API tools faq
paste
Guest User

Untitled

a guest
Oct 13th, 2014
323
0
Never
Add comment
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 35.76 KB | None | 0 0
raw download clone embed print report
  1. ComboFix 14-10-13.01 - MrHack 14.10.2014 0:49.4.4 - x64
  2. Microsoft Windows 7 Ultimate 6.1.7601.1.1250.420.1029.18.10239.7953 [GMT 2:00]
  3. Spuštěný z: c:\users\MrHack\Desktop\ComboFix.exe
  4. SP: Spybot - Search and Destroy *Disabled/Outdated* {9BC38DF1-3CCA-732D-A930-C1CA5F20A4B0}
  5. SP: Windows Defender *Enabled/Outdated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
  6. .
  7. .
  8. ((((((((((((((((((((((((((((((((((((((( Ostatní výmazy )))))))))))))))))))))))))))))))))))))))))))))))))
  9. .
  10. .
  11. c:\programdata\Tbccint
  12. c:\programdata\Tbccint\IE\CT3329621\configutaion.json
  13. c:\programdata\Tbccint\IE\CT3329621\SetupIcon.ico
  14. c:\programdata\Tbccint\IE\CT3329621\UninstallerUI.exe
  15. c:\programdata\Tbccint\Multi\CT3329621\configutaion.json
  16. c:\programdata\Tbccint\Multi\CT3329621\SetupIcon.ico
  17. c:\programdata\Tbccint\Multi\CT3329621\UninstallerUI.exe
  18. c:\users\MrHack\AppData\Local\Tbccint
  19. c:\users\MrHack\AppData\Local\Tbccint\Community Alerts\Alert.dll
  20. c:\users\MrHack\AppData\Local\Tbccint\CT3329621\BS_Player_ControlBar_BAutoUpdateHelper.exe
  21. c:\users\MrHack\AppData\Local\Tbccint\CT3329621\BS_Player_ControlBar_BToolbarHelper.exe
  22. c:\windows\Tasks\Acrobat Update.job
  23. c:\windows\wininit.ini
  24. F:\install.exe
  25. .
  26. .
  27. ((((((((((((((((((((((((((((((((((((((( Ovladače/Služby )))))))))))))))))))))))))))))))))))))))))))))))))
  28. .
  29. .
  30. -------\Service_ProtectMonitor
  31. .
  32. .
  33. ((((((((((((((((((((((((( Soubory vytvořené od 2014-09-13 do 2014-10-13 )))))))))))))))))))))))))))))))
  34. .
  35. .
  36. 2014-10-13 22:57 . 2014-10-13 22:57 -------- d-----w- c:\users\Public\AppData\Local\temp
  37. 2014-10-13 22:57 . 2014-10-13 22:57 -------- d-----w- c:\users\Default\AppData\Local\temp
  38. 2014-10-13 22:42 . 2014-10-13 22:42 -------- d-----w- c:\users\MrHack\AppData\Roaming\EurekaLab s.a.s
  39. 2014-10-13 22:19 . 2014-10-13 22:19 -------- d-----w- C:\rsit
  40. 2014-10-13 22:19 . 2014-10-13 22:19 -------- d-----w- c:\program files\trend micro
  41. 2014-10-13 22:16 . 2014-10-13 22:35 -------- d-----w- C:\UsbFix
  42. 2014-10-13 18:22 . 2012-08-30 11:31 449024 ----a-w- c:\windows\system32\mss32.dll
  43. 2014-10-05 19:08 . 2014-10-05 19:08 -------- d-----w- c:\programdata\boost_interprocess
  44. 2014-10-05 19:08 . 2014-10-05 19:08 -------- d-----w- c:\program files (x86)\Common Files\Scan Process Machine
  45. 2014-10-05 18:56 . 2014-04-15 07:09 152896 ----a-w- c:\windows\Wiainst64.exe
  46. 2014-10-05 18:56 . 2011-03-18 05:49 323072 ----a-w- c:\windows\system32\SaMinDrv.dll
  47. 2014-10-05 18:56 . 2011-03-18 05:49 123904 ----a-w- c:\windows\system32\SaImgFlt.dll
  48. 2014-10-05 18:56 . 2011-03-18 05:49 55296 ----a-w- c:\windows\system32\SaErHdlr.dll
  49. 2014-10-05 17:33 . 2014-10-05 17:33 -------- d-----w- c:\users\MrHack\AppData\Roaming\AMD
  50. 2014-10-01 15:20 . 2014-10-01 15:20 -------- d-----w- c:\programdata\ATI
  51. 2014-10-01 15:20 . 2014-10-01 15:20 -------- d-----w- c:\program files (x86)\AMD AVT
  52. 2014-09-21 22:01 . 2014-09-21 22:01 -------- d-----w- c:\program files (x86)\Common Files\Skype
  53. 2014-09-21 22:01 . 2014-09-21 22:01 -------- d-----r- c:\program files (x86)\Skype
  54. 2014-09-18 20:15 . 2014-09-18 20:15 2048 ----a-w- c:\windows\SysWow64\winver.exe
  55. 2014-09-18 20:15 . 2014-09-18 20:15 833024 ----a-w- c:\windows\SysWow64\user32.dll
  56. 2014-09-18 20:15 . 2014-09-18 20:15 410624 ----a-w- c:\windows\SysWow64\systemcpl.dll
  57. 2014-09-18 20:15 . 2014-09-18 20:15 1536 ----a-w- c:\windows\SysWow64\sppcomapi.dll
  58. 2014-09-18 20:15 . 2014-09-18 20:15 113543 ----a-w- c:\windows\SysWow64\slmgr.vbs
  59. 2014-09-18 19:36 . 2014-09-18 19:36 96768 ----a-w- c:\windows\SysWow64\sspicli.dll
  60. 2014-09-18 19:36 . 2014-09-18 19:36 728064 ----a-w- c:\windows\system32\kerberos.dll
  61. 2014-09-18 19:36 . 2014-09-18 19:36 550912 ----a-w- c:\windows\SysWow64\kerberos.dll
  62. 2014-09-18 19:36 . 2014-09-18 19:36 22016 ----a-w- c:\windows\SysWow64\secur32.dll
  63. 2014-09-18 19:36 . 2014-09-18 19:36 1460736 ----a-w- c:\windows\system32\lsasrv.dll
  64. 2014-09-15 22:32 . 2014-09-15 22:32 128384 ----a-w- c:\windows\system32\amdhcp64.dll
  65. 2014-09-15 22:32 . 2014-09-15 22:32 78432 ----a-w- c:\windows\system32\atimpc64.dll
  66. 2014-09-15 22:32 . 2014-09-15 22:32 78432 ----a-w- c:\windows\system32\amdpcom64.dll
  67. 2014-09-15 22:32 . 2014-09-15 22:32 71704 ----a-w- c:\windows\SysWow64\atimpc32.dll
