VIRY.CZ

Dobrý den,
před několika dny se mi začalo dít něco divného:

Přestal mi fungovat prohlížeč obrázků ve windows - prostě jsem nemohl otevřít obrázek (musel jsem nainstalovat IrfanView)

Nejde ovládat hlasitost ikonou v oznamovací oblasti. Otevře se na chvilku černé okno (jako příkazová řádka s nadpisem okna C:\windows\system32\sndvol.exe , ale posuvník k zesílení/zeslabení zvuku se nezobrazí - nicméně ovládání zvuku pomocí kláves na notebooku funguje

Někdy: např když jsem chtěl uložit soubor z netu se objeví chybová hláška, že nelze spustit (nebo, že není určen ke spuštění, nebo tak něco) StructuredQuery.dll

V Opeře mi přestal fungovat anonymní režim - tváří se, že je to anonymní, ale data si pamatuje

Možná ještě něco dalšího...

Zkusil jsem online scan Eset, který sice našel a prý vyléčil několik virů (nevím jak nebezpečných), ale nic se nezměnilo...někde jsem se dočetl o DDL Suite - našel 128 chyb a prý je opravil, ale nic se nezměnilo

vkládám log a prosím o radu
Díky
Fanda


Logfile of random's system information tool 1.09 (written by random/random)
Run by Tata at 2013-12-02 14:22:42
Microsoft Windows 7 Professional Service Pack 1
System drive C: has 11 GB (27%) free of 40 GB
Total RAM: 958 MB (25% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 14:23:03, on 2.12.2013
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v11.0 (11.00.9600.16428)
Boot mode: Normal

