nezobrazuje mi CD-ROM

[TheTrooper]

nezobrazuje mi cd-rom , potrebuju iba E:/ , kedze sa chystam reinstal windows ... potrebujem vypalit os mal som uz jeden problem s pc ... (viď. moje prispevky) . Minule mi hovorili ze PC mam plny HAVETI ...
RSIT LOG:

Logfile of random's system information tool 1.06 (written by random/random)
Run by Gabi at 2010-05-05 20:21:08
Systém Microsoft Windows XP Professional Service Pack 2
System drive C: has 39 GB (51%) free of 76 GB
Total RAM: 511 MB (31% free)

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 20:21:27, on 5. 5. 2010
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\INF\MSI\SlowDownCPU\SlowDownCPU.exe
C:\Program Files\Analog Devices\SoundMAX\SMax4PNP.exe
C:\Program Files\Eset\nod32kui.exe
C:\Program Files\Sony Ericsson\Mobile2\Application Launcher\Application Launcher.exe
C:\Program Files\SlySoft\CloneCD\CloneCDTray.exe
C:\Program Files\FlashMute\FlashMute.exe
C:\Program Files\Common Files\Teleca Shared\Generic.exe
C:\Program Files\ICQ6Toolbar\ICQ Service.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\Program Files\Eset\nod32krn.exe
C:\Program Files\Analog Devices\SoundMAX\SMAgent.exe
C:\WINDOWS\system32\wscntfy.exe
D:\Program Files\uTorrent\uTorrent.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\DAEMON Tools Pro\DTProShellHlp.exe
C:\Program Files\DVD Decrypter\DVDDecrypter.exe
C:\Documents and Settings\Gabi\Plocha\RSIT.exe
C:\Program Files\trend micro\Gabi.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://google.sk/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Odkazy
R3 - URLSearchHook: (no name) - - (no file)
R3 - URLSearchHook: ICQToolBar - {855F3B16-6D32-4fe6-8A56-BBB695989046} - C:\Program Files\ICQ6Toolbar\ICQToolBar.dll
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: Skype add-on (mastermind) - {22BF413B-C6D2-4d91-82A9-A0F997BA588C} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\Spybot\SDHelper.dll
O2 - BHO: MegaIEMn - {bf00e119-21a3-4fd1-b178-3b8537e75c92} - C:\Program Files\Megaupload\Mega Manager\MegaIEMn.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
O3 - Toolbar: DAEMON Tools Toolbar - {32099AAC-C132-4136-9E9A-4E364A424E17} - C:\Program Files\DAEMON Tools Toolbar\DTToolbar.dll
O3 - Toolbar: ICQToolBar - {855F3B16-6D32-4fe6-8A56-BBB695989046} - C:\Program Files\ICQ6Toolbar\ICQToolBar.dll
O4 - HKLM\..\Run: [SlowDownCPU] C:\WINDOWS\INF\MSI\SlowDownCPU\SlowDownCPU.exe
O4 - HKLM\..\Run: [SoundMAXPnP] C:\Program Files\Analog Devices\SoundMAX\SMax4PNP.exe
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [nod32kui] "C:\Program Files\Eset\nod32kui.exe" /WAITSERVICE
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Common Files\Java\Java Update\jusched.exe"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [Sony Ericsson PC Suite] "C:\Program Files\Sony Ericsson\Mobile2\Application Launcher\Application Launcher.exe" /startoptions
O4 - HKLM\..\Run: [StartCCC] "C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun
O4 - HKLM\..\Run: [CloneCDTray] "C:\Program Files\SlySoft\CloneCD\CloneCDTray.exe" /s
O4 - HKLM\..\RunOnce: [Uninstall Adobe Download Manager] "C:\WINDOWS\system32\rundll32.exe" "C:\Program Files\NOS\bin\getPlus_Helper.dll",Uninstall /IE2883E8F-472F-4fb0-9522-AC9BF37916A7 /Get1noarp
O4 - HKCU\..\Run: [AlcoholAutomount] "C:\Program Files\Alcohol Soft\Alcohol 120\axcmd.exe" /automount
O4 - HKCU\..\Run: [FlashMute] C:\Program Files\FlashMute\FlashMute.exe
O4 - HKCU\..\Run: [DAEMON Tools Pro Agent] "C:\Program Files\DAEMON Tools Pro\DTProAgent.exe" -autorun
O4 - HKCU\..\Run: [uTorrent] "D:\Program Files\uTorrent\uTorrent.exe"
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - Startup: Adobe Gamma.lnk = C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000
O9 - Extra button: Skype - {77BF5300-1474-4EC7-9980-D32B190E9B07} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\Spybot\SDHelper.dll
O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\Spybot\SDHelper.dll
O9 - Extra button: ICQ6 - {E59EB121-F339-4851-A3BA-FE49C35617C2} - C:\Program Files\ICQ6.5\ICQ.exe
O9 - Extra 'Tools' menuitem: ICQ6 - {E59EB121-F339-4851-A3BA-FE49C35617C2} - C:\Program Files\ICQ6.5\ICQ.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} (get_atlcom Class) - http://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O23 - Service: Adobe LM Service - Adobe Systems - C:\Program Files\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe
O23 - Service: Application Driver Auto Removal Service (01) (appdrvrem01) - Protection Technology - C:\WINDOWS\System32\appdrvrem01.exe
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
O23 - Service: ICQ Service - Unknown owner - C:\Program Files\ICQ6Toolbar\ICQ Service.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe
O23 - Service: NOD32 Kernel Service (NOD32krn) - Eset - C:\Program Files\Eset\nod32krn.exe
O23 - Service: nProtect GameGuard Service (npggsvc) - Unknown owner - C:\WINDOWS\system32\GameMon.des.exe (file missing)
O23 - Service: SoundMAX Agent Service (SoundMAX Agent Service (default)) - Analog Devices, Inc. - C:\Program Files\Analog Devices\SoundMAX\SMAgent.exe
O23 - Service: TuneUp Drive Defrag Service (TuneUp.Defrag) - Unknown owner - C:\Program Files\TuneUp Utilities 2010\TuneUpDefragService.exe (file missing)

