V nouzovém to fungovalo
ComboFix 12-06-14.01 - Jura 15.06.2012 14:31:24.3.2 - x86 MINIMAL
Microsoft Windows XP Home Edition 5.1.2600.3.1250.420.1029.18.2046.1700 [GMT 2:00]
Spuštěný z: c:\documents and settings\Jura\Plocha\ComboFix.exe
Použité ovládací přepínače :: c:\documents and settings\Jura\Plocha\CFScript.txt
AV: avast! Antivirus *Enabled/Updated* {7591DB91-41F0-48A3-B128-1A293FD8233D}
.
FILE ::
"c:\windows\system32\GameMon.des"
"c:\windows\Tasks\GoogleUpdateTaskMachineCore.job"
"c:\windows\Tasks\GoogleUpdateTaskMachineUA.job"
.
.
((((((((((((((((((((((((((((((((((((((( Ostatní výmazy )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
c:\program files\Google\Update
c:\program files\Google\Update\1.3.21.111\GoogleCrashHandler.exe
c:\program files\Google\Update\1.3.21.111\GoogleCrashHandler64.exe
c:\program files\Google\Update\1.3.21.111\GoogleUpdate.exe
c:\program files\Google\Update\1.3.21.111\GoogleUpdateBroker.exe
c:\program files\Google\Update\1.3.21.111\GoogleUpdateHelper.msi
c:\program files\Google\Update\1.3.21.111\GoogleUpdateOnDemand.exe
c:\program files\Google\Update\1.3.21.111\GoogleUpdateSetup.exe
c:\program files\Google\Update\1.3.21.111\goopdate.dll
c:\program files\Google\Update\1.3.21.111\goopdateres_am.dll
c:\program files\Google\Update\1.3.21.111\goopdateres_ar.dll
c:\program files\Google\Update\1.3.21.111\goopdateres_bg.dll
c:\program files\Google\Update\1.3.21.111\goopdateres_bn.dll
c:\program files\Google\Update\1.3.21.111\goopdateres_ca.dll
c:\program files\Google\Update\1.3.21.111\goopdateres_cs.dll
c:\program files\Google\Update\1.3.21.111\goopdateres_da.dll
c:\program files\Google\Update\1.3.21.111\goopdateres_de.dll
c:\program files\Google\Update\1.3.21.111\goopdateres_el.dll
c:\program files\Google\Update\1.3.21.111\goopdateres_en-GB.dll
c:\program files\Google\Update\1.3.21.111\goopdateres_en.dll
c:\program files\Google\Update\1.3.21.111\goopdateres_es-419.dll
c:\program files\Google\Update\1.3.21.111\goopdateres_es.dll
c:\program files\Google\Update\1.3.21.111\goopdateres_et.dll
c:\program files\Google\Update\1.3.21.111\goopdateres_fa.dll
c:\program files\Google\Update\1.3.21.111\goopdateres_fi.dll
c:\program files\Google\Update\1.3.21.111\goopdateres_fil.dll
c:\program files\Google\Update\1.3.21.111\goopdateres_fr.dll
c:\program files\Google\Update\1.3.21.111\goopdateres_gu.dll
c:\program files\Google\Update\1.3.21.111\goopdateres_hi.dll
c:\program files\Google\Update\1.3.21.111\goopdateres_hr.dll
c:\program files\Google\Update\1.3.21.111\goopdateres_hu.dll
c:\program files\Google\Update\1.3.21.111\goopdateres_id.dll
c:\program files\Google\Update\1.3.21.111\goopdateres_is.dll
c:\program files\Google\Update\1.3.21.111\goopdateres_it.dll
c:\program files\Google\Update\1.3.21.111\goopdateres_iw.dll
c:\program files\Google\Update\1.3.21.111\goopdateres_ja.dll
c:\program files\Google\Update\1.3.21.111\goopdateres_kn.dll
