dobry den ja by sem chtěl vyřešit tuto zaležitost na viry
Napsal: 04 led 2011 14:49
ComboFix 11-01-03.04 - Genius 04.01.2011 14:38:25.1.1 - x86
Microsoft Windows 7 Ultimate 6.1.7600.0.1250.420.1033.18.1279.455 [GMT 1:00]
Spuštěný z: c:\users\Genius\Desktop\ComboFix.exe
AV: ESET NOD32 Antivirus 4.2 *Disabled/Updated* {77DEAFED-8149-104B-25A1-21771CA47CD1}
SP: ESET NOD32 Antivirus 4.2 *Disabled/Updated* {CCBF4E09-A773-1FC5-1F11-1A056723366C}
SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.
((((((((((((((((((((((((((((((((((((((( Ostatní výmazy )))))))))))))))))))))))))))))))))))))))))))))))))
.
c:\users\Genius\AppData\Roaming\Local
c:\users\Genius\AppData\Roaming\Local\Temp\DDM\Settings\0.ddi
c:\users\Genius\AppData\Roaming\Local\Temp\DDM\Settings\1.ddi
c:\users\Genius\AppData\Roaming\Local\Temp\DDM\Settings\2.ddi
c:\users\Genius\AppData\Roaming\Local\Temp\DDM\Settings\fbdlohmpfksf.avi.ddr
c:\users\Genius\AppData\Roaming\Local\Temp\DDM\Settings\Inception_Trailer_592.divx.ddr
c:\users\Genius\AppData\Roaming\Local\Temp\DDM\Settings\settings.ddi
c:\users\Genius\AppData\Roaming\Local\Temp\DDM\Settings\Temporary Downloaded Files\fbdlohmpfksf.avi
c:\users\Genius\AppData\Roaming\Local\Temp\DDM\Settings\Temporary Downloaded Files\Inception_Trailer_592.divx
c:\users\Genius\AppData\Roaming\Local\Temp\DDM\Settings\Temporary Downloaded Files\updlafxbmbkz.avi.ddp
c:\users\Genius\AppData\Roaming\Local\Temp\DDM\Settings\updlafxbmbkz.avi.ddr
.
((((((((((((((((((((((((( Soubory vytvořené od 2010-12-04 do 2011-01-04 )))))))))))))))))))))))))))))))
.
2011-01-04 13:44 . 2011-01-04 13:44 -------- d-----w- c:\users\Default\AppData\Local\temp
2011-01-04 13:20 . 2010-11-16 20:01 6273872 ----a-w- c:\programdata\Microsoft\Windows Defender\Definition Updates\{C126FDC7-0C00-46B3-8DF1-E4A918ED8693}\mpengine.dll
2011-01-03 20:09 . 2011-01-03 20:24 -------- d-----w- c:\program files\Valve
2011-01-03 18:25 . 2011-01-03 18:25 -------- d-----w- c:\program files\Common Files\Skype
2011-01-03 18:25 . 2011-01-03 18:25 -------- d-----r- c:\program files\Skype
2011-01-03 18:25 . 2011-01-03 18:25 -------- d-----w- c:\programdata\Skype
2011-01-03 14:31 . 2011-01-03 17:41 -------- d-----w- C:\Fraps
2011-01-03 13:52 . 2010-11-30 16:07 25088 ----a-w- c:\windows\system32\drivers\teamviewervpn.sys
2011-01-03 13:52 . 2011-01-03 13:52 -------- d-----w- c:\program files\TeamViewer
2011-01-02 20:39 . 2011-01-02 20:39 -------- d-----w- c:\program files\Rockstar Games
2011-01-02 20:18 . 2011-01-02 20:18 -------- d-----w- c:\program files\uTorrent
2011-01-02 18:42 . 2011-01-02 18:49 -------- d-----w- c:\program files\Common Files\Steam
2011-01-02 18:42 . 2011-01-04 13:18 -------- d-----w- c:\program files\Steam
2011-01-02 16:36 . 2011-01-03 18:05 -------- d-----w- c:\programdata\TrackMania
2011-01-02 16:31 . 2011-01-02 16:33 -------- d-----w- c:\program files\TmNationsForever
2011-01-02 16:18 . 2011-01-02 16:18 -------- d-----w- c:\program files\Sega
2011-01-02 11:53 . 2011-01-02 19:01 -------- d-----w- c:\program files\GTA San Andreas
2011-01-02 11:08 . 2011-01-02 14:38 -------- d-----w- c:\program files\America's Army
2011-01-02 09:24 . 2011-01-02 09:24 86016 ----a-w- c:\windows\system32\OpenAL32.dll
2011-01-02 09:24 . 2011-01-02 09:24 413696 ----a-w- c:\windows\system32\wrap_oal.dll
2011-01-02 09:24 . 2011-01-02 09:24 -------- d-----w- c:\program files\OpenAL
2011-01-02 09:06 . 2011-01-02 09:06 -------- d-----w- c:\program files\DAEMON Tools Toolbar
2011-01-02 09:05 . 2011-01-02 09:06 -------- d-----w- c:\program files\DAEMON Tools Lite
2011-01-02 09:05 . 2011-01-02 09:05 -------- d-----w- c:\programdata\DAEMON Tools Lite
2011-01-02 08:46 . 2011-01-02 08:46 691696 ----a-w- c:\windows\system32\drivers\sptd.sys
