Pls o kontrolu logu

[viking`]

Prosim o kontrolu logu, posledni den-dva, mi zacal pc nejak blbnout. Pri spusteni nejake hry se mi zacne sekat zvuk a vse trva desne dlouho, obcas se uplne sekne obraz a musim restart. Zkousel jsem obnoveni systemu, kterej btw trval taky neuveritelne dlouho , po obnoveni to chvili slapalo v pohode a najednou bum a zas vse spomaleny zasekany :X

Logfile of random's system information tool 1.06 (written by random/random)
Run by David at 2010-01-31 19:35:00
Systém Microsoft Windows XP Professional Service Pack 2
System drive C: has 6 GB (9%) free of 60 GB
Total RAM: 2046 MB (71% free)

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 19:35:05, on 31.1.2010
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\drivers\KodakCCS.exe
C:\Program Files\Eset\nod32krn.exe
C:\WINDOWS\system32\PnkBstrA.exe
C:\WINDOWS\System32\ScsiAccess.EXE
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\VTTimer.exe
C:\WINDOWS\RTHDCPL.EXE
D:\Starý disk\1\Programy\Winamp\winampa.exe
C:\Program Files\Eset\nod32kui.exe
C:\WINDOWS\system32\RUNDLL32.EXE
C:\WINDOWS\system32\ctfmon.exe
D:\mw2\steam.exe
C:\Program Files\PC Connectivity Solution\ServiceLayer.exe
C:\Program Files\PC Connectivity Solution\Transports\NclUSBSrv.exe
C:\Program Files\PC Connectivity Solution\Transports\NclRSSrv.exe
C:\WINDOWS\system32\wuauclt.exe
D:\Starý disk\1\Programy\qip\QIP Infium\QIP Infium\infium.exe
C:\WINDOWS\system32\PnkBstrB.exe
D:\STARDI~1\1\PROGRAMY\FIREFOX\FIREFOX.EXE
C:\WINDOWS\system32\taskmgr.exe
C:\WINDOWS\system32\wuauclt.exe
C:\Documents and Settings\David\Plocha\RSIT.exe
C:\Documents and Settings\David\Plocha\PROGRAMY\David.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.gamepark.cz/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page =
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Odkazy
R3 - URLSearchHook: ICQ Toolbar - {855F3B16-6D32-4fe6-8A56-BBB695989046} - D:\Starý disk\1\Programy\icq\ICQToolbar\toolbaru.dll
O2 - BHO: Canon Easy Web Print Helper - {68F9551E-0411-48E4-9AAF-4BC42A6A46BE} - C:\Program Files\Canon\Easy-WebPrint\EWPBrowseLoader.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0\bin\ssv.dll
O3 - Toolbar: ICQ Toolbar - {855F3B16-6D32-4fe6-8A56-BBB695989046} - D:\Starý disk\1\Programy\icq\ICQToolbar\toolbaru.dll
O3 - Toolbar: Easy-WebPrint - {327C2873-E90D-4c37-AA9D-10AC9BABA46C} - C:\Program Files\Canon\Easy-WebPrint\Toolband.dll
O4 - HKLM\..\Run: [Easy-PrintToolBox] C:\Program Files\Canon\Easy-PrintToolBox\BJPSMAIN.EXE /logon
O4 - HKLM\..\Run: [VTTimer] VTTimer.exe
O4 - HKLM\..\Run: [VTTrayp] VTtrayp.exe
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE
O4 - HKLM\..\Run: [WinampAgent] "D:\Starý disk\1\Programy\Winamp\winampa.exe"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [nod32kui] "C:\Program Files\Eset\nod32kui.exe" /WAITSERVICE
O4 - HKLM\..\Run: [nwiz] nwiz.exe /installquiet
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [PC Suite Tray] "D:\Starý disk\1\Programy\pc suite\Nokia PC Suite 7\PCSuite.exe" -onlytray
O4 - HKCU\..\Run: [Steam] "d:\mw2\steam.exe" -silent
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'Default user')
O4 - Global Startup: Adobe Gamma Loader.lnk = C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe
O8 - Extra context menu item: &ICQ Toolbar Search - res://D:\Starý disk\1\Programy\icq\ICQToolbar\toolbaru.dll/SEARCH.HTML
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Office Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O8 - Extra context menu item: Easy-WebPrint - Náhled - res://C:\Program Files\Canon\Easy-WebPrint\Toolband.dll/RC_Preview.html
O8 - Extra context menu item: Easy-WebPrint - Přidat na seznam k tisku - res://C:\Program Files\Canon\Easy-WebPrint\Toolband.dll/RC_AddToList.html
O8 - Extra context menu item: Easy-WebPrint - Tisk - res://C:\Program Files\Canon\Easy-WebPrint\Toolband.dll/RC_Print.html
O8 - Extra context menu item: Easy-WebPrint - Vysokorychlostní tisk - res://C:\Program Files\Canon\Easy-WebPrint\Toolband.dll/RC_HSPrint.html
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0\bin\ssv.dll
O9 - Extra button: Zdroje informací - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: ICQ Lite - {B863453A-26C3-4e1f-A54D-A2CD196348E9} - D:\Starý disk\1\Programy\icq\ICQLite\ICQLite.exe
O9 - Extra 'Tools' menuitem: ICQ Lite - {B863453A-26C3-4e1f-A54D-A2CD196348E9} - D:\Starý disk\1\Programy\icq\ICQLite\ICQLite.exe
O9 - Extra button: eBay - Homepage - {EF79EAC5-3452-4E02-B8BD-BA4C89F1AC7A} - D:\Starý disk\1\Programy\IrfanView\Ebay\Ebay.htm
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/windowsupda ... 6319618030
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\System32\Ati2evxx.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\1150\Intel 32\IDriverT.exe
O23 - Service: Kodak Camera Connection Software (KodakCCS) - Eastman Kodak Company - C:\WINDOWS\system32\drivers\KodakCCS.exe
O23 - Service: NOD32 Kernel Service (NOD32krn) - Eset - C:\Program Files\Eset\nod32krn.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: PnkBstrA - Unknown owner - C:\WINDOWS\system32\PnkBstrA.exe
O23 - Service: PnkBstrB - Unknown owner - C:\WINDOWS\system32\PnkBstrB.exe
O23 - Service: ScsiAccess - Unknown owner - C:\WINDOWS\System32\ScsiAccess.EXE
O23 - Service: ServiceLayer - Nokia - C:\Program Files\PC Connectivity Solution\ServiceLayer.exe

