VIRY.CZ

Dobrý den,
prosím o pomoc, PC se chová podivně zatuhává, občas monitor píše není signál, občas nejde zapnout (několikrát reset)
Přikládám logy z MWAV, RSIT

Díky moc za každou pomoc

MWAV:

Objekt "MaxSearch Adware" nalezen v souborovém systému! Provedené akce: Ponecháno, neodstraněno!.

Objekt "Antivirus Sentry Corrupted Adware/Spyware" nalezen v souborovém systému! Provedené akce: Ponecháno, neodstraněno!.

Záznam "HKCU\Software\Netscape\Netscape Navigator\User Trusted External Applications" odkazuje na neplatný objekt ""C:\PROGRA~1\WINDOW~2\wmplayer.exe"". Provedené akce: Ponecháno, neodstraněno!.

Záznam "HKCU\Software\Netscape\Netscape Navigator\User Trusted External Applications" odkazuje na neplatný objekt "C:\PROGRA~1\WINDOW~2\wmplayer.exe". Provedené akce: Ponecháno, neodstraněno!.

Soubor C:\Documents and Settings\Recepce\Data aplikací\Thunderbird\Profiles\mgyfan9j.default\Mail\Local Folders\Trash je infikovaný virem Generic.Peed.Eml.8918810B (DB) !! Provedené akce: Ponecháno, neodstraněno!.

RSIT:

Logfile of random's system information tool 1.06 (written by random/random)
Run by UVT at 2010-02-10 21:36:41
Systém Microsoft Windows XP Professional Service Pack 3
System drive C: has 10 GB (25%) free of 41 GB
Total RAM: 1022 MB (47% free)

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 21:36:54, on 10.2.2010
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\mdm.exe
C:\Program Files\Microsoft SQL Server\MSSQL$SKYLA\Binn\sqlservr.exe
C:\Program Files\NetTime\NeTmSvNT.exe
C:\WINDOWS\system32\nvsvc32.exe
c:\program files\skylapro ii\oko3\oko3.exe
C:\Program Files\Spyware Terminator\sp_rsser.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Fujitsu\SystemDiagnostics\OnlineDiagnostic\TestManager\TestHandler.exe
C:\WINDOWS\system32\wbem\wmiapsrv.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\RTHDCPL.EXE
C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
C:\Program Files\Java\jre6\bin\jusched.exe
C:\Program Files\NetTime\NetTime.exe
C:\Program Files\Common Files\Nokia\MPlatform\NokiaMServer.exe
C:\WINDOWS\system32\RUNDLL32.EXE
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Skype\Phone\Skype.exe
C:\Program Files\Microsoft SQL Server\80\Tools\Binn\sqlmangr.exe
C:\Program Files\PC Connectivity Solution\ServiceLayer.exe
C:\Program Files\Skype\Plugin Manager\skypePM.exe
C:\WINDOWS\system32\igfxsrvc.exe
C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
C:\WINDOWS\system32\winlogon.exe
C:\Program Files\PC Connectivity Solution\Transports\NclUSBSrv.exe
C:\Program Files\PC Connectivity Solution\Transports\NclRSSrv.exe
C:\Documents and Settings\UVT\Plocha\RSIT.exe
C:\Program Files\trend micro\UVT.exe
C:\WINDOWS\system32\wuauclt.exe

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Odkazy
O2 - BHO: Podpora odkazu pro Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: Burn4Free Toolbar Helper - {D187A56B-A33F-4CBE-9D77-459FC0BAE012} - C:\Program Files\Burn4Free Toolbar\v3.3.0.3\Burn4Free_Toolbar.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
O3 - Toolbar: Burn4Free Toolbar - {4F11ACBB-393F-4C86-A214-FF3D0D155CC3} - C:\Program Files\Burn4Free Toolbar\v3.3.0.3\Burn4Free_Toolbar.dll
O4 - HKLM\..\Run: [IgfxTray] C:\WINDOWS\system32\igfxtray.exe
O4 - HKLM\..\Run: [HotKeysCmds] C:\WINDOWS\system32\hkcmd.exe
O4 - HKLM\..\Run: [Persistence] C:\WINDOWS\system32\igfxpers.exe
O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE
O4 - HKLM\..\Run: [Alcmtr] ALCMTR.EXE
O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre6\bin\jusched.exe"
O4 - HKLM\..\Run: [NetTime] C:\Program Files\NetTime\NetTime.exe
O4 - HKLM\..\Run: [NokiaMServer] C:\Program Files\Common Files\Nokia\MPlatform\NokiaMServer /watchfiles startup
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [Skype] "C:\Program Files\Skype\Phone\Skype.exe" /nosplash /minimized
O4 - HKCU\..\Run: [PC Suite Tray] "C:\Program Files\Nokia\Nokia PC Suite 7\PCSuite.exe" -onlytray
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-21-1776165412-763923911-3018959947-1007\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe (User 'Recepce')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - Global Startup: Service Manager.lnk = C:\Program Files\Microsoft SQL Server\80\Tools\Binn\sqlmangr.exe
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL
O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://www.update.microsoft.com/microso ... 3129948750
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe
O23 - Service: NetTime (NetTimeSvc) - Subjective Software - C:\Program Files\NetTime\NeTmSvNT.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: Oko3 - - c:\program files\skylapro ii\oko3\oko3.exe
O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe
O23 - Service: ServiceLayer - Nokia - C:\Program Files\PC Connectivity Solution\ServiceLayer.exe
O23 - Service: SkylaDataService - - c:\program files\skylapro ii\skyladataservice.exe
O23 - Service: SkylaPortWriterService - - c:\program files\skylapro ii\skylaportwriterservice.exe
O23 - Service: Skyla Timer Service (SkylaTimerService) - - c:\program files\skylapro ii\skylatimerservice.exe
O23 - Service: Spyware Terminator Realtime Shield Service (sp_rssrv) - Crawler.com - C:\Program Files\Spyware Terminator\sp_rsser.exe
O23 - Service: Fujitsu Diagnostic Testhandler (TestHandler) - Fujitsu Technology Solutions - C:\Program Files\Fujitsu\SystemDiagnostics\OnlineDiagnostic\TestManager\TestHandler.exe

