VIRY.CZ

Dobrý den,

prosím o kontrolu logu. Od dnešního rána při pokusu spustit skoro jakoukoli aplikaci(IE jede) se buďto nestane nic a nebo při spouštění vyskočí hláška "Program xyz přestal pracovat". Norton nic nenašel. Díky za Vaši pomoc.


Logfile of random's system information tool 1.09 (written by random/random)
Run by jejda_mp3 at 2013-06-17 16:48:06
Microsoft Windows 7 Home Premium Service Pack 1
System drive C: has 19 GB (15%) free of 122 GB
Total RAM: 3949 MB (51% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 16:48:08, on 17.6.2013
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v10.0 (10.00.9200.16611)
Boot mode: Normal

Running processes:
C:\Program Files (x86)\ASUS\ASUS Live Update\ALU.exe
C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\NvTmru.exe
C:\Program Files (x86)\ASUS\ATK Package\ATKOSD2\ATKOSD2.exe
C:\Program Files (x86)\ASUS\ATK Package\ATK Media\DMedia.exe
C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\HControlUser.exe
C:\Program Files (x86)\DAEMON Tools Lite\DTShellHlp.exe
C:\Program Files (x86)\Norton 360\Engine\20.3.1.22\ccSvcHst.exe
C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
C:\Users\jejda_mp3\Desktop\RSIT.exe
C:\Program Files (x86)\trend micro\jejda_mp3.exe

R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
F2 - REG:system.ini: UserInit=userinit.exe
O1 - Hosts: ˙ţ127.0.0.1 localhost
O1 - Hosts: ::1 localhost
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: Norton Identity Protection - {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} - C:\Program Files (x86)\Norton 360\Engine\20.3.1.22\coIEPlg.dll
O2 - BHO: Norton Vulnerability Protection - {6D53EC84-6AAE-4787-AEEE-F4628F01010C} - C:\Program Files (x86)\Norton 360\Engine\20.3.1.22\IPS\IPSBHO.DLL
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll
O3 - Toolbar: Norton Toolbar - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - C:\Program Files (x86)\Norton 360\Engine\20.3.1.22\coIEPlg.dll
O4 - HKLM\..\Run: [ATKOSD2] C:\Program Files (x86)\ASUS\ATK Package\ATKOSD2\ATKOSD2.exe
O4 - HKLM\..\Run: [ATKMEDIA] C:\Program Files (x86)\ASUS\ATK Package\ATK Media\DMedia.exe
O4 - HKLM\..\Run: [HControlUser] C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\HControlUser.exe
O4 - HKLM\..\Run: [HTC Sync Loader] "C:\Program Files (x86)\HTC\HTC Sync 3.0\htcUPCTLoader.exe" -startup
O4 - HKCU\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun
O4 - HKCU\..\Run: [DAEMON Tools Lite] "C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe" -autorun
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'NETWORK SERVICE')
O17 - HKLM\System\CCS\Services\Tcpip\..\{0110C32B-DE4C-4669-BCAC-3C4DAF168A0E}: NameServer = 10.1.19.10
O17 - HKLM\System\CS1\Services\Tcpip\..\{0110C32B-DE4C-4669-BCAC-3C4DAF168A0E}: NameServer = 10.1.19.10
O17 - HKLM\System\CS2\Services\Tcpip\..\{0110C32B-DE4C-4669-BCAC-3C4DAF168A0E}: NameServer = 10.1.19.10
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~2\COMMON~1\Skype\SKYPE4~1.DLL
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
O23 - Service: ASLDR Service (ASLDRService) - ASUS - C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\ASLDRSrv.exe
O23 - Service: ATKGFNEX Service (ATKGFNEXSrv) - ASUS - C:\Program Files (x86)\ASUS\ATK Package\ATKGFNEX\GFNEXSrv.exe
O23 - Service: ##Id_String1.6844F930_1628_4223_B5CC_5BB94B879762## (Bonjour Service) - Apple Computer, Inc. - C:\Program Files (x86)\Bonjour\mDNSResponder.exe
O23 - Service: Bluetooth Service (btwdins) - Broadcom Corporation. - C:\Program Files\WIDCOMM\Bluetooth Software\btwdins.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)
O23 - Service: FLEXnet Licensing Service - Macrovision Europe Ltd. - C:\Program Files (x86)\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
O23 - Service: Služba Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Služba Google Update (gupdatem) (gupdatem) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
O23 - Service: Norton 360 (N360) - Symantec Corporation - C:\Program Files (x86)\Norton 360\Engine\20.3.1.22\ccSvcHst.exe
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: nProtect GameGuard Service (npggsvc) - Unknown owner - C:\Windows\system32\GameMon.des.exe (file missing)
O23 - Service: Performance Service (nTuneService) - NVIDIA - C:\Program Files (x86)\NVIDIA Corporation\nTune\nTuneService.exe
O23 - Service: NVIDIA Display Driver Service (nvsvc) - Unknown owner - C:\Windows\system32\nvvsvc.exe (file missing)
O23 - Service: NVIDIA Update Service Daemon (nvUpdatusService) - NVIDIA Corporation - C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Skype Updater (SkypeUpdate) - Skype Technologies - C:\Program Files (x86)\Skype\Updater\Updater.exe
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)
O23 - Service: NVIDIA Stereoscopic 3D Driver Service (Stereo Service) - NVIDIA Corporation - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\Wat\WatUX.exe,-601 (WatAdminSvc) - Unknown owner - C:\Windows\system32\Wat\WatAdminSvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)

--
End of file - 8155 bytes

======Scheduled tasks folder======

C:\Windows\tasks\Adobe Flash Player Updater.job
C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
C:\Windows\tasks\GoogleUpdateTaskMachineUA.job

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
Adobe PDF Link Helper - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2012-09-23 60568]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{602ADB0E-4AFF-4217-8AA1-95DAC4DFA408}]
Norton Identity Protection - C:\Program Files (x86)\Norton 360\Engine\20.3.1.22\coIEPlg.dll [2013-04-01 509776]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{6D53EC84-6AAE-4787-AEEE-F4628F01010C}]
Norton Vulnerability Protection - C:\Program Files (x86)\Norton 360\Engine\20.3.1.22\IPS\IPSBHO.DLL [2012-11-15 387040]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
Java(tm) Plug-In SSV Helper - C:\Program Files (x86)\Java\jre7\bin\ssv.dll [2013-04-04 462752]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll [2013-04-04 171424]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - Norton Toolbar - C:\Program Files (x86)\Norton 360\Engine\20.3.1.22\coIEPlg.dll [2013-04-01 509776]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"ATKOSD2"=C:\Program Files (x86)\ASUS\ATK Package\ATKOSD2\ATKOSD2.exe [2010-06-24 6806144]
"ATKMEDIA"=C:\Program Files (x86)\ASUS\ATK Package\ATK Media\DMedia.exe [2010-05-03 170624]
"HControlUser"=C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\HControlUser.exe [2009-06-19 105016]
"HTC Sync Loader"=C:\Program Files (x86)\HTC\HTC Sync 3.0\htcUPCTLoader.exe [2012-12-12 655360]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"Sidebar"=C:\Program Files\Windows Sidebar\sidebar.exe [2010-11-21 1475584]
"DAEMON Tools Lite"=C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe [2013-01-08 3674320]
"PlayNC Launcher"= []

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED}

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=credssp.dll

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorAdmin"=5
"ConsentPromptBehaviorUser"=3
"EnableUIADesktopToggle"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoActiveDesktop"=1
"NoActiveDesktopChanges"=1
"ForceActiveDesktopOn"=0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.msadpcm"=msadp32.acm
"midimapper"=midimap.dll
"wavemapper"=msacm32.drv
"vidc.uyvy"=msyuv.dll
"vidc.yuy2"=msyuv.dll
"vidc.yvyu"=msyuv.dll
"vidc.iyuv"=iyuv_32.dll
"vidc.i420"=iyuv_32.dll
"vidc.yvu9"=tsbyuv.dll
"msacm.l3acm"=C:\Windows\SysWOW64\l3codeca.acm
"vidc.cvid"=iccvid.dll
"wave5"=wdmaud.drv
"midi5"=wdmaud.drv
"mixer5"=wdmaud.drv
"aux1"=wdmaud.drv
"wave6"=wdmaud.drv
"midi6"=wdmaud.drv
"mixer6"=wdmaud.drv
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv
"wave7"=wdmaud.drv
"midi7"=wdmaud.drv
"mixer7"=wdmaud.drv
"aux2"=wdmaud.drv
"wave8"=wdmaud.drv
"midi8"=wdmaud.drv
"mixer8"=wdmaud.drv
"aux3"=wdmaud.drv
"wave9"=wdmaud.drv
"midi9"=wdmaud.drv
"mixer9"=wdmaud.drv
"aux4"=wdmaud.drv
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"wave2"=wdmaud.drv
"midi2"=wdmaud.drv
"mixer2"=wdmaud.drv
"wave3"=wdmaud.drv
"midi3"=wdmaud.drv
"mixer3"=wdmaud.drv
"wave4"=wdmaud.drv
"midi4"=wdmaud.drv
"mixer4"=wdmaud.drv

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*
.txt - open - "C:\Program Files (x86)\PSPad editor\PSPad.exe" "%1"