  68. 2014-09-15 22:32 . 2014-09-15 22:32 71704 ----a-w- c:\windows\SysWow64\amdpcom32.dll
  69. 2014-09-15 22:31 . 2014-09-15 22:31 126848 ----a-w- c:\windows\SysWow64\atiuxpag.dll
  70. 2014-09-15 22:31 . 2014-09-15 22:31 9254184 ----a-w- c:\windows\SysWow64\atidxx32.dll
  71. 2014-09-15 22:29 . 2014-09-15 22:29 293088 ----a-w- c:\windows\system32\drivers\amdacpksd.sys
  72. 2014-09-15 22:26 . 2014-09-15 22:26 16750080 ----a-w- c:\windows\system32\drivers\atikmdag.sys
  73. 2014-09-15 22:18 . 2014-09-15 22:18 235008 ----a-w- c:\windows\system32\clinfo.exe
  74. 2014-09-15 22:18 . 2014-09-15 22:18 98816 ----a-w- c:\windows\system32\OpenVideo64.dll
  75. 2014-09-15 22:17 . 2014-09-15 22:17 83456 ----a-w- c:\windows\SysWow64\OpenVideo.dll
  76. 2014-09-15 22:17 . 2014-09-15 22:17 86528 ----a-w- c:\windows\system32\OVDecode64.dll
  77. 2014-09-15 22:17 . 2014-09-15 22:17 73216 ----a-w- c:\windows\SysWow64\OVDecode.dll
  78. 2014-09-15 22:17 . 2014-09-15 22:17 33867264 ----a-w- c:\windows\system32\amdocl64.dll
  79. 2014-09-15 22:17 . 2014-09-15 22:17 28770304 ----a-w- c:\windows\SysWow64\amdocl.dll
  80. 2014-09-15 22:16 . 2014-09-15 22:16 65024 ----a-w- c:\windows\system32\OpenCL.dll
  81. 2014-09-15 22:16 . 2014-09-15 22:16 58880 ----a-w- c:\windows\SysWow64\OpenCL.dll
  82. 2014-09-15 22:13 . 2014-09-15 22:13 27918336 ----a-w- c:\windows\system32\atio6axx.dll
  83. 2014-09-15 22:09 . 2014-09-15 22:09 48128 ----a-w- c:\windows\system32\amdmmcl6.dll
  84. 2014-09-15 22:09 . 2014-09-15 22:09 37888 ----a-w- c:\windows\SysWow64\amdmmcl.dll
  85. 2014-09-15 22:09 . 2014-09-15 22:09 127488 ----a-w- c:\windows\system32\mantle64.dll
  86. 2014-09-15 22:09 . 2014-09-15 22:09 113664 ----a-w- c:\windows\SysWow64\mantle32.dll
  87. 2014-09-15 22:09 . 2014-09-15 22:09 5639168 ----a-w- c:\windows\system32\amdmantle64.dll
  88. 2014-09-15 22:08 . 2014-09-15 22:08 23375360 ----a-w- c:\windows\SysWow64\atioglxx.dll
  89. 2014-09-15 22:07 . 2014-09-15 22:07 367104 ----a-w- c:\windows\system32\atiapfxx.exe
  90. 2014-09-15 22:07 . 2014-09-15 22:07 62464 ----a-w- c:\windows\system32\aticalrt64.dll
  91. 2014-09-15 22:07 . 2014-09-15 22:07 52224 ----a-w- c:\windows\SysWow64\aticalrt.dll
  92. 2014-09-15 22:07 . 2014-09-15 22:07 55808 ----a-w- c:\windows\system32\aticalcl64.dll
  93. 2014-09-15 22:07 . 2014-09-15 22:07 49152 ----a-w- c:\windows\SysWow64\aticalcl.dll
  94. 2014-09-15 22:07 . 2014-09-15 22:07 15716352 ----a-w- c:\windows\system32\aticaldd64.dll
  95. 2014-09-15 22:06 . 2014-09-15 22:06 14302208 ----a-w- c:\windows\SysWow64\aticaldd.dll
  96. 2014-09-15 22:05 . 2014-09-15 22:05 4480000 ----a-w- c:\windows\SysWow64\amdmantle32.dll
  97. 2014-09-15 22:03 . 2014-09-15 22:03 442368 ----a-w- c:\windows\system32\atidemgy.dll
  98. 2014-09-15 22:03 . 2014-09-15 22:03 31232 ----a-w- c:\windows\system32\atimuixx.dll
  99. 2014-09-15 22:03 . 2014-09-15 22:03 619008 ----a-w- c:\windows\system32\atieclxx.exe
  100. 2014-09-15 22:03 . 2014-09-15 22:03 239616 ----a-w- c:\windows\system32\atiesrxx.exe
  101. 2014-09-15 22:03 . 2014-09-15 22:03 91648 ----a-w- c:\windows\system32\mantleaxl64.dll
  102. 2014-09-15 22:03 . 2014-09-15 22:03 85504 ----a-w- c:\windows\SysWow64\mantleaxl32.dll
  103. 2014-09-15 22:03 . 2014-09-15 22:03 190976 ----a-w- c:\windows\system32\atitmm64.dll
  104. 2014-09-15 22:00 . 2014-09-15 22:00 95744 ----a-w- c:\windows\system32\amdave64.dll
  105. 2014-09-15 21:59 . 2014-09-15 21:59 89088 ----a-w- c:\windows\system32\atisamu64.dll
  106. 2014-09-15 21:59 . 2014-09-15 21:59 80896 ----a-w- c:\windows\SysWow64\atisamu32.dll
  107. 2014-09-15 21:59 . 2014-09-15 21:59 827392 ----a-w- c:\windows\system32\coinst_14.30.dll
  108. 2014-09-15 21:59 . 2014-09-15 21:59 1210880 ----a-w- c:\windows\system32\atiadlxx.dll
  109. 2014-09-15 21:59 . 2014-09-15 21:59 900608 ----a-w- c:\windows\SysWow64\atiadlxy.dll
  110. 2014-09-15 21:59 . 2014-09-15 21:59 75264 ----a-w- c:\windows\system32\atig6pxx.dll
  111. 2014-09-15 21:59 . 2014-09-15 21:59 69632 ----a-w- c:\windows\SysWow64\atiglpxx.dll
  112. 2014-09-15 21:59 . 2014-09-15 21:59 69632 ----a-w- c:\windows\system32\atiglpxx.dll
  113. 2014-09-15 21:59 . 2014-09-15 21:59 146944 ----a-w- c:\windows\system32\atig6txx.dll
  114. 2014-09-15 21:59 . 2014-09-15 21:59 133632 ----a-w- c:\windows\SysWow64\atigktxx.dll
  115. 2014-09-15 21:59 . 2014-09-15 21:59 576000 ----a-w- c:\windows\system32\drivers\atikmpag.sys
  116. 2014-09-15 21:58 . 2014-09-15 21:58 43520 ----a-w- c:\windows\system32\drivers\ati2erec.dll
  117. 2014-09-15 16:21 . 2014-09-15 16:21 51200 ----a-w- c:\windows\system32\kdbsdk64.dll
  118. 2014-09-15 16:19 . 2014-09-15 16:19 38912 ----a-w- c:\windows\SysWow64\kdbsdk32.dll
  119. .
