PC-HELP.CZ

Dobrý večer. Prosím o kontrolu logu. Pc seká, niektoré stránky na internete sa dajú otvoriť až na druhý krát a načítavajú sa pomaly. Predpokladám, že niečo bude asi v mojich dokumentoch,lebo tie sa nedajú otvoriť vôbec a hlási, že program nereaguje. Chcel som ich preskenovať esetom, ale nedajú sa vôbec otvoriť žiadnou cestou.


Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 20:57:06, on 15.6.2009
Platform: Windows XP SP3, v.5755 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Java\jre6\bin\jusched.exe
C:\Program Files\ESET\ESET Smart Security\egui.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\SpeedBit Video Accelerator\VideoAccelerator.exe
C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe
C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
C:\Program Files\PeerGuardian2\pg2.exe
C:\Program Files\VIA\VIAudioi\HDADeck\HDeck.exe
C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\WINDOWS\ATKKBService.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\Program Files\Diskeeper Corporation\Diskeeper\DkService.exe
C:\Program Files\ESET\ESET Smart Security\ekrn.exe
C:\Program Files\ICQ6Toolbar\ICQ Service.exe
C:\Program Files\Google\Update\GoogleUpdate.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\Program Files\BurnAware Free\nmsaccessu.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\Program Files\Laplink Everywhere\ServerProxyService.exe
C:\WINDOWS\System32\TUProgSt.exe
C:\PROGRA~1\SPEEDB~2\VideoAcceleratorService.exe
C:\Program Files\Laplink\winShadow\shwSrvc.exe
C:\PROGRA~1\SPEEDB~2\VideoAcceleratorEngine.exe
C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe
C:\WINDOWS\system32\drwtsn32.exe
C:\WINDOWS\system32\drwtsn32.exe
C:\WINDOWS\explorer.exe
C:\WINDOWS\system32\rundll32.exe
C:\Documents and Settings\PC\Local Settings\Application Data\Google\Chrome\Application\chrome.exe
C:\Documents and Settings\PC\Local Settings\Application Data\Google\Chrome\Application\chrome.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://start.icq.com/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,SearchAssistant = http://www.crawler.com/search/ie.aspx?tb_id=66020
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,CustomizeSearch = http://dnl.crawler.com/support/sa_custo ... TbId=66020
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page =
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = socks=
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
R3 - URLSearchHook: SearchSettings Class - {E312764E-7706-43F1-8DAB-FCDD2B1E416D} - C:\Program Files\Search Settings\kb128\SearchSettings.dll
R3 - URLSearchHook: (no name) - - (no file)
R3 - URLSearchHook: ICQToolBar - {855F3B16-6D32-4fe6-8A56-BBB695989046} - C:\Program Files\ICQ6Toolbar\ICQToolBar.dll
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: WebTransBHO Class - {2DB66063-BB98-466A-AA0D-3E7ACF5ED853} - C:\Documents and Settings\All Users\Application Data\LangSoft\WebIE.dll
O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files\Google\Google Toolbar\GoogleToolbar.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.1.1309.3572\swg.dll
O2 - BHO: Google Dictionary Compression sdch - {C84D72FE-E17D-4195-BB24-76C02E2E7C4E} - C:\Program Files\Google\Google Toolbar\Component\fastsearch_A8904FB862BD9564.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: SearchSettings Class - {E312764E-7706-43F1-8DAB-FCDD2B1E416D} - C:\Program Files\Search Settings\kb128\SearchSettings.dll
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
O3 - Toolbar: WebTranslator - {BFC32E1D-EE75-4A48-BC60-104E11EE2431} - C:\Documents and Settings\All Users\Application Data\LangSoft\WebIE.dll
O3 - Toolbar: Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar.dll
O3 - Toolbar: (no name) - {9E709AEF-74F7-4DA3-A7FC-F3E2D5A8D793} - (no file)
O3 - Toolbar: ICQToolBar - {855F3B16-6D32-4fe6-8A56-BBB695989046} - C:\Program Files\ICQ6Toolbar\ICQToolBar.dll
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre6\bin\jusched.exe"
O4 - HKLM\..\Run: [egui] "C:\Program Files\ESET\ESET Smart Security\egui.exe" /hide /waitservice
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [SpeedBitVideoAccelerator] C:\Program Files\SpeedBit Video Accelerator\VideoAccelerator.exe
O4 - HKCU\..\Run: [Google Desktop] C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe
O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
O4 - HKCU\..\Run: [PeerGuardian 2] C:\Program Files\PeerGuardian2\pg2.exe
O4 - HKCU\..\Run: [HDeck MFC Application] C:\Program Files\VIA\VIAudioi\HDADeck\HDeck.exe
O4 - HKCU\..\Run: [SpybotSD TeaTimer] C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O8 - Extra context menu item: Add to Google Photos Screensa&ver - res://C:\WINDOWS\system32\GPhotos.scr/200
O9 - Extra button: WebTran - {7E6A20FB-153F-402c-A84B-1A64E1955D3D} - C:\Documents and Settings\All Users\Application Data\LangSoft\WebIE.dll
O9 - Extra button: (no name) - {BFC32E1D-EE75-4A48-BC60-104E11EE2431} - (no file)
O9 - Extra button: (no name) - {CC963627-B1DC-40E0-B52A-CF21EE748449} - C:\Documents and Settings\All Users\Application Data\LangSoft\WebIE.dll
O9 - Extra 'Tools' menuitem: &Nastavit překladač - {CC963627-B1DC-40E0-B52A-CF21EE748449} - C:\Documents and Settings\All Users\Application Data\LangSoft\WebIE.dll
O9 - Extra button: (no name) - {CC963627-B1DC-40E0-B52A-CF21EE748450} - C:\Documents and Settings\All Users\Application Data\LangSoft\WebIE.dll
O9 - Extra 'Tools' menuitem: &Slovník - {CC963627-B1DC-40E0-B52A-CF21EE748450} - C:\Documents and Settings\All Users\Application Data\LangSoft\WebIE.dll
O9 - Extra button: (no name) - {CC963627-B1DC-40E0-B52A-CF21EE748451} - C:\Documents and Settings\All Users\Application Data\LangSoft\WebIE.dll
O9 - Extra 'Tools' menuitem: Přeložit &označený text - {CC963627-B1DC-40E0-B52A-CF21EE748451} - C:\Documents and Settings\All Users\Application Data\LangSoft\WebIE.dll
O9 - Extra button: (no name) - {CC963627-B1DC-40E0-B52A-CF21EE748452} - C:\Documents and Settings\All Users\Application Data\LangSoft\WebIE.dll
O9 - Extra 'Tools' menuitem: Přeložit &stránku - {CC963627-B1DC-40E0-B52A-CF21EE748452} - C:\Documents and Settings\All Users\Application Data\LangSoft\WebIE.dll
O9 - Extra button: Cleaner - {CCF00E14-7C5E-4420-9BF3-AA4809CFAA13} - C:\Program Files\ClickClean\ClickClean.exe
O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: ICQ6 - {E59EB121-F339-4851-A3BA-FE49C35617C2} - C:\Program Files\ICQ6.5\ICQ.exe
O9 - Extra 'Tools' menuitem: ICQ6 - {E59EB121-F339-4851-A3BA-FE49C35617C2} - C:\Program Files\ICQ6.5\ICQ.exe
O10 - Unknown file in Winsock LSP: c:\progra~1\speedb~2\sblsp.dll
O10 - Unknown file in Winsock LSP: c:\progra~1\speedb~2\sblsp.dll
O10 - Unknown file in Winsock LSP: c:\progra~1\speedb~2\sblsp.dll
O16 - DPF: {3EA4FA88-E0BE-419A-A732-9B79B87A6ED0} (CTVUAxCtrl Object) - http://dl.tvunetworks.com/TVUAx.cab
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://update.microsoft.com/microsoftup ... 7316118328
O16 - DPF: {7530BFB8-7293-4D34-9923-61A11451AFC5} - http://download.eset.com/special/eos/OnlineScanner.cab
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/s ... wflash.cab
O18 - Protocol: IW231 - {1CD50F0B-C67D-4B01-A707-55573DACAADF} - "C:\Program Files\ImageWalker\ImageWalker231\ImageWalkerU.exe" (file missing)
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O18 - Filter: x-sdch - {B1759355-3EEC-4C1E-B0F1-B719FE26E377} - C:\Program Files\Google\Google Toolbar\Component\fastsearch_A8904FB862BD9564.dll
O20 - AppInit_DLLs: C:\PROGRA~1\Google\GOOGLE~4\GOEC62~1.DLL
O23 - Service: Adobe LM Service - Adobe Systems - C:\Program Files\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe
O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
O23 - Service: ATK Keyboard Service (ATKKeyboardService) - ASUSTeK COMPUTER INC. - C:\WINDOWS\ATKKBService.exe
O23 - Service: Bonjour Service - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: Diskeeper - Diskeeper Corporation - C:\Program Files\Diskeeper Corporation\Diskeeper\DkService.exe
O23 - Service: ESET HTTP Server (EhttpSrv) - ESET - C:\Program Files\ESET\ESET Smart Security\EHttpSrv.exe
O23 - Service: ESET Service (ekrn) - ESET - C:\Program Files\ESET\ESET Smart Security\ekrn.exe
O23 - Service: Google Desktop Manager 5.8.811.4345 (GoogleDesktopManager-110408-113106) - Google - C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe
O23 - Service: Google Update Service (gupdate1c9b074adf011ba) (gupdate1c9b074adf011ba) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: Google Software Updater (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: ICQ Service - Unknown owner - C:\Program Files\ICQ6Toolbar\ICQ Service.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: iPod Service - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe
O23 - Service: NMSAccessU - Unknown owner - C:\Program Files\BurnAware Free\nmsaccessu.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: ServerProxyService - Unknown owner - C:\Program Files\Laplink Everywhere\ServerProxyService.exe
O23 - Service: TuneUp Drive Defrag Service (TuneUp.Defrag) - TuneUp Software - C:\WINDOWS\System32\TuneUpDefragService.exe
O23 - Service: TuneUp Program Statistics Service (TuneUp.ProgramStatisticsSvc) - TuneUp Software - C:\WINDOWS\System32\TUProgSt.exe
O23 - Service: VideoAcceleratorService - Speedbit Ltd. - C:\PROGRA~1\SPEEDB~2\VideoAcceleratorService.exe
O23 - Service: winShadow - OmniCom Technologies - C:\Program Files\Laplink\winShadow\shwSrvc.exe

