ComboFix 10-12-06.04 - Petr Potůček 07.12.2010 21:34:14.3.2 - x86
Microsoft® Windows Vista™ Home Premium 6.0.6002.2.1250.420.1029.18.3069.1312 [GMT 1:00]
Spuštěný z: c:\users\Petr Potůček\Desktop\ComboFix.exe
FW: Sunbelt Personal Firewall *enabled* {82B1150E-9B37-49FC-83EB-D52197D900D0}
SP: Lavasoft Ad-Watch Live! *disabled* (Updated) {67844DAE-4F77-4D69-9457-98E8CFFDAA22}
SP: Windows Defender *enabled* (Updated) {D68DDC3A-831F-4FAE-9E44-DA132C1ACF46}
.
((((((((((((((((((((((((((((((((((((((( Ostatní výmazy )))))))))))))))))))))))))))))))))))))))))))))))))
.
c:\programdata\hpeC731.dll
c:\programdata\page
c:\programdata\page\page.ico
c:\programdata\page\page.URL
c:\users\Petr Potůček\AppData\Roaming\.#
c:\users\Petr Potůček\AppData\Roaming\.#\MBX@1514@1CF2990.###
c:\users\Petr Potůček\AppData\Roaming\.#\MBX@1514@1CF29C0.###
c:\users\Petr Potůček\AppData\Roaming\.#\MBX@1514@1CF29F0.###
c:\windows\system32\Ijl11.dll
c:\windows\system32\vbpng1.dll
.
((((((((((((((((((((((((( Soubory vytvořené od 2010-11-07 do 2010-12-07 )))))))))))))))))))))))))))))))
.
2010-12-07 20:48 . 2010-12-07 20:48 -------- d-----w- c:\users\TxR\AppData\Local\temp
2010-12-07 20:48 . 2010-12-07 20:48 -------- d-----w- c:\users\systemprofile\AppData\Local\temp
2010-12-07 20:48 . 2010-12-07 20:48 -------- d-----w- c:\users\RegBack\AppData\Local\temp
2010-12-07 20:48 . 2010-12-07 20:48 -------- d-----w- c:\users\Public\AppData\Local\temp
2010-12-07 20:48 . 2010-12-07 20:48 -------- d-----w- c:\users\Petr Pot¨Ŕek\AppData\Local\temp
2010-12-07 20:48 . 2010-12-07 20:48 -------- d-----w- c:\users\Journal\AppData\Local\temp
2010-12-07 19:30 . 2010-11-10 04:33 6273872 ----a-w- c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\{CDAF44EE-6418-4C68-B0E5-7B6F29D20BDE}\mpengine.dll
2010-12-07 17:41 . 2010-12-07 17:56 -------- d-----w- C:\LGP500
2010-12-03 22:49 . 2010-12-03 22:49 -------- d-----w- c:\windows\LastGood
2010-12-03 22:49 . 2010-01-25 05:11 19968 ----a-w- c:\windows\system32\drivers\lgandgps.sys
2010-12-03 22:49 . 2010-01-25 05:11 20864 ----a-w- c:\windows\system32\drivers\lganddiag.sys
2010-12-03 22:49 . 2010-01-25 05:11 24960 ----a-w- c:\windows\system32\drivers\lgandmodem.sys
2010-12-03 22:49 . 2010-01-25 05:11 14336 ----a-w- c:\windows\system32\drivers\lgandbus.sys
2010-12-03 22:49 . 2010-12-03 22:49 -------- d-----w- c:\program files\LG Electronics
2010-12-03 22:35 . 2006-05-04 07:33 53248 ----a-w- c:\windows\system32\CommonDL.dll
2010-12-03 22:34 . 2010-12-03 22:35 -------- d-----w- c:\programdata\LGMOBILEAX
2010-11-27 19:08 . 2010-11-27 19:09 -------- d-----w- c:\program files\AV Vcs 4.0
2010-11-24 13:49 . 2010-11-24 13:50 -------- d-----w- c:\program files\ScreenShots
2010-11-24 08:58 . 2010-10-19 04:27 7680 ----a-w- c:\program files\Internet Explorer\iecompat.dll
2010-11-24 05:20 . 2010-11-24 05:20 -------- d--h--w- c:\windows\PIF
2010-11-22 19:51 . 2010-11-24 05:24 -------- d-----w- c:\program files\trend micro
2010-11-18 18:15 . 2010-11-18 18:18 -------- d-----w- c:\program files\ICQ7.2
2010-11-18 17:18 . 2010-11-18 17:19 -------- d-----w- c:\program files\Cs Hud Editor 1.0
2010-11-16 19:38 . 2010-11-16 19:38 -------- d-----w- c:\program files\iPod
