CPU usage problem

Citao sam ovde slichne teme,ali nigde nisam nashao resenje za ovaj problem..

Kada ne radim nista,cpu usage mi "skakuce" 10% 30% 2% 50%...kada upalim bilo koji program..msn,mozzilu..cpu usage mi skache na 100% i nakon par minuta komp mi se zamrzne...u task menageru mi prikazuje da mi ta aplikacija koju koristim trenutno uzima 99 %,kad smanjim priority on samo prebaci taj procenat na neku drugu nebitnu aplikaciju......sa spybotom krenem da skeniram komp i naravno spybot uzme 100% procesora i zabaguje...isto i u safe modu.. koristim nod antivirus, zone alarm firewall...citao sam nesto po forumima i probao sa registry booster i speed up my pc programima,ali bez uspeha..bilo kakav savet kako da popravim ovo,bez reinstalacije windowsa?


winxp sp2
cpu pentium 4 2,0 ghz
1,25 gb ddr1 ram

pa...problem moze da uzrokuje ili neki virus ili neki hardware crkava
najverovatnije je ono prvo,no da ne lupamo glavom...

Skini HiJackThis program:


Stavi ga u zaseban Folder na Desktop
Promeni naziv Foldera u ES2 i Programa u ES2.exe

* Pokreni HijackThis
* Izaberi opciju "Do a system scan and save the logfile"
* Na kraju skeniranja program ce izbaciti tekstualni log.
* taj log kopiraj ovde ( opcije copy / paste)





_{[Ovu poruku je menjao magna86 dana 05.01.2009. u 06:01 GMT+1]}

---

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 07:08, on 05.01.09
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\ZoneLabs\vsmon.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\Program Files\Eset\nod32krn.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\WINDOWS\system32\CNAB4RPK.EXE
C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe
C:\WINDOWS\system32\ctfmon.exe
C:\PROGRA~1\ZONELA~1\ZONEAL~1\MAILFR~1\mantispm.exe
C:\WINDOWS\system32\wuauclt.exe
C:\Program Files\Windows Live\Messenger\usnsvc.exe
C:\WINDOWS\explorer.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Documents and Settings\Nebojsa\Desktop\ES2\ES2.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page =
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = localhost:8080
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre6\bin\ssv.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Windows Live Toolbar Helper - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
O2 - BHO: ZoneAlarm Spy Blocker BHO - {F0D4B231-DA4B-4daf-81E4-DFEE4931A4AA} - C:\Program Files\ZoneAlarmSB\bar\1.bin\SPYBLOCK.DLL
O3 - Toolbar: ZoneAlarm Spy Blocker - {F0D4B239-DA4B-4daf-81E4-DFEE4931A4AA} - C:\Program Files\ZoneAlarmSB\bar\1.bin\SPYBLOCK.DLL
O3 - Toolbar: Windows Live Toolbar - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
O4 - HKLM\..\Run: [ZoneAlarm Client] "C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe"
O4 - HKLM\..\Run: [nod32kui] "C:\Program Files\Eset\nod32kui.exe" /WAITSERVICE
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [SpeedUpMyPC] C:\Program Files\LIUtilities\SpeedUpMyPC\SpeedUpMyPC.exe traybar
O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe" /background
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE
O8 - Extra context menu item: &Windows Live Search - res://C:\Program Files\Windows Live Toolbar\msntb.dll/search.htm
O8 - Extra context menu item: Add to Windows &Live Favorites - http://favorites.live.com/quickadd.aspx
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~3\Office10\EXCEL.EXE/3000
O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
O9 - Extra 'Tools' menuitem: Spybot - Search && Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O17 - HKLM\System\CCS\Services\Tcpip\..\{D99D3E0C-4D1B-45F2-A51A-C0CF7DAF0799}: NameServer = 212.200.13.13
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe
O23 - Service: NOD32 Kernel Service (NOD32krn) - Eset - C:\Program Files\Eset\nod32krn.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: Remote Packet Capture Protocol v.0 (experimental) (rpcapd) - CACE Technologies - C:\Program Files\WinPcap\rpcapd.exe
O23 - Service: TrueVector Internet Monitor (vsmon) - Zone Labs, LLC - C:\WINDOWS\system32\ZoneLabs\vsmon.exe