c:\program files\Google\Update\1.3.21.111\goopdateres_ko.dll
c:\program files\Google\Update\1.3.21.111\goopdateres_lt.dll
c:\program files\Google\Update\1.3.21.111\goopdateres_lv.dll
c:\program files\Google\Update\1.3.21.111\goopdateres_ml.dll
c:\program files\Google\Update\1.3.21.111\goopdateres_mr.dll
c:\program files\Google\Update\1.3.21.111\goopdateres_ms.dll
c:\program files\Google\Update\1.3.21.111\goopdateres_nl.dll
c:\program files\Google\Update\1.3.21.111\goopdateres_no.dll
c:\program files\Google\Update\1.3.21.111\goopdateres_pl.dll
c:\program files\Google\Update\1.3.21.111\goopdateres_pt-BR.dll
c:\program files\Google\Update\1.3.21.111\goopdateres_pt-PT.dll
c:\program files\Google\Update\1.3.21.111\goopdateres_ro.dll
c:\program files\Google\Update\1.3.21.111\goopdateres_ru.dll
c:\program files\Google\Update\1.3.21.111\goopdateres_sk.dll
c:\program files\Google\Update\1.3.21.111\goopdateres_sl.dll
c:\program files\Google\Update\1.3.21.111\goopdateres_sr.dll
c:\program files\Google\Update\1.3.21.111\goopdateres_sv.dll
c:\program files\Google\Update\1.3.21.111\goopdateres_sw.dll
c:\program files\Google\Update\1.3.21.111\goopdateres_ta.dll
c:\program files\Google\Update\1.3.21.111\goopdateres_te.dll
c:\program files\Google\Update\1.3.21.111\goopdateres_th.dll
c:\program files\Google\Update\1.3.21.111\goopdateres_tr.dll
c:\program files\Google\Update\1.3.21.111\goopdateres_uk.dll
c:\program files\Google\Update\1.3.21.111\goopdateres_ur.dll
c:\program files\Google\Update\1.3.21.111\goopdateres_vi.dll
c:\program files\Google\Update\1.3.21.111\goopdateres_zh-CN.dll
c:\program files\Google\Update\1.3.21.111\goopdateres_zh-TW.dll
c:\program files\Google\Update\1.3.21.111\npGoogleUpdate3.dll
c:\program files\Google\Update\1.3.21.111\psmachine.dll
c:\program files\Google\Update\1.3.21.111\psuser.dll
c:\program files\Google\Update\Download\{430FD4D0-B729-4F61-AA34-91526481799D}\1.3.21.111\GoogleUpdateSetup.exe
c:\program files\Google\Update\Download\{4DC8B4CA-1BDA-483E-B5FA-D3C12E15B62D}\19.0.1084.56\chrome_updater.exe
c:\program files\Google\Update\Download\{4FDC11D6-C2E0-46EC-A025-CA563AFB3607}\GoogleUpdateSetup.exe
c:\program files\Google\Update\GoogleUpdate.exe
c:\program files\Mozilla Maintenance Service
c:\program files\Mozilla Maintenance Service\maintenanceservice.exe
c:\program files\Mozilla Maintenance Service\Uninstall.exe
.
.
((((((((((((((((((((((((((((((((((((((( Ovladače/Služby )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
-------\Legacy_EAGLEXNT
-------\Legacy_GUPDATE1C98981455B1E2
-------\Legacy_GUPDATEM
-------\Legacy_NPGGSVC
-------\Legacy_TDX
-------\Service_EagleXNt
-------\Service_gupdate1c98981455b1e2
-------\Service_gupdatem
-------\Service_npggsvc
-------\Service_tdx
-------\Service_MozillaMaintenance
-------\Service_MozillaMaintenance
.
.
((((((((((((((((((((((((( Soubory vytvořené od 2012-05-15 do 2012-06-15 )))))))))))))))))))))))))))))))
.
.
