VIRY.CZ

prosím o kontrolu logu
Nevim co se stalo ale při spuštění jakékoli instalace se mi zobrazí miniaturní okno nebo dlouhe a prázdné .V mozile firefox se logovací řádek,řádek pro heslo a vyhledávánízobrazuje jen asi 3 mm a když do něj chci psát nejde to! viz screeny.
pokud něco ukládám dialog ulození a storno jsou bez popisu
V windows exploreru vse ok!
Děkuji


http://img821.imageshack.us/img821/6356/problem2i.png
http://img840.imageshack.us/img840/7537/problemd.png
http://img197.imageshack.us/img197/1112/problem3r.png









Logfile of random's system information tool 1.08 (written by random/random)
Run by 11 at 2011-02-12 08:56:23
Microsoft Windows 7 Ultimate
System drive C: has 64 GB (52%) free of 123 GB
Total RAM: 3070 MB (55% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 8:56:32, on 12.2.2011
Platform: Windows 7 (WinNT 6.00.3504)
MSIE: Internet Explorer v8.00 (8.00.7600.16722)
Boot mode: Normal

Running processes:
C:\Program Files (x86)\OSCAR Editor X7\OscarEditor.exe
C:\Program Files (x86)\Mozilla Firefox\firefox.exe
C:\Program Files (x86)\Mozilla Firefox\plugin-container.exe
D:\Stažené soubory\spywareblastersetup44.exe
C:\Users\11\AppData\Local\Temp\is-T78J9.tmp\spywareblastersetup44.tmp
C:\Program Files\trend micro\11.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://start.icq.com/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
R3 - URLSearchHook: (no name) - - (no file)
F2 - REG:system.ini: UserInit=userinit.exe
O2 - BHO: FlashGetBHO - {b070d3e3-fec0-47d9-8e8a-99d4eeb3d3b0} - C:\Users\11\AppData\Roaming\FlashGetBHO\FlashGetBHO3.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - D:\Program Files (x86)\java\bin\jp2ssv.dll
O4 - HKCU\..\Run: [OscarEditor] "C:\Program Files (x86)\OSCAR Editor X7\OscarEditor.exe" Minimum
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'NETWORK SERVICE')
O8 - Extra context menu item: Download all by FlashGet3 - C:\Users\11\AppData\Roaming\FlashGetBHO\GetAllUrl.htm
O8 - Extra context menu item: Download by FlashGet3 - C:\Users\11\AppData\Roaming\FlashGetBHO\GetUrl.htm
O15 - Trusted Zone: http://software.kuaiche.com
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~2\COMMON~1\Skype\Skype4COM.dll
O18 - Filter: application/x-ica - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll
O18 - Filter hijack: ica - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll
O23 - Service: Acronis OS Selector Reinstall Service (AcronisOSSReinstallSvc) - Unknown owner - C:\Program Files (x86)\Common Files\Acronis\Acronis Disk Director\oss_reinstall_svc.exe
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)
O23 - Service: ESET HTTP Server (EhttpSrv) - ESET - C:\Program Files\ESET\ESET Smart Security\EHttpSrv.exe
O23 - Service: ESET Service (ekrn) - ESET - C:\Program Files\ESET\ESET Smart Security\x86\ekrn.exe
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)
O23 - Service: GenericMount Helper Service - Symantec - C:\Program Files (x86)\Norton Ghost\Shared\Drivers\GenericMountHelperx64.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files (x86)\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: LiveUpdate - Symantec Corporation - C:\PROGRA~2\Symantec\LIVEUP~1\LUCOMS~1.EXE
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Norton Ghost - Symantec Corporation - C:\Program Files (x86)\Norton Ghost\Agent\VProSvc.exe
O23 - Service: NVIDIA Display Driver Service (nvsvc) - Unknown owner - C:\Windows\system32\nvvsvc.exe (file missing)
O23 - Service: PnkBstrA - Unknown owner - C:\Windows\system32\PnkBstrA.exe
O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: ServiceLayer - Nokia - C:\Program Files (x86)\PC Connectivity Solution\ServiceLayer.exe
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)
O23 - Service: SymSnapService - Symantec - C:\Program Files (x86)\Norton Ghost\Shared\Drivers\SymSnapServicex64.exe
O23 - Service: TeamViewer 6 (TeamViewer6) - TeamViewer GmbH - C:\Program Files (x86)\TeamViewer\Version6\TeamViewer_Service.exe
O23 - Service: TomTomHOMEService - TomTom - C:\Program Files (x86)\TomTom HOME 2\TomTomHOMEService.exe
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)

--
End of file - 7052 bytes

======Listing Processes======

\SystemRoot\System32\smss.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
wininit.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
C:\Windows\system32\services.exe
C:\Windows\system32\lsass.exe
C:\Windows\system32\lsm.exe
winlogon.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Windows\system32\nvvsvc.exe
C:\Windows\system32\svchost.exe -k RPCSS
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k netsvcs
C:\Windows\system32\svchost.exe -k LocalService
C:\Windows\system32\svchost.exe -k NetworkService
"C:\Program Files\NVIDIA Corporation\Display\NvXDSync.exe"
C:\Windows\system32\nvvsvc.exe -session -first
C:\Windows\System32\spoolsv.exe
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
"taskhost.exe"
"C:\Windows\system32\Dwm.exe"
C:\Windows\Explorer.EXE
"C:\Program Files\ESET\ESET Smart Security\x86\ekrn.exe"
"C:\Program Files (x86)\Norton Ghost\Agent\VProSvc.exe"
C:\Windows\SysWOW64\PnkBstrA.exe
C:\Windows\system32\svchost.exe -k imgsvc
"C:\Program Files\ESET\ESET Smart Security\egui.exe" /hide /waitservice
"C:\Program Files (x86)\OSCAR Editor X7\OscarEditor.exe" Minimum
"C:\Program Files (x86)\TeamViewer\Version6\TeamViewer_Service.exe"
"C:\Program Files (x86)\TomTom HOME 2\TomTomHOMEService.exe"
C:\Windows\system32\SearchIndexer.exe /Embedding
C:\Windows\System32\alg.exe
C:\Windows\system32\svchost.exe -k NetworkServiceNetworkRestricted
"C:\Windows\system32\WUDFHost.exe" -HostGUID:{193a1820-d9ac-4997-8c55-be817523f6aa} -IoEventPortName:HostProcess-b75ad43d-aaaf-4c68-b24a-586393dfd4b4 -SystemEventPortName:HostProcess-2d714076-eb0d-40f2-bc6f-a8a7237e7aad -IoCancelEventPortName:HostProcess-631e7b5d-6c2c-4e86-b419-239dcf5be501 -NonStateChangingEventPortName:HostProcess-a474be98-6448-4399-9f3f-1e9f47eb9a38 -ServiceSID:S-1-5-80-2652678385-582572993-1835434367-1344795993-749280709 -LifetimeId:434029e0-a4d7-4500-84b4-41c8eb802776
"C:\Program Files (x86)\Mozilla Firefox\firefox.exe"
"C:\Program Files (x86)\Norton Ghost\Shared\Drivers\SymSnapServicex64.exe"
C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
C:\Windows\System32\svchost.exe -k secsvcs
"C:\Program Files\Windows Media Player\wmpnetwk.exe"
"C:\Program Files (x86)\Mozilla Firefox\plugin-container.exe" --channel=3196.9444280.1961640055 "C:\Windows\SysWOW64\Macromed\Flash\NPSWF32.dll" 3196 plugin \\.\pipe\gecko-crash-server-pipe.3196
"taskhost.exe"
"D:\Stažené soubory\RSITx64.exe"
C:\Windows\system32\wbem\wmiprvse.exe
"D:\Stažené soubory\spywareblastersetup44.exe"
"C:\Users\11\AppData\Local\Temp\is-T78J9.tmp\spywareblastersetup44.tmp" /SL5="$D01FE,2928932,53248,D:\Stažené soubory\spywareblastersetup44.exe"
"D:\Stažené soubory\RSITx64.exe"