--
End of file - 5193 bytes

shta sve ne valja :) ?

sve valja :)
...hm...

znas ... da neki virus pravi problem su jako male sance,tu opciju iskljuci

ja bi prvo za pocetak proverio temperature CPU-a u biosu

.Desni klik na My computer->properties->advanced->pod StartUp and Recovery klikni Settings i iskljuci opciju Automatically restart
mozda pomogne


e da...pitanje:
zone alarm je firewall
a eset nod32 ? ima li on u sebi svoj firewall?
jel to Nod Anti Virus ili Smart Security ?
hocu reci da ako imas dva firewall-a mozda to pravi problem

---

Probaj da iskljucis help service ako je akrivan.Oce da zeza tako.

temperatura procesora mi je oko 70-78 najvishe a po defaultu mi je iskljucena opcija da me obavesti,imam tamo opcije iznad 60,70,80 i 90 stepeni...kolika bi trebalo da bude normalna temp procesora? sad je krenuo da mi se restartuje komp iz cista mira u poslednje vreme...izgleda da je neki hardver,samo da nije procesor?

p.s. zone alarm firewall,nod antivirus..
iskljucio sam help service,ne pomaze..

pazite sad, kad sam iskljucio Automatically restart komp mi se ne restrartuje vishe sam,vec se gasi sam i kad hocu ponovo da ga upalim,on ne reaguje 5-10 min,nema struje u njemu (mada svetli lampica na tastaturi) a nakon 10 min ga upalim normalno..sta mislite sta je ,napajanje,ploca,nesto trece? :/

Najlakse ti je da proveris prvo napajanje, uzmi od nekog druga pa proveri, nisam neki expert za hardver ali ja bih prvo to proverio.

neverujem da je ploca...jer kao sto kazes tastatura svetli
a na taj nacin mozes proveriti jel do processora,a u tvom slucaju nije
kristi lepo kaze..probaj pa vidi
mozda polako odumire...

---

ma prso je skroz,al jebiga,bilo mu je i vreme,imam ga 7 godina,a nikad nista nisam menjao :) u svakom sluchaju,hvala na pomoci,ljudi...

Meni se ovo desavalo kada mi se otkacio hladnjak na procesoru, temperatura je dosta velika za intelov CPU (za AMD nisam siguran). Proveri hladjenje za svaki slucaj...

---

Hmm... vidim da jos uvijek koristis windows xp sp2 i IE6... moj bi ti savjet bio updetiraj se na xp sp3 i IE7... puno sigurnije.

Pratio sam temu od pocetka pa sam i ja uradio onaj test...pa MAGNA86 ako ti nije problem pogledaj i moje rezultate posto mi se javlja isti problem sa kompom....

