ComboFix 10-04-19.08 - Steew 20.04.2010 21:05:31.1.2 - x86
Microsoft® Windows Vista™ Home Premium 6.0.6002.2.1250.420.1029.18.3326.2224 [GMT 2:00]
Spuštěný z: c:\users\Steew\Desktop\ComboFix.exe
AV: Eset NOD32 Antivirus 2.70 *On-access scanning enabled* (Updated) {E5E70D32-0101-4F12-8FB0-D96ACA4F34C0}
SP: Windows Defender *enabled* (Updated) {D68DDC3A-831F-4FAE-9E44-DA132C1ACF46}
* Rezidentní štít AV je zapnutý
.
((((((((((((((((((((((((( Soubory vytvořené od 2010-03-20 do 2010-04-20 )))))))))))))))))))))))))))))))
.
2010-04-19 19:04 . 2010-04-19 19:04 -------- d-----w- c:\programdata\Media Center Programs
2010-04-19 16:26 . 2010-04-19 16:26 -------- d-----w- c:\program files\THQ
2010-04-18 14:35 . 2010-04-18 14:58 -------- d-----w- c:\users\Steew\AppData\Roaming\Tropico 3
2010-04-18 14:31 . 2010-04-18 15:00 -------- d-----w- c:\program files\Kalypso
2010-04-17 19:21 . 2010-04-17 19:21 -------- d-----w- c:\users\Steew\AppData\Local\GHISLER
2010-04-17 18:21 . 2010-04-17 18:21 -------- d-----w- C:\totalcmd
2010-04-17 18:21 . 2010-04-17 18:21 -------- d-----w- c:\users\Steew\AppData\Roaming\GHISLER
2010-04-17 18:21 . 2009-09-24 05:50 545 ----a-w- c:\windows\UC.PIF
2010-04-17 18:21 . 2009-09-24 05:50 545 ----a-w- c:\windows\RAR.PIF
2010-04-17 18:21 . 2009-09-24 05:50 545 ----a-w- c:\windows\PKZIP.PIF
2010-04-17 18:21 . 2009-09-24 05:50 545 ----a-w- c:\windows\PKUNZIP.PIF
2010-04-17 18:21 . 2009-09-24 05:50 545 ----a-w- c:\windows\NOCLOSE.PIF
2010-04-17 18:21 . 2009-09-24 05:50 545 ----a-w- c:\windows\LHA.PIF
2010-04-17 18:21 . 2009-09-24 05:50 545 ----a-w- c:\windows\ARJ.PIF
2010-04-17 11:57 . 2010-04-20 19:01 -------- d-----w- c:\programdata\Tunngle
2010-04-17 11:57 . 2010-04-20 19:01 -------- d-----w- c:\users\Steew\AppData\Roaming\Tunngle
2010-04-17 11:57 . 2009-09-16 05:02 27136 ----a-w- c:\windows\system32\drivers\tap0901t.sys
2010-04-17 11:56 . 2010-04-17 11:58 -------- d-----w- c:\program files\Tunngle
2010-04-17 11:46 . 2010-04-20 15:51 -------- d-----w- c:\users\Steew\AppData\Local\LogMeIn Hamachi
2010-04-17 11:44 . 2010-04-17 11:44 -------- d-----w- c:\program files\LogMeIn Hamachi
2010-04-17 01:18 . 2010-04-17 01:18 -------- d-----w- c:\program files\Windows Portable Devices
2010-04-17 01:01 . 2009-10-08 21:08 555520 ----a-w- c:\windows\system32\UIAutomationCore.dll
2010-04-17 01:01 . 2009-10-08 21:08 234496 ----a-w- c:\windows\system32\oleacc.dll
2010-04-17 01:01 . 2009-10-08 21:07 4096 ----a-w- c:\windows\system32\oleaccrc.dll
2010-04-16 23:49 . 2010-01-06 15:39 1696256 ----a-w- c:\windows\system32\gameux.dll
2010-04-16 23:49 . 2010-01-06 15:38 28672 ----a-w- c:\windows\system32\Apphlpdm.dll
2010-04-16 23:49 . 2010-01-06 13:30 4240384 ----a-w- c:\windows\system32\GameUXLegacyGDFs.dll
2010-04-16 17:21 . 2010-04-16 17:21 -------- d-----w- c:\users\Steew\AppData\Local\CCP
2010-04-16 16:03 . 2010-04-16 16:03 -------- d-----w- c:\programdata\CCP
