Nereagující programy.

[Matthew147]

Dobrý den, mám už tyto problémy nějakou dobu, ale dnes to vyvrcholilo. Udělal jsem 3 skeny (RSIT, DDS, FRST) vše v nouzovém režimu, protože jsem už zoufalý. Kliknu na program a nereaguje, vždy dělá, že pár sekund nabíhá. Někdy se mi nechce zapnout počítač, dost často mi zamrzne a musím ho na tvrdo vypnout. Tyto problémy jsem "řešil" tím, že jsme počítač dal jen do režimu spánku a když už se jednou rozjede, tak nedělá problémy... Až do dnes, kdy už se nechtějí spouštět žádné programy. Zkusil jsem obnovu systému a nepomohlo to.
Log z RSIT:
Logfile of random's system information tool 1.09 (written by random/random)
Run by Matěj at 2013-07-14 12:28:53
Microsoft® Windows Vista™ Home Premium Service Pack 2
System drive C: has 506 GB (71%) free of 715 GB
Total RAM: 4094 MB (78% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 12:28:57, on 14.7.2013
Platform: Windows Vista SP2 (WinNT 6.00.1906)
MSIE: Internet Explorer v9.00 (9.00.8112.16490)
Boot mode: Safe mode with network support

Running processes:
C:\Program Files\trend micro\Matěj.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
F2 - REG:system.ini: UserInit=userinit.exe
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll
O4 - HKLM\..\Run: [APSDaemon] "C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe"
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files (x86)\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"
O4 - HKCU\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun
O4 - HKCU\..\Run: [Google Update] "C:\Users\Matěj\AppData\Local\Google\Update\GoogleUpdate.exe" /c
O4 - HKCU\..\Run: [GAINWARD] C:\Program Files (x86)\EXPERTool\TBPanel.exe /A
O4 - HKCU\..\Run: [Simple Sticky Notes] C:\Program Files (x86)\Simnet\Simple Sticky Notes\ssn.exe
O4 - HKCU\..\Run: [GoogleDriveSync] "C:\Program Files (x86)\Google\Drive\googledrivesync.exe" /autostart
O4 - HKCU\..\RunOnce: [FlashPlayerUpdate] C:\Windows\system32\Macromed\Flash\FlashUtil64_11_4_402_278_ActiveX.exe -update activex
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'NETWORK SERVICE')
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~2\COMMON~1\Skype\SKYPE4~1.DLL
O22 - SharedTaskScheduler: Component Categories cache daemon - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\Windows\system32\browseui.dll
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
O23 - Service: Bonjour Service - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: @dfsrres.dll,-101 (DFSR) - Unknown owner - C:\Windows\system32\DFSR.exe (file missing)
O23 - Service: Služba Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Služba Google Update (gupdatem) (gupdatem) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: iPod Service - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: NVIDIA Display Driver Service (nvsvc) - Unknown owner - C:\Windows\system32\nvvsvc.exe (file missing)
O23 - Service: NVIDIA Update Service Daemon (nvUpdatusService) - NVIDIA Corporation - C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
O23 - Service: PandoraService (PanService) - Pandora.TV - C:\Program Files (x86)\PANDORA.TV\PanService\PandoraService.exe
O23 - Service: postgresql-8.4 - PostgreSQL Server 8.4 (postgresql-8.4) - PostgreSQL Global Development Group - c:/postgreSQL/bin/pg_ctl.exe
O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Skype Updater (SkypeUpdate) - Skype Technologies - C:\Program Files (x86)\Skype\Updater\Updater.exe
O23 - Service: @%SystemRoot%\system32\SLsvc.exe,-101 (slsvc) - Unknown owner - C:\Windows\system32\SLsvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: Steam Client Service - Valve Corporation - C:\Program Files (x86)\Common Files\Steam\SteamService.exe
O23 - Service: NVIDIA Stereoscopic 3D Driver Service (Stereo Service) - NVIDIA Corporation - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%ProgramFiles%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)

--
End of file - 7236 bytes

======Listing Processes======

\SystemRoot\System32\smss.exe
C:\Windows\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ProfileControl=Off MaxRequestThreads=16
C:\Windows\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ProfileControl=Off MaxRequestThreads=16
wininit.exe
winlogon.exe
C:\Windows\system32\services.exe
C:\Windows\system32\lsass.exe
C:\Windows\system32\lsm.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Windows\system32\svchost.exe -k rpcss
"c:\Program Files\Microsoft Security Client\MsMpEng.exe"
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\system32\svchost.exe -k netsvcs
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k NetworkService
C:\Windows\system32\svchost.exe -k LocalService
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
C:\Windows\system32\svchost.exe -k NetworkServiceNetworkRestricted
C:\Windows\Explorer.EXE
C:\Windows\helppane.exe -Embedding
"C:\Program Files\Internet Explorer\iexplore.exe"
"C:\Program Files\Internet Explorer\iexplore.exe" SCODEF:1968 CREDAT:145409
"C:\Program Files\Internet Explorer\iexplore.exe" SCODEF:1968 CREDAT:145410
"C:\Users\Matěj\Downloads\RSITx64.exe"
C:\Windows\system32\wbem\wmiprvse.exe

======Scheduled tasks folder======

C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
C:\Windows\tasks\GoogleUpdateTaskMachineUA.job
C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-1743722453-319816396-4160639214-1000Core.job
C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-1743722453-319816396-4160639214-1000UA.job

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
Adobe PDF Link Helper - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2011-06-06 63912]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
Java(tm) Plug-In SSV Helper - C:\Program Files (x86)\Java\jre7\bin\ssv.dll [2013-06-25 463272]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll [2013-06-25 171944]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"Windows Defender"=C:\Program Files\Windows Defender\MSASCui.exe [2008-01-21 1584184]
"RtHDVCpl"=C:\Windows\RAVCpl64.exe [2008-07-16 6440480]
"Skytel"=C:\Windows\Skytel.exe [2008-07-16 1833504]
"MSC"=c:\Program Files\Microsoft Security Client\msseces.exe [2012-03-26 1271168]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"Sidebar"=C:\Program Files\Windows Sidebar\sidebar.exe [2009-04-11 1555968]
"Google Update"=C:\Users\Matěj\AppData\Local\Google\Update\GoogleUpdate.exe [2012-09-20 116648]
"GAINWARD"=C:\Program Files (x86)\EXPERTool\TBPanel.exe [2009-02-03 2181672]
"Simple Sticky Notes"=C:\Program Files (x86)\Simnet\Simple Sticky Notes\ssn.exe [2013-05-25 552096]
"GoogleDriveSync"=C:\Program Files (x86)\Google\Drive\googledrivesync.exe [2013-06-06 19676256]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\RunOnce]
"FlashPlayerUpdate"=C:\Windows\system32\Macromed\Flash\FlashUtil64_11_4_402_278_ActiveX.exe [2012-09-21 420272]

