1. log TDSSKiller 2/2:
15:50:32.0183 3988 [ F0344071948D1A1FA732231785A0664C ] Themes C:\Windows\system32\themeservice.dll
15:50:32.0199 3988 Themes - ok
15:50:32.0214 3988 [ E40E80D0304A73E8D269F7141D77250B ] THREADORDER C:\Windows\system32\mmcss.dll
15:50:32.0214 3988 THREADORDER - ok
15:50:32.0230 3988 [ 7E7AFD841694F6AC397E99D75CEAD49D ] TrkWks C:\Windows\System32\trkwks.dll
15:50:32.0246 3988 TrkWks - ok
15:50:32.0277 3988 [ 773212B2AAA24C1E31F10246B15B276C ] TrustedInstaller C:\Windows\servicing\TrustedInstaller.exe
15:50:32.0277 3988 TrustedInstaller - ok
15:50:32.0292 3988 [ CE18B2CDFC837C99E5FAE9CA6CBA5D30 ] tssecsrv C:\Windows\system32\DRIVERS\tssecsrv.sys
15:50:32.0292 3988 tssecsrv - ok
15:50:32.0339 3988 [ D11C783E3EF9A3C52C0EBE83CC5000E9 ] TsUsbFlt C:\Windows\system32\drivers\tsusbflt.sys
15:50:32.0355 3988 TsUsbFlt - ok
15:50:32.0402 3988 [ 3566A8DAAFA27AF944F5D705EAA64894 ] tunnel C:\Windows\system32\DRIVERS\tunnel.sys
15:50:32.0417 3988 tunnel - ok
15:50:32.0417 3988 [ B4DD609BD7E282BFC683CEC7EAAAAD67 ] uagp35 C:\Windows\system32\DRIVERS\uagp35.sys
15:50:32.0433 3988 uagp35 - ok
15:50:32.0449 3988 [ FF4232A1A64012BAA1FD97C7B67DF593 ] udfs C:\Windows\system32\DRIVERS\udfs.sys
15:50:32.0464 3988 udfs - ok
15:50:32.0480 3988 [ 3CBDEC8D06B9968ABA702EBA076364A1 ] UI0Detect C:\Windows\system32\UI0Detect.exe
15:50:32.0496 3988 UI0Detect - ok
15:50:32.0511 3988 [ 4BFE1BC28391222894CBF1E7D0E42320 ] uliagpkx C:\Windows\system32\drivers\uliagpkx.sys
15:50:32.0527 3988 uliagpkx - ok
15:50:32.0542 3988 [ DC54A574663A895C8763AF0FA1FF7561 ] umbus C:\Windows\system32\drivers\umbus.sys
15:50:32.0558 3988 umbus - ok
15:50:32.0574 3988 [ B2E8E8CB557B156DA5493BBDDCC1474D ] UmPass C:\Windows\system32\DRIVERS\umpass.sys
15:50:32.0589 3988 UmPass - ok
15:50:32.0605 3988 [ A293DCD756D04D8492A750D03B9A297C ] UmRdpService C:\Windows\System32\umrdp.dll
15:50:32.0621 3988 UmRdpService - ok
15:50:32.0683 3988 [ BB879DCFD22926EFBEB3298129898CBB ] UnlockerDriver5 C:\Program Files (x86)\Unlocker\UnlockerDriver5.sys
15:50:32.0683 3988 UnlockerDriver5 - ok
15:50:32.0699 3988 [ D47EC6A8E81633DD18D2436B19BAF6DE ] upnphost C:\Windows\System32\upnphost.dll
15:50:32.0714 3988 upnphost - ok
15:50:32.0746 3988 [ 6F1A3157A1C89435352CEB543CDB359C ] usbccgp C:\Windows\system32\DRIVERS\usbccgp.sys
15:50:32.0746 3988 usbccgp - ok
15:50:32.0777 3988 [ AF0892A803FDDA7492F595368E3B68E7 ] usbcir C:\Windows\system32\drivers\usbcir.sys
15:50:32.0777 3988 usbcir - ok
15:50:32.0808 3988 [ C025055FE7B87701EB042095DF1A2D7B ] usbehci C:\Windows\system32\drivers\usbehci.sys
15:50:32.0808 3988 usbehci - ok
15:50:32.0824 3988 [ 287C6C9410B111B68B52CA298F7B8C24 ] usbhub C:\Windows\system32\DRIVERS\usbhub.sys
15:50:32.0839 3988 usbhub - ok
15:50:32.0855 3988 [ 9840FC418B4CBD632D3D0A667A725C31 ] usbohci C:\Windows\system32\drivers\usbohci.sys
15:50:32.0855 3988 usbohci - ok
15:50:32.0871 3988 [ 73188F58FB384E75C4063D29413CEE3D ] usbprint C:\Windows\system32\DRIVERS\usbprint.sys
15:50:32.0871 3988 usbprint - ok
15:50:32.0886 3988 [ AAA2513C8AED8B54B189FD0C6B1634C0 ] usbscan C:\Windows\system32\DRIVERS\usbscan.sys
15:50:32.0902 3988 usbscan - ok
15:50:32.0933 3988 [ FED648B01349A3C8395A5169DB5FB7D6 ] USBSTOR C:\Windows\system32\DRIVERS\USBSTOR.SYS
15:50:32.0933 3988 USBSTOR - ok
15:50:32.0949 3988 [ 62069A34518BCF9C1FD9E74B3F6DB7CD ] usbuhci C:\Windows\system32\drivers\usbuhci.sys
15:50:32.0949 3988 usbuhci - ok
15:50:32.0964 3988 [ EDBB23CBCF2CDF727D64FF9B51A6070E ] UxSms C:\Windows\System32\uxsms.dll
15:50:32.0964 3988 UxSms - ok
15:50:32.0980 3988 [ C118A82CD78818C29AB228366EBF81C3 ] VaultSvc C:\Windows\system32\lsass.exe
15:50:32.0980 3988 VaultSvc - ok
15:50:33.0011 3988 [ C5C876CCFC083FF3B128F933823E87BD ] vdrvroot C:\Windows\system32\drivers\vdrvroot.sys
15:50:33.0027 3988 vdrvroot - ok
15:50:33.0074 3988 [ 8D6B481601D01A456E75C3210F1830BE ] vds C:\Windows\System32\vds.exe
15:50:33.0121 3988 vds - ok
15:50:33.0121 3988 [ DA4DA3F5E02943C2DC8C6ED875DE68DD ] vga C:\Windows\system32\DRIVERS\vgapnp.sys
