CPU občas skáče na 100%

[Johny36]

Zdravím, mám problém že když mám notebook dlouho zapnutý tak občas dochází k tomu, že CPU vyskočí na nějakou chvilku na 100%, tudíž zvuk na skypu, videa, hry, všechno v tu chvíli začne být trhané, děje se to tak asi 30s, pak to anjednou přestane a zase nějakou chvíli jede. Nicméně takto se to opakuje, dokud nerestartuju ntb. Pak zas po nějaké delší době tento cyklus opět začne. Mohli by jste mi prosím poradit co s tím?

Logfile of random's system information tool 1.09 (written by random/random)
Run by Arcane at 2013-01-06 17:17:55
Microsoft Windows 7 Home Premium Service Pack 1
System drive C: has 28 GB (32%) free of 88 GB
Total RAM: 8136 MB (67% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 17:17:59, on 6.1.2013
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v9.00 (9.00.8112.16457)
Boot mode: Normal

Running processes:
C:\Program Files (x86)\Skype\Phone\Skype.exe
D:\Arcane\Steam\Steam.exe
C:\Program Files (x86)\QIP 2012\qip.exe
C:\Program Files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe
C:\Program Files\AVAST Software\Avast\AvastUI.exe
C:\Program Files (x86)\iTunes\iTunesHelper.exe
C:\Program Files (x86)\Internet Explorer\IELowutil.exe
C:\Program Files\trend micro\Arcane.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
F2 - REG:system.ini: UserInit=userinit.exe
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll
O2 - BHO: avast! WebRep - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll
O2 - BHO: URLRedirectionBHO - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\PROGRA~2\MICROS~1\Office14\URLREDIR.DLL
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll
O3 - Toolbar: avast! WebRep - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll
O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKLM\..\Run: [NUSB3MON] "C:\Program Files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe"
O4 - HKLM\..\Run: [APSDaemon] "C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe"
O4 - HKLM\..\Run: [SwitchBoard] C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe
O4 - HKLM\..\Run: [AdobeCS6ServiceManager] "C:\Program Files (x86)\Common Files\Adobe\CS6ServiceManager\CS6ServiceManager.exe" -launchedbylogin
O4 - HKLM\..\Run: [avast] "C:\Program Files\AVAST Software\Avast\avastUI.exe" /nogui
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files (x86)\QuickTime\QTTask.exe" -atboottime
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files (x86)\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [StartCCC] "C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun
O4 - HKLM\..\Run: [AMD AVT] Cmd.exe /c start "AMD Accelerated Video Transcoding device initialization" /min "C:\Program Files (x86)\AMD AVT\bin\kdbsync.exe" aml
O4 - HKCU\..\Run: [DAEMON Tools Lite] "C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe" -autorun
O4 - HKCU\..\Run: [RESTART_STICKY_NOTES] C:\Windows\System32\StikyNot.exe
O4 - HKCU\..\Run: [Skype] "C:\Program Files (x86)\Skype\Phone\Skype.exe" /minimized /regrun
O4 - HKCU\..\Run: [Steam] "D:\Arcane\Steam\steam.exe" -silent
O4 - HKCU\..\Run: [Infium] "C:\Program Files (x86)\QIP 2012\qip.exe" /autorun
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'NETWORK SERVICE')
O4 - Startup: CurseClientStartup.ccip
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office14\EXCEL.EXE/3000
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O16 - DPF: {CF84DAC5-A4F5-419E-A0BA-C01FFD71112F} - http://content.systemrequirementslab.co ... .5.9.0.cab
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~2\COMMON~1\Skype\SKYPE4~1.DLL
O21 - SSODL: EldosMountNotificator - {5FF49FE8-B332-4CB9-B102-FB6951629E55} - C:\Windows\SysWOW64\CbFsMntNtf3.dll
O22 - SharedTaskScheduler: Virtual Storage Mount Notification - {5FF49FE8-B332-4CB9-B102-FB6951629E55} - C:\Windows\SysWOW64\CbFsMntNtf3.dll
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
O23 - Service: AMD External Events Utility - Unknown owner - C:\Windows\system32\atiesrxx.exe (file missing)
O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
O23 - Service: avast! Antivirus - AVAST Software - C:\Program Files\AVAST Software\Avast\AvastSvc.exe
O23 - Service: Bonjour Service - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: Intel(R) Content Protection HECI Service (cphs) - Intel Corporation - C:\Windows\SysWow64\IntelCpHeciSvc.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)
O23 - Service: Sentinel Local License Manager (hasplms) - Unknown owner - C:\Windows\system32\hasplms.exe (file missing)
O23 - Service: Hi-Rez Studios Authenticate and Update Service (HiPatchService) - Hi-Rez Studios - D:\Arcane\Hry\Smite\HiPatchService.exe
O23 - Service: iPod Service - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Skype Updater (SkypeUpdate) - Skype Technologies - C:\Program Files (x86)\Skype\Updater\Updater.exe
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)
O23 - Service: Steam Client Service - Valve Corporation - C:\Program Files (x86)\Common Files\Steam\SteamService.exe
O23 - Service: SwitchBoard - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\Wat\WatUX.exe,-601 (WatAdminSvc) - Unknown owner - C:\Windows\system32\Wat\WatAdminSvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)

--
End of file - 9640 bytes

======Listing Processes======

\SystemRoot\System32\smss.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
wininit.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
C:\Windows\system32\services.exe
C:\Windows\system32\lsass.exe
C:\Windows\system32\lsm.exe
winlogon.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Windows\system32\svchost.exe -k RPCSS
C:\Windows\system32\atiesrxx.exe
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k netsvcs
C:\Windows\system32\svchost.exe -k GPSvcGroup
C:\Windows\system32\svchost.exe -k LocalService
C:\Windows\system32\svchost.exe -k NetworkService
atieclxx
"C:\Program Files\AVAST Software\Avast\AvastSvc.exe"
C:\Windows\System32\spoolsv.exe
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
taskeng.exe {71B642DD-AA4C-455D-8E0B-CA53E05AF39D}
"C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe"
"C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe"
"C:\Windows\system32\Dwm.exe"
"taskhost.exe"
C:\Windows\Explorer.EXE
"C:\Program Files\Bonjour\mDNSResponder.exe"
C:\Windows\system32\hasplms.exe -run
D:\Arcane\Hry\Smite\HiPatchService.exe
C:\Windows\system32\svchost.exe -k imgsvc
"C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE"
C:\Windows\System32\rundll32.exe shell32.dll,SHCreateLocalServerRunDll {995C996E-D918-4a8c-A302-45719A6F4EA7} -Embedding
C:\Windows\system32\svchost.exe -k bthsvcs
"C:\Windows\System32\WUDFHost.exe" -HostGUID:{193a1820-d9ac-4997-8c55-be817523f6aa} -IoEventPortName:HostProcess-d0591e08-def0-4c34-8c32-1d5e1b5df898 -SystemEventPortName:HostProcess-36f9cca2-27cf-4190-9454-8d87932a58c7 -IoCancelEventPortName:HostProcess-066bebf5-aa79-415e-9133-8d1311d653e4 -NonStateChangingEventPortName:HostProcess-11e6c837-12c3-44b7-b5ab-08628d340438 -ServiceSID:S-1-5-80-2652678385-582572993-1835434367-1344795993-749280709 -LifetimeId:1b1f00de-2568-45ae-882b-6d4f6023d26e -DeviceGroupId:
"C:\Program Files\Synaptics\SynTP\SynTPEnh.exe"
C:\Windows\system32\SearchIndexer.exe /Embedding
"C:\Program Files\Synaptics\SynTP\SynTPHelper.exe"
"C:\Program Files\Windows Media Player\wmpnetwk.exe"
"C:\Windows\System32\igfxtray.exe"
C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
"C:\Windows\System32\hkcmd.exe"
"C:\Windows\System32\igfxpers.exe"
"C:\Windows\System32\StikyNot.exe"
"C:\Program Files (x86)\Skype\Phone\Skype.exe" /minimized /regrun
"D:\Arcane\Steam\Steam.exe" -silent
"C:\Program Files (x86)\QIP 2012\qip.exe" /autorun
"C:\Users\Arcane\AppData\Local\Apps\2.0\Y9RC915L.AED\X9PYARNB.2KL\curs..tion_9e9e83ddf3ed3ead_0005.0001_f88ee66177b243ac\CurseClient.exe"
"C:\Program Files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe"
"C:\Program Files\AVAST Software\Avast\AvastUI.exe" /nogui
"C:\Program Files (x86)\iTunes\iTunesHelper.exe"
"C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM" PriorityLow
"C:\Program Files\iPod\bin\iPodService.exe"
"C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe" 0
"C:\Program Files (x86)\Internet Explorer\IELowutil.exe" -embedding
"C:\Program Files (x86)\Common Files\Steam\SteamService.exe" /RunAsService
C:\Windows\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe
C:\Windows\System32\svchost.exe -k secsvcs
"C:\Program Files\Opera x64\opera.exe"
"C:\Program Files\Opera x64\pluginwrapper\opera_plugin_wrapper.exe" -newprocess "5792 2 0 1 4" -logfolder "C:\Users\Arcane\AppData\Local\Opera\Opera x64\logs"
"C:\Users\Arcane\AppData\Local\Opera\Opera x64\temporary_downloads\RSITx64.exe"
C:\Windows\system32\wbem\wmiprvse.exe

======Scheduled tasks folder======

C:\Windows\tasks\Adobe Flash Player Updater.job

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{318A227B-5E9F-45bd-8999-7F8F10CA4CF5}]
avast! WebRep - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll [2012-10-30 1502288]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{72853161-30C5-4D22-B7F9-0BBC1D38A37E}]
Groove GFS Browser Helper - C:\PROGRA~1\MICROS~2\Office14\GROOVEEX.DLL [2012-08-16 6670496]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
Java(tm) Plug-In SSV Helper - C:\Program Files\Java\jre7\bin\ssv.dll [2012-10-19 537576]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{B4F3A835-0E21-4959-BA22-42B3008E02FF}]
Office Document Cache Handler - C:\PROGRA~1\MICROS~2\Office14\URLREDIR.DLL [2010-12-21 689040]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre7\bin\jp2ssv.dll [2012-10-19 193512]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
Adobe PDF Link Helper - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2012-09-23 60568]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
Java(tm) Plug-In SSV Helper - C:\Program Files (x86)\Java\jre7\bin\ssv.dll [2012-10-19 453104]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{8E5E2654-AD2D-48bf-AC2D-D17F00898D06}]
avast! WebRep - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2012-10-30 1227736]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{B4F3A835-0E21-4959-BA22-42B3008E02FF}]
Office Document Cache Handler - C:\PROGRA~2\MICROS~1\Office14\URLREDIR.DLL [2010-12-21 561552]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll [2012-10-19 157680]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - avast! WebRep - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll [2012-10-30 1502288]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Internet Explorer\Toolbar]
{8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - avast! WebRep - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2012-10-30 1227736]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"BCSSync"=C:\Program Files\Microsoft Office\Office14\BCSSync.exe [2010-03-13 112512]
"AdobeAAMUpdater-1.0"=C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [2012-04-04 446392]
"SynTPEnh"=C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2010-12-17 2531624]
"SmartAudio"=C:\Program Files\CONEXANT\SAII\SAIICpl.exe [2010-04-28 307768]
"IgfxTray"=C:\Windows\system32\igfxtray.exe [2011-03-25 167960]
"HotKeysCmds"=C:\Windows\system32\hkcmd.exe [2011-03-25 391704]
"Persistence"=C:\Windows\system32\igfxpers.exe [2011-03-25 418840]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"AdobeBridge"= []
"DAEMON Tools Lite"=C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe [2012-08-28 3671904]
"RESTART_STICKY_NOTES"=C:\Windows\System32\StikyNot.exe [2009-07-14 427520]
"Skype"=C:\Program Files (x86)\Skype\Phone\Skype.exe [2012-11-09 17877168]
"Steam"=D:\Arcane\Steam\steam.exe [2012-12-20 1354736]
"Infium"=C:\Program Files (x86)\QIP 2012\qip.exe [2012-11-26 8376944]

[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]
"Adobe ARM"=C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2012-09-23 926896]
"NUSB3MON"=C:\Program Files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe [2010-11-17 113288]
"APSDaemon"=C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [2012-11-28 59280]
"SwitchBoard"=C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [2010-02-19 517096]
"AdobeCS6ServiceManager"=C:\Program Files (x86)\Common Files\Adobe\CS6ServiceManager\CS6ServiceManager.exe [2012-03-09 1073312]
"avast"=C:\Program Files\AVAST Software\Avast\avastUI.exe [2012-10-30 4297136]
"QuickTime Task"=C:\Program Files (x86)\QuickTime\QTTask.exe [2012-10-25 421888]
"iTunesHelper"=C:\Program Files (x86)\iTunes\iTunesHelper.exe [2012-12-12 152544]
"StartCCC"=C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [2012-06-11 641704]
"AMD AVT"=Cmd.exe /c start AMD Accelerated Video Transcoding device initialization /min C:\Program Files (x86)\AMD AVT\bin\kdbsync.exe aml []

