Provedeno, opět jsem to musel dělat v nouzovém režimu.
Log z ComboFix:
ComboFix 12-08-16.01 - Administrator 16.08.2012 23:27:54.5.2 - x86 MINIMAL
Microsoft Windows XP Home Edition 5.1.2600.3.1250.420.1029.18.1790.1416 [GMT 2:00]
Spuštěný z: c:\documents and settings\KarolÝna\Plocha\ComboFix.exe
Použité ovládací přepínače :: c:\documents and settings\KarolÝna\Plocha\CFScript.txt
AV: avast! Antivirus *Disabled/Updated* {7591DB91-41F0-48A3-B128-1A293FD8233D}
.
.
((((((((((((((((((((((((((((((((((((((( Ostatní výmazy )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
c:\windows\system32\drivers\i8042prt.sys . . . chybí !!
.
.
((((((((((((((((((((((((( Soubory vytvořené od 2012-07-16 do 2012-08-16 )))))))))))))))))))))))))))))))
.
.
2012-08-16 20:38 . 2012-08-16 20:38 -------- d-----w- C:\i8042prt
2012-08-15 18:57 . 2012-08-15 18:57 -------- d-----w- c:\program files\CrystalDiskInfo
2012-08-15 17:24 . 2012-08-15 17:25 -------- d-----w- c:\documents and settings\Administrator
2012-08-12 19:53 . 2012-08-12 19:55 -------- d-----w- c:\program files\WhoCrashed
2012-08-12 05:14 . 2012-06-02 13:18 214256 ----a-w- c:\windows\system32\muweb.dll
2012-08-11 21:30 . 2012-08-11 21:30 -------- d-----w- c:\documents and settings\All Users\Data aplikací\Malwarebytes
2012-08-11 21:30 . 2012-08-11 21:30 -------- d-----w- c:\program files\Malwarebytes' Anti-Malware
2012-08-11 21:30 . 2012-07-03 11:46 22344 ----a-w- c:\windows\system32\drivers\mbam.sys
2012-08-11 19:39 . 2012-08-11 19:39 -------- d-----w- c:\documents and settings\All Users\Data aplikací\GFI Software
2012-08-06 14:12 . 2012-08-06 14:12 -------- d-----w- c:\program files\Common Files\Java
2012-08-06 14:11 . 2012-08-06 14:11 -------- d-----w- c:\program files\Oracle
2012-07-30 22:08 . 2012-07-30 22:08 -------- d-----w- c:\program files\CCleaner
.
.
.
(((((((((((((((((((((((((((((((((((((((( Find3M výpis ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2012-08-15 05:08 . 2012-04-05 06:26 426184 ----a-w- c:\windows\system32\FlashPlayerApp.exe
2012-08-15 05:08 . 2011-05-26 05:32 70344 ----a-w- c:\windows\system32\FlashPlayerCPLApp.cpl
2012-07-06 13:58 . 2008-04-14 12:00 78336 ----a-w- c:\windows\system32\browser.dll
2012-07-05 20:07 . 2012-05-10 17:04 143872 ----a-w- c:\windows\system32\javacpl.cpl
2012-07-05 20:06 . 2012-05-10 17:04 772544 ----a-w- c:\windows\system32\npdeployJava1.dll
2012-07-05 20:06 . 2010-04-19 05:12 687544 ----a-w- c:\windows\system32\deployJava1.dll
2012-07-04 14:05 . 2009-03-28 11:58 139784 ----a-w- c:\windows\system32\drivers\rdpwd.sys
2012-07-03 18:22 . 2008-04-14 12:00 1866112 ----a-w- c:\windows\system32\win32k.sys
2012-07-03 16:21 . 2009-03-28 12:41 54232 ----a-w- c:\windows\system32\drivers\aswTdi.sys
2012-07-03 16:21 . 2011-06-29 16:58 721000 ----a-w- c:\windows\system32\drivers\aswSnx.sys
2012-07-03 16:21 . 2009-03-28 12:41 35928 ----a-w- c:\windows\system32\drivers\aswRdr.sys
