plug and play BIOS extension

[DutchCZE]

Dobrý den,
ve spravci zařízení je v "systémová zařízení" žlutý vykřičník u "plug and play BIOS extensions". PC začal "zlobit" při hře Call of Duty MW2 kde naskočila chybová hláška ohledně GK, udělal jsem udate driverů chybová hláška sice zmizela ale ve hře mám místo předcházejících 122 fps stabilních nyní je 30-80 fps. Zkoušel jsem celkem šest jiných ovladačů a výsledek stále stejný. Postup: Odinstal ovladačů, vyčištění registrů CCleanem, restart, instal nových driveru a restart následně test ve hře. Nepomohlo nic
Pátral jsem v PC a nalezl uvedený žlutý vykřičník, prohnal googlem a našel rady že to může dělat Alcohol120 který jsem následně odinstaloval ale problém trvá dál. Zkoušel jsem opět google ale pro mne bez výsledku. Netuším jestli je nějaká spojitost nízkých fps s "plug and play BIOS extension".
Nadále v ten samý čas začal Thunderbird odmítat spuštění s chyb.hláškou: "Aplikace nebo knihovna DLL C:\Program files\Mozilla Thunderbird\ssl3.dll není platnou bitovou kopií systému windows. Porvnejte soubor s instalační disketou." Poprvé jsem udělal reinstal Thundebirda a vydrželo to dva dny a je tu ten samý problém opět.
Obracím se na Vás s prosbou o pomoc. Dříve než jsem Vás začal otravovat jsme pročítal různá fora ale bez nějakého výsledku
Zde je log:

Logfile of random's system information tool 1.08 (written by random/random)
Run by Jan at 2011-03-13 23:02:28
Systém Microsoft Windows XP Professional Service Pack 3
System drive C: has 7 GB (10%) free of 70 GB
Total RAM: 2046 MB (74% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 23:02:30, on 13.3.2011
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP3 (6.00.2900.5512)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Common Files\Acronis\Schedule2\schedul2.exe
C:\Program Files\Common Files\Acronis\CDP\afcdpsrv.exe
C:\WINDOWS\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Google\Update\GoogleUpdate.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\PnkBstrA.exe
C:\Program Files\Firewall\SbPFLnch.exe
C:\Program Files\Firewall\SbPFSvc.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\CTHELPER.EXE
C:\WINDOWS\system32\ctfmon.exe
F:\!!! ETcko od Peti\etmin\etmin.exe
C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\ccc.exe
C:\Program Files\Firewall\SbPFCl.exe
C:\WINDOWS\System32\wbem\wmiapsrv.exe
C:\Sandra Lite 2010c\RpcAgentSrv.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\Mozilla Firefox\plugin-container.exe
C:\Program Files\DAP\DAP.EXE
C:\Documents and Settings\Jan\Plocha\stahování\RSIT.exe
C:\Program Files\trend micro\Jan.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Odkazy
R3 - URLSearchHook: (no name) - {855F3B16-6D32-4fe6-8A56-BBB695989046} - (no file)
R3 - URLSearchHook: (no name) - - (no file)
O2 - BHO: HP Print Enhancer - {0347C33E-8762-4905-BF09-768834316C61} - C:\Program Files\HP\Digital Imaging\Smart Web Printing\hpswp_printenhancer.dll
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\PROGRA~1\MICROS~2\Office12\GRA8E1~1.DLL
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
O2 - BHO: GrabberObj Class - {FF7C3CF0-4B15-11D1-ABED-709549C10000} - (no file)
O2 - BHO: HP Smart BHO Class - {FFFFFFFF-CF4E-4F2B-BDC2-0E72E116A856} - C:\Program Files\HP\Digital Imaging\Smart Web Printing\hpswp_BHO.dll
O4 - HKLM\..\Run: [WINDVDPatch] CTHELPER.EXE
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKLM\..\Run: [StartCCC] "C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [Google Update] "C:\Documents and Settings\Jan\Local Settings\Data aplikací\Google\Update\GoogleUpdate.exe" /c
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'Default user')
O4 - Startup: Zástupce - etmin.lnk = F:\!!! ETcko od Peti\etmin\etmin.exe
O8 - Extra context menu item: &Clean Traces - C:\Program Files\DAP\Privacy Package\dapcleanerie.htm
O8 - Extra context menu item: &Download with &DAP - C:\Program Files\DAP\dapextie.htm
O8 - Extra context menu item: Analyzovat LeechGetem - file://C:\Program Files\LeechGet 2009\\Parser.html
O8 - Extra context menu item: Download &all with DAP - C:\Program Files\DAP\dapextie2.htm
O8 - Extra context menu item: Download LeechGetem - file://C:\Program Files\LeechGet 2009\\AddUrl.html
O8 - Extra context menu item: Download s průvodcem LeechGetu - file://C:\Program Files\LeechGet 2009\\Wizard.html
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000
O9 - Extra button: Odeslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: Od&eslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll
O9 - Extra button: ICQ7.2 - {72EFBFE4-C74F-4187-AEFD-73EA3BE968D6} - C:\Program Files\ICQ7.2\ICQ.exe
O9 - Extra 'Tools' menuitem: ICQ7.2 - {72EFBFE4-C74F-4187-AEFD-73EA3BE968D6} - C:\Program Files\ICQ7.2\ICQ.exe
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL
O9 - Extra button: Show or hide HP Smart Web Printing - {DDE87865-83C5-48c4-8357-2F5B1AA84522} - C:\Program Files\HP\Digital Imaging\Smart Web Printing\hpswp_BHO.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\PROGRA~1\MICROS~2\Office12\GR99D3~1.DLL
O22 - SharedTaskScheduler: Browseui preloader - {438755C2-A8BA-11D1-B96B-00A0C90312E1} - C:\WINDOWS\System32\browseui.dll
O22 - SharedTaskScheduler: Proces mezipaměti kategorií součástí - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\WINDOWS\System32\browseui.dll
O23 - Service: Acronis Scheduler2 Service (AcrSch2Svc) - Acronis - C:\Program Files\Common Files\Acronis\Schedule2\schedul2.exe
O23 - Service: Acronis Nonstop Backup service (afcdpsrv) - Acronis - C:\Program Files\Common Files\Acronis\CDP\afcdpsrv.exe
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: Služba Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe
O23 - Service: PnkBstrA - Unknown owner - C:\WINDOWS\system32\PnkBstrA.exe
O23 - Service: SiSoftware Deployment Agent Service (SandraAgentSrv) - SiSoftware - C:\Sandra Lite 2010c\RpcAgentSrv.exe
O23 - Service: SbPF.Launcher - Sunbelt Software, Inc. - C:\Program Files\Firewall\SbPFLnch.exe
O23 - Service: Sunbelt Personal Firewall 4 (SPF4) - Sunbelt Software, Inc. - C:\Program Files\Firewall\SbPFSvc.exe

--
End of file - 7442 bytes

======Scheduled tasks folder======

C:\WINDOWS\tasks\GoogleUpdateTaskUserS-1-5-21-1844237615-839522115-2035808451-1003Core.job
C:\WINDOWS\tasks\GoogleUpdateTaskUserS-1-5-21-1844237615-839522115-2035808451-1003UA.job

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{0347C33E-8762-4905-BF09-768834316C61}]
HP Print Enhancer - C:\Program Files\HP\Digital Imaging\Smart Web Printing\hpswp_printenhancer.dll [2009-10-22 328248]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
Adobe PDF Link Helper - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2010-09-22 75200]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{72853161-30C5-4D22-B7F9-0BBC1D38A37E}]
Groove GFS Browser Helper - C:\PROGRA~1\MICROS~2\Office12\GRA8E1~1.DLL [2006-10-26 2210608]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre6\bin\jp2ssv.dll [2010-12-07 41760]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{E7E6F031-17CE-4C07-BC86-EABFE594F69C}]
JQSIEStartDetectorImpl Class - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll [2010-12-07 79648]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{FF7C3CF0-4B15-11D1-ABED-709549C10000}]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{FFFFFFFF-CF4E-4F2B-BDC2-0E72E116A856}]
HP Smart BHO Class - C:\Program Files\HP\Digital Imaging\Smart Web Printing\hpswp_BHO.dll [2009-10-22 517688]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"WINDVDPatch"=C:\WINDOWS\system32\CTHELPER.EXE [2002-07-02 24576]
"Adobe Reader Speed Launcher"=C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe [2011-01-31 35760]
"Adobe ARM"=C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2010-09-20 932288]
"StartCCC"=C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [2011-01-26 98304]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"ctfmon.exe"=C:\WINDOWS\system32\ctfmon.exe [2008-04-14 15360]
"Google Update"=C:\Documents and Settings\Jan\Local Settings\Data aplikací\Google\Update\GoogleUpdate.exe [2010-10-19 136176]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Acronis Scheduler2 Service]
C:\Program Files\Common Files\Acronis\Schedule2\schedhlp.exe [2010-03-27 362232]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\GrooveMonitor]
C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe [2006-10-26 31016]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\TrueImageMonitor.exe]
C:\Program Files\Acronis\TrueImageHome\TrueImageMonitor.exe [2010-03-27 5107232]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^All Users^Nabídka Start^Programy^Po spuštění^HP Digital Imaging Monitor.lnk]
C:\PROGRA~1\HP\DIGITA~1\bin\hpqtra08.exe [2009-11-18 275072]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^All Users^Nabídka Start^Programy^Po spuštění^InterVideo WinCinema Manager.lnk]
C:\PROGRA~1\INTERV~1\Common\Bin\WINCIN~1.EXE [2004-07-12 237568]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^Jan^Nabídka Start^Programy^Po spuštění^Výřezy obrazovky a spuštění aplikace OneNote 2007.lnk]
C:\PROGRA~1\MICROS~2\Office12\ONENOTEM.EXE [2006-10-26 98632]

C:\Documents and Settings\Jan\Nabídka Start\Programy\Po spuštění
Zástupce - etmin.lnk - F:\!!! ETcko od Peti\etmin\etmin.exe

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\AtiExtEvent]
C:\WINDOWS\system32\Ati2evxx.dll [2011-01-26 188416]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{B5A7F190-DDA6-4420-B3BA-52453494E6CD}"=C:\PROGRA~1\MICROS~2\Office12\GRA8E1~1.DLL [2006-10-26 2210608]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=323
"NoDriveAutoRun"=67108863
"NoDrives"=0

