ComboFix 11-11-26.04 - miau131313 27.11.2011 14:26:11.7.2 - x86
Systém Microsoft Windows XP Professional 5.1.2600.3.1250.421.1029.18.1917.1253 [GMT 1:00]
Running from: c:\documents and settings\miau131313\Plocha\ComboFix.exe
Command switches used :: c:\documents and settings\miau131313\Plocha\CFScript.txt
AV: avast! Antivirus *Disabled/Updated* {7591DB91-41F0-48A3-B128-1A293FD8233D}
AV: Lavasoft Ad-Watch Live! Anti-Virus *Disabled/Updated* {A1C4F2E0-7FDE-4917-AFAE-013EFC3EDE33}
FW: avast! Antivirus *Enabled* {7591DB91-41F0-48A3-B128-1A293FD8233D}
SP: Lavasoft Ad-Watch Live! *Disabled/Updated* {67844DAE-4F77-4D69-9457-98E8CFFDAA22}
.
.
((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
c:\windows\CSC\d6
c:\windows\iun6002.exe
.
Infected copy of c:\windows\system32\drivers\tcpip.sys was found and disinfected
Restored copy from - c:\windows\$hf_mig$\KB2509553\SP3QFE\tcpip.sys
.
.
((((((((((((((((((((((((((((((((((((((( Drivers/Services )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
-------\Legacy_SSPORT
-------\Service_SSPORT
.
.
((((((((((((((((((((((((( Files Created from 2011-10-27 to 2011-11-27 )))))))))))))))))))))))))))))))
.
.
2011-11-25 16:05 . 2011-11-25 16:05 111872 ----a-w- c:\windows\system32\drivers\TrueSight.sys
2011-11-24 12:38 . 2011-11-24 13:35 512 ----a-w- C:\PhysicalMBR.bin
2011-11-23 01:13 . 2007-12-20 09:41 29440 ----a-w- c:\windows\system32\uxtuneup.dll
2011-11-22 17:46 . 2011-11-22 17:46 -------- d-----w- c:\program files\Common Files\LogiShrd
2011-11-19 22:51 . 2011-11-19 22:51 -------- d-----w- c:\documents and settings\miau131313\DoctorWeb
2011-11-14 15:08 . 2011-11-14 15:08 -------- d-----w- c:\documents and settings\miau131313\Local Settings\Data aplikací\Daňové_riaditeľstvo_SR
2011-11-12 19:44 . 2008-04-14 07:49 102912 -c----w- c:\windows\system32\dllcache\dpcdll.dll
2011-11-12 18:54 . 2008-04-14 07:52 294912 -c----w- c:\windows\system32\dllcache\dlimport.exe
2011-11-10 20:13 . 2011-11-11 20:21 2406 ----a-w- c:\windows\system32\ASOROSet.bin
2011-11-10 20:10 . 2011-11-10 20:13 -------- d-----w- c:\documents and settings\miau131313\Data aplikací\Systweak
2011-11-10 20:10 . 2011-07-07 12:26 17280 ----a-w- c:\windows\system32\roboot.exe
2011-11-10 19:27 . 2009-11-02 16:47 11520 ----a-w- c:\windows\system32\drivers\gMouUsb.sys
2011-11-10 19:27 . 2009-11-02 16:43 20480 ----a-w- c:\windows\system32\drivers\gHidPnp.sys
2011-11-10 19:27 . 2011-11-10 19:27 -------- d-----w- C:\Genius
2011-11-09 22:27 . 2011-11-09 22:27 -------- d-----w- c:\documents and settings\miau131313\Local Settings\Data aplikací\SlimWare Utilities Inc
2011-11-07 14:26 . 2011-11-07 16:09 -------- d-----w- C:\video_output
2011-11-05 01:23 . 2011-11-22 23:18 -------- d-----w- c:\windows\system32\RTCOM
2011-11-05 00:38 . 2011-11-05 00:38 -------- d-----w- c:\program files\Lavalys