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{b070d3e3-fec0-47d9-8e8a-99d4eeb3d3b0}]
FlashGetBHO - C:\Users\11\AppData\Roaming\FlashGetBHO\FlashGetBHO3.dll [2009-12-22 157232]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - D:\Program Files (x86)\java\bin\jp2ssv.dll [2010-11-24 41760]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"egui"=C:\Program Files\ESET\ESET Smart Security\egui.exe [2010-11-18 2919168]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"OscarEditor"=C:\Program Files (x86)\OSCAR Editor X7\OscarEditor.exe [2010-06-24 2625536]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ConnectionCenter]
C:\Program Files (x86)\Citrix\ICA Client\concentr.exe [2010-05-12 300472]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\DAEMON Tools Lite]
D:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe [2010-04-01 357696]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\EADM]
D:\Program Files (x86)\Electronic Arts\EADM\EADMUI.exe [2011-02-03 11509760]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\iTunesHelper]
[]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\LogMeIn Hamachi Ui]
C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe --auto-start []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NokiaMServer]
C:\Program Files (x86)\Common Files\Nokia\MPlatform\NokiaMServer /watchfiles startup []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NokiaOviSuite2]
[]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Norton Ghost 15.0]
C:\Program Files (x86)\Norton Ghost\Agent\VProTray.exe [2010-03-03 2598760]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\PC Suite Tray]
[]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\QuickTime Task]
C:\Program Files (x86)\QuickTime\QTTask.exe [2010-09-08 421888]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\RtHDVCpl]
C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [2010-03-26 10135584]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Skype]
C:\Program Files (x86)\Skype\Phone\Skype.exe [2010-12-03 14944136]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Steam]
[]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SunJavaUpdateSched]
C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [2010-05-14 248552]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\TomTomHOME.exe]
C:\Program Files (x86)\TomTom HOME 2\TomTomHOMERunner.exe [2010-06-24 247144]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^Aktualizovat ESET licenci.lnk]
D:\PROGRA~1\ESET\MiNODLogin\MiNODLogin.exe [2010-10-18 125952]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Users^11^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^OpenOffice.org 3.2.lnk]
C:\PROGRA~2\OpenOffice.org 3\program\quickstart.exe [2010-06-07 1195520]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED}

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=credssp.dll

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorAdmin"=0
"ConsentPromptBehaviorUser"=3
"EnableLUA"=0
"EnableUIADesktopToggle"=0
"PromptOnSecureDesktop"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=145

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoActiveDesktop"=1
"NoActiveDesktopChanges"=1
"ForceActiveDesktopOn"=0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"d:\Program Files (x86)\FlashGet Network\FlashGet 3\FlashGet3.exe"="d:\Program Files (x86)\FlashGet Network\FlashGet 3\FlashGet3.exe:*:Enabled:Flashget3"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*

