pc zamrzá

[nepamatujusilogin]

zdravím, poslední dobou pozuruju, že mi pc najednou zamrzne a to i třeba na ploše, v open office, nebo at už brouzdám na internetu
používám avast, a zonealarm, ale to jde už asi vyčíst z logu


Logfile of random's system information tool 1.08 (written by random/random)
Run by já at 2011-04-21 10:51:35
Microsoft Windows 7 Home Premium
System drive C: has 69 GB (45%) free of 153 GB
Total RAM: 4094 MB (68% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 10:51:39, on 21.4.2011
Platform: Windows 7 (WinNT 6.00.3504)
MSIE: Internet Explorer v8.00 (8.00.7600.16766)
Boot mode: Normal

Running processes:
C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe
C:\Program Files (x86)\Ovislink\Common\AirLiveUI.exe
C:\Program Files (x86)\DeviceVM\Browser Configuration Utility\BCU.exe
C:\Program Files\Logitech\GamePanel Software\Applets\LCDMedia.exe
C:\Program Files (x86)\Clarus\Samsung Auto Backup\ISFGuage.exe
C:\Program Files (x86)\Clarus\Samsung Auto Backup\ISFRealTimeD.exe
C:\Program Files (x86)\Clarus\Samsung Auto Backup\ISFTimerD.exe
C:\Program Files (x86)\Real\RealPlayer\Update\realsched.exe
C:\Program Files\AVAST Software\Avast\AvastUI.exe
C:\Program Files\Logitech\SetPoint\x86\SetPoint32.exe
C:\Program Files (x86)\Zone Labs\ZoneAlarm\zlclient.exe
C:\Program Files\trend micro\já.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
R3 - URLSearchHook: SearchHook Class - {BC86E1AB-EDA5-4059-938F-CE307B0C6F0A} - C:\Program Files (x86)\DeviceVM\Browser Configuration Utility\AddressBarSearch.dll
R3 - URLSearchHook: ZoneAlarm Security Toolbar - {91da5e8a-3318-4f8c-b67e-5964de3ab546} - C:\Program Files (x86)\ZoneAlarm_Security\tbZone.dll
F2 - REG:system.ini: UserInit=userinit.exe
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: RealPlayer Download and Record Plugin for Internet Explorer - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\IE\rpbrowserrecordplugin.dll
O2 - BHO: IE AdBlock - {46B37057-5BA8-4014-B28D-6448FD171A3E} - C:\Program Files (x86)\20Dollars2Surf\IE AdBlock\IE AdBlock.dll
O2 - BHO: ZoneAlarm Security Engine Registrar - {8A4A36C2-0535-4D2C-BD3D-496CB7EED6E3} - C:\Program Files\CheckPoint\ZAForceField\WOW64\TrustChecker\bin\TrustCheckerIEPlugin.dll
O2 - BHO: avast! WebRep - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll
O2 - BHO: ZoneAlarm Security Toolbar - {91da5e8a-3318-4f8c-b67e-5964de3ab546} - C:\Program Files (x86)\ZoneAlarm_Security\tbZone.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre6\bin\jp2ssv.dll
O3 - Toolbar: DAEMON Tools Toolbar - {32099AAC-C132-4136-9E9A-4E364A424E17} - C:\Program Files (x86)\DAEMON Tools Toolbar\DTToolbar.dll
O3 - Toolbar: IE AdBlock - {BE1B1F92-AC2E-4AFB-BC9D-07FE272C1373} - C:\Program Files (x86)\20Dollars2Surf\IE AdBlock\IE AdBlock.dll
O3 - Toolbar: (no name) - {CCC7A320-B3CA-4199-B1A6-9F516DD69829} - (no file)
O3 - Toolbar: ZoneAlarm Security Toolbar - {91da5e8a-3318-4f8c-b67e-5964de3ab546} - C:\Program Files (x86)\ZoneAlarm_Security\tbZone.dll
O3 - Toolbar: avast! WebRep - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll
O3 - Toolbar: ZoneAlarm Security Engine - {EE2AC4E5-B0B0-4EC6-88A9-BCA1A32AB107} - C:\Program Files\CheckPoint\ZAForceField\WOW64\TrustChecker\bin\TrustCheckerIEPlugin.dll
O4 - HKLM\..\Run: [BCU] "C:\Program Files (x86)\DeviceVM\Browser Configuration Utility\BCU.exe"
O4 - HKLM\..\Run: [ATICustomerCare] "C:\Program Files (x86)\ATI\ATICustomerCare\ATICustomerCare.exe"
O4 - HKLM\..\Run: [NeroCheck] C:\Windows\SysWOW64\\NeroCheck.exe
O4 - HKLM\..\Run: [StartCCC] "C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun
O4 - HKLM\..\Run: [TkBellExe] "c:\program files (x86)\real\realplayer\Update\realsched.exe" -osboot
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKLM\..\Run: [avast] "C:\Program Files\AVAST Software\Avast\avastUI.exe" /nogui
O4 - HKLM\..\Run: [ZoneAlarm Client] "C:\Program Files (x86)\Zone Labs\ZoneAlarm\zlclient.exe"
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"
O4 - HKCU\..\Run: [DAEMON Tools Lite] "C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe" -autorun
O4 - HKCU\..\Run: [Google Update] "C:\Users\já\AppData\Local\Google\Update\GoogleUpdate.exe" /c
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'NETWORK SERVICE')
O4 - Startup: Samsung Auto Backup Guage.lnk = ?
O4 - Startup: Samsung Auto Backup Real-Time Daemon.lnk = ?
O4 - Startup: Samsung Auto Backup Scheduler.lnk = ?
O4 - Global Startup: AirLive 802.11G Wireless Utility.lnk = C:\Program Files (x86)\Ovislink\Common\AirLiveUI.exe
O4 - Global Startup: Logitech SetPoint.lnk = C:\Program Files\Logitech\SetPoint\SetPoint.exe
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
O23 - Service: SAMSUNG AllShare Service (AllShare) - Unknown owner - C:\Program Files (x86)\Samsung\SAMSUNG PC Share Manager\WiselinkPro.exe
O23 - Service: AMD External Events Utility - Unknown owner - C:\Windows\system32\atiesrxx.exe (file missing)
O23 - Service: AMD FUEL Service - Advanced Micro Devices, Inc. - C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe
O23 - Service: AMD Reservation Manager - Advanced Micro Devices - C:\Program Files\ATI Technologies\ATI.ACE\Reservation Manager\AMD Reservation Manager.exe
O23 - Service: avast! Antivirus - AVAST Software - C:\Program Files\AVAST Software\Avast\AvastSvc.exe
O23 - Service: Browser Configuration Utility Service (BCUService) - DeviceVM, Inc. - C:\Program Files (x86)\DeviceVM\Browser Configuration Utility\BCUService.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)
O23 - Service: HP LaserJet Service - HP - C:\Program Files (x86)\HP\HPLaserJetService\HPLaserJetService.exe
O23 - Service: ZoneAlarm Toolbar IswSvc (IswSvc) - Check Point Software Technologies - C:\Program Files\CheckPoint\ZAForceField\IswSvc.exe
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: PnkBstrA - Unknown owner - C:\Windows\system32\PnkBstrA.exe
O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Ralink Registry Writer (RalinkRegistryWriter) - Ralink Technology, Corp. - C:\Program Files (x86)\Ovislink\Common\RaRegistry.exe
O23 - Service: Ralink Registry Writer 64 (RalinkRegistryWriter64) - Ralink Technology, Corp. - C:\Program Files (x86)\Ovislink\Common\RaRegistry64.exe
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
O23 - Service: TrueVector Internet Monitor (vsmon) - Check Point Software Technologies LTD - C:\Windows\SysWOW64\ZoneLabs\vsmon.exe
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\Wat\WatUX.exe,-601 (WatAdminSvc) - Unknown owner - C:\Windows\system32\Wat\WatAdminSvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)

