prosim o kontrolu logu, CPU nejde pod 50%

[jdKstrejcek]

Dobry den, po zapnuti PC se mi PC zacinal sekat a ani po nekolikanasobnem resstartu neklesne vytizeni CPU pod 50% i kdyz je prakticky vse vyple



Logfile of random's system information tool 1.08 (written by random/random)
Run by Strejcek at 2010-08-30 14:59:11
Microsoft® Windows Vista™ Business Service Pack 2
System drive C: has 6 GB (3%) free of 228 GB
Total RAM: 3070 MB (59% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 14:59:21, on 30.8.2010
Platform: Windows Vista SP2 (WinNT 6.00.1906)
MSIE: Internet Explorer v8.00 (8.00.6001.18943)
Boot mode: Normal

Running processes:
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Windows\system32\taskeng.exe
C:\Program Files\Windows Defender\MSASCui.exe
C:\Windows\System32\WLTRAY.EXE
C:\Windows\OEM13Mon.exe
C:\Windows\RtHDVCpl.exe
C:\Program Files\Common Files\Java\Java Update\jusched.exe
C:\Program Files\Avira\AntiVir Desktop\avgnt.exe
C:\Program Files\A4Tech\Mouse\Amoumain.exe
C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe
C:\Program Files\Windows Sidebar\sidebar.exe
C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
C:\Program Files\DAEMON\DTLite.exe
C:\Program Files\Crux P2P\Crux P2P.exe
C:\Program Files\Windows Media Player\wmpnscfg.exe
C:\Windows.old\Program Files\OpenOffice.org 3\program\soffice.exe
C:\Windows.old\Program Files\OpenOffice.org 3\program\soffice.bin
C:\Program Files\Mumble\dbus-daemon.exe
C:\Program Files\Common Files\Java\Java Update\jucheck.exe
C:\Program Files\Mumble\mumble.exe
C:\Windows.old\Program Files\CCleaner\CCleaner.exe
C:\Program Files\Skype\Phone\Skype.exe
C:\Program Files\Skype\Plugin Manager\skypePM.exe
C:\Windows\system32\Taskmgr.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Windows\system32\SearchFilterHost.exe
C:\Users\Strejcek\Downloads\RSIT.exe
C:\Program Files\trend micro\Strejcek.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://search.conduit.com?SearchSource= ... =CT1269415
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = socks=
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
R3 - URLSearchHook: Download Energy Toolbar - {ad708c09-d51b-45b3-9d28-4eba2681febf} - C:\Program Files\Download_Energy\tbDown.dll
O1 - Hosts: 86.127.71.45 L2authd.lineage2.com
O2 - BHO: Shareaza Web Download Hook - {0EEDB912-C5FA-486F-8334-57288578C627} - C:\Program Files\Crux P2P\RazaWebHook.dll
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll
O2 - BHO: Download Energy Toolbar - {ad708c09-d51b-45b3-9d28-4eba2681febf} - C:\Program Files\Download_Energy\tbDown.dll
O2 - BHO: SkypeIEPluginBHO - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.5.5126.1836\swg.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O3 - Toolbar: DAEMON Tools Toolbar - {32099AAC-C132-4136-9E9A-4E364A424E17} - C:\Program Files\DAEMON Tools Toolbar\DTToolbar.dll
O3 - Toolbar: Download Energy Toolbar - {ad708c09-d51b-45b3-9d28-4eba2681febf} - C:\Program Files\Download_Energy\tbDown.dll
O3 - Toolbar: Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll
O4 - HKLM\..\Run: [Windows Defender] %ProgramFiles%\Windows Defender\MSASCui.exe -hide
O4 - HKLM\..\Run: [Broadcom Wireless Manager UI] C:\Windows\system32\WLTRAY.exe
O4 - HKLM\..\Run: [OEM13Mon.exe] C:\Windows\OEM13Mon.exe
O4 - HKLM\..\Run: [RtHDVCpl] RtHDVCpl.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Common Files\Java\Java Update\jusched.exe"
O4 - HKLM\..\Run: [avgnt] "C:\Program Files\Avira\AntiVir Desktop\avgnt.exe" /min
O4 - HKLM\..\Run: [NVHotkey] rundll32.exe C:\Windows\system32\nvHotkey.dll,Start
O4 - HKLM\..\Run: [WheelMouse] C:\Program Files\A4Tech\Mouse\Amoumain.exe
O4 - HKLM\..\Run: [LogMeIn Hamachi Ui] "C:\Program Files\LogMeIn Hamachi\hamachi-2-ui.exe" --auto-start
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKCU\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun
O4 - HKCU\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter
O4 - HKCU\..\Run: [Skype] "C:\Program Files\Skype\Phone\Skype.exe" /nosplash /minimized
O4 - HKCU\..\Run: [swg] "C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe"
O4 - HKCU\..\Run: [DAEMON Tools Lite] "C:\Program Files\DAEMON\DTLite.exe" -autorun
O4 - HKCU\..\Run: [Crux P2P] "C:\Program Files\Crux P2P\Crux P2P.exe" -tray
O4 - HKCU\..\Run: [WMPNSCFG] C:\Program Files\Windows Media Player\WMPNSCFG.exe
O4 - Startup: OpenOffice.org 3.0.lnk = C:\Windows.old\Program Files\OpenOffice.org 3\program\quickstart.exe
O4 - Global Startup: WeGame.lnk = C:\Program Files\WeGame\wegame.exe
O8 - Extra context menu item: Download All by ASUS Download - C:\Program Files\ASUS\WL-500gP V2 Wireless Router Utilities\ASDownloadAll.htm
O8 - Extra context menu item: Download using ASUS Download - C:\Program Files\ASUS\WL-500gP V2 Wireless Router Utilities\ASDownload.htm
O8 - Extra context menu item: Download with &Shareaza - res://C:\Program Files\Crux P2P\RazaWebHook.dll/3000
O8 - Extra context menu item: WikiKomentáře Google... - res://C:\Program Files\Google\Google Toolbar\Component\GoogleToolbarDynamic_mui_en_89D8574934B26AC4.dll/cmsidewiki.html
O9 - Extra button: Skype add-on for Internet Explorer - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O9 - Extra 'Tools' menuitem: Skype add-on for Internet Explorer - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O18 - Protocol: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O22 - SharedTaskScheduler: Component Categories cache daemon - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\Windows\system32\browseui.dll
O23 - Service: Andrea RT Filters Service (AERTFilters) - Andrea Electronics Corporation - C:\Windows\system32\AERTSrv.exe
O23 - Service: Avira AntiVir Scheduler (AntiVirSchedulerService) - Avira GmbH - C:\Program Files\Avira\AntiVir Desktop\sched.exe
O23 - Service: Avira AntiVir Guard (AntiVirService) - Avira GmbH - C:\Program Files\Avira\AntiVir Desktop\avguard.exe
O23 - Service: Bluetooth Feature Support (BthFilterHelper) - CSR, plc - C:\Program Files\CSR\Vista Profile Pack\BthFilterHelper.exe
O23 - Service: Služba Google Update (gupdate1ca713161a85b40) (gupdate1ca713161a85b40) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: Google Software Updater (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: LogMeIn Hamachi 2.0 Tunneling Engine (Hamachi2Svc) - LogMeIn Inc. - C:\Program Files\LogMeIn Hamachi\hamachi-2.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: NVIDIA Display Driver Service (nvsvc) - NVIDIA Corporation - C:\Windows\system32\nvvsvc.exe
O23 - Service: O2Micro Flash Memory Card Service (o2flash) - O2Micro International - C:\Program Files\O2Micro Flash Memory Card Driver\o2flash.exe
O23 - Service: PnkBstrA - Unknown owner - C:\Windows\system32\PnkBstrA.exe
O23 - Service: Steam Client Service - Valve Corporation - C:\Program Files\Common Files\Steam\SteamService.exe
O23 - Service: Dell Wireless WLAN Tray Service (wltrysvc) - Unknown owner - C:\Windows\System32\WLTRYSVC.EXE

