Pomalé spuštění PC

[Poulito]

Dobrý den, dnes se mi zacal velmi pomalu spoustet pocitac..uz pri biosu to trva nejake 2-3 minuty nekdy se ozve delsi pipnuti a jindy kratsi. Lagovani sem zaznamenal i v biosu kam sem se po chvili snazeni dostal ale vubec se v tom nevyznam takze sem ho opustil. Castecne sekani pak probiha i kdyz windows nabehne okna nabihaji velmi pomalu

Prikladam log z RSIT-u

Logfile of random's system information tool 1.09 (written by random/random)
Run by Poula at 2011-07-11 15:04:09
Microsoft Windows 7 Home Premium Service Pack 1
System drive C: has 61 GB (61%) free of 100 GB
Total RAM: 3319 MB (56% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 15:04:14, on 11.7.2011
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v9.00 (9.00.8112.16421)
Boot mode: Normal

Running processes:
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Windows\system32\taskhost.exe
C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe
C:\Program Files\AVG\AVG10\avgtray.exe
C:\Program Files\HP\HP Software Update\hpwuSchd2.exe
C:\Program Files\Common Files\Java\Java Update\jusched.exe
C:\Program Files\Logitech\Gaming Software\LWEMon.exe
D:\Programy\DAEMON Tools Lite\DTLite.exe
D:\Programy\RocketDock\RocketDock.exe
D:\Programy\Advanced SystemCare 4\ASCTray.exe
C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
C:\Program Files\AVG\AVG10\Identity Protection\agent\bin\avgidsmonitor.exe
D:\Programy\Mozilla Firefox\firefox.exe
D:\Programy\Mozilla Firefox\plugin-container.exe
C:\Windows\system32\mmc.exe
E:\__Downloads\setup_11.0.0.1245.x01_2011_07_11_15_15.exe
C:\Users\Poula\AppData\Local\Temp\RarSFX0\1106190.exe
C:\Users\Poula\AppData\Local\Temp\3339210\1106190.exe
C:\Windows\system32\taskeng.exe
E:\__Downloads\RSIT.exe
C:\Program Files\trend micro\Poula.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page =
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
O2 - BHO: HP Print Enhancer - {0347C33E-8762-4905-BF09-768834316C61} - C:\Program Files\HP\Digital Imaging\Smart Web Printing\hpswp_printenhancer.dll
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: WormRadar.com IESiteBlocker.NavFilter - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - C:\Program Files\AVG\AVG10\avgssie.dll
O2 - BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Adobe PDF Conversion Toolbar Helper - {AE7CD045-E861-484f-8273-0445EE161910} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: SmartSelect - {F4971EE7-DAA0-4053-9964-665D8EE6A077} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll
O2 - BHO: HP Smart BHO Class - {FFFFFFFF-CF4E-4F2B-BDC2-0E72E116A856} - C:\Program Files\HP\Digital Imaging\Smart Web Printing\hpswp_BHO.dll
O3 - Toolbar: Adobe PDF - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll
O4 - HKLM\..\Run: [RtHDVCpl] C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe -s
O4 - HKLM\..\Run: [AVG_TRAY] C:\Program Files\AVG\AVG10\avgtray.exe
O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Common Files\Java\Java Update\jusched.exe"
O4 - HKLM\..\Run: [AdobeAAMUpdater-1.0] "C:\Program Files\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe"
O4 - HKLM\..\Run: [StartCCC] "C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun
O4 - HKLM\..\Run: [Start WingMan Profiler] C:\Program Files\Logitech\Gaming Software\LWEMon.exe /noui
O4 - HKCU\..\Run: [DAEMON Tools Lite] "D:\Programy\DAEMON Tools Lite\DTLite.exe" -autorun
O4 - HKCU\..\Run: [RocketDock] "D:\Programy\RocketDock\RocketDock.exe"
O4 - HKCU\..\Run: [Advanced SystemCare 4] D:\Programy\Advanced SystemCare 4\ASCTray.exe
O4 - HKCU\..\Run: [ICQ] "C:\Program Files\ICQ7.5\ICQ.exe" silent loginmode=4
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'NETWORK SERVICE')
O4 - Startup: _uninst_06112948.lnk = Poula\AppData\Local\Temp\_uninst_06112948.bat
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Excel - res://C:\PROGRA~1\MICROS~3\Office12\EXCEL.EXE/3000
O9 - Extra button: ICQ7.5 - {7578ADEA-D65F-4C89-A249-B1C88B6FFC20} - C:\Program Files\ICQ7.5\ICQ.exe
O9 - Extra 'Tools' menuitem: ICQ7.5 - {7578ADEA-D65F-4C89-A249-B1C88B6FFC20} - C:\Program Files\ICQ7.5\ICQ.exe
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~3\Office12\REFIEBAR.DLL
O9 - Extra button: Zobrazit nebo skrýt HP Smart Web Printing - {DDE87865-83C5-48c4-8357-2F5B1AA84522} - C:\Program Files\HP\Digital Imaging\Smart Web Printing\hpswp_BHO.dll
O10 - Unknown file in Winsock LSP: c:\program files\common files\microsoft shared\windows live\wlidnsp.dll
O10 - Unknown file in Winsock LSP: c:\program files\common files\microsoft shared\windows live\wlidnsp.dll
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/pub/s ... wflash.cab
O18 - Protocol: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - C:\Program Files\AVG\AVG10\avgpp.dll
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe
O23 - Service: Advanced SystemCare Service (AdvancedSystemCareService) - IObit - D:\Programy\Advanced SystemCare 4\ASCService.exe
O23 - Service: AMD External Events Utility - AMD - C:\Windows\system32\atiesrxx.exe
O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
O23 - Service: AVGIDSAgent - AVG Technologies CZ, s.r.o. - C:\Program Files\AVG\AVG10\Identity Protection\Agent\Bin\AVGIDSAgent.exe
O23 - Service: AVG WatchDog (avgwd) - AVG Technologies CZ, s.r.o. - C:\Program Files\AVG\AVG10\avgwdsvc.exe
O23 - Service: Bonjour Service - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: COMODO EasyVPN VNC Service (CrdphService) - COMODO - D:\Programy\Comodo\crdphService.exe
O23 - Service: Cisco Systems, Inc. VPN Service (CVPND) - Cisco Systems, Inc. - D:\Programy\VPN Client\cvpnd.exe
O23 - Service: COMODO EasyVPN Service (EasyVpnAdpt) - Unknown owner - D:\Programy\Comodo\Vpnservice.exe
O23 - Service: LogMeIn Hamachi 2.0 Tunneling Engine (Hamachi2Svc) - LogMeIn Inc. - D:\Programy\Hamachi\hamachi-2.exe
O23 - Service: Intel(R) MPI Library Process Manager, Intel (impi_smpd) - Intel Corporation - D:\MSC.Software\Marc\2010\marc2010\intelmpi\win32\bin\ismpd.exe
O23 - Service: InstallShield Licensing Service - Macrovision - C:\Program Files\Common Files\InstallShield Shared\Service\InstallShield Licensing Service.exe
O23 - Service: iPod Service - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: MSC.Licensing 11.6 - Acresso Software Inc. - D:\Programy\MSC Software\MSC.Licensing\11.6\lmgrd.exe
O23 - Service: NMIndexingService - Nero AG - C:\Program Files\Common Files\Nero\Lib\NMIndexingService.exe
O23 - Service: PnkBstrA - Unknown owner - C:\Windows\system32\PnkBstrA.exe
O23 - Service: SwitchBoard - Adobe Systems Incorporated - C:\Program Files\Common Files\Adobe\SwitchBoard\SwitchBoard.exe
O23 - Service: UGS License Server (ugslmd) - Acresso Software Inc. - D:\Programy\Siemens NX\UGSLicensing\lmgrd.exe

--
End of file - 8781 bytes

======Scheduled tasks folder======

C:\Windows\tasks\AWC Update.job
C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-1898659907-3972282731-4262410125-1001Core.job
C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-1898659907-3972282731-4262410125-1001UA.job

=========Mozilla firefox=========

ProfilePath - C:\Users\Poula\AppData\Roaming\Mozilla\Firefox\Profiles\ythzgied.default

prefs.js - "extensions.enabledItems" - "{3f963a5b-e555-4543-90e2-c3908898db71}:10.0.0.1178, battlefieldplay4free@ea.com:1.0.53.2, {CAFEEFAC-0016-0000-0020-ABCDEFFEDCBA}:6.0.20, {CAFEEFAC-0016-0000-0023-ABCDEFFEDCBA}:6.0.23, smartwebprinting@hp.com:4.5, {CAFEEFAC-0016-0000-0024-ABCDEFFEDCBA}:6.0.24, {972ce4c6-7e08-4474-a285-3208198ce6fd}:3.6.16"

"smartwebprinting@hp.com"=C:\Program Files\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3
"{1E73965B-8B48-48be-9C8D-68B920ABC1C4}"=C:\Program Files\AVG\AVG10\Firefox4\
"web2pdfextension@web2pdf.adobedotcom"=D:\Grafika\Acrobat 10.0\Acrobat\Browser\WCFirefoxExtn


[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 10.1 Plugin
"Path"=C:\Windows\system32\Macromed\Flash\NPSWF32.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@Apple.com/iTunes,version=]
"Description"=iTunes Detector Plug-in
"Path"=

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@Apple.com/iTunes,version=1.0]
"Description"=
"Path"=D:\Programy\iTunes\Mozilla Plugins\npitunes.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@gamersfirst.com/LiveLauncher]
"Description"=GamersFirst LIVE! Web Launcher
"Path"=C:\Program Files\GamersFirst\LIVE!\nplivelauncher.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@java.com/JavaPlugin]
"Description"=Oracle® Next Generation Java™ Plug-In
"Path"=C:\Program Files\Java\jre6\bin\new_plugin\npjp2.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@microsoft.com/GENUINE]
"Description"=
"Path"=disabled

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0]
"Description"=Ag Player Plugin
"Path"=C:\Program Files\Microsoft Silverlight\4.0.60531.0\npctrl.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@pandonetworks.com/PandoWebPlugin]
"Description"=This plugin detects and launches Pando Media Booster
"Path"=C:\Program Files\Pando Networks\Media Booster\npPandoWebPlugin.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\Adobe Acrobat]
"Description"=Handles PDFs in-place in Firefox
"Path"=D:\Grafika\Acrobat 10.0\Acrobat\Air\nppdf32.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\Adobe Reader]
"Description"=Handles PDFs in-place in Firefox
"Path"=C:\Program Files\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll

D:\Programy\Mozilla Firefox\extensions\
{972ce4c6-7e08-4474-a285-3208198ce6fd}
{CAFEEFAC-0016-0000-0020-ABCDEFFEDCBA}
{CAFEEFAC-0016-0000-0023-ABCDEFFEDCBA}
{CAFEEFAC-0016-0000-0024-ABCDEFFEDCBA}
{CAFEEFAC-0016-0000-0026-ABCDEFFEDCBA}

D:\Programy\Mozilla Firefox\components\
binary.manifest
browsercomps.dll
nsIQTScriptablePlugin.xpt

D:\Programy\Mozilla Firefox\plugins\
np-mswmp.dll
npdeployJava1.dll
NPOFF12.DLL
nppdf32.CZE
nppdf32.dll
nppdf32.HRV
nppdf32.HUN
nppdf32.POL
nppdf32.SKY
nppdf32.SLV
npqtplugin.dll
npqtplugin2.dll
npqtplugin3.dll
npqtplugin4.dll
npqtplugin5.dll
npqtplugin6.dll
npqtplugin7.dll
npwachk.dll
QuickTimePlugin.class
WMP Firefox Plugin License.rtf
WMP Firefox Plugin RelNotes.txt

D:\Programy\Mozilla Firefox\searchplugins\
google.xml
heureka-cz.xml
jyxo-cz.xml
seznam-cz.xml
slunecnice-cz.xml
wikipedia-cz.xml

C:\Users\Poula\AppData\Roaming\Mozilla\Firefox\Profiles\ythzgied.default\extensions\
battlefieldplay4free@ea.com
{59c81df5-4b7a-477b-912d-4e0fdf64e5f2}