--
End of file - 10341 bytes

======Listing Processes======

\SystemRoot\System32\smss.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
wininit.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
C:\Windows\system32\services.exe
C:\Windows\system32\lsass.exe
C:\Windows\system32\lsm.exe
winlogon.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Windows\system32\svchost.exe -k RPCSS
C:\Windows\system32\atiesrxx.exe
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k netsvcs
C:\Windows\system32\svchost.exe -k LocalService
atieclxx
C:\Windows\system32\svchost.exe -k NetworkService
C:\Windows\SysWOW64\ZoneLabs\vsmon.exe -service
C:\Windows\system32\WLANExt.exe 21309328
\??\C:\Windows\system32\conhost.exe
"C:\Windows\system32\Dwm.exe"
C:\Windows\Explorer.EXE
"C:\Program Files\AVAST Software\Avast\AvastSvc.exe"
"C:\Program Files\CheckPoint\ZAForceField\IswSvc.exe"
"C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe" -s
"C:\Program Files\Logitech\GamePanel Software\LCD Manager\LCDMon.exe"
C:\Windows\System32\spoolsv.exe
"taskhost.exe"
"C:\Program Files\Logitech\GamePanel Software\G-series Software\LGDCore.exe" /SHOWHIDE
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
taskeng.exe {63331595-D761-4E54-AF41-9EE033D53E2C}
"C:\Program Files (x86)\Google\Update\GoogleUpdate.exe" /c
"C:\Program Files\ATI Technologies\ATI.ACE\Reservation Manager\AMD Reservation Manager.exe"
"C:\Program Files (x86)\DeviceVM\Browser Configuration Utility\BCUService.exe"
"C:\Program Files\Logitech\GamePanel Software\Applets\LCDCountdown.exe"
"C:\Program Files\Logitech\GamePanel Software\LCD Manager\Applets\LCDClock.exe"
"C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe" -autorun
"C:\Program Files\Logitech\GamePanel Software\Applets\LCDPop3.exe"
"C:\Program Files (x86)\Ovislink\Common\AirLiveUI.exe" -s
"C:\Program Files\Logitech\SetPoint\SetPoint.exe"
"C:\Program Files (x86)\DeviceVM\Browser Configuration Utility\BCU.exe"
"C:\Program Files\Logitech\GamePanel Software\Applets\LCDMedia.exe"
"C:\Program Files\Logitech\GamePanel Software\Applets\ColorOnly\LCDMovieViewer.exe"
"C:\Program Files\Logitech\GamePanel Software\Applets\ColorOnly\LCDPictureViewer.exe"
"C:\Program Files (x86)\Clarus\Samsung Auto Backup\ISFGuage.exe"
"C:\Program Files (x86)\Clarus\Samsung Auto Backup\ISFRealTimeD.exe"
"C:\Program Files (x86)\Clarus\Samsung Auto Backup\ISFTimerD.exe"
"C:\Program Files\Logitech\GamePanel Software\Applets\LCDRSS.exe"
"C:\Program Files (x86)\Real\RealPlayer\Update\realsched.exe" -osboot
"C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM"
"C:\Program Files\AVAST Software\Avast\AvastUI.exe" /nogui
"C:\Program Files\Logitech\SetPoint\x86\SetPoint32.exe"
"C:\Program Files (x86)\Zone Labs\ZoneAlarm\zlclient.exe"
C:\Windows\System32\svchost.exe -k HPZ12
C:\Windows\System32\svchost.exe -k HPZ12
C:\Windows\SysWOW64\PnkBstrA.exe
"C:\Program Files (x86)\Ovislink\Common\RaRegistry.exe"
"C:\Program Files (x86)\Ovislink\Common\RaRegistry64.exe"
C:\Windows\system32\svchost.exe -k imgsvc
"C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe" /launchService
KHALMNPR.EXE /API
C:\Windows\system32\SearchIndexer.exe /Embedding
C:\Windows\system32\svchost.exe -k NetworkServiceNetworkRestricted
"C:\Windows\system32\WUDFHost.exe" -HostGUID:{193a1820-d9ac-4997-8c55-be817523f6aa} -IoEventPortName:HostProcess-a28a8b4c-b511-4d0e-96ac-8a1bdf4e69c3 -SystemEventPortName:HostProcess-09be248d-d12d-4999-8b2e-105336b6897f -IoCancelEventPortName:HostProcess-6eef94bc-d49b-4d3f-bb12-09ffd9f3a245 -NonStateChangingEventPortName:HostProcess-243eb521-deea-43ad-a6fb-4dd70b45d6db -ServiceSID:S-1-5-80-2652678385-582572993-1835434367-1344795993-749280709 -LifetimeId:ebd11b4d-3ed1-4390-acc1-2daf10a7cc75
C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
C:\Windows\system32\wbem\wmiprvse.exe
"C:\Program Files\CheckPoint\ZAForceField\ForceField.exe" /set_event="FFAPI_StartEvent_f8c_1119c" /icon="hidden"
"C:\Program Files\Windows Media Player\wmpnetwk.exe"
C:\Windows\System32\svchost.exe -k LocalServicePeerNet
C:\Windows\system32\wbem\wmiprvse.exe
"C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe" 0
C:\Windows\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe
C:\Windows\System32\svchost.exe -k secsvcs
taskmgr.exe /3
C:\Windows\System32\svchost.exe -k WerSvcGroup
"C:\Users\já\Downloads\RSITx64.exe"

