Prosím o kontrolu logu

[tomm]

Ahoj, můžu vás poprosit o preventivní kontrolu z combofixu? Internet rodinného počítače trochu zpomaluje...

ComboFix 09-04-04.01 - Tomáš 2009-04-07 21:47:23.4 - NTFSx86
Systém Microsoft Windows XP Professional 5.1.2600.3.1250.1.1029.18.1023.586 [GMT 2:00]
Spuštěný z: c:\documents and settings\Tomáš\Plocha\ComboFix.exe
AV: Norton Internet Security *On-access scanning disabled* (Updated)
FW: Norton Internet Security *disabled*

VAROVÁNÍ - NA TOMTO POČÍTAČI NENÍ NAINSTALOVÁNA KONZOLA PRO ZOTAVENÍ !!
.

((((((((((((((((((((((((( Soubory vytvořené od 2009-03-07 do 2009-04-07 )))))))))))))))))))))))))))))))
.

2009-04-04 20:35 . 2009-04-04 20:34 103,736 --a------ c:\windows\system32\PnkBstrB.exe
2009-04-04 20:35 . 2007-10-18 22:18 63,040 --a------ c:\windows\system32\PnkBstrA.exe
2009-04-04 20:35 . 2009-04-04 20:35 22,328 --a------ c:\windows\system32\drivers\PnkBstrK.sys
2009-03-29 14:12 . 2009-03-29 14:12 <DIR> d-------- c:\program files\THQ
2009-03-29 14:12 . 2007-09-13 23:21 1,060,864 --a------ c:\windows\system32\mfc71.dll
2009-03-28 13:14 . 2009-03-28 13:27 <DIR> d-------- c:\documents and settings\Tomáš\Data aplikací\Zoner
2009-03-26 17:47 . 2009-04-07 21:46 245 --a------ c:\windows\MAILTRAN.INI
2009-03-20 17:58 . 2009-03-20 17:58 <DIR> d--hs---- c:\windows\ftpcache
2009-03-20 17:58 . 2009-03-20 17:58 287 --a------ c:\windows\game.ini
2009-03-20 17:35 . 2009-03-20 17:35 <DIR> d-------- c:\program files\Activision
2009-03-14 15:44 . 2009-03-22 21:02 <DIR> d-------- c:\documents and settings\All Users\Data aplikací\TrackMania
2009-03-14 15:39 . 2009-03-14 15:42 <DIR> d-------- c:\program files\TmNationsForever
2009-03-14 14:51 . 2009-03-14 15:01 <DIR> d-------- c:\documents and settings\All Users\Data aplikací\DrivingSpeed2
2009-03-14 14:16 . 2009-03-14 14:16 <DIR> d-------- c:\program files\DrivingSpeed2
2009-03-14 13:56 . 2009-03-14 14:48 <DIR> d-------- C:\Games
2009-03-14 13:55 . 2009-03-14 13:55 <DIR> d-------- c:\program files\GameTop.com
2009-03-14 12:56 . 2009-03-14 12:56 <DIR> d-------- c:\documents and settings\Tatínek\Data aplikací\Capcom
2009-03-14 12:56 . 2008-03-05 16:56 3,786,760 --a------ c:\windows\system32\D3DX9_37.dll
2009-03-14 12:15 . 2009-03-14 11:24 15,688 --a------ c:\windows\system32\lsdelete.exe
2009-03-14 12:10 . 2009-03-14 12:10 <DIR> d-------- c:\documents and settings\LocalService\Plocha
2009-03-14 11:32 . 2009-03-14 11:32 <DIR> d-------- c:\documents and settings\All Users\Data aplikací\ATI
2009-03-14 11:24 . 2009-03-14 11:23 64,160 --a------ c:\windows\system32\drivers\Lbd.sys
2009-03-14 11:23 . 2009-03-14 11:23 <DIR> d--h-c--- c:\documents and settings\All Users\Data aplikací\{83C91755-2546-441D-AC40-9A6B4B860800}
2009-03-14 11:16 . 2009-03-14 11:17 <DIR> d-------- c:\program files\K-Lite Codec Pack
2009-03-14 11:16 . 2008-11-06 18:37 3,596,288 --a------ c:\windows\system32\qt-dx331.dll
2009-03-14 11:16 . 2008-09-24 20:41 839,680 --a------ c:\windows\system32\lameACM.acm
2009-03-14 11:16 . 2008-12-07 20:08 795,648 --a------ c:\windows\system32\xvidcore.dll
2009-03-14 11:16 . 2008-11-06 18:33 684,032 --a------ c:\windows\system32\divx.dll
2009-03-14 11:16 . 2004-01-25 18:18 217,088 --a------ c:\windows\system32\yv12vfw.dll
2009-03-14 11:16 . 2008-09-16 21:23 168,448 --a------ c:\windows\system32\unrar.dll
2009-03-14 11:16 . 2008-12-07 20:08 130,048 --a------ c:\windows\system32\xvidvfw.dll
2009-03-14 11:16 . 2007-09-21 02:52 118,784 --a------ c:\windows\system32\ac3acm.acm
2009-03-14 11:16 . 2008-12-11 02:33 86,016 --a------ c:\windows\system32\dpl100.dll
2009-03-14 11:16 . 2009-02-09 20:56 67,584 --a------ c:\windows\system32\ff_vfw.dll
2009-03-14 11:16 . 2007-07-10 18:10 547 --a------ c:\windows\system32\ff_vfw.dll.manifest
2009-03-14 11:16 . 2008-10-03 14:30 414 --a------ c:\windows\system32\lame_acm.xml
2009-03-14 11:01 . 2009-03-14 11:01 <DIR> d-------- c:\program files\CCleaner
2009-03-14 10:59 . 2009-03-31 21:26 <DIR> d-------- c:\program files\Java
2009-03-14 10:59 . 2009-03-09 02:53 73,728 --a------ c:\windows\system32\javacpl.cpl
2009-03-14 10:38 . 2009-03-14 10:38 <DIR> d-------- c:\documents and settings\Tatínek\Data aplikací\Media Player Classic