--
End of file - 7239 bytes

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{68F9551E-0411-48E4-9AAF-4BC42A6A46BE}]
EWPBrowseObject Class - C:\Program Files\Canon\Easy-WebPrint\EWPBrowseLoader.dll [2006-04-18 34304]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
SSVHelper Class - C:\Program Files\Java\jre1.6.0\bin\ssv.dll [2007-05-20 501384]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{855F3B16-6D32-4fe6-8A56-BBB695989046} - ICQ Toolbar - D:\Starý disk\1\Programy\icq\ICQToolbar\toolbaru.dll [2005-01-19 446464]
{327C2873-E90D-4c37-AA9D-10AC9BABA46C} - Easy-WebPrint - C:\Program Files\Canon\Easy-WebPrint\Toolband.dll [2006-04-18 552960]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"Easy-PrintToolBox"=C:\Program Files\Canon\Easy-PrintToolBox\BJPSMAIN.EXE [2004-01-14 409600]
"VTTimer"=C:\WINDOWS\system32\VTTimer.exe [2005-03-08 53248]
"VTTrayp"=C:\WINDOWS\system32\VTtrayp.exe [2005-09-14 167936]
"NeroFilterCheck"=C:\WINDOWS\system32\NeroCheck.exe [2001-07-09 155648]
"RTHDCPL"=C:\WINDOWS\RTHDCPL.EXE [2007-05-10 16342528]
"WinampAgent"=D:\Starý disk\1\Programy\Winamp\winampa.exe [2009-04-10 37888]
"QuickTime Task"=C:\Program Files\QuickTime\qttask.exe [2007-04-11 77824]
"nod32kui"=C:\Program Files\Eset\nod32kui.exe [2010-01-13 921600]
"nwiz"=nwiz.exe /installquiet []
"NvCplDaemon"=C:\WINDOWS\system32\NvCpl.dll [2010-01-11 13666408]
"NvMediaCenter"=C:\WINDOWS\system32\NvMcTray.dll [2010-01-11 110696]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"=C:\WINDOWS\system32\ctfmon.exe [2004-08-17 15360]
"PC Suite Tray"=D:\Starý disk\1\Programy\pc suite\Nokia PC Suite 7\PCSuite.exe [2009-11-11 1451520]
"Steam"=d:\mw2\steam.exe [2010-01-21 1217808]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ICQ Lite]
D:\Starý disk\1\Programy\icq\ICQLite\ICQLite.exe [2005-04-10 2904660]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\MSMSGS]
C:\Program Files\Messenger\msmsgs.exe [2004-10-13 1694208]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NBJ]
D:\Starý disk\1\Programy\NERO-6\Nero BackItUp\NBJ.exe [2005-09-16 1961984]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\QuickTime Task]
C:\Program Files\QuickTime\qttask.exe [2007-04-11 77824]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SunJavaUpdateSched]
C:\Program Files\Java\jre1.6.0\bin\jusched.exe [2007-05-20 77824]

C:\Documents and Settings\All Users\Nabídka Start\Programy\Po spuštění
Adobe Gamma Loader.lnk - C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\AtiExtEvent]
C:\WINDOWS\system32\Ati2evxx.dll [2007-06-15 118784]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Wdf01000.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\UploadMgr]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Wdf01000.sys]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"RunStartupScriptSync"=1

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1
"RunStartupScriptSync"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=145

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoResolveSearch"=
"NoDriveAutoRun"=
"NoDriveTypeAutoRun"=
"HonorAutoRunSetting"=

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"D:\Starý disk\1\Hry\MW2\Modern Warfare 2\iw4mp.exe"="D:\Starý disk\1\Hry\MW2\Modern Warfare 2\iw4mp.exe:*:Enabled:iw4mp"
"D:\Starý disk\1\Hry\Call of duty\HLSW\HLSW\hlsw.exe"="D:\Starý disk\1\Hry\Call of duty\HLSW\HLSW\hlsw.exe:*:Enabled:HLSW"
"D:\Starý disk\1\Hry\Call of duty\CoDMP.exe"="D:\Starý disk\1\Hry\Call of duty\CoDMP.exe:*:Enabled:CoDMP"
"D:\Starý disk\1\Programy\qip\QIP Infium\QIP Infium\infium.exe"="D:\Starý disk\1\Programy\qip\QIP Infium\QIP Infium\infium.exe:*:Enabled:QIP Infium"
"D:\Starý disk\1\Programy\icq\ICQLite\ICQLite.exe"="D:\Starý disk\1\Programy\icq\ICQLite\ICQLite.exe:*:Enabled:ICQ Lite"
"D:\Starý disk\1\Hry\Cod 4\iw3mp.exe"="D:\Starý disk\1\Hry\Cod 4\iw3mp.exe:*:Enabled:iw3mp"
"D:\Starý disk\1\Programy\BITLORD\BitLord.exe"="D:\Starý disk\1\Programy\BITLORD\BitLord.exe:*:Enabled:BitLord"
"D:\Starý disk\1\Hry\WaW\Setup\Data\CoDWaW.exe"="D:\Starý disk\1\Hry\WaW\Setup\Data\CoDWaW.exe:*:Enabled:Call of Duty(R) - World at War(TM) "
"D:\Starý disk\1\Hry\WaW\Setup\Data\CoDWaWmp.exe"="D:\Starý disk\1\Hry\WaW\Setup\Data\CoDWaWmp.exe:*:Enabled:Call of Duty(R) - World at War(TM) "
"C:\D\CoD2MP_s.exe"="C:\D\CoD2MP_s.exe:*:Enabled:CoD2MP_s"
"C:\Program Files\TeamViewer3\TeamViewer.exe"="C:\Program Files\TeamViewer3\TeamViewer.exe:*:Enabled:TeamViewer Remote Control Application"
"C:\Program Files\Nokia\Nokia Software Updater\nsu_ui_client.exe"="C:\Program Files\Nokia\Nokia Software Updater\nsu_ui_client.exe:*:Enabled:Nokia Software Updater"
"C:\Program Files\Common Files\Nokia\Service Layer\A\nsl_host_process.exe"="C:\Program Files\Common Files\Nokia\Service Layer\A\nsl_host_process.exe:*:Enabled:Nokia Service Layer Host Process "
"D:\Starý disk\1\Hry\MW2\steam\Steam.exe"="D:\Starý disk\1\Hry\MW2\steam\Steam.exe:*:Disabled:Steam 732897"
"D:\Starý disk\1\Hry\MW2\steam\steamapps\common\call of duty modern warfare 2\iw4sp.exe"="D:\Starý disk\1\Hry\MW2\steam\steamapps\common\call of duty modern warfare 2\iw4sp.exe:*:Enabled:Call of Duty: Modern Warfare 2"
"D:\Starý disk\1\Hry\MW2\steam\steamapps\common\call of duty modern warfare 2\iw4mp.exe"="D:\Starý disk\1\Hry\MW2\steam\steamapps\common\call of duty modern warfare 2\iw4mp.exe:*:Enabled:Call of Duty: Modern Warfare 2 - Multiplayer"
"D:\Starý disk\1\Hry\MW2\Steam.exe"="D:\Starý disk\1\Hry\MW2\Steam.exe:*:Enabled:Steam"
"D:\MW2\Steam.exe"="D:\MW2\Steam.exe:*:Enabled:Steam"
"D:\MW2\steamapps\common\call of duty modern warfare 2\iw4mp.exe"="D:\MW2\steamapps\common\call of duty modern warfare 2\iw4mp.exe:*:Enabled:Call of Duty: Modern Warfare 2 - Multiplayer"
"D:\MW2\steamapps\common\call of duty modern warfare 2\iw4sp.exe"="D:\MW2\steamapps\common\call of duty modern warfare 2\iw4sp.exe:*:Enabled:Call of Duty: Modern Warfare 2"
"D:\Starý disk\1\Hry\Quake3\quake3.exe"="D:\Starý disk\1\Hry\Quake3\quake3.exe:*:Enabled:quake3"
"C:\Documents and Settings\David\Plocha\Skype.exe"="C:\Documents and Settings\David\Plocha\Skype.exe:*:Enabled:Skype"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"

