nemohu spustit programy

[multi]

Win XP Home SP3, nemůžu spustit antivirové programy, combofix se spustí a hned se ukončí. Nemám log z antivir. utility, protože po spuštění program spadne.

[Roli]

Zdravím, restartuj do Nouzového režimu a tam spusť Rsit a po té mi sem z něj dej log.txt

[multi]

Logfile of random's system information tool 1.08 (written by random/random)
Run by Administrator at 2011-06-29 14:00:00
Microsoft Windows XP Home Edition Service Pack 3
System drive C: has 22 GB (9%) free of 238 GB
Total RAM: 2046 MB (88% free)


======Scheduled tasks folder======

C:\WINDOWS\tasks\GoogleUpdateTaskMachineCore.job
C:\WINDOWS\tasks\GoogleUpdateTaskMachineUA.job
C:\WINDOWS\tasks\RealUpgradeLogonTaskS-1-5-21-1123561945-1757981266-682003330-1003.job
C:\WINDOWS\tasks\RealUpgradeScheduledTaskS-1-5-21-1123561945-1757981266-682003330-1003.job
C:\WINDOWS\tasks\User_Feed_Synchronization-{4CB247C0-5855-4FE6-8BCC-D35892AEF0DB}.job
C:\WINDOWS\tasks\User_Feed_Synchronization-{C9217706-D6D8-4344-8288-6274911C0329}.job

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{02478D38-C3F9-4efb-9B51-7695ECA05670}]
Yahoo! Companion BHO - C:\Program Files\Yahoo!\Companion\Installs\cpn\ycomp5_6_2_0.dll [2005-04-22 328275]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{0347C33E-8762-4905-BF09-768834316C61}]
HP Print Enhancer - C:\Program Files\HP\Digital Imaging\Smart Web Printing\hpswp_printenhancer.dll [2007-11-06 322880]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
Adobe PDF Link Helper - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2010-09-22 75200]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{3049C3E9-B461-4BC5-8870-4C09146192CA}]
RealPlayer Download and Record Plugin for Internet Explorer - C:\Documents and Settings\All Users\Data aplikací\Real\RealPlayer\BrowserRecordPlugin\IE\rpbrowserrecordplugin.dll [2010-12-09 382720]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AA58ED58-01DD-4d91-8333-CF10577473F7}]
Google Toolbar Helper - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll [2011-05-27 305328]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AF69DE43-7D58-4638-B6FA-CE66B5AD205D}]
Google Toolbar Notifier BHO - C:\Program Files\Google\GoogleToolbarNotifier\5.7.6406.1642\swg.dll [2011-05-27 1007160]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre6\bin\jp2ssv.dll [2010-03-22 41760]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{E7E6F031-17CE-4C07-BC86-EABFE594F69C}]
JQSIEStartDetectorImpl Class - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll [2010-03-22 79648]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{FFFFFFFF-CF4E-4F2B-BDC2-0E72E116A856}]
HP Smart BHO Class - C:\Program Files\HP\Digital Imaging\Smart Web Printing\hpswp_BHO.dll [2007-11-06 542016]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{EF99BD32-C1FB-11D2-892F-0090271D4F88} - &Yahoo! Companion - C:\Program Files\Yahoo!\Companion\Installs\cpn\ycomp5_6_2_0.dll [2005-04-22 328275]
{855F3B16-6D32-4FE6-8A56-BBB695989046} - ICQToolBar - C:\Program Files\ICQ6Toolbar\ICQToolBar.dll [2010-10-04 1049912]
{2318C2B1-4965-11d4-9B18-009027A5CD4F} - Google Toolbar - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll [2011-05-27 305328]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"NvCplDaemon"=C:\WINDOWS\system32\NvCpl.dll [2007-05-11 8429568]
"nwiz"=nwiz.exe /install []
"NvMediaCenter"=C:\WINDOWS\system32\NvMcTray.dll [2007-05-11 81920]
"RTHDCPL"=C:\WINDOWS\RTHDCPL.EXE [2007-08-10 16384000]
"SkyTel"=C:\WINDOWS\SkyTel.EXE [2007-08-03 1826816]
"Alcmtr"=C:\WINDOWS\ALCMTR.EXE [2005-05-03 69632]
"HP Software Update"=C:\Program Files\HP\HP Software Update\HPWuSchd2.exe [2007-10-14 49152]
"hpqSRMon"= []
"SunJavaUpdateSched"=C:\Program Files\Common Files\Java\Java Update\jusched.exe [2010-02-18 248040]
"NeroFilterCheck"=C:\Program Files\Common Files\Ahead\Lib\NeroCheck.exe [2007-05-04 161328]
"Adobe Reader Speed Launcher"=C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe [2011-06-08 37296]
"Adobe ARM"=C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2011-03-30 937920]
"TkBellExe"=C:\Program Files\Real\RealPlayer\update\realsched.exe [2010-12-09 274608]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"=C:\WINDOWS\system32\ctfmon.exe [2008-04-14 15360]