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{0347C33E-8762-4905-BF09-768834316C61}]
HP Print Enhancer - C:\Program Files\HP\Digital Imaging\Smart Web Printing\hpswp_printenhancer.dll [2009-05-21 328248]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
Adobe PDF Link Helper - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2011-06-06 63912]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{3CA2F312-6F6E-4B53-A66E-4E65E497C8C0}]
AVG Safe Search - C:\Program Files\AVG\AVG10\avgssie.dll [2011-06-21 2269536]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
Windows Live ID Sign-in Helper - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2010-09-21 439168]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AE7CD045-E861-484f-8273-0445EE161910}]
Adobe PDF Conversion Toolbar Helper - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll [2011-06-06 339872]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre6\bin\jp2ssv.dll [2011-05-04 42272]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{F4971EE7-DAA0-4053-9964-665D8EE6A077}]
SmartSelect Class - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll [2011-06-06 339872]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{FFFFFFFF-CF4E-4F2B-BDC2-0E72E116A856}]
HP Smart BHO Class - C:\Program Files\HP\Digital Imaging\Smart Web Printing\hpswp_BHO.dll [2009-05-21 509496]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{47833539-D0C5-4125-9FA8-0819E2EAAC93} - Adobe PDF - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll [2011-06-06 339872]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"RtHDVCpl"=C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe [2009-12-25 8129056]
"AVG_TRAY"=C:\Program Files\AVG\AVG10\avgtray.exe [2011-04-18 2334560]
"Adobe ARM"=C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2011-03-30 937920]
"HP Software Update"=C:\Program Files\HP\HP Software Update\HPWuSchd2.exe [2007-05-08 54840]
"SunJavaUpdateSched"=C:\Program Files\Common Files\Java\Java Update\jusched.exe [2011-04-08 254696]
"AdobeAAMUpdater-1.0"=C:\Program Files\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [2011-03-30 499608]
"StartCCC"=C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [2011-05-24 336384]
"Start WingMan Profiler"=C:\Program Files\Logitech\Gaming Software\LWEMon.exe [2010-06-15 153672]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"DAEMON Tools Lite"=D:\Programy\DAEMON Tools Lite\DTLite.exe [2011-01-05 1305408]
"RocketDock"=D:\Programy\RocketDock\RocketDock.exe [2007-09-02 495616]
"Advanced SystemCare 4"=D:\Programy\Advanced SystemCare 4\ASCTray.exe [2011-05-28 412560]
"ICQ"=C:\Program Files\ICQ7.5\ICQ.exe [2011-06-29 124216]

C:\Users\Poula\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
_uninst_06112948.lnk - C:\Users\Poula\AppData\Local\Temp\_uninst_06112948.bat

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED}

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=credssp.dll

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\PEVSystemStart]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\procexp90.Sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Hamachi2Svc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\PEVSystemStart]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\procexp90.Sys]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorAdmin"=5
"ConsentPromptBehaviorUser"=3
"EnableUIADesktopToggle"=0
"PromptOnSecureDesktop"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.msadpcm"=msadp32.acm
"midimapper"=midimap.dll
"wavemapper"=msacm32.drv
"vidc.uyvy"=msyuv.dll
"vidc.yuy2"=msyuv.dll
"vidc.yvyu"=msyuv.dll
"vidc.iyuv"=iyuv_32.dll
"vidc.i420"=iyuv_32.dll
"vidc.yvu9"=tsbyuv.dll
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"vidc.cvid"=iccvid.dll
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv
"SENTINEL"=snti386.dll
"VIDC.XFR1"=xfcodec.dll
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"aux1"=wdmaud.drv

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*

======List of files/folders created in the last 1 month======

2011-07-11 15:04:09 ----D---- C:\rsit
2011-07-11 15:04:09 ----D---- C:\Program Files\trend micro
2011-07-11 14:58:15 ----D---- C:\ProgramData\Kaspersky Lab
2011-07-11 14:58:00 ----A---- C:\Windows\system32\drivers\06112948.sys
2011-07-11 14:18:05 ----D---- C:\Program Files\CCleaner
2011-07-11 12:25:08 ----D---- C:\Users\Poula\AppData\Roaming\Outlook
2011-07-08 14:00:23 ----D---- C:\Program Files\Common Files\Logitech
2011-07-08 13:59:58 ----D---- C:\Program Files\Logitech
2011-07-05 10:18:18 ----A---- C:\Windows\IsUninst.exe
2011-07-04 09:50:22 ----A---- C:\Windows\system32\drivers\cmdatp.sys
2011-07-04 09:50:21 ----D---- C:\Users\Poula\AppData\Roaming\COMODO
2011-07-04 09:49:43 ----D---- C:\ProgramData\COMODO
2011-07-03 18:39:46 ----D---- C:\Users\Poula\AppData\Roaming\2K Sports
2011-06-29 08:20:23 ----A---- C:\Windows\system32\umpnpmgr.dll
2011-06-29 08:20:22 ----A---- C:\Windows\system32\tquery.dll
2011-06-29 08:20:22 ----A---- C:\Windows\system32\SearchIndexer.exe
2011-06-29 08:20:22 ----A---- C:\Windows\system32\mssrch.dll
2011-06-29 08:20:21 ----A---- C:\Windows\system32\SearchProtocolHost.exe
2011-06-29 08:20:21 ----A---- C:\Windows\system32\SearchFilterHost.exe
2011-06-29 08:20:21 ----A---- C:\Windows\system32\mssvp.dll
2011-06-29 08:20:21 ----A---- C:\Windows\system32\mssphtb.dll
2011-06-29 08:20:21 ----A---- C:\Windows\system32\mssph.dll
2011-06-29 08:20:21 ----A---- C:\Windows\system32\msscntrs.dll
2011-06-24 14:53:19 ----RHD---- C:\Users\Poula\AppData\Roaming\SecuROM
2011-06-24 14:26:12 ----A---- C:\Windows\system32\drivers\tap0901.sys
2011-06-24 09:46:18 ----D---- C:\Users\Poula\AppData\Roaming\Day 1 Studios
2011-06-21 08:43:06 ----D---- C:\ProgramData\ATI
2011-06-21 08:42:35 ----D---- C:\Program Files\AMD APP
2011-06-18 10:44:58 ----D---- C:\ProgramData\Trymedia
2011-06-17 12:29:53 ----D---- C:\ProgramData\ALM
2011-06-17 10:17:28 ----A---- C:\Windows\system32\mshtmled.dll
2011-06-17 10:17:27 ----A---- C:\Windows\system32\jscript9.dll
2011-06-17 10:17:27 ----A---- C:\Windows\system32\jscript.dll
2011-06-17 10:17:27 ----A---- C:\Windows\system32\ieui.dll
2011-06-17 10:17:27 ----A---- C:\Windows\system32\iertutil.dll
2011-06-17 10:17:26 ----A---- C:\Windows\system32\urlmon.dll
2011-06-17 10:17:26 ----A---- C:\Windows\system32\mshtml.dll
2011-06-17 10:17:26 ----A---- C:\Windows\system32\ieframe.dll
2011-06-17 09:24:07 ----D---- C:\Program Files\iPod
2011-06-17 08:56:35 ----A---- C:\Windows\system32\oleaut32.dll
2011-06-17 08:56:34 ----A---- C:\Windows\system32\inetcomm.dll
2011-06-17 08:56:34 ----A---- C:\Windows\system32\drivers\srvnet.sys
2011-06-17 08:56:34 ----A---- C:\Windows\system32\drivers\srv2.sys
2011-06-17 08:56:34 ----A---- C:\Windows\system32\drivers\srv.sys
2011-06-17 08:56:33 ----A---- C:\Windows\system32\drivers\tcpip.sys
2011-06-17 08:56:33 ----A---- C:\Windows\system32\drivers\mrxsmb20.sys
2011-06-17 08:56:33 ----A---- C:\Windows\system32\drivers\mrxsmb10.sys
2011-06-17 08:56:33 ----A---- C:\Windows\system32\drivers\mrxsmb.sys
2011-06-17 08:56:33 ----A---- C:\Windows\system32\drivers\afd.sys
2011-06-16 10:46:21 ----D---- C:\Users\Poula\AppData\Roaming\Rainmeter
2011-06-13 10:50:55 ----D---- C:\Program Files\Common Files\Java
2011-06-13 10:50:44 ----A---- C:\Windows\system32\javaws.exe
2011-06-13 10:50:44 ----A---- C:\Windows\system32\javaw.exe
2011-06-13 10:50:44 ----A---- C:\Windows\system32\java.exe

======List of files/folders modified in the last 1 month======

2011-07-11 15:04:12 ----D---- C:\Windows\Temp
2011-07-11 15:04:09 ----RD---- C:\Program Files
2011-07-11 15:02:15 ----D---- C:\Windows\system32\drivers
2011-07-11 14:58:18 ----SHD---- C:\System Volume Information
2011-07-11 14:58:15 ----HD---- C:\ProgramData
2011-07-11 14:57:56 ----D---- C:\Users\Poula\AppData\Roaming\ICQ
2011-07-11 14:50:50 ----D---- C:\Windows\system32\config
2011-07-11 14:50:47 ----D---- C:\Windows\winsxs
2011-07-11 14:48:42 ----D---- C:\Windows\System32
2011-07-11 14:38:09 ----D---- C:\Program Files\Common Files\Akamai
2011-07-11 14:37:59 ----D---- C:\Windows
2011-07-11 14:25:42 ----D---- C:\Windows\system32\catroot
2011-07-11 14:25:05 ----SHD---- C:\Windows\Installer
2011-07-11 14:25:03 ----HD---- C:\Config.Msi
2011-07-11 14:24:40 ----D---- C:\Windows\system32\DriverStore
2011-07-11 14:24:40 ----D---- C:\Windows\inf
2011-07-11 14:18:51 ----D---- C:\Users\Poula\AppData\Roaming\Winamp
2011-07-11 14:18:51 ----D---- C:\Users\Poula\AppData\Roaming\DAEMON Tools Lite
2011-07-11 14:18:49 ----D---- C:\Windows\Logs
2011-07-11 14:02:08 ----D---- C:\Program Files\MSXML 4.0
2011-07-11 13:58:05 ----A---- C:\Windows\system32\PerfStringBackup.INI
2011-07-11 12:47:20 ----D---- C:\Windows\system32\drivers\AVG
2011-07-11 11:49:30 ----D---- C:\Windows\system32\Tasks
2011-07-11 11:48:12 ----D---- C:\Windows\system32\catroot2
2011-07-09 09:23:57 ----D---- C:\Windows\debug
2011-07-08 14:00:23 ----D---- C:\Program Files\Common Files
2011-07-06 16:03:55 ----A---- C:\Windows\NHL09 Uninstaller.exe
2011-07-05 12:03:22 ----D---- C:\Users\Poula\AppData\Roaming\Vso
2011-07-04 09:50:22 ----DC---- C:\Windows\system32\DRVSTORE
2011-07-03 18:21:41 ----D---- C:\Windows\Prefetch
2011-07-03 18:10:22 ----RSD---- C:\Windows\assembly
2011-06-30 12:00:17 ----D---- C:\Program Files\ICQ7.5
2011-06-29 11:46:38 ----RSD---- C:\Windows\Fonts
2011-06-23 19:25:50 ----A---- C:\Windows\system32\PnkBstrB.exe
2011-06-22 15:51:24 ----D---- C:\Windows\system32\directx
2011-06-21 08:42:19 ----D---- C:\Program Files\ATI Technologies
2011-06-20 10:44:43 ----D---- C:\Windows\system32\drivers\etc
2011-06-20 10:16:51 ----D---- C:\ProgramData\regid.1986-12.com.adobe
2011-06-19 16:14:07 ----D---- C:\Windows\Microsoft.NET
2011-06-19 15:02:55 ----D---- C:\Program Files\Adobe
2011-06-18 09:59:35 ----D---- C:\Program Files\Common Files\Adobe
2011-06-17 14:34:56 ----D---- C:\Program Files\Microsoft Silverlight
2011-06-17 14:33:42 ----D---- C:\Program Files\Internet Explorer
2011-06-17 12:30:48 ----D---- C:\Users\Poula\AppData\Roaming\Adobe
2011-06-17 12:27:13 ----D---- C:\ProgramData\Adobe
2011-06-17 12:22:53 ----D---- C:\Program Files\Common Files\Adobe AIR
2011-06-17 10:21:09 ----D---- C:\ProgramData\Microsoft Help
2011-06-17 10:19:22 ----A---- C:\Windows\system32\MRT.exe
2011-06-17 09:24:07 ----D---- C:\Program Files\Common Files\Apple
2011-06-16 17:46:51 ----SD---- C:\Users\Poula\AppData\Roaming\Microsoft
2011-06-13 10:50:43 ----D---- C:\Program Files\Java

