mrznutie pc

Kamarat ma takyto problem:
casto mu mrzne pc...nekedy to po minute prejde ale nekedy pomoze len reset

tu je jeho log z hijckthis
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 18:40:41, on 4.2.2008
Platform: Windows XP SP1 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Common Files\Autodesk Shared\Service\AdskScSrv.exe
C:\Program Files\Autodesk\3ds Max 2008\mentalray\satellite\raysat_3dsMax2008_32server.exe
C:\WINDOWS\System32\nvsvc32.exe
C:\WINDOWS\System32\PnkBstrA.exe
C:\WINDOWS\System32\snmp.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe
C:\Program Files\QIP\qip.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\K-Lite Codec Pack\Media Player Classic\mplayerc.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://google.icq.com/search/search_frame.php
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://google.icq.com
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://softwarereferral.com/jump.php?wm ... Ojg5&lid=2
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Odkazy
R3 - URLSearchHook: ICQ Toolbar - {855F3B16-6D32-4fe6-8A56-BBB695989046} - C:\Program Files\ICQToolbar\toolbaru.dll
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 5.0\Reader\ActiveX\AcroIEHelper.ocx
O2 - BHO: BitComet ClickCapture - {39F7E362-828A-4B5A-BCAF-5B79BFDFEA60} - C:\Program Files\BitComet\tools\BitCometBHO_1.1.9.24.dll
O2 - BHO: Megaupload Toolbar - {4E7BD74F-2B8D-469E-CCB0-B130EEDBE97C} - C:\PROGRA~1\MEGAUP~1\MEGAUP~1.DLL
O2 - BHO: (no name) - {523CB132-06A0-735D-9094-03B18495F8A4} - C:\Program Files\yerxazrx\uzyyrxar.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O2 - BHO: FlashFXP Helper for Internet Explorer - {E5A1691B-D188-4419-AD02-90002030B8EE} - C:\PROGRA~1\FlashFXP\IEFlash.dll
O3 - Toolbar: &Rádio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\System32\msdxm.ocx
O3 - Toolbar: ICQ Toolbar - {855F3B16-6D32-4fe6-8A56-BBB695989046} - C:\Program Files\ICQToolbar\toolbaru.dll
O3 - Toolbar: Megaupload Toolbar - {4E7BD74F-2B8D-469E-CCB0-B130EEDBE97C} - C:\PROGRA~1\MEGAUP~1\MEGAUP~1.DLL
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe"
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\System32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [WinampAgent] "C:\Program Files\Winamp\winampa.exe"
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'Default user')
O8 - Extra context menu item: &ICQ Toolbar Search - res://C:\Program Files\ICQToolbar\toolbaru.dll/SEARCH.HTML
O8 - Extra context menu item: Stáhnout odkaz s použitím BitCometu - res://C:\Program Files\BitComet\BitComet.exe/AddLink.htm
O8 - Extra context menu item: Stáhnout všechna videa s použitím BitCometu - res://C:\Program Files\BitComet\BitComet.exe/AddVideo.htm
O8 - Extra context menu item: Stáhnout všechny odkazy s použitím BitCometu - res://C:\Program Files\BitComet\BitComet.exe/AddAllLink.htm
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O9 - Extra button: BitComet Search - {461CC20B-FB6E-4f16-8FE8-C29359DB100E} - C:\Program Files\BitComet\tools\BitCometBHO_1.1.9.24.dll
O9 - Extra button: ICQ Lite - {B863453A-26C3-4e1f-A54D-A2CD196348E9} - C:\Program Files\ICQLite\ICQLite.exe
O9 - Extra 'Tools' menuitem: ICQ Lite - {B863453A-26C3-4e1f-A54D-A2CD196348E9} - C:\Program Files\ICQLite\ICQLite.exe
O9 - Extra button: Related - {c95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\WINDOWS\web\related.htm
O9 - Extra 'Tools' menuitem: Show &Related Links - {c95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\WINDOWS\web\related.htm
O12 - Plugin for .spop: C:\Program Files\Internet Explorer\Plugins\NPDocBox.dll
O17 - HKLM\System\CCS\Services\Tcpip\..\{E0E6DD41-F6F4-4436-9A2E-EDA1ED0AC1A5}: NameServer = 198.58.193.11,195.12.128.1
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O23 - Service: Autodesk Licensing Service - Autodesk - C:\Program Files\Common Files\Autodesk Shared\Service\AdskScSrv.exe
O23 - Service: mental ray 3.6 Satellite for Autodesk 3ds Max 2008 32-bit 32-bit (mi-raysat_3dsMax2008_32) - Unknown owner - C:\Program Files\Autodesk\3ds Max 2008\mentalray\satellite\raysat_3dsMax2008_32server.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\System32\nvsvc32.exe
O23 - Service: PnkBstrA - Unknown owner - C:\WINDOWS\System32\PnkBstrA.exe

--
End of file - 5427 bytes

vdaka..v tomto sa nevyznam

Všetko OK az na tento suborik
C:\Program Files\yerxazrx\uzyyrxar.dll

otestuj to na www.virustotal.com

a vysledok lož sem

Vyzera to že to mrznutie nebude spôsobovať virus/spyware..teda ja tu haveď nevidim

Aku ma zostavu?

pc:
mb: Foxconn P4M8907MA
Intel celeron 3000
1 GB ram
nvidia g force 7100 256 MB

vypisalo neco taketo:
http://www.upnito.sk/imggal.php?viewGallery=bf9bc879a3db4d1eb6fd52098626332b
co s tym teraz?

