obnoveni tematu - CPU na 100%, zamrzavani laptopu

[Blanka yahoo]

ahojte, zrusili jste mi tema, ktere nebylo doreseno, prosim vrele o dalsi pomoc a timto dekuji rudy za jeho/jeji predeslou asistenci. moje cpu porad bezi naplno a laptop je pomaly, tak moc, ze vidim, kdyz neco pisi az za 1-2 sekundy, dekuji

[Rudy]

Váš původní topic by měl být do zítřka přístupný. Problém vznikl při údržbě databáze. Bohužel si nepamatuji, oč šlo a co všechno jsme podnikli. Až se k tomu dostanu, odpovím.

[Blanka yahoo]

prosim o reakci, dekuji.

[Rudy]

Protože si nepamatuji, jaké kroky jsme již podnikli, dejte znovu log z RSIT: http://viry.cz/forum/viewtopic.php?f=24&t=81939 . Omlouvám se vám, ale při množství vláken, která řeším, si to opravdu nemohu pamatovat.

[Blanka yahoo]

jasne, v pohode, ja jsem jen chtela upozornit na to, ze taky jeste potrebuji pomoc, nebot zrejme muj vir je nekde hluboko zakopany, pokud se nam jej nepodarilo pred tim odstranit

Logfile of random's system information tool 1.08 (written by random/random)
Run by blanka at 2010-10-20 22:00:23
Microsoft® Windows Vista™ Business Service Pack 1
System drive C: has 52 GB (34%) free of 151 GB
Total RAM: 2037 MB (36% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 22:02:28, on 20.10.2010
Platform: Windows Vista SP1 (WinNT 6.00.1905)
MSIE: Internet Explorer v8.00 (8.00.6001.18241)
Boot mode: Normal

Running processes:
C:\Windows\system32\taskeng.exe
C:\Program Files\IObit\Advanced SystemCare 3\AWC.exe
C:\Windows\system32\taskeng.exe
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\Program Files\Hewlett-Packard\HP PrecisionScan\PrecisionScan\HPLamp.exe
C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe
C:\Program Files\Windows Media Player\wmpnscfg.exe
C:\Windows\system32\wuauclt.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\Mozilla Firefox\plugin-container.exe
C:\Program Files\Skype\Phone\Skype.exe
C:\Program Files\Skype\Plugin Manager\skypePM.exe
C:\Program Files\Microsoft Office\Office12\WINWORD.EXE
C:\Program Files\Common Files\Adobe\Updater6\Adobe_Updater.exe
C:\Users\blanka\Downloads\RSIT.exe
C:\Program Files\trend micro\blanka.exe
C:\Windows\system32\SearchFilterHost.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.bbc.uk/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page =
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
R3 - URLSearchHook: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - (no file)
O2 - BHO: CmjBrowserHelperObject Object - {07A11D74-9D25-4fea-A833-8B0D76A5577A} - C:\Program Files\Mindjet\MindManager 7\Mm7InternetExplorer.dll
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: RealPlayer Download and Record Plugin for Internet Explorer - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\Program Files\Real\RealPlayer\rpbrowserrecordplugin.dll
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre6\bin\ssv.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
O4 - HKLM\..\Run: [HP Lamp] C:\Program Files\Hewlett-Packard\HP PrecisionScan\PrecisionScan\HPLamp.exe
O4 - HKLM\..\Run: [egui] "C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe" /hide /waitservice
O8 - Extra context menu item: E&xport to Microsoft Excel - res://c:\PROGRA~1\MICROS~1\Office12\EXCEL.EXE/3000
O9 - Extra button: Send to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~1\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: S&end to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~1\Office12\ONBttnIE.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~1\Office12\REFIEBAR.DLL
O9 - Extra button: Send to Mindjet MindManager - {941E1A34-C6AF-4baa-A973-224F9C3E04BF} - C:\Program Files\Mindjet\MindManager 7\Mm7InternetExplorer.dll
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O22 - SharedTaskScheduler: Component Categories cache daemon - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\Windows\system32\browseui.dll
O23 - Service: Lavasoft Ad-Aware Service (aawservice) - Lavasoft - C:\Program Files\Lavasoft\Ad-Aware\aawservice.exe
O23 - Service: ESET HTTP Server (EhttpSrv) - ESET - C:\Program Files\ESET\ESET NOD32 Antivirus\EHttpSrv.exe
O23 - Service: ESET Service (ekrn) - ESET - C:\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe
O23 - Service: Intel(R) Matrix Storage Event Monitor (IAANTMON) - Intel Corporation - C:\Program Files\Intel\Intel Matrix Storage Manager\IAANTMon.exe
O23 - Service: Nero BackItUp Scheduler 3 - Nero AG - C:\Program Files\Nero\Nero8\Nero BackItUp\NBService.exe
O23 - Service: NMIndexingService - Nero AG - C:\Program Files\Common Files\Nero\Lib\NMIndexingService.exe
O23 - Service: Fujitsu Siemens Computers Diagnostic Testhandler (TestHandler) - Fujitsu Siemens Computers - C:\Program Files\Fujitsu Siemens Computers\SystemDiagnostics\OnlineDiagnostic\TestManager\TestHandler.exe

--
End of file - 4740 bytes

======Scheduled tasks folder======

C:\Windows\tasks\AWC AutoSweep.job
C:\Windows\tasks\AWC Startup.job
C:\Windows\tasks\AWC Update.job
C:\Windows\tasks\ParetoLogic Registration.job
C:\Windows\tasks\ParetoLogic Update Version2.job
C:\Windows\tasks\User_Feed_Synchronization-{1708526F-260E-4DDB-9D89-EA4216EDB390}.job

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{07A11D74-9D25-4fea-A833-8B0D76A5577A}]
CmjBrowserHelperObject Object - C:\Program Files\Mindjet\MindManager 7\Mm7InternetExplorer.dll [2008-03-19 70944]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
Adobe PDF Link Helper - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2009-02-27 75128]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{3049C3E9-B461-4BC5-8870-4C09146192CA}]
RealPlayer Download and Record Plugin for Internet Explorer - C:\Program Files\Real\RealPlayer\rpbrowserrecordplugin.dll [2008-09-14 308856]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
Java(tm) Plug-In SSV Helper - C:\Program Files\Java\jre6\bin\ssv.dll [2008-11-10 320920]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre6\bin\jp2ssv.dll [2008-11-10 34816]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"SynTPEnh"=C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2007-05-10 869936]
"HP Lamp"=C:\Program Files\Hewlett-Packard\HP PrecisionScan\PrecisionScan\HPLamp.exe [1998-11-24 42496]
"egui"=C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe [2009-11-16 2054360]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\igfxcui]
C:\Windows\system32\igfxdev.dll [2007-05-31 200704]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
IconPackager Repair - {1799460C-0BC8-4865-B9DF-4A36CD703FF0} - C:\Program Files\Stardock\Object Desktop\IconPackager\iprepair.dll [2009-01-28 70960]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{AEB6717E-7E19-11d0-97EE-00C04FD91972}"= []

