VIRY.CZ

mám problémy nejspíš s trojanem, prosím o pomoc,
log z rsit:

Logfile of random's system information tool 1.08 (written by random/random)
Run by Roman at 2010-11-06 14:33:28
Microsoft Windows 7 Home Premium
System drive C: has 74 GB (50%) free of 148 GB
Total RAM: 3067 MB (75% free)

HijackThis download failed

======Scheduled tasks folder======

C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-2142419465-1506464550-487586197-1000Core.job
C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-2142419465-1506464550-487586197-1000UA.job

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{02478D38-C3F9-4efb-9B51-7695ECA05670}]
&Yahoo! Toolbar Helper - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll [2007-12-18 817936]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{06849E9F-C8D7-4D59-B87D-784B7D6BE0B3}]
Adobe PDF Reader Link Helper - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll [2010-09-23 61888]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{72853161-30C5-4D22-B7F9-0BBC1D38A37E}]
Groove GFS Browser Helper - C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll [2009-02-12 2217848]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{83A2F9B1-01A2-4AA5-87D1-45B6B8505E96}]
ShowBarObj Class - C:\Program Files\Acer\Empowering Technology\eDataSecurity\x86\ActiveToolBand.dll [2008-05-14 312880]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{A55F9C95-2BB1-4EA2-BC77-DFAAB78832CE}]
QIPBHO Class - C:\Users\Roman\AppData\Roaming\Microsoft\Internet Explorer\qipsearchbar.dll [2010-10-25 149968]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre6\bin\jp2ssv.dll [2010-04-12 41760]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{5CBE3B7C-1E47-477e-A7DD-396DB0476E29} - Acer eDataSecurity Management - C:\Program Files\Acer\Empowering Technology\eDataSecurity\x86\eDStoolbar.dll [2008-05-14 142896]
{EF99BD32-C1FB-11D2-892F-0090271D4F88} - Yahoo! Toolbar - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll [2007-12-18 817936]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"SynTPEnh"=C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2008-04-25 1049896]
"RtHDVCpl"=C:\Windows\RtHDVCpl.exe [2008-05-07 6139904]
"eAudio"=C:\Program Files\Acer\Empowering Technology\eAudio\eAudio.exe [2008-05-30 544768]
"eDataSecurity Loader"=C:\Program Files\Acer\Empowering Technology\eDataSecurity\x86\eDSloader.exe [2008-05-14 526896]
"ePower_DMC"=C:\Program Files\Acer\Empowering Technology\ePower\ePower_DMC.exe [2008-08-01 405504]
"GrooveMonitor"=C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe [2008-10-25 31072]
"IAAnotif"=C:\Program Files\Intel\Intel Matrix Storage Manager\iaanotif.exe [2008-07-20 182808]
"PLFSetI"=C:\Windows\PLFSetI.exe [2007-10-23 200704]
"WarReg_PopUp"=C:\Program Files\Acer\WR_PopUp\WarReg_PopUp.exe [2008-01-29 303104]
"ZPdtWzdVitaKey MC3000"=C:\Program Files\Acer\Acer Bio Protection\PdtWzd.exe [2008-09-15 3676160]
"LManager"=C:\PROGRA~1\LAUNCH~1\QtZgAcer.EXE [2008-06-04 817672]
"SunJavaUpdateSched"=C:\Program Files\Common Files\Java\Java Update\jusched.exe [2010-02-18 248040]
"TkBellExe"=C:\Program Files\Common Files\Real\Update_OB\realsched.exe [2010-04-12 202256]
"Adobe Reader Speed Launcher"=C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe [2010-09-24 40368]
"Adobe ARM"=C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2010-09-21 932288]
"avast5"=C:\Program Files\Alwil Software\Avast5\avastUI.exe [2010-09-07 2838912]
"egui"=C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe [2010-08-12 2215064]
"avgnt"=C:\Program Files\Avira\AntiVir Desktop\avgnt.exe [2010-08-02 281768]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\RunOnce]
"SpybotSnD"=C:\Program Files\Spybot - Search & Destroy\SpybotSD.exe [2009-01-26 5365592]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"ehTray.exe"=C:\Windows\ehome\ehTray.exe [2009-07-14 144384]
"Sidebar"=C:\Program Files\Windows Sidebar\sidebar.exe [2009-07-14 1173504]
"MSS"=C:\ProgramData\a2e63c1\MySecurityShield.exe /s []
"Infium"=C:\Program Files\QIP 2010\qip.exe [2010-10-25 5828560]
"Google Update"=C:\Users\Roman\AppData\Local\Google\Update\GoogleUpdate.exe [2010-11-04 136176]
"SUPERAntiSpyware"=C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe [2010-10-25 2424560]

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup
Acer VCM.lnk - C:\Program Files\Acer\Acer VCM\AcerVCM.exe
Bluetooth.lnk - C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\AWinNotifyVitaKey MC3000]
C:\Program Files\Acer\Acer Bio Protection\WinNotify.dll [2008-09-15 3197952]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\spba]
C:\Program Files\Common Files\SPBA\homefus2.dll [2008-03-25 567560]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED}

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{B5A7F190-DDA6-4420-B3BA-52453494E6CD}"=C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll [2009-02-12 2217848]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa]
"notification packages"=scecli
C:\Program Files\Acer\Acer Bio Protection\PwdFilter

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=credssp.dll

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"DontDisplayLogonHoursWarnings"=1
"LogonHoursAction"=2

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorAdmin"=5
"ConsentPromptBehaviorUser"=2
"EnableUIADesktopToggle"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1
"legalnoticetext"=
"DisableCAD"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=145
"DisallowRun"=1

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"BindDirectlyToPropertySetStorage"=0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*

======List of files/folders created in the last 1 months======

2010-11-06 14:30:36 ----D---- C:\Program Files\trend micro
2010-11-06 14:30:35 ----D---- C:\rsit
2010-11-06 12:19:17 ----D---- C:\Users\Roman\AppData\Roaming\SUPERAntiSpyware.com
2010-11-06 12:19:17 ----D---- C:\ProgramData\SUPERAntiSpyware.com
2010-11-06 12:19:12 ----D---- C:\Program Files\SUPERAntiSpyware
2010-11-06 12:18:21 ----D---- C:\ProgramData\Spybot - Search & Destroy
2010-11-06 12:18:21 ----D---- C:\Program Files\Spybot - Search & Destroy
2010-11-05 17:23:36 ----A---- C:\Windows\system32\drivers\ssmdrv.sys
2010-11-05 17:23:21 ----A---- C:\Windows\system32\drivers\avipbb.sys
2010-11-05 17:23:21 ----A---- C:\Windows\system32\drivers\avgntflt.sys
2010-11-05 17:22:55 ----D---- C:\ProgramData\Avira
2010-11-05 17:22:55 ----D---- C:\Program Files\Avira
2010-11-04 15:08:47 ----A---- C:\Windows\system32\drivers\aswFsBlk.sys
2010-11-04 15:08:46 ----A---- C:\Windows\system32\drivers\aswSP.sys
2010-11-04 15:08:45 ----A---- C:\Windows\system32\drivers\aswTdi.sys
2010-11-04 15:08:45 ----A---- C:\Windows\system32\drivers\aswRdr.sys
2010-11-04 15:08:43 ----A---- C:\Windows\system32\drivers\aswMonFlt.sys
2010-11-04 15:08:34 ----A---- C:\Windows\system32\aswBoot.exe
2010-11-04 15:08:27 ----D---- C:\ProgramData\Alwil Software
2010-11-04 15:08:27 ----D---- C:\Program Files\Alwil Software
2010-11-04 14:26:18 ----SHD---- C:\Users\Roman\AppData\Roaming\Smart Engine
2010-11-04 14:26:15 ----SHD---- C:\ProgramData\SMNWE
2010-11-04 14:26:04 ----SHD---- C:\ProgramData\9d95fb
2010-10-27 11:05:00 ----A---- C:\Windows\system32\msdri.dll
2010-10-27 11:05:00 ----A---- C:\Windows\system32\CPFilters.dll
2010-10-27 11:04:52 ----A---- C:\Windows\system32\drivers\Diskdump.sys
2010-10-26 22:38:44 ----D---- C:\Users\Roman\AppData\Roaming\CasualForge
2010-10-26 22:38:44 ----D---- C:\ProgramData\CasualForge
2010-10-26 22:38:28 ----D---- C:\ProgramData\AlawarWrapper
2010-10-26 22:37:40 ----D---- C:\Program Files\Hry.cz
2010-10-26 19:04:47 ----D---- C:\Program Files\QIP 2010
2010-10-19 19:29:10 ----D---- C:\Program Files\Common Files\Skype
2010-10-15 07:51:24 ----A---- C:\Windows\system32\ole32.dll
2010-10-15 07:51:21 ----A---- C:\Windows\system32\iertutil.dll
2010-10-15 07:51:20 ----A---- C:\Windows\system32\mshtml.dll
2010-10-15 07:51:19 ----A---- C:\Windows\system32\ieframe.dll
2010-10-15 07:51:18 ----A---- C:\Windows\system32\msfeeds.dll
2010-10-15 07:51:17 ----A---- C:\Windows\system32\wininet.dll
2010-10-15 07:51:17 ----A---- C:\Windows\system32\urlmon.dll
2010-10-15 07:51:17 ----A---- C:\Windows\system32\mstime.dll
2010-10-15 07:51:17 ----A---- C:\Windows\system32\licmgr10.dll
2010-10-15 07:51:17 ----A---- C:\Windows\system32\iedkcs32.dll
2010-10-15 07:51:16 ----A---- C:\Windows\system32\mshtmled.dll
2010-10-15 07:51:16 ----A---- C:\Windows\system32\msfeedssync.exe
2010-10-15 07:51:16 ----A---- C:\Windows\system32\msfeedsbs.dll
2010-10-15 07:51:16 ----A---- C:\Windows\system32\jsproxy.dll
2010-10-15 07:51:16 ----A---- C:\Windows\system32\ieui.dll
2010-10-15 07:51:16 ----A---- C:\Windows\system32\iepeers.dll
2010-10-15 07:51:15 ----A---- C:\Windows\system32\t2embed.dll
2010-10-15 07:51:14 ----A---- C:\Windows\system32\schannel.dll
2010-10-15 07:51:12 ----A---- C:\Windows\system32\comctl32.dll
2010-10-15 07:51:10 ----A---- C:\Windows\system32\mfc40u.dll
2010-10-15 07:51:10 ----A---- C:\Windows\system32\mfc40.dll
2010-10-15 07:51:09 ----A---- C:\Windows\system32\drivers\srv.sys
2010-10-15 07:51:08 ----A---- C:\Windows\system32\srvsvc.dll
2010-10-15 07:51:08 ----A---- C:\Windows\system32\drivers\srvnet.sys
2010-10-15 07:51:08 ----A---- C:\Windows\system32\drivers\srv2.sys
2010-10-15 07:51:07 ----A---- C:\Windows\system32\win32k.sys
2010-10-15 07:51:05 ----A---- C:\Windows\system32\wmp.dll
2010-10-15 07:51:02 ----A---- C:\Windows\system32\wmploc.DLL
2010-10-15 07:51:00 ----A---- C:\Windows\system32\wmpmde.dll
2010-10-15 07:50:59 ----A---- C:\Windows\system32\StructuredQuery.dll

