Podozrenie na "havěť", kleslo fps !!

[srogi]

Pripadám si dosť trápne, ale mne vyhodí toto ...


http://prntscr.com/41xxv

[Rudy]

Zkontrolujte, zda máte skript uložen opravdu jako CFScript.txt .

[srogi]

Bolo to v tom názve ... som myslel že "script" a ono to bolo len "cript"




ComboFix 11-11-15.01 - Doma . 11. 2011 20:19:08.3.1 - x86
Microsoft Windows 7 Home Premium 6.1.7600.0.1250.421.1051.18.3583.2549 [GMT 1:00]
Running from: c:\users\Doma\Desktop\ComboFix.exe
Command switches used :: c:\users\Doma\Desktop\CFScript.txt
AV: avast! Antivirus *Disabled/Updated* {2B2D1395-420B-D5C9-657E-930FE358FC3C}
AV: Kaspersky Internet Security *Disabled/Updated* {2EAA32A5-1EE1-1B22-95DA-337730C6E984}
FW: Kaspersky Internet Security *Disabled* {1691B380-548E-1A7A-BE85-9A42CE15AEFF}
SP: avast! Antivirus *Disabled/Updated* {904CF271-6431-DA47-5FCE-A87D98DFB681}
SP: Kaspersky Internet Security *Disabled/Updated* {95CBD341-38DB-14AC-AF6A-08054B41A339}
SP: Windows Defender *Enabled/Outdated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.
file zipped: c:\programdata\3A65BB9108.sys
.
.
((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
c:\program files\ConduitEngine
c:\program files\ConduitEngine\appContextMenu.xml
c:\program files\ConduitEngine\ConduitEngine.dll
c:\program files\ConduitEngine\ConduitEngineHelper.exe
c:\program files\ConduitEngine\ConduitEngineUninstall.exe
c:\program files\ConduitEngine\engineContextMenu.xml
c:\program files\ConduitEngine\EngineSettings.json
c:\program files\ConduitEngine\ldrConduitEngine.dll
c:\program files\ConduitEngine\prxConduitEngine.dll
c:\program files\ConduitEngine\toolbar.cfg
c:\program files\SFT_eng7
c:\program files\SFT_eng7\GottenAppsContextMenu.xml
c:\program files\SFT_eng7\ldrtbSFT_.dll
c:\program files\SFT_eng7\OtherAppsContextMenu.xml
c:\program files\SFT_eng7\prxtbSFT_.dll
c:\program files\SFT_eng7\prxtbSFT0.dll
c:\program files\SFT_eng7\SFT_eng7ToolbarHelper.exe
c:\program files\SFT_eng7\SharedAppsContextMenu.xml
c:\program files\SFT_eng7\tbSFT_.dll
c:\program files\SFT_eng7\toolbar.cfg
c:\program files\SFT_eng7\ToolbarContextMenu.xml
c:\program files\SFT_eng7\uninstall.exe
c:\program files\SweetIM
c:\program files\SweetIM\Messenger\ContentPackagesActivationHandler.exe
c:\program files\SweetIM\Messenger\default.xml
c:\program files\SweetIM\Messenger\mgAdaptersProxy.dll
c:\program files\SweetIM\Messenger\mgArchive.dll
c:\program files\SweetIM\Messenger\mgcommon.dll
c:\program files\SweetIM\Messenger\mgcommunication.dll
c:\program files\SweetIM\Messenger\mgconfig.dll
c:\program files\SweetIM\Messenger\mgFlashPlayer.dll
c:\program files\SweetIM\Messenger\mghooking.dll
c:\program files\SweetIM\Messenger\mgICQAuto.dll
c:\program files\SweetIM\Messenger\mgICQMessengerAdapter.dll
c:\program files\SweetIM\Messenger\mglogger.dll
c:\program files\SweetIM\Messenger\mgMediaPlayer.dll
c:\program files\SweetIM\Messenger\mgMsnAuto.dll
c:\program files\SweetIM\Messenger\mgMsnMessengerAdapter.dll
c:\program files\SweetIM\Messenger\mgsimcommon.dll
c:\program files\SweetIM\Messenger\mgSweetIM.dll
c:\program files\SweetIM\Messenger\mgUpdateSupport.dll
c:\program files\SweetIM\Messenger\mgxml_wrapper.dll
c:\program files\SweetIM\Messenger\mgYahooAuto.dll
c:\program files\SweetIM\Messenger\mgYahooMessengerAdapter.dll
c:\program files\SweetIM\Messenger\msvcp71.dll
c:\program files\SweetIM\Messenger\msvcr71.dll
c:\program files\SweetIM\Messenger\resources\images\AudibleButton.png
c:\program files\SweetIM\Messenger\resources\images\DisplayPicturesButton.png
c:\program files\SweetIM\Messenger\resources\images\EmoticonButton.png
