Problémy s WinXP

Kulda2 · Příspěvekod **Kulda2** » 28 bře 2008 19:40

Nedávno jsem si koupil nový počítač a asi tak po 2 měsících mi začli blbnout windowsi. Když dám start vypnout tak so objeví normálně ukládání nastavení pak vypínání a nic se neděje, občas se mi stalo, že se vypnul, ale většinou musím komp vypnout natvrdo, další problém je, že už se mi asi 3x v poslednich 5 dnech stalo, že po nějaké době přídu k počítači jenom se dotknu myši nebo kliknu na klávesnici a komp se bezdůvodně restartuje, sice jinak pracuje systém v pořádku ale začíná mě to rozčilovat. A dále mám jenom jednoho uživatele, dřív mi počítač naběhl bez problémů rovnou na plochu ale teď musím kliknout ještě na ikonu uživatele než pokračuje nabíhání. Mám Windows XP Profesional SP2. Děkuji za rady.

Reklama

paul27 · Příspěvekod **paul27** » 28 bře 2008 19:43

No pro začátek bych zkusil HJT (odkaz v podpise). :wink:

Kulda2 · Příspěvekod **Kulda2** » 28 bře 2008 20:09

tady je log ale ja se v nem nevyznam
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 20:08:11, on 28.3.2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16608)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\ATKKBService.exe
C:\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe
C:\Program Files\Nero\Nero 7\InCD\InCDsrv.exe
C:\Program Files\Common Files\LightScribe\LSSrvc.exe
C:\Program Files\Common Files\Microsoft Shared\VS7Debug\mdm.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\WINDOWS\system32\PnkBstrA.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\ASUS\GamerOSD\GamerOSD.exe
C:\WINDOWS\RTHDCPL.EXE
C:\Program Files\ASUS\AI Gear2\GearHelp.exe
C:\WINDOWS\system32\rundll32.exe
C:\Program Files\ASUS\Ai Nap\AiNap.exe
C:\Program Files\Nero\Nero 7\InCD\InCD.exe
C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe
C:\Program Files\DAP\DAP.EXE
C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe
C:\WINDOWS\system32\RUNDLL32.EXE
C:\Program Files\SlySoft\CloneCD\CloneCDTray.exe
C:\Program Files\Sony Ericsson\Mobile2\Application Launcher\Application Launcher.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Common Files\LightScribe\LightScribeControlPanel.exe
C:\Program Files\Common Files\Ahead\Lib\NMBgMonitor.exe
C:\Program Files\PowerArchiver\PASTARTER.EXE
C:\Program Files\DAEMON Tools Lite\daemon.exe
C:\Program Files\Messenger\msmsgs.exe
C:\Program Files\Common Files\Teleca Shared\CapabilityManager.exe
C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
C:\Program Files\TV-FM Tuner Player\TvPanel.exe
C:\Program Files\Common Files\Ahead\Lib\NMIndexStoreSvr.exe
C:\Program Files\SAGEM\SAGEM F@st 800-840\dslmon.exe
C:\Program Files\Common Files\Ahead\Lib\NMIndexingService.exe
C:\Program Files\Common Files\Teleca Shared\Generic.exe
C:\Program Files\Sony Ericsson\Mobile2\Mobile Phone Monitor\epmworker.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.seznam.cz/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Odkazy
O1 - Hosts: 66.98.148.65 auto.search.msn.com
O1 - Hosts: 66.98.148.65 auto.search.msn.es
O2 - BHO: Podpora odkazu pro Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [ASUSGamerOSD] C:\Program Files\ASUS\GamerOSD\GamerOSD.exe
O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE
O4 - HKLM\..\Run: [Alcmtr] ALCMTR.EXE
O4 - HKLM\..\Run: [Ai Gear Help] "C:\Program Files\ASUS\AI Gear2\GearHelp.exe"
O4 - HKLM\..\Run: [Ai Nap] "C:\Program Files\ASUS\Ai Nap\AiNap.exe"
O4 - HKLM\..\Run: [NeroFilterCheck] C:\Program Files\Common Files\Ahead\Lib\NeroCheck.exe
O4 - HKLM\..\Run: [InCD] C:\Program Files\Nero\Nero 7\InCD\InCD.exe
O4 - HKLM\..\Run: [RemoteControl] "C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe"
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [DownloadAccelerator] "C:\Program Files\DAP\DAP.EXE" /STARTUP
O4 - HKLM\..\Run: [egui] "C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe" /hide /waitservice
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [CloneCDTray] "C:\Program Files\SlySoft\CloneCD\CloneCDTray.exe" /s
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime
O4 - HKLM\..\Run: [amd_dc_opt] C:\Program Files\AMD\Dual-Core Optimizer\amd_dc_opt.exe
O4 - HKLM\..\Run: [Sony Ericsson PC Suite] "C:\Program Files\Sony Ericsson\Mobile2\Application Launcher\Application Launcher.exe" /startoptions
O4 - HKLM\..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [ASUS SmartDoctor] C:\Program Files\ASUS\SmartDoctor\SmartDoctor.exe /start
O4 - HKCU\..\Run: [LightScribe Control Panel] C:\Program Files\Common Files\LightScribe\LightScribeControlPanel.exe -hidden
O4 - HKCU\..\Run: [BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] "C:\Program Files\Common Files\Ahead\Lib\NMBgMonitor.exe"
O4 - HKCU\..\Run: [PowerArchiver Tray] C:\Program Files\PowerArchiver\PASTARTER.EXE
O4 - HKCU\..\Run: [DAEMON Tools Lite] "C:\Program Files\DAEMON Tools Lite\daemon.exe" -autorun
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKCU\..\Run: [SpybotSD TeaTimer] C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'Default user')
O4 - Global Startup: AutoCAD Startup Accelerator.lnk = C:\Program Files\Common Files\Autodesk Shared\acstart17.exe
O4 - Global Startup: Control Panel.lnk = C:\Program Files\TV-FM Tuner Player\TvPanel.exe
O4 - Global Startup: DSLMON.lnk = C:\Program Files\SAGEM\SAGEM F@st 800-840\dslmon.exe
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE
O8 - Extra context menu item: &Clean Traces - C:\Program Files\DAP\Privacy Package\dapcleanerie.htm
O8 - Extra context menu item: &Download with &DAP - C:\Program Files\DAP\dapextie.htm
O8 - Extra context menu item: Download &all with DAP - C:\Program Files\DAP\dapextie2.htm
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000
O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: ICQ6 - {E59EB121-F339-4851-A3BA-FE49C35617C2} - C:\Program Files\ICQ6\ICQ.exe
O9 - Extra 'Tools' menuitem: ICQ6 - {E59EB121-F339-4851-A3BA-FE49C35617C2} - C:\Program Files\ICQ6\ICQ.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O17 - HKLM\System\CCS\Services\Tcpip\..\{F96447E6-4AFB-477E-81C2-4E75D66CFDD6}: NameServer = 194.228.41.65 194.228.41.113
O23 - Service: ATK Keyboard Service (ATKKeyboardService) - ASUSTeK COMPUTER INC. - C:\WINDOWS\ATKKBService.exe
O23 - Service: Autodesk Licensing Service - Autodesk - C:\Program Files\Common Files\Autodesk Shared\Service\AdskScSrv.exe
O23 - Service: Eset HTTP Server (EhttpSrv) - ESET - C:\Program Files\ESET\ESET NOD32 Antivirus\EHttpSrv.exe
O23 - Service: Eset Service (ekrn) - ESET - C:\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: InCD Helper (InCDsrv) - Nero AG - C:\Program Files\Nero\Nero 7\InCD\InCDsrv.exe
O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files\Common Files\LightScribe\LSSrvc.exe
O23 - Service: NMIndexingService - Nero AG - C:\Program Files\Common Files\Ahead\Lib\NMIndexingService.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: PnkBstrA - Unknown owner - C:\WINDOWS\system32\PnkBstrA.exe