Running processes:
C:\Windows\system32\taskhost.exe
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Windows\SOUNDMAN.EXE
C:\Windows\sm56hlpr.exe
C:\Windows\System32\VTTimer.exe
C:\Program Files\Adobe\Acrobat 9.0\Acrobat\acrotray.exe
C:\Program Files\Common Files\Java\Java Update\jusched.exe
C:\Program Files\AVAST Software\Avast\avastui.exe
C:\Program Files\Google\Drive\googledrivesync.exe
C:\Users\Tata\AppData\Local\Microsoft\SkyDrive\SkyDrive.exe
C:\Program Files\Microsoft Office\Office14\ONENOTEM.EXE
C:\Users\Tata\AppData\Roaming\Seznam.cz\bin\szndesktop.exe
C:\Program Files\Google\Drive\googledrivesync.exe
C:\Windows\system32\wuauclt.exe
C:\Program Files\Microsoft Office\Office14\OUTLOOK.EXE
C:\Windows\system32\taskhost.exe
C:\Program Files\Opera\18.0.1284.49\opera.exe
C:\Program Files\Opera\18.0.1284.49\opera_crashreporter.exe
C:\Program Files\Opera\18.0.1284.49\opera.exe
C:\Program Files\Opera\18.0.1284.49\opera.exe
C:\Program Files\Opera\18.0.1284.49\opera.exe
C:\Program Files\Opera\18.0.1284.49\opera.exe
C:\Program Files\Opera\18.0.1284.49\opera.exe
D:\Programy\RSIT.exe
C:\Program Files\trend micro\Tata.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.cz/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/p/?LinkId=255141
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/p/?LinkId=255141
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\PROGRA~1\MICROS~1\Office14\GROOVEEX.DLL
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll
O2 - BHO: avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll
O2 - BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Adobe PDF Conversion Toolbar Helper - {AE7CD045-E861-484f-8273-0445EE161910} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll
O2 - BHO: URLRedirectionBHO - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\PROGRA~1\MICROS~1\Office14\URLREDIR.DLL
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll
O2 - BHO: SmartSelect - {F4971EE7-DAA0-4053-9964-665D8EE6A077} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll
O3 - Toolbar: avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll
O3 - Toolbar: Adobe PDF - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll
O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
O4 - HKLM\..\Run: [seznam-listicka-distribuce] "C:\Program Files\Seznam.cz\distribution\szninstall.exe" -s -d listicka 1 szn-software-listicka cz.seznam.software.autoupdate
O4 - HKLM\..\Run: [SMSERIAL] sm56hlpr.exe
O4 - HKLM\..\Run: [BCSSync] "C:\Program Files\Microsoft Office\Office14\BCSSync.exe" /DelayServices
O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKLM\..\Run: [VTTimer] VTTimer.exe
O4 - HKLM\..\Run: [VTTrayp] VTtrayp.exe
O4 - HKLM\..\Run: [Adobe Acrobat Speed Launcher] "C:\Program Files\Adobe\Acrobat 9.0\Acrobat\Acrobat_sl.exe"
O4 - HKLM\..\Run: [Acrobat Assistant 8.0] "C:\Program Files\Adobe\Acrobat 9.0\Acrobat\Acrotray.exe"
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Common Files\Java\Java Update\jusched.exe"
O4 - HKLM\..\Run: [AvastUI.exe] "C:\Program Files\AVAST Software\Avast\AvastUI.exe" /nogui
O4 - HKLM\..\Run: [20131121] C:\Program Files\AVAST Software\Avast\setup\emupdate\f22518a1-5c03-4963-b14d-ddd8db2fdc1e.exe /check
O4 - HKCU\..\Run: [cz.seznam.software.autoupdate] "C:\Users\Tata\AppData\Roaming\Seznam.cz\szninstall.exe" -c
O4 - HKCU\..\Run: [cz.seznam.software.szndesktop] "C:\Users\Tata\AppData\Roaming\Seznam.cz\bin\wszndesktop.exe" -q
O4 - HKCU\..\Run: [GoogleDriveSync] "C:\Program Files\Google\Drive\googledrivesync.exe" /autostart
O4 - HKCU\..\Run: [SkyDrive] "C:\Users\Tata\AppData\Local\Microsoft\SkyDrive\SkyDrive.exe" /background
O4 - HKCU\..\Run: [DAEMON Tools Lite] "C:\Program Files\DAEMON Tools Lite\DTLite.exe" -autorun
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-18\..\RunOnce: [SPReview] "C:\Windows\System32\SPReview\SPReview.exe" /sp:1 /errorfwlink:"http://go.microsoft.com/fwlink/?LinkID=122915" /build:7601 (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\RunOnce: [SPReview] "C:\Windows\System32\SPReview\SPReview.exe" /sp:1 /errorfwlink:"http://go.microsoft.com/fwlink/?LinkID=122915" /build:7601 (User 'Default user')
O4 - Startup: Výřezy obrazovky a spuštění aplikace OneNote 2010.lnk = C:\Program Files\Microsoft Office\Office14\ONENOTEM.EXE
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Excel - res://C:\PROGRA~1\MICROS~1\Office14\EXCEL.EXE/3000
O8 - Extra context menu item: Od&eslat do aplikace OneNote - res://C:\PROGRA~1\MICROS~1\Office14\ONBttnIE.dll/105
O8 - Extra context menu item: Prevést cíl vazby do Adobe PDF - res://C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll/AcroIECaptureSelLinks.html
O8 - Extra context menu item: Prevést cíl vazby do existujícího PDF - res://C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll/AcroIEAppendSelLinks.html
O8 - Extra context menu item: Prevést do Adobe PDF - res://C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll/AcroIECapture.html
O8 - Extra context menu item: Pridat do stávajícího PDF - res://C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll/AcroIEAppend.html
O9 - Extra button: Odeslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files\Microsoft Office\Office14\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: Od&eslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files\Microsoft Office\Office14\ONBttnIE.dll
O9 - Extra button: P&ropojené poznámky aplikace OneNote - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files\Microsoft Office\Office14\ONBttnIELinkedNotes.dll
O9 - Extra 'Tools' menuitem: P&ropojené poznámky aplikace OneNote - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files\Microsoft Office\Office14\ONBttnIELinkedNotes.dll
O10 - Unknown file in Winsock LSP: c:\program files\common files\microsoft shared\windows live\wlidnsp.dll
O10 - Unknown file in Winsock LSP: c:\program files\common files\microsoft shared\windows live\wlidnsp.dll
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O18 - Filter hijack: text/xml - {807573E5-5146-11D5-A672-00B0D022E945} - C:\Program Files\Common Files\Microsoft Shared\OFFICE14\MSOXMLMF.DLL
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe
O23 - Service: avast! Antivirus - AVAST Software - C:\Program Files\AVAST Software\Avast\AvastSvc.exe
O23 - Service: FLEXnet Licensing Service - Macrovision Europe Ltd. - C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
O23 - Service: Služba Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: Služba Google Update (gupdatem) (gupdatem) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: @%SystemRoot%\system32\msimsg.dll,-27 (msiserver) - Unknown owner - C:\Windows\system32\msiexec.exe
O23 - Service: ServiceLayer - Nokia - C:\Program Files\PC Connectivity Solution\ServiceLayer.exe
O23 - Service: Skype Updater (SkypeUpdate) - Skype Technologies - C:\Program Files\Skype\Updater\Updater.exe

