VIRY.CZ

Ahoj,

snazil jsem se vycistit jeden stary pocitac, ktery jeste poslouzi znamemu. Odinstaloval jsem, co se dalo a vycistil, ale stale je velmi pomaly. Zda se, ze jinak vse bezi jak ma, ale hodne poooommmmaluuu.

Prikladam log z RSIT.

Predem dekuji za asistenci.
Michal


Logfile of random's system information tool 1.08 (written by random/random)
Run by barak at 2011-02-19 17:27:28
Systém Microsoft Windows XP Professional Service Pack 3
System drive C: has 27 GB (69%) free of 39 GB
Total RAM: 255 MB (13% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 17:28:09, on 19.2.2011
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Eset\nod32kui.exe
C:\WINDOWS\system32\RUNDLL32.EXE
C:\Program Files\Common Files\Microsoft Shared\VS7Debug\mdm.exe
C:\Program Files\Eset\nod32krn.exe
C:\WINDOWS\system32\ctfmon.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
C:\Program Files\RALINK\Common\RaUI.exe
C:\WINDOWS\system32\wuauclt.exe
C:\Documents and Settings\barak\Local Settings\Data aplikací\Google\Chrome\Application\chrome.exe
C:\Documents and Settings\barak\Local Settings\Data aplikací\Google\Chrome\Application\chrome.exe
C:\Documents and Settings\barak\Local Settings\Data aplikací\Google\Chrome\Application\chrome.exe
C:\Program Files\Totalcmd\TOTALCMD.EXE
C:\Documents and Settings\barak\Local Settings\Data aplikací\Google\Chrome\Application\chrome.exe
C:\Documents and Settings\barak\Plocha\RSIT.exe
C:\Program Files\trend micro\barak.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.seznam.cz/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Odkazy
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 6.0 CE\Reader\ActiveX\AcroIEHelper.dll
O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O4 - HKLM\..\Run: [nod32kui] "C:\Program Files\Eset\nod32kui.exe" /WAITSERVICE
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [Cmaudio] RunDll32 cmicnfg.cpl,CMICtrlWnd
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [UpdateReminder] C:\Program Files\Eset\UpdateReminder.exe
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [SpybotSD TeaTimer] C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
O4 - HKCU\..\Run: [Google Update] "C:\Documents and Settings\barak\Local Settings\Data aplikací\Google\Update\GoogleUpdate.exe" /c
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'Default user')
O4 - Global Startup: Ralink Wireless Utility.lnk = C:\Program Files\RALINK\Common\RaUI.exe
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000
O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://go.microsoft.com/fwlink/?linkid=39204
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://www.update.microsoft.com/windows ... 7790115156
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://update.microsoft.com/microsoftup ... 0219800890
O22 - SharedTaskScheduler: Browseui preloader - {438755C2-A8BA-11D1-B96B-00A0C90312E1} - C:\WINDOWS\System32\browseui.dll
O22 - SharedTaskScheduler: Proces mezipaměti kategorií součástí - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\WINDOWS\System32\browseui.dll
O23 - Service: NOD32 Kernel Service (NOD32krn) - Eset - C:\Program Files\Eset\nod32krn.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe

--
End of file - 5413 bytes

======Scheduled tasks folder======

C:\WINDOWS\tasks\GoogleUpdateTaskUserS-1-5-21-1757981266-115176313-725345543-1003Core.job
C:\WINDOWS\tasks\GoogleUpdateTaskUserS-1-5-21-1757981266-115176313-725345543-1003UA.job

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{06849E9F-C8D7-4D59-B87D-784B7D6BE0B3}]
AcroIEHlprObj Class - C:\Program Files\Adobe\Acrobat 6.0 CE\Reader\ActiveX\AcroIEHelper.dll [2003-11-04 54248]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{53707962-6F74-2D53-2644-206D7942484F}]
Spybot-S&D IE Protection - C:\PROGRA~1\SPYBOT~1\SDHelper.dll [2008-09-15 1562960]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"nod32kui"=C:\Program Files\Eset\nod32kui.exe [2007-01-16 921600]
"NeroFilterCheck"=C:\WINDOWS\system32\NeroCheck.exe [2001-07-09 155648]
"NvCplDaemon"=C:\WINDOWS\system32\NvCpl.dll [2005-06-15 6803456]
"nwiz"=nwiz.exe /install []
"Cmaudio"=RunDll32 cmicnfg.cpl,CMICtrlWnd []
"NvMediaCenter"=C:\WINDOWS\system32\NvMcTray.dll [2005-06-15 86016]
"UpdateReminder"=C:\Program Files\Eset\UpdateReminder.exe [2011-01-28 434176]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"=C:\WINDOWS\system32\ctfmon.exe [2008-04-14 15360]
"SpybotSD TeaTimer"=C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe [2009-03-05 2260480]
"Google Update"=C:\Documents and Settings\barak\Local Settings\Data aplikací\Google\Update\GoogleUpdate.exe /c []

