Dlouhé spouštění windows a ostatních programů

[morar]

Prosím o kontrolu. V posledním obdbí se prodloužila doba startu windows, ale i spoštění programů včetně internetového prohlížeče.
Vkládám log z RSIT.

Logfile of random's system information tool 1.08 (written by random/random)
Run by Rudolf at 2011-06-27 16:12:20
Microsoft Windows 7 Ultimate
System drive H: has 13 GB (17%) free of 76 GB
Total RAM: 2047 MB (52% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 16:12:59, on 27.6.2011
Platform: Windows 7 (WinNT 6.00.3504)
MSIE: Internet Explorer v9.00 (9.00.8112.16421)
Boot mode: Normal

Running processes:
H:\Windows\system32\Dwm.exe
H:\Windows\system32\taskhost.exe
H:\Windows\Explorer.EXE
H:\Program Files\VIA\VIAudioi\VDeck\VDeck.exe
H:\Program Files\Common Files\Java\Java Update\jusched.exe
H:\Program Files\COMODO\COMODO Internet Security\cfp.exe
H:\Windows\PixArt\Pac207\Monitor.exe
H:\Program Files\Windows Sidebar\sidebar.exe
H:\Program Files\Samsung\Samsung New PC Studio\NPSAgent.exe
H:\Program Files\Auslogics\Auslogics BoostSpeed\BoostSpeed.exe
H:\Program Files\Opera\opera.exe
H:\Users\Rudolf\Desktop\RSIT.exe
H:\Program Files\trend micro\Rudolf.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.cz/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
R3 - URLSearchHook: (no name) - {88c7f2aa-f93f-432c-8f0e-b7d85967a527} - (no file)
O2 - BHO: Pomocník pro přihlášení ke službě Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - H:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - H:\Program Files\Java\jre6\bin\jp2ssv.dll
O4 - HKLM\..\Run: [HDAudDeck] H:\Program Files\VIA\VIAudioi\VDeck\VDeck.exe -r
O4 - HKLM\..\Run: [SunJavaUpdateSched] "H:\Program Files\Common Files\Java\Java Update\jusched.exe"
O4 - HKLM\..\Run: [COMODO Internet Security] "H:\Program Files\COMODO\COMODO Internet Security\cfp.exe" -h
O4 - HKLM\..\Run: [Monitor] H:\Windows\PixArt\PAC207\Monitor.exe
O4 - HKCU\..\Run: [Sidebar] H:\Program Files\Windows Sidebar\sidebar.exe /autoRun
O4 - HKCU\..\Run: [Auslogics BoostSpeed] H:\Program Files\Auslogics\Auslogics BoostSpeed\boostspeed.exe
O4 - HKCU\..\Run: [AutoStartNPSAgent] H:\Program Files\Samsung\Samsung New PC Studio\NPSAgent.exe
O4 - HKCU\..\Run: [Google Update] "H:\Users\Rudolf\AppData\Local\Google\Update\GoogleUpdate.exe" /c
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] H:\Windows\System32\mctadmin.exe (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] H:\Windows\System32\mctadmin.exe (User 'NETWORK SERVICE')
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/s ... wflash.cab
O20 - AppInit_DLLs: H:\Windows\system32\guard32.dll
O23 - Service: COMODO Internet Security Helper Service (cmdAgent) - COMODO - H:\Program Files\COMODO\COMODO Internet Security\cmdagent.exe
O23 - Service: FsUsbExService - Teruten - H:\Windows\system32\FsUsbExService.Exe
O23 - Service: NVIDIA Display Driver Service (nvsvc) - NVIDIA Corporation - H:\Windows\system32\nvvsvc.exe
O23 - Service: TeamViewer 5 (TeamViewer5) - TeamViewer GmbH - H:\Program Files\TeamViewer\Version5\TeamViewer_Service.exe

--
End of file - 3982 bytes

======Scheduled tasks folder======

H:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-445116536-2603339772-2000099963-1001Core.job
H:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-445116536-2603339772-2000099963-1001UA.job

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
Pomocník pro přihlášení ke službě Windows Live - H:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2009-01-22 408448]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - H:\Program Files\Java\jre6\bin\jp2ssv.dll [2011-02-09 41760]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"HDAudDeck"=H:\Program Files\VIA\VIAudioi\VDeck\VDeck.exe [2009-10-28 1701888]
"SunJavaUpdateSched"=H:\Program Files\Common Files\Java\Java Update\jusched.exe [2010-10-29 249064]
"COMODO Internet Security"=H:\Program Files\COMODO\COMODO Internet Security\cfp.exe [2011-05-27 2552648]
"Monitor"=H:\Windows\PixArt\PAC207\Monitor.exe [2006-11-03 319488]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"Sidebar"=H:\Program Files\Windows Sidebar\sidebar.exe [2009-07-14 1173504]
"Auslogics BoostSpeed"=H:\Program Files\Auslogics\Auslogics BoostSpeed\boostspeed.exe [2010-03-31 480368]
"AutoStartNPSAgent"=H:\Program Files\Samsung\Samsung New PC Studio\NPSAgent.exe [2010-07-04 95576]
"Google Update"=H:\Users\Rudolf\AppData\Local\Google\Update\GoogleUpdate.exe [2010-10-11 136176]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
"AppInit_DLLs"=" H:\Windows\system32\guard32.dll"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED}

