ComboFix 12-11-06.03 - Simon 06.11.2012 20:49:26.15.8 - x64
Microsoft Windows 7 Home Premium 6.1.7601.1.1250.420.1029.18.8140.5662 [GMT 1:00]
Spuštěný z: c:\users\Simon\Desktop\ComboFix.exe
Použité ovládací přepínače :: c:\users\Simon\Desktop\CFScript.txt
AV: avast! Antivirus *Disabled/Updated* {2B2D1395-420B-D5C9-657E-930FE358FC3C}
SP: avast! Antivirus *Disabled/Updated* {904CF271-6431-DA47-5FCE-A87D98DFB681}
SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.
FILE ::
"c:\windows\system32\PerfStringBackup.TMP"
"c:\windows\Tasks\FacebookUpdateTaskUserS-1-5-21-4183527995-4049732787-3813104505-1000Core.job"
"c:\windows\Tasks\FacebookUpdateTaskUserS-1-5-21-4183527995-4049732787-3813104505-1000UA.job"
"c:\windows\Tasks\GoogleUpdateTaskMachineCore.job"
"c:\windows\Tasks\GoogleUpdateTaskMachineUA.job"
"c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-4183527995-4049732787-3813104505-1000Core.job"
"c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-4183527995-4049732787-3813104505-1000UA.job"
"c:\windows\Tasks\OptimizerProUpdaterLogonTask.job"
"c:\windows\Tasks\OptimizerProUpdaterRefreshTask.job"
.
.
((((((((((((((((((((((((((((((((((((((( Ostatní výmazy )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
c:\program files (x86)\Skype\Updater
c:\program files (x86)\Skype\Updater\Updater.dll
c:\program files (x86)\Skype\Updater\Updater.exe
c:\users\Simon\AppData\Local\Facebook\Update
c:\users\Simon\AppData\Local\Facebook\Update\1.2.205.0\FacebookCrashHandler.exe
c:\users\Simon\AppData\Local\Facebook\Update\1.2.205.0\FacebookUpdate.exe
c:\users\Simon\AppData\Local\Facebook\Update\1.2.205.0\FacebookUpdateHelper.msi
c:\users\Simon\AppData\Local\Facebook\Update\1.2.205.0\goopdate.dll
c:\users\Simon\AppData\Local\Facebook\Update\1.2.205.0\goopdateres_ar.dll
c:\users\Simon\AppData\Local\Facebook\Update\1.2.205.0\goopdateres_bg.dll
c:\users\Simon\AppData\Local\Facebook\Update\1.2.205.0\goopdateres_bn.dll
c:\users\Simon\AppData\Local\Facebook\Update\1.2.205.0\goopdateres_ca.dll
c:\users\Simon\AppData\Local\Facebook\Update\1.2.205.0\goopdateres_cs.dll
c:\users\Simon\AppData\Local\Facebook\Update\1.2.205.0\goopdateres_da.dll
c:\users\Simon\AppData\Local\Facebook\Update\1.2.205.0\goopdateres_de.dll
c:\users\Simon\AppData\Local\Facebook\Update\1.2.205.0\goopdateres_el.dll
c:\users\Simon\AppData\Local\Facebook\Update\1.2.205.0\goopdateres_en-GB.dll
c:\users\Simon\AppData\Local\Facebook\Update\1.2.205.0\goopdateres_en.dll
c:\users\Simon\AppData\Local\Facebook\Update\1.2.205.0\goopdateres_es-419.dll
c:\users\Simon\AppData\Local\Facebook\Update\1.2.205.0\goopdateres_es.dll
c:\users\Simon\AppData\Local\Facebook\Update\1.2.205.0\goopdateres_et.dll
c:\users\Simon\AppData\Local\Facebook\Update\1.2.205.0\goopdateres_fa.dll
c:\users\Simon\AppData\Local\Facebook\Update\1.2.205.0\goopdateres_fi.dll
c:\users\Simon\AppData\Local\Facebook\Update\1.2.205.0\goopdateres_fil.dll
c:\users\Simon\AppData\Local\Facebook\Update\1.2.205.0\goopdateres_fr.dll
c:\users\Simon\AppData\Local\Facebook\Update\1.2.205.0\goopdateres_gu.dll
c:\users\Simon\AppData\Local\Facebook\Update\1.2.205.0\goopdateres_hi.dll
c:\users\Simon\AppData\Local\Facebook\Update\1.2.205.0\goopdateres_hr.dll
c:\users\Simon\AppData\Local\Facebook\Update\1.2.205.0\goopdateres_hu.dll
c:\users\Simon\AppData\Local\Facebook\Update\1.2.205.0\goopdateres_id.dll
c:\users\Simon\AppData\Local\Facebook\Update\1.2.205.0\goopdateres_is.dll
c:\users\Simon\AppData\Local\Facebook\Update\1.2.205.0\goopdateres_it.dll
c:\users\Simon\AppData\Local\Facebook\Update\1.2.205.0\goopdateres_iw.dll
c:\users\Simon\AppData\Local\Facebook\Update\1.2.205.0\goopdateres_ja.dll
c:\users\Simon\AppData\Local\Facebook\Update\1.2.205.0\goopdateres_kn.dll
c:\users\Simon\AppData\Local\Facebook\Update\1.2.205.0\goopdateres_ko.dll
c:\users\Simon\AppData\Local\Facebook\Update\1.2.205.0\goopdateres_lt.dll
c:\users\Simon\AppData\Local\Facebook\Update\1.2.205.0\goopdateres_lv.dll
