Odvirování PC, zrychlení počítače, vzdálená pomoc prostřednictvím služby neslape.cz

Prosím o kontrolu, PC občas zamrzne

Máte problém s virem? Vložte sem log z FRST nebo RSIT.

Moderátor: Moderátoři

Pravidla fóra
Pokud chcete pomoc, vložte log z FRST [návod zde] nebo RSIT [návod zde]

Jednotlivé thready budou po vyřešení uzamčeny. Stejně tak ty, které budou nečinné déle než 14 dní. Vizte Pravidlo o zamykání témat. Děkujeme za pochopení.

!NOVINKA!
Nově lze využívat služby vzdálené pomoci, kdy se k vašemu počítači připojí odborník a bližší informace o problému si od vás získá telefonicky! Více na www.neslape.cz
Odpovědět
Zpráva
Autor
JackXxX
Návštěvník
Návštěvník
Příspěvky: 13
Registrován: 01 črc 2008 21:52

Prosím o kontrolu, PC občas zamrzne

#1 Příspěvek od JackXxX »

Zdravím, Není tomu tak dlouho, co jsem měnil HD, a jel znovu s "čistým trikem", nicméně PC jednou za čas zamrzne, nejde hýbat myší, nic nefunguje, jedině tvrdý restart. Stává se tak zejména při větším vytížení (např. více puštěných downloadů). - Z toho důvodu jsem si nainstaloval Keylogger, abych měl nějaké automatické zálohování (Lightlogger)...

Děkuji za cokoliv :)

Kód: Vybrat vše

Logfile of random's system information tool 1.08 (written by random/random)
Run by Administrator at 2010-07-09 20:06:47
Systém Microsoft Windows XP Professional Service Pack 3
System drive C: has 255 GB (74%) free of 343 GB
Total RAM: 2047 MB (58% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 20:06:59, on 9.7.2010
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP3 (6.00.2900.5512)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\ZoneLabs\vsmon.exe
C:\Program Files\CheckPoint\ZAForceField\IswSvc.exe
C:\Program Files\Alwil Software\Avast5\AvastSvc.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\NVIDIA Corporation\NetworkAccessManager\Apache Group\Apache2\bin\apache.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE
C:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin\nSvcLog.exe
C:\Program Files\Spyware Terminator\sp_rsser.exe
C:\Program Files\NVIDIA Corporation\NetworkAccessManager\Apache Group\Apache2\bin\apache.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin\nSvcIp.exe
C:\WINDOWS\system32\wbem\wmiapsrv.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\Explorer.EXE
C:\PROGRA~1\ALWILS~1\Avast5\avastUI.exe
C:\WINDOWS\RTHDCPL.EXE
C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe
C:\WINDOWS\FixCamera.exe
C:\WINDOWS\tsnp325.exe
C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
C:\WINDOWS\vsnp325.exe
C:\Program Files\Common Files\Java\Java Update\jusched.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\QIP\qip.exe
C:\WINDOWS\system32\wuauclt.exe
C:\Program Files\DAEMON Tools\daemon.exe
C:\Program Files\Skype\Phone\Skype.exe
C:\Program Files\Spyware Terminator\SpywareTerminatorUpdate.exe
C:\PROGRAM FILES\FRAPS\FRAPS.EXE
C:\Program Files\NET Traffic Meter\NET Traffic Meter.exe
C:\Program Files\Secunia\PSI (RC3)\psi.exe
C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\ccc.exe
C:\Program Files\OpenOffice.org 3\program\soffice.exe
C:\Program Files\OpenOffice.org 3\program\soffice.bin
C:\Program Files\CheckPoint\ZAForceField\ForceField.exe
C:\totalcmd\TOTALCMD.EXE
C:\Program Files\Skype\Plugin Manager\skypePM.exe
C:\Program Files\The KMPlayer\KMPlayer.exe
C:\Program Files\Opera\Opera.exe
C:\WINDOWS\system32\NOTEPAD.EXE
C:\Documents and Settings\Administrator\Local Settings\Data aplikací\Opera\Opera\temporary_downloads\RSIT.exe
C:\Program Files\trend micro\Administrator.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://seznam.cz/
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Odkazy
R3 - URLSearchHook: ZoneAlarm Toolbar - {66f2e20d-0da8-4c11-a9c8-dd8477b88acd} - C:\Program Files\ZoneAlarm\tbZone.dll
O2 - BHO: ZoneAlarm Toolbar - {66f2e20d-0da8-4c11-a9c8-dd8477b88acd} - C:\Program Files\ZoneAlarm\tbZone.dll
O2 - BHO: ZoneAlarm Security Engine Registrar - {8A4A36C2-0535-4D2C-BD3D-496CB7EED6E3} - C:\Program Files\CheckPoint\ZAForceField\TrustChecker\bin\TrustCheckerIEPlugin.dll
O2 - BHO: SkypeIEPluginBHO - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
O3 - Toolbar: ZoneAlarm Toolbar - {66f2e20d-0da8-4c11-a9c8-dd8477b88acd} - C:\Program Files\ZoneAlarm\tbZone.dll
O3 - Toolbar: ZoneAlarm Security Engine - {EE2AC4E5-B0B0-4EC6-88A9-BCA1A32AB107} - C:\Program Files\CheckPoint\ZAForceField\TrustChecker\bin\TrustCheckerIEPlugin.dll
O3 - Toolbar: DAEMON Tools Toolbar - {32099AAC-C132-4136-9E9A-4E364A424E17} - C:\Program Files\DAEMON Tools Toolbar\DTToolbar.dll
O4 - HKLM\..\Run: [avast5] C:\PROGRA~1\ALWILS~1\Avast5\avastUI.exe /nogui
O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE
O4 - HKLM\..\Run: [SkyTel] SkyTel.EXE
O4 - HKLM\..\Run: [Alcmtr] ALCMTR.EXE
O4 - HKLM\..\Run: [ZoneAlarm Client] "C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe"
O4 - HKLM\..\Run: [ISW] "C:\Program Files\CheckPoint\ZAForceField\ForceField.exe" /icon="hidden"
O4 - HKLM\..\Run: [StartCCC] "C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun
O4 - HKLM\..\Run: [CameraFixer] C:\WINDOWS\CameraFixer.exe
O4 - HKLM\..\Run: [FixCamera] C:\WINDOWS\FixCamera.exe
O4 - HKLM\..\Run: [tsnp325] C:\WINDOWS\tsnp325.exe
O4 - HKLM\..\Run: [snp325] C:\WINDOWS\vsnp325.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Common Files\Java\Java Update\jusched.exe"
O4 - HKLM\..\Run: [AdobeCS4ServiceManager] "C:\Program Files\Common Files\Adobe\CS4ServiceManager\CS4ServiceManager.exe" -launchedbylogin
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [QIP2005] C:\Program Files\QIP\qip.exe
O4 - HKCU\..\Run: [DAEMON Tools] "C:\Program Files\DAEMON Tools\daemon.exe" -lang 1033
O4 - HKCU\..\Run: [Skype] "C:\Program Files\Skype\Phone\Skype.exe" /nosplash /minimized
O4 - HKCU\..\Run: [SpywareTerminatorUpdate] "C:\Program Files\Spyware Terminator\SpywareTerminatorUpdate.exe"
O4 - HKCU\..\Run: [Fraps] C:\PROGRAM FILES\FRAPS\FRAPS.EXE
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - Startup: NET Traffic Meter (2).lnk = C:\Program Files\NET Traffic Meter\NET Traffic Meter.exe
O4 - Startup: OpenOffice.org 3.2.lnk = C:\Program Files\OpenOffice.org 3\program\quickstart.exe
O4 - Startup: Secunia PSI (RC3).lnk = C:\Program Files\Secunia\PSI (RC3)\psi.exe
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Office Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: Skype add-on for Internet Explorer - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O9 - Extra 'Tools' menuitem: Skype add-on for Internet Explorer - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O9 - Extra button: Zdroje informací - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O17 - HKLM\System\CCS\Services\Tcpip\..\{77244817-C2F0-413E-B027-466DD45F3857}: NameServer = 10.0.0.138,81.27.192.97
O18 - Protocol: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O22 - SharedTaskScheduler: Browseui preloader - {438755C2-A8BA-11D1-B96B-00A0C90312E1} - C:\WINDOWS\system32\browseui.dll
O22 - SharedTaskScheduler: Proces mezipaměti kategorií součástí - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\WINDOWS\system32\browseui.dll
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast5\AvastSvc.exe
O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast5\AvastSvc.exe
O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast5\AvastSvc.exe
O23 - Service: Dragon Age: Origins - Content Updater (DAUpdaterSvc) - BioWare - C:\Program Files\Dragon age\bin_ship\DAUpdaterSvc.Service.exe
O23 - Service: FLEXnet Licensing Service - Acresso Software Inc. - C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
O23 - Service: Forceware Web Interface (ForcewareWebInterface) - Apache Software Foundation - C:\Program Files\NVIDIA Corporation\NetworkAccessManager\Apache Group\Apache2\bin\apache.exe
O23 - Service: ZoneAlarm Toolbar IswSvc (IswSvc) - Check Point Software Technologies - C:\Program Files\CheckPoint\ZAForceField\IswSvc.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe
O23 - Service: ForceWare IP service (nSvcIp) - NVIDIA Corporation - C:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin\nSvcIp.exe
O23 - Service: ForceWare user log service (nSvcLog) - NVIDIA Corporation - C:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin\nSvcLog.exe
O23 - Service: Spyware Terminator Realtime Shield Service (sp_rssrv) - Crawler.com - C:\Program Files\Spyware Terminator\sp_rsser.exe
O23 - Service: TrueVector Internet Monitor (vsmon) - Check Point Software Technologies LTD - C:\WINDOWS\system32\ZoneLabs\vsmon.exe

