Prosím o kontrolu logu !

[AntonioSpeedy]

Zdravím mám pomalý pc sekají se mi videa hlavně zvuk a nečiné procesy mi zabýrají 99 % CPU jiné aplikace hodně málo radši sem dávám log.

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 10:43:20, on 11.11.2012
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\AVAST Software\Avast\AvastSvc.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\igfxtray.exe
C:\WINDOWS\system32\hkcmd.exe
C:\WINDOWS\system32\igfxpers.exe
C:\Program Files\AVAST Software\Avast\avastUI.exe
C:\Program Files\Ask.com\Updater\Updater.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Windows Desktop Search\WindowsSearch.exe
C:\Program Files\PANDORA.TV\PanService\PandoraService.exe
C:\WINDOWS\system32\SearchIndexer.exe
C:\WINDOWS\system32\wuauclt.exe
C:\WINDOWS\system32\taskmgr.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\WINDOWS\system32\SearchProtocolHost.exe
C:\Documents and Settings\Speedy\Plocha\HiJackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://eu.ask.com/?l=dis&o=14672
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Odkazy
R3 - URLSearchHook: UrlSearchHook Class - {00000000-6E41-4FD3-8538-502F5495E5FC} - C:\Program Files\Ask.com\GenericAskToolbar.dll
O2 - BHO: avast! WebRep - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll
O2 - BHO: Ask Toolbar BHO - {D4027C7F-154A-4066-A1AD-4243D8127440} - C:\Program Files\Ask.com\GenericAskToolbar.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O3 - Toolbar: avast! WebRep - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll
O3 - Toolbar: Ask Toolbar - {D4027C7F-154A-4066-A1AD-4243D8127440} - C:\Program Files\Ask.com\GenericAskToolbar.dll
O4 - HKLM\..\Run: [DWPersistentQueuedReporting] C:\Program Files\Common Files\Microsoft Shared\DW\DWTRIG20.EXE -a
O4 - HKLM\..\Run: [igfxtray] C:\WINDOWS\system32\igfxtray.exe
O4 - HKLM\..\Run: [igfxhkcmd] C:\WINDOWS\system32\hkcmd.exe
O4 - HKLM\..\Run: [igfxpers] C:\WINDOWS\system32\igfxpers.exe
O4 - HKLM\..\Run: [avast] "C:\Program Files\AVAST Software\Avast\avastUI.exe" /nogui
O4 - HKLM\..\Run: [AdobeAAMUpdater-1.0] "C:\Program Files\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe"
O4 - HKLM\..\Run: [SwitchBoard] C:\Program Files\Common Files\Adobe\SwitchBoard\SwitchBoard.exe
O4 - HKLM\..\Run: [AdobeCS5ServiceManager] "C:\Program Files\Common Files\Adobe\CS5ServiceManager\CS5ServiceManager.exe" -launchedbylogin
O4 - HKLM\..\Run: [ApnUpdater] "C:\Program Files\Ask.com\Updater\Updater.exe"
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [DAEMON Tools Lite] "C:\Program Files\DAEMON Tools Lite\DTLite.exe" -autorun
O4 - HKCU\..\Run: [Skype] "C:\Program Files\Skype\Phone\Skype.exe" /minimized /regrun
O4 - HKCU\..\Run: [Facebook Update] "C:\Documents and Settings\Speedy\Local Settings\Data aplikací\Facebook\Update\FacebookUpdate.exe" /c /nocrashserver
O4 - HKCU\..\Run: [uTorrent] "C:\Program Files\uTorrent\uTorrent.exe" /MINIMIZED
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\Run: [KB976002-v5] rundll32.exe advpack.dll,LaunchINFSection OPMWXPUP.inf,BrowserChoiceGoo (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - Global Startup: Windows Search.lnk = C:\Program Files\Windows Desktop Search\WindowsSearch.exe
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O17 - HKLM\System\CCS\Services\Tcpip\..\{964E1818-BC93-4942-8A12-1CF3F8CC22D0}: NameServer = 192.168.1.1
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O20 - Winlogon Notify: RailNotification - Invalid registry found
O22 - SharedTaskScheduler: Browseui preloader - {438755C2-A8BA-11D1-B96B-00A0C90312E1} - C:\WINDOWS\system32\browseui.dll
O22 - SharedTaskScheduler: Proces mezipaměti kategorií součástí - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\WINDOWS\system32\browseui.dll
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\WINDOWS\system32\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: avast! Antivirus - AVAST Software - C:\Program Files\AVAST Software\Avast\AvastSvc.exe
O23 - Service: Služba Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: Služba Google Update (gupdatem) (gupdatem) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Mozilla Foundation - C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe
O23 - Service: PandoraService (PanService) - Pandora.TV - C:\Program Files\PANDORA.TV\PanService\PandoraService.exe
O23 - Service: Skype Updater (SkypeUpdate) - Skype Technologies - C:\Program Files\Skype\Updater\Updater.exe
O23 - Service: SwitchBoard - Adobe Systems Incorporated - C:\Program Files\Common Files\Adobe\SwitchBoard\SwitchBoard.exe

--
End of file - 6960 bytes

[Reklama]

[Žbeky]

Nečinné procesy se jmenují nečinné od toho, že nic nečinní. Tzn. procento jejich využití ti jen ukazuje relativní množství dostupného výkonu

Odinstaluj ASK toolbar

Fixni:

Kód: Vybrat vše

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://eu.ask.com/?l=dis&o=14672
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Odkazy
R3 - URLSearchHook: UrlSearchHook Class - {00000000-6E41-4FD3-8538-502F5495E5FC} - C:\Program Files\Ask.com\GenericAskToolbar.dll
O2 - BHO: Ask Toolbar BHO - {D4027C7F-154A-4066-A1AD-4243D8127440} - C:\Program Files\Ask.com\GenericAskToolbar.dll
O3 - Toolbar: Ask Toolbar - {D4027C7F-154A-4066-A1AD-4243D8127440} - C:\Program Files\Ask.com\GenericAskToolbar.dll
O4 - HKLM\..\Run: [DWPersistentQueuedReporting] C:\Program Files\Common Files\Microsoft Shared\DW\DWTRIG20.EXE -a
O4 - HKLM\..\Run: [ApnUpdater] "C:\Program Files\Ask.com\Updater\Updater.exe"
O4 - HKCU\..\Run: [Facebook Update] "C:\Documents and Settings\Speedy\Local Settings\Data aplikací\Facebook\Update\FacebookUpdate.exe" /c /nocrashserver

