Zasekávání videí

[Jimi]

Ahoj. Doufám že tady tyhle věci řešíte.. Mám problém s přehráváním videí na PC. Každé se po určitém intervalu (10-15 minut) několikrát zasekne než pokračuje dál. Je to u každého a je to pravidelné. Používám KMPlayer ale vztahuje se to i na Nero ShowTime a WMP. Mám PC necelý 4 měsíce, tenhle problém se objevil tak před dvěma.

Mám Windows 7, 8GB RAM, OS 64bit, Grafická karta: AMD Phenom X6 1055T.

Máte nějakej nápad čím to může být?
Díky

[Rudy]

Zdravím!
Pro začátek dejte log z RSIT: http://www.viry.cz/forum/viewtopic.php?f=13&t=105895 .

[Jimi]

tady je:

Logfile of random's system information tool 1.09 (written by random/random)
Run by Adam at 2011-12-04 15:16:35
Microsoft Windows 7 Ultimate
System drive C: has 58 GB (38%) free of 150 GB
Total RAM: 8189 MB (74% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 15:16:46, on 4.12.2011
Platform: Windows 7 (WinNT 6.00.3504)
MSIE: Internet Explorer v8.00 (8.00.7600.16385)
Boot mode: Normal

Running processes:
C:\Program Files (x86)\Common Files\Nero\Lib\NMIndexStoreSvr.exe
C:\Program Files (x86)\Spybot - Search & Destroy\TeaTimer.exe
C:\Users\Adam\AppData\Local\Google\Update\1.3.21.79\GoogleCrashHandler.exe
C:\Program Files (x86)\Mouse Driver\StartAutorun.exe
C:\Program Files (x86)\Mouse Driver\KMConfig.exe
C:\Program Files (x86)\Mouse Driver\KMProcess.exe
C:\Users\Adam\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\Adam\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Windows\SysWOW64\rundll32.exe
C:\Users\Adam\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe
C:\Users\Adam\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\Adam\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\ESET\ESET Online Scanner\OnlineScannerApp.exe
C:\Users\Adam\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\ESET\ESET Online Scanner\OnlineCmdLineScanner.exe
C:\Users\Adam\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Winamp\winamp.exe
C:\Program Files\trend micro\Adam.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://www.crawler.com/search/dispatche ... tbid=60347
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.crawler.com/homepage.aspx?tbid=60347
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,SearchAssistant = http://www.crawler.com/search/ie.aspx?tb_id=60347
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,CustomizeSearch = http://dnl.crawler.com/support/sa_custo ... TbId=60347
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = http://www.crawler.com/search/ie.aspx?tb_id=60347
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch = http://dnl.crawler.com/support/sa_custo ... TbId=60347
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
R3 - URLSearchHook: &Crawler Toolbar Helper - {1CB20BF0-BBAE-40A7-93F4-6435FF3D0411} - C:\PROGRA~2\Crawler\Toolbar\ctbr.dll
F2 - REG:system.ini: UserInit=userinit.exe
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: &Crawler Toolbar Helper - {1CB20BF0-BBAE-40A7-93F4-6435FF3D0411} - C:\PROGRA~2\Crawler\Toolbar\ctbr.dll
O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~2\SPYBOT~1\SDHelper.dll
O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\PROGRA~2\MICROS~1\Office12\GR469A~1.DLL
O3 - Toolbar: DAEMON Tools Toolbar - {32099AAC-C132-4136-9E9A-4E364A424E17} - C:\Program Files (x86)\DAEMON Tools Toolbar\DTToolbar.dll
O3 - Toolbar: &Crawler lišta - {4B3803EA-5230-4DC3-A7FC-33638F3D3542} - C:\PROGRA~2\Crawler\Toolbar\ctbr.dll
O4 - HKLM\..\Run: [GrooveMonitor] "C:\Program Files (x86)\Microsoft Office\Office12\GrooveMonitor.exe"
O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKLM\..\Run: [NBKeyScan] "C:\Program Files (x86)\Nero\Nero8\Nero BackItUp\NBKeyScan.exe"
O4 - HKLM\..\Run: [KMCONFIG] C:\Program Files (x86)\Mouse Driver\StartAutorun.exe KMConfig.exe
O4 - HKLM\..\Run: [SpybotSnD] "C:\Program Files (x86)\Spybot - Search & Destroy\SpybotSD.exe" /waitstart
O4 - HKCU\..\Run: [IndxStoreSvr_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] "C:\Program Files (x86)\Common Files\Nero\Lib\NMIndexStoreSvr.exe" ASO-616B5711-6DAE-4795-A05F-39A1E5104020
O4 - HKCU\..\Run: [Google Update] "C:\Users\Adam\AppData\Local\Google\Update\GoogleUpdate.exe" /c
O4 - HKCU\..\Run: [SpyEmergency] C:\Program Files\Spy Emergency2\SpyEmergency.exe
O4 - HKCU\..\Run: [uTorrent] "C:\Program Files (x86)\uTorrent\uTorrent.exe" /MINIMIZED
O4 - HKCU\..\Run: [RGSC] E:\GTA\Rockstar Games Social Club\RGSCLauncher.exe /silent
O4 - HKCU\..\Run: [SpybotSD TeaTimer] C:\Program Files (x86)\Spybot - Search & Destroy\TeaTimer.exe
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'NETWORK SERVICE')
O8 - Extra context menu item: Crawler Search - tbr:iemenu
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Excel - res://C:\PROGRA~2\MICROS~1\Office12\EXCEL.EXE/3000
O8 - Extra context menu item: Free YouTube Download - C:\Users\Adam\AppData\Roaming\DVDVideoSoftIEHelpers\freeyoutubedownload.htm
O8 - Extra context menu item: Free YouTube to MP3 Converter - C:\Users\Adam\AppData\Roaming\DVDVideoSoftIEHelpers\freeyoutubetomp3converter.htm
O9 - Extra button: Odeslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~2\MICROS~1\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: Od&eslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~2\MICROS~1\Office12\ONBttnIE.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~2\MICROS~1\Office12\REFIEBAR.DLL
O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~2\SPYBOT~1\SDHelper.dll
O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~2\SPYBOT~1\SDHelper.dll
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/f ... wflash.cab
O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\PROGRA~2\MICROS~1\Office12\GRA32A~1.DLL
O18 - Protocol: tbr - {4D25FB7A-8902-4291-960E-9ADA051CFBBF} - C:\PROGRA~2\Crawler\Toolbar\ctbr.dll
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)
O23 - Service: ESET HTTP Server (EhttpSrv) - ESET - C:\Program Files\ESET NOD32 Antivirus\EHttpSrv.exe
O23 - Service: ESET Service (ekrn) - ESET - C:\Program Files\ESET NOD32 Antivirus\x86\ekrn.exe
O23 - Service: ES lite Service for program management. (ES lite Service) - Unknown owner - C:\Program Files (x86)\Gigabyte\EasySaver\ESSVR.EXE
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Keyboard And Mouse Communication Service (KMWDSERVICE) - UASSOFT.COM - C:\Program Files (x86)\Mouse Driver\KMWDSrv.exe
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
O23 - Service: Nero BackItUp Scheduler 3 - Nero AG - C:\Program Files (x86)\Nero\Nero8\Nero BackItUp\NBService.exe
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: NMIndexingService - Nero AG - C:\Program Files (x86)\Common Files\Nero\Lib\NMIndexingService.exe
O23 - Service: NVIDIA Display Driver Service (nvsvc) - Unknown owner - C:\Windows\system32\nvvsvc.exe (file missing)
O23 - Service: PLFlash DeviceIoControl Service - Prolific Technology Inc. - C:\Windows\SysWOW64\IoctlSvc.exe
O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: SBSD Security Center Service (SBSDWSCService) - Safer Networking Ltd. - C:\Program Files (x86)\Spybot - Search & Destroy\SDWinSec.exe
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)
O23 - Service: NVIDIA Stereoscopic 3D Driver Service (Stereo Service) - NVIDIA Corporation - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)

