VIRY.CZ

Zdravím, chtěl bych se zeptat, jestli by mi někdo neporadil s tímto problémem.
Jednou asi za 2 minuty se mi stane, že mám úplně zatížený procesor a asi po 20 vteřinách se vše vrátí do normálu. Toto celé se mi stále opakuje a já nevím co s tím. Děkuju

Log z RSIT:

Logfile of random's system information tool 1.06 (written by random/random)
Run by Ládíka Království at 2010-02-05 12:54:10
Systém Microsoft Windows XP Professional Service Pack 3
System drive C: has 30 GB (55%) free of 54 GB
Total RAM: 1022 MB (62% free)

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 12:54:14, on 5.2.2010
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP3 (6.00.2900.5512)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\ehome\ehtray.exe
C:\WINDOWS\eHome\ehmsas.exe
C:\WINDOWS\RTHDCPL.EXE
C:\Acer\Empowering Technology\ePower\ePower_DMC.exe
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\PROGRA~1\LAUNCH~1\LManager.exe
C:\WINDOWS\BUtilityBar\BisonBar.exe
C:\Acer\Empowering Technology\ePerformance\MemCheck.exe
C:\Program Files\ATI Technologies\ATI.ACE\CLI.EXE
C:\Acer\Empowering Technology\eRecovery\eRAgent.exe
C:\Program Files\ESET\ESET Smart Security\egui.exe
c:\Program Files\WIDCOMM\Bluetooth Software\bin\btwdins.exe
C:\WINDOWS\system32\ctfmon.exe
C:\WINDOWS\eHome\ehRecvr.exe
C:\WINDOWS\eHome\ehSched.exe
C:\Program Files\ESET\ESET Smart Security\ekrn.exe
C:\Acer\Empowering Technology\Acer.Empowering.Framework.Launcher.exe
C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe
C:\Program Files\Common Files\LightScribe\LSSrvc.exe
C:\WINDOWS\system32\PnkBstrA.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\wbem\wmiapsrv.exe
C:\WINDOWS\system32\wbem\unsecapp.exe
C:\WINDOWS\system32\dllhost.exe
C:\Program Files\ATI Technologies\ATI.ACE\cli.exe
C:\Program Files\ATI Technologies\ATI.ACE\cli.exe
C:\WINDOWS\system32\wuauclt.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Documents and Settings\Ládíka Království\My Documents\Stažené soubory\RSIT.exe
C:\Program Files\trend micro\Ládíka Království.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://uk.rd.yahoo.com/customize/ycomp/ ... .yahoo.com
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://cs.intl.acer.yahoo.com
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://cs.intl.acer.yahoo.com
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://cs.intl.acer.yahoo.com
R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = http://uk.rd.yahoo.com/customize/ycomp/ ... .yahoo.com
R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = http://cs.intl.acer.yahoo.com/
R3 - URLSearchHook: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - c:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O4 - HKLM\..\Run: [ehTray] C:\WINDOWS\ehome\ehtray.exe
O4 - HKLM\..\Run: [AzMixerSel] C:\Program Files\Realtek\InstallShield\AzMixerSel.exe
O4 - HKLM\..\Run: [ntiMUI] C:\Program Files\NewTech Infosystems\NTI CD & DVD-Maker 7\ntiMUI.exe
O4 - HKLM\..\Run: [Acer ePresentation HPD] C:\Acer\Empowering Technology\ePresentation\ePresentation.exe
O4 - HKLM\..\Run: [IMJPMIG8.1] "C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE" /Spoil /RemAdvDef /Migration32
O4 - HKLM\..\Run: [MSPY2002] C:\WINDOWS\system32\IME\PINTLGNT\ImScInst.exe /SYNC
O4 - HKLM\..\Run: [PHIME2002ASync] C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /SYNC
O4 - HKLM\..\Run: [PHIME2002A] C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /IMEName
O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE
O4 - HKLM\..\Run: [SkyTel] SkyTel.EXE
O4 - HKLM\..\Run: [Alcmtr] ALCMTR.EXE
O4 - HKLM\..\Run: [ePower_DMC] C:\Acer\Empowering Technology\ePower\ePower_DMC.exe
O4 - HKLM\..\Run: [Boot] C:\Acer\Empowering Technology\ePower\Boot.exe
O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
O4 - HKLM\..\Run: [LManager] C:\PROGRA~1\LAUNCH~1\LManager.exe
O4 - HKLM\..\Run: [ATICCC] "C:\Program Files\ATI Technologies\ATI.ACE\CLIStart.exe"
O4 - HKLM\..\Run: [BisonBar] C:\WINDOWS\BUtilityBar\BisonBar.exe
O4 - HKLM\..\Run: [eRecoveryService] C:\Acer\Empowering Technology\eRecovery\eRAgent.exe
O4 - HKLM\..\Run: [WarReg_PopUp] C:\Acer\WR_PopUp\WarReg_PopUp.exe /idle
O4 - HKLM\..\Run: [egui] "C:\Program Files\ESET\ESET Smart Security\egui.exe" /hide /waitservice
O4 - HKLM\..\Run: [Start WingMan Profiler] C:\Program Files\Logitech\Gaming Software\LWEMon.exe /noui
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O4 - Global Startup: Acer Empowering Technology.lnk = C:\Acer\Empowering Technology\Acer.Empowering.Framework.Launcher.exe
O4 - Global Startup: Bluetooth.lnk = ?
O8 - Extra context menu item: Send to &Bluetooth Device... - c:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie_ctx.htm
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O23 - Service: Memory Check Service (AcerMemUsageCheckService) - Acer Inc. - C:\Acer\Empowering Technology\ePerformance\MemCheck.exe
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
O23 - Service: Bluetooth Service (btwdins) - Broadcom Corporation. - c:\Program Files\WIDCOMM\Bluetooth Software\bin\btwdins.exe
O23 - Service: ESET HTTP Server (EhttpSrv) - ESET - C:\Program Files\ESET\ESET Smart Security\EHttpSrv.exe
O23 - Service: ESET Service (ekrn) - ESET - C:\Program Files\ESET\ESET Smart Security\ekrn.exe
O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files\Common Files\LightScribe\LSSrvc.exe
O23 - Service: PnkBstrA - Unknown owner - C:\WINDOWS\system32\PnkBstrA.exe

--
End of file - 6768 bytes

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{02478D38-C3F9-4EFB-9B51-7695ECA05670}]
Yahoo! Toolbar Helper - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll [2006-09-06 439872]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{06849E9F-C8D7-4D59-B87D-784B7D6BE0B3}]
AcroIEHlprObj Class - c:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll [2004-12-14 63136]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{EF99BD32-C1FB-11D2-892F-0090271D4F88} - Yahoo! Toolbar - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll [2006-09-06 439872]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"ehTray"=C:\WINDOWS\ehome\ehtray.exe [2005-08-05 64512]
"LaunchApp"= []
"AzMixerSel"=C:\Program Files\Realtek\InstallShield\AzMixerSel.exe [2006-04-14 53248]
"ntiMUI"=C:\Program Files\NewTech Infosystems\NTI CD & DVD-Maker 7\ntiMUI.exe [2005-05-11 45056]
""= []
"Acer ePresentation HPD"=C:\Acer\Empowering Technology\ePresentation\ePresentation.exe [2006-03-31 204800]
"IMJPMIG8.1"=C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE [2004-08-10 208952]
"MSPY2002"=C:\WINDOWS\system32\IME\PINTLGNT\ImScInst.exe [2004-08-10 59392]
"PHIME2002ASync"=C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE [2004-08-10 455168]
"PHIME2002A"=C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE [2004-08-10 455168]
"RTHDCPL"=C:\WINDOWS\RTHDCPL.EXE [2006-06-27 16248320]
"SkyTel"=C:\WINDOWS\SkyTel.EXE [2006-05-16 2879488]
"Alcmtr"=C:\WINDOWS\ALCMTR.EXE [2005-05-03 69632]
"ePower_DMC"=C:\Acer\Empowering Technology\ePower\ePower_DMC.exe [2006-05-30 421888]
"Boot"=C:\Acer\Empowering Technology\ePower\Boot.exe [2006-03-15 579584]
"SynTPEnh"=C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2006-03-03 761946]
"LManager"=C:\PROGRA~1\LAUNCH~1\LManager.exe [2006-06-23 602112]
"ATICCC"=C:\Program Files\ATI Technologies\ATI.ACE\CLIStart.exe [2006-05-10 90112]
"BisonBar"=C:\WINDOWS\BUtilityBar\BisonBar.exe [2006-09-08 245760]
"eRecoveryService"=C:\Acer\Empowering Technology\eRecovery\eRAgent.exe [2006-06-01 413696]
"WarReg_PopUp"=C:\Acer\WR_PopUp\WarReg_PopUp.exe [2006-09-23 61440]
"egui"=C:\Program Files\ESET\ESET Smart Security\egui.exe [2009-11-16 2054360]
"Start WingMan Profiler"=C:\Program Files\Logitech\Gaming Software\LWEMon.exe [2009-01-21 92168]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"ctfmon.exe"=C:\WINDOWS\system32\ctfmon.exe [2008-04-14 15360]

C:\Documents and Settings\All Users\Start Menu\Programs\Startup
Adobe Reader Speed Launch.lnk - C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
Acer Empowering Technology.lnk - C:\Acer\Empowering Technology\Acer.Empowering.Framework.Launcher.exe
Bluetooth.lnk - C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\AtiExtEvent]
C:\WINDOWS\system32\Ati2evxx.dll [2009-09-30 155648]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1
"InstallVisualStyle"=C:\WINDOWS\Resources\Themes\Royale\Royale.msstyles
"InstallTheme"=C:\WINDOWS\Resources\Themes\Royale.theme

