Cierna obrazovka

[motji]

Nespouštějte hned mbr, musíte jít přes start - spustit a napsat ten příkaz

[ikra]

skusila som to tak aj furt ziadna tabulka kde by som mohla dat ten kod

[motji]

Tahle tabulka na Vás bafla? Jestli ano, zkopírujte příkaz do toho řádku

[ikra]

vyskocila mi tabulka ze Odkaz C:\Documents and Settings\Administrator\plocha sa vzťahuje na umiestnenie, ktoré nie je k dispozícii... atď

[motji]

a nedáme to dohromady a nedáme

Zkuste tento příkaz

"%userprofile%\desktop\mbr" -t

[ikra]

Stealth MBR rootkit/Mebroot/Sinowal detector 0.3.7 by Gmer, http://www.gmer.net

device: opened successfully
user: MBR read successfully
called modules: ntoskrnl.exe CLASSPNP.SYS disk.sys ACPI.sys hal.dll SCSIPORT.SYS viamraid.sys
kernel: MBR read successfully
user & kernel MBR OK

[jaojao]

Jen vsuvka, ten gmer má stejné parametry jako zde (dole v odkaze), už to tam někdo řešil (jenže nedořešil, dotyčný neměl orig. windows ):
http://www.viry.cz/forum/viewtopic.php? ... 6&start=15

[motji]

Jen vsuvka, ten gmer má stejné parametry jako zde (dole v odkaze), už to tam někdo řešil (jenže nedořešil, dotyčný neměl orig. windows ):
http://www.viry.cz/forum/viewtopic.php? ... 6&start=15

Stejné parametry? Můžete mi prosím do sz napsat, jak to myslíte? Zde pokračovat v tomto rozhovoru nebudeme, at se to tu neplete

IKRA
Jakou máte grafiku? Můžete změřit teplotu grafické karty?
ta černá obrazovka se ukazuje jen u té hry?



Pokud nemáte, přesuňte Combofix na plochu
-otevřete si Poznámkový blok
-Do něj zkopírujte text z tohoto okénka

Kód: Vybrat vše

DDS::
mStart Page = hxxp://home.sweetim.com
Firefox::
FF - ProfilePath - c:\documents and settings\Administrator\Application Data\Mozilla\Firefox\Profiles\6rtjdc6w.default\
FF - prefs.js: browser.search.defaulturl - hxxp://search13.net/search.php?clid=486&q=
FF - prefs.js: browser.search.selectedEngine - ICQ Search
FF - prefs.js: browser.startup.homepage - hxxp://search13.net?clid=486
FF - prefs.js: keyword.URL - hxxp://search13.net/search.php?clid=486&q=

-uložte Vámi vytvořený TXT soubor jako CFScript.txt na plochu
-po uložení uchopte vámi vytvořený skript levým myšítkem a -přesuňte ho nad ikonu Combofixu, kde ho upustíte:




-po aplikaci na Vás vypadne další log,vložte ho sem


Upozornění : může se stát, že po aplikaci skriptu a restartu Windows nenaběhnou, v tom případě znovu restartujte a přitom mačkejte F8, pak zvolte Poslední známou funkční konfiguraci


Přečtěte si sz

[ikra]

Tá čierna obrazovka sa objavuje pri rôznych hrách a pri videách na internete, niekedy hneď, niekedy hram/pozeram aj hodinu a nic sa nestane...

Teploty:
Základní deska 37°C (99°F)
CPU 61°C (144°F)
Aux 7°C (45°F)

ComboFix 10-02-03.07 - Administrator 06.02.2010 13:14:05.2.2 - x86
Systém Microsoft Windows XP Professional 5.1.2600.2.1250.421.1033.18.959.600 [GMT 1:00]
Running from: c:\documents and settings\Administrator\Desktop\ComboFix.exe
Command switches used :: c:\documents and settings\Administrator\Desktop\CFScript.txt
AV: ESET NOD32 Antivirus 4.0 *On-access scanning disabled* (Updated) {E5E70D32-0101-4F12-8FB0-D96ACA4F34C0}
.

((((((((((((((((((((((((( Files Created from 2010-01-06 to 2010-02-06 )))))))))))))))))))))))))))))))
.

2010-02-02 21:14 . 2010-02-02 21:14 -------- d-----w- c:\program files\trend micro
2010-02-02 21:14 . 2010-02-02 21:14 -------- d-----w- C:\rsit
2010-02-01 23:28 . 2010-02-01 23:28 -------- d-----w- c:\windows\system32\KB905474
2010-02-01 23:28 . 2009-03-10 21:26 1403264 ----a-w- c:\windows\system32\KB905474\wganotifypackageinner.exe
2010-02-01 23:28 . 2009-03-10 21:18 453512 ----a-w- c:\windows\system32\KB905474\wgasetup.exe
2010-02-01 23:26 . 2004-08-04 01:07 221184 ----a-w- c:\windows\system32\wmpns.dll
2010-02-01 23:22 . 2010-02-01 23:22 -------- d-----w- c:\windows\ServicePackFiles
2010-02-01 23:21 . 2010-02-01 23:21 -------- d-----w- c:\program files\MSXML 4.0
2010-02-01 21:55 . 2010-02-05 16:46 -------- d-----w- c:\windows\system32\CatRoot_bak
2010-02-01 21:49 . 2008-10-24 11:10 453632 -c----w- c:\windows\system32\dllcache\mrxsmb.sys
2010-02-01 21:48 . 2008-06-13 13:10 272128 -c----w- c:\windows\system32\dllcache\bthport.sys
2010-02-01 21:48 . 2008-06-13 13:10 272128 ------w- c:\windows\system32\drivers\bthport.sys
2010-02-01 21:45 . 2009-08-04 14:00 2180352 -c----w- c:\windows\system32\dllcache\ntoskrnl.exe
2010-02-01 21:45 . 2009-08-04 13:58 2136064 -c----w- c:\windows\system32\dllcache\ntkrnlmp.exe
2010-02-01 21:45 . 2009-08-04 13:13 2015744 -c----w- c:\windows\system32\dllcache\ntkrpamp.exe
2010-02-01 21:45 . 2009-08-04 13:13 2057728 -c----w- c:\windows\system32\dllcache\ntkrnlpa.exe
2010-02-01 21:31 . 2010-02-03 13:33 -------- d--h--w- c:\windows\$hf_mig$
2010-02-01 16:01 . 2010-02-01 16:01 5115824 ----a-w- c:\documents and settings\All Users\Application Data\Malwarebytes\Malwarebytes' Anti-Malware\mbam-setup.exe
2010-02-01 16:01 . 2010-02-01 16:01 -------- d-----w- c:\documents and settings\Administrator\Application Data\Malwarebytes
2010-02-01 16:01 . 2010-01-07 15:07 38224 ----a-w- c:\windows\system32\drivers\mbamswissarmy.sys
2010-02-01 16:01 . 2010-02-01 16:01 -------- d-----w- c:\documents and settings\All Users\Application Data\Malwarebytes
2010-02-01 16:01 . 2010-01-07 15:07 19160 ----a-w- c:\windows\system32\drivers\mbam.sys
2010-02-01 16:01 . 2010-02-01 16:03 -------- d-----w- c:\program files\Malwarebytes' Anti-Malware
2010-01-20 17:01 . 2010-01-20 17:01 -------- d-----w- c:\windows\system32\drivers\NSS
2010-01-20 17:01 . 2010-01-20 17:01 -------- d-----w- c:\program files\Norton Security Scan