--
End of file - 10581 bytes

======Listing Processes======

\SystemRoot\System32\smss.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
wininit.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
C:\Windows\system32\services.exe
C:\Windows\system32\lsass.exe
C:\Windows\system32\lsm.exe
winlogon.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Windows\system32\nvvsvc.exe
"C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe"
C:\Windows\system32\svchost.exe -k RPCSS
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k netsvcs
C:\Windows\system32\svchost.exe -k LocalService
C:\Windows\system32\svchost.exe -k NetworkService
C:\Windows\System32\spoolsv.exe
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
"C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe"
"C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe"
C:\Windows\system32\nvvsvc.exe -session -first
"C:\Program Files\ESET NOD32 Antivirus\x86\ekrn.exe"
"C:\Program Files (x86)\Gigabyte\EasySaver\ESSVR.EXE"
"C:\Program Files (x86)\Mouse Driver\KMWDSrv.exe"
"C:\Program Files (x86)\Nero\Nero8\Nero BackItUp\NBService.exe"
C:\Windows\SysWOW64\IoctlSvc.exe
"C:\Program Files (x86)\Spybot - Search & Destroy\SDWinSec.exe"
"taskhost.exe"
"C:\Windows\system32\Dwm.exe"
C:\Windows\Explorer.EXE
"C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe" -s
"C:\Program Files\ESET NOD32 Antivirus\egui.exe" /hide /waitservice
"C:\Program Files (x86)\Common Files\Nero\Lib\NMIndexStoreSvr.exe" ASO-616B5711-6DAE-4795-A05F-39A1E5104020
C:\Windows\system32\SearchIndexer.exe /Embedding
"C:\Program Files (x86)\Spybot - Search & Destroy\TeaTimer.exe"
"C:\Users\Adam\AppData\Local\Google\Update\1.3.21.79\GoogleCrashHandler.exe" /crashhandler
"C:\Program Files (x86)\Common Files\Nero\Lib\NMIndexingService.exe"
C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
"C:\Program Files\Windows Media Player\wmpnetwk.exe"
"C:\Program Files (x86)\Mouse Driver\StartAutorun.exe" KMConfig.exe
KMConfig.exe
"C:\Program Files (x86)\Mouse Driver\KMProcess.exe"
"C:\Users\Adam\AppData\Local\Google\Chrome\Application\chrome.exe"
"C:\Users\Adam\AppData\Local\Google\Chrome\Application\chrome.exe" --type=renderer --lang=cs --force-fieldtest=ConnCountImpact/conn_count_6/ConnnectBackupJobs/ConnectBackupJobsEnabled/DnsImpact/default_enabled_prefetch/DnsParallelism/parallel_default/GlobalSdch/global_enable_sdch/IdleSktToImpact/idle_timeout_10/Instant/InstantControl1/Prefetch/ContentPrefetchPrerender2/ProxyConnectionImpact/proxy_connections_32/SpdyCwnd/cwnd10/SpdyImpact/npn_with_spdy/SuggestHostPrefix/Www_Prefix/WarmSocketImpact/warmest_socket/ --enable-print-preview --channel=3708.045EC160.1829517607 /prefetch:3
C:\Windows\system32\rundll32.exe "C:\Users\Adam\AppData\Local\Google\Chrome\APPLIC~1\150874~1.121\gcswf32.dll",BrokerMain browser=chrome
"C:\Users\Adam\AppData\Local\Google\Chrome\Application\chrome.exe" --type=plugin --plugin-path="C:\Users\Adam\AppData\Local\Google\Chrome\Application\15.0.874.121\gcswf32.dll" --lang=cs --channel=3708.0A738C40.1130327752 --flash-broker=236 /prefetch:4
C:\Windows\System32\svchost.exe -k secsvcs
"C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe"
"C:\Users\Adam\AppData\Local\Google\Chrome\Application\chrome.exe" --type=renderer --lang=cs --force-fieldtest=ConnCountImpact/conn_count_6/ConnnectBackupJobs/ConnectBackupJobsEnabled/DnsImpact/default_enabled_prefetch/DnsParallelism/parallel_default/GlobalSdch/global_enable_sdch/IdleSktToImpact/idle_timeout_10/Instant/InstantControl1/Prefetch/ContentPrefetchPrerender2/ProxyConnectionImpact/proxy_connections_32/SpdyCwnd/cwnd10/SpdyImpact/npn_with_spdy/SuggestHostPrefix/Www_Prefix/WarmSocketImpact/warmest_socket/ --enable-print-preview --channel=3708.0A43E160.1690551817 /prefetch:3
"C:\Users\Adam\AppData\Local\Google\Chrome\Application\chrome.exe" --type=renderer --lang=cs --force-fieldtest=ConnCountImpact/conn_count_6/ConnnectBackupJobs/ConnectBackupJobsEnabled/DnsImpact/default_enabled_prefetch/DnsParallelism/parallel_default/GlobalSdch/global_enable_sdch/IdleSktToImpact/idle_timeout_10/Instant/InstantControl1/Prefetch/ContentPrefetchPrerender2/ProxyConnectionImpact/proxy_connections_32/SpdyCwnd/cwnd10/SpdyImpact/npn_with_spdy/SuggestHostPrefix/Www_Prefix/WarmSocketImpact/warmest_socket/ --enable-print-preview --channel=3708.0A43E840.671848097 /prefetch:3
"C:\Program Files (x86)\ESET\ESET Online Scanner\OnlineScannerApp.exe" lng=1029
"C:\Users\Adam\AppData\Local\Google\Chrome\Application\chrome.exe" --type=renderer --lang=cs --force-fieldtest=ConnCountImpact/conn_count_6/ConnnectBackupJobs/ConnectBackupJobsEnabled/DnsImpact/default_enabled_prefetch/DnsParallelism/parallel_default/GlobalSdch/global_enable_sdch/IdleSktToImpact/idle_timeout_10/Instant/InstantControl1/Prefetch/ContentPrefetchPrerender2/ProxyConnectionImpact/proxy_connections_32/SpdyCwnd/cwnd10/SpdyImpact/npn_with_spdy/SuggestHostPrefix/Www_Prefix/WarmSocketImpact/warmest_socket/ --enable-print-preview --channel=3708.0A38D160.2007265813 /prefetch:3
"C:\Program Files (x86)\ESET\ESET Online Scanner\OnlineCmdLineScanner.exe" "/base-dir=C:\Program Files (x86)\ESET\ESET Online Scanner" /lang=1029 /as
\??\C:\Windows\system32\conhost.exe
"C:\Users\Adam\AppData\Local\Google\Chrome\Application\chrome.exe" --type=renderer --lang=cs --force-fieldtest=ConnCountImpact/conn_count_6/ConnnectBackupJobs/ConnectBackupJobsEnabled/DnsImpact/default_enabled_prefetch/DnsParallelism/parallel_default/GlobalSdch/global_enable_sdch/IdleSktToImpact/idle_timeout_10/Instant/InstantControl1/Prefetch/ContentPrefetchPrerender2/ProxyConnectionImpact/proxy_connections_32/SpdyCwnd/cwnd10/SpdyImpact/npn_with_spdy/SuggestHostPrefix/Www_Prefix/WarmSocketImpact/warmest_socket/ --enable-print-preview --channel=3708.0A29EC60.1811978418 /prefetch:3
taskeng.exe {90AE4EE6-0168-4BF0-AB45-C259D1C5D4FA}
"C:\Program Files (x86)\Winamp\winamp.exe" -Embedding
"C:\Users\Adam\Downloads\RSITx64.exe"
C:\Windows\system32\wbem\wmiprvse.exe

======Scheduled tasks folder======

C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-2482131537-1809842142-1510896379-1000Core.job
C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-2482131537-1809842142-1510896379-1000UA.job

=========Mozilla firefox=========

ProfilePath - C:\Users\Adam\AppData\Roaming\Mozilla\Firefox\Profiles\vebglbw3.default

prefs.js - "browser.startup.homepage" - "seznam.cz"
prefs.js - "keyword.URL" - "http://www.crawler.com/search/dispatche ... 60347&qkw="

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 10.1 Plugin
"Path"=C:\Windows\SysWOW64\Macromed\Flash\NPSWF32.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@nvidia.com/3DVision]
"Description"=NVIDIA stereo images plugin for Mozilla browsers
"Path"=C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@nvidia.com/3DVisionStreaming]
"Description"=NVIDIA 3D Vision Streaming plugin for Mozilla browsers
"Path"=C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\Adobe Reader]
"Description"=Handles PDFs in-place in Firefox
"Path"=C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll

C:\Program Files (x86)\Mozilla Firefox\extensions\
{972ce4c6-7e08-4474-a285-3208198ce6fd}

C:\Program Files (x86)\Mozilla Firefox\components\
binary.manifest
browsercomps.dll

C:\Program Files (x86)\Mozilla Firefox\searchplugins\
crawlersrch.xml
google.xml
heureka-cz.xml
jyxo-cz.xml
seznam-cz.xml
slunecnice-cz.xml
wikipedia-cz.xml

C:\Users\Adam\AppData\Roaming\Mozilla\Firefox\Profiles\vebglbw3.default\extensions\
DTToolbar@toolbarnet.com
{a0d7ccb3-214d-498b-b4aa-0e8fda9a7bf7}
{ACAA314B-EEBA-48e4-AD47-84E31C44796C}

C:\Users\Adam\AppData\Roaming\Mozilla\Firefox\Profiles\vebglbw3.default\searchplugins\
daemon-search.xml

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
Adobe PDF Link Helper - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2011-09-05 63912]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{1CB20BF0-BBAE-40A7-93F4-6435FF3D0411}]
&Crawler Toolbar Helper - C:\PROGRA~2\Crawler\Toolbar\ctbr.dll [2011-07-14 1237240]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{53707962-6F74-2D53-2644-206D7942484F}]
Spybot-S&D IE Protection - C:\PROGRA~2\SPYBOT~1\SDHelper.dll [2009-01-26 1879896]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{72853161-30C5-4D22-B7F9-0BBC1D38A37E}]
Groove GFS Browser Helper - C:\PROGRA~2\MICROS~1\Office12\GR469A~1.DLL [2006-10-26 2210608]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{32099AAC-C132-4136-9E9A-4E364A424E17} - DAEMON Tools Toolbar - C:\Program Files (x86)\DAEMON Tools Toolbar\DTToolbar64.dll [2010-03-25 1548096]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Internet Explorer\Toolbar]
{32099AAC-C132-4136-9E9A-4E364A424E17} - DAEMON Tools Toolbar - C:\Program Files (x86)\DAEMON Tools Toolbar\DTToolbar.dll [2010-03-25 968000]
{4B3803EA-5230-4DC3-A7FC-33638F3D3542} - &Crawler lišta - C:\PROGRA~2\Crawler\Toolbar\ctbr.dll [2011-07-14 1237240]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"RtHDVCpl"=C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [2011-02-24 11780712]
"egui"=C:\Program Files\ESET NOD32 Antivirus\egui.exe [2010-07-02 2903688]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"IndxStoreSvr_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}"=C:\Program Files (x86)\Common Files\Nero\Lib\NMIndexStoreSvr.exe [2008-06-24 1840424]
"Google Update"=C:\Users\Adam\AppData\Local\Google\Update\GoogleUpdate.exe [2011-08-11 136176]
"SpyEmergency"=C:\Program Files\Spy Emergency2\SpyEmergency.exe []
"uTorrent"=C:\Program Files (x86)\uTorrent\uTorrent.exe [2011-10-22 641400]
"RGSC"=E:\GTA\Rockstar Games Social Club\RGSCLauncher.exe /silent []
"SpybotSD TeaTimer"=C:\Program Files (x86)\Spybot - Search & Destroy\TeaTimer.exe [2009-03-05 2260480]

[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]
"GrooveMonitor"=C:\Program Files (x86)\Microsoft Office\Office12\GrooveMonitor.exe [2006-10-26 31016]
"Adobe ARM"=C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2011-06-06 937920]
"NBKeyScan"=C:\Program Files (x86)\Nero\Nero8\Nero BackItUp\NBKeyScan.exe [2008-06-08 2221352]
"NPSStartup"= []
"KMCONFIG"=C:\Program Files (x86)\Mouse Driver\StartAutorun.exe [2008-05-30 212992]
"SpybotSnD"=C:\Program Files (x86)\Spybot - Search & Destroy\SpybotSD.exe [2009-01-26 5365592]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED}

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{B5A7F190-DDA6-4420-B3BA-52453494E6CD}"=C:\PROGRA~2\MICROS~1\Office12\GR469A~1.DLL [2006-10-26 2210608]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=credssp.dll