C:\Users\Arcane\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
CurseClientStartup.ccip

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\igfxcui]
C:\Windows\system32\igfxdev.dll [2011-03-25 385024]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED}
EldosMountNotificator - {5FF49FE8-B332-4CB9-B102-FB6951629E55} - C:\Windows\system32\CbFsMntNtf3.dll [2012-04-09 190480]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\explorer\SharedTaskScheduler]
Virtual Storage Mount Notification - {5FF49FE8-B332-4CB9-B102-FB6951629E55} - C:\Windows\system32\CbFsMntNtf3.dll [2012-04-09 190480]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{B5A7F190-DDA6-4420-B3BA-52453494E6CD}"=C:\PROGRA~1\MICROS~2\Office14\GROOVEEX.DLL [2012-08-16 6670496]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=credssp.dll

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorAdmin"=5
"ConsentPromptBehaviorUser"=3
"EnableUIADesktopToggle"=0
"PromptOnSecureDesktop"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoActiveDesktop"=1
"NoActiveDesktopChanges"=1
"ForceActiveDesktopOn"=0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.msadpcm"=msadp32.acm
"midimapper"=midimap.dll
"wavemapper"=msacm32.drv
"VIDC.UYVY"=msyuv.dll
"VIDC.YUY2"=msyuv.dll
"VIDC.YVYU"=msyuv.dll
"VIDC.IYUV"=iyuv_32.dll
"vidc.i420"=iyuv_32.dll
"VIDC.YVU9"=tsbyuv.dll
"msacm.l3acm"=l3codeca.acm
"MSVideo8"=VfWWDM32.dll
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv
"wave2"=wdmaud.drv
"midi2"=wdmaud.drv
"mixer2"=wdmaud.drv
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"aux1"=wdmaud.drv
"VIDC.LAGS"=lagarith.dll
"VIDC.FFDS"=ff_vfw.dll
"msacm.l3codecp"=l3codecp.acm
"wave3"=wdmaud.drv
"midi3"=wdmaud.drv
"mixer3"=wdmaud.drv
"aux2"=wdmaud.drv

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*

======List of files/folders created in the last 1 month======

2013-01-06 17:17:55 ----D---- C:\rsit
2013-01-06 17:17:55 ----D---- C:\Program Files\trend micro
2013-01-01 21:34:15 ----D---- C:\Program Files (x86)\iPhone Configuration Utility
2012-12-28 02:32:03 ----D---- C:\Users\Arcane\AppData\Roaming\redsn0w
2012-12-28 01:58:10 ----A---- C:\Windows\system32\CbFsMntNtf3.dll
2012-12-28 01:58:09 ----A---- C:\Windows\SYSWOW64\CbFsMntNtf3.dll
2012-12-28 01:58:09 ----A---- C:\Windows\system32\CbFsNetRdr3.dll
2012-12-28 01:58:07 ----A---- C:\Windows\SYSWOW64\CbFsNetRdr3.dll
2012-12-28 01:57:25 ----A---- C:\Windows\system32\drivers\cbfs3.sys
2012-12-28 01:57:18 ----D---- C:\Program Files (x86)\iExplorer
2012-12-21 13:54:56 ----A---- C:\Windows\system32\TsUsbRedirectionGroupPolicyExtension.dll
2012-12-21 13:54:56 ----A---- C:\Windows\system32\TsUsbRedirectionGroupPolicyControl.exe
2012-12-21 13:54:56 ----A---- C:\Windows\system32\RdpGroupPolicyExtension.dll
2012-12-21 13:54:54 ----A---- C:\Windows\system32\drivers\TsUsbFlt.sys
2012-12-21 13:54:54 ----A---- C:\Windows\system32\drivers\rdpvideominiport.sys
2012-12-21 13:54:52 ----A---- C:\Windows\SYSWOW64\wksprtPS.dll
2012-12-21 13:54:52 ----A---- C:\Windows\SYSWOW64\tsgqec.dll
2012-12-21 13:54:52 ----A---- C:\Windows\SYSWOW64\rdpendp_winip.dll
2012-12-21 13:54:52 ----A---- C:\Windows\SYSWOW64\MsRdpWebAccess.dll
2012-12-21 13:54:52 ----A---- C:\Windows\SYSWOW64\aaclient.dll
2012-12-21 13:54:52 ----A---- C:\Windows\system32\wksprtPS.dll
2012-12-21 13:54:52 ----A---- C:\Windows\system32\TsUsbGDCoInstaller.dll
2012-12-21 13:54:52 ----A---- C:\Windows\system32\tsgqec.dll
2012-12-21 13:54:52 ----A---- C:\Windows\system32\aaclient.dll
2012-12-21 13:54:51 ----A---- C:\Windows\SYSWOW64\mstsc.exe
2012-12-21 13:54:51 ----A---- C:\Windows\system32\wksprt.exe
2012-12-21 13:54:51 ----A---- C:\Windows\system32\TSWbPrxy.exe
2012-12-21 13:54:51 ----A---- C:\Windows\system32\rdpudd.dll
2012-12-21 13:54:51 ----A---- C:\Windows\system32\rdpendp_winip.dll
2012-12-21 13:54:51 ----A---- C:\Windows\system32\rdpcorets.dll
2012-12-21 13:54:51 ----A---- C:\Windows\system32\mstsc.exe
2012-12-21 13:54:51 ----A---- C:\Windows\system32\MsRdpWebAccess.dll
2012-12-21 13:54:50 ----A---- C:\Windows\SYSWOW64\mstscax.dll
2012-12-21 13:54:50 ----A---- C:\Windows\system32\mstscax.dll
2012-12-21 13:54:27 ----A---- C:\Windows\SYSWOW64\atmlib.dll
2012-12-21 13:54:27 ----A---- C:\Windows\system32\atmlib.dll
2012-12-21 13:54:26 ----A---- C:\Windows\system32\atmfd.dll
2012-12-21 13:54:25 ----A---- C:\Windows\SYSWOW64\atmfd.dll
2012-12-20 15:56:00 ----D---- C:\Users\Arcane\AppData\Roaming\Media Player Classic
2012-12-20 15:55:11 ----A---- C:\Windows\system32\unrar64.dll
2012-12-20 15:55:11 ----A---- C:\Windows\system32\lagarith.dll
2012-12-20 15:55:07 ----D---- C:\Program Files\K-Lite Codec Pack x64
2012-12-20 15:53:55 ----A---- C:\Windows\SYSWOW64\xvidvfw.dll
2012-12-20 15:53:55 ----A---- C:\Windows\SYSWOW64\xvidcore.dll
2012-12-20 15:53:55 ----A---- C:\Windows\SYSWOW64\lagarith.dll
2012-12-20 15:53:51 ----A---- C:\Windows\SYSWOW64\ff_vfw.dll
2012-12-20 15:53:48 ----D---- C:\Program Files (x86)\K-Lite Codec Pack
2012-12-15 21:25:21 ----D---- C:\ProgramData\ATI
2012-12-14 10:22:55 ----D---- C:\ProgramData\34BE82C4-E596-4e99-A191-52C6199EBF69
2012-12-14 10:22:55 ----D---- C:\Program Files\iTunes
2012-12-14 10:22:55 ----D---- C:\Program Files\iPod
2012-12-14 10:22:55 ----D---- C:\Program Files (x86)\iTunes
2012-12-13 19:31:03 ----D---- C:\Intel
2012-12-13 19:31:01 ----D---- C:\Program Files\Common Files\ATI Technologies
2012-12-13 19:29:14 ----D---- C:\Program Files\ATI Technologies
2012-12-12 15:57:26 ----A---- C:\Windows\SYSWOW64\vbscript.dll
2012-12-12 15:57:26 ----A---- C:\Windows\SYSWOW64\mshtmled.dll
2012-12-12 15:57:26 ----A---- C:\Windows\SYSWOW64\ieui.dll
2012-12-12 15:57:26 ----A---- C:\Windows\system32\mshtmled.dll
2012-12-12 15:57:25 ----A---- C:\Windows\SYSWOW64\urlmon.dll
2012-12-12 15:57:25 ----A---- C:\Windows\SYSWOW64\url.dll
2012-12-12 15:57:25 ----A---- C:\Windows\SYSWOW64\ieUnatt.exe
2012-12-12 15:57:25 ----A---- C:\Windows\system32\url.dll
2012-12-12 15:57:25 ----A---- C:\Windows\system32\ieUnatt.exe
2012-12-12 15:57:25 ----A---- C:\Windows\system32\ieui.dll
2012-12-12 15:57:24 ----A---- C:\Windows\SYSWOW64\msfeeds.dll
2012-12-12 15:57:24 ----A---- C:\Windows\system32\urlmon.dll
2012-12-12 15:57:24 ----A---- C:\Windows\system32\msfeeds.dll
2012-12-12 15:57:24 ----A---- C:\Windows\system32\jscript9.dll
2012-12-12 15:57:23 ----A---- C:\Windows\SYSWOW64\wininet.dll
2012-12-12 15:57:23 ----A---- C:\Windows\system32\wininet.dll
2012-12-12 15:57:23 ----A---- C:\Windows\system32\jsproxy.dll
2012-12-12 15:57:22 ----A---- C:\Windows\SYSWOW64\jscript9.dll
2012-12-12 15:57:22 ----A---- C:\Windows\SYSWOW64\jscript.dll
2012-12-12 15:57:22 ----A---- C:\Windows\SYSWOW64\iertutil.dll
2012-12-12 15:57:22 ----A---- C:\Windows\system32\vbscript.dll
2012-12-12 15:57:22 ----A---- C:\Windows\system32\jscript.dll
2012-12-12 15:57:22 ----A---- C:\Windows\system32\iertutil.dll
2012-12-12 15:57:21 ----A---- C:\Windows\SYSWOW64\jsproxy.dll
2012-12-12 15:57:20 ----A---- C:\Windows\SYSWOW64\mshtml.dll
2012-12-12 15:57:18 ----A---- C:\Windows\system32\mshtml.dll
2012-12-12 15:57:18 ----A---- C:\Windows\system32\ieframe.dll
2012-12-12 15:57:17 ----A---- C:\Windows\SYSWOW64\ieframe.dll
2012-12-12 12:40:51 ----A---- C:\Windows\SYSWOW64\tzres.dll
2012-12-12 12:40:51 ----A---- C:\Windows\system32\tzres.dll
2012-12-12 12:40:45 ----A---- C:\Windows\system32\win32k.sys
2012-12-12 12:40:36 ----A---- C:\Windows\system32\KernelBase.dll
2012-12-12 12:40:35 ----A---- C:\Windows\SYSWOW64\kernel32.dll
2012-12-12 12:40:35 ----A---- C:\Windows\system32\winsrv.dll
2012-12-12 12:40:35 ----A---- C:\Windows\system32\kernel32.dll
2012-12-12 12:40:35 ----A---- C:\Windows\system32\conhost.exe
2012-12-12 12:40:34 ----A---- C:\Windows\SYSWOW64\KernelBase.dll
2012-12-12 12:40:33 ----A---- C:\Windows\SYSWOW64\wow32.dll
2012-12-12 12:40:33 ----A---- C:\Windows\SYSWOW64\setup16.exe
2012-12-12 12:40:33 ----A---- C:\Windows\SYSWOW64\ntvdm64.dll
2012-12-12 12:40:33 ----A---- C:\Windows\system32\wow64win.dll
2012-12-12 12:40:33 ----A---- C:\Windows\system32\wow64cpu.dll
2012-12-12 12:40:33 ----A---- C:\Windows\system32\wow64.dll
2012-12-12 12:40:33 ----A---- C:\Windows\system32\ntvdm64.dll
2012-12-12 12:40:32 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-sysinfo-l1-1-0.dll
2012-12-12 12:40:32 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-processthreads-l1-1-0.dll
2012-12-12 12:40:32 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-file-l1-1-0.dll
2012-12-12 12:40:32 ----AH---- C:\Windows\system32\api-ms-win-core-heap-l1-1-0.dll
2012-12-12 12:40:32 ----AH---- C:\Windows\system32\api-ms-win-core-file-l1-1-0.dll
2012-12-12 12:40:32 ----A---- C:\Windows\SYSWOW64\instnm.exe
2012-12-12 12:40:31 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-synch-l1-1-0.dll
2012-12-12 12:40:31 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-string-l1-1-0.dll
2012-12-12 12:40:31 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-rtlsupport-l1-1-0.dll
2012-12-12 12:40:31 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-profile-l1-1-0.dll
2012-12-12 12:40:31 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-processenvironment-l1-1-0.dll
2012-12-12 12:40:31 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-namedpipe-l1-1-0.dll
2012-12-12 12:40:31 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-misc-l1-1-0.dll
2012-12-12 12:40:31 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-memory-l1-1-0.dll
2012-12-12 12:40:31 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-localregistry-l1-1-0.dll
2012-12-12 12:40:31 ----AH---- C:\Windows\system32\api-ms-win-security-base-l1-1-0.dll
2012-12-12 12:40:31 ----AH---- C:\Windows\system32\api-ms-win-core-xstate-l1-1-0.dll
2012-12-12 12:40:31 ----AH---- C:\Windows\system32\api-ms-win-core-util-l1-1-0.dll
2012-12-12 12:40:31 ----AH---- C:\Windows\system32\api-ms-win-core-threadpool-l1-1-0.dll
2012-12-12 12:40:31 ----AH---- C:\Windows\system32\api-ms-win-core-sysinfo-l1-1-0.dll
2012-12-12 12:40:31 ----AH---- C:\Windows\system32\api-ms-win-core-string-l1-1-0.dll
2012-12-12 12:40:31 ----AH---- C:\Windows\system32\api-ms-win-core-rtlsupport-l1-1-0.dll
2012-12-12 12:40:31 ----AH---- C:\Windows\system32\api-ms-win-core-profile-l1-1-0.dll
2012-12-12 12:40:31 ----AH---- C:\Windows\system32\api-ms-win-core-processthreads-l1-1-0.dll
2012-12-12 12:40:31 ----AH---- C:\Windows\system32\api-ms-win-core-processenvironment-l1-1-0.dll
2012-12-12 12:40:31 ----AH---- C:\Windows\system32\api-ms-win-core-namedpipe-l1-1-0.dll
2012-12-12 12:40:31 ----AH---- C:\Windows\system32\api-ms-win-core-misc-l1-1-0.dll
2012-12-12 12:40:31 ----AH---- C:\Windows\system32\api-ms-win-core-memory-l1-1-0.dll
2012-12-12 12:40:30 ----AH---- C:\Windows\SYSWOW64\api-ms-win-security-base-l1-1-0.dll
2012-12-12 12:40:30 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-xstate-l1-1-0.dll
2012-12-12 12:40:30 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-util-l1-1-0.dll
2012-12-12 12:40:30 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-threadpool-l1-1-0.dll
2012-12-12 12:40:30 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-localization-l1-1-0.dll
2012-12-12 12:40:30 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-libraryloader-l1-1-0.dll
2012-12-12 12:40:30 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-io-l1-1-0.dll
2012-12-12 12:40:30 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-interlocked-l1-1-0.dll
2012-12-12 12:40:30 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-heap-l1-1-0.dll
2012-12-12 12:40:30 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-handle-l1-1-0.dll
2012-12-12 12:40:30 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-fibers-l1-1-0.dll
2012-12-12 12:40:30 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-errorhandling-l1-1-0.dll
2012-12-12 12:40:30 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-delayload-l1-1-0.dll
2012-12-12 12:40:30 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-debug-l1-1-0.dll
2012-12-12 12:40:30 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-datetime-l1-1-0.dll
2012-12-12 12:40:30 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-console-l1-1-0.dll
2012-12-12 12:40:30 ----AH---- C:\Windows\system32\api-ms-win-core-synch-l1-1-0.dll
2012-12-12 12:40:30 ----AH---- C:\Windows\system32\api-ms-win-core-localregistry-l1-1-0.dll
2012-12-12 12:40:30 ----AH---- C:\Windows\system32\api-ms-win-core-localization-l1-1-0.dll
2012-12-12 12:40:30 ----AH---- C:\Windows\system32\api-ms-win-core-libraryloader-l1-1-0.dll
2012-12-12 12:40:30 ----AH---- C:\Windows\system32\api-ms-win-core-io-l1-1-0.dll
2012-12-12 12:40:30 ----AH---- C:\Windows\system32\api-ms-win-core-interlocked-l1-1-0.dll
2012-12-12 12:40:30 ----AH---- C:\Windows\system32\api-ms-win-core-handle-l1-1-0.dll
2012-12-12 12:40:30 ----AH---- C:\Windows\system32\api-ms-win-core-fibers-l1-1-0.dll
2012-12-12 12:40:30 ----AH---- C:\Windows\system32\api-ms-win-core-errorhandling-l1-1-0.dll
2012-12-12 12:40:30 ----AH---- C:\Windows\system32\api-ms-win-core-delayload-l1-1-0.dll
2012-12-12 12:40:30 ----AH---- C:\Windows\system32\api-ms-win-core-debug-l1-1-0.dll
2012-12-12 12:40:30 ----AH---- C:\Windows\system32\api-ms-win-core-datetime-l1-1-0.dll
2012-12-12 12:40:30 ----AH---- C:\Windows\system32\api-ms-win-core-console-l1-1-0.dll
2012-12-12 12:40:29 ----A---- C:\Windows\SYSWOW64\user.exe
2012-12-12 12:40:22 ----A---- C:\Windows\SYSWOW64\dpnet.dll
2012-12-12 12:40:22 ----A---- C:\Windows\system32\dpnet.dll
2012-12-12 10:40:08 ----A---- C:\Windows\SYSWOW64\FlashPlayerInstaller.exe
2012-12-08 21:04:51 ----D---- C:\Program Files (x86)\AMD AVT
2012-12-08 19:43:42 ----D---- C:\ProgramData\Intel

