Otestoval jsem počítač tímto programem, jak poznám jestli jsem chytil vir?
ComboFix 09-03-28.06 - Tomáš Bureš 2009-04-01 14:16:56.1 - NTFSx86
Microsoft® Windows Vista™ Home Premium 6.0.6001.1.1250.1.1029.18.3069.1985 [GMT 2:00]
Spuštěný z: c:\users\Tomáš Bureš\Desktop\ComboFix.exe
AV: avast! antivirus 4.8.1227 [VPS 090331-0] *On-access scanning disabled* (Updated)
* Vytvořen nový Bod Obnovení
.
((((((((((((((((((((((((( Soubory vytvořené od 2009-03-01 do 2009-04-01 )))))))))))))))))))))))))))))))
.
2009-03-28 18:51 . 2009-03-28 18:55 d-------- c:\program files\ICQ6.5
2009-03-28 17:28 . 2009-03-28 17:28 d-------- c:\users\Tomáš Bureš\AppData\Roaming\Canneverbe_Limited
2009-03-27 23:09 . 2009-03-28 17:29 d-------- c:\program files\OCCT
2009-03-27 15:24 . 2009-03-28 17:28 d-------- c:\program files\CDBurnerXP
2009-03-26 19:05 . 2009-03-26 19:08 d-------- c:\program files\ICQ6(763).5
2009-03-24 14:27 . 2009-03-24 14:27 d-------- c:\users\Tomáš Bureš\AppData\Roaming\vlc(890)
2009-03-21 10:11 . 2009-03-22 00:26 d-------- c:\program files\Wise Disk Cleaner
2009-03-20 21:24 . 2009-03-20 21:36 d-------- c:\users\Tomáš Bureš\kbpki
2009-03-20 21:24 . 2009-03-20 21:36 d-------- c:\users\Tomáš Bureš\kbpki
2009-03-20 11:31 . 2009-03-20 11:31 d-------- c:\program files\RegCleaner
2009-03-20 11:29 . 2009-03-20 11:29 d-------- c:\program files\WinASO
2009-03-19 15:27 . 2009-03-19 15:34 d-------- c:\users\Tomáš Bureš\AppData\Roaming\Zoner
2009-03-19 15:27 . 2009-03-19 15:27 d-------- c:\program files\Zoner
2009-03-18 12:14 . 2009-03-18 12:14 d-------- c:\program files\Simpli Software
2009-03-17 12:32 . 2009-03-17 12:32 d-------- c:\program files\VirtualDJ
2009-03-15 11:08 . 2009-03-15 11:08 d-------- c:\users\Tomáš Bureš\AppData\Roaming\Any Video Converter
2009-03-15 11:08 . 2009-03-15 11:08 d-------- c:\program files\Any Video Converter
2009-03-14 18:24 . 2009-03-14 18:24 d-------- c:\users\Tomáš Bureš\AppData\Roaming\Leawo
2009-03-14 18:24 . 2009-03-14 18:24 d-------- c:\program files\Leawo
2009-03-14 18:18 . 2009-03-14 18:23 d-------- c:\program files\WM Converter
2009-03-13 23:55 . 2009-03-13 23:55 d-------- c:\users\Tomáš Bureš\AppData\Roaming\Mozilla
2009-03-13 23:55 . 2009-03-13 23:55 d-------- c:\users\Tomáš Bureš\AppData\Roaming\Broad Intelligence
2009-03-13 10:24 . 2009-03-13 10:25 d-------- c:\program files\MediaCoder
2009-03-13 10:17 . 2009-03-13 10:44 d-------- c:\users\Tomáš Bureš\AppData\Roaming\Audacity
2009-03-13 10:17 . 2009-03-13 10:17 d-------- c:\program files\Audacity 1.3 Beta (Unicode)
2009-03-12 20:07 . 2008-12-05 06:32 428,544 --a------ c:\windows\System32\EncDec.dll
