Zpomalení počítače

[klatu]

Zdravím,
prosím o radu - před pár dny PC hodně zpomalil,start PC trvá podstatně déle (než se zjeví plocha,pořád něco hrabe na disku),kopírování z disku na disk trvá několikanásobně déle než dřív,vypalování skoro půl hodiny atd.Mám za to,že něco obsadilo RAM a programy používají virtuální paměť na disku.Projel jsem PC antivirem,programem Spybot-search a destroy,defragmentoval,odinstaloval nepoužívané programy,spustil CCleaner.Nic moc to nepomohlo.
Tady je log
Logfile of random's system information tool 1.09 (written by random/random)
Run by klatu at 2012-03-11 09:39:16
Microsoft Windows XP Home Edition Service Pack 3
System drive C: has 20 GB (63%) free of 32 GB
Total RAM: 1021 MB (47% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 9:39:58, on 11.3.2012
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Unable to get Internet Explorer version!
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\PROGRA~1\AVG\AVG2012\avgrsx.exe
C:\Program Files\AVG\AVG2012\avgcsrvx.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
c:\program files\idt\intelxpv_v103\wdm\STacSV.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\AVG\AVG2012\avgtray.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\AVG\AVG2012\avgwdsvc.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\Program Files\Spamihilator\spamihilator.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\AVG\AVG2012\AVGIDSAgent.exe
C:\Program Files\AVG\AVG2012\avgnsx.exe
C:\Program Files\uTorrent\uTorrent.exe
C:\WINDOWS\System32\dllhost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\Mozilla Firefox\plugin-container.exe
E:\RSIT.exe
C:\Program Files\trend micro\klatu.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://dts.search-results.com/sidebar.h ... d=410&sr=0
R1 - HKCU\Software\Microsoft\Internet Explorer\Search,SearchAssistant = http://dts.search-results.com/sr?src=ie ... earchTerms}
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = http://dts.search-results.com/sr?src=ie ... earchTerms}
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Odkazy
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: WebTransBHO Class - {2DB66063-BB98-466A-AA0D-3E7ACF5ED853} - C:\Documents and Settings\All Users\Data aplikací\LangSoft\WebIE.dll
O2 - BHO: WormRadar.com IESiteBlocker.NavFilter - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - C:\Program Files\AVG\AVG2012\avgssie.dll
O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll
O3 - Toolbar: WebTranslator - {BFC32E1D-EE75-4A48-BC60-104E11EE2431} - C:\Documents and Settings\All Users\Data aplikací\LangSoft\WebIE.dll
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [AVG_TRAY] "C:\Program Files\AVG\AVG2012\avgtray.exe"
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [uTorrent] "C:\Program Files\uTorrent\uTorrent.exe" /MINIMIZED
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-21-790525478-448539723-839522115-1005\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'UpdatusUser')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'Default user')
O4 - Startup: Spamihilator.lnk = C:\Program Files\Spamihilator\spamihilator.exe
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Excel - res://C:\PROGRA~1\MICROS~3\Office12\EXCEL.EXE/3000
O9 - Extra button: Odeslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~3\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: Od&eslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~3\Office12\ONBttnIE.dll
O9 - Extra button: WebTran - {7E6A20FB-153F-402c-A84B-1A64E1955D3D} - C:\Documents and Settings\All Users\Data aplikací\LangSoft\WebIE.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~3\Office12\REFIEBAR.DLL
O9 - Extra button: (no name) - {BFC32E1D-EE75-4A48-BC60-104E11EE2431} - (no file)
O9 - Extra button: (no name) - {CC963627-B1DC-40E0-B52A-CF21EE748449} - C:\Documents and Settings\All Users\Data aplikací\LangSoft\WebIE.dll
O9 - Extra 'Tools' menuitem: &Nastavit překladač - {CC963627-B1DC-40E0-B52A-CF21EE748449} - C:\Documents and Settings\All Users\Data aplikací\LangSoft\WebIE.dll
O9 - Extra button: (no name) - {CC963627-B1DC-40E0-B52A-CF21EE748450} - C:\Documents and Settings\All Users\Data aplikací\LangSoft\WebIE.dll
O9 - Extra 'Tools' menuitem: &Slovník - {CC963627-B1DC-40E0-B52A-CF21EE748450} - C:\Documents and Settings\All Users\Data aplikací\LangSoft\WebIE.dll
O9 - Extra button: (no name) - {CC963627-B1DC-40E0-B52A-CF21EE748451} - C:\Documents and Settings\All Users\Data aplikací\LangSoft\WebIE.dll
O9 - Extra 'Tools' menuitem: Přeložit &označený text - {CC963627-B1DC-40E0-B52A-CF21EE748451} - C:\Documents and Settings\All Users\Data aplikací\LangSoft\WebIE.dll
O9 - Extra button: (no name) - {CC963627-B1DC-40E0-B52A-CF21EE748452} - C:\Documents and Settings\All Users\Data aplikací\LangSoft\WebIE.dll
O9 - Extra 'Tools' menuitem: Přeložit &stránku - {CC963627-B1DC-40E0-B52A-CF21EE748452} - C:\Documents and Settings\All Users\Data aplikací\LangSoft\WebIE.dll
O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://www.update.microsoft.com/microso ... 8914519234
O17 - HKLM\System\CCS\Services\Tcpip\..\{3FFFDFFC-05E9-4D35-8CD1-FE1F02AD8506}: NameServer = 89.190.64.20,89.190.65.200
O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Program Files\Microsoft Office\Office12\GrooveSystemServices.dll
O18 - Protocol: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - C:\Program Files\AVG\AVG2012\avgpp.dll
O20 - AppInit_DLLs:
O22 - SharedTaskScheduler: Browseui preloader - {438755C2-A8BA-11D1-B96B-00A0C90312E1} - C:\WINDOWS\System32\browseui.dll
O22 - SharedTaskScheduler: Proces mezipaměti kategorií součástí - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\WINDOWS\System32\browseui.dll
O23 - Service: AVGIDSAgent - AVG Technologies CZ, s.r.o. - C:\Program Files\AVG\AVG2012\AVGIDSAgent.exe
O23 - Service: AVG WatchDog (avgwd) - AVG Technologies CZ, s.r.o. - C:\Program Files\AVG\AVG2012\avgwdsvc.exe
O23 - Service: NMIndexingService - Nero AG - C:\Program Files\Common Files\Nero\Lib\NMIndexingService.exe
O23 - Service: NVIDIA Driver Helper Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: NVIDIA Update Service Daemon (nvUpdatusService) - NVIDIA Corporation - C:\Program Files\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe
O23 - Service: ServiceLayer - Nokia - C:\Program Files\PC Connectivity Solution\ServiceLayer.exe
O23 - Service: Audio Service (STacSV) - IDT, Inc. - c:\program files\idt\intelxpv_v103\wdm\STacSV.exe

--
End of file - 7772 bytes

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
Adobe PDF Link Helper - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2012-01-03 63912]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{2DB66063-BB98-466A-AA0D-3E7ACF5ED853}]
WebTransBHO Class - C:\Documents and Settings\All Users\Data aplikací\LangSoft\WebIE.dll [2012-02-11 520192]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{3CA2F312-6F6E-4B53-A66E-4E65E497C8C0}]
AVG Safe Search - C:\Program Files\AVG\AVG2012\avgssie.dll [2011-11-11 1378144]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{53707962-6F74-2D53-2644-206D7942484F}]
Spybot-S&D IE Protection - C:\PROGRA~1\SPYBOT~1\SDHelper.dll [2009-01-26 1879896]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{72853161-30C5-4D22-B7F9-0BBC1D38A37E}]
Groove GFS Browser Helper - C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll [2009-02-12 2217848]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{BFC32E1D-EE75-4A48-BC60-104E11EE2431} - WebTranslator - C:\Documents and Settings\All Users\Data aplikací\LangSoft\WebIE.dll [2012-02-11 520192]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"NvCplDaemon"=C:\WINDOWS\system32\NvCpl.dll [2011-05-25 13895272]
"AVG_TRAY"=C:\Program Files\AVG\AVG2012\avgtray.exe [2012-01-24 2416480]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"=C:\WINDOWS\system32\ctfmon.exe [2008-04-14 15360]
"uTorrent"=C:\Program Files\uTorrent\uTorrent.exe [2012-02-23 740216]
""= []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe ARM]
C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2012-01-03 843712]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\AVG_TRAY]
C:\Program Files\AVG\AVG2012\avgtray.exe [2012-01-24 2416480]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\CanonMyPrinter]
C:\Program Files\Canon\MyPrinter\BJMyPrt.exe [2007-04-03 1603152]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\CanonSolutionMenu]
C:\Program Files\Canon\SolutionMenu\CNSLMAIN.exe [2007-05-14 644696]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\GAINWARD]
C:\Program Files\EXPERTool\TBPanel.exe /A []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NeroFilterCheck]
C:\Program Files\Common Files\Nero\Lib\NeroCheck.exe [2008-07-09 570664]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NokiaSuite.exe]
C:\Program Files\Nokia\Nokia Suite\NokiaSuite.exe [2012-01-10 1083264]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NvCplDaemon]
C:\WINDOWS\system32\NvCpl.dll [2011-05-25 13895272]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NvMediaCenter]
NvMCTray.dll,NvTaskbarInit -login []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\nwiz]
C:\Program Files\NVIDIA Corporation\nView\nwiz.exe [2011-05-05 1632360]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SpybotSD TeaTimer]
C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe [2009-03-05 2260480]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SysTrayApp]
C:\Program Files\IDT\WDM\sttray.exe [2009-03-12 483422]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\vProt]
C:\Program Files\AVG Secure Search\vprot.exe []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^All Users^Nabídka Start^Programy^Po spuštění^Microsoft Office.lnk]
C:\PROGRA~1\MICROS~3\Office10\OSA.EXE []

