resetující se PC, kontrola

[Lord Excalibur]

dravím všechny.
Mám zde problém s resetujícím se PC. Jedná se PC sloužící pro řízení CNC stroje. Čili jakýkoliv zbrždění nebo nedej bože restartování PC má za následek pi nejlepším zastavení výroby, v nejhorším možném případě havárii stroje. Přikládám log jak vypadá PC pi běhu stroje. Stav je skutečně kritický.

Logfile of random's system information tool 1.09 (written by random/random)
Run by xp600 at 2013-10-31 15:18:47
Microsoft Windows XP Professional Service Pack 3
System drive C: has 189 GB (80%) free of 236 GB
Total RAM: 2720 MB (59% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 15:19:00, on 31.10.2013
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Normal

Running processes:
C:\windows\System32\smss.exe
C:\windows\system32\winlogon.exe
C:\windows\system32\services.exe
C:\windows\system32\lsass.exe
C:\windows\system32\svchost.exe
C:\windows\System32\svchost.exe
C:\windows\system32\spoolsv.exe
C:\windows\Explorer.EXE
C:\windows\RTDCPL.EXE
C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe
C:\INtime\bin\faultmgr.exe
C:\INtime\bin\inioproxy.exe
C:\windows\system32\hkcmd.exe
C:\windows\system32\igfxpers.exe
C:\windows\system32\ctfmon.exe
C:\WINDOWS\lyxuw.exe
C:\INtime\bin\intimestatus.exe
C:\Program Files\TaskSwitchXP\TaskSwitchXP.exe
C:\Program Files\McAfee Security Scan\3.8.130\SSScheduler.exe
C:\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe
C:\windows\system32\HUMMBIRD\Inetd32.exe
C:\INtime\bin\loadrtk.exe
C:\Program Files\Google\Update\GoogleUpdate.exe
C:\INtime\bin\ntxremote2.exe
C:\Program Files\Java\jre7\bin\jqs.exe
C:\Program Files\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
c:\Program Files\Common Files\Protexis\License Service\PsiService_2.exe
C:\Program Files\Common Files\SafeNet Sentinel\Sentinel Keys Server\sntlkeyssrvr.exe
C:\Program Files\Common Files\SafeNet Sentinel\Sentinel Security Runtime\sntlsrtsrvr.exe
C:\windows\system32\svchost.exe
C:\Program Files\TeamViewer\Version8\TeamViewer_Service.exe
C:\Program Files\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
C:\INtime\bin\rtndsrv.exe
C:\INtime\bin\rtregsrv.exe
C:\INtime\bin\rtclksrv.exe
C:\INtime\bin\rtelsrv.exe
C:\INtime\bin\rtiosrv.exe
C:\WNC\home\xnc\bin\w32helper.exe
C:\WNC\home\xnc\bin\w32helper.exe
C:\WNC\home\xnc\bin\rtdb.exe
C:\WNC\home\xnc\bin\sockserv.exe
C:\WNC\home\Xwm\localcon.exe
C:\WNC\home\xnc\bin\sdmRemoteDriver.exe
C:\WNC\home\xnc\bin\nvramsv.exe
C:\WNC\home\xnc\bin\w32helper.exe
C:\WNC\home\xnc\bin\w32helper.exe
C:\WNC\home\xnc\bin\w32helper.exe
C:\WNC\home\xnc\bin\w32helper.exe
C:\windows\system32\wscntfy.exe
C:\WNC\home\xnc\bin\drvinv.exe
C:\WNC\home\xnc\bin\smis.exe
C:\WNC\home\xnc\bin\int.exe
C:\WNC\home\xnc\bin\int.exe
C:\WNC\home\xnc\bin\int.exe
C:\WNC\home\xnc\bin\int.exe
C:\WNC\home\xnc\bin\int.exe
C:\WNC\home\xnc\bin\XwinQuote.exe
c:\wnc\home\xwm\exceed.exe
C:\Biesse\BiesseWorks\Editor\Editor.exe
C:\Biesse\BIESSE~1\Techdata\BSWKSE~1.EXE
C:\Biesse\BIESSE~1\Techdata\TOOLMA~1.EXE
C:\Biesse\BIESSE~1\Techdata\MConfig.exe
C:\Biesse\BIESSE~1\COLLEG~1\BSXNCS~1.EXE
C:\Biesse\BiesseWorks\Editor\PanProgramServer.exe
C:\WNC\home\xnc\bin\grafica.exe
c:\WNC\home\xnc\bin\wnchelpserver.exe
c:\WNC\home\xnc\bin\visopres.exe
c:\WNC\home\xnc\bin\toolings.exe
c:\WNC\home\xnc\bin\optim.exe
c:\wnc\home\xnc\bin\softconsole.exe
c:\wnc\home\xnc\bin\rccore.exe
c:\wnc\home\xnc\bin\plcmsg.exe
c:\wnc\home\xnc\bin\wish.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Documents and Settings\xp600\My Documents\Stažené soubory\RSIT.exe
C:\Program Files\trend micro\xp600.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
O2 - BHO: MSS+ Identifier - {0E8A89AD-95D7-40EB-8D9D-083EF7066A01} - C:\Program Files\McAfee Security Scan\3.8.130\McAfeeMSS_IE.dll
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll
O2 - BHO: (no name) - {D5FEC983-01DB-414a-9456-AF95AC9ED7B5} - (no file)
O2 - BHO: IEHlprObj Class - {DA5A2A9E-DF07-4a8e-B423-BC5CD4D1880C} - C:\Program Files\FileStream\Web Boomerang\IEHelper.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll
O4 - HKLM\..\Run: [RTHDCPL] RTDCPL.EXE
O4 - HKLM\..\Run: [IMJPMIG8.1] "C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE" /Spoil /RemAdvDef /Migration32
O4 - HKLM\..\Run: [MSPY2002] C:\WINDOWS\system32\IME\PINTLGNT\ImScInst.exe /SYNC
O4 - HKLM\..\Run: [PHIME2002ASync] C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /SYNC
O4 - HKLM\..\Run: [PHIME2002A] C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /IMEName
