ComboFix 10-01-26.02 - Tom 27.01.2010 10:25:37.1.2 - x86
Systém Microsoft Windows XP Professional 5.1.2600.3.1250.420.1029.18.3070.2616 [GMT 1:00]
Spuštěný z: c:\documents and settings\Tom\Plocha\ComboFix.exe
AV: avast! antivirus 4.8.1368 [VPS 100126-1] *On-access scanning disabled* (Updated) {7591DB91-41F0-48A3-B128-1A293FD8233D}
VAROVÁNÍ - NA TOMTO POČÍTAČI NENÍ NAINSTALOVÁNA KONZOLA PRO ZOTAVENÍ !!
.
((((((((((((((((((((((((((((((((((((((( Ostatní výmazy )))))))))))))))))))))))))))))))))))))))))))))))))
.
c:\program files\ICQ6.5\ICQLRun.exe
.
((((((((((((((((((((((((( Soubory vytvořené od 2009-12-27 do 2010-01-27 )))))))))))))))))))))))))))))))
.
2010-01-26 19:19 . 2010-01-26 19:20 -------- d-----w- C:\Avatar
2010-01-25 21:55 . 2010-01-07 15:07 38224 ----a-w- c:\windows\system32\drivers\mbamswissarmy.sys
2010-01-25 21:55 . 2010-01-25 21:55 -------- d-----w- c:\program files\Malwarebytes' Anti-Malware
2010-01-25 21:55 . 2010-01-07 15:07 19160 ----a-w- c:\windows\system32\drivers\mbam.sys
2010-01-25 21:04 . 2010-01-25 21:04 -------- d-----w- C:\_OTM
2010-01-25 17:07 . 2010-01-25 17:09 -------- d-----w- C:\rsit
2010-01-25 17:07 . 2010-01-25 17:09 -------- d-----w- c:\program files\trend micro
2010-01-24 08:11 . 2010-01-24 08:11 -------- d-----w- c:\program files\Common Files\Adobe AIR
2010-01-21 15:40 . 2010-01-21 15:40 -------- d-----w- c:\program files\CCleaner
2010-01-15 21:30 . 2009-11-21 02:34 69632 ----a-w- c:\windows\system32\OpenCL.dll
2010-01-15 21:30 . 2009-11-21 02:34 11374592 ----a-w- c:\windows\system32\nvcompiler.dll
2010-01-14 13:51 . 2009-11-21 16:03 471552 -c----w- c:\windows\system32\dllcache\aclayers.dll
2010-01-12 16:34 . 2010-01-12 16:34 -------- d-----w- c:\program files\DirectX
2010-01-10 12:19 . 2010-01-10 12:19 -------- d-----w- c:\program files\Atari
2010-01-10 09:25 . 2010-01-10 09:25 -------- d-----w- c:\program files\ICQ6Toolbar
2010-01-10 09:23 . 2010-01-27 09:29 -------- d-----w- c:\program files\ICQ6.5
2010-01-09 10:40 . 2008-03-18 16:02 22833304 ----a-w- c:\windows\system32\AppSetup.exe
2010-01-03 22:09 . 2010-01-03 22:09 -------- d-sh--w- c:\documents and settings\Tom\IECompatCache
2010-01-03 17:46 . 2010-01-03 17:46 -------- d-----w- c:\program files\Ubisoft
2010-01-03 11:25 . 2010-01-05 20:13 -------- d-----w- c:\program files\SystemRequirementsLab
2010-01-03 11:25 . 2010-01-05 20:13 -------- d-----w- c:\documents and settings\Tom\SystemRequirementsLab
2010-01-03 11:25 . 2010-01-03 11:25 -------- d-----w- c:\windows\Sun
2010-01-02 22:35 . 2010-01-03 11:33 -------- d-----w- C:\NVIDIA
2010-01-02 17:07 . 2007-12-17 09:14 12400 ----a-r- c:\windows\system32\drivers\AsIO.sys
2010-01-02 17:07 . 2006-01-10 08:50 24576 ----a-r- c:\windows\system32\AsIO.dll
2010-01-02 17:07 . 2010-01-02 17:07 -------- d-----w- c:\program files\ASUS
2010-01-02 17:07 . 2008-01-04 12:34 11832 ----a-w- c:\windows\system32\drivers\AsInsHelp64.sys
2010-01-02 17:07 . 2008-01-04 12:34 10216 ----a-w- c:\windows\system32\drivers\AsInsHelp32.sys
