Prosím o kontrolu logu, procesor jede stále na 100% Vyřešeno

Místo pro vaše HiJackThis logy a logy z dalších programů…

Moderátoři: Mods_senior, Security team

Zamčeno
Uživatelský avatar
Orcus
člen Security týmu
Elite Level 10.5
Elite Level 10.5
Příspěvky: 10645
Registrován: duben 10
Bydliště: Okolo rostou 3 růže =o)
Pohlaví: Muž
Stav:
Offline

Re: Prosím o kontrolu logu, procesor jede stále na 100%

Příspěvekod Orcus » 15 čer 2013 09:49

TDSS OK, Rogue též. Obrať se ještě na kolegu ohledně toho minidumpu.

Vypni rezidentní štít antiviru a antispywaru
Stáhni si ComboFix (by sUBs)
a ulož si ho na plochu.
Ukonči všechna aktivní okna a spusť ho.
- Po spuštění se zobrazí podmínky užití, potvrď je stiskem tlačítka Ano
- Dále postupuj dle pokynů, během aplikování ComboFixu neklikej do zobrazujícího se okna
- Po dokončení skenování by měl program vytvořit log - C:\ComboFix.txt - zkopíruj sem prosím celý jeho obsah
Pokud bude po kontrole problém spustit aplikace nebo bude vyskakovat hláška o pokusu použít neplatnou operaci na klíč registru, který je označen pro odstranění, stačí restartovat počítač.

Pokud budou problémy , spusť v nouz. režimu.
Láska hřeje, ale uhlí je uhlí. :fire:


Log z HJT vkládejte do HJT sekce. Je-li moc dlouhý, rozděl jej do více zpráv.

Pár rad k bezpečnosti PC.

Po dobu mé nepřítomnosti mě zastupuje memphisto, jaro3 a Diallix

Pokud budete spokojeni , můžete podpořit naše fórum.
Nahoru
Reklama
Top
HavlisOlda
nováček
Příspěvky: 46
Registrován: červen 13
Bydliště: Tisá
Pohlaví: Muž
Stav:
Offline

Re: Prosím o kontrolu logu, procesor jede stále na 100%

Příspěvekod HavlisOlda » 17 čer 2013 21:41

ComboFix 13-06-17.01 - klient 17.06.2013 20:50:02.1.2 - x64
Microsoft Windows 7 Ultimate 6.1.7601.1.1250.420.1029.18.8191.6029 [GMT 2:00]
Spuštěný z: c:\users\klient\AppData\Local\Temp\is1971879534\4042790_Setup.EXE
AV: Microsoft Security Essentials *Disabled/Updated* {3F839487-C7A2-C958-E30C-E2825BA31FB5}
SP: IObit Malware Fighter *Disabled/Updated* {A751AC20-3B48-5237-898A-78C4436BB78D}
SP: Microsoft Security Essentials *Disabled/Updated* {84E27563-E198-C6D6-D9BC-D9F020245508}
SP: Windows Defender *Disabled/Outdated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.
.
((((((((((((((((((((((((((((((((((((((( Ostatní výmazy )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
c:\program files (x86)\SSearch
c:\program files (x86)\SSearch\search.ico
c:\program files (x86)\SSearch\sqlite3.exe
c:\programdata\100
c:\programdata\Bc
c:\programdata\Bc\0
c:\programdata\wxDownload
c:\programdata\wxDownload\5075e82953654.ocx
c:\programdata\wxDownload\5075e8295368d.html
c:\programdata\wxDownload\5075e829536c5.js
c:\programdata\wxDownload\iliddkmeogikamejbgpkchegbegichip.crx
c:\programdata\wxDownload\settings.ini
C:\STFFFBE.tmp
c:\users\klient\AppData\Roaming\yuvcodecs-1.3.exe
c:\windows\IsUn0405.exe
c:\windows\SysWow64\CFG
c:\windows\SysWow64\CFG\ban2.dat
c:\windows\SysWow64\CFG\editor.scs
c:\windows\SysWow64\CFG\log.cfg
c:\windows\SysWow64\CFG\pten.cfg
c:\windows\SysWow64\CFG\wpos.dat
c:\windows\SysWow64\frapsvid.dll
c:\windows\XSxS
F:\Autorun.inf
F:\install.exe
F:\Setup.exe
.
.
((((((((((((((((((((((((( Soubory vytvořené od 2013-05-17 do 2013-06-17 )))))))))))))))))))))))))))))))
.
.
2013-06-17 17:44 . 2013-05-21 18:09 964552 ----a-w- c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\{2ABF56F7-F6B6-4BAE-A6AA-89EA95F3E687}\gapaengine.dll
2013-06-17 17:43 . 2013-06-12 03:08 9552976 ----a-w- c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\{A40B811D-F2CE-4CCD-8D9B-E5FADF98B4B2}\mpengine.dll
2013-06-15 04:46 . 2013-05-13 06:37 9460464 ----a-w- c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\Backup\mpengine.dll
2013-06-14 08:22 . 2013-06-14 08:31 318 ----a-w- c:\windows\DeleteOnReboot.bat
2013-06-14 07:11 . 2013-06-14 07:11 -------- d-----w- c:\program files\WhoCrashed
2013-06-12 13:01 . 2013-06-12 13:01 -------- d-----w- c:\users\klient\AppData\Roaming\Malwarebytes
2013-06-12 13:00 . 2013-06-12 13:00 -------- d-----w- c:\programdata\Malwarebytes
2013-06-12 13:00 . 2013-06-12 13:01 -------- d-----w- c:\program files (x86)\Malwarebytes' Anti-Malware
2013-06-12 13:00 . 2013-04-04 12:50 25928 ----a-w- c:\windows\system32\drivers\mbam.sys
2013-06-12 05:36 . 2013-06-12 05:36 388096 ----a-r- c:\users\klient\AppData\Roaming\Microsoft\Installer\{45A66726-69BC-466B-A7A4-12FCBA4883D7}\HiJackThis.exe
2013-06-12 05:36 . 2013-06-12 05:36 -------- d-----w- c:\program files (x86)\Trend Micro
2013-06-11 19:00 . 2013-06-11 19:00 526336 ----a-w- c:\windows\system32\ieui.dll
2013-06-11 19:00 . 2013-06-11 19:00 15404544 ----a-w- c:\windows\system32\ieframe.dll
2013-06-11 19:00 . 2013-06-11 19:00 2706432 ----a-w- c:\windows\SysWow64\mshtml.tlb
2013-06-11 19:00 . 2013-06-11 19:00 2706432 ----a-w- c:\windows\system32\mshtml.tlb
2013-06-11 19:00 . 2013-06-11 19:00 19233792 ----a-w- c:\windows\system32\mshtml.dll
2013-06-11 18:59 . 2013-06-11 19:00 1365504 ----a-w- c:\windows\system32\urlmon.dll
2013-06-11 18:59 . 2013-06-11 18:59 279040 ----a-w- c:\program files\Internet Explorer\sqmapi.dll
2013-06-11 18:59 . 2013-06-11 18:59 2648064 ----a-w- c:\windows\system32\iertutil.dll
2013-06-11 18:59 . 2013-06-11 18:59 218112 ----a-w- c:\program files (x86)\Internet Explorer\sqmapi.dll
2013-06-11 18:51 . 2013-06-11 18:51 1910632 ----a-w- c:\windows\system32\drivers\tcpip.sys
2013-06-11 18:50 . 2013-06-11 18:50 751104 ----a-w- c:\windows\system32\win32spl.dll
2013-06-11 18:50 . 2013-06-11 18:50 492544 ----a-w- c:\windows\SysWow64\win32spl.dll
2013-06-11 18:49 . 2013-06-11 18:49 24576 ----a-w- c:\windows\SysWow64\cryptdlg.dll
2013-06-11 18:49 . 2013-06-11 18:49 30720 ----a-w- c:\windows\system32\cryptdlg.dll
2013-06-11 18:46 . 2013-06-11 18:46 1887232 ----a-w- c:\windows\system32\d3d11.dll
2013-06-11 18:46 . 2013-06-11 18:46 1505280 ----a-w- c:\windows\SysWow64\d3d11.dll
2013-06-11 18:45 . 2013-06-11 18:45 1424384 ----a-w- c:\windows\system32\WindowsCodecs.dll
2013-06-11 18:45 . 2013-06-11 18:45 1230336 ----a-w- c:\windows\SysWow64\WindowsCodecs.dll
2013-06-11 18:43 . 2013-06-11 18:43 52224 ----a-w- c:\windows\system32\certenc.dll
2013-06-11 18:43 . 2013-06-11 18:43 1192448 ----a-w- c:\windows\system32\certutil.exe
2013-06-11 18:43 . 2013-06-11 18:43 903168 ----a-w- c:\windows\SysWow64\certutil.exe
2013-06-11 18:43 . 2013-06-11 18:43 43008 ----a-w- c:\windows\SysWow64\certenc.dll
2013-06-11 18:43 . 2013-06-11 18:43 1464320 ----a-w- c:\windows\system32\crypt32.dll
2013-06-11 18:43 . 2013-06-11 18:43 184320 ----a-w- c:\windows\system32\cryptsvc.dll
2013-06-11 18:43 . 2013-06-11 18:43 140288 ----a-w- c:\windows\SysWow64\cryptsvc.dll
2013-06-11 18:43 . 2013-06-11 18:43 139776 ----a-w- c:\windows\system32\cryptnet.dll
2013-06-11 18:43 . 2013-06-11 18:43 1160192 ----a-w- c:\windows\SysWow64\crypt32.dll
2013-06-11 18:43 . 2013-06-11 18:43 103936 ----a-w- c:\windows\SysWow64\cryptnet.dll
2013-06-11 17:06 . 2013-06-11 17:06 -------- d-----w- c:\programdata\ATI
2013-06-11 09:50 . 2013-06-11 09:50 -------- d-----w- c:\program files (x86)\ATI
2013-06-11 09:11 . 2013-06-11 09:11 -------- d-----w- c:\program files\ATI
2013-06-10 11:27 . 2013-06-10 11:27 -------- d-----w- c:\users\klient\SyncFolder
2013-06-10 06:58 . 2013-06-10 06:58 -------- d-----w- c:\programdata\StarApp
2013-06-10 06:22 . 2013-06-10 11:28 -------- d-----w- c:\program files (x86)\MyPC Backup
2013-06-06 22:15 . 2013-06-06 22:21 -------- d-----w- c:\program files (x86)\Farming Simulator 2013
2013-06-05 05:08 . 2013-06-09 20:38 -------- d-----w- c:\program files (x86)\GRID 2
2013-06-04 14:09 . 2013-06-09 20:11 -------- d-----w- c:\program files (x86)\Landwirtschafts Simulator 2011
.
.
.
(((((((((((((((((((((((((((((((((((((((( Find3M výpis ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2013-06-12 16:27 . 2013-03-06 20:28 692104 ----a-w- c:\windows\SysWow64\FlashPlayerApp.exe
2013-06-12 16:27 . 2013-02-14 06:34 71048 ----a-w- c:\windows\SysWow64\FlashPlayerCPLApp.cpl
2013-06-12 14:15 . 2011-10-10 01:12 75825640 ----a-w- c:\windows\system32\MRT.exe
2013-05-21 18:09 . 2012-06-12 18:02 964552 ----a-w- c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\NISBackup\gapaengine.dll
2013-05-10 08:11 . 2011-03-28 17:36 22240 ----a-w- c:\programdata\Microsoft\IdentityCRL\production\ppcrlconfig600.dll
2013-05-10 07:57 . 2013-05-10 07:57 27208 ----a-w- c:\windows\system32\AdobePDFUI.dll
2013-05-10 07:57 . 2013-05-10 07:57 55872 ----a-w- c:\windows\system32\AdobePDF.dll
2013-05-09 17:15 . 2013-05-07 12:00 281688 ----a-w- c:\windows\SysWow64\PnkBstrB.exe
2013-05-09 17:15 . 2012-03-03 02:18 281688 ----a-w- c:\windows\SysWow64\PnkBstrB.xtr
2013-05-09 11:01 . 2012-11-10 11:44 281688 ----a-w- c:\windows\SysWow64\PnkBstrB.ex0
2013-05-07 12:00 . 2013-05-07 12:00 76888 ----a-w- c:\windows\SysWow64\PnkBstrA.exe
2013-05-06 17:43 . 2013-05-06 17:43 283200 ----a-w- c:\windows\system32\drivers\dtsoftbus01.sys
2013-05-02 15:29 . 2011-10-07 21:13 278800 ------w- c:\windows\system32\MpSigStub.exe
2013-04-28 07:58 . 2013-04-28 07:58 95648 ----a-w- c:\windows\SysWow64\WindowsAccessBridge-32.dll
2013-04-28 07:58 . 2012-04-29 06:35 866720 ----a-w- c:\windows\SysWow64\npdeployJava1.dll
2013-04-28 07:58 . 2011-10-07 21:13 788896 ----a-w- c:\windows\SysWow64\deployJava1.dll
2013-04-26 11:59 . 2013-02-09 10:34 48648 ----a-w- c:\programdata\Microsoft\eHome\Packages\MCEClientUX\UpdateableMarkup-2\Markup.dll
2013-04-17 18:20 . 2013-03-17 17:37 26432 ----a-w- c:\windows\system32\RegistryDefragBootTime.exe
2013-04-13 05:49 . 2013-05-15 07:40 135168 ----a-w- c:\windows\apppatch\AppPatch64\AcXtrnal.dll
2013-04-13 05:49 . 2013-05-15 07:40 350208 ----a-w- c:\windows\apppatch\AppPatch64\AcLayers.dll
2013-04-13 05:49 . 2013-05-15 07:40 308736 ----a-w- c:\windows\apppatch\AppPatch64\AcGenral.dll
2013-04-13 05:49 . 2013-05-15 07:40 111104 ----a-w- c:\windows\apppatch\AppPatch64\acspecfc.dll
2013-04-13 04:45 . 2013-05-15 07:40 474624 ----a-w- c:\windows\apppatch\AcSpecfc.dll
2013-04-13 04:45 . 2013-05-15 07:40 2176512 ----a-w- c:\windows\apppatch\AcGenral.dll
2013-04-12 14:45 . 2013-04-24 03:12 1656680 ----a-w- c:\windows\system32\drivers\ntfs.sys
2013-04-12 13:28 . 2013-04-12 13:28 226304 ----a-w- c:\windows\system32\elshyph.dll
2013-04-12 13:28 . 2013-04-12 13:28 185344 ----a-w- c:\windows\SysWow64\elshyph.dll
2013-04-12 13:28 . 2013-04-12 13:28 1054720 ----a-w- c:\windows\system32\MsSpellCheckingFacility.exe
2013-04-12 13:28 . 2013-04-12 13:28 719360 ----a-w- c:\windows\SysWow64\mshtmlmedia.dll
2013-04-12 13:28 . 2013-04-12 13:28 523264 ----a-w- c:\windows\SysWow64\vbscript.dll
2013-04-12 13:28 . 2013-04-12 13:28 38400 ----a-w- c:\windows\SysWow64\imgutil.dll
2013-04-12 13:28 . 2013-04-12 13:28 158720 ----a-w- c:\windows\SysWow64\msls31.dll
2013-04-12 13:28 . 2013-04-12 13:28 150528 ----a-w- c:\windows\SysWow64\iexpress.exe
2013-04-12 13:28 . 2013-04-12 13:28 138752 ----a-w- c:\windows\SysWow64\wextract.exe
2013-04-12 13:28 . 2013-04-12 13:28 137216 ----a-w- c:\windows\SysWow64\ieUnatt.exe
2013-04-12 13:28 . 2013-04-12 13:28 12800 ----a-w- c:\windows\SysWow64\mshta.exe
2013-04-12 13:28 . 2013-04-12 13:28 73728 ----a-w- c:\windows\SysWow64\SetIEInstalledDate.exe
2013-04-12 13:28 . 2013-04-12 13:28 61952 ----a-w- c:\windows\SysWow64\tdc.ocx
2013-04-12 13:28 . 2013-04-12 13:28 48640 ----a-w- c:\windows\SysWow64\mshtmler.dll
2013-04-12 13:28 . 2013-04-12 13:28 361984 ----a-w- c:\windows\SysWow64\html.iec
2013-04-12 13:28 . 2013-04-12 13:28 23040 ----a-w- c:\windows\SysWow64\licmgr10.dll
2013-04-12 13:28 . 2013-04-12 13:28 1441280 ----a-w- c:\windows\SysWow64\inetcpl.cpl
2013-04-12 13:28 . 2013-04-12 13:28 110592 ----a-w- c:\windows\SysWow64\IEAdvpack.dll
2013-04-12 13:28 . 2013-04-12 13:28 97280 ----a-w- c:\windows\system32\mshtmled.dll
2013-04-12 13:28 . 2013-04-12 13:28 905728 ----a-w- c:\windows\system32\mshtmlmedia.dll
2013-04-12 13:28 . 2013-04-12 13:28 81408 ----a-w- c:\windows\system32\icardie.dll
2013-04-12 13:28 . 2013-04-12 13:28 762368 ----a-w- c:\windows\system32\ieapfltr.dll
2013-04-12 13:28 . 2013-04-12 13:28 452096 ----a-w- c:\windows\system32\dxtmsft.dll
2013-04-12 13:28 . 2013-04-12 13:28 441856 ----a-w- c:\windows\system32\html.iec
2013-04-12 13:28 . 2013-04-12 13:28 281600 ----a-w- c:\windows\system32\dxtrans.dll
2013-04-12 13:28 . 2013-04-12 13:28 27648 ----a-w- c:\windows\system32\licmgr10.dll
2013-04-12 13:28 . 2013-04-12 13:28 270848 ----a-w- c:\windows\system32\iedkcs32.dll
2013-04-12 13:28 . 2013-04-12 13:28 247296 ----a-w- c:\windows\system32\webcheck.dll
2013-04-12 13:28 . 2013-04-12 13:28 235008 ----a-w- c:\windows\system32\url.dll
2013-04-12 13:28 . 2013-04-12 13:28 216064 ----a-w- c:\windows\system32\msls31.dll
2013-04-12 13:28 . 2013-04-12 13:28 197120 ----a-w- c:\windows\system32\msrating.dll
2013-04-12 13:28 . 2013-04-12 13:28 1509376 ----a-w- c:\windows\system32\inetcpl.cpl
2013-04-12 13:28 . 2013-04-12 13:28 144896 ----a-w- c:\windows\system32\wextract.exe
2013-04-12 13:28 . 2013-04-12 13:28 1400416 ----a-w- c:\windows\system32\ieapfltr.dat
2013-04-12 13:28 . 2013-04-12 13:28 102912 ----a-w- c:\windows\system32\inseng.dll
2013-04-12 13:28 . 2013-04-12 13:28 167424 ----a-w- c:\windows\system32\iexpress.exe
2013-04-12 13:28 . 2013-04-12 13:28 92160 ----a-w- c:\windows\system32\SetIEInstalledDate.exe
2013-04-12 13:28 . 2013-04-12 13:28 77312 ----a-w- c:\windows\system32\tdc.ocx
2013-04-12 13:28 . 2013-04-12 13:28 62976 ----a-w- c:\windows\system32\pngfilt.dll
2013-04-12 13:28 . 2013-04-12 13:28 599552 ----a-w- c:\windows\system32\vbscript.dll
2013-04-12 13:28 . 2013-04-12 13:28 52224 ----a-w- c:\windows\system32\msfeedsbs.dll
2013-04-12 13:28 . 2013-04-12 13:28 51200 ----a-w- c:\windows\system32\imgutil.dll
2013-04-12 13:28 . 2013-04-12 13:28 48640 ----a-w- c:\windows\system32\mshtmler.dll
2013-04-12 13:28 . 2013-04-12 13:28 173568 ----a-w- c:\windows\system32\ieUnatt.exe
2013-04-12 13:28 . 2013-04-12 13:28 149504 ----a-w- c:\windows\system32\occache.dll
2013-04-12 13:28 . 2013-04-12 13:28 13824 ----a-w- c:\windows\system32\mshta.exe
2013-04-12 13:28 . 2013-04-12 13:28 136192 ----a-w- c:\windows\system32\iepeers.dll
2013-04-12 13:28 . 2013-04-12 13:28 135680 ----a-w- c:\windows\system32\IEAdvpack.dll
2013-04-12 13:28 . 2013-04-12 13:28 12800 ----a-w- c:\windows\system32\msfeedssync.exe
2013-04-10 06:01 . 2013-05-15 07:40 265064 ----a-w- c:\windows\system32\drivers\dxgmms1.sys
2013-04-10 06:01 . 2013-05-15 07:40 983400 ----a-w- c:\windows\system32\drivers\dxgkrnl.sys
2013-04-10 03:30 . 2013-05-15 07:40 3153920 ----a-w- c:\windows\system32\win32k.sys
2013-04-07 08:54 . 2012-11-03 06:45 1455408 ----a-w- c:\windows\system32\dmwu.exe
2013-04-07 08:53 . 2012-11-03 06:45 33792 ----a-w- c:\windows\system32\ImHttpComm.dll
2013-04-05 21:40 . 2013-03-30 00:33 2477216 ----a-w- c:\programdata\Microsoft\VisualStudio\11.0\1033\ResourceCache.dll
2013-03-25 20:39 . 2013-03-25 20:39 4546560 ----a-w- c:\windows\SysWow64\GPhotos.scr
.
.
(((((((((((((((((((((((((((((((((( Spouštěcí body v registru )))))))))))))))))))))))))))))))))))))))))))))
.
.
*Poznámka* prázdné záznamy a legitimní výchozí údaje nejsou zobrazeny.
REGEDIT4
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\1AMPCBOK]
@="{04cd1f3e-81d5-4904-a3ab-e0f99a7d769d}"
[HKEY_CLASSES_ROOT\CLSID\{04cd1f3e-81d5-4904-a3ab-e0f99a7d769d}]
2010-11-05 01:58 297808 ----a-w- c:\windows\System32\mscoree.dll
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Sidebar"="c:\program files\Windows Sidebar\sidebar.exe" [2010-11-20 1475584]
"Advanced SystemCare 6"="c:\program files (x86)\IObit\Advanced SystemCare 6\ASCTray.exe" [2013-04-18 491840]
"DAEMON Tools Lite"="c:\program files (x86)\DAEMON Tools Lite\DTLite.exe" [2013-03-14 3672640]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]
"GrooveMonitor"="c:\program files (x86)\Microsoft Office\Office12\GrooveMonitor.exe" [2009-02-26 30040]
"Adobe Acrobat Speed Launcher"="c:\program files (x86)\Adobe\Acrobat 10.0\Acrobat\Acrobat_sl.exe" [2013-05-10 38984]
"seznam-listicka-distribuce"="c:\program files (x86)\Seznam.cz\distribution\szninstall.exe" [2012-09-13 1009288]
"SunJavaUpdateSched"="c:\program files (x86)\Common Files\Java\Java Update\jusched.exe" [2013-03-12 253816]
"Adobe ARM"="c:\program files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2013-04-04 958576]
"Acrobat Assistant 8.0"="c:\program files (x86)\Adobe\Acrobat 10.0\Acrobat\Acrotray.exe" [2013-05-10 840768]
"IObit Malware Fighter"="c:\program files (x86)\IObit\IObit Malware Fighter\IMF.exe" [2013-06-07 1514816]
"ATICustomerCare"="c:\program files (x86)\ATI\ATICustomerCare\ATICustomerCare.exe" [2009-06-14 307200]
.
c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\
Content Manager Assistant for PlayStation(R).lnk - c:\program files (x86)\Sony\Content Manager Assistant\CMA.exe [2013-3-13 3458968]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorUser"= 3 (0x3)
"EnableUIADesktopToggle"= 0 (0x0)
"PromptOnSecureDesktop"= 0 (0x0)
"EnableLinkedConnections"= 1 (0x1)
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\windows]
"LoadAppInit_DLLs"=1 (0x1)
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\IMFservice]
@="Service"
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MsMpSvc]
@="Service"
.
R1 gllkueil;gllkueil; [x]
R1 oeaiiyey;oeaiiyey; [x]
R2 BackupStack;Computer Backup (MyPC Backup);c:\program files (x86)\MyPC Backup\BackupStack.exe;c:\program files (x86)\MyPC Backup\BackupStack.exe [x]
R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [x]
R2 Hamachi2Svc;LogMeIn Hamachi Tunneling Engine; [x]
R2 SkypeUpdate;Skype Updater;c:\program files (x86)\Skype\Updater\Updater.exe;c:\program files (x86)\Skype\Updater\Updater.exe [x]
R3 androidusb;SAMSUNG Android Composite ADB Interface Driver;c:\windows\system32\Drivers\ssadadb.sys;c:\windows\SYSNATIVE\Drivers\ssadadb.sys [x]
R3 atillk64;atillk64;c:\users\klient\Desktop\ati\atillk64.sys;c:\users\klient\Desktop\ati\atillk64.sys [x]
R3 ATP;Comodo Unite Miniport Driver;c:\windows\system32\DRIVERS\cmdatp.sys;c:\windows\SYSNATIVE\DRIVERS\cmdatp.sys [x]
R3 BTCOM;Bluetooth Serial port driver;c:\windows\system32\DRIVERS\btcomport.sys;c:\windows\SYSNATIVE\DRIVERS\btcomport.sys [x]
R3 dgderdrv;dgderdrv;c:\windows\system32\drivers\dgderdrv.sys;c:\windows\SYSNATIVE\drivers\dgderdrv.sys [x]
R3 EagleX64;EagleX64; [x]
R3 ewusbnet;HUAWEI USB-NDIS miniport;c:\windows\system32\DRIVERS\ewusbnet.sys;c:\windows\SYSNATIVE\DRIVERS\ewusbnet.sys [x]
R3 FLEXnet Licensing Service 64;FLEXnet Licensing Service 64;c:\program files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService64.exe;c:\program files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService64.exe [x]
R3 Futuremark SystemInfo Service;Futuremark SystemInfo Service;c:\program files (x86)\Common Files\Futuremark Shared\Futuremark SystemInfo\FMSISvc.exe;c:\program files (x86)\Common Files\Futuremark Shared\Futuremark SystemInfo\FMSISvc.exe [x]
R3 ggflt;SEMC USB Flash Driver Filter;c:\windows\system32\DRIVERS\ggflt.sys;c:\windows\SYSNATIVE\DRIVERS\ggflt.sys [x]
R3 MSI_MSIBIOS_010507;MSI_MSIBIOS_010507; [x]
R3 NisDrv;Microsoft Network Inspection System;c:\windows\system32\DRIVERS\NisDrvWFP.sys;c:\windows\SYSNATIVE\DRIVERS\NisDrvWFP.sys [x]
R3 NisSrv;Kontrola sítě Microsoft;c:\program files\Microsoft Security Client\NisSrv.exe;c:\program files\Microsoft Security Client\NisSrv.exe [x]
R3 NTIOLib_1_0_4;NTIOLib_1_0_4; [x]
R3 PAC207;SoC PC-Camera;c:\windows\system32\DRIVERS\PFC027.SYS;c:\windows\SYSNATIVE\DRIVERS\PFC027.SYS [x]
R3 pcouffin;VSO Software pcouffin;c:\windows\system32\Drivers\pcouffin.sys;c:\windows\SYSNATIVE\Drivers\pcouffin.sys [x]
R3 Ph3xIB64;Philips 713x Inbox PCI TV Card;c:\windows\system32\DRIVERS\Ph3xIB64.sys;c:\windows\SYSNATIVE\DRIVERS\Ph3xIB64.sys [x]
R3 RdpVideoMiniport;Remote Desktop Video Miniport Driver;c:\windows\system32\drivers\rdpvideominiport.sys;c:\windows\SYSNATIVE\drivers\rdpvideominiport.sys [x]
R3 RegFilter;RegFilter;c:\program files (x86)\IObit\IObit Malware Fighter\drivers\win7_amd64\regfilter.sys;c:\program files (x86)\IObit\IObit Malware Fighter\drivers\win7_amd64\regfilter.sys [x]
R3 Revoflt;Revoflt;c:\windows\system32\DRIVERS\revoflt.sys;c:\windows\SYSNATIVE\DRIVERS\revoflt.sys [x]
R3 Sony PC Companion;Sony PC Companion;c:\program files (x86)\Sony\Sony PC Companion\PCCService.exe;c:\program files (x86)\Sony\Sony PC Companion\PCCService.exe [x]
R3 ss_bbus;SAMSUNG USB Mobile Device (WDM);c:\windows\system32\DRIVERS\ss_bbus.sys;c:\windows\SYSNATIVE\DRIVERS\ss_bbus.sys [x]
R3 ss_bmdfl;SAMSUNG USB Mobile Modem (Filter);c:\windows\system32\DRIVERS\ss_bmdfl.sys;c:\windows\SYSNATIVE\DRIVERS\ss_bmdfl.sys [x]
R3 ss_bmdm;SAMSUNG USB Mobile Modem;c:\windows\system32\DRIVERS\ss_bmdm.sys;c:\windows\SYSNATIVE\DRIVERS\ss_bmdm.sys [x]
R3 ssadbus;SAMSUNG Android USB Composite Device driver (WDM);c:\windows\system32\DRIVERS\ssadbus.sys;c:\windows\SYSNATIVE\DRIVERS\ssadbus.sys [x]
R3 ssadmdfl;SAMSUNG Android USB Modem (Filter);c:\windows\system32\DRIVERS\ssadmdfl.sys;c:\windows\SYSNATIVE\DRIVERS\ssadmdfl.sys [x]
R3 ssadmdm;SAMSUNG Android USB Modem Drivers;c:\windows\system32\DRIVERS\ssadmdm.sys;c:\windows\SYSNATIVE\DRIVERS\ssadmdm.sys [x]
R3 Synth3dVsc;Synth3dVsc;c:\windows\system32\drivers\synth3dvsc.sys;c:\windows\SYSNATIVE\drivers\synth3dvsc.sys [x]
R3 Te.Service;Te.Service;c:\program files (x86)\Windows Kits\8.0\Testing\Runtimes\TAEF\Wex.Services.exe;c:\program files (x86)\Windows Kits\8.0\Testing\Runtimes\TAEF\Wex.Services.exe [x]
R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys;c:\windows\SYSNATIVE\drivers\tsusbflt.sys [x]
R3 tsusbhub;tsusbhub;c:\windows\system32\drivers\tsusbhub.sys;c:\windows\SYSNATIVE\drivers\tsusbhub.sys [x]
R3 TuneUpUtilitiesDrv;TuneUpUtilitiesDrv; [x]
R3 UrlFilter;UrlFilter;c:\program files (x86)\IObit\IObit Malware Fighter\drivers\win7_amd64\UrlFilter.sys;c:\program files (x86)\IObit\IObit Malware Fighter\drivers\win7_amd64\UrlFilter.sys [x]
R3 VGPU;VGPU;c:\windows\system32\drivers\rdvgkmd.sys;c:\windows\SYSNATIVE\drivers\rdvgkmd.sys [x]
R3 WatAdminSvc;Služba Technologie aktivace Windows;c:\windows\system32\Wat\WatAdminSvc.exe;c:\windows\SYSNATIVE\Wat\WatAdminSvc.exe [x]
R3 WinRing0_1_2_0;WinRing0_1_2_0;c:\program files (x86)\Razer\Razer Game Booster\Driver\WinRing0x64.sys;c:\program files (x86)\Razer\Razer Game Booster\Driver\WinRing0x64.sys [x]
R4 FileMonitor;FileMonitor;c:\program files (x86)\IObit\IObit Malware Fighter\Drivers\win7_amd64\FileMonitor.sys;c:\program files (x86)\IObit\IObit Malware Fighter\Drivers\win7_amd64\FileMonitor.sys [x]
R4 wlcrasvc;Windows Live Mesh remote connections service;c:\program files\Windows Live\Mesh\wlcrasvc.exe;c:\program files\Windows Live\Mesh\wlcrasvc.exe [x]
S0 BtHidBus;Bluetooth HID Bus Service;c:\windows\System32\Drivers\BtHidBus.sys;c:\windows\SYSNATIVE\Drivers\BtHidBus.sys [x]
S0 MxEFUF;Matrox Extio Upper Function Filter;c:\windows\system32\DRIVERS\MxEFUF64.sys;c:\windows\SYSNATIVE\DRIVERS\MxEFUF64.sys [x]
S0 SmartDefragDriver;SmartDefragDriver;c:\windows\System32\Drivers\SmartDefragDriver.sys;c:\windows\SYSNATIVE\Drivers\SmartDefragDriver.sys [x]
S0 sptd;sptd;c:\windows\\SystemRoot\System32\Drivers\sptd.sys;c:\windows\\SystemRoot\System32\Drivers\sptd.sys [x]
S1 dtsoftbus01;DAEMON Tools Virtual Bus Driver;c:\windows\system32\DRIVERS\dtsoftbus01.sys;c:\windows\SYSNATIVE\DRIVERS\dtsoftbus01.sys [x]
S2 AdvancedSystemCareService6;Advanced SystemCare Service 6;c:\program files (x86)\IObit\Advanced SystemCare 6\ASCService.exe;c:\program files (x86)\IObit\Advanced SystemCare 6\ASCService.exe [x]
S2 AMD External Events Utility;AMD External Events Utility;c:\windows\system32\atiesrxx.exe;c:\windows\SYSNATIVE\atiesrxx.exe [x]
S2 Autodesk Content Service;Autodesk Content Service;c:\program files (x86)\Autodesk\Content Service\Connect.Service.ContentService.exe;c:\program files (x86)\Autodesk\Content Service\Connect.Service.ContentService.exe [x]
S2 BsMobileCS;BsMobileCS;c:\program files (x86)\IVT Corporation\BlueSoleil\BsMobileCS.exe;c:\program files (x86)\IVT Corporation\BlueSoleil\BsMobileCS.exe [x]
S2 CrdphService;COMODO EasyVPN VNC Service;c:\program files\COMODO\EasyVPN\crdphService.exe;c:\program files\COMODO\EasyVPN\crdphService.exe [x]
S2 EasyVpnAdpt;COMODO EasyVPN Service;c:\program files\COMODO\EasyVPN\Vpnservice.exe;c:\program files\COMODO\EasyVPN\Vpnservice.exe [x]
S2 EzVpnSvc;COMODO Unite MultiLogin Service;c:\mc server\EzVpnSvc.exe;c:\mc server\EzVpnSvc.exe [x]
S2 IMFservice;IMF Service;c:\program files (x86)\IObit\IObit Malware Fighter\IMFsrv.exe;c:\program files (x86)\IObit\IObit Malware Fighter\IMFsrv.exe [x]
S2 NAUpdate;Nero Update;c:\program files (x86)\Nero\Update\NASvc.exe;c:\program files (x86)\Nero\Update\NASvc.exe [x]
S2 Skype C2C Service;Skype C2C Service;c:\programdata\Skype\Toolbars\Skype C2C Service\c2c_service.exe;c:\programdata\Skype\Toolbars\Skype C2C Service\c2c_service.exe [x]
S2 TomTomHOMEService;TomTomHOMEService;c:\program files (x86)\TomTom HOME 2\TomTomHOMEService.exe;c:\program files (x86)\TomTom HOME 2\TomTomHOMEService.exe [x]
S3 3xHybr64;SAA713x TV Card Service;c:\windows\system32\DRIVERS\3xHybr64.sys;c:\windows\SYSNATIVE\DRIVERS\3xHybr64.sys [x]
S3 amdiox64;AMD IO Driver;c:\windows\system32\DRIVERS\amdiox64.sys;c:\windows\SYSNATIVE\DRIVERS\amdiox64.sys [x]
S3 AtiHDAudioService;AMD Function Driver for HD Audio Service;c:\windows\system32\drivers\AtihdW76.sys;c:\windows\SYSNATIVE\drivers\AtihdW76.sys [x]
S3 azvusb;Virtual USB Hub;c:\windows\system32\DRIVERS\azvusb.sys;c:\windows\SYSNATIVE\DRIVERS\azvusb.sys [x]
S3 BTCOMBUS;Bluetooth Serial Port Bus Service;c:\windows\system32\Drivers\btcombus.sys;c:\windows\SYSNATIVE\Drivers\btcombus.sys [x]
S3 btnetBUs;Bluetooth PAN Bus Service;c:\windows\system32\Drivers\btnetBus.sys;c:\windows\SYSNATIVE\Drivers\btnetBus.sys [x]
S3 IvtBtBUs;IVT Bluetooth Bus Service;c:\windows\system32\Drivers\IvtBtBus.sys;c:\windows\SYSNATIVE\Drivers\IvtBtBus.sys [x]
S3 RTL8167;Realtek 8167 NT Driver;c:\windows\system32\DRIVERS\Rt64win7.sys;c:\windows\SYSNATIVE\DRIVERS\Rt64win7.sys [x]
.
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\active setup\installed components\{8A69D345-D564-463c-AFF1-A69D9E530F96}]
2013-06-06 21:56 1165776 ----a-w- c:\program files (x86)\Google\Chrome\Application\27.0.1453.110\Installer\chrmstp.exe
.
Obsah adresáře 'Naplánované úlohy'
.
2013-06-17 c:\windows\Tasks\Adobe Flash Player Updater.job
- c:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2013-03-06 16:27]
.
2013-06-17 c:\windows\Tasks\FacebookUpdateTaskUserS-1-5-21-2276255412-1883947941-3749338985-1000Core.job
- c:\users\klient\AppData\Local\Facebook\Update\FacebookUpdate.exe [2012-03-21 17:52]
.
2013-06-17 c:\windows\Tasks\FacebookUpdateTaskUserS-1-5-21-2276255412-1883947941-3749338985-1000UA.job
- c:\users\klient\AppData\Local\Facebook\Update\FacebookUpdate.exe [2012-03-21 17:52]
.
2013-06-17 c:\windows\Tasks\GlaryInitialize.job
- c:\program files (x86)\Glary Utilities\initialize.exe [2012-08-04 07:43]
.
2013-06-10 c:\windows\Tasks\GlaryOneClickOptimizer.job
- c:\program files (x86)\Glary Utilities\oneclickoptimizer.exe [2012-08-04 07:43]
.
2013-06-15 c:\windows\Tasks\GlaryUpdate.job
- c:\program files (x86)\Glary Utilities\webupdate.exe [2012-08-04 07:44]
.
2013-06-17 c:\windows\Tasks\Google Software Updater.job
- c:\program files (x86)\Google\Common\Google Updater\GoogleUpdaterService.exe [2011-10-15 12:32]
.
2013-06-17 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
- c:\program files (x86)\Google\Update\GoogleUpdate.exe [2011-11-19 22:20]
.
2013-06-17 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
- c:\program files (x86)\Google\Update\GoogleUpdate.exe [2011-11-19 22:20]
.
2013-06-13 c:\windows\Tasks\ParetoLogic Registration3.job
- c:\windows\system32\rundll32.exe [2009-07-13 01:14]
.
.
--------- X64 Entries -----------
.
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\1AMPCBOK]
@="{04cd1f3e-81d5-4904-a3ab-e0f99a7d769d}"
[HKEY_CLASSES_ROOT\CLSID\{04cd1f3e-81d5-4904-a3ab-e0f99a7d769d}]
2010-11-05 01:57 444752 ----a-w- c:\windows\System32\mscoree.dll
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"MSC"="c:\program files\Microsoft Security Client\msseces.exe" [2013-01-27 1281512]
"RtHDVCpl"="c:\program files\Realtek\Audio\HDA\RAVCpl64.exe" [2012-04-24 12480616]
"IntelliType Pro"="c:\program files\Microsoft Mouse and Keyboard Center\itype.exe" [2012-11-02 1464944]
"IntelliPoint"="c:\program files\Microsoft Mouse and Keyboard Center\ipoint.exe" [2012-11-02 2076272]
"Windows Mobile-based device management"="c:\windows\WindowsMobile\wmdcBase.exe" [2007-05-31 660360]
.
------- Doplňkový sken -------
.
uLocal Page = c:\windows\system32\blank.htm
uStart Page = hxxp://www.google.com
uDefault_Search_URL = hxxp://www.google.com
mDefault_Search_URL = hxxp://www.google.com
mStart Page = hxxp://www.google.com
mLocal Page = c:\windows\SysWOW64\blank.htm
mSearch Page = hxxp://www.google.com
mSearch Bar = hxxp://www.google.com
uInternet Settings,ProxyOverride = 127.0.0.1:9421;<local>;*.local
mSearchAssistant =
IE: Add to Google Photos Screensa&ver - c:\windows\system32\GPhotos.scr/200
IE: E&xportovat do aplikace Microsoft Excel - c:\progra~2\MICROS~1\Office12\EXCEL.EXE/3000
IE: Převést cíl vazby do Adobe PDF - c:\program files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll/AcroIECaptureSelLinks.html
IE: Převést do Adobe PDF - c:\program files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll/AcroIECapture.html
IE: Připojit cíl vazby k existujícímu PDF - c:\program files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll/AcroIEAppendSelLinks.html
IE: Připojit k existujícímu PDF - c:\program files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll/AcroIEAppend.html
TCP: Interfaces\{39E2CD10-B581-47E2-8C2A-11ED5FC85569}: NameServer = 8.8.8.8,8.8.4.4
TCP: Interfaces\{BAE75CD4-2944-4809-802D-7B198D32936C}: NameServer = 8.8.8.8,8.8.4.4
FF - ProfilePath - c:\users\klient\AppData\Roaming\Mozilla\Firefox\Profiles\fc5bva34.default-1352312131103\
FF - prefs.js: browser.startup.homepage - hxxp://www.seznam.cz/
FF - ExtSQL: 2013-05-03 08:43; ascsurfingprotection@iobit.com; c:\users\klient\AppData\Roaming\Mozilla\Firefox\Profiles\fc5bva34.default-1352312131103\extensions\ascsurfingprotection@iobit.com
FF - ExtSQL: 2013-05-22 20:01; donottrackplus@abine.com; c:\users\klient\AppData\Roaming\Mozilla\Firefox\Profiles\fc5bva34.default-1352312131103\extensions\donottrackplus@abine.com
FF - ExtSQL: 2013-06-10 09:59; hnkbtsofeiy@yuacx.org; c:\users\klient\AppData\Roaming\Mozilla\Firefox\Profiles\fc5bva34.default-1352312131103\extensions\hnkbtsofeiy@yuacx.org
FF - ExtSQL: 2013-06-10 09:59; mzgxwgiwno@iizcptihg.edu; c:\users\klient\AppData\Roaming\Mozilla\Firefox\Profiles\fc5bva34.default-1352312131103\extensions\mzgxwgiwno@iizcptihg.edu
FF - ExtSQL: 2013-06-10 11:15; {ab91efd4-6975-4081-8552-1b3922ed79e2}; c:\users\klient\AppData\Roaming\Mozilla\Firefox\Profiles\fc5bva34.default-1352312131103\extensions\{ab91efd4-6975-4081-8552-1b3922ed79e2}
.
- - - - NEPLATNÉ POLOŽKY ODSTRANĚNÉ Z REGISTRU - - - -
.
ShellIconOverlayIdentifiers-{4d87b7a7-23f1-470c-aa45-96b25b9bd138} - (no file)
HKLM_Wow6432Node-ActiveSetup-{2D46B6DC-2207-486B-B523-A557E6D54B47} - start
WebBrowser-{34AB3C4C-DA1A-4067-96F4-31452C7CFE65} - (no file)
WebBrowser-{5E5AB302-7F65-44CD-8211-C1D4CAACCEA3} - (no file)
WebBrowser-{687578B9-7132-4A7A-80E4-30EE31099E03} - (no file)
ShellIconOverlayIdentifiers-{4d87b7a7-23f1-470c-aa45-96b25b9bd138} - (no file)
ShellIconOverlayIdentifiers-{2012DE06-50C0-48BD-ACDE-88F95D4CAD1F} - (no file)
ShellIconOverlayIdentifiers-{C72C6188-BEF2-46E5-A89A-52F0ED75219E} - (no file)
ShellIconOverlayIdentifiers-{C92F6BC2-AF61-4C0E-80E0-939B8282DDB7} - (no file)
ShellIconOverlayIdentifiers-{0C4A258A-3F3B-4FFF-80A7-9B3BEC139472} - (no file)
ShellIconOverlayIdentifiers-{62CCD8E3-9C21-41E1-B55E-1E26DFC68511} - (no file)
ShellIconOverlayIdentifiers-{A759AFF6-5851-457D-A540-F4ECED148351} - (no file)
ShellIconOverlayIdentifiers-{1574C9EF-7D58-488F-B358-8B78C1538F51} - (no file)
AddRemove-CodInstl - c:\windows\system32\CDUninst.isu
AddRemove-HelixYUVCodecs - c:\windows\system32\uninstHelixYUV.exe
AddRemove-SP_4e24eecb - c:\program files (x86)\WebSearch\uninstall.exe
AddRemove-SP_5dec30d7 - c:\program files (x86)\ZoomEx\uninstall.exe
AddRemove-SP_e14dcdfa - c:\program files (x86)\ContinueToSave\uninstall.exe
AddRemove-{53820F89-063F-10D7-7457-06C201F4CBF0} - c:\programdata\Zoomex\uninstall.exe
.
.
.
--------------------- ZAMKNUTÉ KLÍČE V REGISTRU ---------------------
.
[HKEY_USERS\S-1-5-21-2276255412-1883947941-3749338985-1000\Software\SecuROM\!CAUTION! NEVER A OR CHANGE ANY KEY*]
"??"=hex:a3,20,f9,81,d0,b8,c5,0c,cd,d9,f5,b8,48,f3,0f,32,d1,1e,35,42,58,87,71,
a3,50,70,cb,36,1a,1a,c2,1d,cc,a6,62,85,89,92,34,06,af,51,14,73,69,e9,1e,75,\
"??"=hex:41,b7,c6,36,43,74,89,40,65,89,17,6b,a3,d2,6e,0c
.
[HKEY_USERS\S-1-5-21-2276255412-1883947941-3749338985-1000\Software\SecuROM\License information*]
"datasecu"=hex:e7,9a,d7,7e,ee,02,71,bf,83,76,b8,d0,db,7c,7f,92,07,11,0d,74,94,
56,21,67,24,ca,2c,d0,37,de,f2,69,1c,cf,3c,ec,35,c0,36,b0,3e,0e,66,d2,74,0a,\
"rkeysecu"=hex:2f,0f,d5,3e,02,2b,06,63,b1,0b,dd,b6,71,e2,54,98
.
[HKEY_USERS\S-1-5-21-2276255412-1883947941-3749338985-1000\Software\Trolltech\OrganizationDefaults\Qt Factory Cache 4.7\com.trolltech.Qt.QImageIOHandlerFactoryInterface:\d:\GAMES\B*a*t*t*l*e*f*i*e*l*d* *3*"!\Core\imageformats]
"qgif4.dll"=multi:"2011-10-10T16:42\00gif\00\00"
"qico4.dll"=multi:"2011-10-10T16:42\00ico\00\00"
"qjpeg4.dll"=multi:"2011-10-10T16:42\00jpeg\00jpg\00\00"
.
[HKEY_USERS\S-1-5-21-2276255412-1883947941-3749338985-1000\Software\Trolltech\OrganizationDefaults\Qt Factory Cache 4.7\com.trolltech.Qt.QTextCodecFactoryInterface:\d:\GAMES\B*a*t*t*l*e*f*i*e*l*d* *3*"!\Core\codecs]
"qcncodecs4.dll"=multi:"2011-10-10T16:42\00GB18030\00GBK\00GB2312\00CP936\00MS936\00windows-936\00MIB: 114\00MIB: 113\00MIB: 2025\00\00"
"qkrcodecs4.dll"=multi:"2011-10-10T16:42\00EUC-KR\00cp949\00MIB: 38\00MIB: -949\00\00"
"qtwcodecs4.dll"=multi:"2011-10-10T16:42\00Big5\00Big5-HKSCS\00Big5-ETen\00CP950\00MIB: 2026\00MIB: 2101\00\00"
.
[HKEY_USERS\S-1-5-21-2276255412-1883947941-3749338985-1000\Software\Trolltech\OrganizationDefaults\Qt Plugin Cache 4.7.false\d:\games\B*a*t*t*l*e*f*i*e*l*d* *3*"!\Core\codecs]
"qcncodecs4.dll"=multi:"40703\000\00Windows msvc release full-config QT_NO_DRAGANDDROP\002011-10-10T16:42\00\00"
"qjpcodecs4.dll"=multi:"40602\000\00Windows msvc release full-config\002011-10-10T16:42\00\00"
"qjpcodecsd4.dll"=multi:"40703\001\00Windows msvc debug full-config QT_NO_DRAGANDDROP\002011-10-10T16:42\00\00"
"qkrcodecs4.dll"=multi:"40703\000\00Windows msvc release full-config QT_NO_DRAGANDDROP\002011-10-10T16:42\00\00"
"qtwcodecs4.dll"=multi:"40703\000\00Windows msvc release full-config QT_NO_DRAGANDDROP\002011-10-10T16:42\00\00"
.
[HKEY_USERS\S-1-5-21-2276255412-1883947941-3749338985-1000\Software\Trolltech\OrganizationDefaults\Qt Plugin Cache 4.7.false\d:\games\B*a*t*t*l*e*f*i*e*l*d* *3*"!\Core\imageformats]
"Microsoft.VC80.CRT.manifest"=multi:"0\001\00unknown\002011-10-10T16:42\00\00"
"msvcr80.dll"=multi:"0\001\00unknown\002011-10-10T16:42\00\00"
"qgif4.dll"=multi:"40703\000\00Windows msvc release full-config QT_NO_DRAGANDDROP\002011-10-10T16:42\00\00"
"qico4.dll"=multi:"40703\000\00Windows msvc release full-config QT_NO_DRAGANDDROP\002011-10-10T16:42\00\00"
"qjpeg4.dll"=multi:"40703\000\00Windows msvc release full-config QT_NO_DRAGANDDROP\002011-10-10T16:42\00\00"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@="Shockwave Flash Object"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\InprocServer32]
@="c:\\Windows\\SysWow64\\Macromed\\Flash\\Flash9f.ocx"
"ThreadingModel"="Apartment"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\MiscStatus]
@="0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ProgID]
@="ShockwaveFlash.ShockwaveFlash.9"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
@="c:\\Windows\\SysWow64\\Macromed\\Flash\\Flash9f.ocx, 1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\TypeLib]
@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\Version]
@="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
@="ShockwaveFlash.ShockwaveFlash"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@="Macromedia Flash Factory Object"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\InprocServer32]
@="c:\\Windows\\SysWow64\\Macromed\\Flash\\Flash9f.ocx"
"ThreadingModel"="Apartment"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ProgID]
@="FlashFactory.FlashFactory.1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
@="c:\\Windows\\SysWow64\\Macromed\\Flash\\Flash9f.ocx, 1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\TypeLib]
@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\Version]
@="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
@="FlashFactory.FlashFactory"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D4304BCF-B8E9-4B35-BEA0-DC5B522670C2}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil9f.exe,-101"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D4304BCF-B8E9-4B35-BEA0-DC5B522670C2}\Elevation]
"Enabled"=dword:00000001
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D4304BCF-B8E9-4B35-BEA0-DC5B522670C2}\LocalServer32]
@="c:\\Windows\\SysWow64\\Macromed\\Flash\\FlashUtil9f.exe"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D4304BCF-B8E9-4B35-BEA0-DC5B522670C2}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{2E4BB6BE-A75F-4DC0-9500-68203655A2C4}]
@Denied: (A 2) (Everyone)
@="IFlashBroker"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{2E4BB6BE-A75F-4DC0-9500-68203655A2C4}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{2E4BB6BE-A75F-4DC0-9500-68203655A2C4}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows CE Services]
"SymbolicLinkValue"=hex(6):5c,00,72,00,65,00,67,00,69,00,73,00,74,00,72,00,79,
00,5c,00,4d,00,41,00,43,00,48,00,49,00,4e,00,45,00,5c,00,53,00,4f,00,46,00,\
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0000\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0001\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0002\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0003\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0004\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0005\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\PCW\Security]
@Denied: (Full) (Everyone)
.
------------------------ Jiné spuštené procesy ------------------------
.
c:\program files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
c:\program files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
c:\program files (x86)\IVT Corporation\BlueSoleil\BlueSoleilCS.exe
c:\windows\SysWOW64\PnkBstrA.exe
c:\program files (x86)\IObit\Advanced SystemCare 6\AutoSweep.exe
c:\program files (x86)\IObit\Smart Defrag 2\SmartDefrag.exe
c:\program files (x86)\IObit\Advanced SystemCare 6\Monitor.exe
.
**************************************************************************
.
Celkový čas: 2013-06-17 21:08:52 - počítač byl restartován
ComboFix-quarantined-files.txt 2013-06-17 19:08
.
Před spuštěním: Volných bajtů: 51 157 180 416
Po spuštění: Volných bajtů: 50 891 681 792
.
- - End Of File - - 829F2190ECAF90798C50A9AB804B8F50
A36C5E4F47E84449FF07ED3517B43A31
Nahoru
Uživatelský avatar
jaro3
člen Security týmu
Guru Level 15
Guru Level 15
Příspěvky: 43294
Registrován: červen 07
Bydliště: Jižní Čechy
Pohlaví: Muž
Stav:
Offline