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=145

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"HonorAutoRunSetting"=

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"C:\WINDOWS\System32\PnkBstrA.exe"="C:\WINDOWS\System32\PnkBstrA.exe:*:Enabled:PnkBstrA"
"C:\WINDOWS\System32\PnkBstrB.exe"="C:\WINDOWS\System32\PnkBstrB.exe:*:Enabled:PnkBstrB"
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{00e1a4ae-118f-11df-9f7d-806d6172696f}]
shell\AutoRun\command - E:\setup.exe
shell\ReadMe\command - Notepad Readme.Txt


======List of files/folders created in the last 1 months======

2010-02-05 12:51:45 ----D---- C:\rsit
2010-02-05 12:51:45 ----D---- C:\Program Files\trend micro
2010-02-05 12:07:47 ----N---- C:\WINDOWS\system32\ati2sgag.exe
2010-02-05 12:05:19 ----D---- C:\ATI
2010-02-05 12:04:59 ----D---- C:\Program Files\MobilityDotNET
2010-02-05 12:03:37 ----D---- C:\Program Files\Common Files\DirectX
2010-02-05 11:43:09 ----D---- C:\Documents and Settings\Ládíka Království\Application Data\AIMP
2010-02-05 10:49:32 ----D---- C:\Program Files\Common Files\Logitech
2010-02-05 10:49:18 ----D---- C:\Program Files\Logitech
2010-02-05 09:13:40 ----N---- C:\WINDOWS\system32\spmsg2.dll
2010-02-05 09:13:35 ----HD---- C:\WINDOWS\$NtUninstallXPSEPSCLP$
2010-02-05 09:13:16 ----D---- C:\WINDOWS\system32\cs-CZ
2010-02-05 09:06:54 ----D---- C:\WINDOWS\LastGood
2010-02-05 09:04:41 ----D---- C:\WINDOWS\Prefetch
2010-02-05 09:00:14 ----HD---- C:\WINDOWS\$NtUninstallKB951376-v2$
2010-02-05 09:00:07 ----HD---- C:\WINDOWS\$NtUninstallKB946648$
2010-02-05 08:59:58 ----HD---- C:\WINDOWS\$NtUninstallKB956803$
2010-02-05 08:59:48 ----HD---- C:\WINDOWS\$NtUninstallKB955759$
2010-02-05 08:59:40 ----HD---- C:\WINDOWS\$NtUninstallKB972270$
2010-02-05 08:59:24 ----HD---- C:\WINDOWS\$NtUninstallKB956572$
2010-02-05 08:59:15 ----HD---- C:\WINDOWS\$NtUninstallKB956844$
2010-02-05 08:59:05 ----HD---- C:\WINDOWS\$NtUninstallKB973869$
2010-02-05 08:58:57 ----HD---- C:\WINDOWS\$NtUninstallKB973687$
2010-02-05 08:58:48 ----HD---- C:\WINDOWS\$NtUninstallKB950762$
2010-02-05 08:58:38 ----HD---- C:\WINDOWS\$NtUninstallKB957097$
2010-02-05 08:58:29 ----HD---- C:\WINDOWS\$NtUninstallKB958687$
2010-02-05 08:58:22 ----HD---- C:\WINDOWS\$NtUninstallKB952287$
2010-02-05 08:58:14 ----HD---- C:\WINDOWS\$NtUninstallKB973354$
2010-02-05 08:58:05 ----HD---- C:\WINDOWS\$NtUninstallKB951066$
2010-02-05 08:57:56 ----HD---- C:\WINDOWS\$NtUninstallKB971486$
2010-02-05 08:57:46 ----HD---- C:\WINDOWS\$NtUninstallKB958644$
2010-02-05 08:57:38 ----HD---- C:\WINDOWS\$NtUninstallKB973687_1$
2010-02-05 08:57:30 ----HD---- C:\WINDOWS\$NtUninstallKB955069$
2010-02-05 08:57:21 ----HD---- C:\WINDOWS\$NtUninstallKB923561$
2010-02-05 08:57:13 ----HD---- C:\WINDOWS\$NtUninstallKB952954$
2010-02-05 08:57:06 ----HD---- C:\WINDOWS\$NtUninstallKB959426$
2010-02-05 08:56:55 ----HD---- C:\WINDOWS\$NtUninstallKB960859$
2010-02-05 08:56:41 ----HD---- C:\WINDOWS\$NtUninstallKB978207$
2010-02-05 08:56:33 ----HD---- C:\WINDOWS\$NtUninstallKB974318$
2010-02-05 08:56:25 ----HD---- C:\WINDOWS\$NtUninstallKB969059$
2010-02-05 08:56:16 ----HD---- C:\WINDOWS\$NtUninstallKB950974$
2010-02-05 08:56:08 ----HD---- C:\WINDOWS\$NtUninstallKB971657$
2010-02-05 08:56:01 ----HD---- C:\WINDOWS\$NtUninstallKB971557$
2010-02-05 08:55:54 ----HD---- C:\WINDOWS\$NtUninstallKB960225$
2010-02-05 08:55:46 ----HD---- C:\WINDOWS\$NtUninstallKB974112$
2010-02-05 08:55:38 ----HD---- C:\WINDOWS\$NtUninstallKB961501$
2010-02-05 08:55:30 ----HD---- C:\WINDOWS\$NtUninstallKB971633$
2010-02-05 08:55:22 ----HD---- C:\WINDOWS\$NtUninstallKB975025$
2010-02-05 08:55:14 ----HD---- C:\WINDOWS\$NtUninstallKB974571$
2010-02-05 08:55:02 ----HD---- C:\WINDOWS\$NtUninstallKB952004$
2010-02-05 08:54:54 ----HD---- C:\WINDOWS\$NtUninstallKB973507$
2010-02-05 08:54:44 ----HD---- C:\WINDOWS\$NtUninstallKB967715$
2010-02-05 08:54:36 ----HD---- C:\WINDOWS\$NtUninstallKB974392$
2010-02-05 08:54:22 ----HD---- C:\WINDOWS\$NtUninstallKB951748$
2010-02-05 08:54:14 ----HD---- C:\WINDOWS\$NtUninstallKB970238$
2010-02-05 08:54:07 ----HD---- C:\WINDOWS\$NtUninstallKB960803$
2010-02-05 08:53:59 ----HD---- C:\WINDOWS\$NtUninstallKB973815$
2010-02-05 08:53:51 ----HD---- C:\WINDOWS\$NtUninstallKB956802$
2010-02-05 08:53:43 ----HD---- C:\WINDOWS\$NtUninstallKB975467$
2010-02-05 08:53:33 ----HD---- C:\WINDOWS\$NtUninstallKB968389$
2010-02-05 08:48:44 ----D---- C:\WINDOWS\system32\scripting
2010-02-05 08:48:42 ----D---- C:\WINDOWS\l2schemas
2010-02-05 08:48:40 ----D---- C:\WINDOWS\system32\en
2010-02-05 08:48:39 ----D---- C:\WINDOWS\system32\bits
2010-02-05 08:34:52 ----D---- C:\WINDOWS\network diagnostic
2010-02-05 08:26:46 ----HD---- C:\WINDOWS\$NtServicePackUninstall$
2010-02-05 08:04:32 ----D---- C:\WINDOWS\system32\XPSViewer
2010-02-05 08:04:28 ----D---- C:\Program Files\MSBuild
2010-02-05 08:04:25 ----D---- C:\WINDOWS\system32\en-US
2010-02-05 08:04:19 ----D---- C:\Program Files\Reference Assemblies
2010-02-05 08:03:52 ----N---- C:\WINDOWS\system32\prntvpt.dll
2010-02-05 08:03:51 ----N---- C:\WINDOWS\system32\xpssvcs.dll
2010-02-05 08:03:51 ----N---- C:\WINDOWS\system32\xpsshhdr.dll
2010-02-05 08:03:51 ----D---- C:\046a17ab0defb60cb4c3cf957d
2010-02-05 08:00:37 ----HD---- C:\WINDOWS\$NtUninstallWIC$
2010-02-05 07:56:32 ----A---- C:\WINDOWS\system32\MRT.exe
2010-02-05 07:35:59 ----HD---- C:\WINDOWS\$NtUninstallKB951376-v2_0$
2010-02-05 07:35:51 ----HD---- C:\WINDOWS\$NtUninstallKB952954_0$
2010-02-05 07:35:43 ----HD---- C:\WINDOWS\$NtUninstallKB959426_0$
2010-02-05 07:35:35 ----HD---- C:\WINDOWS\$NtUninstallKB946648_0$
2010-02-05 07:35:25 ----HD---- C:\WINDOWS\$NtUninstallKB956803_0$
2010-02-05 07:35:12 ----HD---- C:\WINDOWS\$NtUninstallKB960859_0$
2010-02-05 07:35:02 ----HD---- C:\WINDOWS\$NtUninstallKB935448$
2010-02-05 07:34:34 ----HD---- C:\WINDOWS\$NtUninstallKB978207_0$
2010-02-05 07:34:24 ----HD---- C:\WINDOWS\$NtUninstallKB958869$
2010-02-05 07:34:18 ----HD---- C:\WINDOWS\$NtUninstallKB954155_WM9$
2010-02-05 07:34:12 ----HD---- C:\WINDOWS\$NtUninstallKB976098-v2$
2010-02-05 07:34:02 ----HD---- C:\WINDOWS\$NtUninstallKB955759_0$
2010-02-05 07:33:53 ----HD---- C:\WINDOWS\$NtUninstallKB974318_0$
2010-02-05 07:33:44 ----HD---- C:\WINDOWS\$NtUninstallKB969059_0$
2010-02-05 07:33:34 ----HD---- C:\WINDOWS\$NtUninstallKB950974_0$
2010-02-05 07:33:26 ----HD---- C:\WINDOWS\$NtUninstallKB971657_0$
2010-02-05 07:33:19 ----HD---- C:\WINDOWS\$NtUninstallKB971557_0$
2010-02-05 07:33:12 ----HD---- C:\WINDOWS\$NtUninstallKB960225_0$
2010-02-05 07:33:04 ----HD---- C:\WINDOWS\$NtUninstallKB972270_0$
2010-02-05 07:32:57 ----HD---- C:\WINDOWS\$NtUninstallKB974112_0$
2010-02-05 07:32:28 ----HD---- C:\WINDOWS\$NtUninstallKB956572_0$
2010-02-05 07:32:17 ----HD---- C:\WINDOWS\$NtUninstallKB956844_0$
2010-02-05 07:32:10 ----HD---- C:\WINDOWS\$NtUninstallKB961501_0$
2010-02-05 07:32:03 ----HD---- C:\WINDOWS\$NtUninstallKB968816_WM9$
2010-02-05 07:31:57 ----HD---- C:\WINDOWS\$NtUninstallKB971633_0$
2010-02-05 07:31:45 ----HD---- C:\WINDOWS\$NtUninstallKB952069_WM9$
2010-02-05 07:31:37 ----HD---- C:\WINDOWS\$NtUninstallKB973869_0$
2010-02-05 07:31:30 ----HD---- C:\WINDOWS\$NtUninstallKB975025_0$
2010-02-05 07:31:12 ----HD---- C:\WINDOWS\$NtUninstallKB913800$
2010-02-05 07:30:36 ----HD---- C:\WINDOWS\$NtUninstallKB973540_WM9L$
2010-02-05 07:30:20 ----HD---- C:\WINDOWS\$NtUninstallKB952004_0$
2010-02-05 07:30:12 ----HD---- C:\WINDOWS\$NtUninstallKB974571_0$
2010-02-05 07:30:05 ----HD---- C:\WINDOWS\$NtUninstallKB973507_0$
2010-02-05 07:29:58 ----HD---- C:\WINDOWS\$NtUninstallKB941569$
2010-02-05 07:29:29 ----HD---- C:\WINDOWS\$NtUninstallKB973687_0$
2010-02-05 07:29:18 ----HD---- C:\WINDOWS\$NtUninstallKB950762_0$
2010-02-05 07:29:07 ----HD---- C:\WINDOWS\$NtUninstallKB957097_0$
