Witam,
pierwszy raz to robie i proszę o wyrozumiałość.Zauważyłem u dzieci na komputerze że zaczął wolniej chodzić i dziwnie sie zachowywać postanowiłem sprawdzić co sie dzieje.Posiadam program antywirusowy microsoft esential security ale on nic mi nie monitował....chciałem przeskanować komputer mksvir skaner on-line ale nie chciał się zainstalować..tzn.pobrać silników i baz wirusów,skorzystałem więc ze skanera eset.....wykrył mi 51 nieprawidłowości które następnie usunał.
Po ponownym uruchomieniu komputer przyspieszył i wydawało mi się że wszystko jest ok.W miedzy czasie czytałem na temat programu combofix....postanowiłem sprubować i zobaczyć co z tego wyjdzie,program przeprowadził skanowanie i o to wynik tego skanowania.
Niestety kompletnie nie wiem o co chodzi a sam nie chce nic dotykać żeby nie zepsuć.
Chciałbym prosić aby specjalista spojrzał na ten raport i sie wypowiedział.
aComboFix 12-04-22.02 - eier 2012-04-23 12:04:06.1.4 - x86
Microsoft® Windows Vista™ Home Premium 6.0.6002.2.1252.47.1045.18.3260.2202 [GMT 2:00]
Kjører fra: c:\users\eier\Downloads\ComboFix.exe
AV: Microsoft Security Essentials *Disabled/Updated* {108DAC43-C256-20B7-BB05-914135DA5160}
SP: Microsoft Security Essentials *Disabled/Updated* {ABEC4DA7-E46C-2F39-81B5-AA334E5D1BDD}
SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
* Opprettet nytt gjenopprettingspunkt
.
.
((((((((((((((((((((((((((((((((((((((( Andre slettinger )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
c:\program files\BasicScan
c:\program files\BasicScan\uninstall.exe
c:\program files\FunWebProducts
c:\program files\MyWebSearch
c:\program files\MyWebSearch\bar\1.bin\chrome\M3FFXTBR.JAR
c:\program files\MyWebSearch\bar\2.bin\chrome\M3FFXTBR.JAR
c:\program files\MyWebSearch\bar\3.bin\CHROME.MANIFEST
c:\program files\MyWebSearch\bar\3.bin\chrome\M3FFXTBR.JAR
c:\program files\MyWebSearch\bar\3.bin\F3BKGERR.JPG
c:\program files\MyWebSearch\bar\3.bin\F3SPACER.WMV
c:\program files\MyWebSearch\bar\3.bin\F3WALLPP.DAT
c:\program files\MyWebSearch\bar\3.bin\FWPBUDDY.PNG
c:\program files\MyWebSearch\bar\3.bin\INSTALL.RDF
c:\program files\MyWebSearch\bar\3.bin\M3HIGHIN.EXE
c:\program files\MyWebSearch\bar\3.bin\M3MEDINT.EXE
c:\program files\MyWebSearch\bar\3.bin\M3SKNLCR.DLL
c:\program files\MyWebSearch\bar\Avatar\COMMON.F3S
c:\program files\MyWebSearch\bar\Game\CHECKERS.F3S
c:\program files\MyWebSearch\bar\Game\CHESS.F3S
c:\program files\MyWebSearch\bar\Game\REVERSI.F3S
c:\program files\MyWebSearch\bar\gen1\COMMON.F3S
c:\program files\MyWebSearch\bar\icons\CM.ICO
c:\program files\MyWebSearch\bar\icons\MFC.ICO
c:\program files\MyWebSearch\bar\icons\PSS.ICO
c:\program files\MyWebSearch\bar\icons\SMILEY.ICO
c:\program files\MyWebSearch\bar\icons\WB.ICO
c:\program files\MyWebSearch\bar\icons\ZWINKY.ICO
c:\program files\MyWebSearch\bar\IE9Mesg\COMMON.F3S
c:\program files\MyWebSearch\bar\jsifb\COMMON.F3S
c:\program files\MyWebSearch\bar\Message\COMMON.F3S
c:\program files\MyWebSearch\bar\Notifier\COMMON.F3S
c:\program files\MyWebSearch\bar\Notifier\DOG.F3S
c:\program files\MyWebSearch\bar\Notifier\FISH.F3S
