hasznald ezt a programot defrag=torezedes mentes.
http://www.mydefrag.com/

letolteni futatni restart
http://www.aumha.org/downloads/ntregopt-setup.exe

aztan ird meg ha job e

Újraindult, most mintha rövidebb ideig tartott volna.

torold le,,es ird le mia helyzet a gepel,

Malwarebytes' Anti-Malware 1.40
Adatbázis verzió: 2551
Windows 5.1.2600 Szervizcsomag 2

2009.08.27. 14:57:06
mbam-log-2009-08-27 (14-56-56).txt

Vizsgálat típusa: Teljes vizsgálat (C:\|)
Átvizsgált objektumok: 114384
Eltelt idő: 1 hour(s), 11 minute(s), 16 second(s)

Fertőzött memóriafolyamatok: 0
Fertőzött memória modulok: 0
Fertőzött rendszerleíró kulcsok: 0
Fertőzött rendszerleíró értékek: 0
Fertőzött rednszerleíró elemek: 1
Fertőzött mappák: 0
Fertőzött fájlok: 0

Fertőzött memóriafolyamatok:
(Nem észleltem rosszindulatú elemeket)

Fertőzött memória modulok:
(Nem észleltem rosszindulatú elemeket)

Fertőzött rendszerleíró kulcsok:
(Nem észleltem rosszindulatú elemeket)

Fertőzött rendszerleíró értékek:
(Nem észleltem rosszindulatú elemeket)

Fertőzött rednszerleíró elemek:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\UpdatesDisableNotify (Disabled.SecurityCenter) -> Bad: (1) Good: (0) -> No action taken.

Fertőzött mappák:
(Nem észleltem rosszindulatú elemeket)

Fertőzött fájlok:
(Nem észleltem rosszindulatú elemeket)

IDE ATA/ATAPI vezérlők, megtaláltam, duplán rákatt, speciális beállítások fülön van olyan, hogy 0-s számú és 1-es számú eszköz. Te nem tudnád megnézni??

# Kattintson duplán a Felügyeleti eszközök elemre, majd kattintson a Számítógép-kezelés parancsra.
# Bontsa ki a Rendszereszközök csoportot, és kattintson az Eszközkezelő listaelemre.
# Bontsa ki az IDE ATA/ATAPI vezérlők csomópontot.
# Kattintson duplán a primaris vezérlőre es nezd meg mijen modban mukszik kene neki lenie dma,,5..6

Eszközkezelőben? Bocsi a buta kérdésekért.
Induláskor mindig, és van mikor használat közben is belassul. Azt hiszem 2 éve lett utoljára telepítve az egész.

a rendszerben a gep mindig lassu vagy csak a startnall,

ezt nem tudom. Hol lehet ezt megnézni?

igen ez problem,,milyen a merev lemez sata vagy ide,

Nemrég kapcsoltam be, és kerek 20 perc volt mire felállt a rendszer. Régebben is lassú volt, de nem ennyire. Csak pörög.. Most töltöm a malwarebytest.

ok,,most szed le a malwarebytest,,kipucolni CCleaneral,es ujbol teleptsd fell,,frisiteni futatni,,de en virust nemlatok,most hogy megy a gep??

All processes killed
========== PROCESSES ==========
No active process named explorer.exe was found!
========== REGISTRY ==========
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{DBC80044-A445-435b-BC74-9C25C1C588A9}\ not found.
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\RunOnce\\Malwarebytes' Anti-Malware deleted successfully.
========== COMMANDS ==========

[EMPTYTEMP]

User: All Users

User: Default User
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 33170 bytes

User: LocalService
->Temp folder emptied: 65984 bytes
File delete failed. C:\Documents and Settings\LocalService\Local Settings\Temporary Internet Files\Content.IE5\index.dat scheduled to be deleted on reboot.
->Temporary Internet Files folder emptied: 1938977 bytes

User: NetworkService
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 67 bytes

User: xy
->Temp folder emptied: 3552024 bytes
->Temporary Internet Files folder emptied: 159457087 bytes
->Java cache emptied: 217 bytes
->Google Chrome cache emptied: 593984 bytes
->Opera cache emptied: 26769534 bytes

%systemdrive% .tmp files removed: 0 bytes
%systemroot% .tmp files removed: 1119389 bytes
%systemroot%\System32 .tmp files removed: 3771175 bytes
File delete failed. C:\WINDOWS\temp\_avast4_\Webshlock.txt scheduled to be deleted on reboot.
File delete failed. C:\WINDOWS\temp\Perflib_Perfdata_5c8.dat scheduled to be deleted on reboot.
Windows Temp folder emptied: 50432 bytes
RecycleBin emptied: 3942048 bytes

Total Files Cleaned = 191,97 mb


OTM by OldTimer - Version 3.0.0.6 log created on 08262009_212942

Files moved on Reboot...
C:\WINDOWS\temp\_avast4_\Webshlock.txt moved successfully.
C:\WINDOWS\temp\Perflib_Perfdata_5c8.dat moved successfully.

Registry entries deleted on Reboot...

tolds le az OTMOVEIT3 programot,,a balablakba masold be a zold textet,,es klik Moveit aztan amit ad ted ide
http://oldtimer.geekstogo.com/OTM.exe

Logfile of random's system information tool 1.06 (written by random/random)
Run by xy at 2009-08-26 21:05:45
Microsoft Windows XP Professional Szervizcsomag 2
System drive C: has 751 MB (8%) free of 10 GB
Total RAM: 126 MB (16% free)

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 21:06:41, on 2009.08.26.
Platform: Windows XP Szervizcsomag 2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe
C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLLoginProxy.exe
C:\Documents and Settings\xy\Asztal\RSIT.exe
C:\Program Files\trend micro\xy.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.hu/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Hivatkozások
O2 - BHO: Windows Live bejelentkezési segítség - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files\Google\Google Toolbar\GoogleToolbar.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.1.1309.3572\swg.dll
O2 - BHO: Google Dictionary Compression sdch - {C84D72FE-E17D-4195-BB24-76C02E2E7C4E} - C:\Program Files\Google\Google Toolbar\Component\fastsearch_A8904FB862BD9564.dll
O2 - BHO: (no name) - {DBC80044-A445-435b-BC74-9C25C1C588A9} - (no file)
O3 - Toolbar: (no name) - {E0E899AB-F487-11D5-8D29-0050BA6940E3} - (no file)
O3 - Toolbar: Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar.dll
O4 - HKLM\..\Run: [ZoneAlarm Client] "C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe"
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKLM\..\RunOnce: [Malwarebytes' Anti-Malware] C:\Program Files\Malwarebytes' Anti-Malware\mbamgui.exe /install /silent
O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'Default user')
O9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\WINDOWS\bdoscandel.exe
O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner v8 - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\WINDOWS\bdoscandel.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O10 - Unknown file in Winsock LSP: c:\windows\system32\nwprovau.dll
O16 - DPF: {DE2F0988-E455-48ED-A35D-4D73D333D561} - https://gate.gov.hu/sdx/SDXFormSigner.cab
O18 - Filter: x-sdch - {B1759355-3EEC-4C1E-B0F1-B719FE26E377} - C:\Program Files\Google\Google Toolbar\Component\fastsearch_A8904FB862BD9564.dll
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
O23 - Service: Google Software Updater (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: TrueVector Internet Monitor (vsmon) - Check Point Software Technologies LTD - C:\WINDOWS\system32\ZoneLabs\vsmon.exe

--
End of file - 4622 bytes

======Scheduled tasks folder======

C:\WINDOWS\tasks\{06C4A412-99DD-4FF5-AAF0-1A9F333550B5}_OTTHONI_xy.job

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
Windows Live bejelentkezési segítség - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2007-09-20 328752]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AA58ED58-01DD-4d91-8333-CF10577473F7}]
Google Toolbar Helper - C:\Program Files\Google\Google Toolbar\GoogleToolbar.dll [2009-06-15 259696]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AF69DE43-7D58-4638-B6FA-CE66B5AD205D}]
Google Toolbar Notifier BHO - C:\Program Files\Google\GoogleToolbarNotifier\5.1.1309.3572\swg.dll [2009-05-13 668656]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{C84D72FE-E17D-4195-BB24-76C02E2E7C4E}]
Google Dictionary Compression sdch - C:\Program Files\Google\Google Toolbar\Component\fastsearch_A8904FB862BD9564.dll [2009-05-13 470512]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{E0E899AB-F487-11D5-8D29-0050BA6940E3}
{2318C2B1-4965-11d4-9B18-009027A5CD4F} - Google Toolbar - C:\Program Files\Google\Google Toolbar\GoogleToolbar.dll [2009-06-15 259696]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"ZoneAlarm Client"=C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe [2008-11-13 981904]
"avast!"=C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe [2008-11-18 81000]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\RunOnce]
"Malwarebytes' Anti-Malware"=C:\Program Files\Malwarebytes' Anti-Malware\mbamgui.exe [2009-08-03 419088]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"swg"=C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe [2009-01-02 39408]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\swg]
C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe [2009-01-02 39408]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll [2006-10-18 133632]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa]
"authentication packages"=msv1_0
nwprovau

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\nm]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\nm.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\UploadMgr]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\vsmon]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=323
"NoDrives"=0
"NoDriveAutoRun"=67108863

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDrives"=
"NoDriveAutoRun"=
"NoDriveTypeAutoRun"=

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"C:\WINDOWS\system32\sessmgr.exe"="C:\WINDOWS\system32\sessmgr.exe:*:Disabled:@xpsp2res.dll,-22019"
"C:\Program Files\Messenger\msmsgs.exe"="C:\Program Files\Messenger\msmsgs.exe:*:Enabled:Windows Messenger"
"C:\Program Files\Windows Live\Messenger\msnmsgr.exe"="C:\Program Files\Windows Live\Messenger\msnmsgr.exe:*:Enabled:Windows Live Messenger"
"C:\Program Files\Windows Live\Messenger\livecall.exe"="C:\Program Files\Windows Live\Messenger\livecall.exe:*:Enabled:Windows Live Messenger (Phone)"
"C:\WINDOWS\PCHEALTH\HELPCTR\Binaries\helpctr.exe"="C:\WINDOWS\PCHEALTH\HELPCTR\Binaries\helpctr.exe:*:Enabled:Távsegítség - Windows Messenger és beszédkapcsolat"
"C:\Program Files\Skype\Phone\Skype.exe"="C:\Program Files\Skype\Phone\Skype.exe:*:Enabled:Skype"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"C:\Program Files\Windows Live\Messenger\msnmsgr.exe"="C:\Program Files\Windows Live\Messenger\msnmsgr.exe:*:Enabled:Windows Live Messenger"
"C:\Program Files\Windows Live\Messenger\livecall.exe"="C:\Program Files\Windows Live\Messenger\livecall.exe:*:Enabled:Windows Live Messenger (Phone)"

======List of files/folders created in the last 1 months======

2009-08-26 21:05:57 ----D---- C:\Program Files\trend micro
2009-08-26 21:05:45 ----D---- C:\rsit
2009-08-26 18:07:21 ----D---- C:\Program Files\Malwarebytes' Anti-Malware
2009-08-25 10:01:21 ----D---- C:\Program Files\Malwarebytes' Anti-Malware!!
2009-08-20 14:44:30 ----A---- C:\WINDOWS\system32\ptpusb.dll
2009-08-20 14:44:24 ----A---- C:\WINDOWS\system32\ptpusd.dll
2009-08-12 10:30:55 ----HDC---- C:\WINDOWS\$NtServicePackUninstallIDNMitigationAPIs$
2009-08-12 10:29:21 ----HDC---- C:\WINDOWS\$NtServicePackUninstallNLSDownlevelMapping$
2009-08-12 10:27:27 ----HDC---- C:\WINDOWS\$NtUninstallKB915865$
2009-08-11 11:10:00 ----D---- C:\WINDOWS\WBEM
2009-08-11 11:06:55 ----A---- C:\WINDOWS\system32\ieencode.dll
2009-08-11 11:06:52 ----D---- C:\WINDOWS\system32\hu-HU
2009-08-07 08:01:07 ----A---- C:\WINDOWS\system32\aswBoot.exe