--
End of file - 8174 bytes

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{06849E9F-C8D7-4D59-B87D-784B7D6BE0B3}]
Podpora odkazu pro Adobe PDF Reader - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll [2006-10-23 62080]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{53707962-6F74-2D53-2644-206D7942484F}]
Spybot-S&D IE Protection - C:\PROGRA~1\SPYBOT~1\SDHelper.dll [2007-08-31 1122128]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{D187A56B-A33F-4CBE-9D77-459FC0BAE012}]
Burn4Free Toolbar Helper - C:\Program Files\Burn4Free Toolbar\v3.3.0.3\Burn4Free_Toolbar.dll [2010-01-25 815104]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre6\bin\jp2ssv.dll [2009-10-11 41760]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{E7E6F031-17CE-4C07-BC86-EABFE594F69C}]
JQSIEStartDetectorImpl Class - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll [2009-10-11 73728]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{4F11ACBB-393F-4C86-A214-FF3D0D155CC3} - Burn4Free Toolbar - C:\Program Files\Burn4Free Toolbar\v3.3.0.3\Burn4Free_Toolbar.dll [2010-01-25 815104]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"IgfxTray"=C:\WINDOWS\system32\igfxtray.exe [2007-02-26 131072]
"HotKeysCmds"=C:\WINDOWS\system32\hkcmd.exe [2007-02-26 155648]
"Persistence"=C:\WINDOWS\system32\igfxpers.exe [2007-02-26 131072]
"RTHDCPL"=C:\WINDOWS\RTHDCPL.EXE [2006-06-28 16248320]
"Alcmtr"=C:\WINDOWS\ALCMTR.EXE [2005-05-03 69632]
"HP Software Update"=C:\Program Files\HP\HP Software Update\HPWuSchd2.exe [2005-05-11 49152]
"avast!"=C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe [2009-11-25 81000]
"SunJavaUpdateSched"=C:\Program Files\Java\jre6\bin\jusched.exe [2009-10-11 149280]
"NetTime"=C:\Program Files\NetTime\NetTime.exe [2003-01-30 3791032]
"NokiaMServer"=C:\Program Files\Common Files\Nokia\MPlatform\NokiaMServer /watchfiles startup []
"NvCplDaemon"=C:\WINDOWS\system32\NvCpl.dll [2008-03-19 13524992]
"nwiz"=nwiz.exe /install []
"NvMediaCenter"=C:\WINDOWS\system32\NvMcTray.dll [2008-03-19 86016]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"=C:\WINDOWS\system32\ctfmon.exe [2008-04-14 15360]
"Skype"=C:\Program Files\Skype\Phone\Skype.exe [2007-12-07 21686568]
""= []
"PC Suite Tray"=C:\Program Files\Nokia\Nokia PC Suite 7\PCSuite.exe [2009-11-11 1451520]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe Reader Speed Launcher]
C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe [2007-05-11 40048]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\MSMSGS]
C:\Program Files\Messenger\msmsgs.exe [2008-04-14 1695232]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SkyTel]
C:\WINDOWS\SkyTel.EXE [2006-05-16 2879488]

C:\Documents and Settings\All Users\Nabídka Start\Programy\Po spuštění
Service Manager.lnk - C:\Program Files\Microsoft SQL Server\80\Tools\Binn\sqlmangr.exe

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\igfxcui]
C:\WINDOWS\system32\igfxdev.dll [2007-02-26 204800]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\WgaLogon]
C:\WINDOWS\system32\WgaLogon.dll [2009-03-10 265096]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll [2006-10-18 133632]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Wdf01000.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Wdf01000.sys]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=145

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"HonorAutoRunSetting"=

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"C:\Program Files\UltraVnc\vncviewer.exe"="C:\Program Files\UltraVnc\vncviewer.exe:*:Enabled:vncviewer.exe"
"C:\Program Files\Microsoft Office\Office12\OUTLOOK.EXE"="C:\Program Files\Microsoft Office\Office12\OUTLOOK.EXE:*:Enabled:Microsoft Office Outlook"
"C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe"="C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe:*:Enabled:hpqtra08.exe"
"C:\Program Files\HP\Digital Imaging\bin\hpqste08.exe"="C:\Program Files\HP\Digital Imaging\bin\hpqste08.exe:*:Enabled:hpqste08.exe"
"C:\Program Files\HP\Digital Imaging\bin\hpofxm08.exe"="C:\Program Files\HP\Digital Imaging\bin\hpofxm08.exe:*:Enabled:hpofxm08.exe"
"C:\Program Files\HP\Digital Imaging\bin\hposfx08.exe"="C:\Program Files\HP\Digital Imaging\bin\hposfx08.exe:*:Enabled:hposfx08.exe"
"C:\Program Files\HP\Digital Imaging\bin\hposid01.exe"="C:\Program Files\HP\Digital Imaging\bin\hposid01.exe:*:Enabled:hposid01.exe"
"C:\Program Files\HP\Digital Imaging\bin\hpqscnvw.exe"="C:\Program Files\HP\Digital Imaging\bin\hpqscnvw.exe:*:Enabled:hpqscnvw.exe"
"C:\Program Files\HP\Digital Imaging\bin\hpqkygrp.exe"="C:\Program Files\HP\Digital Imaging\bin\hpqkygrp.exe:*:Enabled:hpqkygrp.exe"
"C:\Program Files\HP\Digital Imaging\bin\hpqCopy.exe"="C:\Program Files\HP\Digital Imaging\bin\hpqCopy.exe:*:Enabled:hpqcopy.exe"
"C:\Program Files\HP\Digital Imaging\bin\hpfccopy.exe"="C:\Program Files\HP\Digital Imaging\bin\hpfccopy.exe:*:Enabled:hpfccopy.exe"
"C:\Program Files\HP\Digital Imaging\bin\hpzwiz01.exe"="C:\Program Files\HP\Digital Imaging\bin\hpzwiz01.exe:*:Enabled:hpzwiz01.exe"
"C:\Program Files\HP\Digital Imaging\Unload\HpqPhUnl.exe"="C:\Program Files\HP\Digital Imaging\Unload\HpqPhUnl.exe:*:Enabled:hpqphunl.exe"
"C:\Program Files\HP\Digital Imaging\Unload\HpqDIA.exe"="C:\Program Files\HP\Digital Imaging\Unload\HpqDIA.exe:*:Enabled:hpqdia.exe"
"C:\Program Files\HP\Digital Imaging\bin\hpoews01.exe"="C:\Program Files\HP\Digital Imaging\bin\hpoews01.exe:*:Enabled:hpoews01.exe"
"C:\WINDOWS\system32\dpvsetup.exe"="C:\WINDOWS\system32\dpvsetup.exe:*:Enabled:Microsoft DirectPlay Voice Test"
"C:\WINDOWS\system32\rundll32.exe"="C:\WINDOWS\system32\rundll32.exe:*:Enabled:Run a DLL as an App"
"C:\Program Files\Skype\Phone\Skype.exe"="C:\Program Files\Skype\Phone\Skype.exe:*:Enabled:Skype. Take a deep breath "
"C:\Program Files\Mozilla Firefox\firefox.exe"="C:\Program Files\Mozilla Firefox\firefox.exe:*:Disabled:Firefox"
"C:\Program Files\SkylaPro II\SKYLAII.exe"="C:\Program Files\SkylaPro II\SKYLAII.exe:*:Disabled:SkylaII"
"C:\Program Files\NetTime\NetTime.exe"="C:\Program Files\NetTime\NetTime.exe:*:Enabled:Network Time Synchronizer"
"E:\PortableApps\SkypePortable\App\Skype\Phone\Skype.exe"="E:\PortableApps\SkypePortable\App\Skype\Phone\Skype.exe:*:Disabled:Skype "
"C:\Program Files\Nokia\Nokia Ovi Suite\NokiaOviSuite.exe"="C:\Program Files\Nokia\Nokia Ovi Suite\NokiaOviSuite.exe:*:Enabled:Nokia Ovi Suite 2"
"C:\Program Files\Common Files\Nokia\Service Layer\A\nsl_host_process.exe"="C:\Program Files\Common Files\Nokia\Service Layer\A\nsl_host_process.exe:*:Enabled:Nokia Service Layer Host Process "
"C:\Program Files\Nokia\Nokia Software Updater\nsu_ui_client.exe"="C:\Program Files\Nokia\Nokia Software Updater\nsu_ui_client.exe:*:Enabled:Nokia Software Updater"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{a4c7d110-ad80-11dc-99ca-003005ebe946}]
shell\AutoRun\command - E:\launch.bat

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{b0c4c2c6-ac7f-11dc-99c5-003005ebe946}]
shell\AutoRun\command - C:\WINDOWS\system32\RunDLL32.EXE Shell32.DLL,ShellExec_RunDLL Info.exe protect.ed 480 480

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{b2a05f93-aa19-11dc-b8f4-806d6172696f}]
shell\AutoRun\command - C:\WINDOWS\system32\RunDLL32.EXE Shell32.DLL,ShellExec_RunDLL Info.exe protect.ed 480 480


