Problem se zasekavanim PC

[dvarf]

Zdravim,

mam problem s PC. Po nejakem case se vzdy zasekne cela plocha, nejde klavesnice mys, musim tvrdy reboot. Projeto NOD32 a SASem a bez problemu...

Prikladam log z RSIT:

Logfile of random's system information tool 1.06 (written by random/random)
Run by jarka at 2010-02-01 13:56:39
Systém Microsoft Windows XP Professional Service Pack 3
System drive C: has 7 GB (10%) free of 76 GB
Total RAM: 991 MB (65% free)

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 13:57:26, on 1.2.2010
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Normal

Running processes:
C:\windows\System32\smss.exe
C:\windows\system32\winlogon.exe
C:\windows\system32\services.exe
C:\windows\system32\lsass.exe
C:\windows\system32\svchost.exe
C:\windows\System32\svchost.exe
C:\windows\system32\spoolsv.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\Program Files\ICQ6Toolbar\ICQ Service.exe
C:\Program Files\Eset\nod32krn.exe
C:\windows\system32\wuauclt.exe
C:\windows\system32\userinit.exe
C:\windows\Explorer.EXE
C:\windows\SOUNDMAN.EXE
C:\Program Files\Eset\nod32kui.exe
C:\Program Files\Print Server Utilities\PSAgent.exe
C:\Program Files\Adobe\Acrobat 8.0\Acrobat\Acrotray.exe
C:\windows\system32\ctfmon.exe
C:\windows\system32\ServoApp.exe
C:\windows\system32\rundll32.exe
C:\Program Files\Skype\Phone\Skype.exe
C:\Program Files\ICQ6.5\ICQ.exe
C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe
C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
C:\Program Files\Adobe\Acrobat 8.0\Acrobat\acrobat_sl.exe
C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
C:\Documents and Settings\Jarka\Plocha\RSIT.exe
C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
C:\Program Files\trend micro\jarka.exe
C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroDist.exe
C:\Program Files\Skype\Plugin Manager\skypePM.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.seznam.cz/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Odkazy
R3 - URLSearchHook: ICQToolBar - {855F3B16-6D32-4fe6-8A56-BBB695989046} - C:\Program Files\ICQ6Toolbar\ICQToolBar.dll
R3 - URLSearchHook: (no name) - - (no file)
O2 - BHO: Podpora odkazu pro Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: Skype add-on (mastermind) - {22BF413B-C6D2-4d91-82A9-A0F997BA588C} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar2.dll
O2 - BHO: Adobe PDF Conversion Toolbar Helper - {AE7CD045-E861-484f-8273-0445EE161910} - C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.4.4525.1752\swg.dll
O3 - Toolbar: ICQToolBar - {855F3B16-6D32-4fe6-8A56-BBB695989046} - C:\Program Files\ICQ6Toolbar\ICQToolBar.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar2.dll
O3 - Toolbar: Adobe PDF - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [nod32kui] "C:\Program Files\Eset\nod32kui.exe" /WAITSERVICE
O4 - HKLM\..\Run: [Print Manager] "C:\Program Files\Print Server Utilities\PSAgent.exe"
O4 - HKLM\..\Run: [GDI Manager] "C:\Program Files\Print Server Utilities\PSAgent.exe"
O4 - HKLM\..\Run: [Acrobat Assistant 8.0] "C:\Program Files\Adobe\Acrobat 8.0\Acrobat\Acrotray.exe"
O4 - HKCU\..\Run: [CTFMON.EXE] C:\windows\system32\ctfmon.exe
O4 - HKCU\..\Run: [NVIEW] rundll32.exe nview.dll,nViewLoadHook
O4 - HKCU\..\Run: [Skype] "C:\Program Files\Skype\Phone\Skype.exe" /nosplash /minimized
O4 - HKCU\..\Run: [ICQ] "C:\Program Files\ICQ6.5\ICQ.exe" silent
O4 - HKCU\..\Run: [SUPERAntiSpyware] C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe
O4 - HKCU\..\Run: [swg] "C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe"
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - Global Startup: Adobe Acrobat Speed Launcher.lnk = ?
O4 - Global Startup: Adobe Acrobat Synchronizer.lnk = C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AdobeCollabSync.exe
O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Office Excel - res://C:\PROGRA~1\MICROS~3\OFFICE11\EXCEL.EXE/3000
O8 - Extra context menu item: Převést cíl vazby do Adobe PDF - res://C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html
O8 - Extra context menu item: Převést cíl vazby do existujícího PDF - res://C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html
O8 - Extra context menu item: Převést do Adobe PDF - res://C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html
O8 - Extra context menu item: Převést vybrané vazby do Adobe PDF - res://C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIECaptureSelLinks.html
O8 - Extra context menu item: Převést vybrané vazby do existujícího PDF - res://C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIEAppendSelLinks.html
O8 - Extra context menu item: Převést výběr do Adobe PDF - res://C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html
O8 - Extra context menu item: Převést výběr do existujícího PDF - res://C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html
O8 - Extra context menu item: Přidat do stávajícího PDF - res://C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html
O9 - Extra button: Skype - {77BF5300-1474-4EC7-9980-D32B190E9B07} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
O9 - Extra button: Zdroje informací - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~3\OFFICE11\REFIEBAR.DLL
O9 - Extra button: ICQ Lite - {B863453A-26C3-4e1f-A54D-A2CD196348E9} - C:\Program Files\ICQLite\ICQLite.exe (file missing)
O9 - Extra 'Tools' menuitem: ICQ Lite - {B863453A-26C3-4e1f-A54D-A2CD196348E9} - C:\Program Files\ICQLite\ICQLite.exe (file missing)
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\windows\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\windows\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: ICQ6 - {E59EB121-F339-4851-A3BA-FE49C35617C2} - C:\Program Files\ICQ6.5\ICQ.exe
O9 - Extra 'Tools' menuitem: ICQ6 - {E59EB121-F339-4851-A3BA-FE49C35617C2} - C:\Program Files\ICQ6.5\ICQ.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - https://fpdownload.macromedia.com/pub/s ... wflash.cab
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: Domain = prescogroup.local
O17 - HKLM\Software\..\Telephony: DomainName = prescogroup.local
O17 - HKLM\System\CCS\Services\Tcpip\..\{EE839825-E38E-47C1-A874-5603AA6899E3}: NameServer = 192.168.1.1
O17 - HKLM\System\CS1\Services\Tcpip\Parameters: Domain = prescogroup.local
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O20 - Winlogon Notify: !SASWinLogon - C:\Program Files\SUPERAntiSpyware\SASWINLO.dll
O23 - Service: ##Id_String1.6844F930_1628_4223_B5CC_5BB94B879762## (Bonjour Service) - Apple Computer, Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: FLEXnet Licensing Service - Macrovision Europe Ltd. - C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: ICQ Service - Unknown owner - C:\Program Files\ICQ6Toolbar\ICQ Service.exe
O23 - Service: NOD32 Kernel Service (NOD32krn) - Eset - C:\Program Files\Eset\nod32krn.exe
O23 - Service: NVIDIA Driver Helper Service (NVSvc) - NVIDIA Corporation - C:\windows\system32\nvsvc32.exe

