
ComboFix 12-01-16.02 - Leonik 16.01.2012 23:57:14.2.2 - x86
Microsoft Windows XP Home Edition 5.1.2600.3.1250.420.1029.18.1015.556 [GMT 1:00]
Spuštěný z: c:\documents and settings\Leonik\Dokumenty\Stažené soubory\ComboFix.exe
AV: Avira Desktop *Disabled/Updated* {AD166499-45F9-482A-A743-FDD3350758C7}
AV: Microsoft Security Essentials *Disabled/Updated* {BCF43643-A118-4432-AEDE-D861FCBCFCDF}
* Vytvořen nový Bod Obnovení
.
.
((((((((((((((((((((((((((((((((((((((( Ostatní výmazy )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
c:\windows\EventSystem.log
c:\windows\msxml4-KB973685-enu.LOG
c:\windows\system32\drivers\etc\hosts.ics
c:\windows\TEMP\logishrd\LVPrcInj01.dll
.
.
((((((((((((((((((((((((( Soubory vytvořené od 2011-12-16 do 2012-01-16 )))))))))))))))))))))))))))))))
.
.
2012-01-08 10:54 . 2012-01-08 10:54 -------- d-----w- c:\documents and settings\Leonik\Data aplikací\Avira
2012-01-08 10:41 . 2011-12-15 14:00 74640 ----a-w- c:\windows\system32\drivers\avgntflt.sys
2012-01-08 10:41 . 2011-12-15 14:00 36000 ----a-w- c:\windows\system32\drivers\avkmgr.sys
2012-01-08 10:41 . 2011-12-15 14:00 134856 ----a-w- c:\windows\system32\drivers\avipbb.sys
2012-01-08 10:41 . 2012-01-08 10:41 -------- d-----w- c:\program files\Avira
2012-01-08 10:41 . 2012-01-08 10:41 -------- d-----w- c:\documents and settings\All Users\Data aplikací\Avira
2012-01-06 20:09 . 2012-01-06 20:09 -------- d-----w- c:\documents and settings\Leonik\Data aplikací\Sony Corporation
2012-01-06 20:07 . 2012-01-06 20:07 -------- d-----w- c:\windows\Logs
2012-01-06 20:05 . 2012-01-06 20:11 -------- d-----w- c:\program files\Sony
2012-01-06 20:04 . 2012-01-06 20:04 -------- d-----w- c:\documents and settings\All Users\Data aplikací\Sony Corporation
2012-01-03 07:22 . 2012-01-03 07:22 103864 ----a-w- c:\program files\Mozilla Firefox\plugins\nppdf32.dll
2012-01-03 07:22 . 2012-01-03 07:22 103864 ----a-w- c:\program files\Internet Explorer\Plugins\nppdf32.dll
2011-12-25 19:21 . 2011-12-25 19:21 -------- d-----w- c:\documents and settings\All Users\Data aplikací\Nikon
2011-12-25 19:04 . 2011-12-25 19:04 -------- d-----w- c:\documents and settings\Leonik\Data aplikací\Apple Computer
2011-12-25 13:42 . 2011-12-25 13:42 -------- d-----w- c:\documents and settings\Leonik\Local Settings\Data aplikací\ArcSoft
2011-12-25 13:42 . 2011-12-29 16:03 -------- d-----w- c:\documents and settings\All Users\Data aplikací\ArcSoft
2011-12-25 13:41 . 2012-01-06 19:36 -------- d-----w- c:\program files\Common Files\ArcSoft
2011-12-25 13:40 . 2011-12-25 13:42 -------- d-----w- c:\documents and settings\Leonik\Data aplikací\ArcSoft
2011-12-25 13:38 . 2011-12-25 13:38 57344 ----a-r- c:\documents and settings\Leonik\Data aplikací\Microsoft\Installer\{87441A59-5E64-4096-A170-14EFE67200C3}\ARPPRODUCTICON.exe
2011-12-25 13:37 . 2011-12-25 13:38 -------- d-----w- c:\program files\Common Files\Nikon
2011-12-25 13:36 . 2011-12-25 13:36 -------- d-----w- c:\documents and settings\All Users\Data aplikací\Ultima_T15
2011-12-25 13:36 . 2011-12-25 13:36 -------- d-----w- c:\documents and settings\All Users\Data aplikací\EnterNHelp
2011-12-25 13:35 . 2012-01-06 19:40 -------- d-----w- c:\program files\Nikon
2011-12-25 13:33 . 2011-12-25 13:33 -------- d-----w- c:\documents and settings\Leonik\Local Settings\Data aplikací\Apple Computer
2011-12-25 13:33 . 2011-12-25 13:33 -------- d-----w- c:\documents and settings\All Users\Data aplikací\Apple
2011-12-25 13:33 . 2011-12-25 13:33 -------- d-----w- c:\program files\Common Files\Apple
.
