
přikládám log z combofix
ComboFix 10-03-08.02 - Tuaoid 09.03.2010 10:59:02.1.2 - x86
Systém Microsoft Windows XP Professional 5.1.2600.3.1250.420.1029.18.3582.3060 [GMT 1:00]
Spuštěný z: c:\documents and settings\Tuaoid\Plocha\ComboFix.exe
AV: avast! antivirus 4.8.1368 [VPS 100308-1] *On-access scanning enabled* (Updated) {7591DB91-41F0-48A3-B128-1A293FD8233D}
VAROVÁNÍ - NA TOMTO POČÍTAČI NENÍ NAINSTALOVÁNA KONZOLA PRO ZOTAVENÍ !!
.
((((((((((((((((((((((((((((((((((((((( Ostatní výmazy )))))))))))))))))))))))))))))))))))))))))))))))))
.
c:\windows\system32\ieuinit.inf
c:\windows\system32\msvcsv60.dll
c:\windows\system32\slibsu.dll
c:\windows\system32\solejttd.dll
c:\windows\system32\soleth.dll
c:\windows\system32\sslhpt.dll
c:\windows\system32\sslibas.dll
c:\windows\system32\sslibjte.dll
c:\windows\system32\sslibjye.dll
c:\windows\system32\ssliblww.dll
c:\windows\system32\sslibpop.dll
c:\windows\system32\sslibsfh.dll
c:\windows\system32\sslibytr.dll
c:\windows\system32\ssolemn.dll
.
((((((((((((((((((((((((( Soubory vytvořené od 2010-02-09 do 2010-03-09 )))))))))))))))))))))))))))))))
.
2010-03-08 23:15 . 2010-03-08 23:15 -------- d-----w- c:\program files\Codec Pack - All In 1
2010-03-08 23:09 . 2010-03-08 23:09 -------- d-----w- c:\program files\Vypínač
2010-03-08 22:46 . 2010-03-08 22:46 -------- d-----w- c:\windows\system32\wbem\Repository
2010-03-08 22:45 . 2010-03-08 22:45 -------- d-----r- C:\MSOCache
2010-03-08 22:10 . 2010-03-08 22:45 -------- d-----w- C:\RECYCLER(2)
2010-03-08 15:36 . 2005-06-28 15:08 1730048 ----a-w- c:\windows\system32\kconvert.dll
2010-03-08 15:36 . 2005-04-04 18:00 393216 ----a-w- c:\windows\system32\NI_IRC_1_0_3.dll
2010-03-08 15:36 . 2004-11-19 15:32 65536 ----a-w- c:\windows\system32\NI_DFD_1_3_0.dll
2010-03-08 15:36 . 2010-03-08 22:50 -------- d-----w- c:\program files\Native Instruments Akoustik Piano
2010-03-08 15:26 . 2010-03-08 15:35 -------- d-----w- c:\program files\Native Instruments Elektrik Piano
2010-03-08 15:22 . 2010-03-08 15:23 -------- d-----w- c:\program files\Native Instruments B4 II
2010-03-08 15:18 . 2010-03-08 15:20 -------- d-----w- c:\program files\Gary Garritan Gofriller Cello
2010-03-08 15:12 . 2010-03-08 15:12 -------- d-----w- c:\program files\IK Multimedia T-RackS 3
2010-03-08 14:21 . 2010-03-08 14:21 -------- d-----w- c:\program files\Korg Legacy Collection
2010-03-08 14:21 . 2010-03-08 14:21 -------- d-----w- c:\program files\Common Files\Korg
2010-03-08 14:20 . 2005-05-09 19:08 33792 ----a-w- c:\windows\system32\drivers\cledx.sys
2010-03-08 14:20 . 2002-11-25 04:46 16896 ----a-w- c:\windows\system32\drivers\synasUSB.sys
2010-03-08 14:20 . 2002-11-25 07:36 45056 ----a-w- c:\windows\system32\Synsopos.exe
2010-03-08 14:20 . 2010-03-08 14:20 -------- d-----w- c:\program files\Syncrosoft
2010-03-08 14:20 . 2005-10-17 08:35 704512 ----a-w- c:\windows\system32\SYNSOACC.dll
2010-03-08 14:20 . 2004-05-10 14:58 147456 ----a-w- c:\windows\system32\SynsoLChk.dll
2010-03-08 14:15 . 2010-03-08 14:15 -------- d-----w- c:\program files\Ohm Force MobilOhm