C:\Documents and Settings\klatu\Nabídka Start\Programy\Po spuštění
Spamihilator.lnk - C:\Program Files\Spamihilator\spamihilator.exe

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
"AppInit_DLLs"=" "

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{B5A7F190-DDA6-4420-B3BA-52453494E6CD}"=C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll [2009-02-12 2217848]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Wdf01000.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WudfPf]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WudfRd]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WudfSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\UploadMgr]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Wdf01000.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfPf]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfRd]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfSvc]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=255

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=255

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"C:\Program Files\AVG\AVG2012\avgmfapx.exe"="C:\Program Files\AVG\AVG2012\avgmfapx.exe:*:Enabled:Instalátor AVG"
"C:\Program Files\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe"="C:\Program Files\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe:*:Enabled:Daemonu.exe"
"C:\Program Files\uTorrent\uTorrent.exe"="C:\Program Files\uTorrent\uTorrent.exe:*:Enabled:µTorrent"
"C:\Program Files\Spamihilator\spamihilator.exe"="C:\Program Files\Spamihilator\spamihilator.exe:*:Enabled:Spamihilator"
"C:\Program Files\Spamihilator\cdcc.exe"="C:\Program Files\Spamihilator\cdcc.exe:*:Enabled:Spamihilator DCC Filter Configuration"
"C:\Program Files\Spamihilator\dccproc.exe"="C:\Program Files\Spamihilator\dccproc.exe:*:Enabled:Spamihilator DCC Filter"
"C:\Program Files\Microsoft Office\Office12\OUTLOOK.EXE"="C:\Program Files\Microsoft Office\Office12\OUTLOOK.EXE:*:Enabled:Microsoft Office Outlook"
"C:\Program Files\Microsoft Office\Office12\GROOVE.EXE"="C:\Program Files\Microsoft Office\Office12\GROOVE.EXE:*:Enabled:Microsoft Office Groove"
"C:\Program Files\Microsoft Office\Office12\ONENOTE.EXE"="C:\Program Files\Microsoft Office\Office12\ONENOTE.EXE:*:Enabled:Microsoft Office OneNote"
"C:\Program Files\Google\Google Earth\plugin\geplugin.exe"="C:\Program Files\Google\Google Earth\plugin\geplugin.exe:*:Enabled:Google Earth"
"C:\WINDOWS\system32\mmc.exe"="C:\WINDOWS\system32\mmc.exe:*:Enabled:Konzola Microsoft Management Console"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"midimapper"=midimap.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msadpcm"=msadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.trspch"=tssoft32.acm
"vidc.cvid"=iccvid.dll
"vidc.I420"=msh263.drv
"vidc.iv31"=ir32_32.dll
"vidc.iv32"=ir32_32.dll
"vidc.iv41"=ir41_32.ax
"vidc.iyuv"=iyuv_32.dll
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"vidc.uyvy"=msyuv.dll
"vidc.yuy2"=msyuv.dll
"vidc.yvu9"=tsbyuv.dll
"vidc.yvyu"=msyuv.dll
"wavemapper"=msacm32.drv
"msacm.msg723"=msg723.acm
"vidc.M263"=msh263.drv
"vidc.M261"=msh261.drv
"msacm.msaudio1"=msaud32.acm
"msacm.sl_anet"=sl_anet.acm
"msacm.iac2"=C:\WINDOWS\System32\iac25_32.ax
"vidc.iv50"=ir50_32.dll
"msacm.l3acm"=C:\WINDOWS\system32\l3codeca.acm
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"wave2"=wdmaud.drv
"midi2"=wdmaud.drv
"mixer2"=wdmaud.drv
"wave3"=wdmaud.drv
"midi3"=wdmaud.drv
"mixer3"=wdmaud.drv
"wave4"=wdmaud.drv
"midi4"=wdmaud.drv
"mixer4"=wdmaud.drv
"VIDC.FFDS"=ff_vfw.dll

