problem s procesorom

zdravim,
uz par dni dozadu sa mi stava ze od spustenia PC mi ide procesor na 50-100% a to aj v stave ked nebezi ziadna aplikacia.
vacsinou je to na tych 100% ale obcas sa stava ze ide na 50%.

po spusteni task managera, som is vykladal procesy kt. mi beru najviac z procesora - konkretne to je UMonit.exe

pocitac som presiel, mojim antivirusom - eset smart security a ad-awerom a Malwarebytes' Anti-Malware
zial problem sa neodstranil.

za pomoc dakujem

Tak som tu...krok c. 1:

Stiahni DDS. Uloz na plochu, ukonci vsetky spustene programy a spust ho. Po skonceni scanu sa otvoria vysledky v 2 oknach - DDS.txt a Attach.txt. Obsah oboch by som rad videl.

vdaka,
takze tu to je:


DDS (Ver_09-10-13.01) - NTFSx86
Run by robbie at 18:49:21,18 on st 21. 10. 2009
Internet Explorer: 8.0.7600.16385 BrowserJavaVersion: 1.6.0_16
Microsoft Windows 7 Ultimate 6.1.7600.0.1252.1.1033.18.8191.6900 [GMT 2:00]

SP: Lavasoft Ad-Watch Live! *disabled* (Updated) {67844DAE-4F77-4D69-9457-98E8CFFDAA22}

============== Running Processes ===============

C:\Windows\system32\wininit.exe
C:\Windows\system32\lsm.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Windows\system32\nvvsvc.exe
C:\Windows\system32\svchost.exe -k RPCSS
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k netsvcs
C:\Windows\system32\svchost.exe -k LocalService
C:\Windows\system32\nvvsvc.exe
C:\Windows\system32\svchost.exe -k NetworkService
C:\Windows\System32\spoolsv.exe
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\Program Files (x86)\Bonjour\mDNSResponder.exe
C:\Program Files\ESET\ESET Smart Security\x86\ekrn.exe
C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
C:\Program Files (x86)\Common Files\LightScribe\LSSrvc.exe
C:\Program Files (x86)\Microsoft SQL Server\MSSQL.1\MSSQL\Binn\sqlservr.exe
C:\Windows\system32\taskhost.exe
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Program Files (x86)\Common Files\Nero\Nero BackItUp 4\NBService.exe
C:\Program Files (x86)\Microsoft SQL Server\90\Shared\sqlbrowser.exe
C:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe
C:\Windows\RAVCpl64.exe
C:\Windows\SysWOW64\UMonit.exe
C:\Program Files\ESET\ESET Smart Security\egui.exe
C:\programy\VMware\vmware-authd.exe
C:\Program Files\Windows Sidebar\sidebar.exe
C:\programy\VMware\vmware-tray.exe
C:\Program Files (x86)\Adobe\Acrobat 9.0\Acrobat\acrotray.exe
C:\Windows\system32\SearchIndexer.exe
C:\Windows\system32\svchost.exe -k NetworkServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalServicePeerNet
C:\Program Files\Windows Media Player\wmpnetwk.exe
C:\Program Files (x86)\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
C:\Windows\system32\SearchProtocolHost.exe
C:\Windows\system32\SearchFilterHost.exe
C:\Windows\system32\DllHost.exe
C:\Windows\system32\DllHost.exe
C:\Users\robbie\Desktop\dds.pif
C:\Windows\system32\conhost.exe
C:\Windows\system32\wbem\wmiprvse.exe

