Prosím o kontrolu HJT

[Fílek]

Není času na kecy, kliknul jsem na reklamu a vyjelo mi tam nějaké porno, nešlo to ukončit, nainstaloval se mi nějakej windows care, v nouzovém režimu jsem spustil MBAM, bylo 22 infikovaných položek (v pondělí jsem reinstalloval pc na visty), smazal jsem je a windows care je asi pryč, už nenabíhá při startu, ale myslím že tu furt nějaký bordel je. Tady je HJT a MBAM jsem neuložil, omlouvám se.


Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 12:51:10, on 10.2.2011
Platform: Windows Vista (WinNT 6.00.1904)
MSIE: Internet Explorer v7.00 (7.00.6000.16982)
Boot mode: Normal

Running processes:
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Windows\system32\taskeng.exe
C:\Windows\system32\taskeng.exe
C:\PROGRA~1\DUMETE~1\DUMeter.exe
C:\Program Files\Alwil Software\Avast5\AvastUI.exe
C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe
C:\Program Files\Common Files\Java\Java Update\jusched.exe
C:\Program Files\Windows Sidebar\sidebar.exe
C:\Users\Filek\AppData\Local\Google\Update\GoogleUpdate.exe
C:\Program Files\uTorrent\uTorrent.exe
C:\Program Files\Skype\Phone\Skype.exe
C:\Program Files\Steam\Steam.exe
C:\Windows\System32\mobsync.exe
C:\Program Files\Skype\Plugin Manager\skypePM.exe
C:\Users\Filek\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\Filek\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\Filek\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\Filek\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\Filek\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Windows\system32\SearchFilterHost.exe
C:\Program Files\Trend Micro\HiJackThis\HiJackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
O1 - Hosts: ::1 localhost
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre6\bin\ssv.dll
O2 - BHO: SkypeIEPluginBHO - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O4 - HKLM\..\Run: [Windows Defender] %ProgramFiles%\Windows Defender\MSASCui.exe -hide
O4 - HKLM\..\Run: [avast5] "C:\Program Files\Alwil Software\Avast5\avastUI.exe" /nogui
O4 - HKLM\..\Run: [RtHDVCpl] C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe -s
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Common Files\Java\Java Update\jusched.exe"
O4 - HKLM\..\Run: [Malwarebytes' Anti-Malware (reboot)] "C:\Program Files\Malwarebytes' Anti-Malware\mbam.exe" /runcleanupscript
O4 - HKCU\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun
O4 - HKCU\..\Run: [Google Update] "C:\Users\Filek\AppData\Local\Google\Update\GoogleUpdate.exe" /c
O4 - HKCU\..\Run: [uTorrent] "C:\Program Files\uTorrent\uTorrent.exe"
O4 - HKCU\..\Run: [Skype] "C:\Program Files\Skype\Phone\Skype.exe" /nosplash /minimized
O4 - HKCU\..\Run: [DU Meter] C:\Program Files\DU Meter\DUMeter.exe
O4 - HKCU\..\Run: [Steam] "C:\Program Files\Steam\Steam.exe" -silent
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'NETWORK SERVICE')
O9 - Extra button: Skype Plug-In - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O9 - Extra 'Tools' menuitem: Skype Plug-In - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O18 - Protocol: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O22 - SharedTaskScheduler: Component Categories cache daemon - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\Windows\system32\browseui.dll
O23 - Service: avast! Antivirus - AVAST Software - C:\Program Files\Alwil Software\Avast5\AvastSvc.exe
O23 - Service: DU Meter Service (DUMeterSvc) - Hagel Technologies Ltd. - C:\Program Files\DU Meter\DUMeterSvc.exe
O23 - Service: NVIDIA Driver Helper Service (NVSvc) - NVIDIA Corporation - C:\Windows\system32\nvvsvc.exe
O23 - Service: PnkBstrA - Unknown owner - C:\Windows\system32\PnkBstrA.exe
O23 - Service: Steam Client Service - Valve Corporation - C:\Program Files\Common Files\Steam\SteamService.exe
O23 - Service: NVIDIA Stereoscopic 3D Driver Service (Stereo Service) - NVIDIA Corporation - C:\Program Files\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe

--
End of file - 5303 bytes

[Reklama]

[memphisto]