======List of files/folders created in the last 1 month======

2012-03-11 09:39:19 ----D---- C:\Program Files\trend micro
2012-03-11 09:39:16 ----D---- C:\rsit
2012-03-10 20:58:34 ----D---- C:\WINDOWS\system32\drivers\AVG
2012-03-10 20:58:34 ----D---- C:\Documents and Settings\All Users\Data aplikací\AVG2012
2012-03-10 15:04:48 ----AD---- C:\Documents and Settings\All Users\Data aplikací\TEMP
2012-03-10 14:08:07 ----D---- C:\Program Files\Common Files\Nokia
2012-03-10 10:04:35 ----D---- C:\Program Files\Spybot - Search & Destroy
2012-03-10 10:04:35 ----D---- C:\Documents and Settings\All Users\Data aplikací\Spybot - Search & Destroy
2012-03-07 17:56:22 ----D---- C:\Program Files\Free Download Manager
2012-03-07 16:39:33 ----D---- C:\Documents and Settings\All Users\Data aplikací\McAfee
2012-03-07 16:33:08 ----D---- C:\Documents and Settings\klatu\Data aplikací\Mozilla
2012-03-07 16:32:48 ----D---- C:\Program Files\Mozilla Firefox
2012-02-22 21:49:10 ----D---- C:\Documents and Settings\klatu\Data aplikací\Google
2012-02-21 20:19:24 ----HD---- C:\WINDOWS\PIF
2012-02-21 20:05:28 ----D---- C:\Documents and Settings\klatu\Data aplikací\VOWSoft
2012-02-21 20:05:14 ----D---- C:\Program Files\PicaLoader
2012-02-20 17:00:19 ----D---- C:\Documents and Settings\klatu\Data aplikací\Windows Search
2012-02-20 09:58:13 ----D---- C:\WINDOWS\system32\GroupPolicy
2012-02-20 09:58:13 ----D---- C:\Program Files\Windows Desktop Search
2012-02-20 09:52:11 ----A---- C:\WINDOWS\system32\msonpmon.dll
2012-02-20 09:48:18 ----D---- C:\Program Files\Microsoft Works
2012-02-20 09:47:25 ----D---- C:\Program Files\Microsoft Visual Studio
2012-02-20 09:47:25 ----D---- C:\Program Files\Common Files\DESIGNER
2012-02-20 09:46:26 ----D---- C:\Program Files\Microsoft.NET
2012-02-20 09:44:16 ----D---- C:\Program Files\Microsoft Visual Studio 8
2012-02-20 09:42:59 ----D---- C:\WINDOWS\SHELLNEW
2012-02-20 09:42:04 ----D---- C:\Documents and Settings\All Users\Data aplikací\Microsoft Help
2012-02-20 09:41:10 ----RHD---- C:\MSOCache
2012-02-19 16:12:45 ----A---- C:\Documents and Settings\klatu\Data aplikací\GDIPFONTCACHEV1.DAT
2012-02-16 04:09:02 -------- C:\WINDOWS\system32\iacenc.dll
2012-02-14 12:23:08 ----D---- C:\Documents and Settings\klatu\Data aplikací\Canon
2012-02-13 09:23:36 ----A---- C:\WINDOWS\dvd.ini
2012-02-13 09:22:17 ----D---- C:\Databáze DVD v1.3
2012-02-13 09:09:07 ----A---- C:\WINDOWS\system32\wpa.bak
2012-02-12 23:37:54 ----D---- C:\Program Files\BinaryBiz
2012-02-12 20:36:26 ----D---- C:\WINDOWS\system32\XPSViewer
2012-02-12 20:36:22 ----D---- C:\Program Files\MSBuild
2012-02-12 20:36:20 ----D---- C:\WINDOWS\system32\en-US
2012-02-12 20:36:15 ----D---- C:\Program Files\Reference Assemblies
2012-02-12 20:35:34 -------- C:\WINDOWS\system32\prntvpt.dll
2012-02-12 20:35:33 -------- C:\WINDOWS\system32\xpssvcs.dll
2012-02-12 20:35:33 -------- C:\WINDOWS\system32\xpsshhdr.dll
2012-02-12 20:35:32 ----D---- C:\c348f8276227b9d45aed5992
2012-02-12 20:01:36 ----D---- C:\Documents and Settings\All Users\Data aplikací\boost_interprocess
2012-02-12 19:36:48 ----A---- C:\WINDOWS\system32\WMAFile.dll
2012-02-12 19:36:48 ----A---- C:\WINDOWS\system32\VB6STKIT.DLL
2012-02-12 19:36:48 ----A---- C:\WINDOWS\system32\VB6FR.DLL
2012-02-12 19:36:48 ----A---- C:\WINDOWS\system32\inetfr.DLL
2012-02-12 19:36:48 ----A---- C:\WINDOWS\system32\AudPlayer.dll
2012-02-12 19:36:48 ----A---- C:\WINDOWS\system32\AudioVisu.dll
2012-02-12 19:36:48 ----A---- C:\WINDOWS\system32\AudioRecord.dll
2012-02-12 19:36:48 ----A---- C:\WINDOWS\system32\AudioInfos.dll
2012-02-12 19:36:48 ----A---- C:\WINDOWS\system32\AudFile.dll
2012-02-12 19:36:48 ----A---- C:\WINDOWS\system32\AudDisplay.dll
2012-02-12 19:36:48 ----A---- C:\WINDOWS\system32\AudDesign.dll
2012-02-12 19:36:47 ----A---- C:\WINDOWS\system32\TABCTFR.DLL
2012-02-12 19:36:46 ----A---- C:\WINDOWS\system32\MSCMCFR.DLL
2012-02-12 19:36:46 ----A---- C:\WINDOWS\system32\Mscc2fr.dll
2012-02-12 19:36:46 ----A---- C:\WINDOWS\system32\CMDLGFR.DLL
2012-02-12 19:36:44 ----D---- C:\Program Files\Free mp3 Wma Converter
2012-02-12 19:36:44 ----D---- C:\Documents and Settings\klatu\Data aplikací\FreeAudioPack
2012-02-12 19:12:44 ----D---- C:\Documents and Settings\klatu\Data aplikací\Nokia Suite
2012-02-12 19:10:38 ----HDC---- C:\WINDOWS\$NtUninstallWudf01009$
2012-02-12 19:03:30 ----D---- C:\Program Files\Microsoft CAPICOM 2.1.0.2
2012-02-12 19:02:54 ----A---- C:\WINDOWS\system32\drivers\usbser.sys
2012-02-12 19:02:12 -------- C:\WINDOWS\system32\spmsgXP_2k3.dll
2012-02-12 19:02:09 ----HDC---- C:\WINDOWS\$NtUninstallWdf01009$
2012-02-12 13:24:01 ----D---- C:\Documents and Settings\klatu\Data aplikací\AnvSoft
2012-02-12 11:53:24 ----A---- C:\WINDOWS\NeroDigital.ini
2012-02-12 11:33:07 ----D---- C:\Documents and Settings\klatu\Data aplikací\XnView
2012-02-12 10:31:21 ----HD---- C:\WINDOWS\system32\CanonIJ Uninstaller Information
2012-02-12 10:30:52 ----HD---- C:\Program Files\CanonBJ
2012-02-12 10:28:22 ----D---- C:\Program Files\MSECache
2012-02-12 10:09:17 ----D---- C:\Program Files\SubtitleCreator
2012-02-12 09:40:12 ----A---- C:\WINDOWS\UC.PIF
2012-02-12 09:40:12 ----A---- C:\WINDOWS\RAR.PIF
2012-02-12 09:40:12 ----A---- C:\WINDOWS\PKZIP.PIF
2012-02-12 09:40:12 ----A---- C:\WINDOWS\PKUNZIP.PIF
2012-02-12 09:40:12 ----A---- C:\WINDOWS\NOCLOSE.PIF
2012-02-12 09:40:12 ----A---- C:\WINDOWS\LHA.PIF
2012-02-12 09:40:12 ----A---- C:\WINDOWS\ARJ.PIF
2012-02-12 09:40:11 ----D---- C:\totalcmd
2012-02-12 09:40:11 ----A---- C:\WINDOWS\wincmd.ini