--
End of file - 8932 bytes

paul27 · Příspěvekod **paul27** » 28 bře 2008 20:47

Tohle je v pořádku. Neinstaloval si nějakej program, aktualizace něčeho?

Kulda2 · Příspěvekod **Kulda2** » 28 bře 2008 21:27

aktualizace windowsů se mi stahujou samy nic jinýho sem neinstaloval

paul27 · Příspěvekod **paul27** » 28 bře 2008 21:33

No zkus ještě toto, třeba tam něco přebývá:

Stáhněte a uložte na plochu ComboFix:

Spusťte aplikaci pod účtem Správce počítače - zavřete všechny spuštěné programy (webový prohlížeč, messenger ap.) - následuje licenční ujednání, klikněte na Ano - začne se testovat (celá akce trvá cca. 5-10 minut, někdy i trochu déle) - během skenu se nepokoušejte spouštět žádne jiné aplikace a neklikejte do okna ComboFixu - po dokončení se automaticky otevře okno poznámkového bloku s textem (pokud se tak nestane, log je v C:\ComboFix.txt), který sem pomocí známých klávesových zkratek Ctrl + A (označení celého textu) -> Ctrl + C (uložení do jakési schránky) -> Ctrl + V (vložení textu) zkopírujte - a počkejte na další postup

VAROVÁNÍ: Pokud se vám zobrazí "CRITICAL WARNING !!" nesmíte restartovat počítač, o varování napište.
VAROVÁNÍ2: Je možné, že při testu budou různé bezpečnostní programy hlásit neoprávněný pokus o smazání daného souboru či něco jiného. Povolte jejich případné dotazy nebo na dobu scanu úplně vypněte rezidentní modul daného programu.

Příspěvekod **Pic** » 28 bře 2008 21:36

A občasný úklid disku a jeho kontrolu občas děláš? Doporučuji CCleanerem uklidit a pak spustit kontrolu disku s případnou opravou chyb.

cicero · Příspěvekod **cicero** » 28 bře 2008 22:51

Vypadá to jako by se ti tloukly nějaký dva programy (už se mě to stalo taky že to nešlo vypnout)Většinou když máš třeba nainstal.dva spyware progr. Mně se u tebe nezdají tyto dva stejný programy v program files: C:program files/Eset Nod 32 antivirus/EKRN.Exe. a ...................C:program files/Eset Nod 32 antivirus/EGUI.EXE nevím proč by ten Nod tam měl být 2x.

paul27 · Příspěvekod **paul27** » 28 bře 2008 23:30

Zkus to, co psal Pic, je to dobrej nápad, úplně jsem na to zapoměl.

...C:program files/Eset Nod 32 antivirus/EKRN.Exe. a ...................C:program files/Eset Nod 32 antivirus/EGUI.EXE nevím proč by ten Nod tam měl být 2x.

