kontrola logu z MWAV (zpomalený pc, pomalý start)

[boomsta89]

Nový log (ComboFix)

______________________


ComboFix 09-07-03.03 - Tony 04.07.2009 20:43.5 - NTFSx86
Systém Microsoft Windows XP Professional 5.1.2600.2.1250.420.1029.18.767.507 [GMT 2:00]
Spuštěný z: c:\documents and settings\Tony\Plocha\ComboFix.exe
Použité ovládací přepínače :: c:\documents and settings\Tony\Plocha\CFScript.txt
AV: AntiVir Desktop *On-access scanning disabled* (Updated) {AD166499-45F9-482A-A743-FDD3350758C7}

FILE ::
"c:\documents and settings\Tony\temp\TeamViewer\Version4\TeamViewer_.exe"
.

((((((((((((((((((((((((((((((((((((((( Ostatní výmazy )))))))))))))))))))))))))))))))))))))))))))))))))
.

c:\documents and settings\Tony\temp\TeamViewer
c:\documents and settings\Tony\temp\TeamViewer\Version4\TeamViewer_.exe

.
((((((((((((((((((((((((( Soubory vytvořené od 2009-06-04 do 2009-07-04 )))))))))))))))))))))))))))))))
.

2009-07-04 16:35 . 2009-07-04 16:38 -------- d-----w- c:\windows\nview
2009-07-04 16:35 . 2006-10-22 10:22 208896 ----a-w- c:\windows\system32\nvudisp.exe
2009-07-04 16:34 . 2006-10-22 13:06 208896 ----a-w- c:\windows\system32\NVUNINST.EXE
2009-07-04 16:34 . 2009-07-04 16:34 -------- d-----w- C:\NVIDIA
2009-07-04 14:05 . 2009-07-04 14:05 -------- d-----w- c:\program files\VALVe
2009-07-02 15:29 . 2009-07-03 23:01 -------- d-----w- c:\program files\FlashGet
2009-07-02 08:53 . 2009-03-30 08:33 96104 ----a-w- c:\windows\system32\drivers\avipbb.sys
2009-07-02 08:53 . 2009-03-24 14:08 55640 ----a-w- c:\windows\system32\drivers\avgntflt.sys
2009-07-02 08:53 . 2009-02-13 10:29 22360 ----a-w- c:\windows\system32\drivers\avgntmgr.sys
2009-07-02 08:53 . 2009-02-13 10:17 45416 ----a-w- c:\windows\system32\drivers\avgntdd.sys
2009-07-02 08:52 . 2009-07-02 08:52 -------- d-----w- c:\program files\Avira
2009-06-30 18:32 . 2009-07-01 09:29 -------- d-----w- c:\program files\TeamViewer
2009-06-30 18:31 . 2009-07-04 18:46 -------- d-----w- c:\documents and settings\Tony\temp
2009-06-18 19:35 . 2009-06-18 19:35 -------- d-----w- c:\program files\QIP
2009-06-18 11:33 . 2009-06-18 11:33 -------- d-----w- c:\program files\A4Tech
2009-06-16 20:00 . 2009-06-16 20:00 -------- d-----w- c:\program files\uTorrent
2009-06-16 14:11 . 2009-07-04 16:43 -------- d-----w- c:\program files\STEam
2009-06-15 13:36 . 2009-06-15 13:36 -------- d-----w- c:\documents and settings\LocalService\Plocha
2009-06-15 11:29 . 2009-04-27 12:21 28928 ----a-w- c:\windows\system32\uxtuneup.dll
2009-06-15 11:29 . 2009-06-15 11:29 361216 ----a-w- c:\windows\system32\TuneUpDefragService.exe
2009-06-15 11:15 . 2009-06-15 11:30 604416 ----a-w- c:\windows\system32\TUProgSt.exe
2009-06-15 11:14 . 2009-06-15 11:30 -------- d-----w- c:\program files\TuneUp Utilities 2009
2009-06-12 10:39 . 2009-06-12 10:39 -------- d-----w- c:\program files\AusLogics Disk Defrag
2009-06-12 06:37 . 2009-06-12 06:38 -------- d-----w- c:\program files\Mplayer
2009-06-11 22:29 . 2009-06-11 22:29 41808 -c--a-w- c:\windows\system32\xfcodec.dll
2009-06-09 18:11 . 2009-06-09 18:12 -------- d-----w- c:\windows\system32\NtmsData
2009-06-08 17:19 . 2009-06-08 17:20 -------- d-----w- c:\program files\Ahead
2009-06-08 16:35 . 2009-07-02 22:58 -------- d-----w- C:\Downloads
2009-06-07 10:08 . 2009-06-07 10:08 -------- d-----w- c:\program files\Lavalys