2011-01-02 04:40 . 2011-01-03 17:58 -------- d-----w- c:\windows\system32\wbem\Performance
2011-01-02 04:34 . 2011-01-02 18:42 -------- d-----w- c:\users\Genius
2011-01-02 04:33 . 2011-01-02 04:33 -------- d-----w- C:\Recovery
2011-01-02 04:20 . 2011-01-02 04:33 -------- d-----w- c:\windows\Panther
2011-01-01 22:17 . 2011-01-01 22:17 -------- d-----w- c:\windows\system32\Wat
2011-01-01 21:57 . 2009-09-10 05:52 257024 ----a-w- c:\windows\system32\msv1_0.dll
2011-01-01 21:55 . 2009-11-25 11:47 99176 ----a-w- c:\windows\system32\PresentationHostProxy.dll
2011-01-01 21:55 . 2009-11-25 11:47 49472 ----a-w- c:\windows\system32\netfxperf.dll
2011-01-01 21:55 . 2009-11-25 11:47 297808 ----a-w- c:\windows\system32\mscoree.dll
2011-01-01 21:55 . 2009-11-25 11:47 295264 ----a-w- c:\windows\system32\PresentationHost.exe
2011-01-01 21:55 . 2009-11-25 11:47 1130824 ----a-w- c:\windows\system32\dfshim.dll
2011-01-01 21:47 . 2010-02-11 07:10 293376 ----a-w- c:\windows\system32\browserchoice.exe
2011-01-01 21:46 . 2010-03-04 03:57 190976 ----a-w- c:\windows\system32\drivers\ks.sys
2011-01-01 21:41 . 2009-10-02 04:06 728648 ----a-w- c:\windows\system32\drivers\dxgkrnl.sys
2011-01-01 21:41 . 2009-09-03 07:04 1320960 ----a-w- c:\windows\system32\CertEnroll.dll
2011-01-01 21:41 . 2009-08-19 07:20 507568 ----a-w- c:\windows\system32\winload.exe
2011-01-01 21:41 . 2009-08-19 07:20 442920 ----a-w- c:\windows\system32\winresume.exe
2011-01-01 21:41 . 2009-12-11 07:44 133720 ----a-w- c:\windows\system32\drivers\ksecpkg.sys
2011-01-01 21:41 . 2009-12-11 07:38 1037312 ----a-w- c:\windows\system32\lsasrv.dll
2011-01-01 21:40 . 2010-06-19 06:33 3899784 ----a-w- c:\windows\system32\ntoskrnl.exe
2011-01-01 21:40 . 2010-06-19 06:33 3955080 ----a-w- c:\windows\system32\ntkrnlpa.exe
2011-01-01 21:40 . 2010-08-04 06:18 641536 ----a-w- c:\windows\system32\CPFilters.dll
2011-01-01 21:40 . 2010-08-04 06:17 417792 ----a-w- c:\windows\system32\msdri.dll
2011-01-01 21:40 . 2010-08-04 06:15 204288 ----a-w- c:\windows\system32\MSNP.ax
2011-01-01 21:40 . 2010-08-04 06:15 199680 ----a-w- c:\windows\system32\mpg2splt.ax
2011-01-01 21:40 . 2009-12-13 09:30 465408 ----a-w- c:\windows\system32\psisdecd.dll
2011-01-01 21:40 . 2010-08-31 04:32 954752 ----a-w- c:\windows\system32\mfc40.dll
2011-01-01 21:40 . 2010-08-31 04:32 954288 ----a-w- c:\windows\system32\mfc40u.dll
2011-01-01 21:38 . 2010-07-29 06:30 197632 ----a-w- c:\windows\system32\ir32_32.dll
2011-01-01 21:38 . 2010-07-29 06:30 82944 ----a-w- c:\windows\system32\iccvid.dll
2011-01-01 21:38 . 2010-08-26 04:39 109056 ----a-w- c:\windows\system32\t2embed.dll
2011-01-01 21:38 . 2010-10-12 04:25 516096 ----a-w- c:\program files\Windows Mail\wab.exe
2011-01-01 21:38 . 2010-08-21 05:36 224256 ----a-w- c:\windows\system32\schannel.dll
2011-01-01 21:38 . 2009-08-29 06:57 34816 ----a-w- c:\windows\system32\msasn1.dll
2011-01-01 21:37 . 2010-06-19 06:23 37376 ----a-w- c:\windows\system32\rtutils.dll
2011-01-01 21:37 . 2010-06-08 06:02 1233920 ----a-w- c:\windows\system32\msxml3.dll
2011-01-01 21:37 . 2010-03-04 07:33 1619968 ----a-w- c:\program files\Windows Mail\msoe.dll
2011-01-01 21:37 . 2010-03-04 07:33 740864 ----a-w- c:\windows\system32\inetcomm.dll
2011-01-01 21:37 . 2010-03-24 06:37 1286456 ----a-w- c:\windows\system32\ntdll.dll
2011-01-01 21:37 . 2010-08-21 05:33 530432 ----a-w- c:\windows\system32\comctl32.dll
2011-01-01 21:36 . 2010-03-05 07:42 67584 ----a-w- c:\windows\system32\asycfilt.dll
2011-01-01 21:36 . 2010-09-01 04:26 164864 ----a-w- c:\program files\Windows Media Player\wmplayer.exe
2011-01-01 21:36 . 2010-09-01 04:23 12625408 ----a-w- c:\windows\system32\wmploc.DLL