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 06112948;06112948; C:\Windows\system32\DRIVERS\06112948.sys [2011-07-11 133208]
R0 AVGIDSEH;AVGIDSEH; C:\Windows\system32\DRIVERS\AVGIDSEH.Sys [2011-02-22 22992]
R0 Avgrkx86;AVG Anti-Rootkit Driver; C:\Windows\system32\DRIVERS\avgrkx86.sys [2011-03-16 32592]
R0 pciide;pciide; C:\Windows\system32\drivers\pciide.sys [2009-07-14 12368]
R0 rdyboost;ReadyBoost; C:\Windows\System32\drivers\rdyboost.sys [2010-11-20 173440]
R1 Avgldx86;AVG AVI Loader Driver; C:\Windows\system32\DRIVERS\avgldx86.sys [2011-01-07 248656]
R1 Avgmfx86;AVG Mini-Filter Resident Anti-Virus Shield; C:\Windows\system32\DRIVERS\avgmfx86.sys [2011-03-01 34896]
R1 Avgtdix;AVG TDI Driver; C:\Windows\system32\DRIVERS\avgtdix.sys [2011-04-05 297168]
R1 dtsoftbus01;DAEMON Tools Virtual Bus Driver; C:\Windows\system32\DRIVERS\dtsoftbus01.sys [2011-02-04 218176]
R2 CVPNDRVA;Cisco Systems Inc. IPSec Driver; \??\C:\Windows\system32\Drivers\CVPNDRVA.sys [2010-03-23 308859]
R2 Parvdm;Parvdm; C:\Windows\system32\DRIVERS\parvdm.sys [2009-07-14 8704]
R2 Sentinel;Sentinel; C:\Windows\System32\Drivers\SENTINEL.SYS [2001-06-22 73728]
R3 amdkmdag;amdkmdag; C:\Windows\system32\DRIVERS\atikmdag.sys [2011-05-25 7800832]
R3 amdkmdap;amdkmdap; C:\Windows\system32\DRIVERS\atikmpag.sys [2011-05-25 245760]
R3 AtiHDAudioService;ATI Function Driver for HD Audio Service; C:\Windows\system32\drivers\AtihdW73.sys [2011-03-30 100880]
R3 AVGIDSDriver;AVGIDSDriver; C:\Windows\system32\DRIVERS\AVGIDSDriver.Sys [2011-04-14 134480]
R3 AVGIDSFilter;AVGIDSFilter; C:\Windows\system32\DRIVERS\AVGIDSFilter.Sys [2011-02-10 24144]
R3 AVGIDSShim;AVGIDSShim; C:\Windows\system32\DRIVERS\AVGIDSShim.Sys [2011-02-10 21968]
R3 DNE;Deterministic Network Enhancer Miniport; C:\Windows\system32\DRIVERS\dne2000.sys [2008-11-16 131984]
R3 GEARAspiWDM;GEAR ASPI Filter Driver; C:\Windows\system32\DRIVERS\GEARAspiWDM.sys [2009-05-18 26600]
R3 hamachi;Hamachi Network Interface; C:\Windows\system32\DRIVERS\hamachi.sys [2009-03-18 26176]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\Windows\system32\drivers\RTKVHDA.sys [2009-12-25 2981024]
R3 RTL8167;Realtek 8167 NT Driver; C:\Windows\system32\DRIVERS\Rt86win7.sys [2011-03-21 362600]
R3 tap0901;TAP-Win32 Adapter V9; C:\Windows\system32\DRIVERS\tap0901.sys [2010-11-08 26112]
R3 WmBEnum;Logitech Virtual Bus Enumerator Driver; C:\Windows\system32\drivers\WmBEnum.sys [2010-04-28 22856]
R3 WmVirHid;Logitech Virtual Hid Device Driver; C:\Windows\system32\drivers\WmVirHid.sys [2010-04-28 15048]
R3 WmXlCore;Logitech Translation Layer Driver; C:\Windows\system32\drivers\WmXlCore.sys [2010-04-28 66632]
S0 sptd;sptd; C:\Windows\System32\Drivers\sptd.sys []
S3 aic78xx;aic78xx; C:\Windows\system32\DRIVERS\djsvs.sys [2009-07-14 70720]
S3 amdagp;Ovladač filtru AMD portu AGP; C:\Windows\system32\drivers\amdagp.sys [2009-07-14 53312]
S3 ATP;Comodo EasyVPN Miniport Driver; C:\Windows\system32\DRIVERS\cmdatp.sys [2010-12-13 17816]
S3 b57nd60x;Broadcom NetXtreme Gigabit Ethernet - NDIS 6.0; C:\Windows\system32\DRIVERS\b57nd60x.sys [2009-07-14 229888]
S3 CVirtA;Cisco Systems VPN Adapter; C:\Windows\system32\DRIVERS\CVirtA.sys [2007-01-18 5275]
S3 Dot4;MS IEEE-1284.4 Driver; C:\Windows\system32\DRIVERS\Dot4.sys [2009-07-14 131072]
S3 Dot4Print;Print Class Driver for IEEE-1284.4; C:\Windows\system32\drivers\Dot4Prt.sys [2010-11-20 16384]
S3 dot4usb;MS Dot4USB Filter Dot4USB Filter; C:\Windows\system32\DRIVERS\dot4usb.sys [2009-07-14 36864]
S3 FLASHSYS;FLASHSYS; \??\C:\Program Files\MSI\Live Update 4\LU4\FLASHSYS.sys [2007-12-14 9216]
S3 HTCAND32;HTC Device Driver; C:\Windows\System32\Drivers\ANDROIDUSB.sys [2009-10-26 25088]
S3 PCAlertDriver;PCAlertDriver; \??\D:\Programy\MSI\PC Alert 4\NTGLM7X.sys []
S3 RTL8169;Realtek 8169 NT Driver; C:\Windows\system32\DRIVERS\Rtlh86.sys [2010-06-23 259176]
S3 sisagp;Filtr SIS sběrnice AGP; C:\Windows\system32\drivers\sisagp.sys [2009-07-14 52304]
S3 TsUsbFlt;@%SystemRoot%\system32\drivers\tsusbflt.sys,-1; C:\Windows\System32\drivers\tsusbflt.sys [2010-11-20 52224]
S3 USBAAPL;Apple Mobile USB Driver; C:\Windows\System32\Drivers\usbaapl.sys [2011-05-10 42496]
S3 usbscan;Ovladač skeneru USB; C:\Windows\system32\DRIVERS\usbscan.sys [2009-07-14 35840]
S3 viaagp;Filtr VIA sběrnice AGP; C:\Windows\system32\drivers\viaagp.sys [2009-07-14 53328]
S3 ViaC7;VIA C7 Processor Driver; C:\Windows\system32\DRIVERS\viac7.sys [2009-07-14 52736]
S3 WinUsb;WinUsb; C:\Windows\system32\DRIVERS\WinUsb.sys [2010-11-20 35968]
S3 WmFilter;Logitech Gaming HID Filter Driver; C:\Windows\system32\drivers\WmFilter.sys [2010-04-27 37704]
S3 xusb21;Xbox 360 Wireless Receiver Driver Service 21; C:\Windows\system32\DRIVERS\xusb21.sys [2009-04-08 56448]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 AdobeARMservice;Adobe Acrobat Update Service; C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe [2011-06-06 64952]
R2 AdvancedSystemCareService;Advanced SystemCare Service; D:\Programy\Advanced SystemCare 4\ASCService.exe [2011-05-28 353168]
R2 Akamai;Akamai NetSession Interface; C:\Windows\System32\svchost.exe [2009-07-14 20992]
R2 AMD External Events Utility;AMD External Events Utility; C:\Windows\system32\atiesrxx.exe [2011-05-25 176128]
R2 Apple Mobile Device;Apple Mobile Device; C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe [2011-02-18 37664]
R2 AVGIDSAgent;AVGIDSAgent; C:\Program Files\AVG\AVG10\Identity Protection\Agent\Bin\AVGIDSAgent.exe [2011-04-18 7398752]
R2 avgwd;AVG WatchDog; C:\Program Files\AVG\AVG10\avgwdsvc.exe [2011-02-08 269520]
R2 Bonjour Service;Bonjour Service; C:\Program Files\Bonjour\mDNSResponder.exe [2011-04-06 349472]
R2 CrdphService;COMODO EasyVPN VNC Service; D:\Programy\Comodo\crdphService.exe [2010-11-23 495920]
R2 CVPND;Cisco Systems, Inc. VPN Service; D:\Programy\VPN Client\cvpnd.exe [2010-03-23 1528616]
R2 EasyVpnAdpt;COMODO EasyVPN Service; D:\Programy\Comodo\Vpnservice.exe [2010-12-14 119088]
R2 Hamachi2Svc;LogMeIn Hamachi 2.0 Tunneling Engine; D:\Programy\Hamachi\hamachi-2.exe [2011-05-25 1336712]
R2 hpqddsvc;Služba HP CUE DeviceDiscovery; C:\Windows\system32\svchost.exe [2009-07-14 20992]
R2 impi_smpd;Intel(R) MPI Library Process Manager, Intel; D:\MSC.Software\Marc\2010\marc2010\intelmpi\win32\bin\ismpd.exe [2007-10-11 1114112]
R2 MSC.Licensing 11.6;MSC.Licensing 11.6; D:\Programy\MSC Software\MSC.Licensing\11.6\lmgrd.exe [2009-07-14 1431440]
R2 Net Driver HPZ12;Net Driver HPZ12; C:\Windows\System32\svchost.exe [2009-07-14 20992]
R2 Pml Driver HPZ12;Pml Driver HPZ12; C:\Windows\System32\svchost.exe [2009-07-14 20992]
R2 PnkBstrA;PnkBstrA; C:\Windows\system32\PnkBstrA.exe [2011-06-04 75136]
R2 UGS License Server (ugslmd);UGS License Server (ugslmd); D:\Programy\Siemens NX\UGSLicensing\lmgrd.exe [2009-07-07 1510152]
R2 wlidsvc;Windows Live ID Sign-in Assistant; C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE [2010-09-21 1710464]
R3 hpqcxs08;hpqcxs08; C:\Windows\system32\svchost.exe [2009-07-14 20992]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
S3 InstallShield Licensing Service;InstallShield Licensing Service; C:\Program Files\Common Files\InstallShield Shared\Service\InstallShield Licensing Service.exe [2011-03-16 78536]
S3 iPod Service;iPod Service; C:\Program Files\iPod\bin\iPodService.exe [2011-06-07 820520]
S3 NMIndexingService;NMIndexingService; C:\Program Files\Common Files\Nero\Lib\NMIndexingService.exe [2008-06-24 537896]
S3 odserv;Microsoft Office Diagnostics Service; C:\Program Files\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE [2008-11-04 441712]
S3 ose;Office Source Engine; C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2006-10-26 145184]
S3 SwitchBoard;SwitchBoard; C:\Program Files\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [2010-02-19 517096]
S3 WatAdminSvc;@%SystemRoot%\system32\Wat\WatUX.exe,-601; C:\Windows\system32\Wat\WatAdminSvc.exe [2011-02-04 1343400]

-----------------EOF-----------------

Budu rád za každou pomoc děkuji

[chodnik74]

Dobrý den
takže nejprve trochu úklidu a změnu programů...

Odinstalovat AVG a vyměnit za jiný antivir ( avg má dost flešné detekce,problémové,málo učinný,zpomalující systém)

• Antivir + firewall
• Doporučené zabezpečení systému naleznete ZDE
  avast! Free Antivirus

-Za mě pokud můžu doporučit,tak stačí Avast

Odinstalujte všechny nepotřebné toolbary

Odinstalujte Advanced SystemCare 4 + vše od OIBitu (takto si systém můžete zbořit a znefunkčnit

Až budete mít vše hotové,tak spuste Combofix..

Program nepoužívejte bez doporučení Rádce a pozorně se řiďte následujících pokynu,protože program netoleruje chyby a může dojít k úplnému poškození systému!!

