API tools faq
paste
Guest User

combo

a guest
Aug 28th, 2013
197
0
Never
Add comment
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 22.63 KB | None | 0 0
raw download clone embed print report
  1. ComboFix 13-08-28.02 - Michal 28.08.2013 22:35:58.1.6 - x64
  2. Microsoft Windows 7 Home Premium 6.1.7601.1.1250.420.1029.18.8094.5301 [GMT 2:00]
  3. Spuštěný z: c:\users\Michal\Desktop\ComboFix.exe
  4. AV: avast! Antivirus *Disabled/Updated* {2B2D1395-420B-D5C9-657E-930FE358FC3C}
  5. SP: avast! Antivirus *Disabled/Updated* {904CF271-6431-DA47-5FCE-A87D98DFB681}
  6. SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
  7. .
  8. .
  9. ((((((((((((((((((((((((((((((((((((((( Ostatní výmazy )))))))))))))))))))))))))))))))))))))))))))))))))
  10. .
  11. .
  12. c:\users\Michal\AppData\Local\Temp\iswizard\dwm.exe
  13. c:\users\Michal\AppData\Local\Temp\iswizard\libcurl.dll
  14. c:\users\Michal\AppData\Local\Temp\iswizard\libeay32.dll
  15. c:\users\Michal\AppData\Local\Temp\iswizard\libidn-11.dll
  16. c:\users\Michal\AppData\Local\Temp\iswizard\libusb-1.0.dll
  17. c:\users\Michal\AppData\Local\Temp\iswizard\ssleay32.dll
  18. c:\users\Michal\AppData\Local\Temp\iswizard\zlib1.dll
  19. c:\users\Michal\AppData\Local\Temp\tsiVi132.dll
  20. .
  21. .
  22. ((((((((((((((((((((((((( Soubory vytvořené od 2013-07-28 do 2013-08-28 )))))))))))))))))))))))))))))))
  23. .
  24. .
  25. 2013-08-28 20:40 . 2013-08-28 20:40 -------- d-----w- c:\users\Default\AppData\Local\temp
  26. 2013-08-28 20:17 . 2013-08-28 20:17 -------- d-----w- C:\rsit
  27. 2013-08-28 20:17 . 2013-08-28 20:17 -------- d-----w- c:\program files\trend micro
  28. 2013-08-28 17:57 . 2013-08-28 17:57 76232 ----a-w- c:\programdata\Microsoft\Windows Defender\Definition Updates\{BC574FC6-9B35-48F0-A326-3A67809E1F7E}\offreg.dll
  29. 2013-08-27 20:33 . 2013-07-09 06:03 5550528 ----a-w- c:\windows\system32\ntoskrnl.exe
  30. 2013-08-27 20:33 . 2013-07-09 05:03 3968960 ----a-w- c:\windows\SysWow64\ntkrnlpa.exe
  31. 2013-08-27 20:33 . 2013-07-09 05:03 3913664 ----a-w- c:\windows\SysWow64\ntoskrnl.exe
  32. 2013-08-27 20:33 . 2013-07-09 05:54 1732032 ----a-w- c:\windows\system32\ntdll.dll
  33. 2013-08-27 20:33 . 2013-07-09 05:53 243712 ----a-w- c:\windows\system32\wow64.dll
  34. 2013-08-27 20:33 . 2013-07-09 04:53 1292192 ----a-w- c:\windows\SysWow64\ntdll.dll
  35. 2013-08-27 20:33 . 2013-07-09 02:49 14336 ----a-w- c:\windows\SysWow64\ntvdm64.dll
  36. 2013-08-27 20:33 . 2013-07-09 04:52 5120 ----a-w- c:\windows\SysWow64\wow32.dll
  37. 2013-08-27 20:33 . 2013-07-09 02:49 25600 ----a-w- c:\windows\SysWow64\setup16.exe
  38. 2013-08-27 20:33 . 2013-07-09 02:49 7680 ----a-w- c:\windows\SysWow64\instnm.exe
  39. 2013-08-27 20:33 . 2013-07-09 02:49 2048 ----a-w- c:\windows\SysWow64\user.exe
  40. 2013-08-27 20:19 . 2013-08-27 20:19 -------- d-----w- c:\programdata\AskPartnerNetwork