======List of files/folders modified in the last 1 months======

2009-08-26 21:06:14 ----D---- C:\WINDOWS\Prefetch
2009-08-26 21:05:57 ----D---- C:\Program Files
2009-08-26 20:48:22 ----D---- C:\WINDOWS\Temp
2009-08-26 18:42:34 ----D---- C:\WINDOWS\Internet Logs
2009-08-26 18:07:31 ----D---- C:\WINDOWS\system32\drivers
2009-08-26 14:13:00 ----A---- C:\WINDOWS\SchedLgU.Txt
2009-08-25 04:43:07 ----D---- C:\WINDOWS
2009-08-24 23:18:33 ----D---- C:\WINDOWS\system32\CatRoot2
2009-08-24 13:49:37 ----SHD---- C:\WINDOWS\Installer
2009-08-24 13:49:37 ----SHD---- C:\Config.Msi
2009-08-24 13:46:46 ----D---- C:\Program Files\Common Files\Adobe
2009-08-24 11:53:49 ----D---- C:\Program Files\Google
2009-08-20 14:44:34 ----RSHDC---- C:\WINDOWS\system32\dllcache
2009-08-20 14:44:33 ----D---- C:\WINDOWS\system32
2009-08-20 14:41:12 ----HD---- C:\WINDOWS\inf
2009-08-19 13:21:03 ----D---- C:\WINDOWS\Help
2009-08-17 20:06:14 ----D---- C:\Documents and Settings\xy\Application Data\Skype
2009-08-13 15:44:55 ----D---- C:\Documents and Settings\xy\Application Data\DivX
2009-08-12 16:19:45 ----D---- C:\Program Files\Internet Explorer
2009-08-12 15:50:39 ----D---- C:\WINDOWS\Media
2009-08-12 10:26:58 ----HD---- C:\WINDOWS\$hf_mig$
2009-08-11 11:10:24 ----D---- C:\WINDOWS\system32\config
2009-08-07 07:45:22 ----D---- C:\Program Files\CCleaner
2009-08-05 19:34:16 ----RASH---- C:\boot.ini
2009-08-05 19:34:16 ----A---- C:\WINDOWS\win.ini
2009-08-05 19:34:16 ----A---- C:\WINDOWS\system.ini

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R1 Aavmker4;avast! Asynchronous Virus Monitor; C:\WINDOWS\system32\drivers\Aavmker4.sys [2008-11-18 26944]
R1 aswSP;avast! Self Protection; C:\WINDOWS\system32\drivers\aswSP.sys [2008-11-18 110160]
R1 aswTdi;avast! Network Shield Support; C:\WINDOWS\system32\drivers\aswTdi.sys [2008-11-18 50864]
R1 P3;Intel PentiumIII processzor-illesztőprogram; C:\WINDOWS\System32\DRIVERS\p3.sys [2004-08-17 46720]
R1 vsdatant;vsdatant; C:\WINDOWS\System32\vsdatant.sys [2008-11-13 353680]
R2 aswFsBlk;aswFsBlk; C:\WINDOWS\system32\DRIVERS\aswFsBlk.sys [2008-11-18 20560]
R2 aswMon2;avast! Standard Shield Support; C:\WINDOWS\system32\drivers\aswMon2.sys [2008-11-18 94032]
R2 NwlnkIpx;NWLink IPX/SPX/NetBIOS-kompatibilis átviteli protokoll; C:\WINDOWS\system32\DRIVERS\nwlnkipx.sys [2004-08-03 88448]
R2 NwlnkNb;NWLink NetBIOS; C:\WINDOWS\system32\DRIVERS\nwlnknb.sys [2001-10-26 63232]
R2 NwlnkSpx;NWLink SPX/SPXII protokoll; C:\WINDOWS\system32\DRIVERS\nwlnkspx.sys [2001-10-26 55936]
R3 aswRdr;aswRdr; C:\WINDOWS\system32\drivers\aswRdr.sys [2008-11-18 23152]
R3 dtscsi;dtscsi; C:\WINDOWS\System32\Drivers\dtscsi.sys [2009-05-14 223128]
R3 EL90XBC;3Com EtherLink XL 90XB/C adapter Driver; C:\WINDOWS\System32\DRIVERS\el90xbc5.sys [2001-08-17 66591]
R3 es1371;Creative AudioPCI (ES1371,ES1373) (WDM); C:\WINDOWS\system32\drivers\es1371mp.sys [2001-08-17 40704]
R3 HidUsb;Microsoft HID osztályú illesztőprogram; C:\WINDOWS\system32\DRIVERS\hidusb.sys [2001-08-17 9600]
R3 i81x;i81x; C:\WINDOWS\System32\DRIVERS\i81xnt5.sys [2004-08-03 161020]
R3 mouhid;Egér HID-illesztőprogram; C:\WINDOWS\System32\DRIVERS\mouhid.sys [2001-10-26 12160]
R3 NWRDR;NetWare Rdr; C:\WINDOWS\system32\DRIVERS\nwrdr.sys [2006-10-13 163584]
R3 usbhub;USB2-engedélyezett hub; C:\WINDOWS\System32\DRIVERS\usbhub.sys [2004-08-03 57600]
R3 usbuhci;Microsoft USB univerzális állomásvezérlő miniport illesztőprogramja; C:\WINDOWS\System32\DRIVERS\usbuhci.sys [2004-08-03 20480]
S3 iAimFP0;iAimFP0; C:\WINDOWS\System32\DRIVERS\wADV01nt.sys [2004-08-03 12415]
S3 iAimFP1;iAimFP1; C:\WINDOWS\System32\DRIVERS\wADV02NT.sys [2004-08-03 12127]
S3 iAimFP2;iAimFP2; C:\WINDOWS\System32\DRIVERS\wADV05NT.sys [2004-08-03 11775]
S3 iAimFP3;iAimFP3; C:\WINDOWS\System32\DRIVERS\wSiINTxx.sys [2004-08-03 12063]
S3 iAimFP4;iAimFP4; C:\WINDOWS\System32\DRIVERS\wVchNTxx.sys [2004-08-03 19455]
S3 iAimFP5;iAimFP5; C:\WINDOWS\system32\DRIVERS\wADV07nt.sys [2004-08-03 11807]
S3 iAimFP6;iAimFP6; C:\WINDOWS\system32\DRIVERS\wADV08nt.sys [2004-08-03 11295]
S3 iAimFP7;iAimFP7; C:\WINDOWS\system32\DRIVERS\wADV09nt.sys [2004-08-03 11871]
S3 iAimTV0;iAimTV0; C:\WINDOWS\System32\DRIVERS\wATV01nt.sys [2004-08-03 29311]
S3 iAimTV1;iAimTV1; C:\WINDOWS\System32\DRIVERS\wATV02NT.sys [2004-08-03 19551]
S3 iAimTV2;iAimTV2; C:\WINDOWS\System32\DRIVERS\wATV03nt.sys []
S3 iAimTV3;iAimTV3; C:\WINDOWS\System32\DRIVERS\wATV04nt.sys [2004-08-03 33599]
S3 iAimTV4;iAimTV4; C:\WINDOWS\System32\DRIVERS\wCh7xxNT.sys [2004-08-03 23615]
S3 iAimTV5;iAimTV5; C:\WINDOWS\system32\DRIVERS\wATV10nt.sys [2004-08-03 25471]
S3 iAimTV6;iAimTV6; C:\WINDOWS\system32\DRIVERS\wATV06nt.sys [2004-08-03 22271]
S3 mcdbus;Driver for MagicISO SCSI Host Controller; C:\WINDOWS\system32\DRIVERS\mcdbus.sys []
S3 usbccgp;Microsoft USB általános szülő-illesztőprogram; C:\WINDOWS\system32\DRIVERS\usbccgp.sys [2004-08-03 31616]
S3 usbscan;USB-képolvasó illesztőprogramja; C:\WINDOWS\system32\DRIVERS\usbscan.sys [2004-08-03 15104]
S3 USBSTOR;USB háttértár illesztőprogramja; C:\WINDOWS\System32\DRIVERS\USBSTOR.SYS [2004-08-03 26496]
S3 WudfPf;Windows Driver Foundation - User-mode Driver Framework Platform Driver; C:\WINDOWS\system32\DRIVERS\WudfPf.sys [2006-09-28 77568]
S3 WudfRd;Windows Driver Foundation - User-mode Driver Framework Reflector; C:\WINDOWS\system32\DRIVERS\wudfrd.sys [2006-09-28 82944]
S4 WS2IFSL;Windows Socket 2.0 - nem IFS-t szolgáltató támogatási környezet; C:\WINDOWS\System32\drivers\ws2ifsl.sys [2001-10-26 12032]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 aswUpdSv;avast! iAVS4 Control Service; C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe [2008-11-18 18752]
R2 avast! Antivirus;avast! Antivirus; C:\Program Files\Alwil Software\Avast4\ashServ.exe [2008-11-18 155160]
R2 NWCWorkstation;Netware ügyfélszolgáltatás; C:\WINDOWS\system32\svchost.exe [2004-08-17 14336]
R3 avast! Mail Scanner;avast! Mail Scanner; C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe [2008-11-18 254040]
S2 vsmon;TrueVector Internet Monitor; C:\WINDOWS\system32\ZoneLabs\vsmon.exe [2008-11-13 2405776]
S3 avast! Web Scanner;avast! Web Scanner; C:\Program Files\Alwil Software\Avast4\ashWebSv.exe [2008-11-18 352920]
S3 gusvc;Google Software Updater; C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe [2009-06-15 182768]
S3 usnjsvc;Messenger megosztási mappák – USN-naplóolvasó szolgáltatás; C:\Program Files\Windows Live\Messenger\usnsvc.exe [2007-10-18 98328]
S3 WLSetupSvc;Windows Live Setup Service; C:\Program Files\Windows Live\installer\WLSetupSvc.exe [2007-10-25 266240]
S3 WMPNetworkSvc;A Windows Media Player hálózatmegosztási szolgáltatása; C:\Program Files\Windows Media Player\WMPNetwk.exe [2007-01-10 919040]
S3 WudfSvc;Windows Driver Foundation - User-mode Driver Framework; C:\WINDOWS\system32\svchost.exe [2004-08-17 14336]
S4 CarboniteService;CarboniteService; C:\Program Files\Carbonite\Carbonite Backup\carboniteservice.exe []

-----------------EOF-----------------

ted ide az rsit logjat
http://images.malwareremoval.com/random/RSIT.exe

Szia. Azóta sem sikerült elindítani. Letöröltem kétszer is, újratelepítettem, de valami hibakódot ír ki mindig. Nem tudom miért.

a Malwarebytes adat bazisa regi,,futasd a programot es frisitsd fell,aztan csinally komplet skant,,a logot ted ide

Szia Kedves Stell!

Ismét a segítségedre lenne szükségem. Egy ideje belassult a gépünk megint. Nagyon lassan áll fel a rendszer is mikor bekapcsoljuk. A malwarebytes programot lefuttattam, és talált valamit. Kérdésem, hogy mi ez, és ki lehet törölni? Köszi.


