Prosím o kontrolu logu/zřejmě spyware

Místo pro vaše HiJackThis logy a logy z dalších programů…

Moderátoři: Mods_senior, Security team

Uživatelský avatar
jaro3
člen Security týmu
Guru Level 15
Guru Level 15
Příspěvky: 43339
Registrován: červen 07
Bydliště: Jižní Čechy
Pohlaví: Muž
Stav:
Offline

Re: Prosím o kontrolu logu/zřejmě spyware

Příspěvekod jaro3 » 12 lis 2013 17:29

Otevři si Poznámkový blok (Start -> Spustit... a napiš do okna Notepad a dej Ok.
Zkopíruj do něj následující celý text označený zeleně:

Kód: Vybrat vše

ClearJavaCache::

KillAll::
File::
c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-3323472497-44360149-3043929110-1000Core1cecb62faec538a.job
c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-3323472497-44360149-3043929110-1000UA.job

Folder::
c:\program files (x86)\Skype\Updater
c:\program files (x86)\Google\Update
c:\users\LincolNn\AppData\Local\Google\Update

Driver::
SkypeUpdate

RegLock::
[HKEY_USERS\S-1-5-21-3323472497-44360149-3043929110-1000\Software\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved\{19F29C70-8D2B-0D79-FB97-F047600AC2E8}*]
"hafmljnfmdennmpb"=hex:63,62,69,6a,6d,68,63,6a,70,6b,69,6d,65,70,65,63,65,63,
 6b,70,6f,63,68,67,6f,64,6e,6c,61,64,6c,65,6e,6b,6a,6a,67,70,00,00
"iahmfmagceknpmcekk"=hex:63,62,69,6a,6d,68,63,6a,70,6b,69,6d,65,70,65,63,62,62,
 65,61,67,6c,62,6e,6d,6a,63,6f,67,63,70,6d,69,6e,68,6e,61,70,00,00
.
[HKEY_USERS\S-1-5-21-3323472497-44360149-3043929110-1000\Software\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved\{F7F0C993-C06A-43D3-136F-D50ACACAE426}*]
"iallpaannipbapoabl"=hex:69,61,6e,69,6d,70,6b,61,70,67,6d,65,66,63,6e,66,69,6b,
 00,77
"hafmfnmcoangbnfm"=hex:69,61,6e,69,6d,70,6b,61,70,67,6d,65,66,63,6e,66,69,6b,
 00,77
"iahcadibgmlhfehdng"=hex:63,61,6d,69,65,63,00,00
[HKEY_USERS\S-1-5-21-3323472497-44360149-3043929110-1000\Software\SecuROM\License information*]
"datasecu"=hex:2c,38,54,ae,07,1c,4e,07,99,05,ce,92,41,b5,b1,20,3f,0a,db,99,34,
 7a,a0,07,e3,ec,d9,5b,80,cd,9f,a6,49,3c,ba,c8,81,4c,ec,8a,c8,32,3e,48,3e,de,\
"rkeysecu"=hex:c9,01,e2,11,bd,00,94,2d,14,35,83,fb,1b,0d,74,f9
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil64_11_9_900_117_ActiveX.exe,-101"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\Elevation]
"Enabled"=dword:00000001
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\LocalServer32]
@="c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil64_11_9_900_117_ActiveX.exe"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
.
[HKEY_LOCAL_MACHINE\software\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="IFlashBroker5"
.
[HKEY_LOCAL_MACHINE\software\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"
.
[HKEY_LOCAL_MACHINE\software\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil32_11_9_900_117_ActiveX.exe,-101"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\Elevation]
"Enabled"=dword:00000001
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\LocalServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil32_11_9_900_117_ActiveX.exe"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@="Shockwave Flash Object"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\InprocServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_9_900_117.ocx"
"ThreadingModel"="Apartment"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\MiscStatus]
@="0"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ProgID]
@="ShockwaveFlash.ShockwaveFlash.11"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_9_900_117.ocx, 1"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\TypeLib]
@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\Version]
@="1.0"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
@="ShockwaveFlash.ShockwaveFlash"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@="Macromedia Flash Factory Object"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\InprocServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_9_900_117.ocx"
"ThreadingModel"="Apartment"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ProgID]
@="FlashFactory.FlashFactory.1"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_9_900_117.ocx, 1"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\TypeLib]
@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\Version]
@="1.0"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
@="FlashFactory.FlashFactory"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="IFlashBroker5"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
[HKEY_LOCAL_MACHINE\system\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0001\AllUserSettings]
[HKEY_LOCAL_MACHINE\system\ControlSet001\Control\PCW\Security]
@Denied: (Full) (Everyone)


Zvol možnost Soubor -> Uložit jako... a nastav tyto parametry:
Název souboru: zde napiš: CFScript.txt
Uložit jako typ: tak tam vyber Všechny soubory
Ulož soubor na plochu.
Ukonči všechna aktivní okna.

Uchop myší vytvořený skript CFScript.txt, přemísti ho nad stažený program ComboFix.exe a když se oba soubory překryjí, skript upusť.
- Automaticky se spustí ComboFix
- Vlož sem log, který vyběhne v závěru čistícího procesu + nový log z HJT

Upozornění : Může se stát, že po aplikaci Combofixu a restartu počítače, Windows nenaběhnou , nebo nenajede plocha , budou problémy s připojením, pak znovu restartuj počítač, pokud to nepomůže , po restartu mačkej klávesu F8 a pak zvol poslední známou funkční konfiguraci. , či použij bod obnovy.

Stáhni si aswMBR
na svojí plochu. Uzavři všechna okna , programy a prohlížeče. Poklepej na aswMBR.exe. Pokud se objeví hláška o možnosti stáhnutí databáze Avastu , klikni na NE. Poté klikni na „Scan“ . Po skenu klikni na „Save Log“ a ulož si log na plochu .Zkopíruj sem celý obsah toho logu. Pak klikni na „Exit“ k zavření programu.

Nemáš málo místa na disku?
Při práci s programy HJT, ComboFix,MbAM, SDFix aj. zavřete všechny ostatní aplikace a prohlížeče!
Neposílejte logy do soukromých zpráv.Po dobu mé nepřítomnosti mě zastupuje memphisto , Žbeky a Orcus.
Pokud budete spokojeni , můžete podpořit naše forum:Podpora fóra

Reklama
Uživatelský avatar
LincolNn
Level 3
Level 3
Příspěvky: 471
Registrován: říjen 11
Pohlaví: Muž
Stav:
Offline

