Problém se splašeným kurzorem

[kenyeres]

Dobrý den, můj problém přetrvává déle než týden a spočívá v tom že se mi občas při práci s internetem sám od sebe splaší kurzor a začne utíkat doprava. V této situaci pak ani nemůžu posunovat stránkou nahoru, je zaseklá dole. Nezmůžu nic ani kolečkem myši, ani posuvníkem. Tento problém se pak přenáší i offline, když mám např. otevřený notepad tak je také neovladatelný. Zkusil jsem odstranit Mozzilu Firefox, kam se mě nainstaloval jeden podezřelý toolbar, ale problém přetrvává i s Internet Explorerem. Přidávám výpis z logu a děkuji za jakýkoliv podnět, který by mě pomohl vyřešit tuto nepříjemnou situaci.

Logfile of random's system information tool 1.08 (written by random/random)
Run by chleboun at 2010-12-28 17:37:20
Systém Microsoft Windows XP Professional Service Pack 2
System drive C: has 21 GB (14%) free of 153 GB
Total RAM: 1023 MB (66% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 17:37:29, on 28.12.2010
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Alwil Software\Avast5\AvastSvc.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\Program Files\Google\Update\GoogleUpdate.exe
C:\Program Files\OO Software\Defrag\oodag.exe
C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe
C:\WINDOWS\SOUNDMAN.EXE
C:\PROGRA~1\Pinnacle\SHARED~1\Programs\USBTip\USBTip.exe
C:\Program Files\Adobe\Acrobat 9.0\Acrobat\Acrotray.exe
C:\Program Files\Common Files\Java\Java Update\jusched.exe
C:\WINDOWS\system32\RUNDLL32.EXE
C:\Program Files\Alwil Software\Avast5\avastUI.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Documents and Settings\chleboun\Plocha\RSIT.exe
C:\Program Files\trend micro\chleboun.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.seznam.cz/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Odkazy
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\PROGRA~1\MICROS~3\Office12\GRA8E1~1.DLL
O2 - BHO: Adobe PDF Conversion Toolbar Helper - {AE7CD045-E861-484f-8273-0445EE161910} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
O2 - BHO: (no name) - {EBCDDA60-2A68-11D3-8A43-0060083CFB9C} - (no file)
O2 - BHO: SmartSelect - {F4971EE7-DAA0-4053-9964-665D8EE6A077} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll
O3 - Toolbar: Adobe PDF - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [GrooveMonitor] "C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe"
O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
O4 - HKLM\..\Run: [USBToolTip] C:\PROGRA~1\Pinnacle\SHARED~1\Programs\USBTip\USBTip.exe
O4 - HKLM\..\Run: [Adobe Acrobat Speed Launcher] "C:\Program Files\Adobe\Acrobat 9.0\Acrobat\Acrobat_sl.exe"
O4 - HKLM\..\Run: [Acrobat Assistant 8.0] "C:\Program Files\Adobe\Acrobat 9.0\Acrobat\Acrotray.exe"
O4 - HKLM\..\Run: [OODefragTray] C:\Program Files\OO Software\Defrag\oodtray.exe
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Common Files\Java\Java Update\jusched.exe"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime Alternative\qttask.exe" -atboottime
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [avast5] "C:\Program Files\Alwil Software\Avast5\avastUI.exe" /nogui
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - Startup: Výřezy obrazovky a spuštění aplikace OneNote 2007.lnk = C:\Program Files\Microsoft Office\Office12\ONENOTEM.EXE
O4 - Global Startup: Adobe Gamma Loader.lnk = C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe
O8 - Extra context menu item: Append Link Target to Existing PDF - res://C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll/AcroIEAppendSelLinks.html
O8 - Extra context menu item: Append to Existing PDF - res://C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll/AcroIEAppend.html
O8 - Extra context menu item: Convert Link Target to Adobe PDF - res://C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll/AcroIECaptureSelLinks.html
O8 - Extra context menu item: Convert to Adobe PDF - res://C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll/AcroIECapture.html
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Excel - res://C:\PROGRA~1\MICROS~3\Office12\EXCEL.EXE/3000
O9 - Extra button: Odeslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~3\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: Od&eslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~3\Office12\ONBttnIE.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~3\Office12\REFIEBAR.DLL
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} - http://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab
O17 - HKLM\System\CCS\Services\Tcpip\..\{AA535B21-FDB8-4D9F-B4D0-9FE7EA3DE3A6}: NameServer = 10.133.160.1
O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\PROGRA~1\MICROS~3\Office12\GR99D3~1.DLL
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O22 - SharedTaskScheduler: Browseui preloader - {438755C2-A8BA-11D1-B96B-00A0C90312E1} - C:\WINDOWS\system32\browseui.dll
O22 - SharedTaskScheduler: Proces mezipaměti kategorií součástí - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\WINDOWS\system32\browseui.dll
O23 - Service: avast! Antivirus - AVAST Software - C:\Program Files\Alwil Software\Avast5\AvastSvc.exe
O23 - Service: avast! Mail Scanner - AVAST Software - C:\Program Files\Alwil Software\Avast5\AvastSvc.exe
O23 - Service: avast! Web Scanner - AVAST Software - C:\Program Files\Alwil Software\Avast5\AvastSvc.exe
O23 - Service: FLEXnet Licensing Service - Macrovision Europe Ltd. - C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
O23 - Service: Google Update Service (gupdate) (gupdate) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe
O23 - Service: Nalpeiron Licensing Service (nlsX86cc) - Unknown owner - C:\WINDOWS\system32\nlssrv32.exe (file missing)
O23 - Service: NVIDIA Display Driver Service (nvsvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: O&O Defrag - O&O Software GmbH - C:\Program Files\OO Software\Defrag\oodag.exe

--
End of file - 7835 bytes

======Scheduled tasks folder======

C:\WINDOWS\tasks\GoogleUpdateTaskMachineCore.job
C:\WINDOWS\tasks\GoogleUpdateTaskMachineUA.job