--
End of file - 7454 bytes

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
Adobe PDF Link Helper - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2008-06-11 75128]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{22BF413B-C6D2-4d91-82A9-A0F997BA588C}]
Skype add-on (mastermind) - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll [2008-11-07 1088296]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{53707962-6F74-2D53-2644-206D7942484F}]
Spybot-S&D IE Protection - C:\PROGRA~1\Spybot\SDHelper.dll [2009-01-26 1879896]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{bf00e119-21a3-4fd1-b178-3b8537e75c92}]
IeMonitorBho Class - C:\Program Files\Megaupload\Mega Manager\MegaIEMn.dll [2009-06-29 110592]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre6\bin\jp2ssv.dll [2010-04-12 41760]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{E7E6F031-17CE-4C07-BC86-EABFE594F69C}]
JQSIEStartDetectorImpl Class - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll [2010-04-12 79648]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{32099AAC-C132-4136-9E9A-4E364A424E17} - DAEMON Tools Toolbar - C:\Program Files\DAEMON Tools Toolbar\DTToolbar.dll [2009-04-23 937416]
{855F3B16-6D32-4fe6-8A56-BBB695989046} - ICQToolBar - C:\Program Files\ICQ6Toolbar\ICQToolBar.dll [2009-08-16 962808]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"SlowDownCPU"=C:\WINDOWS\INF\MSI\SlowDownCPU\SlowDownCPU.exe [2005-02-25 208896]
"SoundMAXPnP"=C:\Program Files\Analog Devices\SoundMAX\SMax4PNP.exe [2004-10-14 1388544]
"NeroFilterCheck"=C:\WINDOWS\system32\NeroCheck.exe [2001-07-09 155648]
"Adobe Reader Speed Launcher"=C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe [2008-06-12 34672]
"nod32kui"=C:\Program Files\Eset\nod32kui.exe [2010-05-01 949376]
"SunJavaUpdateSched"=C:\Program Files\Common Files\Java\Java Update\jusched.exe [2010-02-18 248040]
"QuickTime Task"=C:\Program Files\QuickTime\qttask.exe [2009-05-26 413696]
"Sony Ericsson PC Suite"=C:\Program Files\Sony Ericsson\Mobile2\Application Launcher\Application Launcher.exe [2007-05-28 528384]
"StartCCC"=C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [2009-02-25 61440]
"CloneCDTray"=C:\Program Files\SlySoft\CloneCD\CloneCDTray.exe [2009-01-30 57344]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\RunOnce]
"Uninstall Adobe Download Manager"=C:\Program Files\NOS\bin\getPlus_Helper.dll [2010-03-29 68000]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"AlcoholAutomount"=C:\Program Files\Alcohol Soft\Alcohol 120\axcmd.exe [2009-04-24 203928]
"FlashMute"=C:\Program Files\FlashMute\FlashMute.exe [2006-03-11 221184]
"DAEMON Tools Pro Agent"=C:\Program Files\DAEMON Tools Pro\DTProAgent.exe [2009-12-18 427328]
"uTorrent"=D:\Program Files\uTorrent\uTorrent.exe [2010-05-05 321328]

C:\Documents and Settings\All Users\Nabídka Start\Programy\Po spuštění
Microsoft Office.lnk - C:\Program Files\Microsoft Office\Office10\OSA.EXE

C:\Documents and Settings\Gabi\Nabídka Start\Programy\Po spuštění
Adobe Gamma.lnk - C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\AtiExtEvent]
C:\WINDOWS\system32\Ati2evxx.dll [2007-08-17 118784]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=323
"NoDriveAutoRun"=67108863
"NoDrives"=0

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveAutoRun"=
"NoDriveTypeAutoRun"=
"NoDrives"=

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"C:\WINDOWS\system32\sessmgr.exe"="C:\WINDOWS\system32\sessmgr.exe:*:Disabled:@xpsp2res.dll,-22019"
"D:\Program Files\uTorrent\uTorrent.exe"="D:\Program Files\uTorrent\uTorrent.exe:*:Enabled:µTorrent"
"C:\WINDOWS\Downloaded Program Files\ijjiOptimizer.exe"="C:\WINDOWS\Downloaded Program Files\ijjiOptimizer.exe:*:Enabled:ijjiOptimizer.exe"
"C:\Program Files\Java\jre6\bin\javaw.exe"="C:\Program Files\Java\jre6\bin\javaw.exe:*:Enabled:Java(TM) Platform SE binary"
"C:\Program Files\ICQ6.5\ICQ.exe"="C:\Program Files\ICQ6.5\ICQ.exe:*:Enabled:ICQ6"
"C:\Program Files\VALVe\Garry's Mod\hl2.exe"="C:\Program Files\VALVe\Garry's Mod\hl2.exe:*:Enabled:Garry's_Mod"
"C:\Program Files\VALVe\Garry's Mod\srcds.exe"="C:\Program Files\VALVe\Garry's Mod\srcds.exe:*:Enabled:Garry's_Mod_Dedicated_Server"
"D:\Program Files\FlatOut2\FlatOut2.exe"="D:\Program Files\FlatOut2\FlatOut2.exe:*:Enabled:FlatOut2"
"D:\Program Files\World of Warcraft\BackgroundDownloader.exe"="D:\Program Files\World of Warcraft\BackgroundDownloader.exe:*:Enabled:Blizzard Downloader"
"C:\Program Files\Skype\Phone\Skype.exe"="C:\Program Files\Skype\Phone\Skype.exe:*:Enabled:Skype"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"

======List of files/folders created in the last 1 months======

2010-05-05 18:47:07 ----D---- C:\Program Files\XP SIMULATION
2010-05-05 17:12:36 ----D---- C:\Program Files\NOS
2010-05-02 15:56:37 ----SHD---- C:\RECYCLER
2010-05-02 09:06:06 ----A---- C:\ComboFix.txt
2010-05-01 09:57:36 ----D---- C:\WINDOWS\temp
2010-04-30 19:45:55 ----A---- C:\Boot.bak
2010-04-30 19:45:48 ----RASHD---- C:\cmdcons
2010-04-30 18:25:08 ----A---- C:\WINDOWS\zip.exe
2010-04-30 18:25:08 ----A---- C:\WINDOWS\SWXCACLS.exe
2010-04-30 18:25:08 ----A---- C:\WINDOWS\SWSC.exe
2010-04-30 18:25:08 ----A---- C:\WINDOWS\SWREG.exe
2010-04-30 18:25:08 ----A---- C:\WINDOWS\sed.exe
2010-04-30 18:25:08 ----A---- C:\WINDOWS\PEV.exe
2010-04-30 18:25:08 ----A---- C:\WINDOWS\NIRCMD.exe
2010-04-30 18:25:08 ----A---- C:\WINDOWS\MBR.exe
2010-04-30 18:25:08 ----A---- C:\WINDOWS\grep.exe
2010-04-30 18:08:30 ----D---- C:\WINDOWS\ERDNT
2010-04-30 18:07:32 ----D---- C:\Qoobox
2010-04-29 21:10:47 ----D---- C:\rsit
2010-04-29 21:10:47 ----D---- C:\Program Files\trend micro
2010-04-29 20:49:04 ----D---- C:\WINDOWS\SoftwareDistribution
2010-04-28 17:52:40 ----D---- C:\Documents and Settings\Gabi\Data aplikací\Uniblue
2010-04-27 20:35:04 ----D---- C:\Documents and Settings\All Users\Data aplikací\RegCure
2010-04-27 19:48:47 ----HDC---- C:\WINDOWS\$NtUninstallKB927891$
2010-04-27 19:48:44 ----HD---- C:\WINDOWS\$hf_mig$
2010-04-27 17:50:56 ----A---- C:\WINDOWS\SchedLgU.Txt
2010-04-27 17:49:29 ----A---- C:\WINDOWS\ntbtlog.txt
2010-04-26 20:39:50 ----A---- C:\procexp.exe
2010-04-25 20:08:38 ----SHD---- C:\WINDOWS\CSC
2010-04-25 20:05:07 ----D---- C:\WINDOWS\system32\SoftwareDistribution
2010-04-25 20:05:07 ----A---- C:\WINDOWS\system32\wups2.dll
2010-04-25 20:05:06 ----A---- C:\WINDOWS\system32\wucltui.dll.mui
2010-04-25 20:05:03 ----A---- C:\WINDOWS\system32\wuaueng.dll.mui
2010-04-25 20:04:59 ----A---- C:\WINDOWS\system32\wuapi.dll.mui
2010-04-25 20:03:08 ----D---- C:\daee6bf9b8df2bb6e9f42f
2010-04-24 14:26:07 ----AD---- C:\Documents and Settings\All Users\Data aplikací\TEMP
2010-04-24 14:17:06 ----D---- C:\Documents and Settings\Gabi\Data aplikací\Malwarebytes
2010-04-24 14:16:33 ----D---- C:\Documents and Settings\All Users\Data aplikací\Malwarebytes
2010-04-24 14:16:29 ----D---- C:\Program Files\Malwarebytes
2010-04-24 09:54:28 ----D---- C:\Program Files\Spybot
2010-04-24 09:54:28 ----D---- C:\Documents and Settings\All Users\Data aplikací\Spybot - Search & Destroy
2010-04-22 21:18:19 ----D---- C:\WINDOWS\Minidump
2010-04-21 20:43:24 ----D---- C:\Documents and Settings\All Users\Data aplikací\avG
2010-04-17 08:40:35 ----D---- C:\Documents and Settings\All Users\Data aplikací\Sun
2010-04-17 08:40:31 ----D---- C:\Program Files\Common Files\Java
2010-04-17 08:40:11 ----A---- C:\WINDOWS\system32\javaws.exe
2010-04-17 08:40:11 ----A---- C:\WINDOWS\system32\javaw.exe
2010-04-17 08:40:11 ----A---- C:\WINDOWS\system32\java.exe
2010-04-17 08:40:11 ----A---- C:\WINDOWS\system32\deployJava1.dll
2010-04-11 20:18:07 ----D---- C:\Documents and Settings\All Users\Data aplikací\McAfee