[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]
"APSDaemon"=C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [2012-08-27 59280]
"iTunesHelper"=C:\Program Files (x86)\iTunes\iTunesHelper.exe [2012-09-09 421776]
"Adobe ARM"=C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2012-01-03 843712]
"SunJavaUpdateSched"=C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [2013-03-12 253816]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MsMpSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WudfPf]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WudfRd]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WudfSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\MsMpSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfPf]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfRd]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfUsbccidDriver]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"EnableLUA"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1
"EnableUIADesktopToggle"=0

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoActiveDesktop"=1
"NoActiveDesktopChanges"=1
"ForceActiveDesktopOn"=0
"BindDirectlyToPropertySetStorage"=0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.msadpcm"=msadp32.acm
"midimapper"=midimap.dll
"wavemapper"=msacm32.drv
"vidc.uyvy"=msyuv.dll
"vidc.yuy2"=msyuv.dll
"vidc.yvyu"=msyuv.dll
"vidc.iyuv"=iyuv_32.dll
"vidc.i420"=iyuv_32.dll
"vidc.yvu9"=tsbyuv.dll
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv
"wave1"=wdmaud.drv
"mixer1"=wdmaud.drv

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*

======List of files/folders created in the last 1 month======

2013-07-14 12:26:19 ----A---- C:\Windows\ntbtlog.txt
2013-07-10 19:34:22 ----D---- C:\Program Files (x86)\Full Tilt Poker
2013-07-09 18:51:55 ----D---- C:\ProgramData\NCH Software
2013-07-09 18:51:35 ----D---- C:\Program Files (x86)\NCH Software
2013-07-09 18:51:32 ----D---- C:\Users\Matěj\AppData\Roaming\NCH Software
2013-06-25 12:14:39 ----A---- C:\Windows\system32\Wdfres.dll
2013-06-25 12:14:39 ----A---- C:\Windows\system32\drivers\WdfLdr.sys
2013-06-25 12:14:37 ----A---- C:\Windows\system32\winusb.dll
2013-06-25 12:14:37 ----A---- C:\Windows\system32\drivers\WUDFRd.sys
2013-06-25 12:14:37 ----A---- C:\Windows\system32\drivers\WUDFPf.sys
2013-06-25 12:14:36 ----A---- C:\Windows\SYSWOW64\winusb.dll
2013-06-25 12:14:36 ----A---- C:\Windows\system32\WUDFSvc.dll
2013-06-25 12:14:36 ----A---- C:\Windows\system32\WUDFPlatform.dll
2013-06-25 12:14:36 ----A---- C:\Windows\system32\drivers\Wdf01000.sys
2013-06-25 12:14:35 ----A---- C:\Windows\system32\WUDFx.dll
2013-06-25 12:14:35 ----A---- C:\Windows\system32\WUDFHost.exe
2013-06-25 12:14:35 ----A---- C:\Windows\system32\WUDFCoinstaller.dll
2013-06-25 12:12:28 ----A---- C:\Windows\system32\mshtmled.dll
2013-06-25 12:12:27 ----A---- C:\Windows\SYSWOW64\vbscript.dll
2013-06-25 12:12:27 ----A---- C:\Windows\SYSWOW64\mshtmled.dll
2013-06-25 12:12:26 ----A---- C:\Windows\SYSWOW64\ieui.dll
2013-06-25 12:12:26 ----A---- C:\Windows\system32\ieui.dll
2013-06-25 12:12:25 ----A---- C:\Windows\SYSWOW64\url.dll
2013-06-25 12:12:25 ----A---- C:\Windows\SYSWOW64\ieUnatt.exe
2013-06-25 12:12:25 ----A---- C:\Windows\system32\url.dll
2013-06-25 12:12:25 ----A---- C:\Windows\system32\jsproxy.dll
2013-06-25 12:12:25 ----A---- C:\Windows\system32\ieUnatt.exe
2013-06-25 12:12:24 ----A---- C:\Windows\SYSWOW64\wininet.dll
2013-06-25 12:12:24 ----A---- C:\Windows\SYSWOW64\urlmon.dll
2013-06-25 12:12:24 ----A---- C:\Windows\SYSWOW64\jsproxy.dll
2013-06-25 12:12:24 ----A---- C:\Windows\system32\wininet.dll
2013-06-25 12:12:24 ----A---- C:\Windows\system32\urlmon.dll
2013-06-25 12:12:23 ----A---- C:\Windows\SYSWOW64\msfeeds.dll
2013-06-25 12:12:23 ----A---- C:\Windows\system32\msfeeds.dll
2013-06-25 12:12:23 ----A---- C:\Windows\system32\jscript9.dll
2013-06-25 12:12:22 ----A---- C:\Windows\SYSWOW64\jscript9.dll
2013-06-25 12:12:22 ----A---- C:\Windows\SYSWOW64\jscript.dll
2013-06-25 12:12:22 ----A---- C:\Windows\system32\vbscript.dll
2013-06-25 12:12:22 ----A---- C:\Windows\system32\jscript.dll
2013-06-25 12:12:21 ----A---- C:\Windows\SYSWOW64\iertutil.dll
2013-06-25 12:12:21 ----A---- C:\Windows\system32\iertutil.dll
2013-06-25 12:12:20 ----A---- C:\Windows\SYSWOW64\mshtml.dll
2013-06-25 12:12:18 ----A---- C:\Windows\system32\mshtml.dll
2013-06-25 12:12:18 ----A---- C:\Windows\system32\ieframe.dll
2013-06-25 12:12:17 ----A---- C:\Windows\SYSWOW64\ieframe.dll
2013-06-25 12:06:41 ----D---- C:\Program Files (x86)\NVIDIA Corporation
2013-06-25 12:04:39 ----A---- C:\Windows\system32\nvshext.dll
2013-06-25 12:02:35 ----A---- C:\Windows\SYSWOW64\OpenCL.dll
2013-06-25 12:02:35 ----A---- C:\Windows\system32\OpenCL.dll
2013-06-25 12:01:47 ----D---- C:\ProgramData\NVIDIA Corporation
2013-06-25 11:58:29 ----D---- C:\Program Files\NVIDIA Corporation
2013-06-25 11:54:29 ----A---- C:\Windows\SYSWOW64\atmlib.dll
2013-06-25 11:54:29 ----A---- C:\Windows\SYSWOW64\atmfd.dll
2013-06-25 11:54:29 ----A---- C:\Windows\system32\atmlib.dll
2013-06-25 11:54:29 ----A---- C:\Windows\system32\atmfd.dll
2013-06-25 11:45:34 ----A---- C:\Windows\system32\drivers\usb8023.sys
2013-06-25 11:45:30 ----A---- C:\Windows\system32\certutil.exe
2013-06-25 11:45:29 ----A---- C:\Windows\SYSWOW64\cryptsvc.dll
2013-06-25 11:45:29 ----A---- C:\Windows\SYSWOW64\cryptnet.dll
2013-06-25 11:45:29 ----A---- C:\Windows\SYSWOW64\crypt32.dll
2013-06-25 11:45:29 ----A---- C:\Windows\SYSWOW64\certutil.exe
2013-06-25 11:45:29 ----A---- C:\Windows\system32\crypt32.dll
2013-06-25 11:45:28 ----A---- C:\Windows\SYSWOW64\certenc.dll
2013-06-25 11:45:28 ----A---- C:\Windows\system32\cryptsvc.dll
2013-06-25 11:45:28 ----A---- C:\Windows\system32\cryptnet.dll
2013-06-25 11:45:28 ----A---- C:\Windows\system32\certenc.dll
2013-06-25 11:45:11 ----A---- C:\Windows\system32\drivers\tcpipreg.sys
2013-06-25 11:45:11 ----A---- C:\Windows\system32\drivers\tcpip.sys
2013-06-25 11:45:09 ----A---- C:\Windows\system32\win32spl.dll
2013-06-25 11:45:08 ----A---- C:\Windows\SYSWOW64\win32spl.dll
2013-06-25 11:45:08 ----A---- C:\Windows\SYSWOW64\printcom.dll
2013-06-25 11:45:03 ----A---- C:\Windows\SYSWOW64\cryptdlg.dll
2013-06-25 11:45:03 ----A---- C:\Windows\system32\cryptdlg.dll
2013-06-25 11:44:51 ----A---- C:\Windows\system32\drivers\volsnap.sys
2013-06-25 11:44:49 ----A---- C:\Windows\SYSWOW64\tzres.dll
2013-06-25 11:44:49 ----A---- C:\Windows\system32\tzres.dll
2013-06-25 11:44:47 ----A---- C:\Windows\system32\drivers\dxgkrnl.sys
2013-06-25 11:44:47 ----A---- C:\Windows\system32\cdd.dll
2013-06-25 11:44:46 ----A---- C:\Windows\SYSWOW64\shlwapi.dll
2013-06-25 11:44:46 ----A---- C:\Windows\system32\shlwapi.dll
2013-06-25 11:44:34 ----A---- C:\Windows\system32\winsrv.dll
2013-06-25 11:44:29 ----A---- C:\Windows\SYSWOW64\quartz.dll
2013-06-25 11:44:29 ----A---- C:\Windows\system32\quartz.dll
2013-06-25 11:44:28 ----A---- C:\Windows\SYSWOW64\wintrust.dll
2013-06-25 11:44:28 ----A---- C:\Windows\system32\wintrust.dll
2013-06-25 11:44:13 ----A---- C:\Windows\system32\ncrypt.dll
2013-06-25 11:44:12 ----A---- C:\Windows\SYSWOW64\ncrypt.dll
2013-06-25 11:44:11 ----A---- C:\Windows\SYSWOW64\mstscax.dll
2013-06-25 11:44:11 ----A---- C:\Windows\system32\mstscax.dll
2013-06-25 11:44:09 ----A---- C:\Windows\SYSWOW64\kernel32.dll
2013-06-25 11:44:09 ----A---- C:\Windows\system32\kernel32.dll
2013-06-25 11:44:07 ----A---- C:\Windows\system32\msxml6.dll
2013-06-25 11:44:07 ----A---- C:\Windows\system32\msxml3.dll
2013-06-25 11:44:06 ----A---- C:\Windows\SYSWOW64\msxml6.dll
2013-06-25 11:44:06 ----A---- C:\Windows\SYSWOW64\msxml3.dll
2013-06-25 11:44:05 ----A---- C:\Windows\SYSWOW64\synceng.dll
2013-06-25 11:44:05 ----A---- C:\Windows\system32\synceng.dll
2013-06-25 11:44:02 ----A---- C:\Windows\system32\drivers\ntfs.sys
2013-06-25 11:39:22 ----A---- C:\Windows\system32\win32k.sys
2013-06-25 11:38:24 ----A---- C:\Windows\system32\dpnsvr.exe
2013-06-25 11:38:24 ----A---- C:\Windows\system32\dpnet.dll
2013-06-25 11:38:24 ----A---- C:\Windows\system32\dpnathlp.dll
2013-06-25 11:38:23 ----A---- C:\Windows\SYSWOW64\dpnsvr.exe
2013-06-25 11:38:23 ----A---- C:\Windows\SYSWOW64\dpnet.dll
2013-06-25 11:34:42 ----A---- C:\Windows\SYSWOW64\javaws.exe
2013-06-25 11:34:37 ----A---- C:\Windows\SYSWOW64\WindowsAccessBridge-32.dll
2013-06-25 11:34:37 ----A---- C:\Windows\SYSWOW64\javaw.exe
2013-06-25 11:34:37 ----A---- C:\Windows\SYSWOW64\java.exe
2013-06-25 11:34:25 ----D---- C:\Program Files (x86)\Java