--
End of file - 9271 bytes

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{06849E9F-C8D7-4D59-B87D-784B7D6BE0B3}]
Podpora odkazu pro Adobe PDF Reader - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll [2006-10-22 62080]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{22BF413B-C6D2-4d91-82A9-A0F997BA588C}]
Skype add-on (mastermind) - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll [2008-02-01 1377576]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AA58ED58-01DD-4d91-8333-CF10577473F7}]
Google Toolbar Helper - c:\program files\google\googletoolbar2.dll [2007-01-19 2403392]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AE7CD045-E861-484f-8273-0445EE161910}]
Adobe PDF Conversion Toolbar Helper - C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll [2006-10-22 321120]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AF69DE43-7D58-4638-B6FA-CE66B5AD205D}]
Google Toolbar Notifier BHO - C:\Program Files\Google\GoogleToolbarNotifier\5.4.4525.1752\swg.dll [2009-11-25 764912]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{855F3B16-6D32-4fe6-8A56-BBB695989046} - ICQToolBar - C:\Program Files\ICQ6Toolbar\ICQToolBar.dll [2009-06-01 962808]
{2318C2B1-4965-11d4-9B18-009027A5CD4F} - &Google - c:\program files\google\googletoolbar2.dll [2007-01-19 2403392]
{47833539-D0C5-4125-9FA8-0819E2EAAC93} - Adobe PDF - C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll [2006-10-22 321120]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"NvCplDaemon"=C:\WINDOWS\system32\NvCpl.dll [2002-12-27 4263936]
"nwiz"=nwiz.exe /install []
"SoundMan"=C:\windows\SOUNDMAN.EXE [2004-02-09 65024]
"NeroFilterCheck"=C:\WINDOWS\system32\NeroCheck.exe [2001-07-09 155648]
"nod32kui"=C:\Program Files\Eset\nod32kui.exe [2007-02-27 949376]
"Print Manager"=C:\Program Files\Print Server Utilities\PSAgent.exe [2007-05-15 737280]
"GDI Manager"=C:\Program Files\Print Server Utilities\PSAgent.exe [2007-05-15 737280]
"Acrobat Assistant 8.0"=C:\Program Files\Adobe\Acrobat 8.0\Acrobat\Acrotray.exe [2006-10-22 620152]
""= []

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"=C:\windows\system32\ctfmon.exe [2008-04-14 15360]
"NVIEW"=nview.dll,nViewLoadHook []
"Skype"=C:\Program Files\Skype\Phone\Skype.exe [2008-02-01 21898024]
"ICQ"=C:\Program Files\ICQ6.5\ICQ.exe [2009-11-16 172792]
"SUPERAntiSpyware"=C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe [2010-01-05 2002160]
"swg"=C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe [2007-07-03 68856]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\MSMSGS]
C:\Program Files\Messenger\msmsgs.exe [2008-04-14 1695232]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\swg]
C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe [2007-07-03 68856]

C:\Documents and Settings\All Users\Nabídka Start\Programy\Po spuštění
Adobe Acrobat Speed Launcher.lnk - C:\windows\Installer\{AC76BA86-1029-0000-7760-000000000003}\_SC_Acrobat.exe
Adobe Acrobat Synchronizer.lnk - C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AdobeCollabSync.exe
Adobe Reader Speed Launch.lnk - C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\!SASWinLogon]
C:\Program Files\SUPERAntiSpyware\SASWINLO.dll [2009-09-03 548352]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\WgaLogon]
C:\windows\system32\WgaLogon.dll [2008-10-18 200064]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{5AE067D3-9AFB-48E0-853A-EBB7F4A000DA}"=C:\Program Files\SUPERAntiSpyware\SASSEH.DLL [2008-05-13 77824]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=145