======List of files/folders created in the last 1 month======

2013-06-17 16:48:07 ----D---- C:\Program Files (x86)\trend micro
2013-06-17 16:48:06 ----D---- C:\rsit
2013-06-17 08:04:26 ----D---- C:\Program Files (x86)\Norton 360
2013-06-17 08:01:28 ----D---- C:\ProgramData\PCSettings
2013-06-17 07:18:14 ----A---- C:\AdwCleaner[S1].txt
2013-06-17 07:17:55 ----A---- C:\AdwCleaner[R1].txt
2013-06-16 01:25:41 ----A---- C:\Windows\SysWOW64\urlmon.dll
2013-06-16 01:25:40 ----A---- C:\Windows\SysWOW64\ieui.dll
2013-06-16 01:25:40 ----A---- C:\Windows\SysWOW64\iertutil.dll
2013-06-16 01:25:39 ----A---- C:\Windows\SysWOW64\ieframe.dll
2013-06-16 01:25:36 ----A---- C:\Windows\SysWOW64\mshtml.dll
2013-06-13 16:50:04 ----A---- C:\Windows\SysWOW64\RegisterIEPKEYs.exe
2013-06-13 16:50:04 ----A---- C:\Windows\SysWOW64\iesysprep.dll
2013-06-13 16:50:04 ----A---- C:\Windows\SysWOW64\iesetup.dll
2013-06-13 16:50:04 ----A---- C:\Windows\SysWOW64\iernonce.dll
2013-06-13 16:50:03 ----A---- C:\Windows\SysWOW64\msfeeds.dll
2013-06-13 16:50:03 ----A---- C:\Windows\SysWOW64\jscript.dll
2013-06-13 16:50:02 ----A---- C:\Windows\SysWOW64\jscript9.dll
2013-06-13 16:50:01 ----A---- C:\Windows\SysWOW64\wininet.dll
2013-06-13 16:50:01 ----A---- C:\Windows\SysWOW64\jsproxy.dll
2013-06-12 16:57:08 ----A---- C:\Windows\SysWOW64\win32spl.dll
2013-06-12 16:57:07 ----A---- C:\Windows\SysWOW64\cryptdlg.dll
2013-06-12 16:57:03 ----A---- C:\Windows\SysWOW64\WindowsCodecs.dll
2013-06-12 16:56:50 ----A---- C:\Windows\SysWOW64\cryptsvc.dll
2013-06-12 16:56:50 ----A---- C:\Windows\SysWOW64\cryptnet.dll
2013-06-12 16:56:50 ----A---- C:\Windows\SysWOW64\crypt32.dll
2013-06-12 16:56:50 ----A---- C:\Windows\SysWOW64\certutil.exe
2013-06-12 16:56:50 ----A---- C:\Windows\SysWOW64\certenc.dll
2013-06-12 16:56:43 ----A---- C:\Windows\SysWOW64\d3d11.dll
2013-06-07 09:05:50 ----D---- C:\Users\jejda_mp3\AppData\Roaming\Lineage Utils
2013-05-18 03:02:13 ----A---- C:\Windows\SysWOW64\wextract.exe
2013-05-18 03:02:13 ----A---- C:\Windows\SysWOW64\webcheck.dll
2013-05-18 03:02:13 ----A---- C:\Windows\SysWOW64\vbscript.dll
2013-05-18 03:02:13 ----A---- C:\Windows\SysWOW64\url.dll
2013-05-18 03:02:13 ----A---- C:\Windows\SysWOW64\SetIEInstalledDate.exe
2013-05-18 03:02:13 ----A---- C:\Windows\SysWOW64\pngfilt.dll
2013-05-18 03:02:13 ----A---- C:\Windows\SysWOW64\occache.dll
2013-05-18 03:02:13 ----A---- C:\Windows\SysWOW64\msrating.dll
2013-05-18 03:02:13 ----A---- C:\Windows\SysWOW64\msls31.dll
2013-05-18 03:02:13 ----A---- C:\Windows\SysWOW64\mshtmlmedia.dll
2013-05-18 03:02:13 ----A---- C:\Windows\SysWOW64\mshtmler.dll
2013-05-18 03:02:13 ----A---- C:\Windows\SysWOW64\mshtmled.dll
2013-05-18 03:02:13 ----A---- C:\Windows\SysWOW64\mshta.exe
2013-05-18 03:02:13 ----A---- C:\Windows\SysWOW64\msfeedssync.exe
2013-05-18 03:02:13 ----A---- C:\Windows\SysWOW64\msfeedsbs.dll
2013-05-18 03:02:13 ----A---- C:\Windows\SysWOW64\licmgr10.dll
2013-05-18 03:02:13 ----A---- C:\Windows\SysWOW64\inseng.dll
2013-05-18 03:02:13 ----A---- C:\Windows\SysWOW64\imgutil.dll
2013-05-18 03:02:13 ----A---- C:\Windows\SysWOW64\iexpress.exe
2013-05-18 03:02:13 ----A---- C:\Windows\SysWOW64\ieUnatt.exe
2013-05-18 03:02:13 ----A---- C:\Windows\SysWOW64\iepeers.dll
2013-05-18 03:02:13 ----A---- C:\Windows\SysWOW64\iedkcs32.dll
2013-05-18 03:02:13 ----A---- C:\Windows\SysWOW64\ieapfltr.dll
2013-05-18 03:02:13 ----A---- C:\Windows\SysWOW64\ieapfltr.dat
2013-05-18 03:02:13 ----A---- C:\Windows\SysWOW64\IEAdvpack.dll
2013-05-18 03:02:13 ----A---- C:\Windows\SysWOW64\icardie.dll
2013-05-18 03:02:13 ----A---- C:\Windows\SysWOW64\elshyph.dll
2013-05-18 03:02:13 ----A---- C:\Windows\SysWOW64\dxtrans.dll
2013-05-18 03:02:13 ----A---- C:\Windows\SysWOW64\dxtmsft.dll
2013-05-18 03:01:26 ----AH---- C:\Windows\SysWOW64\api-ms-win-downlevel-version-l1-1-0.dll
2013-05-18 03:01:26 ----AH---- C:\Windows\SysWOW64\api-ms-win-downlevel-user32-l1-1-0.dll
2013-05-18 03:01:26 ----AH---- C:\Windows\SysWOW64\api-ms-win-downlevel-shlwapi-l2-1-0.dll
2013-05-18 03:01:26 ----AH---- C:\Windows\SysWOW64\api-ms-win-downlevel-shlwapi-l1-1-0.dll
2013-05-18 03:01:26 ----AH---- C:\Windows\SysWOW64\api-ms-win-downlevel-shell32-l1-1-0.dll
2013-05-18 03:01:26 ----AH---- C:\Windows\SysWOW64\api-ms-win-downlevel-ole32-l1-1-0.dll
2013-05-18 03:01:26 ----AH---- C:\Windows\SysWOW64\api-ms-win-downlevel-normaliz-l1-1-0.dll
2013-05-18 03:01:26 ----AH---- C:\Windows\SysWOW64\api-ms-win-downlevel-advapi32-l2-1-0.dll
2013-05-18 03:01:26 ----AH---- C:\Windows\SysWOW64\api-ms-win-downlevel-advapi32-l1-1-0.dll
2013-05-18 03:01:26 ----A---- C:\Windows\SysWOW64\XpsPrint.dll
2013-05-18 03:01:26 ----A---- C:\Windows\SysWOW64\XpsGdiConverter.dll
2013-05-18 03:01:26 ----A---- C:\Windows\SysWOW64\WMPhoto.dll
2013-05-18 03:01:26 ----A---- C:\Windows\SysWOW64\WindowsCodecsExt.dll
2013-05-18 03:01:26 ----A---- C:\Windows\SysWOW64\UIAnimation.dll
2013-05-18 03:01:26 ----A---- C:\Windows\SysWOW64\msmpeg2vdec.dll
2013-05-18 03:01:26 ----A---- C:\Windows\SysWOW64\dxgi.dll
2013-05-18 03:01:26 ----A---- C:\Windows\SysWOW64\DWrite.dll
2013-05-18 03:01:26 ----A---- C:\Windows\SysWOW64\d3d10warp.dll
2013-05-18 03:01:26 ----A---- C:\Windows\SysWOW64\d3d10level9.dll
2013-05-18 03:01:26 ----A---- C:\Windows\SysWOW64\d3d10core.dll
2013-05-18 03:01:26 ----A---- C:\Windows\SysWOW64\d3d10_1core.dll
2013-05-18 03:01:26 ----A---- C:\Windows\SysWOW64\d3d10_1.dll
2013-05-18 03:01:26 ----A---- C:\Windows\SysWOW64\d3d10.dll
2013-05-18 03:01:26 ----A---- C:\Windows\SysWOW64\d2d1.dll

======List of files/folders modified in the last 1 month======

2013-06-17 16:48:08 ----D---- C:\Windows\Prefetch
2013-06-17 16:48:07 ----RD---- C:\Program Files (x86)
2013-06-17 16:48:07 ----D---- C:\Windows\Temp
2013-06-17 16:44:13 ----D---- C:\Windows\System32
2013-06-17 16:44:13 ----D---- C:\Windows\inf
2013-06-17 09:46:03 ----SHD---- C:\System Volume Information
2013-06-17 08:27:42 ----RSD---- C:\Windows\assembly
2013-06-17 08:27:42 ----D---- C:\Windows\Microsoft.NET
2013-06-17 08:11:29 ----D---- C:\Program Files (x86)\Common Files\Symantec Shared
2013-06-17 08:05:54 ----D---- C:\ProgramData\Norton
2013-06-17 08:04:53 ----RD---- C:\Program Files
2013-06-17 08:04:23 ----D---- C:\Program Files (x86)\NortonInstaller
2013-06-17 08:03:25 ----HD---- C:\ProgramData
2013-06-17 08:03:24 ----D---- C:\ProgramData\NVIDIA
2013-06-17 08:01:28 ----D---- C:\ProgramData\NortonInstaller
2013-06-17 07:55:19 ----D---- C:\Windows\SysWOW64
2013-06-17 07:28:56 ----SD---- C:\Users\jejda_mp3\AppData\Roaming\Microsoft
2013-06-17 06:58:08 ----D---- C:\Program Files (x86)\Pando Networks
2013-06-17 00:37:36 ----D---- C:\Windows\winsxs
2013-06-17 00:37:06 ----SHD---- C:\Windows\Installer
2013-06-17 00:36:46 ----A---- C:\Windows\SysWOW64\PerfStringBackup.INI
2013-06-16 09:31:45 ----D---- C:\Program Files (x86)\Internet Explorer
2013-06-16 01:25:14 ----D---- C:\Users\jejda_mp3\AppData\Roaming\TS3Client
2013-06-14 00:57:45 ----D---- C:\Windows\rescache
2013-06-14 00:31:54 ----D---- C:\Windows\SysWOW64\cs-CZ
2013-06-12 18:28:29 ----A---- C:\Windows\SysWOW64\FlashPlayerApp.exe
2013-06-11 22:13:44 ----D---- C:\Users\jejda_mp3\AppData\Roaming\Mumble
2013-06-11 16:48:48 ----D---- C:\Users\jejda_mp3\AppData\Roaming\vlc
2013-05-29 18:11:34 ----D---- C:\Users\jejda_mp3\AppData\Roaming\Skype
2013-05-28 10:34:12 ----RSD---- C:\Windows\Fonts
2013-05-28 10:33:59 ----D---- C:\Program Files (x86)\OpenOffice.org 3
2013-05-26 01:47:58 ----D---- C:\Users\jejda_mp3\AppData\Roaming\AIMP3
2013-05-26 01:38:06 ----D---- C:\Users\jejda_mp3\AppData\Roaming\DAEMON Tools Lite
2013-05-18 15:45:31 ----D---- C:\Program Files (x86)\Ubisoft
2013-05-18 03:22:28 ----D---- C:\Windows\Panther
2013-05-18 03:21:21 ----D---- C:\Windows\SysWOW64\migration
2013-05-18 03:21:21 ----D---- C:\Windows\SysWOW64\en-US
2013-05-18 03:21:20 ----D---- C:\Windows\PolicyDefinitions
2013-05-18 03:21:19 ----D---- C:\Windows\SysWOW64\zh-TW
2013-05-18 03:21:19 ----D---- C:\Windows\SysWOW64\zh-HK
2013-05-18 03:21:19 ----D---- C:\Windows\SysWOW64\zh-CN
2013-05-18 03:21:19 ----D---- C:\Windows\SysWOW64\tr-TR
2013-05-18 03:21:19 ----D---- C:\Windows\SysWOW64\sv-SE
2013-05-18 03:21:19 ----D---- C:\Windows\SysWOW64\ru-RU
2013-05-18 03:21:19 ----D---- C:\Windows\SysWOW64\pt-PT
2013-05-18 03:21:19 ----D---- C:\Windows\SysWOW64\pt-BR
2013-05-18 03:21:19 ----D---- C:\Windows\SysWOW64\pl-PL
2013-05-18 03:21:19 ----D---- C:\Windows\SysWOW64\nl-NL
2013-05-18 03:21:19 ----D---- C:\Windows\SysWOW64\nb-NO
2013-05-18 03:21:19 ----D---- C:\Windows\SysWOW64\ko-KR
2013-05-18 03:21:19 ----D---- C:\Windows\SysWOW64\ja-JP
2013-05-18 03:21:19 ----D---- C:\Windows\SysWOW64\it-IT
2013-05-18 03:21:19 ----D---- C:\Windows\SysWOW64\hu-HU
2013-05-18 03:21:19 ----D---- C:\Windows\SysWOW64\fr-FR
2013-05-18 03:21:19 ----D---- C:\Windows\SysWOW64\fi-FI
2013-05-18 03:21:19 ----D---- C:\Windows\SysWOW64\es-ES
2013-05-18 03:21:19 ----D---- C:\Windows\SysWOW64\el-GR
2013-05-18 03:21:19 ----D---- C:\Windows\SysWOW64\de-DE
2013-05-18 03:21:19 ----D---- C:\Windows\SysWOW64\da-DK
2013-05-18 03:06:01 ----D---- C:\Windows\Logs
2013-05-18 03:00:28 ----D---- C:\Windows

