Problém Kontextové menu a Obnovení systému (bílé okno)

[gregor]

Zdravím,

zjistil jsem nefunkční kontextové menu po stisku pravého tlačítka u ikony Tento počítač (chtěl jsme si zobraziut vlastnosti systému) a u souborů v Total Commanderu (TC zamrzl). Ale např. v prohlížeči kontextové menu fungovalo. Po několika restartech a laborování teď kontextové menu funguje, ale mezitím jsem zjistil, že mi vůbec nejde přikaz Obnovení systému (Všechny programy / Příslušenství / Systémové nástroje / Obnovení systému) - buď nereaguje vůbec nebo se nastartuje úplně bílé okno. Obávám se, aby to nezpůsobovala nějaká havěť.
Mám Windows XP Prof. v. 2002 a service pack 3.

Prosím, mohl by mi někdo poradit, co vyzkoušet?

Děkuji předem za radu!
G.

[cernohous13]

Pozdrav i ode mě - dej mi pro začátek log RSIT

[gregor]

Děkuji za obr rychlou reakci!!

Log z Rsit jsem dal sem http://www.pilsen.cz/uloz/rsit/log_20160705.txt

Já za 10 min musím odjet a budu až zítra. Ale předem MOC! děkuji za náhled do logu a rady!

BTW:
Ještě dodávám, že PC je dost pomalé - už jsem to kdysi diskutoval, ale trochu se to pak zlepšilo. Před týdnem jsem zvýšil RAM z 2Gb na 8GB, ale moc to nepomohlo (resp. windows XP jí stejně nevidí, vidí jen 2GB a windows 7 na druhé partition to moc nepomohlo).

[cernohous13]

Logy dej přímo do svých odpovědí

Logfile of random's system information tool 1.10 (written by random/random)
Run by Administrator at 2016-07-05 18:13:29
Systém Microsoft Windows XP Professional Service Pack 3
System drive D: has 7 GB (3%) free of 201 GB
Total RAM: 2047 MB (43% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 18:13:41, on 5.7.2016
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Normal

