ComboFix 13-04-11.01 - George 12.04.2013 7:42.1.2 - x64 Microsoft Windows 7 Home Premium 6.1.7600.0.1250.420.1029.18.4026.2699 [GMT 2:00] Spuštěný z: c:\users\George\Desktop\ComboFix.exe AV: ESET Smart Security 5.0 *Enabled/Updated* {77DEAFED-8149-104B-25A1-21771CA47CD1} FW: ESET personal firewall *Enabled* {4FE52EC8-CB26-1113-0EFE-8842E2773BAA} SP: ESET Smart Security 5.0 *Enabled/Updated* {CCBF4E09-A773-1FC5-1F11-1A056723366C} SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} * Vytvořen nový Bod Obnovení * Rezidentní štít AV je zapnutý . . . ((((((((((((((((((((((((((((((((((((((( Ostatní výmazy ))))))))))))))))))))))))))))))))))))))))))))))))) . . c:\programdata\FullRemove.exe c:\users\Public\Documents\NTILiveUpdateV9.dll c:\users\Public\Documents\NTIMMV9Acer.dll c:\users\Public\Documents\NTIMMV9REGET.dll c:\users\Public\Documents\NTIMPEG-2.dll . . ((((((((((((((((((((((((( Soubory vytvořené od 2013-03-12 do 2013-04-12 ))))))))))))))))))))))))))))))) . . 2013-04-12 05:52 . 2013-04-12 05:52 -------- d-----w- c:\users\Default\AppData\Local\temp 2013-04-11 06:31 . 2013-04-11 06:31 -------- d-----w- c:\program files (x86)\Nattyware 2013-04-09 15:21 . 2013-04-09 15:22 -------- d-----w- c:\program files\WinRAR 2013-04-09 10:10 . 2013-04-09 10:10 564824 ----a-w- c:\windows\system32\drivers\sptd.sys 2013-04-09 09:37 . 2013-04-09 09:40 -------- d-----w- c:\programdata\DAEMON Tools Lite 2013-04-08 07:37 . 2013-03-15 06:28 9311288 ----a-w- c:\programdata\Microsoft\Windows Defender\Definition Updates\{8B681735-A88A-4FEA-A3DB-BF2415EDF3EA}\mpengine.dll 2013-04-07 17:08 . 2013-04-07 17:08 9728 ----a-w- c:\windows\SysWow64\sscore.dll 2013-04-07 17:08 . 2013-04-07 17:08 463360 ----a-w- c:\windows\system32\drivers\srv.sys 2013-04-07 17:08 . 2013-04-07 17:08 402944 ----a-w- c:\windows\system32\drivers\srv2.sys 2013-04-07 17:08 . 2013-04-07 17:08 236032 ----a-w- c:\windows\system32\srvsvc.dll 2013-04-07 17:08 . 2013-04-07 17:08 161792 ----a-w- c:\windows\system32\drivers\srvnet.sys 2013-04-07 17:08 . 2013-04-07 17:08 483840 ----a-w- c:\windows\system32\StructuredQuery.dll 2013-04-07 17:08 . 2013-04-07 17:08 363520 ----a-w- c:\windows\SysWow64\StructuredQuery.dll 2013-04-07 17:08 . 2013-04-07 17:08 243712 ----a-w- c:\windows\system32\drivers\ks.sys 2013-04-07 17:08 . 2013-04-07 17:08 184832 ----a-w- c:\windows\system32\drivers\usbvideo.sys 2013-04-07 17:07 . 2013-04-07 17:07 558592 ----a-w- c:\windows\system32\spoolsv.exe 2013-04-07 17:04 . 2013-04-07 17:04 976896 ----a-w- c:\windows\system32\inetcomm.dll 2013-04-07 17:04 . 2013-04-07 17:04 740864 ----a-w- c:\windows\SysWow64\inetcomm.dll 2013-04-07 17:04 . 2013-04-07 17:04 2080256 ----a-w- c:\program files\Windows Mail\msoe.dll 2013-04-07 17:04 . 2013-04-07 17:04 1619968 ----a-w- c:\program files (x86)\Windows Mail\msoe.dll 2013-04-07 17:03 . 2013-04-07 17:03 223448 ----a-w- c:\windows\system32\drivers\fvevol.sys 2013-04-07 13:44 . 2013-04-07 13:44 -------- d-----w- c:\program files\ESET 2013-04-05 13:33 . 2013-04-07 11:10 -------- d-----w- c:\program files (x86)\Euro Truck Simulator 2-1,1,1 2013-04-04 07:19 . 2009-12-14 13:25 57344 ----a-w- c:\windows\SysWow64\Wnaspint.dll 2013-04-04 07:18 . 