============== Pseudo HJT Report ===============

mLocal Page = c:\windows\syswow64\blank.htm
uInternet Settings,ProxyOverride = *.local
BHO: Adobe PDF Link Helper: {18df081c-e8ad-4283-a596-fa578c2ebdc3} - c:\program files (x86)\common files\adobe\acrobat\activex\AcroIEHelperShim.dll
BHO: Adobe PDF Conversion Toolbar Helper: {ae7cd045-e861-484f-8273-0445ee161910} - c:\program files (x86)\common files\adobe\acrobat\activex\AcroIEFavClient.dll
BHO: Java(tm) Plug-In 2 SSV Helper: {dbc80044-a445-435b-bc74-9c25c1c588a9} - c:\program files (x86)\java\jre6\bin\jp2ssv.dll
BHO: SmartSelect Class: {f4971ee7-daa0-4053-9964-665d8ee6a077} - c:\program files (x86)\common files\adobe\acrobat\activex\AcroIEFavClient.dll
TB: Adobe PDF: {47833539-d0c5-4125-9fa8-0819e2eaac93} - c:\program files (x86)\common files\adobe\acrobat\activex\AcroIEFavClient.dll
uRun: [Sidebar] c:\program files\windows sidebar\sidebar.exe /autoRun
mRun: [<NO NAME>]
mRun: [vmware-tray] "c:\programy\vmware\vmware-tray.exe"
mRun: [Acrobat Assistant 8.0] "c:\program files (x86)\adobe\acrobat 9.0\acrobat\Acrotray.exe"
mRun: [Malwarebytes Anti-Malware (reboot)] "c:\programy\malwarebytes' anti-malware\mbam.exe" /runcleanupscript
mPolicies-explorer: NoActiveDesktop = 1 (0x1)
mPolicies-explorer: ForceActiveDesktopOn = 0 (0x0)
mPolicies-system: ConsentPromptBehaviorAdmin = 5 (0x5)
mPolicies-system: ConsentPromptBehaviorUser = 3 (0x3)
mPolicies-system: EnableUIADesktopToggle = 0 (0x0)
IE: E&xportovat do aplikace Microsoft Office Excel - c:\progra~2\micros~3\office11\EXCEL.EXE/3000
IE: E&xportovat do programu Microsoft Excel - c:\progra~2\micros~3\office12\EXCEL.EXE/3000
IE: Previest ciel odkazu do formátu Adobe PDF - c:\program files (x86)\common files\adobe\acrobat\activex\AcroIEFavClient.dll/AcroIECaptureSelLinks.html
IE: Previest do Adobe PDF - c:\program files (x86)\common files\adobe\acrobat\activex\AcroIEFavClient.dll/AcroIECapture.html
IE: Pridat ciel odkazu do existujúceho súboru PDF - c:\program files (x86)\common files\adobe\acrobat\activex\AcroIEFavClient.dll/AcroIEAppendSelLinks.html
IE: Pridat do existujúceho súboru PDF - c:\program files (x86)\common files\adobe\acrobat\activex\AcroIEFavClient.dll/AcroIEAppend.html
IE: {92780B25-18CC-41C8-B9BE-3C9C571A8263} - {FF059E31-CC5A-4E2E-BF3B-96E929D65503} - c:\progra~2\micros~3\office12\REFIEBAR.DLL
DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} - hxxp://java.sun.com/update/1.6.0/jinsta ... s-i586.cab
DPF: {CAFEEFAC-0016-0000-0016-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinsta ... s-i586.cab
DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinsta ... s-i586.cab

================= FIREFOX ===================

FF - ProfilePath - c:\users\robbie\appdata\roaming\mozilla\firefox\profiles\wh7jqg80.default\
FF - plugin: c:\programy\itunes\mozilla plugins\npitunes.dll
FF - plugin: c:\users\robbie\appdata\local\google\update\1.2.183.7\npGoogleOneClick8.dll
FF - HiddenExtension: Java Console: No Registry Reference - c:\program files (x86)\mozilla firefox\extensions\{CAFEEFAC-0016-0000-0016-ABCDEFFEDCBA}

---- FIREFOX POLICIES ----
FF - user.js: network.http.max-persistent-connections-per-server - 4
FF - user.js: nglayout.initialpaint.delay - 600
FF - user.js: content.notify.interval - 600000
FF - user.js: content.max.tokenizing.time - 1800000
FF - user.js: content.switch.threshold - 600000
c:\program files (x86)\mozilla firefox\greprefs\all.js - pref("capability.policy.default.XMLHttpRequest.channel", "noAccess");
c:\program files (x86)\mozilla firefox\greprefs\all.js - pref("javascript.options.jit.chrome", false);
c:\program files (x86)\mozilla firefox\greprefs\all.js - pref("security.checkloaduri", true);
c:\program files (x86)\mozilla firefox\greprefs\all.js - pref("bidi.characterset", 1);
c:\program files (x86)\mozilla firefox\defaults\pref\channel-prefs.js - pref("app.update.channel", "release");
c:\program files (x86)\mozilla firefox\defaults\pref\firefox-l10n.js - pref("browser.fixup.alternate.suffix", ".sk");

============= SERVICES / DRIVERS ===============

R0 Lbd;Lbd;c:\windows\system32\drivers\lbd.sys --> c:\windows\system32\drivers\Lbd.sys [?]
R2 ekrn;ESET Service;c:\program files\eset\eset smart security\x86\ekrn.exe [2009-5-14 731840]
R2 epfwwfp;epfwwfp;c:\windows\system32\drivers\epfwwfp.sys --> c:\windows\system32\drivers\epfwwfp.sys [?]
R2 Nero BackItUp Scheduler 4.0;Nero BackItUp Scheduler 4.0;c:\program files (x86)\common files\nero\nero backitup 4\NBService.exe [2008-9-24 935208]
S2 AcronisOSSReinstallSvc;Acronis OS Selector Reinstall Service;c:\program files (x86)\common files\acronis\acronis disk director\oss_reinstall_svc.exe [2007-2-22 2217416]
S3 Lavasoft Ad-Aware Service;Lavasoft Ad-Aware Service;c:\program files (x86)\lavasoft\ad-aware\AAWService.exe [2009-7-3 1029456]
S3 SIVDRIVER;SIV Kernel Driver;\??\c:\windows\system32\drivers\sivx64.sys --> c:\windows\system32\drivers\SIVX64.sys [?]
S3 teamviewervpn;TeamViewer VPN Adapter;c:\windows\system32\drivers\teamviewervpn.sys --> c:\windows\system32\drivers\teamviewervpn.sys [?]