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
Adobe PDF Link Helper - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2010-09-22 75200]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{72853161-30C5-4D22-B7F9-0BBC1D38A37E}]
Groove GFS Browser Helper - C:\PROGRA~1\MICROS~3\Office12\GRA8E1~1.DLL [2006-10-26 2210608]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AE7CD045-E861-484f-8273-0445EE161910}]
Adobe PDF Conversion Toolbar Helper - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll [2008-06-11 345480]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre6\bin\jp2ssv.dll [2010-09-15 41760]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{E7E6F031-17CE-4C07-BC86-EABFE594F69C}]
JQSIEStartDetectorImpl Class - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll [2010-09-15 79648]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{EBCDDA60-2A68-11D3-8A43-0060083CFB9C}]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{F4971EE7-DAA0-4053-9964-665D8EE6A077}]
SmartSelect Class - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll [2008-06-11 345480]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{47833539-D0C5-4125-9FA8-0819E2EAAC93} - Adobe PDF - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll [2008-06-11 345480]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"NeroFilterCheck"=C:\WINDOWS\system32\NeroCheck.exe [2001-07-09 155648]
"GrooveMonitor"=C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe [2006-10-26 31016]
"SoundMan"=C:\WINDOWS\SOUNDMAN.EXE [2007-04-16 577536]
"USBToolTip"=C:\PROGRA~1\Pinnacle\SHARED~1\Programs\USBTip\USBTip.exe [2007-02-20 199752]
"Adobe Acrobat Speed Launcher"=C:\Program Files\Adobe\Acrobat 9.0\Acrobat\Acrobat_sl.exe [2008-06-12 37232]
"Acrobat Assistant 8.0"=C:\Program Files\Adobe\Acrobat 9.0\Acrobat\Acrotray.exe [2008-06-11 640376]
"OODefragTray"=C:\Program Files\OO Software\Defrag\oodtray.exe [2009-09-12 2524416]
"Adobe Reader Speed Launcher"=C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe [2010-09-23 35760]
"Adobe ARM"=C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2010-09-20 932288]
"SunJavaUpdateSched"=C:\Program Files\Common Files\Java\Java Update\jusched.exe [2010-05-14 248552]
"QuickTime Task"=C:\Program Files\QuickTime Alternative\qttask.exe [2008-09-06 413696]
"NvCplDaemon"=C:\WINDOWS\system32\NvCpl.dll [2010-01-11 13666408]
"NvMediaCenter"=C:\WINDOWS\system32\NvMcTray.dll [2010-01-11 110696]
"avast5"=C:\Program Files\Alwil Software\Avast5\avastUI.exe [2010-09-07 2838912]
"nwiz"=nwiz.exe /install []

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"ctfmon.exe"=C:\WINDOWS\system32\ctfmon.exe [2004-08-17 15360]

C:\Documents and Settings\All Users\Nabídka Start\Programy\Po spuštění
Adobe Gamma Loader.lnk - C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe

C:\Documents and Settings\chleboun\Nabídka Start\Programy\Po spuštění
Výřezy obrazovky a spuštění aplikace OneNote 2007.lnk - C:\Program Files\Microsoft Office\Office12\ONENOTEM.EXE

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll [2006-10-18 133632]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{B5A7F190-DDA6-4420-B3BA-52453494E6CD}"=C:\PROGRA~1\MICROS~3\Office12\GRA8E1~1.DLL [2006-10-26 2210608]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=323
"NoDriveAutoRun"=67108863
"NoDrives"=0

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"HonorAutoRunSetting"=1
"NoDriveAutoRun"=67108863
"NoDriveTypeAutoRun"=323
"NoDrives"=0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"C:\Program Files\Java\jre6\bin\javaw.exe"="C:\Program Files\Java\jre6\bin\javaw.exe:*:Enabled:Java(TM) Platform SE binary"
"C:\Program Files\Java\jre6\bin\java.exe"="C:\Program Files\Java\jre6\bin\java.exe:*:Enabled:Java(TM) Platform SE binary"
"C:\Program Files\Microsoft Office\Office12\OUTLOOK.EXE"="C:\Program Files\Microsoft Office\Office12\OUTLOOK.EXE:*:Enabled:Microsoft Office Outlook"
"C:\Program Files\Microsoft Office\Office12\GROOVE.EXE"="C:\Program Files\Microsoft Office\Office12\GROOVE.EXE:*:Enabled:Microsoft Office Groove"
"C:\Program Files\Microsoft Office\Office12\ONENOTE.EXE"="C:\Program Files\Microsoft Office\Office12\ONENOTE.EXE:*:Enabled:Microsoft Office OneNote"
"C:\Program Files\Skype\Plugin Manager\skypePM.exe"="C:\Program Files\Skype\Plugin Manager\skypePM.exe:*:Enabled:Skype Extras Manager"
"C:\Program Files\Pinnacle\Studio 14\Programs\RM.exe"="C:\Program Files\Pinnacle\Studio 14\Programs\RM.exe:*:Enabled:Render Manager"
"C:\Program Files\Pinnacle\Studio 14\Programs\Studio.exe"="C:\Program Files\Pinnacle\Studio 14\Programs\Studio.exe:*:Enabled:Studio"
"C:\Program Files\Pinnacle\Studio 14\Programs\umi.exe"="C:\Program Files\Pinnacle\Studio 14\Programs\umi.exe:*:Enabled:umi"
"C:\Documents and Settings\chleboun\Plocha\mplayerc.exe"="C:\Documents and Settings\chleboun\Plocha\mplayerc.exe:*:Enabled:Media Player Classic"
"C:\Program Files\Mozilla Firefox\firefox.exe"="C:\Program Files\Mozilla Firefox\firefox.exe:*:Disabled:Firefox"
"C:\Program Files\VideoLAN\VLC\vlc.exe"="C:\Program Files\VideoLAN\VLC\vlc.exe:*:Enabled:VLC media player"
"C:\Program Files\Google\Google Earth\client\googleearth.exe"="C:\Program Files\Google\Google Earth\client\googleearth.exe:*:Enabled:Google Earth"
"C:\Program Files\Skype\Phone\Skype.exe"="C:\Program Files\Skype\Phone\Skype.exe:*:Enabled:Skype. Take a deep breath "

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"