2011-11-02 20:56 . 2011-11-02 20:56 -------- d-----w- c:\program files\ESET
2011-11-02 19:55 . 2011-11-02 20:03 -------- d-----w- c:\program files\trend micro
2011-11-02 12:51 . 2011-11-02 12:51 -------- d-----w- c:\program files\SystemRequirementsLab
2011-11-02 11:52 . 2011-11-14 15:18 -------- d-----w- c:\documents and settings\miau131313\Local Settings\Data aplikací\Deployment
2011-11-02 01:27 . 2011-11-02 01:27 -------- d-----w- c:\program files\Conduit
2011-11-02 01:27 . 2011-11-02 01:27 -------- d-----w- c:\documents and settings\miau131313\Local Settings\Data aplikací\uTorrentBar
2011-11-02 01:10 . 2011-11-02 01:10 -------- d-----w- c:\program files\Analog Devices
2011-11-01 23:59 . 2011-11-01 23:59 -------- d-----w- c:\program files\Driver-Soft
2011-11-01 12:34 . 2009-03-18 16:35 26176 ----a-w- c:\windows\system32\hamachi.sys
2011-10-31 21:57 . 2011-10-31 21:57 -------- d-----w- c:\documents and settings\miau131313\Data aplikací\DesktopPwrMgr
2011-10-31 21:52 . 2011-10-31 21:52 7012 ----a-w- c:\windows\system32\drivers\pmemnt.sys
2011-10-31 20:26 . 2011-10-31 20:26 -------- d-----w- c:\documents and settings\All Users\Data aplikací\PC Drivers HeadQuarters
2011-10-31 11:09 . 2011-10-31 11:09 -------- d-----w- c:\documents and settings\All Users\Data aplikací\{3C0AACBF-B491-4BE5-BAF9-AA46E0629E42}
2011-10-31 11:02 . 2011-10-31 11:02 -------- d-----w- c:\documents and settings\miau131313\Local Settings\Data aplikací\PackageAware
2011-10-30 23:25 . 2008-04-14 07:51 159232 ----a-w- c:\windows\system32\ptpusd.dll
2011-10-30 23:25 . 2001-10-24 11:25 5632 ----a-w- c:\windows\system32\ptpusb.dll
2011-10-30 22:30 . 2011-10-31 13:37 -------- d-----w- c:\documents and settings\miau131313\Local Settings\Data aplikací\Facebook
2011-10-29 23:10 . 2011-11-01 00:39 -------- d-----w- c:\program files\Common Files\Lenovo
2011-10-29 20:40 . 2011-10-29 20:41 -------- d-----w- c:\documents and settings\All Users\Data aplikací\SuperIO
2011-10-29 20:38 . 2011-10-29 20:38 -------- d-----w- c:\program files\Marvell
2011-10-29 18:07 . 2011-11-10 13:32 -------- d-----w- c:\documents and settings\All Users\Data aplikací\PCDr
2011-10-29 18:04 . 2011-11-10 14:38 -------- d-----w- c:\documents and settings\miau131313\Data aplikací\Update
2011-10-29 18:04 . 2011-10-29 18:08 -------- d-----w- c:\documents and settings\miau131313\Data aplikací\PCDr
2011-10-29 09:07 . 2010-08-22 11:48 114176 ----a-w- c:\windows\system32\PCWizard.cpl
2011-10-28 18:33 . 2011-10-28 18:33 -------- d-----w- c:\windows\system32\(null)
2011-10-28 18:33 . 2011-10-31 21:52 30144 ----a-w- c:\windows\system32\drivers\psadd.sys
2011-10-28 18:13 . 2011-10-28 18:13 -------- d-----w- C:\SWTOOLS
2011-10-28 15:25 . 2010-11-05 18:03 1552 ----a-w- c:\windows\system32\drivers\SAMSfPa.dat
.
.
.