--
End of file - 9529 bytes

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{66f2e20d-0da8-4c11-a9c8-dd8477b88acd}]
ZoneAlarm Toolbar - C:\Program Files\ZoneAlarm\tbZone.dll [2010-05-09 2517088]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{8A4A36C2-0535-4D2C-BD3D-496CB7EED6E3}]
ZoneAlarm Security Engine Registrar - C:\Program Files\CheckPoint\ZAForceField\TrustChecker\bin\TrustCheckerIEPlugin.dll [2010-05-18 591336]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}]
Skype add-on for Internet Explorer - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll [2010-02-08 804136]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre6\bin\jp2ssv.dll [2010-06-13 41760]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{E7E6F031-17CE-4C07-BC86-EABFE594F69C}]
JQSIEStartDetectorImpl Class - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll [2010-06-13 79648]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{66f2e20d-0da8-4c11-a9c8-dd8477b88acd} - ZoneAlarm Toolbar - C:\Program Files\ZoneAlarm\tbZone.dll [2010-05-09 2517088]
{EE2AC4E5-B0B0-4EC6-88A9-BCA1A32AB107} - ZoneAlarm Security Engine - C:\Program Files\CheckPoint\ZAForceField\TrustChecker\bin\TrustCheckerIEPlugin.dll [2010-05-18 591336]
{32099AAC-C132-4136-9E9A-4E364A424E17} - DAEMON Tools Toolbar - C:\Program Files\DAEMON Tools Toolbar\DTToolbar.dll [2010-03-25 968000]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"avast5"=C:\PROGRA~1\ALWILS~1\Avast5\avastUI.exe [2010-05-06 2815192]
"RTHDCPL"=C:\WINDOWS\RTHDCPL.EXE [2006-08-01 16049664]
"SkyTel"=C:\WINDOWS\SkyTel.EXE [2006-05-16 2879488]
"Alcmtr"=C:\WINDOWS\ALCMTR.EXE [2005-05-03 69632]
"ZoneAlarm Client"=C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe [2010-05-20 1043968]
"ISW"=C:\Program Files\CheckPoint\ZAForceField\ForceField.exe [2010-05-18 730600]
"StartCCC"=C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [2010-02-10 61440]
"CameraFixer"=C:\WINDOWS\CameraFixer.exe [2005-12-06 20480]
"FixCamera"=C:\WINDOWS\FixCamera.exe [2007-02-12 20480]
"tsnp325"=C:\WINDOWS\tsnp325.exe [2006-10-10 270336]
"snp325"=C:\WINDOWS\vsnp325.exe [2006-10-10 827392]
"SunJavaUpdateSched"=C:\Program Files\Common Files\Java\Java Update\jusched.exe [2010-02-18 248040]
"AdobeCS4ServiceManager"=C:\Program Files\Common Files\Adobe\CS4ServiceManager\CS4ServiceManager.exe [2008-08-14 611712]
"SysMon"= []

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"=C:\WINDOWS\system32\ctfmon.exe [2008-04-14 15360]
"QIP2005"=C:\Program Files\QIP\qip.exe [2008-07-01 3256320]
"DAEMON Tools"=C:\Program Files\DAEMON Tools\daemon.exe [2007-08-16 167368]
"AdobeBridge"= []
"Skype"=C:\Program Files\Skype\Phone\Skype.exe [2010-05-13 26192168]
"SpywareTerminatorUpdate"=C:\Program Files\Spyware Terminator\SpywareTerminatorUpdate.exe [2010-07-08 3037696]
"Fraps"=C:\PROGRAM FILES\FRAPS\FRAPS.EXE [2009-11-08 2377648]

C:\Documents and Settings\Administrator\Nabídka Start\Programy\Po spuštění
NET Traffic Meter (2).lnk - C:\Program Files\NET Traffic Meter\NET Traffic Meter.exe
OpenOffice.org 3.2.lnk - C:\Program Files\OpenOffice.org 3\program\quickstart.exe
Secunia PSI (RC3).lnk - C:\Program Files\Secunia\PSI (RC3)\psi.exe

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\AtiExtEvent]
C:\WINDOWS\system32\Ati2evxx.dll [2010-02-11 155648]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\vsmon]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{1a3e09be-1e45-494b-9174-d7385b45bbf5}]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=145