======List of files/folders modified in the last 1 month======

2013-01-06 17:17:59 ----D---- C:\Windows\Prefetch
2013-01-06 17:17:57 ----D---- C:\Windows\Temp
2013-01-06 17:17:55 ----RD---- C:\Program Files
2013-01-06 17:14:06 ----D---- C:\Users\Arcane\AppData\Roaming\Skype
2013-01-06 17:11:02 ----D---- C:\Windows\system32\config
2013-01-06 16:00:18 ----D---- C:\Windows\system32\catroot2
2013-01-06 12:17:12 ----D---- C:\Windows\System32
2013-01-06 12:17:12 ----D---- C:\Windows\inf
2013-01-06 12:17:12 ----A---- C:\Windows\system32\PerfStringBackup.INI
2013-01-06 00:57:43 ----D---- C:\Program Files (x86)\JDownloader
2013-01-05 14:03:23 ----SHD---- C:\System Volume Information
2013-01-03 13:15:33 ----D---- C:\Windows\rescache
2013-01-02 19:40:28 ----RSD---- C:\Windows\assembly
2013-01-02 19:40:11 ----D---- C:\Windows
2013-01-02 19:39:25 ----D---- C:\Windows\Logs
2013-01-02 19:29:58 ----D---- C:\Users\Arcane\AppData\Roaming\Winamp
2013-01-01 22:17:42 ----D---- C:\Users\Arcane\AppData\Roaming\TS3Client
2013-01-01 21:34:16 ----SHD---- C:\Windows\Installer
2013-01-01 21:34:16 ----SHD---- C:\Config.Msi
2013-01-01 21:34:15 ----RD---- C:\Program Files (x86)
2012-12-29 22:50:55 ----D---- C:\Windows\system32\NDF
2012-12-28 14:21:10 ----SD---- C:\Users\Arcane\AppData\Roaming\Microsoft
2012-12-28 04:15:42 ----D---- C:\Windows\system32\drivers\etc
2012-12-28 01:58:09 ----D---- C:\Windows\SysWOW64
2012-12-28 01:58:03 ----D---- C:\Windows\system32\drivers
2012-12-28 01:57:59 ----D---- C:\Windows\system32\catroot
2012-12-28 01:57:57 ----D---- C:\Windows\system32\DriverStore
2012-12-27 17:11:52 ----D---- C:\Windows\debug
2012-12-27 17:06:55 ----D---- C:\Program Files\CCleaner
2012-12-25 12:54:45 ----D---- C:\Users\Arcane\AppData\Roaming\Adobe
2012-12-21 15:06:32 ----D---- C:\Windows\winsxs
2012-12-21 15:04:21 ----D---- C:\Windows\SYSWOW64\wbem
2012-12-21 15:04:21 ----D---- C:\Windows\SYSWOW64\en-US
2012-12-21 15:04:21 ----D---- C:\Windows\SYSWOW64\cs-CZ
2012-12-21 15:04:20 ----D---- C:\Windows\system32\wbem
2012-12-21 15:04:20 ----D---- C:\Windows\system32\en-US
2012-12-21 15:04:20 ----D---- C:\Windows\system32\drivers\en-US
2012-12-21 15:04:20 ----D---- C:\Windows\system32\cs-CZ
2012-12-21 15:04:20 ----D---- C:\Windows\PolicyDefinitions
2012-12-20 07:34:01 ----D---- C:\Program Files (x86)\Common Files
2012-12-19 12:32:02 ----D---- C:\Program Files\Opera x64
2012-12-19 12:32:02 ----D---- C:\Program Files (x86)\Opera x64
2012-12-15 21:25:21 ----HD---- C:\ProgramData
2012-12-13 19:52:38 ----D---- C:\Windows\Tasks
2012-12-13 19:52:38 ----D---- C:\Windows\system32\wfp
2012-12-13 19:51:54 ----D---- C:\Windows\system32\Tasks
2012-12-13 19:51:48 ----D---- C:\Windows\system32\CodeIntegrity
2012-12-13 19:51:46 ----D---- C:\Windows\Downloaded Program Files
2012-12-13 19:51:46 ----D---- C:\Windows\AutoKMS
2012-12-13 19:51:44 ----D---- C:\Program Files\SystemRequirementsLab
2012-12-13 19:49:46 ----D---- C:\Windows\registration
2012-12-13 19:49:20 ----D---- C:\Program Files\Common Files
2012-12-13 19:49:19 ----D---- C:\Program Files\ATI
2012-12-13 19:49:17 ----D---- C:\Program Files (x86)\Intel
2012-12-13 19:49:07 ----D---- C:\Program Files (x86)\ATI Technologies
2012-12-13 19:48:38 ----D---- C:\AMD
2012-12-13 19:31:23 ----D---- C:\Users\Arcane\AppData\Roaming\ATI
2012-12-13 13:55:20 ----D---- C:\Windows\AppPatch
2012-12-13 13:55:19 ----D---- C:\Program Files (x86)\Internet Explorer
2012-12-13 13:55:18 ----D---- C:\Windows\SYSWOW64\migration
2012-12-13 13:55:16 ----D---- C:\Windows\system32\migration
2012-12-13 13:55:16 ----D---- C:\Program Files\Internet Explorer
2012-12-12 16:02:23 ----D---- C:\ProgramData\Microsoft Help
2012-12-12 15:59:26 ----A---- C:\Windows\system32\MRT.exe
2012-12-12 10:40:18 ----A---- C:\Windows\SYSWOW64\FlashPlayerApp.exe
2012-12-11 16:09:09 ----D---- C:\Program Files (x86)\QIP 2012
2012-12-10 19:00:00 ----A---- C:\Windows\system32\ff_vfw.dll
2012-12-09 01:30:50 ----D---- C:\Drivers
2012-12-09 01:22:49 ----D---- C:\Program Files\Common Files\Intel
2012-12-08 21:04:52 ----D---- C:\ProgramData\AMD
2012-12-07 15:16:39 ----D---- C:\Users\Arcane\AppData\Roaming\DAEMON Tools Lite