======List of files/folders created in the last 1 months======

2010-02-10 19:59:06 ----AD---- C:\WINDOWS\VDLL.DLL
2010-02-10 19:59:06 ----AD---- C:\WINDOWS\system32\runouce.exe
2010-02-10 19:59:06 ----AD---- C:\WINDOWS\rundll16.exe
2010-02-10 19:59:06 ----AD---- C:\WINDOWS\RUNDL132.EXE
2010-02-10 19:59:06 ----AD---- C:\WINDOWS\logo1_.exe
2010-02-10 19:59:06 ----AD---- C:\WINDOWS\logo_1.exe
2010-02-10 19:56:03 ----A---- C:\WINDOWS\system32\msvcr80.dll
2010-02-10 19:56:02 ----A---- C:\WINDOWS\system32\msvcp80.dll
2010-02-10 19:56:01 ----A---- C:\WINDOWS\system32\eEmpty.exe
2010-02-10 19:55:59 ----A---- C:\WINDOWS\system32\TASKMGR.COM
2010-02-10 19:55:59 ----A---- C:\WINDOWS\system32\T.COM
2010-02-10 19:55:59 ----A---- C:\WINDOWS\REGEDIT.COM
2010-02-10 19:55:59 ----A---- C:\WINDOWS\R.COM
2010-02-10 19:55:56 ----D---- C:\Program Files\Common Files\MicroWorld
2010-02-10 19:55:55 ----D---- C:\Documents and Settings\All Users\Data aplikací\MicroWorld
2010-02-09 18:17:52 ----D---- C:\Program Files\Fujitsu
2010-02-09 18:17:52 ----D---- C:\Program Files\Common Files\Fujitsu
2010-02-09 18:16:52 ----A---- C:\WINDOWS\system32\NVUNINST.EXE
2010-02-09 12:01:06 ----D---- C:\WINDOWS\nview
2010-02-09 12:01:06 ----A---- C:\WINDOWS\system32\nvudisp.exe
2010-01-25 15:48:29 ----D---- C:\WINDOWS\system32\NtmsData
2010-01-25 15:37:28 ----A---- C:\WINDOWS\Burn4Free_Toolbar_Uninstaller_812.exe
2010-01-17 14:25:54 ----D---- C:\Program Files\Common Files\PCSuite
2010-01-17 13:53:52 ----D---- C:\Documents and Settings\All Users\Data aplikací\Installations
2010-01-17 13:10:12 ----D---- C:\Documents and Settings\All Users\Data aplikací\Nokia
2010-01-17 13:06:37 ----N---- C:\WINDOWS\system32\spmsgXP_2k3.dll
2010-01-17 13:06:34 ----HDC---- C:\WINDOWS\$NtUninstallWdf01007$
2010-01-17 13:05:50 ----D---- C:\Documents and Settings\UVT\Data aplikací\Nokia
2010-01-17 13:05:36 ----D---- C:\Documents and Settings\All Users\Data aplikací\PC Suite
2010-01-17 13:05:31 ----D---- C:\Documents and Settings\UVT\Data aplikací\PC Suite
2010-01-17 13:01:31 ----D---- C:\Program Files\Common Files\Nokia
2010-01-17 13:00:39 ----D---- C:\Program Files\DIFX
2010-01-17 13:00:28 ----D---- C:\Program Files\PC Connectivity Solution
2010-01-17 13:00:14 ----A---- C:\WINDOWS\system32\wdfcoinstaller01007.dll
2010-01-17 13:00:14 ----A---- C:\WINDOWS\system32\nmwcdcocls.dll
2010-01-17 13:00:08 ----A---- C:\WINDOWS\system32\nmwcdcls.dll
2010-01-17 12:59:19 ----D---- C:\Program Files\Nokia
2010-01-17 12:59:19 ----D---- C:\Documents and Settings\All Users\Data aplikací\OviInstallerCache
2010-01-17 12:49:44 ----D---- C:\Program Files\NSS
2010-01-14 13:38:54 ----D---- C:\Documents and Settings\UVT\Data aplikací\WinRAR
2010-01-14 12:36:51 ----D---- C:\Program Files\SpeedFan
2010-01-14 12:21:06 ----D---- C:\rsit
2010-01-14 12:21:06 ----D---- C:\Program Files\trend micro
2010-01-13 15:37:13 ----A---- C:\WINDOWS\system32\unrar.dll
2010-01-13 15:37:09 ----D---- C:\Program Files\K-Lite Codec Pack
2010-01-13 14:41:06 ----D---- C:\Program Files\Intel
2010-01-13 14:41:00 ----D---- C:\Intel
2010-01-13 14:39:19 ----D---- C:\DeskUpdate.tmp
2010-01-13 14:32:31 ----HDC---- C:\WINDOWS\$NtUninstallKB972270$
2010-01-13 14:31:49 ----HDC---- C:\WINDOWS\$NtUninstallKB955759$
2010-01-12 14:55:57 ----D---- C:\Program Files\CPUID
2010-01-11 12:48:57 ----D---- C:\Program Files\NetTime

======List of files/folders modified in the last 1 months======

2010-02-10 21:36:52 ----D---- C:\WINDOWS\Prefetch
2010-02-10 21:35:32 ----D---- C:\WINDOWS\Temp
2010-02-10 19:59:06 ----D---- C:\WINDOWS\system32
2010-02-10 19:59:06 ----D---- C:\WINDOWS
2010-02-10 19:55:56 ----D---- C:\Program Files\Common Files
2010-02-10 19:54:59 ----D---- C:\WINDOWS\Debug
2010-02-10 19:52:49 ----D---- C:\Documents and Settings\UVT\Data aplikací\skypePM
2010-02-10 12:38:22 ----HD---- C:\WINDOWS\inf
2010-02-10 10:31:10 ----HD---- C:\WINDOWS\$hf_mig$
2010-02-10 10:30:21 ----D---- C:\WINDOWS\system32\CatRoot2
2010-02-09 19:33:05 ----A---- C:\WINDOWS\SchedLgU.Txt
2010-02-09 18:19:47 ----D---- C:\WINDOWS\Help
2010-02-09 18:18:03 ----SHD---- C:\WINDOWS\Installer
2010-02-09 18:17:52 ----RD---- C:\Program Files
2010-02-09 18:17:36 ----D---- C:\Documents and Settings\UVT\Data aplikací\Skype
2010-02-09 18:17:11 ----RSHD---- C:\WINDOWS\system32\dllcache
2010-02-09 18:17:04 ----D---- C:\WINDOWS\system32\drivers
2010-02-09 18:16:58 ----D---- C:\WINDOWS\system32\ReinstallBackups
2010-02-09 18:16:50 ----D---- C:\Program Files\Common Files\InstallShield
2010-02-09 18:05:46 ----D---- C:\Program Files\Mozilla Firefox
2010-01-25 16:18:23 ----D---- C:\Program Files\Mozilla Thunderbird
2010-01-25 15:42:37 ----D---- C:\Program Files\Burn4Free
2010-01-25 15:37:27 ----D---- C:\Program Files\Burn4Free Toolbar
2010-01-22 22:00:56 ----D---- C:\Program Files\Internet Explorer
2010-01-22 22:00:50 ----D---- C:\WINDOWS\ie8updates
2010-01-17 15:48:01 ----D---- C:\Documents and Settings\UVT\Data aplikací\Adobe
2010-01-17 14:26:17 ----DC---- C:\WINDOWS\system32\DRVSTORE
2010-01-17 13:54:23 ----D---- C:\WINDOWS\WinSxS
2010-01-17 13:54:23 ----D---- C:\Program Files\Common Files\Microsoft Shared
2010-01-17 13:08:23 ----A---- C:\WINDOWS\system32\PerfStringBackup.INI
2010-01-17 13:06:57 ----SD---- C:\Documents and Settings\All Users\Data aplikací\Microsoft
2010-01-17 13:02:15 ----D---- C:\WINDOWS\system32\CatRoot
2010-01-14 12:26:50 ----D---- C:\Documents and Settings\UVT\Data aplikací\Mozilla
2010-01-13 14:47:41 ----D---- C:\WINDOWS\AppPatch
2010-01-13 14:32:28 ----D---- C:\Documents and Settings\All Users\Data aplikací\Microsoft Help