2012-07-03 16:21 . 2009-03-28 12:41 97608 ----a-w- c:\windows\system32\drivers\aswmon2.sys
2012-07-03 16:21 . 2009-03-28 12:41 89624 ----a-w- c:\windows\system32\drivers\aswmon.sys
2012-07-03 16:21 . 2009-03-28 12:41 353688 ----a-w- c:\windows\system32\drivers\aswSP.sys
2012-07-03 16:21 . 2009-03-28 12:41 21256 ----a-w- c:\windows\system32\drivers\aswFsBlk.sys
2012-07-03 16:21 . 2009-03-28 12:41 25256 ----a-w- c:\windows\system32\drivers\aavmker4.sys
2012-07-03 16:21 . 2010-06-30 20:00 41224 ----a-w- c:\windows\avastSS.scr
2012-07-03 16:21 . 2009-03-28 12:41 227648 ----a-w- c:\windows\system32\aswBoot.exe
2012-07-02 17:38 . 2008-04-14 12:00 916992 ----a-w- c:\windows\system32\wininet.dll
2012-07-02 17:38 . 2008-04-14 12:00 43520 ------w- c:\windows\system32\licmgr10.dll
2012-07-02 17:38 . 2008-04-14 12:00 1469440 ------w- c:\windows\system32\inetcpl.cpl
2012-07-02 12:05 . 2008-04-14 12:00 385024 ------w- c:\windows\system32\html.iec
2012-06-06 18:59 . 2012-06-06 18:59 1070152 ----a-w- c:\windows\system32\MSCOMCTL.OCX
2012-06-05 15:49 . 2008-04-14 12:00 1372672 ----a-w- c:\windows\system32\msxml6.dll
2012-06-05 15:49 . 2008-04-14 12:00 1172480 ----a-w- c:\windows\system32\msxml3.dll
2012-06-04 04:32 . 2008-04-14 12:00 152576 ----a-w- c:\windows\system32\schannel.dll
2012-06-02 13:19 . 2008-10-16 13:07 15384 ----a-w- c:\windows\system32\wuaucpl.cpl.mui
2012-06-02 13:19 . 2008-10-16 13:08 22552 ----a-w- c:\windows\system32\wucltui.dll.mui
2012-06-02 13:19 . 2009-03-28 12:00 329240 ----a-w- c:\windows\system32\wucltui.dll
2012-06-02 13:19 . 2009-03-28 12:00 210968 ----a-w- c:\windows\system32\wuweb.dll
2012-06-02 13:19 . 2009-03-28 12:00 219160 ----a-w- c:\windows\system32\wuaucpl.cpl
2012-06-02 13:19 . 2009-03-28 12:00 53784 ----a-w- c:\windows\system32\wuauclt.exe
2012-06-02 13:19 . 2009-03-28 12:00 35864 ----a-w- c:\windows\system32\wups.dll
2012-06-02 13:19 . 2008-10-16 13:09 45080 ----a-w- c:\windows\system32\wups2.dll
2012-06-02 13:19 . 2008-10-16 13:07 15384 ----a-w- c:\windows\system32\wuapi.dll.mui
2012-06-02 13:19 . 2008-10-16 13:07 18456 ----a-w- c:\windows\system32\wuaueng.dll.mui
2012-06-02 13:19 . 2008-04-14 12:00 97304 ----a-w- c:\windows\system32\cdm.dll
2012-06-02 13:19 . 2009-03-28 12:00 577048 ----a-w- c:\windows\system32\wuapi.dll
2012-06-02 13:19 . 2009-03-28 12:00 1933848 ----a-w- c:\windows\system32\wuaueng.dll
2012-06-02 13:19 . 2009-12-03 06:24 17648 ----a-w- c:\windows\system32\mucltui.dll.mui
2012-06-02 13:18 . 2009-12-03 06:24 275696 ----a-w- c:\windows\system32\mucltui.dll
2012-05-31 13:22 . 2008-04-14 12:00 602112 ----a-w- c:\windows\system32\crypt32.dll
2012-05-29 07:38 . 2011-07-26 15:26 330240 ----a-w- c:\windows\MASetupCaller.dll
2012-07-28 16:44 . 2011-05-01 07:40 136672 ----a-w- c:\program files\mozilla firefox\components\browsercomps.dll
.
.
((((((((((((((((((((((((((((( SnapShot@2012-08-12_19.28.43 )))))))))))))))))))))))))))))))))))))))))
.