15:50:33.0136 3988 vga - ok
15:50:33.0152 3988 [ 53E92A310193CB3C03BEA963DE7D9CFC ] VgaSave C:\Windows\System32\drivers\vga.sys
15:50:33.0152 3988 VgaSave - ok
15:50:33.0167 3988 [ 2CE2DF28C83AEAF30084E1B1EB253CBB ] vhdmp C:\Windows\system32\drivers\vhdmp.sys
15:50:33.0183 3988 vhdmp - ok
15:50:33.0199 3988 [ E5689D93FFE4E5D66C0178761240DD54 ] viaide C:\Windows\system32\drivers\viaide.sys
15:50:33.0214 3988 viaide - ok
15:50:33.0230 3988 [ 86EA3E79AE350FEA5331A1303054005F ] vmbus C:\Windows\system32\drivers\vmbus.sys
15:50:33.0246 3988 vmbus - ok
15:50:33.0261 3988 [ 7DE90B48F210D29649380545DB45A187 ] VMBusHID C:\Windows\system32\drivers\VMBusHID.sys
15:50:33.0261 3988 VMBusHID - ok
15:50:33.0277 3988 [ D2AAFD421940F640B407AEFAAEBD91B0 ] volmgr C:\Windows\system32\drivers\volmgr.sys
15:50:33.0277 3988 volmgr - ok
15:50:33.0308 3988 [ A255814907C89BE58B79EF2F189B843B ] volmgrx C:\Windows\system32\drivers\volmgrx.sys
15:50:33.0324 3988 volmgrx - ok
15:50:33.0339 3988 [ 0D08D2F3B3FF84E433346669B5E0F639 ] volsnap C:\Windows\system32\drivers\volsnap.sys
15:50:33.0355 3988 volsnap - ok
15:50:33.0371 3988 [ 5E2016EA6EBACA03C04FEAC5F330D997 ] vsmraid C:\Windows\system32\DRIVERS\vsmraid.sys
15:50:33.0386 3988 vsmraid - ok
15:50:33.0464 3988 [ B60BA0BC31B0CB414593E169F6F21CC2 ] VSS C:\Windows\system32\vssvc.exe
15:50:33.0511 3988 VSS - ok
15:50:33.0511 3988 [ 36D4720B72B5C5D9CB2B9C29E9DF67A1 ] vwifibus C:\Windows\System32\drivers\vwifibus.sys
15:50:33.0527 3988 vwifibus - ok
15:50:33.0542 3988 [ 1C9D80CC3849B3788048078C26486E1A ] W32Time C:\Windows\system32\w32time.dll
15:50:33.0574 3988 W32Time - ok
15:50:33.0574 3988 [ 4E9440F4F152A7B944CB1663D3935A3E ] WacomPen C:\Windows\system32\DRIVERS\wacompen.sys
15:50:33.0589 3988 WacomPen - ok
15:50:33.0621 3988 [ 356AFD78A6ED4457169241AC3965230C ] WANARP C:\Windows\system32\DRIVERS\wanarp.sys
15:50:33.0621 3988 WANARP - ok
15:50:33.0636 3988 [ 356AFD78A6ED4457169241AC3965230C ] Wanarpv6 C:\Windows\system32\DRIVERS\wanarp.sys
15:50:33.0636 3988 Wanarpv6 - ok
15:50:33.0699 3988 [ 3CEC96DE223E49EAAE3651FCF8FAEA6C ] WatAdminSvc C:\Windows\system32\Wat\WatAdminSvc.exe
15:50:33.0777 3988 WatAdminSvc - ok
15:50:33.0839 3988 [ 78F4E7F5C56CB9716238EB57DA4B6A75 ] wbengine C:\Windows\system32\wbengine.exe
15:50:33.0933 3988 wbengine - ok
15:50:33.0933 3988 [ 3AA101E8EDAB2DB4131333F4325C76A3 ] WbioSrvc C:\Windows\System32\wbiosrvc.dll
15:50:33.0949 3988 WbioSrvc - ok
15:50:33.0964 3988 [ 7368A2AFD46E5A4481D1DE9D14848EDD ] wcncsvc C:\Windows\System32\wcncsvc.dll
15:50:33.0980 3988 wcncsvc - ok
15:50:33.0996 3988 [ 20F7441334B18CEE52027661DF4A6129 ] WcsPlugInService C:\Windows\System32\WcsPlugInService.dll
15:50:33.0996 3988 WcsPlugInService - ok
15:50:34.0011 3988 [ 72889E16FF12BA0F235467D6091B17DC ] Wd C:\Windows\system32\DRIVERS\wd.sys
15:50:34.0011 3988 Wd - ok
15:50:34.0058 3988 [ 442783E2CB0DA19873B7A63833FF4CB4 ] Wdf01000 C:\Windows\system32\drivers\Wdf01000.sys
15:50:34.0121 3988 Wdf01000 - ok
15:50:34.0136 3988 [ BF1FC3F79B863C914687A737C2F3D681 ] WdiServiceHost C:\Windows\system32\wdi.dll
15:50:34.0152 3988 WdiServiceHost - ok
15:50:34.0152 3988 [ BF1FC3F79B863C914687A737C2F3D681 ] WdiSystemHost C:\Windows\system32\wdi.dll
15:50:34.0167 3988 WdiSystemHost - ok
15:50:34.0183 3988 [ 3DB6D04E1C64272F8B14EB8BC4616280 ] WebClient C:\Windows\System32\webclnt.dll
15:50:34.0199 3988 WebClient - ok
15:50:34.0214 3988 [ C749025A679C5103E575E3B48E092C43 ] Wecsvc C:\Windows\system32\wecsvc.dll
15:50:34.0230 3988 Wecsvc - ok
15:50:34.0230 3988 [ 7E591867422DC788B9E5BD337A669A08 ] wercplsupport C:\Windows\System32\wercplsupport.dll
15:50:34.0246 3988 wercplsupport - ok
15:50:34.0261 3988 [ 6D137963730144698CBD10F202E9F251 ] WerSvc C:\Windows\System32\WerSvc.dll
15:50:34.0261 3988 WerSvc - ok
15:50:34.0308 3988 [ 611B23304BF067451A9FDEE01FBDD725 ] WfpLwf C:\Windows\system32\DRIVERS\wfplwf.sys
15:50:34.0308 3988 WfpLwf - ok
15:50:34.0324 3988 [ 05ECAEC3E4529A7153B3136CEB49F0EC ] WIMMount C:\Windows\system32\drivers\wimmount.sys