======List of files/folders modified in the last 1 months======

2010-11-06 14:33:29 ----D---- C:\Windows\Temp
2010-11-06 14:32:42 ----D---- C:\Windows\System32
2010-11-06 14:32:42 ----D---- C:\Windows\inf
2010-11-06 14:32:42 ----A---- C:\Windows\system32\PerfStringBackup.INI
2010-11-06 14:30:36 ----RD---- C:\Program Files
2010-11-06 14:29:40 ----A---- C:\Windows\ntbtlog.txt
2010-11-06 14:23:02 ----HD---- C:\ProgramData
2010-11-06 13:47:58 ----D---- C:\Windows\system32\drivers\etc
2010-11-06 11:36:18 ----D---- C:\Users\Roman\AppData\Roaming\uTorrent
2010-11-06 11:16:33 ----AD---- C:\ProgramData\Temp
2010-11-06 09:57:02 ----D---- C:\Windows\Prefetch
2010-11-05 21:20:33 ----D---- C:\Windows\system32\config
2010-11-05 17:23:36 ----D---- C:\Windows\system32\drivers
2010-11-05 17:09:55 ----D---- C:\Windows\system32\NDF
2010-11-05 16:54:41 ----SHD---- C:\System Volume Information
2010-11-04 16:37:49 ----SHD---- C:\Windows\Installer
2010-11-04 16:37:45 ----SHD---- C:\Config.Msi
2010-11-04 16:37:34 ----D---- C:\Windows\system32\catroot
2010-11-04 16:37:33 ----D---- C:\Windows\system32\DriverStore
2010-11-04 16:36:45 ----D---- C:\Program Files\ESET
2010-11-04 15:33:27 ----D---- C:\Program Files\Mozilla Firefox
2010-11-04 15:23:38 ----D---- C:\Windows\system32\Tasks
2010-11-04 15:23:37 ----D---- C:\Windows\Tasks
2010-11-04 15:08:35 ----D---- C:\Windows
2010-11-04 15:03:14 ----D---- C:\Windows\system32\wbem
2010-11-04 15:02:22 ----D---- C:\Windows\system32\CodeIntegrity
2010-11-04 15:02:22 ----D---- C:\Windows\system32\catroot2
2010-11-04 15:02:22 ----D---- C:\Users\Roman\AppData\Roaming\vlc
2010-11-04 15:02:21 ----D---- C:\Windows\winsxs
2010-11-04 15:02:21 ----D---- C:\Windows\registration
2010-11-04 14:35:48 ----D---- C:\downloads
2010-10-30 12:28:58 ----D---- C:\Windows\rescache
2010-10-30 11:50:45 ----D---- C:\Program Files\QIP
2010-10-29 16:21:25 ----D---- C:\Windows\Microsoft.NET
2010-10-29 16:20:12 ----RSD---- C:\Windows\assembly
2010-10-28 18:19:54 ----D---- C:\Windows\ehome
2010-10-28 18:19:40 ----D---- C:\Windows\AppPatch
2010-10-19 20:09:16 ----D---- C:\Users\Roman\AppData\Roaming\Skype
2010-10-19 19:29:30 ----RD---- C:\Program Files\Skype
2010-10-19 19:29:10 ----D---- C:\Program Files\Common Files
2010-10-19 19:28:57 ----D---- C:\ProgramData\Skype
2010-10-19 19:27:17 ----D---- C:\Users\Roman\AppData\Roaming\skypePM
2010-10-19 10:41:44 ----N---- C:\Windows\system32\MpSigStub.exe
2010-10-16 15:12:10 ----D---- C:\Windows\Minidump
2010-10-15 20:59:40 ----D---- C:\Windows\system32\migration
2010-10-15 20:59:40 ----D---- C:\Program Files\Internet Explorer
2010-10-15 20:59:38 ----D---- C:\Program Files\Windows Media Player
2010-10-15 16:29:42 ----D---- C:\ProgramData\Microsoft Help
2010-10-15 16:23:34 ----A---- C:\Windows\system32\MRT.exe
2010-10-15 12:37:11 ----D---- C:\Users\Roman\AppData\Roaming\dvdcss

