PC zamrzá, disk běží..

[ententeak]

zdravím, v poslední době se mi stává, že mi PC zdánlivě bezdůvodně zamrzá.. Ať už když něco hraju nebo když mám zobrazenou pouze plochu..
Prostě se zadrbne obraz a zvuk (z repráků se line jen 'RRRRRR' cca v tónině a hlasitosti posledního vydávaného zvuku) a přibližně po třech až pěti minutách se zase rozjede dál.. Během 'záseku' nereaguje klávesnice ani na NUM/CAPS/SROLL lock a po rozjetí dohání všechny stisky kláves, který jsem za tu dobu provedl.. Dokonce i na myši mám tlačítko na přepínání rozlišení, které bliká a při zádrbu zůstane zhasnuté

Mimo to se mi nezdá, že mi proces svchost.exe běží 15x (když jsem je teď počítal, tak mi opět zamrzl (3 minuty 15 vteřin) a poté když jsem se podíval do vytížení CPU, tak se mi na obou jádrech objevila 100% špička..) Paměť se stále drží na 45%

zde je RSIT výpis:

Logfile of random's system information tool 1.06 (written by random/random)
Run by Ententeak at 2010-01-06 19:21:06
Microsoft® Windows Vista™ Home Premium Service Pack 2
System drive C: has 14 GB (14%) free of 100 GB
Total RAM: 2047 MB (55% free)

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 19:21:08, on 6.1.2010
Platform: Windows Vista SP2 (WinNT 6.00.1906)
MSIE: Internet Explorer v8.00 (8.00.6001.18865)
Boot mode: Normal

Running processes:
C:\Windows\system32\Dwm.exe
C:\Windows\system32\taskeng.exe
C:\PROGRA~1\Aston\aston.exe
C:\Windows\MHotKey.exe
C:\Windows\ChiFuncExt.exe
C:\Windows\system32\WTablet\Pen_TabletUser.exe
C:\Program Files\Windows Media Player\wmpnscfg.exe
C:\PROGRA~1\Aston\XP\internat.exe
C:\Windows\RtHDVCpl.exe
C:\Program Files\Adobe\Acrobat 8.0\Acrobat\Acrotray.exe
C:\Program Files\Xfire\xfiremusic.exe
C:\Program Files\ESET\ESET Smart Security\egui.exe
C:\Program Files\Microsoft Xbox 360 Accessories\XboxStat.exe
C:\Windows\WindowsMobile\wmdc.exe
C:\Program Files\Winamp\winampa.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\program files\steam\steam.exe
C:\Program Files\DAEMON Tools Pro\DTProAgent.exe
C:\Program Files\DNA\btdna.exe
C:\Program Files\QIP Infium\infium.exe
C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
E:\Image\pq\pq.exe
C:\Program Files\A4Tech\Mouse\Amoumain.exe
C:\Program Files\Xfire\Xfire.exe
C:\Program Files\KWorld Multimedia\TV Tuner Card Utilities\HMCP3XCtl.exe
C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
C:\Windows\Explorer.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe
C:\Program Files\Mozilla Firefox\firefox.exe
D:\___ochrany\RSIT.exe
C:\Program Files\Trend Micro\HijackThis\Ententeak.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.the-west.cz/index.php?page=logout
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
F2 - REG:system.ini: Shell=C:\PROGRA~1\Aston\aston.exe ,svchost.exe
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
O2 - BHO: Pomocná služba pro přihlášení ke službě Windows Live ID - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Adobe PDF Conversion Toolbar Helper - {AE7CD045-E861-484f-8273-0445EE161910} - C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll
O3 - Toolbar: Adobe PDF - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll
O4 - HKLM\..\Run: [RtHDVCpl] RtHDVCpl.exe
O4 - HKLM\..\Run: [Acrobat Assistant 8.0] "C:\Program Files\Adobe\Acrobat 8.0\Acrobat\Acrotray.exe"
O4 - HKLM\..\Run: [Adobe_ID0EYTHM] C:\PROGRA~1\COMMON~1\Adobe\ADOBEV~1\Server\bin\VERSIO~2.EXE
O4 - HKLM\..\Run: [WheelMouse] C:\Program Files\A4Tech\Mouse\Amoumain.exe
O4 - HKLM\..\Run: [Xfire Music] "C:\Program Files\Xfire\xfiremusic.exe"
O4 - HKLM\..\Run: [egui] "C:\Program Files\ESET\ESET Smart Security\egui.exe" /hide /waitservice
O4 - HKLM\..\Run: [XboxStat] "C:\Program Files\Microsoft Xbox 360 Accessories\XboxStat.exe" silentrun
O4 - HKLM\..\Run: [Windows Mobile Device Center] %windir%\WindowsMobile\wmdc.exe
O4 - HKLM\..\Run: [LchDrvKey] LchDrvKey.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime
O4 - HKLM\..\Run: [WinampAgent] "C:\Program Files\Winamp\winampa.exe"
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [StartCCC] "C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun
O4 - HKCU\..\Run: [Steam] "c:\program files\steam\steam.exe" -silent
O4 - HKCU\..\Run: [Center Agent] C:\Program Files\KWorld Multimedia\HyperMedia\DTVR\Scheduled.exe
O4 - HKCU\..\Run: [DAEMON Tools Pro Agent] "C:\Program Files\DAEMON Tools Pro\DTProAgent.exe"
O4 - HKCU\..\Run: [WMPNSCFG] C:\Program Files\Windows Media Player\WMPNSCFG.exe
O4 - HKCU\..\Run: [Google Update] "C:\Users\Ententeak\AppData\Local\Google\Update\GoogleUpdate.exe" /c
O4 - HKCU\..\Run: [iTap] C:\Program Files\HLW\iTap\iTap.exe
O4 - HKCU\..\Run: [BitTorrent DNA] "C:\Program Files\DNA\btdna.exe"
O4 - HKCU\..\Run: [iPhone PC Suite] C:\Program Files\NetDragon\91 Mobile\iPhone\iPhone PC Suite.exe /start
O4 - HKCU\..\Run: [Infium] "C:\Program Files\QIP Infium\infium.exe" /autorun /autorun /autorun /autorun /autorun /autorun /autorun /autorun /autorun
O4 - HKCU\..\Run: [NCsoft Launcher] C:\Program Files\NCSoft\Launcher\NCLauncher.exe /Minimized
O4 - Startup: Elaine Farha [Spoltog].pq.lnk = ?
O4 - Startup: Smart-X7 7.80.Lnk = C:\Program Files\A4Tech\Mouse\Amoumain.exe
O4 - Startup: Xfire.lnk = C:\Program Files\Xfire\Xfire.exe
O4 - Global Startup: Remote Control.lnk = C:\Program Files\KWorld Multimedia\TV Tuner Card Utilities\HMCP3XCtl.exe
O8 - Extra context menu item: Append to existing PDF - res://C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html
O8 - Extra context menu item: Convert link target to Adobe PDF - res://C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html
O8 - Extra context menu item: Convert link target to existing PDF - res://C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html
O8 - Extra context menu item: Convert selected links to Adobe PDF - res://C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIECaptureSelLinks.html
O8 - Extra context menu item: Convert selected links to existing PDF - res://C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIEAppendSelLinks.html
O8 - Extra context menu item: Convert selection to Adobe PDF - res://C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html
O8 - Extra context menu item: Convert selection to existing PDF - res://C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html
O8 - Extra context menu item: Convert to Adobe PDF - res://C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Excel - res://C:\PROGRA~1\MICROS~3\Office12\EXCEL.EXE/3000
O9 - Extra button: Odeslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~3\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: Od&eslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~3\Office12\ONBttnIE.dll
O9 - Extra button: @C:\Windows\WindowsMobile\INetRepl.dll,-222 - {2EAF5BB1-070F-11D3-9307-00C04FAE2D4F} - C:\Windows\WindowsMobile\INetRepl.dll
O9 - Extra button: (no name) - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\Windows\WindowsMobile\INetRepl.dll
O9 - Extra 'Tools' menuitem: @C:\Windows\WindowsMobile\INetRepl.dll,-223 - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\Windows\WindowsMobile\INetRepl.dll
O9 - Extra button: Bonjour - {7F9DB11C-E358-4ca6-A83D-ACC663939424} - C:\Program Files\Bonjour\ExplorerPlugin.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~3\Office12\REFIEBAR.DLL
O10 - Unknown file in Winsock LSP: c:\windows\system32\nwprovau.dll
O23 - Service: Adobe Version Cue CS3 - Adobe Systems Incorporated - C:\Program Files\Common Files\Adobe\Adobe Version Cue CS3\Server\bin\VersionCueCS3.exe
O23 - Service: AMD External Events Utility - AMD - C:\Windows\system32\atiesrxx.exe
O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
O23 - Service: Bonjour Service - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: ESET HTTP Server (EhttpSrv) - ESET - C:\Program Files\ESET\ESET Smart Security\EHttpSrv.exe
O23 - Service: ESET Service (ekrn) - ESET - C:\Program Files\ESET\ESET Smart Security\ekrn.exe
O23 - Service: FLEXnet Licensing Service - Macrovision Europe Ltd. - C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
O23 - Service: HASP License Manager (hasplms) - Aladdin Knowledge Systems Ltd. - C:\Windows\system32\hasplms.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: iPod Service - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: Nero BackItUp Scheduler 4.0 - Nero AG - C:\Program Files\Common Files\Nero\Nero BackItUp 4\NBService.exe
O23 - Service: nProtect GameGuard Service (npggsvc) - Unknown owner - C:\Windows\system32\GameMon.des.exe (file missing)
O23 - Service: PnkBstrA - Unknown owner - C:\Windows\system32\PnkBstrA.exe
O23 - Service: PnkBstrB - Unknown owner - C:\Windows\system32\PnkBstrB.exe
O23 - Service: Steam Client Service - Valve Corporation - C:\Program Files\Common Files\Steam\SteamService.exe
O23 - Service: TabletServicePen - Wacom Technology, Corp. - C:\Windows\system32\Pen_Tablet.exe

--
End of file - 9357 bytes

======Scheduled tasks folder======

C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-2091845228-201729607-2738538346-1000Core.job
C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-2091845228-201729607-2738538346-1000UA.job
C:\Windows\tasks\NeroLiveEpgUpdate-Ententeak-PC_Ententeak.job
C:\Windows\tasks\User_Feed_Synchronization-{A6BFB76F-2E17-490A-998B-6672ABF278AC}.job

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{06849E9F-C8D7-4D59-B87D-784B7D6BE0B3}]
Adobe PDF Reader Link Helper - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll [2006-10-22 62080]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
SSVHelper Class - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll [2008-06-10 509328]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
Pomocná služba pro přihlášení ke službě Windows Live ID - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2009-03-30 403824]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AE7CD045-E861-484f-8273-0445EE161910}]
Adobe PDF Conversion Toolbar Helper - C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll [2006-10-22 321120]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{47833539-D0C5-4125-9FA8-0819E2EAAC93} - Adobe PDF - C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll [2006-10-22 321120]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"RtHDVCpl"=C:\Windows\RtHDVCpl.exe [2007-07-06 4669440]
"Acrobat Assistant 8.0"=C:\Program Files\Adobe\Acrobat 8.0\Acrobat\Acrotray.exe [2006-10-22 620152]
"Adobe_ID0EYTHM"=C:\PROGRA~1\COMMON~1\Adobe\ADOBEV~1\Server\bin\VERSIO~2.EXE [2007-03-20 1884160]
"WheelMouse"=C:\Program Files\A4Tech\Mouse\Amoumain.exe [2007-05-15 204800]
"Xfire Music"=C:\Program Files\Xfire\xfiremusic.exe [2006-11-21 253650]
"egui"=C:\Program Files\ESET\ESET Smart Security\egui.exe [2009-02-06 2021400]
"XboxStat"=C:\Program Files\Microsoft Xbox 360 Accessories\XboxStat.exe [2007-09-27 734264]
"Windows Mobile Device Center"=C:\Windows\WindowsMobile\wmdc.exe [2007-05-31 648072]
"LchDrvKey"=C:\Windows\LchDrvKey.exe [2007-03-28 36864]
"QuickTime Task"=C:\Program Files\QuickTime\QTTask.exe [2009-09-05 417792]
"WinampAgent"=C:\Program Files\Winamp\winampa.exe [2009-03-09 37888]
"iTunesHelper"=C:\Program Files\iTunes\iTunesHelper.exe [2009-10-28 141600]
"StartCCC"=C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [2009-11-24 98304]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"Steam"=c:\program files\steam\steam.exe [2009-10-31 1217808]
"Center Agent"=C:\Program Files\KWorld Multimedia\HyperMedia\DTVR\Scheduled.exe [2008-11-07 1520128]
"DAEMON Tools Pro Agent"=C:\Program Files\DAEMON Tools Pro\DTProAgent.exe [2007-09-06 136136]
"WMPNSCFG"=C:\Program Files\Windows Media Player\WMPNSCFG.exe [2008-01-21 202240]
"Google Update"=C:\Users\Ententeak\AppData\Local\Google\Update\GoogleUpdate.exe [2009-08-17 133104]
"iTap"=C:\Program Files\HLW\iTap\iTap.exe [2009-08-06 5898240]
"BitTorrent DNA"=C:\Program Files\DNA\btdna.exe [2009-11-13 323392]
"iPhone PC Suite"=C:\Program Files\NetDragon\91 Mobile\iPhone\iPhone PC Suite.exe [2009-12-13 897024]
"Infium"=C:\Program Files\QIP Infium\infium.exe [2009-03-25 5245440]
"PlayNC Launcher"= []
"NCsoft Launcher"=C:\Program Files\NCSoft\Launcher\NCLauncher.exe [2009-12-19 38184]