Running processes:
D:\WINDOWS\System32\smss.exe
D:\WINDOWS\system32\winlogon.exe
D:\WINDOWS\system32\services.exe
D:\WINDOWS\system32\lsass.exe
D:\WINDOWS\system32\Ati2evxx.exe
D:\WINDOWS\system32\svchost.exe
D:\WINDOWS\System32\svchost.exe
D:\WINDOWS\system32\Ati2evxx.exe
D:\Program Files\AVAST Software\Avast\AvastSvc.exe
D:\WINDOWS\Explorer.EXE
D:\Program Files\AVAST Software\Avast\afwServ.exe
D:\WINDOWS\system32\spoolsv.exe
D:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
D:\Program Files\Analog Devices\SoundMAX\Smax4.exe
D:\Program Files\Analog Devices\Core\smax4pnp.exe
D:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.EXE
D:\Program Files\Adobe\Adobe Version Cue\ControlPanel\VersionCueTray.exe
D:\WINDOWS\Dell\PanelMgr\SSMMgr.exe
D:\Program Files\Western Digital\WD Security\WDDriveAutoUnlock.exe
D:\Program Files\iTunes\iTunesHelper.exe
D:\Program Files\HTC\HTC Sync 3.0\htcUPCTLoader.exe
D:\Program Files\AVAST Software\Avast\AvastUI.exe
D:\Program Files\Common Files\Java\Java Update\jusched.exe
D:\Program Files\Western Digital\WD Quick View\WDDMStatus.exe
D:\WINDOWS\system32\ctfmon.exe
D:\Program Files\Messenger\msmsgs.exe
D:\Program Files\Common Files\Nero\Lib\NMBgMonitor.exe
D:\Program Files\Bonjour\mDNSResponder.exe
D:\Documents and Settings\Administrator\Local Settings\Data aplikací\Dropbox\Update\DropboxUpdate.exe
D:\Documents and Settings\Administrator\Data aplikací\Spotify\SpotifyWebHelper.exe
D:\Program Files\Adobe\Adobe Acrobat 6.0 CE\Distillr\acrotray.exe
D:\Documents and Settings\Administrator\Data aplikací\Dropbox\bin\Dropbox.exe
D:\Program Files\HTC\Internet Pass-Through\PassThruSvr.exe
F:\a\download\greenshot\rozbaleno\Greenshot.exe
D:\Program Files\Western Digital\WD Drive Manager\WDDriveService.exe
D:\Program Files\ATI Technologies\ATI.ACE\Core-Static\ccc.exe
D:\Program Files\Western Digital\WD SmartWare\WDBackupEngine.exe
D:\Program Files\iPod\bin\iPodService.exe
D:\Program Files\Common Files\Nero\Lib\NMIndexingService.exe
D:\Program Files\Common Files\Nero\Lib\NMIndexStoreSvr.exe
D:\WINDOWS\system32\wbem\unsecapp.exe
D:\Program Files\Mozilla Firefox\firefox.exe
D:\Program Files\Common Files\Java\Java Update\jucheck.exe
C:\Program Files\totalcmd\TOTALCMD.EXE
C:\Program Files\totalcmd\TOTALCMD.EXE
F:\a\download\malware_viry_cz_RSIT\20160705\RSIT.exe
D:\Program Files\trend micro\Administrator.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://office.dolphin.cz/wp-admin/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Odkazy
O1 - Hosts: 91.239.201.16 www.dobavorska.cz
O1 - Hosts: 91.239.201.16 www.dobavorska.cz/test/
O1 - Hosts: 91.239.201.16 www.dobavorska.cz/zelezna-opona-stale-ziva/
O2 - BHO: Podpora odkazu pro Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - D:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - D:\Program Files\Java\jre1.8.0_51\bin\ssv.dll
O2 - BHO: avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - D:\Program Files\AVAST Software\Avast\aswWebRepIE.dll
O2 - BHO: AcroIEToolbarHelper Class - {AE7CD045-E861-484f-8273-0445EE161910} - D:\Program Files\Adobe\Adobe Acrobat 6.0 CE\Acrobat\AcroIEFavClient.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - D:\Program Files\Java\jre1.8.0_51\bin\jp2ssv.dll
O3 - Toolbar: Adobe PDF - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - D:\Program Files\Adobe\Adobe Acrobat 6.0 CE\Acrobat\AcroIEFavClient.dll
O4 - HKLM\..\Run: [SoundMAX] "D:\Program Files\Analog Devices\SoundMAX\Smax4.exe" /tray
O4 - HKLM\..\Run: [SoundMAXPnP] D:\Program Files\Analog Devices\Core\smax4pnp.exe
O4 - HKLM\..\Run: [StartCCC] D:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe
O4 - HKLM\..\Run: [AdobeVersionCue] D:\Program Files\Adobe\Adobe Version Cue\ControlPanel\VersionCueTray.exe
O4 - HKLM\..\Run: [Dell PanelMgr] D:\WINDOWS\Dell\PanelMgr\SSMMgr.exe /autorun
O4 - HKLM\..\Run: [Adobe ARM] "D:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKLM\..\Run: [NeroFilterCheck] D:\Program Files\Common Files\Nero\Lib\NeroCheck.exe
O4 - HKLM\..\Run: [WD Drive Unlocker] D:\Program Files\Western Digital\WD Security\WDDriveAutoUnlock.exe
O4 - HKLM\..\Run: [APSDaemon] "D:\Program Files\Common Files\Apple\Apple Application Support\APSDaemon.exe"
O4 - HKLM\..\Run: [iTunesHelper] "D:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [HTC Sync Loader] "D:\Program Files\HTC\HTC Sync 3.0\htcUPCTLoader.exe" -startup
O4 - HKLM\..\Run: [AvastUI.exe] "D:\Program Files\AVAST Software\Avast\AvastUI.exe" /nogui
O4 - HKLM\..\Run: [SunJavaUpdateSched] "D:\Program Files\Common Files\Java\Java Update\jusched.exe"
O4 - HKLM\..\Run: [WD Quick View] D:\Program Files\Western Digital\WD Quick View\WDDMStatus.exe
O4 - HKCU\..\Run: [CTFMON.EXE] D:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [MSMSGS] "D:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKCU\..\Run: [BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] "D:\Program Files\Common Files\Nero\Lib\NMBgMonitor.exe"
O4 - HKCU\..\Run: [Dropbox Update] "D:\Documents and Settings\Administrator\Local Settings\Data aplikací\Dropbox\Update\DropboxUpdate.exe" /c
O4 - HKCU\..\Run: [Spotify Web Helper] "D:\Documents and Settings\Administrator\Data aplikací\Spotify\SpotifyWebHelper.exe"
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] D:\WINDOWS\system32\CTFMON.EXE (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] D:\WINDOWS\system32\CTFMON.EXE (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] D:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] D:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - Startup: Dropbox.lnk = ?
O4 - Startup: Greenshot.lnk = F:\a\download\greenshot\rozbaleno\Greenshot.exe
O4 - Startup: WizIQ Desktop.lnk = D:\Program Files\WizIQ Desktop\WizIQ Desktop.exe
O4 - Global Startup: Acrobat Assistant.lnk = D:\Program Files\Adobe\Adobe Acrobat 6.0 CE\Distillr\acrotray.exe
O4 - Global Startup: Adobe Gamma Loader.lnk = D:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Office Excel - res://D:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: Zdroje informací - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - D:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - D:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - D:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - D:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - D:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://update.microsoft.com/microsoftup ... 0367716218
O22 - SharedTaskScheduler: Browseui preloader - {438755C2-A8BA-11D1-B96B-00A0C90312E1} - D:\WINDOWS\system32\browseui.dll
O22 - SharedTaskScheduler: Proces mezipaměti kategorií součástí - {8C7461EF-2B13-11d2-BE35-3078302C2030} - D:\WINDOWS\system32\browseui.dll
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - D:\WINDOWS\system32\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: AdobeVersionCue - Adobe Sytems - D:\Program Files\Adobe\Adobe Version Cue\service\VersionCue.exe
O23 - Service: Apple Mobile Device - Apple Inc. - D:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - D:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: ATI Smart - Unknown owner - D:\WINDOWS\system32\ati2sgag.exe
O23 - Service: Avast Antivirus (avast! Antivirus) - AVAST Software - D:\Program Files\AVAST Software\Avast\AvastSvc.exe
O23 - Service: Avast Firewall (avast! Firewall) - AVAST Software - D:\Program Files\AVAST Software\Avast\afwServ.exe
O23 - Service: Bonjour Service - Apple Inc. - D:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: Služba Google Update (gupdate) (gupdate) - Google Inc. - D:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: Služba Google Update (gupdatem) (gupdatem) - Google Inc. - D:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: iPod Service - Apple Inc. - D:\Program Files\iPod\bin\iPodService.exe
O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Mozilla Foundation - D:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe
O23 - Service: NMIndexingService - Nero AG - D:\Program Files\Common Files\Nero\Lib\NMIndexingService.exe
O23 - Service: Internet Pass-Through Service (PassThru Service) - Unknown owner - D:\Program Files\HTC\Internet Pass-Through\PassThruSvr.exe
O23 - Service: Skype Updater (SkypeUpdate) - Skype Technologies - D:\Program Files\Skype\Updater\Updater.exe
O23 - Service: WD Backup (WDBackup) - Western Digital Technologies, Inc. - D:\Program Files\Western Digital\WD SmartWare\WDBackupEngine.exe
O23 - Service: WD Drive Manager (WDDriveService) - Western Digital Technologies, Inc. - D:\Program Files\Western Digital\WD Drive Manager\WDDriveService.exe