======Scheduled tasks folder======

C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
C:\Windows\tasks\GoogleUpdateTaskMachineUA.job
C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-615353565-1488364645-1531222465-1000Core.job
C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-615353565-1488364645-1531222465-1000UA.job

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{318A227B-5E9F-45bd-8999-7F8F10CA4CF5}]
avast! WebRep - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll [2011-02-23 972280]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{8A4A36C2-0535-4D2C-BD3D-496CB7EED6E3}]
ZoneAlarm Security Engine Registrar - C:\Program Files\CheckPoint\ZAForceField\TrustChecker\bin\TrustCheckerIEPlugin.dll [2011-02-15 903672]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre6\bin\jp2ssv.dll []

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
Adobe PDF Link Helper - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2010-09-22 75200]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{3049C3E9-B461-4BC5-8870-4C09146192CA}]
RealPlayer Download and Record Plugin for Internet Explorer - C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\IE\rpbrowserrecordplugin.dll [2011-01-29 381656]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{46B37057-5BA8-4014-B28D-6448FD171A3E}]
IE AdBlock - C:\Program Files (x86)\20Dollars2Surf\IE AdBlock\IE AdBlock.dll [2007-02-08 499712]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{8A4A36C2-0535-4D2C-BD3D-496CB7EED6E3}]
ZoneAlarm Security Engine Registrar - C:\Program Files\CheckPoint\ZAForceField\WOW64\TrustChecker\bin\TrustCheckerIEPlugin.dll [2011-02-15 599544]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{8E5E2654-AD2D-48bf-AC2D-D17F00898D06}]
avast! WebRep - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2011-02-23 814160]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{91da5e8a-3318-4f8c-b67e-5964de3ab546}]
ZoneAlarm Security Toolbar - C:\Program Files (x86)\ZoneAlarm_Security\tbZone.dll [2010-12-01 2735200]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files (x86)\Java\jre6\bin\jp2ssv.dll [2011-04-21 41760]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{32099AAC-C132-4136-9E9A-4E364A424E17} - DAEMON Tools Toolbar - C:\Program Files (x86)\DAEMON Tools Toolbar\DTToolbar64.dll [2010-03-25 1548096]
{318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - avast! WebRep - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll [2011-02-23 972280]
{EE2AC4E5-B0B0-4EC6-88A9-BCA1A32AB107} - ZoneAlarm Security Engine - C:\Program Files\CheckPoint\ZAForceField\TrustChecker\bin\TrustCheckerIEPlugin.dll [2011-02-15 903672]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Internet Explorer\Toolbar]
{32099AAC-C132-4136-9E9A-4E364A424E17} - DAEMON Tools Toolbar - C:\Program Files (x86)\DAEMON Tools Toolbar\DTToolbar.dll [2010-03-25 968000]
{BE1B1F92-AC2E-4AFB-BC9D-07FE272C1373} - IE AdBlock - C:\Program Files (x86)\20Dollars2Surf\IE AdBlock\IE AdBlock.dll [2007-02-08 499712]
{CCC7A320-B3CA-4199-B1A6-9F516DD69829}
{91da5e8a-3318-4f8c-b67e-5964de3ab546} - ZoneAlarm Security Toolbar - C:\Program Files (x86)\ZoneAlarm_Security\tbZone.dll [2010-12-01 2735200]
{8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - avast! WebRep - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2011-02-23 814160]
{EE2AC4E5-B0B0-4EC6-88A9-BCA1A32AB107} - ZoneAlarm Security Engine - C:\Program Files\CheckPoint\ZAForceField\WOW64\TrustChecker\bin\TrustCheckerIEPlugin.dll [2011-02-15 599544]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"RtHDVCpl"=C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [2009-08-18 8067616]
"HP Color LaserJet CM1312 MFP Series Fax"=C:\Program Files (x86)\HP\HP Color LaserJet CM1312 MFP Series\hppfaxprintersrv.exe [2009-09-22 3700736]
"Launch LgDevAgt"=C:\Program Files\Logitech\GamePanel Software\LgDevAgt.exe [2008-11-06 397320]
"Launch LCDMon"=C:\Program Files\Logitech\GamePanel Software\LCD Manager\LCDMon.exe [2008-11-06 2049544]
"Launch LGDCore"=C:\Program Files\Logitech\GamePanel Software\G-series Software\LGDCore.exe [2008-11-06 3837960]
"Kernel and Hardware Abstraction Layer"=C:\Windows\KHALMNPR.EXE [2009-06-17 130576]
"ISW"=C:\Program Files\CheckPoint\ZAForceField\ForceField.exe [2011-02-15 1123320]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"DAEMON Tools Lite"=C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe [2010-04-01 357696]
"Google Update"=C:\Users\já\AppData\Local\Google\Update\GoogleUpdate.exe [2011-03-19 136176]