Je to jen jeden program a to NOD32. Jeden z těchto souborů zajišťuje např. (nevím co právě tyto dva) aktualizace a druhý test na viry, třetí třeba rezidentní ochranu atd. Každý antivirový program má více spuštěných procesů = souborů ve Správci úloh.

Kulda2 · Příspěvekod **Kulda2** » 29 bře 2008 00:09

tak ten úklid disku dělám ale jenom příležitostně a tady je ten log z combofixu
ComboFix 08-03-27.1 - Michal 2008-03-29 0:04:09.1 - NTFSx86
Systém Microsoft Windows XP Professional 5.1.2600.2.1250.1.1029.18.1498 [GMT 1:00]
Running from: C:\Documents and Settings\Michal\Dokumenty\My Completed Downloads\ComboFix.exe
* Created a new restore point
* Resident AV is active

WARNING -THIS MACHINE DOES NOT HAVE THE RECOVERY CONSOLE INSTALLED !!
.

((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))
.

C:\WINDOWS\nayceaatm.dll
C:\WINDOWS\system32\natcraatm.dll

.
((((((((((((((((((((((((( Files Created from 2008-02-28 to 2008-03-28 )))))))))))))))))))))))))))))))
.

2008-03-28 20:07 . 2008-03-28 20:07 <DIR> d-------- C:\Program Files\Trend Micro
2008-03-28 10:09 . 2008-03-28 10:09 <DIR> d-------- C:\Program Files\Spybot - Search & Destroy
2008-03-28 10:09 . 2008-03-28 10:27 <DIR> d-------- C:\Documents and Settings\All Users\Data aplikací\Spybot - Search & Destroy
2008-03-27 16:41 . 2008-03-27 16:41 <DIR> d-------- C:\Documents and Settings\All Users\Documents
2008-03-27 16:41 . 2008-03-27 16:41 <DIR> d-------- C:\Documents and Settings\All Users\Data aplikací\Sony Ericsson
2008-03-27 16:40 . 2008-03-27 16:40 <DIR> d-------- C:\Program Files\Sony Ericsson
2008-03-27 16:40 . 2008-03-27 16:41 <DIR> d-------- C:\Documents and Settings\All Users\Data aplikací\Teleca
2008-03-27 16:39 . 2008-03-27 16:39 <DIR> d-------- C:\Program Files\Disc2Phone
2008-03-26 21:12 . 2008-03-28 16:47 54,156 --ah----- C:\WINDOWS\QTFont.qfn
2008-03-26 21:12 . 2008-03-26 21:12 1,409 --a------ C:\WINDOWS\QTFont.for
2008-03-20 14:17 . 2008-03-20 14:17 52,448 --a------ C:\Documents and Settings\Michal\Data aplikací\GDIPFONTCACHEV1.DAT
2008-03-20 09:54 . 2008-03-20 09:54 <DIR> d-------- C:\Program Files\BuegeSoft
2008-03-14 23:02 . 2008-03-14 23:02 <DIR> d-------- C:\Program Files\Paradox Interactive
2008-03-11 16:43 . 2008-03-11 16:43 0 --a--Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 20:08:11, on 28.3.2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16608)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\ATKKBService.exe
C:\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe
C:\Program Files\Nero\Nero 7\InCD\InCDsrv.exe
C:\Program Files\Common Files\LightScribe\LSSrvc.exe
C:\Program Files\Common Files\Microsoft Shared\VS7Debug\mdm.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\WINDOWS\system32\PnkBstrA.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\ASUS\GamerOSD\GamerOSD.exe
C:\WINDOWS\RTHDCPL.EXE
C:\Program Files\ASUS\AI Gear2\GearHelp.exe
C:\WINDOWS\system32\rundll32.exe
C:\Program Files\ASUS\Ai Nap\AiNap.exe
C:\Program Files\Nero\Nero 7\InCD\InCD.exe
C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe
C:\Program Files\DAP\DAP.EXE
C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe
C:\WINDOWS\system32\RUNDLL32.EXE
C:\Program Files\SlySoft\CloneCD\CloneCDTray.exe
C:\Program Files\Sony Ericsson\Mobile2\Application Launcher\Application Launcher.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Common Files\LightScribe\LightScribeControlPanel.exe
C:\Program Files\Common Files\Ahead\Lib\NMBgMonitor.exe
C:\Program Files\PowerArchiver\PASTARTER.EXE
C:\Program Files\DAEMON Tools Lite\daemon.exe
C:\Program Files\Messenger\msmsgs.exe
C:\Program Files\Common Files\Teleca Shared\CapabilityManager.exe
C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
C:\Program Files\TV-FM Tuner Player\TvPanel.exe
C:\Program Files\Common Files\Ahead\Lib\NMIndexStoreSvr.exe
C:\Program Files\SAGEM\SAGEM F@st 800-840\dslmon.exe
C:\Program Files\Common Files\Ahead\Lib\NMIndexingService.exe
C:\Program Files\Common Files\Teleca Shared\Generic.exe
C:\Program Files\Sony Ericsson\Mobile2\Mobile Phone Monitor\epmworker.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.seznam.cz/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Odkazy