.
(((((((((((((((((((((((((((((((((((((((( Find3M výpis ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2009-07-04 17:22 . 2009-03-24 19:11 -------- d-----w- c:\program files\RegScrubXP
2009-07-04 15:40 . 2004-08-03 21:14 359040 ----a-w- c:\windows\system32\drivers\tcpip.sys
2009-07-04 14:00 . 2001-10-25 14:00 76696 ----a-w- c:\windows\system32\perfc005.dat
2009-07-04 14:00 . 2001-10-25 14:00 424356 ----a-w- c:\windows\system32\perfh005.dat
2009-07-04 12:16 . 2009-05-25 17:38 -------- d-----w- c:\program files\eMule
2009-07-04 11:23 . 2009-03-15 00:10 137928 -c--a-w- c:\windows\system32\drivers\PnkBstrK.sys
2009-07-04 11:23 . 2009-03-15 00:10 189768 ----a-w- c:\windows\system32\PnkBstrB.exe
2009-07-02 08:57 . 2009-04-03 14:31 -------- d-----w- c:\program files\Xfire
2009-07-01 11:14 . 2009-04-24 16:37 -------- d-----w- c:\program files\Malwarebytes' Anti-Malware
2009-06-17 09:27 . 2009-04-24 16:37 38160 ----a-w- c:\windows\system32\drivers\mbamswissarmy.sys
2009-06-17 09:27 . 2009-04-24 16:37 19096 ----a-w- c:\windows\system32\drivers\mbam.sys
2009-06-15 15:05 . 2009-05-08 22:16 -------- d-----w- c:\program files\Seznam.cz
2009-06-15 15:03 . 2009-05-22 20:58 -------- d-----w- c:\program files\BitSpirit
2009-06-15 11:32 . 2009-03-21 08:11 -------- d-----w- c:\program files\Raxco
2009-06-10 18:54 . 2009-05-02 13:01 -------- d-----w- c:\program files\GamePark
2009-06-09 15:25 . 2009-07-02 15:29 359040 ----a-w- c:\windows\system32\drivers\tcpip.sys.flg
2009-05-31 07:05 . 2009-05-31 07:05 -------- d-----w- c:\program files\compLexity Demo Player
2009-05-30 22:37 . 2009-05-30 22:32 -------- d-----w- c:\program files\Wise Registry Cleaner
2009-05-29 17:23 . 2009-05-29 17:23 -------- d-----w- c:\program files\Sunbelt Software
2009-05-26 14:48 . 2009-03-24 19:09 -------- d-----w- c:\program files\BillP Studios
2009-05-23 11:21 . 2009-03-08 13:12 3490 -c--a-w- c:\windows\unins000.dat
2009-05-23 11:21 . 2009-05-23 11:21 673707 ----a-w- c:\windows\unins000.exe
2009-05-08 10:53 . 2009-05-08 10:41 -------- d-----w- c:\program files\Common Files\Sony Ericsson Shared
2009-05-08 10:53 . 2009-05-08 10:41 -------- d-----w- c:\program files\Common Files\Teleca Shared
2009-05-08 10:40 . 2009-05-08 10:40 -------- d-----w- c:\program files\Sony Ericsson
2009-05-02 08:26 . 2009-03-24 11:34 410984 -c--a-w- c:\windows\system32\deploytk.dll
2009-04-24 19:51 . 2004-07-17 09:36 163644 -c--a-w- c:\windows\system32\drivers\secdrv.sys
.