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 11:14:49 PM, on 1/6/2010
Platform: Windows XP SP2, v.2096 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2096)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\AVG\AVG9\avgchsvx.exe
C:\Program Files\AVG\AVG9\avgrsx.exe
C:\Program Files\AVG\AVG9\avgcsrvx.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE
C:\Program Files\Winamp\winampa.exe
C:\Program Files\Java\jre6\bin\jusched.exe
C:\PROGRA~1\AVG\AVG9\avgtray.exe
C:\WINDOWS\system32\VTTimer.exe
C:\WINDOWS\SOUNDMAN.EXE
C:\WINDOWS\system32\ctfmon.exe
C:\WINDOWS\system32\wuauclt.exe
C:\Program Files\Winamp\winamp.exe
C:\WINDOWS\system32\taskmgr.exe
C:\Program Files\AVG\AVG9\avgwdsvc.exe
C:\Program Files\AVG\AVG9\avgnsx.exe
C:\Program Files\AVG\AVG9\avgemc.exe
C:\Program Files\AVG\AVG9\avgcsrvx.exe
C:\Documents and Settings\Dejan\Local Settings\Application Data\Google\Chrome\Application\chrome.exe
C:\Documents and Settings\Dejan\Local Settings\Application Data\Google\Chrome\Application\chrome.exe
C:\Documents and Settings\Dejan\Local Settings\Application Data\Google\Chrome\Application\chrome.exe
C:\Documents and Settings\Dejan\Local Settings\Application Data\Google\Chrome\Application\chrome.exe
C:\Documents and Settings\Dejan\Local Settings\Application Data\Google\Chrome\Application\chrome.exe
C:\Documents and Settings\Dejan\Local Settings\Application Data\Google\Chrome\Application\chrome.exe
C:\Documents and Settings\Dejan\Local Settings\Application Data\Google\Chrome\Application\chrome.exe
C:\Documents and Settings\Dejan\Desktop\New Folder\HiJackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://search.conduit.com?SearchSource=10&ctid=CT1750559
R3 - URLSearchHook: BS Player Toolbar - {fed66dc5-1b74-4a04-8f5c-15c5ace2b9a5} - C:\Program Files\BS_Player\tbBS_1.dll
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: WormRadar.com IESiteBlocker.NavFilter - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - C:\Program Files\AVG\AVG9\avgssie.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
O2 - BHO: BS Player Toolbar - {fed66dc5-1b74-4a04-8f5c-15c5ace2b9a5} - C:\Program Files\BS_Player\tbBS_1.dll
O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\System32\msdxm.ocx
O3 - Toolbar: BS Player Toolbar - {fed66dc5-1b74-4a04-8f5c-15c5ace2b9a5} - C:\Program Files\BS_Player\tbBS_1.dll
O4 - HKLM\..\Run: [WinampAgent] "C:\Program Files\Winamp\winampa.exe"
O4 - HKLM\..\Run: [Cmaudio] RunDll32 cmicnfg.cpl,CMICtrlWnd
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre6\bin\jusched.exe"
O4 - HKLM\..\Run: [C-Media Speaker Configuration] C:\Program Files\C-Media\WIN_ME\Setup.exe /SPEAKER
O4 - HKLM\..\Run: [AVG9_TRAY] C:\PROGRA~1\AVG\AVG9\avgtray.exe
O4 - HKLM\..\Run: [VTTimer] VTTimer.exe
O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
O4 - HKCU\..\Run: [Google Update] "C:\Documents and Settings\Dejan\Local Settings\Application Data\Google\Update\GoogleUpdate.exe" /c
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [DriverUpdaterPro] C:\Program Files\iXi Tools\Driver Updater Pro\DriverUpdaterPro.exe -t
O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O8 - Extra context menu item: Add to Google Photos Screensa&ver - res://C:\WINDOWS\System32\GPhotos.scr/200
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: Related - {c95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\WINDOWS\web\related.htm
O9 - Extra 'Tools' menuitem: Show &Related Links - {c95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\WINDOWS\web\related.htm
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O18 - Protocol: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - C:\Program Files\AVG\AVG9\avgpp.dll
O20 - Winlogon Notify: avgrsstarter - C:\WINDOWS\SYSTEM32\avgrsstx.dll
O23 - Service: AVG Free E-mail Scanner (avg9emc) - AVG Technologies CZ, s.r.o. - C:\Program Files\AVG\AVG9\avgemc.exe
O23 - Service: AVG Free WatchDog (avg9wd) - AVG Technologies CZ, s.r.o. - C:\Program Files\AVG\AVG9\avgwdsvc.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe

--
End of file - 5414 bytes


Ako nesto uocis ili ako imas neki nagovestaj sta bi moglo biti u mom slucaju...uglavnom kada pokrenem neki malo zahtevniji program CPU mi ide na 100% i tako par minuta i gasi mi se komp....

Evo dok magna ne dodje fixuj ovo pa neka posle on preuzme:





Jesi li ti pokrenuo ovoliko google chrome .exe fajlova?Ovaj driver updater pro mi je sumnjiv.Ti si ga instalirao? I takodje nemoj koristi ie6.

---

@Sc0rp10
nema ljutnje..ali rekao si mu da ubije legitimne stavke ;)
sve to treba da stoji tu ;)

@KventinR
pa mogao si i novu temu da otvoris :)
nema veze...HJT log je cist i nema tragove malware-a.
idemo na dodatnu proveru.