C:\Documents and Settings\All Users\Nabídka Start\Programy\Po spuštění
HP Digital Imaging Monitor.lnk - C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll [2006-10-18 133632]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\PEVSystemStart]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\procexp90.Sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\PEVSystemStart]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\procexp90.Sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{1a3e09be-1e45-494b-9174-d7385b45bbf5}]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=145

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"HonorAutoRunSetting"=1

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"C:\Program Files\Activision\Call of Duty - World at War\CoDWaWmp.exe"="C:\Program Files\Activision\Call of Duty - World at War\CoDWaWmp.exe:*:Enabled:Call of Duty(R) - World at War(TM)"
"C:\Program Files\Activision\Call of Duty - World at War\CoDWaW.exe"="C:\Program Files\Activision\Call of Duty - World at War\CoDWaW.exe:*:Enabled:Call of Duty(R) - World at War(TM)"
"C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe"="C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe:*:Enabled:hpqtra08.exe"
"C:\Program Files\HP\Digital Imaging\bin\hpqste08.exe"="C:\Program Files\HP\Digital Imaging\bin\hpqste08.exe:*:Enabled:hpqste08.exe"
"C:\Program Files\HP\Digital Imaging\bin\hposid01.exe"="C:\Program Files\HP\Digital Imaging\bin\hposid01.exe:*:Enabled:hposid01.exe"
"C:\Program Files\HP\Digital Imaging\bin\hpiscnapp.exe"="C:\Program Files\HP\Digital Imaging\bin\hpiscnapp.exe:*:Enabled:hpiscnapp.exe"
"C:\Program Files\HP\Digital Imaging\bin\hpqkygrp.exe"="C:\Program Files\HP\Digital Imaging\bin\hpqkygrp.exe:*:Enabled:hpqkygrp.exe"
"C:\Program Files\ICQ7.1\ICQ.exe"="C:\Program Files\ICQ7.1\ICQ.exe:*:Enabled:ICQ7.1"
"C:\Program Files\ICQ7.1\aolload.exe"="C:\Program Files\ICQ7.1\aolload.exe:*:Enabled:aolload.exe"
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"C:\Sierra\Empire Earth\Empire Earth.exe"="C:\Sierra\Empire Earth\Empire Earth.exe:*:Enabled:Empire Earth"
"C:\Program Files\Ubisoft\Shaun White Snowboarding\ShaunWhiteSnowboardingGame.exe"="C:\Program Files\Ubisoft\Shaun White Snowboarding\ShaunWhiteSnowboardingGame.exe:*:Enabled:Shaun White Snowboarding Game"
"C:\Program Files\Ubisoft\Shaun White Snowboarding\ShaunWhiteSnowboarding.exe"="C:\Program Files\Ubisoft\Shaun White Snowboarding\ShaunWhiteSnowboarding.exe:*:Enabled:Shaun White Snowboarding Update"
"C:\Program Files\Activision\Call of Duty - Black Ops\BlackOps.exe"="C:\Program Files\Activision\Call of Duty - Black Ops\BlackOps.exe:*:Enabled:BlackOps"
"C:\Program Files\Microsoft Games\Age of Empires III\age3.exe"="C:\Program Files\Microsoft Games\Age of Empires III\age3.exe:*:Enabled:Age of Empires 3"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"C:\Program Files\ICQ7.1\ICQ.exe"="C:\Program Files\ICQ7.1\ICQ.exe:*:Enabled:ICQ7.1"
"C:\Program Files\ICQ7.1\aolload.exe"="C:\Program Files\ICQ7.1\aolload.exe:*:Enabled:aolload.exe"
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"

