API tools faq
paste
Guest User

Untitled

a guest
Dec 29th, 2012
72
0
Never
Add comment
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 23.82 KB | None | 0 0
raw download clone embed print report
  1. ComboFix 12-12-29.02 - Lukas 29.12.2012 23:11:44.1.4 - x64
  2. Microsoft Windows 7 Ultimate 6.1.7600.0.1250.420.1029.18.4030.1377 [GMT 1:00]
  3. Spuštěný z: c:\users\Lukas\Downloads\ComboFix.exe
  4. AV: ESET Smart Security 5.0 *Enabled/Updated* {77DEAFED-8149-104B-25A1-21771CA47CD1}
  5. FW: ESET Personal firewall *Enabled* {4FE52EC8-CB26-1113-0EFE-8842E2773BAA}
  6. SP: ESET Smart Security 5.0 *Enabled/Updated* {CCBF4E09-A773-1FC5-1F11-1A056723366C}
  7. SP: Windows Defender *Enabled/Outdated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
  8. * Rezidentní štít AV je zapnutý
  9. .
  10. .
  11. .
  12. ((((((((((((((((((((((((((((((((((((((( Ostatní výmazy )))))))))))))))))))))))))))))))))))))))))))))))))
  13. .
  14. .
  15. c:\programdata\System32
  16. c:\programdata\system32\taskhost.exe
  17. c:\users\Lukas\AppData\Roaming\FacbookUpdate.exe
  18. c:\users\Lukas\AppData\Roaming\msnmsgr
  19. c:\users\Lukas\lbymkqnm.exe
  20. c:\users\Lukas\zwopyq.exe
  21. D:\install.exe
  22. .
  23. .
  24. ((((((((((((((((((((((((( Soubory vytvořené od 2012-11-28 do 2012-12-29 )))))))))))))))))))))))))))))))
  25. .
  26. .
  27. 2012-12-29 22:17 . 2012-12-29 22:17 -------- d-----w- c:\users\Default\AppData\Local\temp
  28. 2012-12-29 20:10 . 2012-12-29 20:10 -------- d-----w- c:\users\Lukas\AppData\Local\ESET
  29. 2012-12-29 20:07 . 2012-12-29 21:20 -------- d-----w- c:\program files\trend micro
  30. 2012-12-29 20:07 . 2012-12-29 20:08 -------- d-----w- C:\rsit
  31. 2012-12-29 20:06 . 2012-12-29 20:06 -------- d-----w- c:\program files\ESET
  32. 2012-12-29 19:46 . 2012-12-29 19:49 -------- d-----w- c:\programdata\Spybot - Search & Destroy
  33. 2012-12-29 19:45 . 2012-12-29 20:12 -------- d-----w- c:\program files (x86)\Spybot - Search & Destroy 2
  34. 2012-12-29 19:45 . 2012-12-29 19:45 -------- d-----w- c:\users\Lukas\AppData\Local\Programs
  35. 2012-12-29 02:02 . 2009-06-10 21:23 1169224 ----a-w- c:\users\Lukas\AppData\Roaming\..net.exe
  36. 2012-12-29 02:02 . 2012-12-29 02:02 -------- d-----w- c:\windows\Sun
  37. 2012-12-28 21:54 . 2012-12-28 21:54 -------- d-----w- c:\program files\Speccy
  38. 2012-12-28 21:32 . 2012-12-28 21:32 -------- d-----w- c:\program files (x86)\GPU-Z
  39. 2012-12-28 21:28 . 2012-12-28 21:28 -------- d-----w- c:\program files (x86)\RivaTuner v2.24 MSI Master Overclocking Arena 2009 edition
  40. 2012-12-28 21:28 . 2012-12-28 21:28 -------- d-----w- c:\program files\CPUID
  41. 2012-12-28 20:55 . 2012-12-28 20:55 -------- d-----w- c:\users\Lukas\AppData\Local\SplitMediaLabs
  42. 2012-12-28 20:53 . 2012-12-28 20:53 -------- d-----w- c:\programdata\SplitMediaLabs