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\aawservice]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\aawservice]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1
"EnableUIADesktopToggle"=0

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=145
"NoDriveAutoRun"=0
"NoDrives"=0

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDrives"=0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1

======List of files/folders created in the last 1 months======

2010-10-19 20:39:36 ----D---- C:\Program Files\Common Files\Skype
2010-10-19 20:39:27 ----RD---- C:\Program Files\Skype
2010-10-18 19:02:45 ----D---- C:\Program Files\ESET
2010-10-17 12:06:03 ----A---- C:\Windows\system32\hpsjvset.dll
2010-10-17 12:06:03 ----A---- C:\Windows\system32\Hpsjusd.dll
2010-10-17 12:06:03 ----A---- C:\Windows\system32\hpsj1695.dll
2010-10-17 12:06:02 ----A---- C:\Windows\system32\hpsmui.dll
2010-10-17 12:06:00 ----A---- C:\Windows\system32\reg32.dll
2010-10-17 12:06:00 ----A---- C:\Windows\system32\ltkrn70n.dll
2010-10-17 12:06:00 ----A---- C:\Windows\system32\ltfil70n.DLL
2010-10-17 12:06:00 ----A---- C:\Windows\system32\lftif70n.dll
2010-10-17 12:06:00 ----A---- C:\Windows\system32\lfpng70n.dll
2010-10-17 12:06:00 ----A---- C:\Windows\system32\lfpcx70n.dll
2010-10-17 12:06:00 ----A---- C:\Windows\system32\Lfkodak.dll
2010-10-17 12:06:00 ----A---- C:\Windows\system32\lfgif70n.dll
2010-10-17 12:06:00 ----A---- C:\Windows\system32\lffpx70n.dll
2010-10-17 12:06:00 ----A---- C:\Windows\system32\Lffpx7.dll
2010-10-17 12:06:00 ----A---- C:\Windows\system32\lfbmp70n.dll
2010-10-17 12:06:00 ----A---- C:\Windows\system32\hpsjrreg.exe
2010-10-17 12:06:00 ----A---- C:\Windows\system32\hpscaner.dll
2010-10-17 12:05:59 ----A---- C:\Windows\system32\lffax70n.dll
2010-10-17 12:05:59 ----A---- C:\Windows\system32\LFCMP70n.DLL
2010-10-17 12:05:59 ----A---- C:\Windows\system32\ipeistor11.dll
2010-10-17 12:05:59 ----A---- C:\Windows\system32\ipebase11.dll
2010-10-17 12:05:59 ----A---- C:\Windows\system32\ipeapi11.dll
2010-10-17 12:05:59 ----A---- C:\Windows\system32\hpsj32.dll
2010-10-17 12:05:59 ----A---- C:\Windows\system32\hpscntst.dll
2010-10-17 12:05:59 ----A---- C:\Windows\system32\hpscnmgr.dll
2010-10-17 12:05:55 ----D---- C:\Windows\system32\Iosubsys
2010-10-16 23:57:15 ----SHD---- C:\$RECYCLE.BIN
2010-10-16 23:57:07 ----A---- C:\ComboFix.txt
2010-10-16 23:42:11 ----D---- C:\ComboFix
2010-10-16 23:41:14 ----A---- C:\Windows\SWXCACLS.exe
2010-10-16 09:10:29 ----A---- C:\Windows\system32\MSVCP50.DLL
2010-10-16 09:10:25 ----D---- C:\Program Files\Hewlett-Packard
2010-10-16 09:08:45 ----A---- C:\Windows\IsUninst.exe
2010-10-16 09:07:13 ----D---- C:\sj662
2010-10-16 09:00:47 ----D---- C:\Users\blanka\AppData\Roaming\IObit
2010-10-16 09:00:46 ----D---- C:\Program Files\IObit
2010-10-16 08:29:32 ----D---- C:\Users\blanka\AppData\Roaming\Malwarebytes
2010-10-16 08:28:39 ----D---- C:\ProgramData\Malwarebytes
2010-10-15 21:37:25 ----D---- C:\Windows\temp
2010-10-15 21:15:19 ----A---- C:\Windows\MBR.exe
2010-10-15 21:15:18 ----A---- C:\Windows\zip.exe
2010-10-15 21:15:18 ----A---- C:\Windows\SWSC.exe
2010-10-15 21:15:18 ----A---- C:\Windows\SWREG.exe
2010-10-15 21:15:18 ----A---- C:\Windows\sed.exe
2010-10-15 21:15:18 ----A---- C:\Windows\PEV.exe
2010-10-15 21:15:18 ----A---- C:\Windows\NIRCMD.exe
2010-10-15 21:15:18 ----A---- C:\Windows\grep.exe
2010-10-15 21:15:06 ----D---- C:\Windows\ERDNT
2010-10-15 21:11:14 ----D---- C:\Qoobox
2010-10-15 18:50:40 ----D---- C:\Program Files\trend micro
2010-10-15 18:50:37 ----D---- C:\rsit
2010-10-15 12:46:47 ----D---- C:\ProgramData\PC Drivers HeadQuarters Inc
2010-10-15 12:38:48 ----D---- C:\Users\blanka\AppData\Roaming\GetRightToGo
2010-10-14 23:00:16 ----A---- C:\Windows\system32\msshsq.dll
2010-10-14 18:42:40 ----A---- C:\Windows\system32\wmp.dll
2010-10-14 18:42:21 ----A---- C:\Windows\system32\wmploc.DLL
2010-10-14 18:41:31 ----A---- C:\Windows\system32\srvsvc.dll
2010-10-14 18:41:31 ----A---- C:\Windows\system32\drivers\srv.sys
2010-10-14 18:41:30 ----A---- C:\Windows\system32\drivers\srvnet.sys
2010-10-14 18:41:30 ----A---- C:\Windows\system32\drivers\srv2.sys
2010-10-14 18:41:29 ----A---- C:\Windows\system32\netevent.dll
2010-10-14 18:40:29 ----A---- C:\Windows\system32\schannel.dll
2010-10-14 18:40:01 ----A---- C:\Windows\system32\ole32.dll
2010-10-14 18:39:42 ----A---- C:\Windows\system32\t2embed.dll
2010-10-14 18:28:11 ----A---- C:\Windows\system32\mfc40.dll
2010-10-14 18:28:10 ----A---- C:\Windows\system32\mfc40u.dll
2010-10-14 18:24:56 ----A---- C:\Windows\system32\win32k.sys
2010-10-14 18:23:10 ----A---- C:\Windows\system32\wmpmde.dll
2010-10-14 18:16:25 ----A---- C:\Windows\system32\comctl32.dll
2010-10-06 20:00:12 ----D---- C:\Program Files\iTranslator
2010-10-06 17:30:25 ----D---- C:\Program Files\ABC Transdict
2010-09-29 09:58:21 ----A---- C:\Windows\system32\tzres.dll