+ 2008-04-14 12:00 . 2012-07-02 17:38 67072 c:\windows\system32\mshtmled.dll
- 2008-04-14 12:00 . 2012-05-11 14:44 67072 c:\windows\system32\mshtmled.dll
+ 2007-08-13 17:54 . 2012-07-02 17:38 55296 c:\windows\system32\msfeedsbs.dll
- 2007-08-13 17:54 . 2012-05-11 14:44 55296 c:\windows\system32\msfeedsbs.dll
- 2008-04-14 12:00 . 2012-05-11 14:44 25600 c:\windows\system32\jsproxy.dll
+ 2008-04-14 12:00 . 2012-07-02 17:38 25600 c:\windows\system32\jsproxy.dll
- 2011-06-19 08:40 . 2012-05-11 14:44 12800 c:\windows\system32\dllcache\xpshims.dll
+ 2011-06-19 08:40 . 2012-07-02 17:38 12800 c:\windows\system32\dllcache\xpshims.dll
- 2008-04-14 12:00 . 2012-05-11 14:44 67072 c:\windows\system32\dllcache\mshtmled.dll
+ 2008-04-14 12:00 . 2012-07-02 17:38 67072 c:\windows\system32\dllcache\mshtmled.dll
- 2009-03-28 13:06 . 2012-05-11 14:44 55296 c:\windows\system32\dllcache\msfeedsbs.dll
+ 2009-03-28 13:06 . 2012-07-02 17:38 55296 c:\windows\system32\dllcache\msfeedsbs.dll
- 2008-04-14 12:00 . 2012-05-11 14:44 43520 c:\windows\system32\dllcache\licmgr10.dll
+ 2008-04-14 12:00 . 2012-07-02 17:38 43520 c:\windows\system32\dllcache\licmgr10.dll
+ 2008-04-14 12:00 . 2012-07-02 17:38 25600 c:\windows\system32\dllcache\jsproxy.dll
- 2008-04-14 12:00 . 2012-05-11 14:44 25600 c:\windows\system32\dllcache\jsproxy.dll
+ 2008-04-14 12:00 . 2012-07-06 13:58 78336 c:\windows\system32\dllcache\browser.dll
+ 2009-03-28 15:05 . 2012-08-15 22:09 35088 c:\windows\Installer\{91120000-002F-0000-0000-0000000FF1CE}\oisicon.exe
- 2009-03-28 15:05 . 2012-07-11 21:57 35088 c:\windows\Installer\{91120000-002F-0000-0000-0000000FF1CE}\oisicon.exe
- 2009-03-28 15:05 . 2012-07-11 21:57 18704 c:\windows\Installer\{91120000-002F-0000-0000-0000000FF1CE}\mspicons.exe
+ 2009-03-28 15:05 . 2012-08-15 22:09 18704 c:\windows\Installer\{91120000-002F-0000-0000-0000000FF1CE}\mspicons.exe
+ 2009-03-28 15:05 . 2012-08-15 22:09 20240 c:\windows\Installer\{91120000-002F-0000-0000-0000000FF1CE}\cagicon.exe
- 2009-03-28 15:05 . 2012-07-11 21:57 20240 c:\windows\Installer\{91120000-002F-0000-0000-0000000FF1CE}\cagicon.exe
+ 2012-08-15 22:04 . 2012-05-11 14:44 12800 c:\windows\ie8updates\KB2722913-IE8\xpshims.dll
+ 2012-08-15 22:04 . 2012-05-11 14:44 67072 c:\windows\ie8updates\KB2722913-IE8\mshtmled.dll
+ 2012-08-15 22:04 . 2012-05-11 14:44 55296 c:\windows\ie8updates\KB2722913-IE8\msfeedsbs.dll
+ 2012-08-15 22:04 . 2012-05-11 14:44 43520 c:\windows\ie8updates\KB2722913-IE8\licmgr10.dll
+ 2012-08-15 22:04 . 2012-05-11 14:44 25600 c:\windows\ie8updates\KB2722913-IE8\jsproxy.dll
- 2008-04-14 12:00 . 2012-05-11 14:44 105984 c:\windows\system32\url.dll
+ 2008-04-14 12:00 . 2012-07-02 17:38 105984 c:\windows\system32\url.dll
- 2008-04-14 12:00 . 2012-05-11 14:44 206848 c:\windows\system32\occache.dll
+ 2008-04-14 12:00 . 2012-07-02 17:38 206848 c:\windows\system32\occache.dll
+ 2008-04-14 12:00 . 2012-07-06 13:58 337920 c:\windows\system32\netapi32.dll
+ 2008-04-14 12:00 . 2012-07-02 17:38 611840 c:\windows\system32\mstime.dll
- 2008-04-14 12:00 . 2012-05-11 14:44 611840 c:\windows\system32\mstime.dll
- 2007-08-13 17:54 . 2012-05-11 14:44 629760 c:\windows\system32\msfeeds.dll
+ 2007-08-13 17:54 . 2012-07-02 17:38 629760 c:\windows\system32\msfeeds.dll
+ 2012-08-15 05:08 . 2012-08-15 05:08 686792 c:\windows\system32\Macromed\Flash\FlashUtil32_11_3_300_271_Plugin.exe