--
End of file - 8762 bytes

======Scheduled tasks folder======

C:\Windows\tasks\COMODO System Cleaner Update.job
C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
C:\Windows\tasks\GoogleUpdateTaskMachineUA.job
C:\Windows\tasks\Norton Security Scan for Strejcek.job
C:\Windows\tasks\SLOW-PCfighter-Strejcek-Startup.job

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{0EEDB912-C5FA-486F-8334-57288578C627}]
Shareaza Web Download Hook - C:\Program Files\Crux P2P\RazaWebHook.dll [2009-04-28 49152]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
Adobe PDF Link Helper - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2009-12-21 75200]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AA58ED58-01DD-4d91-8333-CF10577473F7}]
Google Toolbar Helper - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll [2010-07-13 278192]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{ad708c09-d51b-45b3-9d28-4eba2681febf}]
Download Energy Toolbar - C:\Program Files\Download_Energy\tbDown.dll [2010-02-22 2353176]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}]
Skype add-on for Internet Explorer - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll [2010-02-08 804136]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AF69DE43-7D58-4638-B6FA-CE66B5AD205D}]
Google Toolbar Notifier BHO - C:\Program Files\Google\GoogleToolbarNotifier\5.5.5126.1836\swg.dll [2010-07-01 814648]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre6\bin\jp2ssv.dll [2010-05-03 41760]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{32099AAC-C132-4136-9E9A-4E364A424E17} - DAEMON Tools Toolbar - C:\Program Files\DAEMON Tools Toolbar\DTToolbar.dll [2010-03-25 968000]
{ad708c09-d51b-45b3-9d28-4eba2681febf} - Download Energy Toolbar - C:\Program Files\Download_Energy\tbDown.dll [2010-02-22 2353176]
{2318C2B1-4965-11d4-9B18-009027A5CD4F} - Google Toolbar - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll [2010-07-13 278192]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"Windows Defender"=C:\Program Files\Windows Defender\MSASCui.exe [2008-01-21 1008184]
"Broadcom Wireless Manager UI"=C:\Windows\system32\WLTRAY.exe [2007-12-08 3444736]
"OEM13Mon.exe"=C:\Windows\OEM13Mon.exe [2008-01-08 36864]
"RtHDVCpl"=C:\Windows\RtHDVCpl.exe [2008-02-04 4907008]
"SunJavaUpdateSched"=C:\Program Files\Common Files\Java\Java Update\jusched.exe [2010-02-18 248040]
"avgnt"=C:\Program Files\Avira\AntiVir Desktop\avgnt.exe [2009-03-02 209153]
"NVHotkey"=C:\Windows\system32\nvHotkey.dll [2009-11-20 87144]
"WheelMouse"=C:\Program Files\A4Tech\Mouse\Amoumain.exe [2010-04-15 204800]
"LogMeIn Hamachi Ui"=C:\Program Files\LogMeIn Hamachi\hamachi-2-ui.exe [2010-03-30 1820040]
"Adobe Reader Speed Launcher"=C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe [2009-12-22 35760]
"Adobe ARM"=C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2010-06-09 976832]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"Sidebar"=C:\Program Files\Windows Sidebar\sidebar.exe [2009-04-11 1233920]
"WindowsWelcomeCenter"=oobefldr.dll,ShowWelcomeCenter []
"Skype"=C:\Program Files\Skype\Phone\Skype.exe [2010-03-09 26100520]
"swg"=C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe [2009-12-13 39408]
"DAEMON Tools Lite"=C:\Program Files\DAEMON\DTLite.exe [2010-04-01 357696]
"Crux P2P"=C:\Program Files\Crux P2P\Crux P2P.exe [2010-05-17 5794304]
"WMPNSCFG"=C:\Program Files\Windows Media Player\WMPNSCFG.exe [2008-01-21 202240]

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup
WeGame.lnk - C:\Program Files\WeGame\wegame.exe

C:\Users\Strejcek\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
OpenOffice.org 3.0.lnk - C:\Windows.old\Program Files\OpenOffice.org 3\program\quickstart.exe

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{AEB6717E-7E19-11d0-97EE-00C04FD91972}"= []

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Hamachi2Svc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfPf]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfRd]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfUsbccidDriver]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"EnableLUA"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1
"EnableUIADesktopToggle"=0

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDrives"=0

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"BindDirectlyToPropertySetStorage"=0
"NoDrives"=0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1