2013-04-04 07:18 -------- d-----w- c:\program files (x86)\Acoustica Shared Effects 2013-04-04 07:18 . 2013-04-04 07:19 -------- d-----w- c:\program files (x86)\Acoustica Mixcraft 5 2013-04-04 07:18 . 2013-04-04 07:18 -------- d-----w- c:\programdata\Acoustica 2013-04-04 07:18 . 2013-04-04 07:18 -------- d-----w- c:\program files (x86)\VST 2013-04-02 10:35 . 2013-04-02 11:46 -------- d-----w- c:\program files (x86)\ffdshow 2013-04-02 09:15 . 2009-11-25 19:47 49472 ----a-w- c:\windows\SysWow64\netfxperf.dll 2013-04-02 09:15 . 2009-11-25 19:47 297808 ----a-w- c:\windows\SysWow64\mscoree.dll 2013-04-02 09:15 . 2009-11-25 19:47 99176 ----a-w- c:\windows\SysWow64\PresentationHostProxy.dll 2013-04-02 09:15 . 2009-11-25 19:47 48960 ----a-w- c:\windows\system32\netfxperf.dll 2013-04-02 09:15 . 2009-11-25 19:47 295264 ----a-w- c:\windows\SysWow64\PresentationHost.exe 2013-04-02 09:15 . 2009-11-25 19:47 1130824 ----a-w- c:\windows\SysWow64\dfshim.dll 2013-04-02 09:15 . 2009-11-25 19:47 109912 ----a-w- c:\windows\system32\PresentationHostProxy.dll 2013-04-02 09:15 . 2009-11-25 19:47 320352 ----a-w- c:\windows\system32\PresentationHost.exe 2013-04-02 09:15 . 2009-11-25 19:47 1942856 ----a-w- c:\windows\system32\dfshim.dll 2013-04-02 09:15 . 2009-11-25 19:47 444752 ----a-w- c:\windows\system32\mscoree.dll 2013-04-02 09:15 . 2013-04-02 09:15 -------- d-----w- c:\programdata\Razer 2013-04-02 09:15 . 2013-04-02 09:15 -------- d-----w- c:\program files (x86)\Razer 2013-04-02 09:13 . 2013-04-02 09:13 -------- d-----w- C:\ab9f6f6f4b09f52fe9a51554 2013-04-01 16:48 . 2013-04-01 16:48 -------- d-----w- c:\program files (x86)\Eusing Free MP3 Cutter 2013-04-01 16:48 . 2007-10-24 16:57 835584 ----a-w- c:\windows\SysWow64\NCTAudioCDGrabber2.dll 2013-04-01 16:48 . 2007-10-24 16:57 1986560 ----a-w- c:\windows\SysWow64\NCTAudioFile2.dll 2013-04-01 16:48 . 2007-10-16 13:38 1212416 ----a-w- c:\windows\SysWow64\NCTAudioInformation2.dll 2013-04-01 16:48 . 2005-02-24 09:51 348160 ----a-w- c:\windows\SysWow64\NCTWMAFile2.dll 2013-04-01 16:48 . 2003-08-07 13:01 237568 ----a-w- c:\windows\SysWow64\lame_enc.dll 2013-04-01 16:48 . 2013-04-01 16:48 -------- d-----w- c:\program files (x86)\Free Mp3WmaOgg Converter 2013-03-29 16:45 . 2012-05-08 17:34 32600 ----a-w- c:\windows\system32\SmartDefragBootTime.exe 2013-03-29 16:45 . 2010-11-26 17:02 17720 ----a-w- c:\windows\system32\drivers\SmartDefragDriver.sys 2013-03-26 16:11 . 2013-03-26 16:11 73432 ----a-w- c:\windows\SysWow64\FlashPlayerCPLApp.cpl 2013-03-26 16:11 . 2013-03-26 16:11 693976 ----a-w- c:\windows\SysWow64\FlashPlayerApp.exe 2013-03-26 16:11 . 2013-03-26 16:11 -------- d-----w- c:\windows\system32\Macromed 2013-03-24 23:23 . 2013-03-24 23:23 -------- d-----w- c:\windows\Sun 2013-03-24 23:22 . 2013-03-24 23:22 -------- d-----w- c:\program files (x86)\Common Files\Java 2013-03-24 23:22 . 2013-03-24 23:22 861088 ----a-w- c:\windows\SysWow64\npDeployJava1.dll 2013-03-24 23:22 . 2013-03-24 23:22 782240 ----a-w- c:\windows\SysWow64\deployJava1.dll 2013-03-24 23:22 . 2013-03-24 23:22 95648 ----a-w- c:\windows\SysWow64\WindowsAccessBridge-32.dll 2013-03-24 23:22 . 2013-03-24 23:22 -------- d-----w- c:\program files (x86)\Java 2013-03-23 15:23 . 2013-03-23 15:23 -------- d-----w- c:\program files (x86)\Common Files\xing shared 2013-03-23 15:23 . 