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 rdyboost;ReadyBoost; C:\Windows\System32\drivers\rdyboost.sys []
R0 speedfan;speedfan; C:\Windows\SysWOW64\speedfan.sys [2011-03-18 29592]
R0 sptd;sptd; C:\Windows\System32\Drivers\sptd.sys []
R0 SymDS;Symantec Data Store; C:\Windows\system32\drivers\N360x64\1403010.016\SYMDS64.SYS []
R0 SymEFA;Symantec Extended File Attributes; C:\Windows\system32\drivers\N360x64\1403010.016\SYMEFA64.SYS []
R1 BHDrvx64;BHDrvx64; \??\C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_20.3.1.22\Definitions\BASHDefs\20130531.001\BHDrvx64.sys [2013-05-31 1393240]
R1 ccSet_N360;Norton 360 Settings Manager; C:\Windows\system32\drivers\N360x64\1403010.016\ccSetx64.sys []
R1 eeCtrl;Symantec Eraser Control driver; \??\C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\eeCtrl64.sys [2013-06-16 484512]
R1 IDSVia64;IDSVia64; \??\C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_20.3.1.22\Definitions\IPSDefs\20130614.001\IDSvia64.sys [2013-06-14 513184]
R1 SRTSPX;Symantec Real Time Storage Protection (PEL) x64; C:\Windows\system32\drivers\N360x64\1403010.016\SRTSPX64.SYS []
R1 SymIRON;Symantec Iron Driver; C:\Windows\system32\drivers\N360x64\1403010.016\Ironx64.SYS []
R1 SymNetS;Symantec Network Security WFP Driver; C:\Windows\system32\drivers\N360x64\1403010.016\SYMNETS.SYS []
R1 vwififlt;Virtual WiFi Filter Driver; C:\Windows\system32\DRIVERS\vwififlt.sys []
R2 ASMMAP64;ASMMAP64; \??\C:\Program Files (x86)\ASUS\ATK Package\ATKGFNEX\ASMMAP64.sys [2009-07-02 15416]
R3 athr;Qualcomm Atheros Extensible Wireless LAN device driver; C:\Windows\system32\DRIVERS\athrx.sys []
R3 BthEnum;Ovladač pro Bluetooth Request Block; C:\Windows\system32\drivers\BthEnum.sys []
R3 BthPan;Zařízení Bluetooth (síť PAN); C:\Windows\system32\DRIVERS\bthpan.sys []
R3 BTHUSB;Ovladač rozhraní USB radiostanice Bluetooth; C:\Windows\System32\Drivers\BTHUSB.sys []
R3 btwampfl;Bluetooth AMP USB Filter; C:\Windows\system32\drivers\btwampfl.sys []
R3 btwaudio;Bluetooth Audio Device Service; C:\Windows\system32\drivers\btwaudio.sys []
R3 btwavdt;Bluetooth AVDT Service; C:\Windows\system32\DRIVERS\btwavdt.sys []
R3 btwl2cap;Bluetooth L2CAP Service; C:\Windows\system32\DRIVERS\btwl2cap.sys []
R3 btwrchid;btwrchid; C:\Windows\system32\DRIVERS\btwrchid.sys []
R3 FLxHCIc;Fresco Logic xHCI (USB3) Device Driver; C:\Windows\system32\DRIVERS\FLxHCIc.sys []
R3 FLxHCIh;Fresco Logic xHCI (USB3) Hub Device Driver; C:\Windows\system32\DRIVERS\FLxHCIh.sys []
R3 HECIx64;Intel(R) Management Engine Interface; C:\Windows\system32\DRIVERS\HECIx64.sys []
R3 Impcd;Impcd; C:\Windows\system32\DRIVERS\Impcd.sys []
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\Windows\system32\drivers\RTKVHD64.sys []
R3 LGBusEnum;Logitech GamePanel Virtual Bus Enumerator Driver; C:\Windows\system32\drivers\LGBusEnum.sys []
R3 LGVirHid;Logitech Gamepanel Virtual HID Device Driver; C:\Windows\system32\drivers\LGVirHid.sys []
R3 MBfilt;MBfilt; C:\Windows\system32\drivers\MBfilt64.sys []
R3 MTsensor;ATK0100 ACPI UTILITY; C:\Windows\system32\DRIVERS\ATK64AMD.sys []
R3 NAVENG;NAVENG; \??\C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_20.3.1.22\Definitions\VirusDefs\20130617.002\ENG64.SYS [2013-06-16 126040]
R3 NAVEX15;NAVEX15; \??\C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_20.3.1.22\Definitions\VirusDefs\20130617.002\EX64.SYS [2013-06-16 2098776]
R3 NVHDA;Service for NVIDIA High Definition Audio Driver; C:\Windows\system32\drivers\nvhda64v.sys []
R3 nvoclk64;NVIDIA Enthusiasts Platform KDM; C:\Windows\system32\DRIVERS\nvoclk64.sys []
R3 RFCOMM;Zařízení Bluetooth (RFCOMM protokol TDI); C:\Windows\system32\DRIVERS\rfcomm.sys []
R3 RSPCIESTOR;Realtek PCIE CardReader Driver; C:\Windows\system32\DRIVERS\RtsPStor.sys []
R3 RTL8167;Realtek 8167 NT Driver; C:\Windows\system32\DRIVERS\Rt64win7.sys []
R3 SRTSP;Symantec Real Time Storage Protection x64; C:\Windows\system32\drivers\N360x64\1403010.016\SRTSP64.SYS []
R3 SymEvent;SymEvent; \??\C:\Windows\system32\Drivers\SYMEVENT64x86.SYS []
R3 SynTP;Synaptics TouchPad Driver; C:\Windows\system32\DRIVERS\SynTP.sys []
R3 vwifimp;Microsoft Virtual WiFi Miniport Service; C:\Windows\system32\DRIVERS\vwifimp.sys []
S3 aygptmde;aygptmde; C:\Windows\SysWOW64\drivers\aygptmde.sys []
S3 BTHPORT;Ovladač portu Bluetooth; C:\Windows\System32\Drivers\BTHport.sys []
S3 btusbflt;Bluetooth USB Filter; C:\Windows\system32\drivers\btusbflt.sys []
S3 EraserUtilDrv11220;EraserUtilDrv11220; \??\C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\EraserUtilDrv11220.sys [2013-06-16 138912]
S3 HTCAND64;HTC Device Driver; C:\Windows\System32\Drivers\ANDROIDUSB.sys []
S3 LADF_CaptureOnly;LADF Capture Filter Driver; C:\Windows\system32\DRIVERS\ladfGSCamd64.sys []
S3 LADF_RenderOnly;LADF Render Filter Driver; C:\Windows\system32\DRIVERS\ladfGSRamd64.sys []
S3 LGSHidFilt;Logitech Gaming KMDF HID Filter Driver; C:\Windows\system32\DRIVERS\LGSHidFilt.Sys []
S3 pciide;pciide; C:\Windows\system32\drivers\pciide.sys []
S3 TsUsbFlt;TsUsbFlt; C:\Windows\system32\drivers\tsusbflt.sys []
S3 TsUsbGD;Remote Desktop Generic USB Device; C:\Windows\system32\drivers\TsUsbGD.sys []
S3 usb_rndisx;Adaptér USB RNDIS; C:\Windows\system32\DRIVERS\usb8023x.sys []
S3 usbscan;Ovladač skeneru USB; C:\Windows\system32\DRIVERS\usbscan.sys []
S3 WDC_SAM;WD SCSI Pass Thru driver; C:\Windows\system32\DRIVERS\wdcsam64.sys []
S3 WinRing0_1_2_0;WinRing0_1_2_0; \??\C:\Program Files (x86)\Razer\Razer Game Booster\Driver\WinRing0x64.sys [2012-08-01 14544]
S3 WinUsb;WinUsb; C:\Windows\system32\DRIVERS\WinUsb.sys []

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 AdobeARMservice;Adobe Acrobat Update Service; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [2012-12-18 65192]
R2 ASLDRService;ASLDR Service; C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\ASLDRSrv.exe [2009-06-15 84536]
R2 ATKGFNEXSrv;ATKGFNEX Service; C:\Program Files (x86)\ASUS\ATK Package\ATKGFNEX\GFNEXSrv.exe [2009-12-15 96896]
R2 Bonjour Service;##Id_String1.6844F930_1628_4223_B5CC_5BB94B879762##; C:\Program Files (x86)\Bonjour\mDNSResponder.exe [2006-02-28 229376]
R2 btwdins;Bluetooth Service; C:\Program Files\WIDCOMM\Bluetooth Software\btwdins.exe [2010-05-21 947488]
R2 N360;Norton 360; C:\Program Files (x86)\Norton 360\Engine\20.3.1.22\ccSvcHst.exe [2012-12-23 144520]
R2 nTuneService;Performance Service; C:\Program Files (x86)\NVIDIA Corporation\nTune\nTuneService.exe [2011-09-19 278336]
R2 nvsvc;NVIDIA Display Driver Service; C:\Windows\system32\nvvsvc.exe []
R2 Stereo Service;NVIDIA Stereoscopic 3D Driver Service; C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe [2013-03-14 383264]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
S2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2010-03-18 138576]
S2 gupdate;Služba Google Update (gupdate); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2013-01-24 116648]
S2 nvUpdatusService;NVIDIA Update Service Daemon; C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe [2013-03-24 1927968]
S2 SkypeUpdate;Skype Updater; C:\Program Files (x86)\Skype\Updater\Updater.exe [2013-02-28 161384]
S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service; C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2013-06-12 256904]
S3 aspnet_state;ASP.NET State Service; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\aspnet_state.exe [2010-03-18 44376]
S3 FLEXnet Licensing Service;FLEXnet Licensing Service; C:\Program Files (x86)\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe [2013-04-12 654848]
S3 gupdatem;Služba Google Update (gupdatem); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2013-01-24 116648]
S3 npggsvc;nProtect GameGuard Service; C:\Windows\system32\GameMon.des [2013-04-29 4722728]
S3 WatAdminSvc;@%SystemRoot%\system32\Wat\WatUX.exe,-601; C:\Windows\system32\Wat\WatAdminSvc.exe []
S4 NetMsmqActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8195; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2010-03-18 124240]
S4 NetPipeActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8197; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2010-03-18 124240]
S4 NetTcpActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8199; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2010-03-18 124240]

-----------------EOF-----------------

Zdravím!
1. Nejprve zkuste obnovu systému k datu, kdy korketně fungoval.
2. Pokud obnova nepovede k nápravě, dejte log ComboFix:

Stahnete a ulozte nejlepe na plochu ComboFix: http://download.bleepingcomputer.com/sUBs/ComboFix.exe

pote spustte aplikaci pod uctem s administratorskym opravnenim

hned po startu se zobrazi obrazovka s licencnimi podminkami, pokracujte kliknutim na tlacitko Ano.

v klidu si postavte na kafe (cela akce trva cca. 5-10 minut, nekdy i dele - dle toho, o jak rychly stroj se

jedna a kolika soubory se skener bude muset prodirat), behem skenu se nepokousejte spoustet zadne jine

aplikace ani nic jineho

behem skenovani nepropadejte panice, vas stroj muze byt restartovan (predevsim pri prvni aplikaci skeneru)

upozorneni: pokud pouzivate antispyware s rezidentnim stitem, prepnete jeho rezidentni stit do Install Mode,

pripadne jej po dobu skenu uplne deaktivujte, protoze dochazi pri skenu a vymazu pripadneho malware k

nezadoucim kolizim s rezidentem antispyware.

Poslední záloha je k dnešnímu datu takže přikládám log z ComboFixu.