2010-03-08 14:14 . 2010-03-08 14:14 -------- d-----w- c:\program files\Ohm Force Hematohm
2010-03-08 14:02 . 2010-03-08 14:02 -------- d-----w- c:\program files\Image-Line Morphine
2010-03-08 13:57 . 2010-03-08 13:57 -------- d-----w- c:\program files\GForce Oddity
2010-03-08 13:56 . 1999-12-17 09:13 86016 ----a-w- c:\windows\unvise32.exe
2010-03-08 13:56 . 2010-03-08 13:56 -------- d-----w- c:\program files\GForce Minimosta
2010-03-08 13:54 . 2010-03-08 13:55 -------- d-----w- c:\program files\Edirol Hyper Canvas
2010-03-08 13:53 . 2010-03-08 13:53 -------- d-----w- c:\program files\Edirol HQ Orchestral
2010-03-08 13:52 . 2010-03-08 13:52 -------- d-----w- c:\program files\Edirol Super Quartet 1.5
2010-03-08 13:49 . 2010-03-08 13:49 -------- d-----w- c:\program files\PSP Audioware PSP VintageWarmer 2
2010-03-08 13:49 . 2010-03-08 13:49 6475776 ----a-w- c:\windows\system32\PSP VintageWarmer2.dll
2010-03-08 13:49 . 2010-03-08 13:49 -------- d-----w- c:\program files\PSP Audioware PSP PianoVerb
2010-03-08 13:48 . 2010-03-08 13:48 286720 ----a-w- c:\windows\iun506.exe
2010-03-08 13:48 . 2010-03-08 13:48 -------- d-----w- c:\program files\PSP Audioware PSP StereoPack
2010-03-08 13:41 . 2010-03-08 13:41 -------- d-----w- c:\program files\PSP Audioware PSP Nitro
2010-03-08 13:41 . 2010-03-08 13:41 3300352 ----a-w- c:\windows\system32\PSP Nitro.dll
2010-03-08 13:40 . 2010-03-08 13:40 -------- d-----w- c:\program files\PSP Audioware PSP MasterQ
2010-03-08 13:40 . 2005-07-26 11:20 339968 ----a-w- c:\windows\system32\pspmcdx.dll
2010-03-08 13:40 . 2010-03-08 13:40 -------- d-----w- c:\program files\PSP Audioware Mastercomp
2010-03-08 13:40 . 2005-09-04 16:46 4059136 ----a-w- c:\windows\system32\PSP MasterComp.dll
2010-03-08 13:39 . 2010-03-08 13:39 -------- d-----w- c:\program files\PSP Audioware PSP EasyVerb
2010-03-08 13:38 . 2010-03-08 13:38 2874368 ----a-w- c:\windows\system32\PSP EasyVerb.dll
2010-03-08 13:37 . 2010-03-08 15:14 -------- d-----w- c:\program files\Arturia Moog Modular V 2
2010-03-08 13:36 . 2010-03-08 15:13 -------- d-----w- c:\program files\Arturia Minimoog V
2010-03-08 13:34 . 2010-03-08 15:13 -------- d-----w- c:\program files\Arturia CS-80V
2010-03-08 13:32 . 2010-03-08 15:13 -------- d-----w- c:\program files\Arturia Arp2600 V
2010-03-08 13:32 . 2004-03-17 18:54 163840 ----a-w- c:\windows\system32\ArtFfct.dll
2010-03-08 13:28 . 2010-03-08 13:28 -------- d-----w- c:\program files\112dB Morgana
2010-03-08 13:00 . 2010-03-08 13:17 -------- d-----w- c:\program files\IK Multimedia Miroslav Philharmonik
2010-03-08 12:57 . 2010-03-08 12:57 -------- d-----w- c:\program files\IK Multimedia Sonik Synth 2
2010-03-08 12:55 . 2010-03-08 12:56 -------- d-----w- c:\program files\IK Multimedia AmpliTube2
2010-03-08 12:55 . 2010-03-08 12:55 -------- d-----w- c:\program files\IK Multimedia Ampeg
2010-03-08 12:51 . 2010-03-08 12:53 -------- d-----w- c:\program files\Native Instruments Absynth 3
