Výhra v soutěži... Je to spam ?- Log, prosím o kontrolu Vyřešeno

[M4RTY]

HOTOVO!

ComboFix 09-12-18.02 - Martin 19.12.2009 16:50:35.12.1 - x86
Microsoft Windows XP Home Edition 5.1.2600.3.1250.420.1029.18.2046.1585 [GMT 1:00]
Spuštěný z: c:\documents and settings\Martin.MARTIN-PC\Plocha\KittyFix.exe
Použité ovládací přepínače :: c:\documents and settings\Martin.MARTIN-PC\Plocha\CFScript.txt
AV: Eset NOD32 Antivirus 2.51 *On-access scanning disabled* (Updated) {E5E70D32-0101-4F12-8FB0-D96ACA4F34C0}
FW: COMODO Firewall *disabled* {043803A3-4F86-4ef6-AFC5-F6E02A79969B}
SP: COMODO Defense+ *disabled* (Updated) {043803A4-4F86-4ef7-AFC5-F6E02A79969B}

FILE ::
"c:\docume~1\MARTIN~1.MAR\LOCALS~1\Temp\DGTBEC7.tmp"
.

((((((((((((((((((((((((((((((((((((((( Ostatní výmazy )))))))))))))))))))))))))))))))))))))))))))))))))
.

.
((((((((((((((((((((((((((((((((((((((( Ovladače/Služby )))))))))))))))))))))))))))))))))))))))))))))))))
.

-------\Legacy_GARENAPENGINE


((((((((((((((((((((((((( Soubory vytvořené od 2009-11-19 do 2009-12-19 )))))))))))))))))))))))))))))))
.

2009-12-19 11:16 . 2009-12-19 11:27 -------- d-----w- C:\KittyFix
2009-12-18 21:00 . 2009-12-18 21:06 -------- d-----w- c:\program files\Garena
2009-12-16 16:37 . 2009-12-16 16:37 -------- d-----w- c:\program files\MirandaPack
2009-12-14 20:18 . 2009-12-14 20:18 -------- d-----w- C:\_OTL
2009-12-14 17:02 . 2009-12-14 17:02 -------- d-----w- c:\windows\system32\URTTEMP
2009-12-11 13:21 . 2009-12-11 13:21 -------- d-----w- c:\program files\DAEMON Tools Lite
2009-12-09 15:24 . 2009-12-09 15:24 -------- d-----w- C:\ERDNT
2009-12-09 15:24 . 2009-12-09 15:24 -------- d-----w- c:\windows\ERUNT
2009-12-09 15:24 . 2009-12-09 15:24 -------- d-----w- C:\!FixIEDef
2009-12-08 17:16 . 2009-12-08 17:17 -------- d-----w- c:\windows\system32\NtmsData
2009-12-06 15:51 . 2009-11-21 02:34 69632 ----a-w- c:\windows\system32\OpenCL.dll
2009-12-06 15:51 . 2009-11-21 02:34 11374592 ----a-w- c:\windows\system32\nvcompiler.dll
2009-12-06 14:49 . 2009-12-06 14:50 -------- d-----w- C:\Backup_FIFA_10
2009-12-06 10:51 . 2006-06-20 08:56 225280 ----a-w- c:\windows\system32\rewire.dll
2009-12-06 10:50 . 2009-12-06 10:50 -------- d-----w- c:\program files\Image-Line
2009-12-06 10:50 . 2009-12-06 10:50 -------- d-----w- c:\program files\Outsim
2009-12-06 10:44 . 2009-12-06 10:44 274523 ----a-w- c:\windows\DJ Music Mixer Uninstaller.exe
2009-12-06 10:44 . 2009-12-06 10:44 -------- d-----w- c:\program files\Common Files\Program4Pc
2009-12-05 17:06 . 2009-12-05 17:06 -------- d-----w- c:\program files\FIFAMANIA
2009-12-05 14:18 . 2009-12-05 14:18 0 ----a-w- c:\windows\nsreg.dat
2009-12-05 14:18 . 2009-12-19 15:03 -------- d-----w- c:\program files\Mozilla Thunderbird
2009-12-01 19:44 . 2009-12-01 19:44 -------- d-----w- c:\program files\Microsoft Silverlight
2009-11-29 21:10 . 2009-11-29 21:10 229208 ----a-w- c:\windows\system32\drivers\VMM.sys
2009-11-28 21:57 . 2009-10-30 14:08 29512 ----a-w- c:\windows\system32\TURegOpt.exe
2009-11-28 21:56 . 2009-11-28 21:57 -------- d-----w- c:\program files\TuneUp Utilities 2010
2009-11-28 21:44 . 2009-11-28 21:44 -------- d-----w- C:\Downloads
2009-11-28 20:10 . 2009-11-28 21:46 -------- d-----w- c:\program files\FlashGet
2009-11-28 13:13 . 2009-11-28 13:13 -------- d-----w- c:\program files\Microsoft Virtual PC
2009-11-27 15:54 . 2009-11-05 15:38 1669120 ----a-w- c:\windows\system32\BootMan.exe
2009-11-27 15:54 . 2009-09-16 15:55 8456 ----a-w- c:\windows\system32\EuGdiDrv.sys
2009-11-27 15:54 . 2009-09-14 08:21 14848 ----a-w- c:\windows\system32\EuEpmGdi.dll
2009-11-27 15:54 . 2009-08-26 11:45 13192 ----a-w- c:\windows\system32\epmntdrv.sys
2009-11-27 15:54 . 2009-04-22 13:28 86408 ----a-w- c:\windows\system32\setupempdrv03.exe
2009-11-27 15:54 . 2009-11-27 15:54 -------- d-----w- c:\program files\EASEUS
2009-11-27 11:35 . 2009-12-06 09:05 -------- d-----w- c:\program files\NCH Swift Sound
2009-11-26 18:10 . 2009-11-26 18:12 -------- d-----w- c:\program files\UnderCoverXP
2009-11-26 15:12 . 2009-11-26 15:12 -------- d-----w- c:\windows\Performance
2009-11-26 15:11 . 2009-11-26 15:11 -------- d-----w- c:\program files\Microsoft Windows 7 Upgrade Advisor
2009-11-23 18:26 . 2009-11-23 18:26 -------- d-----w- c:\program files\Lavalys
2009-11-23 15:55 . 2009-11-23 15:56 -------- d-----w- c:\program files\PhotoFiltre Studio X
2009-11-20 19:32 . 2009-11-20 19:32 278120 ----a-w- c:\windows\system32\nvmccs.dll
2009-11-20 19:32 . 2009-11-20 19:32 154216 ----a-w- c:\windows\system32\nvsvc32.exe
2009-11-20 19:32 . 2009-11-20 19:32 145000 ----a-w- c:\windows\system32\nvcolor.exe
2009-11-20 19:32 . 2009-11-20 19:32 12669544 ----a-w- c:\windows\system32\nvcpl.dll
2009-11-20 19:32 . 2009-11-20 19:32 110184 ----a-w- c:\windows\system32\nvmctray.dll
2009-11-20 19:32 . 2009-11-20 19:32 81920 ----a-w- c:\windows\system32\nvwddi.dll

