Nefunkční plocha po přihlášení, nejde nic spustit

[romandude]

Zdravim,

bojuji s nasledujicim problemem. Po prihlaseni, cca po 30 vterinach, se zasekne plocha a spodni lista. Zadnou ikonku nejde spustit, ani tlacitko start...nic nereaguje. Kurzor mysi se pohybuje.
Da se dostat do nouzoveho rezimu, z tohoto rezimu posilam log FRST. Dekuji za kontrolu.

Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 27-05-2015 01
Ran by Kunčický (administrator) on NOTEBOOK on 28-05-2015 07:44:49
Running from C:\Users\Kunčický\Desktop
Loaded Profiles: Kunčický (Available Profiles: Kunčický)
Platform: Microsoft® Windows Vista™ Home Premium Service Pack 2 (X86) OS Language: Čeština (Česká republika)
Internet Explorer Version 9 (Default browser: Chrome)
Boot Mode: Safe Mode (with Networking)
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/33 ... scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(Microsoft Corporation) C:\Windows\System32\wbem\unsecapp.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(forum.viry.cz) C:\Users\Kunčický\Desktop\FRSTLauncher.exe


==================== Registry (Whitelisted) ==================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [RtHDVCpl] => C:\Windows\RtHDVCpl.exe [6111232 2008-04-28] (Realtek Semiconductor)
HKLM\...\Run: [SynTPEnh] => C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [1033512 2008-01-18] (Synaptics, Inc.)
HKLM\...\Run: [NvCplDaemon] => RUNDLL32.EXE C:\Windows\system32\NvCpl.dll,NvStartup
HKLM\...\Run: [Adobe ARM] => C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [1022152 2014-12-19] (Adobe Systems Incorporated)
HKU\S-1-5-21-2426412839-1013230657-2555303696-1000\...\Run: [Skype] => C:\Program Files\Skype\Phone\Skype.exe [30877280 2014-12-11] (Skype Technologies S.A.)

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer: Policy restriction <======= ATTENTION
HKU\S-1-5-21-2426412839-1013230657-2555303696-1000\SOFTWARE\Policies\Microsoft\Internet Explorer: Policy restriction <======= ATTENTION
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://homepage.acer.com/rdr.aspx?b=ACA ... pire_7730g
HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.microsoft.com/isapi/redir.dl ... r=iesearch
HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.microsoft.com/isapi/redir.dl ... ar=msnhome
HKU\S-1-5-21-2426412839-1013230657-2555303696-1000\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.microsoft.com/isapi/redir.dl ... r=iesearch
HKU\S-1-5-21-2426412839-1013230657-2555303696-1000\Software\Microsoft\Internet Explorer\Main,Default_Secondary_Page_URL = http://global.acer.com
HKU\S-1-5-21-2426412839-1013230657-2555303696-1000\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.google.com/ie
SearchScopes: HKLM -> DefaultScope {67A2568C-7A0A-4EED-AECC-B5405DE63B64} URL = http://www.google.com/search?sourceid=i ... lz=1I7ACAW
SearchScopes: HKLM -> {67A2568C-7A0A-4EED-AECC-B5405DE63B64} URL = http://www.google.com/search?sourceid=i ... lz=1I7ACAW
SearchScopes: HKU\S-1-5-21-2426412839-1013230657-2555303696-1000 -> {67A2568C-7A0A-4EED-AECC-B5405DE63B64} URL = http://www.google.com/search?sourceid=i ... lz=1I7ACAW
BHO: No Name -> {02478D38-C3F9-4efb-9B51-7695ECA05670} -> No File
BHO: Groove GFS Browser Helper -> {72853161-30C5-4D22-B7F9-0BBC1D38A37E} -> C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll [2009-02-26] (Microsoft Corporation)
BHO: No Name -> {83A2F9B1-01A2-4AA5-87D1-45B6B8505E96} -> No File
BHO: Skype Browser Helper -> {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} -> C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll [2013-05-14] (Skype Technologies S.A.)
Toolbar: HKU\S-1-5-21-2426412839-1013230657-2555303696-1000 -> No Name - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - No File
DPF: {7530BFB8-7293-4D34-9923-61A11451AFC5} http://download.eset.com/special/eos/OnlineScanner.cab
Handler: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Program Files\Microsoft Office\Office12\GrooveSystemServices.dll [2009-02-26] (Microsoft Corporation)
Handler: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll [2013-05-14] (Skype Technologies S.A.)
Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files\Common Files\Skype\Skype4COM.dll [2014-05-02] (Skype Technologies)
Winsock: Catalog5 000000000002 C:\Windows\system32\napinsp.dll [50176 2008-01-21] (Společnost Microsoft)
Tcpip\Parameters: [DhcpNameServer] 192.168.1.28 192.168.1.41