  43. 2012-12-28 20:53 . 2012-12-28 20:53 -------- d-----w- c:\program files (x86)\SplitMediaLabs
  44. 2012-12-28 20:51 . 2012-12-28 20:51 -------- d-----w- c:\users\Lukas\AppData\Roaming\SplitMediaLabs
  45. 2012-12-26 11:17 . 2012-12-26 11:17 -------- d-----w- c:\users\Lukas\AppData\Roaming\Microsoft Games
  46. 2012-12-26 11:15 . 2012-12-26 11:20 -------- d-----w- c:\program files (x86)\GameSpy Arcade
  47. 2012-12-26 11:14 . 2012-12-26 11:14 -------- d-----w- c:\program files (x86)\Microsoft Games
  48. 2012-12-26 00:56 . 2012-12-26 11:22 -------- d-----w- c:\program files (x86)\ExtractNow
  49. 2012-12-26 00:56 . 2012-12-26 00:57 -------- d-----w- c:\users\Lukas\AppData\Local\ExtractNow
  50. 2012-12-23 15:33 . 2012-12-23 15:35 -------- d-----w- c:\users\Lukas\AppData\Roaming\BSplayer
  51. 2012-12-23 15:33 . 2012-12-23 15:33 -------- d-----w- c:\users\Lukas\AppData\Roaming\BSplayer Pro
  52. 2012-12-23 15:33 . 2012-12-23 15:33 -------- d-----w- c:\program files (x86)\Webteh
  53. 2012-12-23 15:30 . 2012-12-23 15:30 -------- d-----w- c:\users\Lukas\AppData\Roaming\Notepad++
  54. 2012-12-23 15:30 . 2012-12-23 15:30 -------- d-----w- c:\program files (x86)\Notepad++
  55. 2012-12-22 14:51 . 2012-12-22 14:51 -------- d-----w- c:\program files (x86)\Common Files\BioWare
  56. 2012-12-22 14:50 . 2012-12-22 14:50 -------- d-----w- c:\users\hedev
  57. 2012-12-22 14:12 . 2008-05-30 13:19 511496 ----a-w- c:\windows\system32\XAudio2_1.dll
  58. 2012-12-22 14:07 . 2012-12-28 20:52 70344 ----a-w- c:\windows\SysWow64\FlashPlayerCPLApp.cpl
  59. 2012-12-22 14:07 . 2012-12-28 20:52 426184 ----a-w- c:\windows\SysWow64\FlashPlayerApp.exe
  60. 2012-12-22 14:07 . 2012-12-22 14:07 -------- d-----w- c:\windows\SysWow64\Macromed
  61. 2012-12-22 14:07 . 2012-12-22 14:07 -------- d-----w- c:\windows\system32\Macromed
  62. 2012-12-21 21:53 . 2012-12-21 21:53 -------- d-----w- c:\program files (x86)\Common Files\Steam
  63. 2012-12-21 21:53 . 2012-12-29 20:21 -------- d-----w- c:\program files (x86)\Steam
  64. 2012-12-21 21:46 . 2012-12-21 21:46 -------- d-----w- c:\users\Lukas\AppData\Roaming\Thunderbird
  65. 2012-12-21 21:46 . 2012-12-21 21:46 -------- d-----w- c:\users\Lukas\AppData\Local\Thunderbird
  66. 2012-12-21 21:46 . 2012-12-21 21:46 -------- d-----w- c:\program files (x86)\Mozilla Maintenance Service
  67. 2012-12-21 21:45 . 2012-12-21 21:45 -------- d-----w- c:\program files (x86)\Mozilla Thunderbird
  68. 2012-12-20 12:00 . 2012-12-26 00:53 -------- d-----w- c:\users\Lukas\AppData\Roaming\vlc
  69. 2012-12-20 11:59 . 2012-12-20 11:59 -------- d-----w- c:\program files (x86)\VideoLAN
  70. 2012-12-17 12:02 . 2012-12-17 12:02 -------- d-----w- c:\users\Lukas\AppData\Local\Adobe
  71. 2012-12-17 11:51 . 2012-12-17 11:51 -------- d-----w- c:\program files (x86)\Common Files\Adobe
  72. 2012-12-17 11:41 . 2012-12-17 11:41 -------- d-----w- c:\users\Lukas\AppData\Roaming\inkscape
