Zlouhavé nabíhání PC

[Sigondis]

Po startu mi trvá skoro 2 minuty než vše dochroupe ,aby mi notebook plně reagoval.Nevíte co by se dalo vše vypnou za zbytečnosti nebo případně kde je chyba ?

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 20:36:00, on 11.1.2011
Platform: Windows Vista SP2 (WinNT 6.00.1906)
MSIE: Internet Explorer v8.00 (8.00.6001.18999)
Boot mode: Normal

Running processes:
C:\Program Files\DigitalPersona\Bin\DpAgent.exe
C:\Windows\system32\Dwm.exe
C:\Windows\system32\taskeng.exe
C:\Windows\Explorer.EXE
C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\Program Files\HP\QuickPlay\QPService.exe
C:\Program Files\Windows Defender\MSASCui.exe
C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\QLBCTRL.exe
C:\Program Files\Hewlett-Packard\HP QuickTouch\HPKBDAPP.exe
C:\Program Files\Hewlett-Packard\HP Wireless Assistant\HPWAMain.exe
C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe
C:\Program Files\IDT\WDM\sttray.exe
C:\Windows\system32\conime.exe
C:\Program Files\Hewlett-Packard\HP wireless Assistant\WiFiMsg.EXE
C:\Program Files\Hewlett-Packard\Shared\HpqToaster.exe
C:\Program Files\Alwil Software\Avast5\AvastUI.exe
C:\Program Files\HP\HP Software Update\hpwuschd2.exe
C:\Program Files\Microsoft IntelliPoint\ipoint.exe
C:\Windows\system32\wbem\unsecapp.exe
C:\Program Files\Western Digital\WD SmartWare\WD Drive Manager\WDDMStatus.exe
C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.seznam.cz/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: Search Helper - {6EBF7485-159F-4bff-A14F-B9E3AAC4465B} - C:\Program Files\Microsoft\Search Enhancement Pack\Search Helper\SEPsearchhelperie.dll
O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll
O2 - BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O4 - HKLM\..\Run: [StartCCC] "C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe"
O4 - HKLM\..\Run: [SynTPEnh] %ProgramFiles%\Synaptics\SynTP\SynTPEnh.exe
O4 - HKLM\..\Run: [DpAgent] C:\Program Files\DigitalPersona\Bin\dpagent.exe
O4 - HKLM\..\Run: [QPService] "C:\Program Files\HP\QuickPlay\QPService.exe"
O4 - HKLM\..\Run: [Windows Defender] %ProgramFiles%\Windows Defender\MSASCui.exe -hide
O4 - HKLM\..\Run: [QlbCtrl.exe] C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\QlbCtrl.exe /Start
O4 - HKLM\..\Run: [OnScreenDisplay] C:\Program Files\Hewlett-Packard\HP QuickTouch\HPKBDAPP.exe
O4 - HKLM\..\Run: [hpWirelessAssistant] C:\Program Files\Hewlett-Packard\HP Wireless Assistant\HPWAMain.exe
O4 - HKLM\..\Run: [GrooveMonitor] "C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe"
O4 - HKLM\..\Run: [SysTrayApp] %ProgramFiles%\IDT\WDM\sttray.exe
O4 - HKLM\..\Run: [HP Health Check Scheduler] c:\Program Files\Hewlett-Packard\HP Health Check\HPHC_Scheduler.exe
O4 - HKLM\..\Run: [UCam_Menu] "C:\Program Files\CyberLink\YouCam\MUITransfer\MUIStartMenu.exe" "C:\Program Files\CyberLink\YouCam" UpdateWithCreateOnce "Software\CyberLink\YouCam\2.0"
O4 - HKLM\..\Run: [avast5] C:\PROGRA~1\ALWILS~1\Avast5\avastUI.exe /nogui
O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\Hp\HP Software Update\HPWuSchd2.exe
O4 - HKLM\..\Run: [IntelliPoint] "c:\Program Files\Microsoft IntelliPoint\ipoint.exe"
O4 - HKCU\..\Run: [ehTray.exe] C:\Windows\ehome\ehTray.exe
O4 - HKCU\..\Run: [Skype] "C:\Program Files\Skype\Phone\Skype.exe" /nosplash /minimized
O4 - Global Startup: WDDMStatus.lnk = C:\Program Files\Western Digital\WD SmartWare\WD Drive Manager\WDDMStatus.exe
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Excel - res://C:\PROGRA~1\MICROS~3\Office12\EXCEL.EXE/3000
O8 - Extra context menu item: Send image to &Bluetooth Device... - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie_ctx.htm
O8 - Extra context menu item: Send page to &Bluetooth Device... - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
O9 - Extra button: Odeslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~3\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: Od&eslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~3\Office12\ONBttnIE.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~3\Office12\REFIEBAR.DLL
O9 - Extra button: @btrez.dll,-4015 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
O9 - Extra 'Tools' menuitem: @btrez.dll,-12650 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} - http://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab
O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Program Files\Microsoft Office\Office12\GrooveSystemServices.dll
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O18 - Protocol: wlpg - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} - C:\Program Files\Windows Live\Photo Gallery\AlbumDownloadProtocolHandler.dll
O20 - Winlogon Notify: !SASWinLogon - C:\Program Files\SUPERAntiSpyware\SASWINLO.dll
O23 - Service: Andrea ST Filters Service (AESTFilters) - Andrea Electronics Corporation - C:\Windows\System32\DriverStore\FileRepository\stwrt.inf_a7e996cd\aestsrv.exe
O23 - Service: Ati External Event Utility - ATI Technologies Inc. - C:\Windows\system32\Ati2evxx.exe
O23 - Service: avast! Antivirus - AVAST Software - C:\Program Files\Alwil Software\Avast5\AvastSvc.exe
O23 - Service: avast! Mail Scanner - AVAST Software - C:\Program Files\Alwil Software\Avast5\AvastSvc.exe
O23 - Service: avast! Web Scanner - AVAST Software - C:\Program Files\Alwil Software\Avast5\AvastSvc.exe
O23 - Service: Com4QLBEx - Hewlett-Packard Development Company, L.P. - C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\Com4QLBEx.exe
O23 - Service: Biometric Authentication Service (DpHost) - DigitalPersona, Inc. - C:\Program Files\DigitalPersona\Bin\DpHostW.exe
O23 - Service: HP Health Check Service - Hewlett-Packard - c:\Program Files\Hewlett-Packard\HP Health Check\hphc_service.exe
O23 - Service: hpqwmiex - Hewlett-Packard Development Company, L.P. - C:\Program Files\Hewlett-Packard\Shared\hpqwmiex.exe
O23 - Service: HP Service (hpsrv) - Hewlett-Packard Corporation - C:\Windows\system32\Hpservice.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\1050\Intel 32\IDriverT.exe
O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files\Common Files\LightScribe\LSSrvc.exe
O23 - Service: NBService - Nero AG - C:\Program Files\Nero\Nero 7\Nero BackItUp\NBService.exe
O23 - Service: NMIndexingService - Nero AG - C:\Program Files\Common Files\Ahead\Lib\NMIndexingService.exe
O23 - Service: O&O Defrag - O&O Software GmbH - C:\Windows\system32\oodag.exe
O23 - Service: PnkBstrA - Unknown owner - C:\Windows\system32\PnkBstrA.exe
O23 - Service: PnkBstrB - Unknown owner - C:\Windows\system32\PnkBstrB.exe
O23 - Service: QuickPlay Background Capture Service (QBCS) (QPCapSvc) - Unknown owner - C:\Program Files\HP\QuickPlay\Kernel\TV\QPCapSvc.exe
O23 - Service: QuickPlay Task Scheduler (QTS) (QPSched) - Unknown owner - C:\Program Files\HP\QuickPlay\Kernel\TV\QPSched.exe
O23 - Service: Recovery Service for Windows - Unknown owner - C:\Windows\SMINST\BLService.exe
O23 - Service: ServiceLayer - Nokia - C:\Program Files\PC Connectivity Solution\ServiceLayer.exe
O23 - Service: Sony Ericsson PCCompanion - Avanquest Software - C:\Program Files\Sony Ericsson\Sony Ericsson PC Companion\PCCService.exe
O23 - Service: Audio Service (STacSV) - IDT, Inc. - C:\Windows\System32\DriverStore\FileRepository\stwrt.inf_a7e996cd\STacSV.exe
O23 - Service: Validity Fingerprint Service (vfsFPService) - Validity Sensors, Inc. - C:\Windows\system32\vfsFPService.exe
O23 - Service: WDDMService - WDC - C:\Program Files\Western Digital\WD SmartWare\WD Drive Manager\WDDMService.exe
O23 - Service: WD File Management Engine (WDFME) - Unknown owner - C:\Program Files\Western Digital\WD SmartWare\Front Parlor\WDFME\WDFME.exe
O23 - Service: WD File Management Shadow Engine (WDSC) - Unknown owner - C:\Program Files\Western Digital\WD SmartWare\Front Parlor\WDSC.exe

