Padání a restart přes BSOD

[duff74]

Dobrý den. Poprosil bych o kontrolu logu jestli tam není nějaká havěť, protože mi ntb čistě náhodně, ale hlavně opakovaně padá do BSOD a restartuje se. Díky.

log:


Logfile of random's system information tool 1.06 (written by random/random)
Run by David at 2013-11-26 11:53:41
Microsoft Windows XP Home Edition Service Pack 2
System drive C: has 101 GB (88%) free of 114 GB
Total RAM: 1471 MB (58% free)

HijackThis download failed

======Scheduled tasks folder======

C:\WINDOWS\tasks\AppleSoftwareUpdate.job
C:\WINDOWS\tasks\avast! Emergency Update.job
C:\WINDOWS\tasks\GoogleUpdateTaskMachineCore.job
C:\WINDOWS\tasks\GoogleUpdateTaskMachineUA.job

======Registry dump======

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"NvCplDaemon"=C:\WINDOWS\system32\NvCpl.dll [2006-04-27 7561216]
"nwiz"=nwiz.exe /install []
"NvMediaCenter"=C:\WINDOWS\system32\NvMcTray.dll [2006-04-27 86016]
"HControl"=C:\WINDOWS\ATK0100\HControl.exe [2006-08-23 110592]
"RTHDCPL"=C:\WINDOWS\RTHDCPL.EXE [2006-08-14 16050176]
"SkyTel"=C:\WINDOWS\SkyTel.EXE [2006-05-16 2879488]
"Alcmtr"=C:\WINDOWS\ALCMTR.EXE [2005-05-03 69632]
"Apoint"=C:\Program Files\Apoint2K\Apoint.exe [2006-06-02 176128]
"Wireless Console 2"=C:\Program Files\Wireless Console 2\wcourier.exe [2005-10-17 987136]
"ACU"=C:\Program Files\ASUS WLAN Adapter\ACU.exe [2006-04-27 307200]
"AvastUI.exe"=C:\Program Files\AVAST Software\Avast\AvastUI.exe [2013-11-14 3568312]
"APSDaemon"=C:\Program Files\Common Files\Apple\Apple Application Support\APSDaemon.exe [2013-04-21 59720]
"QuickTime Task"=C:\Program Files\QuickTime\QTTask.exe [2013-05-01 421888]
"seznam-listicka-distribuce"=C:\Program Files\Seznam.cz\distribution\szninstall.exe [2013-05-16 1062472]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"=C:\WINDOWS\system32\ctfmon.exe [2006-03-02 15360]
"cz.seznam.software.autoupdate"=C:\Documents and Settings\David\Data aplikací\Seznam.cz\szninstall.exe [2013-05-16 1062472]
"cz.seznam.software.szndesktop"=C:\Documents and Settings\David\Data aplikací\Seznam.cz\bin\wszndesktop.exe [2013-04-12 92664]

C:\Documents and Settings\All Users\Nabídka Start\Programy\Po spuštění
Bluetooth Manager.lnk - C:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosBtMng1.exe

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{1a3e09be-1e45-494b-9174-d7385b45bbf5}]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=145

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"C:\Program Files\Common Files\Apple\Apple Application Support\WebKit2WebProcess.exe"="C:\Program Files\Common Files\Apple\Apple Application Support\WebKit2WebProcess.exe:*:Enabled:WebKit"
"C:\WINDOWS\system32\dpvsetup.exe"="C:\WINDOWS\system32\dpvsetup.exe:*:Enabled:Microsoft DirectPlay Voice Test"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"