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=credssp.dll

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorAdmin"=5
"ConsentPromptBehaviorUser"=3
"EnableUIADesktopToggle"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=255

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=255

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

======File associations======

.js - edit - H:\Windows\System32\Notepad.exe %1
.js - open - H:\Windows\System32\WScript.exe "%1" %*

======List of files/folders created in the last 1 months======

2011-06-27 16:12:21 ----D---- H:\Program Files\trend micro
2011-06-27 16:12:20 ----D---- H:\rsit
2011-06-26 15:36:22 ----D---- H:\Windows\system32\SPReview
2011-06-26 15:34:56 ----D---- H:\Windows\system32\EventProviders
2011-06-16 21:38:18 ----A---- H:\Windows\system32\mshtmled.dll
2011-06-16 21:38:18 ----A---- H:\Windows\system32\iertutil.dll
2011-06-16 21:38:17 ----A---- H:\Windows\system32\jscript9.dll
2011-06-16 21:38:17 ----A---- H:\Windows\system32\jscript.dll
2011-06-16 21:38:17 ----A---- H:\Windows\system32\ieui.dll
2011-06-16 21:38:15 ----A---- H:\Windows\system32\urlmon.dll
2011-06-16 21:38:15 ----A---- H:\Windows\system32\mshtml.dll
2011-06-16 21:38:15 ----A---- H:\Windows\system32\ieframe.dll
2011-06-16 21:09:35 ----A---- H:\Windows\system32\drivers\srvnet.sys
2011-06-16 21:09:35 ----A---- H:\Windows\system32\drivers\srv2.sys
2011-06-16 21:09:35 ----A---- H:\Windows\system32\drivers\srv.sys
2011-06-16 21:09:27 ----A---- H:\Windows\system32\drivers\tcpip.sys
2011-06-16 21:09:26 ----A---- H:\Windows\system32\drivers\afd.sys
2011-06-16 21:09:22 ----A---- H:\Windows\system32\oleaut32.dll
2011-06-16 21:09:19 ----A---- H:\Windows\system32\drivers\dfsc.sys
2011-06-16 21:09:17 ----A---- H:\Windows\system32\inetcomm.dll
2011-06-16 21:09:15 ----A---- H:\Windows\system32\drivers\mrxsmb10.sys
2011-06-16 21:09:14 ----A---- H:\Windows\system32\drivers\mrxsmb20.sys
2011-06-16 21:09:14 ----A---- H:\Windows\system32\drivers\mrxsmb.sys
2011-06-16 19:48:31 ----D---- H:\Windows\PixArt

