VIRY.CZ

Dobrý deň.. Keď mám pc zapnutý dlhšie ako 30 min tak zamrzne a musim restartovat.. a ked ho restartujem tak niekedy asi 4x sa vypne a potom zapne ... prosím pomoc


Log z RSITu:
Logfile of random's system information tool 1.08 (written by random/random)
Run by User1 at 2010-12-19 15:42:46
Systém Microsoft Windows XP Professional Service Pack 3
System drive C: has 61 GB (25%) free of 238 GB
Total RAM: 2047 MB (73% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 15:42:50, on 19.12.2010
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Alwil Software\Avast5\AvastSvc.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\WINDOWS\System32\ezSharedSvcHost.exe
C:\Program Files\LogMeIn Hamachi\hamachi-2.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\Program Files\Common Files\PC Tools\sMonitor\StartManSvc.exe
C:\Program Files\Ovislink\Common\RaRegistry.exe
C:\Program Files\TeamViewer\Version5\TeamViewer_Service.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\RTHDCPL.EXE
C:\WINDOWS\system32\RUNDLL32.EXE
C:\PROGRA~1\ALWILS~1\Avast5\avastUI.exe
C:\Program Files\Common Files\Java\Java Update\jusched.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Common Files\Adobe\OOBE\PDApp\UWA\AAM Updates Notifier.exe
C:\Program Files\Pando Networks\Media Booster\PMB.exe
C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
C:\Program Files\Ovislink\Common\RaUI.exe
C:\Program Files\McAfee Security Scan\2.0.181\SSScheduler.exe
C:\WINDOWS\system32\wuauclt.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\msiexec.exe
C:\Program Files\Opera\opera.exe
C:\WINDOWS\system32\igfxsrvc.exe
C:\Documents and Settings\User1\Desktop\RSIT.exe
C:\Program Files\trend micro\User1.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://search.conduit.com?SearchSource= ... =CT2077543
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
R3 - URLSearchHook: UrlSearchHook Class - {00000000-6E41-4FD3-8538-502F5495E5FC} - C:\Program Files\Ask.com\GenericAskToolbar.dll
R3 - URLSearchHook: (no name) - - (no file)
R3 - URLSearchHook: Softonic-Eng7 Toolbar - {414b6d9d-4a95-4e8d-b5b1-149dd2d93bb3} - C:\Program Files\Softonic-Eng7\tbSof1.dll
R3 - URLSearchHook: ToggleEN Toolbar - {038cb5c7-48ea-4af9-94e0-a1646542e62b} - C:\Program Files\ToggleEN\tbTogg.dll
F2 - REG:system.ini: UserInit=C:\WINDOWS\system32\ezShellStart.exe
O1 - Hosts: ::1 localhost
O2 - BHO: ToggleEN Toolbar - {038cb5c7-48ea-4af9-94e0-a1646542e62b} - C:\Program Files\ToggleEN\tbTogg.dll
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: Conduit Engine - {30F9B915-B755-4826-820B-08FBA6BD249D} - C:\Program Files\ConduitEngine\ConduitEngine.dll
O2 - BHO: Softonic-Eng7 Toolbar - {414b6d9d-4a95-4e8d-b5b1-149dd2d93bb3} - C:\Program Files\Softonic-Eng7\tbSof1.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll
O2 - BHO: SkypeIEPluginBHO - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.6.5805.1910\swg.dll
O2 - BHO: Ask Toolbar BHO - {D4027C7F-154A-4066-A1AD-4243D8127440} - C:\Program Files\Ask.com\GenericAskToolbar.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
O3 - Toolbar: DAEMON Tools Toolbar - {32099AAC-C132-4136-9E9A-4E364A424E17} - C:\Program Files\DAEMON Tools Toolbar\DTToolbar.dll
O3 - Toolbar: Softonic-Eng7 Toolbar - {414b6d9d-4a95-4e8d-b5b1-149dd2d93bb3} - C:\Program Files\Softonic-Eng7\tbSof1.dll
O3 - Toolbar: Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll
O3 - Toolbar: Ask Toolbar - {D4027C7F-154A-4066-A1AD-4243D8127440} - C:\Program Files\Ask.com\GenericAskToolbar.dll
O3 - Toolbar: ToggleEN Toolbar - {038cb5c7-48ea-4af9-94e0-a1646542e62b} - C:\Program Files\ToggleEN\tbTogg.dll
O3 - Toolbar: Conduit Engine - {30F9B915-B755-4826-820B-08FBA6BD249D} - C:\Program Files\ConduitEngine\ConduitEngine.dll
O4 - HKLM\..\Run: [IgfxTray] C:\WINDOWS\system32\igfxtray.exe
O4 - HKLM\..\Run: [HotKeysCmds] C:\WINDOWS\system32\hkcmd.exe
O4 - HKLM\..\Run: [Persistence] C:\WINDOWS\system32\igfxpers.exe
O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE
O4 - HKLM\..\Run: [Alcmtr] ALCMTR.EXE
O4 - HKLM\..\Run: [nwiz] nwiz.exe /installquiet
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [avast5] C:\PROGRA~1\ALWILS~1\Avast5\avastUI.exe /nogui
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Common Files\Java\Java Update\jusched.exe"
O4 - HKLM\..\Run: [LogMeIn Hamachi Ui] "C:\Program Files\LogMeIn Hamachi\hamachi-2-ui.exe" --auto-start
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKLM\..\Run: [AdobeAAMUpdater-1.0] "C:\Program Files\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe"
O4 - HKLM\..\Run: [SwitchBoard] C:\Program Files\Common Files\Adobe\SwitchBoard\SwitchBoard.exe
O4 - HKLM\..\Run: [AdobeCS5ServiceManager] "C:\Program Files\Common Files\Adobe\CS5ServiceManager\CS5ServiceManager.exe" -launchedbylogin
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [EA Core] "C:\Program Files\Electronic Arts\EADM\Core.exe" -silent
O4 - HKCU\..\Run: [Pando Media Booster] C:\Program Files\Pando Networks\Media Booster\PMB.exe
O4 - HKCU\..\Run: [swg] "C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe"
O4 - HKCU\..\Run: [DAEMON Tools Lite] "C:\Program Files\DAEMON Tools Lite\DTLite.exe" -autorun
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKCU\..\Run: [Skype] "C:\Program Files\Skype\Phone\Skype.exe" /nosplash /minimized
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - Startup: Adobe Gamma.lnk = C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe
O4 - Startup: OpenOffice.org 3.1.lnk = C:\Program Files\OpenOffice.org 3\program\quickstart.exe
O4 - Startup: Xfire.lnk = C:\Program Files\Xfire\Xfire.exe
O4 - Global Startup: AirLive WN-360USB Utility.lnk = C:\Program Files\Ovislink\Common\RaUI.exe
O4 - Global Startup: McAfee Security Scan Plus.lnk = ?
O8 - Extra context menu item: Google Sidewiki... - res://C:\Program Files\Google\Google Toolbar\Component\GoogleToolbarDynamic_mui_en_950DF09FAB501E03.dll/cmsidewiki.html
O9 - Extra button: Skype add-on for Internet Explorer - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O9 - Extra 'Tools' menuitem: Skype add-on for Internet Explorer - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: ICQ6 - {E59EB121-F339-4851-A3BA-FE49C35617C2} - C:\Program Files\ICQ6.5\ICQ.exe
O9 - Extra 'Tools' menuitem: ICQ6 - {E59EB121-F339-4851-A3BA-FE49C35617C2} - C:\Program Files\ICQ6.5\ICQ.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {063F7D71-5E0B-48F2-87D5-F63C5917947E} (Aosmgr Control) - http://ahnlabdownload.nefficient.co.kr/ ... aosmgr.cab
O16 - DPF: {20D5FC56-9F89-4966-94E1-122DDA4FA5E7} (GLauncher Control) - http://ro2.game.gnjoy.com/cab/GSystemInfo.cab
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/s ... wflash.cab
O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} - http://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab
O18 - Protocol: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O18 - Protocol: toolbarchrome - {718733BC-AD64-4E5F-AC18-A85FBD75D54D} - C:\Program Files\RadioBar\toolbar.ni.dll (file missing)
O22 - SharedTaskScheduler: Browseui preloader - {438755C2-A8BA-11D1-B96B-00A0C90312E1} - C:\WINDOWS\system32\browseui.dll
O22 - SharedTaskScheduler: Component Categories cache daemon - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\WINDOWS\system32\browseui.dll
O23 - Service: Adobe LM Service - Adobe Systems - C:\Program Files\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe
O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast5\AvastSvc.exe
O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast5\AvastSvc.exe
O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast5\AvastSvc.exe
O23 - Service: ##Id_String1.6844F930_1628_4223_B5CC_5BB94B879762## (Bonjour Service) - Apple Computer, Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: Easybits Services for Windows (ezSharedSvc) - EasyBits Software AS - C:\WINDOWS\System32\ezSharedSvcHost.exe
O23 - Service: FLEXnet Licensing Service - Acresso Software Inc. - C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
O23 - Service: Služba Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: Google Software Updater (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: LogMeIn Hamachi 2.0 Tunneling Engine (Hamachi2Svc) - LogMeIn Inc. - C:\Program Files\LogMeIn Hamachi\hamachi-2.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe
O23 - Service: McAfee Security Scan Component Host Service (McComponentHostService) - McAfee, Inc. - C:\Program Files\McAfee Security Scan\2.0.181\McCHSvc.exe
O23 - Service: nProtect GameGuard Service (npggsvc) - Unknown owner - C:\WINDOWS\system32\GameMon.des.exe (file missing)
O23 - Service: NVIDIA Display Driver Service (nvsvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: PC Tools Startup and Shutdown Monitor service (PCToolsSSDMonitorSvc) - Unknown owner - C:\Program Files\Common Files\PC Tools\sMonitor\StartManSvc.exe
O23 - Service: Ralink Registry Writer (RalinkRegistryWriter) - Ralink Technology, Corp. - C:\Program Files\Ovislink\Common\RaRegistry.exe
O23 - Service: SwitchBoard - Adobe Systems Incorporated - C:\Program Files\Common Files\Adobe\SwitchBoard\SwitchBoard.exe
O23 - Service: TeamViewer 5 (TeamViewer5) - TeamViewer GmbH - C:\Program Files\TeamViewer\Version5\TeamViewer_Service.exe

