Nenabíhá WIN7, nejde udělat log RSIT

[Hynek76]

Zdravím
dva dny se mi nedaří nastartovat PC (WIN 7- 32-bit). Včera už při startu se PC kouslo, po restartu nelze spustit nouzák klávesou F8 (klávesnice je zablokovaná), naběhlo opravení systému (nejde vybrat jinou možnost, je zablokovaná klávesnice). Oprava je neúspěšná, dojde k dalšímu restartu, oprava opět neúspěšná, poté PC naběhlo normálně. Celý den běží bez problémů. Dnes PC již vůbec nenaběhlo. Zkusil jsem obnovení systému na blízký datum, které proběhlo, ale PC nejde. Další obnovení na dřívější datum neproběhlo (chybová hláška). Zkusil jsem obnovení na předposlední datum. Proběhlo ,ale PC nenaběhl. Přes příkazový řádek jsem se snažil spustit antivir, ale neúspěšně (navíc systém a vše bylo na disku D: a ne na C:).
Připojil jsem starší PC2 klávesnici a mohl jsem volit nouzák a jiné možnosti (odblokovaná klávesnice). Nouzák nenaběhl, ani jiné možnosti. Poté jsem zkusil jen spuštění systému obvyklým způsobem a kupodivu systém naběhl. Zkusil jsem vytvořit log pomocí RSIT,ale neproběhlo (chybová hláška). Dále jsem zkusil log pomocí FRST a úspěšně. Přikládám viz níže. Prosím o pomoc s dalším postupem.

Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 15-01-2014 03
Ran by HBP (administrator) on HBP-HYNEK on 17-01-2014 12:23:54
Running from C:\Users\HBP\Desktop
Microsoft Windows 7 Home Premium (X86) OS Language: Czech
Internet Explorer Version 9
Boot Mode: Normal

The only official download link for FRST:
Download link for 32-Bit version: http://www.bleepingcomputer.com/downloa ... ool/dl/81/
Download link for 64-Bit Version: http://www.bleepingcomputer.com/downloa ... ool/dl/82/
Download link from any site other than Bleeping Computer is unpermitted or outdated.
See tutorial for FRST: http://www.geekstogo.com/forum/topic/33 ... scan-tool/

==================== Processes (Whitelisted) ===================

(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
(Software602 a.s.) C:\Program Files\Common Files\soft602\602updsvc\602updsvc.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(ESET) C:\Program Files\ESET\ESET Smart Security\ekrn.exe
() C:\Program Files\Gigabyte\EasySaver\essvr.exe
(FileOpen Systems Inc.) C:\Program Files\FileOpen\Services\FileOpenManagerService32.exe
(FileOpen Systems Inc.) C:\ProgramData\FileOpen\Services\FileOpenManagerSvc32.exe
(Agito d.o.o.) C:\Program Files\Hilti\PROFIS AutoUpdate\Hilti.AutoUpdate.Service.exe
(Malwarebytes Corporation) C:\Program Files\Malwarebytes' Anti-Malware\mbamscheduler.exe
(Nero AG) C:\Program Files\Common Files\Nero\Nero BackItUp 4\NBService.exe
(Locktime Software) C:\Program Files\NetLimiter 2 Pro\nlsvc.exe
() C:\Program Files\NVIDIA Corporation\Performance Drivers\nvPDsvc.exe
(Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\Windows Live\WLIDSVC.EXE
(Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\Windows Live\WLIDSVCM.EXE
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe
(Microsoft Corporation) C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe
(InstallShield Software Corporation) C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe
(FileOpen Systems Inc.) C:\Program Files\FileOpen\Services\FileOpenBroker32.exe
(ESET) C:\Program Files\ESET\ESET Smart Security\egui.exe
(Oracle Corporation) C:\Program Files\Common Files\Java\Java Update\jusched.exe
(Hewlett-Packard) C:\Program Files\HP\HP Software Update\hpwuSchd2.exe
(Samsung Electronics Co., Ltd.) C:\Program Files\Samsung\Kies\KiesTrayAgent.exe
() C:\Program Files\Samsung\Kies\External\FirmwareUpdate\KiesPDLR.exe
(Nero AG) C:\Program Files\Common Files\Ahead\Lib\NMBgMonitor.exe
(Nero AG) C:\Program Files\Common Files\Ahead\Lib\NMIndexingService.exe
(Nero AG) C:\Program Files\Common Files\Ahead\Lib\NMIndexStoreSvr.exe
(Nokia.) C:\Program Files\PC Connectivity Solution\ServiceLayer.exe
() C:\Program Files\PC Connectivity Solution\Transports\NclUSBSrv.exe
() C:\Program Files\PC Connectivity Solution\Transports\NclRSSrv.exe
(Hewlett-Packard Co.) C:\Program Files\HP\Digital Imaging\bin\hpqste08.exe
(Hewlett-Packard Co.) C:\Program Files\HP\Digital Imaging\bin\hpqbam08.exe
(InstallShield Software Corporation) C:\Program Files\Common Files\InstallShield\UpdateService\ISUSPM.exe
(Hewlett-Packard) C:\Program Files\HP\Digital Imaging\bin\hpqgpc01.exe
(InstallShield Software Corporation) C:\Program Files\Common Files\InstallShield\UpdateService\agent.exe
(Microsoft Corporation.) C:\Program Files\Microsoft\BingBar\7.2.241.0\SeaPort.EXE
(Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe
(Mozilla Corporation) C:\Program Files\Mozilla Firefox\plugin-container.exe
(Mozilla Corporation) C:\Program Files\Mozilla Firefox\plugin-container.exe
(Adobe Systems, Inc.) C:\Windows\System32\Macromed\Flash\FlashPlayerPlugin_11_9_900_170.exe
(Adobe Systems, Inc.) C:\Windows\System32\Macromed\Flash\FlashPlayerPlugin_11_9_900_170.exe
(forum.viry.cz) C:\Users\HBP\Desktop\FRSTLauncher.exe