2011-01-01 21:36 . 2010-07-13 05:22 26504 ----a-w- c:\windows\system32\drivers\Diskdump.sys
2011-01-01 21:36 . 2009-12-08 11:32 292864 ----a-w- c:\windows\system32\apphelp.dll
2011-01-01 21:33 . 2010-10-16 04:41 101760 ----a-w- c:\windows\system32\consent.exe
2011-01-01 21:26 . 2009-12-29 06:55 172032 ----a-w- c:\windows\system32\wintrust.dll
2011-01-01 21:26 . 2010-10-20 03:00 2327552 ----a-w- c:\windows\system32\win32k.sys
2011-01-01 21:25 . 2010-01-09 06:52 132608 ----a-w- c:\windows\system32\cabview.dll
2011-01-01 21:22 . 2011-01-01 21:22 -------- d-----w- c:\program files\CCleaner
2011-01-01 21:21 . 2009-07-20 23:48 485920 ----a-w- c:\windows\system32\NVUNINST.EXE
2011-01-01 21:12 . 2011-01-01 21:12 -------- d-----w- c:\program files\VideoLAN
2011-01-01 21:04 . 2011-01-01 21:04 -------- d-----w- c:\program files\Opera
2011-01-01 21:02 . 2011-01-01 21:02 -------- d-----w- c:\windows\system32\Adobe
2011-01-01 20:59 . 2011-01-02 08:39 -------- d-----w- c:\program files\Common Files\PX Storage Engine
2011-01-01 20:58 . 2011-01-01 20:58 48648 ----a-w- c:\programdata\Microsoft\eHome\Packages\MCEClientUX\UpdateableMarkup\Markup.dll
2011-01-01 20:58 . 2011-01-01 20:58 484160 ----a-w- c:\programdata\Microsoft\eHome\Packages\MCESpotlight\MCESpotlight\SpotlightResources.dll
2011-01-01 20:56 . 2011-01-01 20:59 -------- d-----w- c:\program files\Google
2011-01-01 20:56 . 2011-01-02 08:39 -------- d-----w- c:\program files\DivX
2011-01-01 20:56 . 2011-01-02 08:37 -------- d-----w- c:\programdata\DivX
2011-01-01 20:51 . 2010-10-16 18:55 888424 ----a-w- c:\windows\system32\nvdispco322050.dll
2011-01-01 20:51 . 2010-10-16 18:55 813672 ----a-w- c:\windows\system32\nvgenco322030.dll
2011-01-01 20:51 . 2010-10-16 18:55 57960 ----a-w- c:\windows\system32\OpenCL.dll
2011-01-01 20:51 . 2010-10-16 18:55 4837480 ----a-w- c:\windows\system32\nvcuda.dll
2011-01-01 20:51 . 2010-10-16 18:55 2912360 ----a-w- c:\windows\system32\nvcuvid.dll
2011-01-01 20:51 . 2010-10-16 18:55 2666600 ----a-w- c:\windows\system32\nvcuvenc.dll
2011-01-01 20:51 . 2010-10-16 18:55 1719912 ----a-w- c:\windows\system32\nvapi.dll
2011-01-01 20:51 . 2010-10-16 18:55 14899816 ----a-w- c:\windows\system32\nvoglv32.dll
2011-01-01 20:51 . 2010-10-16 18:55 13019752 ----a-w- c:\windows\system32\nvcompiler.dll
2011-01-01 20:51 . 2010-10-16 18:55 10084360 ----a-w- c:\windows\system32\drivers\nvlddmkm.sys
2011-01-01 20:51 . 2010-10-16 18:55 10023528 ----a-w- c:\windows\system32\nvd3dum.dll
2011-01-01 20:50 . 2011-01-01 20:50 -------- d-----w- C:\NVIDIA
2011-01-01 20:44 . 2007-04-12 15:07 356352 ----a-w- c:\windows\system32\nvudisp.exe
2011-01-01 20:18 . 2011-01-01 20:18 -------- d-----w- c:\program files\SystemRequirementsLab
2011-01-01 19:53 . 2010-10-19 18:41 222080 ------w- c:\windows\system32\MpSigStub.exe
2011-01-01 19:52 . 2011-01-02 10:20 -------- d-----w- c:\programdata\NVIDIA
2011-01-01 19:52 . 2011-01-03 18:25 -------- d-sh--w- c:\windows\Installer
2011-01-01 19:52 . 2011-01-01 20:51 -------- d-----w- c:\programdata\NVIDIA Corporation
2011-01-01 19:51 . 2011-01-01 20:52 -------- d-----w- c:\program files\NVIDIA Corporation
2011-01-01 19:47 . 2011-01-01 21:00 -------- d-----w- c:\program files\Mozilla Firefox 4.0 Beta 8
2011-01-01 19:47 . 2011-01-01 19:47 -------- d-----w- c:\windows\system32\Macromed
2011-01-01 19:10 . 2011-01-02 04:20 -------- d-----w- C:\Boot
2011-01-01 14:02 . 2008-08-20 17:35 122880 ----a-w- c:\windows\system32\NVCOSMB.DLL
2011-01-01 14:02 . 2008-08-20 17:35 453152 ----a-w- c:\windows\system32\nvusmb.exe
2010-12-26 19:32 . 2010-12-26 19:32 -------- d-----r- C:\MSOCache
2010-12-24 08:15 . 2010-12-24 08:15 86016 ----a-w- c:\windows\system32\frapsvid.dll
.