--
End of file - 12619 bytes

======Scheduled tasks folder======

C:\WINDOWS\tasks\AdobeAAMUpdater-1.0-HOME-99E7D2C23F-User1.job
C:\WINDOWS\tasks\GoogleUpdateTaskMachineCore.job
C:\WINDOWS\tasks\GoogleUpdateTaskMachineUA.job
C:\WINDOWS\tasks\Norton Security Scan for User1.job
C:\WINDOWS\tasks\RMSchedule.job
C:\WINDOWS\tasks\RMSmartUpdate.job
C:\WINDOWS\tasks\Scheduled Update for Ask Toolbar.job

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{038cb5c7-48ea-4af9-94e0-a1646542e62b}]
ToggleEN Toolbar - C:\Program Files\ToggleEN\tbTogg.dll [2010-09-12 3863136]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
Adobe PDF Link Helper - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2010-09-22 75200]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{30F9B915-B755-4826-820B-08FBA6BD249D}]
Conduit Engine - C:\Program Files\ConduitEngine\ConduitEngine.dll [2010-09-12 3863136]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{414b6d9d-4a95-4e8d-b5b1-149dd2d93bb3}]
Softonic-Eng7 Toolbar - C:\Program Files\Softonic-Eng7\tbSof1.dll [2010-10-27 2735200]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AA58ED58-01DD-4d91-8333-CF10577473F7}]
Google Toolbar Helper - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll [2010-10-27 297648]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}]
Skype add-on for Internet Explorer - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll [2010-02-08 804136]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AF69DE43-7D58-4638-B6FA-CE66B5AD205D}]
Google Toolbar Notifier BHO - C:\Program Files\Google\GoogleToolbarNotifier\5.6.5805.1910\swg.dll [2010-10-27 843832]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{D4027C7F-154A-4066-A1AD-4243D8127440}]
Ask Toolbar - C:\Program Files\Ask.com\GenericAskToolbar.dll [2010-09-28 1400712]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre6\bin\jp2ssv.dll [2010-03-01 41760]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{E7E6F031-17CE-4C07-BC86-EABFE594F69C}]
JQSIEStartDetectorImpl Class - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll [2010-03-01 79648]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{32099AAC-C132-4136-9E9A-4E364A424E17} - DAEMON Tools Toolbar - C:\Program Files\DAEMON Tools Toolbar\DTToolbar.dll [2010-03-25 968000]
{414b6d9d-4a95-4e8d-b5b1-149dd2d93bb3} - Softonic-Eng7 Toolbar - C:\Program Files\Softonic-Eng7\tbSof1.dll [2010-10-27 2735200]
{2318C2B1-4965-11d4-9B18-009027A5CD4F} - Google Toolbar - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll [2010-10-27 297648]
{D4027C7F-154A-4066-A1AD-4243D8127440} - Ask Toolbar - C:\Program Files\Ask.com\GenericAskToolbar.dll [2010-09-28 1400712]
{038cb5c7-48ea-4af9-94e0-a1646542e62b} - ToggleEN Toolbar - C:\Program Files\ToggleEN\tbTogg.dll [2010-09-12 3863136]
{30F9B915-B755-4826-820B-08FBA6BD249D} - Conduit Engine - C:\Program Files\ConduitEngine\ConduitEngine.dll [2010-09-12 3863136]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"IgfxTray"=C:\WINDOWS\system32\igfxtray.exe [2006-10-05 98304]
"HotKeysCmds"=C:\WINDOWS\system32\hkcmd.exe [2006-10-05 114688]
"Persistence"=C:\WINDOWS\system32\igfxpers.exe [2006-10-05 94208]
"RTHDCPL"=C:\WINDOWS\RTHDCPL.EXE [2008-04-10 16861184]
"Alcmtr"=C:\WINDOWS\ALCMTR.EXE [2005-05-03 69632]
"nwiz"=nwiz.exe /installquiet []
"NvCplDaemon"=C:\WINDOWS\system32\NvCpl.dll [2009-11-20 12669544]
"NvMediaCenter"=C:\WINDOWS\system32\NvMcTray.dll [2009-11-20 110184]
"NeroFilterCheck"=C:\WINDOWS\system32\NeroCheck.exe [2001-07-09 155648]
"avast5"=C:\PROGRA~1\ALWILS~1\Avast5\avastUI.exe [2010-05-06 2815192]
"SunJavaUpdateSched"=C:\Program Files\Common Files\Java\Java Update\jusched.exe [2010-02-18 248040]
"LogMeIn Hamachi Ui"=C:\Program Files\LogMeIn Hamachi\hamachi-2-ui.exe [2010-03-30 1820040]
"Adobe Reader Speed Launcher"=C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe [2010-09-23 35760]
"Adobe ARM"=C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2010-09-20 932288]
"AdobeAAMUpdater-1.0"=C:\Program Files\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [2010-03-06 500208]
"SwitchBoard"=C:\Program Files\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [2010-02-19 517096]
"AdobeCS5ServiceManager"=C:\Program Files\Common Files\Adobe\CS5ServiceManager\CS5ServiceManager.exe [2010-02-22 406992]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"=C:\WINDOWS\system32\ctfmon.exe [2008-04-14 15360]
"EA Core"=C:\Program Files\Electronic Arts\EADM\Core.exe [2009-03-28 3325952]
"Pando Media Booster"=C:\Program Files\Pando Networks\Media Booster\PMB.exe [2010-11-28 2975640]
"swg"=C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe [2010-05-08 39408]
"DAEMON Tools Lite"=C:\Program Files\DAEMON Tools Lite\DTLite.exe [2010-04-01 357696]
"MSMSGS"=C:\Program Files\Messenger\msmsgs.exe [2008-04-14 1695232]
"Skype"=C:\Program Files\Skype\Phone\Skype.exe [2010-09-02 13351304]

C:\Documents and Settings\All Users\Start Menu\Programs\Startup
AirLive WN-360USB Utility.lnk - C:\Program Files\Ovislink\Common\RaUI.exe
McAfee Security Scan Plus.lnk - C:\Program Files\McAfee Security Scan\2.0.181\SSScheduler.exe

C:\Documents and Settings\User1\Start Menu\Programs\Startup
Adobe Gamma.lnk - C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe
OpenOffice.org 3.1.lnk - C:\Program Files\OpenOffice.org 3\program\quickstart.exe
Xfire.lnk - C:\Program Files\Xfire\Xfire.exe

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\igfxcui]
C:\WINDOWS\system32\igfxdev.dll [2006-10-05 155648]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\WgaLogon]
C:\WINDOWS\system32\WgaLogon.dll [2009-03-10 239496]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{E54729E8-BB3D-4270-9D49-7389EA579090}"=C:\WINDOWS\system32\EZUPBH~1.DLL [2010-11-08 52920]
"UPB:{AEB6717E-7E19-11d0-97EE-00C04FD91972}"= []

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Hamachi2Svc]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"DisableLockWorkstation"=0
"DisableTaskMgr"=0
"DisableChangePassword"=0

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1
"HideFastUserSwitching"=0

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=145
"NoLogoff"=0
"NoClose"=0

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"HonorAutoRunSetting"=1
"EnableShellExecuteHooks"=1