((((((((((((((((((((((((((((( SnapShot@2009-07-04_17.02.03 )))))))))))))))))))))))))))))))))))))))))
.
+ 2009-07-04 17:37 . 2009-07-04 17:37 16384 c:\windows\Temp\Perflib_Perfdata_ec.dat
.
(((((((((((((((((((((((((((((((((( Spouštěcí body v registru )))))))))))))))))))))))))))))))))))))))))))))
.
.
*Poznámka* prázdné záznamy a legitimní výchozí údaje nejsou zobrazeny.
REGEDIT4

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="c:\windows\system32\ctfmon.exe" [2004-08-17 15360]
"SpybotSD TeaTimer"="c:\program files\Spybot - Search & Destroy\TeaTimer.exe" [2009-03-05 2260480]
"Octoshape Streaming Services"="c:\documents and settings\Tony\Data aplikací\Octoshape\Octoshape Streaming Services\OctoshapeClient.exe" [2009-01-08 70936]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"WheelMouse"="c:\program files\A4Tech\Mouse\Amoumain.exe" [2007-05-15 204800]
"avgnt"="c:\program files\Avira\AntiVir Desktop\avgnt.exe" [2009-03-02 209153]
"NvCplDaemon"="c:\windows\system32\NvCpl.dll" [2006-10-22 7700480]
"NvMediaCenter"="c:\windows\system32\NvMcTray.dll" [2006-10-22 86016]
"nwiz"="nwiz.exe" - c:\windows\system32\nwiz.exe [2006-10-22 1622016]

[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="c:\windows\system32\CTFMON.EXE" [2004-08-17 15360]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\session manager]
BootExecute REG_MULTI_SZ autocheck autochk *\0autocheck OODBS

[HKLM\~\startupfolder\C:^Documents and Settings^All Users^Nabídka Start^Programy^Po spuštění^HP Digital Imaging Monitor.lnk]
backup=c:\windows\pss\HP Digital Imaging Monitor.lnkCommon Startup

[HKLM\~\startupfolder\C:^Documents and Settings^Tony^Nabídka Start^Programy^Po spuštění^Xfire.lnk]
backup=c:\windows\pss\Xfire.lnkStartup

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\system32\\sessmgr.exe"=
"c:\\Program Files\\Steam\\steamapps\\quinterboomsta89\\counter-strike\\hl.exe"=
"c:\\Program Files\\QIP\\qip.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hpqtra08.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hpqste08.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hpofxm08.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hposfx08.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hposid01.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hpqscnvw.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hpqkygrp.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hpqCopy.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hpfccopy.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hpzwiz01.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hpoews01.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hpqnrs08.exe"=
"c:\\Program Files\\Xfire\\Xfire.exe"=
"c:\\Program Files\\uTorrent\\utorrent.exe"=
"c:\\Program Files\\Skype\\Phone\\Skype.exe"=

R2 AntiVirSchedulerService;Avira AntiVir Scheduler;c:\program files\Avira\AntiVir Desktop\sched.exe [2.7.2009 10:53 108289]
R2 TuneUp.ProgramStatisticsSvc;TuneUp Program Statistics Service;c:\windows\system32\TUProgSt.exe [15.6.2009 13:15 604416]

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Svchost - NetSvcs
UxTuneUp
.
Obsah adresáře 'Naplánované úlohy'

2009-07-04 c:\windows\Tasks\1-Click Maintenance.job
- c:\program files\TuneUp Utilities 2009\OneClickStarter.exe [2009-04-27 13:37]
.
.
------- Doplňkový sken -------
.
uStart Page = hxxp://seznam.cz/
IE: Download Using &BitSpirit
IE: E&xportovat do aplikace Microsoft Excel - c:\progra~1\MICROS~2\Office12\EXCEL.EXE/3000
IE: ÓñČĚŘľ«ÁéĎÂÔŘ(&B)
TCP: {69164E2F-5A25-4C5F-90FB-952A047E7760} = 213.180.32.2
FF - ProfilePath - c:\documents and settings\Tony\Data aplikací\Mozilla\Firefox\Profiles\rxcrn3aa.default\
FF - prefs.js: browser.startup.homepage - seznam.cz
FF - component: c:\program files\Mozilla Firefox\extensions\{B13721C7-F507-4982-B2E5-502A71474FED}\components\NPComponent.dll

---- NASTAVENÍ FIREFOXU ----
c:\program files\Mozilla Firefox\defaults\pref\firefox-l10n.js - pref("browser.fixup.alternate.suffix", ".cz");
.