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 AlfaFF;AlfaFF File System mini-filter; C:\Windows\system32\Drivers\AlfaFF.sys [2008-09-15 42608]
R0 iaStor;Intel AHCI Controller; C:\Windows\system32\DRIVERS\iaStor.sys [2008-07-20 324120]
R0 PSDFilter;PSDFilter; C:\Windows\system32\DRIVERS\psdfilter.sys [2008-05-14 18992]
R0 rdyboost;ReadyBoost; C:\Windows\System32\drivers\rdyboost.sys [2009-07-14 173648]
R0 UBHelper;UBHelper; C:\Windows\system32\drivers\UBHelper.sys [2008-01-30 13824]
R1 aswRdr;aswRdr; C:\Windows\system32\drivers\aswRdr.sys [2010-09-07 23376]
R3 DKbFltr;Dritek Keyboard Filter Driver; C:\Windows\system32\DRIVERS\DKbFltr.sys [2006-11-02 21264]
R3 L1E;NDIS Miniport Driver for Atheros AR8121/AR8113/AR8114 PCI-E Ethernet Controller; C:\Windows\system32\DRIVERS\L1E60x86.sys [2009-04-01 48640]
R3 netw5v32;Intel(R) Wireless WiFi Link 5000 Series – ovladač adaptéru pro 32bitový systém Windows Vista; C:\Windows\system32\DRIVERS\netw5v32.sys [2009-07-13 4231168]
R3 NTIDrvr;Upper Class Filter Driver; C:\Windows\system32\DRIVERS\NTIDrvr.sys [2008-01-30 14848]
R3 RTSTOR;Realtek USB 2.0 Card Reader; C:\Windows\system32\drivers\RTSTOR.SYS [2008-03-26 61440]
R3 SynTP;Synaptics TouchPad Driver; C:\Windows\system32\DRIVERS\SynTP.sys [2008-04-25 199472]
R3 winbondcir;Winbond IR Transceiver; C:\Windows\system32\DRIVERS\winbondcir.sys [2007-03-28 43008]
S0 sptd;sptd; C:\Windows\System32\Drivers\sptd.sys [2009-11-06 721904]
S1 aswSP;aswSP; C:\Windows\system32\drivers\aswSP.sys [2010-09-07 165584]
S1 aswTdi;avast! Network Shield Support; C:\Windows\system32\drivers\aswTdi.sys [2010-09-07 46672]
S1 avipbb;avipbb; C:\Windows\system32\DRIVERS\avipbb.sys [2010-08-02 126856]
S1 ehdrv;ehdrv; C:\Windows\system32\DRIVERS\ehdrv.sys [2010-07-29 115008]
S1 HWiNFO32;HWiNFO32 Kernel Driver; \??\C:\Program Files\HWiNFO32\HWiNFO32.SYS [2009-07-16 19064]
S1 SASDIFSV;SASDIFSV; \??\C:\Program Files\SUPERAntiSpyware\SASDIFSV.SYS [2010-02-17 12872]
S1 SASKUTIL;SASKUTIL; \??\C:\Program Files\SUPERAntiSpyware\SASKUTIL.SYS [2010-05-10 67656]
S1 ssmdrv;ssmdrv; C:\Windows\system32\DRIVERS\ssmdrv.sys [2010-06-17 28520]
S2 aswFsBlk;aswFsBlk; C:\Windows\system32\drivers\aswFsBlk.sys [2010-09-07 17744]
S2 aswMonFlt;aswMonFlt; \??\C:\Windows\system32\drivers\aswMonFlt.sys [2010-09-07 50768]
S2 avgntflt;avgntflt; C:\Windows\system32\DRIVERS\avgntflt.sys [2010-08-02 60936]
S2 eamonm;eamonm; C:\Windows\system32\DRIVERS\eamonm.sys [2010-07-29 136632]
S2 epfwwfpr;epfwwfpr; C:\Windows\system32\DRIVERS\epfwwfpr.sys [2010-07-29 96920]
S2 int15;int15; \??\C:\Windows\system32\drivers\int15.sys [2007-01-26 69632]
S2 mdmxsdk;mdmxsdk; C:\Windows\system32\DRIVERS\mdmxsdk.sys [2006-06-19 12672]
S2 Parvdm;Parvdm; C:\Windows\system32\DRIVERS\parvdm.sys [2009-07-14 8704]
S2 PSDNServ;PSDNServ; C:\Windows\system32\DRIVERS\PSDNServ.sys [2008-05-14 16944]
S2 psdvdisk;PSDVdisk; C:\Windows\system32\DRIVERS\PSDVdisk.sys [2008-05-14 60464]
S2 XAudio;XAudio; C:\Windows\system32\DRIVERS\xaudio.sys [2007-10-18 8704]
S3 aic78xx;aic78xx; C:\Windows\system32\DRIVERS\djsvs.sys [2009-07-14 70720]
S3 amdagp;AMD AGP Bus Filter Driver; C:\Windows\system32\DRIVERS\amdagp.sys [2009-07-14 53312]
S3 b57nd60x;Broadcom NetXtreme Gigabit Ethernet - NDIS 6.0; C:\Windows\system32\DRIVERS\b57nd60x.sys [2009-07-13 229888]
S3 BthEnum;Služba Bluetooth Enumerator; C:\Windows\system32\DRIVERS\BthEnum.sys [2009-07-14 34816]
S3 BthPan;Zařízení Bluetooth (síť PAN); C:\Windows\system32\DRIVERS\bthpan.sys [2009-07-14 93696]
S3 BTHPORT;Ovladač portu Bluetooth; C:\Windows\System32\Drivers\BTHport.sys [2009-07-14 392704]
S3 BTHUSB;Ovladač rozhraní USB radiostanice Bluetooth; C:\Windows\System32\Drivers\BTHUSB.sys [2009-07-14 58880]
S3 btwavdt;Bluetooth AVDT Service; C:\Windows\system32\DRIVERS\btwavdt.sys [2007-07-16 80936]
S3 HSF_DPV;HSF_DPV; C:\Windows\system32\DRIVERS\HSX_DPV.sys [2008-03-25 980992]
S3 HSXHWAZL;HSXHWAZL; C:\Windows\system32\DRIVERS\HSXHWAZL.sys [2008-03-25 207872]
S3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\Windows\system32\drivers\RTKVHDA.sys [2008-05-07 2134424]
S3 NVHDA;Service for NVIDIA High Definition Audio Driver; C:\Windows\system32\drivers\nvhda32v.sys [2008-06-25 44064]
S3 pciide;pciide; C:\Windows\system32\DRIVERS\pciide.sys [2009-07-14 12368]
S3 RFCOMM;Zařízení Bluetooth (RFCOMM protokol TDI); C:\Windows\system32\DRIVERS\rfcomm.sys [2009-07-14 129536]
S3 sisagp;SIS AGP Bus Filter; C:\Windows\system32\DRIVERS\sisagp.sys [2009-07-14 52304]
S3 TcUsb;TC USB Kernel Driver; C:\Windows\System32\Drivers\tcusb.sys [2008-01-30 50576]
S3 viaagp;VIA AGP Bus Filter; C:\Windows\system32\DRIVERS\viaagp.sys [2009-07-14 53328]
S3 ViaC7;VIA C7 Processor Driver; C:\Windows\system32\DRIVERS\viac7.sys [2009-07-14 52736]
S3 winachsf;winachsf; C:\Windows\system32\DRIVERS\HSX_CNXT.sys [2008-03-25 661504]
S3 WinUsb;WinUsb; C:\Windows\system32\DRIVERS\WinUsb.sys [2009-07-14 34944]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

S2 AntiVirService;Avira AntiVir Guard; C:\Program Files\Avira\AntiVir Desktop\avguard.exe [2010-08-02 267944]
S2 AntiVirSchedulerService;Avira AntiVir Scheduler; C:\Program Files\Avira\AntiVir Desktop\sched.exe [2010-08-02 135336]
S2 avast! Antivirus;avast! Antivirus; C:\Program Files\Alwil Software\Avast5\AvastSvc.exe [2010-09-07 40384]
S2 eDataSecurity Service;eDataSecurity Service; C:\Program Files\Acer\Empowering Technology\eDataSecurity\x86\eDSService.exe [2008-05-14 500784]
S2 ekrn;ESET Service; C:\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe [2010-08-12 810144]
S2 ETService;Empowering Technology Service; C:\Program Files\Acer\Empowering Technology\Service\ETService.exe [2008-06-02 24576]
S2 IAANTMON;Intel(R) Matrix Storage Event Monitor; C:\Program Files\Intel\Intel Matrix Storage Manager\IAANTMon.exe [2008-07-20 354840]
S2 IGBASVC;iGroupTec Service; C:\Program Files\Acer\Acer Bio Protection\BASVC.exe [2008-09-15 3602432]
S2 LightScribeService;LightScribeService Direct Disc Labeling Service; C:\Program Files\Common Files\LightScribe\LSSrvc.exe [2007-01-17 61440]
S2 MobilityService;MobilityService; C:\Acer\Mobility Center\MobilityService.exe [2007-12-06 110592]
S2 nvsvc;NVIDIA Display Driver Service; C:\Windows\system32\nvvsvc.exe []
S2 RS_Service;Raw Socket Service; C:\Program Files\Acer\Acer VCM\RS_Service.exe [2008-01-10 233472]
S2 SBSDWSCService;SBSD Security Center Service; C:\Program Files\Spybot - Search & Destroy\SDWinSec.exe [2009-01-26 1153368]
S2 XAudioService;XAudioService; C:\Windows\system32\DRIVERS\xaudio.exe [2007-10-18 386560]
S3 avast! Mail Scanner;avast! Mail Scanner; C:\Program Files\Alwil Software\Avast5\AvastSvc.exe [2010-09-07 40384]
S3 avast! Web Scanner;avast! Web Scanner; C:\Program Files\Alwil Software\Avast5\AvastSvc.exe [2010-09-07 40384]
S3 EhttpSrv;ESET HTTP Server; C:\Program Files\ESET\ESET NOD32 Antivirus\EHttpSrv.exe [2010-08-12 33584]
S3 Microsoft Office Groove Audit Service;Microsoft Office Groove Audit Service; C:\Program Files\Microsoft Office\Office12\GrooveAuditService.exe [2008-10-25 65888]
S3 odserv;Microsoft Office Diagnostics Service; C:\Program Files\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE [2008-11-04 441712]
S3 ose;Office Source Engine; C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2006-10-26 145184]
S3 WatAdminSvc;@%SystemRoot%\system32\Wat\WatUX.exe,-601; C:\Windows\system32\Wat\WatAdminSvc.exe [2010-05-25 1343400]

-----------------EOF-----------------

Zdravim
Natlacil si tam plno AV-
C:\Program Files\ESET
C:\Program Files\Alwil Software
C:\Program Files\Avira

Odinstalovat, moze zostat len -1

Odinstaluj
C:\Program Files\Spybot - Search & Destroy

Precistit CCleanerom:
Stáhni, nainstaluj program CCleaner - http://www.ccleaner.com/download/downloadpage.aspx?f=2
- PravyKlik na kos-spustit ccleaner ->>>Cakas>>na cistenie,,
PravyKlik na kos-otvorit ccleaner-záložka Windows a stiskni Analyzovat a poté Spustit Cleaner
- Klikni na záložku Aplikace a stiskni Analyzovat a poté Spustit Cleaner
- Klikni na Registry, stiskni Hledej problémy, po dokončení skenování klikni na Opravit vybrané problémy,
-zvol Ano pro vytvoření zálohy, ulož nabídnutý soubor a klikni na Opravit všechny problémy,
Stiahnes na plochu TFC
zatvor vsetko co mas otvorene a spust-po skane restart
PROSIM CITAJTE POZORNE NAVOD!!!,

Použij ComboFix podle tohoto návodu: http://www.bleepingcomputer.com/combofi ... t-combofix
Log znej vloz sem.