======List of files/folders modified in the last 1 months======

2010-05-05 20:21:28 ----D---- C:\Documents and Settings\Gabi\Data aplikací\uTorrent
2010-05-05 20:18:29 ----AD---- C:\WINDOWS
2010-05-05 20:18:05 ----D---- C:\WINDOWS\Prefetch
2010-05-05 20:16:57 ----D---- C:\WINDOWS\system32\CatRoot2
2010-05-05 18:47:12 ----D---- C:\Program Files
2010-05-05 17:16:35 ----D---- C:\Documents and Settings\All Users\Data aplikací\NOS
2010-05-05 15:46:53 ----D---- C:\Program Files\Microsoft Silverlight
2010-05-04 17:20:52 ----SHD---- C:\WINDOWS\Installer
2010-05-04 17:20:52 ----SD---- C:\Documents and Settings\All Users\Data aplikací\Microsoft
2010-05-04 17:20:50 ----D---- C:\Config.Msi
2010-05-02 14:54:34 ----D---- C:\Program Files\Common Files
2010-05-02 14:53:07 ----D---- C:\WINDOWS\system32\drivers
2010-05-02 14:47:02 ----D---- C:\Program Files\ESET
2010-05-02 14:42:37 ----D---- C:\Program Files\ophcrack
2010-05-02 14:41:04 ----D---- C:\Documents and Settings\Gabi\Data aplikací\Lavasoft
2010-05-02 14:17:10 ----D---- C:\WINDOWS\system32
2010-05-02 14:16:12 ----D---- C:\Program Files\Spyware Terminator
2010-05-02 14:15:17 ----D---- C:\Program Files\WBFS
2010-05-02 14:11:50 ----SD---- C:\WINDOWS\Tasks
2010-05-02 09:00:59 ----A---- C:\WINDOWS\system.ini
2010-05-02 08:56:11 ----D---- C:\WINDOWS\AppPatch
2010-05-01 12:31:11 ----RSHDC---- C:\WINDOWS\system32\dllcache
2010-05-01 12:22:21 ----A---- C:\WINDOWS\system32\imon.dll
2010-04-30 19:45:55 ----RASH---- C:\boot.ini
2010-04-30 18:38:04 ----D---- C:\WINDOWS\system32\config
2010-04-28 19:16:55 ----D---- C:\WINDOWS\SD_OLD
2010-04-28 19:12:44 ----D---- C:\WINDOWS\system32\CatRoot
2010-04-28 19:12:36 ----HD---- C:\WINDOWS\inf
2010-04-25 20:05:06 ----D---- C:\WINDOWS\Help
2010-04-25 19:53:14 ----D---- C:\Documents and Settings
2010-04-24 15:20:23 ----D---- C:\WINDOWS\ime
2010-04-24 14:28:21 ----D---- C:\WINDOWS\WinSxS
2010-04-21 20:41:37 ----D---- C:\Program Files\Mozilla Firefox
2010-04-17 08:40:08 ----D---- C:\Program Files\Java
2010-04-13 16:11:59 ----A---- C:\WINDOWS\NeroDigital.ini
2010-04-13 08:14:00 ----D---- C:\Documents and Settings\Gabi\Data aplikací\Skype