+ 2012-08-14 22:08 . 2012-08-14 22:08 686792 c:\windows\system32\Macromed\Flash\FlashUtil32_11_3_300_271_ActiveX.exe
+ 2012-08-14 22:08 . 2012-08-14 22:08 466632 c:\windows\system32\Macromed\Flash\FlashUtil32_11_3_300_271_ActiveX.dll
- 2012-04-05 06:26 . 2012-08-04 22:08 250056 c:\windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe
+ 2012-04-05 06:26 . 2012-08-15 05:08 250056 c:\windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe
- 2008-04-14 12:00 . 2009-05-07 15:33 346624 c:\windows\system32\localspl.dll
+ 2008-04-14 12:00 . 2012-05-14 09:22 346624 c:\windows\system32\localspl.dll
+ 2008-04-14 12:00 . 2012-07-02 17:38 184320 c:\windows\system32\iepeers.dll
- 2008-04-14 12:00 . 2012-05-11 14:44 184320 c:\windows\system32\iepeers.dll
+ 2008-04-14 12:00 . 2012-07-02 17:38 387584 c:\windows\system32\iedkcs32.dll
- 2008-04-14 12:00 . 2012-05-11 14:44 387584 c:\windows\system32\iedkcs32.dll
+ 2008-04-14 12:00 . 2012-07-02 12:05 174080 c:\windows\system32\ie4uinit.exe
- 2008-04-14 12:00 . 2012-05-11 11:38 174080 c:\windows\system32\ie4uinit.exe
- 2009-03-28 12:51 . 2012-07-12 05:16 151584 c:\windows\system32\FNTCACHE.DAT
+ 2009-03-28 12:51 . 2012-08-16 05:02 151584 c:\windows\system32\FNTCACHE.DAT
- 2008-04-14 12:00 . 2012-05-16 15:09 916992 c:\windows\system32\dllcache\wininet.dll
+ 2008-04-14 12:00 . 2012-07-02 17:38 916992 c:\windows\system32\dllcache\wininet.dll
+ 2008-04-14 12:00 . 2012-07-02 17:38 105984 c:\windows\system32\dllcache\url.dll
- 2008-04-14 12:00 . 2012-05-11 14:44 105984 c:\windows\system32\dllcache\url.dll
+ 2009-03-28 11:58 . 2012-07-04 14:05 139784 c:\windows\system32\dllcache\rdpwd.sys
+ 2008-04-14 12:00 . 2012-07-02 17:38 206848 c:\windows\system32\dllcache\occache.dll
- 2008-04-14 12:00 . 2012-05-11 14:44 206848 c:\windows\system32\dllcache\occache.dll
+ 2008-04-14 12:00 . 2012-07-06 13:58 337920 c:\windows\system32\dllcache\netapi32.dll
+ 2008-04-14 12:00 . 2012-07-02 17:38 611840 c:\windows\system32\dllcache\mstime.dll
- 2008-04-14 12:00 . 2012-05-11 14:44 611840 c:\windows\system32\dllcache\mstime.dll
+ 2009-03-28 13:06 . 2012-07-02 17:38 629760 c:\windows\system32\dllcache\msfeeds.dll
- 2009-03-28 13:06 . 2012-05-11 14:44 629760 c:\windows\system32\dllcache\msfeeds.dll
- 2008-04-14 12:00 . 2009-05-07 15:33 346624 c:\windows\system32\dllcache\localspl.dll
+ 2008-04-14 12:00 . 2012-05-14 09:22 346624 c:\windows\system32\dllcache\localspl.dll
- 2012-06-13 05:02 . 2012-05-11 14:44 521728 c:\windows\system32\dllcache\jsdbgui.dll
+ 2012-06-13 05:02 . 2012-07-02 17:38 521728 c:\windows\system32\dllcache\jsdbgui.dll
- 2011-06-19 08:40 . 2012-05-11 14:44 247808 c:\windows\system32\dllcache\ieproxy.dll
+ 2011-06-19 08:40 . 2012-07-02 17:38 247808 c:\windows\system32\dllcache\ieproxy.dll
+ 2008-04-14 12:00 . 2012-07-02 17:38 184320 c:\windows\system32\dllcache\iepeers.dll
- 2008-04-14 12:00 . 2012-05-11 14:44 184320 c:\windows\system32\dllcache\iepeers.dll
+ 2011-06-19 08:40 . 2012-07-02 17:38 743424 c:\windows\system32\dllcache\iedvtool.dll
- 2011-06-19 08:40 . 2012-05-11 14:44 743424 c:\windows\system32\dllcache\iedvtool.dll
+ 2008-04-14 12:00 . 2012-07-02 17:38 387584 c:\windows\system32\dllcache\iedkcs32.dll
- 2008-04-14 12:00 . 2012-05-11 14:44 387584 c:\windows\system32\dllcache\iedkcs32.dll
- 2008-04-14 12:00 . 2012-05-11 11:38 174080 c:\windows\system32\dllcache\ie4uinit.exe