======List of files/folders modified in the last 1 months======

2010-10-20 22:00:47 ----D---- C:\Windows\Prefetch
2010-10-20 21:34:40 ----D---- C:\Users\blanka\AppData\Roaming\Skype
2010-10-20 19:27:56 ----D---- C:\Users\blanka\AppData\Roaming\skypePM
2010-10-20 18:02:18 ----D---- C:\Windows\System32
2010-10-20 18:02:18 ----A---- C:\Windows\system32\PerfStringBackup.INI
2010-10-20 10:45:10 ----D---- C:\Users\blanka\AppData\Roaming\uTorrent
2010-10-20 09:18:15 ----SHD---- C:\System Volume Information
2010-10-20 00:08:54 ----D---- C:\Windows\Tasks
2010-10-20 00:08:54 ----D---- C:\Windows\system32\Tasks
2010-10-19 20:39:45 ----SHD---- C:\Windows\Installer
2010-10-19 20:39:36 ----D---- C:\Program Files\Common Files
2010-10-19 20:39:27 ----RD---- C:\Program Files
2010-10-19 20:39:23 ----D---- C:\ProgramData\Skype
2010-10-18 19:03:27 ----D---- C:\Windows\system32\drivers
2010-10-18 07:42:41 ----D---- C:\Windows
2010-10-17 12:11:31 ----D---- C:\Windows\inf
2010-10-17 12:06:03 ----D---- C:\Windows\twain_32
2010-10-17 11:51:07 ----D---- C:\Windows\Minidump
2010-10-17 11:44:46 ----SD---- C:\ProgramData\Microsoft
2010-10-16 23:54:47 ----A---- C:\Windows\system.ini
2010-10-16 23:54:37 ----D---- C:\Windows\system32\drivers\etc
2010-10-16 23:50:43 ----D---- C:\Windows\AppPatch
2010-10-16 23:40:27 ----D---- C:\Windows\system32\catroot2
2010-10-16 08:28:39 ----D---- C:\ProgramData
2010-10-15 09:51:06 ----D---- C:\Windows\rescache
2010-10-15 09:30:47 ----D---- C:\Windows\system32\en-US
2010-10-15 09:30:47 ----D---- C:\Program Files\Windows Media Player
2010-10-14 23:03:58 ----D---- C:\Windows\winsxs
2010-10-14 23:02:46 ----D---- C:\ProgramData\Microsoft Help
2010-10-14 23:00:21 ----D---- C:\Windows\system32\catroot
2010-10-06 20:01:43 ----D---- C:\WINGED
2010-10-04 13:21:50 ----RSD---- C:\Windows\assembly

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 iaStor;Intel AHCI Controller; C:\Windows\system32\DRIVERS\iaStor.sys [2007-04-25 277784]
R1 ehdrv;ehdrv; C:\Windows\system32\DRIVERS\ehdrv.sys [2009-11-16 108792]
R2 eamon;eamon; C:\Windows\system32\DRIVERS\eamon.sys [2009-11-16 116520]
R2 epfwwfpr;epfwwfpr; C:\Windows\system32\DRIVERS\epfwwfpr.sys [2009-12-18 95896]
R2 zntport;NTPort Library Driver; \??\C:\Windows\system32\drivers\zntport.sys [2007-07-30 14168]
R3 acpi_contactor;acpi_contactor Driver; C:\Windows\system32\DRIVERS\acpi_contactor_vista.sys [2007-04-13 7680]
R3 BthEnum;Bluetooth Enumerator Service; C:\Windows\system32\DRIVERS\BthEnum.sys [2008-01-21 19456]
R3 BthPan;Bluetooth Device (Personal Area Network); C:\Windows\system32\DRIVERS\bthpan.sys [2008-01-21 92160]
R3 BTHUSB;Bluetooth Radio USB Driver; C:\Windows\System32\Drivers\BTHUSB.sys [2008-04-29 29184]
R3 igfx;igfx; C:\Windows\system32\DRIVERS\igdkmd32.sys [2007-05-31 1774080]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\Windows\system32\drivers\RTKVHDA.sys [2007-06-12 1787816]
R3 MSPCLOCK;Microsoft Streaming Clock Proxy; C:\Windows\system32\drivers\MSPCLOCK.sys [2008-01-21 5888]
R3 MSPQM;Microsoft Streaming Quality Manager Proxy; C:\Windows\system32\drivers\MSPQM.sys [2008-01-21 5504]
R3 NETw4v32;Intel(R) Wireless WiFi Link Adapter Driver for Windows Vista 32 Bit; C:\Windows\system32\DRIVERS\NETw4v32.sys [2007-02-25 2216448]
R3 RFCOMM;Bluetooth Device (RFCOMM Protocol TDI); C:\Windows\system32\DRIVERS\rfcomm.sys [2008-01-21 49664]
R3 SNP2UVC;USB2.0 PC Camera (SNP2UVC); C:\Windows\system32\DRIVERS\snp2uvc.sys [2007-05-25 9604096]
R3 SynTP;Synaptics TouchPad Driver; C:\Windows\system32\DRIVERS\SynTP.sys [2007-05-10 187320]
R3 WUDFRd;WUDFRd; C:\Windows\system32\DRIVERS\WUDFRd.sys [2008-01-21 83328]
R3 yukonwlh;NDIS6.0 Miniport Driver for Marvell Yukon Ethernet Controller; C:\Windows\system32\DRIVERS\yk60x86.sys [2006-11-02 194048]
S2 ASPI32;ASPI32; C:\Windows\system32\drivers\ASPI32.sys []
S3 b57nd60x;Broadcom NetXtreme Gigabit Ethernet - NDIS 6.0; C:\Windows\system32\DRIVERS\b57nd60x.sys [2008-01-21 179712]
S3 BTHPORT;Bluetooth Port Driver; C:\Windows\System32\Drivers\BTHport.sys [2008-04-29 220160]
S3 catchme;catchme; \??\C:\Users\blanka\AppData\Local\Temp\catchme.sys []
S3 cpuz132;cpuz132; \??\C:\Users\blanka\AppData\Local\Temp\cpuz132\cpuz132_x32.sys []
S3 Dot4;MS IEEE-1284.4 Driver; C:\Windows\system32\DRIVERS\Dot4.sys [2008-01-21 131584]
S3 Dot4Print;Print Class Driver for IEEE-1284.4; C:\Windows\system32\DRIVERS\Dot4Prt.sys [2008-01-21 16384]
S3 dot4usb;MS Dot4USB Filter Dot4USB Filter; C:\Windows\system32\DRIVERS\dot4usb.sys [2008-01-21 36864]
S3 drmkaud;Microsoft Kernel DRM Audio Descrambler; C:\Windows\system32\drivers\drmkaud.sys [2008-01-21 5632]
S3 HdAudAddService;Microsoft 1.1 UAA Function Driver for High Definition Audio Service; C:\Windows\system32\drivers\HdAudio.sys [2006-11-02 235520]
S3 ialm;ialm; C:\Windows\system32\DRIVERS\igdkmd32.sys [2007-05-31 1774080]
S3 MSKSSRV;Microsoft Streaming Service Proxy; C:\Windows\system32\drivers\MSKSSRV.sys [2008-01-21 8192]
S3 MSTEE;Microsoft Streaming Tee/Sink-to-Sink Converter; C:\Windows\system32\drivers\MSTEE.sys [2008-01-21 6016]
S3 StMp3Rec;Player Recovery Device Control Driver; C:\Windows\System32\Drivers\StMp3Rec.sys [2007-02-15 19840]
S3 usbscan;USB Scanner Driver; C:\Windows\system32\DRIVERS\usbscan.sys [2008-01-21 35328]
S3 usbvideo;USB Video Device (WDM); C:\Windows\System32\Drivers\usbvideo.sys [2008-01-21 134016]
S4 ErrDev;Microsoft Hardware Error Device Driver; C:\Windows\system32\drivers\errdev.sys [2008-01-21 6656]
S4 GT72UBUS;GT 72 U BUS; C:\Windows\system32\drivers\gt72ubus.sys [2008-02-08 59648]
S4 MegaSR;MegaSR; C:\Windows\system32\drivers\megasr.sys [2008-01-21 386616]
S4 sptd;sptd; C:\Windows\System32\Drivers\sptd.sys [2008-08-27 717296]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 BthServ;@%SystemRoot%\System32\bthserv.dll,-101; C:\Windows\system32\svchost.exe [2008-01-21 21504]
R2 ekrn;ESET Service; C:\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe [2009-11-16 735960]
R2 IAANTMON;Intel(R) Matrix Storage Event Monitor; C:\Program Files\Intel\Intel Matrix Storage Manager\IAANTMon.exe [2007-07-24 354840]
R2 Nero BackItUp Scheduler 3;Nero BackItUp Scheduler 3; C:\Program Files\Nero\Nero8\Nero BackItUp\NBService.exe [2007-09-20 853288]
R2 Pml Driver HPZ12;Pml Driver HPZ12; C:\Windows\System32\svchost.exe [2008-01-21 21504]
R2 TestHandler;Fujitsu Siemens Computers Diagnostic Testhandler; C:\Program Files\Fujitsu Siemens Computers\SystemDiagnostics\OnlineDiagnostic\TestManager\TestHandler.exe [2008-02-29 307200]
S3 aawservice;Lavasoft Ad-Aware Service; C:\Program Files\Lavasoft\Ad-Aware\aawservice.exe [2008-07-07 611664]
S3 EhttpSrv;ESET HTTP Server; C:\Program Files\ESET\ESET NOD32 Antivirus\EHttpSrv.exe [2009-11-16 20680]
S3 NMIndexingService;NMIndexingService; C:\Program Files\Common Files\Nero\Lib\NMIndexingService.exe [2007-10-23 382248]
S3 odserv;Microsoft Office Diagnostics Service; C:\Program Files\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE [2008-11-04 441712]
S3 ose;Office Source Engine; C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2006-10-26 145184]