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"C:\Program Files\Opera\opera.exe"="C:\Program Files\Opera\opera.exe:*:Enabled:Opera Internet Browser"
"C:\Program Files\Electronic Arts\EADM\Core.exe"="C:\Program Files\Electronic Arts\EADM\Core.exe:*:Enabled:EA Download Manager"
"C:\Program Files\Common Files\Adobe\CS4ServiceManager\CS4ServiceManager.exe"="C:\Program Files\Common Files\Adobe\CS4ServiceManager\CS4ServiceManager.exe:*:Enabled:Adobe CSI CS4"
"C:\Program Files\Pando Networks\Media Booster\PMB.exe"="C:\Program Files\Pando Networks\Media Booster\PMB.exe:*:Enabled:Pando Media Booster"
"C:\Program Files\Outspark\Project Powder\Run.exe"="C:\Program Files\Outspark\Project Powder\Run.exe:*:Enabled:ProjectPowder"
"C:\Program Files\Tremulous\tremulous.exe"="C:\Program Files\Tremulous\tremulous.exe:*:Enabled:tremulous"
"C:\Program Files\ICQ6\ICQ.exe"="C:\Program Files\ICQ6\ICQ.exe:*:Enabled:ICQ6"
"C:\Program Files\ICQ6.5\ICQ.exe"="C:\Program Files\ICQ6.5\ICQ.exe:*:Enabled:ICQ6"
"C:\UT2004\System\UT2004.exe"="C:\UT2004\System\UT2004.exe:*:Enabled:UT2004"
"C:\Program Files\BitTorrent\bittorrent.exe"="C:\Program Files\BitTorrent\bittorrent.exe:*:Enabled:BitTorrent"
"C:\Documents and Settings\User1\Desktop\Miska\NTSD2.3\NTSD2.3.exe"="C:\Documents and Settings\User1\Desktop\Miska\NTSD2.3\NTSD2.3.exe:*:Enabled:NTSD2.3"
"C:\Ntreev USA\Grand Chase\main.exe"="C:\Ntreev USA\Grand Chase\main.exe:*:Enabled:GrandChase"
"C:\Documents and Settings\User1\Desktop\Hra\Eclipse-Stable\Server\server.exe"="C:\Documents and Settings\User1\Desktop\Hra\Eclipse-Stable\Server\server.exe:*:Enabled:Eclipse Stable Edition Server"
"C:\Program Files\Realm Crafter Demo\Realm Crafter 1\Projects\Sample Game\Server.exe"="C:\Program Files\Realm Crafter Demo\Realm Crafter 1\Projects\Sample Game\Server.exe:*:Enabled:Server"
"C:\WINDOWS\system32\dplaysvr.exe"="C:\WINDOWS\system32\dplaysvr.exe:*:Enabled:Microsoft DirectPlay Helper"
"C:\Program Files\Microsoft Games\Age Of Empires II Gold Edition\age2_x1.exe"="C:\Program Files\Microsoft Games\Age Of Empires II Gold Edition\age2_x1.exe:*:Enabled:Age of Empires II Expansion"
"C:\Program Files\Skype\Plugin Manager\skypePM.exe"="C:\Program Files\Skype\Plugin Manager\skypePM.exe:*:Enabled:Skype Extras Manager"
"C:\AeriaGames\WolfTeam\Wolfteam.bin"="C:\AeriaGames\WolfTeam\Wolfteam.bin:*:Enabled:WolfTeam"
"C:\Documents and Settings\User1\Local Settings\Temp\Blizzard Installer Bootstrap - 001f5695\Installer.exe"="C:\Documents and Settings\User1\Local Settings\Temp\Blizzard Installer Bootstrap - 001f5695\Installer.exe:*:Enabled:Blizzard Downloader"
"C:\Program Files\World of Warcraft\Launcher.exe"="C:\Program Files\World of Warcraft\Launcher.exe:*:Enabled:Blizzard Launcher"
"C:\Program Files\World of Warcraft\Launcher.patch.exe"="C:\Program Files\World of Warcraft\Launcher.patch.exe:*:Enabled:Blizzard Launcher"
"C:\Program Files\TeamViewer\Version5\TeamViewer.exe"="C:\Program Files\TeamViewer\Version5\TeamViewer.exe:*:Enabled:Teamviewer Remote Control Application"
"C:\Program Files\TeamViewer\Version5\TeamViewer_Service.exe"="C:\Program Files\TeamViewer\Version5\TeamViewer_Service.exe:*:Enabled:Teamviewer Remote Control Service"
"C:\Program Files\EasyBits For Kids\Programs\My First Browser\MyFirstBrowser.exe"="C:\Program Files\EasyBits For Kids\Programs\My First Browser\MyFirstBrowser.exe:*:Enabled:My First Browser"
"C:\Program Files\Metin2\metin2client.bin"="C:\Program Files\Metin2\metin2client.bin:*:Enabled:metin2client"
"C:\Program Files\Bonjour\mDNSResponder.exe"="C:\Program Files\Bonjour\mDNSResponder.exe:*:Enabled:Bonjour"
"C:\Program Files\SecondLifeViewer2\SLVoice.exe"="C:\Program Files\SecondLifeViewer2\SLVoice.exe:*:Enabled:SLVoice"
"C:\Program Files\Skype\Phone\Skype.exe"="C:\Program Files\Skype\Phone\Skype.exe:*:Enabled:Skype"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"

======List of files/folders created in the last 1 months======

2010-12-19 15:42:46 ----D---- C:\rsit
2010-12-18 18:34:16 ----D---- C:\Program Files\icytower1.3
2010-12-08 18:43:19 ----D---- C:\Documents and Settings\User1\Application Data\Adobe Mini Bridge CS5
2010-12-08 18:43:18 ----D---- C:\Documents and Settings\User1\Application Data\StageManager.BD092818F67280F4B42B04877600987F0111B594.1
2010-12-08 18:32:05 ----D---- C:\Documents and Settings\All Users\Application Data\regid.1986-12.com.adobe
2010-12-08 18:27:37 ----D---- C:\Program Files\Common Files\Adobe AIR
2010-12-08 18:04:22 ----D---- C:\Program Files\Common Files\Akamai
2010-12-04 17:24:40 ----D---- C:\Documents and Settings\User1\Application Data\SecondLife
2010-12-04 17:24:12 ----D---- C:\Program Files\SecondLifeViewer2
2010-11-28 19:15:14 ----D---- C:\Documents and Settings\All Users\Application Data\Adobe Systems
2010-11-28 19:12:49 ----D---- C:\Program Files\Common Files\Adobe Systems Shared
2010-11-28 18:31:38 ----D---- C:\Program Files\ConduitEngine
2010-11-28 18:31:36 ----D---- C:\Program Files\ToggleEN
2010-11-28 10:21:41 ----D---- C:\GamesCampus
2010-11-24 14:36:07 ----D---- C:\Documents and Settings\User1\Application Data\PriceGong
2010-11-24 14:31:40 ----A---- C:\WINDOWS\system32\drivers\Mkd2Nadr.sys
2010-11-24 14:31:40 ----A---- C:\WINDOWS\system32\drivers\Mkd2kfNT.sys
2010-11-24 14:31:40 ----A---- C:\WINDOWS\system32\drivers\Mkd2BthF.sys
2010-11-24 14:29:52 ----D---- C:\Documents and Settings\User1\Application Data\Ahnlab
2010-11-24 14:28:20 ----D---- C:\Program Files\AhnLab
2010-11-24 14:21:25 ----A---- C:\WINDOWS\system32\kbdkor.dll
2010-11-24 14:21:25 ----A---- C:\WINDOWS\system32\kbdjpn.dll
2010-11-24 14:21:24 ----A---- C:\WINDOWS\system32\kbd103.dll
2010-11-24 14:21:24 ----A---- C:\WINDOWS\system32\kbd101c.dll
2010-11-24 14:21:21 ----A---- C:\WINDOWS\system32\kbd101b.dll
2010-11-24 14:21:20 ----A---- C:\WINDOWS\system32\kbd106.dll
2010-11-22 19:34:51 ----D---- C:\Program Files\QuickTime
2010-11-22 19:33:56 ----D---- C:\Program Files\Bonjour
2010-11-22 06:26:19 ----D---- C:\Program Files\Metin2