======List of files/folders created in the last 1 months======

2060-01-17 03:04:01 ----D---- C:\Documents and Settings\All Users\Data aplikací\ESET
2010-01-31 19:35:00 ----D---- C:\rsit
2010-01-23 03:01:17 ----HDC---- C:\WINDOWS\$NtUninstallKB978207$
2010-01-21 18:30:17 ----D---- C:\Documents and Settings\All Users\Data aplikací\NVIDIA Corporation
2010-01-21 18:30:03 ----D---- C:\Program Files\NVIDIA Corporation
2010-01-21 18:29:03 ----A---- C:\WINDOWS\system32\OpenCL.dll
2010-01-21 18:29:02 ----A---- C:\WINDOWS\system32\nvcompiler.dll
2010-01-14 00:06:33 ----HDC---- C:\WINDOWS\$NtUninstallKB955759$
2010-01-14 00:06:21 ----HDC---- C:\WINDOWS\$NtUninstallKB972270$
2010-01-13 16:18:28 ----A---- C:\WINDOWS\system32\imon.dll
2010-01-11 22:17:44 ----A---- C:\WINDOWS\system32\nvsvc32.exe
2010-01-11 22:17:44 ----A---- C:\WINDOWS\system32\nvmctray.dll
2010-01-11 22:17:44 ----A---- C:\WINDOWS\system32\nvmccs.dll
2010-01-11 22:17:44 ----A---- C:\WINDOWS\system32\nvcpl.dll
2010-01-11 22:17:44 ----A---- C:\WINDOWS\system32\nvcolor.exe
2010-01-11 22:17:40 ----A---- C:\WINDOWS\system32\nvwddi.dll
2010-01-11 22:17:40 ----A---- C:\WINDOWS\system32\nvrszht.dll
2010-01-11 22:17:40 ----A---- C:\WINDOWS\system32\nvrszhc.dll
2010-01-11 22:17:40 ----A---- C:\WINDOWS\system32\nvrstr.dll
2010-01-11 22:17:40 ----A---- C:\WINDOWS\system32\nvrsth.dll
2010-01-11 22:17:40 ----A---- C:\WINDOWS\system32\nvrssv.dll
2010-01-11 22:17:40 ----A---- C:\WINDOWS\system32\nvrssl.dll
2010-01-11 22:17:40 ----A---- C:\WINDOWS\system32\nvrssk.dll
2010-01-11 22:17:40 ----A---- C:\WINDOWS\system32\nvrsru.dll
2010-01-11 22:17:40 ----A---- C:\WINDOWS\system32\nvrsptb.dll
2010-01-11 22:17:40 ----A---- C:\WINDOWS\system32\nvrspt.dll
2010-01-11 22:17:40 ----A---- C:\WINDOWS\system32\nvrspl.dll
2010-01-11 22:17:40 ----A---- C:\WINDOWS\system32\nvrsno.dll
2010-01-11 22:17:40 ----A---- C:\WINDOWS\system32\nvrsnl.dll
2010-01-11 22:17:40 ----A---- C:\WINDOWS\system32\nvrsko.dll
2010-01-11 22:17:40 ----A---- C:\WINDOWS\system32\nvrsja.dll
2010-01-11 22:17:40 ----A---- C:\WINDOWS\system32\nvrsit.dll
2010-01-11 22:17:40 ----A---- C:\WINDOWS\system32\nvrshu.dll
2010-01-11 22:17:40 ----A---- C:\WINDOWS\system32\nvrshe.dll
2010-01-11 22:17:40 ----A---- C:\WINDOWS\system32\nvrsfr.dll
2010-01-11 22:17:40 ----A---- C:\WINDOWS\system32\nvrsfi.dll
2010-01-11 22:17:40 ----A---- C:\WINDOWS\system32\nvrsesm.dll
2010-01-11 22:17:40 ----A---- C:\WINDOWS\system32\nvrses.dll
2010-01-11 22:17:40 ----A---- C:\WINDOWS\system32\nvrseng.dll
2010-01-11 22:17:40 ----A---- C:\WINDOWS\system32\nvrsel.dll
2010-01-11 22:17:40 ----A---- C:\WINDOWS\system32\nvrsde.dll
2010-01-11 22:17:40 ----A---- C:\WINDOWS\system32\nvrsda.dll
2010-01-11 22:17:40 ----A---- C:\WINDOWS\system32\nvrscs.dll
2010-01-11 22:17:40 ----A---- C:\WINDOWS\system32\nvrsar.dll
2010-01-03 01:02:13 ----D---- C:\Program Files\Common Files\PCSuite
2010-01-03 00:57:15 ----A---- C:\WINDOWS\system32\ptpusb.dll
2010-01-03 00:57:14 ----A---- C:\WINDOWS\system32\ptpusd.dll
2010-01-02 23:54:34 ----D---- C:\Program Files\PC Connectivity Solution

======List of files/folders modified in the last 1 months======

2010-01-31 19:33:40 ----D---- C:\WINDOWS\Prefetch
2010-01-31 19:33:32 ----D---- C:\WINDOWS
2010-01-31 19:24:09 ----D---- C:\WINDOWS\Debug
2010-01-31 19:16:14 ----A---- C:\WINDOWS\system32\PnkBstrB.exe
2010-01-31 19:08:37 ----D---- C:\WINDOWS\system32\CatRoot2
2010-01-31 19:04:13 ----D---- C:\WINDOWS\TEMP
2010-01-31 18:38:52 ----D---- C:\WINDOWS\system32\config
2010-01-31 18:36:41 ----D---- C:\WINDOWS\system32\wbem
2010-01-31 18:36:29 ----D---- C:\WINDOWS\Registration
2010-01-31 16:40:35 ----A---- C:\WINDOWS\SchedLgU.Txt
2010-01-30 15:00:25 ----D---- C:\Program Files\Eset
2010-01-26 20:50:13 ----D---- C:\Documents and Settings\David\Data aplikací\Skype
2010-01-24 17:56:57 ----D---- C:\D
2010-01-24 00:20:03 ----D---- C:\WINDOWS\system32
2010-01-23 03:01:45 ----HD---- C:\WINDOWS\inf
2010-01-23 03:01:33 ----RSHDC---- C:\WINDOWS\system32\dllcache
2010-01-23 03:01:29 ----D---- C:\Program Files\Internet Explorer
2010-01-22 09:18:45 ----HD---- C:\WINDOWS\$hf_mig$
2010-01-21 18:52:58 ----D---- C:\WINDOWS\system32\DirectX
2010-01-21 18:51:00 ----RSD---- C:\WINDOWS\assembly
2010-01-21 18:50:21 ----SHD---- C:\WINDOWS\Installer
2010-01-21 18:50:02 ----D---- C:\Config.Msi
2010-01-21 18:31:03 ----D---- C:\WINDOWS\Help
2010-01-21 18:30:16 ----D---- C:\WINDOWS\nview
2010-01-21 18:30:03 ----RD---- C:\Program Files
2010-01-21 18:29:56 ----D---- C:\WINDOWS\system32\drivers
2010-01-21 18:28:58 ----D---- C:\NVIDIA
2010-01-20 23:50:39 ----D---- C:\WINDOWS\system32\NtmsData
2010-01-20 15:52:12 ----D---- C:\Documents and Settings\David\Data aplikací\HLSW
2010-01-14 09:17:49 ----D---- C:\WINDOWS\AppPatch
2010-01-14 00:06:37 ----A---- C:\WINDOWS\imsins.BAK
2010-01-12 05:03:33 ----A---- C:\WINDOWS\system32\nvudisp.exe
2010-01-12 05:03:33 ----A---- C:\WINDOWS\system32\nvoglnt.dll
2010-01-12 05:03:33 ----A---- C:\WINDOWS\system32\nvcuvid.dll
2010-01-12 05:03:33 ----A---- C:\WINDOWS\system32\nvcuvenc.dll
2010-01-12 05:03:33 ----A---- C:\WINDOWS\system32\nvcuda.dll
2010-01-12 05:03:33 ----A---- C:\WINDOWS\system32\nvcodins.dll
2010-01-12 05:03:33 ----A---- C:\WINDOWS\system32\nvcod.dll
2010-01-12 05:03:33 ----A---- C:\WINDOWS\system32\nvapi.dll
2010-01-12 05:03:33 ----A---- C:\WINDOWS\system32\nv4_disp.dll
2010-01-04 16:17:48 ----A---- C:\WINDOWS\system32\MRT.exe
2010-01-03 01:02:28 ----DC---- C:\WINDOWS\system32\DRVSTORE
2010-01-03 01:02:13 ----D---- C:\Program Files\Common Files
2010-01-03 01:02:07 ----D---- C:\Program Files\Common Files\Nokia
2010-01-03 01:02:00 ----D---- C:\Documents and Settings\All Users\Data aplikací\Installations
2010-01-03 00:57:11 ----D---- C:\WINDOWS\system32\CatRoot
2010-01-03 00:17:59 ----D---- C:\Documents and Settings\David\Data aplikací\Nokia
2010-01-02 23:53:52 ----D---- C:\Program Files\Nokia
2010-01-02 23:53:13 ----D---- C:\WINDOWS\WinSxS