--
End of file - 9264 bytes


Malwarebytes' Anti-Malware 1.50.1.1100
www.malwarebytes.org

Verze databáze: 5505

Windows 6.0.6002 Service Pack 2
Internet Explorer 8.0.6001.18999

11.1.2011 20:47:12
mbam-log-2011-01-11 (20-47-12).txt

Typ kontroly: Rychlý test
Testované objekty: 149452
Uplynulý čas: 5 minut, 15 sekund

Infikované procesy v paměti: 0
Infikované moduly v paměti: 0
Infikované klíče v registru: 0
Infikované hodnoty v registru: 0
Infikované datové položky v registru: 0
Infikované složky: 0
Infikované soubory: 0

Infikované procesy v paměti:
(Žádné škodlivé položky nebyly zjištěny)

Infikované moduly v paměti:
(Žádné škodlivé položky nebyly zjištěny)

Infikované klíče v registru:
(Žádné škodlivé položky nebyly zjištěny)

Infikované hodnoty v registru:
(Žádné škodlivé položky nebyly zjištěny)

Infikované datové položky v registru:
(Žádné škodlivé položky nebyly zjištěny)

Infikované složky:
(Žádné škodlivé položky nebyly zjištěny)

Infikované soubory:
(Žádné škodlivé položky nebyly zjištěny)

[Reklama]

[jaro3]

Zavři ostatní aplikace a prohlížeče, odpoj se od netu a fixni v HJT:
Návod

Kód: Vybrat vše

O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} - http://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab


Stáhni si ATF Cleaner
Poklepej na ATF Cleaner.exe, klikni na select all found, poté:
-Když používáš Firefox (Mozzila), klikni na Firefox nahoře a vyber: Select All, poté klikni na Empty Selected.
-Když používáš Operu, klikni nahoře na Operu a vyber: Select All, poté klikni na Empty Selected.
Po vyčištění klikni na Exit k zavření programu.
ATF-Cleaner je jednoduchý nástroj na odstranění historie z webového prohlížeče. Program dokáže odstranit cache, cookies, historii a další stopy po surfování na Internetu. Mezi podporované prohlížeče patří Internet Explorer, Firefox a Opera. Aplikace navíc umí odstranit dočasné soubory Windows, vysypat koš atd.

Stáhni si na svojí plochu StartupLite .exe by MalwareBytes

Tento program identifikuje a dává volbu k odstranění nepotřebných položek k vyprázdnění paměti.
Poklepej na ikonu StartupLite.exe (by MalwareBytes ) ke spuštění programu. Ve vistě a windows 7 spusť jako správce (pravým klik na ikonu a vyber-spustit jako správce).Vytvoří se list nepotřebných vstupů po spuštění. Nech všechny položky jako deaktivované a klikni na Continue . Restartuj PC.

Zkus defragmentaci , pak napiš , jestli se to zlepšilo.

[Sigondis]

Tak jsme vše udělal dle Tvých rad a je to stále stejné.Nepocítil jsem žádné zrychlení.

[memphisto]

Defragmentuj disk, pročisti registry, máš dostatek volného místa na disku? Příčin může být spousta ....

[Sigondis]

Na čistění a registry používám pouze ccleaner tak snad to stačí ? Co se týče disku tak je po defragmentaci a z 320GB mám obsazených jen 50GB.

[memphisto]

Zkontroluj PIO/DMA mód u disku, zkontroluj disk na chyby. U notebooku jsou ale běžné disky s 5400 otáčkami a ty jsou opravdu pomalé ....tak možná na data, ale na systém moc ne

[jaro3]

Kontrola HDD na chyby
otevři Tento počítač- pravým na disk-vlastnosti-záložka nástroje-kontrola chyb-zkontrolovat-v okně zatrhni obě políčka-klikni na spustit- tam to napíše , že kontrola bude provedena po příštím spuštění...
Restartuj PC, kontrola s opravou někdy trvá i několik hodin...

+
Vypni rez. ochranu u antiviru a antispywaru,příp. firewall..

Stáhni si ComboFix (by sUBs)
a ulož si ho na plochu.
Ukonči všechna aktivní okna a spusť ho.
- Po spuštění se zobrazí podmínky užití, potvrď je stiskem tlačítka Ano
- Dále postupuj dle pokynů, během aplikování ComboFixu neklikej do zobrazujícího se okna
- Po dokončení skenování by měl program vytvořit log - C:\ComboFix.txt - zkopíruj sem prosím celý jeho obsah
Pokud budou problémy , spusť ho v nouz. režimu.

[Sigondis]

Tak na disku žádné chyby dle kontroly nejsou a přikládám ještě ten log.Jen po restartu combofixu mne nešli spustit žádné programy, tak jsme musel restartovat počítač a vše je v pohodě.

ComboFix 11-01-12.04 - Ivet a Majky 13.01.2011 19:16:29.3.2 - x86
Microsoft® Windows Vista™ Home Premium 6.0.6002.2.1250.420.1029.18.2045.1065 [GMT 1:00]
Spuštěný z: c:\users\Ivet a Majky\Desktop\ComboFix.exe
AV: avast! Antivirus *Disabled/Updated* {C37D8F93-0602-E43C-40AA-47DAD597F308}
SP: avast! Antivirus *Disabled/Updated* {781C6E77-2038-EBB2-7A1A-7CA8AE10B9B5}
SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.

((((((((((((((((((((((((( Soubory vytvořené od 2010-12-13 do 2011-01-13 )))))))))))))))))))))))))))))))
.

2011-01-13 18:38 . 2011-01-13 18:43 -------- d-----w- c:\users\Ivet a Majky\AppData\Local\temp
2011-01-13 18:38 . 2011-01-13 18:38 -------- d-----w- c:\users\Default\AppData\Local\temp
2011-01-13 17:18 . 2011-01-13 17:49 -------- d-----w- c:\program files\Team17 Software Ltd
2011-01-13 15:05 . 2011-01-13 15:09 -------- d-----w- c:\users\Ivet a Majky\AppData\Local\Adobe
2011-01-12 18:41 . 2011-01-12 18:41 -------- d-----w- c:\users\Ivet a Majky\AppData\Local\Ahead
2011-01-12 17:29 . 2011-01-12 17:29 -------- d-----w- c:\users\Ivet a Majky\AppData\Local\ATI
2011-01-11 20:20 . 2010-12-28 15:55 413696 ----a-w- c:\windows\system32\odbc32.dll
2011-01-11 20:20 . 2010-12-28 15:53 253952 ----a-w- c:\program files\Common Files\System\ado\msadox.dll
2011-01-11 20:20 . 2010-12-28 15:53 241664 ----a-w- c:\program files\Common Files\System\ado\msadomd.dll
2011-01-11 20:20 . 2010-12-28 15:53 708608 ----a-w- c:\program files\Common Files\System\ado\msado15.dll
2011-01-11 20:20 . 2010-12-28 15:53 57344 ----a-w- c:\program files\Common Files\System\msadc\msadcs.dll
2011-01-11 20:20 . 2010-12-28 15:53 180224 ----a-w- c:\program files\Common Files\System\msadc\msadco.dll
2011-01-11 20:20 . 2010-12-14 14:49 1169408 ----a-w- c:\windows\system32\sdclt.exe
2011-01-11 20:18 . 2010-11-10 04:33 6273872 ----a-w- c:\programdata\Microsoft\Windows Defender\Definition Updates\{90624B63-56CA-4A66-85A9-D9E6E21DEE97}\mpengine.dll
2011-01-09 18:15 . 2011-01-09 18:17 -------- d-----w- c:\users\Ivet a Majky\AppData\Local\Google
2011-01-09 18:15 . 2011-01-09 18:15 -------- d-----w- c:\users\Ivet a Majky\AppData\Local\Deployment
2011-01-09 17:25 . 2011-01-09 17:25 -------- d-----w- c:\program files\xRay
2011-01-09 11:08 . 2011-01-09 11:08 -------- d-----w- c:\program files\MozBackup
2011-01-09 10:02 . 2011-01-09 19:41 -------- d-----w- c:\windows\UltraDefrag
2011-01-09 09:54 . 2011-01-09 16:21 -------- d-----w- c:\program files\Common Files\Acronis
2011-01-09 09:54 . 2011-01-09 09:54 -------- d-----w- c:\program files\Acronis
2011-01-09 09:12 . 2011-01-09 09:12 -------- d-----w- c:\programdata\AltrixSoft
2011-01-09 09:12 . 2011-01-09 09:15 -------- d-----w- c:\program files\Common Files\AltrixSoft
2011-01-08 21:28 . 2011-01-08 21:28 -------- d-----w- c:\windows\system32\oodag
2011-01-08 21:24 . 2011-01-08 21:24 -------- d-----w- c:\program files\OO Software
2011-01-08 07:14 . 2011-01-08 07:14 -------- d-----w- c:\users\Ivet a Majky\AppData\Local\Western_Digital
2011-01-08 07:14 . 2011-01-08 07:14 -------- d-----w- c:\programdata\Western Digital
2011-01-08 07:13 . 2011-01-08 07:13 -------- d-----w- c:\program files\Western Digital
2011-01-02 18:22 . 2011-01-02 18:33 -------- d-----w- c:\program files\Microsoft IntelliPoint
2011-01-01 19:47 . 2011-01-06 16:14 -------- d-----w- c:\users\Ivet a Majky\AppData\Local\O&O
2010-12-28 16:06 . 2010-12-28 16:10 -------- d-----w- c:\users\Ivet a Majky\AppData\Local\Downloaded Installations
2010-12-26 17:14 . 2010-12-26 17:14 -------- d-----w- c:\users\Ivet a Majky\dwhelper
2010-12-25 21:42 . 2010-12-26 15:30 -------- d-----w- c:\programdata\Avanquest Bluetooth SDK
2010-12-25 21:36 . 2010-12-25 21:36 -------- d-----w- c:\program files\Avanquest update
2010-12-25 21:36 . 2010-12-25 21:36 -------- d-----w- c:\programdata\BVRP Software
2010-12-25 21:36 . 2010-12-25 22:09 -------- d-----w- c:\users\Ivet a Majky\AppData\Local\Sony Ericsson
2010-12-25 21:32 . 2010-12-25 21:38 -------- d-----w- c:\program files\Sony Ericsson
2010-12-25 21:32 . 2010-12-25 21:37 -------- d-----w- c:\programdata\Sony Ericsson
2010-12-21 19:40 . 2010-12-21 19:40 -------- d-----w- c:\users\Ivet a Majky\AppData\Local\Windows Live Writer
2010-12-21 19:40 . 2010-12-21 19:40 -------- d-----w- c:\users\Ivet a Majky\AppData\Roaming\Windows Live Writer
2010-12-16 06:40 . 2010-11-03 10:51 2409784 ----a-w- c:\program files\Windows Mail\OESpamFilter.dat

