VIRY.CZ

Zdravím,

můj kamarád mi přinesl počítač, na kterém se mu občas stává to, že po nějaké době nelze spustit žádný program. V programech, které jsou zrovna spuštěné, lze běžně pracovat, ale nový program nenaběhne, a to ani Správce úloh přes Ctrl+Alt+Del, ani např. poklepáním na konkrétní MSWord soubor, ani poklepáním na konkrétní program v c:\Program Files\... Jediné, co lze, je "otevřít" složku (no, ta se otevírá v exploreru a ten je vlastně taky spuštěný, že).

Pomocí HJT jsem vyčistil CTFMON.EXE a ctfmon.exe, to ale nepomohlo.

Tak prosím o pomoc.

Log:
Logfile of random's system information tool 1.09 (written by random/random)
Run by rybak at 2012-01-13 16:03:19
Microsoft Windows XP Home Edition Service Pack 3
System drive C: has 145 GB (76%) free of 191 GB
Total RAM: 446 MB (38% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 16:03:31, on 13.1.2012
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\Program Files\Nero\Update\NASvc.exe
C:\Program Files\CDBurnerXP\NMSAccessU.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\wuauclt.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\SOUNDMAN.EXE
C:\WINDOWS\system32\RUNDLL32.EXE
C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe
C:\Program Files\Cobian Backup 10\cbInterface.exe
C:\Program Files\Common Files\Java\Java Update\jusched.exe
C:\Program Files\OpenOffice.org 3\program\soffice.exe
C:\Program Files\OpenOffice.org 3\program\soffice.bin
C:\WINDOWS\system32\wbem\wmiapsrv.exe
C:\Program Files\Trend Micro\HiJackThis\HiJackThis.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\Mozilla Firefox\plugin-container.exe
C:\Documents and Settings\rybak\Dokumenty\Stažené soubory\RSIT.exe
C:\Program Files\trend micro\rybak.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.seznam.cz/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Odkazy
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre6\bin\ssv.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [egui] "C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe" /hide /waitservice
O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKLM\..\Run: [Cobian Backup 10 Interface] "C:\Program Files\Cobian Backup 10\cbInterface.exe" -service
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Common Files\Java\Java Update\jusched.exe"
O4 - Startup: OpenOffice.org 3.3.lnk = C:\Program Files\OpenOffice.org 3\program\quickstart.exe
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Office Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: Zdroje informací - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://www.update.microsoft.com/microso ... 2433411406
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/s ... wflash.cab
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: Domain = local
O17 - HKLM\Software\..\Telephony: DomainName = local
O17 - HKLM\System\CCS\Services\Tcpip\..\{58CF4819-1E08-4376-8BE5-6C6B83AA4000}: NameServer = 172.18.33.253,160.217.1.10
O17 - HKLM\System\CS1\Services\Tcpip\Parameters: Domain = local
O22 - SharedTaskScheduler: Browseui preloader - {438755C2-A8BA-11D1-B96B-00A0C90312E1} - C:\WINDOWS\system32\browseui.dll
O22 - SharedTaskScheduler: Proces mezipaměti kategorií součástí - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\WINDOWS\system32\browseui.dll
O23 - Service: Cobian Backup 10 (CobianBackup10) - Luis Cobian, CobianSoft - C:\Program Files\Cobian Backup 10\cbService.exe
O23 - Service: ESET Service (ekrn) - ESET - C:\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe
O23 - Service: @C:\Program Files\Nero\Update\NASvc.exe,-200 (NAUpdate) - Nero AG - C:\Program Files\Nero\Update\NASvc.exe
O23 - Service: NMSAccess - Unknown owner - C:\Program Files\CDBurnerXP\NMSAccessU.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe

--
End of file - 5153 bytes

=========Mozilla firefox=========

ProfilePath - C:\Documents and Settings\rybak\Data aplikací\Mozilla\Firefox\Profiles\7zv9au84.default

"jqs@sun.com"=C:\Program Files\Java\jre6\lib\deploy\jqs\ff
"{20a82645-c095-46ed-80e3-08825760534b}"=c:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\