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"HonorAutoRunSetting"=

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"C:\Program Files\ICQLite\ICQLite.exe"="C:\Program Files\ICQLite\ICQLite.exe:*:Enabled:ICQ Lite"
"C:\totalcmd\TOTALCMD.EXE"="C:\totalcmd\TOTALCMD.EXE:*:Enabled:Total Commander 32 bit international version, file manager replacement for Windows"
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"C:\Program Files\ICQ6\ICQ.exe"="C:\Program Files\ICQ6\ICQ.exe:*:Enabled:ICQ6"
"C:\Program Files\Bonjour\mDNSResponder.exe"="C:\Program Files\Bonjour\mDNSResponder.exe:*:Enabled:Bonjour"
"C:\Program Files\ICQ6.5\ICQ.exe"="C:\Program Files\ICQ6.5\ICQ.exe:*:Enabled:ICQ6"
"C:\Program Files\Skype\Phone\Skype.exe"="C:\Program Files\Skype\Phone\Skype.exe:*:Enabled:Skype. Take a deep breath "

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\F]
shell\AutoRun\command - "F:\WD SmartWare.exe" autoplay=true

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{47f5345c-fab6-11de-b373-00e04cd0780c}]
shell\AutoRun\command - "F:\WD SmartWare.exe" autoplay=true


======List of files/folders created in the last 1 months======

2010-02-01 13:56:40 ----D---- C:\Program Files\trend micro
2010-02-01 13:56:39 ----D---- C:\rsit
2010-01-29 09:22:28 ----HDC---- C:\windows\$NtUninstallKB951978$
2010-01-29 09:21:57 ----HDC---- C:\windows\$NtUninstallKB956744$
2010-01-29 09:20:32 ----HDC---- C:\windows\$NtUninstallKB973540_WM9$
2010-01-27 12:16:16 ----A---- C:\windows\OEWABLog.txt
2010-01-27 12:15:12 ----D---- C:\windows\Prefetch
2010-01-27 11:17:57 ----HDC---- C:\windows\$NtUninstallKB975467$
2010-01-27 11:17:33 ----HDC---- C:\windows\$NtUninstallKB975025$
2010-01-27 11:17:09 ----HDC---- C:\windows\$NtUninstallKB974571$
2010-01-27 11:16:44 ----HDC---- C:\windows\$NtUninstallKB974392$
2010-01-27 11:16:20 ----HDC---- C:\windows\$NtUninstallKB974318$
2010-01-27 11:15:57 ----HDC---- C:\windows\$NtUninstallKB974112$
2010-01-27 11:15:31 ----HDC---- C:\windows\$NtUninstallKB973869$
2010-01-27 11:15:06 ----HDC---- C:\windows\$NtUninstallKB973815$
2010-01-27 11:14:43 ----HDC---- C:\windows\$NtUninstallKB973687$
2010-01-27 11:14:17 ----HDC---- C:\windows\$NtUninstallKB973507$
2010-01-27 11:13:54 ----HDC---- C:\windows\$NtUninstallKB973354$
2010-01-27 11:13:28 ----HDC---- C:\windows\$NtUninstallKB972270$
2010-01-27 11:13:00 ----HDC---- C:\windows\$NtUninstallKB971737$
2010-01-27 11:12:36 ----HDC---- C:\windows\$NtUninstallKB971657$
2010-01-27 11:12:12 ----HDC---- C:\windows\$NtUninstallKB971633$
2010-01-27 11:11:48 ----HDC---- C:\windows\$NtUninstallKB971557$
2010-01-27 11:11:23 ----HDC---- C:\windows\$NtUninstallKB971486$
2010-01-27 11:10:57 ----HDC---- C:\windows\$NtUninstallKB970430$
2010-01-27 11:10:33 ----HDC---- C:\windows\$NtUninstallKB970238$
2010-01-27 11:10:09 ----HDC---- C:\windows\$NtUninstallKB969947$
2010-01-27 11:09:40 ----HDC---- C:\windows\$NtUninstallKB969059$
2010-01-27 11:09:16 ----HDC---- C:\windows\$NtUninstallKB968537$
2010-01-27 11:08:51 ----HDC---- C:\windows\$NtUninstallKB968389$
2010-01-27 11:08:25 ----HDC---- C:\windows\$NtUninstallKB967715$
2010-01-27 11:07:59 ----HDC---- C:\windows\$NtUninstallKB961501$
2010-01-27 11:07:35 ----HDC---- C:\windows\$NtUninstallKB961373$
2010-01-27 11:07:12 ----HDC---- C:\windows\$NtUninstallKB961371$
2010-01-27 11:06:46 ----HDC---- C:\windows\$NtUninstallKB960859$