c:\program files\SweetIM\Messenger\resources\images\GamesButton.png
c:\program files\SweetIM\Messenger\resources\images\KeyboardButton.png
c:\program files\SweetIM\Messenger\resources\images\NudgeButton.png
c:\program files\SweetIM\Messenger\resources\images\SoundFxButton.png
c:\program files\SweetIM\Messenger\resources\images\WinksButton.png
c:\program files\SweetIM\Messenger\resources\sqlite\mgSqlite3.dll
c:\program files\SweetIM\Messenger\SweetIM.exe
c:\users\Doma\AppData\Local\Skillbrains\lightshot\LightShot.exe Flags: uninsdeletevalue
.
.
((((((((((((((((((((((((( Files Created from 2011-10-15 to 2011-11-15 )))))))))))))))))))))))))))))))
.
.
2011-11-15 19:39 . 2011-11-15 19:39 -------- d-----w- c:\users\Default\AppData\Local\temp
2011-11-15 16:36 . 2011-09-06 21:36 20568 ----a-w- c:\windows\system32\drivers\aswFsBlk.sys
2011-11-15 16:36 . 2011-09-06 21:37 320856 ----a-w- c:\windows\system32\drivers\aswSP.sys
2011-11-15 16:36 . 2011-09-06 21:36 34392 ----a-w- c:\windows\system32\drivers\aswRdr.sys
2011-11-15 16:36 . 2011-09-06 21:36 52568 ----a-w- c:\windows\system32\drivers\aswTdi.sys
2011-11-15 16:36 . 2011-09-06 21:38 442200 ----a-w- c:\windows\system32\drivers\aswSnx.sys
2011-11-15 16:36 . 2011-09-06 21:36 54616 ----a-w- c:\windows\system32\drivers\aswMonFlt.sys
2011-11-15 16:35 . 2011-09-06 21:45 41184 ----a-w- c:\windows\avastSS.scr
2011-11-15 16:35 . 2011-09-06 21:45 199304 ----a-w- c:\windows\system32\aswBoot.exe
2011-11-15 16:35 . 2011-11-15 16:35 -------- d-----w- c:\programdata\AVAST Software
2011-11-15 16:35 . 2011-11-15 16:35 -------- d-----w- c:\program files\AVAST Software
2011-11-14 19:51 . 2011-11-15 19:44 -------- d-----w- c:\users\Doma\AppData\Local\temp
2011-11-14 17:25 . 2011-11-14 17:25 -------- d-----w- c:\program files\trend micro
2011-11-14 17:25 . 2011-11-14 17:25 -------- d-----w- C:\rsit
2011-11-13 16:50 . 2011-11-13 20:44 97961 ----a-w- c:\windows\system32\drivers\klick.dat
2011-11-13 16:50 . 2011-11-13 20:44 115369 ----a-w- c:\windows\system32\drivers\klin.dat
2011-11-13 16:47 . 2011-11-13 16:47 -------- d-----w- c:\program files\Kaspersky Lab
2011-11-13 16:47 . 2011-11-15 19:44 -------- d-----w- c:\programdata\Kaspersky Lab
2011-11-12 14:00 . 2009-11-25 19:47 49472 ----a-w- c:\windows\system32\netfxperf.dll
2011-11-12 14:00 . 2009-11-25 19:47 99176 ----a-w- c:\windows\system32\PresentationHostProxy.dll
2011-11-12 14:00 . 2009-11-25 19:47 295264 ----a-w- c:\windows\system32\PresentationHost.exe
2011-11-12 14:00 . 2009-11-25 19:47 297808 ----a-w- c:\windows\system32\mscoree.dll
2011-11-12 14:00 . 2009-11-25 19:47 1130824 ----a-w- c:\windows\system32\dfshim.dll
2011-11-12 12:33 . 2011-11-12 12:33 -------- d-----w- c:\program files\select_path_to_counter-strike
2011-10-31 19:08 . 2011-10-31 19:08 -------- d-----w- c:\users\Doma\AppData\Local\Color-Brush
2011-10-31 16:08 . 2011-10-31 16:08 -------- d-----w- c:\users\Doma\AppData\Roaming\Gold Casual Games
2011-10-31 16:08 . 2011-10-31 16:08 -------- d-----w- c:\programdata\Gold Casual Games
2011-10-31 16:03 . 2011-10-31 16:03 -------- d-----w- c:\users\Doma\AppData\Roaming\SpinTop
2011-10-31 15:48 . 2011-11-09 18:14 -------- d-----w- C:\BigFishGamesCache
2011-10-30 09:53 . 2011-10-30 09:53 -------- d-----w- c:\users\Public\Roaming
2011-10-30 09:45 . 2011-10-30 09:45 -------- d-----w- c:\programdata\regid.1986-12.com.adobe
2011-10-30 09:39 . 2011-10-30 09:39 -------- d-----w- c:\program files\Adobe Media Player
2011-10-29 18:13 . 2011-11-08 15:19 -------- d-----w- c:\users\Doma\AppData\Local\LogMeIn Hamachi
2011-10-29 18:10 . 2011-10-29 18:10 -------- d-----w- c:\program files\LogMeIn Hamachi
2011-10-29 16:33 . 2011-10-29 16:35 88 --sha-r- c:\programdata\3A65BB9108.sys