======List of files/folders modified in the last 1 months======

2011-06-27 16:12:21 ----RD---- H:\Program Files
2011-06-27 16:06:04 ----D---- H:\Windows\Microsoft.NET
2011-06-27 16:06:03 ----RSD---- H:\Windows\assembly
2011-06-27 16:02:31 ----D---- H:\Windows\winsxs
2011-06-27 16:00:47 ----SHD---- H:\System Volume Information
2011-06-27 15:58:37 ----D---- H:\Windows\system32\catroot
2011-06-27 15:58:36 ----D---- H:\Windows\system32\catroot2
2011-06-27 15:58:12 ----D---- H:\Windows\system32\LogFiles
2011-06-27 15:56:56 ----D---- H:\Windows\system32\config
2011-06-26 23:08:02 ----SHD---- H:\Windows\Installer
2011-06-26 23:08:02 ----D---- H:\Windows\system32\appmgmt
2011-06-26 23:07:58 ----SHD---- H:\Config.Msi
2011-06-26 23:07:54 ----D---- H:\Windows\system32\Tasks
2011-06-26 23:07:27 ----D---- H:\Windows\Prefetch
2011-06-26 23:01:24 ----D---- H:\Windows\Temp
2011-06-26 23:01:10 ----D---- H:\Windows\system32\DriverStore
2011-06-26 22:42:08 ----D---- H:\Windows\system32\drivers
2011-06-26 22:42:00 ----D---- H:\Windows\System32
2011-06-26 22:41:00 ----D---- H:\Windows\inf
2011-06-26 22:38:35 ----D---- H:\Windows\Tasks
2011-06-26 22:38:35 ----D---- H:\Windows\system32\wfp
2011-06-26 22:38:35 ----D---- H:\Windows\system32\wbem
2011-06-26 22:38:34 ----D---- H:\Windows\system32\cs-CZ
2011-06-26 22:38:33 ----RSD---- H:\Windows\Fonts
2011-06-26 22:38:33 ----D---- H:\Program Files\Windows Media Player
2011-06-26 22:38:31 ----D---- H:\Windows
2011-06-26 22:37:06 ----D---- H:\Windows\system32\oobe
2011-06-26 22:37:06 ----D---- H:\Windows\system32\migwiz
2011-06-26 22:37:06 ----D---- H:\Windows\system32\manifeststore
2011-06-26 22:37:05 ----D---- H:\Windows\system32\Dism
2011-06-26 22:37:05 ----D---- H:\Windows\ehome
2011-06-26 22:37:05 ----D---- H:\Windows\AppPatch
2011-06-26 22:37:05 ----D---- H:\Program Files\Windows Defender
2011-06-26 22:37:05 ----D---- H:\Program Files\DVD Maker
2011-06-26 22:36:57 ----D---- H:\Windows\TAPI
2011-06-26 22:36:57 ----D---- H:\Windows\system32\sysprep
2011-06-26 22:36:57 ----D---- H:\Windows\system32\sppui
2011-06-26 22:36:57 ----D---- H:\Windows\system32\Setup
2011-06-26 22:36:56 ----D---- H:\Windows\system32\migration
2011-06-26 22:36:56 ----D---- H:\Windows\system32\es-ES
2011-06-26 22:36:56 ----D---- H:\Windows\system32\en-US
2011-06-26 22:36:55 ----D---- H:\Windows\system32\drivers\UMDF
2011-06-26 22:36:55 ----D---- H:\Windows\system32\drivers\cs-CZ
2011-06-26 22:36:55 ----D---- H:\Windows\system32\da-DK
2011-06-26 22:36:55 ----D---- H:\Windows\system32\cs
2011-06-26 22:36:54 ----SHD---- H:\Windows\BitLockerDiscoveryVolumeContents
2011-06-26 22:36:54 ----D---- H:\Windows\system32\Boot
2011-06-26 22:36:54 ----D---- H:\Windows\system32\AdvancedInstallers
2011-06-26 22:36:54 ----D---- H:\Windows\servicing
2011-06-26 22:36:54 ----D---- H:\Windows\PolicyDefinitions
2011-06-26 22:36:54 ----D---- H:\Program Files\Windows Sidebar
2011-06-26 22:36:54 ----D---- H:\Program Files\Windows Photo Viewer
2011-06-26 22:36:54 ----D---- H:\Program Files\Windows Mail
2011-06-26 22:36:54 ----D---- H:\Program Files\Windows Journal
2011-06-26 22:36:54 ----D---- H:\Program Files\Internet Explorer
2011-06-26 22:31:44 ----D---- H:\Windows\system32\XPSViewer
2011-06-26 22:31:39 ----D---- H:\Windows\system32\spp
2011-06-26 22:31:39 ----D---- H:\Windows\system32\Speech
2011-06-26 22:31:36 ----D---- H:\Windows\system32\MUI
2011-06-26 22:31:17 ----D---- H:\Windows\system32\CodeIntegrity
2011-06-26 22:31:14 ----D---- H:\Windows\security
2011-06-26 22:30:16 ----D---- H:\Program Files\Windows Portable Devices
2011-06-26 22:28:32 ----D---- H:\Windows\registration
2011-06-26 22:14:11 ----D---- H:\Windows\debug
2011-06-16 21:40:13 ----A---- H:\Windows\system32\MRT.exe
2011-06-16 21:39:05 ----D---- H:\Program Files\Microsoft Silverlight
2011-06-16 19:59:29 ----A---- H:\Windows\win.ini
2011-06-16 19:48:31 ----D---- H:\Windows\twain_32
2011-06-07 20:08:28 ----A---- H:\Windows\system32\PerfStringBackup.INI
2011-05-29 21:41:49 ----D---- H:\Windows\system32\NDF
2011-05-29 14:15:00 ----D---- H:\Windows\LiveKernelReports
2011-05-29 13:03:24 ----D---- H:\Program Files\Opera