======List of files/folders modified in the last 1 month======

2013-07-14 12:28:55 ----D---- C:\Program Files\trend micro
2013-07-14 12:28:25 ----D---- C:\Windows\Temp
2013-07-14 12:26:19 ----D---- C:\Windows
2013-07-14 12:14:24 ----D---- C:\Windows\System32
2013-07-14 12:14:24 ----A---- C:\Windows\system32\PerfStringBackup.INI
2013-07-14 12:08:08 ----D---- C:\ProgramData\NVIDIA
2013-07-14 12:08:05 ----D---- C:\Windows\Minidump
2013-07-14 12:08:00 ----D---- C:\Windows\system32\wbem
2013-07-14 12:07:03 ----D---- C:\Windows\system32\config
2013-07-14 12:06:46 ----D---- C:\Windows\Tasks
2013-07-14 12:06:45 ----SHD---- C:\Windows\Installer
2013-07-14 12:06:45 ----D---- C:\Windows\system32\Tasks
2013-07-14 12:06:45 ----D---- C:\Windows\system32\spool
2013-07-14 12:06:45 ----D---- C:\Windows\system32\Msdtc
2013-07-14 12:06:45 ----D---- C:\Windows\system32\CodeIntegrity
2013-07-14 12:06:45 ----D---- C:\Windows\system32\catroot2
2013-07-14 12:06:45 ----D---- C:\Windows\inf
2013-07-14 12:06:44 ----D---- C:\Users\Matěj\AppData\Roaming\HoldemManager
2013-07-14 12:06:44 ----D---- C:\Users\Matěj\AppData\Roaming\BitTorrent
2013-07-14 12:06:41 ----D---- C:\Program Files (x86)\Steam
2013-07-14 12:06:40 ----D---- C:\Program Files (x86)\Holdem Manager 2
2013-07-14 12:06:39 ----D---- C:\Program Files (x86)\EXPERTool
2013-07-14 12:06:36 ----D---- C:\Windows\registration
2013-07-14 12:02:33 ----SHD---- C:\System Volume Information
2013-07-14 10:37:13 ----D---- C:\Windows\Prefetch
2013-07-13 22:58:02 ----A---- C:\blitzerr.txt
2013-07-13 22:06:21 ----D---- C:\Users\Matěj\AppData\Roaming\Skype
2013-07-13 12:44:36 ----RD---- C:\Program Files (x86)
2013-07-13 12:06:48 ----D---- C:\Windows\SoftwareDistribution
2013-07-11 08:42:29 ----D---- C:\Users\Matěj\AppData\Roaming\HEM Data
2013-07-09 18:51:55 ----HD---- C:\ProgramData
2013-07-08 17:13:15 ----D---- C:\Users\Matěj\AppData\Roaming\vlc
2013-07-03 15:48:28 ----D---- C:\Windows\system32\drivers
2013-06-28 13:57:27 ----D---- C:\Program Files (x86)\PokerStars
2013-06-25 16:03:58 ----D---- C:\Windows\Microsoft.NET
2013-06-25 16:03:26 ----RSD---- C:\Windows\assembly
2013-06-25 12:46:06 ----D---- C:\Windows\rescache
2013-06-25 12:40:43 ----D---- C:\Windows\winsxs
2013-06-25 12:30:37 ----D---- C:\Windows\system32\catroot
2013-06-25 12:28:32 ----D---- C:\Windows\SysWOW64
2013-06-25 12:26:57 ----D---- C:\Windows\SYSWOW64\cs-CZ
2013-06-25 12:26:57 ----D---- C:\Windows\system32\cs-CZ
2013-06-25 12:26:56 ----D---- C:\Windows\system32\drivers\cs-CZ
2013-06-25 12:26:55 ----D---- C:\Windows\SYSWOW64\migration
2013-06-25 12:26:55 ----D---- C:\Windows\system32\migration
2013-06-25 12:26:55 ----D---- C:\Program Files\Internet Explorer
2013-06-25 12:26:55 ----D---- C:\Program Files (x86)\Internet Explorer
2013-06-25 12:06:51 ----RD---- C:\Users
2013-06-25 11:58:29 ----RD---- C:\Program Files
2013-06-25 11:34:28 ----A---- C:\Windows\SYSWOW64\npDeployJava1.dll
2013-06-25 11:34:27 ----A---- C:\Windows\SYSWOW64\deployJava1.dll
2013-06-25 10:38:37 ----D---- C:\wamp
2013-06-16 14:21:39 ----D---- C:\Users\Matěj\AppData\Roaming\Dropbox

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R3 GEARAspiWDM;GEAR ASPI Filter Driver; C:\Windows\system32\DRIVERS\GEARAspiWDM.sys [2012-08-21 33240]
R3 L1E;NDIS Miniport Driver for Atheros AR8121/AR8113/AR8114 PCI-E Ethernet Controller; C:\Windows\system32\DRIVERS\L1E60x64.sys [2008-07-22 56320]
R3 MTsensor;ATK0110 ACPI UTILITY; C:\Windows\system32\DRIVERS\ASACPI.sys [2006-11-02 15680]
R3 WudfPf;@%SystemRoot%\system32\drivers\Wudfpf.sys,-1000; C:\Windows\system32\drivers\WudfPf.sys [2012-07-26 87040]
S0 MpFilter;Microsoft Malware Protection Driver; C:\Windows\system32\DRIVERS\MpFilter.sys [2012-03-20 203888]
S1 AsIO;AsIO; C:\Windows\SysWow64\drivers\AsIO.sys [2007-12-17 14392]
S2 cpuz135;cpuz135; \??\C:\Windows\system32\drivers\cpuz135_x64.sys [2010-11-09 21992]
S2 RMCAST;Ovladač protokolu RMCAST (Pgm); C:\Windows\system32\DRIVERS\RMCAST.sys [2009-04-10 140288]
S2 TBPanel;TBPanel; C:\Windows\system32\drivers\TBPanel.sys []
S3 Apowersoft_AudioDevice;Apowersoft_AudioDevice; C:\Windows\system32\drivers\Apowersoft_AudioDevice.sys [2012-10-08 31968]
S3 Cardex;Cardex; \??\C:\Windows\SysWOW64\drivers\TBPANELX64.SYS [2007-03-16 15648]
S3 drmkaud;Dekodér zvuků DRM jádra společnosti Microsoft; C:\Windows\system32\drivers\drmkaud.sys [2008-01-21 6144]
S3 hamachi;Hamachi Network Interface; C:\Windows\system32\DRIVERS\hamachi.sys [2009-03-18 33856]
S3 HdAudAddService;Ovladač funkce Microsoft 1.1 UAA pro službu zvuku High Definition Audio; C:\Windows\system32\drivers\HdAudio.sys [2006-11-02 273920]
S3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\Windows\system32\drivers\RTKVHD64.sys [2008-07-16 1485592]