--
End of file - 10334 bytes

======Scheduled tasks folder======

D:\WINDOWS\tasks\Adobe Flash Player Updater.job - D:\WINDOWS\system32\Macromed\Flash\FlashPlayerUpdateService.exe
D:\WINDOWS\tasks\avast! Emergency Update.job - D:\Program Files\AVAST Software\Avast\AvastEmUpdate.exe
D:\WINDOWS\tasks\DropboxUpdateTaskUserS-1-5-21-606747145-1677128483-839522115-500Core.job - D:\Documents and Settings\Administrator\Local Settings\Data aplikací\Dropbox\Update\DropboxUpdate.exe /c
D:\WINDOWS\tasks\DropboxUpdateTaskUserS-1-5-21-606747145-1677128483-839522115-500UA.job - D:\Documents and Settings\Administrator\Local Settings\Data aplikací\Dropbox\Update\DropboxUpdate.exe /ua /installsource scheduler
D:\WINDOWS\tasks\G2MUpdateTask-S-1-5-21-606747145-1677128483-839522115-500.job - D:\Program Files\Citrix\GoToMeeting\4400\g2mupdate.exe
D:\WINDOWS\tasks\G2MUploadTask-S-1-5-21-606747145-1677128483-839522115-500.job - D:\Program Files\Citrix\GoToMeeting\4400\g2mupload.exe
D:\WINDOWS\tasks\GoogleUpdateTaskMachineCore.job - D:\Program Files\Google\Update\GoogleUpdate.exe /c
D:\WINDOWS\tasks\GoogleUpdateTaskMachineUA.job - D:\Program Files\Google\Update\GoogleUpdate.exe /ua /installsource scheduler
D:\WINDOWS\tasks\Měsíční oznamování konce poskytování služeb pro Microsoft Windows XP.job - D:\WINDOWS\system32\xp_eos.exe
D:\WINDOWS\tasks\Přihlášení k oznamování konce poskytování služeb pro Microsoft Windows XP.job - D:\WINDOWS\system32\xp_eos.exe -c
D:\WINDOWS\tasks\SafeZone scheduled Autoupdate 1453797649.job - D:\Program Files\AVAST Software\SZBrowser\launcher.exe --scheduledautoupdate $(Arg0)
D:\WINDOWS\tasks\WGASetup.job - D:\WINDOWS\system32\KB905474\wgasetup.exe /autoauto

=========Mozilla firefox=========

ProfilePath - D:\Documents and Settings\Administrator\Data aplikací\Mozilla\Firefox\Profiles\933uvcba.default

prefs.js - "browser.startup.homepage" - "www.google.cz"

"{20a82645-c095-46ed-80e3-08825760534b}"=D:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\
"wrc@avast.com"=D:\Program Files\AVAST Software\Avast\WebRep\FF