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup
Remote Control.lnk - C:\Program Files\KWorld Multimedia\TV Tuner Card Utilities\HMCP3XCtl.exe

C:\Users\Ententeak\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
Elaine Farha [Spoltog].pq.lnk - E:\Image\pq\Elaine Farha [Spoltog].pq
Smart-X7 7.80.Lnk - C:\Program Files\A4Tech\Mouse\Amoumain.exe
Xfire.lnk - C:\Program Files\Xfire\Xfire.exe

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{AEB6717E-7E19-11d0-97EE-00C04FD91972}"= []

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfPf]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfRd]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfUsbccidDriver]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"EnableLUA"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1
"EnableUIADesktopToggle"=0

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDrives"=0

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDrives"=
"BindDirectlyToPropertySetStorage"=

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{dfc8966d-fea3-11dd-87a7-001fd0b6d06c}]
shell\AutoRun\command - H:\Autorun\autorunx.exe


======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*
.txt - open - C:\PROGRA~1\pspad\PSPad.exe "%1"

======List of files/folders created in the last 1 months======

2010-01-02 11:40:53 ----D---- C:\ProgramData\ATI
2010-01-01 00:32:09 ----D---- C:\Program Files\THQ
2009-12-31 21:53:11 ----D---- C:\Windows\D56B0E274A3E46C9B5C1D93D580C099C.TMP
2009-12-31 21:53:03 ----D---- C:\Program Files\Microsoft Chart Controls
2009-12-31 21:52:21 ----D---- C:\UDK
2009-12-31 14:17:24 ----D---- C:\Games
2009-12-29 23:08:17 ----D---- C:\Program Files\Empire Interactive
2009-12-29 17:45:53 ----D---- C:\Users\Ententeak\AppData\Roaming\Microsoft Games
2009-12-29 17:39:45 ----D---- C:\Program Files\GameSpy Arcade
2009-12-23 00:59:32 ----A---- C:\Windows\system32\xfcodec.dll
2009-12-19 16:40:52 ----D---- C:\Program Files\NCSoft
2009-12-19 16:40:00 ----D---- C:\Users\Ententeak\AppData\Roaming\GetRightToGo
2009-12-13 19:21:23 ----D---- C:\Program Files\NetDragon
2009-12-12 16:58:35 ----A---- C:\Windows\system32\D3DX9_41.dll
2009-12-12 16:58:35 ----A---- C:\Windows\system32\d3dx10_41.dll
2009-12-12 16:58:35 ----A---- C:\Windows\system32\D3DCompiler_41.dll
2009-12-12 16:58:34 ----A---- C:\Windows\system32\XAudio2_4.dll
2009-12-12 16:58:34 ----A---- C:\Windows\system32\xactengine3_4.dll
2009-12-12 16:58:33 ----A---- C:\Windows\system32\X3DAudio1_6.dll
2009-12-12 16:58:32 ----A---- C:\Windows\system32\D3DX9_40.dll
2009-12-12 16:58:32 ----A---- C:\Windows\system32\d3dx10_40.dll
2009-12-12 16:58:32 ----A---- C:\Windows\system32\D3DCompiler_40.dll
2009-12-09 14:52:45 ----A---- C:\Windows\system32\nshhttp.dll
2009-12-09 14:52:42 ----A---- C:\Windows\system32\httpapi.dll
2009-12-09 14:29:23 ----A---- C:\Windows\system32\winhttp.dll
2009-12-09 14:29:15 ----A---- C:\Windows\system32\mshtml.dll
2009-12-09 14:29:13 ----A---- C:\Windows\system32\ieframe.dll
2009-12-09 14:29:12 ----A---- C:\Windows\system32\urlmon.dll
2009-12-09 14:29:12 ----A---- C:\Windows\system32\iertutil.dll
2009-12-09 14:29:11 ----A---- C:\Windows\system32\wininet.dll
2009-12-09 14:29:11 ----A---- C:\Windows\system32\occache.dll
2009-12-09 14:29:11 ----A---- C:\Windows\system32\msfeeds.dll
2009-12-09 14:29:11 ----A---- C:\Windows\system32\iedkcs32.dll
2009-12-09 14:29:10 ----A---- C:\Windows\system32\ieui.dll
2009-12-09 14:29:09 ----A---- C:\Windows\system32\msfeedssync.exe
2009-12-09 14:29:09 ----A---- C:\Windows\system32\msfeedsbs.dll
2009-12-09 14:29:09 ----A---- C:\Windows\system32\jsproxy.dll
2009-12-09 14:29:09 ----A---- C:\Windows\system32\ieUnatt.exe
2009-12-09 14:29:09 ----A---- C:\Windows\system32\iesysprep.dll
2009-12-09 14:29:09 ----A---- C:\Windows\system32\iepeers.dll
2009-12-09 14:29:09 ----A---- C:\Windows\system32\ie4uinit.exe
2009-12-09 14:29:08 ----A---- C:\Windows\system32\iesetup.dll
2009-12-09 14:29:08 ----A---- C:\Windows\system32\iernonce.dll
2009-12-09 14:28:22 ----A---- C:\Windows\system32\rastls.dll

======List of files/folders modified in the last 1 months======

2010-01-06 19:21:06 ----D---- C:\Windows\temp
2010-01-06 19:18:56 ----D---- C:\Users\Ententeak\AppData\Roaming\DNA
2010-01-06 19:14:48 ----D---- C:\Program Files\Mozilla Firefox
2010-01-06 19:08:58 ----D---- C:\Program Files\Steam
2010-01-06 19:08:55 ----D---- C:\Program Files\DNA
2010-01-06 19:08:44 ----D---- C:\Users\Ententeak\AppData\Roaming\WTablet
2010-01-06 17:36:12 ----D---- C:\Windows\Prefetch
2010-01-05 16:44:44 ----D---- C:\Windows\Minidump
2010-01-05 16:44:41 ----SHD---- C:\System Volume Information
2010-01-05 16:44:37 ----D---- C:\Windows
2010-01-05 14:31:04 ----D---- C:\ProgramData\Xfire
2010-01-05 14:31:04 ----D---- C:\Program Files\Xfire
2010-01-05 06:44:46 ----D---- C:\Users\Ententeak\AppData\Roaming\Xfire
2010-01-04 12:39:02 ----SHD---- C:\Windows\Installer
2010-01-04 02:44:52 ----D---- C:\ProgramData\Zoom Player
2010-01-03 20:08:10 ----RSD---- C:\Windows\assembly
2010-01-03 20:01:41 ----A---- C:\Windows\WINCMD.INI
2010-01-02 13:40:10 ----A---- C:\Windows\wcx_ftp.ini
2010-01-02 11:46:21 ----D---- C:\Program Files\ATI
2010-01-02 11:40:53 ----HD---- C:\ProgramData
2010-01-02 11:40:20 ----AD---- C:\Windows\System32
2010-01-02 11:10:37 ----D---- C:\Program Files\ATI Technologies
2010-01-02 11:09:30 ----D---- C:\Windows\system32\drivers
2010-01-02 11:09:27 ----D---- C:\Windows\system32\catroot2
2010-01-02 11:09:27 ----D---- C:\Windows\system32\catroot
2010-01-02 11:09:27 ----D---- C:\Windows\inf
2010-01-02 11:05:53 ----D---- C:\Windows\winsxs
2010-01-01 00:32:09 ----RD---- C:\Program Files
2009-12-31 21:53:09 ----D---- C:\Program Files\Common Files\Wise Installation Wizard
2009-12-31 15:30:44 ----A---- C:\Windows\system32\PerfStringBackup.INI
2009-12-31 13:23:47 ----A---- C:\Windows\level.ini
2009-12-29 17:36:39 ----D---- C:\Program Files\Microsoft Games
2009-12-29 17:17:53 ----D---- C:\Windows\system32\LogFiles
2009-12-29 16:58:15 ----D---- C:\Users\Ententeak\AppData\Roaming\Aston
2009-12-29 16:57:25 ----RSD---- C:\Windows\Fonts
2009-12-28 14:03:18 ----D---- C:\Program Files\EA Games
2009-12-28 14:03:14 ----HD---- C:\Program Files\InstallShield Installation Information
2009-12-28 00:57:54 ----D---- C:\Program Files\Cheat Engine
2009-12-24 15:51:01 ----D---- C:\Program Files\Ubisoft
2009-12-24 15:39:12 ----D---- C:\ProgramData\2DBoy
2009-12-20 16:03:51 ----D---- C:\Windows\Debug
2009-12-17 15:19:30 ----D---- C:\ProgramData\DVD Shrink
2009-12-12 16:59:41 ----D---- C:\Program Files\AGEIA Technologies
2009-12-09 15:56:25 ----D---- C:\Windows\rescache
2009-12-09 15:39:27 ----D---- C:\Windows\system32\migration
2009-12-09 15:39:27 ----D---- C:\Windows\system32\cs-CZ
2009-12-09 15:39:27 ----D---- C:\Program Files\Windows Mail
2009-12-09 15:39:27 ----D---- C:\Program Files\Internet Explorer
2009-12-09 14:54:04 ----D---- C:\ProgramData\Microsoft Help