O1 - Hosts: 66.98.148.65 auto.search.msn.com
O1 - Hosts: 66.98.148.65 auto.search.msn.es
O2 - BHO: Podpora odkazu pro Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [ASUSGamerOSD] C:\Program Files\ASUS\GamerOSD\GamerOSD.exe
O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE
O4 - HKLM\..\Run: [Alcmtr] ALCMTR.EXE
O4 - HKLM\..\Run: [Ai Gear Help] "C:\Program Files\ASUS\AI Gear2\GearHelp.exe"
O4 - HKLM\..\Run: [Ai Nap] "C:\Program Files\ASUS\Ai Nap\AiNap.exe"
O4 - HKLM\..\Run: [NeroFilterCheck] C:\Program Files\Common Files\Ahead\Lib\NeroCheck.exe
O4 - HKLM\..\Run: [InCD] C:\Program Files\Nero\Nero 7\InCD\InCD.exe
O4 - HKLM\..\Run: [RemoteControl] "C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe"
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [DownloadAccelerator] "C:\Program Files\DAP\DAP.EXE" /STARTUP
O4 - HKLM\..\Run: [egui] "C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe" /hide /waitservice
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [CloneCDTray] "C:\Program Files\SlySoft\CloneCD\CloneCDTray.exe" /s
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime
O4 - HKLM\..\Run: [amd_dc_opt] C:\Program Files\AMD\Dual-Core Optimizer\amd_dc_opt.exe
O4 - HKLM\..\Run: [Sony Ericsson PC Suite] "C:\Program Files\Sony Ericsson\Mobile2\Application Launcher\Application Launcher.exe" /startoptions
O4 - HKLM\..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [ASUS SmartDoctor] C:\Program Files\ASUS\SmartDoctor\SmartDoctor.exe /start
O4 - HKCU\..\Run: [LightScribe Control Panel] C:\Program Files\Common Files\LightScribe\LightScribeControlPanel.exe -hidden
O4 - HKCU\..\Run: [BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] "C:\Program Files\Common Files\Ahead\Lib\NMBgMonitor.exe"
O4 - HKCU\..\Run: [PowerArchiver Tray] C:\Program Files\PowerArchiver\PASTARTER.EXE
O4 - HKCU\..\Run: [DAEMON Tools Lite] "C:\Program Files\DAEMON Tools Lite\daemon.exe" -autorun
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKCU\..\Run: [SpybotSD TeaTimer] C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'Default user')
O4 - Global Startup: AutoCAD Startup Accelerator.lnk = C:\Program Files\Common Files\Autodesk Shared\acstart17.exe
O4 - Global Startup: Control Panel.lnk = C:\Program Files\TV-FM Tuner Player\TvPanel.exe
O4 - Global Startup: DSLMON.lnk = C:\Program Files\SAGEM\SAGEM F@st 800-840\dslmon.exe
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE
O8 - Extra context menu item: &Clean Traces - C:\Program Files\DAP\Privacy Package\dapcleanerie.htm
O8 - Extra context menu item: &Download with &DAP - C:\Program Files\DAP\dapextie.htm
O8 - Extra context menu item: Download &all with DAP - C:\Program Files\DAP\dapextie2.htm
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000
O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: ICQ6 - {E59EB121-F339-4851-A3BA-FE49C35617C2} - C:\Program Files\ICQ6\ICQ.exe
O9 - Extra 'Tools' menuitem: ICQ6 - {E59EB121-F339-4851-A3BA-FE49C35617C2} - C:\Program Files\ICQ6\ICQ.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O17 - HKLM\System\CCS\Services\Tcpip\..\{F96447E6-4AFB-477E-81C2-4E75D66CFDD6}: NameServer = 194.228.41.65 194.228.41.113
O23 - Service: ATK Keyboard Service (ATKKeyboardService) - ASUSTeK COMPUTER INC. - C:\WINDOWS\ATKKBService.exe
O23 - Service: Autodesk Licensing Service - Autodesk - C:\Program Files\Common Files\Autodesk Shared\Service\AdskScSrv.exe
O23 - Service: Eset HTTP Server (EhttpSrv) - ESET - C:\Program Files\ESET\ESET NOD32 Antivirus\EHttpSrv.exe
O23 - Service: Eset Service (ekrn) - ESET - C:\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: InCD Helper (InCDsrv) - Nero AG - C:\Program Files\Nero\Nero 7\InCD\InCDsrv.exe
O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files\Common Files\LightScribe\LSSrvc.exe
O23 - Service: NMIndexingService - Nero AG - C:\Program Files\Common Files\Ahead\Lib\NMIndexingService.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: PnkBstrA - Unknown owner - C:\WINDOWS\system32\PnkBstrA.exe

