tak mistře, myslim, že to vypadá dost dobře
konečně se to asi povedlo
ComboFix 07-09-11.1 - "Kamil" 2007-09-11 19:02:45.5 - NTFSx86
Syst‚m Microsoft Windows XP Professional 5.1.2600.2.1250.1.1029.18.707 [GMT 2:00]
* Created a new restore point
FILE::
C:\Documents and Settings\Kamil\Nabídka Start\Programy\Po spuštění\ctfmon.exe
.
((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))
.
C:\Recycled
C:\Recycled\desktop.ini
C:\Recycled\INFO2
C:\Recycled\Recycled\ctfmon.exe
D:\Recycled
D:\Recycled\ctfmon.exe
D:\Recycled\desktop.ini
D:\Recycled\INFO2
F:\Recycled
F:\Recycled\ctfmon.exe
F:\Recycled\desktop.ini
F:\Recycled\INFO2
((((((((((((((((((((((((( Files Created from 2007-08-11 to 2007-09-11 )))))))))))))))))))))))))))))))
.
2007-09-10 18:26 51,200 --a------ C:\WINDOWS\NirCmd.exe
2007-09-10 16:55 <DIR> d-------- C:\WINDOWS\system32\QuickTime
2007-09-09 22:05 147,968 --a------ C:\WINDOWS\R.COM
2007-09-09 22:05 137,216 --a------ C:\WINDOWS\system32\T.COM
2007-09-09 20:33 <DIR> d-------- C:\Program Files\RegCleaner
2007-09-09 19:55 <DIR> d-------- C:\Program Files\CCleaner
2007-09-09 19:24 <DIR> drahs---- C:\autorun.inf
2007-08-26 20:17 <DIR> d-------- C:\Program Files\NCH Swift Sound
2007-08-26 20:17 <DIR> d-------- C:\DOCUME~1\ALLUSE~1\DATAAP~1\NCH Swift Sound
2007-08-26 13:12 <DIR> d-------- C:\Program Files\Mp3 Knife
2007-08-24 14:13 <DIR> d-------- C:\DOCUME~1\Kamil\Phone Browser
2007-08-24 14:05 <DIR> d-------- C:\DOCUME~1\ALLUSE~1\DATAAP~1\PC Suite
2007-08-24 14:04 8,320 --a------ C:\WINDOWS\system32\drivers\nmwcdc.sys
2007-08-24 14:04 65,536 --a------ C:\WINDOWS\system32\nmwcdcocls.dll
2007-08-24 14:04 137,216 --a------ C:\WINDOWS\system32\drivers\nmwcd.sys
2007-08-24 14:04 12,288 --a------ C:\WINDOWS\system32\drivers\nmwcdcm.sys
2007-08-24 14:04 12,288 --a------ C:\WINDOWS\system32\drivers\nmwcdcj.sys
2007-08-24 14:04 <DIR> d----c--- C:\WINDOWS\system32\DRVSTORE
2007-08-24 14:04 <DIR> d-------- C:\Program Files\PC Connectivity Solution
2007-08-24 14:04 <DIR> d-------- C:\Program Files\DIFX
2007-08-24 14:04 <DIR> d-------- C:\Program Files\Common Files\PCSuite
2007-08-24 14:04 <DIR> d-------- C:\Program Files\Common Files\Nokia
2007-08-24 14:03 90,624 --a------ C:\WINDOWS\system32\nmwcdcls.dll
2007-08-24 14:03 <DIR> d-------- C:\Program Files\Nokia
2007-08-24 14:00 <DIR> d-------- C:\DOCUME~1\ALLUSE~1\DATAAP~1\Installations
.
(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2007-08-27 13:04 --------- d-------- C:\Program Files\NCH Swift Sound
2007-08-12 13:35 --------- d-------- C:\Program Files\ICQLite
2007-07-21 19:15 --------- d-------- C:\Program Files\QIP
2007-07-21 17:16 298576 --a------ C:\WINDOWS\system32\drivers\amon.sys
2007-07-21 17:16 180224 --a------ C:\WINDOWS\system32\imon.dll
2007-07-21 17:16 114688 --a------ C:\WINDOWS\system32\nms32.dll
2007-07-21 14:32 --------- d--h----- C:\Program Files\InstallShield Installation Information
2007-07-21 14:32 --------- d-------- C:\Program Files\KYE
2007-07-21 13:51 --------- d-------- C:\DOCUME~1\ALLUSE~1\DATAAP~1\Comodo
2007-07-21 12:40 --------- d-------- C:\Program Files\Trend Micro
2007-07-18 13:58 --------- d-------- C:\Program Files\Codec Pack - All In 1
2007-07-17 14:49 --------- d-------- C:\Program Files\Lavasoft
2007-07-17 14:49 --------- d-------- C:\Program Files\Common Files\Wise Installation Wizard
2007-07-17 14:49 --------- d-------- C:\DOCUME~1\ALLUSE~1\DATAAP~1\Lavasoft
2007-07-17 12:07 --------- d-a------ C:\DOCUME~1\ALLUSE~1\DATAAP~1\TEMP
.