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 giveio;giveio; H:\Windows\system32\giveio.sys [1996-04-03 5248]
R0 hotcore3;hc3ServiceName; H:\Windows\system32\DRIVERS\hotcore3.sys [2010-04-01 40560]
R0 rdyboost;ReadyBoost; H:\Windows\System32\drivers\rdyboost.sys [2009-07-14 173648]
R0 speedfan;speedfan; H:\Windows\system32\speedfan.sys [2006-09-24 5248]
R0 sptd;sptd; H:\Windows\System32\Drivers\sptd.sys [2010-07-31 691696]
R1 cmderd;COMODO Internet Security Eradication Driver; H:\Windows\System32\DRIVERS\cmderd.sys [2011-05-27 19088]
R1 cmdGuard;COMODO Internet Security Sandbox Driver; H:\Windows\System32\DRIVERS\cmdguard.sys [2011-05-27 238960]
R1 cmdHlp;COMODO Internet Security Helper Driver; H:\Windows\System32\DRIVERS\cmdhlp.sys [2011-05-27 37592]
R1 CSC;@%systemroot%\system32\cscsvc.dll,-202; H:\Windows\system32\drivers\csc.sys [2009-07-14 387584]
R1 inspect;COMODO Internet Security Firewall Driver; H:\Windows\system32\DRIVERS\inspect.sys [2011-05-27 82400]
R2 Parvdm;Parvdm; H:\Windows\system32\DRIVERS\parvdm.sys [2009-07-14 8704]
R3 FsUsbExDisk;FsUsbExDisk; \??\H:\Windows\system32\FsUsbExDisk.SYS [2010-06-14 36608]
R3 MTsensor;ATK0110 ACPI UTILITY; H:\Windows\system32\DRIVERS\ASACPI.sys [2004-08-13 5810]
R3 RTL8167;Realtek 8167 NT Driver; H:\Windows\system32\DRIVERS\Rt86win7.sys [2009-05-22 167936]
R3 teamviewervpn;TeamViewer VPN Adapter; H:\Windows\system32\DRIVERS\teamviewervpn.sys [2010-10-15 25088]
R3 VIAHdAudAddService;VIA High Definition Audio Driver Service; H:\Windows\system32\drivers\viahduaa.sys [2009-10-21 1102848]
S1 Uim_IM;UIM Drive Backup Image Plugin; H:\Windows\System32\Drivers\Uim_IM.sys [2010-02-02 385544]
S1 UimBus;Universal Image Mounter Controller; H:\Windows\system32\DRIVERS\UimBus.sys [2010-02-02 34392]
S3 agvxvtdm;agvxvtdm; H:\Windows\system32\drivers\agvxvtdm.sys []
S3 aic78xx;aic78xx; H:\Windows\system32\DRIVERS\djsvs.sys [2009-07-14 70720]
S3 amdagp;AMD AGP Bus Filter Driver; H:\Windows\system32\DRIVERS\amdagp.sys [2009-07-14 53312]
S3 b57nd60x;Broadcom NetXtreme Gigabit Ethernet - NDIS 6.0; H:\Windows\system32\DRIVERS\b57nd60x.sys [2009-07-14 229888]
S3 BthEnum;Služba Bluetooth Enumerator; H:\Windows\system32\DRIVERS\BthEnum.sys [2009-07-14 34816]
S3 BthPan;Zařízení Bluetooth (síť PAN); H:\Windows\system32\DRIVERS\bthpan.sys [2009-07-14 93696]
S3 BTHPORT;Ovladač portu Bluetooth; H:\Windows\System32\Drivers\BTHport.sys [2009-07-14 392704]
S3 BTHUSB;Ovladač rozhraní USB radiostanice Bluetooth; H:\Windows\System32\Drivers\BTHUSB.sys [2009-07-14 58880]
S3 PAC207;SoC PC-Camera; H:\Windows\system32\DRIVERS\PFC027.SYS [2006-12-05 507136]
S3 pciide;pciide; H:\Windows\system32\DRIVERS\pciide.sys [2009-07-14 12368]
S3 RDPDR;Terminal Server Device Redirector Driver; H:\Windows\System32\drivers\rdpdr.sys [2009-07-14 133120]
S3 RFCOMM;Zařízení Bluetooth (RFCOMM protokol TDI); H:\Windows\system32\DRIVERS\rfcomm.sys [2009-07-14 129536]
S3 s3cap;s3cap; H:\Windows\system32\DRIVERS\vms3cap.sys [2009-07-14 5632]
S3 sisagp;SIS AGP Bus Filter; H:\Windows\system32\DRIVERS\sisagp.sys [2009-07-14 52304]
S3 storvsc;storvsc; H:\Windows\system32\DRIVERS\storvsc.sys [2009-07-14 28224]
S3 viaagp;VIA AGP Bus Filter; H:\Windows\system32\DRIVERS\viaagp.sys [2009-07-14 53328]
S3 ViaC7;VIA C7 Processor Driver; H:\Windows\system32\DRIVERS\viac7.sys [2009-07-14 52736]
S3 vmbus;@%SystemRoot%\system32\vmbusres.dll,-1000; H:\Windows\system32\DRIVERS\vmbus.sys [2009-07-14 175824]
S3 VMBusHID;VMBusHID; H:\Windows\system32\DRIVERS\VMBusHID.sys [2009-07-14 17920]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 cmdAgent;COMODO Internet Security Helper Service; H:\Program Files\COMODO\COMODO Internet Security\cmdagent.exe [2011-05-27 1779792]
R2 CscService;@%systemroot%\system32\cscsvc.dll,-200; H:\Windows\System32\svchost.exe [2009-07-14 20992]
R2 FsUsbExService;FsUsbExService; H:\Windows\system32\FsUsbExService.Exe [2010-07-04 238952]
R2 nvsvc;NVIDIA Display Driver Service; H:\Windows\system32\nvvsvc.exe [2010-07-09 129640]
R2 TeamViewer5;TeamViewer 5; H:\Program Files\TeamViewer\Version5\TeamViewer_Service.exe [2010-10-19 2011944]
S3 AppMgmt;@appmgmts.dll,-3250; H:\Windows\system32\svchost.exe [2009-07-14 20992]
S3 PeerDistSvc;@%SystemRoot%\system32\peerdistsvc.dll,-9000; H:\Windows\System32\svchost.exe [2009-07-14 20992]
S3 UmRdpService;@%SystemRoot%\system32\umrdp.dll,-1000; H:\Windows\System32\svchost.exe [2009-07-14 20992]
S3 WatAdminSvc;@%SystemRoot%\system32\Wat\WatUX.exe,-601; H:\Windows\system32\Wat\WatAdminSvc.exe [2010-07-28 1343400]