.
(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2010-02-05 21:47 . 2009-12-27 19:06 -------- d-----w- c:\program files\Metin2_CZ
2010-02-05 17:30 . 2009-02-18 23:10 -------- d-----w- c:\program files\Google
2010-02-05 16:46 . 2008-04-18 20:06 -------- d-----w- c:\documents and settings\Administrator\Application Data\uTorrent
2010-02-05 16:45 . 2009-11-06 21:16 -------- d-----w- c:\documents and settings\Administrator\Application Data\vlc
2010-02-05 15:22 . 2009-02-18 23:10 -------- d-----w- c:\documents and settings\All Users\Application Data\Google Updater
2010-01-27 16:12 . 2009-12-27 17:04 -------- d-----w- c:\program files\Common Files\Symantec Shared
2010-01-20 17:01 . 2009-12-22 14:32 -------- d-----w- c:\documents and settings\All Users\Application Data\Norton
2010-01-20 17:01 . 2009-12-22 14:32 -------- d-----w- c:\documents and settings\All Users\Application Data\NortonInstaller
2010-01-02 22:15 . 2009-11-06 21:16 -------- d-----w- c:\documents and settings\Administrator\Application Data\dvdcss
2009-12-27 22:17 . 2008-04-18 20:06 -------- d-----w- c:\program files\uTorrent
2009-12-22 14:32 . 2009-12-22 14:32 -------- d-----w- c:\documents and settings\All Users\Application Data\Symantec
2009-12-22 14:32 . 2009-12-22 14:32 -------- d-----w- c:\program files\NortonInstaller
2009-12-22 11:33 . 2008-04-05 06:41 -------- d-----w- c:\program files\DivX
2009-12-22 11:32 . 2009-12-22 11:32 -------- d-----w- c:\program files\Common Files\DivX Shared
2009-12-22 05:42 . 2004-08-04 01:07 662016 ------w- c:\windows\system32\wininet.dll
2009-12-22 05:42 . 2004-08-04 01:07 81920 ----a-w- c:\windows\system32\ieencode.dll
2009-11-21 16:36 . 2004-08-04 01:07 470528 ----a-w- c:\windows\AppPatch\aclayers.dll
.

((((((((((((((((((((((((((((( SnapShot@2010-02-05_12.02.21 )))))))))))))))))))))))))))))))))))))))))
.
+ 2010-02-06 11:29 . 2010-02-06 11:29 16384 c:\windows\Temp\Perflib_Perfdata_38c.dat
- 2008-12-24 20:21 . 2008-07-09 07:38 26488 c:\windows\system32\spupdsvc.exe
+ 2008-12-24 20:21 . 2007-08-10 19:46 26488 c:\windows\system32\spupdsvc.exe
+ 2010-02-05 17:31 . 2010-02-05 17:31 25214 c:\windows\Installer\{2EAF7E61-068E-11DF-953C-005056806466}\UNINST_Uninstall_G_F6A848FB884248E6A4CDCBDCF41F6A74_1.exe
+ 2010-02-05 17:31 . 2010-02-05 17:31 25214 c:\windows\Installer\{2EAF7E61-068E-11DF-953C-005056806466}\UNINST_Uninstall_G_F6A848FB884248E6A4CDCBDCF41F6A74.exe
+ 2010-02-05 17:31 . 2010-02-05 17:31 25214 c:\windows\Installer\{2EAF7E61-068E-11DF-953C-005056806466}\ShortcutOGL_EB071909B9884F8CBF3D6115D4ADEE5E.exe
+ 2010-02-05 17:31 . 2010-02-05 17:31 25214 c:\windows\Installer\{2EAF7E61-068E-11DF-953C-005056806466}\ShortcutDX_EB071909B9884F8CBF3D6115D4ADEE5E.exe
+ 2010-02-05 17:31 . 2010-02-05 17:31 25214 c:\windows\Installer\{2EAF7E61-068E-11DF-953C-005056806466}\googleearth.exe1_F6A848FB884248E6A4CDCBDCF41F6A74.exe
+ 2010-02-05 17:31 . 2010-02-05 17:31 25214 c:\windows\Installer\{2EAF7E61-068E-11DF-953C-005056806466}\googleearth.exe_F6A848FB884248E6A4CDCBDCF41F6A74.exe
+ 2010-02-05 17:31 . 2010-02-05 17:31 25214 c:\windows\Installer\{2EAF7E61-068E-11DF-953C-005056806466}\ARPPRODUCTICON.exe
+ 2008-04-14 00:12 . 2008-04-14 00:12 7680 c:\windows\system32\spdwnwxp.exe
+ 2010-02-05 17:31 . 2010-02-05 17:31 1262080 c:\windows\Installer\149402.msi
.
((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* empty entries & legit default entries are not shown
REGEDIT4