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R1 appdrv01;Application Driver (01); C:\WINDOWS\System32\Drivers\appdrv01.sys [2009-12-28 3069040]
R1 ElbyCDIO;ElbyCDIO Driver; C:\WINDOWS\System32\Drivers\ElbyCDIO.sys [2009-02-17 24232]
R1 intelppm;Řadič procesoru Intel; C:\WINDOWS\system32\DRIVERS\intelppm.sys [2004-08-17 39936]
R1 nod32drv;nod32drv; C:\WINDOWS\system32\drivers\nod32drv.sys [2010-05-01 15424]
R1 SCDEmu;SCDEmu; C:\WINDOWS\system32\drivers\SCDEmu.sys [2009-07-27 58908]
R1 WS2IFSL;Podpůrné prostředí zprostředkovatele služeb Windows Socket 2.0 bez podpory IFS; C:\WINDOWS\System32\drivers\ws2ifsl.sys [2001-10-25 12032]
R3 aeaudio;aeaudio; C:\WINDOWS\system32\drivers\aeaudio.sys [2004-08-13 129408]
R3 ati2mtag;ati2mtag; C:\WINDOWS\system32\DRIVERS\ati2mtag.sys [2007-08-17 2371584]
R3 pcouffin;VSO Software pcouffin; C:\WINDOWS\System32\Drivers\pcouffin.sys [2009-12-08 47360]
R3 RTL8023xp;Realtek 10/100/1000 NIC Family all in one NDIS XP Driver; C:\WINDOWS\system32\DRIVERS\Rtlnicxp.sys [2005-03-04 74496]
R3 RushTopDevice;RushTopDevice; \??\C:\WINDOWS\INF\MSI\SlowDownCPU\RushTop.sys []
R3 senfilt;senfilt; C:\WINDOWS\system32\drivers\senfilt.sys [2004-04-26 381056]
R3 SlowDownCPU;SlowDownCPU; \??\C:\WINDOWS\INF\MSI\SlowDownCPU\NTGLM7X.sys []
R3 smwdm;smwdm; C:\WINDOWS\system32\drivers\smwdm.sys [2005-02-01 260288]
R3 usbehci;Ovladač miniportu rozšířeného radiče hostitele Microsoft USB 2.0; C:\WINDOWS\system32\DRIVERS\usbehci.sys [2004-08-03 26624]
R3 usbhub;Rozbočovač umožnující USB2; C:\WINDOWS\system32\DRIVERS\usbhub.sys [2004-08-03 57600]
R3 usbuhci;Ovladač Microsoft univerzálního hostitelského řadiče USB od společnosti Microsoft; C:\WINDOWS\system32\DRIVERS\usbuhci.sys [2004-08-03 20480]
S3 aes6lbur;aes6lbur; C:\WINDOWS\system32\drivers\aes6lbur.sys []
S3 AMON;AMON; C:\WINDOWS\system32\drivers\amon.sys [2010-05-01 512096]
S3 avfbk3i4;avfbk3i4; C:\WINDOWS\system32\drivers\avfbk3i4.sys []
S3 catchme;catchme; \??\C:\DOCUME~1\Gabi\LOCALS~1\Temp\catchme.sys []
S3 ElbyCDFL;ElbyCDFL; C:\WINDOWS\System32\Drivers\ElbyCDFL.sys [2007-02-16 34760]
S3 GMSIPCI;GMSIPCI; \??\D:\INSTALL\GMSIPCI.SYS []
S3 HidUsb;Ovladač třídy standardu HID; C:\WINDOWS\system32\DRIVERS\hidusb.sys [2001-08-17 9600]
S3 MBAMSwissArmy;MBAMSwissArmy; \??\C:\WINDOWS\system32\drivers\mbamswissarmy.sys []
S3 MidiSyn;MidiSyn; C:\WINDOWS\system32\drivers\MidiSyn.sys [2004-09-14 88960]
S3 MSICPL;MSICPL; \??\D:\install4\MSICPL.sys []
S3 NTACCESS;NTACCESS; \??\D:\NTACCESS.sys []
S3 s716bus;Sony Ericsson Device 716 driver (WDM); C:\WINDOWS\system32\DRIVERS\s716bus.sys [2007-04-04 83208]
S3 s716mdfl;Sony Ericsson Device 716 USB WMC Modem Filter; C:\WINDOWS\system32\DRIVERS\s716mdfl.sys [2007-04-04 15112]
S3 s716mdm;Sony Ericsson Device 716 USB WMC Modem Driver; C:\WINDOWS\system32\DRIVERS\s716mdm.sys [2007-04-04 108552]
S3 s716mgmt;Sony Ericsson Device 716 USB WMC Device Management Drivers (WDM); C:\WINDOWS\system32\DRIVERS\s716mgmt.sys [2007-04-04 100360]
S3 s716nd5;Sony Ericsson Device 716 USB Ethernet Emulation SEMC716 (NDIS); C:\WINDOWS\system32\DRIVERS\s716nd5.sys [2007-04-04 23176]
S3 s716obex;Sony Ericsson Device 716 USB WMC OBEX Interface; C:\WINDOWS\system32\DRIVERS\s716obex.sys [2007-04-04 98568]
S3 s716unic;Sony Ericsson Device 716 USB Ethernet Emulation SEMC716 (WDM); C:\WINDOWS\system32\DRIVERS\s716unic.sys [2007-04-04 98952]
S3 SetupNTGLM7X;SetupNTGLM7X; \??\D:\NTGLM7X.sys []
S3 SynasUSB;SynasUSB; C:\WINDOWS\system32\drivers\SynasUSB.sys [2006-11-23 18432]
S3 usbaudio;Ovladač zvukové karty USB (WDM); C:\WINDOWS\system32\drivers\usbaudio.sys [2004-08-04 59264]
S3 usbccgp;Obecný nadřazený ovladač Microsoft USB; C:\WINDOWS\system32\DRIVERS\usbccgp.sys [2004-08-04 31616]
S3 USBSTOR;Ovladač velkokapacitního paměťového zařízení USB; C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS [2004-08-03 26496]
S3 ZMGHPAudioSrv;ZOOM G Series High Performance Audio Driver Service; C:\WINDOWS\system32\drivers\zmghpau.sys [2008-08-11 91136]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 Ati HotKey Poller;Ati HotKey Poller; C:\WINDOWS\system32\Ati2evxx.exe [2007-08-17 483328]
R2 ICQ Service;ICQ Service; C:\Program Files\ICQ6Toolbar\ICQ Service.exe [2009-08-16 222968]
R2 JavaQuickStarterService;Java Quick Starter; C:\Program Files\Java\jre6\bin\jqs.exe [2010-04-12 153376]
R2 NOD32krn;NOD32 Kernel Service; C:\Program Files\Eset\nod32krn.exe [2010-05-01 552064]
R2 SoundMAX Agent Service (default);SoundMAX Agent Service; C:\Program Files\Analog Devices\SoundMAX\SMAgent.exe [2002-09-20 45056]
R2 UMWdf;Windows User Mode Driver Framework; C:\WINDOWS\system32\wdfmgr.exe [2005-01-28 38912]
R2 UxTuneUp;TuneUp Theme Extension; C:\WINDOWS\System32\svchost.exe [2004-08-17 14336]
S2 appdrvrem01;Application Driver Auto Removal Service (01); C:\WINDOWS\System32\appdrvrem01.exe [2009-12-28 316816]
S2 ATI Smart;ATI Smart; C:\WINDOWS\system32\ati2sgag.exe [2007-08-16 593920]
S3 Adobe LM Service;Adobe LM Service; C:\Program Files\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe [2009-12-25 72704]
S3 aspnet_state;ASP.NET State Service; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe [2008-07-25 34312]
S3 clr_optimization_v2.0.50727_32;.NET Runtime Optimization Service v2.0.50727_X86; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe [2008-07-25 69632]
S3 FontCache3.0.0.0;Windows Presentation Foundation Font Cache 3.0.0.0; C:\WINDOWS\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe [2008-07-29 46104]
S3 getPlusHelper;getPlus(R) Helper; C:\WINDOWS\System32\svchost.exe [2004-08-17 14336]
S3 idsvc;Windows CardSpace; C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe [2008-07-29 881664]
S3 npggsvc;nProtect GameGuard Service; C:\WINDOWS\system32\GameMon.des [2009-09-19 3474384]
S3 TuneUp.Defrag;TuneUp Drive Defrag Service; C:\Program Files\TuneUp Utilities 2010\TuneUpDefragService.exe []
S4 NetTcpPortSharing;Net.Tcp Port Sharing Service; C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe [2008-07-29 132096]

-----------------EOF-----------------

[Rudy]

Nic nebezpečného nevidím. Bios jednotku detekuje?