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveAutoRun"=67108863
"NoDriveTypeAutoRun"=323
"NoDrives"=0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe"="C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe:*:Enabled:hpqtra08.exe"
"C:\Program Files\HP\Digital Imaging\bin\hpqste08.exe"="C:\Program Files\HP\Digital Imaging\bin\hpqste08.exe:*:Enabled:hpqste08.exe"
"C:\Program Files\HP\Digital Imaging\bin\hposid01.exe"="C:\Program Files\HP\Digital Imaging\bin\hposid01.exe:*:Enabled:hposid01.exe"
"C:\Program Files\HP\Digital Imaging\bin\hpqkygrp.exe"="C:\Program Files\HP\Digital Imaging\bin\hpqkygrp.exe:*:Enabled:hpqkygrp.exe"
"C:\Program Files\HP\Digital Imaging\bin\hpqcopy2.exe"="C:\Program Files\HP\Digital Imaging\bin\hpqcopy2.exe:*:Enabled:hpqcopy2.exe"
"C:\Program Files\HP\Digital Imaging\bin\hpfcCopy.exe"="C:\Program Files\HP\Digital Imaging\bin\hpfcCopy.exe:*:Enabled:hpfccopy.exe"
"C:\Program Files\HP\Digital Imaging\bin\hpoews01.exe"="C:\Program Files\HP\Digital Imaging\bin\hpoews01.exe:*:Enabled:hpoews01.exe"
"C:\Program Files\HP\Digital Imaging\bin\hpiscnapp.exe"="C:\Program Files\HP\Digital Imaging\bin\hpiscnapp.exe:*:Enabled:hpiscnapp.exe"
"C:\Program Files\HP\Digital Imaging\bin\hpqgplgtupl.exe"="C:\Program Files\HP\Digital Imaging\bin\hpqgplgtupl.exe:*:Enabled:hpqgplgtupl.exe"
"C:\Program Files\HP\Digital Imaging\bin\hpqgpc01.exe"="C:\Program Files\HP\Digital Imaging\bin\hpqgpc01.exe:*:Enabled:hpqgpc01.exe"
"C:\Program Files\HP\Digital Imaging\bin\hpqusgm.exe"="C:\Program Files\HP\Digital Imaging\bin\hpqusgm.exe:*:Enabled:hpqusgm.exe"
"C:\Program Files\HP\Digital Imaging\bin\hpqusgh.exe"="C:\Program Files\HP\Digital Imaging\bin\hpqusgh.exe:*:Enabled:hpqusgh.exe"
"C:\Program Files\HP\HP Software Update\hpwucli.exe"="C:\Program Files\HP\HP Software Update\hpwucli.exe:*:Enabled:hpwucli.exe"
"C:\Program Files\HP\Digital Imaging\smart web printing\SmartWebPrintExe.exe"="C:\Program Files\HP\Digital Imaging\smart web printing\SmartWebPrintExe.exe:*:Enabled:smartwebprintexe.exe"
"C:\Program Files\HLSW\hlsw.exe"="C:\Program Files\HLSW\hlsw.exe:*:Enabled:HLSW Application"
"F:\!!! ETcko od Peti\ET.exe"="F:\!!! ETcko od Peti\ET.exe:*:Enabled:ET"
"C:\WINDOWS\system32\PnkBstrA.exe"="C:\WINDOWS\system32\PnkBstrA.exe:*:Enabled:PnkBstrA"
"C:\WINDOWS\system32\PnkBstrB.exe"="C:\WINDOWS\system32\PnkBstrB.exe:*:Enabled:PnkBstrB"
"C:\Program Files\ICQ7.2\ICQ.exe"="C:\Program Files\ICQ7.2\ICQ.exe:*:Enabled:ICQ7.2"
"C:\Program Files\ICQ7.2\aolload.exe"="C:\Program Files\ICQ7.2\aolload.exe:*:Enabled:aolload.exe"
"C:\Program Files\Activision\Call of Duty 4 - Modern Warfare\iw3mp.exe"="C:\Program Files\Activision\Call of Duty 4 - Modern Warfare\iw3mp.exe:*:Enabled:Call of Duty(R) 4 - Modern Warfare(TM) "
"C:\Program Files\Microsoft Office\Office12\OUTLOOK.EXE"="C:\Program Files\Microsoft Office\Office12\OUTLOOK.EXE:*:Enabled:Microsoft Office Outlook"
"C:\Program Files\Microsoft Office\Office12\GROOVE.EXE"="C:\Program Files\Microsoft Office\Office12\GROOVE.EXE:*:Enabled:Microsoft Office Groove"
"C:\Program Files\Microsoft Office\Office12\ONENOTE.EXE"="C:\Program Files\Microsoft Office\Office12\ONENOTE.EXE:*:Enabled:Microsoft Office OneNote"
"C:\Sandra Lite 2010c\RpcAgentSrv.exe"="C:\Sandra Lite 2010c\RpcAgentSrv.exe:*:Enabled:SiSoftware Deployment Agent Service"
"C:\Sandra Lite 2010c\WNt500x86\sandra.mui"="C:\Sandra Lite 2010c\WNt500x86\sandra.mui:*:Enabled:SiSoftware Sandra Agent Service"
"C:\Program Files\Google\Google Earth\plugin\geplugin.exe"="C:\Program Files\Google\Google Earth\plugin\geplugin.exe:*:Enabled:Google Earth"
"C:\Program Files\InterVideo\DVD6\WinDVD.exe"="C:\Program Files\InterVideo\DVD6\WinDVD.exe:*:Enabled:WinDVD"
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"E:\Battlefield2\BF2.exe"="E:\Battlefield2\BF2.exe:*:Enabled:Battlefield 2"
"C:\Sandra Lite 2010c\WNt500x86\RpcSandraSrv.exe"="C:\Sandra Lite 2010c\WNt500x86\RpcSandraSrv.exe:*:Enabled:SiSoftware Sandra Agent Service"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe"="C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe:*:Enabled:hpqtra08.exe"
"C:\Program Files\HP\Digital Imaging\bin\hpqste08.exe"="C:\Program Files\HP\Digital Imaging\bin\hpqste08.exe:*:Enabled:hpqste08.exe"
"C:\Program Files\HP\Digital Imaging\bin\hposid01.exe"="C:\Program Files\HP\Digital Imaging\bin\hposid01.exe:*:Enabled:hposid01.exe"
"C:\Program Files\HP\Digital Imaging\bin\hpqkygrp.exe"="C:\Program Files\HP\Digital Imaging\bin\hpqkygrp.exe:*:Enabled:hpqkygrp.exe"
"C:\Program Files\HP\Digital Imaging\bin\hpqcopy2.exe"="C:\Program Files\HP\Digital Imaging\bin\hpqcopy2.exe:*:Enabled:hpqcopy2.exe"
"C:\Program Files\HP\Digital Imaging\bin\hpfcCopy.exe"="C:\Program Files\HP\Digital Imaging\bin\hpfcCopy.exe:*:Enabled:hpfccopy.exe"
"C:\Program Files\HP\Digital Imaging\bin\hpoews01.exe"="C:\Program Files\HP\Digital Imaging\bin\hpoews01.exe:*:Enabled:hpoews01.exe"
"C:\Program Files\HP\Digital Imaging\bin\hpiscnapp.exe"="C:\Program Files\HP\Digital Imaging\bin\hpiscnapp.exe:*:Enabled:hpiscnapp.exe"
"C:\Program Files\HP\Digital Imaging\bin\hpqgplgtupl.exe"="C:\Program Files\HP\Digital Imaging\bin\hpqgplgtupl.exe:*:Enabled:hpqgplgtupl.exe"
"C:\Program Files\HP\Digital Imaging\bin\hpqgpc01.exe"="C:\Program Files\HP\Digital Imaging\bin\hpqgpc01.exe:*:Enabled:hpqgpc01.exe"
"C:\Program Files\HP\Digital Imaging\bin\hpqusgm.exe"="C:\Program Files\HP\Digital Imaging\bin\hpqusgm.exe:*:Enabled:hpqusgm.exe"
"C:\Program Files\HP\Digital Imaging\bin\hpqusgh.exe"="C:\Program Files\HP\Digital Imaging\bin\hpqusgh.exe:*:Enabled:hpqusgh.exe"
"C:\Program Files\HP\HP Software Update\hpwucli.exe"="C:\Program Files\HP\HP Software Update\hpwucli.exe:*:Enabled:hpwucli.exe"
"C:\Program Files\HP\Digital Imaging\smart web printing\SmartWebPrintExe.exe"="C:\Program Files\HP\Digital Imaging\smart web printing\SmartWebPrintExe.exe:*:Enabled:smartwebprintexe.exe"
"C:\Program Files\ICQ7.2\ICQ.exe"="C:\Program Files\ICQ7.2\ICQ.exe:*:Enabled:ICQ7.2"
"C:\Program Files\ICQ7.2\aolload.exe"="C:\Program Files\ICQ7.2\aolload.exe:*:Enabled:aolload.exe"
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"

======List of files/folders created in the last 1 months======

2011-03-13 22:56:51 ----A---- C:\WINDOWS\system32\drivers\DrvAgent32.sys
2011-03-13 21:16:59 ----D---- C:\Program Files\Microsoft.NET
2011-03-13 20:33:06 ----D---- C:\Documents and Settings\All Users\Data aplikací\ATI
2011-03-13 20:31:27 ----D---- C:\Program Files\ATI Stream
2011-03-13 20:30:08 ----A---- C:\WINDOWS\system32\SETE.tmp
2011-03-13 20:30:08 ----A---- C:\WINDOWS\system32\SETB.tmp
2011-03-13 20:30:08 ----A---- C:\WINDOWS\system32\SET4D.tmp
2011-03-13 20:30:08 ----A---- C:\WINDOWS\system32\SET4A.tmp
2011-03-13 20:30:08 ----A---- C:\WINDOWS\system32\SET44.tmp
2011-03-13 20:30:08 ----A---- C:\WINDOWS\system32\SET41.tmp
2011-03-13 20:30:08 ----A---- C:\WINDOWS\system32\SET3E.tmp
2011-03-13 20:30:08 ----A---- C:\WINDOWS\system32\SET29.tmp
2011-03-13 20:30:08 ----A---- C:\WINDOWS\system32\SET17.tmp
2011-03-13 20:30:08 ----A---- C:\WINDOWS\system32\SET14.tmp
2011-03-13 20:30:04 ----A---- C:\WINDOWS\system32\ativvamv.dll
2011-03-02 20:30:19 ----D---- C:\Documents and Settings\Jan\Data aplikací\TeamViewer
2011-02-25 13:30:45 ----A---- C:\WINDOWS\system32\drivers\hidgame.sys
2011-02-24 10:30:01 ----D---- C:\Program Files\GameSpy Arcade
2011-02-23 14:12:26 ----D---- C:\Documents and Settings\All Users\Data aplikací\PDF reDirect
2011-02-23 14:11:35 ----D---- C:\Documents and Settings\Jan\Data aplikací\PDF reDirect
2011-02-23 14:11:33 ----D---- C:\Program Files\PDF reDirect
2011-02-23 13:34:13 ----D---- C:\Program Files\pdfsam