2011-10-29 16:33 . 2011-10-29 16:53 5018 --sha-w- c:\programdata\KGyGaAvL.sys
2011-10-29 16:24 . 2011-10-29 16:24 -------- d-----w- c:\program files\Corel
2011-10-29 15:08 . 2011-10-29 15:08 -------- d-----w- c:\users\Doma\AppData\Local\NOS
2011-10-27 06:48 . 2011-10-27 06:48 -------- d-----w- c:\program files\Common Files\Java
2011-10-25 17:09 . 2011-10-25 17:10 -------- d-----w- c:\program files\FileZilla FTP Client
2011-10-23 17:14 . 2011-10-23 17:14 -------- d-----w- c:\users\Doma\AppData\Roaming\Kastner software
2011-10-23 16:57 . 2011-10-23 16:57 -------- d-----w- c:\programdata\KASTNER software
2011-10-23 16:57 . 2011-10-23 16:57 -------- d-----w- c:\program files\KASTNER software
2011-10-17 19:11 . 2011-09-29 00:26 2106216 ----a-w- c:\program files\Mozilla Firefox\D3DCompiler_43.dll
2011-10-17 19:11 . 2011-09-29 00:26 1998168 ----a-w- c:\program files\Mozilla Firefox\d3dx9_43.dll
.
.
.
(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2011-11-01 19:14 . 2011-08-19 18:59 414368 ----a-w- c:\windows\system32\FlashPlayerCPLApp.cpl
2011-10-03 03:06 . 2011-08-19 11:03 472808 ----a-w- c:\windows\system32\deployJava1.dll
2011-10-02 15:00 . 2011-08-20 18:24 445016 ----a-w- c:\windows\system32\wrap_oal.dll
2011-10-02 15:00 . 2011-08-20 18:24 109144 ----a-w- c:\windows\system32\OpenAL32.dll
2011-10-01 14:30 . 2011-10-01 14:35 737280 ----a-w- c:\windows\iun6002.exe
2011-09-14 09:47 . 2011-09-14 09:47 53760 ----a-w- c:\windows\system32\OVDecode.dll
2011-09-14 09:47 . 2011-09-14 09:47 43520 ----a-w- c:\windows\system32\OpenCL.dll
2011-09-14 09:46 . 2011-09-14 09:46 13625856 ----a-w- c:\windows\system32\amdocl.dll
2011-09-14 09:38 . 2011-09-14 09:38 37376 ----a-w- c:\windows\system32\amdoclcl.dll
2011-09-12 13:39 . 2011-03-28 16:36 18328 ----a-w- c:\programdata\Microsoft\IdentityCRL\production\ppcrlconfig600.dll
2011-09-08 18:26 . 2011-09-08 18:26 8606208 ----a-w- c:\windows\system32\drivers\atikmdag.sys
2011-09-08 17:39 . 2011-09-08 17:39 18534912 ----a-w- c:\windows\system32\atioglxx.dll
2011-09-08 17:34 . 2011-09-08 17:34 151552 ----a-w- c:\windows\system32\atiapfxx.exe
2011-09-08 17:34 . 2011-03-10 02:54 732672 ----a-w- c:\windows\system32\aticfx32.dll
2011-09-08 17:30 . 2011-09-08 17:30 466944 ----a-w- c:\windows\system32\ATIDEMGX.dll
2011-09-08 17:30 . 2011-09-08 17:30 401408 ----a-w- c:\windows\system32\atieclxx.exe
2011-09-08 17:29 . 2011-09-08 17:29 176128 ----a-w- c:\windows\system32\atiesrxx.exe
2011-09-08 17:28 . 2011-09-08 17:28 159744 ----a-w- c:\windows\system32\atitmmxx.dll
2011-09-08 17:28 . 2011-09-08 17:28 356352 ----a-w- c:\windows\system32\atipdlxx.dll
2011-09-08 17:28 . 2011-09-08 17:28 278528 ----a-w- c:\windows\system32\Oemdspif.dll
2011-09-08 17:28 . 2011-09-08 17:28 20992 ----a-w- c:\windows\system32\atimuixx.dll
2011-09-08 17:28 . 2011-09-08 17:28 43520 ----a-w- c:\windows\system32\ati2edxx.dll
2011-09-08 17:24 . 2011-03-10 02:46 4204032 ----a-w- c:\windows\system32\atidxx32.dll
2011-09-08 17:18 . 2011-09-08 17:18 1828864 ----a-w- c:\windows\system32\atiumdmv.dll
2011-09-08 17:09 . 2011-09-08 17:09 46080 ----a-w- c:\windows\system32\aticalrt.dll
2011-09-08 17:09 . 2011-09-08 17:09 44032 ----a-w- c:\windows\system32\aticalcl.dll
2011-09-08 17:08 . 2011-03-10 02:21 4064768 ----a-w- c:\windows\system32\atiumdva.dll
2011-09-08 17:05 . 2011-09-08 17:05 7331840 ----a-w- c:\windows\system32\aticaldd.dll
2011-09-08 17:05 . 2011-03-10 02:28 4289024 ----a-w- c:\windows\system32\atiumdag.dll
2011-09-08 16:59 . 2011-08-18 20:29 52736 ----a-w- c:\windows\system32\coinst.dll
2011-09-08 16:53 . 2011-09-08 16:53 270336 ----a-w- c:\windows\system32\atiadlxx.dll
