Prosím o kontrolu

[Baron Prášil]

tak pošli ten combofix

[Reklama]

[andree10]

ComboFix 07-12-01.4 - Ondřej Stolařík 2007-12-01 17:15:10.1 - NTFSx86
Microsoft Windows XP Home Edition 5.1.2600.2.1250.1.1029.18.478 [GMT 1:00]
Running from: C:\Documents and Settings\Ondřej Stolařík\Plocha\ComboFix.exe
* Created a new restore point
.

((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))
.

C:\WINDOWS\regedit.com
C:\WINDOWS\system32\Cfx32.lic
C:\WINDOWS\system32\cfx32.ocx
C:\WINDOWS\system32\taskmgr.com
E:\Autorun.inf

.
((((((((((((((((((((((((( Files Created from 2007-11-01 to 2007-12-01 )))))))))))))))))))))))))))))))
.

2007-11-30 23:16 . 2007-11-30 23:17 6,548,259 --a------ C:\WINDOWS\REGBK00.ZIP
2007-11-30 23:06 . 2007-11-30 23:06 <DIR> d-a------ C:\WINDOWS\zts2.exe
2007-11-30 23:06 . 2007-11-30 23:06 <DIR> d-a------ C:\WINDOWS\system32\vcmgcd32.dll
2007-11-30 23:06 . 2007-11-30 23:06 <DIR> d-a------ C:\WINDOWS\system32\iifgfgf.dll
2007-11-30 23:06 . 2007-11-30 23:06 <DIR> d-a------ C:\WINDOWS\rundll16.exe
2007-11-30 23:06 . 2007-11-30 23:06 <DIR> d-a------ C:\WINDOWS\rundl132.dll
2007-11-30 23:06 . 2007-11-30 23:06 <DIR> d-a------ C:\WINDOWS\logo1_.exe
2007-11-30 23:05 . 2007-11-30 23:06 50 --a------ C:\WINDOWS\Lic.xxx
2007-11-30 23:04 . 2004-08-18 09:00 147,968 --a------ C:\WINDOWS\R.COM
2007-11-30 23:04 . 2004-08-18 09:00 137,216 --a------ C:\WINDOWS\system32\T.COM
2007-11-30 22:25 . 2007-09-24 23:31 69,632 --a------ C:\WINDOWS\system32\javacpl.cpl
2007-11-30 22:24 . 2007-11-30 22:24 <DIR> d-------- C:\Program Files\Common Files\Java
2007-11-30 20:13 . 2007-11-30 20:13 <DIR> d-------- C:\Program Files\AxBx
2007-11-30 19:29 . 1998-02-06 23:37 299,520 --a------ C:\WINDOWS\uninst.exe
2007-11-30 19:26 . 2007-11-30 19:29 <DIR> d-------- C:\Program Files\BillP Studios
2007-11-30 19:20 . 2007-11-30 19:20 <DIR> d-------- C:\Program Files\Sunbelt Software
2007-11-30 15:49 . 2007-12-01 15:46 <DIR> d-------- C:\WINDOWS\BDOSCAN8
2007-11-30 15:26 . 2007-11-30 15:26 <DIR> d-------- C:\Program Files\CCleaner
2007-11-22 20:46 . 2007-12-01 00:04 54,156 --ah----- C:\WINDOWS\QTFont.qfn
2007-11-22 20:46 . 2007-11-22 20:46 1,409 --a------ C:\WINDOWS\QTFont.for
2007-11-13 22:07 . 2007-11-13 22:07 <DIR> d-------- C:\Program Files\MSXML 6.0
2007-11-09 10:39 . 2007-11-09 11:09 <DIR> d-------- C:\flexlm
2007-11-08 18:32 . 2007-11-08 18:45 <DIR> d-------- C:\Program Files\AutoCAD Architecture 2008
2007-11-08 13:45 . 2007-11-08 13:49 <DIR> d-------- C:\Program Files\AutoCAD 2008
2007-11-08 13:32 . 2007-11-08 13:32 <DIR> d-------- C:\Program Files\Elaborate Bytes
2007-11-06 17:11 . 2007-11-06 17:11 <DIR> d-------- C:\Program Files\WIBUKEY
2007-11-06 16:51 . 2007-11-06 16:51 <DIR> d-------- C:\Program Files\WIBU-SYSTEMS
2007-11-06 16:50 . 2007-11-30 19:37 <DIR> d-------- C:\Program Files\Apple Software Update
2007-11-06 16:48 . 2007-11-06 17:10 7,309 --a------ C:\WINDOWS\vpd.properties
2007-11-06 16:45 . 2007-11-06 16:45 <DIR> d-------- C:\Program Files\Graphisoft

.
(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2007-12-01 16:22 --------- d-----w C:\Program Files\Microsoft AntiSpyware
2007-11-30 21:25 --------- d-----w C:\Program Files\Java
2007-11-18 11:06 --------- d-----w C:\Program Files\Common Files\Autodesk Shared
2007-11-18 11:06 --------- d-----w C:\Program Files\AutoCAD 2006
2007-11-17 13:35 --------- d-----w C:\Program Files\AutoCAD 2005
2007-11-09 10:08 --------- d-----w C:\Program Files\Nexis32
2007-11-08 12:37 --------- d-----w C:\Program Files\Autodesk
2007-11-06 15:50 --------- d-----w C:\Program Files\QuickTime
2007-11-05 18:19 --------- d-----w C:\Program Files\bwin
2007-10-25 09:26 53,248 ----a-w C:\WINDOWS\bdoscandel.exe
2007-10-21 20:28 --------- d-----w C:\Program Files\Louisa 3
2007-03-09 18:56 22 --sha-w C:\WINDOWS\SMINST\HPCD.sys
.