C:\Documents and Settings\All Users\Nabídka Start\Programy\Po spuštění
Ralink Wireless Utility.lnk - C:\Program Files\RALINK\Common\RaUI.exe

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\WgaLogon]
C:\WINDOWS\system32\WgaLogon.dll [2009-03-10 265096]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll [2006-10-18 133632]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\UploadMgr]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=145

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"HonorAutoRunSetting"=1

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"C:\Program Files\Skype\Phone\Skype.exe"="C:\Program Files\Skype\Phone\Skype.exe:*:Enabled:Skype"
"C:\Program Files\Miranda IM\miranda32.exe"="C:\Program Files\Miranda IM\miranda32.exe:*:Enabled:Miranda IM"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"

======List of files/folders created in the last 1 months======

2011-02-19 13:13:35 ----D---- C:\Documents and Settings\All Users\Data aplikací\Google
2011-02-13 22:54:12 ----D---- C:\rsit
2011-02-13 21:55:02 ----D---- C:\Documents and Settings\barak\Data aplikací\OpenOffice.org
2011-02-13 21:25:19 ----D---- C:\Program Files\OpenOffice.org 3
2011-02-13 21:08:02 ----HDC---- C:\WINDOWS\$NtUninstallKB2478971$
2011-02-13 21:07:47 ----HDC---- C:\WINDOWS\$NtUninstallKB2485376$
2011-02-13 21:07:20 ----HDC---- C:\WINDOWS\$NtUninstallKB2479628$
2011-02-13 21:06:29 ----HDC---- C:\WINDOWS\$NtUninstallKB2483185$
2011-02-13 20:59:26 ----HDC---- C:\WINDOWS\$NtUninstallKB2476687$
2011-02-13 20:59:13 ----HDC---- C:\WINDOWS\$NtUninstallKB2478960$
2011-02-13 20:58:37 ----HDC---- C:\WINDOWS\$NtUninstallKB2393802$
2011-02-03 22:16:22 ----A---- C:\WINDOWS\wininit.ini
2011-02-03 22:14:09 ----HDC---- C:\WINDOWS\$NtUninstallKB2079403$
2011-02-03 22:08:28 ----D---- C:\Program Files\CCleaner
2011-02-03 22:07:20 ----D---- C:\Program Files\Google
2011-02-03 22:06:11 ----D---- C:\Program Files\Trend Micro
2011-02-03 21:30:19 ----HDC---- C:\WINDOWS\$NtUninstallKB2387149$
2011-02-03 21:29:59 ----HDC---- C:\WINDOWS\$NtUninstallKB982214$
2011-02-03 21:29:05 ----HDC---- C:\WINDOWS\$NtUninstallKB2345886$
2011-02-03 21:28:23 ----HDC---- C:\WINDOWS\$NtUninstallKB2259922$
2011-02-03 21:27:59 ----HDC---- C:\WINDOWS\$NtUninstallKB980195$
2011-02-03 21:27:40 ----HDC---- C:\WINDOWS\$NtUninstallKB2296011$
2011-02-03 21:27:28 ----HDC---- C:\WINDOWS\$NtUninstallKB2115168$
2011-02-03 21:27:12 ----HDC---- C:\WINDOWS\$NtUninstallKB975558_WM8$
2011-02-03 21:26:52 ----HDC---- C:\WINDOWS\$NtUninstallKB2296199$
2011-02-03 21:25:39 ----HDC---- C:\WINDOWS\$NtUninstallKB2378111_WM9$
2011-02-03 21:25:26 ----HDC---- C:\WINDOWS\$NtUninstallKB2443105$
2011-02-03 21:24:56 ----HDC---- C:\WINDOWS\$NtUninstallKB2229593$
2011-02-03 21:22:51 ----HDC---- C:\WINDOWS\$NtUninstallKB2440591$
2011-02-03 21:18:50 ----HDC---- C:\WINDOWS\$NtUninstallKB982132$
2011-02-03 21:06:52 ----HDC---- C:\WINDOWS\$NtUninstallKB2347290$
2011-02-03 21:06:03 ----HDC---- C:\WINDOWS\$NtUninstallKB981852$
2011-02-03 21:05:04 ----HDC---- C:\WINDOWS\$NtUninstallKB2443685$
2011-02-03 20:55:31 ----HDC---- C:\WINDOWS\$NtUninstallKB979687$
2011-02-03 20:54:23 ----HDC---- C:\WINDOWS\$NtUninstallKB2121546$
2011-01-28 19:40:59 ----HDC---- C:\WINDOWS\$NtUninstallKB980436$
2011-01-28 19:40:42 ----HDC---- C:\WINDOWS\$NtUninstallKB981322$
2011-01-28 19:40:06 ----HDC---- C:\WINDOWS\$NtUninstallKB2436673$
2011-01-28 19:35:06 ----HDC---- C:\WINDOWS\$NtUninstallKB978695_WM9$
2011-01-28 19:34:54 ----HDC---- C:\WINDOWS\$NtUninstallKB2467659$
2011-01-28 19:33:51 ----HDC---- C:\WINDOWS\$NtUninstallKB2419632$
2011-01-28 19:30:22 ----HDC---- C:\WINDOWS\$NtUninstallKB2286198$
2011-01-28 19:28:28 ----HDC---- C:\WINDOWS\$NtUninstallKB979482$
2011-01-28 19:27:27 ----HDC---- C:\WINDOWS\$NtUninstallKB981997$
2011-01-28 19:26:25 ----HDC---- C:\WINDOWS\$NtUninstallKB975562$
2011-01-28 19:12:02 ----HDC---- C:\WINDOWS\$NtUninstallKB2141007$
2011-01-28 19:04:07 ----HDC---- C:\WINDOWS\$NtUninstallKB982665$
2011-01-28 19:01:48 ----HDC---- C:\WINDOWS\$NtUninstallKB2423089$
2011-01-28 19:01:11 ----HDC---- C:\WINDOWS\$NtUninstallKB2360937$
2011-01-28 18:30:06 ----D---- C:\Program Files\RegCleaner