[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 10.1 Plugin
"Path"=D:\WINDOWS\system32\Macromed\Flash\NPSWF32.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@Apple.com/iTunes,version=]
"Description"=iTunes Detector Plug-in
"Path"=

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@Apple.com/iTunes,version=1.0]
"Description"=
"Path"=D:\Program Files\iTunes\Mozilla Plugins\npitunes.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@java.com/DTPlugin,version=11.51.2]
"Description"=Java™ Deployment Toolkit
"Path"=D:\Program Files\Java\jre1.8.0_51\bin\dtplugin\npDeployJava1.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@java.com/JavaPlugin,version=11.51.2]
"Description"=Oracle® Next Generation Java™ Plug-In
"Path"=D:\Program Files\Java\jre1.8.0_51\bin\plugin2\npjp2.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0]
"Description"=Ag Player Plugin
"Path"=D:\Program Files\Microsoft Silverlight\5.1.30514.0\npctrl.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@microsoft.com/WPF,version=3.5]
"Description"=Windows Presentation Foundation plug-in for Mozilla browsers
"Path"=D:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@tools.google.com/Google Update;version=3]
"Description"=Google Update
"Path"=D:\Program Files\Google\Update\1.3.30.3\npGoogleUpdate3.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@tools.google.com/Google Update;version=9]
"Description"=Google Update
"Path"=D:\Program Files\Google\Update\1.3.30.3\npGoogleUpdate3.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@videolan.org/vlc,version=2.0.4]
"Description"=VLC Multimedia Plugin
"Path"=D:\Program Files\VideoLAN\VLC\npvlc.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@videolan.org/vlc,version=2.2.1]
"Description"=VLC Multimedia Plugin
"Path"=D:\Program Files\VideoLAN\VLC\npvlc.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\Adobe Reader]
"Description"=Handles PDFs in-place in Firefox
"Path"=D:\Program Files\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll


D:\Documents and Settings\Administrator\Data aplikací\Mozilla\Firefox\Profiles\933uvcba.default\extensions\
{30ef946c-8361-4be4-9666-8c1a35784f7a}
{8f8fe09b-0bd3-4470-bc1b-8cad42b8203a}

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{06849E9F-C8D7-4D59-B87D-784B7D6BE0B3}]
Podpora odkazu pro Adobe PDF Reader - D:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll [2012-09-23 72336]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
Java(tm) Plug-In SSV Helper - D:\Program Files\Java\jre1.8.0_51\bin\ssv.dll [2015-08-05 460384]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{8E5E2654-AD2D-48bf-AC2D-D17F00898D06}]
avast! Online Security - D:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2016-03-29 678656]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AE7CD045-E861-484f-8273-0445EE161910}]
AcroIEToolbarHelper Class - D:\Program Files\Adobe\Adobe Acrobat 6.0 CE\Acrobat\AcroIEFavClient.dll [2003-05-15 147456]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - D:\Program Files\Java\jre1.8.0_51\bin\jp2ssv.dll [2015-08-05 172640]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{47833539-D0C5-4125-9FA8-0819E2EAAC93} - Adobe PDF - D:\Program Files\Adobe\Adobe Acrobat 6.0 CE\Acrobat\AcroIEFavClient.dll [2003-05-15 147456]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"SoundMAX"=D:\Program Files\Analog Devices\SoundMAX\Smax4.exe [2006-07-13 729088]
"SoundMAXPnP"=D:\Program Files\Analog Devices\Core\smax4pnp.exe [2008-04-30 868352]
"StartCCC"=D:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [2006-11-10 90112]
"AdobeVersionCue"=D:\Program Files\Adobe\Adobe Version Cue\ControlPanel\VersionCueTray.exe [2004-03-25 1732608]
"Dell PanelMgr"=D:\WINDOWS\Dell\PanelMgr\SSMMgr.exe [2009-12-11 626688]
"Adobe ARM"=D:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2014-12-19 1022152]
"NeroFilterCheck"=D:\Program Files\Common Files\Nero\Lib\NeroCheck.exe [2007-03-01 153136]
"WD Drive Unlocker"=D:\Program Files\Western Digital\WD Security\WDDriveAutoUnlock.exe [2013-04-01 1694080]
"APSDaemon"=D:\Program Files\Common Files\Apple\Apple Application Support\APSDaemon.exe [2014-04-23 43848]
"iTunesHelper"=D:\Program Files\iTunes\iTunesHelper.exe [2014-05-15 152392]
"HTC Sync Loader"=D:\Program Files\HTC\HTC Sync 3.0\htcUPCTLoader.exe [2010-09-08 249856]
"AvastUI.exe"=D:\Program Files\AVAST Software\Avast\AvastUI.exe [2016-03-29 7139256]
"SunJavaUpdateSched"=D:\Program Files\Common Files\Java\Java Update\jusched.exe [2015-06-08 334896]
"WD Quick View"=D:\Program Files\Western Digital\WD Quick View\WDDMStatus.exe [2015-07-20 5564784]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"=D:\WINDOWS\system32\ctfmon.exe [2008-04-14 15360]
"MSMSGS"=D:\Program Files\Messenger\msmsgs.exe [2008-04-14 1695232]
"BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}"=D:\Program Files\Common Files\Nero\Lib\NMBgMonitor.exe [2007-08-21 202024]
"Dropbox Update"=D:\Documents and Settings\Administrator\Local Settings\Data aplikací\Dropbox\Update\DropboxUpdate.exe [2015-06-17 134512]
"Spotify Web Helper"=D:\Documents and Settings\Administrator\Data aplikací\Spotify\SpotifyWebHelper.exe [2015-09-02 2018360]