[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]
"BCU"=C:\Program Files (x86)\DeviceVM\Browser Configuration Utility\BCU.exe [2009-08-04 346320]
""= []
"ATICustomerCare"=C:\Program Files (x86)\ATI\ATICustomerCare\ATICustomerCare.exe [2010-05-04 311296]
"NeroCheck"=C:\Windows\SysWOW64\\NeroCheck.exe [2001-07-09 155648]
"StartCCC"=C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [2010-11-25 336384]
"TkBellExe"=c:\program files (x86)\real\realplayer\Update\realsched.exe [2011-01-29 273544]
"Adobe Reader Speed Launcher"=C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Reader_sl.exe [2011-01-31 35760]
"Adobe ARM"=C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2010-09-20 932288]
"avast"=C:\Program Files\AVAST Software\Avast\avastUI.exe [2011-02-23 3451496]
"ZoneAlarm Client"=C:\Program Files (x86)\Zone Labs\ZoneAlarm\zlclient.exe [2011-03-18 1043968]
"SunJavaUpdateSched"=C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [2010-10-29 249064]

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup
AirLive 802.11G Wireless Utility.lnk - C:\Program Files (x86)\Ovislink\Common\AirLiveUI.exe
Logitech SetPoint.lnk - C:\Program Files\Logitech\SetPoint\SetPoint.exe

C:\Users\já\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
Samsung Auto Backup Guage.lnk - C:\Program Files (x86)\Clarus\Samsung Auto Backup\ISFGuage.exe
Samsung Auto Backup Real-Time Daemon.lnk - C:\Program Files (x86)\Clarus\Samsung Auto Backup\ISFRealTimeD.exe
Samsung Auto Backup Scheduler.lnk - C:\Program Files (x86)\Clarus\Samsung Auto Backup\ISFTimerD.exe

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\LBTWlgn]
c:\program files\common files\logishrd\bluetooth\LBTWlgn.dll [2009-07-20 76816]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED}

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=credssp.dll

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\vsmon]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorAdmin"=5
"ConsentPromptBehaviorUser"=3
"EnableUIADesktopToggle"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoActiveDesktop"=1
"NoActiveDesktopChanges"=1
"ForceActiveDesktopOn"=0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*

