stmavovanie obrazovky

[gabber]

mám taky problem ale niesom si istý či to je výrus z ničoho nič sa mi sem tam stmaví obrazovka asik na polovicu a akonahle kliknem alebo niečo stlačím opet je to v poriadku najviac sa to prejavuje ak pustím film alebo hru a nazačiatku je čierna obrazovka alebo sa v hre prepína monitor na ine rozlíšenie preskenoval som systém Kaspersky internet security našlo mi nejake viry tie som odstranil a opetovne niekolko krát preskenoval cely disk ale stale to robí a už mi nenajde žiadny vírus vopred ďakujem

[Rudy]

Dejte log z RSIT: http://viry.cz/forum/viewtopic.php?f=24&t=81939 .

[gabber]

Logfile of random's system information tool 1.06 (written by random/random)
Run by Mrgrabber at 2010-03-18 20:19:40
Systém Microsoft Windows XP Professional Service Pack 2
System drive C: has 21 GB (41%) free of 51 GB
Total RAM: 3327 MB (74% free)

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 20:19:43, on 18.3.2010
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\RTHDCPL.EXE
C:\PROGRA~1\Sony\SONICS~1\SsAAD.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE
C:\WINDOWS\system32\wscntfy.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Documents and Settings\Mrgrabber\Plocha\RSIT.exe
E:\Staršie HDD D\Pičoviny Net\Softy\odjebavace programi treba pozret net\Mrgrabber.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.gabber.sk/
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Odkazy
O1 - Hosts: 216.107.250.194 nprotect.lineage2.com
O1 - Hosts: 78.96.234.203 l2authd.lineage2.com
O1 - Hosts: 78.96.234.203 L2testauthd.lineage2.com
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: IEVkbdBHO - {59273AB4-E7D3-40F9-A1A8-6FA9CCA1862C} - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2009\ievkbd.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE
O4 - HKLM\..\Run: [Alcmtr] ALCMTR.EXE
O4 - HKLM\..\Run: [AVP] "C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2009\avp.exe"
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [SsAAD.exe] C:\PROGRA~1\Sony\SONICS~1\SsAAD.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime
O4 - HKLM\..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k
O4 - HKCU\..\Run: [Skype] "C:\Program Files\Skype\Phone\Skype.exe" /nosplash /minimized
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [System] C:\Documents and Settings\Mrgrabber\Music\lst.exe
O4 - HKCU\..\RunOnce: [WiseStubReboot] MSIEXEC /quiet SKIP_PPU_DRIVER_INSTALL=1 /I "C:\Program Files\Common Files\Wise Installation Wizard\WISB83FC356B7C0441F8A4DD71E088E7974_9_09_0428.MSI" TRANSFORMS="C:\Program Files\Common Files\Wise Installation Wizard\WISB83FC356B7C0441F8A4DD71E088E7974_9_09_0428.MST" WISE_SETUP_EXE_PATH="c:\nvidia\displaydriver\186.18\english\PhysX_9.09.0428_SystemSoftware.exe"
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O8 - Extra context menu item: Add to Banner Ad Blocker - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2009\ie_banner_deny.htm
O8 - Extra context menu item: Add to Google Photos Screensa&ver - res://C:\WINDOWS\system32\GPhotos.scr/200
O8 - Extra context menu item: E&xportovať do programu Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: Web traffic protection statistics - {1F460357-8A94-4D71-9CA3-AA4ACF32ED8E} - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2009\SCIEPlgn.dll
O9 - Extra button: Zdroje informácií - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: ICQ6 - {E59EB121-F339-4851-A3BA-FE49C35617C2} - C:\Program Files\ICQ6.5\ICQ.exe
O9 - Extra 'Tools' menuitem: ICQ6 - {E59EB121-F339-4851-A3BA-FE49C35617C2} - C:\Program Files\ICQ6.5\ICQ.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O20 - AppInit_DLLs: C:\PROGRA~1\KASPER~1\KASPER~1\mzvkbd3.dll,C:\PROGRA~1\KASPER~1\KASPER~1\adialhk.dll,C:\PROGRA~1\KASPER~1\KASPER~1\kloehk.dll
O23 - Service: Autodesk Licensing Service - Autodesk - C:\Program Files\Common Files\Autodesk Shared\Service\AdskScSrv.exe
O23 - Service: Kaspersky Internet Security (AVP) - Kaspersky Lab - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2009\avp.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe
O23 - Service: MSCSPTISRV - Sony Corporation - C:\Program Files\Common Files\Sony Shared\AVLib\MSCSPTISRV.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: PACSPTISVR - Sony Corporation - C:\Program Files\Common Files\Sony Shared\AVLib\PACSPTISVR.exe
O23 - Service: Sony SPTI Service (SPTISRV) - Sony Corporation - C:\Program Files\Common Files\Sony Shared\AVLib\SPTISRV.exe
O23 - Service: SonicStage SCSI Service (SSScsiSV) - Sony Corporation - C:\Program Files\Common Files\Sony Shared\AVLib\SSScsiSV.exe
O23 - Service: StarOpen - Sony Corporation - (no file)

--
End of file - 6014 bytes

======Scheduled tasks folder======

C:\WINDOWS\tasks\AppleSoftwareUpdate.job

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{06849E9F-C8D7-4D59-B87D-784B7D6BE0B3}]
AcroIEHlprObj Class - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll [2004-12-14 63136]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{59273AB4-E7D3-40F9-A1A8-6FA9CCA1862C}]
IEVkbdBHO Class - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2009\ievkbd.dll [2008-11-11 62728]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre6\bin\jp2ssv.dll [2009-10-11 41760]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{E7E6F031-17CE-4C07-BC86-EABFE594F69C}]
JQSIEStartDetectorImpl Class - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll [2009-10-11 73728]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"RTHDCPL"=C:\WINDOWS\RTHDCPL.EXE [2007-05-10 16342528]
"Alcmtr"=C:\WINDOWS\ALCMTR.EXE [2005-05-03 69632]
"AVP"=C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2009\avp.exe [2009-08-13 208616]
"NvCplDaemon"=C:\WINDOWS\system32\NvCpl.dll [2009-11-20 12669544]
"SsAAD.exe"=C:\PROGRA~1\Sony\SONICS~1\SsAAD.exe [2006-01-07 81920]
"QuickTime Task"=C:\Program Files\QuickTime\QTTask.exe [2009-11-10 417792]
"KernelFaultCheck"=C:\WINDOWS\system32\dumprep 0 -k []

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"Skype"=C:\Program Files\Skype\Phone\Skype.exe [2009-10-09 25623336]
"ctfmon.exe"=C:\WINDOWS\system32\ctfmon.exe [2004-08-17 15360]
"System"=C:\Documents and Settings\Mrgrabber\Music\lst.exe [2010-03-13 10752]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\RunOnce]
"WiseStubReboot"=MSIEXEC /quiet SKIP_PPU_DRIVER_INSTALL=1 /I C:\Program Files\Common Files\Wise Installation Wizard\WISB83FC356B7C0441F8A4DD71E088E7974_9_09_0428.MSI TRANSFORMS=C:\Program Files\Common Files\Wise Installation Wizard\WISB83FC356B7C0441F8A4DD71E088E7974_9_09_0428.MST WISE_SETUP_EXE_PATH=c:\nvidia\displaydriver\186.18\english\PhysX_9.09.0428_SystemSoftware.exe []

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
"AppInit_DLLS"="C:\PROGRA~1\KASPER~1\KASPER~1\mzvkbd3.dll,C:\PROGRA~1\KASPER~1\KASPER~1\adialhk.dll,C:\PROGRA~1\KASPER~1\KASPER~1\kloehk.dll"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\klogon]
C:\WINDOWS\system32\klogon.dll [2008-11-11 218376]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=145

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"C:\Program Files\uTorrent\utorrent.exe"="C:\Program Files\uTorrent\utorrent.exe:*:Enabled:µTorrent"
"C:\Program Files\ICQ6.5\ICQ.exe"="C:\Program Files\ICQ6.5\ICQ.exe:*:Enabled:ICQ6"
"E:\Hry\Sacred 2\system\s2gs.exe"="E:\Hry\Sacred 2\system\s2gs.exe:*:Enabled:Sacred 2 Game Server"
"E:\Hry\Sacred 2\system\sacred2.exe"="E:\Hry\Sacred 2\system\sacred2.exe:*:Enabled:Sacred 2"
"C:\Program Files\CyberLink\PowerDVD9\PowerDVD Cinema\PowerDVDCinema.exe"="C:\Program Files\CyberLink\PowerDVD9\PowerDVD Cinema\PowerDVDCinema.exe:*:Enabled:CyberLink PowerDVD 9.0"
"C:\Program Files\CyberLink\PowerDVD9\PowerDVD9.exe"="C:\Program Files\CyberLink\PowerDVD9\PowerDVD9.exe:*:Enabled:CyberLink PowerDVD 9.0"
"C:\Program Files\Skype\Plugin Manager\skypePM.exe"="C:\Program Files\Skype\Plugin Manager\skypePM.exe:*:Enabled:Skype Extras Manager"
"C:\Program Files\Opera\opera.exe"="C:\Program Files\Opera\opera.exe:*:Enabled:Opera Internet Browser"
"C:\Program Files\Ubisoft\Ubisoft Game Launcher\UbisoftGameLauncher.exe"="C:\Program Files\Ubisoft\Ubisoft Game Launcher\UbisoftGameLauncher.exe:*:Enabled:Ubisoft Game Launcher"
"C:\Program Files\Skype\Phone\Skype.exe"="C:\Program Files\Skype\Phone\Skype.exe:*:Enabled:Skype "

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"C:\Program Files\CyberLink\PowerDVD9\PowerDVD9.exe"="C:\Program Files\CyberLink\PowerDVD9\PowerDVD9.exe:*:Enabled:CyberLink PowerDVD 9.0"