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorAdmin"=0
"ConsentPromptBehaviorUser"=3
"EnableLUA"=0
"EnableUIADesktopToggle"=0
"PromptOnSecureDesktop"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoActiveDesktop"=1
"NoActiveDesktopChanges"=1
"ForceActiveDesktopOn"=0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.msadpcm"=msadp32.acm
"midimapper"=midimap.dll
"wavemapper"=msacm32.drv
"vidc.uyvy"=msyuv.dll
"vidc.yuy2"=msyuv.dll
"vidc.yvyu"=msyuv.dll
"vidc.iyuv"=iyuv_32.dll
"vidc.i420"=iyuv_32.dll
"vidc.yvu9"=tsbyuv.dll
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"wave2"=wdmaud.drv
"midi2"=wdmaud.drv
"mixer2"=wdmaud.drv
"wave3"=wdmaud.drv
"midi3"=wdmaud.drv
"mixer3"=wdmaud.drv
"wave4"=wdmaud.drv
"midi4"=wdmaud.drv
"mixer4"=wdmaud.drv

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*

======List of files/folders created in the last 1 month======

2011-12-04 15:13:35 ----D---- C:\Program Files\trend micro
2011-12-04 15:13:33 ----D---- C:\rsit
2011-12-04 15:05:26 ----D---- C:\Program Files (x86)\ESET
2011-12-04 00:30:18 ----A---- C:\Windows\ntbtlog.txt
2011-12-04 00:05:56 ----D---- C:\Windows\Minidump
2011-12-03 15:33:47 ----N---- C:\bootsqm.dat
2011-11-25 15:37:18 ----D---- C:\ProgramData\Rockstar Games
2011-11-25 15:34:46 ----D---- C:\Program Files (x86)\Rockstar Games
2011-11-17 16:49:05 ----A---- C:\Windows\SYSWOW64\CmdLineExt_x64.dll
2011-11-17 15:47:17 ----A---- C:\Windows\SYSWOW64\XAudio2_5.dll
2011-11-17 15:47:17 ----A---- C:\Windows\system32\XAudio2_5.dll
2011-11-17 15:47:16 ----A---- C:\Windows\SYSWOW64\xactengine3_5.dll
2011-11-17 15:47:16 ----A---- C:\Windows\SYSWOW64\D3DCompiler_42.dll
2011-11-17 15:47:16 ----A---- C:\Windows\system32\xactengine3_5.dll
2011-11-17 15:47:16 ----A---- C:\Windows\system32\D3DCompiler_42.dll
2011-11-17 15:47:12 ----A---- C:\Windows\SYSWOW64\d3dx11_42.dll
2011-11-17 15:47:12 ----A---- C:\Windows\SYSWOW64\d3dx10_42.dll
2011-11-17 15:47:12 ----A---- C:\Windows\SYSWOW64\d3dcsx_42.dll
2011-11-17 15:47:12 ----A---- C:\Windows\system32\d3dx11_42.dll
2011-11-17 15:47:12 ----A---- C:\Windows\system32\d3dx10_42.dll
2011-11-17 15:47:12 ----A---- C:\Windows\system32\d3dcsx_42.dll
2011-11-17 15:47:09 ----A---- C:\Windows\SYSWOW64\D3DX9_42.dll
2011-11-17 15:47:09 ----A---- C:\Windows\system32\D3DX9_42.dll
2011-11-17 15:47:06 ----A---- C:\Windows\SYSWOW64\d3dx10_41.dll
2011-11-17 15:47:06 ----A---- C:\Windows\SYSWOW64\D3DCompiler_41.dll
2011-11-17 15:47:06 ----A---- C:\Windows\system32\d3dx10_41.dll
2011-11-17 15:47:06 ----A---- C:\Windows\system32\D3DCompiler_41.dll
2011-11-17 15:47:05 ----A---- C:\Windows\SYSWOW64\XAudio2_4.dll
2011-11-17 15:47:05 ----A---- C:\Windows\SYSWOW64\XAPOFX1_3.dll
2011-11-17 15:47:05 ----A---- C:\Windows\SYSWOW64\D3DX9_41.dll
2011-11-17 15:47:05 ----A---- C:\Windows\system32\XAudio2_4.dll
2011-11-17 15:47:05 ----A---- C:\Windows\system32\XAPOFX1_3.dll
2011-11-17 15:47:05 ----A---- C:\Windows\system32\D3DX9_41.dll
2011-11-17 15:47:04 ----A---- C:\Windows\SYSWOW64\xactengine3_4.dll
2011-11-17 15:47:04 ----A---- C:\Windows\system32\xactengine3_4.dll
2011-11-17 15:47:03 ----A---- C:\Windows\SYSWOW64\X3DAudio1_6.dll
2011-11-17 15:47:03 ----A---- C:\Windows\system32\X3DAudio1_6.dll
2011-11-17 15:47:02 ----A---- C:\Windows\SYSWOW64\D3DCompiler_40.dll
2011-11-17 15:47:02 ----A---- C:\Windows\system32\D3DCompiler_40.dll
2011-11-17 15:47:01 ----A---- C:\Windows\SYSWOW64\d3dx10_40.dll
2011-11-17 15:47:01 ----A---- C:\Windows\system32\d3dx10_40.dll
2011-11-17 15:46:57 ----A---- C:\Windows\SYSWOW64\D3DX9_40.dll
2011-11-17 15:46:57 ----A---- C:\Windows\system32\D3DX9_40.dll
2011-11-17 15:46:54 ----A---- C:\Windows\SYSWOW64\XAudio2_3.dll
2011-11-17 15:46:54 ----A---- C:\Windows\SYSWOW64\XAPOFX1_2.dll
2011-11-17 15:46:54 ----A---- C:\Windows\system32\XAudio2_3.dll
2011-11-17 15:46:54 ----A---- C:\Windows\system32\XAPOFX1_2.dll
2011-11-17 15:46:53 ----A---- C:\Windows\SYSWOW64\xactengine3_3.dll
2011-11-17 15:46:53 ----A---- C:\Windows\system32\xactengine3_3.dll
2011-11-17 15:46:52 ----A---- C:\Windows\SYSWOW64\XAudio2_2.dll
2011-11-17 15:46:52 ----A---- C:\Windows\SYSWOW64\XAPOFX1_1.dll
2011-11-17 15:46:52 ----A---- C:\Windows\SYSWOW64\X3DAudio1_5.dll
2011-11-17 15:46:52 ----A---- C:\Windows\system32\XAudio2_2.dll
2011-11-17 15:46:52 ----A---- C:\Windows\system32\XAPOFX1_1.dll
2011-11-17 15:46:52 ----A---- C:\Windows\system32\X3DAudio1_5.dll
2011-11-17 15:46:51 ----A---- C:\Windows\SYSWOW64\xactengine3_2.dll
2011-11-17 15:46:51 ----A---- C:\Windows\system32\xactengine3_2.dll
2011-11-17 15:46:50 ----A---- C:\Windows\SYSWOW64\d3dx10_39.dll
2011-11-17 15:46:50 ----A---- C:\Windows\SYSWOW64\D3DCompiler_39.dll
2011-11-17 15:46:50 ----A---- C:\Windows\system32\d3dx10_39.dll
2011-11-17 15:46:50 ----A---- C:\Windows\system32\D3DCompiler_39.dll
2011-11-17 15:46:49 ----A---- C:\Windows\SYSWOW64\D3DX9_39.dll
2011-11-17 15:46:49 ----A---- C:\Windows\system32\D3DX9_39.dll
2011-11-17 15:46:47 ----A---- C:\Windows\SYSWOW64\XAudio2_1.dll
2011-11-17 15:46:47 ----A---- C:\Windows\SYSWOW64\XAPOFX1_0.dll
2011-11-17 15:46:47 ----A---- C:\Windows\SYSWOW64\xactengine3_1.dll
2011-11-17 15:46:47 ----A---- C:\Windows\system32\XAudio2_1.dll
2011-11-17 15:46:47 ----A---- C:\Windows\system32\XAPOFX1_0.dll
2011-11-17 15:46:47 ----A---- C:\Windows\system32\xactengine3_1.dll
2011-11-17 15:46:46 ----A---- C:\Windows\SYSWOW64\X3DAudio1_4.dll
2011-11-17 15:46:46 ----A---- C:\Windows\system32\X3DAudio1_4.dll
2011-11-17 15:46:44 ----A---- C:\Windows\SYSWOW64\d3dx10_38.dll
2011-11-17 15:46:44 ----A---- C:\Windows\SYSWOW64\D3DCompiler_38.dll
2011-11-17 15:46:44 ----A---- C:\Windows\system32\d3dx10_38.dll
2011-11-17 15:46:44 ----A---- C:\Windows\system32\D3DCompiler_38.dll
2011-11-17 15:46:40 ----A---- C:\Windows\SYSWOW64\D3DX9_38.dll
2011-11-17 15:46:40 ----A---- C:\Windows\system32\D3DX9_38.dll
2011-11-17 15:46:39 ----A---- C:\Windows\SYSWOW64\XAudio2_0.dll
2011-11-17 15:46:39 ----A---- C:\Windows\SYSWOW64\xactengine3_0.dll
2011-11-17 15:46:39 ----A---- C:\Windows\system32\XAudio2_0.dll
2011-11-17 15:46:39 ----A---- C:\Windows\system32\xactengine3_0.dll
2011-11-17 15:46:38 ----A---- C:\Windows\SYSWOW64\X3DAudio1_3.dll
2011-11-17 15:46:38 ----A---- C:\Windows\system32\X3DAudio1_3.dll
2011-11-17 15:46:37 ----A---- C:\Windows\SYSWOW64\d3dx10_37.dll
2011-11-17 15:46:37 ----A---- C:\Windows\SYSWOW64\D3DCompiler_37.dll
2011-11-17 15:46:37 ----A---- C:\Windows\system32\d3dx10_37.dll
2011-11-17 15:46:37 ----A---- C:\Windows\system32\D3DCompiler_37.dll
2011-11-17 15:46:36 ----A---- C:\Windows\SYSWOW64\xactengine2_10.dll
2011-11-17 15:46:36 ----A---- C:\Windows\SYSWOW64\D3DX9_37.dll
2011-11-17 15:46:36 ----A---- C:\Windows\system32\xactengine2_10.dll
2011-11-17 15:46:36 ----A---- C:\Windows\system32\D3DX9_37.dll
2011-11-17 15:46:32 ----A---- C:\Windows\SYSWOW64\d3dx10_36.dll
2011-11-17 15:46:32 ----A---- C:\Windows\SYSWOW64\D3DCompiler_36.dll
2011-11-17 15:46:32 ----A---- C:\Windows\system32\d3dx10_36.dll
2011-11-17 15:46:32 ----A---- C:\Windows\system32\D3DCompiler_36.dll
2011-11-17 15:46:30 ----A---- C:\Windows\SYSWOW64\d3dx9_36.dll
2011-11-17 15:46:30 ----A---- C:\Windows\system32\d3dx9_36.dll
2011-11-17 15:46:29 ----A---- C:\Windows\SYSWOW64\xactengine2_9.dll
2011-11-17 15:46:29 ----A---- C:\Windows\system32\xactengine2_9.dll
2011-11-17 15:46:27 ----A---- C:\Windows\SYSWOW64\d3dx10_35.dll
2011-11-17 15:46:27 ----A---- C:\Windows\SYSWOW64\D3DCompiler_35.dll
2011-11-17 15:46:27 ----A---- C:\Windows\system32\d3dx10_35.dll
2011-11-17 15:46:27 ----A---- C:\Windows\system32\D3DCompiler_35.dll
2011-11-17 15:46:24 ----A---- C:\Windows\SYSWOW64\xactengine2_8.dll
2011-11-17 15:46:24 ----A---- C:\Windows\SYSWOW64\X3DAudio1_2.dll
2011-11-17 15:46:24 ----A---- C:\Windows\SYSWOW64\d3dx9_35.dll
2011-11-17 15:46:24 ----A---- C:\Windows\system32\xactengine2_8.dll
2011-11-17 15:46:24 ----A---- C:\Windows\system32\X3DAudio1_2.dll
2011-11-17 15:46:24 ----A---- C:\Windows\system32\d3dx9_35.dll
2011-11-17 15:46:22 ----A---- C:\Windows\SYSWOW64\d3dx10_34.dll
2011-11-17 15:46:22 ----A---- C:\Windows\SYSWOW64\D3DCompiler_34.dll
2011-11-17 15:46:22 ----A---- C:\Windows\system32\d3dx10_34.dll
2011-11-17 15:46:22 ----A---- C:\Windows\system32\D3DCompiler_34.dll
2011-11-17 15:46:20 ----A---- C:\Windows\SYSWOW64\d3dx9_34.dll
2011-11-17 15:46:20 ----A---- C:\Windows\system32\d3dx9_34.dll
2011-11-17 15:46:19 ----A---- C:\Windows\SYSWOW64\xinput1_3.dll
2011-11-17 15:46:19 ----A---- C:\Windows\system32\xinput1_3.dll
2011-11-17 15:46:18 ----A---- C:\Windows\SYSWOW64\xactengine2_7.dll
2011-11-17 15:46:18 ----A---- C:\Windows\system32\xactengine2_7.dll
2011-11-17 15:46:17 ----A---- C:\Windows\SYSWOW64\d3dx10_33.dll
2011-11-17 15:46:17 ----A---- C:\Windows\SYSWOW64\D3DCompiler_33.dll
2011-11-17 15:46:17 ----A---- C:\Windows\system32\d3dx10_33.dll
2011-11-17 15:46:17 ----A---- C:\Windows\system32\D3DCompiler_33.dll
2011-11-17 15:46:15 ----A---- C:\Windows\SYSWOW64\xactengine2_6.dll
2011-11-17 15:46:15 ----A---- C:\Windows\SYSWOW64\d3dx9_33.dll
2011-11-17 15:46:15 ----A---- C:\Windows\system32\xactengine2_6.dll
2011-11-17 15:46:15 ----A---- C:\Windows\system32\d3dx9_33.dll
2011-11-17 15:46:14 ----A---- C:\Windows\SYSWOW64\xactengine2_5.dll
2011-11-17 15:46:14 ----A---- C:\Windows\system32\xactengine2_5.dll
2011-11-17 15:46:12 ----A---- C:\Windows\SYSWOW64\d3dx10.dll
2011-11-17 15:46:12 ----A---- C:\Windows\system32\d3dx10.dll
2011-11-17 15:46:10 ----A---- C:\Windows\SYSWOW64\d3dx9_32.dll
2011-11-17 15:46:10 ----A---- C:\Windows\system32\d3dx9_32.dll
2011-11-17 15:46:09 ----A---- C:\Windows\SYSWOW64\xactengine2_4.dll
2011-11-17 15:46:09 ----A---- C:\Windows\SYSWOW64\x3daudio1_1.dll
2011-11-17 15:46:09 ----A---- C:\Windows\system32\xactengine2_4.dll
2011-11-17 15:46:09 ----A---- C:\Windows\system32\x3daudio1_1.dll
2011-11-17 15:46:08 ----A---- C:\Windows\SYSWOW64\d3dx9_31.dll
2011-11-17 15:46:08 ----A---- C:\Windows\system32\d3dx9_31.dll
2011-11-17 15:46:07 ----A---- C:\Windows\SYSWOW64\xactengine2_3.dll
2011-11-17 15:46:07 ----A---- C:\Windows\system32\xactengine2_3.dll
2011-11-17 15:46:05 ----A---- C:\Windows\SYSWOW64\xinput1_2.dll
2011-11-17 15:46:05 ----A---- C:\Windows\SYSWOW64\xactengine2_2.dll
2011-11-17 15:46:05 ----A---- C:\Windows\system32\xinput1_2.dll
2011-11-17 15:46:05 ----A---- C:\Windows\system32\xactengine2_2.dll
2011-11-17 15:46:04 ----A---- C:\Windows\SYSWOW64\xinput1_1.dll
2011-11-17 15:46:04 ----A---- C:\Windows\SYSWOW64\xactengine2_1.dll
2011-11-17 15:46:04 ----A---- C:\Windows\system32\xinput1_1.dll
2011-11-17 15:46:04 ----A---- C:\Windows\system32\xactengine2_1.dll
2011-11-17 15:45:53 ----A---- C:\Windows\SYSWOW64\d3dx9_30.dll
2011-11-17 15:45:53 ----A---- C:\Windows\system32\d3dx9_30.dll
2011-11-17 15:45:49 ----A---- C:\Windows\SYSWOW64\xactengine2_0.dll
2011-11-17 15:45:49 ----A---- C:\Windows\SYSWOW64\x3daudio1_0.dll
2011-11-17 15:45:49 ----A---- C:\Windows\system32\xactengine2_0.dll
2011-11-17 15:45:49 ----A---- C:\Windows\system32\x3daudio1_0.dll
2011-11-17 15:45:48 ----A---- C:\Windows\SYSWOW64\d3dx9_29.dll
2011-11-17 15:45:48 ----A---- C:\Windows\system32\d3dx9_29.dll
2011-11-17 15:45:47 ----A---- C:\Windows\SYSWOW64\d3dx9_28.dll
2011-11-17 15:45:47 ----A---- C:\Windows\system32\d3dx9_28.dll
2011-11-17 15:45:45 ----A---- C:\Windows\SYSWOW64\d3dx9_27.dll
2011-11-17 15:45:45 ----A---- C:\Windows\system32\d3dx9_27.dll
2011-11-17 15:45:42 ----A---- C:\Windows\SYSWOW64\d3dx9_26.dll
2011-11-17 15:45:42 ----A---- C:\Windows\system32\d3dx9_26.dll
2011-11-17 15:45:39 ----A---- C:\Windows\SYSWOW64\d3dx9_25.dll
2011-11-17 15:45:39 ----A---- C:\Windows\system32\d3dx9_25.dll
2011-11-17 15:45:38 ----A---- C:\Windows\SYSWOW64\d3dx9_24.dll
2011-11-17 15:45:38 ----A---- C:\Windows\system32\d3dx9_24.dll
2011-11-17 15:38:46 ----D---- C:\Program Files (x86)\DirectX