======List of files/folders modified in the last 1 months======

2011-02-19 17:26:08 ----AC---- C:\WINDOWS\WINCMD.INI
2011-02-19 17:20:32 ----D---- C:\WINDOWS\Temp
2011-02-19 17:19:25 ----D---- C:\WINDOWS
2011-02-19 13:49:21 ----A---- C:\WINDOWS\SchedLgU.Txt
2011-02-19 13:48:30 ----D---- C:\Documents and Settings\All Users\Data aplikací\Spybot - Search & Destroy
2011-02-19 13:48:29 ----D---- C:\Program Files\Winamp
2011-02-19 13:48:19 ----D---- C:\WINDOWS\Debug
2011-02-19 13:46:41 ----D---- C:\install
2011-02-19 13:44:25 ----SHD---- C:\WINDOWS\Installer
2011-02-19 13:43:42 ----D---- C:\Documents and Settings\All Users\Data aplikací\Skype
2011-02-19 13:39:16 ----RD---- C:\Program Files
2011-02-19 13:38:40 ----D---- C:\Program Files\NewFolder Software
2011-02-19 13:13:30 ----SD---- C:\WINDOWS\Tasks
2011-02-19 13:02:59 ----D---- C:\Program Files\Mozilla Firefox
2011-02-19 12:57:11 ----HD---- C:\WINDOWS\inf
2011-02-19 12:57:11 ----HD---- C:\Program Files\Avago-HP
2011-02-19 12:55:12 ----D---- C:\Program Files\HP
2011-02-19 12:53:34 ----D---- C:\Program Files\Miranda IM
2011-02-19 09:22:23 ----D---- C:\WINDOWS\system32\CatRoot2
2011-02-13 22:18:13 ----D---- C:\Documents and Settings
2011-02-13 21:42:12 ----D---- C:\WINDOWS\system32
2011-02-13 21:42:12 ----D---- C:\Program Files\Spybot - Search & Destroy
2011-02-13 21:41:14 ----D---- C:\WINDOWS\system32\CatRoot
2011-02-13 21:28:04 ----RSD---- C:\WINDOWS\assembly
2011-02-13 21:25:55 ----RD---- C:\WINDOWS\Fonts
2011-02-13 21:08:06 ----RSHDC---- C:\WINDOWS\system32\dllcache
2011-02-13 21:00:37 ----A---- C:\WINDOWS\system32\MRT.exe
2011-02-13 21:00:07 ----D---- C:\Program Files\Internet Explorer
2011-02-13 20:59:37 ----HD---- C:\WINDOWS\$hf_mig$
2011-02-13 20:51:57 ----D---- C:\Program Files\Microsoft Office
2011-02-13 20:51:57 ----D---- C:\Program Files\Common Files\Microsoft Shared
2011-02-13 20:51:16 ----D---- C:\Program Files\Common Files
2011-02-13 20:51:10 ----D---- C:\WINDOWS\Help
2011-02-13 20:50:56 ----D---- C:\Program Files\Common Files\System
2011-02-13 20:50:36 ----AC---- C:\WINDOWS\vbaddin.ini
2011-02-13 20:47:30 ----D---- C:\WINDOWS\WinSxS
2011-02-13 20:46:05 ----D---- C:\Documents and Settings\All Users\Data aplikací\Microsoft Help
2011-02-13 20:30:32 ----A---- C:\WINDOWS\win.ini
2011-02-13 20:07:34 ----D---- C:\Program Files\Microsoft Silverlight
2011-02-03 22:10:21 ----D---- C:\WINDOWS\Minidump
2011-02-03 22:06:33 ----SD---- C:\Documents and Settings\barak\Data aplikací\Microsoft
2011-02-03 21:31:08 ----D---- C:\WINDOWS\Microsoft.NET
2011-02-03 21:29:14 ----D---- C:\WINDOWS\system32\drivers
2011-02-03 21:01:22 ----A---- C:\WINDOWS\system32\PerfStringBackup.INI
2011-02-03 20:05:01 ----D---- C:\Program Files\epson
2011-01-28 19:41:24 ----D---- C:\WINDOWS\Prefetch
2011-01-28 19:27:33 ----D---- C:\Program Files\Movie Maker
2011-01-28 19:01:52 ----D---- C:\Program Files\Outlook Express
2011-01-28 18:55:44 ----HD---- C:\Program Files\InstallShield Installation Information
2011-01-28 18:54:46 ----D---- C:\Program Files\ESET
2011-01-28 18:44:14 ----D---- C:\WINDOWS\twain_32
2011-01-28 18:27:40 ----D---- C:\Program Files\BitLord
2011-01-28 18:26:04 ----D---- C:\Program Files\Common Files\InstallShield
2011-01-21 15:44:07 ----A---- C:\WINDOWS\system32\shimgvw.dll
2011-01-21 15:44:07 ----A---- C:\WINDOWS\system32\shell32.dll