======List of files/folders modified in the last 1 months======

2010-12-19 15:42:48 ----D---- C:\Program Files\trend micro
2010-12-19 15:38:35 ----D---- C:\WINDOWS\Temp
2010-12-19 15:38:29 ----SHD---- C:\WINDOWS\Installer
2010-12-19 15:37:41 ----D---- C:\Documents and Settings\User1\Application Data\Skype
2010-12-19 15:37:29 ----D---- C:\Documents and Settings\User1\Application Data\Xfire
2010-12-19 15:28:03 ----AD---- C:\Documents and Settings\All Users\Application Data\TEMP
2010-12-19 14:20:00 ----D---- C:\games
2010-12-19 14:19:54 ----D---- C:\WINDOWS\Prefetch
2010-12-19 14:19:47 ----D---- C:\WINDOWS\system32
2010-12-19 11:08:37 ----D---- C:\Program Files\World of Warcraft
2010-12-19 10:05:28 ----D---- C:\Documents and Settings\User1\Application Data\skypePM
2010-12-18 22:09:44 ----A---- C:\WINDOWS\SchedLgU.Txt
2010-12-18 18:48:34 ----D---- C:\Program Files\Tremulous
2010-12-18 18:34:16 ----RD---- C:\Program Files
2010-12-15 17:43:45 ----D---- C:\WINDOWS
2010-12-15 17:43:42 ----D---- C:\Program Files\Common Files\Symantec Shared
2010-12-15 15:02:34 ----SD---- C:\WINDOWS\Tasks
2010-12-13 20:18:48 ----D---- C:\WINDOWS\system32\CatRoot2
2010-12-12 17:43:06 ----A---- C:\WINDOWS\NeroDigital.ini
2010-12-10 15:50:13 ----D---- C:\Program Files\AV Vcs 7.0 DIAMOND
2010-12-10 06:24:53 ----D---- C:\Documents and Settings\All Users\Application Data\Adobe
2010-12-09 20:19:15 ----D---- C:\Program Files\Mozilla Firefox
2010-12-09 15:48:06 ----D---- C:\Program Files\Gravity
2010-12-09 08:25:13 ----RSD---- C:\WINDOWS\Fonts
2010-12-08 18:31:45 ----D---- C:\Documents and Settings\User1\Application Data\Adobe
2010-12-08 18:31:02 ----D---- C:\Program Files\Adobe
2010-12-08 18:29:58 ----D---- C:\Program Files\Common Files\Adobe
2010-12-08 18:27:37 ----D---- C:\Program Files\Common Files
2010-12-08 18:26:41 ----D---- C:\WINDOWS\WinSxS
2010-12-07 21:09:17 ----D---- C:\Documents and Settings\User1\Application Data\Opera
2010-12-04 19:31:16 ----D---- C:\Documents and Settings\User1\Application Data\Audacity
2010-12-04 18:05:17 ----D---- C:\Program Files\Opera
2010-11-28 10:25:49 ----D---- C:\WINDOWS\system32\drivers
2010-11-28 10:09:40 ----D---- C:\Documents and Settings\All Users\Application Data\PMB Files
2010-11-28 09:34:03 ----A---- C:\WINDOWS\IFinst27.exe
2010-11-27 07:26:36 ----D---- C:\Program Files\DOSBox-0.74
2010-11-24 15:07:39 ----SD---- C:\WINDOWS\Downloaded Program Files
2010-11-24 15:06:35 ----RSHDC---- C:\WINDOWS\system32\dllcache
2010-11-24 14:28:20 ----HD---- C:\WINDOWS\inf

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 sptd;sptd; C:\WINDOWS\System32\Drivers\sptd.sys [2010-04-18 691696]
R1 Aavmker4;avast! Asynchronous Virus Monitor; C:\WINDOWS\system32\drivers\Aavmker4.sys [2010-05-06 28880]
R1 aswSP;aswSP; C:\WINDOWS\system32\drivers\aswSP.sys [2010-05-06 164048]
R1 aswTdi;avast! Network Shield Support; C:\WINDOWS\system32\drivers\aswTdi.sys [2010-05-06 46672]
R1 intelppm;Intel Processor Driver; C:\WINDOWS\system32\DRIVERS\intelppm.sys [2008-04-14 36352]
R2 adfs;adfs; C:\WINDOWS\system32\drivers\adfs.sys [2008-08-14 74720]
R2 aswFsBlk;aswFsBlk; C:\WINDOWS\system32\drivers\aswFsBlk.sys [2010-05-06 19024]
R2 aswMon2;avast! Standard Shield Support; C:\WINDOWS\system32\drivers\aswMon2.sys [2010-05-06 100432]
R2 irda;IrDA Protocol; C:\WINDOWS\system32\DRIVERS\irda.sys [2008-04-14 88192]
R2 Scutum50;Scutum50 NDIS Protocol Driver; C:\WINDOWS\System32\Drivers\Scutum50.sys [2009-04-21 19072]
R3 aswRdr;aswRdr; C:\WINDOWS\system32\drivers\aswRdr.sys [2010-05-06 23376]
R3 hamachi;Hamachi Network Interface; C:\WINDOWS\system32\DRIVERS\hamachi.sys [2010-02-03 26176]
R3 HDAudBus;Microsoft UAA Bus Driver for High Definition Audio; C:\WINDOWS\system32\DRIVERS\HDAudBus.sys [2008-04-14 144384]
R3 HidUsb;Microsoft HID Class Driver; C:\WINDOWS\system32\DRIVERS\hidusb.sys [2008-04-14 10368]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\WINDOWS\system32\drivers\RtkHDAud.sys [2008-04-17 4707328]
R3 irsir;Microsoft Serial Infrared Driver; C:\WINDOWS\system32\DRIVERS\irsir.sys [2001-08-17 18688]
R3 mouhid;Mouse HID Driver; C:\WINDOWS\system32\DRIVERS\mouhid.sys [2001-08-17 12160]
R3 nv;nv; C:\WINDOWS\system32\DRIVERS\nv4_mini.sys [2009-11-21 10235968]
R3 NVHDA;Service for NVIDIA High Definition Audio Driver; C:\WINDOWS\system32\drivers\nvhda32.sys [2009-11-12 57320]
R3 Rasirda;WAN Miniport (IrDA); C:\WINDOWS\system32\DRIVERS\rasirda.sys [2001-08-17 19584]
R3 rt2870;Ralink 802.11n USB Wireless LAN Card Driver; C:\WINDOWS\system32\DRIVERS\rt2870.sys [2009-08-03 724736]
R3 RTLE8023xp;Realtek 10/100/1000 PCI-E NIC Family NDIS XP Driver; C:\WINDOWS\system32\DRIVERS\Rtenicxp.sys [2008-01-03 105856]
R3 usbstor;USB Mass Storage Driver; C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS [2008-04-14 26368]
R3 usbuhci;Microsoft USB Universal Host Controller Miniport Driver; C:\WINDOWS\system32\DRIVERS\usbuhci.sys [2008-04-14 20608]
R3 VCSVADHWSer;Avnex Virtual Audio Device (WDM); C:\WINDOWS\system32\DRIVERS\vcsvad.sys [2008-12-26 17792]
S3 amhfg2mw;amhfg2mw; C:\WINDOWS\system32\drivers\amhfg2mw.sys []
S3 EagleNT;EagleNT; \??\C:\WINDOWS\system32\drivers\EagleNT.sys []
S3 FXDrv32;FXDrv32; \??\D:\FXDrv32.sys []
S3 ialm;ialm; C:\WINDOWS\system32\DRIVERS\igxpmp32.sys [2006-10-05 1181824]
S3 Mkd2kfNt;Mkd2kfNt; C:\WINDOWS\system32\drivers\Mkd2kfNt.sys [2010-10-29 142320]
S3 Mkd2Nadr;Mkd2Nadr; C:\WINDOWS\system32\drivers\Mkd2Nadr.sys [2010-10-29 87792]
S3 npkcrypt;npkcrypt; \??\C:\Program Files\Gravity\Mama\Rofriends Network\npkcrypt.sys []
S3 XDva262;XDva262; \??\C:\WINDOWS\system32\XDva262.sys []
S3 XDva281;XDva281; \??\C:\WINDOWS\system32\XDva281.sys []
S3 XDva351;XDva351; \??\C:\WINDOWS\system32\XDva351.sys []