[TheTrooper]

fuu hned zistim , ale inac tento PC ukazuje E:/ , ale kdyz dam vlastnosti > Hardware , tam najdem CD-ROM , je tam napisane ze :

Hardwarové zařízení nelze spustit , protože konfigurační informace (uložené v registru) jsou neúplné nebo poškozené. (Kód 19)

[TheTrooper]

dal sem detekovat automaticky cez bios a ted uz nevidim ani E:/ nevite co to muze byt , este ak pomuze : pri startu nod udelal prohlidku a nasel Chyzvis.A

[Rudy]

Mne zajímá, zda když otevřete bios, vidíte v něm detekovanou CDROM.

[TheTrooper]

no ak to je
Primary IDE Master
Primary IDE Slave
tak jo ... smozrejme potom je tam psani nazov mechaniky (HL-...)

[Rudy]

OK. Zkuste obnovu systému k datu, kdy korketně fungoval.

[TheTrooper]

Poslední známa funkční konfigurace taky nejde a v stavu nouze to taky neukazuje

[Rudy]

Podívejte se do správce zařízení, zda tam je a zda se zobrazuje korektně.

[TheTrooper]

kde se to pozerá ?

[Rudy]

Ovl. panely>systém>hardware>správce zařízení.

[TheTrooper]

tady je obrázek kde všechno videt
jeste ak pomuze , v tento PC mám takovej soubor cdrom.sys ... nwm , ale predtim tam tusim nebyl ....

COMBOFIX LOG :
ComboFix 10-05-05.0B - Gabi . 05. 2010 17:20:38.5.1 - x86
Systém Microsoft Windows XP Professional 5.1.2600.2.1250.421.1029.18.511.224 [GMT 2:00]
Running from: c:\documents and settings\Gabi\Plocha\ComboFix.exe
AV: Eset NOD32 Antivirus 2.70 *On-access scanning disabled* (Updated) {E5E70D32-0101-4F12-8FB0-D96ACA4F34C0}
.
ADS - WINDOWS: deleted 24 bytes in 1 streams.

((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))
.

c:\windows\system32\nethlp.dll

.
((((((((((((((((((((((((((((((((((((((( Drivers/Services )))))))))))))))))))))))))))))))))))))))))))))))))
.

-------\Legacy_DUMETERSVC
-------\Service_DUMeterSvc


((((((((((((((((((((((((( Files Created from 2010-04-06 to 2010-05-06 )))))))))))))))))))))))))))))))
.

2010-05-05 19:33 . 2010-05-05 19:33 -------- d-----w- c:\program files\DU Meter
2010-05-05 16:47 . 2010-05-05 16:47 -------- d-----w- c:\program files\XP SIMULATION
2010-05-01 10:30 . 2004-08-03 21:00 8192 -c--a-w- c:\windows\system32\dllcache\changer.sys
2010-05-01 10:30 . 2004-08-03 21:00 8192 ----a-w- c:\windows\system32\drivers\Changer.sys
2010-05-01 10:30 . 2004-08-03 21:00 8192 ----a-w- C:\changer.sys
2010-05-01 10:30 . 2004-08-03 20:59 49536 -c--a-w- c:\windows\system32\dllcache\cdrom.sys
2010-05-01 10:30 . 2004-08-03 20:59 49536 ----a-w- c:\windows\system32\drivers\cdrom.sys
2010-05-01 10:30 . 2004-08-03 21:07 42368 -c--a-w- c:\windows\system32\dllcache\agp440.sys
2010-05-01 10:30 . 2004-08-03 21:07 42368 ----a-w- c:\windows\system32\drivers\AGP440.sys
2010-05-01 10:30 . 2004-08-03 20:59 49536 ----a-w- C:\cdrom.sys
2010-05-01 10:30 . 2004-08-03 21:07 42368 ----a-w- C:\agp440.sys
2010-04-29 19:10 . 2010-05-05 18:21 -------- d-----w- c:\program files\trend micro
2010-04-29 19:10 . 2010-04-29 19:11 -------- d-----w- C:\rsit
2010-04-27 17:48 . 2010-04-27 17:48 -------- d--h--w- c:\windows\$hf_mig$
2010-04-26 18:39 . 2010-04-15 06:01 3879288 ----a-w- C:\procexp.exe
2010-04-26 17:47 . 2010-04-26 17:47 -------- d-s---w- c:\documents and settings\Administrator\UserData
2010-04-26 17:17 . 2010-04-26 17:17 -------- d-----r- c:\documents and settings\LocalService\Oblíbené položky
2010-04-25 18:05 . 2008-10-16 12:09 43544 ----a-w- c:\windows\system32\wups2.dll
2010-04-25 18:03 . 2010-04-25 18:06 -------- d-----w- C:\daee6bf9b8df2bb6e9f42f
2010-04-24 12:16 . 2010-03-29 22:46 38224 ----a-w- c:\windows\system32\drivers\mbamswissarmy.sys
2010-04-24 12:16 . 2010-03-29 22:45 20824 ----a-w- c:\windows\system32\drivers\mbam.sys
2010-04-24 12:16 . 2010-04-24 12:16 -------- d-----w- c:\program files\Malwarebytes
2010-04-24 07:54 . 2010-04-24 12:05 -------- d-----w- c:\program files\Spybot
2010-04-17 06:40 . 2010-04-17 06:40 -------- d-----w- c:\program files\Common Files\Java
2010-04-17 06:40 . 2010-04-12 15:29 411368 ----a-w- c:\windows\system32\deployJava1.dll