(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2011-11-23 01:13 . 2009-12-12 11:42 306432 ----a-w- c:\windows\system32\TuneUpDefragService.exe
2011-11-12 09:41 . 2011-05-23 12:05 414368 ----a-w- c:\windows\system32\FlashPlayerCPLApp.cpl
2011-10-18 17:10 . 2011-10-28 02:24 64616 ----a-w- c:\windows\system32\RtkCoInstXP.dll
2011-10-10 14:22 . 2009-12-12 11:27 692736 ----a-w- c:\windows\system32\inetcomm.dll
2011-09-28 07:06 . 2008-04-14 06:51 602112 ----a-w- c:\windows\system32\crypt32.dll
2011-09-26 09:41 . 2008-07-29 18:59 613376 ----a-w- c:\windows\system32\uiautomationcore.dll
2011-09-26 09:41 . 2001-10-25 12:00 22528 ----a-w- c:\windows\system32\oleaccrc.dll
2011-09-26 09:41 . 2001-10-25 12:00 220160 ----a-w- c:\windows\system32\oleacc.dll
2011-09-06 20:45 . 2010-07-18 16:20 41184 ----a-w- c:\windows\avastSS.scr
2011-09-06 20:45 . 2009-12-12 13:50 199304 ----a-w- c:\windows\system32\aswBoot.exe
2011-09-06 20:38 . 2011-09-11 11:53 111320 ----a-w- c:\windows\system32\drivers\aswFW.sys
2011-09-06 20:38 . 2011-04-04 23:05 442200 ----a-w- c:\windows\system32\drivers\aswSnx.sys
2011-09-06 20:37 . 2009-12-12 13:51 320856 ----a-w- c:\windows\system32\drivers\aswSP.sys
2011-09-06 20:37 . 2011-09-11 11:53 195416 ----a-w- c:\windows\system32\drivers\aswNdis2.sys
2011-09-06 20:36 . 2009-12-12 13:51 34392 ----a-w- c:\windows\system32\drivers\aswRdr.sys
2011-09-06 20:36 . 2009-12-12 13:51 52568 ----a-w- c:\windows\system32\drivers\aswTdi.sys
2011-09-06 20:36 . 2009-12-12 13:51 110552 ----a-w- c:\windows\system32\drivers\aswmon2.sys
2011-09-06 20:36 . 2009-12-12 13:51 104536 ----a-w- c:\windows\system32\drivers\aswmon.sys
2011-09-06 20:36 . 2009-12-12 13:51 20568 ----a-w- c:\windows\system32\drivers\aswFsBlk.sys
2011-09-06 20:33 . 2009-12-12 13:51 30808 ----a-w- c:\windows\system32\drivers\aavmker4.sys
2011-09-06 14:10 . 2008-04-14 05:45 1858944 ----a-w- c:\windows\system32\win32k.sys
2011-06-01 20:17 . 2011-06-01 20:16 20533281 ----a-w- c:\program files\vlc-1.1.9-win32.exe
2010-07-22 21:40 . 2010-09-24 17:59 2944904 ----a-w- c:\program files\Common Files\AskToolbarInstaller.exe
2010-03-15 03:23 . 2010-03-15 03:23 18499623 -c--a-w- c:\program files\vlc-1.0.5-win32.exe
2010-02-20 19:46 . 2010-02-20 19:46 7897671 -c--a-w- c:\program files\AntikVSTB.exe
2011-11-08 23:49 . 2011-04-20 10:06 134104 ----a-w- c:\program files\mozilla firefox\components\browsercomps.dll
.
.
(((((((((((((((((((((((((((((((((((((((((((( Look )))))))))))))))))))))))))))))))))))))))))))))))))))))))))
.
---- Directory of c:\windows\system32\(null) ----
.
2011-10-28 18:33 . 2011-10-31 21:55 450 ----a-w- c:\windows\system32\(null)\tvtsched.log
.
.
((((((((((((((((((((((((((((( SnapShot_2011-11-25_13.05.14 )))))))))))))))))))))))))))))))))))))))))
.