--
End of file - 8932 bytes
---- C:\WINDOWS\mngui.INI
2008-03-11 16:36 . 2008-03-27 16:41 <DIR> d-------- C:\Program Files\Common Files\Teleca Shared
2008-03-11 16:36 . 2008-03-11 16:37 <DIR> d-------- C:\Documents and Settings\Michal\Data aplikací\Teleca
2008-03-11 16:34 . 2008-03-11 16:34 89,872 --a------ C:\WINDOWS\system32\drivers\k750mdm.sys
2008-03-11 16:34 . 2008-03-11 16:34 81,728 --a------ C:\WINDOWS\system32\drivers\k750mgmt.sys
2008-03-11 16:34 . 2008-03-11 16:34 79,488 --a------ C:\WINDOWS\system32\drivers\k750obex.sys
2008-03-11 16:34 . 2008-03-11 16:34 55,216 --a------ C:\WINDOWS\system32\drivers\k750bus.sys
2008-03-11 16:34 . 2008-03-11 16:34 6,576 --a------ C:\WINDOWS\system32\drivers\k750mdfl.sys
2008-03-11 16:34 . 2008-03-11 16:34 6,144 --a------ C:\WINDOWS\system32\drivers\k750cmnt.sys
2008-03-11 16:34 . 2008-03-11 16:34 6,144 --a------ C:\WINDOWS\system32\drivers\k750cm.sys
2008-03-11 16:34 . 2008-03-11 16:34 5,744 --a------ C:\WINDOWS\system32\drivers\k750whnt.sys
2008-03-11 16:34 . 2008-03-11 16:34 5,744 --a------ C:\WINDOWS\system32\drivers\k750wh.sys
2008-03-09 12:10 . 2008-03-09 12:10 <DIR> d-------- C:\Program Files\Common Files\Wise Installation Wizard
2008-03-09 12:10 . 2008-03-09 12:10 <DIR> d-------- C:\Documents and Settings\Michal\.AMD Power Monitor Settings
2008-03-09 12:07 . 2008-03-09 12:10 <DIR> d-------- C:\Program Files\AMD
2008-03-09 12:07 . 2007-06-29 14:47 34,304 --a------ C:\WINDOWS\system32\drivers\AmdLLD.sys
2008-03-07 18:09 . 2008-03-07 18:09 <DIR> d-------- C:\Program Files\MSXML 4.0
2008-03-07 13:34 . 2008-03-07 13:34 <DIR> d-------- C:\CloneDVDTemp
2008-03-06 23:19 . 2008-03-06 23:19 <DIR> d-------- C:\WINDOWS\speech
2008-03-06 23:19 . 2008-03-06 23:19 <DIR> d-------- C:\WINDOWS\lhsp
2008-03-06 23:19 . 2008-03-06 23:19 <DIR> d-------- C:\Program Files\Reader
2008-03-06 23:17 . 2008-03-06 23:17 <DIR> d-------- C:\Program Files\AyeTexttoMp3
2008-03-06 17:26 . 2008-03-06 17:26 <DIR> d-------- C:\Program Files\AnswerWorks 4.0
2008-03-06 17:25 . 2008-03-06 17:26 <DIR> d-------- C:\Program Files\AutoCAD 2007
2008-03-06 17:25 . 2008-03-06 17:28 <DIR> d-------- C:\Documents and Settings\Michal\Data aplikací\Autodesk
2008-03-06 17:25 . 2008-03-06 17:27 <DIR> d-------- C:\Documents and Settings\All Users\Data aplikací\Autodesk
2008-03-06 17:24 . 2008-03-06 17:24 <DIR> d-------- C:\Program Files\Autodesk
2008-03-06 15:16 . 2008-03-06 17:27 <DIR> d-------- C:\Program Files\Common Files\Autodesk Shared
2008-03-04 09:28 . 2008-03-04 09:28 <DIR> d-------- C:\Documents and Settings\Michal\Data aplikací\Apple Computer
2008-03-03 18:23 . 2008-03-03 18:23 <DIR> d-------- C:\Program Files\Activision
2008-03-03 00:24 . 2008-03-03 00:24 <DIR> d-------- C:\Program Files\MSXML 6.0
2008-03-02 11:32 . 2008-03-02 11:33 <DIR> d-------- C:\Program Files\QuickTime
2008-03-02 11:32 . 2008-03-02 11:32 <DIR> d-------- C:\Program Files\Apple Software Update
2008-03-02 11:32 . 2008-03-02 11:32 <DIR> d-------- C:\Documents and Settings\All Users\Data aplikací\Apple Computer
2008-03-02 11:32 . 2008-03-02 11:32 <DIR> d-------- C:\Documents and Settings\All Users\Data aplikací\Apple
2008-03-01 15:19 . 2008-03-01 15:19 <DIR> d-------- C:\Program Files\MSBuild
2008-03-01 15:17 . 2008-03-01 15:17 <DIR> d-------- C:\WINDOWS\system32\XPSViewer
2008-03-01 15:17 . 2008-03-01 15:17 <DIR> d-------- C:\Program Files\Reference Assemblies
2008-03-01 15:17 . 2006-06-29 13:07 14,048 --------- C:\WINDOWS\system32\spmsg2.dll
2008-03-01 15:13 . 2008-03-01 15:13 <DIR> d-------- C:\WINDOWS\system32\URTTemp
2008-03-01 11:26 . 2008-03-01 11:26 <DIR> d-------- C:\Program Files\SAGEM
2008-03-01 11:18 . 2008-03-01 11:25 <DIR> d-------- C:\Program Files\SAGEM(2)
2008-03-01 10:58 . 2004-04-13 13:50 261,926 --a------ C:\WINDOWS\system32\drivers\RTBLD3p0.BNM
2008-03-01 10:34 . 2008-03-01 11:26 <DIR> d-------- C:\Documents and Settings\Administrator.MB\Šablony
2008-03-01 10:34 . 2008-03-01 11:26 <DIR> d-------- C:\Documents and Settings\Administrator.MB\Data aplikací
2008-03-01 09:35 . 2008-03-01 09:35 <DIR> d-------- C:\Documents and Settings\Michal\Data aplikací\Talkback
2008-02-28 19:22 . 2008-02-28 19:22 <DIR> d-------- C:\Documents and Settings\Michal\Data aplikací\Black Sea Studios
2008-02-28 19:15 . 2008-02-28 19:15 <DIR> d-------- C:\Program Files\Black Sea Studios
2008-02-28 15:57 . 2008-02-28 15:57 <DIR> d-------- C:\Program Files\FLVPlayer