.
(((((((((((((((((((((((((((((((((((((((( Find3M výpis ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2009-04-07 18:59 --------- d-----w c:\program files\SpeedFan
2009-04-06 21:44 --------- d-----w c:\program files\MOHAA
2009-04-06 18:14 --------- d-----w c:\program files\Malwarebytes' Anti-Malware
2009-04-04 18:20 --------- d-----w c:\program files\Electronic Arts
2009-04-03 20:23 --------- d-----w c:\documents and settings\TEMP\Data aplikací\Skype
2009-04-03 20:17 --------- d-----w c:\program files\ICQ6
2009-03-29 12:17 --------- d--h--w c:\program files\InstallShield Installation Information
2009-03-26 16:45 805 ----a-w c:\windows\system32\drivers\SYMEVENT.INF
2009-03-26 16:45 7,386 ----a-w c:\windows\system32\drivers\SYMEVENT.CAT
2009-03-26 16:45 60,808 ----a-w c:\windows\system32\S32EVNT1.DLL
2009-03-26 16:45 124,464 ----a-w c:\windows\system32\drivers\SYMEVENT.SYS
2009-03-26 16:45 --------- d-----w c:\program files\Symantec
2009-03-26 14:49 38,496 ----a-w c:\windows\system32\drivers\mbamswissarmy.sys
2009-03-26 14:49 15,504 ----a-w c:\windows\system32\drivers\mbam.sys
2009-03-14 09:50 --------- d-----w c:\program files\BeClean
2009-03-14 09:49 --------- d-----w c:\documents and settings\All Users\Data aplikací\Spybot - Search & Destroy
2009-03-14 09:39 --------- d-----w c:\program files\Common Files\Adobe
2009-03-14 09:27 --------- d-----w c:\program files\ATI Technologies
2009-03-14 09:17 --------- d-----w c:\program files\Common Files\Wise Installation Wizard
2009-03-14 08:41 --------- d-----w c:\program files\Spybot - Search & Destroy
2009-03-12 09:03 36,400 ----a-r c:\windows\system32\drivers\SymIM.sys
2009-03-09 03:19 410,984 ----a-w c:\windows\system32\deploytk.dll
2009-02-25 21:05 --------- d-----w c:\documents and settings\TEMP\Data aplikací\Zanichelli
2009-02-25 21:00 107,888 ----a-w c:\windows\system32\CmdLineExt.dll
2009-02-11 17:20 --------- d-----w c:\program files\speed
2009-02-09 14:07 1,846,784 ----a-w c:\windows\system32\win32k.sys
2009-02-04 05:57 11,702,272 ----a-w c:\windows\system32\atioglxx.dll
2009-02-04 05:03 290,816 ----a-w c:\windows\system32\atiok3x2.dll
2009-02-04 04:56 442,368 ----a-w c:\windows\system32\ATIDEMGX.dll
2009-02-04 04:55 324,096 ----a-w c:\windows\system32\ati2dvag.dll
