vytižení CPU

[jamet]

teď jsem ve škole, až přijdu vyzkouším a dám vědět

[vyosek]

OK, zacinam mit podezreni i na Eseta, zkuste jej na zkousku odinstalovat (odinstalator je zde http://www.james008.net/download/index.php?dlid=62 )

[jamet]

v nouzáku je to mnohem lepší, dalo by se říct srovnatelně s dobou kdy bylo vše OK,
zkusím teď dát pryč NODa a napíšu

tak ten uninstalátor mi vyhazuje chybu: Nelze přečíst klíč konfiguračního registru (spouštěl sem to i jako správce)

[jamet]

takže uniinstal nejde ani když nastavým kompatibilitu na xP, program se spustí, ale začnou vyskakovat chyby, nakonec se odinstalace spustí, ale cca v 90% se objeví chyba

[vyosek]

Zkuste tedy tento navod http://viry.cz/forum/viewtopic.php?f=29&t=103558
Ja kontaktuju kolegy co utilitu vyviji...

[jamet]

odinstaloval jsem ESET pomocí uninstaleru a v nouzáku, hlásilo to úspěšné dokončení, tak by to snad mělo být OK, stav NTB se o něco zlepšil, ale... každopádně ti již po několikáté musím poděkovat za tvůj čas a snahu pomoci mi

[vyosek]

Zkuste tedy ted ESS nainstalovat, treba si jen postavil hlavu - pak v Nastroje - Planovac- odkliknout Kontrola souboru zavadenych po startu a uvidime...Pokud by i nadale delal problemy, tak bych doporucil kontaktovat tech. podporu ESETu, mate ji v cene za jejich produkt..

Nemate zac, nerad se vzdavam a kdyz to jde, tak vymyslim co jen mozne jest

[jamet]

A jde vám to velmi dobře ovšem kdyby vás ještě napadlo něco co by mi mohlo pomoci byl bych velmi rád

[vyosek]

Copak, PC stale zlobi i po odinstalaci ESS a novem nahozeni a vypnuti v tom planovaci

[jamet]

ano pro jistotu jsem ESET jestě neinstaloval a zkoušel restart NTB a skoro stejný výsledek jako předtím je to o něco lepší ale nejspiš tam jestě něco vadí..

[vyosek]

Dejte novy log z RSITu jestli tam neco nezustalo...

[jamet]

ahoj tady je


Logfile of random's system information tool 1.08 (written by random/random)
Run by hallkiller at 2010-09-09 20:55:59
Microsoft Windows 7 Ultimate
System drive C: has 78 GB (53%) free of 146 GB
Total RAM: 3067 MB (71% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 20:56:06, on 9.9.2010
Platform: Windows 7 (WinNT 6.00.3504)
MSIE: Internet Explorer v8.00 (8.00.7600.16385)
Boot mode: Normal