==================== Registry (Whitelisted) ==================

HKLM\...\Run: [RtHDVCpl] - C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe [6793760 2009-02-17] (Realtek Semiconductor)
HKLM\...\Run: [Skytel] - C:\Program Files\Realtek\Audio\HDA\Skytel.exe [1833504 2009-02-17] (Realtek Semiconductor Corp.)
HKLM\...\Run: [GrooveMonitor] - C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe [31072 2008-10-25] (Microsoft Corporation)
HKLM\...\Run: [PROFIS AutoUpdate] - C:\Program Files\Hilti\PROFIS AutoUpdate\Hilti.AutoUpdate.Tray.exe [474112 2011-10-03] (Agito d.o.o.)
HKLM\...\Run: [QuickTime Task] - C:\Program Files\QuickTime\QTTask.exe [421888 2011-07-05] (Apple Inc.)
HKLM\...\Run: [NeroFilterCheck] - C:\Program Files\Common Files\Ahead\Lib\NeroCheck.exe [153136 2007-03-09] (Nero AG)
HKLM\...\Run: [ISUSScheduler] - C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe [81920 2004-06-16] (InstallShield Software Corporation)
HKLM\...\Run: [CorelDRAW Graphics Suite 11b] - C:\Program Files\Corel\Corel Graphics 12\Languages\CZ\Programs\Registration.exe [729088 2004-06-22] (Corel Corporation)
HKLM\...\Run: [SamsungPCSuiteTrayApplication] - C:\Program Files\Samsung\Samsung PC Studio 7\LaunchApplication.exe [278016 2008-08-07] (Samsung)
HKLM\...\Run: [CloneCDTray] - C:\Program Files\SlySoft\CloneCD\CloneCDTray.exe [57344 2009-01-29] (SlySoft, Inc.)
HKLM\...\Run: [FileOpenBroker] - C:\Program Files\FileOpen\Services\FileOpenBroker32.exe [840112 2012-10-17] (FileOpen Systems Inc.)
HKLM\...\Run: [nwiz] - C:\Program Files\NVIDIA Corporation\nview\nwiz.exe [1982312 2012-10-10] ()
HKLM\...\Run: [Adobe ARM] - C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959904 2013-11-21] (Adobe Systems Incorporated)
HKLM\...\Run: [egui] - C:\Program Files\ESET\ESET Smart Security\egui.exe [5078504 2013-03-21] (ESET)
HKLM\...\Run: [SunJavaUpdateSched] - C:\Program Files\Common Files\Java\Java Update\jusched.exe [254336 2013-07-02] (Oracle Corporation)
HKLM\...\Run: [HP Software Update] - C:\Program Files\HP\HP Software Update\HPWuSchd2.exe [54840 2007-05-08] (Hewlett-Packard)
HKCU\...\Run: [DAEMON Tools Lite] - C:\Program Files\DAEMON Tools Lite\DTLite.exe [357696 2010-04-01] (DT Soft Ltd)
HKCU\...\Run: [KiesHelper] - C:\Program Files\Samsung\Kies\KiesHelper.exe [937872 2012-01-04] (Samsung)
HKCU\...\Run: [KiesTrayAgent] - C:\Program Files\Samsung\Kies\KiesTrayAgent.exe [3508624 2012-01-04] (Samsung Electronics Co., Ltd.)
HKCU\...\Run: [KiesPDLR] - C:\Program Files\Samsung\Kies\External\FirmwareUpdate\KiesPDLR.exe [21392 2012-01-04] ()
HKCU\...\Run: [Shadow] - C:\Program Files\NewTech Infosystems\NTI Shadow for ReadyNAS\Shadow.exe [677112 2008-11-20] (NewTech Infosystems, Inc.)
HKCU\...\Run: [BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] - C:\Program Files\Common Files\Ahead\Lib\NMBgMonitor.exe [153136 2007-03-12] (Nero AG)
HKCU\...\Run: [ISUSPM Startup] - C:\Program Files\Common Files\InstallShield\UpdateService\ISUSPM.exe [221184 2004-06-16] (InstallShield Software Corporation)
MountPoints2: {c44db327-ed3d-11de-9f68-806e6f6e6963} - D:\Run.exe
MountPoints2: {e6459d8f-ed42-11de-ba48-806e6f6e6963} - D:\cont32.exe data\uvod_1.ctx
Startup: C:\Users\HBP\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\setup_9.0.0.722_14.09.2011_14-28.lnk
ShortcutTarget: setup_9.0.0.722_14.09.2011_14-28.lnk -> I:\Virus Removal Tool\setup_9.0.0.722_14.09.2011_14-28\startup.exe (No File)
Startup: C:\Users\HBP\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\_uninst_47749030.lnk
ShortcutTarget: _uninst_47749030.lnk -> C:\Users\HBP\AppData\Local\Temp\_uninst_47749030.bat ()