Skini DDS Program na Desktop
http://download.bleepingcomputer.com/sUBs/dds.scr

Dvoklikom pokreni dds.scr

Kad zavrsi, DDS ce otvoriti dva loga:
1. DDS.txt
2. Attach.txt

Oba izvestaja sacuvaj na Desktop.
Kopiraj mi DDS.txt

---

Naravno da nema.Pa ja sam ovde da bih ucio od boljih. ;)
Znam da su legitimne stavke, a ovo za toolbarove sam mu rekao jer smatram da toolbar nekog software-a i nije neophodan u browseru, a verovatno ga je instalirao sistemom next > next > next > finish kada je instairao i bs player, mada mozda i gresim.Ne koristim doticni player.
Za driver sam ga i pitao jer sam nesto gledao na netu i pojedini sajtovi tipa ovaj ga okarakterisali kao malware.No, hvala na ispravci. ;)

---

sto se tice toolbara,slazem se sa tobom ali to nije posao za HJT jer on ce samo obrisati registry stavku a ostaviti file...
nesto kao jako losa deinstalacija...to je posao za add or remove program...

sto se tice 04 Run stavke legitimna je. lokacija fajla mora biti ova:

u suprotnom je malware.
Ovo je program: http://dup.xpctools.com/
PS:nekim sajtovima nije za verovati u potpunosti ;)

---

Slazem se sa tim za sajtove i hvala na objasnjenju. ;)

---

Tako funkcionise Google Chrome - 1 tab = 1 proces. Najavljuje se da ce FF u novijim verzijama takodje raditi na taj nacin - na taj nacin ako nastane problem u nekom tabu, nece pasti ceo browser, vec samo ubijes proces za taj tab i nastavis surfovanje...

Uradio sam DDS kako si mi rekao ovo su rezultati...


DDS (Ver_09-12-01.01) - NTFSx86
Run by Dejan at 11:58:43.65 on Fri 01/08/2010
Internet Explorer: 6.0.2900.2096
Microsoft Windows XP Professional 5.1.2600.2.1252.1.1033.18.959.523 [GMT 1:00]

AV: AVG Anti-Virus Free *On-access scanning enabled* (Updated) {17DDD097-36FF-435F-9E1B-52D74245D6BF}

============== Running Processes ===============

C:\WINDOWS\system32\svchost -k DcomLaunch
svchost.exe
C:\WINDOWS\System32\svchost.exe -k netsvcs
svchost.exe
C:\Program Files\AVG\AVG9\avgchsvx.exe
C:\Program Files\AVG\AVG9\avgrsx.exe
svchost.exe
C:\Program Files\AVG\AVG9\avgcsrvx.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\AVG\AVG9\avgwdsvc.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE
C:\Program Files\Winamp\winampa.exe
C:\Program Files\AVG\AVG9\avgnsx.exe
C:\Program Files\Java\jre6\bin\jusched.exe
C:\PROGRA~1\AVG\AVG9\avgtray.exe
C:\WINDOWS\system32\VTTimer.exe
C:\Program Files\AVG\AVG9\avgemc.exe
C:\WINDOWS\SOUNDMAN.EXE
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\AVG\AVG9\avgcsrvx.exe
C:\WINDOWS\system32\wuauclt.exe
C:\WINDOWS\system32\taskmgr.exe
C:\Program Files\Winamp\winamp.exe
C:\Documents and Settings\Dejan\Local Settings\Application Data\Google\Chrome\Application\chrome.exe
C:\Documents and Settings\Dejan\Local Settings\Application Data\Google\Chrome\Application\chrome.exe
C:\Documents and Settings\Dejan\Local Settings\Application Data\Google\Chrome\Application\chrome.exe
C:\Documents and Settings\Dejan\Local Settings\Application Data\Google\Chrome\Application\chrome.exe
C:\Documents and Settings\Dejan\Local Settings\Application Data\Google\Chrome\Application\chrome.exe
C:\Documents and Settings\Dejan\My Documents\Downloads\dds.scr