=============== Created Last 30 ================

2009-10-20 21:37 <DIR> --d----- c:\users\robbie\appdata\roaming\Malwarebytes
2009-10-20 21:37 38,224 a------- c:\windows\system32\drivers\mbamswissarmy.sys
2009-10-20 21:37 <DIR> --d----- c:\programdata\Malwarebytes
2009-10-20 21:37 <DIR> --d----- c:\progra~3\Malwarebytes
2009-10-20 20:48 <DIR> --d----- c:\programdata\Google
2009-10-20 20:42 12,625,408 a------- c:\windows\system32\wmploc.DLL
2009-10-20 20:42 1,320,960 a------- c:\windows\system32\CertEnroll.dll
2009-10-16 19:40 257,024 a------- c:\windows\system32\msv1_0.dll
2009-10-16 19:40 <DIR> --d----- c:\program files (x86)\MSXML 4.0
2009-10-16 19:39 <DIR> --d----- c:\windows\SQLTools9_KB970892_ENU
2009-10-16 19:38 <DIR> --d----- c:\windows\SQL9_KB970892_ENU
2009-10-16 19:10 34,816 a------- c:\windows\system32\msasn1.dll
2009-10-15 18:50 <DIR> --dsh--- c:\programdata\{D3742F82-1C1A-4DCC-ABBD-0E7C3C0185CC}
2009-10-15 18:50 <DIR> --dsh--- c:\progra~3\{D3742F82-1C1A-4DCC-ABBD-0E7C3C0185CC}
2009-10-10 11:36 <DIR> --d----- c:\programdata\Digsby
2009-10-10 11:36 <DIR> --d----- c:\progra~3\Digsby
2009-10-10 11:33 <DIR> --d----- c:\users\robbie\appdata\roaming\Digsby
2009-10-10 09:50 <DIR> --d----- c:\program files (x86)\QIP Infium
2009-10-04 12:02 <DIR> --d----- c:\windows\system32\js
2009-10-04 12:02 <DIR> --d----- c:\windows\system32\images
2009-10-04 12:02 <DIR> --d----- c:\windows\system32\html
2009-10-04 12:02 <DIR> --d----- c:\windows\system32\css
2009-10-04 12:02 <DIR> --d----- c:\program files (x86)\Business Objects
2009-10-04 12:02 734,850 a------- c:\windows\system32\PerfStringBackup.INI
2009-10-04 11:59 <DIR> --d----- c:\program files (x86)\Microsoft Synchronization Services
2009-10-04 11:55 <DIR> --d----- c:\programdata\PreEmptive Solutions
2009-10-04 11:55 <DIR> --d----- c:\progra~3\PreEmptive Solutions
2009-10-04 11:53 <DIR> --d----- c:\windows\system32\1033
2009-10-04 11:52 <DIR> --d----- c:\program files (x86)\HTML Help Workshop
2009-10-04 11:52 <DIR> --d----- c:\program files (x86)\common files\Merge Modules
2009-10-04 11:52 <DIR> --d----- c:\program files (x86)\CE Remote Tools
2009-10-04 11:51 <DIR> --d----- c:\program files (x86)\Microsoft Web Designer Tools
2009-10-03 18:48 <DIR> --d----- c:\users\robbie\appdata\roaming\The Creative Assembly
2009-09-30 18:20 411,368 a------- c:\windows\system32\deploytk.dll
2009-09-30 17:59 <DIR> --d----- c:\users\robbie\appdata\roaming\GrabPro
2009-09-29 21:43 <DIR> --d----- c:\temp\Windows 7 Professional (x86) - DVD (English)
2009-09-29 20:36 <DIR> --d----- c:\program files (x86)\Pure Networks
2009-09-29 16:27 <DIR> --d----- c:\users\robbie\appdata\roaming\CloneSpy
2009-09-29 16:27 <DIR> --d----- c:\program files (x86)\CloneSpy
2009-09-26 15:07 <DIR> --d----- c:\windows\PCHEALTH
2009-09-26 14:16 192 a------- c:\windows\PowerReg.dat
2009-09-23 05:33 <DIR> --d----- c:\windows\Panther
2009-09-23 05:25 <DIR> --d-h--- C:\$WINDOWS.~Q
2009-09-23 05:21 <DIR> --d-h--- C:\$INPLACE.~TR
2009-09-22 20:40 2,048 a------- c:\windows\system32\tzres.dll
2009-09-22 20:39 193,536 a------- c:\windows\notepad.exe
2009-09-22 20:39 179,712 a------- c:\windows\system32\notepad.exe
2009-09-22 20:38 293,888 a------- c:\windows\system32\atmfd.dll
2009-09-22 20:38 108,544 a------- c:\windows\system32\t2embed.dll
2009-09-22 20:38 71,168 a------- c:\windows\system32\fontsub.dll
2009-09-22 20:34 2,868,224 a------- c:\windows\explorer.exe
2009-09-22 20:34 2,613,248 a------- c:\windows\system32\explorer.exe
2009-09-22 20:33 1,083,720 a------- c:\windows\system32\dfshim.dll
2009-09-22 20:33 404,320 a------- c:\windows\system32\PresentationHost.exe
2009-09-22 20:33 291,152 a------- c:\windows\system32\mscoree.dll
2009-09-22 20:33 76,648 a------- c:\windows\system32\PresentationHostProxy.dll
2009-09-22 20:33 14,160 a------- c:\windows\system32\netfxperf.dll
2009-09-22 20:31 666,624 a------- c:\windows\system32\mssvp.dll
2009-09-22 20:31 337,408 a------- c:\windows\system32\mssph.dll
2009-09-22 20:31 197,120 a------- c:\windows\system32\mssphtb.dll
2009-09-22 20:31 86,528 a------- c:\windows\system32\SearchFilterHost.exe
2009-09-22 20:31 59,392 a------- c:\windows\system32\msscntrs.dll
2009-09-22 20:31 1,553,920 a------- c:\windows\system32\tquery.dll
2009-09-22 20:31 1,401,856 a------- c:\windows\system32\mssrch.dll
2009-09-22 20:31 428,032 a------- c:\windows\system32\SearchIndexer.exe
2009-09-22 20:31 164,352 a------- c:\windows\system32\SearchProtocolHost.exe
2009-09-22 20:30 3,954,760 a------- c:\windows\system32\ntkrnlpa.exe
2009-09-22 20:30 3,899,464 a------- c:\windows\system32\ntoskrnl.exe
2009-09-22 20:29 7,168 a------- c:\windows\system32\spwizres.dll
2009-09-22 20:29 2,560 a------- c:\windows\system32\uxlibres.dll
2009-09-22 20:29 8,338,432 a------- c:\windows\system32\spwizimg.dll
2009-09-22 20:29 351,744 a------- c:\windows\system32\spwizeng.dll
2009-09-22 20:29 118,784 a------- c:\windows\system32\uxlib.dll
2009-09-22 20:28 310,784 a------- c:\windows\system32\gdi32.dll
2009-09-22 20:28 380,416 a------- c:\windows\system32\sxs.dll
2009-09-22 20:28 27,136 a------- c:\windows\system32\sxstrace.exe
2009-09-22 20:28 805,376 a------- c:\windows\system32\cdosys.dll
2009-09-22 20:28 530,432 a------- c:\windows\system32\comctl32.dll
2009-09-22 20:28 833,024 a------- c:\windows\system32\user32.dll
2009-09-22 20:14 171,136 a--shr-- C:\w7ldr
2009-09-22 20:09 <DIR> --dsh--- C:\Recovery
2009-09-22 19:38 <DIR> --d----- c:\users\robbie
2009-09-22 19:37 <DIR> --d----- c:\windows\system32\RTCOM