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.centrum.cz/
URLSearchHook: HKLM - BitTorrentBar Toolbar - {88c7f2aa-f93f-432c-8f0e-b7d85967a527} - C:\Program Files\BitTorrentBar\tbBitT.dll (Conduit Ltd.)
URLSearchHook: HKCU - BitTorrentBar Toolbar - {88c7f2aa-f93f-432c-8f0e-b7d85967a527} - C:\Program Files\BitTorrentBar\tbBitT.dll (Conduit Ltd.)
SearchScopes: HKCU - DefaultScope {0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9} URL = http://search.babylon.com/?q={searchTer ... ff37c9a11c
SearchScopes: HKCU - {0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9} URL = http://search.babylon.com/?q={searchTer ... ff37c9a11c
SearchScopes: HKCU - {B23565EF-81EF-43B7-8D5A-98E109780F06} URL = http://search.seznam.cz/?q={searchTerms ... chmodule_2
BHO: HP Print Enhancer - {0347C33E-8762-4905-BF09-768834316C61} - C:\Program Files\HP\Digital Imaging\Smart Web Printing\hpswp_printenhancer.dll (Hewlett-Packard Co.)
BHO: Bing Bar Helper - {1dad3af3-ef2f-4f64-ac4b-11789189fcb6} - C:\Program Files\Microsoft\BingBar\7.2.241.0\BingExt.dll (Microsoft Corporation.)
BHO: Babylon toolbar helper - {2EECD738-5844-4a99-B4B6-146BF802613B} - C:\Program Files\BabylonToolbar\BabylonToolbar\1.5.29.1\bh\BabylonToolbar.dll (Babylon BHO)
BHO: Conduit Engine - {30F9B915-B755-4826-820B-08FBA6BD249D} - C:\Program Files\ConduitEngine\ConduitEngine.dll (Conduit Ltd.)
BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll (Microsoft Corporation)
BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO: BitTorrentBar Toolbar - {88c7f2aa-f93f-432c-8f0e-b7d85967a527} - C:\Program Files\BitTorrentBar\tbBitT.dll (Conduit Ltd.)
BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corporation)
BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
BHO: HP Smart BHO Class - {FFFFFFFF-CF4E-4F2B-BDC2-0E72E116A856} - C:\Program Files\HP\Digital Imaging\Smart Web Printing\hpswp_BHO.dll (Hewlett-Packard Co.)
Toolbar: HKLM - BitTorrentBar Toolbar - {88c7f2aa-f93f-432c-8f0e-b7d85967a527} - C:\Program Files\BitTorrentBar\tbBitT.dll (Conduit Ltd.)
Toolbar: HKLM - Conduit Engine - {30F9B915-B755-4826-820B-08FBA6BD249D} - C:\Program Files\ConduitEngine\ConduitEngine.dll (Conduit Ltd.)
Toolbar: HKLM - Babylon Toolbar - {98889811-442D-49dd-99D7-DC866BE87DBC} - C:\Program Files\BabylonToolbar\BabylonToolbar\1.5.29.1\BabylonToolbarTlbr.dll (Babylon Ltd.)
Toolbar: HKLM - Bing Bar - {eec0f710-38b5-4aba-99bf-ec87564a4e13} - C:\Program Files\Microsoft\BingBar\7.2.241.0\BingExt.dll (Microsoft Corporation.)
Toolbar: HKCU - BitTorrentBar Toolbar - {88C7F2AA-F93F-432C-8F0E-B7D85967A527} - C:\Program Files\BitTorrentBar\tbBitT.dll (Conduit Ltd.)
DPF: {672EE252-D813-4F5E-81BB-5DD163DD4FA5} https://www.mojedatovaschranka.cz/stati ... ?3,16,13,0
DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinsta ... s-i586.cab
DPF: {CAFEEFAC-0016-0000-0037-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinsta ... s-i586.cab
DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinsta ... s-i586.cab
Handler: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Program Files\Microsoft Office\Office12\GrooveSystemServices.dll (Microsoft Corporation)
Handler: leaf - {3c4a8a13-029e-430d-b8c1-46e834d20b31} - C:\Windows\system32\mscoree.dll (Microsoft Corporation)
Winsock: Catalog5 10 C:\Program Files\Bonjour\mdnsNSP.dll [152864] (Apple Inc.)
Tcpip\Parameters: [DhcpNameServer] 10.108.142.9 77.48.254.254

FireFox:
========
FF ProfilePath: C:\Users\HBP\AppData\Roaming\Mozilla\Firefox\Profiles\h5s8w9tz.default
FF user.js: detected! => C:\Users\HBP\AppData\Roaming\Mozilla\Firefox\Profiles\h5s8w9tz.default\user.js
FF Homepage: http://www.seznam.cz
FF Keyword.URL: hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT2790392&SearchSource=2&CUI=UN72200022724962880&UM=&q=
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF32_11_9_900_170.dll ()
FF Plugin: @java.com/DTPlugin,version=10.45.2 - C:\Program Files\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=10.45.2 - C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin: @microsoft.com/GENUINE - disabled No File
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files\Microsoft Silverlight\4.0.60531.0\npctrl.dll ( Microsoft Corporation)
FF Plugin: @nvidia.com/3DVision - C:\Program Files\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation)
FF Plugin: @nvidia.com/3DVisionStreaming - C:\Program Files\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation)
FF Plugin: @software602.cz/602XML Filler - C:\Program Files\Software602\602XML\Filler\npfiller.dll (Software602 a.s.)
FF Plugin: @tools.google.com/Google Update;version=3 - C:\Program Files\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.)
FF Plugin: @tools.google.com/Google Update;version=9 - C:\Program Files\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.)
FF Plugin: Adobe Reader - C:\Program Files\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\np-mswmp.dll (Microsoft Corporation)
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\nppdf32.dll (Adobe Systems Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\npqtplugin.dll (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\npqtplugin2.dll (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\npqtplugin3.dll (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\npqtplugin4.dll (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\npqtplugin5.dll (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\npqtplugin6.dll (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\npqtplugin7.dll (Apple Inc.)
FF SearchPlugin: C:\Users\HBP\AppData\Roaming\Mozilla\Firefox\Profiles\h5s8w9tz.default\searchplugins\conduit.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\searchplugins\babylon.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\heureka-cz.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\jyxo-cz.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\seznam-cz.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\slunecnice-cz.xml
FF Extension: Qualys BrowserCheck - C:\Users\HBP\AppData\Roaming\Mozilla\Firefox\Profiles\h5s8w9tz.default\Extensions\{7D2FB79E-E58C-4DB5-A36F-AC1C73967F4D} [2012-11-15]
FF Extension: BitTorrentBar - C:\Users\HBP\AppData\Roaming\Mozilla\Firefox\Profiles\h5s8w9tz.default\Extensions\{88c7f2aa-f93f-432c-8f0e-b7d85967a527} [2013-12-20]
FF Extension: FoxLingo - C:\Users\HBP\AppData\Roaming\Mozilla\Firefox\Profiles\h5s8w9tz.default\Extensions\{ef62e1ce-d2a4-4cdd-b7ec-92b120366b66} [2012-11-12]
FF Extension: Java Console - C:\Program Files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0033-ABCDEFFEDCBA} [2013-12-20]
FF Extension: Java Console - C:\Program Files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0035-ABCDEFFEDCBA} [2013-12-20]
FF Extension: Java Console - C:\Program Files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0037-ABCDEFFEDCBA} [2013-12-20]
FF HKLM\...\Firefox\Extensions: [smartwebprinting@hp.com] - C:\Program Files\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3
FF Extension: HP Smart Web Printing - C:\Program Files\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3 [2013-10-21]
FF HKLM\...\Thunderbird\Extensions: [eplgTb@eset.com] - C:\Program Files\ESET\ESET Smart Security\Mozilla Thunderbird
FF Extension: ESET Smart Security Extension - C:\Program Files\ESET\ESET Smart Security\Mozilla Thunderbird [2013-08-20]
FF HKCU\...\Firefox\Extensions: [smartwebprinting@hp.com] - C:\Program Files\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3
FF Extension: HP Smart Web Printing - C:\Program Files\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3 [2013-10-21]