ComboFix 13-06-17.01 - jejda_mp3 17.06.2013 20:22:24.1.4 - x64
Microsoft Windows 7 Home Premium 6.1.7601.1.1250.420.1029.18.3949.1989 [GMT 2:00]
Spuštěný z: c:\users\jejda_mp3\Desktop\ComboFix.exe
AV: Norton 360 *Disabled/Updated* {63DF5164-9100-186D-2187-8DC619EFD8BF}
FW: Norton 360 *Disabled* {5BE4D041-DB6F-1935-0AD8-24F3E73C9FC4}
SP: Norton 360 *Enabled/Updated* {D8BEB080-B73A-17E3-1B37-B6B462689202}
SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.
.
((((((((((((((((((((((((((((((((((((((( Ostatní výmazy )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
c:\users\jejda_mp3\AppData\Local\assembly\tmp
c:\windows\Fonts\Shonarb.ttf
.
.
((((((((((((((((((((((((( Soubory vytvořené od 2013-05-17 do 2013-06-17 )))))))))))))))))))))))))))))))
.
.
2013-06-17 18:26 . 2013-06-17 18:26 -------- d-----w- c:\users\UpdatusUser\AppData\Local\temp
2013-06-17 18:26 . 2013-06-17 18:26 -------- d-----w- c:\users\Default\AppData\Local\temp
2013-06-17 14:48 . 2013-06-17 14:48 -------- d-----w- c:\program files (x86)\trend micro
2013-06-17 14:48 . 2013-06-17 14:48 -------- d-----w- C:\rsit
2013-06-17 06:04 . 2013-06-17 06:04 -------- d-----w- c:\program files\Symantec
2013-06-17 06:04 . 2013-06-17 06:04 177312 ----a-w- c:\windows\system32\drivers\SYMEVENT64x86.SYS
2013-06-17 06:04 . 2013-06-17 06:04 -------- d-----w- c:\program files\Common Files\Symantec Shared
2013-06-17 06:04 . 2013-06-17 06:08 -------- d-----w- c:\windows\system32\drivers\N360x64
2013-06-17 06:04 . 2013-06-17 06:04 -------- d-----w- c:\program files (x86)\Norton 360
2013-06-17 06:01 . 2013-06-17 06:01 -------- d-----w- c:\programdata\PCSettings
2013-06-17 05:26 . 2013-06-17 05:26 -------- d-----w- c:\program files\trend micro
2013-06-14 09:14 . 2013-05-13 23:48 9460464 ----a-w- c:\programdata\Microsoft\Windows Defender\Definition Updates\{5E15C14E-6099-4AFC-87DA-8877B08D1DE0}\mpengine.dll
2013-06-12 14:57 . 2013-05-08 06:39 1910632 ----a-w- c:\windows\system32\drivers\tcpip.sys
2013-06-12 14:57 . 2013-04-26 05:51 751104 ----a-w- c:\windows\system32\win32spl.dll
2013-06-12 14:57 . 2013-04-26 04:55 492544 ----a-w- c:\windows\SysWow64\win32spl.dll
2013-06-12 14:57 . 2013-05-10 05:49 30720 ----a-w- c:\windows\system32\cryptdlg.dll
2013-06-12 14:57 . 2013-05-10 03:20 24576 ----a-w- c:\windows\SysWow64\cryptdlg.dll
2013-06-12 14:57 . 2013-04-17 07:02 1230336 ----a-w- c:\windows\SysWow64\WindowsCodecs.dll
2013-06-12 14:57 . 2013-04-17 06:24 1424384 ----a-w- c:\windows\system32\WindowsCodecs.dll
2013-06-12 14:56 . 2013-05-13 05:51 184320 ----a-w- c:\windows\system32\cryptsvc.dll
2013-06-12 14:56 . 2013-05-13 05:51 1464320 ----a-w- c:\windows\system32\crypt32.dll
2013-06-12 14:56 . 2013-05-13 05:51 139776 ----a-w- c:\windows\system32\cryptnet.dll
2013-06-12 14:56 . 2013-05-13 05:50 52224 ----a-w- c:\windows\system32\certenc.dll
2013-06-12 14:56 . 2013-05-13 04:45 140288 ----a-w- c:\windows\SysWow64\cryptsvc.dll
2013-06-12 14:56 . 2013-05-13 04:45 1160192 ----a-w- c:\windows\SysWow64\crypt32.dll
2013-06-12 14:56 . 2013-05-13 04:45 103936 ----a-w- c:\windows\SysWow64\cryptnet.dll
2013-06-12 14:56 . 2013-05-13 03:43 1192448 ----a-w- c:\windows\system32\certutil.exe
2013-06-12 14:56 . 2013-05-13 03:08 903168 ----a-w- c:\windows\SysWow64\certutil.exe
2013-06-12 14:56 . 2013-05-13 03:08 43008 ----a-w- c:\windows\SysWow64\certenc.dll
2013-06-12 14:56 . 2013-04-25 23:30 1505280 ----a-w- c:\windows\SysWow64\d3d11.dll
2013-06-12 14:56 . 2013-03-31 22:52 1887232 ----a-w- c:\windows\system32\d3d11.dll
2013-06-07 07:05 . 2013-06-07 07:12 -------- d-----w- c:\users\jejda_mp3\AppData\Roaming\Lineage Utils
.
.
.
(((((((((((((((((((((((((((((((((((((((( Find3M výpis ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2013-06-13 14:50 . 2013-01-24 11:01 75825640 ----a-w- c:\windows\system32\MRT.exe
2013-06-12 16:28 . 2013-02-01 07:48 71048 ----a-w- c:\windows\SysWow64\FlashPlayerCPLApp.cpl
2013-06-12 16:28 . 2013-02-01 07:48 692104 ----a-w- c:\windows\SysWow64\FlashPlayerApp.exe
2013-05-18 01:02 . 2013-05-18 01:02 97280 ----a-w- c:\windows\system32\mshtmled.dll
2013-05-18 01:02 . 2013-05-18 01:02 92160 ----a-w- c:\windows\system32\SetIEInstalledDate.exe
2013-05-18 01:02 . 2013-05-18 01:02 905728 ----a-w- c:\windows\system32\mshtmlmedia.dll
2013-05-18 01:02 . 2013-05-18 01:02 81408 ----a-w- c:\windows\system32\icardie.dll
2013-05-18 01:02 . 2013-05-18 01:02 77312 ----a-w- c:\windows\system32\tdc.ocx
2013-05-18 01:02 . 2013-05-18 01:02 762368 ----a-w- c:\windows\system32\ieapfltr.dll
2013-05-18 01:02 . 2013-05-18 01:02 73728 ----a-w- c:\windows\SysWow64\SetIEInstalledDate.exe
2013-05-18 01:02 . 2013-05-18 01:02 719360 ----a-w- c:\windows\SysWow64\mshtmlmedia.dll
2013-05-18 01:02 . 2013-05-18 01:02 62976 ----a-w- c:\windows\system32\pngfilt.dll
2013-05-18 01:02 . 2013-05-18 01:02 61952 ----a-w- c:\windows\SysWow64\tdc.ocx
2013-05-18 01:02 . 2013-05-18 01:02 599552 ----a-w- c:\windows\system32\vbscript.dll
2013-05-18 01:02 . 2013-05-18 01:02 523264 ----a-w- c:\windows\SysWow64\vbscript.dll
2013-05-18 01:02 . 2013-05-18 01:02 52224 ----a-w- c:\windows\system32\msfeedsbs.dll
2013-05-18 01:02 . 2013-05-18 01:02 51200 ----a-w- c:\windows\system32\imgutil.dll
2013-05-18 01:02 . 2013-05-18 01:02 48640 ----a-w- c:\windows\SysWow64\mshtmler.dll
2013-05-18 01:02 . 2013-05-18 01:02 48640 ----a-w- c:\windows\system32\mshtmler.dll
2013-05-18 01:02 . 2013-05-18 01:02 452096 ----a-w- c:\windows\system32\dxtmsft.dll
2013-05-18 01:02 . 2013-05-18 01:02 441856 ----a-w- c:\windows\system32\html.iec
2013-05-18 01:02 . 2013-05-18 01:02 38400 ----a-w- c:\windows\SysWow64\imgutil.dll
2013-05-18 01:02 . 2013-05-18 01:02 361984 ----a-w- c:\windows\SysWow64\html.iec
2013-05-18 01:02 . 2013-05-18 01:02 281600 ----a-w- c:\windows\system32\dxtrans.dll
2013-05-18 01:02 . 2013-05-18 01:02 27648 ----a-w- c:\windows\system32\licmgr10.dll
2013-05-18 01:02 . 2013-05-18 01:02 270848 ----a-w- c:\windows\system32\iedkcs32.dll
2013-05-18 01:02 . 2013-05-18 01:02 247296 ----a-w- c:\windows\system32\webcheck.dll
2013-05-18 01:02 . 2013-05-18 01:02 235008 ----a-w- c:\windows\system32\url.dll
2013-05-18 01:02 . 2013-05-18 01:02 23040 ----a-w- c:\windows\SysWow64\licmgr10.dll
2013-05-18 01:02 . 2013-05-18 01:02 226304 ----a-w- c:\windows\system32\elshyph.dll
2013-05-18 01:02 . 2013-05-18 01:02 216064 ----a-w- c:\windows\system32\msls31.dll
2013-05-18 01:02 . 2013-05-18 01:02 197120 ----a-w- c:\windows\system32\msrating.dll
2013-05-18 01:02 . 2013-05-18 01:02 185344 ----a-w- c:\windows\SysWow64\elshyph.dll
2013-05-18 01:02 . 2013-05-18 01:02 173568 ----a-w- c:\windows\system32\ieUnatt.exe
2013-05-18 01:02 . 2013-05-18 01:02 167424 ----a-w- c:\windows\system32\iexpress.exe
2013-05-18 01:02 . 2013-05-18 01:02 158720 ----a-w- c:\windows\SysWow64\msls31.dll
2013-05-18 01:02 . 2013-05-18 01:02 1509376 ----a-w- c:\windows\system32\inetcpl.cpl
2013-05-18 01:02 . 2013-05-18 01:02 150528 ----a-w- c:\windows\SysWow64\iexpress.exe
2013-05-18 01:02 . 2013-05-18 01:02 149504 ----a-w- c:\windows\system32\occache.dll
2013-05-18 01:02 . 2013-05-18 01:02 144896 ----a-w- c:\windows\system32\wextract.exe
2013-05-18 01:02 . 2013-05-18 01:02 1441280 ----a-w- c:\windows\SysWow64\inetcpl.cpl
2013-05-18 01:02 . 2013-05-18 01:02 1400416 ----a-w- c:\windows\system32\ieapfltr.dat
2013-05-18 01:02 . 2013-05-18 01:02 138752 ----a-w- c:\windows\SysWow64\wextract.exe
2013-05-18 01:02 . 2013-05-18 01:02 13824 ----a-w- c:\windows\system32\mshta.exe
2013-05-18 01:02 . 2013-05-18 01:02 137216 ----a-w- c:\windows\SysWow64\ieUnatt.exe
2013-05-18 01:02 . 2013-05-18 01:02 136192 ----a-w- c:\windows\system32\iepeers.dll
2013-05-18 01:02 . 2013-05-18 01:02 135680 ----a-w- c:\windows\system32\IEAdvpack.dll
2013-05-18 01:02 . 2013-05-18 01:02 12800 ----a-w- c:\windows\SysWow64\mshta.exe
2013-05-18 01:02 . 2013-05-18 01:02 12800 ----a-w- c:\windows\system32\msfeedssync.exe
2013-05-18 01:02 . 2013-05-18 01:02 110592 ----a-w- c:\windows\SysWow64\IEAdvpack.dll
2013-05-18 01:02 . 2013-05-18 01:02 1054720 ----a-w- c:\windows\system32\MsSpellCheckingFacility.exe
2013-05-18 01:02 . 2013-05-18 01:02 102912 ----a-w- c:\windows\system32\inseng.dll
2013-05-18 01:01 . 2013-05-18 01:01 9728 ---ha-w- c:\windows\SysWow64\api-ms-win-downlevel-shlwapi-l1-1-0.dll
2013-05-18 01:01 . 2013-05-18 01:01 9728 ---ha-w- c:\windows\system32\api-ms-win-downlevel-shlwapi-l1-1-0.dll
2013-05-18 01:01 . 2013-05-18 01:01 648192 ----a-w- c:\windows\system32\d3d10level9.dll
2013-05-18 01:01 . 2013-05-18 01:01 604160 ----a-w- c:\windows\SysWow64\d3d10level9.dll
2013-05-18 01:01 . 2013-05-18 01:01 5632 ---ha-w- c:\windows\SysWow64\api-ms-win-downlevel-shlwapi-l2-1-0.dll
2013-05-18 01:01 . 2013-05-18 01:01 5632 ---ha-w- c:\windows\SysWow64\api-ms-win-downlevel-ole32-l1-1-0.dll
2013-05-18 01:01 . 2013-05-18 01:01 5632 ---ha-w- c:\windows\system32\api-ms-win-downlevel-shlwapi-l2-1-0.dll
2013-05-18 01:01 . 2013-05-18 01:01 5632 ---ha-w- c:\windows\system32\api-ms-win-downlevel-ole32-l1-1-0.dll
2013-05-18 01:01 . 2013-05-18 01:01 522752 ----a-w- c:\windows\system32\XpsGdiConverter.dll
2013-05-18 01:01 . 2013-05-18 01:01 465920 ----a-w- c:\windows\system32\WMPhoto.dll
2013-05-18 01:01 . 2013-05-18 01:01 417792 ----a-w- c:\windows\SysWow64\WMPhoto.dll
2013-05-18 01:01 . 2013-05-18 01:01 4096 ---ha-w- c:\windows\SysWow64\api-ms-win-downlevel-user32-l1-1-0.dll
2013-05-18 01:01 . 2013-05-18 01:01 4096 ---ha-w- c:\windows\system32\api-ms-win-downlevel-user32-l1-1-0.dll
2013-05-18 01:01 . 2013-05-18 01:01 3928064 ----a-w- c:\windows\system32\d2d1.dll
2013-05-18 01:01 . 2013-05-18 01:01 364544 ----a-w- c:\windows\SysWow64\XpsGdiConverter.dll
2013-05-18 01:01 . 2013-05-18 01:01 363008 ----a-w- c:\windows\system32\dxgi.dll
2013-05-18 01:01 . 2013-05-18 01:01 3584 ---ha-w- c:\windows\SysWow64\api-ms-win-downlevel-advapi32-l2-1-0.dll
2013-05-18 01:01 . 2013-05-18 01:01 3584 ---ha-w- c:\windows\system32\api-ms-win-downlevel-advapi32-l2-1-0.dll
2013-05-18 01:01 . 2013-05-18 01:01 3419136 ----a-w- c:\windows\SysWow64\d2d1.dll
2013-05-18 01:01 . 2013-05-18 01:01 333312 ----a-w- c:\windows\system32\d3d10_1core.dll
2013-05-18 01:01 . 2013-05-18 01:01 3072 ---ha-w- c:\windows\SysWow64\api-ms-win-downlevel-version-l1-1-0.dll
2013-05-18 01:01 . 2013-05-18 01:01 3072 ---ha-w- c:\windows\SysWow64\api-ms-win-downlevel-shell32-l1-1-0.dll
2013-05-18 01:01 . 2013-05-18 01:01 3072 ---ha-w- c:\windows\system32\api-ms-win-downlevel-version-l1-1-0.dll
2013-05-18 01:01 . 2013-05-18 01:01 3072 ---ha-w- c:\windows\system32\api-ms-win-downlevel-shell32-l1-1-0.dll
2013-05-18 01:01 . 2013-05-18 01:01 296960 ----a-w- c:\windows\system32\d3d10core.dll
2013-05-18 01:01 . 2013-05-18 01:01 293376 ----a-w- c:\windows\SysWow64\dxgi.dll
2013-05-18 01:01 . 2013-05-18 01:01 2776576 ----a-w- c:\windows\system32\msmpeg2vdec.dll
2013-05-18 01:01 . 2013-05-18 01:01 2565120 ----a-w- c:\windows\system32\d3d10warp.dll
2013-05-18 01:01 . 2013-05-18 01:01 2560 ---ha-w- c:\windows\SysWow64\api-ms-win-downlevel-normaliz-l1-1-0.dll
2013-05-18 01:01 . 2013-05-18 01:01 2560 ---ha-w- c:\windows\system32\api-ms-win-downlevel-normaliz-l1-1-0.dll
2013-05-18 01:01 . 2013-05-18 01:01 249856 ----a-w- c:\windows\SysWow64\d3d10_1core.dll
2013-05-18 01:01 . 2013-05-18 01:01 245248 ----a-w- c:\windows\system32\WindowsCodecsExt.dll
2013-05-18 01:01 . 2013-05-18 01:01 2284544 ----a-w- c:\windows\SysWow64\msmpeg2vdec.dll
2013-05-18 01:01 . 2013-05-18 01:01 221184 ----a-w- c:\windows\system32\UIAnimation.dll