======List of files/folders created in the last 1 months======

2011-02-12 08:52:37 ----D---- C:\rsit
2011-02-12 08:52:37 ----D---- C:\Program Files\trend micro
2011-02-10 18:26:46 ----A---- C:\Windows\SYSWOW64\PnkBstrB.exe
2011-02-09 16:40:07 ----A---- C:\Windows\system32\ntoskrnl.exe
2011-02-09 16:40:06 ----A---- C:\Windows\SYSWOW64\ntoskrnl.exe
2011-02-09 16:40:06 ----A---- C:\Windows\SYSWOW64\ntdll.dll
2011-02-09 16:40:06 ----A---- C:\Windows\system32\ntdll.dll
2011-02-09 16:40:05 ----A---- C:\Windows\SYSWOW64\ntkrnlpa.exe
2011-02-09 16:40:05 ----A---- C:\Windows\system32\winsrv.dll
2011-02-09 16:40:04 ----A---- C:\Windows\SYSWOW64\atmlib.dll
2011-02-09 16:40:04 ----A---- C:\Windows\SYSWOW64\atmfd.dll
2011-02-09 16:40:04 ----A---- C:\Windows\system32\atmlib.dll
2011-02-09 16:40:04 ----A---- C:\Windows\system32\atmfd.dll
2011-02-09 16:40:03 ----A---- C:\Windows\system32\drivers\dxgmms1.sys
2011-02-09 16:40:03 ----A---- C:\Windows\system32\drivers\dxgkrnl.sys
2011-02-09 16:40:03 ----A---- C:\Windows\system32\cdd.dll
2011-02-09 16:40:02 ----A---- C:\Windows\SYSWOW64\vbscript.dll
2011-02-09 16:40:02 ----A---- C:\Windows\SYSWOW64\jscript.dll
2011-02-09 16:40:02 ----A---- C:\Windows\system32\vbscript.dll
2011-02-09 16:40:02 ----A---- C:\Windows\system32\jscript.dll
2011-02-09 16:39:57 ----A---- C:\Windows\system32\mshtml.dll
2011-02-09 16:39:56 ----A---- C:\Windows\SYSWOW64\mshtml.dll
2011-02-09 16:39:51 ----A---- C:\Windows\SYSWOW64\msfeeds.dll
2011-02-09 16:39:51 ----A---- C:\Windows\SYSWOW64\iedkcs32.dll
2011-02-09 16:39:51 ----A---- C:\Windows\system32\iedkcs32.dll
2011-02-09 16:39:50 ----A---- C:\Windows\SYSWOW64\mstime.dll
2011-02-09 16:39:50 ----A---- C:\Windows\SYSWOW64\mshtmled.dll
2011-02-09 16:39:50 ----A---- C:\Windows\SYSWOW64\msfeedssync.exe
2011-02-09 16:39:50 ----A---- C:\Windows\SYSWOW64\msfeedsbs.dll
2011-02-09 16:39:50 ----A---- C:\Windows\SYSWOW64\licmgr10.dll
2011-02-09 16:39:50 ----A---- C:\Windows\SYSWOW64\iertutil.dll
2011-02-09 16:39:50 ----A---- C:\Windows\SYSWOW64\iepeers.dll
2011-02-09 16:39:50 ----A---- C:\Windows\system32\mstime.dll
2011-02-09 16:39:50 ----A---- C:\Windows\system32\mshtmled.dll
2011-02-09 16:39:50 ----A---- C:\Windows\system32\msfeedssync.exe
2011-02-09 16:39:50 ----A---- C:\Windows\system32\msfeedsbs.dll
2011-02-09 16:39:50 ----A---- C:\Windows\system32\msfeeds.dll
2011-02-09 16:39:50 ----A---- C:\Windows\system32\licmgr10.dll
2011-02-09 16:39:50 ----A---- C:\Windows\system32\iertutil.dll
2011-02-09 16:39:50 ----A---- C:\Windows\system32\iepeers.dll
2011-02-09 16:39:48 ----A---- C:\Windows\system32\win32k.sys
2011-02-09 16:39:47 ----A---- C:\Windows\SYSWOW64\upnp.dll
2011-02-09 16:39:47 ----A---- C:\Windows\system32\urlmon.dll
2011-02-09 16:39:47 ----A---- C:\Windows\system32\upnp.dll
2011-02-09 16:39:47 ----A---- C:\Windows\system32\msxml6.dll
2011-02-09 16:39:47 ----A---- C:\Windows\system32\msxml3.dll
2011-02-09 16:39:46 ----A---- C:\Windows\SYSWOW64\urlmon.dll
2011-02-09 16:39:45 ----A---- C:\Windows\SYSWOW64\wininet.dll
2011-02-09 16:39:45 ----A---- C:\Windows\SYSWOW64\msxml6.dll
2011-02-09 16:39:45 ----A---- C:\Windows\SYSWOW64\msxml3.dll
2011-02-09 16:39:45 ----A---- C:\Windows\system32\wininet.dll
2011-02-09 16:39:45 ----A---- C:\Windows\system32\winhttp.dll
2011-02-09 16:39:45 ----A---- C:\Windows\system32\WebClnt.dll
2011-02-09 16:39:45 ----A---- C:\Windows\system32\davclnt.dll
2011-02-09 16:39:44 ----A---- C:\Windows\SYSWOW64\WebClnt.dll
2011-02-09 16:39:44 ----A---- C:\Windows\SYSWOW64\ieframe.dll
2011-02-09 16:39:44 ----A---- C:\Windows\SYSWOW64\davclnt.dll
2011-02-09 16:39:44 ----A---- C:\Windows\system32\wscapi.dll
2011-02-09 16:39:44 ----A---- C:\Windows\system32\ieframe.dll
2011-02-09 16:39:43 ----A---- C:\Windows\SYSWOW64\wscapi.dll
2011-02-09 16:39:43 ----A---- C:\Windows\SYSWOW64\winhttp.dll
2011-02-09 16:39:43 ----A---- C:\Windows\SYSWOW64\slwga.dll
2011-02-09 16:39:43 ----A---- C:\Windows\system32\wscsvc.dll
2011-02-09 16:39:43 ----A---- C:\Windows\system32\slwga.dll
2011-02-09 16:39:43 ----A---- C:\Windows\system32\kerberos.dll
2011-02-09 16:39:42 ----A---- C:\Windows\SYSWOW64\kerberos.dll
2011-02-02 20:48:57 ----RHD---- C:\Users\11\AppData\Roaming\SecuROM
2011-02-02 20:47:58 ----A---- C:\Windows\SYSWOW64\pbsvc_bc2.exe
2011-02-01 18:12:12 ----D---- C:\Program Files (x86)\Electronic Arts
2011-02-01 18:11:55 ----D---- C:\ProgramData\Electronic Arts
2011-01-31 18:52:38 ----D---- C:\ProgramData\clp
2011-01-30 17:40:21 ----D---- C:\Program Files (x86)\ICQ6Toolbar
2011-01-30 17:40:18 ----D---- C:\ProgramData\ICQ
2011-01-30 17:39:12 ----D---- C:\Program Files (x86)\TeamViewer
2011-01-30 12:15:04 ----A---- C:\Windows\SYSWOW64\GUStrLib.dll
2011-01-30 12:15:04 ----A---- C:\Windows\system32\tmffbdrv.dll
2011-01-30 12:15:04 ----A---- C:\Windows\system32\tmffbcpl.dll
2011-01-30 12:15:04 ----A---- C:\Windows\system32\isrt.dll
2011-01-30 12:15:04 ----A---- C:\Windows\system32\GUStrLib.dll
2011-01-30 12:15:04 ----A---- C:\Windows\system32\_IsRes.dll
2011-01-30 12:15:02 ----A---- C:\Windows\SYSWOW64\tmffbdrv.dll
2011-01-30 12:15:02 ----A---- C:\Windows\SYSWOW64\tmffbcpl.dll
2011-01-29 17:11:33 ----D---- C:\Users\11\AppData\Roaming\Godlike
2011-01-23 17:32:33 ----D---- C:\ProgramData\Trymedia
2011-01-20 19:22:56 ----D---- C:\Program Files\ESET
2011-01-19 18:27:24 ----D---- C:\Program Files (x86)\Microsoft Flight Simulator X
2011-01-19 18:06:26 ----D---- C:\Windows\PCHEALTH
2011-01-19 18:06:01 ----D---- C:\Program Files (x86)\Microsoft Games
2011-01-16 10:02:31 ----A---- C:\Windows\SYSWOW64\Codejock.CommandBars.Unicode.v12.1.1.ocx