--
End of file - 12479 bytes

Log z mbam.

Malwarebytes' Anti-Malware 1.37
Verzia databázy: 2284
Windows 5.1.2600 Service Pack 3, v.5755

15.6.2009 21:32:14
mbam-log-2009-06-15 (21-32-01).txt

Typ kontroly: Rýchla
Objektov kontrolovaných: 77754
Uplynutý cas: 2 minute(s), 40 second(s)

Infikovaných procesov pamäte: 0
Infikovaných modulov pamäte: 0
Infikovaných registracných klúcov: 3
Infikovaných registracných hodnôt: 0
Infikovaných registracných údajov položiek: 0
Infikovaných priecinkov: 0
Infikovaných súborov: 0

Infikovaných procesov pamäte:
(Žiadne škodlivé položky)

Infikovaných modulov pamäte:
(Žiadne škodlivé položky)

Infikovaných registracných klúcov:
HKEY_LOCAL_MACHINE\SOFTWARE\Miracle (Rogue.PerfectOptimizer) -> No action taken.
HKEY_CLASSES_ROOT\urlsearchhook.toolbarurlsearchhook (Trojan.BHO) -> No action taken.
HKEY_CLASSES_ROOT\urlsearchhook.toolbarurlsearchhook.1 (Trojan.BHO) -> No action taken.

Infikovaných registracných hodnôt:
(Žiadne škodlivé položky)

Infikovaných registracných údajov položiek:
(Žiadne škodlivé položky)

Infikovaných priecinkov:
(Žiadne škodlivé položky)

Infikovaných súborov:
(Žiadne škodlivé položky)

CTRL+Alt+DEl. V procesech vypni drwtsn32.exe.

Osinstaluj: Crawler Toolbar, ICQ6 Toolbar,Search settings.

Spusť HJT, vypni prohlížeče, odpoj se od internetu a fixni (zatrhnout políčko před hodnotou zmáčknout
"Fix checked"):

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,SearchAssistant = http://www.crawler.com/search/ie.aspx?tb_id=66020
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,CustomizeSearch = http://dnl.crawler.com/support/sa_custo ... TbId=66020
R3 - URLSearchHook: SearchSettings Class - {E312764E-7706-43F1-8DAB-FCDD2B1E416D} - C:\Program Files\Search Settings\kb128\SearchSettings.dll
R3 - URLSearchHook: (no name) - - (no file)
R3 - URLSearchHook: ICQToolBar - {855F3B16-6D32-4fe6-8A56-BBB695989046} - C:\Program Files\ICQ6Toolbar\ICQToolBar.dll
O2 - BHO: SearchSettings Class - {E312764E-7706-43F1-8DAB-FCDD2B1E416D} - C:\Program Files\Search Settings\kb128\SearchSettings.dll
O3 - Toolbar: (no name) - {9E709AEF-74F7-4DA3-A7FC-F3E2D5A8D793} - (no file)
O3 - Toolbar: ICQToolBar - {855F3B16-6D32-4fe6-8A56-BBB695989046} - C:\Program Files\ICQ6Toolbar\ICQToolBar.dll
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre6\bin\jusched.exe"
O9 - Extra button: (no name) - {BFC32E1D-EE75-4A48-BC60-104E11EE2431} - (no file)
O9 - Extra button: Cleaner - {CCF00E14-7C5E-4420-9BF3-AA4809CFAA13} - C:\Program Files\ClickClean\ClickClean.exe
O18 - Protocol: IW231 - {1CD50F0B-C67D-4B01-A707-55573DACAADF} - "C:\Program Files\ImageWalker\ImageWalker231\ImageWalkerU.exe" (file missing)

A chvíli vydrž.