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 rdyboost;ReadyBoost; C:\Windows\System32\drivers\rdyboost.sys [2010-11-20 213888]
R1 aswRdr;aswRdr; C:\Windows\System32\Drivers\aswrdr2.sys [2012-10-15 54072]
R1 aswSnx;aswSnx; C:\Windows\system32\drivers\aswSnx.sys [2012-10-30 984144]
R1 aswSP;aswSP; C:\Windows\system32\drivers\aswSP.sys [2012-10-30 370288]
R1 aswTdi;avast! Network Shield Support; C:\Windows\system32\drivers\aswTdi.sys [2012-10-30 59728]
R1 dtsoftbus01;DAEMON Tools Virtual Bus Driver; C:\Windows\system32\DRIVERS\dtsoftbus01.sys [2012-10-30 283200]
R1 vwififlt;Virtual WiFi Filter Driver; C:\Windows\system32\DRIVERS\vwififlt.sys [2009-07-14 59904]
R2 aksdf;aksdf; \??\C:\Windows\system32\drivers\aksdf.sys [2011-11-22 78208]
R2 aksfridge;aksfridge; \??\C:\Windows\system32\drivers\aksfridge.sys [2011-11-22 139592]
R2 aswFsBlk;aswFsBlk; C:\Windows\system32\drivers\aswFsBlk.sys [2012-10-30 25232]
R2 aswMonFlt;aswMonFlt; \??\C:\Windows\system32\drivers\aswMonFlt.sys [2012-10-30 71600]
R2 hardlock;hardlock; \??\C:\Windows\system32\drivers\hardlock.sys [2011-09-28 321536]
R3 amdkmdag;amdkmdag; C:\Windows\system32\DRIVERS\atikmdag.sys [2012-06-11 10248192]
R3 amdkmdap;amdkmdap; C:\Windows\system32\DRIVERS\atikmpag.sys [2012-06-11 367616]
R3 athr;Atheros Extensible Wireless LAN device driver; C:\Windows\system32\DRIVERS\athrx.sys [2010-11-24 2673664]
R3 BthEnum;Ovladač pro Bluetooth Request Block; C:\Windows\system32\drivers\BthEnum.sys [2009-07-14 41984]
R3 BthPan;Zařízení Bluetooth (síť PAN); C:\Windows\system32\DRIVERS\bthpan.sys [2009-07-14 118784]
R3 BTHUSB;Ovladač rozhraní USB radiostanice Bluetooth; C:\Windows\System32\Drivers\BTHUSB.sys [2011-04-28 80384]
R3 cbfs3;EldoS Callback File System driver v3; C:\Windows\system32\DRIVERS\cbfs3.sys [2012-04-09 352144]
R3 CnxtHdAudService;Conexant UAA Function Driver for High Definition Audio Service; C:\Windows\system32\drivers\CHDRT64.sys [2011-02-14 1581184]
R3 GEARAspiWDM;GEAR ASPI Filter Driver; C:\Windows\system32\DRIVERS\GEARAspiWDM.sys [2012-08-21 33240]
R3 IntcDAud;Intel(R) Display Audio; C:\Windows\system32\DRIVERS\IntcDAud.sys [2010-10-15 317440]
R3 intelkmd;intelkmd; C:\Windows\system32\DRIVERS\igdpmd64.sys [2011-03-25 12262336]
R3 L1C;NDIS Miniport Driver for Atheros AR813x/AR815x PCI-E Ethernet Controller; C:\Windows\system32\DRIVERS\L1C62x64.sys [2010-10-21 76912]
R3 ManyCam;ManyCam Virtual Webcam; C:\Windows\system32\DRIVERS\mcvidrv_x64.sys [2012-10-11 44928]
R3 mcaudrv_simple;ManyCam Virtual Microphone; C:\Windows\system32\drivers\mcaudrv_x64.sys [2012-10-11 29696]
R3 MEIx64;Intel(R) Management Engine Interface ; C:\Windows\system32\DRIVERS\HECIx64.sys [2010-10-19 56344]
R3 nusb3hub;Renesas Electronics USB 3.0 Hub Driver; C:\Windows\system32\DRIVERS\nusb3hub.sys [2010-12-10 80384]
R3 nusb3xhc;Renesas Electronics USB 3.0 Host Controller Driver; C:\Windows\system32\DRIVERS\nusb3xhc.sys [2010-12-10 181248]
R3 RFCOMM;Zařízení Bluetooth (RFCOMM protokol TDI); C:\Windows\system32\DRIVERS\rfcomm.sys [2009-07-14 158720]
R3 SynTP;Synaptics TouchPad Driver; C:\Windows\system32\DRIVERS\SynTP.sys [2010-12-17 1404464]
R3 USBAAPL64;Apple Mobile USB Driver; C:\Windows\System32\Drivers\usbaapl64.sys [2012-09-28 53760]
R3 WinUsb;WinUsb; C:\Windows\system32\DRIVERS\WinUsb.sys [2010-11-20 41984]
S3 BTHPORT;Ovladač portu Bluetooth; C:\Windows\System32\Drivers\BTHport.sys [2012-07-06 552960]
S3 igfx;igfx; C:\Windows\system32\DRIVERS\igdkmd64.sys [2011-03-25 12262336]
S3 pciide;pciide; C:\Windows\system32\drivers\pciide.sys [2009-07-14 12352]
S3 RdpVideoMiniport;Remote Desktop Video Miniport Driver; C:\Windows\System32\drivers\rdpvideominiport.sys [2012-08-23 19456]
S3 RSUSBVSTOR;RtsUVStor.Sys Realtek USB Card Reader; C:\Windows\System32\Drivers\RtsUVStor.sys [2010-09-30 299520]
S3 TsUsbFlt;@%SystemRoot%\system32\drivers\tsusbflt.sys,-1; C:\Windows\System32\drivers\tsusbflt.sys [2012-08-23 57856]
S3 xusb21;Xbox 360 Wireless Receiver Driver Service 21; C:\Windows\system32\DRIVERS\xusb21.sys [2009-04-08 68992]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 AdobeARMservice;Adobe Acrobat Update Service; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [2012-09-23 65192]
R2 AMD External Events Utility;AMD External Events Utility; C:\Windows\system32\atiesrxx.exe [2012-06-11 239616]
R2 Apple Mobile Device;Apple Mobile Device; C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe [2012-08-11 55184]
R2 avast! Antivirus;avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [2012-10-30 44808]
R2 Bonjour Service;Bonjour Service; C:\Program Files\Bonjour\mDNSResponder.exe [2011-08-30 462184]
R2 hasplms;Sentinel Local License Manager; C:\Windows\system32\hasplms.exe [2011-12-30 4889032]
R2 HiPatchService;Hi-Rez Studios Authenticate and Update Service; D:\Arcane\Hry\Smite\HiPatchService.exe [2012-10-09 8704]
R3 iPod Service;iPod Service; C:\Program Files\iPod\bin\iPodService.exe [2012-12-12 641504]
R3 osppsvc;Office Software Protection Platform; C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE [2010-01-09 4925184]
R3 Steam Client Service;Steam Client Service; C:\Program Files (x86)\Common Files\Steam\SteamService.exe [2012-12-20 541760]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
S2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2010-03-18 138576]
S2 SkypeUpdate;Skype Updater; C:\Program Files (x86)\Skype\Updater\Updater.exe [2012-11-09 160944]
S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service; C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2012-12-12 250808]
S3 aspnet_state;Stavová služba ASP.NET; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\aspnet_state.exe [2010-03-18 44376]
S3 cphs;Intel(R) Content Protection HECI Service; C:\Windows\SysWow64\IntelCpHeciSvc.exe [2012-03-19 276248]
S3 Microsoft SharePoint Workspace Audit Service;Microsoft SharePoint Workspace Audit Service; C:\Program Files\Microsoft Office\Office14\GROOVE.EXE [2012-09-20 50899608]
S3 ose64;Office 64 Source Engine; C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2010-01-09 174440]
S3 SwitchBoard;SwitchBoard; C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [2010-02-19 517096]
S3 WatAdminSvc;@%SystemRoot%\system32\Wat\WatUX.exe,-601; C:\Windows\system32\Wat\WatAdminSvc.exe [2012-10-18 1255736]
S4 NetMsmqActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8195; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2010-03-18 124240]
S4 NetPipeActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8197; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2010-03-18 124240]
S4 NetTcpActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8199; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2010-03-18 124240]

-----------------EOF-----------------

[Rudy]

Zdravím!
Log vypadá OK. Na zkoušku vypněte antivir a aut. aktualizace systému.

[Johny36]

Tak aktualizace jsem vypnul, nastavil jsem je at se mě to ptá jestli chci stáhnout a nainstalovat nové, ale nevím jestli ten antivir něčemu pomůže. Předtím jsem měl trial verzi noda32 a dělalo to to samé, byla to jedna z prvních věcí co jsem zkoušel, vypnout ho. Každopádně moc se mi nelíbí fakt že bych měl bát bez antiviru Doufal jsem že tam nějaká havěť bude a to vyřeší problém.

Zkoušel jsem i různé verze driverů na grafiku, zkusil jsem jak defaultně dodávané výrobcem ntb, tak i jiné, nepodepsané výrobcem a problém stále přetrvává. Docela mě to trápí, na to že to je poměrně nový ntb a ted i čerstvě reinstalovaný.

[Rudy]

Jde o to, že si AV může v danou chvíli "sahat" na internet pro aktualizaci a má nějaký problém. Proto se zvýší zátěž. Stačí, když AV vypnete v okamžiku, kdy problém nastane, abyste neměl nechráněné PC.

[Johny36]

dobrá zkusím to a dám vědět, nicméně to neřeší příčinu. Uprostřed hry vypínat AV je dost nepraktické každopádně děkuji

[Rudy]

Zatím není zač. Jinak nepřijdeme na to, co to způsobuje.

[Johny36]

Tak jsem hrál hru, začlo se to sekat, okamžitě jsem vypnul antivirus, seká se to stále.

[Rudy]

Dejte log ComboFix:

Stahnete a ulozte nejlepe na plochu ComboFix: http://download.bleepingcomputer.com/sUBs/ComboFix.exe

pote spustte aplikaci pod uctem s administratorskym opravnenim

hned po startu se zobrazi obrazovka s licencnimi podminkami, pokracujte kliknutim na tlacitko Ano.

v klidu si postavte na kafe (cela akce trva cca. 5-10 minut, nekdy i dele - dle toho, o jak rychly stroj se

jedna a kolika soubory se skener bude muset prodirat), behem skenu se nepokousejte spoustet zadne jine

aplikace ani nic jineho

behem skenovani nepropadejte panice, vas stroj muze byt restartovan (predevsim pri prvni aplikaci skeneru)

upozorneni: pokud pouzivate antispyware s rezidentnim stitem, prepnete jeho rezidentni stit do Install Mode,

pripadne jej po dobu skenu uplne deaktivujte, protoze dochazi pri skenu a vymazu pripadneho malware k

nezadoucim kolizim s rezidentem antispyware

[Johny36]

