VIRY.CZ

Prosím o kontrolu logu..pc je zpomalené a nejde spustit icq..stále načítá, děkuji

Logfile of random's system information tool 1.08 (written by random/random)
Run by Katka at 2011-03-12 16:29:19
Microsoft Windows XP Home Edition Service Pack 3
System drive C: has 116 GB (76%) free of 153 GB
Total RAM: 1023 MB (51% free)

HijackThis download failed

======Scheduled tasks folder======

C:\WINDOWS\tasks\User_Feed_Synchronization-{89FEBE14-1EA6-402D-B9C2-5D873E91F4A1}.job
C:\WINDOWS\tasks\User_Feed_Synchronization-{F5BE5B85-E99B-4E8F-940F-67248AA2216B}.job

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
Adobe PDF Link Helper - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2009-02-27 75128]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre6\bin\jp2ssv.dll [2009-04-05 35840]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{E7E6F031-17CE-4C07-BC86-EABFE594F69C}]
JQSIEStartDetectorImpl Class - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll [2009-04-05 73728]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{BFC32E1D-EE75-4A48-BC60-104E11EE2431} - WebTranslator - C:\Program Files\Překladač\WEBIE.DLL [2009-04-05 114688]
{855F3B16-6D32-4FE6-8A56-BBB695989046} - ICQToolBar - C:\Program Files\ICQ6Toolbar\ICQToolBar.dll [2010-06-21 1018680]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"SkyTel"=C:\WINDOWS\SkyTel.EXE [2006-05-16 2879488]
"RTHDCPL"=C:\WINDOWS\RTHDCPL.EXE [2006-05-18 16207872]
"NvCplDaemon"=C:\WINDOWS\system32\NvCpl.dll [2009-02-18 13680640]
"nwiz"=nwiz.exe /install []
"SunJavaUpdateSched"=C:\Program Files\Java\jre6\bin\jusched.exe [2009-04-05 148888]
"NeroCheck"=C:\WINDOWS\system32\NeroCheck.exe [2001-07-09 155648]
"BigDog305"=C:\WINDOWS\VM305_STI.EXE [2005-08-05 61440]
"NvMediaCenter"=C:\WINDOWS\system32\NvMcTray.dll [2009-02-18 86016]
"QuickTime Task"=C:\Program Files\QuickTime\qttask.exe [2009-04-13 77824]
"OM_Monitor"=C:\Program Files\OLYMPUS\OLYMPUS Master\FirstStart.exe [2005-11-29 40960]
"NetSoftware"=C:\Program Files\NetSoftware\Starter.exe [2009-05-05 94208]
"Logitech Hardware Abstraction Layer"=C:\WINDOWS\KHALMNPR.EXE [2005-03-10 28160]
"WinampAgent"=C:\Program Files\Winamp\winampa.exe [2003-12-13 33792]
"OM2_Monitor"=C:\Program Files\OLYMPUS\OLYMPUS Master 2\FirstStart.exe [2008-10-31 54576]
"nod32kui"=C:\Program Files\Eset\nod32kui.exe [2005-11-15 921600]
"Windows Update"=C:\Documents and Settings\Katka\Local Settings\Temp\Winlogin.exe [2011-03-11 414721]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"=C:\WINDOWS\system32\ctfmon.exe [2008-04-14 15360]
"OM_Monitor"=C:\Program Files\OLYMPUS\OLYMPUS Master\Monitor.exe [2005-11-29 57344]
"OM2_Monitor"=C:\Program Files\OLYMPUS\OLYMPUS Master 2\MMonitor.exe [2008-10-31 95536]
"ICQ"=C:\Program Files\ICQ7.4\ICQ.exe [2011-03-11 119608]

C:\Documents and Settings\Katka\Nabídka Start\Programy\Po spuštění
OpenOffice.org 3.0.lnk - C:\Program Files\OpenOffice.org 3\program\quickstart.exe

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll [2006-10-18 133632]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{1a3e09be-1e45-494b-9174-d7385b45bbf5}]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=145

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"HonorAutoRunSetting"=1
"NoResolveSearch"=1
"NoDriveAutoRun"=67108863
"NoDriveTypeAutoRun"=323
"NoDrives"=0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe"="C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe:*:Disabled:Logitech Desktop Messenger"
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"C:\Program Files\ICQ6.5\ICQ.exe"="C:\Program Files\ICQ6.5\ICQ.exe:*:Enabled:ICQ.exe"
"C:\Program Files\Eset\nod32.exe"="C:\Program Files\Eset\nod32.exe:*:Enabled:NOD32"
"C:\Program Files\Eset\nod32kui.exe"="C:\Program Files\Eset\nod32kui.exe:*:Enabled:NOD32 Control Center"
"C:\Program Files\Malwarebytes' Anti-Malware\mbam.exe"="C:\Program Files\Malwarebytes' Anti-Malware\mbam.exe:*:Enabled:Malwarebytes' Anti-Malware"
"C:\Program Files\Skype\Plugin Manager\skypePM.exe"="C:\Program Files\Skype\Plugin Manager\skypePM.exe:*:Enabled:Skype Extras Manager"
"C:\Program Files\Skype\Phone\Skype.exe"="C:\Program Files\Skype\Phone\Skype.exe:*:Enabled:Skype"
"C:\Program Files\ICQ7.4\ICQ.exe"="C:\Program Files\ICQ7.4\ICQ.exe:*:Enabled:ICQ7.4"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe"="C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe:*:Enabled:Logitech Desktop Messenger"
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"C:\Program Files\ICQ6.5\ICQ.exe"="C:\Program Files\ICQ6.5\ICQ.exe:*:Enabled:ICQ.exe"
"C:\Program Files\ICQ7.4\ICQ.exe"="C:\Program Files\ICQ7.4\ICQ.exe:*:Enabled:ICQ7.4"

======List of files/folders created in the last 1 months======

2011-03-12 15:51:04 ----D---- C:\Klára-svadba
2011-03-11 10:08:32 ----D---- C:\Program Files\ICQ7.4
2011-03-10 19:01:49 ----D---- C:\Program Files\ICQ6Toolbar
2011-03-10 19:01:47 ----D---- C:\Documents and Settings\All Users\Data aplikací\ICQ
2011-03-10 09:11:16 ----D---- C:\Program Files\Common Files\Skype
2011-02-26 11:24:30 ----AHD---- C:\Tajné
2011-02-21 23:34:55 ----HDC---- C:\WINDOWS\$NtUninstallKB2478971$
2011-02-21 23:34:51 ----HDC---- C:\WINDOWS\$NtUninstallKB2485376$
2011-02-21 23:34:46 ----HDC---- C:\WINDOWS\$NtUninstallKB2479628$
2011-02-21 23:34:39 ----HDC---- C:\WINDOWS\$NtUninstallKB2483185$
2011-02-21 23:32:50 ----HDC---- C:\WINDOWS\$NtUninstallKB2476687$
2011-02-21 23:32:45 ----HDC---- C:\WINDOWS\$NtUninstallKB2478960$
2011-02-21 23:32:41 ----A---- C:\WINDOWS\imsins.BAK
2011-02-21 23:32:34 ----HDC---- C:\WINDOWS\$NtUninstallKB2393802$