c:\users\Simon\AppData\Local\Facebook\Update\1.2.205.0\goopdateres_ml.dll
c:\users\Simon\AppData\Local\Facebook\Update\1.2.205.0\goopdateres_mr.dll
c:\users\Simon\AppData\Local\Facebook\Update\1.2.205.0\goopdateres_ms.dll
c:\users\Simon\AppData\Local\Facebook\Update\1.2.205.0\goopdateres_nl.dll
c:\users\Simon\AppData\Local\Facebook\Update\1.2.205.0\goopdateres_no.dll
c:\users\Simon\AppData\Local\Facebook\Update\1.2.205.0\goopdateres_or.dll
c:\users\Simon\AppData\Local\Facebook\Update\1.2.205.0\goopdateres_pl.dll
c:\users\Simon\AppData\Local\Facebook\Update\1.2.205.0\goopdateres_pt-BR.dll
c:\users\Simon\AppData\Local\Facebook\Update\1.2.205.0\goopdateres_pt-PT.dll
c:\users\Simon\AppData\Local\Facebook\Update\1.2.205.0\goopdateres_ro.dll
c:\users\Simon\AppData\Local\Facebook\Update\1.2.205.0\goopdateres_ru.dll
c:\users\Simon\AppData\Local\Facebook\Update\1.2.205.0\goopdateres_sk.dll
c:\users\Simon\AppData\Local\Facebook\Update\1.2.205.0\goopdateres_sl.dll
c:\users\Simon\AppData\Local\Facebook\Update\1.2.205.0\goopdateres_sr.dll
c:\users\Simon\AppData\Local\Facebook\Update\1.2.205.0\goopdateres_sv.dll
c:\users\Simon\AppData\Local\Facebook\Update\1.2.205.0\goopdateres_ta.dll
c:\users\Simon\AppData\Local\Facebook\Update\1.2.205.0\goopdateres_te.dll
c:\users\Simon\AppData\Local\Facebook\Update\1.2.205.0\goopdateres_th.dll
c:\users\Simon\AppData\Local\Facebook\Update\1.2.205.0\goopdateres_tr.dll
c:\users\Simon\AppData\Local\Facebook\Update\1.2.205.0\goopdateres_uk.dll
c:\users\Simon\AppData\Local\Facebook\Update\1.2.205.0\goopdateres_ur.dll
c:\users\Simon\AppData\Local\Facebook\Update\1.2.205.0\goopdateres_vi.dll
c:\users\Simon\AppData\Local\Facebook\Update\1.2.205.0\goopdateres_zh-CN.dll
c:\users\Simon\AppData\Local\Facebook\Update\1.2.205.0\goopdateres_zh-TW.dll
c:\users\Simon\AppData\Local\Facebook\Update\FacebookUpdate.exe
c:\users\Simon\AppData\Local\Google\Update
c:\users\Simon\AppData\Local\Google\Update\1.3.21.124\GoogleCrashHandler.exe
c:\users\Simon\AppData\Local\Google\Update\1.3.21.124\GoogleCrashHandler64.exe
c:\users\Simon\AppData\Local\Google\Update\1.3.21.124\GoogleUpdate.exe
c:\users\Simon\AppData\Local\Google\Update\1.3.21.124\GoogleUpdateBroker.exe
c:\users\Simon\AppData\Local\Google\Update\1.3.21.124\GoogleUpdateHelper.msi
c:\users\Simon\AppData\Local\Google\Update\1.3.21.124\GoogleUpdateOnDemand.exe
c:\users\Simon\AppData\Local\Google\Update\1.3.21.124\GoogleUpdateSetup.exe
c:\users\Simon\AppData\Local\Google\Update\1.3.21.124\goopdate.dll
c:\users\Simon\AppData\Local\Google\Update\1.3.21.124\goopdateres_am.dll
c:\users\Simon\AppData\Local\Google\Update\1.3.21.124\goopdateres_ar.dll
c:\users\Simon\AppData\Local\Google\Update\1.3.21.124\goopdateres_bg.dll
c:\users\Simon\AppData\Local\Google\Update\1.3.21.124\goopdateres_bn.dll
c:\users\Simon\AppData\Local\Google\Update\1.3.21.124\goopdateres_ca.dll
c:\users\Simon\AppData\Local\Google\Update\1.3.21.124\goopdateres_cs.dll
c:\users\Simon\AppData\Local\Google\Update\1.3.21.124\goopdateres_da.dll
c:\users\Simon\AppData\Local\Google\Update\1.3.21.124\goopdateres_de.dll
c:\users\Simon\AppData\Local\Google\Update\1.3.21.124\goopdateres_el.dll
c:\users\Simon\AppData\Local\Google\Update\1.3.21.124\goopdateres_en-GB.dll
c:\users\Simon\AppData\Local\Google\Update\1.3.21.124\goopdateres_en.dll
c:\users\Simon\AppData\Local\Google\Update\1.3.21.124\goopdateres_es-419.dll
c:\users\Simon\AppData\Local\Google\Update\1.3.21.124\goopdateres_es.dll
c:\users\Simon\AppData\Local\Google\Update\1.3.21.124\goopdateres_et.dll
c:\users\Simon\AppData\Local\Google\Update\1.3.21.124\goopdateres_fa.dll
c:\users\Simon\AppData\Local\Google\Update\1.3.21.124\goopdateres_fi.dll
c:\users\Simon\AppData\Local\Google\Update\1.3.21.124\goopdateres_fil.dll
c:\users\Simon\AppData\Local\Google\Update\1.3.21.124\goopdateres_fr.dll
c:\users\Simon\AppData\Local\Google\Update\1.3.21.124\goopdateres_gu.dll