+ 2008-04-14 12:00 . 2012-07-02 12:05 174080 c:\windows\system32\dllcache\ie4uinit.exe
+ 2012-07-18 13:46 . 2012-07-18 13:46 593408 c:\windows\Installer\a84373.msp
- 2009-03-28 15:05 . 2012-07-11 21:57 888080 c:\windows\Installer\{91120000-002F-0000-0000-0000000FF1CE}\wordicon.exe
+ 2009-03-28 15:05 . 2012-08-15 22:09 888080 c:\windows\Installer\{91120000-002F-0000-0000-0000000FF1CE}\wordicon.exe
+ 2009-03-28 15:05 . 2012-08-15 22:09 922384 c:\windows\Installer\{91120000-002F-0000-0000-0000000FF1CE}\pptico.exe
- 2009-03-28 15:05 . 2012-07-11 21:57 922384 c:\windows\Installer\{91120000-002F-0000-0000-0000000FF1CE}\pptico.exe
- 2009-03-28 15:05 . 2012-07-11 21:57 217864 c:\windows\Installer\{91120000-002F-0000-0000-0000000FF1CE}\misc.exe
+ 2009-03-28 15:05 . 2012-08-15 22:09 217864 c:\windows\Installer\{91120000-002F-0000-0000-0000000FF1CE}\misc.exe
+ 2009-03-28 15:05 . 2012-08-15 22:09 184080 c:\windows\Installer\{91120000-002F-0000-0000-0000000FF1CE}\joticon.exe
- 2009-03-28 15:05 . 2012-07-11 21:57 184080 c:\windows\Installer\{91120000-002F-0000-0000-0000000FF1CE}\joticon.exe
+ 2011-06-23 08:54 . 2011-06-23 08:54 119160 c:\windows\Installer\$PatchCache$\Managed\00002119F20000000000000000F01FEC\12.0.6612\MSCONV97.DLL
+ 2012-08-15 22:04 . 2012-05-16 15:09 916992 c:\windows\ie8updates\KB2722913-IE8\wininet.dll
+ 2012-08-15 22:04 . 2012-05-11 14:44 105984 c:\windows\ie8updates\KB2722913-IE8\url.dll
+ 2012-08-15 22:04 . 2010-07-05 13:13 391032 c:\windows\ie8updates\KB2722913-IE8\spuninst\updspapi.dll
+ 2012-08-15 22:04 . 2010-07-05 13:13 233848 c:\windows\ie8updates\KB2722913-IE8\spuninst\spuninst.exe
+ 2012-08-15 22:04 . 2012-05-11 14:44 206848 c:\windows\ie8updates\KB2722913-IE8\occache.dll
+ 2012-08-15 22:04 . 2012-05-11 14:44 611840 c:\windows\ie8updates\KB2722913-IE8\mstime.dll
+ 2012-08-15 22:04 . 2012-05-11 14:44 629760 c:\windows\ie8updates\KB2722913-IE8\msfeeds.dll
+ 2012-08-15 22:04 . 2012-05-11 14:44 521728 c:\windows\ie8updates\KB2722913-IE8\jsdbgui.dll
+ 2012-08-15 22:04 . 2012-05-11 14:44 247808 c:\windows\ie8updates\KB2722913-IE8\ieproxy.dll
+ 2012-08-15 22:04 . 2012-05-11 14:44 184320 c:\windows\ie8updates\KB2722913-IE8\iepeers.dll
+ 2012-08-15 22:04 . 2012-05-11 14:44 743424 c:\windows\ie8updates\KB2722913-IE8\iedvtool.dll
+ 2012-08-15 22:04 . 2012-05-11 14:44 387584 c:\windows\ie8updates\KB2722913-IE8\iedkcs32.dll
+ 2012-08-15 22:04 . 2012-05-11 11:38 174080 c:\windows\ie8updates\KB2722913-IE8\ie4uinit.exe
- 2008-04-14 12:00 . 2012-05-11 14:44 1212416 c:\windows\system32\urlmon.dll
+ 2008-04-14 12:00 . 2012-07-02 17:38 1212416 c:\windows\system32\urlmon.dll
+ 2008-04-14 12:00 . 2012-07-02 17:38 6008320 c:\windows\system32\mshtml.dll
+ 2012-08-15 05:08 . 2012-08-15 05:08 9465032 c:\windows\system32\Macromed\Flash\NPSWF32_11_3_300_271.dll
- 2007-08-13 17:34 . 2012-05-11 14:44 2000384 c:\windows\system32\iertutil.dll
+ 2007-08-13 17:34 . 2012-07-02 17:38 2000384 c:\windows\system32\iertutil.dll
- 2008-04-14 12:00 . 2012-06-13 13:55 1866112 c:\windows\system32\dllcache\win32k.sys
+ 2008-04-14 12:00 . 2012-07-03 18:22 1866112 c:\windows\system32\dllcache\win32k.sys
- 2008-04-14 12:00 . 2012-05-11 14:44 1212416 c:\windows\system32\dllcache\urlmon.dll
+ 2008-04-14 12:00 . 2012-07-02 17:38 1212416 c:\windows\system32\dllcache\urlmon.dll
+ 2008-04-14 12:00 . 2012-07-02 17:38 6008320 c:\windows\system32\dllcache\mshtml.dll