2010-01-02 13:30 . 2010-01-02 13:31 -------- d-----w- c:\program files\Servant Salamander 2.0
2010-01-02 13:27 . 2005-09-01 10:03 5888 ------w- c:\windows\system32\drivers\imagedrv.sys
2010-01-02 13:27 . 2005-09-01 10:03 127488 ------w- c:\windows\system32\drivers\imagesrv.sys
2010-01-02 13:27 . 2004-07-09 07:43 364544 ------w- c:\windows\system32\TwnLib4.dll
2010-01-02 13:27 . 2000-06-26 09:45 106496 ----a-w- c:\windows\system32\TwnLib20.dll
2010-01-02 13:27 . 2004-07-26 15:16 476320 ------w- c:\windows\system32\ImagXpr7.dll
2010-01-02 13:27 . 2004-07-26 15:16 471040 ------w- c:\windows\system32\ImagXRA7.dll
2010-01-02 13:27 . 2004-07-26 15:16 262144 ------w- c:\windows\system32\ImagXR7.dll
2010-01-02 13:27 . 2004-07-26 15:16 1568768 ------w- c:\windows\system32\ImagX7.dll
2010-01-02 13:27 . 2010-01-02 13:27 -------- d-----w- c:\program files\Common Files\Ahead
2010-01-02 13:27 . 2001-07-09 09:50 155648 ----a-w- c:\windows\system32\NeroCheck.exe
2010-01-02 13:27 . 2010-01-02 13:27 -------- d-----w- c:\program files\Ahead
2010-01-02 13:22 . 2010-01-21 19:17 -------- d-----w- c:\program files\Yahoo!
2010-01-01 00:35 . 2010-01-01 00:35 -------- d-----w- c:\program files\BitTorrent
2009-12-30 14:26 . 2009-12-30 14:26 -------- d-----w- C:\ProgramData
2009-12-30 14:26 . 2009-12-30 14:26 1196 ----a-w- c:\windows\system32\ealregsnapshot1.reg
2009-12-30 14:14 . 2010-01-25 17:45 -------- d-----w- c:\program files\Electronic Arts
2009-12-30 14:05 . 2008-04-13 23:15 26368 -c--a-w- c:\windows\system32\dllcache\usbstor.sys
2009-12-30 13:10 . 2009-12-30 13:10 98304 ----a-w- c:\windows\system32\qttask.exe
2009-12-30 09:14 . 2009-12-30 09:19 -------- d-----w- c:\program files\Serious Sam HD-First Encounter
2009-12-30 09:13 . 2009-12-30 09:13 -------- d-----w- c:\program files\Phx_data
2009-12-30 09:13 . 2009-11-22 11:27 6801763 ----a-w- c:\program files\Phoenix.exe
2009-12-30 00:12 . 2009-12-30 00:12 411368 ----a-w- c:\windows\system32\deploytk.dll
2009-12-30 00:12 . 2009-12-30 00:12 -------- d-----w- c:\program files\Java
2009-12-30 00:11 . 2009-12-30 08:53 -------- d-----w- c:\program files\FreeRapid-0.83
2009-12-29 18:57 . 2009-12-29 18:57 -------- d-----w- c:\program files\Namco
2009-12-29 00:03 . 2009-12-29 00:03 -------- d-----w- c:\program files\JRE
2009-12-28 23:51 . 2010-01-23 09:48 -------- d-----w- c:\program files\Ferrari Virtual Race
2009-12-28 22:05 . 2009-12-28 22:05 107888 ----a-w- c:\windows\system32\CmdLineExt.dll
2009-12-28 22:04 . 2009-12-28 22:04 -------- d-----w- c:\windows\system32\LogFiles
2009-12-28 22:03 . 2009-12-28 22:04 -------- d-----w- c:\windows\system32\drivers\umdf
2009-12-28 21:30 . 2010-01-24 13:08 -------- d-----w- c:\program files\Rockstar Games
2009-12-28 17:14 . 2009-12-28 17:14 0 ----a-w- c:\windows\nsreg.dat
2009-12-28 17:04 . 2009-12-28 17:04 -------- d-----w- c:\windows\system32\wbem\Repository
2009-12-28 13:04 . 2009-12-28 17:03 -------- d-----w- c:\program files\Codec Pack - All In 1
.