2010-01-27 11:06:36 ----HDC---- C:\windows\$NtUninstallKB960803$
2010-01-27 11:06:25 ----HDC---- C:\windows\$NtUninstallKB960225$
2010-01-27 11:06:14 ----HDC---- C:\windows\$NtUninstallKB959426$
2010-01-27 11:06:05 ----HDC---- C:\windows\$NtUninstallKB958690$
2010-01-27 11:05:40 ----HDC---- C:\windows\$NtUninstallKB958687$
2010-01-27 11:05:16 ----HDC---- C:\windows\$NtUninstallKB958644$
2010-01-27 11:04:50 ----HDC---- C:\windows\$NtUninstallKB957097$
2010-01-27 11:04:26 ----HDC---- C:\windows\$NtUninstallKB957095$
2010-01-27 11:04:02 ----HDC---- C:\windows\$NtUninstallKB956844$
2010-01-27 11:03:39 ----HDC---- C:\windows\$NtUninstallKB956841$
2010-01-27 11:03:14 ----HDC---- C:\windows\$NtUninstallKB956803$
2010-01-27 11:02:51 ----HDC---- C:\windows\$NtUninstallKB956802$
2010-01-27 11:02:17 ----HDC---- C:\windows\$NtUninstallKB956572$
2010-01-27 11:01:47 ----HDC---- C:\windows\$NtUninstallKB955759$
2010-01-27 11:01:23 ----HDC---- C:\windows\$NtUninstallKB973687_1$
2010-01-27 11:00:59 ----HDC---- C:\windows\$NtUninstallKB955069$
2010-01-27 11:00:33 ----HDC---- C:\windows\$NtUninstallKB974112_1$
2010-01-27 11:00:10 ----HDC---- C:\windows\$NtUninstallKB954600$
2010-01-27 10:59:47 ----HDC---- C:\windows\$NtUninstallKB954211$
2010-01-27 10:59:22 ----HDC---- C:\windows\$NtUninstallKB952954$
2010-01-27 10:59:00 ----HDC---- C:\windows\$NtUninstallKB952287$
2010-01-27 10:58:33 ----HDC---- C:\windows\$NtUninstallKB952004$
2010-01-27 10:58:04 ----HDC---- C:\windows\$NtUninstallKB951748$
2010-01-27 10:57:40 ----HDC---- C:\windows\$NtUninstallKB951698$
2010-01-27 10:57:17 ----HDC---- C:\windows\$NtUninstallKB951376-v2$
2010-01-27 10:56:54 ----HDC---- C:\windows\$NtUninstallKB951376$
2010-01-27 10:56:29 ----HDC---- C:\windows\$NtUninstallKB951066$
2010-01-27 10:56:05 ----HDC---- C:\windows\$NtUninstallKB950974$
2010-01-27 10:55:41 ----HDC---- C:\windows\$NtUninstallKB950762$
2010-01-27 10:55:16 ----HDC---- C:\windows\$NtUninstallKB946648$
2010-01-27 10:54:54 ----HDC---- C:\windows\$NtUninstallKB938464$
2010-01-27 10:54:30 ----HDC---- C:\windows\$NtUninstallKB923561$
2010-01-27 10:51:15 ----A---- C:\windows\setuplog.txt
2010-01-27 10:49:23 ----D---- C:\windows\system32\cs
2010-01-27 10:49:23 ----D---- C:\windows\l2schemas
2010-01-27 10:49:22 ----D---- C:\windows\system32\bits
2010-01-27 10:29:25 ----HDC---- C:\windows\$NtServicePackUninstall$
2010-01-25 10:14:10 ----A---- C:\windows\imsins.BAK
2010-01-21 13:31:57 ----D---- C:\yorkshire_30x30
2010-01-20 11:03:08 ----D---- C:\Documents and Settings\All Users\Data aplikací\SUPERAntiSpyware.com
2010-01-20 11:02:33 ----D---- C:\Program Files\SUPERAntiSpyware
2010-01-20 11:02:33 ----D---- C:\Documents and Settings\Jarka\Data aplikací\SUPERAntiSpyware.com
2010-01-20 11:01:54 ----D---- C:\Program Files\Common Files\Wise Installation Wizard
2010-01-20 10:59:04 ----D---- C:\Program Files\CCleaner
2010-01-19 15:09:31 ----D---- C:\Krásy Čech a Moravy
2010-01-18 20:37:30 ----D---- C:\NK_44x46_orezy
2010-01-14 12:18:14 ----D---- C:\katalog
2010-01-14 10:07:47 ----HDC---- C:\windows\$NtUninstallKB955759_0$
2010-01-14 10:07:18 ----HDC---- C:\windows\$NtUninstallKB972270_0$
2010-01-08 10:22:45 ----D---- C:\Documents and Settings\Jarka\Data aplikací\WinRAR
2010-01-08 10:22:18 ----D---- C:\Program Files\WinRAR
2010-01-06 20:07:27 ----D---- C:\podklady-DIARY-pro Lucku