======File associations======

.txt - open - "C:\Program Files\Microsoft Office\Office12\EXCEL.EXE" /e

======List of files/folders created in the last 1 months======

2010-12-28 17:37:21 ----D---- C:\Program Files\trend micro
2010-12-28 17:37:20 ----D---- C:\rsit
2010-12-28 16:14:21 ----SHD---- C:\Config.Msi
2010-12-24 18:57:43 ----D---- C:\Documents and Settings\All Users\Data aplikací\GoldWave
2010-12-23 23:16:32 ----SHD---- C:\RECYCLER
2010-12-23 21:36:41 ----A---- C:\ComboFix.txt
2010-12-23 18:12:38 ----A---- C:\Boot.bak
2010-12-23 18:12:33 ----RASHD---- C:\cmdcons
2010-12-23 18:10:32 ----A---- C:\WINDOWS\zip.exe
2010-12-23 18:10:32 ----A---- C:\WINDOWS\SWXCACLS.exe
2010-12-23 18:10:32 ----A---- C:\WINDOWS\SWSC.exe
2010-12-23 18:10:32 ----A---- C:\WINDOWS\SWREG.exe
2010-12-23 18:10:32 ----A---- C:\WINDOWS\sed.exe
2010-12-23 18:10:32 ----A---- C:\WINDOWS\PEV.exe
2010-12-23 18:10:32 ----A---- C:\WINDOWS\NIRCMD.exe
2010-12-23 18:10:32 ----A---- C:\WINDOWS\MBR.exe
2010-12-23 18:10:32 ----A---- C:\WINDOWS\grep.exe
2010-12-23 18:09:14 ----D---- C:\WINDOWS\ERDNT
2010-12-23 18:08:32 ----D---- C:\Qoobox
2010-12-23 17:18:25 ----D---- C:\Documents and Settings\chleboun\Data aplikací\Malwarebytes
2010-12-23 17:18:08 ----A---- C:\WINDOWS\system32\drivers\mbamswissarmy.sys
2010-12-23 17:18:07 ----D---- C:\Documents and Settings\All Users\Data aplikací\Malwarebytes
2010-12-23 17:18:04 ----D---- C:\Program Files\Malwarebytes' Anti-Malware
2010-12-23 17:18:04 ----A---- C:\WINDOWS\system32\drivers\mbam.sys
2010-12-23 16:28:30 ----D---- C:\Documents and Settings\All Users\Data aplikací\Alwil Software
2010-12-13 17:36:59 ----A---- C:\WINDOWS\system32\OpenCL.dll
2010-12-13 17:36:58 ----A---- C:\WINDOWS\system32\nvoglnt.dll
2010-12-13 17:36:57 ----A---- C:\WINDOWS\system32\nvcuvid.dll
2010-12-13 17:36:57 ----A---- C:\WINDOWS\system32\nvcuvenc.dll
2010-12-13 17:36:57 ----A---- C:\WINDOWS\system32\nvcuda.dll
2010-12-13 17:36:57 ----A---- C:\WINDOWS\system32\nvcompiler.dll
2010-12-13 17:36:57 ----A---- C:\WINDOWS\system32\nvcodins.dll
2010-12-13 17:36:57 ----A---- C:\WINDOWS\system32\nvcod.dll
2010-12-13 17:36:57 ----A---- C:\WINDOWS\system32\nvapi.dll
2010-12-13 17:29:44 ----A---- C:\196.21_desktop_winxp_32bit_international_whql.exe
2010-12-10 20:07:55 ----A---- C:\WINDOWS\system32\Synsopos.exe
2010-12-10 20:07:50 ----A---- C:\WINDOWS\system32\SynsoLChk.dll
2010-12-10 20:07:49 ----A---- C:\WINDOWS\system32\SYNSOACC.dll
2010-12-10 20:03:01 ----D---- C:\steinberg.nuendo.v3.2.0.1128
2010-12-10 19:59:09 ----D---- C:\Nová složka (5)
2010-12-10 18:52:23 ----A---- C:\ASIO4ALL_2_8_Beta_1_English.exe
2010-12-09 17:18:51 ----D---- C:\Program Files\Common Files\Skype
2010-12-06 17:38:31 ----AD---- C:\poi_pn63440
2010-12-01 17:23:20 ----D---- C:\Documents and Settings\chleboun\Data aplikací\Sibelius Software
2010-12-01 17:15:46 ----D---- C:\Program Files\Sibelius Software
2010-12-01 15:56:59 ----D---- C:\Sibelius + kontakt 4 + EastWest
2010-12-01 02:18:17 ----HDC---- C:\Documents and Settings\All Users\Data aplikací\{BF329843-149E-4A5A-82A1-0250286442D0}
2010-12-01 02:11:48 ----HDC---- C:\Documents and Settings\All Users\Data aplikací\{E7D4E1BB-A8A8-4E3B-BEA6-38DD8E4522DF}
2010-12-01 02:06:59 ----HDC---- C:\Documents and Settings\All Users\Data aplikací\{4275E5EA-6E30-48EB-A209-F964539CBE1C}
2010-12-01 02:01:53 ----D---- C:\Program Files\Native Instruments
2010-11-30 23:41:49 ----D---- C:\Program Files\EastWest
2010-11-30 23:41:24 ----D---- C:\Documents and Settings\All Users\Data aplikací\East West
2010-11-30 18:15:29 ----HDC---- C:\Documents and Settings\All Users\Data aplikací\{C5A0D307-9319-4B00-9734-C0F4B0454A7B}