S3 MSKSSRV;Server proxy služby datových proudů Microsoft; C:\Windows\system32\drivers\MSKSSRV.sys [2008-01-21 11008]
S3 MSPCLOCK;Server proxy hodin datových proudů Microsoft; C:\Windows\system32\drivers\MSPCLOCK.sys [2006-11-02 7040]
S3 MSPQM;Server proxy správce kvality datových proudů Microsoft; C:\Windows\system32\drivers\MSPQM.sys [2006-11-02 6656]
S3 MSTEE;Konvertor jímka-jímka typu T datových proudů Microsoft; C:\Windows\system32\drivers\MSTEE.sys [2008-01-21 7936]
S3 NisDrv;Microsoft Network Inspection System; C:\Windows\system32\DRIVERS\NisDrvWFP.sys [2012-03-20 98688]
S3 nvlddmkm;nvlddmkm; C:\Windows\system32\DRIVERS\nvlddmkm.sys [2013-02-26 11036448]
S3 USBAAPL64;Apple Mobile USB Driver; C:\Windows\System32\Drivers\usbaapl64.sys [2012-07-09 52736]
S3 WpdUsb;WpdUsb; C:\Windows\system32\DRIVERS\wpdusb.sys [2009-10-01 46592]
S3 WUDFRd;WUDFRd; C:\Windows\system32\DRIVERS\WUDFRd.sys [2012-07-26 198656]
S4 ErrDev;Microsoft Hardware Error Device Driver; C:\Windows\system32\drivers\errdev.sys [2008-01-21 8704]
S4 MegaSR;MegaSR; C:\Windows\system32\drivers\megasr.sys [2008-01-21 438328]
S4 RsFx0103;RsFx0103 Driver; C:\Windows\system32\DRIVERS\RsFx0103.sys [2009-03-30 311656]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 MsMpSvc;Microsoft Antimalware Service; c:\Program Files\Microsoft Security Client\MsMpEng.exe [2012-03-26 12600]
S2 AdobeARMservice;Adobe Acrobat Update Service; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [2011-06-06 64952]
S2 Apple Mobile Device;Apple Mobile Device; C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe [2012-08-11 55184]
S2 Bonjour Service;Bonjour Service; C:\Program Files\Bonjour\mDNSResponder.exe [2011-08-30 462184]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
S2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2010-03-18 138576]
S2 FontCache;@%systemroot%\system32\FntCache.dll,-100; C:\Windows\system32\svchost.exe [2008-01-21 27648]
S2 gupdate;Služba Google Update (gupdate); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2013-06-07 116648]
S2 MSSQL$SQLEXPRESS;SQL Server (SQLEXPRESS); c:\Program Files\Microsoft SQL Server\MSSQL10.SQLEXPRESS\MSSQL\Binn\sqlservr.exe [2009-03-30 57617752]
S2 nvsvc;NVIDIA Display Driver Service; C:\Windows\system32\nvvsvc.exe [2013-01-18 884512]
S2 nvUpdatusService;NVIDIA Update Service Daemon; C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe [2013-02-26 1260320]
S2 PanService;PandoraService; C:\Program Files (x86)\PANDORA.TV\PanService\PandoraService.exe [2012-09-28 625304]
S2 postgresql-8.4;postgresql-8.4 - PostgreSQL Server 8.4; c:/postgreSQL/bin/pg_ctl.exe runservice -N postgresql-8.4 -D c:/postgreSQL/data -w []
S2 SkypeUpdate;Skype Updater; C:\Program Files (x86)\Skype\Updater\Updater.exe [2013-02-28 161384]
S2 SQLWriter;SQL Server VSS Writer; c:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe [2008-07-10 157720]
S2 Stereo Service;NVIDIA Stereoscopic 3D Driver Service; C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe [2013-01-18 383264]
S3 aspnet_state;ASP.NET State Service; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\aspnet_state.exe [2010-03-18 44376]
S3 gupdatem;Služba Google Update (gupdatem); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2013-06-07 116648]
S3 iPod Service;iPod Service; C:\Program Files\iPod\bin\iPodService.exe [2012-09-09 936848]
S3 NisSrv;@c:\Program Files\Microsoft Security Client\MpAsDesc.dll,-243; c:\Program Files\Microsoft Security Client\NisSrv.exe [2012-03-26 291696]
S3 PerfHost;@%systemroot%\sysWow64\perfhost.exe,-2; C:\Windows\SysWow64\perfhost.exe [2008-01-21 19968]
S3 Steam Client Service;Steam Client Service; C:\Program Files (x86)\Common Files\Steam\SteamService.exe [2012-11-19 489256]
S3 WPFFontCache_v0400;@c:\Windows\Microsoft.NET\Framework64\v4.0.30319\WPF\WPFFontCache_v0400.exe,-100; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\WPF\WPFFontCache_v0400.exe [2010-03-18 1020768]
S4 MSSQLServerADHelper100;SQL Active Directory Helper Service; c:\Program Files\Microsoft SQL Server\100\Shared\SQLADHLP.EXE [2009-07-22 61976]
S4 NetMsmqActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8195; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2010-03-18 124240]
S4 NetPipeActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8197; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2010-03-18 124240]
S4 NetTcpActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8199; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2010-03-18 124240]
S4 SQLAgent$SQLEXPRESS;SQL Server Agent (SQLEXPRESS); c:\Program Files\Microsoft SQL Server\MSSQL10.SQLEXPRESS\MSSQL\Binn\SQLAGENT.EXE [2009-03-30 427880]
S4 SQLBrowser;SQL Server Browser; c:\Program Files (x86)\Microsoft SQL Server\90\Shared\sqlbrowser.exe [2009-03-30 254808]