2010-03-08 12:41 . 2010-03-08 12:42 -------- d-----w- c:\program files\Native Instruments Absynth 4
2010-03-08 11:27 . 2010-03-08 11:27 -------- d-----w- c:\program files\Ask.com
2010-03-08 11:27 . 2010-03-08 11:27 -------- d-----w- c:\program files\uTorrent
2010-03-08 11:24 . 2010-03-08 11:24 -------- d-----w- c:\program files\JDownloader
2010-03-08 11:18 . 2010-03-08 11:18 -------- d-----w- c:\program files\Common Files\Corel
2010-03-08 11:18 . 2010-03-08 11:18 -------- d-----w- c:\program files\Corel
2010-03-08 11:13 . 2006-10-26 18:56 33104 ----a-w- c:\windows\system32\Spool\prtprocs\w32x86\msonpppr.dll
2010-03-08 11:13 . 2006-10-26 18:56 32592 ----a-w- c:\windows\system32\msonpmon.dll
2010-03-08 11:12 . 2010-03-08 11:12 -------- d-----w- c:\program files\Microsoft Works
2010-03-08 11:12 . 2010-03-08 11:12 -------- d-----w- c:\program files\MSBuild
2010-03-08 11:11 . 2010-03-08 11:11 -------- d-----w- c:\program files\Microsoft.NET
2010-03-08 11:09 . 2010-03-08 11:09 -------- d-----w- c:\program files\Microsoft Visual Studio 8
2010-03-08 11:09 . 2010-03-08 11:15 -------- d-----w- c:\windows\SHELLNEW
2010-03-07 21:23 . 2010-03-07 21:23 56 ---ha-w- c:\windows\system32\ezsidmv.dat
2010-03-07 14:37 . 2010-03-07 14:51 -------- d-----w- c:\program files\ICQ7.0
2010-03-07 14:34 . 2010-03-07 14:34 -------- d-----w- c:\program files\Common Files\Skype
2010-03-07 14:34 . 2010-03-07 14:34 -------- d-----r- c:\program files\Skype
2010-03-07 14:29 . 2009-11-24 23:49 48560 ----a-w- c:\windows\system32\drivers\aswTdi.sys
2010-03-07 14:29 . 2009-11-24 23:48 23120 ----a-w- c:\windows\system32\drivers\aswRdr.sys
2010-03-07 14:29 . 2009-11-24 23:47 27408 ----a-w- c:\windows\system32\drivers\aavmker4.sys
2010-03-07 14:29 . 2009-11-24 23:51 93424 ----a-w- c:\windows\system32\drivers\aswmon.sys
2010-03-07 14:29 . 2009-11-24 23:50 94160 ----a-w- c:\windows\system32\drivers\aswmon2.sys
2010-03-07 14:29 . 2009-11-24 23:50 114768 ----a-w- c:\windows\system32\drivers\aswSP.sys
2010-03-07 14:29 . 2009-11-24 23:50 20560 ----a-w- c:\windows\system32\drivers\aswFsBlk.sys
2010-03-07 14:29 . 2009-11-24 23:47 97480 ----a-w- c:\windows\system32\AvastSS.scr
2010-03-07 14:28 . 2009-11-24 23:54 1280480 ----a-w- c:\windows\system32\aswBoot.exe
2010-03-07 14:28 . 2010-03-07 14:28 -------- d-----w- c:\program files\Alwil Software
2010-03-06 12:41 . 2010-03-06 12:41 -------- d-----w- c:\program files\CCleaner
2010-03-06 12:30 . 2010-02-03 04:12 45056 ----a-w- c:\windows\system32\aticalrt.dll
2010-03-06 12:30 . 2010-02-03 04:12 45056 ----a-w- c:\windows\system32\aticalcl.dll
2010-03-06 12:30 . 2010-02-03 04:10 3633152 ----a-w- c:\windows\system32\aticaldd.dll
2010-03-06 12:30 . 2010-02-03 04:02 14188544 ----a-w- c:\windows\system32\atioglxx.dll
2010-03-06 12:30 . 2010-02-03 03:19 143360 ----a-w- c:\windows\system32\atiapfxx.exe
2010-03-06 12:30 . 2010-02-03 03:18 65024 ----a-w- c:\windows\system32\atimpc32.dll
2010-03-06 12:30 . 2010-02-03 03:12 180224 ----a-w- c:\windows\system32\atiadlxx.dll
2010-03-06 12:30 . 2009-05-11 22:35 118784 ----a-w- c:\windows\system32\atibtmon.exe