-----------------EOF-----------------

[Rudy]

Dejte log z ComboFix.

Stahnete a ulozte nejlepe na plochu ComboFix: http://download.bleepingcomputer.com/sUBs/ComboFix.exe

pote spustte aplikaci pod uctem s administratorskym opravnenim

hned po startu se zobrazi obrazovka s licencnimi podminkami, pokracujte kliknutim na tlacitko Ano.

v klidu si postavte na kafe (cela akce trva cca. 5-10 minut, nekdy i dele - dle toho, o jak rychly stroj se jedna a kolika soubory se skener bude muset prodirat), behem skenu se nepokousejte spoustet zadne jine aplikace ani nic jineho

behem skenovani nepropadejte panice, vas stroj muze byt restartovan (predevsim pri prvni aplikaci skeneru)

upozorneni: pokud pouzivate antispyware s rezidentnim stitem, prepnete jeho rezidentni stit do Install Mode, pripadne jej po dobu skenu uplne deaktivujte, protoze dochazi pri skenu a vymazu pripadneho malware k nezadoucim kolizim s rezidentem antispyware

[Blanka yahoo]

bohuzel mi cpu jede neustale na 100%, ze nemohu stahnout ani posledni verzi combofix a nechat ji bezet

[Blanka yahoo]

tady je log z combofix, cpu porad jede naplno, myslim, ze to bude hlubsi problem

ComboFix 10-10-20.01 - blanka 21.10.2010 7:19.3.2 - x86
Microsoft® Windows Vista™ Business 6.0.6001.1.1250.420.1033.18.2037.1079 [GMT 2:00]
Spuštěný z: c:\users\blanka\Downloads\ComboFix.exe
SP: Windows Defender *enabled* (Updated) {D68DDC3A-831F-4FAE-9E44-DA132C1ACF46}
* Rezidentní štít AV je zapnutý

.

((((((((((((((((((((((((((((((((((((((( Ostatní výmazy )))))))))))))))))))))))))))))))))))))))))))))))))
.

c:\windows\AUTOLNCH.REG

.
((((((((((((((((((((((((( Soubory vytvořené od 2010-09-21 do 2010-10-21 )))))))))))))))))))))))))))))))
.