D:\Documents and Settings\All Users\Nabídka Start\Programy\Po spuštění
Acrobat Assistant.lnk - D:\Program Files\Adobe\Adobe Acrobat 6.0 CE\Distillr\acrotray.exe
Adobe Gamma Loader.lnk - D:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe

D:\Documents and Settings\Administrator\Nabídka Start\Programy\Po spuštění
Dropbox.lnk - D:\Documents and Settings\Administrator\Data aplikací\Dropbox\bin\Dropbox.exe
Greenshot.lnk - F:\a\download\greenshot\rozbaleno\Greenshot.exe
WizIQ Desktop.lnk - D:\Program Files\WizIQ Desktop\WizIQ Desktop.exe

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\AtiExtEvent]
D:\WINDOWS\system32\Ati2evxx.dll [2007-06-27 118784]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Wdf01000.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Wdf01000.sys]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1
"SoftwareSASGeneration"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=145

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"D:\WINDOWS\system32\java.exe"="D:\WINDOWS\system32\java.exe:*:Enabled:Java(TM) Platform SE binary"
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"D:\Program Files\Bonjour\mDNSResponder.exe"="D:\Program Files\Bonjour\mDNSResponder.exe:*:Enabled:Bonjour Service"
"D:\Documents and Settings\Administrator\Data aplikací\Dropbox\bin\Dropbox.exe"="D:\Documents and Settings\Administrator\Data aplikací\Dropbox\bin\Dropbox.exe:*:Enabled:Dropbox"
"D:\Program Files\FileZilla FTP Client\filezilla.exe"="D:\Program Files\FileZilla FTP Client\filezilla.exe:*:Enabled:FileZilla FTP Client"
"C:\Program Files\totalcmd\TOTALCMD.EXE"="C:\Program Files\totalcmd\TOTALCMD.EXE:*:Enabled:Total Commander 32 bit international version, file manager replacement for Windows"
"D:\Program Files\iTunes\iTunes.exe"="D:\Program Files\iTunes\iTunes.exe:*:Enabled:iTunes"
"D:\Program Files\Google\Chrome\Application\chrome.exe"="D:\Program Files\Google\Chrome\Application\chrome.exe:*:Enabled:Google Chrome"
"D:\Documents and Settings\Administrator\Local Settings\Temp\TeamViewer\Version9\TeamViewer.exe"="D:\Documents and Settings\Administrator\Local Settings\Temp\TeamViewer\Version9\TeamViewer.exe:*:Enabled:TeamViewer 9"
"D:\Documents and Settings\Administrator\Data aplikací\Spotify\Spotify.exe"="D:\Documents and Settings\Administrator\Data aplikací\Spotify\Spotify.exe:*:Enabled:Spotify"
"D:\Program Files\Java\jre1.8.0_51\bin\java.exe"="D:\Program Files\Java\jre1.8.0_51\bin\java.exe:*:Enabled:Java(TM) Platform SE binary"
"D:\Program Files\Mozilla Firefox\firefox.exe"="D:\Program Files\Mozilla Firefox\firefox.exe:*:Enabled:Firefox (D:\Program Files\Mozilla Firefox)"
"D:\Program Files\Skype\Phone\Skype.exe"="D:\Program Files\Skype\Phone\Skype.exe:*:Enabled:Skype"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"midimapper"=midimap.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msadpcm"=msadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.trspch"=tssoft32.acm
"vidc.cvid"=iccvid.dll
"vidc.I420"=msh263.drv
"vidc.iv31"=ir32_32.dll
"vidc.iv32"=ir32_32.dll
"vidc.iv41"=ir41_32.ax
"vidc.iyuv"=iyuv_32.dll
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"vidc.uyvy"=msyuv.dll
"vidc.yuy2"=msyuv.dll
"vidc.yvu9"=tsbyuv.dll
"vidc.yvyu"=msyuv.dll
"wavemapper"=msacm32.drv
"msacm.msg723"=msg723.acm
"vidc.M263"=msh263.drv
"vidc.M261"=msh261.drv
"msacm.msaudio1"=msaud32.acm
"msacm.sl_anet"=sl_anet.acm
"msacm.iac2"=D:\WINDOWS\system32\iac25_32.ax
"vidc.iv50"=ir50_32.dll
"msacm.l3acm"=D:\WINDOWS\system32\l3codeca.acm
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"aux1"=wdmaud.drv