• Stáhneme si Combofix
• Program uložíme nejlépe na Plochu
• Vypneme všechny rezidentní štíty.Jak antiviru,tak antispywaru a firewallu
• Vypneme všechny běžící aplikace (ICQ,prohlížeč,programy) a necháme pouze Combofix
• Spustíme Combofix.exe s administrátorským oprávněním
  U Windows XP se přihlásíme pod účtem správce
  Ve Windows 7 a Vista klikněte pravým tlačítkem myši na Combofix.exe a dejte ,,Spustit jako správce,,)
• Hned po startu programu na vás vyskočí licenční podmínky,tak potvrdíme tlačítkemANO
• Pokud vám Combofix nabídne instalaci Konzoly pro zotavení,tak souhlaste a nechte nainstalovat(zde je potřeba aktivní připojení na internet)
• Pokračujte dle pokynů programu a během skenování na nic neklikejte,na pc nepracujte(ICQ,jiné aplikace,internet..).Nechte počítač v klidu.
• Celý sken tvá mezi 5-15 min,ale pokud je v PC hodně havěti,tak se čas může lišit.
• Po skončení skenování(případném restartu počítače) se vám zobrazí log z Combofixu,který mi vložte sem(Kdyby se log nezobrazil,tak jej najdete zde: C:\ComboFix.txt
• (Pokud si nevíte rady s kterýmkoliv z výše uvedených kroků,tak se ptejte nebo mrkněte na detailnější návod včetně obrázků http://www.bleepingcomputer.com/combofi ... t-combofix )

[Poulito]

dekuji za radu..po odinstalovani advanced system care a AVG uz pocitac zase bezi jak ma. Jen by me zajimalo v cem byl zakopany pes

[chodnik74]

Pokračujte dále Ještě jsme neskončili

[Poulito]

Tak mel sem spusteny test od Avastu..takze sem musel chvili pockat nez se budu moct pustit do Combofix-u