======List of files/folders created in the last 1 months======

2011-04-21 10:37:46 ----A---- C:\Windows\SYSWOW64\javaws.exe
2011-04-21 10:37:46 ----A---- C:\Windows\SYSWOW64\javaw.exe
2011-04-21 10:37:46 ----A---- C:\Windows\SYSWOW64\java.exe
2011-04-21 10:37:13 ----D---- C:\Program Files (x86)\Java
2011-04-20 16:04:51 ----D---- C:\Program Files (x86)\Microsoft VM
2011-04-18 17:05:50 ----A---- C:\Windows\system32\deployJava1.dll
2011-04-18 11:36:46 ----D---- C:\Users\já\AppData\Roaming\Real
2011-04-16 15:15:56 ----D---- C:\Users\já\AppData\Roaming\.minecraft
2011-04-16 12:24:42 ----D---- C:\ProgramData\Sun
2011-04-16 12:24:26 ----A---- C:\Windows\SYSWOW64\deployJava1.dll
2011-04-16 11:53:58 ----A---- C:\Windows\SYSWOW64\vsregexp.dll
2011-04-16 11:53:46 ----A---- C:\Windows\SYSWOW64\zlcommdb.dll
2011-04-16 11:53:46 ----A---- C:\Windows\SYSWOW64\zlcomm.dll
2011-04-16 11:53:43 ----A---- C:\Windows\SYSWOW64\vswmi.dll
2011-04-16 11:53:41 ----D---- C:\Windows\SYSWOW64\ZoneLabs
2011-04-16 11:53:41 ----A---- C:\Windows\SYSWOW64\zpeng25.dll
2011-04-16 11:53:41 ----A---- C:\Windows\SYSWOW64\vsxml.dll
2011-04-16 11:53:40 ----A---- C:\Windows\SYSWOW64\vspubapi.dll
2011-04-16 11:53:40 ----A---- C:\Windows\SYSWOW64\vsmonapi.dll
2011-04-16 11:53:40 ----A---- C:\Windows\SYSWOW64\vsdata.dll
2011-04-16 11:53:40 ----A---- C:\Windows\system32\drivers\~GLH0025.TMP
2011-04-16 11:53:36 ----N---- C:\Windows\system32\drivers\vsdatant.sys
2011-04-16 11:53:36 ----D---- C:\Program Files (x86)\Zone Labs
2011-04-16 11:53:05 ----A---- C:\Windows\SYSWOW64\vsutil.dll
2011-04-16 11:53:05 ----A---- C:\Windows\SYSWOW64\vsinit.dll
2011-04-16 11:51:45 ----D---- C:\Windows\Internet Logs
2011-04-16 10:52:21 ----A---- C:\Windows\system32\drivers\~GLH0024.TMP
2011-04-16 10:47:17 ----A---- C:\Windows\system32\drivers\aswFsBlk.sys
2011-04-16 10:47:16 ----A---- C:\Windows\system32\drivers\aswSP.sys
2011-04-16 10:47:10 ----A---- C:\Windows\system32\drivers\aswRdr.sys
2011-04-16 10:47:08 ----A---- C:\Windows\system32\drivers\aswTdi.sys
2011-04-16 10:47:06 ----A---- C:\Windows\system32\drivers\aswSnx.sys
2011-04-16 10:47:01 ----A---- C:\Windows\system32\drivers\aswMonFlt.sys
2011-04-16 10:47:01 ----A---- C:\Windows\system32\aswBoot.exe
2011-04-16 10:46:35 ----A---- C:\Windows\SYSWOW64\aswBoot.exe
2011-04-16 10:46:30 ----D---- C:\ProgramData\AVAST Software
2011-04-16 10:46:30 ----D---- C:\Program Files\AVAST Software
2011-04-15 13:21:50 ----A---- C:\Windows\SYSWOW64\XpsGdiConverter.dll
2011-04-15 13:21:50 ----A---- C:\Windows\system32\XpsGdiConverter.dll
2011-04-15 13:21:48 ----A---- C:\Windows\SYSWOW64\vbscript.dll
2011-04-15 13:21:48 ----A---- C:\Windows\SYSWOW64\jscript.dll
2011-04-15 13:21:48 ----A---- C:\Windows\system32\vbscript.dll
2011-04-15 13:21:48 ----A---- C:\Windows\system32\jscript.dll
2011-04-15 13:21:46 ----A---- C:\Windows\system32\win32k.sys
2011-04-15 13:21:43 ----A---- C:\Windows\system32\mfc42u.dll
2011-04-15 13:21:43 ----A---- C:\Windows\system32\mfc42.dll
2011-04-15 13:21:42 ----A---- C:\Windows\SYSWOW64\mfc42u.dll
2011-04-15 13:21:42 ----A---- C:\Windows\SYSWOW64\mfc42.dll
2011-04-15 13:21:38 ----A---- C:\Windows\system32\drivers\srvnet.sys
2011-04-15 13:21:38 ----A---- C:\Windows\system32\drivers\srv2.sys
2011-04-15 13:21:38 ----A---- C:\Windows\system32\drivers\srv.sys
2011-04-15 13:21:37 ----A---- C:\Windows\SYSWOW64\atmfd.dll
2011-04-15 13:21:37 ----A---- C:\Windows\system32\atmfd.dll
2011-04-15 13:21:36 ----A---- C:\Windows\SYSWOW64\atmlib.dll
2011-04-15 13:21:36 ----A---- C:\Windows\system32\atmlib.dll
2011-04-15 13:21:34 ----A---- C:\Windows\SYSWOW64\mshtml.dll
2011-04-15 13:21:34 ----A---- C:\Windows\system32\mshtml.dll
2011-04-15 13:21:33 ----A---- C:\Windows\system32\ieframe.dll
2011-04-15 13:21:31 ----A---- C:\Windows\SYSWOW64\ieframe.dll
2011-04-15 13:21:29 ----A---- C:\Windows\SYSWOW64\urlmon.dll
2011-04-15 13:21:29 ----A---- C:\Windows\system32\wininet.dll
2011-04-15 13:21:29 ----A---- C:\Windows\system32\urlmon.dll
2011-04-15 13:21:28 ----A---- C:\Windows\SYSWOW64\wininet.dll
2011-04-15 13:21:28 ----A---- C:\Windows\SYSWOW64\mstime.dll
2011-04-15 13:21:28 ----A---- C:\Windows\SYSWOW64\mshtmled.dll
2011-04-15 13:21:28 ----A---- C:\Windows\SYSWOW64\msfeedsbs.dll
2011-04-15 13:21:28 ----A---- C:\Windows\SYSWOW64\msfeeds.dll
2011-04-15 13:21:28 ----A---- C:\Windows\SYSWOW64\licmgr10.dll
2011-04-15 13:21:28 ----A---- C:\Windows\SYSWOW64\jsproxy.dll
2011-04-15 13:21:28 ----A---- C:\Windows\SYSWOW64\ieui.dll
2011-04-15 13:21:28 ----A---- C:\Windows\SYSWOW64\iertutil.dll
2011-04-15 13:21:28 ----A---- C:\Windows\SYSWOW64\iepeers.dll
2011-04-15 13:21:28 ----A---- C:\Windows\SYSWOW64\iedkcs32.dll
2011-04-15 13:21:28 ----A---- C:\Windows\system32\mstime.dll
2011-04-15 13:21:28 ----A---- C:\Windows\system32\mshtmled.dll
2011-04-15 13:21:28 ----A---- C:\Windows\system32\msfeedssync.exe
2011-04-15 13:21:28 ----A---- C:\Windows\system32\msfeedsbs.dll
2011-04-15 13:21:28 ----A---- C:\Windows\system32\msfeeds.dll
2011-04-15 13:21:28 ----A---- C:\Windows\system32\licmgr10.dll
2011-04-15 13:21:28 ----A---- C:\Windows\system32\jsproxy.dll
2011-04-15 13:21:28 ----A---- C:\Windows\system32\ieui.dll
2011-04-15 13:21:28 ----A---- C:\Windows\system32\iertutil.dll
2011-04-15 13:21:28 ----A---- C:\Windows\system32\iepeers.dll
2011-04-15 13:21:28 ----A---- C:\Windows\system32\iedkcs32.dll
2011-04-15 13:21:27 ----A---- C:\Windows\SYSWOW64\msfeedssync.exe
2011-04-15 13:19:48 ----A---- C:\Windows\SYSWOW64\dnscacheugc.exe
2011-04-15 13:19:48 ----A---- C:\Windows\SYSWOW64\dnsapi.dll
2011-04-15 13:19:48 ----A---- C:\Windows\system32\dnsrslvr.dll
2011-04-15 13:19:48 ----A---- C:\Windows\system32\dnscacheugc.exe
2011-04-15 13:19:48 ----A---- C:\Windows\system32\dnsapi.dll
2011-04-15 13:19:46 ----A---- C:\Windows\SYSWOW64\inetcomm.dll
2011-04-15 13:19:46 ----A---- C:\Windows\system32\inetcomm.dll
2011-04-15 13:19:45 ----A---- C:\Windows\system32\winresume.exe
2011-04-15 13:19:45 ----A---- C:\Windows\system32\winload.exe
2011-04-15 13:19:45 ----A---- C:\Windows\system32\kdusb.dll
2011-04-15 13:19:45 ----A---- C:\Windows\system32\kdcom.dll
2011-04-15 13:19:45 ----A---- C:\Windows\system32\kd1394.dll
2011-04-15 13:19:43 ----A---- C:\Windows\system32\FXSCOVER.exe
2011-04-15 13:19:42 ----A---- C:\Windows\system32\drivers\mrxsmb20.sys
2011-04-15 13:19:42 ----A---- C:\Windows\system32\drivers\mrxsmb10.sys
2011-04-15 13:19:42 ----A---- C:\Windows\system32\drivers\mrxsmb.sys
2011-04-15 13:19:42 ----A---- C:\Windows\system32\drivers\bowser.sys
2011-04-12 18:38:01 ----D---- C:\Program Files (x86)\Winamp
2011-04-06 20:46:08 ----D---- C:\Program Files (x86)\UnH Solutions
2011-04-05 15:34:22 ----D---- C:\Program Files (x86)\7-Zip