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{0748b18b-dcdd-11de-8321-00221500fceb}]
shell\AutoRun\command - G:\RECYCLER\S-1-5-21-1482476501-1644491937-682003330-1013\Fixer32.exe
shell\open\command - G:\RECYCLER\S-1-5-21-1482476501-1644491937-682003330-1013\Fixer32.exe

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{0748b18c-dcdd-11de-8321-00221500fceb}]
shell\AutoRun\command - H:\RECYCLER\S-1-5-21-1482476501-1644491937-682003330-1013\Fixer32.exe
shell\open\command - H:\RECYCLER\S-1-5-21-1482476501-1644491937-682003330-1013\Fixer32.exe

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{13a33cbc-fadd-11de-8358-00221500fceb}]
shell\AutoRun\command - H:\Launcher.exe

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{493ae75d-8fd7-11de-828a-00221500fceb}]
shell\AutoRun\command - TEMPS\TRASHS\svchost.exe
shell\open\command - TEMPS\TRASHS\svchost.exe

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{935532d6-e011-11de-8326-00221500fceb}]
shell\autoPlAy\command - G:\igkyc.exe
shell\AutoRun\command - G:\igkyc.exe
shell\expLoRE\command - G:\igkyc.exe
shell\OPEn\command - G:\igkyc.exe


======File associations======

.scr - open - "C:\WINDOWS\system32\notepad.exe" "%1"
.scr - install -
.scr - config -

======List of files/folders created in the last 1 months======

2010-03-18 20:19:40 ----D---- C:\rsit
2010-03-13 13:55:08 ----D---- C:\Documents and Settings\Mrgrabber\Data aplikací\Ubisoft
2010-03-13 13:55:08 ----D---- C:\Documents and Settings\All Users\Data aplikací\Ubisoft
2010-03-13 13:49:52 ----D---- C:\Program Files\Ubisoft
2010-03-03 14:29:08 ----D---- C:\Documents and Settings\Mrgrabber\Data aplikací\DeepBurner Pro
2010-03-03 14:28:45 ----D---- C:\Program Files\Astonsoft
2010-02-25 17:32:07 ----D---- C:\Documents and Settings\Mrgrabber\Data aplikací\Bioshock2
2010-02-25 17:14:43 ----SHD---- C:\Documents and Settings\All Users\Data aplikací\SecuROM
2010-02-25 17:11:54 ----D---- C:\WINDOWS\system32\XPSViewer
2010-02-25 17:11:52 ----D---- C:\Program Files\MSBuild
2010-02-25 17:11:50 ----D---- C:\WINDOWS\system32\en-US
2010-02-25 17:11:47 ----D---- C:\Program Files\Reference Assemblies
2010-02-25 17:11:22 ----N---- C:\WINDOWS\system32\prntvpt.dll
2010-02-25 17:11:21 ----N---- C:\WINDOWS\system32\xpssvcs.dll
2010-02-25 17:11:21 ----N---- C:\WINDOWS\system32\xpsshhdr.dll
2010-02-25 17:09:03 ----HDC---- C:\WINDOWS\$NtUninstallWIC$
2010-02-25 17:08:57 ----D---- C:\Program Files\MSXML 6.0
2010-02-25 17:06:54 ----D---- C:\WINDOWS\system32\xlive
2010-02-25 17:06:53 ----D---- C:\Program Files\Microsoft Games for Windows - LIVE
2010-02-22 20:22:29 ----D---- C:\Documents and Settings\Mrgrabber\Data aplikací\QIP
2010-02-22 20:21:31 ----D---- C:\Program Files\QIP Infium
2010-02-21 17:49:04 ----D---- C:\Documents and Settings\Mrgrabber\Data aplikací\Vso
2010-02-21 17:49:04 ----A---- C:\Documents and Settings\Mrgrabber\Data aplikací\inst.exe
2010-02-21 15:57:11 ----D---- C:\Documents and Settings\All Users\Data aplikací\vsosdk
2010-02-21 15:27:25 ----A---- C:\WINDOWS\DVDFabDecrypter.INI
2010-02-21 15:27:08 ----D---- C:\Program Files\DVDFab Decrypter

======List of files/folders modified in the last 1 months======

2010-03-18 20:19:39 ----D---- C:\WINDOWS\Prefetch
2010-03-18 20:18:51 ----D---- C:\WINDOWS\Temp
2010-03-18 17:58:11 ----D---- C:\Documents and Settings\Mrgrabber\Data aplikací\Skype
2010-03-18 16:01:46 ----D---- C:\Documents and Settings\Mrgrabber\Data aplikací\skypePM
2010-03-18 13:45:53 ----D---- C:\WINDOWS\system32
2010-03-18 13:45:53 ----A---- C:\WINDOWS\system32\PerfStringBackup.INI
2010-03-18 13:41:56 ----D---- C:\Documents and Settings\All Users\Data aplikací\Kaspersky Lab
2010-03-18 12:58:31 ----A---- C:\WINDOWS\SchedLgU.Txt
2010-03-18 12:11:36 ----D---- C:\WINDOWS\system32\CatRoot2
2010-03-17 22:28:56 ----D---- C:\Documents and Settings\Mrgrabber\Data aplikací\uTorrent
2010-03-17 22:28:49 ----AD---- C:\Documents and Settings\All Users\Data aplikací\TEMP
2010-03-17 20:28:12 ----D---- C:\WINDOWS
2010-03-17 20:27:58 ----SHD---- C:\WINDOWS\CSC
2010-03-17 20:27:57 ----D---- C:\WINDOWS\Minidump
2010-03-15 17:38:31 ----D---- C:\Fraps
2010-03-15 16:18:38 ----D---- C:\Program Files\AGEIA Technologies
2010-03-15 16:18:38 ----D---- C:\Program Files\Acoustica CD Label Maker
2010-03-14 13:34:49 ----HD---- C:\Program Files\InstallShield Installation Information
2010-03-13 13:49:52 ----RD---- C:\Program Files
2010-03-13 13:49:35 ----SHD---- C:\WINDOWS\Installer
2010-03-13 13:49:35 ----SHD---- C:\Config.Msi
2010-03-13 13:49:17 ----D---- C:\WINDOWS\system32\DirectX
2010-03-13 13:49:16 ----HD---- C:\WINDOWS\inf
2010-03-13 13:48:57 ----RSD---- C:\WINDOWS\assembly
2010-03-11 15:50:29 ----D---- C:\Program Files\uTorrent
2010-03-10 12:45:08 ----D---- C:\Program Files\Lineage II
2010-03-09 21:23:29 ----D---- C:\Documents and Settings\All Users\Data aplikací\Adobe
2010-03-09 20:58:05 ----D---- C:\Documents and Settings\Mrgrabber\Data aplikací\Adobe
2010-03-08 18:02:27 ----D---- C:\Documents and Settings\Mrgrabber\Data aplikací\vlc
2010-03-08 17:55:57 ----SD---- C:\WINDOWS\Tasks
2010-03-07 15:38:05 ----D---- C:\WINDOWS\WinSxS
2010-03-07 15:18:58 ----SD---- C:\Documents and Settings\Mrgrabber\Data aplikací\Microsoft
2010-03-03 21:02:02 ----D---- C:\Program Files\CCleaner
2010-03-03 19:02:36 ----D---- C:\Program Files\Mozilla Firefox
2010-03-03 14:55:52 ----A---- C:\WINDOWS\wincmd.ini
2010-02-26 15:04:13 ----D---- C:\WINDOWS\system32\CatRoot
2010-02-25 18:48:34 ----D---- C:\WINDOWS\Microsoft.NET
2010-02-25 17:11:49 ----RSD---- C:\WINDOWS\Fonts
2010-02-25 17:11:34 ----D---- C:\WINDOWS\system32\spool
2010-02-25 17:11:30 ----RSHDC---- C:\WINDOWS\system32\dllcache
2010-02-25 17:09:59 ----D---- C:\WINDOWS\system32\mui
2010-02-25 17:06:54 ----SD---- C:\Documents and Settings\All Users\Data aplikací\Microsoft
2010-02-23 11:16:40 ----A---- C:\WINDOWS\l2control.ini
2010-02-22 16:11:51 ----D---- C:\Documents and Settings\Mrgrabber\Data aplikací\ICQ
2010-02-20 17:52:33 ----D---- C:\Program Files\Webteh