HJT vypadá čistě

Vypni rezidentní štít antiviru a antispywaru
Stáhni si ComboFix (by sUBs)
a ulož si ho na plochu.
Ukonči všechna aktivní okna a spusť ho.
- Po spuštění se zobrazí podmínky užití, potvrď je stiskem tlačítka Ano
- Dále postupuj dle pokynů, během aplikování ComboFixu neklikej do zobrazujícího se okna
- Po dokončení skenování by měl program vytvořit log - C:\ComboFix.txt - zkopíruj sem prosím celý jeho obsah

[Fílek]

ComboFix 11-02-09.04 - Filek 10.02.2011 13:16:05.1.2 - x86
Microsoft® Windows Vista™ Home Premium 6.0.6000.0.1250.420.1029.18.3071.2206 [GMT 1:00]
Spuštěný z: c:\users\Filek\Desktop\ComboFix.exe
.

((((((((((((((((((((((((((((((((((((((( Ostatní výmazy )))))))))))))))))))))))))))))))))))))))))))))))))
.

C:\Thumbs.db

.
((((((((((((((((((((((((( Soubory vytvořené od 2011-01-10 do 2011-02-10 )))))))))))))))))))))))))))))))
.

2011-02-10 12:20 . 2011-02-10 12:20 -------- d-----w- c:\users\Default\AppData\Local\temp
2011-02-10 12:02 . 2011-02-10 12:02 -------- d--h--w- c:\windows\msdownld.tmp
2011-02-10 11:49 . 2011-02-10 11:49 -------- d-----w- c:\program files\Trend Micro
2011-02-10 11:45 . 2011-02-10 11:45 -------- d-----w- c:\program files\CCleaner
2011-02-10 11:43 . 2011-02-10 11:43 -------- d-----w- c:\programdata\Malwarebytes
2011-02-10 11:43 . 2010-12-20 17:09 38224 ----a-w- c:\windows\system32\drivers\mbamswissarmy.sys
2011-02-10 11:43 . 2010-12-20 17:08 20952 ----a-w- c:\windows\system32\drivers\mbam.sys
2011-02-10 11:43 . 2011-02-10 11:43 -------- d-----w- c:\program files\Malwarebytes' Anti-Malware
2011-02-09 12:42 . 2011-02-09 12:42 88576 ----a-w- c:\windows\system32\infocardapi.dll
2011-02-09 12:42 . 2011-02-09 12:42 579584 ----a-w- c:\windows\system32\icardagt.exe
2011-02-09 12:42 . 2011-02-09 12:42 28160 ----a-w- c:\windows\system32\infocardcpl.cpl
2011-02-09 12:42 . 2011-02-09 12:42 11776 ----a-w- c:\windows\system32\icardres.dll
2011-02-09 12:42 . 2011-02-09 12:42 106520 ----a-w- c:\windows\system32\PresentationCFFRasterizerNative_v0300.dll
2011-02-09 12:41 . 2011-02-09 12:41 779800 ----a-w- c:\windows\system32\PresentationNative_v0300.dll
2011-02-09 12:41 . 2011-02-09 12:41 350744 ----a-w- c:\windows\system32\PresentationHost.exe
2011-02-09 12:41 . 2011-02-09 12:41 33304 ----a-w- c:\windows\system32\PresentationHostProxy.dll
2011-02-09 12:28 . 2010-06-02 03:55 74072 ----a-w- c:\windows\system32\XAPOFX1_5.dll
2011-02-09 12:28 . 2010-06-02 03:55 527192 ----a-w- c:\windows\system32\XAudio2_7.dll
2011-02-09 12:28 . 2010-06-02 03:55 239960 ----a-w- c:\windows\system32\xactengine3_7.dll
2011-02-09 12:28 . 2010-05-26 10:41 2106216 ----a-w- c:\windows\system32\D3DCompiler_43.dll
2011-02-09 12:28 . 2010-05-26 10:41 1868128 ----a-w- c:\windows\system32\d3dcsx_43.dll
2011-02-09 12:28 . 2010-05-26 10:41 470880 ----a-w- c:\windows\system32\d3dx10_43.dll
2011-02-09 12:28 . 2010-05-26 10:41 248672 ----a-w- c:\windows\system32\d3dx11_43.dll
2011-02-09 12:28 . 2010-05-26 10:41 1998168 ----a-w- c:\windows\system32\D3DX9_43.dll
2011-02-09 12:19 . 2010-02-04 09:01 74072 ----a-w- c:\windows\system32\XAPOFX1_4.dll
2011-02-09 12:19 . 2010-02-04 09:01 528216 ----a-w- c:\windows\system32\XAudio2_6.dll
2011-02-09 12:19 . 2010-02-04 09:01 238936 ----a-w- c:\windows\system32\xactengine3_6.dll
2011-02-09 12:19 . 2010-02-04 09:01 22360 ----a-w- c:\windows\system32\X3DAudio1_7.dll
2011-02-09 11:48 . 2011-02-09 11:48 -------- d-----w- c:\program files\Atari
2011-02-09 09:34 . 2011-02-10 11:47 -------- d-----w- c:\programdata\NVIDIA
2011-02-09 09:30 . 2011-01-08 03:27 57960 ----a-w- c:\windows\system32\OpenCL.dll
2011-02-09 09:30 . 2011-01-08 03:27 5653096 ----a-w- c:\windows\system32\nvwgf2um.dll
2011-02-09 09:30 . 2011-01-08 03:27 15047272 ----a-w- c:\windows\system32\nvoglv32.dll
2011-02-09 09:30 . 2011-01-08 03:27 941160 ----a-w- c:\windows\system32\nvdispco322090.dll