FireFox:
========
FF ProfilePath: C:\Users\Kunčický\AppData\Roaming\Mozilla\Firefox\Profiles\no7ln24z.default
FF SelectedSearchEngine: Firmy.cz
FF Plugin: @google.com/npPicasa3,version=3.0.0 -> C:\Program Files\Google\Picasa3\npPicasa3.dll [2014-01-06] (Google, Inc.)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.40416.0\npctrl.dll [2015-04-15] ( Microsoft Corporation)
FF Plugin: @microsoft.com/WPF,version=3.5 -> C:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll [2008-07-29] (Microsoft Corporation)
FF Plugin: @tools.google.com/Google Update;version=3 -> C:\Program Files\Google\Update\1.3.27.5\npGoogleUpdate3.dll [2015-05-16] (Google Inc.)
FF Plugin: @tools.google.com/Google Update;version=9 -> C:\Program Files\Google\Update\1.3.27.5\npGoogleUpdate3.dll [2015-05-16] (Google Inc.)
FF Plugin: Adobe Reader -> C:\Program Files\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll [2015-04-30] (Adobe Systems Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\np-mswmp.dll [2007-04-10] (Microsoft Corporation)
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\nppdf32.dll [2015-04-30] (Adobe Systems Inc.)
FF Plugin ProgramFiles/Appdata: C:\Users\Kunčický\AppData\Roaming\mozilla\plugins\np-mswmp.dll [2009-09-25] (Microsoft Corporation)
FF SearchPlugin: C:\Users\Kunčický\AppData\Roaming\Mozilla\Firefox\Profiles\no7ln24z.default\searchplugins\zbocz.xml [2011-12-29]
FF Extension: Microsoft .NET Framework Assistant - C:\Users\Kunčický\AppData\Roaming\Mozilla\Firefox\Profiles\no7ln24z.default\Extensions\{20a82645-c095-46ed-80e3-08825760534b} [2010-09-08]
FF Extension: Seznam Settings - C:\Program Files\Mozilla Firefox\extensions\seznam@partners.mozilla.com [2015-05-22]
FF Extension: Skype Click to Call - C:\Program Files\Mozilla Firefox\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A} [2015-05-22]
FF Extension: Skype Click to Call - C:\Program Files\Mozilla Firefox\browser\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A} [2015-05-22]
FF HKLM\...\Firefox\Extensions: [{20a82645-c095-46ed-80e3-08825760534b}] - C:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension
FF Extension: Microsoft .NET Framework Assistant - C:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension [2009-09-03]

Chrome:
=======
CHR Profile: C:\Users\Kunčický\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (Bookmark Manager) - C:\Users\Kunčický\AppData\Local\Google\Chrome\User Data\Default\Extensions\gmlllbghnfkpflemihljekbapjopfjik [2015-05-21]
CHR Extension: (Google Wallet) - C:\Users\Kunčický\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2013-09-03]
CHR HKLM\...\Chrome\Extension: [iphahelpmejkbidhiecfeicblienleon] - https://clients2.google.com/service/update2/crx
CHR HKLM\...\Chrome\Extension: [lifbcibllhkdhoafpjfnlhfpfgnpldfl] - C:\Program Files\Skype\Toolbars\Skype for Chromium\skype_chrome_extension.crx [2013-05-14]