15:50:34.0324 3988 WIMMount - ok
15:50:34.0339 3988 WinDefend - ok
15:50:34.0355 3988 WinHttpAutoProxySvc - ok
15:50:34.0402 3988 [ 19B07E7E8915D701225DA41CB3877306 ] Winmgmt C:\Windows\system32\wbem\WMIsvc.dll
15:50:34.0417 3988 Winmgmt - ok
15:50:34.0496 3988 [ BCB1310604AA415C4508708975B3931E ] WinRM C:\Windows\system32\WsmSvc.dll
15:50:34.0589 3988 WinRM - ok
15:50:34.0652 3988 [ FE88B288356E7B47B74B13372ADD906D ] WinUsb C:\Windows\system32\DRIVERS\WinUsb.sys
15:50:34.0667 3988 WinUsb - ok
15:50:34.0714 3988 [ 4FADA86E62F18A1B2F42BA18AE24E6AA ] Wlansvc C:\Windows\System32\wlansvc.dll
15:50:34.0730 3988 Wlansvc - ok
15:50:34.0761 3988 [ F6FF8944478594D0E414D3F048F0D778 ] WmiAcpi C:\Windows\system32\drivers\wmiacpi.sys
15:50:34.0761 3988 WmiAcpi - ok
15:50:34.0777 3988 [ 38B84C94C5A8AF291ADFEA478AE54F93 ] wmiApSrv C:\Windows\system32\wbem\WmiApSrv.exe
15:50:34.0792 3988 wmiApSrv - ok
15:50:34.0808 3988 WMPNetworkSvc - ok
15:50:34.0824 3988 [ 96C6E7100D724C69FCF9E7BF590D1DCA ] WPCSvc C:\Windows\System32\wpcsvc.dll
15:50:34.0824 3988 WPCSvc - ok
15:50:34.0855 3988 [ 93221146D4EBBF314C29B23CD6CC391D ] WPDBusEnum C:\Windows\system32\wpdbusenum.dll
15:50:34.0855 3988 WPDBusEnum - ok
15:50:34.0902 3988 [ 6BCC1D7D2FD2453957C5479A32364E52 ] ws2ifsl C:\Windows\system32\drivers\ws2ifsl.sys
15:50:34.0902 3988 ws2ifsl - ok
15:50:34.0902 3988 [ E8B1FE6669397D1772D8196DF0E57A9E ] wscsvc C:\Windows\system32\wscsvc.dll
15:50:34.0917 3988 wscsvc - ok
15:50:34.0933 3988 WSearch - ok
15:50:35.0027 3988 [ D9EF901DCA379CFE914E9FA13B73B4C4 ] wuauserv C:\Windows\system32\wuaueng.dll
15:50:35.0136 3988 wuauserv - ok
15:50:35.0183 3988 [ AB886378EEB55C6C75B4F2D14B6C869F ] WudfPf C:\Windows\system32\drivers\WudfPf.sys
15:50:35.0183 3988 WudfPf - ok
15:50:35.0199 3988 [ DDA4CAF29D8C0A297F886BFE561E6659 ] WUDFRd C:\Windows\system32\DRIVERS\WUDFRd.sys
15:50:35.0214 3988 WUDFRd - ok
15:50:35.0246 3988 [ B20F051B03A966392364C83F009F7D17 ] wudfsvc C:\Windows\System32\WUDFSvc.dll
15:50:35.0261 3988 wudfsvc - ok
15:50:35.0277 3988 [ 9A3452B3C2A46C073166C5CF49FAD1AE ] WwanSvc C:\Windows\System32\wwansvc.dll
15:50:35.0292 3988 WwanSvc - ok
15:50:35.0339 3988 [ E1E858AEF2ED420CBB7605D3ECCEC69A ] yukonw7 C:\Windows\system32\DRIVERS\yk62x64.sys
15:50:35.0339 3988 yukonw7 - ok
15:50:35.0355 3988 ================ Scan global ===============================
15:50:35.0386 3988 [ BA0CD8C393E8C9F83354106093832C7B ] C:\Windows\system32\basesrv.dll
15:50:35.0402 3988 [ F46BBAAC1C4980F4D0DD463F190A42D3 ] C:\Windows\system32\winsrv.dll
15:50:35.0433 3988 [ F46BBAAC1C4980F4D0DD463F190A42D3 ] C:\Windows\system32\winsrv.dll
15:50:35.0449 3988 [ D6160F9D869BA3AF0B787F971DB56368 ] C:\Windows\system32\sxssrv.dll
15:50:35.0511 3988 [ 24ACB7E5BE595468E3B9AA488B9B4FCB ] C:\Windows\system32\services.exe
15:50:35.0527 3988 [Global] - ok
15:50:35.0527 3988 ================ Scan MBR ==================================
15:50:35.0527 3988 [ A36C5E4F47E84449FF07ED3517B43A31 ] \Device\Harddisk2\DR2
15:50:35.0667 3988 \Device\Harddisk2\DR2 - ok
15:50:35.0699 3988 [ A36C5E4F47E84449FF07ED3517B43A31 ] \Device\Harddisk0\DR0
15:50:35.0964 3988 \Device\Harddisk0\DR0 - ok
15:50:35.0964 3988 [ 8F558EB6672622401DA993E1E865C861 ] \Device\Harddisk1\DR1
15:50:35.0964 3988 \Device\Harddisk1\DR1 - ok
15:50:35.0964 3988 ================ Scan VBR ==================================
15:50:35.0980 3988 [ 53DD8B267762DB5B3436BC0BC542FB1C ] \Device\Harddisk2\DR2\Partition1
15:50:35.0980 3988 \Device\Harddisk2\DR2\Partition1 - ok
15:50:35.0980 3988 [ 77DA5F837A07005F5431D5A9AB81A275 ] \Device\Harddisk2\DR2\Partition2
15:50:35.0980 3988 \Device\Harddisk2\DR2\Partition2 - ok
15:50:35.0996 3988 [ FBE4081A7C6B1FDFE6EDFE1C1BDB3682 ] \Device\Harddisk0\DR0\Partition1
15:50:36.0011 3988 \Device\Harddisk0\DR0\Partition1 - ok
15:50:36.0011 3988 [ 7467F0B823F99C6BD59012313DFADA74 ] \Device\Harddisk0\DR0\Partition2
15:50:36.0011 3988 \Device\Harddisk0\DR0\Partition2 - ok