2009-02-04 04:44 196,608 ----a-w c:\windows\system32\atipdlxx.dll
2009-02-04 04:44 155,648 ----a-w c:\windows\system32\Oemdspif.dll
2009-02-04 04:43 43,520 ----a-w c:\windows\system32\ati2edxx.dll
2009-02-04 04:43 26,112 ----a-w c:\windows\system32\Ati2mdxx.exe
2009-02-04 04:43 155,648 ----a-w c:\windows\system32\ati2evxx.dll
2009-02-04 04:41 602,112 ----a-w c:\windows\system32\ati2evxx.exe
2009-02-04 04:40 53,248 ----a-w c:\windows\system32\ATIDDC.DLL
2009-02-04 04:30 3,884,768 ----a-w c:\windows\system32\ati3duag.dll
2009-02-04 04:14 2,645,504 ----a-w c:\windows\system32\ativvaxx.dll
2009-02-04 03:58 49,664 ----a-w c:\windows\system32\amdpcom32.dll
2009-02-04 03:54 471,040 ----a-w c:\windows\system32\atikvmag.dll
2009-02-04 03:53 122,880 ----a-w c:\windows\system32\atiadlxx.dll
2009-02-04 03:52 17,408 ----a-w c:\windows\system32\atitvo32.dll
2009-02-04 03:46 626,688 ----a-w c:\windows\system32\ati2cqag.dll
2009-02-04 03:44 307,200 ----a-w c:\windows\system32\atiiiexx.dll
2009-02-04 02:43 45,056 ----a-w c:\windows\system32\aticalrt.dll
2009-02-04 02:42 45,056 ----a-w c:\windows\system32\aticalcl.dll
2009-02-04 02:40 3,244,032 ----a-w c:\windows\system32\aticaldd.dll
2009-02-03 20:05 593,920 ------w c:\windows\system32\ati2sgag.exe
2008-08-15 19:34 25,600 ----a-w c:\documents and settings\TEMP\usbsermptxp.sys
2008-08-15 19:34 22,768 ----a-w c:\documents and settings\TEMP\usbsermpt.sys
2007-12-20 16:45 92,064 ----a-w c:\documents and settings\Hana\mqdmmdm.sys
2007-12-20 16:45 9,232 ----a-w c:\documents and settings\Hana\mqdmmdfl.sys
2007-12-20 16:45 79,328 ----a-w c:\documents and settings\Hana\mqdmserd.sys
2007-12-20 16:45 66,656 ----a-w c:\documents and settings\Hana\mqdmbus.sys
2007-12-20 16:45 6,208 ----a-w c:\documents and settings\Hana\mqdmcmnt.sys
2007-12-20 16:45 5,936 ----a-w c:\documents and settings\Hana\mqdmwhnt.sys
2007-12-20 16:45 4,048 ----a-w c:\documents and settings\Hana\mqdmcr.sys
2007-12-20 16:45 25,600 ----a-w c:\documents and settings\Hana\usbsermptxp.sys
2007-12-20 16:45 22,768 ----a-w c:\documents and settings\Hana\usbsermpt.sys
2007-12-09 19:54 22,328 ----a-w c:\documents and settings\Tomáš\Data aplikací\PnkBstrK.sys
2008-07-13 19:29 32,768 --sha-w c:\windows\system32\config\systemprofile\Local Settings\History\History.IE5\MSHist012008071320080714\index.dat
.