======List of files/folders modified in the last 1 months======

2010-02-01 13:57:41 ----D---- C:\Documents and Settings\Jarka\Data aplikací\Skype
2010-02-01 13:56:40 ----RD---- C:\Program Files
2010-02-01 13:56:31 ----D---- C:\windows\system32
2010-02-01 13:55:57 ----SHD---- C:\windows\CSC
2010-02-01 13:21:45 ----A---- C:\windows\wincmd.ini
2010-02-01 13:19:23 ----D---- C:\windows\Temp
2010-02-01 13:11:50 ----D---- C:\windows\system32\spool
2010-02-01 12:59:58 ----A---- C:\windows\wcx_ftp.ini
2010-02-01 09:21:50 ----A---- C:\windows\system32\PerfStringBackup.INI
2010-02-01 09:19:44 ----D---- C:\Documents and Settings\Jarka\Data aplikací\skypePM
2010-02-01 09:18:04 ----D---- C:\WINDOWS
2010-01-29 09:22:34 ----RSHDC---- C:\windows\system32\dllcache
2010-01-29 09:22:27 ----HD---- C:\windows\inf
2010-01-29 09:22:23 ----D---- C:\windows\system32\CatRoot
2010-01-29 09:21:36 ----HD---- C:\windows\$hf_mig$
2010-01-29 09:19:14 ----D---- C:\Documents and Settings\Jarka\Data aplikací\ICQ
2010-01-29 09:19:03 ----D---- C:\windows\system32\CatRoot2
2010-01-28 19:21:43 ----A---- C:\windows\SchedLgU.Txt
2010-01-27 12:16:05 ----D---- C:\windows\Debug
2010-01-27 12:14:50 ----D---- C:\windows\system32\wbem
2010-01-27 12:14:50 ----D---- C:\windows\system32\Setup
2010-01-27 12:14:50 ----D---- C:\windows\AppPatch
2010-01-27 12:14:49 ----RSD---- C:\windows\Fonts
2010-01-27 12:14:45 ----D---- C:\windows\system32\drivers
2010-01-27 12:14:28 ----D---- C:\windows\security
2010-01-27 11:13:55 ----D---- C:\Program Files\Outlook Express
2010-01-27 10:55:18 ----D---- C:\Program Files\Messenger
2010-01-27 10:50:41 ----D---- C:\windows\WinSxS
2010-01-27 10:50:25 ----D---- C:\Program Files\Windows Media Player
2010-01-27 10:50:20 ----D---- C:\windows\Help
2010-01-27 10:49:53 ----D---- C:\windows\ehome
2010-01-27 10:49:48 ----D---- C:\windows\system32\inetsrv
2010-01-27 10:49:47 ----D---- C:\windows\network diagnostic
2010-01-27 10:49:47 ----D---- C:\windows\ime
2010-01-27 10:49:26 ----D---- C:\windows\system32\usmt
2010-01-27 10:49:26 ----D---- C:\windows\system32\cs-cz
2010-01-27 10:49:23 ----SHD---- C:\windows\Installer
2010-01-27 10:49:22 ----D---- C:\windows\PeerNet
2010-01-27 10:49:22 ----D---- C:\Program Files\Movie Maker
2010-01-27 10:40:48 ----D---- C:\windows\ServicePackFiles
2010-01-27 10:40:05 ----D---- C:\windows\system32\Restore
2010-01-27 10:40:05 ----D---- C:\windows\system32\npp
2010-01-27 10:40:04 ----D---- C:\windows\msagent
2010-01-27 10:40:02 ----D---- C:\windows\srchasst
2010-01-27 10:40:00 ----D---- C:\Program Files\NetMeeting
2010-01-27 10:39:57 ----D---- C:\windows\system32\Com
2010-01-27 10:39:42 ----D---- C:\Program Files\Windows NT
2010-01-27 10:39:37 ----D---- C:\Program Files\Common Files\System
2010-01-27 10:39:01 ----D---- C:\windows\system32\oobe
2010-01-27 10:38:57 ----D---- C:\windows\system
2010-01-27 10:32:15 ----D---- C:\windows\system32\ReinstallBackups
2010-01-25 10:13:41 ----D---- C:\Program Files\Internet Explorer
2010-01-20 11:10:37 ----D---- C:\Program Files\Spybot - Search & Destroy
2010-01-20 11:01:54 ----D---- C:\Program Files\Common Files
2010-01-20 10:58:30 ----D---- C:\Documents and Settings\All Users\Data aplikací\Spybot - Search & Destroy
2010-01-05 01:17:46 ----A---- C:\windows\system32\MRT.exe

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R1 AmdK7;Ovladač procesoru AMD K7; C:\windows\system32\DRIVERS\amdk7.sys [2008-04-14 41600]
R1 nod32drv;nod32drv; C:\windows\system32\drivers\nod32drv.sys [2007-02-27 15424]
R1 SASDIFSV;SASDIFSV; \??\C:\Program Files\SUPERAntiSpyware\SASDIFSV.SYS []
R1 SASKUTIL;SASKUTIL; \??\C:\Program Files\SUPERAntiSpyware\SASKUTIL.sys []
R1 WS2IFSL;Podpůrné prostředí zprostředkovatele služeb Windows Socket 2.0 bez podpory IFS; C:\windows\System32\drivers\ws2ifsl.sys [2001-10-25 12032]
R2 ALIWEHCD;Print Server Enhanced Controller; C:\windows\System32\Drivers\mfpec.sys [2007-05-07 34944]
R2 AMON;AMON; C:\windows\system32\drivers\amon.sys [2007-02-27 512096]
R2 SetupNT;SetupNT; C:\windows\system32\SetupNT.sys [2000-10-25 3000]
R3 ALCXSENS;Service for WDM 3D Audio Driver; C:\windows\system32\drivers\ALCXSENS.SYS [2003-12-11 391424]
R3 ALCXWDM;Service for Realtek AC97 Audio (WDM); C:\windows\system32\drivers\ALCXWDM.SYS [2004-02-23 611441]
R3 ms_mpu401;Microsoft MPU-401 MIDI UART Driver; C:\windows\system32\drivers\msmpu401.sys [2001-08-17 2944]
R3 nv;nv; C:\windows\system32\DRIVERS\nv4_mini.sys [2004-08-03 1897408]
R3 NVENET;NVIDIA nForce MCP Networking Controller Driver; C:\windows\system32\DRIVERS\NVENET.sys [2002-11-27 80896]
R3 SASENUM;SASENUM; \??\C:\Program Files\SUPERAntiSpyware\SASENUM.SYS []
R3 usbehci;Ovladač miniportu rozšířeného radiče hostitele Microsoft USB 2.0; C:\windows\system32\DRIVERS\usbehci.sys [2008-04-13 30208]
R3 usbhub;Rozbočovač umožnující USB2; C:\windows\system32\DRIVERS\usbhub.sys [2008-04-13 59520]
R3 usbohci;Ovladač Miniport otevřeného hostitelského řadiče Microsoft USB; C:\windows\system32\DRIVERS\usbohci.sys [2008-04-13 17152]
R3 WUSBVBus;Print Server Detector; C:\windows\system32\DRIVERS\mfpvbus.sys [2006-10-20 10240]
S3 hidusb;Ovladač třídy standardu HID; C:\windows\system32\DRIVERS\hidusb.sys [2008-04-13 10368]
S3 mouhid;Ovladač myši standardu HID; C:\windows\system32\DRIVERS\mouhid.sys [2001-10-25 12160]
S3 nvax;Service for NVIDIA(R) nForce(TM) Audio Enumerator; C:\windows\system32\drivers\nvax.sys [2002-12-05 13056]
S3 nvnforce;Service for NVIDIA(R) nForce(TM) Audio; C:\windows\system32\drivers\nvapu.sys [2002-12-05 241664]
S3 usbprint;Třída USB Printer; C:\windows\system32\DRIVERS\usbprint.sys [2008-04-13 25856]
S3 USBSTOR;Ovladač velkokapacitního paměťového zařízení USB; C:\windows\system32\DRIVERS\USBSTOR.SYS [2008-04-13 26368]
S4 IntelIde;IntelIde; C:\windows\system32\drivers\IntelIde.sys []