========================== Services (Whitelisted) =================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

S2 gupdate1c98a0d25bdd6c0; C:\Program Files\Google\Update\GoogleUpdate.exe [107912 2014-10-23] (Google Inc.)
S2 LightScribeService; C:\Program Files\Common Files\LightScribe\LSSrvc.exe [61440 2007-01-17] (Hewlett-Packard Company) [File not signed]
S3 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [272952 2008-01-21] (Microsoft Corporation)

==================== Drivers (Whitelisted) ====================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

S3 ATSWPDRV; C:\Windows\System32\DRIVERS\ATSwpDrv.sys [146688 2008-04-25] (AuthenTec, Inc.)
R0 FltMgr; C:\Windows\System32\drivers\fltmgr.sys [190424 2009-04-11] (Společnost Microsoft)
R3 Ntfs; C:\Windows\system32\Drivers\Ntfs.sys [1082232 2013-03-03] (Společnost Microsoft)
S3 pfc; C:\Windows\System32\drivers\pfc.sys [10368 2009-01-23] (Padus, Inc.) [File not signed]
R3 winbondcir; C:\Windows\System32\DRIVERS\winbondcir.sys [43008 2007-03-28] (Winbond Electronics Corporation)
S3 WSVD; C:\Windows\system32\drivers\WSVD.sys [75776 2007-12-16] (Wasay) [File not signed]
U5 AppMgmt; C:\Windows\system32\svchost.exe [21504 2008-01-21] (Microsoft Corporation)
S3 catchme; \??\C:\Users\KUNICK~1\AppData\Local\Temp\catchme.sys [X]
S3 DKbFltr; system32\DRIVERS\DKbFltr.sys [X]
S3 IpInIp; system32\DRIVERS\ipinip.sys [X]
S3 NwlnkFlt; system32\DRIVERS\nwlnkflt.sys [X]
S3 NwlnkFwd; system32\DRIVERS\nwlnkfwd.sys [X]

==================== NetSvcs (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)