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R1 AmdK8;Ovladač procesoru AMD; C:\WINDOWS\system32\DRIVERS\AmdK8.sys [2006-07-01 43008]
R1 kbdhid;Ovladač klávesnice standardu HID; C:\WINDOWS\system32\DRIVERS\kbdhid.sys [2004-08-17 14848]
R1 KLIF;Kaspersky Lab Driver; C:\WINDOWS\system32\DRIVERS\klif.sys [2009-08-13 226832]
R1 WmiAcpi;Microsoft Windows Management Interface for ACPI; C:\WINDOWS\system32\DRIVERS\wmiacpi.sys [2004-08-04 8832]
R2 {B154377D-700F-42cc-9474-23858FBDF4BD};Power Control [2009/10/04 21:08:56]; \??\C:\Program Files\CyberLink\PowerDVD9\000.fcl []
R3 AtcL001;NDIS Miniport Driver for Atheros L1 Gigabit Ethernet Controller; C:\WINDOWS\system32\DRIVERS\l151x86.sys [2007-11-01 36864]
R3 HDAudBus;Microsoft UAA Bus Driver for High Definition Audio; C:\WINDOWS\system32\DRIVERS\HDAudBus.sys [2005-01-07 138752]
R3 hidusb;Ovladač třídy standardu HID; C:\WINDOWS\system32\DRIVERS\hidusb.sys [2001-10-25 9600]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\WINDOWS\system32\drivers\RtkHDAud.sys [2007-05-10 4419584]
R3 KLFLTDEV;Kaspersky Lab KLFltDev; C:\WINDOWS\system32\DRIVERS\klfltdev.sys [2008-03-13 26640]
R3 klim5;Kaspersky Anti-Virus NDIS Filter; C:\WINDOWS\system32\DRIVERS\klim5.sys [2008-04-30 24592]
R3 mouhid;Ovladač myši standardu HID; C:\WINDOWS\system32\DRIVERS\mouhid.sys [2001-10-25 12160]
R3 MTsensor;ATK0110 ACPI UTILITY; C:\WINDOWS\system32\DRIVERS\ASACPI.sys [2004-08-13 5810]
R3 npkcusb;npkcusb; \??\C:\Program Files\Lineage II\system\npkcusb.sys []
R3 nv;nv; C:\WINDOWS\system32\DRIVERS\nv4_mini.sys [2009-11-21 10235968]
R3 usbccgp;Obecný nadřazený ovladač Microsoft USB; C:\WINDOWS\system32\DRIVERS\usbccgp.sys [2004-08-03 31616]
R3 usbehci;Ovladač miniportu rozšířeného radiče hostitele Microsoft USB 2.0; C:\WINDOWS\system32\DRIVERS\usbehci.sys [2004-08-03 26624]
R3 usbhub;Rozbočovač umožnující USB2; C:\WINDOWS\system32\DRIVERS\usbhub.sys [2004-08-03 57600]
R3 usbohci;Ovladač Miniport otevřeného hostitelského řadiče Microsoft USB; C:\WINDOWS\system32\DRIVERS\usbohci.sys [2004-08-03 17024]
S1 StarOpen;StarOpen; C:\WINDOWS\system32\drivers\StarOpen.sys []
S3 a13box96;a13box96; C:\WINDOWS\system32\drivers\a13box96.sys []
S3 cpuz130;cpuz130; \??\C:\DOCUME~1\MRGRAB~1\LOCALS~1\Temp\cpuz130\cpuz_x32.sys []
S3 ENTECH;ENTECH; \??\C:\WINDOWS\system32\DRIVERS\ENTECH.sys []
S3 npkcrypt;npkcrypt; \??\C:\Program Files\Lineage II\system\npkcrypt.sys []
S3 PsSdk40;PsSdk40; \??\C:\WINDOWS\system32\Drivers\pssdk40.sys []
S3 PsSdkLBF;PsSdkLBF; \??\C:\WINDOWS\system32\Drivers\pssdklbf.sys []
S3 usbprint;Třída USB Printer; C:\WINDOWS\system32\DRIVERS\usbprint.sys [2004-08-03 25856]
S3 USBSTOR;Ovladač velkokapacitního paměťového zařízení USB; C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS [2004-08-03 26496]
S3 WpdUsb;WpdUsb; C:\WINDOWS\System32\Drivers\wpdusb.sys [2005-01-28 18944]
S4 IntelIde;IntelIde; C:\WINDOWS\system32\drivers\IntelIde.sys []

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 AVP;Kaspersky Internet Security; C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2009\avp.exe [2009-08-13 208616]
R2 JavaQuickStarterService;Java Quick Starter; C:\Program Files\Java\jre6\bin\jqs.exe [2009-10-11 153376]
R2 MDM;Machine Debug Manager; C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE [2003-06-19 322120]
R2 NVSvc;NVIDIA Display Driver Service; C:\WINDOWS\system32\nvsvc32.exe [2009-11-20 154216]
R2 UMWdf;Windows User Mode Driver Framework; C:\WINDOWS\system32\wdfmgr.exe [2005-01-28 38912]
S2 SSHNAS;SSHNAS; C:\WINDOWS\system32\svchost.exe [2004-08-17 14336]
S3 aspnet_state;Stavová služba ASP.NET; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe [2008-07-25 34312]
S3 Autodesk Licensing Service;Autodesk Licensing Service; C:\Program Files\Common Files\Autodesk Shared\Service\AdskScSrv.exe [2009-11-17 85096]
S3 clr_optimization_v2.0.50727_32;.NET Runtime Optimization Service v2.0.50727_X86; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe [2008-07-25 69632]
S3 FontCache3.0.0.0;Windows Presentation Foundation Font Cache 3.0.0.0; C:\WINDOWS\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe [2008-07-29 46104]
S3 gusvc;Google Updater Service; C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe [2008-11-20 136120]
S3 IDriverT;InstallDriver Table Manager; C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe [2005-04-03 69632]
S3 idsvc;Windows CardSpace; C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe [2008-07-29 881664]
S3 MSCSPTISRV;MSCSPTISRV; C:\Program Files\Common Files\Sony Shared\AVLib\MSCSPTISRV.exe [2005-11-24 53337]
S3 ose;Office Source Engine; C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2003-07-28 89136]
S3 PACSPTISVR;PACSPTISVR; C:\Program Files\Common Files\Sony Shared\AVLib\PACSPTISVR.exe [2005-11-24 53337]
S3 SPTISRV;Sony SPTI Service; C:\Program Files\Common Files\Sony Shared\AVLib\SPTISRV.exe [2005-11-24 69718]
S3 SSScsiSV;SonicStage SCSI Service; C:\Program Files\Common Files\Sony Shared\AVLib\SSScsiSV.exe [2006-01-06 69632]
S4 NetTcpPortSharing;Net.Tcp Port Sharing Service; C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe [2008-07-29 132096]

-----------------EOF-----------------

[gabber]