(((((((((((((((((((((((((((((((((((((((( Find3M výpis ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2010-01-25 21:59 . 2009-12-27 18:52 -------- d-----w- c:\program files\SpeedFan
2010-01-24 21:37 . 2009-12-27 14:56 -------- d-----w- c:\program files\NVIDIA Corporation
2010-01-24 13:09 . 2009-12-27 14:55 -------- d--h--w- c:\program files\InstallShield Installation Information
2010-01-10 03:52 . 2001-10-25 14:00 93340 ----a-w- c:\windows\system32\perfc005.dat
2010-01-10 03:52 . 2001-10-25 14:00 458274 ----a-w- c:\windows\system32\perfh005.dat
2010-01-03 18:52 . 2009-12-27 17:07 -------- d-----w- c:\program files\DAEMON Tools Lite
2010-01-03 11:36 . 2009-12-27 15:42 -------- d-----w- c:\program files\Common Files\Wise Installation Wizard
2010-01-03 11:36 . 2009-12-27 15:42 -------- d-----w- c:\program files\AGEIA Technologies
2010-01-02 17:06 . 2009-12-27 15:03 -------- d-----w- c:\program files\Common Files\InstallShield
2010-01-02 13:32 . 2009-12-27 19:54 -------- d-----w- c:\program files\SCi Games
2009-12-30 13:09 . 2009-12-30 13:09 -------- d-----w- c:\program files\ACE Mega CoDecS Pack
2009-12-30 09:16 . 2009-12-30 09:13 24871 ----a-w- c:\program files\Phx_debug_log.txt
2009-12-30 09:16 . 2009-12-30 09:13 367 ----a-w- c:\program files\Phx_settings.ini
2009-12-28 18:48 . 2009-12-27 17:11 -------- d-----w- c:\program files\Codemasters
2009-12-27 20:13 . 2009-12-27 20:13 -------- d-----w- c:\program files\Logitech
2009-12-27 20:13 . 2009-12-27 20:13 -------- d-----w- c:\program files\Common Files\Logitech
2009-12-27 20:04 . 2009-12-27 20:04 -------- d-----w- c:\program files\Common Files\DirectX
2009-12-27 20:03 . 2009-12-27 20:03 -------- d-----w- c:\program files\nHancer
2009-12-27 17:25 . 2009-12-27 17:25 -------- d-----w- c:\program files\BRS
2009-12-27 17:24 . 2009-12-27 17:24 -------- d-----w- c:\program files\MSBuild
2009-12-27 17:24 . 2009-12-27 17:24 -------- d-----w- c:\program files\Reference Assemblies
2009-12-27 17:22 . 2009-12-27 17:22 -------- d-----w- c:\program files\Microsoft Games for Windows - LIVE
2009-12-27 17:21 . 2009-12-27 17:21 -------- d-----w- c:\program files\OpenAL
2009-12-27 17:21 . 2009-12-27 15:20 445016 ----a-w- c:\windows\system32\wrap_oal.dll
2009-12-27 17:21 . 2009-12-27 15:20 109144 ----a-w- c:\windows\system32\OpenAL32.dll