======List of files/folders modified in the last 1 months======

2011-04-21 10:51:39 ----D---- C:\Program Files\trend micro
2011-04-21 10:51:35 ----D---- C:\Windows\Temp
2011-04-21 10:47:08 ----D---- C:\Windows\system32\config
2011-04-21 10:38:14 ----SHD---- C:\System Volume Information
2011-04-21 10:38:05 ----SHD---- C:\Windows\Installer
2011-04-21 10:38:03 ----HD---- C:\Config.Msi
2011-04-21 10:38:03 ----D---- C:\Program Files (x86)\Common Files
2011-04-21 10:37:46 ----D---- C:\Windows\SysWOW64
2011-04-21 10:37:13 ----RD---- C:\Program Files (x86)
2011-04-21 10:29:11 ----HD---- C:\ProgramData
2011-04-21 10:26:33 ----RD---- C:\Program Files
2011-04-21 10:26:17 ----D---- C:\Windows\System32
2011-04-21 10:26:07 ----D---- C:\Fraps
2011-04-20 20:04:43 ----D---- C:\Windows\Prefetch
2011-04-20 18:21:46 ----D---- C:\Program Files (x86)\Garena
2011-04-20 16:05:50 ----D---- C:\Windows
2011-04-20 14:21:24 ----D---- C:\Windows\debug
2011-04-18 13:17:55 ----D---- C:\Users\já\AppData\Roaming\TS3Client
2011-04-18 13:16:28 ----D---- C:\Program Files (x86)\CCleaner
2011-04-17 11:45:18 ----RSD---- C:\Windows\assembly
2011-04-17 11:45:18 ----D---- C:\Windows\Microsoft.NET
2011-04-16 12:06:29 ----D---- C:\Windows\system32\drivers\etc
2011-04-16 11:54:44 ----D---- C:\Program Files (x86)\ZoneAlarm_Security
2011-04-16 11:53:40 ----D---- C:\Windows\SYSWOW64\drivers
2011-04-16 11:53:40 ----D---- C:\Windows\system32\drivers
2011-04-16 11:53:38 ----D---- C:\Windows\inf
2011-04-16 11:53:37 ----D---- C:\Windows\system32\DriverStore
2011-04-16 11:53:37 ----D---- C:\Windows\system32\catroot
2011-04-16 10:41:59 ----D---- C:\Windows\system32\catroot2
2011-04-16 10:38:06 ----D---- C:\ProgramData\AVG10
2011-04-16 10:12:14 ----D---- C:\Windows\winsxs
2011-04-16 10:09:13 ----D---- C:\Windows\SYSWOW64\migration
2011-04-16 10:09:13 ----D---- C:\Program Files\Internet Explorer
2011-04-16 10:09:13 ----D---- C:\Program Files (x86)\Internet Explorer
2011-04-16 10:09:12 ----D---- C:\Windows\system32\migration
2011-04-16 10:09:08 ----D---- C:\Windows\system32\Boot
2011-04-15 22:31:24 ----A---- C:\Windows\system32\MRT.exe
2011-04-15 22:28:53 ----A---- C:\Windows\system32\PerfStringBackup.INI
2011-03-25 19:02:30 ----D---- C:\Program Files (x86)\Mozilla Firefox

