VIRY.CZ

ComboFix 12-02-07.01 - HONZA 08.02.2012 14:46:14.3.1 - x86
Systém Microsoft Windows XP Professional 5.1.2600.3.1250.420.1029.18.767.446 [GMT 1:00]
Spuštěný z: c:\documents and settings\HONZA\Plocha\ComboFix.exe
AV: avast! Antivirus *Disabled/Updated* {7591DB91-41F0-48A3-B128-1A293FD8233D}
.
.
((((((((((((((((((((((((((((((((((((((( Ostatní výmazy )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
c:\windows\system32\TZLog.log
.
.
((((((((((((((((((((((((( Soubory vytvořené od 2012-01-08 do 2012-02-08 )))))))))))))))))))))))))))))))
.
.
2012-02-08 11:10 . 2012-02-08 11:10 388096 ----a-r- c:\documents and settings\HONZA\Data aplikací\Microsoft\Installer\{45A66726-69BC-466B-A7A4-12FCBA4883D7}\HiJackThis.exe
2012-02-08 11:10 . 2012-02-08 11:10 -------- d-----w- c:\program files\Trend Micro
2012-02-08 10:08 . 2012-02-08 10:08 -------- d-sh--w- c:\documents and settings\LocalService\IETldCache
2012-02-08 10:07 . 2011-11-28 17:53 314456 ----a-w- c:\windows\system32\drivers\aswSP.sys
2012-02-08 10:07 . 2011-11-28 17:51 20568 ----a-w- c:\windows\system32\drivers\aswFsBlk.sys
2012-02-08 10:07 . 2011-11-28 17:52 34392 ----a-w- c:\windows\system32\drivers\aswRdr.sys
2012-02-08 10:07 . 2011-11-28 17:52 52952 ----a-w- c:\windows\system32\drivers\aswTdi.sys
2012-02-08 10:07 . 2011-11-28 17:53 435032 ----a-w- c:\windows\system32\drivers\aswSnx.sys
2012-02-08 10:07 . 2011-11-28 17:52 111320 ----a-w- c:\windows\system32\drivers\aswmon2.sys
2012-02-08 10:07 . 2011-11-28 17:51 105176 ----a-w- c:\windows\system32\drivers\aswmon.sys
2012-02-08 10:07 . 2011-11-28 17:48 30808 ----a-w- c:\windows\system32\drivers\aavmker4.sys
2012-02-08 10:07 . 2011-11-28 18:01 41184 ----a-w- c:\windows\avastSS.scr
2012-02-08 10:07 . 2011-11-28 18:01 199816 ----a-w- c:\windows\system32\aswBoot.exe
2012-02-08 10:06 . 2012-02-08 10:06 -------- d-----w- c:\program files\AVAST Software
2012-02-08 10:06 . 2012-02-08 10:06 -------- d-----w- c:\documents and settings\All Users\Data aplikací\AVAST Software
2012-02-07 14:47 . 2010-09-18 06:53 953856 -c----w- c:\windows\system32\dllcache\mfc40u.dll
2012-02-07 14:46 . 2010-08-23 16:12 617472 -c----w- c:\windows\system32\dllcache\comctl32.dll
2012-02-07 14:43 . 2010-11-02 15:17 40960 -c----w- c:\windows\system32\dllcache\ndproxy.sys
2012-02-07 14:41 . 2011-06-24 14:10 139656 -c----w- c:\windows\system32\dllcache\rdpwd.sys
2012-02-07 14:41 . 2011-04-21 13:37 105472 -c----w- c:\windows\system32\dllcache\mup.sys
2012-02-07 14:39 . 2011-07-08 14:02 10496 -c----w- c:\windows\system32\dllcache\ndistapi.sys
2012-02-07 14:38 . 2010-10-11 14:59 45568 -c----w- c:\windows\system32\dllcache\wab.exe
2012-02-06 15:36 . 2012-02-06 15:36 -------- d-----w- c:\program files\CCleaner
2012-02-06 14:51 . 2012-02-06 14:51 -------- d-sh--w- c:\documents and settings\HONZA\IECompatCache
2012-02-06 14:48 . 2012-02-06 14:48 -------- d-sh--w- c:\documents and settings\HONZA\PrivacIE
2012-02-06 14:21 . 2012-02-06 14:21 -------- d-sh--w- c:\windows\system32\config\systemprofile\IETldCache
2012-02-06 13:51 . 2012-02-06 13:51 -------- d-----w- c:\windows\l2schemas
2012-02-06 13:51 . 2012-02-06 13:51 -------- d-----w- c:\windows\system32\cs
2012-02-06 13:51 . 2012-02-06 13:51 -------- d-----w- c:\windows\system32\bits
2012-02-06 13:33 . 2012-02-06 13:33 -------- d-sh--w- c:\documents and settings\HONZA\IETldCache
2012-02-06 13:11 . 2011-11-04 19:13 12800 -c----w- c:\windows\system32\dllcache\xpshims.dll
2012-02-06 13:11 . 2011-11-04 19:13 247808 -c----w- c:\windows\system32\dllcache\ieproxy.dll
2012-02-06 13:11 . 2011-11-04 19:13 743424 -c----w- c:\windows\system32\dllcache\iedvtool.dll
2012-02-06 13:09 . 2012-02-06 13:10 -------- dc-h--w- c:\windows\ie8
.