c:\program files\MyWebSearch\bar\Notifier\KUNGFU.F3S
c:\program files\MyWebSearch\bar\Notifier\LIFEGARD.F3S
c:\program files\MyWebSearch\bar\Notifier\MAID.F3S
c:\program files\MyWebSearch\bar\Notifier\MAILBOX.F3S
c:\program files\MyWebSearch\bar\Notifier\OPERA.F3S
c:\program files\MyWebSearch\bar\Notifier\ROBOT.F3S
c:\program files\MyWebSearch\bar\Notifier\SEDUCT.F3S
c:\program files\MyWebSearch\bar\Notifier\SURFER.F3S
c:\program files\MyWebSearch\bar\Overlay\COMMON.F3S
c:\program files\MyWebSearch\bar\Settings\s_pid.dat
c:\program files\MyWebSearch\bar\wbnotify\COMMON.F3S
c:\programdata\TheBflix
c:\programdata\TheBflix\ajhcekcffkpnaednoeoegnmnjdlnjjmg.crx
c:\programdata\TheBflix\background.html
c:\programdata\TheBflix\bhoclass.dll
c:\programdata\TheBflix\content.js
c:\programdata\TheBflix\data\content.js
c:\programdata\TheBflix\data\jsondb.js
c:\programdata\TheBflix\hpilclpacieflhmobalmaccogiioldoo.crx
c:\programdata\TheBflix\settings.ini
c:\programdata\TheBflix\uninstall.exe
c:\users\eier\AppData\Roaming\eierlog.dat
c:\users\eier\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\ClickPotato
c:\users\eier\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\ClickPotato\About Us.lnk
c:\users\eier\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\ClickPotato\ClickPotato Customer Support.lnk
c:\users\eier\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\ClickPotato\ClickPotato Uninstall Instructions.lnk
c:\users\eier\AppData\Roaming\system32
c:\windows\IsUn0414.exe
c:\windows\system32\roboot.exe
.
.
((((((((((((((((((((((((((((((((((((((( Drivere/Tjenester )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
-------\Service_MyWebSearchService
.
.
((((((((((((((((((((((((((( Filer Opprettet Fra 2012-03-23 til 2012-04-23 )))))))))))))))))))))))))))))))))
.
.
2012-04-23 06:09 . 2012-04-23 06:09 -------- d-----w- c:\program files\ESET
2012-04-23 05:56 . 2012-04-23 06:05 -------- d-----w- c:\program files\SkanerOnline
2012-04-22 19:32 . 2012-04-22 19:32 -------- d-----w- c:\program files\Nitro PDF
2012-04-22 19:32 . 2012-04-22 19:32 -------- d-----w- c:\program files\Common Files\Nitro PDF
2012-04-22 19:29 . 2012-04-22 19:29 -------- d-----w- c:\users\eier\AppData\Roaming\Downloaded Installations
2012-04-22 17:49 . 2012-04-22 17:49 -------- d-----w- c:\windows\system32\tmp
2012-04-22 17:49 . 2012-04-22 17:49 -------- d-----w- c:\windows\system32\plugins
2012-04-22 17:49 . 2012-04-22 17:49 -------- d-----w- c:\windows\system32\libs
2012-04-22 17:49 . 2012-04-22 17:49 -------- d-----w- c:\windows\system32\jd
2012-04-22 17:49 . 2012-04-22 17:49 -------- d-----w- c:\windows\system32\.junique
2012-04-22 17:07 . 2012-04-22 17:07 -------- d-----w- c:\program files\Rubber Ninjas Demo
2012-04-22 14:24 . 2012-04-13 07:36 6734704 ----a-w- c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\{6FEF8FC0-8725-4D7D-9172-EC2A92588EAB}\mpengine.dll
2012-04-20 19:03 . 2012-04-20 19:42 -------- d-----w- c:\users\eier\AppData\Roaming\Gadu-Gadu 10
2012-04-20 17:03 . 2012-04-20 17:03 -------- d-----w- c:\programdata\Gadu-Gadu 10