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 22:10:53, on 15.6.2009
Platform: Windows XP SP3, v.5755 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\ESET\ESET Smart Security\egui.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\SpeedBit Video Accelerator\VideoAccelerator.exe
C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe
C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
C:\Program Files\PeerGuardian2\pg2.exe
C:\Program Files\VIA\VIAudioi\HDADeck\HDeck.exe
C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe
C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\WINDOWS\ATKKBService.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\Program Files\Diskeeper Corporation\Diskeeper\DkService.exe
C:\Program Files\ESET\ESET Smart Security\ekrn.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\Program Files\Google\Update\GoogleUpdate.exe
C:\Program Files\BurnAware Free\nmsaccessu.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\Program Files\Laplink Everywhere\ServerProxyService.exe
C:\WINDOWS\System32\TUProgSt.exe
C:\PROGRA~1\SPEEDB~2\VideoAcceleratorService.exe
C:\Program Files\Laplink\winShadow\shwSrvc.exe
C:\PROGRA~1\SPEEDB~2\VideoAcceleratorEngine.exe
C:\WINDOWS\system32\wuauclt.exe
C:\Documents and Settings\PC\Local Settings\Application Data\Google\Chrome\Application\chrome.exe
C:\Documents and Settings\PC\Local Settings\Application Data\Google\Chrome\Application\chrome.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://start.icq.com/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page =
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = socks=
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: WebTransBHO Class - {2DB66063-BB98-466A-AA0D-3E7ACF5ED853} - C:\Documents and Settings\All Users\Application Data\LangSoft\WebIE.dll
O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files\Google\Google Toolbar\GoogleToolbar.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.1.1309.3572\swg.dll
O2 - BHO: Google Dictionary Compression sdch - {C84D72FE-E17D-4195-BB24-76C02E2E7C4E} - C:\Program Files\Google\Google Toolbar\Component\fastsearch_A8904FB862BD9564.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
O3 - Toolbar: WebTranslator - {BFC32E1D-EE75-4A48-BC60-104E11EE2431} - C:\Documents and Settings\All Users\Application Data\LangSoft\WebIE.dll
O3 - Toolbar: Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar.dll
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [egui] "C:\Program Files\ESET\ESET Smart Security\egui.exe" /hide /waitservice
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [SpeedBitVideoAccelerator] C:\Program Files\SpeedBit Video Accelerator\VideoAccelerator.exe
O4 - HKCU\..\Run: [Google Desktop] C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe
O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
O4 - HKCU\..\Run: [PeerGuardian 2] C:\Program Files\PeerGuardian2\pg2.exe
O4 - HKCU\..\Run: [HDeck MFC Application] C:\Program Files\VIA\VIAudioi\HDADeck\HDeck.exe
O4 - HKCU\..\Run: [SpybotSD TeaTimer] C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O8 - Extra context menu item: Add to Google Photos Screensa&ver - res://C:\WINDOWS\system32\GPhotos.scr/200
O9 - Extra button: WebTran - {7E6A20FB-153F-402c-A84B-1A64E1955D3D} - C:\Documents and Settings\All Users\Application Data\LangSoft\WebIE.dll
O9 - Extra button: (no name) - {CC963627-B1DC-40E0-B52A-CF21EE748449} - C:\Documents and Settings\All Users\Application Data\LangSoft\WebIE.dll
O9 - Extra 'Tools' menuitem: &Nastavit překladač - {CC963627-B1DC-40E0-B52A-CF21EE748449} - C:\Documents and Settings\All Users\Application Data\LangSoft\WebIE.dll
O9 - Extra button: (no name) - {CC963627-B1DC-40E0-B52A-CF21EE748450} - C:\Documents and Settings\All Users\Application Data\LangSoft\WebIE.dll
O9 - Extra 'Tools' menuitem: &Slovník - {CC963627-B1DC-40E0-B52A-CF21EE748450} - C:\Documents and Settings\All Users\Application Data\LangSoft\WebIE.dll
O9 - Extra button: (no name) - {CC963627-B1DC-40E0-B52A-CF21EE748451} - C:\Documents and Settings\All Users\Application Data\LangSoft\WebIE.dll
O9 - Extra 'Tools' menuitem: Přeložit &označený text - {CC963627-B1DC-40E0-B52A-CF21EE748451} - C:\Documents and Settings\All Users\Application Data\LangSoft\WebIE.dll
O9 - Extra button: (no name) - {CC963627-B1DC-40E0-B52A-CF21EE748452} - C:\Documents and Settings\All Users\Application Data\LangSoft\WebIE.dll
O9 - Extra 'Tools' menuitem: Přeložit &stránku - {CC963627-B1DC-40E0-B52A-CF21EE748452} - C:\Documents and Settings\All Users\Application Data\LangSoft\WebIE.dll
O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: ICQ6 - {E59EB121-F339-4851-A3BA-FE49C35617C2} - C:\Program Files\ICQ6.5\ICQ.exe
O9 - Extra 'Tools' menuitem: ICQ6 - {E59EB121-F339-4851-A3BA-FE49C35617C2} - C:\Program Files\ICQ6.5\ICQ.exe
O10 - Unknown file in Winsock LSP: c:\progra~1\speedb~2\sblsp.dll
O10 - Unknown file in Winsock LSP: c:\progra~1\speedb~2\sblsp.dll
O10 - Unknown file in Winsock LSP: c:\progra~1\speedb~2\sblsp.dll
O16 - DPF: {3EA4FA88-E0BE-419A-A732-9B79B87A6ED0} (CTVUAxCtrl Object) - http://dl.tvunetworks.com/TVUAx.cab
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://update.microsoft.com/microsoftup ... 7316118328
O16 - DPF: {7530BFB8-7293-4D34-9923-61A11451AFC5} - http://download.eset.com/special/eos/OnlineScanner.cab
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/s ... wflash.cab
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O18 - Filter: x-sdch - {B1759355-3EEC-4C1E-B0F1-B719FE26E377} - C:\Program Files\Google\Google Toolbar\Component\fastsearch_A8904FB862BD9564.dll
O20 - AppInit_DLLs: C:\PROGRA~1\Google\GOOGLE~4\GOEC62~1.DLL
O23 - Service: Adobe LM Service - Adobe Systems - C:\Program Files\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe
O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
O23 - Service: ATK Keyboard Service (ATKKeyboardService) - ASUSTeK COMPUTER INC. - C:\WINDOWS\ATKKBService.exe
O23 - Service: Bonjour Service - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: Diskeeper - Diskeeper Corporation - C:\Program Files\Diskeeper Corporation\Diskeeper\DkService.exe
O23 - Service: ESET HTTP Server (EhttpSrv) - ESET - C:\Program Files\ESET\ESET Smart Security\EHttpSrv.exe
O23 - Service: ESET Service (ekrn) - ESET - C:\Program Files\ESET\ESET Smart Security\ekrn.exe
O23 - Service: Google Desktop Manager 5.8.811.4345 (GoogleDesktopManager-110408-113106) - Google - C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe
O23 - Service: Google Update Service (gupdate1c9b074adf011ba) (gupdate1c9b074adf011ba) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: Google Software Updater (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: iPod Service - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe
O23 - Service: NMSAccessU - Unknown owner - C:\Program Files\BurnAware Free\nmsaccessu.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: ServerProxyService - Unknown owner - C:\Program Files\Laplink Everywhere\ServerProxyService.exe
O23 - Service: TuneUp Drive Defrag Service (TuneUp.Defrag) - TuneUp Software - C:\WINDOWS\System32\TuneUpDefragService.exe
O23 - Service: TuneUp Program Statistics Service (TuneUp.ProgramStatisticsSvc) - TuneUp Software - C:\WINDOWS\System32\TUProgSt.exe
O23 - Service: VideoAcceleratorService - Speedbit Ltd. - C:\PROGRA~1\SPEEDB~2\VideoAcceleratorService.exe
O23 - Service: winShadow - OmniCom Technologies - C:\Program Files\Laplink\winShadow\shwSrvc.exe