-----------------EOF-----------------

[Rudy]

Toto je OK. Ještě poprosím o log z ComboFix.

Stahnete a ulozte nejlepe na plochu ComboFix: http://download.bleepingcomputer.com/sUBs/ComboFix.exe

pote spustte aplikaci pod uctem s administratorskym opravnenim

hned po startu se zobrazi obrazovka s licencnimi podminkami, pokracujte kliknutim na tlacitko Ano.

v klidu si postavte na kafe (cela akce trva cca. 5-10 minut, nekdy i dele - dle toho, o jak rychly stroj se

jedna a kolika soubory se skener bude muset prodirat), behem skenu se nepokousejte spoustet zadne jine

aplikace ani nic jineho

behem skenovani nepropadejte panice, vas stroj muze byt restartovan (predevsim pri prvni aplikaci skeneru)

upozorneni: pokud pouzivate antispyware s rezidentnim stitem, prepnete jeho rezidentni stit do Install Mode,

pripadne jej po dobu skenu uplne deaktivujte, protoze dochazi pri skenu a vymazu pripadneho malware k

nezadoucim kolizim s rezidentem antispyware

[morar]

Tady je log z ComboFix

ComboFix 11-06-27.01 - Rudolf 27.06.2011 19:55:03.1.2 - x86
Microsoft Windows 7 Ultimate 6.1.7600.0.1250.420.1029.18.2047.1400 [GMT 2:00]
Spuštěný z: h:\users\Rudolf\Desktop\ComboFix.exe
AV: COMODO Antivirus *Enabled/Updated* {7554F4C5-5EC0-2FC6-8192-8DF831DBED51}
FW: COMODO Firewall *Enabled* {4D6F75E0-14AF-2E9E-AACD-24CDCF08AA2A}
SP: COMODO Defense+ *Enabled/Updated* {CE351521-78FA-2048-BB22-B68A4A5CA7EC}
SP: Windows Defender *Disabled/Outdated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.
.
((((((((((((((((((((((((( Soubory vytvořené od 2011-05-27 do 2011-06-27 )))))))))))))))))))))))))))))))
.
.
2011-06-27 18:05 . 2011-06-27 18:05 -------- d-----w- h:\users\Default\AppData\Local\temp
2011-06-27 17:39 . 2011-06-27 17:39 -------- d-----w- H:\VritualRoot
2011-06-27 14:43 . 2011-06-27 14:43 -------- d-----w- h:\program files\Defraggler
2011-06-27 14:12 . 2011-06-27 14:12 -------- d-----w- h:\program files\trend micro
2011-06-27 14:12 . 2011-06-27 14:13 -------- d-----w- H:\rsit
2011-06-26 13:36 . 2011-06-26 13:36 -------- d-----w- h:\windows\system32\SPReview
2011-06-26 13:34 . 2011-06-26 13:34 -------- d-----w- h:\windows\system32\EventProviders
2011-06-16 19:38 . 2011-04-22 23:25 2382848 ----a-w- h:\windows\system32\mshtml.tlb
2011-06-16 19:38 . 2011-04-25 15:29 141104 ----a-w- h:\program files\Internet Explorer\sqmapi.dll
2011-06-16 19:38 . 2011-04-22 23:35 1797632 ----a-w- h:\windows\system32\jscript9.dll
2011-06-16 19:09 . 2011-04-29 02:57 311296 ----a-w- h:\windows\system32\drivers\srv.sys
2011-06-16 19:09 . 2011-04-29 02:57 309760 ----a-w- h:\windows\system32\drivers\srv2.sys
2011-06-16 19:09 . 2011-04-29 02:57 114176 ----a-w- h:\windows\system32\drivers\srvnet.sys
2011-06-16 19:09 . 2011-04-25 04:56 1286016 ----a-w- h:\windows\system32\drivers\tcpip.sys
2011-06-16 19:09 . 2011-04-25 02:35 338944 ----a-w- h:\windows\system32\drivers\afd.sys
2011-06-16 19:09 . 2010-12-18 05:31 571904 ----a-w- h:\windows\system32\oleaut32.dll
2011-06-16 19:09 . 2011-04-27 02:33 78336 ----a-w- h:\windows\system32\drivers\dfsc.sys
2011-06-16 19:09 . 2011-05-03 04:50 740864 ----a-w- h:\windows\system32\inetcomm.dll
2011-06-16 19:09 . 2011-05-04 02:43 222720 ----a-w- h:\windows\system32\drivers\mrxsmb10.sys
2011-06-16 19:09 . 2011-05-04 02:43 96256 ----a-w- h:\windows\system32\drivers\mrxsmb20.sys