======List of files/folders created in the last 1 month======

2016-07-08 11:25:03 ----SHD---- D:\Config.Msi
2016-06-14 19:06:53 ----D---- D:\Program Files\Common Files\Skype
2016-06-14 19:06:43 ----RD---- D:\Program Files\Skype

======List of files/folders modified in the last 1 month======

2016-07-08 11:25:01 ----D---- D:\Documents and Settings\All Users\Data aplikací\Skype
2016-07-05 18:13:30 ----D---- D:\Program Files\trend micro
2016-07-05 18:12:48 ----A---- D:\WINDOWS\wincmd.ini
2016-07-05 18:08:05 ----D---- D:\WINDOWS\Temp
2016-07-05 18:04:34 ----D---- D:\WINDOWS\system32
2016-07-05 17:44:34 ----A---- D:\WINDOWS\SchedLgU.Txt
2016-07-05 17:04:46 ----D---- D:\Documents and Settings\All Users\Data aplikací\Adobe
2016-07-05 17:03:38 ----D---- D:\Documents and Settings\Administrator\Data aplikací\Adobe
2016-07-05 16:56:59 ----D---- D:\WINDOWS\system32\NtmsData
2016-07-05 16:56:00 ----D---- D:\WINDOWS\Registration
2016-07-05 16:32:42 ----D---- D:\WINDOWS\Prefetch
2016-07-05 15:36:08 ----A---- D:\WINDOWS\ntbtlog.txt
2016-07-05 11:36:40 ----D---- D:\Documents and Settings\Administrator\Data aplikací\Skype
2016-07-05 11:26:31 ----SHD---- D:\WINDOWS\Installer
2016-07-04 14:58:18 ----D---- D:\Documents and Settings\Administrator\Data aplikací\vlc
2016-07-04 11:57:52 ----D---- D:\Documents and Settings\Administrator\Data aplikací\dvdcss
2016-06-30 17:09:12 ----D---- D:\Program Files\Fanurio
2016-06-24 23:21:57 ----D---- D:\Documents and Settings\Administrator\Data aplikací\Dropbox
2016-06-24 11:58:23 ----D---- D:\Documents and Settings\Administrator\Data aplikací\FileZilla
2016-06-17 19:03:50 ----A---- D:\WINDOWS\system32\MRT.exe
2016-06-14 19:06:53 ----D---- D:\Program Files\Common Files
2016-06-14 19:06:43 ----RD---- D:\Program Files
2016-06-09 13:26:16 ----D---- D:\WINDOWS\system32\CatRoot2