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R1 Aavmker4;avast! Asynchronous Virus Monitor; C:\WINDOWS\system32\drivers\Aavmker4.sys [2009-11-25 27408]
R1 aswSP;avast! Self Protection; C:\WINDOWS\system32\drivers\aswSP.sys [2009-09-15 114768]
R1 aswTdi;avast! Network Shield Support; C:\WINDOWS\system32\drivers\aswTdi.sys [2009-11-25 48560]
R1 intelppm;Řadič procesoru Intel; C:\WINDOWS\system32\DRIVERS\intelppm.sys [2008-04-14 40192]
R1 kbdhid;Ovladač klávesnice standardu HID; C:\WINDOWS\system32\DRIVERS\kbdhid.sys [2008-04-14 14592]
R1 oreans32;oreans32; \??\C:\WINDOWS\system32\drivers\oreans32.sys []
R2 Angelnt;Angelnt; C:\WINDOWS\System32\Drivers\ANGELNT.SYS [2009-10-09 51072]
R2 aswFsBlk;aswFsBlk; C:\WINDOWS\system32\DRIVERS\aswFsBlk.sys [2009-09-15 20560]
R2 aswMon2;avast! Standard Shield Support; C:\WINDOWS\system32\drivers\aswMon2.sys [2009-09-15 94160]
R2 cpuz132;cpuz132; \??\C:\WINDOWS\system32\drivers\cpuz132_x32.sys []
R3 aswRdr;aswRdr; C:\WINDOWS\system32\drivers\aswRdr.sys [2009-11-25 23120]
R3 HDAudBus;Ovladač Microsoft UAA pro sběrnici High Definition Audio; C:\WINDOWS\system32\DRIVERS\HDAudBus.sys [2008-04-13 144384]
R3 HidUsb;Ovladač třídy standardu HID; C:\WINDOWS\system32\DRIVERS\hidusb.sys [2008-04-13 10368]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\WINDOWS\system32\drivers\RtkHDAud.sys [2006-06-28 4304384]
R3 mouhid;Ovladač myši standardu HID; C:\WINDOWS\system32\DRIVERS\mouhid.sys [2001-10-24 12160]
R3 nv;nv; C:\WINDOWS\system32\DRIVERS\nv4_mini.sys [2008-03-19 6547488]
R3 RTL8023xp;Realtek 10/100/1000 PCI NIC Family NDIS XP Driver; C:\WINDOWS\system32\DRIVERS\Rtnicxp.sys [2006-12-14 85120]
R3 usbccgp;Obecný nadřazený ovladač Microsoft USB; C:\WINDOWS\system32\DRIVERS\usbccgp.sys [2008-04-13 32128]
R3 usbehci;Ovladač miniportu rozšířeného radiče hostitele Microsoft USB 2.0; C:\WINDOWS\system32\DRIVERS\usbehci.sys [2008-04-13 30208]
R3 usbhub;Rozbočovač umožnující USB2; C:\WINDOWS\system32\DRIVERS\usbhub.sys [2008-04-13 59520]
R3 usbuhci;Ovladač Microsoft univerzálního hostitelského řadiče USB od společnosti Microsoft; C:\WINDOWS\system32\DRIVERS\usbuhci.sys [2008-04-13 20608]
S1 P3;Ovladač procesoru Intel PentiumIII; C:\WINDOWS\system32\DRIVERS\p3.sys [2008-04-14 46592]
S3 E100B;Intel(R) PRO Adapter Driver; C:\WINDOWS\system32\DRIVERS\e100b325.sys [2001-10-24 117760]
S3 esihdrv;esihdrv; \??\C:\DOCUME~1\UVT\LOCALS~1\Temp\esihdrv.sys []
S3 HPZid412;IEEE-1284.4 Driver HPZid412; C:\WINDOWS\system32\DRIVERS\HPZid412.sys [2005-03-08 51120]
S3 HPZipr12;Print Class Driver for IEEE-1284.4 HPZipr12; C:\WINDOWS\system32\DRIVERS\HPZipr12.sys [2005-03-08 16496]
S3 HPZius12;USB to IEEE-1284.4 Translation Driver HPZius12; C:\WINDOWS\system32\DRIVERS\HPZius12.sys [2005-03-08 21744]
S3 ialm;ialm; C:\WINDOWS\system32\DRIVERS\igxpmp32.sys [2007-02-26 5700096]
S3 nmwcd;Nokia USB Phone Parent; C:\WINDOWS\system32\drivers\ccdcmb.sys [2009-10-06 17664]
S3 nmwcdc;Nokia USB Generic; C:\WINDOWS\system32\drivers\ccdcmbo.sys [2009-10-06 22016]
S3 nmwcdnsu;Nokia USB Flashing Phone Parent; C:\WINDOWS\system32\drivers\nmwcdnsu.sys [2009-10-06 136704]
S3 nmwcdnsuc;Nokia USB Flashing Generic; C:\WINDOWS\system32\drivers\nmwcdnsuc.sys [2009-10-06 8320]
S3 pccsmcfd;PCCS Mode Change Filter Driver; C:\WINDOWS\system32\DRIVERS\pccsmcfd.sys [2008-08-26 18816]
S3 upperdev;upperdev; C:\WINDOWS\system32\DRIVERS\usbser_lowerflt.sys [2009-10-06 7936]
S3 usbprint;Třída USB Printer; C:\WINDOWS\system32\DRIVERS\usbprint.sys [2008-04-13 25856]
S3 usbscan;Ovladač skeneru USB; C:\WINDOWS\system32\DRIVERS\usbscan.sys [2008-04-13 15104]
S3 usbser;USB Modem Driver; C:\WINDOWS\system32\drivers\usbser.sys [2008-04-13 26112]
S3 UsbserFilt;UsbserFilt; C:\WINDOWS\system32\DRIVERS\usbser_lowerfltj.sys [2009-10-06 7936]
S3 USBSTOR;Ovladač velkokapacitního paměťového zařízení USB; C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS [2008-04-13 26368]
S3 Wdf01000;Kernel Mode Driver Frameworks service; C:\WINDOWS\System32\Drivers\wdf01000.sys [2008-03-27 503008]
S3 WpdUsb;WpdUsb; C:\WINDOWS\system32\DRIVERS\wpdusb.sys [2006-10-18 38528]
S3 WudfRd;Windows Driver Foundation - User-mode Driver Framework Reflector; C:\WINDOWS\system32\DRIVERS\wudfrd.sys [2006-09-28 82944]
S4 agpCPQ;Filtr Compaq sběrnice AGP; C:\WINDOWS\system32\DRIVERS\agpCPQ.sys [2008-04-13 44928]
S4 alim1541;Filtr ALI sběrnice AGP; C:\WINDOWS\system32\DRIVERS\alim1541.sys [2008-04-13 42752]
S4 cbidf;cbidf; C:\WINDOWS\system32\DRIVERS\cbidf2k.sys [2001-08-17 13952]
S4 iaStor;Intel RAID Controller; C:\WINDOWS\system32\DRIVERS\iaStor.sys [2006-05-11 247808]
S4 IntelIde;IntelIde; C:\WINDOWS\system32\DRIVERS\intelide.sys [2008-04-14 5504]
S4 sr;Ovladač filtru Obnovy systému; C:\WINDOWS\system32\DRIVERS\sr.sys [2008-04-14 73344]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 aswUpdSv;avast! iAVS4 Control Service; C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe [2009-11-25 18752]
R2 avast! Antivirus;avast! Antivirus; C:\Program Files\Alwil Software\Avast4\ashServ.exe [2009-11-25 138680]
R2 JavaQuickStarterService;Java Quick Starter; C:\Program Files\Java\jre6\bin\jqs.exe [2009-10-11 153376]
R2 MDM;Machine Debug Manager; C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\mdm.exe [2006-10-26 335872]
R2 MSSQL$SKYLA;MSSQL$SKYLA; C:\Program Files\Microsoft SQL Server\MSSQL$SKYLA\Binn\sqlservr.exe [2002-12-17 7520337]
R2 NetTimeSvc;NetTime; C:\Program Files\NetTime\NeTmSvNT.exe [2003-01-30 452096]
R2 NVSvc;NVIDIA Display Driver Service; C:\WINDOWS\system32\nvsvc32.exe [2008-03-19 155716]
R2 Oko3;Oko3; c:\program files\skylapro ii\oko3\oko3.exe [2004-12-07 147456]
R2 SkylaDataService;SkylaDataService; c:\program files\skylapro ii\skyladataservice.exe [2004-12-07 20480]
R2 SkylaPortWriterService;SkylaPortWriterService; c:\program files\skylapro ii\skylaportwriterservice.exe [2004-12-07 20480]
R2 SkylaTimerService;Skyla Timer Service; c:\program files\skylapro ii\skylatimerservice.exe [2004-12-07 28672]
R2 sp_rssrv;Spyware Terminator Realtime Shield Service; C:\Program Files\Spyware Terminator\sp_rsser.exe [2009-05-05 487424]
R2 TestHandler;Fujitsu Diagnostic Testhandler; C:\Program Files\Fujitsu\SystemDiagnostics\OnlineDiagnostic\TestManager\TestHandler.exe [2009-02-19 341264]
R2 WudfSvc;Windows Driver Foundation - User-mode Driver Framework; C:\WINDOWS\system32\svchost.exe [2008-04-14 14336]
R3 avast! Mail Scanner;avast! Mail Scanner; C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe [2009-11-25 254040]
R3 avast! Web Scanner;avast! Web Scanner; C:\Program Files\Alwil Software\Avast4\ashWebSv.exe [2009-11-25 352920]
R3 ServiceLayer;ServiceLayer; C:\Program Files\PC Connectivity Solution\ServiceLayer.exe [2009-10-27 657408]
S2 Pml Driver HPZ12;Pml Driver HPZ12; C:\WINDOWS\system32\HPZipm12.exe [2007-08-09 73728]
S3 aspnet_state;Stavová služba ASP.NET; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe [2008-07-25 34312]
S3 clr_optimization_v2.0.50727_32;.NET Runtime Optimization Service v2.0.50727_X86; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe [2008-07-25 69632]
S3 FontCache3.0.0.0;Windows Presentation Foundation Font Cache 3.0.0.0; C:\WINDOWS\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe [2008-07-29 46104]
S3 idsvc;Služba Windows CardSpace; C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe [2008-07-29 881664]
S3 MSSQLServerADHelper;MSSQLServerADHelper; C:\Program Files\Microsoft SQL Server\80\Tools\Binn\sqladhlp.exe [2002-12-17 66112]
S3 odserv;Microsoft Office Diagnostics Service; C:\Program Files\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE [2008-11-04 441712]
S3 ose;Office Source Engine; C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2006-10-26 145184]
S3 SQLAgent$SKYLA;SQLAgent$SKYLA; C:\Program Files\Microsoft SQL Server\MSSQL$SKYLA\Binn\sqlagent.EXE [2002-12-17 311872]
S3 WMPNetworkSvc;Služba Windows Media Player Network Sharing; C:\Program Files\Windows Media Player\WMPNetwk.exe [2007-01-05 913920]
S4 NetTcpPortSharing;Služba sdílení portů Net.Tcp; C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe [2008-07-29 132096]