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"C:\Program Files\NVIDIA Corporation\NetworkAccessManager\Apache Group\Apache2\bin\Apache.exe"="C:\Program Files\NVIDIA Corporation\NetworkAccessManager\Apache Group\Apache2\bin\Apache.exe:*:Enabled:Apache HTTP Server"
"I:\Soubory\QIP\qip.exe"="I:\Soubory\QIP\qip.exe:*:Enabled:Quiet Internet Pager"
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"C:\totalcmd\TOTALCMD.EXE"="C:\totalcmd\TOTALCMD.EXE:*:Enabled:Total Commander 32 bit"
"C:\WINDOWS\system32\ZoneLabs\vsmon.exe"="C:\WINDOWS\system32\ZoneLabs\vsmon.exe:*:Enabled:vsmon"
"C:\Program Files\Dragon age\bin_ship\daorigins.exe"="C:\Program Files\Dragon age\bin_ship\daorigins.exe:*:Enabled:Dragon Age Origins Game"
"C:\Program Files\Dragon age\DAOriginsLauncher.exe"="C:\Program Files\Dragon age\DAOriginsLauncher.exe:*:Enabled:Dragon Age Origins Launcher"
"C:\Program Files\Dragon age\bin_ship\daupdatersvc.service.exe"="C:\Program Files\Dragon age\bin_ship\daupdatersvc.service.exe:*:Enabled:Dragon Age Origins Updater"
"C:\Program Files\Skype\Plugin Manager\skypePM.exe"="C:\Program Files\Skype\Plugin Manager\skypePM.exe:*:Enabled:Skype Extras Manager"
"C:\WINDOWS\system32\dpnsvr.exe"="C:\WINDOWS\system32\dpnsvr.exe:*:Disabled:Microsoft DirectPlay8 Server"
"C:\Program Files\Common Files\Adobe\CS4ServiceManager\CS4ServiceManager.exe"="C:\Program Files\Common Files\Adobe\CS4ServiceManager\CS4ServiceManager.exe:*:Enabled:Adobe CSI CS4"
"C:\Program Files\Opera\opera.exe"="C:\Program Files\Opera\opera.exe:*:Enabled:Opera Internet Browser"
"C:\Program Files\Skype\Phone\Skype.exe"="C:\Program Files\Skype\Phone\Skype.exe:*:Enabled:Skype"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"

======List of files/folders created in the last 1 months======

2010-07-09 20:06:48 ----D---- C:\Program Files\trend micro
2010-07-09 20:06:47 ----D---- C:\rsit
2010-07-09 13:18:01 ----SHD---- C:\Config.Msi
2010-07-09 13:16:54 ----D---- C:\Program Files\CCleaner
2010-07-08 20:23:46 ----D---- C:\Documents and Settings\All Users\Data aplikací\HeavenWard
2010-07-08 20:23:43 ----D---- C:\Program Files\HeavenWard
2010-07-08 19:51:33 ----D---- C:\Documents and Settings\All Users\Data aplikací\SysMon
2010-07-08 19:08:58 ----A---- C:\WINDOWS\system32\drivers\sp_rsdrv2.sys
2010-07-08 19:08:57 ----D---- C:\Documents and Settings\Administrator\Data aplikací\Spyware Terminator
2010-07-08 19:08:55 ----D---- C:\Documents and Settings\All Users\Data aplikací\Spyware Terminator
2010-07-08 19:08:54 ----D---- C:\Program Files\Spyware Terminator
2010-07-06 20:41:15 ----D---- C:\Documents and Settings\Administrator\Data aplikací\Dev-Cpp
2010-07-06 20:40:43 ----D---- C:\Dev-Cpp
2010-07-01 13:04:04 ----A---- C:\WINDOWS\system32\drivers\LightLogger.sys
2010-06-29 22:04:36 ----D---- C:\Documents and Settings\Administrator\Data aplikací\Mumble
2010-06-29 22:04:18 ----D---- C:\Program Files\Mumble
2010-06-29 17:01:28 ----D---- C:\Program Files\waw
2010-06-26 09:10:51 ----D---- C:\Program Files\Opera
2010-06-24 14:41:27 ----D---- C:\Documents and Settings\Administrator\Data aplikací\HeidiSQL
2010-06-24 14:41:23 ----D---- C:\Program Files\HeidiSQL
2010-06-24 14:41:23 ----D---- C:\Documents and Settings\All Users\Data aplikací\HeidiSQL
2010-06-24 14:37:58 ----D---- C:\Program Files\NET Traffic Meter
2010-06-24 11:43:22 ----D---- C:\Program Files\IrfanView
2010-06-21 19:35:52 ----D---- C:\Program Files\Microsoft Games
2010-06-19 18:44:57 ----D---- C:\Documents and Settings\All Users\Data aplikací\FLEXnet
2010-06-19 18:27:00 ----D---- C:\Program Files\Adobe Media Player
2010-06-19 18:22:55 ----D---- C:\Program Files\Common Files\Adobe AIR
2010-06-19 18:13:45 ----D---- C:\Program Files\Common Files\Macrovision Shared
2010-06-17 15:26:03 ----D---- C:\Program Files\IObit
2010-06-13 15:15:49 ----D---- C:\WINDOWS\Sun
2010-06-13 15:15:39 ----D---- C:\Documents and Settings\All Users\Data aplikací\Sun
2010-06-13 15:15:37 ----D---- C:\Program Files\Common Files\Java
2010-06-13 15:15:25 ----A---- C:\WINDOWS\system32\javaws.exe
2010-06-13 15:15:25 ----A---- C:\WINDOWS\system32\javaw.exe
2010-06-13 15:15:25 ----A---- C:\WINDOWS\system32\java.exe
2010-06-13 15:15:25 ----A---- C:\WINDOWS\system32\deployJava1.dll
2010-06-13 15:15:13 ----D---- C:\Program Files\Java
2010-06-13 15:14:46 ----D---- C:\Documents and Settings\Administrator\Data aplikací\Sun
2010-06-11 19:18:04 ----A---- C:\WINDOWS\ODBC.INI
2010-06-11 19:17:53 ----A---- C:\WINDOWS\system32\mdimon.dll
2010-06-11 19:16:28 ----D---- C:\Program Files\Common Files\DESIGNER
2010-06-11 19:16:25 ----D---- C:\Program Files\Microsoft Works
2010-06-11 19:16:17 ----D---- C:\Program Files\Microsoft Visual Studio
2010-06-11 19:16:05 ----D---- C:\WINDOWS\SHELLNEW
2010-06-11 19:16:00 ----D---- C:\Program Files\Microsoft.NET
2010-06-11 19:16:00 ----D---- C:\Program Files\Microsoft Office
2010-06-11 18:57:35 ----D---- C:\Documents and Settings\Administrator\Data aplikací\OpenOffice.org
2010-06-11 18:56:03 ----D---- C:\Program Files\OpenOffice.org 3
2010-06-11 18:50:58 ----D---- C:\Documents and Settings\All Users\Data aplikací\Adobe
2010-06-11 18:50:46 ----D---- C:\Program Files\Common Files\Adobe
2010-06-11 18:50:46 ----D---- C:\Program Files\Adobe
2010-06-10 21:35:31 ----A---- C:\WINDOWS\system32\drivers\kbdhid.sys
2010-06-10 21:35:29 ----A---- C:\WINDOWS\system32\hidserv.dll
2010-06-10 21:35:19 ----A---- C:\WINDOWS\system32\drivers\USBAUDIO.sys
2010-06-10 21:35:15 ----A---- C:\WINDOWS\system32\drivers\usbccgp.sys