2009-12-27 17:07 . 2009-12-27 17:07 691696 ----a-w- c:\windows\system32\drivers\sptd.sys
2009-12-27 16:33 . 2009-12-27 11:39 86327 ----a-w- c:\windows\pchealth\helpctr\OfflineCache\index.dat
2009-12-27 16:33 . 2009-12-27 11:39 2740 ----a-w- c:\windows\pchealth\helpctr\PackageStore\SkuStore.bin
2009-12-27 16:20 . 2009-12-27 16:20 664 ----a-w- c:\windows\system32\d3d9caps.dat
2009-11-21 16:03 . 2004-08-17 13:49 471552 ----a-w- c:\windows\AppPatch\aclayers.dll
2009-11-21 02:34 . 2009-12-27 15:42 592488 ----a-w- c:\windows\system32\nvudisp.exe
2009-11-21 02:34 . 2009-09-27 15:12 4038656 ----a-w- c:\windows\system32\nvcuda.dll
2009-11-21 02:34 . 2009-09-27 15:12 2293286 ----a-w- c:\windows\system32\nvdata.bin
2009-11-21 02:34 . 2009-09-27 15:12 2259560 ----a-w- c:\windows\system32\nvcuvid.dll
2009-11-21 02:34 . 2009-09-27 15:12 1989224 ----a-w- c:\windows\system32\nvcuvenc.dll
2009-11-21 02:34 . 2009-09-27 15:12 182888 ----a-w- c:\windows\system32\nvcodins.dll
2009-11-21 02:34 . 2009-09-27 15:12 182888 ----a-w- c:\windows\system32\nvcod.dll
2009-11-21 02:34 . 2009-09-27 15:12 13602816 ----a-w- c:\windows\system32\nvoglnt.dll
2009-11-21 02:34 . 2009-09-27 15:12 1056768 ----a-w- c:\windows\system32\nvapi.dll
2009-11-21 02:34 . 2009-04-30 21:02 6282752 ----a-w- c:\windows\system32\nv4_disp.dll
2009-11-21 02:34 . 2009-04-30 21:02 10235968 ----a-w- c:\windows\system32\drivers\nv4_mini.sys
2009-11-20 19:32 . 2009-11-20 19:32 278120 ----a-w- c:\windows\system32\nvmccs.dll
2009-11-20 19:32 . 2009-11-20 19:32 154216 ----a-w- c:\windows\system32\nvsvc32.exe
2009-11-20 19:32 . 2009-11-20 19:32 145000 ----a-w- c:\windows\system32\nvcolor.exe
2009-11-20 19:32 . 2009-11-20 19:32 12669544 ----a-w- c:\windows\system32\nvcpl.dll
2009-11-20 19:32 . 2009-11-20 19:32 110184 ----a-w- c:\windows\system32\nvmctray.dll
2009-11-20 19:32 . 2009-11-20 19:32 81920 ----a-w- c:\windows\system32\nvwddi.dll
2009-11-19 20:42 . 2009-12-27 14:56 592488 ----a-w- c:\windows\system32\NVUNINST.EXE
2009-11-06 09:59 . 2009-11-06 09:59 15406728 ----a-w- c:\windows\system32\xlive.dll
2009-11-06 09:59 . 2009-11-06 09:59 13642888 ----a-w- c:\windows\system32\xlivefnt.dll
2009-11-02 17:05 . 2009-11-02 17:05 167064 ----a-w- c:\windows\system32\xliveinstall.dll
2009-11-02 17:05 . 2009-11-02 17:05 71832 ----a-w- c:\windows\system32\xliveinstallhost.exe
.