2012-04-20 17:02 . 2012-04-20 17:02 -------- d-----w- c:\program files\Gadu-Gadu 10
2012-04-18 18:37 . 2012-04-18 18:37 -------- d-----w- c:\program files\Delta
2012-04-18 18:34 . 1997-08-26 10:06 315904 ----a-w- c:\windows\IsUninst.exe
2012-04-18 15:01 . 2012-04-18 15:06 -------- d-----w- c:\users\eier\AppData\Roaming\Tunngle
2012-04-18 15:01 . 2012-04-18 15:01 -------- d-----w- c:\programdata\Tunngle
2012-04-18 15:01 . 2012-04-21 05:31 -------- d-----w- c:\program files\Tunngle
2012-04-13 18:57 . 2012-04-16 12:21 -------- d-----w- c:\users\DJ Ashba
2012-04-12 01:02 . 2012-03-06 06:39 3602816 ----a-w- c:\windows\system32\ntkrnlpa.exe
2012-04-12 01:02 . 2012-03-06 06:39 3550080 ----a-w- c:\windows\system32\ntoskrnl.exe
2012-04-11 05:54 . 2012-03-01 11:01 2409784 ----a-w- c:\program files\Windows Mail\OESpamFilter.dat
2012-04-10 10:00 . 2012-04-10 10:12 -------- d-----w- c:\users\eier\AppData\Roaming\BSplayer
2012-04-10 10:00 . 2012-04-10 10:00 -------- d-----w- c:\users\eier\AppData\Roaming\BSplayer Pro
2012-04-10 10:00 . 2012-04-10 10:00 -------- d-----w- c:\program files\Webteh
2012-04-07 07:34 . 2012-04-07 07:34 -------- d-----w- c:\program files\Bonjour
2012-04-06 18:40 . 2012-04-07 05:35 -------- d-----w- c:\program files\hpmonitor
2012-04-06 18:39 . 2012-04-22 08:56 -------- d-----w- c:\program files\v9Soft
2012-04-06 18:39 . 2012-04-21 05:31 -------- d-----w- c:\program files\Paint.NET
2012-04-06 18:39 . 2012-04-07 06:50 -------- d-----w- c:\users\eier\AppData\Local\Paint.NET
2012-04-06 18:38 . 2012-04-06 18:38 -------- d-----w- c:\program files\Photo Editor
2012-04-05 19:51 . 2012-04-05 19:51 -------- d-----w- c:\program files\Microsoft Silverlight
2012-04-05 19:39 . 2012-04-05 19:39 -------- d-----w- C:\found.000
2012-04-05 16:11 . 2012-04-05 16:11 -------- d-----w- c:\program files\Microsoft XNA
2012-04-03 14:34 . 2012-04-23 05:51 -------- d-----w- c:\users\eier\AppData\Roaming\uTorrent
2012-04-03 13:20 . 2012-04-03 13:20 -------- d-----w- c:\program files\uTorrent
2012-04-02 05:56 . 2012-04-14 20:09 418464 ----a-w- c:\windows\system32\FlashPlayerApp.exe
2012-03-31 10:38 . 2012-03-31 10:38 -------- d-----w- c:\users\eier\.nets
2012-03-29 05:29 . 2012-03-29 05:29 -------- d-----w- c:\program files\Common Files\Java
2012-03-29 05:29 . 2012-03-29 05:29 -------- d-----w- c:\program files\Java
2012-03-27 08:27 . 2012-03-27 08:27 -------- d-----w- c:\users\eier\AppData\Local\Unity
2012-03-25 07:26 . 2012-03-25 07:26 -------- d-----w- c:\programdata\EA Core
.
.
.
(((((((((((((((((((((((((((((((((((((((( Find3M Rapport ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2012-04-14 20:09 . 2011-06-08 21:27 70304 ----a-w- c:\windows\system32\FlashPlayerCPLApp.cpl
2012-04-13 07:36 . 2011-12-12 09:16 6734704 ----a-w- c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\Backup\mpengine.dll
2012-03-29 05:29 . 2007-02-12 10:24 472808 ----a-w- c:\windows\system32\deployJava1.dll
2012-03-25 17:49 . 2011-12-13 18:40 27152 ----a-w- c:\windows\system32\nitrolocalmon2.dll