.
.
(((((((((((((((((((((((((((((((((((((((( Find3M výpis ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2011-12-25 13:36 . 2003-03-19 03:05 106496 ----a-w- c:\windows\system32\ATL71.DLL
2011-11-25 21:57 . 2006-03-02 12:00 293376 ----a-w- c:\windows\system32\winsrv.dll
2011-11-23 14:40 . 2006-03-02 12:00 1859584 ----a-w- c:\windows\system32\win32k.sys
2011-11-20 06:12 . 2006-03-02 12:00 60416 ----a-w- c:\windows\system32\packager.exe
2011-11-15 07:17 . 2011-05-16 18:56 414368 ----a-w- c:\windows\system32\FlashPlayerCPLApp.cpl
2011-11-04 19:13 . 2006-03-02 12:00 916992 ----a-w- c:\windows\system32\wininet.dll
2011-11-04 19:13 . 2006-03-02 12:00 43520 ----a-w- c:\windows\system32\licmgr10.dll
2011-11-04 19:13 . 2006-03-02 12:00 1469440 ------w- c:\windows\system32\inetcpl.cpl
2011-11-04 11:23 . 2006-03-02 12:00 385024 ----a-w- c:\windows\system32\html.iec
2011-11-03 15:29 . 2006-03-02 12:00 386560 ----a-w- c:\windows\system32\qdvd.dll
2011-11-03 15:29 . 2006-03-02 12:00 1294848 ----a-w- c:\windows\system32\quartz.dll
2011-11-01 16:07 . 2006-03-02 12:00 1288192 ----a-w- c:\windows\system32\ole32.dll
2011-10-28 05:32 . 2006-03-02 12:00 33280 ----a-w- c:\windows\system32\csrsrv.dll
2011-10-26 10:49 . 2006-03-02 12:00 2150912 ----a-w- c:\windows\system32\ntoskrnl.exe
2011-10-26 10:49 . 2004-08-17 15:45 2029056 ----a-w- c:\windows\system32\ntkrnlpa.exe
2010-10-01 13:11 . 2011-02-14 19:09 462112 ----a-w- c:\program files\Common Files\ZugoInstaller.exe
2011-08-12 03:15 . 2011-08-16 18:31 126976 ----a-w- c:\program files\mozilla firefox\components\browsercomps.dll
.
.
(((((((((((((((((((((((((((((((((( Spouštěcí body v registru )))))))))))))))))))))))))))))))))))))))))))))
.
.
*Poznámka* prázdné záznamy a legitimní výchozí údaje nejsou zobrazeny.
REGEDIT4
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ADSMOverlayIcon1]
@="{A8D448F4-0431-45AC-9F5E-E1B434AB2249}"
[HKEY_CLASSES_ROOT\CLSID\{A8D448F4-0431-45AC-9F5E-E1B434AB2249}]
2007-06-01 15:08 143360 ----a-w- c:\program files\ASUS\ASUS Data Security Manager\OverlayIconShlExt1.dll
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"ASUS Live Update"="c:\program files\ASUS\ASUS Live Update\ALU.exe" [2007-11-30 51768]
"Power_Gear"="c:\program files\ASUS\Power4 Gear\BatteryLife.exe" [2006-07-26 90112]
"RemoteControl"="c:\program files\CyberLink\PowerDVD\PDVDServ.exe" [2006-11-23 56928]
"LanguageShortcut"="c:\program files\CyberLink\PowerDVD\Language\Language.exe" [2006-12-05 54832]
"RTHDCPL"="RTHDCPL.EXE" [2007-10-25 16855552]
"SkyTel"="SkyTel.EXE" [2007-10-11 1826816]
"ATKOSD2"="c:\program files\ATKOSD2\ATKOSD2.exe" [2007-10-17 7737344]
"SynTPEnh"="c:\program files\Synaptics\SynTP\SynTPEnh.exe" [2006-05-25 786521]
"ATKHOTKEY"="c:\program files\ATK Hotkey\Hcontrol.exe" [2007-11-28 229376]
"LogitechQuickCamRibbon"="c:\program files\Logitech\Logitech WebCam Software\LWS.exe" [2009-05-08 2780432]
"SunJavaUpdateSched"="c:\program files\Common Files\Java\Java Update\jusched.exe" [2011-06-09 254696]
"HotKeysCmds"="c:\windows\system32\hkcmd.exe" [2007-11-08 166424]
"PMBVolumeWatcher"="c:\program files\Sony\PMB\PMBVolumeWatcher.exe" [2010-11-26 648032]
"avgnt"="c:\program files\Avira\AntiVir Desktop\avgnt.exe" [2011-12-15 258512]
"Adobe Reader Speed Launcher"="c:\program files\Adobe\Reader 9.0\Reader\Reader_sl.exe" [2012-01-03 37296]
"Adobe ARM"="c:\program files\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2012-01-02 843712]
.