(((((((((((((((((((((((((((((((((( Spouštěcí body v registru )))))))))))))))))))))))))))))))))))))))))))))
.
.
*Poznámka* prázdné záznamy a legitimní výchozí údaje nejsou zobrazeny.
REGEDIT4
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"CTRegRun"="c:\windows\CTRegRun.EXE" [2006-10-06 53248]
"MSMSGS"="c:\program files\Messenger\msmsgs.exe" [2008-04-14 1695232]
"DAEMON Tools Lite"="c:\program files\DAEMON Tools Lite\DTLite.exe" [2009-10-30 369200]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"SoundMAXPnP"="c:\program files\Analog Devices\Core\smax4pnp.exe" [2007-10-09 1036288]
"VolPanel"="c:\program files\Creative\Sound Blaster X-Fi\Volume Panel\VolPanlu.exe" [2007-02-28 180224]
"avast!"="c:\progra~1\ALWILS~1\Avast4\ashDisp.exe" [2009-11-24 81000]
"Start WingMan Profiler"="c:\program files\Logitech\Gaming Software\LWEMon.exe" [2009-09-16 153608]
"SunJavaUpdateSched"="c:\program files\Java\jre6\bin\jusched.exe" [2009-12-30 149280]
"QuickTime Task"="c:\windows\system32\qttask.exe" [2009-12-30 98304]
"NeroFilterCheck"="c:\windows\system32\NeroCheck.exe" [2001-07-09 155648]
"Ai Nap"="c:\program files\ASUS\AI Suite\AiNap\AiNap.exe" [2008-09-19 1423360]
"QFan Help"="c:\program files\ASUS\AI Suite\QFan3\QFanHelp.exe" [2008-05-06 594432]
"Cpu Level Up help"="c:\program files\ASUS\AI Suite\CpuLevelUpHelp.exe" [2007-11-30 881152]
"NvCplDaemon"="c:\windows\system32\NvCpl.dll" [2009-11-20 12669544]
"NvMediaCenter"="c:\windows\system32\NvMcTray.dll" [2009-11-20 110184]
[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="c:\windows\system32\CTFMON.EXE" [2008-04-14 15360]
c:\documents and settings\Tom\Nabˇdka Start\Programy\Po spuçtŘnˇ\
Registration .LNK - c:\program files\Ubisoft\Tom Clancy's Splinter Cell Double Agent\support\Register\Reg.exe [2010-1-3 868352]
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\system32\\sessmgr.exe"=
"%windir%\\Network Diagnostic\\xpnetdiag.exe"=
"c:\\Program Files\\Codemasters\\DiRT2\\dirt2_game.exe"=
"c:\\Program Files\\Codemasters\\Race Driver 3\\RD3.exe"=
"c:\\Program Files\\Java\\jre6\\launch4j-tmp\\frd.exe"=
"c:\\Program Files\\Electronic Arts\\Burnout(TM) Paradise The Ultimate Box\\BurnoutLauncher.exe"=
"c:\\Program Files\\Electronic Arts\\Burnout(TM) Paradise The Ultimate Box\\BurnoutConfigTool.exe"=
"c:\\Program Files\\Electronic Arts\\Burnout(TM) Paradise The Ultimate Box\\BurnoutParadise.exe"=
"c:\\Program Files\\BitTorrent\\bittorrent.exe"=
"c:\\Program Files\\Ubisoft\\Tom Clancy's Splinter Cell Double Agent\\SCDA-Offline\\System\\SplinterCell4.exe"=
"c:\\Program Files\\ICQ6.5\\ICQ.exe"=
"d:\\ZalohaC\\Program Files\\Atari\\Test Drive Unlimited\\TestDriveUnlimited.exe"=
"d:\\ZalohaC\\Program Files\\Counter-Strike Source\\hl2.exe"=
"c:\\Program Files\\Rockstar Games\\Grand Theft Auto IV\\GTAIV.exe"=
"c:\\Program Files\\Rockstar Games\\Rockstar Games Social Club\\RGSCLauncher.exe"=
R1 aswSP;avast! Self Protection;c:\windows\system32\drivers\aswSP.sys [27.12.2009 16:39 114768]
R2 aswFsBlk;aswFsBlk;c:\windows\system32\drivers\aswFsBlk.sys [27.12.2009 16:39 20560]
R3 NVHDA;Service for NVIDIA High Definition Audio Driver;c:\windows\system32\drivers\nvhda32.sys [27.12.2009 16:08 39456]
S0 sptd;sptd;c:\windows\system32\drivers\sptd.sys [27.12.2009 18:07 691696]
.