======List of files/folders modified in the last 1 months======

2011-03-12 16:29:27 ----D---- C:\WINDOWS\Prefetch
2011-03-12 16:27:27 ----A---- C:\WINDOWS\wincmd.ini
2011-03-12 16:26:33 ----A---- C:\WINDOWS\winamp.ini
2011-03-12 16:26:01 ----D---- C:\Documents and Settings\Katka\Data aplikací\ICQ
2011-03-12 13:46:28 ----D---- C:\WINDOWS\system32\CatRoot2
2011-03-12 13:46:13 ----D---- C:\WINDOWS\Temp
2011-03-12 13:46:02 ----D---- C:\Program Files\NetSoftware
2011-03-11 23:24:39 ----A---- C:\WINDOWS\SchedLgU.Txt
2011-03-11 13:38:25 ----D---- C:\Documents and Settings\Katka\Data aplikací\Skype
2011-03-11 10:43:12 ----D---- C:\Documents and Settings\Katka\Data aplikací\skypePM
2011-03-11 10:08:32 ----RD---- C:\Program Files
2011-03-11 10:01:19 ----D---- C:\Program Files\Mozilla Firefox
2011-03-11 09:47:27 ----D---- C:\WINDOWS\system32
2011-03-11 09:47:27 ----A---- C:\WINDOWS\system32\PerfStringBackup.INI
2011-03-11 09:47:20 ----D---- C:\WINDOWS
2011-03-10 21:55:10 ----HD---- C:\Program Files\InstallShield Installation Information
2011-03-10 20:12:18 ----HD---- C:\WINDOWS\inf
2011-03-10 19:06:39 ----D---- C:\Program Files\ICQ-Banner-Remover
2011-03-10 09:11:18 ----SHD---- C:\WINDOWS\Installer
2011-03-10 09:11:16 ----D---- C:\Program Files\Common Files
2011-02-26 11:40:03 ----D---- C:\Foto ozn
2011-02-26 11:31:20 ----D---- C:\FOTO
2011-02-21 23:34:56 ----RSHDC---- C:\WINDOWS\system32\dllcache
2011-02-21 23:33:12 ----D---- C:\WINDOWS\Debug
2011-02-21 23:33:10 ----A---- C:\WINDOWS\system32\MRT.exe
2011-02-21 23:33:03 ----D---- C:\Program Files\Internet Explorer
2011-02-21 23:32:58 ----D---- C:\WINDOWS\ie8updates
2011-02-21 23:32:54 ----HD---- C:\WINDOWS\$hf_mig$
2011-02-20 10:23:44 ----D---- C:\MP3