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 Bonjour Service;##Id_String1.6844F930_1628_4223_B5CC_5BB94B879762##; C:\Program Files\Bonjour\mDNSResponder.exe [2006-02-28 229376]
R2 ICQ Service;ICQ Service; C:\Program Files\ICQ6Toolbar\ICQ Service.exe [2009-06-01 222968]
R2 NOD32krn;NOD32 Kernel Service; C:\Program Files\Eset\nod32krn.exe [2007-02-27 552064]
R3 FLEXnet Licensing Service;FLEXnet Licensing Service; C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe [2009-06-04 654848]
S2 NVSvc;NVIDIA Driver Helper Service; C:\windows\system32\nvsvc32.exe [2002-12-27 65536]
S3 gusvc;Google Updater Service; C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe [2007-06-19 138168]
S3 ose;Office Source Engine; C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2003-07-28 89136]

-----------------EOF-----------------

[Caroprd111]

Zdravím

Na logu se pracuje, prosím o strpení.

[Caroprd111]

Doporučuji odinstalovat (pokud nepoužíváte) toolbary (lišty) v Přidat nebo odebrat programy.

Doporučuji aktualizovat Adobe Reader http://www.stahuj.centrum.cz/podnikani_ ... batreader/

V logu nevidím firewall, doinstalujte Přehled: http://www.viry.cz/forum/viewtopic.php?f=41&t=6523


Stáhněte Ccleaner http://viry.cz/forum/viewtopic.php?t=7478
- Nainstalujte a v průběhu instalace odškrtněte, že chcete instalovat yahoo toolbar.

Záložka Čistič
- Dejte analyzovat, po dokončení dejte Spustit Ccleaner.

Záložka Registry
- Klikněte na Hledej problémy, po dokončení klikněte na Opravit problémy, zálohu dělat nemusíte, potom dejte Opravit všechny problémy.
OK Zavřít


Stáhněte a uložte, nejlépe na plochu http://download.bleepingcomputer.com/sUBs/ComboFix.exe

Vypněte všechny rezidentní bezpečnostní programy - firewally, antiviry, antispywary

Spusťte aplikaci pod účtem s oprávněním Administrátora (Správce), ihned po startu se zobrází stránka s licenčnímy podmínkami, pokračujte stisknutím tlačítka "Ano"

Dále postupujte dle pokynů, během scanu nespouštějte jiné aplikace a neklikejte do zobrazujícího se okna

Scan by měl trvat okolo 5 - 10 minut, po dokončení Combofix zobrazí log C:\ComboFix.txt , který sem vložte.

Během skenování může být počítač restartován.

[dvarf]

Omlouvam se za zdrzeni ale byl jsem mimo republiku

vse provedeno, log z combofixu

ComboFix 10-02-10.04 - jarka 11.02.2010 10:39:44.1.1 - x86
Systém Microsoft Windows XP Professional 5.1.2600.3.1250.420.1029.18.991.676 [GMT 1:00]
Spuštěný z: c:\documents and settings\Jarka\Plocha\ComboFix.exe
AV: Eset NOD32 Antivirus 2.70 *On-access scanning enabled* (Updated) {E5E70D32-0101-4F12-8FB0-D96ACA4F34C0}
* Rezidentní štít AV je zapnutý


VAROVÁNÍ - NA TOMTO POČÍTAČI NENÍ NAINSTALOVÁNA KONZOLA PRO ZOTAVENÍ !!
.

((((((((((((((((((((((((((((((((((((((( Ostatní výmazy )))))))))))))))))))))))))))))))))))))))))))))))))
.

c:\program files\driver
c:\program files\ICQ6.5\ICQLRun.exe
c:\windows\system32\Config.ini

.
((((((((((((((((((((((((( Soubory vytvořené od 2010-01-11 do 2010-02-11 )))))))))))))))))))))))))))))))
.

2010-02-01 13:00 . 2010-02-01 13:01 -------- d-----w- c:\program files\SpeedFan
2010-02-01 12:56 . 2010-02-01 12:57 -------- d-----w- c:\program files\trend micro
2010-02-01 12:56 . 2010-02-01 12:57 -------- d-----w- C:\rsit
2010-01-27 11:15 . 2010-01-27 11:15 -------- d-sh--w- c:\windows\system32\config\systemprofile\IETldCache
2010-01-27 09:49 . 2010-01-27 09:49 -------- d-----w- c:\windows\l2schemas
2010-01-27 09:49 . 2010-01-27 09:49 -------- d-----w- c:\windows\system32\cs
2010-01-27 09:49 . 2010-01-27 09:49 -------- d-----w- c:\windows\system32\bits
2010-01-21 12:31 . 2010-01-21 18:40 -------- d-----w- C:\yorkshire_30x30
2010-01-20 10:02 . 2010-01-20 10:02 -------- d-----w- c:\program files\SUPERAntiSpyware
2010-01-20 10:01 . 2010-01-20 10:01 -------- d-----w- c:\program files\Common Files\Wise Installation Wizard
2010-01-20 09:59 . 2010-01-20 09:59 -------- d-----w- c:\program files\CCleaner
2010-01-19 14:09 . 2010-01-19 14:09 -------- d-----w- C:\Krásy Čech a Moravy
2010-01-18 19:37 . 2010-01-18 19:37 -------- d-----w- C:\NK_44x46_orezy
2010-01-14 11:18 . 2010-01-14 12:44 -------- d-----w- C:\katalog
2010-01-13 08:56 . 2009-11-21 16:03 471552 -c----w- c:\windows\system32\dllcache\aclayers.dll