2011-02-09 09:30 . 2011-01-08 03:27 837736 ----a-w- c:\windows\system32\nvgenco322040.dll
2011-02-09 09:30 . 2011-01-08 03:27 2895976 ----a-w- c:\windows\system32\nvcuvid.dll
2011-02-09 09:30 . 2011-01-08 03:27 2251368 ----a-w- c:\windows\system32\nvcuvenc.dll
2011-02-09 09:30 . 2011-01-08 03:27 10467656 ----a-w- c:\windows\system32\drivers\nvlddmkm.sys
2011-02-09 09:30 . 2011-01-08 03:27 4941928 ----a-w- c:\windows\system32\nvcuda.dll
2011-02-09 09:30 . 2011-01-08 03:27 1965672 ----a-w- c:\windows\system32\nvapi.dll
2011-02-09 09:30 . 2011-01-08 03:27 13011560 ----a-w- c:\windows\system32\nvcompiler.dll
2011-02-09 09:30 . 2011-02-09 09:30 -------- d-----w- C:\NVIDIA
2011-02-09 08:35 . 2011-02-09 08:35 -------- d-----w- c:\program files\Webteh
2011-02-09 08:32 . 2011-02-09 08:32 -------- d-----w- c:\program files\MediaInfo
2011-02-09 07:31 . 2011-02-09 07:31 83968 ----a-w- c:\windows\system32\dnsrslvr.dll
2011-02-09 07:31 . 2011-02-09 07:31 24576 ----a-w- c:\windows\system32\dnscacheugc.exe
2011-02-09 07:30 . 2011-02-09 07:30 53760 ----a-w- c:\windows\system32\drivers\hdaudbus.sys
2011-02-08 22:21 . 2011-02-08 22:21 72704 ----a-w- c:\windows\system32\fontsub.dll
2011-02-08 22:21 . 2011-02-08 22:21 34304 ----a-w- c:\windows\system32\atmlib.dll
2011-02-08 22:21 . 2011-02-08 22:21 289792 ----a-w- c:\windows\system32\atmfd.dll
2011-02-08 22:21 . 2011-02-08 22:21 24064 ----a-w- c:\windows\system32\lpk.dll
2011-02-08 22:21 . 2011-02-08 22:21 156672 ----a-w- c:\windows\system32\t2embed.dll
2011-02-08 22:21 . 2011-02-08 22:21 10240 ----a-w- c:\windows\system32\dciman32.dll
2011-02-08 22:19 . 2011-02-08 22:19 61440 ----a-w- c:\windows\system32\winipsec.dll
2011-02-08 22:19 . 2011-02-08 22:19 361984 ----a-w- c:\windows\system32\IPSECSVC.DLL
2011-02-08 22:19 . 2011-02-08 22:19 28672 ----a-w- c:\windows\system32\FwRemoteSvr.dll
2011-02-08 22:19 . 2011-02-08 22:19 272896 ----a-w- c:\windows\system32\polstore.dll
2011-02-08 22:17 . 2011-02-08 22:17 84992 ----a-w- c:\windows\system32\drivers\srvnet.sys
2011-02-08 22:17 . 2011-02-08 22:17 306688 ----a-w- c:\windows\system32\drivers\srv.sys
2011-02-08 22:15 . 2011-02-08 22:15 9728 ----a-w- c:\windows\system32\TCPSVCS.EXE
2011-02-08 22:15 . 2011-02-08 22:15 8704 ----a-w- c:\windows\system32\HOSTNAME.EXE
2011-02-08 22:15 . 2011-02-08 22:15 27136 ----a-w- c:\windows\system32\NETSTAT.EXE
2011-02-08 22:15 . 2011-02-08 22:15 19968 ----a-w- c:\windows\system32\ARP.EXE
2011-02-08 22:15 . 2011-02-08 22:15 17920 ----a-w- c:\windows\system32\ROUTE.EXE
2011-02-08 22:15 . 2011-02-08 22:15 15360 ----a-w- c:\windows\system32\netevent.dll
2011-02-08 22:15 . 2011-02-08 22:15 11264 ----a-w- c:\windows\system32\MRINFO.EXE
2011-02-08 22:15 . 2011-02-08 22:15 103936 ----a-w- c:\windows\system32\netiohlp.dll
2011-02-08 22:15 . 2011-02-08 22:15 10240 ----a-w- c:\windows\system32\finger.exe
2011-02-08 22:15 . 2011-02-08 22:15 813568 ----a-w- c:\windows\system32\drivers\tcpip.sys
2011-02-08 22:15 . 2011-02-08 22:15 22016 ----a-w- c:\windows\system32\netiougc.exe
2011-02-08 22:15 . 2011-02-08 22:15 213592 ----a-w- c:\windows\system32\drivers\netio.sys
2011-02-08 22:15 . 2011-02-08 22:15 167424 ----a-w- c:\windows\system32\tcpipcfg.dll
2011-02-08 22:14 . 2011-02-08 22:14 704000 ----a-w- c:\windows\system32\PhotoScreensaver.scr
2011-02-08 22:14 . 2011-02-08 22:14 356352 ----a-w- c:\windows\system32\wbem\wbemcomn.dll
2011-02-08 22:14 . 2011-02-08 22:14 258232 ----a-w- c:\windows\system32\drivers\acpi.sys
2011-02-08 22:14 . 2011-02-08 22:14 24064 ----a-w- c:\windows\system32\wtsapi32.dll
2011-02-08 22:14 . 2011-02-08 22:14 2027008 ----a-w- c:\windows\system32\win32k.sys
2011-02-08 22:14 . 2011-02-08 22:14 542720 ----a-w- c:\windows\system32\sysmain.dll
2011-02-08 22:13 . 2011-02-08 22:13 194560 ----a-w- c:\windows\system32\WebClnt.dll
2011-02-08 22:13 . 2011-02-08 22:13 110080 ----a-w- c:\windows\system32\drivers\mrxdav.sys