Running processes:
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Windows\PLFSetI.exe
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\Program Files\Adobe\Reader 9.0\Reader\reader_sl.exe
C:\Windows\System32\spool\drivers\w32x86\3\WrtMon.exe
C:\Program Files\Ashampoo\Ashampoo Magical Defrag 2\bin\defragTaskBar.exe
C:\Program Files\Windows Sidebar\sidebar.exe
C:\Windows\System32\spool\drivers\w32x86\3\WrtProc.exe
D:\programy\RocketDock\RocketDock.exe
C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
C:\Program Files\Ashampoo\Ashampoo Magical Defrag 2\bin\defragMonitorService.exe
C:\Program Files\Ashampoo\Ashampoo Magical Defrag 2\bin\defragActivityMonitor.exe
C:\Windows\system32\wuauclt.exe
C:\Users\hallkiller\Desktop\RSIT.exe
C:\Program Files\trend micro\hallkiller.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = www.google.cz
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page =
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - D:\programy\OFFICE~1\Office12\GR469A~1.DLL
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O4 - HKLM\..\Run: [PLFSetI] C:\Windows\PLFSetI.exe
O4 - HKLM\..\Run: [SynTPEnh] %ProgramFiles%\Synaptics\SynTP\SynTPEnh.exe
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [WrtMon.exe] C:\Windows\system32\spool\drivers\w32x86\3\WrtMon.exe
O4 - HKLM\..\Run: [DefragTaskBar] "C:\Program Files\Ashampoo\Ashampoo Magical Defrag 2\bin\defragTaskBar.exe"
O4 - HKLM\..\Run: [Startup Protector] C:\Program Files\Startup Protector\StartupProtector.exe
O4 - HKCU\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun
O4 - HKCU\..\Run: [RocketDock] "D:\programy\RocketDock\RocketDock.exe"
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Excel - res://D:\programy\OFFICE~1\Office12\EXCEL.EXE/3000
O8 - Extra context menu item: Free YouTube to Mp3 Converter - C:\Users\hallkiller\AppData\Roaming\DVDVideoSoftIEHelpers\youtubetomp3.htm
O8 - Extra context menu item: Google Sidewiki... - res://C:\Program Files\Google\Google Toolbar\Component\GoogleToolbarDynamic_mui_en_60D6097707281E79.dll/cmsidewiki.html
O9 - Extra button: Odeslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - D:\programy\OFFICE~1\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: Od&eslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - D:\programy\OFFICE~1\Office12\ONBttnIE.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - D:\programy\OFFICE~1\Office12\REFIEBAR.DLL
O16 - DPF: {67DABFBF-D0AB-41FA-9C46-CC0F21721616} (DivXBrowserPlugin Object) - http://download.divx.com/player/DivXBrowserPlugin.cab
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/s ... wflash.cab
O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - D:\programy\OFFICE~1\Office12\GRA32A~1.DLL
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
O23 - Service: Ashampoo Defrag Service (AshampooDefragService) - - C:\Program Files\Ashampoo\Ashampoo Magical Defrag 2\bin\aDefragService.exe
O23 - Service: Bonjour Service - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: Dragon Age: Prameny - aktualizace obsahu (DAUpdaterSvc) - BioWare - D:\hry\Dragon Age\bin_ship\DAUpdaterSvc.Service.exe
O23 - Service: Empowering Technology Service (ETService) - Unknown owner - C:\Program Files\Acer\Empowering Technology\Service\ETService.exe
O23 - Service: iPod Service - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: NVIDIA Display Driver Service (nvsvc) - NVIDIA Corporation - C:\Windows\system32\nvvsvc.exe
O23 - Service: PnkBstrA - Unknown owner - C:\Windows\system32\PnkBstrA.exe
O23 - Service: PnkBstrB - Unknown owner - C:\Windows\system32\PnkBstrB.exe
O23 - Service: Sandboxie Service (SbieSvc) - tzuk - C:\Program Files\Sandboxie\SbieSvc.exe
O23 - Service: StarWind AE Service (StarWindServiceAE) - Unknown owner - C:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindServiceAE.exe (file missing)

--
End of file - 5530 bytes

======Scheduled tasks folder======

C:\Windows\tasks\AWC AutoSweep.job
C:\Windows\tasks\AWC Startup.job

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
Adobe PDF Link Helper - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2010-06-19 75200]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{72853161-30C5-4D22-B7F9-0BBC1D38A37E}]
Groove GFS Browser Helper - D:\programy\OFFICE~1\Office12\GR469A~1.DLL [2006-10-27 2210608]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre6\bin\jp2ssv.dll [2010-08-04 41760]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"PLFSetI"=C:\Windows\PLFSetI.exe [2007-10-23 200704]
"SynTPEnh"=C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2009-06-18 1537320]
"Adobe Reader Speed Launcher"=C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe [2010-06-20 35760]
"WrtMon.exe"=C:\Windows\system32\spool\drivers\w32x86\3\WrtMon.exe [2006-09-20 20480]
"DefragTaskBar"=C:\Program Files\Ashampoo\Ashampoo Magical Defrag 2\bin\defragTaskBar.exe [2008-10-09 173408]
"Startup Protector"=C:\Program Files\Startup Protector\StartupProtector.exe [2007-07-22 1921024]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"Sidebar"=C:\Program Files\Windows Sidebar\sidebar.exe [2009-07-14 1173504]
"RocketDock"=D:\programy\RocketDock\RocketDock.exe [2007-09-02 495616]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ePower_DMC]
C:\Program Files\Acer\Empowering Technology\ePower\ePower_DMC.exe [2008-09-23 413696]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\GrooveMonitor]
D:\programy\office 2007\Office12\GrooveMonitor.exe [2006-10-27 31016]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\MultiScreen]
C:\Program Files\MultiScreen\MultiScreen.exe [2009-08-11 303104]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NvCplDaemon]
C:\Windows\system32\NvCpl.dll [2009-08-19 13793824]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\OpwareSE4]
C:\Program Files\ScanSoft\OmniPageSE4\OpwareSE4.exe [2007-06-13 73728]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - C:\Windows\system32\webcheck.dll [2009-07-14 229376]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{B5A7F190-DDA6-4420-B3BA-52453494E6CD}"=D:\programy\OFFICE~1\Office12\GR469A~1.DLL [2006-10-27 2210608]
"{AEB6717E-7E19-11d0-97EE-00C04FD91972}"= []