2011-09-08 16:52 . 2011-09-08 16:52 13312 ----a-w- c:\windows\system32\atiglpxx.dll
2011-09-08 16:52 . 2011-09-08 16:52 32768 ----a-w- c:\windows\system32\atigktxx.dll
2011-09-08 16:52 . 2011-09-08 16:52 248832 ----a-w- c:\windows\system32\drivers\atikmpag.sys
2011-09-08 16:51 . 2011-03-10 02:14 31744 ----a-w- c:\windows\system32\atiuxpag.dll
2011-09-08 16:51 . 2011-03-10 02:14 29184 ----a-w- c:\windows\system32\atiu9pag.dll
2011-09-08 16:51 . 2011-09-08 16:51 53248 ----a-w- c:\windows\system32\drivers\ati2erec.dll
2011-09-08 16:50 . 2011-09-08 16:50 53760 ----a-w- c:\windows\system32\atimpc32.dll
2011-09-08 16:50 . 2011-09-08 16:50 53760 ----a-w- c:\windows\system32\amdpcom32.dll
2011-08-30 15:43 . 2011-08-30 15:43 1700352 ----a-w- c:\windows\system32\gdiplus.dll
2011-08-30 13:55 . 2011-08-30 13:55 183112 ----a-w- c:\windows\system32\PnkBstrB.exe
2011-08-30 13:50 . 2011-08-30 13:50 1174 ----a-w- c:\windows\system32\ealregsnapshot1.reg
2011-08-21 18:23 . 2011-08-21 18:23 4608 ----a-w- c:\windows\system32\bbchlp.dll
2011-08-21 18:23 . 2011-08-21 18:23 4096 ----a-w- c:\windows\system32\drivers\bbcap.sys
2011-08-21 18:23 . 2011-08-21 18:23 30720 ----a-w- c:\windows\system32\bbcap.dll
2011-08-20 10:19 . 2011-08-19 10:51 0 ----a-w- c:\windows\system32\ConduitEngine.tmp
2011-08-18 20:58 . 2011-08-18 20:58 142592 ----a-w- c:\windows\system32\drivers\sp_rsdrv2.sys
2011-09-29 07:32 . 2011-08-18 20:47 134104 ----a-w- c:\program files\mozilla firefox\components\browsercomps.dll
.
.
((((((((((((((((((((((((((((( SnapShot@2011-11-14_19.55.14 )))))))))))))))))))))))))))))))))))))))))
.
+ 2011-08-17 20:34 . 2011-11-15 18:54 41218 c:\windows\System32\wdi\ShutdownPerformanceDiagnostics_SystemData.bin
+ 2009-07-14 04:55 . 2011-11-15 19:44 39136 c:\windows\System32\wdi\BootPerformanceDiagnostics_SystemData.bin
+ 2011-08-17 23:47 . 2011-11-15 19:46 32768 c:\windows\System32\config\systemprofile\AppData\Roaming\Microsoft\Windows\Cookies\index.dat
- 2011-08-17 23:47 . 2011-11-14 15:08 32768 c:\windows\System32\config\systemprofile\AppData\Roaming\Microsoft\Windows\Cookies\index.dat
+ 2009-07-14 04:41 . 2011-11-15 19:46 32768 c:\windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\History\History.IE5\index.dat
- 2009-07-14 04:41 . 2011-11-14 15:08 32768 c:\windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\History\History.IE5\index.dat
+ 2011-08-22 14:04 . 2011-11-15 19:08 16384 c:\windows\ServiceProfiles\LocalService\AppData\Roaming\Microsoft\Windows\Cookies\index.dat
- 2011-08-22 14:04 . 2011-11-14 20:02 16384 c:\windows\ServiceProfiles\LocalService\AppData\Roaming\Microsoft\Windows\Cookies\index.dat
- 2011-08-22 14:04 . 2011-11-14 20:02 16384 c:\windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Windows\History\History.IE5\index.dat
+ 2011-08-22 14:04 . 2011-11-15 19:08 16384 c:\windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Windows\History\History.IE5\index.dat
- 2011-08-20 11:25 . 2011-11-14 18:05 7438 c:\windows\System32\wdi\ERCQueuedResolutions.dat
+ 2011-08-20 11:25 . 2011-11-15 18:12 7438 c:\windows\System32\wdi\ERCQueuedResolutions.dat
+ 2011-08-17 20:28 . 2011-11-15 19:44 9130 c:\windows\System32\wdi\{86432a0b-3c7d-4ddf-a89c-172faa90485d}\S-1-5-21-2482014332-175635240-3155644157-1000_UserData.bin
- 2011-11-14 14:57 . 2011-11-14 19:52 2048 c:\windows\ServiceProfiles\LocalService\AppData\Local\lastalive1.dat
+ 2011-11-15 18:51 . 2011-11-15 19:41 2048 c:\windows\ServiceProfiles\LocalService\AppData\Local\lastalive1.dat
+ 2011-11-15 18:51 . 2011-11-15 19:41 2048 c:\windows\ServiceProfiles\LocalService\AppData\Local\lastalive0.dat