==================== One Month Created files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2015-05-28 07:44 - 2015-05-28 07:45 - 00010486 _____ () C:\Users\Kunčický\Desktop\FRST.txt
2015-05-28 07:41 - 2015-05-28 07:41 - 00112640 _____ (forum.viry.cz) C:\Users\Kunčický\Desktop\FRSTLauncher.exe
2015-05-28 07:40 - 2015-05-28 07:40 - 00112640 _____ (forum.viry.cz) C:\Users\Kunčický\Downloads\Nepotvrzeno 876700.crdownload
2015-05-28 07:39 - 2015-05-28 07:44 - 00000000 ____D () C:\FRST
2015-05-28 07:38 - 2015-05-28 07:38 - 01147392 _____ (Farbar) C:\Users\Kunčický\Desktop\FRST.exe
2015-05-27 19:27 - 2015-05-27 19:51 - 00000000 ____D () C:\ProgramData\Malwarebytes' Anti-Malware (portable)
2015-05-27 19:27 - 2015-05-27 19:27 - 00119512 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2015-05-27 19:24 - 2015-05-27 19:51 - 00000000 ____D () C:\Users\Kunčický\Desktop\mbar
2015-05-27 19:24 - 2015-05-27 19:24 - 00092888 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys
2015-05-27 19:20 - 2015-05-27 19:24 - 16502728 _____ (Malwarebytes Corp.) C:\Users\Kunčický\Desktop\mbar-1.09.1.1004.exe
2015-05-27 18:46 - 2015-05-28 07:33 - 00000000 ____D () C:\Qoobox
2015-05-27 18:46 - 2011-06-26 08:45 - 00256000 _____ () C:\Windows\PEV.exe
2015-05-27 18:46 - 2010-11-07 19:20 - 00208896 _____ () C:\Windows\MBR.exe
2015-05-27 18:46 - 2009-04-20 06:56 - 00060416 _____ (NirSoft) C:\Windows\NIRCMD.exe
2015-05-27 18:46 - 2000-08-31 02:00 - 00518144 _____ (SteelWerX) C:\Windows\SWREG.exe
2015-05-27 18:46 - 2000-08-31 02:00 - 00406528 _____ (SteelWerX) C:\Windows\SWSC.exe
2015-05-27 18:46 - 2000-08-31 02:00 - 00098816 _____ () C:\Windows\sed.exe
2015-05-27 18:46 - 2000-08-31 02:00 - 00080412 _____ () C:\Windows\grep.exe
2015-05-27 18:46 - 2000-08-31 02:00 - 00068096 _____ () C:\Windows\zip.exe
2015-05-27 18:45 - 2015-05-27 18:57 - 00000000 ____D () C:\Windows\erdnt
2015-05-22 20:04 - 2015-05-27 18:24 - 00000000 ____D () C:\Program Files\Mozilla Firefox
2015-05-21 20:58 - 2015-05-21 20:59 - 00000091 _____ () C:\PS.log
2015-05-21 20:44 - 2015-05-27 19:18 - 00018124 _____ () C:\Windows\PFRO.log
2015-05-21 20:41 - 2015-05-21 21:15 - 00008790 _____ () C:\Windows\DPINST.LOG
2015-05-21 20:39 - 2015-05-21 20:39 - 00000000 ____D () C:\Users\Kunčický\Downloads\Wireless LAN_Intel_12.0.0.73_Vistax86_A
2015-05-21 20:38 - 2015-05-21 20:38 - 00000000 _____ () C:\Windows\setuperr.log
2015-05-21 20:38 - 2015-05-21 20:38 - 00000000 _____ () C:\Windows\setupact.log
2015-05-21 20:26 - 2015-05-21 20:39 - 71996992 _____ () C:\Users\Kunčický\Downloads\Wireless LAN_Intel_12.0.0.73_Vistax86_A.zip
2015-05-21 20:18 - 2015-05-26 19:41 - 00000914 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2015-05-21 20:18 - 2015-05-21 20:18 - 00778416 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerApp.exe
2015-05-21 20:18 - 2015-05-21 20:18 - 00142512 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerCPLApp.cpl
2015-05-21 20:09 - 2015-05-21 21:01 - 00002425 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Reader X.lnk
2015-05-21 20:09 - 2015-05-21 20:09 - 00001896 _____ () C:\Users\Public\Desktop\Adobe Reader X.lnk
2015-05-21 20:08 - 2015-05-21 20:09 - 00000000 ____D () C:\Program Files\Common Files\Adobe
2015-05-21 20:08 - 2015-05-21 20:08 - 00000000 ____D () C:\Program Files\Adobe
2015-05-21 19:40 - 2015-05-27 19:28 - 00000000 ____D () C:\ProgramData\Malwarebytes
2015-05-21 19:35 - 2015-05-21 19:35 - 00000040 _____ () C:\Users\Public\Documents\_rgpl
2015-05-21 19:23 - 2015-05-21 19:27 - 03182452 _____ (Malwarebytes Corporation ) C:\Users\Kunčický\Downloads\mbam-setup-2.1.6.1022.exe.part
2015-05-21 19:17 - 2015-05-21 19:25 - 06484352 _____ (Piriform Ltd) C:\Users\Kunčický\Downloads\ccsetup505.exe
2015-05-21 19:08 - 2015-05-21 19:08 - 00000000 ____D () C:\Windows\pss