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"EA Core"="c:\program files\Electronic Arts\EADM\Core.exe" [2008-07-21 2752512]
"Nokia.PCSync"="c:\program files\Nokia\Nokia PC Suite 6\PCSync2.exe" [2008-03-26 1232896]
"PC Suite Tray"="c:\program files\Nokia\Nokia PC Suite 6\PCSuite.exe" [2008-04-16 1079808]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"SoundMan"="SOUNDMAN.EXE" [2004-12-01 77824]
"NeroFilterCheck"="c:\windows\system32\NeroCheck.exe" [2001-07-09 155648]
"InCD"="c:\program files\Ahead\InCD\InCD.exe" [2004-08-27 1450096]
"RemoteControl"="c:\program files\CyberLink\PowerDVD\PDVDServ.exe" [2004-11-02 32768]
"VTTimer"="VTTimer.exe" [2004-01-15 49152]
"HP Software Update"="c:\program files\HP\HP Software Update\HPWuSchd2.exe" [2007-03-11 49152]
"egui"="c:\program files\ESET\ESET NOD32 Antivirus\egui.exe" [2009-04-09 2029640]
"SunJavaUpdateSched"="c:\program files\Java\jre6\bin\jusched.exe" [2009-09-23 148888]
"TkBellExe"="c:\program files\Common Files\Real\Update_OB\realsched.exe" [2009-10-04 198160]

[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="c:\windows\system32\CTFMON.EXE" [2004-08-04 15360]

c:\documents and settings\All Users\Start Menu\Programs\Startup\
Adobe Reader Speed Launch.lnk - c:\program files\Adobe\Acrobat 7.0\Reader\reader_sl.exe [2004-12-14 29696]
HP Digital Imaging Monitor.lnk - c:\program files\HP\Digital Imaging\bin\hpqtra08.exe [2007-3-11 210520]
Microsoft Office.lnk - c:\program files\Microsoft Office\Office\OSA9.EXE [1999-2-17 65588]

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"c:\\WINDOWS\\system32\\sessmgr.exe"=
"c:\\Program Files\\uTorrent\\uTorrent.exe"=
"c:\\Program Files\\Skype\\Phone\\Skype.exe"=

R1 ehdrv;ehdrv;c:\windows\system32\drivers\ehdrv.sys [9.4.2009 14:18 107256]
R1 epfwtdir;epfwtdir;c:\windows\system32\drivers\epfwtdir.sys [9.4.2009 14:21 94360]
R2 ekrn;ESET Service;c:\program files\ESET\ESET NOD32 Antivirus\ekrn.exe [9.4.2009 14:19 731840]
S2 gupdate1c9921e29e81748;Služba Google Update (gupdate1c9921e29e81748);c:\program files\Google\Update\GoogleUpdate.exe [19.2.2009 0:10 133104]
S3 SetupNTGLM7X;SetupNTGLM7X;\??\x:\ntglm7x.sys --> x:\NTGLM7X.sys [?]
S4 sptd;sptd;c:\windows\system32\Drivers\sptd.sys --> c:\windows\system32\Drivers\sptd.sys [?]

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost]
HPZ12 REG_MULTI_SZ Pml Driver HPZ12 Net Driver HPZ12
hpdevmgmt REG_MULTI_SZ hpqcxs08 hpqddsvc
.
Contents of the 'Scheduled Tasks' folder

2010-02-06 c:\windows\Tasks\Google Software Updater.job
- c:\program files\Google\Common\Google Updater\GoogleUpdaterService.exe [2009-02-18 20:44]

2010-02-06 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
- c:\program files\Google\Update\GoogleUpdate.exe [2009-02-18 23:10]

2010-02-06 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
- c:\program files\Google\Update\GoogleUpdate.exe [2009-02-18 23:10]

2010-02-06 c:\windows\Tasks\WGASetup.job
- c:\windows\system32\KB905474\wgasetup.exe [2010-02-01 21:18]
.
.
------- Supplementary Scan -------
.
uStart Page = hxxp://www.Google.com
uDefault_Search_URL = hxxp://www.Google.com
uSearchAssistant = hxxp://www.Google.com/
uCustomizeSearch = hxxp://www.Google.com/
IE: {{14CD42DD-ABCD-3586-DCAB-40E3693E3737} - c:\program files\Stylish Profile\ct.htm
FF - ProfilePath - c:\documents and settings\Administrator\Application Data\Mozilla\Firefox\Profiles\6rtjdc6w.default\
FF - component: c:\program files\Real\RealPlayer\browserrecord\firefox\ext\components\nprpffbrowserrecordext.dll
FF - plugin: c:\program files\DivX\DivX Plus Web Player\npdivx32.dll
FF - plugin: c:\program files\Google\Google Earth\plugin\npgeplugin.dll
FF - plugin: c:\program files\Google\Google Updater\2.4.1536.6592\npCIDetect13.dll
FF - plugin: c:\program files\Google\Update\1.2.183.13\npGoogleOneClick8.dll

---- FIREFOX POLICIES ----
c:\program files\Mozilla Firefox\defaults\pref\firefox-l10n.js - pref("browser.fixup.alternate.suffix", ".cz");
.

**************************************************************************

catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2010-02-06 13:18
Windows 5.1.2600 Service Pack 2 NTFS

scanning hidden processes ...

scanning hidden autostart entries ...

scanning hidden files ...

scan completed successfully
hidden files: 0

**************************************************************************
.
--------------------- LOCKED REGISTRY KEYS ---------------------

[HKEY_USERS\S-1-5-21-57989841-1303643608-839522115-500\Software\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved\{8CB30A69-9C09-3FAC-4F2E-0CA497EEE5E2}*]
@Allowed: (Read) (RestrictedCode)
@Allowed: (Read) (RestrictedCode)
"gadhcpjeafhpfc"=hex:63,61,63,6c,6a,69,00,00

[HKEY_USERS\S-1-5-21-57989841-1303643608-839522115-500\Software\SecuROM\License information*]
"datasecu"=hex:ae,0c,b4,a2,c8,75,77,b8,10,47,c8,63,6a,57,ea,bc,46,4f,0e,35,fe,
0a,a4,40,b9,77,15,88,d8,6e,46,8f,96,ed,84,4f,db,26,6d,70,ef,f0,0a,fd,b3,e4,\
"rkeysecu"=hex:cb,bd,f2,61,5a,4e,c6,95,f2,29,8b,82,ba,6b,3d,44
.
--------------------- DLLs Loaded Under Running Processes ---------------------

- - - - - - - > 'explorer.exe'(1064)
c:\windows\system32\msi.dll
.
Completion time: 2010-02-06 13:20:11
ComboFix-quarantined-files.txt 2010-02-06 12:20
ComboFix2.txt 2010-02-05 12:06

Pre-Run: 19 257 110 528 bytes free
Post-Run: 19 411 664 896 bytes free

- - End Of File - - 63305961587358777A192F4DE73EA787

[motji]

Odinstalujte combofix přes
Start >> Spustit zkopírujte do okénka:

ComboFix /Uninstall

stiskněte Enter
-To odinstaluje ComboFix a smaže s ním související soubory a složky.