ComboFix 13-01-05.01 - Arcane 06.01.2013 23:14:37.1.4 - x64
Microsoft Windows 7 Home Premium 6.1.7601.1.1250.420.1029.18.8136.5629 [GMT 1:00]
Spuštěný z: c:\users\Arcane\Desktop\ComboFix.exe
AV: avast! Antivirus *Disabled/Updated* {2B2D1395-420B-D5C9-657E-930FE358FC3C}
SP: avast! Antivirus *Disabled/Updated* {904CF271-6431-DA47-5FCE-A87D98DFB681}
SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
* Vytvořen nový Bod Obnovení
.
.
((((((((((((((((((((((((((((((((((((((( Ostatní výmazy )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
c:\program files (x86)\QIP 2012\Core\MousePhone.dll
.
.
((((((((((((((((((((((((( Soubory vytvořené od 2012-12-06 do 2013-01-06 )))))))))))))))))))))))))))))))
.
.
2013-01-06 22:20 . 2013-01-06 22:20 -------- d-----w- c:\users\Default\AppData\Local\temp
2013-01-06 16:17 . 2013-01-06 16:18 -------- d-----w- C:\rsit
2013-01-06 16:17 . 2013-01-06 16:17 -------- d-----w- c:\program files\trend micro
2013-01-05 16:18 . 2013-01-05 16:18 -------- d-----w- c:\users\Arcane\.netbeans-derby
2013-01-04 19:51 . 2012-11-08 17:24 9125352 ----a-w- c:\programdata\Microsoft\Windows Defender\Definition Updates\{D77353CE-B59F-452D-BCC7-A6A256B467C1}\mpengine.dll
2013-01-01 20:34 . 2013-01-01 20:34 -------- d-----w- c:\users\Arcane\AppData\Local\Apple_Inc
2013-01-01 20:34 . 2013-01-01 20:34 -------- d-----w- c:\program files (x86)\iPhone Configuration Utility
2012-12-28 01:32 . 2012-12-28 03:21 -------- d-----w- c:\users\Arcane\AppData\Roaming\redsn0w
2012-12-28 01:12 . 2012-12-28 01:13 -------- d-----w- c:\users\Arcane\.shsh
2012-12-28 00:58 . 2012-12-28 00:58 -------- d-----w- c:\users\Arcane\AppData\Local\Macroplant_LLC
2012-12-28 00:58 . 2012-04-09 15:27 190480 ----a-w- c:\windows\system32\CbFsMntNtf3.dll
2012-12-28 00:58 . 2012-04-09 15:27 158224 ----a-w- c:\windows\SysWow64\CbFsMntNtf3.dll
2012-12-28 00:58 . 2012-04-09 15:27 141328 ----a-w- c:\windows\system32\CbFsNetRdr3.dll
2012-12-28 00:58 . 2012-04-09 15:27 223760 ----a-w- c:\windows\SysWow64\CbFsNetRdr3.dll
2012-12-28 00:57 . 2012-04-09 15:27 352144 ----a-w- c:\windows\system32\drivers\cbfs3.sys
2012-12-28 00:57 . 2012-12-28 00:57 -------- d-----w- c:\program files (x86)\iExplorer
2012-12-20 14:56 . 2012-12-27 17:55 -------- d-----w- c:\users\Arcane\AppData\Roaming\Media Player Classic
2012-12-20 14:55 . 2012-06-09 18:21 206336 ----a-w- c:\windows\system32\unrar64.dll
2012-12-20 14:55 . 2011-12-07 18:37 148992 ----a-w- c:\windows\system32\lagarith.dll
2012-12-20 14:55 . 2012-12-20 14:55 -------- d-----w- c:\program files\K-Lite Codec Pack x64
2012-12-20 14:53 . 2011-12-07 18:32 216064 ----a-w- c:\windows\SysWow64\lagarith.dll
2012-12-20 14:53 . 2011-06-24 15:44 243200 ----a-w- c:\windows\SysWow64\xvidvfw.dll
2012-12-20 14:53 . 2011-06-24 15:28 650752 ----a-w- c:\windows\SysWow64\xvidcore.dll
2012-12-20 14:53 . 2011-12-21 18:14 151552 ----a-w- c:\windows\SysWow64\ac3acm.acm
2012-12-20 14:53 . 2012-12-10 18:00 112640 ----a-w- c:\windows\SysWow64\ff_vfw.dll
2012-12-20 14:53 . 2012-12-20 14:54 -------- d-----w- c:\program files (x86)\K-Lite Codec Pack
2012-12-20 06:34 . 2012-12-20 14:42 -------- d-----w- c:\program files (x86)\Common Files\Steam
2012-12-15 20:25 . 2012-12-15 20:25 -------- d-----w- c:\programdata\ATI
2012-12-14 09:22 . 2012-12-14 09:23 -------- d-----w- c:\programdata\34BE82C4-E596-4e99-A191-52C6199EBF69
2012-12-14 09:22 . 2012-12-14 09:23 -------- d-----w- c:\program files\iTunes
2012-12-14 09:22 . 2012-12-14 09:23 -------- d-----w- c:\program files (x86)\iTunes
2012-12-14 09:22 . 2012-12-14 09:22 -------- d-----w- c:\program files\iPod
2012-12-13 18:31 . 2012-12-13 18:31 -------- d-----w- C:\Intel
2012-12-13 18:31 . 2012-12-15 20:25 -------- d-----w- c:\program files (x86)\Common Files\ATI Technologies
2012-12-13 18:31 . 2012-12-13 18:31 -------- d-----w- c:\program files\Common Files\ATI Technologies
2012-12-13 18:29 . 2012-12-15 20:24 -------- d-----w- c:\program files\ATI Technologies
2012-12-12 11:40 . 2012-11-09 05:45 2048 ----a-w- c:\windows\system32\tzres.dll
2012-12-12 10:48 . 2012-12-12 10:48 -------- d-----w- c:\users\Arcane\.worldoflogs
2012-12-12 09:40 . 2012-12-12 09:40 16363960 ----a-w- c:\windows\SysWow64\FlashPlayerInstaller.exe
2012-12-08 20:04 . 2012-12-08 20:04 -------- d-----w- c:\program files (x86)\AMD AVT
2012-12-08 18:43 . 2012-12-08 18:43 -------- d-----w- c:\programdata\Intel
.
.
.
(((((((((((((((((((((((((((((((((((((((( Find3M výpis ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2012-12-12 14:59 . 2012-10-18 18:30 67413224 ----a-w- c:\windows\system32\MRT.exe
2012-12-12 09:40 . 2012-10-18 18:19 73656 ----a-w- c:\windows\SysWow64\FlashPlayerCPLApp.cpl
2012-12-12 09:40 . 2012-10-18 18:19 697272 ----a-w- c:\windows\SysWow64\FlashPlayerApp.exe
2012-12-10 18:00 . 2012-10-22 16:36 127488 ----a-w- c:\windows\system32\ff_vfw.dll
2012-10-30 22:51 . 2012-10-27 16:16 59728 ----a-w- c:\windows\system32\drivers\aswTdi.sys
2012-10-30 22:51 . 2012-10-27 16:17 370288 ----a-w- c:\windows\system32\drivers\aswSP.sys
2012-10-30 22:51 . 2012-10-27 16:16 984144 ----a-w- c:\windows\system32\drivers\aswSnx.sys
2012-10-30 22:51 . 2012-10-27 16:16 71600 ----a-w- c:\windows\system32\drivers\aswMonFlt.sys
2012-10-30 22:51 . 2012-10-27 16:17 25232 ----a-w- c:\windows\system32\drivers\aswFsBlk.sys
2012-10-30 22:51 . 2012-10-27 16:16 41224 ----a-w- c:\windows\avastSS.scr
2012-10-30 22:50 . 2012-10-27 16:16 227648 ----a-w- c:\windows\SysWow64\aswBoot.exe
2012-10-30 22:50 . 2012-10-27 16:16 285328 ----a-w- c:\windows\system32\aswBoot.exe
2012-10-30 17:45 . 2012-10-30 17:45 283200 ----a-w- c:\windows\system32\drivers\dtsoftbus01.sys
2012-10-25 02:12 . 2012-10-25 02:12 94208 ----a-w- c:\windows\SysWow64\QuickTimeVR.qtx
2012-10-25 02:12 . 2012-10-25 02:12 69632 ----a-w- c:\windows\SysWow64\QuickTime.qts
2012-10-19 09:03 . 2012-10-19 09:03 772592 ----a-w- c:\windows\SysWow64\npDeployJava1.dll
2012-10-19 09:03 . 2012-10-19 09:03 687600 ----a-w- c:\windows\SysWow64\deployJava1.dll
2012-10-19 08:57 . 2012-10-19 08:58 916456 ----a-w- c:\windows\system32\deployJava1.dll
2012-10-19 08:57 . 2012-10-19 08:58 289768 ----a-w- c:\windows\system32\javaws.exe
2012-10-19 08:57 . 2012-10-19 08:58 1034216 ----a-w- c:\windows\system32\npDeployJava1.dll
2012-10-19 08:57 . 2012-10-19 08:58 189416 ----a-w- c:\windows\system32\javaw.exe
2012-10-19 08:57 . 2012-10-19 08:58 188904 ----a-w- c:\windows\system32\java.exe
2012-10-19 08:57 . 2012-10-19 08:58 108008 ----a-w- c:\windows\system32\WindowsAccessBridge-64.dll
2012-10-19 08:47 . 2012-10-19 08:47 86528 ----a-w- c:\windows\SysWow64\iesysprep.dll
2012-10-19 08:47 . 2012-10-19 08:47 76800 ----a-w- c:\windows\SysWow64\SetIEInstalledDate.exe
2012-10-19 08:47 . 2012-10-19 08:47 74752 ----a-w- c:\windows\SysWow64\RegisterIEPKEYs.exe
2012-10-19 08:47 . 2012-10-19 08:47 48640 ----a-w- c:\windows\SysWow64\mshtmler.dll
2012-10-19 08:47 . 2012-10-19 08:47 161792 ----a-w- c:\windows\SysWow64\msls31.dll
2012-10-19 08:47 . 2012-10-19 08:47 110592 ----a-w- c:\windows\SysWow64\IEAdvpack.dll
2012-10-19 08:47 . 2012-10-19 08:47 74752 ----a-w- c:\windows\SysWow64\iesetup.dll
2012-10-19 08:47 . 2012-10-19 08:47 63488 ----a-w- c:\windows\SysWow64\tdc.ocx
2012-10-19 08:47 . 2012-10-19 08:47 367104 ----a-w- c:\windows\SysWow64\html.iec
2012-10-19 08:47 . 2012-10-19 08:47 23552 ----a-w- c:\windows\SysWow64\licmgr10.dll
2012-10-19 08:47 . 2012-10-19 08:47 91648 ----a-w- c:\windows\system32\SetIEInstalledDate.exe
2012-10-19 08:47 . 2012-10-19 08:47 89088 ----a-w- c:\windows\system32\RegisterIEPKEYs.exe
2012-10-19 08:47 . 2012-10-19 08:47 89088 ----a-w- c:\windows\system32\ie4uinit.exe
2012-10-19 08:47 . 2012-10-19 08:47 85504 ----a-w- c:\windows\system32\iesetup.dll
2012-10-19 08:47 . 2012-10-19 08:47 82432 ----a-w- c:\windows\system32\icardie.dll
2012-10-19 08:47 . 2012-10-19 08:47 76800 ----a-w- c:\windows\system32\tdc.ocx
2012-10-19 08:47 . 2012-10-19 08:47 65024 ----a-w- c:\windows\system32\pngfilt.dll
2012-10-19 08:47 . 2012-10-19 08:47 55296 ----a-w- c:\windows\system32\msfeedsbs.dll
2012-10-19 08:47 . 2012-10-19 08:47 534528 ----a-w- c:\windows\system32\ieapfltr.dll
2012-10-19 08:47 . 2012-10-19 08:47 49664 ----a-w- c:\windows\system32\imgutil.dll
2012-10-19 08:47 . 2012-10-19 08:47 48640 ----a-w- c:\windows\system32\mshtmler.dll
2012-10-19 08:47 . 2012-10-19 08:47 452608 ----a-w- c:\windows\system32\dxtmsft.dll
2012-10-19 08:47 . 2012-10-19 08:47 448512 ----a-w- c:\windows\system32\html.iec
2012-10-19 08:47 . 2012-10-19 08:47 403248 ----a-w- c:\windows\system32\iedkcs32.dll
2012-10-19 08:47 . 2012-10-19 08:47 39936 ----a-w- c:\windows\system32\iernonce.dll
2012-10-19 08:47 . 2012-10-19 08:47 3695416 ----a-w- c:\windows\system32\ieapfltr.dat
2012-10-19 08:47 . 2012-10-19 08:47 35840 ----a-w- c:\windows\SysWow64\imgutil.dll
2012-10-19 08:47 . 2012-10-19 08:47 30720 ----a-w- c:\windows\system32\licmgr10.dll
2012-10-19 08:47 . 2012-10-19 08:47 282112 ----a-w- c:\windows\system32\dxtrans.dll
2012-10-19 08:47 . 2012-10-19 08:47 267776 ----a-w- c:\windows\system32\ieaksie.dll
2012-10-19 08:47 . 2012-10-19 08:47 249344 ----a-w- c:\windows\system32\webcheck.dll
2012-10-19 08:47 . 2012-10-19 08:47 222208 ----a-w- c:\windows\system32\msls31.dll
2012-10-19 08:47 . 2012-10-19 08:47 197120 ----a-w- c:\windows\system32\msrating.dll
2012-10-19 08:47 . 2012-10-19 08:47 165888 ----a-w- c:\windows\system32\iexpress.exe
2012-10-19 08:47 . 2012-10-19 08:47 163840 ----a-w- c:\windows\system32\ieakui.dll
2012-10-19 08:47 . 2012-10-19 08:47 160256 ----a-w- c:\windows\system32\wextract.exe
2012-10-19 08:47 . 2012-10-19 08:47 160256 ----a-w- c:\windows\system32\ieakeng.dll
2012-10-19 08:47 . 2012-10-19 08:47 152064 ----a-w- c:\windows\SysWow64\wextract.exe
2012-10-19 08:47 . 2012-10-19 08:47 150528 ----a-w- c:\windows\SysWow64\iexpress.exe
2012-10-19 08:47 . 2012-10-19 08:47 149504 ----a-w- c:\windows\system32\occache.dll
2012-10-19 08:47 . 2012-10-19 08:47 145920 ----a-w- c:\windows\system32\iepeers.dll
2012-10-19 08:47 . 2012-10-19 08:47 135168 ----a-w- c:\windows\system32\IEAdvpack.dll
2012-10-19 08:47 . 2012-10-19 08:47 12288 ----a-w- c:\windows\system32\mshta.exe
2012-10-19 08:47 . 2012-10-19 08:47 11776 ----a-w- c:\windows\SysWow64\mshta.exe
