:22 . 2013-11-26 10:32 3156480 ----a-w- c:\windows\system32\win32k.sys
2014-01-15 14:22 . 2013-11-26 11:40 376768 ----a-w- c:\windows\system32\drivers\netio.sys
2014-01-12 10:23 . 2008-06-24 12:45 1414440 ----a-w- c:\windows\SysWow64\ShellManager310E2D762.dll
.
.
.
(((((((((((((((((((((((((((((((((((((((( Find3M výpis ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2014-02-05 19:59 . 2014-01-02 12:23 71048 ----a-w- c:\windows\SysWow64\FlashPlayerCPLApp.cpl
2014-02-05 19:59 . 2014-01-02 12:23 692616 ----a-w- c:\windows\SysWow64\FlashPlayerApp.exe
2014-01-15 22:28 . 2014-01-02 03:21 86054176 ----a-w- c:\windows\system32\MRT.exe
2013-12-25 12:08 . 2013-12-25 12:08 283064 ----a-w- c:\windows\system32\drivers\dtsoftbus01.sys
2013-12-24 11:34 . 2009-08-18 11:49 564632 ----a-w- c:\programdata\Microsoft\IdentityCRL\production\wlidui.dll
2013-12-24 11:34 . 2009-08-18 10:24 22240 ----a-w- c:\programdata\Microsoft\IdentityCRL\production\ppcrlconfig600.dll
2013-12-24 02:14 . 2013-12-24 02:14 940032 ----a-w- c:\windows\system32\MsSpellCheckingFacility.exe
2013-12-24 02:14 . 2013-12-24 02:14 194048 ----a-w- c:\windows\SysWow64\elshyph.dll
2013-12-24 02:14 . 2013-12-24 02:14 942592 ----a-w- c:\windows\system32\jsIntl.dll
2013-12-24 02:14 . 2013-12-24 02:14 90112 ----a-w- c:\windows\system32\SetIEInstalledDate.exe
2013-12-24 02:14 . 2013-12-24 02:14 86016 ----a-w- c:\windows\SysWow64\iesysprep.dll
2013-12-24 02:14 . 2013-12-24 02:14 86016 ----a-w- c:\windows\system32\RegisterIEPKEYs.exe
2013-12-24 02:14 . 2013-12-24 02:14 84992 ----a-w- c:\windows\system32\mshtmled.dll
2013-12-24 02:14 . 2013-12-24 02:14 83968 ----a-w- c:\windows\system32\MshtmlDac.dll
2013-12-24 02:14 . 2013-12-24 02:14 81408 ----a-w- c:\windows\system32\icardie.dll
2013-12-24 02:14 . 2013-12-24 02:14 774144 ----a-w- c:\windows\system32\jscript.dll
2013-12-24 02:14 . 2013-12-24 02:14 77312 ----a-w- c:\windows\system32\tdc.ocx
2013-12-24 02:14 . 2013-12-24 02:14 74240 ----a-w- c:\windows\SysWow64\SetIEInstalledDate.exe
2013-12-24 02:14 . 2013-12-24 02:14 71680 ----a-w- c:\windows\SysWow64\RegisterIEPKEYs.exe
2013-12-24 02:14 . 2013-12-24 02:14 645120 ----a-w- c:\windows\SysWow64\jsIntl.dll
2013-12-24 02:14 . 2013-12-24 02:14 626176 ----a-w- c:\windows\system32\msfeeds.dll
2013-12-24 02:14 . 2013-12-24 02:14 62464 ----a-w- c:\windows\SysWow64\tdc.ocx
2013-12-24 02:14 . 2013-12-24 02:14 62464 ----a-w- c:\windows\system32\pngfilt.dll
2013-12-24 02:14 . 2013-12-24 02:14 61952 ----a-w- c:\windows\SysWow64\MshtmlDac.dll
2013-12-24 02:14 . 2013-12-24 02:14 61952 ----a-w- c:\windows\SysWow64\iesetup.dll
2013-12-24 02:14 . 2013-12-24 02:14 616104 ----a-w- c:\windows\system32\ieapfltr.dat
2013-12-24 02:14 . 2013-12-24 02:14 548352 ----a-w- c:\windows\system32\vbscript.dll
2013-12-24 02:14 . 2013-12-24 02:14 52224 ----a-w- c:\windows\system32\msfeedsbs.dll
2013-12-24 02:14 . 2013-12-24 02:14 51200 ----a-w- c:\windows\SysWow64\ieetwproxystub.dll
2013-12-24 02:14 . 2013-12-24 02:14 48640 ----a-w- c:\windows\SysWow64\mshtmler.dll
2013-12-24 02:14 . 2013-12-24 02:14 48640 ----a-w- c:\windows\system32\mshtmler.dll
2013-12-24 02:14 . 2013-12-24 02:14 48128 ----a-w- c:\windows\system32\imgutil.dll
2013-12-24 02:14 . 2013-12-24 02:14 454656 ----a-w- c:\windows\SysWow64\vbscript.dll
2013-12-24 02:14 . 2013-12-24 02:14 453120 ----a-w- c:\windows\system32\dxtmsft.dll
2013-12-24 02:14 . 2013-12-24 02:14 413696 ----a-w- c:\windows\system32\html.iec
2013-12-24 02:14 . 2013-12-24 02:14 40448 ----a-w- c:\windows\system32\JavaScriptCollectionAgent.dll
2013-12-24 02:14 . 2013-12-24 02:14 36352 ----a-w- c:\windows\SysWow64\imgutil.dll
2013-12-24 02:14 . 2013-12-24 02:14 34816 ----a-w- c:\windows\SysWow64\JavaScriptCollectionAgent.dll
2013-12-24 02:14 . 2013-12-24 02:14 337408 ----a-w- c:\windows\SysWow64\html.iec
2013-12-24 02:14 . 2013-12-24 02:14 30208 ----a-w- c:\windows\system32\licmgr10.dll
2013-12-24 02:14 . 2013-12-24 02:14 296960 ----a-w- c:\windows\system32\dxtrans.dll
2013-12-24 02:14 . 2013-12-24 02:14 263376 ----a-w- c:\windows\system32\iedkcs32.dll
2013-12-24 02:14 . 2013-12-24 02:14 247808 ----a-w- c:\windows\system32\msls31.dll
2013-12-24 02:14 . 2013-12-24 02:14 24576 ----a-w- c:\windows\SysWow64\licmgr10.dll
2013-12-24 02:14 . 2013-12-24 02:14 243200 ----a-w- c:\windows\system32\webcheck.dll
2013-12-24 02:14 . 2013-12-24 02:14 235520 ----a-w- c:\windows\system32\url.dll
2013-12-24 02:14 . 2013-12-24 02:14 235008 ----a-w- c:\windows\system32\elshyph.dll