======List of files/folders modified in the last 1 months======

2010-12-28 17:37:21 ----RD---- C:\Program Files
2010-12-28 17:25:04 ----D---- C:\WINDOWS\system32
2010-12-28 17:25:04 ----A---- C:\WINDOWS\system32\PerfStringBackup.INI
2010-12-28 17:23:06 ----D---- C:\WINDOWS\Temp
2010-12-28 17:11:58 ----D---- C:\WINDOWS\system32\CatRoot2
2010-12-28 17:09:10 ----D---- C:\Program Files\Mozilla Firefox
2010-12-28 17:09:08 ----D---- C:\Documents and Settings\chleboun\Data aplikací\Mozilla
2010-12-28 17:00:54 ----D---- C:\WINDOWS
2010-12-28 16:53:14 ----D---- C:\Documents and Settings\chleboun\Data aplikací\Media Player Classic
2010-12-28 16:51:14 ----D---- C:\Program Files\Steinberg
2010-12-28 16:51:12 ----RSD---- C:\WINDOWS\Fonts
2010-12-28 16:39:47 ----D---- C:\Program Files\NOTION Music
2010-12-28 16:19:53 ----RSD---- C:\WINDOWS\assembly
2010-12-28 16:19:53 ----D---- C:\Program Files\TaoFramework
2010-12-28 16:18:07 ----SHD---- C:\WINDOWS\Installer
2010-12-28 16:17:13 ----D---- C:\WINDOWS\system32\XPSViewer
2010-12-28 16:11:59 ----D---- C:\Program Files\Common Files
2010-12-28 01:19:27 ----D---- C:\Train Store
2010-12-27 21:55:59 ----A---- C:\WINDOWS\NeroDigital.ini
2010-12-27 20:22:39 ----D---- C:\MSTS
2010-12-26 20:29:52 ----A---- C:\WINDOWS\wincmd.ini
2010-12-24 15:56:42 ----D---- C:\Documents and Settings\chleboun\Data aplikací\Skype
2010-12-24 15:55:53 ----D---- C:\Documents and Settings\chleboun\Data aplikací\skypePM
2010-12-23 21:32:38 ----A---- C:\WINDOWS\system.ini
2010-12-23 21:28:39 ----D---- C:\WINDOWS\system32\drivers
2010-12-23 21:28:38 ----D---- C:\WINDOWS\AppPatch
2010-12-23 19:59:11 ----HDC---- C:\WINDOWS\$NtUninstallKB973525$
2010-12-23 18:24:27 ----SD---- C:\WINDOWS\Tasks
2010-12-23 18:20:51 ----D---- C:\WINDOWS\system32\drivers\etc
2010-12-23 18:12:38 ----RASH---- C:\boot.ini
2010-12-23 17:56:08 ----D---- C:\Documents and Settings\chleboun\Data aplikací\Winamp
2010-12-23 17:51:35 ----D---- C:\Documents and Settings\chleboun\Data aplikací\uTorrent
2010-12-23 16:30:23 ----D---- C:\Program Files\Alwil Software
2010-12-23 16:28:58 ----D---- C:\WINDOWS\WinSxS
2010-12-21 16:01:04 ----D---- C:\Nová složka (3)
2010-12-15 02:25:48 ----D---- C:\Documents and Settings\chleboun\Data aplikací\vlc
2010-12-14 20:54:17 ----D---- C:\Program Files\Avidemux 2.5
2010-12-13 17:42:57 ----D---- C:\WINDOWS\system32\CatRoot
2010-12-13 17:41:55 ----D---- C:\WINDOWS\Help
2010-12-13 17:41:55 ----D---- C:\Program Files\NVIDIA Corporation
2010-12-13 17:41:19 ----D---- C:\Documents and Settings\All Users\Data aplikací\NVIDIA Corporation
2010-12-13 17:41:13 ----HD---- C:\WINDOWS\inf
2010-12-13 17:41:08 ----RSHDC---- C:\WINDOWS\system32\dllcache
2010-12-10 20:08:02 ----D---- C:\Program Files\Syncrosoft
2010-12-09 17:18:51 ----RD---- C:\Program Files\Skype
2010-12-09 17:18:43 ----D---- C:\Documents and Settings\All Users\Data aplikací\Skype
2010-12-03 15:01:37 ----D---- C:\Torrenty
2010-12-01 16:03:35 ----D---- C:\Nová složka
2010-12-01 02:14:27 ----D---- C:\Program Files\Common Files\Native Instruments
2010-12-01 00:25:11 ----D---- C:\Program Files\Common Files\Wise Installation Wizard
2010-12-01 00:13:58 ----DC---- C:\WINDOWS\system32\DRVSTORE

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 nv_agp;NVIDIA nForce AGP Bus Filter; C:\WINDOWS\system32\DRIVERS\nv_agp.sys [2003-03-19 18688]
R0 PxHelp20;PxHelp20; C:\WINDOWS\System32\Drivers\PxHelp20.sys [2009-04-28 44944]
R0 sptd;sptd; C:\WINDOWS\System32\Drivers\sptd.sys [2010-03-26 691696]
R1 Aavmker4;avast! Asynchronous Virus Monitor; C:\WINDOWS\system32\drivers\Aavmker4.sys [2010-09-07 28880]
R1 AmdK7;Ovladač procesoru AMD K7; C:\WINDOWS\system32\DRIVERS\amdk7.sys [2004-08-17 41216]
R1 aswSP;aswSP; C:\WINDOWS\system32\drivers\aswSP.sys [2010-09-07 165584]
R1 aswTdi;avast! Network Shield Support; C:\WINDOWS\system32\drivers\aswTdi.sys [2010-09-07 46672]
R2 aswFsBlk;aswFsBlk; C:\WINDOWS\system32\drivers\aswFsBlk.sys [2010-09-07 17744]
R2 aswMon2;avast! Standard Shield Support; C:\WINDOWS\system32\drivers\aswMon2.sys [2010-09-07 100176]
R2 atksgt;atksgt; C:\WINDOWS\system32\DRIVERS\atksgt.sys [2009-10-10 281760]
R2 lirsgt;lirsgt; C:\WINDOWS\system32\DRIVERS\lirsgt.sys [2009-10-10 25888]
R3 aswRdr;aswRdr; C:\WINDOWS\system32\drivers\aswRdr.sys [2010-09-07 23376]
R3 MarvinBus;Pinnacle Marvin Bus; C:\WINDOWS\system32\DRIVERS\MarvinBus.sys [2005-09-23 171520]
R3 nv;nv; C:\WINDOWS\system32\DRIVERS\nv4_mini.sys [2010-01-12 10276768]
R3 nvax;Service for NVIDIA(R) nForce(TM) Audio Enumerator; C:\WINDOWS\system32\drivers\nvax.sys [2003-10-24 38784]
R3 NVENET;NVIDIA nForce MCP Networking Controller Driver; C:\WINDOWS\system32\DRIVERS\NVENET.sys [2002-11-27 80896]
R3 nvnforce;Service for NVIDIA(R) nForce(TM) Audio; C:\WINDOWS\system32\drivers\nvapu.sys [2003-10-24 311936]
R3 pcouffin;VSO Software pcouffin; C:\WINDOWS\System32\Drivers\pcouffin.sys [2010-10-13 47360]
S1 InCDPass;InCDPass; C:\WINDOWS\system32\drivers\InCDPass.sys []
S1 InCDRm;InCD Reader; C:\WINDOWS\system32\drivers\InCDRm.sys []
S3 a3gawydh;a3gawydh; C:\WINDOWS\system32\drivers\a3gawydh.sys []
S3 aig1ag48;aig1ag48; C:\WINDOWS\system32\drivers\aig1ag48.sys []
S3 ALCXWDM;Service for Realtek AC97 Audio (WDM); C:\WINDOWS\system32\drivers\ALCXWDM.SYS [2008-09-24 4122368]
S3 catchme;catchme; \??\C:\DOCUME~1\chleboun\LOCALS~1\Temp\catchme.sys []
S3 cmuda;C-Media WDM Audio Interface; C:\WINDOWS\system32\drivers\cmuda.sys []
S3 GMSIPCI;GMSIPCI; \??\E:\INSTALL\GMSIPCI.SYS []
S3 hamachi;Hamachi Network Interface; C:\WINDOWS\system32\DRIVERS\hamachi.sys [2009-11-29 25280]
S3 nm;Ovladač programu Sledování sítě; C:\WINDOWS\system32\DRIVERS\NMnt.sys [2004-08-03 40320]
S3 NTACCESS;NTACCESS; \??\E:\NTACCESS.sys []
S3 SetupNTGLM7X;SetupNTGLM7X; \??\E:\NTGLM7X.sys []
S3 WudfPf;Windows Driver Foundation - User-mode Driver Framework Platform Driver; C:\WINDOWS\system32\DRIVERS\WudfPf.sys [2006-09-28 77568]
S3 WudfRd;Windows Driver Foundation - User-mode Driver Framework Reflector; C:\WINDOWS\system32\DRIVERS\wudfrd.sys [2006-09-28 82944]
S4 InCDFs;InCD File System; C:\WINDOWS\system32\drivers\InCDFs.sys []