--
End of file - 10919 bytes

červený soubor zkontroluj na Virustotalu

c:\progra~1\speedb~2\sblsp.dll

a vlož sem odkaz na výsledek

http://www.virustotal.com/cs/analisis/d ... 1245098507

Dal som to ešte raz, lebo ma zmiatol čas na výsledku, ukazovalo tam 20:40, ale nič nenašlo.

http://www.virustotal.com/cs/analisis/d ... 1245098693

Takže spusť znovu MbAM a dej Scan
- po proběhnutí programu se ti objeví hláška tak klikni na OK a pak na tlačítko Show Results
- ujistit se že máš zatrhnuté všechny vypsané nálezy a klikni na tlačítko Remove Selected
- když skončí odstraňování tak se ti zobrazí log, tak ho sem dej.
- pak zvol v programu OK a pak program ukonči přes Exit

Vypni rezidentní štít antiviru (pokud máš tak i antispyware).
Stáhni si ComboFix (by sUBs)
nebo ComboFix (subs)
a ulož si ho na plochu.
Ukonči všechna aktivní okna a spusť ho.
- Po spuštění se zobrazí podmínky užití, potvrď je stiskem tlačítka Ano
- Dále postupuj dle pokynů, během aplikování ComboFixu neklikej do zobrazujícího se okna
- Po dokončení skenování by měl program vytvořit log - C:\ComboFix.txt - zkopíruj sem prosím celý jeho obsah

Malwarebytes' Anti-Malware 1.37
Verzia databázy: 2284
Windows 5.1.2600 Service Pack 3, v.5755

15.6.2009 23:11:47
mbam-log-2009-06-15 (23-11-47).txt

Typ kontroly: Rýchla
Objektov kontrolovaných: 77346
Uplynutý cas: 2 minute(s), 18 second(s)

Infikovaných procesov pamäte: 0
Infikovaných modulov pamäte: 0
Infikovaných registracných klúcov: 3
Infikovaných registracných hodnôt: 0
Infikovaných registracných údajov položiek: 0
Infikovaných priecinkov: 0
Infikovaných súborov: 0

Infikovaných procesov pamäte:
(Žiadne škodlivé položky)

Infikovaných modulov pamäte:
(Žiadne škodlivé položky)

Infikovaných registracných klúcov:
HKEY_LOCAL_MACHINE\SOFTWARE\Miracle (Rogue.PerfectOptimizer) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\urlsearchhook.toolbarurlsearchhook (Trojan.BHO) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\urlsearchhook.toolbarurlsearchhook.1 (Trojan.BHO) -> Quarantined and deleted successfully.

Infikovaných registracných hodnôt:
(Žiadne škodlivé položky)

Infikovaných registracných údajov položiek:
(Žiadne škodlivé položky)

Infikovaných priecinkov:
(Žiadne škodlivé položky)

Infikovaných súborov:
(Žiadne škodlivé položky)

Fajn, ještě ComboFix.

ComboFix 09-06-15.03 - PC 15.06.2009 23:16.8 - NTFSx86
Systém Microsoft Windows XP Professional 5.1.2600.3.1250.421.1033.18.2047.1464 [GMT 2:00]
Running from: c:\documents and settings\PC\Desktop\ComboFix.exe
AV: ESET Smart Security 4.0 *On-access scanning disabled* (Updated) {E5E70D32-0101-4F12-8FB0-D96ACA4F34C0}
FW: ESET Personal firewall *enabled* {E5E70D32-0101-4340-86A3-A7B0F1C8FFE0}
* Created a new restore point

WARNING -THIS MACHINE DOES NOT HAVE THE RECOVERY CONSOLE INSTALLED !!
.

((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))
.

c:\documents and settings\PC\Application Data\inst.exe

.
((((((((((((((((((((((((( Files Created from 2009-05-15 to 2009-06-15 )))))))))))))))))))))))))))))))
.