2010-04-16 16:03 . 2010-04-16 16:03 -------- d-----w- c:\program files\CCP
2010-04-16 15:24 . 2010-04-16 15:26 -------- d-----w- c:\windows\system32\ca-ES
2010-04-16 15:24 . 2010-04-16 15:26 -------- d-----w- c:\windows\system32\eu-ES
2010-04-16 15:24 . 2010-04-16 15:26 -------- d-----w- c:\windows\system32\vi-VN
2010-04-16 15:20 . 2010-04-16 15:20 -------- d-----w- c:\windows\system32\SPReview
2010-04-16 15:09 . 2009-04-10 21:28 928768 ----a-w- c:\windows\system32\scavenge.dll
2010-04-16 15:09 . 2009-04-10 21:27 57856 ----a-w- c:\windows\system32\compcln.exe
2010-04-16 15:02 . 2009-04-10 21:32 438744 ----a-w- c:\windows\system32\mcupdate_GenuineIntel.dll
2010-04-16 14:38 . 2010-04-16 14:38 -------- d-----w- C:\3761acbd78d0957dbfbd5708fb09042d
2010-04-16 14:08 . 2010-04-16 14:08 -------- d-----w- c:\windows\system32\EventProviders
2010-04-14 10:56 . 2010-02-23 11:10 79360 ----a-w- c:\windows\system32\drivers\mrxsmb20.sys
2010-04-14 10:56 . 2010-02-23 11:10 212992 ----a-w- c:\windows\system32\drivers\mrxsmb10.sys
2010-04-14 10:56 . 2010-02-23 11:10 106496 ----a-w- c:\windows\system32\drivers\mrxsmb.sys
2010-04-14 10:56 . 2010-02-18 14:07 3548040 ----a-w- c:\windows\system32\ntoskrnl.exe
2010-04-14 10:56 . 2010-02-18 14:07 3600776 ----a-w- c:\windows\system32\ntkrnlpa.exe
2010-04-14 10:56 . 2010-03-04 17:33 430080 ----a-w- c:\windows\system32\vbscript.dll
2010-04-14 10:55 . 2010-02-18 13:30 200704 ----a-w- c:\windows\system32\iphlpsvc.dll
2010-04-14 10:55 . 2010-02-18 14:07 904576 ----a-w- c:\windows\system32\drivers\tcpip.sys
2010-04-14 10:55 . 2010-02-18 11:28 25088 ----a-w- c:\windows\system32\drivers\tunnel.sys
2010-04-14 10:54 . 2009-12-23 11:33 172032 ----a-w- c:\windows\system32\wintrust.dll
2010-04-14 10:54 . 2010-01-13 17:34 98304 ----a-w- c:\windows\system32\cabview.dll
2010-04-09 08:11 . 2010-04-10 16:24 -------- d-----w- c:\users\Steew\AppData\Roaming\ICQ
2010-04-09 08:10 . 2010-04-09 08:13 -------- d-----w- c:\program files\ICQ6.5
2010-04-04 14:40 . 2010-04-16 15:51 -------- d-----w- c:\program files\TeamSpeak 3 Client
2010-04-03 16:57 . 2010-04-03 16:57 -------- d-----w- c:\users\Steew\AppData\Local\Logitech
2010-04-03 16:57 . 2010-04-03 16:57 -------- d-----w- c:\programdata\Logitech
2010-04-03 16:57 . 2010-04-03 16:57 -------- d-----w- c:\program files\Logitech
2010-04-03 13:15 . 2010-04-03 13:27 -------- d-----w- c:\program files\UP 2.0n Full
2010-04-03 11:08 . 2010-04-03 14:06 -------- d-----w- c:\program files\Ubisoft
2010-04-03 09:53 . 2010-04-03 09:53 -------- d-----w- c:\users\Steew\AppData\Roaming\KWorld Multimedia
2010-04-03 09:52 . 2010-04-03 09:53 -------- d-----w- c:\program files\Genius TVGo DVB-T03
2010-04-03 09:52 . 2010-04-03 09:53 -------- d-----w- c:\temp\Uninstall
2010-04-03 09:52 . 2010-04-03 09:52 -------- d-----w- c:\program files\KWorld Multimedia
