asi vir/prosim kontr. LOGu

[cart3]

Dobry den.
Mam problem ze mi windows hazou chybu, kdykoliv nezavisle. Ani nemusim hrat hru, nebo delat neco narocnyho. Vzdy to ale spadne, kdyz spustim a kontroluju nastroj pro odstraneni skodliveho softwaru.

Skoci modra obrazovka kde se pise toto:
---------------------------------------------------------------------------
A problem has been detected and windows has been shut down to preven
to your computer.

IRQL_NOT_LESS_OR_EQUAL


If this is the first time you ve seen this stop error screen,
restart you computer. If this screen appears again, follow
these steps:

Check to make sure any new hardware or software is properly installed
If this is a new installation, ask your hardware or software manufact
for any windows ubdates you might need.

If problems continue, disable or remove any newly installed hardware
or software. Disable BIOS memory options such as caching or shadowing.
If you need to use safe mode to remove or disable components restart
your computer, press F8 to select advaced startup options, and then
select save mode.

Collecting data for crash dump...
Initializing disk for crash dump...
Beginning physical memory to disk: 100
-------------------------------------------



Vygooglil jsem, ze by to mohl byt VIR.

Prosim o kontrolu LOGu. Komp jsem zkousel projizdet programama jako je spyware terminotor a jemu podobne, tak jak jsem to nasell v navodu na viri.cz spyware.cz

Log jsem vytvoril programem UPM. Prikladam ho jako soubor, ptz sem se nevesel celej:







Windows Vista SP 0 (build 7600)
Boot Mode: Normal
Ověření souborů Microsoftu: Ano
Whitelist: Ano
Internet Explorer v8.00.7600.16385 (win7_rtm.090713-1255)
Log vygenerován: 26.9.2010 14:48:16
================================================================

Běžící procesy
================================================================

C:\WINDOWS\SYSTEM32\SMSS.EXE
C:\WINDOWS\SYSTEM32\CSRSS.EXE
C:\WINDOWS\SYSTEM32\CSRSS.EXE
C:\WINDOWS\SYSTEM32\SERVICES.EXE
C:\WINDOWS\SYSTEM32\LSASS.EXE
C:\WINDOWS\SYSTEM32\LSM.EXE
C:\WINDOWS\SYSTEM32\WINLOGON.EXE
C:\WINDOWS\SYSTEM32\ATIESRXX.EXE
(rootkit?) audiodg.exe
C:\WINDOWS\SYSTEM32\ATIECLXX.EXE
C:\WINDOWS\SYSTEM32\SPOOLSV.EXE
C:\WINDOWS\SYSTEM32\DWM.EXE
C:\WINDOWS\SYSTEM32\TASKHOST.EXE
C:\WINDOWS\SYSWOW64\XSRVSETUP.EXE
|_ MD5: B4CDA1B4263B53D249AC27A4892DA634
|_Výrobce:

C:\WINDOWS\SYSTEM32\SPPSVC.EXE

Scanner
================================================================
[S, novf!] smss.exe
Non Microsoft v System32:
Ověřený Microsoft: Ne
Jiná ImageBase 00000000h
EntryPoint v sekci:
|_ Celkový počet sekcí: 5
Skrytá cesta EXE:
Podvržená cesta modulu: (47B30000) C:\Windows\System32\smss.exe
Podvržená cesta modulu: (779E0000) C:\Windows\System32\ntdll.dll
Nemá okno

[S, novf!] csrss.exe
Non Microsoft v System32:
Ověřený Microsoft: Ne
Jiná ImageBase 00000000h
EntryPoint v sekci:
|_ Celkový počet sekcí: 5
Skrytá cesta EXE:
Podvržená cesta modulu: (4A600000) C:\Windows\System32\csrss.exe
Podvržená cesta modulu: (777C0000) C:\Windows\System32\kernel32.dll
Podvržená cesta modulu: (778E0000) C:\Windows\System32\user32.dll
Podvržená cesta modulu: (779E0000) C:\Windows\System32\ntdll.dll
Nemá okno

[S] wininit.exe
Jiná ImageBase 00000000h
BaseAddress
Skrytá cesta EXE:
Podvržená cesta modulu: (777C0000) C:\Windows\System32\kernel32.dll
Podvržená cesta modulu: (778E0000) C:\Windows\System32\user32.dll
Podvržená cesta modulu: (779E0000) C:\Windows\System32\ntdll.dll

[S, novf!] csrss.exe
Non Microsoft v System32:
Ověřený Microsoft: Ne
Jiná ImageBase 00000000h
EntryPoint v sekci:
|_ Celkový počet sekcí: 5
Skrytá cesta EXE:
Podvržená cesta modulu: (4A600000) C:\Windows\System32\csrss.exe
Podvržená cesta modulu: (777C0000) C:\Windows\System32\kernel32.dll
Podvržená cesta modulu: (778E0000) C:\Windows\System32\user32.dll
Podvržená cesta modulu: (779E0000) C:\Windows\System32\ntdll.dll
Nemá okno

[S, novf!] services.exe
Non Microsoft v System32:
Ověřený Microsoft: Ne
Jiná ImageBase 00000000h
BaseAddress
Skrytá cesta EXE:
Podvržená cesta modulu: (777C0000) C:\Windows\System32\kernel32.dll
Podvržená cesta modulu: (778E0000) C:\Windows\System32\user32.dll
Podvržená cesta modulu: (779E0000) C:\Windows\System32\ntdll.dll
Nemá okno

[S, novf!] lsass.exe
Non Microsoft v System32:
Ověřený Microsoft: Ne
Jiná ImageBase 00000000h
BaseAddress
Skrytá cesta EXE:
Podvržená cesta modulu: (75710000) C:\Windows\System32\msprivs.dll
Podvržená cesta modulu: (777C0000) C:\Windows\System32\kernel32.dll
Podvržená cesta modulu: (778E0000) C:\Windows\System32\user32.dll
Podvržená cesta modulu: (779E0000) C:\Windows\System32\ntdll.dll
Nemá okno

[S, novf!] lsm.exe
Non Microsoft v System32:
Ověřený Microsoft: Ne
Jiná ImageBase 00000000h
BaseAddress
Skrytá cesta EXE:
Podvržená cesta modulu: (777C0000) C:\Windows\System32\kernel32.dll
Podvržená cesta modulu: (779E0000) C:\Windows\System32\ntdll.dll
Nemá okno

[S, novf!] winlogon.exe
Non Microsoft v System32:
Ověřený Microsoft: Ne
Jiná ImageBase 00000000h
BaseAddress
Skrytá cesta EXE:
Podvržená cesta modulu: (777C0000) C:\Windows\System32\kernel32.dll
Podvržená cesta modulu: (778E0000) C:\Windows\System32\user32.dll
Podvržená cesta modulu: (779E0000) C:\Windows\System32\ntdll.dll
Nemá okno

[S] svchost.exe
Jiná ImageBase 00000000h
BaseAddress
Skrytá cesta EXE:
Podvržená cesta modulu: (777C0000) C:\Windows\System32\kernel32.dll
Podvržená cesta modulu: (778E0000) C:\Windows\System32\user32.dll
Podvržená cesta modulu: (779E0000) C:\Windows\System32\ntdll.dll

[S] svchost.exe
Jiná ImageBase 00000000h
BaseAddress
Skrytá cesta EXE:
Podvržená cesta modulu: (777C0000) C:\Windows\System32\kernel32.dll
Podvržená cesta modulu: (778E0000) C:\Windows\System32\user32.dll
Podvržená cesta modulu: (779E0000) C:\Windows\System32\ntdll.dll

[?] atiesrxx.exe
Non Microsoft v System32:
Jiná ImageBase 00000000h
BaseAddress
Skrytá cesta EXE:
Podvržená cesta modulu: (777C0000) C:\Windows\System32\kernel32.dll
Podvržená cesta modulu: (778E0000) C:\Windows\System32\user32.dll
Podvržená cesta modulu: (779E0000) C:\Windows\System32\ntdll.dll
Podvržená cesta modulu: (77BA0000) C:\Windows\System32\psapi.dll
Nemá okno

[S] svchost.exe
Jiná ImageBase 00000000h
EntryPoint v sekci:
|_ Celkový počet sekcí: 6
Skrytá cesta EXE:
Podvržená cesta modulu: (00C30000) C:\Windows\System32\winlogon.exe
Podvržená cesta modulu: (756F0000) C:\Windows\System32\wbem\WinMgmtR.dll
Podvržená cesta modulu: (777C0000) C:\Windows\System32\kernel32.dll
Podvržená cesta modulu: (778E0000) C:\Windows\System32\user32.dll
Podvržená cesta modulu: (779E0000) C:\Windows\System32\ntdll.dll

[S] svchost.exe
Jiná ImageBase 00000000h
BaseAddress
Skrytá cesta EXE:
Podvržená cesta modulu: (73780000) C:\Windows\System32\sfc.dll
Podvržená cesta modulu: (777C0000) C:\Windows\System32\kernel32.dll
Podvržená cesta modulu: (778E0000) C:\Windows\System32\user32.dll
Podvržená cesta modulu: (779E0000) C:\Windows\System32\ntdll.dll
Podvržená cesta modulu: (77BA0000) C:\Windows\System32\psapi.dll

[S] svchost.exe
Jiná ImageBase 00000000h
BaseAddress
Skrytá cesta EXE:
Podvržená cesta modulu: (777C0000) C:\Windows\System32\kernel32.dll
Podvržená cesta modulu: (778E0000) C:\Windows\System32\user32.dll
Podvržená cesta modulu: (779E0000) C:\Windows\System32\ntdll.dll
Podvržená cesta modulu: (77BA0000) C:\Windows\System32\psapi.dll

[S] audiodg.exe
Proces se nepodařilo otevřít
ROOTKIT? Skrytá cesta
Spouští se po startu HKLM Run [BCU]
Nelze otevřít

[S] svchost.exe
Jiná ImageBase 00000000h
BaseAddress
Skrytá cesta EXE:
Podvržená cesta modulu: (73780000) C:\Windows\System32\sfc.dll
Podvržená cesta modulu: (777C0000) C:\Windows\System32\kernel32.dll
Podvržená cesta modulu: (778E0000) C:\Windows\System32\user32.dll
Podvržená cesta modulu: (779E0000) C:\Windows\System32\ntdll.dll

[S] svchost.exe
Jiná ImageBase 00000000h
BaseAddress
Skrytá cesta EXE:
Podvržená cesta modulu: (777C0000) C:\Windows\System32\kernel32.dll
Podvržená cesta modulu: (778E0000) C:\Windows\System32\user32.dll
Podvržená cesta modulu: (779E0000) C:\Windows\System32\ntdll.dll
Podvržená cesta modulu: (77BA0000) C:\Windows\System32\psapi.dll