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 Inspect;COMODO Internet Security Firewall Driver; C:\WINDOWS\System32\DRIVERS\inspect.sys [2009-04-05 80400]
R0 nvata;nvata; C:\WINDOWS\system32\DRIVERS\nvata.sys [2006-04-24 100736]
R0 ohci1394;Hostitelský řadič IEEE 1394 dle standardu OHCI VIA; C:\WINDOWS\system32\DRIVERS\ohci1394.sys [2008-04-13 61696]
R0 PxHelp20;PxHelp20; C:\WINDOWS\System32\Drivers\PxHelp20.sys [2008-11-20 43872]
R0 WudfPf;Windows Driver Foundation - User-mode Driver Framework Platform Driver; C:\WINDOWS\system32\DRIVERS\WudfPf.sys [2006-09-28 77568]
R1 AmdK8;AMD Processor Driver; C:\WINDOWS\system32\DRIVERS\AmdK8.sys [2005-03-09 36352]
R1 cdrbsdrv;cdrbsdrv; C:\WINDOWS\system32\drivers\cdrbsdrv.sys [2004-03-08 13567]
R1 cmdGuard;COMODO Internet Security Sandbox Driver; C:\WINDOWS\System32\DRIVERS\cmdguard.sys [2009-04-05 110992]
R1 cmdHlp;COMODO Internet Security Helper Driver; C:\WINDOWS\System32\DRIVERS\cmdhlp.sys [2009-04-05 24336]
R1 kbdhid;Ovladač klávesnice standardu HID; C:\WINDOWS\system32\DRIVERS\kbdhid.sys [2008-04-14 14592]
R1 WS2IFSL;Podpůrné prostředí zprostředkovatele služeb Windows Socket 2.0 bez podpory IFS; C:\WINDOWS\System32\drivers\ws2ifsl.sys [2006-03-02 12032]
R2 AMON;AMON; \??\C:\WINDOWS\system32\drivers\amon.sys []
R2 HidUsb;Microsoft HID Class Driver; C:\WINDOWS\system32\DRIVERS\hidusb.sys [2008-04-13 10368]
R2 irda;Protokol IrDA; C:\WINDOWS\system32\DRIVERS\irda.sys [2008-04-13 88192]
R3 HDAudBus;Ovladač Microsoft UAA pro sběrnici High Definition Audio; C:\WINDOWS\system32\DRIVERS\HDAudBus.sys [2008-04-13 144384]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\WINDOWS\system32\drivers\RtkHDAud.sys [2006-05-16 4275712]
R3 irsir;Microsoft Serial Infrared Driver; C:\WINDOWS\system32\DRIVERS\irsir.sys [2001-08-17 18688]
R3 L8042Kbd;Logitech SetPoint Keyboard Driver; C:\WINDOWS\system32\DRIVERS\L8042Kbd.sys [2005-03-10 13056]
R3 LHidKe;Logitech SetPoint HID Mouse Filter Driver; C:\WINDOWS\system32\DRIVERS\LHidKE.Sys [2005-03-10 24704]
R3 LHidUsbK;Logitech SetPoint USB Receiver device driver; C:\WINDOWS\System32\Drivers\LHidUsbK.Sys [2005-03-10 36480]
R3 LMouKE;Logitech SetPoint Mouse Filter Driver; C:\WINDOWS\system32\DRIVERS\LMouKE.Sys [2005-03-10 69504]
R3 LUsbKbd;Logitech SetPoint USB Filter Driver; C:\WINDOWS\system32\drivers\LUsbKbd.sys [2005-03-10 14592]
R3 mouhid;Ovladač myši standardu HID; C:\WINDOWS\system32\DRIVERS\mouhid.sys [2001-10-24 12160]
R3 nv;nv; C:\WINDOWS\system32\DRIVERS\nv4_mini.sys [2009-02-18 6308224]
R3 NVENETFD;NVIDIA nForce Networking Controller Driver; C:\WINDOWS\system32\DRIVERS\NVENETFD.sys [2006-03-22 52736]
R3 nvnetbus;NVIDIA Network Bus Enumerator; C:\WINDOWS\system32\DRIVERS\nvnetbus.sys [2006-03-22 18944]
R3 Rasirda;WAN Miniport (IrDA); C:\WINDOWS\system32\DRIVERS\rasirda.sys [2001-08-17 19584]
R3 usbccgp;Obecný nadřazený ovladač Microsoft USB; C:\WINDOWS\system32\DRIVERS\usbccgp.sys [2008-04-13 32128]
R3 WmBEnum;Logitech Virtual Bus Enumerator Driver; C:\WINDOWS\system32\drivers\WmBEnum.sys [2005-04-12 10144]
R3 WmXlCore;Logitech WingMan Translation Layer Driver; C:\WINDOWS\system32\drivers\WmXlCore.sys [2005-04-12 45504]
S3 Arp1394;Protokol 1394 ARP Client; C:\WINDOWS\system32\DRIVERS\arp1394.sys [2008-04-13 60800]
S3 catchme;catchme; \??\C:\DOCUME~1\OSI~1\LOCALS~1\Temp\catchme.sys []
S3 CCDECODE;Dekodér Closed Caption; C:\WINDOWS\system32\DRIVERS\CCDECODE.sys [2008-04-13 17024]
S3 ENTECH;ENTECH; \??\C:\WINDOWS\system32\DRIVERS\ENTECH.sys []
S3 GMSIPCI;GMSIPCI; \??\E:\INSTALL\GMSIPCI.SYS []
S3 L8042mou;Logitech SetPoint PS/2 Mouse Filter Driver; C:\WINDOWS\system32\DRIVERS\L8042mou.Sys [2005-03-10 53632]
S3 MSTEE;Microsoft Streaming Tee/Sink-to-Sink Converter; C:\WINDOWS\system32\drivers\MSTEE.sys [2008-04-13 5504]
S3 NABTSFEC;NABTS/FEC VBI Codec; C:\WINDOWS\system32\DRIVERS\NABTSFEC.sys [2008-04-13 85248]
S3 NdisIP;Microsoft TV/Video Connection; C:\WINDOWS\system32\DRIVERS\NdisIP.sys [2008-04-13 10880]
S3 NIC1394;1394 Net Driver; C:\WINDOWS\system32\DRIVERS\nic1394.sys [2008-04-13 61824]
S3 NTACCESS;NTACCESS; \??\E:\NTACCESS.sys []
S3 SetupNTGLM7X;SetupNTGLM7X; \??\E:\NTGLM7X.sys []
S3 SLIP;BDA Slip De-Framer; C:\WINDOWS\system32\DRIVERS\SLIP.sys [2008-04-13 11136]
S3 streamip;BDA IPSink; C:\WINDOWS\system32\DRIVERS\StreamIP.sys [2008-04-13 15232]
S3 usbscan;Ovladač skeneru USB; C:\WINDOWS\system32\DRIVERS\usbscan.sys [2008-04-13 15104]
S3 USBSTOR;Ovladač velkokapacitního paměťového zařízení USB; C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS [2008-04-13 26368]
S3 WmFilter;Logitech Gaming HID Filter Driver; C:\WINDOWS\system32\drivers\WmFilter.sys [2005-04-12 22240]
S3 WmVirHid;Logitech Virtual Hid Device Driver; C:\WINDOWS\system32\drivers\WmVirHid.sys [2005-04-12 5600]
S3 WpdUsb;WpdUsb; C:\WINDOWS\system32\DRIVERS\wpdusb.sys [2006-10-18 38528]
S3 WSTCODEC;Dálnopisný kodek světového standardu; C:\WINDOWS\system32\DRIVERS\WSTCODEC.SYS [2008-04-13 19200]
S3 WudfRd;Windows Driver Foundation - User-mode Driver Framework Reflector; C:\WINDOWS\system32\DRIVERS\wudfrd.sys [2006-09-28 82944]
S3 ZSMC0305;VIMICRO USB PC Camera V; C:\WINDOWS\System32\Drivers\usbVM305.sys [2006-02-09 392444]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 cmdAgent;COMODO Internet Security Helper Service; C:\Program Files\COMODO\COMODO Internet Security\cmdagent.exe [2009-04-05 700152]
R2 ICQ Service;ICQ Service; C:\Program Files\ICQ6Toolbar\ICQ Service.exe [2010-06-21 246584]
R2 Irmon;Sledování infračerveného přenosu; C:\WINDOWS\system32\svchost.exe [2008-04-14 14336]
R2 JavaQuickStarterService;Java Quick Starter; C:\Program Files\Java\jre6\bin\jqs.exe [2009-04-05 152984]
R2 NOD32krn;NOD32 Kernel Service; C:\Program Files\Eset\nod32krn.exe [2005-11-15 495616]
R2 NVSvc;NVIDIA Display Driver Service; C:\WINDOWS\system32\nvsvc32.exe [2009-02-18 163908]
R2 UxTuneUp;TuneUp Theme Extension; C:\WINDOWS\System32\svchost.exe [2008-04-14 14336]
R2 WudfSvc;Windows Driver Foundation - User-mode Driver Framework; C:\WINDOWS\system32\svchost.exe [2008-04-14 14336]
S3 aspnet_state;Stavová služba ASP.NET; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe [2008-07-25 34312]
S3 clr_optimization_v2.0.50727_32;.NET Runtime Optimization Service v2.0.50727_X86; c:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe [2008-07-25 69632]
S3 FontCache3.0.0.0;Windows Presentation Foundation Font Cache 3.0.0.0; c:\WINDOWS\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe [2008-07-29 46104]
S3 gusvc;Google Updater Service; C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe [2008-07-31 136120]
S3 idsvc;Služba Windows CardSpace; c:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe [2008-07-29 881664]
S3 WMPNetworkSvc;Služba Windows Media Player Network Sharing; C:\Program Files\Windows Media Player\WMPNetwk.exe [2007-01-05 913920]
S4 NetTcpPortSharing;Služba sdílení portů Net.Tcp; c:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe [2008-07-29 132096]

-----------------EOF-----------------

Dejte log z ComboFix.

Stahnete a ulozte nejlepe na plochu ComboFix: http://download.bleepingcomputer.com/sUBs/ComboFix.exe

pote spustte aplikaci pod uctem s administratorskym opravnenim

hned po startu se zobrazi obrazovka s licencnimi podminkami, pokracujte kliknutim na tlacitko Ano.

v klidu si postavte na kafe (cela akce trva cca. 5-10 minut, nekdy i dele - dle toho, o jak rychly stroj se jedna a kolika soubory se skener bude muset prodirat), behem skenu se nepokousejte spoustet zadne jine aplikace ani nic jineho

behem skenovani nepropadejte panice, vas stroj muze byt restartovan (predevsim pri prvni aplikaci skeneru)

upozorneni: pokud pouzivate antispyware s rezidentnim stitem, prepnete jeho rezidentni stit do Install Mode, pripadne jej po dobu skenu uplne deaktivujte, protoze dochazi pri skenu a vymazu pripadneho malware k nezadoucim kolizim s rezidentem antispyware

