VIRY.CZ

Ahoj.
Bootovani PC je celkem rychlé ale když zadám heslo tak třeba 40 sek. je černá obrazovka a pak se pomalu načítjí programy a naskkují ikony.
Přikládám log z RSIT - HJT:
Logfile of random's system information tool 1.08 (written by random/random)
Run by Gygabyte at 2010-10-07 21:37:02
Microsoft Windows 7 Ultimate
System drive C: has 13 GB (3%) free of 477 GB
Total RAM: 2046 MB (51% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 21:37:07, on 7.10.2010
Platform: Windows 7 (WinNT 6.00.3504)
MSIE: Internet Explorer v8.00 (8.00.7600.16385)
Boot mode: Normal

Running processes:
C:\Windows\system32\taskhost.exe
C:\Windows\system32\taskeng.exe
C:\Program Files\Hard Disk Sentinel\HDSentinel.exe
C:\Program Files\IObit\Advanced SystemCare 3\AWC.exe
C:\Program Files\Common Files\AVerMedia\AVerQuick\AVerHIDReceiver.exe
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Windows\PixArt\PAC207\Monitor.exe
C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe
C:\Program Files\Avira\AntiVir Desktop\avgnt.exe
C:\Program Files\Pinnacle\Shared Files\Programs\USBTip\USBTip.exe
C:\Program Files\Acronis\TrueImageHome\TrueImageMonitor.exe
C:\Program Files\Acronis\TrueImageHome\TimounterMonitor.exe
C:\Program Files\Common Files\Acronis\Schedule2\schedhlp.exe
C:\Program Files\Common Files\Java\Java Update\jusched.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Windows\WindowsMobile\wmdc.exe
C:\Program Files\DAEMON Tools Lite\DTLite.exe
C:\Program Files\Skype\Phone\Skype.exe
C:\Program Files\Windows Sidebar\sidebar.exe
C:\Program Files\ICQ7.1\ICQ.exe
C:\Program Files\OpenOffice.org 3\program\soffice.exe
C:\Program Files\OpenOffice.org 3\program\soffice.bin
C:\Program Files\Skype\Plugin Manager\skypePM.exe
C:\Windows\system32\wuauclt.exe
C:\Windows\explorer.exe
C:\Windows\System32\mobsync.exe
C:\Program Files\uTorrent\uTorrent.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\Mozilla Firefox\plugin-container.exe
C:\Windows\explorer.exe
F:\RSIT.exe
C:\Program Files\trend micro\Gygabyte.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page =
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
O2 - BHO: QuickStores-Toolbar - {10EDB994-47F8-43F7-AE96-F2EA63E9F90F} - mscoree.dll (file missing)
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: SkypeIEPluginBHO - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O3 - Toolbar: DAEMON Tools Toolbar - {32099AAC-C132-4136-9E9A-4E364A424E17} - C:\Program Files\DAEMON Tools Toolbar\DTToolbar.dll
O3 - Toolbar: QuickStores-Toolbar - {10EDB994-47F8-43F7-AE96-F2EA63E9F90F} - mscoree.dll (file missing)
O4 - HKLM\..\Run: [PAC207_Monitor] C:\Windows\PixArt\PAC207\Monitor.exe
O4 - HKLM\..\Run: [RtHDVCpl] C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe -s
O4 - HKLM\..\Run: [avgnt] "C:\Program Files\Avira\AntiVir Desktop\avgnt.exe" /min
O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKCU\..\Run: [DAEMON Tools Lite] "C:\Program Files\DAEMON Tools Lite\DTLite.exe" -autorun
O4 - HKCU\..\Run: [Skype] "C:\Program Files\Skype\Phone\Skype.exe" /nosplash /minimized
O4 - HKCU\..\Run: [uTorrent] "C:\Program Files\uTorrent\uTorrent.exe"
O4 - HKCU\..\Run: [EPSON Stylus DX4000 Series] C:\Windows\system32\spool\DRIVERS\W32X86\3\E_FATIBEE.EXE /FU "C:\Windows\TEMP\E_SEDF.tmp" /EF "HKCU"
O4 - HKCU\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun
O4 - HKCU\..\Run: [ICQ] "C:\Program Files\ICQ7.1\ICQ.exe" silent loginmode=4
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'NETWORK SERVICE')
O4 - Startup: OpenOffice.org 3.0.lnk = C:\Program Files\OpenOffice.org 3\program\quickstart.exe
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Office Excel - res://C:\PROGRA~1\MICROS~4\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: @C:\Windows\WindowsMobile\INetRepl.dll,-222 - {2EAF5BB1-070F-11D3-9307-00C04FAE2D4F} - C:\Windows\WindowsMobile\INetRepl.dll
O9 - Extra button: (no name) - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\Windows\WindowsMobile\INetRepl.dll
O9 - Extra 'Tools' menuitem: @C:\Windows\WindowsMobile\INetRepl.dll,-223 - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\Windows\WindowsMobile\INetRepl.dll
O9 - Extra button: ICQ7.1 - {71BFC818-0CED-42D6-9C87-5142918957EE} - C:\Program Files\ICQ7.1\ICQ.exe
O9 - Extra 'Tools' menuitem: ICQ7.1 - {71BFC818-0CED-42D6-9C87-5142918957EE} - C:\Program Files\ICQ7.1\ICQ.exe
O9 - Extra button: Skype add-on for Internet Explorer - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O9 - Extra 'Tools' menuitem: Skype add-on for Internet Explorer - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O9 - Extra button: Zdroje informací - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~4\OFFICE11\REFIEBAR.DLL
O18 - Protocol: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O23 - Service: Acronis OS Selector Reinstall Service (AcronisOSSReinstallSvc) - Unknown owner - C:\Program Files\Common Files\Acronis\Acronis Disk Director\oss_reinstall_svc.exe (file missing)
O23 - Service: Acronis Scheduler2 Service (AcrSch2Svc) - Acronis - C:\Program Files\Common Files\Acronis\Schedule2\schedul2.exe
O23 - Service: AMD External Events Utility - AMD - C:\Windows\system32\atiesrxx.exe
O23 - Service: Avira AntiVir Scheduler (AntiVirSchedulerService) - Avira GmbH - C:\Program Files\Avira\AntiVir Desktop\sched.exe
O23 - Service: Avira AntiVir Guard (AntiVirService) - Avira GmbH - C:\Program Files\Avira\AntiVir Desktop\avguard.exe
O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
O23 - Service: AVerRemote - AVerMedia - C:\Program Files\Common Files\AVerMedia\Service\AVerRemote.exe
O23 - Service: AVerScheduleService - Unknown owner - C:\Program Files\Common Files\AVerMedia\Service\AVerScheduleService.exe
O23 - Service: Bonjour Service - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: EPSON V3 Service4(01) (EPSON_PM_RPCV4_01) - SEIKO EPSON CORPORATION - C:\ProgramData\EPSON\EPW!3 SSRP\E_S30RP1.EXE
O23 - Service: Služba Google Update (gupdate1caee7f6a1aa600) (gupdate1caee7f6a1aa600) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: iPod Service - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: @C:\Program Files\Nero\Update\NASvc.exe,-200 (NAUpdate) - Nero AG - C:\Program Files\Nero\Update\NASvc.exe
O23 - Service: NMSAccessU - Unknown owner - C:\Program Files\CDBurnerXP\NMSAccessU.exe
O23 - Service: ServiceLayer - Nokia - C:\Program Files\PC Connectivity Solution\ServiceLayer.exe
O23 - Service: Aktivátor Správce výběru OS Acronis (Správce výběru OS) - Unknown owner - C:\Program Files\Acronis\DiskDirector\OSS\reinstall_svc.exe
O23 - Service: Acronis Try And Decide Service (TryAndDecideService) - Unknown owner - C:\Program Files\Common Files\Acronis\Fomatik\TrueImageTryStartService.exe