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 aswNdis;avast! Firewall NDIS Filter Service; D:\WINDOWS\system32\DRIVERS\aswNdis.sys [2015-01-07 12112]
R0 aswNdis2;avast! Firewall NDIS Driver; D:\WINDOWS\system32\drivers\aswNdis2.sys [2016-03-29 268424]
R0 aswRvrt;avast! Revert; D:\WINDOWS\system32\drivers\aswRvrt.sys [2016-03-29 58776]
R0 aswVmm;avast! VM Monitor; D:\WINDOWS\system32\drivers\aswVmm.sys [2016-03-29 221240]
R0 ohci1394;Hostitelský řadič IEEE 1394 dle standardu OHCI NEC FireWarden; D:\WINDOWS\system32\DRIVERS\ohci1394.sys [2008-04-14 61696]
R1 aswKbd;aswKbd; D:\WINDOWS\system32\drivers\aswKbd.sys [2016-03-29 35096]
R1 aswRdr;aswRdr; D:\WINDOWS\system32\drivers\aswRdr.sys [2016-03-29 64272]
R1 aswSnx;aswSnx; D:\WINDOWS\system32\drivers\aswSnx.sys [2016-03-29 816304]
R1 aswSP;aswSP; D:\WINDOWS\system32\drivers\aswSP.sys [2016-03-29 447848]
R1 intelppm;Řadič procesoru Intel; D:\WINDOWS\system32\DRIVERS\intelppm.sys [2008-04-14 40192]
R1 kbdhid;Ovladač klávesnice standardu HID; D:\WINDOWS\system32\DRIVERS\kbdhid.sys [2008-04-14 14592]
R1 PQNTDrv;PQNTDrv; D:\WINDOWS\system32\drivers\PQNTDrv.sys [2002-09-16 4228]
R2 aswHwid;avast! HardwareID; D:\WINDOWS\system32\drivers\aswHwid.sys [2016-03-29 32792]
R2 aswMonFlt;aswMonFlt; D:\WINDOWS\system32\drivers\aswMonFlt.sys [2016-03-29 91168]
R3 ADIDTSFiltService;ADI DTS Filter Service; D:\WINDOWS\system32\drivers\adidts.sys [2008-04-30 139776]
R3 ADIHdAudAddService;ADI UAA Function Driver for High Definition Audio Service; D:\WINDOWS\system32\drivers\ADIHdAud.sys [2008-04-30 247296]
R3 AEAudio;AE Audio Service; D:\WINDOWS\system32\drivers\AEAudio.sys [2008-04-30 94080]
R3 Arp1394;Protokol 1394 ARP Client; D:\WINDOWS\system32\DRIVERS\arp1394.sys [2008-04-14 60800]
R3 aswStmXP;Avast StreamFilter Driver; D:\WINDOWS\system32\drivers\aswStmXP.sys [2016-03-29 171608]
R3 ati2mtag;ati2mtag; D:\WINDOWS\system32\DRIVERS\ati2mtag.sys [2007-06-27 2303488]
R3 GEARAspiWDM;GEAR ASPI Filter Driver; D:\WINDOWS\system32\DRIVERS\GEARAspiWDM.sys [2012-08-21 26840]
R3 HdAudAddService;ATI Function Driver for High Definition Audio Service; D:\WINDOWS\system32\drivers\AtiHdAud.sys [2006-12-28 84992]
R3 HDAudBus;Ovladač Microsoft UAA pro sběrnici High Definition Audio; D:\WINDOWS\system32\DRIVERS\HDAudBus.sys [2008-04-13 144384]
R3 HidUsb;Ovladač třídy standardu HID; D:\WINDOWS\system32\DRIVERS\hidusb.sys [2008-04-14 10368]
R3 mouhid;Ovladač myši standardu HID; D:\WINDOWS\system32\DRIVERS\mouhid.sys [2001-10-24 12160]
R3 MTsensor;ATK0110 ACPI UTILITY; D:\WINDOWS\system32\DRIVERS\ASACPI.sys [2004-08-13 5810]
R3 NIC1394;1394 Net Driver; D:\WINDOWS\system32\DRIVERS\nic1394.sys [2008-04-14 61824]
R3 usbccgp;Obecný nadřazený ovladač Microsoft USB; D:\WINDOWS\system32\DRIVERS\usbccgp.sys [2013-08-09 32384]
R3 USBSTOR;Ovladač velkokapacitního paměťového zařízení USB; D:\WINDOWS\system32\DRIVERS\USBSTOR.SYS [2008-04-14 26368]
R3 usbuhci;Ovladač Microsoft univerzálního hostitelského řadiče USB od společnosti Microsoft; D:\WINDOWS\system32\DRIVERS\usbuhci.sys [2008-04-14 20608]
R3 WDC_SAM;WD SCSI Pass Thru driver; D:\WINDOWS\system32\DRIVERS\wdcsam.sys [2013-04-01 11520]
R3 Wdf01000;Kernel Mode Driver Frameworks service; D:\WINDOWS\System32\Drivers\wdf01000.sys [2009-07-14 444136]
R3 yukonwxp;NDIS5.1 Miniport Driver for Marvell Yukon Ethernet Controller; D:\WINDOWS\system32\DRIVERS\yk51x86.sys [2006-07-26 248832]
S2 DgiVecp;DgiVecp; \??\D:\WINDOWS\system32\Drivers\DgiVecp.sys []
S2 SSPORT;SSPORT; \??\D:\WINDOWS\system32\Drivers\SSPORT.sys []
S3 aswTdi;aswTdi; D:\WINDOWS\system32\drivers\aswTdi.sys [2016-03-29 67088]
S3 HTCAND32;HTC Device Driver; D:\WINDOWS\System32\Drivers\ANDROIDUSB.sys [2009-06-10 24576]
S3 htcnprot;HTC NDIS Protocol Driver; D:\WINDOWS\system32\DRIVERS\htcnprot.sys [2010-06-22 21248]
S3 USBAAPL;Apple Mobile USB Driver; D:\WINDOWS\System32\Drivers\usbaapl.sys [2012-12-13 45056]
S3 usbprint;Třída USB Printer; D:\WINDOWS\system32\DRIVERS\usbprint.sys [2008-04-14 25856]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 Apple Mobile Device;Apple Mobile Device; D:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe [2014-02-12 43336]
R2 Ati HotKey Poller;Ati HotKey Poller; D:\WINDOWS\system32\Ati2evxx.exe [2007-06-27 483328]
R2 avast! Antivirus;Avast Antivirus; D:\Program Files\AVAST Software\Avast\AvastSvc.exe [2016-03-29 237096]
R2 avast! Firewall;Avast Firewall; D:\Program Files\AVAST Software\Avast\afwServ.exe [2016-03-29 119128]
R2 Bonjour Service;Bonjour Service; D:\Program Files\Bonjour\mDNSResponder.exe [2011-08-31 390504]
R2 PassThru Service;Internet Pass-Through Service; D:\Program Files\HTC\Internet Pass-Through\PassThruSvr.exe [2010-09-07 79872]
R2 UMWdf;Windows User Mode Driver Framework; D:\WINDOWS\system32\wdfmgr.exe [2004-08-11 38912]
R2 WDDriveService;WD Drive Manager; D:\Program Files\Western Digital\WD Drive Manager\WDDriveService.exe [2015-07-20 306552]
R3 iPod Service;iPod Service; D:\Program Files\iPod\bin\iPodService.exe [2014-05-15 553288]
R3 NMIndexingService;NMIndexingService; D:\Program Files\Common Files\Nero\Lib\NMIndexingService.exe [2007-08-21 382248]
S2 ATI Smart;ATI Smart; D:\WINDOWS\system32\ati2sgag.exe [2007-06-29 520192]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; D:\WINDOWS\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
S2 gupdate;Služba Google Update (gupdate); D:\Program Files\Google\Update\GoogleUpdate.exe [2015-08-27 144200]
S2 SkypeUpdate;Skype Updater; D:\Program Files\Skype\Updater\Updater.exe [2016-05-23 324224]
S2 WDBackup;WD Backup; D:\Program Files\Western Digital\WD SmartWare\WDBackupEngine.exe [2015-07-20 1042808]
S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service; D:\WINDOWS\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2015-08-05 268976]
S3 AdobeVersionCue;AdobeVersionCue; D:\Program Files\Adobe\Adobe Version Cue\service\VersionCue.exe [2004-03-25 61440]
S3 aspnet_state;Stavová služba ASP.NET; D:\WINDOWS\Microsoft.NET\Framework\v4.0.30319\aspnet_state.exe [2010-03-18 35160]
S3 FontCache3.0.0.0;Windows Presentation Foundation Font Cache 3.0.0.0; D:\WINDOWS\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe [2008-07-29 46104]
S3 gupdatem;Služba Google Update (gupdatem); D:\Program Files\Google\Update\GoogleUpdate.exe [2015-08-27 144200]
S3 idsvc;Služba Windows CardSpace; D:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe [2008-07-29 881664]
S3 MozillaMaintenance;Mozilla Maintenance Service; D:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe [2016-05-31 146888]
S3 ose;Office Source Engine; D:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2003-07-28 89136]
S3 WPFFontCache_v0400;Windows Presentation Foundation Font Cache 4.0.0.0; D:\WINDOWS\Microsoft.NET\Framework\v4.0.30319\WPF\WPFFontCache_v0400.exe [2013-07-20 754856]
S4 clr_optimization_v2.0.50727_32;.NET Runtime Optimization Service v2.0.50727_X86; D:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe [2008-07-25 69632]
S4 NetTcpPortSharing;Net.Tcp Port Sharing Service; D:\WINDOWS\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe [2010-03-18 124240]