.
(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2010-05-05 13:46 . 2010-03-05 15:12 -------- d-----w- c:\program files\Microsoft Silverlight
2010-05-02 12:47 . 2009-08-17 21:26 -------- d-----w- c:\program files\ESET
2010-05-02 12:42 . 2010-03-30 15:20 -------- d-----w- c:\program files\ophcrack
2010-05-02 12:16 . 2009-08-18 19:39 -------- d-----w- c:\program files\Spyware Terminator
2010-05-02 12:15 . 2010-01-06 15:28 -------- d-----w- c:\program files\WBFS
2010-05-01 10:22 . 2009-08-17 21:28 298104 ----a-w- c:\windows\system32\imon.dll
2010-05-01 10:22 . 2009-08-17 21:28 512096 ----a-w- c:\windows\system32\drivers\amon.sys
2010-05-01 10:22 . 2009-08-17 21:28 15424 ----a-w- c:\windows\system32\drivers\nod32drv.sys
2010-04-28 18:53 . 2009-08-17 19:58 664 ----a-w- c:\windows\system32\d3d9caps.dat
2010-04-17 06:40 . 2009-08-17 21:43 -------- d-----w- c:\program files\Java
2010-04-02 16:00 . 2010-04-02 16:00 -------- d-----w- c:\program files\Ubisoft
2010-04-02 16:00 . 2009-08-17 20:05 -------- d--h--w- c:\program files\InstallShield Installation Information
2010-04-02 15:59 . 2010-04-02 15:59 1 ----a-w- c:\windows\system32\SI.bin
2010-03-31 09:09 . 2010-03-31 09:09 -------- d-----w- c:\program files\SlySoft
2010-03-30 14:28 . 2010-03-27 12:09 -------- d-----w- c:\program files\DAEMON Tools Pro
2010-03-29 17:01 . 2010-03-29 16:55 -------- d-----w- c:\program files\360WavesPatcher
2010-03-29 16:55 . 2010-03-29 16:55 -------- d-----w- c:\program files\Common Files\PC SOFT
2010-03-28 06:59 . 2001-10-25 12:00 77876 ----a-w- c:\windows\system32\perfc005.dat
2010-03-28 06:59 . 2001-10-25 12:00 428730 ----a-w- c:\windows\system32\perfh005.dat
2010-03-27 12:10 . 2009-08-22 07:05 691696 ----a-w- c:\windows\system32\drivers\sptd.sys
2010-03-27 11:55 . 2009-08-22 07:57 -------- d-----w- c:\program files\DAEMON Tools Toolbar
2010-03-14 19:35 . 2010-03-14 19:35 -------- d-----w- c:\program files\Delta
2010-02-17 18:45 . 2010-02-17 18:45 241 ----a-w- c:\documents and settings\Gabi\SR.vbs
2010-02-07 09:58 . 2010-02-07 09:58 0 ----a-r- C:\logwmemory.bin
.

((((((((((((((((((((((((((((( SnapShot@2010-05-01_07.53.07 )))))))))))))))))))))))))))))))))))))))))
.
+ 2010-05-06 15:29 . 2010-05-06 15:29 16384 c:\windows\temp\Perflib_Perfdata_538.dat
- 2009-08-17 21:55 . 2010-04-11 18:18 84661 c:\windows\system32\Macromed\Flash\uninstall_plugin.exe
+ 2009-08-17 21:55 . 2010-05-05 15:13 84661 c:\windows\system32\Macromed\Flash\uninstall_plugin.exe
+ 2009-08-17 21:37 . 2010-05-05 15:08 87716 c:\windows\system32\Adobe\Shockwave 11\uninstaller.exe
- 2009-11-06 09:38 . 2009-11-06 09:38 94208 c:\windows\system32\Adobe\Shockwave 11\SwMenu.dll
+ 2010-04-01 12:46 . 2010-04-01 12:46 94208 c:\windows\system32\Adobe\Shockwave 11\SwMenu.dll
+ 2010-04-01 12:09 . 2010-04-01 12:09 79488 c:\windows\system32\Adobe\Shockwave 11\gtapi.dll
- 2009-11-06 09:05 . 2009-11-06 09:05 79488 c:\windows\system32\Adobe\Shockwave 11\gtapi.dll
+ 2010-04-01 13:01 . 2010-04-01 13:01 65816 c:\windows\system32\Adobe\Director\SWDNLD.EXE
+ 2010-05-04 15:20 . 2010-05-04 15:20 49152 c:\windows\Installer\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}\ConfigIcon.dll
+ 2010-04-01 12:48 . 2010-04-01 12:48 9216 c:\windows\system32\Adobe\Shockwave 11\DynaPlayer.dll
- 2009-11-06 09:40 . 2009-11-06 09:40 9216 c:\windows\system32\Adobe\Shockwave 11\DynaPlayer.dll
+ 2010-04-01 12:09 . 2010-04-01 12:09 136568 c:\windows\system32\Adobe\Shockwave 11\SYMCCHECKER.DLL
+ 2010-04-01 12:46 . 2010-04-01 12:46 114688 c:\windows\system32\Adobe\Shockwave 11\SwInit.exe
- 2009-11-06 09:38 . 2009-11-06 09:38 114688 c:\windows\system32\Adobe\Shockwave 11\SwInit.exe
+ 2010-04-01 12:59 . 2010-04-01 12:59 459032 c:\windows\system32\Adobe\Shockwave 11\SwHelper_1156606.exe
+ 2010-04-01 12:49 . 2010-04-01 12:49 446464 c:\windows\system32\Adobe\Shockwave 11\Proj.dll
- 2009-11-06 09:40 . 2009-11-06 09:40 446464 c:\windows\system32\Adobe\Shockwave 11\Proj.dll
+ 2010-04-01 12:47 . 2010-04-01 12:47 372736 c:\windows\system32\Adobe\Shockwave 11\Plugin.dll
- 2009-11-06 09:39 . 2009-11-06 09:39 372736 c:\windows\system32\Adobe\Shockwave 11\Plugin.dll
+ 2010-04-01 12:09 . 2010-04-01 12:09 753152 c:\windows\system32\Adobe\Shockwave 11\gi.dll
- 2009-11-06 09:37 . 2009-11-06 09:37 503808 c:\windows\system32\Adobe\Shockwave 11\Control.dll
+ 2010-04-01 12:46 . 2010-04-01 12:46 503808 c:\windows\system32\Adobe\Shockwave 11\Control.dll
+ 2010-04-01 13:00 . 2010-04-01 13:00 213272 c:\windows\system32\Adobe\Director\SwDir.dll
- 2009-11-06 09:40 . 2009-11-06 09:40 131072 c:\windows\system32\Adobe\Director\np32dsw.dll
+ 2010-04-01 12:48 . 2010-04-01 12:48 131072 c:\windows\system32\Adobe\Director\np32dsw.dll
- 2009-11-06 09:11 . 2009-11-06 09:11 1011712 c:\windows\system32\Adobe\Shockwave 11\iml32.dll
+ 2010-04-01 12:20 . 2010-04-01 12:20 1011712 c:\windows\system32\Adobe\Shockwave 11\iml32.dll
+ 2010-04-01 12:09 . 2010-04-01 12:09 1975408 c:\windows\system32\Adobe\Shockwave 11\gt.exe
+ 2010-04-01 12:25 . 2010-04-01 12:25 1798144 c:\windows\system32\Adobe\Shockwave 11\dirapi.dll
- 2009-11-06 09:16 . 2009-11-06 09:16 1798144 c:\windows\system32\Adobe\Shockwave 11\dirapi.dll
+ 2010-05-04 15:20 . 2010-05-04 15:20 20240896 c:\windows\Installer\45bd3c.msp
.
((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* empty entries & legit default entries are not shown
REGEDIT4