2012-02-12 09:38:06 ----D---- C:\Documents and Settings\All Users\Data aplikací\DVD Shrink
2012-02-12 09:38:04 ----D---- C:\Program Files\DVD Shrink
2012-02-12 09:37:05 ----D---- C:\SubtitleToolCZ
2012-02-12 09:35:35 ----D---- C:\Virtual Dub
2012-02-12 09:30:04 ----D---- C:\Program Files\Common Files\Adobe
2012-02-12 09:30:04 ----D---- C:\Program Files\Adobe
2012-02-12 09:29:19 ----D---- C:\Documents and Settings\All Users\Data aplikací\Adobe
2012-02-12 09:16:32 ----A---- C:\WINDOWS\Ulead iPhoto Plus 4.SCR
2012-02-12 09:16:32 ----A---- C:\WINDOWS\PCDLIB32.DLL
2012-02-12 09:16:18 ----D---- C:\WINDOWS\ULEAD.DAT
2012-02-12 09:16:18 ----D---- C:\Program Files\iPhoto Plus 4
2012-02-12 09:16:18 ----A---- C:\WINDOWS\Ulead32.ini
2012-02-12 09:15:51 ----A---- C:\WINDOWS\uninst.exe
2012-02-12 09:15:36 ----D---- C:\Program Files\Trust
2012-02-12 08:56:50 ----D---- C:\Program Files\Canon
2012-02-12 08:55:51 ----RSD---- C:\WINDOWS\assembly
2012-02-12 08:55:46 ----D---- C:\Program Files\Common Files\Canon
2012-02-12 08:55:02 ----D---- C:\WINDOWS\Microsoft.NET
2012-02-12 08:52:08 ----D---- C:\Documents and Settings\All Users\Data aplikací\InstallShield
2012-02-12 08:51:56 ----D---- C:\Documents and Settings\All Users\Data aplikací\ScanSoft
2012-02-12 08:50:41 ----D---- C:\Program Files\ScanSoft
2012-02-12 08:46:22 ----HD---- C:\Documents and Settings\All Users\Data aplikací\CanonBJ
2012-02-12 08:45:58 ----A---- C:\WINDOWS\system32\CNMLM93.DLL
2012-02-12 08:45:25 ----A---- C:\WINDOWS\system32\drivers\usbprint.sys
2012-02-12 08:44:44 ----A---- C:\WINDOWS\system32\drivers\usbscan.sys
2012-02-12 08:44:14 ----A---- C:\WINDOWS\system32\drivers\usbccgp.sys
2012-02-12 03:00:21 ----D---- C:\Program Files\MSXML 4.0

======List of files/folders modified in the last 1 month======

2012-03-11 09:39:19 ----RD---- C:\Program Files
2012-03-11 09:38:56 ----D---- C:\Documents and Settings\klatu\Data aplikací\uTorrent
2012-03-11 09:27:56 ----A---- C:\WINDOWS\SchedLgU.Txt
2012-03-11 09:24:14 ----D---- C:\WINDOWS\Registration
2012-03-11 09:16:45 ----D---- C:\WINDOWS
2012-03-11 09:03:27 ----D---- C:\WINDOWS\Temp
2012-03-11 08:14:33 ----D---- C:\Documents and Settings\All Users\Data aplikací\MFAData
2012-03-10 23:55:12 ----D---- C:\WINDOWS\Prefetch
2012-03-10 22:57:04 ----D---- C:\Documents and Settings\klatu\Data aplikací\Spamihilator
2012-03-10 22:49:43 ----D---- C:\WINDOWS\system32\CatRoot2
2012-03-10 21:00:27 ----SHD---- C:\WINDOWS\Installer
2012-03-10 20:59:23 ----D---- C:\WINDOWS\system32\drivers
2012-03-10 20:58:03 ----RSHDC---- C:\WINDOWS\system32\dllcache
2012-03-10 20:57:53 ----D---- C:\WINDOWS\system32
2012-03-10 20:41:26 ----HD---- C:\WINDOWS\inf
2012-03-10 20:39:47 ----D---- C:\Program Files\AVG
2012-03-10 20:37:31 ----RASH---- C:\boot.ini
2012-03-10 20:09:16 ----SD---- C:\WINDOWS\Tasks
2012-03-10 15:16:37 ----SD---- C:\WINDOWS\Downloaded Program Files
2012-03-10 14:53:00 ----D---- C:\Program Files\PC Connectivity Solution
2012-03-10 14:08:07 ----D---- C:\Program Files\Common Files
2012-03-10 10:59:18 ----D---- C:\WINDOWS\system32\drivers\etc
2012-03-09 22:54:34 ----D---- C:\Documents and Settings\klatu\Data aplikací\Nokia
2012-03-09 16:54:29 ----D---- C:\WINDOWS\system32\drivers\UMDF
2012-03-09 16:49:03 ----D---- C:\Documents and Settings\All Users\Data aplikací\NokiaInstallerCache
2012-03-09 13:09:19 ----SD---- C:\Documents and Settings\klatu\Data aplikací\Microsoft
2012-03-08 16:59:59 ----D---- C:\TRANSLAT
2012-03-08 09:59:34 ----D---- C:\WINDOWS\system32\CatRoot
2012-03-08 08:18:51 ----SHD---- C:\System Volume Information
2012-03-07 17:52:14 ----D---- C:\Program Files\Windows Media Player
2012-03-02 09:39:21 ----D---- C:\Documents and Settings\klatu\Data aplikací\DMCache
2012-02-26 10:52:20 ----D---- C:\WINDOWS\system32\wbem
2012-02-26 10:51:23 ----D---- C:\WINDOWS\WinSxS
2012-02-26 10:48:07 ----D---- C:\WINDOWS\Debug
2012-02-26 10:47:08 ----D---- C:\Program Files\CCleaner
2012-02-25 09:22:22 ----D---- C:\Program Files\Microsoft Office
2012-02-24 04:21:52 ----D---- C:\Program Files\uTorrent
2012-02-21 03:08:30 ----RSD---- C:\WINDOWS\Fonts
2012-02-21 03:08:04 ----D---- C:\Program Files\Common Files\Microsoft Shared
2012-02-21 03:03:38 ----N---- C:\WINDOWS\win.ini
2012-02-21 03:03:38 ----D---- C:\Program Files\Common Files\System
2012-02-20 09:58:50 ----SD---- C:\Documents and Settings\All Users\Data aplikací\Microsoft
2012-02-20 09:58:36 ----A---- C:\WINDOWS\system32\PerfStringBackup.INI
2012-02-20 09:58:23 ----D---- C:\WINDOWS\system32\cs-cz
2012-02-20 09:51:50 ----D---- C:\WINDOWS\system32\config
2012-02-16 20:52:33 ----A---- C:\WINDOWS\system32\MRT.exe
2012-02-14 13:26:34 ----D---- C:\Program Files\Outlook Express
2012-02-14 12:03:17 ----D---- C:\Documents and Settings\klatu\Data aplikací\Adobe
2012-02-12 20:35:59 ----D---- C:\WINDOWS\system32\spool
2012-02-12 20:34:15 ----D---- C:\WINDOWS\system32\mui
2012-02-12 19:11:46 ----D---- C:\Documents and Settings\klatu\Data aplikací\PC Suite
2012-02-12 19:10:26 ----D---- C:\Documents and Settings\All Users\Data aplikací\PC Suite
2012-02-12 13:12:47 ----D---- C:\Documents and Settings\klatu\Data aplikací\BSplayer
2012-02-12 09:55:39 ----D---- C:\PROGRAMY BEZ VLIVU C
2012-02-12 09:08:15 ----D---- C:\WINDOWS\system32\Restore
2012-02-12 08:55:02 ----D---- C:\WINDOWS\PCHEALTH
2012-02-12 08:51:54 ----D---- C:\Program Files\Common Files\InstallShield
2012-02-12 08:45:03 ----D---- C:\WINDOWS\Media
2012-02-12 08:44:47 ----D---- C:\WINDOWS\twain_32