2010-02-05 07:28:57 ----HD---- C:\WINDOWS\$NtUninstallKB958687_0$
2010-02-05 07:28:50 ----HD---- C:\WINDOWS\$NtUninstallKB952287_0$
2010-02-05 07:28:42 ----HD---- C:\WINDOWS\$NtUninstallKB973354_0$
2010-02-05 07:28:33 ----HD---- C:\WINDOWS\$NtUninstallKB973904$
2010-02-05 07:28:20 ----HD---- C:\WINDOWS\$NtUninstallKB967715_0$
2010-02-05 07:28:11 ----HD---- C:\WINDOWS\$NtUninstallKB951066_0$
2010-02-05 07:28:01 ----HD---- C:\WINDOWS\$NtUninstallKB974392_0$
2010-02-05 07:27:03 ----HD---- C:\WINDOWS\$NtUninstallKB951748_0$
2010-02-05 07:26:55 ----HD---- C:\WINDOWS\$NtUninstallKB971961$
2010-02-05 07:26:46 ----HD---- C:\WINDOWS\$NtUninstallKB973768$
2010-02-05 07:26:18 ----HD---- C:\WINDOWS\$NtUninstallKB970238_0$
2010-02-05 07:26:07 ----HD---- C:\WINDOWS\$NtUninstallKB971486_0$
2010-02-05 07:25:45 ----D---- C:\WINDOWS\ServicePackFiles
2010-02-05 07:25:42 ----HD---- C:\WINDOWS\$NtUninstallKB958470$
2010-02-05 07:25:34 ----HD---- C:\WINDOWS\$NtUninstallKB901190$
2010-02-05 07:25:26 ----HD---- C:\WINDOWS\$NtUninstallKB960803_0$
2010-02-05 07:25:18 ----HD---- C:\WINDOWS\$NtUninstallKB973815_0$
2010-02-05 07:25:11 ----HD---- C:\WINDOWS\$NtUninstallKB973525$
2010-02-05 07:24:55 ----HD---- C:\WINDOWS\$NtUninstallKB971032$
2010-02-05 07:24:46 ----HD---- C:\WINDOWS\$NtUninstallKB958644_0$
2010-02-05 07:24:38 ----HD---- C:\WINDOWS\$NtUninstallKB955069_0$
2010-02-05 07:24:30 ----HD---- C:\WINDOWS\$NtUninstallKB956802_0$
2010-02-05 07:24:04 ----HD---- C:\WINDOWS\$NtUninstallKB953295$
2010-02-05 07:23:30 ----HD---- C:\WINDOWS\$NtUninstallKB944338-v2$
2010-02-05 07:23:17 ----HD---- C:\WINDOWS\$NtUninstallKB923561_0$
2010-02-05 07:23:10 ----HD---- C:\WINDOWS\$NtUninstallKB975467_0$
2010-02-05 07:22:47 ----HD---- C:\WINDOWS\$NtUninstallKB968389_0$
2010-02-05 07:19:32 ----SHD---- C:\FOUND.000
2010-02-04 21:48:34 ----D---- C:\Program Files\MSXML 6.0
2010-02-04 20:52:56 ----D---- C:\Documents and Settings\Ládíka Království\Application Data\Media Player Classic
2010-02-04 18:22:25 ----N---- C:\WINDOWS\system32\tzchange.exe
2010-02-04 18:17:42 ----N---- C:\WINDOWS\kb913800.exe
2010-02-04 18:08:40 ----N---- C:\WINDOWS\system32\xpsp4res.dll
2010-02-04 18:08:14 ----D---- C:\Documents and Settings\All Users\Application Data\Yahoo! Companion
2010-02-04 18:06:02 ----D---- C:\Documents and Settings\Ládíka Království\Application Data\Zoner
2010-02-04 18:04:58 ----D---- C:\WINDOWS\system32\PreInstall
2010-02-04 18:04:54 ----HD---- C:\WINDOWS\$NtUninstallKB898461$
2010-02-04 18:04:12 ----SHD---- C:\Recycled
2010-02-04 17:06:03 ----A---- C:\WINDOWS\system32\PnkBstrB.exe
2010-02-04 17:06:00 ----A---- C:\WINDOWS\system32\PnkBstrA.exe
2010-02-04 17:05:54 ----D---- C:\WINDOWS\system32\LogFiles
2010-02-04 17:05:54 ----A---- C:\WINDOWS\system32\pbsvc_heroes.exe
2010-02-04 16:48:59 ----D---- C:\Program Files\AIMP2
2010-02-04 16:33:02 ----D---- C:\Hry
2010-02-04 16:20:16 ----D---- C:\Documents and Settings\Ládíka Království\Application Data\ESET
2010-02-04 16:18:19 ----D---- C:\Program Files\ESET
2010-02-04 16:18:19 ----D---- C:\Documents and Settings\All Users\Application Data\ESET
2010-02-04 16:16:16 ----D---- C:\Program Files\Zoner
2010-02-04 16:13:42 ----D---- C:\Documents and Settings\All Users\Application Data\ashampoo
2010-02-04 16:13:19 ----D---- C:\Program Files\Ashampoo
2010-02-04 16:12:47 ----A---- C:\WINDOWS\iun6002.exe
2010-02-04 16:12:45 ----D---- C:\Program Files\Codec Pack - All In 1
2010-02-04 16:12:28 ----A---- C:\WINDOWS\Codec Pack - All In 1 Setup Log.txt
2010-02-04 16:11:53 ----D---- C:\Program Files\WinRAR
2010-02-04 16:11:36 ----D---- C:\Documents and Settings\Ládíka Království\Application Data\Adobe
2010-02-04 16:11:29 ----D---- C:\Program Files\7-Zip
2010-02-04 16:08:29 ----D---- C:\Documents and Settings\Ládíka Království\Application Data\Mozilla
2010-02-04 16:08:14 ----A---- C:\WINDOWS\system32\rmoc3260.dll
2010-02-04 16:08:14 ----A---- C:\WINDOWS\system32\pndx5032.dll
2010-02-04 16:08:14 ----A---- C:\WINDOWS\system32\pndx5016.dll
2010-02-04 16:08:14 ----A---- C:\WINDOWS\system32\pncrt.dll
2010-02-04 16:08:12 ----A---- C:\WINDOWS\avisplitter.ini
2010-02-04 16:08:09 ----A---- C:\WINDOWS\system32\yv12vfw.dll
2010-02-04 16:08:09 ----A---- C:\WINDOWS\system32\xvidvfw.dll
2010-02-04 16:08:09 ----A---- C:\WINDOWS\system32\xvidcore.dll
2010-02-04 16:08:07 ----A---- C:\WINDOWS\system32\qt-dx331.dll
2010-02-04 16:08:07 ----A---- C:\WINDOWS\system32\dpl100.dll
2010-02-04 16:08:07 ----A---- C:\WINDOWS\system32\divx.dll
2010-02-04 16:08:03 ----A---- C:\WINDOWS\system32\ff_vfw.dll.manifest
2010-02-04 16:08:03 ----A---- C:\WINDOWS\system32\ff_vfw.dll
2010-02-04 16:07:59 ----D---- C:\Program Files\K-Lite Codec Pack
2010-02-04 16:07:44 ----D---- C:\WINDOWS\system32\SoftwareDistribution
2010-02-04 15:11:29 ----A---- C:\WINDOWS\YTB.EXE
2010-02-04 15:11:29 ----A---- C:\WINDOWS\EMEAWG.EXE
2010-02-04 15:11:28 ----A---- C:\WINDOWS\GVista.exe
2010-02-04 15:11:28 ----A---- C:\WINDOWS\AntiV.INI
2010-02-04 15:11:28 ----A---- C:\WINDOWS\AntiV.EXE
2010-02-04 15:11:28 ----A---- C:\WINDOWS\AExec.exe
2010-02-04 15:11:25 ----A---- C:\WINDOWS\system32\Uci32105.dll
2010-02-04 15:11:16 ----A---- C:\WINDOWS\UNINST32.EXE
2010-02-04 15:11:16 ----A---- C:\WINDOWS\system32\FILTRCOI.DLL
2010-02-04 15:10:57 ----AD---- C:\WINDOWS\BTW
2010-02-04 15:10:55 ----A---- C:\WINDOWS\AArrange.exe
2010-02-04 15:10:54 ----SHD---- C:\system volume information
2010-02-04 15:06:06 ----D---- C:\Program Files\Mozilla Firefox
2010-02-04 15:05:28 ----D---- C:\Program Files\QIP Infium
2010-02-04 14:59:15 ----D---- C:\Program Files\Yahoo!
2010-02-04 14:53:33 ----A---- C:\WINDOWS\system32\Acer.Empowering.Windows.Forms_v820.dll
2010-02-04 14:52:23 ----A---- C:\WINDOWS\system32\Uninstall_eRecovery.exe
2010-02-04 14:52:23 ----A---- C:\WINDOWS\system32\CheckD2DSystem.exe
2010-02-04 14:52:23 ----A---- C:\WINDOWS\system32\ERUpdateHidden.EXE
2010-02-04 14:52:23 ----A---- C:\WINDOWS\system32\CloseProcessWindow.dll
2010-02-04 14:52:23 ----A---- C:\WINDOWS\system32\ClearEvent.exe
2010-02-04 14:52:23 ----A---- C:\WINDOWS\system32\Acer EULA.txt
2010-02-04 14:51:43 ----D---- C:\WINDOWS\Snapshot
2010-02-04 14:51:43 ----D---- C:\WINDOWS\BUtilityBar
2010-02-04 14:50:46 ----D---- C:\WINDOWS\Options
2010-02-04 14:35:53 ----N---- C:\WINDOWS\system32\spmsg.dll
2010-02-04 14:35:42 ----HD---- C:\WINDOWS\$MSI31Uninstall_KB893803v2$
2010-02-04 14:30:30 ----D---- C:\Program Files\WIDCOMM
2010-02-04 14:29:28 ----D---- C:\Program Files\Launch Manager
2010-02-04 14:28:13 ----A---- C:\WINDOWS\system32\SynTPFcs.dll
2010-02-04 14:28:13 ----A---- C:\WINDOWS\system32\SynTPCo2.dll
2010-02-04 14:28:13 ----A---- C:\WINDOWS\system32\SynTPAPI.dll
2010-02-04 14:28:13 ----A---- C:\WINDOWS\system32\SynCtrl.dll
2010-02-04 14:28:13 ----A---- C:\WINDOWS\system32\SynCOM.dll
2010-02-04 14:28:12 ----D---- C:\Program Files\Synaptics
2010-02-04 14:24:21 ----A---- C:\WINDOWS\system32\Epm-Po.dll
2010-02-04 14:24:21 ----A---- C:\WINDOWS\system32\acpimof.dll
2010-02-04 14:22:42 ----A---- C:\WINDOWS\SkyTel.exe
2010-02-04 14:22:34 ----A---- C:\WINDOWS\Alcmtr.exe
2010-02-04 14:21:53 ----D---- C:\WINDOWS\Acer
2010-02-04 14:21:53 ----D---- C:\Documents and Settings\Ládíka Království\Application Data\Macromedia
2010-02-04 14:21:21 ----SD---- C:\Documents and Settings\Ládíka Království\Application Data\Microsoft
2010-02-04 14:21:21 ----D---- C:\Documents and Settings\Ládíka Království\Application Data\ATI
2010-02-04 14:21:21 ----ASH---- C:\Documents and Settings\Ládíka Království\Application Data\desktop.ini
2010-02-04 14:21:20 ----D---- C:\Documents and Settings\Ládíka Království\Application Data\Identities
2010-02-04 14:15:35 ----D---- C:\WINDOWS\BisonCam
2010-02-04 14:15:34 ----A---- C:\WINDOWS\system32\vfwwdm32.dll
2010-02-04 14:15:20 ----D---- C:\WINDOWS\Temp