--
End of file - 9358 bytes

======Scheduled tasks folder======

C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
C:\Windows\tasks\GoogleUpdateTaskMachineUA.job

=========Mozilla firefox=========

ProfilePath - C:\Users\Tata\AppData\Roaming\Mozilla\Firefox\Profiles\eedqz3mr.default

"wrc@avast.com"=C:\Program Files\AVAST Software\Avast\WebRep\FF


[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 11.9.900.152 Plugin
"Path"=C:\Windows\system32\Macromed\Flash\NPSWF32_11_9_900_152.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@java.com/DTPlugin,version=10.45.2]
"Description"=Java™ Deployment Toolkit
"Path"=C:\Program Files\Java\jre7\bin\dtplugin\npDeployJava1.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@java.com/JavaPlugin,version=10.45.2]
"Description"=Oracle® Next Generation Java™ Plug-In
"Path"=C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@microsoft.com/GENUINE]
"Description"=
"Path"=disabled

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0]
"Description"=Ag Player Plugin
"Path"=C:\Program Files\Microsoft Silverlight\5.1.20913.0\npctrl.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@microsoft.com/OfficeAuthz,version=14.0]
"Description"=Office Authorization plug-in for NPAPI browsers
"Path"=C:\PROGRA~1\MICROS~1\Office14\NPAUTHZ.DLL

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@microsoft.com/SharePoint,version=14.0]
"Description"=Microsoft SharePoint Plug-in for Firefox
"Path"=C:\PROGRA~1\MICROS~1\Office14\NPSPWRAP.DLL

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@nokia.com/EnablerPlugin]
"Description"=Nokia Suite Enabler Plugin
"Path"=C:\Program Files\Nokia\Nokia Suite\npNokiaSuiteEnabler.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@tools.google.com/Google Update;version=3]
"Description"=Google Update
"Path"=C:\Program Files\Google\Update\1.3.21.165\npGoogleUpdate3.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@tools.google.com/Google Update;version=9]
"Description"=Google Update
"Path"=C:\Program Files\Google\Update\1.3.21.165\npGoogleUpdate3.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\Adobe Reader]
"Description"=Handles PDFs in-place in Firefox
"Path"=C:\Program Files\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll


======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
Adobe PDF Link Helper - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2012-09-23 60568]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{72853161-30C5-4D22-B7F9-0BBC1D38A37E}]
Groove GFS Browser Helper - C:\PROGRA~1\MICROS~1\Office14\GROOVEEX.DLL [2013-03-08 4171464]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
Java(tm) Plug-In SSV Helper - C:\Program Files\Java\jre7\bin\ssv.dll [2013-10-21 462760]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{8E5E2654-AD2D-48bf-AC2D-D17F00898D06}]
avast! Online Security - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2013-10-21 606544]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
Windows Live ID Sign-in Helper - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2011-03-28 441216]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AE7CD045-E861-484f-8273-0445EE161910}]
Adobe PDF Conversion Toolbar Helper - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll [2008-06-11 345480]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{B4F3A835-0E21-4959-BA22-42B3008E02FF}]
Office Document Cache Handler - C:\PROGRA~1\MICROS~1\Office14\URLREDIR.DLL [2013-03-06 562904]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre7\bin\jp2ssv.dll [2013-10-21 171944]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{F4971EE7-DAA0-4053-9964-665D8EE6A077}]
SmartSelect Class - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll [2008-06-11 345480]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - avast! Online Security - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2013-10-21 606544]
{47833539-D0C5-4125-9FA8-0819E2EAAC93} - Adobe PDF - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll [2008-06-11 345480]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"SoundMan"=C:\Windows\SOUNDMAN.EXE [2009-04-14 604704]
"seznam-listicka-distribuce"=C:\Program Files\Seznam.cz\distribution\szninstall.exe [2013-05-16 1062472]
"SMSERIAL"=C:\Windows\sm56hlpr.exe [2005-04-07 544768]
"BCSSync"=C:\Program Files\Microsoft Office\Office14\BCSSync.exe [2012-11-05 89184]
"Adobe ARM"=C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2013-04-04 958576]
"VTTimer"=C:\Windows\system32\VTTimer.exe [2005-03-08 53248]
"VTTrayp"=C:\Windows\system32\VTtrayp.exe [2005-11-01 163840]
"Adobe Acrobat Speed Launcher"=C:\Program Files\Adobe\Acrobat 9.0\Acrobat\Acrobat_sl.exe [2008-06-12 37232]
""= []
"Acrobat Assistant 8.0"=C:\Program Files\Adobe\Acrobat 9.0\Acrobat\Acrotray.exe [2008-06-11 640376]
"SunJavaUpdateSched"=C:\Program Files\Common Files\Java\Java Update\jusched.exe [2013-07-02 254336]
"AvastUI.exe"=C:\Program Files\AVAST Software\Avast\AvastUI.exe [2013-10-22 3567800]
"20131121"=C:\Program Files\AVAST Software\Avast\setup\emupdate\f22518a1-5c03-4963-b14d-ddd8db2fdc1e.exe [2013-11-23 180184]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"cz.seznam.software.autoupdate"=C:\Users\Tata\AppData\Roaming\Seznam.cz\szninstall.exe [2013-05-16 1062472]
"cz.seznam.software.szndesktop"=C:\Users\Tata\AppData\Roaming\Seznam.cz\bin\wszndesktop.exe [2013-04-12 92664]
"GoogleDriveSync"=C:\Program Files\Google\Drive\googledrivesync.exe [2013-09-25 20133824]
"SkyDrive"=C:\Users\Tata\AppData\Local\Microsoft\SkyDrive\SkyDrive.exe [2013-09-30 257136]
"DAEMON Tools Lite"=C:\Program Files\DAEMON Tools Lite\DTLite.exe [2013-03-14 3672640]
""= []

C:\Users\Tata\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
Výřezy obrazovky a spuštění aplikace OneNote 2010.lnk - C:\Program Files\Microsoft Office\Office14\ONENOTEM.EXE

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED}

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{B5A7F190-DDA6-4420-B3BA-52453494E6CD}"=C:\PROGRA~1\MICROS~1\Office14\GROOVEEX.DLL [2013-03-08 4171464]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=credssp.dll

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorAdmin"=0
"ConsentPromptBehaviorUser"=3
"EnableLUA"=0
"EnableUIADesktopToggle"=0
"PromptOnSecureDesktop"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.msadpcm"=msadp32.acm
"midimapper"=midimap.dll
"wavemapper"=msacm32.drv
"vidc.uyvy"=msyuv.dll
"vidc.yuy2"=msyuv.dll
"vidc.yvyu"=msyuv.dll
"vidc.iyuv"=iyuv_32.dll
"vidc.i420"=iyuv_32.dll
"vidc.yvu9"=tsbyuv.dll
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"vidc.cvid"=iccvid.dll
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"msacm.ac3filter"=ac3filter.acm