2012-06-13 18:34 . 2012-06-13 18:34 -------- d-----w- c:\documents and settings\Jura\Local Settings\Data aplikací\Threat Expert
2012-06-13 16:34 . 2012-06-13 16:34 -------- d-----w- c:\documents and settings\Jura\Data aplikací\Malwarebytes
2012-06-13 16:34 . 2012-06-13 16:34 -------- d-----w- c:\documents and settings\All Users\Data aplikací\Malwarebytes
2012-06-13 16:34 . 2012-04-04 13:56 22344 ----a-w- c:\windows\system32\drivers\mbam.sys
2012-06-13 14:33 . 2012-06-13 14:33 -------- d-----w- c:\program files\PC Tools
2012-06-13 14:29 . 2012-05-11 09:14 203088 ----a-w- c:\windows\system32\drivers\PCTSD.sys
2012-06-13 14:29 . 2012-06-13 18:40 -------- d-----w- c:\program files\Common Files\PC Tools
2012-06-13 14:28 . 2012-06-13 18:35 -------- d-----w- c:\documents and settings\All Users\Data aplikací\PC Tools
2012-06-13 14:28 . 2012-06-13 14:28 -------- d-----w- c:\documents and settings\Jura\Data aplikací\TestApp
2012-06-13 11:53 . 2012-06-13 11:53 -------- d-----w- c:\documents and settings\Jura\.thumbnails
2012-06-13 11:42 . 2012-06-13 11:42 388096 ----a-r- c:\documents and settings\Jura\Data aplikací\Microsoft\Installer\{45A66726-69BC-466B-A7A4-12FCBA4883D7}\HiJackThis.exe
2012-06-13 09:04 . 2012-06-13 09:04 -------- d-----w- c:\documents and settings\mamka\Data aplikací\Toolbar4
2012-06-05 10:40 . 2012-06-06 09:04 -------- d-----w- c:\windows\system32\C2MP
2012-05-26 20:41 . 2012-05-26 20:41 -------- d-----w- c:\documents and settings\LocalService\Local Settings\Data aplikací\Adobe
2012-05-20 19:59 . 2012-05-20 19:59 -------- d-----w- c:\documents and settings\Jura\AppData
2012-05-18 21:10 . 2012-05-18 21:12 -------- d-----w- c:\documents and settings\Administrator\Data aplikací\XnView
2012-05-18 20:55 . 2012-05-18 20:55 -------- d-----w- c:\documents and settings\Administrator\Data aplikací\BSplayer PRO
2012-05-18 20:49 . 2012-05-18 20:49 -------- d-----w- c:\documents and settings\Administrator\Local Settings\Data aplikací\Opera
2012-05-17 12:45 . 2012-05-17 12:45 -------- d-----w- c:\program files\Microsoft Games for Windows - LIVE
.
.
.
(((((((((((((((((((((((((((((((((((((((( Find3M výpis ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2012-06-12 20:49 . 2009-09-30 17:09 139448 ----a-w- c:\windows\system32\drivers\PnkBstrK.sys
2012-06-12 20:48 . 2009-09-30 20:00 282472 ----a-w- c:\windows\system32\PnkBstrB.xtr
2012-06-12 20:48 . 2009-09-30 17:09 282472 ----a-w- c:\windows\system32\PnkBstrB.exe
2012-06-12 19:55 . 2009-09-30 17:09 282472 ----a-w- c:\windows\system32\PnkBstrB.ex0
2012-06-10 09:56 . 2012-04-03 09:53 426184 ----a-w- c:\windows\system32\FlashPlayerApp.exe
2012-06-10 09:56 . 2011-05-14 16:51 70344 ----a-w- c:\windows\system32\FlashPlayerCPLApp.cpl
