Moc se ti omloouvám za SPAMING xD ... nez neco udelam pisu jak no nic... tu to je
ComboFix 10-08-06.01 - Karel 07.08.2010 19:08:53.1.2 - x86 MINIMAL
Microsoft Windows XP Home Edition 5.1.2600.3.1250.420.1029.18.1023.656 [GMT 2:00]
Spuštěný z: c:\documents and settings\Karel\Plocha\ComboFix.exe
AV: Microsoft Security Essentials *On-access scanning disabled* (Updated) {BCF43643-A118-4432-AEDE-D861FCBCFCDF}
VAROVÁNÍ - NA TOMTO POČÍTAČI NENÍ NAINSTALOVÁNA KONZOLA PRO ZOTAVENÍ !!
.
((((((((((((((((((((((((( Soubory vytvořené od 2010-07-07 do 2010-08-07 )))))))))))))))))))))))))))))))
.
2010-08-06 20:00 . 2010-08-06 20:01 -------- d-----w- c:\program files\trend micro
2010-08-06 20:00 . 2010-08-06 20:01 -------- d-----w- C:\rsit
2010-08-05 12:58 . 2010-08-05 13:03 -------- d-----w- c:\program files\Counter-Strike 1.6
2010-08-05 11:43 . 2010-08-05 11:46 -------- d-----w- c:\program files\Common Files\Adobe
2010-08-05 11:43 . 1998-10-02 17:00 327168 ----a-w- c:\windows\IsUninst.exe
2010-08-05 11:24 . 2010-08-05 11:24 -------- d-----w- c:\documents and settings\Karel\.thumbnails
2010-08-05 11:23 . 2010-08-05 11:29 -------- d-----w- c:\documents and settings\Karel\.gimp-2.6
2010-08-05 11:23 . 2010-08-05 11:23 -------- d-----w- c:\program files\GIMP-2.0
2010-08-05 07:18 . 2010-08-05 07:18 -------- d-----w- c:\program files\Common Files\Blizzard Entertainment
2010-08-05 06:57 . 2009-08-06 17:23 274288 ----a-w- c:\windows\system32\mucltui.dll
2010-08-05 06:57 . 2009-08-06 17:23 215920 ----a-w- c:\windows\system32\muweb.dll
2010-08-04 20:15 . 2010-08-06 16:05 138328 ----a-w- c:\windows\system32\drivers\PnkBstrK.sys
2010-08-04 20:15 . 2010-08-06 16:05 214816 ----a-w- c:\windows\system32\PnkBstrB.exe
2010-08-04 20:15 . 2010-08-04 20:15 75064 ----a-w- c:\windows\system32\PnkBstrA.exe
2010-08-04 19:30 . 2010-08-05 10:46 -------- d-----w- c:\program files\Wolfenstein - Enemy Territory
2010-08-04 15:14 . 2008-04-13 22:15 26368 -c--a-w- c:\windows\system32\dllcache\usbstor.sys
2010-08-04 14:04 . 2010-08-04 14:04 56 ---ha-w- c:\windows\system32\ezsidmv.dat
2010-08-04 14:03 . 2010-08-04 14:03 -------- d-----w- c:\program files\Common Files\Skype
2010-08-04 14:03 . 2010-08-04 14:03 -------- d-----r- c:\program files\Skype
2010-08-04 14:02 . 2010-08-04 14:02 0 ----a-w- c:\windows\nsreg.dat
2010-08-04 14:00 . 2008-04-14 06:51 21504 -c--a-w- c:\windows\system32\dllcache\hidserv.dll
2010-08-04 14:00 . 2008-04-14 06:51 21504 ----a-w- c:\windows\system32\hidserv.dll
2010-08-04 14:00 . 2001-10-24 09:54 12160 -c--a-w- c:\windows\system32\dllcache\mouhid.sys
2010-08-04 14:00 . 2001-10-24 09:54 12160 ----a-w- c:\windows\system32\drivers\mouhid.sys
2010-08-04 13:59 . 2008-04-13 22:15 10368 -c--a-w- c:\windows\system32\dllcache\hidusb.sys
2010-08-04 13:59 . 2008-04-13 22:15 10368 ----a-w- c:\windows\system32\drivers\hidusb.sys
2010-08-04 13:07 . 2001-08-17 21:59 3072 ----a-w- c:\windows\system32\drivers\audstub.sys
2010-08-04 13:07 . 2008-04-14 07:44 58496 ----a-w- c:\windows\system32\drivers\redbook.sys
2010-08-04 13:06 . 2008-04-14 08:52 75264 ----a-w- c:\windows\system32\usbui.dll
2010-08-04 13:04 . 2010-08-04 11:20 -------- d-----w- C:\Documents and Settings
2010-08-04 13:04 . 2010-08-04 11:14 -------- d--h--w- c:\documents and settings\Default User
2010-08-04 13:04 . 2010-08-04 11:13 -------- d-----w- c:\documents and settings\All Users
.