Chrome:
=======
CHR HomePage: hxxp://www.google.com
CHR RestoreOnStartup: "hxxp://www.google.com"
CHR Extension: (Docs) - C:\Users\HBP\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.0.0.6_0 [2013-05-28]
CHR Extension: (Babylon Toolbar) - C:\Users\HBP\AppData\Local\Google\Chrome\User Data\Default\Extensions\dhkplhfnhceodhffomolpfigojocbpcb\1.7_0 [2013-07-15]
CHR HKLM\...\Chrome\Extension: [dhkplhfnhceodhffomolpfigojocbpcb] - C:\Users\HBP\AppData\Roaming\BabylonToolbar\CR\BabylonChrome1.crx [2012-06-27]

========================== Services (Whitelisted) =================

R2 602XML Updater; C:\Program Files\Common Files\soft602\602updsvc\602updsvc.exe [84520 2011-03-14] (Software602 a.s.)
R2 ekrn; C:\Program Files\ESET\ESET Smart Security\ekrn.exe [1341664 2013-03-21] (ESET)
R2 ES lite Service; C:\Program Files\Gigabyte\EasySaver\ESSVR.EXE [68136 2008-12-24] ()
R2 FileOpenManagerService; C:\Program Files\FileOpen\Services\FileOpenManagerService32.exe [213432 2012-10-17] (FileOpen Systems Inc.)
R2 FileOpenManagerSvc; C:\ProgramData\FileOpen\Services\FileOpenManagerSvc32.exe [211840 2011-04-18] (FileOpen Systems Inc.)
R2 Hilti PROFIS AutoUpdate Service; C:\Program Files\Hilti\PROFIS AutoUpdate\Hilti.AutoUpdate.Service.exe [206336 2011-10-03] (Agito d.o.o.)
R2 MBAMScheduler; C:\Program Files\Malwarebytes' Anti-Malware\mbamscheduler.exe [418376 2013-04-04] (Malwarebytes Corporation)
S2 MBAMService; C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe [701512 2013-04-04] (Malwarebytes Corporation)
R2 nlsvc; C:\Program Files\NetLimiter 2 Pro\nlsvc.exe [516096 2010-03-16] (Locktime Software)
R2 NVIDIA Performance Driver Service; C:\Program Files\NVIDIA Corporation\Performance Drivers\nvPDsvc.exe [5233256 2009-10-27] ()

==================== Drivers (Whitelisted) ====================

R1 61626121; C:\Windows\System32\DRIVERS\61626121.sys [128016 2009-09-25] (Kaspersky Lab)
R0 61626122; C:\Windows\System32\DRIVERS\61626122.sys [37392 2009-10-22] (Kaspersky Lab)
R1 eamonm; C:\Windows\System32\DRIVERS\eamonm.sys [171680 2013-02-14] (ESET)
R1 ehdrv; C:\Windows\System32\DRIVERS\ehdrv.sys [122240 2013-01-10] (ESET)
R3 ElbyCDFL; C:\Windows\System32\Drivers\ElbyCDFL.sys [34760 2007-02-16] (SlySoft, Inc.)
R1 ElbyCDIO; C:\Windows\System32\Drivers\ElbyCDIO.sys [24232 2009-02-17] (Elaborate Bytes AG)
S3 ENTECH; C:\Windows\system32\DRIVERS\ENTECH.sys [21664 2004-10-25] (EnTech Taiwan)
R2 epfw; C:\Windows\System32\DRIVERS\epfw.sys [150080 2013-01-10] (ESET)
R1 EpfwLWF; C:\Windows\System32\DRIVERS\EpfwLWF.sys [46056 2013-01-10] (ESET)
R0 epfwwfp; C:\Windows\System32\DRIVERS\epfwwfp.sys [47568 2013-02-14] (ESET)
R3 Fwleaf; C:\Windows\System32\DRIVERS\fwleaf.sys [22848 2011-05-31] (NETGEAR)
R3 gdrv; C:\Windows\gdrv.sys [16608 2014-01-17] (Windows (R) 2000 DDK provider)
R3 leafnets; C:\Windows\System32\DRIVERS\leafnets.sys [55296 2011-05-26] (Leaf Networks)
R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [22856 2013-04-04] (Malwarebytes Corporation)
S3 MBAMSwissArmy; C:\Windows\system32\drivers\mbamswissarmy.sys [40776 2014-01-09] (Malwarebytes Corporation)
R1 nltdi; C:\Windows\system32\drivers\nltdi.sys [82872 2010-03-16] (Locktime Software)
R3 pfc; C:\Windows\System32\drivers\pfc.sys [9856 2011-09-30] (Padus, Inc.)
R1 setup_9.0.0.722_14.09.2011_14-28drv; C:\Windows\System32\DRIVERS\6162612.sys [311312 2009-10-09] (Kaspersky Lab)
R0 sptd; C:\Windows\System32\Drivers\sptd.sys [691696 2010-11-02] ()
S3 ssm_bus; C:\Windows\System32\DRIVERS\ssm_bus.sys [104448 2011-12-08] (MCCI Corporation)
S3 ssm_mdfl; C:\Windows\System32\DRIVERS\ssm_mdfl.sys [14848 2011-12-08] (MCCI Corporation)
S3 ssm_mdm; C:\Windows\System32\DRIVERS\ssm_mdm.sys [132608 2011-12-08] (MCCI Corporation)
U3 a408ljew; C:\Windows\System32\Drivers\a408ljew.sys [0 ] (Microsoft Corporation)
S3 WPRO_41_1742; system32\drivers\WPRO_41_1742.sys [x]