======List of files/folders modified in the last 1 months======

2010-02-05 12:11:18 ----A---- C:\WINDOWS\ModemLog_HDAUDIO Soft Data Fax Modem with SmartCP.txt
2010-02-05 12:08:34 ----A---- C:\WINDOWS\SchedLgU.Txt
2010-02-05 12:08:16 ----A---- C:\WINDOWS\system32\PerfStringBackup.INI
2010-02-05 09:05:26 ----A---- C:\WINDOWS\OEWABLog.txt
2010-02-05 09:04:44 ----A---- C:\WINDOWS\setuplog.txt
2010-02-05 09:00:22 ----A---- C:\WINDOWS\imsins.BAK
2010-02-04 15:11:18 ----A---- C:\WINDOWS\HotFix.bat
2010-02-04 14:59:28 ----A---- C:\WINDOWS\ALaunch.ini
2010-02-04 14:21:56 ----A---- C:\WINDOWS\CLEANUP.CMD
2010-02-04 14:19:58 ----RASH---- C:\boot.ini

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R1 AmdK8;Ovladač procesoru AMD; C:\WINDOWS\system32\DRIVERS\AmdK8.sys [2006-05-10 43008]
R1 ehdrv;ehdrv; C:\WINDOWS\system32\DRIVERS\ehdrv.sys [2009-11-16 108792]
R1 epfwtdi;epfwtdi; C:\WINDOWS\system32\DRIVERS\epfwtdi.sys [2009-11-16 55768]
R1 kbdhid;Keyboard HID Driver; C:\WINDOWS\system32\DRIVERS\kbdhid.sys [2004-08-10 14848]
R1 WmiAcpi;Microsoft Windows Management Interface for ACPI; C:\WINDOWS\system32\DRIVERS\wmiacpi.sys [2008-04-13 8832]
R2 BTSERIAL;Bluetooth Serial Driver; \??\C:\WINDOWS\system32\drivers\btserial.sys []
R2 DritekPortIO;Dritek General Port I/O; \??\C:\PROGRA~1\LAUNCH~1\DPortIO.sys []
R2 eamon;eamon; C:\WINDOWS\system32\DRIVERS\eamon.sys [2009-11-16 116520]
R2 epfw;epfw; C:\WINDOWS\system32\DRIVERS\epfw.sys [2009-11-16 135048]
R2 int15;int15; \??\C:\WINDOWS\system32\drivers\int15.sys []
R2 irda;IrDA Protocol; C:\WINDOWS\system32\DRIVERS\irda.sys [2008-04-13 88192]
R2 mdmxsdk;mdmxsdk; C:\WINDOWS\system32\DRIVERS\mdmxsdk.sys [2006-02-14 12672]
R2 tvicport;tvicport; \??\C:\WINDOWS\system32\drivers\tvicport.sys []
R2 zntport;zntport; \??\C:\WINDOWS\system32\drivers\zntport.sys []
R3 AR5211;Atheros Wireless Network Adapter Service; C:\WINDOWS\system32\DRIVERS\ar5211.sys [2006-01-24 488448]
R3 ati2mtag;ati2mtag; C:\WINDOWS\system32\DRIVERS\ati2mtag.sys [2009-09-30 3565056]
R3 btaudio;Bluetooth Audio Device; C:\WINDOWS\system32\drivers\btaudio.sys [2006-01-17 328061]
R3 BTKRNL;Bluetooth Bus Enumerator; C:\WINDOWS\system32\DRIVERS\btkrnl.sys [2006-01-17 850474]
R3 Cam5603D;Acer OrbiCam; C:\WINDOWS\System32\Drivers\BisonCam.sys [2006-05-12 806272]
R3 CmBatt;Microsoft ACPI Control Method Battery Driver; C:\WINDOWS\system32\DRIVERS\CmBatt.sys [2008-04-13 13952]
R3 DKbFltr;Dritek Keyboard Filter Driver; C:\WINDOWS\system32\DRIVERS\DKbFltr.sys [2004-12-07 16896]
R3 EMSCR;EMSCR; C:\WINDOWS\system32\DRIVERS\EMS7SK.sys [2006-05-24 61056]
R3 Epfwndis;Eset Personal Firewall; C:\WINDOWS\system32\DRIVERS\Epfwndis.sys [2009-06-19 33096]
R3 ESDCR;ESDCR; C:\WINDOWS\system32\DRIVERS\ESD7SK.sys [2006-05-24 40064]
R3 ESMCR;ESMCR; C:\WINDOWS\system32\DRIVERS\ESM7SK.sys [2006-05-24 74752]
R3 HDAudBus;Microsoft UAA Bus Driver for High Definition Audio; C:\WINDOWS\system32\DRIVERS\HDAudBus.sys [2008-04-13 144384]
R3 HidUsb;Microsoft HID Class Driver; C:\WINDOWS\system32\DRIVERS\hidusb.sys [2004-08-10 9600]
R3 HSF_DPV;HSF_DPV; C:\WINDOWS\system32\DRIVERS\HSF_DPV.sys [2006-06-12 990592]
R3 HSFHWAZL;HSFHWAZL; C:\WINDOWS\system32\DRIVERS\HSFHWAZL.sys [2006-06-12 208384]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\WINDOWS\system32\drivers\RtkHDAud.sys [2006-06-28 4304384]
R3 mouhid;Mouse HID Driver; C:\WINDOWS\system32\DRIVERS\mouhid.sys [2001-08-17 12160]
R3 NTIDrvr;Upper Class Filter Driver; C:\WINDOWS\system32\DRIVERS\NTIDrvr.sys [2006-08-28 6144]
R3 Rasirda;WAN Miniport (IrDA); C:\WINDOWS\system32\DRIVERS\rasirda.sys [2001-08-17 19584]
R3 RTL8023xp;Realtek 10/100/1000 PCI NIC Family NDIS XP Driver; C:\WINDOWS\system32\DRIVERS\Rtnicxp.sys [2006-06-16 83968]
R3 sdbus;sdbus; C:\WINDOWS\system32\DRIVERS\sdbus.sys [2008-04-13 79232]
R3 SynTP;Synaptics TouchPad Driver; C:\WINDOWS\system32\DRIVERS\SynTP.sys [2006-03-03 192672]
R3 usbehci;Microsoft USB 2.0 Enhanced Host Controller Miniport Driver; C:\WINDOWS\system32\DRIVERS\usbehci.sys [2008-04-13 30208]
R3 usbhub;USB2 Enabled Hub; C:\WINDOWS\system32\DRIVERS\usbhub.sys [2008-04-13 59520]
R3 usbohci;Microsoft USB Open Host Controller Miniport Driver; C:\WINDOWS\system32\DRIVERS\usbohci.sys [2008-04-13 17152]
R3 winachsf;winachsf; C:\WINDOWS\system32\DRIVERS\HSF_CNXT.sys [2006-06-12 727808]
R3 WmBEnum;Logitech Virtual Bus Enumerator Driver; C:\WINDOWS\system32\drivers\WmBEnum.sys [2009-01-13 19336]
R3 WmVirHid;Logitech Virtual Hid Device Driver; C:\WINDOWS\system32\drivers\WmVirHid.sys [2009-01-13 14728]
R3 WmXlCore;Logitech Translation Layer Driver; C:\WINDOWS\system32\drivers\WmXlCore.sys [2009-01-13 49160]
S2 eLock2BurnerLockDriver;eLock2BurnerLockDriver; \??\C:\WINDOWS\system32\eLock2BurnerLockDriver.sys []
S2 eLock2FSCTLDriver;eLock2FSCTLDriver; \??\C:\WINDOWS\system32\eLock2FSCTLDriver.sys []
S3 Arp1394;1394 ARP Client Protocol; C:\WINDOWS\system32\DRIVERS\arp1394.sys [2008-04-13 60800]
S3 BTDriver;Bluetooth Virtual Communications Driver; C:\WINDOWS\system32\DRIVERS\btport.sys [2006-01-17 30459]
S3 BTWDNDIS;Bluetooth LAN Access Server; C:\WINDOWS\system32\DRIVERS\btwdndis.sys [2006-01-17 148900]
S3 CCDECODE;Closed Caption Decoder; C:\WINDOWS\system32\DRIVERS\CCDECODE.sys [2008-04-13 17024]
S3 HSXHWAZL;HSXHWAZL; C:\WINDOWS\system32\DRIVERS\HSXHWAZL.sys [2006-01-11 194048]
S3 irsir;Microsoft Serial Infrared Driver; C:\WINDOWS\system32\DRIVERS\irsir.sys [2001-08-17 18688]
S3 MHNDRV;MHN driver; C:\WINDOWS\system32\DRIVERS\mhndrv.sys [2004-08-10 11008]
S3 MSTEE;Microsoft Streaming Tee/Sink-to-Sink Converter; C:\WINDOWS\system32\drivers\MSTEE.sys [2008-04-13 5504]
S3 NABTSFEC;NABTS/FEC VBI Codec; C:\WINDOWS\system32\DRIVERS\NABTSFEC.sys [2008-04-13 85248]
S3 NdisIP;Microsoft TV/Video Connection; C:\WINDOWS\system32\DRIVERS\NdisIP.sys [2008-04-13 10880]
S3 NIC1394;1394 Net Driver; C:\WINDOWS\system32\DRIVERS\nic1394.sys [2008-04-13 61824]
S3 SLIP;BDA Slip De-Framer; C:\WINDOWS\system32\DRIVERS\SLIP.sys [2008-04-13 11136]
S3 SMCIRDA;SMSC IrCC Miniport Device Driver; C:\WINDOWS\system32\DRIVERS\smcirda.sys [2004-12-09 46592]
S3 streamip;BDA IPSink; C:\WINDOWS\system32\DRIVERS\StreamIP.sys [2008-04-13 15232]
S3 USBSTOR;USB Mass Storage Driver; C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS [2008-04-13 26368]
S3 WmFilter;Logitech Gaming HID Filter Driver; C:\WINDOWS\system32\drivers\WmFilter.sys [2009-01-13 29192]
S3 WmHidLo;Logitech Gaming USB Filter Driver; C:\WINDOWS\system32\drivers\WmHidLo.sys [2009-01-13 31240]
S3 WSTCODEC;World Standard Teletext Codec; C:\WINDOWS\system32\DRIVERS\WSTCODEC.SYS [2008-04-13 19200]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 AcerMemUsageCheckService;Memory Check Service; C:\Acer\Empowering Technology\ePerformance\MemCheck.exe [2006-03-29 28672]
R2 Ati HotKey Poller;Ati HotKey Poller; C:\WINDOWS\system32\Ati2evxx.exe [2009-09-30 602112]
R2 btwdins;Bluetooth Service; c:\Program Files\WIDCOMM\Bluetooth Software\bin\btwdins.exe [2006-01-17 266295]
R2 ehRecvr;Služba přijímače aplikace Media Center; C:\WINDOWS\eHome\ehRecvr.exe [2005-12-15 237568]
R2 ehSched;Služba plánování aplikace Media Center; C:\WINDOWS\eHome\ehSched.exe [2005-08-05 102912]
R2 ekrn;ESET Service; C:\Program Files\ESET\ESET Smart Security\ekrn.exe [2009-11-16 735960]
R2 Irmon;Infrared Monitor; C:\WINDOWS\system32\svchost.exe [2008-04-14 14336]
R2 LightScribeService;LightScribeService Direct Disc Labeling Service; C:\Program Files\Common Files\LightScribe\LSSrvc.exe [2006-02-17 73728]
R2 McrdSvc;Media Center Extender Service; C:\WINDOWS\ehome\mcrdsvc.exe [2005-08-05 99328]
R2 PnkBstrA;PnkBstrA; C:\WINDOWS\system32\PnkBstrA.exe [2010-02-04 75064]
S2 ATI Smart;ATI Smart; C:\WINDOWS\system32\ati2sgag.exe [2009-09-29 593920]
S2 Fax;Fax; C:\WINDOWS\system32\fxssvc.exe [2008-04-14 267776]
S3 aspnet_state;ASP.NET State Service; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe [2008-07-25 34312]
S3 clr_optimization_v2.0.50727_32;.NET Runtime Optimization Service v2.0.50727_X86; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe [2008-07-25 69632]
S3 EhttpSrv;ESET HTTP Server; C:\Program Files\ESET\ESET Smart Security\EHttpSrv.exe [2009-11-16 20680]
S3 FontCache3.0.0.0;Windows Presentation Foundation Font Cache 3.0.0.0; c:\WINDOWS\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe [2008-07-29 46104]
S3 idsvc;Windows CardSpace; c:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe [2008-07-29 881664]
S3 MHN;MHN; C:\WINDOWS\System32\svchost.exe [2008-04-14 14336]
S3 UMWdf;Windows User Mode Driver Framework; C:\WINDOWS\system32\wdfmgr.exe [2005-08-03 38912]
S4 NetTcpPortSharing;Net.Tcp Port Sharing Service; c:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe [2008-07-29 132096]

-----------------EOF-----------------

Hezké odpoledne
A nevíte, který program ho nejvíce vytěžuje?
otestujte na www.virustotal.com
C:\WINDOWS\CLEANUP.CMD

Stahněte SAS http://portable.superantispyware.com/sassaferun.php
-proveďte aktualizaci a dejte uplný sken.
-Co najde, smažte,a napište co našel.
(tato verze se neinstaluje, je v angličtině. Pokud potřebujete uplný návod, klikněte mi v podpisu na SAS)

Stává se mi to, když jsem například hrál hru. Můžu ji hrát na max. detaily bez jediného problému, ale najednou se mi kousne obraz i zvuk a pomalými sekanými pohyby to pokračuje. Asi po těch 20 vteřinách je vše normální. Zatížení si všimnu i při koukání videa na youtube, že se začne sekat. Tento problém přetrvává už delší dobu. Zjstil jsem, že by to mohl způsobovat Interrupts (ovšem jistý si úplně nejsem, protože jsem to moc v Process Exploreru nepochopil, jelikož se u Interrupts neukázalo zatížení). Reinstaloval jsem Windows, ale stále to přetrvává. Reinstal jsem provedl včera. Mám druhý disk, kam jsem přesunul soubory, o které nechci přijít, tak jestli to není něco tam.

Zde je ten Virus Total:

Soubor CLEANUP.CMD přijatý 2010.02.05 15:23:26 (UTC)
Současný stav: Čekejte ... Ve frontě Čekání Testování Dokončeno NENALEZENO ZASTAVENO
Výsledek: 0/40 (0%)


Akorát jsem spustil ten skener, tak uvidím.

Zde je to, co jsem smazal pomocí SAS ->

Pro jistotu:

Stáhněte na plochu, ukončete všechna aktivní okna a spusťte ComboFix - http://download.bleepingcomputer.com/sUBs/ComboFix.exe


- ComboFix je třeba spustit pod účtem s právy administrátora

- Před použitím vypněte všechny rezidentní bezpečnostní programy - antiviry, firewally, antispywary

- Po spuštění se zobrazí podmínky užití, potvrďte je stiskem tlačítka Ano

- Dále postupujte dle pokynů, během aplikování ComboFixu neklikejte do zobrazujícího se okna

- Po dokončení skenování, trvajícího maximálně 10 minut, by měl program vytvořit log - C:\ComboFix.txt, skopírujte celý jeho obsah sem

Tady je výpis z ComboFixu:

ComboFix 10-02-04.08 - Ládíka Království 05.02.2010 18:07:40.1.2 - FAT32x86
Systém Microsoft Windows XP Professional 5.1.2600.3.1250.420.1033.18.1022.545 [GMT 1:00]
Spuštěný z: c:\documents and settings\Ládíka Království\Desktop\ComboFix.exe
AV: ESET Smart Security 4.0 *On-access scanning disabled* (Updated) {E5E70D32-0101-4F12-8FB0-D96ACA4F34C0}
FW: ESET personal firewall *disabled* {E5E70D32-0101-4340-86A3-A7B0F1C8FFE0}
.