2009-03-12 20:07 . 2008-12-05 06:32 293,376 --a------ c:\windows\System32\psisdecd.dll
2009-03-12 20:07 . 2008-12-05 06:31 217,088 --a------ c:\windows\System32\psisrndr.ax
2009-03-12 20:07 . 2008-12-05 06:31 177,664 --a------ c:\windows\System32\mpg2splt.ax
2009-03-12 20:07 . 2008-12-05 06:31 80,896 --a------ c:\windows\System32\MSNP.ax
2009-03-12 20:07 . 2008-04-23 06:41 57,856 --a------ c:\windows\System32\MSDvbNP.ax
2009-03-12 20:06 . 2008-12-16 05:29 8,147,456 --a------ c:\windows\System32\wmploc.DLL
2009-03-12 20:06 . 2009-02-09 05:10 2,033,152 --a------ c:\windows\System32\win32k.sys
2009-03-12 20:06 . 2008-10-21 07:25 1,645,568 --a------ c:\windows\System32\connect.dll
2009-03-12 20:06 . 2008-11-27 06:43 268,288 --a------ c:\windows\System32\schannel.dll
2009-03-12 20:06 . 2008-10-22 05:57 241,152 --a------ c:\windows\System32\PortableDeviceApi.dll
2009-03-12 20:06 . 2008-12-16 07:31 7,680 --a------ c:\windows\System32\spwmp.dll
2009-03-12 20:06 . 2008-12-16 07:31 4,096 --a------ c:\windows\System32\msdxm.ocx
2009-03-12 20:06 . 2008-12-16 07:31 4,096 --a------ c:\windows\System32\dxmasf.dll
2009-03-12 08:53 . 2009-03-28 17:23 d-------- c:\users\Tomáš Bureš\AppData\Roaming\vlc
2009-03-11 23:20 . 2009-03-11 23:20 d-------- c:\windows\System32\Adobe
2009-03-11 09:12 . 2009-03-11 09:12 d-------- c:\program files\Liturgicky kalendar
2009-03-10 21:56 . 2009-03-28 17:15 d-------- c:\program files\VideoLAN
2009-03-10 18:40 . 2008-08-28 05:40 712,704 --a------ c:\windows\System32\WindowsCodecs.dll
2009-03-10 18:40 . 2008-08-28 05:40 425,472 --a------ c:\windows\System32\PhotoMetadataHandler.dll
2009-03-10 18:40 . 2008-08-28 05:40 347,136 --a------ c:\windows\System32\WindowsCodecsExt.dll
2009-03-10 18:40 . 2008-09-18 06:56 147,456 --a------ c:\windows\System32\Faultrep.dll
2009-03-10 18:40 . 2008-09-18 06:56 125,952 --a------ c:\windows\System32\wersvc.dll
2009-03-09 14:14 . 2009-03-09 14:14 dr------- c:\users\Guest\Videos
2009-03-09 14:14 . 2009-03-09 14:14 dr------- c:\users\Guest\Searches
2009-03-09 14:14 . 2009-03-09 14:14 dr------- c:\users\Guest\Saved Games
2009-03-09 14:14 . 2009-03-09 14:14 dr------- c:\users\Guest\Pictures
2009-03-09 14:14 . 2009-03-09 14:14 dr------- c:\users\Guest\Music
2009-03-09 14:14 . 2009-03-09 14:14 dr------- c:\users\Guest\Links
2009-03-09 14:14 . 2009-03-09 14:14 dr------- c:\users\Guest\Downloads
2009-03-09 14:14 . 2009-03-09 14:14 dr------- c:\users\Guest\Documents
2009-03-09 14:14 . 2009-03-09 14:14 dr------- c:\users\Guest\Contacts
2009-03-09 14:14 . 2009-03-09 14:14 d-------- c:\users\Guest\AppData\Roaming\Validity
2009-03-09 14:14 . 2006-11-02 14:37 d-------- c:\users\Guest\AppData\Roaming\Media Center Programs