2011-02-08 22:13 . 2011-02-08 22:13 67584 ----a-w- c:\windows\system32\wlanhlp.dll
2011-02-08 22:13 . 2011-02-08 22:13 47104 ----a-w- c:\windows\system32\wlanapi.dll
2011-02-08 22:13 . 2011-02-08 22:13 123904 ----a-w- c:\windows\system32\L2SecHC.dll
2011-02-08 22:13 . 2011-02-08 22:13 502272 ----a-w- c:\windows\system32\wlansvc.dll
2011-02-08 22:13 . 2011-02-08 22:13 297984 ----a-w- c:\windows\system32\wlansec.dll
2011-02-08 22:13 . 2011-02-08 22:13 290816 ----a-w- c:\windows\system32\wlanmsm.dll
2011-02-08 22:12 . 2011-02-08 22:12 2048 ----a-w- c:\windows\system32\msxml6r.dll
2011-02-08 22:12 . 2011-02-08 22:12 2048 ----a-w- c:\windows\system32\msxml3r.dll
2011-02-08 22:12 . 2011-02-08 22:12 1406464 ----a-w- c:\windows\system32\msxml6.dll
2011-02-08 22:12 . 2011-02-08 22:12 1260032 ----a-w- c:\windows\system32\msxml3.dll
2011-02-08 22:11 . 2011-02-08 22:11 216576 ----a-w- c:\windows\system32\msv1_0.dll
2011-02-08 22:10 . 2011-02-08 22:10 58368 ----a-w- c:\windows\system32\drivers\mrxsmb20.sys
2011-02-08 22:10 . 2011-02-08 22:10 211968 ----a-w- c:\windows\system32\drivers\mrxsmb10.sys
2011-02-08 22:10 . 2011-02-08 22:10 102400 ----a-w- c:\windows\system32\drivers\mrxsmb.sys
2011-02-08 22:10 . 2011-02-08 22:10 49664 ----a-w- c:\windows\system32\csrsrv.dll
2011-02-08 22:10 . 2011-02-08 22:10 376320 ----a-w- c:\windows\system32\winsrv.dll
2011-02-08 22:09 . 2011-02-08 22:09 98816 ----a-w- c:\windows\system32\mfps.dll
2011-02-08 22:09 . 2011-02-08 22:09 52736 ----a-w- c:\windows\system32\rrinstaller.exe
2011-02-08 22:09 . 2011-02-08 22:09 2855424 ----a-w- c:\windows\system32\mf.dll
2011-02-08 22:09 . 2011-02-08 22:09 24576 ----a-w- c:\windows\system32\mfpmp.exe
2011-02-08 22:09 . 2011-02-08 22:09 2048 ----a-w- c:\windows\system32\mferror.dll
2011-02-08 22:08 . 2011-02-08 22:08 3502480 ----a-w- c:\windows\system32\ntkrnlpa.exe
2011-02-08 22:08 . 2011-02-08 22:08 3468168 ----a-w- c:\windows\system32\ntoskrnl.exe
2011-02-08 22:06 . 2011-02-08 22:06 434176 ----a-w- c:\windows\system32\vbscript.dll
2011-02-08 22:05 . 2011-02-08 22:05 71680 ----a-w- c:\windows\system32\atl.dll
2011-02-08 22:04 . 2011-02-08 22:04 297472 ----a-w- c:\windows\system32\gdi32.dll
2011-02-08 22:04 . 2011-02-08 22:04 41984 ----a-w- c:\windows\system32\drivers\monitor.sys
2011-02-08 22:04 . 2011-02-08 22:04 1060920 ----a-w- c:\windows\system32\drivers\ntfs.sys
2011-02-08 22:02 . 2011-02-08 22:02 374456 ----a-w- c:\windows\system32\mcupdate_GenuineIntel.dll
2011-02-08 22:02 . 2011-02-08 22:02 500736 ----a-w- c:\windows\system32\msdtcprx.dll
2011-02-08 22:02 . 2011-02-08 22:02 30208 ----a-w- c:\windows\system32\xolehlp.dll
2011-02-08 22:01 . 2011-02-08 22:01 156160 ----a-w- c:\windows\system32\wkssvc.dll
2011-02-08 22:01 . 2011-02-08 22:01 36352 ----a-w- c:\windows\system32\tsgqec.dll
2011-02-08 22:01 . 2011-02-08 22:01 1871872 ----a-w- c:\windows\system32\mstscax.dll
2011-02-08 22:01 . 2011-02-08 22:01 116736 ----a-w- c:\windows\system32\aaclient.dll
2011-02-08 22:00 . 2011-02-08 22:00 303616 ----a-w- c:\windows\system32\wmpeffects.dll
2011-02-08 21:59 . 2011-02-08 21:59 414208 ----a-w- c:\windows\system32\msscp.dll
2011-02-08 21:58 . 2011-02-08 21:58 713728 ----a-w- c:\windows\system32\timedate.cpl
2011-02-08 21:58 . 2011-02-08 21:58 356864 ----a-w- c:\windows\system32\MediaMetadataHandler.dll
2011-02-08 21:57 . 2011-02-08 21:57 86016 ----a-w- c:\windows\system32\icfupgd.dll
2011-02-08 21:57 . 2011-02-08 21:57 63488 ----a-w- c:\windows\system32\drivers\mpsdrv.sys
2011-02-08 21:57 . 2011-02-08 21:57 61952 ----a-w- c:\windows\system32\cmifw.dll
2011-02-08 21:57 . 2011-02-08 21:57 396800 ----a-w- c:\windows\system32\MPSSVC.dll
2011-02-08 21:57 . 2011-02-08 21:57 392192 ----a-w- c:\windows\system32\FirewallAPI.dll
2011-02-08 21:57 . 2011-02-08 21:57 16896 ----a-w- c:\windows\system32\wfapigp.dll