[?] atieclxx.exe
Non Microsoft v System32:
Jiná ImageBase 00000000h
BaseAddress
Skrytá cesta EXE:
Podvržená cesta modulu: (777C0000) C:\Windows\System32\kernel32.dll
Podvržená cesta modulu: (778E0000) C:\Windows\System32\user32.dll
Podvržená cesta modulu: (779E0000) C:\Windows\System32\ntdll.dll

[S, novf!] spoolsv.exe
Non Microsoft v System32:
Ověřený Microsoft: Ne
Jiná ImageBase 00000000h
BaseAddress
Skrytá cesta EXE:
Podvržená cesta modulu: (777C0000) C:\Windows\System32\kernel32.dll
Podvržená cesta modulu: (778E0000) C:\Windows\System32\user32.dll
Podvržená cesta modulu: (779E0000) C:\Windows\System32\ntdll.dll
Nemá okno

[S] svchost.exe
Jiná ImageBase 00000000h
BaseAddress
Skrytá cesta EXE:
Podvržená cesta modulu: (777C0000) C:\Windows\System32\kernel32.dll
Podvržená cesta modulu: (778E0000) C:\Windows\System32\user32.dll
Podvržená cesta modulu: (779E0000) C:\Windows\System32\ntdll.dll

[R] BCUService.exe
Podvržená cesta modulu: (74300000) C:\Windows\System32\wow64cpu.dll
Podvržená cesta modulu: (74310000) C:\Windows\System32\wow64win.dll
Podvržená cesta modulu: (74370000) C:\Windows\System32\wow64.dll
Podvržená cesta modulu: (779E0000) C:\Windows\System32\ntdll.dll

[R] ekrn.exe
Podvržená cesta modulu: (74300000) C:\Windows\System32\wow64cpu.dll
Podvržená cesta modulu: (74310000) C:\Windows\System32\wow64win.dll
Podvržená cesta modulu: (74370000) C:\Windows\System32\wow64.dll
Podvržená cesta modulu: (779E0000) C:\Windows\System32\ntdll.dll

[S, novf!] dwm.exe
Non Microsoft v System32:
Ověřený Microsoft: Ne
Jiná ImageBase 00000000h
BaseAddress
Skrytá cesta EXE:
Podvržená cesta modulu: (777C0000) C:\Windows\System32\kernel32.dll
Podvržená cesta modulu: (778E0000) C:\Windows\System32\user32.dll
Podvržená cesta modulu: (779E0000) C:\Windows\System32\ntdll.dll

[S, novf!] taskhost.exe
Non Microsoft v System32:
Ověřený Microsoft: Ne
Jiná ImageBase 00000000h
BaseAddress
Skrytá cesta EXE:
Podvržená cesta modulu: (72990000) C:\Windows\System32\ksuser.dll
Podvržená cesta modulu: (777C0000) C:\Windows\System32\kernel32.dll
Podvržená cesta modulu: (778E0000) C:\Windows\System32\user32.dll
Podvržená cesta modulu: (779E0000) C:\Windows\System32\ntdll.dll

[?] XSrvSetup.exe
Bez výrobce
Podvržená cesta modulu: (74300000) C:\Windows\System32\wow64cpu.dll
Podvržená cesta modulu: (74310000) C:\Windows\System32\wow64win.dll
Podvržená cesta modulu: (74370000) C:\Windows\System32\wow64.dll
Podvržená cesta modulu: (779E0000) C:\Windows\System32\ntdll.dll
Nemá okno
Soubor 12%

[S] explorer.exe
Spouští se po startu HKLM Winlogon [Shell]
Jiná ImageBase 00000000h
BaseAddress
Skrytá cesta EXE:
Podvržená cesta modulu: (72990000) C:\Windows\System32\ksuser.dll
Podvržená cesta modulu: (73780000) C:\Windows\System32\sfc.dll
Podvržená cesta modulu: (75580000) C:\Windows\System32\FXSRESM.dll
Podvržená cesta modulu: (777C0000) C:\Windows\System32\kernel32.dll
Podvržená cesta modulu: (778E0000) C:\Windows\System32\user32.dll
Podvržená cesta modulu: (779E0000) C:\Windows\System32\ntdll.dll
Podvržená cesta modulu: (77BA0000) C:\Windows\System32\psapi.dll
Podvržená cesta modulu: (77BB0000) C:\Windows\System32\normaliz.dll

[R] NBService.exe
Podvržená cesta modulu: (74300000) C:\Windows\System32\wow64cpu.dll
Podvržená cesta modulu: (74310000) C:\Windows\System32\wow64win.dll
Podvržená cesta modulu: (74370000) C:\Windows\System32\wow64.dll
Podvržená cesta modulu: (779E0000) C:\Windows\System32\ntdll.dll

[R] StarWindServiceAE.exe
Podvržená cesta modulu: (74300000) C:\Windows\System32\wow64cpu.dll
Podvržená cesta modulu: (74310000) C:\Windows\System32\wow64win.dll
Podvržená cesta modulu: (74370000) C:\Windows\System32\wow64.dll
Podvržená cesta modulu: (779E0000) C:\Windows\System32\ntdll.dll

[S] svchost.exe
Jiná ImageBase 00000000h
BaseAddress
Skrytá cesta EXE:
Podvržená cesta modulu: (777C0000) C:\Windows\System32\kernel32.dll
Podvržená cesta modulu: (778E0000) C:\Windows\System32\user32.dll
Podvržená cesta modulu: (779E0000) C:\Windows\System32\ntdll.dll

[R] TuneUpUtilitiesService64.exe
Jiná ImageBase 00000000h
BaseAddress
Skrytá cesta EXE:
Podvržená cesta modulu: (777C0000) C:\Windows\System32\kernel32.dll
Podvržená cesta modulu: (778E0000) C:\Windows\System32\user32.dll
Podvržená cesta modulu: (779E0000) C:\Windows\System32\ntdll.dll
Podvržená cesta modulu: (77BA0000) C:\Windows\System32\psapi.dll

[R] TuneUpUtilitiesApp64.exe
Jiná ImageBase 00000000h
BaseAddress
Skrytá cesta EXE:
Podvržená cesta modulu: (777C0000) C:\Windows\System32\kernel32.dll
Podvržená cesta modulu: (778E0000) C:\Windows\System32\user32.dll
Podvržená cesta modulu: (779E0000) C:\Windows\System32\ntdll.dll
Podvržená cesta modulu: (77BA0000) C:\Windows\System32\psapi.dll

[S] taskeng.exe
Jiná ImageBase 00000000h
BaseAddress
Skrytá cesta EXE:
Podvržená cesta modulu: (777C0000) C:\Windows\System32\kernel32.dll
Podvržená cesta modulu: (778E0000) C:\Windows\System32\user32.dll
Podvržená cesta modulu: (779E0000) C:\Windows\System32\ntdll.dll

[R] RAVCpl64.exe
Jiná ImageBase 00000000h
BaseAddress
Skrytá cesta EXE:
Podvržená cesta modulu: (777C0000) C:\Windows\System32\kernel32.dll
Podvržená cesta modulu: (778E0000) C:\Windows\System32\user32.dll
Podvržená cesta modulu: (779E0000) C:\Windows\System32\ntdll.dll

[R] egui.exe
Jiná ImageBase 00000000h
BaseAddress
Skrytá cesta EXE:
Podvržená cesta modulu: (72BC0000) [DLL] ?
Podvržená cesta modulu: (777C0000) C:\Windows\System32\kernel32.dll
Podvržená cesta modulu: (778E0000) C:\Windows\System32\user32.dll
Podvržená cesta modulu: (779E0000) C:\Windows\System32\ntdll.dll

[S] svchost.exe
Jiná ImageBase 00000000h
BaseAddress
Skrytá cesta EXE:
Podvržená cesta modulu: (777C0000) C:\Windows\System32\kernel32.dll
Podvržená cesta modulu: (778E0000) C:\Windows\System32\user32.dll
Podvržená cesta modulu: (779E0000) C:\Windows\System32\ntdll.dll
Podvržená cesta modulu: (77BB0000) C:\Windows\System32\normaliz.dll

[S] taskeng.exe
Jiná ImageBase 00000000h
BaseAddress
Skrytá cesta EXE:
Podvržená cesta modulu: (777C0000) C:\Windows\System32\kernel32.dll
Podvržená cesta modulu: (778E0000) C:\Windows\System32\user32.dll
Podvržená cesta modulu: (779E0000) C:\Windows\System32\ntdll.dll

[R] BCU.exe
Spouští se po startu HKLM Run [BCU]
Podvržená cesta modulu: (74300000) C:\Windows\System32\wow64cpu.dll
Podvržená cesta modulu: (74310000) C:\Windows\System32\wow64win.dll
Podvržená cesta modulu: (74370000) C:\Windows\System32\wow64.dll
Podvržená cesta modulu: (779E0000) C:\Windows\System32\ntdll.dll

[S] SearchIndexer.exe
Jiná ImageBase 00000000h
BaseAddress
Skrytá cesta EXE:
Podvržená cesta modulu: (777C0000) C:\Windows\System32\kernel32.dll
Podvržená cesta modulu: (778E0000) C:\Windows\System32\user32.dll
Podvržená cesta modulu: (779E0000) C:\Windows\System32\ntdll.dll
Podvržená cesta modulu: (77BA0000) C:\Windows\System32\psapi.dll

[S] SearchProtocolHost.exe
Proces se nepodařilo otevřít
ROOTKIT? Skrytá cesta
Spouští se po startu HKLM Run [BCU]
Nelze otevřít

[R] firefox.exe
Podvržená cesta modulu: (74300000) C:\Windows\System32\wow64cpu.dll
Podvržená cesta modulu: (74310000) C:\Windows\System32\wow64win.dll
Podvržená cesta modulu: (74370000) C:\Windows\System32\wow64.dll
Podvržená cesta modulu: (779E0000) C:\Windows\System32\ntdll.dll

[S] WmiPrvSE.exe
Jiná ImageBase 00000000h
BaseAddress
Skrytá cesta EXE:
Podvržená cesta modulu: (72920000) C:\Windows\System32\wmi.dll
Podvržená cesta modulu: (743D0000) C:\Windows\System32\security.dll
Podvržená cesta modulu: (777C0000) C:\Windows\System32\kernel32.dll
Podvržená cesta modulu: (778E0000) C:\Windows\System32\user32.dll
Podvržená cesta modulu: (779E0000) C:\Windows\System32\ntdll.dll