info.txt logfile of random's system information tool 1.06 2010-03-18 20:19:45

======Uninstall list======

-->C:\Program Files\DivX\DivXConverterUninstall.exe /CONVERTER
-->MsiExec /X{C5C1C0F0-D62F-4DBF-81D4-D7EF397C228B}
-->MsiExec.exe /I{9A346205-EA92-4406-B1AB-50379DA3F057}
-->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{88E5FCB8-5F25-11D5-B16F-0800460222F0}\setup.exe" -l0x9 UNINSTALL
-->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{D76298C2-E532-4A11-BCFF-76F3F19DA84D}\setup.exe" UNINSTALL
-->rundll32.exe setupapi.dll,InstallHinfSection DefaultUninstall 132 C:\WINDOWS\INF\PCHealth.inf
µTorrent CZ 1.8.1 (build 12639)-->"C:\Program Files\uTorrent\unins000.exe"
µTorrent-->"C:\Program Files\uTorrent\uTorrent.exe" /UNINSTALL
ACE Mega CoDecS Pack-->"C:\Program Files\ACE Mega CoDecS Pack\unins000.exe"
Acoustica CD/DVD Label Maker-->C:\Program Files\Acoustica CD Label Maker\uisurvey.exe
Adobe Flash Player 10 ActiveX-->C:\WINDOWS\system32\Macromed\Flash\uninstall_activeX.exe
Adobe Flash Player 10 Plugin-->C:\WINDOWS\system32\Macromed\Flash\uninstall_plugin.exe
Adobe Flash Player 9 ActiveX-->MsiExec.exe /X{BB65C393-C76E-4F06-9B0C-2124AA8AF97B}
Adobe Photoshop CS-->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\0701\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{EFB21DE7-8C19-4A88-BB28-A766E16493BC}\setup.exe" -l0x5
Adobe Reader 7.0 - Czech-->MsiExec.exe /I{AC76BA86-7AD7-1029-7B44-A70000000000}
AMD Processor Driver-->C:\Program Files\InstallShield Installation Information\{C151CE54-E7EA-4804-854B-F515368B0798}\setup.exe -runfromtemp -l0x0005 -removeonly
AMDAway INF-->C:\PROGRA~1\AMD\AMDAWA~1\UNWISE.EXE /A C:\PROGRA~1\AMD\AMDAWA~1\INSTALL.LOG
Apple Application Support-->MsiExec.exe /I{3FA365DF-2D68-45ED-8F83-8C8A33E65143}
Apple Software Update-->MsiExec.exe /I{6956856F-B6B3-4BE0-BA0B-8F495BE32033}
Atheros Communications Inc.(R) L1 Gigabit Ethernet Driver-->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\11\00\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{6E19F210-3813-4002-B561-94D66AA182B6}\Setup.exe" -l0x9 -removeonly
AutoCAD 2008 - Český-->C:\Program Files\AutoCAD 2008\Setup\Setup.exe /P {5783F2D7-6001-0405-0002-0060B0CE6BBA} /M ACAD
Autodesk DWF Viewer 7-->MsiExec.exe /I{9A346205-EA92-4406-B1AB-50379DA3F057}
BS.Player PRO-->"C:\Program Files\Webteh\BSplayerPro\uninstall.exe"
Canon iP4600 series Printer Driver-->"C:\WINDOWS\system32\CanonIJ Uninstaller Information\{1199FAD5-9546-44f3-81CF-FFDB8040B7BF}_Canon_iP4600_series\DelDrv.exe" /U:{1199FAD5-9546-44f3-81CF-FFDB8040B7BF}_Canon_iP4600_series /L0x0005
Canon Utilities Easy-PhotoPrint EX-->C:\Program Files\Canon\Easy-PhotoPrint EX\uninst.exe uninst.ini
Canon Utilities My Printer-->C:\Program Files\Canon\MyPrinter\uninst.exe uninst.ini
Canon Utilities Solution Menu-->C:\Program Files\Canon\SolutionMenu\uninst.exe uninst.ini
CCleaner-->"C:\Program Files\CCleaner\uninst.exe"
CD-LabelPrint-->"C:\Program Files\Canon\CD-LabelPrint\Uninstal.exe" Canon.CDLabelPrint.Application
CNC Demo-->C:\Program Files\S2000Demo\install.exe /U
CoreAVC Professional Edition (remove only)-->"C:\Program Files\CoreCodec\CoreAVC Professional Edition\CoreAVC Professional Edition-uninstall.exe"
CyberLink PowerDVD 9-->"C:\Program Files\InstallShield Installation Information\{A8516AC9-AAF1-47F9-9766-03E2D4CDBCF8}\setup.exe" /z-uninstall
CyberLink PowerDVD 9-->"C:\Program Files\InstallShield Installation Information\{A8516AC9-AAF1-47F9-9766-03E2D4CDBCF8}\setup.exe" /z-uninstall
DeepBurner Pro v1.8.0.225-->"C:\Program Files\Astonsoft\DeepBurner Pro\Uninstall.exe" "C:\Program Files\Astonsoft\DeepBurner Pro\install.log"
Defraggler-->"C:\Program Files\Defraggler\uninst.exe"
DivX Converter-->C:\Program Files\DivX\DivXConverterUninstall.exe /CONVERTER
DivX Player-->C:\Program Files\DivX\DivXPlayerUninstall.exe /PLAYER
DivX Plus DirectShow Filters-->C:\Program Files\DivX\DivXDSFiltersUninstall.exe /DSFILTERS
DivX Web Player-->C:\Program Files\DivX\DivXWebPlayerUninstall.exe /PLUGIN
EVEREST Ultimate Edition v5.02-->"C:\Program Files\Lavalys\EVEREST Ultimate Edition\unins000.exe"
Fraps (remove only)-->"C:\Fraps\uninstall.exe"
Futuremark SystemInfo-->"C:\Program Files\InstallShield Installation Information\{BEE64C14-BEF1-4610-8A68-A16EAA47B882}\setup.exe" -runfromtemp -l0x0009 -removeonly
High Quality Photo Resizer 1.60-->"C:\Program Files\High Quality Photo Resizer\unins000.exe"
HijackThis 2.0.2-->"E:\Staršie HDD D\Pičoviny Net\Softy\odjebavace programi treba pozret net\HijackThis.exe" /uninstall
Hotfix for Microsoft .NET Framework 3.5 SP1 (KB953595)-->C:\WINDOWS\system32\msiexec.exe /package {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9} /uninstall /qb+ REBOOTPROMPT=""
ICQ6.5-->"C:\Program Files\InstallShield Installation Information\{60DE4033-9503-48D1-A483-7846BD217CA9}\setup.exe" -runfromtemp -l0x0009 -removeonly
InkSaver-->C:\Program Files\Common Files\InstallShield\Driver\8\Intel 32\IDriver.exe /M{4025244F-7F7C-4AB8-BF9A-F4A017AE6674}
Java(TM) 6 Update 14-->MsiExec.exe /X{26A24AE4-039D-4CA4-87B4-2F83216014F0}
Java(TM) 6 Update 17-->MsiExec.exe /X{26A24AE4-039D-4CA4-87B4-2F83216015FF}
jetAudio 5.1x Czech Language Pack-->C:\Program Files\JetAudio\Uninstall_CSY_LPack.exe
jetAudio-->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\0701\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{DF8195AF-8E6F-4487-A0EE-196F7E3F4B8A}\Setup.exe" -l0x9
Kaspersky Internet Security 2009-->MsiExec.exe /I{8CB14A64-CEF4-4C8F-B1C8-1C3B8752CB55}
Kaspersky Internet Security 2009-->MsiExec.exe /I{8CB14A64-CEF4-4C8F-B1C8-1C3B8752CB55}
Lineage II-->C:\Program Files\InstallShield Installation Information\{076A6FD8-EE45-4A83-B3C9-C7C34E7CAFDD}\setup.exe -runfromtemp -l0x0009 -removeonly
Lineage II-->C:\Program Files\InstallShield Installation Information\{21040472-F8DF-48A9-A093-2986C1495670}\setup.exe -runfromtemp -l0x0009 -removeonly
Microsoft .NET Framework 2.0 Language Pack - CSY-->C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\Microsoft .NET Framework 2.0 Language Pack - CSY\install.exe
Microsoft .NET Framework 2.0 Service Pack 2-->MsiExec.exe /I{C09FB3CD-3D0C-3F2D-899A-6A1D67F2073F}
Microsoft .NET Framework 3.0 Service Pack 2-->MsiExec.exe /I{A3051CD0-2F64-3813-A88D-B8DCCDE8F8C7}
Microsoft .NET Framework 3.5 SP1-->C:\WINDOWS\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\setup.exe
Microsoft .NET Framework 3.5 SP1-->MsiExec.exe /I{CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}
Microsoft Games for Windows - LIVE Redistributable-->MsiExec.exe /X{00C5F4F4-62F9-40D7-8000-AD8A9CD0C669}
Microsoft Games for Windows - LIVE-->MsiExec.exe /X{2C9EE786-1DDB-4C98-8FA4-B1B9B5A66B77}
Microsoft Office Professional Edition 2003-->MsiExec.exe /I{9011041B-6000-11D3-8CFE-0150048383C9}
Microsoft Visual C++ 2005 Redistributable-->MsiExec.exe /X{7299052b-02a4-4627-81f2-1818da5d550d}
Microsoft Visual C++ 2005 Redistributable-->MsiExec.exe /X{837b34e3-7c30-493c-8f6a-2b0f04e2912c}
Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022-->MsiExec.exe /X{FF66E9F6-83E7-3A3E-AF14-8DE9A809A6A4}
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148-->MsiExec.exe /X{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}
Mozilla Firefox (3.6)-->C:\Program Files\Mozilla Firefox\uninstall\helper.exe
MSXML 6.0 Parser (KB933579)-->MsiExec.exe /I{0A869A65-8C94-4F7C-A5C7-972D3C8CED9E}
NVIDIA Drivers-->C:\WINDOWS\system32\nvuninst.exe UninstallGUI
NVIDIA nView Desktop Manager-->C:\Program Files\NVIDIA Corporation\nView\nViewSetup.exe -uninstall
NVIDIA PhysX-->MsiExec.exe /X{C5C1C0F0-D62F-4DBF-81D4-D7EF397C228B}
OpenMG Limited Patch 4.4-06-13-19-01-->C:\Program Files\Common Files\Sony Shared\OpenMG\HotFixes\HotFix4.4-06-13-19-01\HotFixSetup\setup.exe /u
OpenMG Secure Module 4.4.00-->C:\PROGRA~1\COMMON~1\INSTAL~1\Driver\9\INTEL3~1\IDriver.exe /M{CFB17307-B244-4EAD-AE8E-CDAF440477C2} UNINSTALL
Opera 10.10-->MsiExec.exe /X{690BE098-6D0D-493D-B079-BD7E8F81A141}
Picasa 3-->"C:\Program Files\Google\Picasa3\Uninstall.exe"
QIP Infium 2.0.9018 RC3-->"C:\Program Files\QIP Infium\unins000.exe"
QuickTime Alternative 2.9.2-->"C:\Program Files\QuickTime Alternative\unins000.exe"
QuickTime-->MsiExec.exe /I{1451DE6B-ABE1-4F62-BE9A-B363A17588A2}
Realtek High Definition Audio Driver-->RtlUpd.exe -r -m
Sacred 2-->MsiExec.exe /I{1023383E-D9F6-478C-A965-23A4657B3C9A}
Skype™ 4.1-->MsiExec.exe /X{D103C4BA-F905-437A-8049-DB24763BBE36}
Softarová utilita ATI - Odinstalovat-->C:\Program Files\ATI Technologies\UninstallAll\AtiCimUn.exe
SonicStage 3.4-->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\10\01\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{A0EB195B-5876-48E6-879D-33D4B2102610}\setup.exe" -l0x9 UNINSTALL -removeonly
The KMPlayer (remove only)-->"C:\Program Files\The KMPlayer\uninstall.exe"
Total Commander (Remove or Repair)-->c:\totalcmd\tcuninst.exe
Ubisoft Game Launcher-->"C:\Program Files\InstallShield Installation Information\{888F1505-C2B3-4FDE-835D-36353EBD4754}\setup.exe" -runfromtemp -l0x0409 -removeonly
VC80CRTRedist - 8.0.50727.762-->MsiExec.exe /I{767CC44C-9BBC-438D-BAD3-FD4595DD148B}
Ventrilo-->MsiExec.exe /I{789289CA-F73A-4A16-A331-54D498CE069F}
Winamp-->"C:\Program Files\Winamp\UninstWA.exe"
Windows Imaging Component-->"C:\WINDOWS\$NtUninstallWIC$\spuninst\spuninst.exe"
Windows Installer 3.1 (KB893803)-->"C:\WINDOWS\$MSI31Uninstall_KB893803v2$\spuninst\spuninst.exe"
Windows Media Format Runtime-->"C:\Program Files\Windows Media Player\wmsetsdk.exe" /UninstallAll
WinRAR-->C:\Program Files\WinRAR\uninstall.exe

======Hosts File======

216.107.250.194 nprotect.lineage2.com
78.96.234.203 l2authd.lineage2.com
78.96.234.203 L2testauthd.lineage2.com

======Security center information======

AV: Kaspersky Internet Security
FW: Kaspersky Internet Security

======System event log======

Computer Name: GABERLANDIA
Event Code: 14
Message: Unknown error on CMDre 00000001 000000c0 40002bb4 00000004 00000084

Record Number: 13373
Source Name: nv
Time Written: 20100306122536.000000+060
Event Type: Chyba
User:

Computer Name: GABERLANDIA
Event Code: 14
Message: Unknown error on CMDre 00000001 000000c0 40002bb4 00000004 00000084

Record Number: 13372
Source Name: nv
Time Written: 20100306122536.000000+060
Event Type: Chyba
User:

Computer Name: GABERLANDIA
Event Code: 14
Message: Unknown error on CMDre 00000001 000000c0 40002bb4 00000004 00000084

Record Number: 13371
Source Name: nv
Time Written: 20100306122536.000000+060
Event Type: Chyba
User:

Computer Name: GABERLANDIA
Event Code: 14
Message: Unknown error on CMDre 00000001 000000c0 40002bb4 00000004 00000084

Record Number: 13370
Source Name: nv
Time Written: 20100306122536.000000+060
Event Type: Chyba
User:

Computer Name: GABERLANDIA
Event Code: 14
Message: Unknown error on CMDre 00000001 000000c0 40002bb4 00000004 00000084

Record Number: 13369
Source Name: nv
Time Written: 20100306122536.000000+060
Event Type: Chyba
User:

=====Application event log=====

Computer Name: MRGRABBE-E9555C
Event Code: 11707
Message: Product: QuickTime -- Installation completed successfully.