2012-03-25 17:49 . 2011-12-13 18:40 18448 ----a-w- c:\windows\system32\nitrolocalui2.dll
2012-03-11 11:44 . 2012-03-11 11:44 4608 ----a-w- c:\windows\system32\drivers\UMDF\ko-KR\WpdMtpDr.dll.mui
2012-03-11 11:44 . 2012-03-11 11:44 3584 ----a-w- c:\windows\system32\drivers\ko-KR\umbus.sys.mui
2012-03-11 11:44 . 2012-03-11 11:44 3584 ----a-w- c:\windows\system32\drivers\ko-KR\pscr.sys.mui
2012-03-11 11:44 . 2012-03-11 11:44 3584 ----a-w- c:\windows\system32\drivers\ko-KR\grserial.sys.mui
2012-03-11 11:44 . 2012-03-11 11:44 3072 ----a-w- c:\windows\system32\drivers\ko-KR\stcusb.sys.mui
2012-03-11 11:44 . 2012-03-11 11:44 3072 ----a-w- c:\windows\system32\drivers\ko-KR\serscan.sys.mui
2012-03-11 11:44 . 2012-03-11 11:44 3072 ----a-w- c:\windows\system32\drivers\ko-KR\SCR111.sys.mui
2012-03-11 11:44 . 2012-03-11 11:44 3072 ----a-w- c:\windows\system32\drivers\ko-KR\scmstcs.sys.mui
2012-03-11 11:44 . 2012-03-11 11:44 3072 ----a-w- c:\windows\system32\drivers\ko-KR\gpr400.sys.mui
2012-03-11 11:44 . 2012-03-11 11:44 3072 ----a-w- c:\windows\system32\drivers\ko-KR\cxbp0wdm.sys.mui
2012-03-11 11:44 . 2012-03-11 11:44 3072 ----a-w- c:\windows\system32\drivers\ko-KR\cmbp0wdm.sys.mui
2012-03-11 11:44 . 2012-03-11 11:44 2560 ----a-w- c:\windows\system32\drivers\ko-KR\wd.sys.mui
2012-03-11 11:44 . 2012-03-11 11:44 3072 ----a-w- c:\windows\system32\Spool\prtprocs\w32x86\ko-KR\LMPRTPRC.DLL.mui
2012-03-11 11:44 . 2012-03-11 11:44 5120 ----a-w- c:\windows\system32\drivers\ko-KR\nv4_mini.sys.mui
2012-03-11 11:44 . 2012-03-11 11:44 3584 ----a-w- c:\windows\system32\drivers\ko-KR\pcmcia.sys.mui
2012-03-11 11:44 . 2012-03-11 11:44 3584 ----a-w- c:\windows\system32\drivers\ko-KR\ntrigdigi.sys.mui
2012-03-11 11:44 . 2012-03-11 11:44 7168 ----a-w- c:\windows\system32\drivers\ko-KR\afd.sys.mui
2012-03-11 11:44 . 2012-03-11 11:44 4608 ----a-w- c:\windows\system32\drivers\ko-KR\yk60x86.sys.mui
2012-03-11 11:44 . 2012-03-11 11:44 4608 ----a-w- c:\windows\system32\drivers\ko-KR\msdsm.sys.mui
2012-03-11 11:44 . 2012-03-11 11:44 4096 ----a-w- c:\windows\system32\drivers\ko-KR\bcm4sbxp.sys.mui
2012-03-11 11:44 . 2012-03-11 11:44 3584 ----a-w- c:\windows\system32\drivers\ko-KR\scsiport.sys.mui
2012-03-11 11:44 . 2012-03-11 11:44 3584 ----a-w- c:\windows\system32\drivers\ko-KR\rndismpx.sys.mui
2012-03-11 11:44 . 2012-03-11 11:44 3584 ----a-w- c:\windows\system32\drivers\ko-KR\parport.sys.mui
2012-03-11 11:44 . 2012-03-11 11:44 3072 ----a-w- c:\windows\system32\drivers\ko-KR\parvdm.sys.mui
2012-03-11 11:44 . 2012-03-11 11:44 2560 ----a-w- c:\windows\system32\drivers\ko-KR\amdide.sys.mui
2012-03-11 11:44 . 2012-03-11 11:44 3584 ----a-w- c:\windows\system32\drivers\ko-KR\modem.sys.mui
2012-03-11 11:44 . 2012-03-11 11:44 3072 ----a-w- c:\windows\system32\drivers\ko-KR\srv.sys.mui
2012-03-11 11:44 . 2012-03-11 11:44 45056 ----a-w- c:\windows\system32\drivers\ko-KR\ntfs.sys.mui
2012-03-11 11:44 . 2012-03-11 11:44 3584 ----a-w- c:\windows\system32\drivers\ko-KR\RNDISMP.sys.mui
2012-03-11 11:44 . 2012-03-11 11:44 3584 ----a-w- c:\windows\system32\drivers\ko-KR\pacer.sys.mui