2013-05-18 01:01 . 2013-05-18 01:01 220160 ----a-w- c:\windows\SysWow64\d3d10core.dll
2013-05-18 01:01 . 2013-05-18 01:01 207872 ----a-w- c:\windows\SysWow64\WindowsCodecsExt.dll
2013-05-18 01:01 . 2013-05-18 01:01 1988096 ----a-w- c:\windows\SysWow64\d3d10warp.dll
2013-05-18 01:01 . 2013-05-18 01:01 194560 ----a-w- c:\windows\system32\d3d10_1.dll
2013-05-18 01:01 . 2013-05-18 01:01 187392 ----a-w- c:\windows\SysWow64\UIAnimation.dll
2013-05-18 01:01 . 2013-05-18 01:01 1682432 ----a-w- c:\windows\system32\XpsPrint.dll
2013-05-18 01:01 . 2013-05-18 01:01 1643520 ----a-w- c:\windows\system32\DWrite.dll
2013-05-18 01:01 . 2013-05-18 01:01 161792 ----a-w- c:\windows\SysWow64\d3d10_1.dll
2013-05-18 01:01 . 2013-05-18 01:01 1247744 ----a-w- c:\windows\SysWow64\DWrite.dll
2013-05-18 01:01 . 2013-05-18 01:01 1238528 ----a-w- c:\windows\system32\d3d10.dll
2013-05-18 01:01 . 2013-05-18 01:01 1175552 ----a-w- c:\windows\system32\FntCache.dll
2013-05-18 01:01 . 2013-05-18 01:01 1158144 ----a-w- c:\windows\SysWow64\XpsPrint.dll
2013-05-18 01:01 . 2013-05-18 01:01 1080832 ----a-w- c:\windows\SysWow64\d3d10.dll
2013-05-18 01:01 . 2013-05-18 01:01 10752 ---ha-w- c:\windows\SysWow64\api-ms-win-downlevel-advapi32-l1-1-0.dll
.
.
(((((((((((((((((((((((((((((((((( Spouštěcí body v registru )))))))))))))))))))))))))))))))))))))))))))))
.
.
*Poznámka* prázdné záznamy a legitimní výchozí údaje nejsou zobrazeny.
REGEDIT4
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Sidebar"="c:\program files\Windows Sidebar\sidebar.exe" [2010-11-21 1475584]
"DAEMON Tools Lite"="c:\program files (x86)\DAEMON Tools Lite\DTLite.exe" [2013-01-08 3674320]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]
"ATKOSD2"="c:\program files (x86)\ASUS\ATK Package\ATKOSD2\ATKOSD2.exe" [2010-06-24 6806144]
"ATKMEDIA"="c:\program files (x86)\ASUS\ATK Package\ATK Media\DMedia.exe" [2010-05-03 170624]
"HControlUser"="c:\program files (x86)\ASUS\ATK Package\ATK Hotkey\HControlUser.exe" [2009-06-19 105016]
"HTC Sync Loader"="c:\program files (x86)\HTC\HTC Sync 3.0\htcUPCTLoader.exe" [2012-12-12 655360]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorAdmin"= 5 (0x5)
"ConsentPromptBehaviorUser"= 3 (0x3)
"EnableUIADesktopToggle"= 0 (0x0)
.
R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [x]
R2 SkypeUpdate;Skype Updater;c:\program files (x86)\Skype\Updater\Updater.exe;c:\program files (x86)\Skype\Updater\Updater.exe [x]
R3 btusbflt;Bluetooth USB Filter;c:\windows\system32\drivers\btusbflt.sys;c:\windows\SYSNATIVE\drivers\btusbflt.sys [x]
R3 HTCAND64;HTC Device Driver;c:\windows\system32\Drivers\ANDROIDUSB.sys;c:\windows\SYSNATIVE\Drivers\ANDROIDUSB.sys [x]
R3 LADF_CaptureOnly;LADF Capture Filter Driver;c:\windows\system32\DRIVERS\ladfGSCamd64.sys;c:\windows\SYSNATIVE\DRIVERS\ladfGSCamd64.sys [x]
R3 LADF_RenderOnly;LADF Render Filter Driver;c:\windows\system32\DRIVERS\ladfGSRamd64.sys;c:\windows\SYSNATIVE\DRIVERS\ladfGSRamd64.sys [x]
R3 LGSHidFilt;Logitech Gaming KMDF HID Filter Driver;c:\windows\system32\DRIVERS\LGSHidFilt.Sys;c:\windows\SYSNATIVE\DRIVERS\LGSHidFilt.Sys [x]
R3 npggsvc;nProtect GameGuard Service;c:\windows\system32\GameMon.des;c:\windows\SYSNATIVE\GameMon.des [x]
R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys;c:\windows\SYSNATIVE\drivers\tsusbflt.sys [x]
R3 TsUsbGD;Remote Desktop Generic USB Device;c:\windows\system32\drivers\TsUsbGD.sys;c:\windows\SYSNATIVE\drivers\TsUsbGD.sys [x]
R3 WatAdminSvc;Služba Technologie aktivace Windows;c:\windows\system32\Wat\WatAdminSvc.exe;c:\windows\SYSNATIVE\Wat\WatAdminSvc.exe [x]
R3 WDC_SAM;WD SCSI Pass Thru driver;c:\windows\system32\DRIVERS\wdcsam64.sys;c:\windows\SYSNATIVE\DRIVERS\wdcsam64.sys [x]
R3 WinRing0_1_2_0;WinRing0_1_2_0;c:\program files (x86)\Razer\Razer Game Booster\Driver\WinRing0x64.sys;c:\program files (x86)\Razer\Razer Game Booster\Driver\WinRing0x64.sys [x]
S0 sptd;sptd;c:\windows\\SystemRoot\System32\Drivers\sptd.sys;c:\windows\\SystemRoot\System32\Drivers\sptd.sys [x]
S0 SymDS;Symantec Data Store;c:\windows\system32\drivers\N360x64\1403010.016\SYMDS64.SYS;c:\windows\SYSNATIVE\drivers\N360x64\1403010.016\SYMDS64.SYS [x]
S0 SymEFA;Symantec Extended File Attributes;c:\windows\system32\drivers\N360x64\1403010.016\SYMEFA64.SYS;c:\windows\SYSNATIVE\drivers\N360x64\1403010.016\SYMEFA64.SYS [x]
S1 BHDrvx64;BHDrvx64;c:\programdata\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_20.3.1.22\Definitions\BASHDefs\20130531.001\BHDrvx64.sys;c:\programdata\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_20.3.1.22\Definitions\BASHDefs\20130531.001\BHDrvx64.sys [x]
S1 ccSet_N360;Norton 360 Settings Manager;c:\windows\system32\drivers\N360x64\1403010.016\ccSetx64.sys;c:\windows\SYSNATIVE\drivers\N360x64\1403010.016\ccSetx64.sys [x]
S1 IDSVia64;IDSVia64;c:\programdata\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_20.3.1.22\Definitions\IPSDefs\20130614.001\IDSvia64.sys;c:\programdata\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_20.3.1.22\Definitions\IPSDefs\20130614.001\IDSvia64.sys [x]
S1 SymIRON;Symantec Iron Driver;c:\windows\system32\drivers\N360x64\1403010.016\Ironx64.SYS;c:\windows\SYSNATIVE\drivers\N360x64\1403010.016\Ironx64.SYS [x]
S1 SYMNETS;Symantec Network Security WFP Driver;c:\windows\system32\drivers\N360x64\1403010.016\SYMNETS.SYS;c:\windows\SYSNATIVE\drivers\N360x64\1403010.016\SYMNETS.SYS [x]
S2 ASMMAP64;ASMMAP64;c:\program files (x86)\ASUS\ATK Package\ATKGFNEX\ASMMAP64.sys;c:\program files (x86)\ASUS\ATK Package\ATKGFNEX\ASMMAP64.sys [x]
S2 N360;Norton 360;c:\program files (x86)\Norton 360\Engine\20.3.1.22\ccSvcHst.exe;c:\program files (x86)\Norton 360\Engine\20.3.1.22\ccSvcHst.exe [x]
S2 Stereo Service;NVIDIA Stereoscopic 3D Driver Service;c:\program files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe;c:\program files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe [x]
S3 btwampfl;Bluetooth AMP USB Filter;c:\windows\system32\drivers\btwampfl.sys;c:\windows\SYSNATIVE\drivers\btwampfl.sys [x]
S3 btwl2cap;Bluetooth L2CAP Service;c:\windows\system32\DRIVERS\btwl2cap.sys;c:\windows\SYSNATIVE\DRIVERS\btwl2cap.sys [x]
S3 FLxHCIc;Fresco Logic xHCI (USB3) Device Driver;c:\windows\system32\DRIVERS\FLxHCIc.sys;c:\windows\SYSNATIVE\DRIVERS\FLxHCIc.sys [x]
S3 FLxHCIh;Fresco Logic xHCI (USB3) Hub Device Driver;c:\windows\system32\DRIVERS\FLxHCIh.sys;c:\windows\SYSNATIVE\DRIVERS\FLxHCIh.sys [x]
S3 HECIx64;Intel(R) Management Engine Interface;c:\windows\system32\DRIVERS\HECIx64.sys;c:\windows\SYSNATIVE\DRIVERS\HECIx64.sys [x]
S3 Impcd;Impcd;c:\windows\system32\DRIVERS\Impcd.sys;c:\windows\SYSNATIVE\DRIVERS\Impcd.sys [x]
S3 LGBusEnum;Logitech GamePanel Virtual Bus Enumerator Driver;c:\windows\system32\drivers\LGBusEnum.sys;c:\windows\SYSNATIVE\drivers\LGBusEnum.sys [x]
S3 LGVirHid;Logitech Gamepanel Virtual HID Device Driver;c:\windows\system32\drivers\LGVirHid.sys;c:\windows\SYSNATIVE\drivers\LGVirHid.sys [x]
S3 MBfilt;MBfilt;c:\windows\system32\drivers\MBfilt64.sys;c:\windows\SYSNATIVE\drivers\MBfilt64.sys [x]
S3 nvoclk64;NVIDIA Enthusiasts Platform KDM;c:\windows\system32\DRIVERS\nvoclk64.sys;c:\windows\SYSNATIVE\DRIVERS\nvoclk64.sys [x]
S3 RSPCIESTOR;Realtek PCIE CardReader Driver;c:\windows\system32\DRIVERS\RtsPStor.sys;c:\windows\SYSNATIVE\DRIVERS\RtsPStor.sys [x]
S3 RTL8167;Realtek 8167 NT Driver;c:\windows\system32\DRIVERS\Rt64win7.sys;c:\windows\SYSNATIVE\DRIVERS\Rt64win7.sys [x]
.
.
--- Ostatní služby/ovladače v paměti ---
.
*NewlyCreated* - BHDRVX64
*NewlyCreated* - CCSET_N360
*NewlyCreated* - IDSVIA64
*NewlyCreated* - NAVENG
*NewlyCreated* - NAVEX15
*NewlyCreated* - SRTSP
*NewlyCreated* - SRTSPX
*NewlyCreated* - SYMDS
*NewlyCreated* - SYMEFA
*NewlyCreated* - SYMEVENT
*NewlyCreated* - SYMIRON
*NewlyCreated* - SYMNETS
*Deregistered* - EraserUtilDrv11220
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\active setup\installed components\{8A69D345-D564-463c-AFF1-A69D9E530F96}]
2013-06-05 20:43 1165776 ----a-w- c:\program files (x86)\Google\Chrome\Application\27.0.1453.110\Installer\chrmstp.exe
.
Obsah adresáře 'Naplánované úlohy'
.
2013-06-17 c:\windows\Tasks\Adobe Flash Player Updater.job
- c:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2013-02-01 16:28]
.
2013-06-17 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
- c:\program files (x86)\Google\Update\GoogleUpdate.exe [2013-01-24 10:08]
.
2013-06-17 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
- c:\program files (x86)\Google\Update\GoogleUpdate.exe [2013-01-24 10:08]
.
.
--------- X64 Entries -----------
.
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\GDriveBlacklistedOverlay]
@="{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D42}"
[HKEY_CLASSES_ROOT\CLSID\{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D42}]
2013-04-16 14:10 776144 ----a-w- c:\program files (x86)\Google\Drive\googledrivesync64.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\GDriveSharedOverlay]
@="{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D44}"
[HKEY_CLASSES_ROOT\CLSID\{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D44}]
2013-04-16 14:10 776144 ----a-w- c:\program files (x86)\Google\Drive\googledrivesync64.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\GDriveSyncedOverlay]
@="{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D40}"
[HKEY_CLASSES_ROOT\CLSID\{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D40}]
2013-04-16 14:10 776144 ----a-w- c:\program files (x86)\Google\Drive\googledrivesync64.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\GDriveSyncingOverlay]
@="{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D41}"
[HKEY_CLASSES_ROOT\CLSID\{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D41}]
2013-04-16 14:10 776144 ----a-w- c:\program files (x86)\Google\Drive\googledrivesync64.dll
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Launch LCore"="c:\program files\Logitech Gaming Software\LCore.exe" [2012-11-29 7406392]
"RTHDVCPL"="c:\program files\Realtek\Audio\HDA\RAVCpl64.exe" [2000-01-01 12503184]
"Nvtmru"="c:\program files (x86)\NVIDIA Corporation\NVIDIA Update Core\nvtmru.exe" [2013-03-24 976672]
.
------- Doplňkový sken -------
.
uLocal Page = c:\windows\system32\blank.htm
mLocal Page = c:\windows\SYSTEM32\blank.htm
TCP: DhcpNameServer = 192.168.0.1
TCP: Interfaces\{0110C32B-DE4C-4669-BCAC-3C4DAF168A0E}: NameServer = 10.1.19.10
.
.
------- Asociace souborů -------
.
txtfile="c:\program files (x86)\PSPad editor\PSPad.exe" "%1"
.
- - - - NEPLATNÉ POLOŽKY ODSTRANĚNÉ Z REGISTRU - - - -
.
Wow6432Node-HKCU-Run-PlayNC Launcher - (no file)
HKLM_Wow6432Node-ActiveSetup-{2D46B6DC-2207-486B-B523-A557E6D54B47} - start
HKLM-Run-SynTPEnh - c:\program files (x86)\Synaptics\SynTP\SynTPEnh.exe
.
.
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\N360]
"ImagePath"="\"c:\program files (x86)\Norton 360\Engine\20.3.1.22\ccSvcHst.exe\" /s \"N360\" /m \"c:\program files (x86)\Norton 360\Engine\20.3.1.22\diMaster.dll\" /prefetch:1"
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\npggsvc]
"ImagePath"="c:\windows\system32\GameMon.des -service"
.
--------------------- ZAMKNUTÉ KLÍČE V REGISTRU ---------------------
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\PCW\Security]
@Denied: (Full) (Everyone)
.
Celkový čas: 2013-06-17 20:28:23
ComboFix-quarantined-files.txt 2013-06-17 18:28
.
Před spuštěním: Volných bajtů: 19 165 224 960
Po spuštění: Volných bajtů: 19 014 086 656
.
- - End Of File - - EF1E0E56F2167B709FDF2585FD80A009
A36C5E4F47E84449FF07ED3517B43A31