======List of files/folders modified in the last 1 months======

2011-02-12 08:56:24 ----D---- C:\Windows\Temp
2011-02-12 08:52:37 ----RD---- C:\Program Files
2011-02-12 08:46:12 ----D---- C:\Windows\System32
2011-02-12 08:46:12 ----D---- C:\Windows\inf
2011-02-12 08:46:12 ----A---- C:\Windows\system32\PerfStringBackup.INI
2011-02-12 08:42:33 ----D---- C:\Windows\system32\config
2011-02-10 22:12:30 ----D---- C:\Users\11\AppData\Roaming\Xfire
2011-02-10 21:54:05 ----D---- C:\Windows\SysWOW64
2011-02-10 20:51:22 ----D---- C:\Users\11\AppData\Roaming\Skype
2011-02-10 19:14:44 ----D---- C:\Users\11\AppData\Roaming\skypePM
2011-02-10 18:35:23 ----D---- C:\Users\11\AppData\Roaming\teamspeak2
2011-02-09 17:38:45 ----D---- C:\Windows\Prefetch
2011-02-09 16:48:51 ----D---- C:\Windows\winsxs
2011-02-09 16:47:26 ----D---- C:\Program Files\Internet Explorer
2011-02-09 16:47:26 ----D---- C:\Program Files (x86)\Internet Explorer
2011-02-09 16:47:25 ----D---- C:\Windows\system32\drivers
2011-02-09 16:40:43 ----D---- C:\Windows\debug
2011-02-09 16:40:43 ----A---- C:\Windows\system32\MRT.exe
2011-02-09 16:39:40 ----D---- C:\Windows\system32\catroot
2011-02-09 16:39:35 ----D---- C:\Windows\system32\catroot2
2011-02-02 20:46:27 ----SHD---- C:\Windows\Installer
2011-02-02 20:45:25 ----RSD---- C:\Windows\assembly
2011-02-02 20:45:15 ----D---- C:\Windows
2011-02-01 18:12:12 ----RD---- C:\Program Files (x86)
2011-02-01 18:11:55 ----HD---- C:\ProgramData
2011-02-01 18:01:06 ----D---- C:\ProgramData\Xfire
2011-01-31 19:51:43 ----D---- C:\Program Files (x86)\Common Files
2011-01-30 17:40:19 ----HD---- C:\Program Files (x86)\InstallShield Installation Information
2011-01-28 21:18:20 ----A---- C:\Windows\SYSWOW64\PnkBstrA.exe
2011-01-28 21:16:33 ----A---- C:\Windows\SYSWOW64\pbsvc.exe
2011-01-28 21:14:41 ----D---- C:\Program Files (x86)\Mozilla Firefox
2011-01-28 16:26:53 ----D---- C:\Users\11\AppData\Roaming\vlc
2011-01-25 17:09:30 ----D---- C:\Windows\system32\Tasks
2011-01-20 19:23:16 ----D---- C:\Windows\system32\DriverStore
2011-01-20 19:14:37 ----D---- C:\Windows\pss
2011-01-19 18:13:43 ----SD---- C:\ProgramData\Microsoft
2011-01-19 18:09:32 ----RSD---- C:\Windows\Fonts
2011-01-19 18:09:26 ----SD---- C:\Users\11\AppData\Roaming\Microsoft
2011-01-14 15:46:31 ----D---- C:\Program Files (x86)\Pando Networks
2011-01-13 18:11:43 ----D---- C:\Program Files (x86)\REACTOR
2011-01-13 18:11:42 ----D---- C:\Windows\Downloaded Program Files

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 pciide;pciide; C:\Windows\system32\DRIVERS\pciide.sys [2009-07-14 12352]
R0 rdyboost;ReadyBoost; C:\Windows\System32\drivers\rdyboost.sys [2009-07-14 214096]
R0 snapman;Acronis Snapshots Manager; C:\Windows\system32\DRIVERS\snapman.sys [2010-05-31 198944]
R0 sptd;sptd; C:\Windows\System32\Drivers\sptd.sys [2010-06-19 834544]
R0 symsnap;Symantec Volume Snap Shot Driver; C:\Windows\system32\DRIVERS\symsnap.sys [2009-09-21 170032]
R1 CSC;@%systemroot%\system32\cscsvc.dll,-202; C:\Windows\system32\drivers\csc.sys [2009-07-14 514048]
R1 ctxusbm;Citrix USB Monitor Driver; C:\Windows\system32\DRIVERS\ctxusbm.sys [2010-04-16 87600]
R1 ehdrv;ehdrv; C:\Windows\system32\DRIVERS\ehdrv.sys [2010-07-29 141264]
R1 vwififlt;Virtual WiFi Filter Driver; C:\Windows\system32\DRIVERS\vwififlt.sys [2009-07-14 59904]
R2 eamonm;eamonm; C:\Windows\system32\DRIVERS\eamonm.sys [2010-09-03 170104]
R2 epfw;epfw; C:\Windows\system32\DRIVERS\epfw.sys [2010-07-29 171152]
R2 epfwwfp;epfwwfp; C:\Windows\system32\DRIVERS\epfwwfp.sys [2010-07-29 50624]
R3 Epfwndis;Eset Personal Firewall; C:\Windows\system32\DRIVERS\Epfwndis.sys [2010-07-29 33632]
R3 GEARAspiWDM;GearAspiWDM; C:\Windows\system32\DRIVERS\GEARAspiWDM.sys [2009-05-18 34152]
R3 GenericMount;Generic Mount Driver; C:\Windows\system32\DRIVERS\GenericMount.sys [2010-02-12 66608]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\Windows\system32\drivers\RTKVHD64.sys [2010-03-26 2307616]
R3 RTL8167;Realtek 8167 NT Driver; C:\Windows\system32\DRIVERS\Rt64win7.sys [2010-06-23 344680]
S3 ammf67ew;ammf67ew; C:\Windows\system32\drivers\ammf67ew.sys []
S3 AVFSFilter;AVFSFilter; C:\Windows\system32\DRIVERS\avfsfilter.sys []
S3 BthAvrcp;Bluetooth AVRCP Profile; C:\Windows\system32\DRIVERS\BthAvrcp.sys [2009-08-13 29184]
S3 BthEnum;Služba Bluetooth Enumerator; C:\Windows\system32\DRIVERS\BthEnum.sys [2009-07-14 41984]
S3 BthPan;Zařízení Bluetooth (síť PAN); C:\Windows\system32\DRIVERS\bthpan.sys [2009-07-14 118784]
S3 BTHPORT;Ovladač portu Bluetooth; C:\Windows\System32\Drivers\BTHport.sys [2009-07-14 551936]
S3 BTHUSB;Ovladač rozhraní USB radiostanice Bluetooth; C:\Windows\System32\Drivers\BTHUSB.sys [2009-07-14 79360]
S3 cpuz130;cpuz130; \??\C:\Users\11\AppData\Local\Temp\cpuz130\cpuz_x64.sys []
S3 EagleX64;EagleX64; \??\C:\Windows\system32\drivers\EagleX64.sys []
S3 gdrv;gdrv; \??\C:\Windows\gdrv.sys [2010-11-26 20544]
S3 hamachi;Hamachi Network Interface; C:\Windows\system32\DRIVERS\hamachi.sys [2009-03-18 33856]
S3 pccsmcfd;PCCS Mode Change Filter Driver; C:\Windows\system32\DRIVERS\pccsmcfdx64.sys [2008-08-28 25600]
S3 pwdrvio;pwdrvio; \??\C:\Windows\syswow64\pwdrvio.sys []
S3 pwdspio;pwdspio; \??\C:\Windows\syswow64\pwdspio.sys []
S3 RDPDR;Terminal Server Device Redirector Driver; C:\Windows\System32\drivers\rdpdr.sys [2009-07-14 165376]
S3 RFCOMM;Zařízení Bluetooth (RFCOMM protokol TDI); C:\Windows\system32\DRIVERS\rfcomm.sys [2009-07-14 158720]
S3 rockusb;Driver for Emgeton Cult E8; C:\Windows\system32\DRIVERS\rockusb.sys [2009-10-21 66088]
S3 RTL8192su;%RTL8192su.DeviceDesc.DispName%; C:\Windows\system32\DRIVERS\RTL8192su.sys [2010-02-06 690208]
S3 s3cap;s3cap; C:\Windows\system32\DRIVERS\vms3cap.sys [2009-07-14 6656]
S3 storvsc;storvsc; C:\Windows\system32\DRIVERS\storvsc.sys [2009-07-14 34896]
S3 upperdev;upperdev; C:\Windows\system32\DRIVERS\usbser_lowerfltx64.sys []
S3 USBAAPL64;Apple Mobile USB Driver; C:\Windows\System32\Drivers\usbaapl64.sys [2010-04-19 50688]
S3 usbser;USB Modem Driver; C:\Windows\system32\drivers\usbser.sys [2009-07-14 32768]
S3 UsbserFilt;UsbserFilt; C:\Windows\system32\DRIVERS\usbser_lowerfltx64j.sys []
S3 vmbus;@%SystemRoot%\system32\vmbusres.dll,-1000; C:\Windows\system32\DRIVERS\vmbus.sys [2009-07-14 200272]
S3 VMBusHID;VMBusHID; C:\Windows\system32\DRIVERS\VMBusHID.sys [2009-07-14 21760]
S3 VProEventMonitor;Symantec Event Monitor Driver; C:\Windows\system32\DRIVERS\vproeventmonitor.sys [2009-09-21 20528]
S3 WimFltr;WimFltr; C:\Windows\system32\DRIVERS\wimfltr.sys [2009-10-01 154168]
S3 WinUsb;WinUsb; C:\Windows\system32\DRIVERS\WinUsb.sys [2009-07-14 40448]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 CscService;@%systemroot%\system32\cscsvc.dll,-200; C:\Windows\System32\svchost.exe [2009-07-14 27136]
R2 ekrn;ESET Service; C:\Program Files\ESET\ESET Smart Security\x86\ekrn.exe [2010-11-18 810144]
R2 Norton Ghost;Norton Ghost; C:\Program Files (x86)\Norton Ghost\Agent\VProSvc.exe [2010-03-03 4590432]
R2 nvsvc;NVIDIA Display Driver Service; C:\Windows\system32\nvvsvc.exe [2010-10-16 989800]
R2 PnkBstrA;PnkBstrA; C:\Windows\syswow64\PnkBstrA.exe [2011-01-28 75136]
R2 TeamViewer6;TeamViewer 6; C:\Program Files (x86)\TeamViewer\Version6\TeamViewer_Service.exe [2011-01-27 2253688]
R2 TomTomHOMEService;TomTomHOMEService; C:\Program Files (x86)\TomTom HOME 2\TomTomHOMEService.exe [2010-06-24 92008]
R3 SymSnapService;SymSnapService; C:\Program Files (x86)\Norton Ghost\Shared\Drivers\SymSnapServicex64.exe [2009-09-21 2963960]
S2 AcronisOSSReinstallSvc;Acronis OS Selector Reinstall Service; C:\Program Files (x86)\Common Files\Acronis\Acronis Disk Director\oss_reinstall_svc.exe [2007-03-15 2233400]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
S2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2010-03-18 138576]
S3 AppMgmt;@appmgmts.dll,-3250; C:\Windows\system32\svchost.exe [2009-07-14 27136]
S3 EhttpSrv;ESET HTTP Server; C:\Program Files\ESET\ESET Smart Security\EHttpSrv.exe [2010-11-18 42360]
S3 GenericMount Helper Service;GenericMount Helper Service; C:\Program Files (x86)\Norton Ghost\Shared\Drivers\GenericMountHelperx64.exe [2010-02-12 2227216]
S3 IDriverT;InstallDriver Table Manager; C:\Program Files (x86)\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe [2005-04-04 69632]
S3 LiveUpdate;LiveUpdate; C:\PROGRA~2\Symantec\LIVEUP~1\LUCOMS~1.EXE [2007-09-12 2999664]
S3 PeerDistSvc;@%SystemRoot%\system32\peerdistsvc.dll,-9000; C:\Windows\System32\svchost.exe [2009-07-14 27136]
S3 ServiceLayer;ServiceLayer; C:\Program Files (x86)\PC Connectivity Solution\ServiceLayer.exe [2010-12-08 628736]
S3 Symantec SymSnap VSS Provider;Symantec SymSnap VSS Provider; C:\Windows\system32\dllhost.exe [2009-07-14 9728]
S3 UmRdpService;@%SystemRoot%\system32\umrdp.dll,-1000; C:\Windows\System32\svchost.exe [2009-07-14 27136]