2013-12-24 02:14 . 2013-12-24 02:14 195584 ----a-w- c:\windows\system32\msrating.dll
2013-12-24 02:14 . 2013-12-24 02:14 182272 ----a-w- c:\windows\SysWow64\msls31.dll
2013-12-24 02:14 . 2013-12-24 02:14 167424 ----a-w- c:\windows\system32\iexpress.exe
2013-12-24 02:14 . 2013-12-24 02:14 151552 ----a-w- c:\windows\SysWow64\iexpress.exe
2013-12-24 02:14 . 2013-12-24 02:14 147968 ----a-w- c:\windows\system32\occache.dll
2013-12-24 02:14 . 2013-12-24 02:14 143872 ----a-w- c:\windows\system32\wextract.exe
2013-12-24 02:14 . 2013-12-24 02:14 139264 ----a-w- c:\windows\SysWow64\wextract.exe
2013-12-24 02:14 . 2013-12-24 02:14 13824 ----a-w- c:\windows\system32\mshta.exe
2013-12-24 02:14 . 2013-12-24 02:14 135680 ----a-w- c:\windows\system32\iepeers.dll
2013-12-24 02:14 . 2013-12-24 02:14 13312 ----a-w- c:\windows\SysWow64\mshta.exe
2013-12-24 02:14 . 2013-12-24 02:14 13312 ----a-w- c:\windows\system32\msfeedssync.exe
2013-12-24 02:14 . 2013-12-24 02:14 131072 ----a-w- c:\windows\system32\IEAdvpack.dll
2013-12-24 02:14 . 2013-12-24 02:14 1228800 ----a-w- c:\windows\system32\mshtmlmedia.dll
2013-12-24 02:14 . 2013-12-24 02:14 112128 ----a-w- c:\windows\SysWow64\ieUnatt.exe
2013-12-24 02:14 . 2013-12-24 02:14 111616 ----a-w- c:\windows\SysWow64\IEAdvpack.dll
2013-12-24 02:14 . 2013-12-24 02:14 105984 ----a-w- c:\windows\system32\iesysprep.dll
2013-12-24 02:14 . 2013-12-24 02:14 1051136 ----a-w- c:\windows\SysWow64\mshtmlmedia.dll
2013-12-24 02:14 . 2013-12-24 02:14 101376 ----a-w- c:\windows\system32\inseng.dll
2013-12-18 16:40 . 2013-12-18 16:40 16896 ----a-w- c:\windows\AsTaskSched.dll
2013-12-06 22:08 . 2013-12-06 22:08 157736 ----a-w- c:\windows\system32\amdhcp64.dll
2013-12-06 22:08 . 2013-12-06 22:08 142304 ----a-w- c:\windows\SysWow64\amdhcp32.dll
2013-12-06 22:07 . 2013-12-06 22:07 78432 ----a-w- c:\windows\system32\atimpc64.dll
2013-12-06 22:07 . 2013-12-06 22:07 78432 ----a-w- c:\windows\system32\amdpcom64.dll
2013-12-06 22:07 . 2013-12-06 22:07 71704 ----a-w- c:\windows\SysWow64\atimpc32.dll
2013-12-06 22:07 . 2013-12-06 22:07 71704 ----a-w- c:\windows\SysWow64\amdpcom32.dll
2013-12-06 22:04 . 2013-11-22 16:26 143304 ----a-w- c:\windows\system32\atiuxp64.dll
2013-12-06 22:03 . 2013-12-06 22:03 126336 ----a-w- c:\windows\SysWow64\atiuxpag.dll
2013-12-06 22:03 . 2013-11-22 16:26 115512 ----a-w- c:\windows\system32\atiu9p64.dll
2013-12-06 22:02 . 2013-11-22 16:26 98496 ----a-w- c:\windows\SysWow64\atiu9pag.dll
2013-12-06 22:01 . 2013-11-22 16:26 1318552 ----a-w- c:\windows\system32\aticfx64.dll
2013-12-06 22:01 . 2013-11-22 16:26 1100216 ----a-w- c:\windows\SysWow64\aticfx32.dll
2013-12-06 22:00 . 2013-11-22 16:26 9753752 ----a-w- c:\windows\system32\atidxx64.dll
2013-12-06 21:59 . 2013-12-06 21:59 8406024 ----a-w- c:\windows\SysWow64\atidxx32.dll
2013-12-06 21:59 . 2013-11-22 16:26 8287008 ----a-w- c:\windows\SysWow64\atiumdva.dll
2013-12-06 21:58 . 2013-11-22 16:25 6630232 ----a-w- c:\windows\SysWow64\atiumdag.dll
2013-12-06 21:57 . 2013-11-22 16:25 8927704 ----a-w- c:\windows\system32\atiumd6a.dll
2013-12-06 21:56 . 2013-11-22 16:25 7751920 ----a-w- c:\windows\system32\atiumd64.dll
2013-12-06 21:52 . 2013-12-06 21:52 13207552 ----a-w- c:\windows\system32\drivers\atikmdag.sys
2013-12-06 21:38 . 2013-12-06 21:38 230912 ----a-w- c:\windows\system32\clinfo.exe
2013-12-06 21:38 . 2013-12-06 21:38 99840 ----a-w- c:\windows\system32\OpenVideo64.dll
2013-12-06 21:38 . 2013-12-06 21:38 83968 ----a-w- c:\windows\SysWow64\OpenVideo.dll
2013-12-06 21:38 . 2013-12-06 21:38 86528 ----a-w- c:\windows\system32\OVDecode64.dll
2013-12-06 21:38 . 2013-12-06 21:38 73728 ----a-w- c:\windows\SysWow64\OVDecode.dll
2013-12-06 21:37 . 2013-12-06 21:37 29382144 ----a-w- c:\windows\system32\amdocl64.dll
2013-12-06 21:35 . 2013-12-06 21:35 24860160 ----a-w- c:\windows\SysWow64\amdocl.dll
2013-12-06 21:33 . 2013-12-06 21:33 63488 ----a-w- c:\windows\system32\OpenCL.dll
2013-12-06 21:33 . 2013-12-06 21:33 57344 ----a-w- c:\windows\SysWow64\OpenCL.dll
2013-12-06 21:26 . 2013-12-06 21:26 129536 ----a-w- c:\windows\system32\coinst_13.251.dll
2013-12-06 21:16 . 2013-12-06 21:16 26352128 ----a-w- c:\windows\system32\atio6axx.dll
2013-12-06 21:13 . 2013-12-06 21:13 368640 ----a-w- c:\windows\system32\atiapfxx.exe
2013-12-06 21:12 . 2013-12-06 21:12 62464 ----a-w- c:\windows\system32\aticalrt64.dll
2013-12-06 21:12 . 2013-12-06 21:12 52224 ----a-w- c:\windows\SysWow64\aticalrt.dll
2013-12-06 21:12 . 2013-12-06 21:12 55808 ----a-w- c:\windows\system32\aticalcl64.dll
.