.
(((((((((((((((((((((((((((((((((((((((( Find3M výpis ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2010-02-11 09:45 . 2009-07-16 07:43 -------- d-----w- c:\program files\ICQ6.5
2010-02-11 09:36 . 2001-10-25 14:00 47206 ----a-w- c:\windows\system32\perfc005.dat
2010-02-11 09:36 . 2001-10-25 14:00 312970 ----a-w- c:\windows\system32\perfh005.dat
2010-02-11 09:23 . 2007-06-15 09:53 -------- d-----w- c:\program files\Google
2010-01-27 09:52 . 2006-08-24 09:36 86327 ----a-w- c:\windows\pchealth\helpctr\OfflineCache\index.dat
2010-01-27 09:52 . 2006-08-24 09:36 2740 ----a-w- c:\windows\pchealth\helpctr\PackageStore\SkuStore.bin
2010-01-20 10:10 . 2006-08-27 14:21 -------- d-----w- c:\program files\Spybot - Search & Destroy
2009-12-31 16:50 . 2004-08-03 21:14 353792 ----a-w- c:\windows\system32\drivers\srv.sys
2009-12-21 19:08 . 2004-08-17 13:49 916480 ----a-w- c:\windows\system32\wininet.dll
2009-12-17 07:42 . 2006-08-24 09:33 343552 ----a-w- c:\windows\system32\mspaint.exe
2009-12-14 07:10 . 2004-08-17 13:49 33280 ----a-w- c:\windows\system32\csrsrv.dll
2009-12-09 10:11 . 2004-08-17 15:45 2068224 ----a-w- c:\windows\system32\ntkrnlpa.exe
2009-12-09 10:11 . 2004-08-17 13:45 2191360 ----a-w- c:\windows\system32\ntoskrnl.exe
2009-12-04 18:22 . 2004-08-03 21:15 455424 ----a-w- c:\windows\system32\drivers\mrxsmb.sys
2009-11-27 17:14 . 2004-08-17 13:49 1294336 ----a-w- c:\windows\system32\quartz.dll
2009-11-27 17:14 . 2004-08-17 15:49 17920 ----a-w- c:\windows\system32\msyuv.dll
2009-11-27 16:09 . 2001-10-25 14:00 28672 ----a-w- c:\windows\system32\msvidc32.dll
2009-11-27 16:09 . 2001-10-24 12:25 8704 ----a-w- c:\windows\system32\tsbyuv.dll
2009-11-27 16:09 . 2004-08-17 15:49 48128 ----a-w- c:\windows\system32\iyuv_32.dll
2009-11-27 16:09 . 2004-08-17 13:49 11264 ----a-w- c:\windows\system32\msrle32.dll
2009-11-27 16:09 . 2004-08-17 13:49 84992 ----a-w- c:\windows\system32\avifil32.dll
2009-11-21 16:03 . 2004-08-17 13:49 471552 ----a-w- c:\windows\AppPatch\aclayers.dll
2007-07-31 19:01 . 2008-01-17 15:10 3398720 ----a-w- c:\program files\Portfolio Express.exe
.

(((((((((((((((((((((((((((((((((( Spouštěcí body v registru )))))))))))))))))))))))))))))))))))))))))))))
.
.
*Poznámka* prázdné záznamy a legitimní výchozí údaje nejsou zobrazeny.
REGEDIT4

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"NVIEW"="nview.dll" [2002-12-27 774213]
"Skype"="c:\program files\Skype\Phone\Skype.exe" [2008-02-01 21898024]
"ICQ"="c:\program files\ICQ6.5\ICQ.exe" [2009-11-16 172792]
"SUPERAntiSpyware"="c:\program files\SUPERAntiSpyware\SUPERAntiSpyware.exe" [2010-01-05 2002160]
"swg"="c:\program files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe" [2007-07-03 68856]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"NvCplDaemon"="c:\windows\system32\NvCpl.dll" [2002-12-27 4263936]
"nwiz"="nwiz.exe" [2002-12-27 315392]
"SoundMan"="SOUNDMAN.EXE" [2004-02-09 65024]
"NeroFilterCheck"="c:\windows\system32\NeroCheck.exe" [2001-07-09 155648]
"nod32kui"="c:\program files\Eset\nod32kui.exe" [2007-02-27 949376]
"Print Manager"="c:\program files\Print Server Utilities\PSAgent.exe" [2007-05-15 737280]
"GDI Manager"="c:\program files\Print Server Utilities\PSAgent.exe" [2007-05-15 737280]
"Acrobat Assistant 8.0"="c:\program files\Adobe\Acrobat 8.0\Acrobat\Acrotray.exe" [2006-10-22 620152]
"Adobe Reader Speed Launcher"="c:\program files\Adobe\Reader 9.0\Reader\Reader_sl.exe" [2009-12-22 35760]
"Adobe ARM"="c:\program files\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2009-12-11 948672]