.
(((((((((((((((((((((((((((((((((((((((( Find3M výpis ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2010-12-20 17:09 . 2009-06-21 15:09 38224 ----a-w- c:\windows\system32\drivers\mbamswissarmy.sys
2010-12-20 17:08 . 2009-06-21 15:09 20952 ----a-w- c:\windows\system32\drivers\mbam.sys
2010-12-08 12:17 . 2008-12-05 10:06 231248 ----a-w- c:\windows\system32\drivers\truecrypt.sys
2010-11-04 18:55 . 2010-12-16 06:41 601600 ----a-w- c:\windows\system32\schedsvc.dll
2010-10-19 09:41 . 2009-10-02 19:20 222080 ------w- c:\windows\system32\MpSigStub.exe
.

(((((((((((((((((((((((((((((((((( Spouštěcí body v registru )))))))))))))))))))))))))))))))))))))))))))))
.
.
*Poznámka* prázdné záznamy a legitimní výchozí údaje nejsou zobrazeny.
REGEDIT4

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"ehTray.exe"="c:\windows\ehome\ehTray.exe" [2008-01-21 125952]
"Skype"="c:\program files\Skype\Phone\Skype.exe" [2011-01-03 15028104]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"StartCCC"="c:\program files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" [2008-01-21 61440]
"DpAgent"="c:\program files\DigitalPersona\Bin\dpagent.exe" [2008-03-12 699456]
"QPService"="c:\program files\HP\QuickPlay\QPService.exe" [2008-05-14 468264]
"QlbCtrl.exe"="c:\program files\Hewlett-Packard\HP Quick Launch Buttons\QlbCtrl.exe" [2008-03-14 202032]
"OnScreenDisplay"="c:\program files\Hewlett-Packard\HP QuickTouch\HPKBDAPP.exe" [2007-11-01 554288]
"hpWirelessAssistant"="c:\program files\Hewlett-Packard\HP Wireless Assistant\HPWAMain.exe" [2007-11-20 488752]
"GrooveMonitor"="c:\program files\Microsoft Office\Office12\GrooveMonitor.exe" [2008-10-25 31072]
"HP Health Check Scheduler"="c:\program files\Hewlett-Packard\HP Health Check\HPHC_Scheduler.exe" [2008-10-09 75008]
"UCam_Menu"="c:\program files\CyberLink\YouCam\MUITransfer\MUIStartMenu.exe" [2008-06-13 210216]
"avast5"="c:\progra~1\ALWILS~1\Avast5\avastUI.exe" [2010-09-07 2838912]

c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\
WDDMStatus.lnk - c:\program files\Western Digital\WD SmartWare\WD Drive Manager\WDDMStatus.exe [2010-9-8 5185536]

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"EnableLUA"= 0 (0x0)
"EnableUIADesktopToggle"= 0 (0x0)

[hkey_local_machine\software\microsoft\windows\currentversion\explorer\ShellExecuteHooks]
"{5AE067D3-9AFB-48E0-853A-EBB7F4A000DA}"= "c:\program files\SUPERAntiSpyware\SASSEH.DLL" [2008-05-13 77824]

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\!SASWinLogon]
2008-12-22 10:05 356352 ----a-w- c:\program files\SUPERAntiSpyware\SASWINLO.dll

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\drivers32]
"aux"=wdmaud.drv

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\session manager]
BootExecute REG_MULTI_SZ autocheck autochk * \0lsdelete\0OODBS

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Wdf01000.sys]
@="Driver"

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WudfSvc]
@="Service"

[HKLM\~\startupfolder\C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^Bluetooth.lnk]
path=c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\Bluetooth.lnk
backup=c:\windows\pss\Bluetooth.lnk.CommonStartup
backupExtension=.CommonStartup

[HKLM\~\startupfolder\C:^Users^Ivet a Majky^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^Výřezy obrazovky a spuštění aplikace OneNote 2007.lnk]
path=c:\users\Ivet a Majky\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Výřezy obrazovky a spuštění aplikace OneNote 2007.lnk
backup=c:\windows\pss\Výřezy obrazovky a spuštění aplikace OneNote 2007.lnk.Startup
backupExtension=.Startup
HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\HP Software Update
HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\IntelliPoint

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NokiaMServer]
c:\program files\Common Files\Nokia\MPlatform\NokiaMServer [X]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe ARM]
2010-09-20 21:07 932288 ----a-r- c:\program files\Common Files\Adobe\ARM\1.0\AdobeARM.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe Reader Speed Launcher]
2010-09-23 02:47 35760 ----a-w- c:\program files\Adobe\Reader 9.0\Reader\reader_sl.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}]
2007-06-27 18:03 152872 ----a-w- c:\program files\Common Files\Ahead\Lib\NMBgMonitor.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Eraser]
2006-12-26 00:23 643072 ----a-w- c:\program files\Eraser\eraser.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NeroFilterCheck]
2007-03-01 14:57 153136 ----a-w- c:\program files\Common Files\Ahead\Lib\NeroCheck.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\OODefragTray]
2007-05-11 01:08 2512392 ----a-w- c:\windows\System32\oodtray.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Sony Ericsson PC Companion]
2010-11-16 10:07 422912 ----a-w- c:\program files\Sony Ericsson\Sony Ericsson PC Companion\PCCompanion.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\UCam_Menu]
2008-06-13 16:11 210216 ------w- c:\program files\CyberLink\YouCam\MUITransfer\MUIStartMenu.exe

[HKEY_LOCAL_MACHINE\software\microsoft\security center\Svc\S-1-5-21-1653149945-303028355-1575982475-1000]
"EnableNotificationsRef"=dword:00000001