Fixni:
O2 - BHO: (no name) - {523CB132-06A0-735D-9094-03B18495F8A4} - C:\Program Files\yerxazrx\uzyyrxar.dll

Stiahni Avenger
http://www.pcforum.sk/cistime-napadnuty ... 27265.html



Ak bude stale mrznuť tak treba skusiť Combofix stiahnes ho tu:
http://download.bleepingcomputer.com/sU ... mboFix.exe

odstranene ale opat zamrzlo... nejaka ina alternativa?
teploty su v norme, hdd bol formatovany, ramky testovane...

Skus este ten combofix co je v mojom prispevku

Odkedy mu to mrzne?

tak uz dost dlho..asi pol roka..ale nic nebolo menene..ziadny hw

Už si skusil combofix? Nic mi nenapada..nema pretaktovaný procesor alebo grafiku

ee ... vobec ziadna uprava .. ten combo testuje ... keby neco dam vediet...ale diky za pomoc

combofix:

ComboFix 08-02.03.1 - Rene 2008-02-04 19:38:52.1 - NTFSx86
Systém Microsoft Windows XP Professional 5.1.2600.1.1250.1.1029.18.751 [GMT 1:00]
Running from: C:\Documents and Settings\Rene\Plocha\ComboFix.exe
* Created a new restore point

WARNING -THIS MACHINE DOES NOT HAVE THE RECOVERY CONSOLE INSTALLED !!
.

((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))
.

C:\Documents and Settings\All Users\Data aplikací\Microsoft\Network\Downloader\qmgr0.dat
C:\Documents and Settings\All Users\Data aplikací\Microsoft\Network\Downloader\qmgr1.dat
C:\Documents and Settings\Rene\Oblíbené položky\Error Cleaner.url
C:\Documents and Settings\Rene\Oblíbené položky\Privacy Protector.url
C:\Documents and Settings\Rene\Oblíbené položky\Spyware&Malware Protection.url
C:\Program Files\autorun.inf
C:\Program Files\Video Add-on
C:\Program Files\VideoAccessCodec
C:\Program Files\VideoAccessCodec\install.ico
C:\Program Files\VideoAccessCodec\Uninstall.exe
C:\Program Files\VideoAccessCodec\VideoAccessCodec.ocx
C:\WINDOWS\dat.txt
C:\WINDOWS\hostctrl.dll
C:\WINDOWS\nmcuninstall.exe

----- BITS: Possible infected sites -----

hxxp://onsafepro.com
hxxp://205.177.122.104
hxxp://thenetworkcom.com

.
((((((((((((((((((((((((( Files Created from 2008-01-04 to 2008-02-04 )))))))))))))))))))))))))))))))
.