Record Number: 659
Source Name: MsiInstaller
Time Written: 20090906151021.000000+120
Event Type: Informace
User: GABERLANDIA\Mrgrabber

Computer Name: MRGRABBE-E9555C
Event Code: 11728
Message: Product: QuickTime -- Configuration completed successfully.

Record Number: 658
Source Name: MsiInstaller
Time Written: 20090906150902.000000+120
Event Type: Informace
User: GABERLANDIA\Mrgrabber

Computer Name: MRGRABBE-E9555C
Event Code: 11729
Message: Product: QuickTime -- Configuration failed.

Record Number: 657
Source Name: MsiInstaller
Time Written: 20090906150732.000000+120
Event Type: Informace
User: GABERLANDIA\Mrgrabber

Computer Name: MRGRABBE-E9555C
Event Code: 11729
Message: Product: QuickTime -- Configuration failed.

Record Number: 656
Source Name: MsiInstaller
Time Written: 20090906150433.000000+120
Event Type: Informace
User: GABERLANDIA\Mrgrabber

Computer Name: MRGRABBE-E9555C
Event Code: 1000
Message: Chybující aplikace QuickTimePlayer.exe, verze 7.4.5.67, chybující modul QuickTimePlayer.exe, verze 7.4.5.67, adresa chyby 0x0000130d.

Record Number: 655
Source Name: Application Error
Time Written: 20090906150408.000000+120
Event Type: Chyba
User:

======Environment variables======

"ComSpec"=%SystemRoot%\system32\cmd.exe
"Path"=%SystemRoot%\system32;%SystemRoot%;%SystemRoot%\System32\Wbem;C:\Program Files\Common Files\DivX Shared\;C:\WINDOWS\System32\spool\DRIVERS\W32X86\3;C:\Program Files\QuickTime\QTSystem\
"windir"=%SystemRoot%
"FP_NO_HOST_CHECK"=NO
"OS"=Windows_NT
"PROCESSOR_ARCHITECTURE"=x86
"PROCESSOR_LEVEL"=15
"PROCESSOR_IDENTIFIER"=x86 Family 15 Model 107 Stepping 2, AuthenticAMD
"PROCESSOR_REVISION"=6b02
"NUMBER_OF_PROCESSORS"=2
"PATHEXT"=.COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH
"TEMP"=%SystemRoot%\TEMP
"TMP"=%SystemRoot%\TEMP
"CLASSPATH"=.;C:\Program Files\Java\jre6\lib\ext\QTJava.zip
"QTJAVA"=C:\Program Files\Java\jre6\lib\ext\QTJava.zip

-----------------EOF-----------------

[Rudy]

Dejte log z ComboFix.

Stahnete a ulozte nejlepe na plochu ComboFix: http://download.bleepingcomputer.com/sUBs/ComboFix.exe

pote spustte aplikaci pod uctem s administratorskym opravnenim

hned po startu se zobrazi obrazovka s licencnimi podminkami, pokracujte kliknutim na tlacitko Ano.

v klidu si postavte na kafe (cela akce trva cca. 5-10 minut, nekdy i dele - dle toho, o jak rychly stroj se jedna a kolika soubory se skener bude muset prodirat), behem skenu se nepokousejte spoustet zadne jine aplikace ani nic jineho

behem skenovani nepropadejte panice, vas stroj muze byt restartovan (predevsim pri prvni aplikaci skeneru)

upozorneni: pokud pouzivate antispyware s rezidentnim stitem, prepnete jeho rezidentni stit do Install Mode, pripadne jej po dobu skenu uplne deaktivujte, protoze dochazi pri skenu a vymazu pripadneho malware k nezadoucim kolizim s rezidentem antispyware

[gabber]

no hned po štarte systemu sa spustil kaspersky a vyhodil mi tabulku na combofix že je Suspicious object:C:\COMBOFIX\MBR.CFXXE tak som dal povoliť


ComboFix 10-03-17.07 - Mrgrabber 18.03.2010 21:03:36.1.2 - x86
Systém Microsoft Windows XP Professional 5.1.2600.2.1250.420.1029.18.3327.2839 [GMT 1:00]
Spuštěný z: c:\documents and settings\Mrgrabber\Plocha\ComboFix.exe
AV: Kaspersky Internet Security *On-access scanning disabled* (Updated) {2C4D4BC6-0793-4956-A9F9-E252435469C0}
FW: Kaspersky Internet Security *disabled* {2C4D4BC6-0793-4956-A9F9-E252435469C0}
.

((((((((((((((((((((((((((((((((((((((( Ostatní výmazy )))))))))))))))))))))))))))))))))))))))))))))))))
.

c:\windows\system32\ieuinit.inf

.
((((((((((((((((((((((((((((((((((((((( Ovladače/Služby )))))))))))))))))))))))))))))))))))))))))))))))))
.

-------\Legacy_SSHNAS
-------\Service_SSHNAS


((((((((((((((((((((((((( Soubory vytvořené od 2010-02-18 do 2010-03-18 )))))))))))))))))))))))))))))))
.

2010-03-18 19:19 . 2010-03-18 19:19 -------- d-----w- C:\rsit
2010-03-13 13:17 . 2010-03-13 13:17 -------- d-----w- c:\documents and settings\Mrgrabber\Music
2010-03-13 12:49 . 2010-03-13 12:49 -------- d-----w- c:\program files\Ubisoft
2010-03-03 13:28 . 2010-03-03 13:28 -------- d-----w- c:\program files\Astonsoft
2010-02-25 16:08 . 2010-02-25 16:08 -------- d-----w- c:\program files\MSXML 6.0
2010-02-25 16:06 . 2010-02-25 16:06 -------- d-----w- c:\windows\system32\xlive
2010-02-25 16:06 . 2010-02-25 16:07 -------- d-----w- c:\program files\Microsoft Games for Windows - LIVE
2010-02-22 19:21 . 2010-03-05 17:29 -------- d-----w- c:\program files\QIP Infium
2010-02-21 14:27 . 2010-02-21 16:48 -------- d-----w- c:\program files\DVDFab Decrypter
2010-02-20 18:52 . 2010-02-20 18:52 142 ----a-w- c:\windows\system32\nvUnsupRes.dat

.
(((((((((((((((((((((((((((((((((((((((( Find3M výpis ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2010-03-18 20:08 . 2001-10-25 12:00 77872 ----a-w- c:\windows\system32\perfc005.dat
2010-03-18 20:08 . 2001-10-25 12:00 428750 ----a-w- c:\windows\system32\perfh005.dat
2010-03-18 20:06 . 2009-08-13 11:26 778272 --sha-w- c:\windows\system32\drivers\fidbox2.dat
2010-03-18 20:06 . 2009-08-13 11:26 4788 --sha-w- c:\windows\system32\drivers\fidbox2.idx
2010-03-18 20:06 . 2009-08-13 11:26 34872 --sha-w- c:\windows\system32\drivers\fidbox.idx
2010-03-18 20:06 . 2009-08-13 11:26 4057120 --sha-w- c:\windows\system32\drivers\fidbox.dat
2010-03-15 15:18 . 2009-08-20 13:48 -------- d-----w- c:\program files\Acoustica CD Label Maker
2010-03-15 15:18 . 2009-08-13 15:34 -------- d-----w- c:\program files\AGEIA Technologies
2010-03-14 12:34 . 2009-08-13 11:00 -------- d--h--w- c:\program files\InstallShield Installation Information
2010-03-11 14:50 . 2009-08-13 11:37 -------- d-----w- c:\program files\uTorrent
2010-03-10 11:45 . 2009-08-16 08:46 -------- d-----w- c:\program files\Lineage II
2010-03-03 20:02 . 2009-08-13 14:15 -------- d-----w- c:\program files\CCleaner
2010-02-25 16:11 . 2010-02-25 16:11 -------- d-----w- c:\program files\MSBuild
2010-02-25 16:11 . 2010-02-25 16:11 -------- d-----w- c:\program files\Reference Assemblies
2010-02-23 10:13 . 2009-08-27 15:18 53312 ----a-w- c:\windows\system32\drivers\pssdklbf.sys
2010-02-23 10:13 . 2009-08-27 15:18 36928 ----a-w- c:\windows\system32\drivers\pssdk40.sys
2010-02-20 16:52 . 2009-08-13 13:33 -------- d-----w- c:\program files\Webteh
2010-02-16 15:22 . 2010-02-16 15:22 -------- d-----w- c:\program files\QuickTime
2010-01-31 16:04 . 2010-01-21 11:17 -------- d-----w- c:\program files\gracia
2010-01-25 20:53 . 2010-01-25 20:53 -------- d-----w- c:\program files\InkSaver
2010-01-24 18:02 . 2010-01-24 17:41 -------- d-----w- c:\program files\Total Video Converter
2010-01-18 21:30 . 2010-01-18 21:30 -------- d-----w- c:\program files\Common Files\DirectX
2009-05-13 21:55 . 2009-05-13 21:55 1044480 ----a-w- c:\program files\mozilla firefox\plugins\libdivx.dll
2009-05-13 21:55 . 2009-05-13 21:55 200704 ----a-w- c:\program files\mozilla firefox\plugins\ssldivx.dll
2009-05-13 21:55 . 2009-05-13 21:55 1044480 ----a-w- c:\program files\opera\program\plugins\libdivx.dll
2009-05-13 21:55 . 2009-05-13 21:55 200704 ----a-w- c:\program files\opera\program\plugins\ssldivx.dll
.