2011-06-16 19:09 . 2011-05-04 02:43 123392 ----a-w- h:\windows\system32\drivers\mrxsmb.sys
2011-06-16 17:48 . 2011-06-16 17:48 -------- d-----w- h:\windows\PixArt
.
.
.
(((((((((((((((((((((((((((((((((((((((( Find3M výpis ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2011-06-23 15:05 . 2011-05-15 17:12 404640 ----a-w- h:\windows\system32\FlashPlayerCPLApp.cpl
2011-05-27 15:04 . 2011-01-06 15:36 82400 ----a-w- h:\windows\system32\drivers\inspect.sys
2011-05-27 15:04 . 2011-01-06 15:36 37592 ----a-w- h:\windows\system32\drivers\cmdhlp.sys
2011-05-27 15:04 . 2010-12-28 23:42 284744 ----a-w- h:\windows\system32\guard32.dll
2011-05-27 15:04 . 2011-01-06 15:36 238960 ----a-w- h:\windows\system32\drivers\cmdGuard.sys
2011-05-27 15:04 . 2011-01-06 15:36 19088 ----a-w- h:\windows\system32\drivers\cmderd.sys
2011-05-08 17:41 . 2011-05-08 17:41 74752 ----a-w- h:\windows\system32\RegisterIEPKEYs.exe
2011-05-08 17:41 . 2011-05-08 17:41 161792 ----a-w- h:\windows\system32\msls31.dll
2011-05-08 17:41 . 2011-05-08 17:41 1126912 ----a-w- h:\windows\system32\wininet.dll
2011-05-08 17:41 . 2011-05-08 17:41 86528 ----a-w- h:\windows\system32\iesysprep.dll
2011-05-08 17:41 . 2011-05-08 17:41 76800 ----a-w- h:\windows\system32\SetIEInstalledDate.exe
2011-05-08 17:41 . 2011-05-08 17:41 48640 ----a-w- h:\windows\system32\mshtmler.dll
2011-05-08 17:41 . 2011-05-08 17:41 110592 ----a-w- h:\windows\system32\IEAdvpack.dll
2011-05-08 17:41 . 2011-05-08 17:41 63488 ----a-w- h:\windows\system32\tdc.ocx
2011-05-08 17:41 . 2011-05-08 17:41 367104 ----a-w- h:\windows\system32\html.iec
2011-05-08 17:41 . 2011-05-08 17:41 74752 ----a-w- h:\windows\system32\iesetup.dll
2011-05-08 17:41 . 2011-05-08 17:41 1427456 ----a-w- h:\windows\system32\inetcpl.cpl
2011-05-08 17:41 . 2011-05-08 17:41 23552 ----a-w- h:\windows\system32\licmgr10.dll
2011-05-08 17:41 . 2011-05-08 17:41 152064 ----a-w- h:\windows\system32\wextract.exe
2011-05-08 17:41 . 2011-05-08 17:41 150528 ----a-w- h:\windows\system32\iexpress.exe
2011-05-08 17:41 . 2011-05-08 17:41 420864 ----a-w- h:\windows\system32\vbscript.dll
2011-05-08 17:41 . 2011-05-08 17:41 142848 ----a-w- h:\windows\system32\ieUnatt.exe
2011-05-08 17:41 . 2011-05-08 17:41 11776 ----a-w- h:\windows\system32\mshta.exe
2011-05-08 17:41 . 2011-05-08 17:41 101888 ----a-w- h:\windows\system32\admparse.dll
2011-05-08 17:41 . 2011-05-08 17:41 35840 ----a-w- h:\windows\system32\imgutil.dll
2011-05-08 17:40 . 2011-05-08 17:40 801792 ----a-w- h:\windows\system32\FntCache.dll
2011-05-08 17:40 . 2011-05-08 17:40 739840 ----a-w- h:\windows\system32\d2d1.dll
2011-05-08 17:40 . 2011-05-08 17:40 283648 ----a-w- h:\windows\system32\XpsGdiConverter.dll
2011-05-08 17:40 . 2011-05-08 17:40 218624 ----a-w- h:\windows\system32\d3d10_1core.dll
2011-05-08 17:40 . 2011-05-08 17:40 1619456 ----a-w- h:\windows\system32\WMVDECOD.DLL
2011-05-08 17:40 . 2011-05-08 17:40 161792 ----a-w- h:\windows\system32\d3d10_1.dll
2011-05-08 17:40 . 2011-05-08 17:40 1495040 ----a-w- h:\windows\system32\ExplorerFrame.dll
2011-05-08 17:40 . 2011-05-08 17:40 135168 ----a-w- h:\windows\system32\XpsRasterService.dll
2011-05-08 17:40 . 2011-05-08 17:40 1170944 ----a-w- h:\windows\system32\d3d10warp.dll
2011-05-08 17:40 . 2011-05-08 17:40 1074176 ----a-w- h:\windows\system32\DWrite.dll