[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 10.1 Plugin
"Path"=C:\WINDOWS\system32\Macromed\Flash\NPSWF32.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@java.com/JavaPlugin]
"Description"=Oracle® Next Generation Java™ Plug-In
"Path"=C:\Program Files\Java\jre6\bin\new_plugin\npjp2.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@microsoft.com/WPF,version=3.5]
"Description"=Windows Presentation Foundation plug-in for Mozilla browsers
"Path"=c:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@Nero.com/KM]
"Description"=
"Path"=C:\PROGRA~1\COMMON~1\Nero\BROWSE~1\NPBROW~1.DLL

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\Adobe Reader]
"Description"=Handles PDFs in-place in Firefox
"Path"=C:\Program Files\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll

C:\Program Files\Mozilla Firefox\extensions\
{972ce4c6-7e08-4474-a285-3208198ce6fd}
{CAFEEFAC-0016-0000-0027-ABCDEFFEDCBA}
{CAFEEFAC-0016-0000-0030-ABCDEFFEDCBA}

C:\Program Files\Mozilla Firefox\components\
binary.manifest
browsercomps.dll

C:\Program Files\Mozilla Firefox\searchplugins\
google.xml
heureka-cz.xml
jyxo-cz.xml
seznam-cz.xml
slunecnice-cz.xml
wikipedia-cz.xml

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
Adobe PDF Link Helper - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2012-01-03 63912]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
Java(tm) Plug-In SSV Helper - C:\Program Files\Java\jre6\bin\ssv.dll [2011-11-10 325408]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre6\bin\jp2ssv.dll [2011-11-10 42272]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{E7E6F031-17CE-4C07-BC86-EABFE594F69C}]
JQSIEStartDetectorImpl Class - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll [2011-11-10 79648]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"SoundMan"=C:\WINDOWS\SOUNDMAN.EXE [2007-04-16 577536]
"NvCplDaemon"=C:\WINDOWS\system32\NvCpl.dll [2006-03-31 7561216]
"nwiz"=nwiz.exe /install []
"NvMediaCenter"=C:\WINDOWS\system32\NvMcTray.dll [2006-03-31 86016]
"egui"=C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe [2011-09-22 3080264]
"Adobe ARM"=C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2012-01-03 843712]
"Cobian Backup 10 Interface"=C:\Program Files\Cobian Backup 10\cbInterface.exe [2010-09-23 3154432]
"SunJavaUpdateSched"=C:\Program Files\Common Files\Java\Java Update\jusched.exe [2011-06-09 254696]

C:\Documents and Settings\rybak\Nabídka Start\Programy\Po spuštění
OpenOffice.org 3.3.lnk - C:\Program Files\OpenOffice.org 3\program\quickstart.exe

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{1a3e09be-1e45-494b-9174-d7385b45bbf5}]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=145

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"midimapper"=midimap.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msadpcm"=msadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.trspch"=tssoft32.acm
"vidc.cvid"=iccvid.dll
"vidc.I420"=msh263.drv
"vidc.iv31"=ir32_32.dll
"vidc.iv32"=ir32_32.dll
"vidc.iv41"=ir41_32.ax
"vidc.iyuv"=iyuv_32.dll
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"vidc.uyvy"=msyuv.dll
"vidc.yuy2"=msyuv.dll
"vidc.yvu9"=tsbyuv.dll
"vidc.yvyu"=msyuv.dll
"wavemapper"=msacm32.drv
"msacm.msg723"=msg723.acm
"vidc.M263"=msh263.drv
"vidc.M261"=msh261.drv
"msacm.msaudio1"=msaud32.acm
"msacm.sl_anet"=sl_anet.acm
"msacm.iac2"=C:\WINDOWS\system32\iac25_32.ax
"vidc.iv50"=ir50_32.dll
"msacm.l3acm"=C:\WINDOWS\system32\l3codeca.acm
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv

======List of files/folders created in the last 1 month======

2012-01-13 16:03:19 ----D---- C:\rsit
2012-01-13 12:16:44 ----D---- C:\Program Files\Trend Micro
2012-01-11 13:16:25 ----HDC---- C:\WINDOWS\$NtUninstallKB2646524$
2012-01-11 13:16:18 ----HDC---- C:\WINDOWS\$NtUninstallKB2631813$
2012-01-11 13:13:40 ----HDC---- C:\WINDOWS\$NtUninstallKB2598479$
2012-01-11 13:03:48 ----HDC---- C:\WINDOWS\$NtUninstallKB2603381$
2012-01-11 12:55:09 ----D---- C:\Documents and Settings\All Users\Data aplikací\SecTaskMan
2012-01-11 12:54:11 ----D---- C:\Program Files\Security Task Manager
2012-01-11 12:40:22 ----HDC---- C:\WINDOWS\$NtUninstallKB2584146$
2012-01-05 03:16:43 ----HDC---- C:\WINDOWS\$NtUninstallKB961118$
2012-01-04 07:56:11 ----N---- C:\WINDOWS\system32\spmsg2.dll
2012-01-04 07:56:07 ----HDC---- C:\WINDOWS\$NtUninstallXPSEPSCLP$
2012-01-04 07:53:31 ----D---- C:\WINDOWS\system32\XPSViewer
2012-01-04 07:53:25 ----D---- C:\Program Files\MSBuild
2012-01-04 07:53:17 ----D---- C:\Program Files\Reference Assemblies
2012-01-04 07:52:11 ----N---- C:\WINDOWS\system32\prntvpt.dll
2012-01-04 07:52:10 ----N---- C:\WINDOWS\system32\xpssvcs.dll
2012-01-04 07:52:10 ----N---- C:\WINDOWS\system32\xpsshhdr.dll
2012-01-04 07:52:10 ----D---- C:\11ff47ac1fbb0552ec5e
2012-01-02 13:55:33 ----D---- C:\Program Files\Okidata
2011-12-20 14:54:28 ----D---- C:\Documents and Settings\rybak\Data aplikací\Skype
2011-12-15 03:05:16 ----HDC---- C:\WINDOWS\$NtUninstallKB2639417$
2011-12-15 03:05:09 ----HDC---- C:\WINDOWS\$NtUninstallKB2624667$
2011-12-15 03:01:55 ----HDC---- C:\WINDOWS\$NtUninstallKB2633952$
2011-12-15 03:01:24 ----HDC---- C:\WINDOWS\$NtUninstallKB2619339$
2011-12-15 03:01:19 ----HDC---- C:\WINDOWS\$NtUninstallKB2618451$
2011-12-15 03:01:00 ----HDC---- C:\WINDOWS\$NtUninstallKB2620712$
2011-12-15 03:00:48 ----HDC---- C:\WINDOWS\$NtUninstallKB2633171$
2011-12-14 14:37:36 ----A---- C:\WINDOWS\system32\ptpusb.dll
2011-12-14 14:37:36 ----A---- C:\WINDOWS\system32\drivers\usbscan.sys
2011-12-14 14:37:35 ----A---- C:\WINDOWS\system32\ptpusd.dll
2011-12-14 14:37:08 ----A---- C:\WINDOWS\system32\drivers\usbccgp.sys
2011-12-14 03:00:58 ----D---- C:\WINDOWS\SxsCaPendDel