2009-03-09 14:14 . 2009-03-09 14:14 d--h----- c:\users\Guest\AppData
2009-03-09 14:14 . 2009-03-28 17:15 d-------- c:\users\Guest
2009-03-09 14:03 . 2009-03-09 23:39 d-------- c:\users\Tomáš Bureš\AppData\Roaming\gtk-2.0
2009-03-09 14:03 . 2009-03-09 14:03 d-------- c:\users\Tomáš Bureš\.thumbnails
2009-03-09 14:03 . 2009-03-09 14:03 d-------- c:\users\Tomáš Bureš\.thumbnails
2009-03-09 14:01 . 2009-03-18 21:54 d-------- c:\users\Tomáš Bureš\.gimp-2.6
2009-03-09 14:01 . 2009-03-18 21:54 d-------- c:\users\Tomáš Bureš\.gimp-2.6
2009-03-09 14:01 . 2009-03-09 14:01 d-------- c:\users\Tomáš Bureš\.gegl-0.0
2009-03-09 14:01 . 2009-03-09 14:01 d-------- c:\users\Tomáš Bureš\.gegl-0.0
2009-03-09 14:00 . 2009-03-09 14:00 d-------- c:\program files\GIMP-2.0
2009-03-08 21:10 . 2008-05-30 15:11 3,850,760 --a------ c:\windows\System32\D3DX9_38.dll
2009-03-08 21:01 . 2009-03-08 21:01 d-------- c:\program files\SystemRequirementsLab
2009-03-08 20:34 . 2009-03-08 20:34 d-------- c:\users\Tomáš Bureš\AppData\Roaming\DAEMON Tools Pro
2009-03-08 20:34 . 2009-03-08 20:34 d-------- c:\users\Tomáš Bureš\AppData\Roaming\DAEMON Tools
2009-03-08 20:33 . 2009-03-08 20:33 d-------- c:\users\All Users\DAEMON Tools Lite
2009-03-08 20:33 . 2009-03-08 20:33 d-------- c:\programdata\DAEMON Tools Lite
2009-03-08 20:33 . 2009-03-08 20:33 d-------- c:\program files\DAEMON Tools Toolbar
2009-03-08 20:33 . 2009-03-08 20:33 d-------- c:\program files\DAEMON Tools Lite
2009-03-08 20:15 . 2009-03-08 20:15 717,296 --a------ c:\windows\System32\drivers\sptd.sys
2009-03-08 20:13 . 2009-03-08 20:43 d-------- c:\users\Tomáš Bureš\AppData\Roaming\DAEMON Tools Lite
2009-03-03 14:50 . 2009-03-30 20:34 d-------- c:\program files\Rockstar Games
2009-03-02 22:48 . 2009-03-02 22:48 d-------- c:\program files\MagicScore Music Software
2009-03-01 11:59 . 2009-03-01 12:01 d-------- c:\users\All Users\TrackMania
2009-03-01 11:59 . 2009-03-01 12:01 d-------- c:\programdata\TrackMania
2009-03-01 11:53 . 2009-03-01 11:56 d-------- c:\program files\TmNationsForever
2009-03-01 10:59 . 2009-03-01 10:59 d-------- c:\program files\eTesty
.
(((((((((((((((((((((((((((((((((((((((( Find3M výpis ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2009-04-01 12:20 2,359,296 --sha-w c:\users\Tomáš Bureš\NTUSER.DAT
2009-04-01 12:20 2,359,296 --sha-w c:\users\Tomáš Bureš\NTUSER.DAT
2009-04-01 12:16 83,197 ----a-w c:\users\All Users\nvModes.dat
2009-04-01 12:16 83,197 ----a-w c:\programdata\nvModes.dat
2009-03-30 18:32 --------- d--h--w c:\program files\InstallShield Installation Information
2009-03-30 18:19 --------- d-----w c:\users\Tomáš Bureš\AppData\Roaming\dvdcss