Re: Prosím o kontrolu logu, procesor jede stále na 100%

Příspěvekod jaro3 » 17 čer 2013 22:19

AV: Microsoft Security Essentials *Disabled/Updated* {3F839487-C7A2-C958-E30C-E2825BA31FB5}
SP: IObit Malware Fighter *Disabled/Updated* {A751AC20-3B48-5237-898A-78C4436BB78D}
SP: Microsoft Security Essentials *Disabled/Updated* {84E27563-E198-C6D6-D9BC-D9F020245508}
SP: Windows Defender *Disabled/Outdated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

3 antispywarové ochrany je moc...
Odinstaluj:
SP: IObit Malware Fighter

pak nový log z Combofixu.
Při práci s programy HJT, ComboFix,MbAM, SDFix aj. zavřete všechny ostatní aplikace a prohlížeče!
Neposílejte logy do soukromých zpráv.Po dobu mé nepřítomnosti mě zastupuje memphisto , Žbeky a Orcus.
Pokud budete spokojeni , můžete podpořit naše forum:Podpora fóra
Nahoru
HavlisOlda
nováček
Příspěvky: 46
Registrován: červen 13
Bydliště: Tisá
Pohlaví: Muž
Stav:
Offline

Re: Prosím o kontrolu logu, procesor jede stále na 100%

Příspěvekod HavlisOlda » 18 čer 2013 07:49

ComboFix 13-06-17.01 - klient 18.06.2013 7:30.2.2 - x64
Microsoft Windows 7 Ultimate 6.1.7601.1.1250.420.1029.18.8191.6336 [GMT 2:00]
Spuštěný z: c:\users\klient\AppData\Local\Temp\is1971879534\36085946_Setup.EXE
AV: Microsoft Security Essentials *Disabled/Updated* {3F839487-C7A2-C958-E30C-E2825BA31FB5}
SP: Microsoft Security Essentials *Disabled/Updated* {84E27563-E198-C6D6-D9BC-D9F020245508}
SP: Windows Defender *Disabled/Outdated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.
.
((((((((((((((((((((((((( Soubory vytvořené od 2013-05-18 do 2013-06-18 )))))))))))))))))))))))))))))))
.
.
2013-06-18 05:38 . 2013-06-18 05:38 -------- d-----w- c:\users\NeroMediaHomeUser.4\AppData\Local\temp
2013-06-18 05:38 . 2013-06-18 05:38 -------- d-----w- c:\users\Dominik\AppData\Local\temp
2013-06-18 05:38 . 2013-06-18 05:38 -------- d-----w- c:\users\Default\AppData\Local\temp
2013-06-17 20:06 . 2013-06-17 20:06 76232 ----a-w- c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\{23FB7C89-188F-499E-B849-0537981B8481}\offreg.dll
2013-06-17 19:29 . 2013-06-12 03:08 9552976 ----a-w- c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\{23FB7C89-188F-499E-B849-0537981B8481}\mpengine.dll
2013-06-17 17:44 . 2013-05-21 18:09 964552 ----a-w- c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\{2ABF56F7-F6B6-4BAE-A6AA-89EA95F3E687}\gapaengine.dll
2013-06-15 04:46 . 2013-05-13 06:37 9460464 ----a-w- c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\Backup\mpengine.dll
2013-06-14 08:22 . 2013-06-14 08:31 318 ----a-w- c:\windows\DeleteOnReboot.bat
2013-06-14 07:11 . 2013-06-14 07:11 -------- d-----w- c:\program files\WhoCrashed
2013-06-12 13:01 . 2013-06-12 13:01 -------- d-----w- c:\users\klient\AppData\Roaming\Malwarebytes
2013-06-12 13:00 . 2013-06-12 13:00 -------- d-----w- c:\programdata\Malwarebytes
2013-06-12 13:00 . 2013-06-12 13:01 -------- d-----w- c:\program files (x86)\Malwarebytes' Anti-Malware
2013-06-12 13:00 . 2013-04-04 12:50 25928 ----a-w- c:\windows\system32\drivers\mbam.sys
2013-06-12 05:36 . 2013-06-12 05:36 388096 ----a-r- c:\users\klient\AppData\Roaming\Microsoft\Installer\{45A66726-69BC-466B-A7A4-12FCBA4883D7}\HiJackThis.exe
2013-06-12 05:36 . 2013-06-12 05:36 -------- d-----w- c:\program files (x86)\Trend Micro
2013-06-11 19:00 . 2013-06-11 19:00 526336 ----a-w- c:\windows\system32\ieui.dll
2013-06-11 19:00 . 2013-06-11 19:00 15404544 ----a-w- c:\windows\system32\ieframe.dll
2013-06-11 19:00 . 2013-06-11 19:00 2706432 ----a-w- c:\windows\SysWow64\mshtml.tlb
2013-06-11 19:00 . 2013-06-11 19:00 2706432 ----a-w- c:\windows\system32\mshtml.tlb
2013-06-11 19:00 . 2013-06-11 19:00 19233792 ----a-w- c:\windows\system32\mshtml.dll
2013-06-11 18:59 . 2013-06-11 19:00 1365504 ----a-w- c:\windows\system32\urlmon.dll
2013-06-11 18:59 . 2013-06-11 18:59 279040 ----a-w- c:\program files\Internet Explorer\sqmapi.dll
2013-06-11 18:59 . 2013-06-11 18:59 2648064 ----a-w- c:\windows\system32\iertutil.dll
2013-06-11 18:59 . 2013-06-11 18:59 218112 ----a-w- c:\program files (x86)\Internet Explorer\sqmapi.dll
2013-06-11 18:51 . 2013-06-11 18:51 1910632 ----a-w- c:\windows\system32\drivers\tcpip.sys
2013-06-11 18:50 . 2013-06-11 18:50 751104 ----a-w- c:\windows\system32\win32spl.dll
2013-06-11 18:50 . 2013-06-11 18:50 492544 ----a-w- c:\windows\SysWow64\win32spl.dll
2013-06-11 18:49 . 2013-06-11 18:49 24576 ----a-w- c:\windows\SysWow64\cryptdlg.dll
2013-06-11 18:49 . 2013-06-11 18:49 30720 ----a-w- c:\windows\system32\cryptdlg.dll
2013-06-11 18:46 . 2013-06-11 18:46 1887232 ----a-w- c:\windows\system32\d3d11.dll
2013-06-11 18:46 . 2013-06-11 18:46 1505280 ----a-w- c:\windows\SysWow64\d3d11.dll
2013-06-11 18:45 . 2013-06-11 18:45 1424384 ----a-w- c:\windows\system32\WindowsCodecs.dll
2013-06-11 18:45 . 2013-06-11 18:45 1230336 ----a-w- c:\windows\SysWow64\WindowsCodecs.dll
2013-06-11 18:43 . 2013-06-11 18:43 52224 ----a-w- c:\windows\system32\certenc.dll
2013-06-11 18:43 . 2013-06-11 18:43 1192448 ----a-w- c:\windows\system32\certutil.exe
2013-06-11 18:43 . 2013-06-11 18:43 903168 ----a-w- c:\windows\SysWow64\certutil.exe
2013-06-11 18:43 . 2013-06-11 18:43 43008 ----a-w- c:\windows\SysWow64\certenc.dll
2013-06-11 18:43 . 2013-06-11 18:43 1464320 ----a-w- c:\windows\system32\crypt32.dll
2013-06-11 18:43 . 2013-06-11 18:43 184320 ----a-w- c:\windows\system32\cryptsvc.dll
2013-06-11 18:43 . 2013-06-11 18:43 140288 ----a-w- c:\windows\SysWow64\cryptsvc.dll
2013-06-11 18:43 . 2013-06-11 18:43 139776 ----a-w- c:\windows\system32\cryptnet.dll
2013-06-11 18:43 . 2013-06-11 18:43 1160192 ----a-w- c:\windows\SysWow64\crypt32.dll
2013-06-11 18:43 . 2013-06-11 18:43 103936 ----a-w- c:\windows\SysWow64\cryptnet.dll
2013-06-11 17:06 . 2013-06-11 17:06 -------- d-----w- c:\programdata\ATI
2013-06-11 09:50 . 2013-06-11 09:50 -------- d-----w- c:\program files (x86)\ATI
2013-06-11 09:11 . 2013-06-11 09:11 -------- d-----w- c:\program files\ATI
2013-06-10 11:27 . 2013-06-10 11:27 -------- d-----w- c:\users\klient\SyncFolder
2013-06-10 06:58 . 2013-06-10 06:58 -------- d-----w- c:\programdata\StarApp
2013-06-10 06:22 . 2013-06-10 11:28 -------- d-----w- c:\program files (x86)\MyPC Backup
2013-06-06 22:15 . 2013-06-06 22:21 -------- d-----w- c:\program files (x86)\Farming Simulator 2013
2013-06-05 05:08 . 2013-06-09 20:38 -------- d-----w- c:\program files (x86)\GRID 2
2013-06-04 14:09 . 2013-06-09 20:11 -------- d-----w- c:\program files (x86)\Landwirtschafts Simulator 2011
.
.
.
(((((((((((((((((((((((((((((((((((((((( Find3M výpis ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2013-06-12 16:27 . 2013-03-06 20:28 692104 ----a-w- c:\windows\SysWow64\FlashPlayerApp.exe
2013-06-12 16:27 . 2013-02-14 06:34 71048 ----a-w- c:\windows\SysWow64\FlashPlayerCPLApp.cpl
2013-06-12 14:15 . 2011-10-10 01:12 75825640 ----a-w- c:\windows\system32\MRT.exe
2013-05-21 18:09 . 2012-06-12 18:02 964552 ----a-w- c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\NISBackup\gapaengine.dll
2013-05-10 08:11 . 2011-03-28 17:36 22240 ----a-w- c:\programdata\Microsoft\IdentityCRL\production\ppcrlconfig600.dll
2013-05-10 07:57 . 2013-05-10 07:57 27208 ----a-w- c:\windows\system32\AdobePDFUI.dll
2013-05-10 07:57 . 2013-05-10 07:57 55872 ----a-w- c:\windows\system32\AdobePDF.dll
2013-05-09 17:15 . 2013-05-07 12:00 281688 ----a-w- c:\windows\SysWow64\PnkBstrB.exe
2013-05-09 17:15 . 2012-03-03 02:18 281688 ----a-w- c:\windows\SysWow64\PnkBstrB.xtr
2013-05-09 11:01 . 2012-11-10 11:44 281688 ----a-w- c:\windows\SysWow64\PnkBstrB.ex0
2013-05-07 12:00 . 2013-05-07 12:00 76888 ----a-w- c:\windows\SysWow64\PnkBstrA.exe
2013-05-06 17:43 . 2013-05-06 17:43 283200 ----a-w- c:\windows\system32\drivers\dtsoftbus01.sys
2013-05-02 15:29 . 2011-10-07 21:13 278800 ------w- c:\windows\system32\MpSigStub.exe
2013-04-28 07:58 . 2013-04-28 07:58 95648 ----a-w- c:\windows\SysWow64\WindowsAccessBridge-32.dll
2013-04-28 07:58 . 2012-04-29 06:35 866720 ----a-w- c:\windows\SysWow64\npdeployJava1.dll
2013-04-28 07:58 . 2011-10-07 21:13 788896 ----a-w- c:\windows\SysWow64\deployJava1.dll
2013-04-26 11:59 . 2013-02-09 10:34 48648 ----a-w- c:\programdata\Microsoft\eHome\Packages\MCEClientUX\UpdateableMarkup-2\Markup.dll
2013-04-17 18:20 . 2013-03-17 17:37 26432 ----a-w- c:\windows\system32\RegistryDefragBootTime.exe
2013-04-13 05:49 . 2013-05-15 07:40 135168 ----a-w- c:\windows\apppatch\AppPatch64\AcXtrnal.dll
2013-04-13 05:49 . 2013-05-15 07:40 350208 ----a-w- c:\windows\apppatch\AppPatch64\AcLayers.dll
2013-04-13 05:49 . 2013-05-15 07:40 308736 ----a-w- c:\windows\apppatch\AppPatch64\AcGenral.dll
2013-04-13 05:49 . 2013-05-15 07:40 111104 ----a-w- c:\windows\apppatch\AppPatch64\acspecfc.dll
2013-04-13 04:45 . 2013-05-15 07:40 474624 ----a-w- c:\windows\apppatch\AcSpecfc.dll
2013-04-13 04:45 . 2013-05-15 07:40 2176512 ----a-w- c:\windows\apppatch\AcGenral.dll
2013-04-12 14:45 . 2013-04-24 03:12 1656680 ----a-w- c:\windows\system32\drivers\ntfs.sys
2013-04-12 13:28 . 2013-04-12 13:28 226304 ----a-w- c:\windows\system32\elshyph.dll
2013-04-12 13:28 . 2013-04-12 13:28 185344 ----a-w- c:\windows\SysWow64\elshyph.dll
2013-04-12 13:28 . 2013-04-12 13:28 1054720 ----a-w- c:\windows\system32\MsSpellCheckingFacility.exe
2013-04-12 13:28 . 2013-04-12 13:28 719360 ----a-w- c:\windows\SysWow64\mshtmlmedia.dll
2013-04-12 13:28 . 2013-04-12 13:28 523264 ----a-w- c:\windows\SysWow64\vbscript.dll
2013-04-12 13:28 . 2013-04-12 13:28 38400 ----a-w- c:\windows\SysWow64\imgutil.dll
2013-04-12 13:28 . 2013-04-12 13:28 158720 ----a-w- c:\windows\SysWow64\msls31.dll
2013-04-12 13:28 . 2013-04-12 13:28 150528 ----a-w- c:\windows\SysWow64\iexpress.exe
2013-04-12 13:28 . 2013-04-12 13:28 138752 ----a-w- c:\windows\SysWow64\wextract.exe
2013-04-12 13:28 . 2013-04-12 13:28 137216 ----a-w- c:\windows\SysWow64\ieUnatt.exe
2013-04-12 13:28 . 2013-04-12 13:28 12800 ----a-w- c:\windows\SysWow64\mshta.exe
2013-04-12 13:28 . 2013-04-12 13:28 73728 ----a-w- c:\windows\SysWow64\SetIEInstalledDate.exe
2013-04-12 13:28 . 2013-04-12 13:28 61952 ----a-w- c:\windows\SysWow64\tdc.ocx
2013-04-12 13:28 . 2013-04-12 13:28 48640 ----a-w- c:\windows\SysWow64\mshtmler.dll
2013-04-12 13:28 . 2013-04-12 13:28 361984 ----a-w- c:\windows\SysWow64\html.iec
2013-04-12 13:28 . 2013-04-12 13:28 23040 ----a-w- c:\windows\SysWow64\licmgr10.dll
2013-04-12 13:28 . 2013-04-12 13:28 1441280 ----a-w- c:\windows\SysWow64\inetcpl.cpl
2013-04-12 13:28 . 2013-04-12 13:28 110592 ----a-w- c:\windows\SysWow64\IEAdvpack.dll
2013-04-12 13:28 . 2013-04-12 13:28 97280 ----a-w- c:\windows\system32\mshtmled.dll
2013-04-12 13:28 . 2013-04-12 13:28 905728 ----a-w- c:\windows\system32\mshtmlmedia.dll
2013-04-12 13:28 . 2013-04-12 13:28 81408 ----a-w- c:\windows\system32\icardie.dll
2013-04-12 13:28 . 2013-04-12 13:28 762368 ----a-w- c:\windows\system32\ieapfltr.dll
2013-04-12 13:28 . 2013-04-12 13:28 452096 ----a-w- c:\windows\system32\dxtmsft.dll
2013-04-12 13:28 . 2013-04-12 13:28 441856 ----a-w- c:\windows\system32\html.iec
2013-04-12 13:28 . 2013-04-12 13:28 281600 ----a-w- c:\windows\system32\dxtrans.dll
2013-04-12 13:28 . 2013-04-12 13:28 27648 ----a-w- c:\windows\system32\licmgr10.dll
2013-04-12 13:28 . 2013-04-12 13:28 270848 ----a-w- c:\windows\system32\iedkcs32.dll
2013-04-12 13:28 . 2013-04-12 13:28 247296 ----a-w- c:\windows\system32\webcheck.dll
2013-04-12 13:28 . 2013-04-12 13:28 235008 ----a-w- c:\windows\system32\url.dll
2013-04-12 13:28 . 2013-04-12 13:28 216064 ----a-w- c:\windows\system32\msls31.dll
2013-04-12 13:28 . 2013-04-12 13:28 197120 ----a-w- c:\windows\system32\msrating.dll
2013-04-12 13:28 . 2013-04-12 13:28 1509376 ----a-w- c:\windows\system32\inetcpl.cpl
2013-04-12 13:28 . 2013-04-12 13:28 144896 ----a-w- c:\windows\system32\wextract.exe
2013-04-12 13:28 . 2013-04-12 13:28 1400416 ----a-w- c:\windows\system32\ieapfltr.dat
2013-04-12 13:28 . 2013-04-12 13:28 102912 ----a-w- c:\windows\system32\inseng.dll
2013-04-12 13:28 . 2013-04-12 13:28 167424 ----a-w- c:\windows\system32\iexpress.exe
2013-04-12 13:28 . 2013-04-12 13:28 92160 ----a-w- c:\windows\system32\SetIEInstalledDate.exe
2013-04-12 13:28 . 2013-04-12 13:28 77312 ----a-w- c:\windows\system32\tdc.ocx
2013-04-12 13:28 . 2013-04-12 13:28 62976 ----a-w- c:\windows\system32\pngfilt.dll
2013-04-12 13:28 . 2013-04-12 13:28 599552 ----a-w- c:\windows\system32\vbscript.dll
2013-04-12 13:28 . 2013-04-12 13:28 52224 ----a-w- c:\windows\system32\msfeedsbs.dll
2013-04-12 13:28 . 2013-04-12 13:28 51200 ----a-w- c:\windows\system32\imgutil.dll
2013-04-12 13:28 . 2013-04-12 13:28 48640 ----a-w- c:\windows\system32\mshtmler.dll
2013-04-12 13:28 . 2013-04-12 13:28 173568 ----a-w- c:\windows\system32\ieUnatt.exe
2013-04-12 13:28 . 2013-04-12 13:28 149504 ----a-w- c:\windows\system32\occache.dll
2013-04-12 13:28 . 2013-04-12 13:28 13824 ----a-w- c:\windows\system32\mshta.exe
2013-04-12 13:28 . 2013-04-12 13:28 136192 ----a-w- c:\windows\system32\iepeers.dll
2013-04-12 13:28 . 2013-04-12 13:28 135680 ----a-w- c:\windows\system32\IEAdvpack.dll
2013-04-12 13:28 . 2013-04-12 13:28 12800 ----a-w- c:\windows\system32\msfeedssync.exe
2013-04-10 06:01 . 2013-05-15 07:40 265064 ----a-w- c:\windows\system32\drivers\dxgmms1.sys
2013-04-10 06:01 . 2013-05-15 07:40 983400 ----a-w- c:\windows\system32\drivers\dxgkrnl.sys
2013-04-10 03:30 . 2013-05-15 07:40 3153920 ----a-w- c:\windows\system32\win32k.sys
2013-04-07 08:54 . 2012-11-03 06:45 1455408 ----a-w- c:\windows\system32\dmwu.exe
2013-04-07 08:53 . 2012-11-03 06:45 33792 ----a-w- c:\windows\system32\ImHttpComm.dll
2013-04-05 21:40 . 2013-03-30 00:33 2477216 ----a-w- c:\programdata\Microsoft\VisualStudio\11.0\1033\ResourceCache.dll
2013-03-25 20:39 . 2013-03-25 20:39 4546560 ----a-w- c:\windows\SysWow64\GPhotos.scr
.
.
(((((((((((((((((((((((((((((((((( Spouštěcí body v registru )))))))))))))))))))))))))))))))))))))))))))))
.
.
*Poznámka* prázdné záznamy a legitimní výchozí údaje nejsou zobrazeny.
REGEDIT4
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\1AMPCBOK]
@="{04cd1f3e-81d5-4904-a3ab-e0f99a7d769d}"
[HKEY_CLASSES_ROOT\CLSID\{04cd1f3e-81d5-4904-a3ab-e0f99a7d769d}]
2010-11-05 01:58 297808 ----a-w- c:\windows\System32\mscoree.dll
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Sidebar"="c:\program files\Windows Sidebar\sidebar.exe" [2010-11-20 1475584]
"Advanced SystemCare 6"="c:\program files (x86)\IObit\Advanced SystemCare 6\ASCTray.exe" [2013-04-18 491840]
"DAEMON Tools Lite"="c:\program files (x86)\DAEMON Tools Lite\DTLite.exe" [2013-03-14 3672640]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]
"GrooveMonitor"="c:\program files (x86)\Microsoft Office\Office12\GrooveMonitor.exe" [2009-02-26 30040]
"Adobe Acrobat Speed Launcher"="c:\program files (x86)\Adobe\Acrobat 10.0\Acrobat\Acrobat_sl.exe" [2013-05-10 38984]
"seznam-listicka-distribuce"="c:\program files (x86)\Seznam.cz\distribution\szninstall.exe" [2012-09-13 1009288]
"SunJavaUpdateSched"="c:\program files (x86)\Common Files\Java\Java Update\jusched.exe" [2013-03-12 253816]
"Adobe ARM"="c:\program files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2013-04-04 958576]
"Acrobat Assistant 8.0"="c:\program files (x86)\Adobe\Acrobat 10.0\Acrobat\Acrotray.exe" [2013-05-10 840768]
"ATICustomerCare"="c:\program files (x86)\ATI\ATICustomerCare\ATICustomerCare.exe" [2009-06-14 307200]
.
c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\
Content Manager Assistant for PlayStation(R).lnk - c:\program files (x86)\Sony\Content Manager Assistant\CMA.exe [2013-3-13 3458968]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorUser"= 3 (0x3)
"EnableUIADesktopToggle"= 0 (0x0)
"PromptOnSecureDesktop"= 0 (0x0)
"EnableLinkedConnections"= 1 (0x1)
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\windows]
"LoadAppInit_DLLs"=1 (0x1)
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MsMpSvc]
@="Service"
.
R1 gllkueil;gllkueil; [x]
R1 oeaiiyey;oeaiiyey; [x]
R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [x]
R2 Hamachi2Svc;LogMeIn Hamachi Tunneling Engine; [x]
R3 androidusb;SAMSUNG Android Composite ADB Interface Driver;c:\windows\system32\Drivers\ssadadb.sys;c:\windows\SYSNATIVE\Drivers\ssadadb.sys [x]
R3 atillk64;atillk64;c:\users\klient\Desktop\ati\atillk64.sys;c:\users\klient\Desktop\ati\atillk64.sys [x]
R3 ATP;Comodo Unite Miniport Driver;c:\windows\system32\DRIVERS\cmdatp.sys;c:\windows\SYSNATIVE\DRIVERS\cmdatp.sys [x]
R3 BTCOM;Bluetooth Serial port driver;c:\windows\system32\DRIVERS\btcomport.sys;c:\windows\SYSNATIVE\DRIVERS\btcomport.sys [x]
R3 dgderdrv;dgderdrv;c:\windows\system32\drivers\dgderdrv.sys;c:\windows\SYSNATIVE\drivers\dgderdrv.sys [x]
R3 EagleX64;EagleX64; [x]
R3 ewusbnet;HUAWEI USB-NDIS miniport;c:\windows\system32\DRIVERS\ewusbnet.sys;c:\windows\SYSNATIVE\DRIVERS\ewusbnet.sys [x]
R3 FLEXnet Licensing Service 64;FLEXnet Licensing Service 64;c:\program files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService64.exe;c:\program files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService64.exe [x]
R3 Futuremark SystemInfo Service;Futuremark SystemInfo Service;c:\program files (x86)\Common Files\Futuremark Shared\Futuremark SystemInfo\FMSISvc.exe;c:\program files (x86)\Common Files\Futuremark Shared\Futuremark SystemInfo\FMSISvc.exe [x]
R3 ggflt;SEMC USB Flash Driver Filter;c:\windows\system32\DRIVERS\ggflt.sys;c:\windows\SYSNATIVE\DRIVERS\ggflt.sys [x]
R3 MSI_MSIBIOS_010507;MSI_MSIBIOS_010507; [x]
R3 NisDrv;Microsoft Network Inspection System;c:\windows\system32\DRIVERS\NisDrvWFP.sys;c:\windows\SYSNATIVE\DRIVERS\NisDrvWFP.sys [x]
R3 NisSrv;Kontrola sítě Microsoft;c:\program files\Microsoft Security Client\NisSrv.exe;c:\program files\Microsoft Security Client\NisSrv.exe [x]
R3 NTIOLib_1_0_4;NTIOLib_1_0_4; [x]
R3 PAC207;SoC PC-Camera;c:\windows\system32\DRIVERS\PFC027.SYS;c:\windows\SYSNATIVE\DRIVERS\PFC027.SYS [x]
R3 pcouffin;VSO Software pcouffin;c:\windows\system32\Drivers\pcouffin.sys;c:\windows\SYSNATIVE\Drivers\pcouffin.sys [x]
R3 Ph3xIB64;Philips 713x Inbox PCI TV Card;c:\windows\system32\DRIVERS\Ph3xIB64.sys;c:\windows\SYSNATIVE\DRIVERS\Ph3xIB64.sys [x]
R3 RdpVideoMiniport;Remote Desktop Video Miniport Driver;c:\windows\system32\drivers\rdpvideominiport.sys;c:\windows\SYSNATIVE\drivers\rdpvideominiport.sys [x]
S0 BtHidBus;Bluetooth HID Bus Service;c:\windows\System32\Drivers\BtHidBus.sys;c:\windows\SYSNATIVE\Drivers\BtHidBus.sys [x]
S0 MxEFUF;Matrox Extio Upper Function Filter;c:\windows\system32\DRIVERS\MxEFUF64.sys;c:\windows\SYSNATIVE\DRIVERS\MxEFUF64.sys [x]
S1 dtsoftbus01;DAEMON Tools Virtual Bus Driver;c:\windows\system32\DRIVERS\dtsoftbus01.sys;c:\windows\SYSNATIVE\DRIVERS\dtsoftbus01.sys [x]
S2 AdvancedSystemCareService6;Advanced SystemCare Service 6;c:\program files (x86)\IObit\Advanced SystemCare 6\ASCService.exe;c:\program files (x86)\IObit\Advanced SystemCare 6\ASCService.exe [x]
S2 AMD External Events Utility;AMD External Events Utility;c:\windows\system32\atiesrxx.exe;c:\windows\SYSNATIVE\atiesrxx.exe [x]
S2 Autodesk Content Service;Autodesk Content Service;c:\program files (x86)\Autodesk\Content Service\Connect.Service.ContentService.exe;c:\program files (x86)\Autodesk\Content Service\Connect.Service.ContentService.exe [x]
S2 BackupStack;Computer Backup (MyPC Backup);c:\program files (x86)\MyPC Backup\BackupStack.exe;c:\program files (x86)\MyPC Backup\BackupStack.exe [x]
S2 BsMobileCS;BsMobileCS;c:\program files (x86)\IVT Corporation\BlueSoleil\BsMobileCS.exe;c:\program files (x86)\IVT Corporation\BlueSoleil\BsMobileCS.exe [x]
S2 CrdphService;COMODO EasyVPN VNC Service;c:\program files\COMODO\EasyVPN\crdphService.exe;c:\program files\COMODO\EasyVPN\crdphService.exe [x]
S2 EasyVpnAdpt;COMODO EasyVPN Service;c:\program files\COMODO\EasyVPN\Vpnservice.exe;c:\program files\COMODO\EasyVPN\Vpnservice.exe [x]
S2 EzVpnSvc;COMODO Unite MultiLogin Service;c:\mc server\EzVpnSvc.exe;c:\mc server\EzVpnSvc.exe [x]
S2 NAUpdate;Nero Update;c:\program files (x86)\Nero\Update\NASvc.exe;c:\program files (x86)\Nero\Update\NASvc.exe [x]
S3 3xHybr64;SAA713x TV Card Service;c:\windows\system32\DRIVERS\3xHybr64.sys;c:\windows\SYSNATIVE\DRIVERS\3xHybr64.sys [x]
S3 amdiox64;AMD IO Driver;c:\windows\system32\DRIVERS\amdiox64.sys;c:\windows\SYSNATIVE\DRIVERS\amdiox64.sys [x]
S3 AtiHDAudioService;AMD Function Driver for HD Audio Service;c:\windows\system32\drivers\AtihdW76.sys;c:\windows\SYSNATIVE\drivers\AtihdW76.sys [x]
S3 azvusb;Virtual USB Hub;c:\windows\system32\DRIVERS\azvusb.sys;c:\windows\SYSNATIVE\DRIVERS\azvusb.sys [x]
S3 BTCOMBUS;Bluetooth Serial Port Bus Service;c:\windows\system32\Drivers\btcombus.sys;c:\windows\SYSNATIVE\Drivers\btcombus.sys [x]
S3 btnetBUs;Bluetooth PAN Bus Service;c:\windows\system32\Drivers\btnetBus.sys;c:\windows\SYSNATIVE\Drivers\btnetBus.sys [x]
S3 IvtBtBUs;IVT Bluetooth Bus Service;c:\windows\system32\Drivers\IvtBtBus.sys;c:\windows\SYSNATIVE\Drivers\IvtBtBus.sys [x]
.
.
--- Ostatní služby/ovladače v paměti ---
.
*Deregistered* - UrlFilter
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\active setup\installed components\{8A69D345-D564-463c-AFF1-A69D9E530F96}]
2013-06-06 21:56 1165776 ----a-w- c:\program files (x86)\Google\Chrome\Application\27.0.1453.110\Installer\chrmstp.exe
.
Obsah adresáře 'Naplánované úlohy'
.
2013-06-18 c:\windows\Tasks\Adobe Flash Player Updater.job
- c:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2013-03-06 16:27]
.
2013-06-17 c:\windows\Tasks\FacebookUpdateTaskUserS-1-5-21-2276255412-1883947941-3749338985-1000Core.job
- c:\users\klient\AppData\Local\Facebook\Update\FacebookUpdate.exe [2012-03-21 17:52]
.
2013-06-18 c:\windows\Tasks\FacebookUpdateTaskUserS-1-5-21-2276255412-1883947941-3749338985-1000UA.job
- c:\users\klient\AppData\Local\Facebook\Update\FacebookUpdate.exe [2012-03-21 17:52]
.
2013-06-17 c:\windows\Tasks\GlaryInitialize.job
- c:\program files (x86)\Glary Utilities\initialize.exe [2012-08-04 07:43]
.
2013-06-10 c:\windows\Tasks\GlaryOneClickOptimizer.job
- c:\program files (x86)\Glary Utilities\oneclickoptimizer.exe [2012-08-04 07:43]
.
2013-06-15 c:\windows\Tasks\GlaryUpdate.job
- c:\program files (x86)\Glary Utilities\webupdate.exe [2012-08-04 07:44]
.
2013-06-17 c:\windows\Tasks\Google Software Updater.job
- c:\program files (x86)\Google\Common\Google Updater\GoogleUpdaterService.exe [2011-10-15 12:32]
.
2013-06-17 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
- c:\program files (x86)\Google\Update\GoogleUpdate.exe [2011-11-19 22:20]
.
2013-06-18 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
- c:\program files (x86)\Google\Update\GoogleUpdate.exe [2011-11-19 22:20]
.
2013-06-13 c:\windows\Tasks\ParetoLogic Registration3.job
- c:\windows\system32\rundll32.exe [2009-07-13 01:14]
.
.
--------- X64 Entries -----------
.
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\1AMPCBOK]
@="{04cd1f3e-81d5-4904-a3ab-e0f99a7d769d}"
[HKEY_CLASSES_ROOT\CLSID\{04cd1f3e-81d5-4904-a3ab-e0f99a7d769d}]
2010-11-05 01:57 444752 ----a-w- c:\windows\System32\mscoree.dll
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"MSC"="c:\program files\Microsoft Security Client\msseces.exe" [2013-01-27 1281512]
"RtHDVCpl"="c:\program files\Realtek\Audio\HDA\RAVCpl64.exe" [2012-04-24 12480616]
"IntelliType Pro"="c:\program files\Microsoft Mouse and Keyboard Center\itype.exe" [2012-11-02 1464944]
"IntelliPoint"="c:\program files\Microsoft Mouse and Keyboard Center\ipoint.exe" [2012-11-02 2076272]
"Windows Mobile-based device management"="c:\windows\WindowsMobile\wmdcBase.exe" [2007-05-31 660360]
.
------- Doplňkový sken -------
.
uLocal Page = c:\windows\system32\blank.htm
uStart Page = hxxp://www.google.com
uDefault_Search_URL = hxxp://www.google.com
mDefault_Search_URL = hxxp://www.google.com
mStart Page = hxxp://www.google.com
mLocal Page = c:\windows\SysWOW64\blank.htm
mSearch Page = hxxp://www.google.com
mSearch Bar = hxxp://www.google.com
uInternet Settings,ProxyOverride = 127.0.0.1:9421;<local>;*.local
mSearchAssistant =
IE: Add to Google Photos Screensa&ver - c:\windows\system32\GPhotos.scr/200
IE: E&xportovat do aplikace Microsoft Excel - c:\progra~2\MICROS~1\Office12\EXCEL.EXE/3000
IE: Převést cíl vazby do Adobe PDF - c:\program files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll/AcroIECaptureSelLinks.html
IE: Převést do Adobe PDF - c:\program files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll/AcroIECapture.html
IE: Připojit cíl vazby k existujícímu PDF - c:\program files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll/AcroIEAppendSelLinks.html
IE: Připojit k existujícímu PDF - c:\program files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll/AcroIEAppend.html
TCP: DhcpNameServer = 10.0.0.138
TCP: Interfaces\{39E2CD10-B581-47E2-8C2A-11ED5FC85569}: DhcpNameServer = 10.0.0.138
TCP: Interfaces\{BAE75CD4-2944-4809-802D-7B198D32936C}: NameServer = 8.8.8.8,8.8.4.4
FF - ProfilePath - c:\users\klient\AppData\Roaming\Mozilla\Firefox\Profiles\fc5bva34.default-1352312131103\
FF - prefs.js: browser.search.selectedEngine - Seznam
FF - prefs.js: browser.startup.homepage - hxxp://www.seznam.cz/
FF - ExtSQL: 2013-05-03 08:43; ascsurfingprotection@iobit.com; c:\users\klient\AppData\Roaming\Mozilla\Firefox\Profiles\fc5bva34.default-1352312131103\extensions\ascsurfingprotection@iobit.com
FF - ExtSQL: 2013-05-22 20:01; donottrackplus@abine.com; c:\users\klient\AppData\Roaming\Mozilla\Firefox\Profiles\fc5bva34.default-1352312131103\extensions\donottrackplus@abine.com
FF - ExtSQL: 2013-06-10 09:59; hnkbtsofeiy@yuacx.org; c:\users\klient\AppData\Roaming\Mozilla\Firefox\Profiles\fc5bva34.default-1352312131103\extensions\hnkbtsofeiy@yuacx.org
FF - ExtSQL: 2013-06-10 09:59; mzgxwgiwno@iizcptihg.edu; c:\users\klient\AppData\Roaming\Mozilla\Firefox\Profiles\fc5bva34.default-1352312131103\extensions\mzgxwgiwno@iizcptihg.edu
FF - ExtSQL: 2013-06-10 11:15; {ab91efd4-6975-4081-8552-1b3922ed79e2}; c:\users\klient\AppData\Roaming\Mozilla\Firefox\Profiles\fc5bva34.default-1352312131103\extensions\{ab91efd4-6975-4081-8552-1b3922ed79e2}
.
- - - - NEPLATNÉ POLOŽKY ODSTRANĚNÉ Z REGISTRU - - - -
.
WebBrowser-{34AB3C4C-DA1A-4067-96F4-31452C7CFE65} - (no file)
WebBrowser-{5E5AB302-7F65-44CD-8211-C1D4CAACCEA3} - (no file)
WebBrowser-{687578B9-7132-4A7A-80E4-30EE31099E03} - (no file)
ShellIconOverlayIdentifiers-{4d87b7a7-23f1-470c-aa45-96b25b9bd138} - (no file)
ShellIconOverlayIdentifiers-{2012DE06-50C0-48BD-ACDE-88F95D4CAD1F} - (no file)
ShellIconOverlayIdentifiers-{C72C6188-BEF2-46E5-A89A-52F0ED75219E} - (no file)
ShellIconOverlayIdentifiers-{C92F6BC2-AF61-4C0E-80E0-939B8282DDB7} - (no file)
ShellIconOverlayIdentifiers-{0C4A258A-3F3B-4FFF-80A7-9B3BEC139472} - (no file)
ShellIconOverlayIdentifiers-{62CCD8E3-9C21-41E1-B55E-1E26DFC68511} - (no file)
ShellIconOverlayIdentifiers-{A759AFF6-5851-457D-A540-F4ECED148351} - (no file)
ShellIconOverlayIdentifiers-{1574C9EF-7D58-488F-B358-8B78C1538F51} - (no file)
AddRemove-CodInstl - c:\windows\system32\CDUninst.isu
AddRemove-HelixYUVCodecs - c:\windows\system32\uninstHelixYUV.exe
AddRemove-SP_4e24eecb - c:\program files (x86)\WebSearch\uninstall.exe
AddRemove-SP_5dec30d7 - c:\program files (x86)\ZoomEx\uninstall.exe
AddRemove-SP_e14dcdfa - c:\program files (x86)\ContinueToSave\uninstall.exe
AddRemove-{53820F89-063F-10D7-7457-06C201F4CBF0} - c:\programdata\Zoomex\uninstall.exe
.
.
.
--------------------- ZAMKNUTÉ KLÍČE V REGISTRU ---------------------
.
[HKEY_USERS\S-1-5-21-2276255412-1883947941-3749338985-1000\Software\SecuROM\!CAUTION! NEVER A OR CHANGE ANY KEY*]
"??"=hex:a3,20,f9,81,d0,b8,c5,0c,cd,d9,f5,b8,48,f3,0f,32,d1,1e,35,42,58,87,71,
a3,50,70,cb,36,1a,1a,c2,1d,cc,a6,62,85,89,92,34,06,af,51,14,73,69,e9,1e,75,\
"??"=hex:41,b7,c6,36,43,74,89,40,65,89,17,6b,a3,d2,6e,0c
.
[HKEY_USERS\S-1-5-21-2276255412-1883947941-3749338985-1000\Software\SecuROM\License information*]
"datasecu"=hex:e7,9a,d7,7e,ee,02,71,bf,83,76,b8,d0,db,7c,7f,92,07,11,0d,74,94,
56,21,67,24,ca,2c,d0,37,de,f2,69,1c,cf,3c,ec,35,c0,36,b0,3e,0e,66,d2,74,0a,\
"rkeysecu"=hex:2f,0f,d5,3e,02,2b,06,63,b1,0b,dd,b6,71,e2,54,98
.
[HKEY_USERS\S-1-5-21-2276255412-1883947941-3749338985-1000\Software\Trolltech\OrganizationDefaults\Qt Factory Cache 4.7\com.trolltech.Qt.QImageIOHandlerFactoryInterface:\d:\GAMES\B*a*t*t*l*e*f*i*e*l*d* *3*"!\Core\imageformats]
"qgif4.dll"=multi:"2011-10-10T16:42\00gif\00\00"
"qico4.dll"=multi:"2011-10-10T16:42\00ico\00\00"
"qjpeg4.dll"=multi:"2011-10-10T16:42\00jpeg\00jpg\00\00"
.
[HKEY_USERS\S-1-5-21-2276255412-1883947941-3749338985-1000\Software\Trolltech\OrganizationDefaults\Qt Factory Cache 4.7\com.trolltech.Qt.QTextCodecFactoryInterface:\d:\GAMES\B*a*t*t*l*e*f*i*e*l*d* *3*"!\Core\codecs]
"qcncodecs4.dll"=multi:"2011-10-10T16:42\00GB18030\00GBK\00GB2312\00CP936\00MS936\00windows-936\00MIB: 114\00MIB: 113\00MIB: 2025\00\00"
"qkrcodecs4.dll"=multi:"2011-10-10T16:42\00EUC-KR\00cp949\00MIB: 38\00MIB: -949\00\00"
"qtwcodecs4.dll"=multi:"2011-10-10T16:42\00Big5\00Big5-HKSCS\00Big5-ETen\00CP950\00MIB: 2026\00MIB: 2101\00\00"
.
[HKEY_USERS\S-1-5-21-2276255412-1883947941-3749338985-1000\Software\Trolltech\OrganizationDefaults\Qt Plugin Cache 4.7.false\d:\games\B*a*t*t*l*e*f*i*e*l*d* *3*"!\Core\codecs]
"qcncodecs4.dll"=multi:"40703\000\00Windows msvc release full-config QT_NO_DRAGANDDROP\002011-10-10T16:42\00\00"
"qjpcodecs4.dll"=multi:"40602\000\00Windows msvc release full-config\002011-10-10T16:42\00\00"
"qjpcodecsd4.dll"=multi:"40703\001\00Windows msvc debug full-config QT_NO_DRAGANDDROP\002011-10-10T16:42\00\00"
"qkrcodecs4.dll"=multi:"40703\000\00Windows msvc release full-config QT_NO_DRAGANDDROP\002011-10-10T16:42\00\00"
"qtwcodecs4.dll"=multi:"40703\000\00Windows msvc release full-config QT_NO_DRAGANDDROP\002011-10-10T16:42\00\00"
.
[HKEY_USERS\S-1-5-21-2276255412-1883947941-3749338985-1000\Software\Trolltech\OrganizationDefaults\Qt Plugin Cache 4.7.false\d:\games\B*a*t*t*l*e*f*i*e*l*d* *3*"!\Core\imageformats]
"Microsoft.VC80.CRT.manifest"=multi:"0\001\00unknown\002011-10-10T16:42\00\00"
"msvcr80.dll"=multi:"0\001\00unknown\002011-10-10T16:42\00\00"
"qgif4.dll"=multi:"40703\000\00Windows msvc release full-config QT_NO_DRAGANDDROP\002011-10-10T16:42\00\00"
"qico4.dll"=multi:"40703\000\00Windows msvc release full-config QT_NO_DRAGANDDROP\002011-10-10T16:42\00\00"
"qjpeg4.dll"=multi:"40703\000\00Windows msvc release full-config QT_NO_DRAGANDDROP\002011-10-10T16:42\00\00"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@="Shockwave Flash Object"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\InprocServer32]
@="c:\\Windows\\SysWow64\\Macromed\\Flash\\Flash9f.ocx"
"ThreadingModel"="Apartment"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\MiscStatus]
@="0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ProgID]
@="ShockwaveFlash.ShockwaveFlash.9"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
@="c:\\Windows\\SysWow64\\Macromed\\Flash\\Flash9f.ocx, 1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\TypeLib]
@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\Version]
@="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
@="ShockwaveFlash.ShockwaveFlash"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@="Macromedia Flash Factory Object"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\InprocServer32]
@="c:\\Windows\\SysWow64\\Macromed\\Flash\\Flash9f.ocx"
"ThreadingModel"="Apartment"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ProgID]
@="FlashFactory.FlashFactory.1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
@="c:\\Windows\\SysWow64\\Macromed\\Flash\\Flash9f.ocx, 1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\TypeLib]
@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\Version]
@="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
@="FlashFactory.FlashFactory"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D4304BCF-B8E9-4B35-BEA0-DC5B522670C2}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil9f.exe,-101"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D4304BCF-B8E9-4B35-BEA0-DC5B522670C2}\Elevation]
"Enabled"=dword:00000001
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D4304BCF-B8E9-4B35-BEA0-DC5B522670C2}\LocalServer32]
@="c:\\Windows\\SysWow64\\Macromed\\Flash\\FlashUtil9f.exe"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D4304BCF-B8E9-4B35-BEA0-DC5B522670C2}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{2E4BB6BE-A75F-4DC0-9500-68203655A2C4}]
@Denied: (A 2) (Everyone)
@="IFlashBroker"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{2E4BB6BE-A75F-4DC0-9500-68203655A2C4}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{2E4BB6BE-A75F-4DC0-9500-68203655A2C4}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows CE Services]
"SymbolicLinkValue"=hex(6):5c,00,72,00,65,00,67,00,69,00,73,00,74,00,72,00,79,
00,5c,00,4d,00,41,00,43,00,48,00,49,00,4e,00,45,00,5c,00,53,00,4f,00,46,00,\
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0000\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0001\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0002\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0003\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0004\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0005\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\PCW\Security]
@Denied: (Full) (Everyone)
.
Celkový čas: 2013-06-18 07:40:29
ComboFix-quarantined-files.txt 2013-06-18 05:40
ComboFix2.txt 2013-06-17 19:08
.
Před spuštěním: Volných bajtů: 50 520 993 792
Po spuštění: Volných bajtů: 50 434 600 960
.
- - End Of File - - 5C2EF35718B2CB2DF6451FDF5FD9FA24
A36C5E4F47E84449FF07ED3517B43A31
Nahoru
Uživatelský avatar
jaro3
člen Security týmu
Guru Level 15
Guru Level 15
Příspěvky: 43294
Registrován: červen 07
Bydliště: Jižní Čechy
Pohlaví: Muž
Stav:
Offline