[S, novf!] sppsvc.exe
Non Microsoft v System32:
Ověřený Microsoft: Ne
Jiná ImageBase 00000000h
BaseAddress
Skrytá cesta EXE:
Podvržená cesta modulu: (777C0000) C:\Windows\System32\kernel32.dll
Podvržená cesta modulu: (778E0000) C:\Windows\System32\user32.dll
Podvržená cesta modulu: (779E0000) C:\Windows\System32\ntdll.dll
Nemá okno

[S] svchost.exe
Jiná ImageBase 00000000h
BaseAddress
Skrytá cesta EXE:
Podvržená cesta modulu: (71610000) [DLL] ?
Podvržená cesta modulu: (73780000) C:\Windows\System32\sfc.dll
Podvržená cesta modulu: (777C0000) C:\Windows\System32\kernel32.dll
Podvržená cesta modulu: (778E0000) C:\Windows\System32\user32.dll
Podvržená cesta modulu: (779E0000) C:\Windows\System32\ntdll.dll
Podvržená cesta modulu: (77BA0000) C:\Windows\System32\psapi.dll
Podvržená cesta modulu: (77BB0000) C:\Windows\System32\normaliz.dll

[S] wmpnetwk.exe
Jiná ImageBase 00000000h
BaseAddress
Skrytá cesta EXE:
Podvržená cesta modulu: (70590000) C:\Windows\System32\wmploc.DLL
Podvržená cesta modulu: (777C0000) C:\Windows\System32\kernel32.dll
Podvržená cesta modulu: (778E0000) C:\Windows\System32\user32.dll
Podvržená cesta modulu: (779E0000) C:\Windows\System32\ntdll.dll
Podvržená cesta modulu: (77BB0000) C:\Windows\System32\normaliz.dll

[S] WmiPrvSE.exe
Jiná ImageBase 00000000h
BaseAddress
Skrytá cesta EXE:
Podvržená cesta modulu: (777C0000) C:\Windows\System32\kernel32.dll
Podvržená cesta modulu: (778E0000) C:\Windows\System32\user32.dll
Podvržená cesta modulu: (779E0000) C:\Windows\System32\ntdll.dll

[S] svchost.exe
Jiná ImageBase 00000000h
BaseAddress
Skrytá cesta EXE:
Podvržená cesta modulu: (777C0000) C:\Windows\System32\kernel32.dll
Podvržená cesta modulu: (779E0000) C:\Windows\System32\ntdll.dll

[S] SearchFilterHost.exe
Proces se nepodařilo otevřít
ROOTKIT? Skrytá cesta
Spouští se po startu HKLM Run [BCU]
Nelze otevřít

[R] UPM.exe
Podvržená cesta modulu: (74300000) C:\Windows\System32\wow64cpu.dll
Podvržená cesta modulu: (74310000) C:\Windows\System32\wow64win.dll
Podvržená cesta modulu: (74370000) C:\Windows\System32\wow64.dll
Podvržená cesta modulu: (779E0000) C:\Windows\System32\ntdll.dll

[S] WMIADAP.exe
Proces se nepodařilo otevřít
ROOTKIT? Skrytá cesta
Spouští se po startu HKLM Run [BCU]
Nelze otevřít


Po spuštění
================================================================

HKLM ShellServiceObjectDelayLoad
|_ [X][WebCheck] (Soubor nenalezen)

HKLM IC
|_ [X][{44BBA840-CC51-11CF-AAFA-00AA00B6015C}] %ProgramFiles(x86)%\Windows Mail\WinMail.exe OCInstallUserConfigOE (Soubor nenalezen)
|_ [?][{89820200-ECBD-11cf-8B85-00AA005B4340}] regsvr32.exe /s /n /i:U shell32.dll
|_ MD5:
|_ Výrobce: Microsoft Corporation



HKLM BHO
|_ [X][{ecdee021-0d17-467f-a1ff-c7a115230949}] C:\Program Files (x86)\free-downloads.net\tbfree.dl (Soubor nenalezen)

HKCU IE WebBrowser Toolbar
|_ [X][{D4027C7F-154A-4066-A1AD-4243D8127440}] (Soubor nenalezen)
|_ [X][{ECDEE021-0D17-467F-A1FF-C7A115230949}] C:\Program Files (x86)\free-downloads.net\tbfree.dl (Soubor nenalezen)

HKLM IE Toolbar
|_ [X][{ecdee021-0d17-467f-a1ff-c7a115230949}] C:\Program Files (x86)\free-downloads.net\tbfree.dl (Soubor nenalezen)

Služby (Zobraz běžící: True, Zobraz zastavené: False, Zobraz i bezpečné služby: False)
================================================================
[X] Funkčnost aplikací
|_ Cesta: C:\Windows\system32\svchost.exe
| |_ Výrobce: Microsoft Corporation
| |_ Popis: Host Process for Windows Services
| |_ MD5: 54A47F6B5E09A77E61649109C6A08866
|
|_ ServiceDLL: C:\Windows\System32\aelupsvc.dll
| |_ Výrobce: Microsoft Corporation
| |_ Popis: Služba Funkčnost aplikací
| |_ MD5:
|
|_ Jméno: AeLookupSvc
|_ StartName: localSystem
|_ Typ spouštění: Ruční spuštění
|_ Status: Spuštěno
|_ Typ: Win32 Share Process
|_ Dependency:

[X] AMD External Events Utility
|_ Cesta: C:\Windows\system32\atiesrxx.exe
| |_ Výrobce: AMD
| |_ Popis: AMD External Events Service Module
| |_ MD5:
|
|_ Jméno: AMD External Events Utility
|_ StartName: LocalSystem
|_ Typ spouštění: Auto Start
|_ Status: Spuštěno
|_ Typ: Win32 Own Process
|_ Dependency:

[X] Informace o aplikaci
|_ Cesta: C:\Windows\system32\svchost.exe
| |_ Výrobce: Microsoft Corporation
| |_ Popis: Host Process for Windows Services
| |_ MD5: 54A47F6B5E09A77E61649109C6A08866
|
|_ ServiceDLL: C:\Windows\System32\appinfo.dll
| |_ Výrobce: Microsoft Corporation
| |_ Popis: Služba Informace o aplikaci
| |_ MD5:
|
|_ Jméno: Appinfo
|_ StartName: LocalSystem
|_ Typ spouštění: Ruční spuštění
|_ Status: Spuštěno
|_ Typ: Win32 Share Process
|_ Dependency: RpcSs

[X] Koncové vytváření služby Windows Audio
|_ Cesta: C:\Windows\System32\svchost.exe
| |_ Výrobce: Microsoft Corporation
| |_ Popis: Host Process for Windows Services
| |_ MD5: 54A47F6B5E09A77E61649109C6A08866
|
|_ ServiceDLL: C:\Windows\System32\Audiosrv.dll
| |_ Výrobce: Microsoft Corporation
| |_ Popis: Windows Audio Service
| |_ MD5:
|
|_ Jméno: AudioEndpointBuilder
|_ StartName: LocalSystem
|_ Typ spouštění: Auto Start
|_ Status: Spuštěno
|_ Typ: Win32 Share Process
|_ Dependency: PlugPlay

[X] Zvuk systému Windows
|_ Cesta: C:\Windows\System32\svchost.exe
| |_ Výrobce: Microsoft Corporation
| |_ Popis: Host Process for Windows Services
| |_ MD5: 54A47F6B5E09A77E61649109C6A08866
|
|_ ServiceDLL: C:\Windows\System32\Audiosrv.dll
| |_ Výrobce: Microsoft Corporation
| |_ Popis: Windows Audio Service
| |_ MD5:
|
|_ Jméno: AudioSrv
|_ StartName: NT AUTHORITY\LocalService
|_ Typ spouštění: Auto Start
|_ Status: Spuštěno
|_ Typ: Win32 Share Process
|_ Dependency: AudioEndpointBuilder

[X] Služba BFE (Base Filtering Engine)
|_ Cesta: C:\Windows\system32\svchost.exe
| |_ Výrobce: Microsoft Corporation
| |_ Popis: Host Process for Windows Services
| |_ MD5: 54A47F6B5E09A77E61649109C6A08866
|
|_ ServiceDLL: C:\Windows\System32\bfe.dll
| |_ Výrobce: Microsoft Corporation
| |_ Popis: Base Filtering Engine
| |_ MD5:
|
|_ Jméno: BFE
|_ StartName: NT AUTHORITY\LocalService
|_ Typ spouštění: Auto Start
|_ Status: Spuštěno
|_ Typ: Win32 Share Process
|_ Dependency: RpcSs

[X] Prohledávání počítačů
|_ Cesta: C:\Windows\System32\svchost.exe
| |_ Výrobce: Microsoft Corporation
| |_ Popis: Host Process for Windows Services
| |_ MD5: 54A47F6B5E09A77E61649109C6A08866
|
|_ ServiceDLL: C:\Windows\System32\browser.dll
| |_ Výrobce: Microsoft Corporation
| |_ Popis: Computer Browser Service DLL
| |_ MD5:
|
|_ Jméno: Browser
|_ StartName: LocalSystem
|_ Typ spouštění: Ruční spuštění
|_ Status: Spuštěno
|_ Typ: Win32 Share Process
|_ Dependency: LanmanWorkstation

[X] Offline soubory
|_ Cesta: C:\Windows\System32\svchost.exe
| |_ Výrobce: Microsoft Corporation
| |_ Popis: Host Process for Windows Services
| |_ MD5: 54A47F6B5E09A77E61649109C6A08866
|
|_ ServiceDLL: C:\Windows\System32\cscsvc.dll
| |_ Výrobce: Microsoft Corporation
| |_ Popis: CSC Service DLL
| |_ MD5:
|
|_ Jméno: CscService
|_ StartName: LocalSystem
|_ Typ spouštění: Auto Start
|_ Status: Spuštěno
|_ Typ: Win32 Share Process
|_ Dependency: RpcSs

[X] Klient DNS
|_ Cesta: C:\Windows\system32\svchost.exe
| |_ Výrobce: Microsoft Corporation
| |_ Popis: Host Process for Windows Services
| |_ MD5: 54A47F6B5E09A77E61649109C6A08866
|
|_ ServiceDLL: C:\Windows\System32\dnsrslvr.dll
| |_ Výrobce: Microsoft Corporation
| |_ Popis: DNS Caching Resolver Service
| |_ MD5:
|
|_ Jméno: Dnscache
|_ StartName: NT AUTHORITY\NetworkService
|_ Typ spouštění: Auto Start
|_ Status: Spuštěno
|_ Typ: Win32 Share Process
|_ Dependency: Tdx

[X] Google Update Service (gupdate)
|_ Cesta: C:\Program Files (x86)\Google\Update\GoogleUpdate.exe /svc
| |_ Výrobce:
| |_ Popis:
| |_ MD5:
|
|_ Jméno: gupdate
|_ StartName: LocalSystem
|_ Typ spouštění: Auto Start
|_ Status: Zastaveno
|_ Typ: Win32 Own Process
|_ Dependency: RPCSS