.
(((((((((((((((((((((((((((((((((((((((( Find3M výpis ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2009-12-19 13:53 . 2009-07-28 18:01 137464 ----a-w- c:\windows\system32\drivers\PnkBstrK.sys
2009-12-19 13:53 . 2009-07-28 18:00 214520 ----a-w- c:\windows\system32\PnkBstrB.exe
2009-12-15 07:57 . 2008-04-14 12:00 83358 ----a-w- c:\windows\system32\perfc005.dat
2009-12-15 07:57 . 2008-04-14 12:00 439012 ----a-w- c:\windows\system32\perfh005.dat
2009-12-11 13:21 . 2009-07-28 17:31 691696 ----a-w- c:\windows\system32\drivers\sptd.sys
2009-12-08 16:29 . 2009-08-05 21:10 -------- d-----w- c:\program files\Malwarebytes' Anti-Malware
2009-12-06 15:53 . 2009-07-29 12:32 -------- d-----w- c:\program files\NVIDIA Corporation
2009-12-06 09:05 . 2009-11-27 11:35 -------- d-----w- c:\program files\NCH Swift Sound
2009-12-05 19:17 . 2009-07-28 14:56 -------- d--h--w- c:\program files\InstallShield Installation Information
2009-12-03 15:14 . 2009-08-05 21:10 38224 ----a-w- c:\windows\system32\drivers\mbamswissarmy.sys
2009-12-03 15:13 . 2009-08-05 21:10 19160 ----a-w- c:\windows\system32\drivers\mbam.sys
2009-11-26 16:02 . 2009-08-13 18:46 -------- d-----w- c:\program files\Game Cam V2
2009-11-26 15:58 . 2009-07-28 18:19 -------- d-----w- c:\program files\Opera
2009-11-21 02:34 . 2009-07-29 12:31 2259560 ----a-w- c:\windows\system32\nvcuvid.dll
2009-11-21 02:34 . 2009-07-29 12:31 1989224 ----a-w- c:\windows\system32\nvcuvenc.dll
2009-11-21 02:34 . 2009-07-29 12:31 2293286 ----a-w- c:\windows\system32\nvdata.bin
2009-11-21 02:34 . 2009-07-28 16:14 592488 ----a-w- c:\windows\system32\nvudisp.exe
2009-11-21 02:34 . 2009-07-28 16:14 10235968 ----a-w- c:\windows\system32\drivers\nv4_mini.sys
2009-11-21 02:34 . 2009-07-28 16:13 6282752 ----a-w- c:\windows\system32\nv4_disp.dll
2009-11-21 02:34 . 2009-07-28 16:13 4038656 ----a-w- c:\windows\system32\nvcuda.dll
2009-11-21 02:34 . 2009-07-28 16:13 182888 ----a-w- c:\windows\system32\nvcodins.dll
2009-11-21 02:34 . 2009-07-28 16:13 182888 ----a-w- c:\windows\system32\nvcod.dll
2009-11-21 02:34 . 2009-07-28 16:13 13602816 ----a-w- c:\windows\system32\nvoglnt.dll
2009-11-21 02:34 . 2009-07-28 16:13 1056768 ----a-w- c:\windows\system32\nvapi.dll
2009-11-19 20:42 . 2009-07-28 16:08 592488 ----a-w- c:\windows\system32\NVUNINST.EXE
2009-11-18 13:29 . 2009-11-18 13:29 2395944 ----a-w- c:\windows\system32\pbsvc_heroes.exe
2009-11-18 13:18 . 2009-11-18 13:18 -------- d-----w- c:\program files\EA Games
2009-11-17 11:25 . 2009-10-29 10:09 171552 ----a-w- c:\windows\system32\guard32.dll
2009-11-17 11:25 . 2009-10-29 10:09 87104 ----a-w- c:\windows\system32\drivers\inspect.sys
2009-11-17 11:25 . 2009-10-29 10:09 25160 ----a-w- c:\windows\system32\drivers\cmdhlp.sys
2009-11-17 11:25 . 2009-10-29 10:09 132808 ----a-w- c:\windows\system32\drivers\cmdguard.sys
2009-11-16 15:26 . 2009-10-29 20:11 -------- d-----w- c:\program files\Xi
2009-11-15 10:11 . 2009-11-15 10:11 -------- d-----w- c:\program files\Darq Software
2009-11-14 12:46 . 2009-11-14 12:46 -------- d-----w- c:\program files\VideoLAN
2009-11-14 11:25 . 2009-11-14 11:25 -------- d-----w- c:\program files\Efficient Diary
2009-11-13 17:01 . 2009-07-29 12:32 -------- d-----w- c:\program files\AGEIA Technologies
2009-11-13 17:01 . 2009-07-29 12:32 -------- d-----w- c:\program files\Common Files\Wise Installation Wizard
2009-11-11 18:35 . 2009-11-11 18:35 -------- d-----w- c:\program files\DsNET Corp
2009-11-09 18:12 . 2009-11-09 18:12 7494337 ----a-w- C:\FIFA10.exe
2009-11-08 11:46 . 2009-10-25 09:34 63 ----a-w- c:\documents and settings\Martin.MARTIN-PC\jagex_runescape_preferences2.dat