Malwarebytes' Anti-Malware 1.36
Adatbázis verzió: 1945
Windows 5.1.2600 Szervizcsomag 2

2009.08.25. 11:13:47
mbam-log-2009-08-25 (11-13-38).txt

Vizsgálat típusa: Teljes vizsgálat (C:\|)
Átvizsgált objektumok: 92093
Eltelt idő: 46 minute(s), 39 second(s)

Fertőzött memóriafolyamatok: 0
Fertőzött memória modulok: 0
Fertőzött rendszerleíró kulcsok: 0
Fertőzött rendszerleíró értékek: 0
Fertőzött rednszerleíró elemek: 1
Fertőzött mappák: 0
Fertőzött fájlok: 0

Fertőzött memóriafolyamatok:
(Nem észleltem rosszindulatú elemeket)

Fertőzött memória modulok:
(Nem észleltem rosszindulatú elemeket)

Fertőzött rendszerleíró kulcsok:
(Nem észleltem rosszindulatú elemeket)

Fertőzött rendszerleíró értékek:
(Nem észleltem rosszindulatú elemeket)

Fertőzött rednszerleíró elemek:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\UpdatesDisableNotify (Disabled.SecurityCenter) -> Bad: (1) Good: (0) -> No action taken.

Fertőzött mappák:
(Nem észleltem rosszindulatú elemeket)

Fertőzött fájlok:
(Nem észleltem rosszindulatú elemeket)

ha lesz fagyas irlyal majd,

Köszönöm a segítséget , pár dolgot letiltottam. A fagyást majd meglátjuk.......Szia.

hmm,a fizikai memoria minden kikapcsolaskor kiurul,,
itt igen sok program fut a gepen,,ezert tolds le ezt a programot,futasd,a program megmutasa azokat a programokat amik feleslegesen futnal a startupban-klik-disabled-restart-ha valamelyik hianyozna kiveszed a pipat es ujbol majd fut a startupban
http://www.malwarebytes.org/StartUpLite.exe

A malwarbytesnak sikerült a törlés , legalábbis a filék nincsennek ott .
De úgy tünik mintha a gépemen valami vonzaná a kártevőket ....Nincs valami amivel , kilehetne üríteni a memóriát a (fizikait és a lapozófilét) is?

A spyware doctor a rendszerleíróból is kitörölt egy-két dolgot....nem találom a log-ját...sajnos elküldeném.

ok kito nincsen mit
no mi a helyzet pilaka uram??
az MBAM kitorolt egy par virust epen a video programbol,

Vizsgálat közben az avast törölt egy trójait , majd a Spyware Doctor is talállt rengeteg dolgot és újrakellett indítani a gépet , hogy azok is törlődjenek.






Malwarebytes' Anti-Malware 1.39
Adatbázis verzió: 2467
Windows 5.1.2600 Szervizcsomag 2

2009.08.23. 17:59:10
mbam-log-2009-08-23 (17-59-10).txt

Vizsgálat típusa: Teljes vizsgálat (C:\|)
Átvizsgált objektumok: 167587
Eltelt idő: 1 hour(s), 16 minute(s), 57 second(s)

Fertőzött memóriafolyamatok: 0
Fertőzött memória modulok: 0
Fertőzött rendszerleíró kulcsok: 0
Fertőzött rendszerleíró értékek: 0
Fertőzött rednszerleíró elemek: 0
Fertőzött mappák: 0
Fertőzött fájlok: 2

Fertőzött memóriafolyamatok:
(Nem észleltem rosszindulatú elemeket)

Fertőzött memória modulok:
(Nem észleltem rosszindulatú elemeket)

Fertőzött rendszerleíró kulcsok:
(Nem észleltem rosszindulatú elemeket)

Fertőzött rendszerleíró értékek:
(Nem észleltem rosszindulatú elemeket)

Fertőzött rednszerleíró elemek:
(Nem észleltem rosszindulatú elemeket)

Fertőzött mappák:
(Nem észleltem rosszindulatú elemeket)

Fertőzött fájlok:
c:\downloads\konverterek\videoinspector.exe (Adware.Relevant) -> Quarantined and deleted successfully.
c:\program files\DivX\divx player\pS2Xx.ddc (Backdoor.Bot) -> Quarantined and deleted successfully.

kito
Kito te is futasd a malwarebytes programot,,
torold ki ezt a falylot
c:\windows\system32\drivers\oreans32.sys

pilaka,nemlatok semmit,,futasd a Malwarebytes programot,,a logjat ted ide

http://www.download.com/Malwarebytes-An ... tag=button

A telepites utan,,FRISSITENi,

Logfile of random's system information tool 1.06 (written by random/random)
Run by Pali at 2009-08-23 14:18:46
Microsoft Windows XP Professional Szervizcsomag 2
System drive C: has 9 GB (30%) free of 30 GB
Total RAM: 1023 MB (46% free)

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 14:19:28, on 2009.08.23.
Platform: Windows XP Szervizcsomag 2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\RTHDCPL.EXE
C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
C:\Program Files\Unlocker\UnlockerAssistant.exe
C:\PROGRA~1\MATVAD~1\SpeedMgr.exe
C:\Program Files\Java\jre6\bin\jusched.exe
C:\Program Files\ComfortClipboard\CClipboard.exe
C:\Program Files\HHVcdV5Sys\VC5Play.exe
C:\Program Files\Hewlett-Packard\HP Software Update\HPWuSchd2.exe
C:\Program Files\Lexmark 3300 Series\lxccmon.exe
C:\Program Files\TVR\RecSche.exe
C:\Program Files\ChrisTV PVR\ChrisTV_Agent.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\DAEMON Tools\daemon.exe
C:\Program Files\DAEMON Tools Pro\DTProAgent.exe
C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
C:\Program Files\Messenger\msmsgs.exe
C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpqtra08.exe
C:\Program Files\Virtual CD v5\System\VC5Tray.exe
C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpotdd01.exe
C:\Program Files\ComfortClipboard\CClipboardCm.exe
C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\ccc.exe
C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpqSTE08.exe
C:\Program Files\Common Files\InterVideo\DeviceService\DevSvc.exe
C:\Program Files\Diskeeper Corporation\Diskeeper\DkService.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\Program Files\Common Files\LightScribe\LSSrvc.exe
C:\WINDOWS\system32\lvhidsvc.exe
C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE
C:\Program Files\NetLimiter 2 Pro\nlsvc.exe
C:\Program Files\CDBurnerXP\NMSAccessU.exe
C:\WINDOWS\system32\HPZipm12.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Common Files\Ulead Systems\DVD\ULCDRSvr.exe
C:\Program Files\HHVcdV5Sys\VC5SecS.exe
C:\Program Files\NetLimiter 2 Pro\NLClient.exe
C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
C:\WINDOWS\system32\wscntfy.exe
C:\WINDOWS\system32\lxcccoms.exe
C:\Program Files\VSO\ConvertX\3\ConvertXtoDvd.exe
C:\wincmd\TOTALCMD.EXE
C:\Program Files\uTorrent\uTorrent.exe
C:\Program Files\Opera\Opera.exe
C:\WINDOWS\system32\taskmgr.exe
C:\Downloads\RSIT.exe
C:\Program Files\trend micro\Pali.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.t-online.hu
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Hivatkozások
O2 - BHO: Adobe PDF Reader hivatkozássúgó - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
O4 - HKLM\..\Run: [SkyTel] SkyTel.EXE
O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [UnlockerAssistant] "C:\Program Files\Unlocker\UnlockerAssistant.exe"
O4 - HKLM\..\Run: [T-DSL SpeedMgr] "C:\PROGRA~1\MATVAD~1\SpeedMgr.exe"
O4 - HKLM\..\Run: [CloneCDTray] "C:\Program Files\SlySoft\CloneCD\CloneCDTray.exe" /s
O4 - HKLM\..\Run: [UserFaultCheck] %systemroot%\system32\dumprep 0 -u
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre6\bin\jusched.exe"
O4 - HKLM\..\Run: [CClipboard] C:\Program Files\ComfortClipboard\CClipboard.exe
O4 - HKLM\..\Run: [VC5Player] C:\Program Files\HHVcdV5Sys\VC5Play.exe
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\Hewlett-Packard\HP Software Update\HPWuSchd2.exe
O4 - HKLM\..\Run: [lxccmon.exe] "C:\Program Files\Lexmark 3300 Series\lxccmon.exe"
O4 - HKLM\..\Run: [FaxCenterServer] "C:\Program Files\Lexmark Fax Solutions\fm3032.exe" /s
O4 - HKLM\..\Run: [RecSche] "C:\Program Files\TVR\RecSche.exe"
O4 - HKLM\..\Run: [ChrisTV Agent] "C:\Program Files\ChrisTV PVR\ChrisTV_Agent.exe" /silent
O4 - HKLM\..\Run: [OutpostMonitor] C:\PROGRA~1\Agnitum\OUTPOS~1\op_mon.exe /tray /noservice
O4 - HKLM\..\Run: [OutpostFeedBack] "C:\Program Files\Agnitum\Outpost Firewall Pro\feedback.exe" /dump:os_startup
O4 - HKLM\..\Run: [StartCCC] "C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun
O4 - HKLM\..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k
O4 - HKLM\..\Run: [LXCCCATS] rundll32 C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\LXCCtime.dll,_RunDLLEntry@16
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [DAEMON Tools] "C:\Program Files\DAEMON Tools\daemon.exe" -lang 1033
O4 - HKCU\..\Run: [DAEMON Tools Pro Agent] "C:\Program Files\DAEMON Tools Pro\DTProAgent.exe"
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpqtra08.exe
O4 - Global Startup: hpoddt01.exe.lnk = ?
O8 - Extra context menu item: E&xportálás Microsoft Excel formátumba - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: Outpost Firewall Pro Gyorshangolás - {44627E97-789B-40d4-B5C2-58BD171129A1} - C:\Program Files\Agnitum\Outpost Firewall Pro\ie_bar.dll
O9 - Extra button: Kutatás - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O17 - HKLM\System\CCS\Services\Tcpip\..\{E3130E40-0EDA-42BB-AE95-7945B464C4B1}: NameServer = 84.2.44.1 84.2.46.1
O20 - AppInit_DLLs: c:\progra~1\agnitum\outpos~1\wl_hook.dll
O23 - Service: Agnitum Client Security Service (acssrv) - Agnitum Ltd. - C:\PROGRA~1\Agnitum\OUTPOS~1\acs.exe
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
O23 - Service: Capture Device Service - InterVideo Inc. - C:\Program Files\Common Files\InterVideo\DeviceService\DevSvc.exe
O23 - Service: Diskeeper - Diskeeper Corporation - C:\Program Files\Diskeeper Corporation\Diskeeper\DkService.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe
O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files\Common Files\LightScribe\LSSrvc.exe
O23 - Service: Remote HID Service (LvHidSvc) - Philips - C:\WINDOWS\system32\lvhidsvc.exe
O23 - Service: lxcc_device - Lexmark International, Inc. - C:\WINDOWS\system32\lxcccoms.exe
O23 - Service: NetLimiter (nlsvc) - Locktime Software - C:\Program Files\NetLimiter 2 Pro\nlsvc.exe
O23 - Service: NMSAccessU - Unknown owner - C:\Program Files\CDBurnerXP\NMSAccessU.exe
O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe
O23 - Service: PC Tools Auxiliary Service (sdAuxService) - PC Tools - C:\Program Files\Spyware Doctor\pctsAuxs.exe
O23 - Service: PC Tools Security Service (sdCoreService) - PC Tools - C:\Program Files\Spyware Doctor\pctsSvc.exe
O23 - Service: Ulead Burning Helper (UleadBurningHelper) - Ulead Systems, Inc. - C:\Program Files\Common Files\Ulead Systems\DVD\ULCDRSvr.exe
O23 - Service: Virtual CD v5 Security service (VC5SecS) - H+H Software GmbH - C:\Program Files\HHVcdV5Sys\VC5SecS.exe