2009-06-15 19:27 . 2009-05-26 11:20 40160 ----a-w- c:\windows\system32\drivers\mbamswissarmy.sys
2009-06-15 19:27 . 2009-06-15 19:27 -------- d-----w- c:\program files\Malwarebytes' Anti-Malware
2009-06-15 19:27 . 2009-05-26 11:19 19096 ----a-w- c:\windows\system32\drivers\mbam.sys
2009-06-15 18:56 . 2009-06-15 18:56 -------- d-----w- c:\program files\Trend Micro
2009-06-12 15:49 . 2009-06-12 15:49 -------- d-----w- c:\documents and settings\All Users\Application Data\DAEMON Tools Lite
2009-06-12 06:42 . 2009-06-12 06:42 -------- d-----w- c:\windows\Downloaded Installations
2009-06-12 06:33 . 2009-06-12 06:56 -------- d-----w- c:\program files\Wise Registry Cleaner
2009-06-12 06:31 . 2009-06-12 06:31 -------- d-----w- c:\documents and settings\PC\Local Settings\Application Data\ImTOO Software Studio
2009-06-12 06:30 . 2009-06-12 06:30 -------- d-----w- c:\program files\ImTOO
2009-06-12 06:29 . 2009-06-12 06:30 -------- d-----w- c:\program files\BurnAware Free
2009-06-10 04:26 . 2009-04-30 21:22 12800 -c----w- c:\windows\system32\dllcache\xpshims.dll
2009-06-10 04:26 . 2009-04-30 21:22 1985024 -c----w- c:\windows\system32\dllcache\iertutil.dll
2009-06-10 04:26 . 2009-04-30 21:22 246272 -c----w- c:\windows\system32\dllcache\ieproxy.dll
2009-06-10 04:26 . 2009-04-30 21:22 11064832 -c----w- c:\windows\system32\dllcache\ieframe.dll
2009-06-08 13:18 . 2009-06-08 13:18 603904 ----a-w- c:\windows\system32\TUProgSt.exe
2009-06-08 13:18 . 2008-12-11 11:31 27904 ----a-w- c:\windows\system32\uxtuneup.dll
2009-06-08 13:18 . 2009-06-08 13:18 360192 ----a-w- c:\windows\system32\TuneUpDefragService.exe
2009-06-08 13:02 . 2009-06-08 13:02 -------- d-----w- c:\program files\Opera 10 Beta
2009-06-05 15:19 . 2009-06-05 15:19 -------- d-----w- c:\documents and settings\PC\Local Settings\Application Data\GHISLER
2009-06-03 13:12 . 2009-06-03 13:12 -------- d-----w- c:\program files\Common Files\Diskeeper Corporation
2009-06-03 13:12 . 2009-06-03 13:12 -------- d-----w- c:\documents and settings\All Users\Application Data\Diskeeper Corporation
2009-06-03 13:12 . 2009-06-03 13:12 -------- d-----w- c:\program files\Diskeeper Corporation
2009-06-03 10:07 . 2009-06-03 10:07 -------- d-----w- c:\program files\iPod
2009-06-03 10:00 . 2009-06-03 10:00 75048 ----a-w- c:\documents and settings\All Users\Application Data\Apple Computer\Installer Cache\iTunes 8.2.0.23\SetupAdmin.exe
2009-06-02 21:05 . 2009-06-02 21:05 -------- d-----w- c:\documents and settings\PC\Application Data\FTWeak
2009-06-02 21:05 . 2009-06-02 21:05 -------- d-----w- c:\documents and settings\All Users\Application Data\FTWeak
2009-06-02 21:05 . 2009-06-02 21:05 -------- d-----w- c:\program files\FCleaner
2009-06-01 13:08 . 2009-06-01 13:08 -------- d-----w- c:\program files\ESET
2009-05-30 22:51 . 2008-02-12 13:59 26624 ----a-w- c:\documents and settings\LocalService\Application Data\Microsoft\UPnP Device Host\upnphost\udhisapi.dll
2009-05-30 22:44 . 2009-05-30 22:44 -------- d-----w- c:\documents and settings\PC\Local Settings\Application Data\Sony Ericsson
2009-05-30 22:44 . 2009-05-30 22:44 -------- d-----w- c:\documents and settings\All Users\Application Data\BVRP Software
2009-05-30 22:40 . 2008-02-12 13:59 221184 ----a-w- c:\windows\system32\wmpns.dll
2009-05-30 22:40 . 2009-05-30 22:40 -------- d-----w- c:\program files\Windows Media Connect 2
2009-05-30 21:25 . 2009-06-12 06:43 -------- d-----w- c:\program files\Wise Disk Cleaner
2009-05-30 20:58 . 2009-05-30 20:58 -------- d-----r- c:\program files\Skype
2009-05-29 10:50 . 2009-05-29 10:50 -------- d-----w- c:\windows\Sun
2009-05-28 15:08 . 2009-05-28 15:08 -------- d-----w- c:\program files\CCleaner
2009-05-22 18:41 . 2009-05-22 18:41 -------- d-----w- c:\documents and settings\All Users\Application Data\{8CD7F5AF-ECFA-4793-BF40-D8F42DBFF906}
2009-05-22 18:34 . 2009-05-22 18:34 -------- d-----w- c:\documents and settings\PC\Local Settings\Application Data\Apple
2009-05-22 11:16 . 2009-05-22 11:16 -------- d-----w- c:\documents and settings\PC\Application Data\ESET
2009-05-22 10:29 . 2009-05-22 10:31 -------- d-----w- c:\program files\Spybot - Search & Destroy
2009-05-21 21:27 . 2009-05-21 21:27 -------- d-----w- c:\documents and settings\NetworkService\Local Settings\Application Data\Labpixies
2009-05-21 21:27 . 2009-05-21 21:27 -------- d-----w- c:\documents and settings\NetworkService\Local Settings\Application Data\Apple
2009-05-21 05:17 . 2009-06-03 13:32 -------- d-----w- c:\documents and settings\LocalService\Local Settings\Application Data\Google
2009-05-20 07:50 . 2009-05-20 07:50 -------- d-----w- c:\documents and settings\NetworkService\Local Settings\Application Data\Google
2009-05-20 07:49 . 2009-05-20 07:49 -------- d-----w- c:\windows\system32\wbem\Repository
2009-05-19 18:40 . 2009-05-20 18:16 -------- d-----w- c:\windows\Downloaded Program Files
2009-05-19 16:01 . 2009-05-20 08:22 -------- d-----w- c:\program files\Pothos
2009-05-18 21:56 . 2009-05-18 21:56 -------- d-----w- c:\program files\filehippo.com
2009-05-18 20:37 . 2009-05-30 19:58 -------- d-----w- c:\program files\Wisdom-soft
2009-05-18 20:37 . 2009-05-18 20:37 -------- d-----w- c:\program files\Wisdom-soft ScreenHunter 5 Free
2009-05-18 20:35 . 2009-05-19 16:12 -------- d-----w- c:\program files\ICQ6.5
2009-05-16 22:43 . 2009-05-16 22:43 -------- d-----w- c:\documents and settings\PC\Application Data\Sproqit Technologies