ComboFix 10-11-05.06 - Roman 06.11.2010 15:58:19.1.2 - x86
Microsoft Windows 7 Home Premium 6.1.7600.0.1250.420.1029.18.3067.2085 [GMT 1:00]
Spuštěný z: c:\users\Roman\Desktop\ComboFix.exe
SP: SUPERAntiSpyware *disabled* (Updated) {222A897C-5018-402e-943F-7E7AC8560DA7}
.

((((((((((((((((((((((((((((((((((((((( Ostatní výmazy )))))))))))))))))))))))))))))))))))))))))))))))))
.

c:\programdata\9d95fb
c:\programdata\9d95fb\526101.reg
c:\programdata\9d95fb\56c7d5b4c1cf79e401523c898b1baafa.ocx
c:\programdata\9d95fb\7322.mof
c:\programdata\9d95fb\BackUp\Acer VCM.lnk
c:\programdata\9d95fb\BackUp\Bluetooth.lnk
c:\programdata\9d95fb\mcp.ico
c:\programdata\9d95fb\mozcrt19.dll
c:\programdata\9d95fb\SME.ico
c:\programdata\9d95fb\sqlite3.dll
c:\programdata\9d95fb\v8z6avg8zorgg7tm9q01u8zo1u8vr7tm9q01ugofsg.dll
c:\users\Roman\AppData\Roaming\.#
c:\users\Roman\AppData\Roaming\Microsoft\Windows\Recent\cb.drv
c:\users\Roman\AppData\Roaming\Microsoft\Windows\Recent\cb.tmp
c:\users\Roman\AppData\Roaming\Microsoft\Windows\Recent\cid.sys
c:\users\Roman\AppData\Roaming\Microsoft\Windows\Recent\eb.tmp
c:\users\Roman\AppData\Roaming\Microsoft\Windows\Recent\exec.dll
c:\users\Roman\AppData\Roaming\Microsoft\Windows\Recent\fix.drv
c:\users\Roman\AppData\Roaming\Microsoft\Windows\Recent\PE.sys
c:\users\Roman\AppData\Roaming\Microsoft\Windows\Recent\ppal.dll
c:\users\Roman\AppData\Roaming\Microsoft\Windows\Recent\runddlkey.sys
c:\users\Roman\AppData\Roaming\Microsoft\Windows\Recent\SICKBOY.exe
c:\users\Roman\AppData\Roaming\Microsoft\Windows\Recent\sld.exe
c:\users\Roman\AppData\Roaming\Microsoft\Windows\Recent\snl2w.drv
c:\users\Roman\AppData\Roaming\Microsoft\Windows\Recent\tjd.exe
c:\users\Roman\AppData\Roaming\Microsoft\Windows\Recent\tjd.tmp
c:\users\Roman\AppData\Roaming\Smart Engine
c:\users\Roman\AppData\Roaming\Smart Engine\cookies.sqlite
c:\users\Roman\AppData\Roaming\Smart Engine\Instructions.ini

.
((((((((((((((((((((((((( Soubory vytvořené od 2010-10-06 do 2010-11-06 )))))))))))))))))))))))))))))))
.

2010-11-06 15:09 . 2010-11-06 15:12 -------- d-----w- c:\users\Roman\AppData\Local\temp
2010-11-06 15:09 . 2010-11-06 15:09 -------- d-----w- c:\users\Rom\AppData\Local\temp
2010-11-06 15:09 . 2010-11-06 15:09 -------- d-----w- c:\users\Default\AppData\Local\temp
2010-11-06 14:31 . 2010-11-06 14:31 -------- d-----w- c:\program files\CCleaner
2010-11-06 13:30 . 2010-11-06 13:30 -------- d-----w- c:\program files\trend micro
2010-11-06 13:30 . 2010-11-06 13:30 -------- d-----w- C:\rsit
2010-11-06 11:19 . 2010-11-06 11:19 -------- d-----w- c:\users\Roman\AppData\Roaming\SUPERAntiSpyware.com
2010-11-06 11:19 . 2010-11-06 11:19 -------- d-----w- c:\programdata\SUPERAntiSpyware.com
2010-11-06 11:19 . 2010-11-06 11:19 -------- d-----w- c:\program files\SUPERAntiSpyware
2010-11-06 11:18 . 2010-11-06 14:31 -------- d-----w- c:\programdata\Spybot - Search & Destroy
2010-11-06 11:18 . 2010-11-06 14:31 -------- d-----w- c:\program files\Spybot - Search & Destroy
2010-11-05 15:54 . 2010-10-07 23:21 6146896 ----a-w- c:\programdata\Microsoft\Windows Defender\Definition Updates\{62D8DD48-EDF5-44BD-903A-23287818FB86}\mpengine.dll
2010-11-04 14:23 . 2010-11-04 14:24 -------- d-----w- c:\users\Roman\AppData\Local\Google
2010-11-04 14:23 . 2010-11-04 14:23 -------- d-----w- c:\users\Roman\AppData\Local\Deployment
2010-11-04 14:23 . 2010-11-04 14:23 -------- d-----w- c:\users\Roman\AppData\Local\Apps
2010-11-04 14:08 . 2010-09-07 15:47 17744 ----a-w- c:\windows\system32\drivers\aswFsBlk.sys
2010-11-04 14:08 . 2010-09-07 15:52 165584 ----a-w- c:\windows\system32\drivers\aswSP.sys
2010-11-04 14:08 . 2010-09-07 15:52 46672 ----a-w- c:\windows\system32\drivers\aswTdi.sys
2010-11-04 14:08 . 2010-09-07 15:47 23376 ----a-w- c:\windows\system32\drivers\aswRdr.sys
2010-11-04 14:08 . 2010-09-07 15:47 50768 ----a-w- c:\windows\system32\drivers\aswMonFlt.sys
2010-11-04 14:08 . 2010-09-07 16:12 38848 ----a-w- c:\windows\avastSS.scr
2010-11-04 14:08 . 2010-09-07 16:11 167592 ----a-w- c:\windows\system32\aswBoot.exe
2010-11-04 14:08 . 2010-11-04 14:08 -------- d-----w- c:\programdata\Alwil Software
2010-11-04 14:08 . 2010-11-04 14:08 -------- d-----w- c:\program files\Alwil Software
2010-11-04 13:26 . 2010-11-04 14:02 -------- d-sh--w- c:\programdata\SMNWE
2010-10-27 10:05 . 2010-08-04 06:18 641536 ----a-w- c:\windows\system32\CPFilters.dll
2010-10-27 10:05 . 2010-08-04 06:17 417792 ----a-w- c:\windows\system32\msdri.dll
2010-10-27 10:05 . 2010-08-04 06:15 204288 ----a-w- c:\windows\system32\MSNP.ax
2010-10-27 10:05 . 2010-08-04 06:15 199680 ----a-w- c:\windows\system32\mpg2splt.ax
2010-10-27 10:04 . 2010-07-13 05:22 26504 ----a-w- c:\windows\system32\drivers\Diskdump.sys
2010-10-26 21:38 . 2010-10-26 21:38 -------- d-----w- c:\users\Roman\AppData\Roaming\CasualForge
2010-10-26 21:38 . 2010-10-26 21:38 -------- d-----w- c:\programdata\CasualForge
2010-10-26 21:38 . 2010-10-26 21:38 -------- d-----w- c:\programdata\AlawarWrapper
2010-10-26 21:37 . 2010-10-28 08:41 -------- d-----w- c:\program files\Hry.cz
2010-10-26 18:12 . 2010-10-25 16:01 149968 ----a-w- c:\users\Roman\AppData\Roaming\Microsoft\Internet Explorer\qipsearchbar.dll
2010-10-26 18:04 . 2010-10-26 18:12 -------- d-----w- c:\program files\QIP 2010
2010-10-19 18:29 . 2010-10-19 18:29 -------- d-----w- c:\program files\Common Files\Skype
2010-10-15 06:50 . 2010-05-05 06:46 363520 ----a-w- c:\windows\system32\StructuredQuery.dll

.
(((((((((((((((((((((((((((((((((((((((( Find3M výpis ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2010-10-19 09:41 . 2009-10-03 06:01 222080 ------w- c:\windows\system32\MpSigStub.exe
2010-08-21 05:32 . 2010-09-15 15:40 316928 ----a-w- c:\windows\system32\spoolsv.exe
.