--
End of file - 9495 bytes

======Scheduled tasks folder======

C:\WINDOWS\tasks\AppleSoftwareUpdate.job

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{06849E9F-C8D7-4D59-B87D-784B7D6BE0B3}]
Adobe PDF Reader hivatkozássúgó - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll [2006-10-23 62080]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre6\bin\jp2ssv.dll [2009-05-21 41368]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{E7E6F031-17CE-4C07-BC86-EABFE594F69C}]
JQSIEStartDetectorImpl Class - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll [2009-05-21 73728]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"SkyTel"=C:\WINDOWS\SkyTel.EXE [2006-05-20 2879488]
"RTHDCPL"=C:\WINDOWS\RTHDCPL.EXE [2007-02-03 16116224]
"QuickTime Task"=C:\Program Files\QuickTime\qttask.exe [2006-09-01 282624]
"avast!"=C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe [2009-08-17 81000]
"NeroFilterCheck"=C:\WINDOWS\system32\NeroCheck.exe [2001-07-09 155648]
"UnlockerAssistant"=C:\Program Files\Unlocker\UnlockerAssistant.exe [2008-05-02 15872]
"T-DSL SpeedMgr"=C:\PROGRA~1\MATVAD~1\SpeedMgr.exe [2005-05-23 536641]
"CloneCDTray"=C:\Program Files\SlySoft\CloneCD\CloneCDTray.exe [2006-09-28 57344]
"UserFaultCheck"=C:\WINDOWS\system32\dumprep 0 -u []
"SunJavaUpdateSched"=C:\Program Files\Java\jre6\bin\jusched.exe [2009-05-21 148888]
"CClipboard"=C:\Program Files\ComfortClipboard\CClipboard.exe [2009-06-29 2771968]
"VC5Player"=C:\Program Files\HHVcdV5Sys\VC5Play.exe [2003-03-11 176128]
"Adobe Reader Speed Launcher"=C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe [2008-01-11 39792]
"HP Software Update"=C:\Program Files\Hewlett-Packard\HP Software Update\HPWuSchd2.exe [2006-02-19 49152]
"lxccmon.exe"=C:\Program Files\Lexmark 3300 Series\lxccmon.exe [2005-07-21 192512]
"FaxCenterServer"=C:\Program Files\Lexmark Fax Solutions\fm3032.exe [2005-07-12 299008]
"RecSche"=C:\Program Files\TVR\RecSche.exe [2004-05-10 454656]
"ChrisTV Agent"=C:\Program Files\ChrisTV PVR\ChrisTV_Agent.exe [2007-03-08 274944]
"OutpostMonitor"=C:\PROGRA~1\Agnitum\OUTPOS~1\op_mon.exe [2008-09-11 1159496]
"OutpostFeedBack"=C:\Program Files\Agnitum\Outpost Firewall Pro\feedback.exe [2008-08-05 435528]
"StartCCC"=C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [2009-07-02 98304]
"KernelFaultCheck"=C:\WINDOWS\system32\dumprep 0 -k []
"LXCCCATS"=rundll32 C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\LXCCtime.dll,_RunDLLEntry@16 []

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"=C:\WINDOWS\system32\ctfmon.exe [2004-08-18 15360]
"DAEMON Tools"=C:\Program Files\DAEMON Tools\daemon.exe [2007-04-04 165784]
"DAEMON Tools Pro Agent"=C:\Program Files\DAEMON Tools Pro\DTProAgent.exe [2007-09-06 136136]
"MSMSGS"=C:\Program Files\Messenger\msmsgs.exe [2004-08-17 1667584]

C:\Documents and Settings\All Users\Start Menu\Programs\Indítópult
HP Digital Imaging Monitor.lnk - C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpqtra08.exe
hpoddt01.exe.lnk - C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpotdd01.exe

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
"AppInit_DLLS"="c:\progra~1\agnitum\outpos~1\wl_hook.dll"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\AtiExtEvent]
C:\WINDOWS\system32\Ati2evxx.dll [2009-07-02 155648]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll [2006-10-18 133632]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\sdauxservice]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\sdcoreservice]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\sdauxservice]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\sdcoreservice]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=36
"NoDriveAutoRun"=FFFFFFFF
"NoDrives"=0

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveAutoRun"=
"NoDriveTypeAutoRun"=
"NoDrives"=

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"C:\Program Files\uTorrent\uTorrent.exe"="C:\Program Files\uTorrent\uTorrent.exe:*:Enabled:µTorrent"
"C:\Program Files\Ahead\Nero ShowTime\ShowTime.exe"="C:\Program Files\Ahead\Nero ShowTime\ShowTime.exe:*:Disabled:Nero ShowTime"
"C:\Program Files\TeamViewer\Version4\TeamViewer.exe"="C:\Program Files\TeamViewer\Version4\TeamViewer.exe:*:Enabled:Teamviewer Remote Control Application"
"C:\Program Files\Messenger\msmsgs.exe"="C:\Program Files\Messenger\msmsgs.exe:*:Enabled:Windows Messenger"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"