  73. 2012-12-13 13:50 . 2012-12-13 13:54 -------- d-----w- c:\program files (x86)\Inkscape
  74. 2012-12-13 13:14 . 2012-12-29 20:21 -------- d-----w- c:\users\Lukas\AppData\Roaming\Skype
  75. 2012-12-13 13:14 . 2012-12-13 13:14 -------- d-----w- c:\program files (x86)\Common Files\Skype
  76. 2012-12-13 13:14 . 2012-12-13 13:14 -------- d-----r- c:\program files (x86)\Skype
  77. 2012-12-13 13:14 . 2012-12-13 13:14 -------- d-----w- c:\programdata\Skype
  78. 2012-12-11 16:31 . 2012-12-11 16:31 -------- d-----w- c:\users\Lukas\AppData\Local\PunkBuster
  79. 2012-12-11 09:09 . 2012-12-12 10:54 -------- d-----w- c:\users\Lukas\Notebooks
  80. 2012-12-11 09:09 . 2012-12-11 09:09 -------- d-----w- c:\users\Lukas\.config
  81. 2012-12-11 09:07 . 2012-12-11 09:08 -------- d-----w- c:\program files (x86)\Zim Desktop Wiki
  82. 2012-12-10 18:46 . 2012-12-10 18:46 -------- d-----w- c:\program files (x86)\GamePark
  83. 2012-12-10 16:06 . 2006-03-31 11:41 3927248 ----a-w- c:\windows\system32\d3dx9_30.dll
  84. 2012-12-10 16:05 . 2012-12-11 16:31 66872 ----a-w- c:\windows\SysWow64\PnkBstrA.exe
  85. 2012-12-10 15:59 . 2012-12-10 15:59 -------- d-----w- c:\program files (x86)\Activision
  86. 2012-12-06 18:09 . 2012-12-06 18:09 -------- d-----w- c:\users\Lukas\AppData\Roaming\BANDISOFT
  87. 2012-12-06 18:08 . 2012-12-06 18:09 -------- d-----w- c:\program files (x86)\Bandicam
  88. 2012-12-06 18:08 . 2012-12-06 18:08 -------- d-----w- c:\program files (x86)\BandiMPEG1
  89. 2012-12-06 14:16 . 2012-12-06 14:15 916456 ----a-w- c:\windows\system32\deployJava1.dll
  90. 2012-12-06 14:16 . 2012-12-06 14:15 289768 ----a-w- c:\windows\system32\javaws.exe
  91. 2012-12-06 14:16 . 2012-12-06 14:15 1034216 ----a-w- c:\windows\system32\npDeployJava1.dll
  92. 2012-12-06 14:15 . 2012-12-06 14:15 189416 ----a-w- c:\windows\system32\javaw.exe
  93. 2012-12-06 14:15 . 2012-12-06 14:15 188904 ----a-w- c:\windows\system32\java.exe
  94. 2012-12-06 14:15 . 2012-12-06 14:15 108008 ----a-w- c:\windows\system32\WindowsAccessBridge-64.dll
  95. 2012-12-06 14:15 . 2012-12-06 14:15 -------- d-----w- c:\program files\Java
  96. 2012-12-06 14:13 . 2012-12-06 14:13 -------- d-----w- c:\users\Lukas\AppData\Roaming\OpenOffice.org
  97. 2012-12-06 13:57 . 2012-12-06 13:57 -------- d-----w- c:\program files (x86)\OpenOffice.org 3
  98. 2012-12-06 13:53 . 2012-12-06 13:53 -------- d-----w- C:\OOorginstall
  99. 2012-12-05 16:09 . 2012-12-05 16:09 -------- d-----w- c:\users\Lukas\AppData\Roaming\MAXON
  100. 2012-12-05 08:02 . 2012-12-05 08:02 -------- d-----w- c:\program files (x86)\Common Files\Java
  101. 2012-12-05 08:02 . 2012-12-05 08:02 821736 ----a-w- c:\windows\SysWow64\npDeployJava1.dll
  102. 2012-12-05 08:02 . 2012-12-05 08:02 746984 ----a-w- c:\windows\SysWow64\deployJava1.dll
  103. 2012-12-05 08:02 . 2012-12-05 08:02 95208 ----a-w- c:\windows\SysWow64\WindowsAccessBridge-32.dll