2015-05-21 18:30 - 2015-05-21 18:34 - 00146872 _____ () C:\Users\Kunčický\AppData\Local\edsinstaller.txt-20150521.log
2015-05-16 16:42 - 2015-04-30 18:03 - 00279040 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll
2015-05-16 16:31 - 2015-04-19 23:24 - 01029120 _____ (Microsoft Corporation) C:\Windows\system32\d3d10.dll
2015-05-16 16:31 - 2015-04-19 23:24 - 00219648 _____ (Microsoft Corporation) C:\Windows\system32\d3d10_1core.dll
2015-05-16 16:31 - 2015-04-19 23:24 - 00189952 _____ (Microsoft Corporation) C:\Windows\system32\d3d10core.dll
2015-05-16 16:31 - 2015-04-19 23:24 - 00160768 _____ (Microsoft Corporation) C:\Windows\system32\d3d10_1.dll
2015-05-16 16:31 - 2015-04-19 22:19 - 01172480 _____ (Microsoft Corporation) C:\Windows\system32\d3d10warp.dll
2015-05-16 16:31 - 2015-04-19 22:18 - 00486400 _____ (Microsoft Corporation) C:\Windows\system32\d3d10level9.dll
2015-05-16 16:31 - 2015-04-19 22:13 - 00682496 _____ (Microsoft Corporation) C:\Windows\system32\d2d1.dll
2015-05-16 16:31 - 2015-04-19 22:12 - 01072640 _____ (Microsoft Corporation) C:\Windows\system32\DWrite.dll
2015-05-16 16:31 - 2015-04-19 22:12 - 00801792 _____ (Microsoft Corporation) C:\Windows\system32\FntCache.dll
2015-05-16 16:31 - 2015-04-19 06:59 - 02065408 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2015-05-16 16:26 - 2015-04-30 15:14 - 00102608 _____ (Microsoft Corporation) C:\Windows\system32\PresentationCFFRasterizerNative_v0300.dll
2015-05-16 15:57 - 2015-04-11 01:22 - 00279552 _____ (Microsoft Corporation) C:\Windows\system32\services.exe
2015-05-16 12:27 - 2015-04-10 17:30 - 12379136 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2015-05-16 12:27 - 2015-04-10 17:25 - 01810944 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2015-05-16 12:27 - 2015-04-10 17:25 - 00367616 _____ (Microsoft Corporation) C:\Windows\system32\html.iec
2015-05-16 12:27 - 2015-04-10 17:24 - 09750528 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2015-05-16 12:27 - 2015-04-10 17:21 - 01139200 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2015-05-16 12:27 - 2015-04-10 17:20 - 01427968 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2015-05-16 12:27 - 2015-04-10 17:20 - 01129472 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2015-05-16 12:27 - 2015-04-10 17:19 - 01804288 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2015-05-16 12:27 - 2015-04-10 17:19 - 00718336 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2015-05-16 12:27 - 2015-04-10 17:19 - 00607744 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2015-05-16 12:27 - 2015-04-10 17:19 - 00421888 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2015-05-16 12:27 - 2015-04-10 17:19 - 00353792 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2015-05-16 12:27 - 2015-04-10 17:19 - 00231936 _____ (Microsoft Corporation) C:\Windows\system32\url.dll
2015-05-16 12:27 - 2015-04-10 17:19 - 00142848 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2015-05-16 12:27 - 2015-04-10 17:19 - 00065024 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2015-05-16 12:27 - 2015-04-10 17:18 - 02382848 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2015-05-16 12:27 - 2015-04-10 17:18 - 00223232 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2015-05-16 12:27 - 2015-04-10 17:18 - 00176640 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2015-05-16 12:27 - 2015-04-10 17:18 - 00073216 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2015-05-16 12:27 - 2015-04-10 17:18 - 00041472 _____ (Microsoft Corporation) C:\Windows\system32\msfeedsbs.dll
2015-05-16 12:27 - 2015-04-10 17:18 - 00011776 _____ (Microsoft Corporation) C:\Windows\system32\mshta.exe
2015-05-16 12:27 - 2015-04-10 17:18 - 00010752 _____ (Microsoft Corporation) C:\Windows\system32\msfeedssync.exe
2015-05-11 12:21 - 2015-05-11 12:24 - 69480448 _____ () C:\Users\Kunčický\Downloads\eav_nt32_csy.msi