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=credssp.dll

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorAdmin"=5
"ConsentPromptBehaviorUser"=3
"EnableUIADesktopToggle"=0
"PromptOnSecureDesktop"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDrives"=0

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoResolveSearch"=1
"NoDrives"=0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"C:\Program Files\FlashGet Network\FlashGet universal\FlashGet.exe"="C:\Program Files\FlashGet Network\FlashGet universal\FlashGet.exe:*:Enabled:Flashget2"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1

======List of files/folders created in the last 1 months======

2010-09-09 20:34:19 ----D---- C:\rsit
2010-09-08 19:31:47 ----A---- C:\Windows\ntbtlog.txt
2010-09-08 14:59:39 ----A---- C:\Windows\rafazon.bat
2010-09-08 14:57:11 ----A---- C:\james.bat
2010-09-08 14:55:18 ----AD---- C:\rafazon
2010-09-06 21:45:42 ----D---- C:\Windows\temp
2010-09-06 21:45:41 ----A---- C:\ComboFix.txt
2010-09-06 21:44:03 ----SHD---- C:\$RECYCLE.BIN
2010-09-06 21:11:19 ----A---- C:\Windows\PEV.exe
2010-09-06 21:11:19 ----A---- C:\Windows\NIRCMD.exe
2010-09-06 21:11:19 ----A---- C:\Windows\MBR.exe
2010-09-06 21:11:18 ----A---- C:\Windows\zip.exe
2010-09-06 21:11:18 ----A---- C:\Windows\SWSC.exe
2010-09-06 21:11:18 ----A---- C:\Windows\SWREG.exe
2010-09-06 21:11:18 ----A---- C:\Windows\sed.exe
2010-09-06 21:11:18 ----A---- C:\Windows\grep.exe
2010-09-06 21:11:09 ----D---- C:\Windows\ERDNT
2010-09-06 21:10:45 ----D---- C:\Qoobox
2010-09-06 21:10:25 ----A---- C:\Windows\SWXCACLS.exe
2010-09-06 20:33:05 ----D---- C:\Avenger
2010-09-06 20:33:03 ----A---- C:\avenger.txt
2010-09-05 21:15:05 ----A---- C:\uxlyiuod.sys
2010-09-03 12:59:17 ----D---- C:\Users\hallkiller\AppData\Roaming\Malwarebytes
2010-09-03 12:59:08 ----D---- C:\ProgramData\Malwarebytes
2010-09-03 12:59:07 ----D---- C:\Program Files\Malwarebytes' Anti-Malware
2010-09-01 21:01:36 ----D---- C:\Program Files\VS Revo Group
2010-09-01 20:59:48 ----D---- C:\Users\hallkiller\AppData\Roaming\DVDVideoSoftIEHelpers
2010-09-01 20:45:12 ----D---- C:\Program Files\Common Files\DVDVideoSoft
2010-09-01 20:45:11 ----D---- C:\Program Files\DVDVideoSoft
2010-08-31 20:21:32 ----D---- C:\Program Files\trend micro
2010-08-29 13:02:15 ----A---- C:\Windows\system32\javaws.exe
2010-08-29 13:02:15 ----A---- C:\Windows\system32\javaw.exe
2010-08-29 13:02:15 ----A---- C:\Windows\system32\java.exe
2010-08-28 22:47:46 ----D---- C:\Windows\pss
2010-08-28 22:36:17 ----D---- C:\Program Files\Garena
2010-08-12 19:22:32 ----D---- C:\Program Files\StepMania
2010-08-12 07:39:21 ----D---- C:\ProgramData\Blizzard Entertainment
2010-08-12 07:39:21 ----D---- C:\Program Files\Common Files\Blizzard Entertainment
2010-08-11 20:09:36 ----D---- C:\Program Files\Valve
2010-08-10 11:46:34 ----D---- C:\Users\hallkiller\AppData\Roaming\WindSolutions
2010-08-10 11:46:34 ----D---- C:\ProgramData\WindSolutions