  104. 2012-12-05 08:02 . 2012-12-05 08:02 -------- d-----w- c:\program files (x86)\Java
  105. 2012-12-04 15:24 . 2012-12-04 15:24 -------- d-----w- c:\program files (x86)\Microsoft Silverlight
  106. 2012-12-04 15:21 . 2012-12-04 15:21 -------- d-----w- c:\program files\WinRAR
  107. 2012-12-04 13:28 . 2012-12-04 13:28 -------- d-----w- c:\program files\Microsoft Synchronization Services
  108. 2012-12-04 13:28 . 2012-12-04 13:28 -------- d-----w- c:\program files\Microsoft SQL Server Compact Edition
  109. 2012-12-04 13:27 . 2012-12-04 13:27 -------- d-----w- c:\program files (x86)\Microsoft Synchronization Services
  110. 2012-12-04 13:27 . 2012-12-04 13:27 -------- d-----w- c:\program files (x86)\Microsoft SQL Server Compact Edition
  111. 2012-12-04 13:26 . 2012-12-04 13:26 112832 ----a-w- c:\programdata\Microsoft\VCExpress\10.0\1033\ResourceCache.dll
  112. 2012-12-04 13:25 . 2012-12-04 13:25 -------- d-----w- c:\program files (x86)\Common Files\Merge Modules
  113. 2012-12-04 13:25 . 2012-12-04 13:25 -------- d-----w- c:\program files (x86)\Microsoft Visual Studio 10.0
  114. 2012-12-04 13:24 . 2012-12-04 13:24 -------- d-----w- c:\windows\symbols
  115. 2012-12-04 13:24 . 2012-12-04 13:24 -------- d-----w- c:\program files\Microsoft Visual Studio 10.0
  116. 2012-12-04 13:24 . 2012-12-04 13:24 -------- d-----w- c:\program files\Microsoft Help Viewer
  117. 2012-12-04 13:24 . 2012-12-04 13:24 -------- d-----w- c:\program files (x86)\Microsoft SDKs
  118. 2012-12-04 13:15 . 2012-12-04 13:25 -------- d-----w- c:\program files (x86)\Microsoft.NET
  119. 2012-12-04 13:14 . 2009-11-25 11:47 99176 ----a-w- c:\windows\SysWow64\PresentationHostProxy.dll
  120. 2012-12-04 13:14 . 2009-11-25 11:47 49472 ----a-w- c:\windows\SysWow64\netfxperf.dll
  121. 2012-12-04 13:14 . 2009-11-25 11:47 48960 ----a-w- c:\windows\system32\netfxperf.dll
  122. 2012-12-04 13:14 . 2009-11-25 11:47 297808 ----a-w- c:\windows\SysWow64\mscoree.dll
  123. 2012-12-04 13:14 . 2009-11-25 11:47 295264 ----a-w- c:\windows\SysWow64\PresentationHost.exe
  124. 2012-12-04 13:14 . 2009-11-25 11:47 1130824 ----a-w- c:\windows\SysWow64\dfshim.dll
  125. 2012-12-04 13:14 . 2009-11-25 11:47 109912 ----a-w- c:\windows\system32\PresentationHostProxy.dll
  126. 2012-12-04 13:14 . 2009-11-25 11:47 444752 ----a-w- c:\windows\system32\mscoree.dll
  127. 2012-12-04 13:14 . 2009-11-25 11:47 320352 ----a-w- c:\windows\system32\PresentationHost.exe
  128. 2012-12-04 13:14 . 2009-11-25 11:47 1942856 ----a-w- c:\windows\system32\dfshim.dll
  129. 2012-12-04 13:12 . 2012-12-04 13:12 -------- d-----w- c:\windows\PCHEALTH
  130. 2012-12-04 12:46 . 2012-12-14 14:45 -------- d-----w- c:\users\Lukas\AppData\Local\CrashDumps
  131. 2012-12-04 12:12 . 2012-12-04 12:18 -------- d-----w- c:\users\Lukas\AppData\Roaming\Dev-Cpp
  132. 2012-12-04 12:09 . 2012-12-04 12:59 -------- d-----w- C:\Dev-Cpp
