Výpadky a zpomalení Visty

[luboseek]

V poslední době pozoruji ve svém OS Vista spomalování,někdy sekání,výpadky ikon, zamrznutí při bootování po restartu a podobně a nevím si s tím rady..Nevím zda nejde o nějaký vir,nebo podobně..
Udělal jsem sken přes hijackthis a poslal jsem ho na analýzu na hijackthis online..ale stejně nevím zda něco můžu vymazat nebo ne,zda je tam nějaký problém nebo naopak..Tak jsem se rozhodl požádat o pomoc tady..Děkuji..

Logfile of HijackThis v1.99.1
Scan saved at 19:14:30, on 12.3.2008
Platform: Unknown Windows (WinNT 6.00.1905 SP1)
MSIE: Internet Explorer v7.00 (7.00.6001.18000)

Running processes:
C:\Windows\system32\Dwm.exe
C:\Windows\system32\taskeng.exe
C:\Windows\Explorer.EXE
C:\Windows\RtHDVCpl.exe
C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 7.0\avp.exe
C:\Program Files\Windows Media Player\wmpnscfg.exe
C:\Windows\System32\mobsync.exe
C:\Windows\system32\conime.exe
C:\Program Files\Internet Download Manager\IDMan.exe
C:\Program Files\Internet Download Manager\IEMonitor.exe
C:\Program Files\Mozilla Firefox\firefox.exe
G:\Programy\Internet Security\HijackThis\hijackthis.exe
C:\Windows\system32\DllHost.exe

R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page =
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
O1 - Hosts: ::1 localhost
O2 - BHO: IDM Helper - {0055C089-8582-441B-A0BF-17B458C2A3A8} - C:\Program Files\Internet Download Manager\IDMIECC.dll
O2 - BHO: Podpora odkazu pro Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: Skype add-on (mastermind) - {22BF413B-C6D2-4d91-82A9-A0F997BA588C} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
O2 - BHO: WebTransBHO Class - {2DB66063-BB98-466A-AA0D-3E7ACF5ED853} - (no file)
O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
O3 - Toolbar: WebTranslator - {BFC32E1D-EE75-4A48-BC60-104E11EE2431} - (no file)
O4 - HKLM\..\Run: [RtHDVCpl] RtHDVCpl.exe
O4 - HKLM\..\Run: [AVP] "C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 7.0\avp.exe"
O4 - HKCU\..\Run: [WMPNSCFG] C:\Program Files\Windows Media Player\WMPNSCFG.exe
O8 - Extra context menu item: Add to Anti-Banner - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 7.0\ie_banner_deny.htm
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000
O8 - Extra context menu item: Stáhnout obsah FLV videa s IDM - C:\Program Files\Internet Download Manager\IEGetVL.htm
O8 - Extra context menu item: Stáhnout pomocí BitSpiritu - C:\Program Files\BitSpirit\bsurl.htm
O8 - Extra context menu item: Stáhnout s IDM - C:\Program Files\Internet Download Manager\IEExt.htm
O8 - Extra context menu item: Stáhnout všechny odkazy s IDM - C:\Program Files\Internet Download Manager\IEGetAll.htm
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
O9 - Extra button: Web Anti-Virus statistics - {1F460357-8A94-4D71-9CA3-AA4ACF32ED8E} - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 7.0\SCIEPlgn.dll
O9 - Extra button: Odeslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: Od&eslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll
O9 - Extra button: Skype - {77BF5300-1474-4EC7-9980-D32B190E9B07} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
O9 - Extra button: WebTran - {7E6A20FB-153F-402c-A84B-1A64E1955D3D} - (no file)
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL
O9 - Extra button: (no name) - {BFC32E1D-EE75-4A48-BC60-104E11EE2431} - (no file)
O9 - Extra button: (no name) - {CC963627-B1DC-40E0-B52A-CF21EE748449} - (no file)
O9 - Extra 'Tools' menuitem: &Nastaviť prekladač - {CC963627-B1DC-40E0-B52A-CF21EE748449} - (no file)
O9 - Extra button: (no name) - {CC963627-B1DC-40E0-B52A-CF21EE748450} - (no file)
O9 - Extra 'Tools' menuitem: &Slovník - {CC963627-B1DC-40E0-B52A-CF21EE748450} - (no file)