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R1 DcCam;Kodak Camera Proxy; C:\WINDOWS\System32\DRIVERS\DcCam.sys [2003-12-05 36918]
R1 WS2IFSL;Podpůrné prostředí zprostředkovatele služeb Windows Socket 2.0 bez podpory IFS; C:\WINDOWS\System32\drivers\ws2ifsl.sys [2001-10-25 12032]
R2 AMON;AMON; \??\C:\WINDOWS\system32\drivers\amon.sys []
R2 DCFS2K;Kodak DCFS2K Driver; C:\WINDOWS\system32\drivers\dcfs2k.sys [2003-11-16 38737]
R3 HDAudBus;Microsoft UAA Bus Driver for High Definition Audio; C:\WINDOWS\system32\DRIVERS\HDAudBus.sys [2005-01-07 138752]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\WINDOWS\system32\drivers\RtkHDAud.sys [2007-05-10 4419584]
R3 nv;nv; C:\WINDOWS\System32\DRIVERS\nv4_mini.sys [2010-01-12 10276768]
R3 RTL8023xp;Realtek 10/100/1000 PCI NIC Family NDIS XP Driver; C:\WINDOWS\System32\DRIVERS\Rtnicxp.sys [2006-12-14 85120]
R3 usbhub;Rozbočovač umožnující USB2; C:\WINDOWS\System32\DRIVERS\usbhub.sys [2004-08-03 57600]
R3 usbohci;Ovladač Miniport otevřeného hostitelského řadiče Microsoft USB; C:\WINDOWS\System32\DRIVERS\usbohci.sys [2004-08-03 17024]
S1 Exportit;Exportit; C:\WINDOWS\System32\DRIVERS\exportit.sys [2004-02-19 148529]
S2 vcs;vcs; \??\D:\Starý disk\1\Dokumenty\XxX\zmutovanej hlasek\vcs.sys []
S3 a5h1sahw;a5h1sahw; C:\WINDOWS\system32\drivers\a5h1sahw.sys []
S3 ati2mtag;ati2mtag; C:\WINDOWS\System32\DRIVERS\ati2mtag.sys [2007-06-15 2301440]
S3 catchme;catchme; \??\C:\ComboFix\catchme.sys []
S3 DcFpoint;DcFpoint; C:\WINDOWS\System32\DRIVERS\DcFpoint.sys [2003-09-30 61564]
S3 DcLps;Legacy Polling Service; C:\WINDOWS\System32\DRIVERS\DcLps.sys [2003-09-30 8022]
S3 DcPTP;dcptp; C:\WINDOWS\System32\DRIVERS\DcPTP.sys [2003-12-05 68182]
S3 FETNDIS;VIA PCI 10/100Mb Fast Ethernet Adapter NT Driver; C:\WINDOWS\System32\DRIVERS\fetnd5.sys [2001-08-17 27165]
S3 gdrv;gdrv; \??\C:\WINDOWS\gdrv.sys []
S3 k750bus;Sony Ericsson 750 driver (WDM); C:\WINDOWS\System32\DRIVERS\k750bus.sys []
S3 k750mdfl;Sony Ericsson 750 USB WMC Modem Filter; C:\WINDOWS\System32\DRIVERS\k750mdfl.sys []
S3 k750mdm;Sony Ericsson 750 USB WMC Modem Drivers; C:\WINDOWS\System32\DRIVERS\k750mdm.sys []
S3 k750mgmt;Sony Ericsson 750 USB WMC Device Management Drivers; C:\WINDOWS\System32\DRIVERS\k750mgmt.sys []
S3 k750obex;Sony Ericsson 750 USB WMC OBEX Interface Drivers; C:\WINDOWS\System32\DRIVERS\k750obex.sys []
S3 nmwcd;Nokia USB Phone Parent; C:\WINDOWS\system32\drivers\ccdcmb.sys [2009-10-06 17664]
S3 nmwcdc;Nokia USB Generic; C:\WINDOWS\system32\drivers\ccdcmbo.sys [2009-10-06 22016]
S3 pccsmcfd;PCCS Mode Change Filter Driver; C:\WINDOWS\system32\DRIVERS\pccsmcfd.sys [2008-08-26 18816]
S3 SndTDriverV32;SndTDriverV32; C:\WINDOWS\system32\drivers\SndTDriverV32.sys [2006-08-11 515456]
S3 upperdev;upperdev; C:\WINDOWS\system32\DRIVERS\usbser_lowerflt.sys [2009-10-06 7936]
S3 usbprint;Třída USB Printer; C:\WINDOWS\System32\DRIVERS\usbprint.sys [2004-08-03 25856]
S3 usbscan;Ovladač skeneru USB; C:\WINDOWS\system32\DRIVERS\usbscan.sys [2004-08-03 15104]
S3 usbser;USB Modem Driver; C:\WINDOWS\system32\drivers\usbser.sys [2004-08-03 25600]
S3 UsbserFilt;UsbserFilt; C:\WINDOWS\system32\DRIVERS\usbser_lowerfltj.sys [2009-10-06 7936]
S3 USBSTOR;Ovladač velkokapacitního paměťového zařízení USB; C:\WINDOWS\System32\DRIVERS\USBSTOR.SYS [2004-08-03 26496]
S3 usbuhci;Ovladač Microsoft univerzálního hostitelského řadiče USB od společnosti Microsoft; C:\WINDOWS\System32\DRIVERS\usbuhci.sys [2004-08-03 20480]
S3 viagfx;viagfx; C:\WINDOWS\System32\DRIVERS\vtmini.sys [2005-10-06 238336]
S3 VIAudio;Vinyl AC'97 Audio Controller (WDM); C:\WINDOWS\system32\drivers\vinyl97.sys [2006-08-10 204672]
S3 Wdf01000;Kernel Mode Driver Frameworks service; C:\WINDOWS\System32\Drivers\wdf01000.sys [2008-03-27 503008]
S3 WpdUsb;WpdUsb; C:\WINDOWS\System32\Drivers\wpdusb.sys [2005-01-28 18944]
S4 IntelIde;IntelIde; C:\WINDOWS\system32\drivers\IntelIde.sys []