c:\users\Simon\AppData\Local\Google\Update\1.3.21.124\goopdateres_hi.dll
c:\users\Simon\AppData\Local\Google\Update\1.3.21.124\goopdateres_hr.dll
c:\users\Simon\AppData\Local\Google\Update\1.3.21.124\goopdateres_hu.dll
c:\users\Simon\AppData\Local\Google\Update\1.3.21.124\goopdateres_id.dll
c:\users\Simon\AppData\Local\Google\Update\1.3.21.124\goopdateres_is.dll
c:\users\Simon\AppData\Local\Google\Update\1.3.21.124\goopdateres_it.dll
c:\users\Simon\AppData\Local\Google\Update\1.3.21.124\goopdateres_iw.dll
c:\users\Simon\AppData\Local\Google\Update\1.3.21.124\goopdateres_ja.dll
c:\users\Simon\AppData\Local\Google\Update\1.3.21.124\goopdateres_kn.dll
c:\users\Simon\AppData\Local\Google\Update\1.3.21.124\goopdateres_ko.dll
c:\users\Simon\AppData\Local\Google\Update\1.3.21.124\goopdateres_lt.dll
c:\users\Simon\AppData\Local\Google\Update\1.3.21.124\goopdateres_lv.dll
c:\users\Simon\AppData\Local\Google\Update\1.3.21.124\goopdateres_ml.dll
c:\users\Simon\AppData\Local\Google\Update\1.3.21.124\goopdateres_mr.dll
c:\users\Simon\AppData\Local\Google\Update\1.3.21.124\goopdateres_ms.dll
c:\users\Simon\AppData\Local\Google\Update\1.3.21.124\goopdateres_nl.dll
c:\users\Simon\AppData\Local\Google\Update\1.3.21.124\goopdateres_no.dll
c:\users\Simon\AppData\Local\Google\Update\1.3.21.124\goopdateres_pl.dll
c:\users\Simon\AppData\Local\Google\Update\1.3.21.124\goopdateres_pt-BR.dll
c:\users\Simon\AppData\Local\Google\Update\1.3.21.124\goopdateres_pt-PT.dll
c:\users\Simon\AppData\Local\Google\Update\1.3.21.124\goopdateres_ro.dll
c:\users\Simon\AppData\Local\Google\Update\1.3.21.124\goopdateres_ru.dll
c:\users\Simon\AppData\Local\Google\Update\1.3.21.124\goopdateres_sk.dll
c:\users\Simon\AppData\Local\Google\Update\1.3.21.124\goopdateres_sl.dll
c:\users\Simon\AppData\Local\Google\Update\1.3.21.124\goopdateres_sr.dll
c:\users\Simon\AppData\Local\Google\Update\1.3.21.124\goopdateres_sv.dll
c:\users\Simon\AppData\Local\Google\Update\1.3.21.124\goopdateres_sw.dll
c:\users\Simon\AppData\Local\Google\Update\1.3.21.124\goopdateres_ta.dll
c:\users\Simon\AppData\Local\Google\Update\1.3.21.124\goopdateres_te.dll
c:\users\Simon\AppData\Local\Google\Update\1.3.21.124\goopdateres_th.dll
c:\users\Simon\AppData\Local\Google\Update\1.3.21.124\goopdateres_tr.dll
c:\users\Simon\AppData\Local\Google\Update\1.3.21.124\goopdateres_uk.dll
c:\users\Simon\AppData\Local\Google\Update\1.3.21.124\goopdateres_ur.dll
c:\users\Simon\AppData\Local\Google\Update\1.3.21.124\goopdateres_vi.dll
c:\users\Simon\AppData\Local\Google\Update\1.3.21.124\goopdateres_zh-CN.dll
c:\users\Simon\AppData\Local\Google\Update\1.3.21.124\goopdateres_zh-TW.dll
c:\users\Simon\AppData\Local\Google\Update\1.3.21.124\npGoogleUpdate3.dll
c:\users\Simon\AppData\Local\Google\Update\1.3.21.124\psmachine.dll
c:\users\Simon\AppData\Local\Google\Update\1.3.21.124\psuser.dll
c:\users\Simon\AppData\Local\Google\Update\Download\{430FD4D0-B729-4F61-AA34-91526481799D}\1.3.21.125\GoogleUpdateB6998767.exe
c:\users\Simon\AppData\Local\Google\Update\Download\{8A69D345-D564-463C-AFF1-A69D9E530F96}\22.0.1229.96\22.0.1229.96_chrome_installer.exe
c:\users\Simon\AppData\Local\Google\Update\GoogleUpdate.exe
c:\windows\system32\PerfStringBackup.TMP
c:\windows\Tasks\FacebookUpdateTaskUserS-1-5-21-4183527995-4049732787-3813104505-1000Core.job
c:\windows\Tasks\FacebookUpdateTaskUserS-1-5-21-4183527995-4049732787-3813104505-1000UA.job
c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-4183527995-4049732787-3813104505-1000Core.job
c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-4183527995-4049732787-3813104505-1000UA.job
c:\windows\Tasks\OptimizerProUpdaterLogonTask.job
c:\windows\Tasks\OptimizerProUpdaterRefreshTask.job
.
.
((((((((((((((((((((((((((((((((((((((( Ovladače/Služby )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
-------\Service_SkypeUpdate
.
.
((((((((((((((((((((((((( Soubory vytvořené od 2012-10-06 do 2012-11-06 )))))))))))))))))))))))))))))))
.
.