2012-03-11 11:44 . 2012-03-11 11:44 3072 ----a-w- c:\windows\system32\drivers\ko-KR\qwavedrv.sys.mui
2012-03-11 11:44 . 2012-03-11 11:44 3584 ----a-w- c:\windows\system32\drivers\en-US\nfsrdr.sys.mui
2012-03-11 11:44 . 2012-03-11 11:44 3072 ----a-w- c:\windows\system32\drivers\ko-KR\nfsrdr.sys.mui
2012-03-11 11:44 . 2012-03-11 11:44 4096 ----a-w- c:\windows\system32\drivers\ko-KR\ipnat.sys.mui
2012-03-11 11:44 . 2012-03-11 11:44 4096 ----a-w- c:\windows\system32\drivers\ko-KR\dxgkrnl.sys.mui
2012-03-11 11:44 . 2012-03-11 11:44 4096 ----a-w- c:\windows\system32\drivers\ko-KR\fltmgr.sys.mui
2012-03-11 11:44 . 2012-03-11 11:44 7168 ----a-w- c:\windows\system32\drivers\ko-KR\serial.sys.mui
2012-03-11 11:44 . 2012-03-11 11:44 6144 ----a-w- c:\windows\system32\drivers\ko-KR\ltmdmnt.sys.mui
2012-03-11 11:44 . 2012-03-11 11:44 5120 ----a-w- c:\windows\system32\drivers\ko-KR\bthpan.sys.mui
2012-03-11 11:44 . 2012-03-11 11:44 4608 ----a-w- c:\windows\system32\drivers\ko-KR\wacompen.sys.mui
2012-03-11 11:44 . 2012-03-11 11:44 4608 ----a-w- c:\windows\system32\drivers\ko-KR\IPMIDrv.sys.mui
2012-03-11 11:44 . 2012-03-11 11:44 3072 ----a-w- c:\windows\system32\drivers\ko-KR\pnpmem.sys.mui
2012-03-11 11:44 . 2012-03-11 11:44 3072 ----a-w- c:\windows\system32\drivers\ko-KR\hidbth.sys.mui
2012-03-11 11:44 . 2012-03-11 11:44 3072 ----a-w- c:\windows\system32\drivers\ko-KR\Dot4usb.sys.mui
2012-03-11 11:44 . 2012-03-11 11:44 6656 ----a-w- c:\windows\system32\drivers\ko-KR\BrSerId.sys.mui
2012-03-11 11:44 . 2012-03-11 11:44 3072 ----a-w- c:\windows\system32\drivers\ko-KR\UAGP35.SYS.mui
2012-03-11 11:44 . 2012-03-11 11:44 3072 ----a-w- c:\windows\system32\drivers\ko-KR\GAGP30KX.SYS.mui
2012-03-11 11:44 . 2012-03-11 11:44 3072 ----a-w- c:\windows\system32\drivers\ko-KR\atikmdag.sys.mui
2012-03-11 11:44 . 2012-03-11 11:44 3072 ----a-w- c:\windows\system32\drivers\ko-KR\ati2mtag.sys.mui
2012-03-11 11:44 . 2012-03-11 11:44 2560 ----a-w- c:\windows\system32\drivers\ko-KR\BrParwdm.sys.mui
2012-03-11 11:44 . 2012-03-11 11:44 2560 ----a-w- c:\windows\system32\drivers\ko-KR\ati2mpad.sys.mui
2012-03-11 11:44 . 2012-03-11 11:44 12288 ----a-w- c:\windows\system32\drivers\ko-KR\ohci1394.sys.mui
2012-03-11 11:44 . 2012-03-11 11:44 5120 ----a-w- c:\windows\system32\drivers\ko-KR\luafv.sys.mui
2012-03-11 11:44 . 2012-03-11 11:44 4608 ----a-w- c:\windows\system32\drivers\ko-KR\sermouse.sys.mui
2012-03-11 11:44 . 2012-03-11 11:44 4608 ----a-w- c:\windows\system32\drivers\ko-KR\e100b325.sys.mui
2012-03-11 11:44 . 2012-03-11 11:44 4096 ----a-w- c:\windows\system32\drivers\ko-KR\tpm.sys.mui
2012-03-11 11:44 . 2012-03-11 11:44 4096 ----a-w- c:\windows\system32\drivers\ko-KR\mouclass.sys.mui
2012-03-11 11:44 . 2012-03-11 11:44 4096 ----a-w- c:\windows\system32\drivers\ko-KR\b57nd60x.sys.mui
2012-03-11 11:44 . 2012-03-11 11:44 3072 ----a-w- c:\windows\system32\drivers\ko-KR\mouhid.sys.mui
2012-03-11 11:44 . 2012-03-11 11:44 28672 ----a-w- c:\windows\system32\drivers\ko-KR\http.sys.mui
2012-03-11 11:44 . 2012-03-11 11:44 2560 ----a-w- c:\windows\system32\drivers\ko-KR\wdf01000.sys.mui