2010-11-16 19:37 . 2010-11-16 19:38 -------- d-----w- c:\programdata\{429CAD59-35B1-4DBC-BB6D-1DB246563521}
2010-11-16 19:35 . 2010-11-16 19:35 159744 ----a-w- c:\program files\Internet Explorer\Plugins\npqtplugin7.dll
2010-11-16 19:35 . 2010-11-16 19:35 159744 ----a-w- c:\program files\Internet Explorer\Plugins\npqtplugin6.dll
2010-11-16 19:35 . 2010-11-16 19:35 159744 ----a-w- c:\program files\Internet Explorer\Plugins\npqtplugin5.dll
2010-11-16 19:35 . 2010-11-16 19:35 159744 ----a-w- c:\program files\Internet Explorer\Plugins\npqtplugin4.dll
2010-11-16 19:35 . 2010-11-16 19:35 159744 ----a-w- c:\program files\Internet Explorer\Plugins\npqtplugin3.dll
2010-11-16 19:35 . 2010-11-16 19:35 159744 ----a-w- c:\program files\Internet Explorer\Plugins\npqtplugin2.dll
2010-11-16 19:35 . 2010-11-16 19:35 159744 ----a-w- c:\program files\Internet Explorer\Plugins\npqtplugin.dll
2010-11-16 19:34 . 2010-11-16 19:35 -------- d-----w- c:\program files\QuickTime
2010-11-13 16:53 . 2010-11-13 16:53 -------- d-----w- c:\programdata\IObit
2010-11-12 18:46 . 2010-11-12 18:46 4280320 ----a-w- c:\windows\system32\GPhotos.scr
2010-11-10 15:24 . 2010-10-07 11:37 2409784 ----a-w- c:\program files\Windows Mail\OESpamFilter.dat
.
(((((((((((((((((((((((((((((((((((((((( Find3M výpis ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2010-11-10 04:33 . 2010-03-03 09:39 6273872 ----a-w- c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\Backup\mpengine.dll
2010-10-26 15:35 . 2010-10-26 15:35 27632 ----a-w- c:\windows\system32\drivers\seehcri.sys
2010-10-26 15:35 . 2010-10-26 15:35 83200 ----a-w- c:\windows\system32\drivers\zebrbus.sys
2010-10-26 15:35 . 2010-10-26 15:35 14848 ----a-w- c:\windows\system32\drivers\zebrmdfl.sys
2010-10-26 15:35 . 2010-10-26 15:35 12160 ----a-w- c:\windows\system32\drivers\zebrwhnt.sys
2010-10-26 15:35 . 2010-10-26 15:35 12160 ----a-w- c:\windows\system32\drivers\zebrwh.sys
2010-10-26 15:35 . 2010-10-26 15:35 12160 ----a-w- c:\windows\system32\drivers\zebrcmnt.sys
2010-10-26 15:35 . 2010-10-26 15:35 12160 ----a-w- c:\windows\system32\drivers\zebrcm.sys
2010-10-26 15:35 . 2010-10-26 15:35 109568 ----a-w- c:\windows\system32\drivers\zebrmdmc.sys
2010-10-26 15:35 . 2010-10-26 15:35 109568 ----a-w- c:\windows\system32\drivers\zebrmdm.sys
2010-10-26 15:35 . 2010-10-26 15:35 25512 ----a-w- c:\windows\system32\drivers\ggsemc.sys
2010-10-26 15:35 . 2010-10-26 15:35 13224 ----a-w- c:\windows\system32\drivers\ggflt.sys
2010-10-26 15:35 . 2010-10-26 15:35 1112288 ----a-w- c:\windows\system32\WdfCoInstaller01007.dll
2010-10-19 20:51 . 2010-03-01 20:44 222080 ------w- c:\windows\system32\MpSigStub.exe
2010-10-14 00:36 . 2010-10-14 00:36 15451288 ----a-w- c:\windows\system32\xlive.dll
2010-10-14 00:36 . 2010-10-14 00:36 13642904 ----a-w- c:\windows\system32\xlivefnt.dll
2010-09-22 22:47 . 2010-09-22 22:47 49016 ----a-w- c:\windows\system32\sirenacm.dll
2010-09-13 13:56 . 2010-10-15 09:43 8147456 ----a-w- c:\windows\system32\wmploc.DLL
2009-02-24 19:34 . 2009-02-24 19:34 1044480 ----a-w- c:\program files\opera\program\plugins\libdivx.dll
2009-02-24 19:34 . 2009-02-24 19:34 200704 ----a-w- c:\program files\opera\program\plugins\ssldivx.dll
.