==================== Find3M ====================

2009-08-17 23:33 1,193,832 a------- c:\windows\system32\FM20.DLL
2009-08-12 08:19 135,168 a------- c:\windows\apppatch\apppatch64\AcXtrnal.dll
2009-08-12 08:19 347,648 a------- c:\windows\apppatch\apppatch64\AcLayers.dll
2009-08-12 07:49 2,560 a------- c:\windows\apppatch\AcRes.dll
2009-07-14 07:37 291,294 a------- c:\windows\inf\perflib\0409\perfi.dat
2009-07-14 07:37 291,294 a------- c:\windows\inf\perflib\0409\perfh.dat
2009-07-14 07:37 31,548 a------- c:\windows\inf\perflib\0409\perfd.dat
2009-07-14 07:37 31,548 a------- c:\windows\inf\perflib\0409\perfc.dat
2009-07-14 06:54 174 a--sh--- c:\program files (x86)\desktop.ini
2009-07-14 03:00 291,294 a------- c:\windows\inf\perflib\0000\perfi.dat
2009-07-14 03:00 291,294 a------- c:\windows\inf\perflib\0000\perfh.dat
2009-07-14 03:00 31,548 a------- c:\windows\inf\perflib\0000\perfd.dat
2009-07-14 03:00 31,548 a------- c:\windows\inf\perflib\0000\perfc.dat
2009-03-22 13:02 16,284,371 a------- c:\users\robbie\appdata\roaming\x-video-converter-ultimate.exe
2009-06-10 22:44 9,633,792 a--shr-- c:\windows\fonts\StaticCache.dat
2009-07-14 03:39 398,848 a--sh--- c:\windows\winsxs\amd64_microsoft-windows-mail-app_31bf3856ad364e35_6.1.7600.16385_none_4d4d1f2f696639a2\WinMail.exe
2009-07-14 03:14 396,800 a--sh--- c:\windows\winsxs\x86_microsoft-windows-mail-app_31bf3856ad364e35_6.1.7600.16385_none_f12e83abb108c86c\WinMail.exe