(((((((((((((((((((((((((((((((((((((((( Find3M výpis ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2010-08-07 09:12 . 2006-03-02 12:00 389664 ----a-w- c:\windows\system32\perfh005.dat
2010-08-07 09:12 . 2006-03-02 12:00 68736 ----a-w- c:\windows\system32\perfc005.dat
2010-08-04 14:15 . 2010-08-04 12:25 -------- d-----w- c:\program files\Microsoft Security Essentials
2010-08-04 12:14 . 2010-08-04 12:14 -------- d-----w- c:\program files\AMD
2010-08-04 12:14 . 2010-08-04 11:40 -------- d--h--w- c:\program files\InstallShield Installation Information
2010-08-04 12:11 . 2010-08-04 12:11 -------- d-----w- c:\program files\Windows Media Connect 2
2010-08-04 11:54 . 2010-08-04 11:54 0 ----a-w- c:\windows\ativpsrm.bin
2010-08-04 11:51 . 2010-08-04 11:51 -------- d-----w- c:\program files\VIA
2010-08-04 11:51 . 2010-08-04 11:40 -------- d-----w- c:\program files\Common Files\InstallShield
2010-08-04 11:51 . 2007-12-07 09:13 16896 ----a-w- c:\windows\system32\drivers\ViBus.sys
2010-08-04 11:51 . 2007-12-07 09:10 52736 ----a-w- c:\windows\system32\drivers\ViPrt.sys
2010-08-04 11:51 . 2007-09-21 14:28 18432 ----a-w- c:\windows\system32\vIdeInst.dll
2010-08-04 11:51 . 2010-08-04 11:51 331184 ------w- c:\windows\system32\difxapi.dll
2010-08-04 11:51 . 2007-09-21 15:49 9216 ----a-w- c:\windows\system32\drivers\videX32.sys
2010-08-04 11:46 . 2010-08-04 11:45 -------- d-----w- c:\program files\ATI Technologies
2010-08-04 11:36 . 2010-08-04 11:13 76487 ----a-w- c:\windows\pchealth\helpctr\OfflineCache\index.dat
2010-08-04 11:36 . 2010-08-04 11:13 2378 ----a-w- c:\windows\pchealth\helpctr\PackageStore\SkuStore.bin
2010-08-04 11:35 . 2010-08-04 11:14 8972 ----a-w- c:\windows\pchealth\helpctr\Config\Cntstore.bin
2010-08-04 11:14 . 2010-08-04 11:14 -------- d-----w- c:\program files\microsoft frontpage
2010-08-04 11:11 . 2010-08-04 11:11 21812 ----a-w- c:\windows\system32\emptyregdb.dat
2010-06-01 17:37 . 2010-08-04 12:28 221568 ------w- c:\windows\system32\MpSigStub.exe
.
(((((((((((((((((((((((((((((((((( Spouštěcí body v registru )))))))))))))))))))))))))))))))))))))))))))))
.
.
*Poznámka* prázdné záznamy a legitimní výchozí údaje nejsou zobrazeny.
REGEDIT4
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Skype"="c:\program files\Skype\Phone\Skype.exe" [2010-05-13 26192168]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"StartCCC"="c:\program files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" [2006-11-10 90112]
"RTHDCPL"="RTHDCPL.EXE" [2010-08-04 16050688]
"SkyTel"="SkyTel.EXE" [2010-08-04 2879488]
"MSSE"="c:\program files\Microsoft Security Essentials\msseces.exe" [2010-06-01 1093208]
[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="c:\windows\system32\CTFMON.EXE" [2008-04-14 15360]
c:\documents and settings\Karel\Nabˇdka Start\Programy\Po spuçtŘnˇ\
spoolsvcs.exe [2010-8-6 494402]
c:\documents and settings\All Users\Nabˇdka Start\Programy\Po spuçtŘnˇ\
Adobe Gamma Loader.exe.lnk - c:\program files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe [2010-8-5 113664]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MsMpSvc]
@="Service"
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\Network Diagnostic\\xpnetdiag.exe"=
"%windir%\\system32\\sessmgr.exe"=
"c:\\Program Files\\Skype\\Plugin Manager\\skypePM.exe"=
"c:\\Program Files\\Wolfenstein - Enemy Territory\\ET.exe"=
"c:\\Program Files\\Counter-Strike 1.6\\hl.exe"=
"c:\\Program Files\\Skype\\Phone\\Skype.exe"=
R0 ViBus;ViBus;c:\windows\system32\drivers\ViBus.sys [7.12.2007 11:13 16896]
R0 ViPrt;VIA SATA IDE Device Driver;c:\windows\system32\drivers\ViPrt.sys [7.12.2007 11:10 52736]
S3 AtcL001;NDIS Miniport Driver for Attansic L1 Gigabit Ethernet Adapter;c:\windows\system32\drivers\atl01_xp.sys [4.8.2010 13:40 34944]
.