  120. .
  121. .
  122. (((((((((((((((((((((((((((((((((((((((( Find3M výpis ))))))))))))))))))))))))))))))))))))))))))))))))))))
  123. .
  124. 2014-10-09 17:17 . 2013-09-29 10:29 280904 ----a-w- c:\windows\SysWow64\PnkBstrB.xtr
  125. 2014-10-09 17:17 . 2013-09-29 02:26 280904 ----a-w- c:\windows\SysWow64\PnkBstrB.exe
  126. 2014-09-24 00:56 . 2013-11-01 13:01 71344 ----a-w- c:\windows\SysWow64\FlashPlayerCPLApp.cpl
  127. 2014-09-24 00:56 . 2013-11-01 13:01 701104 ----a-w- c:\windows\SysWow64\FlashPlayerApp.exe
  128. 2014-09-20 21:04 . 2013-09-29 02:26 297088 ----a-w- c:\windows\SysWow64\PnkBstrB.ex0
  129. 2014-09-15 22:32 . 2014-05-23 02:28 118096 ----a-w- c:\windows\SysWow64\amdhcp32.dll
  130. 2014-09-15 22:31 . 2014-05-23 02:28 144328 ----a-w- c:\windows\system32\atiuxp64.dll
  131. 2014-09-15 22:31 . 2014-05-23 02:28 118096 ----a-w- c:\windows\system32\atiu9p64.dll
  132. 2014-09-15 22:31 . 2014-05-23 02:28 100032 ----a-w- c:\windows\SysWow64\atiu9pag.dll
  133. 2014-09-15 22:31 . 2014-05-23 02:28 1335544 ----a-w- c:\windows\system32\aticfx64.dll
  134. 2014-09-15 22:31 . 2014-05-23 02:28 1113576 ----a-w- c:\windows\SysWow64\aticfx32.dll
  135. 2014-09-15 22:31 . 2014-05-23 02:27 10826488 ----a-w- c:\windows\system32\atidxx64.dll
  136. 2014-09-15 22:31 . 2014-05-23 02:27 7207592 ----a-w- c:\windows\SysWow64\atiumdva.dll
  137. 2014-09-15 22:31 . 2014-05-23 02:27 7028336 ----a-w- c:\windows\SysWow64\atiumdag.dll
  138. 2014-09-15 22:31 . 2014-05-23 02:27 8044976 ----a-w- c:\windows\system32\atiumd6a.dll
  139. 2014-09-15 22:31 . 2014-05-23 02:27 8296296 ----a-w- c:\windows\system32\atiumd64.dll
  140. 2014-09-15 22:00 . 2014-05-23 01:11 90112 ----a-w- c:\windows\SysWow64\amdave32.dll
  141. 2014-09-07 10:48 . 2014-09-07 10:48 466456 ----a-w- c:\windows\system32\wrap_oal.dll
  142. 2014-09-07 10:48 . 2014-09-07 10:48 444952 ----a-w- c:\windows\SysWow64\wrap_oal.dll
  143. 2014-09-07 10:48 . 2014-09-07 10:48 122904 ----a-w- c:\windows\system32\OpenAL32.dll
  144. 2014-09-07 10:48 . 2014-09-07 10:48 109080 ----a-w- c:\windows\SysWow64\OpenAL32.dll
  145. 2014-08-29 10:39 . 2014-08-29 10:39 404480 ----a-w- c:\windows\system32\gdi32.dll
  146. 2014-08-29 10:39 . 2014-08-29 10:39 3163648 ----a-w- c:\windows\system32\win32k.sys
  147. 2014-08-29 10:39 . 2014-08-29 10:39 311808 ----a-w- c:\windows\SysWow64\gdi32.dll
  148. 2014-08-29 10:38 . 2014-08-29 10:38 2048 ----a-w- c:\windows\SysWow64\tzres.dll
  149. 2014-08-29 10:38 . 2014-08-29 10:38 2048 ----a-w- c:\windows\system32\tzres.dll
  150. 2014-08-29 10:37 . 2014-08-29 10:37 664064 ----a-w- c:\windows\SysWow64\rpcrt4.dll
  151. 2014-08-29 10:37 . 2014-08-29 10:37 1216000 ----a-w- c:\windows\system32\rpcrt4.dll
  152. 2014-08-29 10:37 . 2014-08-29 10:37 985536 ----a-w- c:\windows\system32\drivers\dxgkrnl.sys
  153. 2014-08-29 10:36 . 2014-08-29 10:36 504320 ----a-w- c:\windows\system32\msihnd.dll
  154. 2014-08-29 10:36 . 2014-08-29 10:36 337408 ----a-w- c:\windows\SysWow64\msihnd.dll
  155. 2014-08-29 10:36 . 2014-08-29 10:36 3241984 ----a-w- c:\windows\system32\msi.dll
  156. 2014-08-29 10:36 . 2014-08-29 10:36 2363392 ----a-w- c:\windows\SysWow64\msi.dll
  157. 2014-08-29 10:36 . 2014-08-29 10:36 1941504 ----a-w- c:\windows\system32\authui.dll
  158. 2014-08-29 10:36 . 2014-08-29 10:36 1805824 ----a-w- c:\windows\SysWow64\authui.dll
  159. 2014-08-29 10:36 . 2014-08-29 10:36 112064 ----a-w- c:\windows\system32\consent.exe
  160. 2014-08-29 10:35 . 2014-08-29 10:35 99480 ----a-w- c:\windows\SysWow64\infocardapi.dll
  161. 2014-08-29 10:35 . 2014-08-29 10:35 8856 ----a-w- c:\windows\SysWow64\icardres.dll
  162. 2014-08-29 10:35 . 2014-08-29 10:35 8856 ----a-w- c:\windows\system32\icardres.dll
  163. 2014-08-29 10:35 . 2014-08-29 10:35 619672 ----a-w- c:\windows\SysWow64\icardagt.exe
  164. 2014-08-29 10:35 . 2014-08-29 10:35 35480 ----a-w- c:\windows\SysWow64\TsWpfWrp.exe
  165. 2014-08-29 10:35 . 2014-08-29 10:35 35480 ----a-w- c:\windows\system32\TsWpfWrp.exe
  166. 2014-08-29 10:35 . 2014-08-29 10:35 171160 ----a-w- c:\windows\system32\infocardapi.dll