.
(((((((((((((((((((((((((((((((((( Spouštěcí body v registru )))))))))))))))))))))))))))))))))))))))))))))
.
.
*Poznámka* prázdné záznamy a legitimní výchozí údaje nejsou zobrazeny.
REGEDIT4
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"DAEMON Tools Lite"="c:\program files (x86)\DAEMON Tools Lite\DTLite.exe" [2013-10-28 3675352]
"uTorrent"="c:\users\Administrator\AppData\Roaming\uTorrent\uTorrent.exe" [2014-02-08 905296]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]
"VICTORY Gaming Keyboard"="c:\vlastní programy\Klávesnice\Monitor.exe" [2013-04-09 270336]
"StartCCC"="c:\program files (x86)\ATI Technologies\ATI.ACE\Core-Static\amd64\CLIStart.exe" [2013-12-06 766208]
"NCUpdateHelper"="c:\program files (x86)\NCWest\NCLauncher\NCUpdateHelper.exe" [2013-09-06 528360]
"SunJavaUpdateSched"="c:\program files (x86)\Common Files\Java\Java Update\jusched.exe" [2013-07-02 254336]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorAdmin"= 5 (0x5)
"ConsentPromptBehaviorUser"= 3 (0x3)
"EnableUIADesktopToggle"= 0 (0x0)
.
R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [x]
R2 DCE;Distributed Computing Experiment;c:\program files\DCE\dce.exe;c:\program files\DCE\dce.exe [x]
R2 SkypeUpdate;Skype Updater;c:\program files (x86)\Skype\Updater\Updater.exe;c:\program files (x86)\Skype\Updater\Updater.exe [x]
R3 cmdvirth;COMODO Virtual Service Manager;c:\program files\COMODO\COMODO Internet Security\cmdvirth.exe;c:\program files\COMODO\COMODO Internet Security\cmdvirth.exe [x]
R3 GPCIDrv;GPCIDrv;c:\program files (x86)\GIGABYTE\GIGABYTE OC_GURU II\GPCIDrv64.sys;c:\program files (x86)\GIGABYTE\GIGABYTE OC_GURU II\GPCIDrv64.sys [x]
R3 IEEtwCollectorService;Internet Explorer ETW Collector Service;c:\windows\system32\IEEtwCollector.exe;c:\windows\SYSNATIVE\IEEtwCollector.exe [x]
R3 RdpVideoMiniport;Remote Desktop Video Miniport Driver;c:\windows\system32\drivers\rdpvideominiport.sys;c:\windows\SYSNATIVE\drivers\rdpvideominiport.sys [x]
R3 terminpt;Microsoft Remote Desktop Input Driver;c:\windows\system32\drivers\terminpt.sys;c:\windows\SYSNATIVE\drivers\terminpt.sys [x]
R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys;c:\windows\SYSNATIVE\drivers\tsusbflt.sys [x]
R3 TsUsbGD;Remote Desktop Generic USB Device;c:\windows\system32\drivers\TsUsbGD.sys;c:\windows\SYSNATIVE\drivers\TsUsbGD.sys [x]
R3 WatAdminSvc;Služba Technologie aktivace Windows;c:\windows\system32\Wat\WatAdminSvc.exe;c:\windows\SYSNATIVE\Wat\WatAdminSvc.exe [x]
S1 cmderd;COMODO Internet Security Eradication Driver;c:\windows\system32\DRIVERS\cmderd.sys;c:\windows\SYSNATIVE\DRIVERS\cmderd.sys [x]
S1 cmdGuard;COMODO Internet Security Sandbox Driver;c:\windows\system32\DRIVERS\cmdguard.sys;c:\windows\SYSNATIVE\DRIVERS\cmdguard.sys [x]
S1 cmdHlp;COMODO Internet Security Helper Driver;c:\windows\system32\DRIVERS\cmdhlp.sys;c:\windows\SYSNATIVE\DRIVERS\cmdhlp.sys [x]
S1 dtsoftbus01;DAEMON Tools Virtual Bus Driver;c:\windows\system32\DRIVERS\dtsoftbus01.sys;c:\windows\SYSNATIVE\DRIVERS\dtsoftbus01.sys [x]
S2 AMD External Events Utility;AMD External Events Utility;c:\windows\system32\atiesrxx.exe;c:\windows\SYSNATIVE\atiesrxx.exe [x]
S2 AMD FUEL Service;AMD FUEL Service;c:\program files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe;c:\program files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe [x]
S2 AODDriver4.2.0;AODDriver4.2.0;c:\program files\ATI Technologies\ATI.ACE\Fuel\amd64\AODDriver2.sys;c:\program files\ATI Technologies\ATI.ACE\Fuel\amd64\AODDriver2.sys [x]
S2 MBAMService;MBAMService;c:\vlastní programy\Malwarebytes' Anti-Malware\mbamservice.exe;c:\vlastní programy\Malwarebytes' Anti-Malware\mbamservice.exe [x]
S2 Secunia PSI Agent;Secunia PSI Agent;c:\program files (x86)\Secunia\PSI\PSIA.exe;c:\program files (x86)\Secunia\PSI\PSIA.exe [x]