R2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;c:\windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
R3 IpwP;IPWireless 3G Network Adapter;c:\windows\system32\DRIVERS\ipw3gnet.sys [2007-06-12 51040]
R3 SASENUM;SASENUM;c:\program files\SUPERAntiSpyware\SASENUM.SYS [2009-06-23 7408]
R3 Sony Ericsson PCCompanion;Sony Ericsson PCCompanion;c:\program files\Sony Ericsson\Sony Ericsson PC Companion\PCCService.exe [2010-10-26 155344]
R3 WDC_SAM;WD SCSI Pass Thru driver;c:\windows\system32\DRIVERS\wdcsam.sys [2009-02-13 11520]
R3 WPFFontCache_v0400;Windows Presentation Foundation Font Cache 4.0.0.0;c:\windows\Microsoft.NET\Framework\v4.0.30319\WPF\WPFFontCache_v0400.exe [2010-03-18 753504]
S0 Amddfltr;Amd Disk Lower Filter Driver;c:\windows\system32\DRIVERS\Amddfltr.sys [2008-01-07 15416]
S0 sptd;sptd;c:\windows\System32\Drivers\sptd.sys [2010-05-29 691696]
S1 aswSP;aswSP; [x]
S1 SASDIFSV;SASDIFSV;c:\program files\SUPERAntiSpyware\SASDIFSV.SYS [2009-06-23 9968]
S1 SASKUTIL;SASKUTIL;c:\program files\SUPERAntiSpyware\SASKUTIL.sys [2009-06-23 72944]
S2 AESTFilters;Andrea ST Filters Service;c:\windows\System32\DriverStore\FileRepository\stwrt.inf_a7e996cd\aestsrv.exe [2008-06-27 77824]
S2 aswFsBlk;aswFsBlk; [x]
S2 aswMonFlt;aswMonFlt;c:\windows\system32\drivers\aswMonFlt.sys [2010-09-07 50768]
S2 Ethpdrv;Ethernet Packet Driver;c:\windows\system32\DRIVERS\ethpdrv.sys [2005-09-07 9728]
S2 hpsrv;HP Service;c:\windows\system32\Hpservice.exe [2008-08-07 24880]
S2 Recovery Service for Windows;Recovery Service for Windows;c:\windows\SMINST\BLService.exe [2008-03-26 341328]
S2 vfsFPService;Validity Fingerprint Service;c:\windows\system32\vfsFPService.exe [2008-03-26 595248]
S2 WDDMService;WDDMService;c:\program files\Western Digital\WD SmartWare\WD Drive Manager\WDDMService.exe [2010-09-08 237056]
S2 WDFME;WD File Management Engine;c:\program files\Western Digital\WD SmartWare\Front Parlor\WDFME\WDFME.exe [2010-09-08 1034752]
S2 WDSC;WD File Management Shadow Engine;c:\program files\Western Digital\WD SmartWare\Front Parlor\WDSC.exe [2010-09-08 484352]
S3 Com4QLBEx;Com4QLBEx;c:\program files\Hewlett-Packard\HP Quick Launch Buttons\Com4QLBEx.exe [2008-04-03 193840]
S3 dc3d;MS Hardware Device Detection Driver;c:\windows\system32\DRIVERS\dc3d.sys [2010-07-21 44432]
S3 enecir;ENE CIR Receiver;c:\windows\system32\DRIVERS\enecir.sys [2008-01-23 52736]
S3 JMCR;JMCR;c:\windows\system32\DRIVERS\jmcr.sys [2008-04-01 81296]
S3 vfs101x;vfs101x;c:\windows\system32\drivers\vfs101x.sys [2008-03-26 40752]


[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost]
bthsvcs REG_MULTI_SZ BthServ
LocalServiceAndNoImpersonation REG_MULTI_SZ FontCache

[HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{10880D85-AAD9-4558-ABDC-2AB1552D831F}]
2008-02-26 12:06 451872 ----a-w- c:\program files\Common Files\LightScribe\LSRunOnce.exe
.
.
------- Doplňkový sken -------
.
uStart Page = hxxp://www.seznam.cz/
IE: E&xportovat do aplikace Microsoft Excel - c:\progra~1\MICROS~3\Office12\EXCEL.EXE/3000
IE: Send image to &Bluetooth Device... - c:\program files\WIDCOMM\Bluetooth Software\btsendto_ie_ctx.htm
IE: Send page to &Bluetooth Device... - c:\program files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
FF - ProfilePath - c:\users\Ivet a Majky\AppData\Roaming\Mozilla\Firefox\Profiles\sfejoxc1.default\
FF - prefs.js: browser.startup.homepage - hxxp://www.seznam.cz/
FF - Ext: Default: {972ce4c6-7e08-4474-a285-3208198ce6fd} - c:\program files\Mozilla Firefox\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}
FF - Ext: Auto Shutdown: amin.eft_Shutdown@gmail.com - %profile%\extensions\amin.eft_Shutdown@gmail.com
FF - Ext: Better Gmail 2: bettergmail2@ginatrapani.org - %profile%\extensions\bettergmail2@ginatrapani.org
FF - Ext: Launchy: launchy@gemal.dk - %profile%\extensions\launchy@gemal.dk
FF - Ext: Searchbar Autosizer: {655397ca-4766-496b-b7a8-3a5b176ee4c2} - %profile%\extensions\{655397ca-4766-496b-b7a8-3a5b176ee4c2}
FF - Ext: URL Suffix: {77a873d0-4afd-11d9-9669-0800200c9a66} - %profile%\extensions\{77a873d0-4afd-11d9-9669-0800200c9a66}
FF - Ext: DownloadHelper: {b9db16a4-6edc-47ec-a1f4-b86292ed211d} - %profile%\extensions\{b9db16a4-6edc-47ec-a1f4-b86292ed211d}
FF - Ext: Adblock Plus: {d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d} - %profile%\extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}
FF - Ext: ClearPrivate Data... +: {0dd39226-2650-404d-a43d-ffd906b35a9e} - %profile%\extensions\{0dd39226-2650-404d-a43d-ffd906b35a9e}
FF - Ext: České slovníky pro kontrolu pravopisu: cs@dictionaries.addons.mozilla.org - %profile%\extensions\cs@dictionaries.addons.mozilla.org
FF - Ext: Zoom Page: zoompage@DW-dev - %profile%\extensions\zoompage@DW-dev
.
- - - - NEPLATNÉ POLOŽKY ODSTRANĚNÉ Z REGISTRU - - - -

WebBrowser-{D4027C7F-154A-4066-A1AD-4243D8127440} - (no file)
HKLM-Run-SynTPEnh - %ProgramFiles%\Synaptics\SynTP\SynTPEnh.exe
HKLM-Run-SysTrayApp - %ProgramFiles%\IDT\WDM\sttray.exe
SafeBoot-WudfPf
SafeBoot-WudfRd
MSConfigStartUp-adm_tray - c:\program files\Acronis\DriveMonitor\adm_tray.exe
MSConfigStartUp-NokiaOviSuite2 - c:\program files\Nokia\Nokia Ovi Suite\NokiaOviSuite.exe
MSConfigStartUp-TO2SSM_McciTrayApp - c:\program files\TO2SSM\McciTrayApp.exe



**************************************************************************

catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2011-01-13 19:44
Windows 6.0.6002 Service Pack 2 NTFS

skenování skrytých procesů ...

skenování skrytých položek 'Po spuštění' ...

skenování skrytých souborů ...

sken byl úspešně dokončen
skryté soubory: 0

**************************************************************************
.
--------------------- ZAMKNUTÉ KLÍČE V REGISTRU ---------------------

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil10l_ActiveX.exe,-101"

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\Elevation]
"Enabled"=dword:00000001

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\LocalServer32]
@="c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil10l_ActiveX.exe"

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{C946B634-0AEB-F46F-54FE-2FF7E66BC148}\InProcServer32*]
"jagbedhoepmhmbfoaooo"=hex:6b,61,61,65,6d,61,64,65,6f,62,68,61,64,6d,70,62,6e,
6d,64,66,70,68,00,00
"iagboffniggdenemdl"=hex:6b,61,61,65,6d,61,64,65,6f,62,68,61,64,6d,70,62,6e,6d,
64,66,70,68,00,00

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}]
@Denied: (A 2) (Everyone)
@="IFlashBroker4"