Re: Prosím o kontrolu logu, procesor jede stále na 100%

Příspěvekod jaro3 » 18 čer 2013 10:05

Otevři si Poznámkový blok (Start -> Spustit... a napiš do okna Notepad a dej Ok.
Zkopíruj do něj následující celý text označený zeleně:

Kód: Vybrat vše

ClearJavaCache::

KillAll::
File::
c:\windows\Tasks\FacebookUpdateTaskUserS-1-5-21-2276255412-1883947941-3749338985-1000Core.job
c:\windows\Tasks\FacebookUpdateTaskUserS-1-5-21-2276255412-1883947941-3749338985-1000UA.job
c:\windows\Tasks\Google Software Updater.job
c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
c:\windows\DeleteOnReboot.bat

Folder::
c:\users\klient\AppData\Local\Facebook\Update
c:\program files (x86)\Google\Common\Google Updater

Driver::
gllkueil
oeaiiyey

DDS::
uInternet Settings,ProxyOverride = 127.0.0.1:9421;<local>;*.local
mSearchAssistant =

RegLock::
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@="Shockwave Flash Object"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\InprocServer32]
@="c:\\Windows\\SysWow64\\Macromed\\Flash\\Flash9f.ocx"
"ThreadingModel"="Apartment"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\MiscStatus]
@="0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ProgID]
@="ShockwaveFlash.ShockwaveFlash.9"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
@="c:\\Windows\\SysWow64\\Macromed\\Flash\\Flash9f.ocx, 1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\TypeLib]
@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\Version]
@="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
@="ShockwaveFlash.ShockwaveFlash"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@="Macromedia Flash Factory Object"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\InprocServer32]
@="c:\\Windows\\SysWow64\\Macromed\\Flash\\Flash9f.ocx"
"ThreadingModel"="Apartment"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ProgID]
@="FlashFactory.FlashFactory.1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
@="c:\\Windows\\SysWow64\\Macromed\\Flash\\Flash9f.ocx, 1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\TypeLib]
@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\Version]
@="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
@="FlashFactory.FlashFactory"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D4304BCF-B8E9-4B35-BEA0-DC5B522670C2}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil9f.exe,-101"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D4304BCF-B8E9-4B35-BEA0-DC5B522670C2}\Elevation]
"Enabled"=dword:00000001
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D4304BCF-B8E9-4B35-BEA0-DC5B522670C2}\LocalServer32]
@="c:\\Windows\\SysWow64\\Macromed\\Flash\\FlashUtil9f.exe"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D4304BCF-B8E9-4B35-BEA0-DC5B522670C2}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{2E4BB6BE-A75F-4DC0-9500-68203655A2C4}]
@Denied: (A 2) (Everyone)
@="IFlashBroker"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{2E4BB6BE-A75F-4DC0-9500-68203655A2C4}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{2E4BB6BE-A75F-4DC0-9500-68203655A2C4}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows CE Services]
"SymbolicLinkValue"=hex(6):5c,00,72,00,65,00,67,00,69,00,73,00,74,00,72,00,79,
 00,5c,00,4d,00,41,00,43,00,48,00,49,00,4e,00,45,00,5c,00,53,00,4f,00,46,00,\
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0000\AllUserSettings]
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0001\AllUserSettings]
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0002\AllUserSettings]
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0003\AllUserSettings]
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0004\AllUserSettings]
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0005\AllUserSettings]
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\PCW\Security]
@Denied: (Full) (Everyone)

Zvol možnost Soubor -> Uložit jako... a nastav tyto parametry:
Název souboru: zde napiš: CFScript.txt
Uložit jako typ: tak tam vyber Všechny soubory
Ulož soubor na plochu.
Ukonči všechna aktivní okna.

Uchop myší vytvořený skript CFScript.txt, přemísti ho nad stažený program ComboFix.exe a když se oba soubory překryjí, skript upusť.
- Automaticky se spustí ComboFix
- Vlož sem log, který vyběhne v závěru čistícího procesu + nový log z HJT

Upozornění : Může se stát, že po aplikaci Combofixu a restartu počítače, Windows nenaběhnou , nebo nenajede plocha , budou problémy s připojením, pak znovu restartuj počítač, pokud to nepomůže , po restartu mačkej klávesu F8 a pak zvol poslední známou funkční konfiguraci. , či použij bod obnovy.

Start--spustit..napiš:
cmd
dej Enter

V okně napiš na blikající kurzor:
ipconfig /flushdns
a dej Enter

pak opakuj s tímto:
ipconfig /renew


zavři okno.

Stáhni si aswMBR
na svojí plochu. Uzavři všechna okna , programy a prohlížeče. Poklepej na aswMBR.exe. Pokud se objeví hláška o možnosti stáhnutí databáze Avastu , klikni na NE. Poté klikni na „Scan“ . Po skenu klikni na „Save Log“ a ulož si log na plochu .Zkopíruj sem celý obsah toho logu. Pak klikni na „Exit“ k zavření programu.
Při práci s programy HJT, ComboFix,MbAM, SDFix aj. zavřete všechny ostatní aplikace a prohlížeče!
Neposílejte logy do soukromých zpráv.Po dobu mé nepřítomnosti mě zastupuje memphisto , Žbeky a Orcus.
Pokud budete spokojeni , můžete podpořit naše forum:Podpora fóra
Nahoru
HavlisOlda
nováček
Příspěvky: 46
Registrován: červen 13
Bydliště: Tisá
Pohlaví: Muž
Stav:
Offline