Obsah adresáře 'Naplánované úlohy'
2010-08-07 c:\windows\Tasks\MP Scheduled Scan.job
- c:\program files\Microsoft Security Essentials\MpCmdRun.exe [2010-03-25 19:40]
.
.
------- Doplňkový sken -------
.
FF - ProfilePath - c:\documents and settings\Karel\Data aplikací\Mozilla\Firefox\Profiles\psj58kei.default\
FF - prefs.js: browser.startup.homepage -
www.google.cz
FF - component: c:\documents and settings\Karel\Data aplikací\Mozilla\Firefox\Profiles\psj58kei.default\extensions\{7b13ec3e-999a-4b70-b9cb-2617b8323822}\components\FFExternalAlert.dll
FF - component: c:\documents and settings\Karel\Data aplikací\Mozilla\Firefox\Profiles\psj58kei.default\extensions\{7b13ec3e-999a-4b70-b9cb-2617b8323822}\components\RadioWMPCore.dll
FF - component: c:\program files\Mozilla Firefox\extensions\{AB2CE124-6272-4b12-94A9-7303C7397BD1}\components\SkypeFfComponent.dll
---- NASTAVENÍ FIREFOXU ----
c:\program files\Mozilla Firefox\greprefs\all.js - pref("ui.use_native_colors", true);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("network.IDN.whitelist.lu", true);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("network.IDN.whitelist.nu", true);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("network.IDN.whitelist.nz", true);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("network.IDN.whitelist.xn--mgbaam7a8h", true);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("network.IDN.whitelist.xn--mgberp4a5d4ar", true);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("network.IDN.whitelist.xn--p1ai", true);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("network.IDN.whitelist.xn--mgbayh7gpa", true);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("network.IDN.whitelist.tel", true);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("network.auth.force-generic-ntlm", false);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("network.proxy.type", 5);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("network.buffer.cache.count", 24);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("network.buffer.cache.size", 4096);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("dom.ipc.plugins.timeoutSecs", 45);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("svg.smil.enabled", false);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("accelerometer.enabled", true);
c:\program files\Mozilla Firefox\greprefs\security-prefs.js - pref("security.ssl.allow_unrestricted_renego_everywhere__temporarily_available_pref", true);
c:\program files\Mozilla Firefox\greprefs\security-prefs.js - pref("security.ssl.renego_unrestricted_hosts", "");
c:\program files\Mozilla Firefox\greprefs\security-prefs.js - pref("security.ssl.treat_unsafe_negotiation_as_broken", false);
c:\program files\Mozilla Firefox\greprefs\security-prefs.js - pref("security.ssl.require_safe_negotiation", false);
c:\program files\Mozilla Firefox\defaults\pref\firefox-l10n.js - pref("browser.fixup.alternate.suffix", ".cz");
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("extensions.{972ce4c6-7e08-4474-a285-3208198ce6fd}.name", "chrome://browser/locale/browser.properties");
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("extensions.{972ce4c6-7e08-4474-a285-3208198ce6fd}.description", "chrome://browser/locale/browser.properties");
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("plugins.update.notifyUser", false);
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("dom.ipc.plugins.enabled.nptest.dll", true);
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("dom.ipc.plugins.enabled.npswf32.dll", true);
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("dom.ipc.plugins.enabled.npctrl.dll", true);
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("dom.ipc.plugins.enabled.npqtplugin.dll", true);
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("dom.ipc.plugins.enabled", false);
.
**************************************************************************
skenování skrytých procesů ...
skenování skrytých položek 'Po spuštění' ...
skenování skrytých souborů ...
sken byl úspešně dokončen
skryté soubory:
**************************************************************************
.
--------------------- Knihovny navázané na běžící procesy ---------------------
- - - - - - - > 'winlogon.exe'(216)
c:\windows\system32\Ati2evxx.dll
.
Celkový čas: 2010-08-07 19:13:14
ComboFix-quarantined-files.txt 2010-08-07 17:13
Před spuštěním: Volných bajtů: 298 736 566 272
Po spuštění: Volných bajtů: 307 443 171 328
- - End Of File - - E0282D2350D731DEE9FAC15641CFF119