-----------------EOF-----------------

Log z DDS:
DDS (Ver_2012-11-20.01) - NTFS_AMD64 NETWORK
Internet Explorer: 9.0.8112.16490 BrowserJavaVersion: 10.25.2
Run by Matěj at 12:32:58 on 2013-07-14
#Option Extended Search is enabled.
Microsoft® Windows Vista™ Home Premium 6.0.6002.2.1250.420.1029.18.4094.3035 [GMT 2:00]
.
AV: Microsoft Security Essentials *Enabled/Updated* {9765EA51-0D3C-7DFB-6091-10E4E1F341F6}
SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
SP: Microsoft Security Essentials *Enabled/Updated* {2C040BB5-2B06-7275-5A21-2B969A740B4B}
.
============== Running Processes ===============
.
C:\Windows\system32\lsm.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Windows\system32\svchost.exe -k rpcss
c:\Program Files\Microsoft Security Client\MsMpEng.exe
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\system32\svchost.exe -k netsvcs
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k NetworkService
C:\Windows\system32\svchost.exe -k LocalService
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
C:\Windows\system32\svchost.exe -k NetworkServiceNetworkRestricted
C:\Windows\Explorer.EXE
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Windows\system32\wbem\wmiprvse.exe
C:\Users\Matěj\Downloads\dds.exe
C:\Windows\system32\conime.exe
C:\Windows\system32\wbem\wmiprvse.exe
C:\Windows\System32\cscript.exe
.
============== Pseudo HJT Report ===============
.
mWinlogon: Userinit = userinit.exe
BHO: Adobe PDF Link Helper: {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
BHO: Java(tm) Plug-In SSV Helper: {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll
BHO: Java(tm) Plug-In 2 SSV Helper: {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll
uRun: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun
uRun: [Google Update] "C:\Users\Matěj\AppData\Local\Google\Update\GoogleUpdate.exe" /c
uRun: [GAINWARD] C:\Program Files (x86)\EXPERTool\TBPanel.exe /A
uRun: [Simple Sticky Notes] C:\Program Files (x86)\Simnet\Simple Sticky Notes\ssn.exe
uRun: [GoogleDriveSync] "C:\Program Files (x86)\Google\Drive\googledrivesync.exe" /autostart
uRunOnce: [FlashPlayerUpdate] C:\Windows\System32\Macromed\Flash\FlashUtil64_11_4_402_278_ActiveX.exe -update activex
mRun: [APSDaemon] "C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe"
mRun: [iTunesHelper] "C:\Program Files (x86)\iTunes\iTunesHelper.exe"
mRun: [Adobe ARM] "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
mRun: [SunJavaUpdateSched] "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"
mPolicies-Explorer: NoActiveDesktop = dword:1
mPolicies-Explorer: NoActiveDesktopChanges = dword:1
mPolicies-Explorer: BindDirectlyToPropertySetStorage = dword:0
mPolicies-System: EnableLUA = dword:0
mPolicies-System: EnableUIADesktopToggle = dword:0
TCP: NameServer = 10.0.0.138
TCP: Interfaces\{9FAA9D60-CBF6-4BFE-A38F-6670DC5F6685} : DHCPNameServer = 10.0.0.138
Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll
LSA: Security Packages = kerberos msv1_0 schannel wdigest tspkg
x64-Run: [Windows Defender] C:\Program Files (x86)\Windows Defender\MSASCui.exe -hide
x64-Run: [RtHDVCpl] RAVCpl64.exe
x64-Run: [Skytel] Skytel.exe
x64-Run: [MSC] "c:\Program Files\Microsoft Security Client\msseces.exe" -hide -runkey
x64-mPolicies-Explorer: NoActiveDesktop = dword:1
x64-mPolicies-Explorer: NoActiveDesktopChanges = dword:1
x64-mPolicies-Explorer: BindDirectlyToPropertySetStorage = dword:0
x64-mPolicies-System: EnableLUA = dword:0
x64-mPolicies-System: EnableUIADesktopToggle = dword:0
x64-Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - <orphaned>
.
============= SERVICES / DRIVERS ===============
.
S0 MpFilter;Microsoft Malware Protection Driver;C:\Windows\System32\drivers\MpFilter.sys [2012-3-20 203888]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-3-18 130384]
S2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2010-3-18 138576]
S2 cpuz135;cpuz135;C:\Windows\System32\drivers\cpuz135_x64.sys [2012-11-12 21992]
S2 FontCache;Mezipaměť písem Windows;C:\Windows\System32\svchost.exe -k LocalServiceAndNoImpersonation [2008-1-21 27648]
S2 PanService;PandoraService;C:\Program Files (x86)\PANDORA.TV\PanService\PandoraService.exe [2013-2-16 625304]
S2 postgresql-8.4;postgresql-8.4 - PostgreSQL Server 8.4;c:/postgreSQL/bin/pg_ctl.exe runservice -N "postgresql-8.4" -D "c:/postgreSQL/data" -w --> c:/postgreSQL/bin/pg_ctl.exe runservice -N postgresql-8.4 [?]
S2 SkypeUpdate;Skype Updater;C:\Program Files (x86)\Skype\Updater\Updater.exe [2013-2-28 161384]
S2 Stereo Service;NVIDIA Stereoscopic 3D Driver Service;C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe [2013-1-18 383264]
S3 Apowersoft_AudioDevice;Apowersoft_AudioDevice;C:\Windows\System32\drivers\Apowersoft_AudioDevice.sys [2013-3-31 31968]
S3 NisDrv;Microsoft Network Inspection System;C:\Windows\System32\drivers\NisDrvWFP.sys [2012-3-20 98688]
S3 NisSrv;Kontrola sítě Microsoft;C:\Program Files\Microsoft Security Client\NisSrv.exe [2012-3-26 291696]
S3 PerfHost;Hostitel knihoven DLL čítačů výkonu;C:\Windows\SysWOW64\perfhost.exe [2008-1-21 19968]
S3 USBAAPL64;Apple Mobile USB Driver;C:\Windows\System32\drivers\usbaapl64.sys [2012-7-9 52736]
S3 WPFFontCache_v0400;Windows Presentation Foundation Font Cache 4.0.0.0;C:\Windows\Microsoft.NET\Framework64\v4.0.30319\WPF\WPFFontCache_v0400.exe [2010-3-18 1020768]
S4 clr_optimization_v2.0.50727_64;Microsoft .NET Framework NGEN v2.0.50727_X64;C:\Windows\Microsoft.NET\Framework64\v2.0.50727\mscorsvw.exe [2012-9-20 89920]
S4 MSSQLServerADHelper100;SQL Active Directory Helper Service;C:\Program Files\Microsoft SQL Server\100\Shared\sqladhlp.exe [2009-7-22 61976]
S4 RsFx0103;RsFx0103 Driver;C:\Windows\System32\drivers\RsFx0103.sys [2009-3-30 311656]
S4 SQLAgent$SQLEXPRESS;SQL Server Agent (SQLEXPRESS);C:\Program Files\Microsoft SQL Server\MSSQL10.SQLEXPRESS\MSSQL\Binn\SQLAGENT.EXE [2009-3-30 427880]