  41. 2013-08-27 20:19 . 2013-08-27 20:19 -------- d-----w- c:\program files (x86)\AskPartnerNetwork
  42. 2013-08-27 20:19 . 2013-08-27 20:19 -------- d-----w- c:\programdata\APN
  43. 2013-08-27 19:35 . 2013-08-27 19:35 -------- d-----w- c:\programdata\Rockstar Games
  44. 2013-08-27 19:33 . 2013-08-27 19:33 -------- d-----w- c:\program files (x86)\Rockstar Games
  45. 2013-08-27 07:27 . 2013-04-17 07:02 1230336 ----a-w- c:\windows\SysWow64\WindowsCodecs.dll
  46. 2013-08-27 07:27 . 2013-04-17 06:24 1424384 ----a-w- c:\windows\system32\WindowsCodecs.dll
  47. 2013-08-27 07:27 . 2013-08-06 08:58 9515512 ----a-w- c:\programdata\Microsoft\Windows Defender\Definition Updates\{BC574FC6-9B35-48F0-A326-3A67809E1F7E}\mpengine.dll
  48. 2013-08-27 07:26 . 2013-04-09 23:34 1247744 ----a-w- c:\windows\SysWow64\DWrite.dll
  49. 2013-08-27 07:26 . 2013-04-02 22:51 1643520 ----a-w- c:\windows\system32\DWrite.dll
  50. 2013-08-26 21:28 . 2013-08-26 21:28 9728 ---ha-w- c:\windows\SysWow64\api-ms-win-downlevel-shlwapi-l1-1-0.dll
  51. 2013-08-26 07:15 . 2013-04-10 06:01 265064 ----a-w- c:\windows\system32\drivers\dxgmms1.sys
  52. 2013-08-26 07:14 . 2013-06-15 04:32 39936 ----a-w- c:\windows\system32\drivers\tssecsrv.sys
  53. 2013-08-26 07:12 . 2013-03-31 22:52 1887232 ----a-w- c:\windows\system32\d3d11.dll
  54. 2013-08-26 07:12 . 2013-04-25 23:30 1505280 ----a-w- c:\windows\SysWow64\d3d11.dll
  55. 2013-08-25 23:02 . 2013-08-25 23:02 -------- d-----w- c:\program files (x86)\NVIDIA Corporation
  56. 2013-08-25 23:01 . 2013-08-25 23:01 -------- d-----w- c:\program files (x86)\Common Files\Wise Installation Wizard
  57. 2013-08-25 22:37 . 2013-08-25 22:37 -------- d-----w- c:\program files (x86)\Seznam.cz
  58. 2013-08-25 22:21 . 2013-08-25 22:40 -------- d-----w- c:\program files (x86)\Common Files\Steam
  59. 2013-08-25 21:07 . 2013-08-25 21:07 283064 ----a-w- c:\windows\system32\drivers\dtsoftbus01.sys
  60. 2013-08-25 21:07 . 2013-08-25 21:07 -------- d-----w- c:\program files (x86)\DAEMON Tools Lite
  61. 2013-08-25 21:06 . 2013-08-25 22:34 -------- d-----w- c:\programdata\DAEMON Tools Lite
  62. 2013-08-25 19:22 . 2013-08-28 19:45 290184 ----a-w- c:\windows\SysWow64\PnkBstrB.xtr
  63. 2013-08-25 19:22 . 2013-08-25 19:22 -------- d-----w- c:\program files (x86)\Battlelog Web Plugins
  64. 2013-08-25 19:19 . 2013-08-25 19:19 -------- d-----w- c:\programdata\EA Core
  65. 2013-08-25 19:19 . 2013-08-28 17:51 -------- d-----w- c:\programdata\EA Logs
  66. 2013-08-25 18:46 . 2013-08-25 18:46 -------- d--h--w- c:\program files (x86)\Common Files\EAInstaller
  67. 2013-08-25 18:46 . 2013-08-28 19:45 290184 ----a-w- c:\windows\SysWow64\PnkBstrB.exe
  68. 2013-08-25 18:46 . 2013-08-28 19:45 280904 ----a-w- c:\windows\SysWow64\PnkBstrB.ex0
  69. 2013-08-25 18:46 . 2013-08-25 19:44 76888 ----a-w- c:\windows\SysWow64\PnkBstrA.exe