(((((((((((((((((((((((((((((((((((((((( Find3M výpis ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2010-11-02 04:39 . 2011-01-01 21:39 749056 ----a-w- c:\windows\system32\schedsvc.dll
2010-11-02 04:34 . 2011-01-01 21:39 179712 ----a-w- c:\windows\system32\schtasks.exe
2010-10-22 11:43 . 2010-10-22 11:43 499712 ----a-w- c:\windows\system32\msvcp71.dll
2010-10-22 11:43 . 2010-10-22 11:43 348160 ----a-w- c:\windows\system32\msvcr71.dll
2010-10-16 20:42 . 2010-10-16 20:42 66664 ----a-w- c:\windows\system32\nvshext.dll
2010-10-16 18:55 . 2011-01-01 20:51 10920 ----a-w- c:\windows\system32\drivers\nvBridge.kmd
2010-10-16 11:42 . 2010-10-16 11:42 600680 ----a-w- c:\windows\system32\nvvsvc.exe
2010-10-16 11:42 . 2010-10-16 11:42 110696 ----a-w- c:\windows\system32\nvmctray.dll
2010-10-16 11:42 . 2010-10-16 11:42 3420776 ----a-w- c:\windows\system32\nvcpl.dll
2010-10-16 11:42 . 2010-10-16 11:42 2079336 ----a-w- c:\windows\system32\nvsvc.dll
.
(((((((((((((((((((((((((((((((((( Spouštěcí body v registru )))))))))))))))))))))))))))))))))))))))))))))
.
.
*Poznámka* prázdné záznamy a legitimní výchozí údaje nejsou zobrazeny.
REGEDIT4
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"DAEMON Tools Lite"="c:\program files\DAEMON Tools Lite\DTLite.exe" [2010-04-01 357696]
"Steam"="c:\program files\Steam\Steam.exe" [2011-01-02 1242448]
"uTorrent"="c:\program files\uTorrent\uTorrent.exe" [2011-01-02 396152]
"Skype"="c:\program files\Skype\Phone\Skype.exe" [2010-12-03 14944136]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"RtHDVCpl"="c:\program files\Realtek\Audio\HDA\RtHDVCpl.exe" [2010-11-30 9914984]
"egui"="c:\program files\ESET\ESET NOD32 Antivirus\egui.exe" [2010-11-18 2219184]
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorAdmin"= 5 (0x5)
"ConsentPromptBehaviorUser"= 3 (0x3)
"EnableUIADesktopToggle"= 0 (0x0)
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\drivers32]
"aux"=wdmaud.drv
R2 gupdate;Služba Google Update (gupdate);c:\program files\Google\Update\GoogleUpdate.exe [2011-01-01 135664]
R3 WatAdminSvc;Windows Activation Technologies Service;c:\windows\system32\Wat\WatAdminSvc.exe [2011-01-01 1343400]
S0 sptd;sptd;c:\windows\System32\Drivers\sptd.sys [2011-01-02 691696]
S1 ehdrv;ehdrv;c:\windows\system32\DRIVERS\ehdrv.sys [2010-07-29 115008]
S2 eamonm;eamonm;c:\windows\system32\DRIVERS\eamonm.sys [2010-09-03 137144]
S2 ekrn;ESET Service;c:\program files\ESET\ESET NOD32 Antivirus\ekrn.exe [2010-11-18 810144]
S2 epfwwfpr;epfwwfpr;c:\windows\system32\DRIVERS\epfwwfpr.sys [2010-07-29 96920]
S2 TeamViewer6;TeamViewer 6;c:\program files\TeamViewer\Version6\TeamViewer_Service.exe [2010-12-07 2228008]
S3 RTL8187B;Realtek RTL8187B Wireless 802.11b/g 54Mbps USB 2.0 Network Adapter;c:\windows\system32\DRIVERS\RTL8187B.sys [2009-07-13 347136]
S3 teamviewervpn;TeamViewer VPN Adapter;c:\windows\system32\DRIVERS\teamviewervpn.sys [2010-11-30 25088]
.
Obsah adresáře 'Naplánované úlohy'
2011-01-04 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
- c:\program files\Google\Update\GoogleUpdate.exe [2011-01-01 20:56]
2011-01-03 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
- c:\program files\Google\Update\GoogleUpdate.exe [2011-01-01 20:56]
.
.
------- Doplňkový sken -------
.
uStart Page = hxxp://zapni.tv/
FF - ProfilePath - c:\users\Genius\AppData\Roaming\Mozilla\Firefox\Profiles\ifsxsber.default\
.
.
--------------------- ZAMKNUTÉ KLÍČE V REGISTRU ---------------------
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\PCW\Security]
@Denied: (Full) (Everyone)
.