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 pciide;pciide; C:\Windows\system32\DRIVERS\pciide.sys [2009-07-14 12352]
R0 rdyboost;ReadyBoost; C:\Windows\System32\drivers\rdyboost.sys [2009-07-14 214096]
R0 sptd;sptd; C:\Windows\System32\Drivers\sptd.sys [2010-07-28 834544]
R1 aswRdr;aswRdr; C:\Windows\system32\drivers\aswRdr.sys [2011-02-23 31064]
R1 aswSnx;aswSnx; C:\Windows\system32\drivers\aswSnx.sys [2011-02-23 505176]
R1 aswSP;aswSP; C:\Windows\system32\drivers\aswSP.sys [2011-02-23 280408]
R1 aswTdi;avast! Network Shield Support; C:\Windows\system32\drivers\aswTdi.sys [2011-02-23 53592]
R1 Vsdatant;Zone Alarm Firewall Driver; C:\Windows\system32\DRIVERS\vsdatant.sys [2010-05-15 458840]
R1 vwififlt;Virtual WiFi Filter Driver; C:\Windows\system32\DRIVERS\vwififlt.sys [2009-07-14 59904]
R2 aswFsBlk;aswFsBlk; C:\Windows\system32\drivers\aswFsBlk.sys [2011-02-23 22360]
R2 aswMonFlt;aswMonFlt; \??\C:\Windows\system32\drivers\aswMonFlt.sys [2011-02-23 64344]
R2 irda;IrDA Protocol; C:\Windows\system32\DRIVERS\irda.sys [2009-07-14 120320]
R2 ISWKL;ZoneAlarm Toolbar ISWKL; \??\C:\Program Files\CheckPoint\ZAForceField\ISWKL.sys [2011-02-15 33528]
R2 RtNdPt60;Realtek NDIS Protocol Driver; C:\Windows\system32\DRIVERS\RtNdPt60.sys [2009-07-20 27136]
R3 ALSysIO;ALSysIO; \??\C:\Users\J8D6B~1\AppData\Local\Temp\ALSysIO64.sys []
R3 amdiox64;AMD IO Driver; C:\Windows\system32\DRIVERS\amdiox64.sys [2010-02-18 46136]
R3 amdkmdag;amdkmdag; C:\Windows\system32\DRIVERS\atikmdag.sys [2010-11-26 8120320]
R3 amdkmdap;amdkmdap; C:\Windows\system32\DRIVERS\atikmpag.sys [2010-11-26 289792]
R3 FTDIBUS;USB Serial Converter Driver; C:\Windows\system32\drivers\ftdibus.sys [2009-10-22 69320]
R3 FTSER2K;USB Serial Port Driver; C:\Windows\system32\drivers\ftser2k.sys [2009-10-22 84808]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\Windows\system32\drivers\RTKVHD64.sys [2009-08-18 1983264]
R3 LGPBTDD;LGPBTDD.sys Display Driver; C:\Windows\System32\Drivers\LGPBTDD.sys [2008-10-16 30728]
R3 LHidFilt;Logitech SetPoint KMDF HID Filter Driver; C:\Windows\system32\DRIVERS\LHidFilt.Sys [2009-06-17 55312]
R3 LMouFilt;Logitech SetPoint KMDF Mouse Filter Driver; C:\Windows\system32\DRIVERS\LMouFilt.Sys [2009-06-17 57872]
R3 LUsbFilt;Logitech SetPoint KMDF USB Filter; C:\Windows\System32\Drivers\LUsbFilt.Sys [2009-06-17 40976]
R3 rt61x64;RT61 Extensible Wireless Driver; C:\Windows\system32\DRIVERS\netr6164.sys [2010-04-08 446304]
R3 RTHDMIAzAudService;Service for HDMI; C:\Windows\system32\drivers\RtHDMIVX.sys [2009-07-17 201472]
R3 StillCam;Ovladač digitálního fotoaparátu pro sériový port; C:\Windows\system32\DRIVERS\serscan.sys [2009-07-14 12288]
R3 vwifimp;Microsoft Virtual WiFi Miniport Service; C:\Windows\system32\DRIVERS\vwifimp.sys [2009-07-14 17920]
S3 ab3esjrj;ab3esjrj; C:\Windows\system32\drivers\ab3esjrj.sys []
S3 atillk64;atillk64; \??\C:\Program Files (x86)\AMD\System Monitor\atillk64.sys []
S3 gdrv;gdrv; \??\C:\Windows\gdrv.sys [2011-04-20 25640]
S3 GGSAFERDriver;GGSAFER Driver; \??\C:\Program Files (x86)\Garena\safedrv.sys []
S3 HPFXBULK;HPFXBULK; C:\Windows\system32\drivers\hpfx64bulk.sys [2007-07-16 20504]
S3 RTL8167;Realtek 8167 NT Driver; C:\Windows\system32\DRIVERS\Rt64win7.sys [2009-07-30 236544]
S3 RTTEAMPT;Realtek Teaming Protocol Driver (NDIS 6.0); C:\Windows\system32\DRIVERS\RtTeam60.sys [2009-12-21 51712]
S3 RTVLANPT;Realtek Vlan Protocol Driver (NDIS 6.2); C:\Windows\system32\DRIVERS\RtVlan60.sys [2007-12-03 24064]
S3 STIrUsb;SigmaTel USB-IrDA Dongle; C:\Windows\system32\DRIVERS\irstusb.sys [2008-01-19 33792]
S3 TEAM;Realtek Virtual Miniport Driver for Teaming (NDIS 6.0); C:\Windows\system32\DRIVERS\RtTeam60.sys [2009-12-21 51712]
S3 usbscan;Ovladač skeneru USB; C:\Windows\system32\DRIVERS\usbscan.sys [2009-07-14 41984]
S3 WSDPrintDevice;Podpora tisku WSD prostřednictvím funkce UMB; C:\Windows\system32\DRIVERS\WSDPrint.sys [2009-07-14 23040]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 AMD External Events Utility;AMD External Events Utility; C:\Windows\system32\atiesrxx.exe [2010-11-26 203776]
R2 AMD FUEL Service;AMD FUEL Service; C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe [2010-11-25 354304]
R2 AMD Reservation Manager;AMD Reservation Manager; C:\Program Files\ATI Technologies\ATI.ACE\Reservation Manager\AMD Reservation Manager.exe [2010-06-17 194496]
R2 avast! Antivirus;avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [2011-02-23 42184]
R2 BCUService;Browser Configuration Utility Service; C:\Program Files (x86)\DeviceVM\Browser Configuration Utility\BCUService.exe [2009-08-04 219360]
R2 Irmon;@%SystemRoot%\System32\irmon.dll,-2000; C:\Windows\system32\svchost.exe [2009-07-14 27136]
R2 IswSvc;ZoneAlarm Toolbar IswSvc; C:\Program Files\CheckPoint\ZAForceField\IswSvc.exe [2011-02-15 822264]
R2 Net Driver HPZ12;Net Driver HPZ12; C:\Windows\System32\svchost.exe [2009-07-14 27136]
R2 Pml Driver HPZ12;Pml Driver HPZ12; C:\Windows\System32\svchost.exe [2009-07-14 27136]
R2 PnkBstrA;PnkBstrA; C:\Windows\syswow64\PnkBstrA.exe [2011-03-21 75136]
R2 RalinkRegistryWriter;Ralink Registry Writer; C:\Program Files (x86)\Ovislink\Common\RaRegistry.exe [2009-12-15 185632]
R2 RalinkRegistryWriter64;Ralink Registry Writer 64; C:\Program Files (x86)\Ovislink\Common\RaRegistry64.exe [2009-12-15 212256]
R2 vsmon;TrueVector Internet Monitor; C:\Windows\SysWOW64\ZoneLabs\vsmon.exe [2011-03-18 2435592]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
S2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2010-03-18 138576]
S2 HP LaserJet Service;HP LaserJet Service; C:\Program Files (x86)\HP\HPLaserJetService\HPLaserJetService.exe [2009-06-01 136192]
S3 AllShare;SAMSUNG AllShare Service; C:\Program Files (x86)\Samsung\SAMSUNG PC Share Manager\WiselinkPro.exe [2010-07-16 6638080]
S3 aspnet_state;Stavová služba ASP.NET; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\aspnet_state.exe [2010-03-18 44376]
S3 WatAdminSvc;@%SystemRoot%\system32\Wat\WatUX.exe,-601; C:\Windows\system32\Wat\WatAdminSvc.exe [2010-07-21 1255736]
S4 ES lite Service;ES lite Service for program management.; C:\Program Files (x86)\Gigabyte\EasySaver\ESSVR.EXE [2009-08-24 68136]
S4 gupdate;Služba Google Update (gupdate); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2011-02-15 136176]
S4 LBTServ;Logitech Bluetooth Service; C:\Program Files\Common Files\Logishrd\Bluetooth\LBTServ.exe [2009-07-20 160784]
S4 NetMsmqActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8195; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2010-03-18 124240]
S4 NetPipeActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8197; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2010-03-18 124240]
S4 NetTcpActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8199; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2010-03-18 124240]