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 KodakCCS;Kodak Camera Connection Software; C:\WINDOWS\system32\drivers\KodakCCS.exe [2004-02-19 301624]
R2 NOD32krn;NOD32 Kernel Service; C:\Program Files\Eset\nod32krn.exe [2010-01-13 507904]
R2 NVSvc;NVIDIA Display Driver Service; C:\WINDOWS\system32\nvsvc32.exe [2010-01-11 154216]
R2 PnkBstrA;PnkBstrA; C:\WINDOWS\system32\PnkBstrA.exe [2009-03-11 75064]
R2 PnkBstrB;PnkBstrB; C:\WINDOWS\system32\PnkBstrB.exe [2010-01-31 215104]
R2 ScsiAccess;ScsiAccess; C:\WINDOWS\System32\ScsiAccess.EXE [2003-02-04 181312]
R2 UMWdf;Windows User Mode Driver Framework; C:\WINDOWS\System32\wdfmgr.exe [2005-01-28 38912]
R3 ServiceLayer;ServiceLayer; C:\Program Files\PC Connectivity Solution\ServiceLayer.exe [2009-10-27 657408]
S2 Ati HotKey Poller;Ati HotKey Poller; C:\WINDOWS\System32\Ati2evxx.exe [2007-06-15 479232]
S3 aspnet_state;ASP.NET State Service; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe [2008-07-25 34312]
S3 clr_optimization_v2.0.50727_32;.NET Runtime Optimization Service v2.0.50727_X86; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe [2008-07-25 69632]
S3 FontCache3.0.0.0;Windows Presentation Foundation Font Cache 3.0.0.0; C:\WINDOWS\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe [2008-07-29 46104]
S3 IDriverT;InstallDriver Table Manager; C:\Program Files\Common Files\InstallShield\Driver\1150\Intel 32\IDriverT.exe [2005-11-14 69632]
S3 idsvc;Windows CardSpace; C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe [2008-07-29 881664]
S3 ose;Office Source Engine; C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2003-07-28 89136]
S4 NetTcpPortSharing;Net.Tcp Port Sharing Service; C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe [2008-07-29 132096]

-----------------EOF-----------------

[Rudy]

Udělejte sken MBAM: http://www.malwarebytes.org/mbam.php a dejte log. Předem nic nemažte.

[viking`]

nevim jestli jste chtel tohle , ale doufam ze ano, pokud ne , tak se predem omlouvam

[Rudy]

Vše smažte.

[viking`]

Po smazani jsem musel restartovat system. Pri restartu mi XP psalo UKLADANI NASTAVENI , trvalo to cca 30 minut , to uz mi bylo divny, myslel jsem ze se to seklo ci co , tak jsem dal rucni restart... Po nacteni systemu zadna zmena vse pri starem

[Rudy]

OK. Dejte log z ComboFix:

Stahnete a ulozte nejlepe na plochu ComboFix: http://download.bleepingcomputer.com/sUBs/ComboFix.exe

pote spustte aplikaci pod uctem s administratorskym opravnenim

hned po startu se zobrazi obrazovka s licencnimi podminkami, pokracujte kliknutim na tlacitko Ano.

v klidu si postavte na kafe (cela akce trva cca. 5-10 minut, nekdy i dele - dle toho, o jak rychly stroj se jedna a kolika soubory se skener bude muset prodirat), behem skenu se nepokousejte spoustet zadne jine aplikace ani nic jineho

behem skenovani nepropadejte panice, vas stroj muze byt restartovan (predevsim pri prvni aplikaci skeneru)

upozorneni: pokud pouzivate antispyware s rezidentnim stitem, prepnete jeho rezidentni stit do Install Mode, pripadne jej po dobu skenu uplne deaktivujte, protoze dochazi pri skenu a vymazu pripadneho malware k nezadoucim kolizim s rezidentem antispyware

[viking`]

ComboFix 10-02-01.01 - David 01.02.2010 19:38:07.2.2 - x86
Systém Microsoft Windows XP Professional 5.1.2600.2.1250.420.1029.18.2046.1642 [GMT 1:00]
Spuštěný z: c:\documents and settings\David\Plocha\ComboFix.exe
AV: Eset NOD32 Antivirus 2.51 *On-access scanning enabled* (Updated) {E5E70D32-0101-4F12-8FB0-D96ACA4F34C0}
* Rezidentní štít AV je zapnutý

.

((((((((((((((((((((((((((((((((((((((( Ostatní výmazy )))))))))))))))))))))))))))))))))))))))))))))))))
.

c:\windows\regedit.com
c:\windows\system32\ieuinit.inf
c:\windows\system32\taskmgr.com

.
((((((((((((((((((((((((( Soubory vytvořené od 2010-01-01 do 2010-02-01 )))))))))))))))))))))))))))))))
.

2010-01-31 19:58 . 2010-01-07 15:07 38224 ----a-w- c:\windows\system32\drivers\mbamswissarmy.sys
2010-01-31 19:58 . 2010-01-07 15:07 19160 ----a-w- c:\windows\system32\drivers\mbam.sys
2010-01-31 18:35 . 2010-01-31 18:35 -------- d-----w- C:\rsit
2010-01-31 17:36 . 2010-01-31 17:36 -------- d-----w- c:\windows\system32\wbem\Repository
2010-01-21 17:30 . 2010-01-21 17:31 -------- d-----w- c:\program files\NVIDIA Corporation
2010-01-21 17:29 . 2010-01-12 04:03 61440 ----a-w- c:\windows\system32\OpenCL.dll
2010-01-21 17:29 . 2010-01-12 04:03 11632640 ----a-w- c:\windows\system32\nvcompiler.dll
2010-01-13 15:18 . 2010-01-13 15:18 502368 ----a-w- c:\windows\system32\drivers\amon.sys
2010-01-13 15:18 . 2010-01-13 15:18 274432 ----a-w- c:\windows\system32\imon.dll
2010-01-13 10:16 . 2009-11-21 16:46 470528 -c----w- c:\windows\system32\dllcache\aclayers.dll
2010-01-03 00:02 . 2010-01-03 00:02 -------- d-----w- c:\program files\Common Files\PCSuite
2010-01-02 23:57 . 2001-10-24 11:25 5632 ----a-w- c:\windows\system32\ptpusb.dll
2010-01-02 23:57 . 2004-08-17 14:49 159232 ----a-w- c:\windows\system32\ptpusd.dll
2010-01-02 23:57 . 2004-08-03 21:58 15104 -c--a-w- c:\windows\system32\dllcache\usbscan.sys
2010-01-02 23:57 . 2004-08-03 21:58 15104 ----a-w- c:\windows\system32\drivers\usbscan.sys
2010-01-02 23:21 . 2006-08-11 15:56 515456 ----a-w- c:\windows\system32\drivers\SndTDriverV32.sys
2010-01-02 22:54 . 2008-08-26 08:26 18816 ----a-w- c:\windows\system32\drivers\pccsmcfd.sys
2010-01-02 22:54 . 2010-01-02 23:45 -------- d-----w- c:\program files\PC Connectivity Solution