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\windows\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\windows\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [egui] "C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe" /hide /waitservice
O4 - HKLM\..\Run: [FaultManager] C:\INtime\bin\faultmgr.exe
O4 - HKLM\..\Run: [INtimeIoServer] C:\INtime\bin\inioproxy.exe
O4 - HKLM\..\Run: [IgfxTray] C:\windows\system32\igfxtray.exe
O4 - HKLM\..\Run: [HotKeysCmds] C:\windows\system32\hkcmd.exe
O4 - HKLM\..\Run: [Persistence] C:\windows\system32\igfxpers.exe
O4 - HKCU\..\Run: [CTFMON.EXE] C:\windows\system32\ctfmon.exe
O4 - HKCU\..\Run: [lyxuw] "C:\WINDOWS\lyxuw.exe"
O4 - HKCU\..\Run: [INtimeStatus] C:\INtime\bin\intimestatus.exe
O4 - HKCU\..\Run: [TaskSwitchXP] C:\Program Files\TaskSwitchXP\TaskSwitchXP.exe
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVIZIO LOCALE')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVIZIO DI RETE')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - Startup: ZpozdenyStart.bat
O4 - Global Startup: McAfee Security Scan Plus.lnk = C:\Program Files\McAfee Security Scan\3.8.130\SSScheduler.exe
O9 - Extra button: (no name) - AutorunsDisabled - (no file)
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\windows\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\windows\Network Diagnostic\xpnetdiag.exe
O22 - SharedTaskScheduler: Browseui preloader - {438755C2-A8BA-11D1-B96B-00A0C90312E1} - C:\windows\system32\browseui.dll
O22 - SharedTaskScheduler: Component Categories cache daemon - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\windows\system32\browseui.dll
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: ESET Service (ekrn) - ESET - C:\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe
O23 - Service: Služba Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: Služba Google Update (gupdatem) (gupdatem) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: Hummingbird Inetd (HCLInetd) - Hummingbird Ltd. - C:\windows\system32\HUMMBIRD\Inetd32.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: INtime Clock Synchronization Service (INtimeClockSync) - TenAsys Corporation - C:\INtime\bin\rtclksrv.exe
O23 - Service: INtime Event Log Service (INtimeEventLog) - TenAsys Corporation - C:\INtime\bin\rtelsrv.exe
O23 - Service: INtime I/O Service (INtimeIO) - TenAsys Corporation - C:\INtime\bin\rtiosrv.exe
O23 - Service: INtime Kernel Manager (INtimeKernelManager) - TenAsys Corporation - C:\INtime\bin\loadrtk.exe
O23 - Service: INtime Node Detection Service (INtimeNodeDetection) - TenAsys Corporation - C:\INtime\bin\rtndsrv.exe
O23 - Service: INtime Remote Connection Manager (INtimeNtxRemote) - TenAsys Corporation - C:\INtime\bin\ntxremote2.exe
O23 - Service: INtime Registry Service (INtimeRegistry) - TenAsys Corporation - C:\INtime\bin\rtregsrv.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Oracle Corporation - C:\Program Files\Java\jre7\bin\jqs.exe
O23 - Service: Intel(R) Management and Security Application Local Management Service (LMS) - Intel Corporation - C:\Program Files\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
O23 - Service: McAfee Security Scan Component Host Service (McComponentHostService) - McAfee, Inc. - C:\Program Files\McAfee Security Scan\3.8.130\McCHSvc.exe
O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Mozilla Foundation - C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe
O23 - Service: NVIDIA Display Driver Service (nvsvc) - NVIDIA Corporation - C:\windows\system32\nvsvc32.exe
O23 - Service: Protexis Licensing V2 (PSI_SVC_2) - Protexis Inc. - c:\Program Files\Common Files\Protexis\License Service\PsiService_2.exe
O23 - Service: Sentinel Keys Server (SentinelKeysServer) - SafeNet, Inc. - C:\Program Files\Common Files\SafeNet Sentinel\Sentinel Keys Server\sntlkeyssrvr.exe
O23 - Service: Sentinel Protection Server (SentinelProtectionServer) - SafeNet, Inc - C:\Program Files\Common Files\SafeNet Sentinel\Sentinel Protection Server\WinNT\spnsrvnt.exe
O23 - Service: Sentinel Security Runtime (SentinelSecurityRuntime) - SafeNet, Inc. - C:\Program Files\Common Files\SafeNet Sentinel\Sentinel Security Runtime\sntlsrtsrvr.exe
O23 - Service: TeamViewer 8 (TeamViewer8) - TeamViewer GmbH - C:\Program Files\TeamViewer\Version8\TeamViewer_Service.exe
O23 - Service: Intel(R) Management and Security Application User Notification Service (UNS) - Intel Corporation - C:\Program Files\Intel\Intel(R) Management Engine Components\UNS\UNS.exe