============= FINISH: 18:50:06,48 ===============



UNLESS SPECIFICALLY INSTRUCTED, DO NOT POST THIS LOG.
IF REQUESTED, ZIP IT UP & ATTACH IT

DDS (Ver_09-10-13.01)

Microsoft Windows 7 Ultimate
Boot Device: \Device\HarddiskVolume1
Install Date: 22. 9. 2009 20:09:11
System Uptime: 21. 10. 2009 17:54:20 (1 hours ago)

Motherboard: MICRO-STAR INTERNATIONAL CO.,LTD | | MS-7519
Processor: Intel(R) Core(TM)2 Duo CPU E8500 @ 3.16GHz | CPU 1 | 3174/333mhz

==== Disk Partitions =========================

C: is FIXED (NTFS) - 80 GiB total, 24,107 GiB free.
D: is FIXED (NTFS) - 232 GiB total, 132,22 GiB free.
E: is FIXED (NTFS) - 386 GiB total, 297,934 GiB free.
F: is FIXED (NTFS) - 233 GiB total, 96,065 GiB free.
G: is CDROM ()
H: is CDROM ()

==== Disabled Device Manager Items =============

Class GUID: {8ECC055D-047F-11D1-A537-0000F8753ED1}
Description: VMware Bridge Protocol
Device ID: ROOT\LEGACY_VMNETBRIDGE\0000
Manufacturer:
Name: VMware Bridge Protocol
PNP Device ID: ROOT\LEGACY_VMNETBRIDGE\0000
Service: VMnetBridge

Class GUID: {8ECC055D-047F-11D1-A537-0000F8753ED1}
Description: VMware Network Application Interface
Device ID: ROOT\LEGACY_VMNETUSERIF\0000
Manufacturer:
Name: VMware Network Application Interface
PNP Device ID: ROOT\LEGACY_VMNETUSERIF\0000
Service: VMnetuserif

Class GUID: {4d36e972-e325-11ce-bfc1-08002be10318}
Description: Hamachi Network Interface
Device ID: ROOT\NET\0000
Manufacturer: LogMeIn, Inc.
Name: Hamachi Network Interface
PNP Device ID: ROOT\NET\0000
Service: hamachi

Class GUID: {8ECC055D-047F-11D1-A537-0000F8753ED1}
Description: sptd
Device ID: ROOT\LEGACY_SPTD\0000
Manufacturer:
Name: sptd
PNP Device ID: ROOT\LEGACY_SPTD\0000
Service: sptd

Class GUID:
Description: Camera
Device ID: USB\VID_046D&PID_092C\5&916C8C6&0&1
Manufacturer:
Name: Camera
PNP Device ID: USB\VID_046D&PID_092C\5&916C8C6&0&1
Service:

==== System Restore Points ===================

RP48: 4. 10. 2009 15:25:14 - Windows Update
RP49: 5. 10. 2009 7:58:36 - Windows Update
RP50: 9. 10. 2009 17:37:16 - Installed OF Dragon Rising
RP51: 15. 10. 2009 18:50:33 - Installed TuneUp Utilities
RP52: 16. 10. 2009 19:36:21 - Windows Update
RP53: 20. 10. 2009 20:47:40 - Installed Google SketchUp 7.1
RP54: 20. 10. 2009 21:51:49 - Windows Update
RP55: 21. 10. 2009 15:24:00 - Removed TuneUp Utilities
RP56: 21. 10. 2009 15:24:56 - TuneUp Utilities Language Pack (de-DE) wird entfernt
RP57: 21. 10. 2009 15:25:58 - Removed OF Dragon Rising