(((((((((((((((((((((((((((((((((( Spouštěcí body v registru )))))))))))))))))))))))))))))))))))))))))))))
.
.
*Poznámka* prázdné záznamy a legitimní výchozí údaje nejsou zobrazeny.
REGEDIT4

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\egisPSDP]
@="{30A0A3F6-38AC-4C53-BB8B-0D95238E25BA}"
[HKEY_CLASSES_ROOT\CLSID\{30A0A3F6-38AC-4C53-BB8B-0D95238E25BA}]
2008-05-14 15:05 121392 ----a-w- c:\program files\Acer\Empowering Technology\eDataSecurity\x86\PSDProtect.dll

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"ehTray.exe"="c:\windows\ehome\ehTray.exe" [2009-07-14 144384]
"Sidebar"="c:\program files\Windows Sidebar\sidebar.exe" [2009-07-14 1173504]
"Infium"="c:\program files\QIP 2010\qip.exe" [2010-10-25 5828560]
"Google Update"="c:\users\Roman\AppData\Local\Google\Update\GoogleUpdate.exe" [2010-11-04 136176]
"SUPERAntiSpyware"="c:\program files\SUPERAntiSpyware\SUPERAntiSpyware.exe" [2010-10-25 2424560]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"SynTPEnh"="c:\program files\Synaptics\SynTP\SynTPEnh.exe" [2008-04-25 1049896]
"RtHDVCpl"="RtHDVCpl.exe" [2008-05-07 6139904]
"eAudio"="c:\program files\Acer\Empowering Technology\eAudio\eAudio.exe" [2008-05-30 544768]
"eDataSecurity Loader"="c:\program files\Acer\Empowering Technology\eDataSecurity\x86\eDSloader.exe" [2008-05-14 526896]
"ePower_DMC"="c:\program files\Acer\Empowering Technology\ePower\ePower_DMC.exe" [2008-08-01 405504]
"GrooveMonitor"="c:\program files\Microsoft Office\Office12\GrooveMonitor.exe" [2008-10-25 31072]
"IAAnotif"="c:\program files\Intel\Intel Matrix Storage Manager\iaanotif.exe" [2008-07-20 182808]
"PLFSetI"="c:\windows\PLFSetI.exe" [2007-10-23 200704]
"WarReg_PopUp"="c:\program files\Acer\WR_PopUp\WarReg_PopUp.exe" [2008-01-29 303104]
"ZPdtWzdVitaKey MC3000"="c:\program files\Acer\Acer Bio Protection\PdtWzd.exe" [2008-09-15 3676160]
"LManager"="c:\progra~1\LAUNCH~1\QtZgAcer.EXE" [2008-06-04 817672]
"SunJavaUpdateSched"="c:\program files\Common Files\Java\Java Update\jusched.exe" [2010-02-18 248040]
"TkBellExe"="c:\program files\Common Files\Real\Update_OB\realsched.exe" [2010-04-12 202256]
"Adobe Reader Speed Launcher"="c:\program files\Adobe\Reader 8.0\Reader\Reader_sl.exe" [2010-09-24 40368]
"Adobe ARM"="c:\program files\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2010-09-21 932288]
"avast5"="c:\program files\Alwil Software\Avast5\avastUI.exe" [2010-09-07 2838912]

c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\
Acer VCM.lnk - c:\program files\Acer\Acer VCM\AcerVCM.exe [2008-9-15 1216512]
Bluetooth.lnk - c:\program files\WIDCOMM\Bluetooth Software\BTTray.exe [2008-4-23 727592]

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorAdmin"= 5 (0x5)
"ConsentPromptBehaviorUser"= 2 (0x2)
"EnableUIADesktopToggle"= 0 (0x0)
"DisableCAD"= 1 (0x1)

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\AWinNotifyVitaKey MC3000]
2008-09-15 13:14 3197952 ----a-w- c:\program files\Acer\Acer Bio Protection\WinNotify.dll

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\spba]
2008-03-25 13:24 567560 ----a-w- c:\program files\Common Files\SPBA\homefus2.dll

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\drivers32]
"aux"=wdmaud.drv

R0 sptd;sptd;c:\windows\System32\Drivers\sptd.sys [2009-11-06 721904]
R3 WatAdminSvc;Služba Technologie aktivace Windows;c:\windows\system32\Wat\WatAdminSvc.exe [2010-05-25 1343400]
S0 AlfaFF;AlfaFF File System mini-filter;c:\windows\system32\Drivers\AlfaFF.sys [2008-09-15 42608]
S1 aswSP;aswSP; [x]
S1 HWiNFO32;HWiNFO32 Kernel Driver;c:\program files\HWiNFO32\HWiNFO32.SYS [2009-07-16 19064]
S1 SASDIFSV;SASDIFSV;c:\program files\SUPERAntiSpyware\SASDIFSV.SYS [2010-02-17 12872]
S1 SASKUTIL;SASKUTIL;c:\program files\SUPERAntiSpyware\SASKUTIL.SYS [2010-05-10 67656]
S2 aswFsBlk;aswFsBlk; [x]
S2 aswMonFlt;aswMonFlt;c:\windows\system32\drivers\aswMonFlt.sys [2010-09-07 50768]
S2 ETService;Empowering Technology Service;c:\program files\Acer\Empowering Technology\Service\ETService.exe [2008-06-02 24576]
S2 IGBASVC;iGroupTec Service;c:\program files\Acer\Acer Bio Protection\BASVC.exe [2008-09-15 3602432]
S2 RS_Service;Raw Socket Service;c:\program files\Acer\Acer VCM\RS_Service.exe [2008-01-10 233472]
S3 netw5v32;Intel(R) Wireless WiFi Link 5000 Series – ovladač adaptéru pro 32bitový systém Windows Vista;c:\windows\system32\DRIVERS\netw5v32.sys [2009-07-13 4231168]
S3 NVHDA;Service for NVIDIA High Definition Audio Driver;c:\windows\system32\drivers\nvhda32v.sys [2008-06-25 44064]
S3 winbondcir;Winbond IR Transceiver;c:\windows\system32\DRIVERS\winbondcir.sys [2007-03-28 43008]

.
Obsah adresáře 'Naplánované úlohy'

2010-11-04 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2142419465-1506464550-487586197-1000Core.job
- c:\users\Roman\AppData\Local\Google\Update\GoogleUpdate.exe [2010-11-04 14:23]

2010-11-06 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2142419465-1506464550-487586197-1000UA.job
- c:\users\Roman\AppData\Local\Google\Update\GoogleUpdate.exe [2010-11-04 14:23]
.
.
------- Doplňkový sken -------
.
uStart Page = hxxp://qip.ru
uDefault_Search_URL = hxxp://search.qip.ru
mStart Page = hxxp://cs.intl.acer.yahoo.com
uInternet Settings,ProxyServer = http=127.0.0.1:25541
uSearchAssistant = hxxp://search.qip.ru/ie
IE: &Clean Traces - c:\program files\DAP\Privacy Package\dapcleanerie.htm
IE: &Download with &DAP - c:\program files\DAP\dapextie.htm
IE: Download &all with DAP - c:\program files\DAP\dapextie2.htm
IE: E&xportovat do aplikace Microsoft Excel - c:\progra~1\MICROS~2\Office10\EXCEL.EXE/3000
IE: Send image to &Bluetooth Device... - c:\program files\WIDCOMM\Bluetooth Software\btsendto_ie_ctx.htm
IE: Send page to &Bluetooth Device... - c:\program files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
.
- - - - NEPLATNÉ POLOŽKY ODSTRANĚNÉ Z REGISTRU - - - -

AddRemove-QipGuard - c:\users\Roman\AppData\Roaming\QipGuard\QipGuard.exe


.
--------------------- ZAMKNUTÉ KLÍČE V REGISTRU ---------------------

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0000\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0001\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0002\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0003\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\PCW\Security]
@Denied: (Full) (Everyone)
.
--------------------- Knihovny navázané na běžící procesy ---------------------

- - - - - - - > 'Explorer.exe'(2192)
c:\program files\Acer\Empowering Technology\eDataSecurity\x86\PSDProtect.dll
c:\program files\Acer\Empowering Technology\eDataSecurity\x86\sysenv.dll
c:\windows\system32\btncopy.dll
.
------------------------ Jiné spuštené procesy ------------------------
.
c:\program files\Alwil Software\Avast5\AvastSvc.exe
c:\program files\Common Files\SPBA\upeksvr.exe
c:\program files\Acer\Acer Bio Protection\CompPtcVUI.exe
c:\program files\Acer\Empowering Technology\eDataSecurity\x86\eDSService.exe
c:\windows\system32\taskhost.exe
c:\program files\Common Files\LightScribe\LSSrvc.exe
c:\acer\Mobility Center\MobilityService.exe
c:\windows\system32\DRIVERS\xaudio.exe
c:\program files\Intel\Intel Matrix Storage Manager\IAANTMon.exe
c:\windows\system32\conhost.exe
c:\windows\system32\sppsvc.exe
c:\\?\c:\windows\system32\wbem\WMIADAP.EXE
.
**************************************************************************
.
Celkový čas: 2010-11-06 16:17:04 - počítač byl restartován
ComboFix-quarantined-files.txt 2010-11-06 15:17

Před spuštěním: Volných bajtů: 79 056 494 592
Po spuštění: Volných bajtů: 78 583 238 656

- - End Of File - - 9158C52784110B0FAE2957F49E26C060

Pri tejto akcii je nutné mať ComboFix na ploche.

Vypni>FIREWALL>Antivir>Antispyware>vsetko rezidentne.