Stáhni si ATF Cleaner
Poklepej na ATF Cleaner.exe, klikni na select all found, poté:
- Pokud používáš Firefox, klikni na Firefox nahoře a vyber: Select All, poté klikni na Empty Selected.
- Pokud používáš Operu, klikni nahoře na Operu a vyber: Select All, poté klikni na Empty Selected.
- Pokud používáš Chrome, nic dalšího nevybírej a dej Empty Selected.
Po vyčištění klikni na Exit k zavření programu.
ATF-Cleaner je jednoduchý nástroj na odstranění historie z webového prohlížeče. Program dokáže odstranit cache, cookies, historii a další stopy po surfování na Internetu. Mezi podporované prohlížeče patří Internet Explorer, Firefox a Opera. Aplikace navíc umí odstranit dočasné soubory Windows, vysypat koš atd.

Stáhni si Malwarebytes' Anti-Malware
Nainstaluj a spusť ho
- na konci instalace se ujisti že máš zvoleny/zatrhnuty obě možnosti:
Update Malwarebytes' Anti-Malware (Aktualizace Malwarebytes' Anti-Malware) a Launch Malwarebytes' Anti-Malware (Spustit aplikaci Malwarebytes' Anti-Malware), pokud jo tak klikni na tlačítko Finish
- pokud bude nalezena aktualizace, tak se stáhne a nainstaluje
- program se po té spustí a nech vybranou možnost Perform Quick Scan (Provést rychlý sken) a klikni na tlačítko Scan (Skenovat)
- po proběhnutí programu se ti objeví hláška tak klikni na OK a pak na tlačítko Show Results
- pak zvol možnost Save Logfile a ulož si log na plochu
- po té klikni na tlačítko Exit, objeví se ti hláška tak zvol Ano
(ZATÍM SÁM NIC NEMAŽ!).
Vlož sem pak obsah toho logu.

[AntonioSpeedy]

Malwarebytes Anti-Malware (Zkušební verze Malwarebytes Anti-Malware) 1.65.1.1000
www.malwarebytes.org

Verze databáze: v2012.11.11.02

Windows XP Service Pack 3 x86 NTFS
Internet Explorer 8.0.6001.18702
Speedy :: SPEEDY-BE7E54F4 [administrátor]

Ochrana: Povolena

11.11.2012 11:44:29
mbam-log-2012-11-11 (11-44-29).txt

Typ: Rychlá kontrola
Nastavení kontroly povoleno: Paměť | Po spuštění | Registr | Systémové soubory | Heuristická analýza Extra | Heuristická analýza Shuriken | PUP | PUM
Nastavení kontroly zakázáno: P2P
Kontrolované objekty: 186706
Uplynulý čas: 10 minut, 23 sekund

Nalezené procesy v paměti: 0
(Žádné škodlivé položky nebyly zjištěny)

Nalezené moduly v paměti: 0
(Žádné škodlivé položky nebyly zjištěny)

Nalezené klíče v registru: 0
(Žádné škodlivé položky nebyly zjištěny)

Nalezené hodnoty v registru: 0
(Žádné škodlivé položky nebyly zjištěny)

Nalezené datové položky v registru: 0
(Žádné škodlivé položky nebyly zjištěny)

Nalezené složky: 0
(Žádné škodlivé položky nebyly zjištěny)

Nalezené soubory: 0
(Žádné škodlivé položky nebyly zjištěny)

(konec)

[Orcus]

Stáhni si TDSSKiller

Na svojí plochu. Ujisti se , že máš zavřeny všechny ostatní aplikace a prohlížeče. Rozbal soubor a spusť TDSSKiller.exe. Restartuj PC . Log z TDSSKilleru najdeš zde:
C:\TDSSKiller.2.2.7.1._(datum)_log.txt , vlož sem prosím celý obsah logu.

====================================================

Vypni rezidentní štít antiviru a antispywaru
Stáhni si ComboFix (by sUBs)
a ulož si ho na plochu.
Ukonči všechna aktivní okna a spusť ho.
- Po spuštění se zobrazí podmínky užití, potvrď je stiskem tlačítka Ano
- Dále postupuj dle pokynů, během aplikování ComboFixu neklikej do zobrazujícího se okna
- Po dokončení skenování by měl program vytvořit log - C:\ComboFix.txt - zkopíruj sem prosím celý jeho obsah
Pokud bude po kontrole problém spustit aplikace nebo bude vyskakovat hláška o pokusu použít neplatnou operaci na klíč registru, který je označen pro odstranění, stačí restartovat počítač.

Pokud budou problémy , spusť v nouz. režimu.

[AntonioSpeedy]