((((((((((((((((((((((((((((( SnapShot@2009-04-06_21.03.35,10 )))))))))))))))))))))))))))))))))))))))))
.
+ 2009-04-07 18:59:11 16,384 ----atw c:\windows\Temp\Perflib_Perfdata_670.dat
+ 2009-04-07 18:59:30 16,384 ----atw c:\windows\Temp\Perflib_Perfdata_dc.dat
.
(((((((((((((((((((((((((((((((((( Spouštěcí body v registru )))))))))))))))))))))))))))))))))))))))))))))
.
.
*Poznámka* prázdné záznamy a legitimní výchozí údaje nejsou zobrazeny.
REGEDIT4

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="c:\windows\system32\ctfmon.exe" [2008-04-14 15360]
"Cacheman"="c:\program files\Cacheman\Cacheman.exe" [2002-09-06 1167872]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"amd_dc_opt"="c:\program files\AMD\Dual-Core Optimizer\amd_dc_opt.exe" [2007-07-23 77824]
"Ad-Watch"="c:\program files\Lavasoft\Ad-Aware\AAWTray.exe" [2009-03-14 515416]
"StartCCC"="c:\program files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" [2009-02-03 61440]
"Adobe Reader Speed Launcher"="c:\program files\Adobe\Reader 9.0\Reader\Reader_sl.exe" [2009-02-27 35696]
"SunJavaUpdateSched"="c:\program files\Java\jre6\bin\jusched.exe" [2009-03-09 148888]

[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="c:\windows\system32\CTFMON.EXE" [2008-04-14 15360]

c:\documents and settings\Tom ç\Nabˇdka Start\Programy\Po spuçtŘnˇ\
Adobe Gamma.lnk - c:\program files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe [2005-03-16 113664]

c:\documents and settings\All Users\Nabˇdka Start\Programy\Po spuçtŘnˇ\
Speedfan.lnk - c:\program files\SpeedFan\speedfan.exe [2008-08-19 3562496]

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\drivers32]
"aux"= ctwdm32.dll

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Lavasoft Ad-Aware Service]
@="Service"

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\SymEFA.sys]
@="FSFilter Activity Monitor"

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\LanguageShortcut]
--a------ 2006-04-13 12:09 49152 c:\program files\CyberLink\PowerDVD\Language\Language.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\RemoteControl]
--------- 2005-12-07 23:57 30208 c:\program files\CyberLink\PowerDVD\PDVDServ.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\services]
"StarWindService"=2 (0x2)
"RichVideo"=2 (0x2)

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run-]
"TO2SSM_McciTrayApp"=c:\program files\TO2SSM\McciTrayApp.exe

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile]
"EnableFirewall"= 0 (0x0)

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\system32\\sessmgr.exe"=
"c:\\Program Files\\MOHAA\\MOHAA.exe"=
"%windir%\\Network Diagnostic\\xpnetdiag.exe"=
"c:\\Program Files\\Electronic Arts\\Crytek\\Crysis\\Bin32\\Crysis.exe"=
"c:\\Program Files\\Electronic Arts\\Crytek\\Crysis\\Bin32\\CrysisDedicatedServer.exe"=
"c:\\Program Files\\uTorrent\\utorrent.exe"=
"c:\\Program Files\\ICQ6\\ICQ.exe"=
"c:\\Program Files\\Windows Live\\Messenger\\msnmsgr.exe"=
"c:\\Program Files\\Windows Live\\Messenger\\livecall.exe"=
"c:\\Program Files\\Skype\\Phone\\Skype.exe"=

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\GloballyOpenPorts\List]
"3389:TCP"= 3389:TCP:*:Disabled:@xpsp2res.dll,-22009

R0 Lbd;Lbd;c:\windows\system32\drivers\Lbd.sys [2009-03-14 64160]
R0 SymEFA;Symantec Extended File Attributes;c:\windows\system32\drivers\NIS\1005000.087\SymEFA.sys [2009-03-20 310320]
R1 BHDrvx86;Symantec Heuristics Driver;c:\windows\system32\drivers\NIS\1005000.087\BHDrvx86.sys [2009-03-20 258608]
R1 ccHP;Symantec Hash Provider;c:\windows\system32\drivers\NIS\1005000.087\cchpx86.sys [2009-03-20 482352]
R1 IDSxpx86;IDSxpx86;c:\documents and settings\All Users\Data aplikací\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\Norton\Definitions\IPSDefs\20090331.007\IDSXpx86.sys [2009-04-02 276344]
R2 Norton Internet Security;Norton Internet Security;c:\program files\Norton Internet Security\Engine\16.5.0.135\ccSvcHst.exe [2009-03-20 115560]
R3 EraserUtilRebootDrv;EraserUtilRebootDrv;c:\program files\Common Files\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys [2009-02-26 101936]
R3 PSched;Plánovač paketů technologie QoS;c:\windows\system32\drivers\psched.sys [2004-08-03 69120]
S2 Lavasoft Ad-Aware Service;Lavasoft Ad-Aware Service;c:\program files\Lavasoft\Ad-Aware\AAWService.exe [2009-01-18 951632]
S3 SSDefrag;SSDefrag;c:\windows\system32\drivers\SSDefrag.sys [2007-12-10 37888]