2010-10-19 18:39 . 2010-10-19 18:39 -------- d-----w- c:\program files\Common Files\Skype
2010-10-19 18:39 . 2010-10-19 18:39 -------- d-----r- c:\program files\Skype
2010-10-19 18:07 . 2010-10-07 23:21 6146896 ----a-w- c:\programdata\Microsoft\Windows Defender\Definition Updates\{A8BCE79E-EDA3-4029-9E7C-B3B32595DD4B}\mpengine.dll
2010-10-18 17:02 . 2010-10-18 17:02 -------- d-----w- c:\program files\ESET
2010-10-17 10:05 . 1998-11-24 00:00 424960 ----a-w- c:\windows\system32\hpscntst.dll
2010-10-17 10:05 . 1998-11-24 00:00 280064 ----a-w- c:\windows\system32\hpscnmgr.dll
2010-10-17 10:05 . 1998-11-24 00:00 16896 ----a-w- c:\windows\system32\hpsj32.dll
2010-10-17 10:05 . 1998-11-02 23:01 669696 ----a-w- c:\windows\system32\ipeistor11.dll
2010-10-17 10:05 . 1998-11-02 23:01 66560 ----a-w- c:\windows\system32\ipeapi11.dll
2010-10-17 10:05 . 1998-11-02 23:01 324608 ----a-w- c:\windows\system32\ipebase11.dll
2010-10-17 10:05 . 1998-08-12 00:40 55808 ----a-w- c:\windows\system32\lffax70n.dll
2010-10-17 10:05 . 1998-08-12 00:40 224768 ----a-w- c:\windows\system32\LFCMP70n.DLL
2010-10-17 10:05 . 2010-10-17 10:06 -------- d-----w- c:\windows\system32\Iosubsys
2010-10-16 07:10 . 1997-01-22 19:26 565760 ----a-w- c:\windows\system32\MSVCP50.DLL
2010-10-16 07:10 . 2010-10-16 07:10 -------- d-----w- c:\program files\Hewlett-Packard
2010-10-16 07:08 . 2000-12-12 07:21 308227 ----a-w- c:\windows\IsUninst.exe
2010-10-16 07:07 . 2010-10-16 07:07 -------- d-----w- C:\sj662
2010-10-16 07:00 . 2010-10-16 07:00 -------- d-----w- c:\users\blanka\AppData\Roaming\IObit
2010-10-16 07:00 . 2010-10-16 07:00 -------- d-----w- c:\program files\IObit
2010-10-16 06:29 . 2010-10-16 06:29 -------- d-----w- c:\users\blanka\AppData\Roaming\Malwarebytes
2010-10-16 06:28 . 2010-10-16 06:28 -------- d-----w- c:\programdata\Malwarebytes
2010-10-15 16:50 . 2010-10-20 20:00 -------- d-----w- c:\program files\trend micro
2010-10-15 16:50 . 2010-10-15 16:52 -------- d-----w- C:\rsit
2010-10-15 10:46 . 2010-10-15 10:46 -------- d-----w- c:\programdata\PC Drivers HeadQuarters Inc
2010-10-15 10:38 . 2010-10-15 10:39 -------- d-----w- c:\users\blanka\AppData\Roaming\GetRightToGo
2010-10-14 21:00 . 2010-09-20 09:25 231936 ----a-w- c:\windows\system32\msshsq.dll
2010-10-14 16:42 . 2010-09-10 16:35 168960 ----a-w- c:\program files\Windows Media Player\wmplayer.exe
2010-10-14 16:42 . 2010-09-10 16:37 8147456 ----a-w- c:\windows\system32\wmploc.DLL
2010-10-14 16:41 . 2010-09-06 16:24 125952 ----a-w- c:\windows\system32\srvsvc.dll
2010-10-14 16:41 . 2010-09-06 14:13 303616 ----a-w- c:\windows\system32\drivers\srv.sys
2010-10-14 16:41 . 2010-09-06 14:12 145408 ----a-w- c:\windows\system32\drivers\srv2.sys
2010-10-14 16:41 . 2010-09-06 14:12 101888 ----a-w- c:\windows\system32\drivers\srvnet.sys
2010-10-14 16:41 . 2010-09-06 16:23 17920 ----a-w- c:\windows\system32\netevent.dll
2010-10-14 16:40 . 2010-08-10 15:02 274432 ----a-w- c:\windows\system32\schannel.dll
2010-10-14 16:40 . 2010-06-28 16:15 1315840 ----a-w- c:\windows\system32\ole32.dll
2010-10-14 16:40 . 2010-06-28 14:31 339968 ----a-w- c:\program files\Windows NT\Accessories\wordpad.exe
2010-10-14 16:39 . 2010-08-26 16:07 157184 ----a-w- c:\windows\system32\t2embed.dll
2010-10-14 16:28 . 2010-08-31 15:41 954752 ----a-w- c:\windows\system32\mfc40.dll
2010-10-14 16:28 . 2010-08-31 15:41 954288 ----a-w- c:\windows\system32\mfc40u.dll
2010-10-14 16:24 . 2010-08-31 13:39 2037248 ----a-w- c:\windows\system32\win32k.sys
2010-10-14 16:23 . 2010-08-20 15:21 866816 ----a-w- c:\windows\system32\wmpmde.dll
2010-10-14 16:16 . 2010-08-31 15:40 531968 ----a-w- c:\windows\system32\comctl32.dll
2010-10-06 18:00 . 2010-10-06 18:00 -------- d-----w- c:\program files\iTranslator
2010-10-06 15:30 . 2010-10-06 15:30 -------- d-----w- c:\program files\ABC Transdict
2010-09-29 07:58 . 2010-06-22 12:57 2048 ----a-w- c:\windows\system32\tzres.dll

.
(((((((((((((((((((((((((((((((((((((((( Find3M výpis ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
.

(((((((((((((((((((((((((((((((((( Spouštěcí body v registru )))))))))))))))))))))))))))))))))))))))))))))
.
.
*Poznámka* prázdné záznamy a legitimní výchozí údaje nejsou zobrazeny.
REGEDIT4

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"SynTPEnh"="c:\program files\Synaptics\SynTP\SynTPEnh.exe" [2007-05-10 869936]
"HP Lamp"="c:\program files\Hewlett-Packard\HP PrecisionScan\PrecisionScan\HPLamp.exe" [1998-11-24 42496]
"egui"="c:\program files\ESET\ESET NOD32 Antivirus\egui.exe" [2009-11-16 2054360]

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"EnableUIADesktopToggle"= 0 (0x0)

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\drivers32]
"aux"=wdmaud.drv

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\aawservice]
@="Service"

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WinDefend]
@="Service"

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run-disabled]
"snp2uvc"=c:\windows\vsnp2uvc.exe
"tsnp2uvc"=c:\windows\tsnp2uvc.exe
"ccApp"="c:\program files\Common Files\Symantec Shared\ccApp.exe"
"vptray"=c:\progra~1\SYMANT~1\VPTray.exe
"SunJavaUpdateSched"="c:\program files\Java\jre6\bin\jusched.exe"
"Adobe Reader Speed Launcher"="c:\program files\Adobe\Reader 9.0\Reader\Reader_sl.exe"
"NeroFilterCheck"=c:\program files\Common Files\Nero\Lib\NeroCheck.exe
"NBKeyScan"="c:\program files\Nero\Nero8\Nero BackItUp\NBKeyScan.exe"
"MMReminderService"=c:\program files\Mindjet\MindManager 7\MMReminderService.exe
"TkBellExe"="c:\program files\VistaCodecPack\rm\Update_OB\realsched.exe" -osboot
"Persistence"=c:\windows\system32\igfxpers.exe
"RtHDVCpl"=RtHDVCpl.exe
"WebCamHotKey"=c:\program files\FSC\WebCam HotKey Utility\WebCam_HotKey.exe
"IgfxTray"=c:\windows\system32\igfxtray.exe
"IAAnotif"=c:\program files\Intel\Intel Matrix Storage Manager\iaanotif.exe
"Windows Defender"=%ProgramFiles%\Windows Defender\MSASCui.exe -hide
"Windows Firewall"=c:\windows\System32\drivers\svchost.exe
"HotKeysCmds"=c:\windows\system32\hkcmd.exe
"TouchPadHotKey"=c:\program files\FSC\TouchPad HotKey Utility\TouchPad_HotKey.exe