======List of files/folders created in the last 1 months======

2011-06-29 14:00:01 ----D---- C:\Program Files\trend micro
2011-06-29 14:00:00 ----D---- C:\rsit
2011-06-29 13:56:21 ----A---- C:\RSIT.exe
2011-06-29 12:41:17 ----D---- C:\WINDOWS\LastGood
2011-06-29 12:23:38 ----ASH---- C:\pagefile.sys
2011-06-29 12:15:10 ----ASH---- C:\Documents and Settings\Administrator.OEM-E786384580E.000\Data aplikací\desktop.ini
2011-06-29 12:15:09 ----SD---- C:\Documents and Settings\Administrator.OEM-E786384580E.000\Data aplikací\Microsoft
2011-06-28 16:44:15 ----A---- C:\WINDOWS\ntbtlog.txt
2011-06-28 16:42:39 ----D---- C:\WINDOWS\ie8updates
2011-06-28 16:15:16 ----SD---- C:\32788R22FWJFW
2011-06-28 16:12:16 ----D---- C:\WINDOWS\ERDNT
2011-06-28 16:12:16 ----D---- C:\ComboFix
2011-06-28 16:12:16 ----A---- C:\WINDOWS\system32\CF22935.exe
2011-06-28 16:12:14 ----D---- C:\Qoobox
2011-06-28 15:08:32 ----A---- C:\WINDOWS\system32\MRT.exe
2011-06-28 15:08:11 ----D---- C:\WINDOWS\WBEM
2011-06-28 15:07:05 ----HDC---- C:\WINDOWS\ie8
2011-06-17 21:49:50 ----HDC---- C:\WINDOWS\$NtUninstallKB2530548$
2011-06-17 21:49:44 ----HDC---- C:\WINDOWS\$NtUninstallKB2476490$
2011-06-17 21:49:39 ----HDC---- C:\WINDOWS\$NtUninstallKB2503665$
2011-06-17 21:48:43 ----HDC---- C:\WINDOWS\$NtUninstallKB2535512$
2011-06-17 21:48:14 ----HDC---- C:\WINDOWS\$NtUninstallKB2536276$
2011-06-17 21:48:09 ----HDC---- C:\WINDOWS\$NtUninstallKB2544893$
2011-06-17 21:47:26 ----D---- C:\WINDOWS\SxsCaPendDel
2011-06-17 21:46:37 ----HDC---- C:\WINDOWS\$NtUninstallKB2544521$
2011-06-17 16:23:11 ----D---- C:\Program Files\MSECache

======List of files/folders modified in the last 1 months======

2011-06-29 14:00:01 ----RD---- C:\Program Files
2011-06-29 13:57:21 ----A---- C:\WINDOWS\SchedLgU.Txt
2011-06-29 13:15:24 ----D---- C:\WINDOWS\Prefetch
2011-06-29 12:50:16 ----D---- C:\WINDOWS\system
2011-06-29 12:42:40 ----D---- C:\WINDOWS\system32
2011-06-29 12:42:40 ----A---- C:\WINDOWS\system32\PerfStringBackup.INI
2011-06-29 12:41:27 ----HD---- C:\WINDOWS\inf
2011-06-29 12:41:18 ----HD---- C:\WINDOWS\$hf_mig$
2011-06-29 12:41:17 ----D---- C:\WINDOWS\system32\CatRoot2
2011-06-29 12:41:17 ----D---- C:\WINDOWS
2011-06-29 12:39:59 ----D---- C:\WINDOWS\Temp
2011-06-29 12:38:17 ----D---- C:\WINDOWS\system32\drivers
2011-06-29 12:37:01 ----D---- C:\WINDOWS\system32\drivers\etc
2011-06-29 12:15:09 ----D---- C:\Documents and Settings
2011-06-28 16:43:03 ----RSHDC---- C:\WINDOWS\system32\dllcache
2011-06-28 16:43:03 ----D---- C:\Program Files\Internet Explorer
2011-06-28 16:03:57 ----SD---- C:\WINDOWS\Tasks
2011-06-28 16:00:08 ----SHD---- C:\System Volume Information
2011-06-28 16:00:08 ----D---- C:\WINDOWS\system32\Restore
2011-06-28 15:57:38 ----HD---- C:\Config.Msi
2011-06-28 15:56:31 ----SHD---- C:\WINDOWS\Installer
2011-06-28 15:47:17 ----D---- C:\WINDOWS\Microsoft.NET
2011-06-28 15:46:51 ----RSD---- C:\WINDOWS\assembly
2011-06-28 15:38:50 ----D---- C:\WINDOWS\WinSxS
2011-06-28 15:33:36 ----D---- C:\WINDOWS\system32\cs-cz
2011-06-28 15:33:36 ----D---- C:\WINDOWS\Help
2011-06-28 15:30:52 ----D---- C:\Program Files\DAEMON Tools Toolbar
2011-06-28 15:17:36 ----D---- C:\Documents and Settings\All Users\Data aplikací\Alwil Software
2011-06-28 15:16:08 ----D---- C:\Documents and Settings\All Users\Data aplikací\Activ Software
2011-06-28 15:16:

[Roli]

Zbytek logu by nebyl ?

[multi]

nebyl , protože všechny programy spadnou dříve nebo později.

[Roli]

A co spustit v nouzáku ComboFix ?

[multi]

taky nejde, stejné jako v normálním

[Roli]

Zkus přejmenovat ComboFix třeba na multi a znovu ho spustit v nouzáku.