  167. 2014-08-29 10:35 . 2014-08-29 10:35 1389208 ----a-w- c:\windows\system32\icardagt.exe
  168. 2014-08-09 13:57 . 2013-09-29 02:26 76152 ----a-w- c:\windows\SysWow64\PnkBstrA.exe
  169. 2014-07-31 09:29 . 2014-07-31 09:29 283064 ----a-w- c:\windows\system32\drivers\dtsoftbus01.sys
  170. 2014-07-31 09:19 . 2014-07-31 09:19 386680 ----a-w- c:\windows\system32\drivers\sptd.sys
  171. 2014-07-26 21:35 . 2014-07-26 21:35 319912 ----a-w- c:\windows\system32\javaws.exe
  172. 2014-07-26 21:35 . 2014-07-26 21:35 189352 ----a-w- c:\windows\system32\javaw.exe
  173. 2014-07-26 21:35 . 2014-07-26 21:35 189352 ----a-w- c:\windows\system32\java.exe
  174. 2014-07-26 21:35 . 2014-07-26 21:35 111016 ----a-w- c:\windows\system32\WindowsAccessBridge-64.dll
  175. 2014-07-25 00:35 . 2014-07-25 00:35 875688 ----a-w- c:\windows\SysWow64\msvcr120_clr0400.dll
  176. 2014-07-24 21:47 . 2014-07-24 21:47 869544 ----a-w- c:\windows\system32\msvcr120_clr0400.dll
  177. .
  178. .
  179. ------- Sigcheck -------
  180. Note: Unsigned files aren't necessarily malware.
  181. .
  182. [-] 2010-11-20 . E573BD9AB55C8E333C202B9E255F972E . 1008640 . . [6.1.7601.17514] .. c:\windows\system32\user32.dll
  183. .
  184. .
  185. (((((((((((((((((((((((((((((((((( Spouštěcí body v registru )))))))))))))))))))))))))))))))))))))))))))))
  186. .
  187. .
  188. *Poznámka* prázdné záznamy a legitimní výchozí údaje nejsou zobrazeny.
  189. REGEDIT4
  190. .
  191. [HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\URLSearchHooks]
  192. "{31264a33-a653-46c4-af49-1232c59a7da5}"= "c:\users\MrHack\AppData\LocalLow\BS_Player_ControlBar_B\prxtbBS_P.dll" [2014-04-10 423744]
  193. .
  194. [HKEY_CLASSES_ROOT\clsid\{31264a33-a653-46c4-af49-1232c59a7da5}]
  195. .
  196. [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\~\Browser Helper Objects\{31264a33-a653-46c4-af49-1232c59a7da5}]
  197. 2014-04-10 11:38 423744 ----a-w- c:\users\MrHack\AppData\LocalLow\BS_Player_ControlBar_B\prxtbBS_P.dll
  198. .
  199. [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\~\Browser Helper Objects\{FC36B0BD-27F0-4cdd-8AB1-50651EFC3EFD}]
  200. 2012-05-25 15:38 281424 ----a-w- c:\program files (x86)\WinToFlash Suggestor\WinToFlashSuggestor.dll
  201. .
  202. [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Toolbar]
  203. "{31264a33-a653-46c4-af49-1232c59a7da5}"= "c:\users\MrHack\AppData\LocalLow\BS_Player_ControlBar_B\prxtbBS_P.dll" [2014-04-10 423744]
  204. .
  205. [HKEY_CLASSES_ROOT\clsid\{31264a33-a653-46c4-af49-1232c59a7da5}]
  206. .
  207. [HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt1]
  208. @="{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}"
  209. [HKEY_CLASSES_ROOT\CLSID\{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}]
  210. 2014-06-24 22:04 131480 ----a-w- c:\users\MrHack\AppData\Roaming\Dropbox\bin\DropboxExt.24.dll
  211. .
  212. [HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt2]
  213. @="{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}"
  214. [HKEY_CLASSES_ROOT\CLSID\{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}]
  215. 2014-06-24 22:04 131480 ----a-w- c:\users\MrHack\AppData\Roaming\Dropbox\bin\DropboxExt.24.dll
  216. .
  217. [HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt3]
  218. @="{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}"
  219. [HKEY_CLASSES_ROOT\CLSID\{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}]
  220. 2014-06-24 22:04 131480 ----a-w- c:\users\MrHack\AppData\Roaming\Dropbox\bin\DropboxExt.24.dll
  221. .
  222. [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
  223. "Raptr"="c:\progra~2\Raptr\raptrstub.exe" [2014-08-20 55568]
  224. "DAEMON Tools Pro Agent"="c:\program files (x86)\DAEMON Tools Pro\DTAgent.exe" [2014-02-24 3129560]
  225. "uTorrent"="c:\users\MrHack\AppData\Roaming\uTorrent\uTorrent.exe" [2014-04-30 1270352]
  226. "Skype"="c:\program files (x86)\Skype\Phone\Skype.exe" [2014-08-27 22041192]
  227. "OscarX7Mouse5Mode"="c:\program files (x86)\OscarX7Editor5Mode\OscarX7Editor5Mode\OscarEditor.exe" [2013-02-01 3571712]
  228. .