  133. 2012-12-03 12:27 . 2012-12-03 12:27 -------- d-----w- c:\users\Lukas\AppData\Local\Your Freedom
  134. 2012-12-03 12:26 . 2012-12-03 12:26 -------- d-----w- c:\users\Lukas\AppData\Roaming\Proxifier
  135. 2012-12-03 12:26 . 2012-11-22 17:57 76392 ----a-w- c:\windows\system32\PrxerDrv.dll
  136. 2012-12-03 12:26 . 2012-11-22 17:57 57448 ----a-w- c:\windows\system32\PrxerNsp.dll
  137. 2012-12-03 12:26 . 2012-11-22 17:57 103016 ----a-w- c:\windows\system32\ProxifierShellExt.dll
  138. 2012-12-03 12:26 . 2012-11-22 17:57 91240 ----a-w- c:\windows\SysWow64\ProxifierShellExt.dll
  139. 2012-12-03 12:26 . 2012-11-22 17:57 70248 ----a-w- c:\windows\SysWow64\PrxerDrv.dll
  140. 2012-12-03 12:26 . 2012-11-22 17:57 56424 ----a-w- c:\windows\SysWow64\PrxerNsp.dll
  141. 2012-12-03 12:26 . 1997-06-06 14:52 11264 ----a-w- c:\windows\SysWow64\SPORDER.DLL
  142. 2012-12-03 12:26 . 2012-12-03 12:26 -------- d-----w- c:\program files (x86)\Proxifier
  143. 2012-12-03 12:25 . 2012-12-03 12:26 -------- d-----w- c:\program files (x86)\Your Freedom
  144. 2012-12-03 12:16 . 2012-12-03 12:16 -------- d-----w- c:\programdata\Synaptics
  145. 2012-12-03 11:43 . 2012-12-03 11:43 -------- d-----w- c:\users\Lukas\AppData\Local\BMExplorer
  146. .
  147. .
  148. .
  149. (((((((((((((((((((((((((((((((((((((((( Find3M výpis ))))))))))))))))))))))))))))))))))))))))))))))))))))
  150. .
  151. 2012-11-24 15:16 . 2012-11-24 15:16 466520 ----a-w- c:\windows\system32\wrap_oal.dll
  152. 2012-11-24 15:16 . 2012-11-24 15:16 445016 ----a-w- c:\windows\SysWow64\wrap_oal.dll
  153. 2012-11-24 15:16 . 2012-11-24 15:16 123480 ----a-w- c:\windows\system32\OpenAL32.dll
  154. 2012-11-24 15:16 . 2012-11-24 15:16 109144 ----a-w- c:\windows\SysWow64\OpenAL32.dll
  155. 2012-11-19 00:01 . 2012-11-24 15:52 9125352 ----a-w- c:\programdata\Microsoft\Windows Defender\Definition Updates\{13EA206F-8AE2-4B92-8A19-AC660DF60401}\mpengine.dll
  156. 2012-10-15 16:44 . 2012-11-24 15:29 3584 ----a-w- c:\windows\SysWow64\sigfile.exe
  157. 2012-10-03 17:39 . 2012-11-24 15:29 311176 ----a-w- c:\windows\SysWow64\vsnp2uvc.dll
  158. 2012-10-03 17:39 . 2012-11-24 15:29 25992 ----a-w- c:\windows\snuvcdsm.exe
  159. 2012-10-03 17:39 . 2012-11-24 15:29 401800 ----a-w- c:\windows\SysWow64\rsnp2uvc.dll
  160. 2012-10-03 17:39 . 2012-11-24 15:29 400264 ----a-w- c:\windows\system32\rsnp2uvc.dll
  161. 2012-10-03 17:39 . 2012-11-24 15:29 377736 ----a-w- c:\windows\system32\vsnp2uvc.dll
  162. 2012-10-03 17:39 . 2012-11-24 15:29 1864328 ----a-w- c:\windows\system32\drivers\snp2uvc.sys
  163. 2012-10-03 17:39 . 2012-11-24 15:29 245640 ----a-w- c:\windows\system32\csnp2uvc.dll
  164. .
  165. .
  166. (((((((((((((((((((((((((((((((((( Spouštěcí body v registru )))))))))))))))))))))))))))))))))))))))))))))
  167. .
  168. .
  169. *Poznámka* prázdné záznamy a legitimní výchozí údaje nejsou zobrazeny.
  170. REGEDIT4
  171. .