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2014-01-17 12:23 - 2014-01-17 12:24 - 00020894 _____ C:\Users\HBP\Desktop\FRST.txt
2014-01-17 12:23 - 2014-01-17 12:23 - 00000000 ____D C:\FRST
2014-01-17 12:22 - 2014-01-17 12:22 - 00112640 _____ (forum.viry.cz) C:\Users\HBP\Desktop\FRSTLauncher.exe
2014-01-17 12:20 - 2014-01-17 12:21 - 01221120 _____ (Farbar) C:\Users\HBP\Desktop\FRST.exe
2014-01-17 12:18 - 2014-01-17 12:20 - 00000000 ____D C:\Program Files\trend micro
2014-01-17 12:18 - 2014-01-17 12:18 - 00000000 ____D C:\rsit
2014-01-17 11:35 - 2013-06-28 13:37 - 173532592 _____ C:\Users\HBP\Desktop\setup_11.0.0.1245.x01_2013_06_28_14_12.exe
2014-01-16 09:51 - 2014-01-16 10:30 - 00000000 ____D C:\Users\Public\chřešťovice
2014-01-07 08:12 - 2014-01-09 12:38 - 00040776 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamswissarmy.sys
2013-12-20 13:34 - 2013-12-20 13:34 - 00000000 ____D C:\Program Files\Mozilla Firefox
2013-12-20 08:38 - 2013-12-20 08:38 - 107187312 _____ C:\Users\HBP\Downloads\PPO Svinetice_DUR.zip

==================== One Month Modified Files and Folders =======

2014-01-17 12:24 - 2014-01-17 12:23 - 00020894 _____ C:\Users\HBP\Desktop\FRST.txt
2014-01-17 12:23 - 2014-01-17 12:23 - 00000000 ____D C:\FRST
2014-01-17 12:22 - 2014-01-17 12:22 - 00112640 _____ (forum.viry.cz) C:\Users\HBP\Desktop\FRSTLauncher.exe
2014-01-17 12:21 - 2014-01-17 12:20 - 01221120 _____ (Farbar) C:\Users\HBP\Desktop\FRST.exe
2014-01-17 12:20 - 2014-01-17 12:18 - 00000000 ____D C:\Program Files\trend micro
2014-01-17 12:20 - 2010-11-04 09:06 - 00000000 ____D C:\Users\HBP\Desktop\Install
2014-01-17 12:18 - 2014-01-17 12:18 - 00000000 ____D C:\rsit
2014-01-17 12:12 - 2012-04-06 09:42 - 00000914 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2014-01-17 12:04 - 2013-10-14 12:54 - 00000940 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA1cec8d42b008780.job
2014-01-17 11:44 - 2009-12-20 09:03 - 01506338 _____ C:\Windows\WindowsUpdate.log
2014-01-17 11:37 - 2011-09-14 12:15 - 00000000 ____D C:\ProgramData\Kaspersky Lab
2014-01-17 11:37 - 2009-12-20 09:10 - 01478982 _____ C:\Windows\system32\PerfStringBackup.INI
2014-01-17 11:34 - 2009-07-14 05:34 - 00015024 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-01-17 11:34 - 2009-07-14 05:34 - 00015024 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-01-17 11:27 - 2011-09-05 11:59 - 00000930 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2014-01-17 11:27 - 2009-12-20 09:11 - 00000126 _____ C:\service.log
2014-01-17 11:26 - 2013-07-15 06:58 - 00007228 _____ C:\Windows\setupact.log
2014-01-17 11:26 - 2009-12-20 09:21 - 00000000 ____D C:\ProgramData\NVIDIA
2014-01-17 11:26 - 2009-12-20 09:17 - 00016608 _____ (Windows (R) 2000 DDK provider) C:\Windows\gdrv.sys
2014-01-17 11:26 - 2009-12-20 09:06 - 00000000 ____D C:\Users\HBP
2014-01-17 11:26 - 2009-07-14 05:53 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2014-01-17 11:10 - 2011-09-21 08:26 - 00000000 ____D C:\ProgramData\InstallShield
2014-01-17 11:10 - 2011-06-21 12:17 - 00000000 ____D C:\ProgramData\FLEXnet
2014-01-17 11:10 - 2011-05-09 13:00 - 00000000 ____D C:\ProgramData\HP
2014-01-17 11:10 - 2010-11-04 12:36 - 00000000 ____D C:\Users\HBP\AppData\Roaming\GHISLER
2014-01-17 11:10 - 2010-11-04 09:08 - 00000000 ____D C:\Program Files\CCleaner
2014-01-17 11:10 - 2009-07-14 03:37 - 00000000 ____D C:\Windows\system32\wfp
2014-01-17 11:10 - 2009-07-14 03:37 - 00000000 ____D C:\Windows\AppCompat
2014-01-17 11:09 - 2009-07-14 03:37 - 00000000 ____D C:\Windows\registration
2014-01-17 11:08 - 2009-07-14 03:37 - 00000000 ___RD C:\Users\Public
2014-01-17 11:06 - 2011-05-09 12:05 - 00000000 ____D C:\Program Files\Common Files\Adobe
2014-01-17 11:06 - 2010-11-30 11:19 - 00000000 ____D C:\Akce HBP
2014-01-16 10:53 - 2011-06-29 10:16 - 00000000 ____D C:\Users\HBP\Desktop\Nová složka
2014-01-16 10:30 - 2014-01-16 09:51 - 00000000 ____D C:\Users\Public\chřešťovice
2014-01-15 14:53 - 2013-07-16 11:49 - 00000000 ____D C:\Windows\system32\MRT
2014-01-09 12:46 - 2011-06-09 10:05 - 00000000 ____D C:\Users\HBP\Desktop\Datovka
2014-01-09 12:38 - 2014-01-07 08:12 - 00040776 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamswissarmy.sys
2014-01-06 15:52 - 2012-03-30 13:13 - 00000000 ____D C:\Users\HBP\Desktop\Nová složka (3)
2014-01-03 13:45 - 2011-02-04 09:07 - 00000000 ____D C:\Users\HBP\AppData\Roaming\BitTorrent
2014-01-02 08:08 - 2012-04-30 06:42 - 00000000 ____D C:\Program Files\Mozilla Maintenance Service
2013-12-20 13:34 - 2013-12-20 13:34 - 00000000 ____D C:\Program Files\Mozilla Firefox
2013-12-20 12:50 - 2011-06-10 08:33 - 02656768 ___SH C:\Users\Public\Thumbs.db
2013-12-20 08:38 - 2013-12-20 08:38 - 107187312 _____ C:\Users\HBP\Downloads\PPO Svinetice_DUR.zip

Files to move or delete:
====================
C:\Windows\System32\mctadmin.exe


Some content of TEMP:
====================
C:\Users\HBP\AppData\Local\Temp\InstHelper.exe
C:\Users\HBP\AppData\Local\Temp\jre-7u45-windows-i586-iftw.exe
C:\Users\HBP\AppData\Local\Temp\KMP_3.6.0.87.exe