2012-11-06 19:56 . 2012-11-06 19:56 -------- d-----w- c:\users\Public\AppData\Local\temp
2012-11-06 19:56 . 2012-11-06 19:56 -------- d-----w- c:\users\Default\AppData\Local\temp
2012-11-06 14:23 . 2012-11-06 16:18 -------- d-----w- c:\users\Simon\AppData\Local\Adobe
2012-11-06 10:40 . 2012-11-06 10:40 -------- d-----w- c:\users\Simon\AppData\Local\ATI
2012-11-03 23:15 . 2012-11-05 15:14 -------- d-----w- C:\Casino
2012-10-30 08:18 . 2012-10-23 11:18 364096 ----a-w- c:\windows\system32\drivers\aswSP.sys
2012-10-30 08:18 . 2012-10-23 11:18 25232 ----a-w- c:\windows\system32\drivers\aswFsBlk.sys
2012-10-30 08:18 . 2012-10-15 17:59 54072 ----a-w- c:\windows\system32\drivers\aswRdr2.sys
2012-10-30 08:18 . 2012-10-23 11:18 59728 ----a-w- c:\windows\system32\drivers\aswTdi.sys
2012-10-30 08:18 . 2012-10-23 11:18 984144 ----a-w- c:\windows\system32\drivers\aswSnx.sys
2012-10-30 08:18 . 2012-10-23 11:18 71600 ----a-w- c:\windows\system32\drivers\aswMonFlt.sys
2012-10-30 08:18 . 2012-10-23 11:17 41224 ----a-w- c:\windows\avastSS.scr
2012-10-30 08:18 . 2012-10-23 11:17 227648 ----a-w- c:\windows\SysWow64\aswBoot.exe
2012-10-21 20:18 . 2012-10-21 20:19 -------- d-----w- C:\čvut
2012-10-21 11:48 . 2012-10-21 11:58 -------- d-----w- c:\users\Simon\AppData\Roaming\Nero
2012-10-21 11:47 . 2012-10-21 12:45 -------- d-----w- c:\users\Simon\AppData\Local\Nero
2012-10-21 11:46 . 2012-10-21 11:47 -------- d-----w- c:\program files (x86)\Nero
2012-10-21 11:45 . 2012-10-21 11:46 -------- d-----w- c:\program files (x86)\Common Files\Nero
2012-10-21 11:45 . 2012-10-21 11:48 -------- d-----w- c:\programdata\Nero
2012-10-19 21:50 . 2012-10-19 21:50 -------- d-----w- c:\users\Simon\AppData\Local\Kosata6
2012-10-14 08:20 . 2012-11-06 07:39 -------- d-----w- c:\program files (x86)\Nexus Radio
2012-10-10 19:08 . 2012-08-31 18:19 1659760 ----a-w- c:\windows\system32\drivers\ntfs.sys
2012-10-10 11:30 . 2012-09-14 19:19 2048 ----a-w- c:\windows\system32\tzres.dll
2012-10-10 11:30 . 2012-09-14 18:28 2048 ----a-w- c:\windows\SysWow64\tzres.dll
2012-10-10 11:30 . 2012-08-11 00:56 715776 ----a-w- c:\windows\system32\kerberos.dll
2012-10-10 11:30 . 2012-08-10 23:56 542208 ----a-w- c:\windows\SysWow64\kerberos.dll
2012-10-10 11:30 . 2012-06-02 05:41 1464320 ----a-w- c:\windows\system32\crypt32.dll
2012-10-10 11:30 . 2012-06-02 04:36 1159680 ----a-w- c:\windows\SysWow64\crypt32.dll
2012-10-10 11:30 . 2012-06-02 05:41 184320 ----a-w- c:\windows\system32\cryptsvc.dll
2012-10-10 11:30 . 2012-06-02 05:41 140288 ----a-w- c:\windows\system32\cryptnet.dll
2012-10-10 11:30 . 2012-06-02 04:36 140288 ----a-w- c:\windows\SysWow64\cryptsvc.dll
2012-10-10 11:30 . 2012-06-02 04:36 103936 ----a-w- c:\windows\SysWow64\cryptnet.dll
.
.
.
(((((((((((((((((((((((((((((((((((((((( Find3M výpis ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2012-11-05 20:52 . 2012-01-19 15:00 214520 ----a-w- c:\windows\SysWow64\PnkBstrB.exe
2012-11-05 20:52 . 2012-01-19 14:59 214520 ----a-w- c:\windows\SysWow64\PnkBstrB.xtr
2012-10-23 11:17 . 2012-03-15 17:36 285328 ----a-w- c:\windows\system32\aswBoot.exe
2012-10-11 17:10 . 2012-01-20 14:39 65309168 ----a-w- c:\windows\system32\MRT.exe
2012-10-08 22:32 . 2012-04-05 06:27 73656 ----a-w- c:\windows\SysWow64\FlashPlayerCPLApp.cpl
2012-10-08 22:32 . 2012-04-05 06:27 696760 ----a-w- c:\windows\SysWow64\FlashPlayerApp.exe
2012-10-03 10:57 . 2012-10-03 10:57 95208 ----a-w- c:\windows\SysWow64\WindowsAccessBridge-32.dll
2012-10-03 10:57 . 2011-09-07 08:18 746984 ----a-w- c:\windows\SysWow64\deployJava1.dll
2012-09-29 17:54 . 2012-01-19 10:41 25928 ----a-w- c:\windows\system32\drivers\mbam.sys
2012-08-26 21:51 . 2012-08-26 21:52 821736 ----a-w- c:\windows\SysWow64\npDeployJava1.dll
2012-08-24 11:15 . 2012-09-23 14:47 17810944 ----a-w- c:\windows\system32\mshtml.dll
2012-08-24 10:39 . 2012-09-23 14:47 10925568 ----a-w- c:\windows\system32\ieframe.dll
2012-08-24 10:31 . 2012-09-23 14:47 2312704 ----a-w- c:\windows\system32\jscript9.dll
2012-08-24 10:22 . 2012-09-23 14:47 1346048 ----a-w- c:\windows\system32\urlmon.dll
2012-08-24 10:21 . 2012-09-23 14:47 1392128 ----a-w- c:\windows\system32\wininet.dll
2012-08-24 10:20 . 2012-09-23 14:47 1494528 ----a-w- c:\windows\system32\inetcpl.cpl