======List of files/folders modified in the last 1 months======

2010-07-09 20:06:59 ----D---- C:\WINDOWS\Prefetch
2010-07-09 20:06:57 ----D---- C:\WINDOWS\Internet Logs
2010-07-09 20:06:48 ----RD---- C:\Program Files
2010-07-09 20:01:09 ----D---- C:\Documents and Settings\Administrator\Data aplikací\Skype
2010-07-09 19:50:47 ----D---- C:\WINDOWS\Temp
2010-07-09 19:49:35 ----D---- C:\Documents and Settings\Administrator\Data aplikací\skypePM
2010-07-09 16:16:06 ----D---- C:\Program Files\Mozilla Thunderbird
2010-07-09 13:18:17 ----SHD---- C:\WINDOWS\Installer
2010-07-09 13:17:38 ----D---- C:\WINDOWS\system32
2010-07-09 13:04:29 ----D---- C:\WINDOWS\system32\CatRoot2
2010-07-09 00:01:53 ----A---- C:\WINDOWS\SchedLgU.Txt
2010-07-08 20:24:50 ----D---- C:\WINDOWS\system32\drivers
2010-07-02 13:21:55 ----D---- C:\WINDOWS\system32\config
2010-06-29 22:06:35 ----SD---- C:\Documents and Settings\Administrator\Data aplikací\Microsoft
2010-06-29 19:42:33 ----D---- C:\Program Files\Mozilla Firefox
2010-06-27 10:43:59 ----D---- C:\Documents and Settings\Administrator\Data aplikací\Adobe
2010-06-26 09:15:30 ----D---- C:\Program Files\QIP
2010-06-24 20:19:17 ----RSD---- C:\WINDOWS\Fonts
2010-06-23 13:29:44 ----D---- C:\WINDOWS
2010-06-19 18:32:31 ----D---- C:\WINDOWS\WinSxS
2010-06-19 18:22:55 ----D---- C:\Program Files\Common Files
2010-06-11 19:18:06 ----SD---- C:\Documents and Settings\All Users\Data aplikací\Microsoft
2010-06-11 19:17:45 ----RSD---- C:\WINDOWS\assembly
2010-06-11 19:17:37 ----A---- C:\WINDOWS\win.ini
2010-06-11 19:17:14 ----D---- C:\Program Files\Common Files\Microsoft Shared
2010-06-11 19:16:27 ----HD---- C:\WINDOWS\inf
2010-06-11 19:16:08 ----D---- C:\Program Files\Common Files\System
2010-06-11 19:16:02 ----D---- C:\WINDOWS\Help
2010-06-11 19:14:15 ----D---- C:\WINDOWS\system
2010-06-11 15:14:35 ----SD---- C:\WINDOWS\Downloaded Program Files
2010-06-10 21:35:36 ----RSHDC---- C:\WINDOWS\system32\dllcache

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 nvata;nvata; C:\WINDOWS\system32\DRIVERS\nvata.sys [2006-06-28 105088]
R0 sptd;sptd; C:\WINDOWS\System32\Drivers\sptd.sys [2010-06-04 691696]
R1 Aavmker4;avast! Asynchronous Virus Monitor; C:\WINDOWS\system32\drivers\Aavmker4.sys [2010-05-06 28880]
R1 AmdK8;Ovladač procesoru AMD; C:\WINDOWS\system32\DRIVERS\AmdK8.sys [2006-06-18 43008]
R1 aswSP;aswSP; C:\WINDOWS\system32\drivers\aswSP.sys [2010-05-06 164048]
R1 aswTdi;avast! Network Shield Support; C:\WINDOWS\system32\drivers\aswTdi.sys [2010-05-06 46672]
R1 sp_rsdrv2;Spyware Terminator Driver 2; \??\C:\WINDOWS\system32\drivers\sp_rsdrv2.sys []
R1 vsdatant;vsdatant; C:\WINDOWS\System32\vsdatant.sys [2010-05-13 532224]
R2 adfs;adfs; C:\WINDOWS\system32\drivers\adfs.sys [2008-08-14 74720]
R2 aswFsBlk;aswFsBlk; C:\WINDOWS\system32\drivers\aswFsBlk.sys [2010-05-06 19024]
R2 aswMon2;aswMon2; C:\WINDOWS\system32\drivers\aswMon2.sys [2010-05-06 100432]
R2 ISWKL;ZoneAlarm Toolbar ISWKL; \??\C:\Program Files\CheckPoint\ZAForceField\ISWKL.sys []
R2 LightLogger;LightLogger driver; \??\C:\WINDOWS\system32\Drivers\LightLogger.sys []
R3 aswRdr;aswRdr; C:\WINDOWS\system32\drivers\aswRdr.sys [2010-05-06 23376]
R3 ati2mtag;ati2mtag; C:\WINDOWS\system32\DRIVERS\ati2mtag.sys [2010-02-11 3565056]
R3 HDAudBus;Ovladač Microsoft UAA pro sběrnici High Definition Audio; C:\WINDOWS\system32\DRIVERS\HDAudBus.sys [2008-04-13 144384]
R3 hidusb;Ovladač třídy standardu HID; C:\WINDOWS\system32\DRIVERS\hidusb.sys [2008-04-14 10368]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\WINDOWS\system32\drivers\RtkHDAud.sys [2006-08-01 4356608]
R3 mouhid;Ovladač myši standardu HID; C:\WINDOWS\system32\DRIVERS\mouhid.sys [2001-10-25 12160]
R3 NVENETFD;NVIDIA nForce Networking Controller Driver; C:\WINDOWS\system32\DRIVERS\NVENETFD.sys [2006-07-11 57856]
R3 nvnetbus;NVIDIA Network Bus Enumerator; C:\WINDOWS\system32\DRIVERS\nvnetbus.sys [2006-07-11 20480]
R3 PSI;PSI; C:\WINDOWS\system32\DRIVERS\psi_mf.sys [2008-06-16 7808]
R3 usbstor;Ovladač velkokapacitního paměťového zařízení USB; C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS [2008-04-14 26368]
S1 kbdhid;Ovladač klávesnice standardu HID; C:\WINDOWS\system32\DRIVERS\kbdhid.sys [2008-04-14 14592]
S3 ab6a1hp8;ab6a1hp8; C:\WINDOWS\system32\drivers\ab6a1hp8.sys []
S3 CCDECODE;Dekodér Closed Caption; C:\WINDOWS\system32\DRIVERS\CCDECODE.sys [2008-04-14 17024]
S3 MSTEE;Microsoft Streaming Tee/Sink-to-Sink Converter; C:\WINDOWS\system32\drivers\MSTEE.sys [2008-04-14 5504]
S3 NABTSFEC;NABTS/FEC VBI Codec; C:\WINDOWS\system32\DRIVERS\NABTSFEC.sys [2008-04-14 85248]
S3 NdisIP;Microsoft TV/Video Connection; C:\WINDOWS\system32\DRIVERS\NdisIP.sys [2008-04-14 10880]
S3 SLIP;BDA Slip De-Framer; C:\WINDOWS\system32\DRIVERS\SLIP.sys [2008-04-14 11136]
S3 SNP325;USB PC Camera (SNPSTD325); C:\WINDOWS\system32\DRIVERS\snp325.sys [2007-04-03 10251904]
S3 streamip;BDA IPSink; C:\WINDOWS\system32\DRIVERS\StreamIP.sys [2008-04-14 15232]
S3 usbaudio;Ovladač zvukové karty USB (WDM); C:\WINDOWS\system32\drivers\usbaudio.sys [2008-04-14 60032]
S3 usbccgp;Obecný nadřazený ovladač Microsoft USB; C:\WINDOWS\system32\DRIVERS\usbccgp.sys [2008-04-14 32128]
S3 WSTCODEC;Dálnopisný kodek světového standardu; C:\WINDOWS\system32\DRIVERS\WSTCODEC.SYS [2008-04-14 19200]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 Ati HotKey Poller;Ati HotKey Poller; C:\WINDOWS\system32\Ati2evxx.exe [2010-02-11 602112]
R2 avast! Antivirus;avast! Antivirus; C:\Program Files\Alwil Software\Avast5\AvastSvc.exe [2010-05-06 40384]
R2 ForcewareWebInterface;Forceware Web Interface; C:\Program Files\NVIDIA Corporation\NetworkAccessManager\Apache Group\Apache2\bin\apache.exe [2006-04-03 20543]
R2 IswSvc;ZoneAlarm Toolbar IswSvc; C:\Program Files\CheckPoint\ZAForceField\IswSvc.exe [2010-05-18 493032]
R2 JavaQuickStarterService;Java Quick Starter; C:\Program Files\Java\jre6\bin\jqs.exe [2010-06-13 153376]
R2 MDM;Machine Debug Manager; C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE [2003-06-19 322120]
R2 nSvcIp;ForceWare IP service; C:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin\nSvcIp.exe [2006-07-13 131131]
R2 nSvcLog;ForceWare user log service; C:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin\nSvcLog.exe [2006-07-13 65599]
R2 sp_rssrv;Spyware Terminator Realtime Shield Service; C:\Program Files\Spyware Terminator\sp_rsser.exe [2010-07-08 488960]
R2 vsmon;TrueVector Internet Monitor; C:\WINDOWS\system32\ZoneLabs\vsmon.exe [2010-05-20 2437176]
R3 avast! Mail Scanner;avast! Mail Scanner; C:\Program Files\Alwil Software\Avast5\AvastSvc.exe [2010-05-06 40384]
R3 avast! Web Scanner;avast! Web Scanner; C:\Program Files\Alwil Software\Avast5\AvastSvc.exe [2010-05-06 40384]
S2 ATI Smart;ATI Smart; C:\WINDOWS\system32\ati2sgag.exe [2010-02-10 593920]
S3 aspnet_state;ASP.NET State Service; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe [2008-07-25 34312]
S3 clr_optimization_v2.0.50727_32;.NET Runtime Optimization Service v2.0.50727_X86; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe [2008-07-25 69632]
S3 DAUpdaterSvc;Dragon Age: Origins - Content Updater; C:\Program Files\Dragon age\bin_ship\DAUpdaterSvc.Service.exe [2009-07-26 25832]
S3 FLEXnet Licensing Service;FLEXnet Licensing Service; C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe [2010-06-19 655624]
S3 ose;Office Source Engine; C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2003-07-28 89136]