======List of files/folders modified in the last 1 months======

2010-09-09 20:09:29 ----D---- C:\Windows\system32\config
2010-09-08 22:01:35 ----D---- C:\Program Files\Fotolab
2010-09-08 22:00:34 ----RD---- C:\Program Files
2010-09-08 21:52:15 ----D---- C:\Windows\system32\NDF
2010-09-08 21:45:03 ----D---- C:\Windows
2010-09-08 21:45:01 ----SHD---- C:\Windows\Installer
2010-09-08 21:45:01 ----D---- C:\ProgramData
2010-09-08 21:45:00 ----D---- C:\Windows\system32\drivers
2010-09-08 21:45:00 ----D---- C:\Windows\inf
2010-09-08 21:24:12 ----D---- C:\Windows\system32\DriverStore
2010-09-08 21:24:12 ----D---- C:\Windows\system32\catroot
2010-09-08 21:24:07 ----D---- C:\Windows\system32\catroot2
2010-09-08 21:22:14 ----SHD---- C:\System Volume Information
2010-09-08 19:53:49 ----D---- C:\Windows\system32\FxsTmp
2010-09-08 15:04:21 ----D---- C:\Windows\System32
2010-09-07 21:05:20 ----D---- C:\Windows\Prefetch
2010-09-06 21:33:08 ----A---- C:\Windows\system.ini
2010-09-06 21:23:22 ----D---- C:\Windows\AppPatch
2010-09-06 21:23:20 ----D---- C:\Program Files\Common Files
2010-09-04 09:06:09 ----D---- C:\Windows\AppCompat
2010-09-02 20:00:45 ----D---- C:\Windows\system32\drivers\etc
2010-09-01 18:01:46 ----D---- C:\Windows\debug
2010-09-01 17:31:18 ----D---- C:\Windows\Tasks
2010-09-01 17:17:02 ----D---- C:\ProgramData\Lavasoft
2010-09-01 17:17:00 ----DC---- C:\Windows\system32\DRVSTORE
2010-09-01 09:59:47 ----D---- C:\Program Files\Common Files\Wise Installation Wizard
2010-09-01 06:25:33 ----A---- C:\Windows\system32\PerfStringBackup.INI
2010-09-01 06:12:12 ----D---- C:\Windows\winsxs
2010-09-01 06:12:12 ----D---- C:\Windows\system32\wfp
2010-09-01 06:12:12 ----D---- C:\Program Files\Internet Explorer
2010-09-01 06:12:07 ----D---- C:\Windows\system32\wbem
2010-09-01 06:10:47 ----D---- C:\Windows\system32\zh-TW
2010-09-01 06:10:47 ----D---- C:\Windows\system32\zh-CN
2010-09-01 06:10:47 ----D---- C:\Windows\system32\uk-UA
2010-09-01 06:10:47 ----D---- C:\Windows\system32\tr-TR
2010-09-01 06:10:47 ----D---- C:\Windows\system32\th-TH
2010-09-01 06:10:47 ----D---- C:\Windows\system32\sv-SE
2010-09-01 06:10:47 ----D---- C:\Windows\system32\sr-Latn-CS
2010-09-01 06:10:47 ----D---- C:\Windows\system32\sl-SI
2010-09-01 06:10:47 ----D---- C:\Windows\system32\sk-SK
2010-09-01 06:10:47 ----D---- C:\Windows\system32\ru-RU
2010-09-01 06:10:47 ----D---- C:\Windows\system32\ro-RO
2010-09-01 06:10:47 ----D---- C:\Windows\system32\pt-PT