--
End of file - 8664 bytes

======Scheduled tasks folder======

C:\Windows\tasks\AWC AutoSweep.job
C:\Windows\tasks\AWC Startup.job
C:\Windows\tasks\AWC Update.job
C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
C:\Windows\tasks\GoogleUpdateTaskMachineUA.job
C:\Windows\tasks\SmartDefrag.job

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{10EDB994-47F8-43F7-AE96-F2EA63E9F90F}]
QuickStores-Toolbar - C:\Windows\system32\mscoree.dll [2009-11-25 297808]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
Adobe PDF Link Helper - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2010-06-19 75200]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}]
Skype add-on for Internet Explorer - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll [2010-02-08 804136]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre6\bin\jp2ssv.dll [2010-08-04 41760]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{32099AAC-C132-4136-9E9A-4E364A424E17} - DAEMON Tools Toolbar - C:\Program Files\DAEMON Tools Toolbar\DTToolbar.dll [2010-03-25 968000]
{10EDB994-47F8-43F7-AE96-F2EA63E9F90F} - QuickStores-Toolbar - C:\Windows\system32\mscoree.dll [2009-11-25 297808]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"PAC207_Monitor"=C:\Windows\PixArt\PAC207\Monitor.exe [2007-12-10 323584]
"RtHDVCpl"=C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe [2010-03-26 8546848]
"avgnt"=C:\Program Files\Avira\AntiVir Desktop\avgnt.exe [2010-03-02 282792]
"Adobe ARM"=C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2010-06-09 976832]
"iTunesHelper"=C:\Program Files\iTunes\iTunesHelper.exe [2010-09-24 421160]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"DAEMON Tools Lite"=C:\Program Files\DAEMON Tools Lite\DTLite.exe [2009-10-30 369200]
"Skype"=C:\Program Files\Skype\Phone\Skype.exe [2010-09-02 13351304]
"uTorrent"=C:\Program Files\uTorrent\uTorrent.exe [2010-09-25 328056]
"EPSON Stylus DX4000 Series"=C:\Windows\system32\spool\DRIVERS\W32X86\3\E_FATIBEE.EXE [2006-09-21 139264]
"Sidebar"=C:\Program Files\Windows Sidebar\sidebar.exe [2009-07-14 1173504]
"ICQ"=C:\Program Files\ICQ7.1\ICQ.exe [2010-08-22 133432]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Acronis Scheduler2 Service]
C:\Program Files\Common Files\Acronis\Schedule2\schedhlp.exe [2007-10-23 140568]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\AcronisTimounterMonitor]
C:\Program Files\Acronis\TrueImageHome\TimounterMonitor.exe [2007-10-23 906648]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe ARM]
C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2010-06-09 976832]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe Reader Speed Launcher]
C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe [2010-06-20 35760]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NBAgent]
C:\Program Files\Nero\Nero 10\Nero BackItUp\NBAgent.exe [2010-04-03 1234216]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\PC Suite Tray]
C:\Program Files\Nokia\Nokia PC Suite 7\PCSuite.exe [2009-11-11 1451520]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\QuickTime Task]
C:\Program Files\QuickTime\QTTask.exe [2010-09-08 421888]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SunJavaUpdateSched]
C:\Program Files\Common Files\Java\Java Update\jusched.exe [2010-05-14 248552]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\TrueImageMonitor.exe]
C:\Program Files\Acronis\TrueImageHome\TrueImageMonitor.exe [2007-10-23 2615624]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\USBToolTip]
C:\PROGRA~1\Pinnacle\SHARED~1\Programs\USBTip\USBTip.exe [2007-02-20 199752]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Windows Mobile Device Center]
C:\Windows\WindowsMobile\wmdc.exe [2007-05-31 648072]

C:\Users\Gygabyte\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
OpenOffice.org 3.0.lnk - C:\Program Files\OpenOffice.org 3\program\quickstart.exe

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED}

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa]
"authentication packages"=msv1_0
relog_ap

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=credssp.dll

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorAdmin"=5
"ConsentPromptBehaviorUser"=3
"EnableUIADesktopToggle"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1
"EnableLinkedConnections"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=145

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*

======List of files/folders created in the last 1 months======

2010-10-07 21:24:17 ----D---- C:\rsit
2010-10-07 21:24:17 ----D---- C:\Program Files\trend micro
2010-10-02 20:05:22 ----D---- C:\Program Files\Zrychleni Pocitace
2010-10-02 13:25:23 ----D---- C:\Windows\WindowsMobile
2010-09-28 21:49:00 ----D---- C:\Program Files\FlatOut2
2010-09-28 19:19:59 ----D---- C:\Users\Gygabyte\AppData\Roaming\Hamachi
2010-09-28 19:19:10 ----A---- C:\Windows\system32\drivers\hamachi.sys
2010-09-27 22:29:52 ----D---- C:\Program Files\iTunes
2010-09-27 22:29:52 ----D---- C:\Program Files\iPod
2010-09-27 22:27:03 ----D---- C:\Program Files\QuickTime
2010-09-27 22:25:00 ----D---- C:\Program Files\Bonjour
2010-09-26 20:16:11 ----D---- C:\Program Files\Opera
2010-09-24 15:39:33 ----D---- C:\Windows\system32\xlive
2010-09-24 15:32:32 ----D---- C:\Program Files\Empire Interactive
2010-09-24 14:17:52 ----D---- C:\Program Files\PC Connectivity Solution
2010-09-24 14:03:32 ----A---- C:\Windows\system32\drivers\ser2pl.sys
2010-09-15 13:38:41 ----A---- C:\Windows\system32\iertutil.dll
2010-09-15 13:38:16 ----A---- C:\Windows\system32\spoolsv.exe
2010-09-11 19:19:02 ----D---- C:\Program Files\Hard Disk Sentinel
2010-09-10 12:52:31 ----D---- C:\ProgramData\Omnius for SE
2010-09-10 12:44:56 ----D---- C:\Program Files\Omnius for SE
2010-09-09 21:07:27 ----D---- C:\Users\Gygabyte\AppData\Roaming\ProfiCAD
2010-09-09 21:07:27 ----D---- C:\Program Files\ProfiCAD