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*

======List of files/folders created in the last 1 month======

2013-12-02 14:22:44 ----D---- C:\Program Files\trend micro
2013-12-02 14:22:42 ----D---- C:\rsit
2013-12-02 14:12:53 ----HD---- C:\Windows\PIF
2013-12-02 14:04:12 ----D---- C:\Windows\system32\Nová složka
2013-12-02 13:54:28 ----A---- C:\Windows\system32\drivers\vmx_svga.sys
2013-12-02 13:54:24 ----A---- C:\Windows\system32\drivers\vmmouse.sys
2013-12-02 13:54:16 ----A---- C:\Windows\system32\drivers\vmhgfs.sys
2013-12-02 13:54:11 ----A---- C:\Windows\system32\drivers\vmdebug.sys
2013-12-02 13:54:06 ----A---- C:\Windows\system32\drivers\vmci.sys
2013-12-02 13:54:01 ----A---- C:\Windows\system32\drivers\vmaudio.sys
2013-12-02 13:53:53 ----A---- C:\Windows\system32\drivers\E1G60I32.sys
2013-12-02 13:50:57 ----A---- C:\Windows\system32\vmx_mode.dll
2013-12-02 13:50:46 ----A---- C:\Windows\system32\vmx_fb.dll
2013-12-02 13:50:41 ----A---- C:\Windows\system32\vmhgfs.dll
2013-12-02 13:50:34 ----A---- C:\Windows\system32\TPVMW32.dll
2013-12-02 13:50:30 ----A---- C:\Windows\system32\TPVMMonUIjpn.dll
2013-12-02 13:50:26 ----A---- C:\Windows\system32\TPVMMonUIdeu.dll
2013-12-02 13:50:19 ----A---- C:\Windows\system32\TPVMMonUI.dll
2013-12-02 13:50:16 ----A---- C:\Windows\system32\TPVMMonjpn.dll
2013-12-02 13:50:11 ----A---- C:\Windows\system32\TPVMMondeu.dll
2013-12-02 13:49:56 ----A---- C:\Windows\system32\TPVMMon.dll
2013-12-02 13:49:33 ----A---- C:\Windows\system32\TPSvc.dll
2013-12-02 13:49:00 ----A---- C:\Windows\system32\mstime.dll
2013-12-02 13:48:50 ----A---- C:\Windows\system32\ieakui.dll
2013-12-02 13:48:38 ----A---- C:\Windows\system32\ieaksie.dll
2013-12-02 13:48:35 ----A---- C:\Windows\system32\ieakeng.dll
2013-12-02 13:48:31 ----A---- C:\Windows\system32\corpol.dll
2013-12-02 13:48:28 ----A---- C:\Windows\system32\admparse.dll
2013-12-02 13:48:25 ----A---- C:\Windows\system32\aaclient.dll
2013-12-02 13:38:19 ----D---- C:\ProgramData\Weskysoft
2013-12-02 12:56:55 ----D---- C:\Program Files\DLLSuite
2013-11-21 09:09:28 ----RASH---- C:\MSDOS.SYS
2013-11-21 09:09:28 ----RASH---- C:\IO.SYS
2013-11-20 23:40:20 ----D---- C:\Users\Tata\AppData\Roaming\IrfanView
2013-11-20 23:40:19 ----D---- C:\Program Files\IrfanView
2013-11-13 08:15:48 ----A---- C:\Windows\system32\TsUsbGDCoInstaller.dll
2013-11-13 08:15:41 ----A---- C:\Windows\system32\TsUsbRedirectionGroupPolicyControl.exe
2013-11-13 08:15:37 ----A---- C:\Windows\system32\drivers\TsUsbFlt.sys
2013-11-13 08:15:33 ----A---- C:\Windows\system32\wksprtPS.dll
2013-11-13 08:15:33 ----A---- C:\Windows\system32\TsUsbRedirectionGroupPolicyExtension.dll
2013-11-13 08:15:33 ----A---- C:\Windows\system32\MsRdpWebAccess.dll
2013-11-13 08:15:32 ----A---- C:\Windows\system32\wksprt.exe
2013-11-13 08:15:32 ----A---- C:\Windows\system32\TSWbPrxy.exe
2013-11-13 08:15:32 ----A---- C:\Windows\system32\tsgqec.dll
2013-11-13 08:15:32 ----A---- C:\Windows\system32\rdvidcrl.dll
2013-11-13 08:15:31 ----A---- C:\Windows\system32\mstsc.exe
2013-11-13 08:15:30 ----A---- C:\Windows\system32\mstscax.dll
2013-11-13 08:12:39 ----SHD---- C:\Config.Msi
2013-11-13 07:51:00 ----A---- C:\Windows\system32\schannel.dll
2013-11-13 07:51:00 ----A---- C:\Windows\system32\drivers\ksecdd.sys
2013-11-13 07:50:59 ----A---- C:\Windows\system32\lsasrv.dll
2013-11-13 07:50:59 ----A---- C:\Windows\system32\drivers\ksecpkg.sys
2013-11-13 07:50:59 ----A---- C:\Windows\system32\drivers\cng.sys
2013-11-13 07:50:58 ----A---- C:\Windows\system32\sspisrv.dll
2013-11-13 07:50:58 ----A---- C:\Windows\system32\sspicli.dll
2013-11-13 07:50:58 ----A---- C:\Windows\system32\secur32.dll
2013-11-13 07:50:58 ----A---- C:\Windows\system32\ncrypt.dll
2013-11-13 07:50:58 ----A---- C:\Windows\system32\lsass.exe
2013-11-13 07:50:50 ----A---- C:\Windows\system32\authui.dll
2013-11-13 07:50:49 ----A---- C:\Windows\system32\SmartcardCredentialProvider.dll
2013-11-13 07:50:48 ----A---- C:\Windows\system32\credui.dll