Stáhněte T-Cleaner
http://sweb.cz/Marinus/T-Cleaner.exe

-Spusťte,pro potvrzení volby mačkejte klávesu A, Enter
-po použití prográmek vymažte.Pozor,antiviry ho mohou falešně označit za vir


Stahněte OTC a použijte
http://oldtimer.geekstogo.com/OTC.exe



Stáhněte Ccleaner,viz můj podpis
-nainstalujte a vyčištěte dočasné soubory, i registry

Vložte nový log ze RSIT a řekněte co počítač,jak se chová,už je vše v pořádku?

Zkusím sem poslat někoho z kolegů od HW, během víkendu se tu někdo objeví

[motji]

Takže teplota CPU je poměrně vysoká, to je notas nebo stolní pc? Potřebuje trochu pročistit

[Čarls]

Omlouvám se za vstup
Takže ty teploty jsou dost vysoké udělejte dle motji a pak toto
Ať to nemusím číst celé NTB nebo klasika
Grafika nebo slabý zdroj to je moje podezření
V obou případech uděláme toto
Uděláme monitoring grafiky stahněte GPU-Z http://www.techpowerup.com/gpuz/
Spustíte GPU-Z a dle obr. zatrhnete Log to file Vyberete kam uložit log!!!!shodíte na lištu a spustíte náročnější hru
až nastane chyba pošlete zabalený log přes http://leteckaposta.cz/
http://tpucdn.com/gpuz/screen2.gif

[ikra]

je to normalny pocitac, nie notebook, tu je log z RSIT


Logfile of random's system information tool 1.06 (written by random/random)
Run by Administrator at 2010-02-06 15:20:14
Systém Microsoft Windows XP Professional Service Pack 2
System drive C: has 19 GB (24%) free of 79 GB
Total RAM: 959 MB (56% free)

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 15:20:26, on 6.2.2010
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Ahead\InCD\InCDsrv.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\SOUNDMAN.EXE
C:\Program Files\Ahead\InCD\InCD.exe
C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe
C:\WINDOWS\system32\VTTimer.exe
C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe
C:\Program Files\Java\jre6\bin\jusched.exe
C:\Program Files\Common Files\Real\Update_OB\realsched.exe
C:\Program Files\Nokia\Nokia PC Suite 6\PCSync2.exe
C:\Program Files\Nokia\Nokia PC Suite 6\PCSuite.exe
C:\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe
C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\PC Connectivity Solution\ServiceLayer.exe
C:\Program Files\PC Connectivity Solution\Transports\NclUSBSrv.exe
C:\Program Files\PC Connectivity Solution\Transports\NclRSSrv.exe
C:\Program Files\Common Files\Nokia\MPAPI\MPAPI3s.exe
C:\Program Files\HP\Digital Imaging\bin\hpqSTE08.exe
C:\WINDOWS\system32\wuauclt.exe
C:\WINDOWS\system32\msiexec.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Documents and Settings\Administrator\My Documents\Downloads\RSIT.exe
C:\Program Files\trend micro\Administrator.exe

R1 - HKCU\Software\Microsoft\Internet Explorer,SearchURL = http://search13.net/search.php?clid=486&q=%s
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R3 - URLSearchHook: (no name) - - (no file)
O2 - BHO: HP Print Enhancer - {0347C33E-8762-4905-BF09-768834316C61} - C:\Program Files\HP\Smart Web Printing\hpswp_printenhancer.dll
O2 - BHO: HP Print Clips - {053F9267-DC04-4294-A72C-58F732D338C0} - C:\Program Files\HP\Smart Web Printing\hpswp_framework.dll
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: RealPlayer Download and Record Plugin for Internet Explorer - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\Program Files\Real\RealPlayer\rpbrowserrecordplugin.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.1.1309.3572\swg.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [InCD] C:\Program Files\Ahead\InCD\InCD.exe
O4 - HKLM\..\Run: [RemoteControl] "C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe"
O4 - HKLM\..\Run: [VTTimer] VTTimer.exe
O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
O4 - HKLM\..\Run: [egui] "C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe" /hide /waitservice
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre6\bin\jusched.exe"
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot
O4 - HKCU\..\Run: [EA Core] C:\Program Files\Electronic Arts\EADM\Core.exe -silent
O4 - HKCU\..\Run: [Nokia.PCSync] "C:\Program Files\Nokia\Nokia PC Suite 6\PCSync2.exe" /NoDialog
O4 - HKCU\..\Run: [PC Suite Tray] "C:\Program Files\Nokia\Nokia PC Suite 6\PCSuite.exe" -onlytray
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office\OSA9.EXE
O9 - Extra button: StylishProfile - {14CD42DD-ABCD-3586-DCAB-40E3693E3737} - C:\Program Files\Stylish Profile\ct.htm (file missing)
O9 - Extra 'Tools' menuitem: StylishProfile - {14CD42DD-ABCD-3586-DCAB-40E3693E3737} - C:\Program Files\Stylish Profile\ct.htm (file missing)
O9 - Extra button: HP Clipbook - {58ECB495-38F0-49cb-A538-10282ABF65E7} - C:\Program Files\HP\Smart Web Printing\hpswp_extensions.dll
O9 - Extra button: HP Smart Select - {700259D7-1666-479a-93B1-3250410481E8} - C:\Program Files\HP\Smart Web Printing\hpswp_extensions.dll
O9 - Extra button: ICQ6 - {E59EB121-F339-4851-A3BA-FE49C35617C2} - C:\Program Files\ICQ6.5\ICQ.exe (file missing)
O9 - Extra 'Tools' menuitem: ICQ6 - {E59EB121-F339-4851-A3BA-FE49C35617C2} - C:\Program Files\ICQ6.5\ICQ.exe (file missing)
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O23 - Service: ESET HTTP Server (EhttpSrv) - ESET - C:\Program Files\ESET\ESET NOD32 Antivirus\EHttpSrv.exe
O23 - Service: ESET Service (ekrn) - ESET - C:\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe
O23 - Service: Služba Google Update (gupdate1c9921e29e81748) (gupdate1c9921e29e81748) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: Google Software Updater (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: InCD Helper (InCDsrv) - Ahead Software AG - C:\Program Files\Ahead\InCD\InCDsrv.exe
O23 - Service: InCD Helper (read only) (InCDsrvR) - Ahead Software AG - C:\Program Files\Ahead\InCD\InCDsrv.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe
O23 - Service: ServiceLayer - Nokia. - C:\Program Files\PC Connectivity Solution\ServiceLayer.exe