  70. 2013-08-25 18:44 . 2008-10-15 04:22 519000 ----a-w- c:\windows\system32\d3dx10_40.dll
  71. 2013-08-25 14:46 . 2013-08-25 14:46 -------- d-----w- c:\programdata\{CED89F1A-945F-46EC-B23C-5EAF6D2DB12A}
  72. 2013-08-25 14:46 . 2013-08-25 14:46 -------- d-----w- c:\program files (x86)\IObit Apps Toolbar
  73. 2013-08-25 14:46 . 2013-08-25 14:46 -------- d-----w- c:\program files (x86)\Common Files\Spigot
  74. 2013-08-25 14:46 . 2013-08-25 14:46 -------- d-----w- c:\program files (x86)\Application Updater
  75. 2013-08-25 14:45 . 2013-08-25 14:46 -------- d-----w- c:\programdata\IObit
  76. 2013-08-25 14:45 . 2013-08-25 14:45 -------- d-----w- c:\program files (x86)\IObit
  77. 2013-08-25 13:07 . 2013-05-09 08:59 33400 ----a-w- c:\windows\system32\drivers\aswFsBlk.sys
  78. 2013-08-25 13:07 . 2013-08-25 13:08 378944 ----a-w- c:\windows\system32\drivers\aswSP.sys
  79. 2013-08-25 13:07 . 2013-05-09 08:59 72016 ----a-w- c:\windows\system32\drivers\aswRdr2.sys
  80. 2013-08-25 13:07 . 2013-05-09 08:59 64288 ----a-w- c:\windows\system32\drivers\aswTdi.sys
  81. 2013-08-25 13:07 . 2013-08-25 13:08 189936 ----a-w- c:\windows\system32\drivers\aswVmm.sys
  82. 2013-08-25 13:07 . 2013-08-25 13:08 1030952 ----a-w- c:\windows\system32\drivers\aswSnx.sys
  83. 2013-08-25 13:07 . 2013-05-09 08:59 65336 ----a-w- c:\windows\system32\drivers\aswRvrt.sys
  84. 2013-08-25 13:07 . 2013-05-09 08:59 80816 ----a-w- c:\windows\system32\drivers\aswMonFlt.sys
  85. 2013-08-25 13:06 . 2013-05-09 08:58 41664 ----a-w- c:\windows\avastSS.scr
  86. 2013-08-25 13:04 . 2013-08-25 13:04 -------- d-----w- c:\program files\TeamSpeak 3 Client
  87. 2013-08-25 12:57 . 2013-08-28 16:38 -------- d-----w- c:\programdata\Electronic Arts
  88. 2013-08-25 12:57 . 2013-08-25 12:59 -------- d-----w- c:\programdata\Origin
  89. 2013-08-25 12:52 . 2008-07-31 08:41 68616 ----a-w- c:\windows\SysWow64\XAPOFX1_1.dll
  90. 2013-08-25 12:52 . 2008-07-31 08:40 509448 ----a-w- c:\windows\SysWow64\XAudio2_2.dll
  91. 2013-08-25 12:52 . 2008-07-12 06:18 467984 ----a-w- c:\windows\SysWow64\d3dx10_39.dll
  92. 2013-08-25 12:52 . 2008-07-12 06:18 3851784 ----a-w- c:\windows\SysWow64\D3DX9_39.dll
  93. 2013-08-25 12:52 . 2008-07-12 06:18 1493528 ----a-w- c:\windows\SysWow64\D3DCompiler_39.dll
  94. 2013-08-25 12:52 . 2013-08-25 12:52 -------- d-sh--w- c:\windows\SysWow64\AI_RecycleBin
  95. 2013-08-25 12:49 . 2013-08-28 17:54 -------- d-----w- c:\programdata\PMB Files
  96. 2013-08-25 12:49 . 2013-08-25 12:49 -------- d-----w- c:\program files (x86)\Pando Networks
  97. 2013-08-25 12:45 . 2013-08-25 12:45 -------- d-----w- c:\program files (x86)\Common Files\Skype
  98. 2013-08-25 12:45 . 2013-08-25 12:45 -------- d-----r- c:\program files (x86)\Skype
  99. 2013-08-25 12:45 . 2013-08-25 12:45 -------- d-----w- c:\programdata\Skype
  100. 2013-08-25 12:37 . 2013-08-25 12:37 71048 ----a-w- c:\windows\SysWow64\FlashPlayerCPLApp.cpl