2009-11-08 11:44 . 2009-10-25 09:33 38 ----a-w- c:\documents and settings\Martin.MARTIN-PC\jagex_runescape_preferences.dat
2009-11-07 16:05 . 2009-11-07 16:05 -------- d-----w- c:\program files\Singular Inversions
2009-11-06 20:57 . 2009-11-06 20:55 -------- d-----w- c:\program files\Miranda IM
2009-11-06 19:36 . 2009-10-17 08:42 292656 ----a-w- C:\bin0.bin
2009-11-06 19:36 . 2009-10-17 08:42 190598 ----a-w- C:\subafsfile0.bin
2009-11-05 18:34 . 2009-10-15 18:57 -------- d-----w- c:\program files\Sony Ericsson
2009-11-05 16:01 . 2009-11-05 15:59 -------- d-----w- c:\program files\Common Files\Blizzard Entertainment
2009-10-30 20:42 . 2009-10-30 20:42 -------- d-----w- c:\program files\Blender Foundation
2009-10-30 20:32 . 2009-10-30 20:32 -------- d-----w- c:\program files\Gamingaccess
2009-10-30 14:01 . 2009-08-04 20:14 30024 ----a-w- c:\windows\system32\uxtuneup.dll
2009-10-30 11:49 . 2009-10-30 11:49 -------- d-----w- c:\program files\Recuva
2009-10-29 21:15 . 2009-08-22 12:26 -------- d-----w- c:\program files\Vietcong2
2009-10-29 19:51 . 2009-08-06 07:12 -------- d-----w- c:\program files\Spybot - Search & Destroy
2009-10-29 19:38 . 2009-07-30 10:25 -------- d-----w- c:\program files\OEdit
2009-10-29 10:09 . 2009-10-29 10:09 -------- d-----w- c:\program files\COMODO
2009-10-29 07:43 . 2008-04-14 12:00 916480 ------w- c:\windows\system32\wininet.dll
2009-10-28 12:43 . 2009-10-28 12:43 -------- d-----w- c:\program files\VSO
2009-10-21 05:40 . 2008-04-14 12:00 75776 ----a-w- c:\windows\system32\strmfilt.dll
2009-10-21 05:40 . 2008-04-14 12:00 25088 ----a-w- c:\windows\system32\httpapi.dll
2009-10-20 19:11 . 2009-10-20 19:11 -------- d-----w- c:\program files\Windows Media Connect 2
2009-10-20 16:20 . 2008-04-14 12:00 265728 ----a-w- c:\windows\system32\drivers\http.sys
2009-10-13 10:34 . 2008-04-14 12:00 271360 ----a-w- c:\windows\system32\oakley.dll
2009-10-12 13:40 . 2008-04-14 12:00 79872 ----a-w- c:\windows\system32\raschap.dll
2009-10-12 13:40 . 2008-04-14 12:00 150016 ----a-w- c:\windows\system32\rastls.dll
2009-09-27 17:19 . 2009-09-27 17:19 3674112 ----a-w- c:\windows\system32\nvwssr.dll
2009-09-27 17:19 . 2009-09-27 17:19 3166208 ----a-w- c:\windows\system32\nvwss.dll
2009-09-27 17:19 . 2009-09-27 17:19 4616192 ----a-w- c:\windows\system32\nvvitvsr.dll
2009-09-27 17:19 . 2009-09-27 17:19 4026368 ----a-w- c:\windows\system32\nvvitvs.dll
2009-09-27 17:19 . 2009-09-27 17:19 4640768 ----a-w- c:\windows\system32\nvgamesr.dll
2009-09-27 17:19 . 2009-09-27 17:19 458752 ----a-w- c:\windows\system32\nvmccssr.dll
2009-09-27 17:19 . 2009-09-27 17:19 3547136 ----a-w- c:\windows\system32\nvgames.dll
2009-09-27 17:19 . 2009-09-27 17:19 2854912 ----a-w- c:\windows\system32\nvmoblsr.dll
2009-09-27 17:19 . 2009-09-27 17:19 188416 ----a-w- c:\windows\system32\nvmccss.dll
2009-09-27 17:19 . 2009-09-27 17:19 1286144 ----a-w- c:\windows\system32\nvmobls.dll
2009-09-27 17:19 . 2009-09-27 17:19 8110080 ----a-w- c:\windows\system32\nvdispsr.dll
2009-09-27 17:19 . 2009-09-27 17:19 4935680 ----a-w- c:\windows\system32\nvdisps.dll
2009-09-20 19:19 . 2009-09-20 19:19 5027833 ----a-w- C:\aaa.zip
2009-05-01 21:02 . 2009-05-01 21:02 1044480 ----a-w- c:\program files\mozilla firefox\plugins\libdivx.dll
2009-05-01 21:02 . 2009-05-01 21:02 200704 ----a-w- c:\program files\mozilla firefox\plugins\ssldivx.dll
2009-05-01 21:02 . 2009-05-01 21:02 1044480 ----a-w- c:\program files\opera\program\plugins\libdivx.dll
2009-05-01 21:02 . 2009-05-01 21:02 200704 ----a-w- c:\program files\opera\program\plugins\ssldivx.dll
.