.
(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2008-03-28 20:26 196,608 ----a-w C:\WINDOWS\system32\drivers\nStandard.bin
2008-03-28 18:11 --------- d-----w C:\Documents and Settings\Michal\Data aplikací\uTorrent
2008-03-28 09:31 --------- d-----w C:\Program Files\PowerArchiver
2008-03-27 20:31 --------- d-----w C:\Program Files\HLSW
2008-03-27 19:55 22,328 ----a-w C:\WINDOWS\system32\drivers\PnkBstrK.sys
2008-03-27 19:55 107,832 ----a-w C:\WINDOWS\system32\PnkBstrB.exe
2008-03-16 17:29 --------- d--h--w C:\Program Files\InstallShield Installation Information
2008-03-07 13:09 --------- d-----w C:\Program Files\Call of Duty
2008-03-06 10:26 --------- d-----w C:\Program Files\Common Files\LightScribe
2008-03-03 17:42 66,872 ----a-w C:\WINDOWS\system32\PnkBstrA.exe
2008-03-03 17:28 22,328 ----a-w C:\Documents and Settings\Michal\Data aplikací\PnkBstrK.sys
2008-03-02 17:26 43,520 ----a-w C:\WINDOWS\system32\CmdLineExt03.dll
2008-02-26 17:12 --------- d-----w C:\Program Files\EA GAMES
2008-02-24 07:55 --------- d-----w C:\Program Files\SlySoft
2008-02-24 07:52 --------- d-----w C:\Program Files\Elaborate Bytes
2008-02-23 16:33 591,335 ----a-w C:\WINDOWS\M3A0301.zip
2008-02-20 18:00 --------- d-----w C:\Program Files\Macromedia
2008-02-20 18:00 --------- d-----w C:\Program Files\Common Files\Macromedia
2008-02-19 20:20 --------- d-----w C:\Program Files\NSIS
2008-02-14 15:30 --------- d-----w C:\Documents and Settings\Michal\Data aplikací\Ahead
2008-02-14 15:17 --------- d-----w C:\Documents and Settings\Michal\Data aplikací\CyberLink
2008-02-09 16:35 --------- d-----w C:\Program Files\GamePark
2008-02-07 20:11 --------- d-----w C:\Program Files\Intelore
2008-02-05 18:03 23 ----a-w C:\WINDOWS\system32\drivers\adidsl.cfg
2008-02-05 15:35 --------- d-----w C:\Documents and Settings\Michal\Data aplikací\ICQ
2008-02-05 15:19 --------- d-----w C:\Program Files\DAEMON Tools Lite
2008-02-04 18:26 --------- d-----w C:\Program Files\TV-FM Tuner Player
2008-02-04 17:03 --------- d-----w C:\Documents and Settings\Michal\Data aplikací\DAEMON Tools
2008-02-04 17:01 716,272 ----a-w C:\WINDOWS\system32\drivers\sptd.sys
2008-02-01 12:19 --------- d-----w C:\Program Files\DAP
2008-02-01 09:07 --------- d-----w C:\Program Files\THQ
2008-02-01 08:23 --------- d-----w C:\Program Files\Alcohol Soft
2008-02-01 08:08 --------- d-----w C:\Documents and Settings\Michal\Data aplikací\ImgBurn
2008-01-31 17:31 --------- d-----w C:\Program Files\Common Files\Adobe
2008-01-30 19:39 --------- d-----w C:\Documents and Settings\All Users\Data aplikací\ConeXware
2008-01-30 16:50 --------- d-----w C:\Program Files\Scorpions WinCheater
2008-01-30 16:21 --------- d-----w C:\Program Files\RegCleaner
2008-01-30 16:21 --------- d-----w C:\Program Files\Lavalys
2008-01-29 21:27 --------- d-----w C:\Program Files\Mv2Player
2008-01-29 19:28 107,888 ----a-w C:\WINDOWS\system32\CmdLineExt.dll
2008-01-29 19:28 --------- d--h--r C:\Documents and Settings\Michal\Data aplikací\SecuROM
2008-01-29 18:48 --------- d-----w C:\Program Files\ESET
2008-01-29 17:26 --------- d-----w C:\Documents and Settings\All Users\Data aplikací\ESET
2008-01-29 16:47 --------- d-----w C:\Program Files\Windows Media Connect 2
2008-01-29 16:44 --------- d-----w C:\Program Files\ICQ6
2008-01-29 16:42 --------- d-----w C:\Documents and Settings\Michal\Data aplikací\InstallShield
2008-01-29 16:35 737,280 ----a-w C:\WINDOWS\iun6002.exe
2008-01-29 16:35 --------- d-----w C:\Program Files\Codec Pack - All In 1
2008-01-28 22:16 --------- d-----w C:\Program Files\CyberLink
2008-01-28 22:16 --------- d-----w C:\Documents and Settings\All Users\Data aplikací\CyberLink
2008-01-28 22:12 --------- d-----w C:\Documents and Settings\All Users\Data aplikací\LightScribe
2008-01-28 22:10 --------- d-----w C:\Program Files\Common Files\Ahead
2008-01-28 22:08 --------- d-----w C:\Program Files\Nero
2008-01-28 22:08 --------- d-----w C:\Documents and Settings\All Users\Data aplikací\Nero
2008-01-28 21:59 8,814,921 ----a-w C:\WINDOWS\asusupdt_v71304.zip
2008-01-28 21:36 --------- d-----w C:\Program Files\uTorrent
2008-01-28 20:40 --------- d-----w C:\Program Files\DIFX
2008-01-28 20:29 --------- d-----w C:\Program Files\ASUS
2008-01-28 20:27 --------- d-----w C:\Program Files\Atheros Communications Inc
2008-01-28 20:26 --------- d-----w C:\Program Files\Common Files\InstallShield
2008-01-28 20:19 --------- d-----w C:\Documents and Settings\All Users\Data aplikací\nView_Profiles
2008-01-28 20:12 315,392 ----a-w C:\WINDOWS\HideWin.exe
2008-01-28 20:12 --------- d-----w C:\Program Files\Realtek
2008-01-28 20:00 12,288 ----a-w C:\WINDOWS\system32\drivers\EIO64_xp.sys
2008-01-28 19:56 --------- d-----w C:\Program Files\My Company Name
2008-01-28 19:49 558,142 ----a-w C:\WINDOWS\java\Packages\SS4ACGLB.ZIP
2008-01-28 19:49 155,995 ----a-w C:\WINDOWS\java\Packages\WS8DVVLF.ZIP
2008-01-28 19:49 --------- d-----w C:\Program Files\microsoft frontpage
.