2010-03-06 12:30 . 2010-03-06 12:45 -------- d-----w- c:\program files\ATI
2010-03-06 12:29 . 2010-03-06 12:29 21035 ----a-w- c:\windows\system32\drivers\AegisP.sys
2010-03-06 12:24 . 2007-06-29 13:47 34304 ----a-w- c:\windows\system32\drivers\AmdLLD.sys
2010-03-06 12:24 . 2010-03-06 12:24 -------- d-----w- c:\program files\AMD
2010-03-05 22:01 . 2010-03-05 22:01 691696 ----a-w- c:\windows\system32\drivers\sptd.sys
2010-03-05 22:01 . 2010-03-05 22:03 -------- d-----w- c:\program files\DAEMON Tools Lite
2010-03-05 21:59 . 2008-04-13 23:15 26368 -c--a-w- c:\windows\system32\dllcache\usbstor.sys
2010-03-05 21:00 . 2009-03-09 14:27 453456 ----a-w- c:\windows\system32\d3dx10_41.dll
2010-03-05 21:00 . 2009-03-09 14:27 1846632 ----a-w- c:\windows\system32\D3DCompiler_41.dll
2010-03-05 21:00 . 2009-03-16 13:18 69448 ----a-w- c:\windows\system32\XAPOFX1_3.dll
2010-03-05 21:00 . 2009-03-16 13:18 517448 ----a-w- c:\windows\system32\XAudio2_4.dll
2010-03-05 21:00 . 2009-03-16 13:18 235352 ----a-w- c:\windows\system32\xactengine3_4.dll
2010-03-05 21:00 . 2009-03-16 13:18 22360 ----a-w- c:\windows\system32\X3DAudio1_6.dll
2010-03-05 21:00 . 2009-03-09 14:27 4178264 ----a-w- c:\windows\system32\D3DX9_41.dll
2010-03-05 21:00 . 2010-03-05 21:00 -------- d-----w- c:\program files\DIFX
2010-03-05 21:00 . 2010-03-06 12:30 -------- dc----w- c:\windows\system32\DRVSTORE
2010-03-05 21:00 . 2006-07-01 21:42 43008 ----a-w- c:\windows\system32\drivers\AmdK8.sys
2010-03-05 20:59 . 2010-03-05 20:59 -------- d-----w- c:\program files\Common Files\Wise Installation Wizard
2010-03-05 20:58 . 2010-03-05 21:02 -------- d-----w- c:\program files\Nero
2010-03-05 20:57 . 2010-03-05 20:57 -------- d-----w- c:\program files\Common Files\Nero
2010-03-05 20:06 . 2010-03-05 20:06 -------- d-----w- c:\program files\Electronic Arts
2010-03-05 20:06 . 2008-10-15 05:22 452440 ----a-w- c:\windows\system32\d3dx10_40.dll
2010-03-05 20:06 . 2008-10-15 05:22 4379984 ----a-w- c:\windows\system32\D3DX9_40.dll
2010-03-05 20:06 . 2008-10-15 05:22 2036576 ----a-w- c:\windows\system32\D3DCompiler_40.dll
2010-03-05 20:06 . 2008-10-27 09:04 514384 ----a-w- c:\windows\system32\XAudio2_3.dll
2010-03-05 20:06 . 2008-10-27 09:04 235856 ----a-w- c:\windows\system32\xactengine3_3.dll
2010-03-05 20:06 . 2008-10-27 09:04 23376 ----a-w- c:\windows\system32\X3DAudio1_5.dll
2010-03-05 20:06 . 2008-10-27 09:04 70992 ----a-w- c:\windows\system32\XAPOFX1_2.dll
2010-03-05 20:06 . 2008-07-30 05:20 68616 ----a-w- c:\windows\system32\XAPOFX1_1.dll
2010-03-05 20:06 . 2008-07-30 05:20 509448 ----a-w- c:\windows\system32\XAudio2_2.dll
2010-03-05 20:06 . 2008-07-30 05:20 238088 ----a-w- c:\windows\system32\xactengine3_2.dll
2010-03-05 19:51 . 2010-03-05 19:52 -------- d-----w- c:\program files\Total Commander 7.5
2010-03-05 19:51 . 2009-07-16 06:50 545 ----a-w- c:\windows\UC.PIF
2010-03-05 19:51 . 2009-07-16 06:50 545 ----a-w- c:\windows\RAR.PIF
2010-03-05 19:51 . 2009-07-16 06:50 545 ----a-w- c:\windows\PKZIP.PIF
.