- 2011-11-14 14:57 . 2011-11-14 19:52 2048 c:\windows\ServiceProfiles\LocalService\AppData\Local\lastalive0.dat
+ 2009-07-14 02:05 . 2011-11-15 18:20 615810 c:\windows\System32\perfh009.dat
- 2009-07-14 02:05 . 2011-11-14 18:15 615810 c:\windows\System32\perfh009.dat
- 2009-07-14 02:05 . 2011-11-14 18:15 106190 c:\windows\System32\perfc009.dat
+ 2009-07-14 02:05 . 2011-11-15 18:20 106190 c:\windows\System32\perfc009.dat
+ 2011-08-17 23:47 . 2011-11-15 19:46 114688 c:\windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat
- 2011-08-17 23:47 . 2011-11-14 15:08 114688 c:\windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat
+ 2009-07-14 04:47 . 2011-11-15 18:50 383532 c:\windows\ServiceProfiles\LocalService\AppData\Local\FontCache-System.dat
- 2009-07-14 04:47 . 2011-11-14 14:56 383532 c:\windows\ServiceProfiles\LocalService\AppData\Local\FontCache-System.dat
- 2011-08-18 21:00 . 2011-11-14 14:56 2059352 c:\windows\ServiceProfiles\LocalService\AppData\Local\FontCache3.0.0.0.dat
+ 2011-08-18 21:00 . 2011-11-15 18:50 2059352 c:\windows\ServiceProfiles\LocalService\AppData\Local\FontCache3.0.0.0.dat
+ 2011-08-18 21:00 . 2011-11-15 18:50 22405572 c:\windows\ServiceProfiles\LocalService\AppData\Local\FontCache-S-1-5-21-2482014332-175635240-3155644157-1000-8192.dat
.
((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* empty entries & legit default entries are not shown
REGEDIT4
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\00avast]
@="{472083B0-C522-11CF-8763-00608CC02F24}"
[HKEY_CLASSES_ROOT\CLSID\{472083B0-C522-11CF-8763-00608CC02F24}]
2011-09-06 21:45 122512 ----a-w- c:\program files\AVAST Software\Avast\ashShell.dll
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"SpywareTerminatorUpdate"="c:\program files\Spyware Terminator\SpywareTerminatorUpdate.exe" [2011-08-18 3318784]
"Steam"="c:\program files\Steam\steam.exe" [2011-08-19 1242448]
"LightShot"="c:\users\Doma\AppData\Local\Skillbrains\lightshot\LightShot.exe" [2011-03-16 195072]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"IgfxTray"="c:\windows\system32\igfxtray.exe" [2010-05-20 141848]
"HotKeysCmds"="c:\windows\system32\hkcmd.exe" [2010-05-20 174104]
"Persistence"="c:\windows\system32\igfxpers.exe" [2010-05-20 151064]
"RtHDVCpl"="c:\program files\Realtek\Audio\HDA\RtHDVCpl.exe" [2010-11-19 9874024]
"SpywareTerminator"="c:\program files\Spyware Terminator\SpywareTerminatorShield.exe" [2011-08-18 2216960]
"Adobe ARM"="c:\program files\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2011-06-06 937920]
"QuickTime Task"="c:\program files\QuickTime\QTTask.exe" [2008-09-06 413696]
"StartCCC"="c:\program files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" [2011-09-08 343168]
"SunJavaUpdateSched"="c:\program files\Common Files\Java\Java Update\jusched.exe" [2011-06-09 254696]
"Standby"="c:\program files\Common Files\Corel\Standby\Standby.exe" [2009-12-17 105632]
"SwitchBoard"="c:\program files\Common Files\Adobe\SwitchBoard\SwitchBoard.exe" [2010-02-19 517096]
"AVP"="c:\program files\Kaspersky Lab\Kaspersky Internet Security 2012\avp.exe" [2011-04-24 202296]
"avast"="c:\program files\AVAST Software\Avast\avastUI.exe" [2011-09-06 3722416]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorAdmin"= 5 (0x5)
"ConsentPromptBehaviorUser"= 3 (0x3)
"EnableUIADesktopToggle"= 0 (0x0)
.
[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\lsa]
Security Packages REG_MULTI_SZ kerberos msv1_0 schannel wdigest tspkg pku2u livessp
.
[HKLM\~\startupfolder\C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^McAfee Security Scan Plus.lnk]
path=c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\McAfee Security Scan Plus.lnk