--
End of file - 10012 bytes

=========Mozilla firefox=========

ProfilePath - C:\Documents and Settings\xp600\Application Data\Mozilla\Firefox\Profiles\fzj9x3t1.default

prefs.js - "browser.startup.homepage" - "about:home"

"{20a82645-c095-46ed-80e3-08825760534b}"=C:\windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\


[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 11.9.900.117 Plugin
"Path"=C:\windows\system32\Macromed\Flash\NPSWF32_11_9_900_117.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@foxitsoftware.com/Foxit Reader Plugin,version=1.0,application/pdf]
"Description"=
"Path"=C:\Program Files\Foxit Software\Foxit Reader\plugins\npFoxitReaderPlugin.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@Google.com/GoogleEarthPlugin]
"Description"=Google Earth in your browser
"Path"=C:\Program Files\Google\Google Earth\plugin\npgeplugin.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@java.com/DTPlugin,version=10.25.2]
"Description"=Java™ Deployment Toolkit
"Path"=C:\windows\system32\npDeployJava1.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@java.com/JavaPlugin,version=10.25.2]
"Description"=Oracle® Next Generation Java™ Plug-In
"Path"=C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@mcafee.com/McAfeeMssPlugin]
"Description"=McAfee Mss Plugin
"Path"=C:\Program Files\McAfee Security Scan\3.8.130\npMcAfeeMss.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@microsoft.com/WPF,version=3.5]
"Description"=Windows Presentation Foundation plug-in for Mozilla browsers
"Path"=C:\windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@tools.google.com/Google Update;version=3]
"Description"=Google Update
"Path"=C:\Program Files\Google\Update\1.3.21.165\npGoogleUpdate3.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@tools.google.com/Google Update;version=9]
"Description"=Google Update
"Path"=C:\Program Files\Google\Update\1.3.21.165\npGoogleUpdate3.dll


C:\Documents and Settings\xp600\Application Data\Mozilla\Firefox\Profiles\fzj9x3t1.default\searchplugins\
yandex.ru-151816.xml
yqs-barff-yandex.xml