Re: Prosím o kontrolu logu/zřejmě spyware

Příspěvekod LincolNn » 12 lis 2013 18:26

ComboFix 13-11-11.01 - LincolNn 12.11.2013 17:43:01.2.4 - x64
Microsoft Windows 7 Home Premium 6.1.7600.0.1250.420.1029.18.4093.2898 [GMT 1:00]
Spuštěný z: c:\users\LincolNn\Desktop\ComboFix.exe
Použité ovládací přepínače :: c:\users\LincolNn\Desktop\CFScript.txt
AV: avast! Antivirus *Disabled/Updated* {2B2D1395-420B-D5C9-657E-930FE358FC3C}
SP: avast! Antivirus *Disabled/Updated* {904CF271-6431-DA47-5FCE-A87D98DFB681}
SP: Windows Defender *Enabled/Outdated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.
FILE ::
"c:\windows\Tasks\GoogleUpdateTaskMachineCore.job"
"c:\windows\Tasks\GoogleUpdateTaskMachineUA.job"
"c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-3323472497-44360149-3043929110-1000Core1cecb62faec538a.job"
"c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-3323472497-44360149-3043929110-1000UA.job"
.
.
((((((((((((((((((((((((((((((((((((((( Ostatní výmazy )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
c:\program files (x86)\Google\Update
c:\program files (x86)\Google\Update\1.3.21.165\GoogleCrashHandler.exe
c:\program files (x86)\Google\Update\1.3.21.165\GoogleCrashHandler64.exe
c:\program files (x86)\Google\Update\1.3.21.165\GoogleUpdate.exe
c:\program files (x86)\Google\Update\1.3.21.165\GoogleUpdateBroker.exe
c:\program files (x86)\Google\Update\1.3.21.165\GoogleUpdateHelper.msi
c:\program files (x86)\Google\Update\1.3.21.165\GoogleUpdateOnDemand.exe
c:\program files (x86)\Google\Update\1.3.21.165\GoogleUpdateSetup.exe
c:\program files (x86)\Google\Update\1.3.21.165\goopdate.dll
c:\program files (x86)\Google\Update\1.3.21.165\goopdateres_am.dll
c:\program files (x86)\Google\Update\1.3.21.165\goopdateres_ar.dll
c:\program files (x86)\Google\Update\1.3.21.165\goopdateres_bg.dll
c:\program files (x86)\Google\Update\1.3.21.165\goopdateres_bn.dll
c:\program files (x86)\Google\Update\1.3.21.165\goopdateres_ca.dll
c:\program files (x86)\Google\Update\1.3.21.165\goopdateres_cs.dll
c:\program files (x86)\Google\Update\1.3.21.165\goopdateres_da.dll
c:\program files (x86)\Google\Update\1.3.21.165\goopdateres_de.dll
c:\program files (x86)\Google\Update\1.3.21.165\goopdateres_el.dll
c:\program files (x86)\Google\Update\1.3.21.165\goopdateres_en-GB.dll
c:\program files (x86)\Google\Update\1.3.21.165\goopdateres_en.dll
c:\program files (x86)\Google\Update\1.3.21.165\goopdateres_es-419.dll
c:\program files (x86)\Google\Update\1.3.21.165\goopdateres_es.dll
c:\program files (x86)\Google\Update\1.3.21.165\goopdateres_et.dll
c:\program files (x86)\Google\Update\1.3.21.165\goopdateres_fa.dll
c:\program files (x86)\Google\Update\1.3.21.165\goopdateres_fi.dll
c:\program files (x86)\Google\Update\1.3.21.165\goopdateres_fil.dll
c:\program files (x86)\Google\Update\1.3.21.165\goopdateres_fr.dll
c:\program files (x86)\Google\Update\1.3.21.165\goopdateres_gu.dll
c:\program files (x86)\Google\Update\1.3.21.165\goopdateres_hi.dll
c:\program files (x86)\Google\Update\1.3.21.165\goopdateres_hr.dll
c:\program files (x86)\Google\Update\1.3.21.165\goopdateres_hu.dll
c:\program files (x86)\Google\Update\1.3.21.165\goopdateres_id.dll
c:\program files (x86)\Google\Update\1.3.21.165\goopdateres_is.dll
c:\program files (x86)\Google\Update\1.3.21.165\goopdateres_it.dll
c:\program files (x86)\Google\Update\1.3.21.165\goopdateres_iw.dll
c:\program files (x86)\Google\Update\1.3.21.165\goopdateres_ja.dll
c:\program files (x86)\Google\Update\1.3.21.165\goopdateres_kn.dll
c:\program files (x86)\Google\Update\1.3.21.165\goopdateres_ko.dll
c:\program files (x86)\Google\Update\1.3.21.165\goopdateres_lt.dll
c:\program files (x86)\Google\Update\1.3.21.165\goopdateres_lv.dll
c:\program files (x86)\Google\Update\1.3.21.165\goopdateres_ml.dll
c:\program files (x86)\Google\Update\1.3.21.165\goopdateres_mr.dll
c:\program files (x86)\Google\Update\1.3.21.165\goopdateres_ms.dll
c:\program files (x86)\Google\Update\1.3.21.165\goopdateres_nl.dll
c:\program files (x86)\Google\Update\1.3.21.165\goopdateres_no.dll
c:\program files (x86)\Google\Update\1.3.21.165\goopdateres_pl.dll
c:\program files (x86)\Google\Update\1.3.21.165\goopdateres_pt-BR.dll
c:\program files (x86)\Google\Update\1.3.21.165\goopdateres_pt-PT.dll
c:\program files (x86)\Google\Update\1.3.21.165\goopdateres_ro.dll
c:\program files (x86)\Google\Update\1.3.21.165\goopdateres_ru.dll
c:\program files (x86)\Google\Update\1.3.21.165\goopdateres_sk.dll
c:\program files (x86)\Google\Update\1.3.21.165\goopdateres_sl.dll
c:\program files (x86)\Google\Update\1.3.21.165\goopdateres_sr.dll
c:\program files (x86)\Google\Update\1.3.21.165\goopdateres_sv.dll
c:\program files (x86)\Google\Update\1.3.21.165\goopdateres_sw.dll
c:\program files (x86)\Google\Update\1.3.21.165\goopdateres_ta.dll
c:\program files (x86)\Google\Update\1.3.21.165\goopdateres_te.dll
c:\program files (x86)\Google\Update\1.3.21.165\goopdateres_th.dll
c:\program files (x86)\Google\Update\1.3.21.165\goopdateres_tr.dll
c:\program files (x86)\Google\Update\1.3.21.165\goopdateres_uk.dll
c:\program files (x86)\Google\Update\1.3.21.165\goopdateres_ur.dll
c:\program files (x86)\Google\Update\1.3.21.165\goopdateres_vi.dll
c:\program files (x86)\Google\Update\1.3.21.165\goopdateres_zh-CN.dll
c:\program files (x86)\Google\Update\1.3.21.165\goopdateres_zh-TW.dll
c:\program files (x86)\Google\Update\1.3.21.165\npGoogleUpdate3.dll
c:\program files (x86)\Google\Update\1.3.21.165\psmachine.dll
c:\program files (x86)\Google\Update\1.3.21.165\psuser.dll
c:\program files (x86)\Google\Update\Download\{3C122445-AECE-4309-90B7-85A6AEF42AC0}\0.0.0.0\gsync.msi
c:\program files (x86)\Google\Update\Download\{430FD4D0-B729-4F61-AA34-91526481799D}\1.3.21.165\GoogleUpdateSetup.exe
c:\program files (x86)\Google\Update\Download\{4DC8B4CA-1BDA-483E-B5FA-D3C12E15B62D}\30.0.1599.101\30.0.1599.101_30.0.1599.69_chrome_updater.exe
c:\program files (x86)\Google\Update\Download\{74AF07D8-FB8F-4D51-8AC7-927721D56EBB}\0.0.0.0\GoogleEarth-Win-Bundle-7.1.1.1871.exe
c:\program files (x86)\Google\Update\Download\{74AF07D8-FB8F-4D51-8AC7-927721D56EBB}\7.1.1.1888\GoogleEarth-Win-Bundle-7.1.1.1888.exe
c:\program files (x86)\Google\Update\GoogleUpdate.exe
c:\program files (x86)\Skype\Updater
c:\program files (x86)\Skype\Updater\Updater.dll
c:\program files (x86)\Skype\Updater\Updater.exe
c:\users\LincolNn\AppData\Local\Google\Update
c:\users\LincolNn\AppData\Local\Google\Update\1.3.21.165\GoogleCrashHandler.exe
c:\users\LincolNn\AppData\Local\Google\Update\1.3.21.165\GoogleCrashHandler64.exe
c:\users\LincolNn\AppData\Local\Google\Update\1.3.21.165\GoogleUpdate.exe
c:\users\LincolNn\AppData\Local\Google\Update\1.3.21.165\GoogleUpdateBroker.exe
c:\users\LincolNn\AppData\Local\Google\Update\1.3.21.165\GoogleUpdateHelper.msi
c:\users\LincolNn\AppData\Local\Google\Update\1.3.21.165\GoogleUpdateOnDemand.exe
c:\users\LincolNn\AppData\Local\Google\Update\1.3.21.165\GoogleUpdateSetup.exe
c:\users\LincolNn\AppData\Local\Google\Update\1.3.21.165\goopdate.dll
c:\users\LincolNn\AppData\Local\Google\Update\1.3.21.165\goopdateres_am.dll
c:\users\LincolNn\AppData\Local\Google\Update\1.3.21.165\goopdateres_ar.dll
c:\users\LincolNn\AppData\Local\Google\Update\1.3.21.165\goopdateres_bg.dll
c:\users\LincolNn\AppData\Local\Google\Update\1.3.21.165\goopdateres_bn.dll
c:\users\LincolNn\AppData\Local\Google\Update\1.3.21.165\goopdateres_ca.dll
c:\users\LincolNn\AppData\Local\Google\Update\1.3.21.165\goopdateres_cs.dll
c:\users\LincolNn\AppData\Local\Google\Update\1.3.21.165\goopdateres_da.dll
c:\users\LincolNn\AppData\Local\Google\Update\1.3.21.165\goopdateres_de.dll
c:\users\LincolNn\AppData\Local\Google\Update\1.3.21.165\goopdateres_el.dll
c:\users\LincolNn\AppData\Local\Google\Update\1.3.21.165\goopdateres_en-GB.dll
c:\users\LincolNn\AppData\Local\Google\Update\1.3.21.165\goopdateres_en.dll
c:\users\LincolNn\AppData\Local\Google\Update\1.3.21.165\goopdateres_es-419.dll
c:\users\LincolNn\AppData\Local\Google\Update\1.3.21.165\goopdateres_es.dll
c:\users\LincolNn\AppData\Local\Google\Update\1.3.21.165\goopdateres_et.dll
c:\users\LincolNn\AppData\Local\Google\Update\1.3.21.165\goopdateres_fa.dll
c:\users\LincolNn\AppData\Local\Google\Update\1.3.21.165\goopdateres_fi.dll