.
(((((((((((((((((((((((((((((((((((((((( Find3M výpis ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2011-02-08 22:20 . 2011-02-08 22:20 52736 ----a-w- c:\windows\apppatch\iebrshim.dll
2011-02-08 21:49 . 2011-02-08 21:49 272384 ----a-w- c:\windows\system32\schannel.dll
2011-02-08 21:45 . 2011-02-08 21:45 5632 ----a-w- c:\windows\system32\drivers\cs-CZ\sermouse.sys.mui
2011-02-08 21:45 . 2011-02-08 21:45 4608 ----a-w- c:\windows\system32\drivers\cs-CZ\mouclass.sys.mui
2011-02-08 21:45 . 2011-02-08 21:45 4608 ----a-w- c:\windows\system32\drivers\cs-CZ\kbdclass.sys.mui
2011-02-08 21:45 . 2011-02-08 21:45 3072 ----a-w- c:\windows\system32\drivers\cs-CZ\mouhid.sys.mui
2011-02-08 21:45 . 2011-02-08 21:45 3072 ----a-w- c:\windows\system32\drivers\cs-CZ\kbdhid.sys.mui
2011-02-08 21:45 . 2011-02-08 21:45 10240 ----a-w- c:\windows\system32\drivers\cs-CZ\i8042prt.sys.mui
2011-02-08 21:45 . 2011-02-08 21:45 595456 ----a-w- c:\windows\system32\schedsvc.dll
2011-02-08 21:19 . 2011-02-08 21:19 449024 ----a-w- c:\windows\apppatch\AcSpecfc.dll
2011-02-08 21:19 . 2011-02-08 21:19 2560 ----a-w- c:\windows\apppatch\AcRes.dll
2011-02-08 21:19 . 2011-02-08 21:19 2143744 ----a-w- c:\windows\apppatch\AcGenral.dll
2011-02-08 21:19 . 2011-02-08 21:19 537600 ----a-w- c:\windows\apppatch\AcLayers.dll
2011-02-08 21:19 . 2011-02-08 21:19 173056 ----a-w- c:\windows\apppatch\AcXtrnal.dll
2011-01-08 03:27 . 2011-02-09 09:30 10920 ----a-w- c:\windows\system32\drivers\nvBridge.kmd
2011-01-08 03:27 . 2010-07-10 04:37 10078312 ----a-w- c:\windows\system32\nvd3dum.dll
2011-01-07 20:06 . 2011-01-07 20:06 580200 ----a-w- c:\windows\system32\easyUpdatusAPIU.dll
2011-01-07 20:06 . 2011-01-07 20:06 3597416 ----a-w- c:\windows\system32\nvcpl.dll
2011-01-07 20:06 . 2011-01-07 20:06 2620520 ----a-w- c:\windows\system32\nvsvc.dll
2011-01-07 20:06 . 2011-01-07 20:06 66664 ----a-w- c:\windows\system32\nvshext.dll
2011-01-07 20:06 . 2011-01-07 20:06 608872 ----a-w- c:\windows\system32\nvvsvc.exe
2011-01-07 20:06 . 2011-01-07 20:06 2558568 ----a-w- c:\windows\system32\nvsvcr.dll
2011-01-07 20:06 . 2011-01-07 20:06 111208 ----a-w- c:\windows\system32\nvmctray.dll
.