((((((((((((((((((((((((((((( SnapShot@2009-12-19_11.26.03 )))))))))))))))))))))))))))))))))))))))))
.
+ 2009-12-19 15:57 . 2009-12-19 15:57 16384 c:\windows\temp\Perflib_Perfdata_28c.dat
- 2009-08-07 12:44 . 2009-12-10 06:43 23040 c:\windows\Installer\{90110405-6000-11D3-8CFE-0150048383C9}\unbndico.exe
+ 2009-08-07 12:44 . 2009-12-19 11:47 23040 c:\windows\Installer\{90110405-6000-11D3-8CFE-0150048383C9}\unbndico.exe
- 2009-08-07 12:44 . 2009-12-10 06:43 61440 c:\windows\Installer\{90110405-6000-11D3-8CFE-0150048383C9}\pubs.exe
+ 2009-08-07 12:44 . 2009-12-19 11:47 61440 c:\windows\Installer\{90110405-6000-11D3-8CFE-0150048383C9}\pubs.exe
- 2009-08-07 12:44 . 2009-12-10 06:43 27136 c:\windows\Installer\{90110405-6000-11D3-8CFE-0150048383C9}\oisicon.exe
+ 2009-08-07 12:44 . 2009-12-19 11:47 27136 c:\windows\Installer\{90110405-6000-11D3-8CFE-0150048383C9}\oisicon.exe
- 2009-08-07 12:44 . 2009-12-10 06:43 11264 c:\windows\Installer\{90110405-6000-11D3-8CFE-0150048383C9}\mspicons.exe
+ 2009-08-07 12:44 . 2009-12-19 11:47 11264 c:\windows\Installer\{90110405-6000-11D3-8CFE-0150048383C9}\mspicons.exe
+ 2009-08-07 12:44 . 2009-12-19 11:47 86016 c:\windows\Installer\{90110405-6000-11D3-8CFE-0150048383C9}\inficon.exe
- 2009-08-07 12:44 . 2009-12-10 06:43 86016 c:\windows\Installer\{90110405-6000-11D3-8CFE-0150048383C9}\inficon.exe
- 2009-08-07 12:44 . 2009-12-10 06:43 12288 c:\windows\Installer\{90110405-6000-11D3-8CFE-0150048383C9}\cagicon.exe
+ 2009-08-07 12:44 . 2009-12-19 11:47 12288 c:\windows\Installer\{90110405-6000-11D3-8CFE-0150048383C9}\cagicon.exe
+ 2009-08-07 12:44 . 2009-12-19 11:47 4096 c:\windows\Installer\{90110405-6000-11D3-8CFE-0150048383C9}\opwicon.exe
- 2009-08-07 12:44 . 2009-12-10 06:43 4096 c:\windows\Installer\{90110405-6000-11D3-8CFE-0150048383C9}\opwicon.exe
- 2009-08-07 12:44 . 2009-12-10 06:43 409600 c:\windows\Installer\{90110405-6000-11D3-8CFE-0150048383C9}\xlicons.exe
+ 2009-08-07 12:44 . 2009-12-19 11:47 409600 c:\windows\Installer\{90110405-6000-11D3-8CFE-0150048383C9}\xlicons.exe
- 2009-08-07 12:44 . 2009-12-10 06:43 286720 c:\windows\Installer\{90110405-6000-11D3-8CFE-0150048383C9}\wordicon.exe
+ 2009-08-07 12:44 . 2009-12-19 11:47 286720 c:\windows\Installer\{90110405-6000-11D3-8CFE-0150048383C9}\wordicon.exe
- 2009-08-07 12:44 . 2009-12-10 06:43 249856 c:\windows\Installer\{90110405-6000-11D3-8CFE-0150048383C9}\pptico.exe
+ 2009-08-07 12:44 . 2009-12-19 11:47 249856 c:\windows\Installer\{90110405-6000-11D3-8CFE-0150048383C9}\pptico.exe
+ 2009-08-07 12:44 . 2009-12-19 11:47 794624 c:\windows\Installer\{90110405-6000-11D3-8CFE-0150048383C9}\outicon.exe
- 2009-08-07 12:44 . 2009-12-10 06:43 794624 c:\windows\Installer\{90110405-6000-11D3-8CFE-0150048383C9}\outicon.exe
- 2009-08-07 12:44 . 2009-12-10 06:43 135168 c:\windows\Installer\{90110405-6000-11D3-8CFE-0150048383C9}\misc.exe
+ 2009-08-07 12:44 . 2009-12-19 11:47 135168 c:\windows\Installer\{90110405-6000-11D3-8CFE-0150048383C9}\misc.exe
+ 2009-08-07 12:44 . 2009-12-19 11:47 593920 c:\windows\Installer\{90110405-6000-11D3-8CFE-0150048383C9}\accicons.exe
- 2009-08-07 12:44 . 2009-12-10 06:43 593920 c:\windows\Installer\{90110405-6000-11D3-8CFE-0150048383C9}\accicons.exe
+ 2009-12-16 21:58 . 2009-12-16 21:58 5382144 c:\windows\Installer\dc0f5.msp
.
(((((((((((((((((((((((((((((((((( Spouštěcí body v registru )))))))))))))))))))))))))))))))))))))))))))))
.
.
*Poznámka* prázdné záznamy a legitimní výchozí údaje nejsou zobrazeny.
REGEDIT4