--
End of file - 7217 bytes

======Scheduled tasks folder======

C:\WINDOWS\tasks\Google Software Updater.job
C:\WINDOWS\tasks\GoogleUpdateTaskMachineCore.job
C:\WINDOWS\tasks\GoogleUpdateTaskMachineUA.job
C:\WINDOWS\tasks\WGASetup.job

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{0347C33E-8762-4905-BF09-768834316C61}]
HP Print Enhancer - C:\Program Files\HP\Smart Web Printing\hpswp_printenhancer.dll [2007-03-02 1298024]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{053F9267-DC04-4294-A72C-58F732D338C0}]
HP Print Clips - C:\Program Files\HP\Smart Web Printing\hpswp_framework.dll [2007-03-02 177768]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{06849E9F-C8D7-4D59-B87D-784B7D6BE0B3}]
AcroIEHlprObj Class - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll [2004-12-14 63136]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{3049C3E9-B461-4BC5-8870-4C09146192CA}]
RealPlayer Download and Record Plugin for Internet Explorer - C:\Program Files\Real\RealPlayer\rpbrowserrecordplugin.dll [2009-10-04 329312]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AF69DE43-7D58-4638-B6FA-CE66B5AD205D}]
Google Toolbar Notifier BHO - C:\Program Files\Google\GoogleToolbarNotifier\5.1.1309.3572\swg.dll [2009-03-20 668656]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre6\bin\jp2ssv.dll [2009-09-23 41368]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{E7E6F031-17CE-4C07-BC86-EABFE594F69C}]
JQSIEStartDetectorImpl Class - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll [2009-09-23 73728]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"SoundMan"=C:\WINDOWS\SOUNDMAN.EXE [2004-12-01 77824]
"NeroFilterCheck"=C:\WINDOWS\system32\NeroCheck.exe [2001-07-09 155648]
"InCD"=C:\Program Files\Ahead\InCD\InCD.exe [2004-08-27 1450096]
"RemoteControl"=C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe [2004-11-02 32768]
"VTTimer"=C:\WINDOWS\system32\VTTimer.exe [2004-01-15 49152]
"HP Software Update"=C:\Program Files\HP\HP Software Update\HPWuSchd2.exe [2007-03-11 49152]
"egui"=C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe [2009-04-09 2029640]
"SunJavaUpdateSched"=C:\Program Files\Java\jre6\bin\jusched.exe [2009-09-23 148888]
"TkBellExe"=C:\Program Files\Common Files\Real\Update_OB\realsched.exe [2009-10-04 198160]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"EA Core"=C:\Program Files\Electronic Arts\EADM\Core.exe [2008-07-21 2752512]
"Nokia.PCSync"=C:\Program Files\Nokia\Nokia PC Suite 6\PCSync2.exe [2008-03-26 1232896]
"PC Suite Tray"=C:\Program Files\Nokia\Nokia PC Suite 6\PCSuite.exe [2008-04-16 1079808]

C:\Documents and Settings\All Users\Start Menu\Programs\Startup
Adobe Reader Speed Launch.lnk - C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
HP Digital Imaging Monitor.lnk - C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
Microsoft Office.lnk - C:\Program Files\Microsoft Office\Office\OSA9.EXE

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=323
"NoDriveAutoRun"=67108863
"NoDrives"=0

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"HonorAutoRunSetting"=
"NoDriveAutoRun"=
"NoDriveTypeAutoRun"=
"NoDrives"=

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"C:\WINDOWS\system32\sessmgr.exe"="C:\WINDOWS\system32\sessmgr.exe:*:Disabled:@xpsp2res.dll,-22019"
"C:\Program Files\uTorrent\uTorrent.exe"="C:\Program Files\uTorrent\uTorrent.exe:*:Enabled:µTorrent"
"C:\Program Files\Skype\Phone\Skype.exe"="C:\Program Files\Skype\Phone\Skype.exe:*:Enabled:Skype"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"