Doplním ještě že se nic nezměnilo a Antispam je v logu zapsaný jako zapnutý, ale vypnul jsem ho po tom co mě ComboFix podruhé upozornil, protože prvně jsem omylem vypnul jen Antivir

Otevřte poznámkový blok a zkopírujte do něj:

KillAll::

File::
c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
c:\windows\Tasks\GoogleUpdateTaskMachineUA.job

RegLock::
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\PCW\Security]

Reboot::

Uložte na plochu jako CFScript.txt. Pak jej myší přetáhněte nad ikonu ComboFix a pusťte. CF se spustí a vykoná příkazy ze skriptu.

http://img138.imageshack.us/img138/6433/cfscript.gif

Situace je stejná s menším rozdílem při standartním spuštění jakékoli aplikace včetně IE se objeví hláška "Pokus použít neplatnou operaci na klíč registru, který je označen pro odstranění." Při spuštění jako správce je to stejné jako posledně, kromě IE nejede nic

ComboFix 13-06-17.01 - jejda_mp3 17.06.2013 21:03:01.2.4 - x64
Microsoft Windows 7 Home Premium 6.1.7601.1.1250.420.1029.18.3949.1498 [GMT 2:00]
Spuštěný z: c:\users\jejda_mp3\Desktop\ComboFix.exe
Použité ovládací přepínače :: c:\users\jejda_mp3\Desktop\CFScript.txt
AV: Norton 360 *Disabled/Updated* {63DF5164-9100-186D-2187-8DC619EFD8BF}
FW: Norton 360 *Enabled* {5BE4D041-DB6F-1935-0AD8-24F3E73C9FC4}
SP: Norton 360 *Disabled/Updated* {D8BEB080-B73A-17E3-1B37-B6B462689202}
SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.
FILE ::
"c:\windows\Tasks\GoogleUpdateTaskMachineCore.job"
"c:\windows\Tasks\GoogleUpdateTaskMachineUA.job"
.
.
((((((((((((((((((((((((((((((((((((((( Ostatní výmazy )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
.
.
((((((((((((((((((((((((( Soubory vytvořené od 2013-05-17 do 2013-06-17 )))))))))))))))))))))))))))))))
.
.
2013-06-17 19:06 . 2013-06-17 19:06 -------- d-----w- c:\users\UpdatusUser\AppData\Local\temp
2013-06-17 14:48 . 2013-06-17 14:48 -------- d-----w- c:\program files (x86)\trend micro
2013-06-17 14:48 . 2013-06-17 14:48 -------- d-----w- C:\rsit
2013-06-17 06:04 . 2013-06-17 06:04 -------- d-----w- c:\program files\Symantec
2013-06-17 06:04 . 2013-06-17 06:04 177312 ----a-w- c:\windows\system32\drivers\SYMEVENT64x86.SYS
2013-06-17 06:04 . 2013-06-17 06:04 -------- d-----w- c:\program files\Common Files\Symantec Shared
2013-06-17 06:04 . 2013-06-17 06:08 -------- d-----w- c:\windows\system32\drivers\N360x64
2013-06-17 06:04 . 2013-06-17 06:04 -------- d-----w- c:\program files (x86)\Norton 360
2013-06-17 06:01 . 2013-06-17 06:01 -------- d-----w- c:\programdata\PCSettings
2013-06-17 05:26 . 2013-06-17 05:26 -------- d-----w- c:\program files\trend micro
2013-06-14 09:14 . 2013-05-13 23:48 9460464 ----a-w- c:\programdata\Microsoft\Windows Defender\Definition Updates\{5E15C14E-6099-4AFC-87DA-8877B08D1DE0}\mpengine.dll
2013-06-12 14:57 . 2013-05-08 06:39 1910632 ----a-w- c:\windows\system32\drivers\tcpip.sys
2013-06-12 14:57 . 2013-04-26 05:51 751104 ----a-w- c:\windows\system32\win32spl.dll
2013-06-12 14:57 . 2013-04-26 04:55 492544 ----a-w- c:\windows\SysWow64\win32spl.dll
2013-06-12 14:57 . 2013-05-10 05:49 30720 ----a-w- c:\windows\system32\cryptdlg.dll
2013-06-12 14:57 . 2013-05-10 03:20 24576 ----a-w- c:\windows\SysWow64\cryptdlg.dll
2013-06-12 14:57 . 2013-04-17 07:02 1230336 ----a-w- c:\windows\SysWow64\WindowsCodecs.dll
2013-06-12 14:57 . 2013-04-17 06:24 1424384 ----a-w- c:\windows\system32\WindowsCodecs.dll
2013-06-12 14:56 . 2013-05-13 05:51 184320 ----a-w- c:\windows\system32\cryptsvc.dll
2013-06-12 14:56 . 2013-05-13 05:51 1464320 ----a-w- c:\windows\system32\crypt32.dll
2013-06-12 14:56 . 2013-05-13 05:51 139776 ----a-w- c:\windows\system32\cryptnet.dll
2013-06-12 14:56 . 2013-05-13 05:50 52224 ----a-w- c:\windows\system32\certenc.dll
2013-06-12 14:56 . 2013-05-13 04:45 140288 ----a-w- c:\windows\SysWow64\cryptsvc.dll
2013-06-12 14:56 . 2013-05-13 04:45 1160192 ----a-w- c:\windows\SysWow64\crypt32.dll
2013-06-12 14:56 . 2013-05-13 04:45 103936 ----a-w- c:\windows\SysWow64\cryptnet.dll
2013-06-12 14:56 . 2013-05-13 03:43 1192448 ----a-w- c:\windows\system32\certutil.exe
2013-06-12 14:56 . 2013-05-13 03:08 903168 ----a-w- c:\windows\SysWow64\certutil.exe
2013-06-12 14:56 . 2013-05-13 03:08 43008 ----a-w- c:\windows\SysWow64\certenc.dll
2013-06-12 14:56 . 2013-04-25 23:30 1505280 ----a-w- c:\windows\SysWow64\d3d11.dll
2013-06-12 14:56 . 2013-03-31 22:52 1887232 ----a-w- c:\windows\system32\d3d11.dll
2013-06-07 07:05 . 2013-06-07 07:12 -------- d-----w- c:\users\jejda_mp3\AppData\Roaming\Lineage Utils
.
.
.
(((((((((((((((((((((((((((((((((((((((( Find3M výpis ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2013-06-13 14:50 . 2013-01-24 11:01 75825640 ----a-w- c:\windows\system32\MRT.exe
2013-06-12 16:28 . 2013-02-01 07:48 71048 ----a-w- c:\windows\SysWow64\FlashPlayerCPLApp.cpl
2013-06-12 16:28 . 2013-02-01 07:48 692104 ----a-w- c:\windows\SysWow64\FlashPlayerApp.exe
2013-05-18 01:02 . 2013-05-18 01:02 97280 ----a-w- c:\windows\system32\mshtmled.dll
2013-05-18 01:02 . 2013-05-18 01:02 92160 ----a-w- c:\windows\system32\SetIEInstalledDate.exe
2013-05-18 01:02 . 2013-05-18 01:02 905728 ----a-w- c:\windows\system32\mshtmlmedia.dll
2013-05-18 01:02 . 2013-05-18 01:02 81408 ----a-w- c:\windows\system32\icardie.dll
2013-05-18 01:02 . 2013-05-18 01:02 77312 ----a-w- c:\windows\system32\tdc.ocx
2013-05-18 01:02 . 2013-05-18 01:02 762368 ----a-w- c:\windows\system32\ieapfltr.dll
2013-05-18 01:02 . 2013-05-18 01:02 73728 ----a-w- c:\windows\SysWow64\SetIEInstalledDate.exe
2013-05-18 01:02 . 2013-05-18 01:02 719360 ----a-w- c:\windows\SysWow64\mshtmlmedia.dll
2013-05-18 01:02 . 2013-05-18 01:02 62976 ----a-w- c:\windows\system32\pngfilt.dll
2013-05-18 01:02 . 2013-05-18 01:02 61952 ----a-w- c:\windows\SysWow64\tdc.ocx
2013-05-18 01:02 . 2013-05-18 01:02 599552 ----a-w- c:\windows\system32\vbscript.dll
2013-05-18 01:02 . 2013-05-18 01:02 523264 ----a-w- c:\windows\SysWow64\vbscript.dll
2013-05-18 01:02 . 2013-05-18 01:02 52224 ----a-w- c:\windows\system32\msfeedsbs.dll
2013-05-18 01:02 . 2013-05-18 01:02 51200 ----a-w- c:\windows\system32\imgutil.dll
2013-05-18 01:02 . 2013-05-18 01:02 48640 ----a-w- c:\windows\SysWow64\mshtmler.dll
2013-05-18 01:02 . 2013-05-18 01:02 48640 ----a-w- c:\windows\system32\mshtmler.dll
2013-05-18 01:02 . 2013-05-18 01:02 452096 ----a-w- c:\windows\system32\dxtmsft.dll
2013-05-18 01:02 . 2013-05-18 01:02 441856 ----a-w- c:\windows\system32\html.iec
2013-05-18 01:02 . 2013-05-18 01:02 38400 ----a-w- c:\windows\SysWow64\imgutil.dll
2013-05-18 01:02 . 2013-05-18 01:02 361984 ----a-w- c:\windows\SysWow64\html.iec
2013-05-18 01:02 . 2013-05-18 01:02 281600 ----a-w- c:\windows\system32\dxtrans.dll
2013-05-18 01:02 . 2013-05-18 01:02 27648 ----a-w- c:\windows\system32\licmgr10.dll
2013-05-18 01:02 . 2013-05-18 01:02 270848 ----a-w- c:\windows\system32\iedkcs32.dll
2013-05-18 01:02 . 2013-05-18 01:02 247296 ----a-w- c:\windows\system32\webcheck.dll
2013-05-18 01:02 . 2013-05-18 01:02 235008 ----a-w- c:\windows\system32\url.dll
2013-05-18 01:02 . 2013-05-18 01:02 23040 ----a-w- c:\windows\SysWow64\licmgr10.dll
2013-05-18 01:02 . 2013-05-18 01:02 226304 ----a-w- c:\windows\system32\elshyph.dll
2013-05-18 01:02 . 2013-05-18 01:02 216064 ----a-w- c:\windows\system32\msls31.dll
2013-05-18 01:02 . 2013-05-18 01:02 197120 ----a-w- c:\windows\system32\msrating.dll
2013-05-18 01:02 . 2013-05-18 01:02 185344 ----a-w- c:\windows\SysWow64\elshyph.dll
2013-05-18 01:02 . 2013-05-18 01:02 173568 ----a-w- c:\windows\system32\ieUnatt.exe
2013-05-18 01:02 . 2013-05-18 01:02 167424 ----a-w- c:\windows\system32\iexpress.exe
2013-05-18 01:02 . 2013-05-18 01:02 158720 ----a-w- c:\windows\SysWow64\msls31.dll
2013-05-18 01:02 . 2013-05-18 01:02 1509376 ----a-w- c:\windows\system32\inetcpl.cpl
2013-05-18 01:02 . 2013-05-18 01:02 150528 ----a-w- c:\windows\SysWow64\iexpress.exe
2013-05-18 01:02 . 2013-05-18 01:02 149504 ----a-w- c:\windows\system32\occache.dll
2013-05-18 01:02 . 2013-05-18 01:02 144896 ----a-w- c:\windows\system32\wextract.exe
2013-05-18 01:02 . 2013-05-18 01:02 1441280 ----a-w- c:\windows\SysWow64\inetcpl.cpl
2013-05-18 01:02 . 2013-05-18 01:02 1400416 ----a-w- c:\windows\system32\ieapfltr.dat
2013-05-18 01:02 . 2013-05-18 01:02 138752 ----a-w- c:\windows\SysWow64\wextract.exe
2013-05-18 01:02 . 2013-05-18 01:02 13824 ----a-w- c:\windows\system32\mshta.exe
2013-05-18 01:02 . 2013-05-18 01:02 137216 ----a-w- c:\windows\SysWow64\ieUnatt.exe
2013-05-18 01:02 . 2013-05-18 01:02 136192 ----a-w- c:\windows\system32\iepeers.dll
2013-05-18 01:02 . 2013-05-18 01:02 135680 ----a-w- c:\windows\system32\IEAdvpack.dll
2013-05-18 01:02 . 2013-05-18 01:02 12800 ----a-w- c:\windows\SysWow64\mshta.exe
2013-05-18 01:02 . 2013-05-18 01:02 12800 ----a-w- c:\windows\system32\msfeedssync.exe
2013-05-18 01:02 . 2013-05-18 01:02 110592 ----a-w- c:\windows\SysWow64\IEAdvpack.dll
2013-05-18 01:02 . 2013-05-18 01:02 1054720 ----a-w- c:\windows\system32\MsSpellCheckingFacility.exe
2013-05-18 01:02 . 2013-05-18 01:02 102912 ----a-w- c:\windows\system32\inseng.dll
2013-05-18 01:01 . 2013-05-18 01:01 9728 ---ha-w- c:\windows\SysWow64\api-ms-win-downlevel-shlwapi-l1-1-0.dll
2013-05-18 01:01 . 2013-05-18 01:01 9728 ---ha-w- c:\windows\system32\api-ms-win-downlevel-shlwapi-l1-1-0.dll
2013-05-18 01:01 . 2013-05-18 01:01 648192 ----a-w- c:\windows\system32\d3d10level9.dll
2013-05-18 01:01 . 2013-05-18 01:01 604160 ----a-w- c:\windows\SysWow64\d3d10level9.dll
2013-05-18 01:01 . 2013-05-18 01:01 5632 ---ha-w- c:\windows\SysWow64\api-ms-win-downlevel-shlwapi-l2-1-0.dll
2013-05-18 01:01 . 2013-05-18 01:01 5632 ---ha-w- c:\windows\SysWow64\api-ms-win-downlevel-ole32-l1-1-0.dll
2013-05-18 01:01 . 2013-05-18 01:01 5632 ---ha-w- c:\windows\system32\api-ms-win-downlevel-shlwapi-l2-1-0.dll
2013-05-18 01:01 . 2013-05-18 01:01 5632 ---ha-w- c:\windows\system32\api-ms-win-downlevel-ole32-l1-1-0.dll
2013-05-18 01:01 . 2013-05-18 01:01 522752 ----a-w- c:\windows\system32\XpsGdiConverter.dll
2013-05-18 01:01 . 2013-05-18 01:01 465920 ----a-w- c:\windows\system32\WMPhoto.dll
2013-05-18 01:01 . 2013-05-18 01:01 417792 ----a-w- c:\windows\SysWow64\WMPhoto.dll
2013-05-18 01:01 . 2013-05-18 01:01 4096 ---ha-w- c:\windows\SysWow64\api-ms-win-downlevel-user32-l1-1-0.dll
2013-05-18 01:01 . 2013-05-18 01:01 4096 ---ha-w- c:\windows\system32\api-ms-win-downlevel-user32-l1-1-0.dll
2013-05-18 01:01 . 2013-05-18 01:01 3928064 ----a-w- c:\windows\system32\d2d1.dll
2013-05-18 01:01 . 2013-05-18 01:01 364544 ----a-w- c:\windows\SysWow64\XpsGdiConverter.dll
2013-05-18 01:01 . 2013-05-18 01:01 363008 ----a-w- c:\windows\system32\dxgi.dll
2013-05-18 01:01 . 2013-05-18 01:01 3584 ---ha-w- c:\windows\SysWow64\api-ms-win-downlevel-advapi32-l2-1-0.dll
2013-05-18 01:01 . 2013-05-18 01:01 3584 ---ha-w- c:\windows\system32\api-ms-win-downlevel-advapi32-l2-1-0.dll
2013-05-18 01:01 . 2013-05-18 01:01 3419136 ----a-w- c:\windows\SysWow64\d2d1.dll
2013-05-18 01:01 . 2013-05-18 01:01 333312 ----a-w- c:\windows\system32\d3d10_1core.dll
2013-05-18 01:01 . 2013-05-18 01:01 3072 ---ha-w- c:\windows\SysWow64\api-ms-win-downlevel-version-l1-1-0.dll
2013-05-18 01:01 . 2013-05-18 01:01 3072 ---ha-w- c:\windows\SysWow64\api-ms-win-downlevel-shell32-l1-1-0.dll
2013-05-18 01:01 . 2013-05-18 01:01 3072 ---ha-w- c:\windows\system32\api-ms-win-downlevel-version-l1-1-0.dll
2013-05-18 01:01 . 2013-05-18 01:01 3072 ---ha-w- c:\windows\system32\api-ms-win-downlevel-shell32-l1-1-0.dll
2013-05-18 01:01 . 2013-05-18 01:01 296960 ----a-w- c:\windows\system32\d3d10core.dll
2013-05-18 01:01 . 2013-05-18 01:01 293376 ----a-w- c:\windows\SysWow64\dxgi.dll
2013-05-18 01:01 . 2013-05-18 01:01 2776576 ----a-w- c:\windows\system32\msmpeg2vdec.dll
2013-05-18 01:01 . 2013-05-18 01:01 2565120 ----a-w- c:\windows\system32\d3d10warp.dll