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"MSMSGS"="c:\program files\Messenger\msmsgs.exe" [2008-04-14 1695232]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"RTHDCPL"="RTHDCPL.EXE" [2007-08-10 16384000]
"SkyTel"="SkyTel.EXE" [2007-08-03 1826816]
"nod32kui"="c:\program files\Eset\nod32kui.exe" [2009-07-28 921600]
"RTBatteryMeter"="c:\program files\VibrateGameDeviceDriver\RFPIcon.exe" [2003-01-16 49152]
"COMODO Internet Security"="c:\program files\COMODO\COMODO Internet Security\cfp.exe" [2009-11-17 1800464]
"NvCplDaemon"="c:\windows\system32\NvCpl.dll" [2009-11-20 12669544]
"NvMediaCenter"="c:\windows\system32\NvMcTray.dll" [2009-11-20 110184]

[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="c:\windows\system32\CTFMON.EXE" [2008-04-14 15360]

[hkey_local_machine\software\microsoft\windows\currentversion\explorer\ShellExecuteHooks]
"{5AE067D3-9AFB-48E0-853A-EBB7F4A000DA}"= "c:\program files\SUPERAntiSpyware\SASSEH.DLL" [2008-05-13 77824]

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\!SASWinLogon]
2008-12-22 10:05 356352 ----a-w- c:\program files\SUPERAntiSpyware\SASWINLO.dll

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\windows]
"AppInit_DLLs"=c:\windows\system32\guard32.dll

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\Network Diagnostic\\xpnetdiag.exe"=
"%windir%\\system32\\sessmgr.exe"=
"c:\\Program Files\\uTorrent\\utorrent.exe"=
"c:\\WINDOWS\\system32\\PnkBstrA.exe"=
"c:\\WINDOWS\\system32\\PnkBstrB.exe"=
"c:\\Program Files\\ICQ6.5\\ICQ.exe"=
"c:\\Martin\\Activision\\Call of Duty 4 - Modern Warfare\\iw3mp.exe"=
"c:\\Program Files\\SopCast\\SopCast.exe"=
"c:\\Program Files\\SopCast\\adv\\SopAdver.exe"=
"c:\\Program Files\\QIP\\qip.exe"=
"c:\\Martin\\Activision\\Call of Duty 2\\CoD2MP_s.exe"=
"c:\\Program Files\\Bonjour\\mDNSResponder.exe"=
"c:\\Martin\\Rockstar Games\\Rockstar Games Social Club\\RGSCLauncher.exe"=
"c:\\Program Files\\Mozilla Firefox\\firefox.exe"=
"c:\\Martin\\EA Sports\\FIFA 08\\FIFA08.exe"=
"c:\\Martin\\EA Sports\\NHL 09\\nhl2009.exe"=
"c:\\Program Files\\QIP Infium30\\infium.exe"=
"c:\\Martin\\Opera\\opera.exe"=
"c:\\Martin\\KONAMI\\Pro Evolution Soccer 10\\pes2010.exe.exe"=
"c:\\Python25\\pythonw.exe"=
"c:\\Program Files\\Hamachi\\hamachi.exe"=
"c:\\Martin\\KONAMI\\Pro Evolution Soccer 10\\GamingAccess.exe"=
"c:\\Martin\\KONAMI\\Pro Evolution Soccer 10\\PESFanatic 2010.exe"=
"e:\\Program Files\\VirtualDJ\\virtualdj_trial.exe"=
"e:\\Program Files\\Activision\\Modern Warfare 2\\iw4mp.exe"=
"e:\\Program Files\\2K Sports\\NBA 2K10\\nba2k10.exe"=
"e:\\Left4Dead\\hl2.exe"=
"e:\\Left4Dead\\left4dead.exe"=
"c:\\Documents and Settings\\Martin.MARTIN-PC\\Plocha\\Nová složka (5)\\MirandaPack_2.4icq\\miranda32.exe"=
"c:\\Program Files\\Skype\\Phone\\Skype.exe"=
"e:\\Nová složka\\Left 4 Dead\\left4dead.exe"=
"c:\\Program Files\\Garena\\Garena.exe"=
"e:\\Counter-Strike Source\\hl2.exe"=