[?] JMB36X
|_ Cesta: C:\Windows\SysWOW64\XSrvSetup.exe
| |_ Výrobce:
| |_ Popis:
| |_ MD5: B4CDA1B4263B53D249AC27A4892DA634
|
|_ Jméno: JMB36X
|_ StartName: LocalSystem
|_ Typ spouštění: Auto Start
|_ Status: Spuštěno
|_ Typ:
|_ Dependency:

[X] Server
|_ Cesta: C:\Windows\system32\svchost.exe
| |_ Výrobce: Microsoft Corporation
| |_ Popis: Host Process for Windows Services
| |_ MD5: 54A47F6B5E09A77E61649109C6A08866
|
|_ ServiceDLL: C:\Windows\system32\srvsvc.dll
| |_ Výrobce: Microsoft Corporation
| |_ Popis: Server Service DLL
| |_ MD5:
|
|_ Jméno: LanmanServer
|_ StartName: LocalSystem
|_ Typ spouštění: Auto Start
|_ Status: Spuštěno
|_ Typ: Win32 Share Process
|_ Dependency: SamSS

[X] Pracovní stanice
|_ Cesta: C:\Windows\System32\svchost.exe
| |_ Výrobce: Microsoft Corporation
| |_ Popis: Host Process for Windows Services
| |_ MD5: 54A47F6B5E09A77E61649109C6A08866
|
|_ ServiceDLL: C:\Windows\System32\wkssvc.dll
| |_ Výrobce: Microsoft Corporation
| |_ Popis: Workstation Service DLL
| |_ MD5:
|
|_ Jméno: LanmanWorkstation
|_ StartName: NT AUTHORITY\NetworkService
|_ Typ spouštění: Auto Start
|_ Status: Spuštěno
|_ Typ: Win32 Share Process
|_ Dependency: Bowser

[X] Podpora rozhraní NetBIOS nad protokolem TCP/IP
|_ Cesta: C:\Windows\system32\svchost.exe
| |_ Výrobce: Microsoft Corporation
| |_ Popis: Host Process for Windows Services
| |_ MD5: 54A47F6B5E09A77E61649109C6A08866
|
|_ ServiceDLL: C:\Windows\System32\lmhsvc.dll
| |_ Výrobce: Microsoft Corporation
| |_ Popis: TCPIP NetBios Transport Services DLL
| |_ MD5:
|
|_ Jméno: lmhosts
|_ StartName: NT AUTHORITY\LocalService
|_ Typ spouštění: Auto Start
|_ Status: Spuštěno
|_ Typ: Win32 Share Process
|_ Dependency: NetBT

[X] Služba Plánovač multimédií
|_ Cesta: C:\Windows\system32\svchost.exe
| |_ Výrobce: Microsoft Corporation
| |_ Popis: Host Process for Windows Services
| |_ MD5: 54A47F6B5E09A77E61649109C6A08866
|
|_ ServiceDLL: C:\Windows\system32\mmcss.dll
| |_ Výrobce: Microsoft Corporation
| |_ Popis: Multimedia Class Scheduler Service
| |_ MD5:
|
|_ Jméno: MMCSS
|_ StartName: LocalSystem
|_ Typ spouštění: Auto Start
|_ Status: Spuštěno
|_ Typ: Win32 Share Process
|_ Dependency:

[X] Brána Windows Firewall
|_ Cesta: C:\Windows\system32\svchost.exe
| |_ Výrobce: Microsoft Corporation
| |_ Popis: Host Process for Windows Services
| |_ MD5: 54A47F6B5E09A77E61649109C6A08866
|
|_ ServiceDLL: C:\Windows\system32\mpssvc.dll
| |_ Výrobce: Microsoft Corporation
| |_ Popis: Microsoft Protection Service
| |_ MD5:
|
|_ Jméno: MpsSvc
|_ StartName: NT Authority\LocalService
|_ Typ spouštění: Auto Start
|_ Status: Spuštěno
|_ Typ: Win32 Share Process
|_ Dependency: mpsdrv

[X] Síťová připojení
|_ Cesta: C:\Windows\System32\svchost.exe
| |_ Výrobce: Microsoft Corporation
| |_ Popis: Host Process for Windows Services
| |_ MD5: 54A47F6B5E09A77E61649109C6A08866
|
|_ ServiceDLL: C:\Windows\System32\netman.dll
| |_ Výrobce: Microsoft Corporation
| |_ Popis: Network Connections Manager
| |_ MD5:
|
|_ Jméno: Netman
|_ StartName: LocalSystem
|_ Typ spouštění: Ruční spuštění
|_ Status: Spuštěno
|_ Typ: Win32 Share Process
|_ Dependency: RpcSs

[X] Sledování umístění v síti (NLA)
|_ Cesta: C:\Windows\System32\svchost.exe
| |_ Výrobce: Microsoft Corporation
| |_ Popis: Host Process for Windows Services
| |_ MD5: 54A47F6B5E09A77E61649109C6A08866
|
|_ ServiceDLL: C:\Windows\System32\nlasvc.dll
| |_ Výrobce: Microsoft Corporation
| |_ Popis: Network Location Awareness 2
| |_ MD5:
|
|_ Jméno: NlaSvc
|_ StartName: NT AUTHORITY\NetworkService
|_ Typ spouštění: Auto Start
|_ Status: Spuštěno
|_ Typ: Win32 Share Process
|_ Dependency: NSI

[X] Služba rozhraní síťového úložiště
|_ Cesta: C:\Windows\system32\svchost.exe
| |_ Výrobce: Microsoft Corporation
| |_ Popis: Host Process for Windows Services
| |_ MD5: 54A47F6B5E09A77E61649109C6A08866
|
|_ ServiceDLL: C:\Windows\system32\nsisvc.dll
| |_ Výrobce: Microsoft Corporation
| |_ Popis: Network Store Interface RPC server
| |_ MD5:
|
|_ Jméno: nsi
|_ StartName: NT Authority\LocalService
|_ Typ spouštění: Auto Start
|_ Status: Spuštěno
|_ Typ: Win32 Share Process
|_ Dependency: nsiproxy

[X] Program Compatibility Assistant Service
|_ Cesta: C:\Windows\system32\svchost.exe
| |_ Výrobce: Microsoft Corporation
| |_ Popis: Host Process for Windows Services
| |_ MD5: 54A47F6B5E09A77E61649109C6A08866
|
|_ ServiceDLL: C:\Windows\System32\pcasvc.dll
| |_ Výrobce: Microsoft Corporation
| |_ Popis: Program Compatibility Assistant Service
| |_ MD5:
|
|_ Jméno: PcaSvc
|_ StartName: LocalSystem
|_ Typ spouštění: Auto Start
|_ Status: Spuštěno
|_ Typ: Win32 Share Process
|_ Dependency: RpcSs

[X] Plug and Play
|_ Cesta: C:\Windows\system32\svchost.exe
| |_ Výrobce: Microsoft Corporation
| |_ Popis: Host Process for Windows Services
| |_ MD5: 54A47F6B5E09A77E61649109C6A08866
|
|_ ServiceDLL: C:\Windows\system32\umpnpmgr.dll
| |_ Výrobce: Microsoft Corporation
| |_ Popis: User-mode Plug-and-Play Service
| |_ MD5:
|
|_ Jméno: PlugPlay
|_ StartName: LocalSystem
|_ Typ spouštění: Auto Start
|_ Status: Spuštěno
|_ Typ: Win32 Share Process
|_ Dependency:

[X] Napájení
|_ Cesta: C:\Windows\system32\svchost.exe
| |_ Výrobce: Microsoft Corporation
| |_ Popis: Host Process for Windows Services
| |_ MD5: 54A47F6B5E09A77E61649109C6A08866
|
|_ ServiceDLL: C:\Windows\system32\umpo.dll
| |_ Výrobce: Microsoft Corporation
| |_ Popis: User-mode Power Service
| |_ MD5:
|
|_ Jméno: Power
|_ StartName: LocalSystem
|_ Typ spouštění: Auto Start
|_ Status: Spuštěno
|_ Typ: Win32 Share Process
|_ Dependency:

[X] Služba Profil uživatele
|_ Cesta: C:\Windows\system32\svchost.exe
| |_ Výrobce: Microsoft Corporation
| |_ Popis: Host Process for Windows Services
| |_ MD5: 54A47F6B5E09A77E61649109C6A08866
|
|_ ServiceDLL: C:\Windows\system32\profsvc.dll
| |_ Výrobce: Microsoft Corporation
| |_ Popis: ProfSvc
| |_ MD5:
|
|_ Jméno: ProfSvc
|_ StartName: LocalSystem
|_ Typ spouštění: Auto Start
|_ Status: Spuštěno
|_ Typ: Win32 Share Process
|_ Dependency: RpcSs

[X] Mapovač koncových bodů protokolu RPC
|_ Cesta: C:\Windows\system32\svchost.exe
| |_ Výrobce: Microsoft Corporation
| |_ Popis: Host Process for Windows Services
| |_ MD5: 54A47F6B5E09A77E61649109C6A08866
|
|_ ServiceDLL: C:\Windows\System32\RpcEpMap.dll
| |_ Výrobce: Microsoft Corporation
| |_ Popis: RPC Endpoint Mapper
| |_ MD5:
|
|_ Jméno: RpcEptMapper
|_ StartName: NT AUTHORITY\NetworkService
|_ Typ spouštění: Auto Start
|_ Status: Spuštěno
|_ Typ: Win32 Share Process
|_ Dependency:

[X] Správce zabezpečení účtů
|_ Cesta: C:\Windows\system32\lsass.exe
| |_ Výrobce: Microsoft Corporation
| |_ Popis: Local Security Authority Process
| |_ MD5:
|
|_ Jméno: SamSs
|_ StartName: LocalSystem
|_ Typ spouštění: Auto Start
|_ Status: Spuštěno
|_ Typ: Win32 Share Process
|_ Dependency: RPCSS

[X] Plánovač úloh
|_ Cesta: C:\Windows\system32\svchost.exe
| |_ Výrobce: Microsoft Corporation
| |_ Popis: Host Process for Windows Services
| |_ MD5: 54A47F6B5E09A77E61649109C6A08866
|
|_ ServiceDLL: C:\Windows\system32\schedsvc.dll
| |_ Výrobce: Microsoft Corporation
| |_ Popis: Služba Plánovač úloh
| |_ MD5:
|
|_ Jméno: Schedule
|_ StartName: LocalSystem
|_ Typ spouštění: Auto Start
|_ Status: Spuštěno
|_ Typ: Win32 Share Process
|_ Dependency: RPCSS