======List of files/folders created in the last 1 months======

2010-08-30 14:59:11 ----D---- C:\rsit
2010-08-29 18:12:12 ----A---- C:\Windows\game.ini
2010-08-29 17:36:40 ----SHD---- C:\Windows\ftpcache
2010-08-29 17:15:03 ----D---- C:\Program Files\LineageC4
2010-08-26 20:05:19 ----D---- C:\Users\Strejcek\AppData\Roaming\vlc
2010-08-26 20:04:23 ----D---- C:\Program Files\VideoLAN
2010-08-26 18:35:13 ----D---- C:\Program Files\Phenomedia AG
2010-08-26 18:35:05 ----A---- C:\Windows\IsUn0407.exe
2010-08-26 18:22:55 ----D---- C:\ProgramData\DivX
2010-08-13 23:20:05 ----A---- C:\Windows\AviSplitter.INI
2010-08-13 22:20:50 ----A---- C:\Windows\system32\mshtml.dll
2010-08-13 22:20:50 ----A---- C:\Windows\system32\iertutil.dll
2010-08-13 22:20:48 ----A---- C:\Windows\system32\ieframe.dll
2010-08-13 22:20:47 ----A---- C:\Windows\system32\wininet.dll
2010-08-13 22:20:47 ----A---- C:\Windows\system32\urlmon.dll
2010-08-13 22:20:47 ----A---- C:\Windows\system32\occache.dll
2010-08-13 22:20:47 ----A---- C:\Windows\system32\mstime.dll
2010-08-13 22:20:47 ----A---- C:\Windows\system32\msfeeds.dll
2010-08-13 22:20:47 ----A---- C:\Windows\system32\ieui.dll
2010-08-13 22:20:47 ----A---- C:\Windows\system32\iepeers.dll
2010-08-13 22:20:47 ----A---- C:\Windows\system32\iedkcs32.dll
2010-08-13 22:20:47 ----A---- C:\Windows\system32\ie4uinit.exe
2010-08-13 22:20:46 ----A---- C:\Windows\system32\msfeedssync.exe
2010-08-13 22:20:46 ----A---- C:\Windows\system32\msfeedsbs.dll
2010-08-13 22:20:46 ----A---- C:\Windows\system32\jsproxy.dll
2010-08-13 22:20:46 ----A---- C:\Windows\system32\ieUnatt.exe
2010-08-13 22:20:46 ----A---- C:\Windows\system32\iesysprep.dll
2010-08-13 22:20:46 ----A---- C:\Windows\system32\iesetup.dll
2010-08-13 22:20:46 ----A---- C:\Windows\system32\iernonce.dll
2010-08-13 22:20:41 ----A---- C:\Windows\system32\iccvid.dll
2010-08-13 22:20:39 ----A---- C:\Windows\system32\schannel.dll
2010-08-13 22:20:32 ----A---- C:\Windows\system32\win32k.sys
2010-08-13 22:20:29 ----A---- C:\Windows\system32\rtutils.dll
2010-08-13 22:20:10 ----A---- C:\Windows\system32\ntkrnlpa.exe
2010-08-13 22:20:09 ----A---- C:\Windows\system32\ntoskrnl.exe
2010-08-13 22:20:04 ----A---- C:\Windows\system32\msxml3.dll
2010-08-13 22:20:03 ----A---- C:\Windows\system32\drivers\srv2.sys
2010-08-13 22:20:03 ----A---- C:\Windows\system32\drivers\srv.sys
2010-08-13 22:20:01 ----A---- C:\Windows\system32\drivers\tcpip.sys
2010-08-08 12:35:20 ----D---- C:\Users\Strejcek\AppData\Roaming\TS3Client
2010-08-08 12:35:02 ----D---- C:\Program Files\TeamSpeak 3 Client
2010-08-07 12:52:20 ----D---- C:\Users\Strejcek\AppData\Roaming\Ventrilo
2010-08-07 12:51:36 ----D---- C:\Program Files\Ventrilo
2010-08-03 07:41:00 ----A---- C:\Windows\system32\shell32.dll
2010-08-01 13:11:05 ----A---- C:\Windows\system32\CmdLineExt03.dll
2010-08-01 13:03:15 ----D---- C:\Program Files\LucasArts
2010-08-01 11:52:05 ----D---- C:\ProgramData\Synetic
2010-08-01 11:43:21 ----D---- C:\Program Files\City Interactive

======List of files/folders modified in the last 1 months======

2010-08-30 14:59:21 ----D---- C:\Program Files\trend micro
2010-08-30 14:59:17 ----D---- C:\Windows\temp
2010-08-30 14:54:26 ----D---- C:\Users\Strejcek\AppData\Roaming\Skype
2010-08-30 14:52:30 ----SHD---- C:\Windows\Installer
2010-08-30 14:52:19 ----SHD---- C:\System Volume Information
2010-08-30 14:47:34 ----A---- C:\Windows\system32\PnkBstrB.exe
2010-08-30 14:39:53 ----D---- C:\Users\Strejcek\AppData\Roaming\Mumble
2010-08-30 12:42:00 ----D---- C:\Windows
2010-08-30 12:40:11 ----D---- C:\Users\Strejcek\AppData\Roaming\skypePM
2010-08-30 12:39:09 ----D---- C:\Windows\Prefetch
2010-08-29 19:26:43 ----A---- C:\Windows\system32\PnkBstrA.exe
2010-08-29 19:19:20 ----HD---- C:\Program Files\InstallShield Installation Information
2010-08-29 19:19:17 ----D---- C:\Config.Msi
2010-08-29 18:13:20 ----RSD---- C:\Windows\assembly
2010-08-29 17:39:19 ----D---- C:\Program Files\Activision
2010-08-29 17:15:03 ----RD---- C:\Program Files
2010-08-26 23:43:24 ----D---- C:\Windows\system32\drivers\etc
2010-08-26 22:21:11 ----D---- C:\Windows\Debug
2010-08-26 18:22:55 ----D---- C:\ProgramData
2010-08-26 14:22:03 ----D---- C:\Program Files\Common Files\Symantec Shared
2010-08-14 03:35:01 ----D---- C:\Windows\winsxs
2010-08-14 03:32:54 ----D---- C:\Windows\Microsoft.NET
2010-08-14 03:20:49 ----D---- C:\Windows\system32\migration
2010-08-14 03:20:49 ----D---- C:\Windows\System32
2010-08-14 03:20:49 ----D---- C:\Program Files\Internet Explorer
2010-08-14 03:20:48 ----D---- C:\Windows\system32\drivers
2010-08-14 03:20:48 ----D---- C:\Program Files\Movie Maker
2010-08-14 03:01:51 ----D---- C:\Program Files\Movie Maker 2.6
2010-08-14 03:01:24 ----D---- C:\Windows\system32\catroot
2010-08-14 03:00:59 ----D---- C:\Program Files\Windows Mail
2010-08-13 22:19:46 ----D---- C:\Windows\system32\catroot2
2010-08-07 12:51:02 ----D---- C:\Program Files\Common Files\Wise Installation Wizard
2010-08-04 12:11:26 ----D---- C:\Program Files\WeGame
2010-08-03 20:09:31 ----A---- C:\Windows\system32\mrt.exe
2010-08-02 22:20:43 ----D---- C:\Program Files\Electronic Arts
2010-08-01 13:15:53 ----D---- C:\Program Files\GameSpy Arcade