2010-04-03 09:51 . 2007-12-27 03:57 299008 ----a-w- c:\windows\afaunist.exe
2010-04-03 09:51 . 2007-10-26 17:26 224 ----a-w- c:\windows\system32\AF15IRTBL.bin
2010-04-03 09:51 . 2007-06-22 01:13 28672 ----a-w- c:\windows\system32\AF15BDAEX.dll
2010-04-03 09:51 . 2008-04-30 00:34 449408 ----a-w- c:\windows\system32\drivers\AF15BDA.sys
2010-04-03 09:51 . 2010-04-03 09:52 -------- d-----w- C:\Temp
2010-04-03 09:51 . 2010-04-03 09:51 -------- d-----w- c:\temp\Driver
2010-04-02 21:28 . 2010-04-02 22:44 -------- d-----w- c:\users\Steew\AppData\Roaming\TeamViewer
2010-04-02 21:27 . 2010-04-02 21:27 -------- d-----w- c:\program files\TeamViewer
2010-04-01 15:02 . 2010-04-01 15:02 -------- d-----w- c:\users\Steew\AppData\Local\PunkBuster
2010-04-01 14:52 . 2010-04-01 14:52 138056 ----a-w- c:\users\Steew\AppData\Roaming\PnkBstrK.sys
2010-04-01 14:47 . 2010-04-18 09:29 139128 ----a-w- c:\windows\system32\drivers\PnkBstrK.sys
2010-03-31 22:05 . 2010-04-19 20:25 215128 ----a-w- c:\windows\system32\PnkBstrB.exe
2010-03-31 13:02 . 2010-03-31 13:02 -------- d-----w- c:\users\Steew\AppData\Local\Ironclad Games
2010-03-31 11:48 . 2010-03-31 11:48 -------- d-----w- c:\programdata\Ironclad Games
2010-03-31 11:42 . 2010-03-31 11:42 -------- d-----w- c:\program files\Stardock
2010-03-31 10:35 . 2010-04-03 17:41 -------- d-----w- C:\Fraps
2010-03-30 22:21 . 2009-08-24 11:36 377344 ----a-w- c:\windows\system32\winhttp.dll
2010-03-30 22:20 . 2010-03-09 15:42 834048 ----a-w- c:\windows\system32\wininet.dll
2010-03-30 22:20 . 2010-03-09 16:25 78336 ----a-w- c:\windows\system32\ieencode.dll
2010-03-30 09:09 . 2010-03-30 09:09 45056 ----a-w- c:\programdata\Real\RealPlayer\BrowserRecordPlugin\ThinShims\rpnpshimwmp.dll
2010-03-30 09:09 . 2010-03-30 09:09 49152 ----a-w- c:\programdata\Real\RealPlayer\BrowserRecordPlugin\Firefox\Ext\Components\nprpffbrowserrecordext.dll
2010-03-30 09:09 . 2010-03-30 09:09 45056 ----a-w- c:\programdata\Real\RealPlayer\BrowserRecordPlugin\ThinShims\rpnpshimswf.dll
2010-03-30 09:09 . 2010-03-30 09:09 45056 ----a-w- c:\programdata\Real\RealPlayer\BrowserRecordPlugin\ThinShims\rpnpshimrp.dll
2010-03-30 09:09 . 2010-03-30 09:09 45056 ----a-w- c:\programdata\Real\RealPlayer\BrowserRecordPlugin\ThinShims\rpnpshimqt.dll
2010-03-30 09:09 . 2010-03-30 09:09 40960 ----a-w- c:\programdata\Real\RealPlayer\BrowserRecordPlugin\Chrome\Hook\rpchromebrowserrecordhelper.dll
2010-03-30 01:00 . 2010-02-12 10:48 293376 ----a-w- c:\windows\system32\browserchoice.exe
2010-03-29 23:31 . 2009-06-15 14:52 499712 ----a-w- c:\windows\system32\kerberos.dll
2010-03-29 23:31 . 2009-06-15 14:53 270848 ----a-w- c:\windows\system32\schannel.dll
2010-03-29 14:56 . 2010-04-18 20:00 -------- d-----w- c:\users\Steew\AppData\Local\ArmA 2
2010-03-28 21:41 . 2010-03-28 21:41 -------- d-----w- c:\program files\PowerISO