Re: Prosím o kontrolu logu, procesor jede stále na 100%

Příspěvekod HavlisOlda » 18 čer 2013 14:34

ComboFix 13-06-18.02 - klient 18.06.2013 13:18:38.3.2 - x64
Microsoft Windows 7 Ultimate 6.1.7601.1.1250.420.1029.18.8191.5999 [GMT 2:00]
Spuštěný z: c:\users\klient\Downloads\ComboFix.exe
Použité ovládací přepínače :: c:\users\klient\Desktop\CFScript ľ zßstupce.lnk
AV: Microsoft Security Essentials *Disabled/Updated* {3F839487-C7A2-C958-E30C-E2825BA31FB5}
SP: Microsoft Security Essentials *Disabled/Updated* {84E27563-E198-C6D6-D9BC-D9F020245508}
SP: Windows Defender *Disabled/Outdated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.
.
((((((((((((((((((((((((( Soubory vytvořené od 2013-05-18 do 2013-06-18 )))))))))))))))))))))))))))))))
.
.
2013-06-18 11:24 . 2013-06-18 11:24 -------- d-----w- c:\users\NeroMediaHomeUser.4\AppData\Local\temp
2013-06-18 11:24 . 2013-06-18 11:24 -------- d-----w- c:\users\Dominik\AppData\Local\temp
2013-06-18 11:24 . 2013-06-18 11:24 -------- d-----w- c:\users\Default\AppData\Local\temp
2013-06-18 05:54 . 2013-06-12 03:08 9552976 ----a-w- c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\{65A82D6F-C49C-4C92-A94A-AD2D111F3BE1}\mpengine.dll
2013-06-17 17:44 . 2013-05-21 18:09 964552 ----a-w- c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\{2ABF56F7-F6B6-4BAE-A6AA-89EA95F3E687}\gapaengine.dll
2013-06-15 04:46 . 2013-05-13 06:37 9460464 ----a-w- c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\Backup\mpengine.dll
2013-06-14 08:22 . 2013-06-14 08:31 318 ----a-w- c:\windows\DeleteOnReboot.bat
2013-06-14 07:11 . 2013-06-14 07:11 -------- d-----w- c:\program files\WhoCrashed
2013-06-12 13:01 . 2013-06-12 13:01 -------- d-----w- c:\users\klient\AppData\Roaming\Malwarebytes
2013-06-12 13:00 . 2013-06-12 13:00 -------- d-----w- c:\programdata\Malwarebytes
2013-06-12 13:00 . 2013-06-12 13:01 -------- d-----w- c:\program files (x86)\Malwarebytes' Anti-Malware
2013-06-12 13:00 . 2013-04-04 12:50 25928 ----a-w- c:\windows\system32\drivers\mbam.sys
2013-06-12 05:36 . 2013-06-12 05:36 388096 ----a-r- c:\users\klient\AppData\Roaming\Microsoft\Installer\{45A66726-69BC-466B-A7A4-12FCBA4883D7}\HiJackThis.exe
2013-06-12 05:36 . 2013-06-12 05:36 -------- d-----w- c:\program files (x86)\Trend Micro
2013-06-11 19:00 . 2013-06-11 19:00 526336 ----a-w- c:\windows\system32\ieui.dll
2013-06-11 19:00 . 2013-06-11 19:00 15404544 ----a-w- c:\windows\system32\ieframe.dll
2013-06-11 19:00 . 2013-06-11 19:00 2706432 ----a-w- c:\windows\SysWow64\mshtml.tlb
2013-06-11 19:00 . 2013-06-11 19:00 2706432 ----a-w- c:\windows\system32\mshtml.tlb
2013-06-11 19:00 . 2013-06-11 19:00 19233792 ----a-w- c:\windows\system32\mshtml.dll
2013-06-11 18:59 . 2013-06-11 19:00 1365504 ----a-w- c:\windows\system32\urlmon.dll
2013-06-11 18:59 . 2013-06-11 18:59 279040 ----a-w- c:\program files\Internet Explorer\sqmapi.dll
2013-06-11 18:59 . 2013-06-11 18:59 2648064 ----a-w- c:\windows\system32\iertutil.dll
2013-06-11 18:59 . 2013-06-11 18:59 218112 ----a-w- c:\program files (x86)\Internet Explorer\sqmapi.dll
2013-06-11 18:51 . 2013-06-11 18:51 1910632 ----a-w- c:\windows\system32\drivers\tcpip.sys
2013-06-11 18:50 . 2013-06-11 18:50 751104 ----a-w- c:\windows\system32\win32spl.dll
2013-06-11 18:50 . 2013-06-11 18:50 492544 ----a-w- c:\windows\SysWow64\win32spl.dll
2013-06-11 18:49 . 2013-06-11 18:49 24576 ----a-w- c:\windows\SysWow64\cryptdlg.dll
2013-06-11 18:49 . 2013-06-11 18:49 30720 ----a-w- c:\windows\system32\cryptdlg.dll
2013-06-11 18:46 . 2013-06-11 18:46 1887232 ----a-w- c:\windows\system32\d3d11.dll
2013-06-11 18:46 . 2013-06-11 18:46 1505280 ----a-w- c:\windows\SysWow64\d3d11.dll
2013-06-11 18:45 . 2013-06-11 18:45 1424384 ----a-w- c:\windows\system32\WindowsCodecs.dll
2013-06-11 18:45 . 2013-06-11 18:45 1230336 ----a-w- c:\windows\SysWow64\WindowsCodecs.dll
2013-06-11 18:43 . 2013-06-11 18:43 52224 ----a-w- c:\windows\system32\certenc.dll
2013-06-11 18:43 . 2013-06-11 18:43 1192448 ----a-w- c:\windows\system32\certutil.exe
2013-06-11 18:43 . 2013-06-11 18:43 903168 ----a-w- c:\windows\SysWow64\certutil.exe
2013-06-11 18:43 . 2013-06-11 18:43 43008 ----a-w- c:\windows\SysWow64\certenc.dll
2013-06-11 18:43 . 2013-06-11 18:43 1464320 ----a-w- c:\windows\system32\crypt32.dll
2013-06-11 18:43 . 2013-06-11 18:43 184320 ----a-w- c:\windows\system32\cryptsvc.dll
2013-06-11 18:43 . 2013-06-11 18:43 140288 ----a-w- c:\windows\SysWow64\cryptsvc.dll
2013-06-11 18:43 . 2013-06-11 18:43 139776 ----a-w- c:\windows\system32\cryptnet.dll
2013-06-11 18:43 . 2013-06-11 18:43 1160192 ----a-w- c:\windows\SysWow64\crypt32.dll
2013-06-11 18:43 . 2013-06-11 18:43 103936 ----a-w- c:\windows\SysWow64\cryptnet.dll
2013-06-11 17:06 . 2013-06-11 17:06 -------- d-----w- c:\programdata\ATI
2013-06-11 09:50 . 2013-06-11 09:50 -------- d-----w- c:\program files (x86)\ATI
2013-06-11 09:11 . 2013-06-11 09:11 -------- d-----w- c:\program files\ATI
2013-06-10 11:27 . 2013-06-10 11:27 -------- d-----w- c:\users\klient\SyncFolder
2013-06-10 06:58 . 2013-06-10 06:58 -------- d-----w- c:\programdata\StarApp
2013-06-10 06:22 . 2013-06-10 11:28 -------- d-----w- c:\program files (x86)\MyPC Backup
2013-06-06 22:15 . 2013-06-06 22:21 -------- d-----w- c:\program files (x86)\Farming Simulator 2013
2013-06-05 05:08 . 2013-06-09 20:38 -------- d-----w- c:\program files (x86)\GRID 2
2013-06-04 14:09 . 2013-06-09 20:11 -------- d-----w- c:\program files (x86)\Landwirtschafts Simulator 2011
.
.
.
(((((((((((((((((((((((((((((((((((((((( Find3M výpis ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2013-06-12 16:27 . 2013-03-06 20:28 692104 ----a-w- c:\windows\SysWow64\FlashPlayerApp.exe
2013-06-12 16:27 . 2013-02-14 06:34 71048 ----a-w- c:\windows\SysWow64\FlashPlayerCPLApp.cpl
2013-06-12 14:15 . 2011-10-10 01:12 75825640 ----a-w- c:\windows\system32\MRT.exe
2013-05-21 18:09 . 2012-06-12 18:02 964552 ----a-w- c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\NISBackup\gapaengine.dll
2013-05-10 08:11 . 2011-03-28 17:36 22240 ----a-w- c:\programdata\Microsoft\IdentityCRL\production\ppcrlconfig600.dll
2013-05-10 07:57 . 2013-05-10 07:57 27208 ----a-w- c:\windows\system32\AdobePDFUI.dll
2013-05-10 07:57 . 2013-05-10 07:57 55872 ----a-w- c:\windows\system32\AdobePDF.dll
2013-05-09 17:15 . 2013-05-07 12:00 281688 ----a-w- c:\windows\SysWow64\PnkBstrB.exe
2013-05-09 17:15 . 2012-03-03 02:18 281688 ----a-w- c:\windows\SysWow64\PnkBstrB.xtr
2013-05-09 11:01 . 2012-11-10 11:44 281688 ----a-w- c:\windows\SysWow64\PnkBstrB.ex0
2013-05-07 12:00 . 2013-05-07 12:00 76888 ----a-w- c:\windows\SysWow64\PnkBstrA.exe
2013-05-06 17:43 . 2013-05-06 17:43 283200 ----a-w- c:\windows\system32\drivers\dtsoftbus01.sys
2013-05-02 15:29 . 2011-10-07 21:13 278800 ------w- c:\windows\system32\MpSigStub.exe
2013-04-28 07:58 . 2013-04-28 07:58 95648 ----a-w- c:\windows\SysWow64\WindowsAccessBridge-32.dll
2013-04-28 07:58 . 2012-04-29 06:35 866720 ----a-w- c:\windows\SysWow64\npdeployJava1.dll
2013-04-28 07:58 . 2011-10-07 21:13 788896 ----a-w- c:\windows\SysWow64\deployJava1.dll
2013-04-26 11:59 . 2013-02-09 10:34 48648 ----a-w- c:\programdata\Microsoft\eHome\Packages\MCEClientUX\UpdateableMarkup-2\Markup.dll
2013-04-17 18:20 . 2013-03-17 17:37 26432 ----a-w- c:\windows\system32\RegistryDefragBootTime.exe
2013-04-13 05:49 . 2013-05-15 07:40 135168 ----a-w- c:\windows\apppatch\AppPatch64\AcXtrnal.dll
2013-04-13 05:49 . 2013-05-15 07:40 350208 ----a-w- c:\windows\apppatch\AppPatch64\AcLayers.dll
2013-04-13 05:49 . 2013-05-15 07:40 308736 ----a-w- c:\windows\apppatch\AppPatch64\AcGenral.dll
2013-04-13 05:49 . 2013-05-15 07:40 111104 ----a-w- c:\windows\apppatch\AppPatch64\acspecfc.dll
2013-04-13 04:45 . 2013-05-15 07:40 474624 ----a-w- c:\windows\apppatch\AcSpecfc.dll
2013-04-13 04:45 . 2013-05-15 07:40 2176512 ----a-w- c:\windows\apppatch\AcGenral.dll
2013-04-12 14:45 . 2013-04-24 03:12 1656680 ----a-w- c:\windows\system32\drivers\ntfs.sys
2013-04-12 13:28 . 2013-04-12 13:28 226304 ----a-w- c:\windows\system32\elshyph.dll
2013-04-12 13:28 . 2013-04-12 13:28 185344 ----a-w- c:\windows\SysWow64\elshyph.dll
2013-04-12 13:28 . 2013-04-12 13:28 1054720 ----a-w- c:\windows\system32\MsSpellCheckingFacility.exe
2013-04-12 13:28 . 2013-04-12 13:28 719360 ----a-w- c:\windows\SysWow64\mshtmlmedia.dll
2013-04-12 13:28 . 2013-04-12 13:28 523264 ----a-w- c:\windows\SysWow64\vbscript.dll
2013-04-12 13:28 . 2013-04-12 13:28 38400 ----a-w- c:\windows\SysWow64\imgutil.dll
2013-04-12 13:28 . 2013-04-12 13:28 158720 ----a-w- c:\windows\SysWow64\msls31.dll
2013-04-12 13:28 . 2013-04-12 13:28 150528 ----a-w- c:\windows\SysWow64\iexpress.exe
2013-04-12 13:28 . 2013-04-12 13:28 138752 ----a-w- c:\windows\SysWow64\wextract.exe
2013-04-12 13:28 . 2013-04-12 13:28 137216 ----a-w- c:\windows\SysWow64\ieUnatt.exe
2013-04-12 13:28 . 2013-04-12 13:28 12800 ----a-w- c:\windows\SysWow64\mshta.exe
2013-04-12 13:28 . 2013-04-12 13:28 73728 ----a-w- c:\windows\SysWow64\SetIEInstalledDate.exe
2013-04-12 13:28 . 2013-04-12 13:28 61952 ----a-w- c:\windows\SysWow64\tdc.ocx
2013-04-12 13:28 . 2013-04-12 13:28 48640 ----a-w- c:\windows\SysWow64\mshtmler.dll
2013-04-12 13:28 . 2013-04-12 13:28 361984 ----a-w- c:\windows\SysWow64\html.iec
2013-04-12 13:28 . 2013-04-12 13:28 23040 ----a-w- c:\windows\SysWow64\licmgr10.dll
2013-04-12 13:28 . 2013-04-12 13:28 1441280 ----a-w- c:\windows\SysWow64\inetcpl.cpl
2013-04-12 13:28 . 2013-04-12 13:28 110592 ----a-w- c:\windows\SysWow64\IEAdvpack.dll
2013-04-12 13:28 . 2013-04-12 13:28 97280 ----a-w- c:\windows\system32\mshtmled.dll
2013-04-12 13:28 . 2013-04-12 13:28 905728 ----a-w- c:\windows\system32\mshtmlmedia.dll
2013-04-12 13:28 . 2013-04-12 13:28 81408 ----a-w- c:\windows\system32\icardie.dll
2013-04-12 13:28 . 2013-04-12 13:28 762368 ----a-w- c:\windows\system32\ieapfltr.dll
2013-04-12 13:28 . 2013-04-12 13:28 452096 ----a-w- c:\windows\system32\dxtmsft.dll
2013-04-12 13:28 . 2013-04-12 13:28 441856 ----a-w- c:\windows\system32\html.iec
2013-04-12 13:28 . 2013-04-12 13:28 281600 ----a-w- c:\windows\system32\dxtrans.dll
2013-04-12 13:28 . 2013-04-12 13:28 27648 ----a-w- c:\windows\system32\licmgr10.dll
2013-04-12 13:28 . 2013-04-12 13:28 270848 ----a-w- c:\windows\system32\iedkcs32.dll
2013-04-12 13:28 . 2013-04-12 13:28 247296 ----a-w- c:\windows\system32\webcheck.dll
2013-04-12 13:28 . 2013-04-12 13:28 235008 ----a-w- c:\windows\system32\url.dll
2013-04-12 13:28 . 2013-04-12 13:28 216064 ----a-w- c:\windows\system32\msls31.dll
2013-04-12 13:28 . 2013-04-12 13:28 197120 ----a-w- c:\windows\system32\msrating.dll
2013-04-12 13:28 . 2013-04-12 13:28 1509376 ----a-w- c:\windows\system32\inetcpl.cpl
2013-04-12 13:28 . 2013-04-12 13:28 144896 ----a-w- c:\windows\system32\wextract.exe
2013-04-12 13:28 . 2013-04-12 13:28 1400416 ----a-w- c:\windows\system32\ieapfltr.dat
2013-04-12 13:28 . 2013-04-12 13:28 102912 ----a-w- c:\windows\system32\inseng.dll
2013-04-12 13:28 . 2013-04-12 13:28 167424 ----a-w- c:\windows\system32\iexpress.exe
2013-04-12 13:28 . 2013-04-12 13:28 92160 ----a-w- c:\windows\system32\SetIEInstalledDate.exe
2013-04-12 13:28 . 2013-04-12 13:28 77312 ----a-w- c:\windows\system32\tdc.ocx
2013-04-12 13:28 . 2013-04-12 13:28 62976 ----a-w- c:\windows\system32\pngfilt.dll
2013-04-12 13:28 . 2013-04-12 13:28 599552 ----a-w- c:\windows\system32\vbscript.dll
2013-04-12 13:28 . 2013-04-12 13:28 52224 ----a-w- c:\windows\system32\msfeedsbs.dll
2013-04-12 13:28 . 2013-04-12 13:28 51200 ----a-w- c:\windows\system32\imgutil.dll
2013-04-12 13:28 . 2013-04-12 13:28 48640 ----a-w- c:\windows\system32\mshtmler.dll
2013-04-12 13:28 . 2013-04-12 13:28 173568 ----a-w- c:\windows\system32\ieUnatt.exe
2013-04-12 13:28 . 2013-04-12 13:28 149504 ----a-w- c:\windows\system32\occache.dll
2013-04-12 13:28 . 2013-04-12 13:28 13824 ----a-w- c:\windows\system32\mshta.exe
2013-04-12 13:28 . 2013-04-12 13:28 136192 ----a-w- c:\windows\system32\iepeers.dll
2013-04-12 13:28 . 2013-04-12 13:28 135680 ----a-w- c:\windows\system32\IEAdvpack.dll
2013-04-12 13:28 . 2013-04-12 13:28 12800 ----a-w- c:\windows\system32\msfeedssync.exe
2013-04-10 06:01 . 2013-05-15 07:40 265064 ----a-w- c:\windows\system32\drivers\dxgmms1.sys
2013-04-10 06:01 . 2013-05-15 07:40 983400 ----a-w- c:\windows\system32\drivers\dxgkrnl.sys
2013-04-10 03:30 . 2013-05-15 07:40 3153920 ----a-w- c:\windows\system32\win32k.sys
2013-04-07 08:54 . 2012-11-03 06:45 1455408 ----a-w- c:\windows\system32\dmwu.exe
2013-04-07 08:53 . 2012-11-03 06:45 33792 ----a-w- c:\windows\system32\ImHttpComm.dll
2013-04-05 21:40 . 2013-03-30 00:33 2477216 ----a-w- c:\programdata\Microsoft\VisualStudio\11.0\1033\ResourceCache.dll
2013-03-25 20:39 . 2013-03-25 20:39 4546560 ----a-w- c:\windows\SysWow64\GPhotos.scr
.
.
(((((((((((((((((((((((((((((((((( Spouštěcí body v registru )))))))))))))))))))))))))))))))))))))))))))))
.
.
*Poznámka* prázdné záznamy a legitimní výchozí údaje nejsou zobrazeny.
REGEDIT4
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\1AMPCBOK]
@="{04cd1f3e-81d5-4904-a3ab-e0f99a7d769d}"
[HKEY_CLASSES_ROOT\CLSID\{04cd1f3e-81d5-4904-a3ab-e0f99a7d769d}]
2010-11-05 01:58 297808 ----a-w- c:\windows\System32\mscoree.dll
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Sidebar"="c:\program files\Windows Sidebar\sidebar.exe" [2010-11-20 1475584]
"Advanced SystemCare 6"="c:\program files (x86)\IObit\Advanced SystemCare 6\ASCTray.exe" [2013-04-18 491840]
"DAEMON Tools Lite"="c:\program files (x86)\DAEMON Tools Lite\DTLite.exe" [2013-03-14 3672640]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]
"GrooveMonitor"="c:\program files (x86)\Microsoft Office\Office12\GrooveMonitor.exe" [2009-02-26 30040]
"Adobe Acrobat Speed Launcher"="c:\program files (x86)\Adobe\Acrobat 10.0\Acrobat\Acrobat_sl.exe" [2013-05-10 38984]
"seznam-listicka-distribuce"="c:\program files (x86)\Seznam.cz\distribution\szninstall.exe" [2012-09-13 1009288]
"SunJavaUpdateSched"="c:\program files (x86)\Common Files\Java\Java Update\jusched.exe" [2013-03-12 253816]
"Adobe ARM"="c:\program files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2013-04-04 958576]
"Acrobat Assistant 8.0"="c:\program files (x86)\Adobe\Acrobat 10.0\Acrobat\Acrotray.exe" [2013-05-10 840768]
"ATICustomerCare"="c:\program files (x86)\ATI\ATICustomerCare\ATICustomerCare.exe" [2009-06-14 307200]
.
c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\
Content Manager Assistant for PlayStation(R).lnk - c:\program files (x86)\Sony\Content Manager Assistant\CMA.exe [2013-3-13 3458968]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorUser"= 3 (0x3)
"EnableUIADesktopToggle"= 0 (0x0)
"PromptOnSecureDesktop"= 0 (0x0)
"EnableLinkedConnections"= 1 (0x1)
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\windows]
"LoadAppInit_DLLs"=1 (0x1)
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MsMpSvc]
@="Service"
.
R1 gllkueil;gllkueil; [x]
R1 oeaiiyey;oeaiiyey; [x]
R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [x]
R2 Hamachi2Svc;LogMeIn Hamachi Tunneling Engine; [x]
R3 androidusb;SAMSUNG Android Composite ADB Interface Driver;c:\windows\system32\Drivers\ssadadb.sys;c:\windows\SYSNATIVE\Drivers\ssadadb.sys [x]
R3 atillk64;atillk64;c:\users\klient\Desktop\ati\atillk64.sys;c:\users\klient\Desktop\ati\atillk64.sys [x]
R3 ATP;Comodo Unite Miniport Driver;c:\windows\system32\DRIVERS\cmdatp.sys;c:\windows\SYSNATIVE\DRIVERS\cmdatp.sys [x]
R3 BTCOM;Bluetooth Serial port driver;c:\windows\system32\DRIVERS\btcomport.sys;c:\windows\SYSNATIVE\DRIVERS\btcomport.sys [x]
R3 dgderdrv;dgderdrv;c:\windows\system32\drivers\dgderdrv.sys;c:\windows\SYSNATIVE\drivers\dgderdrv.sys [x]
R3 EagleX64;EagleX64; [x]
R3 ewusbnet;HUAWEI USB-NDIS miniport;c:\windows\system32\DRIVERS\ewusbnet.sys;c:\windows\SYSNATIVE\DRIVERS\ewusbnet.sys [x]
R3 FLEXnet Licensing Service 64;FLEXnet Licensing Service 64;c:\program files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService64.exe;c:\program files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService64.exe [x]
R3 Futuremark SystemInfo Service;Futuremark SystemInfo Service;c:\program files (x86)\Common Files\Futuremark Shared\Futuremark SystemInfo\FMSISvc.exe;c:\program files (x86)\Common Files\Futuremark Shared\Futuremark SystemInfo\FMSISvc.exe [x]
R3 ggflt;SEMC USB Flash Driver Filter;c:\windows\system32\DRIVERS\ggflt.sys;c:\windows\SYSNATIVE\DRIVERS\ggflt.sys [x]
R3 MSI_MSIBIOS_010507;MSI_MSIBIOS_010507; [x]
R3 NisDrv;Microsoft Network Inspection System;c:\windows\system32\DRIVERS\NisDrvWFP.sys;c:\windows\SYSNATIVE\DRIVERS\NisDrvWFP.sys [x]
R3 NisSrv;Kontrola sítě Microsoft;c:\program files\Microsoft Security Client\NisSrv.exe;c:\program files\Microsoft Security Client\NisSrv.exe [x]
R3 NTIOLib_1_0_4;NTIOLib_1_0_4; [x]
R3 PAC207;SoC PC-Camera;c:\windows\system32\DRIVERS\PFC027.SYS;c:\windows\SYSNATIVE\DRIVERS\PFC027.SYS [x]
R3 pcouffin;VSO Software pcouffin;c:\windows\system32\Drivers\pcouffin.sys;c:\windows\SYSNATIVE\Drivers\pcouffin.sys [x]
R3 Ph3xIB64;Philips 713x Inbox PCI TV Card;c:\windows\system32\DRIVERS\Ph3xIB64.sys;c:\windows\SYSNATIVE\DRIVERS\Ph3xIB64.sys [x]
R3 RdpVideoMiniport;Remote Desktop Video Miniport Driver;c:\windows\system32\drivers\rdpvideominiport.sys;c:\windows\SYSNATIVE\drivers\rdpvideominiport.sys [x]
S0 BtHidBus;Bluetooth HID Bus Service;c:\windows\System32\Drivers\BtHidBus.sys;c:\windows\SYSNATIVE\Drivers\BtHidBus.sys [x]
S0 MxEFUF;Matrox Extio Upper Function Filter;c:\windows\system32\DRIVERS\MxEFUF64.sys;c:\windows\SYSNATIVE\DRIVERS\MxEFUF64.sys [x]
S1 dtsoftbus01;DAEMON Tools Virtual Bus Driver;c:\windows\system32\DRIVERS\dtsoftbus01.sys;c:\windows\SYSNATIVE\DRIVERS\dtsoftbus01.sys [x]
S2 AdvancedSystemCareService6;Advanced SystemCare Service 6;c:\program files (x86)\IObit\Advanced SystemCare 6\ASCService.exe;c:\program files (x86)\IObit\Advanced SystemCare 6\ASCService.exe [x]
S2 AMD External Events Utility;AMD External Events Utility;c:\windows\system32\atiesrxx.exe;c:\windows\SYSNATIVE\atiesrxx.exe [x]
S2 Autodesk Content Service;Autodesk Content Service;c:\program files (x86)\Autodesk\Content Service\Connect.Service.ContentService.exe;c:\program files (x86)\Autodesk\Content Service\Connect.Service.ContentService.exe [x]
S2 BackupStack;Computer Backup (MyPC Backup);c:\program files (x86)\MyPC Backup\BackupStack.exe;c:\program files (x86)\MyPC Backup\BackupStack.exe [x]
S2 BsMobileCS;BsMobileCS;c:\program files (x86)\IVT Corporation\BlueSoleil\BsMobileCS.exe;c:\program files (x86)\IVT Corporation\BlueSoleil\BsMobileCS.exe [x]
S2 CrdphService;COMODO EasyVPN VNC Service;c:\program files\COMODO\EasyVPN\crdphService.exe;c:\program files\COMODO\EasyVPN\crdphService.exe [x]
S2 EasyVpnAdpt;COMODO EasyVPN Service;c:\program files\COMODO\EasyVPN\Vpnservice.exe;c:\program files\COMODO\EasyVPN\Vpnservice.exe [x]
S2 EzVpnSvc;COMODO Unite MultiLogin Service;c:\mc server\EzVpnSvc.exe;c:\mc server\EzVpnSvc.exe [x]
S2 NAUpdate;Nero Update;c:\program files (x86)\Nero\Update\NASvc.exe;c:\program files (x86)\Nero\Update\NASvc.exe [x]
S3 3xHybr64;SAA713x TV Card Service;c:\windows\system32\DRIVERS\3xHybr64.sys;c:\windows\SYSNATIVE\DRIVERS\3xHybr64.sys [x]
S3 amdiox64;AMD IO Driver;c:\windows\system32\DRIVERS\amdiox64.sys;c:\windows\SYSNATIVE\DRIVERS\amdiox64.sys [x]
S3 AtiHDAudioService;AMD Function Driver for HD Audio Service;c:\windows\system32\drivers\AtihdW76.sys;c:\windows\SYSNATIVE\drivers\AtihdW76.sys [x]
S3 azvusb;Virtual USB Hub;c:\windows\system32\DRIVERS\azvusb.sys;c:\windows\SYSNATIVE\DRIVERS\azvusb.sys [x]
S3 BTCOMBUS;Bluetooth Serial Port Bus Service;c:\windows\system32\Drivers\btcombus.sys;c:\windows\SYSNATIVE\Drivers\btcombus.sys [x]
S3 btnetBUs;Bluetooth PAN Bus Service;c:\windows\system32\Drivers\btnetBus.sys;c:\windows\SYSNATIVE\Drivers\btnetBus.sys [x]
S3 IvtBtBUs;IVT Bluetooth Bus Service;c:\windows\system32\Drivers\IvtBtBus.sys;c:\windows\SYSNATIVE\Drivers\IvtBtBus.sys [x]
.
.
--- Ostatní služby/ovladače v paměti ---
.
*Deregistered* - UrlFilter
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\active setup\installed components\{8A69D345-D564-463c-AFF1-A69D9E530F96}]
2013-06-06 21:56 1165776 ----a-w- c:\program files (x86)\Google\Chrome\Application\27.0.1453.110\Installer\chrmstp.exe
.
Obsah adresáře 'Naplánované úlohy'
.
2013-06-18 c:\windows\Tasks\Adobe Flash Player Updater.job
- c:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2013-03-06 16:27]
.
2013-06-17 c:\windows\Tasks\FacebookUpdateTaskUserS-1-5-21-2276255412-1883947941-3749338985-1000Core.job
- c:\users\klient\AppData\Local\Facebook\Update\FacebookUpdate.exe [2012-03-21 17:52]
.
2013-06-18 c:\windows\Tasks\FacebookUpdateTaskUserS-1-5-21-2276255412-1883947941-3749338985-1000UA.job
- c:\users\klient\AppData\Local\Facebook\Update\FacebookUpdate.exe [2012-03-21 17:52]
.
2013-06-17 c:\windows\Tasks\GlaryInitialize.job
- c:\program files (x86)\Glary Utilities\initialize.exe [2012-08-04 07:43]
.
2013-06-10 c:\windows\Tasks\GlaryOneClickOptimizer.job
- c:\program files (x86)\Glary Utilities\oneclickoptimizer.exe [2012-08-04 07:43]
.
2013-06-15 c:\windows\Tasks\GlaryUpdate.job
- c:\program files (x86)\Glary Utilities\webupdate.exe [2012-08-04 07:44]
.
2013-06-17 c:\windows\Tasks\Google Software Updater.job
- c:\program files (x86)\Google\Common\Google Updater\GoogleUpdaterService.exe [2011-10-15 12:32]
.
2013-06-17 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
- c:\program files (x86)\Google\Update\GoogleUpdate.exe [2011-11-19 22:20]
.
2013-06-18 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
- c:\program files (x86)\Google\Update\GoogleUpdate.exe [2011-11-19 22:20]
.
2013-06-13 c:\windows\Tasks\ParetoLogic Registration3.job
- c:\windows\system32\rundll32.exe [2009-07-13 01:14]
.
.
--------- X64 Entries -----------
.
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\1AMPCBOK]
@="{04cd1f3e-81d5-4904-a3ab-e0f99a7d769d}"
[HKEY_CLASSES_ROOT\CLSID\{04cd1f3e-81d5-4904-a3ab-e0f99a7d769d}]
2010-11-05 01:57 444752 ----a-w- c:\windows\System32\mscoree.dll
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"MSC"="c:\program files\Microsoft Security Client\msseces.exe" [2013-01-27 1281512]
"RtHDVCpl"="c:\program files\Realtek\Audio\HDA\RAVCpl64.exe" [2012-04-24 12480616]
"IntelliType Pro"="c:\program files\Microsoft Mouse and Keyboard Center\itype.exe" [2012-11-02 1464944]
"IntelliPoint"="c:\program files\Microsoft Mouse and Keyboard Center\ipoint.exe" [2012-11-02 2076272]
"Windows Mobile-based device management"="c:\windows\WindowsMobile\wmdcBase.exe" [2007-05-31 660360]
.
------- Doplňkový sken -------
.
uLocal Page = c:\windows\system32\blank.htm
uStart Page = hxxp://www.google.com
uDefault_Search_URL = hxxp://www.google.com
mDefault_Search_URL = hxxp://www.google.com
mStart Page = hxxp://www.google.com
mLocal Page = c:\windows\SysWOW64\blank.htm
mSearch Page = hxxp://www.google.com
mSearch Bar = hxxp://www.google.com
uInternet Settings,ProxyOverride = 127.0.0.1:9421;<local>;*.local
mSearchAssistant =
IE: Add to Google Photos Screensa&ver - c:\windows\system32\GPhotos.scr/200
IE: E&xportovat do aplikace Microsoft Excel - c:\progra~2\MICROS~1\Office12\EXCEL.EXE/3000
IE: Převést cíl vazby do Adobe PDF - c:\program files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll/AcroIECaptureSelLinks.html
IE: Převést do Adobe PDF - c:\program files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll/AcroIECapture.html
IE: Připojit cíl vazby k existujícímu PDF - c:\program files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll/AcroIEAppendSelLinks.html
IE: Připojit k existujícímu PDF - c:\program files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll/AcroIEAppend.html
TCP: DhcpNameServer = 10.0.0.138
TCP: Interfaces\{39E2CD10-B581-47E2-8C2A-11ED5FC85569}: DhcpNameServer = 10.0.0.138
TCP: Interfaces\{BAE75CD4-2944-4809-802D-7B198D32936C}: NameServer = 8.8.8.8,8.8.4.4
FF - ProfilePath - c:\users\klient\AppData\Roaming\Mozilla\Firefox\Profiles\fc5bva34.default-1352312131103\
FF - prefs.js: browser.search.selectedEngine - Seznam
FF - prefs.js: browser.startup.homepage - hxxp://www.seznam.cz/
FF - ExtSQL: 2013-05-03 08:43; ascsurfingprotection@iobit.com; c:\users\klient\AppData\Roaming\Mozilla\Firefox\Profiles\fc5bva34.default-1352312131103\extensions\ascsurfingprotection@iobit.com
FF - ExtSQL: 2013-05-22 20:01; donottrackplus@abine.com; c:\users\klient\AppData\Roaming\Mozilla\Firefox\Profiles\fc5bva34.default-1352312131103\extensions\donottrackplus@abine.com
FF - ExtSQL: 2013-06-10 09:59; hnkbtsofeiy@yuacx.org; c:\users\klient\AppData\Roaming\Mozilla\Firefox\Profiles\fc5bva34.default-1352312131103\extensions\hnkbtsofeiy@yuacx.org
FF - ExtSQL: 2013-06-10 09:59; mzgxwgiwno@iizcptihg.edu; c:\users\klient\AppData\Roaming\Mozilla\Firefox\Profiles\fc5bva34.default-1352312131103\extensions\mzgxwgiwno@iizcptihg.edu
FF - ExtSQL: 2013-06-10 11:15; {ab91efd4-6975-4081-8552-1b3922ed79e2}; c:\users\klient\AppData\Roaming\Mozilla\Firefox\Profiles\fc5bva34.default-1352312131103\extensions\{ab91efd4-6975-4081-8552-1b3922ed79e2}
.
- - - - NEPLATNÉ POLOŽKY ODSTRANĚNÉ Z REGISTRU - - - -
.
WebBrowser-{34AB3C4C-DA1A-4067-96F4-31452C7CFE65} - (no file)
WebBrowser-{5E5AB302-7F65-44CD-8211-C1D4CAACCEA3} - (no file)
WebBrowser-{687578B9-7132-4A7A-80E4-30EE31099E03} - (no file)
ShellIconOverlayIdentifiers-{4d87b7a7-23f1-470c-aa45-96b25b9bd138} - (no file)
ShellIconOverlayIdentifiers-{2012DE06-50C0-48BD-ACDE-88F95D4CAD1F} - (no file)
ShellIconOverlayIdentifiers-{C72C6188-BEF2-46E5-A89A-52F0ED75219E} - (no file)
ShellIconOverlayIdentifiers-{C92F6BC2-AF61-4C0E-80E0-939B8282DDB7} - (no file)
ShellIconOverlayIdentifiers-{0C4A258A-3F3B-4FFF-80A7-9B3BEC139472} - (no file)
ShellIconOverlayIdentifiers-{62CCD8E3-9C21-41E1-B55E-1E26DFC68511} - (no file)
ShellIconOverlayIdentifiers-{A759AFF6-5851-457D-A540-F4ECED148351} - (no file)
ShellIconOverlayIdentifiers-{1574C9EF-7D58-488F-B358-8B78C1538F51} - (no file)
AddRemove-CodInstl - c:\windows\system32\CDUninst.isu
AddRemove-HelixYUVCodecs - c:\windows\system32\uninstHelixYUV.exe
AddRemove-SP_4e24eecb - c:\program files (x86)\WebSearch\uninstall.exe
AddRemove-SP_5dec30d7 - c:\program files (x86)\ZoomEx\uninstall.exe
AddRemove-SP_e14dcdfa - c:\program files (x86)\ContinueToSave\uninstall.exe
AddRemove-{53820F89-063F-10D7-7457-06C201F4CBF0} - c:\programdata\Zoomex\uninstall.exe
.
.
.
--------------------- ZAMKNUTÉ KLÍČE V REGISTRU ---------------------
.
[HKEY_USERS\S-1-5-21-2276255412-1883947941-3749338985-1000\Software\SecuROM\!CAUTION! NEVER A OR CHANGE ANY KEY*]
"??"=hex:a3,20,f9,81,d0,b8,c5,0c,cd,d9,f5,b8,48,f3,0f,32,d1,1e,35,42,58,87,71,
a3,50,70,cb,36,1a,1a,c2,1d,cc,a6,62,85,89,92,34,06,af,51,14,73,69,e9,1e,75,\
"??"=hex:41,b7,c6,36,43,74,89,40,65,89,17,6b,a3,d2,6e,0c
.
[HKEY_USERS\S-1-5-21-2276255412-1883947941-3749338985-1000\Software\SecuROM\License information*]
"datasecu"=hex:e7,9a,d7,7e,ee,02,71,bf,83,76,b8,d0,db,7c,7f,92,07,11,0d,74,94,
56,21,67,24,ca,2c,d0,37,de,f2,69,1c,cf,3c,ec,35,c0,36,b0,3e,0e,66,d2,74,0a,\
"rkeysecu"=hex:2f,0f,d5,3e,02,2b,06,63,b1,0b,dd,b6,71,e2,54,98
.
[HKEY_USERS\S-1-5-21-2276255412-1883947941-3749338985-1000\Software\Trolltech\OrganizationDefaults\Qt Factory Cache 4.7\com.trolltech.Qt.QImageIOHandlerFactoryInterface:\d:\GAMES\B*a*t*t*l*e*f*i*e*l*d* *3*"!\Core\imageformats]
"qgif4.dll"=multi:"2011-10-10T16:42\00gif\00\00"
"qico4.dll"=multi:"2011-10-10T16:42\00ico\00\00"
"qjpeg4.dll"=multi:"2011-10-10T16:42\00jpeg\00jpg\00\00"
.
[HKEY_USERS\S-1-5-21-2276255412-1883947941-3749338985-1000\Software\Trolltech\OrganizationDefaults\Qt Factory Cache 4.7\com.trolltech.Qt.QTextCodecFactoryInterface:\d:\GAMES\B*a*t*t*l*e*f*i*e*l*d* *3*"!\Core\codecs]
"qcncodecs4.dll"=multi:"2011-10-10T16:42\00GB18030\00GBK\00GB2312\00CP936\00MS936\00windows-936\00MIB: 114\00MIB: 113\00MIB: 2025\00\00"
"qkrcodecs4.dll"=multi:"2011-10-10T16:42\00EUC-KR\00cp949\00MIB: 38\00MIB: -949\00\00"
"qtwcodecs4.dll"=multi:"2011-10-10T16:42\00Big5\00Big5-HKSCS\00Big5-ETen\00CP950\00MIB: 2026\00MIB: 2101\00\00"
.
[HKEY_USERS\S-1-5-21-2276255412-1883947941-3749338985-1000\Software\Trolltech\OrganizationDefaults\Qt Plugin Cache 4.7.false\d:\games\B*a*t*t*l*e*f*i*e*l*d* *3*"!\Core\codecs]
"qcncodecs4.dll"=multi:"40703\000\00Windows msvc release full-config QT_NO_DRAGANDDROP\002011-10-10T16:42\00\00"
"qjpcodecs4.dll"=multi:"40602\000\00Windows msvc release full-config\002011-10-10T16:42\00\00"
"qjpcodecsd4.dll"=multi:"40703\001\00Windows msvc debug full-config QT_NO_DRAGANDDROP\002011-10-10T16:42\00\00"
"qkrcodecs4.dll"=multi:"40703\000\00Windows msvc release full-config QT_NO_DRAGANDDROP\002011-10-10T16:42\00\00"
"qtwcodecs4.dll"=multi:"40703\000\00Windows msvc release full-config QT_NO_DRAGANDDROP\002011-10-10T16:42\00\00"
.
[HKEY_USERS\S-1-5-21-2276255412-1883947941-3749338985-1000\Software\Trolltech\OrganizationDefaults\Qt Plugin Cache 4.7.false\d:\games\B*a*t*t*l*e*f*i*e*l*d* *3*"!\Core\imageformats]
"Microsoft.VC80.CRT.manifest"=multi:"0\001\00unknown\002011-10-10T16:42\00\00"
"msvcr80.dll"=multi:"0\001\00unknown\002011-10-10T16:42\00\00"
"qgif4.dll"=multi:"40703\000\00Windows msvc release full-config QT_NO_DRAGANDDROP\002011-10-10T16:42\00\00"
"qico4.dll"=multi:"40703\000\00Windows msvc release full-config QT_NO_DRAGANDDROP\002011-10-10T16:42\00\00"
"qjpeg4.dll"=multi:"40703\000\00Windows msvc release full-config QT_NO_DRAGANDDROP\002011-10-10T16:42\00\00"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@="Shockwave Flash Object"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\InprocServer32]
@="c:\\Windows\\SysWow64\\Macromed\\Flash\\Flash9f.ocx"
"ThreadingModel"="Apartment"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\MiscStatus]
@="0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ProgID]
@="ShockwaveFlash.ShockwaveFlash.9"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
@="c:\\Windows\\SysWow64\\Macromed\\Flash\\Flash9f.ocx, 1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\TypeLib]
@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\Version]
@="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
@="ShockwaveFlash.ShockwaveFlash"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@="Macromedia Flash Factory Object"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\InprocServer32]
@="c:\\Windows\\SysWow64\\Macromed\\Flash\\Flash9f.ocx"
"ThreadingModel"="Apartment"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ProgID]
@="FlashFactory.FlashFactory.1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
@="c:\\Windows\\SysWow64\\Macromed\\Flash\\Flash9f.ocx, 1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\TypeLib]
@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\Version]
@="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
@="FlashFactory.FlashFactory"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D4304BCF-B8E9-4B35-BEA0-DC5B522670C2}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil9f.exe,-101"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D4304BCF-B8E9-4B35-BEA0-DC5B522670C2}\Elevation]
"Enabled"=dword:00000001
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D4304BCF-B8E9-4B35-BEA0-DC5B522670C2}\LocalServer32]
@="c:\\Windows\\SysWow64\\Macromed\\Flash\\FlashUtil9f.exe"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D4304BCF-B8E9-4B35-BEA0-DC5B522670C2}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{2E4BB6BE-A75F-4DC0-9500-68203655A2C4}]
@Denied: (A 2) (Everyone)
@="IFlashBroker"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{2E4BB6BE-A75F-4DC0-9500-68203655A2C4}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{2E4BB6BE-A75F-4DC0-9500-68203655A2C4}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows CE Services]
"SymbolicLinkValue"=hex(6):5c,00,72,00,65,00,67,00,69,00,73,00,74,00,72,00,79,
00,5c,00,4d,00,41,00,43,00,48,00,49,00,4e,00,45,00,5c,00,53,00,4f,00,46,00,\
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0000\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0001\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0002\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0003\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0004\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0005\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\PCW\Security]
@Denied: (Full) (Everyone)
.
Celkový čas: 2013-06-18 13:26:54
ComboFix-quarantined-files.txt 2013-06-18 11:26
ComboFix2.txt 2013-06-18 05:40
ComboFix3.txt 2013-06-17 19:08
.
Před spuštěním: Volných bajtů: 50 510 487 552
Po spuštění: Volných bajtů: 50 433 179 648
.
- - End Of File - - A0E944C9400CA62BBF68B1640766947E
A36C5E4F47E84449FF07ED3517B43A31
Nahoru
HavlisOlda
nováček
Příspěvky: 46
Registrován: červen 13
Bydliště: Tisá
Pohlaví: Muž
Stav:
Offline