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"AlcoholAutomount"="c:\program files\Alcohol Soft\Alcohol 120\axcmd.exe" [2009-04-24 203928]
"FlashMute"="c:\program files\FlashMute\FlashMute.exe" [2006-03-11 221184]
"DAEMON Tools Pro Agent"="c:\program files\DAEMON Tools Pro\DTProAgent.exe" [2009-12-18 427328]
"uTorrent"="d:\program files\uTorrent\uTorrent.exe" [2010-05-05 321328]
"DU Meter"="c:\program files\DU Meter\DUMeter.exe" [2009-09-04 2749984]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"SlowDownCPU"="c:\windows\INF\MSI\SlowDownCPU\SlowDownCPU.exe" [2005-02-25 208896]
"SoundMAXPnP"="c:\program files\Analog Devices\SoundMAX\SMax4PNP.exe" [2004-10-14 1388544]
"NeroFilterCheck"="c:\windows\system32\NeroCheck.exe" [2001-07-09 155648]
"Adobe Reader Speed Launcher"="c:\program files\Adobe\Reader 9.0\Reader\Reader_sl.exe" [2008-06-12 34672]
"nod32kui"="c:\program files\Eset\nod32kui.exe" [2010-05-01 949376]
"SunJavaUpdateSched"="c:\program files\Common Files\Java\Java Update\jusched.exe" [2010-02-18 248040]
"QuickTime Task"="c:\program files\QuickTime\qttask.exe" [2009-05-26 413696]
"Sony Ericsson PC Suite"="c:\program files\Sony Ericsson\Mobile2\Application Launcher\Application Launcher.exe" [2007-05-28 528384]
"StartCCC"="c:\program files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" [2009-02-25 61440]
"CloneCDTray"="c:\program files\SlySoft\CloneCD\CloneCDTray.exe" [2009-01-29 57344]

[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="c:\windows\system32\CTFMON.EXE" [2004-08-17 15360]

c:\documents and settings\Gabi\Nabˇdka Start\Programy\Po spuçtŘnˇ\
Adobe Gamma.lnk - c:\program files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe [2005-3-16 113664]

c:\documents and settings\All Users\Nabˇdka Start\Programy\Po spuçtŘnˇ\
Microsoft Office.lnk - c:\program files\Microsoft Office\Office10\OSA.EXE [2001-2-13 83360]

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"c:\\WINDOWS\\system32\\sessmgr.exe"=
"d:\\Program Files\\uTorrent\\uTorrent.exe"=
"c:\\WINDOWS\\Downloaded Program Files\\ijjiOptimizer.exe"=
"c:\\Program Files\\Java\\jre6\\bin\\javaw.exe"=
"c:\\Program Files\\ICQ6.5\\ICQ.exe"=
"c:\\Program Files\\VALVe\\Garry's Mod\\hl2.exe"=
"c:\\Program Files\\VALVe\\Garry's Mod\\srcds.exe"=
"d:\\Program Files\\FlatOut2\\FlatOut2.exe"=
"d:\\Program Files\\World of Warcraft\\BackgroundDownloader.exe"=
"c:\\Program Files\\Skype\\Phone\\Skype.exe"=

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\GloballyOpenPorts\List]
"3724:TCP"= 3724:TCP:Blizzard Downloader: 3724
"14883:TCP"= 14883:TCP:uTorrent
"14883:UDP"= 14883:UDP:14883

R0 sptd;sptd;c:\windows\system32\drivers\sptd.sys [22. 8. 2009 9:05 691696]
R1 appdrv01;Application Driver (01);c:\windows\system32\drivers\appdrv01.sys [28. 12. 2009 18:38 3069040]
R1 nod32drv;nod32drv;c:\windows\system32\drivers\nod32drv.sys [17. 8. 2009 23:28 15424]
R2 ICQ Service;ICQ Service;c:\program files\ICQ6Toolbar\ICQ Service.exe [6. 12. 2009 20:25 222968]
R3 SlowDownCPU;SlowDownCPU;c:\windows\inf\MSI\SlowDownCPU\NTGLM7X.SYS [17. 8. 2009 22:04 23424]
S2 appdrvrem01;Application Driver Auto Removal Service (01);c:\windows\System32\appdrvrem01.exe svc --> c:\windows\System32\appdrvrem01.exe svc [?]
S3 MBAMSwissArmy;MBAMSwissArmy;c:\windows\system32\drivers\mbamswissarmy.sys [24. 4. 2010 14:16 38224]
S3 npggsvc;nProtect GameGuard Service;c:\windows\system32\GameMon.des -service --> c:\windows\system32\GameMon.des -service [?]
S3 SetupNTGLM7X;SetupNTGLM7X;\??\d:\ntglm7x.sys --> d:\NTGLM7X.sys [?]
S3 SynasUSB;SynasUSB;c:\windows\system32\drivers\synasUSB.sys [24. 12. 2009 12:19 18432]
S3 ZMGHPAudioSrv;ZOOM G Series High Performance Audio Driver Service;c:\windows\system32\drivers\zmghpau.sys [11. 8. 2008 11:02 91136]

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Svchost - NetSvcs
UxTuneUp
.
.
------- Supplementary Scan -------
.
uStart Page = hxxp://google.sk/
IE: E&xportovat do aplikace Microsoft Excel - c:\progra~1\MICROS~2\Office10\EXCEL.EXE/3000
LSP: c:\windows\system32\imon.dll
FF - ProfilePath - c:\documents and settings\Gabi\Data aplikací\Mozilla\Firefox\Profiles\lxuxcfra.default\
FF - prefs.js: browser.search.selectedEngine - ICQ Search
FF - prefs.js: browser.startup.homepage - hxxp://ultimate-guitar.com/
FF - prefs.js: keyword.URL - hxxp://search.icq.com/search/afe_results.php?ch_id=afex&q=
FF - component: c:\documents and settings\Gabi\Data aplikací\Mozilla\Firefox\Profiles\lxuxcfra.default\extensions\{7b13ec3e-999a-4b70-b9cb-2617b8323822}\components\FFExternalAlert.dll
FF - component: c:\documents and settings\Gabi\Data aplikací\Mozilla\Firefox\Profiles\lxuxcfra.default\extensions\{7b13ec3e-999a-4b70-b9cb-2617b8323822}\components\RadioWMPCore.dll
FF - plugin: c:\program files\Mozilla Firefox\plugins\npdeployJava1.dll
FF - plugin: c:\program files\Unity\WebPlayer\loader\npUnity3D32.dll