2012-05-24 18:50 . 2009-08-22 14:42 76888 ----a-w- c:\windows\system32\PnkBstrA.exe
2012-04-22 20:14 . 2012-04-22 20:14 3515392 ----a-w- c:\windows\system32\ffdshow.ax
2012-04-22 20:12 . 2012-04-22 20:12 4424704 ----a-w- c:\windows\system32\ffmpeg.dll
2012-04-08 23:40 . 2012-04-08 23:40 79360 ----a-w- c:\windows\system32\ff_vfw.dll
2012-04-08 23:39 . 2012-04-08 23:39 260608 ----a-w- c:\windows\system32\TomsMoComp_ff.dll
2012-04-08 23:39 . 2012-04-08 23:39 99840 ----a-w- c:\windows\system32\ff_wmv9.dll
2012-04-08 23:39 . 2012-04-08 23:39 158720 ----a-w- c:\windows\system32\ff_unrar.dll
2012-04-08 23:39 . 2012-04-08 23:39 1525248 ----a-w- c:\windows\system32\ff_samplerate.dll
2012-04-08 23:39 . 2012-04-08 23:39 146944 ----a-w- c:\windows\system32\ff_libmad.dll
2012-04-08 23:39 . 2012-04-08 23:39 212480 ----a-w- c:\windows\system32\ff_libdts.dll
2012-04-08 23:39 . 2012-04-08 23:39 115200 ----a-w- c:\windows\system32\ff_liba52.dll
2012-04-08 23:39 . 2012-04-08 23:39 328704 ----a-w- c:\windows\system32\ff_libfaad2.dll
2012-03-29 14:21 . 2012-03-29 14:21 606720 ----a-w- c:\windows\system32\LAVVideo.ax
2012-03-29 14:21 . 2012-03-29 14:21 462848 ----a-w- c:\windows\system32\LAVSplitter.ax
2012-03-29 14:21 . 2012-03-29 14:21 217600 ----a-w- c:\windows\system32\LAVAudio.ax
2012-03-29 14:21 . 2012-03-29 14:21 172032 ----a-w- c:\windows\system32\libbluray.dll
2012-03-29 14:21 . 2012-03-29 14:21 6582226 ----a-w- c:\windows\system32\avcodec-lav-54.dll
2012-03-29 14:21 . 2012-03-29 14:21 374152 ----a-w- c:\windows\system32\swscale-lav-2.dll
2012-03-29 14:21 . 2012-03-29 14:21 207872 ----a-w- c:\windows\system32\avutil-lav-51.dll
2012-03-29 14:21 . 2012-03-29 14:21 144523 ----a-w- c:\windows\system32\avfilter-lav-2.dll
2012-03-29 14:21 . 2012-03-29 14:21 1152365 ----a-w- c:\windows\system32\avformat-lav-54.dll
2012-03-27 15:08 . 2012-03-27 15:08 267264 ----a-w- c:\windows\system32\IntelQuickSyncDecoder.dll
2012-03-20 16:38 . 2012-03-20 16:39 73728 ----a-w- c:\windows\system32\javacpl.cpl
2012-03-20 16:38 . 2011-05-16 21:19 472808 ----a-w- c:\windows\system32\deployJava1.dll
.
.
(((((((((((((((((((((((((((((((((((((((((((( Look )))))))))))))))))))))))))))))))))))))))))))))))))))))))))
.
---- Directory of c:\documents and settings\Jura\Data aplikací\TestApp ----
.
2012-06-13 14:28 . 2012-06-13 14:29 1016 ----a-w- c:\documents and settings\Jura\Data aplikací\TestApp\TestApp.txt
.
.
((((((((((((((((((((((((((((( SnapShot@2012-06-13_18.26.35 )))))))))))))))))))))))))))))))))))))))))
.
+ 2012-06-15 12:46 . 2012-06-15 12:46 16384 c:\windows\temp\Perflib_Perfdata_140.dat
.
(((((((((((((((((((((((((((((((((( Spouštěcí body v registru )))))))))))))))))))))))))))))))))))))))))))))
.
.
*Poznámka* prázdné záznamy a legitimní výchozí údaje nejsou zobrazeny.