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{0E8A89AD-95D7-40EB-8D9D-083EF7066A01}]
MSS+ Identifier - C:\Program Files\McAfee Security Scan\3.8.130\McAfeeMSS_IE.dll [2013-09-06 95648]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
Java(tm) Plug-In SSV Helper - C:\Program Files\Java\jre7\bin\ssv.dll [2013-08-30 463272]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{D5FEC983-01DB-414a-9456-AF95AC9ED7B5}]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DA5A2A9E-DF07-4a8e-B423-BC5CD4D1880C}]
IEHlprObj Class - C:\Program Files\FileStream\Web Boomerang\IEHelper.dll [2004-09-13 53248]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre7\bin\jp2ssv.dll [2013-08-30 171944]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"RTHDCPL"=C:\windows\RTDCPL.EXE [2010-10-04 2697832]
"IMJPMIG8.1"=C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE [2008-04-14 208952]
"MSPY2002"=C:\WINDOWS\system32\IME\PINTLGNT\ImScInst.exe [2008-04-14 59392]
"PHIME2002ASync"=C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE [2008-04-14 455168]
"PHIME2002A"=C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE [2008-04-14 455168]
"NvMediaCenter"=C:\windows\system32\NvMcTray.dll [2011-03-24 111208]
"NvCplDaemon"=C:\windows\system32\NvCpl.dll [2011-03-24 13881448]
"egui"=C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe [2012-11-26 5074384]
"FaultManager"=C:\INtime\bin\faultmgr.exe [2011-01-20 94208]
"INtimeIoServer"=C:\INtime\bin\inioproxy.exe [2011-01-20 138752]
"IgfxTray"=C:\windows\system32\igfxtray.exe [2013-02-12 136704]
"HotKeysCmds"=C:\windows\system32\hkcmd.exe [2013-02-12 174592]
"Persistence"=C:\windows\system32\igfxpers.exe [2013-02-12 162816]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"=C:\windows\system32\ctfmon.exe [2008-04-14 15360]
"lyxuw"=C:\WINDOWS\lyxuw.exe [2007-09-27 274432]
"INtimeStatus"=C:\INtime\bin\intimestatus.exe [2011-01-20 948736]
"TaskSwitchXP"=C:\Program Files\TaskSwitchXP\TaskSwitchXP.exe [2007-05-09 106904]

C:\Documents and Settings\All Users\Start Menu\Programs\Startup
McAfee Security Scan Plus.lnk - C:\Program Files\McAfee Security Scan\3.8.130\SSScheduler.exe

C:\Documents and Settings\xp600\Start Menu\Programs\Startup
ZpozdenyStart.bat

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\igfxcui]
C:\windows\system32\igfxdev.dll [2013-02-12 301568]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\WgaLogon]
C:\windows\system32\WgaLogon.dll [2009-03-11 239496]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=149

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"C:\Program Files\Common Files\SafeNet Sentinel\Sentinel Protection Server\WinNT\spnsrvnt.exe"="C:\Program Files\Common Files\SafeNet Sentinel\Sentinel Protection Server\WinNT\spnsrvnt.exe:*:Enabled:Sentinel Protection Server"
"C:\Program Files\Common Files\SafeNet Sentinel\Sentinel Keys Server\sntlkeyssrvr.exe"="C:\Program Files\Common Files\SafeNet Sentinel\Sentinel Keys Server\sntlkeyssrvr.exe:*:Enabled:Sentinel Keys Server"
"C:\INtime\bin\winntxproxy.exe"="C:\INtime\bin\winntxproxy.exe:*:Enabled:Remote NTX Connections"
"C:\Program Files\TeamViewer\Version8\TeamViewer.exe"="C:\Program Files\TeamViewer\Version8\TeamViewer.exe:*:Enabled:Teamviewer Remote Control Application"
"C:\Program Files\TeamViewer\Version8\TeamViewer_Service.exe"="C:\Program Files\TeamViewer\Version8\TeamViewer_Service.exe:*:Enabled:Teamviewer Remote Control Service"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"midimapper"=midimap.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msadpcm"=msadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.trspch"=tssoft32.acm
"vidc.cvid"=iccvid.dll
"vidc.I420"=msh263.drv
"vidc.iv31"=ir32_32.dll
"vidc.iv32"=ir32_32.dll
"vidc.iv41"=ir41_32.ax
"vidc.iyuv"=iyuv_32.dll
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"vidc.uyvy"=msyuv.dll
"vidc.yuy2"=msyuv.dll
"vidc.yvu9"=tsbyuv.dll
"vidc.yvyu"=msyuv.dll
"wavemapper"=msacm32.drv
"msacm.msg723"=msg723.acm
"vidc.M263"=msh263.drv
"vidc.M261"=msh261.drv
"msacm.msaudio1"=msaud32.acm
"msacm.sl_anet"=sl_anet.acm
"msacm.iac2"=C:\WINDOWS\system32\iac25_32.ax
"vidc.iv50"=ir50_32.dll
"msacm.l3acm"=C:\WINDOWS\system32\l3codeca.acm
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv
"wave2"=wdmaud.drv
"midi2"=wdmaud.drv
"mixer2"=wdmaud.drv
"wave3"=wdmaud.drv
"midi3"=wdmaud.drv
"mixer3"=wdmaud.drv
"wave4"=wdmaud.drv
"midi4"=wdmaud.drv
"mixer4"=wdmaud.drv
"wave5"=wdmaud.drv
"midi5"=wdmaud.drv
"mixer5"=wdmaud.drv
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"aux1"=wdmaud.drv