O9 - Extra button: (no name) - {CC963627-B1DC-40E0-B52A-CF21EE748451} - (no file)
O9 - Extra 'Tools' menuitem: Preložiť &označený text - {CC963627-B1DC-40E0-B52A-CF21EE748451} - (no file)
O9 - Extra button: (no name) - {CC963627-B1DC-40E0-B52A-CF21EE748452} - (no file)
O9 - Extra 'Tools' menuitem: Preložiť &stránku - {CC963627-B1DC-40E0-B52A-CF21EE748452} - (no file)
O9 - Extra button: ICQ6 - {E59EB121-F339-4851-A3BA-FE49C35617C2} - C:\Program Files\ICQ6\ICQ.exe
O9 - Extra 'Tools' menuitem: ICQ6 - {E59EB121-F339-4851-A3BA-FE49C35617C2} - C:\Program Files\ICQ6\ICQ.exe
O10 - Unknown file in Winsock LSP: c:\windows\system32\nlaapi.dll
O10 - Unknown file in Winsock LSP: c:\windows\system32\napinsp.dll
O10 - Unknown file in Winsock LSP: c:\windows\system32\idmmbc.dll
O10 - Unknown file in Winsock LSP: c:\windows\system32\idmmbc.dll
O10 - Unknown file in Winsock LSP: c:\windows\system32\idmmbc.dll
O10 - Unknown file in Winsock LSP: c:\windows\system32\idmmbc.dll
O10 - Unknown file in Winsock LSP: c:\windows\system32\idmmbc.dll
O10 - Unknown file in Winsock LSP: c:\windows\system32\idmmbc.dll
O10 - Unknown file in Winsock LSP: c:\windows\system32\idmmbc.dll
O10 - Unknown file in Winsock LSP: c:\windows\system32\idmmbc.dll
O10 - Unknown file in Winsock LSP: c:\windows\system32\idmmbc.dll
O10 - Unknown file in Winsock LSP: c:\windows\system32\idmmbc.dll
O10 - Unknown file in Winsock LSP: c:\windows\system32\idmmbc.dll
O11 - Options group: [INTERNATIONAL] International*
O13 - Gopher Prefix:
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/s ... wflash.cab
O17 - HKLM\System\CCS\Services\Tcpip\..\{2D1AA48E-0794-486E-AD41-EA0D024019F0}: NameServer = 77.48.48.48,77.48.49.50
O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Program Files\Microsoft Office\Office12\GrooveSystemServices.dll
O18 - Protocol: ms-help - {314111C7-A502-11D2-BBCA-00C04F8EC294} - C:\Program Files\Common Files\Microsoft Shared\Help\hxds.dll
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O18 - Filter hijack: text/xml - {807563E5-5146-11D5-A672-00B0D022E945} - C:\PROGRA~1\COMMON~1\MICROS~1\OFFICE12\MSOXMLMF.DLL
O20 - AppInit_DLLs: C:\PROGRA~1\KASPER~1\KASPER~1.0\r3hook.dll,C:\PROGRA~1\KASPER~1\KASPER~1.0\adialhk.dll
O20 - Winlogon Notify: klogon - C:\Windows\system32\klogon.dll
O23 - Service: Ati External Event Utility - ATI Technologies Inc. - C:\Windows\system32\Ati2evxx.exe
O23 - Service: ATI WebPAM (ATIWebPAM) - Unknown owner - C:\Program Files\ATI\WebPAM\jetty\extra\win32\Wrapper.exe" -s wrapper.conf (file missing)
O23 - Service: Kaspersky Internet Security 7.0 (AVP) - Unknown owner - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 7.0\avp.exe" -r (file missing)
O23 - Service: @%SystemRoot%\ehome\ehstart.dll,-101 (ehstart) - Unknown owner - %windir%\system32\svchost.exe (file missing)
O23 - Service: NBService - Nero AG - C:\Program Files\Nero\Nero 7\Nero BackItUp\NBService.exe
O23 - Service: O&O Defrag - O&O Software GmbH - C:\Windows\system32\oodag.exe
O23 - Service: ProtexisLicensing - Unknown owner - C:\Windows\system32\PSIService.exe
O23 - Service: @%SystemRoot%\system32\qwave.dll,-1 (QWAVE) - Unknown owner - %windir%\system32\svchost.exe (file missing)
O23 - Service: @%SystemRoot%\system32\seclogon.dll,-7001 (seclogon) - Unknown owner - %windir%\system32\svchost.exe (file missing)
O23 - Service: StarWind AE Service (StarWindServiceAE) - Rocket Division Software - C:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindServiceAE.exe
O23 - Service: @%SystemRoot%\System32\TuneUpDefragService.exe,-1 (TuneUp.Defrag) - TuneUp Software GmbH - C:\Windows\System32\TuneUpDefragService.exe
O23 - Service: @%ProgramFiles%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - %ProgramFiles%\Windows Media Player\wmpnetwk.exe (file missing)