2013-11-13 07:50:36 ----A---- C:\Windows\system32\TSWorkspace.dll
2013-11-13 07:49:53 ----A---- C:\Windows\system32\IKEEXT.DLL
2013-11-13 07:49:52 ----A---- C:\Windows\system32\nshwfp.dll
2013-11-13 07:49:52 ----A---- C:\Windows\system32\FWPUCLNT.DLL
2013-11-13 07:49:49 ----A---- C:\Windows\system32\gdi32.dll
2013-11-13 07:48:31 ----A---- C:\Windows\system32\crypt32.dll
2013-11-12 07:52:12 ----A---- C:\Windows\system32\MsSpellCheckingFacility.exe
2013-11-12 07:52:12 ----A---- C:\Windows\system32\elshyph.dll
2013-11-12 07:52:10 ----A---- C:\Windows\system32\RegisterIEPKEYs.exe
2013-11-12 07:52:10 ----A---- C:\Windows\system32\jsIntl.dll
2013-11-12 07:52:09 ----A---- C:\Windows\system32\wininet.dll
2013-11-12 07:52:09 ----A---- C:\Windows\system32\msls31.dll
2013-11-12 07:52:09 ----A---- C:\Windows\system32\jsproxy.dll
2013-11-12 07:52:08 ----A---- C:\Windows\system32\urlmon.dll
2013-11-12 07:52:08 ----A---- C:\Windows\system32\msrating.dll
2013-11-12 07:52:08 ----A---- C:\Windows\system32\JavaScriptCollectionAgent.dll
2013-11-12 07:52:08 ----A---- C:\Windows\system32\iertutil.dll
2013-11-12 07:52:08 ----A---- C:\Windows\system32\dxtrans.dll
2013-11-12 07:52:08 ----A---- C:\Windows\system32\dxtmsft.dll
2013-11-12 07:52:07 ----A---- C:\Windows\system32\url.dll
2013-11-12 07:52:07 ----A---- C:\Windows\system32\iesetup.dll
2013-11-12 07:52:07 ----A---- C:\Windows\system32\iernonce.dll
2013-11-12 07:52:07 ----A---- C:\Windows\system32\ieapfltr.dll
2013-11-12 07:52:07 ----A---- C:\Windows\system32\ieapfltr.dat
2013-11-12 07:52:07 ----A---- C:\Windows\system32\ie4uinit.exe
2013-11-12 07:52:07 ----A---- C:\Windows\system32\icardie.dll
2013-11-12 07:52:06 ----A---- C:\Windows\system32\mshtmlmedia.dll
2013-11-12 07:52:06 ----A---- C:\Windows\system32\iedkcs32.dll
2013-11-12 07:52:04 ----A---- C:\Windows\system32\webcheck.dll
2013-11-12 07:52:04 ----A---- C:\Windows\system32\licmgr10.dll
2013-11-12 07:52:03 ----A---- C:\Windows\system32\wextract.exe
2013-11-12 07:52:03 ----A---- C:\Windows\system32\vbscript.dll
2013-11-12 07:52:03 ----A---- C:\Windows\system32\pngfilt.dll
2013-11-12 07:52:03 ----A---- C:\Windows\system32\occache.dll
2013-11-12 07:52:03 ----A---- C:\Windows\system32\mshtmled.dll
2013-11-12 07:52:03 ----A---- C:\Windows\system32\mshtml.dll
2013-11-12 07:52:03 ----A---- C:\Windows\system32\mshta.exe
2013-11-12 07:52:03 ----A---- C:\Windows\system32\msfeeds.dll
2013-11-12 07:52:03 ----A---- C:\Windows\system32\inseng.dll
2013-11-12 07:52:03 ----A---- C:\Windows\system32\iexpress.exe
2013-11-12 07:52:03 ----A---- C:\Windows\system32\ieUnatt.exe
2013-11-12 07:52:03 ----A---- C:\Windows\system32\ieetwproxystub.dll
2013-11-12 07:52:03 ----A---- C:\Windows\system32\ieetwcollectorres.dll
2013-11-12 07:52:03 ----A---- C:\Windows\system32\ieetwcollector.exe
2013-11-12 07:52:02 ----A---- C:\Windows\system32\SetIEInstalledDate.exe
2013-11-12 07:52:02 ----A---- C:\Windows\system32\mshtmler.dll
2013-11-12 07:52:02 ----A---- C:\Windows\system32\MshtmlDac.dll
2013-11-12 07:52:02 ----A---- C:\Windows\system32\msfeedssync.exe
2013-11-12 07:52:02 ----A---- C:\Windows\system32\msfeedsbs.dll
2013-11-12 07:52:02 ----A---- C:\Windows\system32\jscript9diag.dll
2013-11-12 07:52:02 ----A---- C:\Windows\system32\jscript9.dll
2013-11-12 07:52:02 ----A---- C:\Windows\system32\jscript.dll
2013-11-12 07:52:02 ----A---- C:\Windows\system32\imgutil.dll
2013-11-12 07:52:02 ----A---- C:\Windows\system32\ieui.dll
2013-11-12 07:52:02 ----A---- C:\Windows\system32\iesysprep.dll
2013-11-12 07:52:02 ----A---- C:\Windows\system32\iepeers.dll
2013-11-12 07:52:02 ----A---- C:\Windows\system32\ieframe.dll
2013-11-12 07:52:02 ----A---- C:\Windows\system32\IEAdvpack.dll
2013-11-10 20:52:41 ----D---- C:\Users\Tata\AppData\Roaming\Mp3tag
2013-11-10 20:52:05 ----D---- C:\Program Files\Mp3tag
2013-11-10 19:55:12 ----D---- C:\Program Files\Total Video Converter
2013-11-09 15:43:13 ----D---- C:\Program Files\AC3Filter