======List of files/folders modified in the last 1 months======

2011-03-13 23:02:28 ----D---- C:\Program Files\trend micro
2011-03-13 23:02:18 ----AD---- C:\Documents and Settings\All Users\Data aplikací\TEMP
2011-03-13 22:56:51 ----HD---- C:\WINDOWS\inf
2011-03-13 22:56:51 ----D---- C:\WINDOWS\system32\drivers
2011-03-13 22:45:08 ----D---- C:\WINDOWS\system32\CatRoot2
2011-03-13 22:44:55 ----D---- C:\WINDOWS\temp
2011-03-13 22:43:28 ----A---- C:\WINDOWS\{00000005-00000000-00000002-00001102-00000002-80661102}.BAK
2011-03-13 22:42:08 ----A---- C:\WINDOWS\SchedLgU.Txt
2011-03-13 22:41:12 ----D---- C:\Program Files\Alcohol Soft
2011-03-13 22:41:10 ----D---- C:\WINDOWS\system32
2011-03-13 22:16:32 ----A---- C:\Documents and Settings\All Users\Data aplikací\xml4E.tmp
2011-03-13 22:16:32 ----A---- C:\Documents and Settings\All Users\Data aplikací\xml11.tmp
2011-03-13 22:16:31 ----A---- C:\Documents and Settings\All Users\Data aplikací\xml4C.tmp
2011-03-13 22:12:11 ----D---- C:\WINDOWS
2011-03-13 22:07:57 ----RSHDC---- C:\WINDOWS\system32\dllcache
2011-03-13 22:07:43 ----D---- C:\Config.Msi
2011-03-13 22:07:41 ----SHD---- C:\WINDOWS\Installer
2011-03-13 22:01:12 ----D---- C:\Program Files\ATI
2011-03-13 21:43:15 ----HD---- C:\Program Files\InstallShield Installation Information
2011-03-13 21:21:03 ----A---- C:\WINDOWS\system32\PerfStringBackup.INI
2011-03-13 21:20:55 ----RSD---- C:\WINDOWS\assembly
2011-03-13 21:20:31 ----D---- C:\WINDOWS\system32\cs-CZ
2011-03-13 21:19:30 ----D---- C:\WINDOWS\WinSxS
2011-03-13 21:18:50 ----D---- C:\Documents and Settings\Jan\Data aplikací\ICQ
2011-03-13 21:17:29 ----D---- C:\WINDOWS\Microsoft.NET
2011-03-13 21:16:59 ----RD---- C:\Program Files
2011-03-13 21:13:56 ----D---- C:\Program Files\Mozilla Firefox
2011-03-13 20:51:52 ----D---- C:\Program Files\Common Files\InstallShield
2011-03-13 20:31:09 ----D---- C:\Program Files\ATI Technologies
2011-03-13 20:30:04 ----DC---- C:\WINDOWS\system32\DRVSTORE
2011-03-13 20:05:40 ----A---- C:\WINDOWS\GPInstall.exe
2011-03-13 20:03:38 ----D---- C:\WINDOWS\system32\CatRoot
2011-03-13 20:00:27 ----D---- C:\WINDOWS\system32\config
2011-03-13 20:00:17 ----D---- C:\WINDOWS\system32\wbem
2011-03-13 20:00:16 ----D---- C:\WINDOWS\Registration
2011-03-13 19:59:59 ----D---- C:\Program Files\Mozilla Thunderbird
2011-03-13 19:58:52 ----D---- C:\WINDOWS\system32\Restore
2011-03-13 19:44:53 ----D---- C:\WINDOWS\Prefetch
2011-03-13 02:05:53 ----D---- C:\Documents and Settings\Jan\Data aplikací\HLSW
2011-03-09 07:43:21 ----A---- C:\WINDOWS\system32\PnkBstrB.exe
2011-03-06 14:06:40 ----A---- C:\WINDOWS\NeroDigital.ini
2011-02-28 22:04:19 ----SD---- C:\Documents and Settings\Jan\Data aplikací\Microsoft
2011-02-24 10:30:13 ----D---- C:\WINDOWS\system32\DirectX
2011-02-23 13:44:46 ----D---- C:\Documents and Settings\Jan\Data aplikací\HPAppData
2011-02-23 13:40:57 ----D---- C:\Documents and Settings\Jan\Data aplikací\Adobe
2011-02-23 13:21:00 ----D---- C:\Documents and Settings\All Users\Data aplikací\HP
2011-02-23 01:39:53 ----A---- C:\WINDOWS\win.ini

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 a347scsi;a347scsi; C:\WINDOWS\System32\Drivers\a347scsi.sys [2004-04-30 5248]
R0 giveio;giveio; C:\WINDOWS\system32\giveio.sys [1996-04-03 5248]
R0 PxHelp20;PxHelp20; C:\WINDOWS\system32\DRIVERS\PxHelp20.sys [2009-04-28 44944]
R0 snapman;Acronis Snapshots Manager; C:\WINDOWS\system32\DRIVERS\snapman.sys [2010-08-09 166272]
R0 speedfan;speedfan; C:\WINDOWS\system32\speedfan.sys [2006-09-24 5248]
R0 sptd;sptd; C:\WINDOWS\System32\Drivers\sptd.sys [2010-12-13 697328]
R0 tdrpman258;Acronis Try&Decide and Restore Points filter (build 258); C:\WINDOWS\system32\DRIVERS\tdrpm258.sys [2010-08-09 911680]
R0 timounter;Acronis Backup Archive Explorer; C:\WINDOWS\system32\DRIVERS\timntr.sys [2010-08-09 581984]
R1 intelppm;Řadič procesoru Intel; C:\WINDOWS\System32\DRIVERS\intelppm.sys [2008-04-14 40192]
R1 kbdhid;Ovladač klávesnice standardu HID; C:\WINDOWS\System32\DRIVERS\kbdhid.sys [2008-04-14 14592]
R1 SbFw;SbFw; C:\WINDOWS\system32\drivers\SbFw.sys [2008-10-31 270888]
R1 sbhips;Sunbelt HIPS Driver; C:\WINDOWS\system32\drivers\sbhips.sys [2008-06-21 66600]
R3 afcdp;afcdp; C:\WINDOWS\system32\DRIVERS\afcdp.sys [2010-08-09 160704]
R3 ati2mtag;ati2mtag; C:\WINDOWS\system32\DRIVERS\ati2mtag.sys [2011-01-27 6406656]
R3 AtiHdmiService;ATI Function Driver for High Definition Audio Service; C:\WINDOWS\system32\drivers\AtiHdmi.sys [2010-04-08 101904]
R3 ctac32k;Creative AC3 Software Decoder; C:\WINDOWS\System32\drivers\ctac32k.sys [2002-07-19 127948]
R3 ctaud2k;Creative Audio Driver (WDM); C:\WINDOWS\system32\drivers\ctaud2k.sys [2002-07-19 837548]
R3 ctprxy2k;Creative Proxy Driver; C:\WINDOWS\System32\drivers\ctprxy2k.sys [2002-07-19 11068]
R3 ctsfm2k;Creative SoundFont Management Device Driver; C:\WINDOWS\System32\drivers\ctsfm2k.sys [2002-07-19 213860]
R3 DrvAgent32;DrvAgent32; \??\C:\WINDOWS\system32\Drivers\DrvAgent32.sys []
R3 emupia;E-mu Plug-in Architecture Driver; C:\WINDOWS\System32\drivers\emupia2k.sys [2002-07-19 156604]
R3 ha10kx2k;Creative Hardware Abstract Layer Driver; C:\WINDOWS\system32\drivers\ha10kx2k.sys [2002-07-24 998004]
R3 HDAudBus;Ovladač Microsoft UAA pro sběrnici High Definition Audio; C:\WINDOWS\system32\DRIVERS\HDAudBus.sys [2008-04-13 144384]
R3 hidusb;Ovladač třídy standardu HID; C:\WINDOWS\System32\DRIVERS\hidusb.sys [2008-04-14 10368]
R3 mouhid;Ovladač myši standardu HID; C:\WINDOWS\System32\DRIVERS\mouhid.sys [2001-10-25 12160]
R3 ossrv;Creative OS Services Driver; C:\WINDOWS\system32\drivers\ctoss2k.sys [2002-07-19 195432]
R3 RTLE8023xp;Realtek 10/100/1000 PCI-E NIC Family NDIS XP Driver; C:\WINDOWS\system32\DRIVERS\Rtenicxp.sys [2010-03-22 222672]
R3 SANDRA;SANDRA; \??\C:\Sandra Lite 2010c\WNt500x86\Sandra.sys []
R3 SBFWIMCL;Sunbelt Software Firewall NDIS IM Filter Miniport; C:\WINDOWS\system32\DRIVERS\sbfwim.sys [2008-06-21 65576]
R3 usbccgp;Obecný nadřazený ovladač Microsoft USB; C:\WINDOWS\System32\DRIVERS\usbccgp.sys [2008-04-14 32128]
R3 usbstor;Ovladač velkokapacitního paměťového zařízení USB; C:\WINDOWS\System32\DRIVERS\USBSTOR.SYS [2008-04-14 26368]
R3 usbuhci;Ovladač Microsoft univerzálního hostitelského řadiče USB od společnosti Microsoft; C:\WINDOWS\System32\DRIVERS\usbuhci.sys [2008-04-14 20608]
S0 a347bus;a347bus; C:\WINDOWS\system32\DRIVERS\a347bus.sys []
S2 PfModNT;PfModNT; \??\C:\WINDOWS\system32\PfModNT.sys []
S3 Avgfwdx;Avgfwdx; C:\WINDOWS\system32\DRIVERS\avgfwdx.sys []
S3 ctljystk;Game port pro zařízení Creative SB Live!; C:\WINDOWS\System32\DRIVERS\ctljystk.sys [2001-08-17 3712]
S3 ENTECH;ENTECH; \??\C:\WINDOWS\system32\DRIVERS\ENTECH.sys []
S3 gdrv;gdrv; \??\C:\WINDOWS\gdrv.sys []
S3 hidgame;Microsoft Hid to Joystick Port Enabler; C:\WINDOWS\system32\DRIVERS\hidgame.sys [2001-08-17 8576]
S3 HPZid412;IEEE-1284.4 Driver HPZid412; C:\WINDOWS\system32\DRIVERS\HPZid412.sys [2008-10-29 49920]
S3 HPZipr12;Print Class Driver for IEEE-1284.4 HPZipr12; C:\WINDOWS\system32\DRIVERS\HPZipr12.sys [2008-10-29 16496]
S3 HPZius12;USB to IEEE-1284.4 Translation Driver HPZius12; C:\WINDOWS\system32\DRIVERS\HPZius12.sys [2008-10-29 21568]
S3 usbprint;Třída USB Printer; C:\WINDOWS\System32\DRIVERS\usbprint.sys [2008-04-14 25856]
S3 usbscan;Ovladač skeneru USB; C:\WINDOWS\system32\DRIVERS\usbscan.sys [2008-04-14 15104]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 AcrSch2Svc;Acronis Scheduler2 Service; C:\Program Files\Common Files\Acronis\Schedule2\schedul2.exe [2010-03-27 751464]
R2 afcdpsrv;Acronis Nonstop Backup service; C:\Program Files\Common Files\Acronis\CDP\afcdpsrv.exe [2010-08-09 2480048]
R2 Ati HotKey Poller;Ati HotKey Poller; C:\WINDOWS\system32\Ati2evxx.exe [2011-01-26 638976]
R2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\WINDOWS\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
R2 hpqddsvc;Služba HP CUE DeviceDiscovery; C:\WINDOWS\system32\svchost.exe [2008-04-14 14336]
R2 JavaQuickStarterService;Java Quick Starter; C:\Program Files\Java\jre6\bin\jqs.exe [2010-12-07 153376]
R2 Net Driver HPZ12;Net Driver HPZ12; C:\WINDOWS\System32\svchost.exe [2008-04-14 14336]
R2 Pml Driver HPZ12;Pml Driver HPZ12; C:\WINDOWS\System32\svchost.exe [2008-04-14 14336]
R2 PnkBstrA;PnkBstrA; C:\WINDOWS\system32\PnkBstrA.exe [2010-11-21 75136]
R2 SbPF.Launcher;SbPF.Launcher; C:\Program Files\Firewall\SbPFLnch.exe [2008-10-31 95528]
R2 SPF4;Sunbelt Personal Firewall 4; C:\Program Files\Firewall\SbPFSvc.exe [2008-10-31 1365288]
R2 UMWdf;Windows User Mode Driver Framework; C:\WINDOWS\system32\wdfmgr.exe [2005-01-28 38912]
R3 hpqcxs08;hpqcxs08; C:\WINDOWS\system32\svchost.exe [2008-04-14 14336]
R3 SandraAgentSrv;SiSoftware Deployment Agent Service; C:\Sandra Lite 2010c\RpcAgentSrv.exe [2009-08-24 93336]
S2 gupdate;Služba Google Update (gupdate); C:\Program Files\Google\Update\GoogleUpdate.exe [2010-09-06 136176]
S3 aspnet_state;Stavová služba ASP.NET; C:\WINDOWS\Microsoft.NET\Framework\v4.0.30319\aspnet_state.exe [2010-03-18 35160]
S3 FontCache3.0.0.0;Windows Presentation Foundation Font Cache 3.0.0.0; C:\WINDOWS\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe [2008-07-29 46104]
S3 idsvc;Windows CardSpace; C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe [2008-07-29 881664]
S3 Microsoft Office Groove Audit Service;Microsoft Office Groove Audit Service; C:\Program Files\Microsoft Office\Office12\GrooveAuditService.exe [2006-10-26 65824]
S3 odserv;Microsoft Office Diagnostics Service; C:\Program Files\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE [2006-10-26 441136]
S3 ose;Office Source Engine; C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2006-10-26 145184]
S3 WPFFontCache_v0400;Windows Presentation Foundation Font Cache 4.0.0.0; C:\WINDOWS\Microsoft.NET\Framework\v4.0.30319\WPF\WPFFontCache_v0400.exe [2010-03-18 753504]
S4 clr_optimization_v2.0.50727_32;.NET Runtime Optimization Service v2.0.50727_X86; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe [2008-07-25 69632]
S4 NetTcpPortSharing;Net.Tcp Port Sharing Service; C:\WINDOWS\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe [2010-03-18 124240]