.
=============== File Associations ===============
.
FileExt: .js: JSFile=C:\Windows\SysWOW64\WScript.exe "%1" %*
FileExt: .jse: JSEFile=C:\Windows\SysWOW64\WScript.exe "%1" %*
.
=============== Created Last 60 ================
.
.
==================== Find6M ====================
.
2013-06-25 09:34:30 96168 ----a-w- C:\Windows\SysWow64\WindowsAccessBridge-32.dll
2013-06-25 09:34:28 867240 ----a-w- C:\Windows\SysWow64\npDeployJava1.dll
2013-06-25 09:34:28 263592 ----a-w- C:\Windows\SysWow64\javaws.exe
2013-06-25 09:34:28 175016 ----a-w- C:\Windows\SysWow64\javaw.exe
2013-06-25 09:34:28 175016 ----a-w- C:\Windows\SysWow64\java.exe
2013-06-25 09:34:27 789416 ----a-w- C:\Windows\SysWow64\deployJava1.dll
2013-05-17 04:05:41 17824768 ----a-w- C:\Windows\System32\mshtml.dll
2013-05-17 03:27:25 10926080 ----a-w- C:\Windows\System32\ieframe.dll
2013-05-17 03:09:56 2312704 ----a-w- C:\Windows\System32\jscript9.dll
2013-05-17 03:02:53 1346560 ----a-w- C:\Windows\System32\urlmon.dll
2013-05-17 03:02:29 1392128 ----a-w- C:\Windows\System32\wininet.dll
2013-05-17 03:01:13 1494528 ----a-w- C:\Windows\System32\inetcpl.cpl
2013-05-17 03:00:22 237056 ----a-w- C:\Windows\System32\url.dll
2013-05-17 02:58:20 85504 ----a-w- C:\Windows\System32\jsproxy.dll
2013-05-17 02:56:09 173056 ----a-w- C:\Windows\System32\ieUnatt.exe
2013-05-17 02:56:00 599040 ----a-w- C:\Windows\System32\vbscript.dll
2013-05-17 02:55:59 816640 ----a-w- C:\Windows\System32\jscript.dll
2013-05-17 02:54:09 729088 ----a-w- C:\Windows\System32\msfeeds.dll
2013-05-17 02:53:20 2147840 ----a-w- C:\Windows\System32\iertutil.dll
2013-05-17 02:51:49 96768 ----a-w- C:\Windows\System32\mshtmled.dll
2013-05-17 02:51:27 2382848 ----a-w- C:\Windows\System32\mshtml.tlb
2013-05-17 02:46:31 248320 ----a-w- C:\Windows\System32\ieui.dll
2013-05-16 23:08:55 12329984 ----a-w- C:\Windows\SysWow64\mshtml.dll
2013-05-16 22:49:25 9738752 ----a-w- C:\Windows\SysWow64\ieframe.dll
2013-05-16 22:39:39 1800704 ----a-w- C:\Windows\SysWow64\jscript9.dll
2013-05-16 22:28:40 1104384 ----a-w- C:\Windows\SysWow64\urlmon.dll
2013-05-16 22:28:26 1129472 ----a-w- C:\Windows\SysWow64\wininet.dll
2013-05-16 22:27:30 1427968 ----a-w- C:\Windows\SysWow64\inetcpl.cpl
2013-05-16 22:26:07 231936 ----a-w- C:\Windows\SysWow64\url.dll
2013-05-16 22:23:35 65024 ----a-w- C:\Windows\SysWow64\jsproxy.dll
2013-05-16 22:21:37 142848 ----a-w- C:\Windows\SysWow64\ieUnatt.exe
2013-05-16 22:21:34 717824 ----a-w- C:\Windows\SysWow64\jscript.dll
2013-05-16 22:20:30 420864 ----a-w- C:\Windows\SysWow64\vbscript.dll
2013-05-16 22:19:25 607744 ----a-w- C:\Windows\SysWow64\msfeeds.dll
2013-05-16 22:17:30 1796096 ----a-w- C:\Windows\SysWow64\iertutil.dll
2013-05-16 22:17:21 73216 ----a-w- C:\Windows\SysWow64\mshtmled.dll
2013-05-16 22:16:57 2382848 ----a-w- C:\Windows\SysWow64\mshtml.tlb
2013-05-16 22:12:55 176640 ----a-w- C:\Windows\SysWow64\ieui.dll
2013-05-08 04:14:40 1417576 ----a-w- C:\Windows\System32\drivers\tcpip.sys
2013-05-08 02:27:42 40448 ----a-w- C:\Windows\System32\drivers\tcpipreg.sys
2013-05-02 15:29:56 278800 ------w- C:\Windows\System32\MpSigStub.exe
2013-05-02 04:16:27 686080 ----a-w- C:\Windows\System32\win32spl.dll
2013-05-02 04:04:25 443904 ----a-w- C:\Windows\SysWow64\win32spl.dll
2013-05-02 04:03:42 37376 ----a-w- C:\Windows\SysWow64\printcom.dll
2013-04-24 04:09:48 174592 ----a-w- C:\Windows\System32\cryptsvc.dll
2013-04-24 04:09:48 132096 ----a-w- C:\Windows\System32\cryptnet.dll
2013-04-24 04:09:48 1269248 ----a-w- C:\Windows\System32\crypt32.dll
2013-04-24 04:09:41 50688 ----a-w- C:\Windows\System32\certenc.dll
2013-04-24 04:00:30 985600 ----a-w- C:\Windows\SysWow64\crypt32.dll
2013-04-24 04:00:30 98304 ----a-w- C:\Windows\SysWow64\cryptnet.dll
2013-04-24 04:00:30 133120 ----a-w- C:\Windows\SysWow64\cryptsvc.dll
2013-04-24 04:00:24 41984 ----a-w- C:\Windows\SysWow64\certenc.dll
2013-04-24 02:10:00 1078272 ----a-w- C:\Windows\System32\certutil.exe
2013-04-24 01:46:29 812544 ----a-w- C:\Windows\SysWow64\certutil.exe
2013-04-17 13:04:03 30720 ----a-w- C:\Windows\System32\cryptdlg.dll
2013-04-17 12:30:06 24576 ----a-w- C:\Windows\SysWow64\cryptdlg.dll
2013-04-15 14:17:12 901496 ----a-w- C:\Windows\System32\drivers\dxgkrnl.sys
2013-04-13 03:34:30 47104 ----a-w- C:\Windows\System32\cdd.dll
2013-04-09 01:55:57 2774016 ----a-w- C:\Windows\System32\win32k.sys
2013-03-08 04:18:52 451072 ----a-w- C:\Windows\System32\winsrv.dll
2013-03-08 04:17:12 2425344 ----a-w- C:\Windows\System32\mstscax.dll
2013-03-08 03:52:22 2067968 ----a-w- C:\Windows\SysWow64\mstscax.dll
2013-03-03 19:13:14 1513320 ----a-w- C:\Windows\System32\drivers\ntfs.sys
2013-02-12 02:18:19 19456 ----a-w- C:\Windows\System32\drivers\usb8023.sys
2013-02-07 20:44:08 175864 ---ha-w- C:\Windows\SysWow64\BytescoutVideoMixerFilter.dll
2013-02-07 20:44:06 429816 ---ha-w- C:\Windows\SysWow64\BytescoutScreenCapturing.dll
2013-02-07 20:44:06 261880 ---ha-w- C:\Windows\SysWow64\BytescoutScreenCapturingFilter.dll
2013-02-07 20:44:06 231672 ---ha-w- C:\Windows\System32\BytescoutVideoMixerFilter.dll
2013-02-07 20:44:04 584952 ---ha-w- C:\Windows\System32\BytescoutScreenCapturing.dll
2013-02-07 20:44:04 372984 ---ha-w- C:\Windows\System32\BytescoutScreenCapturingFilter.dll
2013-01-18 15:00:28 6390048 ----a-w- C:\Windows\System32\nvcpl.dll
2013-01-18 15:00:28 3460896 ----a-w- C:\Windows\System32\nvsvc64.dll
2013-01-18 15:00:11 884512 ----a-w- C:\Windows\System32\nvvsvc.exe
2013-01-18 15:00:11 63776 ----a-w- C:\Windows\System32\nvshext.dll
2013-01-18 15:00:11 2558240 ----a-w- C:\Windows\System32\nvsvcr.dll
2013-01-18 15:00:11 118560 ----a-w- C:\Windows\System32\nvmctray.dll
2013-01-18 06:15:24 550176 ----a-w- C:\Windows\SysWow64\nvStreaming.exe
.
============= FINISH: 12:33:36,21 ===============