======List of files/folders modified in the last 1 months======

2010-10-07 21:36:53 ----D---- C:\Users\Gygabyte\AppData\Roaming\uTorrent
2010-10-07 21:35:06 ----D---- C:\Windows\Prefetch
2010-10-07 21:33:26 ----D---- C:\Users\Gygabyte\AppData\Roaming\Skype
2010-10-07 21:24:17 ----RD---- C:\Program Files
2010-10-07 16:51:47 ----D---- C:\Windows\system32\config
2010-10-07 16:48:36 ----SHD---- C:\System Volume Information
2010-10-07 16:39:01 ----D---- C:\Windows\Temp
2010-10-07 16:04:06 ----D---- C:\Users\Gygabyte\AppData\Roaming\skypePM
2010-10-07 15:24:04 ----D---- C:\Windows\System32
2010-10-07 15:24:04 ----D---- C:\Windows\inf
2010-10-07 15:24:04 ----A---- C:\Windows\system32\PerfStringBackup.INI
2010-10-07 15:23:20 ----D---- C:\Windows\ModemLogs
2010-10-07 14:34:18 ----D---- C:\Users\Gygabyte\AppData\Roaming\ICQ
2010-10-02 21:39:46 ----D---- C:\Users\Gygabyte\AppData\Roaming\Download Manager
2010-10-02 13:29:22 ----SD---- C:\Users\Gygabyte\AppData\Roaming\Microsoft
2010-10-02 13:27:55 ----SHD---- C:\Windows\Installer
2010-10-02 13:27:36 ----D---- C:\Windows\system32\LogFiles
2010-10-02 13:27:25 ----D---- C:\Windows\system32\drivers
2010-10-02 13:27:13 ----D---- C:\Windows\system32\drivers\UMDF
2010-10-02 13:27:12 ----D---- C:\Windows\system32\catroot
2010-10-02 13:27:11 ----D---- C:\Windows\system32\DriverStore
2010-10-02 13:25:23 ----D---- C:\Windows
2010-10-02 13:25:11 ----D---- C:\Windows\system32\catroot2
2010-09-27 22:29:52 ----D---- C:\Program Files\Common Files\Apple
2010-09-25 12:29:16 ----D---- C:\Program Files\Common Files\Acronis
2010-09-25 12:29:16 ----D---- C:\Program Files\Acronis
2010-09-25 12:28:28 ----D---- C:\Windows\winsxs
2010-09-25 09:34:50 ----D---- C:\Program Files\uTorrent
2010-09-24 15:39:08 ----RSD---- C:\Windows\assembly
2010-09-24 14:18:01 ----D---- C:\ProgramData\Installations
2010-09-24 14:17:57 ----DC---- C:\Windows\system32\DRVSTORE
2010-09-24 14:17:15 ----D---- C:\Program Files\Nokia
2010-09-24 14:05:40 ----D---- C:\Users\Gygabyte\AppData\Roaming\PC Suite
2010-09-24 07:20:29 ----D---- C:\Windows\system32\Tasks
2010-09-19 09:44:41 ----D---- C:\Program Files\Google
2010-09-19 09:40:16 ----HD---- C:\ProgramData
2010-09-18 13:30:02 ----D---- C:\Program Files\Mozilla Firefox
2010-09-16 06:33:50 ----D---- C:\Windows\system32\wdi
2010-09-15 13:45:14 ----A---- C:\Windows\win.ini
2010-09-15 13:39:52 ----D---- C:\Windows\debug
2010-09-15 13:39:48 ----A---- C:\Windows\system32\MRT.exe
2010-09-13 14:23:49 ----D---- C:\Users\Gygabyte\AppData\Roaming\Apple Computer
2010-09-12 00:11:18 ----D---- C:\XP
2010-09-11 23:52:32 ----D---- C:\Stažené soubory
2010-09-11 23:44:39 ----D---- C:\FTP
2010-09-11 23:16:35 ----D---- C:\150GB
2010-09-11 23:09:52 ----D---- C:\Gygabyte
2010-09-09 21:14:16 ----D---- C:\Uploads
2010-09-08 14:03:34 ----D---- C:\Windows\Tasks
2010-09-08 14:03:22 ----D---- C:\Users\Gygabyte\AppData\Roaming\IObit
2010-09-08 14:03:22 ----D---- C:\Program Files\IObit