======List of files/folders created in the last 1 months======

2009-08-23 14:18:53 ----D---- C:\Program Files\trend micro
2009-08-23 14:18:46 ----D---- C:\rsit
2009-08-22 22:42:28 ----D---- C:\Documents and Settings\Pali\Application Data\4Media Software Studio
2009-08-22 22:42:03 ----D---- C:\Program Files\4Media
2009-08-22 22:00:59 ----D---- C:\WINDOWS\system32\windows media
2009-08-22 22:00:26 ----D---- C:\WINDOWS\RegisteredPackages
2009-08-22 22:00:17 ----HD---- C:\WINDOWS\msdownld.tmp
2009-08-22 22:00:15 ----D---- C:\Program Files\Windows Media Components
2009-08-22 21:41:47 ----N---- C:\WINDOWS\system32\spmsg.dll
2009-08-22 21:32:51 ----D---- C:\WMSDK
2009-08-22 20:51:08 ----HDC---- C:\WINDOWS\$NtUninstallKB923689$
2009-08-22 20:06:23 ----A---- C:\WINDOWS\system32\wmv8dmod.dll
2009-08-22 19:54:29 ----A---- C:\WINDOWS\VPlayer.INI
2009-08-20 13:28:17 ----D---- C:\Program Files\aMule
2009-08-20 13:27:02 ----D---- C:\Documents and Settings\Pali\Application Data\aMule
2009-08-20 13:11:29 ----D---- C:\Program Files\eMule
2009-08-19 20:35:22 ----D---- C:\Program Files\E.M. HD Video Converter
2009-08-18 23:35:27 ----A---- C:\WINDOWS\system32\unrar.dll
2009-08-18 23:35:26 ----A---- C:\WINDOWS\avisplitter.ini
2009-08-18 23:35:25 ----A---- C:\WINDOWS\system32\xvidvfw.dll
2009-08-18 23:35:25 ----A---- C:\WINDOWS\system32\xvidcore.dll
2009-08-18 23:35:25 ----A---- C:\WINDOWS\system32\vp6vfw.dll
2009-08-18 23:35:25 ----A---- C:\WINDOWS\system32\qt-dx331.dll
2009-08-18 23:35:25 ----A---- C:\WINDOWS\system32\huffyuv.dll
2009-08-18 23:35:24 ----A---- C:\WINDOWS\system32\ff_vfw.dll.manifest
2009-08-18 23:35:24 ----A---- C:\WINDOWS\system32\ff_vfw.dll
2009-08-18 23:35:22 ----D---- C:\Program Files\K-Lite Codec Pack
2009-08-18 20:31:32 ----D---- C:\Documents and Settings\Pali\Application Data\dcunningham.net
2009-08-16 23:48:08 ----D---- C:\WINDOWS\Minidump
2009-08-16 23:19:00 ----D---- C:\Documents and Settings\All Users\Application Data\ATI
2009-08-16 23:14:38 ----N---- C:\WINDOWS\system32\ati2sgag.exe
2009-08-16 23:13:21 ----D---- C:\ATI
2009-08-16 23:06:25 ----D---- C:\Program Files\Driver Cleaner Pro
2009-08-16 23:01:37 ----A---- C:\WINDOWS\system32\XceedZip.dll
2009-08-16 23:01:32 ----D---- C:\Program Files\Driver-Soft
2009-08-16 22:46:31 ----A---- C:\WINDOWS\ntbtlog.txt
2009-08-16 22:34:47 ----A---- C:\WINDOWS\WININIT.INI
2009-08-15 11:09:21 ----D---- C:\Új mappa
2009-08-15 10:54:41 ----D---- C:\Documents and Settings\Pali\Application Data\Xilisoft Corporation
2009-08-15 10:43:49 ----A---- C:\WINDOWS\system32\wmpns.dll
2009-08-15 03:49:04 ----D---- C:\Documents and Settings\Pali\Application Data\DivX
2009-08-15 03:47:24 ----D---- C:\Documents and Settings\Pali\Application Data\Ulead Systems
2009-08-15 03:41:57 ----D---- C:\Program Files\Common Files\InterVideo
2009-08-15 03:41:51 ----D---- C:\Documents and Settings\All Users\Application Data\InterVideo
2009-08-15 03:41:49 ----A---- C:\WINDOWS\system32\IVIresizeW7.dll
2009-08-15 03:41:49 ----A---- C:\WINDOWS\system32\IVIresizePX.dll
2009-08-15 03:41:49 ----A---- C:\WINDOWS\system32\IVIresizeP6.dll
2009-08-15 03:41:49 ----A---- C:\WINDOWS\system32\IVIresizeM6.dll
2009-08-15 03:41:49 ----A---- C:\WINDOWS\system32\IVIresizeA6.dll
2009-08-15 03:41:49 ----A---- C:\WINDOWS\system32\IVIresize.dll
2009-08-15 03:40:23 ----N---- C:\WINDOWS\system32\vxblock.dll
2009-08-15 03:40:23 ----N---- C:\WINDOWS\system32\pxwave.dll
2009-08-15 03:40:23 ----N---- C:\WINDOWS\system32\pxmas.dll
2009-08-15 03:40:23 ----N---- C:\WINDOWS\system32\pxinsi64.exe
2009-08-15 03:40:23 ----N---- C:\WINDOWS\system32\pxinsa64.exe
2009-08-15 03:40:23 ----N---- C:\WINDOWS\system32\pxhpinst.exe
2009-08-15 03:40:23 ----N---- C:\WINDOWS\system32\pxdrv.dll
2009-08-15 03:40:23 ----N---- C:\WINDOWS\system32\pxcpyi64.exe
2009-08-15 03:40:23 ----N---- C:\WINDOWS\system32\pxcpya64.exe
2009-08-15 03:40:23 ----N---- C:\WINDOWS\system32\px.dll
2009-08-15 03:40:13 ----D---- C:\Program Files\DivX
2009-08-15 03:39:44 ----D---- C:\Program Files\Common Files\LightScribe
2009-08-15 03:38:04 ----D---- C:\Program Files\Ulead Systems
2009-08-15 03:38:04 ----D---- C:\Program Files\Common Files\Ulead Systems
2009-08-15 03:38:04 ----D---- C:\Documents and Settings\All Users\Application Data\Ulead Systems
2009-08-15 03:36:44 ----A---- C:\WINDOWS\system32\xactengine2_0.dll
2009-08-15 03:36:44 ----A---- C:\WINDOWS\system32\x3daudio1_0.dll
2009-08-15 03:36:38 ----A---- C:\WINDOWS\system32\d3dx9_29.dll
2009-08-15 03:36:37 ----A---- C:\WINDOWS\system32\xinput9_1_0.dll
2009-08-15 03:36:36 ----A---- C:\WINDOWS\system32\d3dx9_27.dll
2009-08-15 03:36:36 ----A---- C:\WINDOWS\system32\d3dx9_26.dll
2009-08-15 03:36:36 ----A---- C:\WINDOWS\system32\d3dx9_25.dll
2009-08-15 03:36:34 ----A---- C:\WINDOWS\system32\d3dx9_24.dll
2009-08-15 03:29:47 ----D---- C:\Documents and Settings\Pali\Application Data\Any Video Converter Professional
2009-08-15 01:05:26 ----D---- C:\Documents and Settings\Pali\Application Data\Dicsoft Software
2009-08-15 01:02:09 ----D---- C:\Documents and Settings\Pali\Application Data\ImTOO Software Studio
2009-08-15 01:00:56 ----D---- C:\Program Files\ImTOO
2009-08-15 00:59:42 ----D---- C:\Program Files\MKVtoolnix
2009-08-15 00:57:04 ----D---- C:\Program Files\Dicsoft
2009-08-14 02:28:13 ----D---- C:\Documents and Settings\Pali\Application Data\LEAPS
2009-08-14 02:26:35 ----D---- C:\Documents and Settings\Pali\Application Data\Pegasys Inc
2009-08-14 02:25:10 ----D---- C:\Program Files\Pegasys Inc
2009-08-14 02:15:31 ----D---- C:\VideoConvert
2009-08-14 02:09:09 ----D---- C:\Documents and Settings\Pali\Application Data\Broad Intelligence
2009-08-14 02:08:41 ----D---- C:\Program Files\MediaCoder
2009-08-14 01:58:57 ----A---- C:\WINDOWS\system32\yv12vfw.dll
2009-08-14 01:58:57 ----A---- C:\WINDOWS\system32\i420vfw.dll
2009-08-14 01:58:57 ----A---- C:\WINDOWS\system32\AVSredirect.dll
2009-08-14 01:58:05 ----RSH---- C:\WINDOWS\system32\nbDX.dll
2009-08-14 01:58:05 ----RSH---- C:\WINDOWS\system32\msfDX.dll
2009-08-14 01:58:05 ----RSH---- C:\WINDOWS\system32\flvDX.dll
2009-08-14 01:57:57 ----D---- C:\Program Files\eRightSoft
2009-08-14 01:56:12 ----D---- C:\WINDOWS\system32\appmgmt
2009-08-14 00:13:25 ----D---- C:\Program Files\AVIcodec
2009-08-13 12:22:46 ----D---- C:\Program Files\JockerSoft
2009-08-13 10:30:45 ----D---- C:\WINDOWS\system32\Filt
2009-08-13 10:30:45 ----D---- C:\Program Files\Agnitum
2009-08-13 10:30:34 ----D---- C:\Documents and Settings\All Users\Application Data\Agnitum
2009-08-13 01:37:10 ----D---- C:\Documents and Settings\Pali\Application Data\TeamViewer
2009-08-13 01:37:05 ----D---- C:\Program Files\TeamViewer
2009-07-26 22:57:48 ----D---- C:\DVDVolume
2009-07-26 03:08:16 ----D---- C:\Program Files\Driver Sweeper
2009-07-26 03:05:19 ----D---- C:\Program Files\Smart Projects
2009-07-25 23:11:32 ----D---- C:\Documents and Settings\Pali\Application Data\GetRightToGo
2009-07-25 20:50:07 ----D---- C:\Program Files\DVDlabPro2
2009-07-25 20:46:49 ----D---- C:\Program Files\DVD-lab Pro
2009-07-25 20:39:07 ----ASH---- C:\WINDOWS\system32\ebbfbbe_z.dll
2009-07-25 20:39:03 ----D---- C:\Program Files\jv16 PowerTools 2008
2009-07-25 20:36:54 ----D---- C:\Documents and Settings\Pali\Application Data\Thinstall
2009-07-25 20:33:21 ----D---- C:\Program Files\IfoEdit
2009-07-25 20:28:37 ----D---- C:\Program Files\VideoReDoTVSuite
2009-07-25 20:28:37 ----D---- C:\Documents and Settings\Pali\Application Data\VideoReDo-TVSuite
2009-07-25 20:24:28 ----D---- C:\Program Files\MagicISO hun
2009-07-25 20:21:43 ----D---- C:\Program Files\MagicISO
2009-07-25 20:03:54 ----A---- C:\Documents and Settings\All Users\Application Data\userlib.dll
2009-07-25 20:03:50 ----D---- C:\Program Files\PaulMarv Software
2009-07-25 20:01:07 ----D---- C:\Program Files\CodeStuff
2009-07-25 18:32:34 ----D---- C:\Program Files\ChrisTV PVR
2009-07-25 18:29:55 ----D---- C:\Documents and Settings\Pali\Application Data\SorensonMedia
2009-07-24 17:51:12 ----A---- C:\avenger.txt
2009-07-24 15:20:17 ----SHD---- C:\RECYCLER
2009-07-24 15:19:29 ----D---- C:\Program Files\Total Video Converter
2009-07-24 15:16:59 ----D---- C:\Documents and Settings\Pali\Application Data\Solveig Multimedia
2009-07-24 15:15:00 ----A---- C:\WINDOWS\SMMVSplitter.INI
2009-07-24 15:13:07 ----D---- C:\Documents and Settings\Pali\Application Data\DVD Catalyst3
2009-07-24 15:12:07 ----D---- C:\Program Files\DVD Catalyst
2009-07-24 14:43:31 ----D---- C:\Program Files\DVD Identifier
2009-07-24 14:41:00 ----D---- C:\Program Files\SoundTrek
2009-07-24 14:40:33 ----D---- C:\WINDOWS\SoundTrek
2009-07-24 14:14:25 ----A---- C:\avast.txt
2009-07-24 12:50:08 ----A---- C:\WINDOWS\system32\GEARAspi.dll
2009-07-24 12:49:51 ----D---- C:\Program Files\Sorenson Media
2009-07-24 12:49:18 ----HDC---- C:\WINDOWS\$NtUninstallKB926239$
2009-07-24 12:48:56 ----HDC---- C:\WINDOWS\$NtUninstallWMFDist11$
2009-07-24 12:48:30 ----D---- C:\WINDOWS\system32\LogFiles
2009-07-24 12:48:23 ----HDC---- C:\WINDOWS\$NtUninstallWudf01000$
2009-07-24 12:43:24 ----D---- C:\Program Files\QuickTime
2009-07-24 12:43:02 ----D---- C:\Program Files\Apple Software Update
2009-07-24 12:42:55 ----D---- C:\Documents and Settings\All Users\Application Data\Apple Computer
2009-07-24 12:04:46 ----A---- C:\mbam-log-2009-07-24 (12-04-04).txt
2009-07-24 11:26:44 ----A---- C:\ComboFix.txt
2009-07-24 10:51:42 ----D---- C:\Program Files\Solveig Multimedia
2009-07-24 10:51:42 ----D---- C:\Program Files\Common Files\Solveig Multimedia
2009-07-24 10:51:42 ----D---- C:\Program Files\Common Files\Elecard
2009-07-24 10:44:19 ----D---- C:\Documents and Settings\Pali\Application Data\PhotoFiltre Studio X
2009-07-24 10:44:13 ----D---- C:\Program Files\PhotoFiltre Studio X
2009-07-24 10:43:02 ----D---- C:\Nandub
2009-07-24 10:39:43 ----D---- C:\Program Files\MIDI-to-WAV Renderer
2009-07-24 10:36:33 ----D---- C:\Fraps
2009-07-24 10:33:35 ----D---- C:\Program Files\DVDInfoPro
2009-07-24 10:32:06 ----D---- C:\Documents and Settings\Pali\Application Data\EFSoftware
2009-07-24 10:28:55 ----D---- C:\Program Files\EF Duplicate Files Manager

======List of files/folders modified in the last 1 months======

2009-08-23 14:19:30 ----D---- C:\Documents and Settings\Pali\Application Data\uTorrent
2009-08-23 14:18:53 ----RD---- C:\Program Files
2009-08-23 14:18:49 ----D---- C:\WINDOWS\Prefetch
2009-08-23 14:18:01 ----D---- C:\WINDOWS\Temp
2009-08-23 14:15:19 ----D---- C:\Downloads
2009-08-23 14:02:48 ----D---- C:\Documents and Settings\Pali\Application Data\Vso
2009-08-23 13:58:26 ----A---- C:\WINDOWS\NeroDigital.ini
2009-08-23 13:08:19 ----A---- C:\WINDOWS\wincmd.ini
2009-08-23 11:22:35 ----A---- C:\WINDOWS\SchedLgU.Txt
2009-08-22 23:20:31 ----D---- C:\Program Files\Mozilla Firefox
2009-08-22 22:46:28 ----D---- C:\WINDOWS
2009-08-22 22:43:49 ----D---- C:\WINDOWS\system32\CatRoot2
2009-08-22 22:42:16 ----D---- C:\WINDOWS\system32
2009-08-22 22:15:59 ----D---- C:\Program Files\WMV9_VCM
2009-08-22 22:15:58 ----HD---- C:\WINDOWS\inf
2009-08-22 22:01:52 ----D---- C:\WINDOWS\system32\CatRoot
2009-08-22 22:01:16 ----SHD---- C:\WINDOWS\Installer
2009-08-22 22:01:03 ----SHD---- C:\Config.Msi
2009-08-22 22:00:32 ----RSHDC---- C:\WINDOWS\system32\dllcache
2009-08-22 19:06:02 ----D---- C:\Program Files\SubFind
2009-08-22 17:01:10 ----D---- C:\Program Files\Lx_cats
2009-08-20 20:58:24 ----D---- C:\WINDOWS\system32\drivers
2009-08-19 19:03:19 ----AD---- C:\Documents and Settings\All Users\Application Data\TEMP
2009-08-17 18:10:20 ----A---- C:\WINDOWS\system32\aswBoot.exe
2009-08-16 23:42:22 ----D---- C:\WINDOWS\Help
2009-08-16 23:19:00 ----D---- C:\Documents and Settings\Pali\Application Data\ATI
2009-08-16 23:15:59 ----D---- C:\Program Files\ATI Technologies
2009-08-16 23:15:58 ----RSD---- C:\WINDOWS\assembly
2009-08-16 23:15:50 ----D---- C:\WINDOWS\WinSxS
2009-08-16 23:14:20 ----HD---- C:\Program Files\InstallShield Installation Information
2009-08-16 22:50:59 ----D---- C:\Documents and Settings
2009-08-16 22:33:15 ----A---- C:\WINDOWS\system.ini
2009-08-15 23:35:28 ----A---- C:\WINDOWS\GIB30_32.INI
2009-08-15 22:27:15 ----D---- C:\Program Files\Windows Media Player
2009-08-15 10:50:17 ----D---- C:\Program Files\Xilisoft
2009-08-15 10:42:30 ----D---- C:\WINDOWS\system32\config
2009-08-15 03:41:57 ----D---- C:\Program Files\Common Files
2009-08-15 03:38:42 ----RSD---- C:\WINDOWS\Fonts
2009-08-15 03:36:45 ----D---- C:\WINDOWS\system32\DirectX
2009-08-15 03:36:40 ----D---- C:\WINDOWS\Microsoft.NET
2009-08-14 01:56:37 ----A---- C:\WINDOWS\imsins.BAK
2009-08-14 01:56:35 ----A---- C:\WINDOWS\system32\PerfStringBackup.INI
2009-08-13 11:13:23 ----SD---- C:\Documents and Settings\All Users\Application Data\Microsoft
2009-08-13 03:31:15 ----SD---- C:\Documents and Settings\Pali\Application Data\Microsoft
2009-08-13 01:49:45 ----D---- C:\Program Files\Common Files\Microsoft Shared
2009-08-13 01:32:38 ----D---- C:\Program Files\Comodo
2009-08-13 01:21:59 ----A---- C:\ADSLteszt.txt
2009-07-26 21:35:31 ----D---- C:\Temp
2009-07-26 19:36:43 ----D---- C:\Program Files\The FilmMachine
2009-07-26 13:28:24 ----D---- C:\Program Files\Winsubtitler
2009-07-26 08:51:36 ----SHD---- C:\System Volume Information
2009-07-26 08:51:36 ----D---- C:\WINDOWS\system32\Restore
2009-07-25 23:28:37 ----D---- C:\WINDOWS\system32\ReinstallBackups
2009-07-25 21:48:20 ----D---- C:\Program Files\MoBiMouse
2009-07-25 21:22:55 ----A---- C:\WINDOWS\win.ini
2009-07-24 18:57:21 ----D---- C:\WINDOWS\ERDNT
2009-07-24 18:17:29 ----RSH---- C:\boot.ini
2009-07-24 15:24:35 ----D---- C:\WINDOWS\AppPatch
2009-07-24 12:43:04 ----SD---- C:\WINDOWS\Tasks
2009-07-24 12:20:18 ----A---- C:\WINDOWS\Twacker.ini
2009-07-24 12:20:17 ----D---- C:\Program Files\Teletext
2009-07-24 12:20:06 ----D---- C:\Program Files\TVR
2009-07-24 12:20:06 ----A---- C:\WINDOWS\DevCap.ini
2009-07-24 10:44:21 ----D---- C:\Documents and Settings\Pali\Application Data\Identities