Celkový čas: 2011-01-04 14:46:02
ComboFix-quarantined-files.txt 2011-01-04 13:46
Před spuštěním: 39 166 279 680 bytes free
Po spuštění: 39 193 309 184 bytes free
- - End Of File - - 747381F3401060F4A0554DBA9D3DCDCE
Microsoft Windows 7 Ultimate 6.1.7600.0.1250.420.1033.18.1279.455 [GMT 1:00]
Spuštěný z: c:\users\Genius\Desktop\ComboFix.exe
AV: ESET NOD32 Antivirus 4.2 *Disabled/Updated* {77DEAFED-8149-104B-25A1-21771CA47CD1}
SP: ESET NOD32 Antivirus 4.2 *Disabled/Updated* {CCBF4E09-A773-1FC5-1F11-1A056723366C}
SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.
((((((((((((((((((((((((((((((((((((((( Ostatní výmazy )))))))))))))))))))))))))))))))))))))))))))))))))
.
c:\users\Genius\AppData\Roaming\Local
c:\users\Genius\AppData\Roaming\Local\Temp\DDM\Settings\0.ddi
c:\users\Genius\AppData\Roaming\Local\Temp\DDM\Settings\1.ddi
c:\users\Genius\AppData\Roaming\Local\Temp\DDM\Settings\2.ddi
c:\users\Genius\AppData\Roaming\Local\Temp\DDM\Settings\fbdlohmpfksf.avi.ddr
c:\users\Genius\AppData\Roaming\Local\Temp\DDM\Settings\Inception_Trailer_592.divx.ddr
c:\users\Genius\AppData\Roaming\Local\Temp\DDM\Settings\settings.ddi
c:\users\Genius\AppData\Roaming\Local\Temp\DDM\Settings\Temporary Downloaded Files\fbdlohmpfksf.avi
c:\users\Genius\AppData\Roaming\Local\Temp\DDM\Settings\Temporary Downloaded Files\Inception_Trailer_592.divx
c:\users\Genius\AppData\Roaming\Local\Temp\DDM\Settings\Temporary Downloaded Files\updlafxbmbkz.avi.ddp
c:\users\Genius\AppData\Roaming\Local\Temp\DDM\Settings\updlafxbmbkz.avi.ddr
.
((((((((((((((((((((((((( Soubory vytvořené od 2010-12-04 do 2011-01-04 )))))))))))))))))))))))))))))))
.
2011-01-04 13:44 . 2011-01-04 13:44 -------- d-----w- c:\users\Default\AppData\Local\temp
2011-01-04 13:20 . 2010-11-16 20:01 6273872 ----a-w- c:\programdata\Microsoft\Windows Defender\Definition Updates\{C126FDC7-0C00-46B3-8DF1-E4A918ED8693}\mpengine.dll
2011-01-03 20:09 . 2011-01-03 20:24 -------- d-----w- c:\program files\Valve
2011-01-03 18:25 . 2011-01-03 18:25 -------- d-----w- c:\program files\Common Files\Skype
2011-01-03 18:25 . 2011-01-03 18:25 -------- d-----r- c:\program files\Skype
2011-01-03 18:25 . 2011-01-03 18:25 -------- d-----w- c:\programdata\Skype
2011-01-03 14:31 . 2011-01-03 17:41 -------- d-----w- C:\Fraps
2011-01-03 13:52 . 2010-11-30 16:07 25088 ----a-w- c:\windows\system32\drivers\teamviewervpn.sys
2011-01-03 13:52 . 2011-01-03 13:52 -------- d-----w- c:\program files\TeamViewer
2011-01-02 20:39 . 2011-01-02 20:39 -------- d-----w- c:\program files\Rockstar Games
2011-01-02 20:18 . 2011-01-02 20:18 -------- d-----w- c:\program files\uTorrent
2011-01-02 18:42 . 2011-01-02 18:49 -------- d-----w- c:\program files\Common Files\Steam
2011-01-02 18:42 . 2011-01-04 13:18 -------- d-----w- c:\program files\Steam
2011-01-02 16:36 . 2011-01-03 18:05 -------- d-----w- c:\programdata\TrackMania
2011-01-02 16:31 . 2011-01-02 16:33 -------- d-----w- c:\program files\TmNationsForever
2011-01-02 16:18 . 2011-01-02 16:18 -------- d-----w- c:\program files\Sega
2011-01-02 11:53 . 2011-01-02 19:01 -------- d-----w- c:\program files\GTA San Andreas
2011-01-02 11:08 . 2011-01-02 14:38 -------- d-----w- c:\program files\America's Army
2011-01-02 09:24 . 2011-01-02 09:24 86016 ----a-w- c:\windows\system32\OpenAL32.dll
2011-01-02 09:24 . 2011-01-02 09:24 413696 ----a-w- c:\windows\system32\wrap_oal.dll
2011-01-02 09:24 . 2011-01-02 09:24 -------- d-----w- c:\program files\OpenAL
2011-01-02 09:06 . 2011-01-02 09:06 -------- d-----w- c:\program files\DAEMON Tools Toolbar
2011-01-02 09:05 . 2011-01-02 09:06 -------- d-----w- c:\program files\DAEMON Tools Lite
2011-01-02 09:05 . 2011-01-02 09:05 -------- d-----w- c:\programdata\DAEMON Tools Lite