  101. 2013-08-25 12:37 . 2013-08-25 12:37 692104 ----a-w- c:\windows\SysWow64\FlashPlayerApp.exe
  102. 2013-08-25 12:37 . 2013-08-25 12:37 -------- d-----w- c:\windows\SysWow64\Macromed
  103. 2013-08-25 12:37 . 2013-08-25 12:37 -------- d-----w- c:\windows\system32\Macromed
  104. 2013-08-25 12:29 . 2013-08-25 12:29 -------- d-----w- c:\windows\system32\SPReview
  105. 2013-08-25 12:06 . 2010-11-20 03:32 2560 ----a-w- c:\windows\system32\drivers\cs-CZ\rdpwd.sys.mui
  106. 2013-08-25 12:06 . 2010-11-20 03:26 3584 ----a-w- c:\windows\system32\drivers\cs-CZ\tsusbflt.sys.mui
  107. 2013-08-25 12:06 . 2010-11-20 03:32 4608 ----a-w- c:\windows\system32\drivers\cs-CZ\kbdclass.sys.mui
  108. 2013-08-25 12:06 . 2010-11-20 03:32 3072 ----a-w- c:\windows\system32\drivers\cs-CZ\GAGP30KX.SYS.mui
  109. 2013-08-25 12:03 . 2013-08-25 12:03 -------- d-----w- c:\windows\system32\EventProviders
  110. 2013-08-20 18:46 . 2013-08-20 18:46 -------- d-----w- c:\program files (x86)\Mozilla Maintenance Service
  111. 2013-08-20 18:40 . 2013-08-20 18:40 -------- d-s---w- c:\windows\SysWow64\Microsoft
  112. 2013-08-20 18:17 . 2013-08-20 18:17 -------- d-----w- c:\windows\SysWow64\Wat
  113. 2013-08-20 18:17 . 2013-08-20 18:17 -------- d-----w- c:\windows\system32\Wat
  114. 2013-08-20 17:38 . 2013-05-09 08:58 287840 ----a-w- c:\windows\system32\aswBoot.exe
  115. 2013-08-20 17:23 . 2013-08-20 17:23 -------- d-----w- c:\programdata\Ashampoo
  116. 2013-08-20 17:23 . 2013-08-20 17:23 -------- d-----w- c:\program files (x86)\Ashampoo
  117. 2013-08-20 17:20 . 2013-08-25 13:06 -------- d-----w- c:\program files\AVAST Software
  118. 2013-08-20 17:19 . 2013-08-25 13:06 -------- d-----w- c:\programdata\AVAST Software
  119. 2013-08-20 17:14 . 2012-07-26 07:40 2560 ----a-w- c:\windows\system32\drivers\cs-CZ\wdf01000.sys.mui
  120. 2013-08-20 17:14 . 2012-07-26 04:55 785512 ----a-w- c:\windows\system32\drivers\Wdf01000.sys
  121. 2013-08-20 17:14 . 2012-07-26 04:55 54376 ----a-w- c:\windows\system32\drivers\WdfLdr.sys
  122. 2013-08-20 17:14 . 2012-07-26 02:36 9728 ----a-w- c:\windows\system32\Wdfres.dll
  123. 2013-08-20 17:10 . 2013-08-20 17:10 -------- d-----w- c:\program files\Totalcmd
  124. 2013-08-20 17:04 . 2010-02-23 08:16 294912 ----a-w- c:\windows\system32\browserchoice.exe
  125. 2013-08-20 17:02 . 2013-08-20 17:03 -------- d-----w- c:\windows\system32\MRT
  126. 2013-08-20 16:48 . 2012-12-16 17:11 46080 ----a-w- c:\windows\system32\atmlib.dll
  127. 2013-08-20 16:48 . 2012-12-16 14:45 367616 ----a-w- c:\windows\system32\atmfd.dll
  128. 2013-08-20 16:48 . 2012-12-16 14:13 295424 ----a-w- c:\windows\SysWow64\atmfd.dll
  129. 2013-08-20 16:48 . 2012-12-16 14:13 34304 ----a-w- c:\windows\SysWow64\atmlib.dll
  130. 2013-08-20 16:48 . 2010-09-30 10:41 100864 ----a-w- c:\windows\system32\fontsub.dll