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R1 Amfilter;A4Tech Mouse Filter Driver; C:\Windows\system32\DRIVERS\Amfilter.sys [2007-05-14 9216]
R1 ehdrv;ehdrv; C:\Windows\system32\DRIVERS\ehdrv.sys [2009-02-06 106208]
R1 VBoxDrv;VirtualBox Service; C:\Windows\system32\DRIVERS\VBoxDrv.sys [2009-02-16 100560]
R1 VBoxUSBMon;VirtualBox USB Monitor Driver; C:\Windows\system32\DRIVERS\VBoxUSBMon.sys [2009-02-16 41744]
R2 aksfridge;aksfridge; C:\Windows\system32\drivers\aksfridge.sys [2008-03-27 350720]
R2 eamon;eamon; C:\Windows\system32\DRIVERS\eamon.sys [2009-02-06 113448]
R2 epfw;epfw; C:\Windows\system32\DRIVERS\epfw.sys [2009-02-06 130952]
R2 epfwwfp;epfwwfp; C:\Windows\system32\DRIVERS\epfwwfp.sys [2009-02-06 38240]
R2 Hardlock;Hardlock; C:\Windows\system32\drivers\hardlock.sys [2008-02-11 586240]
R2 NwlnkIpx;NWLink IPX/SPX/NetBIOS Compatible Transport Protocol; C:\Windows\system32\DRIVERS\nwlnkipx.sys [2007-02-17 88448]
R2 RMCAST;Ovladač protokolu RMCAST (Pgm); C:\Windows\system32\DRIVERS\RMCAST.sys [2009-04-11 113664]
R3 3xHybrid;3xHybrid service; C:\Windows\system32\DRIVERS\3xHybrid.sys [2007-04-20 674048]
R3 Amusbprt;A4Tech HID-compliant Mouse Driver; C:\Windows\system32\DRIVERS\Amusbprt.sys [2007-05-14 14336]
R3 AtiHdmiService;ATI Function Driver for High Definition Audio Service; C:\Windows\system32\drivers\AtiHdmi.sys [2009-09-30 103440]
R3 atikmdag;atikmdag; C:\Windows\system32\DRIVERS\atikmdag.sys [2009-11-25 5143552]
R3 Epfwndis;Eset Personal Firewall; C:\Windows\system32\DRIVERS\Epfwndis.sys [2009-02-06 33096]
R3 GEARAspiWDM;GEAR ASPI Filter Driver; C:\Windows\system32\DRIVERS\GEARAspiWDM.sys [2009-05-18 26600]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\Windows\system32\drivers\RTKVHDA.sys [2007-07-18 1841312]
R3 MSPQM;Server proxy správce kvality datových proudů Microsoft; C:\Windows\system32\drivers\MSPQM.sys [2008-01-21 5504]
R3 NVENETFD;NVIDIA nForce Networking Controller Driver; C:\Windows\system32\DRIVERS\nvmfdx32.sys [2007-11-18 1040544]
R3 pcouffin;VSO Software pcouffin; C:\Windows\System32\Drivers\pcouffin.sys [2009-04-09 47360]
R3 VBoxNetFlt;VBoxNetFlt Service; C:\Windows\system32\DRIVERS\VBoxNetFlt.sys [2009-02-16 87568]
R3 WacomVKHid;Virtual Keyboard Driver; C:\Windows\system32\DRIVERS\WacomVKHid.sys [2007-02-15 11440]
S3 ark8u8u0;ark8u8u0; C:\Windows\system32\drivers\ark8u8u0.sys []
S3 catchme;catchme; \??\C:\Users\ENTENT~1\AppData\Local\Temp\catchme.sys []
S3 cpuz130;cpuz130; \??\C:\Users\ENTENT~1\AppData\Local\Temp\cpuz130\cpuz_x32.sys []
S3 drmkaud;Dekodér zvuků DRM jádra společnosti Microsoft; C:\Windows\system32\drivers\drmkaud.sys [2008-01-21 5632]
S3 EagleNT;EagleNT; \??\C:\Windows\system32\drivers\EagleNT.sys []
S3 ENTECH;ENTECH; \??\C:\Windows\system32\DRIVERS\ENTECH.sys [2008-09-17 27672]
S3 Epiusb;USB Flash; C:\Windows\System32\Drivers\Epiusb.sys [2001-09-05 14940]
S3 FlyPCI;FlyPCI; \??\C:\Windows\system32\drivers\FlyPCI.sys [2003-10-10 4134]
S3 gdrv;gdrv; \??\C:\Windows\gdrv.sys [2009-02-17 15600]
S3 GMSIPCI;GMSIPCI; \??\F:\INSTALL\GMSIPCI.SYS []
S3 hamachi;Hamachi Network Interface; C:\Windows\system32\DRIVERS\hamachi.sys [2009-03-09 25280]
S3 HdAudAddService;Ovladač funkce Microsoft 1.1 UAA pro službu zvuku High Definition Audio; C:\Windows\system32\drivers\HdAudio.sys [2006-11-02 235520]
S3 k750bus;Sony Ericsson 750 driver (WDM); C:\Windows\system32\DRIVERS\k750bus.sys [2005-02-11 55216]
S3 MSKSSRV;Server proxy služby datových proudů Microsoft; C:\Windows\system32\drivers\MSKSSRV.sys [2008-01-21 8192]
S3 MSPCLOCK;Server proxy hodin datových proudů Microsoft; C:\Windows\system32\drivers\MSPCLOCK.sys [2008-01-21 5888]
S3 MSTEE;Konvertor jímka-jímka typu T datových proudů Microsoft; C:\Windows\system32\drivers\MSTEE.sys [2008-01-21 6016]
S3 npkcrypt;npkcrypt; \??\C:\Program Files\Lineage II\system\npkcrypt.sys []
S3 npkcusb;npkcusb; \??\C:\Program Files\Lineage II\system\npkcusb.sys []
S3 npkycryp;npkycryp; \??\C:\Program Files\Lineage II\system\npkycryp.sys []
S3 NTACCESS;NTACCESS; \??\F:\NTACCESS.sys []
S3 s115bus;Sony Ericsson Device 115 driver (WDM); C:\Windows\system32\DRIVERS\s115bus.sys [2007-04-23 83208]
S3 s115mdfl;Sony Ericsson Device 115 USB WMC Modem Filter; C:\Windows\system32\DRIVERS\s115mdfl.sys [2007-04-23 15112]
S3 s115mdm;Sony Ericsson Device 115 USB WMC Modem Driver; C:\Windows\system32\DRIVERS\s115mdm.sys [2007-04-23 108680]
S3 s115mgmt;Sony Ericsson Device 115 USB WMC Device Management Drivers (WDM); C:\Windows\system32\DRIVERS\s115mgmt.sys [2007-04-23 100488]
S3 s115obex;Sony Ericsson Device 115 USB WMC OBEX Interface; C:\Windows\system32\DRIVERS\s115obex.sys [2007-04-23 98568]
S3 s125mdfl;Sony Ericsson Device 125 USB WMC Modem Filter; C:\Windows\system32\DRIVERS\s125mdfl.sys [2007-04-24 15112]
S3 s125mdm;Sony Ericsson Device 125 USB WMC Modem Driver; C:\Windows\system32\DRIVERS\s125mdm.sys [2007-04-24 108680]
S3 s125mgmt;Sony Ericsson Device 125 USB WMC Device Management Drivers (WDM); C:\Windows\system32\DRIVERS\s125mgmt.sys [2007-04-24 100488]
S3 s125obex;Sony Ericsson Device 125 USB WMC OBEX Interface; C:\Windows\system32\DRIVERS\s125obex.sys [2007-04-24 98696]
S3 SetupNTGLM7X;SetupNTGLM7X; \??\F:\NTGLM7X.sys []
S3 USBAAPL;Apple Mobile USB Driver; C:\Windows\System32\Drivers\usbaapl.sys [2009-08-28 40448]
S3 VBoxUSB;VirtualBox USB; C:\Windows\System32\Drivers\VBoxUSB.sys [2009-02-16 31824]
S3 w800bus;Sony Ericsson W800 driver (WDM); C:\Windows\system32\DRIVERS\w800bus.sys [2005-06-13 60768]
S3 w810bus;Sony Ericsson W810 Driver driver (WDM); C:\Windows\system32\DRIVERS\w810bus.sys [2006-02-20 58288]
S3 wacmoumonitor;Wacom Mode Helper; C:\Windows\system32\DRIVERS\wacmoumonitor.sys [2008-10-06 15656]
S3 wacommousefilter;Wacom Mouse Filter Driver; C:\Windows\system32\DRIVERS\wacommousefilter.sys [2007-02-16 11312]
S3 wacomvhid;Wacom Virtual Hid Driver; C:\Windows\system32\DRIVERS\wacomvhid.sys []
S3 winusb;Ovladač WinUsb; C:\Windows\system32\DRIVERS\winusb.sys [2009-04-11 31616]
S3 WpdUsb;WpdUsb; C:\Windows\system32\DRIVERS\wpdusb.sys [2009-10-01 40448]
S3 WUDFRd;WUDFRd; C:\Windows\system32\DRIVERS\WUDFRd.sys [2008-01-21 83328]
S3 xnacc;Služba ovladače pro řadič XBOX 360 pro systém Windows; C:\Windows\system32\DRIVERS\xnacc.sys [2008-01-21 521216]
S3 xusb21;Xbox 360 Wireless Receiver Driver Service 21; C:\Windows\system32\DRIVERS\xusb21.sys [2009-04-08 56448]
S4 ErrDev;Microsoft Hardware Error Device Driver; C:\Windows\system32\drivers\errdev.sys [2008-01-21 6656]
S4 MegaSR;MegaSR; C:\Windows\system32\drivers\megasr.sys [2008-01-21 386616]
S4 WmiAcpi;Microsoft Windows Management Interface for ACPI; C:\Windows\system32\drivers\wmiacpi.sys [2008-01-21 11264]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 AMD External Events Utility;AMD External Events Utility; C:\Windows\system32\atiesrxx.exe [2009-11-25 172032]
R2 Apple Mobile Device;Apple Mobile Device; C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe [2009-06-05 144712]
R2 Bonjour Service;Bonjour Service; C:\Program Files\Bonjour\mDNSResponder.exe [2008-12-12 238888]
R2 BthServ;@%SystemRoot%\System32\bthserv.dll,-101; C:\Windows\system32\svchost.exe [2008-01-21 21504]
R2 ekrn;ESET Service; C:\Program Files\ESET\ESET Smart Security\ekrn.exe [2009-02-06 727720]
R2 hasplms;HASP License Manager; C:\Windows\system32\hasplms.exe [2008-07-17 2549248]
R2 MDM;Machine Debug Manager; C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\mdm.exe [2006-10-26 335872]
R2 Nero BackItUp Scheduler 4.0;Nero BackItUp Scheduler 4.0; C:\Program Files\Common Files\Nero\Nero BackItUp 4\NBService.exe [2008-09-30 935208]
R2 PnkBstrA;PnkBstrA; C:\Windows\system32\PnkBstrA.exe [2009-02-27 66872]
R2 PnkBstrB;PnkBstrB; C:\Windows\system32\PnkBstrB.exe [2009-02-27 107832]
R2 RapiMgr;@%windir%\WindowsMobile\rapimgr.dll,-104; C:\Windows\system32\svchost.exe [2008-01-21 21504]
R2 TabletServicePen;TabletServicePen; C:\Windows\system32\Pen_Tablet.exe [2009-01-19 2789160]
R2 WcesComm;@%windir%\WindowsMobile\wcescomm.dll,-40079; C:\Windows\system32\svchost.exe [2008-01-21 21504]
R2 wlidsvc;Windows Live ID Sign-in Assistant; C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE [2009-03-30 1533808]
R3 FLEXnet Licensing Service;FLEXnet Licensing Service; C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe [2009-02-18 654848]
R3 iPod Service;iPod Service; C:\Program Files\iPod\bin\iPodService.exe [2009-10-28 545568]
S2 NOD32FiXTemDono;Eset Nod32 Boot; C:\Windows\system32\regedt32.exe [2006-11-02 9216]
S3 Adobe Version Cue CS3;Adobe Version Cue CS3; C:\Program Files\Common Files\Adobe\Adobe Version Cue CS3\Server\bin\VersionCueCS3.exe [2007-03-20 153792]
S3 EhttpSrv;ESET HTTP Server; C:\Program Files\ESET\ESET Smart Security\EHttpSrv.exe [2009-02-06 20680]
S3 FontCache;@%systemroot%\system32\FntCache.dll,-100; C:\Windows\system32\svchost.exe [2008-01-21 21504]
S3 IDriverT;InstallDriver Table Manager; C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe [2005-04-03 69632]
S3 npggsvc;nProtect GameGuard Service; C:\Windows\system32\GameMon.des [2009-02-18 2769658]
S3 odserv;Microsoft Office Diagnostics Service; C:\Program Files\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE [2008-11-04 441712]
S3 ose;Office Source Engine; C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2006-10-26 145184]
S3 Steam Client Service;Steam Client Service; C:\Program Files\Common Files\Steam\SteamService.exe [2009-10-31 320760]
S3 usprserv;User Privilege Service; C:\Windows\System32\svchost.exe [2008-01-21 21504]

-----------------EOF-----------------

[Rudy]

Dejte log z ComboFix.