log z combofixu

ComboFix 11-03-12.01 - Katka 13.03.2011 9:13.3.1 - x86
Microsoft Windows XP Home Edition 5.1.2600.3.1250.420.1029.18.1023.556 [GMT 1:00]
Spuštěný z: c:\documents and settings\Katka\Plocha\ComboFix.exe
AV: Eset NOD32 antivirus system 2.50 *Enabled/Outdated* {E5E70D32-0101-4F12-8FB0-D96ACA4F34C0}
FW: COMODO Firewall *Enabled* {043803A3-4F86-4ef6-AFC5-F6E02A79969B}
* Rezidentní štít AV je zapnutý
.
.
VAROVÁNÍ - NA TOMTO POČÍTAČI NENÍ NAINSTALOVÁNA KONZOLA PRO ZOTAVENÍ !!
.
.
((((((((((((((((((((((((((((((((((((((( Ostatní výmazy )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
c:\audiograbber\audiograbber.exe
c:\windows\VM305Cap.exe
.
.
((((((((((((((((((((((((( Soubory vytvořené od 2011-02-13 do 2011-03-13 )))))))))))))))))))))))))))))))
.
.
2011-03-12 14:51 . 2011-03-12 15:03 -------- d-----w- C:\Klára-svadba
2011-03-11 09:08 . 2011-03-11 09:12 -------- d-----w- c:\program files\ICQ7.4
2011-03-10 18:01 . 2011-03-11 09:11 -------- d-----w- c:\program files\ICQ6Toolbar
2011-03-10 18:01 . 2011-03-11 09:11 -------- d-----w- c:\documents and settings\All Users\Data aplikací\ICQ
2011-03-10 17:59 . 2011-03-10 17:59 -------- d-----w- c:\documents and settings\Katka\Local Settings\Data aplikací\AOL
2011-03-10 08:11 . 2011-03-10 08:11 -------- d-----w- c:\program files\Common Files\Skype
2011-02-26 10:24 . 2011-02-26 10:33 -------- d---a-w- C:\Tajné
2011-02-15 10:16 . 2011-02-15 10:16 -------- d-----w- c:\documents and settings\ŽOSI\Plocha
.
.
(((((((((((((((((((((((((((((((((((((((( Find3M výpis ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2011-03-12 22:40 . 2009-04-13 17:17 1409 ----a-w- c:\windows\QTFont.for
2011-01-21 14:44 . 2006-03-02 12:00 440320 ----a-w- c:\windows\system32\shimgvw.dll
2011-01-07 14:09 . 2006-03-02 12:00 290048 ----a-w- c:\windows\system32\atmfd.dll
2011-01-06 07:49 . 2011-01-06 07:50 502208 ----a-w- c:\windows\system32\drivers\amon.sys
2011-01-06 07:49 . 2011-01-06 07:50 270336 ----a-w- c:\windows\system32\imon.dll
2011-01-02 18:00 . 2011-01-02 18:00 6275960 ----a-w- C:\Silverlight.exe
2010-12-31 14:04 . 2006-03-02 12:00 1854976 ----a-w- c:\windows\system32\win32k.sys
2010-12-22 12:34 . 2006-03-02 12:00 301568 ----a-w- c:\windows\system32\kerberos.dll
2010-12-20 23:52 . 2006-03-02 12:00 916480 ----a-w- c:\windows\system32\wininet.dll
2010-12-20 23:52 . 2006-03-02 12:00 43520 ----a-w- c:\windows\system32\licmgr10.dll
2010-12-20 23:52 . 2006-03-02 12:00 1469440 ------w- c:\windows\system32\inetcpl.cpl
2010-12-20 17:25 . 2006-03-02 12:00 729088 ----a-w- c:\windows\system32\lsasrv.dll
2010-12-20 17:09 . 2011-01-06 08:39 38224 ----a-w- c:\windows\system32\drivers\mbamswissarmy.sys
2010-12-20 17:08 . 2011-01-06 08:39 20952 ----a-w- c:\windows\system32\drivers\mbam.sys
2010-12-20 12:55 . 2006-03-02 12:00 385024 ----a-w- c:\windows\system32\html.iec
2010-11-27 19:19 . 2011-01-07 09:02 61440 ----a-w- c:\program files\mozilla firefox\components\gemgecko.dll
.
.
((((((((((((((((((((((((((((( SnapShot@2011-01-06_10.02.45 )))))))))))))))))))))))))))))))))))))))))
.
+ 2011-03-13 08:01 . 2011-03-13 08:01 16384 c:\windows\Temp\Perflib_Perfdata_158.dat
+ 2009-04-05 09:32 . 2005-08-05 10:36 81920 c:\windows\system32\VM305STI.dll
- 2009-04-05 09:32 . 2005-08-05 17:36 81920 c:\windows\system32\VM305Sti.dll
+ 2009-04-05 09:32 . 2008-04-14 03:22 54272 c:\windows\system32\vfwwdm32.dll
- 2009-04-05 09:32 . 2008-04-14 02:22 54272 c:\windows\system32\vfwwdm32.dll
+ 2006-03-02 12:00 . 2011-03-11 08:47 71196 c:\windows\system32\perfc009.dat
- 2006-03-02 12:00 . 2010-12-09 08:57 71196 c:\windows\system32\perfc009.dat
- 2006-03-02 12:00 . 2010-12-09 08:57 82576 c:\windows\system32\perfc005.dat
+ 2006-03-02 12:00 . 2011-03-11 08:47 82576 c:\windows\system32\perfc005.dat
- 2006-03-02 12:00 . 2010-11-06 00:23 66560 c:\windows\system32\mshtmled.dll
+ 2006-03-02 12:00 . 2010-12-20 23:52 66560 c:\windows\system32\mshtmled.dll
- 2007-08-13 17:54 . 2010-11-06 00:23 55296 c:\windows\system32\msfeedsbs.dll
+ 2007-08-13 17:54 . 2010-12-20 23:52 55296 c:\windows\system32\msfeedsbs.dll
+ 2006-06-22 10:44 . 2006-06-22 10:44 20480 c:\windows\system32\Macromed\Flash\UninstFl.exe
+ 2006-03-02 12:00 . 2010-12-20 23:52 25600 c:\windows\system32\jsproxy.dll
- 2006-03-02 12:00 . 2010-11-06 00:23 25600 c:\windows\system32\jsproxy.dll
- 2009-06-28 20:25 . 2010-11-06 00:23 12800 c:\windows\system32\dllcache\xpshims.dll
+ 2009-06-28 20:25 . 2010-12-20 23:52 12800 c:\windows\system32\dllcache\xpshims.dll
- 2009-04-05 09:32 . 2008-04-14 02:22 54272 c:\windows\system32\dllcache\vfwwdm32.dll
+ 2009-04-05 09:32 . 2008-04-14 03:22 54272 c:\windows\system32\dllcache\vfwwdm32.dll
- 2007-08-13 17:54 . 2010-11-06 00:23 66560 c:\windows\system32\dllcache\mshtmled.dll
+ 2007-08-13 17:54 . 2010-12-20 23:52 66560 c:\windows\system32\dllcache\mshtmled.dll
- 2009-03-01 20:24 . 2010-11-06 00:23 55296 c:\windows\system32\dllcache\msfeedsbs.dll
+ 2009-03-01 20:24 . 2010-12-20 23:52 55296 c:\windows\system32\dllcache\msfeedsbs.dll