R0 sptd;sptd;c:\windows\system32\drivers\sptd.sys [28.7.2009 18:31 691696]
R1 cmdGuard;COMODO Internet Security Sandbox Driver;c:\windows\system32\drivers\cmdguard.sys [29.10.2009 11:09 132808]
R1 cmdHlp;COMODO Internet Security Helper Driver;c:\windows\system32\drivers\cmdhlp.sys [29.10.2009 11:09 25160]
R1 SASDIFSV;SASDIFSV;c:\program files\SUPERAntiSpyware\sasdifsv.sys [5.8.2009 15:06 9968]
R1 SASKUTIL;SASKUTIL;c:\program files\SUPERAntiSpyware\SASKUTIL.SYS [5.8.2009 15:06 74480]
R2 TuneUp.UtilitiesSvc;TuneUp Utilities Service;c:\program files\TuneUp Utilities 2010\TuneUpUtilitiesService32.exe [30.10.2009 15:05 1021256]
R3 DynCal;Dynamic Calibration Service;c:\windows\system32\drivers\DynCal.sys [12.9.2004 8:45 8320]
R3 seehcri;Sony Ericsson seehcri Device Driver;c:\windows\system32\drivers\seehcri.sys [22.10.2009 19:35 27632]
R3 TuneUpUtilitiesDrv;TuneUpUtilitiesDrv;c:\program files\TuneUp Utilities 2010\TuneUpUtilitiesDriver32.sys [14.10.2009 7:24 10064]
S3 epmntdrv;epmntdrv;c:\windows\system32\epmntdrv.sys [27.11.2009 16:54 13192]
S3 EuGdiDrv;EuGdiDrv;c:\windows\system32\EuGdiDrv.sys [27.11.2009 16:54 8456]
S3 s0016bus;Sony Ericsson Device 0016 driver (WDM);c:\windows\system32\drivers\s0016bus.sys [22.10.2009 19:35 89256]
S3 s0016mdfl;Sony Ericsson Device 0016 USB WMC Modem Filter;c:\windows\system32\drivers\s0016mdfl.sys [22.10.2009 19:35 15016]
S3 s0016mdm;Sony Ericsson Device 0016 USB WMC Modem Driver;c:\windows\system32\drivers\s0016mdm.sys [22.10.2009 19:35 120744]
S3 s0016mgmt;Sony Ericsson Device 0016 USB WMC Device Management Drivers (WDM);c:\windows\system32\drivers\s0016mgmt.sys [22.10.2009 19:35 114216]
S3 s0016nd5;Sony Ericsson Device 0016 USB Ethernet Emulation SEMC0016 (NDIS);c:\windows\system32\drivers\s0016nd5.sys [22.10.2009 19:35 25512]
S3 s0016obex;Sony Ericsson Device 0016 USB WMC OBEX Interface;c:\windows\system32\drivers\s0016obex.sys [22.10.2009 19:35 110632]
S3 s0016unic;Sony Ericsson Device 0016 USB Ethernet Emulation SEMC0016 (WDM);c:\windows\system32\drivers\s0016unic.sys [22.10.2009 19:35 115752]
S3 SASENUM;SASENUM;c:\program files\SUPERAntiSpyware\SASENUM.SYS [5.8.2009 15:06 7408]

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Svchost - NetSvcs
UxTuneUp
.
------- Doplňkový sken -------
.
uStart Page = hxxp://seznam.cz/
IE: E&xport to Microsoft Excel - c:\progra~1\MICROS~2\Office12\EXCEL.EXE/3000
IE: E&xportovat do aplikace Microsoft Office Excel - c:\progra~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
LSP: c:\windows\system32\imon.dll
TCP: {46F288FA-1A35-4FA6-AFC1-24F703C2B251} = 10.10.10.1
FF - ProfilePath - c:\documents and settings\Martin.MARTIN-PC\Data aplikací\Mozilla\Firefox\Profiles\bder680s.default\
FF - prefs.js: browser.search.selectedEngine - Google
FF - prefs.js: browser.startup.homepage - hxxp://www.google.cz/ig
FF - prefs.js: network.proxy.type - 2
FF - component: c:\program files\Mozilla Firefox\extensions\{B13721C7-F507-4982-B2E5-502A71474FED}\components\NPComponent.dll
FF - plugin: c:\martin\Opera\program\plugins\npdsplay.dll
FF - plugin: c:\martin\Opera\program\plugins\NPOFFICE.DLL
FF - plugin: c:\martin\Opera\program\plugins\NPSWF32.dll
FF - plugin: c:\martin\Opera\program\plugins\npwmsdrm.dll
FF - HiddenExtension: Microsoft .NET Framework Assistant: {20a82645-c095-46ed-80e3-08825760534b} - c:\windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\

---- NASTAVENÍ FIREFOXU ----
c:\program files\Mozilla Firefox\defaults\pref\firefox-l10n.js - pref("browser.fixup.alternate.suffix", ".cz");
.
- - - - NEPLATNÉ POLOŽKY ODSTRANĚNÉ Z REGISTRU - - - -

AddRemove-FIFA 10 Grafický patch - c:\martin\EA Sports\FIFA 2010\data\Odinstalovat gr.p.exe



**************************************************************************

catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2009-12-19 16:58
Windows 5.1.2600 Service Pack 3 NTFS

skenování skrytých procesů ...

skenování skrytých položek 'Po spuštění' ...

skenování skrytých souborů ...