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\System*]
"OODEFRAG12.00.00.01PROFESSIONAL"="F5B7DBB9E6DBD25038835C1D5BD088CF4C459B76A1341764095FA0A4497172934808069CA2FC05C9BEB338AA0785FEBC9E127BECC74CFEBC9E127BECC74CFEBC9E127BECC74CFEBC9E127BECC74CFEBC9E127BECC74CFEBC9E127BECC74CA6A0AC4980AC7933C038D530D6EB34529DB7CE019D40AA5C9DB7CE019D40AA5CBB8A142402AAF00F0AE55214D6515BDC888D61013D3AE04542EBDD021CA956DE2C83ABACF2E49E7039A4D17D1C7268A1463627D0DAE647C0D0894D714245971201C67F30DDEB3235805B2C0FB791EF94A40465F9A557816AE4641A956DE78ED1A62E22962E9E316B5154212AAB4EB40CB95328F6538C2C035B08BBA12690576A5E169CE8639ED508F0DE63D20A0CADC67184EFE4AC4A1DB06306A1E98D05C2073D6168D88F530DE17A4D1D327DF104E3097B33828E97DA7D81722E6A534E543CAAF57437DBE478335A766A12406A18E7949E5AB66B4221548B66B63EBEBA4680E5BB25FB0243ED1D53B358E32326FA3A7A5A410AC6D8DF0930FD052AA95A042EFCA05040D12076227A65EDBA0A177329751E3A29BB31B9D0ECDAD7110482AD025697C045AE71CFA9396E23CD6FF4FBE393DD8AE4756186439621E000CDCB9921AA9636EC8E70EA7F4FB4E1FA5C39447FB9906A3238C7D2DF54F8C5239F94CE0F0715E33E7F9DEE52CC218BC07325ADF31CB2872A5683DC06221022CCA17C0AB84B1370E39E3834B697A5F34368BB4F9EC6448289BA78187DD0950272936A3C6B2C10F62E9F49C8A3E9B2E3C9834373BD98C77031624EAD6E02BFE7ADC50789D8B293070D4A19EC73503F96C12147987743C5D9A5DEF377E5AF46C9BDA13ECA98BCA62299F9B597662F46BB3A30177054CFC8BC90559585D524E513849EC18CA479D6400E9C7272A03A4777E7B644633F17E1893F7DAA9A93805F20064C880E5BEEB44D4A366559A77B43E2214C298A8948232521A6693058B677C4EDCCC8467FF457A6CFDF675F6951C109E29DDD346866A5E9CCB14E70418F774409D6825BB6385820C641184A326D4E6A4C6AC3E473470523F8931A3B50282B5BC933F4AB8BBBD481781D5891B8D4F4F9A286FBD02618DF1284D551246A6E6337474225C6ED50EE05D5454FE412E24B214C5B6FE3E255D9ECEF15BA7259A574F8B8745D702EA2CCD870206624B943E53CD6E4C73BEC529C5CDE82E3214AE7B7B7FE51AAA303AD9622FE2A4CE690F8E019EF33752B6CB650FB1CE59BE0CF1F097D19725D8A8741F9F45D727375D859D9FD6DEAAAB96E7CA8DE9314F6155D8BC9C62F858B863B04A9600A9C114CBA0FF3A2C5435F21E2F1D508567E4DD3CDC1DE088ACE8DACFDEDDB5FA75FA01FC0175531960ACE509E3B12F219A4BBEA5DA8302618A281C498CB48677D855E51DA4429CB9E9EF668594E970AB49BA158AE7CA9F9EA6CC64BB3BD2E"
"OODEFRAG10.00.00.01WORKSTATION"="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"
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

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0004\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0005\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
--------------------- Knihovny navázané na běžící procesy ---------------------

- - - - - - - > 'Explorer.exe'(2228)
c:\program files\DigitalPersona\Bin\DpoFeedb.dll
c:\windows\system32\btncopy.dll
c:\program files\Nokia\Nokia PC Suite 7\PhoneBrowser.dll
c:\program files\Nokia\Nokia PC Suite 7\NGSCM.DLL
c:\program files\Nokia\Nokia PC Suite 7\Lang\PhoneBrowser_cze.nlr
c:\program files\Nokia\Nokia PC Suite 7\Resource\PhoneBrowser_Nokia.ngr
.
------------------------ Jiné spuštené procesy ------------------------
.
c:\windows\system32\Ati2evxx.exe
c:\windows\System32\DriverStore\FileRepository\stwrt.inf_a7e996cd\STacSV.exe
c:\windows\system32\Ati2evxx.exe
c:\program files\Alwil Software\Avast5\AvastSvc.exe
c:\windows\system32\WLANExt.exe
c:\program files\DigitalPersona\Bin\DpHostW.exe
c:\program files\Common Files\LightScribe\LSSrvc.exe
c:\windows\system32\oodag.exe
c:\windows\system32\PnkBstrA.exe
c:\windows\system32\PnkBstrB.exe
c:\program files\HP\QuickPlay\Kernel\TV\QPCapSvc.exe
c:\program files\HP\QuickPlay\Kernel\TV\QPSched.exe
c:\program files\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe
c:\program files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
c:\program files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe
c:\windows\servicing\TrustedInstaller.exe
c:\windows\system32\conime.exe
c:\program files\Synaptics\SynTP\SynTPEnh.exe
c:\program files\IDT\WDM\sttray.exe
c:\program files\Alwil Software\Avast5\AvastUI.exe
c:\windows\system32\wbem\unsecapp.exe
c:\program files\Hewlett-Packard\Shared\hpqwmiex.exe
c:\program files\Hewlett-Packard\HP wireless Assistant\WiFiMsg.EXE
c:\program files\Hewlett-Packard\HP Health Check\hphc_service.exe
c:\program files\Hewlett-Packard\Shared\HpqToaster.exe
c:\program files\Synaptics\SynTP\SynTPHelper.exe
c:\program files\Skype\Plugin Manager\skypePM.exe
c:\\?\c:\windows\system32\wbem\WMIADAP.EXE
.
**************************************************************************
.
Celkový čas: 2011-01-13 19:48:55 - počítač byl restartován
ComboFix-quarantined-files.txt 2011-01-13 18:48

Před spuštěním: Volných bajtů: 266 093 735 936
Po spuštění: Volných bajtů: 265 851 887 616

Current=1 Default=1 Failed=0 LastKnownGood=11 Sets=1,2,3,4,5,6,7,8,9,11
- - End Of File - - 0A03CC3517D68B2631277AE917A5AE50

[jaro3]

Otevři si Poznámkový blok (Start -> Spustit... a napiš do okna Notepad a dej Ok.
Zkopíruj do něj následující celý text označený zeleně:
Poznámka: Nepoužij k označení skriptu funkci VYBRAT VŠE

Kód: Vybrat vše

Registry::
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"EnableLUA"=-
"EnableUIADesktopToggle"=-

RegNull::
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0004\AllUserSettings]
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0005\AllUserSettings]

RegLock::
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}]
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\Elevation]
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\LocalServer32]
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\TypeLib]
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{C946B634-0AEB-F46F-54FE-2FF7E66BC148}\InProcServer32*]
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}]
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}\ProxyStubClsid32]
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}\TypeLib]
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0004\AllUserSettings]
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0005\AllUserSettings]

Zvol možnost Soubor -> Uložit jako... a nastav tyto parametry:
Název souboru: zde napiš: CFScript.txt
Uložit jako typ: tak tam vyber Všechny soubory
Ulož soubor na plochu.
Ukonči všechna aktivní okna.

Uchop myší vytvořený skript CFScript.txt, přemísti ho nad stažený program ComboFix.exe a když se oba soubory překryjí, skript upusť.
- Automaticky se spustí ComboFix
- Vlož sem log, který vyběhne v závěru čistícího procesu + nový log z HJT


Upozornění : Může se stát, že po aplikaci skriptu a restartu počítače Windows nenaběhnou, pak znovu restartuj počítač, mačkej F8 a pak zvol poslední známou funkční konfiguraci.

[Sigondis]

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 21:14:39, on 13.1.2011
Platform: Windows Vista SP2 (WinNT 6.00.1906)
MSIE: Internet Explorer v8.00 (8.00.6001.18999)
Boot mode: Normal