S2 Secunia Update Agent;Secunia Update Agent;c:\program files (x86)\Secunia\PSI\sua.exe;c:\program files (x86)\Secunia\PSI\sua.exe [x]
S2 TeamViewer9;TeamViewer 9;c:\vlastní programy\Team Viewer\TeamViewer_Service.exe;c:\vlastní programy\Team Viewer\TeamViewer_Service.exe [x]
S3 asmthub3;ASMedia USB3 Hub Service;c:\windows\system32\DRIVERS\asmthub3.sys;c:\windows\SYSNATIVE\DRIVERS\asmthub3.sys [x]
S3 asmtxhci;ASMEDIA XHCI Service;c:\windows\system32\DRIVERS\asmtxhci.sys;c:\windows\SYSNATIVE\DRIVERS\asmtxhci.sys [x]
S3 AtiHDAudioService;AMD Function Driver for HD Audio Service;c:\windows\system32\drivers\AtihdW76.sys;c:\windows\SYSNATIVE\drivers\AtihdW76.sys [x]
S3 MBAMProtector;MBAMProtector;c:\windows\system32\drivers\mbam.sys;c:\windows\SYSNATIVE\drivers\mbam.sys [x]
S3 PSI;PSI;c:\windows\system32\DRIVERS\psi_mf_amd64.sys;c:\windows\SYSNATIVE\DRIVERS\psi_mf_amd64.sys [x]
S3 RTL8167;Realtek 8167 NT Driver;c:\windows\system32\DRIVERS\Rt64win7.sys;c:\windows\SYSNATIVE\DRIVERS\Rt64win7.sys [x]
.
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\active setup\installed components\{8A69D345-D564-463c-AFF1-A69D9E530F96}]
2014-02-04 21:18 1211720 ----a-w- c:\program files (x86)\Google\Chrome\Application\32.0.1700.107\Installer\chrmstp.exe
.
Obsah adresáře 'Naplánované úlohy'
.
2014-02-10 c:\windows\Tasks\Adobe Flash Player Updater.job
- c:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2014-01-02 19:59]
.
2014-02-10 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
- c:\program files (x86)\Google\Update\GoogleUpdate.exe [2013-12-18 16:05]
.
2014-02-10 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
- c:\program files (x86)\Google\Update\GoogleUpdate.exe [2013-12-18 16:05]
.
.
--------- X64 Entries -----------
.
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"RTHDVCPL"="c:\program files\Realtek\Audio\HDA\RtkNGUI64.exe" [2012-08-07 6827664]
"Start WingMan Profiler"="c:\program files\Logitech\Gaming Software\LWEMon.exe" [2010-06-14 190536]
"COMODO Internet Security"="c:\program files\COMODO\COMODO Internet Security\cistray.exe" [2013-11-11 1612504]
.
------- Doplňkový sken -------
.
uLocal Page = c:\windows\system32\blank.htm
uStart Page =
hxxp://google.cz/mLocal Page = c:\windows\SysWOW64\blank.htm
IE: E&xportovat do aplikace Microsoft Excel - c:\progra~2\MICROS~2\Office12\EXCEL.EXE/3000
TCP: DhcpNameServer = 10.2.1.1 192.168.1.1
TCP: Interfaces\{5304181D-7479-4F61-97F7-4FEE58879AD5}: NameServer = 156.154.70.25,156.154.71.25
FF - ProfilePath - c:\users\Administrator\AppData\Roaming\Mozilla\Firefox\Profiles\8floh87a.default\
.
- - - - NEPLATNÉ POLOŽKY ODSTRANĚNÉ Z REGISTRU - - - -
.
Wow6432Node-HKCU-Run-Overwolf - c:\program files (x86)\Overwolf\Overwolf.exe
Wow6432Node-HKLM-Run-YTDownloader - c:\program files (x86)\YTDownloader\YTDownloader.exe
HKLM_Wow6432Node-ActiveSetup-{2D46B6DC-2207-486B-B523-A557E6D54B47} - start
BHO-{A5A51D2A-505A-4D84-AFC6-E0FA87E47B8C} - c:\programdata\ShopperPro\ShopperPro64.dll
ShellIconOverlayIdentifiers-{472083B0-C522-11CF-8763-00608CC02F24} - (no file)
AddRemove-Steam - c:\vlastní programy\Steam\uninstall.exe
.
.
.
--------------------- ZAMKNUTÉ KLÍČE V REGISTRU ---------------------
.
[HKEY_USERS\S-1-5-21-126839651-2528838494-2891002779-500\Software\Microsoft\Internet Explorer\Approved Extensions]
@Denied: (2) (Administrator)
"{8E5E2654-AD2D-48BF-AC2D-D17F00898D06}"=hex:51,66,7a,6c,4c,1d,3b,1b,44,39,4e,
91,12,fd,d9,03,b5,27,8e,20,05,c8,c0,12
"{318A227B-5E9F-45BD-8999-7F8F10CA4CF5}"=hex:51,66,7a,6c,4c,1d,3b,1b,6b,3d,9a,
2e,a0,0e,db,0e,90,93,20,d0,15,8b,01,e1
"{11111111-1111-1111-1111-110311551110}"=hex:51,66,7a,6c,4c,1d,3b,1b,01,0e,01,
0e,2e,41,77,5a,08,1b,4e,5c,14,14,5c,04
"{11111111-1111-1111-1111-110411821192}"=hex:51,66,7a,6c,4c,1d,3b,1b,01,0e,01,
0e,2e,41,77,5a,08,1b,4e,5b,14,c3,5c,86
.