2008-02-04 19:03 . 2008-02-04 19:03 <DIR> d-------- C:\Program Files\Microprose
2008-02-04 18:57 . 2008-02-04 18:57 <DIR> d-------- C:\Program Files\NovaLogic
2008-02-04 18:57 . 2008-02-04 18:57 <DIR> d-------- C:\Documents and Settings\Rene\WINDOWS
2008-02-04 18:38 . 2008-02-04 18:38 <DIR> d-------- C:\Program Files\Trend Micro
2008-02-03 21:51 . 2008-02-03 21:51 0 --ah----- C:\WINDOWS\SwSys2.bmp
2008-02-03 21:51 . 2008-02-03 21:51 0 --ah----- C:\WINDOWS\SwSys1.bmp
2008-02-03 21:50 . 2008-02-03 21:50 <DIR> d-------- C:\Program Files\StuGroup
2008-01-29 19:34 . 2008-01-29 20:05 <DIR> d-------- C:\Program Files\Scorpions WinCheater
2008-01-26 11:16 . 2008-01-26 11:16 <DIR> d-------- C:\Program Files\Common Files\DirectX
2008-01-24 21:12 . 2008-01-24 21:12 <DIR> d-------- C:\Program Files\Miranda IM
2008-01-24 21:12 . 2008-01-24 21:12 <DIR> d-------- C:\Documents and Settings\Rene\Data aplikací\Miranda
2008-01-17 18:12 . 2008-01-17 18:12 <DIR> d-------- C:\Program Files\Id Software
2008-01-17 16:00 . 2008-01-17 16:05 <DIR> d-------- C:\Documents and Settings\Rene\Data aplikací\Winamp
2008-01-16 16:40 . 2008-01-16 16:40 <DIR> d-------- C:\Program Files\Audio CD Copier
2008-01-16 16:40 . 2002-07-30 10:38 647,168 --a------ C:\WINDOWS\system32\CDWriterXP.ocx
2008-01-16 16:40 . 2002-03-25 02:03 380,928 --a------ C:\WINDOWS\system32\CDRipperX.ocx
2008-01-16 16:40 . 2002-10-16 20:03 208,896 --a------ C:\WINDOWS\system32\RICHTX32.OCX
2008-01-16 16:40 . 2002-10-26 14:35 140,288 --a------ C:\WINDOWS\system32\COMDLG32.OCX
2008-01-16 16:40 . 1998-06-18 04:00 89,360 --a------ C:\WINDOWS\system32\VB5DB.DLL
2008-01-13 20:14 . 2008-01-13 20:14 <DIR> d-------- C:\Program Files\GamePark
2008-01-13 20:07 . 2008-02-02 16:40 <DIR> d-------- C:\Program Files\TrackMania Nations ESWC
2008-01-13 14:20 . 2008-01-13 14:20 231 --a------ C:\WINDOWS\system32\3dsmax.ini
2008-01-13 14:20 . 2008-01-13 14:20 43 --a------ C:\WINDOWS\system32\InstallSettings.ini
2008-01-13 14:19 . 2008-01-13 14:20 <DIR> d-------- C:\Program Files\Common Files\Autodesk Shared
2008-01-13 14:18 . 2008-01-13 14:18 <DIR> d-------- C:\Documents and Settings\All Users\Data aplikací\Autodesk
2008-01-13 14:17 . 2008-01-13 14:20 <DIR> d-------- C:\Program Files\Autodesk
2008-01-12 22:13 . 2008-01-12 22:28 <DIR> d-------- C:\Program Files\Need for Speed Most Wanted - Black Edition
2008-01-07 22:16 . 2008-01-11 17:56 <DIR> d-------- C:\Program Files\Video Strip Poker
2008-01-07 22:16 . 2008-01-11 17:56 <DIR> d-a------ C:\Documents and Settings\All Users\Data aplikací\TEMP
2008-01-07 14:01 . 2008-01-07 14:01 <DIR> d-------- C:\Documents and Settings\Rene\Data aplikací\dvdcss