(((((((((((((((((((((((((((((((((((((((( Find3M výpis ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2010-03-09 09:56 . 2010-03-05 14:47 384 ----a-w- c:\windows\system32\DVCStateBkp-{00000002-00000000-00000008-00001102-00000004-20071102}.dat
2010-03-09 09:56 . 2010-03-05 14:47 384 ----a-w- c:\windows\system32\DVCState-{00000002-00000000-00000008-00001102-00000004-20071102}.dat
2010-03-08 15:36 . 2010-03-05 16:47 -------- d-----w- c:\program files\VstPlugins
2010-03-08 15:15 . 2010-03-05 16:54 112 ----a-w- c:\windows\msocreg32.dat
2010-03-08 15:12 . 2010-03-05 14:20 -------- d--h--w- c:\program files\InstallShield Installation Information
2010-03-08 11:18 . 2010-03-05 14:20 -------- d-----w- c:\program files\Common Files\InstallShield
2010-03-06 12:42 . 2010-03-05 14:26 -------- d-----w- c:\program files\ATI Technologies
2010-03-06 12:37 . 2001-10-25 12:00 68736 ----a-w- c:\windows\system32\perfc005.dat
2010-03-06 12:37 . 2001-10-25 12:00 389664 ----a-w- c:\windows\system32\perfh005.dat
2010-03-06 12:29 . 2010-03-05 14:20 -------- d-----w- c:\program files\ASUS WiFi-AP Solo
2010-03-05 20:04 . 2010-03-05 14:57 -------- d-----w- c:\program files\The KMPlayer
2010-03-05 16:56 . 2010-03-05 16:56 -------- d-----w- c:\program files\Image-Line Juice Pack
2010-03-05 16:56 . 2010-03-05 16:47 -------- d-----w- c:\program files\Image-Line
2010-03-05 16:55 . 2010-03-05 16:55 -------- d-----w- c:\program files\QuickTime
2010-03-05 16:55 . 2010-03-05 16:55 -------- d-----w- c:\program files\Common Files\Apple
2010-03-05 16:55 . 2010-03-05 16:55 -------- d-----w- c:\program files\Apple Software Update
2010-03-05 16:54 . 2010-03-05 16:54 -------- d-----w- c:\program files\IK Multimedia ARC System
2010-03-05 16:54 . 2010-03-05 16:53 -------- d-----w- c:\program files\IK Multimedia SampleTank 2.5
2010-03-05 16:52 . 2010-03-05 16:52 -------- d-----w- c:\program files\FAW Circle
2010-03-05 16:52 . 2010-03-05 16:52 -------- d-----w- c:\program files\Common Files\Digidesign
2010-03-05 16:51 . 2010-03-05 16:51 -------- d-----w- c:\program files\discoDSP
2010-03-05 16:49 . 2010-03-05 16:49 -------- d-----w- c:\program files\BBE Sonic Maximizer
2010-03-05 14:59 . 2010-03-05 14:59 -------- d-----w- c:\program files\VDownloader
2010-03-05 14:58 . 2010-03-05 14:58 -------- d-----w- c:\program files\Common Files\ACD Systems
2010-03-05 14:58 . 2010-03-05 14:58 -------- d-----w- c:\program files\ACD Systems
2010-03-05 14:56 . 2010-03-05 14:56 -------- d-----w- c:\program files\Winamp
2010-03-05 14:53 . 2010-03-05 14:53 -------- d-----w- c:\program files\CyberLink
2010-03-05 14:51 . 2010-03-05 14:51 -------- d-----w- c:\program files\A4Tech
2010-03-05 14:47 . 2010-03-05 14:42 -------- d-----w- c:\program files\Creative
2010-03-05 14:37 . 2010-03-05 14:37 -------- d-----w- c:\program files\Common Files\ATI Technologies
2010-03-05 14:30 . 2010-03-05 14:30 0 ----a-w- c:\windows\ativpsrm.bin
2010-03-05 14:21 . 2010-03-05 14:21 -------- d-----w- c:\program files\NVIDIA Corporation
2010-03-05 14:12 . 2010-03-05 13:55 86327 ----a-w- c:\windows\pchealth\helpctr\OfflineCache\index.dat
2010-03-05 14:12 . 2010-03-05 13:55 2740 ----a-w- c:\windows\pchealth\helpctr\PackageStore\SkuStore.bin
2010-03-05 14:11 . 2010-03-05 13:55 8972 ----a-w- c:\windows\pchealth\helpctr\Config\Cntstore.bin
2010-03-05 13:56 . 2010-03-05 13:56 -------- d-----w- c:\program files\microsoft frontpage
2010-03-05 13:53 . 2010-03-05 13:53 21812 ----a-w- c:\windows\system32\emptyregdb.dat
2010-02-03 04:52 . 2010-03-05 14:08 4605952 ----a-w- c:\windows\system32\drivers\ati2mtag.sys
2010-02-03 04:07 . 2010-03-05 14:26 311296 ----a-w- c:\windows\system32\atiiiexx.dll
2010-02-03 03:50 . 2010-03-05 14:11 3566048 ----a-w- c:\windows\system32\ati3duag.dll
2010-02-03 03:40 . 2010-03-05 14:26 446464 ----a-w- c:\windows\system32\ATIDEMGX.dll