2012-03-11 11:44 . 2012-03-11 11:44 24576 ----a-w- c:\windows\system32\drivers\ko-KR\volsnap.sys.mui
2012-03-11 11:44 . 2012-03-11 11:44 24576 ----a-w- c:\windows\system32\drivers\ko-KR\mpio.sys.mui
2012-03-11 11:44 . 2012-03-11 11:44 13312 ----a-w- c:\windows\system32\drivers\ko-KR\e1e6032.sys.mui
2012-03-11 11:44 . 2012-03-11 11:44 11776 ----a-w- c:\windows\system32\drivers\ko-KR\E1G60I32.sys.mui
2012-03-11 11:44 . 2012-03-11 11:44 9216 ----a-w- c:\windows\system32\drivers\ko-KR\fvevol.sys.mui
2012-03-11 11:44 . 2012-03-11 11:44 7168 ----a-w- c:\windows\system32\drivers\ko-KR\pci.sys.mui
2012-03-11 11:44 . 2012-03-11 11:44 7168 ----a-w- c:\windows\system32\drivers\ko-KR\i8042prt.sys.mui
2012-03-11 11:44 . 2012-03-11 11:44 4096 ----a-w- c:\windows\system32\drivers\ko-KR\kbdclass.sys.mui
2012-03-11 11:44 . 2012-03-11 11:44 3584 ----a-w- c:\windows\system32\drivers\ko-KR\mssmbios.sys.mui
2012-03-11 11:44 . 2012-03-11 11:44 3584 ----a-w- c:\windows\system32\drivers\ko-KR\isapnp.sys.mui
2012-03-11 11:44 . 2012-03-11 11:44 3072 ----a-w- c:\windows\system32\drivers\ko-KR\VIAAGP.SYS.mui
2012-03-11 11:44 . 2012-03-11 11:44 3072 ----a-w- c:\windows\system32\drivers\ko-KR\ULIAGPKX.SYS.mui
2012-03-11 11:44 . 2012-03-11 11:44 3072 ----a-w- c:\windows\system32\drivers\ko-KR\SISAGP.SYS.mui
2012-03-11 11:44 . 2012-03-11 11:44 3072 ----a-w- c:\windows\system32\drivers\ko-KR\NV_AGP.SYS.mui
2012-03-11 11:44 . 2012-03-11 11:44 3072 ----a-w- c:\windows\system32\drivers\ko-KR\kbdhid.sys.mui
2012-03-11 11:44 . 2012-03-11 11:44 3072 ----a-w- c:\windows\system32\drivers\ko-KR\AMDAGP.SYS.mui
2012-03-11 11:44 . 2012-03-11 11:44 3072 ----a-w- c:\windows\system32\drivers\ko-KR\AGP440.sys.mui
2012-03-11 11:44 . 2012-03-11 11:44 7168 ----a-w- c:\windows\system32\drivers\ko-KR\acpi.sys.mui
2012-03-11 11:44 . 2012-03-11 11:44 21504 ----a-w- c:\windows\system32\drivers\ko-KR\viac7.sys.mui
2012-03-11 11:44 . 2012-03-11 11:44 21504 ----a-w- c:\windows\system32\drivers\ko-KR\processr.sys.mui
2012-03-11 11:44 . 2012-03-11 11:44 21504 ----a-w- c:\windows\system32\drivers\ko-KR\intelppm.sys.mui
2012-03-11 11:44 . 2012-03-11 11:44 21504 ----a-w- c:\windows\system32\drivers\ko-KR\crusoe.sys.mui
2012-03-11 11:44 . 2012-03-11 11:44 21504 ----a-w- c:\windows\system32\drivers\ko-KR\amdk8.sys.mui
2012-03-11 11:44 . 2012-03-11 11:44 21504 ----a-w- c:\windows\system32\drivers\ko-KR\amdk7.sys.mui
2012-03-11 11:44 . 2012-03-11 11:44 5632 ----a-w- c:\windows\system32\drivers\ko-KR\bthport.sys.mui
2012-03-11 11:44 . 2012-03-11 11:44 4096 ----a-w- c:\windows\system32\drivers\ko-KR\hdaudbus.sys.mui
2012-03-11 11:44 . 2012-03-11 11:44 3584 ----a-w- c:\windows\system32\drivers\ko-KR\vmbus.sys.mui
2012-03-11 11:44 . 2012-03-11 11:44 3072 ----a-w- c:\windows\system32\drivers\ko-KR\vmstorfl.sys.mui
2012-03-11 11:44 . 2012-03-11 11:44 14848 ----a-w- c:\windows\web\ts\bin\ko\TSPortalWebPart.resources.dll
2012-03-11 11:44 . 2012-03-11 11:44 10240 ----a-w- c:\windows\system32\drivers\ko-KR\battc.sys.mui
2012-03-09 14:16 . 2012-03-09 14:16 6144 ----a-w- c:\windows\system32\drivers\UMDF\pl-PL\WpdMtpDr.dll.mui