[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="c:\windows\system32\CTFMON.EXE" [2008-04-14 15360]

c:\documents and settings\All Users\Nabˇdka Start\Programy\Po spuçtŘnˇ\
Adobe Acrobat Speed Launcher.lnk - c:\windows\Installer\{AC76BA86-1029-0000-7760-000000000003}\_SC_Acrobat.exe [2009-6-4 295606]
Adobe Acrobat Synchronizer.lnk - c:\program files\Adobe\Acrobat 8.0\Acrobat\AdobeCollabSync.exe [2006-10-23 734872]

[hkey_local_machine\software\microsoft\windows\currentversion\explorer\ShellExecuteHooks]
"{5AE067D3-9AFB-48E0-853A-EBB7F4A000DA}"= "c:\program files\SUPERAntiSpyware\SASSEH.DLL" [2008-05-13 77824]

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\!SASWinLogon]
2009-09-03 13:21 548352 ----a-w- c:\program files\SUPERAntiSpyware\SASWINLO.dll

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\MSMSGS]
2008-04-14 03:22 1695232 ------w- c:\program files\Messenger\msmsgs.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\swg]
2007-07-03 07:17 68856 ----a-w- c:\program files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\system32\\sessmgr.exe"=
"c:\\totalcmd\\TOTALCMD.EXE"=
"%windir%\\Network Diagnostic\\xpnetdiag.exe"=
"c:\\Program Files\\Bonjour\\mDNSResponder.exe"=
"c:\\Program Files\\ICQ6.5\\ICQ.exe"=
"c:\\Program Files\\Skype\\Phone\\Skype.exe"=

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\GloballyOpenPorts\List]
"14906:UDP"= 14906:UDP:Print Server Setup Wizard
"15163:UDP"= 15163:UDP:Print Server Setup Wizard
"15420:UDP"= 15420:UDP:Print Manager
"15677:UDP"= 15677:UDP:Print Server Manager
"69:UDP"= 69:UDP:Print Server Manager TFTP
"15934:UDP"= 15934:UDP:Quick Port Setup

R1 nod32drv;nod32drv;c:\windows\system32\drivers\nod32drv.sys [27.2.2007 8:46 15424]
R1 SASDIFSV;SASDIFSV;c:\program files\SUPERAntiSpyware\sasdifsv.sys [5.1.2010 7:56 9968]
R1 SASKUTIL;SASKUTIL;c:\program files\SUPERAntiSpyware\SASKUTIL.SYS [5.1.2010 7:56 74480]
R2 ALIWEHCD;Print Server Enhanced Controller;c:\windows\system32\drivers\mfpec.sys [3.11.2008 13:13 34944]
R3 SASENUM;SASENUM;c:\program files\SUPERAntiSpyware\SASENUM.SYS [5.1.2010 7:56 7408]
R3 WUSBVBus;Print Server Detector;c:\windows\system32\drivers\mfpvbus.sys [3.11.2008 13:13 10240]
.
.
------- Doplňkový sken -------
.
uStart Page = hxxp://www.seznam.cz/
uSearchMigratedDefaultURL = hxxp://www.google.com/search?q={searchTerms}&s ... f8&oe=utf8
uInternet Settings,ProxyOverride = *.local
uSearchAssistant = hxxp://www.google.com/ie
uSearchURL,(Default) = hxxp://www.google.com/search?q=%s
IE: E&xportovat do aplikace Microsoft Office Excel - c:\progra~1\MICROS~3\OFFICE11\EXCEL.EXE/3000
IE: Převést cíl vazby do Adobe PDF - c:\program files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html
IE: Převést cíl vazby do existujícího PDF - c:\program files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html
IE: Převést do Adobe PDF - c:\program files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html
IE: Převést vybrané vazby do Adobe PDF - c:\program files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIECaptureSelLinks.html
IE: Převést vybrané vazby do existujícího PDF - c:\program files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIEAppendSelLinks.html
IE: Převést výběr do Adobe PDF - c:\program files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html
IE: Převést výběr do existujícího PDF - c:\program files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html
IE: Přidat do stávajícího PDF - c:\program files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html
TCP: {EE839825-E38E-47C1-A874-5603AA6899E3} = 192.168.1.1
.

**************************************************************************

catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2010-02-11 10:45
Windows 5.1.2600 Service Pack 3 NTFS

skenování skrytých procesů ...

skenování skrytých položek 'Po spuštění' ...

skenování skrytých souborů ...

sken byl úspešně dokončen
skryté soubory: 0

**************************************************************************
.
--------------------- Knihovny navázané na běžící procesy ---------------------

- - - - - - - > 'winlogon.exe'(676)
c:\program files\SUPERAntiSpyware\SASWINLO.dll

- - - - - - - > 'lsass.exe'(732)
c:\windows\system32\imon.dll
c:\program files\Eset\pr_imon.dll
.
Celkový čas: 2010-02-11 10:48:07
ComboFix-quarantined-files.txt 2010-02-11 09:47

Před spuštěním: 5 074 870 272
Po spuštění: 5 100 605 440

- - End Of File - - 9F6823AA211A4D4ECA1408BAD9C10317

[Caroprd111]

Jak to vypadá s PC

[dvarf]

Porad spatne:( vetsinou se to stava kdyz se na PC dele nepracuje.... pak se prijde k PC a je to seknute a musi se natvrdo reboot

[Caroprd111]

Stáhněte Gmer http://www.viry.cz/forum/viewtopic.php?f=29&t=62878
- Rozbalte a spusťte.
- Proběhne sken, po skončení se otevře okno s výsledky, klikněte na Save a tím si uložíte log, který sem vložíte.

- Podle návodu v odkazu provedete druhý sken a log sem také vložíte.