(((((((((((((((((((((((((((((((((( Spouštěcí body v registru )))))))))))))))))))))))))))))))))))))))))))))
.
.
*Poznámka* prázdné záznamy a legitimní výchozí údaje nejsou zobrazeny.
REGEDIT4

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Sidebar"="c:\program files\Windows Sidebar\sidebar.exe" [2006-11-02 1196032]
"Google Update"="c:\users\Filek\AppData\Local\Google\Update\GoogleUpdate.exe" [2011-02-07 136176]
"uTorrent"="c:\program files\uTorrent\uTorrent.exe" [2011-02-07 395128]
"Skype"="c:\program files\Skype\Phone\Skype.exe" [2011-01-26 15026056]
"DU Meter"="c:\program files\DU Meter\DUMeter.exe" [2011-01-14 2942856]
"Steam"="c:\program files\Steam\Steam.exe" [2011-02-08 1242448]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"avast5"="c:\program files\Alwil Software\Avast5\avastUI.exe" [2011-01-13 3396624]
"RtHDVCpl"="c:\program files\Realtek\Audio\HDA\RtHDVCpl.exe" [2009-12-25 8129056]
"SunJavaUpdateSched"="c:\program files\Common Files\Java\Java Update\jusched.exe" [2010-02-18 248040]
"Malwarebytes' Anti-Malware (reboot)"="c:\program files\Malwarebytes' Anti-Malware\mbam.exe" [2010-12-20 963976]