.
.
(((((((((((((((((((((((((((((((((((((((( Find3M výpis ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2011-11-25 21:57 . 2004-08-17 13:49 293376 ----a-w- c:\windows\system32\winsrv.dll
2011-11-23 14:40 . 2004-08-17 13:44 1859584 ----a-w- c:\windows\system32\win32k.sys
2011-11-20 06:12 . 2004-08-17 13:49 60416 ----a-w- c:\windows\system32\packager.exe
2011-11-16 14:21 . 2004-08-17 13:49 354816 ----a-w- c:\windows\system32\winhttp.dll
2011-11-16 14:21 . 2004-08-17 13:49 152064 ----a-w- c:\windows\system32\schannel.dll
2009-01-01 21:54 . 2009-01-01 21:54 12815360 -c--a-w- c:\program files\MP10Setup.exe
2009-01-01 14:36 . 2009-01-01 14:36 25787976 -c--a-w- c:\program files\wmp11-windowsxp-x86-CS-CZ.exe
2009-01-01 14:10 . 2009-01-01 14:10 1222901 -c--a-w- c:\program files\mv2p070RC2p.exe
2008-08-04 18:19 . 2008-08-04 18:18 389912880 -c--a-w- c:\program files\gc_w01_CSY.exe
2008-08-03 10:40 . 2008-08-03 10:39 2841645 -c--a-w- c:\program files\DriverUpdaterPro.exe
2008-07-04 17:25 . 2008-07-04 17:25 5808057 -c--a-w- c:\program files\aTubeCatcher_1_0_236_setup.exe
2008-04-25 18:44 . 2008-04-25 18:44 2841943 -c--a-w- c:\program files\youtubed_setup.exe
2008-04-25 18:37 . 2008-04-25 18:37 1181812 -c--a-w- c:\program files\flvplayer_setup.exe
2008-04-19 13:56 . 2008-04-19 13:55 1836184 -c--a-w- c:\program files\freeripmp3.exe
2008-04-16 20:40 . 2008-04-16 20:40 1362977 -c--a-w- c:\program files\BitLord_1.01.exe
2008-04-14 19:14 . 2008-04-14 19:14 14111464 -c--a-w- c:\program files\install_atlas_icq6.exe
2008-04-14 18:59 . 2008-04-14 18:59 22690600 -c--a-w- c:\program files\SkypeSetup.exe
2004-06-22 01:44 . 2004-06-22 01:44 70656 -c----w- c:\program files\msvcirt.dll
2004-06-22 01:44 . 2004-06-22 01:44 49212 -c----w- c:\program files\hpzjvp01.dll
2004-06-22 01:44 . 2004-06-22 01:44 458752 -c----w- c:\program files\tls704d.dll
2004-06-22 01:44 . 2004-06-22 01:44 290873 -c----w- c:\program files\hpzjut01.dll
2004-06-22 01:44 . 2004-06-22 01:44 26768 -c----w- c:\program files\usbhub.sys
2004-06-22 01:44 . 2004-06-22 01:44 254005 -c----w- c:\program files\msvcrt.dll
2004-06-22 01:44 . 2004-06-22 01:44 22608 -c----w- c:\program files\usbprint.sys
2004-06-22 01:44 . 2004-06-22 01:44 200704 -c----w- c:\program files\hpzpnp10.dll
2004-06-22 01:44 . 2004-06-22 01:44 176128 -c----w- c:\program files\hpzscr10.dll
2004-06-22 01:44 . 2004-06-22 01:44 16416 -c----w- c:\program files\HPZUCI12.DLL
2004-06-22 01:44 . 2004-06-22 01:44 12288 -c----w- c:\program files\usbmon.dll
2004-06-22 01:44 . 2004-06-22 01:44 442425 -c----w- c:\program files\hpzjpp01.dll
2004-06-22 01:44 . 2004-06-22 01:44 28722 -c----w- c:\program files\hpzjlog.dll
2004-06-22 01:44 . 2004-06-22 01:44 270336 -c----w- c:\program files\hpzglu10.exe
2004-06-22 01:44 . 2004-06-22 01:44 270336 -c----w- c:\program files\hpzc3212.dll
.
.
(((((((((((((((((((((((((((((((((( Spouštěcí body v registru )))))))))))))))))))))))))))))))))))))))))))))
.
.
*Poznámka* prázdné záznamy a legitimní výchozí údaje nejsou zobrazeny.