backup=c:\windows\pss\McAfee Security Scan Plus.lnk.CommonStartup
backupExtension=.CommonStartup
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\AdobeAAMUpdater-1.0]
2010-03-06 02:44 500208 ------w- c:\program files\Common Files\Adobe\OOBE\PDApp\UWA\updaterstartuputility.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\AdobeCS5ServiceManager]
2010-02-22 03:57 406992 ----a-w- c:\program files\Common Files\Adobe\CS5ServiceManager\CS5ServiceManager.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}]
2007-06-27 17:03 152872 ----a-w- c:\program files\Common Files\Ahead\Lib\NMBgMonitor.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\LogMeIn Hamachi Ui]
2011-08-15 14:18 1955208 ----a-w- c:\program files\LogMeIn Hamachi\hamachi-2-ui.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Nero DriveSpeed]
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NeroFilterCheck]
2007-03-01 13:57 153136 ----a-w- c:\program files\Common Files\Ahead\Lib\NeroCheck.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\PWRISOVM.EXE]
2011-06-15 06:19 307200 ----a-w- c:\program files\PowerISO\PWRISOVM.EXE
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Skype]
2011-07-29 10:31 17361032 ----a-r- c:\program files\Skype\Phone\Skype.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\uTorrent]
2011-08-19 11:40 639864 ----a-w- c:\program files\uTorrent\uTorrent.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\KasperskyAntiVirus]
"DisableMonitoring"=dword:00000001
.
R2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;c:\windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
R2 gupdate;Služba Google Update (gupdate);c:\program files\Google\Update\GoogleUpdate.exe [2011-08-19 136176]
R3 BBSvc;Bing Bar Update Service;c:\program files\Microsoft\BingBar\BBSvc.EXE [2011-04-01 183560]
R3 CFcatchme;CFcatchme;c:\users\Doma\AppData\Local\Temp\CFcatchme.sys [x]
R3 gupdatem;Služba Google Update (gupdatem);c:\program files\Google\Update\GoogleUpdate.exe [2011-08-19 136176]
R3 McComponentHostService;McAfee Security Scan Component Host Service;c:\program files\McAfee Security Scan\2.0.181\McCHSvc.exe [2010-01-15 227232]
R3 netr28u;RT2870 USB Wireless LAN Card Driver for Vista;c:\windows\system32\DRIVERS\netr28u.sys [2009-07-13 657408]
R3 SwitchBoard;SwitchBoard;c:\program files\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [2010-02-19 517096]
R4 wlcrasvc;Windows Live Mesh remote connections service;c:\program files\Windows Live\Mesh\wlcrasvc.exe [2010-09-22 51040]
S1 aswSnx;aswSnx; [x]
S1 aswSP;aswSP; [x]
S1 kl2;kl2;c:\windows\system32\DRIVERS\kl2.sys [2011-03-04 11352]
S1 KLIM6;Kaspersky Anti-Virus NDIS 6 Filter;c:\windows\system32\DRIVERS\klim6.sys [2011-03-10 23856]
S1 sp_rsdrv2;Spyware Terminator Driver 2;c:\windows\system32\drivers\sp_rsdrv2.sys [2011-08-18 142592]
S1 vwififlt;Virtual WiFi Filter Driver;c:\windows\system32\DRIVERS\vwififlt.sys [2009-07-13 48128]
S2 AdobeARMservice;Adobe Acrobat Update Service;c:\program files\Common Files\Adobe\ARM\1.0\armsvc.exe [2011-06-06 64952]
S2 AMD External Events Utility;AMD External Events Utility;c:\windows\system32\atiesrxx.exe [2011-09-08 176128]
S2 aswFsBlk;aswFsBlk; [x]
S2 aswMonFlt;aswMonFlt;c:\windows\system32\drivers\aswMonFlt.sys [2011-09-06 54616]
S2 Hamachi2Svc;LogMeIn Hamachi Tunneling Engine;c:\program files\LogMeIn Hamachi\hamachi-2.exe [2011-08-15 1361288]
S3 amdkmdag;amdkmdag;c:\windows\system32\DRIVERS\atikmdag.sys [2011-09-08 8606208]
S3 amdkmdap;amdkmdap;c:\windows\system32\DRIVERS\atikmpag.sys [2011-09-08 248832]
S3 AtiHDAudioService;AMD Function Driver for HD Audio Service;c:\windows\system32\drivers\AtihdW73.sys [2011-06-06 211984]