  229. [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]
  230. "NUSB3MON"="c:\program files (x86)\NEC Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe" [2010-01-22 106496]
  231. "HDAudDeck"="c:\program files (x86)\VIA\VIAudioi\VDeck\VDeck.exe" [2010-03-17 2371584]
  232. "iTunesHelper"="c:\program files (x86)\iTunes\iTunesHelper.exe" [2014-05-26 152392]
  233. "LogMeIn Hamachi Ui"="c:\program files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe" [2014-09-04 3802448]
  234. "StartCCC"="c:\program files (x86)\ATI Technologies\ATI.ACE\Core-Static\amd64\CLIStart.exe" [2014-09-15 767200]
  235. .
  236. c:\users\MrHack\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\
  237. Curse.lnk - c:\users\MrHack\AppData\Roaming\Curse Client\Bin\Curse.exe /startup [2014-4-29 8721672]
  238. Dropbox.lnk - c:\users\MrHack\AppData\Roaming\Dropbox\bin\Dropbox.exe /systemstartup [2014-9-13 36414624]
  239. .
  240. c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\
  241. UltraMon.lnk - c:\windows\Installer\{9069EE0A-7615-4D86-AD80-CA263E936DA6}\IcoUltraMon.ico /auto [2013-10-2 29310]
  242. .
  243. [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
  244. "ConsentPromptBehaviorAdmin"= 5 (0x5)
  245. "ConsentPromptBehaviorUser"= 3 (0x3)
  246. "EnableUIADesktopToggle"= 0 (0x0)
  247. "EnableLinkedConnections"= 1 (0x1)
  248. .
  249. [HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\windows]
  250. "LoadAppInit_DLLs"=1 (0x1)
  251. .
  252. R2 Ca1528av;SPCA1528 Video Camera Service;c:\windows\system32\Drivers\Ca1528av.sys;c:\windows\SYSNATIVE\Drivers\Ca1528av.sys [x]
  253. R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [x]
  254. R2 LiveUpdateSvc;LiveUpdate;c:\program files (x86)\IObit\LiveUpdate\LiveUpdate.exe;c:\program files (x86)\IObit\LiveUpdate\LiveUpdate.exe [x]
  255. R3 AsrOcDrv;AsrOcDrv; [x]
  256. R3 Bulk1528;SPCA1528 Still Camera Service;c:\windows\system32\Drivers\Bulk1528.sys;c:\windows\SYSNATIVE\Drivers\Bulk1528.sys [x]
  257. R3 cleanhlp;cleanhlp;c:\eek\Run\cleanhlp64.sys;c:\eek\Run\cleanhlp64.sys [x]
  258. R3 dg_ssudbus;SAMSUNG Mobile USB Composite Device Driver (DEVGURU Ver.);c:\windows\system32\DRIVERS\ssudbus.sys;c:\windows\SYSNATIVE\DRIVERS\ssudbus.sys [x]
  259. R3 HTCAND64;HTC Device Driver;c:\windows\system32\Drivers\ANDROIDUSB.sys;c:\windows\SYSNATIVE\Drivers\ANDROIDUSB.sys [x]
  260. R3 htcnprot;HTC NDIS Protocol Driver;c:\windows\system32\DRIVERS\htcnprot.sys;c:\windows\SYSNATIVE\DRIVERS\htcnprot.sys [x]
  261. R3 HtcVCom32;HTC Diagnostic Port;c:\windows\system32\DRIVERS\HtcVComV64.sys;c:\windows\SYSNATIVE\DRIVERS\HtcVComV64.sys [x]
  262. R3 RdpVideoMiniport;Remote Desktop Video Miniport Driver;c:\windows\system32\drivers\rdpvideominiport.sys;c:\windows\SYSNATIVE\drivers\rdpvideominiport.sys [x]
  263. R3 SMIGrabber3C;SMI Grabber Device Tuner Filter 3C;c:\windows\system32\Drivers\SmiUsbGrabber3C.sys;c:\windows\SYSNATIVE\Drivers\SmiUsbGrabber3C.sys [x]
  264. R3 ssudmdm;SAMSUNG Mobile USB Modem Drivers (DEVGURU Ver.);c:\windows\system32\DRIVERS\ssudmdm.sys;c:\windows\SYSNATIVE\DRIVERS\ssudmdm.sys [x]
  265. R3 SwitchBoard;SwitchBoard;c:\program files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe;c:\program files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [x]
  266. R3 Synth3dVsc;Synth3dVsc;c:\windows\system32\drivers\synth3dvsc.sys;c:\windows\SYSNATIVE\drivers\synth3dvsc.sys [x]
  267. R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys;c:\windows\SYSNATIVE\drivers\tsusbflt.sys [x]
  268. R3 tsusbhub;tsusbhub;c:\windows\system32\drivers\tsusbhub.sys;c:\windows\SYSNATIVE\drivers\tsusbhub.sys [x]
  269. R3 USBAAPL64;Apple Mobile USB Driver;c:\windows\system32\Drivers\usbaapl64.sys;c:\windows\SYSNATIVE\Drivers\usbaapl64.sys [x]
  270. R3 VGPU;VGPU;c:\windows\system32\drivers\rdvgkmd.sys;c:\windows\SYSNATIVE\drivers\rdvgkmd.sys [x]
  271. R3 WatAdminSvc;Služba Technologie aktivace Windows;c:\windows\system32\Wat\WatAdminSvc.exe;c:\windows\SYSNATIVE\Wat\WatAdminSvc.exe [x]
  272. R3 WSDScan;Podpora skenování WSD přes UMB;c:\windows\system32\drivers\WSDScan.sys;c:\windows\SYSNATIVE\drivers\WSDScan.sys [x]
  273. R4 MSSQLServerADHelper100;SQL Active Directory Helper Service;c:\program files\Microsoft SQL Server\100\Shared\SQLADHLP.EXE;c:\program files\Microsoft SQL Server\100\Shared\SQLADHLP.EXE [x]
  274. R4 RsFx0103;RsFx0103 Driver;c:\windows\system32\DRIVERS\RsFx0103.sys;c:\windows\SYSNATIVE\DRIVERS\RsFx0103.sys [x]
  275. R4 SQLAgent$SQLEXPRESS;SQL Server Agent (SQLEXPRESS);c:\program files\Microsoft SQL Server\MSSQL10.SQLEXPRESS\MSSQL\Binn\SQLAGENT.EXE;c:\program files\Microsoft SQL Server\MSSQL10.SQLEXPRESS\MSSQL\Binn\SQLAGENT.EXE [x]