-----------------EOF-----------------
Nahoru
Uživatelský avatar
Rudy
Site Admin
Site Admin
Příspěvky: 119418
Registrován: 30 říj 2003 13:42
Bydliště: Plzeň
Kontaktovat uživatele:
Kontaktovat uživatele Rudy

Re: Prosím o kontrolu, PC občas zamrzne

#2 Příspěvek od Rudy »

Dejte log z ComboFix.
Stahnete a ulozte nejlepe na plochu ComboFix: http://download.bleepingcomputer.com/sUBs/ComboFix.exe

pote spustte aplikaci pod uctem s administratorskym opravnenim

hned po startu se zobrazi obrazovka s licencnimi podminkami, pokracujte kliknutim na tlacitko Ano.

v klidu si postavte na kafe (cela akce trva cca. 5-10 minut, nekdy i dele - dle toho, o jak rychly stroj se jedna a kolika soubory se skener bude muset prodirat), behem skenu se nepokousejte spoustet zadne jine aplikace ani nic jineho

behem skenovani nepropadejte panice, vas stroj muze byt restartovan (predevsim pri prvni aplikaci skeneru)

upozorneni: pokud pouzivate antispyware s rezidentnim stitem, prepnete jeho rezidentni stit do Install Mode, pripadne jej po dobu skenu uplne deaktivujte, protoze dochazi pri skenu a vymazu pripadneho malware k nezadoucim kolizim s rezidentem antispyware
Dotazy a logy vkládejte pouze do vašich threadů. Soukromé zprávy, icq a e-maily neslouží k řešení vašich problémů.

Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.

Navštivte: Obrázek

e-mail: rudy(zavináč)forum.viry.cz

Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!


Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Nahoru
JackXxX
Návštěvník
Návštěvník
Příspěvky: 13
Registrován: 01 črc 2008 21:52

Re: Prosím o kontrolu, PC občas zamrzne

#3 Příspěvek od JackXxX »

tu je:

Kód: Vybrat vše

ComboFix 10-07-08.02 - Administrator 09.07.2010  21:13:00.2.2 - x86
Systém Microsoft Windows XP Professional  5.1.2600.3.1250.420.1029.18.2047.1409 [GMT 2:00]
Spuštěný z: c:\documents and settings\Administrator\Plocha\ComboFix.exe
AV: avast! Antivirus *On-access scanning disabled* (Updated) {7591DB91-41F0-48A3-B128-1A293FD8233D}
FW: ActiveArmor Firewall *disabled* {EDC10449-64D1-46c7-A59A-EC20D662F26D}
FW: ZoneAlarm Firewall *enabled* {829BDA32-94B3-44F4-8446-F8FCFF809F8B}
.

(((((((((((((((((((((((((((((((((((((((   Ostatní výmazy   )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
---- Předchozí spuštění -------
.
c:\windows\system32\msconfig.exe
c:\windows\system32\vbzlib1.dll

.
(((((((((((((((((((((((((   Soubory vytvořené od 2010-06-09 do 2010-07-09  )))))))))))))))))))))))))))))))
.

