Prosim o kontrolu Combofixu!!!

[Jakub SAFE]

Dobry den,potreboval bych zkontrolovat log z Combofixu.Predem dekuji......

ComboFix 08-09-12.09 - Kluci 2008-09-17 22:26:56.7 - NTFSx86
Microsoft Windows XP Home Edition 5.1.2600.2.1250.1.1029.18.199 [GMT 2:00]
Spuštěný z: C:\Documents and Settings\Kluci\Plocha\ComboFix.exe
* Vytvořen nový Bod Obnovení

VAROVÁNÍ - NA TOMTO POČÍTAČI NENÍ NAINSTALOVÁNA KONZOLA PRO ZOTAVENÍ !!
.

((((((((((((((((((((((((((((((((((((((( Ostatní výmazy )))))))))))))))))))))))))))))))))))))))))))))))))
.

C:\WINDOWS\regedit.com
C:\WINDOWS\system32\MSINET.oca
C:\WINDOWS\system32\taskmgr.com

.
((((((((((((((((((((((((( Soubory vytvořené od 2008-08-17 do 2008-09-17 )))))))))))))))))))))))))))))))
.

2008-09-16 21:08 . 2008-09-17 16:23 <DIR> d-------- C:\Program Files\ewido anti-malware
2008-09-14 21:42 . 2008-09-14 21:43 5,972,436 --a------ C:\WINDOWS\REGBK00.ZIP
2008-09-14 21:23 . 2008-09-14 21:23 <DIR> d-a------ C:\WINDOWS\zts2.exe
2008-09-14 21:23 . 2008-09-14 21:23 <DIR> d-a------ C:\WINDOWS\system32\vcmgcd32.dll
2008-09-14 21:23 . 2008-09-14 21:23 <DIR> d-a------ C:\WINDOWS\system32\iifgfgf.dll
2008-09-14 21:23 . 2008-09-14 21:23 <DIR> d-a------ C:\WINDOWS\rundll16.exe
2008-09-14 21:23 . 2008-09-14 21:23 <DIR> d-a------ C:\WINDOWS\rundl132.dll
2008-09-14 21:23 . 2008-09-14 21:23 <DIR> d-a------ C:\WINDOWS\logo1_.exe
2008-09-10 21:34 . 2008-09-10 21:41 <DIR> d-------- C:\Program Files\Pro Evolution Soccer 2008
2008-09-06 14:40 . 2008-09-06 14:40 <DIR> d-------- C:\Program Files\Edisk
2008-08-29 17:29 . 2008-08-29 17:29 <DIR> d-------- C:\Program Files\rajce

.
(((((((((((((((((((((((((((((((((((((((( Find3M výpis ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2008-09-17 20:20 --------- d-----w C:\Documents and Settings\Kluci\Data aplikací\MyPhoneExplorer
2008-09-17 14:24 --------- d-----w C:\Program Files\RegCleaner
2008-09-17 13:40 --------- d-----w C:\Program Files\LogMeIn
2008-09-15 12:04 --------- d-----w C:\Program Files\Spybot - Search & Destroy
2008-09-08 19:24 --------- d-----w C:\Program Files\Avanquest update
2008-09-04 14:21 --------- d-----w C:\Documents and Settings\Kluci\Data aplikací\Mozilla
2008-08-29 15:57 --------- d-----w C:\Documents and Settings\Kluci\Data aplikací\Adobe
2008-08-15 12:42 --------- d--h--w C:\Program Files\InstallShield Installation Information
2008-08-15 12:42 --------- d-----w C:\Program Files\Rockstar Games
2008-08-15 08:28 --------- d-----w C:\Program Files\Cheat Engine
2008-08-13 13:20 --------- d-----w C:\Program Files\fishsim2
2008-08-11 14:32 --------- d-----w C:\Documents and Settings\Kluci\Data aplikací\Winamp
2008-08-11 08:19 --------- d-----w C:\Program Files\Nvu
2008-07-31 18:21 --------- d-----w C:\Documents and Settings\Kluci\Data aplikací\Skype
2008-03-26 14:17 22,328 ----a-w C:\Documents and Settings\Kluci\Data aplikací\PnkBstrK.sys
2007-03-22 14:48 224 ----a-w C:\Documents and Settings\Kluci\Gen5.dll
2006-01-09 12:44 32 ----a-r C:\Documents and Settings\All Users\hash.dat
2005-12-21 14:06 119 ----a-w C:\Documents and Settings\Kluci\KLIC.DLL
2005-10-13 17:49 85 ----a-w C:\Documents and Settings\Kluci\BEH.DLL
2005-04-18 13:08 904 ----a-w C:\Program Files\INSTALL.LOG
2005-04-09 15:28 770 ----a-w C:\Documents and Settings\Kluci\NOUZE.DLL
2005-04-09 15:28 5 ----a-w C:\Documents and Settings\Kluci\CHYBY.DLL
2004-08-18 12:00 94,784 --sh--w C:\WINDOWS\twain.dll
2004-08-18 12:00 50,688 --sh--w C:\WINDOWS\twain_32.dll
1999-04-23 22:22 12 --sha-w C:\WINDOWS\system\WININETICMP32.drv
2006-04-14 13:41 3,350 --sha-w C:\WINDOWS\system32\KGyGaAvL.sys
2004-08-18 12:00 1,028,096 --sh--w C:\WINDOWS\system32\mfc42.dll
2004-08-18 12:00 54,784 --sh--w C:\WINDOWS\system32\msvcirt.dll
2004-08-18 12:00 413,696 --sh--w C:\WINDOWS\system32\msvcp60.dll
2004-08-18 12:00 343,040 --sh--w C:\WINDOWS\system32\msvcrt.dll
2004-08-18 12:00 12,288 --sh--w C:\WINDOWS\system32\regsvr32.exe
.