2010-02-03 03:39 . 2010-03-05 14:11 301568 ----a-w- c:\windows\system32\ati2dvag.dll
2010-02-03 03:35 . 2010-03-05 14:11 2176640 ----a-w- c:\windows\system32\ativvaxx.dll
2010-02-03 03:34 . 2010-03-05 14:26 887724 ----a-w- c:\windows\system32\ativva6x.dat
2010-02-03 03:34 . 2010-03-05 14:26 3 ----a-w- c:\windows\system32\ativva5x.dat
2010-02-03 03:32 . 2007-12-21 02:15 397312 ----a-w- c:\windows\system32\atiok3x2.dll
2010-02-03 03:23 . 2007-12-21 02:59 208896 ----a-w- c:\windows\system32\atipdlxx.dll
2010-02-03 03:23 . 2007-12-21 02:59 155648 ----a-w- c:\windows\system32\Oemdspif.dll
2010-02-03 03:23 . 2007-12-21 02:59 26112 ----a-w- c:\windows\system32\Ati2mdxx.exe
2010-02-03 03:23 . 2007-12-21 02:59 43520 ----a-w- c:\windows\system32\ati2edxx.dll
2010-02-03 03:22 . 2007-12-21 02:58 159744 ----a-w- c:\windows\system32\ati2evxx.dll
2010-02-03 03:21 . 2007-12-21 02:57 602112 ----a-w- c:\windows\system32\ati2evxx.exe
2010-02-03 03:19 . 2007-12-21 02:56 53248 ----a-w- c:\windows\system32\ATIDDC.DLL
2010-02-03 03:18 . 2007-12-21 02:24 65024 ----a-w- c:\windows\system32\amdpcom32.dll
2010-02-03 03:17 . 2007-12-21 02:17 53248 ----a-w- c:\windows\system32\drivers\ati2erec.dll
2010-02-03 03:15 . 2007-12-21 02:20 565248 ----a-w- c:\windows\system32\atikvmag.dll
2010-02-03 03:12 . 2007-12-21 02:18 17408 ----a-w- c:\windows\system32\atitvo32.dll
2010-02-03 03:06 . 2010-03-05 14:11 638976 ----a-w- c:\windows\system32\ati2cqag.dll
.
(((((((((((((((((((((((((((((((((( Spouštěcí body v registru )))))))))))))))))))))))))))))))))))))))))))))
.
.
*Poznámka* prázdné záznamy a legitimní výchozí údaje nejsou zobrazeny.
REGEDIT4
[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{D4027C7F-154A-4066-A1AD-4243D8127440}]
2009-09-02 13:56 1175944 ----a-w- c:\program files\Ask.com\GenericAskToolbar.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
"{D4027C7F-154A-4066-A1AD-4243D8127440}"= "c:\program files\Ask.com\GenericAskToolbar.dll" [2009-09-02 1175944]
[HKEY_CLASSES_ROOT\clsid\{d4027c7f-154a-4066-a1ad-4243d8127440}]
[HKEY_CLASSES_ROOT\GenericAskToolbar.ToolbarWnd.1]
[HKEY_CLASSES_ROOT\TypeLib\{2996F0E7-292B-4CAE-893F-47B8B1C05B56}]
[HKEY_CLASSES_ROOT\GenericAskToolbar.ToolbarWnd]
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Toolbar\Webbrowser]
"{D4027C7F-154A-4066-A1AD-4243D8127440}"= "c:\program files\Ask.com\GenericAskToolbar.dll" [2009-09-02 1175944]
[HKEY_CLASSES_ROOT\clsid\{d4027c7f-154a-4066-a1ad-4243d8127440}]
[HKEY_CLASSES_ROOT\GenericAskToolbar.ToolbarWnd.1]
[HKEY_CLASSES_ROOT\TypeLib\{2996F0E7-292B-4CAE-893F-47B8B1C05B56}]
[HKEY_CLASSES_ROOT\GenericAskToolbar.ToolbarWnd]
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"RemoteCenter"="c:\program files\Creative\SBAudigy4\Entertainment Center\RcMan.exe" [2004-09-21 172032]
"Creative Detector"="c:\program files\Creative\MediaSource\Detector\CTDetect.exe" [2004-06-15 98304]
"Creative MediaSource Go"="c:\program files\Creative\MediaSource\Go\CTCMSGo.exe" [2004-04-29 135168]
"Google Update"="c:\documents and settings\Tuaoid\Local Settings\Data aplikací\Google\Update\GoogleUpdate.exe" [2010-03-07 135664]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"CTDVDDET"="c:\program files\Creative\SBAudigy4\DVDAudio\CTDVDDET.EXE" [2003-06-18 45056]
"AudioDrvEmulator"="c:\program files\Creative\Shared Files\Module Loader\DLLML.exe" [2004-09-22 45056]
"CTSysVol"="c:\program files\Creative\SBAudigy4\Surround Mixer\CTSysVol.exe" [2003-09-17 57344]
"CTHelper"="CTHELPER.EXE" [2004-09-23 24576]
"UpdReg"="c:\windows\UpdReg.EXE" [2000-05-11 90112]
"WheelMouse"="c:\program files\A4Tech\Mouse\Amoumain.exe" [2006-02-17 163840]
"RemoteControl"="c:\program files\CyberLink\PowerDVD\PDVDServ.exe" [2006-11-23 56928]
"LanguageShortcut"="c:\program files\CyberLink\PowerDVD\Language\Language.exe" [2006-12-05 54832]
"SunJavaUpdateSched"="c:\program files\Java\jre1.6.0_05\bin\jusched.exe" [2008-02-22 144784]