**************************************************************************

catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2009-07-04 20:46
Windows 5.1.2600 Service Pack 2 NTFS

skenování skrytých procesů ...

skenování skrytých položek 'Po spuštění' ...

skenování skrytých souborů ...

sken byl úspešně dokončen
skryté soubory: 0

**************************************************************************
.
--------------------- ZAMKNUTÉ KLÍČE V REGISTRU ---------------------

[HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\System*]
"OODEFRAG11.00.00.01WORKSTATION"="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"
.
Celkový čas: 2009-07-04 20:48
ComboFix-quarantined-files.txt 2009-07-04 18:48
ComboFix2.txt 2009-07-04 18:06
ComboFix3.txt 2009-07-04 17:05

Před spuštěním: Volných bajtů: 24 290 430 976
Po spuštění: Volných bajtů: 24 283 566 080

165 --- E O F --- 2009-03-09 08:41

[Reklama]

[boomsta89]

Nový log (HJT)

__________________________________


Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 20:52:08, on 4.7.2009
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Avira\AntiVir Desktop\sched.exe
C:\Program Files\Avira\AntiVir Desktop\avguard.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\WINDOWS\system32\HPZipm12.exe
C:\WINDOWS\system32\PnkBstrA.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\TUProgSt.exe
C:\Program Files\Avira\AntiVir Desktop\avgnt.exe
C:\WINDOWS\system32\ctfmon.exe
C:\WINDOWS\system32\devldr32.exe
C:\WINDOWS\system32\wscntfy.exe
C:\WINDOWS\system32\wbem\wmiapsrv.exe
C:\Program Files\QIP\qip.exe
C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
C:\WINDOWS\explorer.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://seznam.cz/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page =
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Odkazy
O2 - BHO: Adobe PDF Link Helper - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
O4 - HKLM\..\Run: [WheelMouse] C:\Program Files\A4Tech\Mouse\Amoumain.exe
O4 - HKLM\..\Run: [avgnt] "C:\Program Files\Avira\AntiVir Desktop\avgnt.exe" /min
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [SpybotSD TeaTimer] C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
O4 - HKCU\..\Run: [Octoshape Streaming Services] "C:\Documents and Settings\Tony\Data aplikací\Octoshape\Octoshape Streaming Services\OctoshapeClient.exe" -inv:bootrun
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000
O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O10 - Unknown file in Winsock LSP: c:\windows\system32\nwprovau.dll
O17 - HKLM\System\CCS\Services\Tcpip\..\{69164E2F-5A25-4C5F-90FB-952A047E7760}: NameServer = 213.180.32.2
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\Skype4COM.dll
O23 - Service: Avira AntiVir Scheduler (AntiVirSchedulerService) - Avira GmbH - C:\Program Files\Avira\AntiVir Desktop\sched.exe
O23 - Service: Avira AntiVir Guard (AntiVirService) - Avira GmbH - C:\Program Files\Avira\AntiVir Desktop\avguard.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\1150\Intel 32\IDriverT.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe
O23 - Service: PnkBstrA - Unknown owner - C:\WINDOWS\system32\PnkBstrA.exe
O23 - Service: TuneUp Drive Defrag Service (TuneUp.Defrag) - TuneUp Software - C:\WINDOWS\System32\TuneUpDefragService.exe
O23 - Service: TuneUp Program Statistics Service (TuneUp.ProgramStatisticsSvc) - TuneUp Software - C:\WINDOWS\System32\TUProgSt.exe

--
End of file - 5210 bytes

[Damned]

Šmejda tam už nevidím, logy jsou v pořtádku.
Odinstaluj ComboFix.
ComboFix se odinstaluje takto:
Start-Spustit a zadej ComboFix[mezera]/u

takže jestli nejsou problémy,tak vyčisti systém CCleanerem
a použij i T-Cleaner
smaže vše po Combu,SDFixu,Avengeru,MWAVu atd.-stáhneš->spustíš

(pozn.Pokud máš AVG, před stažením T-Cleaneru a po dobu čištění deaktivuj AVG, následně T-Cleaner smaž
a zapni si AVG.)


Stáhni si ATF Cleaner
Poklepej na ATF Cleaner.exe, klikni select all found, pak klik empty selected.
Pokud chceš zachovat svoje uložená hesla, klikni na No.
ATF-Cleaner je jednoduchý nástroj na odstranění historie z webového prohlížeče. Program dokáže odstranit cache,
cookies, historii a další stopy po surfování na Internetu. Mezi podporované prohlížeče patří Internet Explorer,
Firefox a Opera. Aplikace navíc umí odstranit dočasné soubory Windows, vysypat koš atd.

Označ topic za vyřešený (zelená fajfka) a měj se.