2010-07-09 19:02 . 2010-07-09 19:02	--------	d-----w-	c:\program files\TeamViewer
2010-07-09 18:06 . 2010-07-09 18:06	--------	d-----w-	c:\program files\trend micro
2010-07-09 18:06 . 2010-07-09 18:07	--------	d-----w-	C:\rsit
2010-07-09 11:16 . 2010-07-09 11:16	--------	d-----w-	c:\program files\CCleaner
2010-07-08 18:23 . 2010-07-08 18:23	--------	d-----w-	c:\program files\HeavenWard
2010-07-08 17:08 . 2010-07-08 17:08	142592	----a-w-	c:\windows\system32\drivers\sp_rsdrv2.sys
2010-07-08 17:08 . 2010-07-08 17:46	--------	d-----w-	c:\program files\Spyware Terminator
2010-07-06 18:40 . 2010-07-06 18:41	--------	d-----w-	C:\Dev-Cpp
2010-07-01 11:04 . 2010-07-01 11:04	11136	----a-w-	c:\windows\system32\drivers\LightLogger.sys
2010-06-29 20:04 . 2010-06-29 20:04	--------	d-----w-	c:\program files\Mumble
2010-06-29 15:01 . 2010-07-09 12:56	--------	d-----w-	c:\program files\waw
2010-06-26 07:10 . 2010-06-26 07:11	--------	d-----w-	c:\program files\Opera
2010-06-24 12:41 . 2010-06-24 12:41	--------	d-----w-	c:\program files\HeidiSQL
2010-06-24 12:37 . 2010-07-09 19:24	--------	d-----w-	c:\program files\NET Traffic Meter
2010-06-24 09:43 . 2010-06-24 09:43	--------	d-----w-	c:\program files\IrfanView
2010-06-23 11:29 . 2010-06-23 11:29	61	--sh--w-	c:\windows\cnerolf.dat
2010-06-21 17:35 . 2010-06-21 17:35	--------	d-----w-	c:\program files\Microsoft Games
2010-06-19 16:27 . 2010-06-19 16:27	--------	d-----w-	c:\program files\Adobe Media Player
2010-06-19 16:22 . 2010-06-19 16:22	--------	d-----w-	c:\program files\Common Files\Adobe AIR
2010-06-19 16:13 . 2010-06-19 16:13	--------	d-----w-	c:\program files\Common Files\Macrovision Shared
2010-06-17 13:26 . 2010-06-17 13:26	--------	d-----w-	c:\program files\IObit
2010-06-13 13:15 . 2010-06-13 13:15	--------	d-----w-	c:\windows\Sun
2010-06-13 13:15 . 2010-06-13 13:15	--------	d-----w-	c:\program files\Common Files\Java
2010-06-13 13:15 . 2010-06-13 13:15	411368	----a-w-	c:\windows\system32\deployJava1.dll
2010-06-13 13:15 . 2010-06-13 13:15	--------	d-----w-	c:\program files\Java
2010-06-11 17:17 . 2003-06-18 23:31	18944	----a-w-	c:\windows\system32\Spool\prtprocs\w32x86\mdippr.dll
2010-06-11 17:17 . 2003-06-18 23:31	17920	----a-w-	c:\windows\system32\mdimon.dll
2010-06-11 17:16 . 2010-06-11 17:16	--------	d-----w-	c:\program files\Microsoft Works
2010-06-11 17:16 . 2010-06-11 17:17	--------	d-----w-	c:\windows\SHELLNEW
2010-06-11 17:16 . 2010-06-11 17:16	--------	d-----w-	c:\program files\Microsoft.NET
2010-06-11 16:56 . 2010-06-11 16:56	--------	d-----w-	c:\program files\OpenOffice.org 3
2010-06-11 16:50 . 2010-07-09 11:18	--------	d-----w-	c:\program files\Common Files\Adobe
2010-06-10 19:35 . 2008-04-14 05:59	14592	-c--a-w-	c:\windows\system32\dllcache\kbdhid.sys
2010-06-10 19:35 . 2008-04-14 05:59	14592	----a-w-	c:\windows\system32\drivers\kbdhid.sys
2010-06-10 19:35 . 2008-04-14 06:51	21504	-c--a-w-	c:\windows\system32\dllcache\hidserv.dll
2010-06-10 19:35 . 2008-04-14 06:51	21504	----a-w-	c:\windows\system32\hidserv.dll
2010-06-10 19:35 . 2008-04-13 22:15	60032	-c--a-w-	c:\windows\system32\dllcache\usbaudio.sys
2010-06-10 19:35 . 2008-04-13 22:15	60032	----a-w-	c:\windows\system32\drivers\USBAUDIO.sys
2010-06-10 19:35 . 2008-04-13 22:15	32128	-c--a-w-	c:\windows\system32\dllcache\usbccgp.sys
2010-06-10 19:35 . 2008-04-13 22:15	32128	----a-w-	c:\windows\system32\drivers\usbccgp.sys

.
((((((((((((((((((((((((((((((((((((((((   Find3M výpis   ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2010-07-09 19:11 . 2010-07-08 18:24	620312	----a-w-	c:\windows\system32\drivers\LightLogger.log
2010-07-09 14:16 . 2010-06-04 15:18	--------	d-----w-	c:\program files\Mozilla Thunderbird
2010-07-07 19:47 . 2010-06-10 12:19	9215618	----a-w-	c:\windows\Internet Logs\tvDebug.Zip
2010-06-26 07:15 . 2010-06-05 18:44	--------	d-----w-	c:\program files\QIP
2010-06-09 17:35 . 2010-06-09 17:35	--------	d-----w-	c:\program files\Common Files\snp325
2010-06-09 17:35 . 2010-06-04 03:56	--------	d--h--w-	c:\program files\InstallShield Installation Information
2010-06-09 17:26 . 2010-06-09 17:26	--------	d-----w-	c:\program files\Common Files\snpstd
2010-06-09 14:54 . 2010-06-09 14:54	0	----a-w-	c:\windows\ativpsrm.bin
2010-06-09 14:53 . 2010-06-04 03:56	--------	d-----w-	c:\program files\ATI Technologies
2010-06-09 14:45 . 2010-06-04 04:00	--------	d-----w-	c:\program files\Common Files\ATI Technologies
2010-06-09 14:39 . 2010-06-09 14:39	--------	d-----w-	c:\program files\PC Wizard 2008
2010-06-05 06:51 . 2010-06-05 06:51	56	---ha-w-	c:\windows\system32\ezsidmv.dat
2010-06-05 06:50 . 2010-06-05 06:50	--------	d-----r-	c:\program files\Skype
2010-06-05 06:50 . 2010-06-05 06:50	--------	d-----w-	c:\program files\Common Files\Skype
2010-06-04 19:27 . 2010-06-04 19:27	--------	d-----w-	c:\program files\AGEIA Technologies
2010-06-04 19:27 . 2010-06-04 19:26	--------	d-----w-	c:\program files\Common Files\Wise Installation Wizard
2010-06-04 19:26 . 2010-06-04 19:05	--------	d-----w-	c:\program files\Common Files\BioWare
2010-06-04 19:19 . 2010-06-04 19:05	--------	d-----w-	c:\program files\Dragon age
2010-06-04 19:07 . 2001-10-25 12:00	70272	----a-w-	c:\windows\system32\perfc005.dat
2010-06-04 19:07 . 2001-10-25 12:00	394606	----a-w-	c:\windows\system32\perfh005.dat
2010-06-04 15:07 . 2010-06-04 15:07	--------	d-----w-	c:\program files\DAEMON Tools
2010-06-04 15:06 . 2010-06-04 13:48	--------	d-----w-	c:\program files\DAEMON Tools Toolbar
2010-06-04 14:00 . 2010-06-04 13:59	--------	d-----w-	c:\program files\Fraps
2010-06-04 13:48 . 2010-06-04 13:48	691696	----a-w-	c:\windows\system32\drivers\sptd.sys
2010-06-04 11:36 . 2010-06-04 11:36	--------	d-----w-	c:\program files\!WEWB41
2010-06-04 10:39 . 2010-06-04 10:39	--------	d-----w-	c:\program files\DsNET Corp
2010-06-04 10:36 . 2010-06-04 10:36	--------	d-----w-	c:\program files\The KMPlayer
2010-06-04 05:51 . 2010-06-04 05:51	--------	d-----w-	c:\program files\Secunia
2010-06-04 05:13 . 2010-06-04 05:13	--------	d-----w-	c:\program files\Conduit
2010-06-04 05:13 . 2010-06-04 05:12	--------	d-----w-	c:\program files\ZoneAlarm
2010-06-04 05:12 . 2010-06-04 05:12	--------	d-----w-	c:\program files\CheckPoint
2010-06-04 05:12 . 2010-06-04 05:12	4212	---ha-w-	c:\windows\system32\zllictbl.dat
2010-06-04 05:03 . 2010-06-03 23:49	86327	----a-w-	c:\windows\pchealth\helpctr\OfflineCache\index.dat
2010-06-04 05:03 . 2010-06-03 23:49	2740	----a-w-	c:\windows\pchealth\helpctr\PackageStore\SkuStore.bin
2010-06-04 05:01 . 2010-06-03 23:49	8972	----a-w-	c:\windows\pchealth\helpctr\Config\Cntstore.bin
2010-06-04 04:44 . 2010-06-04 04:44	--------	d-----w-	c:\program files\Realtek AC97
2010-06-04 04:32 . 2010-06-04 04:32	--------	d-----w-	c:\program files\PSPad editor
2010-06-04 04:22 . 2010-06-04 04:22	--------	d-----w-	c:\program files\DIFX
.