(((((((((((((((((((((((((((((((((( Spouštěcí body v registru )))))))))))))))))))))))))))))))))))))))))))))
.
.
*Poznámka* prázdné záznamy a legitimní výchozí údaje nejsou zobrazeny.
REGEDIT4
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\egisPSDP]
@="{30A0A3F6-38AC-4C53-BB8B-0D95238E25BA}"
[HKEY_CLASSES_ROOT\CLSID\{30A0A3F6-38AC-4C53-BB8B-0D95238E25BA}]
2008-01-03 00:00 39472 ----a-w- c:\acer\Empowering Technology\eDataSecurity\x86\PSDProtect.dll
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Sidebar"="c:\program files\Windows Sidebar\sidebar.exe" [2009-04-11 1233920]
"ehTray.exe"="c:\windows\ehome\ehTray.exe" [2008-01-21 125952]
"MtdAcqu"="c:\program files\Creative\MediaSource5\MtdAcqu.exe" [2006-03-08 278528]
"WMPNSCFG"="c:\program files\Windows Media Player\WMPNSCFG.exe" [2008-01-21 202240]
"Steam"="c:\program files\steam\steam.exe" [2010-11-17 1242448]
"ICQ"="c:\program files\ICQ7.2\ICQ.exe" [2010-11-18 133432]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"QuickTime Task"="c:\program files\QuickTime\QTTask.exe" [2010-09-08 421888]
"iTunesHelper"="c:\program files\iTunes\iTunesHelper.exe" [2010-11-10 421160]
"Adobe Reader Speed Launcher"="c:\program files\Adobe\Reader 9.0\Reader\Reader_sl.exe" [2010-09-23 35760]
"B2C_AGENT"="c:\programdata\LGMOBILEAX\B2C_Client\B2CNotiAgent.exe" [2010-09-27 391096]
c:\users\Host\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\
OpenOffice.org 3.0.lnk - c:\program files\OpenOffice.org 3\program\quickstart.exe [2008-10-4 393216]
c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\
Microsoft Office.lnk - c:\program files\Microsoft Office\Office10\OSA.EXE [2001-2-13 83360]
SETAUDIO.EXE [2008-4-4 20480]
SETRES.EXE [2008-4-4 20480]
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"EnableLUA"= 0 (0x0)
"EnableUIADesktopToggle"= 0 (0x0)
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\explorer]
"NoResolveTrack"= 1 (0x1)
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MsMpSvc]
@="Service"
[HKLM\~\startupfolder\C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^Acer VCM.lnk]
path=c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\Acer VCM.lnk
backup=c:\windows\pss\Acer VCM.lnk.CommonStartup
backupExtension=.CommonStartup
[HKLM\~\startupfolder\C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^Bluetooth.lnk]
path=c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\Bluetooth.lnk
backup=c:\windows\pss\Bluetooth.lnk.CommonStartup
backupExtension=.CommonStartup
[HKLM\~\startupfolder\C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^Empowering Technology Launcher.lnk]
path=c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\Empowering Technology Launcher.lnk
backup=c:\windows\pss\Empowering Technology Launcher.lnk.CommonStartup
backupExtension=.CommonStartup
[HKLM\~\startupfolder\C:^Users^Petr Potůček^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^Typle.lnk]
backup=c:\windows\pss\Typle.lnk.Startup
backupExtension=.Startup
[HKLM\~\startupfolder\C:^Users^Petr Potůček^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^Výřezy obrazovky a spuštění aplikace OneNote 2007.lnk]