((((((((((((((((((((((((((((((((((((((( Ostatní výmazy )))))))))))))))))))))))))))))))))))))))))))))))))
.

c:\documents and settings\All Users\Start Menu\Programs\Startup\Bluetooth.lnk
c:\windows\kb913800.exe
c:\windows\system32\_000006_.tmp.dll

.
((((((((((((((((((((((((( Soubory vytvořené od 2010-01-05 do 2010-02-05 )))))))))))))))))))))))))))))))
.

2010-02-05 15:29 . 2010-02-05 15:29 -------- d-----w- c:\documents and settings\All Users\Application Data\SUPERAntiSpyware.com
2010-02-05 11:51 . 2010-02-05 11:51 -------- d-----w- C:\rsit
2010-02-05 11:51 . 2010-02-05 11:51 -------- d-----w- c:\program files\trend micro
2010-02-05 11:09 . 2010-02-05 11:09 0 ----a-w- c:\windows\ativpsrm.bin
2010-02-05 11:07 . 2009-09-29 20:15 593920 ------w- c:\windows\system32\ati2sgag.exe
2010-02-05 11:05 . 2010-02-05 11:05 -------- d-----w- C:\ATI
2010-02-05 11:04 . 2010-02-05 11:05 -------- d-----w- c:\program files\MobilityDotNET
2010-02-05 11:03 . 2010-02-05 11:03 -------- d-----w- c:\program files\Common Files\DirectX
2010-02-05 10:42 . 2004-08-10 19:00 14848 ----a-w- c:\windows\system32\drivers\kbdhid.sys
2010-02-05 10:42 . 2004-08-10 19:00 14848 ----a-w- c:\windows\system32\dllcache\kbdhid.sys
2010-02-05 09:49 . 2009-01-13 18:13 29192 ----a-w- c:\windows\system32\drivers\WmFilter.sys
2010-02-05 09:49 . 2010-02-05 09:49 -------- d-----w- c:\program files\Common Files\Logitech
2010-02-05 09:49 . 2010-02-05 09:49 -------- d-----w- c:\program files\Logitech
2010-02-05 08:13 . 2006-06-29 12:07 14048 ------w- c:\windows\system32\spmsg2.dll
2010-02-05 08:13 . 2010-02-05 08:13 -------- d-----w- c:\windows\system32\cs-CZ
2010-02-05 08:06 . 2010-02-05 08:06 -------- d-----w- c:\windows\LastGood
2010-02-05 07:48 . 2010-02-05 07:48 -------- d-----w- c:\windows\system32\scripting
2010-02-05 07:48 . 2010-02-05 07:48 -------- d-----w- c:\windows\l2schemas
2010-02-05 07:48 . 2010-02-05 07:48 -------- d-----w- c:\windows\system32\en
2010-02-05 07:48 . 2010-02-05 07:48 -------- d-----w- c:\windows\system32\bits
2010-02-05 07:04 . 2010-02-05 07:04 -------- d-----w- c:\windows\system32\XPSViewer
2010-02-05 07:04 . 2010-02-05 07:04 -------- d-----w- c:\program files\MSBuild
2010-02-05 07:04 . 2010-02-05 07:04 -------- d-----w- c:\program files\Reference Assemblies
2010-02-05 07:04 . 2008-07-06 12:06 89088 ----a-w- c:\windows\system32\Spool\prtprocs\w32x86\filterpipelineprintproc.dll
2010-02-05 07:03 . 2008-07-06 12:06 89088 ------w- c:\windows\system32\dllcache\filterpipelineprintproc.dll
2010-02-05 07:03 . 2008-07-06 12:06 117760 ------w- c:\windows\system32\prntvpt.dll
2010-02-05 07:03 . 2010-02-05 07:03 -------- d-----w- C:\046a17ab0defb60cb4c3cf957d
2010-02-05 07:03 . 2008-07-06 12:06 575488 ------w- c:\windows\system32\xpsshhdr.dll
2010-02-05 07:03 . 2008-07-06 12:06 575488 ------w- c:\windows\system32\dllcache\xpsshhdr.dll
2010-02-05 07:03 . 2008-07-06 12:06 1676288 ------w- c:\windows\system32\xpssvcs.dll
2010-02-05 07:03 . 2008-07-06 12:06 1676288 ------w- c:\windows\system32\dllcache\xpssvcs.dll
2010-02-05 07:03 . 2008-07-06 10:50 597504 ------w- c:\windows\system32\Spool\prtprocs\w32x86\printfilterpipelinesvc.exe
2010-02-05 07:03 . 2008-07-06 10:50 597504 ------w- c:\windows\system32\dllcache\printfilterpipelinesvc.exe
2010-02-05 06:25 . 2010-02-05 06:25 -------- d-----w- c:\windows\ServicePackFiles
2010-02-05 06:19 . 2010-02-05 06:19 -------- d-----w- C:\FOUND.000
2010-02-04 20:48 . 2010-02-04 20:48 -------- d-----w- c:\program files\MSXML 6.0
2010-02-04 17:30 . 2009-03-06 14:22 284160 ------w- c:\windows\system32\dllcache\pdh.dll
2010-02-04 17:30 . 2009-02-09 12:10 401408 ------w- c:\windows\system32\dllcache\rpcss.dll
2010-02-04 17:30 . 2009-02-06 11:11 110592 ------w- c:\windows\system32\dllcache\services.exe
2010-02-04 17:30 . 2009-02-09 12:10 473600 ------w- c:\windows\system32\dllcache\fastprox.dll
2010-02-04 17:30 . 2009-02-06 10:10 227840 ------w- c:\windows\system32\dllcache\wmiprvse.exe
2010-02-04 17:30 . 2009-02-09 12:10 453120 ------w- c:\windows\system32\dllcache\wmiprvsd.dll
2010-02-04 17:30 . 2009-02-09 12:10 617472 ------w- c:\windows\system32\dllcache\advapi32.dll
2010-02-04 17:30 . 2009-02-09 12:10 714752 ------w- c:\windows\system32\dllcache\ntdll.dll
2010-02-04 17:28 . 2008-10-24 11:21 455296 ------w- c:\windows\system32\dllcache\mrxsmb.sys
2010-02-04 17:26 . 2009-08-04 15:13 2145280 ------w- c:\windows\system32\dllcache\ntkrnlmp.exe
2010-02-04 17:25 . 2009-08-04 14:20 2023936 ------w- c:\windows\system32\dllcache\ntkrpamp.exe
2010-02-04 17:25 . 2009-08-04 14:20 2066048 ------w- c:\windows\system32\dllcache\ntkrnlpa.exe
2010-02-04 17:23 . 2008-06-13 11:05 272128 ------w- c:\windows\system32\dllcache\bthport.sys
2010-02-04 17:23 . 2008-06-13 11:05 272128 ------w- c:\windows\system32\drivers\bthport.sys
2010-02-04 17:22 . 2009-11-21 15:51 471552 ------w- c:\windows\system32\dllcache\aclayers.dll
2010-02-04 17:19 . 2009-10-15 16:28 81920 ------w- c:\windows\system32\dllcache\fontsub.dll
2010-02-04 17:19 . 2009-10-15 16:28 119808 ------w- c:\windows\system32\dllcache\t2embed.dll
2010-02-04 17:14 . 2008-05-08 14:02 203136 ------w- c:\windows\system32\dllcache\rmcast.sys
2010-02-04 17:14 . 2008-12-11 10:57 333952 ------w- c:\windows\system32\dllcache\srv.sys
2010-02-04 17:13 . 2009-07-10 13:27 1315328 ------w- c:\windows\system32\dllcache\msoe.dll
2010-02-04 17:12 . 2008-04-11 19:04 691712 ------w- c:\windows\system32\dllcache\inetcomm.dll
2010-02-04 17:10 . 2008-10-15 16:34 337408 ------w- c:\windows\system32\dllcache\netapi32.dll
2010-02-04 17:08 . 2008-05-03 11:55 2560 ------w- c:\windows\system32\xpsp4res.dll