Running processes:
C:\Program Files\DigitalPersona\Bin\DpAgent.exe
C:\Windows\system32\Dwm.exe
C:\Windows\system32\taskeng.exe
C:\Windows\Explorer.EXE
C:\Windows\system32\taskeng.exe
C:\Program Files\HP\QuickPlay\QPService.exe
C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\QLBCTRL.exe
C:\Program Files\Hewlett-Packard\HP QuickTouch\HPKBDAPP.exe
C:\Program Files\Hewlett-Packard\HP Wireless Assistant\HPWAMain.exe
C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe
C:\Program Files\Hewlett-Packard\HP Health Check\HPHC_Scheduler.exe
C:\Program Files\Alwil Software\Avast5\AvastUI.exe
C:\Program Files\Skype\Phone\Skype.exe
C:\Program Files\Western Digital\WD SmartWare\WD Drive Manager\WDDMStatus.exe
C:\Windows\system32\wbem\unsecapp.exe
C:\Program Files\Hewlett-Packard\HP wireless Assistant\WiFiMsg.EXE
C:\Program Files\Hewlett-Packard\Shared\HpqToaster.exe
C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
C:\Program Files\Skype\Plugin Manager\skypePM.exe
C:\Majky\Stazeno z internetu\HijackThis.exe
C:\Windows\system32\DllHost.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.seznam.cz/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://ie.redirect.hp.com/svs/rdr?TYPE= ... on&pf=cnnb
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
O2 - BHO: Search Helper - {6EBF7485-159F-4bff-A14F-B9E3AAC4465B} - C:\Program Files\Microsoft\Search Enhancement Pack\Search Helper\SEPsearchhelperie.dll
O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll
O2 - BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O4 - HKLM\..\Run: [StartCCC] "C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe"
O4 - HKLM\..\Run: [DpAgent] C:\Program Files\DigitalPersona\Bin\dpagent.exe
O4 - HKLM\..\Run: [QPService] "C:\Program Files\HP\QuickPlay\QPService.exe"
O4 - HKLM\..\Run: [QlbCtrl.exe] C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\QlbCtrl.exe /Start
O4 - HKLM\..\Run: [OnScreenDisplay] C:\Program Files\Hewlett-Packard\HP QuickTouch\HPKBDAPP.exe
O4 - HKLM\..\Run: [hpWirelessAssistant] C:\Program Files\Hewlett-Packard\HP Wireless Assistant\HPWAMain.exe
O4 - HKLM\..\Run: [GrooveMonitor] "C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe"
O4 - HKLM\..\Run: [HP Health Check Scheduler] c:\Program Files\Hewlett-Packard\HP Health Check\HPHC_Scheduler.exe
O4 - HKLM\..\Run: [UCam_Menu] "C:\Program Files\CyberLink\YouCam\MUITransfer\MUIStartMenu.exe" "C:\Program Files\CyberLink\YouCam" UpdateWithCreateOnce "Software\CyberLink\YouCam\2.0"
O4 - HKLM\..\Run: [avast5] C:\PROGRA~1\ALWILS~1\Avast5\avastUI.exe /nogui
O4 - HKCU\..\Run: [ehTray.exe] C:\Windows\ehome\ehTray.exe
O4 - HKCU\..\Run: [Skype] "C:\Program Files\Skype\Phone\Skype.exe" /nosplash /minimized
O4 - Global Startup: WDDMStatus.lnk = C:\Program Files\Western Digital\WD SmartWare\WD Drive Manager\WDDMStatus.exe
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Excel - res://C:\PROGRA~1\MICROS~3\Office12\EXCEL.EXE/3000
O8 - Extra context menu item: Send image to &Bluetooth Device... - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie_ctx.htm
O8 - Extra context menu item: Send page to &Bluetooth Device... - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
O9 - Extra button: Odeslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~3\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: Od&eslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~3\Office12\ONBttnIE.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~3\Office12\REFIEBAR.DLL
O9 - Extra button: @btrez.dll,-4015 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
O9 - Extra 'Tools' menuitem: @btrez.dll,-12650 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Program Files\Microsoft Office\Office12\GrooveSystemServices.dll
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O18 - Protocol: wlpg - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} - C:\Program Files\Windows Live\Photo Gallery\AlbumDownloadProtocolHandler.dll
O20 - Winlogon Notify: !SASWinLogon - C:\Program Files\SUPERAntiSpyware\SASWINLO.dll
O22 - SharedTaskScheduler: Component Categories cache daemon - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\Windows\system32\browseui.dll
O23 - Service: Andrea ST Filters Service (AESTFilters) - Andrea Electronics Corporation - C:\Windows\System32\DriverStore\FileRepository\stwrt.inf_a7e996cd\aestsrv.exe
O23 - Service: Ati External Event Utility - ATI Technologies Inc. - C:\Windows\system32\Ati2evxx.exe
O23 - Service: avast! Antivirus - AVAST Software - C:\Program Files\Alwil Software\Avast5\AvastSvc.exe
O23 - Service: avast! Mail Scanner - AVAST Software - C:\Program Files\Alwil Software\Avast5\AvastSvc.exe
O23 - Service: avast! Web Scanner - AVAST Software - C:\Program Files\Alwil Software\Avast5\AvastSvc.exe
O23 - Service: Com4QLBEx - Hewlett-Packard Development Company, L.P. - C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\Com4QLBEx.exe
O23 - Service: Biometric Authentication Service (DpHost) - DigitalPersona, Inc. - C:\Program Files\DigitalPersona\Bin\DpHostW.exe
O23 - Service: HP Health Check Service - Hewlett-Packard - c:\Program Files\Hewlett-Packard\HP Health Check\hphc_service.exe
O23 - Service: hpqwmiex - Hewlett-Packard Development Company, L.P. - C:\Program Files\Hewlett-Packard\Shared\hpqwmiex.exe
O23 - Service: HP Service (hpsrv) - Hewlett-Packard Corporation - C:\Windows\system32\Hpservice.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\1050\Intel 32\IDriverT.exe
O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files\Common Files\LightScribe\LSSrvc.exe
O23 - Service: NBService - Nero AG - C:\Program Files\Nero\Nero 7\Nero BackItUp\NBService.exe
O23 - Service: NMIndexingService - Nero AG - C:\Program Files\Common Files\Ahead\Lib\NMIndexingService.exe
O23 - Service: O&O Defrag - O&O Software GmbH - C:\Windows\system32\oodag.exe
O23 - Service: PnkBstrA - Unknown owner - C:\Windows\system32\PnkBstrA.exe
O23 - Service: PnkBstrB - Unknown owner - C:\Windows\system32\PnkBstrB.exe
O23 - Service: QuickPlay Background Capture Service (QBCS) (QPCapSvc) - Unknown owner - C:\Program Files\HP\QuickPlay\Kernel\TV\QPCapSvc.exe
O23 - Service: QuickPlay Task Scheduler (QTS) (QPSched) - Unknown owner - C:\Program Files\HP\QuickPlay\Kernel\TV\QPSched.exe
O23 - Service: Recovery Service for Windows - Unknown owner - C:\Windows\SMINST\BLService.exe
O23 - Service: ServiceLayer - Nokia - C:\Program Files\PC Connectivity Solution\ServiceLayer.exe
O23 - Service: Sony Ericsson PCCompanion - Avanquest Software - C:\Program Files\Sony Ericsson\Sony Ericsson PC Companion\PCCService.exe
O23 - Service: Audio Service (STacSV) - IDT, Inc. - C:\Windows\System32\DriverStore\FileRepository\stwrt.inf_a7e996cd\STacSV.exe
O23 - Service: Validity Fingerprint Service (vfsFPService) - Validity Sensors, Inc. - C:\Windows\system32\vfsFPService.exe
O23 - Service: WDDMService - WDC - C:\Program Files\Western Digital\WD SmartWare\WD Drive Manager\WDDMService.exe
O23 - Service: WD File Management Engine (WDFME) - Unknown owner - C:\Program Files\Western Digital\WD SmartWare\Front Parlor\WDFME\WDFME.exe
O23 - Service: WD File Management Shadow Engine (WDSC) - Unknown owner - C:\Program Files\Western Digital\WD SmartWare\Front Parlor\WDSC.exe

--
End of file - 8682 bytes


ComboFix 11-01-12.04 - Ivet a Majky 13.01.2011 20:29:41.4.2 - x86
Microsoft® Windows Vista™ Home Premium 6.0.6002.2.1250.420.1029.18.2045.1181 [GMT 1:00]
Spuštěný z: c:\users\Ivet a Majky\Desktop\ComboFix.exe
Použité ovládací přepínače :: c:\users\Ivet a Majky\Desktop\CFScript.txt
AV: avast! Antivirus *Disabled/Updated* {C37D8F93-0602-E43C-40AA-47DAD597F308}
SP: avast! Antivirus *Disabled/Updated* {781C6E77-2038-EBB2-7A1A-7CA8AE10B9B5}
SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.

((((((((((((((((((((((((( Soubory vytvořené od 2010-12-13 do 2011-01-13 )))))))))))))))))))))))))))))))
.