backup=c:\windows\pss\Výřezy obrazovky a spuštění aplikace OneNote 2007.lnk.Startup
backupExtension=.Startup
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\DAEMON Tools Lite]
2010-04-01 09:16 357696 ----a-w- c:\program files\DAEMON Tools Lite\DTLite.exe
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\DetectTray]
2006-09-20 15:44 126976 ----a-w- c:\program files\Genius\TVGo DVB-T02Q MCE\DetectTray.exe
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\eAudio]
2007-10-10 04:41 1286144 ----a-w- c:\acer\Empowering Technology\eAudio\eAudio.exe
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\eDataSecurity Loader]
2008-02-25 08:53 518656 ----a-w- c:\acer\Empowering Technology\eDataSecurity\x86\eDSLoader.exe
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Google Update]
2009-04-17 12:54 133104 ----atw- c:\users\Petr Potůček\AppData\Local\Google\Update\GoogleUpdate.exe
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\GrooveMonitor]
2008-10-25 09:44 31072 ----a-w- c:\program files\Microsoft Office\Office12\GrooveMonitor.exe
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\PCSpeedUp]
2010-09-21 15:21 856312 ----a-w- c:\program files\Zrychleni Pocitace\PCSpeedUp.exe
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\PSPVideoConverter_upgrade]
2009-12-29 05:30 503808 ----a-w- c:\program files\E-Zsoft\PSPVideoConverter\PSPVideoConverter.exe
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\UnlockerAssistant]
2010-03-09 02:52 15872 ----a-w- c:\program files\Unlocker\UnlockerAssistant.exe
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\WarReg_PopUp]
2008-01-29 08:03 303104 ----a-w- c:\program files\Acer\WR_PopUp\WarReg_PopUp.exe
[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\McAfeeAntiSpyware]
"DisableMonitoring"=dword:00000001
[HKEY_LOCAL_MACHINE\software\microsoft\security center\Svc]
"AntiVirusOverride"=dword:00000001
"AntiSpywareOverride"=dword:00000001
"FirewallOverride"=dword:00000001
R0 BtHidBus;Bluetooth HID Bus Service;c:\windows\System32\Drivers\BtHidBus.sys [x]
R2 gupdate1c9c01d987a940;Služba Google Update (gupdate1c9c01d987a940);c:\program files\Google\Update\GoogleUpdate.exe [2009-04-18 133104]
R2 OMSI download service;Sony Ericsson OMSI download service;c:\program files\Sony Ericsson\Sony Ericsson PC Suite\SupServ.exe [2009-04-30 90112]
R3 amdkmdag;amdkmdag;c:\windows\system32\DRIVERS\atikmdag.sys [2008-05-08 3552256]
R3 amdkmdap;amdkmdap;c:\windows\system32\DRIVERS\atikmpag.sys [x]
R3 btnetBUs;IVT Bluetooth Bus Service for BtNic;c:\windows\system32\Drivers\btnetBus.sys [2008-10-22 29832]
R3 EC168BDA;TVGo DVB-T02Q MCE;c:\windows\system32\DRIVERS\EC168BDA.sys [2006-09-25 38400]
R3 ggflt;SEMC USB Flash Driver Filter;c:\windows\system32\DRIVERS\ggflt.sys [2010-10-26 13224]
R3 IvtBtBUs;IVT Bluetooth Bus Service;c:\windows\system32\Drivers\IvtBtBus.sys [x]
R3 NETw5v32;Intel(R) Wireless WiFi Link 5000 Series Adapter Driver for Windows Vista 32 Bit;c:\windows\system32\DRIVERS\NETw5v32.sys [2008-11-17 3668480]
R3 s916bus;Sony Ericsson Device 916 driver (WDM);c:\windows\system32\DRIVERS\s916bus.sys [2007-11-02 83496]
R3 s916mdfl;Sony Ericsson Device 916 USB WMC Modem Filter;c:\windows\system32\DRIVERS\s916mdfl.sys [2007-11-02 15016]