Otvor Notepad (Poznámkový blok) a zkopíruj do neho celý zeleny tex: Potom klik na Subor -> Uložiť ako.. .. -> Ako je Názov souboru tak do toho riadku napiš:CFScript.txt
Typ súboru tak tam vyberies *všetky súbory
A ulož ho na plochu.> Pozor CFScript.txt>Neotvarat a nemoze byt ani>CFScript.txt.txt A Urobis Toto :


Po skonceni skenu vlož log čo ComboFix vytvorí

všechno jsem udělal podle návodu, ale když zkouším přetáhnout ten CFScript.txt nad combofix, tak mi jen vyběhne tato hláška: Pokus použít neplatnou operaci na klíč registru, který je oznažen pro odstranění.

no , preto ze ty otvaras CFScript a tak chces vlozit do combofixu, no nic nebudeme spekulovat,
1::zmaz tvoj CFScript.txt z plochy,
2:stiahni si tento, na plochu:
http://leteckaposta.cz/589486754
3:klikni na start-klikni na RUN-a skopiruj si tento prikaz do okna:
"%userprofile%\Desktop\ComboFix.exe" "%userprofile%\Desktop\CFScript.txt"


klikni na ok, a cakaj na log.

udělal jsem to podle návodu a opět vyběhla stejná hláška

konkrétně to vyhazuje:

C:\Users\Roman\Desktop\ComboFix.exe

Pokus použít neplatnou operaci na klíč registru, který je oznažen pro odstranění.

restartni pocitac a zopakuj akciu.

takže tady je log:

ComboFix 10-11-05.06 - Roman 07.11.2010 16:47:58.2.2 - x86
Microsoft Windows 7 Home Premium 6.1.7600.0.1250.420.1029.18.3067.2187 [GMT 1:00]
Spuštěný z: c:\users\Roman\Desktop\ComboFix.exe
Použité ovládací přepínače :: c:\users\Roman\Desktop\CFScript.txt
SP: SUPERAntiSpyware *disabled* (Updated) {222A897C-5018-402e-943F-7E7AC8560DA7}
* Vytvořen nový Bod Obnovení
.

((((((((((((((((((((((((((((((((((((((( Ostatní výmazy )))))))))))))))))))))))))))))))))))))))))))))))))
.

c:\programdata\Spybot - Search & Destroy
c:\programdata\Spybot - Search & Destroy\Logs\Fixes.101106-1300.txt
c:\programdata\Spybot - Search & Destroy\Logs\Fixes.101106-1347.txt
c:\programdata\Spybot - Search & Destroy\Logs\Checks.101106-1224.log
c:\programdata\Spybot - Search & Destroy\Logs\Checks.101106-1255.txt
c:\programdata\Spybot - Search & Destroy\Logs\Checks.101106-1306.log
c:\programdata\Spybot - Search & Destroy\Logs\Checks.101106-1306.txt
c:\programdata\Spybot - Search & Destroy\Logs\Checks.101106-1315.log
c:\programdata\Spybot - Search & Destroy\Logs\Checks.101106-1347.txt
c:\programdata\Spybot - Search & Destroy\Logs\Checks.101106-1455.log
c:\programdata\Spybot - Search & Destroy\Logs\Checks.101106-1455.txt
c:\programdata\Spybot - Search & Destroy\Logs\Checks.101106-1500.log
c:\programdata\Spybot - Search & Destroy\Logs\Checks.101106-1528.txt
c:\programdata\Spybot - Search & Destroy\Logs\Update downloads.log
c:\programdata\Spybot - Search & Destroy\Recovery\FraudCleanUpAntivirus.zip
c:\programdata\Spybot - Search & Destroy\Recovery\FraudCleanUpAntivirus1.zip
c:\programdata\Spybot - Search & Destroy\Recovery\FraudCleanUpAntivirus2.zip
c:\programdata\Spybot - Search & Destroy\Recovery\FraudCleanUpAntivirus3.zip
c:\programdata\Spybot - Search & Destroy\Recovery\FraudCleanUpAntivirus4.zip
c:\programdata\Spybot - Search & Destroy\Recovery\FraudQIPGuard.zip
c:\programdata\Spybot - Search & Destroy\Recovery\FraudQIPGuard1.zip
c:\programdata\Spybot - Search & Destroy\Recovery\FraudQIPGuard2.zip
c:\programdata\Spybot - Search & Destroy\Recovery\WinDelfuv.zip
c:\programdata\Spybot - Search & Destroy\Recovery\WinDelfuv1.zip
c:\programdata\Spybot - Search & Destroy\Recovery\WinDelfuv10.zip
c:\programdata\Spybot - Search & Destroy\Recovery\WinDelfuv100.zip
c:\programdata\Spybot - Search & Destroy\Recovery\WinDelfuv101.zip
c:\programdata\Spybot - Search & Destroy\Recovery\WinDelfuv11.zip
c:\programdata\Spybot - Search & Destroy\Recovery\WinDelfuv12.zip
c:\programdata\Spybot - Search & Destroy\Recovery\WinDelfuv13.zip
c:\programdata\Spybot - Search & Destroy\Recovery\WinDelfuv14.zip
c:\programdata\Spybot - Search & Destroy\Recovery\WinDelfuv15.zip
c:\programdata\Spybot - Search & Destroy\Recovery\WinDelfuv16.zip
c:\programdata\Spybot - Search & Destroy\Recovery\WinDelfuv17.zip
c:\programdata\Spybot - Search & Destroy\Recovery\WinDelfuv18.zip
c:\programdata\Spybot - Search & Destroy\Recovery\WinDelfuv19.zip
c:\programdata\Spybot - Search & Destroy\Recovery\WinDelfuv2.zip
c:\programdata\Spybot - Search & Destroy\Recovery\WinDelfuv20.zip
c:\programdata\Spybot - Search & Destroy\Recovery\WinDelfuv21.zip
c:\programdata\Spybot - Search & Destroy\Recovery\WinDelfuv22.zip
c:\programdata\Spybot - Search & Destroy\Recovery\WinDelfuv23.zip
c:\programdata\Spybot - Search & Destroy\Recovery\WinDelfuv24.zip
c:\programdata\Spybot - Search & Destroy\Recovery\WinDelfuv25.zip
c:\programdata\Spybot - Search & Destroy\Recovery\WinDelfuv26.zip
c:\programdata\Spybot - Search & Destroy\Recovery\WinDelfuv27.zip
c:\programdata\Spybot - Search & Destroy\Recovery\WinDelfuv28.zip
c:\programdata\Spybot - Search & Destroy\Recovery\WinDelfuv29.zip
c:\programdata\Spybot - Search & Destroy\Recovery\WinDelfuv3.zip
c:\programdata\Spybot - Search & Destroy\Recovery\WinDelfuv30.zip
c:\programdata\Spybot - Search & Destroy\Recovery\WinDelfuv31.zip
c:\programdata\Spybot - Search & Destroy\Recovery\WinDelfuv32.zip
c:\programdata\Spybot - Search & Destroy\Recovery\WinDelfuv33.zip
c:\programdata\Spybot - Search & Destroy\Recovery\WinDelfuv34.zip
c:\programdata\Spybot - Search & Destroy\Recovery\WinDelfuv35.zip
c:\programdata\Spybot - Search & Destroy\Recovery\WinDelfuv36.zip
c:\programdata\Spybot - Search & Destroy\Recovery\WinDelfuv37.zip
c:\programdata\Spybot - Search & Destroy\Recovery\WinDelfuv38.zip
c:\programdata\Spybot - Search & Destroy\Recovery\WinDelfuv39.zip
c:\programdata\Spybot - Search & Destroy\Recovery\WinDelfuv4.zip
c:\programdata\Spybot - Search & Destroy\Recovery\WinDelfuv40.zip
c:\programdata\Spybot - Search & Destroy\Recovery\WinDelfuv41.zip
c:\programdata\Spybot - Search & Destroy\Recovery\WinDelfuv42.zip
c:\programdata\Spybot - Search & Destroy\Recovery\WinDelfuv43.zip
c:\programdata\Spybot - Search & Destroy\Recovery\WinDelfuv44.zip
c:\programdata\Spybot - Search & Destroy\Recovery\WinDelfuv45.zip
c:\programdata\Spybot - Search & Destroy\Recovery\WinDelfuv46.zip
c:\programdata\Spybot - Search & Destroy\Recovery\WinDelfuv47.zip
c:\programdata\Spybot - Search & Destroy\Recovery\WinDelfuv48.zip
c:\programdata\Spybot - Search & Destroy\Recovery\WinDelfuv49.zip
c:\programdata\Spybot - Search & Destroy\Recovery\WinDelfuv5.zip
c:\programdata\Spybot - Search & Destroy\Recovery\WinDelfuv50.zip
c:\programdata\Spybot - Search & Destroy\Recovery\WinDelfuv51.zip
c:\programdata\Spybot - Search & Destroy\Recovery\WinDelfuv52.zip
c:\programdata\Spybot - Search & Destroy\Recovery\WinDelfuv53.zip
c:\programdata\Spybot - Search & Destroy\Recovery\WinDelfuv54.zip
c:\programdata\Spybot - Search & Destroy\Recovery\WinDelfuv55.zip
c:\programdata\Spybot - Search & Destroy\Recovery\WinDelfuv56.zip
c:\programdata\Spybot - Search & Destroy\Recovery\WinDelfuv57.zip
c:\programdata\Spybot - Search & Destroy\Recovery\WinDelfuv58.zip
c:\programdata\Spybot - Search & Destroy\Recovery\WinDelfuv59.zip
c:\programdata\Spybot - Search & Destroy\Recovery\WinDelfuv6.zip
c:\programdata\Spybot - Search & Destroy\Recovery\WinDelfuv60.zip
c:\programdata\Spybot - Search & Destroy\Recovery\WinDelfuv61.zip
c:\programdata\Spybot - Search & Destroy\Recovery\WinDelfuv62.zip
c:\programdata\Spybot - Search & Destroy\Recovery\WinDelfuv63.zip
c:\programdata\Spybot - Search & Destroy\Recovery\WinDelfuv64.zip
c:\programdata\Spybot - Search & Destroy\Recovery\WinDelfuv65.zip
c:\programdata\Spybot - Search & Destroy\Recovery\WinDelfuv66.zip
c:\programdata\Spybot - Search & Destroy\Recovery\WinDelfuv67.zip
c:\programdata\Spybot - Search & Destroy\Recovery\WinDelfuv68.zip
c:\programdata\Spybot - Search & Destroy\Recovery\WinDelfuv69.zip
c:\programdata\Spybot - Search & Destroy\Recovery\WinDelfuv7.zip
c:\programdata\Spybot - Search & Destroy\Recovery\WinDelfuv70.zip
c:\programdata\Spybot - Search & Destroy\Recovery\WinDelfuv71.zip
c:\programdata\Spybot - Search & Destroy\Recovery\WinDelfuv72.zip
c:\programdata\Spybot - Search & Destroy\Recovery\WinDelfuv73.zip
c:\programdata\Spybot - Search & Destroy\Recovery\WinDelfuv74.zip
c:\programdata\Spybot - Search & Destroy\Recovery\WinDelfuv75.zip
c:\programdata\Spybot - Search & Destroy\Recovery\WinDelfuv76.zip
c:\programdata\Spybot - Search & Destroy\Recovery\WinDelfuv77.zip
c:\programdata\Spybot - Search & Destroy\Recovery\WinDelfuv78.zip
c:\programdata\Spybot - Search & Destroy\Recovery\WinDelfuv79.zip
c:\programdata\Spybot - Search & Destroy\Recovery\WinDelfuv8.zip
c:\programdata\Spybot - Search & Destroy\Recovery\WinDelfuv80.zip
c:\programdata\Spybot - Search & Destroy\Recovery\WinDelfuv81.zip
c:\programdata\Spybot - Search & Destroy\Recovery\WinDelfuv82.zip
c:\programdata\Spybot - Search & Destroy\Recovery\WinDelfuv83.zip
c:\programdata\Spybot - Search & Destroy\Recovery\WinDelfuv84.zip
c:\programdata\Spybot - Search & Destroy\Recovery\WinDelfuv85.zip
c:\programdata\Spybot - Search & Destroy\Recovery\WinDelfuv86.zip
c:\programdata\Spybot - Search & Destroy\Recovery\WinDelfuv87.zip
c:\programdata\Spybot - Search & Destroy\Recovery\WinDelfuv88.zip
c:\programdata\Spybot - Search & Destroy\Recovery\WinDelfuv89.zip
c:\programdata\Spybot - Search & Destroy\Recovery\WinDelfuv9.zip
c:\programdata\Spybot - Search & Destroy\Recovery\WinDelfuv90.zip
c:\programdata\Spybot - Search & Destroy\Recovery\WinDelfuv91.zip
c:\programdata\Spybot - Search & Destroy\Recovery\WinDelfuv92.zip
c:\programdata\Spybot - Search & Destroy\Recovery\WinDelfuv93.zip
c:\programdata\Spybot - Search & Destroy\Recovery\WinDelfuv94.zip
c:\programdata\Spybot - Search & Destroy\Recovery\WinDelfuv95.zip
c:\programdata\Spybot - Search & Destroy\Recovery\WinDelfuv96.zip
c:\programdata\Spybot - Search & Destroy\Recovery\WinDelfuv97.zip
c:\programdata\Spybot - Search & Destroy\Recovery\WinDelfuv98.zip
c:\programdata\Spybot - Search & Destroy\Recovery\WinDelfuv99.zip