[X] Služba zařazování tisku
|_ Cesta: C:\Windows\System32\spoolsv.exe
| |_ Výrobce: Microsoft Corporation
| |_ Popis: Spooler SubSystem App
| |_ MD5:
|
|_ Jméno: Spooler
|_ StartName: LocalSystem
|_ Typ spouštění: Auto Start
|_ Status: Spuštěno
|_ Typ:
|_ Dependency: RPCSS

[X] Ochrana softwaru
|_ Cesta: C:\Windows\system32\sppsvc.exe
| |_ Výrobce: Microsoft Corporation
| |_ Popis: Microsoft Software Protection Platform Service
| |_ MD5:
|
|_ Jméno: sppsvc
|_ StartName: NT AUTHORITY\NetworkService
|_ Typ spouštění: Auto Start
|_ Status: Spuštěno
|_ Typ: Win32 Own Process
|_ Dependency: RpcSs

[X] SSDP Discovery
|_ Cesta: C:\Windows\system32\svchost.exe
| |_ Výrobce: Microsoft Corporation
| |_ Popis: Host Process for Windows Services
| |_ MD5: 54A47F6B5E09A77E61649109C6A08866
|
|_ ServiceDLL: C:\Windows\System32\ssdpsrv.dll
| |_ Výrobce: Microsoft Corporation
| |_ Popis: SSDP Service DLL
| |_ MD5:
|
|_ Jméno: SSDPSRV
|_ StartName: NT AUTHORITY\LocalService
|_ Typ spouštění: Ruční spuštění
|_ Status: Spuštěno
|_ Typ: Win32 Share Process
|_ Dependency: HTTP

[X] Načítání obrázků (WIA)
|_ Cesta: C:\Windows\system32\svchost.exe
| |_ Výrobce: Microsoft Corporation
| |_ Popis: Host Process for Windows Services
| |_ MD5: 54A47F6B5E09A77E61649109C6A08866
|
|_ ServiceDLL: C:\Windows\System32\wiaservc.dll
| |_ Výrobce: Microsoft Corporation
| |_ Popis: Still Image Devices Service
| |_ MD5:
|
|_ Jméno: stisvc
|_ StartName: NT Authority\LocalService
|_ Typ spouštění: Auto Start
|_ Status: Spuštěno
|_ Typ: Win32 Own Process
|_ Dependency: RpcSs

[X] Superfetch
|_ Cesta: C:\Windows\system32\svchost.exe
| |_ Výrobce: Microsoft Corporation
| |_ Popis: Host Process for Windows Services
| |_ MD5: 54A47F6B5E09A77E61649109C6A08866
|
|_ ServiceDLL: C:\Windows\system32\sysmain.dll
| |_ Výrobce: Microsoft Corporation
| |_ Popis: Superfetch Service Host
| |_ MD5:
|
|_ Jméno: SysMain
|_ StartName: LocalSystem
|_ Typ spouštění: Auto Start
|_ Status: Spuštěno
|_ Typ: Win32 Share Process
|_ Dependency: rpcss

[X] Motivy
|_ Cesta: C:\Windows\System32\svchost.exe
| |_ Výrobce: Microsoft Corporation
| |_ Popis: Host Process for Windows Services
| |_ MD5: 54A47F6B5E09A77E61649109C6A08866
|
|_ ServiceDLL: C:\Windows\system32\themeservice.dll
| |_ Výrobce: Microsoft Corporation
| |_ Popis: Windows Shell Theme Service Dll
| |_ MD5:
|
|_ Jméno: Themes
|_ StartName: LocalSystem
|_ Typ spouštění: Auto Start
|_ Status: Spuštěno
|_ Typ: Win32 Share Process
|_ Dependency:

[X] Správce relací správce oken plochy
|_ Cesta: C:\Windows\System32\svchost.exe
| |_ Výrobce: Microsoft Corporation
| |_ Popis: Host Process for Windows Services
| |_ MD5: 54A47F6B5E09A77E61649109C6A08866
|
|_ ServiceDLL: C:\Windows\System32\uxsms.dll
| |_ Výrobce: Microsoft Corporation
| |_ Popis: Microsoft User Experience Session Management Service
| |_ MD5:
|
|_ Jméno: UxSms
|_ StartName: localSystem
|_ Typ spouštění: Auto Start
|_ Status: Spuštěno
|_ Typ: Win32 Share Process
|_ Dependency:

[R] TuneUp Theme Extension
|_ Cesta: C:\Windows\System32\svchost.exe
| |_ Výrobce: Microsoft Corporation
| |_ Popis: Host Process for Windows Services
| |_ MD5: 54A47F6B5E09A77E61649109C6A08866
|
|_ ServiceDLL: C:\Windows\System32\uxtuneup.dll
| |_ Výrobce: TuneUp Software
| |_ Popis: TuneUp Theme Extension
| |_ MD5: 9C96639537CACFF5B2E0256998DF3C21
|
|_ Jméno: UxTuneUp
|_ StartName: LocalSystem
|_ Typ spouštění: Auto Start
|_ Status: Spuštěno
|_ Typ: Win32 Share Process
|_ Dependency: Themes

[X] Systémový čas
|_ Cesta: C:\Windows\system32\svchost.exe
| |_ Výrobce: Microsoft Corporation
| |_ Popis: Host Process for Windows Services
| |_ MD5: 54A47F6B5E09A77E61649109C6A08866
|
|_ ServiceDLL: C:\Windows\system32\w32time.dll
| |_ Výrobce: Microsoft Corporation
| |_ Popis: Sledování času
| |_ MD5:
|
|_ Jméno: W32Time
|_ StartName: NT AUTHORITY\LocalService
|_ Typ spouštění: Ruční spuštění
|_ Status: Spuštěno
|_ Typ: Win32 Share Process
|_ Dependency:

[X] Windows Defender
|_ Cesta: C:\Windows\System32\svchost.exe
| |_ Výrobce: Microsoft Corporation
| |_ Popis: Host Process for Windows Services
| |_ MD5: 54A47F6B5E09A77E61649109C6A08866
|
|_ ServiceDLL: C:\Program Files (x86)\Windows Defender\mpsvc.dll
| |_ Výrobce:
| |_ Popis:
| |_ MD5:
|
|_ Jméno: WinDefend
|_ StartName: LocalSystem
|_ Typ spouštění: Auto Start
|_ Status: Spuštěno
|_ Typ: Win32 Share Process
|_ Dependency: RpcSs

[X] Služba WMI
|_ Cesta: C:\Windows\system32\svchost.exe
| |_ Výrobce: Microsoft Corporation
| |_ Popis: Host Process for Windows Services
| |_ MD5: 54A47F6B5E09A77E61649109C6A08866
|
|_ ServiceDLL: C:\Windows\system32\wbem\WMIsvc.dll
| |_ Výrobce: Microsoft Corporation
| |_ Popis: WMI
| |_ MD5:
|
|_ Jméno: Winmgmt
|_ StartName: localSystem
|_ Typ spouštění: Ruční spuštění
|_ Status: Spuštěno
|_ Typ: Win32 Share Process
|_ Dependency: RPCSS

[X] Centrum zabezpečení
|_ Cesta: C:\Windows\System32\svchost.exe
| |_ Výrobce: Microsoft Corporation
| |_ Popis: Host Process for Windows Services
| |_ MD5: 54A47F6B5E09A77E61649109C6A08866
|
|_ ServiceDLL: C:\Windows\System32\wscsvc.dll
| |_ Výrobce: Microsoft Corporation
| |_ Popis: Windows Security Center Service
| |_ MD5:
|
|_ Jméno: wscsvc
|_ StartName: NT AUTHORITY\LocalService
|_ Typ spouštění: Auto Start
|_ Status: Spuštěno
|_ Typ: Win32 Share Process
|_ Dependency: RpcSs

[X] Windows Update
|_ Cesta: C:\Windows\system32\svchost.exe
| |_ Výrobce: Microsoft Corporation
| |_ Popis: Host Process for Windows Services
| |_ MD5: 54A47F6B5E09A77E61649109C6A08866
|
|_ ServiceDLL: C:\Windows\system32\wuaueng.dll
| |_ Výrobce: Microsoft Corporation
| |_ Popis: Windows Update Agent
| |_ MD5:
|
|_ Jméno: wuauserv
|_ StartName: LocalSystem
|_ Typ spouštění: Auto Start
|_ Status: Spuštěno
|_ Typ: Win32 Share Process
|_ Dependency: rpcss

[X] Platforma WDF (Windows Driver Foundation) – platforma ovladače v uživatelském režimu
|_ Cesta: C:\Windows\system32\svchost.exe
| |_ Výrobce: Microsoft Corporation
| |_ Popis: Host Process for Windows Services
| |_ MD5: 54A47F6B5E09A77E61649109C6A08866
|
|_ ServiceDLL: C:\Windows\System32\WUDFSvc.dll
| |_ Výrobce: Microsoft Corporation
| |_ Popis: Platforma WDF (Windows Driver Foundation) – služba platformy ovladače v uživatelském režimu
| |_ MD5:
|
|_ Jméno: wudfsvc
|_ StartName: LocalSystem
|_ Typ spouštění: Auto Start
|_ Status: Spuštěno
|_ Typ: Win32 Share Process
|_ Dependency: PlugPlay



================================================================
Ultimate Process Manager v4.1.3 - [ Lodus Software ]

[Rudy]

Dejte log z ComboFix.

Stahnete a ulozte nejlepe na plochu ComboFix: http://download.bleepingcomputer.com/sUBs/ComboFix.exe

pote spustte aplikaci pod uctem s administratorskym opravnenim

hned po startu se zobrazi obrazovka s licencnimi podminkami, pokracujte kliknutim na tlacitko Ano.

v klidu si postavte na kafe (cela akce trva cca. 5-10 minut, nekdy i dele - dle toho, o jak rychly stroj se jedna a kolika soubory se skener bude muset prodirat), behem skenu se nepokousejte spoustet zadne jine aplikace ani nic jineho

behem skenovani nepropadejte panice, vas stroj muze byt restartovan (predevsim pri prvni aplikaci skeneru)

upozorneni: pokud pouzivate antispyware s rezidentnim stitem, prepnete jeho rezidentni stit do Install Mode, pripadne jej po dobu skenu uplne deaktivujte, protoze dochazi pri skenu a vymazu pripadneho malware k nezadoucim kolizim s rezidentem antispyware

[cart3]

dobry vecer mam 64 bit windows 7 a combofix mi nefunguje

[Rudy]

OK. Udělejte kompletní sken MBAM: http://www.malwarebytes.org/mbam.php a dejte log. Předem nic nemažte.