2010-02-04 17:08 . 2008-04-21 12:08 215552 ------w- c:\windows\system32\dllcache\wordpad.exe
2010-02-04 17:08 . 2010-02-04 17:08 -------- d-----w- c:\documents and settings\All Users\Application Data\Yahoo! Companion
2010-02-04 16:06 . 2010-02-05 11:45 139016 ----a-w- c:\windows\system32\drivers\PnkBstrK.sys
2010-02-04 16:06 . 2010-02-05 11:44 189488 ----a-w- c:\windows\system32\PnkBstrB.exe
2010-02-04 16:06 . 2010-02-04 16:06 75064 ----a-w- c:\windows\system32\PnkBstrA.exe
2010-02-04 16:05 . 2010-02-04 16:05 2395944 ----a-w- c:\windows\system32\pbsvc_heroes.exe
2010-02-04 16:05 . 2010-02-04 16:05 -------- d-----w- c:\windows\system32\LogFiles
2010-02-04 15:48 . 2010-02-04 15:49 -------- d-----w- c:\program files\AIMP2
2010-02-04 15:33 . 2010-02-04 15:33 -------- d-----w- C:\Hry
2010-02-04 15:18 . 2010-02-04 15:18 -------- d-----w- c:\program files\ESET
2010-02-04 15:18 . 2010-02-04 15:18 -------- d-----w- c:\documents and settings\All Users\Application Data\ESET
2010-02-04 15:16 . 2010-02-04 15:16 -------- d-----w- c:\program files\Zoner
2010-02-04 15:13 . 2010-02-04 15:13 -------- d-----w- c:\documents and settings\All Users\Application Data\ashampoo
2010-02-04 15:13 . 2010-02-04 15:13 -------- d-----w- c:\program files\Ashampoo
2010-02-04 15:12 . 2010-02-04 15:12 737280 ----a-w- c:\windows\iun6002.exe
2010-02-04 15:12 . 2010-02-04 15:12 -------- d-----w- c:\program files\Codec Pack - All In 1
2010-02-04 15:11 . 2010-02-04 15:11 -------- d-----w- c:\program files\7-Zip
2010-02-04 14:11 . 2006-09-28 17:43 261627 ----a-w- c:\windows\EMEAWG.EXE
2010-02-04 14:11 . 2006-09-17 18:38 1154584 ----a-w- c:\windows\YTB.EXE
2010-02-04 14:11 . 2006-02-22 22:22 633446 ----a-w- c:\windows\GVista.exe
2010-02-04 14:11 . 2004-08-27 00:23 163840 ----a-w- c:\windows\AExec.exe
2010-02-04 14:11 . 2004-08-25 19:48 589824 ----a-w- c:\windows\AntiV.EXE
2010-02-04 14:11 . 2006-03-16 01:06 118784 ----a-w- c:\windows\system32\Uci32105.dll
2010-02-04 14:11 . 2006-06-12 01:00 990592 ----a-w- c:\windows\system32\drivers\HSF_DPV.sys
2010-02-04 14:11 . 2006-06-12 00:59 208384 ----a-w- c:\windows\system32\drivers\HSFHWAZL.sys
2010-02-04 14:11 . 2006-06-12 00:59 727808 ----a-w- c:\windows\system32\drivers\HSF_CNXT.sys
2010-02-04 14:11 . 2004-12-10 10:49 147456 ----a-w- c:\windows\UNINST32.EXE
2010-02-04 14:11 . 2004-12-08 20:04 5120 ----a-w- c:\windows\system32\FILTRCOI.DLL
2010-02-04 14:11 . 2004-12-07 22:10 16896 ----a-w- c:\windows\system32\drivers\DKbFltr.SYS
2010-02-04 14:10 . 2007-02-12 23:48 -------- d---a-w- c:\windows\BTW
2010-02-04 14:10 . 2006-01-04 22:31 253952 ----a-w- c:\windows\AArrange.exe
2010-02-04 14:05 . 2010-02-04 14:05 -------- d-----w- c:\program files\QIP Infium
2010-02-04 13:59 . 2010-02-04 13:59 -------- d-----w- c:\program files\Yahoo!
2010-02-04 13:53 . 2006-06-13 13:42 602112 ----a-w- c:\windows\system32\Acer.Empowering.Windows.Forms_v820.dll
2010-02-04 13:52 . 2006-06-01 19:47 1168896 ----a-w- c:\windows\system32\ERUpdateHidden.EXE
2010-02-04 13:52 . 2006-03-30 12:06 258048 ----a-w- c:\windows\system32\CheckD2DSystem.exe
2010-02-04 13:52 . 2006-03-23 11:02 258048 ----a-w- c:\windows\system32\Uninstall_eRecovery.exe
2010-02-04 13:52 . 2005-12-09 08:12 16384 ----a-w- c:\windows\system32\ClearEvent.exe
2010-02-04 13:52 . 2004-11-03 08:06 159744 ----a-w- c:\windows\system32\CloseProcessWindow.dll
2010-02-04 13:51 . 2010-02-04 13:51 -------- d-----w- c:\windows\Snapshot
2010-02-04 13:51 . 2010-02-04 13:51 -------- d-----w- c:\windows\BUtilityBar
2010-02-04 13:50 . 2010-02-04 13:50 -------- d-----w- c:\windows\Options
2010-02-04 13:30 . 2010-02-04 13:30 -------- d-----w- c:\program files\WIDCOMM
2010-02-04 13:29 . 2010-02-04 13:29 -------- d-----w- c:\program files\Launch Manager
2010-02-04 13:28 . 2006-03-03 12:10 81920 ----a-w- c:\windows\system32\SynTPCo2.dll
2010-02-04 13:28 . 2006-03-03 12:08 69722 ----a-w- c:\windows\system32\SynTPFcs.dll
2010-02-04 13:28 . 2006-03-03 11:55 94298 ----a-w- c:\windows\system32\SynTPAPI.dll
2010-02-04 13:28 . 2006-03-03 11:55 114688 ----a-w- c:\windows\system32\SynCtrl.dll
2010-02-04 13:28 . 2006-03-03 11:55 82013 ----a-w- c:\windows\system32\SynCOM.dll
2010-02-04 13:28 . 2006-03-03 11:52 192672 ----a-w- c:\windows\system32\drivers\SynTP.sys
2010-02-04 13:28 . 2010-02-04 13:28 -------- d-----w- c:\program files\Synaptics
2010-02-04 13:24 . 2006-02-16 14:39 45056 ----a-w- c:\windows\system32\Epm-Po.dll
2010-02-04 13:24 . 2005-09-14 16:03 53248 ----a-w- c:\windows\system32\acpimof.dll
2010-02-04 13:22 . 2006-05-16 02:04 2879488 ----a-w- c:\windows\SkyTel.exe
2010-02-04 13:22 . 2005-05-03 02:43 69632 ----a-w- c:\windows\Alcmtr.exe
2010-02-04 13:21 . 2010-02-04 13:21 -------- d-----w- c:\windows\Acer
2010-02-04 13:21 . 2010-02-04 13:21 -------- d-----w- c:\documents and settings\Ládíka Království
2010-02-04 13:19 . 2006-08-28 12:08 -------- d-----w- c:\windows\system32\config\systemprofile\Application Data\ATI
2010-02-04 13:16 . 2008-04-13 18:39 5504 ----a-w- c:\windows\system32\drivers\mstee.sys
2010-02-04 13:16 . 2001-08-17 12:48 12160 ----a-w- c:\windows\system32\drivers\mouhid.sys
2010-02-04 13:15 . 2008-04-13 18:46 10880 ----a-w- c:\windows\system32\drivers\NdisIP.sys
2010-02-04 13:15 . 2008-04-13 18:46 15232 ----a-w- c:\windows\system32\drivers\StreamIP.sys
2010-02-04 13:15 . 2008-04-13 18:46 11136 ----a-w- c:\windows\system32\drivers\slip.sys
2010-02-04 13:15 . 2008-04-13 18:46 19200 ----a-w- c:\windows\system32\drivers\wstcodec.sys
2010-02-04 13:15 . 2008-04-13 18:46 85248 ----a-w- c:\windows\system32\drivers\nabtsfec.sys
2010-02-04 13:15 . 2008-04-13 18:46 17024 ----a-w- c:\windows\system32\drivers\ccdecode.sys