.
(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2008-02-03 21:36 --------- d-----w C:\Program Files\HLSW
2008-02-03 20:53 22,328 ----a-w C:\WINDOWS\system32\drivers\PnkBstrK.sys
2008-02-03 20:53 107,832 ----a-w C:\WINDOWS\system32\PnkBstrB.exe
2008-02-03 18:49 --------- d-----w C:\Program Files\mIRC
2008-02-02 11:44 --------- d-----w C:\Documents and Settings\Rene\Data aplikací\Vso
2008-02-01 21:15 --------- d-----w C:\Documents and Settings\Rene\Data aplikací\LimeWire
2008-01-28 22:10 --------- d-----w C:\Documents and Settings\Rene\Data aplikací\skypePM
2008-01-28 22:10 --------- d-----w C:\Documents and Settings\Rene\Data aplikací\Skype
2008-01-28 22:07 --------- d-----w C:\Program Files\Wolfenstein - Enemy Territory
2008-01-26 10:07 --------- d--h--w C:\Program Files\InstallShield Installation Information
2008-01-25 21:15 --------- d-----w C:\Program Files\Opera
2008-01-17 15:27 --------- d-----w C:\Program Files\Winamp
2008-01-10 19:39 --------- d-----w C:\Program Files\Java
2007-12-30 21:11 --------- d-----w C:\Program Files\QIP
2007-12-18 15:04 --------- d-----w C:\Program Files\YouTube Downloader
2007-12-15 10:43 --------- d-----w C:\Documents and Settings\Rene\Data aplikací\teamspeak2
2007-12-14 17:08 --------- d-----w C:\Documents and Settings\Danica\Data aplikací\MEGAUPLOADTOOLBAR
2007-12-14 14:52 --------- d-----w C:\Program Files\EA GAMES
2007-12-14 09:43 --------- d-----w C:\Documents and Settings\Shandy RP\Data aplikací\TuneUp Software
2007-12-12 20:17 --------- d-----w C:\Program Files\EACom
2007-12-12 20:14 --------- d-----w C:\Program Files\Electronic Arts
2007-12-12 18:04 --------- d-----w C:\Documents and Settings\Erik\Data aplikací\MEGAUPLOADTOOLBAR
2007-12-11 18:41 --------- d-----w C:\Documents and Settings\Shandy RP\Data aplikací\MEGAUPLOADTOOLBAR
2007-12-10 19:49 --------- d-----w C:\Documents and Settings\Erik\Data aplikací\Skype
2007-12-10 17:42 --------- d-----w C:\Documents and Settings\Erik\Data aplikací\Media Player Classic
2007-12-08 17:43 --------- d-----w C:\Program Files\Rockstar Games
2007-12-06 18:54 --------- d-----w C:\Program Files\FlashFXP
2007-12-06 15:24 --------- d-----w C:\Documents and Settings\Rene\Data aplikací\FlashFXP
2007-12-05 12:59 --------- d-----w C:\Program Files\Activision
2007-12-03 20:28 32 ----a-w C:\Documents and Settings\All Users\Data aplikací\ezsid.dat
2007-11-19 14:06 73,728 ----a-w C:\WINDOWS\DUMP5592.tmp
2007-10-30 15:56 870,400 ----a-w C:\Program Files\autorun.dat
2007-10-30 15:56 7,943,432 ----a-w C:\Program Files\nfsdemo.exe
2007-10-30 15:56 632,072 ----a-w C:\Program Files\msvcr80.dll
2007-10-30 15:56 554,248 ----a-w C:\Program Files\msvcp80.dll
2007-10-30 15:56 505,096 ----a-w C:\Program Files\msvcp71.dll
2007-10-30 15:56 484,616 ----a-w C:\Program Files\msvcm80.dll
2007-10-30 15:56 402,696 ----a-w C:\Program Files\AutoRun.exe
2007-10-30 15:56 386,312 ----a-w C:\Program Files\server.dll
2007-10-30 15:56 386,312 ----a-w C:\Program Files\EASetup.exe
2007-10-30 15:56 353,544 ----a-w C:\Program Files\msvcr71.dll
2007-10-30 15:56 1,180,936 ----a-w C:\Program Files\msvcr80d.dll
2007-10-30 15:56 1,041,672 ----a-w C:\Program Files\msvcp80d.dll
2007-10-30 15:56 1,021,192 ----a-w C:\Program Files\msvcm80d.dll
2007-10-30 15:55 6,844,737 ----a-w C:\Program Files\Group151.cab
2007-10-30 15:55 36,466,538 ----a-w C:\Program Files\Group3.cab
2007-10-30 15:55 36 ----a-w C:\Program Files\Group138.cab
2007-10-30 15:55 3,678,484 ----a-w C:\Program Files\Group152.cab
2007-10-30 15:55 140,458,424 ----a-w C:\Program Files\Group18.cab
2007-10-30 15:54 5,093 ----a-w C:\Program Files\Group8.cab
2007-10-30 15:54 201,398,784 ----a-w C:\Program Files\Group20.cab
2007-10-30 15:54 10,776,597 ----a-w C:\Program Files\Group136.cab
2007-10-30 15:52 944,116 ----a-w C:\Program Files\Group114.cab
2007-10-30 15:52 4,353,168 ----a-w C:\Program Files\Group111.cab
2007-10-30 15:52 36 ----a-w C:\Program Files\Group21.cab
2007-10-30 15:52 2,767 ----a-w C:\Program Files\Group4.cab
2007-10-30 15:52 111,469,457 ----a-w C:\Program Files\Group110.cab
2007-10-30 15:52 1,602 ----a-w C:\Program Files\Group139.cab
2007-10-30 15:51 75,464,468 ----a-w C:\Program Files\Group10.cab
2007-10-30 15:51 36 ----a-w C:\Program Files\Group1.cab
2007-10-30 15:51 30,187,042 ----a-w C:\Program Files\Group6.cab
2007-10-30 15:51 24,202 ----a-w C:\Program Files\Group9.cab
2007-10-30 15:51 2,351,637 ----a-w C:\Program Files\Group15.cab
2007-10-30 15:51 19,665 ----a-w C:\Program Files\Group16.cab
2007-10-30 15:51 14,750 ----a-w C:\Program Files\Group134.cab
2007-10-30 15:50 93,422,941 ----a-w C:\Program Files\Group2.cab
2007-10-30 15:50 695,735 ----a-w C:\Program Files\Group0.cab
2007-10-30 15:50 676 ----a-w C:\Program Files\Group12.cab
2007-10-30 15:50 6,458,669 ----a-w C:\Program Files\Group11.cab
2007-10-30 15:50 566,461 ----a-w C:\Program Files\Group17.cab
2007-10-30 15:50 536,982 ----a-w C:\Program Files\Group112.cab
2007-10-30 15:50 36 ----a-w C:\Program Files\Group19.cab
2007-10-30 15:50 351,200 ----a-w C:\Program Files\Group137.cab
2007-10-30 15:50 35,899,970 ----a-w C:\Program Files\Group153.cab
2007-10-30 15:50 3,526,886 ----a-w C:\Program Files\Group5.cab
2007-10-30 15:50 1,295 ----a-w C:\Program Files\Group113.cab
2007-10-30 15:49 6,940,334 ----a-w C:\Program Files\Group135.cab
2007-10-30 15:49 33,546,010 ----a-w C:\Program Files\Group14.cab
2007-10-30 15:49 2,757,228 ----a-w C:\Program Files\Group13.cab
2007-10-30 15:49 2,741,922 ----a-w C:\Program Files\Group7.cab
2007-10-24 19:50 3,262 ----a-w C:\Program Files\nfs_icon.ico
2007-10-24 19:50 258 ----a-w C:\Program Files\dat.bin
2007-10-24 19:50 1,462 ----a-w C:\Program Files\server.cfg
2007-10-24 19:49 1,869 ----a-w C:\Program Files\microsoft.vc80.crt.manifest
2007-10-19 13:34 106,496 ----a-w C:\Documents and Settings\All Users\Data aplikací\didwbkro.dll
2007-09-18 14:31 4,300,800 ----a-w C:\Program Files\mplayerc.exe
2005-01-01 03:41 802,816 ----a-w C:\Documents and Settings\Erik\SimTr.exe
2001-11-23 10:08 712,704 ----a-w C:\WINDOWS\inf\OTHER\AUDIO3D.DLL
.