2013-03-23 15:23 -------- d-----w- c:\program files (x86)\Real 2013-03-21 12:27 . 2013-03-21 14:41 -------- d-----w- c:\program files (x86)\Speed Wheel 5 Pro 2013-03-21 12:27 . 2013-03-21 14:41 -------- d-----w- c:\windows\Arkino12 2013-03-21 09:43 . 2013-03-21 09:43 -------- d-----w- c:\program files (x86)\AIMP3 2013-03-20 15:01 . 2013-03-20 15:01 48648 ----a-w- c:\programdata\Microsoft\eHome\Packages\MCEClientUX\UpdateableMarkup\Markup.dll 2013-03-19 12:23 . 2013-04-02 11:39 -------- d-----w- c:\program files (x86)\Fraps 2013-03-19 12:03 . 2013-03-19 12:19 -------- d--h--w- c:\windows\msdownld.tmp 2013-03-19 11:29 . 2013-03-19 11:29 -------- d-----w- c:\program files (x86)\HELP 2013-03-19 11:27 . 2013-03-19 11:53 -------- d-----w- c:\program files (x86)\Screenshots 2013-03-19 10:15 . 2013-03-19 11:42 -------- d-----w- c:\program files (x86)\SMRecorder 2013-03-17 06:35 . 2013-03-17 06:35 -------- d-----w- c:\program files (x86)\Cheat Engine 6.2 2013-03-15 12:02 . 2013-03-15 12:02 -------- d-----w- c:\program files (x86)\Seznam.cz 2013-03-15 11:07 . 2013-03-15 11:07 -------- d-----w- c:\windows\SysWow64\C2MP 2013-03-15 10:00 . 2012-08-17 09:38 773968 ----a-w- c:\windows\system32\msvcr100.dll 2013-03-15 09:29 . 2013-03-15 09:29 -------- d-----w- c:\program files (x86)\Common Files\GeoVid 2013-03-15 09:29 . 2005-06-07 14:11 60416 ----a-w- c:\windows\SysWow64\dsetup.dll 2013-03-15 09:29 . 2004-08-18 14:00 1712128 ----a-w- c:\windows\SysWow64\gdiplus.dll 2013-03-15 09:29 . 2003-03-19 07:19 1060864 ----a-w- c:\windows\SysWow64\mfc71.dll 2013-03-15 09:29 . 2003-03-19 07:12 1047552 ----a-w- c:\windows\SysWow64\mfc71u.dll 2013-03-15 09:29 . 2003-03-19 05:05 89088 ----a-w- c:\windows\SysWow64\atl71.dll 2013-03-15 08:46 . 2013-03-15 09:53 -------- d-----w- c:\program files (x86)\GeoVid 2013-03-15 07:49 . 2013-03-15 07:49 -------- d-----w- c:\programdata\Zoner 2013-03-15 07:48 . 2013-03-15 07:48 -------- d-----w- c:\program files\Zoner 2013-03-15 06:57 . 2013-03-15 06:57 -------- d-----w- C:\Graphics 2013-03-15 06:57 . 2006-06-17 11:52 104448 ------w- c:\windows\SysWow64\mwdds.dll 2013-03-15 06:57 . 2006-06-17 10:44 183296 ------w- c:\windows\SysWow64\mwgfx.dll 2013-03-15 06:57 . 2005-11-13 00:28 238080 ------w- c:\windows\SysWow64\mwgfx24.dll 2013-03-15 06:57 . 2004-05-14 10:13 56832 ------w- c:\windows\SysWow64\mwace.dll 2013-03-13 15:56 . 2013-03-13 15:56 -------- d-----w- c:\windows\SysWow64\cs 2013-03-13 15:56 . 2013-03-13 15:56 -------- d-----w- c:\windows\SysWow64\XPSViewer 2013-03-13 15:56 . 2013-03-13 15:56 -------- d-----w- c:\windows\SysWow64\wbem\cs-CZ 2013-03-13 15:56 . 2013-03-13 15:56 -------- d-----w- c:\windows\SysWow64\drivers\cs-CZ 2013-03-13 15:56 . 2013-03-13 15:56 -------- d-----w- c:\windows\system32\cs 2013-03-13 15:56 . 2013-03-13 15:56 -------- d-----w- c:\windows\cs-CZ 2013-03-13 15:56 . 2013-03-13 15:56 -------- d-----w- c:\windows\system32\drivers\UMDF\cs-CZ 2013-03-13 15:56 . 2013-03-13 15:56 -------- d-----w- c:\windows\system32\drivers\cs-CZ 2013-03-13 15:56 . 2013-03-13 15:56 -------- d-----w- c:\windows\system32\wbem\cs-CZ 2013-03-13 15:55 . 2013-03-13 15:55 3584 ----a-w- c:\windows\system32\Spool\prtprocs\x64\cs-CZ\LXKPTPRC.DLL.mui 2013-03-13 15:51 . 