2010-09-01 06:10:47 ----D---- C:\Windows\system32\pt-BR
2010-09-01 06:10:47 ----D---- C:\Windows\system32\pl-PL
2010-09-01 06:10:47 ----D---- C:\Windows\system32\nl-NL
2010-09-01 06:10:47 ----D---- C:\Windows\system32\nb-NO
2010-09-01 06:10:47 ----D---- C:\Windows\system32\migration
2010-09-01 06:10:47 ----D---- C:\Windows\system32\lv-LV
2010-09-01 06:10:47 ----D---- C:\Windows\system32\lt-LT
2010-09-01 06:10:47 ----D---- C:\Windows\system32\ko-KR
2010-09-01 06:10:47 ----D---- C:\Windows\system32\ja-JP
2010-09-01 06:10:47 ----D---- C:\Windows\system32\it-IT
2010-09-01 06:10:47 ----D---- C:\Windows\system32\hu-HU
2010-09-01 06:10:47 ----D---- C:\Windows\system32\hr-HR
2010-09-01 06:10:47 ----D---- C:\Windows\system32\he-IL
2010-09-01 06:10:47 ----D---- C:\Windows\system32\fr-FR
2010-09-01 06:10:47 ----D---- C:\Windows\system32\fi-FI
2010-09-01 06:10:47 ----D---- C:\Windows\system32\et-EE
2010-09-01 06:10:47 ----D---- C:\Windows\system32\es-ES
2010-09-01 06:10:47 ----D---- C:\Windows\system32\en-US
2010-09-01 06:10:47 ----D---- C:\Windows\system32\el-GR
2010-09-01 06:10:47 ----D---- C:\Windows\system32\de-DE
2010-09-01 06:10:47 ----D---- C:\Windows\system32\da-DK
2010-09-01 06:10:47 ----D---- C:\Windows\system32\cs-CZ
2010-09-01 06:10:47 ----D---- C:\Windows\system32\bg-BG
2010-09-01 06:10:47 ----D---- C:\Windows\system32\ar-SA
2010-09-01 06:10:47 ----D---- C:\Windows\rescache
2010-09-01 06:10:47 ----D---- C:\Windows\ehome
2010-09-01 06:10:46 ----D---- C:\Program Files\Windows Mail
2010-09-01 06:10:39 ----D---- C:\Windows\system32\MUI
2010-09-01 06:10:39 ----D---- C:\Windows\system32\CodeIntegrity
2010-09-01 06:10:34 ----D---- C:\Users\hallkiller\AppData\Roaming\vlc
2010-09-01 06:10:32 ----D---- C:\Program Files\AGEIA Technologies
2010-09-01 06:09:35 ----D---- C:\Windows\registration
2010-09-01 06:08:29 ----D---- C:\Windows\Microsoft.NET
2010-09-01 06:08:25 ----RSD---- C:\Windows\assembly
2010-09-01 06:08:03 ----D---- C:\Program Files\NVIDIA Corporation
2010-08-29 23:08:19 ----D---- C:\Users\hallkiller\AppData\Roaming\uTorrent
2010-08-29 13:02:01 ----D---- C:\Program Files\Java
2010-08-29 11:49:41 ----D---- C:\Windows\PolicyDefinitions
2010-08-22 22:00:03 ----D---- C:\Users\hallkiller\AppData\Roaming\dvdcss
2010-08-15 10:34:47 ----D---- C:\Program Files\uTorrent
2010-08-13 13:14:05 ----D---- C:\Windows\Downloaded Program Files
2010-08-10 14:07:26 ----D---- C:\iphone