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 rdyboost;ReadyBoost; C:\Windows\System32\drivers\rdyboost.sys [2009-07-14 173648]
R0 snapman;Acronis Snapshots Manager; C:\Windows\system32\DRIVERS\snapman.sys [2010-09-25 170080]
R0 sptd;sptd; C:\Windows\System32\Drivers\sptd.sys [2010-05-08 691696]
R0 tdrpman;Acronis Try&Decide and Restore Points filter; C:\Windows\system32\DRIVERS\tdrpman.sys [2010-07-22 368736]
R0 timounter;Acronis True Image Backup Archive Explorer; C:\Windows\system32\DRIVERS\timntr.sys [2010-07-22 441760]
R1 avipbb;avipbb; C:\Windows\system32\DRIVERS\avipbb.sys [2010-03-01 124784]
R1 CSC;@%systemroot%\system32\cscsvc.dll,-202; C:\Windows\system32\drivers\csc.sys [2009-07-14 387584]
R1 ssmdrv;ssmdrv; C:\Windows\system32\DRIVERS\ssmdrv.sys [2009-05-11 28520]
R2 avgntflt;avgntflt; C:\Windows\system32\DRIVERS\avgntflt.sys [2010-02-16 60936]
R2 cpuz134;cpuz134; \??\C:\Windows\system32\drivers\cpuz134_x32.sys [2010-07-09 20328]
R2 Parvdm;Parvdm; C:\Windows\system32\DRIVERS\parvdm.sys [2009-07-14 8704]
R2 tifsfilter;Acronis True Image FS Filter; C:\Windows\system32\DRIVERS\tifsfilt.sys [2010-07-22 44384]
R3 atikmdag;atikmdag; C:\Windows\system32\DRIVERS\atikmdag.sys [2009-08-18 4994560]
R3 GEARAspiWDM;GEAR ASPI Filter Driver; C:\Windows\system32\DRIVERS\GEARAspiWDM.sys [2009-05-18 26600]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\Windows\system32\drivers\RTKVHDA.sys [2010-03-26 3048096]
R3 MarvinBus;Pinnacle Marvin Bus; C:\Windows\system32\DRIVERS\MarvinBus.sys [2005-09-23 171520]
R3 PAC207;e-Messenger 112; C:\Windows\system32\DRIVERS\PFC027.SYS [2009-06-25 618112]
R3 RFCOMM;Zařízení Bluetooth (RFCOMM protokol TDI); C:\Windows\system32\DRIVERS\rfcomm.sys [2009-07-14 129536]
R3 RTL8167;Realtek 8167 NT Driver; C:\Windows\system32\DRIVERS\Rt86win7.sys [2010-03-22 278560]
R3 seehcri;Sony Ericsson seehcri Device Driver; C:\Windows\system32\DRIVERS\seehcri.sys [2010-07-02 27632]
R3 usbscan;Ovladač skeneru USB; C:\Windows\system32\DRIVERS\usbscan.sys [2009-07-14 35840]
S3 acsrjqb0;acsrjqb0; C:\Windows\system32\drivers\acsrjqb0.sys []
S3 aic78xx;aic78xx; C:\Windows\system32\DRIVERS\djsvs.sys [2009-07-14 70720]
S3 amdagp;AMD AGP Bus Filter Driver; C:\Windows\system32\DRIVERS\amdagp.sys [2009-07-14 53312]
S3 AVerHybrid;AVerMedia Hybrid Tuner (NTSC/PAL/SECAM/DVB-T/FM); C:\Windows\system32\drivers\averhbtv.sys [2009-08-20 306688]
S3 b57nd60x;Broadcom NetXtreme Gigabit Ethernet - NDIS 6.0; C:\Windows\system32\DRIVERS\b57nd60x.sys [2009-07-14 229888]
S3 BthEnum;Služba Bluetooth Enumerator; C:\Windows\system32\DRIVERS\BthEnum.sys [2009-07-14 34816]
S3 BthPan;Zařízení Bluetooth (síť PAN); C:\Windows\system32\DRIVERS\bthpan.sys [2009-07-14 93696]
S3 BTHPORT;Ovladač portu Bluetooth; C:\Windows\System32\Drivers\BTHport.sys [2009-07-14 392704]
S3 BTHUSB;Ovladač rozhraní USB radiostanice Bluetooth; C:\Windows\System32\Drivers\BTHUSB.sys [2009-07-14 58880]
S3 ENTECH;ENTECH; \??\C:\Windows\system32\DRIVERS\ENTECH.sys [2004-10-25 21664]
S3 gdrv;gdrv; \??\C:\Windows\gdrv.sys [2010-07-16 16608]
S3 ggflt;SEMC USB Flash Driver Filter; C:\Windows\system32\DRIVERS\ggflt.sys [2010-07-02 13224]
S3 ggsemc;SEMC USB Flash Driver; C:\Windows\system32\DRIVERS\ggsemc.sys [2010-07-02 25512]
S3 hamachi;Hamachi Network Interface; C:\Windows\system32\DRIVERS\hamachi.sys [2010-09-28 25280]
S3 pccsmcfd;PCCS Mode Change Filter Driver; C:\Windows\system32\DRIVERS\pccsmcfd.sys [2008-08-26 18816]
S3 pciide;pciide; C:\Windows\system32\DRIVERS\pciide.sys [2009-07-14 12368]
S3 RDPDR;Terminal Server Device Redirector Driver; C:\Windows\System32\drivers\rdpdr.sys [2009-07-14 133120]
S3 s3cap;s3cap; C:\Windows\system32\DRIVERS\vms3cap.sys [2009-07-14 5632]
S3 Ser2pl;Prolific Serial port driver; C:\Windows\system32\DRIVERS\ser2pl.sys [2003-07-16 43264]
S3 sisagp;SIS AGP Bus Filter; C:\Windows\system32\DRIVERS\sisagp.sys [2009-07-14 52304]
S3 StarOpen;StarOpen; C:\Windows\system32\drivers\StarOpen.sys [2009-11-12 7168]
S3 storvsc;storvsc; C:\Windows\system32\DRIVERS\storvsc.sys [2009-07-14 28224]
S3 upperdev;upperdev; C:\Windows\system32\DRIVERS\usbser_lowerflt.sys []
S3 usb_rndisx;Adaptér USB RNDIS; C:\Windows\system32\DRIVERS\usb8023x.sys [2009-07-14 15872]
S3 USBAAPL;Apple Mobile USB Driver; C:\Windows\System32\Drivers\usbaapl.sys [2010-04-19 41984]
S3 usbser;USB Modem Driver; C:\Windows\system32\drivers\usbser.sys [2009-07-14 27648]
S3 UsbserFilt;UsbserFilt; C:\Windows\system32\DRIVERS\usbser_lowerfltj.sys []
S3 viaagp;VIA AGP Bus Filter; C:\Windows\system32\DRIVERS\viaagp.sys [2009-07-14 53328]
S3 ViaC7;VIA C7 Processor Driver; C:\Windows\system32\DRIVERS\viac7.sys [2009-07-14 52736]
S3 vmbus;@%SystemRoot%\system32\vmbusres.dll,-1000; C:\Windows\system32\DRIVERS\vmbus.sys [2009-07-14 175824]
S3 VMBusHID;VMBusHID; C:\Windows\system32\DRIVERS\VMBusHID.sys [2009-07-14 17920]
S3 WinUsb;WinUsb; C:\Windows\system32\DRIVERS\WinUsb.sys [2009-07-14 34944]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 AcrSch2Svc;Acronis Scheduler2 Service; C:\Program Files\Common Files\Acronis\Schedule2\schedul2.exe [2007-10-23 427288]
R2 AMD External Events Utility;AMD External Events Utility; C:\Windows\system32\atiesrxx.exe [2009-08-18 176128]
R2 AntiVirService;Avira AntiVir Guard; C:\Program Files\Avira\AntiVir Desktop\avguard.exe [2010-05-08 267432]
R2 AntiVirSchedulerService;Avira AntiVir Scheduler; C:\Program Files\Avira\AntiVir Desktop\sched.exe [2010-02-24 135336]
R2 Apple Mobile Device;Apple Mobile Device; C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe [2010-08-13 144672]
R2 AVerRemote;AVerRemote; C:\Program Files\Common Files\AVerMedia\Service\AVerRemote.exe [2009-09-23 348160]
R2 Bonjour Service;Bonjour Service; C:\Program Files\Bonjour\mDNSResponder.exe [2010-07-27 345376]
R2 CscService;@%systemroot%\system32\cscsvc.dll,-200; C:\Windows\System32\svchost.exe [2009-07-14 20992]
R2 EPSON_PM_RPCV4_01;EPSON V3 Service4(01); C:\ProgramData\EPSON\EPW!3 SSRP\E_S30RP1.EXE [2006-04-18 102400]
R2 NAUpdate;@C:\Program Files\Nero\Update\NASvc.exe,-200; C:\Program Files\Nero\Update\NASvc.exe [2010-03-25 490280]
R2 NMSAccessU;NMSAccessU; C:\Program Files\CDBurnerXP\NMSAccessU.exe [2009-09-06 71096]
R2 RapiMgr;@%windir%\WindowsMobile\rapimgr.dll,-104; C:\Windows\system32\svchost.exe [2009-07-14 20992]
R2 Správce výběru OS;Aktivátor Správce výběru OS Acronis; C:\Program Files\Acronis\DiskDirector\OSS\reinstall_svc.exe [2010-07-07 2156952]
R2 TryAndDecideService;Acronis Try And Decide Service; C:\Program Files\Common Files\Acronis\Fomatik\TrueImageTryStartService.exe [2007-10-23 495832]
R2 WcesComm;@%windir%\WindowsMobile\wcescomm.dll,-40079; C:\Windows\system32\svchost.exe [2009-07-14 20992]
R3 iPod Service;iPod Service; C:\Program Files\iPod\bin\iPodService.exe [2010-09-24 820008]
S2 AcronisOSSReinstallSvc;Acronis OS Selector Reinstall Service; C:\Program Files\Common Files\Acronis\Acronis Disk Director\oss_reinstall_svc.exe []
S2 AVerScheduleService;AVerScheduleService; C:\Program Files\Common Files\AVerMedia\Service\AVerScheduleService.exe [2009-10-09 389120]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
S2 gupdate1caee7f6a1aa600;Služba Google Update (gupdate1caee7f6a1aa600); C:\Program Files\Google\Update\GoogleUpdate.exe [2010-05-08 133104]
S3 ose;Office Source Engine; C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2003-07-28 89136]
S3 PeerDistSvc;@%SystemRoot%\system32\peerdistsvc.dll,-9000; C:\Windows\System32\svchost.exe [2009-07-14 20992]
S3 ServiceLayer;ServiceLayer; C:\Program Files\PC Connectivity Solution\ServiceLayer.exe [2010-06-14 615936]
S3 UmRdpService;@%SystemRoot%\system32\umrdp.dll,-1000; C:\Windows\System32\svchost.exe [2009-07-14 20992]
S4 AppMgmt;@appmgmts.dll,-3250; C:\Windows\system32\svchost.exe [2009-07-14 20992]