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 Akamai;Akamai NetSession Interface; C:\WINDOWS\System32\svchost.exe [2008-04-14 14336]
R2 avast! Antivirus;avast! Antivirus; C:\Program Files\Alwil Software\Avast5\AvastSvc.exe [2010-05-06 40384]
R2 Bonjour Service;##Id_String1.6844F930_1628_4223_B5CC_5BB94B879762##; C:\Program Files\Bonjour\mDNSResponder.exe [2006-02-28 229376]
R2 ezSharedSvc;Easybits Services for Windows; C:\WINDOWS\System32\ezSharedSvcHost.exe [2010-04-23 514232]
R2 Hamachi2Svc;LogMeIn Hamachi 2.0 Tunneling Engine; C:\Program Files\LogMeIn Hamachi\hamachi-2.exe [2010-03-30 1107336]
R2 Irmon;Infrared Monitor; C:\WINDOWS\system32\svchost.exe [2008-04-14 14336]
R2 JavaQuickStarterService;Java Quick Starter; C:\Program Files\Java\jre6\bin\jqs.exe [2010-03-01 153376]
R2 nvsvc;NVIDIA Display Driver Service; C:\WINDOWS\system32\nvsvc32.exe [2009-11-20 154216]
R2 PCToolsSSDMonitorSvc;PC Tools Startup and Shutdown Monitor service; C:\Program Files\Common Files\PC Tools\sMonitor\StartManSvc.exe [2010-08-05 583640]
R2 RalinkRegistryWriter;Ralink Registry Writer; C:\Program Files\Ovislink\Common\RaRegistry.exe [2009-07-14 185632]
R2 TeamViewer5;TeamViewer 5; C:\Program Files\TeamViewer\Version5\TeamViewer_Service.exe [2010-10-06 2002728]
R3 avast! Mail Scanner;avast! Mail Scanner; C:\Program Files\Alwil Software\Avast5\AvastSvc.exe [2010-05-06 40384]
R3 avast! Web Scanner;avast! Web Scanner; C:\Program Files\Alwil Software\Avast5\AvastSvc.exe [2010-05-06 40384]
S2 gupdate;Služba Google Update (gupdate); C:\Program Files\Google\Update\GoogleUpdate.exe [2010-05-08 135664]
S3 Adobe LM Service;Adobe LM Service; C:\Program Files\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe [2010-11-28 72704]
S3 aspnet_state;ASP.NET State Service; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe [2008-07-25 34312]
S3 clr_optimization_v2.0.50727_32;.NET Runtime Optimization Service v2.0.50727_X86; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe [2008-07-25 69632]
S3 FLEXnet Licensing Service;FLEXnet Licensing Service; C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe [2009-12-21 655624]
S3 FontCache3.0.0.0;Windows Presentation Foundation Font Cache 3.0.0.0; c:\WINDOWS\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe [2008-07-29 46104]
S3 gusvc;Google Software Updater; C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe [2010-05-08 182768]
S3 IDriverT;InstallDriver Table Manager; C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe [2005-04-04 69632]
S3 idsvc;Windows CardSpace; c:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe [2008-07-29 881664]
S3 McComponentHostService;McAfee Security Scan Component Host Service; C:\Program Files\McAfee Security Scan\2.0.181\McCHSvc.exe [2010-01-15 227232]
S3 npggsvc;nProtect GameGuard Service; C:\WINDOWS\system32\GameMon.des [2010-02-24 3461116]
S3 SwitchBoard;SwitchBoard; C:\Program Files\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [2010-02-19 517096]
S3 usprserv;User Privilege Service; C:\WINDOWS\System32\svchost.exe [2008-04-14 14336]
S4 MySQL;MySQL; C:\Program Files\MySQL\MySQL Server 5.0\bin\mysqld-nt --defaults-file=C:\Program Files\MySQL\MySQL Server 5.0\my.ini MySQL []
S4 NetTcpPortSharing;Net.Tcp Port Sharing Service; c:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe [2008-07-29 132096]

-----------------EOF-----------------

Zdravím,

Klikni na https://www.virustotal.com/cs/
klik "Procházet" > do zadávacího pole "Název souboru" jen zkopíruj:

C:\WINDOWS\system32\ezShellStart.exe

"Send file" (pokud byl již testován, nech testovat znovu - Reanalyse)
Trpělivě vyčkej dokončení scanu dokud se neobjeví konečný výsledek např.0/41
Do fóra zkopíruj výsledný log. nebo odkaz z adresního řádku na stránku.
Pokud nebude nález stačí jen oznámit

File name:
ezShellStart.exe
Submission date:
2010-12-19 15:10:47 (UTC)
Current status:
finished
Result:
0/ 43 (0.0%)

AhnLab-V3 2010.12.20.00 2010.12.19 -
AntiVir 7.11.0.83 2010.12.17 -
Antiy-AVL 2.0.3.7 2010.12.19 -
Avast 4.8.1351.0 2010.12.19 -
Avast5 5.0.677.0 2010.12.19 -
AVG 9.0.0.851 2010.12.19 -
BitDefender 7.2 2010.12.19 -
CAT-QuickHeal 11.00 2010.12.19 -
ClamAV 0.96.4.0 2010.12.19 -
Command 5.2.11.5 2010.12.19 -
Comodo 7117 2010.12.19 -
DrWeb 5.0.2.03300 2010.12.19 -
Emsisoft 5.1.0.1 2010.12.19 -
eSafe 7.0.17.0 2010.12.19 -
eTrust-Vet 36.1.8048 2010.12.17 -
F-Prot 4.6.2.117 2010.12.19 -
F-Secure 9.0.16160.0 2010.12.19 -
Fortinet 4.2.254.0 2010.12.19 -
GData 21 2010.12.19 -
Ikarus T3.1.1.90.0 2010.12.19 -
Jiangmin 13.0.900 2010.12.19 -
K7AntiVirus 9.73.3286 2010.12.18 -
Kaspersky 7.0.0.125 2010.12.19 -
McAfee 5.400.0.1158 2010.12.19 -
McAfee-GW-Edition 2010.1C 2010.12.18 -
Microsoft 1.6402 2010.12.19 -
NOD32 5715 2010.12.19 -
Norman 6.06.12 2010.12.19 -
nProtect 2010-12-19.01 2010.12.19 -
Panda 10.0.2.7 2010.12.19 -
PCTools 7.0.3.5 2010.12.19 -
Prevx 3.0 2010.12.19 -
Rising 22.78.05.00 2010.12.19 -
Sophos 4.60.0 2010.12.19 -
SUPERAntiSpyware 4.40.0.1006 2010.12.18 -
Symantec 20101.3.0.103 2010.12.19 -
TheHacker 6.7.0.1.101 2010.12.15 -
TrendMicro 9.120.0.1004 2010.12.18 -
TrendMicro-HouseCall 9.120.0.1004 2010.12.19 -
VBA32 3.12.14.2 2010.12.17 -
VIPRE 7718 2010.12.19 -
ViRobot 2010.12.18.4208 2010.12.19 -
VirusBuster 13.6.101.2 2010.12.18 -

Otevři Poznámkový blok (Notepad) a vlož zelený text ze scriptu. Soubor ulož jako -> oprava.reg - Uložit jako typ -> Všechny soubory
Zavři a dvojklikem na ikonu spusť - jen problikne a opraví registry - po akci jej smažeš.

Restart

následuje

Stáhni a nainstaluj MBAM zde http://www.download.com/Malwarebytes-An ... tag=button
Spustit > na 3.záložce "Aktualizace" > Kontrola aktualizací
následně na 1.záložce "Kontrolor" -> Rychlá kontrola -> Prohledat
po dokončení scanu vyskočí okno Notepad s výsledkem - obsah zkopíruj do své odpovědi
zatím nic nemazat - počkej na posouzení

edit MBAM po scanu nezavírej

Malwarebytes' Anti-Malware 1.50
http://www.malwarebytes.org

Verzia databázy: 5357

Windows 5.1.2600 Service Pack 3
Internet Explorer 8.0.6001.18702

19.12.2010 16:42:25
mbam-log-2010-12-19 (16-42-25).txt

Typ kontroly: Rýchla kontrola
Objektov kontrolovaných: 141921
Uplynutý čas: 8 min, 15 sek

Infikované služby pamäte: 0
Infikované moduly pamäte: 0
Infikované registračné kľúče: 0
Infikované registračné hodnoty: 0
Infikované položky registračných dát: 0
Infikované priečinky: 0
Infikované súbory: 0

Infikované služby pamäte:
(Škodlivé položky neboli zistené)

Infikované moduly pamäte:
(Škodlivé položky neboli zistené)

Infikované registračné kľúče:
(Škodlivé položky neboli zistené)

Infikované registračné hodnoty:
(Škodlivé položky neboli zistené)

Infikované položky registračných dát:
(Škodlivé položky neboli zistené)

Infikované priečinky:
(Škodlivé položky neboli zistené)

Infikované súbory:
(Škodlivé položky neboli zistené)



Pardon musela som vypnut MBAM lebo mi zase zamrzol pc

Není to způsobeno žádným vlivem malware - bude to problém HW, pravděpodobně přehřívání

Stáhni HWmonitor - http://www.slunecnice.cz/sw/hwmonitor/
pak Ctrl+S - ulož výsledek a sem pak zkopíruješ jeho obsah (*.txt)
nebo sem dej screen jako přílohu

CPUID HWMonitor Report
-------------------------------------------------------------------------

Binaries
-------------------------------------------------------------------------

HWMonitor version 1.1.5.0

Monitoring
-------------------------------------------------------------------------

Mainboard Model ConRoe1333-D667 (0x00000424 - 0x2C92983C)

LPCIO
-------------------------------------------------------------------------

LPCIO Vendor Winbond
LPCIO Model W83627EHF
LPCIO Vendor ID 0x5CA3
LPCIO Chip ID 0x88
LPCIO Revision ID 0x63
Config Mode I/O address 0x2E
Config Mode LDN 0xB
Config Mode registers
00 01 02 03 04 05 06 07 08 09 0A 0B 0C 0D 0E 0F
00 FF FF FF FF FF FF FF 0B FF FF FF FF FF FF FF FF
10 FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF
20 88 63 FF 00 44 00 00 FF 50 04 00 00 01 41 00 FF
30 01 FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF
40 FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF
50 FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF
60 02 90 FF FF FF FF FF FF FF FF FF FF FF FF FF FF
70 00 FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF
Register space LPC, base address = 0x0290


Hardware Monitors
-------------------------------------------------------------------------