((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* empty entries & legit default entries are not shown
REGEDIT4

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"SunJavaUpdateSched"="C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe" [2007-09-25 01:11 132496]
"NvCplDaemon"="C:\WINDOWS\System32\NvCpl.dll" [2006-10-22 05:22 7700480]
"WinampAgent"="C:\Program Files\Winamp\winampa.exe" [2007-12-20 16:16 37376]

[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="C:\WINDOWS\System32\CTFMON.EXE" [2002-09-20 17:05 13312]

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run-]
"Orb"="C:\Program Files\Winamp Remote\bin\OrbTray.exe" /background
"DAEMON Tools"="C:\Program Files\DAEMON Tools\daemon.exe" -lang 1033
"CTFMON.EXE"=C:\WINDOWS\System32\ctfmon.exe

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run-]
"NvCplDaemon"=RUNDLL32.EXE C:\WINDOWS\System32\NvCpl.dll,NvStartup
"NvMediaCenter"=RUNDLL32.EXE C:\WINDOWS\System32\NvMcTray.dll,NvTaskbarInit
"nwiz"=nwiz.exe /install
"Picasa Media Detector"=C:\Program Files\Picasa2\PicasaMediaDetector.exe
"C-Media Mixer"=Mixer.exe /startup
"didwbkro"=regsvr32 /u "C:\Documents and Settings\All Users\Data aplikací\didwbkro.dll"
"Omnipage"=C:\Program Files\ScanSoft\OmniPageSE\opware32.exe
"ICQ Lite"="C:\Program Files\ICQLite\ICQLite.exe" -minimize

R2 mi-raysat_3dsMax2008_32;mental ray 3.6 Satellite for Autodesk 3ds Max 2008 32-bit 32-bit;"C:\Program Files\Autodesk\3ds Max 2008\mentalray\satellite\raysat_3dsMax2008_32server.exe" [2007-09-24 17:05]
R2 UxTuneUp;TuneUp Theme Extension;C:\WINDOWS\System32\svchost.exe [2001-10-25 13:00]
R3 PSched;Plánovač paketů technologie QoS;C:\WINDOWS\System32\DRIVERS\psched.sys [2002-08-29 00:35]

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Svchost - NetSvcs
UxTuneUp

.
Contents of the 'Scheduled Tasks' folder
"2008-02-01 16:16:17 C:\WINDOWS\Tasks\1-Click Maintenance.job"
- C:\Program Files\TuneUp Utilities 2007\SystemOptimizer.exe
.
**************************************************************************

catchme 0.3.1344 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2008-02-04 19:42:02
Windows 5.1.2600 Service Pack 1 NTFS

scanning hidden processes ...

scanning hidden autostart entries ...

scanning hidden files ...

scan completed successfully
hidden files: 0

**************************************************************************
.
Completion time: 2008-02-04 19:45:23
ComboFix-quarantined-files.txt 2008-02-04 18:45:21

Stale mrzne?