((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
.
*Note* empty entries & legit default entries are not shown
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"SoundMan"="SOUNDMAN.EXE" [2004-05-14 09:47 C:\WINDOWS\SOUNDMAN.EXE]
"NvCplDaemon"="C:\WINDOWS\System32\NvCpl.dll" [2004-04-29 21:29]
"nwiz"="nwiz.exe" [2004-04-29 21:29 C:\WINDOWS\system32\nwiz.exe]
"NvMediaCenter"="C:\WINDOWS\System32\NvMcTray.dll" [2004-04-29 21:29]
"WinampAgent"="C:\Program Files\Winamp\Winampa.exe" [2003-04-02 04:20]
"NeroFilterCheck"="C:\WINDOWS\system32\NeroCheck.exe" [2001-07-09 10:50]
"RemoteControl"="C:\Program Files\PowerDVD\PDVDServ.exe" [2005-01-12 03:01]
"ICQ Lite"="C:\Program Files\ICQLite\ICQLite.exe" [2006-07-11 12:06]
"BluetoothAuthenticationAgent"="bthprops.cpl" [2004-08-17 15:49 C:\WINDOWS\system32\bthprops.cpl]
"HP Software Update"="C:\Program Files\HP\HP Software Update\HPWuSchd2.exe" [2005-05-12 00:12]
"mouseElf"="C:\PROGRA~1\KYE\GENIUS~1\mouseElf.exe" [2002-05-20 14:21]
"nod32kui"="C:\Program Files\Eset\nod32kui.exe" [2005-10-02 18:30]
"PCSuiteTrayApplication"="C:\Program Files\Nokia\Nokia PC Suite 6\LaunchApplication.exe" [2007-03-23 13:20]
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"MSMSGS"="C:\Program Files\Messenger\msmsgs.exe" [2004-10-13 18:24]
[HKEY_USERS\.default\software\microsoft\windows\currentversion\run]
"Nokia.PCSync"=C:\Program Files\Nokia\Nokia PC Suite 6\PcSync2.exe /NoDialog
C:\DOCUME~1\ALLUSE~1\NABDKA~1\Programy\POSPUT~1\
Adobe Reader Speed Launch.lnk - C:\Program Files\Acrobat 7.0\Reader\reader_sl.exe [2005-09-24 07:05:26]
HP Digital Imaging Monitor.lnk - C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe [2005-05-12 00:23:26]
Microsoft Office.lnk - C:\Program Files\Microsoft Office\Office10\OSA.EXE [2001-02-13 11:01:04]
R0 viamraid;viamraid;C:\WINDOWS\system32\drivers\viamraid.sys
R3 genmcmn;Genius NetScroll Optical Mouse Driver;C:\WINDOWS\system32\DRIVERS\gmfiltr.sys
R3 PSched;Plánovač paketů technologie QoS;C:\WINDOWS\system32\DRIVERS\psched.sys
R3 USBSTOR;Ovladač velkokapacitního paměťového zařízení USB;C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS
S0 qyonupco;qyonupco;C:\WINDOWS\system32\drivers\gxwjechb.sys
S3 usbccgp;Obecný nadřazený ovladač Microsoft USB;C:\WINDOWS\system32\DRIVERS\usbccgp.sys
S3 usbscan;Ovladač skeneru USB;C:\WINDOWS\system32\DRIVERS\usbscan.sys
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Svchost - NetSvcs
Schedule
.
Contents of the 'Scheduled Tasks' folder
"2007-05-01 19:20:51 C:\WINDOWS\Tasks\AppleSoftwareUpdate.job"
- C:\Program Files\Apple Software Update\SoftwareUpdate.exe
.
**************************************************************************
catchme 0.3.1061 W2K/XP/Vista - rootkit/stealth malware detector by Gmer,
http://www.gmer.net
Rootkit scan 2007-09-11 19:03:53
Windows 5.1.2600 Service Pack 2 NTFS
scanning hidden processes ...
scanning hidden autostart entries ...
scanning hidden files ...
scan completed successfully
hidden files: 0
**************************************************************************
.
Completion time: 2007-09-11 19:04:22
C:\ComboFix-quarantined-files.txt ... 2007-09-11 19:04
.
--- E O F ---