  172. [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
  173. "puush"="c:\program files (x86)\puush\puush.exe" [2012-11-26 565480]
  174. "Spotify Web Helper"="c:\users\Lukas\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe" [2012-11-24 1199576]
  175. "Skype"="c:\program files (x86)\Skype\Phone\Skype.exe" [2012-11-09 17888944]
  176. "Steam"="c:\program files (x86)\Steam\steam.exe" [2012-12-21 1354736]
  177. "Spotify"="c:\users\Lukas\AppData\Roaming\Spotify\spotify.exe" [2012-11-24 7880664]
  178. .
  179. [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]
  180. "StartCCC"="c:\program files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" [2011-10-13 343168]
  181. "QLBController"="c:\program files (x86)\Hewlett-Packard\HP Hotkey Support\QLBController.exe" [2012-06-20 333728]
  182. "Adobe ARM"="c:\program files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2012-09-23 926896]
  183. .
  184. c:\users\Lukas\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\
  185. OpenOffice.org 3.3.lnk - c:\program files (x86)\OpenOffice.org 3\program\quickstart.exe [2010-12-13 1198592]
  186. .
  187. [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
  188. "ConsentPromptBehaviorAdmin"= 0 (0x0)
  189. "ConsentPromptBehaviorUser"= 3 (0x3)
  190. "EnableLUA"= 0 (0x0)
  191. "EnableUIADesktopToggle"= 0 (0x0)
  192. "PromptOnSecureDesktop"= 0 (0x0)
  193. "DisableCAD"= 1 (0x1)
  194. .
  195. [HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\drivers32]
  196. "midi3"=wdmaud.drv
  197. .
  198. [HKEY_LOCAL_MACHINE\system\currentcontrolset\control\session manager]
  199. BootExecute REG_MULTI_SZ autocheck autochk *\0\0sdnclean64.exe
  200. .
  201. R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2010-03-18 138576]
  202. R2 SkypeUpdate;Skype Updater;c:\program files (x86)\Skype\Updater\Updater.exe [2012-11-09 160944]
  203. R3 AthBTPort;Qualcomm Atheros Virtual Bluetooth Class;c:\windows\system32\DRIVERS\btath_flt.sys [2012-08-19 88728]
  204. R3 BTATH_A2DP;Bluetooth A2DP Audio Driver;c:\windows\system32\drivers\btath_a2dp.sys [2012-08-19 344216]
  205. R3 btath_avdt;Qualcomm Atheros Bluetooth AVDT Service;c:\windows\system32\drivers\btath_avdt.sys [2012-08-19 114840]
  206. R3 BTATH_HCRP;Bluetooth HCRP Server driver;c:\windows\system32\DRIVERS\btath_hcrp.sys [2012-08-19 178840]
  207. R3 BTATH_LWFLT;Bluetooth LWFLT Device;c:\windows\system32\DRIVERS\btath_lwflt.sys [2012-08-19 77464]
  208. R3 BTATH_RCP;Bluetooth AVRCP Device;c:\windows\system32\DRIVERS\btath_rcp.sys [2012-08-19 135832]
  209. R3 BtFilter;BtFilter;c:\windows\system32\DRIVERS\btfilter.sys [2012-08-19 567808]
  210. R3 Creative ALchemy AL6 Licensing Service;Creative ALchemy AL6 Licensing Service;c:\program files (x86)\Common Files\Creative Labs Shared\Service\AL6Licensing.exe [2012-11-24 79360]
  211. R3 Creative Audio Engine Licensing Service;Creative Audio Engine Licensing Service;c:\program files (x86)\Common Files\Creative Labs Shared\Service\CTAELicensing.exe [2012-11-24 79360]
  212. S0 epfwwfp;epfwwfp;c:\windows\system32\DRIVERS\epfwwfp.sys [2011-08-04 62496]
  213. S1 ehdrv;ehdrv;c:\windows\system32\DRIVERS\ehdrv.sys [2011-08-04 146432]
  214. S1 EpfwLWF;Epfw NDIS LightWeight Filter;c:\windows\system32\DRIVERS\EpfwLWF.sys [2011-08-04 38288]
  215. S2 AESTFilters;Andrea ST Filters Service;c:\program files\IDT\WDM\AESTSr64.exe [2009-03-03 89600]