  131. 2013-08-20 16:48 . 2010-09-30 06:47 70656 ----a-w- c:\windows\SysWow64\fontsub.dll
  132. 2013-08-20 16:47 . 2012-07-26 03:08 229888 ----a-w- c:\windows\system32\WUDFHost.exe
  133. 2013-08-20 16:47 . 2012-07-26 03:08 84992 ----a-w- c:\windows\system32\WUDFSvc.dll
  134. 2013-08-20 16:47 . 2012-07-26 03:08 744448 ----a-w- c:\windows\system32\WUDFx.dll
  135. 2013-08-20 16:47 . 2012-07-26 03:08 45056 ----a-w- c:\windows\system32\WUDFCoinstaller.dll
  136. 2013-08-20 16:47 . 2012-07-26 03:08 194048 ----a-w- c:\windows\system32\WUDFPlatform.dll
  137. 2013-08-20 16:47 . 2012-07-26 02:26 87040 ----a-w- c:\windows\system32\drivers\WUDFPf.sys
  138. 2013-08-20 16:47 . 2012-07-26 02:26 198656 ----a-w- c:\windows\system32\drivers\WUDFRd.sys
  139. 2013-08-20 16:41 . 2012-03-01 06:46 23408 ----a-w- c:\windows\system32\drivers\fs_rec.sys
  140. 2013-08-20 16:41 . 2012-03-01 06:33 81408 ----a-w- c:\windows\system32\imagehlp.dll
  141. 2013-08-20 16:41 . 2012-03-01 06:28 5120 ----a-w- c:\windows\system32\wmi.dll
  142. 2013-08-20 16:41 . 2012-03-01 05:33 159232 ----a-w- c:\windows\SysWow64\imagehlp.dll
  143. 2013-08-20 16:41 . 2012-03-01 05:29 5120 ----a-w- c:\windows\SysWow64\wmi.dll
  144. 2013-08-20 16:35 . 2012-11-30 05:45 362496 ----a-w- c:\windows\system32\wow64win.dll
  145. 2013-08-20 16:34 . 2013-01-03 06:00 288088 ----a-w- c:\windows\system32\drivers\FWPKCLNT.SYS
  146. 2013-08-20 16:34 . 2012-08-22 18:12 376688 ----a-w- c:\windows\system32\drivers\netio.sys
  147. 2013-08-20 16:34 . 2011-11-17 06:35 395776 ----a-w- c:\windows\system32\webio.dll
  148. 2013-08-20 16:34 . 2011-11-17 05:35 314880 ----a-w- c:\windows\SysWow64\webio.dll
  149. 2013-08-20 16:34 . 2012-01-04 10:44 509952 ----a-w- c:\windows\system32\ntshrui.dll
  150. .
  151. .
  152. (((((((((((((((((((((((((((((((((((((((( Find3M výpis ))))))))))))))))))))))))))))))))))))))))))))))))))))
  153. .
  154. 2013-08-26 21:29 . 2013-08-26 21:29 247296 ----a-w- c:\windows\system32\webcheck.dll
  155. 2013-08-26 21:29 . 2013-08-26 21:29 204800 ----a-w- c:\windows\SysWow64\webcheck.dll
  156. 2013-08-25 12:25 . 2009-07-14 02:36 152576 ----a-w- c:\windows\SysWow64\msclmd.dll
  157. 2013-08-25 12:25 . 2009-07-14 02:36 175616 ----a-w- c:\windows\system32\msclmd.dll
  158. 2013-07-09 04:45 . 2013-08-27 20:33 44032 ----a-w- c:\windows\apppatch\acwow64.dll
  159. .
  160. .
  161. (((((((((((((((((((((((((((((((((( Spouštěcí body v registru )))))))))))))))))))))))))))))))))))))))))))))
  162. .
  163. .
  164. *Poznámka* prázdné záznamy a legitimní výchozí údaje nejsou zobrazeny.
  165. REGEDIT4
  166. .
  167. [HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\URLSearchHooks]
  168. "{03EB0E9C-7A91-4381-A220-9B52B641CDB1}"= "c:\program files (x86)\IObit Apps Toolbar\IE\7.4\iobitappsToolbarIE.dll" [2013-08-08 1356096]
  169. .
  170. [HKEY_CLASSES_ROOT\clsid\{03eb0e9c-7a91-4381-a220-9b52b641cdb1}]
  171. .