==================== Bamital & volsnap Check =================

C:\Windows\explorer.exe => MD5 is legit
C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\System32\rpcss.dll => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit


LastRegBack: 2014-01-10 11:04




===***===***===***=== Extract of Additional scan result of Farbar Recovery Scan Tool ===***===***===***===

==================== Drive and Memory info ===================

Drive c: () (Fixed) (Total:465.66 GB) (Free:74.86 GB) NTFS
Drive h: () (Removable) (Total:1.97 GB) (Free:1.81 GB) FAT

Available physical RAM: 1590.64 MB
Total physical RAM: 3582.55 MB
Percentage of memory in use: 55%

==================== MBR and Partition Table ==================

Disk: 0 (MBR Code: Windows 7 or 8) (Size: 466 GB) (Disk ID: 809F258B)
Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=466 GB) - (Type=07 NTFS)
Disk: 2 (Size: 2 GB) (Disk ID: 008A8C58)
Partition 1: (Active) - (Size=2 GB) - (Type=06)

==================== Scheduled Tasks (whitelisted) ==================

Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA1cec8d42b008780.job => C:\Program Files\Google\Update\GoogleUpdate.exe

==================== Alternate Data Streams (whitelisted) ==================

AlternateDataStreams: C:\Windows:D8C70D5FCA04E210

==================== Security Center ==================

AV: ESET Smart Security 6.0 (Enabled - Up to date) {77DEAFED-8149-104B-25A1-21771CA47CD1}
AS: ESET Smart Security 6.0 (Enabled - Up to date) {CCBF4E09-A773-1FC5-1F11-1A056723366C}
AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
FW: ESET personal firewall (Enabled) {4FE52EC8-CB26-1113-0EFE-8842E2773BAA}



===***===***===***=== Supplementary Scan createdy by FRSTLauncher ===***===***===***===
Posledni aktualizace FRSTLauncheru: 25_11_2013 (01)
Posledni aktualizace Modifikacniho skriptu: 30_09_2013 (01)


***** Velikost "Plochy" *****

Velikost slozky "C:\Users\HBP\Desktop" je 194599 MB.


***** Startup Programs *****


***** Firewall rules *****

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
DisableNotifications REG_DWORD 0x0
EnableFirewall REG_DWORD 0x1

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
DisableNotifications REG_DWORD 0x0
EnableFirewall REG_DWORD 0x1

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\GloballyOpenPorts\List]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\GloballyOpenPorts\List]


***** System Restore *****

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SystemRestore]
"Generalize_DisableSR"=dword:00000000


==================== End Of Log ==============================

[Rudy]

Zdravím. PC potřebuje vyčistit. Hlavní problém ale bude asi někde jinde. Otevřte poznámkový blok a zkopírujte do něj:

Start
HKLM\...\Run: [SunJavaUpdateSched] - C:\Program Files\Common Files\Java\Java Update\jusched.exe [254336 2013-07-02] (Oracle Corporation)
MountPoints2: {c44db327-ed3d-11de-9f68-806e6f6e6963} - D:\Run.exe
MountPoints2: {e6459d8f-ed42-11de-ba48-806e6f6e6963} - D:\cont32.exe data\uvod_1.ctx
Startup: C:\Users\HBP\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\setup_9.0.0.722_14.09.2011_14-28.lnk
ShortcutTarget: setup_9.0.0.722_14.09.2011_14-28.lnk -> I:\Virus Removal Tool\setup_9.0.0.722_14.09.2011_14-28\startup.exe (No File)
Startup: C:\Users\HBP\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\_uninst_47749030.lnk
ShortcutTarget: _uninst_47749030.lnk -> C:\Users\HBP\AppData\Local\Temp\_uninst_47749030.bat ()
SearchScopes: HKCU - DefaultScope {0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9} URL = http://search.babylon.com/?q={searchTer ... ff37c9a11c
SearchScopes: HKCU - {0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9} URL = http://search.babylon.com/?q={searchTer ... ff37c9a11c
BHO: Bing Bar Helper - {1dad3af3-ef2f-4f64-ac4b-11789189fcb6} - C:\Program Files\Microsoft\BingBar\7.2.241.0\BingExt.dll (Microsoft Corporation.)
BHO: Babylon toolbar helper - {2EECD738-5844-4a99-B4B6-146BF802613B} - C:\Program Files\BabylonToolbar\BabylonToolbar\1.5.29.1\bh\BabylonToolbar.dll (Babylon BHO)
BHO: Conduit Engine - {30F9B915-B755-4826-820B-08FBA6BD249D} - C:\Program Files\ConduitEngine\ConduitEngine.dll (Conduit Ltd.)
Toolbar: HKLM - Conduit Engine - {30F9B915-B755-4826-820B-08FBA6BD249D} - C:\Program Files\ConduitEngine\ConduitEngine.dll (Conduit Ltd.)
Toolbar: HKLM - Babylon Toolbar - {98889811-442D-49dd-99D7-DC866BE87DBC} - C:\Program Files\BabylonToolbar\BabylonToolbar\1.5.29.1\BabylonToolbarTlbr.dll (Babylon Ltd.)
Toolbar: HKLM - Bing Bar - {eec0f710-38b5-4aba-99bf-ec87564a4e13} - C:\Program Files\Microsoft\BingBar\7.2.241.0\BingExt.dll (Microsoft Corporation.)
Toolbar: HKCU - BitTorrentBar Toolbar - {88C7F2AA-F93F-432C-8F0E-B7D85967A527} - C:\Program Files\BitTorrentBar\tbBitT.dll (Conduit Ltd.)
Handler: leaf - {3c4a8a13-029e-430d-b8c1-46e834d20b31} - C:\Windows\system32\mscoree.dll (Microsoft Corporation)
FF ProfilePath: C:\Users\HBP\AppData\Roaming\Mozilla\Firefox\Profiles\h5s8w9tz.default
FF Keyword.URL: hxxp://search.conduit.com/ResultsExt.as ... 880&UM=&q=
FF Plugin: @microsoft.com/GENUINE - disabled No File
FF Extension: BitTorrentBar - C:\Users\HBP\AppData\Roaming\Mozilla\Firefox\Profiles\h5s8w9tz.default\Extensions\{88c7f2aa-f93f-432c-8f0e-b7d85967a527} [2013-12-20]
FF Extension: FoxLingo - C:\Users\HBP\AppData\Roaming\Mozilla\Firefox\Profiles\h5s8w9tz.default\Extensions\{ef62e1ce-d2a4-4cdd-b7ec-92b120366b66} [2012-11-12]
CHR Extension: (Babylon Toolbar) - C:\Users\HBP\AppData\Local\Google\Chrome\User Data\Default\Extensions\dhkplhfnhceodhffomolpfigojocbpcb\1.7_0 [2013-07-15]
CHR HKLM\...\Chrome\Extension: [dhkplhfnhceodhffomolpfigojocbpcb] - C:\Users\HBP\AppData\Roaming\BabylonToolbar\CR\BabylonChrome1.crx [2012-06-27]
R3 leafnets; C:\Windows\System32\DRIVERS\leafnets.sys [55296 2011-05-26] (Leaf Networks)
S3 WPRO_41_1742; system32\drivers\WPRO_41_1742.sys [x]
C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
AlternateDataStreams: C:\Windows:D8C70D5FCA04E210
End