  216. S2 AMD External Events Utility;AMD External Events Utility;c:\windows\system32\atiesrxx.exe [2011-10-13 204288]
  217. S2 AtherosSvc;AtherosSvc;c:\program files (x86)\Bluetooth Suite\adminservice.exe [2012-08-19 211584]
  218. S2 eamonm;eamonm;c:\windows\system32\DRIVERS\eamonm.sys [2011-08-09 202576]
  219. S2 ekrn;ESET Service;c:\program files\ESET\ESET Smart Security\x86\ekrn.exe [2011-08-09 974944]
  220. S2 HPDrvMntSvc.exe;HP Quick Synchronization Service;c:\program files (x86)\Hewlett-Packard\Shared\HPDrvMntSvc.exe [2012-05-16 197536]
  221. S2 hpHotkeyMonitor;hpHotkeyMonitor;c:\program files (x86)\Hewlett-Packard\HP Hotkey Support\HPHotkeyMonitor.exe [2012-06-20 523680]
  222. S2 hpsrv;HP Service;c:\windows\system32\Hpservice.exe [2012-09-24 31040]
  223. S2 UNS;Intel(R) Management and Security Application User Notification Service;c:\program files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe [2011-08-08 2656536]
  224. S2 ZAtheros Bt&Wlan Coex Agent;ZAtheros Bt&Wlan Coex Agent;c:\program files (x86)\Bluetooth Suite\Ath_CoexAgent.exe [2012-08-19 323584]
  225. S3 BTATH_BUS;Qualcomm Atheros Bluetooth Bus;c:\windows\system32\DRIVERS\btath_bus.sys [2012-08-19 33944]
  226. S3 intelkmd;intelkmd;c:\windows\system32\DRIVERS\igdpmd64.sys [2011-08-31 12306848]
  227. S3 JMCR;JMCR;c:\windows\system32\DRIVERS\jmcr.sys [2012-08-24 175928]
  228. S3 RivaTuner64;RivaTuner64;c:\program files (x86)\RivaTuner v2.24 MSI Master Overclocking Arena 2009 edition\RivaTuner64.sys [2012-12-28 19952]
  229. S3 RTL8167;Realtek 8167 NT Driver;c:\windows\system32\DRIVERS\Rt64win7.sys [2012-04-11 708200]
  230. S3 XENfiltv;XENfiltv;c:\windows\system32\drivers\XENfiltv.sys [2009-07-31 25600]
  231. .
  232. .
  233. Obsah adresáře 'Naplánované úlohy'
  234. .
  235. 2012-12-29 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
  236. - c:\program files (x86)\Google\Update\GoogleUpdate.exe [2012-11-24 15:24]
  237. .
  238. 2012-12-29 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
  239. - c:\program files (x86)\Google\Update\GoogleUpdate.exe [2012-11-24 15:24]
  240. .
  241. .
  242. --------- X64 Entries -----------
  243. .
  244. .
  245. [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
  246. "IgfxTray"="c:\windows\system32\igfxtray.exe" [2011-08-31 167704]
  247. "HotKeysCmds"="c:\windows\system32\hkcmd.exe" [2011-08-31 392472]
  248. "Persistence"="c:\windows\system32\igfxpers.exe" [2011-08-31 416024]
  249. "SysTrayApp"="c:\program files\IDT\WDM\sttray64.exe" [2012-09-20 1664000]
  250. "BtTray"="c:\program files (x86)\Bluetooth Suite\BtTray.exe" [2012-08-19 764032]
  251. "BtvStack"="c:\program files (x86)\Bluetooth Suite\BtvStack.exe" [2012-08-19 127616]
  252. "RivaTunerStartupDaemon"="c:\program files (x86)\RivaTuner v2.24 MSI Master Overclocking Arena 2009 edition\RivaTunerWrapper.exe" [2009-08-22 24576]
  253. "egui"="c:\program files\ESET\ESET Smart Security\egui.exe" [2011-08-09 4030008]
  254. .
  255. ------- Doplňkový sken -------
  256. .
  257. uLocal Page = c:\windows\system32\blank.htm
  258. mLocal Page = c:\windows\SysWOW64\blank.htm
  259. uInternet Settings,ProxyServer = 10.0.1.2:3128
  260. uInternet Settings,ProxyOverride = localhost;<local>
  261. LSP: %SystemRoot%\system32\PrxerDrv.dll
  262. TCP: DhcpNameServer = 192.168.1.254
  263. .