======List of files/folders created in the last 1 months======

2010-02-06 15:20:14 ----D---- C:\rsit
2010-02-06 15:20:14 ----D---- C:\Program Files\trend micro
2010-02-06 15:03:12 ----D---- C:\Program Files\CCleaner
2010-02-06 14:56:19 ----SHD---- C:\RECYCLER
2010-02-05 17:56:25 ----HDC---- C:\WINDOWS\$NtServicePackUninstall$
2010-02-05 12:56:04 ----A---- C:\Boot.bak
2010-02-05 12:56:01 ----RASHD---- C:\cmdcons
2010-02-03 14:33:31 ----HDC---- C:\WINDOWS\$NtUninstallKB951376-v2$
2010-02-03 14:33:22 ----HDC---- C:\WINDOWS\$NtUninstallKB952954$
2010-02-03 14:33:12 ----HDC---- C:\WINDOWS\$NtUninstallKB959426$
2010-02-03 14:32:58 ----HDC---- C:\WINDOWS\$NtUninstallKB946648$
2010-02-03 14:29:34 ----A---- C:\WINDOWS\system32\MRT.exe
2010-02-03 14:22:34 ----HDC---- C:\WINDOWS\$NtUninstallKB970430$
2010-02-03 14:22:06 ----HDC---- C:\WINDOWS\$NtUninstallKB971737$
2010-02-02 00:30:04 ----HDC---- C:\WINDOWS\$NtUninstallKB956803$
2010-02-02 00:29:52 ----HDC---- C:\WINDOWS\$NtUninstallKB960859$
2010-02-02 00:29:24 ----HDC---- C:\WINDOWS\$NtUninstallKB978207$
2010-02-02 00:29:15 ----HDC---- C:\WINDOWS\$NtUninstallKB958869$
2010-02-02 00:29:08 ----HDC---- C:\WINDOWS\$NtUninstallKB954155_WM9$
2010-02-02 00:29:02 ----HDC---- C:\WINDOWS\$NtUninstallKB976098-v2$
2010-02-02 00:28:52 ----HDC---- C:\WINDOWS\$NtUninstallKB955759$
2010-02-02 00:28:48 ----D---- C:\WINDOWS\system32\KB905474
2010-02-02 00:28:34 ----HDC---- C:\WINDOWS\$NtUninstallKB974318$
2010-02-02 00:28:26 ----HDC---- C:\WINDOWS\$NtUninstallKB969059$
2010-02-02 00:28:17 ----HDC---- C:\WINDOWS\$NtUninstallKB885626$
2010-02-02 00:28:06 ----HDC---- C:\WINDOWS\$NtUninstallKB950974$
2010-02-02 00:27:59 ----HDC---- C:\WINDOWS\$NtUninstallKB971657$
2010-02-02 00:27:51 ----HDC---- C:\WINDOWS\$NtUninstallKB971557$
2010-02-02 00:27:44 ----HDC---- C:\WINDOWS\$NtUninstallKB960225$
2010-02-02 00:27:36 ----HDC---- C:\WINDOWS\$NtUninstallKB972270$
2010-02-02 00:27:28 ----HDC---- C:\WINDOWS\$NtUninstallKB974112$
2010-02-02 00:27:01 ----HDC---- C:\WINDOWS\$NtUninstallKB956572$
2010-02-02 00:26:50 ----HDC---- C:\WINDOWS\$NtUninstallKB956844$
2010-02-02 00:26:43 ----HDC---- C:\WINDOWS\$NtUninstallKB961501$
2010-02-02 00:26:35 ----HDC---- C:\WINDOWS\$NtUninstallKB968816_WM9$
2010-02-02 00:26:29 ----HDC---- C:\WINDOWS\$NtUninstallKB971633$
2010-02-02 00:26:20 ----HDC---- C:\WINDOWS\$NtUninstallKB952069_WM9$
2010-02-02 00:26:12 ----HDC---- C:\WINDOWS\$NtUninstallKB973869$
2010-02-02 00:26:04 ----HDC---- C:\WINDOWS\$NtUninstallKB975025$
2010-02-02 00:26:01 ----A---- C:\WINDOWS\system32\wmpns.dll
2010-02-02 00:25:55 ----HDC---- C:\WINDOWS\$NtUninstallKB973540_WM9L$
2010-02-02 00:25:42 ----HDC---- C:\WINDOWS\$NtUninstallKB952004$
2010-02-02 00:25:34 ----HDC---- C:\WINDOWS\$NtUninstallKB974571$
2010-02-02 00:25:26 ----HDC---- C:\WINDOWS\$NtUninstallKB973507$
2010-02-02 00:25:18 ----HDC---- C:\WINDOWS\$NtUninstallKB973687$
2010-02-02 00:25:08 ----HDC---- C:\WINDOWS\$NtUninstallKB950762$
2010-02-02 00:24:57 ----HDC---- C:\WINDOWS\$NtUninstallKB957097$
2010-02-02 00:24:47 ----HDC---- C:\WINDOWS\$NtUninstallKB958687$
2010-02-02 00:24:40 ----HDC---- C:\WINDOWS\$NtUninstallKB952287$
2010-02-02 00:24:32 ----HDC---- C:\WINDOWS\$NtUninstallKB973354$
2010-02-02 00:24:24 ----HDC---- C:\WINDOWS\$NtUninstallKB973904$
2010-02-02 00:24:13 ----HDC---- C:\WINDOWS\$NtUninstallKB967715$
2010-02-02 00:24:05 ----HDC---- C:\WINDOWS\$NtUninstallKB951066$
2010-02-02 00:23:57 ----HDC---- C:\WINDOWS\$NtUninstallKB974392$
2010-02-02 00:23:40 ----HDC---- C:\WINDOWS\$NtUninstallKB951748$
2010-02-02 00:23:33 ----HDC---- C:\WINDOWS\$NtUninstallKB971961$
2010-02-02 00:23:25 ----HDC---- C:\WINDOWS\$NtUninstallKB970238$
2010-02-02 00:23:14 ----HDC---- C:\WINDOWS\$NtUninstallKB971486$
2010-02-02 00:22:57 ----D---- C:\WINDOWS\ServicePackFiles
2010-02-02 00:22:54 ----HDC---- C:\WINDOWS\$NtUninstallKB958470$
2010-02-02 00:22:46 ----HDC---- C:\WINDOWS\$NtUninstallKB960803$
2010-02-02 00:22:38 ----HDC---- C:\WINDOWS\$NtUninstallKB973815$
2010-02-02 00:22:31 ----HDC---- C:\WINDOWS\$NtUninstallKB973525$
2010-02-02 00:22:18 ----HDC---- C:\WINDOWS\$NtUninstallKB971032$
2010-02-02 00:22:10 ----HDC---- C:\WINDOWS\$NtUninstallKB958644$
2010-02-02 00:22:02 ----HDC---- C:\WINDOWS\$NtUninstallKB955069$
2010-02-02 00:21:54 ----HDC---- C:\WINDOWS\$NtUninstallKB956802$
2010-02-02 00:21:50 ----D---- C:\Program Files\MSXML 4.0
2010-02-02 00:21:42 ----HDC---- C:\WINDOWS\$NtUninstallKB944338-v2$
2010-02-02 00:21:31 ----HDC---- C:\WINDOWS\$NtUninstallKB923561$
2010-02-02 00:21:24 ----HDC---- C:\WINDOWS\$NtUninstallKB975467$
2010-02-02 00:21:15 ----HDC---- C:\WINDOWS\$NtUninstallKB968389$
2010-02-02 00:21:04 ----HDC---- C:\WINDOWS\$NtUninstallKB969947$
2010-02-01 22:55:00 ----D---- C:\WINDOWS\system32\CatRoot_bak
2010-02-01 22:48:32 ----A---- C:\WINDOWS\system32\xpsp3res.dll
2010-02-01 22:47:31 ----N---- C:\WINDOWS\system32\tzchange.exe
2010-02-01 22:32:30 ----HDC---- C:\WINDOWS\$MSI31Uninstall_KB893803v2$
2010-02-01 22:31:30 ----D---- C:\WINDOWS\system32\PreInstall
2010-02-01 22:31:27 ----HDC---- C:\WINDOWS\$NtUninstallKB898461$
2010-02-01 22:31:27 ----HD---- C:\WINDOWS\$hf_mig$
2010-02-01 22:11:44 ----D---- C:\WINDOWS\system32\SoftwareDistribution
2010-02-01 17:01:30 ----D---- C:\Documents and Settings\Administrator\Application Data\Malwarebytes
2010-02-01 17:01:23 ----D---- C:\Documents and Settings\All Users\Application Data\Malwarebytes
2010-02-01 17:01:21 ----D---- C:\Program Files\Malwarebytes' Anti-Malware
2010-01-20 18:01:30 ----D---- C:\Program Files\Norton Security Scan