.
(((((((((((((((((((((((((((((((((((((((( Find3M výpis ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2010-02-01 18:38 . 2008-02-04 23:32 -------- d-----w- c:\program files\Eset
2010-01-31 19:49 . 2007-07-29 18:14 138376 ----a-w- c:\windows\system32\drivers\PnkBstrK.sys
2010-01-31 19:48 . 2007-07-29 18:14 202448 ----a-w- c:\windows\system32\PnkBstrB.exe
2010-01-12 04:03 . 2009-04-30 20:02 4077672 ----a-w- c:\windows\system32\nvcuvenc.dll
2010-01-12 04:03 . 2009-04-30 20:02 2283526 ----a-w- c:\windows\system32\nvdata.bin
2010-01-12 04:03 . 2009-04-30 20:02 2259560 ----a-w- c:\windows\system32\nvcuvid.dll
2010-01-12 04:03 . 2008-10-07 12:33 4104192 ----a-w- c:\windows\system32\nvcuda.dll
2010-01-12 04:03 . 2008-01-25 21:10 592488 ----a-w- c:\windows\system32\nvudisp.exe
2010-01-12 04:03 . 2007-06-28 16:43 6359168 ----a-w- c:\windows\system32\nv4_disp.dll
2010-01-12 04:03 . 2007-06-28 16:43 182888 ----a-w- c:\windows\system32\nvcodins.dll
2010-01-12 04:03 . 2007-06-28 16:43 182888 ----a-w- c:\windows\system32\nvcod.dll
2010-01-12 04:03 . 2007-06-28 16:43 14458880 ----a-w- c:\windows\system32\nvoglnt.dll
2010-01-12 04:03 . 2007-06-28 16:43 1081344 ----a-w- c:\windows\system32\nvapi.dll
2010-01-12 04:03 . 2007-06-28 16:43 10276768 ----a-w- c:\windows\system32\drivers\nv4_mini.sys
2010-01-03 00:02 . 2008-12-26 00:57 -------- d-----w- c:\program files\Common Files\Nokia
2010-01-02 22:53 . 2008-12-27 14:23 -------- d-----w- c:\program files\Nokia
2009-12-26 17:54 . 2001-10-25 12:00 521680 ----a-w- c:\windows\system32\perfh005.dat
2009-12-26 17:54 . 2001-10-25 12:00 123822 ----a-w- c:\windows\system32\perfc005.dat
2009-12-22 05:42 . 2001-10-25 12:00 663040 ----a-w- c:\windows\system32\wininet.dll
2009-12-22 05:42 . 2008-01-25 18:59 81920 ------w- c:\windows\system32\ieencode.dll
2009-11-21 16:46 . 2001-10-25 12:00 470528 ----a-w- c:\windows\AppPatch\aclayers.dll
2009-11-19 20:42 . 2007-04-11 21:53 592488 ----a-w- c:\windows\system32\NVUNINST.EXE
2009-11-06 02:18 . 2009-11-06 02:18 41872 ----a-w- c:\windows\system32\xfcodec.dll
2008-01-11 21:08 . 2008-01-11 21:08 28672 --sha-w- c:\program files\Thumbs.db
2008-04-26 05:48 . 2008-04-25 18:40 331808 --sha-w- c:\windows\system32\drivers\fidbox.dat
.

(((((((((((((((((((((((((((((((((( Spouštěcí body v registru )))))))))))))))))))))))))))))))))))))))))))))
.
.
*Poznámka* prázdné záznamy a legitimní výchozí údaje nejsou zobrazeny.
REGEDIT4

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"PC Suite Tray"="d:\starý disk\1\Programy\pc suite\Nokia PC Suite 7\PCSuite.exe" [2009-11-11 1451520]
"Steam"="d:\mw2\steam.exe" [2010-01-21 1217808]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Easy-PrintToolBox"="c:\program files\Canon\Easy-PrintToolBox\BJPSMAIN.EXE" [2004-01-14 409600]
"VTTimer"="VTTimer.exe" [2005-03-08 53248]
"VTTrayp"="VTtrayp.exe" [2005-09-14 167936]
"NeroFilterCheck"="c:\windows\system32\NeroCheck.exe" [2001-07-09 155648]
"RTHDCPL"="RTHDCPL.EXE" [2007-05-10 16342528]
"WinampAgent"="d:\starý disk\1\Programy\Winamp\winampa.exe" [2009-04-10 37888]
"QuickTime Task"="c:\program files\QuickTime\qttask.exe" [2007-04-11 77824]
"nod32kui"="c:\program files\Eset\nod32kui.exe" [2010-01-13 921600]
"NvCplDaemon"="c:\windows\system32\NvCpl.dll" [2010-01-11 13666408]
"NvMediaCenter"="c:\windows\system32\NvMcTray.dll" [2010-01-11 110696]

[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="c:\windows\System32\CTFMON.EXE" [2004-08-17 15360]

c:\documents and settings\All Users\Nabˇdka Start\Programy\Po spuçtŘnˇ\
Adobe Gamma Loader.lnk - c:\program files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe [2007-12-3 113664]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\session manager]
BootExecute REG_MULTI_SZ \0

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Wdf01000.sys]
@="Driver"

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ICQ Lite]
2005-04-10 13:13 2904660 ----a-w- d:\starý disk\1\Programy\icq\ICQLite\ICQLite.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\MSMSGS]
2004-10-13 16:24 1694208 ------w- c:\program files\Messenger\msmsgs.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NBJ]
2005-09-16 16:41 1961984 ------w- d:\starý disk\1\Programy\NERO-6\Nero BackItUp\NBJ.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\QuickTime Task]
2007-04-11 19:47 77824 ----a-w- c:\program files\QuickTime\qttask.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SunJavaUpdateSched]
2007-05-20 15:34 77824 ----a-w- c:\program files\Java\jre1.6.0\bin\jusched.exe

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\system32\\sessmgr.exe"=
"d:\\Starý disk\\1\\Hry\\Call of duty\\HLSW\\HLSW\\hlsw.exe"=
"d:\\Starý disk\\1\\Hry\\Call of duty\\CoDMP.exe"=
"d:\\Starý disk\\1\\Programy\\qip\\QIP Infium\\QIP Infium\\infium.exe"=
"d:\\Starý disk\\1\\Programy\\icq\\ICQLite\\ICQLite.exe"=
"d:\\Starý disk\\1\\Hry\\Cod 4\\iw3mp.exe"=
"d:\\Starý disk\\1\\Programy\\BITLORD\\BitLord.exe"=
"d:\\Starý disk\\1\\Hry\\WaW\\Setup\\Data\\CoDWaW.exe"=
"d:\\Starý disk\\1\\Hry\\WaW\\Setup\\Data\\CoDWaWmp.exe"=
"c:\\D\\CoD2MP_s.exe"=
"c:\\Program Files\\TeamViewer3\\TeamViewer.exe"=
"c:\\Program Files\\Nokia\\Nokia Software Updater\\nsu_ui_client.exe"=
"c:\\Program Files\\Common Files\\Nokia\\Service Layer\\A\\nsl_host_process.exe"=
"d:\\MW2\\Steam.exe"=
"d:\\Starý disk\\1\\Hry\\Quake3\\quake3.exe"=
"c:\\Documents and Settings\\David\\Plocha\\Skype.exe"=
"d:\\MW2\\steamapps\\common\\call of duty modern warfare 2\\iw4mp.exe"=
"d:\\MW2\\steamapps\\common\\call of duty modern warfare 2\\iw4sp.exe"=