2009-03-30 17:36 --------- d-----w c:\users\Tomáš Bureš\AppData\Roaming\Skype
2009-03-30 17:25 --------- d-----w c:\users\Tomáš Bureš\AppData\Roaming\skypePM
2009-03-29 19:31 --------- d-----w c:\users\Tomáš Bureš\AppData\Roaming\Spyware Terminator
2009-03-29 07:40 --------- d-----w c:\program files\ICQ6Toolbar
2009-03-28 19:52 --------- d-----w c:\users\Tomáš Bureš\AppData\Roaming\esmska
2009-03-28 15:46 --------- d-----w c:\program files\SpeedFan
2009-03-28 15:28 --------- d-----w c:\users\Tomáš Bureš\AppData\Roaming\Canneverbe_Limited
2009-03-28 15:23 --------- d-----w c:\users\Tomáš Bureš\AppData\Roaming\vlc
2009-03-28 15:15 --------- d-----w c:\programdata\Spyware Terminator
2009-03-28 15:15 --------- d-----w c:\program files\Spyware Terminator
2009-03-25 13:07 --------- d-----w c:\program files\Java
2009-03-24 12:27 --------- d-----w c:\users\Tomáš Bureš\AppData\Roaming\vlc(890)
2009-03-19 14:19 --------- d-----w c:\program files\Plane Arcade
2009-03-19 13:34 --------- d-----w c:\users\Tomáš Bureš\AppData\Roaming\Zoner
2009-03-18 21:03 --------- d-----w c:\programdata\NVIDIA
2009-03-18 15:38 --------- d-----w c:\program files\CCleaner
2009-03-16 15:21 --------- d-----w c:\users\Tomáš Bureš\AppData\Roaming\ICQ
2009-03-16 12:49 --------- d-----w c:\program files\Acer
2009-03-15 09:08 --------- d-----w c:\users\Tomáš Bureš\AppData\Roaming\Any Video Converter
2009-03-14 16:24 --------- d-----w c:\users\Tomáš Bureš\AppData\Roaming\Leawo
2009-03-13 21:55 --------- d-----w c:\users\Tomáš Bureš\AppData\Roaming\Mozilla
2009-03-13 21:55 --------- d-----w c:\users\Tomáš Bureš\AppData\Roaming\Broad Intelligence
2009-03-13 08:44 --------- d-----w c:\users\Tomáš Bureš\AppData\Roaming\Audacity
2009-03-12 06:51 --------- d-----w c:\users\Tomáš Bureš\AppData\Roaming\NCH Swift Sound
2009-03-12 06:49 --------- d-----w c:\program files\NCH Software
2009-03-11 21:30 --------- d-----w c:\program files\VistaCodecPack
2009-03-11 21:21 --------- d-----w c:\program files\dvdisaster
2009-03-09 21:39 --------- d-----w c:\users\Tomáš Bureš\AppData\Roaming\gtk-2.0
2009-03-08 19:04 410,984 ----a-w c:\windows\System32\deploytk.dll
2009-03-08 18:43 --------- d-----w c:\users\Tomáš Bureš\AppData\Roaming\DAEMON Tools Lite
2009-03-08 18:34 --------- d-----w c:\users\Tomáš Bureš\AppData\Roaming\DAEMON Tools Pro
2009-03-08 18:34 --------- d-----w c:\users\Tomáš Bureš\AppData\Roaming\DAEMON Tools
2009-03-07 06:51 --------- d-----w c:\users\Tomáš Bureš\AppData\Roaming\Comodo
2009-03-07 06:49 --------- d-----w c:\programdata\comodo
2009-03-06 19:04 --------- d-----w c:\programdata\DVD Shrink
2009-03-02 13:46 --------- d-----w c:\program files\Yahoo!