[HKEY_LOCAL_MACHINE\software\microsoft\security center\Svc\S-1-5-21-4045019852-2640643452-2817325111-1000]
"EnableNotificationsRef"=dword:00000001

R3 b57nd60x;Broadcom NetXtreme Gigabit Ethernet - NDIS 6.0;c:\windows\system32\DRIVERS\b57nd60x.sys [2008-01-21 179712]
R4 GT72UBUS;GT 72 U BUS;c:\windows\system32\drivers\gt72ubus.sys [2008-02-08 59648]
R4 sptd;sptd;c:\windows\system32\Drivers\sptd.sys [2008-08-27 717296]
S1 ehdrv;ehdrv;c:\windows\system32\DRIVERS\ehdrv.sys [2009-11-16 108792]
S2 ekrn;ESET Service;c:\program files\ESET\ESET NOD32 Antivirus\ekrn.exe [2009-11-16 735960]
S2 epfwwfpr;epfwwfpr;c:\windows\system32\DRIVERS\epfwwfpr.sys [2009-12-18 95896]
S3 acpi_contactor;acpi_contactor Driver;c:\windows\system32\DRIVERS\acpi_contactor_vista.sys [2007-04-13 7680]


[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost]
LocalServiceNoNetwork REG_MULTI_SZ PLA DPS BFE mpssvc
bthsvcs REG_MULTI_SZ BthServ
HPZ12 REG_MULTI_SZ Pml Driver HPZ12 Net Driver HPZ12
.
Obsah adresáře 'Naplánované úlohy'

2010-10-21 c:\windows\Tasks\AWC AutoSweep.job
- c:\program files\IObit\Advanced SystemCare 3\AutoSweep.exe [2010-10-16 12:11]

2010-10-21 c:\windows\Tasks\AWC Startup.job
- c:\program files\IObit\Advanced SystemCare 3\AWC.exe [2010-10-16 19:39]

2010-10-20 c:\windows\Tasks\AWC Update.job
- c:\program files\IObit\Advanced SystemCare 3\IObitUpdate.exe [2010-10-16 13:24]

2010-10-20 c:\windows\Tasks\ParetoLogic Registration.job
- c:\program files\Common Files\ParetoLogic\UUS2\UUS.dll [2009-01-13 14:59]

2010-09-05 c:\windows\Tasks\ParetoLogic Update Version2.job
- c:\program files\Common Files\ParetoLogic\UUS2\Pareto_Update.exe [2009-01-13 14:59]

2010-10-21 c:\windows\Tasks\User_Feed_Synchronization-{1708526F-260E-4DDB-9D89-EA4216EDB390}.job
- c:\windows\system32\msfeedssync.exe [2008-09-15 10:05]
.
.
------- Doplňkový sken -------
.
uStart Page = hxxp://www.bbc.uk/
IE: E&xport to Microsoft Excel - c:\progra~1\MICROS~1\Office12\EXCEL.EXE/3000
FF - ProfilePath - c:\users\blanka\AppData\Roaming\Mozilla\Firefox\Profiles\zpu6ika9.default\
FF - prefs.js: browser.search.selectedEngine - The Pirate Bay
FF - prefs.js: browser.startup.homepage - hxxp://www.bbc.com/
FF - prefs.js: keyword.URL -
FF - prefs.js: network.proxy.type - 4
FF - plugin: c:\program files\Mozilla Firefox\plugins\np-mswmp.dll
FF - plugin: c:\program files\Mozilla Firefox\plugins\npfiller.dll
FF - plugin: c:\program files\VistaCodecPack\rm\browser\plugins\nppl3260.dll
FF - plugin: c:\program files\VistaCodecPack\rm\browser\plugins\nprpjplug.dll
FF - HiddenExtension: Microsoft .NET Framework Assistant: {20a82645-c095-46ed-80e3-08825760534b} - c:\windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\

---- NASTAVENÍ FIREFOXU ----
c:\program files\Mozilla Firefox\greprefs\all.js - pref("network.IDN.whitelist.xn--mgbaam7a8h", true);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("network.IDN.whitelist.xn--mgberp4a5d4ar", true);
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("dom.ipc.plugins.enabled", false);
.
.
Celkový čas: 2010-10-21 07:43:50
ComboFix-quarantined-files.txt 2010-10-21 05:43
ComboFix2.txt 2010-10-16 21:57
ComboFix3.txt 2010-10-15 19:37

Před spuštěním: 53 859 164 160 bytes free
Po spuštění: 53 877 534 720 bytes free

- - End Of File - - A4C4DE66C0B98C33295BA9F49C70C297

[Rudy]

1 položka byla smazána, zbytek logu vypadá čistý. Zkuste přeinstalovat NOD.

[Rudy]

Omloum se za přehlédnutí. Přesuňte ComboFix na plochu. Otevřte poznámkový blok a zkopírujte do něj:

Registry::
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run-disabled]
"Windows Firewall"=-

Uložte na plochu jako CFScript.txt. Pak jej myší přetáhněte nad ikonu ComboFix a pusťte. CF se spustí a vykoná příkaz ze skriptu.

[Blanka yahoo]

ComboFix 10-10-22.05 - blanka 23.10.2010 12:07:55.4.2 - x86
Microsoft® Windows Vista™ Business 6.0.6001.1.1250.420.1033.18.2037.1053 [GMT 2:00]
Spuštěný z: c:\users\blanka\Downloads\ComboFix.exe
Použité ovládací přepínače :: c:\users\blanka\Desktop\CFScript.txt
SP: Windows Defender *enabled* (Updated) {D68DDC3A-831F-4FAE-9E44-DA132C1ACF46}
* Rezidentní štít AV je zapnutý

.

((((((((((((((((((((((((( Soubory vytvořené od 2010-09-23 do 2010-10-23 )))))))))))))))))))))))))))))))
.