Vlož ešte najnovši log z HijackThis

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 20:07:39, on 4.2.2008
Platform: Windows XP SP1 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Common Files\Autodesk Shared\Service\AdskScSrv.exe
C:\Program Files\Autodesk\3ds Max 2008\mentalray\satellite\raysat_3dsMax2008_32server.exe
C:\WINDOWS\System32\nvsvc32.exe
C:\WINDOWS\System32\PnkBstrA.exe
C:\WINDOWS\System32\snmp.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe
C:\Documents and Settings\Rene\Plocha\Ventrilo.exe
C:\Program Files\QIP\qip.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\Internet Explorer\IEXPLORE.EXE
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://softwarereferral.com/jump.php?wm ... Ojg5&lid=2
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Odkazy
R3 - URLSearchHook: ICQ Toolbar - {855F3B16-6D32-4fe6-8A56-BBB695989046} - C:\Program Files\ICQToolbar\toolbaru.dll
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 5.0\Reader\ActiveX\AcroIEHelper.ocx
O2 - BHO: BitComet ClickCapture - {39F7E362-828A-4B5A-BCAF-5B79BFDFEA60} - C:\Program Files\BitComet\tools\BitCometBHO_1.1.9.24.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O2 - BHO: FlashFXP Helper for Internet Explorer - {E5A1691B-D188-4419-AD02-90002030B8EE} - C:\PROGRA~1\FlashFXP\IEFlash.dll
O3 - Toolbar: &Rádio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\System32\msdxm.ocx
O3 - Toolbar: ICQ Toolbar - {855F3B16-6D32-4fe6-8A56-BBB695989046} - C:\Program Files\ICQToolbar\toolbaru.dll
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe"
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\System32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [WinampAgent] "C:\Program Files\Winamp\winampa.exe"
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'Default user')
O8 - Extra context menu item: &ICQ Toolbar Search - res://C:\Program Files\ICQToolbar\toolbaru.dll/SEARCH.HTML
O8 - Extra context menu item: Stáhnout odkaz s použitím BitCometu - res://C:\Program Files\BitComet\BitComet.exe/AddLink.htm
O8 - Extra context menu item: Stáhnout všechna videa s použitím BitCometu - res://C:\Program Files\BitComet\BitComet.exe/AddVideo.htm
O8 - Extra context menu item: Stáhnout všechny odkazy s použitím BitCometu - res://C:\Program Files\BitComet\BitComet.exe/AddAllLink.htm
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O9 - Extra button: BitComet Search - {461CC20B-FB6E-4f16-8FE8-C29359DB100E} - C:\Program Files\BitComet\tools\BitCometBHO_1.1.9.24.dll
O9 - Extra button: ICQ Lite - {B863453A-26C3-4e1f-A54D-A2CD196348E9} - C:\Program Files\ICQLite\ICQLite.exe
O9 - Extra 'Tools' menuitem: ICQ Lite - {B863453A-26C3-4e1f-A54D-A2CD196348E9} - C:\Program Files\ICQLite\ICQLite.exe
O9 - Extra button: Related - {c95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\WINDOWS\web\related.htm
O9 - Extra 'Tools' menuitem: Show &Related Links - {c95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\WINDOWS\web\related.htm
O12 - Plugin for .spop: C:\Program Files\Internet Explorer\Plugins\NPDocBox.dll
O17 - HKLM\System\CCS\Services\Tcpip\..\{E0E6DD41-F6F4-4436-9A2E-EDA1ED0AC1A5}: NameServer = 198.58.193.11,195.12.128.1
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O23 - Service: Autodesk Licensing Service - Autodesk - C:\Program Files\Common Files\Autodesk Shared\Service\AdskScSrv.exe
O23 - Service: mental ray 3.6 Satellite for Autodesk 3ds Max 2008 32-bit 32-bit (mi-raysat_3dsMax2008_32) - Unknown owner - C:\Program Files\Autodesk\3ds Max 2008\mentalray\satellite\raysat_3dsMax2008_32server.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\System32\nvsvc32.exe
O23 - Service: PnkBstrA - Unknown owner - C:\WINDOWS\System32\PnkBstrA.exe

--
End of file - 4936 bytes

Log je čisty ale ako sa sprava PC stale mrzne?
Možno to spôsobuje nejaky program ale aky Alebo je niečo v OS to fakt neviem..no ak to mrzne aj po formate tak to bude jedine HW chyba..

stale mrzne..ramky, zdroj, grafika boli menene...stale to iste...

Ako kolko ma pamätove moduly? Ak ma dva tak treba skusiť iba s jednym že ako pojde.
No ale ak ma len jeden modul tak mi napada len reinstal OS s formatom a ak aj tak stale bude mrznuť tak už len skusať meniť komponenty...

ma iba 1gb :/ skusal secko mozne menit a nic..vid vyssie

Logy su ciste..