==== Installed Programs ======================

"Nero SoundTrax Help
7-Zip 4.64
Acronis Disk Director Suite
Ad-Aware
Add or Remove Adobe Creative Suite 3 Master Collection
Adobe Acrobat 9 Pro - Czech, Hungarian, Polish, Slovak
Adobe Acrobat 9.1.3 - CPSID_49522
Adobe After Effects CS3 Presets
Adobe Anchor Service CS3
Adobe Asset Services CS3
Adobe Bridge CS3
Adobe Bridge Start Meeting
Adobe BridgeTalk Plugin CS3
Adobe Camera Raw 4.0
Adobe CMaps
Adobe Color - Photoshop Specific
Adobe Color Common Settings
Adobe Color EU Extra Settings
Adobe Color JA Extra Settings
Adobe Color NA Recommended Settings
Adobe Creative Suite 3 Master Collection
Adobe Default Language CS3
Adobe Device Central CS3
Adobe Dreamweaver CS3
Adobe ExtendScript Toolkit 2
Adobe Extension Manager CS3
Adobe Flash Player 10 Plugin
Adobe Flash Player 9 ActiveX
Adobe Fonts All
Adobe Help Viewer CS3
Adobe InDesign CS3 Icon Handler
Adobe Linguistics CS3
Adobe MotionPicture Color Files
Adobe PDF Library Files
Adobe Photoshop CS3
Adobe Setup
Adobe SING CS3
Adobe Stock Photos CS3
Adobe Type Support
Adobe Update Manager CS3
Adobe Version Cue CS3 Client
Adobe Video Profiles
Adobe WAS CS3
Adobe WinSoft Linguistics Plugin
Adobe XMP DVA Panels CS3
Adobe XMP Panels CS3
Advertising Center
AHV content for Acrobat and Flash
Apple Software Update
CloneSpy 2.5b3
Crystal Reports Basic for Visual Studio 2008
DolbyFiles
GDR 4053 for SQL Server Database Services 2005 ENU (KB970892)
GDR 4053 for SQL Server Tools and Workstation Components 2005 ENU (KB970892)
Genesys USB Mass Storage Device
GoldWave v5.52
Google Chrome
Google SketchUp 7.1
Hotfix for Microsoft Visual Studio 2008 Professional Edition - ENU (KB971091)
Hotfix for Microsoft Visual Studio 2008 Professional Edition - ENU (KB973674)
ImagXpress
Java(TM) 6 Update 16
LightScribe System Software 1.14.17.1
Malwarebytes' Anti-Malware
Mathcad 2001 Professional
Menu Templates - Starter Kit
Microsoft .NET Compact Framework 2.0 SP2
Microsoft .NET Compact Framework 3.5
Microsoft Document Explorer 2008
Microsoft Games for Windows - LIVE Redistributable
Microsoft Office 2007 Service Pack 2 (SP2)
Microsoft Office Access MUI (Slovak) 2007
Microsoft Office Enterprise 2007
Microsoft Office Excel MUI (Slovak) 2007
Microsoft Office Groove MUI (Slovak) 2007
Microsoft Office InfoPath MUI (Slovak) 2007
Microsoft Office OneNote MUI (Slovak) 2007
Microsoft Office Outlook MUI (Slovak) 2007
Microsoft Office PowerPoint MUI (Slovak) 2007
Microsoft Office Proof (Czech) 2007
Microsoft Office Proof (English) 2007
Microsoft Office Proof (German) 2007
Microsoft Office Proof (Hungarian) 2007
Microsoft Office Proof (Slovak) 2007
Microsoft Office Proofing (Slovak) 2007
Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2)
Microsoft Office Publisher MUI (Slovak) 2007
Microsoft Office Shared MUI (English) 2007
Microsoft Office Shared MUI (Slovak) 2007
Microsoft Office Shared Setup Metadata MUI (English) 2007
Microsoft Office SharePoint Designer 2007 Service Pack 2 (SP2)
Microsoft Office Visual Web Developer 2007
Microsoft Office Visual Web Developer MUI (English) 2007
Microsoft Office Word MUI (Slovak) 2007
Microsoft Silverlight
Microsoft SQL Server 2005
Microsoft SQL Server 2005 Express Edition (SQLEXPRESS)
Microsoft SQL Server 2005 Tools Express Edition
Microsoft SQL Server Compact 3.5 Design Tools ENU
Microsoft SQL Server Compact 3.5 ENU
Microsoft SQL Server Compact 3.5 for Devices ENU
Microsoft SQL Server Database Publishing Wizard 1.2
Microsoft SQL Server Setup Support Files (English)
Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053
Microsoft Visual Studio 2005 Tools for Office Runtime
Microsoft Visual Studio 2008 Professional Edition - ENU
Microsoft Visual Studio Web Authoring Component
Movie Templates - Starter Kit
MozBackup 1.4.9
Mozilla Firefox (3.5.3)
Mozilla Thunderbird (2.0.0.23)
MSXML 4.0 SP2 (KB954430)
Nero 9
Nero BurningROM
Nero BurnRights
Nero ControlCenter
Nero CoverDesigner
Nero CoverDesigner Help
Nero Disc Copy Gadget
Nero Disc Copy Gadget Help
Nero DiscSpeed
Nero DriveSpeed
Nero Express
Nero InfoTool
Nero Installer
Nero Live
Nero Live Help
Nero PhotoSnap
Nero PhotoSnap Help
Nero Recode
Nero Recode Help
Nero Rescue Agent
Nero RescueAgent Help
Nero ShowTime
Nero StartSmart
Nero StartSmart Help
Nero Vision
Nero WaveEditor
Nero WaveEditor Help
NeroBurningROM
NeroExpress
neroxml
PDF Settings
PowerISO
QIP Infium 2.0.9032 RC4
QuickTime
Realtek 8169 8168 8101E 8102E Ethernet Driver
Realtek High Definition Audio Driver
Security Update for 2007 Microsoft Office System (KB951944)
Security Update for 2007 Microsoft Office System (KB969559)
Security Update for 2007 Microsoft Office System (KB969679)
Security Update for Microsoft Office Excel 2007 (KB969682)
Security Update for Microsoft Office Outlook 2007 (KB972363)
Security Update for Microsoft Office PowerPoint 2007 (KB957789)
Security Update for Microsoft Office Publisher 2007 (KB969693)
Security Update for Microsoft Office system 2007 (972581)
Security Update for Microsoft Office system 2007 (KB969613)
Security Update for Microsoft Office system 2007 (KB974234)
Security Update for Microsoft Office Visio Viewer 2007 (KB973709)
Security Update for Microsoft Office Word 2007 (KB969604)
SoundTrax
The KMPlayer (remove only)
Total Commander (Remove or Repair)
Update for 2007 Microsoft Office System (KB967642)
Update for Outlook 2007 Junk Email Filter (KB974810)
VC Runtimes MSI
Visual C++ 2008 x86 Runtime - (v9.0.30729)
Visual C++ 2008 x86 Runtime - v9.0.30729.01
Visual Studio 2005 Tools for Office Second Edition Runtime
Visual Studio Tools for the Office system 3.0 Runtime
VMware Workstation
Windows Media Player Firefox Plugin
Windows Mobile 5.0 SDK R2 for Pocket PC
Windows Mobile 5.0 SDK R2 for Smartphone
WinRAR