2010-03-28 21:05 . 2010-03-28 21:05 -------- d-----w- c:\users\Steew\AppData\Roaming\DAEMON Tools Pro
2010-03-28 21:05 . 2010-03-28 21:05 -------- d-----w- c:\users\Steew\AppData\Roaming\DAEMON Tools
2010-03-28 21:04 . 2010-03-28 21:04 -------- d-----w- c:\programdata\DAEMON Tools Lite
2010-03-28 21:04 . 2010-03-28 21:04 -------- d-----w- c:\program files\DAEMON Tools Lite
2010-03-28 20:59 . 2010-03-28 20:59 717296 ----a-w- c:\windows\system32\drivers\sptd.sys
2010-03-28 20:59 . 2010-03-28 21:09 -------- d-----w- c:\users\Steew\AppData\Roaming\DAEMON Tools Lite
2010-03-28 20:52 . 2010-03-28 20:52 -------- d-----w- c:\users\Steew\AppData\Roaming\GameRanger
2010-03-28 20:08 . 2010-03-28 20:08 -------- d-----w- c:\program files\uTorrent
2010-03-28 20:03 . 2010-04-19 19:53 -------- d-----w- c:\users\Steew\AppData\Roaming\uTorrent
2010-03-28 10:56 . 2003-06-18 23:31 18944 ----a-w- c:\windows\system32\Spool\prtprocs\w32x86\mdippr.dll
2010-03-28 10:56 . 2003-06-18 23:31 17920 ----a-w- c:\windows\system32\mdimon.dll
2010-03-28 10:54 . 2010-03-28 10:54 -------- d-----w- c:\windows\PCHEALTH
2010-03-28 10:54 . 2010-03-28 10:54 -------- d-----w- c:\program files\Microsoft.NET
2010-03-28 10:51 . 2010-03-28 10:51 -------- d-----r- C:\MSOCache
2010-03-28 00:34 . 2010-03-28 00:34 -------- d-----w- c:\program files\Play+Smile
2010-03-27 22:58 . 2010-03-27 22:58 -------- d-----w- c:\users\Steew\AppData\Local\Yoma_Tools
2010-03-27 22:58 . 2010-03-27 23:02 -------- d-----w- c:\users\Steew\AppData\Local\ArmaAddonSync2009
2010-03-27 22:57 . 2010-03-27 22:57 -------- d-----w- c:\program files\YomaTools
2010-03-27 18:38 . 2010-03-27 18:38 -------- d-----w- c:\program files\Bohemia Interactive
2010-03-27 11:22 . 2010-03-27 11:22 -------- d-----w- C:\Miranda IM
2010-03-27 10:30 . 2010-04-01 14:47 75064 ----a-w- c:\windows\system32\PnkBstrA.exe
2010-03-27 10:30 . 2010-04-01 14:44 2434856 ----a-w- c:\windows\system32\pbsvc_bc2.exe
2010-03-27 10:23 . 2010-03-27 10:23 -------- d--h--r- c:\users\Steew\AppData\Roaming\SecuROM
2010-03-27 09:45 . 2010-03-27 09:45 -------- d-----w- c:\program files\Electronic Arts
2010-03-27 01:08 . 2010-03-27 09:38 -------- d-----w- c:\users\Steew\AppData\Roaming\BSplayer
2010-03-27 01:08 . 2010-03-27 01:08 -------- d-----w- c:\users\Steew\AppData\Roaming\BSplayer Pro
2010-03-27 01:07 . 2010-03-27 01:07 -------- d-----w- c:\program files\Webteh
2010-03-26 21:20 . 2010-03-30 10:44 -------- d-----w- c:\users\Steew\AppData\Roaming\FileZilla
2010-03-26 21:20 . 2010-03-26 21:20 -------- d-----w- c:\program files\FileZilla FTP Client
2010-03-26 20:08 . 2010-03-26 20:08 -------- d-----w- c:\users\Steew\AppData\Roaming\ArcSoft
2010-03-26 20:07 . 2010-03-26 20:07 -------- d-----w- c:\program files\Common Files\ArcSoft
2010-03-26 20:07 . 1995-08-01 03:44 212480 ----a-w- c:\windows\PCDLIB32.DLL
2010-03-26 20:07 . 2010-03-26 20:07 -------- d-----w- c:\program files\ArcSoft
.