(((((((((((((((((((((((((((((((((( Spouštěcí body v registru )))))))))))))))))))))))))))))))))))))))))))))
.
.
*Poznámka* prázdné záznamy a legitimní výchozí údaje nejsou zobrazeny.
REGEDIT4

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Skype"="c:\program files\Skype\Phone\Skype.exe" [2009-10-09 25623336]

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce]
"WiseStubReboot"="MSIEXEC" [X]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"RTHDCPL"="RTHDCPL.EXE" [2007-05-10 16342528]
"AVP"="c:\program files\Kaspersky Lab\Kaspersky Internet Security 2009\avp.exe" [2009-08-13 208616]
"NvCplDaemon"="c:\windows\system32\NvCpl.dll" [2009-11-20 12669544]
"SsAAD.exe"="c:\progra~1\Sony\SONICS~1\SsAAD.exe" [2006-01-07 81920]
"QuickTime Task"="c:\program files\QuickTime\QTTask.exe" [2009-11-10 417792]

[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="c:\windows\system32\CTFMON.EXE" [2004-08-17 15360]

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run-]
"CTFMON.EXE"=c:\windows\system32\ctfmon.exe

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run-]
"BDRegion"=c:\program files\Cyberlink\Shared Files\brs.exe
"KernelFaultCheck"=%systemroot%\system32\dumprep 0 -k
"QuickTime Task"="c:\program files\QuickTime\QTTask.exe" -atboottime
"PDVD9LanguageShortcut"="c:\program files\CyberLink\PowerDVD9\Language\Language.exe"
"NvMediaCenter"=RUNDLL32.EXE c:\windows\system32\NvMcTray.dll,NvTaskbarInit
"SunJavaUpdateSched"="c:\program files\Java\jre6\bin\jusched.exe"
"CanonSolutionMenu"=c:\program files\Canon\SolutionMenu\CNSLMAIN.exe /logon
"CanonMyPrinter"=c:\program files\Canon\MyPrinter\BJMyPrt.exe /logon
"Tweak UI"=RUNDLL32.EXE TWEAKUI.CPL,TweakMeUp
"SsAAD.exe"=c:\progra~1\Sony\SONICS~1\SsAAD.exe
"RemoteControl9"="c:\program files\CyberLink\PowerDVD9\PDVD9Serv.exe"

[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\KasperskyAntiVirus]
"DisableMonitoring"=dword:00000001

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\system32\\sessmgr.exe"=
"c:\\Program Files\\uTorrent\\utorrent.exe"=
"c:\\Program Files\\ICQ6.5\\ICQ.exe"=
"e:\\Hry\\Sacred 2\\system\\s2gs.exe"=
"e:\\Hry\\Sacred 2\\system\\sacred2.exe"=
"c:\\Program Files\\CyberLink\\PowerDVD9\\PowerDVD Cinema\\PowerDVDCinema.exe"=
"c:\\Program Files\\CyberLink\\PowerDVD9\\PowerDVD9.exe"=
"c:\\Program Files\\Skype\\Plugin Manager\\skypePM.exe"=
"c:\\Program Files\\Opera\\opera.exe"=
"c:\\Program Files\\Ubisoft\\Ubisoft Game Launcher\\UbisoftGameLauncher.exe"=
"c:\\Program Files\\Skype\\Phone\\Skype.exe"=

R0 klbg;Kaspersky Lab Boot Guard Driver;c:\windows\system32\drivers\klbg.sys [29.1.2008 16:29 33808]
R0 sptd;sptd;c:\windows\system32\drivers\sptd.sys [13.8.2009 16:29 717296]
R2 {B154377D-700F-42cc-9474-23858FBDF4BD};Power Control [2009/10/04 21:08];c:\program files\CyberLink\PowerDVD9\000.fcl [7.5.2009 20:05 87536]
R3 AtcL001;NDIS Miniport Driver for Atheros L1 Gigabit Ethernet Controller;c:\windows\system32\drivers\l151x86.sys [13.8.2009 12:14 36864]
R3 KLFLTDEV;Kaspersky Lab KLFltDev;c:\windows\system32\drivers\klfltdev.sys [13.3.2008 17:02 26640]
R3 klim5;Kaspersky Anti-Virus NDIS Filter;c:\windows\system32\drivers\klim5.sys [30.4.2008 16:06 24592]
S3 cpuz130;cpuz130;\??\c:\docume~1\MRGRAB~1\LOCALS~1\Temp\cpuz130\cpuz_x32.sys --> c:\docume~1\MRGRAB~1\LOCALS~1\Temp\cpuz130\cpuz_x32.sys [?]
S3 PsSdk40;PsSdk40;c:\windows\system32\drivers\pssdk40.sys [27.8.2009 16:18 36928]
S3 PsSdkLBF;PsSdkLBF;c:\windows\system32\drivers\pssdklbf.sys [27.8.2009 16:18 53312]
.
Obsah adresáře 'Naplánované úlohy'

2010-03-16 c:\windows\Tasks\AppleSoftwareUpdate.job
- c:\program files\Apple Software Update\SoftwareUpdate.exe [2008-07-30 10:34]
.
.
------- Doplňkový sken -------
.
uStart Page = hxxp://www.gabber.sk/
IE: Add to Banner Ad Blocker - c:\program files\Kaspersky Lab\Kaspersky Internet Security 2009\ie_banner_deny.htm
IE: Add to Google Photos Screensa&ver - c:\windows\system32\GPhotos.scr/200
IE: E&xportovať do programu Microsoft Excel - c:\progra~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
FF - ProfilePath - c:\documents and settings\Mrgrabber\Data aplikací\Mozilla\Firefox\Profiles\fyh43zjw.default\
FF - prefs.js: browser.startup.homepage - hxxp://www.google.sk
FF - plugin: c:\program files\Google\Picasa3\npPicasa3.dll
FF - plugin: c:\program files\Opera\program\plugins\npdivx32.dll
FF - plugin: c:\program files\Opera\program\plugins\npdivx32.dll

---- NASTAVENÍ FIREFOXU ----
FF - user.js: network.http.max-persistent-connections-per-server - 4
FF - user.js: nglayout.initialpaint.delay - 600
FF - user.js: content.notify.interval - 600000
FF - user.js: content.max.tokenizing.time - 1800000
FF - user.js: content.switch.threshold - 600000
c:\program files\Mozilla Firefox\greprefs\all.js - pref("ui.use_native_colors", true);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("ui.use_native_popup_windows", false);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("browser.enable_click_image_resizing", true);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("accessibility.browsewithcaret_shortcut.enabled", true);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("javascript.options.mem.high_water_mark", 32);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("javascript.options.mem.gc_frequency", 1600);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("network.auth.force-generic-ntlm", false);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("svg.smil.enabled", false);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("ui.trackpoint_hack.enabled", -1);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("browser.formfill.debug", false);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("browser.formfill.agedWeight", 2);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("browser.formfill.bucketSize", 1);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("browser.formfill.maxTimeGroupings", 25);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("browser.formfill.timeGroupingSize", 604800);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("browser.formfill.boundaryWeight", 25);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("browser.formfill.prefixWeight", 5);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("html5.enable", false);
c:\program files\Mozilla Firefox\defaults\pref\firefox-branding.js - pref("app.update.download.backgroundInterval", 600);
c:\program files\Mozilla Firefox\defaults\pref\firefox-branding.js - pref("app.update.url.manual", "http://www.firefox.com");
c:\program files\Mozilla Firefox\defaults\pref\firefox-branding.js - pref("browser.search.param.yahoo-fr-ja", "mozff");
c:\program files\Mozilla Firefox\defaults\pref\firefox-l10n.js - pref("browser.fixup.alternate.suffix", ".sk");
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("extensions.{972ce4c6-7e08-4474-a285-3208198ce6fd}.name", "chrome://browser/locale/browser.properties");
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("extensions.{972ce4c6-7e08-4474-a285-3208198ce6fd}.description", "chrome://browser/locale/browser.properties");
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("xpinstall.whitelist.add", "addons.mozilla.org");
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("xpinstall.whitelist.add.36", "getpersonas.com");
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("lightweightThemes.update.enabled", true);
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("browser.allTabs.previews", false);
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("plugins.hide_infobar_for_outdated_plugin", false);
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("plugins.update.notifyUser", false);
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("toolbar.customization.usesheet", false);
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("browser.taskbar.previews.enable", false);
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("browser.taskbar.previews.max", 20);
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("browser.taskbar.previews.cachetime", 20);
.
.
------- Asociace souborů -------
.
.scr=AutoCADScriptFile
.
- - - - NEPLATNÉ POLOŽKY ODSTRANĚNÉ Z REGISTRU - - - -

AddRemove-MyProduct - e:\staršie hdd d\LA\8k HR\Uninstal.exe



**************************************************************************
skenování skrytých procesů ...

skenování skrytých položek 'Po spuštění' ...

skenování skrytých souborů ...

sken byl úspešně dokončen
skryté soubory:

**************************************************************************

[HKEY_LOCAL_MACHINE\System\ControlSet001\Services\{B154377D-700F-42cc-9474-23858FBDF4BD}]
"ImagePath"="\??\c:\program files\CyberLink\PowerDVD9\000.fcl"
.
--------------------- ZAMKNUTÉ KLÍČE V REGISTRU ---------------------