2011-01-02 08:46 . 2011-01-02 08:46 691696 ----a-w- c:\windows\system32\drivers\sptd.sys
2011-01-02 04:40 . 2011-01-03 17:58 -------- d-----w- c:\windows\system32\wbem\Performance
2011-01-02 04:34 . 2011-01-02 18:42 -------- d-----w- c:\users\Genius
2011-01-02 04:33 . 2011-01-02 04:33 -------- d-----w- C:\Recovery
2011-01-02 04:20 . 2011-01-02 04:33 -------- d-----w- c:\windows\Panther
2011-01-01 22:17 . 2011-01-01 22:17 -------- d-----w- c:\windows\system32\Wat
2011-01-01 21:57 . 2009-09-10 05:52 257024 ----a-w- c:\windows\system32\msv1_0.dll
2011-01-01 21:55 . 2009-11-25 11:47 99176 ----a-w- c:\windows\system32\PresentationHostProxy.dll
2011-01-01 21:55 . 2009-11-25 11:47 49472 ----a-w- c:\windows\system32\netfxperf.dll
2011-01-01 21:55 . 2009-11-25 11:47 297808 ----a-w- c:\windows\system32\mscoree.dll
2011-01-01 21:55 . 2009-11-25 11:47 295264 ----a-w- c:\windows\system32\PresentationHost.exe
2011-01-01 21:55 . 2009-11-25 11:47 1130824 ----a-w- c:\windows\system32\dfshim.dll
2011-01-01 21:47 . 2010-02-11 07:10 293376 ----a-w- c:\windows\system32\browserchoice.exe
2011-01-01 21:46 . 2010-03-04 03:57 190976 ----a-w- c:\windows\system32\drivers\ks.sys
2011-01-01 21:41 . 2009-10-02 04:06 728648 ----a-w- c:\windows\system32\drivers\dxgkrnl.sys
2011-01-01 21:41 . 2009-09-03 07:04 1320960 ----a-w- c:\windows\system32\CertEnroll.dll
2011-01-01 21:41 . 2009-08-19 07:20 507568 ----a-w- c:\windows\system32\winload.exe
2011-01-01 21:41 . 2009-08-19 07:20 442920 ----a-w- c:\windows\system32\winresume.exe
2011-01-01 21:41 . 2009-12-11 07:44 133720 ----a-w- c:\windows\system32\drivers\ksecpkg.sys
2011-01-01 21:41 . 2009-12-11 07:38 1037312 ----a-w- c:\windows\system32\lsasrv.dll
2011-01-01 21:40 . 2010-06-19 06:33 3899784 ----a-w- c:\windows\system32\ntoskrnl.exe
2011-01-01 21:40 . 2010-06-19 06:33 3955080 ----a-w- c:\windows\system32\ntkrnlpa.exe
2011-01-01 21:40 . 2010-08-04 06:18 641536 ----a-w- c:\windows\system32\CPFilters.dll
2011-01-01 21:40 . 2010-08-04 06:17 417792 ----a-w- c:\windows\system32\msdri.dll
2011-01-01 21:40 . 2010-08-04 06:15 204288 ----a-w- c:\windows\system32\MSNP.ax
2011-01-01 21:40 . 2010-08-04 06:15 199680 ----a-w- c:\windows\system32\mpg2splt.ax
2011-01-01 21:40 . 2009-12-13 09:30 465408 ----a-w- c:\windows\system32\psisdecd.dll
2011-01-01 21:40 . 2010-08-31 04:32 954752 ----a-w- c:\windows\system32\mfc40.dll
2011-01-01 21:40 . 2010-08-31 04:32 954288 ----a-w- c:\windows\system32\mfc40u.dll
2011-01-01 21:38 . 2010-07-29 06:30 197632 ----a-w- c:\windows\system32\ir32_32.dll
2011-01-01 21:38 . 2010-07-29 06:30 82944 ----a-w- c:\windows\system32\iccvid.dll
2011-01-01 21:38 . 2010-08-26 04:39 109056 ----a-w- c:\windows\system32\t2embed.dll
2011-01-01 21:38 . 2010-10-12 04:25 516096 ----a-w- c:\program files\Windows Mail\wab.exe
2011-01-01 21:38 . 2010-08-21 05:36 224256 ----a-w- c:\windows\system32\schannel.dll
2011-01-01 21:38 . 2009-08-29 06:57 34816 ----a-w- c:\windows\system32\msasn1.dll
2011-01-01 21:37 . 2010-06-19 06:23 37376 ----a-w- c:\windows\system32\rtutils.dll
2011-01-01 21:37 . 2010-06-08 06:02 1233920 ----a-w- c:\windows\system32\msxml3.dll
2011-01-01 21:37 . 2010-03-04 07:33 1619968 ----a-w- c:\program files\Windows Mail\msoe.dll
2011-01-01 21:37 . 2010-03-04 07:33 740864 ----a-w- c:\windows\system32\inetcomm.dll
2011-01-01 21:37 . 2010-03-24 06:37 1286456 ----a-w- c:\windows\system32\ntdll.dll
2011-01-01 21:37 . 2010-08-21 05:33 530432 ----a-w- c:\windows\system32\comctl32.dll
2011-01-01 21:36 . 2010-03-05 07:42 67584 ----a-w- c:\windows\system32\asycfilt.dll
2011-01-01 21:36 . 2010-09-01 04:26 164864 ----a-w- c:\program files\Windows Media Player\wmplayer.exe
2011-01-01 21:36 . 2010-09-01 04:23 12625408 ----a-w- c:\windows\system32\wmploc.DLL