======List of files/folders modified in the last 1 month======

2011-12-04 15:16:39 ----D---- C:\Windows\Temp
2011-12-04 15:15:15 ----D---- C:\Users\Adam\AppData\Roaming\uTorrent
2011-12-04 15:13:50 ----D---- C:\Windows\Prefetch
2011-12-04 15:13:35 ----RD---- C:\Program Files
2011-12-04 15:11:45 ----D---- C:\Windows\system32\config
2011-12-04 15:05:26 ----RD---- C:\Program Files (x86)
2011-12-04 15:04:54 ----SHD---- C:\System Volume Information
2011-12-04 14:57:07 ----D---- C:\ProgramData\NVIDIA
2011-12-04 14:57:02 ----D---- C:\Windows
2011-12-04 01:23:31 ----D---- C:\Windows\system32\drivers
2011-12-04 01:19:42 ----RSD---- C:\Windows\assembly
2011-12-04 00:31:21 ----HD---- C:\ProgramData
2011-12-04 00:31:19 ----SD---- C:\ProgramData\Microsoft
2011-12-04 00:15:15 ----D---- C:\Windows\system32\wbem
2011-12-04 00:14:04 ----D---- C:\Windows\Tasks
2011-12-04 00:14:04 ----D---- C:\Windows\system32\wfp
2011-12-04 00:14:04 ----D---- C:\Windows\system32\DriverStore
2011-12-04 00:14:04 ----D---- C:\Windows\system32\drivers\etc
2011-12-04 00:14:04 ----D---- C:\Windows\system32\catroot2
2011-12-04 00:14:04 ----D---- C:\Windows\System32
2011-12-04 00:14:03 ----D---- C:\Windows\system32\CodeIntegrity
2011-12-04 00:14:03 ----D---- C:\Windows\inf
2011-12-04 00:14:03 ----D---- C:\Windows\AppCompat
2011-12-04 00:14:03 ----D---- C:\Users\Adam\AppData\Roaming\Winamp
2011-12-04 00:14:01 ----D---- C:\ProgramData\Spybot - Search & Destroy
2011-12-04 00:14:00 ----D---- C:\Program Files\PhotoFiltre
2011-12-04 00:14:00 ----D---- C:\Program Files (x86)\The KMPlayer
2011-12-04 00:13:53 ----D---- C:\Windows\registration
2011-11-25 16:51:20 ----D---- C:\Users\Adam\AppData\Roaming\NVIDIA
2011-11-25 15:37:13 ----HD---- C:\Program Files (x86)\InstallShield Installation Information
2011-11-25 15:36:09 ----SHD---- C:\Windows\Installer
2011-11-25 15:35:58 ----D---- C:\Windows\winsxs
2011-11-24 21:44:11 ----A---- C:\Windows\system32\PerfStringBackup.INI
2011-11-22 21:53:19 ----D---- C:\Program Files (x86)\Mozilla Firefox
2011-11-20 20:08:59 ----A---- C:\Windows\NeroDigital.ini
2011-11-17 17:32:12 ----D---- C:\ProgramData\Media Center Programs
2011-11-17 16:49:05 ----D---- C:\Windows\SysWOW64
2011-11-16 20:28:01 ----D---- C:\Windows\system32\wdi
2011-11-13 03:31:02 ----D---- C:\Windows\system32\Tasks
2011-11-06 22:12:06 ----SD---- C:\Users\Adam\AppData\Roaming\Microsoft
2011-11-06 10:07:59 ----D---- C:\Windows\system32\LogFiles
2011-11-05 17:44:18 ----D---- C:\Program Files (x86)\TNod User & Password Finder