c:\users\LincolNn\AppData\Local\Google\Update\1.3.21.165\goopdateres_fil.dll
c:\users\LincolNn\AppData\Local\Google\Update\1.3.21.165\goopdateres_fr.dll
c:\users\LincolNn\AppData\Local\Google\Update\1.3.21.165\goopdateres_gu.dll
c:\users\LincolNn\AppData\Local\Google\Update\1.3.21.165\goopdateres_hi.dll
c:\users\LincolNn\AppData\Local\Google\Update\1.3.21.165\goopdateres_hr.dll
c:\users\LincolNn\AppData\Local\Google\Update\1.3.21.165\goopdateres_hu.dll
c:\users\LincolNn\AppData\Local\Google\Update\1.3.21.165\goopdateres_id.dll
c:\users\LincolNn\AppData\Local\Google\Update\1.3.21.165\goopdateres_is.dll
c:\users\LincolNn\AppData\Local\Google\Update\1.3.21.165\goopdateres_it.dll
c:\users\LincolNn\AppData\Local\Google\Update\1.3.21.165\goopdateres_iw.dll
c:\users\LincolNn\AppData\Local\Google\Update\1.3.21.165\goopdateres_ja.dll
c:\users\LincolNn\AppData\Local\Google\Update\1.3.21.165\goopdateres_kn.dll
c:\users\LincolNn\AppData\Local\Google\Update\1.3.21.165\goopdateres_ko.dll
c:\users\LincolNn\AppData\Local\Google\Update\1.3.21.165\goopdateres_lt.dll
c:\users\LincolNn\AppData\Local\Google\Update\1.3.21.165\goopdateres_lv.dll
c:\users\LincolNn\AppData\Local\Google\Update\1.3.21.165\goopdateres_ml.dll
c:\users\LincolNn\AppData\Local\Google\Update\1.3.21.165\goopdateres_mr.dll
c:\users\LincolNn\AppData\Local\Google\Update\1.3.21.165\goopdateres_ms.dll
c:\users\LincolNn\AppData\Local\Google\Update\1.3.21.165\goopdateres_nl.dll
c:\users\LincolNn\AppData\Local\Google\Update\1.3.21.165\goopdateres_no.dll
c:\users\LincolNn\AppData\Local\Google\Update\1.3.21.165\goopdateres_pl.dll
c:\users\LincolNn\AppData\Local\Google\Update\1.3.21.165\goopdateres_pt-BR.dll
c:\users\LincolNn\AppData\Local\Google\Update\1.3.21.165\goopdateres_pt-PT.dll
c:\users\LincolNn\AppData\Local\Google\Update\1.3.21.165\goopdateres_ro.dll
c:\users\LincolNn\AppData\Local\Google\Update\1.3.21.165\goopdateres_ru.dll
c:\users\LincolNn\AppData\Local\Google\Update\1.3.21.165\goopdateres_sk.dll
c:\users\LincolNn\AppData\Local\Google\Update\1.3.21.165\goopdateres_sl.dll
c:\users\LincolNn\AppData\Local\Google\Update\1.3.21.165\goopdateres_sr.dll
c:\users\LincolNn\AppData\Local\Google\Update\1.3.21.165\goopdateres_sv.dll
c:\users\LincolNn\AppData\Local\Google\Update\1.3.21.165\goopdateres_sw.dll
c:\users\LincolNn\AppData\Local\Google\Update\1.3.21.165\goopdateres_ta.dll
c:\users\LincolNn\AppData\Local\Google\Update\1.3.21.165\goopdateres_te.dll
c:\users\LincolNn\AppData\Local\Google\Update\1.3.21.165\goopdateres_th.dll
c:\users\LincolNn\AppData\Local\Google\Update\1.3.21.165\goopdateres_tr.dll
c:\users\LincolNn\AppData\Local\Google\Update\1.3.21.165\goopdateres_uk.dll
c:\users\LincolNn\AppData\Local\Google\Update\1.3.21.165\goopdateres_ur.dll
c:\users\LincolNn\AppData\Local\Google\Update\1.3.21.165\goopdateres_vi.dll
c:\users\LincolNn\AppData\Local\Google\Update\1.3.21.165\goopdateres_zh-CN.dll
c:\users\LincolNn\AppData\Local\Google\Update\1.3.21.165\goopdateres_zh-TW.dll
c:\users\LincolNn\AppData\Local\Google\Update\1.3.21.165\npGoogleUpdate3.dll
c:\users\LincolNn\AppData\Local\Google\Update\1.3.21.165\psmachine.dll
c:\users\LincolNn\AppData\Local\Google\Update\1.3.21.165\psuser.dll
c:\users\LincolNn\AppData\Local\Google\Update\Download\{430FD4D0-B729-4F61-AA34-91526481799D}\1.3.21.165\GoogleUpdateSetup.exe
c:\users\LincolNn\AppData\Local\Google\Update\Download\{D0AB2EBC-931B-4013-9FEB-C9C4C2225C8C}\4.9.1.16010\googletalkpluginaccel.msi
c:\users\LincolNn\AppData\Local\Google\Update\GoogleUpdate.exe
c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-3323472497-44360149-3043929110-1000Core1cecb62faec538a.job
c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-3323472497-44360149-3043929110-1000UA.job
.
.
((((((((((((((((((((((((((((((((((((((( Ovladače/Služby )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
-------\Service_SkypeUpdate
-------\Service_gupdate
-------\Service_gupdatem
-------\Service_gupdate
-------\Service_gupdatem
.
.
((((((((((((((((((((((((( Soubory vytvořené od 2013-10-12 do 2013-11-12 )))))))))))))))))))))))))))))))
.
.
2013-11-12 16:54 . 2013-11-12 16:54 -------- d-----w- c:\users\LogMeInRemoteUser\AppData\Local\temp
2013-11-12 16:54 . 2013-11-12 16:54 -------- d-----w- c:\users\Default\AppData\Local\temp
2013-11-10 16:36 . 2013-11-10 16:36 -------- d-----w- c:\windows\ERUNT
2013-11-10 16:31 . 2013-11-11 15:23 -------- d-----w- C:\AdwCleaner
2013-11-10 16:21 . 2013-11-10 16:21 -------- d-----w- c:\users\LincolNn\AppData\Roaming\Malwarebytes
2013-11-10 16:21 . 2013-11-10 16:21 -------- d-----w- c:\programdata\Malwarebytes
2013-11-10 16:21 . 2013-04-04 13:50 25928 ----a-w- c:\windows\system32\drivers\mbam.sys
2013-11-10 16:21 . 2013-11-10 16:21 -------- d-----w- c:\program files (x86)\Malwarebytes' Anti-Malware
2013-11-10 15:51 . 2013-11-10 15:51 -------- d-----w- c:\users\LincolNn\AppData\Roaming\JAM Software
2013-11-10 15:51 . 2013-11-10 15:51 -------- d-----w- c:\program files (x86)\JAM Software
2013-11-08 22:59 . 2013-11-08 22:59 -------- d-----w- c:\program files (x86)\TeamViewer
2013-11-08 22:43 . 2013-11-09 00:50 -------- d-----w- c:\program files (x86)\Texas Holdem Poker 3D Deluxe Edition DeLEGiON
2013-11-05 22:37 . 2013-11-05 22:37 -------- d-----w- c:\program files\OBS
2013-11-05 22:37 . 2013-11-05 22:37 -------- d-----w- c:\program files (x86)\OBS
2013-11-05 19:59 . 2013-10-17 09:59 -------- d-----w- c:\users\LincolNn\p2p-sbdf9.alpha1
2013-11-05 13:00 . 2013-11-05 13:00 -------- d-----w- c:\program files (x86)\LogMeIn Hamachi
2013-11-04 22:20 . 2013-11-09 10:17 -------- d-----w- c:\program files\Speccy
2013-11-04 18:25 . 2013-11-04 18:25 -------- d-----w- c:\users\LincolNn\AppData\Roaming\Win Family
2013-11-02 17:44 . 2013-11-02 17:44 -------- d-----w- C:\ICQ
2013-11-02 17:44 . 2013-11-02 17:45 -------- d-----w- c:\users\LincolNn\AppData\Roaming\QIP
2013-11-02 17:43 . 2013-11-02 17:44 -------- d-----w- c:\program files (x86)\QIP 2012
2013-10-31 12:01 . 2013-10-15 11:41 251664 ----a-w- c:\windows\system32\drivers\VBoxDrv.sys
2013-10-31 12:00 . 2013-10-15 11:38 126736 ----a-w- c:\windows\system32\drivers\VBoxUSBMon.sys
2013-10-31 12:00 . 2013-10-31 12:00 -------- d-----w- c:\program files\Oracle
2013-10-30 18:36 . 2013-10-30 18:36 -------- d-----w- c:\program files (x86)\NirSoft
2013-10-29 10:17 . 2013-10-29 10:17 -------- d-----w- c:\windows\3F5C371F8EA24F259D3DD0B4526E3AEA.TMP
2013-10-28 21:01 . 2013-10-28 21:20 -------- d-----w- c:\users\LincolNn\AppData\Local\Rockstar Games
2013-10-28 20:59 . 2013-10-28 20:59 178800 ----a-w- c:\windows\SysWow64\CmdLineExt_x64.dll
2013-10-28 13:31 . 2013-10-28 13:31 -------- d-----w- c:\users\LincolNn\AppData\Roaming\dvdcss
2013-10-28 13:05 . 2013-10-28 13:06 -------- d-----w- c:\users\LincolNn\GTA Server
2013-10-27 10:37 . 2013-10-28 13:06 -------- d-----w- c:\users\LincolNn\Záloha z Flashky
2013-10-26 14:11 . 2013-10-28 21:20 -------- d-----w- c:\program files (x86)\Rockstar Games
2013-10-26 14:11 . 2004-10-22 00:17 69715 ----a-w- c:\program files (x86)\Common Files\InstallShield\Professional\RunTime\10\50\Intel32\ctor.dll
2013-10-26 14:11 . 2004-10-22 00:17 274432 ----a-w- c:\program files (x86)\Common Files\InstallShield\Professional\RunTime\10\50\Intel32\iscript.dll
2013-10-26 14:11 . 2004-10-22 00:16 180224 ----a-w- c:\program files (x86)\Common Files\InstallShield\Professional\RunTime\10\50\Intel32\iuser.dll
2013-10-26 14:11 . 2004-10-22 00:16 5632 ----a-w- c:\program files (x86)\Common Files\InstallShield\Professional\RunTime\10\50\Intel32\DotNetInstaller.exe
2013-10-26 14:11 . 2004-10-22 00:18 749568 ----a-w- c:\program files (x86)\Common Files\InstallShield\Professional\RunTime\10\50\Intel32\iKernel.dll
2013-10-26 14:11 . 2013-10-26 14:11 192644 ----a-w- c:\program files (x86)\Common Files\InstallShield\Professional\RunTime\10\50\Intel32\iGdi.dll
2013-10-26 14:11 . 2013-10-26 14:11 323716 ----a-w- c:\program files (x86)\Common Files\InstallShield\Professional\RunTime\10\50\Intel32\setup.dll
2013-10-26 12:05 . 2013-10-26 12:05 -------- d-----w- c:\programdata\Oracle
2013-10-26 12:05 . 2013-10-26 12:05 -------- d-----w- c:\program files (x86)\Common Files\Java