------- Sigcheck -------

2005-03-02 20:14 2059008 9355304dd565e23f8ee294720b2c03e5 C:\WINDOWS\$hf_mig$\KB890859\SP2QFE\ntkrnlpa.exe
2004-08-18 14:00 2059008 e86dd06f2b8f919ddf23f78a3bf2aa23 C:\WINDOWS\$NtUninstallKB890859$\ntkrnlpa.exe
2005-03-02 20:08 2059008 e32780e8939338b80edff39e2314c223 C:\WINDOWS\Driver_Cache\i386\ntkrnlpa.exe
2005-03-02 20:08 2068480 10a61a2f4455d1b84a98d3ead2a5f08e C:\WINDOWS\system32\ntkrnlpa.exe

2005-03-02 20:14 2181632 7fabe135eac02a4bc8094b831adc0cc3 C:\WINDOWS\$hf_mig$\KB890859\SP2QFE\ntoskrnl.exe
2004-08-18 14:00 2183168 12c80e46dcec9b82473d1b1b9da1f16b C:\WINDOWS\$NtUninstallKB890859$\ntoskrnl.exe
2005-03-02 20:09 2181504 b0dae70164cc79d1289ef3530a3646f1 C:\WINDOWS\Driver_Cache\i386\ntoskrnl.exe
2005-03-02 20:09 2190976 2c9c73eee95e7d6da0188d7e1bacafea C:\WINDOWS\system32\ntoskrnl.exe

2004-08-18 14:00 1422848 eff9b7d4e4ae0ee895e0172ac54218d9 C:\WINDOWS\explorer.exe
.
(((((((((((((((((((((((((((((((((( Spouštěcí body v registru )))))))))))))))))))))))))))))))))))))))))))))
.
.
*Poznámka* prázdné záznamy a legitimní výchozí údaje nejsou zobrazeny.
REGEDIT4