-----------------EOF-----------------

Dejte log z ComboFix.

Stahnete a ulozte nejlepe na plochu ComboFix: http://download.bleepingcomputer.com/sUBs/ComboFix.exe

pote spustte aplikaci pod uctem s administratorskym opravnenim

hned po startu se zobrazi obrazovka s licencnimi podminkami, pokracujte kliknutim na tlacitko Ano.

v klidu si postavte na kafe (cela akce trva cca. 5-10 minut, nekdy i dele - dle toho, o jak rychly stroj se

jedna a kolika soubory se skener bude muset prodirat), behem skenu se nepokousejte spoustet zadne jine

aplikace ani nic jineho

behem skenovani nepropadejte panice, vas stroj muze byt restartovan (predevsim pri prvni aplikaci skeneru)

upozorneni: pokud pouzivate antispyware s rezidentnim stitem, prepnete jeho rezidentni stit do Install Mode,

pripadne jej po dobu skenu uplne deaktivujte, protoze dochazi pri skenu a vymazu pripadneho malware k

nezadoucim kolizim s rezidentem antispyware

pise to tuhle hlasku


http://img602.imageshack.us/i/probleml.png/

Zkuste ho spustit v nouz. režimu, příp. přejmenujte třeba na cokoli.com a zkuste spustit.

v nouzovem rezimu se spusti bez nahlaseni chyby a vypne se
na c mě naskočí složka viz screen kdyz ji chci otevrit otevre se tento pocitac


http://img694.imageshack.us/i/problem4.png/

Složku Quoobox vytvořil CF pro uložení zálohy mazaných položek. Udělejte kompletní sken MBAM: http://www.malwarebytes.org/mbam.php a dejte log. Předem nic nemažte.

Tady je
Malwarebytes' Anti-Malware 1.50.1.1100
www.malwarebytes.org

Verze databáze: 5749

Windows 6.1.7600
Internet Explorer 8.0.7600.16385

12.2.2011 19:24:08
mbam-log-2011-02-12 (19-23-46).txt

Typ kontroly: Rychlý test
Testované objekty: 162197
Uplynulý čas: 1 minut, 48 sekund

Infikované procesy v paměti: 0
Infikované moduly v paměti: 0
Infikované klíče v registru: 0
Infikované hodnoty v registru: 0
Infikované datové položky v registru: 0
Infikované složky: 0
Infikované soubory: 2

Infikované procesy v paměti:
(Žádné škodlivé položky nebyly zjištěny)

Infikované moduly v paměti:
(Žádné škodlivé položky nebyly zjištěny)

Infikované klíče v registru:
(Žádné škodlivé položky nebyly zjištěny)

Infikované hodnoty v registru:
(Žádné škodlivé položky nebyly zjištěny)

Infikované datové položky v registru:
(Žádné škodlivé položky nebyly zjištěny)

Infikované složky:
(Žádné škodlivé položky nebyly zjištěny)

Infikované soubory:
c:\Windows\System32\secushr.dat (Malware.Trace) -> No action taken.
c:\Windows\SysWOW64\secushr.dat (Malware.Trace) -> No action taken.