-----------------EOF-----------------

Dejte log z ComboFix.

Stahnete a ulozte nejlepe na plochu ComboFix: http://download.bleepingcomputer.com/sUBs/ComboFix.exe

pote spustte aplikaci pod uctem s administratorskym opravnenim

hned po startu se zobrazi obrazovka s licencnimi podminkami, pokracujte kliknutim na tlacitko Ano.

v klidu si postavte na kafe (cela akce trva cca. 5-10 minut, nekdy i dele - dle toho, o jak rychly stroj se jedna a kolika soubory se skener bude muset prodirat), behem skenu se nepokousejte spoustet zadne jine aplikace ani nic jineho

behem skenovani nepropadejte panice, vas stroj muze byt restartovan (predevsim pri prvni aplikaci skeneru)

upozorneni: pokud pouzivate antispyware s rezidentnim stitem, prepnete jeho rezidentni stit do Install Mode, pripadne jej po dobu skenu uplne deaktivujte, protoze dochazi pri skenu a vymazu pripadneho malware k nezadoucim kolizim s rezidentem antispyware

Log z Combofix, díky předem za pomoc

ComboFix 10-02-10.01 - UVT 10.02.2010 22:18:34.1.2 - x86
Systém Microsoft Windows XP Professional 5.1.2600.3.1250.420.1029.18.1022.465 [GMT 1:00]
Spuštěný z: c:\documents and settings\UVT\Plocha\ComboFix.exe
AV: avast! antivirus 4.8.1368 [VPS 100210-0] *On-access scanning disabled* (Updated) {7591DB91-41F0-48A3-B128-1A293FD8233D}
FW: Norton Internet Worm Protection *disabled* {990F9400-4CEE-43EA-A83A-D013ADD8EA6E}

VAROVÁNÍ - NA TOMTO POČÍTAČI NENÍ NAINSTALOVÁNA KONZOLA PRO ZOTAVENÍ !!
.

((((((((((((((((((((((((((((((((((((((( Ostatní výmazy )))))))))))))))))))))))))))))))))))))))))))))))))
.

c:\recycler\S-1-5-21-2505506699-2594242424-1360413524-500
c:\windows\regedit.com
c:\windows\system32\taskmgr.com

.
((((((((((((((((((((((((((((((((((((((( Ovladače/Služby )))))))))))))))))))))))))))))))))))))))))))))))))
.

-------\Legacy_OREANS32
-------\Service_oreans32


((((((((((((((((((((((((( Soubory vytvořené od 2010-01-10 do 2010-02-10 )))))))))))))))))))))))))))))))
.