"WinampAgent"="c:\program files\Winamp\winampa.exe" [2008-07-09 36352]
"AdobeCS4ServiceManager"="c:\program files\Common Files\Adobe\CS4ServiceManager\CS4ServiceManager.exe" [2008-08-14 611712]
"Adobe Acrobat Speed Launcher"="c:\program files\Adobe\Acrobat 9.0\Acrobat\Acrobat_sl.exe" [2008-06-12 37232]
"Acrobat Assistant 8.0"="c:\program files\Adobe\Acrobat 9.0\Acrobat\Acrotray.exe" [2008-06-11 640376]
"Adobe Reader Speed Launcher"="c:\program files\Adobe\Reader 9.0\Reader\Reader_sl.exe" [2009-02-27 35696]
"QuickTime Task"="c:\program files\QuickTime\QTTask.exe" [2008-09-06 413696]
"Synchronization Manager"="c:\windows\system32\mobsync.exe" [2008-04-14 143872]
"amd_dc_opt"="c:\program files\AMD\Dual-Core Optimizer\amd_dc_opt.exe" [2008-07-22 77824]
"StartCCC"="c:\program files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" [2010-02-02 98304]
"avast!"="c:\progra~1\ALWILS~1\Avast4\ashDisp.exe" [2009-11-24 81000]
"GrooveMonitor"="c:\program files\Microsoft Office\Office12\GrooveMonitor.exe" [2006-10-26 31016]
"ISUSPM Startup"="c:\progra~1\COMMON~1\INSTAL~1\UPDATE~1\ISUSPM.exe" [2004-06-16 221184]
"ISUSScheduler"="c:\program files\Common Files\InstallShield\UpdateService\issch.exe" [2004-06-16 81920]
"CorelDRAW Graphics Suite 11b"="c:\program files\Corel\Corel Graphics 12\Languages\CZ\Programs\Registration.exe" [2004-06-22 729088]
"H2O"="c:\program files\SyncroSoft\Pos\H2O\cledx.exe" [2005-10-31 307200]
[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="c:\windows\system32\CTFMON.EXE" [2008-04-14 15360]
c:\documents and settings\All Users\Nabˇdka Start\Programy\Po spuçtŘnˇ\
ASUS WiFi-AP Solo.lnk - c:\program files\ASUS WiFi-AP Solo\RtWLan.exe [2010-3-5 995328]
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\system32\\sessmgr.exe"=
"%windir%\\Network Diagnostic\\xpnetdiag.exe"=
"c:\\Program Files\\NVIDIA Corporation\\NetworkAccessManager\\Apache Group\\Apache2\\bin\\Apache.exe"=
"c:\\Program Files\\Common Files\\Adobe\\CS4ServiceManager\\CS4ServiceManager.exe"=
"c:\\Program Files\\Common Files\\Adobe\\Adobe Version Cue CS4\\Server\\bin\\VersionCueCS4.exe"=
"c:\\Program Files\\Electronic Arts\\Burnout(TM) Paradise The Ultimate Box\\BurnoutLauncher.exe"=
"c:\\Program Files\\Electronic Arts\\Burnout(TM) Paradise The Ultimate Box\\BurnoutConfigTool.exe"=
"c:\\Program Files\\Electronic Arts\\Burnout(TM) Paradise The Ultimate Box\\BurnoutParadise.exe"=
"c:\\Program Files\\ICQ7.0\\ICQ.exe"=
"c:\\Program Files\\ICQ7.0\\aolload.exe"=
"c:\\Program Files\\Valve\\Steam\\SteamApps\\tuaoid\\counter-strike source\\hl2.exe"=
"c:\\Program Files\\Skype\\Phone\\Skype.exe"=
"c:\\Program Files\\Microsoft Office\\Office12\\OUTLOOK.EXE"=
"c:\\Program Files\\Microsoft Office\\Office12\\GROOVE.EXE"=
"c:\\Program Files\\Microsoft Office\\Office12\\ONENOTE.EXE"=
"c:\\Program Files\\uTorrent\\uTorrent.exe"=
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\GloballyOpenPorts\List]
"5353:TCP"= 5353:TCP:Adobe CSI CS4
"3703:TCP"= 3703:TCP:Adobe Version Cue CS4 Server
"3704:TCP"= 3704:TCP:Adobe Version Cue CS4 Server
"51000:TCP"= 51000:TCP:Adobe Version Cue CS4 Server
"51001:TCP"= 51001:TCP:Adobe Version Cue CS4 Server
R1 aswSP;avast! Self Protection;c:\windows\system32\drivers\aswSP.sys [7.3.2010 15:29 114768]
R2 aswFsBlk;aswFsBlk;c:\windows\system32\drivers\aswFsBlk.sys [7.3.2010 15:29 20560]
R3 CLEDX;Team H2O CLEDX service;c:\windows\system32\drivers\cledx.sys [8.3.2010 15:20 33792]
S0 sptd;sptd;c:\windows\system32\drivers\sptd.sys [5.3.2010 23:01 691696]
S3 Adobe Version Cue CS4;Adobe Version Cue CS4;c:\program files\Common Files\Adobe\Adobe Version Cue CS4\Server\bin\VersionCueCS4.exe [15.8.2008 5:46 284016]
S3 RTLWUSB;Realtek RTL8187 Wireless 802.11g 54Mbps USB 2.0 Network Adapter;c:\windows\system32\drivers\RTL8187.sys [5.3.2010 15:20 176128]
S3 SjyPkt;SjyPkt;c:\windows\system32\drivers\SjyPkt.sys [5.3.2010 15:20 13532]
.