2012-10-19 08:47 . 2012-10-19 08:47 114176 ----a-w- c:\windows\system32\admparse.dll
2012-10-19 08:47 . 2012-10-19 08:47 111616 ----a-w- c:\windows\system32\iesysprep.dll
2012-10-19 08:47 . 2012-10-19 08:47 10752 ----a-w- c:\windows\system32\msfeedssync.exe
2012-10-19 08:47 . 2012-10-19 08:47 103936 ----a-w- c:\windows\system32\inseng.dll
2012-10-19 08:47 . 2012-10-19 08:47 101888 ----a-w- c:\windows\SysWow64\admparse.dll
2012-10-19 01:25 . 2009-07-14 02:36 152576 ----a-w- c:\windows\SysWow64\msclmd.dll
2012-10-19 01:25 . 2009-07-14 02:36 175616 ----a-w- c:\windows\system32\msclmd.dll
2012-10-16 08:38 . 2012-11-28 08:11 135168 ----a-w- c:\windows\apppatch\AppPatch64\AcXtrnal.dll
2012-10-16 08:38 . 2012-11-28 08:11 350208 ----a-w- c:\windows\apppatch\AppPatch64\AcLayers.dll
2012-10-16 07:39 . 2012-11-28 08:11 561664 ----a-w- c:\windows\apppatch\AcLayers.dll
2012-10-15 16:59 . 2012-10-27 16:16 54072 ----a-w- c:\windows\system32\drivers\aswRdr2.sys
2012-10-11 03:08 . 2012-10-11 03:08 44928 ----a-w- c:\windows\system32\drivers\mcvidrv_x64.sys
2012-10-11 03:08 . 2012-10-11 03:08 29696 ----a-w- c:\windows\system32\drivers\mcaudrv_x64.sys
2012-10-09 18:17 . 2012-11-14 14:23 55296 ----a-w- c:\windows\system32\dhcpcsvc6.dll
2012-10-09 18:17 . 2012-11-14 14:23 226816 ----a-w- c:\windows\system32\dhcpcore6.dll
2012-10-09 17:40 . 2012-11-14 14:23 44032 ----a-w- c:\windows\SysWow64\dhcpcsvc6.dll
2012-10-09 17:40 . 2012-11-14 14:23 193536 ----a-w- c:\windows\SysWow64\dhcpcore6.dll
.
.
(((((((((((((((((((((((((((((((((( Spouštěcí body v registru )))))))))))))))))))))))))))))))))))))))))))))
.
.
*Poznámka* prázdné záznamy a legitimní výchozí údaje nejsou zobrazeny.
REGEDIT4
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\EldosIconOverlay]
@="{5BB532A2-BF14-4CCC-86B7-71B81EF6F8BC}"
[HKEY_CLASSES_ROOT\CLSID\{5BB532A2-BF14-4CCC-86B7-71B81EF6F8BC}]
2012-04-09 15:27 158224 ----a-w- c:\windows\SysWOW64\CbFsMntNtf3.dll
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"DAEMON Tools Lite"="c:\program files (x86)\DAEMON Tools Lite\DTLite.exe" [2012-08-28 3671904]
"Skype"="c:\program files (x86)\Skype\Phone\Skype.exe" [2012-11-09 17877168]
"Steam"="d:\arcane\Steam\steam.exe" [2012-12-20 1354736]
"Infium"="c:\program files (x86)\QIP 2012\qip.exe" [2012-11-26 8376944]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]
"AMD AVT"="start AMD Accelerated Video Transcoding device initialization" [X]
"Adobe ARM"="c:\program files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2012-09-23 926896]
"NUSB3MON"="c:\program files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe" [2010-11-17 113288]
"APSDaemon"="c:\program files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe" [2012-11-28 59280]
"SwitchBoard"="c:\program files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe" [2010-02-19 517096]
"AdobeCS6ServiceManager"="c:\program files (x86)\Common Files\Adobe\CS6ServiceManager\CS6ServiceManager.exe" [2012-03-09 1073312]
"avast"="c:\program files\AVAST Software\Avast\avastUI.exe" [2012-10-30 4297136]
"QuickTime Task"="c:\program files (x86)\QuickTime\QTTask.exe" [2012-10-25 421888]
"iTunesHelper"="c:\program files (x86)\iTunes\iTunesHelper.exe" [2012-12-12 152544]
"StartCCC"="c:\program files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" [2012-06-11 641704]
.
c:\users\Arcane\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\
CurseClientStartup.ccip [2012-10-18 0]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorAdmin"= 5 (0x5)
"ConsentPromptBehaviorUser"= 3 (0x3)
"EnableUIADesktopToggle"= 0 (0x0)
"PromptOnSecureDesktop"= 0 (0x0)
.
R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2010-03-18 138576]
R2 SkypeUpdate;Skype Updater;c:\program files (x86)\Skype\Updater\Updater.exe [2012-11-09 160944]
R3 ose64;Office 64 Source Engine;c:\program files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2010-01-09 174440]
R3 RdpVideoMiniport;Remote Desktop Video Miniport Driver;c:\windows\system32\drivers\rdpvideominiport.sys [2012-08-23 19456]
R3 RSUSBVSTOR;RtsUVStor.Sys Realtek USB Card Reader;c:\windows\system32\Drivers\RtsUVStor.sys [2010-09-30 299520]
R3 SwitchBoard;SwitchBoard;c:\program files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [2010-02-19 517096]
R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys [2012-08-23 57856]
R3 USBAAPL64;Apple Mobile USB Driver;c:\windows\system32\Drivers\usbaapl64.sys [2012-09-28 53760]
R3 WatAdminSvc;Služba Technologie aktivace Windows;c:\windows\system32\Wat\WatAdminSvc.exe [2012-10-18 1255736]
S1 aswSnx;aswSnx; [x]
S1 aswSP;aswSP; [x]
S1 dtsoftbus01;DAEMON Tools Virtual Bus Driver;c:\windows\system32\DRIVERS\dtsoftbus01.sys [2012-10-30 283200]
S2 aksdf;aksdf;c:\windows\system32\drivers\aksdf.sys [2011-11-22 78208]
S2 AMD External Events Utility;AMD External Events Utility;c:\windows\system32\atiesrxx.exe [2012-06-11 239616]
S2 aswFsBlk;aswFsBlk; [x]
S2 aswMonFlt;aswMonFlt;c:\windows\system32\drivers\aswMonFlt.sys [2012-10-30 71600]
S2 hasplms;Sentinel Local License Manager;c:\windows\system32\hasplms.exe -run [x]
S3 cbfs3;EldoS Callback File System driver v3;c:\windows\system32\DRIVERS\cbfs3.sys [2012-04-09 352144]
S3 IntcDAud;Intel(R) Display Audio;c:\windows\system32\DRIVERS\IntcDAud.sys [2010-10-15 317440]
S3 intelkmd;intelkmd;c:\windows\system32\DRIVERS\igdpmd64.sys [2011-03-25 12262336]
S3 L1C;NDIS Miniport Driver for Atheros AR813x/AR815x PCI-E Ethernet Controller;c:\windows\system32\DRIVERS\L1C62x64.sys [2010-10-21 76912]
S3 ManyCam;ManyCam Virtual Webcam;c:\windows\system32\DRIVERS\mcvidrv_x64.sys [2012-10-11 44928]
S3 mcaudrv_simple;ManyCam Virtual Microphone;c:\windows\system32\drivers\mcaudrv_x64.sys [2012-10-11 29696]
S3 nusb3hub;Renesas Electronics USB 3.0 Hub Driver;c:\windows\system32\DRIVERS\nusb3hub.sys [2010-12-10 80384]
S3 nusb3xhc;Renesas Electronics USB 3.0 Host Controller Driver;c:\windows\system32\DRIVERS\nusb3xhc.sys [2010-12-10 181248]
.
.
Obsah adresáře 'Naplánované úlohy'
.
2013-01-06 c:\windows\Tasks\Adobe Flash Player Updater.job
- c:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2012-10-18 09:40]
.
.
--------- X64 Entries -----------
.
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\00avast]
@="{472083B0-C522-11CF-8763-00608CC02F24}"
[HKEY_CLASSES_ROOT\CLSID\{472083B0-C522-11CF-8763-00608CC02F24}]
2012-10-30 22:50 133400 ----a-w- c:\program files\AVAST Software\Avast\ashShA64.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\EldosIconOverlay]
@="{5BB532A2-BF14-4CCC-86B7-71B81EF6F8BC}"
[HKEY_CLASSES_ROOT\CLSID\{5BB532A2-BF14-4CCC-86B7-71B81EF6F8BC}]
2012-04-09 15:27 190480 ----a-w- c:\windows\System32\CbFsMntNtf3.dll
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"BCSSync"="c:\program files\Microsoft Office\Office14\BCSSync.exe" [2010-03-13 112512]
"AdobeAAMUpdater-1.0"="c:\program files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe" [2012-04-04 446392]
"SmartAudio"="c:\program files\CONEXANT\SAII\SAIICpl.exe" [2010-04-28 307768]
"IgfxTray"="c:\windows\system32\igfxtray.exe" [2011-03-25 167960]
"HotKeysCmds"="c:\windows\system32\hkcmd.exe" [2011-03-25 391704]
"Persistence"="c:\windows\system32\igfxpers.exe" [2011-03-25 418840]
.
------- Doplňkový sken -------
.
uLocal Page = c:\windows\system32\blank.htm
mLocal Page = c:\windows\SysWOW64\blank.htm
uInternet Settings,ProxyOverride = *.local
IE: E&xportovat do aplikace Microsoft Excel - c:\progra~1\MICROS~2\Office14\EXCEL.EXE/3000
TCP: DhcpNameServer = 147.230.16.140 147.230.16.1
.
- - - - NEPLATNÉ POLOŽKY ODSTRANĚNÉ Z REGISTRU - - - -
.
Wow6432Node-HKCU-Run-AdobeBridge - (no file)
Wow6432Node-HKCU-Run-RESTART_STICKY_NOTES - c:\windows\System32\StikyNot.exe
HKLM-Run-SynTPEnh - c:\program files (x86)\Synaptics\SynTP\SynTPEnh.exe
.
.
.
--------------------- ZAMKNUTÉ KLÍČE V REGISTRU ---------------------
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil64_11_5_502_135_ActiveX.exe,-101"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\Elevation]
"Enabled"=dword:00000001
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\LocalServer32]
@="c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil64_11_5_502_135_ActiveX.exe"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="IFlashBroker5"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil32_11_5_502_135_ActiveX.exe,-101"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\Elevation]
"Enabled"=dword:00000001
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\LocalServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil32_11_5_502_135_ActiveX.exe"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@="Shockwave Flash Object"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\InprocServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_5_502_135.ocx"
"ThreadingModel"="Apartment"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\MiscStatus]
@="0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ProgID]
@="ShockwaveFlash.ShockwaveFlash.11"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_5_502_135.ocx, 1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\TypeLib]
@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\Version]
@="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
@="ShockwaveFlash.ShockwaveFlash"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@="Macromedia Flash Factory Object"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\InprocServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_5_502_135.ocx"
"ThreadingModel"="Apartment"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ProgID]
@="FlashFactory.FlashFactory.1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_5_502_135.ocx, 1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\TypeLib]
@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\Version]
@="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
@="FlashFactory.FlashFactory"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="IFlashBroker5"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\PCW\Security]
@Denied: (Full) (Everyone)
.
Celkový čas: 2013-01-06 23:22:35
ComboFix-quarantined-files.txt 2013-01-06 22:22
.
Před spuštěním: Volných bajtů: 32 772 055 040
Po spuštění: Volných bajtů: 32 524 328 960
.
- - End Of File - - 83BC8D024B798FD88B76FA12BAF7FCD7