Uložte na plochu jako fixlist.txt. Spusťte znovu FRST a klikněte na >Fix<. Po skončení akce se objeví log, který sem zkopírujte.

[Hynek76]

Problém jinde znamená hardwarový problém? Je pravda, že před cca 1,5 rokem jsem musel měnit jednu paměť.
Tady je požadovaný log.


Fix result of Farbar Recovery Tool (FRST written by Farbar) (x86) Version: 17-01-2014 03
Ran by HBP at 2014-01-18 17:00:12 Run:1
Running from C:\Users\HBP\Desktop
Boot Mode: Normal

==============================================

Content of fixlist:
*****************
Start
HKLM\...\Run: [SunJavaUpdateSched] - C:\Program Files\Common Files\Java\Java Update\jusched.exe [254336 2013-07-02] (Oracle Corporation)
MountPoints2: {c44db327-ed3d-11de-9f68-806e6f6e6963} - D:\Run.exe
MountPoints2: {e6459d8f-ed42-11de-ba48-806e6f6e6963} - D:\cont32.exe data\uvod_1.ctx
Startup: C:\Users\HBP\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\setup_9.0.0.722_14.09.2011_14-28.lnk
ShortcutTarget: setup_9.0.0.722_14.09.2011_14-28.lnk -> I:\Virus Removal Tool\setup_9.0.0.722_14.09.2011_14-28\startup.exe (No File)
Startup: C:\Users\HBP\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\_uninst_47749030.lnk
ShortcutTarget: _uninst_47749030.lnk -> C:\Users\HBP\AppData\Local\Temp\_uninst_47749030.bat ()
SearchScopes: HKCU - DefaultScope {0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9} URL = http://search.babylon.com/?q={searchTer ... ff37c9a11c
SearchScopes: HKCU - {0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9} URL = http://search.babylon.com/?q={searchTer ... ff37c9a11c
BHO: Bing Bar Helper - {1dad3af3-ef2f-4f64-ac4b-11789189fcb6} - C:\Program Files\Microsoft\BingBar\7.2.241.0\BingExt.dll (Microsoft Corporation.)
BHO: Babylon toolbar helper - {2EECD738-5844-4a99-B4B6-146BF802613B} - C:\Program Files\BabylonToolbar\BabylonToolbar\1.5.29.1\bh\BabylonToolbar.dll (Babylon BHO)
BHO: Conduit Engine - {30F9B915-B755-4826-820B-08FBA6BD249D} - C:\Program Files\ConduitEngine\ConduitEngine.dll (Conduit Ltd.)
Toolbar: HKLM - Conduit Engine - {30F9B915-B755-4826-820B-08FBA6BD249D} - C:\Program Files\ConduitEngine\ConduitEngine.dll (Conduit Ltd.)
Toolbar: HKLM - Babylon Toolbar - {98889811-442D-49dd-99D7-DC866BE87DBC} - C:\Program Files\BabylonToolbar\BabylonToolbar\1.5.29.1\BabylonToolbarTlbr.dll (Babylon Ltd.)
Toolbar: HKLM - Bing Bar - {eec0f710-38b5-4aba-99bf-ec87564a4e13} - C:\Program Files\Microsoft\BingBar\7.2.241.0\BingExt.dll (Microsoft Corporation.)
Toolbar: HKCU - BitTorrentBar Toolbar - {88C7F2AA-F93F-432C-8F0E-B7D85967A527} - C:\Program Files\BitTorrentBar\tbBitT.dll (Conduit Ltd.)
Handler: leaf - {3c4a8a13-029e-430d-b8c1-46e834d20b31} - C:\Windows\system32\mscoree.dll (Microsoft Corporation)
FF ProfilePath: C:\Users\HBP\AppData\Roaming\Mozilla\Firefox\Profiles\h5s8w9tz.default
FF Keyword.URL: hxxp://search.conduit.com/ResultsExt.as ... 880&UM=&q=
FF Plugin: @microsoft.com/GENUINE - disabled No File
FF Extension: BitTorrentBar - C:\Users\HBP\AppData\Roaming\Mozilla\Firefox\Profiles\h5s8w9tz.default\Extensions\{88c7f2aa-f93f-432c-8f0e-b7d85967a527} [2013-12-20]
FF Extension: FoxLingo - C:\Users\HBP\AppData\Roaming\Mozilla\Firefox\Profiles\h5s8w9tz.default\Extensions\{ef62e1ce-d2a4-4cdd-b7ec-92b120366b66} [2012-11-12]
CHR Extension: (Babylon Toolbar) - C:\Users\HBP\AppData\Local\Google\Chrome\User Data\Default\Extensions\dhkplhfnhceodhffomolpfigojocbpcb\1.7_0 [2013-07-15]
CHR HKLM\...\Chrome\Extension: [dhkplhfnhceodhffomolpfigojocbpcb] - C:\Users\HBP\AppData\Roaming\BabylonToolbar\CR\BabylonChrome1.crx [2012-06-27]
R3 leafnets; C:\Windows\System32\DRIVERS\leafnets.sys [55296 2011-05-26] (Leaf Networks)
S3 WPRO_41_1742; system32\drivers\WPRO_41_1742.sys [x]
C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
AlternateDataStreams: C:\Windows:D8C70D5FCA04E210
End
*****************