Obsah adresáře 'Naplánované úlohy'
.
.
------- Doplňkový sken -------
.
uStart Page =
LSP: %SYSTEMROOT%\system32\nvLsp.dll
FF - ProfilePath - c:\documents and settings\Tom\Data aplikací\Mozilla\Firefox\Profiles\salr4ar1.default\
FF - prefs.js: browser.startup.homepage - hxxp://
www.ask.com/?o=101764&l=dis
FF - plugin: c:\program files\Mozilla Firefox\plugins\npbittorrent.dll
FF - HiddenExtension: Microsoft .NET Framework Assistant: {20a82645-c095-46ed-80e3-08825760534b} - c:\windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\
.
- - - - NEPLATNÉ POLOŽKY ODSTRANĚNÉ Z REGISTRU - - - -
WebBrowser-{3041D03E-FD4B-44E0-B742-2D9B88305F98} - (no file)
AddRemove-Ask Toolbar_is1 - c:\program files\AskBarDis\unins000.exe
**************************************************************************
catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer,
http://www.gmer.net
Rootkit scan 2010-01-27 10:29
Windows 5.1.2600 Service Pack 3 NTFS
skenování skrytých procesů ...
skenování skrytých položek 'Po spuštění' ...
skenování skrytých souborů ...
sken byl úspešně dokončen
skryté soubory: 0
**************************************************************************
.
--------------------- ZAMKNUTÉ KLÍČE V REGISTRU ---------------------
[HKEY_USERS\S-1-5-21-583907252-746137067-725345543-1003\Software\SecuROM\!CAUTION! NEVER A OR CHANGE ANY KEY*]
"??"=hex:51,25,4b,65,16,08,ef,f3,6b,78,2c,d1,77,1f,4a,04,d7,05,84,75,92,42,d6,
89,f7,ba,10,39,10,e6,38,62,59,40,09,50,37,5a,24,e3,2a,fe,46,04,3d,04,91,d2,\
"??"=hex:27,ff,ed,f1,e8,ad,4f,c5,bf,6e,7a,3c,b6,b6,61,89
[HKEY_USERS\S-1-5-21-583907252-746137067-725345543-1003\Software\SecuROM\License information*]
"datasecu"=hex:e1,f3,40,4f,46,7d,c7,60,fd,80,b4,79,02,51,75,0d,a9,58,8f,2f,ed,
bf,3e,59,3c,c2,29,01,fa,cb,51,68,10,57,44,1f,04,55,72,56,51,7c,38,5b,40,bc,\
"rkeysecu"=hex:7c,34,31,00,af,fe,e9,d5,7d,ee,50,37,ce,d6,41,a9
.
--------------------- Knihovny navázané na běžící procesy ---------------------
- - - - - - - > 'lsass.exe'(928)
c:\windows\system32\nvLsp.dll
.
Celkový čas: 2010-01-27 10:30:25
ComboFix-quarantined-files.txt 2010-01-27 09:30
Před spuštěním: Volných bajtů: 241 999 335 424
Po spuštění: Volných bajtů: 241 958 649 856
- - End Of File - - 99CBF5DB6E3AB4A762EFEB6F9EF85E59
Log z mbamu by nebyl? 