======List of files/folders modified in the last 1 months======

2010-02-06 15:20:21 ----D---- C:\WINDOWS\Prefetch
2010-02-06 15:20:15 ----D---- C:\WINDOWS\Temp
2010-02-06 15:20:14 ----RD---- C:\Program Files
2010-02-06 15:17:20 ----D---- C:\Program Files\NortonInstaller
2010-02-06 15:17:16 ----D---- C:\WINDOWS\system32\drivers
2010-02-06 15:17:16 ----D---- C:\Documents and Settings\All Users\Application Data\Norton
2010-02-06 15:17:12 ----D---- C:\Program Files\Common Files\Symantec Shared
2010-02-06 15:16:03 ----D---- C:\Program Files\Raptisoft
2010-02-06 15:15:33 ----SHD---- C:\WINDOWS\Installer
2010-02-06 15:15:33 ----D---- C:\Program Files\Common Files
2010-02-06 15:15:33 ----D---- C:\Config.Msi
2010-02-06 15:11:21 ----D---- C:\WINDOWS\Debug
2010-02-06 15:11:21 ----D---- C:\WINDOWS
2010-02-06 15:11:20 ----D---- C:\WINDOWS\Minidump
2010-02-06 14:59:09 ----SD---- C:\WINDOWS\Tasks
2010-02-06 14:59:05 ----SHD---- C:\System Volume Information
2010-02-06 14:59:05 ----D---- C:\WINDOWS\system32\Restore
2010-02-06 14:57:59 ----N---- C:\WINDOWS\SchedLgU.Txt
2010-02-06 14:03:00 ----D---- C:\Program Files\Metin2_CZ
2010-02-06 13:18:52 ----A---- C:\WINDOWS\system.ini
2010-02-06 13:17:40 ----D---- C:\WINDOWS\system32
2010-02-06 13:17:40 ----D---- C:\WINDOWS\AppPatch
2010-02-06 13:13:45 ----D---- C:\WINDOWS\system32\CatRoot2
2010-02-05 18:30:29 ----D---- C:\Program Files\Google
2010-02-05 18:04:28 ----HD---- C:\WINDOWS\inf
2010-02-05 17:54:46 ----D---- C:\WINDOWS\ehome
2010-02-05 17:48:29 ----D---- C:\WINDOWS\system32\CatRoot
2010-02-05 17:46:08 ----D---- C:\Documents and Settings\Administrator\Application Data\uTorrent
2010-02-05 17:45:38 ----D---- C:\Documents and Settings\Administrator\Application Data\vlc
2010-02-05 17:35:54 ----RSHDC---- C:\WINDOWS\system32\dllcache
2010-02-05 17:31:59 ----D---- C:\Program Files\Mozilla Firefox
2010-02-05 16:22:12 ----D---- C:\Documents and Settings\All Users\Application Data\Google Updater
2010-02-05 13:00:30 ----D---- C:\WINDOWS\system32\config
2010-02-05 12:56:04 ----RASH---- C:\boot.ini
2010-02-03 14:54:01 ----D---- C:\WINDOWS\twain_32
2010-02-03 14:35:24 ----D---- C:\WINDOWS\security
2010-02-03 14:33:00 ----D---- C:\Program Files\Messenger
2010-02-03 14:32:39 ----D---- C:\Program Files\Windows Media Player
2010-02-03 14:27:09 ----A---- C:\WINDOWS\system32\PerfStringBackup.INI
2010-02-03 14:21:10 ----D---- C:\WINDOWS\WinSxS
2010-02-02 15:00:28 ----D---- C:\WINDOWS\system32\wbem
2010-02-02 15:00:28 ----D---- C:\WINDOWS\system32\Setup
2010-02-02 00:29:32 ----D---- C:\Program Files\Internet Explorer
2010-02-02 00:24:34 ----D---- C:\Program Files\Outlook Express
2010-02-01 22:11:58 ----D---- C:\WINDOWS\SoftwareDistribution
2010-02-01 22:11:54 ----D---- C:\WINDOWS\Help
2010-01-30 18:22:32 ----A---- C:\WINDOWS\NeroDigital.ini
2010-01-20 18:01:27 ----D---- C:\Documents and Settings\All Users\Application Data\NortonInstaller