(((((((((((((((((((((((((((((((((((((((( Find3M výpis ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2010-04-20 19:10 . 2008-01-21 06:46 598594 ----a-w- c:\windows\system32\perfh005.dat
2010-04-20 19:10 . 2008-01-21 06:46 114786 ----a-w- c:\windows\system32\perfc005.dat
2010-04-17 01:18 . 2006-11-02 10:25 665600 ----a-w- c:\windows\inf\drvindex.dat
2010-04-17 01:18 . 2010-04-17 01:18 0 ---ha-w- c:\windows\system32\drivers\Msft_User_WpdFs_01_07_00.Wdf
2010-04-16 15:26 . 2006-11-02 12:37 -------- d-----w- c:\program files\Windows Calendar
2010-04-16 15:26 . 2006-11-02 11:18 -------- d-----w- c:\program files\Windows Mail
2010-04-16 15:26 . 2006-11-02 12:37 -------- d-----w- c:\program files\Windows Sidebar
2010-04-16 15:26 . 2006-11-02 12:37 -------- d-----w- c:\program files\Windows Collaboration
2010-04-16 15:26 . 2006-11-02 12:37 -------- d-----w- c:\program files\Windows Journal
2010-04-16 15:26 . 2006-11-02 12:37 -------- d-----w- c:\program files\Windows Photo Gallery
2010-04-16 15:26 . 2006-11-02 12:37 -------- d-----w- c:\program files\Windows Defender
2010-04-09 08:12 . 2010-03-26 14:00 -------- d--h--w- c:\program files\InstallShield Installation Information
2010-04-07 11:35 . 2010-04-07 11:35 0 ---ha-w- c:\windows\system32\drivers\Msft_User_WpdFs_01_00_00.Wdf
2010-03-30 09:09 . 2010-03-30 09:09 40960 ----a-w- c:\programdata\Real\RealPlayer\BrowserRecordPlugin\Chrome\Hook\rpchromebrowserrecordhelper.dll
2010-03-30 09:09 . 2010-03-30 09:09 341600 ----a-w- c:\programdata\Real\RealPlayer\BrowserRecordPlugin\IE\rpbrowserrecordplugin.dll
2010-03-30 09:09 . 2010-03-30 09:09 308808 ----a-w- c:\programdata\Real\RealPlayer\BrowserRecordPlugin\Common\rpmainbrowserrecordplugin.dll
2010-03-30 09:09 . 2010-03-30 09:09 14848 ----a-w- c:\programdata\Real\RealPlayer\BrowserRecordPlugin\MozillaPlugins\nprphtml5videoshim.dll
2010-03-30 09:09 . 2010-03-30 09:08 -------- d-----w- c:\program files\Common Files\Real
2010-03-30 09:08 . 2010-03-30 09:08 -------- d-----w- c:\program files\Real
2010-03-30 09:08 . 2010-03-30 09:08 -------- d-----w- c:\program files\Common Files\xing shared
2010-03-30 09:08 . 2010-03-30 09:08 499712 ----a-w- c:\windows\system32\msvcp71.dll
2010-03-30 09:08 . 2010-03-30 09:08 348160 ----a-w- c:\windows\system32\msvcr71.dll
2010-03-26 14:02 . 2010-03-26 14:00 -------- d-----w- c:\program files\Realtek
2010-03-26 14:00 . 2010-03-26 14:00 319456 ----a-w- c:\windows\DIFxAPI.dll
2010-03-26 14:00 . 2010-03-26 14:00 315392 ----a-w- c:\windows\HideWin.exe
2010-03-26 13:37 . 2010-03-26 13:37 -------- d-sh--we c:\programdata\Plocha
2010-03-26 13:37 . 2010-03-26 13:37 -------- d-sh--we c:\programdata\Oblíbené položky
2010-03-26 13:37 . 2010-03-26 13:37 -------- d-sh--we c:\programdata\Nabídka Start
2010-03-26 13:37 . 2010-03-26 13:37 -------- d-sh--we c:\programdata\Dokumenty
2010-03-26 13:37 . 2010-03-26 13:37 -------- d-sh--we c:\programdata\Data aplikací
2010-03-26 01:30 . 2010-03-26 01:30 56 ---ha-w- c:\programdata\ezsidmv.dat
2010-03-25 23:11 . 2010-03-26 13:39 680 ----a-w- c:\users\Steew\AppData\Local\d3d9caps.dat
2010-03-22 13:52 . 2010-03-27 01:09 697690 ----a-w- c:\users\Steew\AppData\Roaming\BSplayer\AC3 Filter\unins000.exe
2010-02-23 16:01 . 2010-03-27 01:09 1185871 ----a-w- c:\users\Steew\AppData\Roaming\BSplayer\FFDShow\unins000.exe
2010-02-23 15:00 . 2010-03-27 01:09 42288 ----a-w- c:\users\Steew\AppData\Roaming\BSplayer\Haali media splitter\uninstall.exe
