Przede wszystkim tu są 2 antywiry, co jest niedopuszczalne. Odinstaluj jeden z nich, najlepiej Avasta bo jest w bardzo przestarzałej wersji. Użyj tego
http://www.instalki.pl/programy/download/Windows/narzedzia_systemowe/avast_Uninstall_Utility.htmlOdinstaluj staroć :Ad-Aware SE Personal
Znasz ten program:
O4 - Startup: C:\Documents and Settings\All Users\Menu Start\Programy\Autostart\DFX.lnk = C:\Program Files\DFX\DFX.exe ()
???
W Autoruns odznacz i usuń:
zakładka
Logon:
Adobe Reader Speed Launcher
NvMediaCenter
NvCplDaemon
nwiz
QuickTime Task
StartCCC
SunJavaUpdateSched
Książka adresowa 6
Microsoft Outlook Express 6
BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}
MSMSGS
Skype
uTorrent
zakładka
Scheduled Tasks:
GoogleUpdateTaskMachineCore.job
GoogleUpdateTaskMachineUA.job
zakładka
Services (tylko odznacz):
gupdate
gupdatem
gusvc
JavaQuickStarterService
LightScribeService
NMIndexingService
odserv
ose
Uruchom
OTL 
w oknie
Własne opcje skanowania/skrypt wklej:
:OTL
DRV - File not found [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\XDva032.sys -- (XDva032)
DRV - File not found [Kernel | On_Demand | Stopped] -- D:\INSTALL\GMSIPCI.SYS -- (GMSIPCI)
DRV - File not found [Kernel | On_Demand | Stopped] -- C:\DOCUME~1\ADMINI~1\USTAWI~1\Temp\catchme.sys -- (catchme)
IE - HKU\S-1-5-21-1659004503-1177238915-682003330-1004\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://mystart.incredimail.com
IE - HKU\S-1-5-21-1659004503-1177238915-682003330-1004\..\URLSearchHook: {90eee664-34b1-422a-a782-779af65cdf6d} - No CLSID value found
IE - HKU\S-1-5-21-1659004503-1177238915-682003330-1004\..\SearchScopes\{CFF4DB9B-135F-47c0-9269-B4C6572FD61A}: "URL" = http://mystart.incredimail.com/?search={searchTerms}&loc=search_box
FF - prefs.js..browser.search.defaultenginename: "MyStart Search"
FF - prefs.js..browser.startup.homepage: "http://mystart.incredimail.com"
FF - prefs.js..keyword.URL: "http://mystart.incredimail.com/?loc=ff_address_bar&search="
FF - HKLM\Software\MozillaPlugins\@real.com/nsJSRealPlayerPlugin;version=: File not found
FF - HKCU\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\WINDOWS\system32\Macromed\Flash\NPSWF32.dll File not found
[2010-12-26 15:34:15 | 000,002,153 | ---- | M] () -- C:\Documents and Settings\USER\Dane aplikacji\Mozilla\Firefox\Profiles\gujcucqe.default\searchplugins\MyStart Search.xml
O2 - BHO: (no name) - {F5CC7F02-6F4E-4462-B5B1-394A57FD3E0D} - No CLSID value found.
O3 - HKU\S-1-5-21-1659004503-1177238915-682003330-1004\..\Toolbar\WebBrowser: (no name) - {90EEE664-34B1-422A-A782-779AF65CDF6D} - No CLSID value found.
O16 - DPF: {8FFBE65D-2C9C-4669-84BD-5829DC0B603C} http://fpdownload.macromedia.com/get/flashplayer/current/ultrashim.cab (Reg Error: Key error.)
O16 - DPF: {CAFEEFAC-0016-0000-0000-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0-windows-i586.cab (Reg Error: Key error.)
O16 - DPF: {CAFEEFAC-0016-0000-0002-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_02-windows-i586.cab (Reg Error: Key error.)
:Reg
[-HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2]
:Commands
[clearallrestorepoints]
[emptytemp]
Klikasz
Wykonaj skrypt. Dajesz log z usuwania + nowe logi z OTL.