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"SpybotSD TeaTimer"="C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe" [2008-08-18 1832272]
"MSMSGS"="C:\Program Files\Messenger\msmsgs.exe" [2004-10-13 1694208]
"OM2_Monitor"="C:\Program Files\OLYMPUS\OLYMPUS Master 2\MMonitor.exe" [2007-09-11 95536]
"Picasa Media Detector"="C:\Program Files\Picasa2\PicasaMediaDetector.exe" [2007-10-23 443968]
"Sony Ericsson PC Suite"="C:\Program Files\Sony Ericsson\Sony Ericsson PC Suite\SEPCSuite.exe" [2007-08-02 348160]
"msnmsgr"="C:\Program Files\MSN Messenger\msnmsgr.exe" [2006-07-29 5354792]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"ASUS Probe"="C:\Program Files\ASUS\Probe\AsusProb.exe" [2002-12-06 617984]
"WinFast Schedule"="C:\Program Files\WinFast\WFTVFM\WFWIZ.exe" [2005-03-02 278528]
"ATIPTA"="C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe" [2004-11-24 344064]
"RemoteControl"="C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe" [2003-10-31 32768]
"NeroFilterCheck"="C:\WINDOWS\system32\NeroCheck.exe" [2001-07-09 155648]
"HP Component Manager"="C:\Program Files\HP\hpcoretech\hpcmpmgr.exe" [2003-12-22 241664]
"HPDJ Taskbar Utility"="C:\WINDOWS\system32\spool\drivers\w32x86\3\hpztsb10.exe" [2004-03-04 172032]
"HP Software Update"="C:\Program Files\Hewlett-Packard\HP Software Update\HPWuSchd2.exe" [2004-02-18 49152]
"Share-to-Web Namespace Daemon"="C:\Program Files\Hewlett-Packard\PhotoSmart\HP Share-to-Web\hpgs2wnd.exe" [2001-07-03 57344]
"CXMon"="C:\Program Files\Hewlett-Packard\PhotoSmart\Photo Imaging\Hpi_Monitor.exe" [2002-03-05 45056]
"ISUSPM"="C:\Program Files\Common Files\InstallShield\UpdateService\ISUSPM.exe" [2006-03-20 213936]
"ioCentre"="C:\Genius\ioCentre\gTaskBar.exe" [2006-12-08 241664]
"Sony Ericsson PC Suite"="C:\Program Files\Sony Ericsson\Mobile2\Application Launcher\Application Launcher.exe" [2006-11-24 487424]
"OODefragTray"="C:\WINDOWS\system32\oodtray.exe" [2007-05-11 2512392]
"StartCCC"="C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" [2008-01-21 61440]
"Realtime Audio Engine"="mmrtkrnl.exe" [2005-01-20 C:\WINDOWS\system32\MMRTKRNL.EXE]

[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="C:\WINDOWS\system32\CTFMON.EXE" [2004-08-18 15360]

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\WB]
2001-12-21 00:34 24576 C:\Program Files\Stardock\Object Desktop\ThemeManager\fastload.dll

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\LMIinit]
2007-11-15 19:46 87352 C:\WINDOWS\system32\LMIinit.dll

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\windows]
"AppInit_DLLs"=wbsys.dll

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\drivers32]
"vidc.xvid"= xvid.dll

[HKLM\~\startupfolder\C:^Documents and Settings^All Users^Nabídka Start^Programy^Po spuštění^WinZip Quick Pick.lnk]
path=C:\Documents and Settings\All Users\Nabídka Start\Programy\Po spuštění\WinZip Quick Pick.lnk
backup=C:\WINDOWS\pss\WinZip Quick Pick.lnkCommon Startup

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\services]
"ekrn"=2 (0x2)
"EhttpSrv"=3 (0x3)
"aswUpdSv"=2 (0x2)

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"C:\\WINDOWS\\system32\\sessmgr.exe"=
"C:\\WINDOWS\\system32\\PnkBstrA.exe"=
"C:\\WINDOWS\\system32\\PnkBstrB.exe"=
"C:\\Program Files\\Skype\\Phone\\Skype.exe"=
"C:\\Program Files\\Pro Evolution Soccer 2008\\PES2008.exe"=
"C:\\Documents and Settings\\Kluci\\Plocha\\Hry\\PES 2008\\PES2008.exe"=

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\IcmpSettings]
"AllowInboundEchoRequest"= 0 (0x0)