2012-08-24 10:18 . 2012-09-23 14:47 237056 ----a-w- c:\windows\system32\url.dll
2012-08-24 10:17 . 2012-09-23 14:47 85504 ----a-w- c:\windows\system32\jsproxy.dll
2012-08-24 10:14 . 2012-09-23 14:47 173056 ----a-w- c:\windows\system32\ieUnatt.exe
2012-08-24 10:14 . 2012-09-23 14:47 816640 ----a-w- c:\windows\system32\jscript.dll
2012-08-24 10:13 . 2012-09-23 14:47 599040 ----a-w- c:\windows\system32\vbscript.dll
2012-08-24 10:12 . 2012-09-23 14:47 2144768 ----a-w- c:\windows\system32\iertutil.dll
2012-08-24 10:11 . 2012-09-23 14:47 729088 ----a-w- c:\windows\system32\msfeeds.dll
2012-08-24 10:10 . 2012-09-23 14:47 96768 ----a-w- c:\windows\system32\mshtmled.dll
2012-08-24 10:09 . 2012-09-23 14:47 2382848 ----a-w- c:\windows\system32\mshtml.tlb
2012-08-24 10:04 . 2012-09-23 14:47 248320 ----a-w- c:\windows\system32\ieui.dll
2012-08-24 06:59 . 2012-09-23 14:47 1800704 ----a-w- c:\windows\SysWow64\jscript9.dll
2012-08-24 06:51 . 2012-09-23 14:47 1129472 ----a-w- c:\windows\SysWow64\wininet.dll
2012-08-24 06:51 . 2012-09-23 14:47 1427968 ----a-w- c:\windows\SysWow64\inetcpl.cpl
2012-08-24 06:47 . 2012-09-23 14:47 142848 ----a-w- c:\windows\SysWow64\ieUnatt.exe
2012-08-24 06:47 . 2012-09-23 14:47 420864 ----a-w- c:\windows\SysWow64\vbscript.dll
2012-08-24 06:43 . 2012-09-23 14:47 2382848 ----a-w- c:\windows\SysWow64\mshtml.tlb
2012-08-22 18:12 . 2012-09-23 09:17 1913200 ----a-w- c:\windows\system32\drivers\tcpip.sys
2012-08-22 18:12 . 2012-09-23 09:17 950128 ----a-w- c:\windows\system32\drivers\ndis.sys
2012-08-22 18:12 . 2012-09-23 09:17 376688 ----a-w- c:\windows\system32\drivers\netio.sys
2012-08-22 18:12 . 2012-09-23 09:17 288624 ----a-w- c:\windows\system32\drivers\FWPKCLNT.SYS
2012-08-21 21:01 . 2012-09-26 09:41 245760 ----a-w- c:\windows\system32\OxpsConverter.exe
2012-08-20 17:38 . 2012-10-10 11:31 44032 ----a-w- c:\windows\apppatch\acwow64.dll
.
.
(((((((((((((((((((((((((((((((((((((((((((( Look )))))))))))))))))))))))))))))))))))))))))))))))))))))))))
.
---- Directory of c:\users\Simon\AppData\Local\Kosata6 ----
.
2012-10-19 21:50 . 2012-10-19 21:50 827 ----a-w- c:\users\Simon\AppData\Local\Kosata6\Automatické_Vypnutí_PC.ex_Url_hydy1nxfygcm2tzlebiog4r4skbsi342\2.0.0.0\user.config
.
.
(((((((((((((((((((((((((((((((((( Spouštěcí body v registru )))))))))))))))))))))))))))))))))))))))))))))
.
.
*Poznámka* prázdné záznamy a legitimní výchozí údaje nejsou zobrazeny.
REGEDIT4
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Skype"="c:\program files (x86)\Skype\Phone\Skype.exe" [2012-07-13 17418928]
"Sidebar"="c:\program files\Windows Sidebar\sidebar.exe" [2010-11-21 1475584]
"NokiaSuite.exe"="c:\program files (x86)\Nokia\Nokia Suite\NokiaSuite.exe" [2012-05-16 1084840]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]
"IAStorIcon"="c:\program files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe" [2011-01-13 283160]
"StartCCC"="c:\program files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" [2011-05-08 336384]
"NUSB3MON"="c:\program files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe" [2010-11-17 113288]
"HPConnectionManager"="c:\program files (x86)\Hewlett-Packard\HP Connection Manager\HPCMDelayStart.exe" [2011-02-15 94264]
"HP Quick Launch"="c:\program files (x86)\Hewlett-Packard\HP Quick Launch\HPMSGSVC.exe" [2010-11-09 586296]
"Easybits Recovery"="c:\program files (x86)\EasyBits For Kids\ezRecover.exe" [2011-03-16 61112]
"HPOSD"="c:\program files (x86)\Hewlett-Packard\HP On Screen Display\HPOSD.exe" [2011-01-27 318520]
"NSU_agent"="c:\program files (x86)\Nokia\Nokia Software Updater\nsu3ui_agent.exe" [2011-12-13 190768]
"AdobeCS5ServiceManager"="c:\program files (x86)\Common Files\Adobe\CS5ServiceManager\CS5ServiceManager.exe" [2010-07-22 402432]
"APSDaemon"="c:\program files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe" [2012-05-30 59280]
"SunJavaUpdateSched"="c:\program files (x86)\Common Files\Java\Java Update\jusched.exe" [2012-07-03 252848]
"avast"="c:\program files\AVAST Software\Avast\avastUI.exe" [2012-10-23 4297136]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorAdmin"= 0 (0x0)
"ConsentPromptBehaviorUser"= 3 (0x3)
"EnableLUA"= 0 (0x0)
"EnableUIADesktopToggle"= 0 (0x0)
"PromptOnSecureDesktop"= 0 (0x0)
"HideFastUserSwitching"= 0 (0x0)
.