+ 2011-11-27 13:34 . 2011-11-27 13:34 16384 c:\windows\Temp\Perflib_Perfdata_71c.dat
+ 2009-12-12 11:31 . 2011-11-25 16:01 32768 c:\windows\system32\config\systemprofile\Local Settings\History\History.IE5\index.dat
- 2009-12-12 11:31 . 2011-11-19 21:37 32768 c:\windows\system32\config\systemprofile\Local Settings\History\History.IE5\index.dat
+ 2011-11-25 15:59 . 2011-11-25 16:01 16384 c:\windows\system32\config\systemprofile\Cookies\index.dat
+ 2008-04-13 22:50 . 2008-06-20 11:59 361600 c:\windows\system32\drivers\tcpip.sys
- 2008-04-13 22:50 . 2008-06-20 11:51 361600 c:\windows\system32\drivers\tcpip.sys
.
((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* empty entries & legit default entries are not shown
REGEDIT4
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\00avast]
@="{472083B0-C522-11CF-8763-00608CC02F24}"
[HKEY_CLASSES_ROOT\CLSID\{472083B0-C522-11CF-8763-00608CC02F24}]
2011-09-06 20:45 122512 ----a-w- c:\program files\Alwil Software\Avast5\ashShell.dll
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Skype"="c:\program files\Skype\Phone\Skype.exe" [2011-10-13 17351304]
"ctfmon.exe"="c:\windows\system32\ctfmon.exe" [2008-04-14 15360]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"avast"="c:\program files\Alwil Software\Avast5\avastUI.exe" [2011-09-06 3722416]
"Samsung PanelMgr"="c:\windows\Samsung\PanelMgr\SSMMgr.exe" [2009-08-27 614400]
"LogitechCommunicationsManager"="c:\program files\Common Files\LogiShrd\LComMgr\Communications_Helper.exe" [2007-03-06 488984]
"LogitechQuickCamRibbon"="c:\program files\Labtec\WebCam\WebCam10.exe" [2007-03-06 1060376]
"RTHDCPL"="RTHDCPL.EXE" [2011-10-14 20064872]
.
[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\RunOnce]
"_nltide_3"="advpack.dll" [2011-08-17 124928]
.
[HKEY_USERS\.default\software\microsoft\windows\currentversion\policies\explorer]
"StartMenuLogoff"= 1 (0x1)
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon]
"UIHost"="c:\windows\system32\logonui.exe"
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Lavasoft Ad-Aware Service]
@="Service"
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Wdf01000.sys]
@="Driver"
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WudfSvc]
@="Service"
.
[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run-]
"ctfmon.exe"=c:\windows\system32\ctfmon.exe
.
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\Network Diagnostic\\xpnetdiag.exe"=
"c:\\WINDOWS\\system32\\rserver30\\rserver3.exe"=
"c:\\WINDOWS\\system32\\sessmgr.exe"=
"c:\\Program Files\\Microsoft Office\\Office12\\OUTLOOK.EXE"=
"c:\\Program Files\\Microsoft Office\\Office12\\GROOVE.EXE"=
"c:\\Program Files\\Microsoft Office\\Office12\\ONENOTE.EXE"=
"c:\\Documents and Settings\\miau131313\\Local Settings\\Data aplikací\\AntikVirtualSTB\\AntikVirtualSTB.exe"=
"c:\\Program Files\\VideoLAN\\VLC\\vlc.exe"=
"c:\\Documents and Settings\\miau131313\\temp\\TeamViewer\\Version5\\TeamViewer.exe"=
"c:\\Program Files\\Mozilla Firefox\\firefox.exe"=
"c:\\Program Files\\Java\\jre6\\launch4j-tmp\\frd.exe"=
"c:\\Program Files\\Skype\\Phone\\Skype.exe"=
"c:\\Program Files\\TeamViewer\\Version6\\TeamViewer.exe"=
"c:\\Program Files\\TeamViewer\\Version6\\TeamViewer_Service.exe"=
"%windir%\\system32\\sessmgr.exe"=
.