======List of files/folders created in the last 1 month======

2013-10-31 15:18:47 ----D---- C:\rsit
2013-10-31 15:18:47 ----D---- C:\Program Files\trend micro
2013-10-30 17:48:15 ----HD---- C:\windows\msdownld.tmp
2013-10-30 16:22:30 ----SHD---- C:\Config.Msi
2013-10-30 16:19:57 ----D---- C:\windows\E713FEDC4C784BDE8E9177D9B7C23C50.TMP
2013-10-30 15:13:04 ----D---- C:\Program Files\Mozilla Firefox
2013-10-29 17:13:23 ----D---- C:\Program Files\GPU-Z
2013-10-15 15:46:51 ----A---- C:\windows\system32\ImportIso.dll
2013-10-15 15:44:52 ----A---- C:\windows\system32\ZipArch.dll
2013-10-15 15:44:52 ----A---- C:\windows\system32\xerces-c100.dll
2013-10-15 15:44:52 ----A---- C:\windows\system32\xerces-c.dll
2013-10-15 15:44:52 ----A---- C:\windows\system32\WTT.dll
2013-10-15 15:44:52 ----A---- C:\windows\system32\utils.dll
2013-10-15 15:44:52 ----A---- C:\windows\system32\ToolingDll.dll
2013-10-15 15:44:52 ----A---- C:\windows\system32\pktlib.dll
2013-10-15 15:44:52 ----A---- C:\windows\system32\PathFinder.dll
2013-10-15 15:44:51 ----A---- C:\windows\system32\PanProcessor10.dll
2013-10-15 15:44:51 ----A---- C:\windows\system32\PanProcessor.dll
2013-10-15 15:44:51 ----A---- C:\windows\system32\MachineDll.dll
2013-10-15 15:44:51 ----A---- C:\windows\system32\IVF405.DLL
2013-10-15 15:44:51 ----A---- C:\windows\system32\IvDLZlib.dll
2013-10-15 15:44:50 ----A---- C:\windows\system32\IvDLTiff.dll
2013-10-15 15:44:50 ----A---- C:\windows\system32\IvDLPng.dll
2013-10-15 15:44:50 ----A---- C:\windows\system32\IvDLJpeg.dll
2013-10-15 15:44:50 ----A---- C:\windows\system32\IvDLJasper.dll
2013-10-15 15:44:50 ----A---- C:\windows\system32\INVW405.DLL
2013-10-15 15:44:50 ----A---- C:\windows\system32\InvSV115.DLL
2013-10-15 15:44:50 ----A---- C:\windows\system32\INVR405.DLL
2013-10-15 15:44:50 ----A---- C:\windows\system32\INV405.DLL
2013-10-15 15:44:50 ----A---- C:\windows\system32\IntDXF.dll
2013-10-15 15:44:50 ----A---- C:\windows\system32\IntBOOLEAN.dll
2013-10-15 15:44:50 ----A---- C:\windows\system32\IntAPIU0289.dll
2013-10-15 15:44:49 ----A---- C:\windows\system32\IntAPI0362.dll
2013-10-15 15:44:49 ----A---- C:\windows\system32\IJL15.DLL
2013-10-15 15:44:49 ----A---- C:\windows\system32\ChkParameters.dll
2013-10-15 15:44:49 ----A---- C:\windows\system32\FROd.dll
2013-10-15 15:44:49 ----A---- C:\windows\system32\FRO.dll
2013-10-15 15:44:49 ----A---- C:\windows\system32\EgaU.dll
2013-10-15 15:44:49 ----A---- C:\windows\system32\EdgLib.dll
2013-10-15 15:44:49 ----A---- C:\windows\system32\Dialogs80.dll
2013-10-15 15:44:49 ----A---- C:\windows\system32\CoinMP.dll
2013-10-15 15:44:49 ----A---- C:\windows\system32\CniDgnXml.dll
2013-10-15 15:44:49 ----A---- C:\windows\system32\CN_IE.dll
2013-10-15 15:44:49 ----A---- C:\windows\system32\CadViewerU.dll
2013-10-15 15:44:49 ----A---- C:\windows\system32\BsTreeU.dll
2013-10-15 15:44:49 ----A---- C:\windows\system32\BsPreviewU.dll
2013-10-15 15:44:48 ----A---- C:\windows\system32\BsPreview80.dll
2013-10-15 15:44:48 ----A---- C:\windows\system32\BsLockU.dll
2013-10-15 15:44:48 ----A---- C:\windows\system32\BSCHD80.dll
2013-10-15 15:44:48 ----A---- C:\windows\system32\BsFileDialog.dll
2013-10-15 15:44:48 ----A---- C:\windows\system32\BsCamUtils.dll
2013-10-15 15:44:48 ----A---- C:\windows\system32\BarCodeCodec20.dll
2013-10-15 15:44:48 ----A---- C:\windows\system32\BarCodeCodec11.dll
2013-10-15 15:44:48 ----A---- C:\windows\system32\BarCodeCodec.dll
2013-10-15 15:44:44 ----D---- C:\Program Files\Common Files\BSWK_cache
2013-10-15 15:44:22 ----A---- C:\BiesseWorks-10-15-2013-1644.txt
2013-10-15 15:37:51 ----A---- C:\BiesseWorks-10-15-2013-1637.txt
2013-10-09 19:29:44 ----A---- C:\windows\system32\FlashPlayerInstaller.exe
2013-10-04 18:46:57 ----D---- C:\Documents and Settings\xp600\Application Data\Corel
2013-10-04 18:03:15 ----D---- C:\Program Files\Common Files\Corel
2013-10-04 17:58:30 ----D---- C:\Program Files\Common Files\Protexis
2013-10-04 17:57:34 ----D---- C:\Documents and Settings\All Users\Application Data\Corel
2013-10-04 17:37:48 ----D---- C:\Program Files\Corel
2013-10-04 17:35:10 ----D---- C:\Documents and Settings\All Users\Application Data\CorelDRAW Graphics Suite X6