[HKEY_USERS\S-1-5-21-126839651-2528838494-2891002779-500\Software\Microsoft\Internet Explorer\User Preferences]
@Denied: (2) (Administrator)
"88D7D0879DAB32E14DE5B3A805A34F98AFF34F5977"=hex:01,00,00,00,d0,8c,9d,df,01,15,
d1,11,8c,7a,00,c0,4f,c2,97,eb,01,00,00,00,26,cb,df,0b,2b,aa,5d,47,84,25,26,\
"2D53CFFC5C1A3DD2E97B7979AC2A92BD59BC839E81"=hex:01,00,00,00,d0,8c,9d,df,01,15,
d1,11,8c,7a,00,c0,4f,c2,97,eb,01,00,00,00,26,cb,df,0b,2b,aa,5d,47,84,25,26,\
.
[HKEY_USERS\S-1-5-21-126839651-2528838494-2891002779-500\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.3g2\UserChoice]
@Denied: (2) (Administrator)
"Progid"="WMP11.AssocFile.3G2"
.
[HKEY_USERS\S-1-5-21-126839651-2528838494-2891002779-500\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.3gp\UserChoice]
@Denied: (2) (Administrator)
"Progid"="WMP11.AssocFile.3GP"
.
[HKEY_USERS\S-1-5-21-126839651-2528838494-2891002779-500\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.3gp2\UserChoice]
@Denied: (2) (Administrator)
"Progid"="WMP11.AssocFile.3G2"
.
[HKEY_USERS\S-1-5-21-126839651-2528838494-2891002779-500\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.3gpp\UserChoice]
@Denied: (2) (Administrator)
"Progid"="WMP11.AssocFile.3GP"
.
[HKEY_USERS\S-1-5-21-126839651-2528838494-2891002779-500\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.AAC\UserChoice]
@Denied: (2) (Administrator)
"Progid"="WMP11.AssocFile.ADTS"
.
[HKEY_USERS\S-1-5-21-126839651-2528838494-2891002779-500\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.ac3\UserChoice]
@Denied: (2) (Administrator)
"Progid"="KLCP.WMP.ac3"
.
[HKEY_USERS\S-1-5-21-126839651-2528838494-2891002779-500\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.ADT\UserChoice]
@Denied: (2) (Administrator)
"Progid"="WMP11.AssocFile.ADTS"
.
[HKEY_USERS\S-1-5-21-126839651-2528838494-2891002779-500\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.ADTS\UserChoice]
@Denied: (2) (Administrator)
"Progid"="WMP11.AssocFile.ADTS"
.
[HKEY_USERS\S-1-5-21-126839651-2528838494-2891002779-500\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.aif\UserChoice]
@Denied: (2) (Administrator)
"Progid"="WMP11.AssocFile.AIFF"
.
[HKEY_USERS\S-1-5-21-126839651-2528838494-2891002779-500\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.aifc\UserChoice]
@Denied: (2) (Administrator)
"Progid"="WMP11.AssocFile.AIFF"
.
[HKEY_USERS\S-1-5-21-126839651-2528838494-2891002779-500\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.aiff\UserChoice]
@Denied: (2) (Administrator)
"Progid"="WMP11.AssocFile.AIFF"
.
[HKEY_USERS\S-1-5-21-126839651-2528838494-2891002779-500\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.alac\UserChoice]
@Denied: (2) (Administrator)
"Progid"="KLCP.WMP.alac"
.
[HKEY_USERS\S-1-5-21-126839651-2528838494-2891002779-500\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.amr\UserChoice]
@Denied: (2) (Administrator)
"Progid"="KLCP.WMP.amr"
.
[HKEY_USERS\S-1-5-21-126839651-2528838494-2891002779-500\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.amv\UserChoice]
@Denied: (2) (Administrator)
"Progid"="KLCP.WMP.amv"
.
[HKEY_USERS\S-1-5-21-126839651-2528838494-2891002779-500\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.aob\UserChoice]
@Denied: (2) (Administrator)
"Progid"="KLCP.WMP.aob"
.
[HKEY_USERS\S-1-5-21-126839651-2528838494-2891002779-500\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.ape\UserChoice]
@Denied: (2) (Administrator)
"Progid"="KLCP.WMP.ape"
.
[HKEY_USERS\S-1-5-21-126839651-2528838494-2891002779-500\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.asf\UserChoice]
@Denied: (2) (Administrator)
"Progid"="WMP11.AssocFile.ASF"
.
[HKEY_USERS\S-1-5-21-126839651-2528838494-2891002779-500\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.asx\UserChoice]
@Denied: (2) (Administrator)
"Progid"="WMP11.AssocFile.ASX"
.
[HKEY_USERS\S-1-5-21-126839651-2528838494-2891002779-500\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.au\UserChoice]
@Denied: (2) (Administrator)
"Progid"="WMP11.AssocFile.AU"
.
[HKEY_USERS\S-1-5-21-126839651-2528838494-2891002779-500\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.avi\UserChoice]
@Denied: (2) (Administrator)
"Progid"="WMP11.AssocFile.AVI"
.
[HKEY_USERS\S-1-5-21-126839651-2528838494-2891002779-500\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.bdmv\UserChoice]
@Denied: (2) (Administrator)
"Progid"="KLCP.WMP.bdmv"
.
[HKEY_USERS\S-1-5-21-126839651-2528838494-2891002779-500\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.caf\UserChoice]
@Denied: (2) (Administrator)
"Progid"="KLCP.WMP.caf"
.
[HKEY_USERS\S-1-5-21-126839651-2528838494-2891002779-500\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.cda\UserChoice]
@Denied: (2) (Administrator)
"Progid"="WMP11.AssocFile.CDA"
.
[HKEY_USERS\S-1-5-21-126839651-2528838494-2891002779-500\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.divx\UserChoice]
@Denied: (2) (Administrator)
"Progid"="KLCP.WMP.divx"
.
[HKEY_USERS\S-1-5-21-126839651-2528838494-2891002779-500\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.dts\UserChoice]
@Denied: (2) (Administrator)
"Progid"="KLCP.WMP.dts"
.
[HKEY_USERS\S-1-5-21-126839651-2528838494-2891002779-500\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.dv\UserChoice]
@Denied: (2) (Administrator)
"Progid"="KLCP.WMP.dv"
.