2013-05-18 01:01 . 2013-05-18 01:01 2560 ---ha-w- c:\windows\SysWow64\api-ms-win-downlevel-normaliz-l1-1-0.dll
2013-05-18 01:01 . 2013-05-18 01:01 2560 ---ha-w- c:\windows\system32\api-ms-win-downlevel-normaliz-l1-1-0.dll
2013-05-18 01:01 . 2013-05-18 01:01 249856 ----a-w- c:\windows\SysWow64\d3d10_1core.dll
2013-05-18 01:01 . 2013-05-18 01:01 245248 ----a-w- c:\windows\system32\WindowsCodecsExt.dll
2013-05-18 01:01 . 2013-05-18 01:01 2284544 ----a-w- c:\windows\SysWow64\msmpeg2vdec.dll
2013-05-18 01:01 . 2013-05-18 01:01 221184 ----a-w- c:\windows\system32\UIAnimation.dll
2013-05-18 01:01 . 2013-05-18 01:01 220160 ----a-w- c:\windows\SysWow64\d3d10core.dll
2013-05-18 01:01 . 2013-05-18 01:01 207872 ----a-w- c:\windows\SysWow64\WindowsCodecsExt.dll
2013-05-18 01:01 . 2013-05-18 01:01 1988096 ----a-w- c:\windows\SysWow64\d3d10warp.dll
2013-05-18 01:01 . 2013-05-18 01:01 194560 ----a-w- c:\windows\system32\d3d10_1.dll
2013-05-18 01:01 . 2013-05-18 01:01 187392 ----a-w- c:\windows\SysWow64\UIAnimation.dll
2013-05-18 01:01 . 2013-05-18 01:01 1682432 ----a-w- c:\windows\system32\XpsPrint.dll
2013-05-18 01:01 . 2013-05-18 01:01 1643520 ----a-w- c:\windows\system32\DWrite.dll
2013-05-18 01:01 . 2013-05-18 01:01 161792 ----a-w- c:\windows\SysWow64\d3d10_1.dll
2013-05-18 01:01 . 2013-05-18 01:01 1247744 ----a-w- c:\windows\SysWow64\DWrite.dll
2013-05-18 01:01 . 2013-05-18 01:01 1238528 ----a-w- c:\windows\system32\d3d10.dll
2013-05-18 01:01 . 2013-05-18 01:01 1175552 ----a-w- c:\windows\system32\FntCache.dll
2013-05-18 01:01 . 2013-05-18 01:01 1158144 ----a-w- c:\windows\SysWow64\XpsPrint.dll
2013-05-18 01:01 . 2013-05-18 01:01 1080832 ----a-w- c:\windows\SysWow64\d3d10.dll
2013-05-18 01:01 . 2013-05-18 01:01 10752 ---ha-w- c:\windows\SysWow64\api-ms-win-downlevel-advapi32-l1-1-0.dll
.
.
(((((((((((((((((((((((((((((((((( Spouštěcí body v registru )))))))))))))))))))))))))))))))))))))))))))))
.
.
*Poznámka* prázdné záznamy a legitimní výchozí údaje nejsou zobrazeny.
REGEDIT4
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Sidebar"="c:\program files\Windows Sidebar\sidebar.exe" [2010-11-21 1475584]
"DAEMON Tools Lite"="c:\program files (x86)\DAEMON Tools Lite\DTLite.exe" [2013-01-08 3674320]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]
"ATKOSD2"="c:\program files (x86)\ASUS\ATK Package\ATKOSD2\ATKOSD2.exe" [2010-06-24 6806144]
"ATKMEDIA"="c:\program files (x86)\ASUS\ATK Package\ATK Media\DMedia.exe" [2010-05-03 170624]
"HControlUser"="c:\program files (x86)\ASUS\ATK Package\ATK Hotkey\HControlUser.exe" [2009-06-19 105016]
"HTC Sync Loader"="c:\program files (x86)\HTC\HTC Sync 3.0\htcUPCTLoader.exe" [2012-12-12 655360]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorAdmin"= 5 (0x5)
"ConsentPromptBehaviorUser"= 3 (0x3)
"EnableUIADesktopToggle"= 0 (0x0)
.
R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [x]
R3 btusbflt;Bluetooth USB Filter;c:\windows\system32\drivers\btusbflt.sys;c:\windows\SYSNATIVE\drivers\btusbflt.sys [x]
R3 HTCAND64;HTC Device Driver;c:\windows\system32\Drivers\ANDROIDUSB.sys;c:\windows\SYSNATIVE\Drivers\ANDROIDUSB.sys [x]
R3 LADF_CaptureOnly;LADF Capture Filter Driver;c:\windows\system32\DRIVERS\ladfGSCamd64.sys;c:\windows\SYSNATIVE\DRIVERS\ladfGSCamd64.sys [x]
R3 LADF_RenderOnly;LADF Render Filter Driver;c:\windows\system32\DRIVERS\ladfGSRamd64.sys;c:\windows\SYSNATIVE\DRIVERS\ladfGSRamd64.sys [x]
R3 LGSHidFilt;Logitech Gaming KMDF HID Filter Driver;c:\windows\system32\DRIVERS\LGSHidFilt.Sys;c:\windows\SYSNATIVE\DRIVERS\LGSHidFilt.Sys [x]
R3 LGVirHid;Logitech Gamepanel Virtual HID Device Driver;c:\windows\system32\drivers\LGVirHid.sys;c:\windows\SYSNATIVE\drivers\LGVirHid.sys [x]
R3 npggsvc;nProtect GameGuard Service;c:\windows\system32\GameMon.des;c:\windows\SYSNATIVE\GameMon.des [x]
R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys;c:\windows\SYSNATIVE\drivers\tsusbflt.sys [x]
R3 TsUsbGD;Remote Desktop Generic USB Device;c:\windows\system32\drivers\TsUsbGD.sys;c:\windows\SYSNATIVE\drivers\TsUsbGD.sys [x]
R3 WatAdminSvc;Služba Technologie aktivace Windows;c:\windows\system32\Wat\WatAdminSvc.exe;c:\windows\SYSNATIVE\Wat\WatAdminSvc.exe [x]
R3 WDC_SAM;WD SCSI Pass Thru driver;c:\windows\system32\DRIVERS\wdcsam64.sys;c:\windows\SYSNATIVE\DRIVERS\wdcsam64.sys [x]
R3 WinRing0_1_2_0;WinRing0_1_2_0;c:\program files (x86)\Razer\Razer Game Booster\Driver\WinRing0x64.sys;c:\program files (x86)\Razer\Razer Game Booster\Driver\WinRing0x64.sys [x]
S0 sptd;sptd;c:\windows\\SystemRoot\System32\Drivers\sptd.sys;c:\windows\\SystemRoot\System32\Drivers\sptd.sys [x]
S0 SymDS;Symantec Data Store;c:\windows\system32\drivers\N360x64\1403010.016\SYMDS64.SYS;c:\windows\SYSNATIVE\drivers\N360x64\1403010.016\SYMDS64.SYS [x]
S0 SymEFA;Symantec Extended File Attributes;c:\windows\system32\drivers\N360x64\1403010.016\SYMEFA64.SYS;c:\windows\SYSNATIVE\drivers\N360x64\1403010.016\SYMEFA64.SYS [x]
S1 BHDrvx64;BHDrvx64;c:\programdata\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_20.3.1.22\Definitions\BASHDefs\20130531.001\BHDrvx64.sys;c:\programdata\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_20.3.1.22\Definitions\BASHDefs\20130531.001\BHDrvx64.sys [x]
S1 ccSet_N360;Norton 360 Settings Manager;c:\windows\system32\drivers\N360x64\1403010.016\ccSetx64.sys;c:\windows\SYSNATIVE\drivers\N360x64\1403010.016\ccSetx64.sys [x]
S1 IDSVia64;IDSVia64;c:\programdata\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_20.3.1.22\Definitions\IPSDefs\20130614.001\IDSvia64.sys;c:\programdata\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_20.3.1.22\Definitions\IPSDefs\20130614.001\IDSvia64.sys [x]
S1 SymIRON;Symantec Iron Driver;c:\windows\system32\drivers\N360x64\1403010.016\Ironx64.SYS;c:\windows\SYSNATIVE\drivers\N360x64\1403010.016\Ironx64.SYS [x]
S1 SymNetS;Symantec Network Security WFP Driver;c:\windows\system32\drivers\N360x64\1403010.016\SYMNETS.SYS;c:\windows\SYSNATIVE\drivers\N360x64\1403010.016\SYMNETS.SYS [x]
S2 ASMMAP64;ASMMAP64;c:\program files (x86)\ASUS\ATK Package\ATKGFNEX\ASMMAP64.sys;c:\program files (x86)\ASUS\ATK Package\ATKGFNEX\ASMMAP64.sys [x]
S2 N360;Norton 360;c:\program files (x86)\Norton 360\Engine\20.3.1.22\ccSvcHst.exe;c:\program files (x86)\Norton 360\Engine\20.3.1.22\ccSvcHst.exe [x]
S2 SkypeUpdate;Skype Updater;c:\program files (x86)\Skype\Updater\Updater.exe;c:\program files (x86)\Skype\Updater\Updater.exe [x]
S2 Stereo Service;NVIDIA Stereoscopic 3D Driver Service;c:\program files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe;c:\program files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe [x]
S3 btwampfl;Bluetooth AMP USB Filter;c:\windows\system32\drivers\btwampfl.sys;c:\windows\SYSNATIVE\drivers\btwampfl.sys [x]
S3 btwl2cap;Bluetooth L2CAP Service;c:\windows\system32\DRIVERS\btwl2cap.sys;c:\windows\SYSNATIVE\DRIVERS\btwl2cap.sys [x]
S3 EraserUtilRebootDrv;EraserUtilRebootDrv;c:\program files (x86)\Common Files\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys;c:\program files (x86)\Common Files\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys [x]
S3 FLxHCIc;Fresco Logic xHCI (USB3) Device Driver;c:\windows\system32\DRIVERS\FLxHCIc.sys;c:\windows\SYSNATIVE\DRIVERS\FLxHCIc.sys [x]
S3 FLxHCIh;Fresco Logic xHCI (USB3) Hub Device Driver;c:\windows\system32\DRIVERS\FLxHCIh.sys;c:\windows\SYSNATIVE\DRIVERS\FLxHCIh.sys [x]
S3 HECIx64;Intel(R) Management Engine Interface;c:\windows\system32\DRIVERS\HECIx64.sys;c:\windows\SYSNATIVE\DRIVERS\HECIx64.sys [x]
S3 Impcd;Impcd;c:\windows\system32\DRIVERS\Impcd.sys;c:\windows\SYSNATIVE\DRIVERS\Impcd.sys [x]
S3 LGBusEnum;Logitech GamePanel Virtual Bus Enumerator Driver;c:\windows\system32\drivers\LGBusEnum.sys;c:\windows\SYSNATIVE\drivers\LGBusEnum.sys [x]
S3 MBfilt;MBfilt;c:\windows\system32\drivers\MBfilt64.sys;c:\windows\SYSNATIVE\drivers\MBfilt64.sys [x]
S3 nvoclk64;NVIDIA Enthusiasts Platform KDM;c:\windows\system32\DRIVERS\nvoclk64.sys;c:\windows\SYSNATIVE\DRIVERS\nvoclk64.sys [x]
S3 RSPCIESTOR;Realtek PCIE CardReader Driver;c:\windows\system32\DRIVERS\RtsPStor.sys;c:\windows\SYSNATIVE\DRIVERS\RtsPStor.sys [x]
S3 RTL8167;Realtek 8167 NT Driver;c:\windows\system32\DRIVERS\Rt64win7.sys;c:\windows\SYSNATIVE\DRIVERS\Rt64win7.sys [x]
.
.
--- Ostatní služby/ovladače v paměti ---
.
*NewlyCreated* - WS2IFSL
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\active setup\installed components\{8A69D345-D564-463c-AFF1-A69D9E530F96}]
2013-06-05 20:43 1165776 ----a-w- c:\program files (x86)\Google\Chrome\Application\27.0.1453.110\Installer\chrmstp.exe
.
Obsah adresáře 'Naplánované úlohy'
.
2013-06-17 c:\windows\Tasks\Adobe Flash Player Updater.job
- c:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2013-02-01 16:28]
.
.
--------- X64 Entries -----------
.
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\GDriveBlacklistedOverlay]
@="{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D42}"
[HKEY_CLASSES_ROOT\CLSID\{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D42}]
2013-04-16 14:10 776144 ----a-w- c:\program files (x86)\Google\Drive\googledrivesync64.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\GDriveSharedOverlay]
@="{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D44}"
[HKEY_CLASSES_ROOT\CLSID\{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D44}]
2013-04-16 14:10 776144 ----a-w- c:\program files (x86)\Google\Drive\googledrivesync64.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\GDriveSyncedOverlay]
@="{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D40}"
[HKEY_CLASSES_ROOT\CLSID\{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D40}]
2013-04-16 14:10 776144 ----a-w- c:\program files (x86)\Google\Drive\googledrivesync64.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\GDriveSyncingOverlay]
@="{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D41}"
[HKEY_CLASSES_ROOT\CLSID\{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D41}]
2013-04-16 14:10 776144 ----a-w- c:\program files (x86)\Google\Drive\googledrivesync64.dll
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Launch LCore"="c:\program files\Logitech Gaming Software\LCore.exe" [2012-11-29 7406392]
"SynTPEnh"="c:\program files (x86)\Synaptics\SynTP\SynTPEnh.exe" [BU]
"RTHDVCPL"="c:\program files\Realtek\Audio\HDA\RAVCpl64.exe" [2000-01-01 12503184]
"Nvtmru"="c:\program files (x86)\NVIDIA Corporation\NVIDIA Update Core\nvtmru.exe" [2013-03-24 976672]
.
------- Doplňkový sken -------
.
uLocal Page = c:\windows\system32\blank.htm
mLocal Page = c:\windows\SYSTEM32\blank.htm
TCP: DhcpNameServer = 192.168.0.1
TCP: Interfaces\{0110C32B-DE4C-4669-BCAC-3C4DAF168A0E}: NameServer = 10.1.19.10
.
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\N360]
"ImagePath"="\"c:\program files (x86)\Norton 360\Engine\20.3.1.22\ccSvcHst.exe\" /s \"N360\" /m \"c:\program files (x86)\Norton 360\Engine\20.3.1.22\diMaster.dll\" /prefetch:1"
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\npggsvc]
"ImagePath"="c:\windows\system32\GameMon.des -service"
.
------------------------ Jiné spuštené procesy ------------------------
.
c:\program files (x86)\ASUS\ATK Package\ATK Hotkey\ASLDRSrv.exe
c:\program files (x86)\ASUS\ATK Package\ATKGFNEX\GFNEXSrv.exe
c:\program files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
c:\program files (x86)\Bonjour\mDNSResponder.exe
c:\program files (x86)\Google\Update\GoogleUpdate.exe
c:\program files (x86)\Google\Update\1.3.21.145\GoogleCrashHandler.exe
.
**************************************************************************
.
Celkový čas: 2013-06-17 21:09:24 - počítač byl restartován
ComboFix-quarantined-files.txt 2013-06-17 19:09
ComboFix2.txt 2013-06-17 18:28
.
Před spuštěním: Volných bajtů: 19 112 517 632
Po spuštění: Volných bajtů: 18 894 635 008
.
- - End Of File - - 4C9668361CF51603DF7F318D5CA5CD98
A36C5E4F47E84449FF07ED3517B43A31