HKLM\Software\Microsoft\Windows\CurrentVersion\Run\\SunJavaUpdateSched => Value deleted successfully.
HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{c44db327-ed3d-11de-9f68-806e6f6e6963} => Key deleted successfully.
HKCR\CLSID\{c44db327-ed3d-11de-9f68-806e6f6e6963} => Key not found.
HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{e6459d8f-ed42-11de-ba48-806e6f6e6963} => Key deleted successfully.
HKCR\CLSID\{e6459d8f-ed42-11de-ba48-806e6f6e6963} => Key not found.
C:\Users\HBP\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\setup_9.0.0.722_14.09.2011_14-28.lnk => Moved successfully.
I:\Virus Removal Tool\setup_9.0.0.722_14.09.2011_14-28\startup.exe not found.
C:\Users\HBP\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\_uninst_47749030.lnk => Moved successfully.
C:\Users\HBP\AppData\Local\Temp\_uninst_47749030.bat => Moved successfully.
HKCU\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope => Value deleted successfully.
HKCU\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9} => Key deleted successfully.
HKCR\Wow6432Node\CLSID\{0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9} => Key not found.
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{1dad3af3-ef2f-4f64-ac4b-11789189fcb6} => Key deleted successfully.
HKCR\CLSID\{1dad3af3-ef2f-4f64-ac4b-11789189fcb6} => Key deleted successfully.
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{2EECD738-5844-4a99-B4B6-146BF802613B} => Key deleted successfully.
HKCR\CLSID\{2EECD738-5844-4a99-B4B6-146BF802613B} => Key deleted successfully.
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{30F9B915-B755-4826-820B-08FBA6BD249D} => Key deleted successfully.
HKCR\CLSID\{30F9B915-B755-4826-820B-08FBA6BD249D} => Key deleted successfully.
HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar\\{30F9B915-B755-4826-820B-08FBA6BD249D} => Value deleted successfully.
HKCR\CLSID\{30F9B915-B755-4826-820B-08FBA6BD249D} => Key not found.
HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar\\{98889811-442D-49dd-99D7-DC866BE87DBC} => Value deleted successfully.
HKCR\CLSID\{98889811-442D-49dd-99D7-DC866BE87DBC} => Key deleted successfully.
HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar\\{eec0f710-38b5-4aba-99bf-ec87564a4e13} => Value deleted successfully.
HKCR\CLSID\{eec0f710-38b5-4aba-99bf-ec87564a4e13} => Key deleted successfully.
HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\\{88C7F2AA-F93F-432C-8F0E-B7D85967A527} => Value deleted successfully.
HKCR\CLSID\{88C7F2AA-F93F-432C-8F0E-B7D85967A527} => Key deleted successfully.
HKCR\PROTOCOLS\Handler\leaf => Key deleted successfully.
HKCR\CLSID\{3c4a8a13-029e-430d-b8c1-46e834d20b31} => Key deleted successfully.
C:\Users\HBP\AppData\Local\Temp\_uninst_47749030.bat => Should not be moved.
Firefox Keyword.URL deleted successfully.
HKLM\Software\MozillaPlugins\FF Plugin: @microsoft.com/GENUINE - disabled No File => Key not found.
FF Plugin: @microsoft.com/GENUINE - disabled No File not found.
C:\Users\HBP\AppData\Roaming\Mozilla\Firefox\Profiles\h5s8w9tz.default\Extensions\{88c7f2aa-f93f-432c-8f0e-b7d85967a527} => Moved successfully.
C:\Users\HBP\AppData\Roaming\Mozilla\Firefox\Profiles\h5s8w9tz.default\Extensions\{ef62e1ce-d2a4-4cdd-b7ec-92b120366b66} => Moved successfully.
C:\Users\HBP\AppData\Local\Google\Chrome\User Data\Default\Extensions\dhkplhfnhceodhffomolpfigojocbpcb => Moved successfully.
HKLM\SOFTWARE\Google\Chrome\Extensions\dhkplhfnhceodhffomolpfigojocbpcb => Key deleted successfully.
C:\Users\HBP\AppData\Roaming\BabylonToolbar\CR\BabylonChrome1.crx => Moved successfully.
leafnets => Service deleted successfully.
WPRO_41_1742 => Service deleted successfully.
C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => Moved successfully.
C:\Windows => ":D8C70D5FCA04E210" ADS removed successfully.


The system needs a manual reboot.

==== End of Fixlog ====

[Rudy]

Smazáno. Nastala nějaká změna?

[Hynek76]

Jde vyčistit temp, je zase možno stahovat.
Zkusím restart a uvidím jestli naběhne.
Ozvu se. Zatím děkuji moc.

[Rudy]

Zatím není zač.

[Hynek76]

Tak jsem se pokusil o restart a PC nenaběhlo ať jsem zkoušel co se dá.
Jediný co může, že po neúspěšné opravě je možnost aktivovat příkazový řádek.
Nic víc.

[Rudy]

Na základě poznatků, které máme , nelze jednozančně tvrdit, jestli je probém v sw, nebo hw. Pokuste se o opravu z instal média: http://forum.viry.cz/viewtopic.php?f=46&t=106339 .

[Hynek76]

Zkusím ho najít, případně si ho zítra půjčím.
Dám vědět jak jsem dopadl.

[Rudy]

Zkusím ho najít, případně si ho zítra půjčím.
Dám vědět jak jsem dopadl.

OK. Máte-li legální OS, měl byste instalačku mít.

[Hynek76]

To mám, jen nevím kde

[Rudy]

Aha.

[Hynek76]

Tak jsem zkoušel opravit z CD. Několikrát a bohužel neúspěšně.
Zajímavé je, že proběhne oprava a vyskočí hláška nelze opravit. Dám opětovně opravit a hláška zní "Nástroj Oprava spouštění systému nezjistil žádný problém".

[Rudy]

Pak už není jiná možnost, než reinstal systému.

[Hynek76]

Zkoušel jsem pomocí Hiren's Boot otestovat hard disk, ale disk nebyl nalezen. Je možné, že odešel řadič na desce.
Zkusím vytahat data a reinstal.