2009-02-28 14:03 --------- d-----w c:\programdata\LGMOBILEAX
2009-02-28 13:00 --------- d-----w c:\program files\ABCgames Cheater
2009-02-25 21:26 --------- d--h--w c:\program files\InstallJammer Registry
2009-02-25 21:25 --------- d-----w c:\program files\Esmska
2009-02-25 11:17 --------- d-----w c:\program files\City Interactive
2009-02-24 20:16 --------- d-----w c:\program files\SIW
2009-02-24 13:13 --------- d-----w c:\users\Tomáš Bureš\AppData\Roaming\DeskSoft
2009-02-24 13:10 62,976 ----a-w c:\windows\DTDraw.dll
2009-02-24 09:49 --------- d-----w c:\users\Tomáš Bureš\AppData\Roaming\Samsung
2009-02-24 09:36 --------- d-----w c:\programdata\NCH Software
2009-02-23 17:23 --------- d-----w c:\program files\Samsung
2009-02-23 17:22 --------- d-----w c:\program files\Common Files\Adobe
2009-02-22 12:09 --------- d-----w c:\program files\Cyberlink
2009-02-22 12:05 --------- d-----w c:\programdata\CyberLink
2009-02-22 11:47 142,592 ----a-w c:\windows\system32\drivers\sp_rsdrv2.sys
2009-02-21 21:22 --------- d-----w c:\users\Tomáš Bureš\AppData\Roaming\FreeCommander
2009-02-21 21:22 --------- d-----w c:\program files\FreeCommander
2009-02-21 20:14 --------- d-s---w c:\users\Tomáš Bureš\AppData\Roaming\Microsoft
2009-02-21 20:13 --------- d-----w c:\programdata\NCH Swift Sound
2009-02-21 17:30 --------- d-----w c:\program files\Elaborate Bytes
2009-02-20 17:14 --------- d-----w c:\program files\Common Files\SNP2UVC
2009-02-20 05:20 --------- d-----w c:\program files\Recuva
2009-02-19 20:52 --------- d-----w c:\program files\FDRLab
2009-02-19 17:48 --------- d-----w c:\program files\VS Revo Group
2009-02-19 16:49 --------- d-----w c:\program files\HD Tune
2009-02-19 16:48 --------- d-----w c:\users\Tomáš Bureš\AppData\Roaming\AltrixSoft
2009-02-19 16:47 --------- d-----w c:\users\Tomáš Bureš\AppData\Roaming\Google
2009-02-19 16:45 --------- d-----w c:\program files\Google
2009-02-19 16:44 --------- d-----w c:\users\Tomáš Bureš\AppData\Roaming\GRETECH
2009-02-19 16:44 --------- d-----w c:\programdata\GRETECH
2009-02-19 16:44 --------- d-----w c:\program files\GRETECH
2009-02-19 16:43 --------- d-----w c:\program files\Rising Research
2009-02-19 16:42 --------- d-----w c:\program files\DVDFab Decrypter 3
2009-02-19 16:42 --------- d-----w c:\program files\DVD Shrink
2009-02-19 16:41 --------- d-----w c:\program files\NewFolder Software
2009-02-19 16:41 --------- d-----w c:\program files\Defraggler
2009-02-19 16:27 --------- d-----w c:\program files\Ashampoo
2009-02-19 16:24 --------- d-----w c:\users\Tomáš Bureš\AppData\Roaming\Ashampoo
2009-02-19 16:22 --------- d-----w c:\programdata\ashampoo
2009-02-19 16:13 --------- d-----w c:\programdata\AVS4YOU
2009-02-19 16:13 --------- d-----w c:\program files\Common Files\AVSMedia
2009-02-19 16:13 --------- d-----w c:\program files\AVS4YOU
2009-02-19 16:12 --------- d-----w c:\program files\A-one 3GP Video Converter
2009-02-19 14:06 --------- d-----w c:\program files\Common Files\PX Storage Engine
2009-02-19 08:07 --------- d-----w c:\program files\Acer GameZone
2009-02-19 06:52 --------- d-----w c:\programdata\ScanSoft
2009-02-19 06:25 --------- d-----w c:\program files\MSXML 4.0
2009-02-18 21:12 --------- d-----w c:\users\Tomáš Bureš\AppData\Roaming\Adobe
2009-02-18 20:44 --------- d-----w c:\programdata\Trymedia
2009-02-18 20:27 --------- d-----w c:\program files\HWiNFO32
2009-02-18 20:22 --------- d-----w c:\program files\Realtek AC97
2009-02-18 19:45 --------- d-----r c:\users\Tomáš Bureš\AppData\Roaming\Brother
2009-02-18 19:37 --------- d-----w c:\users\Tomáš Bureš\AppData\Roaming\Yahoo!
2009-02-18 19:32 --------- d-----w c:\users\Tomáš Bureš\AppData\Roaming\OpenOffice.org
2009-02-18 19:23 --------- d-----w c:\program files\OpenOffice.org 3
2009-02-18 19:20 --------- d-----w c:\program files\Brother
2009-02-18 19:18 --------- d-----w c:\program files\Nuance
2009-02-18 19:17 --------- d-----w c:\program files\ScanSoft
.