přidávám ještě log z ComboFix

ComboFix 08-03-10.1 - Luboseek 2008-03-12 20:20:07.1 - NTFSx86
Microsoft® Windows Vista™ Ultimate 6.0.6001.1.1250.1.1029.18.1093 [GMT 1:00]
Running from: C:\Users\Luboseek\Documents\Downloads\Programs\ComboFix.exe
* Created a new restore point
.

((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))
.

C:\Users\Luboseek\AppData\Roaming\inst.exe
C:\Windows\system32\koos.exe
C:\Windows\system32\kprof
C:\Windows\system32\poof

.
((((((((((((((((((((((((( Files Created from 2008-02-12 to 2008-03-12 )))))))))))))))))))))))))))))))
.

2008-03-12 18:45 . 2008-03-12 18:45 <DIR> d-------- C:\Program Files\IObit
2008-03-12 18:36 . 2008-03-12 18:36 <DIR> d-------- C:\Program Files\Combined Community Codec Pack
2008-03-12 18:20 . 2008-03-12 18:20 <DIR> d-------- C:\Users\Luboseek\AppData\Roaming\Media Player Classic
2008-03-12 18:01 . 2008-03-12 18:01 <DIR> d-------- C:\Program Files\TVAnts
2008-03-12 11:17 . 2008-03-12 11:20 <DIR> d-------- C:\Program Files\Kdo chce bˇt milion ýe
2008-03-12 07:52 . 2008-03-12 07:58 <DIR> d-------- C:\Users\Luboseek\AppData\Roaming\vlc
2008-03-12 07:51 . 2008-03-12 07:51 <DIR> d-------- C:\Program Files\VideoLAN
2008-03-11 23:17 . 2008-03-11 23:17 <DIR> d-------- C:\Users\Luboseek\AppData\Roaming\ATI
2008-03-11 23:17 . 2008-03-11 23:17 <DIR> d-------- C:\Users\All Users\ATI
2008-03-11 23:17 . 2008-03-11 23:17 <DIR> d-------- C:\PROGRA~2\ATI
2008-03-11 22:50 . 2008-03-11 22:54 <DIR> d-------- C:\Program Files\Altap Salamander 2.5
2008-03-11 22:43 . 2008-03-11 22:43 1,905 --a------ C:\Windows\diagwrn.xml
2008-03-11 22:43 . 2008-03-11 22:43 1,905 --a------ C:\Windows\diagerr.xml
2008-03-11 22:06 . 2008-03-11 23:12 <DIR> d-------- C:\Program Files\vLite
2008-03-11 19:20 . 2008-03-11 19:20 29,564,416 --a------ C:\Windows\System32\imageres.dll
2008-03-11 18:49 . 2008-03-11 18:49 91,700 --a------ C:\Windows\System32\drivers\klin.dat
2008-03-11 18:49 . 2008-03-11 18:49 85,860 --a------ C:\Windows\System32\drivers\klick.dat
2008-03-11 18:48 . 2008-03-12 11:12 <DIR> d-------- C:\Users\All Users\Kaspersky Lab
2008-03-11 18:48 . 2008-03-12 11:12 <DIR> d-------- C:\PROGRA~2\Kaspersky Lab
2008-03-11 18:42 . 2008-03-12 20:27 12,585,248 --ahs---- C:\Windows\System32\drivers\fidbox.dat
2008-03-11 18:42 . 2008-03-12 20:22 170,996 --ahs---- C:\Windows\System32\drivers\fidbox.idx
2008-03-11 17:36 . 2008-03-11 17:41 2,490 --a------ C:\Windows\TRNCOM.INI
2008-03-11 17:34 . 2008-03-11 17:41 <DIR> d-------- C:\Users\Luboseek\AppData\Roaming\LangSoft
2008-03-11 17:34 . 2008-03-11 17:41 <DIR> d-------- C:\Users\All Users\LangSoft
2008-03-11 17:34 . 2008-03-11 17:41 <DIR> d-------- C:\PROGRA~2\LangSoft
2008-03-11 15:08 . 2008-03-11 15:08 <DIR> d-------- C:\Program Files\CCleaner
2008-03-11 14:42 . 2008-03-11 14:42 <DIR> d-------- C:\Users\Luboseek\AppData\Roaming\Application Data
2008-03-11 14:23 . 2008-03-11 14:23 <DIR> d-------- C:\Users\All Users\WindowsSearch
2008-03-11 14:23 . 2008-03-11 14:23 <DIR> d-------- C:\PROGRA~2\WindowsSearch
2008-03-11 14:15 . 2008-03-11 14:31 <DIR> d-------- C:\Program Files\Picasa2
2008-03-11 13:27 . 2007-07-20 00:55 233,888 --a------ C:\Windows\System32\DreamScene.dll
2008-03-11 13:26 . 2008-03-11 13:26 <DIR> d-------- C:\Program Files\Microsoft Silverlight
2008-03-11 13:25 . 2008-03-11 13:25 <DIR> d-------- C:\Program Files\BitLocker
2008-03-11 13:25 . 2007-02-22 03:26 1,171,848 --a------ C:\Windows\System32\SecureKeyBackupCPL.dll
2008-03-11 13:25 . 2006-12-21 01:58 711 --a------ C:\Windows\System32\CPSOKBTasks.xml
2008-03-11 12:22 . 2008-03-11 12:22 69 --a------ C:\Windows\NeroDigital.ini
2008-03-11 12:11 . 2008-03-11 12:11 <DIR> d-------- C:\Program Files\Webteh
2008-03-11 11:36 . 2008-03-11 12:01 <DIR> d-------- C:\Users\Luboseek\AppData\Roaming\BSplayer
2008-03-11 04:21 . 2008-03-11 04:00 152,576 --a------ C:\Windows\System32\SPWizUI.dll
2008-03-11 04:21 . 2008-03-11 04:00 47,560 --a------ C:\Windows\System32\SPReview.exe
2008-03-11 04:08 . 2008-01-18 23:33 193,024 --a------ C:\Windows\System32\recdisc.exe
2008-03-11 04:08 . 2008-01-18 23:36 6,656 --a------ C:\Windows\System32\sdspres.dll
2008-03-11 04:07 . 2008-01-18 23:33 599,552 --a------ C:\Windows\System32\vsp1cln.exe
2008-03-11 04:07 . 2008-01-18 23:36 142,336 --a------ C:\Windows\System32\spp.dll
2008-03-11 04:07 . 2008-01-18 23:36 28,160 --a------ C:\Windows\System32\sxproxy.dll
2008-03-11 04:01 . 2007-12-06 05:04 6,656 --a------ C:\Windows\System32\kbd106n.dll