Stahnete a ulozte nejlepe na plochu ComboFix: http://download.bleepingcomputer.com/sUBs/ComboFix.exe

pote spustte aplikaci pod uctem s administratorskym opravnenim

hned po startu se zobrazi obrazovka s licencnimi podminkami, pokracujte kliknutim na tlacitko Ano.

v klidu si postavte na kafe (cela akce trva cca. 5-10 minut, nekdy i dele - dle toho, o jak rychly stroj se jedna a kolika soubory se skener bude muset prodirat), behem skenu se nepokousejte spoustet zadne jine aplikace ani nic jineho

behem skenovani nepropadejte panice, vas stroj muze byt restartovan (predevsim pri prvni aplikaci skeneru)

upozorneni: pokud pouzivate antispyware s rezidentnim stitem, prepnete jeho rezidentni stit do Install Mode, pripadne jej po dobu skenu uplne deaktivujte, protoze dochazi pri skenu a vymazu pripadneho malware k nezadoucim kolizim s rezidentem antispyware

[ententeak]

Bohužel mi fórum nadává "Vaše zpráva obsahuje 973365 znaků. Maximální povolený počet znaků je 60000."
a nejde mi přiložit ani jako soubor, protože "Přípona txt není povolena"

je tedy zájem o nějakou konkrétní věc??
položka SnapShot@2009-06-21_17.48.27 tedy zabírá nejvíc (cca 6500 řádků)

P.S.: tak svchost mi jede 15x a PC stále zamrzá...

[Rudy]

SnapShot vynechte a zbytek dejte.

[ententeak]

ComboFix 10-01-04.01 - Ententeak 07.01.2010 6:34.2.2 - x86
Microsoft® Windows Vista™ Home Premium 6.0.6002.2.1250.420.1029.18.2047.915 [GMT 1:00]
Spuštěný z: d:\___ochrany\ComboFix.exe
SP: Windows Defender *enabled* (Updated) {D68DDC3A-831F-4FAE-9E44-DA132C1ACF46}
* Rezidentní štít AV je zapnutý

.

((((((((((((((((((((((((((((((((((((((( Ostatní výmazy )))))))))))))))))))))))))))))))))))))))))))))))))
.

c:\program files\Cheat Engine\dbk32.sys

.
((((((((((((((((((((((((( Soubory vytvořené od 2009-12-07 do 2010-01-07 )))))))))))))))))))))))))))))))
.

2010-01-07 05:42 . 2010-01-07 05:42 -------- d-----w- c:\users\Ententeak\AppData\Local\temp
2010-01-07 05:42 . 2010-01-07 05:42 -------- d-----w- c:\users\Default\AppData\Local\temp
2010-01-02 10:40 . 2010-01-02 10:40 -------- d-----w- c:\programdata\ATI
2010-01-02 10:06 . 2010-01-02 10:06 10134 ----a-r- c:\users\Ententeak\AppData\Roaming\Microsoft\Installer\{A2D08D5A-74E8-7509-452A-E40E63D8FFC2}\ARPPRODUCTICON.exe
2009-12-31 23:32 . 2009-12-31 23:32 -------- d-----w- c:\program files\THQ
2009-12-31 20:53 . 2009-12-31 20:53 -------- d-----w- c:\windows\D56B0E274A3E46C9B5C1D93D580C099C.TMP
2009-12-31 20:53 . 2009-12-31 20:53 -------- d-----w- c:\program files\Microsoft Chart Controls
2009-12-31 20:52 . 2009-12-31 20:52 -------- d-----w- C:\UDK
2009-12-31 13:17 . 2009-12-31 13:17 -------- d-----w- C:\Games
2009-12-29 22:13 . 2009-12-29 22:13 8854 ----a-r- c:\users\Ententeak\AppData\Roaming\Microsoft\Installer\{C884B05A-F5D9-4AE4-9D84-E6BD9F6E7890}\Uninstall_FlatOut2_C884B05AF5D94AE49D84E6BD9F6E7890.exe
2009-12-29 22:13 . 2009-12-29 22:13 15086 ----a-r- c:\users\Ententeak\AppData\Roaming\Microsoft\Installer\{C884B05A-F5D9-4AE4-9D84-E6BD9F6E7890}\NewShortcut5_C884B05AF5D94AE49D84E6BD9F6E7890.exe
2009-12-29 22:13 . 2009-12-29 22:13 53248 ----a-r- c:\users\Ententeak\AppData\Roaming\Microsoft\Installer\{C884B05A-F5D9-4AE4-9D84-E6BD9F6E7890}\FlatOut2.exe1_C884B05AF5D94AE49D84E6BD9F6E7890.exe
2009-12-29 22:13 . 2009-12-29 22:13 53248 ----a-r- c:\users\Ententeak\AppData\Roaming\Microsoft\Installer\{C884B05A-F5D9-4AE4-9D84-E6BD9F6E7890}\FlatOut2.exe_C884B05AF5D94AE49D84E6BD9F6E7890.exe
2009-12-29 22:13 . 2009-12-29 22:13 11502 ----a-r- c:\users\Ententeak\AppData\Roaming\Microsoft\Installer\{C884B05A-F5D9-4AE4-9D84-E6BD9F6E7890}\ARPPRODUCTICON.exe
2009-12-29 22:08 . 2009-12-29 22:08 -------- d-----w- c:\program files\Empire Interactive
2009-12-29 16:45 . 2009-12-29 16:45 -------- d-----w- c:\users\Ententeak\AppData\Roaming\Microsoft Games
2009-12-29 16:39 . 2009-12-29 16:39 -------- d-----w- c:\program files\GameSpy Arcade
2009-12-22 23:59 . 2009-12-22 23:59 41872 ----a-w- c:\windows\system32\xfcodec.dll
2009-12-19 19:44 . 2009-12-19 20:18 -------- d-----w- c:\users\Ententeak\AppData\Local\DF
2009-12-19 19:43 . 2005-01-04 09:43 4682 ----a-w- c:\windows\system32\npptNT2.sys
2009-12-19 15:41 . 2009-12-19 15:41 -------- d-----w- c:\users\Ententeak\AppData\Local\assembly
2009-12-19 15:40 . 2009-12-19 15:40 -------- d-----w- c:\program files\NCSoft
2009-12-19 15:40 . 2009-12-19 15:40 -------- d-----w- c:\users\Ententeak\AppData\Roaming\GetRightToGo
2009-12-13 18:21 . 2009-12-13 18:21 -------- d-----w- c:\program files\NetDragon
2009-12-13 08:43 . 2009-12-13 15:28 -------- d-sh--w- c:\users\Ententeak\AppData\Local\.#
2009-12-12 15:58 . 2009-03-09 14:27 453456 ----a-w- c:\windows\system32\d3dx10_41.dll
2009-12-12 15:58 . 2009-03-09 14:27 4178264 ----a-w- c:\windows\system32\D3DX9_41.dll
2009-12-12 15:58 . 2009-03-09 14:27 1846632 ----a-w- c:\windows\system32\D3DCompiler_41.dll
2009-12-12 15:58 . 2009-03-16 13:18 517448 ----a-w- c:\windows\system32\XAudio2_4.dll
2009-12-12 15:58 . 2009-03-16 13:18 235352 ----a-w- c:\windows\system32\xactengine3_4.dll
2009-12-12 15:58 . 2009-03-16 13:18 22360 ----a-w- c:\windows\system32\X3DAudio1_6.dll
2009-12-12 15:58 . 2008-10-15 05:22 452440 ----a-w- c:\windows\system32\d3dx10_40.dll
2009-12-12 15:58 . 2008-10-15 05:22 4379984 ----a-w- c:\windows\system32\D3DX9_40.dll
2009-12-12 15:58 . 2008-10-15 05:22 2036576 ----a-w- c:\windows\system32\D3DCompiler_40.dll
2009-12-09 13:52 . 2009-11-09 12:31 24064 ----a-w- c:\windows\system32\nshhttp.dll
2009-12-09 13:52 . 2009-11-09 10:36 411648 ----a-w- c:\windows\system32\drivers\http.sys
2009-12-09 13:52 . 2009-11-09 12:30 30720 ----a-w- c:\windows\system32\httpapi.dll
2009-12-09 13:28 . 2009-10-07 11:36 243712 ----a-w- c:\windows\system32\rastls.dll