  172. [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\~\Browser Helper Objects\{03EB0E9C-7A91-4381-A220-9B52B641CDB1}]
  173. 2013-08-08 17:33 1356096 ----a-w- c:\program files (x86)\IObit Apps Toolbar\IE\7.4\iobitappsToolbarIE.dll
  174. .
  175. [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Toolbar]
  176. "{03EB0E9C-7A91-4381-A220-9B52B641CDB1}"= "c:\program files (x86)\IObit Apps Toolbar\IE\7.4\iobitappsToolbarIE.dll" [2013-08-08 1356096]
  177. .
  178. [HKEY_CLASSES_ROOT\clsid\{03eb0e9c-7a91-4381-a220-9b52b641cdb1}]
  179. .
  180. [HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt1]
  181. @="{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}"
  182. [HKEY_CLASSES_ROOT\CLSID\{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}]
  183. 2013-06-05 17:17 130736 ----a-w- c:\users\Michal\AppData\Roaming\Dropbox\bin\DropboxExt.19.dll
  184. .
  185. [HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt2]
  186. @="{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}"
  187. [HKEY_CLASSES_ROOT\CLSID\{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}]
  188. 2013-06-05 17:17 130736 ----a-w- c:\users\Michal\AppData\Roaming\Dropbox\bin\DropboxExt.19.dll
  189. .
  190. [HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt3]
  191. @="{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}"
  192. [HKEY_CLASSES_ROOT\CLSID\{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}]
  193. 2013-06-05 17:17 130736 ----a-w- c:\users\Michal\AppData\Roaming\Dropbox\bin\DropboxExt.19.dll
  194. .
  195. [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
  196. "Advanced SystemCare 6"="c:\program files (x86)\IObit\Advanced SystemCare 6\ASCTray.exe" [2013-04-18 491840]
  197. "DAEMON Tools Lite"="c:\program files (x86)\DAEMON Tools Lite\DTLite.exe" [2013-07-03 3673184]
  198. "Steam"="d:\steam\Steam.exe" [2013-07-26 1807272]
  199. "cz.seznam.software.autoupdate"="c:\users\Michal\AppData\Roaming\Seznam.cz\szninstall.exe" [2013-05-16 1062472]
  200. "cz.seznam.software.szndesktop"="c:\users\Michal\AppData\Roaming\Seznam.cz\bin\wszndesktop.exe" [2013-04-12 92664]
  201. .
  202. [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]
  203. "StartCCC"="c:\program files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" [2012-12-19 642808]
  204. "avast"="c:\program files\AVAST Software\Avast\avastUI.exe" [2013-05-09 4858968]
  205. "SearchSettings"="c:\program files (x86)\Common Files\Spigot\Search Settings\SearchSettings.exe" [2013-08-08 1303360]
  206. "seznam-listicka-distribuce"="c:\program files (x86)\Seznam.cz\distribution\szninstall.exe" [2013-05-16 1062472]
  207. "ApnTBMon"="c:\program files (x86)\AskPartnerNetwork\Toolbar\Updater\TBNotifier.exe" [2013-08-19 1601488]
  208. .
  209. c:\users\Michal\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\
  210. Dropbox.lnk - c:\users\Michal\AppData\Roaming\Dropbox\bin\Dropbox.exe /systemstartup [2013-6-5 27370808]
  211. .
  212. [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
  213. "ConsentPromptBehaviorAdmin"= 5 (0x5)
  214. "ConsentPromptBehaviorUser"= 3 (0x3)
  215. "EnableUIADesktopToggle"= 0 (0x0)
  216. "PromptOnSecureDesktop"= 0 (0x0)
  217. .
  218. [HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\windows]
  219. "LoadAppInit_DLLs"=1 (0x1)
  220. .