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 avast! Antivirus;avast! Antivirus; C:\Program Files\Alwil Software\Avast5\AvastSvc.exe [2010-09-07 40384]
R2 JavaQuickStarterService;Java Quick Starter; C:\Program Files\Java\jre6\bin\jqs.exe [2010-09-15 153376]
R2 nvsvc;NVIDIA Display Driver Service; C:\WINDOWS\system32\nvsvc32.exe [2010-01-11 154216]
R2 O&O Defrag;O&O Defrag; C:\Program Files\OO Software\Defrag\oodag.exe [2009-09-12 1488128]
R3 avast! Mail Scanner;avast! Mail Scanner; C:\Program Files\Alwil Software\Avast5\AvastSvc.exe [2010-09-07 40384]
R3 avast! Web Scanner;avast! Web Scanner; C:\Program Files\Alwil Software\Avast5\AvastSvc.exe [2010-09-07 40384]
S2 gupdate;Google Update Service (gupdate); C:\Program Files\Google\Update\GoogleUpdate.exe [2009-09-28 133104]
S2 nlsX86cc;Nalpeiron Licensing Service; C:\WINDOWS\system32\nlssrv32.exe []
S3 aspnet_state;Stavová služba ASP.NET; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe [2008-07-25 34312]
S3 clr_optimization_v2.0.50727_32;.NET Runtime Optimization Service v2.0.50727_X86; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe [2008-07-25 69632]
S3 FLEXnet Licensing Service;FLEXnet Licensing Service; C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe [2010-06-12 651720]
S3 FontCache3.0.0.0;Windows Presentation Foundation Font Cache 3.0.0.0; c:\WINDOWS\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe [2008-07-29 46104]
S3 idsvc;Služba Windows CardSpace; C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe [2008-07-29 881664]
S3 Microsoft Office Groove Audit Service;Microsoft Office Groove Audit Service; C:\Program Files\Microsoft Office\Office12\GrooveAuditService.exe [2006-10-26 65824]
S3 odserv;Microsoft Office Diagnostics Service; C:\Program Files\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE [2006-10-26 441136]
S3 ose;Office Source Engine; C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2006-10-26 145184]
S3 WudfSvc;Windows Driver Foundation - User-mode Driver Framework; C:\WINDOWS\system32\svchost.exe [2004-08-17 14336]
S4 NetTcpPortSharing;Služba sdílení portů Net.Tcp; C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe [2008-07-29 132096]

[Rudy]

Nevidím nic nebezpečného. Problém se projevuje jen ve webové browseru, nebo i v jiných programech?

[kenyeres]

Dobrý večer, jakmile se tento problém projeví při prohlížení webových stránek tak se automaticky odrazí i na funkčnosti oper. systému. Například se pohybuju na disku “c“ a nemůžu se dostat na soubory co jsou v horní části obrazovky, nebo mám otevřený notepad a kurzor uhání zběsile dolů. Také mám problém zavřít otevřené aplikace. Většinou to řeším restartem systému. Tyhle jevy se objevují nahodile, např. teď píšu bez problémů, ale před pár hodinami to bylo utrpení. Někdy mám spuštěný internet dvě hodiny bez problémů, jindy se výše zmiňované projeví okamžitě. Nevšiml jsem si, že by se problém vyskytl někdy před spuštěním internetu, vždy až poté co jsem spustil web. prohlížeč.

[Rudy]

Nevím, neznám virus, který by uvedený problém způsoboval. Spíš si myslím, že v systému vzniká nějaký sw konflikt. Přesto nejprve PC vyčistěte CCleanerem: http://www.viry.cz/forum/viewtopic.php?f=46&t=7478 a proveďte kompletní sken MBAM: http://www.malwarebytes.org/mbam.php . Dejte log, předem nic nemažte.

[kenyeres]

Dobrý den, log z malwarebyte´s nic nenašel, ale objevil sem log z minulého čtvrtka kdy jsem si tento program nainstaloval a nechal jej poprvé proskenovat můj systém. V ten den objevil tři potvory, které jsem pak smazal. Jestli bude zájem postnu ho sem. Zatím přikládám ten dnešní záznam:

Malwarebytes' Anti-Malware 1.50.1.1100
http://www.malwarebytes.org

Verze databáze: 5384

Windows 5.1.2600 Service Pack 2
Internet Explorer 6.0.2900.2180

29.12.2010 12:57:18
mbam-log-2010-12-29 (12-57-18).txt

Typ kontroly: Úplný test (C:\|)
Testované objekty: 366674
Uplynulý čas: 1 hodin, 7 minut, 56 sekund

Infikované procesy v paměti: 0
Infikované moduly v paměti: 0
Infikované klíče v registru: 0
Infikované hodnoty v registru: 0
Infikované datové položky v registru: 0
Infikované složky: 0
Infikované soubory: 0

Infikované procesy v paměti:
(Žádné škodlivé položky nebyly zjištěny)

Infikované moduly v paměti:
(Žádné škodlivé položky nebyly zjištěny)

Infikované klíče v registru:
(Žádné škodlivé položky nebyly zjištěny)

Infikované hodnoty v registru:
(Žádné škodlivé položky nebyly zjištěny)

Infikované datové položky v registru:
(Žádné škodlivé položky nebyly zjištěny)

Infikované složky:
(Žádné škodlivé položky nebyly zjištěny)

Infikované soubory:
(Žádné škodlivé položky nebyly zjištěny)

[Rudy]

Ještě zkuste sken ComboFix.