============== Pseudo HJT Report ===============

uStart Page = hxxp://search.conduit.com?SearchSource=10&ctid=CT1750559
uURLSearchHooks: BS Player Toolbar: {fed66dc5-1b74-4a04-8f5c-15c5ace2b9a5} - c:\program files\bs_player\tbBS_1.dll
BHO: AcroIEHlprObj Class: {06849e9f-c8d7-4d59-b87d-784b7d6be0b3} - c:\program files\adobe\acrobat 7.0\activex\AcroIEHelper.dll
BHO: AVG Safe Search: {3ca2f312-6f6e-4b53-a66e-4e65e497c8c0} - c:\program files\avg\avg9\avgssie.dll
BHO: Java(tm) Plug-In 2 SSV Helper: {dbc80044-a445-435b-bc74-9c25c1c588a9} - c:\program files\java\jre6\bin\jp2ssv.dll
BHO: JQSIEStartDetectorImpl Class: {e7e6f031-17ce-4c07-bc86-eabfe594f69c} - c:\program files\java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
BHO: BS Player Toolbar: {fed66dc5-1b74-4a04-8f5c-15c5ace2b9a5} - c:\program files\bs_player\tbBS_1.dll
TB: BS Player Toolbar: {fed66dc5-1b74-4a04-8f5c-15c5ace2b9a5} - c:\program files\bs_player\tbBS_1.dll
EB: {32683183-48a0-441b-a342-7c2a440a9478} - No File
uRun: [Google Update] "c:\documents and settings\dejan\local settings\application data\google\update\GoogleUpdate.exe" /c
uRun: [ctfmon.exe] c:\windows\system32\ctfmon.exe
uRun: [DriverUpdaterPro] c:\program files\ixi tools\driver updater pro\DriverUpdaterPro.exe -t
mRun: [WinampAgent] "c:\program files\winamp\winampa.exe"
mRun: [Cmaudio] RunDll32 cmicnfg.cpl,CMICtrlWnd
mRun: [SunJavaUpdateSched] "c:\program files\java\jre6\bin\jusched.exe"
mRun: [C-Media Speaker Configuration] c:\program files\c-media\win_me\Setup.exe /SPEAKER
mRun: [AVG9_TRAY] c:\progra~1\avg\avg9\avgtray.exe
mRun: [VTTimer] VTTimer.exe
mRun: [SoundMan] SOUNDMAN.EXE
StartupFolder: c:\docume~1\alluse~1\startm~1\programs\startup\adober~1.lnk - c:\program files\adobe\acrobat 7.0\reader\reader_sl.exe
IE: Add to Google Photos Screensa&ver - c:\windows\system32\GPhotos.scr/200
IE: E&xport to Microsoft Excel - c:\progra~1\micros~2\office11\EXCEL.EXE/3000
IE: {c95fe080-8f5d-11d2-a20b-00aa003c157a} - %SystemRoot%\web\related.htm
IE: {FB5F1910-F110-11d2-BB9E-00C04F795683} - c:\program files\messenger\msmsgs.exe
IE: {92780B25-18CC-41C8-B9BE-3C9C571A8263} - {FF059E31-CC5A-4E2E-BF3B-96E929D65503} - c:\progra~1\micros~2\office11\REFIEBAR.DLL
DPF: DirectAnimation Java Classes - file://c:\windows\java\classes\dajava.cab
DPF: Microsoft XML Parser for Java - file://c:\windows\java\classes\xmldso.cab
DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_17-windows-i586.cab
DPF: {CAFEEFAC-0016-0000-0017-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_17-windows-i586.cab
DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_17-windows-i586.cab
DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} - hxxp://download.macromedia.com/pub/shockwave/cabs/flash/swflash.cab
Handler: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - c:\program files\avg\avg9\avgpp.dll
Notify: avgrsstarter - avgrsstx.dll