[hkey_local_machine\software\Wow6432Node\microsoft\windows\currentversion\explorer\ShellExecuteHooks]
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\drivers32]
"mixer3"=wdmaud.drv
HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SunJavaUpdateSched
.
R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2010-03-18 138576]
R2 Freemake Improver;Freemake Improver;c:\programdata\Freemake\FreemakeUtilsService\FreemakeUtilsService.exe [2012-03-20 82944]
R2 HP Support Assistant Service;HP Support Assistant Service;c:\program files (x86)\Hewlett-Packard\HP Support Framework\hpsa_service.exe [2011-09-09 86072]
R3 androidusb;SAMSUNG Android Composite ADB Interface Driver;c:\windows\system32\Drivers\ssadadb.sys [2011-05-13 36328]
R3 ewusbnet;HUAWEI USB-NDIS miniport;c:\windows\system32\DRIVERS\ewusbnet.sys [x]
R3 GamesAppService;GamesAppService;c:\program files (x86)\WildTangent Games\App\GamesAppService.exe [2010-10-12 206072]
R3 hpCMSrv;HP Connection Manager 4.0 Service;c:\program files (x86)\Hewlett-Packard\HP Connection Manager\hpCMSrv.exe [2011-02-15 1071160]
R3 Huawei;HUAWEI Mobile Connect - USB Smart Card Reader;c:\windows\system32\DRIVERS\ewdcsc.sys [x]
R3 hwusbdev;Huawei DataCard USB PNP Device;c:\windows\system32\DRIVERS\ewusbdev.sys [x]
R3 hwusbfake;Huawei DataCard USB Fake;c:\windows\system32\DRIVERS\ewusbfake.sys [x]
R3 intaud_WaveExtensible;Intel WiDi Audio Device;c:\windows\system32\drivers\intelaud.sys [2011-05-17 34200]
R3 MyWiFiDHCPDNS;Wireless PAN DHCP Server;c:\program files\Intel\WiFi\bin\PanDhcpDns.exe [2011-02-04 340240]
R3 nmwcdnsucx64;Nokia USB Flashing Generic;c:\windows\system32\drivers\nmwcdnsucx64.sys [2012-01-09 12800]
R3 nmwcdnsux64;Nokia USB Flashing Phone Parent;c:\windows\system32\drivers\nmwcdnsux64.sys [2012-01-09 171008]
R3 SrvHsfHDA;SrvHsfHDA;c:\windows\system32\DRIVERS\VSTAZL6.SYS [2009-06-10 292864]
R3 SrvHsfV92;SrvHsfV92;c:\windows\system32\DRIVERS\VSTDPV6.SYS [2009-06-10 1485312]
R3 SrvHsfWinac;SrvHsfWinac;c:\windows\system32\DRIVERS\VSTCNXT6.SYS [2009-06-10 740864]
R3 ssadbus;SAMSUNG Android USB Composite Device driver (WDM);c:\windows\system32\DRIVERS\ssadbus.sys [2011-05-13 157672]
R3 ssadmdfl;SAMSUNG Android USB Modem (Filter);c:\windows\system32\DRIVERS\ssadmdfl.sys [2011-05-13 16872]
R3 ssadmdm;SAMSUNG Android USB Modem Drivers;c:\windows\system32\DRIVERS\ssadmdm.sys [2011-05-13 177640]
R3 ssadserd;SAMSUNG Android USB Diagnostic Serial Port (WDM);c:\windows\system32\DRIVERS\ssadserd.sys [2011-05-13 146920]
R3 SwitchBoard;SwitchBoard;c:\program files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [2010-02-19 517096]
R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys [2010-11-21 59392]
R3 TsUsbGD;%TsUsbGD.DeviceDesc.Generic%;c:\windows\system32\drivers\TsUsbGD.sys [2010-11-21 31232]
R3 USBAAPL64;Apple Mobile USB Driver;c:\windows\system32\Drivers\usbaapl64.sys [2012-04-25 52736]
R3 WatAdminSvc;Služba Technologie aktivace Windows;c:\windows\system32\Wat\WatAdminSvc.exe [2012-01-20 1255736]
R3 WinRing0_1_2_0;WinRing0_1_2_0;c:\program files (x86)\IObit\Game Booster 3\Driver\WinRing0x64.sys [2010-11-01 14544]
R4 wlcrasvc;Windows Live Mesh remote connections service;c:\program files\Windows Live\Mesh\wlcrasvc.exe [2010-09-22 57184]
S1 aswSnx;aswSnx; [x]
S1 aswSP;aswSP; [x]
S1 dtsoftbus01;DAEMON Tools Virtual Bus Driver;c:\windows\system32\DRIVERS\dtsoftbus01.sys [2012-01-19 279616]
S2 AESTFilters;Andrea ST Filters Service;c:\program files\IDT\WDM\AESTSr64.exe [2009-03-03 89600]
S2 AMD External Events Utility;AMD External Events Utility;c:\windows\system32\atiesrxx.exe [2011-05-07 203776]
S2 aswFsBlk;aswFsBlk; [x]
S2 aswMonFlt;aswMonFlt;c:\windows\system32\drivers\aswMonFlt.sys [2012-10-23 71600]
S2 Bluetooth Device Monitor;Bluetooth Device Monitor;c:\program files (x86)\Intel\Bluetooth\devmonsrv.exe [2011-01-24 901184]