======List of files/folders created in the last 1 months======

2013-11-26 11:53:42 ----D---- C:\Program Files\trend micro
2013-11-26 11:53:41 ----D---- C:\rsit
2013-11-17 14:54:30 ----D---- C:\Documents and Settings\David\Data aplikací\SumatraPDF
2013-11-17 14:54:26 ----D---- C:\Program Files\SumatraPDF
2013-11-17 13:41:02 ----SHD---- C:\Config.Msi
2013-11-17 13:37:28 ----D---- C:\Documents and Settings\David\Data aplikací\Seznam.cz
2013-11-17 13:36:50 ----D---- C:\Program Files\Seznam.cz
2013-11-17 13:34:36 ----A---- C:\WINDOWS\system32\ssinstall-uninstall.bat
2013-11-17 13:34:35 ----A---- C:\WINDOWS\system32\ssins.exe
2013-11-14 17:59:59 ----D---- C:\Documents and Settings\David\Data aplikací\Apple Computer
2013-11-14 17:58:53 ----D---- C:\Program Files\QuickTime
2013-11-14 17:58:52 ----D---- C:\Documents and Settings\All Users\Data aplikací\Apple Computer
2013-11-14 17:58:28 ----D---- C:\Program Files\Common Files\Apple
2013-11-14 17:58:09 ----D---- C:\Program Files\Apple Software Update
2013-11-14 17:58:09 ----D---- C:\Documents and Settings\All Users\Data aplikací\Apple
2013-11-14 17:28:35 ----HDC---- C:\WINDOWS\$NtUninstallKB952011$
2013-11-14 17:18:44 ----D---- C:\Documents and Settings\David\Data aplikací\XnView
2013-11-14 17:18:29 ----D---- C:\Program Files\XnView
2013-11-14 17:05:51 ----D---- C:\Documents and Settings\David\Data aplikací\Ashampoo
2013-11-14 17:05:41 ----D---- C:\Documents and Settings\All Users\Data aplikací\Ashampoo
2013-11-14 17:05:36 ----D---- C:\Program Files\Ashampoo
2013-11-14 17:03:15 ----D---- C:\Program Files\CCleaner
2013-11-14 16:49:49 ----D---- C:\Documents and Settings\David\Data aplikací\Adobe
2013-11-14 16:48:05 ----D---- C:\Documents and Settings\All Users\Data aplikací\Adobe
2013-11-14 16:34:58 ----A---- C:\WINDOWS\system32\wpa.bak
2013-11-14 16:12:22 ----D---- C:\Program Files\AVAST Software
2013-11-14 16:05:41 ----D---- C:\Documents and Settings\David\Data aplikací\AVAST Software
2013-11-14 14:37:28 ----A---- C:\WINDOWS\system32\aswBoot.exe
2013-11-14 14:36:40 ----D---- C:\Documents and Settings\All Users\Data aplikací\AVAST Software
2013-11-14 14:20:52 ----D---- C:\Program Files\Google
2013-11-14 14:18:42 ----SHD---- C:\RECYCLER
2013-11-14 14:16:30 ----A---- C:\WINDOWS\system32\hpf3l101.dll
2013-11-14 14:16:28 ----RA---- C:\WINDOWS\system32\hpzids01.dll
2013-11-14 14:07:30 ----RA---- C:\WINDOWS\SET7B.tmp
2013-11-14 14:07:30 ----ASH---- C:\Documents and Settings\All Users\Data aplikací\desktop.ini
2013-11-14 14:07:27 ----RA---- C:\WINDOWS\SET4C.tmp
2013-11-14 14:07:25 ----RA---- C:\WINDOWS\SET2F.tmp
2013-11-14 14:07:23 ----RA---- C:\WINDOWS\SET25.tmp
2013-11-14 14:07:05 ----SD---- C:\Documents and Settings\All Users\Data aplikací\Microsoft
2013-11-14 14:04:09 ----RA---- C:\WINDOWS\SET6E.tmp
2013-11-14 14:04:07 ----RA---- C:\WINDOWS\SET3E.tmp
2013-11-14 14:04:03 ----RA---- C:\WINDOWS\SET27.tmp
2013-11-14 14:04:01 ----RA---- C:\WINDOWS\SET22.tmp
2013-11-14 13:57:54 ----RA---- C:\WINDOWS\SET6D.tmp
2013-11-14 13:57:51 ----RA---- C:\WINDOWS\SET3B.tmp
2013-11-14 13:57:48 ----RA---- C:\WINDOWS\SET24.tmp
2013-11-14 13:57:47 ----RA---- C:\WINDOWS\SET20.tmp
2013-11-14 13:54:40 ----RA---- C:\WINDOWS\SET55.tmp
2013-11-14 13:54:37 ----RA---- C:\WINDOWS\SET2A.tmp
2013-11-14 13:54:36 ----D---- C:\WINDOWS\system32\Lang
2013-11-14 13:54:35 ----RA---- C:\WINDOWS\SET1B.tmp
2013-11-14 13:54:34 ----RA---- C:\WINDOWS\SET18.tmp
2013-11-14 13:51:55 ----RA---- C:\WINDOWS\SET53.tmp
2013-11-14 13:51:53 ----RA---- C:\WINDOWS\SET28.tmp
2013-11-14 13:51:51 ----RA---- C:\WINDOWS\SET1C.tmp
2013-11-14 13:51:49 ----RA---- C:\WINDOWS\SET19.tmp
2013-11-14 13:50:57 ----D---- C:\WINDOWS\Minidump
2013-11-14 13:49:58 ----A---- C:\WINDOWS\system32\h323log.txt
2013-11-14 13:45:47 ----A---- C:\WINDOWS\system32\results.txt
2013-11-14 13:45:47 ----A---- C:\WINDOWS\system32\acs.exe
2013-11-14 13:45:42 ----A---- C:\WINDOWS\system32\wgapi.dll
2013-11-14 13:45:42 ----A---- C:\WINDOWS\system32\wcapi.dll
2013-11-14 13:45:42 ----A---- C:\WINDOWS\system32\athcfg11res.dll
2013-11-14 13:45:42 ----A---- C:\WINDOWS\system32\athcfg11.dll
2013-11-14 13:45:42 ----A---- C:\WINDOWS\system32\AegisI5.exe
2013-11-14 13:45:42 ----A---- C:\WINDOWS\system32\AegisE5.dll
2013-11-14 13:45:40 ----D---- C:\Program Files\ASUS WLAN Adapter
2013-11-14 13:44:14 ----D---- C:\temp
2013-11-14 13:43:41 ----A---- C:\WINDOWS\tosOBEX.INI
2013-11-14 13:43:10 ----A---- C:\WINDOWS\system32\usbui.dll
2013-11-14 13:42:13 ----SHD---- C:\WINDOWS\Installer
2013-11-14 13:42:13 ----A---- C:\WINDOWS\system32\PerfStringBackup.INI
2013-11-14 13:42:12 ----D---- C:\Program Files\Common Files\ODBC
2013-11-14 13:42:12 ----A---- C:\WINDOWS\ODBCINST.INI
2013-11-14 13:42:09 ----D---- C:\Program Files\Common Files\SpeechEngines
2013-11-14 13:42:08 ----RD---- C:\Program Files
2013-11-14 13:42:08 ----D---- C:\Program Files\Common Files\Microsoft Shared
2013-11-14 13:42:08 ----D---- C:\Program Files\Common Files
2013-11-14 13:42:05 ----RA---- C:\WINDOWS\system32\kbdtuq.dll
2013-11-14 13:42:05 ----RA---- C:\WINDOWS\system32\kbdtuf.dll
2013-11-14 13:42:05 ----RA---- C:\WINDOWS\system32\kbdazel.dll
2013-11-14 13:42:03 ----RA---- C:\WINDOWS\system32\kbduzb.dll
2013-11-14 13:42:03 ----RA---- C:\WINDOWS\system32\kbdur.dll
2013-11-14 13:42:03 ----RA---- C:\WINDOWS\system32\kbdtat.dll
2013-11-14 13:42:03 ----RA---- C:\WINDOWS\system32\kbdmon.dll
2013-11-14 13:42:03 ----RA---- C:\WINDOWS\system32\kbdkyr.dll
2013-11-14 13:42:03 ----RA---- C:\WINDOWS\system32\kbdkaz.dll
2013-11-14 13:42:03 ----RA---- C:\WINDOWS\system32\kbdaze.dll
2013-11-14 13:42:02 ----RA---- C:\WINDOWS\system32\kbdycc.dll
2013-11-14 13:42:02 ----RA---- C:\WINDOWS\system32\kbdru1.dll
2013-11-14 13:42:02 ----RA---- C:\WINDOWS\system32\kbdru.dll
2013-11-14 13:42:02 ----RA---- C:\WINDOWS\system32\kbdbu.dll
2013-11-14 13:42:02 ----RA---- C:\WINDOWS\system32\kbdblr.dll
2013-11-14 13:42:00 ----RA---- C:\WINDOWS\system32\kbdhept.dll
2013-11-14 13:42:00 ----RA---- C:\WINDOWS\system32\kbdhela3.dll
2013-11-14 13:42:00 ----RA---- C:\WINDOWS\system32\kbdhela2.dll
2013-11-14 13:42:00 ----RA---- C:\WINDOWS\system32\kbdhe319.dll