[cart3]

dobry vecer program anti malware jsem stahl ze stranky co jste napsal a nainstaloval ale pokazde kdyz spustim sken hodi to jiz zminovanou chybu prosim poradte co dal dekuji

[Rudy]

Zkuste obnovu systému k datu, kdy korketně fungoval a pak zkuste sken MBAM.

[cart3]

dobry vecer bohuzel jiz nevim kdy konkretne system fungovak tak ze to nemohu obnovit uz to resim celkem dlouho a chybu to haze stale vic a vic.Prosim o radu dekuji

[cart3]

tak jsem na vasi strance nasel RSIT a udelal jsem s nim log.


Logfile of random's system information tool 1.08 (written by random/random)
Run by Cart at 2010-09-28 01:15:31
Microsoft Windows 7 Professional
System drive C: has 648 GB (68%) free of 954 GB
Total RAM: 4027 MB (74% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 1:15:33, on 28.9.2010
Platform: Windows 7 (WinNT 6.00.3504)
MSIE: Internet Explorer v8.00 (8.00.7600.16385)
Boot mode: Normal

Running processes:
C:\Program Files (x86)\uTorrent\uTorrent.exe
C:\Program Files (x86)\DeviceVM\Browser Configuration Utility\BCU.exe
C:\Program Files (x86)\Mozilla Firefox\firefox.exe
C:\Program Files (x86)\Mozilla Firefox\plugin-container.exe
C:\Program Files\trend micro\Cart.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://start.icq.com/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
R3 - URLSearchHook: SearchHook Class - {BC86E1AB-EDA5-4059-938F-CE307B0C6F0A} - C:\Program Files (x86)\DeviceVM\Browser Configuration Utility\AddressBarSearch.dll
R3 - URLSearchHook: free-downloads.net Toolbar - {ecdee021-0d17-467f-a1ff-c7a115230949} - C:\Program Files (x86)\free-downloads.net\tbfree.dll
R3 - URLSearchHook: (no name) - - (no file)
F2 - REG:system.ini: UserInit=userinit.exe
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: Pomocník pro přihlášení ke službě Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: SkypeIEPluginBHO - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre6\bin\jp2ssv.dll
O2 - BHO: free-downloads.net Toolbar - {ecdee021-0d17-467f-a1ff-c7a115230949} - C:\Program Files (x86)\free-downloads.net\tbfree.dll
O3 - Toolbar: DAEMON Tools Toolbar - {32099AAC-C132-4136-9E9A-4E364A424E17} - C:\Program Files (x86)\DAEMON Tools Toolbar\DTToolbar.dll
O3 - Toolbar: free-downloads.net Toolbar - {ecdee021-0d17-467f-a1ff-c7a115230949} - C:\Program Files (x86)\free-downloads.net\tbfree.dll
O4 - HKLM\..\Run: [JMB36X IDE Setup] C:\Windows\RaidTool\xInsIDE.exe
O4 - HKLM\..\Run: [BCU] "C:\Program Files (x86)\DeviceVM\Browser Configuration Utility\BCU.exe"
O4 - HKCU\..\Run: [uTorrent] "C:\Program Files (x86)\uTorrent\uTorrent.exe"
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'NETWORK SERVICE')
O9 - Extra button: Skype add-on for Internet Explorer - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O9 - Extra 'Tools' menuitem: Skype add-on for Internet Explorer - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O17 - HKLM\System\CCS\Services\Tcpip\..\{9B3962F7-774B-473A-A59B-83F630727FD3}: NameServer = 10.0.0.1
O18 - Protocol: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~2\COMMON~1\Skype\Skype4COM.dll
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
O23 - Service: AMD External Events Utility - Unknown owner - C:\Windows\system32\atiesrxx.exe (file missing)
O23 - Service: Browser Configuration Utility Service (BCUService) - DeviceVM, Inc. - C:\Program Files (x86)\DeviceVM\Browser Configuration Utility\BCUService.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)
O23 - Service: ESET HTTP Server (EhttpSrv) - ESET - C:\Program Files\ESET\ESET NOD32 Antivirus\EHttpSrv.exe
O23 - Service: ESET Service (ekrn) - ESET - C:\Program Files\ESET\ESET NOD32 Antivirus\x86\ekrn.exe
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)
O23 - Service: Google Update Service (gupdate) (gupdate) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files (x86)\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: JMB36X - Unknown owner - C:\Windows\SysWOW64\XSrvSetup.exe
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
O23 - Service: Nero BackItUp Scheduler 4.0 - Nero AG - C:\Program Files (x86)\Common Files\Nero\Nero BackItUp 4\NBService.exe
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)
O23 - Service: StarWind AE Service (StarWindServiceAE) - Rocket Division Software - C:\Program Files (x86)\Alcohol Soft\Alcohol 120\StarWind\StarWindServiceAE.exe
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\Wat\WatUX.exe,-601 (WatAdminSvc) - Unknown owner - C:\Windows\system32\Wat\WatAdminSvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: Služba Windows Media Player Network Sharing (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)

--
End of file - 8039 bytes

======Listing Processes======

\SystemRoot\System32\smss.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
wininit.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
C:\Windows\system32\services.exe
C:\Windows\system32\lsass.exe
C:\Windows\system32\lsm.exe
winlogon.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Windows\system32\svchost.exe -k RPCSS
C:\Windows\system32\atiesrxx.exe
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k netsvcs
C:\Windows\system32\svchost.exe -k LocalService
atieclxx
C:\Windows\system32\svchost.exe -k NetworkService
"C:\Windows\system32\Dwm.exe"
C:\Windows\Explorer.EXE
C:\Windows\System32\spoolsv.exe
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
"C:\Program Files (x86)\DeviceVM\Browser Configuration Utility\BCUService.exe"
"C:\Program Files\ESET\ESET NOD32 Antivirus\x86\ekrn.exe"
"taskhost.exe"
"C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe" -s
"C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe" /hide /waitservice
C:\Windows\SysWOW64\XSrvSetup.exe
"C:\Program Files (x86)\Common Files\Nero\Nero BackItUp 4\NBService.exe"
"C:\Program Files (x86)\uTorrent\uTorrent.exe"
taskeng.exe {B70B3C1C-DFE5-4A3F-82B9-B6CCC9C0D005}
taskeng.exe {1DB5D54E-21C4-41A3-8733-06FFC9522FC3}
"C:\Program Files (x86)\Alcohol Soft\Alcohol 120\StarWind\StarWindServiceAE.exe"
C:\Windows\system32\svchost.exe -k imgsvc
"C:\Program Files (x86)\DeviceVM\Browser Configuration Utility\BCU.exe"
C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
C:\Windows\system32\SearchIndexer.exe /Embedding
C:\Windows\system32\wbem\wmiprvse.exe
"C:\Program Files (x86)\Mozilla Firefox\firefox.exe"
"C:\Program Files (x86)\Mozilla Firefox\plugin-container.exe" --channel=1372.aab48a0.2099895499 "C:\Windows\SysWOW64\Macromed\Flash\NPSWF32.dll" 1372 plugin \\.\pipe\gecko-crash-server-pipe.1372
C:\Windows\system32\sppsvc.exe
C:\Windows\System32\svchost.exe -k secsvcs
"C:\Program Files\Windows Media Player\wmpnetwk.exe"
C:\Windows\system32\wbem\wmiprvse.exe
C:\Windows\system32\DllHost.exe /Processid:{E10F6C3A-F1AE-4ADC-AA9D-2FE65525666E}
C:\Windows\system32\DllHost.exe /Processid:{E10F6C3A-F1AE-4ADC-AA9D-2FE65525666E}
"C:\Users\Cart\Desktop\VELICE ZAKERNEJ WIR DOKUMENTY\RSITx64.exe"

======Scheduled tasks folder======

C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
C:\Windows\tasks\GoogleUpdateTaskMachineUA.job

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
Adobe PDF Link Helper - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2010-06-19 75200]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
Pomocník pro přihlášení ke službě Windows Live - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2009-01-22 408448]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}]
Skype add-on for Internet Explorer - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll [2010-02-08 804136]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files (x86)\Java\jre6\bin\jp2ssv.dll [2010-08-04 41760]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{ecdee021-0d17-467f-a1ff-c7a115230949}]
free-downloads.net Toolbar - C:\Program Files (x86)\free-downloads.net\tbfree.dll [2009-12-31 2349080]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{32099AAC-C132-4136-9E9A-4E364A424E17} - DAEMON Tools Toolbar - C:\Program Files (x86)\DAEMON Tools Toolbar\DTToolbar64.dll [2010-03-25 1548096]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Internet Explorer\Toolbar]
{32099AAC-C132-4136-9E9A-4E364A424E17} - DAEMON Tools Toolbar - C:\Program Files (x86)\DAEMON Tools Toolbar\DTToolbar.dll [2010-03-25 968000]
{ecdee021-0d17-467f-a1ff-c7a115230949} - free-downloads.net Toolbar - C:\Program Files (x86)\free-downloads.net\tbfree.dll [2009-12-31 2349080]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"RtHDVCpl"=C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [2010-01-19 9996320]
"egui"=C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe [2010-03-31 2840352]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"uTorrent"=C:\Program Files (x86)\uTorrent\uTorrent.exe [2010-08-09 322352]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe ARM]
C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2010-06-09 976832]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe Reader Speed Launcher]
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Reader_sl.exe [2010-06-20 35760]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\AlcoholAutomount]
C:\Program Files (x86)\Alcohol Soft\Alcohol 120\AxAutoMntSrv.exe -automount []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\BCU]
C:\Program Files (x86)\DeviceVM\Browser Configuration Utility\BCU.exe [2009-08-04 346320]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\DAEMON Tools Lite]
C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe [2010-04-01 357696]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\EasyTuneVI]
C:\Program Files (x86)\GIGABYTE\ET6\ETcall.exe [2007-07-26 20480]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ICQ]
C:\Program files programy ins\ICQ7.2\ICQ.exe silent loginmode=4 []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\PWRISOVM.EXE]
C:\Program files programy ins\PowerISO\PWRISOVM.EXE []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\RAMSaverPro]
C:\Program Files (x86)\WinTools Software\RAM Saver Professional\ramsaverpro.exe [2010-06-23 436492]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\RegistryBooster]
C:\Program Files (x86)\Uniblue\RegistryBooster\launcher.exe delay 20000 []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\RGSC]
C:\Program Files (x86)\Rockstar Games\Rockstar Games Social Club\RGSCLauncher.exe [2008-11-14 305064]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Skype]
C:\Program Files (x86)\Skype\Phone\Skype.exe [2010-05-13 26192168]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SpeedUpMyPC]
C:\Program files programy ins\SpeedUpMyPC\launcher.exe delay 20000 []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SpywareTerminatorUpdate]
C:\Program Files (x86)\Spyware Terminator\SpywareTerminatorUpdate.exe []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\StartCCC]
C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [2010-07-06 98304]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Steam]
c:\program files (x86)\steam\steam.exe -silent []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SunJavaUpdateSched]
C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [2010-05-14 248552]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\TkBellExe]
C:\Program Files (x86)\Common Files\Real\Update_OB\realsched.exe [2010-09-01 202256]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\uTorrent]
C:\Program Files (x86)\uTorrent\uTorrent.exe [2010-08-09 322352]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\WinampAgent]
C:\Program files programy ins\Winamp\winampa.exe []