-----------------EOF-----------------

[filip544]

Zkuste přeinstalovat BIOS.Ale nwm jestli to říkám správně.
Jsem trochu popletenej z toho když jsem hledal na Dell a byl tam v Driverech BIOS.

No tak jinak.Jakou máte desku (Nebo sestavu) a OS.
Nebo klikněte na ten Vykřičník u BIOS-----Dejte vlastnosti-----a aktualizujte ovladač.
Pokud nepomůže,napište vaší desku popř. Název PC sestavy (Např. u Dell je to Dell Optiplex GX280 SFF,Dell optiplex GX260 atd.)
a OS a s Rudym něco vymyslíme.

[Rudy]

Spíš to vypadá na nějakou nekomaptibilitu ovladačů, neb o s hra s něčím bije. Dejte log z ComboFix.

Stahnete a ulozte nejlepe na plochu ComboFix: http://download.bleepingcomputer.com/sUBs/ComboFix.exe

pote spustte aplikaci pod uctem s administratorskym opravnenim

hned po startu se zobrazi obrazovka s licencnimi podminkami, pokracujte kliknutim na tlacitko Ano.

v klidu si postavte na kafe (cela akce trva cca. 5-10 minut, nekdy i dele - dle toho, o jak rychly stroj se jedna a kolika soubory se skener bude muset prodirat), behem skenu se nepokousejte spoustet zadne jine aplikace ani nic jineho

behem skenovani nepropadejte panice, vas stroj muze byt restartovan (predevsim pri prvni aplikaci skeneru)

upozorneni: pokud pouzivate antispyware s rezidentnim stitem, prepnete jeho rezidentni stit do Install Mode, pripadne jej po dobu skenu uplne deaktivujte, protoze dochazi pri skenu a vymazu pripadneho malware k nezadoucim kolizim s rezidentem antispyware

PC vám zkontrolujeme na viry, příp. odvirujeme, ale na hry tu odborníci nejsme.

[filip544]

Nebo se vám přehřívá GK.
Při vysoké teplotě se grafika podtaktuje a sníží tím svůj výkon (Nižší FPS) i teplotu.
Stáhněte Speccy http://www.piriform.com/speccy .
Je možné že na Grafice neni tepelný senzor.
A proto GK projistotu očistěte (V případě integrované to neni možné).

[filip544]

A ještě něco

Jen poznámka. Na MB jsou součástky citlivé na statickou elektřinu. Při vysávání (chodu el. vysavače) statická elektřina vzniká a navíc, pokud máte na sobě nějakou část oděvu z umělých vláken, jste nabit na relativně velký elektrický náboj. Než sáhnete na GK a vložíte ji do PC slotu,dotkněte se nějakého vodivého předmětu. Např. Topení.

[DutchCZE]