2010-02-10 20:38 . 2010-02-10 20:38 -------- d-----w- c:\program files\Ultimate Process Manager
2010-02-10 18:59 . 2010-02-10 18:59 -------- d---a-w- c:\windows\VDLL.DLL
2010-02-10 18:59 . 2010-02-10 18:59 -------- d---a-w- c:\windows\system32\runouce.exe
2010-02-10 18:59 . 2010-02-10 18:59 -------- d---a-w- c:\windows\rundll16.exe
2010-02-10 18:59 . 2010-02-10 18:59 -------- d---a-w- c:\windows\RUNDL132.EXE
2010-02-10 18:59 . 2010-02-10 18:59 -------- d---a-w- c:\windows\logo1_.exe
2010-02-10 18:59 . 2010-02-10 18:59 -------- d---a-w- c:\windows\logo_1.exe
2010-02-10 18:56 . 2010-02-10 18:56 632064 ----a-w- c:\windows\system32\msvcr80.dll
2010-02-10 18:56 . 2010-02-10 18:56 554240 ----a-w- c:\windows\system32\msvcp80.dll
2010-02-10 18:56 . 2010-02-10 18:56 34048 ----a-w- c:\windows\system32\eEmpty.exe
2010-02-10 18:55 . 2008-04-14 03:22 137216 ----a-w- c:\windows\system32\T.COM
2010-02-10 18:55 . 2008-04-14 03:22 147968 ----a-w- c:\windows\R.COM
2010-02-10 18:55 . 2010-02-10 18:55 -------- d-----w- c:\program files\Common Files\MicroWorld
2010-02-09 17:24 . 2010-02-09 17:24 -------- d-sh--w- c:\windows\system32\config\systemprofile\IETldCache
2010-02-09 17:17 . 2010-02-09 17:17 -------- d-----w- c:\program files\Fujitsu
2010-02-09 17:17 . 2010-02-09 17:17 -------- d-----w- c:\program files\Common Files\Fujitsu
2010-02-09 17:16 . 2008-03-13 14:30 442368 ----a-w- c:\windows\system32\NVUNINST.EXE
2010-02-09 11:01 . 2010-02-09 17:19 -------- d-----w- c:\windows\nview
2010-02-09 11:01 . 2008-03-19 05:00 442368 ----a-w- c:\windows\system32\nvudisp.exe
2010-01-25 14:48 . 2010-01-25 14:49 -------- d-----w- c:\windows\system32\NtmsData
2010-01-25 14:37 . 2010-01-25 14:37 233243 ----a-w- c:\windows\Burn4Free_Toolbar_Uninstaller_812.exe
2010-01-17 13:25 . 2010-01-17 13:25 -------- d-----w- c:\program files\Common Files\PCSuite
2010-01-17 12:10 . 2010-01-17 12:10 -------- d-----w- c:\documents and settings\All Users\Data aplikacĂ­
2010-01-17 12:07 . 2008-04-13 19:45 26112 ----a-w- c:\windows\system32\drivers\usbser.sys
2010-01-17 12:07 . 2008-04-13 19:45 26112 ----a-w- c:\windows\system32\dllcache\usbser.sys
2010-01-17 12:06 . 2008-03-21 12:57 14640 ------w- c:\windows\system32\spmsgXP_2k3.dll
2010-01-17 12:01 . 2010-01-17 13:25 -------- d-----w- c:\program files\Common Files\Nokia
2010-01-17 12:00 . 2010-01-17 13:26 -------- d-----w- c:\program files\DIFX
2010-01-17 12:00 . 2008-08-26 08:26 18816 ----a-w- c:\windows\system32\drivers\pccsmcfd.sys
2010-01-17 12:00 . 2010-01-17 12:00 -------- d-----w- c:\program files\PC Connectivity Solution
2010-01-17 12:00 . 2009-10-06 10:56 8320 ----a-w- c:\windows\system32\drivers\nmwcdnsuc.sys
2010-01-17 12:00 . 2009-10-06 10:56 136704 ----a-w- c:\windows\system32\drivers\nmwcdnsu.sys
2010-01-17 12:00 . 2009-10-06 10:52 7936 ----a-w- c:\windows\system32\drivers\usbser_lowerfltj.sys
2010-01-17 12:00 . 2009-10-06 10:52 7936 ----a-w- c:\windows\system32\drivers\usbser_lowerflt.sys
2010-01-17 12:00 . 2009-10-06 10:52 22016 ----a-w- c:\windows\system32\drivers\ccdcmbo.sys
2010-01-17 12:00 . 2009-10-06 10:55 1112288 ----a-w- c:\windows\system32\wdfcoinstaller01007.dll
2010-01-17 12:00 . 2009-10-06 10:52 660480 ----a-w- c:\windows\system32\nmwcdcocls.dll
2010-01-17 12:00 . 2009-10-06 10:52 17664 ----a-w- c:\windows\system32\drivers\ccdcmb.sys
2010-01-17 12:00 . 2009-10-06 10:52 91136 ----a-w- c:\windows\system32\nmwcdcls.dll
2010-01-17 11:59 . 2010-01-17 13:25 -------- d-----w- c:\program files\Nokia
2010-01-17 11:49 . 2006-08-29 14:56 32377 ----a-w- c:\windows\system32\drivers\prodigy.sys
2010-01-17 11:49 . 2010-01-17 11:49 -------- d-----w- c:\program files\NSS
2010-01-14 11:36 . 2010-01-14 12:16 -------- d-----w- c:\program files\SpeedFan
2010-01-14 11:21 . 2010-02-10 20:36 -------- d-----w- c:\program files\trend micro
2010-01-14 11:21 . 2010-01-14 11:21 -------- d-----w- C:\rsit
2010-01-13 14:37 . 2009-12-12 14:15 178176 ----a-w- c:\windows\system32\unrar.dll
2010-01-13 14:37 . 2010-01-13 14:39 -------- d-----w- c:\program files\K-Lite Codec Pack
2010-01-13 13:41 . 2010-01-13 13:41 -------- d-----w- c:\program files\Intel
2010-01-13 13:41 . 2010-01-13 13:41 -------- d-----w- C:\Intel
2010-01-13 13:39 . 2010-02-09 17:16 -------- d-----w- C:\DeskUpdate.tmp
2010-01-13 13:31 . 2009-11-21 16:03 471552 ------w- c:\windows\system32\dllcache\aclayers.dll
2010-01-12 13:55 . 2009-03-27 00:16 12672 ----a-w- c:\windows\system32\drivers\cpuz132_x32.sys
2010-01-12 13:55 . 2010-01-12 13:55 -------- d-----w- c:\program files\CPUID

.
(((((((((((((((((((((((((((((((((((((((( Find3M výpis ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2010-02-09 17:16 . 2009-05-21 15:01 -------- d-----w- c:\program files\Common Files\InstallShield
2010-01-25 15:18 . 2007-10-23 11:46 -------- d-----w- c:\program files\Mozilla Thunderbird
2010-01-25 14:42 . 2007-10-23 12:33 -------- d-----w- c:\program files\Burn4Free
2010-01-25 14:37 . 2007-10-23 12:33 -------- d-----w- c:\program files\Burn4Free Toolbar
2010-01-17 12:08 . 2004-09-08 14:27 89964 ----a-w- c:\windows\system32\perfc005.dat
2010-01-17 12:08 . 2004-09-08 14:27 455662 ----a-w- c:\windows\system32\perfh005.dat
2010-01-17 12:06 . 2010-01-17 12:06 0 ---ha-w- c:\windows\system32\drivers\Msft_Kernel_ccdcmb_01007.Wdf
2010-01-17 12:06 . 2010-01-17 12:06 0 ---ha-w- c:\windows\system32\drivers\MsftWdf_Kernel_01007_Coinstaller_Critical.Wdf
2010-01-11 11:48 . 2010-01-11 11:48 -------- d-----w- c:\program files\NetTime
2009-12-21 19:08 . 2004-09-08 14:27 916480 ----a-w- c:\windows\system32\wininet.dll
2009-12-15 20:47 . 2007-12-13 17:07 -------- d-----w- c:\program files\Microsoft Works
2009-11-24 23:54 . 2007-12-18 16:58 1280480 ----a-w- c:\windows\system32\aswBoot.exe
2009-11-24 23:51 . 2007-12-18 16:58 93424 ----a-w- c:\windows\system32\drivers\aswmon.sys
2009-11-24 23:49 . 2007-12-18 16:58 48560 ----a-w- c:\windows\system32\drivers\aswTdi.sys
2009-11-24 23:48 . 2007-12-18 16:58 23120 ----a-w- c:\windows\system32\drivers\aswRdr.sys
2009-11-24 23:47 . 2007-12-18 16:58 27408 ----a-w- c:\windows\system32\drivers\aavmker4.sys
2009-11-24 23:47 . 2007-12-18 16:58 97480 ----a-w- c:\windows\system32\AvastSS.scr
2009-11-21 16:03 . 2004-09-08 14:26 471552 ----a-w- c:\windows\AppPatch\aclayers.dll
.