======List of files/folders modified in the last 1 month======

2013-10-31 15:18:54 ----D---- C:\windows\Prefetch
2013-10-31 15:18:47 ----RD---- C:\Program Files
2013-10-31 15:00:37 ----D---- C:\windows\Temp
2013-10-31 14:35:29 ----D---- C:\windows\system32
2013-10-31 14:35:28 ----A---- C:\windows\system32\log.txt
2013-10-31 14:34:28 ----A---- C:\windows\SchedLgU.Txt
2013-10-31 14:30:16 ----SHD---- C:\windows\CSC
2013-10-31 06:50:31 ----RASH---- C:\boot.ini
2013-10-31 05:57:43 ----D---- C:\WINDOWS
2013-10-30 17:47:20 ----D---- C:\temp
2013-10-30 17:47:18 ----D---- C:\windows\system32\DirectX
2013-10-30 17:47:17 ----HD---- C:\windows\inf
2013-10-30 17:47:15 ----D---- C:\windows\system32\CatRoot2
2013-10-30 16:29:35 ----D---- C:\Program Files\Mozilla Maintenance Service
2013-10-30 16:29:29 ----SHD---- C:\windows\Installer
2013-10-30 16:19:19 ----SD---- C:\windows\Tasks
2013-10-29 17:47:09 ----RSD---- C:\windows\assembly
2013-10-29 17:46:33 ----D---- C:\windows\Logs
2013-10-29 17:18:55 ----RSHDC---- C:\windows\system32\dllcache
2013-10-29 17:18:49 ----D---- C:\windows\system32\drivers
2013-10-29 16:51:23 ----D---- C:\Program Files\CCleaner
2013-10-29 16:23:59 ----D---- C:\windows\WinSxS
2013-10-29 16:17:57 ----D---- C:\Program Files\Programy
2013-10-29 06:00:53 ----A---- C:\windows\system32\PerfStringBackup.INI
2013-10-21 05:09:26 ----D---- C:\Program Files\McAfee Security Scan
2013-10-15 15:49:02 ----D---- C:\Biesse
2013-10-15 15:44:59 ----D---- C:\Program Files\Common Files\BiesseGroup
2013-10-15 15:44:44 ----D---- C:\Program Files\Common Files
2013-10-15 15:44:42 ----HD---- C:\Program Files\InstallShield Installation Information
2013-10-15 15:32:15 ----D---- C:\Backup WNC
2013-10-10 07:29:13 ----A---- C:\windows\system32\FlashPlayerApp.exe
2013-10-04 19:15:47 ----D---- C:\windows\Microsoft.NET
2013-10-04 18:13:37 ----D---- C:\Documents and Settings\All Users\Application Data\Microsoft Help
2013-10-04 17:44:13 ----RSD---- C:\windows\Fonts
2013-10-04 13:52:54 ----D---- C:\I386
2013-10-03 19:57:26 ----D---- C:\ks