Re: Prosím o kontrolu logu, procesor jede stále na 100%

Příspěvekod HavlisOlda » 18 čer 2013 14:37

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 7:37:27, on 12.6.2013
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v10.0 (10.00.9200.16576)
Boot mode: Normal

Running processes:
C:\Program Files (x86)\IObit\Advanced SystemCare 6\ASCService.exe
C:\Program Files (x86)\Zrychleni Pocitace\PCSUService.exe
C:\Program Files (x86)\IObit\IObit Malware Fighter\IMFsrv.exe
C:\Program Files (x86)\Samsung\Kies\External\FirmwareUpdate\KiesPDLR.exe
C:\Program Files (x86)\IObit\Advanced SystemCare 6\ASCTray.exe
C:\Users\klient\AppData\Roaming\update_tc\update.exe
C:\Users\klient\AppData\Roaming\Seznam.cz\bin\szndesktop.exe
C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
C:\Program Files (x86)\Sony\Content Manager Assistant\CMA.exe
C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
C:\Program Files (x86)\Adobe\Acrobat 10.0\Acrobat\acrotray.exe
C:\Program Files (x86)\Sony\Content Manager Assistant\CMAWatcher.exe
C:\Program Files (x86)\Application Updater\ApplicationUpdater.exe
C:\Program Files (x86)\Autodesk\Content Service\Connect.Service.ContentService.exe
C:\Program Files (x86)\IObit\IObit Malware Fighter\IMF.exe
C:\Program Files (x86)\IVT Corporation\BlueSoleil\BlueSoleilCS.exe
C:\ProgramData\BrowserProtect\2.6.1249.132\{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8}\BrowserProtect.exe
C:\ProgramData\BrowserProtect\2.6.1249.132\{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8}\BrowserProtect.exe
C:\Program Files (x86)\Mp3Tube Toolbar\Mp3TubeVideoToMp3.exe
C:\Program Files (x86)\IObit\Smart Defrag 2\SmartDefrag.exe
C:\Program Files (x86)\IObit\Advanced SystemCare 6\Monitor.exe
C:\Windows\SysWOW64\jmdp\stij.exe
C:\Program Files (x86)\Nero\Update\NASvc.exe
C:\Users\klient\AppData\Roaming\update_tc\ab2c342000\pinipe__helper.exe
C:\Program Files (x86)\IVT Corporation\BlueSoleil\BtTray.exe
C:\Program Files (x86)\IObit\Advanced SystemCare 6\ASC.exe
C:\Program Files (x86)\Search Results Toolbar\Datamngr\DatamngrUI.exe
C:\Windows\SysWOW64\taskmgr.exe
C:\Program Files (x86)\Mozilla Firefox\firefox.exe
C:\Program Files (x86)\Search Results Toolbar\Datamngr\DatamngrCoordinator.exe
C:\Program Files (x86)\Mozilla Firefox\plugin-container.exe
C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_11_7_700_202.exe
C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_11_7_700_202.exe
F:\Nová složka\ORTHOS.exe
C:\Program Files (x86)\Trend Micro\HiJackThis\HiJackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://search.certified-toolbar.com?si= ... bs=true&q=
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://websearch.homesearch-hub.info/?p ... Z&unqvl=20
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/p/?LinkId=255141
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://search.certified-toolbar.com?si= ... bs=true&q=
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = http://search.certified-toolbar.com?si= ... bs=true&q=
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://search.certified-toolbar.com?si= ... bs=true&q=
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://websearch.homesearch-hub.info/?p ... Z&unqvl=20
R1 - HKCU\Software\Microsoft\Internet Explorer\Search,Default_Search_URL = http://search.certified-toolbar.com?si= ... bs=true&q=
R1 - HKLM\Software\Microsoft\Internet Explorer\Search,Default_Search_URL = http://search.certified-toolbar.com?si= ... bs=true&q=
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = 127.0.0.1:9421;<local>;*.local
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
R3 - URLSearchHook: (no name) - - (no file)
R3 - URLSearchHook: IObit Apps Toolbar - {03EB0E9C-7A91-4381-A220-9B52B641CDB1} - C:\Program Files (x86)\IObit Apps Toolbar\IE\7.1\iobitappsToolbarIE.dll
R3 - URLSearchHook: (no name) - {3B81079D-2AC9-425f-A494-A1C7D93AFA3C} - (no file)
F2 - REG:system.ini: UserInit=userinit.exe
O2 - BHO: TheBflix - {038137EA-F83A-490B-A8F2-9AEA89C7FB65} - (no file)
O2 - BHO: IObit Apps Toolbar - {03EB0E9C-7A91-4381-A220-9B52B641CDB1} - C:\Program Files (x86)\IObit Apps Toolbar\IE\7.1\iobitappsToolbarIE.dll
O2 - BHO: Increase performance and video formats for your HTML5 <video> - {326E768D-4182-46FD-9C16-1449A49795F4} - C:\Program Files (x86)\DivX\DivX Plus Web Player\ie\DivXHTML5\DivXHTML5.dll
O2 - BHO: Search-Results Toolbar - {503e067f-2914-4edd-8432-2d6c52635e23} - C:\PROGRA~2\Search Results Toolbar\Datamngr\SRToolBar\searchresultsDx.dll
O2 - BHO: (no name) - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - (no file)
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll
O2 - BHO: Pomocná služba pro přihlášení ke službě Windows Live ID - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: (no name) - {944FEDFD-C4FD-441D-8275-9C651A9FFBDE} - (no file)
O2 - BHO: TheBflix - {9975C56F-480B-4861-8BEB-7E3CBF52F7B5} - (no file)
O2 - BHO: Windows Live Messenger Companion Helper - {9FDDE16B-836F-4806-AB1F-1455CBEFF289} - C:\Program Files (x86)\Windows Live\Companion\companioncore.dll
O2 - BHO: BroWse2ssave - {A85E90B9-10E2-770D-8266-2140259768E2} - (no file)
O2 - BHO: Adobe PDF Conversion Toolbar Helper - {AE7CD045-E861-484f-8273-0445EE161910} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll
O2 - BHO: SkypeIEPluginBHO - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files (x86)\Google\GoogleToolbarNotifier\5.2.4204.1700\swg.dll
O2 - BHO: conntinueetaoSSauve - {B57CF668-9428-B076-2C2B-B5A5B2CC3692} - C:\ProgramData\conntinueetaoSSauve\51b5854cef286.dll
O2 - BHO: Advanced SystemCare Browser Protection - {BA0C978D-D909-49B6-AFE2-8BDE245DC7E6} - C:\PROGRA~2\IObit\ADVANC~1\BROWER~1\ASCPlugin_Protection.dll
O2 - BHO: TheBflix - {D47F6D70-B5CF-4FDA-8355-177E6319D1EC} - (no file)
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll
O2 - BHO: SearchNewTab - {E82A1B51-450B-BEA5-403B-B9C912469472} - C:\ProgramData\SearchNewTab\51b585ab73f42.dll
O2 - BHO: Ukazatel S-Rank - {EA837F48-5AD1-443E-AE34-FFE03CBF3099} - (no file)
O2 - BHO: SmartSelect - {F4971EE7-DAA0-4053-9964-665D8EE6A077} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll
O2 - BHO: Yontoo Layers - {FD72061E-9FDE-484D-A58A-0BAB4151CAD8} - C:\Program Files (x86)\Yontoo\YontooIEClient.dll
O3 - Toolbar: Adobe PDF - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll
O3 - Toolbar: Mp3Tube Toolbar - {46897C77-E7A6-4c33-BFFB-E9C2E2718942} - "C:\Program Files (x86)\Mp3Tube Toolbar\mp3tubetb.DLL" (file missing)
O3 - Toolbar: Search-Results Toolbar - {503e067f-2914-4edd-8432-2d6c52635e23} - C:\PROGRA~2\Search Results Toolbar\Datamngr\SRToolBar\searchresultsDx.dll
O3 - Toolbar: IObit Apps Toolbar - {03EB0E9C-7A91-4381-A220-9B52B641CDB1} - C:\Program Files (x86)\IObit Apps Toolbar\IE\7.1\iobitappsToolbarIE.dll
O4 - HKLM\..\Run: [GrooveMonitor] "C:\Program Files (x86)\Microsoft Office\Office12\GrooveMonitor.exe"
O4 - HKLM\..\Run: [Adobe Acrobat Speed Launcher] "C:\Program Files (x86)\Adobe\Acrobat 10.0\Acrobat\Acrobat_sl.exe"
O4 - HKLM\..\Run: [seznam-listicka-distribuce] "C:\Program Files (x86)\Seznam.cz\distribution\szninstall.exe" -s -d listicka 1 szn-software-listicka cz.seznam.software.autoupdate
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"
O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKLM\..\Run: [Acrobat Assistant 8.0] "C:\Program Files (x86)\Adobe\Acrobat 10.0\Acrobat\Acrotray.exe"
O4 - HKLM\..\Run: [IObit Malware Fighter] "C:\Program Files (x86)\IObit\IObit Malware Fighter\IMF.exe" /autostart
O4 - HKLM\..\Run: [ATICustomerCare] "C:\Program Files (x86)\ATI\ATICustomerCare\ATICustomerCare.exe"
O4 - HKCU\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun
O4 - HKCU\..\Run: [PCSpeedUp] C:\Program Files (x86)\Zrychleni Pocitace\PCSUNotifier.exe
O4 - HKCU\..\Run: [cz.seznam.software.autoupdate] "C:\Users\klient\AppData\Roaming\Seznam.cz\szninstall.exe" -c
O4 - HKCU\..\Run: [cz.seznam.software.szndesktop] "C:\Users\klient\AppData\Roaming\Seznam.cz\bin\wszndesktop.exe" -q
O4 - HKCU\..\Run: [] C:\Program Files (x86)\Samsung\Kies\External\FirmwareUpdate\KiesPDLR.exe
O4 - HKCU\..\Run: [Advanced SystemCare 6] "C:\Program Files (x86)\IObit\Advanced SystemCare 6\ASCTray.exe" /AutoStart
O4 - HKCU\..\Run: [DAEMON Tools Lite] "C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe" -autorun
O4 - HKCU\..\Run: [SysUpdateHelper] C:\Users\klient\AppData\Roaming\update_tc\update.exe
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'NETWORK SERVICE')
O4 - Global Startup: Content Manager Assistant for PlayStation(R).lnk = C:\Program Files (x86)\Sony\Content Manager Assistant\CMA.exe
O8 - Extra context menu item: Add to Google Photos Screensa&ver - res://C:\Windows\system32\GPhotos.scr/200
O8 - Extra context menu item: Download with &Media Finder - C:\Program Files (x86)\Media Finder\hook.html
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Excel - res://C:\PROGRA~2\MICROS~1\Office12\EXCEL.EXE/3000
O8 - Extra context menu item: Převést cíl vazby do Adobe PDF - res://C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll/AcroIECaptureSelLinks.html
O8 - Extra context menu item: Převést do Adobe PDF - res://C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll/AcroIECapture.html
O8 - Extra context menu item: Připojit cíl vazby k existujícímu PDF - res://C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll/AcroIEAppendSelLinks.html
O8 - Extra context menu item: Připojit k existujícímu PDF - res://C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll/AcroIEAppend.html
O9 - Extra button: @C:\Program Files (x86)\Windows Live\Companion\companionlang.dll,-600 - {0000036B-C524-4050-81A0-243669A86B9F} - C:\Program Files (x86)\Windows Live\Companion\companioncore.dll
O9 - Extra button: @C:\Program Files (x86)\Windows Live\Writer\WindowsLiveWriterShortcuts.dll,-1004 - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra 'Tools' menuitem: @C:\Program Files (x86)\Windows Live\Writer\WindowsLiveWriterShortcuts.dll,-1003 - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra button: Odeslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~2\MICROS~1\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: Od&eslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~2\MICROS~1\Office12\ONBttnIE.dll
O9 - Extra button: Skype Click to Call - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~2\MICROS~1\Office12\REFIEBAR.DLL
O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll
O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O17 - HKLM\System\CCS\Services\Tcpip\..\{39E2CD10-B581-47E2-8C2A-11ED5FC85569}: NameServer = 8.8.8.8,8.8.4.4
O17 - HKLM\System\CCS\Services\Tcpip\..\{BAE75CD4-2944-4809-802D-7B198D32936C}: NameServer = 8.8.8.8,8.8.4.4
O17 - HKLM\System\CS1\Services\Tcpip\..\{39E2CD10-B581-47E2-8C2A-11ED5FC85569}: NameServer = 8.8.8.8,8.8.4.4
O17 - HKLM\System\CS2\Services\Tcpip\..\{39E2CD10-B581-47E2-8C2A-11ED5FC85569}: NameServer = 8.8.8.8,8.8.4.4
O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Program Files (x86)\Microsoft Office\Office12\GrooveSystemServices.dll
O18 - Protocol: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~2\COMMON~1\Skype\Skype4COM.dll
O18 - Protocol: wlpg - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} - C:\Program Files (x86)\Windows Live\Photo Gallery\AlbumDownloadProtocolHandler.dll
O20 - AppInit_DLLs: c:\progra~3\wincert\win32cert.dll c:\progra~3\browserprotect\2.6.1249.132\{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8}\browserprotect.dll c:\progra~2\continuetosave\sprotector.dll c:\progra~2\websea~1\sprotector.dll
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: Advanced SystemCare Service 6 (AdvancedSystemCareService6) - IObit - C:\Program Files (x86)\IObit\Advanced SystemCare 6\ASCService.exe
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
O23 - Service: AMD External Events Utility - Unknown owner - C:\Windows\system32\atiesrxx.exe (file missing)
O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
O23 - Service: Application Updater - Spigot, Inc. - C:\Program Files (x86)\Application Updater\ApplicationUpdater.exe
O23 - Service: Autodesk Content Service - Autodesk, Inc. - C:\Program Files (x86)\Autodesk\Content Service\Connect.Service.ContentService.exe
O23 - Service: Computer Backup (MyPC Backup) (BackupStack) - Just Develop It - C:\Program Files (x86)\MyPC Backup\BackupStack.exe
O23 - Service: BlueSoleilCS - IVT Corporation - C:\Program Files (x86)\IVT Corporation\BlueSoleil\BlueSoleilCS.exe
O23 - Service: Bonjour Service - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: BrowserProtect - Unknown owner - C:\ProgramData\BrowserProtect\2.6.1249.132\{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8}\BrowserProtect.exe
O23 - Service: BsHelpCS - IVT Corporation - C:\Program Files (x86)\IVT Corporation\BlueSoleil\BsHelpCS.exe
O23 - Service: BsMobileCS - IVT Corporation - C:\Program Files (x86)\IVT Corporation\BlueSoleil\BsMobileCS.exe
O23 - Service: COMODO EasyVPN VNC Service (CrdphService) - COMODO - C:\Program Files\COMODO\EasyVPN\crdphService.exe
O23 - Service: Datamngr Coordinator (DatamngrCoordinator) - iMesh Inc. - C:\Program Files (x86)\Search Results Toolbar\Datamngr\DatamngrCoordinator.exe
O23 - Service: COMODO EasyVPN Service (EasyVpnAdpt) - Unknown owner - C:\Program Files\COMODO\EasyVPN\Vpnservice.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)
O23 - Service: COMODO Unite MultiLogin Service (EzVpnSvc) - COMODO - C:\Mc server\EzVpnSvc.exe
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)
O23 - Service: FLEXnet Licensing Service 64 - Flexera Software, Inc. - C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService64.exe
O23 - Service: Futuremark SystemInfo Service - Futuremark Corporation - C:\Program Files (x86)\Common Files\Futuremark Shared\Futuremark SystemInfo\FMSISvc.exe
O23 - Service: Služba Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Služba Google Update (gupdatem) (gupdatem) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Google Software Updater (gusvc) - Google - C:\Program Files (x86)\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: LogMeIn Hamachi Tunneling Engine (Hamachi2Svc) - Unknown owner - (no file)
O23 - Service: IBUpdaterService - Unknown owner - C:\Windows\system32\dmwu.exe (file missing)
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files (x86)\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: IMF Service (IMFservice) - IObit - C:\Program Files (x86)\IObit\IObit Malware Fighter\IMFsrv.exe
O23 - Service: iPod Service - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Mozilla Foundation - C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe
O23 - Service: Mp3Tube Toolbar Updater Service (Mp3Tube Toolbar Service) - Mp3Tube - C:\Program Files (x86)\Mp3Tube Toolbar\Mp3TubeSvc.exe
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
O23 - Service: @C:\Program Files (x86)\Nero\Update\NASvc.exe,-200 (NAUpdate) - Nero AG - C:\Program Files (x86)\Nero\Update\NASvc.exe
O23 - Service: PC Speed Up Service (PCSUService) - Unknown owner - C:\Program Files (x86)\Zrychleni Pocitace\PCSUService.exe
O23 - Service: PnkBstrA - Unknown owner - C:\Windows\system32\PnkBstrA.exe
O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Skype C2C Service - Skype Technologies S.A. - C:\ProgramData\Skype\Toolbars\Skype C2C Service\c2c_service.exe
O23 - Service: Skype Updater (SkypeUpdate) - Skype Technologies - C:\Program Files (x86)\Skype\Updater\Updater.exe
O23 - Service: Sony PC Companion - Avanquest Software - C:\Program Files (x86)\Sony\Sony PC Companion\PCCService.exe
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)
O23 - Service: Steam Client Service - Valve Corporation - C:\Program Files (x86)\Common Files\Steam\SteamService.exe
O23 - Service: TomTomHOMEService - TomTom - C:\Program Files (x86)\TomTom HOME 2\TomTomHOMEService.exe
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\Wat\WatUX.exe,-601 (WatAdminSvc) - Unknown owner - C:\Windows\system32\Wat\WatAdminSvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)

--
End of file - 20942 bytes
Nahoru
HavlisOlda
nováček
Příspěvky: 46
Registrován: červen 13
Bydliště: Tisá
Pohlaví: Muž
Stav:
Offline

Re: Prosím o kontrolu logu, procesor jede stále na 100%

Příspěvekod HavlisOlda » 18 čer 2013 14:42

aswMBR version 0.9.9.1771 Copyright(c) 2011 AVAST Software
Run date: 2013-06-18 14:32:32
-----------------------------
14:32:32.198 OS Version: Windows x64 6.1.7601 Service Pack 1
14:32:32.198 Number of processors: 2 586 0x1706
14:32:32.199 ComputerName: KLIENT-PC UserName: klient
14:32:32.978 Initialize success
14:32:45.829 Disk 0 (boot) \Device\Harddisk0\DR0 -> \Device\Ide\IdeDeviceP2T0L0-2
14:32:45.830 Disk 0 Vendor: SAMSUNG_HD103SJ 1AJ10001 Size: 953868MB BusType: 3
14:32:45.832 Disk 1 \Device\Harddisk1\DR1 -> \Device\Ide\IdeDeviceP2T1L0-5
14:32:45.834 Disk 1 Vendor: SAMSUNG_HD502IJ 1AA01112 Size: 476940MB BusType: 3
14:32:45.845 Disk 0 MBR read successfully
14:32:45.847 Disk 0 MBR scan
14:32:45.849 Disk 0 Windows 7 default MBR code
14:32:45.851 Disk 0 Partition 1 00 07 HPFS/NTFS NTFS 333000 MB offset 2048
14:32:45.866 Disk 0 Partition 2 80 (A) 07 HPFS/NTFS NTFS 333000 MB offset 681986048
14:32:45.883 Disk 0 Partition 3 00 07 HPFS/NTFS NTFS 287867 MB offset 1363970048
14:32:45.908 Disk 0 scanning C:\Windows\system32\drivers
14:32:51.995 Service scanning
14:33:01.618 Service sptd C:\Windows\System32\Drivers\sptd.sys **LOCKED** 32
14:33:05.114 Modules scanning
14:33:05.121 Disk 0 trace - called modules:
14:33:05.136 ntoskrnl.exe CLASSPNP.SYS disk.sys ACPI.sys >>UNKNOWN [0xfffffa8006ce82c0]<<sptd.sys ataport.SYS intelide.sys PCIIDEX.SYS hal.dll atapi.sys
14:33:05.140 1 nt!IofCallDriver -> \Device\Harddisk0\DR0[0xfffffa8007cb0790]
14:33:05.144 3 CLASSPNP.SYS[fffff88001ad443f] -> nt!IofCallDriver -> [0xfffffa8007732520]
14:33:05.149 5 ACPI.sys[fffff880011887a1] -> nt!IofCallDriver -> \Device\Ide\IdeDeviceP2T0L0-2[0xfffffa8007721680]
14:33:05.153 \Driver\atapi[0xfffffa8007702060] -> IRP_MJ_CREATE -> 0xfffffa8006ce82c0
14:33:05.157 Scan finished successfully
14:33:28.270 Disk 0 MBR has been saved successfully to "C:\Users\klient\Documents\MBR.dat"
14:33:28.275 The log file has been saved successfully to "C:\Users\klient\Documents\aswMBR.txt"
Nahoru
Uživatelský avatar
jaro3
člen Security týmu
Guru Level 15
Guru Level 15
Příspěvky: 43294
Registrován: červen 07
Bydliště: Jižní Čechy
Pohlaví: Muž
Stav:
Offline