2013-11-14 13:42:00 ----RA---- C:\WINDOWS\system32\kbdhe220.dll
2013-11-14 13:42:00 ----RA---- C:\WINDOWS\system32\kbdhe.dll
2013-11-14 13:42:00 ----RA---- C:\WINDOWS\system32\kbdgkl.dll
2013-11-14 13:41:59 ----RA---- C:\WINDOWS\system32\kbdlt1.dll
2013-11-14 13:41:58 ----RA---- C:\WINDOWS\system32\kbdlv1.dll
2013-11-14 13:41:58 ----RA---- C:\WINDOWS\system32\kbdlv.dll
2013-11-14 13:41:58 ----RA---- C:\WINDOWS\system32\kbdlt.dll
2013-11-14 13:41:58 ----RA---- C:\WINDOWS\system32\kbdest.dll
2013-11-14 13:41:55 ----A---- C:\WINDOWS\system32\kbdsl1.dll
2013-11-14 13:41:55 ----A---- C:\WINDOWS\system32\kbdsl.dll
2013-11-14 13:41:54 ----A---- C:\WINDOWS\system32\kbdycl.dll
2013-11-14 13:41:54 ----A---- C:\WINDOWS\system32\kbdro.dll
2013-11-14 13:41:54 ----A---- C:\WINDOWS\system32\kbdpl1.dll
2013-11-14 13:41:54 ----A---- C:\WINDOWS\system32\kbdpl.dll
2013-11-14 13:41:54 ----A---- C:\WINDOWS\system32\kbdhu1.dll
2013-11-14 13:41:54 ----A---- C:\WINDOWS\system32\kbdhu.dll
2013-11-14 13:41:54 ----A---- C:\WINDOWS\system32\kbdcr.dll
2013-11-14 13:41:54 ----A---- C:\WINDOWS\system32\KBDAL.DLL
2013-11-14 13:41:53 ----A---- C:\WINDOWS\system32\spxcoins.dll
2013-11-14 13:41:53 ----A---- C:\WINDOWS\system32\irclass.dll
2013-11-14 13:41:53 ----A---- C:\WINDOWS\system32\EqnClass.Dll
2013-11-14 13:41:53 ----A---- C:\WINDOWS\system32\dgsetup.dll
2013-11-14 13:41:53 ----A---- C:\WINDOWS\system32\dgrpsetu.dll
2013-11-14 13:41:51 ----A---- C:\WINDOWS\TASKMAN.EXE
2013-11-14 13:41:50 ----N---- C:\WINDOWS\system32\CONFIG.TMP
2013-11-14 13:41:50 ----A---- C:\WINDOWS\system32\batt.dll
2013-11-14 13:41:49 ----A---- C:\WINDOWS\NOTEPAD.EXE
2013-11-14 13:41:48 ----A---- C:\WINDOWS\system32\storprop.dll
2013-11-14 13:41:41 ----RA---- C:\WINDOWS\SET21.tmp
2013-11-14 13:41:38 ----RA---- C:\WINDOWS\SET8.tmp
2013-11-14 13:41:36 ----RA---- C:\WINDOWS\SET4.tmp
2013-11-14 13:41:35 ----RA---- C:\WINDOWS\SET3.tmp
2013-11-14 13:41:29 ----D---- C:\WINDOWS\system32\CatRoot2
2013-11-14 13:41:29 ----D---- C:\WINDOWS\system32\CatRoot
2013-11-14 13:40:27 ----D---- C:\Program Files\Toshiba
2013-11-14 13:40:15 ----D---- C:\Documents and Settings
2013-11-14 13:40:14 ----SHD---- C:\System Volume Information
2013-11-14 13:39:34 ----SH---- C:\boot.ini
2013-11-14 13:39:13 ----D---- C:\Program Files\Wireless Console 2
2013-11-14 13:39:13 ----A---- C:\WINDOWS\system32\wcourier.exe
2013-11-14 13:39:13 ----A---- C:\WINDOWS\system32\msvcr71.dll
2013-11-14 13:37:11 ----RA---- C:\WINDOWS\system32\SynVFW.dll
2013-11-14 13:37:11 ----RA---- C:\WINDOWS\system32\SynUSD.dll
2013-11-14 13:37:11 ----RA---- C:\WINDOWS\system32\SynSvc_.exe
2013-11-14 13:37:11 ----RA---- C:\WINDOWS\Syn112X.exe
2013-11-14 13:37:11 ----RA---- C:\WINDOWS\StkUnist.exe
2013-11-14 13:37:01 ----A---- C:\WINDOWS\system32\vfwwdm32.dll
2013-11-14 13:36:21 ----RA---- C:\WINDOWS\system32\Vxdif.dll
2013-11-14 13:36:21 ----D---- C:\Program Files\Apoint2K
2013-11-14 13:35:23 ----R---- C:\WINDOWS\system32\ChCfg.exe
2013-11-14 13:35:22 ----R---- C:\WINDOWS\system32\RtlCPAPI.dll
2013-11-14 13:34:59 ----D---- C:\WINDOWS\system32\RTCOM
2013-11-14 13:34:56 ----A---- C:\WINDOWS\system32\ksuser.dll
2013-11-14 13:34:29 ----A---- C:\WINDOWS\system32\spupdsvc.exe
2013-11-14 13:34:28 ----HDC---- C:\WINDOWS\$NtUninstallKB888111WXPSP2$
2013-11-14 13:34:26 ----R---- C:\WINDOWS\SoundMan.exe
2013-11-14 13:34:25 ----R---- C:\WINDOWS\SkyTel.exe
2013-11-14 13:34:24 ----R---- C:\WINDOWS\RtlUpd.exe
2013-11-14 13:34:21 ----R---- C:\WINDOWS\RTLCPL.exe
2013-11-14 13:34:11 ----R---- C:\WINDOWS\RTHDCPL.exe
2013-11-14 13:34:10 ----R---- C:\WINDOWS\MicCal.exe
2013-11-14 13:34:06 ----R---- C:\WINDOWS\alcwzrd.exe
2013-11-14 13:34:06 ----R---- C:\WINDOWS\Alcmtr.exe
2013-11-14 13:34:05 ----D---- C:\Program Files\Realtek
2013-11-14 13:34:04 ----HD---- C:\Program Files\InstallShield Installation Information
2013-11-14 13:33:52 ----R---- C:\WINDOWS\RtlExUpd.dll
2013-11-14 13:33:23 ----D---- C:\WINDOWS\ATK0100
2013-11-14 13:33:08 ----RSHDC---- C:\WINDOWS\system32\dllcache
2013-11-14 13:33:08 ----RSD---- C:\WINDOWS\Fonts
2013-11-14 13:33:08 ----RD---- C:\WINDOWS\Web
2013-11-14 13:33:08 ----HD---- C:\WINDOWS\inf
2013-11-14 13:33:08 ----D---- C:\WINDOWS\WinSxS
2013-11-14 13:33:08 ----D---- C:\WINDOWS\twain_32
2013-11-14 13:33:08 ----D---- C:\WINDOWS\Temp
2013-11-14 13:33:08 ----D---- C:\WINDOWS\system32\wins
2013-11-14 13:33:08 ----D---- C:\WINDOWS\system32\wbem
2013-11-14 13:33:08 ----D---- C:\WINDOWS\system32\usmt
2013-11-14 13:33:08 ----D---- C:\WINDOWS\system32\spool
2013-11-14 13:33:08 ----D---- C:\WINDOWS\system32\ShellExt
2013-11-14 13:33:08 ----D---- C:\WINDOWS\system32\Setup
2013-11-14 13:33:08 ----D---- C:\WINDOWS\system32\ras
2013-11-14 13:33:08 ----D---- C:\WINDOWS\system32\oobe
2013-11-14 13:33:08 ----D---- C:\WINDOWS\system32\npp
2013-11-14 13:33:08 ----D---- C:\WINDOWS\system32\mui
2013-11-14 13:33:08 ----D---- C:\WINDOWS\system32\inetsrv
2013-11-14 13:33:08 ----D---- C:\WINDOWS\system32\IME
2013-11-14 13:33:08 ----D---- C:\WINDOWS\system32\icsxml
2013-11-14 13:33:08 ----D---- C:\WINDOWS\system32\ias
2013-11-14 13:33:08 ----D---- C:\WINDOWS\system32\export
2013-11-14 13:33:08 ----D---- C:\WINDOWS\system32\drivers
2013-11-14 13:33:08 ----D---- C:\WINDOWS\system32\dhcp
2013-11-14 13:33:08 ----D---- C:\WINDOWS\system32\config
2013-11-14 13:33:08 ----D---- C:\WINDOWS\system32\3com_dmi
2013-11-14 13:33:08 ----D---- C:\WINDOWS\system32\3076
2013-11-14 13:33:08 ----D---- C:\WINDOWS\system32\2052
2013-11-14 13:33:08 ----D---- C:\WINDOWS\system32\1054
2013-11-14 13:33:08 ----D---- C:\WINDOWS\system32\1042
2013-11-14 13:33:08 ----D---- C:\WINDOWS\system32\1041
2013-11-14 13:33:08 ----D---- C:\WINDOWS\system32\1037
2013-11-14 13:33:08 ----D---- C:\WINDOWS\system32\1033
2013-11-14 13:33:08 ----D---- C:\WINDOWS\system32\1031
2013-11-14 13:33:08 ----D---- C:\WINDOWS\system32\1029
2013-11-14 13:33:08 ----D---- C:\WINDOWS\system32\1028
2013-11-14 13:33:08 ----D---- C:\WINDOWS\system32\1025
2013-11-14 13:33:08 ----D---- C:\WINDOWS\system32
2013-11-14 13:33:08 ----D---- C:\WINDOWS\system
2013-11-14 13:33:08 ----D---- C:\WINDOWS\security