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 pciide;pciide; C:\Windows\system32\DRIVERS\pciide.sys [2009-07-14 12352]
R0 rdyboost;ReadyBoost; C:\Windows\System32\drivers\rdyboost.sys [2009-07-14 214096]
R0 sptd;sptd; C:\Windows\System32\Drivers\sptd.sys [2011-08-11 834544]
R1 CSC;@%systemroot%\system32\cscsvc.dll,-202; C:\Windows\system32\drivers\csc.sys [2009-07-14 514048]
R1 ehdrv;ehdrv; C:\Windows\system32\DRIVERS\ehdrv.sys [2010-04-28 139704]
R1 SCDEmu;SCDEmu; C:\Windows\system32\drivers\SCDEmu.sys [2009-03-15 85424]
R2 eamonm;eamonm; C:\Windows\system32\DRIVERS\eamonm.sys [2010-06-24 166984]
R2 epfwwfpr;epfwwfpr; C:\Windows\system32\DRIVERS\epfwwfpr.sys [2010-04-28 124760]
R3 EtronHub3;Etron USB 3.0 Extensible Hub Driver; C:\Windows\System32\Drivers\EtronHub3.sys [2011-03-07 40832]
R3 EtronXHCI;Etron USB 3.0 Extensible Host Controller Driver; C:\Windows\System32\Drivers\EtronXHCI.sys [2011-03-07 65280]
R3 gdrv;gdrv; \??\C:\Windows\gdrv.sys [2011-12-04 25640]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\Windows\system32\drivers\RTKVHD64.sys [2011-02-24 2753512]
R3 NVHDA;Service for NVIDIA High Definition Audio Driver; C:\Windows\system32\drivers\nvhda64v.sys [2011-05-10 174184]
R3 RTL8167;Realtek 8167 NT Driver; C:\Windows\system32\DRIVERS\Rt64win7.sys [2011-01-13 413800]
S3 atpr09jr;atpr09jr; C:\Windows\system32\drivers\atpr09jr.sys []
S3 KMWDFILTER;HIDServiceDesc; C:\Windows\system32\DRIVERS\KMWDFILTER.sys [2009-04-29 30208]
S3 RDPDR;Terminal Server Device Redirector Driver; C:\Windows\System32\drivers\rdpdr.sys [2009-07-14 165376]
S3 s3cap;s3cap; C:\Windows\system32\DRIVERS\vms3cap.sys [2009-07-14 6656]
S3 sscdbus;SAMSUNG USB Composite Device driver (WDM); C:\Windows\system32\DRIVERS\sscdbus.sys [2010-04-27 136264]
S3 sscdmdfl;SAMSUNG Mobile Modem Filter; C:\Windows\system32\DRIVERS\sscdmdfl.sys [2010-04-27 19016]
S3 sscdmdm;SAMSUNG Mobile Modem Drivers; C:\Windows\system32\DRIVERS\sscdmdm.sys [2010-04-27 172104]
S3 storvsc;storvsc; C:\Windows\system32\DRIVERS\storvsc.sys [2009-07-14 34896]
S3 TFsExDisk;TFsExDisk; \??\C:\Windows\System32\Drivers\TFsExDisk.sys [2010-06-14 16448]
S3 vmbus;@%SystemRoot%\system32\vmbusres.dll,-1000; C:\Windows\system32\DRIVERS\vmbus.sys [2009-07-14 200272]
S3 VMBusHID;VMBusHID; C:\Windows\system32\DRIVERS\VMBusHID.sys [2009-07-14 21760]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 AdobeARMservice;Adobe Acrobat Update Service; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [2011-06-06 64952]
R2 CscService;@%systemroot%\system32\cscsvc.dll,-200; C:\Windows\System32\svchost.exe [2009-07-14 27136]
R2 ekrn;ESET Service; C:\Program Files\ESET NOD32 Antivirus\x86\ekrn.exe [2010-07-02 810144]
R2 ES lite Service;ES lite Service for program management.; C:\Program Files (x86)\Gigabyte\EasySaver\ESSVR.EXE [2009-08-24 68136]
R2 KMWDSERVICE;Keyboard And Mouse Communication Service; C:\Program Files (x86)\Mouse Driver\KMWDSrv.exe [2009-08-31 1821184]
R2 Nero BackItUp Scheduler 3;Nero BackItUp Scheduler 3; C:\Program Files (x86)\Nero\Nero8\Nero BackItUp\NBService.exe [2008-06-08 877864]
R2 nvsvc;NVIDIA Display Driver Service; C:\Windows\system32\nvvsvc.exe [2011-08-03 980072]
R2 PLFlash DeviceIoControl Service;PLFlash DeviceIoControl Service; C:\Windows\SysWOW64\IoctlSvc.exe [2006-12-19 81920]
R2 SBSDWSCService;SBSD Security Center Service; C:\Program Files (x86)\Spybot - Search & Destroy\SDWinSec.exe [2009-01-26 1153368]
R2 Stereo Service;NVIDIA Stereoscopic 3D Driver Service; C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe [2011-08-03 379496]
R3 NMIndexingService;NMIndexingService; C:\Program Files (x86)\Common Files\Nero\Lib\NMIndexingService.exe [2008-06-24 537896]
S3 AppMgmt;@appmgmts.dll,-3250; C:\Windows\system32\svchost.exe [2009-07-14 27136]
S3 EhttpSrv;ESET HTTP Server; C:\Program Files\ESET NOD32 Antivirus\EHttpSrv.exe [2010-07-02 42360]
S3 Microsoft Office Groove Audit Service;Microsoft Office Groove Audit Service; C:\Program Files (x86)\Microsoft Office\Office12\GrooveAuditService.exe [2006-10-26 65824]
S3 odserv;Microsoft Office Diagnostics Service; C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE [2006-10-26 441136]
S3 ose;Office Source Engine; C:\Program Files (x86)\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2006-10-26 145184]
S3 PeerDistSvc;@%SystemRoot%\system32\peerdistsvc.dll,-9000; C:\Windows\System32\svchost.exe [2009-07-14 27136]
S3 UmRdpService;@%SystemRoot%\system32\umrdp.dll,-1000; C:\Windows\System32\svchost.exe [2009-07-14 27136]

-----------------EOF-----------------

Teď mě napadlo že se to stává i u přehrávání audia. Používám Winamp.

[Jimi]

A mám ještě jeden problém. Snažil jsem se nainstalovat Eset Smart Security ve verzi 5 a Eset Antivirus ve verzi 5 a při obou pokusech mi systém spadl do BSOD. Mám pro to založit nový topic? Ochranu PC mám zajištěnou NOD AV 4.2.58.5 s denní aktualizací a SpyBotem.

[Rudy]

Porposím o log z ComboFix.

Stahnete a ulozte nejlepe na plochu ComboFix: http://download.bleepingcomputer.com/sUBs/ComboFix.exe

pote spustte aplikaci pod uctem s administratorskym opravnenim

hned po startu se zobrazi obrazovka s licencnimi podminkami, pokracujte kliknutim na tlacitko Ano.

v klidu si postavte na kafe (cela akce trva cca. 5-10 minut, nekdy i dele - dle toho, o jak rychly stroj se

jedna a kolika soubory se skener bude muset prodirat), behem skenu se nepokousejte spoustet zadne jine

aplikace ani nic jineho

behem skenovani nepropadejte panice, vas stroj muze byt restartovan (predevsim pri prvni aplikaci skeneru)

upozorneni: pokud pouzivate antispyware s rezidentnim stitem, prepnete jeho rezidentni stit do Install Mode,

pripadne jej po dobu skenu uplne deaktivujte, protoze dochazi pri skenu a vymazu pripadneho malware k

nezadoucim kolizim s rezidentem antispyware

[Jimi]

log z ComboFix:

ComboFix 11-12-04.03 - Adam 04.12.2011 18:20:01.1.6 - x64
Microsoft Windows 7 Ultimate 6.1.7600.0.1250.420.1029.18.8189.6221 [GMT 1:00]
Spuštěný z: c:\users\Adam\Downloads\ComboFix.exe
AV: ESET NOD32 Antivirus 4.2 *Disabled/Updated* {77DEAFED-8149-104B-25A1-21771CA47CD1}
SP: ESET NOD32 Antivirus 4.2 *Disabled/Updated* {CCBF4E09-A773-1FC5-1F11-1A056723366C}
SP: Windows Defender *Enabled/Outdated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.
.
((((((((((((((((((((((((((((((((((((((( Ostatní výmazy )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
c:\programdata\ntuser.dat
.
.
((((((((((((((((((((((((( Soubory vytvořené od 2011-11-04 do 2011-12-04 )))))))))))))))))))))))))))))))
.
.
2011-12-04 14:46 . 2011-12-04 14:46 -------- d-----w- c:\users\Adam\AppData\Roaming\Malwarebytes
2011-12-04 14:45 . 2011-12-04 14:45 -------- d-----w- c:\programdata\Malwarebytes
2011-12-04 14:45 . 2011-12-04 14:45 -------- d-----w- c:\program files (x86)\Malwarebytes' Anti-Malware
2011-12-04 14:45 . 2011-08-31 16:00 25416 ----a-w- c:\windows\system32\drivers\mbam.sys
2011-12-04 14:13 . 2011-12-04 14:16 -------- d-----w- c:\program files\trend micro
2011-12-04 14:13 . 2011-12-04 14:14 -------- d-----w- C:\rsit
2011-12-04 14:05 . 2011-12-04 14:05 -------- d-----w- c:\program files (x86)\ESET
2011-11-25 15:08 . 2011-11-25 15:08 -------- d-----w- c:\users\Adam\AppData\Local\Chromium
2011-11-25 14:37 . 2011-11-25 14:37 -------- d-----w- c:\programdata\Rockstar Games
2011-11-25 14:34 . 2011-11-25 14:34 -------- d-----w- c:\program files (x86)\Rockstar Games
2011-11-17 15:49 . 2011-11-17 15:49 178800 ----a-w- c:\windows\SysWow64\CmdLineExt_x64.dll
2011-11-17 14:46 . 2008-10-15 05:22 5631312 ----a-w- c:\windows\system32\D3DX9_40.dll
2011-11-17 14:38 . 2011-11-17 14:38 -------- d-----w- c:\program files (x86)\DirectX
2011-11-16 15:45 . 2011-11-16 15:45 -------- d-----w- c:\users\Adam\AppData\Local\Activision
2011-11-13 00:14 . 2011-11-13 00:14 -------- d-----w- c:\users\Adam\AppData\Local\APN
.
.
.
(((((((((((((((((((((((((((((((((((((((( Find3M výpis ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2011-12-04 17:36 . 2011-08-10 23:32 25640 ----a-w- c:\windows\gdrv.sys
.
.
(((((((((((((((((((((((((((((((((( Spouštěcí body v registru )))))))))))))))))))))))))))))))))))))))))))))
.
.
*Poznámka* prázdné záznamy a legitimní výchozí údaje nejsou zobrazeny.
REGEDIT4
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"IndxStoreSvr_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}"="c:\program files (x86)\Common Files\Nero\Lib\NMIndexStoreSvr.exe" [2008-06-24 1840424]
"uTorrent"="c:\program files (x86)\uTorrent\uTorrent.exe" [2011-10-22 641400]
"SpybotSD TeaTimer"="c:\program files (x86)\Spybot - Search & Destroy\TeaTimer.exe" [2009-03-05 2260480]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]
"GrooveMonitor"="c:\program files (x86)\Microsoft Office\Office12\GrooveMonitor.exe" [2006-10-26 31016]
"Adobe ARM"="c:\program files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2011-06-06 937920]
"NBKeyScan"="c:\program files (x86)\Nero\Nero8\Nero BackItUp\NBKeyScan.exe" [2008-06-08 2221352]
"KMCONFIG"="c:\program files (x86)\Mouse Driver\StartAutorun.exe" [2008-05-29 212992]
"SpybotSnD"="c:\program files (x86)\Spybot - Search & Destroy\SpybotSD.exe" [2009-01-26 5365592]
"Malwarebytes' Anti-Malware"="c:\program files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe" [2011-08-31 449608]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorAdmin"= 0 (0x0)
"ConsentPromptBehaviorUser"= 3 (0x3)
"EnableLUA"= 0 (0x0)
"EnableUIADesktopToggle"= 0 (0x0)
"PromptOnSecureDesktop"= 0 (0x0)
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\drivers32]
"mixer4"=wdmaud.drv
.
R3 TFsExDisk;TFsExDisk;c:\windows\System32\Drivers\TFsExDisk.sys [2010-06-14 16448]
S0 sptd;sptd;c:\windows\System32\Drivers\sptd.sys [x]
S1 ehdrv;ehdrv;c:\windows\system32\DRIVERS\ehdrv.sys [x]
S2 AdobeARMservice;Adobe Acrobat Update Service;c:\program files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [2011-06-06 64952]
S2 eamonm;eamonm;c:\windows\system32\DRIVERS\eamonm.sys [x]
S2 ekrn;ESET Service;c:\program files\ESET NOD32 Antivirus\x86\ekrn.exe [2010-07-02 810144]
S2 epfwwfpr;epfwwfpr;c:\windows\system32\DRIVERS\epfwwfpr.sys [x]
S2 ES lite Service;ES lite Service for program management.;c:\program files (x86)\Gigabyte\EasySaver\ESSVR.EXE [2009-08-24 68136]
S2 KMWDSERVICE;Keyboard And Mouse Communication Service;c:\program files (x86)\Mouse Driver\KMWDSrv.exe [2009-08-31 1821184]
S2 MBAMService;MBAMService;c:\program files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe [2011-08-31 366152]
S2 SBSDWSCService;SBSD Security Center Service;c:\program files (x86)\Spybot - Search & Destroy\SDWinSec.exe [2009-01-26 1153368]
S2 Stereo Service;NVIDIA Stereoscopic 3D Driver Service;c:\program files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe [2011-08-03 379496]
S3 EtronHub3;Etron USB 3.0 Extensible Hub Driver;c:\windows\system32\Drivers\EtronHub3.sys [x]
S3 EtronXHCI;Etron USB 3.0 Extensible Host Controller Driver;c:\windows\system32\Drivers\EtronXHCI.sys [x]
S3 MBAMProtector;MBAMProtector;c:\windows\system32\drivers\mbam.sys [x]
S3 NVHDA;Service for NVIDIA High Definition Audio Driver;c:\windows\system32\drivers\nvhda64v.sys [x]
S3 RTL8167;Realtek 8167 NT Driver;c:\windows\system32\DRIVERS\Rt64win7.sys [x]
.
.
Obsah adresáře 'Naplánované úlohy'
.
2011-12-04 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2482131537-1809842142-1510896379-1000Core.job
- c:\users\Adam\AppData\Local\Google\Update\GoogleUpdate.exe [2011-08-11 20:01]
.
2011-12-04 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2482131537-1809842142-1510896379-1000UA.job
- c:\users\Adam\AppData\Local\Google\Update\GoogleUpdate.exe [2011-08-11 20:01]
.
.
--------- x86-64 -----------
.
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"RtHDVCpl"="c:\program files\Realtek\Audio\HDA\RAVCpl64.exe" [2011-02-24 11780712]
"egui"="c:\program files\ESET NOD32 Antivirus\egui.exe" [2010-07-02 2903688]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
"LoadAppInit_DLLs"=0x0
.
------- Doplňkový sken -------
.
uLocal Page = c:\windows\system32\blank.htm
uStart Page = hxxp://www.crawler.com/homepage.aspx?tbid=60347
mLocal Page = c:\windows\SysWOW64\blank.htm
IE: Crawler Search - tbr:iemenu
IE: E&xportovat do aplikace Microsoft Excel - c:\progra~2\MICROS~1\Office12\EXCEL.EXE/3000
IE: Free YouTube Download - c:\users\Adam\AppData\Roaming\DVDVideoSoftIEHelpers\freeyoutubedownload.htm
IE: Free YouTube to MP3 Converter - c:\users\Adam\AppData\Roaming\DVDVideoSoftIEHelpers\freeyoutubetomp3converter.htm
TCP: DhcpNameServer = 192.168.1.1
Handler: tbr - {4D25FB7A-8902-4291-960E-9ADA051CFBBF} - c:\progra~2\Crawler\Toolbar\ctbr.dll
FF - ProfilePath - c:\users\Adam\AppData\Roaming\Mozilla\Firefox\Profiles\vebglbw3.default\
FF - prefs.js: browser.search.selectedEngine -
FF - prefs.js: browser.startup.homepage - seznam.cz
FF - prefs.js: keyword.URL - hxxp://www.crawler.com/search/dispatcher.aspx? ... 60347&qkw=
FF - prefs.js: network.proxy.type - 0
.
- - - - NEPLATNÉ POLOŽKY ODSTRANĚNÉ Z REGISTRU - - - -
.
Wow6432Node-HKCU-Run-SpyEmergency - c:\program files\Spy Emergency2\SpyEmergency.exe
Wow6432Node-HKCU-Run-RGSC - e:\gta\Rockstar Games Social Club\RGSCLauncher.exe
Wow6432Node-HKLM-Run-NPSStartup - (no file)
.
.
.
--------------------- ZAMKNUTÉ KLÍČE V REGISTRU ---------------------
.
[HKEY_USERS\S-1-5-21-2482131537-1809842142-1510896379-1000\Software\SecuROM\!CAUTION! NEVER A OR CHANGE ANY KEY*]
"??"=hex:dd,ea,c0,fa,1b,0d,c3,6d,2f,f0,5a,37,25,52,70,eb,40,80,e4,97,dc,2d,96,
10,01,25,87,b7,03,aa,5f,00,75,16,c5,99,18,a3,db,49,8b,21,b7,82,ae,37,a4,fb,\
"??"=hex:f6,4b,6e,94,a2,67,f7,9a,e6,d5,42,3d,b2,95,dc,25
.
[HKEY_USERS\S-1-5-21-2482131537-1809842142-1510896379-1000\Software\SecuROM\License information*]
"datasecu"=hex:33,fa,8e,21,48,e0,4b,f3,37,3b,ea,11,58,4a,2a,7e,20,6d,e8,d4,a8,
f3,75,46,d2,03,9f,1a,a1,aa,7e,61,70,8b,03,5a,b5,66,dd,4e,14,de,f5,3f,0d,d5,\
"rkeysecu"=hex:2f,0f,d5,3e,02,2b,06,63,b1,0b,dd,b6,71,e2,54,98
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil10v_ActiveX.exe,-101"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\Elevation]
"Enabled"=dword:00000001
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\LocalServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil10v_ActiveX.exe"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@="Shockwave Flash Object"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\InprocServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash10v.ocx"
"ThreadingModel"="Apartment"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\MiscStatus]
@="0"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ProgID]
@="ShockwaveFlash.ShockwaveFlash.10"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash10v.ocx, 1"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\TypeLib]
@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\Version]
@="1.0"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
@="ShockwaveFlash.ShockwaveFlash"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@="Macromedia Flash Factory Object"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\InprocServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash10v.ocx"
"ThreadingModel"="Apartment"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ProgID]
@="FlashFactory.FlashFactory.1"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash10v.ocx, 1"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\TypeLib]
@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\Version]
@="1.0"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
@="FlashFactory.FlashFactory"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}]
@Denied: (A 2) (Everyone)
@="IFlashBroker4"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
.
[HKEY_LOCAL_MACHINE\system\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0000\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\system\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0001\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\system\ControlSet001\Control\PCW\Security]
@Denied: (Full) (Everyone)
.
------------------------ Jiné spuštené procesy ------------------------
.
c:\program files (x86)\Nero\Nero8\Nero BackItUp\NBService.exe
c:\windows\SysWOW64\IoctlSvc.exe
c:\program files (x86)\Common Files\Nero\Lib\NMIndexingService.exe
c:\program files (x86)\Mouse Driver\KMConfig.exe
c:\program files (x86)\Mouse Driver\KMProcess.exe
.
**************************************************************************
.
Celkový čas: 2011-12-04 18:40:36 - počítač byl restartován
ComboFix-quarantined-files.txt 2011-12-04 17:40
.
Před spuštěním: Volných bajtů: 59 069 755 392
Po spuštění: Volných bajtů: 58 760 114 176
.
- - End Of File - - 227AC2B69F48AC69267C3C847839EC97

[Rudy]

Ještě dočistíme. Přesuňte ComboFix na plochu. Otevřte poznámkový blok a zkopírujte do něj:

Firefox::
FF - ProfilePath - c:\users\Adam\AppData\Roaming\Mozilla\Firefox\Profiles\vebglbw3.default\
FF - prefs.js: keyword.URL - hxxp://www.crawler.com/search/dispatche ... 60347&qkw=

Uložte na plochu jako CFScript.txt. Pak jej myší přetáhněte nad ikonu ComboFix a pusťte. CF se spustí a vykoná příkazy ze skriptu.