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 sptd;sptd; C:\Windows\System32\Drivers\sptd.sys [2010-07-28 691696]
R1 Amfilter;A4Tech Mouse Filter Driver; C:\Windows\system32\DRIVERS\Amfilter.sys [2010-04-15 9216]
R1 avgio;avgio; \??\C:\Program Files\Avira\AntiVir Desktop\avgio.sys [2009-02-13 11608]
R1 avipbb;avipbb; C:\Windows\system32\DRIVERS\avipbb.sys [2009-03-30 96104]
R1 ssmdrv;ssmdrv; C:\Windows\system32\DRIVERS\ssmdrv.sys [2009-05-11 28520]
R2 avgntflt;avgntflt; C:\Windows\system32\DRIVERS\avgntflt.sys [2009-12-13 56816]
R3 BCM43XX;Ovladač bezdrátové karty Dell WLAN; C:\Windows\system32\DRIVERS\bcmwl6.sys [2007-12-06 1044984]
R3 BthEnum;Služba Bluetooth Enumerator; C:\Windows\system32\DRIVERS\BthEnum.sys [2009-04-11 22528]
R3 BTHFILT;Bluetooth Command Filter; C:\Windows\system32\DRIVERS\BthFilt.sys [2006-11-07 13824]
R3 BthPan;Zařízení Bluetooth (síť PAN); C:\Windows\system32\DRIVERS\bthpan.sys [2008-01-21 92160]
R3 BTHUSB;Ovladač rozhraní USB radiostanice Bluetooth; C:\Windows\System32\Drivers\BTHUSB.sys [2009-04-11 29696]
R3 hamachi;Hamachi Network Interface; C:\Windows\system32\DRIVERS\hamachi.sys [2010-02-03 26176]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\Windows\system32\drivers\RTKVHDA.sys [2008-02-04 2054872]
R3 NCHSSVAD;SoundTap Recorder (32 Bit); C:\Windows\system32\drivers\nchssvad.sys [2010-03-04 33848]
R3 nvlddmkm;nvlddmkm; C:\Windows\system32\DRIVERS\nvlddmkm.sys [2009-11-21 11515752]
R3 O2MDRDR;O2MDRDR; C:\Windows\system32\DRIVERS\o2media.sys [2008-02-14 48472]
R3 O2SDRDR;O2SDRDR; C:\Windows\system32\DRIVERS\o2sd.sys [2008-02-14 43480]
R3 OEM13Vfx;Creative Camera OEM013 Video VFX Driver; C:\Windows\system32\DRIVERS\OEM13Vfx.sys [2007-03-05 7424]
R3 OEM13Vid;Creative Camera OEM013 Driver; C:\Windows\system32\DRIVERS\OEM13Vid.sys [2008-01-08 235200]
R3 RFCOMM;Zařízení Bluetooth (RFCOMM protokol TDI); C:\Windows\system32\DRIVERS\rfcomm.sys [2009-04-11 148992]
R3 RTL8169;Realtek 8169 NT Driver; C:\Windows\system32\DRIVERS\Rtlh86.sys [2008-02-14 106496]
S0 CFRMD;CFRMD; C:\Windows\System32\drivers\CFRMD.sys []
S1 OMCI;OMCI; \??\C:\Windows\SYSTEM32\DRIVERS\OMCI.SYS []
S3 a4lsfs3t;a4lsfs3t; C:\Windows\system32\drivers\a4lsfs3t.sys []
S3 Amusbprt;A4Tech HID-compliant Mouse Driver; C:\Windows\system32\DRIVERS\Amusbprt.sys [2010-04-15 14336]
S3 BCM42RLY;BCM42RLY; C:\Windows\system32\drivers\BCM42RLY.sys []
S3 BTHPORT;Ovladač portu Bluetooth; C:\Windows\System32\Drivers\BTHport.sys [2009-04-11 507904]
S3 catchme;catchme; \??\C:\Users\Strejcek\AppData\Local\Temp\catchme.sys []
S3 CSRBC;CSRBC.Sys CSR test driver; C:\Windows\System32\Drivers\csrbcxp.sys [2007-01-16 31744]
S3 drmkaud;Dekodér zvuků DRM jádra společnosti Microsoft; C:\Windows\system32\drivers\drmkaud.sys [2008-01-21 5632]
S3 HdAudAddService;Ovladač funkce Microsoft 1.1 UAA pro službu zvuku High Definition Audio; C:\Windows\system32\drivers\HdAudio.sys [2006-11-02 235520]
S3 MSKSSRV;Server proxy služby datových proudů Microsoft; C:\Windows\system32\drivers\MSKSSRV.sys [2008-01-21 8192]
S3 MSPCLOCK;Server proxy hodin datových proudů Microsoft; C:\Windows\system32\drivers\MSPCLOCK.sys [2008-01-21 5888]
S3 MSPQM;Server proxy správce kvality datových proudů Microsoft; C:\Windows\system32\drivers\MSPQM.sys [2008-01-21 5504]
S3 MSTEE;Konvertor jímka-jímka typu T datových proudů Microsoft; C:\Windows\system32\drivers\MSTEE.sys [2008-01-21 6016]
S3 sdbus;sdbus; C:\Windows\system32\DRIVERS\sdbus.sys [2008-01-21 88576]
S3 usbvideo;Zobrazovací zařízení USB (WDM); C:\Windows\System32\Drivers\usbvideo.sys [2008-01-21 134016]
S3 WUDFRd;WUDFRd; C:\Windows\system32\DRIVERS\WUDFRd.sys [2008-01-21 83328]
S4 ErrDev;Microsoft Hardware Error Device Driver; C:\Windows\system32\drivers\errdev.sys [2008-01-21 6656]
S4 MegaSR;MegaSR; C:\Windows\system32\drivers\megasr.sys [2008-01-21 386616]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 AERTFilters;Andrea RT Filters Service; C:\Windows\system32\AERTSrv.exe [2008-02-04 77824]
R2 AntiVirService;Avira AntiVir Guard; C:\Program Files\Avira\AntiVir Desktop\avguard.exe [2009-07-21 185089]
R2 AntiVirSchedulerService;Avira AntiVir Scheduler; C:\Program Files\Avira\AntiVir Desktop\sched.exe [2009-05-13 108289]
R2 BthFilterHelper;Bluetooth Feature Support; C:\Program Files\CSR\Vista Profile Pack\BthFilterHelper.exe [2006-11-07 127488]
R2 BthServ;@%SystemRoot%\System32\bthserv.dll,-101; C:\Windows\system32\svchost.exe [2008-01-21 21504]
R2 Hamachi2Svc;LogMeIn Hamachi 2.0 Tunneling Engine; C:\Program Files\LogMeIn Hamachi\hamachi-2.exe [2010-03-30 1107336]
R2 nvsvc;NVIDIA Display Driver Service; C:\Windows\system32\nvvsvc.exe [2009-11-20 122984]
R2 o2flash;O2Micro Flash Memory Card Service; C:\Program Files\O2Micro Flash Memory Card Driver\o2flash.exe [2008-02-14 65536]
R2 PnkBstrA;PnkBstrA; C:\Windows\system32\PnkBstrA.exe [2010-08-29 75064]
R2 wltrysvc;Dell Wireless WLAN Tray Service; C:\Windows\System32\WLTRYSVC.EXE [2007-12-08 24064]
S2 gupdate1ca713161a85b40;Služba Google Update (gupdate1ca713161a85b40); C:\Program Files\Google\Update\GoogleUpdate.exe [2009-11-29 133104]
S3 FontCache;@%systemroot%\system32\FntCache.dll,-100; C:\Windows\system32\svchost.exe [2008-01-21 21504]
S3 gusvc;Google Software Updater; C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe [2009-12-13 182768]
S3 IDriverT;InstallDriver Table Manager; C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe [2005-04-04 69632]
S3 Steam Client Service;Steam Client Service; C:\Program Files\Common Files\Steam\SteamService.exe [2010-07-20 407336]