2013-10-26 12:05 . 2013-10-08 05:50 96168 ----a-w- c:\windows\SysWow64\WindowsAccessBridge-32.dll
2013-10-26 10:14 . 2013-11-09 17:40 -------- d-----w- c:\program files (x86)\Killing Floor
2013-10-23 18:48 . 2013-10-23 18:48 -------- d-----w- c:\program files (x86)\Origin Games
2013-10-21 17:45 . 2013-10-21 17:45 -------- d-----w- c:\users\LincolNn\AppData\Roaming\Serif
2013-10-21 17:45 . 2013-10-21 17:45 -------- d-----w- c:\program files (x86)\Serif
2013-10-21 17:44 . 2002-12-05 12:10 155648 ----a-w- c:\program files (x86)\Common Files\InstallShield\Professional\RunTime\0701\Intel32\iuser.dll
2013-10-21 17:44 . 2002-12-02 11:33 237568 ----a-w- c:\program files (x86)\Common Files\InstallShield\Professional\RunTime\0701\Intel32\iscript.dll
2013-10-21 17:44 . 2002-12-05 12:12 692224 ----a-w- c:\program files (x86)\Common Files\InstallShield\Professional\RunTime\0701\Intel32\iKernel.dll
2013-10-21 17:44 . 2002-12-02 13:22 5632 ----a-w- c:\program files (x86)\Common Files\InstallShield\Professional\RunTime\0701\Intel32\DotNetInstaller.exe
2013-10-21 17:44 . 2002-12-02 11:33 57344 ----a-w- c:\program files (x86)\Common Files\InstallShield\Professional\RunTime\0701\Intel32\ctor.dll
2013-10-21 17:43 . 2013-10-21 17:43 282756 ----a-w- c:\program files (x86)\Common Files\InstallShield\Professional\RunTime\0701\Intel32\setup.dll
2013-10-21 17:43 . 2013-10-21 17:43 163972 ----a-w- c:\program files (x86)\Common Files\InstallShield\Professional\RunTime\0701\Intel32\iGdi.dll
2013-10-19 16:58 . 2013-10-26 09:59 -------- d-----w- c:\users\LincolNn\CopyrightFree
2013-10-15 11:38 . 2013-10-15 11:38 154896 ----a-w- c:\windows\system32\drivers\VBoxNetFlt.sys
2013-10-15 11:38 . 2013-10-15 11:38 140560 ----a-w- c:\windows\system32\drivers\VBoxNetAdp.sys
2013-10-15 11:35 . 2013-10-15 11:35 204048 ----a-w- c:\windows\system32\VBoxNetFltNobj.dll
2013-10-13 17:27 . 2013-10-13 17:43 -------- d-----w- c:\users\LincolNn\OVB
.
.
.
(((((((((((((((((((((((((((((((((((((((( Find3M výpis ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2013-11-09 23:00 . 2013-04-15 14:00 56693 ----a-w- c:\users\LincolNn\Network_Meter_Data.js
2013-11-05 23:28 . 2013-03-17 19:20 71048 ----a-w- c:\windows\SysWow64\FlashPlayerCPLApp.cpl
2013-11-01 16:56 . 2013-04-14 10:56 466520 ----a-w- c:\windows\system32\wrap_oal.dll
2013-11-01 16:56 . 2013-04-14 10:56 445016 ----a-w- c:\windows\SysWow64\wrap_oal.dll
2013-11-01 16:56 . 2013-04-14 10:56 122968 ----a-w- c:\windows\system32\OpenAL32.dll
2013-11-01 16:56 . 2013-04-14 10:56 109144 ----a-w- c:\windows\SysWow64\OpenAL32.dll
2013-10-06 13:31 . 2013-03-28 01:27 214392 ----a-w- c:\windows\SysWow64\PnkBstrB.exe
2013-10-06 13:31 . 2013-03-28 01:27 214392 ----a-w- c:\windows\SysWow64\PnkBstrB.ex0
2013-10-05 12:00 . 2013-03-29 12:18 290184 ----a-w- c:\windows\SysWow64\PnkBstrB.xtr
2013-09-24 00:46 . 2013-09-24 00:46 86528 ----a-w- c:\windows\SysWow64\iesysprep.dll
2013-09-24 00:46 . 2013-09-24 00:46 76800 ----a-w- c:\windows\SysWow64\SetIEInstalledDate.exe
2013-09-24 00:46 . 2013-09-24 00:46 74752 ----a-w- c:\windows\SysWow64\RegisterIEPKEYs.exe
2013-09-24 00:46 . 2013-09-24 00:46 74752 ----a-w- c:\windows\SysWow64\iesetup.dll
2013-09-24 00:46 . 2013-09-24 00:46 63488 ----a-w- c:\windows\SysWow64\tdc.ocx
2013-09-24 00:46 . 2013-09-24 00:46 48640 ----a-w- c:\windows\SysWow64\mshtmler.dll
2013-09-24 00:46 . 2013-09-24 00:46 420864 ----a-w- c:\windows\SysWow64\vbscript.dll
2013-09-24 00:46 . 2013-09-24 00:46 367104 ----a-w- c:\windows\SysWow64\html.iec
2013-09-24 00:46 . 2013-09-24 00:46 23552 ----a-w- c:\windows\SysWow64\licmgr10.dll
2013-09-24 00:46 . 2013-09-24 00:46 1800704 ----a-w- c:\windows\SysWow64\jscript9.dll
2013-09-24 00:46 . 2013-09-24 00:46 161792 ----a-w- c:\windows\SysWow64\msls31.dll
2013-09-24 00:46 . 2013-09-24 00:46 152064 ----a-w- c:\windows\SysWow64\wextract.exe
2013-09-24 00:46 . 2013-09-24 00:46 150528 ----a-w- c:\windows\SysWow64\iexpress.exe
2013-09-24 00:46 . 2013-09-24 00:46 1427968 ----a-w- c:\windows\SysWow64\inetcpl.cpl
2013-09-24 00:46 . 2013-09-24 00:46 1129472 ----a-w- c:\windows\SysWow64\wininet.dll
2013-09-24 00:46 . 2013-09-24 00:46 110592 ----a-w- c:\windows\SysWow64\IEAdvpack.dll
2013-09-24 00:46 . 2013-09-24 00:46 91648 ----a-w- c:\windows\system32\SetIEInstalledDate.exe
2013-09-24 00:46 . 2013-09-24 00:46 89088 ----a-w- c:\windows\system32\RegisterIEPKEYs.exe
2013-09-24 00:46 . 2013-09-24 00:46 85504 ----a-w- c:\windows\system32\jsproxy.dll
2013-09-24 00:46 . 2013-09-24 00:46 816640 ----a-w- c:\windows\system32\jscript.dll
2013-09-24 00:46 . 2013-09-24 00:46 65024 ----a-w- c:\windows\system32\pngfilt.dll
2013-09-24 00:46 . 2013-09-24 00:46 55296 ----a-w- c:\windows\system32\msfeedsbs.dll
2013-09-24 00:46 . 2013-09-24 00:46 49664 ----a-w- c:\windows\system32\imgutil.dll
2013-09-24 00:46 . 2013-09-24 00:46 48640 ----a-w- c:\windows\system32\mshtmler.dll
2013-09-24 00:46 . 2013-09-24 00:46 35840 ----a-w- c:\windows\SysWow64\imgutil.dll
2013-09-24 00:46 . 2013-09-24 00:46 267776 ----a-w- c:\windows\system32\ieaksie.dll
2013-09-24 00:46 . 2013-09-24 00:46 2382848 ----a-w- c:\windows\SysWow64\mshtml.tlb
2013-09-24 00:46 . 2013-09-24 00:46 2382848 ----a-w- c:\windows\system32\mshtml.tlb
2013-09-24 00:46 . 2013-09-24 00:46 2312704 ----a-w- c:\windows\system32\jscript9.dll
2013-09-24 00:46 . 2013-09-24 00:46 222208 ----a-w- c:\windows\system32\msls31.dll
2013-09-24 00:46 . 2013-09-24 00:46 2147840 ----a-w- c:\windows\system32\iertutil.dll
2013-09-24 00:46 . 2013-09-24 00:46 197120 ----a-w- c:\windows\system32\msrating.dll
2013-09-24 00:46 . 2013-09-24 00:46 17833472 ----a-w- c:\windows\system32\mshtml.dll
2013-09-24 00:46 . 2013-09-24 00:46 173056 ----a-w- c:\windows\system32\ieUnatt.exe
2013-09-24 00:46 . 2013-09-24 00:46 163840 ----a-w- c:\windows\system32\ieakui.dll
2013-09-24 00:46 . 2013-09-24 00:46 160256 ----a-w- c:\windows\system32\ieakeng.dll
2013-09-24 00:46 . 2013-09-24 00:46 149504 ----a-w- c:\windows\system32\occache.dll
2013-09-24 00:46 . 2013-09-24 00:46 145920 ----a-w- c:\windows\system32\iepeers.dll
2013-09-24 00:46 . 2013-09-24 00:46 142848 ----a-w- c:\windows\SysWow64\ieUnatt.exe
2013-09-24 00:46 . 2013-09-24 00:46 1392128 ----a-w- c:\windows\system32\wininet.dll
2013-09-24 00:46 . 2013-09-24 00:46 135168 ----a-w- c:\windows\system32\IEAdvpack.dll
2013-09-24 00:46 . 2013-09-24 00:46 1346560 ----a-w- c:\windows\system32\urlmon.dll
2013-09-24 00:46 . 2013-09-24 00:46 12288 ----a-w- c:\windows\system32\mshta.exe
2013-09-24 00:46 . 2013-09-24 00:46 11776 ----a-w- c:\windows\SysWow64\mshta.exe
2013-09-24 00:46 . 2013-09-24 00:46 114176 ----a-w- c:\windows\system32\admparse.dll
2013-09-24 00:46 . 2013-09-24 00:46 111616 ----a-w- c:\windows\system32\iesysprep.dll
2013-09-24 00:46 . 2013-09-24 00:46 10752 ----a-w- c:\windows\system32\msfeedssync.exe
2013-09-24 00:46 . 2013-09-24 00:46 101888 ----a-w- c:\windows\SysWow64\admparse.dll
2013-09-24 00:46 . 2013-09-24 00:46 96768 ----a-w- c:\windows\system32\mshtmled.dll
2013-09-24 00:46 . 2013-09-24 00:46 89088 ----a-w- c:\windows\system32\ie4uinit.exe
2013-09-24 00:46 . 2013-09-24 00:46 85504 ----a-w- c:\windows\system32\iesetup.dll
2013-09-24 00:46 . 2013-09-24 00:46 82432 ----a-w- c:\windows\system32\icardie.dll
2013-09-24 00:46 . 2013-09-24 00:46 76800 ----a-w- c:\windows\system32\tdc.ocx
2013-09-24 00:46 . 2013-09-24 00:46 729088 ----a-w- c:\windows\system32\msfeeds.dll
2013-09-24 00:46 . 2013-09-24 00:46 599040 ----a-w- c:\windows\system32\vbscript.dll
2013-09-24 00:46 . 2013-09-24 00:46 534528 ----a-w- c:\windows\system32\ieapfltr.dll
2013-09-24 00:46 . 2013-09-24 00:46 452608 ----a-w- c:\windows\system32\dxtmsft.dll
2013-09-24 00:46 . 2013-09-24 00:46 448512 ----a-w- c:\windows\system32\html.iec
2013-09-24 00:46 . 2013-09-24 00:46 403248 ----a-w- c:\windows\system32\iedkcs32.dll
2013-09-24 00:46 . 2013-09-24 00:46 39936 ----a-w- c:\windows\system32\iernonce.dll
2013-09-24 00:46 . 2013-09-24 00:46 3695416 ----a-w- c:\windows\system32\ieapfltr.dat
2013-09-24 00:46 . 2013-09-24 00:46 30720 ----a-w- c:\windows\system32\licmgr10.dll
2013-09-24 00:46 . 2013-09-24 00:46 282112 ----a-w- c:\windows\system32\dxtrans.dll
2013-09-24 00:46 . 2013-09-24 00:46 249344 ----a-w- c:\windows\system32\webcheck.dll