Log z TDSSKiller

22:46:53.0781 1276 TDSS rootkit removing tool 2.8.15.0 Oct 31 2012 21:47:35
22:46:53.0984 1276 ============================================================
22:46:53.0984 1276 Current date / time: 2012/11/11 22:46:53.0984
22:46:53.0984 1276 SystemInfo:
22:46:53.0984 1276
22:46:53.0984 1276 OS Version: 5.1.2600 ServicePack: 3.0
22:46:53.0984 1276 Product type: Workstation
22:46:53.0984 1276 ComputerName: SPEEDY-BE7E54F4
22:46:53.0984 1276 UserName: Speedy
22:46:53.0984 1276 Windows directory: C:\WINDOWS
22:46:53.0984 1276 System windows directory: C:\WINDOWS
22:46:53.0984 1276 Processor architecture: Intel x86
22:46:53.0984 1276 Number of processors: 1
22:46:53.0984 1276 Page size: 0x1000
22:46:53.0984 1276 Boot type: Normal boot
22:46:53.0984 1276 ============================================================
22:46:55.0156 1276 Drive \Device\Harddisk0\DR0 - Size: 0x12A1F16000 (74.53 Gb), SectorSize: 0x200, Cylinders: 0x2601, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'K0', Flags 0x00000054
22:46:55.0156 1276 ============================================================
22:46:55.0156 1276 \Device\Harddisk0\DR0:
22:46:55.0156 1276 MBR partitions:
22:46:55.0156 1276 \Device\Harddisk0\DR0\Partition1: MBR, Type 0x7, StartLBA 0x3F, BlocksNum 0x4E1EDEC
22:46:55.0171 1276 \Device\Harddisk0\DR0\Partition2: MBR, Type 0x7, StartLBA 0x4E1EE6A, BlocksNum 0x46EF657
22:46:55.0171 1276 ============================================================
22:46:55.0203 1276 C: <-> \Device\Harddisk0\DR0\Partition1
22:46:55.0234 1276 D: <-> \Device\Harddisk0\DR0\Partition2
22:46:55.0234 1276 ============================================================
22:46:55.0234 1276 Initialize success
22:46:55.0234 1276 ============================================================
22:47:03.0781 1696 ============================================================
22:47:03.0781 1696 Scan started
22:47:03.0781 1696 Mode: Manual;
22:47:03.0781 1696 ============================================================
22:47:04.0343 1696 ================ Scan system memory ========================
22:47:04.0343 1696 System memory - ok
22:47:04.0359 1696 ================ Scan services =============================
22:47:04.0500 1696 [ 0352A73CD6B1782EA3ED7A03A8268F55 ] Aavmker4 C:\WINDOWS\system32\drivers\Aavmker4.sys
22:47:04.0500 1696 Aavmker4 - ok
22:47:04.0515 1696 Abiosdsk - ok
22:47:04.0531 1696 abp480n5 - ok
22:47:04.0578 1696 [ 4FE34F1F3126B61FCC6B2043AA8112C9 ] ACPI C:\WINDOWS\system32\DRIVERS\ACPI.sys
22:47:04.0578 1696 ACPI - ok
22:47:04.0625 1696 [ AFDFF022A01F0B11C776F0860C3B282F ] ACPIEC C:\WINDOWS\system32\drivers\ACPIEC.sys
22:47:04.0625 1696 ACPIEC - ok
22:47:04.0703 1696 [ 0CB0AA071C7B86A64F361DCFDF357329 ] AdobeFlashPlayerUpdateSvc C:\WINDOWS\system32\Macromed\Flash\FlashPlayerUpdateService.exe
22:47:04.0703 1696 AdobeFlashPlayerUpdateSvc - ok
22:47:04.0718 1696 adpu160m - ok
22:47:04.0765 1696 [ 11C04B17ED2ABBB4833694BCD644AC90 ] aeaudio C:\WINDOWS\system32\drivers\aeaudio.sys
22:47:04.0765 1696 aeaudio - ok
22:47:04.0796 1696 [ 8BED39E3C35D6A489438B8141717A557 ] aec C:\WINDOWS\system32\drivers\aec.sys
22:47:04.0796 1696 aec - ok
22:47:04.0828 1696 [ F6B7B1ECD7B41736BDB6FF4B092BCB79 ] AFD C:\WINDOWS\System32\drivers\afd.sys
22:47:04.0843 1696 AFD - ok
22:47:04.0843 1696 Aha154x - ok
22:47:04.0859 1696 aic78u2 - ok
22:47:04.0859 1696 aic78xx - ok
22:47:04.0906 1696 [ E0A6FA244B8624D78FE5FF6F56A33BAE ] Alerter C:\WINDOWS\system32\alrsvc.dll
22:47:04.0906 1696 Alerter - ok
22:47:04.0937 1696 [ 88842DE939A827577BF24243699AC80A ] ALG C:\WINDOWS\System32\alg.exe
22:47:04.0937 1696 ALG - ok
22:47:04.0953 1696 AliIde - ok
22:47:04.0953 1696 amsint - ok
22:47:04.0984 1696 [ 6B8E7A90E576D4FE308F97C69060A171 ] AppMgmt C:\WINDOWS\System32\appmgmts.dll
22:47:04.0984 1696 AppMgmt - ok
22:47:05.0000 1696 asc - ok
22:47:05.0000 1696 asc3350p - ok