((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* empty entries & legit default entries are not shown

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="C:\WINDOWS\system32\ctfmon.exe" [2004-08-18 09:00]
"swg"="C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe" [2007-07-21 09:20]
"WMPNSCFG"="C:\Program Files\Windows Media Player\WMPNSCFG.exe" [2007-01-05 20:57]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"SoundMAX"="C:\Program Files\Analog Devices\SoundMAX\Smax4.exe" [2005-05-06 13:06]
"PTHOSTTR"="C:\Program Files\HPQ\HP ProtectTools Security Manager\PTHOSTTR.exe" [2006-02-14 10:56]
"HP Software Update"="C:\Program Files\Hewlett-Packard\HP Software Update\HPWuSchd.exe" [2002-12-17 11:40]
"SynTPEnh"="C:\Program Files\Synaptics\SynTP\SynTPEnh.exe" [2005-11-10 19:04]
"igfxtray"="C:\WINDOWS\system32\igfxtray.exe" [2006-03-23 13:17]
"igfxhkcmd"="C:\WINDOWS\system32\hkcmd.exe" [2006-03-23 13:13]
"igfxpers"="C:\WINDOWS\system32\igfxpers.exe" [2006-03-23 13:17]
"hpWirelessAssistant"="C:\Program Files\hpq\HP Wireless Assistant\HP Wireless Assistant.exe" [2006-02-14 09:49]
"CognizanceTS"="C:\PROGRA~1\HPQ\IAM\Bin\AsTsVcc.dll" [2003-12-22 19:12]
"QlbCtrl"="C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\QlbCtrl.exe" [2006-03-02 14:39]
"Cpqset"="C:\Program Files\HPQ\Default Settings\cpqset.exe" [2006-02-22 07:03]
"Recguard"="C:\WINDOWS\Sminst\Recguard.exe" [2005-12-20 14:51]
"Reminder"="C:\WINDOWS\Creator\Remind_XP.exe" [2006-01-23 15:11]
"Scheduler"="C:\WINDOWS\SMINST\Scheduler.exe" [2006-02-15 14:43]
"WatchDog"="C:\Program Files\InterVideo\DVD Check\DVDCheck.exe" [2005-11-08 11:59]
"WheelMouse"="C:\Program Files\A4Tech\Mouse\Amoumain.exe" [2006-02-17 10:14]
"HPDJ Taskbar Utility"="C:\WINDOWS\system32\spool\drivers\w32x86\3\hpztsb08.exe" [2003-03-11 09:08]
"DeviceDiscovery"="C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpotdd01.exe" [2002-12-02 20:56]
"gcasServ"="C:\Program Files\Microsoft AntiSpyware\gcasServ.exe" [2005-11-15 12:12]
"SoundMAXPnP"="C:\Program Files\Analog Devices\Core\smax4pnp.exe" [2005-05-20 09:11]
"avast!"="C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe" [2007-09-06 11:06]
"QuickTime Task"="C:\Program Files\QuickTime\qttask.exe" [2007-05-11 17:55]
"VirtualCloneDrive"="C:\Program Files\Elaborate Bytes\VirtualCloneDrive\VCDDaemon.exe" [2006-04-29 14:21]
"WinPatrol"="C:\Program Files\BillP Studios\WinPatrol\winpatrol.exe" [2007-10-26 17:06]
"Task Catcher"="C:\Program Files\BillP Studios\Task Catcher\tasktrap.exe" [2005-11-14 13:05]
"SunJavaUpdateSched"="C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe" [2007-09-25 01:11]

[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="C:\WINDOWS\system32\CTFMON.EXE" [2004-08-18 09:00]

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\OneCard]
C:\Program Files\HPQ\IAM\Bin\AsWlnPkg.dll 2005-07-25 19:41 40960 C:\Program Files\HPQ\IAM\Bin\AsWlnPkg.dll

R1 fwdrv;Firewall Driver;C:\WINDOWS\system32\drivers\fwdrv.sys
R1 khips;Kerio HIPS Driver;C:\WINDOWS\system32\drivers\khips.sys
R2 ASChannel;Local Communication Channel;C:\WINDOWS\System32\svchost.exe -k Cognizance
R3 AEAudioService;AEAudio Service;C:\WINDOWS\system32\drivers\AEAudio.sys
R3 PSched;Plánovač paketů technologie QoS;C:\WINDOWS\system32\DRIVERS\psched.sys

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost]
Cognizance ASChannel

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{a708d806-cef2-11db-9a7a-001a7322d2c7}]
\Shell\AutoRun\command - F:\launch.exe

.
Contents of the 'Scheduled Tasks' folder
"2007-11-30 18:38:02 C:\WINDOWS\Tasks\AppleSoftwareUpdate.job"
- C:\Program Files\Apple Software Update\SoftwareUpdate.exe
.
**************************************************************************

catchme 0.3.1318 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2007-12-01 17:22:36
Windows 5.1.2600 Service Pack 2 NTFS

scanning hidden processes ...

scanning hidden autostart entries ...

HKLM\Software\Microsoft\Windows\CurrentVersion\Run
Cpqset = C:\Program Files\HPQ\Default Settings\cpqset.exe?????? ???@???????????????@? ???x\??????(?@???????@

scanning hidden files ...

scan completed successfully
hidden files: 0

**************************************************************************
.
Completion time: 2007-12-01 17:24:11 - machine was rebooted
.
--- E O F ---

[Baron Prášil]

nic špatnýho tam nevidim. chování kompu bez změny?

[andree10]

pořád stejné. Asi počkám jak se to bude vyvíjet...

[Baron Prášil]

ta chyba objevuje při každém vyhledávání?používáš nějaký anonymizer?můžeš zkusit jít na google s jinou IP - např. přes anonymouse.org.

[andree10]

na jine IP funguje vše normálně