REGEDIT4
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\00avast]
@="{472083B0-C522-11CF-8763-00608CC02F24}"
[HKEY_CLASSES_ROOT\CLSID\{472083B0-C522-11CF-8763-00608CC02F24}]
2011-11-28 18:01 122512 ----a-w- c:\program files\AVAST Software\Avast\ashShell.dll
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"OEXPRESS"="c:\windows\OETRN.EXE" [2008-04-09 26624]
"BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}"="c:\program files\Common Files\Ahead\Lib\NMBgMonitor.exe" [2006-09-13 139264]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"NeroFilterCheck"="c:\program files\Common Files\Ahead\Lib\NeroCheck.exe" [2006-01-12 155648]
"HP Software Update"="c:\program files\HP\HP Software Update\HPWuSchd2.exe" [2004-02-12 49152]
"HP Component Manager"="c:\program files\HP\hpcoretech\hpcmpmgr.exe" [2004-05-12 241664]
"PinnacleDriverCheck"="c:\windows\system32\PSDrvCheck.exe" [2003-12-04 406016]
"avast"="c:\program files\AVAST Software\Avast\avastUI.exe" [2011-11-28 3744552]
.
[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="c:\windows\system32\CTFMON.EXE" [2008-04-14 15360]
.
c:\documents and settings\All Users\Nabídka Start\Programy\Po spuštění\
HP Digital Imaging Monitor.lnk - c:\program files\HP\Digital Imaging\bin\hpqtra08.exe [2004-5-28 241664]
Rychlé spuštění aplikace HP Image Zone.lnk - c:\program files\HP\Digital Imaging\bin\hpqthb08.exe [2004-5-28 53248]
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Wdi26.sys]
@="Driver"
.
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\system32\\sessmgr.exe"=
"%windir%\\Network Diagnostic\\xpnetdiag.exe"=
"c:\\Program Files\\Eurekr.com\\1-Click YouTube Batch Downloader\\bin\\utdman.exe"=
.
R1 aswSnx;aswSnx;c:\windows\system32\drivers\aswSnx.sys [8.2.2012 11:07 435032]
R1 aswSP;aswSP;c:\windows\system32\drivers\aswSP.sys [8.2.2012 11:07 314456]
R2 aswFsBlk;aswFsBlk;c:\windows\system32\drivers\aswFsBlk.sys [8.2.2012 11:07 20568]
R3 pcouffin;VSO Software pcouffin;c:\windows\system32\drivers\pcouffin.sys [5.1.2009 11:42 47360]
S0 Wdi26;Wdi26;c:\windows\system32\Drivers\Wdi26.sys --> c:\windows\system32\Drivers\Wdi26.sys [?]
S2 gupdate1ca76b6e2b5c380;Služba Google Update (gupdate1ca76b6e2b5c380);c:\program files\Google\Update\GoogleUpdate.exe [6.12.2009 21:58 133104]
S3 gupdatem;Služba Google Update (gupdatem);c:\program files\Google\Update\GoogleUpdate.exe [6.12.2009 21:58 133104]
S3 PAC207;VideoCAM GE111;c:\windows\system32\drivers\pfc027.sys [8.4.2005 9:46 162176]
.
.
------- Doplňkový sken -------
.
uStart Page = hxxp://www.seznam.cz/
uSearchMigratedDefaultURL = hxxp://www.google.com/search?q={searchTerms}&s ... f8&oe=utf8
uSearchAssistant = hxxp://www.google.com/ie
uSearchURL,(Default) = hxxp://www.google.com/search?q=%s
IE: E&xportovat do aplikace Microsoft Office Excel - c:\progra~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
IE: {{7E6A20FB-153F-402c-A84B-1A64E1955D3D} - {7E6A20FB-153F-402c-A84B-1A64E1955D3D} - c:\windows\WebIE.dll
TCP: DhcpNameServer = 192.168.1.1
DPF: Microsoft XML Parser for Java - file://c:\windows\Java\classes\xmldso.cab
.
.
**************************************************************************
.
catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2012-02-08 15:04
Windows 5.1.2600 Service Pack 3 NTFS
.
skenování skrytých procesů ...
.
skenování skrytých položek 'Po spuštění' ...
.
skenování skrytých souborů ...
.
sken byl úspešně dokončen
skryté soubory: 0
.
**************************************************************************
.
Celkový čas: 2012-02-08 15:11:03
ComboFix-quarantined-files.txt 2012-02-08 14:10
ComboFix2.txt 2012-02-07 09:51
.
Před spuštěním: Volných bajtů: 32 709 136 384
Po spuštění: Volných bajtů: 32 747 925 504
.
- - End Of File - - 874096F5C0F7183B783561B62F4E2DD4

A proč bych se to nemohl naučit na pc kamarádů? Jestli vám to vadí,tak se omlouvám. Ale zajímalo by mne, jak jste se to učili vy. Tak díky.