2011-05-08 17:40 . 2011-05-08 17:40 728448 ----a-w- h:\windows\system32\drivers\dxgkrnl.sys
2011-05-08 17:40 . 2011-05-08 17:40 442880 ----a-w- h:\windows\system32\XpsPrint.dll
2011-05-08 17:40 . 2011-05-08 17:40 3181568 ----a-w- h:\windows\system32\mf.dll
2011-05-08 17:40 . 2011-05-08 17:40 219008 ----a-w- h:\windows\system32\drivers\dxgmms1.sys
2011-05-08 17:40 . 2011-05-08 17:40 196608 ----a-w- h:\windows\system32\mfreadwrite.dll
2011-05-08 17:40 . 2011-05-08 17:40 107520 ----a-w- h:\windows\system32\cdd.dll
2011-04-09 06:13 . 2011-05-15 10:04 3957632 ----a-w- h:\windows\system32\ntkrnlpa.exe
2011-04-09 06:13 . 2011-05-15 10:04 3901824 ----a-w- h:\windows\system32\ntoskrnl.exe
2011-04-09 05:56 . 2011-05-27 14:57 123904 ----a-w- h:\windows\system32\poqexec.exe
.
.
(((((((((((((((((((((((((((((((((( Spouštěcí body v registru )))))))))))))))))))))))))))))))))))))))))))))
.
.
*Poznámka* prázdné záznamy a legitimní výchozí údaje nejsou zobrazeny.
REGEDIT4
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Sidebar"="h:\program files\Windows Sidebar\sidebar.exe" [2009-07-14 1173504]
"AutoStartNPSAgent"="h:\program files\Samsung\Samsung New PC Studio\NPSAgent.exe" [2010-07-04 95576]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"HDAudDeck"="h:\program files\VIA\VIAudioi\VDeck\VDeck.exe" [2009-10-28 1701888]
"SunJavaUpdateSched"="h:\program files\Common Files\Java\Java Update\jusched.exe" [2010-10-29 249064]
"COMODO Internet Security"="h:\program files\COMODO\COMODO Internet Security\cfp.exe" [2011-05-27 2552648]
"Monitor"="h:\windows\PixArt\PAC207\Monitor.exe" [2006-11-03 319488]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorAdmin"= 5 (0x5)
"ConsentPromptBehaviorUser"= 3 (0x3)
"EnableUIADesktopToggle"= 0 (0x0)
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\windows]
"AppInit_DLLs"=h:\windows\System32\guard32.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\drivers32]
"aux"=wdmaud.drv
.
R3 PAC207;SoC PC-Camera;h:\windows\system32\DRIVERS\PFC027.SYS [2006-12-05 507136]
R3 WatAdminSvc;Služba Technologie aktivace Windows;h:\windows\system32\Wat\WatAdminSvc.exe [2010-07-28 1343400]
S0 hotcore3;hc3ServiceName;h:\windows\system32\DRIVERS\hotcore3.sys [2010-04-01 40560]
S0 sptd;sptd;h:\windows\System32\Drivers\sptd.sys [2010-07-31 691696]
S1 cmderd;COMODO Internet Security Eradication Driver;h:\windows\system32\DRIVERS\cmderd.sys [2011-05-27 19088]
S1 cmdGuard;COMODO Internet Security Sandbox Driver;h:\windows\system32\DRIVERS\cmdguard.sys [2011-05-27 238960]
S1 cmdHlp;COMODO Internet Security Helper Driver;h:\windows\system32\DRIVERS\cmdhlp.sys [2011-05-27 37592]
S2 FsUsbExService;FsUsbExService;h:\windows\system32\FsUsbExService.Exe [2010-07-04 238952]
S2 TeamViewer5;TeamViewer 5;h:\program files\TeamViewer\Version5\TeamViewer_Service.exe [2010-10-19 2011944]
S3 FsUsbExDisk;FsUsbExDisk;h:\windows\system32\FsUsbExDisk.SYS [2010-06-14 36608]
S3 RTL8167;Realtek 8167 NT Driver;h:\windows\system32\DRIVERS\Rt86win7.sys [2009-05-22 167936]
S3 teamviewervpn;TeamViewer VPN Adapter;h:\windows\system32\DRIVERS\teamviewervpn.sys [2010-10-15 25088]
S3 VIAHdAudAddService;VIA High Definition Audio Driver Service;h:\windows\system32\drivers\viahduaa.sys [2009-10-21 1102848]
.
.
Obsah adresáře 'Naplánované úlohy'
.