Doporučil bych odinstalovat Spybot, neboť NOD antispy obsahuje. Mohlo by docházet k sw kolizi.

[Jimi]

ok. tady je 2. log z ComboFix

ComboFix 11-12-04.03 - Adam 04.12.2011 19:11:10.2.6 - x64
Microsoft Windows 7 Ultimate 6.1.7600.0.1250.420.1029.18.8189.6522 [GMT 1:00]
Spuštěný z: c:\users\Adam\Desktop\ComboFix.exe
Použité ovládací přepínače :: c:\users\Adam\Desktop\CFScript.txt.txt
AV: ESET NOD32 Antivirus 4.2 *Disabled/Updated* {77DEAFED-8149-104B-25A1-21771CA47CD1}
SP: ESET NOD32 Antivirus 4.2 *Disabled/Updated* {CCBF4E09-A773-1FC5-1F11-1A056723366C}
SP: Windows Defender *Enabled/Outdated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.
.
((((((((((((((((((((((((( Soubory vytvořené od 2011-11-04 do 2011-12-04 )))))))))))))))))))))))))))))))
.
.
2011-12-04 18:28 . 2011-12-04 18:28 -------- d-----w- c:\users\Default\AppData\Local\temp
2011-12-04 14:46 . 2011-12-04 14:46 -------- d-----w- c:\users\Adam\AppData\Roaming\Malwarebytes
2011-12-04 14:45 . 2011-12-04 14:45 -------- d-----w- c:\programdata\Malwarebytes
2011-12-04 14:45 . 2011-12-04 14:45 -------- d-----w- c:\program files (x86)\Malwarebytes' Anti-Malware
2011-12-04 14:45 . 2011-08-31 16:00 25416 ----a-w- c:\windows\system32\drivers\mbam.sys
2011-12-04 14:13 . 2011-12-04 14:16 -------- d-----w- c:\program files\trend micro
2011-12-04 14:13 . 2011-12-04 14:14 -------- d-----w- C:\rsit
2011-12-04 14:05 . 2011-12-04 14:05 -------- d-----w- c:\program files (x86)\ESET
2011-11-25 15:08 . 2011-11-25 15:08 -------- d-----w- c:\users\Adam\AppData\Local\Chromium
2011-11-25 14:37 . 2011-11-25 14:37 -------- d-----w- c:\programdata\Rockstar Games
2011-11-25 14:34 . 2011-11-25 14:34 -------- d-----w- c:\program files (x86)\Rockstar Games
2011-11-17 15:49 . 2011-11-17 15:49 178800 ----a-w- c:\windows\SysWow64\CmdLineExt_x64.dll
2011-11-17 14:46 . 2008-10-15 05:22 5631312 ----a-w- c:\windows\system32\D3DX9_40.dll
2011-11-17 14:38 . 2011-11-17 14:38 -------- d-----w- c:\program files (x86)\DirectX
2011-11-16 15:45 . 2011-11-16 15:45 -------- d-----w- c:\users\Adam\AppData\Local\Activision
2011-11-13 00:14 . 2011-11-13 00:14 -------- d-----w- c:\users\Adam\AppData\Local\APN
.
.
.
(((((((((((((((((((((((((((((((((((((((( Find3M výpis ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2011-12-04 18:29 . 2011-08-10 23:32 25640 ----a-w- c:\windows\gdrv.sys
.
.
((((((((((((((((((((((((((((( SnapShot@2011-12-04_17.37.39 )))))))))))))))))))))))))))))))))))))))))
.
+ 2011-08-10 23:17 . 2011-12-04 17:38 35618 c:\windows\system32\wdi\ShutdownPerformanceDiagnostics_SystemData.bin
- 2009-07-14 05:10 . 2011-12-04 13:59 32936 c:\windows\system32\wdi\BootPerformanceDiagnostics_SystemData.bin
+ 2009-07-14 05:10 . 2011-12-04 17:38 32936 c:\windows\system32\wdi\BootPerformanceDiagnostics_SystemData.bin
+ 2011-08-10 23:13 . 2011-12-04 17:38 10458 c:\windows\system32\wdi\{86432a0b-3c7d-4ddf-a89c-172faa90485d}\S-1-5-21-2482131537-1809842142-1510896379-1000_UserData.bin
+ 2011-08-11 01:06 . 2011-12-04 18:04 16384 c:\windows\ServiceProfiles\LocalService\AppData\Roaming\Microsoft\Windows\Cookies\index.dat
- 2011-08-11 01:06 . 2011-12-04 17:02 16384 c:\windows\ServiceProfiles\LocalService\AppData\Roaming\Microsoft\Windows\Cookies\index.dat
+ 2011-08-11 01:06 . 2011-12-04 18:04 16384 c:\windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Windows\History\History.IE5\index.dat
- 2011-08-11 01:06 . 2011-12-04 17:02 16384 c:\windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Windows\History\History.IE5\index.dat
- 2011-12-04 17:36 . 2011-12-04 17:36 2048 c:\windows\ServiceProfiles\LocalService\AppData\Local\lastalive1.dat
+ 2011-12-04 18:29 . 2011-12-04 18:29 2048 c:\windows\ServiceProfiles\LocalService\AppData\Local\lastalive1.dat
- 2011-12-04 17:36 . 2011-12-04 17:36 2048 c:\windows\ServiceProfiles\LocalService\AppData\Local\lastalive0.dat
+ 2011-12-04 18:29 . 2011-12-04 18:29 2048 c:\windows\ServiceProfiles\LocalService\AppData\Local\lastalive0.dat
- 2009-07-14 02:34 . 2011-12-04 14:11 9437184 c:\windows\system32\SMI\Store\Machine\schema.dat
+ 2009-07-14 02:34 . 2011-12-04 18:10 9437184 c:\windows\system32\SMI\Store\Machine\schema.dat
.
(((((((((((((((((((((((((((((((((( Spouštěcí body v registru )))))))))))))))))))))))))))))))))))))))))))))
.
.
*Poznámka* prázdné záznamy a legitimní výchozí údaje nejsou zobrazeny.
REGEDIT4
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"IndxStoreSvr_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}"="c:\program files (x86)\Common Files\Nero\Lib\NMIndexStoreSvr.exe" [2008-06-24 1840424]
"uTorrent"="c:\program files (x86)\uTorrent\uTorrent.exe" [2011-10-22 641400]
"SpybotSD TeaTimer"="c:\program files (x86)\Spybot - Search & Destroy\TeaTimer.exe" [2009-03-05 2260480]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]
"GrooveMonitor"="c:\program files (x86)\Microsoft Office\Office12\GrooveMonitor.exe" [2006-10-26 31016]
"Adobe ARM"="c:\program files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2011-06-06 937920]
"NBKeyScan"="c:\program files (x86)\Nero\Nero8\Nero BackItUp\NBKeyScan.exe" [2008-06-08 2221352]
"KMCONFIG"="c:\program files (x86)\Mouse Driver\StartAutorun.exe" [2008-05-29 212992]
"SpybotSnD"="c:\program files (x86)\Spybot - Search & Destroy\SpybotSD.exe" [2009-01-26 5365592]
"Malwarebytes' Anti-Malware"="c:\program files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe" [2011-08-31 449608]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorAdmin"= 0 (0x0)
"ConsentPromptBehaviorUser"= 3 (0x3)
"EnableLUA"= 0 (0x0)
"EnableUIADesktopToggle"= 0 (0x0)
"PromptOnSecureDesktop"= 0 (0x0)
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\drivers32]
"mixer4"=wdmaud.drv
.
R2 MBAMService;MBAMService;c:\program files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe [2011-08-31 366152]
R3 MBAMProtector;MBAMProtector;c:\windows\system32\drivers\mbam.sys [x]
R3 TFsExDisk;TFsExDisk;c:\windows\System32\Drivers\TFsExDisk.sys [2010-06-14 16448]
S0 sptd;sptd;c:\windows\System32\Drivers\sptd.sys [x]
S1 ehdrv;ehdrv;c:\windows\system32\DRIVERS\ehdrv.sys [x]
S2 AdobeARMservice;Adobe Acrobat Update Service;c:\program files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [2011-06-06 64952]
S2 eamonm;eamonm;c:\windows\system32\DRIVERS\eamonm.sys [x]
S2 ekrn;ESET Service;c:\program files\ESET NOD32 Antivirus\x86\ekrn.exe [2010-07-02 810144]
S2 epfwwfpr;epfwwfpr;c:\windows\system32\DRIVERS\epfwwfpr.sys [x]
S2 ES lite Service;ES lite Service for program management.;c:\program files (x86)\Gigabyte\EasySaver\ESSVR.EXE [2009-08-24 68136]
S2 KMWDSERVICE;Keyboard And Mouse Communication Service;c:\program files (x86)\Mouse Driver\KMWDSrv.exe [2009-08-31 1821184]
S2 SBSDWSCService;SBSD Security Center Service;c:\program files (x86)\Spybot - Search & Destroy\SDWinSec.exe [2009-01-26 1153368]
S2 Stereo Service;NVIDIA Stereoscopic 3D Driver Service;c:\program files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe [2011-08-03 379496]
S3 EtronHub3;Etron USB 3.0 Extensible Hub Driver;c:\windows\system32\Drivers\EtronHub3.sys [x]
S3 EtronXHCI;Etron USB 3.0 Extensible Host Controller Driver;c:\windows\system32\Drivers\EtronXHCI.sys [x]
S3 NVHDA;Service for NVIDIA High Definition Audio Driver;c:\windows\system32\drivers\nvhda64v.sys [x]
S3 RTL8167;Realtek 8167 NT Driver;c:\windows\system32\DRIVERS\Rt64win7.sys [x]
.
.
Obsah adresáře 'Naplánované úlohy'
.
2011-12-04 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2482131537-1809842142-1510896379-1000Core.job
- c:\users\Adam\AppData\Local\Google\Update\GoogleUpdate.exe [2011-08-11 20:01]
.
2011-12-04 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2482131537-1809842142-1510896379-1000UA.job
- c:\users\Adam\AppData\Local\Google\Update\GoogleUpdate.exe [2011-08-11 20:01]
.
.
--------- x86-64 -----------
.
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"RtHDVCpl"="c:\program files\Realtek\Audio\HDA\RAVCpl64.exe" [2011-02-24 11780712]
"egui"="c:\program files\ESET NOD32 Antivirus\egui.exe" [2010-07-02 2903688]
.
------- Doplňkový sken -------
.
uLocal Page = c:\windows\system32\blank.htm
uStart Page = hxxp://www.crawler.com/homepage.aspx?tbid=60347
mLocal Page = c:\windows\SysWOW64\blank.htm
IE: Crawler Search - tbr:iemenu
IE: E&xportovat do aplikace Microsoft Excel - c:\progra~2\MICROS~1\Office12\EXCEL.EXE/3000
IE: Free YouTube Download - c:\users\Adam\AppData\Roaming\DVDVideoSoftIEHelpers\freeyoutubedownload.htm
IE: Free YouTube to MP3 Converter - c:\users\Adam\AppData\Roaming\DVDVideoSoftIEHelpers\freeyoutubetomp3converter.htm
TCP: DhcpNameServer = 192.168.1.1
Handler: tbr - {4D25FB7A-8902-4291-960E-9ADA051CFBBF} - c:\progra~2\Crawler\Toolbar\ctbr.dll
FF - ProfilePath - c:\users\Adam\AppData\Roaming\Mozilla\Firefox\Profiles\vebglbw3.default\
FF - prefs.js: browser.search.selectedEngine -
FF - prefs.js: browser.startup.homepage - seznam.cz
FF - prefs.js: network.proxy.type - 0
.
.
--------------------- ZAMKNUTÉ KLÍČE V REGISTRU ---------------------
.
[HKEY_USERS\S-1-5-21-2482131537-1809842142-1510896379-1000\Software\SecuROM\!CAUTION! NEVER A OR CHANGE ANY KEY*]
"??"=hex:dd,ea,c0,fa,1b,0d,c3,6d,2f,f0,5a,37,25,52,70,eb,40,80,e4,97,dc,2d,96,
10,01,25,87,b7,03,aa,5f,00,75,16,c5,99,18,a3,db,49,8b,21,b7,82,ae,37,a4,fb,\
"??"=hex:f6,4b,6e,94,a2,67,f7,9a,e6,d5,42,3d,b2,95,dc,25
.
[HKEY_USERS\S-1-5-21-2482131537-1809842142-1510896379-1000\Software\SecuROM\License information*]
"datasecu"=hex:33,fa,8e,21,48,e0,4b,f3,37,3b,ea,11,58,4a,2a,7e,20,6d,e8,d4,a8,
f3,75,46,d2,03,9f,1a,a1,aa,7e,61,70,8b,03,5a,b5,66,dd,4e,14,de,f5,3f,0d,d5,\
"rkeysecu"=hex:2f,0f,d5,3e,02,2b,06,63,b1,0b,dd,b6,71,e2,54,98
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil10v_ActiveX.exe,-101"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\Elevation]
"Enabled"=dword:00000001
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\LocalServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil10v_ActiveX.exe"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@="Shockwave Flash Object"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\InprocServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash10v.ocx"
"ThreadingModel"="Apartment"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\MiscStatus]
@="0"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ProgID]
@="ShockwaveFlash.ShockwaveFlash.10"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash10v.ocx, 1"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\TypeLib]
@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\Version]
@="1.0"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
@="ShockwaveFlash.ShockwaveFlash"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@="Macromedia Flash Factory Object"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\InprocServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash10v.ocx"
"ThreadingModel"="Apartment"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ProgID]
@="FlashFactory.FlashFactory.1"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash10v.ocx, 1"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\TypeLib]
@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\Version]
@="1.0"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
@="FlashFactory.FlashFactory"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}]
@Denied: (A 2) (Everyone)
@="IFlashBroker4"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
.
[HKEY_LOCAL_MACHINE\system\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0000\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\system\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0001\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\system\ControlSet001\Control\PCW\Security]
@Denied: (Full) (Everyone)
.
------------------------ Jiné spuštené procesy ------------------------
.
c:\program files (x86)\Nero\Nero8\Nero BackItUp\NBService.exe
c:\windows\SysWOW64\IoctlSvc.exe
c:\program files (x86)\Common Files\Nero\Lib\NMIndexingService.exe
c:\program files (x86)\Mouse Driver\KMConfig.exe
c:\program files (x86)\Mouse Driver\KMProcess.exe
.
**************************************************************************
.
Celkový čas: 2011-12-04 19:32:22 - počítač byl restartován
ComboFix-quarantined-files.txt 2011-12-04 18:32
ComboFix2.txt 2011-12-04 17:40
.
Před spuštěním: Volných bajtů: 58 803 548 160
Po spuštění: Volných bajtů: 58 719 608 832
.
- - End Of File - - 0A3682E8C34E29BDF930B3AFEAAC1A5A