======List of files/folders modified in the last 1 month======

2012-01-13 16:03:32 ----D---- C:\WINDOWS\Prefetch
2012-01-13 15:51:19 ----D---- C:\WINDOWS\system32\CatRoot2
2012-01-13 15:48:55 ----D---- C:\WINDOWS\Temp
2012-01-13 14:28:15 ----A---- C:\WINDOWS\SchedLgU.Txt
2012-01-13 12:17:06 ----SHD---- C:\WINDOWS\Installer
2012-01-13 12:16:56 ----SD---- C:\Documents and Settings\rybak\Data aplikací\Microsoft
2012-01-13 12:16:44 ----RD---- C:\Program Files
2012-01-13 10:46:29 ----D---- C:\WINDOWS\system32
2012-01-12 13:58:43 ----D---- C:\Program Files\Mozilla Thunderbird
2012-01-12 08:36:53 ----HD---- C:\WINDOWS\inf
2012-01-11 15:52:38 ----RSD---- C:\WINDOWS\assembly
2012-01-11 15:52:38 ----D---- C:\WINDOWS\Microsoft.NET
2012-01-11 13:22:17 ----D---- C:\WINDOWS
2012-01-11 13:16:26 ----RSHDC---- C:\WINDOWS\system32\dllcache
2012-01-11 13:16:22 ----A---- C:\WINDOWS\imsins.BAK
2012-01-11 13:14:19 ----A---- C:\WINDOWS\system32\MRT.exe
2012-01-11 13:12:20 ----A---- C:\WINDOWS\system32\PerfStringBackup.INI
2012-01-11 13:12:05 ----D---- C:\WINDOWS\WinSxS
2012-01-11 13:02:19 ----HD---- C:\WINDOWS\$hf_mig$
2012-01-05 03:18:32 ----D---- C:\WINDOWS\system32\CatRoot
2012-01-04 07:55:56 ----D---- C:\WINDOWS\system32\cs-cz
2012-01-04 07:53:26 ----D---- C:\WINDOWS\system32\en-US
2012-01-04 07:53:22 ----RSD---- C:\WINDOWS\Fonts
2012-01-04 07:52:38 ----D---- C:\WINDOWS\system32\spool
2012-01-04 07:50:06 ----D---- C:\Program Files\Internet Explorer
2012-01-02 13:55:28 ----HD---- C:\Program Files\InstallShield Installation Information
2011-12-28 13:05:40 ----D---- C:\Program Files\Common Files
2011-12-15 03:04:40 ----D---- C:\WINDOWS\ie8updates
2011-12-14 14:37:36 ----D---- C:\WINDOWS\system32\drivers

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 nvata;nvata; C:\WINDOWS\system32\DRIVERS\nvata.sys [2006-04-24 100736]
R1 ehdrv;ehdrv; C:\WINDOWS\system32\DRIVERS\ehdrv.sys [2011-08-04 118104]
R1 epfwtdir;epfwtdir; C:\WINDOWS\system32\DRIVERS\epfwtdir.sys [2011-08-04 103112]
R2 eamon;eamon; C:\WINDOWS\system32\DRIVERS\eamon.sys [2011-08-09 154136]
R2 StarOpen;StarOpen; C:\WINDOWS\system32\drivers\StarOpen.sys [2009-11-12 5504]
R3 ALCXWDM;Service for Realtek AC97 Audio (WDM); C:\WINDOWS\system32\drivers\ALCXWDM.SYS [2007-04-25 4030144]
R3 hidusb;Ovladač třídy standardu HID; C:\WINDOWS\system32\DRIVERS\hidusb.sys [2008-04-13 10368]
R3 mouhid;Ovladač myši standardu HID; C:\WINDOWS\system32\DRIVERS\mouhid.sys [2004-08-18 12160]
R3 nv;nv; C:\WINDOWS\system32\DRIVERS\nv4_mini.sys [2006-03-31 3650144]
R3 NVENETFD;NVIDIA nForce Networking Controller Driver; C:\WINDOWS\system32\DRIVERS\NVENETFD.sys [2006-02-17 34176]
R3 nvnetbus;NVIDIA Network Bus Enumerator; C:\WINDOWS\system32\DRIVERS\nvnetbus.sys [2006-02-17 13056]
S3 usbccgp;Obecný nadřazený ovladač Microsoft USB; C:\WINDOWS\system32\DRIVERS\usbccgp.sys [2008-04-13 32128]
S3 usbprint;Třída USB Printer; C:\WINDOWS\system32\DRIVERS\usbprint.sys [2008-04-13 25856]
S3 usbscan;Ovladač skeneru USB; C:\WINDOWS\system32\DRIVERS\usbscan.sys [2008-04-13 15104]
S3 USBSTOR;Ovladač velkokapacitního paměťového zařízení USB; C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS [2008-04-13 26368]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 ekrn;ESET Service; C:\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe [2011-09-22 974944]
R2 JavaQuickStarterService;Java Quick Starter; C:\Program Files\Java\jre6\bin\jqs.exe [2011-11-10 153376]
R2 NAUpdate;@C:\Program Files\Nero\Update\NASvc.exe,-200; C:\Program Files\Nero\Update\NASvc.exe [2011-09-23 641832]
R2 NMSAccess;NMSAccess; C:\Program Files\CDBurnerXP\NMSAccessU.exe [2010-03-04 71096]
R2 NVSvc;NVIDIA Display Driver Service; C:\WINDOWS\system32\nvsvc32.exe [2006-03-31 143436]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\WINDOWS\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
S2 CobianBackup10;Cobian Backup 10; C:\Program Files\Cobian Backup 10\cbService.exe [2010-09-23 1125376]
S3 aspnet_state;Stavová služba ASP.NET; C:\WINDOWS\Microsoft.NET\Framework\v4.0.30319\aspnet_state.exe [2010-03-18 35160]
S3 clr_optimization_v2.0.50727_32;.NET Runtime Optimization Service v2.0.50727_X86; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe [2008-07-25 69632]
S3 FontCache3.0.0.0;Windows Presentation Foundation Font Cache 3.0.0.0; C:\WINDOWS\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe [2008-07-29 46104]
S3 idsvc;Služba Windows CardSpace; C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe [2008-07-29 881664]
S3 ose;Office Source Engine; C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2003-07-28 89136]
S3 WPFFontCache_v0400;Windows Presentation Foundation Font Cache 4.0.0.0; C:\WINDOWS\Microsoft.NET\Framework\v4.0.30319\WPF\WPFFontCache_v0400.exe [2010-03-18 753504]
S4 NetTcpPortSharing;Net.Tcp Port Sharing Service; c:\WINDOWS\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe [2010-03-18 124240]