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Svchost - NetSvcs
UxTuneUp
.
Obsah adresáře 'Naplánované úlohy'

2009-03-27 c:\windows\Tasks\1-Click Maintenance.job
- c:\program files\TuneUp Utilities 2007\SystemOptimizer.exe [2007-08-18 14:39]

2009-03-14 c:\windows\Tasks\Ad-Aware Update (Weekly).job
- c:\program files\Lavasoft\Ad-Aware\Ad-AwareAdmin.exe [2009-03-14 11:23]
.
.
------- Doplňkový sken -------
.
uStart Page = hxxp://www.is.muni.cz/
mWindow Title = Microsoft Internet Explorer
IE: E&xportovat do aplikace Microsoft Office Excel - c:\progra~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
IE: {{7E6A20FB-153F-402c-A84B-1A64E1955D3D} - {7E6A20FB-153F-402c-A84B-1A64E1955D3D} - c:\windows\WebIE.dll
IE: {{CC963627-B1DC-40E0-B52A-CF21EE748449} - {CC963627-B1DC-40E0-B52A-CF21EE748450} - c:\windows\WebIE.dll
IE: {{CC963627-B1DC-40E0-B52A-CF21EE748450} - {CC963627-B1DC-40E0-B52A-CF21EE748450} - c:\windows\WebIE.dll
IE: {{CC963627-B1DC-40E0-B52A-CF21EE748451} - {CC963627-B1DC-40E0-B52A-CF21EE748451} - c:\windows\WebIE.dll
IE: {{CC963627-B1DC-40E0-B52A-CF21EE748452} - {CC963627-B1DC-40E0-B52A-CF21EE748452} - c:\windows\WebIE.dll
LSP: %SYSTEMROOT%\system32\nvLsp.dll
FF - ProfilePath -

---- NASTAVENÍ FIREFOXU ----
c:\program files\Mozilla Firefox\defaults\pref\firefox-l10n.js - pref("browser.fixup.alternate.suffix", ".cz");
.

**************************************************************************

catchme 0.3.1375 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2009-04-07 21:49:34
Windows 5.1.2600 Service Pack 3 NTFS

skenování skrytých procesů ...

skenování skrytých položek 'Po spuštění' ...

skenování skrytých souborů ...

sken byl úspešně dokončen
skryté soubory: 0

**************************************************************************

[HKEY_LOCAL_MACHINE\System\ControlSet001\Services\Norton Internet Security]
"ImagePath"="\"c:\program files\Norton Internet Security\Engine\16.5.0.135\ccSvcHst.exe\" /s \"Norton Internet Security\" /m \"c:\program files\Norton Internet Security\Engine\16.5.0.135\diMaster.dll\" /prefetch:1"
.
--------------------- Knihovny navázané na běžící procesy ---------------------

- - - - - - - > 'winlogon.exe'(1032)
c:\windows\system32\Ati2evxx.dll

- - - - - - - > 'lsass.exe'(1092)
c:\windows\system32\nvLsp.dll
.
Celkový čas: 2009-04-07 21:50:55
ComboFix-quarantined-files.txt 2009-04-07 19:50:53
ComboFix2.txt 2009-04-07 17:26:13
ComboFix3.txt 2009-04-06 19:04:42

Před spuštěním: Volných bajtů: 10 415 222 784
Po spuštění: Volných bajtů: 10,417,127,424

230 --- E O F --- 2009-03-14 08:54:24

[Reklama]

[jaro3]

Žádnou nákazu tam nevidím, odinstaloval bych:
Spybot - Search & Destroy

Norton Internet Security je komplexní ochrana.

ComboFix se odinstaluje takto:
Start-Spustit a zadej ComboFix[mezera]/u

takže jestli nejsou problémy,tak vyčisti systém CCleanerem
a použij i T-Cleaner
smaže vše po Combu,SDFixu,Avengeru,MWAVu atd.-stáhneš>spustíš

Stáhni si ATF Cleaner
Poklepej na ATF Cleaner.exe, klikni select all found, pak klik empty selected.
Pokud chceš zachovat svoje uložená hesla, klikni na No.
ATF-Cleaner je jednoduchý nástroj na odstranění historie z webového prohlížeče. Program dokáže odstranit cache, cookies, historii a další stopy po surfování na Internetu. Mezi podporované prohlížeče patří Internet Explorer, Firefox a Opera. Aplikace navíc umí odstranit dočasné soubory Windows, vysypat koš atd.
Můžeš ještě vložit log z HJT.