.
(((((((((((((((((((((((((((((((((((((((( Find3M výpis ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2010-01-07 05:43 . 2009-02-17 20:59 -------- d-----w- c:\program files\Steam
2010-01-07 05:42 . 2009-11-13 09:50 -------- d-----w- c:\users\Ententeak\AppData\Roaming\DNA
2010-01-07 05:42 . 2009-11-13 09:50 -------- d-----w- c:\program files\DNA
2010-01-07 05:42 . 2009-09-01 13:32 -------- d-----w- c:\program files\Cheat Engine
2010-01-07 05:32 . 2009-03-01 10:14 -------- d-----w- c:\users\Ententeak\AppData\Roaming\WTablet
2010-01-07 05:30 . 2009-06-03 17:02 12 ----a-w- c:\windows\bthservsdp.dat
2010-01-07 05:22 . 2009-02-17 18:28 -------- d-----w- c:\programdata\Xfire
2010-01-05 13:31 . 2009-02-17 18:28 -------- d-----w- c:\program files\Xfire
2010-01-05 05:44 . 2009-02-17 18:28 -------- d-----w- c:\users\Ententeak\AppData\Roaming\Xfire
2010-01-04 01:44 . 2009-02-19 17:15 -------- d-----w- c:\programdata\Zoom Player
2010-01-02 10:46 . 2009-02-17 17:58 -------- d-----w- c:\program files\ATI
2010-01-02 10:10 . 2009-02-17 17:58 -------- d-----w- c:\program files\ATI Technologies
2009-12-31 20:53 . 2009-02-18 19:19 -------- d-----w- c:\program files\Common Files\Wise Installation Wizard
2009-12-31 14:30 . 2008-01-21 06:46 598594 ----a-w- c:\windows\system32\perfh005.dat
2009-12-31 14:30 . 2008-01-21 06:46 114786 ----a-w- c:\windows\system32\perfc005.dat
2009-12-29 16:36 . 2006-11-02 12:37 -------- d-----w- c:\program files\Microsoft Games
2009-12-29 16:26 . 2009-02-17 17:41 102280 ----a-w- c:\users\Ententeak\AppData\Local\GDIPFONTCACHEV1.DAT
2009-12-29 15:58 . 2009-02-17 18:23 -------- d-----w- c:\users\Ententeak\AppData\Roaming\Aston
2009-12-28 13:03 . 2009-03-04 08:25 -------- d-----w- c:\program files\EA Games
2009-12-28 13:03 . 2009-02-17 17:49 -------- d--h--w- c:\program files\InstallShield Installation Information
2009-12-24 14:51 . 2009-06-26 13:33 -------- d-----w- c:\program files\Ubisoft
2009-12-24 14:39 . 2009-03-28 08:57 -------- d-----w- c:\programdata\2DBoy
2009-12-17 14:19 . 2009-04-17 22:24 -------- d-----w- c:\programdata\DVD Shrink
2009-12-12 15:59 . 2009-02-18 19:19 -------- d-----w- c:\program files\AGEIA Technologies
2009-12-09 14:39 . 2006-11-02 11:18 -------- d-----w- c:\program files\Windows Mail
2009-12-09 13:54 . 2009-02-28 18:50 -------- d-----w- c:\programdata\Microsoft Help
2009-12-06 19:45 . 2009-10-02 07:58 -------- d-----w- c:\users\Ententeak\AppData\Roaming\vlc
2009-12-06 19:45 . 2009-04-07 11:16 -------- d-----w- c:\users\Ententeak\AppData\Roaming\dvdcss
2009-12-06 09:24 . 2009-02-23 12:36 -------- d-----w- c:\program files\pspad
2009-12-04 10:02 . 2009-12-04 10:02 -------- d-----w- c:\program files\YouTube Downloader
2009-11-30 17:02 . 2009-11-30 17:02 171144 ----a-w- c:\windows\system32\xliveinstall.dll
2009-11-30 17:02 . 2009-11-30 17:02 72840 ----a-w- c:\windows\system32\xliveinstallhost.exe
2009-11-25 03:51 . 2009-11-25 03:51 5143552 ----a-w- c:\windows\system32\drivers\atikmdag.sys
2009-11-25 03:18 . 2009-05-16 03:24 446464 ----a-w- c:\windows\system32\ATIDEMGX.dll
2009-11-25 03:17 . 2009-11-25 03:17 368640 ----a-w- c:\windows\system32\atieclxx.exe
2009-11-25 03:17 . 2009-11-25 03:17 172032 ----a-w- c:\windows\system32\atiesrxx.exe
2009-11-25 03:15 . 2008-07-30 02:30 159744 ----a-w- c:\windows\system32\atitmmxx.dll
2009-11-25 03:15 . 2008-07-30 02:30 356352 ----a-w- c:\windows\system32\atipdlxx.dll
2009-11-25 03:15 . 2009-11-25 03:15 274432 ----a-w- c:\windows\system32\Oemdspif.dll
2009-11-25 03:15 . 2009-11-25 03:15 11776 ----a-w- c:\windows\system32\atimuixx.dll
2009-11-25 03:14 . 2009-11-25 03:14 43520 ----a-w- c:\windows\system32\ati2edxx.dll
2009-11-25 03:12 . 2009-11-25 03:12 3055616 ----a-w- c:\windows\system32\atidxx32.dll
2009-11-25 02:55 . 2008-07-30 02:30 3617792 ----a-w- c:\windows\system32\atiumdag.dll
2009-11-25 02:44 . 2009-11-25 02:44 13487616 ----a-w- c:\windows\system32\atioglxx.dll
2009-11-25 02:37 . 2009-11-25 02:37 2899968 ----a-w- c:\windows\system32\atiumdva.dll
2009-11-25 02:25 . 2009-11-25 02:25 52224 ----a-w- c:\windows\system32\atimpc32.dll
2009-11-25 02:25 . 2009-11-25 02:25 52224 ----a-w- c:\windows\system32\amdpcom32.dll
2009-11-25 02:25 . 2009-05-16 02:41 225280 ----a-w- c:\windows\system32\atiadlxx.dll
2009-11-25 02:21 . 2009-11-25 02:21 53248 ----a-w- c:\windows\system32\aticalrt.dll
2009-11-25 02:21 . 2009-11-25 02:21 53248 ----a-w- c:\windows\system32\aticalcl.dll
2009-11-25 02:20 . 2009-11-25 02:20 3629056 ----a-w- c:\windows\system32\aticaldd.dll
2009-11-25 02:10 . 2009-11-25 02:10 53248 ----a-w- c:\windows\system32\drivers\ati2erec.dll
2009-11-21 06:40 . 2009-12-09 13:29 916480 ----a-w- c:\windows\system32\wininet.dll
2009-11-21 06:34 . 2009-12-09 13:29 109056 ----a-w- c:\windows\system32\iesysprep.dll
2009-11-21 06:34 . 2009-12-09 13:29 71680 ----a-w- c:\windows\system32\iesetup.dll
2009-11-21 04:59 . 2009-12-09 13:29 133632 ----a-w- c:\windows\system32\ieUnatt.exe
2009-11-16 18:08 . 2009-11-16 18:08 -------- d-----w- c:\programdata\PopCap Games
2009-11-16 18:08 . 2009-11-16 18:08 -------- d-----w- c:\programdata\Steam
2009-11-15 14:47 . 2009-08-17 22:34 127628 ---ha-w- c:\windows\system32\mlfcache.dat
2009-11-10 23:46 . 2009-11-10 23:46 -------- d-----w- c:\program files\Windows Portable Devices
2009-11-10 23:46 . 2006-11-02 10:25 665600 ----a-w- c:\windows\inf\drvindex.dat
2009-11-10 23:46 . 2009-11-10 23:46 0 ---ha-w- c:\windows\system32\drivers\Msft_User_WpdMtpDr_01_07_00.Wdf
2009-11-10 23:46 . 2009-11-10 23:46 0 ---ha-w- c:\windows\system32\drivers\Msft_User_WpdFs_01_07_00.Wdf
2009-11-06 09:59 . 2009-11-06 09:59 15406728 ----a-w- c:\windows\system32\xlive.dll
2009-11-06 09:59 . 2009-11-06 09:59 13642888 ----a-w- c:\windows\system32\xlivefnt.dll
2009-11-02 19:42 . 2009-10-03 08:47 195456 ------w- c:\windows\system32\MpSigStub.exe
2009-11-02 17:22 . 2009-11-02 17:22 79144 ----a-w- c:\programdata\Apple Computer\Installer Cache\iTunes 9.0.2.25\SetupAdmin.exe
2009-10-29 09:17 . 2009-11-25 12:30 2048 ----a-w- c:\windows\system32\tzres.dll
2009-10-23 08:39 . 2009-10-23 08:39 2098 --sha-w- c:\programdata\KGyGaAvL.sys
2009-10-23 08:39 . 2009-10-23 08:39 2098 --sha-w- c:\programdata\KGyGaAvL.sys
2009-10-23 08:39 . 2009-10-23 08:39 8 --sh--r- c:\programdata\2C2672F582.sys
2009-10-23 08:39 . 2009-10-23 08:39 8 --sh--r- c:\programdata\2C2672F582.sys
2009-10-22 15:59 . 2009-10-22 15:59 196565 ----a-w- c:\windows\system32\atiicdxx.dat
2009-10-18 21:43 . 2009-10-18 21:43 614912 ----a-w- C:\blackra1n.exe
2009-05-01 21:02 . 2009-05-01 21:02 1044480 ----a-w- c:\program files\mozilla firefox\plugins\libdivx.dll
2009-05-01 21:02 . 2009-05-01 21:02 200704 ----a-w- c:\program files\mozilla firefox\plugins\ssldivx.dll
.

((((((((((((((((((((((((((((( SnapShot@2009-06-21_17.48.27 )))))))))))))))))))))))))))))))))))))))))
..................

-- Snímek resetován k současnému datu --
.
(((((((((((((((((((((((((((((((((( Spouštěcí body v registru )))))))))))))))))))))))))))))))))))))))))))))
.
.
*Poznámka* prázdné záznamy a legitimní výchozí údaje nejsou zobrazeny.
REGEDIT4

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Steam"="c:\program files\steam\steam.exe" [2009-10-31 1217808]
"Center Agent"="c:\program files\KWorld Multimedia\HyperMedia\DTVR\Scheduled.exe" [2008-11-07 1520128]
"DAEMON Tools Pro Agent"="c:\program files\DAEMON Tools Pro\DTProAgent.exe" [2007-09-06 136136]
"WMPNSCFG"="c:\program files\Windows Media Player\WMPNSCFG.exe" [2008-01-21 202240]
"Google Update"="c:\users\Ententeak\AppData\Local\Google\Update\GoogleUpdate.exe" [2009-08-17 133104]
"iTap"="c:\program files\HLW\iTap\iTap.exe" [2009-08-06 5898240]
"BitTorrent DNA"="c:\program files\DNA\btdna.exe" [2009-11-13 323392]
"iPhone PC Suite"="c:\program files\NetDragon\91 Mobile\iPhone\iPhone PC Suite.exe" [2009-12-13 897024]
"Infium"="c:\program files\QIP Infium\infium.exe" [2009-03-25 5245440]
"NCsoft Launcher"="c:\program files\NCSoft\Launcher\NCLauncher.exe" [2009-12-19 38184]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"RtHDVCpl"="RtHDVCpl.exe" [2007-07-06 4669440]
"Acrobat Assistant 8.0"="c:\program files\Adobe\Acrobat 8.0\Acrobat\Acrotray.exe" [2006-10-22 620152]
"WheelMouse"="c:\program files\A4Tech\Mouse\Amoumain.exe" [2007-05-15 204800]
"Xfire Music"="c:\program files\Xfire\xfiremusic.exe" [2006-11-21 253650]
"egui"="c:\program files\ESET\ESET Smart Security\egui.exe" [2009-02-06 2021400]
"XboxStat"="c:\program files\Microsoft Xbox 360 Accessories\XboxStat.exe" [2007-09-27 734264]
"Windows Mobile Device Center"="c:\windows\WindowsMobile\wmdc.exe" [2007-05-31 648072]
"LchDrvKey"="LchDrvKey.exe" [2007-03-28 36864]
"QuickTime Task"="c:\program files\QuickTime\QTTask.exe" [2009-09-04 417792]
"WinampAgent"="c:\program files\Winamp\winampa.exe" [2009-03-09 37888]
"iTunesHelper"="c:\program files\iTunes\iTunesHelper.exe" [2009-10-28 141600]
"StartCCC"="c:\program files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" [2009-11-24 98304]

c:\users\Ententeak\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\
Elaine Farha [Spoltog].pq.lnk - e:\image\pq\Elaine Farha [Spoltog].pq [2009-11-29 4159]
Smart-X7 7.80.Lnk - c:\program files\A4Tech\Mouse\Amoumain.exe [2007-5-15 204800]
Xfire.lnk - c:\program files\Xfire\Xfire.exe [2009-12-23 3192720]

c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\
Remote Control.lnk - c:\program files\KWorld Multimedia\TV Tuner Card Utilities\HMCP3XCtl.exe [2009-2-18 77824]

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"EnableLUA"= 0 (0x0)
"EnableUIADesktopToggle"= 0 (0x0)

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WinDefend]
@="Service"

[HKEY_LOCAL_MACHINE\software\microsoft\security center\Svc]
"VistaSp2"=hex(b):be,b7,bb,b5,05,3d,ca,01

R1 ehdrv;ehdrv;c:\windows\System32\drivers\ehdrv.sys [6.2.2009 14:23 106208]
R1 VBoxDrv;VirtualBox Service;c:\windows\System32\drivers\VBoxDrv.sys [1.4.2009 15:37 100560]
R1 VBoxUSBMon;VirtualBox USB Monitor Driver;c:\windows\System32\drivers\VBoxUSBMon.sys [1.4.2009 15:37 41744]
R2 AMD External Events Utility;AMD External Events Utility;c:\windows\System32\atiesrxx.exe [25.11.2009 4:17 172032]
R2 ekrn;ESET Service;c:\program files\ESET\ESET Smart Security\ekrn.exe [6.2.2009 14:23 727720]
R2 epfwwfp;epfwwfp;c:\windows\System32\drivers\epfwwfp.sys [6.2.2009 14:24 38240]
R2 hasplms;HASP License Manager;c:\windows\system32\hasplms.exe -run --> c:\windows\system32\hasplms.exe -run [?]
R2 TabletServicePen;TabletServicePen;c:\windows\System32\Pen_Tablet.exe [1.3.2009 11:11 2789160]
R3 3xHybrid;3xHybrid service;c:\windows\System32\drivers\3xHybrid.sys [18.2.2009 15:46 674048]
R3 VBoxNetFlt;VBoxNetFlt Service;c:\windows\System32\drivers\VBoxNetFlt.sys [1.4.2009 15:37 87568]
S0 sptd;sptd;c:\windows\System32\drivers\sptd.sys [19.2.2009 17:36 685816]
S2 NOD32FiXTemDono;Eset Nod32 Boot;c:\windows\System32\regedt32.exe [2.11.2006 9:32 9216]
S3 FlyPCI;FlyPCI;c:\windows\System32\drivers\FlyPCI.sys [4.4.2009 9:28 4134]
S3 FontCache;Mezipaměť písem Windows;c:\windows\system32\svchost.exe -k LocalServiceAndNoImpersonation [21.1.2008 3:23 21504]
S3 npggsvc;nProtect GameGuard Service;c:\windows\system32\GameMon.des -service --> c:\windows\system32\GameMon.des -service [?]
S3 s115bus;Sony Ericsson Device 115 driver (WDM);c:\windows\System32\drivers\s115bus.sys [3.9.2009 5:19 83208]
S3 s115mdfl;Sony Ericsson Device 115 USB WMC Modem Filter;c:\windows\System32\drivers\s115mdfl.sys [3.9.2009 5:19 15112]
S3 s115mdm;Sony Ericsson Device 115 USB WMC Modem Driver;c:\windows\System32\drivers\s115mdm.sys [3.9.2009 5:19 108680]
S3 s115mgmt;Sony Ericsson Device 115 USB WMC Device Management Drivers (WDM);c:\windows\System32\drivers\s115mgmt.sys [3.9.2009 5:20 100488]
S3 s115obex;Sony Ericsson Device 115 USB WMC OBEX Interface;c:\windows\System32\drivers\s115obex.sys [3.9.2009 5:19 98568]
S3 VBoxUSB;VirtualBox USB;c:\windows\System32\drivers\VBoxUSB.sys [16.2.2009 16:47 31824]
S3 wacmoumonitor;Wacom Mode Helper;c:\windows\System32\drivers\wacmoumonitor.sys [1.3.2009 10:28 15656]

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost]
WindowsMobile REG_MULTI_SZ wcescomm rapimgr
LocalServiceRestricted REG_MULTI_SZ WcesComm RapiMgr
bthsvcs REG_MULTI_SZ BthServ
LocalServiceAndNoImpersonation REG_MULTI_SZ FontCache
.
Obsah adresáře 'Naplánované úlohy'