2010-10-23 10:16 . 2010-10-23 10:16 -------- d-----w- c:\users\blanka\AppData\Local\temp
2010-10-23 10:16 . 2010-10-23 10:16 -------- d-----w- c:\users\Guest\AppData\Local\temp
2010-10-23 10:16 . 2010-10-23 10:16 -------- d-----w- c:\users\Default\AppData\Local\temp
2010-10-22 06:11 . 2010-10-07 23:21 6146896 ----a-w- c:\programdata\Microsoft\Windows Defender\Definition Updates\{315B9992-9A13-4BA3-97E9-D4B48C4A61D9}\mpengine.dll
2010-10-19 18:39 . 2010-10-19 18:39 -------- d-----w- c:\program files\Common Files\Skype
2010-10-19 18:39 . 2010-10-19 18:39 -------- d-----r- c:\program files\Skype
2010-10-18 17:02 . 2010-10-18 17:02 -------- d-----w- c:\program files\ESET
2010-10-17 10:05 . 1998-11-24 00:00 424960 ----a-w- c:\windows\system32\hpscntst.dll
2010-10-17 10:05 . 1998-11-24 00:00 280064 ----a-w- c:\windows\system32\hpscnmgr.dll
2010-10-17 10:05 . 1998-11-24 00:00 16896 ----a-w- c:\windows\system32\hpsj32.dll
2010-10-17 10:05 . 1998-11-02 23:01 669696 ----a-w- c:\windows\system32\ipeistor11.dll
2010-10-17 10:05 . 1998-11-02 23:01 66560 ----a-w- c:\windows\system32\ipeapi11.dll
2010-10-17 10:05 . 1998-11-02 23:01 324608 ----a-w- c:\windows\system32\ipebase11.dll
2010-10-17 10:05 . 1998-08-12 00:40 55808 ----a-w- c:\windows\system32\lffax70n.dll
2010-10-17 10:05 . 1998-08-12 00:40 224768 ----a-w- c:\windows\system32\LFCMP70n.DLL
2010-10-17 10:05 . 2010-10-17 10:06 -------- d-----w- c:\windows\system32\Iosubsys
2010-10-16 07:10 . 1997-01-22 19:26 565760 ----a-w- c:\windows\system32\MSVCP50.DLL
2010-10-16 07:10 . 2010-10-16 07:10 -------- d-----w- c:\program files\Hewlett-Packard
2010-10-16 07:08 . 2000-12-12 07:21 308227 ----a-w- c:\windows\IsUninst.exe
2010-10-16 07:07 . 2010-10-16 07:07 -------- d-----w- C:\sj662
2010-10-16 07:00 . 2010-10-16 07:00 -------- d-----w- c:\users\blanka\AppData\Roaming\IObit
2010-10-16 07:00 . 2010-10-16 07:00 -------- d-----w- c:\program files\IObit
2010-10-16 06:29 . 2010-10-16 06:29 -------- d-----w- c:\users\blanka\AppData\Roaming\Malwarebytes
2010-10-16 06:28 . 2010-10-16 06:28 -------- d-----w- c:\programdata\Malwarebytes
2010-10-15 16:50 . 2010-10-20 20:00 -------- d-----w- c:\program files\trend micro
2010-10-15 16:50 . 2010-10-15 16:52 -------- d-----w- C:\rsit
2010-10-15 10:46 . 2010-10-15 10:46 -------- d-----w- c:\programdata\PC Drivers HeadQuarters Inc
2010-10-15 10:38 . 2010-10-15 10:39 -------- d-----w- c:\users\blanka\AppData\Roaming\GetRightToGo
2010-10-14 21:00 . 2010-09-20 09:25 231936 ----a-w- c:\windows\system32\msshsq.dll
2010-10-14 16:42 . 2010-09-10 16:35 168960 ----a-w- c:\program files\Windows Media Player\wmplayer.exe
2010-10-14 16:42 . 2010-09-10 16:37 8147456 ----a-w- c:\windows\system32\wmploc.DLL
2010-10-14 16:41 . 2010-09-06 16:24 125952 ----a-w- c:\windows\system32\srvsvc.dll
2010-10-14 16:41 . 2010-09-06 14:13 303616 ----a-w- c:\windows\system32\drivers\srv.sys
2010-10-14 16:41 . 2010-09-06 14:12 145408 ----a-w- c:\windows\system32\drivers\srv2.sys
2010-10-14 16:41 . 2010-09-06 14:12 101888 ----a-w- c:\windows\system32\drivers\srvnet.sys
2010-10-14 16:41 . 2010-09-06 16:23 17920 ----a-w- c:\windows\system32\netevent.dll
2010-10-14 16:40 . 2010-08-10 15:02 274432 ----a-w- c:\windows\system32\schannel.dll
2010-10-14 16:40 . 2010-06-28 16:15 1315840 ----a-w- c:\windows\system32\ole32.dll
2010-10-14 16:40 . 2010-06-28 14:31 339968 ----a-w- c:\program files\Windows NT\Accessories\wordpad.exe
2010-10-14 16:39 . 2010-08-26 16:07 157184 ----a-w- c:\windows\system32\t2embed.dll
2010-10-14 16:28 . 2010-08-31 15:41 954752 ----a-w- c:\windows\system32\mfc40.dll
2010-10-14 16:28 . 2010-08-31 15:41 954288 ----a-w- c:\windows\system32\mfc40u.dll
2010-10-14 16:24 . 2010-08-31 13:39 2037248 ----a-w- c:\windows\system32\win32k.sys
2010-10-14 16:23 . 2010-08-20 15:21 866816 ----a-w- c:\windows\system32\wmpmde.dll
2010-10-14 16:16 . 2010-08-31 15:40 531968 ----a-w- c:\windows\system32\comctl32.dll
2010-10-06 18:00 . 2010-10-06 18:00 -------- d-----w- c:\program files\iTranslator
2010-10-06 15:30 . 2010-10-06 15:30 -------- d-----w- c:\program files\ABC Transdict
2010-09-29 07:58 . 2010-06-22 12:57 2048 ----a-w- c:\windows\system32\tzres.dll

.
(((((((((((((((((((((((((((((((((((((((( Find3M výpis ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2010-10-19 09:41 . 2009-10-03 09:46 222080 ------w- c:\windows\system32\MpSigStub.exe
2010-08-17 13:32 . 2010-09-15 05:48 126464 ----a-w- c:\windows\system32\spoolsv.exe
2005-02-05 08:38 . 2010-01-31 10:38 1024000 ----a-w- c:\program files\Milan's GUI 4.exe
2004-06-30 12:20 . 2010-01-31 10:38 160768 ----a-w- c:\program files\fmod.dll
.