[HKEY_USERS\S-1-5-21-1060284298-308236825-725345543-1003\Software\SecuROM\License information*]
"datasecu"=hex:7a,2d,05,49,ca,84,b7,b5,cf,02,1a,3e,19,eb,e1,23,19,52,93,21,b4,
23,c0,fc,18,2a,79,31,90,4b,50,4e,ce,55,ee,96,d7,69,2a,f1,da,5c,0c,ca,48,71,\
"rkeysecu"=hex:1d,09,52,7b,63,38,fe,0a,3c,53,f8,7c,08,cb,3d,e9
.
------------------------ Jiné spuštené procesy ------------------------
.
c:\windows\system32\nvsvc32.exe
c:\windows\RTHDCPL.EXE
c:\program files\Java\jre6\bin\jqs.exe
c:\program files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE
c:\windows\system32\wdfmgr.exe
c:\windows\system32\wscntfy.exe
c:\program files\Skype\Plugin Manager\skypePM.exe
.
**************************************************************************
.
Celkový čas: 2010-03-18 21:09:49 - počítač byl restartován
ComboFix-quarantined-files.txt 2010-03-18 20:09

Před spuštěním: Volných bajtů: 21 609 549 824
Po spuštění: Volných bajtů: 21 554 782 208

WindowsXP-KB310994-SP2-Pro-BootDisk-CSY.exe
[boot loader]
timeout=2
default=multi(0)disk(0)rdisk(0)partition(1)\WINDOWS
[operating systems]
c:\cmdcons\BOOTSECT.DAT="Microsoft Windows Recovery Console" /cmdcons
multi(0)disk(0)rdisk(0)partition(1)\WINDOWS="Microsoft Windows XP Professional" /noexecute=optin /fastdetect /usepmtimer

- - End Of File - - E9EBA70A4B6867DCD8477B887C008688

[gabber]

ComboFix 10-03-17.07 - Mrgrabber 18.03.2010 21:03:36.1.2 - x86
Systém Microsoft Windows XP Professional 5.1.2600.2.1250.420.1029.18.3327.2839 [GMT 1:00]
Spuštěný z: c:\documents and settings\Mrgrabber\Plocha\ComboFix.exe
AV: Kaspersky Internet Security *On-access scanning disabled* (Updated) {2C4D4BC6-0793-4956-A9F9-E252435469C0}
FW: Kaspersky Internet Security *disabled* {2C4D4BC6-0793-4956-A9F9-E252435469C0}
.

((((((((((((((((((((((((((((((((((((((( Ostatní výmazy )))))))))))))))))))))))))))))))))))))))))))))))))
.

c:\windows\system32\ieuinit.inf

.
((((((((((((((((((((((((((((((((((((((( Ovladače/Služby )))))))))))))))))))))))))))))))))))))))))))))))))
.

-------\Legacy_SSHNAS
-------\Service_SSHNAS


((((((((((((((((((((((((( Soubory vytvořené od 2010-02-18 do 2010-03-18 )))))))))))))))))))))))))))))))
.

2010-03-18 19:19 . 2010-03-18 19:19 -------- d-----w- C:\rsit
2010-03-13 13:17 . 2010-03-13 13:17 -------- d-----w- c:\documents and settings\Mrgrabber\Music
2010-03-13 12:49 . 2010-03-13 12:49 -------- d-----w- c:\program files\Ubisoft
2010-03-03 13:28 . 2010-03-03 13:28 -------- d-----w- c:\program files\Astonsoft
2010-02-25 16:08 . 2010-02-25 16:08 -------- d-----w- c:\program files\MSXML 6.0
2010-02-25 16:06 . 2010-02-25 16:06 -------- d-----w- c:\windows\system32\xlive
2010-02-25 16:06 . 2010-02-25 16:07 -------- d-----w- c:\program files\Microsoft Games for Windows - LIVE
2010-02-22 19:21 . 2010-03-05 17:29 -------- d-----w- c:\program files\QIP Infium
2010-02-21 14:27 . 2010-02-21 16:48 -------- d-----w- c:\program files\DVDFab Decrypter
2010-02-20 18:52 . 2010-02-20 18:52 142 ----a-w- c:\windows\system32\nvUnsupRes.dat

.
(((((((((((((((((((((((((((((((((((((((( Find3M výpis ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2010-03-18 20:08 . 2001-10-25 12:00 77872 ----a-w- c:\windows\system32\perfc005.dat
2010-03-18 20:08 . 2001-10-25 12:00 428750 ----a-w- c:\windows\system32\perfh005.dat
2010-03-18 20:06 . 2009-08-13 11:26 778272 --sha-w- c:\windows\system32\drivers\fidbox2.dat
2010-03-18 20:06 . 2009-08-13 11:26 4788 --sha-w- c:\windows\system32\drivers\fidbox2.idx
2010-03-18 20:06 . 2009-08-13 11:26 34872 --sha-w- c:\windows\system32\drivers\fidbox.idx
2010-03-18 20:06 . 2009-08-13 11:26 4057120 --sha-w- c:\windows\system32\drivers\fidbox.dat
2010-03-15 15:18 . 2009-08-20 13:48 -------- d-----w- c:\program files\Acoustica CD Label Maker
2010-03-15 15:18 . 2009-08-13 15:34 -------- d-----w- c:\program files\AGEIA Technologies
2010-03-14 12:34 . 2009-08-13 11:00 -------- d--h--w- c:\program files\InstallShield Installation Information
2010-03-11 14:50 . 2009-08-13 11:37 -------- d-----w- c:\program files\uTorrent
2010-03-10 11:45 . 2009-08-16 08:46 -------- d-----w- c:\program files\Lineage II
2010-03-03 20:02 . 2009-08-13 14:15 -------- d-----w- c:\program files\CCleaner
2010-02-25 16:11 . 2010-02-25 16:11 -------- d-----w- c:\program files\MSBuild
2010-02-25 16:11 . 2010-02-25 16:11 -------- d-----w- c:\program files\Reference Assemblies
2010-02-23 10:13 . 2009-08-27 15:18 53312 ----a-w- c:\windows\system32\drivers\pssdklbf.sys
2010-02-23 10:13 . 2009-08-27 15:18 36928 ----a-w- c:\windows\system32\drivers\pssdk40.sys
2010-02-20 16:52 . 2009-08-13 13:33 -------- d-----w- c:\program files\Webteh
2010-02-16 15:22 . 2010-02-16 15:22 -------- d-----w- c:\program files\QuickTime
2010-01-31 16:04 . 2010-01-21 11:17 -------- d-----w- c:\program files\gracia
2010-01-25 20:53 . 2010-01-25 20:53 -------- d-----w- c:\program files\InkSaver
2010-01-24 18:02 . 2010-01-24 17:41 -------- d-----w- c:\program files\Total Video Converter
2010-01-18 21:30 . 2010-01-18 21:30 -------- d-----w- c:\program files\Common Files\DirectX
2009-05-13 21:55 . 2009-05-13 21:55 1044480 ----a-w- c:\program files\mozilla firefox\plugins\libdivx.dll
2009-05-13 21:55 . 2009-05-13 21:55 200704 ----a-w- c:\program files\mozilla firefox\plugins\ssldivx.dll
2009-05-13 21:55 . 2009-05-13 21:55 1044480 ----a-w- c:\program files\opera\program\plugins\libdivx.dll
2009-05-13 21:55 . 2009-05-13 21:55 200704 ----a-w- c:\program files\opera\program\plugins\ssldivx.dll
.

(((((((((((((((((((((((((((((((((( Spouštěcí body v registru )))))))))))))))))))))))))))))))))))))))))))))
.
.
*Poznámka* prázdné záznamy a legitimní výchozí údaje nejsou zobrazeny.
REGEDIT4

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Skype"="c:\program files\Skype\Phone\Skype.exe" [2009-10-09 25623336]

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce]
"WiseStubReboot"="MSIEXEC" [X]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"RTHDCPL"="RTHDCPL.EXE" [2007-05-10 16342528]
"AVP"="c:\program files\Kaspersky Lab\Kaspersky Internet Security 2009\avp.exe" [2009-08-13 208616]
"NvCplDaemon"="c:\windows\system32\NvCpl.dll" [2009-11-20 12669544]
"SsAAD.exe"="c:\progra~1\Sony\SONICS~1\SsAAD.exe" [2006-01-07 81920]
"QuickTime Task"="c:\program files\QuickTime\QTTask.exe" [2009-11-10 417792]

[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="c:\windows\system32\CTFMON.EXE" [2004-08-17 15360]

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run-]
"CTFMON.EXE"=c:\windows\system32\ctfmon.exe

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run-]
"BDRegion"=c:\program files\Cyberlink\Shared Files\brs.exe
"KernelFaultCheck"=%systemroot%\system32\dumprep 0 -k
"QuickTime Task"="c:\program files\QuickTime\QTTask.exe" -atboottime
"PDVD9LanguageShortcut"="c:\program files\CyberLink\PowerDVD9\Language\Language.exe"
"NvMediaCenter"=RUNDLL32.EXE c:\windows\system32\NvMcTray.dll,NvTaskbarInit
"SunJavaUpdateSched"="c:\program files\Java\jre6\bin\jusched.exe"
"CanonSolutionMenu"=c:\program files\Canon\SolutionMenu\CNSLMAIN.exe /logon
"CanonMyPrinter"=c:\program files\Canon\MyPrinter\BJMyPrt.exe /logon
"Tweak UI"=RUNDLL32.EXE TWEAKUI.CPL,TweakMeUp
"SsAAD.exe"=c:\progra~1\Sony\SONICS~1\SsAAD.exe
"RemoteControl9"="c:\program files\CyberLink\PowerDVD9\PDVD9Serv.exe"

[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\KasperskyAntiVirus]
"DisableMonitoring"=dword:00000001