(((((((((((((((((((((((((((((((((( Spouštěcí body v registru )))))))))))))))))))))))))))))))))))))))))))))
.
.
*Poznámka* prázdné záznamy a legitimní výchozí údaje nejsou zobrazeny.
REGEDIT4
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"SynTPEnh"="c:\program files\Synaptics\SynTP\SynTPEnh.exe" [2008-04-04 1037608]
"ePower_DMC"="c:\program files\Acer\Empowering Technology\ePower\ePower_DMC.exe" [2008-03-11 397312]
"eAudio"="c:\program files\Acer\Empowering Technology\eAudio\eAudio.exe" [2008-03-07 544768]
"WarReg_PopUp"="c:\program files\Acer\WR_PopUp\WarReg_PopUp.exe" [2008-01-29 303104]
"IAAnotif"="c:\program files\Intel\Intel Matrix Storage Manager\iaanotif.exe" [2007-10-03 178712]
"PLFSetI"="c:\windows\PLFSetI.exe" [2007-10-23 200704]
"LManager"="c:\progra~1\LAUNCH~1\LManager.exe" [2008-04-28 809480]
"avast!"="c:\progra~1\ALWILS~1\Avast4\ashDisp.exe" [2008-07-19 78008]
"SSBkgdUpdate"="c:\program files\Common Files\Scansoft Shared\SSBkgdUpdate\SSBkgdupdate.exe" [2006-10-25 210472]
"IndexSearch"="c:\program files\ScanSoft\PaperPort\IndexSearch.exe" [2007-10-11 46368]
"PPort11reminder"="c:\program files\ScanSoft\PaperPort\Ereg\Ereg.exe" [2007-08-31 328992]
"BrMfcWnd"="c:\program files\Brother\Brmfcmon\BrMfcWnd.exe" [2008-02-19 1089536]
"SpywareTerminator"="c:\program files\Spyware Terminator\SpywareTerminatorShield.exe" [2009-02-22 2233856]
"SunJavaUpdateSched"="c:\program files\Java\jre6\bin\jusched.exe" [2009-03-08 148888]
"NvCplDaemon"="c:\windows\system32\NvCpl.dll" [2008-04-23 13535776]
"NvMediaCenter"="c:\windows\system32\NvMcTray.dll" [2008-04-23 92704]
"RtHDVCpl"="RtHDVCpl.exe" [2008-03-11 c:\windows\RtHDVCpl.exe]
"Skytel"="Skytel.exe" [2007-11-20 c:\windows\SkyTel.exe]
c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\
Bluetooth.lnk - c:\program files\WIDCOMM\Bluetooth Software\BTTray.exe [2007-04-24 723760]
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"EnableUIADesktopToggle"= 0 (0x0)
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\explorer]
"NoResolveTrack"= 1 (0x1)
"NoFileAssociate"= 0 (0x0)
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\windows]
"AppInit_DLLs"=
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Google Update]
--a----t- 2009-02-18 20:58 133104 c:\users\Tomáš Bureš\AppData\Local\Google\Update\GoogleUpdate.exe
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\tsnp2uvc]
--a------ 2007-04-24 11:26 237568 c:\windows\tsnp2uvc.exe
[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\McAfeeAntiSpyware]
"DisableMonitoring"=dword:00000001
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\FirewallRules]
"{1A0AB43F-EB2B-47BD-97E0-EB2BFEC2C630}"= UDP:c:\program files\NewTech Infosystems\NTI Backup Now 5\SchedulerSvc.exe:SchedulerSvc.exe
"{6168D3E4-9F40-46C1-9FCA-A8D7A35DA008}"= UDP:c:\program files\NewTech Infosystems\NTI Backup Now 5\Client\Agentsvc.exe:AgentSvc.exe
"{564A0EB8-F370-447C-8810-7BBFD4064EAA}"= TCP:c:\program files\NewTech Infosystems\NTI Backup Now 5\SchedulerSvc.exe:SchedulerSvc.exe