-----------------EOF-----------------

Nevidím nic nebezpečného. Zkuste PC vyčistit CCleanerem: http://www.viry.cz/forum/viewtopic.php?f=46&t=7478 a pak provedte kompletní sken MBAM: http://www.malwarebytes.org/mbam.php . Dejte log, předem nic nemažte.

Proskenováno.
Malwarebytes' Anti-Malware 1.46
www.malwarebytes.org

Verze databáze: 4773

Windows 6.1.7600
Internet Explorer 8.0.7600.16385

8.10.2010 13:31:34
mbam-log-2010-10-08 (13-31-34).txt

Typ skenu: Úplný sken (C:\|)
Skenované objekty: 423223
Uplynulý čas: 1 hodina(y), 6 minuta(y), 2 sekunda(y)

Infikované procesy v paměti: 0
Infikované moduly v paměti: 0
Infikované klíče registru: 0
Infikované hodnoty registru: 0
Infikované datové položky registru: 0
Infikované složky: 0
Infikované soubory: 5

Infikované procesy v paměti:
(Žádné škodlivé položky nebyly zjištěny)

Infikované moduly v paměti:
(Žádné škodlivé položky nebyly zjištěny)

Infikované klíče registru:
(Žádné škodlivé položky nebyly zjištěny)

Infikované hodnoty registru:
(Žádné škodlivé položky nebyly zjištěny)

Infikované datové položky registru:
(Žádné škodlivé položky nebyly zjištěny)

Infikované složky:
(Žádné škodlivé položky nebyly zjištěny)

Infikované soubory:
C:\Users\Gygabyte\Desktop\8gb\For mobile\setool\setool2lt.exe (Malware.Packer.T) -> No action taken.
C:\Users\Gygabyte\Desktop\FAR+JDF\Plugins\jdflasher\2020_52\qamaker.exe (Trojan.Dropper) -> No action taken.
C:\150GB\Tune\FAR+JDF\Plugins\jdflasher\2020_52\qamaker.exe (Trojan.Dropper) -> No action taken.
C:\150GB\For mobile\setool\setool2lt.exe (Malware.Packer.T) -> No action taken.

Osobně mám pocit, že to, co MBAM nalezl, nebudou viry. Zkustre namátkou některý sopubor otestovat online na www. virustotal.com. Pak dejte log z ComboFix.

Stahnete a ulozte nejlepe na plochu ComboFix: http://download.bleepingcomputer.com/sUBs/ComboFix.exe

pote spustte aplikaci pod uctem s administratorskym opravnenim

hned po startu se zobrazi obrazovka s licencnimi podminkami, pokracujte kliknutim na tlacitko Ano.

v klidu si postavte na kafe (cela akce trva cca. 5-10 minut, nekdy i dele - dle toho, o jak rychly stroj se jedna a kolika soubory se skener bude muset prodirat), behem skenu se nepokousejte spoustet zadne jine aplikace ani nic jineho

behem skenovani nepropadejte panice, vas stroj muze byt restartovan (predevsim pri prvni aplikaci skeneru)

upozorneni: pokud pouzivate antispyware s rezidentnim stitem, prepnete jeho rezidentni stit do Install Mode, pripadne jej po dobu skenu uplne deaktivujte, protoze dochazi pri skenu a vymazu pripadneho malware k nezadoucim kolizim s rezidentem antispyware

A jen bych Vás chtěl poprosit po vyřešení jestli by jste mi poslal odkaz n SPTD. CCleaner mi ho odstranil a nemůžu používat daemonda. Díky

Tak soubory oskenovány.
http://www.virustotal.com/file-scan/rep ... 1286563473
http://www.virustotal.com/file-scan/rep ... 1286563682
LOG combofix:
ComboFix 10-10-07.02 - Gygabyte 08.10.2010 20:57:06.1.2 - x86
Microsoft Windows 7 Ultimate 6.1.7600.0.1250.420.1029.18.2046.1357 [GMT 2:00]
Spuštěný z: c:\users\Gygabyte\Desktop\ComboFix.exe
* Vytvořen nový Bod Obnovení
.

((((((((((((((((((((((((((((((((((((((( Ostatní výmazy )))))))))))))))))))))))))))))))))))))))))))))))))
.

c:\windows\system32\pthreadVC.dll
F:\install.exe

.
((((((((((((((((((((((((( Soubory vytvořené od 2010-09-08 do 2010-10-08 )))))))))))))))))))))))))))))))
.