15:50:36.0011 3988 [ 69B6FF925FED92F02CC726A87E2788B4 ] \Device\Harddisk1\DR1\Partition1
15:50:36.0011 3988 \Device\Harddisk1\DR1\Partition1 - ok
15:50:36.0027 3988 ============================================================
15:50:36.0027 3988 Scan finished
15:50:36.0027 3988 ============================================================
15:50:36.0042 1344 Detected object count: 0
15:50:36.0042 1344 Actual detected object count: 0
15:50:56.0433 4012 Deinitialize success
2. log Combofix:
ComboFix 12-11-22.03 - Felipe Grande 22.11.2012 15:55:21.3.2 - x64
Microsoft Windows 7 Professional 6.1.7601.1.1250.420.1029.18.4095.2896 [GMT 1:00]
Spuštěný z: c:\users\Felipe Grande\Desktop\ComboFix.exe
AV: Avira Desktop *Disabled/Updated* {F67B4DE5-C0B4-6C3F-0EFF-6C83BD5D0C2C}
SP: Avira Desktop *Disabled/Updated* {4D1AAC01-E68E-63B1-344F-57F1C6DA4691}
SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.
.
((((((((((((((((((((((((( Soubory vytvořené od 2012-10-22 do 2012-11-22 )))))))))))))))))))))))))))))))
.
.
2012-11-22 15:02 . 2012-11-22 15:02 -------- d-----w- c:\users\UpdatusUser\AppData\Local\temp
2012-11-22 15:02 . 2012-11-22 15:02 -------- d-----w- c:\users\Default\AppData\Local\temp
2012-11-21 00:38 . 2012-11-21 00:38 -------- d-----w- c:\users\Felipe Grande\AppData\Local\Comodo
2012-11-19 21:55 . 2012-11-20 15:06 -------- d-----w- c:\users\Felipe Grande\AppData\Local\Adobe
2012-11-19 21:46 . 2012-11-19 21:46 -------- d-----w- c:\users\Felipe Grande\AppData\Local\ACD Systems
2012-11-17 21:03 . 2012-11-17 21:03 388096 ----a-r- c:\users\Felipe Grande\AppData\Roaming\Microsoft\Installer\{45A66726-69BC-466B-A7A4-12FCBA4883D7}\HiJackThis.exe
2012-11-17 21:03 . 2012-11-17 21:03 -------- d-----w- c:\program files (x86)\Trend Micro
2012-11-14 09:44 . 2012-07-26 07:40 2560 ----a-w- c:\windows\system32\drivers\cs-CZ\wdf01000.sys.mui
2012-11-14 09:44 . 2012-07-26 04:55 785512 ----a-w- c:\windows\system32\drivers\Wdf01000.sys
2012-11-14 09:44 . 2012-07-26 04:55 54376 ----a-w- c:\windows\system32\drivers\WdfLdr.sys
2012-11-14 09:44 . 2012-07-26 02:36 9728 ----a-w- c:\windows\system32\Wdfres.dll
2012-11-14 09:32 . 2012-07-26 03:08 84992 ----a-w- c:\windows\system32\WUDFSvc.dll
2012-11-14 09:32 . 2012-07-26 03:08 194048 ----a-w- c:\windows\system32\WUDFPlatform.dll
2012-11-14 09:32 . 2012-07-26 02:26 87040 ----a-w- c:\windows\system32\drivers\WUDFPf.sys
2012-11-14 09:32 . 2012-07-26 02:26 198656 ----a-w- c:\windows\system32\drivers\WUDFRd.sys
2012-11-14 09:32 . 2012-07-26 03:08 229888 ----a-w- c:\windows\system32\WUDFHost.exe
2012-11-14 09:32 . 2012-07-26 03:08 744448 ----a-w- c:\windows\system32\WUDFx.dll
2012-11-14 09:32 . 2012-07-26 03:08 45056 ----a-w- c:\windows\system32\WUDFCoinstaller.dll
2012-11-14 09:13 . 2012-09-25 22:47 78336 ----a-w- c:\windows\SysWow64\synceng.dll
2012-11-14 09:13 . 2012-09-25 22:46 95744 ----a-w- c:\windows\system32\synceng.dll
2012-11-03 15:45 . 2012-11-03 15:45 -------- d-----w- c:\users\Felipe Grande\AppData\Local\SugarSync
2012-11-03 15:44 . 2012-11-03 15:44 -------- d-----w- c:\program files (x86)\SugarSync
2012-11-02 12:16 . 2012-11-02 12:16 -------- d-----w- c:\program files (x86)\Undelete Plus
2012-11-02 07:34 . 2012-11-02 07:46 -------- d-----w- c:\programdata\ASGVIS
2012-11-01 15:23 . 2009-09-04 16:29 1974616 ----a-w- c:\windows\SysWow64\D3DCompiler_42.dll
2012-11-01 15:23 . 2009-09-04 16:29 2582888 ----a-w- c:\windows\system32\D3DCompiler_42.dll
2012-11-01 15:23 . 2009-09-04 16:29 453456 ----a-w- c:\windows\SysWow64\d3dx10_42.dll
2012-11-01 15:23 . 2009-09-04 16:29 235344 ----a-w- c:\windows\SysWow64\d3dx11_42.dll
2012-11-01 15:23 . 2009-09-04 16:29 1892184 ----a-w- c:\windows\SysWow64\D3DX9_42.dll
2012-11-01 15:23 . 2009-09-04 16:29 523088 ----a-w- c:\windows\system32\d3dx10_42.dll
2012-11-01 15:23 . 2009-09-04 16:29 285024 ----a-w- c:\windows\system32\d3dx11_42.dll
2012-11-01 15:23 . 2009-09-04 16:29 2475352 ----a-w- c:\windows\system32\D3DX9_42.dll
2012-11-01 09:16 . 2012-11-01 09:16 -------- d-----w- c:\users\Default\AppData\Local\Google
.