==================== One Month Modified files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2015-05-28 07:37 - 2009-01-23 17:32 - 00001356 _____ () C:\Users\Kunčický\AppData\Local\d3d9caps.dat
2015-05-28 07:24 - 2009-01-25 15:06 - 00028124 _____ () C:\ProgramData\nvModes.001
2015-05-28 07:24 - 2009-01-25 11:54 - 00028124 _____ () C:\ProgramData\nvModes.dat
2015-05-28 07:23 - 2010-02-25 23:14 - 00000936 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore1cab65f7e8ea390.job
2015-05-28 07:23 - 2006-11-02 15:01 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2015-05-28 07:23 - 2006-11-02 14:47 - 00003216 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-1.C7483456-A289-439d-8115-601632D005A0
2015-05-28 07:23 - 2006-11-02 14:47 - 00003216 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-0.C7483456-A289-439d-8115-601632D005A0
2015-05-28 07:22 - 2009-02-11 18:45 - 00000012 _____ () C:\Windows\bthservsdp.dat
2015-05-28 07:22 - 2006-11-02 15:01 - 00032548 _____ () C:\Windows\Tasks\SCHEDLGU.TXT
2015-05-27 19:23 - 2008-01-21 08:47 - 01532794 _____ () C:\Windows\system32\PerfStringBackup.INI
2015-05-27 18:58 - 2006-11-02 13:18 - 00000000 ___RD () C:\Users\Public
2015-05-27 18:55 - 2006-11-02 12:23 - 00000215 _____ () C:\Windows\system.ini
2015-05-27 18:27 - 2009-01-24 10:56 - 00000000 ____D () C:\Users\Kunčický\AppData\Roaming\Skype
2015-05-27 18:27 - 2009-01-23 17:32 - 00000000 ____D () C:\Program Files\Google
2015-05-27 18:25 - 2009-01-23 23:26 - 01598856 _____ () C:\Windows\WindowsUpdate.log
2015-05-25 22:01 - 2009-07-01 11:48 - 00000940 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2015-05-23 21:40 - 2012-05-06 12:23 - 00000000 ____D () C:\Program Files\Mozilla Maintenance Service
2015-05-22 18:05 - 2010-02-21 09:47 - 00001975 _____ () C:\Users\Public\Desktop\Google Chrome.lnk
2015-05-22 17:54 - 2006-11-02 13:18 - 00000000 ____D () C:\Windows\Microsoft.NET
2015-05-21 21:20 - 2009-01-23 17:31 - 00000000 ____D () C:\Users\Kunčický
2015-05-21 21:10 - 2008-04-14 15:54 - 00000000 ___HD () C:\Program Files\InstallShield Installation Information
2015-05-21 21:00 - 2008-04-14 16:16 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Acer GameZone
2015-05-21 21:00 - 2008-04-14 16:16 - 00000000 ____D () C:\Program Files\Acer GameZone
2015-05-21 20:59 - 2009-01-23 18:36 - 00000000 ____D () C:\ProgramData\CyberLink
2015-05-21 20:54 - 2008-05-27 09:14 - 00000000 ____D () C:\ACER
2015-05-21 20:45 - 2008-04-14 16:28 - 00000000 ____D () C:\ProgramData\Adobe
2015-05-21 20:42 - 2006-11-02 13:18 - 00000000 __RHD () C:\Users\Default
2015-05-21 20:41 - 2008-04-14 15:49 - 00000000 ____D () C:\Program Files\Intel
2015-05-21 20:39 - 2008-05-05 09:05 - 03658752 _____ (Intel Corporation) C:\Windows\system32\Drivers\NETw5v32.sys
2015-05-21 20:39 - 2008-05-05 09:05 - 02756608 _____ (Intel Corporation) C:\Windows\system32\NETw5r32.dll
2015-05-21 20:39 - 2008-05-05 09:05 - 00659456 _____ (Intel Corporation) C:\Windows\system32\NETw5c32.dll
2015-05-21 20:22 - 2013-06-03 20:16 - 00000000 ____D () C:\Users\Kunčický\AppData\Local\Facebook
2015-05-21 20:22 - 2009-02-02 19:45 - 00000000 ____D () C:\Users\Kunčický\AppData\Local\Adobe
2015-05-21 20:09 - 2009-01-23 23:17 - 00000000 ____D () C:\Users\Kunčický\AppData\Roaming\Adobe
2015-05-21 19:30 - 2009-04-30 08:07 - 00000000 ____D () C:\Windows\Minidump
2015-05-21 19:30 - 2008-08-11 10:54 - 00000000 ____D () C:\Windows\Panther
2015-05-21 19:11 - 2009-01-23 18:29 - 00000000 _____ () C:\Windows\system32\LogConfigTemp.xml
2015-05-21 19:05 - 2008-04-14 16:10 - 00000000 ____D () C:\Program Files\Acer
2015-05-21 18:48 - 2008-04-14 16:44 - 00000000 ____D () C:\Program Files\NewTech Infosystems
2015-05-21 18:39 - 2008-04-14 16:46 - 00000147 _____ () C:\Windows\system32\agent.log
2015-05-21 18:39 - 2008-04-14 16:05 - 00000000 ____D () C:\ProgramData\McAfee
2015-05-21 18:26 - 2009-01-23 19:05 - 00000000 ____D () C:\Users\Kunčický\AppData\Local\Google
2015-05-21 18:26 - 2009-01-23 17:32 - 00000000 ____D () C:\ProgramData\Google
2015-05-16 20:58 - 2006-11-02 13:18 - 00000000 ____D () C:\Windows\system32\LogFiles
2015-05-16 20:44 - 2006-11-02 14:47 - 00441232 _____ () C:\Windows\system32\FNTCACHE.DAT
2015-05-16 20:17 - 2006-11-02 14:37 - 00000000 ____D () C:\Windows\system32\XPSViewer
2015-05-16 20:17 - 2006-11-02 14:37 - 00000000 ____D () C:\Program Files\Windows Journal
2015-05-16 20:16 - 2013-01-20 10:30 - 00000000 ____D () C:\Program Files\Microsoft Silverlight
2015-05-16 16:41 - 2008-04-14 16:33 - 00000000 ____D () C:\ProgramData\Microsoft Help
2015-05-16 16:25 - 2013-07-22 12:05 - 00000000 ____D () C:\Windows\system32\MRT
2015-05-16 16:01 - 2006-11-02 12:24 - 137310008 _____ (Microsoft Corporation) C:\Windows\system32\mrt.exe
2015-05-16 15:56 - 2013-01-20 10:31 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Silverlight