2011-06-21 h:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-445116536-2603339772-2000099963-1001Core.job
- h:\users\Rudolf\AppData\Local\Google\Update\GoogleUpdate.exe [2010-10-11 16:25]
.
2011-06-27 h:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-445116536-2603339772-2000099963-1001UA.job
- h:\users\Rudolf\AppData\Local\Google\Update\GoogleUpdate.exe [2010-10-11 16:25]
.
.
------- Doplňkový sken -------
.
uStart Page = hxxp://www.google.cz/
TCP: DhcpNameServer = 192.168.1.20
.
- - - - NEPLATNÉ POLOŽKY ODSTRANĚNÉ Z REGISTRU - - - -
.
URLSearchHooks-{88c7f2aa-f93f-432c-8f0e-b7d85967a527} - (no file)
WebBrowser-{D4027C7F-154A-4066-A1AD-4243D8127440} - (no file)
AddRemove-01_Simmental - h:\program files\Samsung\USB Drivers\01_Simmental\Uninstall.exe
AddRemove-02_Siberian - h:\program files\Samsung\USB Drivers\02_Siberian\Uninstall.exe
AddRemove-03_Swallowtail - h:\program files\Samsung\USB Drivers\03_Swallowtail\Uninstall.exe
AddRemove-04_semseyite - h:\program files\Samsung\USB Drivers\04_semseyite\Uninstall.exe
AddRemove-05_Sloan - h:\program files\Samsung\USB Drivers\05_Sloan\Uninstall.exe
AddRemove-06_Spencer - h:\program files\Samsung\USB Drivers\06_Spencer\Uninstall.exe
AddRemove-07_Schorl - h:\program files\Samsung\USB Drivers\07_Schorl\Uninstall.exe
AddRemove-08_EMPChipset - h:\program files\Samsung\USB Drivers\08_EMPChipset\Uninstall.exe
AddRemove-09_Hsp - h:\program files\Samsung\USB Drivers\09_Hsp\Uninstall.exe
AddRemove-11_HSP_Plus_Default - h:\program files\Samsung\USB Drivers\11_HSP_Plus_Default\Uninstall.exe
AddRemove-16_Shrewsbury - h:\program files\Samsung\USB Drivers\16_Shrewsbury\Uninstall.exe
AddRemove-17_EMP_Chipset2 - h:\program files\Samsung\USB Drivers\17_EMP_Chipset2\Uninstall.exe
AddRemove-18_Zinia_Serial_Driver - h:\program files\Samsung\USB Drivers\18_Zinia_Serial_Driver\Uninstall.exe
AddRemove-19_VIA_driver - h:\program files\Samsung\USB Drivers\19_VIA_driver\Uninstall.exe
AddRemove-20_NXP_Driver - h:\program files\Samsung\USB Drivers\20_NXP_Driver\Uninstall.exe
AddRemove-21_Searsburg - h:\program files\Samsung\USB Drivers\21_Searsburg\Uninstall.exe
AddRemove-22_WiBro_WiMAX - h:\program files\Samsung\USB Drivers\22_WiBro_WiMAX\Uninstall.exe
.
.
.
--------------------- ZAMKNUTÉ KLÍČE V REGISTRU ---------------------
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0000\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\PCW\Security]
@Denied: (Full) (Everyone)
.
--------------------- Knihovny navázané na běžící procesy ---------------------
.
- - - - - - - > 'winlogon.exe'(556)
h:\windows\system32\guard32.dll
.
- - - - - - - > 'lsass.exe'(588)
h:\windows\system32\guard32.dll
.
- - - - - - - > 'Explorer.exe'(3252)
h:\windows\system32\guard32.dll
.
Celkový čas: 2011-06-27 20:11:06
ComboFix-quarantined-files.txt 2011-06-27 18:11
.
Před spuštěním: Volných bajtů: 14 304 505 856
Po spuštění: Volných bajtů: 14 214 782 976
.
- - End Of File - - B0BF7664B8091927AA58B2223619F304

[Rudy]

Po virové stránce v pořádku. Máte spuštěno ComodoInternetSecurity a WindowsDefender. Win defender vypněte, nebo odinstalujte, může docházet k sw konfliktu. Dále doporučuji PC vyčistit od balastu CCleanerem: http://www.viry.cz/forum/viewtopic.php?f=46&t=7478 .

[morar]

Díky, uvidím co to bude dělat dál.

[Rudy]

Nemáte zač, příp. se ozvěte.