Stahnete a ulozte nejlepe na plochu ComboFix: http://download.bleepingcomputer.com/sUBs/ComboFix.exe

pote spustte aplikaci pod uctem s administratorskym opravnenim

hned po startu se zobrazi obrazovka s licencnimi podminkami, pokracujte kliknutim na tlacitko Ano.

v klidu si postavte na kafe (cela akce trva cca. 5-10 minut, nekdy i dele - dle toho, o jak rychly stroj se jedna a kolika soubory se skener bude muset prodirat), behem skenu se nepokousejte spoustet zadne jine aplikace ani nic jineho

behem skenovani nepropadejte panice, vas stroj muze byt restartovan (predevsim pri prvni aplikaci skeneru)

upozorneni: pokud pouzivate antispyware s rezidentnim stitem, prepnete jeho rezidentni stit do Install Mode, pripadne jej po dobu skenu uplne deaktivujte, protoze dochazi pri skenu a vymazu pripadneho malware k nezadoucim kolizim s rezidentem antispyware

[kenyeres]

Zdravím, dodávám ještě log z ComboFix:

ComboFix 10-12-28.03 - chleboun 29.12.2010 21:10:36.3.1 - x86
Systém Microsoft Windows XP Professional 5.1.2600.2.1250.420.1029.18.1023.666 [GMT 1:00]
Spuštěný z: c:\documents and settings\chleboun\Plocha\ComboFix.exe
AV: avast! Antivirus *Disabled/Updated* {7591DB91-41F0-48A3-B128-1A293FD8233D}
.

((((((((((((((((((((((((( Soubory vytvořené od 2010-11-28 do 2010-12-29 )))))))))))))))))))))))))))))))
.

2010-12-29 17:26 . 2010-12-29 17:26 13942297 ----a-w- C:\cdvaggags.exe
2010-12-29 12:24 . 2010-12-29 12:24 8413648 ----a-w- C:\Firefox Setup 3.6.13.exe
2010-12-29 10:47 . 2010-12-29 18:09 -------- d--h--r- c:\documents and settings\chleboun\Recent
2010-12-28 16:37 . 2010-12-28 16:37 -------- d-----w- c:\program files\trend micro
2010-12-28 16:37 . 2010-12-28 16:37 -------- d-----w- C:\rsit
2010-12-27 16:37 . 2010-12-27 16:37 202390 ----a-w- c:\program files\Microsoft Games\Train Simulator\Uninst_MSTS Patch 1.7.00819.exe
2010-12-24 17:57 . 2010-12-24 17:57 -------- d-----w- c:\documents and settings\All Users\Data aplikací\GoldWave
2010-12-23 16:18 . 2010-12-23 16:18 -------- d-----w- c:\documents and settings\chleboun\Data aplikací\Malwarebytes
2010-12-23 16:18 . 2010-12-20 17:09 38224 ----a-w- c:\windows\system32\drivers\mbamswissarmy.sys
2010-12-23 16:18 . 2010-12-23 16:18 -------- d-----w- c:\documents and settings\All Users\Data aplikací\Malwarebytes
2010-12-23 16:18 . 2010-12-23 16:32 -------- d-----w- c:\program files\Malwarebytes' Anti-Malware
2010-12-23 16:18 . 2010-12-20 17:08 20952 ----a-w- c:\windows\system32\drivers\mbam.sys
2010-12-23 15:28 . 2010-09-07 16:12 38848 ----a-w- c:\windows\avastSS.scr
2010-12-23 15:28 . 2010-12-23 15:28 -------- d-----w- c:\documents and settings\All Users\Data aplikací\Alwil Software
2010-12-13 16:36 . 2010-01-12 04:03 61440 ----a-w- c:\windows\system32\OpenCL.dll
2010-12-13 16:36 . 2010-01-12 04:03 14458880 ----a-w- c:\windows\system32\nvoglnt.dll
2010-12-13 16:36 . 2010-01-12 04:03 4104192 ----a-w- c:\windows\system32\nvcuda.dll
2010-12-13 16:36 . 2010-01-12 04:03 4077672 ----a-w- c:\windows\system32\nvcuvenc.dll
2010-12-13 16:36 . 2010-01-12 04:03 2259560 ----a-w- c:\windows\system32\nvcuvid.dll
2010-12-13 16:36 . 2010-01-12 04:03 182888 ----a-w- c:\windows\system32\nvcodins.dll
2010-12-13 16:36 . 2010-01-12 04:03 182888 ----a-w- c:\windows\system32\nvcod.dll
2010-12-13 16:36 . 2010-01-12 04:03 11632640 ----a-w- c:\windows\system32\nvcompiler.dll
2010-12-13 16:36 . 2010-01-12 04:03 1081344 ----a-w- c:\windows\system32\nvapi.dll
2010-12-13 16:36 . 2010-01-12 04:03 2283526 ----a-w- c:\windows\system32\nvdata.bin
2010-12-13 16:29 . 2010-12-13 16:31 117905536 ----a-w- C:\196.21_desktop_winxp_32bit_international_whql.exe
2010-12-10 19:07 . 2005-11-03 16:14 45056 ----a-w- c:\windows\system32\Synsopos.exe
2010-12-10 19:07 . 2005-11-08 10:20 147456 ----a-w- c:\windows\system32\SynsoLChk.dll
2010-12-10 19:07 . 2005-11-08 19:02 708608 ----a-w- c:\windows\system32\SYNSOACC.dll
2010-12-10 19:03 . 2010-12-10 19:03 -------- d-----w- C:\steinberg.nuendo.v3.2.0.1128
2010-12-10 18:59 . 2010-12-10 18:59 -------- d-----w- C:\Nová složka (5)
2010-12-10 17:52 . 2010-12-10 17:52 288654 ----a-w- C:\ASIO4ALL_2_8_Beta_1_English.exe
2010-12-09 16:18 . 2010-12-09 16:18 -------- d-----w- c:\program files\Common Files\Skype
2010-12-06 16:38 . 2010-12-05 15:25 -------- d---a-w- C:\poi_pn63440
2010-12-01 16:23 . 2010-12-01 16:23 -------- d-----w- c:\documents and settings\chleboun\Data aplikací\Sibelius Software
2010-12-01 16:15 . 2010-12-01 16:17 -------- d-----w- c:\program files\Sibelius Software
2010-12-01 14:56 . 2010-12-01 15:18 -------- d-----w- C:\Sibelius + kontakt 4 + EastWest
2010-12-01 01:18 . 2010-12-01 01:18 -------- dc-h--w- c:\documents and settings\All Users\Data aplikací\{BF329843-149E-4A5A-82A1-0250286442D0}
2010-12-01 01:11 . 2010-12-01 01:16 -------- dc-h--w- c:\documents and settings\All Users\Data aplikací\{E7D4E1BB-A8A8-4E3B-BEA6-38DD8E4522DF}
2010-12-01 01:06 . 2010-12-01 01:07 -------- dc-h--w- c:\documents and settings\All Users\Data aplikací\{4275E5EA-6E30-48EB-A209-F964539CBE1C}
2010-12-01 01:01 . 2010-12-01 01:01 -------- d-----w- c:\program files\Native Instruments
2010-11-30 22:41 . 2010-11-30 23:13 -------- d-----w- c:\program files\EastWest
2010-11-30 22:41 . 2010-11-30 23:13 -------- d-----w- c:\documents and settings\All Users\Data aplikací\East West
2010-11-30 17:15 . 2010-11-30 17:15 -------- dc-h--w- c:\documents and settings\All Users\Data aplikací\{C5A0D307-9319-4B00-9734-C0F4B0454A7B}