  276. S0 sptd;sptd;c:\windows\\SystemRoot\System32\Drivers\sptd.sys;c:\windows\\SystemRoot\System32\Drivers\sptd.sys [x]
  277. S1 {b2db3058-74ee-4ace-bcd8-8cd0fbe3a4f6}Gw64;{b2db3058-74ee-4ace-bcd8-8cd0fbe3a4f6}Gw64;c:\windows\system32\drivers\{b2db3058-74ee-4ace-bcd8-8cd0fbe3a4f6}Gw64.sys;c:\windows\SYSNATIVE\drivers\{b2db3058-74ee-4ace-bcd8-8cd0fbe3a4f6}Gw64.sys [x]
  278. S1 A2DDA;A2 Direct Disk Access Support Driver;c:\eek\RUN\a2ddax64.sys;c:\eek\RUN\a2ddax64.sys [x]
  279. S2 AdvancedSystemCareService7;Advanced SystemCare Service 7;c:\program files (x86)\IObit\Advanced SystemCare 7\ASCService.exe;c:\program files (x86)\IObit\Advanced SystemCare 7\ASCService.exe [x]
  280. S2 AMD External Events Utility;AMD External Events Utility;c:\windows\system32\atiesrxx.exe;c:\windows\SYSNATIVE\atiesrxx.exe [x]
  281. S2 AMD FUEL Service;AMD FUEL Service;c:\program files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe;c:\program files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe [x]
  282. S2 AODDriver4.2.0;AODDriver4.2.0;c:\program files\ATI Technologies\ATI.ACE\Fuel\amd64\AODDriver2.sys;c:\program files\ATI Technologies\ATI.ACE\Fuel\amd64\AODDriver2.sys [x]
  283. S2 Hamachi2Svc;LogMeIn Hamachi Tunneling Engine;c:\program files (x86)\LogMeIn Hamachi\hamachi-2.exe;c:\program files (x86)\LogMeIn Hamachi\hamachi-2.exe [x]
  284. S2 HTCMonitorService;HTCMonitorService;c:\program files (x86)\HTC\HTC Sync Manager\HSMServiceEntry.exe;c:\program files (x86)\HTC\HTC Sync Manager\HSMServiceEntry.exe [x]
  285. S2 LMIGuardianSvc;LMIGuardianSvc;c:\program files (x86)\LogMeIn Hamachi\LMIGuardianSvc.exe;c:\program files (x86)\LogMeIn Hamachi\LMIGuardianSvc.exe [x]
  286. S2 mi2c;mi2c;c:\windows\system32\drivers\mi2c.sys;c:\windows\SYSNATIVE\drivers\mi2c.sys [x]
  287. S2 PassThru Service;Internet Pass-Through Service;c:\program files (x86)\HTC\Internet Pass-Through\PassThruSvr.exe;c:\program files (x86)\HTC\Internet Pass-Through\PassThruSvr.exe [x]
  288. S2 SSPORT;SSPORT;c:\windows\system32\Drivers\SSPORT.sys;c:\windows\SYSNATIVE\Drivers\SSPORT.sys [x]
  289. S2 TBSrv;Toolbar Service;c:\program files (x86)\Tbccint\ToolbarService\ToolbarService.exe;c:\program files (x86)\Tbccint\ToolbarService\ToolbarService.exe [x]
  290. S2 TeamViewer9;TeamViewer 9;c:\program files (x86)\TeamViewer\Version9\TeamViewer_Service.exe;c:\program files (x86)\TeamViewer\Version9\TeamViewer_Service.exe [x]
  291. S2 UltraMonUtility;UltraMon Utility Driver;c:\program files (x86)\Common Files\Realtime Soft\UltraMonMirrorDrv\x64\UltraMonUtility.sys;c:\program files (x86)\Common Files\Realtime Soft\UltraMonMirrorDrv\x64\UltraMonUtility.sys [x]
  292. S2 VBoxDrv;VBox Support Driver;c:\program files (x86)\YouWave Android\vb\VBoxDrv.sys;c:\program files (x86)\YouWave Android\vb\VBoxDrv.sys [x]
  293. S2 VIAKaraokeService;VIA Karaoke digital mixer Service;c:\windows\system32\viakaraokesrv.exe;c:\windows\SYSNATIVE\viakaraokesrv.exe [x]
  294. S3 AtiHDAudioService;AMD Function Driver for HD Audio Service;c:\windows\system32\drivers\AtihdW76.sys;c:\windows\SYSNATIVE\drivers\AtihdW76.sys [x]
  295. S3 dtsoftbus01;DAEMON Tools Virtual Bus Driver;c:\windows\system32\DRIVERS\dtsoftbus01.sys;c:\windows\SYSNATIVE\DRIVERS\dtsoftbus01.sys [x]
  296. S3 nusb3hub;NEC Electronics USB 3.0 Hub Driver;c:\windows\system32\DRIVERS\nusb3hub.sys;c:\windows\SYSNATIVE\DRIVERS\nusb3hub.sys [x]
  297. S3 nusb3xhc;Renesas Electronics USB 3.0 Host Controller Driver;c:\windows\system32\DRIVERS\nusb3xhc.sys;c:\windows\SYSNATIVE\DRIVERS\nusb3xhc.sys [x]
  298. S3 RTL8167;Realtek 8167 NT Driver;c:\windows\system32\DRIVERS\Rt64win7.sys;c:\windows\SYSNATIVE\DRIVERS\Rt64win7.sys [x]
  299. S3 usbfilter;AMD USB Filter Driver;c:\windows\system32\DRIVERS\usbfilter.sys;c:\windows\SYSNATIVE\DRIVERS\usbfilter.sys [x]
  300. S3 VIAHdAudAddService;VIA High Definition Audio Driver Service;c:\windows\system32\drivers\viahduaa.sys;c:\windows\SYSNATIVE\drivers\viahduaa.sys [x]
  301. .
  302. .
  303. [HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\active setup\installed components\{8A69D345-D564-463c-AFF1-A69D9E530F96}]
  304. 2014-10-08 22:34 1089352 ----a-w- c:\program files (x86)\Google\Chrome\Application\38.0.2125.101\Installer\chrmstp.exe
  305. .
  306. Obsah adresáře 'Naplánované úlohy'
  307. .
  308. 2014-10-13 c:\windows\Tasks\Adobe Flash Player Updater.job
  309. - c:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2013-11-01 00:56]
  310. .
  311. 2014-10-13 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
  312. - c:\program files (x86)\Google\Update\GoogleUpdate.exe [2014-05-25 16:22]
  313. .