Hardware monitor Winbond W83627EHF
Voltage 0 1.31 Volts [0xA4] (CPU VCORE)
Voltage 1 1.34 Volts [0xA7] (VIN0)
Voltage 2 3.30 Volts [0xCE] (AVCC)
Voltage 3 3.30 Volts [0xCE] (+3.3V)
Voltage 4 1.69 Volts [0xD3] (VIN1)
Voltage 5 1.74 Volts [0xDA] (VIN2)
Voltage 6 1.87 Volts [0xEA] (VIN3)
Voltage 7 1.65 Volts [0xCE] (VIN4)
Temperature 0 42°C (107°F) [0x2A] (SYSTIN)
Temperature 1 54°C (128°F) [0x6B] (CPUTIN)
Temperature 2 47°C (115°F) [0x5D] (AUXTIN)
Fan 1 1962 RPM [0x56] (CPUFANIN0)
Hardware registers
Register space LPC, base address = 0x0290
bank 0
00 01 02 03 04 05 06 07 08 09 0A 0B 0C 0D 0E 0F
00 04 FF 04 FF 11 00 32 20 01 CC 01 FF 3C 3C 0A 0A
10 04 FF 10 00 00 01 01 3C 43 07 00 00 57 00 00 C2
20 A2 A5 CE CF D2 DA EA 2A FF 55 FF DA 00 EB F3 FF
30 5B FF FB F3 FA B7 FF FE FF BF 7B FF DF FF DD FF
40 03 1A B7 DE FF FF 00 F4 2D FF 40 C4 18 95 00 A3
50 FF FF 80 FF FF FF 00 80 A1 7F FF FF 19 00 FF 05
60 04 FF 40 00 01 01 3C FF 01 FF 01 FF FF FF FF FF
70 FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF
80 04 FF 04 FF 11 00 32 20 01 CC 01 FF 3C 3C 0A 0A
90 04 FF 10 00 00 01 01 3C 43 07 00 00 57 00 00 C6
A0 A2 A5 CE CF D2 DA EA 2A FF 55 FF DA 00 EB F3 FF
B0 5B FF FB F3 FA B7 FF FE FF BF 7B FF DF FF DD FF
C0 03 00 10 DE FF FF 00 F4 2D FF 40 C4 18 95 00 A3
D0 FF FF 80 FF FF FF 00 80 A1 7F FF FF 19 00 FF 05
E0 04 FF 40 00 01 01 3C FF 01 FF 01 FF FF FF FF FF
F0 FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF
bank 1
50 35 80 00 4B 00 50 00 FF FF FF FF FF FF FF FF FF
bank 2
50 2E 80 00 4B 00 50 00 FF FF FF FF FF FF FF FF FF
bank 3
50 01 03 03 03 03 01 03 01 03 02 FF FF FF FF FF FF
bank 4
50 1B 13 FF 00 00 00 00 FF 71 0A 15 3B 89 FF FF FF
bank 5
50 CF 3B CE FF 97 ED FF AF AF FF FC 3F FF 00 00 00

Hardware monitor Intel Core 2 Duo E4400
Temperature 0 66°C (150°F) [0x22] (Core #0)
Temperature 1 63°C (145°F) [0x25] (Core #1)

Hardware monitor NVIDIA GeForce GT 220
Temperature 0 59°C (138°F) (GPU Core)

Hardware monitor WDC WD2500AAJS-00RYA0
Temperature 0 39°C (102°F) [0x27] (Assembly)


Processors
-------------------------------------------------------------------------

Number of processors 1
Number of threads 2

APICs
-------------------------------------------------------------------------

Processor 0
-- Core 0
-- Thread 0 0
-- Core 1
-- Thread 0 1

Processors Information
-------------------------------------------------------------------------

Processor 1 ID = 0
Number of cores 2 (max 2)
Number of threads 2 (max 2)
Name Intel Core 2 Duo E4400
Codename Conroe
Specification Intel(R) Core(TM)2 CPU 4400 @ 2.00GHz
Package (platform ID) Socket 775 LGA (0x0)
CPUID 6.F.2
Extended CPUID 6.F
Core Stepping L2
Technology 65 nm
Core Speed 1994.5 MHz
Multiplier x FSB 10.0 x 199.4 MHz
Rated Bus speed 797.8 MHz
Stock frequency 2000 MHz
Instructions sets MMX, SSE, SSE2, SSE3, SSSE3, EM64T
L1 Data cache 2 x 32 KBytes, 8-way set associative, 64-byte line size
L1 Instruction cache 2 x 32 KBytes, 8-way set associative, 64-byte line size
L2 cache 2048 KBytes, 8-way set associative, 64-byte line size
FID/VID Control yes
FID range 6.0x - 10.0x
Max VID 1.325 V



Thread dumps
-------------------------------------------------------------------------

CPU Thread 0
APIC ID 0
Topology Processor ID 0, Core ID 0, Thread ID 0
Type 01008001h
Max CPUID level 0000000Ah
Max CPUID ext. level 80000008h
Cache descriptor Level 1, D, 32 KB, 1 thread(s)
Cache descriptor Level 1, I, 32 KB, 1 thread(s)
Cache descriptor Level 2, U, 2 MB, 2 thread(s)

CPUID
0x00000000 0x0000000A 0x756E6547 0x6C65746E 0x49656E69
0x00000001 0x000006F2 0x00020800 0x0000E39D 0xBFEBFBFF
0x00000002 0x05B0B101 0x005657F0 0x00000000 0x2CB4307D
0x00000003 0x00000000 0x00000000 0x00000000 0x00000000
0x00000004 0x04000121 0x01C0003F 0x0000003F 0x00000001
0x00000004 0x04000122 0x01C0003F 0x0000003F 0x00000001
0x00000004 0x04004143 0x01C0003F 0x00000FFF 0x00000001
0x00000005 0x00000040 0x00000040 0x00000003 0x00000020
0x00000006 0x00000001 0x00000002 0x00000001 0x00000000
0x00000007 0x00000000 0x00000000 0x00000000 0x00000000
0x00000008 0x00000400 0x00000000 0x00000000 0x00000000
0x00000009 0x00000000 0x00000000 0x00000000 0x00000000
0x0000000A 0x07280202 0x00000000 0x00000000 0x00000000
0x80000000 0x80000008 0x00000000 0x00000000 0x00000000
0x80000001 0x00000000 0x00000000 0x00000001 0x20000000
0x80000002 0x65746E49 0x2952286C 0x726F4320 0x4D542865
0x80000003 0x43203229 0x20205550 0x20202020 0x20202020
0x80000004 0x30303434 0x20402020 0x30302E32 0x007A4847
0x80000005 0x00000000 0x00000000 0x00000000 0x00000000
0x80000006 0x00000000 0x00000000 0x08006040 0x00000000
0x80000007 0x00000000 0x00000000 0x00000000 0x00000000
0x80000008 0x00003024 0x00000000 0x00000000 0x00000000

MSR 0x0000001B 0x00000000 0xFEE00900
MSR 0x00000017 0x00000000 0x8A048A28
MSR 0x000000CD 0x00000000 0x00000802
MSR 0x0000003F 0x00000000 0x000000EA
MSR 0x000000CE 0x001D0A28 0x7F7F0718
MSR 0x000001A0 0x00000044 0x60972489
MSR 0x000000EE 0xA8000000 0xC17D4700
MSR 0x0000011E 0x00000000 0xBE702107
MSR 0x0000019C 0x00000000 0x88220000
MSR 0x00000198 0x0A280A28 0x06000A28
MSR 0x00000199 0x00000000 0x00000A28

CPU Thread 1
APIC ID 1
Topology Processor ID 0, Core ID 1, Thread ID 0
Type 01008001h
Max CPUID level 0000000Ah
Max CPUID ext. level 80000008h
Cache descriptor Level 1, D, 32 KB, 1 thread(s)
Cache descriptor Level 1, I, 32 KB, 1 thread(s)
Cache descriptor Level 2, U, 2 MB, 2 thread(s)

CPUID
0x00000000 0x0000000A 0x756E6547 0x6C65746E 0x49656E69
0x00000001 0x000006F2 0x01020800 0x0000E39D 0xBFEBFBFF
0x00000002 0x05B0B101 0x005657F0 0x00000000 0x2CB4307D
0x00000003 0x00000000 0x00000000 0x00000000 0x00000000
0x00000004 0x04000121 0x01C0003F 0x0000003F 0x00000001
0x00000004 0x04000122 0x01C0003F 0x0000003F 0x00000001
0x00000004 0x04004143 0x01C0003F 0x00000FFF 0x00000001
0x00000005 0x00000040 0x00000040 0x00000003 0x00000020
0x00000006 0x00000001 0x00000002 0x00000001 0x00000000
0x00000007 0x00000000 0x00000000 0x00000000 0x00000000
0x00000008 0x00000400 0x00000000 0x00000000 0x00000000
0x00000009 0x00000000 0x00000000 0x00000000 0x00000000
0x0000000A 0x07280202 0x00000000 0x00000000 0x00000000
0x80000000 0x80000008 0x00000000 0x00000000 0x00000000
0x80000001 0x00000000 0x00000000 0x00000001 0x20000000
0x80000002 0x65746E49 0x2952286C 0x726F4320 0x4D542865
0x80000003 0x43203229 0x20205550 0x20202020 0x20202020
0x80000004 0x30303434 0x20402020 0x30302E32 0x007A4847
0x80000005 0x00000000 0x00000000 0x00000000 0x00000000
0x80000006 0x00000000 0x00000000 0x08006040 0x00000000
0x80000007 0x00000000 0x00000000 0x00000000 0x00000000
0x80000008 0x00003024 0x00000000 0x00000000 0x00000000