Rudy dekuji.
2 Filip544 Bud tak hodny a bez spamovat nekam jinam. THX

ComboFix 11-03-13.02 - Jan 14.03.2011 21:54:14.6.2 - x86
Systém Microsoft Windows XP Professional 5.1.2600.3.1250.420.1029.18.2046.1585 [GMT 1:00]
Spuštěný z: c:\documents and settings\Jan\Plocha\stahování\ComboFix.exe
FW: Sunbelt Personal Firewall *Disabled* {82B1150E-9B37-49FC-83EB-D52197D900D0}
.
.
((((((((((((((((((((((((((((((((((((((( Ostatní výmazy )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
E:\install.exe
.
.
((((((((((((((((((((((((( Soubory vytvořené od 2011-02-14 do 2011-03-14 )))))))))))))))))))))))))))))))
.
.
2011-03-14 18:35 . 2011-03-14 18:35 472576 ----a-w- c:\windows\Radeon Omega Drivers v4.8.442 Uninstall.exe
2011-03-14 18:35 . 2011-03-14 18:35 -------- d-----w- c:\program files\Radeon Omega Drivers
2011-03-13 21:56 . 2011-03-13 21:56 23456 ----a-w- c:\windows\system32\drivers\DrvAgent32.sys
2011-03-13 21:56 . 2011-03-13 21:56 -------- d-----w- c:\documents and settings\Jan\Local Settings\Data aplikací\eSupport.com
2011-03-13 20:16 . 2011-03-13 20:16 -------- d-----w- c:\program files\Microsoft.NET
2011-03-13 19:33 . 2011-03-13 19:33 -------- d-----w- c:\documents and settings\All Users\Data aplikací\ATI
2011-03-13 19:31 . 2011-03-13 19:31 -------- d-----w- c:\program files\ATI Stream
2011-03-13 19:30 . 2010-11-26 02:54 302080 ----a-w- c:\windows\system32\SETB.tmp
2011-03-13 19:30 . 2010-11-26 02:48 3984864 ----a-w- c:\windows\system32\SET14.tmp
2011-03-13 19:30 . 2010-11-26 02:34 212992 ----a-w- c:\windows\system32\SET44.tmp
2011-03-13 19:30 . 2010-11-26 02:34 43520 ----a-w- c:\windows\system32\SET4A.tmp
2011-03-13 19:30 . 2010-11-26 02:34 159744 ----a-w- c:\windows\system32\SET41.tmp
2011-03-13 19:30 . 2010-11-26 02:32 614400 ----a-w- c:\windows\system32\SET3E.tmp
2011-03-13 19:30 . 2010-11-26 02:32 2669696 ----a-w- c:\windows\system32\SET17.tmp
2011-03-13 19:30 . 2010-11-26 02:26 651264 ----a-w- c:\windows\system32\SET4D.tmp
2011-03-13 19:30 . 2010-11-26 02:24 196608 ----a-w- c:\windows\system32\SET29.tmp
2011-03-13 19:30 . 2010-11-26 02:18 765952 ----a-w- c:\windows\system32\SETE.tmp
2011-03-13 19:30 . 2011-01-26 22:35 1112576 ----a-w- c:\windows\system32\ativvamv.dll
2011-03-13 19:00 . 2011-03-13 19:00 -------- d-----w- c:\windows\system32\wbem\Repository
2011-03-02 19:30 . 2011-03-02 19:51 -------- d-----w- c:\documents and settings\Jan\Data aplikací\TeamViewer
2011-02-28 21:03 . 2011-02-28 21:04 -------- d-----w- c:\documents and settings\Jan\Local Settings\Data aplikací\aIW_Connecter
2011-02-25 12:30 . 2001-08-17 21:02 8576 -c--a-w- c:\windows\system32\dllcache\hidgame.sys
2011-02-25 12:30 . 2001-08-17 21:02 8576 ----a-w- c:\windows\system32\drivers\hidgame.sys
2011-02-24 09:30 . 2011-02-24 09:30 -------- d-----w- c:\program files\GameSpy Arcade
2011-02-24 09:25 . 2004-10-22 01:18 749568 ----a-w- c:\program files\Common Files\InstallShield\Professional\RunTime\10\50\Intel32\iKernel.dll
2011-02-24 09:25 . 2004-10-22 01:17 69715 ----a-w- c:\program files\Common Files\InstallShield\Professional\RunTime\10\50\Intel32\ctor.dll
2011-02-24 09:25 . 2004-10-22 01:17 274432 ----a-w- c:\program files\Common Files\InstallShield\Professional\RunTime\10\50\Intel32\iscript.dll
2011-02-24 09:25 . 2004-10-22 01:16 180224 ----a-w- c:\program files\Common Files\InstallShield\Professional\RunTime\10\50\Intel32\iuser.dll
2011-02-24 09:25 . 2004-10-22 01:16 5632 ----a-w- c:\program files\Common Files\InstallShield\Professional\RunTime\10\50\Intel32\DotNetInstaller.exe
2011-02-24 09:25 . 2011-02-24 09:25 323716 ----a-w- c:\program files\Common Files\InstallShield\Professional\RunTime\10\50\Intel32\setup.dll
2011-02-24 09:25 . 2011-02-24 09:25 192644 ----a-w- c:\program files\Common Files\InstallShield\Professional\RunTime\10\50\Intel32\iGdi.dll
2011-02-23 13:12 . 2011-02-23 13:12 -------- d-----w- c:\documents and settings\All Users\Data aplikací\PDF reDirect
2011-02-23 13:11 . 2011-02-23 13:12 -------- d-----w- c:\documents and settings\Jan\Data aplikací\PDF reDirect
2011-02-23 13:11 . 2011-02-23 13:18 -------- d-----w- c:\program files\PDF reDirect
2011-02-23 12:44 . 2011-02-23 12:44 -------- d-----w- c:\documents and settings\Jan\.pdfsam
2011-02-23 12:34 . 2011-02-23 12:34 -------- d-----w- c:\program files\pdfsam
.
.
(((((((((((((((((((((((((((((((((((((((( Find3M výpis ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2011-03-13 21:16 . 2011-01-22 00:14 13386 ----a-w- c:\documents and settings\All Users\Data aplikací\xml11.tmp
2011-03-13 21:16 . 2010-08-12 17:50 2263 ----a-w- c:\documents and settings\All Users\Data aplikací\xml4E.tmp
2011-03-13 21:16 . 2010-08-12 17:50 7415 ----a-w- c:\documents and settings\All Users\Data aplikací\xml4C.tmp
2011-03-13 19:05 . 2011-02-04 18:22 796672 ----a-w- c:\windows\GPInstall.exe
2011-03-13 12:13 . 2010-08-07 21:11 234536 ----a-w- c:\windows\system32\PnkBstrB.xtr
2011-03-13 11:35 . 2010-08-07 21:11 234536 ----a-w- c:\windows\system32\PnkBstrB.ex0
2011-03-09 06:43 . 2010-08-07 21:20 138520 ----a-w- c:\windows\system32\drivers\PnkBstrK.sys
2011-03-09 06:43 . 2010-08-07 21:11 234536 ----a-w- c:\windows\system32\PnkBstrB.exe
2011-01-31 17:54 . 2011-01-31 17:54 262144 ----a-w- c:\windows\system32\wrap_oal.dll
2011-01-31 17:54 . 2002-07-19 01:54 86016 ----a-w- c:\windows\system32\OpenAL32.dll
2011-01-26 23:34 . 2010-11-02 18:12 6406656 ----a-w- c:\windows\system32\drivers\ati2mtag.sys
2011-01-26 23:05 . 2010-11-02 18:12 17252352 ----a-w- c:\windows\system32\atioglxx.dll
2011-01-26 23:01 . 2010-11-02 18:12 57344 ----a-w- c:\windows\system32\aticalrt.dll
2011-01-26 23:00 . 2010-11-02 18:12 53248 ----a-w- c:\windows\system32\aticalcl.dll
2011-01-26 22:59 . 2010-11-02 18:12 4636672 ----a-w- c:\windows\system32\aticaldd.dll
2011-01-26 22:52 . 2010-11-02 18:12 462848 ----a-w- c:\windows\system32\ATIDEMGX.dll
2011-01-26 22:51 . 2010-11-02 18:12 302080 ----a-w- c:\windows\system32\ati2dvag.dll
2011-01-26 22:42 . 2010-11-02 18:12 4029824 ----a-w- c:\windows\system32\ati3duag.dll
2011-01-26 22:41 . 2010-11-02 18:12 311296 ----a-w- c:\windows\system32\atiiiexx.dll
2011-01-26 22:32 . 2010-11-02 18:12 212992 ----a-w- c:\windows\system32\atipdlxx.dll
2011-01-26 22:31 . 2010-11-02 18:12 155648 ----a-w- c:\windows\system32\Oemdspif.dll
2011-01-26 22:31 . 2010-11-02 18:12 26112 ----a-w- c:\windows\system32\Ati2mdxx.exe
2011-01-26 22:31 . 2010-11-02 18:12 43520 ----a-w- c:\windows\system32\ati2edxx.dll
2011-01-26 22:31 . 2010-11-02 18:12 188416 ----a-w- c:\windows\system32\ati2evxx.dll
2011-01-26 22:30 . 2010-11-02 18:12 638976 ----a-w- c:\windows\system32\ati2evxx.exe
2011-01-26 22:28 . 2010-11-02 18:12 53248 ----a-w- c:\windows\system32\ATIDDC.DLL
2011-01-26 22:27 . 2010-11-02 18:12 143360 ----a-w- c:\windows\system32\atiapfxx.exe
2011-01-26 22:27 . 2010-11-02 18:12 2673280 ----a-w- c:\windows\system32\ativvaxx.dll
2011-01-26 22:23 . 2010-11-02 18:12 651264 ----a-w- c:\windows\system32\atikvmag.dll
2011-01-26 22:21 . 2010-11-02 18:12 196608 ----a-w- c:\windows\system32\atiadlxx.dll
2011-01-26 22:21 . 2010-11-02 18:12 483328 ----a-w- c:\windows\system32\atiok3x2.dll
2011-01-26 22:21 . 2010-11-02 18:12 17408 ----a-w- c:\windows\system32\atitvo32.dll
2011-01-26 22:15 . 2010-11-02 18:12 847872 ----a-w- c:\windows\system32\ati2cqag.dll
2011-01-26 22:12 . 2010-11-02 18:12 64512 ----a-w- c:\windows\system32\atimpc32.dll
2011-01-26 22:12 . 2010-11-02 18:12 64512 ----a-w- c:\windows\system32\amdpcom32.dll
2011-01-26 22:12 . 2010-11-02 18:12 53248 ----a-w- c:\windows\system32\drivers\ati2erec.dll
2011-01-09 15:11 . 2011-01-09 15:11 0 ----a-w- c:\documents and settings\All Users\Data aplikací\xml2C.tmp
2011-01-09 15:11 . 2010-09-23 22:33 0 ----a-w- c:\documents and settings\All Users\Data aplikací\xml8.tmp
2010-12-21 18:05 . 2010-12-21 18:04 73216 ----a-w- c:\windows\ST6UNST.EXE
2010-12-21 18:05 . 2010-12-21 18:04 249856 ------w- c:\windows\Setup1.exe
2010-12-20 17:09 . 2010-09-22 11:05 38224 ----a-w- c:\windows\system32\drivers\mbamswissarmy.sys
2010-12-20 17:08 . 2010-09-22 11:05 20952 ----a-w- c:\windows\system32\drivers\mbam.sys
.
.
(((((((((((((((((((((((((((((((((( Spouštěcí body v registru )))))))))))))))))))))))))))))))))))))))))))))
.
.
*Poznámka* prázdné záznamy a legitimní výchozí údaje nejsou zobrazeny.
REGEDIT4
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Google Update"="c:\documents and settings\Jan\Local Settings\Data aplikací\Google\Update\GoogleUpdate.exe" [2010-10-19 136176]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"WINDVDPatch"="CTHELPER.EXE" [2002-07-02 24576]
"Adobe Reader Speed Launcher"="c:\program files\Adobe\Reader 9.0\Reader\Reader_sl.exe" [2011-01-31 35760]
"Adobe ARM"="c:\program files\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2010-09-20 932288]
"StartCCC"="c:\program files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" [2011-01-26 98304]
.
[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="c:\windows\System32\CTFMON.EXE" [2008-04-14 15360]
.
c:\documents and settings\Jan\Nabˇdka Start\Programy\Po spuçtŘnˇ\
Z stupce - etmin.lnk - f:\!!! etcko od peti\etmin\etmin.exe [2009-10-8 24064]
.
[HKLM\~\startupfolder\C:^Documents and Settings^All Users^Nabídka Start^Programy^Po spuštění^HP Digital Imaging Monitor.lnk]
path=c:\documents and settings\All Users\Nabídka Start\Programy\Po spuštění\HP Digital Imaging Monitor.lnk
backup=c:\windows\pss\HP Digital Imaging Monitor.lnkCommon Startup
.
[HKLM\~\startupfolder\C:^Documents and Settings^All Users^Nabídka Start^Programy^Po spuštění^InterVideo WinCinema Manager.lnk]
path=c:\documents and settings\All Users\Nabídka Start\Programy\Po spuštění\InterVideo WinCinema Manager.lnk
backup=c:\windows\pss\InterVideo WinCinema Manager.lnkCommon Startup
.
[HKLM\~\startupfolder\C:^Documents and Settings^Jan^Nabídka Start^Programy^Po spuštění^Výřezy obrazovky a spuštění aplikace OneNote 2007.lnk]
path=c:\documents and settings\Jan\Nabídka Start\Programy\Po spuštění\Výřezy obrazovky a spuštění aplikace OneNote 2007.lnk
backup=c:\windows\pss\Výřezy obrazovky a spuštění aplikace OneNote 2007.lnkStartup
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Acronis Scheduler2 Service]
2010-03-27 14:07 362232 ----a-w- c:\program files\Common Files\Acronis\Schedule2\schedhlp.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\GrooveMonitor]
2006-10-26 22:47 31016 ----a-w- c:\program files\Microsoft Office\Office12\GrooveMonitor.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\TrueImageMonitor.exe]
2010-03-27 14:06 5107232 ----a-w- c:\program files\Acronis\TrueImageHome\TrueImageMonitor.exe
.
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile]
"EnableFirewall"= 0 (0x0)
.
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\system32\\sessmgr.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hpqtra08.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hpqste08.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hposid01.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hpqkygrp.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hpqcopy2.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hpfcCopy.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hpoews01.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hpiscnapp.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hpqgplgtupl.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hpqgpc01.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hpqusgm.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hpqusgh.exe"=
"c:\\Program Files\\HP\\HP Software Update\\hpwucli.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\smart web printing\\SmartWebPrintExe.exe"=
"c:\\Program Files\\HLSW\\hlsw.exe"=
"f:\\!!! ETcko od Peti\\ET.exe"=
"c:\\WINDOWS\\system32\\PnkBstrA.exe"=
"c:\\WINDOWS\\system32\\PnkBstrB.exe"=
"c:\\Program Files\\ICQ7.2\\ICQ.exe"=
"c:\\Program Files\\ICQ7.2\\aolload.exe"=
"c:\\Program Files\\Activision\\Call of Duty 4 - Modern Warfare\\iw3mp.exe"=
"c:\\Program Files\\Microsoft Office\\Office12\\OUTLOOK.EXE"=
"c:\\Program Files\\Microsoft Office\\Office12\\GROOVE.EXE"=
"c:\\Program Files\\Microsoft Office\\Office12\\ONENOTE.EXE"=
"c:\\Sandra Lite 2010c\\RpcAgentSrv.exe"=
"c:\\Sandra Lite 2010c\\WNt500x86\\sandra.mui"=
"c:\\Program Files\\Google\\Google Earth\\plugin\\geplugin.exe"=
"c:\\Program Files\\InterVideo\\DVD6\\WinDVD.exe"=
"%windir%\\Network Diagnostic\\xpnetdiag.exe"=
"e:\\Battlefield2\\BF2.exe"=
"c:\\Sandra Lite 2010c\\WNt500x86\\RpcSandraSrv.exe"=
.
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\IcmpSettings]
"AllowInboundEchoRequest"= 1 (0x1)
.
R0 a347scsi;a347scsi;c:\windows\system32\drivers\a347scsi.sys [7.8.2010 22:26 5248]
R0 sptd;sptd;c:\windows\system32\drivers\sptd.sys [13.12.2010 21:21 697328]
R0 tdrpman258;Acronis Try&Decide and Restore Points filter (build 258);c:\windows\system32\drivers\tdrpm258.sys [9.8.2010 23:53 911680]
R1 SbFw;SbFw;c:\windows\system32\drivers\SbFw.sys [2.1.2011 19:33 270888]
R1 sbhips;Sunbelt HIPS Driver;c:\windows\system32\drivers\sbhips.sys [21.6.2008 4:54 66600]
R2 afcdpsrv;Acronis Nonstop Backup service;c:\program files\Common Files\Acronis\CDP\afcdpsrv.exe [9.8.2010 23:53 2480048]
R2 SbPF.Launcher;SbPF.Launcher;c:\program files\Firewall\SbPFLnch.exe [31.10.2008 7:24 95528]
R2 SPF4;Sunbelt Personal Firewall 4;c:\program files\Firewall\SbPFSvc.exe [31.10.2008 7:24 1365288]
R3 afcdp;afcdp;c:\windows\system32\drivers\afcdp.sys [9.8.2010 23:53 160704]
R3 SandraAgentSrv;SiSoftware Deployment Agent Service;c:\sandra lite 2010c\RpcAgentSrv.exe [12.8.2010 18:39 93336]
R3 SBFWIMCL;Sunbelt Software Firewall NDIS IM Filter Miniport;c:\windows\system32\drivers\SbFwIm.sys [2.1.2011 19:33 65576]
S0 a347bus;a347bus;c:\windows\system32\DRIVERS\a347bus.sys --> c:\windows\system32\DRIVERS\a347bus.sys [?]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;c:\windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [18.3.2010 13:16 130384]
S2 gupdate;Služba Google Update (gupdate);c:\program files\Google\Update\GoogleUpdate.exe [6.9.2010 19:57 136176]
S3 Avgfwdx;Avgfwdx;c:\windows\system32\DRIVERS\avgfwdx.sys --> c:\windows\system32\DRIVERS\avgfwdx.sys [?]
S3 DrvAgent32;DrvAgent32;c:\windows\system32\drivers\DrvAgent32.sys [13.3.2011 22:56 23456]
S3 WPFFontCache_v0400;Windows Presentation Foundation Font Cache 4.0.0.0;c:\windows\Microsoft.NET\Framework\v4.0.30319\WPF\WPFFontCache_v0400.exe [18.3.2010 13:16 753504]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost]
HPZ12 REG_MULTI_SZ Pml Driver HPZ12 Net Driver HPZ12
hpdevmgmt REG_MULTI_SZ hpqcxs08 hpqddsvc
.
Obsah adresáře 'Naplánované úlohy'
.
.
------- Doplňkový sken -------
.
IE: &Clean Traces - c:\program files\DAP\Privacy Package\dapcleanerie.htm
IE: &Download with &DAP - c:\program files\DAP\dapextie.htm
IE: Analyzovat LeechGetem - file://c:\program files\LeechGet 2009\\Parser.html
IE: Download &all with DAP - c:\program files\DAP\dapextie2.htm
IE: Download LeechGetem - file://c:\program files\LeechGet 2009\\AddUrl.html
IE: Download s průvodcem LeechGetu - file://c:\program files\LeechGet 2009\\Wizard.html
IE: E&xportovat do aplikace Microsoft Excel - c:\progra~1\MICROS~2\Office12\EXCEL.EXE/3000
Name-Space Handler: ftp\ZDA - {5BFA1DAF-5EDC-11D2-959E-00C00C02DA5E} - c:\progra~1\DAP\dapie.dll
Name-Space Handler: http\ZDA - {5BFA1DAF-5EDC-11D2-959E-00C00C02DA5E} - c:\progra~1\DAP\dapie.dll
DPF: DirectAnimation Java Classes - file://c:\windows\Java\classes\dajava.cab
DPF: Microsoft XML Parser for Java - file://c:\windows\Java\classes\xmldso.cab
FF - ProfilePath - c:\documents and settings\Jan\Data aplikací\Mozilla\Firefox\Profiles\bvhnkaez.default\
FF - prefs.js: browser.startup.homepage - http://www.google.cz
FF - Ext: Default: {972ce4c6-7e08-4474-a285-3208198ce6fd} - c:\program files\Mozilla Firefox\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}
FF - Ext: Java Console: {CAFEEFAC-0016-0000-0022-ABCDEFFEDCBA} - c:\program files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0022-ABCDEFFEDCBA}
FF - Ext: Java Quick Starter: jqs@sun.com - c:\program files\Java\jre6\lib\deploy\jqs\ff
FF - Ext: SpeedBit Video Downloader: {0329E7D6-6F54-462D-93F6-F5C3118BADF2} - c:\program files\SpeedBit Video Downloader\SPFireFox
FF - Ext: Download Accelerator Plus (DAP) extension: {F17C1572-C9EC-4e5c-A542-D05CBB5C5A08} - c:\program files\DAP\DAPFireFox
FF - Ext: FEBE: {4BBDD651-70CF-4821-84F8-2B918CF89CA3} - %profile%\extensions\{4BBDD651-70CF-4821-84F8-2B918CF89CA3}
FF - Ext: Adblock Plus: {d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d} - %profile%\extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}
FF - Ext: Flagfox: {1018e4d6-728f-4b20-ad56-37578a4de76b} - %profile%\extensions\{1018e4d6-728f-4b20-ad56-37578a4de76b}
.
.
**************************************************************************
.
catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2011-03-14 21:59
Windows 5.1.2600 Service Pack 3 NTFS
.
skenování skrytých procesů ...
.
skenování skrytých položek 'Po spuštění' ...
.
skenování skrytých souborů ...
.
sken byl úspešně dokončen
skryté soubory: 0
.
**************************************************************************
.
--------------------- Knihovny navázané na běžící procesy ---------------------
.
- - - - - - - > 'winlogon.exe'(1408)
c:\windows\system32\Ati2evxx.dll
c:\windows\system32\atiadlxx.dll
.
Celkový čas: 2011-03-14 22:02:10
ComboFix-quarantined-files.txt 2011-03-14 21:02
.
Před spuštěním: 7 200 780 288
Po spuštění: 8 664 326 144
.
Current=3 Default=3 Failed=1 LastKnownGood=4 Sets=1,2,3,4
- - End Of File - - 7B1B391C083675BCCCE1DC8781B99763