  314. 2014-10-13 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
  315. - c:\program files (x86)\Google\Update\GoogleUpdate.exe [2014-05-25 16:22]
  316. .
  317. .
  318. --------- X64 Entries -----------
  319. .
  320. .
  321. [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt1]
  322. @="{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}"
  323. [HKEY_CLASSES_ROOT\CLSID\{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}]
  324. 2014-06-24 22:04 164760 ----a-w- c:\users\MrHack\AppData\Roaming\Dropbox\bin\DropboxExt64.24.dll
  325. .
  326. [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt2]
  327. @="{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}"
  328. [HKEY_CLASSES_ROOT\CLSID\{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}]
  329. 2014-06-24 22:04 164760 ----a-w- c:\users\MrHack\AppData\Roaming\Dropbox\bin\DropboxExt64.24.dll
  330. .
  331. [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt3]
  332. @="{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}"
  333. [HKEY_CLASSES_ROOT\CLSID\{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}]
  334. 2014-06-24 22:04 164760 ----a-w- c:\users\MrHack\AppData\Roaming\Dropbox\bin\DropboxExt64.24.dll
  335. .
  336. [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt4]
  337. @="{FB314EDC-A251-47B7-93E1-CDD82E34AF8B}"
  338. [HKEY_CLASSES_ROOT\CLSID\{FB314EDC-A251-47B7-93E1-CDD82E34AF8B}]
  339. 2014-06-24 22:04 164760 ----a-w- c:\users\MrHack\AppData\Roaming\Dropbox\bin\DropboxExt64.24.dll
  340. .
  341. [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\GDriveBlacklistedOverlay]
  342. @="{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D42}"
  343. [HKEY_CLASSES_ROOT\CLSID\{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D42}]
  344. 2014-08-08 08:34 777032 ----a-w- c:\program files (x86)\Google\Drive\googledrivesync64.dll
  345. .
  346. [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\GDriveSharedEditOverlay]
  347. @="{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D44}"
  348. [HKEY_CLASSES_ROOT\CLSID\{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D44}]
  349. 2014-08-08 08:34 777032 ----a-w- c:\program files (x86)\Google\Drive\googledrivesync64.dll
  350. .
  351. [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\GDriveSharedViewOverlay]
  352. @="{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D43}"
  353. [HKEY_CLASSES_ROOT\CLSID\{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D43}]
  354. 2014-08-08 08:34 777032 ----a-w- c:\program files (x86)\Google\Drive\googledrivesync64.dll
  355. .
  356. [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\GDriveSyncedOverlay]
  357. @="{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D40}"
  358. [HKEY_CLASSES_ROOT\CLSID\{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D40}]
  359. 2014-08-08 08:34 777032 ----a-w- c:\program files (x86)\Google\Drive\googledrivesync64.dll
  360. .
  361. [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\GDriveSyncingOverlay]
  362. @="{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D41}"
  363. [HKEY_CLASSES_ROOT\CLSID\{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D41}]
  364. 2014-08-08 08:34 777032 ----a-w- c:\program files (x86)\Google\Drive\googledrivesync64.dll
  365. .
  366. ------- Doplňkový sken -------
  367. .
  368. uLocal Page = c:\windows\system32\blank.htm
  369. uStart Page = hxxp://www.trovi.com/?gd=&ctid=CT3233496&octid=EB_ORIGINAL_CTID&ISID=bf6b7f00-88ff-4a7e-921e-b0e471d13a18&SearchSource=55&CUI=&UM=5&UP=SP73B05B96-B4CE-4F73-9E79-823BD6CFC15D&SSPV=
  370. mLocal Page = c:\windows\SysWOW64\blank.htm
  371. uInternet Settings,ProxyOverride = *.local
  372. uInternet Settings,ProxyServer = localhost:8080
  373. IE: E&xportovat do aplikace Microsoft Excel - c:\progra~2\MICROS~1\Office12\EXCEL.EXE/3000
  374. Trusted Zone: clonewarsadventures.com
  375. Trusted Zone: freerealms.com
  376. Trusted Zone: soe.com
  377. Trusted Zone: sony.com
  378. .
  379. - - - - NEPLATNÉ POLOŽKY ODSTRANĚNÉ Z REGISTRU - - - -
  380. .
  381. Wow6432Node-HKCU-Run-Microsoft Windows Manager - c:\users\MrHack\S-80-5849-4992-4820\winmgr.exe
  382. WebBrowser-{31264A33-A653-46C4-AF49-1232C59A7DA5} - (no file)
  383. ShellIconOverlayIdentifiers-{472083B0-C522-11CF-8763-00608CC02F24} - (no file)
  384. AddRemove-IECT3329621 - c:\programdata\Tbccint\IE\CT3329621\UninstallerUI.exe
  385. .
  386. .
  387. .
  388. --------------------- ZAMKNUTÉ KLÍČE V REGISTRU ---------------------
  389. .
  390. [HKEY_USERS\S-1-5-21-4018423238-2136081577-2482176151-1000\Software\SecuROM\License information*]
  391. "datasecu"=hex:0b,af,e0,9a,77,3d,f0,2f,db,9a,8d,db,20,79,82,7f,11,e1,91,dd,83,
  392. 6d,5e,77,c0,e1,63,c8,28,c4,1d,fe,b5,65,df,9d,ba,03,3a,cb,29,a9,35,1f,fc,b7,\
  393. "rkeysecu"=hex:3b,57,2b,69,f3,39,a8,c1,b4,d3,81,84,bf,f5,91,33
  394. .
  395. [HKEY_LOCAL_MACHINE\software\Classes\CLSID\{B019E3BF-E7E5-453C-A2E4-D2C18CA0866F}]
  396. @Denied: (A 2) (Everyone)
  397. @="FlashBroker"
  398. "LocalizedString"="@c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil64_15_0_0_167_ActiveX.exe,-101"
  399. .
  400. [HKEY_LOCAL_MACHINE\software\Classes\CLSID\{B019E3BF-E7E5-453C-A2E4-D2C18CA0866F}\Elevation]
  401. "Enabled"=dword:00000001
  402. .
  403. [HKEY_LOCAL_MACHINE\software\Classes\CLSID\{B019E3BF-E7E5-453C-A2E4-D2C18CA0866F}\LocalServer32]
  404. @="c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil64_15_0_0_167_ActiveX.exe"
  405. .
  406. [HKEY_LOCAL_MACHINE\software\Classes\CLSID\{B019E3BF-E7E5-453C-A2E4-D2C18CA0866F}\TypeLib]
  407. @="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
  408. .