2010-10-08 18:51 . 2010-10-08 18:51 -------- d-----w- C:\32788R22FWJFW
2010-10-07 19:24 . 2010-10-07 19:37 -------- d-----w- c:\program files\trend micro
2010-10-07 19:24 . 2010-10-07 19:25 -------- d-----w- C:\rsit
2010-10-02 18:05 . 2010-10-02 18:05 -------- d-----w- c:\users\Gygabyte\AppData\Local\Speedchecker
2010-10-02 18:05 . 2010-10-02 18:10 -------- d-----w- c:\program files\Zrychleni Pocitace
2010-10-02 11:25 . 2010-10-02 11:27 -------- d-----w- c:\windows\WindowsMobile
2010-09-28 19:49 . 2010-09-28 19:51 -------- d-----w- c:\program files\FlatOut2
2010-09-28 17:19 . 2010-09-28 17:45 -------- d-----w- c:\users\Gygabyte\AppData\Roaming\Hamachi
2010-09-28 17:19 . 2010-09-28 17:19 25280 ----a-w- c:\windows\system32\drivers\hamachi.sys
2010-09-27 20:29 . 2010-09-27 20:30 -------- d-----w- c:\program files\iTunes
2010-09-27 20:29 . 2010-09-27 20:29 -------- d-----w- c:\program files\iPod
2010-09-27 20:27 . 2010-09-27 20:27 -------- d-----w- c:\program files\QuickTime
2010-09-27 20:25 . 2010-09-27 20:25 -------- d-----w- c:\program files\Bonjour
2010-09-27 20:23 . 2010-09-27 20:23 73000 ----a-w- c:\programdata\Apple Computer\Installer Cache\iTunes 10.0.1.22\SetupAdmin.exe
2010-09-26 18:16 . 2010-09-26 18:16 -------- d-----w- c:\users\Gygabyte\AppData\Local\Opera
2010-09-26 18:16 . 2010-09-26 18:16 -------- d-----w- c:\program files\Opera
2010-09-24 13:54 . 2010-09-24 13:54 -------- d-----w- c:\users\Gygabyte\AppData\Local\FlatOut Ultimate Carnage
2010-09-24 13:39 . 2010-09-24 13:39 -------- d-----w- c:\windows\system32\xlive
2010-09-24 13:32 . 2010-09-24 13:32 -------- d-----w- c:\program files\Empire Interactive
2010-09-24 12:17 . 2010-09-24 12:17 -------- d-----w- c:\program files\PC Connectivity Solution
2010-09-24 12:15 . 2010-09-24 12:14 36538448 ----a-w- c:\programdata\Installations\{7239A06F-235B-43B1-970D-7A411FD95683}\NokiaSoftwareUpdaterSetup_CZ.exe
2010-09-24 12:15 . 2010-09-24 12:15 3351812 ----a-w- c:\programdata\Installations\{7239A06F-235B-43B1-970D-7A411FD95683}\Installer\CommonCustomActions\msxml6Exec.exe
2010-09-24 12:15 . 2010-09-24 12:15 36864 ----a-w- c:\programdata\Installations\{7239A06F-235B-43B1-970D-7A411FD95683}\Installer\CommonCustomActions\Sleep.exe
2010-09-24 12:15 . 2010-09-24 12:15 3203453 ----a-w- c:\programdata\Installations\{7239A06F-235B-43B1-970D-7A411FD95683}\Installer\CommonCustomActions\vcredistExec.exe
2010-09-24 12:03 . 2003-07-16 01:27 43264 ----a-w- c:\windows\system32\drivers\ser2pl.sys
2010-09-18 15:48 . 2010-06-29 22:13 52224 ----a-w- c:\users\Gygabyte\AppData\Roaming\Mozilla\Firefox\Profiles\42anjeup.default\extensions\{7b13ec3e-999a-4b70-b9cb-2617b8323822}\components\FFExternalAlert.dll
2010-09-18 15:48 . 2010-06-29 22:13 101376 ----a-w- c:\users\Gygabyte\AppData\Roaming\Mozilla\Firefox\Profiles\42anjeup.default\extensions\{7b13ec3e-999a-4b70-b9cb-2617b8323822}\components\RadioWMPCore.dll
2010-09-15 11:38 . 2010-08-21 05:32 316928 ----a-w- c:\windows\system32\spoolsv.exe
2010-09-11 17:19 . 2010-10-04 14:12 -------- d-----w- c:\program files\Hard Disk Sentinel
2010-09-10 10:52 . 2010-09-10 11:06 -------- d-----w- c:\users\Gygabyte\AppData\Local\Omnius for SE
2010-09-10 10:52 . 2010-09-10 10:52 -------- d-----w- c:\programdata\Omnius for SE
2010-09-10 10:44 . 2010-09-10 10:45 -------- d-----w- c:\program files\Omnius for SE
2010-09-09 19:07 . 2010-09-09 19:09 -------- d-----w- c:\program files\ProfiCAD
2010-09-09 19:07 . 2010-09-09 19:08 -------- d-----w- c:\users\Gygabyte\AppData\Roaming\ProfiCAD