[filip544]

Grafika je neintegrovaná čili v PCIe.Takže koukněte do bedny zda neni Karta zaprášená a pokud ano očistěte ji.Ale opatrně.

Combofix smazal jeden soubor E:\install.exe .
Nějaká změna?

OK mizim mějte se tu.


Nechápu proč.Chtěl jsem jenom poradit.
Vim že mám post návštěvník,ale to ze mě ještě nedělá tupce.O HW vim toho víc než ty.

[cernohous13]

Nechápu proč.Chtěl jsem jenom poradit.
Vim že mám post návštěvník,ale to ze mě ještě nedělá tupce.O HW vim toho víc než ty.

Myslím, že už jsem tě upozornil na to, že u nás se do řešených topiců neleze.
Je to naše uznávané pravidlo a pokud ho nemíníš respektovat, můžeš být i zabanován.

Navíc si myslím, že Rudy je dost dobrý odborník aby si případ vyřešil i bez tvé "pomoci"

[Rudy]

Ještě dočistíme. Přesuňte ComboFix na plochu. Otevřte poznámkový blok a zkopírujte do něj:

Collect::
c:\windows\system32\SETB.tmp
c:\windows\system32\SET14.tmp
c:\windows\system32\SET44.tmp
c:\windows\system32\SET4A.tmp
c:\windows\system32\SET41.tmp
c:\windows\system32\SET3E.tmp
c:\windows\system32\SET17.tmp
c:\windows\system32\SET4D.tmp
c:\windows\system32\SET29.tmp
c:\windows\system32\SETE.tmp

Uložte na plochu jako CFScript.txt. Pak jej myší přetáhněte nad ikonu ComboFix a pusťte. CF se spustí a vykoná příkazy ze skriptu.

[DutchCZE]

Dekuji, zde je log po provedeni scriptu.