-----------------EOF-----------------

[Rudy]

Dejte log z ComboFix.

Stahnete a ulozte nejlepe na plochu ComboFix: http://download.bleepingcomputer.com/sUBs/ComboFix.exe

pote spustte aplikaci pod uctem s administratorskym opravnenim

hned po startu se zobrazi obrazovka s licencnimi podminkami, pokracujte kliknutim na tlacitko Ano.

v klidu si postavte na kafe (cela akce trva cca. 5-10 minut, nekdy i dele - dle toho, o jak rychly stroj se jedna a kolika soubory se skener bude muset prodirat), behem skenu se nepokousejte spoustet zadne jine aplikace ani nic jineho

behem skenovani nepropadejte panice, vas stroj muze byt restartovan (predevsim pri prvni aplikaci skeneru)

upozorneni: pokud pouzivate antispyware s rezidentnim stitem, prepnete jeho rezidentni stit do Install Mode, pripadne jej po dobu skenu uplne deaktivujte, protoze dochazi pri skenu a vymazu pripadneho malware k nezadoucim kolizim s rezidentem antispyware

[nepamatujusilogin]

vypadá to jakoby se combofix pokaždé zakousl
vypnu antivirus, spustím combofix, vytvoří se bod obnovy, a pak jen vidím toto:

bylo to spuštěno téměř 2 hodiny (přitom nemám starý hw,4 gb ram 800mhz, phenom x4 3ghz)

[Rudy]

Zkuste spustit v nouz. režimu.

[nepamatujusilogin]

jen tak pro jistotu jsem odinstaloval avast, ale situace se nezměnila, ani v nouzovém režimu.

[Rudy]

Udělejte kompletní sken MBAM: http://www.malwarebytes.org/mbam.php a dejte log. Předem nic nemažte. Kdyby se sken "sekl", znovu jej nespouštějte, může se jednat o systémovou chybu.