Zde je log

ComboFix 11-07-11.02 - Poula 11.07.2011 17:21:24.2.4 - x86
Microsoft Windows 7 Home Premium 6.1.7601.1.1250.420.1029.18.3319.2265 [GMT 2:00]
Spuštěný z: e:\__downloads\ComboFix.exe
AV: avast! Antivirus *Disabled/Updated* {2B2D1395-420B-D5C9-657E-930FE358FC3C}
SP: avast! Antivirus *Disabled/Updated* {904CF271-6431-DA47-5FCE-A87D98DFB681}
SP: Windows Defender *Disabled/Outdated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.
.
((((((((((((((((((((((((( Soubory vytvořené od 2011-06-11 do 2011-07-11 )))))))))))))))))))))))))))))))
.
.
2011-07-11 15:25 . 2011-07-11 15:25 -------- d-----w- c:\users\Default\AppData\Local\temp
2011-07-11 14:18 . 2011-07-11 14:18 -------- d-----w- c:\programdata\TomTom
2011-07-11 14:18 . 2011-07-11 14:18 -------- d-----w- c:\users\Poula\AppData\Roaming\TomTom
2011-07-11 14:18 . 2011-07-11 14:18 -------- d-----w- c:\users\Poula\AppData\Local\TomTom
2011-07-11 14:17 . 2011-07-11 14:17 -------- d-----w- c:\program files\TomTom International B.V
2011-07-11 14:16 . 2011-07-11 14:17 -------- d-----w- c:\program files\TomTom HOME 2
2011-07-11 14:16 . 2011-07-11 14:16 -------- d-----w- c:\program files\TomTom DesktopSuite
2011-07-11 13:50 . 2011-07-11 13:50 -------- d-----w- c:\users\Poula\AppData\Roaming\HTC
2011-07-11 13:47 . 2011-07-11 13:47 -------- d-----w- c:\program files\Spirent Communications
2011-07-11 13:47 . 2011-07-11 13:49 -------- d-----w- c:\program files\HTC
2011-07-11 13:34 . 2011-07-04 11:36 309848 ----a-w- c:\windows\system32\drivers\aswSP.sys
2011-07-11 13:34 . 2011-07-04 11:32 19544 ----a-w- c:\windows\system32\drivers\aswFsBlk.sys
2011-07-11 13:34 . 2011-07-04 11:32 25432 ----a-w- c:\windows\system32\drivers\aswRdr.sys
2011-07-11 13:34 . 2011-07-04 11:35 43608 ----a-w- c:\windows\system32\drivers\aswTdi.sys
2011-07-11 13:34 . 2011-07-04 11:36 441176 ----a-w- c:\windows\system32\drivers\aswSnx.sys
2011-07-11 13:34 . 2011-07-04 11:32 54104 ----a-w- c:\windows\system32\drivers\aswMonFlt.sys
2011-07-11 13:34 . 2011-07-04 11:43 40112 ----a-w- c:\windows\avastSS.scr
2011-07-11 13:34 . 2011-07-04 11:43 199304 ----a-w- c:\windows\system32\aswBoot.exe
2011-07-11 13:34 . 2011-07-11 13:34 -------- d-----w- c:\programdata\AVAST Software
2011-07-11 13:34 . 2011-07-11 13:34 -------- d-----w- c:\program files\AVAST Software
2011-07-11 13:04 . 2011-07-11 13:04 -------- d-----w- C:\rsit
2011-07-11 13:04 . 2011-07-11 13:04 -------- d-----w- c:\program files\trend micro
2011-07-11 12:58 . 2011-07-11 12:58 -------- d-----w- c:\programdata\Kaspersky Lab
2011-07-11 12:18 . 2011-07-11 12:18 -------- d-----w- c:\program files\CCleaner
2011-07-11 10:25 . 2011-07-11 11:53 -------- d-----w- c:\users\Poula\AppData\Roaming\Outlook
2011-07-11 09:48 . 2011-07-11 09:48 -------- d-----w- c:\users\Poula\AppData\Local\Downloaded Installations
2011-07-08 12:02 . 2011-07-08 12:02 -------- d-----w- c:\users\Poula\AppData\Local\Logitech
2011-07-08 12:00 . 2011-07-08 12:00 -------- d-----w- c:\program files\Common Files\Logitech
2011-07-08 11:59 . 2011-07-08 11:59 -------- d-----w- c:\program files\Logitech
2011-07-05 08:18 . 1998-10-02 17:00 327168 ----a-w- c:\windows\IsUninst.exe
2011-07-04 07:50 . 2010-12-13 08:01 17816 ----a-w- c:\windows\system32\drivers\cmdatp.sys
2011-07-04 07:50 . 2011-07-04 07:52 -------- d-----w- c:\users\Poula\AppData\Roaming\COMODO
2011-07-04 07:49 . 2011-07-04 07:49 -------- d-----w- c:\programdata\COMODO
2011-07-04 07:38 . 2011-07-11 12:08 -------- d-----w- c:\users\Poula\AppData\Local\LogMeIn Hamachi
2011-07-03 16:39 . 2011-07-03 16:39 -------- d-----w- c:\users\Poula\AppData\Roaming\2K Sports
2011-06-29 06:20 . 2011-05-24 10:44 293376 ----a-w- c:\windows\system32\umpnpmgr.dll
2011-06-29 06:20 . 2011-05-04 04:34 1549312 ----a-w- c:\windows\system32\tquery.dll
2011-06-29 06:20 . 2011-05-04 04:32 1401344 ----a-w- c:\windows\system32\mssrch.dll
2011-06-29 06:20 . 2011-05-04 04:28 427520 ----a-w- c:\windows\system32\SearchIndexer.exe
2011-06-29 06:20 . 2011-05-04 04:32 666624 ----a-w- c:\windows\system32\mssvp.dll
2011-06-29 06:20 . 2011-05-04 04:32 337408 ----a-w- c:\windows\system32\mssph.dll
2011-06-29 06:20 . 2011-05-04 04:32 197120 ----a-w- c:\windows\system32\mssphtb.dll
2011-06-29 06:20 . 2011-05-04 04:32 59392 ----a-w- c:\windows\system32\msscntrs.dll
2011-06-29 06:20 . 2011-05-04 04:28 86528 ----a-w- c:\windows\system32\SearchFilterHost.exe
2011-06-29 06:20 . 2011-05-04 04:28 164352 ----a-w- c:\windows\system32\SearchProtocolHost.exe
2011-06-24 12:53 . 2011-06-24 12:53 -------- d--h--r- c:\users\Poula\AppData\Roaming\SecuROM
2011-06-24 12:26 . 2010-11-08 21:04 26112 ----a-w- c:\windows\system32\drivers\tap0901.sys
2011-06-24 07:46 . 2011-06-24 07:46 -------- d-----w- c:\users\Poula\AppData\Roaming\Day 1 Studios
2011-06-21 06:43 . 2011-06-21 06:43 -------- d-----w- c:\programdata\ATI
2011-06-21 06:42 . 2011-06-21 06:42 -------- d-----w- c:\program files\AMD APP
2011-06-20 06:14 . 2011-06-20 06:14 404640 ----a-w- c:\windows\system32\FlashPlayerCPLApp.cpl
2011-06-18 08:44 . 2011-06-18 08:44 -------- d-----w- c:\programdata\Trymedia
2011-06-17 10:29 . 2011-06-17 10:29 -------- d-----w- c:\programdata\ALM
2011-06-17 08:17 . 2011-04-25 15:29 141104 ----a-w- c:\program files\Internet Explorer\sqmapi.dll
2011-06-17 08:17 . 2011-04-22 23:25 2382848 ----a-w- c:\windows\system32\mshtml.tlb
2011-06-17 08:17 . 2011-04-22 23:35 1797632 ----a-w- c:\windows\system32\jscript9.dll
2011-06-17 07:24 . 2011-06-17 07:24 -------- d-----w- c:\program files\iPod
2011-06-17 06:56 . 2011-02-25 05:34 571904 ----a-w- c:\windows\system32\oleaut32.dll
2011-06-17 06:56 . 2011-05-03 04:30 741376 ----a-w- c:\windows\system32\inetcomm.dll
2011-06-17 06:56 . 2011-04-29 02:46 311808 ----a-w- c:\windows\system32\drivers\srv.sys
2011-06-17 06:56 . 2011-04-29 02:46 310272 ----a-w- c:\windows\system32\drivers\srv2.sys
2011-06-17 06:56 . 2011-04-29 02:46 114688 ----a-w- c:\windows\system32\drivers\srvnet.sys
2011-06-17 06:56 . 2011-04-27 02:17 223744 ----a-w- c:\windows\system32\drivers\mrxsmb10.sys
2011-06-17 06:56 . 2011-04-27 02:17 96768 ----a-w- c:\windows\system32\drivers\mrxsmb20.sys
2011-06-17 06:56 . 2011-04-27 02:17 123904 ----a-w- c:\windows\system32\drivers\mrxsmb.sys
2011-06-17 06:56 . 2011-04-25 04:31 1290624 ----a-w- c:\windows\system32\drivers\tcpip.sys
2011-06-17 06:56 . 2011-04-25 02:18 338944 ----a-w- c:\windows\system32\drivers\afd.sys
2011-06-16 08:46 . 2011-06-16 08:47 -------- d-----w- c:\users\Poula\AppData\Roaming\Rainmeter
2011-06-13 08:50 . 2011-06-13 08:50 -------- d-----w- c:\program files\Common Files\Java
2011-06-12 15:55 . 2011-06-13 17:37 -------- d-----w- c:\users\Poula\AppData\Local\NFS Underground 2
.
.
.
(((((((((((((((((((((((((((((((((((((((( Find3M výpis ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2011-07-06 14:03 . 2011-05-13 12:24 160422 ----a-w- c:\windows\NHL09 Uninstaller.exe
2011-06-23 17:25 . 2011-02-04 17:55 141200 ----a-w- c:\windows\system32\drivers\PnkBstrK.sys
2011-06-23 17:25 . 2011-02-05 14:52 281656 ----a-w- c:\windows\system32\PnkBstrB.xtr
2011-06-23 17:25 . 2011-02-04 17:54 281656 ----a-w- c:\windows\system32\PnkBstrB.exe
2011-06-21 15:26 . 2011-02-04 17:54 281656 ----a-w- c:\windows\system32\PnkBstrB.ex0
2011-06-06 19:55 . 2011-06-06 19:55 47512 ----a-w- c:\windows\system32\AdobePDF.dll
2011-06-06 19:55 . 2011-06-06 19:55 22936 ----a-w- c:\windows\system32\AdobePDFUI.dll
2011-06-04 15:55 . 2011-02-04 17:55 138056 ----a-w- c:\users\Poula\AppData\Roaming\PnkBstrK.sys
2011-06-04 15:55 . 2011-02-04 17:54 75136 ----a-w- c:\windows\system32\PnkBstrA.exe
2011-05-25 05:40 . 2011-05-24 14:32 444952 ----a-w- c:\windows\system32\wrap_oal.dll
2011-05-25 05:40 . 2011-05-24 14:32 109080 ----a-w- c:\windows\system32\OpenAL32.dll
2011-05-25 04:25 . 2011-05-25 04:25 7800832 ----a-w- c:\windows\system32\drivers\atikmdag.sys
2011-05-25 03:31 . 2011-05-25 03:31 17940992 ----a-w- c:\windows\system32\atioglxx.dll
2011-05-25 03:07 . 2011-05-25 03:07 151552 ----a-w- c:\windows\system32\atiapfxx.exe
2011-05-25 03:07 . 2011-01-05 03:02 688128 ----a-w- c:\windows\system32\aticfx32.dll
2011-05-25 03:04 . 2011-05-25 03:04 462848 ----a-w- c:\windows\system32\ATIDEMGX.dll
2011-05-25 03:03 . 2011-05-25 03:03 401408 ----a-w- c:\windows\system32\atieclxx.exe
2011-05-25 03:03 . 2011-05-25 03:03 176128 ----a-w- c:\windows\system32\atiesrxx.exe
2011-05-25 03:02 . 2011-05-25 03:02 159744 ----a-w- c:\windows\system32\atitmmxx.dll
2011-05-25 03:02 . 2011-05-25 03:02 356352 ----a-w- c:\windows\system32\atipdlxx.dll
2011-05-25 03:02 . 2011-05-25 03:02 278528 ----a-w- c:\windows\system32\Oemdspif.dll
2011-05-25 03:01 . 2011-05-25 03:01 15872 ----a-w- c:\windows\system32\atimuixx.dll
2011-05-25 03:01 . 2011-05-25 03:01 43520 ----a-w- c:\windows\system32\ati2edxx.dll
2011-05-25 02:59 . 2011-05-25 02:59 1828864 ----a-w- c:\windows\system32\atiumdmv.dll
2011-05-25 02:58 . 2011-01-05 02:52 4219904 ----a-w- c:\windows\system32\atidxx32.dll
2011-05-25 02:50 . 2011-05-25 02:50 4017152 ----a-w- c:\windows\system32\atiumdva.dll
2011-05-25 02:47 . 2011-05-25 02:47 46080 ----a-w- c:\windows\system32\aticalrt.dll
2011-05-25 02:47 . 2011-05-25 02:47 44032 ----a-w- c:\windows\system32\aticalcl.dll
2011-05-25 02:43 . 2011-05-25 02:43 6847488 ----a-w- c:\windows\system32\aticaldd.dll
2011-05-25 02:39 . 2011-05-25 02:39 4330496 ----a-w- c:\windows\system32\atiumdag.dll
2011-05-25 02:38 . 2011-05-25 02:38 52736 ----a-w- c:\windows\system32\atimpc32.dll
2011-05-25 02:38 . 2011-05-25 02:38 52736 ----a-w- c:\windows\system32\amdpcom32.dll
2011-05-25 02:26 . 2011-05-25 02:26 262144 ----a-w- c:\windows\system32\atiadlxx.dll
2011-05-25 02:26 . 2011-05-25 02:26 12800 ----a-w- c:\windows\system32\atiglpxx.dll
2011-05-25 02:25 . 2011-05-25 02:25 32768 ----a-w- c:\windows\system32\atigktxx.dll
2011-05-25 02:25 . 2011-05-25 02:25 245760 ----a-w- c:\windows\system32\drivers\atikmpag.sys
2011-05-25 02:24 . 2010-10-27 02:13 31744 ----a-w- c:\windows\system32\atiuxpag.dll
2011-05-25 02:24 . 2011-05-25 02:24 29184 ----a-w- c:\windows\system32\atiu9pag.dll
2011-05-25 02:24 . 2011-05-25 02:24 53248 ----a-w- c:\windows\system32\drivers\ati2erec.dll
2011-05-25 02:18 . 2010-10-27 02:14 52736 ----a-w- c:\windows\system32\coinst.dll
2011-05-24 21:44 . 2011-05-24 21:44 59904 ----a-w- c:\windows\system32\OVDecode.dll
2011-05-24 21:43 . 2011-05-24 21:43 12798976 ----a-w- c:\windows\system32\amdocl.dll
2011-05-23 12:30 . 2011-05-23 12:30 123904 ----a-w- c:\windows\system32\poqexec.exe
2011-05-13 12:56 . 2011-05-13 12:56 107888 ----a-w- c:\windows\system32\CmdLineExt.dll
2011-05-10 06:06 . 2011-05-10 06:06 4517664 ----a-w- c:\windows\system32\usbaaplrc.dll
2011-05-10 06:06 . 2011-05-10 06:06 42496 ----a-w- c:\windows\system32\drivers\usbaapl.sys
2011-05-05 16:13 . 2011-05-05 16:13 98 ----a-w- c:\windows\mdappt2010.bat
2011-05-05 16:13 . 2011-05-05 16:13 105 ----a-w- c:\windows\mdachassis2010.bat
2011-05-05 16:13 . 2011-05-05 16:13 86 ----a-w- c:\windows\mdadams2010.bat
2011-05-04 02:52 . 2011-02-04 18:11 472808 ----a-w- c:\windows\system32\deployJava1.dll
2011-05-03 07:04 . 2011-05-03 07:04 86528 ----a-w- c:\windows\system32\iesysprep.dll
2011-05-03 07:04 . 2011-05-03 07:04 76800 ----a-w- c:\windows\system32\SetIEInstalledDate.exe
2011-05-03 07:04 . 2011-05-03 07:04 74752 ----a-w- c:\windows\system32\RegisterIEPKEYs.exe
2011-05-03 07:04 . 2011-05-03 07:04 63488 ----a-w- c:\windows\system32\tdc.ocx
2011-05-03 07:04 . 2011-05-03 07:04 48640 ----a-w- c:\windows\system32\mshtmler.dll
2011-05-03 07:04 . 2011-05-03 07:04 161792 ----a-w- c:\windows\system32\msls31.dll
2011-05-03 07:04 . 2011-05-03 07:04 1126912 ----a-w- c:\windows\system32\wininet.dll
2011-05-03 07:04 . 2011-05-03 07:04 110592 ----a-w- c:\windows\system32\IEAdvpack.dll
2011-05-03 07:04 . 2011-05-03 07:04 74752 ----a-w- c:\windows\system32\iesetup.dll
2011-05-03 07:04 . 2011-05-03 07:04 420864 ----a-w- c:\windows\system32\vbscript.dll
2011-05-03 07:04 . 2011-05-03 07:04 367104 ----a-w- c:\windows\system32\html.iec
2011-05-03 07:04 . 2011-05-03 07:04 35840 ----a-w- c:\windows\system32\imgutil.dll
2011-05-03 07:04 . 2011-05-03 07:04 23552 ----a-w- c:\windows\system32\licmgr10.dll
2011-05-03 07:04 . 2011-05-03 07:04 152064 ----a-w- c:\windows\system32\wextract.exe
2011-05-03 07:04 . 2011-05-03 07:04 150528 ----a-w- c:\windows\system32\iexpress.exe
2011-05-03 07:04 . 2011-05-03 07:04 142848 ----a-w- c:\windows\system32\ieUnatt.exe
2011-05-03 07:04 . 2011-05-03 07:04 1427456 ----a-w- c:\windows\system32\inetcpl.cpl
2011-05-03 07:04 . 2011-05-03 07:04 11776 ----a-w- c:\windows\system32\mshta.exe
2011-05-03 07:04 . 2011-05-03 07:04 101888 ----a-w- c:\windows\system32\admparse.dll
2011-04-22 19:14 . 2011-05-25 05:21 27008 ----a-w- c:\windows\system32\drivers\Diskdump.sys
2011-04-17 19:57 . 2011-04-17 19:57 41872 ----a-w- c:\windows\system32\xfcodec.dll
2011-04-15 23:40 . 2011-05-25 05:40 809496 ----a-r- c:\windows\system32\tmp40C8.tmp
2011-04-15 23:40 . 2011-05-24 14:32 809496 ----a-r- c:\windows\system32\tmp10F2.tmp
2011-04-15 23:40 . 2011-04-15 23:40 809496 ----a-r- c:\windows\system32\tmp40C7.tmp
2011-04-15 23:40 . 2011-04-15 23:40 809496 ----a-r- c:\windows\system32\tmp10F1.tmp
2011-04-14 16:24 . 2011-04-14 16:24 1247606 ----a-w- c:\users\Poula\002.ren
2011-04-14 16:21 . 2011-04-14 16:21 1247606 ----a-w- c:\users\Poula\001.ren
2011-06-16 04:30 . 2011-07-11 14:58 142296 ----a-w- c:\program files\mozilla firefox\components\browsercomps.dll
.
.
(((((((((((((((((((((((((((((((((( Spouštěcí body v registru )))))))))))))))))))))))))))))))))))))))))))))
.
.
*Poznámka* prázdné záznamy a legitimní výchozí údaje nejsou zobrazeny.
REGEDIT4
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\00avast]
@="{472083B0-C522-11CF-8763-00608CC02F24}"
[HKEY_CLASSES_ROOT\CLSID\{472083B0-C522-11CF-8763-00608CC02F24}]
2011-07-04 11:43 122512 ----a-w- c:\program files\AVAST Software\Avast\ashShell.dll
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"DAEMON Tools Lite"="d:\programy\DAEMON Tools Lite\DTLite.exe" [2011-01-05 1305408]
"RocketDock"="d:\programy\RocketDock\RocketDock.exe" [2007-09-02 495616]
"ICQ"="c:\program files\ICQ7.5\ICQ.exe" [2011-06-29 124216]
"TomTomHOME.exe"="c:\program files\TomTom HOME 2\TomTomHOMERunner.exe" [2011-04-22 247728]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"RtHDVCpl"="c:\program files\Realtek\Audio\HDA\RtHDVCpl.exe" [2009-12-25 8129056]
"Adobe ARM"="c:\program files\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2011-03-30 937920]
"HP Software Update"="c:\program files\HP\HP Software Update\HPWuSchd2.exe" [2007-05-08 54840]
"SunJavaUpdateSched"="c:\program files\Common Files\Java\Java Update\jusched.exe" [2011-04-08 254696]
"AdobeAAMUpdater-1.0"="c:\program files\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe" [2011-03-30 499608]
"StartCCC"="c:\program files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" [2011-05-24 336384]
"Start WingMan Profiler"="c:\program files\Logitech\Gaming Software\LWEMon.exe" [2010-06-14 153672]
"avast"="c:\program files\AVAST Software\Avast\avastUI.exe" [2011-07-04 3493720]
"HTC Sync Loader"="c:\program files\HTC\HTC Sync 3.0\htcUPCTLoader.exe" [2011-01-27 585728]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorAdmin"= 5 (0x5)
"ConsentPromptBehaviorUser"= 3 (0x3)
"EnableUIADesktopToggle"= 0 (0x0)
"PromptOnSecureDesktop"= 0 (0x0)
.
[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\lsa]
Security Packages REG_MULTI_SZ kerberos msv1_0 schannel wdigest tspkg pku2u livessp
.
R0 sptd;sptd;c:\windows\\SystemRoot\System32\Drivers\sptd.sys [x]
R2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;c:\windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
R3 ATP;Comodo EasyVPN Miniport Driver;c:\windows\system32\DRIVERS\cmdatp.sys [2010-12-13 17816]
R3 FLASHSYS;FLASHSYS;c:\program files\MSI\Live Update 4\LU4\FLASHSYS.sys [2007-12-14 9216]
R3 HTCAND32;HTC Device Driver;c:\windows\system32\Drivers\ANDROIDUSB.sys [2009-10-26 25088]
R3 htcnprot;HTC NDIS Protocol Driver;c:\windows\system32\DRIVERS\htcnprot.sys [2010-06-23 23040]
R3 PCAlertDriver;PCAlertDriver;d:\programy\MSI\PC Alert 4\NTGLM7X.sys [x]
R3 SwitchBoard;SwitchBoard;c:\program files\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [2010-02-19 517096]
R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys [2010-11-20 52224]
R3 WatAdminSvc;Služba Technologie aktivace Windows;c:\windows\system32\Wat\WatAdminSvc.exe [2011-02-04 1343400]
S1 aswSnx;aswSnx; [x]
S1 aswSP;aswSP; [x]
S1 dtsoftbus01;DAEMON Tools Virtual Bus Driver;c:\windows\system32\DRIVERS\dtsoftbus01.sys [2011-02-04 218176]
S2 AdobeARMservice;Adobe Acrobat Update Service;c:\program files\Common Files\Adobe\ARM\1.0\armsvc.exe [2011-06-06 64952]
S2 Akamai;Akamai NetSession Interface;c:\windows\System32\svchost.exe [2009-07-14 20992]
S2 AMD External Events Utility;AMD External Events Utility;c:\windows\system32\atiesrxx.exe [2011-05-25 176128]
S2 aswFsBlk;aswFsBlk; [x]
S2 aswMonFlt;aswMonFlt;c:\windows\system32\drivers\aswMonFlt.sys [2011-07-04 54104]
S2 CrdphService;COMODO EasyVPN VNC Service;d:\programy\Comodo\crdphService.exe [2010-11-23 495920]
S2 EasyVpnAdpt;COMODO EasyVPN Service;d:\programy\Comodo\Vpnservice.exe [2010-12-14 119088]
S2 Hamachi2Svc;LogMeIn Hamachi 2.0 Tunneling Engine;d:\programy\Hamachi\hamachi-2.exe [2011-05-25 1336712]
S2 impi_smpd;Intel(R) MPI Library Process Manager, Intel;d:\msc.software\Marc\2010\marc2010\intelmpi\win32\bin\ismpd.exe [2007-10-10 1114112]
S2 MSC.Licensing 11.6;MSC.Licensing 11.6;d:\programy\MSC Software\MSC.Licensing\11.6\lmgrd.exe [2009-07-14 1431440]
S2 PassThru Service;Internet Pass-Through Service;c:\program files\HTC\Internet Pass-Through\PassThruSvr.exe [2010-09-16 80896]
S2 TomTomHOMEService;TomTomHOMEService;c:\program files\TomTom HOME 2\TomTomHOMEService.exe [2011-04-22 92592]
S2 UGS License Server (ugslmd);UGS License Server (ugslmd);d:\programy\Siemens NX\UGSLicensing\lmgrd.exe [2009-07-07 1510152]
S3 amdkmdag;amdkmdag;c:\windows\system32\DRIVERS\atikmdag.sys [2011-05-25 7800832]
S3 amdkmdap;amdkmdap;c:\windows\system32\DRIVERS\atikmpag.sys [2011-05-25 245760]
S3 AtiHDAudioService;ATI Function Driver for HD Audio Service;c:\windows\system32\drivers\AtihdW73.sys [2011-03-30 100880]
S3 RTL8167;Realtek 8167 NT Driver;c:\windows\system32\DRIVERS\Rt86win7.sys [2011-03-21 362600]
.
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost]
HPZ12 REG_MULTI_SZ Pml Driver HPZ12 Net Driver HPZ12
hpdevmgmt REG_MULTI_SZ hpqcxs08 hpqddsvc
Akamai REG_MULTI_SZ Akamai
.
Obsah adresáře 'Naplánované úlohy'
.
2011-07-11 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1898659907-3972282731-4262410125-1001Core.job
- c:\users\Poula\AppData\Local\Google\Update\GoogleUpdate.exe [2011-02-04 16:44]
.
2011-07-11 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1898659907-3972282731-4262410125-1001UA.job
- c:\users\Poula\AppData\Local\Google\Update\GoogleUpdate.exe [2011-02-04 16:44]
.
.
------- Doplňkový sken -------
.
uInternet Settings,ProxyOverride = *.local
IE: E&xportovat do aplikace Microsoft Excel - c:\progra~1\MICROS~3\Office12\EXCEL.EXE/3000
IE: {{7578ADEA-D65F-4C89-A249-B1C88B6FFC20} - c:\program files\ICQ7.5\ICQ.exe
FF - ProfilePath - c:\users\Poula\AppData\Roaming\Mozilla\Firefox\Profiles\ythzgied.default\
FF - prefs.js: browser.search.selectedEngine -
.
.
--------------------- ZAMKNUTÉ KLÍČE V REGISTRU ---------------------
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\PCW\Security]
@Denied: (Full) (Everyone)
.
Celkový čas: 2011-07-11 17:26:37
ComboFix-quarantined-files.txt 2011-07-11 15:26
ComboFix2.txt 2011-07-11 15:12
.
Před spuštěním: Volných bajtů: 61 206 708 224
Po spuštění: Volných bajtů: 61 151 023 104
.
- - End Of File - - 1D76EC8EBB7C693BB04B1265FA5C4C11