- 2007-08-13 17:44 . 2010-11-06 00:23 43520 c:\windows\system32\dllcache\licmgr10.dll
+ 2007-08-13 17:44 . 2010-12-20 23:52 43520 c:\windows\system32\dllcache\licmgr10.dll
+ 2007-08-13 17:54 . 2010-12-20 23:52 25600 c:\windows\system32\dllcache\jsproxy.dll
- 2007-08-13 17:54 . 2010-11-06 00:23 25600 c:\windows\system32\dllcache\jsproxy.dll
- 2009-12-14 07:10 . 2009-12-14 07:10 33280 c:\windows\system32\dllcache\csrsrv.dll
+ 2009-12-14 07:10 . 2010-12-09 14:30 33280 c:\windows\system32\dllcache\csrsrv.dll
+ 2006-03-02 12:00 . 2010-12-09 14:30 33280 c:\windows\system32\csrsrv.dll
- 2006-03-02 12:00 . 2009-12-14 07:10 33280 c:\windows\system32\csrsrv.dll
+ 2011-01-07 16:17 . 2011-01-07 16:17 38400 c:\windows\Installer\55671e.msi
+ 2011-01-07 16:17 . 2011-01-07 16:17 49152 c:\windows\Installer\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}\ConfigIcon.dll
+ 2011-02-21 22:33 . 2010-11-06 00:23 12800 c:\windows\ie8updates\KB2482017-IE8\xpshims.dll
+ 2011-02-21 22:32 . 2010-11-06 00:23 66560 c:\windows\ie8updates\KB2482017-IE8\mshtmled.dll
+ 2011-02-21 22:32 . 2010-11-06 00:23 55296 c:\windows\ie8updates\KB2482017-IE8\msfeedsbs.dll
+ 2011-02-21 22:32 . 2010-11-06 00:23 43520 c:\windows\ie8updates\KB2482017-IE8\licmgr10.dll
+ 2011-02-21 22:32 . 2010-11-06 00:23 25600 c:\windows\ie8updates\KB2482017-IE8\jsproxy.dll
+ 2009-04-05 09:32 . 2002-10-16 01:29 49152 c:\windows\amcap.exe
- 2009-04-05 09:32 . 2002-10-16 08:29 49152 c:\windows\amcap.exe
+ 2011-01-12 17:41 . 2010-02-22 14:20 26488 c:\windows\$hf_mig$\KB2419632\update\spcustom.dll
+ 2011-01-12 17:41 . 2010-02-22 14:20 18296 c:\windows\$hf_mig$\KB2419632\spmsg.dll
- 2006-03-02 12:00 . 2010-12-09 08:57 441260 c:\windows\system32\perfh009.dat
+ 2006-03-02 12:00 . 2011-03-11 08:47 441260 c:\windows\system32\perfh009.dat
+ 2006-03-02 12:00 . 2011-03-11 08:47 437888 c:\windows\system32\perfh005.dat
- 2006-03-02 12:00 . 2010-12-09 08:57 437888 c:\windows\system32\perfh005.dat
+ 2006-03-02 12:00 . 2010-11-09 14:52 249856 c:\windows\system32\odbc32.dll
- 2006-03-02 12:00 . 2008-04-14 03:21 249856 c:\windows\system32\odbc32.dll
+ 2006-03-02 12:00 . 2010-12-20 23:52 206848 c:\windows\system32\occache.dll
- 2006-03-02 12:00 . 2010-11-06 00:23 206848 c:\windows\system32\occache.dll
+ 2006-03-02 12:00 . 2010-12-09 15:15 713216 c:\windows\system32\ntdll.dll
+ 2006-03-02 12:00 . 2010-12-20 23:52 611840 c:\windows\system32\mstime.dll
- 2006-03-02 12:00 . 2010-11-06 00:23 611840 c:\windows\system32\mstime.dll
- 2004-08-17 15:49 . 2008-04-14 02:22 294912 c:\windows\system32\msh263.drv
+ 2004-08-17 15:49 . 2008-04-14 03:22 294912 c:\windows\system32\msh263.drv
- 2007-08-13 17:54 . 2010-11-06 00:23 602112 c:\windows\system32\msfeeds.dll
+ 2007-08-13 17:54 . 2010-12-20 23:52 602112 c:\windows\system32\msfeeds.dll
+ 2006-06-22 12:44 . 2006-06-22 12:44 128648 c:\windows\system32\Macromed\Flash\GetFlash.exe
- 2006-03-02 12:00 . 2010-11-06 00:23 184320 c:\windows\system32\iepeers.dll
+ 2006-03-02 12:00 . 2010-12-20 23:52 184320 c:\windows\system32\iepeers.dll
- 2006-03-02 12:00 . 2010-11-06 00:23 387584 c:\windows\system32\iedkcs32.dll
+ 2006-03-02 12:00 . 2010-12-20 23:52 387584 c:\windows\system32\iedkcs32.dll
+ 2006-03-02 12:00 . 2010-12-20 12:55 173568 c:\windows\system32\ie4uinit.exe
- 2006-03-02 12:00 . 2010-11-03 12:26 173568 c:\windows\system32\ie4uinit.exe
+ 2009-03-01 14:22 . 2011-02-22 15:12 115768 c:\windows\system32\FNTCACHE.DAT
- 2009-03-01 14:22 . 2010-12-17 13:38 115768 c:\windows\system32\FNTCACHE.DAT
- 2009-04-05 09:32 . 2006-02-09 13:50 392444 c:\windows\system32\drivers\usbVM305.sys
+ 2009-04-05 09:32 . 2006-02-09 06:50 392444 c:\windows\system32\drivers\usbVM305.sys
- 2009-03-01 19:28 . 2010-11-06 00:23 916480 c:\windows\system32\dllcache\wininet.dll
+ 2009-03-01 19:28 . 2010-12-20 23:52 916480 c:\windows\system32\dllcache\wininet.dll
+ 2011-01-21 14:44 . 2011-01-21 14:44 440320 c:\windows\system32\dllcache\shimgvw.dll
+ 2010-11-09 14:52 . 2010-11-09 14:52 249856 c:\windows\system32\dllcache\odbc32.dll
+ 2007-08-13 17:44 . 2010-12-20 23:52 206848 c:\windows\system32\dllcache\occache.dll
- 2007-08-13 17:44 . 2010-11-06 00:23 206848 c:\windows\system32\dllcache\occache.dll
+ 2009-04-15 09:34 . 2010-12-09 15:15 713216 c:\windows\system32\dllcache\ntdll.dll
- 2007-08-13 17:54 . 2010-11-06 00:23 611840 c:\windows\system32\dllcache\mstime.dll
+ 2007-08-13 17:54 . 2010-12-20 23:52 611840 c:\windows\system32\dllcache\mstime.dll
+ 2010-11-09 14:52 . 2010-11-09 14:52 102400 c:\windows\system32\dllcache\msjro.dll
- 2009-03-01 20:24 . 2010-11-06 00:23 602112 c:\windows\system32\dllcache\msfeeds.dll
+ 2009-03-01 20:24 . 2010-12-20 23:52 602112 c:\windows\system32\dllcache\msfeeds.dll
+ 2010-11-09 14:52 . 2010-11-09 14:52 200704 c:\windows\system32\dllcache\msadox.dll
+ 2010-11-09 14:52 . 2010-11-09 14:52 180224 c:\windows\system32\dllcache\msadomd.dll
+ 2010-11-09 14:52 . 2010-11-09 14:52 536576 c:\windows\system32\dllcache\msado15.dll