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R1 Aavmker4;avast! Asynchronous Virus Monitor; C:\WINDOWS\system32\drivers\Aavmker4.sys [2009-08-17 26944]
R1 AFS2K;AFS2k; C:\WINDOWS\system32\drivers\AFS2K.sys [2009-07-22 82380]
R1 AmdK8;AMD processzor-illesztőprogram; C:\WINDOWS\system32\DRIVERS\AmdK8.sys [2006-06-18 43520]
R1 aswSP;avast! Self Protection; C:\WINDOWS\system32\drivers\aswSP.sys [2009-08-17 114768]
R1 aswTdi;avast! Network Shield Support; C:\WINDOWS\system32\drivers\aswTdi.sys [2009-08-17 51376]
R1 ElbyCDIO;ElbyCDIO Driver; C:\WINDOWS\System32\Drivers\ElbyCDIO.sys [2007-08-07 25160]
R1 nltdi;nltdi; \??\C:\WINDOWS\system32\drivers\nltdi.sys []
R1 SandBox;SandBox; C:\WINDOWS\system32\DRIVERS\SandBox.sys [2008-07-11 673920]
R2 Aspi32;Aspi32; C:\WINDOWS\System32\drivers\aspi32.sys [2005-11-25 16877]
R2 aswFsBlk;aswFsBlk; C:\WINDOWS\system32\DRIVERS\aswFsBlk.sys [2009-08-17 20560]
R2 aswMon2;avast! Standard Shield Support; C:\WINDOWS\system32\drivers\aswMon2.sys [2009-08-17 94160]
R3 afw;Agnitum firewall driver; C:\WINDOWS\system32\DRIVERS\afw.sys [2008-06-30 30864]
R3 afwcore;afwcore; C:\WINDOWS\system32\drivers\afwcore.sys [2008-06-30 234640]
R3 Arp1394;1394 ARP ügyfélprotokoll; C:\WINDOWS\system32\DRIVERS\arp1394.sys [2004-08-18 60800]
R3 aswRdr;aswRdr; C:\WINDOWS\system32\drivers\aswRdr.sys [2009-08-17 23152]
R3 ati2mtag;ati2mtag; C:\WINDOWS\system32\DRIVERS\ati2mtag.sys [2009-07-02 4125696]
R3 ElbyCDFL;ElbyCDFL; C:\WINDOWS\System32\Drivers\ElbyCDFL.sys [2007-02-16 34760]
R3 FETNDIS;VIA PCI 10/100Mb Fast Ethernet adapter NT-illesztőprogramja; C:\WINDOWS\system32\DRIVERS\fetnd5.sys [2001-08-17 27165]
R3 GearAspiWDM;GEARAspiWDM; C:\WINDOWS\system32\drivers\gearaspiwdm.sys [2006-11-14 15664]
R3 HdAudAddService;ATI Function Driver for High Definition Audio Service; C:\WINDOWS\system32\drivers\AtiHdAud.sys [2006-12-28 84992]
R3 HDAudBus;Microsoft UAA Bus Driver for High Definition Audio; C:\WINDOWS\system32\DRIVERS\HDAudBus.sys [2005-01-07 138752]
R3 hidusb;Microsoft HID osztályú illesztőprogram; C:\WINDOWS\system32\DRIVERS\hidusb.sys [2004-08-18 9600]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\WINDOWS\system32\drivers\RtkHDAud.sys [2007-02-03 4474368]
R3 LVCap138;TV Card Capture Driver; C:\WINDOWS\system32\DRIVERS\tvcap.sys [2004-09-20 308736]
R3 lvtuner;Mercury TV Card WDM TV Tuner; C:\WINDOWS\system32\DRIVERS\tvtuner.sys [2004-09-20 16512]
R3 MTsensor;ATK0110 ACPI UTILITY; C:\WINDOWS\system32\DRIVERS\ASACPI.sys [2004-08-14 5810]
R3 NIC1394;1394 hálózati illesztőprogram; C:\WINDOWS\system32\DRIVERS\nic1394.sys [2004-08-18 61824]
R3 pcouffin;VSO Software pcouffin; C:\WINDOWS\System32\Drivers\pcouffin.sys [2009-07-19 47360]
R3 usbccgp;Microsoft USB általános szülő-illesztőprogram; C:\WINDOWS\system32\DRIVERS\usbccgp.sys [2004-08-18 31616]
R3 usbehci;Microsoft USB 2.0 bővített állomásvezérlő miniport illesztőprogramja; C:\WINDOWS\system32\DRIVERS\usbehci.sys [2004-08-18 26624]
R3 usbhub;Microsoft USB szabványos hub-illesztőprogram; C:\WINDOWS\system32\DRIVERS\usbhub.sys [2004-08-18 57600]
R3 usbprint;Microsoft USB PRINTER osztály; C:\WINDOWS\system32\DRIVERS\usbprint.sys [2004-08-04 25856]
R3 usbscan;USB-képolvasó illesztőprogramja; C:\WINDOWS\system32\DRIVERS\usbscan.sys [2004-08-03 15104]
R3 usbuhci;Microsoft USB univerzális állomásvezérlő miniport illesztőprogramja; C:\WINDOWS\system32\DRIVERS\usbuhci.sys [2004-08-18 20480]
S3 abk1xm8n;abk1xm8n; C:\WINDOWS\system32\drivers\abk1xm8n.sys []
S3 ah2zethc;ah2zethc; C:\WINDOWS\system32\drivers\ah2zethc.sys []
S3 AIDA32Driver;AIDA32Driver; \??\C:\Program Files\AIDA32 - Enterprise System Information\aida32.sys []
S3 ASWFilt;ASWFilt; C:\WINDOWS\system32\Filt\ASWFilt.dll [2008-07-11 33408]
S3 catchme;catchme; \??\C:\DOCUME~1\Pali\LOCALS~1\Temp\catchme.sys []
S3 CCDECODE;Feliratdekódoló; C:\WINDOWS\system32\DRIVERS\CCDECODE.sys [2004-08-03 17024]
S3 CrystalSysInfo;CrystalSysInfo; \??\C:\Program Files\MediaCoder\SysInfo.sys []
S3 MSTEE;Microsoft Streaming Tee/Sink - Sink átalakító; C:\WINDOWS\system32\drivers\MSTEE.sys [2004-08-03 5504]
S3 NABTSFEC;NABTS/FEC VBI kodek; C:\WINDOWS\system32\DRIVERS\NABTSFEC.sys [2004-08-03 85376]
S3 NdisIP;Microsoft TV-/videokapcsolat; C:\WINDOWS\system32\DRIVERS\NdisIP.sys [2004-08-03 10880]
S3 PCANDIS5;PCANDIS5 Protocol Driver; \??\C:\PROGRA~1\MATVAD~1\PCANDIS5.SYS []
S3 SLIP;BDA Slip De-Framer; C:\WINDOWS\system32\DRIVERS\SLIP.sys [2004-08-03 11136]
S3 streamip;BDA IPSink; C:\WINDOWS\system32\DRIVERS\StreamIP.sys [2004-08-03 15360]
S3 TNPacket;T-Systems Nova Packet Capture Driver; \??\C:\PROGRA~1\MATVAD~1\TNPACKET.SYS []
S3 USBSTOR;USB háttértár illesztőprogramja; C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS [2004-08-03 26496]
S3 WSTCODEC;World Standard Teletext kodek; C:\WINDOWS\system32\DRIVERS\WSTCODEC.SYS [2004-08-03 19328]
S3 WudfPf;Windows Driver Foundation - User-mode Driver Framework Platform Driver; C:\WINDOWS\system32\DRIVERS\WudfPf.sys [2006-09-28 77568]
S3 WudfRd;Windows Driver Foundation - User-mode Driver Framework Reflector; C:\WINDOWS\system32\DRIVERS\wudfrd.sys [2006-09-28 82944]
S4 IntelIde;IntelIde; C:\WINDOWS\system32\drivers\IntelIde.sys []
S4 sr;Rendszer-helyreállító szűrő illesztőprogramja; C:\WINDOWS\system32\DRIVERS\sr.sys [2004-08-18 73472]
S4 WS2IFSL;Windows Socket 2.0 - nem IFS-t szolgáltató támogatási környezet; C:\WINDOWS\System32\drivers\ws2ifsl.sys [2004-08-18 12032]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 acssrv;Agnitum Client Security Service; C:\PROGRA~1\Agnitum\OUTPOS~1\acs.exe [2008-08-05 1238344]
R2 aswUpdSv;avast! iAVS4 Control Service; C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe [2009-08-17 18752]
R2 Ati HotKey Poller;Ati HotKey Poller; C:\WINDOWS\system32\Ati2evxx.exe [2009-07-02 602112]
R2 avast! Antivirus;avast! Antivirus; C:\Program Files\Alwil Software\Avast4\ashServ.exe [2009-08-17 138680]
R2 Capture Device Service;Capture Device Service; C:\Program Files\Common Files\InterVideo\DeviceService\DevSvc.exe [2006-08-11 200704]
R2 Diskeeper;Diskeeper; C:\Program Files\Diskeeper Corporation\Diskeeper\DkService.exe [2007-10-16 1094936]
R2 JavaQuickStarterService;Java Quick Starter; C:\Program Files\Java\jre6\bin\jqs.exe [2009-05-21 152984]
R2 LightScribeService;LightScribeService Direct Disc Labeling Service; C:\Program Files\Common Files\LightScribe\LSSrvc.exe [2006-10-19 61440]
R2 LvHidSvc;Remote HID Service; C:\WINDOWS\system32\lvhidsvc.exe [2004-03-25 32256]
R2 MDM;Machine Debug Manager; C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE [2003-06-19 322120]
R2 nlsvc;NetLimiter; C:\Program Files\NetLimiter 2 Pro\nlsvc.exe [2007-03-21 516096]
R2 NMSAccessU;NMSAccessU; C:\Program Files\CDBurnerXP\NMSAccessU.exe [2007-05-04 71360]
R2 Pml Driver HPZ12;Pml Driver HPZ12; C:\WINDOWS\system32\HPZipm12.exe [2006-03-03 69632]
R2 UleadBurningHelper;Ulead Burning Helper; C:\Program Files\Common Files\Ulead Systems\DVD\ULCDRSvr.exe [2007-01-18 67056]
R2 VC5SecS;Virtual CD v5 Security service; C:\Program Files\HHVcdV5Sys\VC5SecS.exe [2003-02-14 147456]
R3 avast! Mail Scanner;avast! Mail Scanner; C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe [2009-08-17 254040]
R3 avast! Web Scanner;avast! Web Scanner; C:\Program Files\Alwil Software\Avast4\ashWebSv.exe [2009-08-17 352920]
R3 lxcc_device;lxcc_device; C:\WINDOWS\system32\lxcccoms.exe [2005-07-06 466944]
S02000000 OMSCAN;OMSCAN; \Sys []
S2 ATI Smart;ATI Smart; C:\WINDOWS\system32\ati2sgag.exe [2009-07-02 593920]
S3 aspnet_state;ASP.NET State Service; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe [2005-09-23 29896]
S3 clr_optimization_v2.0.50727_32;.NET Runtime Optimization Service v2.0.50727_X86; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe [2005-09-23 66240]
S3 IDriverT;InstallDriver Table Manager; C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe [2005-04-04 69632]
S3 ose;Office Source Engine; C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2003-07-28 89136]
S3 sdAuxService;PC Tools Auxiliary Service; C:\Program Files\Spyware Doctor\pctsAuxs.exe [2009-01-07 348752]
S3 sdCoreService;PC Tools Security Service; C:\Program Files\Spyware Doctor\pctsSvc.exe [2009-01-21 1095560]
S3 WudfSvc;Windows Driver Foundation - User-mode Driver Framework; C:\WINDOWS\system32\svchost.exe [2004-08-18 14336]