- 2009-03-28 13:06 . 2012-05-11 14:44 2000384 c:\windows\system32\dllcache\iertutil.dll
+ 2009-03-28 13:06 . 2012-07-02 17:38 2000384 c:\windows\system32\dllcache\iertutil.dll
+ 2012-06-26 16:03 . 2012-06-26 16:03 3875840 c:\windows\Installer\a84397.msp
- 2009-03-28 15:05 . 2012-07-11 21:57 1172240 c:\windows\Installer\{91120000-002F-0000-0000-0000000FF1CE}\xlicons.exe
+ 2009-03-28 15:05 . 2012-08-15 22:09 1172240 c:\windows\Installer\{91120000-002F-0000-0000-0000000FF1CE}\xlicons.exe
+ 2012-08-15 22:04 . 2012-05-11 14:44 1212416 c:\windows\ie8updates\KB2722913-IE8\urlmon.dll
+ 2012-08-15 22:04 . 2012-05-11 14:44 6007808 c:\windows\ie8updates\KB2722913-IE8\mshtml.dll
+ 2012-08-15 22:04 . 2012-05-11 14:44 2000384 c:\windows\ie8updates\KB2722913-IE8\iertutil.dll
+ 2009-03-28 13:05 . 2012-08-15 22:06 59884088 c:\windows\system32\MRT.exe
- 2007-08-13 17:54 . 2012-05-11 18:14 11111424 c:\windows\system32\ieframe.dll
+ 2007-08-13 17:54 . 2012-07-02 21:08 11111424 c:\windows\system32\ieframe.dll
- 2009-03-28 13:06 . 2012-05-11 18:14 11111424 c:\windows\system32\dllcache\ieframe.dll
+ 2009-03-28 13:06 . 2012-07-02 21:08 11111424 c:\windows\system32\dllcache\ieframe.dll
+ 2012-07-25 14:59 . 2012-07-25 14:59 11032064 c:\windows\Installer\a84385.msp
+ 2012-07-18 13:53 . 2012-07-18 13:53 10937344 c:\windows\Installer\a84361.msp
+ 2011-08-03 18:53 . 2011-08-03 18:53 17324928 c:\windows\Installer\$PatchCache$\Managed\00002119F20000000000000000F01FEC\12.0.6612\MSO.DLL
+ 2012-08-15 22:04 . 2012-05-11 18:14 11111424 c:\windows\ie8updates\KB2722913-IE8\ieframe.dll
.
-- Snímek resetován k současnému datu --
.
(((((((((((((((((((((((((((((((((( Spouštěcí body v registru )))))))))))))))))))))))))))))))))))))))))))))
.
.
*Poznámka* prázdné záznamy a legitimní výchozí údaje nejsou zobrazeny.
REGEDIT4
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\00avast]
@="{472083B0-C522-11CF-8763-00608CC02F24}"
[HKEY_CLASSES_ROOT\CLSID\{472083B0-C522-11CF-8763-00608CC02F24}]
2012-07-03 16:21 121528 ----a-w- c:\program files\Alwil Software\Avast5\ashShell.dll
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"GEST"="=" [X]
"RTHDCPL"="RTHDCPL.EXE" [2008-08-26 16851456]
"Lexmark 1200 Series"="c:\program files\Lexmark 1200 Series\lxczbmgr.exe" [2006-07-13 57344]
"pdfFactory Pro Dispatcher v1"="c:\windows\System32\spool\DRIVERS\W32X86\3\fppdis1.exe" [2002-10-30 364544]
"FinePrint Dispatcher v4"="c:\windows\System32\spool\DRIVERS\W32X86\2\fpdisp4.exe" [1999-12-13 303104]
"LogitechCommunicationsManager"="c:\program files\Common Files\Logitech\LComMgr\Communications_Helper.exe" [2006-06-26 497200]
"LogitechQuickCamRibbon"="c:\program files\Logitech\QuickCam10\QuickCam10.exe" [2006-06-26 614960]
"LVCOMSX"="c:\program files\Common Files\Logitech\LComMgr\LVComSX.exe" [2006-06-26 243248]
"WD Drive Manager"="c:\program files\Western Digital\WD Drive Manager\WDBtnMgrUI.exe" [2008-07-24 450560]
"Kernel and Hardware Abstraction Layer"="KHALMNPR.EXE" [2009-06-17 55824]
"RemoteControl"="c:\program files\CyberLink\PowerDVD\PDVDServ.exe" [2006-11-23 56928]
"LanguageShortcut"="c:\program files\CyberLink\PowerDVD\Language\Language.exe" [2006-12-05 54832]
"KiesTrayAgent"="c:\program files\Samsung\Kies\KiesTrayAgent.exe" [2012-06-08 3521464]
"StartCCC"="c:\program files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" [2012-02-14 98304]
.