---- FIREFOX POLICIES ----
c:\program files\Mozilla Firefox\greprefs\all.js - pref("ui.use_native_colors", true);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("ui.use_native_popup_windows", false);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("browser.enable_click_image_resizing", true);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("accessibility.browsewithcaret_shortcut.enabled", true);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("javascript.options.mem.high_water_mark", 32);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("javascript.options.mem.gc_frequency", 1600);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("network.auth.force-generic-ntlm", false);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("svg.smil.enabled", false);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("ui.trackpoint_hack.enabled", -1);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("browser.formfill.debug", false);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("browser.formfill.agedWeight", 2);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("browser.formfill.bucketSize", 1);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("browser.formfill.maxTimeGroupings", 25);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("browser.formfill.timeGroupingSize", 604800);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("browser.formfill.boundaryWeight", 25);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("browser.formfill.prefixWeight", 5);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("html5.enable", false);
c:\program files\Mozilla Firefox\greprefs\security-prefs.js - pref("security.ssl.allow_unrestricted_renego_everywhere__temporarily_available_pref", true);
c:\program files\Mozilla Firefox\greprefs\security-prefs.js - pref("security.ssl.renego_unrestricted_hosts", "");
c:\program files\Mozilla Firefox\greprefs\security-prefs.js - pref("security.ssl.treat_unsafe_negotiation_as_broken", false);
c:\program files\Mozilla Firefox\greprefs\security-prefs.js - pref("security.ssl.require_safe_negotiation", false);
c:\program files\Mozilla Firefox\defaults\pref\firefox-branding.js - pref("app.update.download.backgroundInterval", 600);
c:\program files\Mozilla Firefox\defaults\pref\firefox-branding.js - pref("app.update.url.manual", "http://www.firefox.com");
c:\program files\Mozilla Firefox\defaults\pref\firefox-branding.js - pref("browser.search.param.yahoo-fr-ja", "mozff");
c:\program files\Mozilla Firefox\defaults\pref\firefox-l10n.js - pref("browser.fixup.alternate.suffix", ".sk");
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("extensions.{972ce4c6-7e08-4474-a285-3208198ce6fd}.name", "chrome://browser/locale/browser.properties");
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("extensions.{972ce4c6-7e08-4474-a285-3208198ce6fd}.description", "chrome://browser/locale/browser.properties");
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("xpinstall.whitelist.add", "addons.mozilla.org");
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("xpinstall.whitelist.add.36", "getpersonas.com");
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("lightweightThemes.update.enabled", true);
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("browser.allTabs.previews", false);
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("plugins.hide_infobar_for_outdated_plugin", false);
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("plugins.update.notifyUser", false);
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("toolbar.customization.usesheet", false);
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("browser.taskbar.previews.enable", false);
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("browser.taskbar.previews.max", 20);
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("browser.taskbar.previews.cachetime", 20);
.

**************************************************************************

catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2010-05-06 17:29
Windows 5.1.2600 Service Pack 2 NTFS

scanning hidden processes ...

scanning hidden autostart entries ...

scanning hidden files ...

scan completed successfully
hidden files: 0

**************************************************************************

Stealth MBR rootkit/Mebroot/Sinowal detector 0.3.7 by Gmer, http://www.gmer.net

device: opened successfully
user: MBR read successfully
called modules: TUKERNEL.EXE CLASSPNP.SYS disk.sys ACPI.sys hal.dll >>UNKNOWN [0x82FDE1F8]<<
kernel: MBR read successfully
detected MBR rootkit hooks:
\Driver\Disk -> CLASSPNP.SYS @ 0xf8643fc3
\Driver\ACPI -> ACPI.sys @ 0xf84abcb8
\Driver\atapi -> 0x82fde1f8
IoDeviceObjectType -> DeleteProcedure -> TUKERNEL.EXE @ 0x805a1afe
ParseProcedure -> TUKERNEL.EXE @ 0x80570a6e
\Device\Harddisk0\DR0 -> DeleteProcedure -> TUKERNEL.EXE @ 0x805a1afe
ParseProcedure -> TUKERNEL.EXE @ 0x80570a6e
NDIS: Realtek RTL8169/8110 Family Gigabit Ethernet NIC -> SendCompleteHandler -> NDIS.sys @ 0xf834aba0
PacketIndicateHandler -> NDIS.sys @ 0xf8357b21
SendHandler -> NDIS.sys @ 0xf833587b
Warning: possible MBR rootkit infection !
user & kernel MBR OK

**************************************************************************

[HKEY_LOCAL_MACHINE\System\ControlSet004\Services\npggsvc]
"ImagePath"="c:\windows\system32\GameMon.des -service"
.
--------------------- LOCKED REGISTRY KEYS ---------------------

[HKEY_USERS\S-1-5-21-1292428093-73586283-839522115-1003\Software\SecuROM\!CAUTION! NEVER A OR CHANGE ANY KEY*]
"??"=hex:e7,2b,ca,6a,ac,fc,06,75,1c,c7,42,4c,4f,5d,54,fc,77,5a,ff,63,14,7c,20,
c0,96,b5,6d,e1,86,77,b6,84,a6,c6,24,03,50,c7,e4,7b,40,f3,76,8b,2a,ca,30,a0,\
"??"=hex:35,fc,c6,3d,c9,02,ad,db,37,1f,61,de,0f,33,8f,50

[HKEY_USERS\S-1-5-21-1292428093-73586283-839522115-1003\Software\SecuROM\License information*]
"datasecu"=hex:a9,8b,e1,af,f3,87,99,22,38,b6,80,12,d4,63,71,b8,84,6a,cb,7a,3a,
8b,99,c4,95,28,8a,5d,c1,e5,4f,93,d9,f2,5f,9e,8a,ba,cf,1c,08,3d,db,0b,93,f1,\
"rkeysecu"=hex:3a,ac,05,db,e6,8e,f0,ab,08,b6,0b,d9,3b,25,ea,fe
.
--------------------- DLLs Loaded Under Running Processes ---------------------

- - - - - - - > 'winlogon.exe'(776)
c:\windows\system32\Ati2evxx.dll

- - - - - - - > 'lsass.exe'(832)
c:\windows\system32\imon.dll
c:\program files\Eset\pr_imon.dll

- - - - - - - > 'explorer.exe'(2224)
c:\program files\FlashMute\mutelib.dll
.
------------------------ Other Running Processes ------------------------
.
c:\windows\system32\Ati2evxx.exe
c:\windows\system32\Ati2evxx.exe
c:\program files\Java\jre6\bin\jqs.exe
c:\program files\Eset\nod32krn.exe
c:\program files\Analog Devices\SoundMAX\SMAgent.exe
c:\windows\system32\wdfmgr.exe
c:\windows\system32\wscntfy.exe
c:\program files\Common Files\Teleca Shared\Generic.exe
.
**************************************************************************
.
Completion time: 2010-05-06 17:34:59 - machine was rebooted
ComboFix-quarantined-files.txt 2010-05-06 15:34
ComboFix2.txt 2010-05-02 07:06
ComboFix3.txt 2010-05-01 07:57
ComboFix4.txt 2010-04-30 17:38

Pre-Run: Volných bajtů: 41 053 868 032
Post-Run: Volných bajtů: 41 041 731 584

Current=4 Default=4 Failed=3 LastKnownGood=5 Sets=1,2,3,4,5
- - End Of File - - D1D5D8460AB58C1ABF3FC3A5B09FA02B

[Rudy]

2 položky CF odstranil, zbytek logu vypadá čistý. Předpokládám, že se nic nezměnilo. Tu obnovu systému jste zkoušel?

[TheTrooper]

nod mi pri starte najde :
c:\windows\system32\sysinfo.exe - variant infiltrácie Win32/Chyzvis.A červ
C:\WINDOWS\System32\Sysinfo.exe - variant infiltrácie Win32/Chyzvis.A červ

OBNOVA SYSTEMU :
bohuzel , kdyz dam i nejdelsi datum , i tam mam jeste PC plny virú

[Rudy]

OK. Udělejte sken AVPTool: http://www.viry.cz/forum/viewtopic.php?f=29&t=58179 .