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 AVGIDSEH;AVGIDSEH; C:\WINDOWS\system32\DRIVERS\AVGIDSEH.Sys [2011-07-11 23120]
R0 Avgrkx86;AVG Anti-Rootkit Driver; C:\WINDOWS\system32\DRIVERS\avgrkx86.sys [2011-09-13 32592]
R1 Avgldx86;AVG AVI Loader Driver; C:\WINDOWS\system32\DRIVERS\avgldx86.sys [2011-10-07 230608]
R1 Avgmfx86;AVG Mini-Filter Resident Anti-Virus Shield; C:\WINDOWS\system32\DRIVERS\avgmfx86.sys [2011-08-08 40016]
R1 Avgtdix;AVG TDI Driver; C:\WINDOWS\system32\DRIVERS\avgtdix.sys [2011-07-11 295248]
R1 intelppm;Řadič procesoru Intel; C:\WINDOWS\System32\DRIVERS\intelppm.sys [2008-04-14 40192]
R3 AVGIDSDriver;AVGIDSDriver; C:\WINDOWS\system32\DRIVERS\AVGIDSDriver.Sys [2011-07-11 134608]
R3 AVGIDSFilter;AVGIDSFilter; C:\WINDOWS\system32\DRIVERS\AVGIDSFilter.Sys [2011-07-11 24272]
R3 AVGIDSShim;AVGIDSShim; C:\WINDOWS\system32\DRIVERS\AVGIDSShim.Sys [2011-10-04 16720]
R3 E100B;Intel(R) PRO Network Connection Driver; C:\WINDOWS\system32\DRIVERS\e100b325.sys [2005-06-13 162816]
R3 HDAudBus;Ovladač Microsoft UAA pro sběrnici High Definition Audio; C:\WINDOWS\system32\DRIVERS\HDAudBus.sys [2008-04-13 144384]
R3 nv;nv; C:\WINDOWS\system32\DRIVERS\nv4_mini.sys [2011-05-25 12753664]
R3 NVHDA;Service for NVIDIA High Definition Audio Driver; C:\WINDOWS\system32\drivers\nvhda32.sys [2011-05-25 119528]
R3 STHDA;IDT High Definition Audio CODEC; C:\WINDOWS\system32\drivers\sthda.sys [2009-03-12 1550613]
R3 usbuhci;Ovladač Microsoft univerzálního hostitelského řadiče USB od společnosti Microsoft; C:\WINDOWS\System32\DRIVERS\usbuhci.sys [2008-04-14 20608]
R3 WudfPf;Windows Driver Foundation - User-mode Driver Framework Platform Driver; C:\WINDOWS\system32\DRIVERS\WudfPf.sys [2009-07-13 91904]
S3 nmwcd;Nokia USB Phone Parent Driver; C:\WINDOWS\system32\drivers\ccdcmb.sys [2011-11-01 18176]
S3 nmwcdc;Nokia USB Communication Driver; C:\WINDOWS\system32\drivers\ccdcmbo.sys [2011-11-01 23168]
S3 pccsmcfd;PCCS Mode Change Filter Driver; C:\WINDOWS\system32\DRIVERS\pccsmcfd.sys [2008-08-26 18816]
S3 upperdev;upperdev; C:\WINDOWS\system32\DRIVERS\usbser_lowerflt.sys [2011-11-01 8192]
S3 usbccgp;Obecný nadřazený ovladač Microsoft USB; C:\WINDOWS\system32\DRIVERS\usbccgp.sys [2008-04-14 32128]
S3 usbprint;Třída USB Printer; C:\WINDOWS\system32\DRIVERS\usbprint.sys [2008-04-14 25856]
S3 usbscan;Ovladač skeneru USB; C:\WINDOWS\system32\DRIVERS\usbscan.sys [2008-04-14 15104]
S3 usbser;Nokia USB Serial Port Driver ; C:\WINDOWS\system32\drivers\usbser.sys [2008-04-14 26112]
S3 UsbserFilt;UsbserFilt; C:\WINDOWS\system32\DRIVERS\usbser_lowerfltj.sys [2011-11-01 8192]
S3 USBSTOR;Ovladač velkokapacitního paměťového zařízení USB; C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS [2008-04-14 26368]
S3 Wdf01000;Kernel Mode Driver Frameworks service; C:\WINDOWS\System32\Drivers\wdf01000.sys [2009-07-14 444136]
S3 WudfRd;Windows Driver Foundation - User-mode Driver Framework Reflector; C:\WINDOWS\system32\DRIVERS\wudfrd.sys [2009-07-13 132224]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 AVGIDSAgent;AVGIDSAgent; C:\Program Files\AVG\AVG2012\AVGIDSAgent.exe [2011-10-12 4433248]
R2 avgwd;AVG WatchDog; C:\Program Files\AVG\AVG2012\avgwdsvc.exe [2011-08-02 192776]
R2 NVSvc;NVIDIA Driver Helper Service; C:\WINDOWS\system32\nvsvc32.exe [2011-05-25 154728]
R2 nvUpdatusService;NVIDIA Update Service Daemon; C:\Program Files\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe [2011-05-25 2214504]
R2 STacSV;Audio Service; c:\program files\idt\intelxpv_v103\wdm\STacSV.exe [2009-03-12 254036]
R2 UMWdf;Windows User Mode Driver Framework; C:\WINDOWS\system32\wdfmgr.exe [2004-08-11 38912]
R2 WudfSvc;Windows Driver Foundation - User-mode Driver Framework; C:\WINDOWS\system32\svchost.exe [2008-04-14 14336]
S3 aspnet_state;ASP.NET State Service; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe [2008-07-25 34312]
S3 clr_optimization_v2.0.50727_32;.NET Runtime Optimization Service v2.0.50727_X86; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe [2008-07-25 69632]
S3 FontCache3.0.0.0;Windows Presentation Foundation Font Cache 3.0.0.0; c:\WINDOWS\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe [2008-07-29 46104]
S3 idsvc;Windows CardSpace; c:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe [2008-07-29 881664]
S3 Microsoft Office Groove Audit Service;Microsoft Office Groove Audit Service; C:\Program Files\Microsoft Office\Office12\GrooveAuditService.exe [2008-10-25 65888]
S3 NMIndexingService;NMIndexingService; C:\Program Files\Common Files\Nero\Lib\NMIndexingService.exe [2008-06-24 537896]
S3 odserv;Microsoft Office Diagnostics Service; C:\Program Files\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE [2008-11-04 441712]
S3 ose;Office Source Engine; C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2006-10-26 145184]
S3 ServiceLayer;ServiceLayer; C:\Program Files\PC Connectivity Solution\ServiceLayer.exe [2012-01-04 718888]
S4 NetTcpPortSharing;Net.Tcp Port Sharing Service; c:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe [2008-07-29 132096]

-----------------EOF-----------------

[Rudy]

Také zdravím!
Poprosím o log ComboFix.