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\drivers32]
"aux"=wdmaud.drv

R3 DUMeterDrv;Hagel Technologies DU Meter traffic accounting driver;c:\program files\DU Meter\DUMETR32.SYS [2011-01-14 18064]
S1 aswSP;aswSP; [x]
S2 aswFsBlk;aswFsBlk; [x]
S2 aswMonFlt;aswMonFlt;c:\windows\system32\drivers\aswMonFlt.sys [2011-01-13 51280]
S2 DUMeterSvc;DU Meter Service;c:\program files\DU Meter\DUMeterSvc.exe [2009-03-13 513536]
S2 Stereo Service;NVIDIA Stereoscopic 3D Driver Service;c:\program files\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe [2011-01-07 378984]
S3 3xHybrid;3xHybrid service;c:\windows\system32\DRIVERS\3xHybrid.sys [2007-04-20 674048]

.
Obsah adresáře 'Naplánované úlohy'

2011-02-09 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2035092304-1468054669-3590152080-1000Core.job
- c:\users\Filek\AppData\Local\Google\Update\GoogleUpdate.exe [2011-02-07 14:38]

2011-02-10 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2035092304-1468054669-3590152080-1000UA.job
- c:\users\Filek\AppData\Local\Google\Update\GoogleUpdate.exe [2011-02-07 14:38]
.

**************************************************************************

catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2011-02-10 13:20
Windows 6.0.6000 NTFS

skenování skrytých procesů ...

skenování skrytých položek 'Po spuštění' ...

skenování skrytých souborů ...

sken byl úspešně dokončen
skryté soubory: 0

**************************************************************************

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\DUMeterSvc]
"ImagePath"="c:\program files\DU Meter\DUMeterSvc.exe /startedbyscm:E1F6D4BE-40E33354-DUMeterService"
.
--------------------- ZAMKNUTÉ KLÍČE V REGISTRU ---------------------

[HKEY_USERS\S-1-5-21-2035092304-1468054669-3590152080-1000\Software\SecuROM\License information*]
"datasecu"=hex:e2,ba,de,39,30,9a,95,b5,c1,cb,72,4c,59,81,54,5e,40,47,64,ab,01,
e3,d8,a4,e5,e7,3e,e7,73,98,8f,8b,95,e5,eb,bc,c7,a4,af,c5,24,5d,49,16,04,00,\
"rkeysecu"=hex:20,45,79,63,c7,29,87,51,fa,d8,de,5a,ee,06,78,65
.
Celkový čas: 2011-02-10 13:21:28
ComboFix-quarantined-files.txt 2011-02-10 12:21

Před spuštěním: Volných bajtů: 142 434 385 920
Po spuštění: Volných bajtů: 142 203 187 200

- - End Of File - - D29AD421AE92D4C099A06F310B991E5B


Teď už zase věřím ComboFixu, tenkrát to asi byla nějaká chyba v kombinaci s tím Eset smart security.
Co to bude dál?

[jaro3]

Otevři si Poznámkový blok (Start -> Spustit... a napiš do okna Notepad a dej Ok.
Zkopíruj do něj následující celý text označený zeleně:
Poznámka: Nepoužij k označení skriptu funkci VYBRAT VŠE

Kód: Vybrat vše

File::
c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2035092304-1468054669-3590152080-1000Core.job
c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2035092304-1468054669-3590152080-1000UA.job

Folder::
c:\windows\msdownld.tmp

Zvol možnost Soubor -> Uložit jako... a nastav tyto parametry:
Název souboru: zde napiš: CFScript.txt
Uložit jako typ: tak tam vyber Všechny soubory
Ulož soubor na plochu.
Ukonči všechna aktivní okna.

Uchop myší vytvořený skript CFScript.txt, přemísti ho nad stažený program ComboFix.exe a když se oba soubory překryjí, skript upusť.
- Automaticky se spustí ComboFix
- Vlož sem log, který vyběhne v závěru čistícího procesu + nový log z HJT


Upozornění : Může se stát, že po aplikaci skriptu a restartu počítače Windows nenaběhnou, pak znovu restartuj počítač, mačkej F8 a pak zvol poslední známou funkční konfiguraci.