.
.
(((((((((((((((((((((((((((((((((((((((( Find3M výpis ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2012-11-14 09:32 . 2012-01-28 16:37 66395536 ----a-w- c:\windows\system32\MRT.exe
2012-11-05 19:00 . 2012-01-29 18:15 88008 ----a-w- c:\windows\system32\LMIRfsClientNP.dll
2012-11-05 19:00 . 2012-01-29 18:15 35240 ----a-w- c:\windows\system32\LMIport.dll
2012-11-05 19:00 . 2012-01-29 18:15 83880 ----a-w- c:\windows\system32\LMIinit.dll
2012-10-23 09:39 . 2012-10-23 09:40 289768 ----a-w- c:\windows\system32\javaws.exe
2012-10-23 09:39 . 2012-10-23 09:39 189416 ----a-w- c:\windows\system32\javaw.exe
2012-10-23 09:39 . 2012-10-23 09:39 188904 ----a-w- c:\windows\system32\java.exe
2012-10-23 09:39 . 2012-10-23 09:39 108008 ----a-w- c:\windows\system32\WindowsAccessBridge-64.dll
2012-10-23 09:39 . 2012-10-13 09:18 916456 ----a-w- c:\windows\system32\deployJava1.dll
2012-10-23 09:39 . 2012-10-13 09:18 1034216 ----a-w- c:\windows\system32\npDeployJava1.dll
2012-10-13 08:13 . 2012-04-08 09:13 696760 ----a-w- c:\windows\SysWow64\FlashPlayerApp.exe
2012-10-13 08:13 . 2012-01-24 16:58 73656 ----a-w- c:\windows\SysWow64\FlashPlayerCPLApp.cpl
2012-09-29 18:54 . 2012-03-11 09:27 25928 ----a-w- c:\windows\system32\drivers\mbam.sys
2012-09-14 19:19 . 2012-10-10 12:43 2048 ----a-w- c:\windows\system32\tzres.dll
2012-09-14 18:28 . 2012-10-10 12:43 2048 ----a-w- c:\windows\SysWow64\tzres.dll
2012-09-12 18:57 . 2012-01-29 18:15 87488 ----a-w- c:\windows\system32\LMIRfsClientNP.dll.000.bak
2012-08-31 18:19 . 2012-10-10 12:44 1659760 ----a-w- c:\windows\system32\drivers\ntfs.sys
2012-08-30 19:14 . 2012-09-16 11:14 9066344 ----a-w- c:\windows\system32\nvcuda.dll
2012-08-30 19:14 . 2012-09-16 11:14 7626088 ----a-w- c:\windows\SysWow64\nvcuda.dll
2012-08-30 19:14 . 2012-09-16 11:14 7397736 ----a-w- c:\windows\system32\nvopencl.dll
2012-08-30 19:14 . 2012-09-16 11:14 6109032 ----a-w- c:\windows\SysWow64\nvopencl.dll
2012-08-30 19:14 . 2012-09-16 11:14 2745192 ----a-w- c:\windows\system32\nvcuvid.dll
2012-08-30 19:14 . 2012-09-16 11:14 26228072 ----a-w- c:\windows\system32\nvoglv64.dll
2012-08-30 19:14 . 2012-09-16 11:14 2573672 ----a-w- c:\windows\SysWow64\nvcuvid.dll
2012-08-30 19:14 . 2012-09-16 11:14 25256296 ----a-w- c:\windows\system32\nvcompiler.dll
2012-08-30 19:14 . 2012-09-16 11:14 2422120 ----a-w- c:\windows\SysWow64\nvapi.dll
2012-08-30 19:14 . 2012-09-16 11:14 2216808 ----a-w- c:\windows\system32\nvcuvenc.dll
2012-08-30 19:14 . 2012-09-16 11:14 19828584 ----a-w- c:\windows\SysWow64\nvoglv32.dll
2012-08-30 19:14 . 2012-09-16 11:14 1866088 ----a-w- c:\windows\SysWow64\nvcuvenc.dll
2012-08-30 19:14 . 2012-09-16 11:14 17559912 ----a-w- c:\windows\SysWow64\nvcompiler.dll
2012-08-30 19:14 . 2012-09-16 11:14 1482600 ----a-w- c:\windows\system32\nvdispgenco64.dll
2012-08-30 19:14 . 2012-09-16 11:14 13391720 ----a-w- c:\windows\system32\drivers\nvlddmkm.sys
2012-08-30 19:14 . 2012-09-16 09:34 15291752 ----a-w- c:\windows\SysWow64\nvd3dum.dll
2012-08-30 19:14 . 2012-02-11 23:25 2725224 ----a-w- c:\windows\system32\nvapi64.dll
2012-08-30 19:14 . 2012-02-11 23:25 18229096 ----a-w- c:\windows\system32\nvd3dumx.dll
2012-08-30 19:14 . 2012-02-11 23:25 1760104 ----a-w- c:\windows\system32\nvdispco64.dll
2012-08-30 18:03 . 2012-10-10 12:44 5559664 ----a-w- c:\windows\system32\ntoskrnl.exe
2012-08-30 17:12 . 2012-10-10 12:43 3968880 ----a-w- c:\windows\SysWow64\ntkrnlpa.exe