-----------------EOF-----------------

[jdKstrejcek]

po delsim zkoumani jsem prisel na to ze mi asi nejvice v tom dela bordel "svchost.exe" a netusim co stim

[motji]

Dobrý večer

Stáhněte na plochu, ukončete všechna aktivní okna a spusťte ComboFix - http://download.bleepingcomputer.com/sUBs/ComboFix.exe


- ComboFix je třeba spustit pod účtem s právy administrátora

- Před použitím vypněte všechny rezidentní bezpečnostní programy - antiviry, firewally, antispywary

- Po spuštění se zobrazí podmínky užití, potvrďte je stiskem tlačítka Ano

- Dále postupujte dle pokynů, během aplikování ComboFixu neklikejte do zobrazujícího se okna

- Po dokončení skenování, trvajícího maximálně 10 minut, by měl program vytvořit log - C:\ComboFix.txt, zkopírujte celý jeho obsah sem

[jdKstrejcek]

mohu to udelat takto?.. je to velice dlouhe a nechce se mi to rozdelovat..


http://leteckaposta.cz/466058445

[motji]

Pokud nemáte, přesuňte Combofix na plochu
-otevřete si Poznámkový blok
-Do něj zkopírujte text z tohoto okénka

Kód: Vybrat vše

Driver::
CFRMD

File::
c:\windows\System32\drivers\CFRMD.sys

-uložte Vámi vytvořený TXT soubor jako CFScript.txt na plochu
-po uložení uchopte vámi vytvořený skript levým myšítkem a -přesuňte ho nad ikonu Combofixu, kde ho upustíte:




-po aplikaci na Vás vypadne další log,vložte ho sem

Upozornění : může se stát, že po aplikaci skriptu a restartu Windows nenaběhnou, v tom případě znovu restartujte a přitom mačkejte F8, pak zvolte Poslední známou funkční konfiguraci

[jdKstrejcek]

zde je log....PC po dokonceni ComboFix...mno jak to popsat...vic retardovanejsi PC jsem nevidel..tak zasekany PC sem este nevidel, na cokoliv jsem klikl hodilo ze program prestal pracovat, prakticky poslat log je nadlidska prace...


ComboFix 10-08-29.04 - Strejcek 30.08.2010 23:46:22.5.2 - x86
Microsoft® Windows Vista™ Business 6.0.6002.2.1250.420.1029.18.3070.1568 [GMT 2:00]
Spuštěný z: c:\users\Strejcek\Desktop\ComboFix.exe
Použité ovládací přepínače :: c:\users\Strejcek\Desktop\CFScript.txt
SP: Windows Defender *enabled* (Updated) {D68DDC3A-831F-4FAE-9E44-DA132C1ACF46}
* Vytvořen nový Bod Obnovení

FILE ::
"c:\windows\System32\drivers\CFRMD.sys"
.

((((((((((((((((((((((((((((((((((((((( Ostatní výmazy )))))))))))))))))))))))))))))))))))))))))))))))))
.

.
((((((((((((((((((((((((((((((((((((((( Ovladače/Služby )))))))))))))))))))))))))))))))))))))))))))))))))
.

-------\Service_CFRMD


((((((((((((((((((((((((( Soubory vytvořené od 2010-07-28 do 2010-08-30 )))))))))))))))))))))))))))))))
.

2010-08-30 21:58 . 2010-08-30 22:04 -------- d-----w- c:\users\Strejcek\AppData\Local\temp
2010-08-30 21:58 . 2010-08-30 21:58 -------- d-----w- c:\users\Public\AppData\Local\temp
2010-08-30 21:58 . 2010-08-30 21:58 -------- d-----w- c:\users\Default\AppData\Local\temp
2010-08-30 17:12 . 2010-08-30 17:12 -------- d-----w- c:\program files\Activision
2010-08-30 13:39 . 2010-08-30 13:39 -------- d-----w- c:\program files\Common Files\Windows Live
2010-08-30 13:37 . 2009-10-09 21:56 2048 ----a-w- c:\windows\system32\winrsmgr.dll
2010-08-30 13:31 . 2009-06-03 23:56 675152 ----a-w- c:\windows\system32\gpprefcl.dll
2010-08-30 13:23 . 2010-08-30 13:23 -------- d-----w- c:\program files\Microsoft.NET
2010-08-30 12:59 . 2010-08-30 12:59 -------- d-----w- C:\rsit
2010-08-29 15:36 . 2010-08-29 15:36 -------- d-sh--w- c:\windows\ftpcache
2010-08-29 15:15 . 2010-08-30 11:17 -------- d-----w- c:\program files\LineageC4
2010-08-26 18:05 . 2010-08-26 18:08 -------- d-----w- c:\users\Strejcek\AppData\Roaming\vlc
2010-08-26 18:04 . 2010-08-26 18:04 -------- d-----w- c:\program files\VideoLAN
2010-08-26 16:35 . 2010-08-26 16:35 -------- d-----w- c:\program files\Phenomedia AG
2010-08-26 16:35 . 1998-11-17 11:44 328704 ----a-w- c:\windows\IsUn0407.exe
2010-08-26 16:22 . 2010-08-26 16:34 -------- d-----w- c:\programdata\DivX
2010-08-08 10:35 . 2010-08-08 11:43 -------- d-----w- c:\users\Strejcek\AppData\Roaming\TS3Client
2010-08-08 10:35 . 2010-08-26 08:28 -------- d-----w- c:\program files\TeamSpeak 3 Client
2010-08-07 10:52 . 2010-08-07 10:53 -------- d-----w- c:\users\Strejcek\AppData\Roaming\Ventrilo
2010-08-07 10:51 . 2010-08-07 10:51 -------- d-----w- c:\program files\Ventrilo
2010-08-01 11:11 . 2010-08-01 11:11 43520 ----a-w- c:\windows\system32\CmdLineExt03.dll
2010-08-01 11:03 . 2010-08-01 11:16 -------- d-----w- c:\program files\LucasArts
2010-08-01 09:52 . 2010-08-01 09:52 -------- d-----w- c:\programdata\Synetic
2010-08-01 09:43 . 2010-08-01 09:43 -------- d-----w- c:\program files\City Interactive