[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="c:\windows\system32\CTFMON.EXE" [2008-04-14 15360]
.
c:\documents and settings\All Users\Nabídka Start\Programy\Po spuštění\
BTTray.lnk - c:\program files\WIDCOMM\Bluetooth Software\BTTray.exe [2003-8-29 499779]
Logitech SetPoint.lnk - c:\program files\Logitech\SetPoint\SetPoint.exe [2010-2-7 813584]
Microsoft Office.lnk - c:\program files\Microsoft Office\Office\OSA9.EXE [2000-1-21 65588]
Windows Search.lnk - c:\program files\Windows Desktop Search\WindowsSearch.exe [2008-5-26 123904]
.
[hkey_local_machine\software\microsoft\windows\currentversion\explorer\ShellExecuteHooks]
"{56F9679E-7826-4C84-81F3-532071A8BCC5}"= "c:\program files\Windows Desktop Search\MSNLNamespaceMgr.dll" [2009-05-24 304128]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\LBTWlgn]
2009-07-20 11:28 72208 ----a-w- c:\program files\Common Files\Logishrd\Bluetooth\LBTWLgn.dll
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WdfLoadGroup]
@=""
.
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\Network Diagnostic\\xpnetdiag.exe"=
"%windir%\\system32\\sessmgr.exe"=
"c:\\Program Files\\Microsoft Office\\Office12\\ONENOTE.EXE"=
"c:\\Documents and Settings\\Karolína\\temp\\TeamViewer3\\TeamViewer.exe"=
"d:\\Miloš\\World of Warcraft\\Launcher.exe"=
"d:\\Miloš\\World of Warcraft\\BackgroundDownloader.exe"=
"d:\\Miloš\\World of Warcraft\\WoW-3.1.2.9901-to-3.1.3.9947-enGB-downloader.exe"=
"d:\\Miloš\\World of Warcraft\\WoW-3.1.3.9947-to-3.2.0.10192-enGB-downloader.exe"=
"d:\\Miloš\\World of Warcraft\\WoW-3.2.0.10192-to-3.2.0.10314-enGB-downloader.exe"=
"d:\\Miloš\\World of Warcraft\\WoW-3.2.0.10314-to-3.2.2.10482-enGB-downloader.exe"=
"d:\\Miloš\\World of Warcraft\\WoW-3.2.2.10482-to-3.2.2.10505-enGB-downloader.exe"=
"c:\\Program Files\\THQ\\Dawn of War\\W40k.exe"=
"d:\\Miloš\\World of Warcraft\\WoW-x.x.x.x-4.0.0.12911-EU-Downloader.exe"=
"d:\\Miloš\\StarCraft II\\StarCraft II.exe"=
"d:\\Miloš\\StarCraft II\\Versions\\Base16939\\SC2.exe"=
"d:\\Miloš\\StarCraft II\\Versions\\Base17326\\SC2.exe"=
"c:\\WINDOWS\\system32\\SUPDSvc.exe"=
"c:\\Program Files\\Windows Live\\Sync\\WindowsLiveSync.exe"=
"d:\\Miloš\\StarCraft II\\Versions\\Base18574\\SC2.exe"=
"c:\\Program Files\\THQ\\Dawn of War - Soulstorm\\Soulstorm.exe"=
"c:\\Program Files\\Opera\\opera.exe"=
"c:\\Documents and Settings\\All Users\\Data aplikací\\Battle.net\\Agent\\Agent.524\\Agent.exe"=
"c:\\Documents and Settings\\All Users\\Data aplikací\\Battle.net\\Agent\\Agent.954\\Agent.exe"=
"c:\\Program Files\\Opera\\pluginwrapper\\opera_plugin_wrapper.exe"=
"c:\\Program Files\\Skype\\Phone\\Skype.exe"=
.
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\GloballyOpenPorts\List]
"3724:TCP"= 3724:TCP:Blizzard Downloader: 3724
"5985:TCP"= 5985:TCP:*:Disabled:Vzdálená správa systému Windows
.