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 rdyboost;ReadyBoost; C:\Windows\System32\drivers\rdyboost.sys [2009-07-14 173648]
R1 CSC;@%systemroot%\system32\cscsvc.dll,-202; C:\Windows\system32\drivers\csc.sys [2009-07-14 387584]
R1 vwififlt;Virtual WiFi Filter Driver; C:\Windows\system32\DRIVERS\vwififlt.sys [2009-07-14 48128]
R2 eamonm;eamonm; C:\Windows\system32\DRIVERS\eamonm.sys [2010-07-29 136632]
R2 int15;int15; \??\C:\Windows\system32\drivers\int15.sys [2008-08-19 15392]
R3 AgereSoftModem;Agere Systems Soft Modem; C:\Windows\system32\DRIVERS\AGRSM.sys [2009-07-14 1035776]
R3 ATSwpWDF;AuthenTec TruePrint USB WBF WDF Driver; C:\Windows\System32\Drivers\ATSwpWDF.sys [2009-12-03 625224]
R3 GEARAspiWDM;GEAR ASPI Filter Driver; C:\Windows\system32\DRIVERS\GEARAspiWDM.sys [2009-05-18 26600]
R3 Ltn_stk7070P;PCTV LITEON TT1260 based TV tuner device; C:\Windows\system32\DRIVERS\Ltn_stk7070P.sys [2009-05-22 542976]
R3 NETw5s32;Ovladač adaptéru Intel(R) Wireless WiFi Link pro systém Windows 7 32 Bit; C:\Windows\system32\DRIVERS\NETw5s32.sys [2009-09-15 6114816]
R3 NVHDA;Service for NVIDIA High Definition Audio Driver; C:\Windows\system32\drivers\nvhda32v.sys [2009-05-11 64544]
R3 pcouffin;VSO Software pcouffin; C:\Windows\System32\Drivers\pcouffin.sys [2010-06-06 47360]
R3 SbieDrv;SbieDrv; \??\C:\Program Files\Sandboxie\SbieDrv.sys [2010-02-03 115432]
R3 SynTP;Synaptics TouchPad Driver; C:\Windows\system32\DRIVERS\SynTP.sys [2009-06-18 212400]
R3 vwifimp;Microsoft Virtual WiFi Miniport Service; C:\Windows\system32\DRIVERS\vwifimp.sys [2009-07-14 14336]
S2 Parvdm;Parvdm; C:\Windows\system32\DRIVERS\parvdm.sys [2009-07-14 8704]
S3 aic78xx;aic78xx; C:\Windows\system32\DRIVERS\djsvs.sys [2009-07-14 70720]
S3 amdagp;AMD AGP Bus Filter Driver; C:\Windows\system32\DRIVERS\amdagp.sys [2009-07-14 53312]
S3 b57nd60x;Broadcom NetXtreme Gigabit Ethernet - NDIS 6.0; C:\Windows\system32\DRIVERS\b57nd60x.sys [2009-07-14 229888]
S3 BthEnum;Služba Bluetooth Enumerator; C:\Windows\system32\DRIVERS\BthEnum.sys [2009-07-14 34816]
S3 BTHPORT;Ovladač portu Bluetooth; C:\Windows\System32\Drivers\BTHport.sys [2009-07-14 392704]
S3 BTHUSB;Ovladač rozhraní USB radiostanice Bluetooth; C:\Windows\System32\Drivers\BTHUSB.sys [2009-07-14 58880]
S3 catchme;catchme; \??\C:\Users\HALLKI~1\AppData\Local\Temp\catchme.sys []
S3 CrystalSysInfo;CrystalSysInfo; \??\C:\Program Files\MediaCoder iPod Edition\SysInfo.sys [2007-09-25 15152]
S3 GGSAFERDriver;GGSAFER Driver; \??\C:\Program Files\Garena\plugins\UI\safedrv.sys []
S3 JMCR;JMCR; C:\Windows\system32\DRIVERS\jmcr.sys [2009-11-12 84240]
S3 netw5v32;Intel(R) Wireless WiFi Link 5000 Series – ovladač adaptéru pro 32bitový systém Windows Vista; C:\Windows\system32\DRIVERS\netw5v32.sys [2009-07-14 4231168]
S3 pciide;pciide; C:\Windows\system32\DRIVERS\pciide.sys [2009-07-14 12368]
S3 RDPDR;Terminal Server Device Redirector Driver; C:\Windows\System32\drivers\rdpdr.sys [2009-07-14 133120]
S3 s117bus;Sony Ericsson Device 117 driver (WDM); C:\Windows\system32\DRIVERS\s117bus.sys [2007-06-25 82984]
S3 s117mdfl;Sony Ericsson Device 117 USB WMC Modem Filter; C:\Windows\system32\DRIVERS\s117mdfl.sys [2007-06-25 14888]
S3 s117mdm;Sony Ericsson Device 117 USB WMC Modem Driver; C:\Windows\system32\DRIVERS\s117mdm.sys [2007-06-25 108456]
S3 s117mgmt;Sony Ericsson Device 117 USB WMC Device Management Drivers (WDM); C:\Windows\system32\DRIVERS\s117mgmt.sys [2007-06-25 100264]
S3 s117obex;Sony Ericsson Device 117 USB WMC OBEX Interface; C:\Windows\system32\DRIVERS\s117obex.sys [2007-06-25 98344]
S3 s117unic;Sony Ericsson Device 117 USB Ethernet Emulation SEMC117 (WDM); C:\Windows\system32\DRIVERS\s117unic.sys [2007-06-25 98856]
S3 s3cap;s3cap; C:\Windows\system32\DRIVERS\vms3cap.sys [2009-07-14 5632]
S3 sisagp;SIS AGP Bus Filter; C:\Windows\system32\DRIVERS\sisagp.sys [2009-07-14 52304]
S3 storvsc;storvsc; C:\Windows\system32\DRIVERS\storvsc.sys [2009-07-14 28224]
S3 USBAAPL;Apple Mobile USB Driver; C:\Windows\System32\Drivers\usbaapl.sys [2010-04-19 41984]
S3 usbscan;Ovladač skeneru USB; C:\Windows\system32\DRIVERS\usbscan.sys [2009-07-14 35840]
S3 viaagp;VIA AGP Bus Filter; C:\Windows\system32\DRIVERS\viaagp.sys [2009-07-14 53328]
S3 ViaC7;VIA C7 Processor Driver; C:\Windows\system32\DRIVERS\viac7.sys [2009-07-14 52736]
S3 vmbus;@%SystemRoot%\system32\vmbusres.dll,-1000; C:\Windows\system32\DRIVERS\vmbus.sys [2009-07-14 175824]
S3 VMBusHID;VMBusHID; C:\Windows\system32\DRIVERS\VMBusHID.sys [2009-07-14 17920]
S3 WinUsb;WinUsb; C:\Windows\system32\DRIVERS\WinUsb.sys [2009-07-14 34944]
S4 sptd;sptd; C:\Windows\System32\Drivers\sptd.sys []