  264. - - - - NEPLATNÉ POLOŽKY ODSTRANĚNÉ Z REGISTRU - - - -
  265. .
  266. Wow6432Node-HKLM-Run-<NO NAME> - (no file)
  267. HKLM-Run-SynTPEnh - c:\program files (x86)\Synaptics\SynTP\SynTPEnh.exe
  268. .
  269. .
  270. .
  271. --------------------- ZAMKNUTÉ KLÍČE V REGISTRU ---------------------
  272. .
  273. [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}]
  274. @Denied: (A 2) (Everyone)
  275. @="FlashBroker"
  276. "LocalizedString"="@c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil32_11_3_300_265_ActiveX.exe,-101"
  277. .
  278. [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\Elevation]
  279. "Enabled"=dword:00000001
  280. .
  281. [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\LocalServer32]
  282. @="c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil32_11_3_300_265_ActiveX.exe"
  283. .
  284. [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\TypeLib]
  285. @="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
  286. .
  287. [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}]
  288. @Denied: (A 2) (Everyone)
  289. @="Shockwave Flash Object"
  290. .
  291. [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\InprocServer32]
  292. @="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_3_300_265.ocx"
  293. "ThreadingModel"="Apartment"
  294. .
  295. [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\MiscStatus]
  296. @="0"
  297. .
  298. [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ProgID]
  299. @="ShockwaveFlash.ShockwaveFlash.11"
  300. .
  301. [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
  302. @="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_3_300_265.ocx, 1"
  303. .
  304. [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\TypeLib]
  305. @="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
  306. .
  307. [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\Version]
  308. @="1.0"
  309. .
  310. [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
  311. @="ShockwaveFlash.ShockwaveFlash"
  312. .
  313. [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}]
  314. @Denied: (A 2) (Everyone)
  315. @="Macromedia Flash Factory Object"
  316. .
  317. [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\InprocServer32]
  318. @="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_3_300_265.ocx"
  319. "ThreadingModel"="Apartment"
  320. .
  321. [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ProgID]
  322. @="FlashFactory.FlashFactory.1"
  323. .
  324. [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
  325. @="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_3_300_265.ocx, 1"
  326. .
  327. [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\TypeLib]
  328. @="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
  329. .
  330. [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\Version]
  331. @="1.0"
  332. .
  333. [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
  334. @="FlashFactory.FlashFactory"
  335. .
  336. [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}]
  337. @Denied: (A 2) (Everyone)
  338. @="IFlashBroker4"
  339. .
  340. [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}\ProxyStubClsid32]
  341. @="{00020424-0000-0000-C000-000000000046}"
  342. .
  343. [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}\TypeLib]
  344. @="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
  345. "Version"="1.0"
  346. .
  347. [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\VideoLAN.VLCPlugin.*1*]
  348. @="?????????????????? v1"
  349. .
  350. [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\VideoLAN.VLCPlugin.*1*\CLSID]
  351. @="{E23FE9C6-778E-49D4-B537-38FCDE4887D8}"
  352. .
  353. [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\VideoLAN.VLCPlugin.*2*]
  354. @="?????????????????? v2"
  355. .
  356. [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\VideoLAN.VLCPlugin.*2*\CLSID]
  357. @="{9BE31822-FDAD-461B-AD51-BE1D1C159921}"
  358. .
  359. [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\PCW\Security]
  360. @Denied: (Full) (Everyone)
  361. .
  362. Celkový čas: 2012-12-29 23:19:26
  363. ComboFix-quarantined-files.txt 2012-12-29 22:19
  364. .
  365. Před spuštěním: Volných bajtů: 39 343 493 120
  366. Po spuštění: Volných bajtů: 39 267 565 568
  367. .
  368. - - End Of File - - 53AA220EEEB16D1A953672A10CE95E40
Advertisement
Add Comment
Please, Sign In to add comment
Public Pastes
We use cookies for various purposes including analytics. By continuing to use Pastebin, you agree to our use of cookies as described in the Cookies Policy.  OK, I Understand
Not a member of Pastebin yet?
Sign Up, it unlocks many cool features!