================= FIREFOX ===================

FF - ProfilePath - c:\docume~1\dejan\applic~1\mozilla\firefox\profiles\mnq42cg0.default\
FF - prefs.js: browser.search.defaulturl - hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT1750559&SearchSource=3&q={searchTerms}
FF - prefs.js: browser.search.selectedEngine - BS Player Customized Web Search
FF - prefs.js: browser.startup.homepage - hxxp://search.conduit.com/?ctid=CT1750559&SearchSource=13
FF - prefs.js: keyword.URL - hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT1750559&SearchSource=2&q=
FF - component: c:\program files\avg\avg9\firefox\components\avgssff.dll
FF - plugin: c:\documents and settings\dejan\local settings\application data\google\update\1.2.183.13\npGoogleOneClick8.dll
FF - plugin: c:\program files\google\picasa3\npPicasa3.dll

============= SERVICES / DRIVERS ===============

R1 AvgLdx86;AVG Free AVI Loader Driver x86;c:\windows\system32\drivers\avgldx86.sys [2009-12-20 333192]
R1 AvgMfx86;AVG Free On-access Scanner Minifilter Driver x86;c:\windows\system32\drivers\avgmfx86.sys [2009-12-20 28424]
R1 AvgTdiX;AVG Free Network Redirector;c:\windows\system32\drivers\avgtdix.sys [2009-12-20 360584]
R2 avg9emc;AVG Free E-mail Scanner;c:\program files\avg\avg9\avgemc.exe [2009-12-20 906520]
R2 avg9wd;AVG Free WatchDog;c:\program files\avg\avg9\avgwdsvc.exe [2009-12-20 285392]