[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]
"JMB36X IDE Setup"=C:\Windows\RaidTool\xInsIDE.exe [2010-01-19 43632]
"BCU"=C:\Program Files (x86)\DeviceVM\Browser Configuration Utility\BCU.exe [2009-08-04 346320]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED}

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=credssp.dll

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\PEVSystemStart]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\procexp90.Sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\PEVSystemStart]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\procexp90.Sys]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorAdmin"=5
"ConsentPromptBehaviorUser"=3
"EnableUIADesktopToggle"=0
"PromptOnSecureDesktop"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoActiveDesktop"=1
"NoActiveDesktopChanges"=1
"ForceActiveDesktopOn"=0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*

======List of files/folders created in the last 1 months======

2010-09-27 23:26:09 ----D---- C:\Program Files\trend micro
2010-09-27 23:26:08 ----D---- C:\rsit
2010-09-27 02:12:42 ----D---- C:\Users\Cart\AppData\Roaming\iolo
2010-09-27 02:12:42 ----D---- C:\ProgramData\iolo
2010-09-27 01:05:19 ----D---- C:\Windows\pss
2010-09-27 00:31:47 ----A---- C:\Windows\ntbtlog.txt
2010-09-26 23:21:15 ----D---- C:\Users\Cart\AppData\Roaming\Malwarebytes
2010-09-26 23:21:07 ----A---- C:\Windows\SYSWOW64\drivers\mbamswissarmy.sys
2010-09-26 23:21:06 ----D---- C:\ProgramData\Malwarebytes
2010-09-26 23:21:05 ----D---- C:\Program Files (x86)\Malwarebytes' Anti-Malware
2010-09-26 23:21:05 ----A---- C:\Windows\system32\drivers\mbam.sys
2010-09-26 22:22:54 ----A---- C:\Bug.txt
2010-09-26 22:22:52 ----A---- C:\Windows\SYSWOW64\cmd.execf
2010-09-26 22:22:45 ----D---- C:\32788R22FWJFW
2010-09-26 14:58:19 ----A---- C:\avenger.txt
2010-09-26 14:47:10 ----D---- C:\Program Files (x86)\Ultimate Process Manager
2010-09-26 13:51:17 ----D---- C:\a477ee0e5869fb0cdc07fc2f4f
2010-09-26 13:40:30 ----D---- C:\62f8aa523734f94e6a408c
2010-09-26 01:25:11 ----D---- C:\Program Files (x86)\Lavalys
2010-09-26 00:21:07 ----D---- C:\7065a85ecd18402217
2010-09-25 16:17:26 ----A---- C:\Windows\Tweak-7 Uninstall Log.txt
2010-09-21 07:52:56 ----D---- C:\Users\Cart\AppData\Roaming\TuneUp Software
2010-09-21 07:52:51 ----D---- C:\ProgramData\TuneUp Software
2010-09-21 07:51:59 ----SHD---- C:\ProgramData\{D3742F82-1C1A-4DCC-ABBD-0E7C3C0185CC}
2010-09-21 07:46:05 ----D---- C:\ProgramData\Max Secure
2010-09-21 07:45:55 ----D---- C:\Program Files\Max Registry Cleaner
2010-09-21 07:36:39 ----A---- C:\Windows\SYSWOW64\autoscan.dll
2010-09-21 07:36:10 ----D---- C:\Program Files (x86)\WinTools Software
2010-09-19 01:09:11 ----D---- C:\Users\Cart\AppData\Roaming\GlarySoft
2010-09-19 01:04:33 ----A---- C:\Windows\Tweak-7 Setup Log.txt
2010-09-18 23:23:30 ----D---- C:\Program Files (x86)\FileHippo.com
2010-09-18 21:20:52 ----D---- C:\Program Files (x86)\Atari
2010-09-17 23:34:47 ----D---- C:\$WINDOWS.~BT
2010-09-17 22:51:15 ----D---- C:\Users\Cart\AppData\Roaming\gnupg
2010-09-15 22:39:03 ----D---- C:\Program Files (x86)\Mozilla Firefox
2010-09-15 15:06:53 ----A---- C:\Windows\SYSWOW64\iertutil.dll
2010-09-15 15:06:53 ----A---- C:\Windows\system32\iertutil.dll
2010-09-15 15:06:51 ----A---- C:\Windows\system32\spoolsv.exe
2010-09-13 20:42:10 ----D---- C:\PFiles
2010-09-11 18:29:58 ----D---- C:\Program Files (x86)\Google
2010-09-11 01:41:53 ----D---- C:\ProgramData\Codemasters
2010-09-11 01:40:17 ----RA---- C:\Windows\SYSWOW64\tmp46EF.tmp
2010-09-11 01:40:17 ----D---- C:\Program Files (x86)\OpenAL
2010-09-11 01:40:17 ----A---- C:\Windows\SYSWOW64\wrap_oal.dll
2010-09-11 01:40:17 ----A---- C:\Windows\SYSWOW64\OpenAL32.dll
2010-09-11 01:40:17 ----A---- C:\Windows\system32\wrap_oal.dll
2010-09-11 01:40:17 ----A---- C:\Windows\system32\OpenAL32.dll
2010-09-11 01:39:25 ----RA---- C:\Windows\SYSWOW64\tmp46DF.tmp
2010-09-10 19:59:14 ----D---- C:\Downloads
2010-09-10 00:22:56 ----A---- C:\Windows\doom3.ini
2010-09-10 00:17:27 ----D---- C:\Program Files (x86)\DOOM 3
2010-09-07 11:24:34 ----D---- C:\ProgramData\ESET
2010-09-07 11:24:34 ----D---- C:\Program Files\ESET
2010-09-04 22:34:28 ----D---- C:\Users\Cart\AppData\Roaming\ProgSense
2010-09-04 22:34:23 ----D---- C:\Users\Cart\AppData\Roaming\Orbit
2010-09-04 15:17:09 ----D---- C:\Program Files (x86)\Cenega Czech
2010-09-02 15:34:41 ----D---- C:\Program Files (x86)\Microsoft.NET
2010-09-01 14:54:25 ----A---- C:\Windows\SYSWOW64\rmoc3260.dll
2010-09-01 14:54:23 ----A---- C:\Windows\SYSWOW64\pndx5032.dll
2010-09-01 14:54:23 ----A---- C:\Windows\SYSWOW64\pndx5016.dll
2010-09-01 14:54:12 ----D---- C:\Program Files (x86)\Real
2010-09-01 14:54:12 ----A---- C:\Windows\SYSWOW64\pncrt.dll
2010-09-01 14:54:12 ----A---- C:\Windows\SYSWOW64\msvcp71.dll
2010-09-01 14:54:11 ----D---- C:\ProgramData\Real
2010-09-01 14:54:10 ----D---- C:\Users\Cart\AppData\Roaming\Real
2010-08-29 00:15:43 ----D---- C:\Users\Cart\AppData\Roaming\Command and Conquer 4

======List of files/folders modified in the last 1 months======

2010-09-28 01:15:31 ----D---- C:\Windows\Temp
2010-09-28 01:15:12 ----D---- C:\Users\Cart\AppData\Roaming\uTorrent
2010-09-28 01:12:24 ----D---- C:\Windows\system32\config
2010-09-28 00:26:00 ----D---- C:\Windows\System32
2010-09-28 00:26:00 ----D---- C:\Windows\inf
2010-09-28 00:26:00 ----A---- C:\Windows\system32\PerfStringBackup.INI
2010-09-28 00:01:27 ----D---- C:\Windows\Minidump
2010-09-28 00:01:25 ----D---- C:\Windows
2010-09-27 23:26:09 ----RD---- C:\Program Files
2010-09-27 22:54:38 ----D---- C:\Users\Cart\AppData\Roaming\Skype
2010-09-27 22:49:00 ----D---- C:\Users\Cart\AppData\Roaming\skypePM
2010-09-27 11:43:04 ----D---- C:\Windows\system32\wdi
2010-09-27 02:12:42 ----HD---- C:\ProgramData
2010-09-27 02:01:04 ----SHD---- C:\Windows\Installer
2010-09-27 01:54:28 ----D---- C:\program files HRY
2010-09-27 01:53:32 ----HD---- C:\Program Files (x86)\InstallJammer Registry
2010-09-27 01:53:32 ----D---- C:\Program files programy ins
2010-09-27 01:52:55 ----RD---- C:\Program Files (x86)
2010-09-27 01:52:55 ----D---- C:\Windows\SysWOW64
2010-09-27 00:16:09 ----D---- C:\Windows\system32\Tasks
2010-09-27 00:16:06 ----RD---- C:\Program Files (x86)\Skype
2010-09-27 00:16:06 ----D---- C:\Program Files (x86)\Common Files
2010-09-27 00:16:05 ----D---- C:\ProgramData\Skype
2010-09-26 23:21:07 ----D---- C:\Windows\SYSWOW64\drivers
2010-09-26 23:21:05 ----D---- C:\Windows\system32\drivers
2010-09-26 22:27:45 ----D---- C:\Windows\system32\catroot2
2010-09-26 21:18:26 ----SHD---- C:\System Volume Information
2010-09-26 13:40:40 ----D---- C:\Windows\Prefetch
2010-09-25 16:04:21 ----D---- C:\Program Files (x86)\GIGABYTE
2010-09-22 14:31:00 ----D---- C:\Windows\Tasks
2010-09-21 07:46:05 ----D---- C:\Windows\system
2010-09-19 01:08:15 ----SD---- C:\Users\Cart\AppData\Roaming\Microsoft
2010-09-15 22:39:35 ----D---- C:\Users\Cart\AppData\Roaming\Mozilla
2010-09-15 15:36:53 ----D---- C:\Windows\system32\LogFiles
2010-09-15 15:24:19 ----D---- C:\Windows\winsxs
2010-09-15 15:06:54 ----D---- C:\Windows\system32\catroot
2010-09-11 12:39:44 ----D---- C:\Program Files (x86)\Opera
2010-09-11 01:39:56 ----RSD---- C:\Windows\assembly
2010-09-11 01:31:41 ----HD---- C:\Program Files (x86)\InstallShield Installation Information
2010-09-10 14:58:58 ----A---- C:\Windows\system32\MRT.exe
2010-09-06 12:46:34 ----D---- C:\Users\Cart\AppData\Roaming\esmska
2010-09-02 23:03:11 ----D---- C:\Program Files (x86)\Microsoft Silverlight
2010-09-02 15:48:05 ----D---- C:\Windows\Microsoft.NET
2010-09-02 15:36:39 ----D---- C:\Windows\SYSWOW64\cs-CZ
2010-09-02 15:36:39 ----D---- C:\Windows\system32\cs-CZ
2010-09-02 15:34:42 ----D---- C:\Windows\SYSWOW64\en-US
2010-09-02 15:34:42 ----D---- C:\Windows\system32\en-US
2010-09-02 14:01:10 ----D---- C:\Windows\system32\DriverStore
2010-09-01 14:54:13 ----D---- C:\Program Files (x86)\Internet Explorer
2010-09-01 14:54:12 ----A---- C:\Windows\SYSWOW64\msvcr71.dll
2010-08-29 12:05:02 ----D---- C:\Program Files (x86)\Alcohol Soft