.
(((((((((((((((((((((((((((((((((((((((( Find3M výpis ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2010-10-08 18:51 . 2010-05-08 07:24 -------- d-----w- c:\users\Gygabyte\AppData\Roaming\Skype
2010-10-08 18:51 . 2010-05-08 16:50 -------- d-----w- c:\users\Gygabyte\AppData\Roaming\ICQ
2010-10-08 14:02 . 2010-05-08 07:24 -------- d-----w- c:\users\Gygabyte\AppData\Roaming\skypePM
2010-10-08 10:22 . 2010-05-08 07:15 -------- d-----w- c:\program files\Malwarebytes' Anti-Malware
2010-10-08 10:20 . 2010-05-08 12:37 -------- d-----w- c:\users\Gygabyte\AppData\Roaming\uTorrent
2010-10-07 19:48 . 2009-07-26 17:53 631054 ----a-w- c:\windows\system32\perfh005.dat
2010-10-07 19:48 . 2009-07-26 17:53 121708 ----a-w- c:\windows\system32\perfc005.dat
2010-10-07 19:39 . 2010-05-08 16:13 1 ----a-w- c:\users\Gygabyte\AppData\Roaming\OpenOffice.org\3\user\uno_packages\cache\stamp.sys
2010-10-02 19:39 . 2010-07-02 10:04 -------- d-----w- c:\users\Gygabyte\AppData\Roaming\Download Manager
2010-10-02 11:27 . 2010-10-02 11:27 0 ---ha-w- c:\windows\system32\drivers\Msft_User_WpdRapi2_01_00_00.Wdf
2010-09-27 20:29 . 2010-05-08 17:20 -------- d-----w- c:\program files\Common Files\Apple
2010-09-26 08:58 . 2010-05-08 12:37 -------- d-----w- c:\program files\uTorrent
2010-09-25 10:29 . 2010-05-09 18:48 -------- d-----w- c:\program files\Common Files\Acronis
2010-09-25 10:29 . 2010-05-09 18:48 -------- d-----w- c:\program files\Acronis
2010-09-25 10:28 . 2010-07-22 08:04 170080 ----a-w- c:\windows\system32\drivers\snapman.sys
2010-09-24 12:30 . 2010-09-24 12:30 0 ---ha-w- c:\windows\system32\drivers\Msft_User_PCCSWpdDriver_01_09_00.Wdf
2010-09-24 12:18 . 2010-05-23 16:02 -------- d-----w- c:\programdata\Installations
2010-09-24 12:17 . 2010-05-18 11:47 -------- d-----w- c:\program files\Nokia
2010-09-24 12:05 . 2010-05-18 11:51 -------- d-----w- c:\users\Gygabyte\AppData\Roaming\PC Suite
2010-09-23 12:29 . 2010-06-22 14:32 304164 ----a-w- C:\PA207.DAT
2010-09-19 07:44 . 2010-05-08 07:23 -------- d-----w- c:\program files\Google
2010-09-13 12:23 . 2010-08-27 10:53 -------- d-----w- c:\users\Gygabyte\AppData\Roaming\Apple Computer
2010-09-08 12:03 . 2010-05-16 10:07 -------- d-----w- c:\users\Gygabyte\AppData\Roaming\IObit
2010-09-08 12:03 . 2010-05-16 10:07 -------- d-----w- c:\program files\IObit
2010-09-05 07:11 . 2010-07-16 16:21 -------- d-----w- c:\program files\AVerMedia
2010-09-04 20:29 . 2010-09-04 20:19 -------- d-----w- c:\program files\Free Screen Recorder
2010-09-04 19:44 . 2010-09-04 19:44 -------- d-----w- c:\program files\CPUID
2010-09-01 11:11 . 2010-08-29 20:18 -------- d-----w- c:\programdata\AVerTV
2010-09-01 08:51 . 2010-09-01 08:51 -------- d-----w- c:\program files\Safari
2010-09-01 08:27 . 2010-05-08 17:19 -------- d-----w- c:\programdata\Apple
2010-08-29 20:18 . 2010-05-08 06:26 -------- d--h--w- c:\program files\InstallShield Installation Information
2010-08-29 20:18 . 2010-07-16 16:36 -------- d-----w- c:\program files\Common Files\AVerMedia
2010-08-29 18:53 . 2010-07-26 10:16 -------- d-----w- c:\users\Gygabyte\AppData\Roaming\vlc
2010-08-29 14:59 . 2010-08-29 14:53 -------- d-----w- c:\program files\PS
2010-08-29 14:53 . 2010-08-29 14:53 -------- d-----w- c:\program files\Nová složka
2010-08-28 18:56 . 2010-08-28 18:56 -------- d-----w- c:\program files\2K Games
2010-08-27 14:22 . 2010-05-08 07:08 126368 ----a-w- c:\users\Gygabyte\AppData\Local\GDIPFONTCACHEV1.DAT
2010-08-27 10:52 . 2010-08-27 10:51 -------- d-----w- c:\programdata\{429CAD59-35B1-4DBC-BB6D-1DB246563521}
2010-08-27 10:51 . 2010-08-27 10:48 -------- d-----w- c:\programdata\Apple Computer
2010-08-27 10:47 . 2010-08-27 10:47 -------- d-----w- c:\program files\Apple Software Update
2010-08-26 19:33 . 2010-08-26 19:11 -------- d-----w- c:\program files\Mafia II
2010-08-26 17:23 . 2010-08-03 11:38 -------- d-----w- c:\programdata\AVerSetup
2010-08-26 13:53 . 2010-08-26 13:53 -------- d-----w- c:\program files\NVIDIA Corporation
2010-08-26 10:47 . 2010-05-08 16:50 -------- d-----w- c:\program files\ICQ7.1
2010-08-25 19:59 . 2010-08-25 19:59 -------- d-----w- c:\program files\Common Files\Java
2010-08-25 19:59 . 2010-06-17 12:22 -------- d-----w- c:\program files\Java
2010-08-02 06:23 . 2010-08-02 06:23 10682513 ----a-w- c:\programdata\AVerSetup\SnugTVStationSetup-v2010_07_27.exe
2010-07-29 06:30 . 2010-08-25 19:59 197632 ----a-w- c:\windows\system32\ir32_32.dll
2010-07-29 06:30 . 2010-08-25 19:59 82944 ----a-w- c:\windows\system32\iccvid.dll
2010-07-27 16:44 . 2010-07-27 16:44 91424 ----a-w- c:\windows\system32\dnssd.dll
2010-07-27 16:44 . 2010-07-27 16:44 75040 ----a-w- c:\windows\system32\jdns_sd.dll
2010-07-27 16:44 . 2010-07-27 16:44 197920 ----a-w- c:\windows\system32\dnssdX.dll
2010-07-27 16:44 . 2010-07-27 16:44 107808 ----a-w- c:\windows\system32\dns-sd.exe
2010-07-23 04:13 . 2010-07-23 04:13 72488 ----a-w- c:\programdata\Apple Computer\Installer Cache\Safari 5.33.17.8\SetupAdmin.exe
2010-07-22 08:05 . 2010-07-22 08:05 44384 ----a-w- c:\windows\system32\drivers\tifsfilt.sys
2010-07-22 08:05 . 2010-07-22 08:05 441760 ----a-w- c:\windows\system32\drivers\timntr.sys
2010-07-22 08:04 . 2010-07-22 08:04 368736 ----a-w- c:\windows\system32\drivers\tdrpman.sys
2010-07-17 03:00 . 2010-06-17 12:23 423656 ----a-w- c:\windows\system32\deployJava1.dll
2010-07-16 10:44 . 2010-07-16 10:44 16608 ----a-w- c:\windows\gdrv.sys
2009-06-10 21:26 . 2009-07-14 02:04 9633792 --sha-r- c:\windows\Fonts\StaticCache.dat
.

(((((((((((((((((((((((((((((((((( Spouštěcí body v registru )))))))))))))))))))))))))))))))))))))))))))))
.
.
*Poznámka* prázdné záznamy a legitimní výchozí údaje nejsou zobrazeny.
REGEDIT4

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"DAEMON Tools Lite"="c:\program files\DAEMON Tools Lite\DTLite.exe" [2009-10-30 369200]
"Skype"="c:\program files\Skype\Phone\Skype.exe" [2010-09-02 13351304]
"uTorrent"="c:\program files\uTorrent\uTorrent.exe" [2010-09-25 328056]
"Sidebar"="c:\program files\Windows Sidebar\sidebar.exe" [2009-07-14 1173504]
"ICQ"="c:\program files\ICQ7.1\ICQ.exe" [2010-08-22 133432]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"PAC207_Monitor"="c:\windows\PixArt\PAC207\Monitor.exe" [2007-12-10 323584]
"RtHDVCpl"="c:\program files\Realtek\Audio\HDA\RtHDVCpl.exe" [2010-03-26 8546848]
"avgnt"="c:\program files\Avira\AntiVir Desktop\avgnt.exe" [2010-03-02 282792]
"Adobe ARM"="c:\program files\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2010-06-09 976832]
"iTunesHelper"="c:\program files\iTunes\iTunesHelper.exe" [2010-09-24 421160]

c:\users\Gygabyte\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\
OpenOffice.org 3.0.lnk - c:\program files\OpenOffice.org 3\program\quickstart.exe [2009-1-15 393216]

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorAdmin"= 5 (0x5)
"ConsentPromptBehaviorUser"= 3 (0x3)
"EnableUIADesktopToggle"= 0 (0x0)
"EnableLinkedConnections"= 1 (0x1)

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Acronis Scheduler2 Service]
2007-10-23 14:10 140568 ----a-w- c:\program files\Common Files\Acronis\Schedule2\schedhlp.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\AcronisTimounterMonitor]
2007-10-23 15:58 906648 ----a-w- c:\program files\Acronis\TrueImageHome\TimounterMonitor.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe ARM]
2010-06-09 08:06 976832 ----a-w- c:\program files\Common Files\Adobe\ARM\1.0\AdobeARM.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe Reader Speed Launcher]
2010-06-20 02:04 35760 ----a-w- c:\program files\Adobe\Reader 9.0\Reader\reader_sl.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NBAgent]
2010-04-02 23:27 1234216 ----a-w- c:\program files\Nero\Nero 10\Nero BackItUp\NBAgent.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\PC Suite Tray]
2009-11-11 08:57 1451520 ----a-w- c:\program files\Nokia\Nokia PC Suite 7\PCSuite.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\QuickTime Task]
2010-09-08 09:17 421888 ----a-w- c:\program files\QuickTime\QTTask.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SunJavaUpdateSched]
2010-05-14 09:44 248552 ----a-w- c:\program files\Common Files\Java\Java Update\jusched.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\TrueImageMonitor.exe]
2007-10-23 14:05 2615624 ----a-w- c:\program files\Acronis\TrueImageHome\TrueImageMonitor.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\USBToolTip]
2007-02-20 09:07 199752 ----a-w- c:\progra~1\Pinnacle\SHARED~1\Programs\USBTip\USBTip.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Windows Mobile Device Center]
2007-05-31 07:21 648072 ----a-w- c:\windows\WindowsMobile\wmdc.exe