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 PxHelp20;PxHelp20; C:\WINDOWS\System32\Drivers\PxHelp20.sys [2007-03-08 43528]
R0 sisagp;Filtr SIS sběrnice AGP ; C:\WINDOWS\System32\DRIVERS\sisagp.sys [2008-04-13 40960]
R1 WS2IFSL;Podpůrné prostředí zprostředkovatele služeb Windows Socket 2.0 bez podpory IFS; C:\WINDOWS\System32\drivers\ws2ifsl.sys [2001-10-25 12032]
R2 AegisP;AEGIS Protocol (IEEE 802.1x) v3.4.10.0; C:\WINDOWS\system32\DRIVERS\AegisP.sys [2008-03-22 21275]
R2 AMON;AMON; \??\C:\WINDOWS\System32\drivers\amon.sys []
R2 Ethpdrv;Ethernet Packet Driver; C:\WINDOWS\system32\DRIVERS\ethpdrv.sys [2005-09-08 9728]
R3 Afc;PPdus ASPI Shell; C:\WINDOWS\system32\drivers\Afc.sys [2005-02-23 11776]
R3 ms_mpu401;Microsoft MPU-401 MIDI UART Driver; C:\WINDOWS\system32\drivers\msmpu401.sys [2001-08-17 2944]
R3 nv;nv; C:\WINDOWS\System32\DRIVERS\nv4_mini.sys [2005-06-15 3200256]
R3 RT61;Ralink RT61 Wireless Driver; C:\WINDOWS\system32\DRIVERS\RT61.sys [2006-05-04 380928]
R3 rtl8139;Realtek RTL8139(A/B/C)-based PCI Fast Ethernet Adapter NT Driver; C:\WINDOWS\System32\DRIVERS\RTL8139.SYS [2004-08-04 20992]
R3 SiS7012;Service for AC'97 Sample Driver (WDM); C:\WINDOWS\system32\drivers\sis7012.sys [2003-04-08 820133]
R3 USBSTOR;Ovladač velkokapacitního paměťového zařízení USB; C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS [2008-04-13 26368]
S1 InCDPass;InCDPass; C:\WINDOWS\system32\drivers\InCDPass.sys []
S1 InCDRm;InCD Reader; C:\WINDOWS\system32\drivers\InCDRm.sys []
S3 cmuda;C-Media WDM Audio Interface; C:\WINDOWS\system32\drivers\cmuda.sys [2006-06-09 1373120]
S3 HidUsb;Ovladač třídy standardu HID; C:\WINDOWS\system32\DRIVERS\hidusb.sys [2008-04-13 10368]
S3 IpwP;IPWireless 3G Network Adapter; C:\WINDOWS\system32\DRIVERS\ipw3gnet.sys [2007-06-12 51040]
S3 mouhid;Ovladač myši standardu HID; C:\WINDOWS\System32\DRIVERS\mouhid.sys [2001-10-24 12160]
S3 nv4;nv4; C:\WINDOWS\System32\DRIVERS\nv4.sys [2001-08-17 731648]
S3 PCANDIS5;PCANDIS5 NDIS Protocol Driver; C:\WINDOWS\System32\PcaNdis5.sys [2004-06-16 16128]
S3 SONYPVU1;Sony USB Filter Driver (SONYPVU1); C:\WINDOWS\system32\DRIVERS\SONYPVU1.SYS [2001-08-17 7552]
S3 usbprint;Třída USB Printer; C:\WINDOWS\system32\DRIVERS\usbprint.sys [2008-04-13 25856]
S3 usbscan;Ovladač skeneru USB; C:\WINDOWS\system32\DRIVERS\usbscan.sys [2008-04-13 15104]
S3 WcmbusXP;WCM Enumerator and Bus Driver; C:\WINDOWS\system32\DRIVERS\WcmbusXP.sys [2004-01-09 71552]
S3 WCMVmdXP;WCM VMODEM Driver; C:\WINDOWS\system32\DRIVERS\wcmvmdXP.sys [2004-01-09 55808]
S3 WudfPf;Windows Driver Foundation - User-mode Driver Framework Platform Driver; C:\WINDOWS\system32\DRIVERS\WudfPf.sys [2006-09-28 77568]
S3 WudfRd;Windows Driver Foundation - User-mode Driver Framework Reflector; C:\WINDOWS\system32\DRIVERS\wudfrd.sys [2006-09-28 82944]
S4 InCDFs;InCD File System; C:\WINDOWS\system32\drivers\InCDFs.sys []