2011-01-01 21:36 . 2010-07-13 05:22 26504 ----a-w- c:\windows\system32\drivers\Diskdump.sys
2011-01-01 21:36 . 2009-12-08 11:32 292864 ----a-w- c:\windows\system32\apphelp.dll
2011-01-01 21:33 . 2010-10-16 04:41 101760 ----a-w- c:\windows\system32\consent.exe
2011-01-01 21:26 . 2009-12-29 06:55 172032 ----a-w- c:\windows\system32\wintrust.dll
2011-01-01 21:26 . 2010-10-20 03:00 2327552 ----a-w- c:\windows\system32\win32k.sys
2011-01-01 21:25 . 2010-01-09 06:52 132608 ----a-w- c:\windows\system32\cabview.dll
2011-01-01 21:22 . 2011-01-01 21:22 -------- d-----w- c:\program files\CCleaner
2011-01-01 21:21 . 2009-07-20 23:48 485920 ----a-w- c:\windows\system32\NVUNINST.EXE
2011-01-01 21:12 . 2011-01-01 21:12 -------- d-----w- c:\program files\VideoLAN
2011-01-01 21:04 . 2011-01-01 21:04 -------- d-----w- c:\program files\Opera
2011-01-01 21:02 . 2011-01-01 21:02 -------- d-----w- c:\windows\system32\Adobe
2011-01-01 20:59 . 2011-01-02 08:39 -------- d-----w- c:\program files\Common Files\PX Storage Engine
2011-01-01 20:58 . 2011-01-01 20:58 48648 ----a-w- c:\programdata\Microsoft\eHome\Packages\MCEClientUX\UpdateableMarkup\Markup.dll
2011-01-01 20:58 . 2011-01-01 20:58 484160 ----a-w- c:\programdata\Microsoft\eHome\Packages\MCESpotlight\MCESpotlight\SpotlightResources.dll
2011-01-01 20:56 . 2011-01-01 20:59 -------- d-----w- c:\program files\Google
2011-01-01 20:56 . 2011-01-02 08:39 -------- d-----w- c:\program files\DivX
2011-01-01 20:56 . 2011-01-02 08:37 -------- d-----w- c:\programdata\DivX
2011-01-01 20:51 . 2010-10-16 18:55 888424 ----a-w- c:\windows\system32\nvdispco322050.dll
2011-01-01 20:51 . 2010-10-16 18:55 813672 ----a-w- c:\windows\system32\nvgenco322030.dll
2011-01-01 20:51 . 2010-10-16 18:55 57960 ----a-w- c:\windows\system32\OpenCL.dll
2011-01-01 20:51 . 2010-10-16 18:55 4837480 ----a-w- c:\windows\system32\nvcuda.dll
2011-01-01 20:51 . 2010-10-16 18:55 2912360 ----a-w- c:\windows\system32\nvcuvid.dll
2011-01-01 20:51 . 2010-10-16 18:55 2666600 ----a-w- c:\windows\system32\nvcuvenc.dll
2011-01-01 20:51 . 2010-10-16 18:55 1719912 ----a-w- c:\windows\system32\nvapi.dll
2011-01-01 20:51 . 2010-10-16 18:55 14899816 ----a-w- c:\windows\system32\nvoglv32.dll
2011-01-01 20:51 . 2010-10-16 18:55 13019752 ----a-w- c:\windows\system32\nvcompiler.dll
2011-01-01 20:51 . 2010-10-16 18:55 10084360 ----a-w- c:\windows\system32\drivers\nvlddmkm.sys
2011-01-01 20:51 . 2010-10-16 18:55 10023528 ----a-w- c:\windows\system32\nvd3dum.dll
2011-01-01 20:50 . 2011-01-01 20:50 -------- d-----w- C:\NVIDIA
2011-01-01 20:44 . 2007-04-12 15:07 356352 ----a-w- c:\windows\system32\nvudisp.exe
2011-01-01 20:18 . 2011-01-01 20:18 -------- d-----w- c:\program files\SystemRequirementsLab
2011-01-01 19:53 . 2010-10-19 18:41 222080 ------w- c:\windows\system32\MpSigStub.exe
2011-01-01 19:52 . 2011-01-02 10:20 -------- d-----w- c:\programdata\NVIDIA
2011-01-01 19:52 . 2011-01-03 18:25 -------- d-sh--w- c:\windows\Installer
2011-01-01 19:52 . 2011-01-01 20:51 -------- d-----w- c:\programdata\NVIDIA Corporation
2011-01-01 19:51 . 2011-01-01 20:52 -------- d-----w- c:\program files\NVIDIA Corporation
2011-01-01 19:47 . 2011-01-01 21:00 -------- d-----w- c:\program files\Mozilla Firefox 4.0 Beta 8
2011-01-01 19:47 . 2011-01-01 19:47 -------- d-----w- c:\windows\system32\Macromed
2011-01-01 19:10 . 2011-01-02 04:20 -------- d-----w- C:\Boot
2011-01-01 14:02 . 2008-08-20 17:35 122880 ----a-w- c:\windows\system32\NVCOSMB.DLL
2011-01-01 14:02 . 2008-08-20 17:35 453152 ----a-w- c:\windows\system32\nvusmb.exe
2010-12-26 19:32 . 2010-12-26 19:32 -------- d-----r- C:\MSOCache
2010-12-24 08:15 . 2010-12-24 08:15 86016 ----a-w- c:\windows\system32\frapsvid.dll
.