2012-08-30 17:12 . 2012-10-10 12:43 3914096 ----a-w- c:\windows\SysWow64\ntoskrnl.exe
2012-08-30 16:18 . 2012-03-09 09:22 2557800 ----a-w- c:\windows\system32\nvsvcr.dll
2012-08-30 16:18 . 2012-02-11 23:29 63336 ----a-w- c:\windows\system32\nvshext.dll
2012-08-30 16:18 . 2012-02-11 23:29 891240 ----a-w- c:\windows\system32\nvvsvc.exe
2012-08-30 16:18 . 2012-02-11 23:29 118120 ----a-w- c:\windows\system32\nvmctray.dll
2012-08-30 16:18 . 2012-02-11 23:29 3266920 ----a-w- c:\windows\system32\nvsvc64.dll
2012-08-30 16:17 . 2012-02-11 23:29 6198120 ----a-w- c:\windows\system32\nvcpl.dll
2012-08-24 18:05 . 2012-10-10 12:43 220160 ----a-w- c:\windows\system32\wintrust.dll
2012-08-24 16:57 . 2012-10-10 12:43 172544 ----a-w- c:\windows\SysWow64\wintrust.dll
.
.
(((((((((((((((((((((((((((((((((( Spouštěcí body v registru )))))))))))))))))))))))))))))))))))))))))))))
.
.
*Poznámka* prázdné záznamy a legitimní výchozí údaje nejsou zobrazeny.
REGEDIT4
.
[HKEY_LOCAL_MACHINE\Wow6432Node\~\Browser Helper Objects\{FD72061E-9FDE-484D-A58A-0BAB4151CAD8}]
2012-01-19 00:09 194848 ----a-w- c:\program files (x86)\Yontoo\YontooIEClient.dll
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt1]
@="{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}"
[HKEY_CLASSES_ROOT\CLSID\{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}]
2012-06-30 04:19 94208 ----a-w- c:\users\Felipe Grande\AppData\Roaming\Dropbox\bin\DropboxExt.14.dll
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt2]
@="{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}"
[HKEY_CLASSES_ROOT\CLSID\{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}]
2012-06-30 04:19 94208 ----a-w- c:\users\Felipe Grande\AppData\Roaming\Dropbox\bin\DropboxExt.14.dll
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt3]
@="{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}"
[HKEY_CLASSES_ROOT\CLSID\{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}]
2012-06-30 04:19 94208 ----a-w- c:\users\Felipe Grande\AppData\Roaming\Dropbox\bin\DropboxExt.14.dll
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"PrtScr by FireStarter"="c:\program files (x86)\PrtScr\PrtScr.exe" [2008-03-19 1375744]
"DAEMON Tools Lite"="c:\program files (x86)\DAEMON Tools Lite\DTLite.exe" [2012-01-19 3477312]
"GoogleDriveSync"="c:\program files (x86)\Google\Drive\googledrivesync.exe" [2012-10-25 16052192]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]
"avgnt"="c:\program files (x86)\Avira\AntiVir Desktop\avgnt.exe" [2012-09-07 348664]
"APSDaemon"="c:\program files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe" [2012-02-20 59240]
"QuickTime Task"="c:\program files (x86)\QuickTime\QTTask.exe" [2012-04-18 421888]
"SafeQ Client"="c:\program files (x86)\Y Soft\SafeQ Client\Client\SafeQ Client.exe" [2010-03-31 249856]
.
c:\users\Felipe Grande\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\
Stardock ObjectDock.lnk - c:\program files (x86)\Stardock\ObjectDockFree\ObjectDock.exe [2010-10-6 3768176]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorAdmin"= 5 (0x5)
"ConsentPromptBehaviorUser"= 3 (0x3)
"EnableUIADesktopToggle"= 0 (0x0)
"PromptOnSecureDesktop"= 0 (0x0)
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\windows]
"LoadAppInit_DLLs"=1 (0x1)
.
[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\session manager]
BootExecute REG_MULTI_SZ autocheck autochk *\0OODBS
.