2010-02-19 10:28 . 2010-02-19 10:28 1216176 ----a-w- c:\users\Steew\AppData\Roaming\GameRanger\GameRanger\GameRanger.exe
2010-02-18 23:52 . 2010-02-18 23:52 48816 ----a-w- c:\users\Steew\AppData\Roaming\GameRanger\GameRanger\Data\GameRangerLaunch.dll
2010-02-18 23:52 . 2010-02-18 23:52 155312 ----a-w- c:\users\Steew\AppData\Roaming\GameRanger\GameRanger\Data\GameRanger.dll
2010-02-03 13:56 . 2010-02-03 13:56 26176 ---ha-w- c:\windows\system32\drivers\hamachi.sys
.
(((((((((((((((((((((((((((((((((( Spouštěcí body v registru )))))))))))))))))))))))))))))))))))))))))))))
.
.
*Poznámka* prázdné záznamy a legitimní výchozí údaje nejsou zobrazeny.
REGEDIT4
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Sidebar"="c:\program files\Windows Sidebar\sidebar.exe" [2009-04-10 1233920]
"WindowsWelcomeCenter"="oobefldr.dll" [2009-04-10 2153472]
"Skype"="c:\program files\Skype\\Phone\Skype.exe" [2010-04-06 26102056]
"Steam"="c:\program files\Steam\Steam.exe" [2010-03-26 1217872]
"DAEMON Tools Lite"="c:\program files\DAEMON Tools Lite\daemon.exe" [2008-12-29 687560]
"Center Agent"="c:\program files\Genius TVGo DVB-T03\HyperMediaCenter\DTVR\Scheduled.exe" [2008-04-14 1519616]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Windows Defender"="c:\program files\Windows Defender\MSASCui.exe" [2008-01-21 1008184]
"RtHDVCpl"="RtHDVCpl.exe" [2008-05-20 6144000]
"Skytel"="Skytel.exe" [2007-11-20 1826816]
"COMODO Internet Security"="c:\program files\COMODO\COMODO Internet Security\cfp.exe" [2010-03-25 1800464]
"nod32kui"="c:\program files\Eset\nod32kui.exe" [2010-03-26 949376]
"WheelMouse"="c:\program files\A4Tech\Mouse\Amoumain.exe" [2007-05-15 204800]
"PWRISOVM.EXE"="c:\program files\PowerISO\PWRISOVM.EXE" [2009-11-09 180224]
"NvCplDaemon"="c:\windows\system32\NvCpl.dll" [2008-03-11 13527584]
"NvMediaCenter"="c:\windows\system32\NvMcTray.dll" [2008-03-11 92704]
"TkBellExe"="c:\program files\Common Files\Real\Update_OB\realsched.exe" [2010-03-30 202256]
"Launch LGDCore"="c:\program files\Logitech\G-series Software\LGDCore.exe" [2006-03-06 1122304]
"Launch LCDMon"="c:\program files\Logitech\G-series Software\LCDMon.exe" [2006-03-06 497152]
"LogMeIn Hamachi Ui"="c:\program files\LogMeIn Hamachi\hamachi-2-ui.exe" [2010-03-30 1820040]
c:\users\Steew\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\
Remote Control.lnk - c:\program files\Genius TVGo DVB-T03\Genius TVGo DVB-T03 Utilities\AFRCtl.exe [2010-4-3 81920]
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"EnableUIADesktopToggle"= 0 (0x0)
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\windows]
"AppInit_DLLs"=c:\windows\System32\guard32.dll
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WinDefend]
@="Service"
[HKEY_LOCAL_MACHINE\software\microsoft\security center\Svc]
"VistaSp2"=hex(b):41,15,14,61,7a,dd,ca,01
R0 sptd;sptd;c:\windows\System32\Drivers\sptd.sys [2010-03-28 717296]
R3 PAC207;Trust WB-1400T Webcam;c:\windows\system32\DRIVERS\PFC027.SYS [2007-05-14 508288]
S1 cmdGuard;COMODO Internet Security Sandbox Driver;c:\windows\system32\DRIVERS\cmdguard.sys [2010-03-25 130960]
S1 cmdHlp;COMODO Internet Security Helper Driver;c:\windows\system32\DRIVERS\cmdhlp.sys [2010-03-25 29520]
S1 nod32drv;nod32drv;c:\windows\system32\drivers\nod32drv.sys [2010-03-26 15424]
S2 Hamachi2Svc;LogMeIn Hamachi 2.0 Tunneling Engine;c:\program files\LogMeIn Hamachi\hamachi-2.exe [2010-03-30 1107336]