[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="c:\windows\system32\CTFMON.EXE" [2008-04-14 15360]
"DWQueuedReporting"="c:\progra~1\COMMON~1\MICROS~1\DW\dwtrig20.exe" [2008-11-04 435096]
.
c:\documents and settings\Leonik\Nabídka Start\Programy\Po spuštění\AutorunsDisabled
obsah aplikace onenote.onetoc2 [2011-1-15 3656]
Výřezy obrazovky a spuštění aplikace OneNote 2007.lnk - c:\program files\Microsoft Office\Office12\ONENOTEM.EXE [2009-2-26 97680]
.
c:\documents and settings\Leonik\Nabídka Start\Programy\Po spuštění\AutorunsDisabled
obsah aplikace onenote.onetoc2 [2011-1-15 3656]
Výřezy obrazovky a spuštění aplikace OneNote 2007.lnk - c:\program files\Microsoft Office\Office12\ONENOTEM.EXE [2009-2-26 97680]
.
c:\documents and settings\Leonik\Nabídka Start\Programy\Po spuštění\AutorunsDisabled
obsah aplikace onenote.onetoc2 [2011-1-15 3656]
Výřezy obrazovky a spuštění aplikace OneNote 2007.lnk - c:\program files\Microsoft Office\Office12\ONENOTEM.EXE [2009-2-26 97680]
.
c:\documents and settings\All Users\Nabídka Start\Programy\Po spuštění\AutorunsDisabled
Windows Search.lnk - c:\program files\Windows Desktop Search\WindowsSearch.exe [2008-5-26 123904]
.
c:\documents and settings\Leonik\Nabídka Start\Programy\Po spuštění\AutorunsDisabled
obsah aplikace onenote.onetoc2 [2011-1-15 3656]
Výřezy obrazovky a spuštění aplikace OneNote 2007.lnk - c:\program files\Microsoft Office\Office12\ONENOTEM.EXE [2009-2-26 97680]
.
[hkey_local_machine\software\microsoft\windows\currentversion\explorer\ShellExecuteHooks]
"{56F9679E-7826-4C84-81F3-532071A8BCC5}"= "c:\program files\Windows Desktop Search\MSNLNamespaceMgr.dll" [2009-05-24 304128]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run-]
"Adobe Reader Speed Launcher"="c:\program files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
.
[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring]
"DisableMonitoring"=dword:00000001
.
[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\SymantecAntiVirus]
"DisableMonitoring"=dword:00000001
.
[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\SymantecFirewall]
"DisableMonitoring"=dword:00000001
.
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile]
"EnableFirewall"= 0 (0x0)
.
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\system32\\sessmgr.exe"=
"%windir%\\Network Diagnostic\\xpnetdiag.exe"=
"c:\\Program Files\\Microsoft Office\\Office12\\GROOVE.EXE"=
"c:\\Program Files\\Microsoft Office\\Office12\\ONENOTE.EXE"=
"c:\\Program Files\\Microsoft Office\\Office12\\OUTLOOK.EXE"=
"c:\\Program Files\\Call Graph\\CallGraph.exe"=
"c:\\Program Files\\Mozilla Firefox\\firefox.exe"=
"c:\\Program Files\\Skype\\Phone\\Skype.exe"=
"c:\\Program Files\\Logitech\\Logitech Vid\\Vid.exe"=