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\GloballyOpenPorts\List]
"3389:TCP"= 3389:TCP:*:Disabled:@xpsp2res.dll,-22009
.
R0 Lbd;Lbd;c:\windows\system32\drivers\Lbd.sys [12.12.2009 12:41 64288]
R0 tdrpman258;Acronis Try&Decide and Restore Points filter (build 258);c:\windows\system32\drivers\tdrpm258.sys [13.12.2009 11:24 911680]
R1 aswSnx;aswSnx;c:\windows\system32\drivers\aswSnx.sys [5.4.2011 0:05 442200]
R1 aswSP;aswSP;c:\windows\system32\drivers\aswSP.sys [12.12.2009 14:51 320856]
R1 raddrvv3;raddrvv3;c:\windows\system32\rserver30\raddrvv3.sys [9.10.2009 14:00 46304]
R2 afcdpsrv;Acronis Nonstop Backup service;c:\program files\Common Files\Acronis\CDP\afcdpsrv.exe [13.12.2009 11:24 2480048]
R2 aswFsBlk;aswFsBlk;c:\windows\system32\drivers\aswFsBlk.sys [12.12.2009 14:51 20568]
R2 GeniusMouseService;GeniusMouseService;c:\genius\ioCentre\GMouseService.exe [10.11.2011 20:27 12288]
R2 RServer3;Radmin Server V3;c:\windows\system32\rserver30\rserver3.exe [9.10.2009 14:00 1242504]
R2 TeamViewer6;TeamViewer 6;c:\program files\TeamViewer\Version6\TeamViewer_Service.exe [3.11.2011 19:25 2358656]
R3 afcdp;afcdp;c:\windows\system32\drivers\afcdp.sys [13.12.2009 11:24 160288]
R3 gHidPnp;USB Device Enhanced Function Driver;c:\windows\system32\drivers\gHidPnp.sys [10.11.2011 20:27 20480]
R3 gMouUsb;USB Mouse Device Drv;c:\windows\system32\drivers\gMouUsb.sys [10.11.2011 20:27 11520]
S0 is3srv;is3srv;c:\windows\system32\drivers\is3srv.sys --> c:\windows\system32\drivers\is3srv.sys [?]
S0 szkg5;szkg5;c:\windows\system32\DRIVERS\szkg.sys --> c:\windows\system32\DRIVERS\szkg.sys [?]
S0 szkgfs;szkgfs;c:\windows\system32\drivers\szkgfs.sys --> c:\windows\system32\drivers\szkgfs.sys [?]
S1 aswFW;avast! TDI Firewall driver;c:\windows\system32\drivers\aswFW.sys [11.9.2011 12:53 111320]
S1 SASDIFSV;SASDIFSV;\??\c:\program files\SUPERAntiSpyware\SASDIFSV.SYS --> c:\program files\SUPERAntiSpyware\SASDIFSV.SYS [?]
S1 SASKUTIL;SASKUTIL;\??\c:\program files\SUPERAntiSpyware\SASKUTIL.SYS --> c:\program files\SUPERAntiSpyware\SASKUTIL.SYS [?]
S2 avast! Firewall;avast! Firewall;"c:\program files\Alwil Software\Avast5\afwServ.exe" --> c:\program files\Alwil Software\Avast5\afwServ.exe [?]
S3 Ambfilt;Ambfilt;c:\windows\system32\drivers\Ambfilt.sys [23.11.2011 0:18 1691480]
S3 AR9271;Wireless Network Adapter Service;c:\windows\system32\drivers\athuw.sys [12.3.2010 13:45 1668352]
S3 cpudrv;cpudrv;c:\program files\SystemRequirementsLab\cpudrv.sys [18.12.2009 11:58 11336]
S3 cpuz134;cpuz134;\??\c:\program files\CPUID\PC Wizard 2010\pcwiz_x32.sys --> c:\program files\CPUID\PC Wizard 2010\pcwiz_x32.sys [?]