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 MDM;Machine Debug Manager; C:\Program Files\Common Files\Microsoft Shared\VS7Debug\mdm.exe [2001-02-23 270336]
R2 NOD32krn;NOD32 Kernel Service; C:\Program Files\Eset\nod32krn.exe [2007-01-16 507904]
R2 NVSvc;NVIDIA Display Driver Service; C:\WINDOWS\system32\nvsvc32.exe [2005-06-15 127043]
S3 aspnet_state;Stavová služba ASP.NET; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe [2008-07-25 34312]
S3 clr_optimization_v2.0.50727_32;.NET Runtime Optimization Service v2.0.50727_X86; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe [2008-07-25 69632]
S3 FontCache3.0.0.0;Windows Presentation Foundation Font Cache 3.0.0.0; c:\WINDOWS\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe [2008-07-29 46104]
S3 idsvc;Služba Windows CardSpace; C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe [2008-07-29 881664]
S3 WMPNetworkSvc;Služba Windows Media Player Network Sharing; C:\Program Files\Windows Media Player\WMPNetwk.exe [2007-01-05 913920]
S3 WudfSvc;Windows Driver Foundation - User-mode Driver Framework; C:\WINDOWS\system32\svchost.exe [2008-04-14 14336]
S4 NetTcpPortSharing;Služba sdílení portů Net.Tcp; C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe [2008-07-29 132096]

-----------------EOF-----------------

Udělejte kompletní sken MBAM: http://www.malwarebytes.org/mbam.php a dejte log. Předem nic nemažte.

Postuju log:


Malwarebytes' Anti-Malware 1.50.1.1100
www.malwarebytes.org

Verze databáze: 5810

Windows 5.1.2600 Service Pack 3
Internet Explorer 8.0.6001.18702

19.2.2011 19:56:41
mbam-log-2011-02-19 (19-56-33).txt

Typ kontroly: Úplný test (C:\|)
Testované objekty: 174542
Uplynulý čas: 54 minut, 30 sekund

Infikované procesy v paměti: 0
Infikované moduly v paměti: 0
Infikované klíče v registru: 0
Infikované hodnoty v registru: 0
Infikované datové položky v registru: 0
Infikované složky: 0
Infikované soubory: 1

Infikované procesy v paměti:
(Žádné škodlivé položky nebyly zjištěny)

Infikované moduly v paměti:
(Žádné škodlivé položky nebyly zjištěny)

Infikované klíče v registru:
(Žádné škodlivé položky nebyly zjištěny)

Infikované hodnoty v registru:
(Žádné škodlivé položky nebyly zjištěny)

Infikované datové položky v registru:
(Žádné škodlivé položky nebyly zjištěny)

Infikované složky:
(Žádné škodlivé položky nebyly zjištěny)

Infikované soubory:
c:\install\NERO 7\SN\keygen.exe (Trojan.Agent.CK) -> No action taken.