[chodnik74]

Otevřeme si Poznámkový blok

• (stiskneme klávesovou kombinaci WIN+R a napíšeme ,,notepad,, bez úvozovek a dáme enter)
• Vložíme do něj následující script:

  Kód: Vybrat vše

  KillAll::
  
  Registry::
  [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
  "DAEMON Tools Lite"=-
  [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
  "Adobe ARM"=-
  "HP Software Update"=-
  "SunJavaUpdateSched"=-
  "AdobeAAMUpdater-1.0"=-
  "StartCCC"=-
  
  Firefox::
  FF - ProfilePath - c:\users\Poula\AppData\Roaming\Mozilla\Firefox\Profiles\ythzgied.default\
  FF - prefs.js: browser.search.selectedEngine - 
  
  RegLock::
  [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\PCW\Security]
  
  Reboot::
  

• Soubor uložíme na Plochu jako CFScript.txt
• Poté tento soubor uchopíme levým tlačítkem myši a přetáhneme na ikonu Combofixu a upustíme
  
  
• Poté Combofix provede všechny operace a udělá nový log,který sem vložte

Poté pohledáme po další havěti,kterou nám pustil ESET

Malwarebytes' Anti-Malware

• Stáhneme,nainstalujeme a spustíme(pokud si nevíte rady jak,klikněte ZDE)
• Vybereme Úplná kontrola a klikneme na tlačítko Prohledat
• Program provede kontrolu počítače a na konci se vám objeví hláska,že bylo skenování dokončeno,tak potvrdíme tlačítkem OK
• Objeví se vám log,který mi sem vložte
• NIC NEMAZAT!!Program mívá občas falešné detekce,takže mazat budeme až po konzultaci

[Poulito]