R2 AVerScheduleService;AVerScheduleService;c:\program files\Common Files\AVerMedia\Service\AVerScheduleService.exe [2009-10-09 389120]
R2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;c:\windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
R2 gupdate1caee7f6a1aa600;Služba Google Update (gupdate1caee7f6a1aa600);c:\program files\Google\Update\GoogleUpdate.exe [2010-05-08 133104]
R3 AVerHybrid;AVerMedia Hybrid Tuner (NTSC/PAL/SECAM/DVB-T/FM);c:\windows\system32\drivers\averhbtv.sys [2009-08-20 306688]
R3 ggflt;SEMC USB Flash Driver Filter;c:\windows\system32\DRIVERS\ggflt.sys [2010-07-02 13224]
R4 sptd;sptd;c:\windows\system32\Drivers\sptd.sys [2010-05-08 691696]
S2 AMD External Events Utility;AMD External Events Utility;c:\windows\system32\atiesrxx.exe [2009-08-18 176128]
S2 AntiVirSchedulerService;Avira AntiVir Scheduler;c:\program files\Avira\AntiVir Desktop\sched.exe [2010-02-24 135336]
S2 AVerRemote;AVerRemote;c:\program files\Common Files\AVerMedia\Service\AVerRemote.exe [2009-09-22 348160]
S2 cpuz134;cpuz134;c:\windows\system32\drivers\cpuz134_x32.sys [2010-07-09 20328]
S2 NAUpdate;Nero Update;c:\program files\Nero\Update\NASvc.exe [2010-03-25 490280]
S3 PAC207;e-Messenger 112;c:\windows\system32\DRIVERS\PFC027.SYS [2009-06-25 618112]
S3 RTL8167;Realtek 8167 NT Driver;c:\windows\system32\DRIVERS\Rt86win7.sys [2010-03-22 278560]
S3 seehcri;Sony Ericsson seehcri Device Driver;c:\windows\system32\DRIVERS\seehcri.sys [2010-07-02 27632]


[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost]
WindowsMobile REG_MULTI_SZ wcescomm rapimgr
LocalServiceRestricted REG_MULTI_SZ WcesComm RapiMgr
.
Obsah adresáře 'Naplánované úlohy'

2010-10-08 c:\windows\Tasks\AWC AutoSweep.job
- c:\program files\IObit\Advanced SystemCare 3\AutoSweep.exe [2010-08-26 12:11]

2010-10-08 c:\windows\Tasks\AWC Startup.job
- c:\program files\IObit\Advanced SystemCare 3\AWC.exe [2010-08-26 13:13]

2010-10-08 c:\windows\Tasks\AWC Update.job
- c:\program files\IObit\Advanced SystemCare 3\IObitUpdate.exe [2010-08-26 09:08]

2010-10-08 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
- c:\program files\Google\Update\GoogleUpdate.exe [2010-05-08 07:23]

2010-10-08 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
- c:\program files\Google\Update\GoogleUpdate.exe [2010-05-08 07:23]

2010-09-26 c:\windows\Tasks\SmartDefrag.job
- c:\program files\IObit\IObit SmartDefrag\IObit SmartDefrag.exe [2010-09-08 16:08]
.
.
------- Doplňkový sken -------
.
uInternet Settings,ProxyOverride = *.local
IE: E&xportovat do aplikace Microsoft Office Excel - c:\progra~1\MICROS~4\OFFICE11\EXCEL.EXE/3000
IE: {{71BFC818-0CED-42D6-9C87-5142918957EE} - c:\program files\ICQ7.1\ICQ.exe
FF - ProfilePath - c:\users\Gygabyte\AppData\Roaming\Mozilla\Firefox\Profiles\42anjeup.default\
FF - prefs.js: browser.startup.homepage - seznam.cz
FF - component: c:\program files\Nokia\Nokia Ovi Suite\Connectors\Bookmarks Connector\FirefoxExtension\components\FirefoxExtension.dll
FF - component: c:\users\Gygabyte\AppData\Roaming\Mozilla\Firefox\Profiles\42anjeup.default\extensions\{7b13ec3e-999a-4b70-b9cb-2617b8323822}\components\FFExternalAlert.dll
FF - component: c:\users\Gygabyte\AppData\Roaming\Mozilla\Firefox\Profiles\42anjeup.default\extensions\{7b13ec3e-999a-4b70-b9cb-2617b8323822}\components\RadioWMPCore.dll
FF - plugin: c:\program files\Google\Google Earth\plugin\npgeplugin.dll
FF - plugin: c:\program files\Google\Update\1.2.183.29\npGoogleOneClick8.dll
FF - plugin: c:\program files\Java\jre6\bin\new_plugin\npdeployJava1.dll
FF - plugin: c:\program files\Mozilla Firefox\plugins\np-mswmp.dll

---- NASTAVENÍ FIREFOXU ----
c:\program files\Mozilla Firefox\greprefs\all.js - pref("network.IDN.whitelist.xn--mgbaam7a8h", true);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("network.IDN.whitelist.xn--mgberp4a5d4ar", true);
c:\program files\Mozilla Firefox\defaults\pref\firefox-l10n.js - pref("browser.fixup.alternate.suffix", ".cz");
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("dom.ipc.plugins.enabled", false);
.
Binary file temp00 matches
.
--------------------- ZAMKNUTÉ KLÍČE V REGISTRU ---------------------

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0000\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0001\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0002\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0003\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0004\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0005\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\PCW\Security]
@Denied: (Full) (Everyone)
.
--------------------- Knihovny navázané na běžící procesy ---------------------

- - - - - - - > 'lsass.exe'(948)
c:\windows\system32\relog_ap.DLL
.
Celkový čas: 2010-10-08 21:05:01
ComboFix-quarantined-files.txt 2010-10-08 19:05

Před spuštěním: Volných bajtů: 14 779 875 328
Po spuštění: Volných bajtů: 14 678 286 336

- - End Of File - - 07FBD2D7D5382B9BBCBB69E04DC65BE9

Co našel MBAM opravdu smažte. CF našel další 2 šmejdy a smazal je. Zbytek logu vypadá čistý. SPTD: http://www.duplexsecure.com/home .

Smazáno. A co teď?

PC se nezrychlil?

No o něco se zrychlil ale pořád ty starty a třeba když poklepu na tento počítač tak to trvá cca 3-5 sekund než to naskočí.

PC vyčistěte CCleanerem: http://www.viry.cz/forum/viewtopic.php?f=46&t=7478 , příp. defragmentujte disk.

Vyčištěno, ted jdu na defragmentaci.