"{20B13B6F-FB11-47D6-9D9C-EAF4110BB236}"= UDP:c:\program files\NewTech Infosystems\NTI Backup Now 5\BackupSvc.exe:BackupSvc.exe
"{230EFBA4-148D-49F9-9628-00A1DEF6289B}"= TCP:c:\program files\NewTech Infosystems\NTI Backup Now 5\Client\Agentsvc.exe:AgentSvc.exe
"{EBA9F69B-B4A6-4B8C-8F5E-1B5EC076F18F}"= TCP:c:\program files\NewTech Infosystems\NTI Backup Now 5\BackupSvc.exe:BackupSvc.exe
"{266E81F6-9758-4A6E-8380-4F98D4EEEAB5}"= c:\program files\Acer Arcade Deluxe\HomeMedia\HomeMedia.exe:Acer HomeMedia
"{0119F4C0-9694-46A2-BB29-56D69BF1241B}"= c:\program files\Acer\Acer VCM\VC.exe:Acer VCM
"{0CFFAE9B-23AD-445D-A02D-A4D66380BB7C}"= c:\program files\Skype\Phone\Skype.exe:Skype
"TCP Query User{B452D9B3-72B9-4572-AB8D-ADD919D19FDD}c:\\program files\\tmnationsforever\\tmforever.exe"= UDP:c:\program files\tmnationsforever\tmforever.exe:TmForever
"UDP Query User{067F6FD2-D3C2-4E20-A9BB-1DBE7D395889}c:\\program files\\tmnationsforever\\tmforever.exe"= TCP:c:\program files\tmnationsforever\tmforever.exe:TmForever
"{5F86330E-F0BC-4722-803E-097ABF78DA5A}"= UDP:c:\program files\Capcom\MotoGP 08 Demo\MotoGP 08\Launcher.exe:MotoGP 08
"{430D0BB0-5762-417A-9214-81DE045ADBC3}"= TCP:c:\program files\Capcom\MotoGP 08 Demo\MotoGP 08\Launcher.exe:MotoGP 08
"TCP Query User{A58F2D6F-2D1E-4354-BABD-7A842BFA289E}c:\\users\\tomáš bureš\\desktop\\racer064c\\racer\\racer.exe"= UDP:c:\users\tomáš bureš\desktop\racer064c\racer\racer.exe:racer.exe
"UDP Query User{92A9E6C0-3AFA-4019-B5EB-F8D305DBCE17}c:\\users\\tomáš bureš\\desktop\\racer064c\\racer\\racer.exe"= TCP:c:\users\tomáš bureš\desktop\racer064c\racer\racer.exe:racer.exe
"TCP Query User{CEC0B1BB-35BA-4153-9A66-FAF5C46F49B0}c:\\program files\\flatout\\flatout.exe"= UDP:c:\program files\flatout\flatout.exe:flatout
"UDP Query User{016BF76D-1293-478E-B5DF-5457D50818D6}c:\\program files\\flatout\\flatout.exe"= TCP:c:\program files\flatout\flatout.exe:flatout
"TCP Query User{7C3302F5-038A-498E-9C44-19AD4CF3A043}c:\\users\\tomáš bureš\\appdata\\local\\google\\chrome\\application\\chrome.exe"= UDP:c:\users\tomáš bureš\appdata\local\google\chrome\application\chrome.exe:chrome.exe
"UDP Query User{25CCE541-995B-4672-9D98-38654B7D5ECC}c:\\users\\tomáš bureš\\appdata\\local\\google\\chrome\\application\\chrome.exe"= TCP:c:\users\tomáš bureš\appdata\local\google\chrome\application\chrome.exe:chrome.exe
"TCP Query User{9944A596-CC1C-48ED-BB93-A63F49C00E52}c:\\program files\\icq6.5\\icq.exe"= UDP:c:\program files\icq6.5\icq.exe:ICQ
"UDP Query User{ACECA9EF-4D35-4CE1-B13A-9DCBBF758818}c:\\program files\\icq6.5\\icq.exe"= TCP:c:\program files\icq6.5\icq.exe:ICQ
R1 aswSP;avast! Self Protection;c:\windows\System32\drivers\aswSP.sys [2009-02-18 78416]
R1 PSched;Plánovač paketů technologie QoS;c:\windows\System32\drivers\pacer.sys [2009-02-19 72192]
R1 sp_rsdrv2;Spyware Terminator Driver 2;c:\windows\System32\drivers\sp_rsdrv2.sys [2009-02-22 142592]