2008-03-11 04:00 . 2008-01-18 23:33 44,032 --a------ C:\Windows\System32\cbsra.exe
2008-03-11 03:48 . 2008-03-11 03:48 65,536 --------- C:\Windows\SPInstall.etl
2008-03-11 03:33 . 2008-03-11 03:33 <DIR> d-------- C:\Program Files\QuickTime
2008-03-11 03:33 . 2008-03-12 19:04 <DIR> d-------- C:\Program Files\Krtecek_2_0_2
2008-03-11 03:31 . 2008-03-12 11:05 <DIR> d-------- C:\Program Files\Your Uninstaller 2008
2008-03-11 03:18 . 2008-03-11 03:18 1,820 --a------ C:\Windows\System32\rasctrnm.h
2008-03-11 03:05 . 2008-03-11 03:05 <DIR> d-------- C:\Program Files\MSXML 4.0
2008-03-11 03:05 . 2006-11-02 01:50 128,104 --a------ C:\Windows\System32\drivers\WimFltr.sys
2008-03-11 02:02 . 2006-10-26 19:56 32,592 --a------ C:\Windows\System32\msonpmon.dll
2008-03-11 02:01 . 2008-03-11 02:01 <DIR> d-------- C:\Program Files\Microsoft Works
2008-03-11 02:00 . 2008-03-11 02:00 <DIR> d-------- C:\Windows\PCHEALTH
2008-03-11 02:00 . 2008-03-11 02:00 <DIR> d-------- C:\Program Files\Microsoft.NET
2008-03-11 01:59 . 2008-03-11 01:59 <DIR> d-------- C:\Program Files\Microsoft Visual Studio 8
2008-03-11 01:58 . 2008-03-11 19:31 <DIR> d-------- C:\Users\All Users\Microsoft Help
2008-03-11 01:58 . 2008-03-11 19:31 <DIR> d-------- C:\PROGRA~2\Microsoft Help
2008-03-11 01:35 . 2008-03-11 01:35 <DIR> d-------- C:\Program Files\Alcohol Soft
2008-03-11 01:34 . 2008-03-11 01:34 716,272 --a------ C:\Windows\System32\drivers\sptd.sys
2008-03-11 01:22 . 2008-03-11 01:29 <DIR> d-------- C:\Program Files\MagicISO
2008-03-11 01:20 . 2008-03-11 01:20 <DIR> d-------- C:\Windows\Profiles
2008-03-11 00:12 . 2008-03-11 00:13 <DIR> d-------- C:\Users\Luboseek\AppData\Roaming\Ahead
2008-03-11 00:12 . 2008-03-11 00:12 <DIR> d-------- C:\Users\All Users\Nero
2008-03-11 00:12 . 2008-03-11 00:12 <DIR> d-------- C:\Program Files\Nero
2008-03-11 00:12 . 2008-03-11 00:13 <DIR> d-------- C:\Program Files\Common Files\Ahead
2008-03-11 00:12 . 2008-03-11 00:12 <DIR> d-------- C:\PROGRA~2\Nero
2008-03-11 00:08 . 2008-03-11 00:08 <DIR> d-------- C:\Users\All Users\DVD Shrink
2008-03-11 00:08 . 2008-03-11 00:08 <DIR> d-------- C:\Program Files\DVD Shrink
2008-03-11 00:08 . 2008-03-11 00:08 <DIR> d-------- C:\PROGRA~2\DVD Shrink
2008-03-11 00:03 . 2008-03-11 00:03 <DIR> d-------- C:\Program Files\PowerISO
2008-03-10 23:51 . 2008-03-10 23:51 <DIR> d-------- C:\Program Files\xp-AntiSpy
2008-03-10 22:06 . 2008-03-10 22:06 <DIR> d-------- C:\Users\Luboseek\AppData\Roaming\TuneUp Software
2008-03-10 22:06 . 2008-03-10 22:06 <DIR> d-------- C:\Users\All Users\TuneUp Software
2008-03-10 22:06 . 2008-03-10 22:07 <DIR> d-------- C:\Program Files\TuneUp Utilities 2008
2008-03-10 22:06 . 2008-03-10 22:06 <DIR> d-------- C:\Program Files\Common Files\Wise Installation Wizard
2008-03-10 22:06 . 2008-03-10 22:06 <DIR> d-------- C:\PROGRA~2\TuneUp Software
2008-03-10 22:06 . 2008-03-10 22:06 306,432 --a------ C:\Windows\System32\TuneUpDefragService.exe
2008-03-10 22:06 . 2007-12-20 10:41 29,440 --a------ C:\Windows\System32\uxtuneup.dll
2008-03-10 22:06 . 2007-12-20 10:44 16,640 --a------ C:\Windows\System32\authuitu.dll
2008-03-10 22:05 . 2008-03-11 00:38 <DIR> d-------- C:\Program Files\Registry Shower 2007
2008-03-10 22:05 . 1998-06-24 10:55 609,584 --a------ C:\Windows\System32\COMCTL32.OCX
2008-03-10 22:05 . 2005-11-23 07:25 385,024 --a------ C:\Windows\System32\XPControls.ocx
2008-03-10 22:05 . 1998-06-24 10:57 209,192 --a------ C:\Windows\System32\TABCTL32.OCX
2008-03-10 22:05 . 1998-06-24 10:55 140,096 --a------ C:\Windows\System32\COMDLG32.OCX
2008-03-10 22:05 . 1998-06-24 10:56 115,016 --a------ C:\Windows\System32\MSINET.OCX
2008-03-10 22:04 . 2008-03-10 22:04 <DIR> d-------- C:\Program Files\Lavalys
2008-03-10 21:58 . 2008-03-10 21:59 <DIR> d-------- C:\Program Files\AVI ReComp
2008-03-10 21:56 . 2008-03-10 21:56 <DIR> d-------- C:\Users\Luboseek\AppData\Roaming\URSoft
2008-03-10 21:55 . 2008-03-10 21:55 <DIR> d-------- C:\OpenSSL
2008-03-10 21:55 . 2008-03-10 21:55 155,648 --a------ C:\Windows\System32\libssl32.dll
2008-03-10 21:50 . 2008-03-10 21:50 <DIR> d-------- C:\Program Files\Seznam DVD5
2008-03-10 21:48 . 2008-03-10 21:48 <DIR> d-------- C:\Program Files\Magentic
2008-03-10 21:48 . 2008-03-09 11:00 751,016 --a------ C:\Windows\System32\Magentic Screensaver.scr
2008-03-10 21:46 . 2008-03-10 21:46 <DIR> d-------- C:\Users\All Users\Stardock
2008-03-10 21:46 . 2008-03-10 21:46 <DIR> d-------- C:\PROGRA~2\Stardock
2008-03-10 21:45 . 2008-03-10 21:45 <DIR> d-------- C:\Users\Luboseek\AppData\Roaming\FreeCommander