[Rudy]

Ještě dočistíme. Otevřte poznámkový blok a zkopírujte do něj:

RegLock::
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}]
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\Elevation]
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\LocalServer32]
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\TypeLib]
[HKEY_LOCAL_MACHINE\software\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}]
[HKEY_LOCAL_MACHINE\software\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\ProxyStubClsid32]
[HKEY_LOCAL_MACHINE\software\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\TypeLib]
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}]
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\Elevation]
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\LocalServer32]
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\TypeLib]
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}]
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\InprocServer32]
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\MiscStatus]
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ProgID]
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\TypeLib]
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\Version]
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}]
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\InprocServer32]
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ProgID]
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\TypeLib]
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\Version]
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}]
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\ProxyStubClsid32]
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\TypeLib]
[HKEY_LOCAL_MACHINE\system\ControlSet001\Control\PCW\Security]

Reboot::

Uložte na plochu jako CFScript.txt. Pak jej myší přetáhněte nad ikonu ComboFix a pusťte. CF se spustí a vykoná příkazy ze skriptu.

[Johny36]

Tak provedeno, tady je výsledný log. Zatím budu zkoušet jestli to problém odstranilo.

ComboFix 13-01-06.01 - Arcane 07.01.2013 18:52:57.2.4 - x64
Microsoft Windows 7 Home Premium 6.1.7601.1.1250.420.1029.18.8136.4736 [GMT 1:00]
Spuštěný z: c:\users\Arcane\Desktop\ComboFix.exe
Použité ovládací přepínače :: c:\users\Arcane\Desktop\CFScript.txt
AV: avast! Antivirus *Disabled/Updated* {2B2D1395-420B-D5C9-657E-930FE358FC3C}
SP: avast! Antivirus *Disabled/Updated* {904CF271-6431-DA47-5FCE-A87D98DFB681}
SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.
.
((((((((((((((((((((((((( Soubory vytvořené od 2012-12-07 do 2013-01-07 )))))))))))))))))))))))))))))))
.
.
2013-01-06 16:17 . 2013-01-06 16:18 -------- d-----w- C:\rsit
2013-01-06 16:17 . 2013-01-06 16:17 -------- d-----w- c:\program files\trend micro
2013-01-05 16:18 . 2013-01-05 16:18 -------- d-----w- c:\users\Arcane\.netbeans-derby
2013-01-04 19:51 . 2012-11-08 17:24 9125352 ----a-w- c:\programdata\Microsoft\Windows Defender\Definition Updates\{D77353CE-B59F-452D-BCC7-A6A256B467C1}\mpengine.dll
2013-01-01 20:34 . 2013-01-01 20:34 -------- d-----w- c:\users\Arcane\AppData\Local\Apple_Inc
2013-01-01 20:34 . 2013-01-01 20:34 -------- d-----w- c:\program files (x86)\iPhone Configuration Utility
2012-12-28 01:32 . 2012-12-28 03:21 -------- d-----w- c:\users\Arcane\AppData\Roaming\redsn0w
2012-12-28 01:12 . 2012-12-28 01:13 -------- d-----w- c:\users\Arcane\.shsh
2012-12-28 00:58 . 2012-12-28 00:58 -------- d-----w- c:\users\Arcane\AppData\Local\Macroplant_LLC
2012-12-28 00:58 . 2012-04-09 15:27 190480 ----a-w- c:\windows\system32\CbFsMntNtf3.dll
2012-12-28 00:58 . 2012-04-09 15:27 158224 ----a-w- c:\windows\SysWow64\CbFsMntNtf3.dll
2012-12-28 00:58 . 2012-04-09 15:27 141328 ----a-w- c:\windows\system32\CbFsNetRdr3.dll
2012-12-28 00:58 . 2012-04-09 15:27 223760 ----a-w- c:\windows\SysWow64\CbFsNetRdr3.dll
2012-12-28 00:57 . 2012-04-09 15:27 352144 ----a-w- c:\windows\system32\drivers\cbfs3.sys
2012-12-28 00:57 . 2012-12-28 00:57 -------- d-----w- c:\program files (x86)\iExplorer
2012-12-20 14:56 . 2013-01-07 10:42 -------- d-----w- c:\users\Arcane\AppData\Roaming\Media Player Classic
2012-12-20 14:55 . 2012-06-09 18:21 206336 ----a-w- c:\windows\system32\unrar64.dll
2012-12-20 14:55 . 2011-12-07 18:37 148992 ----a-w- c:\windows\system32\lagarith.dll
2012-12-20 14:55 . 2012-12-20 14:55 -------- d-----w- c:\program files\K-Lite Codec Pack x64
2012-12-20 14:53 . 2011-12-07 18:32 216064 ----a-w- c:\windows\SysWow64\lagarith.dll
2012-12-20 14:53 . 2011-06-24 15:44 243200 ----a-w- c:\windows\SysWow64\xvidvfw.dll
2012-12-20 14:53 . 2011-06-24 15:28 650752 ----a-w- c:\windows\SysWow64\xvidcore.dll
2012-12-20 14:53 . 2011-12-21 18:14 151552 ----a-w- c:\windows\SysWow64\ac3acm.acm
2012-12-20 14:53 . 2012-12-10 18:00 112640 ----a-w- c:\windows\SysWow64\ff_vfw.dll
2012-12-20 14:53 . 2012-12-20 14:54 -------- d-----w- c:\program files (x86)\K-Lite Codec Pack
2012-12-20 06:34 . 2012-12-20 14:42 -------- d-----w- c:\program files (x86)\Common Files\Steam
2012-12-15 20:25 . 2012-12-15 20:25 -------- d-----w- c:\programdata\ATI
2012-12-14 09:22 . 2012-12-14 09:23 -------- d-----w- c:\programdata\34BE82C4-E596-4e99-A191-52C6199EBF69
2012-12-14 09:22 . 2012-12-14 09:23 -------- d-----w- c:\program files\iTunes
2012-12-14 09:22 . 2012-12-14 09:23 -------- d-----w- c:\program files (x86)\iTunes
2012-12-14 09:22 . 2012-12-14 09:22 -------- d-----w- c:\program files\iPod
2012-12-13 18:31 . 2012-12-13 18:31 -------- d-----w- C:\Intel
2012-12-13 18:31 . 2012-12-15 20:25 -------- d-----w- c:\program files (x86)\Common Files\ATI Technologies
2012-12-13 18:31 . 2012-12-13 18:31 -------- d-----w- c:\program files\Common Files\ATI Technologies
2012-12-13 18:29 . 2012-12-15 20:24 -------- d-----w- c:\program files\ATI Technologies
2012-12-12 11:40 . 2012-11-09 05:45 2048 ----a-w- c:\windows\system32\tzres.dll
2012-12-12 10:48 . 2012-12-12 10:48 -------- d-----w- c:\users\Arcane\.worldoflogs
2012-12-12 09:40 . 2012-12-12 09:40 16363960 ----a-w- c:\windows\SysWow64\FlashPlayerInstaller.exe
2012-12-08 20:04 . 2012-12-08 20:04 -------- d-----w- c:\program files (x86)\AMD AVT
2012-12-08 18:43 . 2012-12-08 18:43 -------- d-----w- c:\programdata\Intel
.
.
.
(((((((((((((((((((((((((((((((((((((((( Find3M výpis ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2012-12-12 14:59 . 2012-10-18 18:30 67413224 ----a-w- c:\windows\system32\MRT.exe
2012-12-12 09:40 . 2012-10-18 18:19 73656 ----a-w- c:\windows\SysWow64\FlashPlayerCPLApp.cpl
2012-12-12 09:40 . 2012-10-18 18:19 697272 ----a-w- c:\windows\SysWow64\FlashPlayerApp.exe
2012-12-10 18:00 . 2012-10-22 16:36 127488 ----a-w- c:\windows\system32\ff_vfw.dll
2012-10-30 22:51 . 2012-10-27 16:16 59728 ----a-w- c:\windows\system32\drivers\aswTdi.sys
2012-10-30 22:51 . 2012-10-27 16:17 370288 ----a-w- c:\windows\system32\drivers\aswSP.sys
2012-10-30 22:51 . 2012-10-27 16:16 984144 ----a-w- c:\windows\system32\drivers\aswSnx.sys
2012-10-30 22:51 . 2012-10-27 16:16 71600 ----a-w- c:\windows\system32\drivers\aswMonFlt.sys
2012-10-30 22:51 . 2012-10-27 16:17 25232 ----a-w- c:\windows\system32\drivers\aswFsBlk.sys
2012-10-30 22:51 . 2012-10-27 16:16 41224 ----a-w- c:\windows\avastSS.scr
2012-10-30 22:50 . 2012-10-27 16:16 227648 ----a-w- c:\windows\SysWow64\aswBoot.exe
2012-10-30 22:50 . 2012-10-27 16:16 285328 ----a-w- c:\windows\system32\aswBoot.exe
2012-10-30 17:45 . 2012-10-30 17:45 283200 ----a-w- c:\windows\system32\drivers\dtsoftbus01.sys
2012-10-25 02:12 . 2012-10-25 02:12 94208 ----a-w- c:\windows\SysWow64\QuickTimeVR.qtx
2012-10-25 02:12 . 2012-10-25 02:12 69632 ----a-w- c:\windows\SysWow64\QuickTime.qts
2012-10-19 09:03 . 2012-10-19 09:03 772592 ----a-w- c:\windows\SysWow64\npDeployJava1.dll
2012-10-19 09:03 . 2012-10-19 09:03 687600 ----a-w- c:\windows\SysWow64\deployJava1.dll
2012-10-19 08:57 . 2012-10-19 08:58 916456 ----a-w- c:\windows\system32\deployJava1.dll
2012-10-19 08:57 . 2012-10-19 08:58 289768 ----a-w- c:\windows\system32\javaws.exe
2012-10-19 08:57 . 2012-10-19 08:58 1034216 ----a-w- c:\windows\system32\npDeployJava1.dll
2012-10-19 08:57 . 2012-10-19 08:58 189416 ----a-w- c:\windows\system32\javaw.exe
2012-10-19 08:57 . 2012-10-19 08:58 188904 ----a-w- c:\windows\system32\java.exe
2012-10-19 08:57 . 2012-10-19 08:58 108008 ----a-w- c:\windows\system32\WindowsAccessBridge-64.dll
2012-10-19 08:47 . 2012-10-19 08:47 86528 ----a-w- c:\windows\SysWow64\iesysprep.dll
2012-10-19 08:47 . 2012-10-19 08:47 76800 ----a-w- c:\windows\SysWow64\SetIEInstalledDate.exe
2012-10-19 08:47 . 2012-10-19 08:47 74752 ----a-w- c:\windows\SysWow64\RegisterIEPKEYs.exe
2012-10-19 08:47 . 2012-10-19 08:47 48640 ----a-w- c:\windows\SysWow64\mshtmler.dll
2012-10-19 08:47 . 2012-10-19 08:47 161792 ----a-w- c:\windows\SysWow64\msls31.dll
2012-10-19 08:47 . 2012-10-19 08:47 110592 ----a-w- c:\windows\SysWow64\IEAdvpack.dll
2012-10-19 08:47 . 2012-10-19 08:47 74752 ----a-w- c:\windows\SysWow64\iesetup.dll
2012-10-19 08:47 . 2012-10-19 08:47 63488 ----a-w- c:\windows\SysWow64\tdc.ocx
2012-10-19 08:47 . 2012-10-19 08:47 367104 ----a-w- c:\windows\SysWow64\html.iec
2012-10-19 08:47 . 2012-10-19 08:47 23552 ----a-w- c:\windows\SysWow64\licmgr10.dll
2012-10-19 08:47 . 2012-10-19 08:47 91648 ----a-w- c:\windows\system32\SetIEInstalledDate.exe
2012-10-19 08:47 . 2012-10-19 08:47 89088 ----a-w- c:\windows\system32\RegisterIEPKEYs.exe
2012-10-19 08:47 . 2012-10-19 08:47 89088 ----a-w- c:\windows\system32\ie4uinit.exe
2012-10-19 08:47 . 2012-10-19 08:47 85504 ----a-w- c:\windows\system32\iesetup.dll
2012-10-19 08:47 . 2012-10-19 08:47 82432 ----a-w- c:\windows\system32\icardie.dll
2012-10-19 08:47 . 2012-10-19 08:47 76800 ----a-w- c:\windows\system32\tdc.ocx
2012-10-19 08:47 . 2012-10-19 08:47 65024 ----a-w- c:\windows\system32\pngfilt.dll
2012-10-19 08:47 . 2012-10-19 08:47 55296 ----a-w- c:\windows\system32\msfeedsbs.dll
2012-10-19 08:47 . 2012-10-19 08:47 534528 ----a-w- c:\windows\system32\ieapfltr.dll
2012-10-19 08:47 . 2012-10-19 08:47 49664 ----a-w- c:\windows\system32\imgutil.dll
2012-10-19 08:47 . 2012-10-19 08:47 48640 ----a-w- c:\windows\system32\mshtmler.dll
2012-10-19 08:47 . 2012-10-19 08:47 452608 ----a-w- c:\windows\system32\dxtmsft.dll
2012-10-19 08:47 . 2012-10-19 08:47 448512 ----a-w- c:\windows\system32\html.iec
2012-10-19 08:47 . 2012-10-19 08:47 403248 ----a-w- c:\windows\system32\iedkcs32.dll
2012-10-19 08:47 . 2012-10-19 08:47 39936 ----a-w- c:\windows\system32\iernonce.dll
2012-10-19 08:47 . 2012-10-19 08:47 3695416 ----a-w- c:\windows\system32\ieapfltr.dat
2012-10-19 08:47 . 2012-10-19 08:47 35840 ----a-w- c:\windows\SysWow64\imgutil.dll
2012-10-19 08:47 . 2012-10-19 08:47 30720 ----a-w- c:\windows\system32\licmgr10.dll