-----------------EOF-----------------

DCOM Exploit attack ,,ez fereg ami be akar jutni az internetrol a gepedbe,de az AVAST-nyakon csipi es felfalja,,enek igy kell lenie,ha nemakarod hogy jeleze akor ved ki a pipat a rezidens pajzbol,,a figyelmeztetesbol,,igy az avast mindig felfali a ferget es nem jelez,,az hogy lefagy a gep az mar mas,,
tegy ide az RSIT logjat,
http://images.malwareremoval.com/random/RSIT.exe

Szia stell mester , már megint eléd kell hogy járuljak....az Avast folyamatosan riaszt valami DCOM Exploit témában behatolási kisérletek....Azon kívül a gép sokszor lefagy : a képernyő megfagy az egérkurzor mozgatható , de semmilyen funkció nem él . Azonkívül (lehet , hogy nincs összefüggés) egy videoszerkesztő progi , folyamatosan puffer méret hibát jelez....segíts kérlek.

BootScreen;BootScreen;\SystemRoot\\SystemRoot\System32\drivers\vidstub.sys --> \SystemRoot\\SystemRoot\System32\drivers\vidstub.sys [?]

ez valami bootscreen,,kioljuk e??ismered e??

teszteld le a virustotalon ezeket ,,es az eredmenyrol az url-cimet ted ide
c:\program files\Syncplicity\SyncplicityShellExt.dll
c:\windows\system32\sysfsaver.dat
c:\documents and settings\All Users\Application Data\IJJIGame\PurpleBean.exe
c:\program files\Evernote\Evernote3\EvernoteTray.exe
\SystemRoot\\SystemRoot\System32\drivers\vidstub.sys
c:\documents and settings\All Users\Application Data\KGyGaAvL.sys
c:\documents and settings\All Users\Application Data\A3F8BAECA3.sys
c:\windows\system32\msdrvn.drv

VIRUSTOTALu

udv
a combofixnek az asztalon kene lenie,,,de epen mindegy,,,ha bezarodik a geped megvan fertozve,,blokollta valami Rootkit,,troja,,virus,,ted ide az RSIT,logjat>klik Continue,,es az log.txt ted ide,
http://images.malwareremoval.com/random/RSIT.exe

ha ez se mene akor irjal,

Üdv.

Ha még van energia a próbálkozáshoz, én még megtennék 2 dolgot a lassú gépeken:

1. Letölteném és feltenném egy keresés, irtás erejéig a
Spyware Doctor-Starter Edition-t, frissíteném és futtatnám.
http://www.majorgeeks.com/Spyware_Docto ... d5790.html

2. Letölteném a System Mechanic trialt és rendbe tenném vele a gépet
http://www.iolo.com/system-mechanic/sta ... nload.aspx

Sajnos nekem az a tapasztalatom, hogy ilyen esetekben gyakran csak cd-ről indítva a gépet, kézzel takarítva a registry-t és a gyanús file-okat lehet eredményt elérni. Ehhez pl. jó eszköz az AVAST Bart cd.

Amit még megnéznék, mert pár hónapja ilyenekkel szívtam:

A következő helyen voltak elindítva rosszindulatú file-ok:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32 -- aux2 aux3

vagy

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SvcHost -- netsvcs listájának végén

Nekem bevált már több hónapja nincs vírus aktivitás .

Az viszont lehet hogy tényleg összekuszálódott a rendszered sok tisztogatás miatt is hibás ezért újrarakás a legjobb megoldás

nem eztet nemvirusok okozak,,egyszeruen van olyan hogy mar at kel rakni a windowst,,,,

Erre, és még 3 másik programra koárbban azt írta stell, hogy nem javasolja a felrakását

Üdv !
Skacok ha még van türelem akkor ezt( telepítsd fel ) futtasd le ö automatán elindul Windows újraindítás , vagy épen indításnál is az összes folyamatot megvizsgál minden rosszat töröljed ki a francba sajnálat nélkül.
Ennek működnie kell az esetek 90 %ba működik.

hm,,mar nincsenek otleteim,,a leglyob lesz ha csinalsz javito telepitest,,igy megmarad minden adat,,

Ez mind OK, a gond csak az, hogy továbbra is változatlan tünetek vannak
Irtózatosan lassú, kb. 5-8 perces boot-folyamat, programindítás lassú, ha az adott program már a memóriában van, onnantól normálisa fut.

S-ata vinyó van a gépbe (biosban native IDE az XP miatt), így nincs pio-mód elállítási gond, alaplapi bios-t reseteltem, mielőtt elmentem nyaralni már vele dvégigvettünk mindent

Azt hiszem itt már csak egy reinstall segít

hm,mit irjak ide neked,,ez mind hamis riasztas,,egy se fontos a rendszer mukudesehez,de vanak ot ami kel nemely programhoz,,
ugy hogy hagyd beken oket,,leszedni a combofixet,kipucolni es oke,

Üdvözlet mester, visszatértem!:)

Vírustotal-on a nagyok által is jelzett dolgokat letakarítottam, az alábbi lista maradt, mi az amit töröljek (ha a működés szempontjából nem lényeges, akkor inkább törlöm ha éppcsak gyanús akkor is)
Minden file utáni sorba beírtam hány kereső jelzett a VT-n, illetve odaraktam a közvetlen linket is az eredményről.

File C:\Documents and Settings\Mi\Asztal\ComboFix.exe infected by "Gen:Generic.SMH.90A0D1F1F1 (DB)" Virus! Action Taken: No Action Taken.
VT:6 http://www.virustotal.com/hu/analisis/3 ... 1249736385
File C:\Documents and Settings\Mi\Asztal\TFC.exe infected by "Gen:Generic.SMH.0125547474 (DB)" Virus! Action Taken: No Action Taken.
VT:3 http://www.virustotal.com/hu/analisis/a ... 1249736308
File C:\Documents and Settings\Rendszergazda\Asztal\ComboFix.exe infected by "Gen:Generic.SMH.D0E091B1B1 (DB)" Virus! Action Taken: No Action Taken.
VT:6 http://www.virustotal.com/hu/analisis/c ... 1249735086
File C:\WINDOWS\ERDNT\Hiv-backup\ERDNT.EXE infected by "Gen:Generic.SMH.90A0C1C1C1 (DB)" Virus! Action Taken: No Action Taken.
VT:2 http://www.virustotal.com/hu/analisis/a ... 1249733250
File C:\WINDOWS\PEV.exe infected by "Gen:Generic.SMH.D0E091B1B1 (DB)" Virus! Action Taken: No Action Taken.
VT:3 http://www.virustotal.com/hu/analisis/5 ... 1249733189
File F:\Program Files\Webteh\BSplayerPro\bplay.exe infected by "Gen:Generic.SMH.003051F1F1 (DB)" Virus! Action Taken: No Action Taken.
VT:2 http://www.virustotal.com/hu/analisis/2 ... 1249722449
File F:\Program Files\Webteh\BSplayerPro\bsplay.exe infected by "Gen:Generic.SMH.003051F1F1 (DB)" Virus! Action Taken: No Action Taken.
VT:2 http://www.virustotal.com/hu/analisis/2 ... 1249722415
File X:\ProgramS\Codec\AC3_VirtualDub_hang_codec\VDUB_1.5_AC3_Conversion\VirtualDubMod_1_5_10_2_All_inclusive(mpeg2+AC3)\vorbis.dll infected by "Gen:Generic.SMH.2018791919 (DB)" Virus! Action Taken: No Action Taken.
VT:2 http://www.virustotal.com/hu/analisis/d ... 1249678708
File X:\ProgramS\Codec\AC3_VirtualDub_hang_codec\VirtualDubMod_1_5_10_2_All_inclusive\vorbis.dll infected by "Gen:Generic.SMH.2018791919 (DB)" Virus! Action Taken: No Action Taken.
VT:2 http://www.virustotal.com/hu/analisis/d ... 1249676683
File X:\ProgramS\MultiM\BS.Player.Pro.v2.32.975.Multilingual.Incl.Keymaker-CORE\CORE10k.EXE infected by "Gen:Generic.SMH.80B0D1B1B1 (DB)" Virus! Action Taken: No Action Taken.
VT:2 http://www.virustotal.com/hu/analisis/f ... 1249675808
File X:\ProgramS\MultiM\BS.Player.Pro.v2.32.975.Multilingual.Incl.Keymaker-CORE\setup.exe infected by "Gen:Generic.SMH.003051F1F1 (DB)" Virus! Action Taken: No Action Taken.
VT:2 http://www.virustotal.com/hu/analisis/4 ... 1249675596
File C:\Documents and Settings\Mi\Asztal\avz4\avz.exe infected by "Gen:Generic.SMH.C2F697F7F7 (DB)" Virus! Action Taken: No Action Taken.
VT:2 http://www.virustotal.com/hu/analisis/2 ... 1249736353
File C:\WINDOWS\SWSC.exe infected by "Gen:Generic.SMH.80B4D5B5B5 (DB)" Virus! Action Taken: No Action Taken.
VT:2 http://www.virustotal.com/hu/analisis/c ... 1249732910
File F:\Program Files\DivX\DivX Plus DirectShow Filters\daac.ax infected by "Gen:Generic.SMH.300C7D5D5D (DB)" Virus! Action Taken: No Action Taken.
VT:1 http://www.virustotal.com/hu/analisis/e ... 1249728818
File F:\Program Files\Flagship Studios\Hellgate London\hellswing12d9sp1.zip infected by "Gen:Generic.SMH.F4A45B0B0B (DB)" Virus! Action Taken: No Action Taken.
VT:2 http://www.virustotal.com/hu/analisis/2 ... 1249727163
File F:\Program Files\IrfanView\Languages\Hungarian1.dll infected by "Gen:Generic.SMH.3008690909 (DB)" Virus! Action Taken: No Action Taken.
VT:1 http://www.virustotal.com/hu/analisis/f ... 1249727093
File C:\Program Files\DAEMON Tools\uninst.exe infected by "Gen:Generic.SMH.3058A7F1F1 (DB)" Virus! Action Taken: No Action Taken.
VT:1 http://www.virustotal.com/hu/analisis/8 ... 1249734577
File X:\ProgramS\MultiM\irfanview_plugins_420_setup.exe infected by "Gen:Generic.SMH.FFCBAACACA (DB)" Virus! Action Taken: No Action Taken.
VT:1 http://www.virustotal.com/hu/analisis/7 ... 1249673605
File X:\ProgramS\MultiM\Losless Audio compressors\FLAC\Flac_Plugin_for_WA2.exe infected by "Gen:Generic.SMH.102849E9E9 (DB)" Virus! Action Taken: No Action Taken.
VT:1 http://www.virustotal.com/hu/analisis/b ... 1249673387
File X:\ProgramS\MultiM\Losless Audio compressors\FLAC\Flac_Plugin_for_WA3.exe infected by "Gen:Generic.SMH.201879D9D9 (DB)" Virus! Action Taken: No Action Taken.
VT:1 http://www.virustotal.com/hu/analisis/5 ... 1249672817
File X:\ProgramS\MultiM\MPUI (stable) 1.1.10\MPUI-1.1.10_with_MPlayer-1.0-pre8.zip infected by "Gen:Generic.SMH.2115741414 (DB)" Virus! Action Taken: No Action Taken.
VT:1 http://www.virustotal.com/hu/analisis/e ... 1249672685
File X:\ProgramS\MultiM\VirtualDub 1.7.7\VirtualDub-1.7.7.zip infected by "Gen:Generic.SMH.93A7C6A6A6 (DB)" Virus! Action Taken: No Action Taken.
VT:1 http://www.virustotal.com/hu/analisis/6 ... 1249672616
File X:\ProgramS\PS2\hdl\hdlpatch_gui.exe infected by "Gen:Generic.SMH.B393E2C2C2 (DB)" Virus! Action Taken: No Action Taken.
VT:1 http://www.virustotal.com/hu/analisis/c ... 1249670869
File X:\ProgramS\Tools\CloneDVD v2.9.2\setupclonedvd2.exe infected by "Gen:Generic.SMH.73D32C3C3C (DB)" Virus! Action Taken: No Action Taken.
VT:1 http://www.virustotal.com/hu/analisis/d ... 1249670735
File X:\ProgramS\Tools\GetDataBackforNTFS\Setup.exe infected by "Gen:Generic.SMH.3A09680808 (DB)" Virus! Action Taken: No Action Taken.
VT:1 http://www.virustotal.com/hu/analisis/e ... 1249670485