S1 aswSnx;aswSnx;c:\windows\system32\drivers\aswSnx.sys [29.6.2011 18:58 721000]
S1 aswSP;aswSP;c:\windows\system32\drivers\aswSP.sys [28.3.2009 14:41 353688]
S2 aswFsBlk;aswFsBlk;c:\windows\system32\drivers\aswFsBlk.sys [28.3.2009 14:41 21256]
S2 dgdersvc;Device Error Recovery Service;c:\windows\system32\dgdersvc.exe [25.5.2010 8:44 95568]
S2 FsUsbExService;FsUsbExService;c:\windows\system32\FsUsbExService.Exe [20.3.2010 23:29 233472]
S2 LBeepKE;LBeepKE;c:\windows\system32\drivers\LBeepKE.sys [7.2.2010 14:07 10384]
S2 WDBtnMgrSvc.exe;WD Drive Manager Service;c:\program files\Western Digital\WD Drive Manager\WDBtnMgrSvc.exe [24.7.2008 15:22 102400]
S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service;c:\windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [5.4.2012 8:26 250056]
S3 androidusb;SAMSUNG Android Composite ADB Interface Driver;c:\windows\system32\drivers\ssadadb.sys [12.9.2011 17:05 30312]
S3 AtiHDAudioService;ATI Function Driver for HD Audio Service;c:\windows\system32\drivers\AtihdXP3.sys [10.3.2012 21:45 100368]
S3 dgderdrv;dgderdrv;c:\windows\system32\drivers\dgderdrv.sys [25.5.2010 8:44 18136]
S3 FsUsbExDisk;FsUsbExDisk;c:\windows\system32\FsUsbExDisk.Sys [20.3.2010 23:29 36608]
S3 MBAMProtector;MBAMProtector;c:\windows\system32\drivers\mbam.sys [11.8.2012 23:30 22344]
S3 MozillaMaintenance;Mozilla Maintenance Service;c:\program files\Mozilla Maintenance Service\maintenanceservice.exe [8.5.2012 12:22 113120]
S3 Samsung UPD Service;Samsung UPD Service;c:\windows\system32\SUPDSvc.exe [23.5.2011 20:48 131888]
S3 ss_bbus;SAMSUNG USB Mobile Device (WDM);c:\windows\system32\drivers\ss_bbus.sys [12.9.2011 17:05 98432]
S3 ss_bmdfl;SAMSUNG USB Mobile Modem (Filter);c:\windows\system32\drivers\ss_bmdfl.sys [12.9.2011 17:05 14848]
S3 ss_bmdm;SAMSUNG USB Mobile Modem;c:\windows\system32\drivers\ss_bmdm.sys [12.9.2011 17:05 123648]
S3 ss_bserd;SAMSUNG USB Mobile Logging Driver;c:\windows\system32\drivers\ss_bserd.sys [12.9.2011 17:05 100224]
S3 ssadbus;SAMSUNG Android USB Composite Device driver (WDM);c:\windows\system32\drivers\ssadbus.sys [12.9.2011 17:05 121064]
S3 ssadmdfl;SAMSUNG Android USB Modem (Filter);c:\windows\system32\drivers\ssadmdfl.sys [12.9.2011 17:05 12776]
S3 ssadmdm;SAMSUNG Android USB Modem Drivers;c:\windows\system32\drivers\ssadmdm.sys [12.9.2011 17:05 136808]
S3 ssadserd;SAMSUNG Android USB Diagnostic Serial Port (WDM);c:\windows\system32\drivers\ssadserd.sys [12.9.2011 17:05 114280]
S4 MBAMService;MBAMService;c:\program files\Malwarebytes' Anti-Malware\mbamservice.exe [11.8.2012 23:30 655944]
.
Obsah adresáře 'Naplánované úlohy'
.
2012-08-16 c:\windows\Tasks\Adobe Flash Player Updater.job
- c:\windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2012-04-05 05:08]
.
2012-08-16 c:\windows\Tasks\avast! Emergency Update.job
- c:\program files\Alwil Software\Avast5\AvastEmUpdate.exe [2012-07-10 16:21]
.
.
------- Doplňkový sken -------
.
IE: Add to Google Photos Screensa&ver - c:\windows\system32\GPhotos.scr/200
TCP: DhcpNameServer = 192.168.1.1
FF - ProfilePath - c:\documents and settings\Karolína\Data aplikací\Mozilla\Firefox\Profiles\3w0a7o4e.default\
FF - prefs.js: browser.startup.homepage -
hxxp://kajinka.info/.
.
**************************************************************************
.
catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer,
http://www.gmer.netRootkit scan 2012-08-16 23:41
Windows 5.1.2600 Service Pack 3 NTFS
.
skenování skrytých procesů ...
.
skenování skrytých položek 'Po spuštění' ...
.
skenování skrytých souborů ...
.
sken byl úspešně dokončen
skryté soubory: 0
.
**************************************************************************
.
--------------------- Knihovny navázané na běžící procesy ---------------------
.
- - - - - - - > 'winlogon.exe'(216)
c:\windows\system32\Ati2evxx.dll
c:\windows\system32\atiadlxx.dll
c:\program files\common files\logishrd\bluetooth\LBTWlgn.dll
c:\program files\common files\logishrd\bluetooth\LBTServ.dll
.
Celkový čas: 2012-08-16 23:44:31
ComboFix-quarantined-files.txt 2012-08-16 21:44
ComboFix2.txt 2012-08-15 17:49
ComboFix3.txt 2012-08-12 19:32
.
Před spuštěním: Volných bajtů: 57 696 919 552
Po spuštění: Volných bajtů: 57 670 770 688
.
- - End Of File - - FFF3355D45394755C49507149C4B4B21