+ 2010-11-09 14:52 . 2010-11-09 14:52 143360 c:\windows\system32\dllcache\msadco.dll
+ 2009-04-15 09:34 . 2010-12-20 17:25 729088 c:\windows\system32\dllcache\lsasrv.dll
- 2009-04-15 09:34 . 2009-06-25 08:27 729088 c:\windows\system32\dllcache\lsasrv.dll
- 2009-06-25 08:27 . 2009-06-25 08:27 301568 c:\windows\system32\dllcache\kerberos.dll
+ 2009-06-25 08:27 . 2010-12-22 12:34 301568 c:\windows\system32\dllcache\kerberos.dll
+ 2009-06-28 20:25 . 2010-12-20 23:52 247808 c:\windows\system32\dllcache\ieproxy.dll
- 2009-06-28 20:25 . 2010-11-06 00:23 247808 c:\windows\system32\dllcache\ieproxy.dll
+ 2007-08-13 17:54 . 2010-12-20 23:52 184320 c:\windows\system32\dllcache\iepeers.dll
- 2007-08-13 17:54 . 2010-11-06 00:23 184320 c:\windows\system32\dllcache\iepeers.dll
- 2010-08-07 17:49 . 2010-11-06 00:23 743424 c:\windows\system32\dllcache\iedvtool.dll
+ 2010-08-07 17:49 . 2010-12-20 23:52 743424 c:\windows\system32\dllcache\iedvtool.dll
+ 2007-08-13 17:39 . 2010-12-20 23:52 387584 c:\windows\system32\dllcache\iedkcs32.dll
- 2007-08-13 17:39 . 2010-11-06 00:23 387584 c:\windows\system32\dllcache\iedkcs32.dll
- 2007-08-13 17:39 . 2010-11-03 12:26 173568 c:\windows\system32\dllcache\ie4uinit.exe
+ 2007-08-13 17:39 . 2010-12-20 12:55 173568 c:\windows\system32\dllcache\ie4uinit.exe
- 2010-04-20 05:32 . 2010-10-28 13:09 290048 c:\windows\system32\dllcache\atmfd.dll
+ 2010-04-20 05:32 . 2011-01-07 14:09 290048 c:\windows\system32\dllcache\atmfd.dll
+ 2011-03-10 08:11 . 2011-03-10 08:11 371272 c:\windows\Installer\{E633D396-5188-4E9D-8F6B-BFB8BF3467E8}\SkypeIcon.exe
+ 2011-02-21 22:32 . 2010-11-06 00:23 916480 c:\windows\ie8updates\KB2482017-IE8\wininet.dll
+ 2011-02-21 22:33 . 2010-07-05 13:13 391032 c:\windows\ie8updates\KB2482017-IE8\spuninst\updspapi.dll
+ 2011-02-21 22:33 . 2010-07-05 13:13 233848 c:\windows\ie8updates\KB2482017-IE8\spuninst\spuninst.exe
+ 2011-02-21 22:32 . 2010-11-06 00:23 206848 c:\windows\ie8updates\KB2482017-IE8\occache.dll
+ 2011-02-21 22:32 . 2010-11-06 00:23 611840 c:\windows\ie8updates\KB2482017-IE8\mstime.dll
+ 2011-02-21 22:32 . 2010-11-06 00:23 602112 c:\windows\ie8updates\KB2482017-IE8\msfeeds.dll
+ 2011-02-21 22:33 . 2010-11-06 00:23 247808 c:\windows\ie8updates\KB2482017-IE8\ieproxy.dll
+ 2011-02-21 22:32 . 2010-11-06 00:23 184320 c:\windows\ie8updates\KB2482017-IE8\iepeers.dll
+ 2011-02-21 22:33 . 2010-11-06 00:23 743424 c:\windows\ie8updates\KB2482017-IE8\iedvtool.dll
+ 2011-02-21 22:33 . 2010-11-06 00:23 387584 c:\windows\ie8updates\KB2482017-IE8\iedkcs32.dll
+ 2011-02-21 22:33 . 2010-11-03 12:26 173568 c:\windows\ie8updates\KB2482017-IE8\ie4uinit.exe
+ 2011-01-12 17:41 . 2010-02-22 14:21 391032 c:\windows\$NtUninstallKB2419632$\spuninst\updspapi.dll
+ 2011-01-12 17:41 . 2010-02-22 14:20 233848 c:\windows\$NtUninstallKB2419632$\spuninst\spuninst.exe
+ 2011-01-12 17:41 . 2008-04-14 03:21 249856 c:\windows\$NtUninstallKB2419632$\odbc32.dll
+ 2011-01-12 17:41 . 2008-04-14 03:21 102400 c:\windows\$NtUninstallKB2419632$\msjro.dll
+ 2011-01-12 17:41 . 2008-04-14 03:21 200704 c:\windows\$NtUninstallKB2419632$\msadox.dll
+ 2011-01-12 17:41 . 2008-04-14 03:21 180224 c:\windows\$NtUninstallKB2419632$\msadomd.dll
+ 2011-01-12 17:41 . 2008-04-14 03:21 536576 c:\windows\$NtUninstallKB2419632$\msado15.dll
+ 2011-01-12 17:41 . 2008-04-14 03:21 143360 c:\windows\$NtUninstallKB2419632$\msadco.dll
+ 2011-01-12 17:41 . 2010-02-22 14:21 391032 c:\windows\$hf_mig$\KB2419632\update\updspapi.dll
+ 2011-01-12 17:41 . 2010-02-22 14:21 759160 c:\windows\$hf_mig$\KB2419632\update\update.exe
+ 2011-01-12 17:41 . 2010-02-22 14:20 233848 c:\windows\$hf_mig$\KB2419632\spuninst.exe
+ 2010-11-09 14:51 . 2010-11-09 14:51 253952 c:\windows\$hf_mig$\KB2419632\SP3QFE\odbc32.dll
+ 2010-11-09 14:51 . 2010-11-09 14:51 102400 c:\windows\$hf_mig$\KB2419632\SP3QFE\msjro.dll
+ 2010-11-09 14:51 . 2010-11-09 14:51 200704 c:\windows\$hf_mig$\KB2419632\SP3QFE\msadox.dll
+ 2010-11-09 14:51 . 2010-11-09 14:51 180224 c:\windows\$hf_mig$\KB2419632\SP3QFE\msadomd.dll
+ 2010-11-09 14:51 . 2010-11-09 14:51 565248 c:\windows\$hf_mig$\KB2419632\SP3QFE\msado15.dll
+ 2010-11-09 14:51 . 2010-11-09 14:51 143360 c:\windows\$hf_mig$\KB2419632\SP3QFE\msadco.dll
- 2006-03-02 12:00 . 2010-11-06 00:23 1210880 c:\windows\system32\urlmon.dll
+ 2006-03-02 12:00 . 2010-12-20 23:52 1210880 c:\windows\system32\urlmon.dll
- 2006-03-02 12:00 . 2010-07-27 06:30 8466432 c:\windows\system32\shell32.dll
+ 2006-03-02 12:00 . 2011-01-21 14:44 8466432 c:\windows\system32\shell32.dll
+ 2006-03-02 12:00 . 2010-12-09 15:14 2194944 c:\windows\system32\ntoskrnl.exe
+ 2004-08-17 15:45 . 2010-12-09 15:14 2071552 c:\windows\system32\ntkrnlpa.exe
+ 2006-03-02 12:00 . 2010-12-20 23:52 5961216 c:\windows\system32\mshtml.dll
- 2007-08-13 17:34 . 2010-11-06 00:23 1991680 c:\windows\system32\iertutil.dll
+ 2007-08-13 17:34 . 2010-12-20 23:52 1991680 c:\windows\system32\iertutil.dll
+ 2009-03-01 19:27 . 2010-12-31 14:04 1854976 c:\windows\system32\dllcache\win32k.sys
+ 2009-03-01 19:28 . 2010-12-20 23:52 1210880 c:\windows\system32\dllcache\urlmon.dll