.
(((((((((((((((((((((((((((((((((((((((( Find3M výpis ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2010-08-30 22:05 . 2009-12-13 13:44 -------- d-----w- c:\users\Strejcek\AppData\Roaming\Skype
2010-08-30 22:02 . 2009-11-14 18:26 69448 ----a-w- c:\programdata\nvModes.dat
2010-08-30 21:59 . 2010-02-24 16:50 1076 ----a-w- c:\windows\bthservsdp.dat
2010-08-30 21:24 . 2010-04-04 19:36 -------- d-----w- c:\users\Strejcek\AppData\Roaming\Mumble
2010-08-30 21:23 . 2010-02-09 18:24 139104 ----a-w- c:\windows\system32\drivers\PnkBstrK.sys
2010-08-30 21:23 . 2010-02-09 18:17 224960 ----a-w- c:\windows\system32\PnkBstrB.exe
2010-08-30 20:17 . 2009-12-13 13:46 -------- d-----w- c:\users\Strejcek\AppData\Roaming\skypePM
2010-08-30 19:05 . 2010-02-09 18:16 75064 ----a-w- c:\windows\system32\PnkBstrA.exe
2010-08-30 19:03 . 2009-11-14 18:03 -------- d--h--w- c:\program files\InstallShield Installation Information
2010-08-30 18:37 . 2010-02-09 18:34 22328 ----a-w- c:\users\Strejcek\AppData\Roaming\PnkBstrK.sys
2010-08-30 13:30 . 2009-11-15 02:18 607464 ----a-w- c:\windows\system32\perfh005.dat
2010-08-30 13:30 . 2009-11-15 02:18 118096 ----a-w- c:\windows\system32\perfc005.dat
2010-08-30 12:59 . 2010-07-24 18:35 -------- d-----w- c:\program files\trend micro
2010-08-30 12:23 . 2009-11-14 17:56 680 ----a-w- c:\users\Strejcek\AppData\Local\d3d9caps.dat
2010-08-30 10:39 . 2009-11-14 17:57 49600 ----a-w- c:\users\Strejcek\AppData\Local\GDIPFONTCACHEV1.DAT
2010-08-26 12:22 . 2009-12-13 17:00 -------- d-----w- c:\program files\Common Files\Symantec Shared
2010-08-14 01:01 . 2010-06-13 09:46 -------- d-----w- c:\program files\Movie Maker 2.6
2010-08-14 01:00 . 2006-11-02 11:18 -------- d-----w- c:\program files\Windows Mail
2010-08-07 10:51 . 2009-11-14 18:21 -------- d-----w- c:\program files\Common Files\Wise Installation Wizard
2010-08-04 10:11 . 2010-06-12 16:08 -------- d-----w- c:\program files\WeGame
2010-08-02 20:20 . 2010-03-22 13:47 -------- d-----w- c:\program files\Electronic Arts
2010-08-01 11:15 . 2010-06-01 16:30 -------- d-----w- c:\program files\GameSpy Arcade
2010-07-28 09:14 . 2010-03-19 13:46 -------- d-----w- c:\program files\NVIDIA Corporation
2010-07-28 08:34 . 2010-07-28 08:33 -------- d-----w- c:\program files\DAEMON
2010-07-28 08:34 . 2010-02-26 08:27 -------- d-----w- c:\program files\DAEMON Tools Toolbar
2010-07-28 08:33 . 2010-02-26 08:26 691696 ----a-w- c:\windows\system32\drivers\sptd.sys
2010-07-28 00:26 . 2010-03-05 07:24 -------- d-----w- c:\program files\Ubisoft
2010-07-27 23:55 . 2010-07-27 23:56 209920 ----a-w- c:\windows\iun3401.exe
2010-07-25 17:56 . 2010-07-25 12:30 -------- d-sh--r- c:\users\Strejcek\AppData\Roaming\install
2010-07-25 13:13 . 2010-07-25 13:13 56 ---ha-w- c:\windows\system32\ezsidmv.dat
2010-07-22 22:23 . 2009-11-14 18:29 -------- d-----w- c:\program files\Common Files\Steam
2010-07-15 11:24 . 2010-07-15 11:24 -------- d-----w- c:\program files\The KMPlayer
2010-07-09 15:15 . 2010-07-09 15:15 -------- d-----w- c:\program files\Common Files\Adobe
2010-07-09 09:10 . 2010-07-09 09:10 -------- d-----w- c:\program files\Deer Drive
2010-07-02 10:13 . 2010-06-15 14:21 -------- d-----w- c:\program files\SGCSim.com
2010-06-27 09:05 . 2010-06-27 09:05 444952 ----a-w- c:\windows\system32\wrap_oal.dll
2010-06-27 09:05 . 2010-06-27 09:05 109080 ----a-w- c:\windows\system32\OpenAL32.dll
2010-06-26 06:05 . 2010-08-13 20:20 916480 ----a-w- c:\windows\system32\wininet.dll
2010-06-26 06:02 . 2010-08-13 20:20 71680 ----a-w- c:\windows\system32\iesetup.dll
2010-06-26 06:02 . 2010-08-13 20:20 109056 ----a-w- c:\windows\system32\iesysprep.dll
2010-06-26 04:25 . 2010-08-13 20:20 133632 ----a-w- c:\windows\system32\ieUnatt.exe
2010-06-21 13:37 . 2010-08-13 20:20 2037760 ----a-w- c:\windows\system32\win32k.sys
2010-06-18 17:31 . 2010-08-13 20:20 36864 ----a-w- c:\windows\system32\rtutils.dll
2010-06-18 15:04 . 2010-08-13 20:20 302080 ----a-w- c:\windows\system32\drivers\srv.sys
2010-06-18 15:04 . 2010-08-13 20:20 144896 ----a-w- c:\windows\system32\drivers\srv2.sys
2010-06-16 16:04 . 2010-08-13 20:20 905088 ----a-w- c:\windows\system32\drivers\tcpip.sys
2010-06-11 16:16 . 2010-08-13 20:20 274944 ----a-w- c:\windows\system32\schannel.dll
2010-06-11 16:15 . 2010-08-13 20:20 1248768 ----a-w- c:\windows\system32\msxml3.dll
2010-06-08 17:35 . 2010-08-13 20:20 3548040 ----a-w- c:\windows\system32\ntoskrnl.exe
2010-06-08 17:35 . 2010-08-13 20:20 3600768 ----a-w- c:\windows\system32\ntkrnlpa.exe
2010-06-02 13:15 . 2010-05-29 11:18 794408 ----a-w- c:\windows\system32\pbsvc.exe
2008-12-30 08:50 . 2010-04-17 23:44 1713664 ----a-w- c:\program files\GameCamV2.exe
.