2011-01-13 19:42 . 2011-01-13 19:42 -------- d-----w- c:\users\Ivet a Majky\AppData\Local\temp
2011-01-13 19:42 . 2011-01-13 19:42 -------- d-----w- c:\users\Public\AppData\Local\temp
2011-01-13 19:42 . 2011-01-13 19:42 -------- d-----w- c:\users\Default\AppData\Local\temp
2011-01-13 17:18 . 2011-01-13 17:49 -------- d-----w- c:\program files\Team17 Software Ltd
2011-01-13 15:05 . 2011-01-13 15:09 -------- d-----w- c:\users\Ivet a Majky\AppData\Local\Adobe
2011-01-12 18:41 . 2011-01-12 18:41 -------- d-----w- c:\users\Ivet a Majky\AppData\Local\Ahead
2011-01-12 17:29 . 2011-01-12 17:29 -------- d-----w- c:\users\Ivet a Majky\AppData\Local\ATI
2011-01-11 20:20 . 2010-12-28 15:55 413696 ----a-w- c:\windows\system32\odbc32.dll
2011-01-11 20:20 . 2010-12-28 15:53 253952 ----a-w- c:\program files\Common Files\System\ado\msadox.dll
2011-01-11 20:20 . 2010-12-28 15:53 241664 ----a-w- c:\program files\Common Files\System\ado\msadomd.dll
2011-01-11 20:20 . 2010-12-28 15:53 708608 ----a-w- c:\program files\Common Files\System\ado\msado15.dll
2011-01-11 20:20 . 2010-12-28 15:53 57344 ----a-w- c:\program files\Common Files\System\msadc\msadcs.dll
2011-01-11 20:20 . 2010-12-28 15:53 180224 ----a-w- c:\program files\Common Files\System\msadc\msadco.dll
2011-01-11 20:20 . 2010-12-14 14:49 1169408 ----a-w- c:\windows\system32\sdclt.exe
2011-01-11 20:18 . 2010-11-10 04:33 6273872 ----a-w- c:\programdata\Microsoft\Windows Defender\Definition Updates\{90624B63-56CA-4A66-85A9-D9E6E21DEE97}\mpengine.dll
2011-01-09 18:15 . 2011-01-09 18:17 -------- d-----w- c:\users\Ivet a Majky\AppData\Local\Google
2011-01-09 18:15 . 2011-01-09 18:15 -------- d-----w- c:\users\Ivet a Majky\AppData\Local\Deployment
2011-01-09 17:25 . 2011-01-09 17:25 -------- d-----w- c:\program files\xRay
2011-01-09 11:08 . 2011-01-09 11:08 -------- d-----w- c:\program files\MozBackup
2011-01-09 10:02 . 2011-01-09 19:41 -------- d-----w- c:\windows\UltraDefrag
2011-01-09 09:54 . 2011-01-09 16:21 -------- d-----w- c:\program files\Common Files\Acronis
2011-01-09 09:54 . 2011-01-09 09:54 -------- d-----w- c:\program files\Acronis
2011-01-09 09:12 . 2011-01-09 09:12 -------- d-----w- c:\programdata\AltrixSoft
2011-01-09 09:12 . 2011-01-09 09:15 -------- d-----w- c:\program files\Common Files\AltrixSoft
2011-01-08 21:28 . 2011-01-08 21:28 -------- d-----w- c:\windows\system32\oodag
2011-01-08 21:24 . 2011-01-08 21:24 -------- d-----w- c:\program files\OO Software
2011-01-08 07:14 . 2011-01-08 07:14 -------- d-----w- c:\users\Ivet a Majky\AppData\Local\Western_Digital
2011-01-08 07:14 . 2011-01-08 07:14 -------- d-----w- c:\programdata\Western Digital
2011-01-08 07:13 . 2011-01-08 07:13 -------- d-----w- c:\program files\Western Digital
2011-01-02 18:22 . 2011-01-02 18:33 -------- d-----w- c:\program files\Microsoft IntelliPoint
2011-01-01 19:47 . 2011-01-06 16:14 -------- d-----w- c:\users\Ivet a Majky\AppData\Local\O&O
2010-12-28 16:06 . 2010-12-28 16:10 -------- d-----w- c:\users\Ivet a Majky\AppData\Local\Downloaded Installations
2010-12-26 17:14 . 2010-12-26 17:14 -------- d-----w- c:\users\Ivet a Majky\dwhelper
2010-12-25 21:42 . 2010-12-26 15:30 -------- d-----w- c:\programdata\Avanquest Bluetooth SDK
2010-12-25 21:36 . 2010-12-25 21:36 -------- d-----w- c:\program files\Avanquest update
2010-12-25 21:36 . 2010-12-25 21:36 -------- d-----w- c:\programdata\BVRP Software
2010-12-25 21:36 . 2010-12-25 22:09 -------- d-----w- c:\users\Ivet a Majky\AppData\Local\Sony Ericsson
2010-12-25 21:32 . 2010-12-25 21:38 -------- d-----w- c:\program files\Sony Ericsson
2010-12-25 21:32 . 2010-12-25 21:37 -------- d-----w- c:\programdata\Sony Ericsson
2010-12-21 19:40 . 2010-12-21 19:40 -------- d-----w- c:\users\Ivet a Majky\AppData\Local\Windows Live Writer
2010-12-21 19:40 . 2010-12-21 19:40 -------- d-----w- c:\users\Ivet a Majky\AppData\Roaming\Windows Live Writer
2010-12-16 06:40 . 2010-11-03 10:51 2409784 ----a-w- c:\program files\Windows Mail\OESpamFilter.dat

.
(((((((((((((((((((((((((((((((((((((((( Find3M výpis ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2010-12-20 17:09 . 2009-06-21 15:09 38224 ----a-w- c:\windows\system32\drivers\mbamswissarmy.sys
2010-12-20 17:08 . 2009-06-21 15:09 20952 ----a-w- c:\windows\system32\drivers\mbam.sys
2010-12-08 12:17 . 2008-12-05 10:06 231248 ----a-w- c:\windows\system32\drivers\truecrypt.sys
2010-11-04 18:55 . 2010-12-16 06:41 601600 ----a-w- c:\windows\system32\schedsvc.dll
2010-10-19 09:41 . 2009-10-02 19:20 222080 ------w- c:\windows\system32\MpSigStub.exe
.

(((((((((((((((((((((((((((((((((( Spouštěcí body v registru )))))))))))))))))))))))))))))))))))))))))))))
.
.
*Poznámka* prázdné záznamy a legitimní výchozí údaje nejsou zobrazeny.
REGEDIT4

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"ehTray.exe"="c:\windows\ehome\ehTray.exe" [2008-01-21 125952]
"Skype"="c:\program files\Skype\Phone\Skype.exe" [2011-01-03 15028104]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"StartCCC"="c:\program files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" [2008-01-21 61440]
"DpAgent"="c:\program files\DigitalPersona\Bin\dpagent.exe" [2008-03-12 699456]
"QPService"="c:\program files\HP\QuickPlay\QPService.exe" [2008-05-14 468264]
"QlbCtrl.exe"="c:\program files\Hewlett-Packard\HP Quick Launch Buttons\QlbCtrl.exe" [2008-03-14 202032]
"OnScreenDisplay"="c:\program files\Hewlett-Packard\HP QuickTouch\HPKBDAPP.exe" [2007-11-01 554288]
"hpWirelessAssistant"="c:\program files\Hewlett-Packard\HP Wireless Assistant\HPWAMain.exe" [2007-11-20 488752]
"GrooveMonitor"="c:\program files\Microsoft Office\Office12\GrooveMonitor.exe" [2008-10-25 31072]
"HP Health Check Scheduler"="c:\program files\Hewlett-Packard\HP Health Check\HPHC_Scheduler.exe" [2008-10-09 75008]
"UCam_Menu"="c:\program files\CyberLink\YouCam\MUITransfer\MUIStartMenu.exe" [2008-06-13 210216]
"avast5"="c:\progra~1\ALWILS~1\Avast5\avastUI.exe" [2010-09-07 2838912]

c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\
WDDMStatus.lnk - c:\program files\Western Digital\WD SmartWare\WD Drive Manager\WDDMStatus.exe [2010-9-8 5185536]

[hkey_local_machine\software\microsoft\windows\currentversion\explorer\ShellExecuteHooks]
"{5AE067D3-9AFB-48E0-853A-EBB7F4A000DA}"= "c:\program files\SUPERAntiSpyware\SASSEH.DLL" [2008-05-13 77824]

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\!SASWinLogon]
2008-12-22 10:05 356352 ----a-w- c:\program files\SUPERAntiSpyware\SASWINLO.dll

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\drivers32]
"aux"=wdmaud.drv

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\session manager]
BootExecute REG_MULTI_SZ autocheck autochk * \0lsdelete\0OODBS

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Wdf01000.sys]
@="Driver"

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WudfSvc]
@="Service"

[HKLM\~\startupfolder\C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^Bluetooth.lnk]
path=c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\Bluetooth.lnk
backup=c:\windows\pss\Bluetooth.lnk.CommonStartup
backupExtension=.CommonStartup

[HKLM\~\startupfolder\C:^Users^Ivet a Majky^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^Výřezy obrazovky a spuštění aplikace OneNote 2007.lnk]
path=c:\users\Ivet a Majky\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Výřezy obrazovky a spuštění aplikace OneNote 2007.lnk
backup=c:\windows\pss\Výřezy obrazovky a spuštění aplikace OneNote 2007.lnk.Startup
backupExtension=.Startup

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NokiaMServer]
c:\program files\Common Files\Nokia\MPlatform\NokiaMServer [X]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe ARM]
2010-09-20 21:07 932288 ----a-r- c:\program files\Common Files\Adobe\ARM\1.0\AdobeARM.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe Reader Speed Launcher]
2010-09-23 02:47 35760 ----a-w- c:\program files\Adobe\Reader 9.0\Reader\reader_sl.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}]
2007-06-27 18:03 152872 ----a-w- c:\program files\Common Files\Ahead\Lib\NMBgMonitor.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Eraser]
2006-12-26 00:23 643072 ----a-w- c:\program files\Eraser\eraser.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NeroFilterCheck]
2007-03-01 14:57 153136 ----a-w- c:\program files\Common Files\Ahead\Lib\NeroCheck.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\OODefragTray]
2007-05-11 01:08 2512392 ----a-w- c:\windows\System32\oodtray.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Sony Ericsson PC Companion]
2010-11-16 10:07 422912 ----a-w- c:\program files\Sony Ericsson\Sony Ericsson PC Companion\PCCompanion.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\UCam_Menu]
2008-06-13 16:11 210216 ------w- c:\program files\CyberLink\YouCam\MUITransfer\MUIStartMenu.exe

[HKEY_LOCAL_MACHINE\software\microsoft\security center\Svc\S-1-5-21-1653149945-303028355-1575982475-1000]
"EnableNotificationsRef"=dword:00000001