S2 TeamViewer5;TeamViewer 5;c:\program files\TeamViewer\Version5\TeamViewer_Service.exe [2010-02-11 172328]
S2 TunngleService;TunngleService;c:\program files\Tunngle\TnglCtrl.exe [2010-03-23 704760]
S3 tap0901t;TAP-Win32 Adapter V9 (Tunngle);c:\windows\system32\DRIVERS\tap0901t.sys [2009-09-16 27136]
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost]
LocalServiceAndNoImpersonation REG_MULTI_SZ FontCache
.
.
------- Doplňkový sken -------
.
IE: E&xportovat do aplikace Microsoft Office Excel - c:\progra~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
LSP: c:\windows\system32\imon.dll
FF - ProfilePath - c:\users\Steew\AppData\Roaming\Mozilla\Firefox\Profiles\9o57y87o.default\
FF - prefs.js: browser.startup.homepage - hxxp://seznam.cz/
FF - component: c:\programdata\Real\RealPlayer\BrowserRecordPlugin\Firefox\Ext\components\nprpffbrowserrecordext.dll
FF - plugin: c:\programdata\Real\RealPlayer\BrowserRecordPlugin\MozillaPlugins\nprphtml5videoshim.dll
FF - HiddenExtension: Microsoft .NET Framework Assistant: {20a82645-c095-46ed-80e3-08825760534b} - c:\windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\
---- NASTAVENÍ FIREFOXU ----
c:\program files\Mozilla Firefox\greprefs\all.js - pref("ui.use_native_colors", true);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("ui.use_native_popup_windows", false);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("browser.enable_click_image_resizing", true);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("accessibility.browsewithcaret_shortcut.enabled", true);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("javascript.options.mem.high_water_mark", 32);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("javascript.options.mem.gc_frequency", 1600);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("network.auth.force-generic-ntlm", false);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("svg.smil.enabled", false);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("ui.trackpoint_hack.enabled", -1);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("browser.formfill.debug", false);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("browser.formfill.agedWeight", 2);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("browser.formfill.bucketSize", 1);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("browser.formfill.maxTimeGroupings", 25);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("browser.formfill.timeGroupingSize", 604800);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("browser.formfill.boundaryWeight", 25);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("browser.formfill.prefixWeight", 5);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("html5.enable", false);
c:\program files\Mozilla Firefox\greprefs\security-prefs.js - pref("security.ssl.allow_unrestricted_renego_everywhere__temporarily_available_pref", true);
c:\program files\Mozilla Firefox\greprefs\security-prefs.js - pref("security.ssl.renego_unrestricted_hosts", "");
c:\program files\Mozilla Firefox\greprefs\security-prefs.js - pref("security.ssl.treat_unsafe_negotiation_as_broken", false);
c:\program files\Mozilla Firefox\greprefs\security-prefs.js - pref("security.ssl.require_safe_negotiation", false);
c:\program files\Mozilla Firefox\defaults\pref\firefox-branding.js - pref("app.update.download.backgroundInterval", 600);