2012-03-09 14:16 . 2012-03-09 14:16 4608 ----a-w- c:\windows\system32\drivers\pl-PL\grserial.sys.mui
2012-03-09 14:16 . 2012-03-09 14:16 4096 ----a-w- c:\windows\system32\drivers\pl-PL\SCR111.sys.mui
2012-03-09 14:16 . 2012-03-09 14:16 4096 ----a-w- c:\windows\system32\drivers\pl-PL\scmstcs.sys.mui
.
.
(((((((((((((((((((((((((((((((( Oppstartspunkter I Registeret )))))))))))))))))))))))))))))))))))))))))))))
.
.
*Merk* tomme oppføringer & gyldige standardoppføringer vises ikke
REGEDIT4
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"DAEMON Tools Lite"="c:\program files\DAEMON Tools Lite\DTLite.exe" [2011-11-10 3514176]
"ehTray.exe"="c:\windows\ehome\ehTray.exe" [2008-01-19 125952]
"Sidebar"="c:\program files\Windows Sidebar\sidebar.exe" [2009-04-11 1233920]
"WMPNSCFG"="c:\program files\Windows Media Player\WMPNSCFG.exe" [2008-01-19 202240]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"NvCplDaemon"="c:\windows\system32\NvCpl.dll" [2008-12-30 13683232]
"NvMediaCenter"="c:\windows\system32\NvMcTray.dll" [2008-12-30 92704]
"MSC"="c:\program files\Microsoft Security Client\msseces.exe" [2011-06-15 997920]
"PWRISOVM.EXE"="i:\program files\PowerISO\PWRISOVM.EXE" [2012-02-09 312376]
"IgfxTray"="c:\windows\system32\igfxtray.exe" [2011-02-11 137752]
"HotKeysCmds"="c:\windows\system32\hkcmd.exe" [2011-02-11 171032]
"Persistence"="c:\windows\system32\igfxpers.exe" [2011-02-11 172568]
"SunJavaUpdateSched"="c:\program files\Common Files\Java\Java Update\jusched.exe" [2012-01-18 254696]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce]
"AvgUninstallURL"="start http://www.avg.com/w...=90&ver=9.0.894" [?]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"EnableUIADesktopToggle"= 0 (0x0)
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MsMpSvc]
@="Service"
.
[HKLM\~\startupfolder\C:^Users^eier^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^Web-Browser.exe.lnk]
path=c:\users\eier\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Web-Browser.exe.lnk
backup=c:\windows\pss\Web-Browser.exe.lnk.Startup
backupExtension=.Startup
.
[HKLM\~\startupfolder\C:^Users^eier^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^zip.exe.lnk]
path=c:\users\eier\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\zip.exe.lnk
backup=c:\windows\pss\zip.exe.lnk.Startup
backupExtension=.Startup
.
R3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service;c:\windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2012-04-14 253088]
.
.
--- Andre tjenester/drivere lastet i minnet ---
.
*NewlyCreated* - WS2IFSL
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost]
LocalServiceAndNoImpersonation REG_MULTI_SZ FontCache
.
Innholdet i mappen 'Scheduled Tasks' (planlagte oppgaver)
.
2012-04-23 c:\windows\Tasks\Adobe Flash Player Updater.job
- c:\windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2012-04-02 20:09]
.
2012-04-12 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-3764688779-1384101490-802407306-1000Core.job
- c:\users\eier\AppData\Local\Google\Update\GoogleUpdate.exe [2011-12-09 08:26]
.