S2 Bluetooth OBEX Service;Bluetooth OBEX Service;c:\program files (x86)\Intel\Bluetooth\obexsrv.exe [2011-01-24 991296]
S2 cvhsvc;Client Virtualization Handler;c:\program files (x86)\Common Files\Microsoft Shared\Virtualization Handler\CVHSVC.EXE [2010-02-28 821664]
S2 ezSharedSvc;Easybits Services for Windows;c:\windows\System32\ezSharedSvcHost.exe [x]
S2 FPLService;TrueSuiteService;c:\program files (x86)\HP SimplePass 2011\TrueSuiteService.exe [2011-02-17 265544]
S2 Hamachi2Svc;LogMeIn Hamachi Tunneling Engine;c:\program files (x86)\LogMeIn Hamachi\hamachi-2.exe [2012-08-29 2369960]
S2 HPAuto;HP Auto;c:\program files\Hewlett-Packard\HP Auto\HPAuto.exe [2011-02-16 682040]
S2 HPClientSvc;HP Client Services;c:\program files\Hewlett-Packard\HP Client Services\HPClientServices.exe [2010-10-11 346168]
S2 HPDrvMntSvc.exe;HP Quick Synchronization Service;c:\program files (x86)\Hewlett-Packard\Shared\HPDrvMntSvc.exe [2011-03-28 94264]
S2 hpsrv;HP Service;c:\windows\system32\Hpservice.exe [2011-01-26 30520]
S2 HPWMISVC;HPWMISVC;c:\program files (x86)\Hewlett-Packard\HP Quick Launch\HPWMISVC.exe [2010-11-09 26680]
S2 IAStorDataMgrSvc;Úložná technologie Intel(R) Rapid;c:\program files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe [2011-01-13 13336]
S2 NAUpdate;Nero Update;c:\program files (x86)\Nero\Update\NASvc.exe [2011-11-25 687400]
S2 PanService;PandoraService;c:\program files (x86)\PANDORA.TV\PanService\PandoraService.exe [2012-06-22 625816]
S2 sftlist;Application Virtualization Client;c:\program files (x86)\Microsoft Application Virtualization Client\sftlist.exe [2009-12-02 483688]
S2 TeamViewer7;TeamViewer 7;c:\program files (x86)\TeamViewer\Version7\TeamViewer_Service.exe [2012-03-19 2666880]
S2 UNS;Intel(R) Management and Security Application User Notification Service;c:\program files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe [2010-12-22 2656280]
S2 Web Assistant Updater;Web Assistant Updater;c:\program files\Web Assistant\ExtensionUpdaterService.exe [2012-05-01 185856]
S3 Bluetooth Media Service;Bluetooth Media Service;c:\program files (x86)\Intel\Bluetooth\mediasrv.exe [2011-01-24 1298496]
S3 btmaux;Intel Bluetooth Auxiliary Service;c:\windows\system32\DRIVERS\btmaux.sys [2011-01-24 58128]
S3 btmhsf;btmhsf;c:\windows\system32\DRIVERS\btmhsf.sys [2011-01-24 274944]
S3 clwvd;CyberLink WebCam Virtual Driver;c:\windows\system32\DRIVERS\clwvd.sys [2010-07-28 31088]
S3 iBtFltCoex;iBtFltCoex;c:\windows\system32\DRIVERS\iBtFltCoex.sys [2011-01-24 59904]
S3 IntcDAud;Intel(R) Display Audio;c:\windows\system32\DRIVERS\IntcDAud.sys [2010-10-14 317440]
S3 intelkmd;intelkmd;c:\windows\system32\DRIVERS\igdpmd64.sys [2011-04-15 12228128]
S3 iwdbus;IWD Bus Enumerator;c:\windows\system32\DRIVERS\iwdbus.sys [2011-05-17 25496]
S3 nusb3hub;Renesas Electronics USB 3.0 Hub Driver;c:\windows\system32\DRIVERS\nusb3hub.sys [2010-12-10 80384]
S3 nusb3xhc;Renesas Electronics USB 3.0 Host Controller Driver;c:\windows\system32\DRIVERS\nusb3xhc.sys [2010-12-10 181248]
S3 RSPCIESTOR;Realtek PCIE CardReader Driver;c:\windows\system32\DRIVERS\RtsPStor.sys [2011-01-13 333928]
S3 RTL8167;Realtek 8167 NT Driver;c:\windows\system32\DRIVERS\Rt64win7.sys [2011-02-17 428136]
S3 Sftfs;Sftfs;c:\windows\system32\DRIVERS\Sftfslh.sys [2009-12-02 721768]
S3 Sftplay;Sftplay;c:\windows\system32\DRIVERS\Sftplaylh.sys [2009-12-02 269672]
S3 Sftredir;Sftredir;c:\windows\system32\DRIVERS\Sftredirlh.sys [2009-12-02 25960]
S3 Sftvol;Sftvol;c:\windows\system32\DRIVERS\Sftvollh.sys [2009-12-02 22376]
S3 sftvsa;Application Virtualization Service Agent;c:\program files (x86)\Microsoft Application Virtualization Client\sftvsa.exe [2009-12-02 209768]
.
.
Obsah adresáře 'Naplánované úlohy'
.
2012-11-06 c:\windows\Tasks\Adobe Flash Player Updater.job
- c:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2012-04-05 22:32]
.