sken byl úspešně dokončen
skryté soubory: 0

**************************************************************************

Stealth MBR rootkit/Mebroot/Sinowal detector 0.3.7 by Gmer, http://www.gmer.net

device: opened successfully
user: MBR read successfully
called modules: ntkrnlpa.exe CLASSPNP.SYS disk.sys hal.dll ACPI.sys atapi.sys spzq.sys >>UNKNOWN [0x8A982938]<<
kernel: MBR read successfully
detected MBR rootkit hooks:
\Driver\Disk -> CLASSPNP.SYS @ 0xb80ecf28
\Driver\ACPI -> ACPI.sys @ 0xb7e74cb8
\Driver\atapi -> atapi.sys @ 0xb7e2fb40
IoDeviceObjectType -> DeleteProcedure -> ntkrnlpa.exe @ 0x80579022
ParseProcedure -> ntkrnlpa.exe @ 0x80577c84
\Device\Harddisk0\DR0 -> DeleteProcedure -> ntkrnlpa.exe @ 0x80579022
ParseProcedure -> ntkrnlpa.exe @ 0x80577c84
user & kernel MBR OK

**************************************************************************
.
--------------------- ZAMKNUTÉ KLÍČE V REGISTRU ---------------------

[HKEY_USERS\S-1-5-21-448539723-926492609-1801674531-1004\Software\Microsoft\SystemCertificates\AddressBook*]
@Allowed: (Read) (RestrictedCode)
@Allowed: (Read) (RestrictedCode)
.
--------------------- Knihovny navázané na běžící procesy ---------------------

- - - - - - - > 'winlogon.exe'(1244)
c:\program files\SUPERAntiSpyware\SASWINLO.dll

- - - - - - - > 'lsass.exe'(1380)
c:\windows\system32\imon.dll
c:\program files\Eset\pr_imon.dll

- - - - - - - > 'explorer.exe'(3192)
c:\windows\system32\webcheck.dll
c:\windows\system32\WPDShServiceObj.dll
c:\program files\Microsoft Virtual PC\VPCShExH.DLL
c:\windows\system32\PortableDeviceTypes.dll
c:\windows\system32\PortableDeviceApi.dll
.
------------------------ Jiné spuštené procesy ------------------------
.
c:\windows\system32\nvsvc32.exe
c:\program files\COMODO\COMODO Internet Security\cmdagent.exe
c:\program files\Bonjour\mDNSResponder.exe
c:\program files\Java\jre6\bin\jqs.exe
c:\program files\Eset\nod32krn.exe
c:\windows\system32\PnkBstrA.exe
c:\windows\system32\PnkBstrB.exe
c:\windows\System32\TUProgSt.exe
c:\windows\RTHDCPL.EXE
c:\windows\system32\RUNDLL32.EXE
c:\windows\system32\wbem\wmiapsrv.exe
c:\program files\TuneUp Utilities 2010\TuneUpUtilitiesApp32.exe
.
**************************************************************************
.
Celkový čas: 2009-12-19 17:00:38 - počítač byl restartován
ComboFix-quarantined-files.txt 2009-12-19 16:00
ComboFix2.txt 2009-12-19 11:27
ComboFix3.txt 2009-12-08 20:27

Před spuštěním: Volných bajtů: 15 249 129 472
Po spuštění: Volných bajtů: 15 157 919 744

- - End Of File - - 9F0BEA4137E9780A8CC2EAB812DC6741


Jo, ta Garena bylo neco skodliveho ?

EDIT: Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 17:15:39, on 19.12.2009
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\COMODO\COMODO Internet Security\cmdagent.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\Program Files\Eset\nod32krn.exe
C:\WINDOWS\system32\PnkBstrA.exe
C:\WINDOWS\system32\PnkBstrB.exe
C:\WINDOWS\System32\TUProgSt.exe
C:\Program Files\TuneUp Utilities 2010\TuneUpUtilitiesService32.exe
C:\WINDOWS\RTHDCPL.EXE
C:\Program Files\Eset\nod32kui.exe
C:\Program Files\VibrateGameDeviceDriver\RFPIcon.exe
C:\Program Files\COMODO\COMODO Internet Security\cfp.exe
C:\WINDOWS\system32\RUNDLL32.EXE
C:\Program Files\Messenger\msmsgs.exe
C:\WINDOWS\system32\wbem\wmiapsrv.exe
C:\Program Files\TuneUp Utilities 2010\TuneUpUtilitiesApp32.exe
C:\WINDOWS\explorer.exe
C:\Documents and Settings\Martin.MARTIN-PC\Plocha\Nová složka (5)\MirandaPack_2.4icq\miranda32.exe
C:\Martin\Opera\opera.exe
C:\Documents and Settings\Martin.MARTIN-PC\Plocha\PC-HELP.cz\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://seznam.cz/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Odkazy
O2 - BHO: Adobe PDF Link Helper - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE
O4 - HKLM\..\Run: [SkyTel] SkyTel.EXE
O4 - HKLM\..\Run: [nod32kui] "C:\Program Files\Eset\nod32kui.exe" /WAITSERVICE
O4 - HKLM\..\Run: [RTBatteryMeter] C:\Program Files\VibrateGameDeviceDriver\RFPIcon.exe
O4 - HKLM\..\Run: [COMODO Internet Security] "C:\Program Files\COMODO\COMODO Internet Security\cfp.exe" -h
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Office Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: Zdroje informací - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: ICQ6 - {E59EB121-F339-4851-A3BA-FE49C35617C2} - C:\Program Files\ICQ6.5\ICQ.exe
O9 - Extra 'Tools' menuitem: ICQ6 - {E59EB121-F339-4851-A3BA-FE49C35617C2} - C:\Program Files\ICQ6.5\ICQ.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {7530BFB8-7293-4D34-9923-61A11451AFC5} (OnlineScanner Control) - http://download.eset.com/special/eos/OnlineScanner.cab
O17 - HKLM\System\CCS\Services\Tcpip\..\{46F288FA-1A35-4FA6-AFC1-24F703C2B251}: NameServer = 10.10.10.1
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O20 - AppInit_DLLs: C:\WINDOWS\system32\guard32.dll
O20 - Winlogon Notify: !SASWinLogon - C:\Program Files\SUPERAntiSpyware\SASWINLO.dll
O23 - Service: ##Id_String1.6844F930_1628_4223_B5CC_5BB94B879762## (Bonjour Service) - Apple Computer, Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: COMODO Internet Security Helper Service (cmdAgent) - COMODO - C:\Program Files\COMODO\COMODO Internet Security\cmdagent.exe
O23 - Service: FLEXnet Licensing Service - Macrovision Europe Ltd. - C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe
O23 - Service: NOD32 Kernel Service (NOD32krn) - Eset - C:\Program Files\Eset\nod32krn.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: PnkBstrA - Unknown owner - C:\WINDOWS\system32\PnkBstrA.exe
O23 - Service: PnkBstrB - Unknown owner - C:\WINDOWS\system32\PnkBstrB.exe
O23 - Service: TuneUp Drive Defrag Service (TuneUp.Defrag) - TuneUp Software - C:\Program Files\TuneUp Utilities 2010\TuneUpDefragService.exe
O23 - Service: TuneUp Program Statistics Service (TuneUp.ProgramStatisticsSvc) - TuneUp Software - C:\WINDOWS\System32\TUProgSt.exe
O23 - Service: TuneUp Utilities Service (TuneUp.UtilitiesSvc) - TuneUp Software - C:\Program Files\TuneUp Utilities 2010\TuneUpUtilitiesService32.exe