R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2010-03-18 138576]
R2 LMIInfo;LogMeIn Kernel Information Provider;c:\program files (x86)\LogMeIn\x64\RaInfo.sys [2011-01-11 15928]
R3 FLEXnet Licensing Service 64;FLEXnet Licensing Service 64;c:\program files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService64.exe [2012-11-01 1431888]
R3 ggflt;SEMC USB Flash Driver Filter;c:\windows\system32\DRIVERS\ggflt.sys [2012-02-03 13352]
R3 IObitUnlocker;IObitUnlocker;c:\program files (x86)\IObit\IObit Unlocker\IObitUnlocker.sys [2011-03-09 33184]
R3 SWDUMon;SWDUMon;c:\windows\system32\DRIVERS\SWDUMon.sys [2012-03-14 13920]
R3 SwitchBoard;SwitchBoard;c:\program files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [2010-02-19 517096]
R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys [2010-11-20 59392]
R3 WatAdminSvc;Služba Technologie aktivace Windows;c:\windows\system32\Wat\WatAdminSvc.exe [2012-01-25 1255736]
S1 avkmgr;avkmgr;c:\windows\system32\DRIVERS\avkmgr.sys [2011-09-15 27760]
S2 AntiVirSchedulerService;Avira Scheduler;c:\program files (x86)\Avira\AntiVir Desktop\sched.exe [2012-05-08 86224]
S2 Autodesk Content Service;Autodesk Content Service;c:\program files (x86)\Autodesk\Content Service\Connect.Service.ContentService.exe [2011-02-02 18656]
S2 cpuz135;cpuz135;c:\windows\system32\drivers\cpuz135_x64.sys [2011-09-21 21992]
S2 LMIGuardianSvc;LMIGuardianSvc;c:\program files (x86)\LogMeIn\x64\LMIGuardianSvc.exe [2012-11-05 375728]
S2 OODefragAgent;O&O Defrag;c:\program files\OO Software\Defrag\oodag.exe [2011-01-25 3136328]
S3 dtsoftbus01;DAEMON Tools Virtual Bus Driver;c:\windows\system32\DRIVERS\dtsoftbus01.sys [2012-01-26 283200]
S3 yukonw7;NDIS6.2 Miniport Driver for Marvell Yukon Ethernet Controller;c:\windows\system32\DRIVERS\yk62x64.sys [2011-09-14 398112]
.
.
--- Ostatní služby/ovladače v paměti ---
.
*NewlyCreated* - 22292750
*Deregistered* - 22292750
.
Obsah adresáře 'Naplánované úlohy'
.
2012-11-20 c:\windows\Tasks\AdobeAAMUpdater-1.0-FM_workstation-Felipe Grande.job
- c:\program files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\updaterstartuputility.exe [2012-03-14 02:44]
.
2012-11-05 c:\windows\Tasks\GoogleUpdateTaskMachineCore1cdbb4da02a08d8.job
- c:\program files (x86)\Google\Update\GoogleUpdate.exe [2012-01-25 03:41]
.
2012-05-04 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
- c:\program files (x86)\Google\Update\GoogleUpdate.exe [2012-01-25 03:41]
.
2012-09-14 c:\windows\Tasks\{5B847F59-12D6-4753-A9A9-33EAF03E0366}.job
- c:\program files (x86)\Skype\Phone\Skype.exe [2010-09-02 13:15]
.
2012-09-14 c:\windows\Tasks\{7B95DF1F-6DAA-4C00-AF78-755F60F9CE66}.job
- c:\program files (x86)\Skype\Phone\Skype.exe [2010-09-02 13:15]
.
2012-09-14 c:\windows\Tasks\{F8EFB556-EBB3-422B-AFE1-A139FC917E15}.job
- c:\program files (x86)\mozilla firefox\firefox.exe [2012-06-10 15:37]
.
.
--------- X64 Entries -----------
.
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt1]
@="{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}"
[HKEY_CLASSES_ROOT\CLSID\{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}]
2012-06-30 04:19 97792 ----a-w- c:\users\Felipe Grande\AppData\Roaming\Dropbox\bin\DropboxExt64.14.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt2]
@="{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}"
[HKEY_CLASSES_ROOT\CLSID\{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}]
2012-06-30 04:19 97792 ----a-w- c:\users\Felipe Grande\AppData\Roaming\Dropbox\bin\DropboxExt64.14.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt3]
@="{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}"
[HKEY_CLASSES_ROOT\CLSID\{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}]
2012-06-30 04:19 97792 ----a-w- c:\users\Felipe Grande\AppData\Roaming\Dropbox\bin\DropboxExt64.14.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt4]
@="{FB314EDC-A251-47B7-93E1-CDD82E34AF8B}"
[HKEY_CLASSES_ROOT\CLSID\{FB314EDC-A251-47B7-93E1-CDD82E34AF8B}]
2012-06-30 04:19 97792 ----a-w- c:\users\Felipe Grande\AppData\Roaming\Dropbox\bin\DropboxExt64.14.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\GDriveBlacklistedOverlay]
@="{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D42}"
[HKEY_CLASSES_ROOT\CLSID\{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D42}]
2012-10-25 14:45 755224 ----a-w- c:\program files (x86)\Google\Drive\googledrivesync64.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\GDriveSharedOverlay]
@="{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D43}"
[HKEY_CLASSES_ROOT\CLSID\{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D43}]
2012-10-25 14:45 755224 ----a-w- c:\program files (x86)\Google\Drive\googledrivesync64.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\GDriveSyncedOverlay]
@="{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D40}"
[HKEY_CLASSES_ROOT\CLSID\{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D40}]
2012-10-25 14:45 755224 ----a-w- c:\program files (x86)\Google\Drive\googledrivesync64.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\GDriveSyncingOverlay]
@="{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D41}"
[HKEY_CLASSES_ROOT\CLSID\{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D41}]
2012-10-25 14:45 755224 ----a-w- c:\program files (x86)\Google\Drive\googledrivesync64.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\SugarSyncBackedUp]
@="{0C4A258A-3F3B-4FFF-80A7-9B3BEC139472}"
[HKEY_CLASSES_ROOT\CLSID\{0C4A258A-3F3B-4FFF-80A7-9B3BEC139472}]
2012-10-16 00:42 480888 ----a-w- c:\program files (x86)\SugarSync\SugarSyncShellExt_x64.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\SugarSyncPending]
@="{62CCD8E3-9C21-41E1-B55E-1E26DFC68511}"
[HKEY_CLASSES_ROOT\CLSID\{62CCD8E3-9C21-41E1-B55E-1E26DFC68511}]
2012-10-16 00:42 480888 ----a-w- c:\program files (x86)\SugarSync\SugarSyncShellExt_x64.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\SugarSyncRoot]
@="{A759AFF6-5851-457D-A540-F4ECED148351}"
[HKEY_CLASSES_ROOT\CLSID\{A759AFF6-5851-457D-A540-F4ECED148351}]
2012-10-16 00:42 480888 ----a-w- c:\program files (x86)\SugarSync\SugarSyncShellExt_x64.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\SugarSyncShared]
@="{1574C9EF-7D58-488F-B358-8B78C1538F51}"
[HKEY_CLASSES_ROOT\CLSID\{1574C9EF-7D58-488F-B358-8B78C1538F51}]
2012-10-16 00:42 480888 ----a-w- c:\program files (x86)\SugarSync\SugarSyncShellExt_x64.dll
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"RTHDVCPL"="c:\program files\Realtek\Audio\HDA\RAVCpl64.exe" [2011-12-13 13374568]
"LogMeIn GUI"="c:\program files (x86)\LogMeIn\x64\LogMeInSystray.exe" [2011-01-11 57928]
"OODefragTray"="c:\program files\OO Software\Defrag\oodtray.exe" [2011-01-25 4012360]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
"AppInit_DLLs"=c:\windows\System32\acaptuser64.dll
.