.
(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2008-03-12 10:20 --------- d-----w C:\Program Files\Kdo chce bít milionáře
2008-03-11 12:24 --------- d-----w C:\Program Files\Microsoft Games
2008-03-11 03:46 174 --sha-w C:\Program Files\desktop.ini
2008-03-11 03:40 --------- d-----w C:\Program Files\Windows Sidebar
2008-03-11 03:40 --------- d-----w C:\Program Files\Windows Photo Gallery
2008-03-11 03:40 --------- d-----w C:\Program Files\Windows Mail
2008-03-11 03:40 --------- d-----w C:\Program Files\Windows Journal
2008-03-11 03:40 --------- d-----w C:\Program Files\Windows Defender
2008-03-11 03:40 --------- d-----w C:\Program Files\Windows Collaboration
2008-03-11 03:40 --------- d-----w C:\Program Files\Windows Calendar
2008-03-11 03:28 101,888 ----a-w C:\Windows\System32\ifxcardm.dll
2008-03-11 03:27 82,432 ----a-w C:\Windows\System32\axaltocm.dll
2008-03-11 01:01 --------- d-----w C:\Program Files\MSBuild
2008-03-10 10:02 319,456 ----a-w C:\Windows\DIFxAPI.dll
2008-03-10 10:02 315,392 ----a-w C:\Windows\HideWin.exe
2008-03-10 08:39 --------- d-sh--w C:\PROGRA~2\Oblíbené položky
2008-03-10 08:39 --------- d-sh--w C:\PROGRA~2\Nabídka Start
2008-03-10 08:39 --------- d-sh--w C:\PROGRA~2\Dokumenty
2008-03-10 08:39 --------- d-sh--w C:\PROGRA~2\Data aplikací
2008-03-10 08:39 --------- d-----w C:\PROGRA~2\Plocha
2008-03-10 08:39 --------- d-----w C:\PROGRA~2\Šablony
2008-02-08 17:37 219,664 ----a-w C:\Windows\System32\klogon.dll
2008-02-08 17:35 23,604 ----a-w C:\Windows\system32\drivers\klopp.dat
2008-01-18 22:44 986,680 ----a-w C:\Windows\System32\winload.exe
2008-01-18 22:44 926,776 ----a-w C:\Windows\System32\winresume.exe
2008-01-18 22:42 94,776 ----a-w C:\Windows\System32\MigAutoPlay.exe
2008-01-18 22:41 35,384 ----a-w C:\Windows\system32\drivers\kbdclass.sys
2008-01-18 22:41 34,360 ----a-w C:\Windows\system32\drivers\mouclass.sys
2008-01-18 22:41 31,288 ----a-w C:\Windows\system32\drivers\mssmbios.sys
2008-01-18 22:41 29,240 ----a-w C:\Windows\system32\drivers\Dumpata.sys
2008-01-18 22:41 24,120 ----a-w C:\Windows\System32\BOOTVID.DLL
2008-01-18 22:41 21,560 ----a-w C:\Windows\System32\kdusb.dll
2008-01-18 22:41 21,560 ----a-w C:\Windows\system32\drivers\atapi.sys
2008-01-18 22:41 21,048 ----a-w C:\Windows\system32\drivers\spldr.sys
2008-01-18 22:41 19,512 ----a-w C:\Windows\System32\kdcom.dll
2008-01-18 22:41 17,976 ----a-w C:\Windows\system32\drivers\wmilib.sys
2008-01-18 22:41 16,440 ----a-w C:\Windows\system32\drivers\pciide.sys
2008-01-18 22:41 16,440 ----a-w C:\Windows\system32\drivers\msisadrv.sys
2008-01-18 22:41 15,288 ----a-w C:\Windows\system32\drivers\swenum.sys
2008-01-18 22:38 46,080 ----a-w C:\Windows\System32\NAPCRYPT.DLL
2008-01-18 22:38 4,595,712 ----a-w C:\Windows\System32\AuthFWSnapin.dll
2008-01-18 22:38 242,744 ----a-w C:\Windows\System32\rsaenh.dll
2008-01-18 22:38 155,704 ----a-w C:\Windows\System32\dssenh.dll
2008-01-18 22:38 131,640 ----a-w C:\Windows\System32\basecsp.dll
2008-01-18 22:38 103,936 ----a-w C:\Windows\System32\NAPHLPR.DLL
2008-01-18 22:38 1,203,792 ----a-w C:\Windows\System32\ntdll.dll
2008-01-18 22:36 99,840 ----a-w C:\Windows\System32\ulib.dll
2008-01-18 22:35 98,304 ----a-w C:\Windows\System32\mssitlb.dll
2008-01-18 22:34 98,816 ----a-w C:\Windows\System32\mfps.dll
2008-01-18 22:33 98,304 ----a-w C:\Windows\System32\makecab.exe