Stahnete a ulozte nejlepe na plochu ComboFix: http://download.bleepingcomputer.com/sUBs/ComboFix.exe

pote spustte aplikaci pod uctem s administratorskym opravnenim

hned po startu se zobrazi obrazovka s licencnimi podminkami, pokracujte kliknutim na tlacitko Ano.

v klidu si postavte na kafe (cela akce trva cca. 5-10 minut, nekdy i dele - dle toho, o jak rychly stroj se

jedna a kolika soubory se skener bude muset prodirat), behem skenu se nepokousejte spoustet zadne jine

aplikace ani nic jineho

behem skenovani nepropadejte panice, vas stroj muze byt restartovan (predevsim pri prvni aplikaci skeneru)

upozorneni: pokud pouzivate antispyware s rezidentnim stitem, prepnete jeho rezidentni stit do Install Mode,

pripadne jej po dobu skenu uplne deaktivujte, protoze dochazi pri skenu a vymazu pripadneho malware k

nezadoucim kolizim s rezidentem antispyware

[klatu]

ComboFix 12-03-10.02 - klatu 11.03.2012 12:25:50.1.2 - x86
Microsoft Windows XP Home Edition 5.1.2600.3.1250.420.1029.18.1021.262 [GMT 1:00]
Spuštěný z: c:\documents and settings\klatu\Plocha\ComboFix.exe
AV: AVG Anti-Virus Free Edition 2012 *Enabled/Updated* {17DDD097-36FF-435F-9E1B-52D74245D6BF}
.
.
((((((((((((((((((((((((((((((((((((((( Ostatní výmazy )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
c:\documents and settings\klatu\WINDOWS
c:\windows\pkunzip.pif
c:\windows\pkzip.pif
c:\windows\system32\dllcache\dlimport.exe
c:\windows\system32\TZLog.log
c:\windows\system32\UNWISE.EXE
.
.
((((((((((((((((((((((((( Soubory vytvořené od 2012-02-11 do 2012-03-11 )))))))))))))))))))))))))))))))
.
.
2012-03-11 08:39 . 2012-03-11 08:40 -------- d-----w- C:\rsit
2012-02-20 08:41 . 2012-02-20 08:41 -------- d-----r- C:\MSOCache
2012-02-13 08:22 . 2012-02-13 08:24 -------- d-----w- C:\Databáze DVD v1.3
2012-02-12 19:35 . 2012-02-12 19:36 -------- d-----w- C:\c348f8276227b9d45aed5992
2012-02-12 08:40 . 2012-02-12 08:40 -------- d-----w- C:\totalcmd
2012-02-12 08:37 . 2012-02-12 08:37 -------- d-----w- C:\SubtitleToolCZ
2012-02-12 08:35 . 2012-02-12 08:35 -------- d-----w- C:\Virtual Dub
2012-02-11 19:29 . 2012-03-08 15:59 -------- d-----w- C:\TRANSLAT
2012-02-11 19:02 . 2012-02-12 08:55 -------- d-----w- C:\PROGRAMY BEZ VLIVU C
2012-02-10 23:35 . 2012-02-10 23:35 -------- d-----w- C:\$AVG
.
.
.
(((((((((((((((((((((((((((((((((((((((( Find3M výpis ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2012-01-12 17:20 . 2001-10-25 12:00 1859968 ----a-w- c:\windows\system32\win32k.sys
2012-02-16 14:53 . 2012-03-07 15:32 134104 ----a-w- c:\program files\mozilla firefox\components\browsercomps.dll
.
.
(((((((((((((((((((((((((((((((((( Spouštěcí body v registru )))))))))))))))))))))))))))))))))))))))))))))
.
.
*Poznámka* prázdné záznamy a legitimní výchozí údaje nejsou zobrazeny.
REGEDIT4
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"uTorrent"="c:\program files\uTorrent\uTorrent.exe" [2012-02-23 740216]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"NvCplDaemon"="c:\windows\system32\NvCpl.dll" [2011-05-25 13895272]
"AVG_TRAY"="c:\program files\AVG\AVG2012\avgtray.exe" [2012-01-24 2416480]
.
[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="c:\windows\System32\CTFMON.EXE" [2008-04-14 15360]
.
c:\documents and settings\klatu\Nabídka Start\Programy\Po spuštění\
Spamihilator.lnk - c:\program files\Spamihilator\spamihilator.exe [2012-2-11 1993728]
.
[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\session manager]
BootExecute REG_MULTI_SZ autocheck autochk *\0c:\progra~1\AVG\AVG2012\avgrsx.exe /sync /restart
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Wdf01000.sys]
@="Driver"
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WudfSvc]
@="Service"
.
[HKLM\~\startupfolder\C:^Documents and Settings^All Users^Nabídka Start^Programy^Po spuštění^Microsoft Office.lnk]
path=c:\documents and settings\All Users\Nabídka Start\Programy\Po spuštění\Microsoft Office.lnk
backup=c:\windows\pss\Microsoft Office.lnkCommon Startup
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe ARM]
2012-01-03 07:37 843712 ----a-w- c:\program files\Common Files\Adobe\ARM\1.0\AdobeARM.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\AVG_TRAY]
2012-01-24 16:24 2416480 ----a-w- c:\program files\AVG\AVG2012\avgtray.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\CanonMyPrinter]
2007-04-03 16:50 1603152 ----a-w- c:\program files\Canon\MyPrinter\BJMYPRT.EXE
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\CanonSolutionMenu]
2007-05-14 16:01 644696 ----a-w- c:\program files\Canon\SolutionMenu\CNSLMAIN.EXE
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NeroFilterCheck]
2008-07-09 13:39 570664 ----a-w- c:\program files\Common Files\Nero\Lib\NeroCheck.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NokiaSuite.exe]
2012-01-10 17:36 1083264 ----a-w- c:\program files\Nokia\Nokia Suite\NokiaSuite.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NvCplDaemon]
2011-05-25 07:26 13895272 ----a-w- c:\windows\system32\nvcpl.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NvMediaCenter]
2011-05-25 07:26 111208 ----a-w- c:\windows\system32\nvmctray.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\nwiz]
2011-05-04 23:02 1632360 ----a-w- c:\program files\NVIDIA Corporation\nView\nwiz.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SpybotSD TeaTimer]
2009-03-05 15:07 2260480 --sha-r- c:\program files\Spybot - Search & Destroy\TeaTimer.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SysTrayApp]
2009-03-12 11:53 483422 ----a-w- c:\program files\IDT\WDM\sttray.exe
.
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\system32\\sessmgr.exe"=
"%windir%\\Network Diagnostic\\xpnetdiag.exe"=
"c:\\Program Files\\AVG\\AVG2012\\avgmfapx.exe"=
"c:\\Program Files\\NVIDIA Corporation\\NVIDIA Updatus\\daemonu.exe"=
"c:\\Program Files\\uTorrent\\uTorrent.exe"=
"c:\\Program Files\\Spamihilator\\spamihilator.exe"=
"c:\\Program Files\\Spamihilator\\cdcc.exe"=
"c:\\Program Files\\Spamihilator\\dccproc.exe"=
"c:\\Program Files\\Microsoft Office\\Office12\\OUTLOOK.EXE"=
"c:\\Program Files\\Microsoft Office\\Office12\\GROOVE.EXE"=
"c:\\Program Files\\Microsoft Office\\Office12\\ONENOTE.EXE"=
"c:\\Program Files\\Google\\Google Earth\\plugin\\geplugin.exe"=
"c:\\WINDOWS\\system32\\mmc.exe"=
.
R0 AVGIDSEH;AVGIDSEH;c:\windows\system32\drivers\AVGIDSEH.sys [11.7.2011 1:14 23120]
R0 Avgrkx86;AVG Anti-Rootkit Driver;c:\windows\system32\drivers\avgrkx86.sys [13.9.2011 6:30 32592]
R1 Avgldx86;AVG AVI Loader Driver;c:\windows\system32\drivers\avgldx86.sys [7.10.2011 6:23 230608]
R1 Avgtdix;AVG TDI Driver;c:\windows\system32\drivers\avgtdix.sys [11.7.2011 1:14 295248]
R2 avgwd;AVG WatchDog;c:\program files\AVG\AVG2012\avgwdsvc.exe [2.8.2011 6:09 192776]
R2 nvUpdatusService;NVIDIA Update Service Daemon;c:\program files\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe [10.2.2012 22:53 2214504]
R3 AVGIDSDriver;AVGIDSDriver;c:\windows\system32\drivers\AVGIDSDriver.sys [11.7.2011 1:14 134608]
R3 AVGIDSFilter;AVGIDSFilter;c:\windows\system32\drivers\AVGIDSFilter.sys [11.7.2011 1:14 24272]
R3 AVGIDSShim;AVGIDSShim;c:\windows\system32\drivers\AVGIDSShim.sys [4.10.2011 6:21 16720]
R3 NVHDA;Service for NVIDIA High Definition Audio Driver;c:\windows\system32\drivers\nvhda32.sys [10.2.2012 22:52 119528]
S3 AVGIDSAgent;AVGIDSAgent;c:\program files\AVG\AVG2012\AVGIDSAgent.exe [12.10.2011 6:25 4433248]
.
.
------- Doplňkový sken -------
.
uStart Page = hxxp://www.google.com/
uSearchAssistant = hxxp://dts.search-results.com/sr?src=ieb&appid=2&systemid=410&sr=0&q={searchTerms}
IE: E&xportovat do aplikace Microsoft Excel - c:\progra~1\MICROS~3\Office12\EXCEL.EXE/3000
IE: {{7E6A20FB-153F-402c-A84B-1A64E1955D3D} - {7E6A20FB-153F-402c-A84B-1A64E1955D3D} - c:\documents and settings\All Users\Data aplikací\LangSoft\WebIE.dll
IE: {{CC963627-B1DC-40E0-B52A-CF21EE748449} - {CC963627-B1DC-40E0-B52A-CF21EE748449} - c:\documents and settings\All Users\Data aplikací\LangSoft\WebIE.dll
IE: {{CC963627-B1DC-40E0-B52A-CF21EE748450} - {CC963627-B1DC-40E0-B52A-CF21EE748450} - c:\documents and settings\All Users\Data aplikací\LangSoft\WebIE.dll
IE: {{CC963627-B1DC-40E0-B52A-CF21EE748451} - {CC963627-B1DC-40E0-B52A-CF21EE748451} - c:\documents and settings\All Users\Data aplikací\LangSoft\WebIE.dll
IE: {{CC963627-B1DC-40E0-B52A-CF21EE748452} - {CC963627-B1DC-40E0-B52A-CF21EE748452} - c:\documents and settings\All Users\Data aplikací\LangSoft\WebIE.dll
TCP: Interfaces\{3FFFDFFC-05E9-4D35-8CD1-FE1F02AD8506}: NameServer = 89.190.64.20,89.190.65.200
DPF: Microsoft XML Parser for Java - file://c:\windows\Java\classes\xmldso.cab
.
- - - - NEPLATNÉ POLOŽKY ODSTRANĚNÉ Z REGISTRU - - - -
.
Toolbar-10 - (no file)
WebBrowser-{E7DF6BFF-55A5-4EB7-A673-4ED3E9456D39} - (no file)
SafeBoot-WudfPf
SafeBoot-WudfRd
MSConfigStartUp-GAINWARD - c:\program files\EXPERTool\TBPanel.exe
MSConfigStartUp-vProt - c:\program files\AVG Secure Search\vprot.exe
AddRemove-DVD Album Creator 3.2.2 - c:\windows\system32\UNWISE.EXE
.
.
.
**************************************************************************
.
catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2012-03-11 12:32
Windows 5.1.2600 Service Pack 3 NTFS
.
skenování skrytých procesů ...
.
skenování skrytých položek 'Po spuštění' ...
.
skenování skrytých souborů ...
.
sken byl úspešně dokončen
skryté soubory: 0
.
**************************************************************************
.
--------------------- ZAMKNUTÉ KLÍČE V REGISTRU ---------------------
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{2b693d0b-91ac-4ceb-9169-c6809fb92b32}]
@Denied: (Full) (Everyone)
"Model"=dword:0000003c
"Therad"=dword:00000015
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{5ED60779-4DE2-4E07-B862-974CA4FF2E9C}]
@Denied: (Full) (Everyone)
"scansk"=hex(0):45,01,60,e0,c3,05,6b,d4,b7,8c,54,b8,ad,10,06,a3,91,aa,cf,4b,42,
3a,c1,84,69,12,6a,38,15,94,2c,64,41,36,49,0d,0d,ae,5f,0a,00,00,00,00,00,00,\
.
Celkový čas: 2012-03-11 12:34:52
ComboFix-quarantined-files.txt 2012-03-11 11:34
.
Před spuštěním: Volných bajtů: 20 966 223 872
Po spuštění: Volných bajtů: 20 933 918 720
.
WindowsXP-KB310994-SP2-Home-BootDisk-CSY.exe
[boot loader]
timeout=2
default=multi(0)disk(0)rdisk(0)partition(1)\WINDOWS
[operating systems]
c:\cmdcons\BOOTSECT.DAT="Microsoft Windows Recovery Console" /cmdcons
UnsupportedDebug="do not select this" /debug
multi(0)disk(0)rdisk(0)partition(1)\WINDOWS="Microsoft Windows XP Home Edition" /fastdetect /NoExecute=OptIn
.
- - End Of File - - 46D7F3166418BCDE8052338F08B0417D