2010-01-06 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2091845228-201729607-2738538346-1000Core.job
- c:\users\Ententeak\AppData\Local\Google\Update\GoogleUpdate.exe [2009-08-17 22:25]

2010-01-07 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2091845228-201729607-2738538346-1000UA.job
- c:\users\Ententeak\AppData\Local\Google\Update\GoogleUpdate.exe [2009-08-17 22:25]

2009-11-30 c:\windows\Tasks\NeroLiveEpgUpdate-Ententeak-PC_Ententeak.job
- c:\program files\Nero\Nero 9\Nero Live\NeroLive.exe [2008-09-18 11:51]

2010-01-06 c:\windows\Tasks\User_Feed_Synchronization-{A6BFB76F-2E17-490A-998B-6672ABF278AC}.job
- c:\windows\system32\msfeedssync.exe [2009-12-09 04:59]
.
.
------- Doplňkový sken -------
.
uStart Page = hxxp://www.the-west.cz/index.php?page=logout
IE: Append to existing PDF - c:\program files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html
IE: Convert link target to Adobe PDF - c:\program files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html
IE: Convert link target to existing PDF - c:\program files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html
IE: Convert selected links to Adobe PDF - c:\program files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIECaptureSelLinks.html
IE: Convert selected links to existing PDF - c:\program files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIEAppendSelLinks.html
IE: Convert selection to Adobe PDF - c:\program files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html
IE: Convert selection to existing PDF - c:\program files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html
IE: Convert to Adobe PDF - c:\program files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html
IE: E&xportovat do aplikace Microsoft Excel - c:\progra~1\MICROS~3\Office12\EXCEL.EXE/3000
FF - ProfilePath - c:\users\Ententeak\AppData\Roaming\Mozilla\Firefox\Profiles\6nh6nwz6.default\
FF - prefs.js: browser.search.defaulturl - hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT1434207&SearchSource=3&q=
FF - prefs.js: browser.search.selectedEngine - Crack Spider
FF - prefs.js: browser.startup.homepage - hxxp://www.google.cz/firefox?client=firefox-a& ... s:official
FF - plugin: c:\program files\Microsoft\Office Live\npOLW.dll
FF - plugin: c:\program files\Mozilla Firefox\plugins\npWebLaunch.dll
FF - plugin: c:\program files\thriXXX\WebLaunch\Binaries\npWebLaunch.dll
FF - plugin: c:\program files\Windows Live\Photo Gallery\NPWLPG.dll
FF - plugin: c:\users\Ententeak\AppData\Local\Google\Update\1.2.183.13\npGoogleOneClick8.dll
FF - plugin: c:\users\Ententeak\AppData\Roaming\Mozilla\Firefox\Profiles\6nh6nwz6.default\extensions\NPDyyno@dyyno.com\plugins\npDyyno.dll
FF - HiddenExtension: Microsoft .NET Framework Assistant: {20a82645-c095-46ed-80e3-08825760534b} - c:\windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\

---- NASTAVENÍ FIREFOXU ----
c:\program files\Mozilla Firefox\defaults\pref\firefox-l10n.js - pref("browser.fixup.alternate.suffix", ".cz");
.
- - - - NEPLATNÉ POLOŽKY ODSTRANĚNÉ Z REGISTRU - - - -

HKCU-Run-PlayNC Launcher - (no file)



**************************************************************************

catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2010-01-07 06:42
Windows 6.0.6002 Service Pack 2 NTFS

skenování skrytých procesů ...

skenování skrytých položek 'Po spuštění' ...

skenování skrytých souborů ...

sken byl úspešně dokončen
skryté soubory: 0

**************************************************************************

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Services\npggsvc]
"ImagePath"="c:\windows\system32\GameMon.des -service"
.
--------------------- ZAMKNUTÉ KLÍČE V REGISTRU ---------------------

[HKEY_USERS\S-1-5-21-2091845228-201729607-2738538346-1000\Software\SecuROM\!CAUTION! NEVER A OR CHANGE ANY KEY*]
@Allowed: (Read) (RestrictedCode)

[HKEY_USERS\S-1-5-21-2091845228-201729607-2738538346-1000\Software\SecuROM\License information*]
@Allowed: (Read) (RestrictedCode)

[HKEY_USERS\S-1-5-21-2091845228-201729607-2738538346-1000\Software\Sony Creative Software\M*e*d*i*a* *M*a*n*a*g*e*r* *f*o*r* *P*S*P*"!\3.0]
"Percents"="0 0.1396 0.2833 0.4495 0.7151 0.8317 0.836 "
"Increment"=".008850"
"FRT"="ACOPPhefmy67pAXtACT/BfYLV6y13oH8FetWqLyjgGwWV90AhztFwQ=="
"PLCK"="sWrlChYVG1T/1epBxSMXmDN1gxvrbypw"
"PHSH"=""

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0000\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0001\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0002\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0003\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
Celkový čas: 2010-01-07 06:46:19
ComboFix-quarantined-files.txt 2010-01-07 05:46
ComboFix2.txt 2009-06-21 17:50

Před spuštěním: Volných bajtů: 14 384 750 592
Po spuštění: Volných bajtů: 14 299 934 720

- - End Of File - - ED6012F76E565BBAF0387C0ACC1C4709

[Rudy]

Ještě dočistíme. Přesuňte ComboFix na plochu. Otevřte poznámkový blok a zkopírujte do něj:

Collect::
c:\programdata\2C2672F582.sys

Driver::
NOD32FiXTemDono

Uložte na plochu jako CFScript.txt. Pak jej myší přetáhněte nad ikonu ComboFix a pusťte. CF se spustí a vykoná příkazy ze skriptu.

[ententeak]

ComboFix 10-01-04.01 - Ententeak 08.01.2010 7:16.3.2 - x86
Microsoft® Windows Vista™ Home Premium 6.0.6002.2.1250.420.1029.18.1023.417 [GMT 1:00]
Spuštěný z: d:\___ochrany\ComboFix.exe
Použité ovládací přepínače :: d:\___ochrany\CFScript.txt
SP: Windows Defender *enabled* (Updated) {D68DDC3A-831F-4FAE-9E44-DA132C1ACF46}
* Rezidentní štít AV je zapnutý


file zipped: c:\programdata\2C2672F582.sys
.

((((((((((((((((((((((((((((((((((((((( Ostatní výmazy )))))))))))))))))))))))))))))))))))))))))))))))))
.

c:\programdata\2C2672F582.sys

.
((((((((((((((((((((((((((((((((((((((( Ovladače/Služby )))))))))))))))))))))))))))))))))))))))))))))))))
.

-------\Service_NOD32FiXTemDono


((((((((((((((((((((((((( Soubory vytvořené od 2009-12-08 do 2010-01-08 )))))))))))))))))))))))))))))))
.

2010-01-08 06:24 . 2010-01-08 06:28 -------- d-----w- c:\users\Ententeak\AppData\Local\temp
2010-01-08 06:24 . 2010-01-08 06:24 -------- d-----w- c:\users\Public\AppData\Local\temp
2010-01-08 06:24 . 2010-01-08 06:24 -------- d-----w- c:\users\Default\AppData\Local\temp
2010-01-02 10:40 . 2010-01-02 10:40 -------- d-----w- c:\programdata\ATI
2009-12-31 23:32 . 2009-12-31 23:32 -------- d-----w- c:\program files\THQ
2009-12-31 20:53 . 2009-12-31 20:53 -------- d-----w- c:\windows\D56B0E274A3E46C9B5C1D93D580C099C.TMP
2009-12-31 20:53 . 2009-12-31 20:53 -------- d-----w- c:\program files\Microsoft Chart Controls
2009-12-31 20:52 . 2009-12-31 20:52 -------- d-----w- C:\UDK
2009-12-31 13:17 . 2009-12-31 13:17 -------- d-----w- C:\Games
2009-12-29 22:08 . 2009-12-29 22:08 -------- d-----w- c:\program files\Empire Interactive
2009-12-29 16:45 . 2009-12-29 16:45 -------- d-----w- c:\users\Ententeak\AppData\Roaming\Microsoft Games
2009-12-29 16:39 . 2009-12-29 16:39 -------- d-----w- c:\program files\GameSpy Arcade
2009-12-22 23:59 . 2009-12-22 23:59 41872 ----a-w- c:\windows\system32\xfcodec.dll
2009-12-19 19:44 . 2009-12-19 20:18 -------- d-----w- c:\users\Ententeak\AppData\Local\DF
2009-12-19 19:43 . 2005-01-04 09:43 4682 ----a-w- c:\windows\system32\npptNT2.sys
2009-12-19 15:41 . 2009-12-19 15:41 -------- d-----w- c:\users\Ententeak\AppData\Local\assembly
2009-12-19 15:40 . 2009-12-19 15:40 -------- d-----w- c:\program files\NCSoft
2009-12-19 15:40 . 2009-12-19 15:40 -------- d-----w- c:\users\Ententeak\AppData\Roaming\GetRightToGo
2009-12-13 18:21 . 2009-12-13 18:21 -------- d-----w- c:\program files\NetDragon
2009-12-13 08:43 . 2009-12-13 15:28 -------- d-sh--w- c:\users\Ententeak\AppData\Local\.#
2009-12-12 15:58 . 2009-03-09 14:27 453456 ----a-w- c:\windows\system32\d3dx10_41.dll
2009-12-12 15:58 . 2009-03-09 14:27 4178264 ----a-w- c:\windows\system32\D3DX9_41.dll
2009-12-12 15:58 . 2009-03-09 14:27 1846632 ----a-w- c:\windows\system32\D3DCompiler_41.dll
2009-12-12 15:58 . 2009-03-16 13:18 517448 ----a-w- c:\windows\system32\XAudio2_4.dll
2009-12-12 15:58 . 2009-03-16 13:18 235352 ----a-w- c:\windows\system32\xactengine3_4.dll
2009-12-12 15:58 . 2009-03-16 13:18 22360 ----a-w- c:\windows\system32\X3DAudio1_6.dll
2009-12-12 15:58 . 2008-10-15 05:22 452440 ----a-w- c:\windows\system32\d3dx10_40.dll
2009-12-12 15:58 . 2008-10-15 05:22 4379984 ----a-w- c:\windows\system32\D3DX9_40.dll
2009-12-12 15:58 . 2008-10-15 05:22 2036576 ----a-w- c:\windows\system32\D3DCompiler_40.dll
2009-12-09 13:52 . 2009-11-09 12:31 24064 ----a-w- c:\windows\system32\nshhttp.dll
2009-12-09 13:52 . 2009-11-09 10:36 411648 ----a-w- c:\windows\system32\drivers\http.sys
2009-12-09 13:52 . 2009-11-09 12:30 30720 ----a-w- c:\windows\system32\httpapi.dll
2009-12-09 13:28 . 2009-10-07 11:36 243712 ----a-w- c:\windows\system32\rastls.dll