R3 s916mdm;Sony Ericsson Device 916 USB WMC Modem Driver;c:\windows\system32\DRIVERS\s916mdm.sys [2007-11-02 109992]
R3 s916mgmt;Sony Ericsson Device 916 USB WMC Device Management Drivers (WDM);c:\windows\system32\DRIVERS\s916mgmt.sys [2007-11-02 103976]
R3 s916obex;Sony Ericsson Device 916 USB WMC OBEX Interface;c:\windows\system32\DRIVERS\s916obex.sys [2007-11-02 100008]
R4 Creative ALchemy AL1 Licensing Service;Creative ALchemy AL1 Licensing Service;c:\program files\Common Files\Creative Labs Shared\Service\AL1Licensing.exe [2009-04-17 79360]
R4 Creative Audio Engine Licensing Service;Creative Audio Engine Licensing Service;c:\program files\Common Files\Creative Labs Shared\Service\CTAELicensing.exe [2009-04-17 79360]
R4 Creative HOAL Licensing Service;Creative HOAL Licensing Service;c:\program files\Common Files\Creative Labs Shared\Service\CTHOALLicensing.exe [2009-04-17 79360]
R4 Creative Media Toolbox 6 Licensing Service;Creative Media Toolbox 6 Licensing Service;c:\program files\Common Files\Creative Labs Shared\Service\MT6Licensing.exe [2009-04-17 79360]
S0 sptd;sptd;c:\windows\System32\Drivers\sptd.sys [2010-05-30 691696]
S1 SbFw;SbFw;c:\windows\system32\drivers\SbFw.sys [2008-10-31 270888]
S1 sbhips;Sunbelt HIPS Driver;c:\windows\system32\drivers\sbhips.sys [2008-06-21 66600]
S2 AMD External Events Utility;AMD External Events Utility;c:\windows\system32\atiesrxx.exe [2010-08-04 176128]
S2 RS_Service;Raw Socket Service;c:\program files\Acer\Acer VCM\RS_Service.exe [2007-09-28 233472]
S2 SbPF.Launcher;SbPF.Launcher;c:\program files\Sunbelt Software\Personal Firewall\SbPFLnch.exe [2008-10-31 95528]
S2 SPF4;Sunbelt Personal Firewall 4;c:\program files\Sunbelt Software\Personal Firewall\SbPFSvc.exe [2008-10-31 1365288]
S3 Andbus;LGE Android Composite USB Device;c:\windows\system32\DRIVERS\lgandbus.sys [2010-01-25 14336]
S3 AndDiag;LGE Android USB Serial Port;c:\windows\system32\DRIVERS\lganddiag.sys [2010-01-25 20864]
S3 AndGps;LGE Android USB GPS NMEA Port;c:\windows\system32\DRIVERS\lgandgps.sys [2010-01-25 19968]
S3 ANDModem;LGE Android USB Modem;c:\windows\system32\DRIVERS\lgandmodem.sys [2010-01-25 24960]
S3 b57nd60x;Broadcom NetXtreme Gigabit Ethernet - NDIS 6.0;c:\windows\system32\DRIVERS\b57nd60x.sys [2008-01-24 179712]
S3 MpNWMon;Microsoft Malware Protection Network Driver;c:\windows\system32\DRIVERS\MpNWMon.sys [2010-03-25 42368]
S3 NETwLv32; Ovladač adaptéru řady Intel(R) Wireless WiFi Link 5000 pro systém Windows Vista 32 Bit;c:\windows\system32\DRIVERS\NETwLv32.sys [2010-08-16 6637056]
S3 SBFWIMCL;Sunbelt Software Firewall NDIS IM Filter Miniport;c:\windows\system32\DRIVERS\sbfwim.sys [2008-06-21 65576]
S3 seehcri;Sony Ericsson seehcri Device Driver;c:\windows\system32\DRIVERS\seehcri.sys [2010-10-26 27632]
S3 skfiltv;skfiltv;c:\windows\system32\drivers\skfiltv.sys [2008-04-10 20480]
S3 winbondcir;Winbond IR Transceiver;c:\windows\system32\DRIVERS\winbondcir.sys [2008-01-24 43008]
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost]
bthsvcs REG_MULTI_SZ BthServ
LocalServiceAndNoImpersonation REG_MULTI_SZ FontCache
.