Dnes jsem stáhl novou erzi combofix a scsn probehl tady je log

ComboFix 11-02-12.02 - 11 13/02/2011 11:18:02.1.2 - x64
Microsoft Windows 7 Ultimate 6.1.7600.0.1252.61.1029.18.3070.1736 [GMT 1:00]
Running from: c:\users\11\Desktop\combofix.com.exe
AV: ESET Smart Security 4.2 *Enabled/Updated* {77DEAFED-8149-104B-25A1-21771CA47CD1}
FW: ESET personal firewall *Enabled* {4FE52EC8-CB26-1113-0EFE-8842E2773BAA}
SP: ESET Smart Security 4.2 *Enabled/Updated* {CCBF4E09-A773-1FC5-1F11-1A056723366C}
SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
* Created a new restore point
* Resident AV is active

.

((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))
.

c:\users\11\Documents\BackupRegistry(20110120).reg
c:\users\11\Documents\BackupRegistry(20110213).reg

.
((((((((((((((((((((((((( Files Created from 2011-01-13 to 2011-02-13 )))))))))))))))))))))))))))))))
.

2011-02-13 10:21 . 2011-02-13 10:21 -------- d-----w- c:\users\Default\AppData\Local\temp
2011-02-12 18:20 . 2010-12-20 17:09 38224 ----a-w- c:\windows\SysWow64\drivers\mbamswissarmy.sys
2011-02-12 13:44 . 2011-02-13 10:16 -------- d-----w- C:\combofix
2011-02-12 09:38 . 2011-02-12 09:38 -------- d-----w- c:\users\11\AppData\Roaming\Malwarebytes
2011-02-12 09:38 . 2011-02-12 09:38 -------- d-----w- c:\programdata\Malwarebytes
2011-02-12 09:38 . 2010-12-20 17:08 24152 ----a-w- c:\windows\system32\drivers\mbam.sys
2011-02-12 07:52 . 2011-02-12 07:56 -------- d-----w- c:\program files\trend micro
2011-02-12 07:52 . 2011-02-12 07:52 -------- d-----w- C:\rsit
2011-02-12 07:43 . 2011-01-13 10:20 7844688 ----a-w- c:\programdata\Microsoft\Windows Defender\Definition Updates\{5E5680CE-2810-442C-A0CB-5969244E9F78}\mpengine.dll
2011-02-09 15:40 . 2010-10-27 05:18 5510528 ----a-w- c:\windows\system32\ntoskrnl.exe
2011-02-09 15:40 . 2010-10-27 05:16 1739176 ----a-w- c:\windows\system32\ntdll.dll
2011-02-09 15:40 . 2010-12-21 06:16 214016 ----a-w- c:\windows\system32\winsrv.dll
2011-02-09 15:40 . 2011-01-07 08:06 46080 ----a-w- c:\windows\system32\atmlib.dll
2011-02-09 15:40 . 2011-01-07 07:27 34304 ----a-w- c:\windows\SysWow64\atmlib.dll
2011-02-09 15:40 . 2011-01-07 05:49 366080 ----a-w- c:\windows\system32\atmfd.dll
2011-02-09 15:40 . 2011-01-07 05:33 294400 ----a-w- c:\windows\SysWow64\atmfd.dll
2011-02-09 15:40 . 2011-01-26 06:53 982912 ----a-w- c:\windows\system32\drivers\dxgkrnl.sys
2011-02-09 15:40 . 2011-01-26 06:53 265088 ----a-w- c:\windows\system32\drivers\dxgmms1.sys
2011-02-09 15:40 . 2011-01-26 06:31 144384 ----a-w- c:\windows\system32\cdd.dll
2011-02-09 15:40 . 2011-01-05 06:20 612352 ----a-w- c:\windows\system32\vbscript.dll
2011-02-02 19:48 . 2011-02-02 19:48 -------- d--h--r- c:\users\11\AppData\Roaming\SecuROM
2011-02-01 17:12 . 2011-02-01 17:12 -------- d-----w- c:\program files (x86)\Electronic Arts
2011-02-01 17:11 . 2011-02-01 17:11 -------- d-----w- c:\programdata\Electronic Arts
2011-01-31 17:52 . 2011-01-31 18:22 -------- d-----w- c:\programdata\clp
2011-01-31 17:47 . 2011-01-31 17:47 -------- d-----w- c:\users\11\AppData\Local\PackageAware
2011-01-30 16:40 . 2011-01-30 16:40 -------- d-----w- c:\program files (x86)\ICQ6Toolbar
2011-01-30 16:40 . 2011-01-30 16:40 -------- d-----w- c:\programdata\ICQ
2011-01-30 16:39 . 2011-01-30 16:39 -------- d-----w- c:\program files (x86)\TeamViewer
2011-01-30 11:15 . 2005-09-09 10:16 135168 ----a-w- c:\windows\system32\GUStrLib.dll
2011-01-30 11:15 . 2005-09-07 14:32 37376 ----a-w- c:\windows\system32\tmffbdrv.dll
2011-01-30 11:15 . 2005-09-07 13:59 131072 ----a-w- c:\windows\system32\tmffbcpl.dll
2011-01-30 11:15 . 2005-04-03 23:54 385024 ----a-w- c:\windows\system32\_IsRes.dll
2011-01-30 11:15 . 2005-04-03 22:03 425984 ----a-w- c:\windows\system32\isrt.dll
2011-01-30 11:14 . 2005-04-03 22:02 753664 ----a-w- c:\program files (x86)\Common Files\InstallShield\Professional\RunTime\11\00\Intel32\iKernel.dll
2011-01-30 11:14 . 2005-04-03 22:02 69714 ----a-w- c:\program files (x86)\Common Files\InstallShield\Professional\RunTime\11\00\Intel32\ctor.dll
2011-01-30 11:14 . 2005-04-03 22:01 274432 ----a-w- c:\program files (x86)\Common Files\InstallShield\Professional\RunTime\11\00\Intel32\iscript.dll
2011-01-30 11:14 . 2005-04-03 22:00 184320 ----a-w- c:\program files (x86)\Common Files\InstallShield\Professional\RunTime\11\00\Intel32\iuser.dll
2011-01-30 11:14 . 2005-04-03 22:00 63488 ----a-w- c:\program files (x86)\Common Files\InstallShield\Professional\RunTime\11\00\Intel32\ISBEW64.exe
2011-01-30 11:14 . 2005-04-03 21:59 5632 ----a-w- c:\program files (x86)\Common Files\InstallShield\Professional\RunTime\11\00\Intel32\DotNetInstaller.exe
2011-01-30 11:14 . 2011-01-30 11:14 200836 ----a-w- c:\program files (x86)\Common Files\InstallShield\Professional\RunTime\11\00\Intel32\iGdi.dll
2011-01-30 11:14 . 2011-01-30 11:14 331908 ----a-w- c:\program files (x86)\Common Files\InstallShield\Professional\RunTime\11\00\Intel32\setup.dll
2011-01-29 16:11 . 2011-01-29 16:11 -------- d-----w- c:\users\11\AppData\Roaming\Godlike
2011-01-23 16:32 . 2011-01-23 16:32 -------- d-----w- c:\programdata\Trymedia
2011-01-20 18:22 . 2011-01-20 18:22 -------- d-----w- c:\program files\ESET
2011-01-19 17:27 . 2011-01-19 17:27 -------- d-----w- c:\program files (x86)\Microsoft Flight Simulator X
2011-01-19 17:13 . 2011-01-19 17:13 -------- d-----w- c:\program files (x86)\Common Files\Microsoft Games
2011-01-19 17:06 . 2011-01-19 17:06 -------- d-----w- c:\windows\PCHEALTH
2011-01-19 17:06 . 2011-01-19 17:06 -------- d-----w- c:\program files (x86)\Microsoft Games
2011-01-16 09:02 . 2008-11-28 10:32 2271152 ----a-w- c:\windows\SysWow64\Codejock.CommandBars.Unicode.v12.1.1.ocx
2011-01-16 09:02 . 2008-11-28 10:32 1779632 ----a-w- c:\windows\SysWow64\Codejock.Controls.v12.1.1.ocx
2011-01-19 17:05 . 2011-01-19 17:05 -------- d-sh--we c:\windows\SysWow64\config\systemprofile\Poslední
2011-01-19 17:05 . 2011-01-19 17:05 -------- d-sh--we c:\windows\SysWow64\config\systemprofile\Okolní tiskárny
2011-01-19 17:05 . 2011-01-19 17:05 -------- d-sh--we c:\windows\SysWow64\config\systemprofile\Okolní sí?
2011-01-19 17:05 . 2011-01-19 17:05 -------- d-sh--we c:\windows\SysWow64\config\systemprofile\Nabídka Start
2011-01-19 17:05 . 2011-01-19 17:05 -------- d-sh--we c:\windows\SysWow64\config\systemprofile\Data aplikací
2011-02-10 17:26 . 2011-02-13 09:11 270904 ----a-w- c:\windows\SysWow64\PnkBstrB.exe
2011-02-09 15:40 . 2010-10-27 04:43 3901824 ----a-w- c:\windows\SysWow64\ntoskrnl.exe
2011-02-09 15:40 . 2010-10-27 04:40 1293120 ----a-w- c:\windows\SysWow64\ntdll.dll
2011-02-09 15:40 . 2010-10-27 04:43 3957120 ----a-w- c:\windows\SysWow64\ntkrnlpa.exe
2011-02-09 15:40 . 2011-01-05 05:37 428032 ----a-w- c:\windows\SysWow64\vbscript.dll
2011-02-02 19:47 . 2011-02-02 19:47 2434856 ----a-w- c:\windows\SysWow64\pbsvc_bc2.exe
2011-01-30 11:15 . 2005-01-28 11:49 106496 ----a-w- c:\windows\SysWow64\GUStrLib.dll
2011-01-30 11:15 . 2005-07-21 08:41 28160 ----a-w- c:\windows\SysWow64\tmffbdrv.dll
2011-01-30 11:15 . 2005-07-20 15:42 114688 ----a-w- c:\windows\SysWow64\tmffbcpl.dll
2011-01-20 17:51 . 2011-01-20 17:51 66594 ----a-w- c:\windows\SysWow64\epfwdata.bin
2011-01-16 09:02 . 2000-05-22 15:58 209608 ----a-w- c:\windows\SysWow64\tabctl32.ocx
2011-01-16 09:02 . 2004-03-08 22:00 132880 ----a-w- c:\windows\SysWow64\MSINET.OCX