((((((((((((((((((((((((((((((((((   Spouštěcí body v registru   )))))))))))))))))))))))))))))))))))))))))))))
.
.
*Poznámka* prázdné záznamy a legitimní výchozí údaje nejsou zobrazeny. 
REGEDIT4

[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\URLSearchHooks]
"{66f2e20d-0da8-4c11-a9c8-dd8477b88acd}"= "c:\program files\ZoneAlarm\tbZone.dll" [2010-05-09 2517088]

[HKEY_CLASSES_ROOT\clsid\{66f2e20d-0da8-4c11-a9c8-dd8477b88acd}]

[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{66f2e20d-0da8-4c11-a9c8-dd8477b88acd}]
2010-05-09 09:50	2517088	----a-w-	c:\program files\ZoneAlarm\tbZone.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
"{66f2e20d-0da8-4c11-a9c8-dd8477b88acd}"= "c:\program files\ZoneAlarm\tbZone.dll" [2010-05-09 2517088]

[HKEY_CLASSES_ROOT\clsid\{66f2e20d-0da8-4c11-a9c8-dd8477b88acd}]

[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Toolbar\Webbrowser]
"{66F2E20D-0DA8-4C11-A9C8-DD8477B88ACD}"= "c:\program files\ZoneAlarm\tbZone.dll" [2010-05-09 2517088]

[HKEY_CLASSES_ROOT\clsid\{66f2e20d-0da8-4c11-a9c8-dd8477b88acd}]

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"QIP2005"="c:\program files\QIP\qip.exe" [2008-07-01 3256320]
"DAEMON Tools"="c:\program files\DAEMON Tools\daemon.exe" [2007-08-16 167368]
"Skype"="c:\program files\Skype\Phone\Skype.exe" [2010-05-13 26192168]
"SpywareTerminatorUpdate"="c:\program files\Spyware Terminator\SpywareTerminatorUpdate.exe" [2010-07-08 3037696]
"Fraps"="c:\program files\FRAPS\FRAPS.EXE" [2009-11-07 2377648]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"EFE23139-BF52-4bfc-BDB2-199FDC1E0C70"="\progra~1\heavenward\lightlogger\lightlogger.exe -hide" [X]
"avast5"="c:\progra~1\ALWILS~1\Avast5\avastUI.exe" [2010-05-06 2815192]
"RTHDCPL"="RTHDCPL.EXE" [2006-08-01 16049664]
"SkyTel"="SkyTel.EXE" [2006-05-16 2879488]
"ZoneAlarm Client"="c:\program files\Zone Labs\ZoneAlarm\zlclient.exe" [2010-05-20 1043968]
"ISW"="c:\program files\CheckPoint\ZAForceField\ForceField.exe" [2010-05-18 730600]
"StartCCC"="c:\program files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" [2010-02-10 61440]
"CameraFixer"="c:\windows\CameraFixer.exe" [2005-12-06 20480]
"FixCamera"="c:\windows\FixCamera.exe" [2007-02-12 20480]
"tsnp325"="c:\windows\tsnp325.exe" [2006-10-10 270336]
"snp325"="c:\windows\vsnp325.exe" [2006-10-10 827392]
"SunJavaUpdateSched"="c:\program files\Common Files\Java\Java Update\jusched.exe" [2010-02-18 248040]
"AdobeCS4ServiceManager"="c:\program files\Common Files\Adobe\CS4ServiceManager\CS4ServiceManager.exe" [2008-08-14 611712]

[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="c:\windows\system32\CTFMON.EXE" [2008-04-14 15360]

c:\documents and settings\Administrator\Nabˇdka Start\Programy\Po spuçtŘnˇ\
NET Traffic Meter (2).lnk - c:\program files\NET Traffic Meter\NET Traffic Meter.exe [2007-1-11 888832]
OpenOffice.org 3.2.lnk - c:\program files\OpenOffice.org 3\program\quickstart.exe [2010-2-16 384512]
Secunia PSI (RC3).lnk - c:\program files\Secunia\PSI (RC3)\psi.exe [2008-6-16 663552]

[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\ZoneLabsFirewall]
"DisableMonitoring"=dword:00000001

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile]
"EnableFirewall"= 0 (0x0)

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\system32\\sessmgr.exe"=
"c:\\Program Files\\NVIDIA Corporation\\NetworkAccessManager\\Apache Group\\Apache2\\bin\\Apache.exe"=
"i:\\Soubory\\QIP\\qip.exe"=
"%windir%\\Network Diagnostic\\xpnetdiag.exe"=
"c:\\totalcmd\\TOTALCMD.EXE"=
"c:\\WINDOWS\\system32\\ZoneLabs\\vsmon.exe"=
"c:\\Program Files\\Dragon age\\bin_ship\\daorigins.exe"=
"c:\\Program Files\\Dragon age\\DAOriginsLauncher.exe"=
"c:\\Program Files\\Dragon age\\bin_ship\\daupdatersvc.service.exe"=
"c:\\Program Files\\Skype\\Plugin Manager\\skypePM.exe"=
"c:\\WINDOWS\\system32\\dpnsvr.exe"=
"c:\\Program Files\\Common Files\\Adobe\\CS4ServiceManager\\CS4ServiceManager.exe"=
"c:\\Program Files\\Opera\\opera.exe"=
"c:\\Program Files\\Skype\\Phone\\Skype.exe"=
"c:\\Program Files\\TeamViewer\\Version5\\TeamViewer.exe"=

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\GloballyOpenPorts\List]
"5353:TCP"= 5353:TCP:Adobe CSI CS4