zde je log z combofixu..zanedlouho pridam z malware programu

ComboFix 11-07-11.02 - Poula 11.07.2011 18:12:01.3.4 - x86
Microsoft Windows 7 Home Premium 6.1.7601.1.1250.420.1029.18.3319.2233 [GMT 2:00]
Spuštěný z: e:\__downloads\ComboFix.exe
Použité ovládací přepínače :: c:\users\Poula\Desktop\CFScript.txt
AV: avast! Antivirus *Disabled/Updated* {2B2D1395-420B-D5C9-657E-930FE358FC3C}
SP: avast! Antivirus *Disabled/Updated* {904CF271-6431-DA47-5FCE-A87D98DFB681}
SP: Windows Defender *Disabled/Outdated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.
.
((((((((((((((((((((((((( Soubory vytvořené od 2011-06-11 do 2011-07-11 )))))))))))))))))))))))))))))))
.
.
2011-07-11 16:15 . 2011-07-11 16:15 -------- d-----w- c:\users\Default\AppData\Local\temp
2011-07-11 16:08 . 2011-07-11 16:08 -------- d-----w- c:\users\Poula\AppData\Roaming\Malwarebytes
2011-07-11 16:08 . 2011-07-11 16:08 -------- d-----w- c:\programdata\Malwarebytes
2011-07-11 16:08 . 2011-05-29 07:11 39984 ----a-w- c:\windows\system32\drivers\mbamswissarmy.sys
2011-07-11 16:08 . 2011-07-11 16:08 -------- d-----w- c:\program files\Malwarebytes' Anti-Malware
2011-07-11 16:08 . 2011-05-29 07:11 22712 ----a-w- c:\windows\system32\drivers\mbam.sys
2011-07-11 14:18 . 2011-07-11 14:18 -------- d-----w- c:\programdata\TomTom
2011-07-11 14:18 . 2011-07-11 14:18 -------- d-----w- c:\users\Poula\AppData\Roaming\TomTom
2011-07-11 14:18 . 2011-07-11 14:18 -------- d-----w- c:\users\Poula\AppData\Local\TomTom
2011-07-11 14:17 . 2011-07-11 14:17 -------- d-----w- c:\program files\TomTom International B.V
2011-07-11 14:16 . 2011-07-11 14:17 -------- d-----w- c:\program files\TomTom HOME 2
2011-07-11 14:16 . 2011-07-11 14:16 -------- d-----w- c:\program files\TomTom DesktopSuite
2011-07-11 13:50 . 2011-07-11 13:50 -------- d-----w- c:\users\Poula\AppData\Roaming\HTC
2011-07-11 13:47 . 2011-07-11 13:47 -------- d-----w- c:\program files\Spirent Communications
2011-07-11 13:47 . 2011-07-11 13:49 -------- d-----w- c:\program files\HTC
2011-07-11 13:34 . 2011-07-04 11:36 309848 ----a-w- c:\windows\system32\drivers\aswSP.sys
2011-07-11 13:34 . 2011-07-04 11:32 19544 ----a-w- c:\windows\system32\drivers\aswFsBlk.sys
2011-07-11 13:34 . 2011-07-04 11:32 25432 ----a-w- c:\windows\system32\drivers\aswRdr.sys
2011-07-11 13:34 . 2011-07-04 11:35 43608 ----a-w- c:\windows\system32\drivers\aswTdi.sys
2011-07-11 13:34 . 2011-07-04 11:36 441176 ----a-w- c:\windows\system32\drivers\aswSnx.sys
2011-07-11 13:34 . 2011-07-04 11:32 54104 ----a-w- c:\windows\system32\drivers\aswMonFlt.sys
2011-07-11 13:34 . 2011-07-04 11:43 40112 ----a-w- c:\windows\avastSS.scr
2011-07-11 13:34 . 2011-07-04 11:43 199304 ----a-w- c:\windows\system32\aswBoot.exe
2011-07-11 13:34 . 2011-07-11 13:34 -------- d-----w- c:\programdata\AVAST Software
2011-07-11 13:34 . 2011-07-11 13:34 -------- d-----w- c:\program files\AVAST Software
2011-07-11 13:04 . 2011-07-11 13:04 -------- d-----w- C:\rsit
2011-07-11 13:04 . 2011-07-11 13:04 -------- d-----w- c:\program files\trend micro
2011-07-11 12:58 . 2011-07-11 12:58 -------- d-----w- c:\programdata\Kaspersky Lab
2011-07-11 12:18 . 2011-07-11 12:18 -------- d-----w- c:\program files\CCleaner
2011-07-11 10:25 . 2011-07-11 11:53 -------- d-----w- c:\users\Poula\AppData\Roaming\Outlook
2011-07-11 09:48 . 2011-07-11 09:48 -------- d-----w- c:\users\Poula\AppData\Local\Downloaded Installations
2011-07-08 12:02 . 2011-07-08 12:02 -------- d-----w- c:\users\Poula\AppData\Local\Logitech
2011-07-08 12:00 . 2011-07-08 12:00 -------- d-----w- c:\program files\Common Files\Logitech
2011-07-08 11:59 . 2011-07-08 11:59 -------- d-----w- c:\program files\Logitech
2011-07-05 08:18 . 1998-10-02 17:00 327168 ----a-w- c:\windows\IsUninst.exe
2011-07-04 07:50 . 2010-12-13 08:01 17816 ----a-w- c:\windows\system32\drivers\cmdatp.sys
2011-07-04 07:50 . 2011-07-04 07:52 -------- d-----w- c:\users\Poula\AppData\Roaming\COMODO
2011-07-04 07:49 . 2011-07-04 07:49 -------- d-----w- c:\programdata\COMODO
2011-07-04 07:38 . 2011-07-11 12:08 -------- d-----w- c:\users\Poula\AppData\Local\LogMeIn Hamachi
2011-07-03 16:39 . 2011-07-03 16:39 -------- d-----w- c:\users\Poula\AppData\Roaming\2K Sports
2011-06-29 06:20 . 2011-05-24 10:44 293376 ----a-w- c:\windows\system32\umpnpmgr.dll
2011-06-29 06:20 . 2011-05-04 04:34 1549312 ----a-w- c:\windows\system32\tquery.dll
2011-06-29 06:20 . 2011-05-04 04:32 1401344 ----a-w- c:\windows\system32\mssrch.dll
2011-06-29 06:20 . 2011-05-04 04:28 427520 ----a-w- c:\windows\system32\SearchIndexer.exe
2011-06-29 06:20 . 2011-05-04 04:32 666624 ----a-w- c:\windows\system32\mssvp.dll
2011-06-29 06:20 . 2011-05-04 04:32 337408 ----a-w- c:\windows\system32\mssph.dll
2011-06-29 06:20 . 2011-05-04 04:32 197120 ----a-w- c:\windows\system32\mssphtb.dll
2011-06-29 06:20 . 2011-05-04 04:32 59392 ----a-w- c:\windows\system32\msscntrs.dll
2011-06-29 06:20 . 2011-05-04 04:28 86528 ----a-w- c:\windows\system32\SearchFilterHost.exe
2011-06-29 06:20 . 2011-05-04 04:28 164352 ----a-w- c:\windows\system32\SearchProtocolHost.exe
2011-06-24 12:53 . 2011-06-24 12:53 -------- d--h--r- c:\users\Poula\AppData\Roaming\SecuROM
2011-06-24 12:26 . 2010-11-08 21:04 26112 ----a-w- c:\windows\system32\drivers\tap0901.sys
2011-06-24 07:46 . 2011-06-24 07:46 -------- d-----w- c:\users\Poula\AppData\Roaming\Day 1 Studios
2011-06-21 06:43 . 2011-06-21 06:43 -------- d-----w- c:\programdata\ATI
2011-06-21 06:42 . 2011-06-21 06:42 -------- d-----w- c:\program files\AMD APP
2011-06-20 06:14 . 2011-06-20 06:14 404640 ----a-w- c:\windows\system32\FlashPlayerCPLApp.cpl
2011-06-18 08:44 . 2011-06-18 08:44 -------- d-----w- c:\programdata\Trymedia
2011-06-17 10:29 . 2011-06-17 10:29 -------- d-----w- c:\programdata\ALM
2011-06-17 08:17 . 2011-04-25 15:29 141104 ----a-w- c:\program files\Internet Explorer\sqmapi.dll
2011-06-17 08:17 . 2011-04-22 23:25 2382848 ----a-w- c:\windows\system32\mshtml.tlb
2011-06-17 08:17 . 2011-04-22 23:35 1797632 ----a-w- c:\windows\system32\jscript9.dll
2011-06-17 07:24 . 2011-06-17 07:24 -------- d-----w- c:\program files\iPod
2011-06-17 06:56 . 2011-02-25 05:34 571904 ----a-w- c:\windows\system32\oleaut32.dll
2011-06-17 06:56 . 2011-05-03 04:30 741376 ----a-w- c:\windows\system32\inetcomm.dll
2011-06-17 06:56 . 2011-04-29 02:46 311808 ----a-w- c:\windows\system32\drivers\srv.sys
2011-06-17 06:56 . 2011-04-29 02:46 310272 ----a-w- c:\windows\system32\drivers\srv2.sys
2011-06-17 06:56 . 2011-04-29 02:46 114688 ----a-w- c:\windows\system32\drivers\srvnet.sys
2011-06-17 06:56 . 2011-04-27 02:17 223744 ----a-w- c:\windows\system32\drivers\mrxsmb10.sys
2011-06-17 06:56 . 2011-04-27 02:17 96768 ----a-w- c:\windows\system32\drivers\mrxsmb20.sys
2011-06-17 06:56 . 2011-04-27 02:17 123904 ----a-w- c:\windows\system32\drivers\mrxsmb.sys
2011-06-17 06:56 . 2011-04-25 04:31 1290624 ----a-w- c:\windows\system32\drivers\tcpip.sys
2011-06-17 06:56 . 2011-04-25 02:18 338944 ----a-w- c:\windows\system32\drivers\afd.sys
2011-06-16 08:46 . 2011-06-16 08:47 -------- d-----w- c:\users\Poula\AppData\Roaming\Rainmeter
2011-06-13 08:50 . 2011-06-13 08:50 -------- d-----w- c:\program files\Common Files\Java
2011-06-12 15:55 . 2011-06-13 17:37 -------- d-----w- c:\users\Poula\AppData\Local\NFS Underground 2
.
.
.
(((((((((((((((((((((((((((((((((((((((( Find3M výpis ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2011-07-06 14:03 . 2011-05-13 12:24 160422 ----a-w- c:\windows\NHL09 Uninstaller.exe
2011-06-23 17:25 . 2011-02-04 17:55 141200 ----a-w- c:\windows\system32\drivers\PnkBstrK.sys
2011-06-23 17:25 . 2011-02-05 14:52 281656 ----a-w- c:\windows\system32\PnkBstrB.xtr
2011-06-23 17:25 . 2011-02-04 17:54 281656 ----a-w- c:\windows\system32\PnkBstrB.exe
2011-06-21 15:26 . 2011-02-04 17:54 281656 ----a-w- c:\windows\system32\PnkBstrB.ex0
2011-06-06 19:55 . 2011-06-06 19:55 47512 ----a-w- c:\windows\system32\AdobePDF.dll
2011-06-06 19:55 . 2011-06-06 19:55 22936 ----a-w- c:\windows\system32\AdobePDFUI.dll
2011-06-04 15:55 . 2011-02-04 17:55 138056 ----a-w- c:\users\Poula\AppData\Roaming\PnkBstrK.sys
2011-06-04 15:55 . 2011-02-04 17:54 75136 ----a-w- c:\windows\system32\PnkBstrA.exe
2011-05-25 05:40 . 2011-05-24 14:32 444952 ----a-w- c:\windows\system32\wrap_oal.dll
2011-05-25 05:40 . 2011-05-24 14:32 109080 ----a-w- c:\windows\system32\OpenAL32.dll
2011-05-25 04:25 . 2011-05-25 04:25 7800832 ----a-w- c:\windows\system32\drivers\atikmdag.sys
2011-05-25 03:31 . 2011-05-25 03:31 17940992 ----a-w- c:\windows\system32\atioglxx.dll
2011-05-25 03:07 . 2011-05-25 03:07 151552 ----a-w- c:\windows\system32\atiapfxx.exe
2011-05-25 03:07 . 2011-01-05 03:02 688128 ----a-w- c:\windows\system32\aticfx32.dll
2011-05-25 03:04 . 2011-05-25 03:04 462848 ----a-w- c:\windows\system32\ATIDEMGX.dll
2011-05-25 03:03 . 2011-05-25 03:03 401408 ----a-w- c:\windows\system32\atieclxx.exe
2011-05-25 03:03 . 2011-05-25 03:03 176128 ----a-w- c:\windows\system32\atiesrxx.exe
2011-05-25 03:02 . 2011-05-25 03:02 159744 ----a-w- c:\windows\system32\atitmmxx.dll
2011-05-25 03:02 . 2011-05-25 03:02 356352 ----a-w- c:\windows\system32\atipdlxx.dll
2011-05-25 03:02 . 2011-05-25 03:02 278528 ----a-w- c:\windows\system32\Oemdspif.dll
2011-05-25 03:01 . 2011-05-25 03:01 15872 ----a-w- c:\windows\system32\atimuixx.dll
2011-05-25 03:01 . 2011-05-25 03:01 43520 ----a-w- c:\windows\system32\ati2edxx.dll
2011-05-25 02:59 . 2011-05-25 02:59 1828864 ----a-w- c:\windows\system32\atiumdmv.dll
2011-05-25 02:58 . 2011-01-05 02:52 4219904 ----a-w- c:\windows\system32\atidxx32.dll
2011-05-25 02:50 . 2011-05-25 02:50 4017152 ----a-w- c:\windows\system32\atiumdva.dll
2011-05-25 02:47 . 2011-05-25 02:47 46080 ----a-w- c:\windows\system32\aticalrt.dll
2011-05-25 02:47 . 2011-05-25 02:47 44032 ----a-w- c:\windows\system32\aticalcl.dll
2011-05-25 02:43 . 2011-05-25 02:43 6847488 ----a-w- c:\windows\system32\aticaldd.dll
2011-05-25 02:39 . 2011-05-25 02:39 4330496 ----a-w- c:\windows\system32\atiumdag.dll
2011-05-25 02:38 . 2011-05-25 02:38 52736 ----a-w- c:\windows\system32\atimpc32.dll
2011-05-25 02:38 . 2011-05-25 02:38 52736 ----a-w- c:\windows\system32\amdpcom32.dll
2011-05-25 02:26 . 2011-05-25 02:26 262144 ----a-w- c:\windows\system32\atiadlxx.dll
2011-05-25 02:26 . 2011-05-25 02:26 12800 ----a-w- c:\windows\system32\atiglpxx.dll
2011-05-25 02:25 . 2011-05-25 02:25 32768 ----a-w- c:\windows\system32\atigktxx.dll
2011-05-25 02:25 . 2011-05-25 02:25 245760 ----a-w- c:\windows\system32\drivers\atikmpag.sys
2011-05-25 02:24 . 2010-10-27 02:13 31744 ----a-w- c:\windows\system32\atiuxpag.dll
2011-05-25 02:24 . 2011-05-25 02:24 29184 ----a-w- c:\windows\system32\atiu9pag.dll
2011-05-25 02:24 . 2011-05-25 02:24 53248 ----a-w- c:\windows\system32\drivers\ati2erec.dll
2011-05-25 02:18 . 2010-10-27 02:14 52736 ----a-w- c:\windows\system32\coinst.dll
2011-05-24 21:44 . 2011-05-24 21:44 59904 ----a-w- c:\windows\system32\OVDecode.dll
2011-05-24 21:43 . 2011-05-24 21:43 12798976 ----a-w- c:\windows\system32\amdocl.dll
2011-05-23 12:30 . 2011-05-23 12:30 123904 ----a-w- c:\windows\system32\poqexec.exe
2011-05-13 12:56 . 2011-05-13 12:56 107888 ----a-w- c:\windows\system32\CmdLineExt.dll
2011-05-10 06:06 . 2011-05-10 06:06 4517664 ----a-w- c:\windows\system32\usbaaplrc.dll
2011-05-10 06:06 . 2011-05-10 06:06 42496 ----a-w- c:\windows\system32\drivers\usbaapl.sys
2011-05-05 16:13 . 2011-05-05 16:13 98 ----a-w- c:\windows\mdappt2010.bat
2011-05-05 16:13 . 2011-05-05 16:13 105 ----a-w- c:\windows\mdachassis2010.bat
2011-05-05 16:13 . 2011-05-05 16:13 86 ----a-w- c:\windows\mdadams2010.bat
2011-05-04 02:52 . 2011-02-04 18:11 472808 ----a-w- c:\windows\system32\deployJava1.dll
2011-05-03 07:04 . 2011-05-03 07:04 86528 ----a-w- c:\windows\system32\iesysprep.dll
2011-05-03 07:04 . 2011-05-03 07:04 76800 ----a-w- c:\windows\system32\SetIEInstalledDate.exe
2011-05-03 07:04 . 2011-05-03 07:04 74752 ----a-w- c:\windows\system32\RegisterIEPKEYs.exe
2011-05-03 07:04 . 2011-05-03 07:04 63488 ----a-w- c:\windows\system32\tdc.ocx
2011-05-03 07:04 . 2011-05-03 07:04 48640 ----a-w- c:\windows\system32\mshtmler.dll
2011-05-03 07:04 . 2011-05-03 07:04 161792 ----a-w- c:\windows\system32\msls31.dll
2011-05-03 07:04 . 2011-05-03 07:04 1126912 ----a-w- c:\windows\system32\wininet.dll
2011-05-03 07:04 . 2011-05-03 07:04 110592 ----a-w- c:\windows\system32\IEAdvpack.dll
2011-05-03 07:04 . 2011-05-03 07:04 74752 ----a-w- c:\windows\system32\iesetup.dll
2011-05-03 07:04 . 2011-05-03 07:04 420864 ----a-w- c:\windows\system32\vbscript.dll
2011-05-03 07:04 . 2011-05-03 07:04 367104 ----a-w- c:\windows\system32\html.iec
2011-05-03 07:04 . 2011-05-03 07:04 35840 ----a-w- c:\windows\system32\imgutil.dll
2011-05-03 07:04 . 2011-05-03 07:04 23552 ----a-w- c:\windows\system32\licmgr10.dll
2011-05-03 07:04 . 2011-05-03 07:04 152064 ----a-w- c:\windows\system32\wextract.exe
2011-05-03 07:04 . 2011-05-03 07:04 150528 ----a-w- c:\windows\system32\iexpress.exe
2011-05-03 07:04 . 2011-05-03 07:04 142848 ----a-w- c:\windows\system32\ieUnatt.exe
2011-05-03 07:04 . 2011-05-03 07:04 1427456 ----a-w- c:\windows\system32\inetcpl.cpl
2011-05-03 07:04 . 2011-05-03 07:04 11776 ----a-w- c:\windows\system32\mshta.exe
2011-05-03 07:04 . 2011-05-03 07:04 101888 ----a-w- c:\windows\system32\admparse.dll
2011-04-22 19:14 . 2011-05-25 05:21 27008 ----a-w- c:\windows\system32\drivers\Diskdump.sys
2011-04-17 19:57 . 2011-04-17 19:57 41872 ----a-w- c:\windows\system32\xfcodec.dll
2011-04-15 23:40 . 2011-05-25 05:40 809496 ----a-r- c:\windows\system32\tmp40C8.tmp
2011-04-15 23:40 . 2011-05-24 14:32 809496 ----a-r- c:\windows\system32\tmp10F2.tmp
2011-04-15 23:40 . 2011-04-15 23:40 809496 ----a-r- c:\windows\system32\tmp40C7.tmp
2011-04-15 23:40 . 2011-04-15 23:40 809496 ----a-r- c:\windows\system32\tmp10F1.tmp
2011-04-14 16:24 . 2011-04-14 16:24 1247606 ----a-w- c:\users\Poula\002.ren
2011-04-14 16:21 . 2011-04-14 16:21 1247606 ----a-w- c:\users\Poula\001.ren
2011-06-16 04:30 . 2011-07-11 14:58 142296 ----a-w- c:\program files\mozilla firefox\components\browsercomps.dll
.
.
(((((((((((((((((((((((((((((((((( Spouštěcí body v registru )))))))))))))))))))))))))))))))))))))))))))))
.
.
*Poznámka* prázdné záznamy a legitimní výchozí údaje nejsou zobrazeny.
REGEDIT4
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\00avast]
@="{472083B0-C522-11CF-8763-00608CC02F24}"
[HKEY_CLASSES_ROOT\CLSID\{472083B0-C522-11CF-8763-00608CC02F24}]
2011-07-04 11:43 122512 ----a-w- c:\program files\AVAST Software\Avast\ashShell.dll
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"RocketDock"="d:\programy\RocketDock\RocketDock.exe" [2007-09-02 495616]
"ICQ"="c:\program files\ICQ7.5\ICQ.exe" [2011-06-29 124216]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"RtHDVCpl"="c:\program files\Realtek\Audio\HDA\RtHDVCpl.exe" [2009-12-25 8129056]
"Start WingMan Profiler"="c:\program files\Logitech\Gaming Software\LWEMon.exe" [2010-06-14 153672]
"avast"="c:\program files\AVAST Software\Avast\avastUI.exe" [2011-07-04 3493720]
"HTC Sync Loader"="c:\program files\HTC\HTC Sync 3.0\htcUPCTLoader.exe" [2011-01-27 585728]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorAdmin"= 5 (0x5)
"ConsentPromptBehaviorUser"= 3 (0x3)
"EnableUIADesktopToggle"= 0 (0x0)
"PromptOnSecureDesktop"= 0 (0x0)
.
[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\lsa]
Security Packages REG_MULTI_SZ kerberos msv1_0 schannel wdigest tspkg pku2u livessp
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe ARM]
2011-03-30 17:29 937920 ----a-w- c:\program files\Common Files\Adobe\ARM\1.0\AdobeARM.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\TomTomHOME.exe]
2011-04-22 12:21 247728 ----a-w- c:\program files\TomTom HOME 2\TomTomHOMERunner.exe
.
R0 sptd;sptd;c:\windows\\SystemRoot\System32\Drivers\sptd.sys [x]
R2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;c:\windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
R3 ATP;Comodo EasyVPN Miniport Driver;c:\windows\system32\DRIVERS\cmdatp.sys [2010-12-13 17816]
R3 FLASHSYS;FLASHSYS;c:\program files\MSI\Live Update 4\LU4\FLASHSYS.sys [2007-12-14 9216]
R3 HTCAND32;HTC Device Driver;c:\windows\system32\Drivers\ANDROIDUSB.sys [2009-10-26 25088]
R3 htcnprot;HTC NDIS Protocol Driver;c:\windows\system32\DRIVERS\htcnprot.sys [2010-06-23 23040]
R3 PCAlertDriver;PCAlertDriver;d:\programy\MSI\PC Alert 4\NTGLM7X.sys [x]
R3 SwitchBoard;SwitchBoard;c:\program files\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [2010-02-19 517096]
R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys [2010-11-20 52224]
R3 WatAdminSvc;Služba Technologie aktivace Windows;c:\windows\system32\Wat\WatAdminSvc.exe [2011-02-04 1343400]
S1 aswSnx;aswSnx; [x]
S1 aswSP;aswSP; [x]
S1 dtsoftbus01;DAEMON Tools Virtual Bus Driver;c:\windows\system32\DRIVERS\dtsoftbus01.sys [2011-02-04 218176]
S2 AdobeARMservice;Adobe Acrobat Update Service;c:\program files\Common Files\Adobe\ARM\1.0\armsvc.exe [2011-06-06 64952]
S2 Akamai;Akamai NetSession Interface;c:\windows\System32\svchost.exe [2009-07-14 20992]
S2 AMD External Events Utility;AMD External Events Utility;c:\windows\system32\atiesrxx.exe [2011-05-25 176128]
S2 aswFsBlk;aswFsBlk; [x]
S2 aswMonFlt;aswMonFlt;c:\windows\system32\drivers\aswMonFlt.sys [2011-07-04 54104]
S2 CrdphService;COMODO EasyVPN VNC Service;d:\programy\Comodo\crdphService.exe [2010-11-23 495920]
S2 EasyVpnAdpt;COMODO EasyVPN Service;d:\programy\Comodo\Vpnservice.exe [2010-12-14 119088]
S2 Hamachi2Svc;LogMeIn Hamachi 2.0 Tunneling Engine;d:\programy\Hamachi\hamachi-2.exe [2011-05-25 1336712]
S2 impi_smpd;Intel(R) MPI Library Process Manager, Intel;d:\msc.software\Marc\2010\marc2010\intelmpi\win32\bin\ismpd.exe [2007-10-10 1114112]
S2 MSC.Licensing 11.6;MSC.Licensing 11.6;d:\programy\MSC Software\MSC.Licensing\11.6\lmgrd.exe [2009-07-14 1431440]
S2 PassThru Service;Internet Pass-Through Service;c:\program files\HTC\Internet Pass-Through\PassThruSvr.exe [2010-09-16 80896]
S2 TomTomHOMEService;TomTomHOMEService;c:\program files\TomTom HOME 2\TomTomHOMEService.exe [2011-04-22 92592]
S2 UGS License Server (ugslmd);UGS License Server (ugslmd);d:\programy\Siemens NX\UGSLicensing\lmgrd.exe [2009-07-07 1510152]
S3 amdkmdag;amdkmdag;c:\windows\system32\DRIVERS\atikmdag.sys [2011-05-25 7800832]
S3 amdkmdap;amdkmdap;c:\windows\system32\DRIVERS\atikmpag.sys [2011-05-25 245760]
S3 AtiHDAudioService;ATI Function Driver for HD Audio Service;c:\windows\system32\drivers\AtihdW73.sys [2011-03-30 100880]
S3 RTL8167;Realtek 8167 NT Driver;c:\windows\system32\DRIVERS\Rt86win7.sys [2011-03-21 362600]
.
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost]
HPZ12 REG_MULTI_SZ Pml Driver HPZ12 Net Driver HPZ12
hpdevmgmt REG_MULTI_SZ hpqcxs08 hpqddsvc
Akamai REG_MULTI_SZ Akamai
.
Obsah adresáře 'Naplánované úlohy'
.
2011-07-11 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1898659907-3972282731-4262410125-1001Core.job
- c:\users\Poula\AppData\Local\Google\Update\GoogleUpdate.exe [2011-02-04 16:44]
.
2011-07-11 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1898659907-3972282731-4262410125-1001UA.job
- c:\users\Poula\AppData\Local\Google\Update\GoogleUpdate.exe [2011-02-04 16:44]
.
.
------- Doplňkový sken -------
.
uInternet Settings,ProxyOverride = *.local
IE: E&xportovat do aplikace Microsoft Excel - c:\progra~1\MICROS~3\Office12\EXCEL.EXE/3000
IE: {{7578ADEA-D65F-4C89-A249-B1C88B6FFC20} - c:\program files\ICQ7.5\ICQ.exe
FF - ProfilePath - c:\users\Poula\AppData\Roaming\Mozilla\Firefox\Profiles\ythzgied.default\
.
.
------------------------ Jiné spuštené procesy ------------------------
.
c:\windows\system32\atieclxx.exe
c:\program files\AVAST Software\Avast\AvastSvc.exe
c:\windows\system32\taskhost.exe
c:\program files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
c:\program files\Bonjour\mDNSResponder.exe
d:\programy\VPN Client\cvpnd.exe
c:\windows\system32\conhost.exe
c:\windows\system32\PnkBstrA.exe
c:\windows\system32\conhost.exe
d:\programy\MSC Software\MSC.Licensing\11.6\msc.exe
c:\program files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
c:\program files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe
c:\windows\system32\conhost.exe
d:\programy\Siemens NX\UGSLicensing\ugslmd.exe
c:\windows\system32\DllHost.exe
c:\windows\system32\sppsvc.exe
c:\program files\Windows Media Player\wmpnetwk.exe
.
**************************************************************************
.
Celkový čas: 2011-07-11 18:20:34 - počítač byl restartován
ComboFix-quarantined-files.txt 2011-07-11 16:20
ComboFix2.txt 2011-07-11 15:26
ComboFix3.txt 2011-07-11 15:12
.
Před spuštěním: Volných bajtů: 61 219 549 184
Po spuštění: Volných bajtů: 61 097 668 608
.
- - End Of File - - 2A8EDD4C98DB9E35FAD50052988D7B3B