==== Event Viewer Messages From Past Week ========

21. 10. 2009 17:54:57, Error: Service Control Manager [7026] - The following boot-start or system-start driver(s) failed to load: sptd
21. 10. 2009 17:54:48, Error: Service Control Manager [7000] - The VMware Network Application Interface service failed to start due to the following error: The system cannot find the file specified.
21. 10. 2009 17:54:42, Error: Service Control Manager [7000] - The VMware Bridge Protocol service failed to start due to the following error: The system cannot find the file specified.
21. 10. 2009 17:54:22, Error: sptd [4] - Driver detected an internal error in its data structures for .
21. 10. 2009 17:53:48, Error: Service Control Manager [7016] - The NVIDIA Display Driver Service service has reported an invalid current state 32.
21. 10. 2009 17:02:00, Error: NetBT [4321] - The name "WORKGROUP :1d" could not be registered on the interface with IP address 192.168.0.160. The computer with the IP address 192.168.0.149 did not allow the name to be claimed by this computer.
21. 10. 2009 15:29:22, Error: Service Control Manager [7009] - A timeout was reached (30000 milliseconds) while waiting for the Norton 2009 Reset service to connect.
21. 10. 2009 15:29:22, Error: Service Control Manager [7000] - The Norton 2009 Reset service failed to start due to the following error: The service did not respond to the start or control request in a timely fashion.
21. 10. 2009 15:21:40, Error: Service Control Manager [7022] - The TuneUp Utilities Service service hung on starting.
15. 10. 2009 20:55:38, Error: Service Control Manager [7023] - The Windows Update service terminated with the following error: %%-2147467243
15. 10. 2009 20:55:35, Error: Service Control Manager [7023] - The Diagnostic System Host service terminated with the following error: The requested control is not valid for this service.
15. 10. 2009 20:55:34, Error: Service Control Manager [7038] - The WSearch service was unable to log on as NT AUTHORITY\SYSTEM with the currently configured password due to the following error: The security account manager (SAM) or local security authority (LSA) server was in the wrong state to perform the security operation. To ensure that the service is configured properly, use the Services snap-in in Microsoft Management Console (MMC).
15. 10. 2009 20:55:34, Error: Service Control Manager [7038] - The WdiServiceHost service was unable to log on as NT AUTHORITY\LocalService with the currently configured password due to the following error: The request is not supported. To ensure that the service is configured properly, use the Services snap-in in Microsoft Management Console (MMC).
15. 10. 2009 20:55:34, Error: Service Control Manager [7038] - The netprofm service was unable to log on as NT AUTHORITY\LocalService with the currently configured password due to the following error: The request is not supported. To ensure that the service is configured properly, use the Services snap-in in Microsoft Management Console (MMC).
15. 10. 2009 20:55:34, Error: Service Control Manager [7000] - The Windows Search service failed to start due to the following error: The service did not start due to a logon failure.
15. 10. 2009 20:55:34, Error: Service Control Manager [7000] - The Network List Service service failed to start due to the following error: The service did not start due to a logon failure.
15. 10. 2009 20:55:34, Error: Service Control Manager [7000] - The Diagnostic Service Host service failed to start due to the following error: The service did not start due to a logon failure.
15. 10. 2009 20:55:34, Error: Microsoft-Windows-DistributedCOM [10005] - DCOM got error "1069" attempting to start the service WSearch with arguments "" in order to run the server: {9E175B6D-F52A-11D8-B9A5-505054503030}
15. 10. 2009 20:55:34, Error: Microsoft-Windows-DistributedCOM [10005] - DCOM got error "1069" attempting to start the service netprofm with arguments "" in order to run the server: {A47979D2-C419-11D9-A5B4-001185AD2B89}
15. 10. 2009 18:51:09, Error: Service Control Manager [7000] - The TuneUp Theme Extension (beta) service failed to start due to the following error: The executable program that this service is configured to run in does not implement the service.
14. 10. 2009 21:57:20, Error: NetBT [4321] - The name "WORKGROUP :1d" could not be registered on the interface with IP address 192.168.0.160. The computer with the IP address 192.168.0.157 did not allow the name to be claimed by this computer.