R2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;c:\windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
R3 IpwP;IPWireless 3G Network Adapter;c:\windows\system32\DRIVERS\ipw3gnet.sys [2007-06-12 51040]
R3 SASENUM;SASENUM;c:\program files\SUPERAntiSpyware\SASENUM.SYS [2009-06-23 7408]
R3 Sony Ericsson PCCompanion;Sony Ericsson PCCompanion;c:\program files\Sony Ericsson\Sony Ericsson PC Companion\PCCService.exe [2010-10-26 155344]
R3 WDC_SAM;WD SCSI Pass Thru driver;c:\windows\system32\DRIVERS\wdcsam.sys [2009-02-13 11520]
R3 WPFFontCache_v0400;Windows Presentation Foundation Font Cache 4.0.0.0;c:\windows\Microsoft.NET\Framework\v4.0.30319\WPF\WPFFontCache_v0400.exe [2010-03-18 753504]
S0 Amddfltr;Amd Disk Lower Filter Driver;c:\windows\system32\DRIVERS\Amddfltr.sys [2008-01-07 15416]
S0 sptd;sptd;c:\windows\System32\Drivers\sptd.sys [2010-05-29 691696]
S1 aswSP;aswSP; [x]
S1 SASDIFSV;SASDIFSV;c:\program files\SUPERAntiSpyware\SASDIFSV.SYS [2009-06-23 9968]
S1 SASKUTIL;SASKUTIL;c:\program files\SUPERAntiSpyware\SASKUTIL.sys [2009-06-23 72944]
S2 AESTFilters;Andrea ST Filters Service;c:\windows\System32\DriverStore\FileRepository\stwrt.inf_a7e996cd\aestsrv.exe [2008-06-27 77824]
S2 aswFsBlk;aswFsBlk; [x]
S2 aswMonFlt;aswMonFlt;c:\windows\system32\drivers\aswMonFlt.sys [2010-09-07 50768]
S2 Ethpdrv;Ethernet Packet Driver;c:\windows\system32\DRIVERS\ethpdrv.sys [2005-09-07 9728]
S2 hpsrv;HP Service;c:\windows\system32\Hpservice.exe [2008-08-07 24880]
S2 Recovery Service for Windows;Recovery Service for Windows;c:\windows\SMINST\BLService.exe [2008-03-26 341328]
S2 vfsFPService;Validity Fingerprint Service;c:\windows\system32\vfsFPService.exe [2008-03-26 595248]
S2 WDDMService;WDDMService;c:\program files\Western Digital\WD SmartWare\WD Drive Manager\WDDMService.exe [2010-09-08 237056]
S2 WDFME;WD File Management Engine;c:\program files\Western Digital\WD SmartWare\Front Parlor\WDFME\WDFME.exe [2010-09-08 1034752]
S2 WDSC;WD File Management Shadow Engine;c:\program files\Western Digital\WD SmartWare\Front Parlor\WDSC.exe [2010-09-08 484352]
S3 Com4QLBEx;Com4QLBEx;c:\program files\Hewlett-Packard\HP Quick Launch Buttons\Com4QLBEx.exe [2008-04-03 193840]
S3 dc3d;MS Hardware Device Detection Driver;c:\windows\system32\DRIVERS\dc3d.sys [2010-07-21 44432]
S3 enecir;ENE CIR Receiver;c:\windows\system32\DRIVERS\enecir.sys [2008-01-23 52736]
S3 JMCR;JMCR;c:\windows\system32\DRIVERS\jmcr.sys [2008-04-01 81296]
S3 vfs101x;vfs101x;c:\windows\system32\drivers\vfs101x.sys [2008-03-26 40752]


[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost]
bthsvcs REG_MULTI_SZ BthServ
LocalServiceAndNoImpersonation REG_MULTI_SZ FontCache

[HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{10880D85-AAD9-4558-ABDC-2AB1552D831F}]
2008-02-26 12:06 451872 ----a-w- c:\program files\Common Files\LightScribe\LSRunOnce.exe
.
.
------- Doplňkový sken -------
.
uStart Page = hxxp://www.seznam.cz/
IE: E&xportovat do aplikace Microsoft Excel - c:\progra~1\MICROS~3\Office12\EXCEL.EXE/3000
IE: Send image to &Bluetooth Device... - c:\program files\WIDCOMM\Bluetooth Software\btsendto_ie_ctx.htm
IE: Send page to &Bluetooth Device... - c:\program files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
FF - ProfilePath - c:\users\Ivet a Majky\AppData\Roaming\Mozilla\Firefox\Profiles\sfejoxc1.default\
FF - prefs.js: browser.startup.homepage - hxxp://www.seznam.cz/
FF - Ext: Default: {972ce4c6-7e08-4474-a285-3208198ce6fd} - c:\program files\Mozilla Firefox\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}
FF - Ext: Auto Shutdown: amin.eft_Shutdown@gmail.com - %profile%\extensions\amin.eft_Shutdown@gmail.com
FF - Ext: Better Gmail 2: bettergmail2@ginatrapani.org - %profile%\extensions\bettergmail2@ginatrapani.org
FF - Ext: Launchy: launchy@gemal.dk - %profile%\extensions\launchy@gemal.dk
FF - Ext: Searchbar Autosizer: {655397ca-4766-496b-b7a8-3a5b176ee4c2} - %profile%\extensions\{655397ca-4766-496b-b7a8-3a5b176ee4c2}
FF - Ext: URL Suffix: {77a873d0-4afd-11d9-9669-0800200c9a66} - %profile%\extensions\{77a873d0-4afd-11d9-9669-0800200c9a66}
FF - Ext: DownloadHelper: {b9db16a4-6edc-47ec-a1f4-b86292ed211d} - %profile%\extensions\{b9db16a4-6edc-47ec-a1f4-b86292ed211d}
FF - Ext: Adblock Plus: {d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d} - %profile%\extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}
FF - Ext: ClearPrivate Data... +: {0dd39226-2650-404d-a43d-ffd906b35a9e} - %profile%\extensions\{0dd39226-2650-404d-a43d-ffd906b35a9e}
FF - Ext: České slovníky pro kontrolu pravopisu: cs@dictionaries.addons.mozilla.org - %profile%\extensions\cs@dictionaries.addons.mozilla.org
FF - Ext: Zoom Page: zoompage@DW-dev - %profile%\extensions\zoompage@DW-dev
.

**************************************************************************

catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2011-01-13 20:42
Windows 6.0.6002 Service Pack 2 NTFS

skenování skrytých procesů ...

skenování skrytých položek 'Po spuštění' ...

skenování skrytých souborů ...

sken byl úspešně dokončen
skryté soubory: 0

**************************************************************************
.
--------------------- ZAMKNUTÉ KLÍČE V REGISTRU ---------------------

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{C946B634-0AEB-F46F-54FE-2FF7E66BC148}\InProcServer32*]
"jagbedhoepmhmbfoaooo"=hex:6b,61,61,65,6d,61,64,65,6f,62,68,61,64,6d,70,62,6e,
6d,64,66,70,68,00,00
"iagboffniggdenemdl"=hex:6b,61,61,65,6d,61,64,65,6f,62,68,61,64,6d,70,62,6e,6d,
64,66,70,68,00,00

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\System*]
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
"OODEFRAG10.00.00.01WORKSTATION"="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"
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
.
--------------------- Knihovny navázané na běžící procesy ---------------------

- - - - - - - > 'Explorer.exe'(5720)
c:\program files\DigitalPersona\Bin\DpoFeedb.dll
.
Celkový čas: 2011-01-13 20:57:09
ComboFix-quarantined-files.txt 2011-01-13 19:56
ComboFix2.txt 2011-01-13 18:48

Před spuštěním: Volných bajtů: 265 770 737 664
Po spuštění: Volných bajtů: 265 716 854 784

Current=1 Default=1 Failed=0 LastKnownGood=11 Sets=1,2,3,4,5,6,7,8,9,11
- - End Of File - - BB3BA4E645D58E91A897BA62DD0967BA

[memphisto]

ComboFix se odinstaluje takto:
Start-Spustit a zadej ComboFix /Uninstall

vyčisti systém CCleanerem

a použij i T-Cleaner
smaže vše po Combu,MWAVu atd.-stáhneš>spustíš

pozn. před stažením T-Cleaneru a po dobu čištění deaktivuj AVG , Avast,Avira či Microsoft Security Essentials následně T-Cleaner smaž a zapni si AVG , Avast, Avira či Microsoft Security Essentials


Jak se chová PC?

[Sigondis]

Díky za vše.Je to sice o trochu rychlejší, ale více z toho už asi hold nevymáčkneme. Jen se teď potýkám s jedním problémem a to že nemohu vypnou řízení uživatelských učtu. Mám to pole dle návodu "zrušení zaškrtnutí políčka" a když tedy restartuji a chci spustit třeba ccleaner nebo defraggler ptá se mne to stále na povolení ,aby mohl pokračovat.