.
(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2009-06-15 21:16 . 2009-04-30 11:58 -------- d-----w- c:\program files\PeerGuardian2
2009-06-15 19:38 . 2008-12-09 20:17 -------- d-----w- c:\program files\ICQ6Toolbar
2009-06-15 19:22 . 2008-12-23 19:56 -------- d-----w- c:\documents and settings\All Users\Application Data\Google Updater
2009-06-15 19:11 . 2009-03-07 17:07 -------- d-----w- c:\documents and settings\All Users\Application Data\Spybot - Search & Destroy
2009-06-15 18:56 . 2009-03-17 16:26 -------- d-----w- c:\program files\INŠTALÁCIE
2009-06-15 18:24 . 2008-11-01 15:31 1 ----a-w- c:\documents and settings\PC\Application Data\OpenOffice.org\3\user\uno_packages\cache\stamp.sys
2009-06-15 12:00 . 2009-03-13 10:36 -------- d-----w- c:\documents and settings\PC\Application Data\AIMP
2009-06-15 08:37 . 2008-11-01 14:44 196608 ----a-w- c:\windows\system32\drivers\nStandard.bin
2009-06-12 15:53 . 2009-04-25 12:15 -------- d-----w- c:\documents and settings\PC\Application Data\vlc
2009-06-12 15:49 . 2009-04-03 07:37 -------- d-----w- c:\documents and settings\PC\Application Data\DAEMON Tools Lite
2009-06-12 09:30 . 2009-06-12 09:28 -------- d-----w- c:\program files\K-Lite Codec Pack
2009-06-12 08:28 . 2009-04-22 15:48 -------- d-----w- c:\documents and settings\PC\Application Data\cspa
2009-06-08 13:23 . 2009-05-11 12:42 -------- d-----w- c:\program files\TuneUp Utilities 2009
2009-06-08 13:06 . 2009-02-07 14:37 -------- d-sh--w- c:\documents and settings\All Users\Application Data\{55A29068-F2CE-456C-9148-C869879E2357}
2009-06-08 12:59 . 2009-04-25 12:13 -------- d-----w- c:\program files\VideoLAN
2009-06-03 10:07 . 2008-12-13 19:31 -------- d-----w- c:\program files\iTunes
2009-06-03 10:07 . 2008-11-03 18:05 -------- d-----w- c:\program files\Common Files\Apple
2009-06-03 10:05 . 2008-12-13 19:30 -------- d-----w- c:\program files\QuickTime
2009-06-02 16:24 . 2008-12-23 19:56 -------- d-----w- c:\program files\Google
2009-06-02 16:11 . 2009-06-12 09:28 85504 ----a-w- c:\windows\system32\ff_vfw.dll
2009-05-30 22:35 . 2008-12-05 16:38 410984 ----a-w- c:\windows\system32\deploytk.dll
2009-05-30 22:13 . 2008-12-04 17:00 -------- d-----w- c:\documents and settings\All Users\Application Data\ESET
2009-05-30 21:01 . 2008-11-22 12:52 -------- d-----w- c:\documents and settings\PC\Application Data\Skype
2009-05-30 20:58 . 2008-11-22 12:51 -------- d-----w- c:\documents and settings\All Users\Application Data\Skype
2009-05-29 21:37 . 2009-06-12 09:28 205824 ----a-w- c:\windows\system32\xvidvfw.dll
2009-05-29 21:31 . 2009-06-12 09:28 881664 ----a-w- c:\windows\system32\xvidcore.dll
2009-05-29 11:36 . 2009-03-12 22:33 2060288 ----a-w- c:\windows\system32\usbaaplrc.dll
2009-05-29 11:36 . 2008-11-03 18:05 39424 ----a-w- c:\windows\system32\drivers\usbaapl.sys
2009-05-19 16:12 . 2009-03-23 20:41 -------- d-----w- c:\program files\Laplink Everywhere
2009-05-19 16:11 . 2009-04-24 16:41 -------- d-----w- c:\program files\SpeedBit Video Accelerator
2009-05-19 16:11 . 2009-05-07 22:41 -------- d-----w- c:\program files\QuickMediaConverter
2009-05-19 16:11 . 2009-03-31 08:06 -------- d-----w- c:\program files\Common Files\intervations
2009-05-19 16:11 . 2009-02-21 11:18 -------- d-----w- c:\program files\MP3Gain
2009-05-19 16:11 . 2009-02-12 18:39 -------- d-----w- c:\program files\data
2009-05-19 16:10 . 2009-02-12 20:29 -------- d-----w- c:\program files\Common Files\Common Share
2009-05-19 16:10 . 2008-11-04 14:16 -------- d-----w- c:\documents and settings\PC\Application Data\Zoner
2009-05-19 16:10 . 2008-11-29 12:34 -------- d-----w- c:\documents and settings\PC\Application Data\Corel
2009-05-19 16:10 . 2008-11-26 10:26 -------- d-----w- c:\documents and settings\PC\Application Data\NCH Swift Sound
2009-05-19 16:10 . 2008-11-03 18:06 -------- d-----w- c:\documents and settings\PC\Application Data\Apple Computer
2009-05-19 16:10 . 2008-11-26 10:27 -------- d-----w- c:\documents and settings\All Users\Application Data\NCH Swift Sound
2009-05-19 16:09 . 2009-04-26 21:37 -------- d-----w- c:\documents and settings\PC\Application Data\XnView
2009-05-18 20:35 . 2008-11-19 19:18 -------- d-----w- c:\documents and settings\All Users\Application Data\ICQ
2009-05-15 14:37 . 2008-11-19 18:29 -------- d-----w- c:\documents and settings\PC\Application Data\Sony
2009-05-15 14:36 . 2009-05-15 14:36 -------- d-----w- c:\program files\Common Files\Sony Shared
2009-05-15 14:36 . 2009-05-15 14:36 -------- d-----w- c:\program files\Sony
2009-05-15 14:36 . 2008-11-04 06:53 -------- d-----w- c:\program files\Sony Ericsson
2009-05-15 14:12 . 2009-05-15 14:12 148736 ----a-w- c:\documents and settings\All Users\Application Data\hpeE99C.dll
2009-05-15 14:12 . 2009-05-15 14:12 148736 ----a-w- c:\documents and settings\All Users\Application Data\hpeE99C.dll
2009-05-15 14:12 . 2008-11-01 20:36 -------- d--h--w- c:\program files\InstallShield Installation Information
2009-05-14 20:50 . 2009-05-14 20:50 -------- d-----w- c:\documents and settings\PC\Application Data\KC Softwares
2009-05-14 13:49 . 2009-05-14 13:49 55768 ----a-w- c:\windows\system32\drivers\epfwtdi.sys
2009-05-14 13:49 . 2009-05-14 13:49 33096 ----a-w- c:\windows\system32\drivers\epfwndis.sys
2009-05-14 13:49 . 2009-05-14 13:49 133000 ----a-w- c:\windows\system32\drivers\epfw.sys
2009-05-14 13:47 . 2009-05-14 13:47 107256 ----a-w- c:\windows\system32\drivers\ehdrv.sys
2009-05-14 13:41 . 2009-05-14 13:41 114472 ----a-w- c:\windows\system32\drivers\eamon.sys
2009-05-13 11:48 . 2009-05-13 11:48 -------- d-----w- c:\program files\Defraggler
2009-05-13 05:15 . 2008-02-12 13:59 915456 ----a-w- c:\windows\system32\wininet.dll
2009-05-08 23:16 . 2009-05-08 23:16 -------- d-----w- c:\documents and settings\All Users\Application Data\DFX
2009-05-08 23:16 . 2009-05-08 23:16 -------- d-----w- c:\program files\Common Files\DFX
2009-05-07 22:03 . 2009-05-07 22:03 -------- d-----w- c:\program files\TweakNow PowerPack 2009
2009-05-07 17:38 . 2009-05-07 17:34 408522 ----a-w- c:\documents and settings\PC\Application Data\Microsoft\Installer\{B435AE22-F62A-4402-A4E5-E612631B92C9}\_4ae13d6c.exe
2009-05-07 17:38 . 2009-05-07 17:34 408522 ----a-w- c:\documents and settings\PC\Application Data\Microsoft\Installer\{B435AE22-F62A-4402-A4E5-E612631B92C9}\_294823.exe
2009-05-07 17:38 . 2009-05-07 17:34 408522 ----a-w- c:\documents and settings\PC\Application Data\Microsoft\Installer\{B435AE22-F62A-4402-A4E5-E612631B92C9}\_18be6784.exe
2009-05-07 17:34 . 2009-05-07 17:34 -------- d-----w- c:\program files\JlgSolera
2009-05-07 16:57 . 2008-11-26 10:27 -------- d-----w- c:\program files\NCH Software
2009-05-07 16:20 . 2008-11-01 14:56 -------- d-----w- c:\program files\Common Files\Adobe
2009-05-07 15:32 . 2008-02-12 13:58 345600 ----a-w- c:\windows\system32\localspl.dll
2009-05-07 15:02 . 2009-05-07 15:02 12620 ---ha-w- c:\windows\system32\mlfcache.dat
2009-05-05 21:01 . 2009-05-05 21:01 -------- d-----w- c:\documents and settings\PC\Application Data\Red Kawa
2009-05-05 20:59 . 2009-05-05 20:59 -------- d-----w- c:\program files\Red Kawa
2009-05-04 15:42 . 2009-05-04 15:42 -------- d-----w- c:\documents and settings\PC\Application Data\Smart PC Solutions
2009-05-04 15:42 . 2009-05-04 15:42 -------- d-----w- c:\program files\Smart PC Solutions
2009-05-04 12:30 . 2008-11-03 15:33 17088 ----a-w- c:\documents and settings\PC\Local Settings\Application Data\GDIPFONTCACHEV1.DAT
2009-05-04 12:17 . 2009-05-04 12:17 -------- d-----w- c:\program files\Joboshare
2009-05-04 12:07 . 2009-05-04 12:07 -------- d-----w- c:\program files\OpenOffice.org 3
2009-05-04 11:57 . 2009-03-13 10:36 -------- d-----w- c:\program files\AIMP2
2009-05-04 10:33 . 2009-04-15 14:20 -------- d-----w- c:\program files\Raxco
2009-05-04 08:33 . 2009-05-04 08:33 -------- d-----w- c:\documents and settings\All Users\Application Data\TVU Networks
2009-05-03 20:39 . 2009-02-18 07:30 2710528 ----a-w- c:\documents and settings\All Users\Application Data\TuneUp Software\TuneUp Utilities\WinStyler\tu_logonui.exe
2009-05-03 20:37 . 2009-02-18 07:28 2285056 ----a-w- c:\windows\system32\TUKernel.exe
2009-05-02 14:53 . 2009-05-02 14:53 -------- d-----w- c:\program files\ImageWalker
2009-05-02 13:12 . 2009-05-02 13:12 -------- d-----w- c:\program files\ClickClean
2009-05-02 12:49 . 2008-12-27 11:41 47360 ----a-w- c:\documents and settings\PC\Application Data\pcouffin.sys
2009-05-02 12:49 . 2008-12-27 11:41 47360 ----a-w- c:\documents and settings\PC\Application Data\pcouffin.sys
2009-05-01 21:02 . 2009-06-12 09:28 90112 ----a-w- c:\windows\system32\dpl100.dll
2009-05-01 21:02 . 2009-06-12 09:28 685056 ----a-w- c:\windows\system32\divx.dll
2009-05-01 18:30 . 2009-05-01 18:30 3366912 ----a-w- c:\windows\system32\GPhotos.scr
2009-04-29 14:01 . 2009-04-29 14:01 -------- d-----w- c:\program files\Paragon Software
2009-04-29 13:52 . 2008-11-01 20:35 -------- d-----w- c:\program files\Common Files\InstallShield
2009-04-28 18:46 . 2008-11-22 12:53 -------- d-----w- c:\documents and settings\PC\Application Data\skypePM
2009-04-27 23:09 . 2009-04-27 23:09 -------- d-----w- c:\documents and settings\PC\Application Data\FDRLab
2009-04-27 23:01 . 2009-04-27 23:01 -------- d-----w- c:\program files\Free Audio Pack
2009-04-27 22:52 . 2008-11-01 15:16 -------- d-----w- c:\program files\totalcmd
2009-04-27 21:09 . 2008-11-01 14:55 -------- d-----w- c:\program files\Common Files\Ahead
2009-04-27 15:35 . 2009-04-27 15:35 -------- d-----w- c:\documents and settings\All Users\Application Data\DynAdvance
2009-04-26 21:51 . 2009-04-26 21:51 -------- d-----w- c:\documents and settings\PC\Application Data\Auslogics
2009-04-26 21:42 . 2009-04-26 21:42 -------- d-----w- c:\program files\DynAdvance
2009-04-25 12:12 . 2009-04-25 12:09 16742799 ----a-w- c:\documents and settings\PC\Application Data\OpenCandy\vlc-0.9.9-win32.exe
2009-04-25 12:09 . 2009-03-30 12:57 -------- d-----w- c:\documents and settings\PC\Application Data\OpenCandy
2009-04-25 12:09 . 2009-04-25 12:09 -------- d-----w- c:\program files\VDOWNLOADER
2009-03-28 19:37 . 2009-03-28 17:11 122880 ----a-w- c:\program files\mozilla firefox\components\GoogleDesktopMozilla.dll
.