(((((((((((((((((((((((((((((((((( Spouštěcí body v registru )))))))))))))))))))))))))))))))))))))))))))))
.
.
*Poznámka* prázdné záznamy a legitimní výchozí údaje nejsou zobrazeny.
REGEDIT4

[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\URLSearchHooks]
"{ad708c09-d51b-45b3-9d28-4eba2681febf}"= "c:\program files\Download_Energy\tbDown.dll" [2010-02-22 2353176]

[HKEY_CLASSES_ROOT\clsid\{ad708c09-d51b-45b3-9d28-4eba2681febf}]

[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{ad708c09-d51b-45b3-9d28-4eba2681febf}]
2010-02-22 10:05 2353176 ----a-w- c:\program files\Download_Energy\tbDown.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
"{ad708c09-d51b-45b3-9d28-4eba2681febf}"= "c:\program files\Download_Energy\tbDown.dll" [2010-02-22 2353176]

[HKEY_CLASSES_ROOT\clsid\{ad708c09-d51b-45b3-9d28-4eba2681febf}]

[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Toolbar\Webbrowser]
"{AD708C09-D51B-45B3-9D28-4EBA2681FEBF}"= "c:\program files\Download_Energy\tbDown.dll" [2010-02-22 2353176]

[HKEY_CLASSES_ROOT\clsid\{ad708c09-d51b-45b3-9d28-4eba2681febf}]

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Sidebar"="c:\program files\Windows Sidebar\sidebar.exe" [2009-04-11 1233920]
"WindowsWelcomeCenter"="oobefldr.dll" [2009-04-11 2153472]
"Skype"="c:\program files\Skype\Phone\Skype.exe" [2010-03-09 26100520]
"swg"="c:\program files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe" [2009-12-13 39408]
"DAEMON Tools Lite"="c:\program files\DAEMON\DTLite.exe" [2010-04-01 357696]
"Crux P2P"="c:\program files\Crux P2P\Crux P2P.exe" [2010-05-17 5794304]
"WMPNSCFG"="c:\program files\Windows Media Player\WMPNSCFG.exe" [2008-01-21 202240]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Windows Defender"="c:\program files\Windows Defender\MSASCui.exe" [2008-01-21 1008184]
"Broadcom Wireless Manager UI"="c:\windows\system32\WLTRAY.exe" [2007-12-08 3444736]
"OEM13Mon.exe"="c:\windows\OEM13Mon.exe" [2008-01-08 36864]
"RtHDVCpl"="RtHDVCpl.exe" [2008-02-04 4907008]
"SunJavaUpdateSched"="c:\program files\Common Files\Java\Java Update\jusched.exe" [2010-02-18 248040]
"avgnt"="c:\program files\Avira\AntiVir Desktop\avgnt.exe" [2009-03-02 209153]
"NVHotkey"="c:\windows\system32\nvHotkey.dll" [2009-11-20 87144]
"WheelMouse"="c:\program files\A4Tech\Mouse\Amoumain.exe" [2010-04-15 204800]
"LogMeIn Hamachi Ui"="c:\program files\LogMeIn Hamachi\hamachi-2-ui.exe" [2010-03-30 1820040]
"Adobe Reader Speed Launcher"="c:\program files\Adobe\Reader 9.0\Reader\Reader_sl.exe" [2009-12-21 35760]
"Adobe ARM"="c:\program files\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2010-06-09 976832]

c:\users\Strejcek\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\
OpenOffice.org 3.0.lnk - c:\windows.old\Program Files\OpenOffice.org 3\program\quickstart.exe [2008-10-5 393216]

c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\
WeGame.lnk - c:\program files\WeGame\wegame.exe [2010-6-12 1527296]

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"EnableLUA"= 0 (0x0)
"EnableUIADesktopToggle"= 0 (0x0)

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\drivers32]
"mixer1"=wdmaud.drv

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WinDefend]
@="Service"

[HKEY_LOCAL_MACHINE\software\microsoft\security center\Svc]
"VistaSp2"=hex(b):ef,2c,77,6a,45,d0,ca,01

R2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;c:\windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
R2 gupdate1ca713161a85b40;Služba Google Update (gupdate1ca713161a85b40);c:\program files\Google\Update\GoogleUpdate.exe [2009-11-29 133104]
R3 WPFFontCache_v0400;Windows Presentation Foundation Font Cache 4.0.0.0;c:\windows\Microsoft.NET\Framework\v4.0.30319\WPF\WPFFontCache_v0400.exe [2010-03-18 753504]
R4 sptd;sptd;c:\windows\system32\Drivers\sptd.sys [2010-07-28 691696]
S2 AERTFilters;Andrea RT Filters Service;c:\windows\system32\AERTSrv.exe [2008-02-04 77824]
S2 AntiVirSchedulerService;Avira AntiVir Scheduler;c:\program files\Avira\AntiVir Desktop\sched.exe [2009-05-13 108289]
S2 BthFilterHelper;Bluetooth Feature Support;c:\program files\CSR\Vista Profile Pack\BthFilterHelper.exe [2006-11-07 127488]
S2 Hamachi2Svc;LogMeIn Hamachi 2.0 Tunneling Engine;c:\program files\LogMeIn Hamachi\hamachi-2.exe [2010-03-30 1107336]
S3 BTHFILT;Bluetooth Command Filter;c:\windows\system32\DRIVERS\BthFilt.sys [2006-11-06 13824]
S3 NCHSSVAD;SoundTap Recorder (32 Bit);c:\windows\system32\drivers\nchssvad.sys [2010-03-04 33848]
S3 O2MDRDR;O2MDRDR;c:\windows\system32\DRIVERS\o2media.sys [2008-02-14 48472]
S3 O2SDRDR;O2SDRDR;c:\windows\system32\DRIVERS\o2sd.sys [2008-02-14 43480]
S3 OEM13Vfx;Creative Camera OEM013 Video VFX Driver;c:\windows\system32\DRIVERS\OEM13Vfx.sys [2007-03-05 7424]
S3 OEM13Vid;Creative Camera OEM013 Driver;c:\windows\system32\DRIVERS\OEM13Vid.sys [2008-01-08 235200]