[HKEY_USERS\S-1-5-21-126839651-2528838494-2891002779-500\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.evo\UserChoice]
@Denied: (2) (Administrator)
"Progid"="KLCP.WMP.evo"
.
[HKEY_USERS\S-1-5-21-126839651-2528838494-2891002779-500\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.f4v\UserChoice]
@Denied: (2) (Administrator)
"Progid"="KLCP.WMP.f4v"
.
[HKEY_USERS\S-1-5-21-126839651-2528838494-2891002779-500\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.flac\UserChoice]
@Denied: (2) (Administrator)
"Progid"="KLCP.WMP.flac"
.
[HKEY_USERS\S-1-5-21-126839651-2528838494-2891002779-500\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.flv\UserChoice]
@Denied: (2) (Administrator)
"Progid"="KLCP.WMP.flv"
.
[HKEY_USERS\S-1-5-21-126839651-2528838494-2891002779-500\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.hdmov\UserChoice]
@Denied: (2) (Administrator)
"Progid"="KLCP.WMP.hdmov"
.
[HKEY_USERS\S-1-5-21-126839651-2528838494-2891002779-500\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.htm\UserChoice]
@Denied: (2) (Administrator)
"Progid"="FirefoxHTML"
.
[HKEY_USERS\S-1-5-21-126839651-2528838494-2891002779-500\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.html\UserChoice]
@Denied: (2) (Administrator)
"Progid"="FirefoxHTML"
.
[HKEY_USERS\S-1-5-21-126839651-2528838494-2891002779-500\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.ifo\UserChoice]
@Denied: (2) (Administrator)
"Progid"="KLCP.WMP.ifo"
.
[HKEY_USERS\S-1-5-21-126839651-2528838494-2891002779-500\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.m1v\UserChoice]
@Denied: (2) (Administrator)
"Progid"="WMP11.AssocFile.MPEG"
.
[HKEY_USERS\S-1-5-21-126839651-2528838494-2891002779-500\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.m2p\UserChoice]
@Denied: (2) (Administrator)
"Progid"="KLCP.WMP.m2p"
.
[HKEY_USERS\S-1-5-21-126839651-2528838494-2891002779-500\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.M2T\UserChoice]
@Denied: (2) (Administrator)
"Progid"="WMP11.AssocFile.M2TS"
.
[HKEY_USERS\S-1-5-21-126839651-2528838494-2891002779-500\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.M2TS\UserChoice]
@Denied: (2) (Administrator)
"Progid"="WMP11.AssocFile.M2TS"
.
[HKEY_USERS\S-1-5-21-126839651-2528838494-2891002779-500\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.M2V\UserChoice]
@Denied: (2) (Administrator)
"Progid"="WMP11.AssocFile.MPEG"
.
[HKEY_USERS\S-1-5-21-126839651-2528838494-2891002779-500\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.m3u\UserChoice]
@Denied: (2) (Administrator)
"Progid"="WMP11.AssocFile.m3u"
.
[HKEY_USERS\S-1-5-21-126839651-2528838494-2891002779-500\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.m4a\UserChoice]
@Denied: (2) (Administrator)
"Progid"="WMP11.AssocFile.M4A"
.
[HKEY_USERS\S-1-5-21-126839651-2528838494-2891002779-500\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.m4v\UserChoice]
@Denied: (2) (Administrator)
"Progid"="WMP11.AssocFile.MP4"
.
[HKEY_USERS\S-1-5-21-126839651-2528838494-2891002779-500\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.mid\UserChoice]
@Denied: (2) (Administrator)
"Progid"="WMP11.AssocFile.MIDI"
.
[HKEY_USERS\S-1-5-21-126839651-2528838494-2891002779-500\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.midi\UserChoice]
@Denied: (2) (Administrator)
"Progid"="WMP11.AssocFile.MIDI"
.
[HKEY_USERS\S-1-5-21-126839651-2528838494-2891002779-500\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.mka\UserChoice]
@Denied: (2) (Administrator)
"Progid"="KLCP.WMP.mka"
.
[HKEY_USERS\S-1-5-21-126839651-2528838494-2891002779-500\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.mkv\UserChoice]
@Denied: (2) (Administrator)
"Progid"="KLCP.WMP.mkv"
.
[HKEY_USERS\S-1-5-21-126839651-2528838494-2891002779-500\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.mlp\UserChoice]
@Denied: (2) (Administrator)
"Progid"="KLCP.WMP.mlp"
.
[HKEY_USERS\S-1-5-21-126839651-2528838494-2891002779-500\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.MOD\UserChoice]
@Denied: (2) (Administrator)
"Progid"="WMP11.AssocFile.MPEG"
.
[HKEY_USERS\S-1-5-21-126839651-2528838494-2891002779-500\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.mov\UserChoice]
@Denied: (2) (Administrator)
"Progid"="WMP11.AssocFile.MOV"
.
[HKEY_USERS\S-1-5-21-126839651-2528838494-2891002779-500\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.mp2\UserChoice]
@Denied: (2) (Administrator)
"Progid"="WMP11.AssocFile.MP3"
.
[HKEY_USERS\S-1-5-21-126839651-2528838494-2891002779-500\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.mp2v\UserChoice]
@Denied: (2) (Administrator)
"Progid"="WMP11.AssocFile.MPEG"
.
[HKEY_USERS\S-1-5-21-126839651-2528838494-2891002779-500\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.mp3\UserChoice]
@Denied: (2) (Administrator)
"Progid"="WMP11.AssocFile.MP3"
.
[HKEY_USERS\S-1-5-21-126839651-2528838494-2891002779-500\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.mp4\UserChoice]
@Denied: (2) (Administrator)
"Progid"="WMP11.AssocFile.MP4"
.
[HKEY_USERS\S-1-5-21-126839651-2528838494-2891002779-500\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.mp4v\UserChoice]
@Denied: (2) (Administrator)
"Progid"="WMP11.AssocFile.MP4"
.
[HKEY_USERS\S-1-5-21-126839651-2528838494-2891002779-500\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.mpa\UserChoice]
@Denied: (2) (Administrator)
"Progid"="WMP11.AssocFile.MPEG"
.