Re: Prosím o kontrolu logu, procesor jede stále na 100%

Příspěvekod jaro3 » 18 čer 2013 15:53

Zavři ostatní aplikace a prohlížeče, odpoj se od netu a fixni v HJT:
Návod

Kód: Vybrat vše

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://search.certified-toolbar.com?si= ... bs=true&q=
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://websearch.homesearch-hub.info/?p ... Z&unqvl=20
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://search.certified-toolbar.com?si= ... bs=true&q=
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = http://search.certified-toolbar.com?si= ... bs=true&q=
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://search.certified-toolbar.com?si= ... bs=true&q=
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://websearch.homesearch-hub.info/?p ... Z&unqvl=20
R1 - HKCU\Software\Microsoft\Internet Explorer\Search,Default_Search_URL = http://search.certified-toolbar.com?si= ... bs=true&q=
R1 - HKLM\Software\Microsoft\Internet Explorer\Search,Default_Search_URL = http://search.certified-toolbar.com?si= ... bs=true&q=
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = 127.0.0.1:9421;<local>;*.local
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
R3 - URLSearchHook: (no name) - - (no file)
R3 - URLSearchHook: IObit Apps Toolbar - {03EB0E9C-7A91-4381-A220-9B52B641CDB1} - C:\Program Files (x86)\IObit Apps Toolbar\IE\7.1\iobitappsToolbarIE.dll
R3 - URLSearchHook: (no name) - {3B81079D-2AC9-425f-A494-A1C7D93AFA3C} - (no file)
F2 - REG:system.ini: UserInit=userinit.exe
O2 - BHO: TheBflix - {038137EA-F83A-490B-A8F2-9AEA89C7FB65} - (no file)
O2 - BHO: IObit Apps Toolbar - {03EB0E9C-7A91-4381-A220-9B52B641CDB1} - C:\Program Files (x86)\IObit Apps Toolbar\IE\7.1\iobitappsToolbarIE.dll
O2 - BHO: (no name) - {944FEDFD-C4FD-441D-8275-9C651A9FFBDE} - (no file)
O2 - BHO: TheBflix - {9975C56F-480B-4861-8BEB-7E3CBF52F7B5} - (no file)
O2 - BHO: BroWse2ssave - {A85E90B9-10E2-770D-8266-2140259768E2} - (no file)
O2 - BHO: TheBflix - {D47F6D70-B5CF-4FDA-8355-177E6319D1EC} - (no file)
O2 - BHO: Ukazatel S-Rank - {EA837F48-5AD1-443E-AE34-FFE03CBF3099} - (no file)
O2 - BHO: Yontoo Layers - {FD72061E-9FDE-484D-A58A-0BAB4151CAD8} - C:\Program Files (x86)\Yontoo\YontooIEClient.dll
O3 - Toolbar: Mp3Tube Toolbar - {46897C77-E7A6-4c33-BFFB-E9C2E2718942} - "C:\Program Files (x86)\Mp3Tube Toolbar\mp3tubetb.DLL" (file missing)
O3 - Toolbar: Search-Results Toolbar - {503e067f-2914-4edd-8432-2d6c52635e23} - C:\PROGRA~2\Search Results Toolbar\Datamngr\SRToolBar\searchresultsDx.dll
O3 - Toolbar: IObit Apps Toolbar - {03EB0E9C-7A91-4381-A220-9B52B641CDB1} - C:\Program Files (x86)\IObit Apps Toolbar\IE\7.1\iobitappsToolbarIE.dll
O4 - HKLM\..\Run: [Adobe Acrobat Speed Launcher] "C:\Program Files (x86)\Adobe\Acrobat 10.0\Acrobat\Acrobat_sl.exe"
O4 - HKLM\..\Run: [seznam-listicka-distribuce] "C:\Program Files (x86)\Seznam.cz\distribution\szninstall.exe" -s -d listicka 1 szn-software-listicka cz.seznam.software.autoupdate
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"
O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKCU\..\Run: [cz.seznam.software.autoupdate] "C:\Users\klient\AppData\Roaming\Seznam.cz\szninstall.exe" -c
O4 - HKCU\..\Run: [cz.seznam.software.szndesktop] "C:\Users\klient\AppData\Roaming\Seznam.cz\bin\wszndesktop.exe" -q
O4 - HKCU\..\Run: [SysUpdateHelper] C:\Users\klient\AppData\Roaming\update_tc\update.exe
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'NETWORK SERVICE')


Opakuj Combofix v nouz. režimu. Zkopírovat celý script! Je tam posuvník!
Při práci s programy HJT, ComboFix,MbAM, SDFix aj. zavřete všechny ostatní aplikace a prohlížeče!
Neposílejte logy do soukromých zpráv.Po dobu mé nepřítomnosti mě zastupuje memphisto , Žbeky a Orcus.
Pokud budete spokojeni , můžete podpořit naše forum:Podpora fóra
Nahoru
HavlisOlda
nováček
Příspěvky: 46
Registrován: červen 13
Bydliště: Tisá
Pohlaví: Muž
Stav:
Offline

Re: Prosím o kontrolu logu, procesor jede stále na 100%

Příspěvekod HavlisOlda » 18 čer 2013 20:09

ComboFix 13-06-18.02 - klient 18.06.2013 19:39:49.4.2 - x64 MINIMAL
Microsoft Windows 7 Ultimate 6.1.7601.1.1250.420.1029.18.8191.6500 [GMT 2:00]
Spuštěný z: c:\users\klient\Downloads\ComboFix.exe
AV: Microsoft Security Essentials *Disabled/Updated* {3F839487-C7A2-C958-E30C-E2825BA31FB5}
SP: Microsoft Security Essentials *Disabled/Updated* {84E27563-E198-C6D6-D9BC-D9F020245508}
SP: Windows Defender *Disabled/Outdated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
* Vytvořen nový Bod Obnovení
.
.
((((((((((((((((((((((((((((((((((((((( Ostatní výmazy )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
c:\program files (x86)\intellidownload\gunzip.exe
c:\program files (x86)\intellidownload\search.exe
c:\program files (x86)\Mozilla Firefox\searchplugins\search.xml
c:\users\klient\AppData\Roaming\ImgBurn.exe
c:\users\klient\AppData\Roaming\inst.exe
c:\windows\pkunzip.pif
c:\windows\pkzip.pif
c:\windows\SysWow64\muzapp.exe
.
.
((((((((((((((((((((((((( Soubory vytvořené od 2013-05-18 do 2013-06-18 )))))))))))))))))))))))))))))))
.
.
2013-06-18 17:52 . 2013-06-18 17:52 -------- d-----w- c:\users\NeroMediaHomeUser.4\AppData\Local\temp
2013-06-18 17:52 . 2013-06-18 17:52 -------- d-----w- c:\users\Dominik\AppData\Local\temp
2013-06-18 17:52 . 2013-06-18 17:52 -------- d-----w- c:\users\Default\AppData\Local\temp
2013-06-18 17:45 . 2013-06-18 17:45 76232 ----a-w- c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\{65A82D6F-C49C-4C92-A94A-AD2D111F3BE1}\offreg.dll
2013-06-18 12:29 . 2013-06-18 12:29 388096 ----a-r- c:\users\klient\AppData\Roaming\Microsoft\Installer\{45A66726-69BC-466B-A7A4-12FCBA4883D7}\HiJackThis.exe
2013-06-18 05:54 . 2013-06-12 03:08 9552976 ----a-w- c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\{65A82D6F-C49C-4C92-A94A-AD2D111F3BE1}\mpengine.dll
2013-06-17 17:44 . 2013-05-21 18:09 964552 ----a-w- c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\{2ABF56F7-F6B6-4BAE-A6AA-89EA95F3E687}\gapaengine.dll
2013-06-15 04:46 . 2013-05-13 06:37 9460464 ----a-w- c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\Backup\mpengine.dll
2013-06-14 08:22 . 2013-06-14 08:31 318 ----a-w- c:\windows\DeleteOnReboot.bat
2013-06-14 07:11 . 2013-06-14 07:11 -------- d-----w- c:\program files\WhoCrashed
2013-06-12 13:01 . 2013-06-12 13:01 -------- d-----w- c:\users\klient\AppData\Roaming\Malwarebytes
2013-06-12 13:00 . 2013-06-12 13:00 -------- d-----w- c:\programdata\Malwarebytes
2013-06-12 13:00 . 2013-06-12 13:01 -------- d-----w- c:\program files (x86)\Malwarebytes' Anti-Malware
2013-06-12 13:00 . 2013-04-04 12:50 25928 ----a-w- c:\windows\system32\drivers\mbam.sys
2013-06-12 05:36 . 2013-06-12 05:36 -------- d-----w- c:\program files (x86)\Trend Micro
2013-06-11 19:00 . 2013-06-11 19:00 526336 ----a-w- c:\windows\system32\ieui.dll
2013-06-11 19:00 . 2013-06-11 19:00 15404544 ----a-w- c:\windows\system32\ieframe.dll
2013-06-11 19:00 . 2013-06-11 19:00 2706432 ----a-w- c:\windows\SysWow64\mshtml.tlb
2013-06-11 19:00 . 2013-06-11 19:00 2706432 ----a-w- c:\windows\system32\mshtml.tlb
2013-06-11 19:00 . 2013-06-11 19:00 19233792 ----a-w- c:\windows\system32\mshtml.dll
2013-06-11 18:59 . 2013-06-11 19:00 1365504 ----a-w- c:\windows\system32\urlmon.dll
2013-06-11 18:59 . 2013-06-11 18:59 279040 ----a-w- c:\program files\Internet Explorer\sqmapi.dll
2013-06-11 18:59 . 2013-06-11 18:59 2648064 ----a-w- c:\windows\system32\iertutil.dll
2013-06-11 18:59 . 2013-06-11 18:59 218112 ----a-w- c:\program files (x86)\Internet Explorer\sqmapi.dll
2013-06-11 18:51 . 2013-06-11 18:51 1910632 ----a-w- c:\windows\system32\drivers\tcpip.sys
2013-06-11 18:50 . 2013-06-11 18:50 751104 ----a-w- c:\windows\system32\win32spl.dll
2013-06-11 18:50 . 2013-06-11 18:50 492544 ----a-w- c:\windows\SysWow64\win32spl.dll
2013-06-11 18:49 . 2013-06-11 18:49 24576 ----a-w- c:\windows\SysWow64\cryptdlg.dll
2013-06-11 18:49 . 2013-06-11 18:49 30720 ----a-w- c:\windows\system32\cryptdlg.dll
2013-06-11 18:46 . 2013-06-11 18:46 1887232 ----a-w- c:\windows\system32\d3d11.dll
2013-06-11 18:46 . 2013-06-11 18:46 1505280 ----a-w- c:\windows\SysWow64\d3d11.dll
2013-06-11 18:45 . 2013-06-11 18:45 1424384 ----a-w- c:\windows\system32\WindowsCodecs.dll
2013-06-11 18:45 . 2013-06-11 18:45 1230336 ----a-w- c:\windows\SysWow64\WindowsCodecs.dll
2013-06-11 18:43 . 2013-06-11 18:43 52224 ----a-w- c:\windows\system32\certenc.dll
2013-06-11 18:43 . 2013-06-11 18:43 1192448 ----a-w- c:\windows\system32\certutil.exe
2013-06-11 18:43 . 2013-06-11 18:43 903168 ----a-w- c:\windows\SysWow64\certutil.exe
2013-06-11 18:43 . 2013-06-11 18:43 43008 ----a-w- c:\windows\SysWow64\certenc.dll
2013-06-11 18:43 . 2013-06-11 18:43 1464320 ----a-w- c:\windows\system32\crypt32.dll
2013-06-11 18:43 . 2013-06-11 18:43 184320 ----a-w- c:\windows\system32\cryptsvc.dll
2013-06-11 18:43 . 2013-06-11 18:43 140288 ----a-w- c:\windows\SysWow64\cryptsvc.dll
2013-06-11 18:43 . 2013-06-11 18:43 139776 ----a-w- c:\windows\system32\cryptnet.dll
2013-06-11 18:43 . 2013-06-11 18:43 1160192 ----a-w- c:\windows\SysWow64\crypt32.dll
2013-06-11 18:43 . 2013-06-11 18:43 103936 ----a-w- c:\windows\SysWow64\cryptnet.dll
2013-06-11 17:06 . 2013-06-11 17:06 -------- d-----w- c:\programdata\ATI
2013-06-11 09:50 . 2013-06-11 09:50 -------- d-----w- c:\program files (x86)\ATI
2013-06-11 09:11 . 2013-06-11 09:11 -------- d-----w- c:\program files\ATI
2013-06-10 11:27 . 2013-06-10 11:27 -------- d-----w- c:\users\klient\SyncFolder
2013-06-10 06:58 . 2013-06-10 06:58 -------- d-----w- c:\programdata\StarApp
2013-06-10 06:22 . 2013-06-10 11:28 -------- d-----w- c:\program files (x86)\MyPC Backup
2013-06-06 22:15 . 2013-06-06 22:21 -------- d-----w- c:\program files (x86)\Farming Simulator 2013
2013-06-05 05:08 . 2013-06-09 20:38 -------- d-----w- c:\program files (x86)\GRID 2
2013-06-04 14:09 . 2013-06-09 20:11 -------- d-----w- c:\program files (x86)\Landwirtschafts Simulator 2011
.
.
.
(((((((((((((((((((((((((((((((((((((((( Find3M výpis ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2013-06-12 16:27 . 2013-03-06 20:28 692104 ----a-w- c:\windows\SysWow64\FlashPlayerApp.exe
2013-06-12 16:27 . 2013-02-14 06:34 71048 ----a-w- c:\windows\SysWow64\FlashPlayerCPLApp.cpl
2013-06-12 14:15 . 2011-10-10 01:12 75825640 ----a-w- c:\windows\system32\MRT.exe
2013-05-21 18:09 . 2012-06-12 18:02 964552 ----a-w- c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\NISBackup\gapaengine.dll
2013-05-10 08:11 . 2011-03-28 17:36 22240 ----a-w- c:\programdata\Microsoft\IdentityCRL\production\ppcrlconfig600.dll
2013-05-10 07:57 . 2013-05-10 07:57 27208 ----a-w- c:\windows\system32\AdobePDFUI.dll
2013-05-10 07:57 . 2013-05-10 07:57 55872 ----a-w- c:\windows\system32\AdobePDF.dll
2013-05-09 17:15 . 2013-05-07 12:00 281688 ----a-w- c:\windows\SysWow64\PnkBstrB.exe
2013-05-09 17:15 . 2012-03-03 02:18 281688 ----a-w- c:\windows\SysWow64\PnkBstrB.xtr
2013-05-09 11:01 . 2012-11-10 11:44 281688 ----a-w- c:\windows\SysWow64\PnkBstrB.ex0
2013-05-07 12:00 . 2013-05-07 12:00 76888 ----a-w- c:\windows\SysWow64\PnkBstrA.exe
2013-05-06 17:43 . 2013-05-06 17:43 283200 ----a-w- c:\windows\system32\drivers\dtsoftbus01.sys
2013-05-02 15:29 . 2011-10-07 21:13 278800 ------w- c:\windows\system32\MpSigStub.exe
2013-04-28 07:58 . 2013-04-28 07:58 95648 ----a-w- c:\windows\SysWow64\WindowsAccessBridge-32.dll
2013-04-28 07:58 . 2012-04-29 06:35 866720 ----a-w- c:\windows\SysWow64\npdeployJava1.dll
2013-04-28 07:58 . 2011-10-07 21:13 788896 ----a-w- c:\windows\SysWow64\deployJava1.dll
2013-04-26 11:59 . 2013-02-09 10:34 48648 ----a-w- c:\programdata\Microsoft\eHome\Packages\MCEClientUX\UpdateableMarkup-2\Markup.dll
2013-04-17 18:20 . 2013-03-17 17:37 26432 ----a-w- c:\windows\system32\RegistryDefragBootTime.exe
2013-04-13 05:49 . 2013-05-15 07:40 135168 ----a-w- c:\windows\apppatch\AppPatch64\AcXtrnal.dll
2013-04-13 05:49 . 2013-05-15 07:40 350208 ----a-w- c:\windows\apppatch\AppPatch64\AcLayers.dll
2013-04-13 05:49 . 2013-05-15 07:40 308736 ----a-w- c:\windows\apppatch\AppPatch64\AcGenral.dll
2013-04-13 05:49 . 2013-05-15 07:40 111104 ----a-w- c:\windows\apppatch\AppPatch64\acspecfc.dll
2013-04-13 04:45 . 2013-05-15 07:40 474624 ----a-w- c:\windows\apppatch\AcSpecfc.dll
2013-04-13 04:45 . 2013-05-15 07:40 2176512 ----a-w- c:\windows\apppatch\AcGenral.dll
2013-04-12 14:45 . 2013-04-24 03:12 1656680 ----a-w- c:\windows\system32\drivers\ntfs.sys
2013-04-12 13:28 . 2013-04-12 13:28 226304 ----a-w- c:\windows\system32\elshyph.dll
2013-04-12 13:28 . 2013-04-12 13:28 185344 ----a-w- c:\windows\SysWow64\elshyph.dll
2013-04-12 13:28 . 2013-04-12 13:28 1054720 ----a-w- c:\windows\system32\MsSpellCheckingFacility.exe
2013-04-12 13:28 . 2013-04-12 13:28 719360 ----a-w- c:\windows\SysWow64\mshtmlmedia.dll
2013-04-12 13:28 . 2013-04-12 13:28 523264 ----a-w- c:\windows\SysWow64\vbscript.dll
2013-04-12 13:28 . 2013-04-12 13:28 38400 ----a-w- c:\windows\SysWow64\imgutil.dll
2013-04-12 13:28 . 2013-04-12 13:28 158720 ----a-w- c:\windows\SysWow64\msls31.dll
2013-04-12 13:28 . 2013-04-12 13:28 150528 ----a-w- c:\windows\SysWow64\iexpress.exe
2013-04-12 13:28 . 2013-04-12 13:28 138752 ----a-w- c:\windows\SysWow64\wextract.exe
2013-04-12 13:28 . 2013-04-12 13:28 137216 ----a-w- c:\windows\SysWow64\ieUnatt.exe
2013-04-12 13:28 . 2013-04-12 13:28 12800 ----a-w- c:\windows\SysWow64\mshta.exe
2013-04-12 13:28 . 2013-04-12 13:28 73728 ----a-w- c:\windows\SysWow64\SetIEInstalledDate.exe
2013-04-12 13:28 . 2013-04-12 13:28 61952 ----a-w- c:\windows\SysWow64\tdc.ocx
2013-04-12 13:28 . 2013-04-12 13:28 48640 ----a-w- c:\windows\SysWow64\mshtmler.dll
2013-04-12 13:28 . 2013-04-12 13:28 361984 ----a-w- c:\windows\SysWow64\html.iec
2013-04-12 13:28 . 2013-04-12 13:28 23040 ----a-w- c:\windows\SysWow64\licmgr10.dll
2013-04-12 13:28 . 2013-04-12 13:28 1441280 ----a-w- c:\windows\SysWow64\inetcpl.cpl
2013-04-12 13:28 . 2013-04-12 13:28 110592 ----a-w- c:\windows\SysWow64\IEAdvpack.dll
2013-04-12 13:28 . 2013-04-12 13:28 97280 ----a-w- c:\windows\system32\mshtmled.dll
2013-04-12 13:28 . 2013-04-12 13:28 905728 ----a-w- c:\windows\system32\mshtmlmedia.dll
2013-04-12 13:28 . 2013-04-12 13:28 81408 ----a-w- c:\windows\system32\icardie.dll
2013-04-12 13:28 . 2013-04-12 13:28 762368 ----a-w- c:\windows\system32\ieapfltr.dll
2013-04-12 13:28 . 2013-04-12 13:28 452096 ----a-w- c:\windows\system32\dxtmsft.dll
2013-04-12 13:28 . 2013-04-12 13:28 441856 ----a-w- c:\windows\system32\html.iec
2013-04-12 13:28 . 2013-04-12 13:28 281600 ----a-w- c:\windows\system32\dxtrans.dll
2013-04-12 13:28 . 2013-04-12 13:28 27648 ----a-w- c:\windows\system32\licmgr10.dll
2013-04-12 13:28 . 2013-04-12 13:28 270848 ----a-w- c:\windows\system32\iedkcs32.dll
2013-04-12 13:28 . 2013-04-12 13:28 247296 ----a-w- c:\windows\system32\webcheck.dll
2013-04-12 13:28 . 2013-04-12 13:28 235008 ----a-w- c:\windows\system32\url.dll
2013-04-12 13:28 . 2013-04-12 13:28 216064 ----a-w- c:\windows\system32\msls31.dll
2013-04-12 13:28 . 2013-04-12 13:28 197120 ----a-w- c:\windows\system32\msrating.dll
2013-04-12 13:28 . 2013-04-12 13:28 1509376 ----a-w- c:\windows\system32\inetcpl.cpl
2013-04-12 13:28 . 2013-04-12 13:28 144896 ----a-w- c:\windows\system32\wextract.exe
2013-04-12 13:28 . 2013-04-12 13:28 1400416 ----a-w- c:\windows\system32\ieapfltr.dat
2013-04-12 13:28 . 2013-04-12 13:28 102912 ----a-w- c:\windows\system32\inseng.dll
2013-04-12 13:28 . 2013-04-12 13:28 167424 ----a-w- c:\windows\system32\iexpress.exe
2013-04-12 13:28 . 2013-04-12 13:28 92160 ----a-w- c:\windows\system32\SetIEInstalledDate.exe
2013-04-12 13:28 . 2013-04-12 13:28 77312 ----a-w- c:\windows\system32\tdc.ocx
2013-04-12 13:28 . 2013-04-12 13:28 62976 ----a-w- c:\windows\system32\pngfilt.dll
2013-04-12 13:28 . 2013-04-12 13:28 599552 ----a-w- c:\windows\system32\vbscript.dll
2013-04-12 13:28 . 2013-04-12 13:28 52224 ----a-w- c:\windows\system32\msfeedsbs.dll
2013-04-12 13:28 . 2013-04-12 13:28 51200 ----a-w- c:\windows\system32\imgutil.dll
2013-04-12 13:28 . 2013-04-12 13:28 48640 ----a-w- c:\windows\system32\mshtmler.dll
2013-04-12 13:28 . 2013-04-12 13:28 173568 ----a-w- c:\windows\system32\ieUnatt.exe
2013-04-12 13:28 . 2013-04-12 13:28 149504 ----a-w- c:\windows\system32\occache.dll
2013-04-12 13:28 . 2013-04-12 13:28 13824 ----a-w- c:\windows\system32\mshta.exe
2013-04-12 13:28 . 2013-04-12 13:28 136192 ----a-w- c:\windows\system32\iepeers.dll
2013-04-12 13:28 . 2013-04-12 13:28 135680 ----a-w- c:\windows\system32\IEAdvpack.dll
2013-04-12 13:28 . 2013-04-12 13:28 12800 ----a-w- c:\windows\system32\msfeedssync.exe
2013-04-10 06:01 . 2013-05-15 07:40 265064 ----a-w- c:\windows\system32\drivers\dxgmms1.sys
2013-04-10 06:01 . 2013-05-15 07:40 983400 ----a-w- c:\windows\system32\drivers\dxgkrnl.sys
2013-04-10 03:30 . 2013-05-15 07:40 3153920 ----a-w- c:\windows\system32\win32k.sys
2013-04-07 08:54 . 2012-11-03 06:45 1455408 ----a-w- c:\windows\system32\dmwu.exe
2013-04-07 08:53 . 2012-11-03 06:45 33792 ----a-w- c:\windows\system32\ImHttpComm.dll
2013-04-05 21:40 . 2013-03-30 00:33 2477216 ----a-w- c:\programdata\Microsoft\VisualStudio\11.0\1033\ResourceCache.dll
2013-03-25 20:39 . 2013-03-25 20:39 4546560 ----a-w- c:\windows\SysWow64\GPhotos.scr
.
.
(((((((((((((((((((((((((((((((((( Spouštěcí body v registru )))))))))))))))))))))))))))))))))))))))))))))
.
.
*Poznámka* prázdné záznamy a legitimní výchozí údaje nejsou zobrazeny.
REGEDIT4
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\1AMPCBOK]
@="{04cd1f3e-81d5-4904-a3ab-e0f99a7d769d}"
[HKEY_CLASSES_ROOT\CLSID\{04cd1f3e-81d5-4904-a3ab-e0f99a7d769d}]
2010-11-05 01:58 297808 ----a-w- c:\windows\System32\mscoree.dll
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Sidebar"="c:\program files\Windows Sidebar\sidebar.exe" [2010-11-20 1475584]
"Advanced SystemCare 6"="c:\program files (x86)\IObit\Advanced SystemCare 6\ASCTray.exe" [2013-04-18 491840]
"DAEMON Tools Lite"="c:\program files (x86)\DAEMON Tools Lite\DTLite.exe" [2013-03-14 3672640]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]
"GrooveMonitor"="c:\program files (x86)\Microsoft Office\Office12\GrooveMonitor.exe" [2009-02-26 30040]
"Adobe Acrobat Speed Launcher"="c:\program files (x86)\Adobe\Acrobat 10.0\Acrobat\Acrobat_sl.exe" [2013-05-10 38984]
"seznam-listicka-distribuce"="c:\program files (x86)\Seznam.cz\distribution\szninstall.exe" [2012-09-13 1009288]
"SunJavaUpdateSched"="c:\program files (x86)\Common Files\Java\Java Update\jusched.exe" [2013-03-12 253816]
"Adobe ARM"="c:\program files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2013-04-04 958576]
"Acrobat Assistant 8.0"="c:\program files (x86)\Adobe\Acrobat 10.0\Acrobat\Acrotray.exe" [2013-05-10 840768]
"ATICustomerCare"="c:\program files (x86)\ATI\ATICustomerCare\ATICustomerCare.exe" [2009-06-14 307200]
.
c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\
Content Manager Assistant for PlayStation(R).lnk - c:\program files (x86)\Sony\Content Manager Assistant\CMA.exe [2013-3-13 3458968]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorUser"= 3 (0x3)
"EnableUIADesktopToggle"= 0 (0x0)
"PromptOnSecureDesktop"= 0 (0x0)
"EnableLinkedConnections"= 1 (0x1)
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\windows]
"LoadAppInit_DLLs"=1 (0x1)
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MsMpSvc]
@="Service"
.
R0 sptd;sptd;c:\windows\\SystemRoot\System32\Drivers\sptd.sys;c:\windows\\SystemRoot\System32\Drivers\sptd.sys [x]
R1 gllkueil;gllkueil; [x]
R1 oeaiiyey;oeaiiyey; [x]
R2 AdvancedSystemCareService6;Advanced SystemCare Service 6;c:\program files (x86)\IObit\Advanced SystemCare 6\ASCService.exe;c:\program files (x86)\IObit\Advanced SystemCare 6\ASCService.exe [x]
R2 AMD External Events Utility;AMD External Events Utility;c:\windows\system32\atiesrxx.exe;c:\windows\SYSNATIVE\atiesrxx.exe [x]
R2 Autodesk Content Service;Autodesk Content Service;c:\program files (x86)\Autodesk\Content Service\Connect.Service.ContentService.exe;c:\program files (x86)\Autodesk\Content Service\Connect.Service.ContentService.exe [x]