Děkuji!

[vyosek]

Zdravim

Udelejte CDI dle kolegy

Stáhni CrystalDiskInfo, v nabídce Úpravy zvol Kopírovat a obsah schránky sem vlož pomocí Ctrl+V.

Stahnete Malwarebytes Anti-Rootkit http://www.bleepingcomputer.com/downloa ... i-rootkit/

• Ulozte nejlepe na Plochu a rozbalte
• Spustte kliknutim na mbanr
• Nyni postupne kliknete na Next a Update
• Po dokonceni update (aktualizace) databaze kliknete opet na Next
• Nechte zaskrtnute vsechny tri moznosti a klinete na Scan cimz spustite prohledavani PC
• Po dokonceni skenu (cca 5 minutek) zkontrolujte, zda-li je u vsech nalezu (samozrejme pokud budou) zatrzitko
• Tez zkontrolujte, jetsli je zatrzitko u Create Restore point
• Nyni kliknete na CleanUp cimz nalezenou infekci odstranime
• PC bude restartovan
• Slozka mbar by mela obsahovat log (a zrejme se i sam otevre) mbar-log-rok-mesic-den (hodina-minuta-sekunda).txt, ten mi sem dejte

[Matthew147]

Nemohl by být někde problém v hardwaru?
----------------------------------------------------------------------------
CrystalDiskInfo 5.0.0 (C) 2008-2012 hiyohiyo
Crystal Dew World : http://crystalmark.info/
----------------------------------------------------------------------------

OS : Windows Vista Home Premium Edition SP2 [6.0 Build 6002] (x64)
Date : 2013/07/16 12:48:22