- 2009-03-01 19:28 . 2010-11-06 00:23 1210880 c:\windows\system32\dllcache\urlmon.dll
- 2008-06-17 19:02 . 2010-07-27 06:30 8466432 c:\windows\system32\dllcache\shell32.dll
+ 2008-06-17 19:02 . 2011-01-21 14:44 8466432 c:\windows\system32\dllcache\shell32.dll
+ 2009-03-01 19:27 . 2010-12-09 15:14 2194944 c:\windows\system32\dllcache\ntoskrnl.exe
+ 2009-03-01 19:27 . 2010-12-09 15:14 2029056 c:\windows\system32\dllcache\ntkrpamp.exe
+ 2009-03-01 19:27 . 2010-12-09 15:14 2071552 c:\windows\system32\dllcache\ntkrnlpa.exe
+ 2009-03-01 19:27 . 2010-12-09 15:14 2150912 c:\windows\system32\dllcache\ntkrnlmp.exe
+ 2009-03-01 19:28 . 2010-12-20 23:52 5961216 c:\windows\system32\dllcache\mshtml.dll
+ 2009-03-01 20:24 . 2010-12-20 23:52 1991680 c:\windows\system32\dllcache\iertutil.dll
- 2009-03-01 20:24 . 2010-11-06 00:23 1991680 c:\windows\system32\dllcache\iertutil.dll
+ 2011-03-10 08:11 . 2011-03-10 08:11 1583104 c:\windows\Installer\163083.msi
+ 2011-02-21 22:32 . 2010-11-06 00:23 1210880 c:\windows\ie8updates\KB2482017-IE8\urlmon.dll
+ 2011-02-21 22:32 . 2010-11-06 00:23 5959168 c:\windows\ie8updates\KB2482017-IE8\mshtml.dll
+ 2011-02-21 22:32 . 2010-11-06 00:23 1991680 c:\windows\ie8updates\KB2482017-IE8\iertutil.dll
+ 2009-03-01 19:27 . 2010-12-09 15:14 2194944 c:\windows\Driver Cache\i386\ntoskrnl.exe
+ 2009-03-01 19:27 . 2010-12-09 15:14 2029056 c:\windows\Driver Cache\i386\ntkrpamp.exe
+ 2009-03-01 19:27 . 2010-12-09 15:14 2071552 c:\windows\Driver Cache\i386\ntkrnlpa.exe
+ 2009-03-01 19:27 . 2010-12-09 15:14 2150912 c:\windows\Driver Cache\i386\ntkrnlmp.exe
+ 2009-03-01 19:37 . 2011-02-21 22:33 37443528 c:\windows\system32\MRT.exe
- 2007-08-13 17:54 . 2010-11-06 00:23 11080704 c:\windows\system32\ieframe.dll
+ 2007-08-13 17:54 . 2010-12-20 10:52 11080704 c:\windows\system32\ieframe.dll
+ 2009-03-01 20:24 . 2010-12-20 10:52 11080704 c:\windows\system32\dllcache\ieframe.dll
- 2009-03-01 20:24 . 2010-11-06 00:23 11080704 c:\windows\system32\dllcache\ieframe.dll
+ 2011-01-07 16:17 . 2011-01-07 16:17 20304384 c:\windows\Installer\556725.msp
+ 2011-02-21 22:32 . 2010-11-06 00:23 11080704 c:\windows\ie8updates\KB2482017-IE8\ieframe.dll
.
-- Snímek resetován k současnému datu --
.
(((((((((((((((((((((((((((((((((( Spouštěcí body v registru )))))))))))))))))))))))))))))))))))))))))))))
.
.
*Poznámka* prázdné záznamy a legitimní výchozí údaje nejsou zobrazeny.
REGEDIT4
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"OM_Monitor"="c:\program files\OLYMPUS\OLYMPUS Master\Monitor.exe" [2005-11-29 57344]
"OM2_Monitor"="c:\program files\OLYMPUS\OLYMPUS Master 2\MMonitor.exe" [2008-10-31 95536]
"ICQ"="c:\program files\ICQ7.4\ICQ.exe" [2011-03-11 119608]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"SkyTel"="SkyTel.EXE" [2006-05-16 2879488]
"RTHDCPL"="RTHDCPL.EXE" [2006-05-18 16207872]
"NvCplDaemon"="c:\windows\system32\NvCpl.dll" [2009-02-18 13680640]
"nwiz"="nwiz.exe" [2009-02-18 1657376]
"SunJavaUpdateSched"="c:\program files\Java\jre6\bin\jusched.exe" [2009-04-05 148888]
"NeroCheck"="c:\windows\system32\NeroCheck.exe" [2001-07-09 155648]
"BigDog305"="c:\windows\VM305_STI.EXE" [2005-08-05 61440]
"NvMediaCenter"="c:\windows\system32\NvMcTray.dll" [2009-02-18 86016]
"QuickTime Task"="c:\program files\QuickTime\qttask.exe" [2009-04-13 77824]
"OM_Monitor"="c:\program files\OLYMPUS\OLYMPUS Master\FirstStart.exe" [2005-11-29 40960]
"NetSoftware"="c:\program files\NetSoftware\Starter.exe" [2009-05-05 94208]
"Logitech Hardware Abstraction Layer"="KHALMNPR.EXE" [2005-03-10 28160]
"WinampAgent"="c:\program files\Winamp\winampa.exe" [2003-12-13 33792]
"OM2_Monitor"="c:\program files\OLYMPUS\OLYMPUS Master 2\FirstStart.exe" [2008-10-31 54576]
"nod32kui"="c:\program files\Eset\nod32kui.exe" [2005-11-15 921600]
.
[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="c:\windows\system32\CTFMON.EXE" [2008-04-14 15360]
"DWQueuedReporting"="c:\progra~1\COMMON~1\MICROS~1\DW\dwtrig20.exe" [2007-02-26 437160]
.
c:\documents and settings\Katka\Nabˇdka Start\Programy\Po spuçtŘnˇ\
OpenOffice.org 3.0.lnk - c:\program files\OpenOffice.org 3\program\quickstart.exe [2009-1-15 393216]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run-]
"Adobe Reader Speed Launcher"="c:\program files\Adobe\Reader 9.0\Reader\Reader_sl.exe"
"SunJavaUpdateSched"="c:\program files\Java\jre1.5.0_10\bin\jusched.exe"
"BigDog305"=c:\windows\VM305_STI.EXE VIMICRO USB PC Camera (ZC0305)
.
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile]
"EnableFirewall"= 0 (0x0)
.
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\system32\\sessmgr.exe"=
"c:\\Program Files\\Logitech\\Desktop Messenger\\8876480\\Program\\LogitechDesktopMessenger.exe"=
"%windir%\\Network Diagnostic\\xpnetdiag.exe"=
"c:\\Program Files\\Eset\\nod32.exe"=
"c:\\Program Files\\Eset\\nod32kui.exe"=
"c:\\Program Files\\Malwarebytes' Anti-Malware\\mbam.exe"=
"c:\\Program Files\\Skype\\Plugin Manager\\skypePM.exe"=
"c:\\Program Files\\Skype\\Phone\\Skype.exe"=