.
(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2011-02-13 09:11 . 2010-05-30 14:34 270904 ----a-w- c:\windows\SysWow64\PnkBstrB.xtr
2011-02-13 09:09 . 2010-05-29 18:45 215128 ----a-w- c:\windows\SysWow64\PnkBstrB.ex0
2011-01-28 20:18 . 2010-12-31 13:42 75136 ----a-w- c:\windows\SysWow64\PnkBstrA.exe
2011-01-28 20:16 . 2010-05-29 18:45 835440 ----a-w- c:\windows\SysWow64\pbsvc.exe
2010-12-28 19:08 . 2010-12-28 19:08 34064 ----a-w- c:\windows\SysWow64\lhacm.acm
2010-12-21 14:04 . 2010-12-21 14:04 170640 ----a-w- c:\windows\system32\drivers\eamonm.sys
2010-12-21 14:04 . 2010-12-21 14:04 141264 ----a-w- c:\windows\system32\drivers\ehdrv.sys
2010-12-21 12:47 . 2010-12-21 12:47 50624 ----a-w- c:\windows\system32\drivers\epfwwfp.sys
2010-12-21 12:47 . 2010-12-21 12:47 34144 ----a-w- c:\windows\system32\drivers\epfwndis.sys
2010-12-21 12:47 . 2010-12-21 12:47 170640 ----a-w- c:\windows\system32\drivers\epfw.sys
2010-11-26 15:05 . 2010-05-30 15:10 20544 ----a-w- c:\windows\gdrv.sys
2006-05-03 09:06 163328 --sh--r- c:\windows\SysWOW64\flvDX.dll
2007-02-21 10:47 31232 --sh--r- c:\windows\SysWOW64\msfDX.dll
2008-03-16 12:30 216064 --sh--r- c:\windows\SysWOW64\nbDX.dll
.