.
(((((((((((((((((((((((((((((((((((((((( Find3M výpis ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2010-02-05 11:05 . 2006-08-28 13:31 36176 ----a-w- c:\documents and settings\Administrator\Local Settings\Application Data\GDIPFONTCACHEV1.DAT
2010-02-05 07:51 . 2006-08-28 12:33 6186 ----a-w- c:\windows\pchealth\helpctr\PackageStore\SkuStore.bin
2010-02-05 07:51 . 2006-08-28 12:33 166939 ----a-w- c:\windows\pchealth\helpctr\OfflineCache\index.dat
2010-02-04 15:08 . 2010-02-04 15:08 0 ----a-w- c:\windows\nsreg.dat
2010-02-04 15:08 . 2010-02-04 15:07 -------- d-----w- c:\program files\K-Lite Codec Pack
2010-02-04 14:11 . 2004-09-21 13:28 842 ----a-w- c:\windows\HotFix.bat
2010-02-04 13:21 . 2006-05-12 09:16 1129 ----a-w- c:\windows\CLEANUP.CMD
2009-12-22 05:21 . 2006-01-09 19:02 667136 ----a-w- c:\windows\system32\wininet.dll
2009-12-22 05:20 . 2004-08-10 19:00 81920 ----a-w- c:\windows\system32\ieencode.dll
2009-12-11 18:00 . 2010-02-04 15:08 85504 ----a-w- c:\windows\system32\ff_vfw.dll
2009-11-21 15:51 . 2004-08-10 19:00 471552 ----a-w- c:\windows\AppPatch\AcLayers.dll
2009-11-16 08:06 . 2009-11-16 08:06 55768 ----a-w- c:\windows\system32\drivers\epfwtdi.sys
2009-11-16 08:06 . 2009-11-16 08:06 135048 ----a-w- c:\windows\system32\drivers\epfw.sys
2009-11-16 08:03 . 2009-11-16 08:03 108792 ----a-w- c:\windows\system32\drivers\ehdrv.sys
2009-11-16 07:56 . 2009-11-16 07:56 116520 ----a-w- c:\windows\system32\drivers\eamon.sys
.

(((((((((((((((((((((((((((((((((( Spouštěcí body v registru )))))))))))))))))))))))))))))))))))))))))))))
.
.
*Poznámka* prázdné záznamy a legitimní výchozí údaje nejsou zobrazeny.
REGEDIT4

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"ehTray"="c:\windows\ehome\ehtray.exe" [2005-08-05 64512]
"AzMixerSel"="c:\program files\Realtek\InstallShield\AzMixerSel.exe" [2006-04-14 53248]
"ntiMUI"="c:\program files\NewTech Infosystems\NTI CD & DVD-Maker 7\ntiMUI.exe" [2005-05-11 45056]
"Acer ePresentation HPD"="c:\acer\Empowering Technology\ePresentation\ePresentation.exe" [2006-03-31 204800]
"IMJPMIG8.1"="c:\windows\IME\imjp8_1\IMJPMIG.EXE" [2004-08-10 208952]
"MSPY2002"="c:\windows\system32\IME\PINTLGNT\ImScInst.exe" [2004-08-10 59392]
"PHIME2002ASync"="c:\windows\system32\IME\TINTLGNT\TINTSETP.EXE" [2004-08-10 455168]
"PHIME2002A"="c:\windows\system32\IME\TINTLGNT\TINTSETP.EXE" [2004-08-10 455168]
"RTHDCPL"="RTHDCPL.EXE" [2006-06-27 16248320]
"SkyTel"="SkyTel.EXE" [2006-05-16 2879488]
"ePower_DMC"="c:\acer\Empowering Technology\ePower\ePower_DMC.exe" [2006-05-30 421888]
"Boot"="c:\acer\Empowering Technology\ePower\Boot.exe" [2006-03-15 579584]
"SynTPEnh"="c:\program files\Synaptics\SynTP\SynTPEnh.exe" [2006-03-03 761946]
"LManager"="c:\progra~1\LAUNCH~1\LManager.exe" [2006-06-23 602112]
"ATICCC"="c:\program files\ATI Technologies\ATI.ACE\CLIStart.exe" [2006-05-10 90112]
"BisonBar"="c:\windows\BUtilityBar\BisonBar.exe" [2006-09-08 245760]
"eRecoveryService"="c:\acer\Empowering Technology\eRecovery\eRAgent.exe" [2006-06-01 413696]
"WarReg_PopUp"="c:\acer\WR_PopUp\WarReg_PopUp.exe" [2006-09-23 61440]
"egui"="c:\program files\ESET\ESET Smart Security\egui.exe" [2009-11-16 2054360]
"Start WingMan Profiler"="c:\program files\Logitech\Gaming Software\LWEMon.exe" [2009-01-21 92168]