R2 BackupStack;Computer Backup (MyPC Backup);c:\program files (x86)\MyPC Backup\BackupStack.exe;c:\program files (x86)\MyPC Backup\BackupStack.exe [x]
R2 BsMobileCS;BsMobileCS;c:\program files (x86)\IVT Corporation\BlueSoleil\BsMobileCS.exe;c:\program files (x86)\IVT Corporation\BlueSoleil\BsMobileCS.exe [x]
R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [x]
R2 CrdphService;COMODO EasyVPN VNC Service;c:\program files\COMODO\EasyVPN\crdphService.exe;c:\program files\COMODO\EasyVPN\crdphService.exe [x]
R2 EasyVpnAdpt;COMODO EasyVPN Service;c:\program files\COMODO\EasyVPN\Vpnservice.exe;c:\program files\COMODO\EasyVPN\Vpnservice.exe [x]
R2 EzVpnSvc;COMODO Unite MultiLogin Service;c:\mc server\EzVpnSvc.exe;c:\mc server\EzVpnSvc.exe [x]
R2 Hamachi2Svc;LogMeIn Hamachi Tunneling Engine; [x]
R2 NAUpdate;Nero Update;c:\program files (x86)\Nero\Update\NASvc.exe;c:\program files (x86)\Nero\Update\NASvc.exe [x]
R2 Skype C2C Service;Skype C2C Service;c:\programdata\Skype\Toolbars\Skype C2C Service\c2c_service.exe;c:\programdata\Skype\Toolbars\Skype C2C Service\c2c_service.exe [x]
R2 SkypeUpdate;Skype Updater;c:\program files (x86)\Skype\Updater\Updater.exe;c:\program files (x86)\Skype\Updater\Updater.exe [x]
R2 TomTomHOMEService;TomTomHOMEService;c:\program files (x86)\TomTom HOME 2\TomTomHOMEService.exe;c:\program files (x86)\TomTom HOME 2\TomTomHOMEService.exe [x]
R3 3xHybr64;SAA713x TV Card Service;c:\windows\system32\DRIVERS\3xHybr64.sys;c:\windows\SYSNATIVE\DRIVERS\3xHybr64.sys [x]
R3 androidusb;SAMSUNG Android Composite ADB Interface Driver;c:\windows\system32\Drivers\ssadadb.sys;c:\windows\SYSNATIVE\Drivers\ssadadb.sys [x]
R3 AtiHDAudioService;AMD Function Driver for HD Audio Service;c:\windows\system32\drivers\AtihdW76.sys;c:\windows\SYSNATIVE\drivers\AtihdW76.sys [x]
R3 atillk64;atillk64;c:\users\klient\Desktop\ati\atillk64.sys;c:\users\klient\Desktop\ati\atillk64.sys [x]
R3 ATP;Comodo Unite Miniport Driver;c:\windows\system32\DRIVERS\cmdatp.sys;c:\windows\SYSNATIVE\DRIVERS\cmdatp.sys [x]
R3 BTCOM;Bluetooth Serial port driver;c:\windows\system32\DRIVERS\btcomport.sys;c:\windows\SYSNATIVE\DRIVERS\btcomport.sys [x]
R3 BTCOMBUS;Bluetooth Serial Port Bus Service;c:\windows\system32\Drivers\btcombus.sys;c:\windows\SYSNATIVE\Drivers\btcombus.sys [x]
R3 btnetBUs;Bluetooth PAN Bus Service;c:\windows\system32\Drivers\btnetBus.sys;c:\windows\SYSNATIVE\Drivers\btnetBus.sys [x]
R3 dgderdrv;dgderdrv;c:\windows\system32\drivers\dgderdrv.sys;c:\windows\SYSNATIVE\drivers\dgderdrv.sys [x]
R3 EagleX64;EagleX64; [x]
R3 ewusbnet;HUAWEI USB-NDIS miniport;c:\windows\system32\DRIVERS\ewusbnet.sys;c:\windows\SYSNATIVE\DRIVERS\ewusbnet.sys [x]
R3 FLEXnet Licensing Service 64;FLEXnet Licensing Service 64;c:\program files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService64.exe;c:\program files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService64.exe [x]
R3 Futuremark SystemInfo Service;Futuremark SystemInfo Service;c:\program files (x86)\Common Files\Futuremark Shared\Futuremark SystemInfo\FMSISvc.exe;c:\program files (x86)\Common Files\Futuremark Shared\Futuremark SystemInfo\FMSISvc.exe [x]
R3 ggflt;SEMC USB Flash Driver Filter;c:\windows\system32\DRIVERS\ggflt.sys;c:\windows\SYSNATIVE\DRIVERS\ggflt.sys [x]
R3 IvtBtBUs;IVT Bluetooth Bus Service;c:\windows\system32\Drivers\IvtBtBus.sys;c:\windows\SYSNATIVE\Drivers\IvtBtBus.sys [x]
R3 MSI_MSIBIOS_010507;MSI_MSIBIOS_010507; [x]
R3 NisDrv;Microsoft Network Inspection System;c:\windows\system32\DRIVERS\NisDrvWFP.sys;c:\windows\SYSNATIVE\DRIVERS\NisDrvWFP.sys [x]
R3 NisSrv;Kontrola sítě Microsoft;c:\program files\Microsoft Security Client\NisSrv.exe;c:\program files\Microsoft Security Client\NisSrv.exe [x]
R3 NTIOLib_1_0_4;NTIOLib_1_0_4; [x]
R3 PAC207;SoC PC-Camera;c:\windows\system32\DRIVERS\PFC027.SYS;c:\windows\SYSNATIVE\DRIVERS\PFC027.SYS [x]
R3 pcouffin;VSO Software pcouffin;c:\windows\system32\Drivers\pcouffin.sys;c:\windows\SYSNATIVE\Drivers\pcouffin.sys [x]
R3 Ph3xIB64;Philips 713x Inbox PCI TV Card;c:\windows\system32\DRIVERS\Ph3xIB64.sys;c:\windows\SYSNATIVE\DRIVERS\Ph3xIB64.sys [x]
R3 RdpVideoMiniport;Remote Desktop Video Miniport Driver;c:\windows\system32\drivers\rdpvideominiport.sys;c:\windows\SYSNATIVE\drivers\rdpvideominiport.sys [x]
R3 Revoflt;Revoflt;c:\windows\system32\DRIVERS\revoflt.sys;c:\windows\SYSNATIVE\DRIVERS\revoflt.sys [x]
R3 RTL8167;Realtek 8167 NT Driver;c:\windows\system32\DRIVERS\Rt64win7.sys;c:\windows\SYSNATIVE\DRIVERS\Rt64win7.sys [x]
R3 Sony PC Companion;Sony PC Companion;c:\program files (x86)\Sony\Sony PC Companion\PCCService.exe;c:\program files (x86)\Sony\Sony PC Companion\PCCService.exe [x]
R3 ss_bbus;SAMSUNG USB Mobile Device (WDM);c:\windows\system32\DRIVERS\ss_bbus.sys;c:\windows\SYSNATIVE\DRIVERS\ss_bbus.sys [x]
R3 ss_bmdfl;SAMSUNG USB Mobile Modem (Filter);c:\windows\system32\DRIVERS\ss_bmdfl.sys;c:\windows\SYSNATIVE\DRIVERS\ss_bmdfl.sys [x]
R3 ss_bmdm;SAMSUNG USB Mobile Modem;c:\windows\system32\DRIVERS\ss_bmdm.sys;c:\windows\SYSNATIVE\DRIVERS\ss_bmdm.sys [x]
R3 ssadbus;SAMSUNG Android USB Composite Device driver (WDM);c:\windows\system32\DRIVERS\ssadbus.sys;c:\windows\SYSNATIVE\DRIVERS\ssadbus.sys [x]
R3 ssadmdfl;SAMSUNG Android USB Modem (Filter);c:\windows\system32\DRIVERS\ssadmdfl.sys;c:\windows\SYSNATIVE\DRIVERS\ssadmdfl.sys [x]
R3 ssadmdm;SAMSUNG Android USB Modem Drivers;c:\windows\system32\DRIVERS\ssadmdm.sys;c:\windows\SYSNATIVE\DRIVERS\ssadmdm.sys [x]
R3 Synth3dVsc;Synth3dVsc;c:\windows\system32\drivers\synth3dvsc.sys;c:\windows\SYSNATIVE\drivers\synth3dvsc.sys [x]
R3 Te.Service;Te.Service;c:\program files (x86)\Windows Kits\8.0\Testing\Runtimes\TAEF\Wex.Services.exe;c:\program files (x86)\Windows Kits\8.0\Testing\Runtimes\TAEF\Wex.Services.exe [x]
R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys;c:\windows\SYSNATIVE\drivers\tsusbflt.sys [x]
R3 tsusbhub;tsusbhub;c:\windows\system32\drivers\tsusbhub.sys;c:\windows\SYSNATIVE\drivers\tsusbhub.sys [x]
R3 TuneUpUtilitiesDrv;TuneUpUtilitiesDrv; [x]
R3 VGPU;VGPU;c:\windows\system32\drivers\rdvgkmd.sys;c:\windows\SYSNATIVE\drivers\rdvgkmd.sys [x]
R3 WatAdminSvc;Služba Technologie aktivace Windows;c:\windows\system32\Wat\WatAdminSvc.exe;c:\windows\SYSNATIVE\Wat\WatAdminSvc.exe [x]
R3 WinRing0_1_2_0;WinRing0_1_2_0;c:\program files (x86)\Razer\Razer Game Booster\Driver\WinRing0x64.sys;c:\program files (x86)\Razer\Razer Game Booster\Driver\WinRing0x64.sys [x]
R4 wlcrasvc;Windows Live Mesh remote connections service;c:\program files\Windows Live\Mesh\wlcrasvc.exe;c:\program files\Windows Live\Mesh\wlcrasvc.exe [x]
S0 BtHidBus;Bluetooth HID Bus Service;c:\windows\System32\Drivers\BtHidBus.sys;c:\windows\SYSNATIVE\Drivers\BtHidBus.sys [x]
S0 MxEFUF;Matrox Extio Upper Function Filter;c:\windows\system32\DRIVERS\MxEFUF64.sys;c:\windows\SYSNATIVE\DRIVERS\MxEFUF64.sys [x]
S0 SmartDefragDriver;SmartDefragDriver;c:\windows\System32\Drivers\SmartDefragDriver.sys;c:\windows\SYSNATIVE\Drivers\SmartDefragDriver.sys [x]
S1 dtsoftbus01;DAEMON Tools Virtual Bus Driver;c:\windows\system32\DRIVERS\dtsoftbus01.sys;c:\windows\SYSNATIVE\DRIVERS\dtsoftbus01.sys [x]
S3 amdiox64;AMD IO Driver;c:\windows\system32\DRIVERS\amdiox64.sys;c:\windows\SYSNATIVE\DRIVERS\amdiox64.sys [x]
S3 azvusb;Virtual USB Hub;c:\windows\system32\DRIVERS\azvusb.sys;c:\windows\SYSNATIVE\DRIVERS\azvusb.sys [x]
.
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\active setup\installed components\{8A69D345-D564-463c-AFF1-A69D9E530F96}]
2013-06-06 21:56 1165776 ----a-w- c:\program files (x86)\Google\Chrome\Application\27.0.1453.110\Installer\chrmstp.exe
.
Obsah adresáře 'Naplánované úlohy'
.
2013-06-18 c:\windows\Tasks\Adobe Flash Player Updater.job
- c:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2013-03-06 16:27]
.
2013-06-17 c:\windows\Tasks\FacebookUpdateTaskUserS-1-5-21-2276255412-1883947941-3749338985-1000Core.job
- c:\users\klient\AppData\Local\Facebook\Update\FacebookUpdate.exe [2012-03-21 17:52]
.
2013-06-18 c:\windows\Tasks\FacebookUpdateTaskUserS-1-5-21-2276255412-1883947941-3749338985-1000UA.job
- c:\users\klient\AppData\Local\Facebook\Update\FacebookUpdate.exe [2012-03-21 17:52]
.
2013-06-17 c:\windows\Tasks\GlaryInitialize.job
- c:\program files (x86)\Glary Utilities\initialize.exe [2012-08-04 07:43]
.
2013-06-10 c:\windows\Tasks\GlaryOneClickOptimizer.job
- c:\program files (x86)\Glary Utilities\oneclickoptimizer.exe [2012-08-04 07:43]
.
2013-06-15 c:\windows\Tasks\GlaryUpdate.job
- c:\program files (x86)\Glary Utilities\webupdate.exe [2012-08-04 07:44]
.
2013-06-18 c:\windows\Tasks\Google Software Updater.job
- c:\program files (x86)\Google\Common\Google Updater\GoogleUpdaterService.exe [2011-10-15 12:32]
.
2013-06-17 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
- c:\program files (x86)\Google\Update\GoogleUpdate.exe [2011-11-19 22:20]
.
2013-06-18 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
- c:\program files (x86)\Google\Update\GoogleUpdate.exe [2011-11-19 22:20]
.
2013-06-18 c:\windows\Tasks\ParetoLogic Registration3.job
- c:\windows\system32\rundll32.exe [2009-07-13 01:14]
.
.
--------- X64 Entries -----------
.
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\1AMPCBOK]
@="{04cd1f3e-81d5-4904-a3ab-e0f99a7d769d}"
[HKEY_CLASSES_ROOT\CLSID\{04cd1f3e-81d5-4904-a3ab-e0f99a7d769d}]
2010-11-05 01:57 444752 ----a-w- c:\windows\System32\mscoree.dll
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"MSC"="c:\program files\Microsoft Security Client\msseces.exe" [2013-01-27 1281512]
"RtHDVCpl"="c:\program files\Realtek\Audio\HDA\RAVCpl64.exe" [2012-04-24 12480616]
"IntelliType Pro"="c:\program files\Microsoft Mouse and Keyboard Center\itype.exe" [2012-11-02 1464944]
"IntelliPoint"="c:\program files\Microsoft Mouse and Keyboard Center\ipoint.exe" [2012-11-02 2076272]
"Windows Mobile-based device management"="c:\windows\WindowsMobile\wmdcBase.exe" [2007-05-31 660360]
.
------- Doplňkový sken -------
.
uLocal Page = c:\windows\system32\blank.htm
uStart Page = hxxp://www.google.com
uDefault_Search_URL = hxxp://www.google.com
mDefault_Search_URL = hxxp://www.google.com
mStart Page = hxxp://www.google.com
mLocal Page = c:\windows\SysWOW64\blank.htm
mSearch Page = hxxp://www.google.com
mSearch Bar = hxxp://www.google.com
uInternet Settings,ProxyOverride = 127.0.0.1:9421;<local>;*.local
mSearchAssistant =
IE: Add to Google Photos Screensa&ver - c:\windows\system32\GPhotos.scr/200
IE: E&xportovat do aplikace Microsoft Excel - c:\progra~2\MICROS~1\Office12\EXCEL.EXE/3000
IE: Převést cíl vazby do Adobe PDF - c:\program files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll/AcroIECaptureSelLinks.html
IE: Převést do Adobe PDF - c:\program files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll/AcroIECapture.html
IE: Připojit cíl vazby k existujícímu PDF - c:\program files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll/AcroIEAppendSelLinks.html
IE: Připojit k existujícímu PDF - c:\program files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll/AcroIEAppend.html
TCP: DhcpNameServer = 10.0.0.138
TCP: Interfaces\{39E2CD10-B581-47E2-8C2A-11ED5FC85569}: DhcpNameServer = 10.0.0.138
TCP: Interfaces\{BAE75CD4-2944-4809-802D-7B198D32936C}: NameServer = 8.8.8.8,8.8.4.4
FF - ProfilePath - c:\users\klient\AppData\Roaming\Mozilla\Firefox\Profiles\fc5bva34.default-1352312131103\
FF - prefs.js: browser.search.selectedEngine - Seznam
FF - prefs.js: browser.startup.homepage - hxxp://www.seznam.cz/
FF - ExtSQL: 2013-05-03 08:43; ascsurfingprotection@iobit.com; c:\users\klient\AppData\Roaming\Mozilla\Firefox\Profiles\fc5bva34.default-1352312131103\extensions\ascsurfingprotection@iobit.com
FF - ExtSQL: 2013-05-22 20:01; donottrackplus@abine.com; c:\users\klient\AppData\Roaming\Mozilla\Firefox\Profiles\fc5bva34.default-1352312131103\extensions\donottrackplus@abine.com
FF - ExtSQL: 2013-06-10 09:59; hnkbtsofeiy@yuacx.org; c:\users\klient\AppData\Roaming\Mozilla\Firefox\Profiles\fc5bva34.default-1352312131103\extensions\hnkbtsofeiy@yuacx.org
FF - ExtSQL: 2013-06-10 09:59; mzgxwgiwno@iizcptihg.edu; c:\users\klient\AppData\Roaming\Mozilla\Firefox\Profiles\fc5bva34.default-1352312131103\extensions\mzgxwgiwno@iizcptihg.edu
FF - ExtSQL: 2013-06-10 11:15; {ab91efd4-6975-4081-8552-1b3922ed79e2}; c:\users\klient\AppData\Roaming\Mozilla\Firefox\Profiles\fc5bva34.default-1352312131103\extensions\{ab91efd4-6975-4081-8552-1b3922ed79e2}
.
- - - - NEPLATNÉ POLOŽKY ODSTRANĚNÉ Z REGISTRU - - - -
.
WebBrowser-{34AB3C4C-DA1A-4067-96F4-31452C7CFE65} - (no file)
WebBrowser-{5E5AB302-7F65-44CD-8211-C1D4CAACCEA3} - (no file)
WebBrowser-{687578B9-7132-4A7A-80E4-30EE31099E03} - (no file)
ShellIconOverlayIdentifiers-{4d87b7a7-23f1-470c-aa45-96b25b9bd138} - (no file)
ShellIconOverlayIdentifiers-{2012DE06-50C0-48BD-ACDE-88F95D4CAD1F} - (no file)
ShellIconOverlayIdentifiers-{C72C6188-BEF2-46E5-A89A-52F0ED75219E} - (no file)
ShellIconOverlayIdentifiers-{C92F6BC2-AF61-4C0E-80E0-939B8282DDB7} - (no file)
ShellIconOverlayIdentifiers-{0C4A258A-3F3B-4FFF-80A7-9B3BEC139472} - (no file)
ShellIconOverlayIdentifiers-{62CCD8E3-9C21-41E1-B55E-1E26DFC68511} - (no file)
ShellIconOverlayIdentifiers-{A759AFF6-5851-457D-A540-F4ECED148351} - (no file)
ShellIconOverlayIdentifiers-{1574C9EF-7D58-488F-B358-8B78C1538F51} - (no file)
AddRemove-CodInstl - c:\windows\system32\CDUninst.isu
AddRemove-HelixYUVCodecs - c:\windows\system32\uninstHelixYUV.exe
AddRemove-SP_4e24eecb - c:\program files (x86)\WebSearch\uninstall.exe
AddRemove-SP_5dec30d7 - c:\program files (x86)\ZoomEx\uninstall.exe
AddRemove-SP_e14dcdfa - c:\program files (x86)\ContinueToSave\uninstall.exe
AddRemove-{53820F89-063F-10D7-7457-06C201F4CBF0} - c:\programdata\Zoomex\uninstall.exe
.
.
.
--------------------- ZAMKNUTÉ KLÍČE V REGISTRU ---------------------
.
[HKEY_USERS\S-1-5-21-2276255412-1883947941-3749338985-1000\Software\SecuROM\!CAUTION! NEVER A OR CHANGE ANY KEY*]
"??"=hex:a3,20,f9,81,d0,b8,c5,0c,cd,d9,f5,b8,48,f3,0f,32,d1,1e,35,42,58,87,71,
a3,50,70,cb,36,1a,1a,c2,1d,cc,a6,62,85,89,92,34,06,af,51,14,73,69,e9,1e,75,\
"??"=hex:41,b7,c6,36,43,74,89,40,65,89,17,6b,a3,d2,6e,0c
.
[HKEY_USERS\S-1-5-21-2276255412-1883947941-3749338985-1000\Software\SecuROM\License information*]
"datasecu"=hex:e7,9a,d7,7e,ee,02,71,bf,83,76,b8,d0,db,7c,7f,92,07,11,0d,74,94,
56,21,67,24,ca,2c,d0,37,de,f2,69,1c,cf,3c,ec,35,c0,36,b0,3e,0e,66,d2,74,0a,\
"rkeysecu"=hex:2f,0f,d5,3e,02,2b,06,63,b1,0b,dd,b6,71,e2,54,98
.
[HKEY_USERS\S-1-5-21-2276255412-1883947941-3749338985-1000\Software\Trolltech\OrganizationDefaults\Qt Factory Cache 4.7\com.trolltech.Qt.QImageIOHandlerFactoryInterface:\d:\GAMES\B*a*t*t*l*e*f*i*e*l*d* *3*"!\Core\imageformats]
"qgif4.dll"=multi:"2011-10-10T16:42\00gif\00\00"
"qico4.dll"=multi:"2011-10-10T16:42\00ico\00\00"
"qjpeg4.dll"=multi:"2011-10-10T16:42\00jpeg\00jpg\00\00"
.
[HKEY_USERS\S-1-5-21-2276255412-1883947941-3749338985-1000\Software\Trolltech\OrganizationDefaults\Qt Factory Cache 4.7\com.trolltech.Qt.QTextCodecFactoryInterface:\d:\GAMES\B*a*t*t*l*e*f*i*e*l*d* *3*"!\Core\codecs]
"qcncodecs4.dll"=multi:"2011-10-10T16:42\00GB18030\00GBK\00GB2312\00CP936\00MS936\00windows-936\00MIB: 114\00MIB: 113\00MIB: 2025\00\00"
"qkrcodecs4.dll"=multi:"2011-10-10T16:42\00EUC-KR\00cp949\00MIB: 38\00MIB: -949\00\00"
"qtwcodecs4.dll"=multi:"2011-10-10T16:42\00Big5\00Big5-HKSCS\00Big5-ETen\00CP950\00MIB: 2026\00MIB: 2101\00\00"
.
[HKEY_USERS\S-1-5-21-2276255412-1883947941-3749338985-1000\Software\Trolltech\OrganizationDefaults\Qt Plugin Cache 4.7.false\d:\games\B*a*t*t*l*e*f*i*e*l*d* *3*"!\Core\codecs]
"qcncodecs4.dll"=multi:"40703\000\00Windows msvc release full-config QT_NO_DRAGANDDROP\002011-10-10T16:42\00\00"
"qjpcodecs4.dll"=multi:"40602\000\00Windows msvc release full-config\002011-10-10T16:42\00\00"
"qjpcodecsd4.dll"=multi:"40703\001\00Windows msvc debug full-config QT_NO_DRAGANDDROP\002011-10-10T16:42\00\00"
"qkrcodecs4.dll"=multi:"40703\000\00Windows msvc release full-config QT_NO_DRAGANDDROP\002011-10-10T16:42\00\00"
"qtwcodecs4.dll"=multi:"40703\000\00Windows msvc release full-config QT_NO_DRAGANDDROP\002011-10-10T16:42\00\00"
.
[HKEY_USERS\S-1-5-21-2276255412-1883947941-3749338985-1000\Software\Trolltech\OrganizationDefaults\Qt Plugin Cache 4.7.false\d:\games\B*a*t*t*l*e*f*i*e*l*d* *3*"!\Core\imageformats]
"Microsoft.VC80.CRT.manifest"=multi:"0\001\00unknown\002011-10-10T16:42\00\00"
"msvcr80.dll"=multi:"0\001\00unknown\002011-10-10T16:42\00\00"
"qgif4.dll"=multi:"40703\000\00Windows msvc release full-config QT_NO_DRAGANDDROP\002011-10-10T16:42\00\00"
"qico4.dll"=multi:"40703\000\00Windows msvc release full-config QT_NO_DRAGANDDROP\002011-10-10T16:42\00\00"
"qjpeg4.dll"=multi:"40703\000\00Windows msvc release full-config QT_NO_DRAGANDDROP\002011-10-10T16:42\00\00"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@="Shockwave Flash Object"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\InprocServer32]
@="c:\\Windows\\SysWow64\\Macromed\\Flash\\Flash9f.ocx"
"ThreadingModel"="Apartment"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\MiscStatus]
@="0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ProgID]
@="ShockwaveFlash.ShockwaveFlash.9"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
@="c:\\Windows\\SysWow64\\Macromed\\Flash\\Flash9f.ocx, 1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\TypeLib]
@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\Version]
@="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
@="ShockwaveFlash.ShockwaveFlash"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@="Macromedia Flash Factory Object"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\InprocServer32]
@="c:\\Windows\\SysWow64\\Macromed\\Flash\\Flash9f.ocx"
"ThreadingModel"="Apartment"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ProgID]
@="FlashFactory.FlashFactory.1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
@="c:\\Windows\\SysWow64\\Macromed\\Flash\\Flash9f.ocx, 1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\TypeLib]
@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\Version]
@="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
@="FlashFactory.FlashFactory"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D4304BCF-B8E9-4B35-BEA0-DC5B522670C2}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil9f.exe,-101"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D4304BCF-B8E9-4B35-BEA0-DC5B522670C2}\Elevation]
"Enabled"=dword:00000001
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D4304BCF-B8E9-4B35-BEA0-DC5B522670C2}\LocalServer32]
@="c:\\Windows\\SysWow64\\Macromed\\Flash\\FlashUtil9f.exe"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D4304BCF-B8E9-4B35-BEA0-DC5B522670C2}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{2E4BB6BE-A75F-4DC0-9500-68203655A2C4}]
@Denied: (A 2) (Everyone)
@="IFlashBroker"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{2E4BB6BE-A75F-4DC0-9500-68203655A2C4}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{2E4BB6BE-A75F-4DC0-9500-68203655A2C4}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows CE Services]
"SymbolicLinkValue"=hex(6):5c,00,72,00,65,00,67,00,69,00,73,00,74,00,72,00,79,
00,5c,00,4d,00,41,00,43,00,48,00,49,00,4e,00,45,00,5c,00,53,00,4f,00,46,00,\
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0000\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0001\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0002\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0003\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0004\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0005\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\PCW\Security]
@Denied: (Full) (Everyone)
.
Celkový čas: 2013-06-18 19:55:17
ComboFix-quarantined-files.txt 2013-06-18 17:55
ComboFix2.txt 2013-06-18 11:26
ComboFix3.txt 2013-06-18 05:40
ComboFix4.txt 2013-06-17 19:08
.
Před spuštěním: Volných bajtů: 50 261 893 120
Po spuštění: Volných bajtů: 50 166 648 832
.
- - End Of File - - AF35DA8A5435079C268A8A4B24382DBE
A36C5E4F47E84449FF07ED3517B43A31
Nahoru
Uživatelský avatar
jaro3
člen Security týmu
Guru Level 15
Guru Level 15
Příspěvky: 43294
Registrován: červen 07
Bydliště: Jižní Čechy
Pohlaví: Muž
Stav:
Offline