.
(((((((((((((((((((((((((((((((((((((((( Find3M výpis ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2010-01-08 06:29 . 2009-02-17 20:59 -------- d-----w- c:\program files\Steam
2010-01-08 06:28 . 2009-11-13 09:50 -------- d-----w- c:\users\Ententeak\AppData\Roaming\DNA
2010-01-08 06:28 . 2009-11-13 09:50 -------- d-----w- c:\program files\DNA
2010-01-08 06:25 . 2009-06-03 17:02 12 ----a-w- c:\windows\bthservsdp.dat
2010-01-08 06:13 . 2009-03-01 10:14 -------- d-----w- c:\users\Ententeak\AppData\Roaming\WTablet
2010-01-07 05:42 . 2009-09-01 13:32 -------- d-----w- c:\program files\Cheat Engine
2010-01-07 05:22 . 2009-02-17 18:28 -------- d-----w- c:\programdata\Xfire
2010-01-05 13:31 . 2009-02-17 18:28 -------- d-----w- c:\program files\Xfire
2010-01-05 05:44 . 2009-02-17 18:28 -------- d-----w- c:\users\Ententeak\AppData\Roaming\Xfire
2010-01-04 01:44 . 2009-02-19 17:15 -------- d-----w- c:\programdata\Zoom Player
2010-01-02 10:46 . 2009-02-17 17:58 -------- d-----w- c:\program files\ATI
2010-01-02 10:10 . 2009-02-17 17:58 -------- d-----w- c:\program files\ATI Technologies
2010-01-02 10:06 . 2010-01-02 10:06 10134 ----a-r- c:\users\Ententeak\AppData\Roaming\Microsoft\Installer\{A2D08D5A-74E8-7509-452A-E40E63D8FFC2}\ARPPRODUCTICON.exe
2009-12-31 20:53 . 2009-02-18 19:19 -------- d-----w- c:\program files\Common Files\Wise Installation Wizard
2009-12-31 14:30 . 2008-01-21 06:46 598594 ----a-w- c:\windows\system32\perfh005.dat
2009-12-31 14:30 . 2008-01-21 06:46 114786 ----a-w- c:\windows\system32\perfc005.dat
2009-12-29 22:13 . 2009-12-29 22:13 8854 ----a-r- c:\users\Ententeak\AppData\Roaming\Microsoft\Installer\{C884B05A-F5D9-4AE4-9D84-E6BD9F6E7890}\Uninstall_FlatOut2_C884B05AF5D94AE49D84E6BD9F6E7890.exe
2009-12-29 22:13 . 2009-12-29 22:13 15086 ----a-r- c:\users\Ententeak\AppData\Roaming\Microsoft\Installer\{C884B05A-F5D9-4AE4-9D84-E6BD9F6E7890}\NewShortcut5_C884B05AF5D94AE49D84E6BD9F6E7890.exe
2009-12-29 22:13 . 2009-12-29 22:13 53248 ----a-r- c:\users\Ententeak\AppData\Roaming\Microsoft\Installer\{C884B05A-F5D9-4AE4-9D84-E6BD9F6E7890}\FlatOut2.exe1_C884B05AF5D94AE49D84E6BD9F6E7890.exe
2009-12-29 22:13 . 2009-12-29 22:13 53248 ----a-r- c:\users\Ententeak\AppData\Roaming\Microsoft\Installer\{C884B05A-F5D9-4AE4-9D84-E6BD9F6E7890}\FlatOut2.exe_C884B05AF5D94AE49D84E6BD9F6E7890.exe
2009-12-29 22:13 . 2009-12-29 22:13 11502 ----a-r- c:\users\Ententeak\AppData\Roaming\Microsoft\Installer\{C884B05A-F5D9-4AE4-9D84-E6BD9F6E7890}\ARPPRODUCTICON.exe
2009-12-29 16:36 . 2006-11-02 12:37 -------- d-----w- c:\program files\Microsoft Games
2009-12-29 16:26 . 2009-02-17 17:41 102280 ----a-w- c:\users\Ententeak\AppData\Local\GDIPFONTCACHEV1.DAT
2009-12-29 15:58 . 2009-02-17 18:23 -------- d-----w- c:\users\Ententeak\AppData\Roaming\Aston
2009-12-28 13:03 . 2009-03-04 08:25 -------- d-----w- c:\program files\EA Games
2009-12-28 13:03 . 2009-02-17 17:49 -------- d--h--w- c:\program files\InstallShield Installation Information
2009-12-24 14:51 . 2009-06-26 13:33 -------- d-----w- c:\program files\Ubisoft
2009-12-24 14:39 . 2009-03-28 08:57 -------- d-----w- c:\programdata\2DBoy
2009-12-17 14:19 . 2009-04-17 22:24 -------- d-----w- c:\programdata\DVD Shrink
2009-12-12 15:59 . 2009-02-18 19:19 -------- d-----w- c:\program files\AGEIA Technologies
2009-12-09 14:39 . 2006-11-02 11:18 -------- d-----w- c:\program files\Windows Mail
2009-12-09 13:54 . 2009-02-28 18:50 -------- d-----w- c:\programdata\Microsoft Help
2009-12-06 19:45 . 2009-10-02 07:58 -------- d-----w- c:\users\Ententeak\AppData\Roaming\vlc
2009-12-06 19:45 . 2009-04-07 11:16 -------- d-----w- c:\users\Ententeak\AppData\Roaming\dvdcss
2009-12-06 09:24 . 2009-02-23 12:36 -------- d-----w- c:\program files\pspad
2009-12-04 10:02 . 2009-12-04 10:02 -------- d-----w- c:\program files\YouTube Downloader
2009-11-30 17:02 . 2009-11-30 17:02 171144 ----a-w- c:\windows\system32\xliveinstall.dll
2009-11-30 17:02 . 2009-11-30 17:02 72840 ----a-w- c:\windows\system32\xliveinstallhost.exe
2009-11-25 03:51 . 2009-11-25 03:51 5143552 ----a-w- c:\windows\system32\drivers\atikmdag.sys
2009-11-25 03:18 . 2009-05-16 03:24 446464 ----a-w- c:\windows\system32\ATIDEMGX.dll
2009-11-25 03:17 . 2009-11-25 03:17 368640 ----a-w- c:\windows\system32\atieclxx.exe
2009-11-25 03:17 . 2009-11-25 03:17 172032 ----a-w- c:\windows\system32\atiesrxx.exe
2009-11-25 03:15 . 2008-07-30 02:30 159744 ----a-w- c:\windows\system32\atitmmxx.dll
2009-11-25 03:15 . 2008-07-30 02:30 356352 ----a-w- c:\windows\system32\atipdlxx.dll
2009-11-25 03:15 . 2009-11-25 03:15 274432 ----a-w- c:\windows\system32\Oemdspif.dll
2009-11-25 03:15 . 2009-11-25 03:15 11776 ----a-w- c:\windows\system32\atimuixx.dll
2009-11-25 03:14 . 2009-11-25 03:14 43520 ----a-w- c:\windows\system32\ati2edxx.dll
2009-11-25 03:12 . 2009-11-25 03:12 3055616 ----a-w- c:\windows\system32\atidxx32.dll
2009-11-25 02:55 . 2008-07-30 02:30 3617792 ----a-w- c:\windows\system32\atiumdag.dll
2009-11-25 02:44 . 2009-11-25 02:44 13487616 ----a-w- c:\windows\system32\atioglxx.dll
2009-11-25 02:37 . 2009-11-25 02:37 2899968 ----a-w- c:\windows\system32\atiumdva.dll
2009-11-25 02:25 . 2009-11-25 02:25 52224 ----a-w- c:\windows\system32\atimpc32.dll
2009-11-25 02:25 . 2009-11-25 02:25 52224 ----a-w- c:\windows\system32\amdpcom32.dll
2009-11-25 02:25 . 2009-05-16 02:41 225280 ----a-w- c:\windows\system32\atiadlxx.dll
2009-11-25 02:21 . 2009-11-25 02:21 53248 ----a-w- c:\windows\system32\aticalrt.dll
2009-11-25 02:21 . 2009-11-25 02:21 53248 ----a-w- c:\windows\system32\aticalcl.dll
2009-11-25 02:20 . 2009-11-25 02:20 3629056 ----a-w- c:\windows\system32\aticaldd.dll
2009-11-25 02:10 . 2009-11-25 02:10 53248 ----a-w- c:\windows\system32\drivers\ati2erec.dll
2009-11-21 06:40 . 2009-12-09 13:29 916480 ----a-w- c:\windows\system32\wininet.dll
2009-11-21 06:34 . 2009-12-09 13:29 109056 ----a-w- c:\windows\system32\iesysprep.dll
2009-11-21 06:34 . 2009-12-09 13:29 71680 ----a-w- c:\windows\system32\iesetup.dll
2009-11-21 04:59 . 2009-12-09 13:29 133632 ----a-w- c:\windows\system32\ieUnatt.exe
2009-11-16 18:08 . 2009-11-16 18:08 -------- d-----w- c:\programdata\PopCap Games
2009-11-16 18:08 . 2009-11-16 18:08 -------- d-----w- c:\programdata\Steam
2009-11-15 14:47 . 2009-08-17 22:34 127628 ---ha-w- c:\windows\system32\mlfcache.dat
2009-11-10 23:46 . 2009-11-10 23:46 -------- d-----w- c:\program files\Windows Portable Devices
2009-11-10 23:46 . 2006-11-02 10:25 665600 ----a-w- c:\windows\inf\drvindex.dat
2009-11-10 23:46 . 2009-11-10 23:46 0 ---ha-w- c:\windows\system32\drivers\Msft_User_WpdMtpDr_01_07_00.Wdf
2009-11-10 23:46 . 2009-11-10 23:46 0 ---ha-w- c:\windows\system32\drivers\Msft_User_WpdFs_01_07_00.Wdf
2009-11-06 09:59 . 2009-11-06 09:59 15406728 ----a-w- c:\windows\system32\xlive.dll
2009-11-06 09:59 . 2009-11-06 09:59 13642888 ----a-w- c:\windows\system32\xlivefnt.dll
2009-11-02 19:42 . 2009-10-03 08:47 195456 ------w- c:\windows\system32\MpSigStub.exe
2009-11-02 17:22 . 2009-11-02 17:22 79144 ----a-w- c:\programdata\Apple Computer\Installer Cache\iTunes 9.0.2.25\SetupAdmin.exe
2009-10-29 09:17 . 2009-11-25 12:30 2048 ----a-w- c:\windows\system32\tzres.dll
2009-10-23 08:39 . 2009-10-23 08:39 2098 --sha-w- c:\programdata\KGyGaAvL.sys
2009-10-23 08:39 . 2009-10-23 08:39 2098 --sha-w- c:\programdata\KGyGaAvL.sys
2009-10-22 15:59 . 2009-10-22 15:59 196565 ----a-w- c:\windows\system32\atiicdxx.dat
2009-10-18 21:43 . 2009-10-18 21:43 614912 ----a-w- C:\blackra1n.exe
2009-05-01 21:02 . 2009-05-01 21:02 1044480 ----a-w- c:\program files\mozilla firefox\plugins\libdivx.dll
2009-05-01 21:02 . 2009-05-01 21:02 200704 ----a-w- c:\program files\mozilla firefox\plugins\ssldivx.dll
.

(((((((((((((((((((((((((((((((((( Spouštěcí body v registru )))))))))))))))))))))))))))))))))))))))))))))
.
.
*Poznámka* prázdné záznamy a legitimní výchozí údaje nejsou zobrazeny.
REGEDIT4

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Steam"="c:\program files\steam\steam.exe" [2009-10-31 1217808]
"Center Agent"="c:\program files\KWorld Multimedia\HyperMedia\DTVR\Scheduled.exe" [2008-11-07 1520128]
"DAEMON Tools Pro Agent"="c:\program files\DAEMON Tools Pro\DTProAgent.exe" [2007-09-06 136136]
"WMPNSCFG"="c:\program files\Windows Media Player\WMPNSCFG.exe" [2008-01-21 202240]
"Google Update"="c:\users\Ententeak\AppData\Local\Google\Update\GoogleUpdate.exe" [2009-08-17 133104]
"iTap"="c:\program files\HLW\iTap\iTap.exe" [2009-08-06 5898240]
"BitTorrent DNA"="c:\program files\DNA\btdna.exe" [2009-11-13 323392]
"iPhone PC Suite"="c:\program files\NetDragon\91 Mobile\iPhone\iPhone PC Suite.exe" [2009-12-13 897024]
"Infium"="c:\program files\QIP Infium\infium.exe" [2009-03-25 5245440]
"NCsoft Launcher"="c:\program files\NCSoft\Launcher\NCLauncher.exe" [2009-12-19 38184]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"RtHDVCpl"="RtHDVCpl.exe" [2007-07-06 4669440]
"Acrobat Assistant 8.0"="c:\program files\Adobe\Acrobat 8.0\Acrobat\Acrotray.exe" [2006-10-22 620152]
"WheelMouse"="c:\program files\A4Tech\Mouse\Amoumain.exe" [2007-05-15 204800]
"Xfire Music"="c:\program files\Xfire\xfiremusic.exe" [2006-11-21 253650]
"egui"="c:\program files\ESET\ESET Smart Security\egui.exe" [2009-02-06 2021400]
"XboxStat"="c:\program files\Microsoft Xbox 360 Accessories\XboxStat.exe" [2007-09-27 734264]
"Windows Mobile Device Center"="c:\windows\WindowsMobile\wmdc.exe" [2007-05-31 648072]
"LchDrvKey"="LchDrvKey.exe" [2007-03-28 36864]
"QuickTime Task"="c:\program files\QuickTime\QTTask.exe" [2009-09-04 417792]
"WinampAgent"="c:\program files\Winamp\winampa.exe" [2009-03-09 37888]
"iTunesHelper"="c:\program files\iTunes\iTunesHelper.exe" [2009-10-28 141600]
"StartCCC"="c:\program files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" [2009-11-24 98304]

c:\users\Ententeak\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\
Elaine Farha [Spoltog].pq.lnk - e:\image\pq\Elaine Farha [Spoltog].pq [2009-11-29 4159]
Smart-X7 7.80.Lnk - c:\program files\A4Tech\Mouse\Amoumain.exe [2007-5-15 204800]
Xfire.lnk - c:\program files\Xfire\Xfire.exe [2009-12-23 3192720]

c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\
Remote Control.lnk - c:\program files\KWorld Multimedia\TV Tuner Card Utilities\HMCP3XCtl.exe [2009-2-18 77824]