[Rudy]

Ještě dočistíme. Otevřte poznámkový blok a zkopírujte do něj:

RegLock::
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{2b693d0b-91ac-4ceb-9169-c6809fb92b32}]
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{5ED60779-4DE2-4E07-B862-974CA4FF2E9C}]

Uložte na plochu jako CFScript.txt. Pak jej myší přetáhněte nad ikonu ComboFix a pusťte. CF se spustí a vykoná příkazy ze skriptu.

[klatu]

ComboFix 12-03-10.02 - klatu 11.03.2012 12:48:43.2.2 - x86
Microsoft Windows XP Home Edition 5.1.2600.3.1250.420.1029.18.1021.591 [GMT 1:00]
Spuštěný z: c:\documents and settings\klatu\Plocha\ComboFix.exe
Použité ovládací přepínače :: c:\documents and settings\klatu\Plocha\CFScript.txt
AV: AVG Anti-Virus Free Edition 2012 *Enabled/Updated* {17DDD097-36FF-435F-9E1B-52D74245D6BF}
.
.
((((((((((((((((((((((((( Soubory vytvořené od 2012-02-11 do 2012-03-11 )))))))))))))))))))))))))))))))
.
.
2012-03-11 08:39 . 2012-03-11 08:40 -------- d-----w- C:\rsit
2012-02-20 08:41 . 2012-02-20 08:41 -------- d-----r- C:\MSOCache
2012-02-13 08:22 . 2012-02-13 08:24 -------- d-----w- C:\Databáze DVD v1.3
2012-02-12 19:35 . 2012-02-12 19:36 -------- d-----w- C:\c348f8276227b9d45aed5992
2012-02-12 08:40 . 2012-02-12 08:40 -------- d-----w- C:\totalcmd
2012-02-12 08:37 . 2012-02-12 08:37 -------- d-----w- C:\SubtitleToolCZ
2012-02-12 08:35 . 2012-02-12 08:35 -------- d-----w- C:\Virtual Dub
2012-02-11 19:29 . 2012-03-08 15:59 -------- d-----w- C:\TRANSLAT
2012-02-11 19:02 . 2012-02-12 08:55 -------- d-----w- C:\PROGRAMY BEZ VLIVU C
2012-02-10 23:35 . 2012-02-10 23:35 -------- d-----w- C:\$AVG
.
.
.
(((((((((((((((((((((((((((((((((((((((( Find3M výpis ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2012-01-12 17:20 . 2001-10-25 12:00 1859968 ----a-w- c:\windows\system32\win32k.sys
2012-02-16 14:53 . 2012-03-07 15:32 134104 ----a-w- c:\program files\mozilla firefox\components\browsercomps.dll
.
.
(((((((((((((((((((((((((((((((((( Spouštěcí body v registru )))))))))))))))))))))))))))))))))))))))))))))
.
.
*Poznámka* prázdné záznamy a legitimní výchozí údaje nejsou zobrazeny.
REGEDIT4
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"uTorrent"="c:\program files\uTorrent\uTorrent.exe" [2012-02-23 740216]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"NvCplDaemon"="c:\windows\system32\NvCpl.dll" [2011-05-25 13895272]
"AVG_TRAY"="c:\program files\AVG\AVG2012\avgtray.exe" [2012-01-24 2416480]
.
[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="c:\windows\System32\CTFMON.EXE" [2008-04-14 15360]
.
c:\documents and settings\klatu\Nabídka Start\Programy\Po spuštění\
Spamihilator.lnk - c:\program files\Spamihilator\spamihilator.exe [2012-2-11 1993728]
.
[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\session manager]
BootExecute REG_MULTI_SZ autocheck autochk *\0c:\progra~1\AVG\AVG2012\avgrsx.exe /sync /restart
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Wdf01000.sys]
@="Driver"
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WudfSvc]
@="Service"
.
[HKLM\~\startupfolder\C:^Documents and Settings^All Users^Nabídka Start^Programy^Po spuštění^Microsoft Office.lnk]
path=c:\documents and settings\All Users\Nabídka Start\Programy\Po spuštění\Microsoft Office.lnk
backup=c:\windows\pss\Microsoft Office.lnkCommon Startup
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe ARM]
2012-01-03 07:37 843712 ----a-w- c:\program files\Common Files\Adobe\ARM\1.0\AdobeARM.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\AVG_TRAY]
2012-01-24 16:24 2416480 ----a-w- c:\program files\AVG\AVG2012\avgtray.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\CanonMyPrinter]
2007-04-03 16:50 1603152 ----a-w- c:\program files\Canon\MyPrinter\BJMYPRT.EXE
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\CanonSolutionMenu]
2007-05-14 16:01 644696 ----a-w- c:\program files\Canon\SolutionMenu\CNSLMAIN.EXE
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NeroFilterCheck]
2008-07-09 13:39 570664 ----a-w- c:\program files\Common Files\Nero\Lib\NeroCheck.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NokiaSuite.exe]
2012-01-10 17:36 1083264 ----a-w- c:\program files\Nokia\Nokia Suite\NokiaSuite.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NvCplDaemon]
2011-05-25 07:26 13895272 ----a-w- c:\windows\system32\nvcpl.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NvMediaCenter]
2011-05-25 07:26 111208 ----a-w- c:\windows\system32\nvmctray.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\nwiz]
2011-05-04 23:02 1632360 ----a-w- c:\program files\NVIDIA Corporation\nView\nwiz.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SpybotSD TeaTimer]
2009-03-05 15:07 2260480 --sha-r- c:\program files\Spybot - Search & Destroy\TeaTimer.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SysTrayApp]
2009-03-12 11:53 483422 ----a-w- c:\program files\IDT\WDM\sttray.exe
.
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\system32\\sessmgr.exe"=
"%windir%\\Network Diagnostic\\xpnetdiag.exe"=
"c:\\Program Files\\AVG\\AVG2012\\avgmfapx.exe"=
"c:\\Program Files\\NVIDIA Corporation\\NVIDIA Updatus\\daemonu.exe"=
"c:\\Program Files\\uTorrent\\uTorrent.exe"=
"c:\\Program Files\\Spamihilator\\spamihilator.exe"=
"c:\\Program Files\\Spamihilator\\cdcc.exe"=
"c:\\Program Files\\Spamihilator\\dccproc.exe"=
"c:\\Program Files\\Microsoft Office\\Office12\\OUTLOOK.EXE"=
"c:\\Program Files\\Microsoft Office\\Office12\\GROOVE.EXE"=
"c:\\Program Files\\Microsoft Office\\Office12\\ONENOTE.EXE"=
"c:\\Program Files\\Google\\Google Earth\\plugin\\geplugin.exe"=
"c:\\WINDOWS\\system32\\mmc.exe"=
.
R0 AVGIDSEH;AVGIDSEH;c:\windows\system32\drivers\AVGIDSEH.sys [11.7.2011 1:14 23120]
R0 Avgrkx86;AVG Anti-Rootkit Driver;c:\windows\system32\drivers\avgrkx86.sys [13.9.2011 6:30 32592]
R1 Avgldx86;AVG AVI Loader Driver;c:\windows\system32\drivers\avgldx86.sys [7.10.2011 6:23 230608]
R1 Avgtdix;AVG TDI Driver;c:\windows\system32\drivers\avgtdix.sys [11.7.2011 1:14 295248]
R2 avgwd;AVG WatchDog;c:\program files\AVG\AVG2012\avgwdsvc.exe [2.8.2011 6:09 192776]
R2 nvUpdatusService;NVIDIA Update Service Daemon;c:\program files\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe [10.2.2012 22:53 2214504]
R3 AVGIDSDriver;AVGIDSDriver;c:\windows\system32\drivers\AVGIDSDriver.sys [11.7.2011 1:14 134608]
R3 AVGIDSFilter;AVGIDSFilter;c:\windows\system32\drivers\AVGIDSFilter.sys [11.7.2011 1:14 24272]
R3 AVGIDSShim;AVGIDSShim;c:\windows\system32\drivers\AVGIDSShim.sys [4.10.2011 6:21 16720]
R3 NVHDA;Service for NVIDIA High Definition Audio Driver;c:\windows\system32\drivers\nvhda32.sys [10.2.2012 22:52 119528]
S3 AVGIDSAgent;AVGIDSAgent;c:\program files\AVG\AVG2012\AVGIDSAgent.exe [12.10.2011 6:25 4433248]
.
.
------- Doplňkový sken -------
.
uStart Page = hxxp://www.google.com/
uSearchAssistant = hxxp://dts.search-results.com/sr?src=ieb&appid=2&systemid=410&sr=0&q={searchTerms}
IE: E&xportovat do aplikace Microsoft Excel - c:\progra~1\MICROS~3\Office12\EXCEL.EXE/3000
IE: {{7E6A20FB-153F-402c-A84B-1A64E1955D3D} - {7E6A20FB-153F-402c-A84B-1A64E1955D3D} - c:\documents and settings\All Users\Data aplikací\LangSoft\WebIE.dll
IE: {{CC963627-B1DC-40E0-B52A-CF21EE748449} - {CC963627-B1DC-40E0-B52A-CF21EE748449} - c:\documents and settings\All Users\Data aplikací\LangSoft\WebIE.dll
IE: {{CC963627-B1DC-40E0-B52A-CF21EE748450} - {CC963627-B1DC-40E0-B52A-CF21EE748450} - c:\documents and settings\All Users\Data aplikací\LangSoft\WebIE.dll
IE: {{CC963627-B1DC-40E0-B52A-CF21EE748451} - {CC963627-B1DC-40E0-B52A-CF21EE748451} - c:\documents and settings\All Users\Data aplikací\LangSoft\WebIE.dll
IE: {{CC963627-B1DC-40E0-B52A-CF21EE748452} - {CC963627-B1DC-40E0-B52A-CF21EE748452} - c:\documents and settings\All Users\Data aplikací\LangSoft\WebIE.dll
TCP: Interfaces\{3FFFDFFC-05E9-4D35-8CD1-FE1F02AD8506}: NameServer = 89.190.64.20,89.190.65.200
DPF: Microsoft XML Parser for Java - file://c:\windows\Java\classes\xmldso.cab
.
.
**************************************************************************
.
catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2012-03-11 12:54
Windows 5.1.2600 Service Pack 3 NTFS
.
skenování skrytých procesů ...
.
skenování skrytých položek 'Po spuštění' ...
.
skenování skrytých souborů ...
.
sken byl úspešně dokončen
skryté soubory: 0
.
**************************************************************************
.
Celkový čas: 2012-03-11 12:57:32
ComboFix-quarantined-files.txt 2012-03-11 11:57
ComboFix2.txt 2012-03-11 11:34
.
Před spuštěním: Volných bajtů: 21 018 087 424
Po spuštění: Volných bajtů: 21 004 763 136
.
- - End Of File - - 95A27C3E772CD0CF3714F49F105EB648

[klatu]

Zkoušel jsem kopírovat 1GB soubor z oddílu do oddílu,trvalo to 15 minut.
Nepřipadá mi,že by se něco změnilo...

[Rudy]

Vyčistěte PC CCleanerem: http://forum.viry.cz/viewtopic.php?f=46&t=7478 od balastu.

[klatu]

Vyházelo to asi 100 MB balastu,ale nezdá se mi,že by to pomohlo.
Kopírování 700 MB z oddílu na oddíl opět asi 10 minut,vypalování také asi 3x delší,než bývávalo

[Rudy]

Koukněte do System>správce zařízení. Rozklikněte řadiče IDE/ATA. Pak u jednotlivých kanálů klikněte pravým myšítkem>vlastnosti>upřesnit nastavení a zkontrolujte, zda je zapnut režim DMA. Pokud ne, zapněte, nastavení uložte a restartujte PC.

[klatu]

Mám tam:

Ultra ATA storage controlers

Serial ATA storage controler

Primární kanál IDE
režim přenosu DMA, zařízení 0:aktuální režim přenosu:nelze použít
režim přenosu DMA, zařízení 1:aktuální režim přenosu:nelze použít
Primární kanál IDE
DMA,zařízení 0: režim přenosu DMA,aktuální režim přenosu Režim Ultra DMA 5
DMA,zařízení 1: režim přenosu DMA,aktuální režim přenosu Režim Ultra DMA 4
Sekudární kanál IDE
režim přenosu DMA, zařízení 0:aktuální režim přenosu:PI0
režim přenosu DMA, zařízení 1:aktuální režim přenosu:nelze použít

Ještě dodám:
při restartu nezvykle dlouho startuje,snad 5 min stále hrabe na disku,než začne nabíhat plocha a aplikace po spuštění.

[Rudy]

OK. Podstatné je, aby kanál, k němuž je připojen systémový disk, měl režim DMA. Jinak to poběží pomalu.

[klatu]

Kde se to dá změnit,aby DMA bylo používáno?
Nebo je to takhle dobře?

Ještě na jednu věc jsem teď přišel.
Naplánoval jsem kontrolu disku C,restartoval,
spustil se CHKDSK,proběhly tři fáze,pak naběhlo:

Program CHKDSK ověřuje data souboru (fáze 4 z 5)
Dokončeno 0

a PC vytuhnul.
Zkusil jsem to ještě jednou,dopadlo to stejně...

[Rudy]

Pokud je DMA zapnut, je to správně. Nutné je to u toho kanálu, k němuž je připojen systémový disk. Pokud je zapnut, je vše v pořádku.

Udělejte kontrolu disku pomocí CrystalDiskInfo: http://www.stahuj.centrum.cz/utility_a_ ... ldiskinfo/ . Stáhněte, nainstalujte, spusťte a přes Úpravy>kopírovat sem dejte log.