------- Sigcheck -------

[-] 2009-05-10 . 70E758EACB9AB931C7E0E48EC3042950 . 295936 . . [5.1.2600.5512] . . c:\windows\system32\termsrv.dll
[7] 2004-08-18 . 2F5919F2F6EE7A845893D9C3AA2BC56A . 295936 . . [5.1.2600.2180] . . c:\windows\$NtServicePackUninstall$\termsrv.dll
.
(((((((((((((((((((((((((((((((((( Spouštěcí body v registru )))))))))))))))))))))))))))))))))))))))))))))
.
.
*Poznámka* prázdné záznamy a legitimní výchozí údaje nejsou zobrazeny.
REGEDIT4

[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{D187A56B-A33F-4CBE-9D77-459FC0BAE012}]
2010-01-25 14:37 815104 ----a-w- c:\program files\Burn4Free Toolbar\v3.3.0.3\Burn4Free_Toolbar.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
"{4F11ACBB-393F-4C86-A214-FF3D0D155CC3}"= "c:\program files\Burn4Free Toolbar\v3.3.0.3\Burn4Free_Toolbar.dll" [2010-01-25 815104]

[HKEY_CLASSES_ROOT\clsid\{4f11acbb-393f-4c86-a214-ff3d0d155cc3}]

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Skype"="c:\program files\Skype\Phone\Skype.exe" [2007-12-07 21686568]
"PC Suite Tray"="c:\program files\Nokia\Nokia PC Suite 7\PCSuite.exe" [2009-11-11 1451520]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"NokiaMServer"="c:\program files\Common Files\Nokia\MPlatform\NokiaMServer" [X]
"IgfxTray"="c:\windows\system32\igfxtray.exe" [2007-02-26 131072]
"HotKeysCmds"="c:\windows\system32\hkcmd.exe" [2007-02-26 155648]
"Persistence"="c:\windows\system32\igfxpers.exe" [2007-02-26 131072]
"RTHDCPL"="RTHDCPL.EXE" [2006-06-28 16248320]
"HP Software Update"="c:\program files\HP\HP Software Update\HPWuSchd2.exe" [2005-05-11 49152]
"avast!"="c:\progra~1\ALWILS~1\Avast4\ashDisp.exe" [2009-11-24 81000]
"SunJavaUpdateSched"="c:\program files\Java\jre6\bin\jusched.exe" [2009-10-11 149280]
"NetTime"="c:\program files\NetTime\NetTime.exe" [2003-01-30 3791032]
"NvCplDaemon"="c:\windows\system32\NvCpl.dll" [2008-03-19 13524992]
"nwiz"="nwiz.exe" [2008-03-19 1630208]
"NvMediaCenter"="c:\windows\system32\NvMcTray.dll" [2008-03-19 86016]

[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="c:\windows\system32\CTFMON.EXE" [2008-04-14 15360]

c:\documents and settings\All Users\Nabˇdka Start\Programy\Po spuçtŘnˇ\
Service Manager.lnk - c:\program files\Microsoft SQL Server\80\Tools\Binn\sqlmangr.exe [2002-12-17 74308]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Wdf01000.sys]
@="Driver"

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe Reader Speed Launcher]
2007-05-11 12:06 40048 ----a-w- c:\program files\Adobe\Reader 8.0\Reader\reader_sl.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\MSMSGS]
2008-04-14 03:22 1695232 ----a-w- c:\program files\Messenger\msmsgs.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SkyTel]
2006-05-16 16:04 2879488 ----a-w- c:\windows\SkyTel.exe

[HKEY_LOCAL_MACHINE\software\microsoft\security center]
"AntiVirusOverride"=dword:00000001

[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\SymantecFirewall]
"DisableMonitoring"=dword:00000001

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\system32\\sessmgr.exe"=
"%windir%\\Network Diagnostic\\xpnetdiag.exe"=
"c:\\Program Files\\UltraVnc\\vncviewer.exe"=
"c:\\Program Files\\Microsoft Office\\Office12\\OUTLOOK.EXE"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hpqtra08.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hpqste08.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hpofxm08.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hposfx08.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hposid01.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hpqscnvw.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hpqkygrp.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hpqCopy.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hpfccopy.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hpzwiz01.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\Unload\\HpqPhUnl.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\Unload\\HpqDIA.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hpoews01.exe"=
"c:\\WINDOWS\\system32\\dpvsetup.exe"=
"c:\\Program Files\\Skype\\Phone\\Skype.exe"=
"c:\\Program Files\\Mozilla Firefox\\firefox.exe"=
"c:\\Program Files\\SkylaPro II\\SKYLAII.exe"=
"c:\\Program Files\\NetTime\\NetTime.exe"=
"c:\\Program Files\\Nokia\\Nokia Ovi Suite\\NokiaOviSuite.exe"=
"c:\\Program Files\\Common Files\\Nokia\\Service Layer\\A\\nsl_host_process.exe"=
"c:\\Program Files\\Nokia\\Nokia Software Updater\\nsu_ui_client.exe"=

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\GloballyOpenPorts\List]
"5900:TCP"= 5900:TCP:vnc5900
"5800:TCP"= 5800:TCP:vnc5800
"3389:TCP"= 3389:TCP:@xpsp2res.dll,-22009

R1 aswSP;avast! Self Protection;c:\windows\system32\drivers\aswSP.sys [1.4.2008 8:52 114768]
R2 Angelnt;Angelnt;c:\windows\system32\drivers\ANGELNT.SYS [9.10.2009 6:29 51072]
R2 aswFsBlk;aswFsBlk;c:\windows\system32\drivers\aswFsBlk.sys [1.4.2008 8:52 20560]
R2 cpuz132;cpuz132;c:\windows\system32\drivers\cpuz132_x32.sys [12.1.2010 14:55 12672]
R2 MSSQL$SKYLA;MSSQL$SKYLA;c:\program files\Microsoft SQL Server\MSSQL$SKYLA\Binn\sqlservr.exe -sSKYLA --> c:\program files\Microsoft SQL Server\MSSQL$SKYLA\Binn\sqlservr.exe -sSKYLA [?]
R2 NetTimeSvc;NetTime;c:\program files\NetTime\NeTmSvNT.exe [30.1.2003 23:35 452096]
R2 Oko3;Oko3;c:\program files\SkylaPro II\Oko3\Oko3.exe [7.12.2004 13:03 147456]
R2 SkylaDataService;SkylaDataService;c:\program files\SkylaPro II\SkylaDataService.exe [7.12.2004 12:58 20480]
R2 SkylaPortWriterService;SkylaPortWriterService;c:\program files\SkylaPro II\SkylaPortWriterService.exe [7.12.2004 12:58 20480]
R2 SkylaTimerService;Skyla Timer Service;c:\program files\SkylaPro II\SkylaTimerService.exe [7.12.2004 12:58 28672]
S3 esihdrv;esihdrv;\??\c:\docume~1\UVT\LOCALS~1\Temp\esihdrv.sys --> c:\docume~1\UVT\LOCALS~1\Temp\esihdrv.sys [?]
S3 nmwcdnsu;Nokia USB Flashing Phone Parent;c:\windows\system32\drivers\nmwcdnsu.sys [17.1.2010 13:00 136704]
S3 nmwcdnsuc;Nokia USB Flashing Generic;c:\windows\system32\drivers\nmwcdnsuc.sys [17.1.2010 13:00 8320]
S3 SQLAgent$SKYLA;SQLAgent$SKYLA;c:\program files\Microsoft SQL Server\MSSQL$SKYLA\Binn\sqlagent.EXE -i SKYLA --> c:\program files\Microsoft SQL Server\MSSQL$SKYLA\Binn\sqlagent.EXE -i SKYLA [?]
.
.
------- Doplňkový sken -------
.
uStart Page = hxxp://www.msn.com
IE: E&xportovat do aplikace Microsoft Excel - c:\progra~1\MICROS~2\Office12\EXCEL.EXE/3000
FF - ProfilePath - c:\documents and settings\UVT\Data aplikací\Mozilla\Firefox\Profiles\t61vu3hl.default\
FF - prefs.js: browser.startup.homepage - http://www.seznam.cz
FF - plugin: c:\program files\Mozilla Firefox\plugins\np-mswmp.dll
FF - HiddenExtension: Microsoft .NET Framework Assistant: {20a82645-c095-46ed-80e3-08825760534b} - c:\windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\