2013-09-24 00:46 . 2013-09-24 00:46 248320 ----a-w- c:\windows\system32\ieui.dll
2013-09-24 00:46 . 2013-09-24 00:46 237056 ----a-w- c:\windows\system32\url.dll
2013-09-24 00:46 . 2013-09-24 00:46 165888 ----a-w- c:\windows\system32\iexpress.exe
2013-09-24 00:46 . 2013-09-24 00:46 160256 ----a-w- c:\windows\system32\wextract.exe
2013-09-24 00:46 . 2013-09-24 00:46 1494528 ----a-w- c:\windows\system32\inetcpl.cpl
2013-09-24 00:46 . 2013-09-24 00:46 10926080 ----a-w- c:\windows\system32\ieframe.dll
2013-09-24 00:46 . 2013-09-24 00:46 103936 ----a-w- c:\windows\system32\inseng.dll
2013-09-24 00:40 . 2013-03-26 21:31 188128 ----a-w- c:\programdata\Microsoft\VCSExpress\10.0\1033\ResourceCache.dll
2013-09-23 18:40 . 2012-07-17 12:37 22240 ----a-w- c:\programdata\Microsoft\IdentityCRL\production\ppcrlconfig600.dll
2013-09-15 22:50 . 2013-09-24 19:05 9694160 ----a-w- c:\programdata\Microsoft\Windows Defender\Definition Updates\{5A16D289-DEF7-4847-B4FF-026B1CA679F8}\mpengine.dll
2013-09-11 09:24 . 2013-09-11 09:24 388096 ----a-r- c:\users\LincolNn\AppData\Roaming\Microsoft\Installer\{45A66726-69BC-466B-A7A4-12FCBA4883D7}\HiJackThis.exe
2013-08-31 00:14 . 2013-08-31 00:14 78432 ----a-w- c:\windows\system32\atimpc64.dll
2013-08-31 00:14 . 2013-08-31 00:14 78432 ----a-w- c:\windows\system32\amdpcom64.dll
2013-08-31 00:14 . 2013-08-31 00:14 71704 ----a-w- c:\windows\SysWow64\atimpc32.dll
2013-08-31 00:14 . 2013-08-31 00:14 71704 ----a-w- c:\windows\SysWow64\amdpcom32.dll
2013-08-31 00:14 . 2012-12-19 19:31 125824 ----a-w- c:\windows\SysWow64\atiuxpag.dll
2013-08-31 00:14 . 2012-09-28 01:11 142792 ----a-w- c:\windows\system32\atiuxp64.dll
2013-08-31 00:13 . 2012-12-19 19:31 114488 ----a-w- c:\windows\system32\atiu9p64.dll
2013-08-31 00:13 . 2012-09-28 01:10 97984 ----a-w- c:\windows\SysWow64\atiu9pag.dll
2013-08-31 00:13 . 2012-12-19 20:08 1233080 ----a-w- c:\windows\system32\aticfx64.dll
2013-08-31 00:13 . 2012-09-28 01:43 1027544 ----a-w- c:\windows\SysWow64\aticfx32.dll
2013-08-31 00:13 . 2012-12-19 19:49 9464840 ----a-w- c:\windows\system32\atidxx64.dll
2013-08-31 00:13 . 2013-08-31 00:13 8215992 ----a-w- c:\windows\SysWow64\atidxx32.dll
2013-08-31 00:13 . 2009-11-25 02:37 6176008 ----a-w- c:\windows\SysWow64\atiumdva.dll
2013-08-31 00:13 . 2009-11-25 02:55 6189416 ----a-w- c:\windows\SysWow64\atiumdag.dll
2013-08-31 00:13 . 2012-12-19 19:59 6767240 ----a-w- c:\windows\system32\atiumd6a.dll
2013-08-31 00:13 . 2012-12-19 19:44 7256496 ----a-w- c:\windows\system32\atiumd64.dll
.
.
(((((((((((((((((((((((((((((((((( Spouštěcí body v registru )))))))))))))))))))))))))))))))))))))))))))))
.
.
*Poznámka* prázdné záznamy a legitimní výchozí údaje nejsou zobrazeny.
REGEDIT4
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ SkyDrivePro1 (ErrorConflict)]
@="{8BA85C75-763B-4103-94EB-9470F12FE0F7}"
[HKEY_CLASSES_ROOT\CLSID\{8BA85C75-763B-4103-94EB-9470F12FE0F7}]
2012-10-01 18:38 1720976 ----a-w- c:\progra~2\MIF5BA~1\Office15\GROOVEEX.DLL
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ SkyDrivePro2 (SyncInProgress)]
@="{CD55129A-B1A1-438E-A425-CEBC7DC684EE}"
[HKEY_CLASSES_ROOT\CLSID\{CD55129A-B1A1-438E-A425-CEBC7DC684EE}]
2012-10-01 18:38 1720976 ----a-w- c:\progra~2\MIF5BA~1\Office15\GROOVEEX.DLL
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ SkyDrivePro3 (InSync)]
@="{E768CD3B-BDDC-436D-9C13-E1B39CA257B1}"
[HKEY_CLASSES_ROOT\CLSID\{E768CD3B-BDDC-436D-9C13-E1B39CA257B1}]
2012-10-01 18:38 1720976 ----a-w- c:\progra~2\MIF5BA~1\Office15\GROOVEEX.DLL
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"DAEMON Tools Lite"="c:\program files (x86)\DAEMON Tools Lite\DTLite.exe" [2013-03-14 3672640]
"Gyazo"="c:\program files (x86)\Gyazo\GyStation.exe" [2013-10-30 2990304]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]
"avast"="c:\program files\AVAST Software\Avast\avastUI.exe" [2013-03-06 4767304]
"StartCCC"="c:\program files (x86)\ATI Technologies\ATI.ACE\Core-Static\amd64\CLIStart.exe" [2013-08-30 766208]
"SunJavaUpdateSched"="c:\program files (x86)\Common Files\Java\Java Update\jusched.exe" [2013-07-02 254336]
"LogMeIn Hamachi Ui"="c:\program files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe" [2013-10-31 2349392]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorAdmin"= 5 (0x5)
"ConsentPromptBehaviorUser"= 3 (0x3)
"EnableUIADesktopToggle"= 0 (0x0)
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\windows]
"LoadAppInit_DLLs"=1 (0x1)
.
R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [x]
R2 Hamachi2Svc;LogMeIn Hamachi Tunneling Engine;c:\program files (x86)\LogMeIn Hamachi\hamachi-2.exe;c:\program files (x86)\LogMeIn Hamachi\hamachi-2.exe [x]
R2 LMIInfo;LogMeIn Kernel Information Provider;c:\program files (x86)\LogMeIn\x64\RaInfo.sys;c:\program files (x86)\LogMeIn\x64\RaInfo.sys [x]
R3 amdhub30;AMD USB 3.0 Hub Driver;c:\windows\system32\DRIVERS\amdhub30.sys;c:\windows\SYSNATIVE\DRIVERS\amdhub30.sys [x]
R3 amdxhc;AMD USB 3.0 Host Controller Driver;c:\windows\system32\DRIVERS\amdxhc.sys;c:\windows\SYSNATIVE\DRIVERS\amdxhc.sys [x]
R3 aswVmm;aswVmm; [x]
R3 dg_ssudbus;SAMSUNG Mobile USB Composite Device Driver (DEVGURU Ver.);c:\windows\system32\DRIVERS\ssudbus.sys;c:\windows\SYSNATIVE\DRIVERS\ssudbus.sys [x]
R3 ose64;Office 64 Source Engine;c:\program files\Common Files\Microsoft Shared\Source Engine\OSE.EXE;c:\program files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [x]
R3 RTTEAMPT;Realtek Teaming Protocol Driver (NDIS 6.0);c:\windows\system32\DRIVERS\RtTeam60.sys;c:\windows\SYSNATIVE\DRIVERS\RtTeam60.sys [x]
R3 RTVLANPT;Realtek Vlan Protocol Driver (NDIS 6.2);c:\windows\system32\DRIVERS\RtVlan620.sys;c:\windows\SYSNATIVE\DRIVERS\RtVlan620.sys [x]
R3 ssudmdm;SAMSUNG Mobile USB Modem Drivers (DEVGURU Ver.);c:\windows\system32\DRIVERS\ssudmdm.sys;c:\windows\SYSNATIVE\DRIVERS\ssudmdm.sys [x]
R3 SwitchBoard;Adobe SwitchBoard;c:\program files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe;c:\program files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [x]
R3 vncserver;VNC Server;c:\program files\RealVNC\VNC Server\vncserver.exe;c:\program files\RealVNC\VNC Server\vncserver.exe [x]
R3 WatAdminSvc;Služba Technologie aktivace Windows;c:\windows\system32\Wat\WatAdminSvc.exe;c:\windows\SYSNATIVE\Wat\WatAdminSvc.exe [x]
S0 aswRvrt;aswRvrt; [x]
S0 PxHlpa64;PxHlpa64;c:\windows\System32\Drivers\PxHlpa64.sys;c:\windows\SYSNATIVE\Drivers\PxHlpa64.sys [x]
S1 aswSnx;aswSnx; [x]
S1 aswSP;aswSP; [x]
S1 dtsoftbus01;DAEMON Tools Virtual Bus Driver;c:\windows\system32\DRIVERS\dtsoftbus01.sys;c:\windows\SYSNATIVE\DRIVERS\dtsoftbus01.sys [x]
S1 VBoxDrv;VirtualBox Service;c:\windows\system32\DRIVERS\VBoxDrv.sys;c:\windows\SYSNATIVE\DRIVERS\VBoxDrv.sys [x]
S1 VBoxUSBMon;VirtualBox USB Monitor Driver;c:\windows\system32\DRIVERS\VBoxUSBMon.sys;c:\windows\SYSNATIVE\DRIVERS\VBoxUSBMon.sys [x]
S2 AMD External Events Utility;AMD External Events Utility;c:\windows\system32\atiesrxx.exe;c:\windows\SYSNATIVE\atiesrxx.exe [x]
S2 AMD FUEL Service;AMD FUEL Service;c:\program files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe;c:\program files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe [x]
S2 AODDriver4.2;AODDriver4.2;c:\program files\ATI Technologies\ATI.ACE\Fuel\amd64\AODDriver2.sys;c:\program files\ATI Technologies\ATI.ACE\Fuel\amd64\AODDriver2.sys [x]
S2 aswFsBlk;aswFsBlk; [x]
S2 aswMonFlt;aswMonFlt;c:\windows\system32\drivers\aswMonFlt.sys;c:\windows\SYSNATIVE\drivers\aswMonFlt.sys [x]
S2 FirebirdGuardianDefaultInstance;Firebird Guardian - DefaultInstance;c:\program files (x86)\Firebird\Firebird_2_5\bin\fbguard.exe;c:\program files (x86)\Firebird\Firebird_2_5\bin\fbguard.exe [x]
S2 LMIGuardianSvc;LMIGuardianSvc;c:\program files (x86)\LogMeIn Hamachi\LMIGuardianSvc.exe;c:\program files (x86)\LogMeIn Hamachi\LMIGuardianSvc.exe [x]
S2 RtNdPt60;Realtek NDIS Protocol Driver;c:\windows\system32\DRIVERS\RtNdPt60.sys;c:\windows\SYSNATIVE\DRIVERS\RtNdPt60.sys [x]
S2 TeamViewer8;TeamViewer 8;c:\program files (x86)\TeamViewer\Version8\TeamViewer_Service.exe;c:\program files (x86)\TeamViewer\Version8\TeamViewer_Service.exe [x]
S3 amdiox64;AMD IO Driver;c:\windows\system32\DRIVERS\amdiox64.sys;c:\windows\SYSNATIVE\DRIVERS\amdiox64.sys [x]