[chodnik74]

Výborně..počkám na MBAM poté uklidíme a uděláme také údržbu

[Poulito]

no koukam ze to jeste chvili potrva

[chodnik74]

Nevadí,já si počkám..většinou je to mezi 40-60 minutami..jak u koho záleží na počtu souborů a rychlosti PC

[Poulito]

tak tady je

Malwarebytes' Anti-Malware 1.51.0.1200
www.malwarebytes.org

Verze databáze: 7072

Windows 6.1.7601 Service Pack 1
Internet Explorer 9.0.8112.16421

11.7.2011 19:32:35
mbam-log-2011-07-11 (19-32-26).txt

Typ: Úplná kontrola (C:\|D:\|E:\|)
Kontrolované objekty: 483614
Uplynulý čas: 1 hodin, 3 minut, 11 sekund

Infikované procesy v paměti: 0
Infikované moduly v paměti: 0
Infikované klíče v registru: 0
Infikované hodnoty v registru: 0
Infikované datové položky v registru: 0
Infikované složky: 0
Infikované soubory: 6

Infikované procesy v paměti:
(Žádné škodlivé položky nebyly zjištěny)

Infikované moduly v paměti:
(Žádné škodlivé položky nebyly zjištěny)

Infikované klíče v registru:
(Žádné škodlivé položky nebyly zjištěny)

Infikované hodnoty v registru:
(Žádné škodlivé položky nebyly zjištěny)

Infikované datové položky v registru:
(Žádné škodlivé položky nebyly zjištěny)

Infikované složky:
(Žádné škodlivé položky nebyly zjištěny)

Infikované soubory:
d:\Programy\UGS\NX 7.5\nxnastran\nxn7\i386\libups_cl.dll (Malware.Packer.Gen) -> No action taken.
d:\Programy\UGS\NX 7.5\nxnastran\nxn7\i386\adina\libnxn.dll (Malware.Packer.Gen) -> No action taken.
e:\__downloads\NX 7.5\program files\UGS\NX 7.5\nxnastran\nxn7\i386\libups_cl.dll (Malware.Packer.Gen) -> No action taken.
e:\__downloads\NX 7.5\program files\UGS\NX 7.5\nxnastran\nxn7\i386\adina\libnxn.dll (Malware.Packer.Gen) -> No action taken.
e:\__downloads\oo.defrag\1\CORE10k.EXE (Dont.Steal.Our.Software) -> No action taken.
e:\__downloads\oo.defrag\1\keygen.exe (RiskWare.Tool.CK) -> No action taken.

[chodnik74]

Nalazené položky smazat

Jdeme uklízet..první po použitých aplikacích..


Stiskněte klávesovou kombinaci WIN+R( nebo start-spustit ),čímž se vám otevře okno pro zadání příkazu pro spuštění a zkopírujte a vložte sem následujíci text: Combofix /Uninstall a dejte enter

T-Cleaner

• Spustíme,zmáčkneme klávesu A a potvrdíme ENTER(některé antiviry mohou detekovat utilitu jako vir-jedá se o falešný poplach,proto IGNOROVAT nebo dočasně vypnout antivir )
• po použití T-Cleaner smažte

TFC

• Stáhneme a spustíme program
• Klikneme na Start a potvrdíme OK
• Program začne uklízet,poté restartuje pc
• po použití program smažte

Poté provedeme údržbu pc

Údržba PC:

1)Čištění dočasných složek + neplatné registry
Ccleaner

• Stáhneme a nainstalujeme program
• Spustíme program
• ČISTIČ
  Windows zde necháme vše jak je (pokud používáme IE,tak odškrkneme jeho položky) a zaškrkneme položky Start Menu zástupci a Zástupci na ploše
  Aplikace - necháme jak je,ale pokud používáme nějaký prohlížeč (Google chrome,Firefox,Opera..) tak odškrkneme jeho položky
  >Stiskeneme tlačítko Analyzovat a poté Spustit Cleaner
• Registry
  >Stiskneme tlačítko Hledej problémy,program začne hledat neplatné registry..podé zvolíme Opravit vybrané problémy..
  >Program se zeptá,zda chceme vytvořit zálohu registrů,zvolíme ano a uložíme si někde zálohu(kdyby byli po opravení registru s něčím problémy,tak zálohu
  obnovíme tak,že spustíme uloženou zálohu a potvrdíme ano),dále zvolíme Opravit všechny problémy a Zavřít
  >opakujte dokud nebude registr bez problémů
• Program používáme 1x 14dní (záleží na používání pc,můžeme i jednou týdně)

2)Defragmentace disku
Defraggler

• Stáhneme a nainstalujeme program
• Spustíme program
• Vybereme disk ( C:,D:..prostě který používáme)
• Pokud je ve sloupci Fragmentace více než 5% dejte Defragmentovat
• Proveďte se všemi používanými disky
• Provádíme 1x za měsíc

3)Aktualizace programů
FileHippo.com Update Checker

• Stáhneme a nainstalujeme program(Při instalaci odškrkneme volbu Run at Startup )
• Spustíme program
• Program vyhledá nainstalované programy v PC a zjistí dostupné aktualizace
• Poté se vám otevře internetová stránka,kde budou nabídnuté aplikace k aktualizování
  >X Updates Detected..to jsou dostupné aktualizace..
  > klikneme na zelenou šipečku a stáhneme program,poté nainstalujeme jeho aktuální verzi
  > X Beta Updates Detected..tyto aktualizace nestahujte,jedná se o betaverze,které jsou ve vývoji a jsou nestabilní
• Provádíme 1x za 14 dní nebo jednou za měsíc

Jak se PC chová

[Poulito]

tak pro dnesek sem se dostal k defragmentaci tu dodelam zitra moc dekuji za Vas cas..PC uz ted beha mnohem svizneji hlavne nabihani je rozhodne rychlejsi Dekuji moc

[chodnik74]

Výborně..tak dodělejte defragmentaci a pak dejte vědět jaký je stav tu defragmentaci lze přerušovat a poté pokračovat..není nutná v celku

[Poulito]

Tak starý problém je opět zpět..z ničeho nic PC zase dlouho nabiha a je celé takové ve slow-motionu..zachvili sem dam log z rsitu..byl by nekdo tak hodny a mrknul mi na nej