Skus este poslat vypis z obrazovky po zamrznuti PC po tomto nastaveni:

- Cez Start - potom prave tlacitko na tento pocitac -Vlastnosti- Upresnit-
v sekcii (spustenie a zotavenie systemu)- Gombik Nastavenie a vypni "oznacenie" Automaticky restarovat


..no a opis stav po zamrznuti pc a posli ho sem do fora

ale pc sa neresetuje...on zamrzne...a pomoze len restart...po tomto seckom sa to deje stale menej a menej..mozno tam cosi este ostalo...

kedy to vlastne mrzne? pri com? a ako?

neda sa povedat presne nejaky program, alebo operaciu...proste sem tam...robi to rozne

mam podobny problem ... ale prejavuje sa inak ked prezeram internet zrazu nejde na nic klik potom nejde klavesnica a potom sa vypne mys ... ide to v postupnosti cca 10 sec pomoze len restart

pridavam log


Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 12:03:47, on 5.5.2011
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Windows Defender\MsMpEng.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Alwil Software\Avast5\AvastSvc.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\ATKKBService.exe
C:\WINDOWS\system32\CTsvcCDA.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\WINDOWS\system32\srvany.exe
C:\WINDOWS\KMService.exe
C:\Program Files\Nero\Nero8\Nero BackItUp\NBService.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\IoctlSvc.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Windows Defender\MSASCui.exe
C:\WINDOWS\RTHDCPL.EXE
C:\Program Files\Creative\Creative ZEN\ZEN Media Explorer\CTCheck.exe
C:\PROGRA~1\ALWILS~1\Avast5\avastUI.exe
C:\WINDOWS\system32\RUNDLL32.EXE
C:\Program Files\Common Files\Spigot\Search Settings\SearchSettings.exe
C:\Program Files\Common Files\Nokia\MPlatform\NokiaMServer.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Pando Networks\Media Booster\PMB.exe
C:\Program Files\RocketDock\RocketDock.exe
C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpotdd01.exe
C:\Documents and Settings\Dragon\Local Settings\Data aplikací\Google\Chrome\Application\chrome.exe
C:\Documents and Settings\Dragon\Local Settings\Data aplikací\Google\Chrome\Application\chrome.exe
C:\Documents and Settings\Dragon\Local Settings\Data aplikací\Google\Chrome\Application\chrome.exe
C:\Documents and Settings\Dragon\Local Settings\Data aplikací\Google\Chrome\Application\chrome.exe
C:\Documents and Settings\Dragon\Local Settings\Data aplikací\Google\Chrome\Application\chrome.exe
C:\Documents and Settings\Dragon\Local Settings\Data aplikací\Google\Chrome\Application\chrome.exe
C:\Documents and Settings\Dragon\Local Settings\Data aplikací\Google\Chrome\Application\chrome.exe
C:\Documents and Settings\Dragon\Local Settings\Data aplikací\Google\Chrome\Application\chrome.exe
C:\Documents and Settings\Dragon\Local Settings\Data aplikací\Google\Chrome\Application\chrome.exe
C:\Documents and Settings\Dragon\Local Settings\Data aplikací\Google\Chrome\Application\chrome.exe
C:\Documents and Settings\Dragon\Local Settings\Data aplikací\Google\Chrome\Application\chrome.exe
C:\WINDOWS\system32\msiexec.exe
C:\Program Files\Trend Micro\HiJackThis\HiJackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Odkazy
R3 - URLSearchHook: pdfforge Toolbar - {B922D405-6D13-4A2B-AE89-08A030DA4402} - C:\Program Files\pdfforge Toolbar\IE\4.1\pdfforgeToolbarIE.dll
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\PROGRA~1\MICROS~4\Office14\GROOVEEX.DLL
O2 - BHO: SkypeIEPluginBHO - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O2 - BHO: URLRedirectionBHO - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\PROGRA~1\MICROS~4\Office14\URLREDIR.DLL
O2 - BHO: pdfforge Toolbar - {B922D405-6D13-4A2B-AE89-08A030DA4402} - C:\Program Files\pdfforge Toolbar\IE\4.1\pdfforgeToolbarIE.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
O3 - Toolbar: pdfforge Toolbar - {B922D405-6D13-4A2B-AE89-08A030DA4402} - C:\Program Files\pdfforge Toolbar\IE\4.1\pdfforgeToolbarIE.dll
O4 - HKLM\..\Run: [Windows Defender] "C:\Program Files\Windows Defender\MSASCui.exe" -hide
O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE
O4 - HKLM\..\Run: [SkyTel] SkyTel.EXE
O4 - HKLM\..\Run: [Alcmtr] ALCMTR.EXE
O4 - HKLM\..\Run: [NeroFilterCheck] C:\Program Files\Common Files\Nero\Lib\NeroCheck.exe
O4 - HKLM\..\Run: [NBKeyScan] "C:\Program Files\Nero\Nero8\Nero BackItUp\NBKeyScan.exe"
O4 - HKLM\..\Run: [CTCheck] C:\Program Files\Creative\Creative ZEN\ZEN Media Explorer\CTCheck.exe
O4 - HKLM\..\Run: [avast5] C:\PROGRA~1\ALWILS~1\Avast5\avastUI.exe /nogui
O4 - HKLM\..\Run: [nwiz] C:\Program Files\NVIDIA Corporation\nView\nwiz.exe /installquiet