22:47:05.0015 1696 asc3550 - ok
22:47:05.0156 1696 [ 776ACEFA0CA9DF0FAA51A5FB2F435705 ] aspnet_state C:\WINDOWS\Microsoft.NET\Framework\v4.0.30319\aspnet_state.exe
22:47:05.0156 1696 aspnet_state - ok
22:47:05.0187 1696 [ F5DC168BF77572D51BE28BA261B30CB4 ] aswFsBlk C:\WINDOWS\system32\drivers\aswFsBlk.sys
22:47:05.0187 1696 aswFsBlk - ok
22:47:05.0203 1696 [ 2B9B1DF809E965EF63402CBBA6DB50AE ] aswMon2 C:\WINDOWS\system32\drivers\aswMon2.sys
22:47:05.0203 1696 aswMon2 - ok
22:47:05.0218 1696 [ B7D5E4486BA658ED08624D8084ABB830 ] AswRdr C:\WINDOWS\system32\drivers\AswRdr.sys
22:47:05.0218 1696 AswRdr - ok
22:47:05.0265 1696 [ 30E45AF8B4D83176CA850FC9699E860B ] aswSnx C:\WINDOWS\system32\drivers\aswSnx.sys
22:47:05.0281 1696 aswSnx - ok
22:47:05.0296 1696 [ F04BDBCB965C05C51F4A7DE7B62063D6 ] aswSP C:\WINDOWS\system32\drivers\aswSP.sys
22:47:05.0312 1696 aswSP - ok
22:47:05.0328 1696 [ DFE9152ABFA89BB8CFDC057409B2D4DA ] aswTdi C:\WINDOWS\system32\drivers\aswTdi.sys
22:47:05.0328 1696 aswTdi - ok
22:47:05.0359 1696 [ B153AFFAC761E7F5FCFA822B9C4E97BC ] AsyncMac C:\WINDOWS\system32\DRIVERS\asyncmac.sys
22:47:05.0375 1696 AsyncMac - ok
22:47:05.0375 1696 [ 9F3A2F5AA6875C72BF062C712CFA2674 ] atapi C:\WINDOWS\system32\DRIVERS\atapi.sys
22:47:05.0375 1696 atapi - ok
22:47:05.0390 1696 Atdisk - ok
22:47:05.0406 1696 [ 9916C1225104BA14794209CFA8012159 ] Atmarpc C:\WINDOWS\system32\DRIVERS\atmarpc.sys
22:47:05.0406 1696 Atmarpc - ok
22:47:05.0437 1696 [ DE31B88962A8645DBA5A37B993E7B0F1 ] AudioSrv C:\WINDOWS\System32\audiosrv.dll
22:47:05.0437 1696 AudioSrv - ok
22:47:05.0484 1696 [ D9F724AA26C010A217C97606B160ED68 ] audstub C:\WINDOWS\system32\DRIVERS\audstub.sys
22:47:05.0484 1696 audstub - ok
22:47:05.0546 1696 [ 04AC21E821F259845BD7367CEE057290 ] avast! Antivirus C:\Program Files\AVAST Software\Avast\AvastSvc.exe
22:47:05.0546 1696 avast! Antivirus - ok
22:47:05.0593 1696 [ DA1F27D85E0D1525F6621372E7B685E9 ] Beep C:\WINDOWS\system32\drivers\Beep.sys
22:47:05.0593 1696 Beep - ok
22:47:05.0656 1696 [ 3AEDE727580F0A7C3929DD6526145759 ] BITS C:\WINDOWS\system32\qmgr.dll
22:47:05.0656 1696 BITS - ok
22:47:05.0703 1696 [ 218B3BBB1FAD634A84FB1A1BB030D956 ] Browser C:\WINDOWS\System32\browser.dll
22:47:05.0703 1696 Browser - ok
22:47:05.0718 1696 [ 90A673FC8E12A79AFBED2576F6A7AAF9 ] cbidf2k C:\WINDOWS\system32\drivers\cbidf2k.sys
22:47:05.0718 1696 cbidf2k - ok
22:47:05.0734 1696 cd20xrnt - ok
22:47:05.0765 1696 [ C1B486A7658353D33A10CC15211A873B ] Cdaudio C:\WINDOWS\system32\drivers\Cdaudio.sys
22:47:05.0765 1696 Cdaudio - ok
22:47:05.0812 1696 [ C885B02847F5D2FD45A24E219ED93B32 ] Cdfs C:\WINDOWS\system32\drivers\Cdfs.sys
22:47:05.0812 1696 Cdfs - ok
22:47:05.0843 1696 [ 4B0A100EAF5C49EF3CCA8C641431EACC ] Cdrom C:\WINDOWS\system32\DRIVERS\cdrom.sys
22:47:05.0843 1696 Cdrom - ok
22:47:05.0843 1696 Changer - ok
22:47:05.0875 1696 [ E390DC1D7C461D7D56EC53402F329928 ] CiSvc C:\WINDOWS\system32\cisvc.exe
22:47:05.0875 1696 CiSvc - ok
22:47:05.0921 1696 [ 064507A8DFA8C5C7E2FFDDD3E6F424FA ] ClipSrv C:\WINDOWS\system32\clipsrv.exe
22:47:05.0921 1696 ClipSrv - ok
22:47:06.0000 1696 [ D87ACAED61E417BBA546CED5E7E36D9C ] clr_optimization_v2.0.50727_32 C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe
22:47:06.0000 1696 clr_optimization_v2.0.50727_32 - ok
22:47:06.0046 1696 [ C5A75EB48E2344ABDC162BDA79E16841 ] clr_optimization_v4.0.30319_32 C:\WINDOWS\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe
22:47:06.0046 1696 clr_optimization_v4.0.30319_32 - ok
22:47:06.0046 1696 CmdIde - ok
22:47:06.0062 1696 COMSysApp - ok
22:47:06.0078 1696 Cpqarray - ok
22:47:06.0125 1696 [ F3AB0933CBD166D271992F411C27CCAF ] CryptSvc C:\WINDOWS\System32\cryptsvc.dll
22:47:06.0125 1696 CryptSvc - ok
22:47:06.0125 1696 dac2w2k - ok
22:47:06.0140 1696 dac960nt - ok
22:47:06.0203 1696 [ C0BD34A62508BA68F146E22CE45919F9 ] DcomLaunch C:\WINDOWS\system32\rpcss.dll
22:47:06.0218 1696 DcomLaunch - ok