S3 AtiHDAudioService;AMD Function Driver for HD Audio Service;c:\windows\system32\drivers\AtihdW76.sys;c:\windows\SYSNATIVE\drivers\AtihdW76.sys [x]
S3 FirebirdServerDefaultInstance;Firebird Server - DefaultInstance;c:\program files (x86)\Firebird\Firebird_2_5\bin\fbserver.exe;c:\program files (x86)\Firebird\Firebird_2_5\bin\fbserver.exe [x]
S3 pcouffin;VSO Software pcouffin;c:\windows\system32\Drivers\pcouffin.sys;c:\windows\SYSNATIVE\Drivers\pcouffin.sys [x]
S3 RTL8167;Realtek 8167 NT Driver;c:\windows\system32\DRIVERS\Rt64win7.sys;c:\windows\SYSNATIVE\DRIVERS\Rt64win7.sys [x]
S3 usbfilter;AMD USB Filter Driver;c:\windows\system32\DRIVERS\usbfilter.sys;c:\windows\SYSNATIVE\DRIVERS\usbfilter.sys [x]
S3 VBoxNetAdp;VirtualBox Host-Only Ethernet Adapter;c:\windows\system32\DRIVERS\VBoxNetAdp.sys;c:\windows\SYSNATIVE\DRIVERS\VBoxNetAdp.sys [x]
S3 VBoxNetFlt;VirtualBox Bridged Networking Service;c:\windows\system32\DRIVERS\VBoxNetFlt.sys;c:\windows\SYSNATIVE\DRIVERS\VBoxNetFlt.sys [x]
.
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\active setup\installed components\{8A69D345-D564-463c-AFF1-A69D9E530F96}]
2013-10-16 16:03 1185744 ----a-w- c:\program files (x86)\Google\Chrome\Application\30.0.1599.101\Installer\chrmstp.exe
.
Obsah adresáře 'Naplánované úlohy'
.
2013-11-12 c:\windows\Tasks\Adobe Flash Player Updater.job
- c:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2013-11-05 23:28]
.
.
--------- X64 Entries -----------
.
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ SkyDrivePro1 (ErrorConflict)]
@="{8BA85C75-763B-4103-94EB-9470F12FE0F7}"
[HKEY_CLASSES_ROOT\CLSID\{8BA85C75-763B-4103-94EB-9470F12FE0F7}]
2012-10-01 18:37 2322576 ----a-w- c:\progra~1\MIF5BA~1\Office15\GROOVEEX.DLL
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ SkyDrivePro2 (SyncInProgress)]
@="{CD55129A-B1A1-438E-A425-CEBC7DC684EE}"
[HKEY_CLASSES_ROOT\CLSID\{CD55129A-B1A1-438E-A425-CEBC7DC684EE}]
2012-10-01 18:37 2322576 ----a-w- c:\progra~1\MIF5BA~1\Office15\GROOVEEX.DLL
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ SkyDrivePro3 (InSync)]
@="{E768CD3B-BDDC-436D-9C13-E1B39CA257B1}"
[HKEY_CLASSES_ROOT\CLSID\{E768CD3B-BDDC-436D-9C13-E1B39CA257B1}]
2012-10-01 18:37 2322576 ----a-w- c:\progra~1\MIF5BA~1\Office15\GROOVEEX.DLL
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\00avast]
@="{472083B0-C522-11CF-8763-00608CC02F24}"
[HKEY_CLASSES_ROOT\CLSID\{472083B0-C522-11CF-8763-00608CC02F24}]
2013-03-06 23:32 133840 ----a-w- c:\program files\AVAST Software\Avast\ashShA64.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\GDriveBlacklistedOverlay]
@="{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D42}"
[HKEY_CLASSES_ROOT\CLSID\{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D42}]
2013-09-25 15:37 778704 ----a-w- c:\program files (x86)\Google\Drive\googledrivesync64.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\GDriveSharedEditOverlay]
@="{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D44}"
[HKEY_CLASSES_ROOT\CLSID\{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D44}]
2013-09-25 15:37 778704 ----a-w- c:\program files (x86)\Google\Drive\googledrivesync64.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\GDriveSharedViewOverlay]
@="{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D43}"
[HKEY_CLASSES_ROOT\CLSID\{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D43}]
2013-09-25 15:37 778704 ----a-w- c:\program files (x86)\Google\Drive\googledrivesync64.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\GDriveSyncedOverlay]
@="{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D40}"
[HKEY_CLASSES_ROOT\CLSID\{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D40}]
2013-09-25 15:37 778704 ----a-w- c:\program files (x86)\Google\Drive\googledrivesync64.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\GDriveSyncingOverlay]
@="{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D41}"
[HKEY_CLASSES_ROOT\CLSID\{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D41}]
2013-09-25 15:37 778704 ----a-w- c:\program files (x86)\Google\Drive\googledrivesync64.dll
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"RtHDVCpl"="c:\program files\Realtek\Audio\HDA\RAVCpl64.exe" [2011-08-09 12666984]
.
------- Doplňkový sken -------
.
uLocal Page = c:\windows\system32\blank.htm
uStart Page = hxxp://www.shoutcast.com
mLocal Page = c:\windows\SysWOW64\blank.htm
uInternet Settings,ProxyOverride = <local>
IE: E&xportovat do Microsoft Excelu - c:\progra~1\MIF5BA~1\Office15\EXCEL.EXE/3000
IE: Od&eslat do OneNotu - c:\progra~1\MIF5BA~1\Office15\ONBttnIE.dll/105
Filter: text/xml - {807583E5-5146-11D5-A672-00B0D022E945} - c:\program files (x86)\Common Files\microsoft shared\OFFICE15\MSOXMLMF.DLL
.
- - - - NEPLATNÉ POLOŽKY ODSTRANĚNÉ Z REGISTRU - - - -
.
AddRemove-PunkBusterSvc - c:\windows\system32\pbsvc.exe
.
.
.
--------------------- ZAMKNUTÉ KLÍČE V REGISTRU ---------------------
.
[HKEY_USERS\S-1-5-21-3323472497-44360149-3043929110-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.eml\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="WindowsLiveMail.Email.1"
.
[HKEY_USERS\S-1-5-21-3323472497-44360149-3043929110-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.vcf\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="WindowsLiveMail.VCard.1"
.
[HKEY_USERS\S-1-5-21-3323472497-44360149-3043929110-1000\Software\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved\{19F29C70-8D2B-0D79-FB97-F047600AC2E8}*]
"hafmljnfmdennmpb"=hex:63,62,69,6a,6d,68,63,6a,70,6b,69,6d,65,70,65,63,65,63,
6b,70,6f,63,68,67,6f,64,6e,6c,61,64,6c,65,6e,6b,6a,6a,67,70,00,00
"iahmfmagceknpmcekk"=hex:63,62,69,6a,6d,68,63,6a,70,6b,69,6d,65,70,65,63,62,62,
65,61,67,6c,62,6e,6d,6a,63,6f,67,63,70,6d,69,6e,68,6e,61,70,00,00
.
[HKEY_USERS\S-1-5-21-3323472497-44360149-3043929110-1000\Software\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved\{F7F0C993-C06A-43D3-136F-D50ACACAE426}*]
"iallpaannipbapoabl"=hex:69,61,6e,69,6d,70,6b,61,70,67,6d,65,66,63,6e,66,69,6b,
00,77
"hafmfnmcoangbnfm"=hex:69,61,6e,69,6d,70,6b,61,70,67,6d,65,66,63,6e,66,69,6b,
00,77
"iahcadibgmlhfehdng"=hex:63,61,6d,69,65,63,00,00
.
[HKEY_USERS\S-1-5-21-3323472497-44360149-3043929110-1000\Software\SecuROM\License information*]
"datasecu"=hex:2c,38,54,ae,07,1c,4e,07,99,05,ce,92,41,b5,b1,20,3f,0a,db,99,34,
7a,a0,07,e3,ec,d9,5b,80,cd,9f,a6,49,3c,ba,c8,81,4c,ec,8a,c8,32,3e,48,3e,de,\
"rkeysecu"=hex:c9,01,e2,11,bd,00,94,2d,14,35,83,fb,1b,0d,74,f9
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil64_11_9_900_117_ActiveX.exe,-101"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\Elevation]
"Enabled"=dword:00000001
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\LocalServer32]
@="c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil64_11_9_900_117_ActiveX.exe"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
.
[HKEY_LOCAL_MACHINE\software\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="IFlashBroker5"
.
[HKEY_LOCAL_MACHINE\software\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"
.
[HKEY_LOCAL_MACHINE\software\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
.
[HKEY_LOCAL_MACHINE\software\Classes\VideoLAN.VLCPlugin.*1*]
@="?????????????????? v1"
.
[HKEY_LOCAL_MACHINE\software\Classes\VideoLAN.VLCPlugin.*1*\CLSID]
@="{E23FE9C6-778E-49D4-B537-38FCDE4887D8}"
.
[HKEY_LOCAL_MACHINE\software\Classes\VideoLAN.VLCPlugin.*2*]
@="?????????????????? v2"
.
[HKEY_LOCAL_MACHINE\software\Classes\VideoLAN.VLCPlugin.*2*\CLSID]
@="{9BE31822-FDAD-461B-AD51-BE1D1C159921}"
.
[HKEY_LOCAL_MACHINE\system\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0000\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
------------------------ Jiné spuštené procesy ------------------------
.
c:\program files\AVAST Software\Avast\AvastSvc.exe
c:\program files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
c:\windows\SysWOW64\PnkBstrA.exe
.
**************************************************************************
.
Celkový čas: 2013-11-12 18:15:00 - počítač byl restartován
ComboFix-quarantined-files.txt 2013-11-12 17:14
ComboFix2.txt 2013-11-12 11:04
.
Před spuštěním: Volných bajtů: 23 096 311 808
Po spuštění: Volných bajtů: 22 800 527 360
.
- - End Of File - - 9CC23B47E66A18D7C79BDE6214768460
A36C5E4F47E84449FF07ED3517B43A31