2013-03-13 15:51 -------- d-----w- c:\windows\NAPP_Dism_Log 2013-03-13 10:42 . 2013-03-11 23:10 282744 ------w- c:\windows\system32\MpSigStub.exe 2013-03-13 10:24 . 2013-03-13 10:24 -------- d-----w- c:\program files\PlayReady 2013-03-13 10:01 . 2013-03-13 10:01 -------- d-----w- c:\program files\Ufonuv Internet 2013-03-13 10:01 . 2013-03-13 10:01 -------- d-----w- c:\program files (x86)\Wireless modem driver 2013-03-13 09:12 . 2013-03-13 09:12 -------- d-----r- c:\program files (x86)\Skype 2013-03-13 09:12 . 2013-03-13 09:12 -------- d-----w- c:\program files (x86)\Common Files\Skype 2013-03-13 09:11 . 2013-03-13 09:12 -------- d-----w- c:\programdata\Skype 2013-03-13 09:11 . 2013-03-13 09:11 -------- d-----w- C:\MyWinLockerData 2013-03-13 08:27 . 2012-02-23 13:24 24408 ----a-w- c:\windows\system32\RegistryDefragBootTime.exe 2013-03-13 08:11 . 2013-03-28 14:14 -------- d-----w- c:\program files (x86)\Google 2013-03-13 08:07 . 2013-04-02 10:35 -------- d-----w- c:\programdata\IObit 2013-03-13 08:06 . 2013-04-02 11:46 -------- d-----w- c:\program files (x86)\IObit 2013-03-13 08:02 . 2012-06-02 22:19 57880 ----a-w- c:\windows\system32\wuauclt.exe 2013-03-13 08:02 . 2012-06-02 22:19 44056 ----a-w- c:\windows\system32\wups2.dll 2013-03-13 08:02 . 2012-06-02 22:15 2622464 ----a-w- c:\windows\system32\wucltux.dll 2013-03-13 08:02 . 2012-06-02 22:19 2428952 ----a-w- c:\windows\system32\wuaueng.dll 2013-03-13 08:02 . 2012-06-02 22:19 38424 ----a-w- c:\windows\system32\wups.dll 2013-03-13 08:02 . 2012-06-02 22:15 99840 ----a-w- c:\windows\system32\wudriver.dll 2013-03-13 08:02 . 2012-06-02 22:19 701976 ----a-w- c:\windows\system32\wuapi.dll 2013-03-13 08:02 . 2012-06-02 14:19 186752 ----a-w- c:\windows\system32\wuwebv.dll 2013-03-13 08:02 . 2012-06-02 14:15 36864 ----a-w- c:\windows\system32\wuapp.exe 2013-03-13 07:59 . 2013-03-13 07:59 -------- d-----w- c:\users\Public\CyberLink 2013-03-13 07:58 . 2013-03-13 07:59 -------- d-----w- c:\programdata\CyberLink 2013-03-13 07:58 . 2009-11-06 02:22 154112 ----a-w- c:\windows\system32\drivers\adusbser.sys 2013-03-13 07:58 . 2013-03-13 07:58 -------- d-----w- c:\program files\DIFX . . (((((((((((((((((((((((((((((((((((((((( Find3M výpis )))))))))))))))))))))))))))))))))))))))))))))))))))) . 2013-03-13 15:55 . 2013-03-13 15:55 2560 ----a-w- c:\windows\SysWow64\drivers\cs-CZ\qwavedrv.sys.mui 2013-03-13 15:55 . 2013-03-13 15:55 2560 ----a-w- c:\windows\SysWow64\drivers\cs-CZ\scfilter.sys.mui 2013-03-13 15:55 . 2013-03-13 15:55 5632 ----a-w- c:\windows\SysWow64\drivers\cs-CZ\ndiscap.sys.mui 2013-03-13 15:55 . 2013-03-13 15:55 50176 ----a-w- c:\windows\SysWow64\drivers\cs-CZ\tcpip.sys.mui 2013-03-13 15:55 . 2013-03-13 15:55 27136 ----a-w- c:\windows\SysWow64\drivers\cs-CZ\bfe.dll.mui 2013-03-13 15:55 . 2013-03-13 15:55 15360 ----a-w- c:\windows\SysWow64\drivers\cs-CZ\pacer.sys.mui 2013-02-26 06:55 . 2013-02-26 06:55 71680 ----a-w- c:\windows\system32\frapsv64.dll 2013-02-26 06:55 . 