c:\program files\Mozilla Firefox\defaults\pref\firefox-branding.js - pref("app.update.url.manual", "http://www.firefox.com");
c:\program files\Mozilla Firefox\defaults\pref\firefox-branding.js - pref("browser.search.param.yahoo-fr-ja", "mozff");
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("extensions.{972ce4c6-7e08-4474-a285-3208198ce6fd}.name", "chrome://browser/locale/browser.properties");
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("extensions.{972ce4c6-7e08-4474-a285-3208198ce6fd}.description", "chrome://browser/locale/browser.properties");
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("xpinstall.whitelist.add", "addons.mozilla.org");
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("xpinstall.whitelist.add.36", "getpersonas.com");
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("lightweightThemes.update.enabled", true);
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("browser.allTabs.previews", false);
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("plugins.hide_infobar_for_outdated_plugin", false);
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("plugins.update.notifyUser", false);
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("toolbar.customization.usesheet", false);
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("browser.taskbar.previews.enable", false);
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("browser.taskbar.previews.max", 20);
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("browser.taskbar.previews.cachetime", 20);
.
- - - - NEPLATNÉ POLOŽKY ODSTRANĚNÉ Z REGISTRU - - - -
WebBrowser-{D4027C7F-154A-4066-A1AD-4243D8127440} - (no file)
**************************************************************************
catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2010-04-20 21:15
Windows 6.0.6002 Service Pack 2 NTFS
skenování skrytých procesů ...
skenování skrytých položek 'Po spuštění' ...
skenování skrytých souborů ...
c:\users\Steew\AppData\Local\Temp\catchme.dll 53248 bytes executable
sken byl úspešně dokončen
skryté soubory: 1
**************************************************************************
.
--------------------- ZAMKNUTÉ KLÍČE V REGISTRU ---------------------
[HKEY_USERS\S-1-5-21-62988530-4219308771-1675412009-1000\Software\SecuROM\!CAUTION! NEVER A OR CHANGE ANY KEY*]
@Allowed: (Read) (RestrictedCode)
"??"=hex:a2,02,85,26,5c,b4,96,38,16,05,72,6f,87,49,18,d8,ae,98,25,4b,60,c1,2e,
74,d3,3a,f0,64,01,5d,5a,0a,b7,c9,e8,37,dc,cb,dc,9d,13,6a,0a,96,c7,33,d5,fc,\
"??"=hex:d5,1a,22,f0,84,c1,52,33,85,a1,43,ea,fd,a0,56,c6
[HKEY_USERS\S-1-5-21-62988530-4219308771-1675412009-1000\Software\SecuROM\License information*]
"datasecu"=hex:fd,6d,3c,fb,16,0f,e3,6b,ff,7b,53,fe,fa,80,2d,4f,3b,3c,14,31,ce,
7c,dc,f9,cb,db,03,60,52,79,35,47,bf,aa,be,54,18,c4,12,a8,fb,83,95,58,76,6e,\
"rkeysecu"=hex:60,7e,45,7c,63,7c,76,aa,d3,7d,c0,21,b6,3d,84,07
.
--------------------- Knihovny navázané na běžící procesy ---------------------
- - - - - - - > 'winlogon.exe'(912)
c:\windows\system32\guard32.dll
- - - - - - - > 'lsass.exe'(788)
c:\windows\system32\guard32.dll
.
Celkový čas: 2010-04-20 21:19:01
ComboFix-quarantined-files.txt 2010-04-20 19:18
Před spuštěním: Volných bajtů: 105 424 883 712
Po spuštění: Volných bajtů: 105 771 597 824
- - End Of File - - A6E71C1161A2B3D373904B87EA8C5229
Přispějete na provoz fóra?