2008-01-18 22:32 258,048 ----a-w C:\Windows\System32\winspool.drv
2008-01-18 22:32 21,504 ----a-w C:\Windows\System32\msacm32.drv
2008-01-18 22:32 166,912 ----a-w C:\Windows\System32\wdmaud.drv
2008-01-18 22:32 1,370,624 ----a-w C:\Windows\System32\Aurora.scr
2008-01-18 22:31 7,680 ----a-w C:\Windows\System32\spwizres.dll
2008-01-18 22:31 57,856 ----a-w C:\Windows\System32\nlsbres.dll
2008-01-18 22:31 118,272 ----a-w C:\Windows\System32\RDPENCDD.dll
2008-01-18 22:30 17,920 ----a-w C:\Windows\System32\netevent.dll
2008-01-18 22:29 705,536 ----a-w C:\Windows\System32\imagesp1.dll
2008-01-18 22:29 58,880 ----a-w C:\Windows\System32\msobjs.dll
2008-01-18 22:28 7,168 ----a-w C:\Windows\System32\f3ahvoas.dll
2008-01-18 22:26 36,864 ----a-w C:\Windows\System32\cdd.dll
2008-01-18 21:58 93,696 ----a-w C:\Windows\system32\drivers\bridge.sys
2008-01-18 21:53 130,048 ----a-w C:\Windows\system32\drivers\drmk.sys
2008-01-18 21:14 925,184 ----a-w C:\Windows\System32\FXSRESM.dll
2008-01-18 21:06 8,147,456 ----a-w C:\Windows\System32\wmploc.DLL
2008-01-18 21:02 248,832 ----a-w C:\Windows\system32\drivers\rdpdr.sys
2008-01-18 21:01 6,144 ----a-w C:\Windows\system32\drivers\RDPENCDD.sys
2008-01-18 21:01 6,144 ----a-w C:\Windows\system32\drivers\RDPCDD.sys
2008-01-18 21:01 29,184 ----a-w C:\Windows\system32\drivers\tdtcp.sys
2008-01-18 21:01 23,552 ----a-w C:\Windows\system32\drivers\tssecsrv.sys
2008-01-18 21:01 181,248 ----a-w C:\Windows\system32\drivers\rdpwd.sys
2008-01-18 21:01 17,920 ----a-w C:\Windows\system32\drivers\tdpipe.sys
2008-01-18 21:01 14,336 ----a-w C:\Windows\System32\tsddd.dll
2008-01-18 21:01 134,656 ----a-w C:\Windows\System32\rdpdd.dll
2008-01-18 20:57 8,192 ----a-w C:\Windows\system32\drivers\rootmdm.sys
2008-01-18 20:57 31,744 ----a-w C:\Windows\system32\drivers\modem.sys
2008-01-18 20:57 273,920 ----a-w C:\Windows\system32\drivers\afd.sys
2008-01-18 20:57 20,992 ----a-w C:\Windows\system32\drivers\tdi.sys
2008-01-18 20:55 95,744 ----a-w C:\Windows\system32\drivers\irda.sys
2008-01-18 20:54 64,000 ----a-w C:\Windows\system32\drivers\mpsdrv.sys
2008-01-18 20:54 148,480 ----a-w C:\Windows\system32\drivers\nwifi.sys
2008-01-18 20:52 56,320 ----a-w C:\Windows\System32\vga256.dll
2008-01-18 20:52 51,200 ----a-w C:\Windows\system32\drivers\WUDFPf.sys
2008-01-18 20:52 41,984 ----a-w C:\Windows\system32\drivers\monitor.sys
2008-01-18 20:52 25,088 ----a-w C:\Windows\system32\drivers\vga.sys
2008-01-18 20:52 21,504 ----a-w C:\Windows\System32\vga64k.dll
2008-01-18 20:52 110,080 ----a-w C:\Windows\system32\drivers\videoprt.sys
2008-01-18 20:52 11,776 ----a-w C:\Windows\System32\framebuf.dll
2008-01-18 20:52 10,752 ----a-w C:\Windows\System32\vga.dll
2008-01-18 20:50 18,944 ----a-w C:\Windows\system32\drivers\mcd.sys
2008-01-18 20:50 14,848 ----a-w C:\Windows\System32\iscsilog.dll
2008-01-18 20:48 20,992 ----a-w C:\Windows\System32\msdtcVSp1res.dll
2008-01-18 20:48 1,291,264 ----a-w C:\Windows\System32\comres.dll
2008-01-18 20:46 4,240,384 ----a-w C:\Windows\System32\GameUXLegacyGDFs.dll
2008-01-18 20:39 13,312 ----a-w C:\Windows\System32\WsmRes.dll
2008-01-18 20:37 2,031,616 ----a-w C:\Windows\System32\win32k.sys
2008-01-18 20:36 76,288 ----a-w C:\Windows\system32\drivers\dxg.sys
2008-01-18 20:36 625,152 ----a-w C:\Windows\system32\drivers\dxgkrnl.sys
2008-01-18 20:36 289,792 ----a-w C:\Windows\System32\atmfd.dll
.