.
((((((((((((((((((((((((( Soubory vytvořené od 2010-10-07 do 2010-11-07 )))))))))))))))))))))))))))))))
.

2010-11-07 16:15 . 2010-11-07 16:17 -------- d-----w- c:\users\Roman\AppData\Local\temp
2010-11-07 16:15 . 2010-11-07 16:15 -------- d-----w- c:\users\Rom\AppData\Local\temp
2010-11-07 16:15 . 2010-11-07 16:15 -------- d-----w- c:\users\Default\AppData\Local\temp
2010-11-06 14:31 . 2010-11-06 14:31 -------- d-----w- c:\program files\CCleaner
2010-11-06 13:30 . 2010-11-06 13:30 -------- d-----w- c:\program files\trend micro
2010-11-06 13:30 . 2010-11-06 13:30 -------- d-----w- C:\rsit
2010-11-06 11:19 . 2010-11-06 11:19 -------- d-----w- c:\users\Roman\AppData\Roaming\SUPERAntiSpyware.com
2010-11-06 11:19 . 2010-11-06 11:19 -------- d-----w- c:\programdata\SUPERAntiSpyware.com
2010-11-06 11:19 . 2010-11-06 11:19 -------- d-----w- c:\program files\SUPERAntiSpyware
2010-11-06 11:18 . 2010-11-06 14:31 -------- d-----w- c:\program files\Spybot - Search & Destroy
2010-11-05 15:54 . 2010-10-07 23:21 6146896 ----a-w- c:\programdata\Microsoft\Windows Defender\Definition Updates\{62D8DD48-EDF5-44BD-903A-23287818FB86}\mpengine.dll
2010-11-04 14:23 . 2010-11-04 14:24 -------- d-----w- c:\users\Roman\AppData\Local\Google
2010-11-04 14:23 . 2010-11-04 14:23 -------- d-----w- c:\users\Roman\AppData\Local\Deployment
2010-11-04 14:23 . 2010-11-04 14:23 -------- d-----w- c:\users\Roman\AppData\Local\Apps
2010-11-04 14:08 . 2010-09-07 15:47 17744 ----a-w- c:\windows\system32\drivers\aswFsBlk.sys
2010-11-04 14:08 . 2010-09-07 15:52 165584 ----a-w- c:\windows\system32\drivers\aswSP.sys
2010-11-04 14:08 . 2010-09-07 15:52 46672 ----a-w- c:\windows\system32\drivers\aswTdi.sys
2010-11-04 14:08 . 2010-09-07 15:47 23376 ----a-w- c:\windows\system32\drivers\aswRdr.sys
2010-11-04 14:08 . 2010-09-07 15:47 50768 ----a-w- c:\windows\system32\drivers\aswMonFlt.sys
2010-11-04 14:08 . 2010-09-07 16:12 38848 ----a-w- c:\windows\avastSS.scr
2010-11-04 14:08 . 2010-09-07 16:11 167592 ----a-w- c:\windows\system32\aswBoot.exe
2010-11-04 14:08 . 2010-11-04 14:08 -------- d-----w- c:\programdata\Alwil Software
2010-11-04 14:08 . 2010-11-04 14:08 -------- d-----w- c:\program files\Alwil Software
2010-11-04 13:26 . 2010-11-04 14:02 -------- d-sh--w- c:\programdata\SMNWE
2010-10-27 10:05 . 2010-08-04 06:18 641536 ----a-w- c:\windows\system32\CPFilters.dll
2010-10-27 10:05 . 2010-08-04 06:17 417792 ----a-w- c:\windows\system32\msdri.dll
2010-10-27 10:05 . 2010-08-04 06:15 204288 ----a-w- c:\windows\system32\MSNP.ax
2010-10-27 10:05 . 2010-08-04 06:15 199680 ----a-w- c:\windows\system32\mpg2splt.ax
2010-10-27 10:04 . 2010-07-13 05:22 26504 ----a-w- c:\windows\system32\drivers\Diskdump.sys
2010-10-26 21:38 . 2010-10-26 21:38 -------- d-----w- c:\users\Roman\AppData\Roaming\CasualForge
2010-10-26 21:38 . 2010-10-26 21:38 -------- d-----w- c:\programdata\CasualForge
2010-10-26 21:38 . 2010-10-26 21:38 -------- d-----w- c:\programdata\AlawarWrapper
2010-10-26 21:37 . 2010-10-28 08:41 -------- d-----w- c:\program files\Hry.cz
2010-10-26 18:12 . 2010-10-25 16:01 149968 ----a-w- c:\users\Roman\AppData\Roaming\Microsoft\Internet Explorer\qipsearchbar.dll
2010-10-26 18:04 . 2010-10-26 18:12 -------- d-----w- c:\program files\QIP 2010
2010-10-19 18:29 . 2010-10-19 18:29 -------- d-----w- c:\program files\Common Files\Skype
2010-10-15 06:50 . 2010-05-05 06:46 363520 ----a-w- c:\windows\system32\StructuredQuery.dll

.
(((((((((((((((((((((((((((((((((((((((( Find3M výpis ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2010-10-19 09:41 . 2009-10-03 06:01 222080 ------w- c:\windows\system32\MpSigStub.exe
2010-08-21 05:32 . 2010-09-15 15:40 316928 ----a-w- c:\windows\system32\spoolsv.exe
.