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 rtif;rtif; C:\windows\system32\DRIVERS\rtif.sys [2011-01-20 89912]
R1 eamon;eamon; C:\windows\system32\DRIVERS\eamon.sys [2012-10-08 159832]
R1 ehdrv;ehdrv; C:\windows\system32\DRIVERS\ehdrv.sys [2012-10-08 121216]
R1 epfwtdir;epfwtdir; C:\windows\system32\DRIVERS\epfwtdir.sys [2012-10-08 104736]
R1 kbdhid;Keyboard HID Driver; C:\windows\system32\DRIVERS\kbdhid.sys [2008-04-14 14592]
R2 Sentinel;Sentinel; C:\windows\System32\Drivers\SENTINEL.SYS [2009-09-17 92712]
R3 e1cexpress;Intel(R) PRO/1000 PCI Express Network Connection Driver C; C:\windows\system32\DRIVERS\e1c5132.sys [2010-10-13 174248]
R3 HDAudBus;Microsoft UAA Bus Driver for High Definition Audio; C:\windows\system32\DRIVERS\HDAudBus.sys [2008-04-14 144384]
R3 hidusb;Microsoft HID Class Driver; C:\windows\system32\DRIVERS\hidusb.sys [2008-04-14 10368]
R3 ialm;ialm; C:\windows\system32\DRIVERS\igxpmp32.sys [2013-02-12 2530720]
R3 IntcDAud;Intel(R) Display Audio; C:\windows\system32\DRIVERS\IntcDAud.sys [2011-12-06 270080]
R3 MEI;Intel(R) Management Engine Interface; C:\windows\system32\DRIVERS\HECI.sys [2010-10-20 41088]
R3 mouhid;Mouse HID Driver; C:\windows\system32\DRIVERS\mouhid.sys [2008-04-14 12160]
R3 rtdrm;rtdrm; C:\windows\system32\DRIVERS\rtdrm.sys [2011-01-20 16440]
R3 SNTNLUSB;SafeNet USB SuperPro/UltraPro/HardwareKey; C:\windows\system32\DRIVERS\SNTNLUSB.SYS [2009-09-17 38376]
R3 VEther;TenAsys Virtual Ethernet Adapter; C:\windows\system32\DRIVERS\vether.sys [2011-01-20 35000]
S3 E1000;Intel(R) PRO/1000 Network Connection Driver; C:\windows\system32\DRIVERS\e1000325.sys [2008-08-20 171152]
S3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\windows\system32\drivers\RtDHDAud.sys [2010-10-04 5884520]
S3 nv;nv; C:\windows\system32\DRIVERS\nv4_mini.sys [2011-03-28 9933952]
S3 NVHDA;Service for NVIDIA High Definition Audio Driver; C:\windows\system32\drivers\nvhda32.sys [2011-03-03 119272]
S3 usbccgp;Microsoft USB Generic Parent Driver; C:\windows\system32\DRIVERS\usbccgp.sys [2008-04-14 32128]
S3 usbscan;USB Scanner Driver; C:\windows\system32\DRIVERS\usbscan.sys [2008-04-13 15104]
S3 USBSTOR;USB Mass Storage Driver; C:\windows\system32\DRIVERS\USBSTOR.SYS [2008-04-14 26368]
S4 intelppm;Intel Processor Driver; C:\windows\system32\DRIVERS\intelppm.sys [2008-04-14 36352]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 ekrn;ESET Service; C:\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe [2012-11-26 1329304]
R2 HCLInetd;Hummingbird Inetd; C:\windows\system32\HUMMBIRD\Inetd32.exe [2012-09-20 32768]
R2 INtimeClockSync;INtime Clock Synchronization Service; C:\INtime\bin\rtclksrv.exe [2011-01-20 49152]
R2 INtimeEventLog;INtime Event Log Service; C:\INtime\bin\rtelsrv.exe [2011-01-20 80384]
R2 INtimeIO;INtime I/O Service; C:\INtime\bin\rtiosrv.exe [2011-01-20 112640]
R2 INtimeKernelManager;INtime Kernel Manager; C:\INtime\bin\loadrtk.exe [2012-03-09 1239552]
R2 INtimeNodeDetection;INtime Node Detection Service; C:\INtime\bin\rtndsrv.exe [2011-01-20 68096]
R2 INtimeNtxRemote;INtime Remote Connection Manager; C:\INtime\bin\ntxremote2.exe [2011-01-20 69632]
R2 INtimeRegistry;INtime Registry Service; C:\INtime\bin\rtregsrv.exe [2011-01-20 65536]
R2 JavaQuickStarterService;Java Quick Starter; C:\Program Files\Java\jre7\bin\jqs.exe [2013-08-30 182184]
R2 LMS;Intel(R) Management and Security Application Local Management Service; C:\Program Files\Intel\Intel(R) Management Engine Components\LMS\LMS.exe [2011-01-17 326168]
R2 PSI_SVC_2;Protexis Licensing V2; c:\Program Files\Common Files\Protexis\License Service\PsiService_2.exe [2010-03-10 189728]