2012-10-19 08:47 . 2012-10-19 08:47 282112 ----a-w- c:\windows\system32\dxtrans.dll
2012-10-19 08:47 . 2012-10-19 08:47 267776 ----a-w- c:\windows\system32\ieaksie.dll
2012-10-19 08:47 . 2012-10-19 08:47 249344 ----a-w- c:\windows\system32\webcheck.dll
2012-10-19 08:47 . 2012-10-19 08:47 222208 ----a-w- c:\windows\system32\msls31.dll
2012-10-19 08:47 . 2012-10-19 08:47 197120 ----a-w- c:\windows\system32\msrating.dll
2012-10-19 08:47 . 2012-10-19 08:47 165888 ----a-w- c:\windows\system32\iexpress.exe
2012-10-19 08:47 . 2012-10-19 08:47 163840 ----a-w- c:\windows\system32\ieakui.dll
2012-10-19 08:47 . 2012-10-19 08:47 160256 ----a-w- c:\windows\system32\wextract.exe
2012-10-19 08:47 . 2012-10-19 08:47 160256 ----a-w- c:\windows\system32\ieakeng.dll
2012-10-19 08:47 . 2012-10-19 08:47 152064 ----a-w- c:\windows\SysWow64\wextract.exe
2012-10-19 08:47 . 2012-10-19 08:47 150528 ----a-w- c:\windows\SysWow64\iexpress.exe
2012-10-19 08:47 . 2012-10-19 08:47 149504 ----a-w- c:\windows\system32\occache.dll
2012-10-19 08:47 . 2012-10-19 08:47 145920 ----a-w- c:\windows\system32\iepeers.dll
2012-10-19 08:47 . 2012-10-19 08:47 135168 ----a-w- c:\windows\system32\IEAdvpack.dll
2012-10-19 08:47 . 2012-10-19 08:47 12288 ----a-w- c:\windows\system32\mshta.exe
2012-10-19 08:47 . 2012-10-19 08:47 11776 ----a-w- c:\windows\SysWow64\mshta.exe
2012-10-19 08:47 . 2012-10-19 08:47 114176 ----a-w- c:\windows\system32\admparse.dll
2012-10-19 08:47 . 2012-10-19 08:47 111616 ----a-w- c:\windows\system32\iesysprep.dll
2012-10-19 08:47 . 2012-10-19 08:47 10752 ----a-w- c:\windows\system32\msfeedssync.exe
2012-10-19 08:47 . 2012-10-19 08:47 103936 ----a-w- c:\windows\system32\inseng.dll
2012-10-19 08:47 . 2012-10-19 08:47 101888 ----a-w- c:\windows\SysWow64\admparse.dll
2012-10-19 01:25 . 2009-07-14 02:36 152576 ----a-w- c:\windows\SysWow64\msclmd.dll
2012-10-19 01:25 . 2009-07-14 02:36 175616 ----a-w- c:\windows\system32\msclmd.dll
2012-10-16 08:38 . 2012-11-28 08:11 135168 ----a-w- c:\windows\apppatch\AppPatch64\AcXtrnal.dll
2012-10-16 08:38 . 2012-11-28 08:11 350208 ----a-w- c:\windows\apppatch\AppPatch64\AcLayers.dll
2012-10-16 07:39 . 2012-11-28 08:11 561664 ----a-w- c:\windows\apppatch\AcLayers.dll
2012-10-15 16:59 . 2012-10-27 16:16 54072 ----a-w- c:\windows\system32\drivers\aswRdr2.sys
2012-10-11 03:08 . 2012-10-11 03:08 44928 ----a-w- c:\windows\system32\drivers\mcvidrv_x64.sys
2012-10-11 03:08 . 2012-10-11 03:08 29696 ----a-w- c:\windows\system32\drivers\mcaudrv_x64.sys
2012-10-09 18:17 . 2012-11-14 14:23 55296 ----a-w- c:\windows\system32\dhcpcsvc6.dll
2012-10-09 18:17 . 2012-11-14 14:23 226816 ----a-w- c:\windows\system32\dhcpcore6.dll
.
.
(((((((((((((((((((((((((((((((((( Spouštěcí body v registru )))))))))))))))))))))))))))))))))))))))))))))
.
.
*Poznámka* prázdné záznamy a legitimní výchozí údaje nejsou zobrazeny.
REGEDIT4
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\EldosIconOverlay]
@="{5BB532A2-BF14-4CCC-86B7-71B81EF6F8BC}"
[HKEY_CLASSES_ROOT\CLSID\{5BB532A2-BF14-4CCC-86B7-71B81EF6F8BC}]
2012-04-09 15:27 158224 ----a-w- c:\windows\SysWOW64\CbFsMntNtf3.dll
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"DAEMON Tools Lite"="c:\program files (x86)\DAEMON Tools Lite\DTLite.exe" [2012-08-28 3671904]
"Skype"="c:\program files (x86)\Skype\Phone\Skype.exe" [2012-11-09 17877168]
"Steam"="d:\arcane\Steam\steam.exe" [2012-12-20 1354736]
"Infium"="c:\program files (x86)\QIP 2012\qip.exe" [2012-11-26 8376944]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]
"AMD AVT"="start AMD Accelerated Video Transcoding device initialization" [X]
"Adobe ARM"="c:\program files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2012-09-23 926896]
"NUSB3MON"="c:\program files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe" [2010-11-17 113288]
"APSDaemon"="c:\program files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe" [2012-11-28 59280]
"SwitchBoard"="c:\program files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe" [2010-02-19 517096]
"AdobeCS6ServiceManager"="c:\program files (x86)\Common Files\Adobe\CS6ServiceManager\CS6ServiceManager.exe" [2012-03-09 1073312]
"avast"="c:\program files\AVAST Software\Avast\avastUI.exe" [2012-10-30 4297136]
"QuickTime Task"="c:\program files (x86)\QuickTime\QTTask.exe" [2012-10-25 421888]
"iTunesHelper"="c:\program files (x86)\iTunes\iTunesHelper.exe" [2012-12-12 152544]
"StartCCC"="c:\program files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" [2012-06-11 641704]
.
c:\users\Arcane\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\
CurseClientStartup.ccip [2012-10-18 0]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorAdmin"= 5 (0x5)
"ConsentPromptBehaviorUser"= 3 (0x3)
"EnableUIADesktopToggle"= 0 (0x0)
"PromptOnSecureDesktop"= 0 (0x0)
.
R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2010-03-18 138576]
R2 SkypeUpdate;Skype Updater;c:\program files (x86)\Skype\Updater\Updater.exe [2012-11-09 160944]
R3 ose64;Office 64 Source Engine;c:\program files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2010-01-09 174440]
R3 RdpVideoMiniport;Remote Desktop Video Miniport Driver;c:\windows\system32\drivers\rdpvideominiport.sys [2012-08-23 19456]
R3 RSUSBVSTOR;RtsUVStor.Sys Realtek USB Card Reader;c:\windows\system32\Drivers\RtsUVStor.sys [2010-09-30 299520]
R3 SwitchBoard;SwitchBoard;c:\program files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [2010-02-19 517096]
R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys [2012-08-23 57856]
R3 WatAdminSvc;Služba Technologie aktivace Windows;c:\windows\system32\Wat\WatAdminSvc.exe [2012-10-18 1255736]
S1 aswSnx;aswSnx; [x]
S1 aswSP;aswSP; [x]
S1 dtsoftbus01;DAEMON Tools Virtual Bus Driver;c:\windows\system32\DRIVERS\dtsoftbus01.sys [2012-10-30 283200]
S2 aksdf;aksdf;c:\windows\system32\drivers\aksdf.sys [2011-11-22 78208]
S2 AMD External Events Utility;AMD External Events Utility;c:\windows\system32\atiesrxx.exe [2012-06-11 239616]
S2 aswFsBlk;aswFsBlk; [x]
S2 aswMonFlt;aswMonFlt;c:\windows\system32\drivers\aswMonFlt.sys [2012-10-30 71600]
S2 hasplms;Sentinel Local License Manager;c:\windows\system32\hasplms.exe -run [x]
S3 cbfs3;EldoS Callback File System driver v3;c:\windows\system32\DRIVERS\cbfs3.sys [2012-04-09 352144]
S3 IntcDAud;Intel(R) Display Audio;c:\windows\system32\DRIVERS\IntcDAud.sys [2010-10-15 317440]
S3 intelkmd;intelkmd;c:\windows\system32\DRIVERS\igdpmd64.sys [2011-03-25 12262336]
S3 L1C;NDIS Miniport Driver for Atheros AR813x/AR815x PCI-E Ethernet Controller;c:\windows\system32\DRIVERS\L1C62x64.sys [2010-10-21 76912]
S3 ManyCam;ManyCam Virtual Webcam;c:\windows\system32\DRIVERS\mcvidrv_x64.sys [2012-10-11 44928]
S3 mcaudrv_simple;ManyCam Virtual Microphone;c:\windows\system32\drivers\mcaudrv_x64.sys [2012-10-11 29696]
S3 nusb3hub;Renesas Electronics USB 3.0 Hub Driver;c:\windows\system32\DRIVERS\nusb3hub.sys [2010-12-10 80384]
S3 nusb3xhc;Renesas Electronics USB 3.0 Host Controller Driver;c:\windows\system32\DRIVERS\nusb3xhc.sys [2010-12-10 181248]
S3 USBAAPL64;Apple Mobile USB Driver;c:\windows\system32\Drivers\usbaapl64.sys [2012-09-28 53760]
.
.
--- Ostatní služby/ovladače v paměti ---
.
*NewlyCreated* - WS2IFSL
.
Obsah adresáře 'Naplánované úlohy'
.
2013-01-07 c:\windows\Tasks\Adobe Flash Player Updater.job
- c:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2012-10-18 09:40]
.
.
--------- X64 Entries -----------
.
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\00avast]
@="{472083B0-C522-11CF-8763-00608CC02F24}"
[HKEY_CLASSES_ROOT\CLSID\{472083B0-C522-11CF-8763-00608CC02F24}]
2012-10-30 22:50 133400 ----a-w- c:\program files\AVAST Software\Avast\ashShA64.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\EldosIconOverlay]
@="{5BB532A2-BF14-4CCC-86B7-71B81EF6F8BC}"
[HKEY_CLASSES_ROOT\CLSID\{5BB532A2-BF14-4CCC-86B7-71B81EF6F8BC}]
2012-04-09 15:27 190480 ----a-w- c:\windows\System32\CbFsMntNtf3.dll
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"BCSSync"="c:\program files\Microsoft Office\Office14\BCSSync.exe" [2010-03-13 112512]
"AdobeAAMUpdater-1.0"="c:\program files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe" [2012-04-04 446392]
"SynTPEnh"="c:\program files (x86)\Synaptics\SynTP\SynTPEnh.exe" [BU]
"SmartAudio"="c:\program files\CONEXANT\SAII\SAIICpl.exe" [2010-04-28 307768]
"IgfxTray"="c:\windows\system32\igfxtray.exe" [2011-03-25 167960]
"HotKeysCmds"="c:\windows\system32\hkcmd.exe" [2011-03-25 391704]
"Persistence"="c:\windows\system32\igfxpers.exe" [2011-03-25 418840]
.
------- Doplňkový sken -------
.
uLocal Page = c:\windows\system32\blank.htm
mLocal Page = c:\windows\SysWOW64\blank.htm
uInternet Settings,ProxyOverride = *.local
IE: E&xportovat do aplikace Microsoft Excel - c:\progra~1\MICROS~2\Office14\EXCEL.EXE/3000
TCP: DhcpNameServer = 147.230.16.140 147.230.16.1
.
.
--------------------- ZAMKNUTÉ KLÍČE V REGISTRU ---------------------
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil64_11_5_502_135_ActiveX.exe,-101"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\Elevation]
"Enabled"=dword:00000001
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\LocalServer32]
@="c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil64_11_5_502_135_ActiveX.exe"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="IFlashBroker5"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
.
------------------------ Jiné spuštené procesy ------------------------
.
c:\program files\AVAST Software\Avast\AvastSvc.exe
c:\program files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
c:\program files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
c:\windows\system32\hasplms.exe
.
**************************************************************************
.
Celkový čas: 2013-01-07 19:03:40 - počítač byl restartován
ComboFix-quarantined-files.txt 2013-01-07 18:03
ComboFix2.txt 2013-01-06 22:22
.
Před spuštěním: Volných bajtů: 33 607 942 144
Po spuštění: Volných bajtů: 33 573 044 224
.
- - End Of File - - E8A03520439015F57936DF3A2DE53EC2

[Rudy]

Log již vypadá OK. PC sledujte.

[Johny36]

Tak bohužel to nepřestalo. Stále jede hra na 60fpd a náhodně skáče na 20 a níž na určitou dobu po které to přestane

[Rudy]

Podívejte se do správce úloh (při tom zvýšení), který proces nevíce zatěžuje systém.

[Johny36]

No jakmile se to začlo dít tak jesm spustil správce úloh a nic neobvyklého jsem nevidel. Opera se 600MB paměti, do toho ona hra Dota 2 s asi 1GB paměti,, celkové vytížení okolo 40%, CPU bylo mžikově na 85%, ale hned to skočilo dolů na 30. A to po celou dobu těch záseků. Jsem z toho docela nešťastný, nevím co to způsobuje. Je třeba nějaká možnost zapnutí monitoringu, že by to ukázalo přesně jestli nějaká aplikace moc vytěžuje systém?