S3 gMouPS2;PS2 Scroll Mouse Device;c:\windows\system32\DRIVERS\gMouPS2.sys --> c:\windows\system32\DRIVERS\gMouPS2.sys [?]
S3 Lavasoft Ad-Aware Service;Lavasoft Ad-Aware Service;c:\program files\Lavasoft\Ad-Aware\AAWService.exe [12.7.2010 9:55 2152152]
S3 nmwcdnsu;Nokia USB Flashing Phone Parent;c:\windows\system32\drivers\nmwcdnsu.sys [15.9.2010 10:52 137344]
S3 SuperIO;Lenovo ASD HWM Driver;c:\windows\system32\drivers\spio.sys [6.3.2008 13:33 5760]
S3 teamviewervpn;TeamViewer VPN Adapter;c:\windows\system32\drivers\teamviewervpn.sys [11.3.2010 10:17 25088]
S3 TrueSight;TrueSight;c:\windows\system32\drivers\TrueSight.sys [25.11.2011 17:05 111872]
.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Svchost - NetSvcs
UxTuneUp
.
Contents of the 'Scheduled Tasks' folder
.
2011-11-26 c:\windows\Tasks\Ad-Aware Update (Weekly).job
- c:\program files\Lavasoft\Ad-Aware\Ad-AwareAdmin.exe [2010-07-12 07:40]
.
2011-11-27 c:\windows\Tasks\Úklid 1 kliknutím.job
- c:\program files\TuneUp Utilities 2008\OneClick.exe [2007-12-21 12:49]
.
.
------- Supplementary Scan -------
.
uStart Page = hxxp://
www.google.sk/
mWindow Title = Microsoft Internet Explorer
IE: E&xportovat do aplikace Microsoft Excel - c:\progra~1\MI1933~1\Office12\EXCEL.EXE/3000
IE: Převést cíl vazby do Adobe PDF - c:\program files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll/AcroIECaptureSelLinks.html
IE: Převést do Adobe PDF - c:\program files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll/AcroIECapture.html
IE: Připojit cíl vazby k existujícímu PDF - c:\program files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll/AcroIEAppendSelLinks.html
IE: Připojit k existujícímu PDF - c:\program files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll/AcroIEAppend.html
IE: SmarThru4 Capture Selection - (value not set)
IE: SmarThru4 Save as HTML - (value not set)
IE: SmarThru4 Save Selected Text - (value not set)
IE: SmarThru4 Web Capture - (value not set)
IE: ????3?? - c:\documents and settings\miau131313\Data aplikací\FlashGetBHO\GetUrl.htm
IE: ????3?????? - c:\documents and settings\miau131313\Data aplikací\FlashGetBHO\GetAllUrl.htm
IE: {{7E6A20FB-153F-402c-A84B-1A64E1955D3D} - {7E6A20FB-153F-402c-A84B-1A64E1955D3D} - c:\translat\WEBIE.DLL
IE: {{CC963627-B1DC-40E0-B52A-CF21EE748450} - {CC963627-B1DC-40E0-B52A-CF21EE748450} - c:\translat\WEBIE.DLL
IE: {{CC963627-B1DC-40E0-B52A-CF21EE748451} - {CC963627-B1DC-40E0-B52A-CF21EE748451} - c:\translat\WEBIE.DLL
IE: {{CC963627-B1DC-40E0-B52A-CF21EE748452} - {CC963627-B1DC-40E0-B52A-CF21EE748452} - c:\translat\WEBIE.DLL
TCP: DhcpNameServer = 192.168.2.1
TCP: Interfaces\{7B03518D-B041-4815-BFE9-0EA835877B2F}: NameServer = 192.168.2.1
FF - ProfilePath - c:\documents and settings\miau131313\Data aplikací\Mozilla\Firefox\Profiles\9mmw2ccj.default\
FF - prefs.js: browser.search.defaulturl - hxxp://
www.google.com/search?lr=&ie=UTF-8&oe=UTF-8&q=
FF - prefs.js: browser.search.selectedEngine - Google
FF - prefs.js: browser.startup.homepage - hxxp://
www.google.sk/
FF - user.js: network.http.max-persistent-connections-per-server - 4
FF - user.js: nglayout.initialpaint.delay - 300
FF - user.js: content.notify.interval - 100000
FF - user.js: content.max.tokenizing.time - 200000
FF - user.js: content.switch.threshold - 650000
.