-----------------EOF-----------------

Zdravím! Log vypadá čistý. Udělejte kompletní sken MBAM: http://www.malwarebytes.org/mbam.php a dejte log. Předem nic nemažte.

Dd,

děkuju za kontrolu, bohužel jsem postupoval tak trochu dopředu a ještě než jsem zkusil proskenovat PC pomoci MBAM, tak jsem ho prošel pomocí MWAV. MBAM nenašel nic, MWAM v logu měl tyto chyby:

13 I 2012 18:06:35 - ***** Scanning Registry Files *****
13 I 2012 18:06:41 - Invalid Entry DllName = appmgmts.dll (in key HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\GPExtensions\{c6dc5466-785a-11d2-84d0-00c04fb169f7}). Action Taken: Deleting Registry Key {c6dc5466-785a-11d2-84d0-00c04fb169f7}.

13 I 2012 18:06:44 - ***** Scanning StartUp Folders *****

13 I 2012 18:10:18 - ***** Scanning Service Files *****
13 I 2012 18:10:19 - ERROR(2)!!! Invalid Entry %SystemRoot%\System32\appmgmts.dll. Action Taken: Removing HKLM\SYSTEM\CurrentControlSet\Services\AppMgmt.

Nicméně mám takový pocit, že tomu PC spíše možná docházela paměť, protože jsem si až v logu RSIT všiml, že má jen 512MB RAM (a část mu ubírá VGA na zákl. desce) a v nastavení virtuální paměti byly některé hodnoty "natvrdo". Paměť jsem zatím přidal na 1024MB a doporučím mu dokoupit cca 2GB. Je zajímavý, že WinXP se SP1 to vcelku stačilo, ale SP3 je děsně nenažraný...

Pokud se Vám nebude zdát něco na tomto logu viz výše, tak bych to asi uzavřel... Nicméně vítám případné další postřehy, samozřejmě.

Ještě jednou díky za dosavadní pomoc.

512MB RAM je minimum pro XP SP3. Je to docela možné. MWAV smazal obě položky, takže si myslím, že po virové stránce je to OK.