R2 SentinelKeysServer;Sentinel Keys Server; C:\Program Files\Common Files\SafeNet Sentinel\Sentinel Keys Server\sntlkeyssrvr.exe [2009-09-17 369952]
R2 SentinelSecurityRuntime;Sentinel Security Runtime; C:\Program Files\Common Files\SafeNet Sentinel\Sentinel Security Runtime\sntlsrtsrvr.exe [2009-09-17 292128]
R2 TeamViewer8;TeamViewer 8; C:\Program Files\TeamViewer\Version8\TeamViewer_Service.exe [2013-10-01 5087584]
R2 UNS;Intel(R) Management and Security Application User Notification Service; C:\Program Files\Intel\Intel(R) Management Engine Components\UNS\UNS.exe [2011-01-17 2656280]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\WINDOWS\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
S2 gupdate;Služba Google Update (gupdate); C:\Program Files\Google\Update\GoogleUpdate.exe [2013-08-29 116648]
S2 nvsvc;NVIDIA Display Driver Service; C:\windows\system32\nvsvc32.exe [2011-03-24 155752]
S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service; C:\windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2013-10-10 257416]
S3 aspnet_state;ASP.NET State Service; C:\windows\Microsoft.NET\Framework\v4.0.30319\aspnet_state.exe [2010-03-19 35160]
S3 clr_optimization_v2.0.50727_32;.NET Runtime Optimization Service v2.0.50727_X86; c:\windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe [2008-07-25 69632]
S3 FontCache3.0.0.0;Windows Presentation Foundation Font Cache 3.0.0.0; c:\windows\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe [2008-07-29 46104]
S3 gupdatem;Služba Google Update (gupdatem); C:\Program Files\Google\Update\GoogleUpdate.exe [2013-08-29 116648]
S3 IDriverT;InstallDriver Table Manager; C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe [2005-04-04 69632]
S3 idsvc;Windows CardSpace; c:\windows\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe [2008-07-29 881664]
S3 McComponentHostService;McAfee Security Scan Component Host Service; C:\Program Files\McAfee Security Scan\3.8.130\McCHSvc.exe [2013-09-06 235216]
S3 MozillaMaintenance;Mozilla Maintenance Service; C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe [2013-10-30 119408]
S3 SentinelProtectionServer;Sentinel Protection Server; C:\Program Files\Common Files\SafeNet Sentinel\Sentinel Protection Server\WinNT\spnsrvnt.exe [2009-09-17 1246496]
S3 WPFFontCache_v0400;Windows Presentation Foundation Font Cache 4.0.0.0; C:\WINDOWS\Microsoft.NET\Framework\v4.0.30319\WPF\WPFFontCache_v0400.exe [2010-03-18 753504]
S4 NetTcpPortSharing;Net.Tcp Port Sharing Service; c:\windows\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe [2008-07-29 132096]

-----------------EOF-----------------

[Lord Excalibur]

Detection ratio: 36 / 47
vidím, že zrovna náš anivir ho nechal projít. zneškodňuji.

[Lord Excalibur]

https://www.virustotal.com/cs/file/f37d ... /analysis/
úspěšně odstraněno, včetně registrů

[Lord Excalibur]

Obrábění dřeva. díky tomu naštění zastavení nástroje v materiálu nevede k jeho zničení a většinou lze pokračovat ve výrobě. A stroj je moderní, tomu se nic nestane.

[Lord Excalibur]

Jinak je v logu vše v pořádku? PC příliš dlouho startuje, i s ohledem na spouštění aplikací pro ovládání. A často dochází k vytížení procesem svchost.exe což dokonce zpomaluje odezvu stroje.

[Lord Excalibur]

Google aplikace tu jsou skutečně k ničemu. Odstraněno. Taky mám strach se v tom hrabat, dělám pouze to, co 100% vim co způsobí. Děkuji za rady, doufám, že ten lyxuv.exe byl zdrojem restartování, uvidíme. Testem bude ještě půl směny.
edit ihned po odeslání došlo k restartování.