Log je OK. Zkuste ještě jeden restart.

Po restartu zmizel problém s hláškou "Pokus použít neplatnou operaci na klíč registru, který je označen pro odstranění.". Ale jinak stále beze změn.

Neistaloval jste, nebo neupgradoval poslední dobou nějaké ovladače?

Ne a nebo si toho aspoň nejsem vědom.

OK. Zkuste některý z těch nefunkčních programů přeinstalovat.

Trošku upřesním ještě.

Chrome, Winamp, GuildWars(hra) např. nejedou je jedno jestli jsou instalované nebo jen kopírované
Ale PSPad, Notepad, TeamSpeak, CCleaner jedou bez potíží

Při pokusu o reinstall Chrome to skončilo chybou po pár okamžicích.

Zajímavé je, že nejede Zpět tlačítko v IE

//edit

ještě ten seznam trošku rozšířím

Jede: AIMP, PSPad, Notepad, CCleaner, TeamSpeak, Vistumbler, Total Commander, Winrar, OpenOffice, Geany...
Nejede: Chrome, Mumble, GuildWars, Windows media player, VLC, Skype...

Nevím jestli to nějak pomůže

Ještě jsem zkoušel aktualizovat Daemon ten se v klidu aktualizoval včetně ovladače.

Asi nezbude, než oprava systému z instal. média: http://forum.viry.cz/viewtopic.php?f=46&t=106339 .

Nevadí Stejně díky za čas. Mimochodem máte zhruba tušení co by to mohlo dělat ?

Nějaká blíže nespecifikovaná systémová chyba. Nejedná se o poškozenou asociaci. Nemáte zač!