REGEDIT4
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\00avast]
@="{472083B0-C522-11CF-8763-00608CC02F24}"
[HKEY_CLASSES_ROOT\CLSID\{472083B0-C522-11CF-8763-00608CC02F24}]
2012-03-07 00:15 123536 ----a-w- c:\program files\AVAST Software\Avast\ashShell.dll
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"DAEMON Tools Lite"="d:\program files\DAEMON Tools Lite\DTLite.exe" [2010-04-01 357696]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"ArcSoft Connection Service"="c:\program files\Common Files\ArcSoft\Connection Service\Bin\ACDaemon.exe" [2010-10-27 207424]
"RemoteControl"="c:\program files\CyberLink\PowerDVD\PDVDServ.exe" [2004-11-02 32768]
"RTHDCPL"="RTHDCPL.EXE" [2009-01-13 18084864]
"avast"="c:\program files\AVAST Software\Avast\avastUI.exe" [2012-03-07 4241512]
"NvCplDaemon"="c:\windows\system32\NvCpl.dll" [2012-02-29 15494464]
"NvMediaCenter"="NvMCTray.dll" [2012-02-29 108352]
"nwiz"="c:\program files\NVIDIA Corporation\nview\nwiz.exe" [2012-02-29 1634112]
"Malwarebytes' Anti-Malware"="d:\program files\Malwarebytes' Anti-Malware\mbamgui.exe" [2012-04-04 462408]
"QuickTime Task"="c:\program files\QuickTime\qttask.exe" [2010-03-18 421888]
.
[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="c:\windows\system32\CTFMON.EXE" [2008-04-14 15360]
.
c:\documents and settings\mamka\Nabídka Start\Programy\Po spuštění\
OpenOffice.org 3.0.lnk - c:\program files\OpenOffice.org 3\program\quickstart.exe [2008-10-5 393216]
.
c:\documents and settings\Jura\Nabídka Start\Programy\Po spuštění\
Xfire.lnk.disabled [2009-4-14 549]
.
c:\documents and settings\All Users\Nabídka Start\Programy\Po spuštění\
Data Sync.lnk - c:\program files\T-Mobile\Data Sync\Voxsync.exe [2012-3-17 716800]
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Wdf01000.sys]
@="Driver"
.
[HKLM\~\startupfolder\C:^Documents and Settings^All Users^Nabídka Start^Programy^Po spuštění^GamePark klient 2.lnk]
path=c:\documents and settings\All Users\Nabídka Start\Programy\Po spuštění\GamePark klient 2.lnk
backup=c:\windows\pss\GamePark klient 2.lnkCommon Startup
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NokiaSuite.exe]
2012-02-01 08:11 1083264 ----a-w- c:\program files\Nokia\Nokia Suite\NokiaSuite.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Pando Media Booster]
2011-09-16 17:49 3077528 ----a-w- c:\program files\Pando Networks\Media Booster\PMB.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\TO2SSM_McciTrayApp]
2009-01-16 12:01 1473536 ----a-w- c:\program files\TO2SSM\McciTrayApp.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\WinFast Schedule]
2008-10-02 13:57 2916352 ----a-w- c:\program files\WinFast\WFDTV\WFWIZ.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\WinFastDTV]
2008-10-24 09:36 90112 ----a-w- c:\program files\WinFast\WFDTV\DTVSchdl.exe
.
[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run-]
"RGSC"=d:\hry\GTA IV\Rockstar Games Social Club\RGSCLauncher.exe /silent
.