[klatu]

----------------------------------------------------------------------------
CrystalDiskInfo 4.2.0 (C) 2008-2012 hiyohiyo
Crystal Dew World : http://crystalmark.info/
----------------------------------------------------------------------------

OS : Windows XP Home Edition SP3 [5.1 Build 2600] (x86)
Date : 2012/03/11 23:02:22

-- Controller Map ----------------------------------------------------------
+ Intel(R) 82801G (ICH7 Family) Ultra ATA Storage Controllers - 27DF [ATA]
+ Primární kanál IDE (0)
- ASUS DRW-22B2S
- ST340824A
+ Intel(R) 82801GB/GR/GH (ICH7 Family) Serial ATA Storage Controller - 27C0 [ATA]
+ Sekundární kanál IDE (1)
- Maxtor 6Y160M0

-- Disk List ---------------------------------------------------------------
(1) ST340824A : 40.0 GB [0-0-0, pd1]
(2) Maxtor 6Y160M0 : 163.9 GB [1-2-0, pd1]

----------------------------------------------------------------------------
(1) ST340824A
----------------------------------------------------------------------------
Model : ST340824A
Firmware : 3.05
Serial Number : 3HE04RHY
Disk Size : 40.0 GB (8.4/40.0/----)
Buffer Size : 2048 KB
Queue Depth : 1
# of Sectors : 78165360
Rotation Rate : Neznámy údaj
Interface : Parallel ATA
Major Version : ATA/ATAPI-4
Minor Version : ----
Transfer Mode : Ultra DMA/100
Power On Hours : 39529 hod.
Power On Count : 2704 krát
Temparature : 45 C (113 F)
Health Status : Pozor
Features : S.M.A.R.T.
APM Level : ----
AAM Level : ----

-- S.M.A.R.T. --------------------------------------------------------------
ID Cur Wor Thr RawValues(6) Attribute Name
01 _73 _48 _25 0000036F8C6C Počet chyb čtení
03 _76 _70 __0 000000000000 Čas na roztočení ploten
04 100 100 _20 00000000001C Počet spuštění/zastavení
05 100 100 _36 000000000000 Počet přemapovaných sektorů
07 _89 _60 _30 00003438BCF2 Počet chybných hledání
09 _55 _55 __0 000000009A69 Hodin v činnosti
0A 100 100 _97 000000000000 Počet opakovaných pokusů o roztočení ploten
0C _98 _98 _20 000000000A90 Počet cyklů zapnutí zařízení
C2 _45 _55 __0 00000000002D Teplota
C3 _70 _51 __0 000001A35BC9 Počet oprav chybného čtení
C5 100 100 __0 000000000006 Počet podezřelých sektorů
C6 100 100 __0 000000000006 Počet neopravitelných sektorů
C7 200 200 __0 000000000000 Počet chyb v kontrolním součtu UltraDMA
C8 _99 _93 __0 000001010000 Počet chyb při zápisu sektorů
CA 100 253 __0 000000000000 Počet chyb při směrování údajů

-- IDENTIFY_DEVICE ---------------------------------------------------------
+0 +1 +2 +3 +4 +5 +6 +7 +8 +9 +A +B +C +D +E +F
000: 0C 5A 3F FF 00 00 00 10 00 00 00 00 00 3F 00 00
010: 00 00 00 00 33 48 45 30 34 52 48 59 20 20 20 20
020: 20 20 20 20 20 20 20 20 00 00 10 00 00 00 33 2E
030: 30 35 20 20 20 20 53 54 33 34 30 38 32 34 41 20
040: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20
050: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 80 10
060: 00 00 2F 00 00 00 02 00 02 00 00 07 3F FF 00 10
070: 00 3F FC 10 00 FB 01 10 B5 70 04 A8 00 00 00 07
080: 00 03 00 78 00 78 00 F0 00 78 00 00 00 00 00 00
090: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
0A0: 00 1E 00 00 30 6B 42 01 40 00 30 69 00 01 40 00
0B0: 20 3F 00 00 00 00 00 00 FF FE 60 00 80 00 00 00
0C0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
0D0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
0E0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
0F0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
100: 00 09 B5 70 04 A8 B5 70 04 A8 20 20 00 02 02 B6
110: 00 00 19 03 3C 06 3C 02 FF FF 07 C6 01 00 08 00
120: 06 C0 02 00 00 02 00 00 00 00 00 00 00 00 00 00
130: 00 00 00 00 00 00 00 00 00 00 00 00 00 83 00 0B
140: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
150: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
160: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
170: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
180: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
190: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
1A0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
1B0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
1C0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
1D0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
1E0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
1F0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 1D A5

----------------------------------------------------------------------------
(2) Maxtor 6Y160M0
----------------------------------------------------------------------------
Model : Maxtor 6Y160M0
Firmware : YAR51EW0
Serial Number : Y44FLDFE
Disk Size : 163.9 GB (8.4/137.4/163.9)
Buffer Size : 7936 KB
Queue Depth : 1
# of Sectors : 320173056
Rotation Rate : Neznámy údaj
Interface : Serial ATA
Major Version : ATA/ATAPI-7
Minor Version : ATA/ATAPI-7 T13 1532D version 0
Transfer Mode : SATA/150
Power On Hours : 849 hod. (?)
Power On Count : 989 krát
Temparature : 52 C (125 F)
Health Status : Pozor
Features : S.M.A.R.T., APM, AAM, 48bit LBA
APM Level : 0000h [OFF]
AAM Level : C0FEh [ON]

-- S.M.A.R.T. --------------------------------------------------------------
ID Cur Wor Thr RawValues(6) Attribute Name
03 204 197 _63 000000004A37 Čas na roztočení ploten
04 253 253 __0 0000000003AF Počet spuštění/zastavení
05 _97 _97 _63 000000000630 Počet přemapovaných sektorů
06 253 253 100 000000000000 Počet dosáhnutí konce při čtení
07 253 252 __0 000000000000 Počet chybných hledání
08 250 237 187 00000000B0D3 Čas potřebný na vyhledání
09 147 147 __0 00000000C71A Hodin v činnosti
0A 253 252 157 000000000000 Počet opakovaných pokusů o roztočení ploten
0B 253 252 223 000000000000 Počet pokusů o překalibrování
0C 251 251 __0 0000000003DD Počet cyklů zapnutí zařízení
C0 253 253 __0 000000000000 Počet vypnutí disku
C1 253 253 __0 000000000000 Počet cyklů načítání/vymazání
C2 253 253 __0 000000000034 Teplota
C3 253 252 __0 000000001FFD Počet oprav chybného čtení
C4 253 253 __0 000000000000 Počet udalostí s číslem realokování sektorů
C5 253 253 __0 000000000002 Počet podezřelých sektorů
C6 248 248 __0 000000000005 Počet neopravitelných sektorů
C7 199 194 __0 000000000005 Počet chyb v kontrolním součtu UltraDMA
C8 253 252 __0 000000000000 Počet chyb při zápisu sektorů
C9 253 241 __0 000000000073 Počet chyb při čtení programů z disku
CA 253 252 __0 000000000000 Počet chyb při směrování údajů
CB 253 252 180 00000000002E Počet chyb v kódech na opravu chyb
CC 253 252 __0 000000000000 Počet softvérově opravených chyb v opravných kódech
CD 253 252 __0 000000000000 Počet chyb způsobených vysokou teplotou
CF 253 252 __0 000000000000 Množství napětí potřebného na roztočení disku
D0 253 252 __0 000000000000 Počet vyslaných impulzů na roztočení disku při nedostatečném napájení
D1 193 192 __0 000000000000 Výkon při vyhledávaní na disku při interních testech disku
63 253 253 __0 000000000000 Neznámý
64 253 253 __0 000000000000 Neznámý
65 253 253 __0 000000000000 Neznámý

-- IDENTIFY_DEVICE ---------------------------------------------------------
+0 +1 +2 +3 +4 +5 +6 +7 +8 +9 +A +B +C +D +E +F
000: 00 40 3F FF C8 37 00 10 00 00 00 00 00 3F 00 00
010: 00 00 00 00 59 34 34 46 4C 44 46 45 20 20 20 20
020: 20 20 20 20 20 20 20 20 00 03 3E 00 00 04 59 41
030: 52 35 31 45 57 30 4D 61 78 74 6F 72 20 36 59 31
040: 36 30 4D 30 20 20 20 20 20 20 20 20 20 20 20 20
050: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 80 10
060: 00 00 2F 00 40 00 02 00 00 00 00 07 3F FF 00 10
070: 00 3F FC 10 00 FB 01 10 FF FF 0F FF 00 00 00 07
080: 00 03 00 78 00 78 00 78 00 78 00 00 00 00 00 00
090: 00 00 00 00 00 00 00 00 00 01 00 00 00 00 00 00
0A0: 00 FE 00 1E 7C 6B 7F 09 40 03 7C 69 3E 01 40 03
0B0: 20 7F 00 00 00 00 00 00 FF FE 00 00 C0 FE 00 00
0C0: 00 00 00 00 00 00 00 00 74 00 13 15 00 00 00 00
0D0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
0E0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
0F0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
100: 00 09 00 00 00 00 00 00 00 00 00 00 00 00 00 00
110: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
120: 00 00 00 00 00 00 00 00 00 00 00 00 00 17 20 40
130: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
140: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
150: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
160: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
170: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
180: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
190: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
1A0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
1B0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
1C0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
1D0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
1E0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
1F0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 BD A5

[klatu]

mám dva fyzické disky,systém (C) je na tom 160 GB Maxtoru,ale to vy asi poznáte