==================== Files in the root of some directories =======

2009-01-23 17:32 - 2015-05-28 07:37 - 0001356 _____ () C:\Users\Kunčický\AppData\Local\d3d9caps.dat
2015-03-29 18:02 - 2015-03-29 18:03 - 0005632 _____ () C:\Users\Kunčický\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
2015-05-21 18:30 - 2015-05-21 18:34 - 0146872 _____ () C:\Users\Kunčický\AppData\Local\edsinstaller.txt-20150521.log
2009-01-24 10:59 - 2009-01-24 10:59 - 0000056 ____H () C:\ProgramData\ezsidmv.dat
2009-01-25 15:06 - 2015-05-28 07:24 - 0028124 _____ () C:\ProgramData\nvModes.001
2009-01-25 11:54 - 2015-05-28 07:24 - 0028124 _____ () C:\ProgramData\nvModes.dat

Some files in TEMP:
====================
C:\Users\Kunčický\AppData\Local\temp\RtkBtMnt.exe


==================== Bamital & volsnap Check =================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\explorer.exe => File is digitally signed
C:\Windows\system32\winlogon.exe => File is digitally signed
C:\Windows\system32\wininit.exe => File is digitally signed
C:\Windows\system32\svchost.exe => File is digitally signed
C:\Windows\system32\services.exe => File is digitally signed
C:\Windows\system32\User32.dll => File is digitally signed
C:\Windows\system32\userinit.exe => File is digitally signed
C:\Windows\system32\rpcss.dll => File is digitally signed
C:\Windows\system32\Drivers\volsnap.sys => File is digitally signed