((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* empty entries & legit default entries are not shown
REGEDIT4

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"WMPNSCFG"="C:\Program Files\Windows Media Player\WMPNSCFG.exe" [2008-01-18 23:33 202240]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"RtHDVCpl"="RtHDVCpl.exe" [2007-03-23 20:04 4423680 C:\Windows\RtHDVCpl.exe]
"AVP"="C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 7.0\avp.exe" [2008-02-08 18:36 227856]

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"EnableUIADesktopToggle"= 0 (0x0)

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\windows]
"AppInit_DLLs"=C:\PROGRA~1\KASPER~1\KASPER~1.0\r3hook.dll,C:\PROGRA~1\KASPER~1\KASPER~1.0\adialhk.dll

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run-]
"Magentic"=C:\PROGRA~1\Magentic\bin\Magentic.exe /c
"WMPNSCFG"=C:\Program Files\Windows Media Player\WMPNSCFG.exe
"PeerGuardian"=C:\Program Files\PeerGuardian2\pg2.exe

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run-]
"Adobe Reader Speed Launcher"="C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
"SunJavaUpdateSched"="C:\Program Files\Java\jre1.6.0_05\bin\jusched.exe"
"OODefragTray"=C:\Windows\system32\oodtray.exe
"Windows Defender"=%ProgramFiles%\Windows Defender\MSASCui.exe -hide
"NeroFilterCheck"=C:\Program Files\Common Files\Ahead\Lib\NeroCheck.exe
"AVP"="C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 7.0\avp.exe"
"GrooveMonitor"="C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe"
"StartCCC"="C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe"

[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\KasperskyAntiVirus]
"DisableMonitoring"=dword:00000001

[HKEY_LOCAL_MACHINE\software\microsoft\security center\Svc\S-1-5-21-797677781-730911492-3452797790-1000]
"EnableNotificationsRef"=dword:00000001

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\DomainProfile]
"EnableFirewall"= 0 (0x0)

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\FirewallRules]
"{F2A04878-5C6B-43E7-9EC5-CB46616B5843}"= UDP:C:\Program Files\Voipwise.com\Voipwise\Voipwise.exe:Voipwise
"{D40CA2EF-BE24-4089-9E2D-99B299FD3B80}"= TCP:C:\Program Files\Voipwise.com\Voipwise\Voipwise.exe:Voipwise
"TCP Query User{7867FC97-453A-4EBB-B822-7BD9018C7EC5}C:\programdata\kaspersky lab setup files\kaspersky internet security 7.0.1.325\english\setup.exe"= UDP:C:\programdata\kaspersky lab setup files\kaspersky internet security 7.0.1.325\english\setup.exe:Kaspersky Internet Security 7.0 Setup|Desc=Kaspersky Internet Security 7.0 Setup
"UDP Query User{2D20D85A-5438-4ABD-92B5-67487A107D70}C:\programdata\kaspersky lab setup files\kaspersky internet security 7.0.1.325\english\setup.exe"= TCP:C:\programdata\kaspersky lab setup files\kaspersky internet security 7.0.1.325\english\setup.exe:Kaspersky Internet Security 7.0 Setup|Desc=Kaspersky Internet Security 7.0 Setup
"{8D72BDD9-B82B-45A9-AF2D-999236463689}"= UDP:C:\Program Files\uTorrent\utorrent.exe:µTorrent
"{3A8EBAE9-6D14-4A5C-8CF9-C605A623C457}"= TCP:C:\Program Files\uTorrent\utorrent.exe:µTorrent
"{B0983D23-673C-48EC-B568-7665E206EC8B}"= Disabled:UDP:C:\Program Files\Magentic\bin\MgImp.exe:Magentic
"{BED8542F-6B56-46A2-811F-EFB1CAFE75E6}"= Disabled:TCP:C:\Program Files\Magentic\bin\MgImp.exe:Magentic
"{83DB2EAD-A91D-4088-B9D9-65870E82FF8E}"= Disabled:UDP:C:\Program Files\Magentic\bin\Magentic.exe:Magentic
"{48CD72D1-B781-48BF-BDD8-B13A1863875D}"= Disabled:TCP:C:\Program Files\Magentic\bin\Magentic.exe:Magentic
"{503FEAD6-9D74-4E83-9C99-7A47A8B64604}"= Disabled:UDP:C:\Program Files\Magentic\bin\MgApp.exe:Magentic
"{D09672A2-E35D-43D3-B6BC-89BEC57E1472}"= Disabled:TCP:C:\Program Files\Magentic\bin\MgApp.exe:Magentic
"{E5A2389A-7E01-4C63-BD81-3811EEB9B532}"= TCP:6004|C:\Program Files\Microsoft Office\Office12\outlook.exe:Microsoft Office Outlook
"{550D8BE7-25D2-40FA-8222-DA13CFA87608}"= UDP:C:\Program Files\Microsoft Office\Office12\GROOVE.EXE:Microsoft Office Groove
"{21954EC7-2D88-4D8D-9236-753E179F00D0}"= TCP:C:\Program Files\Microsoft Office\Office12\GROOVE.EXE:Microsoft Office Groove
"{01A4A0B2-5B9C-4AFD-8418-9CA099F12308}"= UDP:C:\Program Files\Microsoft Office\Office12\ONENOTE.EXE:Microsoft Office OneNote
"{E460386F-878E-408E-BB8E-AFD90ED17F60}"= TCP:C:\Program Files\Microsoft Office\Office12\ONENOTE.EXE:Microsoft Office OneNote
"{2D34DB80-428B-4812-872B-682DB6127BC5}"= Disabled:UDP:C:\Program Files\Skype\Phone\Skype.exe:Skype
"{249624BE-1B61-472D-910A-3BB30C56BC7C}"= Disabled:TCP:C:\Program Files\Skype\Phone\Skype.exe:Skype

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\PublicProfile]
"EnableFirewall"= 0 (0x0)

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\StandardProfile]
"EnableFirewall"= 0 (0x0)

R1 KLIM6;Kaspersky Anti-Virus NDIS 6 Filter;C:\Windows\system32\DRIVERS\klim6.sys [2007-10-16 11:05]
R1 PSched;Plánovač paketů technologie QoS;C:\Windows\system32\DRIVERS\pacer.sys [2008-01-18 21:55]
R2 UxTuneUp;TuneUp Theme Extension;C:\Windows\System32\svchost.exe [2008-01-18 23:33]
R3 AtcL001;NDIS Miniport Driver for Attansic L1 Gigabit Ethernet Controller;C:\Windows\system32\DRIVERS\atl01v32.sys [2007-03-15 15:41]
R3 atikmdag;atikmdag;C:\Windows\system32\DRIVERS\atikmdag.sys [2008-02-26 06:53]
S2 ATIWebPAM;ATI WebPAM;"C:\Program Files\ATI\WebPAM\jetty\extra\win32\Wrapper.exe" -s wrapper.conf []
S3 TuneUp.Defrag;TuneUp Drive Defrag Service;C:\Windows\System32\TuneUpDefragService.exe [2008-03-10 22:06]