-----------------EOF-----------------

[cernohous13]

Začneme kontrolou a vyčištěním

Stáhni AdwCleaner http://general-changelog-team.fr/fr/dow ... adwcleaner
Ulož nejlépe na plochu -> ukonči všechny programy -> spusť AdwCleaner -> klikni na Skenovat po dokončení na Čištění
bude provedena oprava, restartuje se - (případně restartuj) a vypadne log C:\AdwCleaner\AdwCleaner[C?].txt , jeho obsah vložíš sem

pravděpodobně budeš nucen vypnout na tu chvíli antivir - je to čisté, prověřeno

Stahnete Zoek.exe http://hijackthis.nl/smeenk/ a ulozte jej na plochu

• Spustit a do okna vlozte skript nize

• Kód: Vybrat vše

  autoclean;
  resethosts;
  emptyclsid;
  IEdefaults;
  FFdefaults;
  CHRdefaults;
  emptyIEcache;
  emptyFFcache;
  emptyCHRcache;
  emptyalltemp;
  emptyflash;
  emptyjava;
  emptyrecycle.bin;
  

• Nasledne kliknete na Run Script
• PC provede opravu, restartuje se a da Vam log, jeho obsah vlozte sem

Log bude zde C:\zoek-results.log

[gregor]

Díky moc! Zítra po návratu udělám přesně dle návodu. Je se pro jistotu zeptám:

1) mám nejdříve použít ten AdwCleaner a dát sem log, nebo hned po něm použít i ten Zoek.exe dle instrukce vyoseka a dát sem oba ligy najednou?

2) i před použitím Zoek.exe mám ukončit vše včetně antiviru?
Snad nehrozí použitím těch nástrojů nějaké riziko (?)

3) je tedy už z logu Rsit jasné, že je tam nějaký vir a musí se použít ty 2 nástroje k opravě?

[cernohous13]

1) oba logy najednou

2) včetně antiviru a hlavně se nesnaž na PC něco dělat
Zoek si dělá zálohu a můžeš si před čištěním udělat Bod obnovení

3) v logu vidím hlavně zbytečnosti
viry můj slábnoucí zrak nezaznamenal