[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="c:\windows\system32\CTFMON.EXE" [2008-04-14 15360]

c:\documents and settings\All Users\Start Menu\Programs\Startup\
Adobe Reader Speed Launch.lnk - c:\program files\Adobe\Acrobat 7.0\Reader\reader_sl.exe [2004-12-14 29696]
Acer Empowering Technology.lnk - c:\acer\Empowering Technology\Acer.Empowering.Framework.Launcher.exe [2006-3-27 45056]

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile]
"EnableFirewall"= 0 (0x0)

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\system32\\sessmgr.exe"=
"c:\\WINDOWS\\System32\\PnkBstrA.exe"=
"c:\\WINDOWS\\System32\\PnkBstrB.exe"=
"%windir%\\Network Diagnostic\\xpnetdiag.exe"=

R1 ehdrv;ehdrv;c:\windows\system32\drivers\ehdrv.sys [16.11.2009 9:03 108792]
R1 SASDIFSV;SASDIFSV;\??\c:\docume~1\LÁDÍKA~1\LOCALS~1\Temp\SAS_SelfExtract\SASDIFSV.SYS --> c:\docume~1\LÁDÍKA~1\LOCALS~1\Temp\SAS_SelfExtract\SASDIFSV.SYS [?]
R1 SASKUTIL;SASKUTIL;\??\c:\docume~1\LÁDÍKA~1\LOCALS~1\Temp\SAS_SelfExtract\SASKUTIL.sys --> c:\docume~1\LÁDÍKA~1\LOCALS~1\Temp\SAS_SelfExtract\SASKUTIL.sys [?]
R2 ekrn;ESET Service;c:\program files\ESET\ESET Smart Security\ekrn.exe [16.11.2009 9:04 735960]
S2 eLock2BurnerLockDriver;eLock2BurnerLockDriver;\??\c:\windows\system32\eLock2BurnerLockDriver.sys --> c:\windows\system32\eLock2BurnerLockDriver.sys [?]
S2 eLock2FSCTLDriver;eLock2FSCTLDriver;\??\c:\windows\system32\eLock2FSCTLDriver.sys --> c:\windows\system32\eLock2FSCTLDriver.sys [?]
S3 SASENUM;SASENUM;\??\c:\docume~1\LÁDÍKA~1\LOCALS~1\Temp\SAS_SelfExtract\SASENUM.SYS --> c:\docume~1\LÁDÍKA~1\LOCALS~1\Temp\SAS_SelfExtract\SASENUM.SYS [?]

--- Ostatní služby/ovladače v paměti ---

*NewlyCreated* - ATI_SMART
*NewlyCreated* - SASDIFSV
*NewlyCreated* - SASKUTIL
.
.
------- Doplňkový sken -------
.
uStart Page = hxxp://cs.intl.acer.yahoo.com
mStart Page = hxxp://cs.intl.acer.yahoo.com
uInternet Connection Wizard,ShellNext = hxxp://cs.intl.acer.yahoo.com/
uSearchURL,(Default) = hxxp://uk.rd.yahoo.com/customize/ycomp/defaults/su/*http://uk.yahoo.com
IE: Send to &Bluetooth Device... - c:\program files\WIDCOMM\Bluetooth Software\btsendto_ie_ctx.htm
FF - ProfilePath - c:\documents and settings\Ládíka Království\Application Data\Mozilla\Firefox\Profiles\zdznqk8j.default\
FF - prefs.js: browser.startup.homepage - seznam.cz
FF - plugin: c:\program files\K-Lite Codec Pack\Real\browser\plugins\nppl3260.dll
FF - plugin: c:\program files\K-Lite Codec Pack\Real\browser\plugins\nprpjplug.dll

---- NASTAVENÍ FIREFOXU ----
c:\program files\Mozilla Firefox\greprefs\all.js - pref("ui.use_native_colors", true);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("ui.use_native_popup_windows", false);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("browser.enable_click_image_resizing", true);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("accessibility.browsewithcaret_shortcut.enabled", true);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("javascript.options.mem.high_water_mark", 32);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("javascript.options.mem.gc_frequency", 1600);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("network.auth.force-generic-ntlm", false);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("svg.smil.enabled", false);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("ui.trackpoint_hack.enabled", -1);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("browser.formfill.debug", false);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("browser.formfill.agedWeight", 2);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("browser.formfill.bucketSize", 1);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("browser.formfill.maxTimeGroupings", 25);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("browser.formfill.timeGroupingSize", 604800);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("browser.formfill.boundaryWeight", 25);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("browser.formfill.prefixWeight", 5);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("html5.enable", false);
c:\program files\Mozilla Firefox\defaults\pref\firefox-branding.js - pref("app.update.download.backgroundInterval", 600);
c:\program files\Mozilla Firefox\defaults\pref\firefox-branding.js - pref("app.update.url.manual", "http://www.firefox.com");
c:\program files\Mozilla Firefox\defaults\pref\firefox-branding.js - pref("browser.search.param.yahoo-fr-ja", "mozff");
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("extensions.{972ce4c6-7e08-4474-a285-3208198ce6fd}.name", "chrome://browser/locale/browser.properties");
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("extensions.{972ce4c6-7e08-4474-a285-3208198ce6fd}.description", "chrome://browser/locale/browser.properties");
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("xpinstall.whitelist.add", "addons.mozilla.org");
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("xpinstall.whitelist.add.36", "getpersonas.com");
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("lightweightThemes.update.enabled", true);
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("browser.allTabs.previews", false);
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("plugins.hide_infobar_for_outdated_plugin", false);
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("plugins.update.notifyUser", false);
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("toolbar.customization.usesheet", false);
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("browser.taskbar.previews.enable", false);
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("browser.taskbar.previews.max", 20);
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("browser.taskbar.previews.cachetime", 20);
c:\program files\Mozilla Firefox\defaults\pref\firefox-l10n.js - pref("browser.fixup.alternate.suffix", ".cz");
.
- - - - NEPLATNÉ POLOŽKY ODSTRANĚNÉ Z REGISTRU - - - -

HKLM-Run-LaunchApp - (no file)



**************************************************************************

catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2010-02-05 18:10
Windows 5.1.2600 Service Pack 3 FAT NTAPI

skenování skrytých procesů ...

skenování skrytých položek 'Po spuštění' ...

skenování skrytých souborů ...

sken byl úspešně dokončen
skryté soubory: 0

**************************************************************************
.
--------------------- Knihovny navázané na běžící procesy ---------------------

- - - - - - - > 'winlogon.exe'(980)
c:\windows\system32\Ati2evxx.dll
.
Celkový čas: 2010-02-05 18:11:28
ComboFix-quarantined-files.txt 2010-02-05 17:11

Před spuštěním: 31 828 377 600 bytes free
Po spuštění: 32 082 722 816 bytes free

WindowsXP-KB310994-SP2-Pro-BootDisk-CSY.exe
[boot loader]
timeout=2
default=multi(0)disk(0)rdisk(0)partition(2)\WINDOWS
[operating systems]
c:\cmdcons\BOOTSECT.DAT="Microsoft Windows Recovery Console" /cmdcons
multi(0)disk(0)rdisk(0)partition(2)\WINDOWS="Windows XP Media Center Edition" /noexecute=optin /fastdetect /usepmtimer

- - End Of File - - 559E12797A3272A2007C7B3D24D81FCA

Jak to vypadá s počítačem?

Stále stejný problém
Koukal jsem před chvíli na Process Explorer a způsobuje to pravděpodobně DPCs, jakmile je procesor zatížen, tak tento proces mi vyletí nahoru.

Já jsem asi slepá, ale v lozích ten proces nikde nevidím , nevíte k čemu patří?

Je to něco k ovladačům. Řekl bych, že to je v každém PC. Co jsem se dočetl, tak to může způsob nějaká chyba v ovladačích, jenže je divné, že se to děje i po reinstallu.

Zde jsou ty dva procesy vidět, zrovna když jsou v klidu ->

To budou ovladače k notbooku, zkusím sem poslat někoho z kolegů.

Odinstalujte combofix přes
Start >> Spustit zkopírujte do okénka:

ComboFix /Uninstall

stiskněte Enter
-To odinstaluje ComboFix a smaže s ním související soubory a složky.



Stáhněte T-Cleaner
http://sweb.cz/Marinus/T-Cleaner.exe

-Spusťte,pro potvrzení volby mačkejte klávesu A, Enter
-po použití prográmek vymažte.Pozor,antiviry ho mohou falešně označit za vir


Stahněte OTC a použijte
http://oldtimer.geekstogo.com/OTC.exe



Stáhněte Ccleaner,viz můj podpis
-nainstalujte a vyčištěte dočasné soubory, i registry

Vše hotovo

Jinak mockrát Vám děkuji za pomoc

Mrkněte do správce zařízení, zda tam jsou všechny ovladače.

Všechny tam jsou.
Možná pomůže, že při té reinstalaci mi to párkrát vyhodila chybu "NTLDR is missing", ale po delší době se mi to povedlo nahodit a nainstalovat.

Pokud by Vám ten soubor ted chyběl, tak se nedostanete do windows.
Pošlu sem kolegu