S3 bbcap;bbcap;c:\windows\system32\DRIVERS\bbcap.sys [2011-08-21 4096]
S3 klmouflt;Kaspersky Lab KLMOUFLT;c:\windows\system32\DRIVERS\klmouflt.sys [2009-11-02 19984]
S3 L1C;NDIS Miniport Driver for Atheros AR8131/AR8132 PCI-E Ethernet Controller (NDIS 6.20);c:\windows\system32\DRIVERS\L1C62x86.sys [2009-07-13 50688]
.
.
Contents of the 'Scheduled Tasks' folder
.
2011-11-15 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
- c:\program files\Google\Update\GoogleUpdate.exe [2011-08-19 19:45]
.
2011-11-15 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
- c:\program files\Google\Update\GoogleUpdate.exe [2011-08-19 19:45]
.
2011-11-15 c:\windows\Tasks\update-S-1-5-21-2482014332-175635240-3155644157-1000.job
- c:\program files\Skillbrains\Updater\Updater.exe [2011-10-09 20:09]
.
2011-11-15 c:\windows\Tasks\update-sys.job
- c:\program files\Skillbrains\Updater\Updater.exe [2011-10-09 20:09]
.
.
------- Supplementary Scan -------
.
uStart Page = hxxp://home.sweetim.com
uDefault_Search_URL = hxxp://www.google.com/ie
mStart Page = hxxp://home.sweetim.com
uSearchAssistant = hxxp://www.google.com/ie
uSearchURL,(Default) = hxxp://www.google.com/search?q=%s
IE: Add to Google Photos Screensa&ver - c:\windows\system32\GPhotos.scr/200
IE: Crawler Search - tbr:iemenu
IE: E&xportovať do programu Microsoft Excel - c:\progra~1\MICROS~2\Office12\EXCEL.EXE/3000
IE: Přidat do Anti-Banner - c:\program files\Kaspersky Lab\Kaspersky Internet Security 2012\ie_banner_deny.htm
Handler: tbr - {4D25FB7A-8902-4291-960E-9ADA051CFBBF} - c:\progra~1\Crawler\ctbr.dll
FF - ProfilePath - c:\users\Doma\AppData\Roaming\Mozilla\Firefox\Profiles\p52o0iwd.default\
FF - prefs.js: browser.search.defaulturl -
FF - prefs.js: browser.search.selectedEngine - Google
FF - prefs.js: browser.startup.homepage - hxxp://www.google.sk
.
- - - - ORPHANS REMOVED - - - -
.
AddRemove-conduitEngine - c:\program files\ConduitEngine\ConduitEngineUninstall.exe
AddRemove-SFT_eng7 Toolbar - c:\program files\SFT_eng7\uninstall.exe
.
.
.
--------------------- LOCKED REGISTRY KEYS ---------------------
.
[HKEY_USERS\S-1-5-21-2482014332-175635240-3155644157-1000\Software\SecuROM\License information*]
"datasecu"=hex:7c,9f,40,39,39,e5,28,89,9b,e7,12,2f,0e,0d,06,44,11,0c,dd,ae,2a,
44,1c,48,33,31,61,33,7f,23,33,35,2e,dc,2f,6f,cb,fc,23,4c,d1,b0,5a,3d,ac,94,\
"rkeysecu"=hex:8c,b4,f8,e8,10,1c,1f,92,f4,0f,ab,00,b6,e0,31,c0
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\PCW\Security]
@Denied: (Full) (Everyone)
.
------------------------ Other Running Processes ------------------------
.
c:\windows\system32\atieclxx.exe
c:\program files\AVAST Software\Avast\AvastSvc.exe
c:\windows\system32\taskhost.exe
d:\sims2\PB\PnkBstrA.exe
c:\program files\Common Files\Protexis\License Service\PsiService_2.exe
c:\program files\Microsoft\BingBar\SeaPort.EXE
c:\program files\Spyware Terminator\sp_rsser.exe
c:\program files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
c:\program files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe
c:\windows\system32\conhost.exe
c:\program files\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
c:\users\Doma\AppData\Local\Skillbrains\lightshot\1.4.0.10\LightShot.exe
c:\program files\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
.
**************************************************************************
.
Completion time: 2011-11-15 21:01:05 - machine was rebooted
ComboFix-quarantined-files.txt 2011-11-15 20:01
ComboFix2.txt 2011-11-14 20:12
.
Pre-Run: 10 244 341 760 bytes free
Post-Run: 9 985 794 048 bytes free
.
- - End Of File - - F071CBFDB46DEACA05A09B6775C1C572
Upload was successful