  409. [HKEY_LOCAL_MACHINE\software\Classes\Interface\{299817DA-1FAC-4CE2-8F48-A108237013BD}]
  410. @Denied: (A 2) (Everyone)
  411. @="IFlashBroker6"
  412. .
  413. [HKEY_LOCAL_MACHINE\software\Classes\Interface\{299817DA-1FAC-4CE2-8F48-A108237013BD}\ProxyStubClsid32]
  414. @="{00020424-0000-0000-C000-000000000046}"
  415. .
  416. [HKEY_LOCAL_MACHINE\software\Classes\Interface\{299817DA-1FAC-4CE2-8F48-A108237013BD}\TypeLib]
  417. @="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
  418. "Version"="1.0"
  419. .
  420. [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{B019E3BF-E7E5-453C-A2E4-D2C18CA0866F}]
  421. @Denied: (A 2) (Everyone)
  422. @="FlashBroker"
  423. "LocalizedString"="@c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil32_15_0_0_167_ActiveX.exe,-101"
  424. .
  425. [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{B019E3BF-E7E5-453C-A2E4-D2C18CA0866F}\Elevation]
  426. "Enabled"=dword:00000001
  427. .
  428. [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{B019E3BF-E7E5-453C-A2E4-D2C18CA0866F}\LocalServer32]
  429. @="c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil32_15_0_0_167_ActiveX.exe"
  430. .
  431. [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{B019E3BF-E7E5-453C-A2E4-D2C18CA0866F}\TypeLib]
  432. @="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
  433. .
  434. [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}]
  435. @Denied: (A 2) (Everyone)
  436. @="Shockwave Flash Object"
  437. .
  438. [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\InprocServer32]
  439. @="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_15_0_0_167.ocx"
  440. "ThreadingModel"="Apartment"
  441. .
  442. [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\MiscStatus]
  443. @="0"
  444. .
  445. [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ProgID]
  446. @="ShockwaveFlash.ShockwaveFlash.15"
  447. .
  448. [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
  449. @="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_15_0_0_167.ocx, 1"
  450. .
  451. [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\TypeLib]
  452. @="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
  453. .
  454. [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\Version]
  455. @="1.0"
  456. .
  457. [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
  458. @="ShockwaveFlash.ShockwaveFlash"
  459. .
  460. [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}]
  461. @Denied: (A 2) (Everyone)
  462. @="Macromedia Flash Factory Object"
  463. .
  464. [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\InprocServer32]
  465. @="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_15_0_0_167.ocx"
  466. "ThreadingModel"="Apartment"
  467. .
  468. [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ProgID]
  469. @="FlashFactory.FlashFactory.1"
  470. .
  471. [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
  472. @="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_15_0_0_167.ocx, 1"
  473. .
  474. [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\TypeLib]
  475. @="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
  476. .
  477. [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\Version]
  478. @="1.0"
  479. .
  480. [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
  481. @="FlashFactory.FlashFactory"
  482. .
  483. [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\Interface\{299817DA-1FAC-4CE2-8F48-A108237013BD}]
  484. @Denied: (A 2) (Everyone)
  485. @="IFlashBroker6"
  486. .
  487. [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\Interface\{299817DA-1FAC-4CE2-8F48-A108237013BD}\ProxyStubClsid32]
  488. @="{00020424-0000-0000-C000-000000000046}"
  489. .
  490. [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\Interface\{299817DA-1FAC-4CE2-8F48-A108237013BD}\TypeLib]
  491. @="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
  492. "Version"="1.0"
  493. .
  494. [HKEY_LOCAL_MACHINE\system\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0000\AllUserSettings]
  495. @Denied: (A) (Users)
  496. @Denied: (A) (Everyone)
  497. @Allowed: (B 1 2 3 4 5) (S-1-5-20)
  498. "BlindDial"=dword:00000000
  499. .
  500. [HKEY_LOCAL_MACHINE\system\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0001\AllUserSettings]
  501. @Denied: (A) (Users)
  502. @Denied: (A) (Everyone)
  503. @Allowed: (B 1 2 3 4 5) (S-1-5-20)
  504. "BlindDial"=dword:00000000
  505. .
  506. [HKEY_LOCAL_MACHINE\system\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0002\AllUserSettings]
  507. @Denied: (A) (Users)
  508. @Denied: (A) (Everyone)
  509. @Allowed: (B 1 2 3 4 5) (S-1-5-20)
  510. "BlindDial"=dword:00000000
  511. .
  512. [HKEY_LOCAL_MACHINE\system\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0003\AllUserSettings]
  513. @Denied: (A) (Users)
  514. @Denied: (A) (Everyone)
  515. @Allowed: (B 1 2 3 4 5) (S-1-5-20)
  516. "BlindDial"=dword:00000000
  517. .
  518. [HKEY_LOCAL_MACHINE\system\ControlSet001\Control\PCW\Security]
  519. @Denied: (Full) (Everyone)
  520. .
  521. ------------------------ Jiné spuštené procesy ------------------------
  522. .
  523. c:\program files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
  524. c:\program files (x86)\IObit\Advanced SystemCare 7\Monitor.exe
  525. c:\program files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
  526. c:\program files (x86)\Common Files\InterVideo\DeviceService\DevSvc.exe
  527. c:\program files (x86)\HTC\HTC Sync Manager\HTC Sync\adb.exe
  528. c:\windows\SysWOW64\PnkBstrA.exe
  529. c:\program files (x86)\Common Files\Ulead Systems\DVD\ULCDRSvr.exe
  530. .
  531. **************************************************************************
  532. .
  533. Celkový čas: 2014-10-14 01:11:45 - počítač byl restartován
  534. ComboFix-quarantined-files.txt 2014-10-13 23:11
  535. ComboFix2.txt 2014-06-01 14:28
  536. ComboFix3.txt 2014-05-25 16:01
  537. .
  538. Před spuštěním: Volných bajtů: 38 544 609 280
  539. Po spuštění: Volných bajtů: 37 894 496 256
  540. .
  541. - - End Of File - - E06FA8E10502E3BEF69E2C085BA43B7D
  542. A36C5E4F47E84449FF07ED3517B43A31
Advertisement
Add Comment
Please, Sign In to add comment
Public Pastes
We use cookies for various purposes including analytics. By continuing to use Pastebin, you agree to our use of cookies as described in the Cookies Policy.  OK, I Understand
Not a member of Pastebin yet?
Sign Up, it unlocks many cool features!