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [BCSSync] "C:\Program Files\Microsoft Office\Office14\BCSSync.exe" /DelayServices
O4 - HKLM\..\Run: [Application Layer Gateway] C:\Program Files\Common Files\alg.exe
O4 - HKLM\..\Run: [SearchSettings] "C:\Program Files\Common Files\Spigot\Search Settings\SearchSettings.exe"
O4 - HKLM\..\Run: [AdobeAAMUpdater-1.0] "C:\Program Files\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe"
O4 - HKLM\..\Run: [SwitchBoard] C:\Program Files\Common Files\Adobe\SwitchBoard\SwitchBoard.exe
O4 - HKLM\..\Run: [AdobeCS5ServiceManager] "C:\Program Files\Common Files\Adobe\CS5ServiceManager\CS5ServiceManager.exe" -launchedbylogin
O4 - HKLM\..\Run: [NokiaMServer] C:\Program Files\Common Files\Nokia\MPlatform\NokiaMServer /watchfiles startup
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [CTSyncU.exe] "C:\Program Files\Creative\Sync Manager Unicode\CTSyncU.exe"
O4 - HKCU\..\Run: [Google Update] "C:\Documents and Settings\Dragon\Local Settings\Data aplikací\Google\Update\GoogleUpdate.exe" /c
O4 - HKCU\..\Run: [Pando Media Booster] C:\Program Files\Pando Networks\Media Booster\PMB.exe
O4 - HKCU\..\Run: [RocketDock] "C:\Program Files\RocketDock\RocketDock.exe"
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\RunOnce: [nltide_2] regsvr32 /s /n /i:U shell32 (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-20\..\RunOnce: [nltide_2] regsvr32 /s /n /i:U shell32 (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\S-1-5-18\..\RunOnce: [nltide_2] regsvr32 /s /n /i:U shell32 (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - HKUS\.DEFAULT\..\RunOnce: [nltide_2] regsvr32 /s /n /i:U shell32 (User 'Default user')
O4 - Global Startup: hp psc 1000 series.lnk = ?
O4 - Global Startup: hpoddt01.exe.lnk = ?
O8 - Extra context menu item: E&xportovať do programu Microsoft Excel - res://C:\PROGRA~1\MICROS~4\Office14\EXCEL.EXE/3000
O8 - Extra context menu item: Od&oslať do programu OneNote - res://C:\PROGRA~1\MICROS~4\Office14\ONBttnIE.dll/105
O9 - Extra button: Odoslať do programu OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files\Microsoft Office\Office14\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: Od&oslať do programu OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files\Microsoft Office\Office14\ONBttnIE.dll
O9 - Extra button: &Prepojené poznámky programu OneNote - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files\Microsoft Office\Office14\ONBttnIELinkedNotes.dll
O9 - Extra 'Tools' menuitem: &Prepojené poznámky programu OneNote - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files\Microsoft Office\Office14\ONBttnIELinkedNotes.dll
O9 - Extra button: Skype Plug-In - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O9 - Extra 'Tools' menuitem: Skype Plug-In - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O10 - Unknown file in Winsock LSP: c:\windows\system32\nwprovau.dll
O18 - Protocol: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O18 - Filter hijack: text/xml - {807573E5-5146-11D5-A672-00B0D022E945} - C:\Program Files\Common Files\Microsoft Shared\OFFICE14\MSOXMLMF.DLL
O22 - SharedTaskScheduler: Browseui preloader - {438755C2-A8BA-11D1-B96B-00A0C90312E1} - C:\WINDOWS\system32\browseui.dll
O22 - SharedTaskScheduler: Proces mezipaměti kategorií součástí - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\WINDOWS\system32\browseui.dll
O23 - Service: ATK Keyboard Service (ATKKeyboardService) - ASUSTeK COMPUTER INC. - C:\WINDOWS\ATKKBService.exe
O23 - Service: avast! Antivirus - AVAST Software - C:\Program Files\Alwil Software\Avast5\AvastSvc.exe
O23 - Service: Creative Service for CDROM Access - Creative Technology Ltd - C:\WINDOWS\system32\CTsvcCDA.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\1050\Intel 32\IDriverT.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe
O23 - Service: KMService - Unknown owner - C:\WINDOWS\system32\srvany.exe
O23 - Service: Nero BackItUp Scheduler 3 - Nero AG - C:\Program Files\Nero\Nero8\Nero BackItUp\NBService.exe
O23 - Service: NMIndexingService - Nero AG - C:\Program Files\Common Files\Nero\Lib\NMIndexingService.exe
O23 - Service: NVIDIA Display Driver Service (nvsvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: PLFlash DeviceIoControl Service - Prolific Technology Inc. - C:\WINDOWS\system32\IoctlSvc.exe
O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe
O23 - Service: ServiceLayer - Nokia - C:\Program Files\PC Connectivity Solution\ServiceLayer.exe
O23 - Service: SwitchBoard - Adobe Systems Incorporated - C:\Program Files\Common Files\Adobe\SwitchBoard\SwitchBoard.exe

--
End of file - 11585 bytes