---- NASTAVENÍ FIREFOXU ----
c:\program files\Mozilla Firefox\defaults\pref\firefox-l10n.js - pref("browser.fixup.alternate.suffix", ".cz");
.

**************************************************************************

catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2010-02-10 22:27
Windows 5.1.2600 Service Pack 3 NTFS

skenování skrytých procesů ...

skenování skrytých položek 'Po spuštění' ...

skenování skrytých souborů ...

sken byl úspešně dokončen
skryté soubory: 0

**************************************************************************

[HKEY_LOCAL_MACHINE\System\ControlSet001\Services\W32Time\TimeProviders\NtpClient] "SpecialPollInterval"=dword:0002a300 [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Services\W32Time]
--
"ServiceDll"="%systemroot%\system32\w32time.dll"

[HKEY_LOCAL_MACHINE\System\ControlSet002\Services\W32Time\TimeProviders\NtpClient] "SpecialPollInterval"=dword:0002a300 [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Services\W32Time]
--
[HKEY_LOCAL_MACHINE\System\ControlSet002\Services\{15AAF03C-8AF2-44D6-A7CA-E151BB8E305E}]

[HKEY_LOCAL_MACHINE\System\ControlSet003\Services\W32Time\TimeProviders\NtpClient] "SpecialPollInterval"=dword:0002a300 [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Services\W32Time]

[HKEY_LOCAL_MACHINE\System\ControlSet001\Services\W32Time\TimeProviders\NtpClient] "SpecialPollInterval"=dword:0002a300 [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Services\W32Time]

--

[HKEY_LOCAL_MACHINE\System\ControlSet002\Services\W32Time\TimeProviders\NtpClient] "SpecialPollInterval"=dword:0002a300 [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Services\W32Time]

--

[HKEY_LOCAL_MACHINE\System\ControlSet003\Services\W32Time\TimeProviders\NtpClient] "SpecialPollInterval"=dword:0002a300 [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Services\W32Time]
.
--------------------- Knihovny navázané na běžící procesy ---------------------

- - - - - - - > 'explorer.exe'(3188)
c:\windows\system32\webcheck.dll
c:\windows\system32\WPDShServiceObj.dll
c:\program files\Nokia\Nokia PC Suite 7\PhoneBrowser.dll
c:\program files\Nokia\Nokia PC Suite 7\NGSCM.DLL
c:\program files\Nokia\Nokia PC Suite 7\Lang\PhoneBrowser_cze.nlr
c:\program files\Nokia\Nokia PC Suite 7\Resource\PhoneBrowser_Nokia.ngr
c:\windows\system32\PortableDeviceTypes.dll
c:\windows\system32\PortableDeviceApi.dll
.
------------------------ Jiné spuštené procesy ------------------------
.
c:\program files\Alwil Software\Avast4\aswUpdSv.exe
c:\program files\Alwil Software\Avast4\ashServ.exe
c:\program files\Java\jre6\bin\jqs.exe
c:\program files\Common Files\Microsoft Shared\VS7DEBUG\mdm.exe
c:\program files\Microsoft SQL Server\MSSQL$SKYLA\Binn\sqlservr.exe
c:\windows\system32\nvsvc32.exe
c:\windows\system32\HPZipm12.exe
c:\program files\Spyware Terminator\sp_rsser.exe
c:\windows\RTHDCPL.EXE
c:\program files\Common Files\Nokia\MPlatform\NokiaMServer.exe
c:\program files\Fujitsu\SystemDiagnostics\OnlineDiagnostic\TestManager\TestHandler.exe
c:\windows\system32\RUNDLL32.EXE
c:\program files\Skype\Plugin Manager\skypePM.exe
c:\program files\SkylaPro II\Oko3\TransServer2.exe
c:\program files\Alwil Software\Avast4\ashMaiSv.exe
c:\program files\Alwil Software\Avast4\ashWebSv.exe
c:\windows\system32\wbem\wmiapsrv.exe
c:\program files\PC Connectivity Solution\ServiceLayer.exe
c:\program files\PC Connectivity Solution\Transports\NclUSBSrv.exe
c:\program files\PC Connectivity Solution\Transports\NclRSSrv.exe
.
**************************************************************************
.
Celkový čas: 2010-02-10 22:30:54 - počítač byl restartován
ComboFix-quarantined-files.txt 2010-02-10 21:30

Před spuštěním: Volných bajtů: 10 568 523 776
Po spuštění: Volných bajtů: 12 089 630 720

- - End Of File - - E6E7DC2F74163729D0B6E9AFE96C51B1

4 položky smazány, zbytek logu vypadá čistý. Nastala nějaká změna?

vyzkouším a dám vědět, problém je že se to chovalo takto:

občas zmizí obraz na monitoru a objeví se není signál........vyloučené věci: jiný monitor, jiný kabel k monitoru, externí grafická karta, napětí v zásuvce.......někdy to běží 10 minut někdy ani to ne, padá to nahodile, při přihlášení uživatele, při spuštění firefoxu a tak podobně, už si myslím že tam jsou nějaké vlny které to ruší ale dělá to až poslední měsíc. Pokud ho přenesu do jiné místnosti asi 20 metrů vzdálené tak kupodivu běží bez problémů..............
ještě upřesním, spadne obraz, nejde vypnout ani tlačítkem, musím vytáhnout ze zásuvky a pokud zapojím zpět tak hned začne startovat sám od sebe a to musím udělat třeba 5x než naběhne, přenesu, dvakrát ho vypnu ze sítě a běží v pohodě, odnesu na původní místo a zase spadne..............

zkusím ho zase umístit na původní místo a uvidím

Jinak díky moc

Tak nevím, zase to tam spadlo, odnesl jsem ho jinam a zase běží, asi to bude něco s hardwarem, už opravdu nevím

Ano, vypadá to opravdu na hardware, zvláště tehdy, pokud to nejde vypnout ani tlačítkem. Zkontrolujte, zda jsou správně zastrčeny všechny kabely v konektorech.

To už jsem vše kontroloval, mě je divné že to na jiném místě beží, původně jsem měl podezření na integrovanou grafiku, když jsem tam přidal grafickou kartu tak se to rozeběhlo, ale stejně to padá, respektive video výstup.........každopádně na interní grafiku to nejede vůbec, říkám si deska, ale proč to jinde běží..........

Tohle nezjistíte jinak, než postupnou výměnou dílů. Postupoval bych: Zdroj - paměti - grafika - odpojení opt. mechanik - odpojení ev. dalších periferií. Až nebude co vyměnit, či odpojit, zbude MB, příp. CPU. Je to dost mravenčí práce.

Je mě to jasné, každopádně děkuji

Nemáte zač!