.
(((((((((((((((((((((((((((((((((((((((( Find3M výpis ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2010-12-29 17:41 . 2010-12-29 17:41 7538 ----a-w- C:\cd_754059_chovani.zip
2010-12-29 17:41 . 2010-12-29 17:41 6848704 ----a-w- C:\cd_754059.zip
2010-11-26 01:40 . 2010-11-26 01:40 118494 ----a-w- C:\NOTION_VSL_SE_fxp_presets.zip
2010-11-20 20:08 . 2010-11-20 20:08 1700352 ----a-w- c:\windows\system32\gdiplus.dll
2010-11-05 22:05 . 2010-11-05 22:05 4150 ----a-w- C:\MaximizedWindow-45.zip
2010-11-05 00:15 . 2010-11-05 00:14 118093960 ----a-w- C:\260.99_desktop_winxp_32bit_international_whql.exe
2010-11-02 00:03 . 2010-11-02 00:03 2810112 ----a-w- C:\ccsetup300.exe
2010-11-01 20:59 . 2010-11-01 20:58 84458632 ----a-w- C:\186.18_desktop_winxp_32bit_english_whql.exe
2010-10-22 23:21 . 2010-10-22 23:21 568783 ----a-w- C:\fallup1w.zip
2010-10-22 23:05 . 2010-10-22 23:05 52224 ----a-w- c:\windows\ipuninst.exe
2010-10-22 06:23 . 2010-11-05 00:26 888424 ----a-w- c:\windows\system32\nvdispco32.dll
2010-10-22 06:23 . 2010-11-05 00:26 813672 ----a-w- c:\windows\system32\nvgenco32.dll
2010-10-13 14:58 . 2010-10-13 14:58 87608 ----a-w- c:\documents and settings\chleboun\Data aplikací\inst.exe
2010-10-13 14:58 . 2010-10-13 14:58 47360 ----a-w- c:\windows\system32\drivers\pcouffin.sys
2010-10-13 14:58 . 2010-10-13 14:58 47360 ----a-w- c:\documents and settings\chleboun\Data aplikací\pcouffin.sys
.

((((((((((((((((((((((((((((( SnapShot@2010-12-23_17.20.59 )))))))))))))))))))))))))))))))))))))))))
.
+ 2010-12-28 15:45 . 2010-12-28 15:45 16384 c:\windows\Temp\Perflib_Perfdata_5c0.dat
- 2001-10-25 13:00 . 2010-12-23 15:35 68156 c:\windows\system32\perfc009.dat
+ 2001-10-25 13:00 . 2010-12-29 19:05 68156 c:\windows\system32\perfc009.dat
- 2001-10-25 13:00 . 2010-12-23 15:35 79040 c:\windows\system32\perfc005.dat
+ 2001-10-25 13:00 . 2010-12-29 19:05 79040 c:\windows\system32\perfc005.dat
- 2001-10-25 13:00 . 2010-12-23 15:35 435260 c:\windows\system32\perfh009.dat
+ 2001-10-25 13:00 . 2010-12-29 19:05 435260 c:\windows\system32\perfh009.dat
+ 2001-10-25 13:00 . 2010-12-29 19:05 431998 c:\windows\system32\perfh005.dat
- 2001-10-25 13:00 . 2010-12-23 15:35 431998 c:\windows\system32\perfh005.dat
+ 2009-09-01 00:47 . 2010-12-28 16:20 376856 c:\windows\system32\FNTCACHE.DAT
.
(((((((((((((((((((((((((((((((((( Spouštěcí body v registru )))))))))))))))))))))))))))))))))))))))))))))
.
.
*Poznámka* prázdné záznamy a legitimní výchozí údaje nejsou zobrazeny.
REGEDIT4

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"NeroFilterCheck"="c:\windows\system32\NeroCheck.exe" [2001-07-09 155648]
"GrooveMonitor"="c:\program files\Microsoft Office\Office12\GrooveMonitor.exe" [2006-10-26 31016]
"SoundMan"="SOUNDMAN.EXE" [2007-04-16 577536]
"USBToolTip"="c:\progra~1\Pinnacle\SHARED~1\Programs\USBTip\USBTip.exe" [2007-02-20 199752]
"Adobe Acrobat Speed Launcher"="c:\program files\Adobe\Acrobat 9.0\Acrobat\Acrobat_sl.exe" [2008-06-12 37232]
"Acrobat Assistant 8.0"="c:\program files\Adobe\Acrobat 9.0\Acrobat\Acrotray.exe" [2008-06-11 640376]
"OODefragTray"="c:\program files\OO Software\Defrag\oodtray.exe" [2009-09-11 2524416]
"Adobe Reader Speed Launcher"="c:\program files\Adobe\Reader 9.0\Reader\Reader_sl.exe" [2010-09-23 35760]
"Adobe ARM"="c:\program files\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2010-09-20 932288]
"SunJavaUpdateSched"="c:\program files\Common Files\Java\Java Update\jusched.exe" [2010-05-14 248552]
"QuickTime Task"="c:\program files\QuickTime Alternative\qttask.exe" [2008-09-06 413696]
"NvCplDaemon"="c:\windows\system32\NvCpl.dll" [2010-01-11 13666408]
"NvMediaCenter"="c:\windows\system32\NvMcTray.dll" [2010-01-11 110696]
"avast5"="c:\program files\Alwil Software\Avast5\avastUI.exe" [2010-09-07 2838912]
"nwiz"="nwiz.exe" [BU]