R0 xfilt;VIA SATA IDE Hot-plug Driver;c:\windows\system32\drivers\xfilt.sys [15.4.2007 9:52 11264]
S0 sptd;sptd;c:\windows\system32\drivers\sptd.sys [5.5.2008 21:36 721904]
S2 vcs;vcs;\??\d:\starý disk\1\Dokumenty\XxX\zmutovanej hlasek\vcs.sys --> d:\starý disk\1\Dokumenty\XxX\zmutovanej hlasek\vcs.sys [?]
.
.
------- Doplňkový sken -------
.
uStart Page = hxxp://www.gamepark.cz/
uInternet Connection Wizard,ShellNext = iexplore
IE: &ICQ Toolbar Search - d:\starý disk\1\Programy\icq\ICQToolbar\toolbaru.dll/SEARCH.HTML
IE: E&xportovat do aplikace Microsoft Excel
IE: E&xportovat do aplikace Microsoft Office Excel - c:\progra~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
IE: Easy-WebPrint - Náhled - c:\program files\Canon\Easy-WebPrint\Toolband.dll/RC_Preview.html
IE: Easy-WebPrint - Přidat na seznam k tisku - c:\program files\Canon\Easy-WebPrint\Toolband.dll/RC_AddToList.html
IE: Easy-WebPrint - Tisk - c:\program files\Canon\Easy-WebPrint\Toolband.dll/RC_Print.html
IE: Easy-WebPrint - Vysokorychlostní tisk - c:\program files\Canon\Easy-WebPrint\Toolband.dll/RC_HSPrint.html
LSP: c:\windows\system32\imon.dll
FF - ProfilePath - c:\documents and settings\David\Data aplikací\Mozilla\Firefox\Profiles\n4n4ugc7.default\
FF - prefs.js: browser.startup.homepage - hxxp://www.onlinehra.cz/
FF - component: d:\starý disk\1\Programy\FireFox\components\xpinstal.dll
FF - plugin: c:\program files\Java\jre1.6.0\bin\npjava11.dll
FF - plugin: c:\program files\Java\jre1.6.0\bin\npjava12.dll
FF - plugin: c:\program files\Java\jre1.6.0\bin\npjava13.dll
FF - plugin: c:\program files\Java\jre1.6.0\bin\npjava14.dll
FF - plugin: c:\program files\Java\jre1.6.0\bin\npjava32.dll
FF - plugin: c:\program files\Java\jre1.6.0\bin\npjpi160.dll
FF - plugin: c:\program files\Java\jre1.6.0\bin\npoji610.dll
FF - HiddenExtension: Microsoft .NET Framework Assistant: {20a82645-c095-46ed-80e3-08825760534b} - c:\windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\
.
- - - - NEPLATNÉ POLOŽKY ODSTRANĚNÉ Z REGISTRU - - - -

HKLM-Run-nwiz - nwiz.exe
AddRemove-DAEMON Tools Toolbar - c:\program files\DAEMON Tools Toolbar\uninst.exe
AddRemove-DX-Ball 1.09 - d:\stardi~1\DX-Ball\UNWISE.EXE
AddRemove-id3renamer.cincura.net_is1 - c:\documents and settings\David\Plocha\ID3 renamer\unins000.exe
AddRemove-NVIDIA Display Control Panel - c:\program files\NVIDIA Corporation\Uninstall\nvuninst.exe
AddRemove-QIP Infium - d:\starý disk\1\Programy\qip\QIP Infium\uninstall.exe
AddRemove-Quake III Arena - d:\starý disk\1\hry\q3a\QIII.isu
AddRemove-Teamspeak 2 RC2_is1 - d:\starý disk\1\Hry\Call of Duty\Teamspeak2_RC2\Teamspeak2_RC2\unins000.exe
AddRemove-Ventrilo 2.1.4 čeština - d:\starţ disk\1\HRY\Uninstal.exe
AddRemove-VentriloMIX - d:\starţ disk\1\HRY\Uninstal.exe



**************************************************************************

catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2010-02-01 19:44
Windows 5.1.2600 Service Pack 2 NTFS

skenování skrytých procesů ...

skenování skrytých položek 'Po spuštění' ...

skenování skrytých souborů ...

sken byl úspešně dokončen
skryté soubory: 0

**************************************************************************
.
--------------------- ZAMKNUTÉ KLÍČE V REGISTRU ---------------------

[HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\Reinstall\ó™őw$µ*]
"DisplayName"="???\17?\11\09"
"DeviceDesc"="???\17?\11\09"
"ProviderName"="???\11?\17?\11??"
"MFG"="???????"
"ReinstallString"=".10.1000.7"
"DeviceInstanceIds"=multi:"f:\\chipset\\rs690\\xp2k\\sbdrv\\smbus\\smbusati.inf\00"
.
--------------------- Knihovny navázané na běžící procesy ---------------------

- - - - - - - > 'winlogon.exe'(712)
c:\windows\system32\Ati2evxx.dll

- - - - - - - > 'lsass.exe'(768)
c:\windows\system32\imon.dll
c:\program files\Eset\pr_imon.dll
c:\windows\system32\mswsock.dll
.
Celkový čas: 2010-02-01 19:48:47
ComboFix-quarantined-files.txt 2010-02-01 18:48
ComboFix2.txt 2008-04-22 16:10

Před spuštěním: Volných bajtů: 17 328 066 560
Po spuštění: Volných bajtů: 20 337 074 176

WindowsXP-KB310994-SP2-Pro-BootDisk-CSY.exe
[boot loader]
timeout=2
default=multi(0)disk(0)rdisk(0)partition(1)\WINDOWS
[operating systems]
c:\cmdcons\BOOTSECT.DAT="Microsoft Windows Recovery Console" /cmdcons
multi(0)disk(0)rdisk(0)partition(1)\WINDOWS="Microsoft Windows XP Professional" /fastdetect /NoExecute=OptIn

- - End Of File - - 2AEA7A900C2505E93AE44E5DC204564E

[Rudy]

3 položky byly smazány, zbytek logu vypadá čistý. Nastala nějaká změna?

[viking`]

Bohuzel zadna zmena , porad vse nabiha desne dlouho a seka se to

[Rudy]

Co jste instaloval těsně před tím, než se problém objevil?

[viking`]

Hm , pokud vim tak snad jenom nove ovladace na grafickou kartu.

[Rudy]

Ty by to dělat mohly, ale také nemusely. Dejte ještě pro jistotu logy Process a KernelModule z IceSword: http://www.viry.cz/forum/viewtopic.php?f=29&t=11394 .