ComboFix 11-03-13.02 - Jan 15.03.2011 18:39:08.7.2 - x86
Systém Microsoft Windows XP Professional 5.1.2600.3.1250.420.1029.18.2046.1608 [GMT 1:00]
Spuštěný z: c:\documents and settings\Jan\Plocha\ComboFix.exe
Použité ovládací přepínače :: c:\documents and settings\Jan\Plocha\CFScript.txt
FW: Sunbelt Personal Firewall *Disabled* {82B1150E-9B37-49FC-83EB-D52197D900D0}
* Vytvořen nový Bod Obnovení
.
file zipped: c:\windows\system32\SET14.tmp
file zipped: c:\windows\system32\SET17.tmp
file zipped: c:\windows\system32\SET29.tmp
file zipped: c:\windows\system32\SET3E.tmp
file zipped: c:\windows\system32\SET41.tmp
file zipped: c:\windows\system32\SET44.tmp
file zipped: c:\windows\system32\SET4A.tmp
file zipped: c:\windows\system32\SET4D.tmp
file zipped: c:\windows\system32\SETB.tmp
file zipped: c:\windows\system32\SETE.tmp
.
.
((((((((((((((((((((((((((((((((((((((( Ostatní výmazy )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
c:\windows\system32\SET14.tmp
c:\windows\system32\SET17.tmp
c:\windows\system32\SET29.tmp
c:\windows\system32\SET3E.tmp
c:\windows\system32\SET41.tmp
c:\windows\system32\SET44.tmp
c:\windows\system32\SET4A.tmp
c:\windows\system32\SET4D.tmp
c:\windows\system32\SETB.tmp
c:\windows\system32\SETE.tmp
.
.
((((((((((((((((((((((((( Soubory vytvořené od 2011-02-15 do 2011-03-15 )))))))))))))))))))))))))))))))
.
.
2011-03-14 18:35 . 2011-03-14 18:35 472576 ----a-w- c:\windows\Radeon Omega Drivers v4.8.442 Uninstall.exe
2011-03-14 18:35 . 2011-03-14 18:35 -------- d-----w- c:\program files\Radeon Omega Drivers
2011-03-13 21:56 . 2011-03-13 21:56 23456 ----a-w- c:\windows\system32\drivers\DrvAgent32.sys
2011-03-13 21:56 . 2011-03-13 21:56 -------- d-----w- c:\documents and settings\Jan\Local Settings\Data aplikací\eSupport.com
2011-03-13 20:16 . 2011-03-13 20:16 -------- d-----w- c:\program files\Microsoft.NET
2011-03-13 19:33 . 2011-03-13 19:33 -------- d-----w- c:\documents and settings\All Users\Data aplikací\ATI
2011-03-13 19:31 . 2011-03-13 19:31 -------- d-----w- c:\program files\ATI Stream
2011-03-13 19:30 . 2011-01-26 22:35 1112576 ----a-w- c:\windows\system32\ativvamv.dll
2011-03-13 19:00 . 2011-03-13 19:00 -------- d-----w- c:\windows\system32\wbem\Repository
2011-03-02 19:30 . 2011-03-02 19:51 -------- d-----w- c:\documents and settings\Jan\Data aplikací\TeamViewer
2011-02-28 21:03 . 2011-02-28 21:04 -------- d-----w- c:\documents and settings\Jan\Local Settings\Data aplikací\aIW_Connecter
2011-02-25 12:30 . 2001-08-17 21:02 8576 -c--a-w- c:\windows\system32\dllcache\hidgame.sys
2011-02-25 12:30 . 2001-08-17 21:02 8576 ----a-w- c:\windows\system32\drivers\hidgame.sys
2011-02-24 09:30 . 2011-02-24 09:30 -------- d-----w- c:\program files\GameSpy Arcade
2011-02-24 09:25 . 2004-10-22 01:18 749568 ----a-w- c:\program files\Common Files\InstallShield\Professional\RunTime\10\50\Intel32\iKernel.dll
2011-02-24 09:25 . 2004-10-22 01:17 69715 ----a-w- c:\program files\Common Files\InstallShield\Professional\RunTime\10\50\Intel32\ctor.dll
2011-02-24 09:25 . 2004-10-22 01:17 274432 ----a-w- c:\program files\Common Files\InstallShield\Professional\RunTime\10\50\Intel32\iscript.dll
2011-02-24 09:25 . 2004-10-22 01:16 180224 ----a-w- c:\program files\Common Files\InstallShield\Professional\RunTime\10\50\Intel32\iuser.dll
2011-02-24 09:25 . 2004-10-22 01:16 5632 ----a-w- c:\program files\Common Files\InstallShield\Professional\RunTime\10\50\Intel32\DotNetInstaller.exe
2011-02-24 09:25 . 2011-02-24 09:25 323716 ----a-w- c:\program files\Common Files\InstallShield\Professional\RunTime\10\50\Intel32\setup.dll
2011-02-24 09:25 . 2011-02-24 09:25 192644 ----a-w- c:\program files\Common Files\InstallShield\Professional\RunTime\10\50\Intel32\iGdi.dll
2011-02-23 13:12 . 2011-02-23 13:12 -------- d-----w- c:\documents and settings\All Users\Data aplikací\PDF reDirect
2011-02-23 13:11 . 2011-02-23 13:12 -------- d-----w- c:\documents and settings\Jan\Data aplikací\PDF reDirect
2011-02-23 13:11 . 2011-02-23 13:18 -------- d-----w- c:\program files\PDF reDirect
2011-02-23 12:44 . 2011-02-23 12:44 -------- d-----w- c:\documents and settings\Jan\.pdfsam
2011-02-23 12:34 . 2011-02-23 12:34 -------- d-----w- c:\program files\pdfsam
.
.
(((((((((((((((((((((((((((((((((((((((( Find3M výpis ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2011-03-13 21:16 . 2011-01-22 00:14 13386 ----a-w- c:\documents and settings\All Users\Data aplikací\xml11.tmp
2011-03-13 21:16 . 2010-08-12 17:50 2263 ----a-w- c:\documents and settings\All Users\Data aplikací\xml4E.tmp
2011-03-13 21:16 . 2010-08-12 17:50 7415 ----a-w- c:\documents and settings\All Users\Data aplikací\xml4C.tmp
2011-03-13 19:05 . 2011-02-04 18:22 796672 ----a-w- c:\windows\GPInstall.exe
2011-03-13 12:13 . 2010-08-07 21:11 234536 ----a-w- c:\windows\system32\PnkBstrB.xtr
2011-03-13 11:35 . 2010-08-07 21:11 234536 ----a-w- c:\windows\system32\PnkBstrB.ex0
2011-03-09 06:43 . 2010-08-07 21:20 138520 ----a-w- c:\windows\system32\drivers\PnkBstrK.sys
2011-03-09 06:43 . 2010-08-07 21:11 234536 ----a-w- c:\windows\system32\PnkBstrB.exe
2011-01-31 17:54 . 2011-01-31 17:54 262144 ----a-w- c:\windows\system32\wrap_oal.dll
2011-01-31 17:54 . 2002-07-19 01:54 86016 ----a-w- c:\windows\system32\OpenAL32.dll
2011-01-26 23:34 . 2010-11-02 18:12 6406656 ----a-w- c:\windows\system32\drivers\ati2mtag.sys
2011-01-26 23:05 . 2010-11-02 18:12 17252352 ----a-w- c:\windows\system32\atioglxx.dll
2011-01-26 23:01 . 2010-11-02 18:12 57344 ----a-w- c:\windows\system32\aticalrt.dll
2011-01-26 23:00 . 2010-11-02 18:12 53248 ----a-w- c:\windows\system32\aticalcl.dll
2011-01-26 22:59 . 2010-11-02 18:12 4636672 ----a-w- c:\windows\system32\aticaldd.dll
2011-01-26 22:52 . 2010-11-02 18:12 462848 ----a-w- c:\windows\system32\ATIDEMGX.dll
2011-01-26 22:51 . 2010-11-02 18:12 302080 ----a-w- c:\windows\system32\ati2dvag.dll
2011-01-26 22:42 . 2010-11-02 18:12 4029824 ----a-w- c:\windows\system32\ati3duag.dll
2011-01-26 22:41 . 2010-11-02 18:12 311296 ----a-w- c:\windows\system32\atiiiexx.dll
2011-01-26 22:32 . 2010-11-02 18:12 212992 ----a-w- c:\windows\system32\atipdlxx.dll
2011-01-26 22:31 . 2010-11-02 18:12 155648 ----a-w- c:\windows\system32\Oemdspif.dll
2011-01-26 22:31 . 2010-11-02 18:12 26112 ----a-w- c:\windows\system32\Ati2mdxx.exe
2011-01-26 22:31 . 2010-11-02 18:12 43520 ----a-w- c:\windows\system32\ati2edxx.dll
2011-01-26 22:31 . 2010-11-02 18:12 188416 ----a-w- c:\windows\system32\ati2evxx.dll
2011-01-26 22:30 . 2010-11-02 18:12 638976 ----a-w- c:\windows\system32\ati2evxx.exe
2011-01-26 22:28 . 2010-11-02 18:12 53248 ----a-w- c:\windows\system32\ATIDDC.DLL
2011-01-26 22:27 . 2010-11-02 18:12 143360 ----a-w- c:\windows\system32\atiapfxx.exe
2011-01-26 22:27 . 2010-11-02 18:12 2673280 ----a-w- c:\windows\system32\ativvaxx.dll
2011-01-26 22:23 . 2010-11-02 18:12 651264 ----a-w- c:\windows\system32\atikvmag.dll
2011-01-26 22:21 . 2010-11-02 18:12 196608 ----a-w- c:\windows\system32\atiadlxx.dll
2011-01-26 22:21 . 2010-11-02 18:12 483328 ----a-w- c:\windows\system32\atiok3x2.dll
2011-01-26 22:21 . 2010-11-02 18:12 17408 ----a-w- c:\windows\system32\atitvo32.dll
2011-01-26 22:15 . 2010-11-02 18:12 847872 ----a-w- c:\windows\system32\ati2cqag.dll
2011-01-26 22:12 . 2010-11-02 18:12 64512 ----a-w- c:\windows\system32\atimpc32.dll
2011-01-26 22:12 . 2010-11-02 18:12 64512 ----a-w- c:\windows\system32\amdpcom32.dll
2011-01-26 22:12 . 2010-11-02 18:12 53248 ----a-w- c:\windows\system32\drivers\ati2erec.dll
2011-01-09 15:11 . 2011-01-09 15:11 0 ----a-w- c:\documents and settings\All Users\Data aplikací\xml2C.tmp
2011-01-09 15:11 . 2010-09-23 22:33 0 ----a-w- c:\documents and settings\All Users\Data aplikací\xml8.tmp
2010-12-21 18:05 . 2010-12-21 18:04 73216 ----a-w- c:\windows\ST6UNST.EXE
2010-12-21 18:05 . 2010-12-21 18:04 249856 ------w- c:\windows\Setup1.exe
2010-12-20 17:09 . 2010-09-22 11:05 38224 ----a-w- c:\windows\system32\drivers\mbamswissarmy.sys
2010-12-20 17:08 . 2010-09-22 11:05 20952 ----a-w- c:\windows\system32\drivers\mbam.sys
.
.
((((((((((((((((((((((((((((( SnapShot@2011-03-14_20.59.49 )))))))))))))))))))))))))))))))))))))))))
.
+ 2011-03-15 17:32 . 2011-03-15 17:32 16384 c:\windows\temp\Perflib_Perfdata_7d4.dat
.
(((((((((((((((((((((((((((((((((( Spouštěcí body v registru )))))))))))))))))))))))))))))))))))))))))))))
.
.
*Poznámka* prázdné záznamy a legitimní výchozí údaje nejsou zobrazeny.
REGEDIT4
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Google Update"="c:\documents and settings\Jan\Local Settings\Data aplikací\Google\Update\GoogleUpdate.exe" [2010-10-19 136176]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"WINDVDPatch"="CTHELPER.EXE" [2002-07-02 24576]
"Adobe Reader Speed Launcher"="c:\program files\Adobe\Reader 9.0\Reader\Reader_sl.exe" [2011-01-31 35760]
"Adobe ARM"="c:\program files\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2010-09-20 932288]
"StartCCC"="c:\program files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" [2011-01-26 98304]