aswMBR version 0.9.9.1771 Copyright(c) 2011 AVAST Software
Run date: 2013-11-12 18:17:30
-----------------------------
18:17:30.796 OS Version: Windows x64 6.1.7600
18:17:30.796 Number of processors: 4 586 0x100
18:17:30.797 ComputerName: LINCOLNN UserName: LincolNn
18:17:33.236 Initialize success
18:17:33.439 AVAST engine defs: 13111200
18:17:35.498 Disk 0 (boot) \Device\Harddisk0\DR0 -> \Device\Ide\IdeDeviceP0T1L0-6
18:17:35.514 Disk 0 Vendor: ST9160310AS 0303 Size: 152627MB BusType: 3
18:17:35.873 Disk 0 MBR read successfully
18:17:35.873 Disk 0 MBR scan
18:17:35.873 Disk 0 Windows 7 default MBR code
18:17:35.888 Disk 0 Partition 1 80 (A) 07 HPFS/NTFS NTFS 152324 MB offset 206848
18:17:35.888 Disk 0 Partition - 00 0F Extended LBA 201 MB offset 312166400
18:17:35.997 Disk 0 scanning C:\Windows\system32\drivers
18:17:50.037 Service scanning
18:18:14.779 Modules scanning
18:18:14.795 Disk 0 trace - called modules:
18:18:15.060 ntoskrnl.exe CLASSPNP.SYS disk.sys ACPI.sys ataport.SYS pciide.sys PCIIDEX.SYS hal.dll atapi.sys
18:18:15.060 1 nt!IofCallDriver -> \Device\Harddisk0\DR0[0xfffffa8004a2f060]
18:18:15.075 3 CLASSPNP.SYS[fffff8800187e43f] -> nt!IofCallDriver -> [0xfffffa80044d8520]
18:18:15.075 5 ACPI.sys[fffff88000f5f781] -> nt!IofCallDriver -> \Device\Ide\IdeDeviceP0T1L0-6[0xfffffa80044d6060]
18:18:15.606 AVAST engine scan C:\Windows
18:18:18.695 AVAST engine scan C:\Windows\system32
18:22:18.795 AVAST engine scan C:\Windows\system32\drivers
18:22:33.895 AVAST engine scan C:\Users\LincolNn
18:24:17.012 Disk 0 MBR has been saved successfully to "C:\Users\LincolNn\Desktop\MBR.dat"
18:24:17.012 The log file has been saved successfully to "C:\Users\LincolNn\Desktop\aswMBR.txt"
CPU: AMD Ryzen 5 1600 AF
GPU: Gigabyte GTX 1660 SUPER OC 6G
RAM: 16 GB
MB: MSI B450 TOMAHAWK MAX
PSU: EVGA 550 B3
Case: Zalman Z3 Plus