2013-11-14 13:33:08 ----D---- C:\WINDOWS\Resources
2013-11-14 13:33:08 ----D---- C:\WINDOWS\repair
2013-11-14 13:33:08 ----D---- C:\WINDOWS\Provisioning
2013-11-14 13:33:08 ----D---- C:\WINDOWS\pchealth
2013-11-14 13:33:08 ----D---- C:\WINDOWS\PeerNet
2013-11-14 13:33:08 ----D---- C:\WINDOWS\mui
2013-11-14 13:33:08 ----D---- C:\WINDOWS\msapps
2013-11-14 13:33:08 ----D---- C:\WINDOWS\msagent
2013-11-14 13:33:08 ----D---- C:\WINDOWS\Media
2013-11-14 13:33:08 ----D---- C:\WINDOWS\java
2013-11-14 13:33:08 ----D---- C:\WINDOWS\ime
2013-11-14 13:33:08 ----D---- C:\WINDOWS\Help
2013-11-14 13:33:08 ----D---- C:\WINDOWS\Driver Cache
2013-11-14 13:33:08 ----D---- C:\WINDOWS\Debug
2013-11-14 13:33:08 ----D---- C:\WINDOWS\Cursors
2013-11-14 13:33:08 ----D---- C:\WINDOWS\Connection Wizard
2013-11-14 13:33:08 ----D---- C:\WINDOWS\Config
2013-11-14 13:33:08 ----D---- C:\WINDOWS\AppPatch
2013-11-14 13:33:08 ----D---- C:\WINDOWS\addins
2013-11-14 13:33:08 ----D---- C:\WINDOWS
2013-11-14 13:32:32 ----D---- C:\WINDOWS\nview
2013-11-14 13:32:32 ----A---- C:\WINDOWS\system32\nvudisp.exe
2013-11-14 13:31:09 ----RA---- C:\WINDOWS\system32\fdco1ins.dll
2013-11-14 13:31:09 ----RA---- C:\WINDOWS\system32\fdco1.dll
2013-11-14 13:31:07 ----RA---- C:\WINDOWS\system32\nvconrm.dll
2013-11-14 13:31:07 ----RA---- C:\WINDOWS\system32\bdco1ins.dll
2013-11-14 13:31:07 ----RA---- C:\WINDOWS\system32\bdco1.dll
2013-11-14 13:31:07 ----D---- C:\WINDOWS\NV472288.TMP
2013-11-14 13:31:07 ----A---- C:\WINDOWS\system32\nvunrm.exe
2013-11-14 13:31:06 ----RA---- C:\WINDOWS\system32\nvusmb.exe
2013-11-14 13:30:57 ----D---- C:\WINDOWS\system32\ReinstallBackups
2013-11-14 13:30:30 ----RA---- C:\WINDOWS\system32\NVUNINST.EXE
2013-11-14 13:30:20 ----D---- C:\Program Files\Common Files\InstallShield
2013-11-14 13:20:59 ----D---- C:\Documents and Settings\David\Data aplikací\Identities
2013-11-14 13:20:57 ----HD---- C:\Program Files\Uninstall Information
2013-11-14 13:20:52 ----ASH---- C:\Documents and Settings\David\Data aplikací\desktop.ini
2013-11-14 13:20:51 ----SD---- C:\Documents and Settings\David\Data aplikací\Microsoft
2013-11-14 13:19:47 ----D---- C:\WINDOWS\SoftwareDistribution
2013-11-14 13:19:46 ----D---- C:\WINDOWS\Prefetch
2013-11-14 13:19:45 ----SD---- C:\WINDOWS\system32\Microsoft
2013-11-14 13:19:45 ----A---- C:\WINDOWS\SchedLgU.Txt
2013-11-14 13:16:44 ----D---- C:\WINDOWS\system32\xircom
2013-11-14 13:16:44 ----D---- C:\Program Files\xerox
2013-11-14 13:16:44 ----D---- C:\Program Files\microsoft frontpage
2013-11-14 13:16:39 ----HD---- C:\WINDOWS\$hf_mig$
2013-11-14 13:16:27 ----A---- C:\WINDOWS\control.ini
2013-11-14 13:16:27 ----A---- C:\AUTOEXEC.BAT
2013-11-14 13:16:09 ----A---- C:\WINDOWS\system32\mapi32.dll
2013-11-14 13:15:30 ----SD---- C:\WINDOWS\Downloaded Program Files
2013-11-14 13:15:30 ----RD---- C:\WINDOWS\Offline Web Pages
2013-11-14 13:15:30 ----RAH---- C:\WINDOWS\system32\logonui.exe.manifest
2013-11-14 13:15:24 ----RAH---- C:\WINDOWS\system32\cdplayer.exe.manifest
2013-11-14 13:15:20 ----HD---- C:\Program Files\WindowsUpdate
2013-11-14 13:15:17 ----D---- C:\Program Files\Online Services
2013-11-14 13:15:00 ----D---- C:\WINDOWS\system32\DirectX
2013-11-14 13:14:38 ----A---- C:\WINDOWS\system32\atrace.dll
2013-11-14 13:14:35 ----A---- C:\WINDOWS\system32\desktop.ini
2013-11-14 13:14:35 ----A---- C:\WINDOWS\desktop.ini
2013-11-14 13:14:28 ----A---- C:\WINDOWS\system32\nmevtmsg.dll
2013-11-14 13:14:26 ----D---- C:\Program Files\Common Files\Services
2013-11-14 13:14:26 ----A---- C:\WINDOWS\system32\acctres.dll
2013-11-14 13:14:23 ----SD---- C:\WINDOWS\Tasks
2013-11-14 13:14:23 ----A---- C:\WINDOWS\system32\icfgnt5.dll
2013-11-14 13:14:21 ----D---- C:\Program Files\Common Files\MSSoap
2013-11-14 13:14:16 ----D---- C:\WINDOWS\srchasst
2013-11-14 13:14:15 ----D---- C:\WINDOWS\system32\Macromed
2013-11-14 13:14:12 ----A---- C:\WINDOWS\system32\wuweb.dll
2013-11-14 13:14:12 ----A---- C:\WINDOWS\system32\wucltui.dll
2013-11-14 13:14:12 ----A---- C:\WINDOWS\system32\wuauserv.dll
2013-11-14 13:14:12 ----A---- C:\WINDOWS\system32\wuaueng1.dll
2013-11-14 13:14:11 ----A---- C:\WINDOWS\system32\wups.dll
2013-11-14 13:14:11 ----A---- C:\WINDOWS\system32\wuaueng.dll
2013-11-14 13:14:11 ----A---- C:\WINDOWS\system32\wuauclt1.exe
2013-11-14 13:14:11 ----A---- C:\WINDOWS\system32\wuauclt.exe
2013-11-14 13:14:11 ----A---- C:\WINDOWS\system32\wuapi.dll
2013-11-14 13:14:10 ----A---- C:\WINDOWS\system32\qmgrprxy.dll
2013-11-14 13:14:10 ----A---- C:\WINDOWS\system32\qmgr.dll
2013-11-14 13:14:10 ----A---- C:\WINDOWS\system32\bitsprx3.dll
2013-11-14 13:14:10 ----A---- C:\WINDOWS\system32\bitsprx2.dll
2013-11-14 13:14:06 ----D---- C:\Program Files\Movie Maker
2013-11-14 13:14:02 ----A---- C:\WINDOWS\system32\safrslv.dll
2013-11-14 13:14:02 ----A---- C:\WINDOWS\system32\safrdm.dll
2013-11-14 13:14:02 ----A---- C:\WINDOWS\system32\safrcdlg.dll
2013-11-14 13:14:02 ----A---- C:\WINDOWS\system32\racpldlg.dll
2013-11-14 13:13:58 ----D---- C:\WINDOWS\system32\Restore
2013-11-14 13:13:58 ----A---- C:\WINDOWS\system32\srrstr.dll
2013-11-14 13:13:58 ----A---- C:\WINDOWS\system32\fltMc.exe
2013-11-14 13:13:58 ----A---- C:\WINDOWS\system32\fltlib.dll
2013-11-14 13:13:57 ----A---- C:\WINDOWS\system32\srsvc.dll
2013-11-14 13:13:57 ----A---- C:\WINDOWS\system32\srclient.dll
2013-11-14 13:13:57 ----A---- C:\WINDOWS\system32\isrdbg32.dll
2013-11-14 13:13:57 ----A---- C:\WINDOWS\system32\ils.dll
2013-11-14 13:13:56 ----A---- C:\WINDOWS\system32\nmmkcert.dll
2013-11-14 13:13:56 ----A---- C:\WINDOWS\system32\msconf.dll
2013-11-14 13:13:56 ----A---- C:\WINDOWS\system32\mnmsrvc.exe
2013-11-14 13:13:56 ----A---- C:\WINDOWS\system32\mnmdd.dll
2013-11-14 13:13:53 ----D---- C:\Program Files\NetMeeting
2013-11-14 13:13:53 ----A---- C:\WINDOWS\system32\msoert2.dll
2013-11-14 13:13:53 ----A---- C:\WINDOWS\system32\msoeacct.dll
2013-11-14 13:13:52 ----A---- C:\WINDOWS\system32\inetres.dll
2013-11-14 13:13:51 ----A---- C:\WINDOWS\system32\inetcomm.dll
2013-11-14 13:13:49 ----D---- C:\Program Files\Outlook Express
2013-11-14 13:13:49 ----A---- C:\WINDOWS\system32\schedsvc.dll