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\system32\\sessmgr.exe"=
"c:\\Program Files\\uTorrent\\utorrent.exe"=
"c:\\Program Files\\ICQ6.5\\ICQ.exe"=
"e:\\Hry\\Sacred 2\\system\\s2gs.exe"=
"e:\\Hry\\Sacred 2\\system\\sacred2.exe"=
"c:\\Program Files\\CyberLink\\PowerDVD9\\PowerDVD Cinema\\PowerDVDCinema.exe"=
"c:\\Program Files\\CyberLink\\PowerDVD9\\PowerDVD9.exe"=
"c:\\Program Files\\Skype\\Plugin Manager\\skypePM.exe"=
"c:\\Program Files\\Opera\\opera.exe"=
"c:\\Program Files\\Ubisoft\\Ubisoft Game Launcher\\UbisoftGameLauncher.exe"=
"c:\\Program Files\\Skype\\Phone\\Skype.exe"=

R0 klbg;Kaspersky Lab Boot Guard Driver;c:\windows\system32\drivers\klbg.sys [29.1.2008 16:29 33808]
R0 sptd;sptd;c:\windows\system32\drivers\sptd.sys [13.8.2009 16:29 717296]
R2 {B154377D-700F-42cc-9474-23858FBDF4BD};Power Control [2009/10/04 21:08];c:\program files\CyberLink\PowerDVD9\000.fcl [7.5.2009 20:05 87536]
R3 AtcL001;NDIS Miniport Driver for Atheros L1 Gigabit Ethernet Controller;c:\windows\system32\drivers\l151x86.sys [13.8.2009 12:14 36864]
R3 KLFLTDEV;Kaspersky Lab KLFltDev;c:\windows\system32\drivers\klfltdev.sys [13.3.2008 17:02 26640]
R3 klim5;Kaspersky Anti-Virus NDIS Filter;c:\windows\system32\drivers\klim5.sys [30.4.2008 16:06 24592]
S3 cpuz130;cpuz130;\??\c:\docume~1\MRGRAB~1\LOCALS~1\Temp\cpuz130\cpuz_x32.sys --> c:\docume~1\MRGRAB~1\LOCALS~1\Temp\cpuz130\cpuz_x32.sys [?]
S3 PsSdk40;PsSdk40;c:\windows\system32\drivers\pssdk40.sys [27.8.2009 16:18 36928]
S3 PsSdkLBF;PsSdkLBF;c:\windows\system32\drivers\pssdklbf.sys [27.8.2009 16:18 53312]
.
Obsah adresáře 'Naplánované úlohy'

2010-03-16 c:\windows\Tasks\AppleSoftwareUpdate.job
- c:\program files\Apple Software Update\SoftwareUpdate.exe [2008-07-30 10:34]
.
.
------- Doplňkový sken -------
.
uStart Page = hxxp://www.gabber.sk/
IE: Add to Banner Ad Blocker - c:\program files\Kaspersky Lab\Kaspersky Internet Security 2009\ie_banner_deny.htm
IE: Add to Google Photos Screensa&ver - c:\windows\system32\GPhotos.scr/200
IE: E&xportovať do programu Microsoft Excel - c:\progra~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
FF - ProfilePath - c:\documents and settings\Mrgrabber\Data aplikací\Mozilla\Firefox\Profiles\fyh43zjw.default\
FF - prefs.js: browser.startup.homepage - hxxp://www.google.sk
FF - plugin: c:\program files\Google\Picasa3\npPicasa3.dll
FF - plugin: c:\program files\Opera\program\plugins\npdivx32.dll
FF - plugin: c:\program files\Opera\program\plugins\npdivx32.dll

---- NASTAVENÍ FIREFOXU ----
FF - user.js: network.http.max-persistent-connections-per-server - 4
FF - user.js: nglayout.initialpaint.delay - 600
FF - user.js: content.notify.interval - 600000
FF - user.js: content.max.tokenizing.time - 1800000
FF - user.js: content.switch.threshold - 600000
c:\program files\Mozilla Firefox\greprefs\all.js - pref("ui.use_native_colors", true);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("ui.use_native_popup_windows", false);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("browser.enable_click_image_resizing", true);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("accessibility.browsewithcaret_shortcut.enabled", true);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("javascript.options.mem.high_water_mark", 32);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("javascript.options.mem.gc_frequency", 1600);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("network.auth.force-generic-ntlm", false);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("svg.smil.enabled", false);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("ui.trackpoint_hack.enabled", -1);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("browser.formfill.debug", false);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("browser.formfill.agedWeight", 2);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("browser.formfill.bucketSize", 1);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("browser.formfill.maxTimeGroupings", 25);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("browser.formfill.timeGroupingSize", 604800);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("browser.formfill.boundaryWeight", 25);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("browser.formfill.prefixWeight", 5);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("html5.enable", false);
c:\program files\Mozilla Firefox\defaults\pref\firefox-branding.js - pref("app.update.download.backgroundInterval", 600);
c:\program files\Mozilla Firefox\defaults\pref\firefox-branding.js - pref("app.update.url.manual", "http://www.firefox.com");
c:\program files\Mozilla Firefox\defaults\pref\firefox-branding.js - pref("browser.search.param.yahoo-fr-ja", "mozff");
c:\program files\Mozilla Firefox\defaults\pref\firefox-l10n.js - pref("browser.fixup.alternate.suffix", ".sk");
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("extensions.{972ce4c6-7e08-4474-a285-3208198ce6fd}.name", "chrome://browser/locale/browser.properties");
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("extensions.{972ce4c6-7e08-4474-a285-3208198ce6fd}.description", "chrome://browser/locale/browser.properties");
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("xpinstall.whitelist.add", "addons.mozilla.org");
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("xpinstall.whitelist.add.36", "getpersonas.com");
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("lightweightThemes.update.enabled", true);
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("browser.allTabs.previews", false);
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("plugins.hide_infobar_for_outdated_plugin", false);
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("plugins.update.notifyUser", false);
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("toolbar.customization.usesheet", false);
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("browser.taskbar.previews.enable", false);
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("browser.taskbar.previews.max", 20);
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("browser.taskbar.previews.cachetime", 20);
.
.
------- Asociace souborů -------
.
.scr=AutoCADScriptFile
.
- - - - NEPLATNÉ POLOŽKY ODSTRANĚNÉ Z REGISTRU - - - -

AddRemove-MyProduct - e:\staršie hdd d\LA\8k HR\Uninstal.exe



**************************************************************************
skenování skrytých procesů ...

skenování skrytých položek 'Po spuštění' ...

skenování skrytých souborů ...

sken byl úspešně dokončen
skryté soubory:

**************************************************************************

[HKEY_LOCAL_MACHINE\System\ControlSet001\Services\{B154377D-700F-42cc-9474-23858FBDF4BD}]
"ImagePath"="\??\c:\program files\CyberLink\PowerDVD9\000.fcl"
.
--------------------- ZAMKNUTÉ KLÍČE V REGISTRU ---------------------

[HKEY_USERS\S-1-5-21-1060284298-308236825-725345543-1003\Software\SecuROM\License information*]
"datasecu"=hex:7a,2d,05,49,ca,84,b7,b5,cf,02,1a,3e,19,eb,e1,23,19,52,93,21,b4,
23,c0,fc,18,2a,79,31,90,4b,50,4e,ce,55,ee,96,d7,69,2a,f1,da,5c,0c,ca,48,71,\
"rkeysecu"=hex:1d,09,52,7b,63,38,fe,0a,3c,53,f8,7c,08,cb,3d,e9
.
------------------------ Jiné spuštené procesy ------------------------
.
c:\windows\system32\nvsvc32.exe
c:\windows\RTHDCPL.EXE
c:\program files\Java\jre6\bin\jqs.exe
c:\program files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE
c:\windows\system32\wdfmgr.exe
c:\windows\system32\wscntfy.exe
c:\program files\Skype\Plugin Manager\skypePM.exe
.
**************************************************************************
.
Celkový čas: 2010-03-18 21:09:49 - počítač byl restartován
ComboFix-quarantined-files.txt 2010-03-18 20:09

Před spuštěním: Volných bajtů: 21 609 549 824
Po spuštění: Volných bajtů: 21 554 782 208

WindowsXP-KB310994-SP2-Pro-BootDisk-CSY.exe
[boot loader]
timeout=2
default=multi(0)disk(0)rdisk(0)partition(1)\WINDOWS
[operating systems]
c:\cmdcons\BOOTSECT.DAT="Microsoft Windows Recovery Console" /cmdcons
multi(0)disk(0)rdisk(0)partition(1)\WINDOWS="Microsoft Windows XP Professional" /noexecute=optin /fastdetect /usepmtimer

- - End Of File - - E9EBA70A4B6867DCD8477B887C008688

[Rudy]

2 položky smazány, zbytek logu vypadá čistý. Nastala nějaká změna?

[gabber]

no stale to robí a neviem čím to môže byť neviem či to je vírus ale ani sa mi nezdá že by to robilo nejake nastavenie fakt neviem čo to môže byť

[Rudy]

Skuste obnovu systému k datu, kdy systém korektně fungoval.

[gabber]

no s tým nemám moc dobré skúsenosti som to pár krát dával a potom mi nešli niektore programy ale aj tak každopadne dakujem za vašu namahu

[Rudy]

Při použití obnovy systému je logické, že nepoběží ty aplikace, které byly instalovány mezi datem bodu obnovy a dneškem . Musel byste je doinstalovat. Má to ale tu výhodu, že se zároveň přesvědčíte, zda některá z později instalovaných aplikací ten problém nezpůsobuje.
Můžete alternativně použít opravu systému pomocí XPManageru: http://www.viry.cz/forum/viewtopic.php?f=46&t=17549 , nebo z instal. CD. Problém ale může být také hardwarový.

[gabber]

môžem ešte poprosiť o ten program na vymazanie nainštalovaneho Combofixu?

[Rudy]

Combofix odinstalujte takto: Start>spustit>(napsat) combofix /uninstall>OK.

[gabber]

odinštalované ďakujem za vašu námahu