Uživatelský avatar
jaro3
člen Security týmu
Guru Level 15
Guru Level 15
Příspěvky: 43339
Registrován: červen 07
Bydliště: Jižní Čechy
Pohlaví: Muž
Stav:
Offline

Re: Prosím o kontrolu logu/zřejmě spyware

Příspěvekod jaro3 » 13 lis 2013 10:16

Otevři si Poznámkový blok (Start -> Spustit... a napiš do okna Notepad a dej Ok.
Zkopíruj do něj následující celý text označený zeleně:

Kód: Vybrat vše

RegLock::
[HKEY_USERS\S-1-5-21-3323472497-44360149-3043929110-1000\Software\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved\{19F29C70-8D2B-0D79-FB97-F047600AC2E8}*]
"hafmljnfmdennmpb"=hex:63,62,69,6a,6d,68,63,6a,70,6b,69,6d,65,70,65,63,65,63,
 6b,70,6f,63,68,67,6f,64,6e,6c,61,64,6c,65,6e,6b,6a,6a,67,70,00,00
"iahmfmagceknpmcekk"=hex:63,62,69,6a,6d,68,63,6a,70,6b,69,6d,65,70,65,63,62,62,
 65,61,67,6c,62,6e,6d,6a,63,6f,67,63,70,6d,69,6e,68,6e,61,70,00,00
.
[HKEY_USERS\S-1-5-21-3323472497-44360149-3043929110-1000\Software\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved\{F7F0C993-C06A-43D3-136F-D50ACACAE426}*]
"iallpaannipbapoabl"=hex:69,61,6e,69,6d,70,6b,61,70,67,6d,65,66,63,6e,66,69,6b,
 00,77
"hafmfnmcoangbnfm"=hex:69,61,6e,69,6d,70,6b,61,70,67,6d,65,66,63,6e,66,69,6b,
 00,77
"iahcadibgmlhfehdng"=hex:63,61,6d,69,65,63,00,00
.
[HKEY_USERS\S-1-5-21-3323472497-44360149-3043929110-1000\Software\SecuROM\License information*]
"datasecu"=hex:2c,38,54,ae,07,1c,4e,07,99,05,ce,92,41,b5,b1,20,3f,0a,db,99,34,
 7a,a0,07,e3,ec,d9,5b,80,cd,9f,a6,49,3c,ba,c8,81,4c,ec,8a,c8,32,3e,48,3e,de,\
"rkeysecu"=hex:c9,01,e2,11,bd,00,94,2d,14,35,83,fb,1b,0d,74,f9
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil64_11_9_900_117_ActiveX.exe,-101"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\Elevation]
"Enabled"=dword:00000001
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\LocalServer32]
@="c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil64_11_9_900_117_ActiveX.exe"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
.
[HKEY_LOCAL_MACHINE\software\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="IFlashBroker5"
.
[HKEY_LOCAL_MACHINE\software\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"
.
[HKEY_LOCAL_MACHINE\software\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
[HKEY_LOCAL_MACHINE\system\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0000\AllUserSettings]


Zvol možnost Soubor -> Uložit jako... a nastav tyto parametry:
Název souboru: zde napiš: CFScript.txt
Uložit jako typ: tak tam vyber Všechny soubory
Ulož soubor na plochu.
Ukonči všechna aktivní okna.

Uchop myší vytvořený skript CFScript.txt, přemísti ho nad stažený program ComboFix.exe a když se oba soubory překryjí, skript upusť.
- Automaticky se spustí ComboFix
- Vlož sem log, který vyběhne v závěru čistícího procesu + nový log z HJT

Upozornění : Může se stát, že po aplikaci Combofixu a restartu počítače, Windows nenaběhnou , nebo nenajede plocha , budou problémy s připojením, pak znovu restartuj počítač, pokud to nepomůže , po restartu mačkej klávesu F8 a pak zvol poslední známou funkční konfiguraci. , či použij bod obnovy.
Při práci s programy HJT, ComboFix,MbAM, SDFix aj. zavřete všechny ostatní aplikace a prohlížeče!
Neposílejte logy do soukromých zpráv.Po dobu mé nepřítomnosti mě zastupuje memphisto , Žbeky a Orcus.
Pokud budete spokojeni , můžete podpořit naše forum:Podpora fóra


Zpět na “HiJackThis”

Kdo je online

Uživatelé prohlížející si toto fórum: Žádní registrovaní uživatelé a 4 hosti