2013-11-14 13:13:49 ----A---- C:\WINDOWS\system32\mstinit.exe
2013-11-14 13:13:49 ----A---- C:\WINDOWS\system32\mstask.dll
2013-11-14 13:13:48 ----A---- C:\WINDOWS\system32\icwphbk.dll
2013-11-14 13:13:48 ----A---- C:\WINDOWS\system32\icwdial.dll
2013-11-14 13:13:47 ----A---- C:\WINDOWS\system32\isign32.dll
2013-11-14 13:13:47 ----A---- C:\WINDOWS\system32\inetcfg.dll
2013-11-14 13:13:40 ----D---- C:\Program Files\Common Files\System
2013-11-14 13:13:36 ----D---- C:\Program Files\Internet Explorer
2013-11-14 13:13:26 ----D---- C:\Program Files\ComPlus Applications
2013-11-14 13:13:24 ----A---- C:\WINDOWS\vbaddin.ini
2013-11-14 13:13:24 ----A---- C:\WINDOWS\vb.ini
2013-11-14 13:13:20 ----D---- C:\WINDOWS\Registration
2013-11-14 13:12:55 ----D---- C:\Program Files\Windows Media Player
2013-11-14 13:12:50 ----D---- C:\Program Files\Messenger
2013-11-14 13:12:46 ----D---- C:\Program Files\MSN Gaming Zone
2013-11-14 13:12:46 ----A---- C:\WINDOWS\system32\write.exe
2013-11-14 13:12:36 ----A---- C:\WINDOWS\system32\sndvol32.exe
2013-11-14 13:12:36 ----A---- C:\WINDOWS\system32\hticons.dll
2013-11-14 13:12:35 ----A---- C:\WINDOWS\system32\winchat.exe
2013-11-14 13:12:35 ----A---- C:\WINDOWS\system32\avwav.dll
2013-11-14 13:12:35 ----A---- C:\WINDOWS\system32\avtapi.dll
2013-11-14 13:12:35 ----A---- C:\WINDOWS\system32\avmeter.dll
2013-11-14 13:12:27 ----A---- C:\WINDOWS\system32\getuname.dll
2013-11-14 13:12:26 ----A---- C:\WINDOWS\system32\charmap.exe
2013-11-14 13:12:25 ----A---- C:\WINDOWS\system32\winmine.exe
2013-11-14 13:12:25 ----A---- C:\WINDOWS\system32\sol.exe
2013-11-14 13:12:25 ----A---- C:\WINDOWS\system32\mshearts.exe
2013-11-14 13:12:25 ----A---- C:\WINDOWS\system32\calc.exe
2013-11-14 13:12:24 ----A---- C:\WINDOWS\system32\usrlogon.cmd
2013-11-14 13:12:24 ----A---- C:\WINDOWS\system32\tsshutdn.exe
2013-11-14 13:12:24 ----A---- C:\WINDOWS\system32\tslabels.ini
2013-11-14 13:12:24 ----A---- C:\WINDOWS\system32\tskill.exe
2013-11-14 13:12:24 ----A---- C:\WINDOWS\system32\tsdiscon.exe
2013-11-14 13:12:24 ----A---- C:\WINDOWS\system32\tscon.exe
2013-11-14 13:12:24 ----A---- C:\WINDOWS\system32\shadow.exe
2013-11-14 13:12:24 ----A---- C:\WINDOWS\system32\rwinsta.exe
2013-11-14 13:12:24 ----A---- C:\WINDOWS\system32\reset.exe
2013-11-14 13:12:24 ----A---- C:\WINDOWS\system32\regini.exe
2013-11-14 13:12:24 ----A---- C:\WINDOWS\system32\freecell.exe
2013-11-14 13:12:23 ----A---- C:\WINDOWS\system32\rdpcfgex.dll
2013-11-14 13:12:23 ----A---- C:\WINDOWS\system32\qwinsta.exe
2013-11-14 13:12:23 ----A---- C:\WINDOWS\system32\qappsrv.exe
2013-11-14 13:12:23 ----A---- C:\WINDOWS\system32\msg.exe
2013-11-14 13:12:23 ----A---- C:\WINDOWS\system32\msdtcprf.ini
2013-11-14 13:12:23 ----A---- C:\WINDOWS\system32\logoff.exe
2013-11-14 13:12:23 ----A---- C:\WINDOWS\system32\cdmodem.dll
2013-11-14 13:12:22 ----A---- C:\WINDOWS\system32\mtxlegih.dll
2013-11-14 13:12:22 ----A---- C:\WINDOWS\system32\mtxex.dll
2013-11-14 13:12:22 ----A---- C:\WINDOWS\system32\mtxdm.dll
2013-11-14 13:12:22 ----A---- C:\WINDOWS\system32\dcomcnfg.exe
2013-11-14 13:12:21 ----A---- C:\WINDOWS\system32\stclient.dll
2013-11-14 13:12:21 ----A---- C:\WINDOWS\system32\comsnap.dll
2013-11-14 13:12:21 ----A---- C:\WINDOWS\system32\comrepl.dll
2013-11-14 13:12:21 ----A---- C:\WINDOWS\system32\comaddin.dll
2013-11-14 13:12:16 ----A---- C:\WINDOWS\system32\wmimgmt.msc
2013-11-14 13:12:15 ----A---- C:\WINDOWS\system32\sndrec32.exe
2013-11-14 13:12:15 ----A---- C:\WINDOWS\system32\mplay32.exe
2013-11-14 13:12:15 ----A---- C:\WINDOWS\system32\accwiz.exe
2013-11-14 13:12:14 ----D---- C:\Program Files\Windows NT
2013-11-14 13:12:14 ----A---- C:\WINDOWS\system32\mspaint.exe
2013-11-14 13:12:14 ----A---- C:\WINDOWS\system32\hypertrm.dll
2013-11-14 13:12:14 ----A---- C:\WINDOWS\system32\clipbrd.exe
2013-11-14 13:12:13 ----A---- C:\WINDOWS\system32\tscfgwmi.dll
2013-11-14 13:12:13 ----A---- C:\WINDOWS\system32\spider.exe
2013-11-14 13:12:12 ----A---- C:\WINDOWS\system32\sessmgr.exe
2013-11-14 13:12:12 ----A---- C:\WINDOWS\system32\remotepg.dll
2013-11-14 13:12:12 ----A---- C:\WINDOWS\system32\rdshost.exe
2013-11-14 13:12:12 ----A---- C:\WINDOWS\system32\rdsaddin.exe
2013-11-14 13:12:12 ----A---- C:\WINDOWS\system32\rdchost.dll
2013-11-14 13:12:12 ----A---- C:\WINDOWS\system32\mstscax.dll
2013-11-14 13:12:12 ----A---- C:\WINDOWS\system32\mstsc.exe
2013-11-14 13:12:11 ----A---- C:\WINDOWS\system32\tscupgrd.exe
2013-11-14 13:12:11 ----A---- C:\WINDOWS\system32\termsrv.dll
2013-11-14 13:12:11 ----A---- C:\WINDOWS\system32\rdpwsx.dll
2013-11-14 13:12:11 ----A---- C:\WINDOWS\system32\rdpsnd.dll
2013-11-14 13:12:11 ----A---- C:\WINDOWS\system32\rdpclip.exe
2013-11-14 13:12:11 ----A---- C:\WINDOWS\system32\qprocess.exe
2013-11-14 13:12:11 ----A---- C:\WINDOWS\system32\icaapi.dll
2013-11-14 13:12:11 ----A---- C:\WINDOWS\system32\cfgbkend.dll
2013-11-14 13:12:10 ----D---- C:\WINDOWS\system32\MsDtc
2013-11-14 13:12:10 ----A---- C:\WINDOWS\system32\xolehlp.dll
2013-11-14 13:12:10 ----A---- C:\WINDOWS\system32\mtxoci.dll
2013-11-14 13:12:10 ----A---- C:\WINDOWS\system32\msdtcuiu.dll
2013-11-14 13:12:10 ----A---- C:\WINDOWS\system32\msdtctm.dll
2013-11-14 13:12:10 ----A---- C:\WINDOWS\system32\msdtcprx.dll
2013-11-14 13:12:09 ----A---- C:\WINDOWS\system32\msdtclog.dll
2013-11-14 13:12:09 ----A---- C:\WINDOWS\system32\msdtc.exe
2013-11-14 13:12:08 ----D---- C:\WINDOWS\system32\Com
2013-11-14 13:12:08 ----A---- C:\WINDOWS\system32\colbact.dll
2013-11-14 13:12:08 ----A---- C:\WINDOWS\system32\clbcatex.dll
2013-11-14 13:12:08 ----A---- C:\WINDOWS\system32\catsrvut.dll
2013-11-14 13:12:08 ----A---- C:\WINDOWS\system32\catsrvps.dll
2013-11-14 13:12:08 ----A---- C:\WINDOWS\system32\catsrv.dll
2013-11-14 13:12:07 ----A---- C:\WINDOWS\system32\comuid.dll
2013-11-14 13:12:07 ----A---- C:\WINDOWS\system32\comsvcs.dll
2013-11-14 13:12:07 ----A---- C:\WINDOWS\system32\clbcatq.dll
2013-11-14 13:12:02 ----A---- C:\WINDOWS\system32\servdeps.dll
2013-11-14 13:12:01 ----A---- C:\WINDOWS\system32\mmfutil.dll
2013-11-14 13:12:01 ----A---- C:\WINDOWS\system32\licwmi.dll
2013-11-14 13:12:01 ----A---- C:\WINDOWS\system32\cmprops.dll