22:47:06.0265 1696 [ EB737F46D7D494C7760A932C9B6491A4 ] Dhcp C:\WINDOWS\System32\dhcpcsvc.dll
22:47:06.0265 1696 Dhcp - ok
22:47:06.0281 1696 [ 47B6AAEC570F2C11D8BAD80A064D8ED1 ] Disk C:\WINDOWS\system32\DRIVERS\disk.sys
22:47:06.0281 1696 Disk - ok
22:47:06.0281 1696 dmadmin - ok
22:47:06.0343 1696 [ DB5FD2BF5B07DC54BFCB3664FF05BD7C ] dmboot C:\WINDOWS\system32\drivers\dmboot.sys
22:47:06.0359 1696 dmboot - ok
22:47:06.0390 1696 [ FFF1720AF51171F32F1EAD5CF71F2810 ] dmio C:\WINDOWS\system32\drivers\dmio.sys
22:47:06.0390 1696 dmio - ok
22:47:06.0406 1696 [ E9317282A63CA4D188C0DF5E09C6AC5F ] dmload C:\WINDOWS\system32\drivers\dmload.sys
22:47:06.0406 1696 dmload - ok
22:47:06.0437 1696 [ 2BFEFE9E865655A76982F050450B9591 ] dmserver C:\WINDOWS\System32\dmserver.dll
22:47:06.0437 1696 dmserver - ok
22:47:06.0453 1696 [ 8A208DFCF89792A484E76C40E5F50B45 ] DMusic C:\WINDOWS\system32\drivers\DMusic.sys
22:47:06.0468 1696 DMusic - ok
22:47:06.0484 1696 [ 38AAD7E982198CB4F642BB60E59511F1 ] Dnscache C:\WINDOWS\System32\dnsrslvr.dll
22:47:06.0484 1696 Dnscache - ok
22:47:06.0515 1696 [ AACFC38E9D085D58F9F933CFD6AF1D2B ] Dot3svc C:\WINDOWS\System32\dot3svc.dll
22:47:06.0515 1696 Dot3svc - ok
22:47:06.0515 1696 dpti2o - ok
22:47:06.0546 1696 [ 8F5FCFF8E8848AFAC920905FBD9D33C8 ] drmkaud C:\WINDOWS\system32\drivers\drmkaud.sys
22:47:06.0546 1696 drmkaud - ok
22:47:06.0593 1696 [ 687AF6BB383885FF6A64071B189A7F3E ] dtsoftbus01 C:\WINDOWS\system32\DRIVERS\dtsoftbus01.sys
22:47:06.0593 1696 dtsoftbus01 - ok
22:47:06.0640 1696 [ B327281012B48BD73F587799F9F29BE2 ] DumpDrv C:\WINDOWS\system32\drivers\DumpDrv.sys
22:47:06.0640 1696 DumpDrv - ok
22:47:06.0671 1696 [ C42009E37E377AE55968768E521E05C3 ] E1000 C:\WINDOWS\system32\DRIVERS\e1000325.sys
22:47:06.0671 1696 E1000 - ok
22:47:06.0718 1696 [ 0887D9C2BE8D940778CAD1E3B85F2A41 ] EapHost C:\WINDOWS\System32\eapsvc.dll
22:47:06.0718 1696 EapHost - ok
22:47:06.0750 1696 [ A2A4912798F2BE706ABADD3D30800D16 ] ERSvc C:\WINDOWS\System32\ersvc.dll
22:47:06.0750 1696 ERSvc - ok
22:47:06.0796 1696 [ 4F40D16B2D5ED9E48A193CE468912FED ] Eventlog C:\WINDOWS\system32\services.exe
22:47:06.0796 1696 Eventlog - ok
22:47:06.0843 1696 [ BE68EA4457E2E5717231CF91BE5448E0 ] EventSystem C:\WINDOWS\system32\es.dll
22:47:06.0859 1696 EventSystem - ok
22:47:06.0890 1696 [ 4D893323DAE445E34A4C9038B0551BC9 ] exFat C:\WINDOWS\system32\drivers\exFat.sys
22:47:06.0890 1696 exFat - ok
22:47:06.0937 1696 [ 38D332A6D56AF32635675F132548343E ] Fastfat C:\WINDOWS\system32\drivers\Fastfat.sys
22:47:06.0937 1696 Fastfat - ok
22:47:06.0984 1696 [ 54A6BF743E0517528A5064CEAEB40EA7 ] FastUserSwitchingCompatibility C:\WINDOWS\System32\shsvcs.dll
22:47:07.0000 1696 FastUserSwitchingCompatibility - ok
22:47:07.0031 1696 [ 92CDD60B6730B9F50F6A1A0C1F8CDC81 ] Fdc C:\WINDOWS\system32\DRIVERS\fdc.sys
22:47:07.0046 1696 Fdc - ok
22:47:07.0046 1696 [ AC366695A0796560AA37215AD5762AAF ] Fips C:\WINDOWS\system32\drivers\Fips.sys
22:47:07.0046 1696 Fips - ok
22:47:07.0078 1696 [ 9D27E7B80BFCDF1CDD9B555862D5E7F0 ] Flpydisk C:\WINDOWS\system32\DRIVERS\flpydisk.sys
22:47:07.0078 1696 Flpydisk - ok
22:47:07.0109 1696 [ B2CF4B0786F8212CB92ED2B50C6DB6B0 ] FltMgr C:\WINDOWS\system32\drivers\fltmgr.sys
22:47:07.0109 1696 FltMgr - ok
22:47:07.0171 1696 [ 8BA7C024070F2B7FDD98ED8A4BA41789 ] FontCache3.0.0.0 C:\WINDOWS\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe
22:47:07.0171 1696 FontCache3.0.0.0 - ok
22:47:07.0203 1696 [ 30D42943A54704EF13E2562911DBFCEA ] Fs_Rec C:\WINDOWS\system32\drivers\Fs_Rec.sys
22:47:07.0203 1696 Fs_Rec - ok
22:47:07.0234 1696 [ 4E664D8541DB4A66B73A24257E322E1F ] Ftdisk C:\WINDOWS\system32\DRIVERS\ftdisk.sys
22:47:07.0234 1696 Ftdisk - ok
22:47:07.0281 1696 [ 0A02C63C8B144BD8C86B103DEE7C86A2 ] Gpc C:\WINDOWS\system32\DRIVERS\msgpc.sys
22:47:07.0281 1696 Gpc - ok
22:47:07.0328 1696 [ F02A533F517EB38333CB12A9E8963773 ] gupdate C:\Program Files\Google\Update\GoogleUpdate.exe