[Rudy]

OK, smazáno. Nastala nějaká změna?

[srogi]

Myslím, že nie ... Ďakujem ..

OK, smazáno. Nastala nějaká změna?

[Rudy]

PC je po virové stránce čistý. Co jste instaloval těsně před tím, než se problém objevil?

[srogi]

Tie víry myslím, že boli v hre World of Warcraft a pred tým som inštaloval dosť veľa vecí... Lebo som mal preinštalovaný Windows z xp na 7.. Prídem domov a pozriem ..

[Rudy]

OK.

[srogi]

Steam, Hamachi, TeamSpeak 3, Adobe Photoshop cs5, corel videostudio cs3.. a ešte nejaké iné možno

načo to je dobré??

OK.

[Rudy]

Steam je nějaká utilitka k hrám (nevím přesně, nejsem pařan). Hamachi je P2P klinet (mimochodem semeniště virů), TeamSpeak 3 je klient-server aplikace určená ke komikaci přes internet, Adobe Photoshop cs5 je program na úpravu fotografií a corel videostudio cs3 je program k tvorbě vektorové grafiky.

[srogi]

To všetko viem, ale načo to potrebujete vypísať?

Steam je nějaká utilitka k hrám (nevím přesně, nejsem pařan). Hamachi je P2P klinet (mimochodem semeniště virů), TeamSpeak 3 je klient-server aplikace určená ke komikaci přes internet, Adobe Photoshop cs5 je program na úpravu fotografií a corel videostudio cs3 je program k tvorbě vektorové grafiky.

[Rudy]

Myslím, že nie ... Ďakujem ..

OK, smazáno. Nastala nějaká změna?

Potřebuji vědět, co problém způsobuje. Budte muset jednotlivé položky na zkoušku odinstalovat a vyzkoušet, zda se změní něco na rychlosti chodu systému. Příp. provést obnovu systému k datu, kdy se problém objevil.

[srogi]

Ja som tak nad tým rozmýšľal a rozhodol som sa, že pravdepodobne preinštalujem OS... Nebudem sa s tým babrať aj tak mám iné problémy s pc, tak to celkom padne vhod .

Myslím, že nie ... Ďakujem ..

OK, smazáno. Nastala nějaká změna?

Potřebuji vědět, co problém způsobuje. Budte muset jednotlivé položky na zkoušku odinstalovat a vyzkoušet, zda se změní něco na rychlosti chodu systému. Příp. provést obnovu systému k datu, kdy se problém objevil.

[Rudy]

OK. Jak je libo, i to je řešení.

[srogi]

Ale ako som začal tak som aj skončil ... Pán čo mi inštaloval OS z XP na W7, tak mi v krabiciach neposlal cd s w7, takže nič nepreinštalujem .. Spravil som si taký malý manuálny reštart, pomazal som všetko čo som v pc mal.. Uvidíme, ináč ten proces smss.exe mám v pc stále ! Ako to ?