======List of files/folders modified in the last 1 months======

2013-11-14 14:07:38 ----A---- C:\WINDOWS\system.ini
2013-11-14 13:16:27 ----A---- C:\WINDOWS\win.ini

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R1 aswKbd;aswKbd; \??\C:\WINDOWS\system32\drivers\aswKbd.sys []
R1 aswRdr;aswRdr; \??\C:\WINDOWS\system32\drivers\aswRdr.sys []
R1 aswSnx;aswSnx; \??\C:\WINDOWS\system32\drivers\aswSnx.sys []
R1 aswSP;aswSP; \??\C:\WINDOWS\system32\drivers\aswSP.sys []
R1 aswTdi;aswTdi; \??\C:\WINDOWS\system32\drivers\aswTdi.sys []
R1 Tosrfcom;Bluetooth RFCOMM from TOSHIBA; C:\WINDOWS\System32\Drivers\tosrfcom.sys [2005-08-01 64896]
R1 WmiAcpi;Microsoft Windows Management Interface for ACPI; C:\WINDOWS\system32\DRIVERS\wmiacpi.sys [2004-08-04 8832]
R2 AegisP;AEGIS Protocol (IEEE 802.1x) v3.4.10.0; C:\WINDOWS\system32\DRIVERS\AegisP.sys [2013-11-14 21275]
R2 aswFsBlk;aswFsBlk; \??\C:\WINDOWS\system32\drivers\aswFsBlk.sys []
R2 aswMonFlt;aswMonFlt; \??\C:\WINDOWS\system32\drivers\aswMonFlt.sys []
R3 ApfiltrService;Alps Pointing-device Filter Driver; C:\WINDOWS\system32\DRIVERS\Apfiltr.sys [2006-05-26 111104]
R3 AR5211;Atheros Wireless Network Adapter Service; C:\WINDOWS\system32\DRIVERS\ar5211.sys [2006-04-09 471264]
R3 ASNDIS5;ASNDIS5 Protocol Driver; \??\C:\WINDOWS\ATK0100\ASNDIS5.SYS []
R3 CmBatt;Microsoft ACPI Control Method Battery Driver; C:\WINDOWS\system32\DRIVERS\CmBatt.sys [2004-08-04 14080]
R3 HDAudBus;Microsoft UAA Bus Driver for High Definition Audio; C:\WINDOWS\system32\DRIVERS\HDAudBus.sys [2005-01-07 138752]
R3 hidusb;Ovladač třídy standardu HID; C:\WINDOWS\system32\DRIVERS\hidusb.sys [2006-03-02 9600]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\WINDOWS\system32\drivers\RtkHDAud.sys [2006-08-15 4368896]
R3 M3AD;Motorola Messenger Modem Audio Device; C:\WINDOWS\system32\drivers\m3aux.sys [2006-08-10 136832]
R3 mouhid;Ovladač myši standardu HID; C:\WINDOWS\system32\DRIVERS\mouhid.sys [2006-03-02 12160]
R3 MTsensor;ATK0100 ACPI UTILITY; C:\WINDOWS\system32\DRIVERS\ATKACPI.sys [2005-02-17 5632]
R3 nv;nv; C:\WINDOWS\system32\DRIVERS\nv4_mini.sys [2006-04-27 3659968]
R3 NVENETFD;NVIDIA nForce Networking Controller Driver; C:\WINDOWS\system32\DRIVERS\NVENETFD.sys [2006-05-09 34176]
R3 nvnetbus;NVIDIA Network Bus Enumerator; C:\WINDOWS\system32\DRIVERS\nvnetbus.sys [2006-05-09 13184]
R3 sdbus;sdbus; C:\WINDOWS\system32\DRIVERS\sdbus.sys [2006-03-02 67584]
R3 SynMini;ASUS WebCam, 1.3M, USB2.0, FF; C:\WINDOWS\System32\Drivers\SynMini.sys [2006-01-20 841110]
R3 SynScan;ASUS WebCam Still Image; C:\WINDOWS\System32\Drivers\SynScan.sys [2006-01-02 8278]
R3 tosporte;Bluetooth Port Driver from Toshiba; C:\WINDOWS\system32\DRIVERS\tosporte.sys [2006-04-19 47488]
R3 Tosrfbd;Bluetooth RFBUS from TOSHIBA; C:\WINDOWS\System32\Drivers\tosrfbd.sys [2006-05-18 110976]
R3 Tosrfbnp;Bluetooth RFBNEP from TOSHIBA; C:\WINDOWS\System32\Drivers\tosrfbnp.sys [2006-03-16 37632]
R3 Tosrfhid;Bluetooth RFHID from TOSHIBA; C:\WINDOWS\system32\DRIVERS\Tosrfhid.sys [2006-05-09 62848]
R3 tosrfnds;Bluetooth Personal Area Network from TOSHIBA; C:\WINDOWS\system32\DRIVERS\tosrfnds.sys [2005-01-06 18612]
R3 Tosrfusb;Bluetooth USB Controller; C:\WINDOWS\System32\Drivers\tosrfusb.sys [2006-05-09 40192]
R3 usbehci;Ovladač miniportu rozšířeného radiče hostitele Microsoft USB 2.0; C:\WINDOWS\system32\DRIVERS\usbehci.sys [2006-03-02 26624]
R3 usbhub;Rozbočovač umožnující USB2; C:\WINDOWS\system32\DRIVERS\usbhub.sys [2006-03-02 57600]
R3 usbohci;Ovladač Miniport otevřeného hostitelského řadiče Microsoft USB; C:\WINDOWS\system32\DRIVERS\usbohci.sys [2006-03-02 17024]
S3 Arp1394;Protokol 1394 ARP Client; C:\WINDOWS\system32\DRIVERS\arp1394.sys [2006-03-02 60800]
S3 CCDECODE;Dekodér Closed Caption; C:\WINDOWS\system32\DRIVERS\CCDECODE.sys [2004-08-03 17024]
S3 MSTEE;Microsoft Streaming Tee/Sink-to-Sink Converter; C:\WINDOWS\system32\drivers\MSTEE.sys [2004-08-03 5504]
S3 NABTSFEC;NABTS/FEC VBI Codec; C:\WINDOWS\system32\DRIVERS\NABTSFEC.sys [2004-08-03 85376]
S3 NdisIP;Microsoft TV/Video Connection; C:\WINDOWS\system32\DRIVERS\NdisIP.sys [2004-08-03 10880]
S3 NIC1394;1394 Net Driver; C:\WINDOWS\system32\DRIVERS\nic1394.sys [2006-03-02 61824]
S3 SLIP;BDA Slip De-Framer; C:\WINDOWS\system32\DRIVERS\SLIP.sys [2004-08-03 11136]
S3 streamip;BDA IPSink; C:\WINDOWS\system32\DRIVERS\StreamIP.sys [2004-08-03 15360]
S3 toshidpt;TOSHIBA Bluetooth HID port driver; C:\WINDOWS\system32\drivers\Toshidpt.sys [2005-07-11 3712]
S3 TosRfSnd;Bluetooth Audio Device (WDM) from TOSHIBA; C:\WINDOWS\system32\drivers\TosRfSnd.sys [2006-03-15 52864]
S3 USBSTOR;Ovladač velkokapacitního paměťového zařízení USB; C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS [2004-08-03 26496]
S3 WSTCODEC;Dálnopisný kodek světového standardu; C:\WINDOWS\system32\DRIVERS\WSTCODEC.SYS [2004-08-03 19328]
S4 IntelIde;IntelIde; C:\WINDOWS\system32\drivers\IntelIde.sys []

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 ACS;ASUS Configuration Service; C:\WINDOWS\system32\acs.exe [2006-03-28 36864]
R2 avast! Antivirus;avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [2013-11-14 50344]
R2 avast! Firewall;avast! Firewall; C:\Program Files\AVAST Software\Avast\afwServ.exe [2013-11-14 116776]
R2 NVSvc;NVIDIA Display Driver Service; C:\WINDOWS\system32\nvsvc32.exe [2006-04-27 143427]
R2 ssinstall;SInstalátor; C:\WINDOWS\System32\ssins.exe [2013-11-17 2324216]
S2 gupdate;Služba Google Update (gupdate); C:\Program Files\Google\Update\GoogleUpdate.exe [2013-11-14 116648]
S3 gupdatem;Služba Google Update (gupdatem); C:\Program Files\Google\Update\GoogleUpdate.exe [2013-11-14 116648]
S3 gusvc;Google Updater Service; C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe [2011-05-09 136120]

-----------------EOF-----------------

[Rudy]

Zdravím!
Otevřte adresář c:\windows\minidump, jeho obsah zabalte do raru a přiložte k vašemu příštímu postu.

[duff74]

Zdravím. Tak tady je obsah složky minidump:

Minidump.rar

(228.76 KiB) Staženo 95 x

Snad jsem to provedl správně

[Rudy]

Správně. Neinstaloval jste v poslední době nový hardware, nebo není něco v PC přetaktováno?

[duff74]

Nejsem si vědomý, že bych instaloval nějaký nový HW. Jen jsem asi před 14 dny v zoufalství přeinstaloval celý systém, včetně formátu HDD, ale problém přetrvává stále. Po opětovné instalaci jsem si většinu věcí natáhl zpátky, tak jsem nevěděl jestli není chyba v nich.

[Rudy]

A přetaktování?

[duff74]

A přetaktování?

Ne. Upřímně řečeno, ani nevím jak se to dělá.

[Rudy]

OK. Jelkož problém může být jak virový, tak hardwarový, dejte nejprve log ComboFix:

Stahnete a ulozte nejlepe na plochu ComboFix: http://download.bleepingcomputer.com/sUBs/ComboFix.exe

pote spustte aplikaci pod uctem s administratorskym opravnenim

hned po startu se zobrazi obrazovka s licencnimi podminkami, pokracujte kliknutim na tlacitko Ano.

v klidu si postavte na kafe (cela akce trva cca. 5-10 minut, nekdy i dele - dle toho, o jak rychly stroj se

jedna a kolika soubory se skener bude muset prodirat), behem skenu se nepokousejte spoustet zadne jine

aplikace ani nic jineho

behem skenovani nepropadejte panice, vas stroj muze byt restartovan (predevsim pri prvni aplikaci skeneru)

upozorneni: pokud pouzivate antispyware s rezidentnim stitem, prepnete jeho rezidentni stit do Install Mode,

pripadne jej po dobu skenu uplne deaktivujte, protoze dochazi pri skenu a vymazu pripadneho malware k

nezadoucim kolizim s rezidentem antispyware.

[duff74]

To byl zas horor!!!!!! Log z Combofixu jsem dělal asi na 7-krát. a tento post píšu na 15 krát.