Obsah adresáře 'Naplánované úlohy'
2010-03-05 c:\windows\Tasks\AppleSoftwareUpdate.job
- c:\program files\Apple Software Update\SoftwareUpdate.exe [2008-07-30 11:34]
2010-03-09 c:\windows\Tasks\Scheduled Update for Ask Toolbar.job
- c:\program files\Ask.com\UpdateTask.exe [2009-09-02 13:56]
.
.
------- Doplňkový sken -------
.
uStart Page = hxxp://start.icq.com/
IE: Append Link Target to Existing PDF - c:\program files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll/AcroIEAppendSelLinks.html
IE: Append to Existing PDF - c:\program files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll/AcroIEAppend.html
IE: Convert Link Target to Adobe PDF - c:\program files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll/AcroIECaptureSelLinks.html
IE: Convert to Adobe PDF - c:\program files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll/AcroIECapture.html
IE: E&xport to Microsoft Excel - c:\progra~1\MICROS~2\Office12\EXCEL.EXE/3000
IE: {{88EB38EF-4D2C-436D-ABD3-56B232674062} - c:\program files\ICQ7.0\ICQ.exe
LSP: %SYSTEMROOT%\system32\nvappfilter.dll
FF - ProfilePath - c:\documents and settings\Tuaoid\Data aplikací\Mozilla\Firefox\Profiles\041ifgqb.default\
FF - prefs.js: browser.search.selectedEngine - ICQ Search
FF - prefs.js: browser.startup.homepage - hxxp://start.icq.com/
FF - prefs.js: keyword.URL - hxxp://search.icq.com/search/afe_results.php?ch_id=afex&tb_ver=2.0.0.0&q=
---- NASTAVENÍ FIREFOXU ----
c:\program files\Mozilla Firefox\defaults\pref\firefox-l10n.js - pref("browser.fixup.alternate.suffix", ".cz");
.
- - - - NEPLATNÉ POLOŽKY ODSTRANĚNÉ Z REGISTRU - - - -
AddRemove-Native Instruments - Rig Kontrol 3 Driver - c:\program files\Native Instruments Rig Kontrol 3 Driver\uninst.exe Software\Native Instruments\Rig Kontrol 3 Driver\Setup
AddRemove-PC Translator - c:\docume~1\Tuaoid\LOCALS~1\Temp\UN32.EXE
**************************************************************************
catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2010-03-09 11:04
Windows 5.1.2600 Service Pack 3 NTFS
skenování skrytých procesů ...
skenování skrytých položek 'Po spuštění' ...
skenování skrytých souborů ...
sken byl úspešně dokončen
skryté soubory: 0
**************************************************************************
.
--------------------- ZAMKNUTÉ KLÍČE V REGISTRU ---------------------
[HKEY_USERS\S-1-5-21-602162358-1770027372-725345543-1003\Software\Microsoft\SystemCertificates\AddressBook*]
@Allowed: (Read) (RestrictedCode)
@Allowed: (Read) (RestrictedCode)
.
--------------------- Knihovny navázané na běžící procesy ---------------------
- - - - - - - > 'winlogon.exe'(680)
c:\windows\system32\Ati2evxx.dll
c:\windows\system32\atiadlxx.dll
c:\program files\Common Files\Adobe\Adobe Drive CS4\AdobeDriveCS4_NP.dll
- - - - - - - > 'lsass.exe'(736)
c:\windows\system32\nvappfilter.dll
.
Celkový čas: 2010-03-09 11:05:42
ComboFix-quarantined-files.txt 2010-03-09 10:05
Před spuštěním: Volných bajtů: 160 429 772 800
Po spuštění: Volných bajtů: 160 400 072 704
- - End Of File - - 2CE38306153FBB2570E87348026662F7