Obsah adresáře 'Naplánované úlohy'
2010-12-07 c:\windows\Tasks\Google Software Updater.job
- c:\program files\Google\Common\Google Updater\GoogleUpdaterService.exe [2009-02-26 11:57]
2010-12-05 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
- c:\program files\Google\Update\GoogleUpdate.exe [2009-04-18 11:58]
2010-12-07 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
- c:\program files\Google\Update\GoogleUpdate.exe [2009-04-18 11:58]
2010-12-07 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1860964676-2034717189-1328423215-1003Core.job
- c:\users\Host\AppData\Local\Google\Update\GoogleUpdate.exe [2009-04-16 18:59]
2010-12-07 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1860964676-2034717189-1328423215-1003UA.job
- c:\users\Host\AppData\Local\Google\Update\GoogleUpdate.exe [2009-04-16 18:59]
2010-12-07 c:\windows\Tasks\User_Feed_Synchronization-{F16BC65A-19BE-4A32-B7F4-AD087B0EEFBC}.job
- c:\windows\system32\msfeedssync.exe [2010-10-15 04:25]
.
.
------- Doplňkový sken -------
.
IE: &Save Flash In This Page by Flash Saver - c:\progra~1\Flash Saver\save.htm
IE: Add to Google Photos Screensa&ver - c:\windows\system32\GPhotos.scr/200
IE: E&xportovat do aplikace Microsoft Excel - c:\progra~1\MICROS~2\Office10\EXCEL.EXE/3000
IE: Send image to &Bluetooth Device... - c:\program files\WIDCOMM\Bluetooth Software\btsendto_ie_ctx.htm
IE: Send page to &Bluetooth Device... - c:\program files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
IE: Stáhnout Star Downloaderem
IE: Zobrazit originál
Trusted Zone: im-history.com
DPF: {94E5218F-9737-4FC2-8457-567B1FF23DC0} - hxxp://utilities.pcpitstop.com/DiskMD3/DiskMD3Ctrl.dll
.
- - - - NEPLATNÉ POLOŽKY ODSTRANĚNÉ Z REGISTRU - - - -
MSConfigStartUp-MagicSpeedBooster - c:\program files\Smart PC Solutions\Magic Speed\MagicSpeedBooster.exe
MSConfigStartUp-PC Pitstop Diskmd3 Reminder - c:\program files\PCPitstop\DiskMD3\Reminder-Diskmd3.exe
**************************************************************************
catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer,
http://www.gmer.net
Rootkit scan 2010-12-07 21:48
Windows 6.0.6002 Service Pack 2 NTFS
skenování skrytých procesů ...
skenování skrytých položek 'Po spuštění' ...
skenování skrytých souborů ...
sken byl úspešně dokončen
skryté soubory: 0
**************************************************************************
.
--------------------- ZAMKNUTÉ KLÍČE V REGISTRU ---------------------
[HKEY_USERS\S-1-5-21-1860964676-2034717189-1328423215-1000\Software\SecuROM\!CAUTION! NEVER A OR CHANGE ANY KEY*]
"??"=hex:cd,05,1a,52,81,27,07,9e,b4,e4,f8,d4,3a,5f,75,b8,cb,4a,9e,1b,fa,ec,f3,
77,74,9b,ee,ef,a5,52,d9,d1,62,e9,6c,76,86,de,e1,48,0b,9a,b5,74,74,96,79,b7,\
"??"=hex:ce,4a,71,db,ea,06,4e,4f,aa,b0,c9,b0,56,87,f8,4a
[HKEY_USERS\S-1-5-21-1860964676-2034717189-1328423215-1000\Software\SecuROM\License information*]
"datasecu"=hex:39,30,6e,66,e1,99,7b,a4,d4,c5,b7,c6,ec,be,d5,35,31,b7,a1,51,ea,
52,f7,6b,5d,bf,08,6c,ae,ed,d7,ed,fd,99,60,c2,18,d7,0a,7b,6e,34,a3,67,54,40,\
"rkeysecu"=hex:d3,f5,ee,d6,db,01,99,a2,47,8d,cb,ce,c0,68,a5,42
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0000\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0001\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0002\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0003\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0004\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0005\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0006\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
"MSCurrentCountry"=dword:00000000
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0007\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0008\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0009\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0010\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0011\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0012\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
Celkový čas: 2010-12-07 21:52:56
ComboFix-quarantined-files.txt 2010-12-07 20:52
Před spuštěním: Volných bajtů: 34 080 694 272
Po spuštění: Volných bajtů: 34 102 235 136
- - End Of File - - ED0BEC5D9100664CA0B4101AFE3C0A08
), jinak mám a vždy jsem měl origo system.