-- Controller Map ----------------------------------------------------------
+ PCI Standardní dvoukanálový řadič IDE [ATA]
- Kanál IDE (0)
- Kanál IDE (1)
+ Intel(R) ICH10 Family 4 port Serial ATA Storage Controller 1 - 3A20 [ATA]
+ Kanál IDE (0)
- SAMSUNG HD753LJ ATA Device
+ Kanál IDE (1)
- TSSTcorp CDDVDW SH-S223B ATA Device
+ Intel(R) ICH10 Family 2 port Serial ATA Storage Controller 2 - 3A26 [ATA]
- Kanál IDE (0)
- Kanál IDE (1)
- Iniciátor iSCSI společnosti Microsoft [SCSI]

-- Disk List ---------------------------------------------------------------
(1) SAMSUNG HD753LJ : 750,1 GB [0/2/0, pd1]

----------------------------------------------------------------------------
(1) SAMSUNG HD753LJ
----------------------------------------------------------------------------
Model : SAMSUNG HD753LJ
Firmware : 1AA01117
Serial Number : S13UJ1KS220352
Disk Size : 750,1 GB (8,4/137,4/750,1)
Buffer Size : 32767 KB
Queue Depth : 32
# of Sectors : 1465149168
Rotation Rate : Neznámy údaj
Interface : Serial ATA
Major Version : ATA/ATAPI-7
Minor Version : ATA8-ACS version 3b
Transfer Mode : SATA/300
Power On Hours : 14838 hod.
Power On Count : 1904 krát
Temparature : 26 C (78 F)
Health Status : Dobrý
Features : S.M.A.R.T., APM, AAM, 48bit LBA, NCQ
APM Level : 0000h [OFF]
AAM Level : FE00h [OFF]

-- S.M.A.R.T. --------------------------------------------------------------
ID Cur Wor Thr RawValues(6) Attribute Name
01 100 100 _51 000000000000 Počet chyb čtení
03 _81 _81 _11 00000000196E Čas na roztočení ploten
04 _98 _98 __0 00000000078E Počet spuštění/zastavení
05 100 100 _10 000000000000 Počet přemapovaných sektorů
07 100 100 _51 000000000000 Počet chybných hledání
08 100 100 _15 000000000000 Čas potřebný na vyhledání
09 _97 _97 __0 0000000039F6 Hodin v činnosti
0A 100 100 _51 000000000001 Počet opakovaných pokusů o roztočení ploten
0B 100 100 __0 000000000001 Počet pokusů o překalibrování
0C _98 _98 __0 000000000770 Počet cyklů zapnutí zařízení
0D 100 100 __0 000000000000 Počet pokusů o softvérové opravení chyb při čtení programů z disku
B7 100 100 __0 000000000000 Neznámý
B8 100 100 __0 000000000000 Ukončovacích chyb
BB 100 100 __0 000000000000 Ohlášeno neopravitelných chyb
BC 100 100 __0 000000000000 Časový limit příkazu
BE _78 _64 __0 000016100016 Teplota toku vzduchu
C2 _74 _63 __0 00001A10001A Teplota
C3 100 100 __0 0000006FA996 Počet oprav chybného čtení
C4 100 100 __0 000000000000 Počet udalostí s číslem realokování sektorů
C5 100 100 __0 000000000000 Počet podezřelých sektorů
C6 100 100 __0 000000000000 Počet neopravitelných sektorů
C7 100 100 __0 000000000002 Počet chyb v kontrolním součtu UltraDMA
C8 100 100 __0 000000000000 Počet chyb při zápisu sektorů
C9 100 100 __0 000000000000 Počet chyb při čtení programů z disku

-- IDENTIFY_DEVICE ---------------------------------------------------------
0 1 2 3 4 5 6 7 8 9
000: 0040 3FFF C837 0010 8856 003F 003F 0000 0000 0000
010: 5331 3355 4A31 4B53 3232 3532 3532 2020 2020 2020
020: 0003 FFFF 0004 3141 4130 3137 3137 5341 4D53 554E
030: 4720 4844 3735 334C 4A20 2020 2020 2020 2020 2020
040: 2020 2020 2020 2020 2020 2020 2020 8010 0000 2F00
050: 4000 0200 0200 0007 3FFF 003F 003F FC10 00FB 0110
060: FFFF 0FFF 0000 0007 0003 0078 0078 0078 0078 0000
070: 0000 0000 0000 0000 0000 1706 1706 0000 004C 0040
080: 00F8 0052 746B 7F69 4133 BC41 BC41 4123 20FF 0043
090: 0043 0000 FFFE 0000 FE00 0005 0005 005D 86A0 0001
100: 66F0 5754 0000 0000 0064 0000 0000 0000 5002 4E90
110: 010B 2671 0000 0000 0000 0000 0000 0000 0000 401C
120: 401C 0000 0000 0000 0000 0000 0000 0000 0029 0000
130: 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000
140: 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000
150: 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000
160: 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000
170: 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000
180: 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000
190: 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000
200: 0000 0000 0000 0000 0000 003F 003F 0000 0000 0000
210: 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000
220: 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000
230: 0000 0000 0000 0000 0001 0000 0000 0000 0000 0000
240: 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000
250: 0000 0000 0000 0000 0000 E3A5

Malwarebytes Anti-Rootkit BETA 1.06.0.1004
www.malwarebytes.org

Database version: v2013.07.16.02

Windows Vista Service Pack 2 x64 NTFS
Internet Explorer 9.0.8112.16421
Matěj :: MATEJPC [administrator]

16.7.2013 12:27:52
mbar-log-2013-07-16 (12-27-52).txt

Scan type: Quick scan
Scan options enabled: Anti-Rootkit | Drivers | MBR | Physical Sectors | Memory | Startup | Registry | File System | Heuristics/Extra | Heuristics/Shuriken | PUM | P2P
Scan options disabled: PUP
Objects scanned: 281932
Time elapsed: 15 minute(s), 4 second(s)

Memory Processes Detected: 0
(No malicious items detected)

Memory Modules Detected: 0
(No malicious items detected)

Registry Keys Detected: 0
(No malicious items detected)

Registry Values Detected: 0
(No malicious items detected)

Registry Data Items Detected: 0
(No malicious items detected)

Folders Detected: 0
(No malicious items detected)

Files Detected: 0
(No malicious items detected)

Physical Sectors Detected: 0
(No malicious items detected)

(end)

[Matthew147]

Nezapomněli jste na mě?

[vyosek]

Omlouvam se, nejak jsem ted pracovne nestihal...

Me to prijde spise na chybu HW nez virovou problematiku

[Matthew147]

a nevíte, prosím, jak bych zjistil, co mi to dělá? Podezírám grafickou kartu / zvukovku.

[vyosek]

Toto doma vemi tezko, je treba odborneho servisu a promerit napeti, vyzkouset pripadne v jinem PC...

[Matthew147]

Dobře, děkuji. Co nejdříve podniknu kroky k nápravě.

s pozdravem, Matěj.

[vyosek]

Nemate zac, kdyz se pak podelite o reseni, budu rad..