MSR 0x0000001B 0x00000000 0xFEE00800
MSR 0x00000017 0x00000000 0x8A048A28
MSR 0x000000CD 0x00000000 0x00000802
MSR 0x0000003F 0x00000000 0x000000EA
MSR 0x000000CE 0x001D0A28 0x7F7F0718
MSR 0x000001A0 0x00000044 0x60972489
MSR 0x000000EE 0xA8000000 0xC17D4700
MSR 0x0000011E 0x00000000 0xBE702107
MSR 0x0000019C 0x00000000 0x88250000
MSR 0x00000198 0x0A280A28 0x06000A28
MSR 0x00000199 0x00000000 0x00000A28




Graphic APIs
-------------------------------------------------------------------------

API NVIDIA NVAPI
API NVIDIA I/O

Display Adapters
-------------------------------------------------------------------------

Display adapter 0
Manuf. API index 0
Display name \\.\DISPLAY1
Name NVIDIA GeForce GT 220
Revision A2
Codename GT220
Technology 40 nm
PCI device bus 3 (0x3), device 0 (0x0), function 0 (0x0)
Vendor ID 0x10DE (0x10DE)
Model ID 0x0A20 (0x0715)


ACPI
-------------------------------------------------------------------------

ACPI Tree
_GPE
_L0A
_L1B
_L09
_L0B
_L1D
_L08
_L0D
_L05
_L03
_L04
_L0C
_L0E
_PR_
CPU1
STBL
NCPU
TYPE
HNDL
CFGD
TBLD
_PDC
_OSC
CPU2
STBL
NCPU
TYPE
HNDL
CFGD
TBLD
_PDC
_OSC
CPU3
STBL
NCPU
TYPE
HNDL
CFGD
TBLD
_PDC
_OSC
CPU4
STBL
NCPU
TYPE
HNDL
CFGD
TBLD
_PDC
_OSC
_SB_
PR00
AR00
PR02
AR02
PR04
AR04
PR05
AR05
PR06
AR06
PR07
AR07
PR08
AR08
PR09
AR09
PR01
AR01
PRSA
PRSB
PRSC
PRSD
PRSE
PRSF
PRSG
PRSH
PCI0
_HID
_ADR
_BBN
_UID
_PRT
USXD
_CID
MCH_
_HID
_UID
_CRS
NPTS
NWAK
P0P2
_ADR
_PRW
_PRT
P0P1
_ADR
_PRW
_PRT
SBRG
_ADR
IELK
_HID
RXA0
[ ]
[ ]
PBLV
[ ]
[ ]
PBMS
[ ]
PMCS
ECNS
[ ]
ECT1
ELEN
[ ]
_STA
SMOD
GPBS
SPTS
SWAK
APMP
[ ]
APMC
APMS
[ ]
[ ]
[ ]
BRTC
PMS0
[ ]
[ ]
RTCS
[ ]
WAKS
[ ]
PWBT
[ ]
SMIE
[ ]
[ ]
PS1E
[ ]
PS1S
[ ]
PIC_
_HID
_CRS
DMAD
_HID
_CRS
TMR_
_HID
_CRS
RTC0
_HID
_CRS
SPKR
_HID
_CRS
COPR
_HID
_CRS
UAR2
_UID
_HID
_STA
_DIS
_CRS
_SRS
_PRS
CMPR
FDC_
_HID
_FDE
_STA
_DIS
_CRS
_SRS
_PRS
LPTE
_HID
_STA
_DIS
_CRS
_SRS
_PRS
LPPR
EPPR
RMSC
_HID
_UID
CRS_
_CRS
HPET
_HID
CRS_
HPTM
[ ]
HPTS
[ ]
HPTE
_STA
_CRS
RX80
[ ]
[ ]
LPCD
LPCE
DBPT
DDLT
RRIO
WX82
RDMA
FWH_
_HID
CRS_
BS00
BL00
BS10
BL10
_CRS
FWHE
_HID
_UID
CRS_
_CRS
FHR0
[ ]
FHD1
[ ]
FHD0
OMSC
_HID
_UID
CRS_
_CRS
PS2K
_HID
_CID
_STA
_CRS
_PRW
_PSW
PS2M
_HID
_CID
_STA
CRS1
CRS2
_CRS
_PRW
_PSW
UAR1
_UID
_HID
_STA
_DIS
_CRS
_SRS
_PRS
CMPR
_PRW
SIOR
_HID
_UID
CRS_
_CRS
DCAT
ENFG
EXFG
LPTM
UHID
SIOK
SLED
KBFG
MSFG
U1FG
U2FG
SIOS
SIOW
IOSR
IOSF
SIOH
IOID
[ ]
INDX
DATA
[ ]
[ ]
LDN_
[ ]
FDCP
[ ]
LPTP
URAP
URBP
[ ]
ACTR
[ ]
IOAH
IOAL
IOH2
IOL2
[ ]
INTR
[ ]
DMCH
[ ]
CRE0
CRE1
CRE2
CRE3
CRE4
CRE5
CRE6
[ ]
OPT0
OPT1
OPT2
OPT3
OPT4
OPT5
OPT6
CGLD
DSTA
DCNT
CRS1
IRQM
DMAM
IO11
IO12
LEN1
CRS2
IRQE
DMAE
IO21
IO22
LEN2
IO31
IO32
LEN3
DCRS
DSRS
PIX0
_INI
PCIE
_HID
_UID
CRS_
_CRS
IDE0
_ADR
REGF
_REG
TIM0
TMD0
PIO0
DMA0
PIO1
DMA1
CHNF
CFG2
[ ]
PMPT
PSPT
PMRI
[ ]
SMPT
SSPT
SMRI
[ ]
PSRI
SSRI
[ ]
PM3E
PS3E
SM3E
SS3E
[ ]
PMUT
[ ]
PSUT
[ ]
SMUT
[ ]
SSUT
[ ]
[ ]
PM6E
PS6E
SM6E
SS6E
PMCR
PSCR
SMCR
SSCR
[ ]
PMAE
PSAE
SMAE
SSAE
GMPT
GMUE
GMUT
GMCR
GSPT
GSUE
GSUT
GSCR
CHN0
_ADR
_GTM
_STM
DRV0
_ADR
_GTF
DRV1
_ADR
_GTF
CHN1
_ADR
_GTM
_STM
DRV0
_ADR
_GTF
DRV1
_ADR
_GTF
GTM_
STM_
AT01
AT02
AT03
AT04
ATA0
ATA1
ATA2
ATA3
ATAB
CMDC
GTFB
GTF_
RATA
NATA
IDE1
_ADR
EUSB
_ADR
_PRW
MC97
_ADR
_PRW
HDAC
_ADR
_PRW
P0P4
_ADR
_PRW
_PRT
P0P5
_ADR
_PRW
_PRT
P0P6
_ADR
_PRW
_PRT
P0P7
_ADR
_PRW
_PRT
P0P8
_ADR
_PRW
_PRT
P0P9
_ADR
_PRW
_PRT
USB0
_ADR
BAR0
[ ]
USBW
[ ]
USXD
_PSW
_PRW
USB1
_ADR
BAR0
[ ]
USBW
[ ]
USXD
_PSW
_PRW
USB2
_ADR
BAR0
[ ]
USBW
[ ]
USXD
_PSW
_PRW
USB3
_ADR
BAR0
[ ]
USBW
[ ]
USXD
_PSW
_PRW
SUPP
CTRL
_OSC
CRS_
MIN5
MAX5
LEN5
MIN6
MAX6
LEN6
_CRS
BN00
SLPS
SLPB
_HID
_STA
SBEV
_PRW
RMEM
_HID
_UID
CRS_
_CRS
PWRB
_HID
_UID
_STA
BUFA
IRA0
LNKA
_HID
_UID
_STA
_PRS
_DIS
_CRS
_SRS
LNKB
_HID
_UID
_STA
_PRS
_DIS
_CRS
_SRS
LNKC
_HID
_UID
_STA
_PRS
_DIS
_CRS
_SRS
LNKD
_HID
_UID
_STA
_PRS
_DIS
_CRS
_SRS
LNKE
_HID
_UID
_STA
_PRS
_DIS
_CRS
_SRS
LNKF
_HID
_UID
_STA
_PRS
_DIS
_CRS
_SRS
LNKG
_HID
_UID
_STA
_PRS
_DIS
_CRS
_SRS
LNKH
_HID
_UID
_STA
_PRS
_DIS
_CRS
_SRS
XCPD
XNPT
XCAP
XDCP
XDCT
XDST
XLCP
XLCT
XLST
XSCP
XSCT
XSST
XRCT
MUTE
RBPE
RWPE
RDPE
WBPE
WWPE
WDPE
RWDP
RPME
_SI_
_TZ_
_REV
_OS_
_OSI
_GL_
SPIO
IOSB
IOSL
IOHB
IOHL
PMBS
PMLN
GPBS
GPLN
SMBS
SMBL
PM30
SUSW
APIC
SMIP
PCIB
PCIL
BIOS
[ ]
SS1_
SS2_
SS3_
SS4_
[ ]
IOST
TOPM
ROMS
MG1B
MG1L
MG2B
MG2L
[ ]
ASSB
AOTB
AAXB
RRIO
RDMA
PICM
_PIC
OSVR
OSFL
MCTH
PRWP
GPRW
WAKP
DEB0
[ ]
DBG8
DEB1
[ ]
DBG9
[ ]
PIRA
PIRB
PIRC
PIRD
[ ]
PIRE
PIRF
PIRG
PIRH
WOTB
WSSB
WAXB
_PTS
_WAK
_S0_
_S1_
_S4_
_S5_
PTS_
WAK_

Zkusím dát konzultaci s odborníkem - občas sem nakoukni

Zatím buď trpělivá pracuje se na tom

ok ok .. uz je to trocha lepsie nezamrzava to kazdych 30 min ale 60 min

Dobrý den, podíváme se na to.