  221. R2 SkypeUpdate;Skype Updater;c:\program files (x86)\Skype\Updater\Updater.exe;c:\program files (x86)\Skype\Updater\Updater.exe [x]
  222. R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys;c:\windows\SYSNATIVE\drivers\tsusbflt.sys [x]
  223. R3 WatAdminSvc;Služba Technologie aktivace Windows;c:\windows\system32\Wat\WatAdminSvc.exe;c:\windows\SYSNATIVE\Wat\WatAdminSvc.exe [x]
  224. S0 aswRvrt;aswRvrt; [x]
  225. S0 aswVmm;aswVmm; [x]
  226. S1 aswSnx;aswSnx; [x]
  227. S1 aswSP;aswSP; [x]
  228. S1 dtsoftbus01;DAEMON Tools Virtual Bus Driver;c:\windows\system32\DRIVERS\dtsoftbus01.sys;c:\windows\SYSNATIVE\DRIVERS\dtsoftbus01.sys [x]
  229. S2 AdvancedSystemCareService6;Advanced SystemCare Service 6;c:\program files (x86)\IObit\Advanced SystemCare 6\ASCService.exe;c:\program files (x86)\IObit\Advanced SystemCare 6\ASCService.exe [x]
  230. S2 AMD External Events Utility;AMD External Events Utility;c:\windows\system32\atiesrxx.exe;c:\windows\SYSNATIVE\atiesrxx.exe [x]
  231. S2 AMD FUEL Service;AMD FUEL Service;c:\program files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe;c:\program files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe [x]
  232. S2 AODDriver4.2;AODDriver4.2;c:\program files\ATI Technologies\ATI.ACE\Fuel\amd64\AODDriver2.sys;c:\program files\ATI Technologies\ATI.ACE\Fuel\amd64\AODDriver2.sys [x]
  233. S2 APNMCP;Ask Update Service;c:\program files (x86)\AskPartnerNetwork\Toolbar\apnmcp.exe;c:\program files (x86)\AskPartnerNetwork\Toolbar\apnmcp.exe [x]
  234. S2 Application Updater;Application Updater;c:\program files (x86)\Application Updater\ApplicationUpdater.exe;c:\program files (x86)\Application Updater\ApplicationUpdater.exe [x]
  235. S2 aswFsBlk;aswFsBlk; [x]
  236. S2 aswMonFlt;aswMonFlt;c:\windows\system32\drivers\aswMonFlt.sys;c:\windows\SYSNATIVE\drivers\aswMonFlt.sys [x]
  237. S2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [x]
  238. S3 asmthub3;ASMedia USB3 Hub Service;c:\windows\system32\DRIVERS\asmthub3.sys;c:\windows\SYSNATIVE\DRIVERS\asmthub3.sys [x]
  239. S3 asmtxhci;ASMEDIA XHCI Service;c:\windows\system32\DRIVERS\asmtxhci.sys;c:\windows\SYSNATIVE\DRIVERS\asmtxhci.sys [x]
  240. S3 AtiHDAudioService;AMD Function Driver for HD Audio Service;c:\windows\system32\drivers\AtihdW76.sys;c:\windows\SYSNATIVE\drivers\AtihdW76.sys [x]
  241. S3 RTL8167;Realtek 8167 NT Driver;c:\windows\system32\DRIVERS\Rt64win7.sys;c:\windows\SYSNATIVE\DRIVERS\Rt64win7.sys [x]
  242. .
  243. .
  244. Obsah adresáře 'Naplánované úlohy'
  245. .
  246. 2013-08-28 c:\windows\Tasks\Adobe Flash Player Updater.job
  247. - c:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2013-08-25 12:37]
  248. .
  249. .
  250. --------- X64 Entries -----------
  251. .
  252. .
  253. [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\00avast]
  254. @="{472083B0-C522-11CF-8763-00608CC02F24}"
  255. [HKEY_CLASSES_ROOT\CLSID\{472083B0-C522-11CF-8763-00608CC02F24}]
  256. 2013-05-09 08:58 133840 ----a-w- c:\program files\AVAST Software\Avast\ashShA64.dll
  257. .
  258. [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt1]
  259. @="{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}"
  260. [HKEY_CLASSES_ROOT\CLSID\{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}]
  261. 2013-06-05 17:17 164016 ----a-w- c:\users\Michal\AppData\Roaming\Dropbox\bin\DropboxExt64.19.dll
  262. .
  263. [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt2]
  264. @="{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}"
  265. [HKEY_CLASSES_ROOT\CLSID\{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}]
  266. 2013-06-05 17:17 164016 ----a-w- c:\users\Michal\AppData\Roaming\Dropbox\bin\DropboxExt64.19.dll
  267. .
  268. [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt3]
  269. @="{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}"
  270. [HKEY_CLASSES_ROOT\CLSID\{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}]
  271. 2013-06-05 17:17 164016 ----a-w- c:\users\Michal\AppData\Roaming\Dropbox\bin\DropboxExt64.19.dll
  272. .