[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="c:\windows\system32\CTFMON.EXE" [2004-08-17 15360]

c:\documents and settings\chleboun\Nabˇdka Start\Programy\Po spuçtŘnˇ\
Věýezy obrazovky a spuçtŘnˇ aplikace OneNote 2007.lnk - c:\program files\Microsoft Office\Office12\ONENOTEM.EXE [2006-10-26 98632]

c:\documents and settings\All Users\Nabˇdka Start\Programy\Po spuçtŘnˇ\
Adobe Gamma Loader.lnk - c:\program files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe [2009-10-16 113664]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\session manager]
BootExecute REG_MULTI_SZ autocheck autochk *\0OODBS

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile]
"EnableFirewall"= 0 (0x0)

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\system32\\sessmgr.exe"=
"c:\\Program Files\\Java\\jre6\\bin\\javaw.exe"=
"c:\\Program Files\\Java\\jre6\\bin\\java.exe"=
"c:\\Program Files\\Microsoft Office\\Office12\\OUTLOOK.EXE"=
"c:\\Program Files\\Microsoft Office\\Office12\\GROOVE.EXE"=
"c:\\Program Files\\Microsoft Office\\Office12\\ONENOTE.EXE"=
"c:\\Program Files\\Skype\\Plugin Manager\\skypePM.exe"=
"c:\\Program Files\\Pinnacle\\Studio 14\\Programs\\RM.exe"=
"c:\\Program Files\\Pinnacle\\Studio 14\\Programs\\Studio.exe"=
"c:\\Program Files\\Pinnacle\\Studio 14\\Programs\\umi.exe"=
"c:\\Documents and Settings\\chleboun\\Plocha\\mplayerc.exe"=
"c:\\Program Files\\Mozilla Firefox\\firefox.exe"=
"c:\\Program Files\\VideoLAN\\VLC\\vlc.exe"=
"c:\\Program Files\\Google\\Google Earth\\client\\googleearth.exe"=
"c:\\Program Files\\Skype\\Phone\\Skype.exe"=

R0 sptd;sptd;c:\windows\system32\drivers\sptd.sys [3.9.2009 13:56 691696]
R1 aswSP;aswSP;c:\windows\system32\drivers\aswSP.sys [1.9.2009 13:13 165584]
R2 aswFsBlk;aswFsBlk;c:\windows\system32\drivers\aswFsBlk.sys [1.9.2009 13:13 17744]
S2 gupdate;Google Update Service (gupdate);c:\program files\Google\Update\GoogleUpdate.exe [28.9.2009 13:21 133104]
S2 nlsX86cc;Nalpeiron Licensing Service;c:\windows\system32\nlssrv32.exe --> c:\windows\system32\nlssrv32.exe [?]
S3 SetupNTGLM7X;SetupNTGLM7X;\??\e:\ntglm7x.sys --> e:\NTGLM7X.sys [?]
.
Obsah adresáře 'Naplánované úlohy'

2010-11-03 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
- c:\program files\Google\Update\GoogleUpdate.exe [2009-09-28 12:21]

2010-11-03 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
- c:\program files\Google\Update\GoogleUpdate.exe [2009-09-28 12:21]
.
.
------- Doplňkový sken -------
.
uStart Page = hxxp://www.seznam.cz/
uInternet Connection Wizard,ShellNext = iexplore
IE: Append Link Target to Existing PDF - c:\program files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll/AcroIEAppendSelLinks.html
IE: Append to Existing PDF - c:\program files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll/AcroIEAppend.html
IE: Convert Link Target to Adobe PDF - c:\program files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll/AcroIECaptureSelLinks.html
IE: Convert to Adobe PDF - c:\program files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll/AcroIECapture.html
IE: E&xportovat do aplikace Microsoft Excel - c:\progra~1\MICROS~3\Office12\EXCEL.EXE/3000
TCP: {AA535B21-FDB8-4D9F-B4D0-9FE7EA3DE3A6} = 10.133.160.1
FF - ProfilePath - c:\documents and settings\chleboun\Data aplikací\Mozilla\Firefox\Profiles\qrf8ypz3.default\
FF - prefs.js: browser.startup.homepage - hxxp://www.seznam.cz
FF - Ext: Default: {972ce4c6-7e08-4474-a285-3208198ce6fd} - c:\program files\Mozilla Firefox\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}
FF - Ext: Java Console: {CAFEEFAC-0016-0000-0022-ABCDEFFEDCBA} - c:\program files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0022-ABCDEFFEDCBA}
FF - Ext: Java Quick Starter: jqs@sun.com - c:\program files\Java\jre6\lib\deploy\jqs\ff
.
.
------- Asociace souborů -------
.
.txt=Excel.SheetMacroEnabled.12
.

**************************************************************************

catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2010-12-29 21:19
Windows 5.1.2600 Service Pack 2 NTFS

skenování skrytých procesů ...

skenování skrytých položek 'Po spuštění' ...

skenování skrytých souborů ...

sken byl úspešně dokončen
skryté soubory: 0

**************************************************************************
.
--------------------- ZAMKNUTÉ KLÍČE V REGISTRU ---------------------

[HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\System*]
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
.
--------------------- Knihovny navázané na běžící procesy ---------------------

- - - - - - - > 'winlogon.exe'(580)
c:\windows\system32\WINSPOOL.DRV

- - - - - - - > 'explorer.exe'(1088)
c:\windows\system32\WPDShServiceObj.dll
c:\windows\system32\PortableDeviceTypes.dll
c:\windows\system32\PortableDeviceApi.dll
c:\windows\system32\msi.dll
.
Celkový čas: 2010-12-29 21:24:36
ComboFix-quarantined-files.txt 2010-12-29 20:24
ComboFix2.txt 2010-12-23 20:36
ComboFix3.txt 2010-12-23 17:25

Před spuštěním: Volných bajtů: 20 841 504 768
Po spuštění: Volných bajtů: 20 834 775 040

- - End Of File - - 20E01C57A9D9A1874866E9D6446528AA

[Rudy]

Log vypadá OK. Problém nejspíš bude v systému. Zkuste obnovu systému k datu, kdy korektně fungoval.

[kenyeres]

Dobrá zkusím to. Díky za váš čas.

[Rudy]

Nemáte zač!