------- Doplňkový sken -------
.
uLocal Page = c:\windows\system32\blank.htm
uStart Page =
hxxp://www.ceskatelevize.cz/ivysilani/mLocal Page = c:\windows\SysWOW64\blank.htm
IE: Append Link Target to Existing PDF - c:\program files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll/AcroIEAppendSelLinks.html
IE: Append to Existing PDF - c:\program files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll/AcroIEAppend.html
IE: Convert Link Target to Adobe PDF - c:\program files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll/AcroIECaptureSelLinks.html
IE: Convert to Adobe PDF - c:\program files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll/AcroIECapture.html
IE: Download with &Media Finder - c:\program files (x86)\Media Finder\hook.html
IE: E&xportovat do aplikace Microsoft Excel - c:\progra~2\MICROS~1\Office14\EXCEL.EXE/3000
TCP: DhcpNameServer = 147.32.110.1 147.32.110.2
FF - ProfilePath - c:\users\Felipe Grande\AppData\Roaming\Mozilla\Firefox\Profiles\6w4x7wh6.default\
FF - prefs.js: browser.startup.homepage -
hxxp://www.centrum.cz/FF - ExtSQL: 2012-09-24 13:22;
quickstores@quickstores.de; c:\program files (x86)\Mozilla Firefox\extensions\quickstores@quickstores.de
FF - user.js: extentions.y2layers.installId - 4931b8c9-9849-4b5b-8a2b-de07ef8402d5
FF - user.js: extentions.y2layers.defaultEnableAppsList - bestvideodownloader
.
- - - - NEPLATNÉ POLOŽKY ODSTRANĚNÉ Z REGISTRU - - - -
.
Wow6432Node-HKLM-Run-<NO NAME> - (no file)
.
.
.
--------------------- ZAMKNUTÉ KLÍČE V REGISTRU ---------------------
.
[HKEY_USERS\S-1-5-21-1193739700-1416340202-3985265929-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.v10o\UserChoice]
@Denied: (2) (S-1-5-21-1193739700-1416340202-3985265929-1000)
@Denied: (2) (LocalSystem)
"Progid"="ACDSee 10.0.v10o"
.
[HKEY_USERS\S-1-5-21-1193739700-1416340202-3985265929-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.v10p\UserChoice]
@Denied: (2) (S-1-5-21-1193739700-1416340202-3985265929-1000)
@Denied: (2) (LocalSystem)
"Progid"="ACDSee 10.0.v10p"
.
[HKEY_USERS\S-1-5-21-1193739700-1416340202-3985265929-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.v10pf\UserChoice]
@Denied: (2) (S-1-5-21-1193739700-1416340202-3985265929-1000)
@Denied: (2) (LocalSystem)
"Progid"="ACDSee 10.0.v10pf"
.
[HKEY_USERS\S-1-5-21-1193739700-1416340202-3985265929-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.xmp\UserChoice]
@Denied: (2) (S-1-5-21-1193739700-1416340202-3985265929-1000)
@Denied: (2) (LocalSystem)
"Progid"="ACDSee 10.0.xmp"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil32_11_2_202_233_ActiveX.exe,-101"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\Elevation]
"Enabled"=dword:00000001
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\LocalServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil32_11_2_202_233_ActiveX.exe"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@="Shockwave Flash Object"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\InprocServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_2_202_233.ocx"
"ThreadingModel"="Apartment"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\MiscStatus]
@="0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ProgID]
@="ShockwaveFlash.ShockwaveFlash.11"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_2_202_233.ocx, 1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\TypeLib]
@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\Version]
@="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
@="ShockwaveFlash.ShockwaveFlash"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@="Macromedia Flash Factory Object"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\InprocServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_2_202_233.ocx"
"ThreadingModel"="Apartment"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ProgID]
@="FlashFactory.FlashFactory.1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_2_202_233.ocx, 1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\TypeLib]
@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\Version]
@="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
@="FlashFactory.FlashFactory"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}]
@Denied: (A 2) (Everyone)
@="IFlashBroker4"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\System*]
"OODEFRAG10.00.00.01WORKSTATION"="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"
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
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Office\Common\Smart Tag\Actions\{B7EFF951-E52F-45CC-9EF7-57124F2177CC}]
@Denied: (A) (Everyone)
"Solution"="{15727DE6-F92D-4E46-ACB4-0E2C58B31A18}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Schema Library\ActionsPane3]
@Denied: (A) (Everyone)
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Schema Library\ActionsPane3\0]
"Key"="ActionsPane3"
"Location"="c:\\Program Files (x86)\\Common Files\\Microsoft Shared\\VSTO\\ActionsPane3.xsd"
.
Celkový čas: 2012-11-22 16:06:18
ComboFix-quarantined-files.txt 2012-11-22 15:06
.
Před spuštěním: 6 667 464 704
Po spuštění: 6 171 127 808
.
- - End Of File - - 1BAD4D4262866E4F805AC57F2B2A479C