Položku smažte a ještě dejte log z ComboFix:

Stahnete a ulozte nejlepe na plochu ComboFix: http://download.bleepingcomputer.com/sUBs/ComboFix.exe

pote spustte aplikaci pod uctem s administratorskym opravnenim

hned po startu se zobrazi obrazovka s licencnimi podminkami, pokracujte kliknutim na tlacitko Ano.

v klidu si postavte na kafe (cela akce trva cca. 5-10 minut, nekdy i dele - dle toho, o jak rychly stroj se jedna a kolika soubory se skener bude muset prodirat), behem skenu se nepokousejte spoustet zadne jine aplikace ani nic jineho

behem skenovani nepropadejte panice, vas stroj muze byt restartovan (predevsim pri prvni aplikaci skeneru)

upozorneni: pokud pouzivate antispyware s rezidentnim stitem, prepnete jeho rezidentni stit do Install Mode, pripadne jej po dobu skenu uplne deaktivujte, protoze dochazi pri skenu a vymazu pripadneho malware k nezadoucim kolizim s rezidentem antispyware

Smazano, pridavam log z ComboFix:


ComboFix 11-02-19.01 - barak 19.02.2011 23:37:39.1.1 - x86
Systém Microsoft Windows XP Professional 5.1.2600.3.1250.420.1029.18.255.111 [GMT 1:00]
Spuštěný z: c:\documents and settings\barak\Plocha\ComboFix.exe
AV: Eset NOD32 Antivirus 2.51 *Disabled/Updated* {E5E70D32-0101-4F12-8FB0-D96ACA4F34C0}

VAROVÁNÍ - NA TOMTO POČÍTAČI NENÍ NAINSTALOVÁNA KONZOLA PRO ZOTAVENÍ !!
.

((((((((((((((((((((((((( Soubory vytvořené od 2011-01-19 do 2011-02-19 )))))))))))))))))))))))))))))))
.

2011-02-19 17:53 . 2011-02-19 17:53 -------- d-----w- c:\documents and settings\barak\Data aplikací\Malwarebytes
2011-02-19 17:52 . 2010-12-20 17:09 38224 ----a-w- c:\windows\system32\drivers\mbamswissarmy.sys
2011-02-19 17:52 . 2011-02-19 17:52 -------- d-----w- c:\documents and settings\All Users\Data aplikací\Malwarebytes
2011-02-19 17:52 . 2010-12-20 17:08 20952 ----a-w- c:\windows\system32\drivers\mbam.sys
2011-02-19 17:52 . 2011-02-19 17:53 -------- d-----w- c:\program files\Malwarebytes' Anti-Malware
2011-02-13 21:54 . 2011-02-13 21:57 -------- d-----w- C:\rsit
2011-02-13 20:55 . 2011-02-13 20:55 -------- d-----w- c:\documents and settings\barak\Data aplikací\OpenOffice.org
2011-02-13 20:25 . 2011-02-13 20:25 -------- d-----w- c:\program files\OpenOffice.org 3
2011-02-03 21:13 . 2011-02-03 21:13 -------- d-----w- c:\documents and settings\NetworkService\Local Settings\Data aplikací\Google
2011-02-03 21:08 . 2011-02-03 21:08 -------- d-----w- c:\program files\CCleaner
2011-02-03 21:08 . 2011-02-03 21:08 -------- d-----w- c:\documents and settings\LocalService\Local Settings\Data aplikací\Google
2011-02-03 21:07 . 2011-02-19 12:13 -------- d-----w- c:\program files\Google
2011-02-03 21:06 . 2011-02-03 21:06 388096 ----a-r- c:\documents and settings\barak\Data aplikací\Microsoft\Installer\{45A66726-69BC-466B-A7A4-12FCBA4883D7}\HiJackThis.exe
2011-02-03 21:06 . 2011-02-19 16:27 -------- d-----w- c:\program files\Trend Micro
2011-01-28 17:50 . 2010-09-18 06:53 974848 -c----w- c:\windows\system32\dllcache\mfc42.dll
2011-01-28 17:48 . 2010-11-02 15:17 40960 -c----w- c:\windows\system32\dllcache\ndproxy.sys
2011-01-28 17:48 . 2010-08-23 16:12 617472 -c----w- c:\windows\system32\dllcache\comctl32.dll
2011-01-28 17:47 . 2010-06-14 14:31 744448 -c----w- c:\windows\system32\dllcache\helpsvc.exe
2011-01-28 17:46 . 2010-12-20 23:52 743424 -c----w- c:\windows\system32\dllcache\iedvtool.dll
2011-01-28 17:35 . 2010-10-11 14:59 45568 -c----w- c:\windows\system32\dllcache\wab.exe
2011-01-28 17:30 . 2011-01-28 17:58 -------- d-----w- c:\program files\RegCleaner
2011-01-21 14:44 . 2011-01-21 14:44 440320 -c----w- c:\windows\system32\dllcache\shimgvw.dll