[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost]
LocalServiceNoNetwork REG_MULTI_SZ PLA DPS BFE mpssvc
bthsvcs REG_MULTI_SZ BthServ
LocalServiceAndNoImpersonation REG_MULTI_SZ FontCache
.
Obsah adresáře 'Naplánované úlohy'

2010-08-30 c:\windows\Tasks\COMODO System Cleaner Update.job
- c:\program files\COMODO\COMODO System-Cleaner\UpdateApplications.exe [2010-03-09 13:41]

2010-08-30 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
- c:\program files\Google\Update\GoogleUpdate.exe [2009-11-29 20:20]

2010-08-30 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
- c:\program files\Google\Update\GoogleUpdate.exe [2009-11-29 20:20]

2010-08-29 c:\windows\Tasks\Norton Security Scan for Strejcek.job
- c:\program files\Norton Security Scan\Norton Security Scan\Engine\2.7.3.34\Nss.exe [2010-05-14 07:48]

2010-08-30 c:\windows\Tasks\SLOW-PCfighter-Strejcek-Startup.job
- c:\program files\Fighters\SLOW-PCfighter\SLOW-PCfighter.exe [2010-03-18 15:41]
.
.
------- Doplňkový sken -------
.
uStart Page = hxxp://search.conduit.com?SearchSource=10&ctid=CT1269415
uInternet Settings,ProxyServer = socks=
IE: Download All by ASUS Download - c:\program files\ASUS\WL-500gP V2 Wireless Router Utilities\ASDownloadAll.htm
IE: Download using ASUS Download - c:\program files\ASUS\WL-500gP V2 Wireless Router Utilities\ASDownload.htm
IE: Download with &Shareaza - c:\program files\Crux P2P\RazaWebHook.dll/3000
IE: WikiKomentáře Google... - c:\program files\Google\Google Toolbar\Component\GoogleToolbarDynamic_mui_en_89D8574934B26AC4.dll/cmsidewiki.html
.

**************************************************************************

catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2010-08-31 00:01
Windows 6.0.6002 Service Pack 2 NTFS

skenování skrytých procesů ...

skenování skrytých položek 'Po spuštění' ...

skenování skrytých souborů ...

sken byl úspešně dokončen
skryté soubory: 0

**************************************************************************
.
--------------------- ZAMKNUTÉ KLÍČE V REGISTRU ---------------------

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0000\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
------------------------ Jiné spuštené procesy ------------------------
.
c:\windows\system32\nvvsvc.exe
c:\windows\system32\nvvsvc.exe
c:\windows\System32\WLTRYSVC.EXE
c:\windows\System32\bcmwltry.exe
c:\windows\system32\WLANExt.exe
c:\program files\Avira\AntiVir Desktop\avguard.exe
c:\program files\O2Micro Flash Memory Card Driver\o2flash.exe
c:\windows\system32\PnkBstrA.exe
c:\windows\system32\conime.exe
c:\windows\RtHDVCpl.exe
c:\windows.old\Program Files\OpenOffice.org 3\program\soffice.exe
c:\windows.old\Program Files\OpenOffice.org 3\program\soffice.bin
c:\program files\Windows Media Player\wmpnetwk.exe
.
**************************************************************************
.
Celkový čas: 2010-08-31 00:15:04 - počítač byl restartován
ComboFix-quarantined-files.txt 2010-08-30 22:15
ComboFix2.txt 2010-08-30 19:48
ComboFix3.txt 2010-07-25 21:40
ComboFix4.txt 2010-07-25 21:17
ComboFix5.txt 2010-08-30 21:43

Před spuštěním: 7 914 156 032
Po spuštění: 7 742 824 448

- - End Of File - - 1951557891FB88745FF2709CD137E6D2

[motji]

Zkuste počítat restartovat a napište, jestli se stále seká.

[jdKstrejcek]

po ressetu, dejme tomu ze uz se chova normalne, asi jako predtim )..

[motji]

Takže CPU pořád vysoko?

[jdKstrejcek]

ano, prohlizim pouze video ze hry, kde je vetsi akce a video se zacne sekat jakoby FPS lagy ...

[jdKstrejcek]

jak jsem jiz napsal. nemuze delat problem "svchost" vzdy kdyz se to zacne sekat tak to vypada ze vyskocil do procesu... Ja si stimto jiz nevim rady ..:(

[jdKstrejcek]

mam POUZE pustene video a CPU na 90-100%

[motji]

Zkuste se podívat, jestlit ohle není Váš případ
uživatel VLX píše

Dle vlákna níže (v AJ) se zdá že problém by mohl být způsoben chybou v microsoft update. Dočasným řešením je přepnout zpět na windows update. Jiné řešení zatím není. Problém je o hodně větší na strojích s méně než 1GB paměti. Na tom jestli stroj má SP2/SP3 to asi nezáleží, nějak to souvisí s Microsoft Security Essentials (zhoršuje odezvu systému ještě více). S viry to pravděpodobně nemá nic společného. Objevilo se to před pár týdny a postihuje to spoustu XP instalací s málem paměti.

Detaily zde:
http://social.answers.microsoft.com/For ... 810962cb8c

Případně zde:
http://www.techsupportforum.com/microso ... oblem.html

Jak přepnout z microsoft update na windows update:

=> HOW TO make Windows Update your default update source (WinXP ONLY!)
Open IE (only) to Microsoft Update website | Click on Change Settings in left-hand menu | Scroll to bottom of page | To Stop Using Microsoft Update | Disable Microsoft Update software and let me use Windows Update only (check this option).
=> HOW TO flip your default back to Microsoft Update (WinXP ONLY!):
Open IE (only) to Windows Update website | Click on the green GO button to the immediate right of the Get Microsoft Update today! banner & follow the prompts.

[jdKstrejcek]

bohuzel na vistach sem nenasel jak se to da prepnout

[motji]

Já zapoměla že to je jen u XP

Stahněte MBAM z mého podpisu
-Nainstalujte,dejte úplný sken

NIC NEMAZAT
-MBAM má občas falešné detekce,proto budeme mazat až po kontrole logu.
-Log zkopírujte sem.