(((((((((((((((((((((((((((((((((( Spouštěcí body v registru )))))))))))))))))))))))))))))))))))))))))))))
.
.
*Poznámka* prázdné záznamy a legitimní výchozí údaje nejsou zobrazeny.
REGEDIT4

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\egisPSDP]
@="{30A0A3F6-38AC-4C53-BB8B-0D95238E25BA}"
[HKEY_CLASSES_ROOT\CLSID\{30A0A3F6-38AC-4C53-BB8B-0D95238E25BA}]
2008-05-14 15:05 121392 ----a-w- c:\program files\Acer\Empowering Technology\eDataSecurity\x86\PSDProtect.dll

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"ehTray.exe"="c:\windows\ehome\ehTray.exe" [2009-07-14 144384]
"Sidebar"="c:\program files\Windows Sidebar\sidebar.exe" [2009-07-14 1173504]
"Infium"="c:\program files\QIP 2010\qip.exe" [2010-10-25 5828560]
"Google Update"="c:\users\Roman\AppData\Local\Google\Update\GoogleUpdate.exe" [2010-11-04 136176]
"SUPERAntiSpyware"="c:\program files\SUPERAntiSpyware\SUPERAntiSpyware.exe" [2010-10-25 2424560]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"SynTPEnh"="c:\program files\Synaptics\SynTP\SynTPEnh.exe" [2008-04-25 1049896]
"RtHDVCpl"="RtHDVCpl.exe" [2008-05-07 6139904]
"eAudio"="c:\program files\Acer\Empowering Technology\eAudio\eAudio.exe" [2008-05-30 544768]
"eDataSecurity Loader"="c:\program files\Acer\Empowering Technology\eDataSecurity\x86\eDSloader.exe" [2008-05-14 526896]
"ePower_DMC"="c:\program files\Acer\Empowering Technology\ePower\ePower_DMC.exe" [2008-08-01 405504]
"GrooveMonitor"="c:\program files\Microsoft Office\Office12\GrooveMonitor.exe" [2008-10-25 31072]
"IAAnotif"="c:\program files\Intel\Intel Matrix Storage Manager\iaanotif.exe" [2008-07-20 182808]
"PLFSetI"="c:\windows\PLFSetI.exe" [2007-10-23 200704]
"WarReg_PopUp"="c:\program files\Acer\WR_PopUp\WarReg_PopUp.exe" [2008-01-29 303104]
"ZPdtWzdVitaKey MC3000"="c:\program files\Acer\Acer Bio Protection\PdtWzd.exe" [2008-09-15 3676160]
"LManager"="c:\progra~1\LAUNCH~1\QtZgAcer.EXE" [2008-06-04 817672]
"SunJavaUpdateSched"="c:\program files\Common Files\Java\Java Update\jusched.exe" [2010-02-18 248040]
"TkBellExe"="c:\program files\Common Files\Real\Update_OB\realsched.exe" [2010-04-12 202256]
"Adobe Reader Speed Launcher"="c:\program files\Adobe\Reader 8.0\Reader\Reader_sl.exe" [2010-09-24 40368]
"Adobe ARM"="c:\program files\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2010-09-21 932288]
"avast5"="c:\program files\Alwil Software\Avast5\avastUI.exe" [2010-09-07 2838912]

c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\
Acer VCM.lnk - c:\program files\Acer\Acer VCM\AcerVCM.exe [2008-9-15 1216512]
Bluetooth.lnk - c:\program files\WIDCOMM\Bluetooth Software\BTTray.exe [2008-4-23 727592]

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorAdmin"= 5 (0x5)
"ConsentPromptBehaviorUser"= 2 (0x2)
"EnableUIADesktopToggle"= 0 (0x0)
"DisableCAD"= 1 (0x1)

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\AWinNotifyVitaKey MC3000]
2008-09-15 13:14 3197952 ----a-w- c:\program files\Acer\Acer Bio Protection\WinNotify.dll

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\spba]
2008-03-25 13:24 567560 ----a-w- c:\program files\Common Files\SPBA\homefus2.dll

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\drivers32]
"aux"=wdmaud.drv

R0 sptd;sptd;c:\windows\System32\Drivers\sptd.sys [2009-11-06 721904]
R3 WatAdminSvc;Služba Technologie aktivace Windows;c:\windows\system32\Wat\WatAdminSvc.exe [2010-05-25 1343400]
S0 AlfaFF;AlfaFF File System mini-filter;c:\windows\system32\Drivers\AlfaFF.sys [2008-09-15 42608]
S1 aswSP;aswSP; [x]
S1 HWiNFO32;HWiNFO32 Kernel Driver;c:\program files\HWiNFO32\HWiNFO32.SYS [2009-07-16 19064]
S1 SASDIFSV;SASDIFSV;c:\program files\SUPERAntiSpyware\SASDIFSV.SYS [2010-02-17 12872]
S1 SASKUTIL;SASKUTIL;c:\program files\SUPERAntiSpyware\SASKUTIL.SYS [2010-05-10 67656]
S2 aswFsBlk;aswFsBlk; [x]
S2 aswMonFlt;aswMonFlt;c:\windows\system32\drivers\aswMonFlt.sys [2010-09-07 50768]
S2 ETService;Empowering Technology Service;c:\program files\Acer\Empowering Technology\Service\ETService.exe [2008-06-02 24576]
S2 IGBASVC;iGroupTec Service;c:\program files\Acer\Acer Bio Protection\BASVC.exe [2008-09-15 3602432]
S2 RS_Service;Raw Socket Service;c:\program files\Acer\Acer VCM\RS_Service.exe [2008-01-10 233472]
S3 netw5v32;Intel(R) Wireless WiFi Link 5000 Series – ovladač adaptéru pro 32bitový systém Windows Vista;c:\windows\system32\DRIVERS\netw5v32.sys [2009-07-13 4231168]
S3 NVHDA;Service for NVIDIA High Definition Audio Driver;c:\windows\system32\drivers\nvhda32v.sys [2008-06-25 44064]
S3 winbondcir;Winbond IR Transceiver;c:\windows\system32\DRIVERS\winbondcir.sys [2007-03-28 43008]

.
Obsah adresáře 'Naplánované úlohy'

2010-11-07 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2142419465-1506464550-487586197-1000Core.job
- c:\users\Roman\AppData\Local\Google\Update\GoogleUpdate.exe [2010-11-04 14:23]

2010-11-07 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2142419465-1506464550-487586197-1000UA.job
- c:\users\Roman\AppData\Local\Google\Update\GoogleUpdate.exe [2010-11-04 14:23]
.
.
------- Doplňkový sken -------
.
mStart Page = hxxp://cs.intl.acer.yahoo.com
uSearchAssistant = hxxp://search.qip.ru/ie
IE: &Clean Traces - c:\program files\DAP\Privacy Package\dapcleanerie.htm
IE: &Download with &DAP - c:\program files\DAP\dapextie.htm
IE: Download &all with DAP - c:\program files\DAP\dapextie2.htm
IE: E&xportovat do aplikace Microsoft Excel - c:\progra~1\MICROS~2\Office10\EXCEL.EXE/3000
IE: Send image to &Bluetooth Device... - c:\program files\WIDCOMM\Bluetooth Software\btsendto_ie_ctx.htm
IE: Send page to &Bluetooth Device... - c:\program files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
.
.
--------------------- Knihovny navázané na běžící procesy ---------------------

- - - - - - - > 'Explorer.exe'(3744)
c:\program files\Acer\Empowering Technology\eDataSecurity\x86\PSDProtect.dll
c:\program files\Acer\Empowering Technology\eDataSecurity\x86\sysenv.dll
c:\windows\system32\btncopy.dll
.
------------------------ Jiné spuštené procesy ------------------------
.
c:\program files\Alwil Software\Avast5\AvastSvc.exe
c:\program files\Common Files\SPBA\upeksvr.exe
c:\program files\Acer\Acer Bio Protection\CompPtcVUI.exe
c:\windows\system32\taskhost.exe
c:\program files\Acer\Empowering Technology\eDataSecurity\x86\eDSService.exe
c:\program files\Common Files\LightScribe\LSSrvc.exe
c:\acer\Mobility Center\MobilityService.exe
c:\windows\system32\DRIVERS\xaudio.exe
c:\program files\Intel\Intel Matrix Storage Manager\IAANTMon.exe
c:\windows\system32\conhost.exe
c:\windows\system32\sppsvc.exe
c:\\?\c:\windows\system32\wbem\WMIADAP.EXE
.
**************************************************************************
.
Celkový čas: 2010-11-07 17:22:39 - počítač byl restartován
ComboFix-quarantined-files.txt 2010-11-07 16:22
ComboFix2.txt 2010-11-06 15:17

Před spuštěním: Volných bajtů: 78 634 196 992
Po spuštění: Volných bajtů: 78 434 947 072

- - End Of File - - 6AEA4882DDEE4B1F668CD38043F3332E

ok, premenuj ikonu combofixu na uninstall
a spust, combofix sa odinstaluje, a napis ako sa chova pc.

zdá se že všechno jede jak má hlavní problém byl ten, že mi internetový porhlížeč neotvíral stránky, ale přitom qip normálně jel, teď všechno frčí, velký dík za rady a trpělivost

nemas zaco.