((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* empty entries & legit default entries are not shown
REGEDIT4

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"ctfmon.exe"="c:\windows\system32\ctfmon.exe" [2008-02-12 15360]
"SpeedBitVideoAccelerator"="c:\program files\SpeedBit Video Accelerator\VideoAccelerator.exe" [2009-04-24 2545256]
"Google Desktop"="c:\program files\Google\Google Desktop Search\GoogleDesktop.exe" [2009-05-16 30192]
"swg"="c:\program files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe" [2008-12-23 39408]
"PeerGuardian 2"="c:\program files\PeerGuardian2\pg2.exe" [2007-01-29 1432064]
"HDeck MFC Application"="c:\program files\VIA\VIAudioi\HDADeck\HDeck.exe" [2008-04-10 29757440]
"SpybotSD TeaTimer"="c:\program files\Spybot - Search & Destroy\TeaTimer.exe" [2009-03-05 2260480]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"NvCplDaemon"="c:\windows\system32\NvCpl.dll" [2007-09-16 8491008]
"egui"="c:\program files\ESET\ESET Smart Security\egui.exe" [2009-05-14 2029640]

[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="c:\windows\system32\CTFMON.EXE" [2008-02-12 15360]

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon]
"UIHost"="c:\windows\system32\logonui.exe"

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\sdauxservice]
@=""

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\sdcoreservice]
@=""

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Wdf01000.sys]
@="Driver"

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run-]
"OEXPRESS"=c:\documents and settings\All Users\Application Data\LangSoft\OETRN.EXE
"DAEMON Tools Lite"=c:\program files\DAEMON Tools Lite\daemon.exe
"filehippo.com"="c:\program files\filehippo.com\UpdateChecker.exe" /background
"ICQ"="c:\program files\ICQ6.5\ICQ.exe" silent
"Google Updater"=c:\program files\Google\Google Updater\GoogleUpdater.exe
"FTweakFCleaner"=c:\program files\FCleaner\FCleaner.exe

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run-]
"Adobe Reader Speed Launcher"="c:\program files\Adobe\Reader 9.0\Reader\Reader_sl.exe"
"ASUSGamerOSD"=c:\program files\ASUS\GamerOSD\GamerOSD.exe
"Google Quick Search Box"="c:\program files\Google\Quick Search Box\GoogleQuickSearchBox.exe" /autorun
"SearchSettings"=c:\program files\Search Settings\SearchSettings.exe
"iTunesHelper"="c:\program files\iTunes\iTunesHelper.exe"
"QuickTime Task"="c:\program files\QuickTime\qttask.exe" -atboottime

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile]
"EnableFirewall"= 0 (0x0)

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\Network Diagnostic\\xpnetdiag.exe"=
"%windir%\\system32\\sessmgr.exe"=
"c:\\Program Files\\Sony Ericsson\\Update Service\\Update Service.exe"=
"c:\\Program Files\\Bonjour\\mDNSResponder.exe"=
"c:\\Program Files\\Java\\jre6\\bin\\javaw.exe"=
"c:\\Program Files\\Sony Ericsson\\Sony Ericsson Media Manager\\MediaManager.exe"=
"c:\\Program Files\\Laplink Everywhere\\LLServerMain2.exe"=
"c:\\Program Files\\Laplink Everywhere\\WSC.EXE"=
"c:\\Program Files\\ICQ6.5\\ICQ.exe"=
"c:\\Program Files\\Skype\\Phone\\Skype.exe"=
"c:\\Program Files\\iTunes\\iTunes.exe"=