22:47:07.0328 1696 gupdate - ok
22:47:07.0343 1696 [ F02A533F517EB38333CB12A9E8963773 ] gupdatem C:\Program Files\Google\Update\GoogleUpdate.exe
22:47:07.0343 1696 gupdatem - ok
22:47:07.0406 1696 [ FCFE31FB75F8A6295B6B0AF87A626282 ] helpsvc C:\WINDOWS\PCHealth\HelpCtr\Binaries\pchsvc.dll
22:47:07.0406 1696 helpsvc - ok
22:47:07.0453 1696 [ 00E25EE90166B3E1BE6E74AEBF858306 ] HidServ C:\WINDOWS\System32\hidserv.dll
22:47:07.0453 1696 HidServ - ok
22:47:07.0500 1696 [ CCF82C5EC8A7326C3066DE870C06DAF1 ] hidusb C:\WINDOWS\system32\DRIVERS\hidusb.sys
22:47:07.0500 1696 hidusb - ok
22:47:07.0546 1696 [ 7A6B320928F86BC851530D63C82965D9 ] hkmsvc C:\WINDOWS\System32\kmsvc.dll
22:47:07.0546 1696 hkmsvc - ok
22:47:07.0562 1696 hpn - ok
22:47:07.0609 1696 [ 937031C085718C1C04A9C0864625EC6B ] HTTP C:\WINDOWS\system32\Drivers\HTTP.sys
22:47:07.0609 1696 HTTP - ok
22:47:07.0640 1696 [ 58FE2F2DA3BC5573F4A35B3760D3125F ] HTTPFilter C:\WINDOWS\System32\w3ssl.dll
22:47:07.0656 1696 HTTPFilter - ok
22:47:07.0671 1696 i2omgmt - ok
22:47:07.0671 1696 i2omp - ok
22:47:07.0687 1696 [ C528E27945367191E7BAE364930B6932 ] i8042prt C:\WINDOWS\system32\DRIVERS\i8042prt.sys
22:47:07.0703 1696 i8042prt - ok
22:47:07.0796 1696 [ 9A883C3C4D91292C0D09DE7C728E781C ] ialm C:\WINDOWS\system32\DRIVERS\ialmnt5.sys
22:47:07.0812 1696 ialm - ok
22:47:07.0890 1696 [ C01AC32DC5C03076CFB852CB5DA5229C ] idsvc C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe
22:47:07.0906 1696 idsvc - ok
22:47:07.0968 1696 [ 083A052659F5310DD8B6A6CB05EDCF8E ] Imapi C:\WINDOWS\system32\DRIVERS\imapi.sys
22:47:07.0968 1696 Imapi - ok
22:47:07.0984 1696 [ F7B93AAFAD33B2320954C17E26C8D361 ] ImapiService C:\WINDOWS\system32\imapi.exe
22:47:08.0000 1696 ImapiService - ok
22:47:08.0000 1696 ini910u - ok
22:47:08.0031 1696 [ 57D928E548B38502ABBA7A77A6EB7312 ] IntelIde C:\WINDOWS\system32\DRIVERS\intelide.sys
22:47:08.0031 1696 IntelIde - ok
22:47:08.0046 1696 [ 27B290D632AF2CF3CF40BFDDB7370985 ] intelppm C:\WINDOWS\system32\DRIVERS\intelppm.sys
22:47:08.0046 1696 intelppm - ok
22:47:08.0078 1696 [ 3BB22519A194418D5FEC05D800A19AD0 ] Ip6Fw C:\WINDOWS\system32\drivers\ip6fw.sys
22:47:08.0078 1696 Ip6Fw - ok
22:47:08.0109 1696 [ 731F22BA402EE4B62748ADAF6363C182 ] IpFilterDriver C:\WINDOWS\system32\DRIVERS\ipfltdrv.sys
22:47:08.0109 1696 IpFilterDriver - ok
22:47:08.0125 1696 [ B87AB476DCF76E72010632B5550955F5 ] IpInIp C:\WINDOWS\system32\DRIVERS\ipinip.sys
22:47:08.0125 1696 IpInIp - ok
22:47:08.0156 1696 [ CC748EA12C6EFFDE940EE98098BF96BB ] IpNat C:\WINDOWS\system32\DRIVERS\ipnat.sys
22:47:08.0156 1696 IpNat - ok
22:47:08.0171 1696 [ 23C74D75E36E7158768DD63D92789A91 ] IPSec C:\WINDOWS\system32\DRIVERS\ipsec.sys
22:47:08.0171 1696 IPSec - ok
22:47:08.0281 1696 [ C93C9FF7B04D772627A3646D89F7BF89 ] IRENUM C:\WINDOWS\system32\DRIVERS\irenum.sys
22:47:08.0281 1696 IRENUM - ok
22:47:08.0328 1696 [ CC9F8A2D60AED1A51A3AC34C59B987AE ] isapnp C:\WINDOWS\system32\DRIVERS\isapnp.sys
22:47:08.0343 1696 isapnp - ok
22:47:08.0375 1696 [ 1B6162FE7F66B1A71A4B70F941C4AA9B ] Kbdclass C:\WINDOWS\system32\DRIVERS\kbdclass.sys
22:47:08.0375 1696 Kbdclass - ok
22:47:08.0421 1696 [ 86C8F23616C6C6E5B2776901C17B945B ] kbdhid C:\WINDOWS\system32\DRIVERS\kbdhid.sys
22:47:08.0437 1696 kbdhid - ok
22:47:08.0453 1696 [ 692BCF44383D056AED41B045A323D378 ] kmixer C:\WINDOWS\system32\drivers\kmixer.sys
22:47:08.0453 1696 kmixer - ok
22:47:08.0500 1696 [ C6EBF1D6AD71DF30DB49B8D3287E1368 ] KSecDD C:\WINDOWS\system32\drivers\KSecDD.sys
22:47:08.0515 1696 KSecDD - ok
22:47:08.0562 1696 [ 111A41B749F0E8CD7566B4FFD613CFFE ] LanmanServer C:\WINDOWS\System32\srvsvc.dll
22:47:08.0578 1696 LanmanServer - ok
22:47:08.0609 1696 [ 9A2E7EE3989AAC0079E9D23555545D52 ] lanmanworkstation C:\WINDOWS\System32\wkssvc.dll
22:47:08.0625 1696 lanmanworkstation - ok
22:47:08.0640 1696 lbrtfdc - ok