2012-11-06 c:\windows\Tasks\HPCeeScheduleForSIMON-HP$.job
- c:\program files (x86)\Hewlett-Packard\HP Ceement\HPCEE.exe [2010-09-13 20:15]
.
2012-11-02 c:\windows\Tasks\HPCeeScheduleForSimon.job
- c:\program files (x86)\Hewlett-Packard\HP Ceement\HPCEE.exe [2010-09-13 20:15]
.
.
--------- X64 Entries -----------
.
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\00avast]
@="{472083B0-C522-11CF-8763-00608CC02F24}"
[HKEY_CLASSES_ROOT\CLSID\{472083B0-C522-11CF-8763-00608CC02F24}]
2012-10-23 11:17 133400 ----a-w- c:\program files\AVAST Software\Avast\ashShA64.dll
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"IgfxTray"="c:\windows\system32\igfxtray.exe" [2011-04-15 168216]
"HotKeysCmds"="c:\windows\system32\hkcmd.exe" [2011-04-15 392472]
"Persistence"="c:\windows\system32\igfxpers.exe" [2011-04-15 416024]
"SysTrayApp"="c:\program files\IDT\WDM\sttray64.exe" [2011-03-11 1128448]
"IntelWireless"="c:\program files\Common Files\Intel\WirelessCommon\iFrmewrk.exe" [2011-02-04 1933584]
"AdobeAAMUpdater-1.0"="c:\program files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe" [2012-09-20 444904]
"BTMTrayAgent"="c:\program files (x86)\Intel\Bluetooth\btmshell.dll" [2011-01-24 10355200]
.
------- Doplňkový sken -------
.
uLocal Page = %SystemRoot%\system32\blank.htm
mLocal Page = %SystemRoot%\system32\blank.htm
uSearchAssistant =
hxxp://www.google.com/ieuSearchURL,(Default) =
hxxp://www.google.com/search?q=%s
IE: Add to Google Photos Screensa&ver - c:\windows\system32\GPhotos.scr/200
IE: {{77F665FD-3F60-4B0A-AE14-EC124B7A7FCE} - c:\program files (x86)\ICQ7.7\ICQ.exe
Trusted Zone: mojebanka.cz\*
Trusted Zone: mojebanka.cz\*
FF - ProfilePath - c:\users\Simon\AppData\Roaming\Mozilla\Firefox\Profiles\suv3h9n0.default\
.
- - - - NEPLATNÉ POLOŽKY ODSTRANĚNÉ Z REGISTRU - - - -
.
BHO-{F9E4A054-E9B1-4BC3-83A3-76A1AE736170} - (no file)
WebBrowser-{687578B9-7132-4A7A-80E4-30EE31099E03} - (no file)
AddRemove-Adobe Shockwave Player - c:\windows\system32\Adobe\Shockwave 11\uninstaller.exe
AddRemove-PunkBusterSvc - c:\windows\system32\pbsvc.exe
AddRemove-Shockwave - c:\windows\System32\Macromed\SHOCKW~1\UNWISE.EXE
AddRemove-{6F44AF95-3CDE-4513-AD3F-6D45F17BF324} - c:\program files (x86)\InstallShield Installation Information\{6F44AF95-3CDE-4513-AD3F-6D45F17BF324}\setup.exe
.
.
.
--------------------- ZAMKNUTÉ KLÍČE V REGISTRU ---------------------
.
[HKEY_USERS\S-1-5-21-4183527995-4049732787-3813104505-1000\Software\SecuROM\License information*]
"datasecu"=hex:96,7e,2d,b2,cc,38,c1,2f,db,7d,e0,63,bb,fe,4c,0d,a4,96,b8,b6,d6,
ad,1f,b7,8f,9c,c5,f6,c6,a9,cb,dd,d0,46,bd,4d,ee,3c,d3,de,07,79,aa,9e,96,1d,\
"rkeysecu"=hex:ee,7a,8a,6f,f4,77,a6,21,07,02,f9,8e,d4,a5,36,a8
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil64_11_4_402_287_ActiveX.exe,-101"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\Elevation]
"Enabled"=dword:00000001
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\LocalServer32]
@="c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil64_11_4_402_287_ActiveX.exe"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="IFlashBroker5"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
.
------------------------ Jiné spuštené procesy ------------------------
.
c:\program files\AVAST Software\Avast\AvastSvc.exe
c:\program files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
c:\program files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
c:\windows\SysWOW64\ezSharedSvcHost.exe
c:\program files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe
c:\program files (x86)\Canon\IJPLM\IJPLMSVC.EXE
c:\windows\SysWOW64\PnkBstrA.exe
c:\windows\SysWOW64\PnkBstrB.exe
c:\program files (x86)\Yahoo!\SoftwareUpdate\YahooAUService.exe
c:\program files (x86)\Hewlett-Packard\Shared\hpqWmiEx.exe
c:\program files (x86)\PC Connectivity Solution\ServiceLayer.exe
c:\program files (x86)\PC Connectivity Solution\Transports\NclMSBTSrvEx.exe
c:\program files (x86)\Intel\Bluetooth\BTPlayerCtrl.exe
c:\program files (x86)\Google\Update\GoogleUpdate.exe
c:\program files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
.
**************************************************************************
.
Celkový čas: 2012-11-06 21:04:22 - počítač byl restartován
ComboFix-quarantined-files.txt 2012-11-06 20:04
ComboFix2.txt 2012-11-06 10:47
.
Před spuštěním: Volných bajtů: 639 389 487 104
Po spuštění: Volných bajtů: 639 134 867 456
.
- - End Of File - - 818A5FD40341CBDEA482EFB85B62C55C