[HKEY_USERS\S-1-5-21-126839651-2528838494-2891002779-500\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.mpc\UserChoice]
@Denied: (2) (Administrator)
"Progid"="KLCP.WMP.mpc"
.
[HKEY_USERS\S-1-5-21-126839651-2528838494-2891002779-500\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.mpe\UserChoice]
@Denied: (2) (Administrator)
"Progid"="WMP11.AssocFile.MPEG"
.
[HKEY_USERS\S-1-5-21-126839651-2528838494-2891002779-500\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.mpeg\UserChoice]
@Denied: (2) (Administrator)
"Progid"="WMP11.AssocFile.MPEG"
.
[HKEY_USERS\S-1-5-21-126839651-2528838494-2891002779-500\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.mpg\UserChoice]
@Denied: (2) (Administrator)
"Progid"="WMP11.AssocFile.MPEG"
.
[HKEY_USERS\S-1-5-21-126839651-2528838494-2891002779-500\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.mpl\UserChoice]
@Denied: (2) (Administrator)
"Progid"="KLCP.WMP.mpl"
.
[HKEY_USERS\S-1-5-21-126839651-2528838494-2891002779-500\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.mpls\UserChoice]
@Denied: (2) (Administrator)
"Progid"="KLCP.WMP.mpls"
.
[HKEY_USERS\S-1-5-21-126839651-2528838494-2891002779-500\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.mpv2\UserChoice]
@Denied: (2) (Administrator)
"Progid"="WMP11.AssocFile.MPEG"
.
[HKEY_USERS\S-1-5-21-126839651-2528838494-2891002779-500\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.mpv4\UserChoice]
@Denied: (2) (Administrator)
"Progid"="KLCP.WMP.mpv4"
.
[HKEY_USERS\S-1-5-21-126839651-2528838494-2891002779-500\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.MTS\UserChoice]
@Denied: (2) (Administrator)
"Progid"="WMP11.AssocFile.M2TS"
.
[HKEY_USERS\S-1-5-21-126839651-2528838494-2891002779-500\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.mxf\UserChoice]
@Denied: (2) (Administrator)
"Progid"="KLCP.WMP.mxf"
.
[HKEY_USERS\S-1-5-21-126839651-2528838494-2891002779-500\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.ofr\UserChoice]
@Denied: (2) (Administrator)
"Progid"="KLCP.WMP.ofr"
.
[HKEY_USERS\S-1-5-21-126839651-2528838494-2891002779-500\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.ofs\UserChoice]
@Denied: (2) (Administrator)
"Progid"="KLCP.WMP.ofs"
.
[HKEY_USERS\S-1-5-21-126839651-2528838494-2891002779-500\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.oga\UserChoice]
@Denied: (2) (Administrator)
"Progid"="KLCP.WMP.oga"
.
[HKEY_USERS\S-1-5-21-126839651-2528838494-2891002779-500\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.ogg\UserChoice]
@Denied: (2) (Administrator)
"Progid"="KLCP.WMP.ogg"
.
[HKEY_USERS\S-1-5-21-126839651-2528838494-2891002779-500\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.ogm\UserChoice]
@Denied: (2) (Administrator)
"Progid"="KLCP.WMP.ogm"
.
[HKEY_USERS\S-1-5-21-126839651-2528838494-2891002779-500\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.ogv\UserChoice]
@Denied: (2) (Administrator)
"Progid"="KLCP.WMP.ogv"
.
[HKEY_USERS\S-1-5-21-126839651-2528838494-2891002779-500\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.opus\UserChoice]
@Denied: (2) (Administrator)
"Progid"="KLCP.WMP.opus"
.
[HKEY_USERS\S-1-5-21-126839651-2528838494-2891002779-500\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.pdf\UserChoice]
@Denied: (2) (Administrator)
"Progid"="Applications\\wordpad.exe"
.
[HKEY_USERS\S-1-5-21-126839651-2528838494-2891002779-500\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.pls\UserChoice]
@Denied: (2) (Administrator)
"Progid"="KLCP.WMP.pls"
.
[HKEY_USERS\S-1-5-21-126839651-2528838494-2891002779-500\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.ra\UserChoice]
@Denied: (2) (Administrator)
"Progid"="KLCP.WMP.ra"
.
[HKEY_USERS\S-1-5-21-126839651-2528838494-2891002779-500\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.ram\UserChoice]
@Denied: (2) (Administrator)
"Progid"="KLCP.WMP.ram"
.
[HKEY_USERS\S-1-5-21-126839651-2528838494-2891002779-500\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.rec\UserChoice]
@Denied: (2) (Administrator)
"Progid"="KLCP.WMP.rec"
.
[HKEY_USERS\S-1-5-21-126839651-2528838494-2891002779-500\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.rm\UserChoice]
@Denied: (2) (Administrator)
"Progid"="KLCP.WMP.rm"
.
[HKEY_USERS\S-1-5-21-126839651-2528838494-2891002779-500\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.rmi\UserChoice]
@Denied: (2) (Administrator)
"Progid"="WMP11.AssocFile.MIDI"
.
[HKEY_USERS\S-1-5-21-126839651-2528838494-2891002779-500\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.rmvb\UserChoice]
@Denied: (2) (Administrator)
"Progid"="KLCP.WMP.rmvb"
.
[HKEY_USERS\S-1-5-21-126839651-2528838494-2891002779-500\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.shtml\UserChoice]
@Denied: (2) (Administrator)
"Progid"="FirefoxHTML"
.
[HKEY_USERS\S-1-5-21-126839651-2528838494-2891002779-500\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.snd\UserChoice]
@Denied: (2) (Administrator)
"Progid"="WMP11.AssocFile.AU"
.
[HKEY_USERS\S-1-5-21-126839651-2528838494-2891002779-500\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.spx\UserChoice]
@Denied: (2) (Administrator)
"Progid"="KLCP.WMP.spx"
.
[HKEY_USERS\S-1-5-21-126839651-2528838494-2891002779-500\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.tak\UserChoice]
@Denied: (2) (Administrator)
"Progid"="KLCP.WMP.tak"
.