ještě přidám z ComboFix (by sUBs)

[AntonioSpeedy]

ComboFix

ComboFix 12-11-10.02 - Speedy 11.11.2012 23:06:19.1.1 - x86
Systém Microsoft Windows XP Professional 5.1.2600.3.1250.420.1029.18.2039.1423 [GMT 1:00]
Spuštěný z: c:\documents and settings\Speedy\Plocha\ComboFix.exe
AV: avast! Antivirus *Disabled/Updated* {7591DB91-41F0-48A3-B128-1A293FD8233D}
.
.
((((((((((((((((((((((((((((((((((((((( Ostatní výmazy )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
c:\windows\msmqinst.log
c:\windows\msxml4-KB2721691-enu.LOG
c:\windows\system32\TZLog.log
c:\windows\system32\URTTemp
c:\windows\system32\URTTemp\fusion.dll
c:\windows\system32\URTTemp\mscoree.dll
c:\windows\system32\URTTemp\mscoree.dll.local
c:\windows\system32\URTTemp\mscorsn.dll
c:\windows\system32\URTTemp\mscorwks.dll
c:\windows\system32\URTTemp\msvcr71.dll
D:\install.exe
.
.
((((((((((((((((((((((((( Soubory vytvořené od 2012-10-11 do 2012-11-11 )))))))))))))))))))))))))))))))
.
.
2012-11-11 10:40 . 2012-11-11 10:40 -------- d-----w- c:\documents and settings\Speedy\Data aplikací\Malwarebytes
2012-11-11 10:40 . 2012-11-11 10:40 -------- d-----w- c:\program files\Malwarebytes' Anti-Malware
2012-11-11 10:40 . 2012-09-29 18:54 22856 ----a-w- c:\windows\system32\drivers\mbam.sys
2012-11-11 10:05 . 2012-11-11 10:05 -------- d-----w- c:\documents and settings\Speedy\Data aplikací\Wise Registry Cleaner
2012-11-08 17:03 . 2012-11-08 17:08 -------- d-----w- c:\documents and settings\Speedy\Data aplikací\PSpad
2012-11-08 13:50 . 2012-11-08 13:50 -------- d-----w- c:\documents and settings\Speedy\Local Settings\Data aplikací\APN
2012-11-08 13:50 . 2012-11-08 13:50 -------- d-----w- c:\program files\DsNET Corp
2012-11-05 21:39 . 2012-11-07 10:59 697272 ----a-w- c:\windows\system32\FlashPlayerApp.exe
2012-11-05 21:39 . 2012-11-07 10:59 73656 ----a-w- c:\windows\system32\FlashPlayerCPLApp.cpl
2012-11-04 10:13 . 2012-11-04 10:13 -------- d-----w- c:\program files\Lavalys
2012-11-01 14:33 . 2012-11-01 14:33 -------- d-----w- c:\program files\CPUID
2012-10-31 08:38 . 2012-10-31 08:38 -------- d-----w- c:\program files\Mozilla Maintenance Service
2012-10-30 15:03 . 2012-10-30 15:03 -------- d--h--w- c:\windows\msdownld.tmp
2012-10-28 20:08 . 2012-10-28 20:08 -------- d-----w- c:\program files\CCleaner
2012-10-28 20:03 . 2012-10-28 20:03 -------- d-----w- c:\documents and settings\Speedy\Local Settings\Data aplikací\Mozilla
2012-10-28 17:29 . 2012-10-28 17:29 -------- d-----w- c:\program files\PANDORA.TV
2012-10-28 17:29 . 2012-10-28 17:31 -------- d-----w- c:\program files\The KMPlayer
2012-10-25 23:51 . 2012-10-25 23:51 -------- d-----w- c:\documents and settings\Speedy\Local Settings\Data aplikací\Native Instruments
2012-10-25 23:46 . 2012-10-28 16:09 -------- d-----w- c:\program files\Common Files\Native Instruments
2012-10-25 14:56 . 2012-10-25 14:56 -------- d-----w- c:\documents and settings\Speedy\Local Settings\Data aplikací\SKIDROW
2012-10-24 10:13 . 2012-11-09 03:44 -------- d-----w- c:\documents and settings\Speedy\Data aplikací\FileZilla
2012-10-24 08:18 . 2012-10-24 08:18 -------- d-----w- c:\documents and settings\Speedy\Data aplikací\Windows Search
2012-10-23 14:50 . 2012-10-23 14:50 98304 ----a-w- c:\windows\system32\CmdLineExt.dll
2012-10-23 14:14 . 2012-10-23 14:14 -------- d-----w- c:\program files\PopCap Games
2012-10-22 22:07 . 2012-10-22 22:07 -------- d-----w- c:\documents and settings\Speedy\Data aplikací\StageManager.BD092818F67280F4B42B04877600987F0111B594.1
2012-10-22 20:37 . 2012-10-22 20:37 -------- d-----w- c:\windows\system32\C2MP
2012-10-22 20:18 . 2012-10-22 20:17 737280 ----a-w- c:\windows\iun6002.exe
2012-10-22 19:34 . 2008-04-14 11:00 26624 ----a-w- c:\documents and settings\LocalService\Data aplikací\Microsoft\UPnP Device Host\upnphost\udhisapi.dll
2012-10-14 11:54 . 2012-10-14 12:14 -------- d-----w- c:\windows\ie8updates
2012-10-14 11:53 . 2012-10-14 12:39 -------- d--h--w- c:\windows\$hf_mig$
2012-10-14 10:29 . 2012-10-14 10:29 -------- d-----w- c:\windows\Sun
2012-10-14 10:19 . 2012-10-14 10:19 -------- d-----w- c:\program files\FileZilla FTP Client
2012-10-14 09:44 . 2008-04-13 22:15 26368 -c--a-w- c:\windows\system32\dllcache\usbstor.sys
2012-10-14 09:37 . 2012-10-25 14:40 -------- d-----w- c:\windows\Logs
2012-10-13 21:23 . 2012-10-13 21:23 -------- d-----w- c:\documents and settings\All Users\Data aplikac
2012-10-13 21:23 . 2012-10-13 21:23 -------- d-----w- c:\program files\Pando Networks
2012-10-13 18:07 . 2012-10-28 16:51 -------- d-----w- c:\program files\Common Files\InstallShield
2012-10-13 18:04 . 2012-10-13 18:04 -------- d-----w- c:\documents and settings\Speedy\Local Settings\Data aplikací\FlatOut Ultimate Carnage
2012-10-13 18:00 . 2012-10-13 18:00 -------- d-----w- c:\windows\system32\xlive
2012-10-13 16:19 . 2012-10-13 16:19 -------- d-----w- c:\program files\Pcsx2
2012-10-13 13:55 . 2012-10-13 13:57 -------- d-----w- c:\documents and settings\Speedy\Data aplikací\WinMount
2012-10-13 13:54 . 2012-10-14 14:46 -------- d-----w- c:\program files\WinMount
2012-10-13 13:54 . 2012-10-13 13:54 65856 ----a-w- c:\windows\system32\drivers\WMDrive.sys
2012-10-13 13:22 . 2010-12-22 11:29 2690560 -c----w- c:\windows\system32\dllcache\mstscax.dll
2012-10-13 13:22 . 2010-12-21 11:26 1034240 -c----w- c:\windows\system32\dllcache\mstsc.exe
2012-10-13 13:09 . 2011-07-15 13:29 457856 -c----w- c:\windows\system32\dllcache\mrxsmb.sys
2012-10-13 12:30 . 2012-08-28 15:17 12800 -c----w- c:\windows\system32\dllcache\xpshims.dll
2012-10-13 12:30 . 2012-08-28 15:17 55296 -c----w- c:\windows\system32\dllcache\msfeedsbs.dll
2012-10-13 12:30 . 2012-08-28 15:17 630272 -c----w- c:\windows\system32\dllcache\msfeeds.dll
2012-10-13 12:30 . 2012-08-28 15:17 247808 -c----w- c:\windows\system32\dllcache\ieproxy.dll
2012-10-13 12:30 . 2012-08-28 15:17 2001408 -c----w- c:\windows\system32\dllcache\iertutil.dll
2012-10-13 12:30 . 2012-08-28 15:17 522240 -c----w- c:\windows\system32\dllcache\jsdbgui.dll
2012-10-13 12:30 . 2012-08-28 15:17 743424 -c----w- c:\windows\system32\dllcache\iedvtool.dll
2012-10-13 12:30 . 2012-08-28 15:17 11113472 -c----w- c:\windows\system32\dllcache\ieframe.dll
2012-10-13 11:52 . 2012-08-23 06:26 2150912 -c----w- c:\windows\system32\dllcache\ntkrnlmp.exe
2012-10-13 11:52 . 2012-08-23 06:26 2195200 -c----w- c:\windows\system32\dllcache\ntoskrnl.exe
2012-10-13 11:52 . 2012-08-23 06:26 2029568 -c----w- c:\windows\system32\dllcache\ntkrpamp.exe
2012-10-13 11:51 . 2012-01-11 19:07 3072 -c----w- c:\windows\system32\dllcache\iacenc.dll
2012-10-13 11:51 . 2012-01-11 19:07 3072 ------w- c:\windows\system32\iacenc.dll
2012-10-13 07:27 . 2008-04-14 06:51 9728 ------w- c:\windows\system32\rwnh.dll
2012-10-13 07:27 . 2008-04-14 06:51 10752 ------w- c:\windows\system32\smtpapi.dll
2012-10-13 07:27 . 2008-04-13 22:15 46592 ------w- c:\windows\system32\drivers\irbus.sys
2012-10-13 07:27 . 2008-04-13 22:13 9728 ------w- c:\windows\system32\comsdupd.exe
2012-10-13 07:27 . 2008-04-14 06:51 229376 ------w- c:\windows\system32\ati2cqag.dll
2012-10-13 07:23 . 2012-10-13 07:27 -------- d-----w- c:\windows\ServicePackFiles
2012-10-13 07:22 . 2006-12-28 22:31 19569 ----a-w- c:\windows\000001_.tmp
.
.
.