ComboFix 13-11-27.01 - David 29.11.2013 17:11:15.2.1 - x86
Microsoft Windows XP Home Edition 5.1.2600.2.1250.420.1029.18.1471.1079 [GMT 1:00]
Spuštěný z: c:\documents and settings\David\Plocha\ComboFix.exe
AV: avast! Internet Security *Disabled/Updated* {7591DB91-41F0-48A3-B128-1A293FD8233D}
FW: avast! Internet Security *Disabled* {7591DB91-41F0-48A3-B128-1A293FD8233D}
.
.
((((((((((((((((((((((((( Soubory vytvořené od 2013-10-28 do 2013-11-29 )))))))))))))))))))))))))))))))
.
.
2013-11-26 10:53 . 2013-11-26 10:53 -------- d-----w- C:\rsit
.
.
.
(((((((((((((((((((((((((((((((((((((((( Find3M výpis ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
.
(((((((((((((((((((((((((((((((((( Spouštěcí body v registru )))))))))))))))))))))))))))))))))))))))))))))
.
.
*Poznámka* prázdné záznamy a legitimní výchozí údaje nejsou zobrazeny.
REGEDIT4
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\00avast]
@="{472083B0-C522-11CF-8763-00608CC02F24}"
[HKEY_CLASSES_ROOT\CLSID\{472083B0-C522-11CF-8763-00608CC02F24}]
2013-11-14 15:35 321752 ----a-w- c:\program files\AVAST Software\Avast\ashShell.dll
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"cz.seznam.software.autoupdate"="c:\documents and settings\David\Data aplikací\Seznam.cz\szninstall.exe" [2013-05-16 1062472]
"cz.seznam.software.szndesktop"="c:\documents and settings\David\Data aplikací\Seznam.cz\bin\wszndesktop.exe" [2013-04-12 92664]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"NvCplDaemon"="c:\windows\system32\NvCpl.dll" [2006-04-27 7561216]
"nwiz"="nwiz.exe" [2006-04-27 1519616]
"NvMediaCenter"="c:\windows\system32\NvMcTray.dll" [2006-04-27 86016]
"HControl"="c:\windows\ATK0100\HControl.exe" [2006-08-23 110592]
"RTHDCPL"="RTHDCPL.EXE" [2006-08-14 16050176]
"SkyTel"="SkyTel.EXE" [2006-05-16 2879488]
"Apoint"="c:\program files\Apoint2K\Apoint.exe" [2006-06-02 176128]
"Wireless Console 2"="c:\program files\Wireless Console 2\wcourier.exe" [2005-10-17 987136]
"ACU"="c:\program files\ASUS WLAN Adapter\ACU.exe" [2006-04-27 307200]
"AvastUI.exe"="c:\program files\AVAST Software\Avast\AvastUI.exe" [2013-11-14 3568312]
"APSDaemon"="c:\program files\Common Files\Apple\Apple Application Support\APSDaemon.exe" [2013-04-21 59720]
"QuickTime Task"="c:\program files\QuickTime\QTTask.exe" [2013-05-01 421888]
"seznam-listicka-distribuce"="c:\program files\Seznam.cz\distribution\szninstall.exe" [2013-05-16 1062472]
.
[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="c:\windows\system32\CTFMON.EXE" [2006-03-02 15360]
.
c:\documents and settings\All Users\Nabídka Start\Programy\Po spuštění\
Bluetooth Manager.lnk - c:\program files\Toshiba\Bluetooth Toshiba Stack\TosBtMng1.exe [2006-5-24 49152]
.
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\system32\\sessmgr.exe"=
"c:\\Program Files\\Common Files\\Apple\\Apple Application Support\\WebKit2WebProcess.exe"=
"c:\\WINDOWS\\system32\\dpvsetup.exe"=
.
R0 aswNdis;avast! Firewall NDIS Filter Service;c:\windows\system32\drivers\aswNdis.sys [14.11.2013 16:35 12112]
R0 aswNdis2;avast! Firewall NDIS Driver;c:\windows\system32\drivers\aswndis2.sys [14.11.2013 16:35 247192]
R0 aswRvrt;avast! Revert;c:\windows\system32\drivers\aswRvrt.sys [14.11.2013 16:12 49944]
R0 aswVmm;avast! VM Monitor;c:\windows\system32\drivers\aswVmm.sys [14.11.2013 16:12 178304]
R1 aswKbd;aswKbd;c:\windows\system32\drivers\aswKbd.sys [14.11.2013 16:35 26136]
R1 aswSnx;aswSnx;c:\windows\system32\drivers\aswSnx.sys [14.11.2013 16:12 774392]
R1 aswSP;aswSP;c:\windows\system32\drivers\aswsp.sys [14.11.2013 16:12 403440]
R2 aswFsBlk;aswFsBlk;c:\windows\system32\drivers\aswFsBlk.sys [14.11.2013 16:12 35656]
R2 aswMonFlt;aswMonFlt;c:\windows\system32\drivers\aswMonFlt.sys [14.11.2013 16:12 70384]
R2 avast! Firewall;avast! Firewall;c:\program files\AVAST Software\Avast\afwServ.exe [14.11.2013 16:35 116776]
R2 ssinstall;SInstalátor;c:\windows\system32\ssins.exe [17.11.2013 13:34 2324216]
R3 SynMini;ASUS WebCam, 1.3M, USB2.0, FF;c:\windows\system32\drivers\SynMini.sys [14.11.2013 13:37 841110]
R3 SynScan;ASUS WebCam Still Image;c:\windows\system32\drivers\SynScan.sys [14.11.2013 13:37 8278]
.
--- Ostatní služby/ovladače v paměti ---
.
*NewlyCreated* - WS2IFSL
.
[HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{8A69D345-D564-463c-AFF1-A69D9E530F96}]
2013-11-15 07:25 1210320 ----a-w- c:\program files\Google\Chrome\Application\31.0.1650.57\Installer\chrmstp.exe
.
Obsah adresáře 'Naplánované úlohy'
.
2013-11-14 c:\windows\Tasks\AppleSoftwareUpdate.job
- c:\program files\Apple Software Update\SoftwareUpdate.exe [2011-06-01 16:57]
.
2013-11-29 c:\windows\Tasks\avast! Emergency Update.job
- c:\program files\AVAST Software\Avast\AvastEmUpdate.exe [2013-11-14 15:35]
.
2013-11-29 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
- c:\program files\Google\Update\GoogleUpdate.exe [2013-11-14 13:20]
.
2013-11-27 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
- c:\program files\Google\Update\GoogleUpdate.exe [2013-11-14 13:20]
.
.
------- Doplňkový sken -------
.
IE: Add to Google Photos Screensa&ver - c:\windows\system32\GPhotos.scr/200
TCP: DhcpNameServer = 10.27.5.5
.
.
**************************************************************************
.
catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2013-11-29 17:15
Windows 5.1.2600 Service Pack 2 NTFS
.
skenování skrytých procesů ...
.
skenování skrytých položek 'Po spuštění' ...
.
skenování skrytých souborů ...
.
sken byl úspešně dokončen
skryté soubory: 0
.
**************************************************************************
.
Celkový čas: 2013-11-29 17:16:57
ComboFix-quarantined-files.txt 2013-11-29 16:16
.
Před spuštěním: Volných bajtů: 104 894 541 824
Po spuštění: Volných bajtů: 104 854 872 064
.
- - End Of File - - 52DA51FF36413456C013F6AFA9743FD6
413FC2A0C716421B3158746D63736515

[Rudy]

Díky za trpělivost. Virový problém to nebude, log je OK. Zkuste otestovat disk pomocí CrystalDiskInfo: http://www.stahuj.centrum.cz/utility_a_ ... ldiskinfo/ . Spusťte a přes Úpravy>kopírovat sem dejte log.

[duff74]

Crystaldisk info:

----------------------------------------------------------------------------
CrystalDiskInfo 5.6.2 (C) 2008-2013 hiyohiyo
Crystal Dew World : http://crystalmark.info/
----------------------------------------------------------------------------

OS : Windows XP Home Edition SP2 [5.1 Build 2600] (x86)
Date : 2013/12/01 17:01:52

-- Controller Map ----------------------------------------------------------
+ PCI Standardní dvoukanálový řadič IDE [ATA]
- Primární kanál IDE (0)
+ Sekundární kanál IDE (1)
- HL-DT-ST DVDRAM GSA-T10N
+ PCI Standardní dvoukanálový řadič IDE [ATA]
+ Primární kanál IDE (0)
- ST9120821AS
- Sekundární kanál IDE (1)

-- Disk List ---------------------------------------------------------------
(1) ST9120821AS : 120,0 GB [0/1/0, pd1] - st

----------------------------------------------------------------------------
(1) ST9120821AS
----------------------------------------------------------------------------
Model : ST9120821AS
Firmware : 3.06
Serial Number : 5PL39PD9
Disk Size : 120,0 GB (8,4/120,0/120,0/120,0)
Buffer Size : 8192 KB
Queue Depth : 32
# of Sectors : 234441648
Rotation Rate : Neznámy údaj
Interface : Serial ATA
Major Version : ATA/ATAPI-7
Minor Version : ----
Transfer Mode : SATA/150
Power On Hours : 12245 hod.
Power On Count : 6092 krát
Temparature : 27 C (80 F)
Health Status : Dobrý
Features : S.M.A.R.T., APM, 48bit LBA, NCQ
APM Level : 8080h [ON]
AAM Level : ----