--
End of file - 6196 bytes

[Reklama]

[Damned]

Jo, vyrábí to neplechu.

Co PC?

Najdi a smaž:
C:\327882R2FWJFW
C:\KittyFix
C:\Qoobox
C:\Kittyfix.txt
a Kittyfix.exe
Pak si stáhni OTCleanIt.
- Připoj se k internetu a dvojklikem spusť program
- Klikni na tlačítko CleanUp
- Po dokončení povol restart PC
- Po restartu tento nástroj smaž - není určen pro běžné používání

Vyčisti systém CCleanerem a použij i T-Cleaner ( nutné - smaže vše po Combu,SDFixu,Avengeru,MWAVu atd.-stáhneš->spustíš)

(pozn.Pokud máš AVG, avast! nebo Aviru, před stažením T-Cleaneru a po dobu čištění deaktivuj AVG, avast! i Aviru (i rezidenty), následně T-Cleaner smaž a zapni si AVG,avast!, Aviru.)

[M4RTY]

PC -> Chová se normálně, moměntálně jsi nevzpomenu na nějake problemy /později kdyžtak doplním/

Tu Garenu jsem si nainstaloval vcera mam ji odinstalovat ?

EDIT: KittyFix.txt tam neni , mam smazat ComboFix.txt ?

EDIT: co muzu s C:... odstranit ? viz. screen , zda se mi ze jsou tam zbytecne soubory

ten OTC se odstranil sám

[Damned]

Složky: !FixIEDef, _OTL.
Soubory: ComboFix, OtMoveIt, T-Cleaner.txt.

Ostatní netuším k čemu jsou a co by mohlo jejich smazání způsobit.

Ten soubor zl_tmp si pro jistotu zkontroluj na VT.


Kdyby se něco zase objevilo, tak se zastav.
Označ topic za vyřešený (zelená fajfka) a měj se.

[M4RTY]

http://www.virustotal.com/cs/analisis/9 ... 1261240961

Nic to nenašlo. Moc děkuji za čas , který jsi mi věnoval ikdyž jsi nemocný Do dnešního večera nechám téma odemčené(snad můžu ) kdyby se něco stalo

[Damned]

Jasně.

[M4RTY]

Teď mám nějaké lagy ve hre pres net , tak to nechám do zítra odemklé a zítra ještě napíši

[Damned]

Dobrá stařenko

[M4RTY]

OK děvčico .
Dnes jsem ještě nehrál, tak později ještě nepíši, ale mám takový "problém" vždy když chci spustit písničku/film v BS Playeru tak mi to napiše hlášku ale film/písnička se přehraje. Myslíš že mám přejít na nějaký jiný přehrávač ? Kdyžtak jaký ?

EDIT: Je pravda, že rychlost/chod pc zrychluje to , že si dám starý vzhled ? Asi ne, co ?

[M4RTY]

Damned ?

[Damned]

BS.Player a tyto podobné mutace asi raději ne. Free verze obsahovala ještě před třemi týdny spyware a tady jsme doporučovali si pořídit něco jiné.

Mě na to běžný přehrávání stačí WMP10, mám ještě Media Player Classic. Jinak s hudebními soubory nepracuji, maximálně převod z CD na *.mp3.

Rychlost PC při vzhledu? Nemám s tím zkušenosti, někde jsem jen četl, že záleží na sestavě a náročnosti vzhledu, podle mne bude asi zrychlení těžko postřehnutelné pro běžné oko, ale když má někdo něco přeplácaný a dá si pak něco jednoduššího, tak to asi pozná.

[M4RTY]

BS.Player je pryč! mám AIMP Player