igen,,szed le,,es fixeld le az utorentot,a Hijackall-hogy nefusson automatikusan,,minekk majd futatod ha kell,
O4 - HKCU\..\Run: [uTorrent] "C:\Program Files\uTorrent\uTorrent.exe"

pucold att ccleaneral,
nincsen mitt,

Az enyém a "clean " között szerepel.
Köszi mindent stell...
Amiket tegnap csináltam, azokat leszedhetem?

igen sok ezek kozul a programok kozul,szemet,nezd meg itt
http://www.malwareremoval.com/p2pindex.php

ha minden okes,,nincsen mit,
udv

Köszi Stell. Úgy tűnik meg van a hiba oka. (torrent)
Csupán azt nem értem, hogy a fel/le töltési sebessége ugyan annyi indulás után egyből, mint napközben, viszont napközben nem fogja vissza a böngészést, illetve hogy miért csak egyszer teszi ezt napközben. Értem ez alatt, hogy amikor napközben esetleg újraindítom a gépet, akkor nincs ilyen jellegű gondom vele.

letoltod-szet csomagolod -futatod-klik-"Report"-"Scan"-bepipazni mindent-klik,ok-bepipazni minden lemezet-ok-klik scan,,a vegen-save report es ted ide
http://ad13.geekstogo.com/RootRepeal.rar

Sajna most is ugyan azt csinálja.
Az újraindítás után most kezd magához térni
De lehet holnap reggel jobb lesz...

ok,van e javulas??

All processes killed
========== PROCESSES ==========
No active process named explorer.exe was found!
========== FILES ==========
File/Folder C:\WINDOWS\system32\*.tmp.dll not found.
C:\WINDOWS\system32\SET3521.tmp moved successfully.
C:\WINDOWS\system32\SET3526.tmp moved successfully.
C:\WINDOWS\system32\SET352D.tmp moved successfully.
C:\WINDOWS\system32\SET3539.tmp moved successfully.
C:\WINDOWS\system32\SET353A.tmp moved successfully.
C:\WINDOWS\system32\SET353B.tmp moved successfully.
C:\WINDOWS\system32\SET353D.tmp moved successfully.
C:\WINDOWS\system32\SET353E.tmp moved successfully.
C:\WINDOWS\003309_.tmp moved successfully.
C:\WINDOWS\SET3.tmp moved successfully.
C:\WINDOWS\SET4.tmp moved successfully.
C:\WINDOWS\SET8.tmp moved successfully.
C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Temp\ZAP14E.tmp moved successfully.
C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Temp\ZAP18FB.tmp moved successfully.
C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Temp\ZAP1920.tmp moved successfully.
C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Temp\ZAP1936.tmp moved successfully.
C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Temp\ZAP24A.tmp moved successfully.
C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Temp\ZAP82.tmp moved successfully.
C:\WINDOWS\Installer\MSI1472.tmp moved successfully.
C:\WINDOWS\Installer\MSI160E.tmp moved successfully.
C:\WINDOWS\Installer\MSI160F.tmp moved successfully.
C:\WINDOWS\Installer\MSI1610.tmp moved successfully.
C:\WINDOWS\Installer\MSI1616.tmp moved successfully.
C:\WINDOWS\Installer\MSI1617.tmp moved successfully.
C:\WINDOWS\Installer\MSI1618.tmp moved successfully.
C:\WINDOWS\Installer\MSI1619.tmp moved successfully.
C:\WINDOWS\Installer\MSI161A.tmp moved successfully.
C:\WINDOWS\Installer\MSI161B.tmp moved successfully.
C:\WINDOWS\Installer\MSI161F.tmp moved successfully.
C:\WINDOWS\Installer\MSI1620.tmp moved successfully.
C:\WINDOWS\Installer\MSI1621.tmp moved successfully.
C:\WINDOWS\Installer\MSI1624.tmp moved successfully.
C:\WINDOWS\Installer\MSI1625.tmp moved successfully.
C:\WINDOWS\Installer\MSI162C.tmp moved successfully.
C:\WINDOWS\Installer\MSI164B.tmp moved successfully.
C:\WINDOWS\Installer\MSI164C.tmp moved successfully.
C:\WINDOWS\Installer\MSI164D.tmp moved successfully.
C:\WINDOWS\Installer\MSI164E.tmp moved successfully.
C:\WINDOWS\Installer\MSI164F.tmp moved successfully.
C:\WINDOWS\Installer\MSI1650.tmp moved successfully.
C:\WINDOWS\Installer\MSI1652.tmp moved successfully.
C:\WINDOWS\Installer\MSI1916.tmp moved successfully.
C:\WINDOWS\Installer\MSI1E.tmp moved successfully.
C:\WINDOWS\Installer\MSI26.tmp moved successfully.
C:\WINDOWS\Installer\MSI487.tmp moved successfully.
C:\WINDOWS\Installer\MSI59E.tmp moved successfully.
C:\WINDOWS\Installer\MSI5BF.tmp moved successfully.
C:\WINDOWS\Installer\MSI5C1.tmp moved successfully.
C:\WINDOWS\Installer\MSI5DA.tmp moved successfully.
C:\WINDOWS\Installer\MSI6B2.tmp moved successfully.
C:\WINDOWS\Installer\MSI6B3.tmp moved successfully.
C:\WINDOWS\Installer\MSI6B4.tmp moved successfully.
C:\WINDOWS\Installer\MSI6B5.tmp moved successfully.
C:\WINDOWS\Installer\MSI6B9.tmp moved successfully.
C:\WINDOWS\Installer\MSI6BC.tmp moved successfully.
C:\WINDOWS\Installer\MSI76.tmp moved successfully.
C:\WINDOWS\Installer\MSI7D.tmp moved successfully.
C:\WINDOWS\Installer\MSIB5E.tmp moved successfully.
C:\WINDOWS\Installer\MSIB5F.tmp moved successfully.
C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\Temporary ASP.NET Files\hit\6e0ddef2\d443df81\0k71rojv.tmp moved successfully.
C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\Temporary ASP.NET Files\hit\6e0ddef2\d443df81\1nqabbq9.tmp moved successfully.
C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\Temporary ASP.NET Files\hit\6e0ddef2\d443df81\2gtdg8ca.tmp moved successfully.
C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\Temporary ASP.NET Files\hit\6e0ddef2\d443df81\65pwcjzk.tmp moved successfully.
C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\Temporary ASP.NET Files\hit\6e0ddef2\d443df81\apbdo8d7.tmp moved successfully.
C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\Temporary ASP.NET Files\hit\6e0ddef2\d443df81\e3hdcgu4.tmp moved successfully.
C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\Temporary ASP.NET Files\hit\6e0ddef2\d443df81\egvy4xef.tmp moved successfully.
C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\Temporary ASP.NET Files\hit\6e0ddef2\d443df81\typlzrg1.tmp moved successfully.
C:\WINDOWS\system32\CONFIG.TMP moved successfully.
C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.0.0_x-ww_1382d70a\nss18A.tmp moved successfully.
C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.0.0_x-ww_1382d70a\nst374.tmp moved successfully.
C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.2180_x-ww_a84f1ff9\nsq376.tmp moved successfully.
C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.2180_x-ww_a84f1ff9\nsv18C.tmp moved successfully.
========== COMMANDS ==========

[EMPTYTEMP]

User: All Users

User: Default User
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 33170 bytes

User: LocalService
->Temp folder emptied: 0 bytes
File delete failed. C:\Documents and Settings\LocalService\Local Settings\Temporary Internet Files\Content.IE5\index.dat scheduled to be deleted on reboot.
->Temporary Internet Files folder emptied: 32902 bytes

User: -----
->Temp folder emptied: 896 bytes
->Temporary Internet Files folder emptied: 39715869 bytes
->Java cache emptied: 573888 bytes
->FireFox cache emptied: 73945775 bytes
->Google Chrome cache emptied: 64961334 bytes
->Opera cache emptied: 53506417 bytes

User: ----- M
->Temp folder emptied: 3508 bytes
->Temporary Internet Files folder emptied: 33170 bytes
->FireFox cache emptied: 9220982 bytes

User: NetworkService
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 33170 bytes

User: Rendszergazda
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes
->FireFox cache emptied: 2768331 bytes

%systemdrive% .tmp files removed: 0 bytes
%systemroot% .tmp files removed: 0 bytes
%systemroot%\System32 .tmp files removed: 0 bytes
Windows Temp folder emptied: 483 bytes
RecycleBin emptied: 0 bytes

Total Files Cleaned = 233.49 mb


OTM by OldTimer - Version 3.0.0.5 log created on 08062009_145131

Files moved on Reboot...

Registry entries deleted on Reboot...