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\system32\\sessmgr.exe"=
"%windir%\\Network Diagnostic\\xpnetdiag.exe"=
"d:\\hry\\Ubisoft\\Assassin's Creed\\AssassinsCreed_Dx9.exe"=
"d:\\hry\\Ubisoft\\Assassin's Creed\\AssassinsCreed_Dx10.exe"=
"d:\\hry\\Ubisoft\\Assassin's Creed\\AssassinsCreed_Launcher.exe"=
"d:\\hry\\Cenega Czech\\VIETCONG\\vietcong.exe"=
"d:\\Program Files\\Opera\\opera.exe"=
"d:\\hry\\Worms 4 Mayhem\\WORMS 4 MAYHEM.EXE"=
"c:\\Program Files\\Microsoft Office\\Office12\\OUTLOOK.EXE"=
"c:\\Documents and Settings\\Jura\\temp\\TeamViewer\\Version4\\TeamViewer.exe"=
"c:\\WINDOWS\\system32\\PnkBstrA.exe"=
"c:\\WINDOWS\\system32\\PnkBstrB.exe"=
"d:\\Program Files\\Lavalys\\EVEREST Ultimate Edition\\everest.exe"=
"d:\\Program Files\\Xfire\\Xfire.exe"=
"c:\\Program Files\\Ubisoft\\Ubisoft Game Launcher\\UbisoftGameLauncher.exe"=
"d:\\hry\\Ubisoft\\Assassins creed 2\\AssassinsCreedIIGame.exe"=
"d:\\hry\\Ubisoft\\Assassins creed 2\\AssassinsCreedII.exe"=
"d:\\hry\\Ubisoft\\Assassins creed 2\\UPlayBrowser.exe"=
"d:\\hry\\Ubisoft\\Assassin's Creed Brotherhood\\ACBSP.exe"=
"d:\\hry\\Ubisoft\\Assassin's Creed Brotherhood\\ACBMP.exe"=
"d:\\hry\\Ubisoft\\Assassin's Creed Brotherhood\\AssassinsCreedBrotherhood.exe"=
"d:\\hry\\Ubisoft\\Assassin's Creed Brotherhood\\UPlayBrowser.exe"=
"c:\\Program Files\\Google\\Google Earth\\client\\googleearth.exe"=
"c:\\Program Files\\Pando Networks\\Media Booster\\PMB.exe"=
"i:\\hry\\Vietcong\\vietcong.exe"=
"i:\\bulanci.exe"=
"c:\\Documents and Settings\\All Users\\Data aplikací\\NexonUS\\NGM\\NGM.exe"=
"i:\\hry\\Call of Duty 4 - Modern Warfare\\iw3mp.exe"=
"i:\\hry\\ANNO 1404\\tools\\Anno4Web.exe"=
"i:\\Runes_of_Magic_4_0_1_2430_eu_slim.exe"=
"i:\\hry\\Ubisoft\\Assassin's Creed Revelations\\ACRSP.exe"=
"i:\\hry\\Ubisoft\\Assassin's Creed Revelations\\ACRMP.exe"=
"i:\\hry\\Ubisoft\\Assassin's Creed Revelations\\AssassinsCreedRevelations.exe"=
"i:\\hry\\Ubisoft\\Assassin's Creed Revelations\\ACRPR.exe"=
"i:\\hry\\lineage2\\System\\L2.bin"=
"i:\\hry\\Left 4 Dead 2\\left4dead2.exe"=
"i:\\Left 4 Dead\\left4dead.exe"=
"i:\\hry\\Age of Empires Online\\Spartan.exe"=
"i:\\hry\\Age of Empires III\\age3x.exe"=
"i:\\hry\\Age of Empires III\\age3y.exe"=
"i:\\hry\\Call of Duty 2\\CoD2MP_s.exe"=
"c:\\WINDOWS\\system32\\mmc.exe"=
"c:\\Program Files\\NVIDIA Corporation\\NVIDIA Update Core\\daemonu.exe"=
"c:\\Program Files\\Bonjour\\mDNSResponder.exe"=
"i:\\hry\\sindicate\\client.bin"=
"i:\\hry\\ANNO 1404\\Anno4.exe"=
"i:\\hry\\ANNO 1404\\tools\\Benchmark.exe"=
"i:\\hry\\ANNO 2070\\Anno5.exe"=
"i:\\hry\\ANNO 2070\\AutoPatcher.exe"=
"i:\\hry\\ANNO 2070\\InitEngine.exe"=
.