R0 hotcore3;hotcore3;c:\windows\system32\drivers\hotcore3.sys [29.4.2009 16:02 40368]
R1 ehdrv;ehdrv;c:\windows\system32\drivers\ehdrv.sys [14.5.2009 15:47 107256]
R2 ekrn;ESET Service;c:\program files\ESET\ESET Smart Security\ekrn.exe [14.5.2009 15:47 731840]
R2 ServerProxyService;ServerProxyService;c:\program files\Laplink Everywhere\ServerProxyService.exe [26.8.2005 10:14 131072]
R2 TuneUp.ProgramStatisticsSvc;TuneUp Program Statistics Service;c:\windows\system32\TUProgSt.exe [8.6.2009 15:18 603904]
R2 VideoAcceleratorService;VideoAcceleratorService;c:\progra~1\SPEEDB~2\VideoAcceleratorService.exe -start -scm --> c:\progra~1\SPEEDB~2\VideoAcceleratorService.exe -start -scm [?]
R2 winShadow;winShadow;c:\program files\Laplink\winShadow\shwSrvc.exe [26.8.2005 11:12 274432]
R3 VIAHdAudAddService;VIA High Definition Audio Driver Service;c:\windows\system32\drivers\viahduaa.sys [1.11.2008 16:20 222976]
S2 gupdate1c9b074adf011ba;Google Update Service (gupdate1c9b074adf011ba);c:\program files\Google\Update\GoogleUpdate.exe [29.3.2009 15:45 133104]
S3 esihdrv;esihdrv;\??\c:\docume~1\PC\LOCALS~1\Temp\esihdrv.sys --> c:\docume~1\PC\LOCALS~1\Temp\esihdrv.sys [?]
S3 ggflt;SEMC USB Flash Driver Filter;c:\windows\system32\drivers\ggflt.sys [18.3.2009 14:44 13224]
S3 GoogleDesktopManager-110408-113106;Google Desktop Manager 5.8.811.4345;c:\program files\Google\Google Desktop Search\GoogleDesktop.exe [28.3.2009 21:37 30192]
S3 tap0801;TAP-Win32 Adapter V8;c:\windows\system32\drivers\tap0801.sys [15.2.2007 19:48 26624]

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Svchost - NetSvcs
UxTuneUp

[HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\>{60B49E34-C7CC-11D0-8953-00A0C90347FF}]
"c:\windows\system32\rundll32.exe" "c:\windows\system32\iedkcs32.dll",BrandIEActiveSetup SIGNUP
.
Contents of the 'Scheduled Tasks' folder

2009-06-15 c:\windows\Tasks\1-Click Maintenance.job
- c:\program files\TuneUp Utilities 2009\OneClickStarter.exe [2008-12-11 19:36]

2009-06-11 c:\windows\Tasks\AppleSoftwareUpdate.job
- c:\program files\Apple Software Update\SoftwareUpdate.exe [2008-07-30 11:34]

2009-06-15 c:\windows\Tasks\Google Software Updater.job
- c:\program files\Google\Common\Google Updater\GoogleUpdaterService.exe [2008-12-23 18:05]

2009-06-15 c:\windows\Tasks\User_Feed_Synchronization-{85C6AB20-180E-4DBB-B8B0-D4674D7D1EEC}.job
- c:\windows\system32\msfeedssync.exe [2009-04-25 02:31]

2009-06-15 c:\windows\Tasks\Úklid 1 kliknutím.job
- c:\program files\TuneUp Utilities 2009\OneClickStarter.exe [2008-12-11 19:36]
.
.
------- Supplementary Scan -------
.
uStart Page = hxxp://start.icq.com/
uDefault_Search_URL = hxxp://www.google.com/ie
uInternet Settings,ProxyServer = socks=
uInternet Settings,ProxyOverride = *.local
uSearchURL,(Default) = hxxp://www.google.com/search?q=%s
IE: Add to Google Photos Screensa&ver - c:\windows\system32\GPhotos.scr/200
IE: {{7E6A20FB-153F-402c-A84B-1A64E1955D3D} - {7E6A20FB-153F-402c-A84B-1A64E1955D3D} - c:\documents and settings\All Users\Application Data\LangSoft\WebIE.dll
IE: {{CC963627-B1DC-40E0-B52A-CF21EE748449} - {CC963627-B1DC-40E0-B52A-CF21EE748449} - c:\documents and settings\All Users\Application Data\LangSoft\WebIE.dll
IE: {{CC963627-B1DC-40E0-B52A-CF21EE748450} - {CC963627-B1DC-40E0-B52A-CF21EE748450} - c:\documents and settings\All Users\Application Data\LangSoft\WebIE.dll
IE: {{CC963627-B1DC-40E0-B52A-CF21EE748451} - {CC963627-B1DC-40E0-B52A-CF21EE748451} - c:\documents and settings\All Users\Application Data\LangSoft\WebIE.dll
IE: {{CC963627-B1DC-40E0-B52A-CF21EE748452} - {CC963627-B1DC-40E0-B52A-CF21EE748452} - c:\documents and settings\All Users\Application Data\LangSoft\WebIE.dll
LSP: c:\progra~1\SPEEDB~2\sblsp.dll
DPF: {7530BFB8-7293-4D34-9923-61A11451AFC5} - hxxp://download.eset.com/special/eos/OnlineScanner.cab
.

**************************************************************************

catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2009-06-15 23:20
Windows 5.1.2600 Service Pack 3, v.5755 NTFS

scanning hidden processes ...

scanning hidden autostart entries ...

scanning hidden files ...

scan completed successfully
hidden files: 0

**************************************************************************
.
--------------------- DLLs Loaded Under Running Processes ---------------------

- - - - - - - > 'explorer.exe'(3264)
c:\windows\system32\WININET.dll
c:\windows\system32\ieframe.dll
c:\windows\system32\webcheck.dll
c:\windows\system32\WPDShServiceObj.dll
c:\windows\system32\PortableDeviceTypes.dll
c:\windows\system32\PortableDeviceApi.dll
.
------------------------ Other Running Processes ------------------------
.
c:\windows\system32\CF22739.exe
c:\program files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
c:\windows\ATKKBService.exe
c:\program files\Bonjour\mDNSResponder.exe
c:\program files\Diskeeper Corporation\Diskeeper\DkService.exe
c:\program files\Java\jre6\bin\jqs.exe
c:\program files\BurnAware Free\nmsaccessu.exe
c:\windows\system32\nvsvc32.exe
c:\progra~1\SPEEDB~2\VideoAcceleratorService.exe
c:\progra~1\SPEEDB~2\VideoAcceleratorEngine.exe
.
**************************************************************************
.
Completion time: 2009-06-15 23:22 - machine was rebooted
ComboFix-quarantined-files.txt 2009-06-15 21:22

Pre-Run: 73 580 498 944 bytes free
Post-Run: 6 adresárov, 73 498 099 712 voľných bajtov

312 --- E O F --- 2009-06-10 04:53

červený soubor zkontroluj na Virustotalu

c:\documents and settings\All Users\Application Data\hpeE99C.dll a vlož sem odkaz na výsledek.


Co tam máš od Nortona?

Od Nortona by som nemal mať, nič. PC je robené tak možno mi tam dal niečo konštruktér keď ho uvádzal do prevádzky. Pozriem v programoch. Ten súbor na virustotal je niekde zašitý, tak ťa nechcem zdržovať. Jednoducho apliccation data nájdem v tcm, ale keď ich hľadám v tabuľke pre virustotal tak tam nie sú.Takže ten súbor tam nemôžem dostať na odoslanie. Ale je to nejaký doplnok ku google, podľa ikony. Buď ku google chrome a neviem či to nie je náhodou skin na chrome, ktorý nikdy nešiel. Mám ho cez tune up shreder zlikvidovať?