"c:\\Program Files\\ICQ7.4\\ICQ.exe"=
.
R1 cmdGuard;COMODO Internet Security Sandbox Driver;c:\windows\system32\drivers\cmdguard.sys [7.3.2009 18:16 110992]
R1 cmdHlp;COMODO Internet Security Helper Driver;c:\windows\system32\drivers\cmdhlp.sys [7.3.2009 18:16 24336]
R2 ICQ Service;ICQ Service;c:\program files\ICQ6Toolbar\ICQ Service.exe [10.3.2011 19:01 246584]
S3 SetupNTGLM7X;SetupNTGLM7X;\??\e:\ntglm7x.sys --> e:\NTGLM7X.sys [?]
S3 ZSMC0305;VIMICRO USB PC Camera V;c:\windows\system32\drivers\usbVM305.sys [5.4.2009 10:32 392444]
.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Svchost - NetSvcs
UxTuneUp
.
Obsah adresáře 'Naplánované úlohy'
.
2011-03-13 c:\windows\Tasks\User_Feed_Synchronization-{89FEBE14-1EA6-402D-B9C2-5D873E91F4A1}.job
- c:\windows\system32\msfeedssync.exe [2007-08-13 02:31]
.
2011-03-13 c:\windows\Tasks\User_Feed_Synchronization-{F5BE5B85-E99B-4E8F-940F-67248AA2216B}.job
- c:\windows\system32\msfeedssync.exe [2007-08-13 02:31]
.
.
------- Doplňkový sken -------
.
uStart Page = hxxp://start.icq.com/
uInternet Connection Wizard,ShellNext = "c:\program files\Outlook Express\msimn.exe"
IE: Add to Google Photos Screensa&ver - c:\windows\system32\GPhotos.scr/200
IE: {{73C6DCFB-B606-47F3-BDFA-9A4FBF931E37} - c:\program files\ICQ7.4\ICQ.exe
IE: {{CC963627-B1DC-40E0-B52A-CF21EE748450} - {CC963627-B1DC-40E0-B52A-CF21EE748450} - c:\program files\Překladač\WEBIE.DLL
IE: {{CC963627-B1DC-40E0-B52A-CF21EE748451} - {CC963627-B1DC-40E0-B52A-CF21EE748451} - c:\program files\Překladač\WEBIE.DLL
IE: {{CC963627-B1DC-40E0-B52A-CF21EE748452} - {CC963627-B1DC-40E0-B52A-CF21EE748452} - c:\program files\Překladač\WEBIE.DLL
Handler: bwfile-8876480 - {9462A756-7B47-47BC-8C80-C34B9B80B32B} - c:\program files\Logitech\Desktop Messenger\8876480\Program\GAPlugProtocol-8876480.dll
DPF: {5C519EC4-2BAE-44CE-B7F5-AD0CCD4BEFBD} - hxxp://www.starvedia.com/ActiveX/axmpeg4-emx.cab
DPF: {65D72393-E210-4A2A-B8E0-10AC45986770} - hxxp://pl.recruit.netmonitor.cz/WebInstaller.dll
FF - ProfilePath - c:\documents and settings\Katka\Data aplikací\Mozilla\Firefox\Profiles\mufx31u8.default\
FF - prefs.js: browser.search.selectedEngine - ICQ Search
FF - prefs.js: browser.startup.homepage - hxxp://start.icq.com/
FF - prefs.js: keyword.URL - hxxp://search.icq.com/search/afe_results.php?ch_id=afex&tb_ver=2.0.0.1&q=
FF - Ext: Default: {972ce4c6-7e08-4474-a285-3208198ce6fd} - c:\program files\Mozilla Firefox\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}
FF - Ext: Microsoft .NET Framework Assistant: {20a82645-c095-46ed-80e3-08825760534b} - c:\windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension
FF - Ext: Microsoft .NET Framework Assistant: {20a82645-c095-46ed-80e3-08825760534b} - %profile%\extensions\{20a82645-c095-46ed-80e3-08825760534b}
FF - Ext: ICQ Toolbar: {800b5000-a755-47e1-992b-48a1c1357f07} - %profile%\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}
.
.
**************************************************************************
.
catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2011-03-13 09:17
Windows 5.1.2600 Service Pack 3 NTFS
.
detected NTDLL code modification:
ZwClose, ZwOpenFile
.
skenování skrytých procesů ...
.
skenování skrytých položek 'Po spuštění' ...
.
skenování skrytých souborů ...
.
sken byl úspešně dokončen
skryté soubory: 0
.
**************************************************************************
.
--------------------- ZAMKNUTÉ KLÍČE V REGISTRU ---------------------
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\WINDOWS\\system32\\Macromed\\Flash\\FlashUtil10i_ActiveX.exe,-101"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\Elevation]
"Enabled"=dword:00000001
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\LocalServer32]
@="c:\\WINDOWS\\system32\\Macromed\\Flash\\FlashUtil10i_ActiveX.exe"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
.
[HKEY_LOCAL_MACHINE\software\Classes\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}]
@Denied: (A 2) (Everyone)
@="IFlashBroker4"
.
[HKEY_LOCAL_MACHINE\software\Classes\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"
.
[HKEY_LOCAL_MACHINE\software\Classes\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
.
--------------------- Knihovny navázané na běžící procesy ---------------------
.
- - - - - - - > 'winlogon.exe'(896)
c:\windows\system32\guard32.dll
.
- - - - - - - > 'winlogon.exe'(3936)
c:\windows\system32\guard32.dll
.
- - - - - - - > 'lsass.exe'(956)
c:\windows\system32\guard32.dll
.
Celkový čas: 2011-03-13 09:20:33
ComboFix-quarantined-files.txt 2011-03-13 08:20
ComboFix2.txt 2011-01-06 10:04
.
Před spuštěním: Volných bajtů: 121 689 919 488
Po spuštění: Volných bajtů: 121 695 436 800
.
- - End Of File - - 3B7FF400F83E4251E49364391B01F9F2

2 položky byly smazány, zbytek logu vypadá čistý. Nastala nějaká změna?

zatím beze změny..icq stále se nespustí..stále dokola se sanží přihlásit..a ani nejde se přihlásit na go.icq.com.....na jiném pc icq funguje bezproblémů.

Zkuste přeinstalovat.