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R1 ehdrv;ehdrv; C:\WINDOWS\system32\DRIVERS\ehdrv.sys [2009-04-09 107256]
R1 epfwtdir;epfwtdir; C:\WINDOWS\system32\DRIVERS\epfwtdir.sys [2009-04-09 94360]
R1 InCDPass;InCDPass; C:\WINDOWS\System32\DRIVERS\InCDPass.sys [2004-08-27 28672]
R1 incdrm;InCD Reader; C:\WINDOWS\system32\drivers\incdrm.sys [2004-08-27 27648]
R1 intelppm;Intel Processor Driver; C:\WINDOWS\system32\DRIVERS\intelppm.sys [2004-08-04 36096]
R2 eamon;eamon; C:\WINDOWS\system32\DRIVERS\eamon.sys [2009-04-09 113960]
R3 ALCXWDM;Service for Realtek AC97 Audio (WDM); C:\WINDOWS\system32\drivers\ALCXWDM.SYS [2004-12-01 2300928]
R3 FETNDIS;VIA PCI 10/100Mb Fast Ethernet Adapter NT Driver; C:\WINDOWS\system32\DRIVERS\fetnd5.sys [2001-08-17 27165]
R3 HidUsb;Microsoft HID Class Driver; C:\WINDOWS\system32\DRIVERS\hidusb.sys [2001-08-17 9600]
R3 mouhid;Mouse HID Driver; C:\WINDOWS\system32\DRIVERS\mouhid.sys [2001-08-17 12160]
R3 usbehci;Microsoft USB 2.0 Enhanced Host Controller Miniport Driver; C:\WINDOWS\system32\DRIVERS\usbehci.sys [2004-08-04 26624]
R3 usbhub;Microsoft USB Standard Hub Driver; C:\WINDOWS\system32\DRIVERS\usbhub.sys [2004-08-04 57600]
R3 usbuhci;Microsoft USB Universal Host Controller Miniport Driver; C:\WINDOWS\system32\DRIVERS\usbuhci.sys [2004-08-04 20480]
R3 viagfx;viagfx; C:\WINDOWS\system32\DRIVERS\vtmini.sys [2004-02-04 134144]
R4 InCDfs;InCD File System; C:\WINDOWS\system32\drivers\InCDfs.sys [2004-08-27 92928]
S3 GMSIPCI;GMSIPCI; \??\X:\INSTALL\GMSIPCI.SYS []
S3 HPZid412;IEEE-1284.4 Driver HPZid412; C:\WINDOWS\system32\DRIVERS\HPZid412.sys [2007-03-07 49920]
S3 HPZipr12;Print Class Driver for IEEE-1284.4 HPZipr12; C:\WINDOWS\system32\DRIVERS\HPZipr12.sys [2007-03-07 16496]
S3 HPZius12;USB to IEEE-1284.4 Translation Driver HPZius12; C:\WINDOWS\system32\DRIVERS\HPZius12.sys [2007-03-07 21568]
S3 MSICPL;MSICPL; \??\X:\install4\MSICPL.sys []
S3 nmwcd;Nokia USB Phone Parent; C:\WINDOWS\system32\drivers\ccdcmb.sys [2007-11-29 16896]
S3 nmwcdc;Nokia USB Generic; C:\WINDOWS\system32\drivers\ccdcmbo.sys [2007-11-29 19328]
S3 NTACCESS;NTACCESS; \??\X:\NTACCESS.sys []
S3 nv;nv; C:\WINDOWS\system32\DRIVERS\nv4_mini.sys [2004-08-03 1897408]
S3 pccsmcfd;PCCS Mode Change Filter Driver; C:\WINDOWS\system32\DRIVERS\pccsmcfd.sys [2007-09-17 21632]
S3 SetupNTGLM7X;SetupNTGLM7X; \??\X:\NTGLM7X.sys []
S3 upperdev;upperdev; C:\WINDOWS\system32\DRIVERS\usbser_lowerflt.sys [2007-11-29 8064]
S3 usbccgp;Microsoft USB Generic Parent Driver; C:\WINDOWS\system32\DRIVERS\usbccgp.sys [2004-08-03 31616]
S3 usbprint;Microsoft USB PRINTER Class; C:\WINDOWS\system32\DRIVERS\usbprint.sys [2004-08-03 25856]
S3 usbscan;USB Scanner Driver; C:\WINDOWS\system32\DRIVERS\usbscan.sys [2004-08-03 15104]
S3 usbser;Nokia USB Serial Port; C:\WINDOWS\system32\DRIVERS\usbser.sys [2004-08-03 25600]
S3 UsbserFilt;UsbserFilt; C:\WINDOWS\system32\DRIVERS\usbser_lowerfltj.sys [2007-11-29 8064]
S3 USBSTOR;USB Mass Storage Driver; C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS [2004-08-03 26496]
S3 Wdf01000;Wdf01000; C:\WINDOWS\system32\DRIVERS\Wdf01000.sys [2006-11-02 492000]
S4 IntelIde;IntelIde; C:\WINDOWS\system32\drivers\IntelIde.sys []
S4 sptd;sptd; C:\WINDOWS\System32\Drivers\sptd.sys []

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 ekrn;ESET Service; C:\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe [2009-04-09 731840]
R2 hpqddsvc;HP CUE DeviceDiscovery Service; C:\WINDOWS\system32\svchost.exe [2004-08-04 14336]
R2 InCDsrv;InCD Helper; C:\Program Files\Ahead\InCD\InCDsrv.exe [2004-08-27 1192050]
R2 JavaQuickStarterService;Java Quick Starter; C:\Program Files\Java\jre6\bin\jqs.exe [2009-09-23 152984]
R2 Net Driver HPZ12;Net Driver HPZ12; C:\WINDOWS\System32\svchost.exe [2004-08-04 14336]
R2 Pml Driver HPZ12;Pml Driver HPZ12; C:\WINDOWS\System32\svchost.exe [2004-08-04 14336]
R3 hpqcxs08;hpqcxs08; C:\WINDOWS\system32\svchost.exe [2004-08-04 14336]
R3 ServiceLayer;ServiceLayer; C:\Program Files\PC Connectivity Solution\ServiceLayer.exe [2008-04-29 572928]
S2 gupdate1c9921e29e81748;Služba Google Update (gupdate1c9921e29e81748); C:\Program Files\Google\Update\GoogleUpdate.exe [2009-02-19 133104]
S2 gusvc;Google Software Updater; C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe [2009-03-20 183280]
S2 InCDsrvR;InCD Helper (read only); C:\Program Files\Ahead\InCD\InCDsrv.exe [2004-08-27 1192050]
S3 EhttpSrv;ESET HTTP Server; C:\Program Files\ESET\ESET NOD32 Antivirus\EHttpSrv.exe [2009-04-09 20680]
S3 IDriverT;InstallDriver Table Manager; C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe [2005-04-03 69632]

-----------------EOF-----------------

[Čarls]

vyfoukání vyčištění bylo myšleno vnitřek bedny PC od prachu pokud si na toto netroufáte tak servis nebo zkušenější kamarád.
Uděláme test dle mého předchozího příspěvku budeme moudřejší zda je to přehříváním grafiky

Dále toto fixněte v HijackThis návod zde http://www.viry.cz/forum/viewtopic.php?f=24&t=16765

R1 - HKCU\Software\Microsoft\Internet Explorer,SearchURL = http://search13.net/search.php?clid=486&q=%s
R3 - URLSearchHook: (no name) - - (no file)
O9 - Extra button: StylishProfile - {14CD42DD-ABCD-3586-DCAB-40E3693E3737} - C:\Program Files\Stylish Profile\ct.htm (file missing)
O9 - Extra 'Tools' menuitem: StylishProfile - {14CD42DD-ABCD-3586-DCAB-40E3693E3737} - C:\Program Files\Stylish Profile\ct.htm (file missing)
O9 - Extra button: ICQ6 - {E59EB121-F339-4851-A3BA-FE49C35617C2} - C:\Program Files\ICQ6.5\ICQ.exe (file missing)
O9 - Extra 'Tools' menuitem: ICQ6 - {E59EB121-F339-4851-A3BA-FE49C35617C2} - C:\Program Files\ICQ6.5\ICQ.exe (file missing)

[motji]

Já ještě doplním

Nemáte firewall,k čemu je užitečný se dozvíte zde http://www.viry.cz/forum/viewtopic.php?f=41&t=20980
Nemáte sp3 http://www.viry.cz/forum/viewtopic.php?f=46&t=86100

Z mé strany je to vše, pokud by byly problémy s viry, ozvěte se .
Už Vás nechám kolegovi
Hezký večer