==== End Of File ===========================

OMG 64-bit Win7, najhorsia kombinacia, aku si tam mohol nahodit (aspon z mojho pohladu - nemam poriadne utility, ktorymi by som ti to mohol prevetrat :/ ).

UMonit.exe je v poriadku, patri pod USB Monitor.

Stiahni si RootkitUnhooker. Vypni vsetky spustene aplikacie, extrahuj a spust. Prebehne instalacia (odporucam nic neprestavovat), po nej spust nahodne pomenovany subor (napr. gj8Wtng3Ja01Cj6An.exe) nachadzajuci sa v mieste instalacie. Klikni na "Report" -> "Scan", nechaj vsetko zaskrtnute a klik na "OK". Postupuj podla instrukcii. Zacne sa scan, po jeho skonceni klikni na "File" -> "Save Report". Ulozeny report sem skopiruj.

ahoj,
zail po nainstalovani som v priecinku nemal nic take ako si pisal. tak som skusil spustit 43qtoAdmpg ale ani to neslo.
prikladam screen, vies mi poradit co dalej?

Skusal si spustit to cez "Run as admin..."?

ano,aj tak so mto skusal.
a skusal som este to spustit ako na win xp, ale ani jedno nepomohlo

Tym padom sme ostali bez antirootkitu, nic viac na Win7 este nefunguje :/

Mas chut experimentovat? Je tu este jedna moznost, lenze ta je vo faze testovania (cize je mozne vselico),

fu, no zalezi ze co by to bolo...
daj navrh, zamyslim sa nad tym...vdaka

No ide o jeden nastroj, ktory je v Beta faze testovania a je urceny na Win7.

Ostatne jeho "odrody" v pohode funguju na WinXP, Vista atd., no kedze je Win7 novinka, tak este nebol prerobeny (prepisany) do kompatilibity so sedmickou.

Takze?

jasne, beta verzia je v pohode..
urcite to mozeme vyskusat

vdaka

Stiahnes >>tento<< subor, je to nova verzia ComboFixu - tu je navod nan:

Stiahni ComboFix, najlepsie na plochu. Vypni vsetky otvorene aplikacie, ako aj rezidenty antiviru, antispywaru a firewall. Spust program cez ucet s administratorskymi pravami a postupuj podla instrukcii. Cely sken bude trvat cca 10 minut. Pocas neho moze byt PC restartovane. Log, ktory ComboFix vytvori, najdes na adrese "C:\ComboFix.txt".
Ten vloz sem.

Pozor: Kym ComboFix nevytvori log, na nic neklikat, nic nestlacat !!

ahoj,

no moc daleko som nezasiel pozri screen dole, toto mi vyhodilo po spusteni - cez administratora

V safemode to bude asi to iste, co? :/

ked chces nainstalovat nepodpisany ovladac pod 64 bit win 7 alebo vista musis najprv vypnut kontrolu podpisu, pred bootovanim OS sa cez F8 dostan domenu kadial sa bezne ide do safe mode a vyber druhu moznost odspodu, disable driver signature enforcement, potom pojde, plati to len na toto spustenie, pri dalsom spusteni je digitalny podpis instalovaneho ovladaca opät potrebny

ahojte,

dik jaro za radu - aplikacia sa mi podarila spustit ale zasa to zlihalo na nejakom erore, chcelo to stiahnut daku novsiu verziu combofix a tam to padlo - error 2

mate este nejaky napad?ako na to?

Zeby ho stiahli z obehu? Neviem, nechapem, nerozumiem...

Mne dosli napady aj naboje, cize mas 2 moznosti: bojovat holymi rukami (hrabat sa rucne v PC a hladat, co tam nepatri), alebo sa proste uspokojit s tym, ze DDS nic neukazal (-> chyba nebude v malware).

Viac poradit proste neviem.

vdaka moc,

no budem musiet vydrzat...uvidime, casom sa snad daco urcite objavi...
dik moc

Ved nemas zaco, de facto som nemohol :/