LastRegBack: 2015-05-28 07:44




===***===***===***=== Extract of Additional scan result of Farbar Recovery Scan Tool ===***===***===***===

==================== Drive and Memory info ===================

Drive c: (ACER) (Fixed) (Total:144.04 GB) (Free:96.85 GB) NTFS ==>[Drive with boot components (obtained from BCD)]
Drive d: (DATA) (Fixed) (Total:144.04 GB) (Free:69.85 GB) NTFS

Available physical RAM: 2259.42 MB
Total physical RAM: 3065.94 MB
Percentage of memory in use: 26%

==================== MBR and Partition Table ==================

Disk: 0 (Size: 298.1 GB) (Disk ID: 10939738)
Partition 1: (Not Active) - (Size=10 GB) - (Type=27)
Partition 2: (Active) - (Size=144 GB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=144 GB) - (Type=07 NTFS)

==================== Scheduled Tasks (whitelisted) ==================

(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore1cab65f7e8ea390.job => C:\Program Files\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files\Google\Update\GoogleUpdate.exe

==================== Alternate Data Streams (whitelisted) ==================

AlternateDataStreams: C:\ProgramData\TEMP:3E7393FC

==================== Security Center ==================

AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}



===***===***===***=== Supplementary Scan createdy by FRSTLauncher ===***===***===***===
Posledni aktualizace FRSTLauncheru: 25_11_2013 (01)
Posledni aktualizace Modifikacniho skriptu: 30_09_2013 (01)


***** Velikost "Plochy" *****

Velikost slozky "C:\Users\Kun�ick�\Desktop" je 1524 MB.


***** Startup Programs *****

HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ehTray.exe
C:\Windows\ehome\ehTray.exe

HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\GrooveMonitor
"C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe"

HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\IAAnotif
C:\Program Files\Intel\Intel Matrix Storage Manager\iaanotif.exe

HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\IndxStoreSvr_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}
"C:\Program Files\Common Files\Nero\Lib\NMIndexStoreSvr.exe" ASO-616B5711-6DAE-4795-A05F-39A1E5104020 [x]

HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NBKeyScan
"C:\Program Files\Nero\Nero8\Nero BackItUp\NBKeyScan.exe"

HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NeroFilterCheck
C:\Program Files\Common Files\Nero\Lib\NeroCheck.exe

HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NvMediaCenter
RUNDLL32.EXE C:\Windows\system32\NvMcTray.dll,NvTaskbarInit [x]

HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\PLFSetI
C:\Windows\PLFSetI.exe

HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ProductReg
"C:\Program Files\Acer\WR_PopUp\ProductReg.exe"

HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Skytel
%windir%\WindowsMobile\wmdc.exe [x]

HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Windows Mobile Device Center
%windir%\WindowsMobile\wmdSync.exe [x]

HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Windows Mobile-based device management
Re�im ECHO je vypnut.

HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^Bluetooth.lnk
C:\PROGRA~1\WIDCOMM\BLUETO~1\BTTray.exe

HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Users^Kun�ick�^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^Picture Motion Browser Media Check Tool.lnk
C:\PROGRA~1\Sony\SONYPI~1\PMBCore\SPUVOL~1.EXE /noballoononstart [x]


***** Firewall rules *****

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
EnableFirewall REG_DWORD 0x1
DisableNotifications REG_DWORD 0x0

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
EnableFirewall REG_DWORD 0x1
DisableNotifications REG_DWORD 0x0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\GloballyOpenPorts\List]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\GloballyOpenPorts\List]


***** System Restore *****

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SystemRestore]
"DisableSR"=dword:00000000
"Generalize_DisableSR"=dword:00000000


==================== End Of Log ==============================

[vyosek]

Zdravim

Opetovne spoustite ComboFix bez doporuceni, ac jste na toto byl jiz upozornen = opakovane poruseni pravidel fora --> pomoc bude odmitnuta