[memphisto]

Ani jeden log není celý...

[AntonioSpeedy]

ale nic víc mi to nevypisuje skoušel jsem to i víckrát a furt to je stejně

[jaro3]

Otevři si Poznámkový blok (Start -> Spustit... a napiš do okna Notepad a dej Ok.
Zkopíruj do něj následující celý text označený zeleně:

Kód: Vybrat vše

ClearJavaCache::

KillAll::
File::
c:\windows\iun6002.exe
c:\windows\000001_.tmp

Folder::
c:\windows\msdownld.tmp
c:\windows\system32\C2MP


Zvol možnost Soubor -> Uložit jako... a nastav tyto parametry:
Název souboru: zde napiš: CFScript.txt
Uložit jako typ: tak tam vyber Všechny soubory
Ulož soubor na plochu.
Ukonči všechna aktivní okna.

Uchop myší vytvořený skript CFScript.txt, přemísti ho nad stažený program ComboFix.exe a když se oba soubory překryjí, skript upusť.
- Automaticky se spustí ComboFix
- Vlož sem log, který vyběhne v závěru čistícího procesu + nový log z HJT

Upozornění : Může se stát, že po aplikaci Combofixu a restartu počítače, Windows nenaběhnou , nebo nenajede plocha , budou problémy s připojením, pak znovu restartuj počítač, pokud to nepomůže , po restartu mačkej klávesu F8 a pak zvol poslední známou funkční konfiguraci. , či použij bod obnovy.

Stáhni si aswMBR
na svojí plochu. Uzavři všechna okna , programy a prohlížeče. Poklepej na aswMBR.exe. Pokud se objeví hláška o možnosti stáhnutí databáze Avastu , klikni na NE. Poté klikni na „Scan“ . Po skenu klikni na „Save Log“ a ulož si log na plochu .Zkopíruj sem celý obsah toho logu. Pak klikni na „Exit“ k zavření programu.