R2 LMIInfo;LogMeIn Kernel Information Provider;C:\Program Files\LogMeIn\x86\RaInfo.sys [2007-08-03 12992]
R2 LMIRfsDriver;LogMeIn Remote File System Driver;C:\WINDOWS\system32\drivers\LMIRfsDriver.sys [2007-08-03 46112]
R2 WF23880;WinFast TV2000/DV2000 WDM Video Capture.;C:\WINDOWS\system32\drivers\wf88vcap.sys [2004-10-18 208851]
R2 WF88XBAR;WinFast TV2000/DV2000 WDM Crossbar.;C:\WINDOWS\system32\drivers\WF88XBAR.sys [2004-10-18 10324]
R2 WFTUNE;WinFast TV2000/DV2000 WDM Tuner.;C:\WINDOWS\system32\drivers\WF88TUNE.sys [2004-10-18 34789]
R3 gMouPS2;PS2 Scroll Mouse Device;C:\WINDOWS\system32\DRIVERS\gMouPS2.sys [2006-07-12 17408]
R3 PSched;Plánovač paketů technologie QoS;C:\WINDOWS\system32\DRIVERS\psched.sys [2004-08-18 69120]
R3 WFIOCTL;WFIOCTL;C:\Program Files\WinFast\WFTVFM\WFIOCTL.SYS [2005-01-06 9446]
R4 ewido security suite driver;ewido security suite driver;C:\Program Files\ewido anti-malware\guard.sys [ ]
S3 gHidPnp;USB Device Enhanced Function Driver;C:\WINDOWS\system32\Drivers\gHidPnp.Sys [2006-07-14 14848]
S3 se46bus;Sony Ericsson Device 070 driver (WDM);C:\WINDOWS\system32\DRIVERS\se46bus.sys [2006-11-30 61536]
S3 se46mdfl;Sony Ericsson Device 070 USB WMC Modem Filter;C:\WINDOWS\system32\DRIVERS\se46mdfl.sys [2006-11-30 9360]
S3 se46mdm;Sony Ericsson Device 070 USB WMC Modem Driver;C:\WINDOWS\system32\DRIVERS\se46mdm.sys [2006-11-30 97088]
S3 se46mgmt;Sony Ericsson Device 070 USB WMC Device Management Drivers (WDM);C:\WINDOWS\system32\DRIVERS\se46mgmt.sys [2006-11-30 88624]
S3 se46nd5;Sony Ericsson Device 070 USB Ethernet Emulation SEMC46 (NDIS);C:\WINDOWS\system32\DRIVERS\se46nd5.sys [2006-11-30 18704]
S3 se46obex;Sony Ericsson Device 070 USB WMC OBEX Interface;C:\WINDOWS\system32\DRIVERS\se46obex.sys [2006-11-30 86432]
S3 se46unic;Sony Ericsson Device 070 USB Ethernet Emulation SEMC46 (WDM);C:\WINDOWS\system32\DRIVERS\se46unic.sys [2006-11-30 90800]
S4 dopewars-server;dopewars server;C:\Program Files\dopewars-1.5.10\dopewars.exe [ ]
S4 ICQ Service;ICQ Service;C:\Program Files\ICQ6Toolbar\ICQ Service.exe [2008-06-10 222456]

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{06a3bab8-6592-11da-ad56-0011d82e1fe2}]
\Shell\AutoRun\command - E:\Autorun.exe
.
Obsah adresáře 'Naplánované úlohy'
.
- - - - NEPLATNÉ POLOŽKY ODSTRANĚNÉ Z REGISTRU - - - -

HKLM-Run-pdfSaver3 - (no file)


.
------- Doplňkový sken -------
.
R0 -: HKCU-Main,Start Page = about:blank
R0 -: HKLM-Main,Start Page = about:blank
R1 -: HKCU-Internet Connection Wizard,ShellNext = iexplore
R1 -: HKCU-SearchURL,(Default) = hxxp://www.google.com/keyword/%s
O8 -: &ICQ Toolbar Search - C:\Program Files\ICQToolbar\toolbaru.dll/SEARCH.HTML
O17 -: HKLM\CCS\Interface\{E3CBCED4-56EB-4051-8319-4C6BDB2AAA96}: NameServer = 194.228.41.65 194.228.41.113
.

**************************************************************************

catchme 0.3.1361 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2008-09-17 22:30:47
Windows 5.1.2600 Service Pack 2 NTFS

skenování skrytých procesů ...

skenování skrytých položek 'Po spuštění' ...

skenování skrytých souborů ...

sken byl úspešně dokončen
skryté soubory: 0

**************************************************************************
.
--------------------- Knihovny navázané na běžící procesy ---------------------

PROCES: C:\WINDOWS\system32\lsass.exe
-> C:\WINDOWS\system32\xfire_lsp_10650.dll
.
Celkový čas: 2008-09-17 22:32:11
ComboFix-quarantined-files.txt 2008-09-17 20:32:00
ComboFix2.txt 2008-03-29 16:22:36

P°ed spuÜtýnÝm: 8,041,197,568
Po spuÜtýnÝ: 8,046,223,360

182

[Reklama]

[Diallix]

Preco davate dotaz na 2 fora a tym zbytocne zatazujete radcov?