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 Apple Mobile Device;Apple Mobile Device; C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe [2010-06-10 144176]
R2 AshampooDefragService;Ashampoo Defrag Service; C:\Program Files\Ashampoo\Ashampoo Magical Defrag 2\bin\aDefragService.exe [2008-10-09 750944]
R2 Bonjour Service;Bonjour Service; C:\Program Files\Bonjour\mDNSResponder.exe [2010-05-18 345376]
R2 CscService;@%systemroot%\system32\cscsvc.dll,-200; C:\Windows\System32\svchost.exe [2009-07-14 20992]
R2 ETService;Empowering Technology Service; C:\Program Files\Acer\Empowering Technology\Service\ETService.exe [2008-08-19 24576]
R2 nvsvc;NVIDIA Display Driver Service; C:\Windows\system32\nvvsvc.exe [2009-08-19 211488]
R2 PnkBstrA;PnkBstrA; C:\Windows\system32\PnkBstrA.exe [2010-03-09 75064]
R2 PnkBstrB;PnkBstrB; C:\Windows\system32\PnkBstrB.exe [2010-03-11 215128]
R2 SbieSvc;Sandboxie Service; C:\Program Files\Sandboxie\SbieSvc.exe [2010-02-03 73960]
S2 StarWindServiceAE;StarWind AE Service; C:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindServiceAE.exe []
S3 AppMgmt;@appmgmts.dll,-3250; C:\Windows\system32\svchost.exe [2009-07-14 20992]
S3 DAUpdaterSvc;Dragon Age: Prameny - aktualizace obsahu; D:\hry\Dragon Age\bin_ship\DAUpdaterSvc.Service.exe [2009-12-15 25832]
S3 iPod Service;iPod Service; C:\Program Files\iPod\bin\iPodService.exe [2010-07-21 540968]
S3 Microsoft Office Groove Audit Service;Microsoft Office Groove Audit Service; D:\programy\office 2007\Office12\GrooveAuditService.exe [2006-10-27 65824]
S3 odserv;Microsoft Office Diagnostics Service; C:\Program Files\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE [2006-10-26 441136]
S3 ose;Office Source Engine; C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2006-10-26 145184]
S3 PeerDistSvc;@%SystemRoot%\system32\peerdistsvc.dll,-9000; C:\Windows\System32\svchost.exe [2009-07-14 20992]
S3 UmRdpService;@%SystemRoot%\system32\umrdp.dll,-1000; C:\Windows\System32\svchost.exe [2009-07-14 20992]

-----------------EOF-----------------

[vyosek]

Vypada to ciste, nejak zacinaji dochazet napady

Udelejte sken pomoci AVPToolu dle navodu kolegy Tempesta http://www.viry.cz/forum/viewtopic.php?f=29&t=58179

[jamet]

ähoj mám menší problém nejde mi vypnout obnovení systému ( ani podle návodu na 7čkách to snad nejde )

[vyosek]

Nechat tedy zaple...mely by byt vycistene hned ze zacatku skryptem...