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\GloballyOpenPorts\List]
"26349:TCP"= 26349:TCP:*:Disabled:BitComet 26349 TCP
"26349:UDP"= 26349:UDP:*:Disabled:BitComet 26349 UDP
"8080:TCP"= 8080:TCP:Windows Media Format SDK (DVBTAP.exe)
"57508:TCP"= 57508:TCP:Pando Media Booster
"57508:UDP"= 57508:UDP:Pando Media Booster
.
R0 sfdrv01a;StarForce Protection Environment Driver (version 1.x.a);c:\windows\system32\drivers\sfdrv01a.sys [5.7.2006 14:46 63352]
R0 sptd;sptd;c:\windows\system32\drivers\sptd.sys [17.12.2008 13:18 691696]
R1 aswSnx;aswSnx;c:\windows\system32\drivers\aswSnx.sys [18.3.2012 11:15 612184]
R1 aswSP;aswSP;c:\windows\system32\drivers\aswSP.sys [18.3.2012 11:15 337880]
R1 BS_I2cIo;BS_I2cIo;c:\windows\system32\drivers\BS_I2cIo.sys [10.12.2008 11:34 6272]
R2 aswFsBlk;aswFsBlk;c:\windows\system32\drivers\aswFsBlk.sys [18.3.2012 11:15 20696]
R2 EAPPkt;Realtek EAPPkt Protocol;c:\windows\system32\drivers\EAPPkt.sys [19.1.2010 21:23 38144]
R2 MBAMService;MBAMService;d:\program files\Malwarebytes' Anti-Malware\mbamservice.exe [13.6.2012 18:34 654408]
R2 nvUpdatusService;NVIDIA Update Service Daemon;c:\program files\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe [17.4.2012 14:19 2348352]
R3 DynCal;Dynamic Calibration Service;c:\windows\system32\drivers\DynCal.sys [7.11.2007 20:15 12928]
R3 MBAMProtector;MBAMProtector;c:\windows\system32\drivers\mbam.sys [13.6.2012 18:34 22344]
R3 pcouffin;VSO Software pcouffin;c:\windows\system32\drivers\pcouffin.sys [20.4.2010 20:24 47360]
R3 WFLR6654;WinFast TV2000 XP Expert (FM1216MK3);c:\windows\system32\drivers\wfeaglxt.sys [10.12.2011 17:46 433920]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;c:\windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [18.3.2010 14:16 130384]
S2 iphlpsvc;@%SystemRoot%\system32\iphlpsvc.dll,-200;c:\windows\System32\svchost.exe -k NetSvcs [18.8.2004 14:00 14336]
S3 1394hub;1394 Enabled Hub;c:\windows\system32\svchost.exe -k netsvcs [18.8.2004 14:00 14336]
S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service;c:\windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [3.4.2012 11:53 257224]
S3 BS_Flash;BS_Flash;c:\program files\BIOS Update\Award\BS_Flash.sys [10.12.2008 11:34 3604]
S3 DrvAgent32;DrvAgent32;c:\windows\system32\drivers\DrvAgent32.sys [20.11.2011 13:53 23456]
S3 WinDefend;Windows Defender;c:\windows\System32\svchost.exe -k secsvcs [18.8.2004 14:00 14336]
S3 WPFFontCache_v0400;Windows Presentation Foundation Font Cache 4.0.0.0;c:\windows\Microsoft.NET\Framework\v4.0.30319\WPF\WPFFontCache_v0400.exe [18.3.2010 14:16 753504]
.
Obsah adresáře 'Naplánované úlohy'
.
2012-06-15 c:\windows\Tasks\Adobe Flash Player Updater.job
- c:\windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2012-04-03 09:56]
.
.
------- Doplňkový sken -------
.
uStart Page =
hxxp://seznam.cz/IE: E&xport to Microsoft Excel - c:\progra~2\MICROS~2\Office12\EXCEL.EXE/3000
IE: Free YouTube Download - c:\documents and settings\Jura\Data aplikací\DVDVideoSoftIEHelpers\freeyoutubedownload.htm
Trusted Zone: mojebanka.cz\*
Trusted Zone: mojebanka.cz\*
TCP: DhcpNameServer = 10.0.0.138
FF - ProfilePath - c:\documents and settings\Jura\Data aplikací\Mozilla\Firefox\Profiles\uu5b7sxw.default\
FF - prefs.js: browser.search.selectedEngine - Seznam
FF - prefs.js: browser.startup.homepage -
www.seznam.cz.