2013-02-26 06:55 65536 ----a-w- c:\windows\SysWow64\frapsvid.dll . . (((((((((((((((((((((((((((((((((( Spouštěcí body v registru ))))))))))))))))))))))))))))))))))))))))))))) . . *Poznámka* prázdné záznamy a legitimní výchozí údaje nejsou zobrazeny. REGEDIT4 . [HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\egisPSDP] @="{30A0A3F6-38AC-4C53-BB8B-0D95238E25BA}" [HKEY_CLASSES_ROOT\CLSID\{30A0A3F6-38AC-4C53-BB8B-0D95238E25BA}] 2010-05-27 02:40 120176 ----a-w- c:\program files (x86)\EgisTec MyWinLocker\x86\PSDProtect.dll . [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "Advanced SystemCare 5"="c:\program files (x86)\IObit\Advanced SystemCare 5\ASCTray.exe" [2012-03-06 574296] "egui.exe"="c:\program files\ESET\ESET Smart Security\egui.exe" [2011-09-08 4030008] "Zoner Photo Studio Autoupdate"="c:\program files\ZONER\PHOTO STUDIO 15\Program32\ZPSTRAY.EXE" [2013-02-18 774168] . c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\ $McRebootA5E6DEAA56$.lnk - [N/A] . [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system] "ConsentPromptBehaviorAdmin"= 0 (0x0) "ConsentPromptBehaviorUser"= 3 (0x3) "EnableLUA"= 0 (0x0) "EnableUIADesktopToggle"= 0 (0x0) "PromptOnSecureDesktop"= 0 (0x0) . [HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\drivers32] "aux"=wdmaud.drv . [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MCODS] @="" . R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2010-03-18 138576] R2 mfefire;McAfee Firewall Core Service;c:\program files\Common Files\McAfee\SystemCore\\mfefire.exe [2010-01-06 244840] R2 SkypeUpdate;Skype Updater;c:\program files (x86)\Skype\Updater\Updater.exe [2013-02-07 161384] R3 cfwids;McAfee Inc. cfwids;c:\windows\system32\drivers\cfwids.sys [2010-01-06 62416] R3 RSUSBSTOR;RtsUStor.Sys Realtek USB Card Reader;c:\windows\System32\Drivers\RtsUStor.sys [2010-05-24 246304] R3 WinRing0_1_2_0;WinRing0_1_2_0;c:\program files (x86)\IObit\Game Booster 3\Driver\WinRing0x64.sys [2010-11-01 14544] S0 epfwwfp;epfwwfp;c:\windows\system32\DRIVERS\epfwwfp.sys [2011-08-04 62496] S0 mfewfpk;McAfee Inc. mfewfpk;c:\windows\system32\drivers\mfewfpk.sys [2010-01-06 279752] S0 SmartDefragDriver;SmartDefragDriver;c:\windows\System32\Drivers\SmartDefragDriver.sys [2010-11-26 17720] S0 sptd;sptd;c:\windows\\SystemRoot\System32\Drivers\sptd.sys [x] S1 ehdrv;ehdrv;c:\windows\system32\DRIVERS\ehdrv.sys [2011-08-04 146432] S1 EpfwLWF;Epfw NDIS LightWeight Filter;c:\windows\system32\DRIVERS\EpfwLWF.sys [2011-08-04 38288] S1 mfenlfk;McAfee NDIS Light Filter;c:\windows\system32\DRIVERS\mfenlfk.sys [2010-01-06 75288] S1 mwlPSDFilter;mwlPSDFilter;c:\windows\system32\DRIVERS\mwlPSDFilter.sys [2009-06-03 22576] S1 mwlPSDNServ;mwlPSDNServ;c:\windows\system32\DRIVERS\mwlPSDNServ.sys [2009-06-03 20016] S1 mwlPSDVDisk;mwlPSDVDisk;c:\windows\system32\DRIVERS\mwlPSDVDisk.sys [2009-06-03 60464] S2 AdvancedSystemCareService5;Advanced SystemCare Service 5;c:\program files (x86)\IObit\Advanced SystemCare 5\ASCService.exe [2012-03-14 913752] S2 DsiWMIService;Dritek WMI Service;c:\program files (x86)\Launch Manager\dsiwmis.exe [2010-08-10 321104] S2 eamonm;eamonm;c:\windows\system32\DRIVERS\eamonm.sys [2011-08-09 202576] S2 ekrn;ESET Service;c:\program files\ESET\ESET Smart Security\x86\ekrn.exe [2011-09-08 974944] S2 ePowerSvc;Acer ePower Service;c:\program files\Acer\Acer ePower Management\ePowerSvc.exe [2010-06-11 868896] S2 GREGService;GREGService;c:\program files (x86)\Acer\Registration\GREGsvc.exe [2010-01-08 