Keď mám pc zapnutý dlhšie ako 30 min tak zamrzne a musim restartovat.. a ked ho restartujem tak niekedy asi 4x sa vypne a potom

1)Kdy se vypne? (Při zavádění systému, před zaváděním systému, po přihlášení)
2)Jak dlouho se ten problém objevuje?
3)Zamrzne i při práci nebo jen při delší nečinnosti?
4)Zamrzá při nějaké konkrétní činnosti? (spuštěné aplikaci - např. vždy máte spuštěný třeba Word)
5)Počítač se začne nejprve zpomalovat nebo prostě najednou přestane reagovat?
6)Když počítač zamrzne, nereaguje ani na stisk Alt+Ctrl+Del?
7)Stáhněte si a nainstalujte HeavyLoad, spusťte CPUID Hardware Monitor a pak spusťte zátěžový test v HeavyLoad. Nechte to běžet tak 15minut a pak sem hoďte screen z CPUID.
8)Stáhněte CrystalDiskInfo (Portable edition), spusťte ho a v nabídce "Úpravy" zvolte "Kopírovat". Data sem pak vložte pomocí Ctrl+V

Pokud si na něco vzpomenete, co by s tím problémem mohlo souviset, tak sem s tím (např. Instalace nějakého programu, update ovladače, instalace aktualizace Windows)
Příčina těchto "zamrznutí systému" se totiž hrozně špatně hledá a cokoliv nám může pomoci.

Pokud si s něčím nebudete vědět rady, obraťte se na kolegu. Já tu budu až večer.

1)No.. Keď mi zamrzne tak ho vypnem a potom keď ho pustím tak asi 5 sekúnd na to sa zasa vypne...
2)Asi týždeň
3)Aj pri práci
4)Zamrzne kedy sa mu chce.
5)Proste prestane reagovať..
6)Nefunguje..

a to ostatne hned bude..

A ešte jedna vec.. no .. nemohlo by to byť spôsobene npr. tým že by som mala prach a chlpy v tej krabici? no proste v počítači?

ok tu je ten screeen :




a tu je ta druha vec:

----------------------------------------------------------------------------
CrystalDiskInfo 3.9.4 (C) 2008-2010 hiyohiyo
Crystal Dew World : http://crystalmark.info/
----------------------------------------------------------------------------

OS : Windows XP Professional SP3 [5.1 Build 2600] (x86)
Date : 2010/12/20 19:51:57

-- Controller Map ----------------------------------------------------------
+ Intel(R) 82801G (ICH7 Family) Ultra ATA Storage Controllers - 27DF [ATA]
- Primary IDE Channel (0)
+ Intel(R) 82801GB/GR/GH (ICH7 Family) Serial ATA Storage Controller - 27C0 [ATA]
+ Primary IDE Channel (0)
- WDC WD2500AAJS-00RYA0
+ Secondary IDE Channel (1)
- TSSTcorp CDDVDW SH-S223B
+ AJQCT95I IDE Controller [SCSI]
- HWXMDQZ 7SHQB0HEJ0 SCSI CdRom Device

-- Disk List ---------------------------------------------------------------
(1) WDC WD2500AAJS-00RYA0 : 250.0 GB [0-1-0, pd1]

----------------------------------------------------------------------------
(1) WDC WD2500AAJS-00RYA0
----------------------------------------------------------------------------
Model : WDC WD2500AAJS-00RYA0
Firmware : 12.01B01
Serial Number : WD-WCAR00101705
Disk Size : 250.0 GB (8.4/137.4/250.0)
Buffer Size : 8192 KB
Queue Depth : 32
# of Sectors : 488397168
Rotation Rate : Unknown
Interface : Serial ATA
Major Version : ATA/ATAPI-7
Minor Version : ----
Transfer Mode : SATA/300
Power On Hours : 11283 hours
Power On Count : 1446 count
Temparature : 39 C (102 F)
Health Status : Caution
Features : S.M.A.R.T., AAM, 48bit LBA, NCQ
APM Level : ----
AAM Level : 80FEh [OFF]

-- S.M.A.R.T. --------------------------------------------------------------
ID Cur Wor Thr RawValues(6) Attribute Name
01 200 200 _51 000000000076 Read Error Rate
03 164 160 _21 0000000012AF Spin-Up Time
04 _99 _99 __0 00000000065F Start/Stop Count
05 200 200 140 000000000000 Reallocated Sectors Count
07 200 200 _51 000000000000 Seek Error Rate
09 _85 _85 __0 000000002C13 Power-On Hours
0A 100 100 _51 000000000000 Spin Retry Count
0B 100 100 _51 000000000000 Recalibration Retries
0C _99 _99 __0 0000000005A6 Power Cycle Count
C0 200 200 __0 000000000018 Power-off Retract Count
C1 200 200 __0 000000000666 Load/Unload Cycle Count
C2 108 100 __0 000000000027 Temperature
C4 200 200 __0 000000000000 Reallocation Event Count
C5 200 200 __0 000000000003 Current Pending Sector Count
C6 200 200 __0 000000000003 Uncorrectable Sector Count
C7 200 200 __0 00000000000F UltraDMA CRC Error Count
C8 200 200 _51 000000000000 Write Error Rate

-- IDENTIFY_DEVICE ---------------------------------------------------------
+0 +1 +2 +3 +4 +5 +6 +7 +8 +9 +A +B +C +D +E +F
000: 7A 42 FF 3F 37 C8 10 00 00 00 00 00 3F 00 00 00
010: 00 00 00 00 20 20 20 20 57 20 2D 44 43 57 52 41
020: 30 30 30 31 37 31 35 30 00 00 00 40 32 00 32 31
030: 30 2E 42 31 31 30 44 57 20 43 44 57 35 32 30 30
040: 41 41 53 4A 30 2D 52 30 41 59 20 30 20 20 20 20
050: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 10 80
060: 00 00 00 2F 01 40 00 00 00 00 07 00 FF 3F 10 00
070: 3F 00 10 FC FB 00 10 01 FF FF FF 0F 00 00 07 00
080: 03 00 78 00 78 00 78 00 78 00 00 00 00 00 00 00
090: 00 00 00 00 00 00 1F 00 06 07 00 00 44 00 40 00
0A0: FE 00 00 00 6B 74 61 7F 23 41 69 74 41 BC 23 41
0B0: 7F 20 21 00 00 00 00 00 FE FF 00 00 FE 80 00 00
0C0: 00 00 00 00 00 00 00 00 70 59 1C 1D 00 00 00 00
0D0: 00 00 00 00 00 00 00 00 01 50 E1 4E CF AA B0 DE
0E0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 10 40
0F0: 10 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00
100: 09 00 00 00 00 00 00 00 00 00 7D 16 00 00 00 00
110: 00 00 00 00 00 00 00 00 00 00 00 00 04 00 00 00
120: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
130: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
140: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
150: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
160: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
170: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
180: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
190: 00 00 00 00 00 00 00 00 00 00 00 00 3F 10 00 00
1A0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
1B0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
1C0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
1D0: 00 00 00 00 01 00 00 10 00 00 00 00 00 00 00 00
1E0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
1F0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 A5 4C

S největší pravděpodobností máte poškozený pevný disk. Bude nutná výměna.
Mohlo by se jednat i o poškozený kabel k pevnému disku, přikláním se spíše k závadě disku.
Dále bych potřeboval screen z CPUID Hardware Monitoru (ty teploty) při spuštěném testu HeavyLoad.
Vy jste mi upnula ten HeavyLoad
Pak se ještě podívejte, zda ve složce Windows\Minidump nejsou nějaké soubory. Pokud ano, upněte mi je na http://www.leteckaposta.cz.

ja tomu nechapem.. aky screen? prepacte ze som taka blba ale ja proste nechapem aky screen..

ta letecka posta mi nefunguje.