.
(((((((((((((((((((((((((((((((((((((((( Find3M výpis ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2011-01-21 14:44 . 2007-01-16 14:39 440320 ----a-w- c:\windows\system32\shimgvw.dll
2011-01-07 14:09 . 2001-10-25 12:00 290048 ----a-w- c:\windows\system32\atmfd.dll
2010-12-31 14:04 . 2001-10-25 12:00 1854976 ----a-w- c:\windows\system32\win32k.sys
2010-12-22 12:34 . 2005-06-15 17:52 301568 ----a-w- c:\windows\system32\kerberos.dll
2010-12-20 23:52 . 2006-06-23 12:27 916480 ----a-w- c:\windows\system32\wininet.dll
2010-12-20 23:52 . 2007-01-16 14:40 1469440 ----a-w- c:\windows\system32\inetcpl.cpl
2010-12-20 23:52 . 2007-01-16 14:39 43520 ----a-w- c:\windows\system32\licmgr10.dll
2010-12-20 17:25 . 2001-10-25 12:00 729088 ----a-w- c:\windows\system32\lsasrv.dll
2010-12-20 12:55 . 2004-08-17 22:44 385024 ----a-w- c:\windows\system32\html.iec
2010-12-09 15:15 . 2001-10-25 12:00 713216 ----a-w- c:\windows\system32\ntdll.dll
2010-12-09 15:14 . 2001-10-25 12:00 2194944 ----a-w- c:\windows\system32\ntoskrnl.exe
2010-12-09 15:14 . 2001-10-24 11:46 2071552 ----a-w- c:\windows\system32\ntkrnlpa.exe
2010-12-09 14:30 . 2001-10-25 12:00 33280 ----a-w- c:\windows\system32\csrsrv.dll
2008-12-25 15:41 . 2008-12-25 15:41 4865408 -c--a-w- c:\program files\Silverlight.2.0.exe
2008-04-11 15:51 . 2008-04-11 15:51 9722720 -c--a-w- c:\program files\spybotsd152.exe
.

(((((((((((((((((((((((((((((((((( Spouštěcí body v registru )))))))))))))))))))))))))))))))))))))))))))))
.
.
*Poznámka* prázdné záznamy a legitimní výchozí údaje nejsou zobrazeny.
REGEDIT4

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"SpybotSD TeaTimer"="c:\program files\Spybot - Search & Destroy\TeaTimer.exe" [2009-03-05 2260480]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"nod32kui"="c:\program files\Eset\nod32kui.exe" [2007-01-16 921600]
"NeroFilterCheck"="c:\windows\system32\NeroCheck.exe" [2001-07-09 155648]
"NvCplDaemon"="c:\windows\system32\NvCpl.dll" [2005-06-15 6803456]
"nwiz"="nwiz.exe" [2005-06-15 1519616]
"NvMediaCenter"="c:\windows\system32\NvMcTray.dll" [2005-06-15 86016]
"UpdateReminder"="c:\program files\Eset\UpdateReminder.exe" [2011-01-28 434176]

[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="c:\windows\System32\CTFMON.EXE" [2008-04-14 15360]

c:\documents and settings\All Users\Nabˇdka Start\Programy\Po spuçtŘnˇ\
Ralink Wireless Utility.lnk - c:\program files\RALINK\Common\RaUI.exe [2008-3-22 614400]

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\system32\\sessmgr.exe"=
"%windir%\\Network Diagnostic\\xpnetdiag.exe"=