((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* empty entries & legit default entries are not shown
REGEDIT4

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="C:\WINDOWS\system32\ctfmon.exe" [2004-08-17 15:49 15360]
"ASUS SmartDoctor"="C:\Program Files\ASUS\SmartDoctor\SmartDoctor.exe" [2007-11-09 17:29 1126400]
"LightScribe Control Panel"="C:\Program Files\Common Files\LightScribe\LightScribeControlPanel.exe" [2008-02-26 14:08 2289664]
"BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}"="C:\Program Files\Common Files\Ahead\Lib\NMBgMonitor.exe" [2007-07-04 14:01 148776]
"PowerArchiver Tray"="C:\Program Files\PowerArchiver\PASTARTER.EXE" [2007-06-11 17:32 141352]
"DAEMON Tools Lite"="C:\Program Files\DAEMON Tools Lite\daemon.exe" [2008-01-17 17:51 486856]
"MSMSGS"="C:\Program Files\Messenger\msmsgs.exe" [2004-10-13 17:24 1694208]
"SpybotSD TeaTimer"="C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe" [2008-01-28 11:43 2097488]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"NvCplDaemon"="C:\WINDOWS\system32\NvCpl.dll" [2007-12-05 01:41 8523776]
"nwiz"="nwiz.exe" [2007-12-05 01:41 1626112 C:\WINDOWS\system32\nwiz.exe]
"ASUSGamerOSD"="C:\Program Files\ASUS\GamerOSD\GamerOSD.exe" [2007-10-23 17:48 380928]
"RTHDCPL"="RTHDCPL.EXE" [2007-08-10 08:21 16384000 C:\WINDOWS\RTHDCPL.exe]
"Ai Gear Help"="C:\Program Files\ASUS\AI Gear2\GearHelp.exe" [2007-05-03 16:48 415744]
"Ai Nap"="C:\Program Files\ASUS\Ai Nap\AiNap.exe" [2007-01-12 01:07 1423360]
"NeroFilterCheck"="C:\Program Files\Common Files\Ahead\Lib\NeroCheck.exe" [2007-07-04 14:20 161064]
"InCD"="C:\Program Files\Nero\Nero 7\InCD\InCD.exe" [2007-07-04 13:55 1057064]
"RemoteControl"="C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe" [2003-10-31 19:42 32768]
"Adobe Reader Speed Launcher"="C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe" [2007-05-11 13:06 40048]
"DownloadAccelerator"="C:\Program Files\DAP\DAP.exe" [2008-02-01 13:16 2864128]
"egui"="C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe" [2007-12-21 08:21 1443072]
"NvMediaCenter"="C:\WINDOWS\system32\NvMcTray.dll" [2007-12-05 01:41 81920]
"CloneCDTray"="C:\Program Files\SlySoft\CloneCD\CloneCDTray.exe" [2005-05-19 14:47 57344]
"QuickTime Task"="C:\Program Files\QuickTime\QTTask.exe" [2008-01-31 23:13 385024]
"amd_dc_opt"="C:\Program Files\AMD\Dual-Core Optimizer\amd_dc_opt.exe" [2007-07-23 11:06 77824]
"AMD_Display"="" []
"Sony Ericsson PC Suite"="C:\Program Files\Sony Ericsson\Mobile2\Application Launcher\Application Launcher.exe" [2005-10-26 16:17 159744]

[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="C:\WINDOWS\System32\CTFMON.EXE" [2004-08-17 15:49 15360]