[viking`]

Process:

System Idle Process
System
C:\WINDOWS\system32\drivers\KodakCCS.exe
D:\Starě disk\1\Programy\FireFox\firefox.exe
C:\Program Files\Eset\nod32krn.exe
C:\WINDOWS\system32\PnkBstrA.exe
C:\WINDOWS\system32\ScsiAccess.EXE
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\smss.exe
C:\WINDOWS\system32\csrss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\wdfmgr.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\VTTimer.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\RTHDCPL.exe
C:\WINDOWS\system32\svchost.exe
D:\Starě disk\1\Programy\Winamp\winampa.exe
C:\Program Files\Eset\nod32kui.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\rundll32.exe
D:\MW2\Steam.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Documents and Settings\David\Plocha\IceSword.exe
C:\WINDOWS\explorer.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\alg.exe
C:\Program Files\PC Connectivity Solution\ServiceLayer.exe
C:\Program Files\PC Connectivity Solution\Transports\NclRSSrv.exe
C:\Program Files\PC Connectivity Solution\Transports\NclUSBSrv.exe
C:\WINDOWS\system32\wuauclt.exe
D:\Starě disk\1\Programy\Winamp\winamp.exe
D:\Starě disk\1\Programy\qip\QIP Infium\QIP Infium\infium.exe




Kernel Module:

\WINDOWS\system32\ntoskrnl.exe
\WINDOWS\system32\hal.dll
\WINDOWS\system32\KDCOM.DLL
\WINDOWS\system32\BOOTVID.dll
spip.sys
\WINDOWS\System32\Drivers\WMILIB.SYS
\WINDOWS\System32\Drivers\SCSIPORT.SYS
ACPI.sys
pci.sys
isapnp.sys
pciide.sys
\WINDOWS\System32\DRIVERS\PCIIDEX.SYS
viaidexp.sys
MountMgr.sys
ftdisk.sys
dmload.sys
dmio.sys
PartMgr.sys
videX32.sys
VolSnap.sys
atapi.sys
disk.sys
\WINDOWS\System32\DRIVERS\CLASSPNP.SYS
fltmgr.sys
sr.sys
xfilt.sys
PxHelp20.sys
KSecDD.sys
Ntfs.sys
NDIS.sys
viaagp1.sys
Mup.sys
\SystemRoot\System32\DRIVERS\processr.sys
\SystemRoot\System32\DRIVERS\nv4_mini.sys
\SystemRoot\System32\DRIVERS\VIDEOPRT.SYS
\SystemRoot\System32\DRIVERS\usbohci.sys
\SystemRoot\System32\DRIVERS\USBPORT.SYS
\SystemRoot\system32\DRIVERS\imapi.sys
\SystemRoot\System32\DRIVERS\cdrom.sys
\SystemRoot\System32\DRIVERS\redbook.sys
\SystemRoot\System32\DRIVERS\ks.sys
\SystemRoot\system32\DRIVERS\HDAudBus.sys
\SystemRoot\System32\DRIVERS\Rtnicxp.sys
\SystemRoot\System32\Drivers\a7q3oqur.SYS
\SystemRoot\System32\DRIVERS\fdc.sys
\SystemRoot\System32\DRIVERS\serial.sys
\SystemRoot\System32\DRIVERS\serenum.sys
\SystemRoot\System32\DRIVERS\parport.sys
\SystemRoot\System32\DRIVERS\i8042prt.sys
\SystemRoot\System32\DRIVERS\mouclass.sys
\SystemRoot\System32\DRIVERS\kbdclass.sys
\SystemRoot\System32\DRIVERS\audstub.sys
\SystemRoot\System32\DRIVERS\rasl2tp.sys
\SystemRoot\System32\DRIVERS\ndistapi.sys
\SystemRoot\System32\DRIVERS\ndiswan.sys
\SystemRoot\System32\DRIVERS\raspppoe.sys
\SystemRoot\System32\DRIVERS\raspptp.sys
\SystemRoot\System32\DRIVERS\TDI.SYS
\SystemRoot\System32\DRIVERS\psched.sys
\SystemRoot\System32\DRIVERS\msgpc.sys
\SystemRoot\System32\DRIVERS\ptilink.sys
\SystemRoot\System32\DRIVERS\raspti.sys
\SystemRoot\System32\DRIVERS\rdpdr.sys
\SystemRoot\System32\DRIVERS\termdd.sys
\SystemRoot\System32\DRIVERS\swenum.sys
\SystemRoot\System32\DRIVERS\update.sys
\SystemRoot\System32\DRIVERS\mssmbios.sys
\SystemRoot\System32\Drivers\NDProxy.SYS
\SystemRoot\System32\DRIVERS\usbhub.sys
\SystemRoot\System32\DRIVERS\USBD.SYS
\SystemRoot\system32\drivers\RtkHDAud.sys
\SystemRoot\system32\drivers\portcls.sys
\SystemRoot\system32\drivers\drmk.sys
\SystemRoot\System32\DRIVERS\flpydisk.sys
\SystemRoot\System32\Drivers\Fs_Rec.SYS
\SystemRoot\System32\DRIVERS\DcCam.sys
\SystemRoot\System32\DRIVERS\EXPORTIT.SYS
\SystemRoot\System32\Drivers\Null.SYS
\SystemRoot\System32\Drivers\Beep.SYS
\SystemRoot\System32\drivers\vga.sys
\SystemRoot\System32\Drivers\mnmdd.SYS
\SystemRoot\System32\DRIVERS\RDPCDD.sys
\SystemRoot\System32\Drivers\Msfs.SYS
\SystemRoot\System32\Drivers\Npfs.SYS
\SystemRoot\System32\DRIVERS\rasacd.sys
\SystemRoot\System32\DRIVERS\ipsec.sys
\SystemRoot\System32\DRIVERS\tcpip.sys
\SystemRoot\System32\DRIVERS\netbt.sys
\SystemRoot\System32\DRIVERS\ipnat.sys
\SystemRoot\System32\DRIVERS\wanarp.sys
\SystemRoot\System32\drivers\ws2ifsl.sys
\SystemRoot\System32\drivers\afd.sys
\SystemRoot\System32\DRIVERS\netbios.sys
\SystemRoot\System32\DRIVERS\rdbss.sys
\SystemRoot\System32\DRIVERS\mrxsmb.sys
\SystemRoot\System32\Drivers\Fips.SYS
\SystemRoot\System32\Drivers\Cdfs.SYS
\SystemRoot\System32\win32k.sys
\SystemRoot\System32\drivers\Dxapi.sys
\SystemRoot\System32\watchdog.sys
\SystemRoot\System32\drivers\dxg.sys
\SystemRoot\System32\drivers\dxgthk.sys
\SystemRoot\System32\nv4_disp.dll
\SystemRoot\System32\ATMFD.DLL
\SystemRoot\system32\drivers\dcfs2k.sys
\SystemRoot\System32\DRIVERS\ndisuio.sys
\SystemRoot\system32\drivers\wdmaud.sys
\SystemRoot\system32\drivers\sysaudio.sys
\SystemRoot\System32\DRIVERS\mrxdav.sys
\SystemRoot\System32\Drivers\ParVdm.SYS
\??\C:\WINDOWS\system32\drivers\amon.sys
\SystemRoot\System32\DRIVERS\srv.sys
\SystemRoot\System32\Drivers\HTTP.sys
\SystemRoot\System32\Drivers\Fastfat.SYS
\SystemRoot\system32\drivers\kmixer.sys
\SystemRoot\System32\Drivers\IsDrv122.sys
\WINDOWS\system32\ntdll.dll
C:\WINDOWS\System32\Drivers\sptd.sys

[Rudy]

Ani rootkit v PC nemáte. Problém bude nejspíš v sw konfliktu, příp. v chybě systému. Zkuste, pokud to bude možné, vrátit původní ovladač gr. karty.

[viking`]

Naistaloval jsem puvidni ovladace, ale zadna zmena... Vse zasekany a vyuziti CPU se pohybuje skoro porad okolo 40-50%