=============== Created Last 30 ================

2009-12-20 11:05:38 169 ----a-w- c:\windows\RtlRack.ini
2009-12-20 10:50:51 16 ----a-w- c:\windows\wininit.ini
2009-12-20 10:50:28 0 d-----w- c:\windows\system32\appmgmt
2009-12-20 10:46:16 0 d-----w- c:\program files\Realtek Sound Manager
2009-12-20 10:46:15 0 d-----w- c:\program files\AvRack
2009-12-20 10:46:04 0 d-----w- c:\program files\Realtek AC97
2009-12-20 10:36:30 0 d-----w- c:\program files\S3
2009-12-20 10:36:22 304128 ----a-w- c:\windows\IsUninst.exe
2009-12-20 10:36:20 0 d-----w- c:\documents and settings\dejan\WINDOWS
2009-12-20 10:27:12 0 d-----w- c:\program files\iXi Tools
2009-12-20 10:02:16 0 d-----w- c:\windows\system32\New Folder
2009-12-20 00:56:50 0 d-----w- c:\program files\Conduit
2009-12-20 00:56:47 0 d-----w- c:\program files\BS_Player
2009-12-20 00:56:31 0 d-----w- c:\docume~1\dejan\applic~1\BSplayer Pro
2009-12-20 00:56:31 0 d-----w- c:\docume~1\dejan\applic~1\BSplayer
2009-12-20 00:56:30 0 d-----w- c:\program files\Webteh
2009-12-20 00:50:26 0 d-----w- c:\windows\pss
2009-12-20 00:41:35 376 ----a-w- c:\windows\ODBC.INI
2009-12-20 00:41:30 17920 ----a-w- c:\windows\system32\mdimon.dll
2009-12-20 00:39:23 0 d-----w- c:\program files\common files\L&H
2009-12-20 00:39:04 0 d-----w- c:\program files\Microsoft ActiveSync
2009-12-20 00:35:02 0 d-----w- c:\windows\SHELLNEW
2009-12-20 00:14:32 0 d-----w- c:\program files\GRETECH
2009-12-19 23:54:57 0 d--h--w- C:\$AVG
2009-12-19 23:54:48 12464 ----a-w- c:\windows\system32\avgrsstx.dll
2009-12-19 23:54:47 360584 ----a-w- c:\windows\system32\drivers\avgtdix.sys
2009-12-19 23:54:40 333192 ----a-w- c:\windows\system32\drivers\avgldx86.sys
2009-12-19 23:54:38 0 d-----w- c:\windows\system32\drivers\Avg
2009-12-19 23:54:26 0 d-----w- c:\program files\AVG
2009-12-19 23:54:24 0 d-----w- c:\docume~1\alluse~1\applic~1\avg9
2009-12-19 23:52:44 92 ----a-w- c:\windows\CMISETUP.INI
2009-12-19 23:52:44 26 ----a-w- c:\windows\CMCDPLAY.INI
2009-12-19 23:29:40 0 d-----w- c:\windows\system32\wbem\AutoRecover
2009-12-19 23:25:06 217088 ----a-w- c:\windows\system32\wmpns.dll
2009-12-19 23:24:27 84992 -c----w- c:\windows\system32\dllcache\dpcdll.dll
2009-12-19 23:24:27 84992 ----a-w- c:\windows\system32\dpcdll.dll
2009-12-19 23:24:26 9728 ------w- c:\windows\system32\comsdupd.exe
2009-12-19 23:24:26 52736 ------w- c:\windows\system32\vbicodec.ax
2009-12-19 23:24:26 40832 ------w- c:\windows\system32\drivers\irbus.sys
2009-12-19 23:24:26 32768 ----a-w- c:\windows\system32\asr_pfu.exe
2009-12-19 23:24:26 239616 ------w- c:\windows\system32\wstrenderer.ax
2009-12-19 23:24:26 164352 ------w- c:\windows\system32\wstpager.ax
2009-12-19 23:24:26 12800 ----a-w- c:\windows\system32\spiisupd.exe
2009-12-19 23:24:26 1229 ------w- c:\windows\system32\wbem\wscenter.mof
2009-12-19 23:24:00 4255 ------w- c:\windows\system32\drivers\adv01nt5.dll
2009-12-19 23:22:04 4933 ----a-w- c:\windows\system32\wbem\hform.xsl
2009-12-19 23:21:59 9216 ----a-w- c:\windows\system32\proxycfg.exe
2009-12-19 23:20:59 68768 ----a-w- c:\windows\system\mmsystem.dll
2009-12-19 23:19:59 884736 ----a-w- c:\windows\system32\msimsg.dll
2009-12-19 23:18:59 2940928 ----a-w- c:\windows\system32\wmploc.dll
2009-12-19 23:16:12 19373 ----a-w- c:\windows\002044_.tmp
2009-12-19 23:16:08 0 d-----w- c:\windows\system32\ReinstallBackups
2009-12-19 23:15:58 15872 ----a-w- c:\windows\system32\spupdsvc.exe
2009-12-19 23:15:19 3072 ----a-w- c:\windows\system32\drivers\audstub.sys
2009-12-19 23:14:02 0 d-----w- c:\docume~1\alluse~1\applic~1\BF8051E7-626F-4a11-AF7A-625A7B555862
2009-12-19 23:13:05 0 d-----w- c:\program files\common files\ODBC
2009-12-19 23:13:02 0 d-----w- c:\program files\common files\SpeechEngines
2009-12-19 23:12:59 5632 -c--a-w- c:\windows\system32\dllcache\kbdycc.dll
2009-12-19 23:12:42 0 d-----r- c:\documents and settings\all users\Documents
2009-12-19 23:08:43 0 d-----w- c:\program files\Carambis
2009-12-19 23:04:07 261 ----a-w- c:\windows\system32\$winnt$.inf
2009-12-19 22:36:15 0 d-----w- c:\program files\Winamp Detect
2009-12-19 22:22:40 0 d-sh--w- c:\documents and settings\all users\DRM
2009-12-19 22:21:31 0 d-----w- c:\program files\common files\MSSoap
2009-12-19 22:20:25 0 d--h--w- c:\program files\WindowsUpdate
2009-12-19 22:20:25 0 d-----w- c:\program files\Online Services
2009-12-19 22:20:19 0 d-----w- c:\program files\Messenger
2009-12-19 22:20:15 0 d-----w- c:\program files\MSN Gaming Zone
2009-12-19 22:19:47 0 d-----w- c:\program files\Windows NT

==================== Find3M ====================

2009-12-19 22:20:49 21640 ----a-w- c:\windows\system32\emptyregdb.dat
2009-10-11 03:17:27 411368 ----a-w- c:\windows\system32\deploytk.dll
2003-12-17 13:24:06 794624 ----a-w- c:\windows\inf\other\AUDIO3D.DLL

============= FINISH: 11:59:02.84 ===============