  273. [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt4]
  274. @="{FB314EDC-A251-47B7-93E1-CDD82E34AF8B}"
  275. [HKEY_CLASSES_ROOT\CLSID\{FB314EDC-A251-47B7-93E1-CDD82E34AF8B}]
  276. 2013-06-05 17:17 164016 ----a-w- c:\users\Michal\AppData\Roaming\Dropbox\bin\DropboxExt64.19.dll
  277. .
  278. ------- Doplňkový sken -------
  279. .
  280. uLocal Page = c:\windows\system32\blank.htm
  281. uStart Page = hxxp://www.seznam.cz/?clid=12454
  282. mLocal Page = c:\windows\SysWOW64\blank.htm
  283. TCP: DhcpNameServer = 192.168.1.1
  284. FF - ProfilePath - c:\users\Michal\AppData\Roaming\Mozilla\Firefox\Profiles\s72ydlav.default\
  285. FF - prefs.js: browser.startup.homepage - hxxps://www.google.cz/
  286. FF - ExtSQL: 2013-06-30 10:44; [email protected]; c:\users\Michal\AppData\Roaming\Mozilla\Firefox\Profiles\s72ydlav.default\extensions\[email protected]
  287. FF - ExtSQL: 2013-08-25 15:06; [email protected]; c:\program files\AVAST Software\Avast\WebRep\FF
  288. FF - ExtSQL: 2013-08-25 16:46; [email protected]; c:\program files (x86)\IObit Apps Toolbar\FF
  289. FF - ExtSQL: 2013-08-25 18:45; [email protected]; c:\users\Michal\AppData\Roaming\Mozilla\Firefox\Profiles\s72ydlav.default\extensions\[email protected]
  290. FF - ExtSQL: 2013-08-26 00:37; {ea614400-e918-4741-9a97-7a972ff7c30b}; c:\users\Michal\AppData\Roaming\Mozilla\Firefox\Profiles\s72ydlav.default\extensions\{ea614400-e918-4741-9a97-7a972ff7c30b}
  291. FF - ExtSQL: 2013-08-27 22:19; [email protected]; c:\users\Michal\AppData\Roaming\Mozilla\Firefox\Profiles\s72ydlav.default\extensions\[email protected]
  292. .
  293. - - - - NEPLATNÉ POLOŽKY ODSTRANĚNÉ Z REGISTRU - - - -
  294. .
  295. Wow6432Node-HKLM-Run-<NO NAME> - (no file)
  296. HKLM_Wow6432Node-ActiveSetup-{2D46B6DC-2207-486B-B523-A557E6D54B47} - start
  297. .
  298. .
  299. .
  300. --------------------- ZAMKNUTÉ KLÍČE V REGISTRU ---------------------
  301. .
  302. [HKEY_USERS\S-1-5-21-3938224926-2978293772-4027795847-1000\Software\SecuROM\License information*]
  303. "datasecu"=hex:40,65,49,72,31,9a,60,13,13,ae,96,07,28,fb,0f,ca,df,a9,32,5d,63,
  304. f5,69,33,5d,43,da,9f,1a,c8,45,f3,71,e8,d8,8c,9c,fa,b3,7c,56,f6,2f,5a,88,59,\
  305. "rkeysecu"=hex:9e,03,f4,b6,e1,80,f3,97,e5,c0,8d,f6,79,28,25,ff
  306. .
  307. [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\PCW\Security]
  308. @Denied: (Full) (Everyone)
  309. .
  310. Celkový čas: 2013-08-28 22:42:30
  311. ComboFix-quarantined-files.txt 2013-08-28 20:42
  312. .
  313. Před spuštěním: Volných bajtů: 453 888 069 632
  314. Po spuštění: Volných bajtů: 453 859 962 880
  315. .
  316. - - End Of File - - CFBF80544F1474FD825427E00A37EB51
  317. A36C5E4F47E84449FF07ED3517B43A31
Advertisement
Add Comment
Please, Sign In to add comment
Public Pastes
We use cookies for various purposes including analytics. By continuing to use Pastebin, you agree to our use of cookies as described in the Cookies Policy.  OK, I Understand
Not a member of Pastebin yet?
Sign Up, it unlocks many cool features!