R2 Ethpdrv;Ethernet Packet Driver;c:\windows\system32\drivers\ethpdrv.sys [15.12.2007 10:33 9728]
R3 SiS7012;Service for AC'97 Sample Driver (WDM);c:\windows\system32\drivers\sis7012.sys [20.1.2007 15:35 820133]
S3 IpwP;IPWireless 3G Network Adapter;c:\windows\system32\drivers\ipw3gnet.sys [14.12.2007 16:57 51040]
S3 WcmbusXP;WCM Enumerator and Bus Driver;c:\windows\system32\drivers\WCMBusXP.sys [9.1.2004 11:08 71552]
S3 WCMVmdXP;WCM VMODEM Driver;c:\windows\system32\drivers\WCMVmdXP.sys [9.1.2004 11:09 55808]
.
Obsah adresáře 'Naplánované úlohy'
.
.
------- Doplňkový sken -------
.
uStart Page = hxxp://www.seznam.cz/
IE: E&xportovat do aplikace Microsoft Excel - c:\progra~1\MICROS~2\Office12\EXCEL.EXE/3000
LSP: c:\windows\System32\imon.dll
DPF: Microsoft XML Parser for Java - file://c:\windows\Java\classes\xmldso.cab
FF - ProfilePath - c:\documents and settings\barak\Data aplikací\Mozilla\Firefox\Profiles\itad1fc9.default\
FF - prefs.js: browser.startup.homepage - hxxp://www.seznam.cz/
FF - Ext: Default: {972ce4c6-7e08-4474-a285-3208198ce6fd} - c:\program files\Mozilla Firefox\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}
FF - Ext: Microsoft .NET Framework Assistant: {20a82645-c095-46ed-80e3-08825760534b} - c:\windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension
FF - Ext: Microsoft .NET Framework Assistant: {20a82645-c095-46ed-80e3-08825760534b} - %profile%\extensions\{20a82645-c095-46ed-80e3-08825760534b}
.
- - - - NEPLATNÉ POLOŽKY ODSTRANĚNÉ Z REGISTRU - - - -

HKCU-Run-Google Update - c:\documents and settings\barak\Local Settings\Data aplikací\Google\Update\GoogleUpdate.exe
HKLM-Run-Cmaudio - cmicnfg.cpl
AddRemove-SiS7012 - c:\program files\SiS7012\Uninst\uninst2k.exe PCI\VEN_1039&DEV_7012



**************************************************************************

catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2011-02-19 23:46
Windows 5.1.2600 Service Pack 3 NTFS

skenování skrytých procesů ...

skenování skrytých položek 'Po spuštění' ...

skenování skrytých souborů ...

sken byl úspešně dokončen
skryté soubory: 0

**************************************************************************
.
--------------------- Knihovny navázané na běžící procesy ---------------------

- - - - - - - > 'lsass.exe'(428)
c:\windows\System32\imon.dll
c:\program files\Eset\pr_imon.dll

- - - - - - - > 'explorer.exe'(3560)
c:\windows\system32\webcheck.dll
c:\windows\system32\WPDShServiceObj.dll
c:\windows\system32\PortableDeviceTypes.dll
c:\windows\system32\PortableDeviceApi.dll
.
Celkový čas: 2011-02-19 23:51:17
ComboFix-quarantined-files.txt 2011-02-19 22:51

Před spuštěním: Volných bajtů: 29 417 291 776
Po spuštění: Volných bajtů: 29 582 553 088

- - End Of File - - 9CE3616DB328E6F8305DE3F3D7916AD8

PC je bez virů. Ještě vyčistěte od balastu pomocí CCleaneru: http://www.viry.cz/forum/viewtopic.php?f=46&t=7478 , příp. proveďte defragmentaci disku. Podstatná věc je, že ve stroji je pouze 256MB RAM, což stačí tak na kancelářské práce. Takže nějaké zázraky od toho nemůžete očekávat.

Ok, diky, dlouho jsem ho nepouzival, ale i tak se mi zda velmi zpomaleny. Napr. Google chrome startuje cca minutu.

Kazdopadne diky za asistenci.

Nemáte zač!

Omlouvám se za vstup.
Mohu se zeptat na konfiguraci vašeho PC?
Ram máte 255 MB já mám stejně a PC mám stejně pomalé.
G. chrome zabírá minimal. 50 GB a neořezaný systém 150 MB.
Pak jestli že používáte SDRAM s frekvencí 133 mhz (neni podstatné)
může PC být pomalé.
Ještě bych poprosil o typ CPU (procesoru) a GPU (Grafika) popř. můžete uvést HDD (Pevný disk)
Já mám na PC Intel Celeron s taktem 486 Mhz a G. Chrome nabýhá asi přibližně půl minuty.
Povedlo se mi OS zbavit nepotřebných služeb a procesů a samotný OS zabírá teť pouze 89 MB.

Z logu jsem vyčetl že na PC máte NOD32.Je cracknutý nebo trail (zkušební)?
Já na PC měl Noda také ale rezidenční ochrana ho hrozně zpomalovala tak mám PC bez AV s pouze zaplým Windows Firewallem.
Přece jenom,největší slabina u PC je sám uživatel.
PS:Zkusil jste Operu?