23584] S2 IAStorDataMgrSvc;Intel(R) Rapid Storage Technology;c:\program files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe [2010-04-13 13336] S2 mfevtp;McAfee Validation Trust Protection Service;c:\program files\Common Files\McAfee\SystemCore\mfevtps.exe [2010-01-06 148520] S2 MWLService;MyWinLocker Service;c:\program files (x86)\EgisTec MyWinLocker\x86\MWLService.exe [2010-05-27 305520] S2 NTI IScheduleSvc;NTI IScheduleSvc;c:\program files (x86)\NewTech Infosystems\Acer Backup Manager\IScheduleSvc.exe [2010-06-28 255744] S2 RealNetworks Downloader Resolver Service;RealNetworks Downloader Resolver Service;c:\program files (x86)\RealNetworks\RealDownloader\rndlresolversvc.exe [2013-03-06 39056] S2 Updater Service;Updater Service;c:\program files\Acer\Acer Updater\UpdaterService.exe [2010-01-28 243232] S3 adusbser;AnyDATA USB Device for Legacy Serial Communication;c:\windows\system32\DRIVERS\adusbser.sys [2009-11-06 154112] S3 AVerAF35;AVerMedia A835 USB DVB-T;c:\windows\system32\Drivers\AVerAF35.sys [2010-03-16 677632] S3 IntcHdmiAddService;Intel(R) High Definition Audio HDMI;c:\windows\system32\drivers\IntcHdmi.sys [2009-07-09 139264] S3 k57nd60a;Broadcom NetLink (TM) Gigabit Ethernet - NDIS 6.0;c:\windows\system32\DRIVERS\k57nd60a.sys [2010-05-14 384040] . . --- Ostatní služby/ovladače v paměti --- . *NewlyCreated* - WS2IFSL . [HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\active setup\installed components\{8A69D345-D564-463c-AFF1-A69D9E530F96}] 2013-04-11 05:17 1642448 ----a-w- c:\program files (x86)\Google\Chrome\Application\26.0.1410.64\Installer\chrmstp.exe . Obsah adresáře 'Naplánované úlohy' . 2013-04-12 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job - c:\program files (x86)\Google\Update\GoogleUpdate.exe [2013-03-13 08:11] . 2013-04-11 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job - c:\program files (x86)\Google\Update\GoogleUpdate.exe [2013-03-13 08:11] . . --------- X64 Entries ----------- . . [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\egisPSDP] @="{30A0A3F6-38AC-4C53-BB8B-0D95238E25BA}" [HKEY_CLASSES_ROOT\CLSID\{30A0A3F6-38AC-4C53-BB8B-0D95238E25BA}] 2010-05-27 02:42 137584 ----a-w- c:\program files (x86)\EgisTec MyWinLocker\x64\PSDProtect.dll . [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "egui"="c:\program files\ESET\ESET Smart Security\egui.exe" [2011-09-08 4030008] . ------- Doplňkový sken ------- . uStart Page = hxxp://acer.msn.com uLocal Page = c:\windows\system32\blank.htm mDefault_Page_URL = hxxp://acer.msn.com mStart Page = hxxp://acer.msn.com mLocal Page = c:\windows\SysWOW64\blank.htm TCP: Interfaces\{BC046E11-BED5-4414-96CC-C76041B35B2A}: NameServer = 78.136.128.4 78.136.128.12 . - - - - NEPLATNÉ POLOŽKY ODSTRANĚNÉ Z REGISTRU - - - - . Toolbar-Locked - (no file) Toolbar-Locked - (no file) . . . --------------------- ZAMKNUTÉ KLÍČE V REGISTRU --------------------- . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}] @Denied: (A 2) (Everyone) @="FlashBroker" "LocalizedString"="@c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil10i_ActiveX.exe,-101" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\Elevation] "Enabled"=dword:00000001 . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\LocalServer32] @="c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil10i_ActiveX.exe" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\TypeLib] @="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}] @Denied: (A 2) (Everyone) @="Shockwave Flash Object" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\InprocServer32] @="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash10i.ocx" "ThreadingModel"="Apartment" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\MiscStatus] @="0" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ProgID] @="ShockwaveFlash.ShockwaveFlash.10" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32] @="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash10i.ocx, 1" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\TypeLib] @="{D27CDB6B-AE6D-11cf-96B8-444553540000}" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\Version] @="1.0" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID] @="ShockwaveFlash.ShockwaveFlash" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}] @Denied: (A 2) (Everyone) @="Macromedia Flash Factory Object" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\InprocServer32] @="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash10i.ocx" "ThreadingModel"="Apartment" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ProgID] @="FlashFactory.FlashFactory.1" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32] @="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash10i.ocx, 1" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\TypeLib] @="{D27CDB6B-AE6D-11cf-96B8-444553540000}" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\Version] @="1.0" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID] @="FlashFactory.FlashFactory" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}] @Denied: (A 2) (Everyone) @="IFlashBroker4" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}\ProxyStubClsid32] @="{00020424-0000-0000-C000-000000000046}" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}\TypeLib] @="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}" "Version"="1.0" . [HKEY_LOCAL_MACHINE\SOFTWARE\McAfee] "SymbolicLinkValue"=hex(6):5c,00,72,00,65,00,67,00,69,00,73,00,74,00,72,00,79, 00,5c,00,6d,00,61,00,63,00,68,00,69,00,6e,00,65,00,5c,00,53,00,6f,00,66,00,\ . [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0000\AllUserSettings] @Denied: (A) (Users) @Denied: (A) (Everyone) @Allowed: (B 1 2 3 4 5) (S-1-5-20) "BlindDial"=dword:00000000 . [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0001\AllUserSettings] @Denied: (A) (Users) @Denied: (A) (Everyone) @Allowed: (B 1 2 3 4 5) (S-1-5-20) "BlindDial"=dword:00000000 . [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\PCW\Security] @Denied: (Full) (Everyone) . ------------------------ Jiné spuštené procesy ------------------------ . c:\program files (x86)\IObit\Smart Defrag 2\SmartDefrag.exe . ************************************************************************** . Celkový čas: 2013-04-12 08:08:21 - počítač byl restartován ComboFix-quarantined-files.txt 2013-04-12 06:08 . Před spuštěním: Volných bajtů: 255 267 844 096 Po spuštění: Volných bajtů: 255 175 753 728 . - - End Of File - - 5849C1CF5FBEA9FD0E9CEF6C1B6AF4B8