((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* empty entries & legit default entries are not shown
REGEDIT4

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorAdmin"= 0 (0x0)
"ConsentPromptBehaviorUser"= 3 (0x3)
"EnableLUA"= 0 (0x0)
"EnableUIADesktopToggle"= 0 (0x0)
"PromptOnSecureDesktop"= 0 (0x0)

[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\drivers32]
"aux"=wdmaud.drv

R2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;c:\windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2010-03-18 138576]
R3 AVFSFilter;AVFSFilter;c:\windows\system32\DRIVERS\avfsfilter.sys [x]
R3 BthAvrcp;Bluetooth AVRCP Profile;c:\windows\system32\DRIVERS\BthAvrcp.sys [2009-08-13 29184]
R3 cpuz130;cpuz130;c:\users\11\AppData\Local\Temp\cpuz130\cpuz_x64.sys [x]
R3 EagleX64;EagleX64;c:\windows\system32\drivers\EagleX64.sys [x]
R3 GenericMount Helper Service;GenericMount Helper Service;c:\program files (x86)\Norton Ghost\Shared\Drivers\GenericMountHelperx64.exe [2010-02-12 2227216]
R3 pwdrvio;pwdrvio;c:\windows\system32\pwdrvio.sys [2010-04-09 19936]
R3 pwdspio;pwdspio;c:\windows\system32\pwdspio.sys [2010-04-09 13280]
R3 rockusb;Driver for Emgeton Cult E8;c:\windows\system32\DRIVERS\rockusb.sys [2009-10-21 66088]
R3 RTL8192su;%RTL8192su.DeviceDesc.DispName%;c:\windows\system32\DRIVERS\RTL8192su.sys [2010-02-06 690208]
R3 Symantec SymSnap VSS Provider;Symantec SymSnap VSS Provider;c:\windows\system32\dllhost.exe [2009-07-14 9728]
R3 USBAAPL64;Apple Mobile USB Driver;c:\windows\system32\Drivers\usbaapl64.sys [2010-04-19 50688]
S0 sptd;sptd;c:\windows\System32\Drivers\sptd.sys [2010-06-19 834544]
S1 ctxusbm;Citrix USB Monitor Driver;c:\windows\system32\DRIVERS\ctxusbm.sys [2010-04-16 87600]
S1 ehdrv;ehdrv;c:\windows\system32\DRIVERS\ehdrv.sys [2010-12-21 141264]
S1 vwififlt;Virtual WiFi Filter Driver;c:\windows\system32\DRIVERS\vwififlt.sys [2009-07-14 59904]
S2 eamonm;eamonm;c:\windows\system32\DRIVERS\eamonm.sys [2010-12-21 170640]
S2 ekrn;ESET Service;c:\program files\ESET\ESET Smart Security\x86\ekrn.exe [2011-01-12 810144]
S2 epfwwfp;epfwwfp;c:\windows\system32\DRIVERS\epfwwfp.sys [2010-12-21 50624]
S2 TeamViewer6;TeamViewer 6;c:\program files (x86)\TeamViewer\Version6\TeamViewer_Service.exe [2011-01-27 2253688]
S2 TomTomHOMEService;TomTomHOMEService;c:\program files (x86)\TomTom HOME 2\TomTomHOMEService.exe [2010-06-24 92008]
S3 GenericMount;Generic Mount Driver;c:\windows\system32\DRIVERS\GenericMount.sys [2010-02-12 66608]
S3 RTL8167;Realtek 8167 NT Driver;c:\windows\system32\DRIVERS\Rt64win7.sys [2010-06-23 344680]
S3 SymSnapService;SymSnapService;c:\program files (x86)\Norton Ghost\Shared\Drivers\SymSnapServicex64.exe [2009-09-21 2963960]

.

--------- x86-64 -----------


[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"egui"="c:\program files\ESET\ESET Smart Security\egui.exe" [2011-01-12 2918656]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
"LoadAppInit_DLLs"=0x0
.
------- Supplementary Scan -------
.
uLocal Page = c:\windows\system32\blank.htm
uStart Page = hxxp://www.seznam.cz/
mLocal Page = c:\windows\SysWOW64\blank.htm
IE: Baixar com o Rapidown...
IE: Baixar tudo com o Rapidown...
IE: Download all by FlashGet3 - c:\users\11\AppData\Roaming\FlashGetBHO\GetAllUrl.htm
IE: Download by FlashGet3 - c:\users\11\AppData\Roaming\FlashGetBHO\GetUrl.htm
Trusted Zone: kuaiche.com\software
FF - ProfilePath - c:\users\11\AppData\Roaming\Mozilla\Firefox\Profiles\6d5xdnva.default\
FF - prefs.js: browser.search.selectedEngine - Google
FF - prefs.js: browser.startup.homepage - seznam.cz
FF - prefs.js: keyword.URL - hxxp://search.icq.com/search/afe_results.php?ch_id=afex&tb_ver=1.1.7&q=
FF - Ext: Default: {972ce4c6-7e08-4474-a285-3208198ce6fd} - c:\program files (x86)\Mozilla Firefox\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}
FF - Ext: Java Console: {CAFEEFAC-0016-0000-0023-ABCDEFFEDCBA} - c:\program files (x86)\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0023-ABCDEFFEDCBA}
FF - Ext: DownThemAll!: {DDC359D1-844A-42a7-9AA1-88A850A938A8} - %profile%\extensions\{DDC359D1-844A-42a7-9AA1-88A850A938A8}
FF - Ext: Linkification: {35106bca-6c78-48c7-ac28-56df30b51d2a} - %profile%\extensions\{35106bca-6c78-48c7-ac28-56df30b51d2a}
FF - Ext: Greasemonkey: {e4a8a97b-f2ed-450b-b12d-ee082ba24781} - %profile%\extensions\{e4a8a97b-f2ed-450b-b12d-ee082ba24781}
.
- - - - ORPHANS REMOVED - - - -

WebBrowser-{D4027C7F-154A-4066-A1AD-4243D8127440} - (no file)
AddRemove-Adobe Shockwave Player - c:\windows\system32\Adobe\Shockwave 11\uninstaller.exe
AddRemove-PunkBusterSvc - c:\windows\system32\pbsvc_bc2.exe


.
--------------------- LOCKED REGISTRY KEYS ---------------------

[HKEY_USERS\S-1-5-21-1817659822-3734171505-2931091607-1000\Software\SecuROM\License information*]
"datasecu"=hex:a0,78,bd,89,c5,95,01,15,05,42,b7,bc,94,ac,73,fa,62,85,79,5b,f1,
8e,20,68,72,4d,0f,00,7a,a2,81,db,8c,6a,43,1f,5e,17,8f,12,54,d4,cb,85,cc,89,\
"rkeysecu"=hex:29,53,ef,bf,95,b4,26,51,81,49,94,ba,64,86,71,aa

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0000\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0001\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0002\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0003\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\PCW\Security]
@Denied: (Full) (Everyone)
.
------------------------ Other Running Processes ------------------------
.
c:\program files (x86)\Norton Ghost\Agent\VProSvc.exe
c:\windows\SysWOW64\PnkBstrA.exe
c:\windows\SysWOW64\PnkBstrB.exe
.
**************************************************************************
.
Completion time: 2011-02-13 11:24:35 - machine was rebooted
ComboFix-quarantined-files.txt 2011-02-13 10:24

Pre-Run: Volných bajtu: 66,224,492,544
Post-Run: Volných bajtu: 66,814,480,384

- - End Of File - - 4131F9EF5F8137D9747462EC2498A7E3

2 položky smazány, zbytek logu vypadá čistý. Pokud se nic nezměnilo, zkuste reinstalovat FF pomocí utility MozBackup: http://www.slunecnice.cz/sw/mozbackup/ .

Pravděpodobně byla příčina v registru pročistil jsem je win 78 managerem a vse ok!!
Děkuji za váš čas

Nemáte zač!