Bohužel se zatím nic nezměnilo, filmy se sekají pořád a při pokusu nainstalovat NOD32 nebo SmartSecurity mi kolabuje systém a padá do Modré obrazovky. Po restartu se objevila hláška s popisem problému po neočekávaném vypnutí:

Podpis problému:
Název události problému: BlueScreen
Verze operačního systému: 6.1.7600.2.0.0.256.1
ID národního prostředí: 1029

Další informace o problému:
BCCode: 19
BCP1: 0000000000000020
BCP2: FFFFFA8009DE6800
BCP3: FFFFFA8009DE6880
BCP4: 000000000C080015
OS Version: 6_1_7600
Service Pack: 0_0
Product: 256_1

Soubory, které popisují problém:
C:\Windows\Minidump\120411-19780-01.dmp
C:\Users\Adam\AppData\Local\Temp\WER-819910-0.sysdata.xml

Přečtěte si prohlášení o zásadách ochrany osobních údajů online:
http://go.microsoft.com/fwlink/?linkid= ... cid=0x0405

Pokud není k dispozici Prohlášení o zásadách ochrany osobních údajů online, přečtěte si toto prohlášení offline:
C:\Windows\system32\cs-CZ\erofflps.txt

Kdybyste potřeboval, přikládám soubor Minidump: http://www.ulozto.cz/11527774/120411-19780-01-dmp
heslo "virycz"

[Rudy]

Otestujte RAMku pomocí Memtestu: http://www.stahuj.centrum.cz/utility_a_ ... i/memtest/ . Nechte proběhnout alespoň 3x a na horní liště okna sledujte errory.

[Jimi]

pustil jsem 3 najednou, každému jsem zadal 2000 MB a nechal jsem je dojet všechny lehce za 100%. Žádné chyby to nenašlo

[Jimi]

BSOD mi napsal:
BAD_POOL_HEADER
a
Technical information:
***STOP: 0x00000019 (0x0000000000000020, 0xFFFFFA8009ABD780, 0xFFFFFA8009ABD800, 0x000000000C08000A)

[Rudy]

Tohle evidentně vypadá na hardwarovou chybu. Nemáte v PC něco přetaktováno?

[Jimi]

Vědomě jsem nic nepřetaktovával. Nejsem ale nijak zkušený uživatel. Je možné že nastavení některé z komponent se změnilo nainstalováním nějakého ovladače? Dá se někde zjistit současná frekvence komponent? Porovnal bych to s údaji od výrobce.

[Rudy]

Komplexní přehled dostanete pomocí programu EverestHome: http://www.stahuj.centrum.cz/utility_a_ ... y/everest/ .

[Jimi]

Nainstaloval jsem ho, bohužel teď moc nevím, co dál. Našel jsem funkci benchmark cache a paměti. Z procesoru HexaCore AMD Phenom II X6 1055T (Thuban, Socket AM3) vylezly údaje:
CPU Clock 3192,1 MHz z 3300 MHz
CPU FSB 193,5 MHz z 200 MHz
CPU Multiplier 16,5x

V sekci počítač mi hlásí procesor maximální takt 3200 MHz a aktuální 2800 MHz, Externí takt 200 MHz.
V podsekci přetaktování mám takt CPU 803,7 MHz z 3300 MHz, násobič taktu CPU 4x, CPU FSB 200,9 MHz z 200 MHz (Zde je takt o 0,9 MHz vyšší než originální), Taktování hypertransportu 2009,1 MHz, hodiny severního můstku 2009,1 MHz.

Na základní desce jsem našel Skutečný takt 221 MHz, Efektivní taktování 221 MHz, Taktování hypertransportu 2214 MHz a hodiny severního můstku 2214 MHz.

V sekci SPD: Rychlost paměti DDR3-1333 (667MHz),
Časování pamětí:
@ 666 MHz 9-9-9-24 (CL-RCD-RP-RAS) / 34-107-5-10-5-5 (RC-RFC-RRD-WR-WTR-RTP)
@ 592 MHz 8-8-8-22 (CL-RCD-RP-RAS) / 30-95-5-9-5-5 (RC-RFC-RRD-WR-WTR-RTP)
@ 518 MHz 7-7-7-19 (CL-RCD-RP-RAS) / 27-83-4-8-4-4 (RC-RFC-RRD-WR-WTR-RTP)
@ 444 MHz 6-6-6-16 (CL-RCD-RP-RAS) / 23-72-4-7-4-4 (RC-RFC-RRD-WR-WTR-RTP)

Nikde jinde jsem žádné frekvence ani takty nenašel. Jestli Vás můžu poprosit, napište mi přesně jak se mám dostat k informacím které potřebujete. Díky