-- S.M.A.R.T. --------------------------------------------------------------
ID Cur Wor Thr RawValues(6) Attribute Name
01 100 253 __6 000000000000 Počet chyb čtení
03 _95 _95 __0 000000000000 Čas na roztočení ploten
04 _95 _95 _20 0000000017F2 Počet spuštění/zastavení
05 100 100 _36 000000000000 Počet přemapovaných sektorů
07 _84 _60 _30 0000108435E7 Počet chybných hledání
09 _87 _87 __0 000000002FD5 Hodin v činnosti
0A 100 100 _34 000000000000 Počet opakovaných pokusů o roztočení ploten
0C _95 _95 _20 0000000017CC Počet cyklů zapnutí zařízení
BB 100 100 __0 000000000000 Ohlášeno neopravitelných chyb
BD _84 _84 __0 000000000010 Vysoká rychlost zápisu
BE _73 _44 _45 00001B11001B Teplota toku vzduchu
C0 _99 _99 __0 000000000CDB Počet vypnutí disku
C1 __1 __1 __0 00000003B49D Počet cyklů načítání/vymazání
C2 _27 _56 __0 00040000001B Teplota
C3 _64 _44 __0 000003A24728 Počet oprav chybného čtení
C5 100 100 __0 000000000000 Počet podezřelých sektorů
C6 100 100 __0 000000000000 Počet neopravitelných sektorů
C7 200 200 __0 000000000000 Počet chyb v kontrolním součtu UltraDMA
C8 100 253 __0 000000000000 Počet chyb při zápisu sektorů
CA 100 253 __0 000000000000 Počet chyb při směrování údajů

-- IDENTIFY_DEVICE ---------------------------------------------------------
0 1 2 3 4 5 6 7 8 9
000: 0C5A 3FFF C837 0010 0000 0000 003F 0000 0000 0000
010: 2020 2020 2020 2020 2020 2020 3550 4C33 3950 4439
020: 0000 4000 0004 332E 3036 2020 2020 5354 3931 3230
030: 3832 3141 5320 2020 2020 2020 2020 2020 2020 2020
040: 2020 2020 2020 2020 2020 2020 2020 8010 0000 2F00
050: 4000 0200 0200 0007 3FFF 0010 003F FC10 00FB 0110
060: 4BB0 0DF9 0000 0007 0003 0078 0078 00F0 0078 0000
070: 0000 0000 0000 0000 0000 001F 0502 0000 0048 0040
080: 00FE 0000 346B 7D09 6003 3469 3C09 6003 407F 0000
090: 0000 8080 FFFE 0000 FE00 0000 0000 0000 0000 0000
100: 4BB0 0DF9 0000 0000 0000 0000 4000 0000 0000 0000
110: 0000 0000 0000 0000 0000 0000 0000 0100 0000 0000
120: 0000 0000 0000 0000 0000 0000 0000 0000 0009 4BB0
130: 0DF9 4BB0 0DF9 2020 0002 82B6 0002 0000 3C06 3C06
140: FFFF 07C6 0100 0000 100F 1800 0002 0080 0000 0000
150: 60A0 0000 0000 0000 0000 0000 0000 0000 0600 000B
160: 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000
170: 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000
180: 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000
190: 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000
200: 0000 0000 0000 0000 0000 0000 0001 0000 0000 0000
210: 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000
220: 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000
230: 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000
240: 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000
250: 0000 0000 0000 0000 0000 E9A5

-- SMART_READ_DATA ---------------------------------------------------------
+0 +1 +2 +3 +4 +5 +6 +7 +8 +9 +A +B +C +D +E +F
000: 0A 00 01 0F 00 64 FD 00 00 00 00 00 00 00 03 03
010: 00 5F 5F 00 00 00 00 00 00 00 04 32 00 5F 5F F2
020: 17 00 00 00 00 00 05 33 00 64 64 00 00 00 00 00
030: 00 00 07 0F 00 54 3C E7 35 84 10 00 00 00 09 32
040: 00 57 57 D5 2F 00 00 00 00 00 0A 13 00 64 64 00
050: 00 00 00 00 00 00 0C 32 00 5F 5F CC 17 00 00 00
060: 00 00 BB 32 00 64 64 00 00 00 00 00 00 00 BD 3A
070: 00 54 54 10 00 00 00 00 00 00 BE 22 00 49 2C 1B
080: 00 11 1B 00 00 00 C0 32 00 63 63 DB 0C 00 00 00
090: 00 00 C1 32 00 01 01 9D B4 03 00 00 00 00 C2 22
0A0: 00 1B 38 1B 00 00 00 04 00 00 C3 1A 00 40 2C 28
0B0: 47 A2 03 00 00 00 C5 12 00 64 64 00 00 00 00 00
0C0: 00 00 C6 10 00 64 64 00 00 00 00 00 00 00 C7 3E
0D0: 00 C8 C8 00 00 00 00 00 00 00 C8 00 00 64 FD 00
0E0: 00 00 00 00 00 00 CA 32 00 64 FD 00 00 00 00 00
0F0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
100: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
110: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
120: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
130: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
140: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
150: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
160: 00 00 00 00 00 00 00 00 00 00 82 00 AA 01 00 5B
170: 03 00 01 00 01 6F 02 00 00 00 00 00 00 00 00 00
180: 00 00 00 00 00 00 02 05 05 05 05 05 05 05 05 00
190: 00 00 00 00 00 00 00 01 00 00 00 00 00 00 00 00
1A0: 01 00 B0 A5 49 E5 F8 07 00 00 00 00 00 00 00 00
1B0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
1C0: 02 00 01 00 00 00 00 00 00 00 A6 DB 79 30 03 00
1D0: 00 00 A5 21 18 00 00 00 00 00 00 00 00 00 00 00
1E0: E3 8D 01 00 00 00 00 00 00 00 00 00 00 00 00 00
1F0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 9F

-- SMART_READ_THRESHOLD ----------------------------------------------------
+0 +1 +2 +3 +4 +5 +6 +7 +8 +9 +A +B +C +D +E +F
000: 0A 00 01 06 00 00 00 00 00 00 00 00 00 00 03 00
010: 00 00 00 00 00 00 00 00 00 00 04 14 00 00 00 00
020: 00 00 00 00 00 00 05 24 00 00 00 00 00 00 00 00
030: 00 00 07 1E 00 00 00 00 00 00 00 00 00 00 09 00
040: 00 00 00 00 00 00 00 00 00 00 0A 22 00 00 00 00
050: 00 00 00 00 00 00 0C 14 00 00 00 00 00 00 00 00
060: 00 00 BB 00 00 00 00 00 00 00 00 00 00 00 BD 00
070: 00 00 00 00 00 00 00 00 00 00 BE 2D 00 00 00 00
080: 00 00 00 00 00 00 C0 00 00 00 00 00 00 00 00 00
090: 00 00 C1 00 00 00 00 00 00 00 00 00 00 00 C2 00
0A0: 00 00 00 00 00 00 00 00 00 00 C3 00 00 00 00 00
0B0: 00 00 00 00 00 00 C5 00 00 00 00 00 00 00 00 00
0C0: 00 00 C6 00 00 00 00 00 00 00 00 00 00 00 C7 00
0D0: 00 00 00 00 00 00 00 00 00 00 C8 00 00 00 00 00
0E0: 00 00 00 00 00 00 CA 00 00 00 00 00 00 00 00 00
0F0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
100: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
110: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
120: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
130: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
140: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
150: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
160: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
170: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
180: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
190: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
1A0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
1B0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
1C0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
1D0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
1E0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
1F0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 E4

[Rudy]

Disk je OK. Zkuste kontrolu RAM: http://forum.viry.cz/viewtopic.php?f=53&t=106788 .

[duff74]

To CD s Memtestem jsem si vytvořil už dřív, ale nedaří se mi ho po restartu načíst. I když mám v BIOSu nastaveno, že mám bootovat z CD mechaniky. Kde můžu dělat chybu?

[Rudy]

Pokud je CD vypáleno jako bootovatelné, mělo by se načít. Samozřejmě musí být funkční mechanika. Jiný problém by tam být neměl.

[duff74]

Tak z CD se mi to nějak nepodařilo, i když vypalovačka je v pořádku. Přes flešku už to klaplo, nechal jsem Memtest běžet přes 13 hodin. Nevím jestli se z Memtestu někde ukládá nějaký log, ale výsledek je errors: 0.

Mimochodem od cca 16.h včerejšího dne doteď to ani jednou nespadlo. Nechápu...