.
**************************************************************************
.
catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer,
http://www.gmer.net
Rootkit scan 2011-11-27 14:34
Windows 5.1.2600 Service Pack 3 NTFS
.
scanning hidden processes ...
.
scanning hidden autostart entries ...
.
scanning hidden files ...
.
scan completed successfully
hidden files: 0
.
**************************************************************************
.
--------------------- LOCKED REGISTRY KEYS ---------------------
.
[HKEY_USERS\S-1-5-21-1229272821-1935655697-682003330-1003\Software\Microsoft\Internet Explorer\MenuExt\O(uë_fŹ3*N}Ź]
@Allowed: (Read) (RestrictedCode)
@Allowed: (Read) (RestrictedCode)
@="c:\\Documents and Settings\\miau131313\\Data aplikací\\FlashGetBHO\\GetUrl.htm"
"contexts"=dword:00000022
.
[HKEY_USERS\S-1-5-21-1229272821-1935655697-682003330-1003\Software\Microsoft\Internet Explorer\MenuExt\O(uë_fŹ3*N}ŹhQčţ”Ąc]
@Allowed: (Read) (RestrictedCode)
@Allowed: (Read) (RestrictedCode)
@="c:\\Documents and Settings\\miau131313\\Data aplikací\\FlashGetBHO\\GetAllUrl.htm"
"contexts"=dword:000000f3
.
[HKEY_USERS\S-1-5-21-1229272821-1935655697-682003330-1003\Software\Microsoft\SystemCertificates\AddressBook*]
@Allowed: (Read) (RestrictedCode)
@Allowed: (Read) (RestrictedCode)
.
--------------------- DLLs Loaded Under Running Processes ---------------------
.
- - - - - - - > 'explorer.exe'(3520)
c:\windows\system32\WPDShServiceObj.dll
c:\windows\system32\PortableDeviceTypes.dll
c:\windows\system32\PortableDeviceApi.dll
.
------------------------ Other Running Processes ------------------------
.
c:\program files\Alwil Software\Avast5\AvastSvc.exe
c:\program files\Common Files\Acronis\Plán2\schedul2.exe
c:\program files\Java\jre6\bin\jqs.exe
c:\program files\Common Files\Microsoft Shared\VS7DEBUG\mdm.exe
c:\windows\RTHDCPL.EXE
c:\program files\Common Files\LogiShrd\LComMgr\LVComSX.exe
c:\windows\system32\wscntfy.exe
.
**************************************************************************
.
Completion time: 2011-11-27 14:37:36 - machine was rebooted
ComboFix-quarantined-files.txt 2011-11-27 13:37
ComboFix2.txt 2011-11-19 22:02
ComboFix3.txt 2011-11-04 20:40
ComboFix4.txt 2011-11-03 21:30
.
Pre-Run: Volných bajtů: 32 628 813 824
Post-Run: Volných bajtů: 32 634 441 728
.
- - End Of File - - DEFB0E01E54D5844D3C814A1F3B3AC92
tak a ted cekam na krasnou upozornuji stihlounkou sloni slecnu
co mi na to vse napise a odporuci...
.
Pokud nemáte, přesuňte Combofix na plochu
ne podle toho jak je to u zvirat...bez urazky jsem to myslela...jdu precist podrobne co jste mi napsala...pak se ozvu...snad budu vedet co mam delat...miau...
záložka 
Přispějete na provoz fóra?