2012-04-23 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-3764688779-1384101490-802407306-1000UA.job
- c:\users\eier\AppData\Local\Google\Update\GoogleUpdate.exe [2011-12-09 08:26]
.
2012-04-22 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-3764688779-1384101490-802407306-1001Core.job
- c:\users\DJ Ashba\AppData\Local\Google\Update\GoogleUpdate.exe [2012-04-13 19:02]
.
2012-04-23 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-3764688779-1384101490-802407306-1001UA.job
- c:\users\DJ Ashba\AppData\Local\Google\Update\GoogleUpdate.exe [2012-04-13 19:02]
.
.
------- Tilleggsskanning -------
.
uStart Page = https://www.google.pl/
mStart Page = about:blank
uInternet Settings,ProxyOverride = *.local
TCP: Interfaces\{70BE1E55-14E6-40E4-99AF-F0E7C6B68FF2}: NameServer = 192.168.4.254
.
- - - - TOMME PEKERE FJERNET - - - -
.
URLSearchHooks-{bf7380fa-e3b4-4db2-af3e-9d8783a45bfc} - (no file)
URLSearchHooks-{fcbf663e-8530-46f8-a880-ac5abe9d2b23} - (no file)
URLSearchHooks-{88c7f2aa-f93f-432c-8f0e-b7d85967a527} - (no file)
URLSearchHooks-{687578b9-7132-4a7a-80e4-30ee31099e03} - (no file)
Toolbar-{CCC7A320-B3CA-4199-B1A6-9F516DD69829} - (no file)
WebBrowser-{CCC7A320-B3CA-4199-B1A6-9F516DD69829} - (no file)
WebBrowser-{BF7380FA-E3B4-4DB2-AF3E-9D8783A45BFC} - (no file)
WebBrowser-{FCBF663E-8530-46F8-A880-AC5ABE9D2B23} - (no file)
WebBrowser-{88C7F2AA-F93F-432C-8F0E-B7D85967A527} - (no file)
WebBrowser-{687578B9-7132-4A7A-80E4-30EE31099E03} - (no file)
HKCU-Run-AdobeBridge - (no file)
MSConfigStartUp-BitTorrent - c:\program files\BitTorrent\BitTorrent.exe
MSConfigStartUp-HKCU - c:\users\eier\AppData\Roaming\system32\ego.dll
MSConfigStartUp-My Web Search Bar Search Scope Monitor - c:\progra~1\MYWEBS~1\bar\3.bin\m3SrchMn.exe
MSConfigStartUp-MyWebSearch Email Plugin - c:\progra~1\MYWEBS~1\bar\3.bin\mwsoemon.exe
AddRemove-{37476589-E48E-439E-A706-56189E2ED4C4} - c:\programdata\TheBflix\uninstall.exe
.
.
.
**************************************************************************
.
catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2012-04-23 12:18
Windows 6.0.6002 Service Pack 2 NTFS
.
skanner skjulte prosesser ...
.
skanner skjulte autostart-oppføringer ...
.
skanner skjulte filer ...
.
skanning vellykket
skjulte filer: 0
.
**************************************************************************
.
--------------------- LÃ…STE REGISTERNøKLER ---------------------
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0000\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0001\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0002\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0003\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
------------------------ Andre Kjørende Prosesser ------------------------
.
c:\program files\Microsoft Security Client\Antimalware\MsMpEng.exe
c:\program files\Bonjour\mDNSResponder.exe
c:\program files\Nitro PDF\Reader 2\NitroPDFReaderDriverService2.exe
c:\windows\system32\PnkBstrA.exe
c:\windows\system32\WUDFHost.exe
c:\program files\Windows Media Player\wmpnetwk.exe
c:\windows\ehome\ehmsas.exe
c:\program files\Internet Explorer\iexplore.exe
c:\program files\Internet Explorer\iexplore.exe
c:\windows\system32\Macromed\Flash\FlashUtil32_11_2_202_233_ActiveX.exe
.
**************************************************************************
.
Tidspunkt ferdig: 2012-04-23 12:22:25 - maskinen ble startet pÃ… nytt
ComboFix-quarantined-files.txt 2012-04-23 10:22
.
Pre-Run: 229 789 659 136 bajtów wolnych
Post-Run: 230 089 179 136 bajtów wolnych
.
- - End Of File - - 89F2BC5D772B05DE0C624D2F326C88A7
posiadam 32-bitowy system operacyjny Vista Home Premium