Re: Prosím o kontrolu logu, procesor jede stále na 100%

Příspěvekod jaro3 » 18 čer 2013 21:18

ComboFix se odinstaluje takto:
Start-Spustit a zadej ComboFix /Uninstall

Vyčisti systém CCleanerem

Stáhni si OTC

na plochu. Poklepej na něj. Potom klikni na Clean up!.
Restartuj PC , pokud Ti bude doporučeno.

Stáhni si aswMBR
na svojí plochu. Uzavři všechna okna , programy a prohlížeče. Poklepej na aswMBR.exe. Pokud se objeví hláška o možnosti stáhnutí databáze Avastu , klikni na NE. Poté klikni na „Scan“ . Po skenu klikni na „Save Log“ a ulož si log na plochu .Zkopíruj sem celý obsah toho logu. Pak klikni na „Exit“ k zavření programu.

Stáhni si OTL by OldTimer
na plochu. Ujisti se , že máš zavřena všechna ostatní okna a poklepej na ikonu OTL.Nahoře v okně pod Výstup klikni na minimální výstup.Pod Běžné registry změň na Vše. Zatrhni Kontrola na havěť “LOP“ a Kontrola na havěť “ Purity“ . Klikni na Prohledat. Všechny ostatní nastavení ponech jak jsou. Sken může trvat dlouho, až skončí otevřou se dva logy:
OTL.Txt
Extras.Txt
Jsou uloženy ve stejném místě jako OTL. Oba logy sem prosím zkopíruj.
Při práci s programy HJT, ComboFix,MbAM, SDFix aj. zavřete všechny ostatní aplikace a prohlížeče!
Neposílejte logy do soukromých zpráv.Po dobu mé nepřítomnosti mě zastupuje memphisto , Žbeky a Orcus.
Pokud budete spokojeni , můžete podpořit naše forum:Podpora fóra
Nahoru
HavlisOlda
nováček
Příspěvky: 46
Registrován: červen 13
Bydliště: Tisá
Pohlaví: Muž
Stav:
Offline

Re: Prosím o kontrolu logu, procesor jede stále na 100%

Příspěvekod HavlisOlda » 18 čer 2013 22:19

aswMBR version 0.9.9.1771 Copyright(c) 2011 AVAST Software
Run date: 2013-06-18 21:46:09
-----------------------------
21:46:09.267 OS Version: Windows x64 6.1.7601 Service Pack 1
21:46:09.267 Number of processors: 2 586 0x1706
21:46:09.267 ComputerName: KLIENT-PC UserName: klient
21:46:09.657 Initialize success
21:46:21.935 Disk 0 (boot) \Device\Harddisk0\DR0 -> \Device\Ide\IdeDeviceP2T0L0-2
21:46:21.951 Disk 0 Vendor: SAMSUNG_HD103SJ 1AJ10001 Size: 953868MB BusType: 3
21:46:21.951 Disk 1 \Device\Harddisk1\DR1 -> \Device\Ide\IdeDeviceP2T1L0-5
21:46:21.951 Disk 1 Vendor: SAMSUNG_HD502IJ 1AA01112 Size: 476940MB BusType: 3
21:46:21.951 Disk 0 MBR read successfully
21:46:21.967 Disk 0 MBR scan
21:46:21.967 Disk 0 Windows 7 default MBR code
21:46:21.967 Disk 0 Partition 1 00 07 HPFS/NTFS NTFS 333000 MB offset 2048
21:46:21.982 Disk 0 Partition 2 80 (A) 07 HPFS/NTFS NTFS 333000 MB offset 681986048
21:46:22.013 Disk 0 Partition 3 00 07 HPFS/NTFS NTFS 287867 MB offset 1363970048
21:46:22.045 Disk 0 scanning C:\Windows\system32\drivers
21:46:29.595 Service scanning
21:46:40.312 Service sptd C:\Windows\System32\Drivers\sptd.sys **LOCKED** 32
21:46:44.431 Modules scanning
21:46:44.431 Disk 0 trace - called modules:
21:46:44.431
21:46:44.431 Scan finished successfully
21:47:06.973 Disk 0 MBR has been saved successfully to "C:\Users\klient\Desktop\MBR.dat"
21:47:06.973 The log file has been saved successfully to "C:\Users\klient\Desktop\aswMBR.txt"
Nahoru
Zamčeno

Zpět na “HiJackThis”

Kdo je online

Uživatelé prohlížející si toto fórum: Žádní registrovaní uživatelé a 117 hostů