C:\Documents and Settings\All Users\Nabˇdka Start\Programy\Po spuçtŘnˇ\
AutoCAD Startup Accelerator.lnk - C:\Program Files\Common Files\Autodesk Shared\acstart17.exe [2006-03-05 04:43:54 11000]
Control Panel.lnk - C:\Program Files\TV-FM Tuner Player\TvPanel.exe [2008-02-01 12:19:14 438272]
DSLMON.lnk - C:\Program Files\SAGEM\SAGEM F@st 800-840\dslmon.exe [2008-02-05 19:03:39 962663]
Microsoft Office.lnk - C:\Program Files\Microsoft Office\Office10\OSA.EXE [2001-02-13 11:01:04 83360]

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\system32\\sessmgr.exe"=
"C:\\Program Files\\uTorrent\\uTorrent.exe"=
"%windir%\\Network Diagnostic\\xpnetdiag.exe"=
"C:\\Program Files\\ICQ6\\ICQ.exe"=
"C:\\Program Files\\EA GAMES\\Medal of Honor Pacific Assault(tm)\\mohpa.exe"=
"C:\\Program Files\\THQ\\Company of Heroes\\RelicCOH.exe"=
"C:\\Program Files\\DAP\\DAP.exe"=
"C:\\WINDOWS\\system32\\PnkBstrA.exe"=
"C:\\WINDOWS\\system32\\PnkBstrB.exe"=
"C:\\Program Files\\HLSW\\hlsw.exe"=
"C:\\Program Files\\Call of Duty\\CoDMP.exe"=
"C:\\Program Files\\Activision\\Call of Duty 4 - Modern Warfare\\iw3mp.exe"=
"C:\\Program Files\\Paradox Interactive\\Hearts of Iron 2\\HoI2.exe"=
"C:\\WINDOWS\\system32\\dplaysvr.exe"=

R1 EIO_XP;EIO_XP;C:\WINDOWS\system32\drivers\EIO_XP.sys [2006-06-14 13:44]
R1 epfwtdir;epfwtdir;C:\WINDOWS\system32\DRIVERS\epfwtdir.sys [2007-12-21 08:21]
R2 BT848;Bt878, WDM Video Capture;C:\WINDOWS\system32\drivers\BT848.sys [2001-05-28 11:11]
R2 BTXBAR;BtXBar, WDM Crossbar;C:\WINDOWS\system32\drivers\BTXBAR.sys [2000-03-13 09:19]
R3 asusgsb;ASUS Virtual Video Capture Device Driver;C:\WINDOWS\system32\drivers\asusgsb.sys [2007-10-23 17:48]
R3 ASUSVRC;ASUSTeK Virtual Capture Device;C:\WINDOWS\system32\DRIVERS\AsusVRC.sys [2007-01-29 17:12]
R3 AtcL001;NDIS Miniport Driver for Atheros L1 Gigabit Ethernet Controller;C:\WINDOWS\system32\DRIVERS\l151x86.sys [2007-08-29 20:41]
R3 PSched;Plánovač paketů technologie QoS;C:\WINDOWS\system32\DRIVERS\psched.sys [2004-08-03 23:04]
R3 Video3D;ASUS Video3D Service;C:\WINDOWS\system32\Drivers\Video3D32.sys [2007-10-23 17:48]
S3 TVICHW32;TVICHW32;C:\WINDOWS\system32\DRIVERS\TVICHW32.SYS [2007-12-04 15:44]

[HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{10880D85-AAD9-4558-ABDC-2AB1552D831F}]
"C:\Program Files\Common Files\LightScribe\LSRunOnce.exe"
.
Contents of the 'Scheduled Tasks' folder
"2008-03-02 10:32:37 C:\WINDOWS\Tasks\AppleSoftwareUpdate.job"
- C:\Program Files\Apple Software Update\SoftwareUpdate.exe
.
**************************************************************************

catchme 0.3.1344 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2008-03-29 00:06:13
Windows 5.1.2600 Service Pack 2 NTFS

scanning hidden processes ...

scanning hidden autostart entries ...

scanning hidden files ...

scan completed successfully
hidden files: 0

**************************************************************************
.
Completion time: 2008-03-29 0:06:36
ComboFix-quarantined-files.txt 2008-03-28 23:06:29
Adresářů: 13, Volných bajtů: 134,686,531,584
Adresářů: 16, Volných bajtů: 134,671,998,976
.
2008-03-12 16:46:26 --- E O F ---

paul27 · Příspěvekod **paul27** » 29 bře 2008 00:21

Tyto dva soubory nechte prosím otestovat na http://www.virustotal.com (stačí zkopírovat cestu k souboru):
C:\WINDOWS\system32\drivers\EIO_XP.sys
C:\WINDOWS\system32\DRIVERS\TVICHW32.SYS

Příspěvekod **memphisto** » 29 bře 2008 00:26

ten C:\WINDOWS\system32\DRIVERS\TVICHW32.SYS je OK. je to Generic Device Driver od společnosti EnTech Taiwan :wink:

ten první nevím, ale na šmejda nevypadá

Problémy s WinXP Vyřešeno

Problémy s WinXP Vyřešeno

Re: Problémy s WinXP

Re: Problémy s WinXP

Re: Problémy s WinXP

Re: Problémy s WinXP

Re: Problémy s WinXP

Re: Problémy s WinXP

Re: Problémy s WinXP

Re: Problémy s WinXP

Re: Problémy s WinXP

Re: Problémy s WinXP

Re: Problémy s WinXP

Kdo je online