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 JRAID;JRAID; C:\Windows\system32\DRIVERS\jraid.sys [2010-01-27 115312]
R0 pciide;pciide; C:\Windows\system32\DRIVERS\pciide.sys [2009-07-14 12352]
R0 rdyboost;ReadyBoost; C:\Windows\System32\drivers\rdyboost.sys [2009-07-14 214096]
R0 sptd;sptd; C:\Windows\System32\Drivers\sptd.sys [2010-08-09 834544]
R1 CSC;@%systemroot%\system32\cscsvc.dll,-202; C:\Windows\system32\drivers\csc.sys [2009-07-14 514048]
R1 ehdrv;ehdrv; C:\Windows\system32\DRIVERS\ehdrv.sys [2010-03-31 139704]
R2 eamonm;eamonm; C:\Windows\system32\DRIVERS\eamonm.sys [2010-03-31 164912]
R2 epfwwfpr;epfwwfpr; C:\Windows\system32\DRIVERS\epfwwfpr.sys [2010-03-31 124760]
R3 amdkmdag;amdkmdag; C:\Windows\system32\DRIVERS\atikmdag.sys [2010-07-07 7195648]
R3 amdkmdap;amdkmdap; C:\Windows\system32\DRIVERS\atikmpag.sys [2010-07-07 265728]
R3 AtiHdmiService;ATI Function Driver for High Definition Audio Service; C:\Windows\system32\drivers\AtiHdmi.sys [2010-05-06 125456]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\Windows\system32\drivers\RTKVHD64.sys [2010-01-19 2242720]
R3 RTL8167;Realtek 8167 NT Driver; C:\Windows\system32\DRIVERS\Rt64win7.sys [2010-03-22 347680]
S3 a3yleh9i;a3yleh9i; C:\Windows\system32\drivers\a3yleh9i.sys []
S3 AODDriver;AODDriver; \??\C:\Program Files (x86)\GIGABYTE\ET6\amd64\AODDriver.sys [2009-02-23 14904]
S3 atikmdag;atikmdag; C:\Windows\system32\DRIVERS\atikmdag.sys [2010-07-07 7195648]
S3 ax1xiov1;ax1xiov1; C:\Windows\system32\drivers\ax1xiov1.sys []
S3 esihdrv;esihdrv; \??\C:\Users\Cart\AppData\Local\Temp\esihdrv.sys []
S3 etdrv;etdrv; \??\C:\Windows\etdrv.sys [2010-08-29 25640]
S3 gdrv;gdrv; \??\C:\Windows\gdrv.sys [2010-08-29 25640]
S3 GVTDrv64;GVTDrv64; \??\C:\Windows\GVTDrv64.sys [2010-08-29 30528]
S3 nmwcdcx64;Nokia USB Generic; C:\Windows\system32\drivers\ccdcmbox64.sys [2008-05-02 23552]
S3 nmwcdx64;Nokia USB Phone Parent; C:\Windows\system32\drivers\ccdcmbx64.sys [2008-05-02 18432]
S3 RDPDR;Terminal Server Device Redirector Driver; C:\Windows\System32\drivers\rdpdr.sys [2009-07-14 165376]
S3 s3cap;s3cap; C:\Windows\system32\DRIVERS\vms3cap.sys [2009-07-14 6656]
S3 storvsc;storvsc; C:\Windows\system32\DRIVERS\storvsc.sys [2009-07-14 34896]
S3 upperdev;upperdev; C:\Windows\system32\DRIVERS\usbser_lowerfltx64.sys [2008-05-02 8704]
S3 usbser;USB Modem Driver; C:\Windows\system32\drivers\usbser.sys [2009-07-14 32768]
S3 UsbserFilt;UsbserFilt; C:\Windows\system32\DRIVERS\usbser_lowerfltx64j.sys [2008-05-02 8704]
S3 vmbus;@%SystemRoot%\system32\vmbusres.dll,-1000; C:\Windows\system32\DRIVERS\vmbus.sys [2009-07-14 200272]
S3 VMBusHID;VMBusHID; C:\Windows\system32\DRIVERS\VMBusHID.sys [2009-07-14 21760]
S3 WinUsb;WinUsb; C:\Windows\system32\DRIVERS\WinUsb.sys [2009-07-14 40448]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 AMD External Events Utility;AMD External Events Utility; C:\Windows\system32\atiesrxx.exe [2010-07-07 203264]
R2 BCUService;Browser Configuration Utility Service; C:\Program Files (x86)\DeviceVM\Browser Configuration Utility\BCUService.exe [2009-08-04 219360]
R2 CscService;@%systemroot%\system32\cscsvc.dll,-200; C:\Windows\System32\svchost.exe [2009-07-14 27136]
R2 ekrn;ESET Service; C:\Program Files\ESET\ESET NOD32 Antivirus\x86\ekrn.exe [2010-03-31 810120]
R2 JMB36X;JMB36X; C:\Windows\SysWOW64\XSrvSetup.exe [2009-08-06 65536]
R2 Nero BackItUp Scheduler 4.0;Nero BackItUp Scheduler 4.0; C:\Program Files (x86)\Common Files\Nero\Nero BackItUp 4\NBService.exe [2009-09-23 935208]
R2 StarWindServiceAE;StarWind AE Service; C:\Program Files (x86)\Alcohol Soft\Alcohol 120\StarWind\StarWindServiceAE.exe [2007-05-28 275968]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
S2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2010-03-18 138576]
S2 gupdate;Google Update Service (gupdate); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2010-09-11 136176]
S3 AppMgmt;@appmgmts.dll,-3250; C:\Windows\system32\svchost.exe [2009-07-14 27136]
S3 EhttpSrv;ESET HTTP Server; C:\Program Files\ESET\ESET NOD32 Antivirus\EHttpSrv.exe [2010-03-31 42336]
S3 IDriverT;InstallDriver Table Manager; C:\Program Files (x86)\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe [2005-04-04 69632]
S3 PeerDistSvc;@%SystemRoot%\system32\peerdistsvc.dll,-9000; C:\Windows\System32\svchost.exe [2009-07-14 27136]
S3 StorSvc;@%SystemRoot%\System32\StorSvc.dll,-100; C:\Windows\System32\svchost.exe [2009-07-14 27136]
S3 UmRdpService;@%SystemRoot%\system32\umrdp.dll,-1000; C:\Windows\System32\svchost.exe [2009-07-14 27136]
S3 WatAdminSvc;@%SystemRoot%\system32\Wat\WatUX.exe,-601; C:\Windows\system32\Wat\WatAdminSvc.exe [2010-08-09 1255736]

-----------------EOF-----------------

[Rudy]

Log vypadá čistý. Zkuste ještě sken AVPTool: http://www.viry.cz/forum/viewtopic.php?f=29&t=58179 . Dejte log.

[cart3]

dobry vecer stahl jsem z vaseho odkazu AVPTool ale spadne to behem skenu jako u predchozich programu podobnehom typu
chybu to obcas hodi po zapnuti PC jeste nez nabehnou windows

[Rudy]

Zkuste to v nouz. režimu.

[cart3]

bohuzel ani v nouzovem rezimu

[Rudy]

OK. Zkuste OTL:

Stáhněte OTL: http://oldtimer.geekstogo.com/OTL.exe . Uložte na plochu, klikněte prvým myšítkem a zadejte "spustit jako správce". Zaškrtněte "pro 64b systém", "pro všechny uživatele", "kontrola na havěť LOP" a "PURITY". Do spodního okna vložte:

netsvcs
drivers32
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run /s
c:\windows\*.* /U
%SYSTEMDRIVE%\*.exe
%ALLUSERSPROFILE%\Application Data\*.
%ALLUSERSPROFILE%\Application Data\*.exe /s
%APPDATA%\*.
%APPDATA%\*.exe /s
/md5start
eventlog.dll
scecli.dll
netlogon.dll
cngaudit.dll
sceclt.dll
ntelogon.dll
logevent.dll
iaStor.sys
nvstor.sys
atapi.sys
IdeChnDr.sys
viasraid.sys
AGP440.sys
vaxscsi.sys
nvatabus.sys
viamraid.sys
nvata.sys
nvgts.sys
iastorv.sys
ViPrt.sys
eNetHook.dll
ahcix86.sys
KR10N.sys
nvstor32.sys
ahcix86s.sys
nvrd32.sys
symmpi.sys
adp3132.sys
mv61xx.sys
nvraid.sys
ndis.sys
winlogon.exe
explorer.exe
userinit.exe
lsass.exe
svchost.exe
smss.exe
hal.dll
ws2_32.dll
tcpip.sys
cryptsvc.dll
Changer.sys
JakNDis.sys
isapnp.sys
cdrom.sys
autochk.exe
/md5stop
%systemroot%\*. /mp /s
%systemroot%\system32\*.dll /lockedfiles
%systemroot%\Tasks\*.job /lockedfiles
%systemroot%\system32\drivers\*.sys /lockedfiles
%systemroot%\System32\config\*.sav
%systemroot%\system32\*.dll /lockedfiles
reg query "HKLM\Software\Microsoft\Windows NT\CurrentVersion\winlogon" /v GinaDLL /c
reg query "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wuauserv" /v ImagePath /c
reg query "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\BITS" /v ImagePath /c
%systemroot%\system32\drivers\*.sys /3
%systemroot%\system32\*.* /3
CREATERESTOREPOINT

Klikněte na "Prohledat" a vložte logy OTL.txt. a Extras.txt.

[cart3]

opet to spadne behem prohledavani

[Rudy]

Spíše než vir to vypadá na chybu systému. Zkuste k opravě Win7Manager: http://www.yamicsoft.com/windows7manager/index.html , příp. opravte z instal. DVD