(((((((((((((((((((((((((((((((((( Spouštěcí body v registru )))))))))))))))))))))))))))))))))))))))))))))
.
.
*Poznámka* prázdné záznamy a legitimní výchozí údaje nejsou zobrazeny.
REGEDIT4

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"SynTPEnh"="c:\program files\Synaptics\SynTP\SynTPEnh.exe" [2007-05-10 869936]
"HP Lamp"="c:\program files\Hewlett-Packard\HP PrecisionScan\PrecisionScan\HPLamp.exe" [1998-11-24 42496]
"egui"="c:\program files\ESET\ESET NOD32 Antivirus\egui.exe" [2009-11-16 2054360]

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"EnableUIADesktopToggle"= 0 (0x0)

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\drivers32]
"aux"=wdmaud.drv

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\aawservice]
@="Service"

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WinDefend]
@="Service"

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run-disabled]
"snp2uvc"=c:\windows\vsnp2uvc.exe
"tsnp2uvc"=c:\windows\tsnp2uvc.exe
"ccApp"="c:\program files\Common Files\Symantec Shared\ccApp.exe"
"vptray"=c:\progra~1\SYMANT~1\VPTray.exe
"SunJavaUpdateSched"="c:\program files\Java\jre6\bin\jusched.exe"
"Adobe Reader Speed Launcher"="c:\program files\Adobe\Reader 9.0\Reader\Reader_sl.exe"
"NeroFilterCheck"=c:\program files\Common Files\Nero\Lib\NeroCheck.exe
"NBKeyScan"="c:\program files\Nero\Nero8\Nero BackItUp\NBKeyScan.exe"
"MMReminderService"=c:\program files\Mindjet\MindManager 7\MMReminderService.exe
"TkBellExe"="c:\program files\VistaCodecPack\rm\Update_OB\realsched.exe" -osboot
"Persistence"=c:\windows\system32\igfxpers.exe
"RtHDVCpl"=RtHDVCpl.exe
"WebCamHotKey"=c:\program files\FSC\WebCam HotKey Utility\WebCam_HotKey.exe
"IgfxTray"=c:\windows\system32\igfxtray.exe
"IAAnotif"=c:\program files\Intel\Intel Matrix Storage Manager\iaanotif.exe
"Windows Defender"=%ProgramFiles%\Windows Defender\MSASCui.exe -hide
"HotKeysCmds"=c:\windows\system32\hkcmd.exe
"TouchPadHotKey"=c:\program files\FSC\TouchPad HotKey Utility\TouchPad_HotKey.exe

[HKEY_LOCAL_MACHINE\software\microsoft\security center\Svc\S-1-5-21-4045019852-2640643452-2817325111-1000]
"EnableNotificationsRef"=dword:00000001

R3 b57nd60x;Broadcom NetXtreme Gigabit Ethernet - NDIS 6.0;c:\windows\system32\DRIVERS\b57nd60x.sys [2008-01-21 179712]
R4 GT72UBUS;GT 72 U BUS;c:\windows\system32\drivers\gt72ubus.sys [2008-02-08 59648]
R4 sptd;sptd;c:\windows\system32\Drivers\sptd.sys [2008-08-27 717296]
S1 ehdrv;ehdrv;c:\windows\system32\DRIVERS\ehdrv.sys [2009-11-16 108792]
S2 ekrn;ESET Service;c:\program files\ESET\ESET NOD32 Antivirus\ekrn.exe [2009-11-16 735960]
S2 epfwwfpr;epfwwfpr;c:\windows\system32\DRIVERS\epfwwfpr.sys [2009-12-18 95896]
S3 acpi_contactor;acpi_contactor Driver;c:\windows\system32\DRIVERS\acpi_contactor_vista.sys [2007-04-13 7680]


[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost]
LocalServiceNoNetwork REG_MULTI_SZ PLA DPS BFE mpssvc
bthsvcs REG_MULTI_SZ BthServ
HPZ12 REG_MULTI_SZ Pml Driver HPZ12 Net Driver HPZ12
.
Obsah adresáře 'Naplánované úlohy'

2010-10-23 c:\windows\Tasks\AWC AutoSweep.job
- c:\program files\IObit\Advanced SystemCare 3\AutoSweep.exe [2010-10-16 12:11]

2010-10-23 c:\windows\Tasks\AWC Startup.job
- c:\program files\IObit\Advanced SystemCare 3\AWC.exe [2010-10-16 19:39]

2010-10-20 c:\windows\Tasks\ParetoLogic Registration.job
- c:\program files\Common Files\ParetoLogic\UUS2\UUS.dll [2009-01-13 14:59]

2010-09-05 c:\windows\Tasks\ParetoLogic Update Version2.job
- c:\program files\Common Files\ParetoLogic\UUS2\Pareto_Update.exe [2009-01-13 14:59]

2010-10-23 c:\windows\Tasks\User_Feed_Synchronization-{1708526F-260E-4DDB-9D89-EA4216EDB390}.job
- c:\windows\system32\msfeedssync.exe [2008-09-15 10:05]
.
.
------- Doplňkový sken -------
.
uStart Page = hxxp://www.bbc.uk/
IE: E&xport to Microsoft Excel - c:\progra~1\MICROS~1\Office12\EXCEL.EXE/3000
FF - ProfilePath - c:\users\blanka\AppData\Roaming\Mozilla\Firefox\Profiles\zpu6ika9.default\
FF - prefs.js: browser.search.selectedEngine - The Pirate Bay
FF - prefs.js: browser.startup.homepage - hxxp://www.bbc.com/
FF - prefs.js: keyword.URL -
FF - prefs.js: network.proxy.type - 4
FF - plugin: c:\program files\Mozilla Firefox\plugins\np-mswmp.dll
FF - plugin: c:\program files\Mozilla Firefox\plugins\npfiller.dll
FF - plugin: c:\program files\VistaCodecPack\rm\browser\plugins\nppl3260.dll
FF - plugin: c:\program files\VistaCodecPack\rm\browser\plugins\nprpjplug.dll
FF - HiddenExtension: Microsoft .NET Framework Assistant: {20a82645-c095-46ed-80e3-08825760534b} - c:\windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\

---- NASTAVENÍ FIREFOXU ----
c:\program files\Mozilla Firefox\greprefs\all.js - pref("network.IDN.whitelist.xn--mgbaam7a8h", true);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("network.IDN.whitelist.xn--mgberp4a5d4ar", true);
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("dom.ipc.plugins.enabled", false);
.

**************************************************************************

catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2010-10-23 12:16
Windows 6.0.6001 Service Pack 1 NTFS

skenování skrytých procesů ...

skenování skrytých položek 'Po spuštění' ...

skenování skrytých souborů ...

sken byl úspešně dokončen
skryté soubory: 0

**************************************************************************
.
Celkový čas: 2010-10-23 12:19:08
ComboFix-quarantined-files.txt 2010-10-23 10:19
ComboFix2.txt 2010-10-21 05:43
ComboFix3.txt 2010-10-16 21:57
ComboFix4.txt 2010-10-15 19:37

Před spuštěním: 53 252 845 568 bytes free
Po spuštění: 53 224 652 800 bytes free

- - End Of File - - 435BFA43F7D626A5F909510172D65E56

[Rudy]

Log již vypadá čistý. Změnilo se něco?

[Blanka yahoo]

mam pusteny skype, forefox a nic vic, a cpu jede v prumeru na 60%, predpoklam, ze normalni je mnohem mene

[Rudy]

1. Smažte cache firefoxu.
2. Ve správci úloh se podívejte, který proces nejvíc zatěžuje PC.