(((((((((((((((((((((((((((((((((((((((( Find3M výpis ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2010-11-02 04:39 . 2011-01-01 21:39 749056 ----a-w- c:\windows\system32\schedsvc.dll
2010-11-02 04:34 . 2011-01-01 21:39 179712 ----a-w- c:\windows\system32\schtasks.exe
2010-10-22 11:43 . 2010-10-22 11:43 499712 ----a-w- c:\windows\system32\msvcp71.dll
2010-10-22 11:43 . 2010-10-22 11:43 348160 ----a-w- c:\windows\system32\msvcr71.dll
2010-10-16 20:42 . 2010-10-16 20:42 66664 ----a-w- c:\windows\system32\nvshext.dll
2010-10-16 18:55 . 2011-01-01 20:51 10920 ----a-w- c:\windows\system32\drivers\nvBridge.kmd
2010-10-16 11:42 . 2010-10-16 11:42 600680 ----a-w- c:\windows\system32\nvvsvc.exe
2010-10-16 11:42 . 2010-10-16 11:42 110696 ----a-w- c:\windows\system32\nvmctray.dll
2010-10-16 11:42 . 2010-10-16 11:42 3420776 ----a-w- c:\windows\system32\nvcpl.dll
2010-10-16 11:42 . 2010-10-16 11:42 2079336 ----a-w- c:\windows\system32\nvsvc.dll
.
(((((((((((((((((((((((((((((((((( Spouštěcí body v registru )))))))))))))))))))))))))))))))))))))))))))))
.
.
*Poznámka* prázdné záznamy a legitimní výchozí údaje nejsou zobrazeny.
REGEDIT4
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"DAEMON Tools Lite"="c:\program files\DAEMON Tools Lite\DTLite.exe" [2010-04-01 357696]
"Steam"="c:\program files\Steam\Steam.exe" [2011-01-02 1242448]
"uTorrent"="c:\program files\uTorrent\uTorrent.exe" [2011-01-02 396152]
"Skype"="c:\program files\Skype\Phone\Skype.exe" [2010-12-03 14944136]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"RtHDVCpl"="c:\program files\Realtek\Audio\HDA\RtHDVCpl.exe" [2010-11-30 9914984]
"egui"="c:\program files\ESET\ESET NOD32 Antivirus\egui.exe" [2010-11-18 2219184]
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorAdmin"= 5 (0x5)
"ConsentPromptBehaviorUser"= 3 (0x3)
"EnableUIADesktopToggle"= 0 (0x0)
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\drivers32]
"aux"=wdmaud.drv
R2 gupdate;Služba Google Update (gupdate);c:\program files\Google\Update\GoogleUpdate.exe [2011-01-01 135664]
R3 WatAdminSvc;Windows Activation Technologies Service;c:\windows\system32\Wat\WatAdminSvc.exe [2011-01-01 1343400]
S0 sptd;sptd;c:\windows\System32\Drivers\sptd.sys [2011-01-02 691696]
S1 ehdrv;ehdrv;c:\windows\system32\DRIVERS\ehdrv.sys [2010-07-29 115008]
S2 eamonm;eamonm;c:\windows\system32\DRIVERS\eamonm.sys [2010-09-03 137144]
S2 ekrn;ESET Service;c:\program files\ESET\ESET NOD32 Antivirus\ekrn.exe [2010-11-18 810144]
S2 epfwwfpr;epfwwfpr;c:\windows\system32\DRIVERS\epfwwfpr.sys [2010-07-29 96920]
S2 TeamViewer6;TeamViewer 6;c:\program files\TeamViewer\Version6\TeamViewer_Service.exe [2010-12-07 2228008]
S3 RTL8187B;Realtek RTL8187B Wireless 802.11b/g 54Mbps USB 2.0 Network Adapter;c:\windows\system32\DRIVERS\RTL8187B.sys [2009-07-13 347136]
S3 teamviewervpn;TeamViewer VPN Adapter;c:\windows\system32\DRIVERS\teamviewervpn.sys [2010-11-30 25088]
.
Obsah adresáře 'Naplánované úlohy'
2011-01-04 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
- c:\program files\Google\Update\GoogleUpdate.exe [2011-01-01 20:56]
2011-01-03 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
- c:\program files\Google\Update\GoogleUpdate.exe [2011-01-01 20:56]
.
.
------- Doplňkový sken -------
.
uStart Page = hxxp://zapni.tv/
FF - ProfilePath - c:\users\Genius\AppData\Roaming\Mozilla\Firefox\Profiles\ifsxsber.default\
.
.
--------------------- ZAMKNUTÉ KLÍČE V REGISTRU ---------------------
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\PCW\Security]
@Denied: (Full) (Everyone)
.
Celkový čas: 2011-01-04 14:46:02
ComboFix-quarantined-files.txt 2011-01-04 13:46
Před spuštěním: 39 166 279 680 bytes free
Po spuštění: 39 193 309 184 bytes free
- - End Of File - - 747381F3401060F4A0554DBA9D3DCDCE