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost]
bthsvcs REG_MULTI_SZ BthServ

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Svchost - NetSvcs
UxTuneUp

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{53e30cda-ef04-11dc-8c57-0011b107a20a}]
\shell\AutoRun\command - L:\SETUP.EXE
\shell\configure\command - L:\SETUP.EXE
\shell\install\command - L:\SETUP.EXE

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{63258caf-ee7c-11dc-86a0-806e6f6e6963}]
\shell\AutoRun\command - F:\.\Bin\Assetup.exe

.
**************************************************************************

catchme 0.3.1344 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2008-03-12 20:27:21
Windows 6.0.6001 Service Pack 1 NTFS

scanning hidden processes ...

scanning hidden autostart entries ...

scanning hidden files ...

scan completed successfully
hidden files: 0

**************************************************************************
.
------------------------ Other Running Processes ------------------------
.
C:\Windows\system32\Ati2evxx.exe
C:\Windows\system32\Ati2evxx.exe
C:\Windows\system32\oodag.exe
C:\Windows\system32\PSIService.exe
C:\Windows\System32\tcpsvcs.exe
C:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindServiceAE.exe
C:\Windows\system32\WUDFHost.exe
C:\Windows\servicing\TrustedInstaller.exe
C:\Windows\system32\conime.exe
C:\\?\C:\Windows\system32\wbem\WMIADAP.EXE
.
**************************************************************************
.
Completion time: 2008-03-12 20:28:24 - machine was rebooted
ComboFix-quarantined-files.txt 2008-03-12 19:28:16
.
2008-03-11 18:31:25 --- E O F ---

[Reklama]

[Baron Prášil]

Otevři si Poznámkový blok (Start -> Spustit... a napiš do okna Notepad a dej Ok)
Zkopíruj do něj následující text označený zeleně:

Kód: Vybrat vše

Registry::
[-HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{53e30cda-ef04-11dc-8c57-0011b107a20a}]
[-HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{63258caf-ee7c-11dc-86a0-806e6f6e6963}]

Zvol možnost Soubor -> Uložit jako... a nastav tyto parametry:
Název souboru: zde napiš: CFScript.txt
Uložit jako typ: tak tam vyber Všechny soubory
Ulož soubor na plochu.
Ukonči všechna aktivní okna.
Uchop myší vytvořený skript CFScript.txt, přemísti ho nad stažený program ComboFix.exe a když se oba soubory překryjí, skript upusť

- Automaticky se spustí ComboFix

vyčisti systém CCleanerem a RegCleanerem

proskenuj systém MWAVem a pošli z něho log-jak,najdeš v mém podpisu

[luboseek]

Otevři si Poznámkový blok (Start -> Spustit... a napiš do okna Notepad a dej Ok)
Zkopíruj do něj následující text označený zeleně:

Kód: Vybrat vše

Registry::
[-HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{53e30cda-ef04-11dc-8c57-0011b107a20a}]
[-HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{63258caf-ee7c-11dc-86a0-806e6f6e6963}]

Zvol možnost Soubor -> Uložit jako... a nastav tyto parametry:
Název souboru: zde napiš: CFScript.txt
Uložit jako typ: tak tam vyber Všechny soubory
Ulož soubor na plochu.
Ukonči všechna aktivní okna.
Uchop myší vytvořený skript CFScript.txt, přemísti ho nad stažený program ComboFix.exe a když se oba soubory překryjí, skript upusť

- Automaticky se spustí ComboFix

vyčisti systém CCleanerem a RegCleanerem

proskenuj systém MWAVem a pošli z něho log-jak,najdeš v mém podpisu

Posílám log z MWAV:

Objekt "kazaa Spyware/Adware" nalezen v souborovém systému! Provedené akce: Nic nebylo provedeno.
Objekt "gain.gator Spyware/Adware" nalezen v souborovém systému! Provedené akce: Nic nebylo provedeno.
Objekt "look2me Adware" nalezen v souborovém systému! Provedené akce: Nic nebylo provedeno.
Objekt "gain.gator Spyware/Adware" nalezen v souborovém systému! Provedené akce: Nic nebylo provedeno.
Objekt "trojan-downloader.bat.ftp.ab Trojan-Downloader" nalezen v souborovém systému! Provedené akce: Nic nebylo provedeno.
Objekt "trojan-downloader.bat.ftp.ab Trojan-Downloader" nalezen v souborovém systému! Provedené akce: Nic nebylo provedeno.
Záznam "HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts" odkazuje na neplatný objekt ".avc". Provedené akce: Nic nebylo provedeno.
Záznam "HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts" odkazuje na neplatný objekt ".ppl". Provedené akce: Nic nebylo provedeno.
Záznam "HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts" odkazuje na neplatný objekt ".xht". Provedené akce: Nic nebylo provedeno.
Záznam "HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts" odkazuje na neplatný objekt ".xhtml". Provedené akce: Nic nebylo provedeno.

[Baron Prášil]

v pořádku.sice sem chtěl i log z avengeru,ale to je nakonec fuk,zajímá mě primárně jak se chová komp.

mwav je v pořádku.