[HKEY_USERS\S-1-5-21-126839651-2528838494-2891002779-500\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.tp\UserChoice]
@Denied: (2) (Administrator)
"Progid"="KLCP.WMP.tp"
.
[HKEY_USERS\S-1-5-21-126839651-2528838494-2891002779-500\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.tps\UserChoice]
@Denied: (2) (Administrator)
"Progid"="KLCP.WMP.tps"
.
[HKEY_USERS\S-1-5-21-126839651-2528838494-2891002779-500\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.trp\UserChoice]
@Denied: (2) (Administrator)
"Progid"="KLCP.WMP.trp"
.
[HKEY_USERS\S-1-5-21-126839651-2528838494-2891002779-500\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.TS\UserChoice]
@Denied: (2) (Administrator)
"Progid"="WMP11.AssocFile.TTS"
.
[HKEY_USERS\S-1-5-21-126839651-2528838494-2891002779-500\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.tta\UserChoice]
@Denied: (2) (Administrator)
"Progid"="KLCP.WMP.tta"
.
[HKEY_USERS\S-1-5-21-126839651-2528838494-2891002779-500\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.TTS\UserChoice]
@Denied: (2) (Administrator)
"Progid"="WMP11.AssocFile.TTS"
.
[HKEY_USERS\S-1-5-21-126839651-2528838494-2891002779-500\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.vob\UserChoice]
@Denied: (2) (Administrator)
"Progid"="KLCP.WMP.vob"
.
[HKEY_USERS\S-1-5-21-126839651-2528838494-2891002779-500\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.wav\UserChoice]
@Denied: (2) (Administrator)
"Progid"="WMP11.AssocFile.WAV"
.
[HKEY_USERS\S-1-5-21-126839651-2528838494-2891002779-500\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.wax\UserChoice]
@Denied: (2) (Administrator)
"Progid"="WMP11.AssocFile.WAX"
.
[HKEY_USERS\S-1-5-21-126839651-2528838494-2891002779-500\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.webm\UserChoice]
@Denied: (2) (Administrator)
"Progid"="KLCP.WMP.webm"
.
[HKEY_USERS\S-1-5-21-126839651-2528838494-2891002779-500\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.wm\UserChoice]
@Denied: (2) (Administrator)
"Progid"="WMP11.AssocFile.ASF"
.
[HKEY_USERS\S-1-5-21-126839651-2528838494-2891002779-500\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.wma\UserChoice]
@Denied: (2) (Administrator)
"Progid"="WMP11.AssocFile.WMA"
.
[HKEY_USERS\S-1-5-21-126839651-2528838494-2891002779-500\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.wmd\UserChoice]
@Denied: (2) (Administrator)
"Progid"="WMP11.AssocFile.WMD"
.
[HKEY_USERS\S-1-5-21-126839651-2528838494-2891002779-500\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.wms\UserChoice]
@Denied: (2) (Administrator)
"Progid"="WMP11.AssocFile.WMS"
.
[HKEY_USERS\S-1-5-21-126839651-2528838494-2891002779-500\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.wmv\UserChoice]
@Denied: (2) (Administrator)
"Progid"="WMP11.AssocFile.WMV"
.
[HKEY_USERS\S-1-5-21-126839651-2528838494-2891002779-500\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.wmx\UserChoice]
@Denied: (2) (Administrator)
"Progid"="WMP11.AssocFile.ASX"
.
[HKEY_USERS\S-1-5-21-126839651-2528838494-2891002779-500\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.wmz\UserChoice]
@Denied: (2) (Administrator)
"Progid"="WMP11.AssocFile.WMZ"
.
[HKEY_USERS\S-1-5-21-126839651-2528838494-2891002779-500\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.wpl\UserChoice]
@Denied: (2) (Administrator)
"Progid"="WMP11.AssocFile.WPL"
.
[HKEY_USERS\S-1-5-21-126839651-2528838494-2891002779-500\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.wv\UserChoice]
@Denied: (2) (Administrator)
"Progid"="KLCP.WMP.wv"
.
[HKEY_USERS\S-1-5-21-126839651-2528838494-2891002779-500\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.wvx\UserChoice]
@Denied: (2) (Administrator)
"Progid"="WMP11.AssocFile.WVX"
.
[HKEY_USERS\S-1-5-21-126839651-2528838494-2891002779-500\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.xht\UserChoice]
@Denied: (2) (Administrator)
"Progid"="FirefoxHTML"
.
[HKEY_USERS\S-1-5-21-126839651-2528838494-2891002779-500\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.xhtml\UserChoice]
@Denied: (2) (Administrator)
"Progid"="FirefoxHTML"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil64_12_0_0_44_ActiveX.exe,-101"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\Elevation]
"Enabled"=dword:00000001
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\LocalServer32]
@="c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil64_12_0_0_44_ActiveX.exe"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="IFlashBroker5"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil32_12_0_0_44_ActiveX.exe,-101"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\Elevation]
"Enabled"=dword:00000001
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\LocalServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil32_12_0_0_44_ActiveX.exe"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@="Shockwave Flash Object"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\InprocServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_12_0_0_44.ocx"
"ThreadingModel"="Apartment"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\MiscStatus]
@="0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ProgID]
@="ShockwaveFlash.ShockwaveFlash.11"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_12_0_0_44.ocx, 1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\TypeLib]
@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\Version]
@="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
@="ShockwaveFlash.ShockwaveFlash"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@="Macromedia Flash Factory Object"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\InprocServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_12_0_0_44.ocx"
"ThreadingModel"="Apartment"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ProgID]
@="FlashFactory.FlashFactory.1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_12_0_0_44.ocx, 1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\TypeLib]
@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\Version]
@="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
@="FlashFactory.FlashFactory"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="IFlashBroker5"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\PCW\Security]
@Denied: (Full) (Everyone)
.
Celkový čas: 2014-02-10 15:24:10
ComboFix-quarantined-files.txt 2014-02-10 14:24
.
Před spuštěním: Volných bajtů: 1 734 213 197 824
Po spuštění: Volných bajtů: 1 734 053 605 376
.
- - End Of File - - ADCE490D7D3CE7EB8402EBAD80195ACF
A36C5E4F47E84449FF07ED3517B43A31