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"EnableLUA"= 0 (0x0)
"EnableUIADesktopToggle"= 0 (0x0)

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WinDefend]
@="Service"

[HKEY_LOCAL_MACHINE\software\microsoft\security center\Svc]
"VistaSp2"=hex(b):be,b7,bb,b5,05,3d,ca,01

R1 ehdrv;ehdrv;c:\windows\System32\drivers\ehdrv.sys [6.2.2009 14:23 106208]
R1 VBoxDrv;VirtualBox Service;c:\windows\System32\drivers\VBoxDrv.sys [1.4.2009 15:37 100560]
R1 VBoxUSBMon;VirtualBox USB Monitor Driver;c:\windows\System32\drivers\VBoxUSBMon.sys [1.4.2009 15:37 41744]
R2 AMD External Events Utility;AMD External Events Utility;c:\windows\System32\atiesrxx.exe [25.11.2009 4:17 172032]
R2 ekrn;ESET Service;c:\program files\ESET\ESET Smart Security\ekrn.exe [6.2.2009 14:23 727720]
R2 epfwwfp;epfwwfp;c:\windows\System32\drivers\epfwwfp.sys [6.2.2009 14:24 38240]
R2 hasplms;HASP License Manager;c:\windows\system32\hasplms.exe -run --> c:\windows\system32\hasplms.exe -run [?]
R2 TabletServicePen;TabletServicePen;c:\windows\System32\Pen_Tablet.exe [1.3.2009 11:11 2789160]
R3 3xHybrid;3xHybrid service;c:\windows\System32\drivers\3xHybrid.sys [18.2.2009 15:46 674048]
R3 VBoxNetFlt;VBoxNetFlt Service;c:\windows\System32\drivers\VBoxNetFlt.sys [1.4.2009 15:37 87568]
S3 FlyPCI;FlyPCI;c:\windows\System32\drivers\FlyPCI.sys [4.4.2009 9:28 4134]
S3 FontCache;Mezipaměť písem Windows;c:\windows\system32\svchost.exe -k LocalServiceAndNoImpersonation [21.1.2008 3:23 21504]
S3 npggsvc;nProtect GameGuard Service;c:\windows\system32\GameMon.des -service --> c:\windows\system32\GameMon.des -service [?]
S3 s115bus;Sony Ericsson Device 115 driver (WDM);c:\windows\System32\drivers\s115bus.sys [3.9.2009 5:19 83208]
S3 s115mdfl;Sony Ericsson Device 115 USB WMC Modem Filter;c:\windows\System32\drivers\s115mdfl.sys [3.9.2009 5:19 15112]
S3 s115mdm;Sony Ericsson Device 115 USB WMC Modem Driver;c:\windows\System32\drivers\s115mdm.sys [3.9.2009 5:19 108680]
S3 s115mgmt;Sony Ericsson Device 115 USB WMC Device Management Drivers (WDM);c:\windows\System32\drivers\s115mgmt.sys [3.9.2009 5:20 100488]
S3 s115obex;Sony Ericsson Device 115 USB WMC OBEX Interface;c:\windows\System32\drivers\s115obex.sys [3.9.2009 5:19 98568]
S3 VBoxUSB;VirtualBox USB;c:\windows\System32\drivers\VBoxUSB.sys [16.2.2009 16:47 31824]
S3 wacmoumonitor;Wacom Mode Helper;c:\windows\System32\drivers\wacmoumonitor.sys [1.3.2009 10:28 15656]

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost]
WindowsMobile REG_MULTI_SZ wcescomm rapimgr
LocalServiceRestricted REG_MULTI_SZ WcesComm RapiMgr
bthsvcs REG_MULTI_SZ BthServ
LocalServiceAndNoImpersonation REG_MULTI_SZ FontCache
.
Obsah adresáře 'Naplánované úlohy'

2010-01-07 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2091845228-201729607-2738538346-1000Core.job
- c:\users\Ententeak\AppData\Local\Google\Update\GoogleUpdate.exe [2009-08-17 22:25]

2010-01-08 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2091845228-201729607-2738538346-1000UA.job
- c:\users\Ententeak\AppData\Local\Google\Update\GoogleUpdate.exe [2009-08-17 22:25]

2009-11-30 c:\windows\Tasks\NeroLiveEpgUpdate-Ententeak-PC_Ententeak.job
- c:\program files\Nero\Nero 9\Nero Live\NeroLive.exe [2008-09-18 11:51]

2010-01-07 c:\windows\Tasks\User_Feed_Synchronization-{A6BFB76F-2E17-490A-998B-6672ABF278AC}.job
- c:\windows\system32\msfeedssync.exe [2009-12-09 04:59]
.
.
------- Doplňkový sken -------
.
uStart Page = hxxp://www.the-west.cz/index.php?page=logout
IE: Append to existing PDF - c:\program files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html
IE: Convert link target to Adobe PDF - c:\program files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html
IE: Convert link target to existing PDF - c:\program files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html
IE: Convert selected links to Adobe PDF - c:\program files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIECaptureSelLinks.html
IE: Convert selected links to existing PDF - c:\program files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIEAppendSelLinks.html
IE: Convert selection to Adobe PDF - c:\program files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html
IE: Convert selection to existing PDF - c:\program files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html
IE: Convert to Adobe PDF - c:\program files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html
IE: E&xportovat do aplikace Microsoft Excel - c:\progra~1\MICROS~3\Office12\EXCEL.EXE/3000
FF - ProfilePath - c:\users\Ententeak\AppData\Roaming\Mozilla\Firefox\Profiles\6nh6nwz6.default\
FF - prefs.js: browser.search.defaulturl - hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT1434207&SearchSource=3&q=
FF - prefs.js: browser.search.selectedEngine - Crack Spider
FF - prefs.js: browser.startup.homepage - hxxp://www.google.cz/firefox?client=firefox-a& ... s:official
FF - plugin: c:\program files\Microsoft\Office Live\npOLW.dll
FF - plugin: c:\program files\Mozilla Firefox\plugins\npWebLaunch.dll
FF - plugin: c:\program files\thriXXX\WebLaunch\Binaries\npWebLaunch.dll
FF - plugin: c:\program files\Windows Live\Photo Gallery\NPWLPG.dll
FF - plugin: c:\users\Ententeak\AppData\Local\Google\Update\1.2.183.13\npGoogleOneClick8.dll
FF - plugin: c:\users\Ententeak\AppData\Roaming\Mozilla\Firefox\Profiles\6nh6nwz6.default\extensions\NPDyyno@dyyno.com\plugins\npDyyno.dll
FF - HiddenExtension: Microsoft .NET Framework Assistant: {20a82645-c095-46ed-80e3-08825760534b} - c:\windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\

---- NASTAVENÍ FIREFOXU ----
c:\program files\Mozilla Firefox\defaults\pref\firefox-l10n.js - pref("browser.fixup.alternate.suffix", ".cz");
.

**************************************************************************

catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2010-01-08 07:34
Windows 6.0.6002 Service Pack 2 NTFS

skenování skrytých procesů ...

skenování skrytých položek 'Po spuštění' ...

skenování skrytých souborů ...

sken byl úspešně dokončen
skryté soubory: 0

**************************************************************************

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Services\npggsvc]
"ImagePath"="c:\windows\system32\GameMon.des -service"
.
--------------------- ZAMKNUTÉ KLÍČE V REGISTRU ---------------------

[HKEY_USERS\S-1-5-21-2091845228-201729607-2738538346-1000\Software\SecuROM\!CAUTION! NEVER A OR CHANGE ANY KEY*]
@Allowed: (Read) (RestrictedCode)

[HKEY_USERS\S-1-5-21-2091845228-201729607-2738538346-1000\Software\SecuROM\License information*]
@Allowed: (Read) (RestrictedCode)

[HKEY_USERS\S-1-5-21-2091845228-201729607-2738538346-1000\Software\Sony Creative Software\M*e*d*i*a* *M*a*n*a*g*e*r* *f*o*r* *P*S*P*"!\3.0]
"Percents"="0 0.1396 0.2833 0.4495 0.7151 0.8317 0.836 "
"Increment"=".008850"
"FRT"="ACOPPhefmy67pAXtACT/BfYLV6y13oH8FetWqLyjgGwWV90AhztFwQ=="
"PLCK"="sWrlChYVG1T/1epBxSMXmDN1gxvrbypw"
"PHSH"=""

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0000\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0001\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0002\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0003\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
--------------------- Knihovny navázané na běžící procesy ---------------------

- - - - - - - > 'Explorer.exe'(4532)
c:\program files\Xfire\xfire_toucan_40700.dll
c:\windows\system32\ntshrui.dll
c:\program files\WinSCP\DragExt.dll
c:\program files\Bonjour\mdnsNSP.dll
c:\windows\System32\wshisn.dll
.
------------------------ Jiné spuštené procesy ------------------------
.
c:\windows\system32\atieclxx.exe
c:\windows\MHotKey.exe
c:\windows\system32\conime.exe
c:\windows\ChiFuncExt.exe
c:\program files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
c:\program files\Bonjour\mDNSResponder.exe
c:\windows\system32\hasplms.exe
c:\windows\RtHDVCpl.exe
c:\program files\Common Files\Microsoft Shared\VS7DEBUG\mdm.exe
c:\program files\Common Files\Nero\Nero BackItUp 4\NBService.exe
c:\windows\system32\PnkBstrA.exe
c:\windows\system32\PnkBstrB.exe
c:\program files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
c:\program files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe
c:\program files\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
c:\windows\ehome\ehsched.exe
c:\windows\ehome\ehRecvr.exe
c:\program files\iPod\bin\iPodService.exe
c:\program files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
c:\program files\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
.
**************************************************************************
.
Celkový čas: 2010-01-08 07:39:55 - počítač byl restartován
ComboFix-quarantined-files.txt 2010-01-08 06:39
ComboFix2.txt 2010-01-07 05:46
ComboFix3.txt 2009-06-21 17:50

Před spuštěním: Volných bajtů: 15 570 599 936
Po spuštění: Volných bajtů: 15 085 678 592

- - End Of File - - 724DACDFE78B39C9B9985355CB51238E
Nahr nˇ probŘhlo ŁspŘçnŘ

[Rudy]

Log již vypadá čistý. Nastala nějaká změna?

[ententeak]

no, zatím se mi to zaseklo pouze jednou, ale nebylo to tak dlouhý jako dřív..
Ale spíš začínám mít dojem, že mi odchází zdroj a že mi to občas neutáhne..

Každopádně děkuji za pomoc.

[Rudy]

Nemáte zač!

[ententeak]

tak sice mi nezamrzá PC, ale od tý kontroly/čitění mi zamrzá net...
Normálně mi jede a najednou z ničeho nic se nemůžu dovolat na žádnou stránku ani server (ICQ/QIP, Steam, atp.)
a když už, tak šíleně nízkou rychlostí (na 60MB/s lajně mi FF načítá stránku rychlostí max 1,4MB/s)
Nemohl mi ten Combofix něco rozhodit v nastavení sítě?? (Ostatní PC v síti jedou normálně)

[Rudy]

Rozhodit by to mohl leda nějaký šmejd. Zkuste použít WinsockFix: http://www.spyware.cz/go.php?p=spyware&t=aplikace&id=22 . Utilita reinstaluje protokol TCP/IP. Pokud jsou parametry sítě nastaveny ručně, budete je muset po restartu znovu zadat.