- - - - NEPLATNÉ POLOŽKY ODSTRANĚNÉ Z REGISTRU - - - -
.
AddRemove-MozillaMaintenanceService - c:\program files\Mozilla Maintenance Service\uninstall.exe
.
.
.
**************************************************************************
.
catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer,
http://www.gmer.netRootkit scan 2012-06-15 14:48
Windows 5.1.2600 Service Pack 3 NTFS
.
skenování skrytých procesů ...
.
skenování skrytých položek 'Po spuštění' ...
.
skenování skrytých souborů ...
.
sken byl úspešně dokončen
skryté soubory: 0
.
**************************************************************************
.
--------------------- ZAMKNUTÉ KLÍČE V REGISTRU ---------------------
.
[HKEY_USERS\S-1-5-21-484763869-1682526488-725345543-1004\Software\SecuROM\!CAUTION! NEVER A OR CHANGE ANY KEY*]
@Allowed: (Read) (RestrictedCode)
@Allowed: (Read) (RestrictedCode)
"??"=hex:ee,db,d7,e3,9c,e7,b4,9b,f1,18,ef,a2,dc,36,ad,99,e3,0e,be,57,ef,5b,f1,
ad,03,3e,5c,90,61,46,c5,1d,f9,61,41,03,c1,ca,79,ff,e6,51,09,57,a9,17,18,4e,\
"??"=hex:2e,1c,22,53,ea,d3,79,13,91,66,67,99,58,46,66,fd
.
[HKEY_USERS\S-1-5-21-484763869-1682526488-725345543-1004\Software\SecuROM\License information*]
"datasecu"=hex:88,c5,02,35,d1,5c,e1,f2,af,6f,00,94,fc,4e,d5,44,56,99,16,8a,42,
0c,d2,d0,aa,cc,5d,a4,dc,42,e2,51,03,92,a6,6b,18,10,ad,46,dc,23,a0,2b,e4,53,\
"rkeysecu"=hex:16,91,fe,d1,f9,ca,e9,86,b5,47,a3,03,79,85,83,d3
.
--------------------- Knihovny navázané na běžící procesy ---------------------
.
- - - - - - - > 'explorer.exe'(3792)
c:\windows\system32\msi.dll
c:\windows\system32\WPDShServiceObj.dll
c:\windows\system32\PortableDeviceTypes.dll
c:\windows\system32\PortableDeviceApi.dll
.
------------------------ Jiné spuštené procesy ------------------------
.
c:\program files\AVAST Software\Avast\AvastSvc.exe
c:\program files\Common Files\ArcSoft\Connection Service\Bin\ACService.exe
c:\program files\Bonjour\mDNSResponder.exe
c:\program files\Java\jre6\bin\jqs.exe
c:\program files\Common Files\Motive\McciCMService.exe
c:\windows\system32\nvsvc32.exe
c:\windows\system32\PnkBstrA.exe
c:\program files\Common Files\Ulead Systems\DVD\ULCDRSvr.exe
c:\program files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
c:\windows\RTHDCPL.EXE
c:\windows\system32\RunDLL32.exe
c:\program files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe
c:\windows\system32\wscntfy.exe
c:\program files\T-Mobile\Data Sync\SyncManager.exe
.
**************************************************************************
.
Celkový čas: 2012-06-15 14:52:29 - počítač byl restartován
ComboFix-quarantined-files.txt 2012-06-15 12:52
ComboFix2.txt 2012-06-14 08:07
ComboFix3.txt 2012-06-13 18:32
.
Před spuštěním: 876 851 200
Po spuštění: 910 577 664
.
- - End Of File - - 8473595761C42B74DE54B2624633B582