R2 aswFsBlk;aswFsBlk;c:\windows\System32\drivers\aswFsBlk.sys [2009-02-18 20560]
R2 aswMonFlt;aswMonFlt;c:\windows\System32\drivers\aswMonFlt.sys [2009-02-18 51280]
R2 BUNAgentSvc;NTI Backup Now 5 Agent Service;c:\program files\NewTech Infosystems\NTI Backup Now 5\Client\Agentsvc.exe [2008-02-25 21752]
R2 ETService;Empowering Technology Service;c:\program files\Acer\Empowering Technology\Service\ETService.exe [2008-04-25 24576]
R2 HWiNFO32;HWiNFO32 Kernel Driver;c:\program files\HWiNFO32\HWiNFO32.SYS [2009-02-18 15976]
R2 ICQ Service;ICQ Service;c:\program files\ICQ6Toolbar\ICQ Service.exe [2009-03-12 222456]
R2 NTIBackupSvc;NTI Backup Now 5 Backup Service;c:\program files\NewTech Infosystems\NTI Backup Now 5\BackupSvc.exe [2008-02-25 49152]
R2 NTISchedulerSvc;NTI Backup Now 5 Scheduler Service;c:\program files\NewTech Infosystems\NTI Backup Now 5\SchedulerSvc.exe [2008-02-25 131072]
R2 vfsFPService;Validity Fingerprint Service;c:\windows\System32\vfsFPService.exe [2008-04-22 599344]
R3 itecir;ITECIR Infrared Receiver;c:\windows\System32\drivers\itecir.sys [2008-04-25 54784]
R3 L1E;NDIS Miniport Driver for Atheros AR8121/AR8113/AR8114 PCI-E Ethernet Controller;c:\windows\System32\drivers\L1E60x86.sys [2008-04-25 48128]
R3 vfs101x;vfs101x;c:\windows\System32\drivers\vfs101x.sys [2008-04-22 40752]
S3 JMCR;JMCR;c:\windows\System32\drivers\jmcr.sys [2008-04-25 80912]
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost]
bthsvcs REG_MULTI_SZ BthServ
.
Obsah adresáře 'Naplánované úlohy'
2009-03-28 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-877400051-3250518787-2556441530-1000.job
- c:\users\Tom []
.
- - - - NEPLATNÉ POLOŽKY ODSTRANĚNÉ Z REGISTRU - - - -
HKLM-Run-eRecoveryService - (no file)
Notify-AWinNotifyVitaKey MC3000 - (no file)
.
------- Doplňkový sken -------
.
uStart Page = hxxp://cs.intl.acer.yahoo.com
mStart Page = hxxp://cs.intl.acer.yahoo.com
IE: Add to Google Photos Screensa&ver - c:\windows\system32\GPhotos.scr/200
IE: Send image to &Bluetooth Device... - c:\program files\WIDCOMM\Bluetooth Software\btsendto_ie_ctx.htm
IE: Send page to &Bluetooth Device... - c:\program files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
TCP: {6CB5D934-CBA0-4C8F-A07C-55D5995F93DD} = 77.48.195.254,77.48.254.254
.
*
catchme 0.3.1367 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, www.gmer.net ...
Rootkit scan 2009-04-01 14:19:51
Windows 6.0.6001 Service Pack 1 NTFS
skenování skrytých procesů ...
skenování skrytých položek 'Po spuštění' ...
skenování skrytých souborů ...
sken byl úspešně dokončen
skryté soubory: 0
.
--------------------- Knihovny navázané na běžící procesy ---------------------
- - - - - - - > 'Explorer.exe'(5668)
c:\windows\system32\btmmhook.dll
c:\windows\System32\SysHook.dll
.
Celkový čas: 2009-04-01 14:21:51
ComboFix-quarantined-files.txt 2009-04-01 12:21:44
Před spuštěním: Volných bajtů: 40 110 837 760
Po spuštění: Volných bajtů: 39,760,605,184
314 --- E O F --- 2009-03-20 09:03:23