.
[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="c:\windows\System32\CTFMON.EXE" [2008-04-14 15360]
.
c:\documents and settings\Jan\Nabˇdka Start\Programy\Po spuçtŘnˇ\
Z stupce - etmin.lnk - f:\!!! etcko od peti\etmin\etmin.exe [2009-10-8 24064]
.
[HKLM\~\startupfolder\C:^Documents and Settings^All Users^Nabídka Start^Programy^Po spuštění^HP Digital Imaging Monitor.lnk]
path=c:\documents and settings\All Users\Nabídka Start\Programy\Po spuštění\HP Digital Imaging Monitor.lnk
backup=c:\windows\pss\HP Digital Imaging Monitor.lnkCommon Startup
.
[HKLM\~\startupfolder\C:^Documents and Settings^All Users^Nabídka Start^Programy^Po spuštění^InterVideo WinCinema Manager.lnk]
path=c:\documents and settings\All Users\Nabídka Start\Programy\Po spuštění\InterVideo WinCinema Manager.lnk
backup=c:\windows\pss\InterVideo WinCinema Manager.lnkCommon Startup
.
[HKLM\~\startupfolder\C:^Documents and Settings^Jan^Nabídka Start^Programy^Po spuštění^Výřezy obrazovky a spuštění aplikace OneNote 2007.lnk]
path=c:\documents and settings\Jan\Nabídka Start\Programy\Po spuštění\Výřezy obrazovky a spuštění aplikace OneNote 2007.lnk
backup=c:\windows\pss\Výřezy obrazovky a spuštění aplikace OneNote 2007.lnkStartup
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Acronis Scheduler2 Service]
2010-03-27 14:07 362232 ----a-w- c:\program files\Common Files\Acronis\Schedule2\schedhlp.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\GrooveMonitor]
2006-10-26 22:47 31016 ----a-w- c:\program files\Microsoft Office\Office12\GrooveMonitor.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\TrueImageMonitor.exe]
2010-03-27 14:06 5107232 ----a-w- c:\program files\Acronis\TrueImageHome\TrueImageMonitor.exe
.
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile]
"EnableFirewall"= 0 (0x0)
.
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\system32\\sessmgr.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hpqtra08.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hpqste08.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hposid01.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hpqkygrp.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hpqcopy2.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hpfcCopy.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hpoews01.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hpiscnapp.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hpqgplgtupl.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hpqgpc01.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hpqusgm.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hpqusgh.exe"=
"c:\\Program Files\\HP\\HP Software Update\\hpwucli.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\smart web printing\\SmartWebPrintExe.exe"=
"c:\\Program Files\\HLSW\\hlsw.exe"=
"f:\\!!! ETcko od Peti\\ET.exe"=
"c:\\WINDOWS\\system32\\PnkBstrA.exe"=
"c:\\WINDOWS\\system32\\PnkBstrB.exe"=
"c:\\Program Files\\ICQ7.2\\ICQ.exe"=
"c:\\Program Files\\ICQ7.2\\aolload.exe"=
"c:\\Program Files\\Activision\\Call of Duty 4 - Modern Warfare\\iw3mp.exe"=
"c:\\Program Files\\Microsoft Office\\Office12\\OUTLOOK.EXE"=
"c:\\Program Files\\Microsoft Office\\Office12\\GROOVE.EXE"=
"c:\\Program Files\\Microsoft Office\\Office12\\ONENOTE.EXE"=
"c:\\Sandra Lite 2010c\\RpcAgentSrv.exe"=
"c:\\Sandra Lite 2010c\\WNt500x86\\sandra.mui"=
"c:\\Program Files\\Google\\Google Earth\\plugin\\geplugin.exe"=
"c:\\Program Files\\InterVideo\\DVD6\\WinDVD.exe"=
"%windir%\\Network Diagnostic\\xpnetdiag.exe"=
"e:\\Battlefield2\\BF2.exe"=
"c:\\Sandra Lite 2010c\\WNt500x86\\RpcSandraSrv.exe"=
.
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\IcmpSettings]
"AllowInboundEchoRequest"= 1 (0x1)
.
R0 a347scsi;a347scsi;c:\windows\system32\drivers\a347scsi.sys [7.8.2010 22:26 5248]
R0 sptd;sptd;c:\windows\system32\drivers\sptd.sys [13.12.2010 21:21 697328]
R0 tdrpman258;Acronis Try&Decide and Restore Points filter (build 258);c:\windows\system32\drivers\tdrpm258.sys [9.8.2010 23:53 911680]
R1 SbFw;SbFw;c:\windows\system32\drivers\SbFw.sys [2.1.2011 19:33 270888]
R1 sbhips;Sunbelt HIPS Driver;c:\windows\system32\drivers\sbhips.sys [21.6.2008 4:54 66600]
R2 afcdpsrv;Acronis Nonstop Backup service;c:\program files\Common Files\Acronis\CDP\afcdpsrv.exe [9.8.2010 23:53 2480048]
R2 SbPF.Launcher;SbPF.Launcher;c:\program files\Firewall\SbPFLnch.exe [31.10.2008 7:24 95528]
R2 SPF4;Sunbelt Personal Firewall 4;c:\program files\Firewall\SbPFSvc.exe [31.10.2008 7:24 1365288]
R3 afcdp;afcdp;c:\windows\system32\drivers\afcdp.sys [9.8.2010 23:53 160704]
R3 SBFWIMCL;Sunbelt Software Firewall NDIS IM Filter Miniport;c:\windows\system32\drivers\SbFwIm.sys [2.1.2011 19:33 65576]
S0 a347bus;a347bus;c:\windows\system32\DRIVERS\a347bus.sys --> c:\windows\system32\DRIVERS\a347bus.sys [?]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;c:\windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [18.3.2010 13:16 130384]
S2 gupdate;Služba Google Update (gupdate);c:\program files\Google\Update\GoogleUpdate.exe [6.9.2010 19:57 136176]
S3 Avgfwdx;Avgfwdx;c:\windows\system32\DRIVERS\avgfwdx.sys --> c:\windows\system32\DRIVERS\avgfwdx.sys [?]
S3 DrvAgent32;DrvAgent32;c:\windows\system32\drivers\DrvAgent32.sys [13.3.2011 22:56 23456]
S3 SandraAgentSrv;SiSoftware Deployment Agent Service;c:\sandra lite 2010c\RpcAgentSrv.exe [12.8.2010 18:39 93336]
S3 WPFFontCache_v0400;Windows Presentation Foundation Font Cache 4.0.0.0;c:\windows\Microsoft.NET\Framework\v4.0.30319\WPF\WPFFontCache_v0400.exe [18.3.2010 13:16 753504]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost]
HPZ12 REG_MULTI_SZ Pml Driver HPZ12 Net Driver HPZ12
hpdevmgmt REG_MULTI_SZ hpqcxs08 hpqddsvc
.
.
------- Doplňkový sken -------
.
IE: &Clean Traces - c:\program files\DAP\Privacy Package\dapcleanerie.htm
IE: &Download with &DAP - c:\program files\DAP\dapextie.htm
IE: Analyzovat LeechGetem - file://c:\program files\LeechGet 2009\\Parser.html
IE: Download &all with DAP - c:\program files\DAP\dapextie2.htm
IE: Download LeechGetem - file://c:\program files\LeechGet 2009\\AddUrl.html
IE: Download s průvodcem LeechGetu - file://c:\program files\LeechGet 2009\\Wizard.html
IE: E&xportovat do aplikace Microsoft Excel - c:\progra~1\MICROS~2\Office12\EXCEL.EXE/3000
Name-Space Handler: ftp\ZDA - {5BFA1DAF-5EDC-11D2-959E-00C00C02DA5E} - c:\progra~1\DAP\dapie.dll
Name-Space Handler: http\ZDA - {5BFA1DAF-5EDC-11D2-959E-00C00C02DA5E} - c:\progra~1\DAP\dapie.dll
DPF: DirectAnimation Java Classes - file://c:\windows\Java\classes\dajava.cab
DPF: Microsoft XML Parser for Java - file://c:\windows\Java\classes\xmldso.cab
FF - ProfilePath - c:\documents and settings\Jan\Data aplikací\Mozilla\Firefox\Profiles\bvhnkaez.default\
FF - prefs.js: browser.startup.homepage - www.google.cz
FF - Ext: Default: {972ce4c6-7e08-4474-a285-3208198ce6fd} - c:\program files\Mozilla Firefox\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}
FF - Ext: Java Console: {CAFEEFAC-0016-0000-0022-ABCDEFFEDCBA} - c:\program files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0022-ABCDEFFEDCBA}
FF - Ext: Java Quick Starter: jqs@sun.com - c:\program files\Java\jre6\lib\deploy\jqs\ff
FF - Ext: SpeedBit Video Downloader: {0329E7D6-6F54-462D-93F6-F5C3118BADF2} - c:\program files\SpeedBit Video Downloader\SPFireFox
FF - Ext: Download Accelerator Plus (DAP) extension: {F17C1572-C9EC-4e5c-A542-D05CBB5C5A08} - c:\program files\DAP\DAPFireFox
FF - Ext: FEBE: {4BBDD651-70CF-4821-84F8-2B918CF89CA3} - %profile%\extensions\{4BBDD651-70CF-4821-84F8-2B918CF89CA3}
FF - Ext: Adblock Plus: {d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d} - %profile%\extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}
FF - Ext: Flagfox: {1018e4d6-728f-4b20-ad56-37578a4de76b} - %profile%\extensions\{1018e4d6-728f-4b20-ad56-37578a4de76b}
.
.
**************************************************************************
.
catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2011-03-15 18:44
Windows 5.1.2600 Service Pack 3 NTFS
.
skenování skrytých procesů ...
.
skenování skrytých položek 'Po spuštění' ...
.
skenování skrytých souborů ...
.
sken byl úspešně dokončen
skryté soubory: 0
.
**************************************************************************
.
--------------------- Knihovny navázané na běžící procesy ---------------------
.
- - - - - - - > 'winlogon.exe'(1408)
c:\windows\system32\Ati2evxx.dll
c:\windows\system32\atiadlxx.dll
.
Celkový čas: 2011-03-15 18:47:10
ComboFix-quarantined-files.txt 2011-03-15 17:47
ComboFix2.txt 2011-03-14 21:02
.
Před spuštěním: 8 653 840 384
Po spuštění: 8 623 816 704
.
Current=3 Default=3 Failed=1 LastKnownGood=4 Sets=1,2,3,4
- - End Of File - - 1472D521AF596D1EB9BADDD1952D078D
Nahr nˇ probŘhlo ŁspŘçnŘ

[Rudy]

Smazáno, log již vypadá čistý.

[DutchCZE]

Děkuji velice za Váš čas a ochotu, tímpádem čisté PC, bohužel problém s Plug and Play BIOS Extension dále setrvá.
Pokusím se ještě něco vygooglit.

[Rudy]

OK a nemáte zač!