R1 aswSP;aswSP;c:\windows\system32\drivers\aswSP.sys [4.6.2010 6:19 164048]
R1 sp_rsdrv2;Spyware Terminator Driver 2;c:\windows\system32\drivers\sp_rsdrv2.sys [8.7.2010 19:08 142592]
R2 aswFsBlk;aswFsBlk;c:\windows\system32\drivers\aswFsBlk.sys [4.6.2010 6:19 19024]
R2 ISWKL;ZoneAlarm Toolbar ISWKL;c:\program files\CheckPoint\ZAForceField\ISWKL.sys [18.5.2010 16:01 26352]
R2 IswSvc;ZoneAlarm Toolbar IswSvc;c:\program files\CheckPoint\ZAForceField\ISWSVC.exe [18.5.2010 16:01 493032]
R2 LightLogger;LightLogger driver;c:\windows\system32\drivers\LightLogger.sys [1.7.2010 13:04 11136]
R3 PSI;PSI;c:\windows\system32\drivers\psi_mf.sys [16.6.2008 10:31 7808]
S3 DAUpdaterSvc;Dragon Age: Origins - Content Updater;c:\program files\Dragon age\bin_ship\daupdatersvc.service.exe [4.6.2010 21:19 25832]
S3 SNP325;USB PC Camera (SNPSTD325);c:\windows\system32\drivers\snp325.sys [9.6.2010 19:35 10251904]
S4 sptd;sptd;c:\windows\system32\drivers\sptd.sys [4.6.2010 15:48 691696]
.
.
------- Doplňkový sken -------
.
uStart Page = hxxp://seznam.cz/
IE: E&xportovat do aplikace Microsoft Office Excel - c:\progra~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
IE: {{898EA8C8-E7FF-479B-8935-AEC46303B9E5} - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - c:\program files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
TCP: {77244817-C2F0-413E-B027-466DD45F3857} = 10.0.0.138,81.27.192.97
FF - ProfilePath - c:\documents and settings\Administrator\Data aplikací\Mozilla\Firefox\Profiles\mr2927mc.default\
FF - prefs.js: browser.search.selectedEngine - DAEMON Search
FF - component: c:\documents and settings\Administrator\Data aplikací\Mozilla\Firefox\Profiles\mr2927mc.default\extensions\{66f2e20d-0da8-4c11-a9c8-dd8477b88acd}\components\FFExternalAlert.dll
FF - component: c:\documents and settings\Administrator\Data aplikací\Mozilla\Firefox\Profiles\mr2927mc.default\extensions\{66f2e20d-0da8-4c11-a9c8-dd8477b88acd}\components\RadioWMPCore.dll
FF - component: c:\documents and settings\Administrator\Data aplikací\Mozilla\Firefox\Profiles\mr2927mc.default\extensions\DTToolbar@toolbarnet.com\components\DTToolbarFF.dll
FF - component: c:\program files\CheckPoint\ZAForceField\TrustChecker\components\TrustCheckerMozillaPlugin.dll
FF - component: c:\program files\Mozilla Firefox\extensions\{AB2CE124-6272-4b12-94A9-7303C7397BD1}\components\SkypeFfComponent.dll
FF - plugin: c:\program files\CheckPoint\ZAForceField\TrustChecker\bin\npFFApi.dll
FF - plugin: c:\program files\Java\jre6\bin\new_plugin\npdeployJava1.dll

---- NASTAVENÍ FIREFOXU ----
c:\program files\Mozilla Firefox\greprefs\all.js - pref("ui.use_native_colors", true);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("network.IDN.whitelist.lu", true);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("network.IDN.whitelist.nu", true);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("network.IDN.whitelist.nz", true);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("network.IDN.whitelist.xn--mgberp4a5d4ar", true); 
c:\program files\Mozilla Firefox\greprefs\all.js - pref("network.IDN.whitelist.xn--p1ai", true);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("network.IDN.whitelist.xn--mgbayh7gpa", true);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("network.IDN.whitelist.tel", true);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("network.auth.force-generic-ntlm", false);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("network.proxy.type",                  5);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("dom.ipc.plugins.timeoutSecs", 45);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("svg.smil.enabled", false);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("accelerometer.enabled", true);
c:\program files\Mozilla Firefox\greprefs\security-prefs.js - pref("security.ssl.allow_unrestricted_renego_everywhere__temporarily_available_pref", true);
c:\program files\Mozilla Firefox\greprefs\security-prefs.js - pref("security.ssl.renego_unrestricted_hosts", "");
c:\program files\Mozilla Firefox\greprefs\security-prefs.js - pref("security.ssl.treat_unsafe_negotiation_as_broken", false);
c:\program files\Mozilla Firefox\greprefs\security-prefs.js - pref("security.ssl.require_safe_negotiation",  false);
c:\program files\Mozilla Firefox\defaults\pref\firefox-l10n.js - pref("browser.fixup.alternate.suffix", ".cz");
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("extensions.{972ce4c6-7e08-4474-a285-3208198ce6fd}.name", "chrome://browser/locale/browser.properties");
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("extensions.{972ce4c6-7e08-4474-a285-3208198ce6fd}.description", "chrome://browser/locale/browser.properties");
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("plugins.update.notifyUser", false);
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("dom.ipc.plugins.enabled.nptest.dll", true);
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("dom.ipc.plugins.enabled.npswf32.dll", true);
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("dom.ipc.plugins.enabled.npctrl.dll", true);
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("dom.ipc.plugins.enabled.npqtplugin.dll", true);
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("dom.ipc.plugins.enabled", false);
.
- - - - NEPLATNÉ POLOŽKY ODSTRANĚNÉ Z REGISTRU - - - -

HKCU-Run-AdobeBridge - (no file)
HKLM-Run-SysMon - (no file)



**************************************************************************

catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2010-07-09 21:25
Windows 5.1.2600 Service Pack 3 NTFS

skenování skrytých procesů ...  

skenování skrytých položek 'Po spuštění' ... 

HKLM\Software\Microsoft\Windows\CurrentVersion\Run
  EFE23139-BF52-4bfc-BDB2-199FDC1E0C70 = \progra~1\heavenward\lightlogger\lightlogger.exe -hide?????????????????????????????????????????????????? ????? 

skenování skrytých souborů ...  

sken byl úspešně dokončen
skryté soubory: 0

**************************************************************************
.
--------------------- Knihovny navázané na běžící procesy ---------------------

- - - - - - - > 'winlogon.exe'(768)
c:\windows\system32\Ati2evxx.dll
c:\program files\CheckPoint\ZAForceField\Plugins\ISWSHEX.dll

- - - - - - - > 'lsass.exe'(824)
c:\program files\CheckPoint\ZAForceField\Plugins\ISWSHEX.dll

- - - - - - - > 'explorer.exe'(3640)
c:\program files\CheckPoint\ZAForceField\Plugins\ISWSHEX.dll
.
Celkový čas: 2010-07-09  21:27:45
ComboFix-quarantined-files.txt  2010-07-09 19:27

Před spuštěním: Volných bajtů: 267 837 132 800
Po spuštění: Volných bajtů: 267 806 670 848

- - End Of File - - 3D0999FA9BC140946F73C76941DCAE59
Nahoru
Uživatelský avatar
Rudy
Site Admin
Site Admin
Příspěvky: 119418
Registrován: 30 říj 2003 13:42
Bydliště: Plzeň
Kontaktovat uživatele:
Kontaktovat uživatele Rudy

Re: Prosím o kontrolu, PC občas zamrzne

#4 Příspěvek od Rudy »

2 položky smazány, zbytek logu vypadá čistý. Nastala nějaká změna?
Dotazy a logy vkládejte pouze do vašich threadů. Soukromé zprávy, icq a e-maily neslouží k řešení vašich problémů.

Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.

Navštivte: Obrázek

e-mail: rudy(zavináč)forum.viry.cz

Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!


Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Nahoru
JackXxX
Návštěvník
Návštěvník
Příspěvky: 13
Registrován: 01 črc 2008 21:52

Re: Prosím o kontrolu, PC občas zamrzne

#5 Příspěvek od JackXxX »

Zatím vše jede v pohodě, takže asi vyřešeno :) Děkuji moc
Nahoru
Uživatelský avatar
Rudy
Site Admin
Site Admin
Příspěvky: 119418
Registrován: 30 říj 2003 13:42
Bydliště: Plzeň
Kontaktovat uživatele:
Kontaktovat uživatele Rudy

Re: Prosím o kontrolu, PC občas zamrzne

#6 Příspěvek od Rudy »

Nemáte zač!
Dotazy a logy vkládejte pouze do vašich threadů. Soukromé zprávy, icq a e-maily neslouží k řešení vašich problémů.

Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.

Navštivte: Obrázek

e-mail: rudy(zavináč)forum.viry.cz

Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!


Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Nahoru
Odpovědět

Zpět na „Řešení problémů, logy“