======List of files/folders modified in the last 1 month======

2013-12-02 14:22:44 ----RD---- C:\Program Files
2013-12-02 14:17:44 ----D---- C:\Windows\System32
2013-12-02 14:12:53 ----D---- C:\Windows
2013-12-02 14:11:10 ----SD---- C:\Users\Tata\AppData\Roaming\Microsoft
2013-12-02 13:54:28 ----D---- C:\Windows\system32\drivers
2013-12-02 13:53:50 ----SHD---- C:\Windows\Installer
2013-12-02 13:51:59 ----D---- C:\Windows\system32\MUI
2013-12-02 13:40:01 ----D---- C:\Windows\Prefetch
2013-12-02 13:38:19 ----HD---- C:\ProgramData
2013-12-02 12:55:54 ----D---- C:\Users\Tata\AppData\Roaming\uTorrent
2013-12-02 08:22:10 ----D---- C:\Windows\Temp
2013-12-01 19:48:11 ----D---- C:\Windows\system32\config
2013-12-01 17:11:10 ----A---- C:\Windows\system32\FlashPlayerApp.exe
2013-12-01 16:56:02 ----D---- C:\Users\Tata\AppData\Roaming\Seznam.cz
2013-12-01 13:03:30 ----SHD---- C:\System Volume Information
2013-11-24 22:46:37 ----A---- C:\Windows\system32\PerfStringBackup.INI
2013-11-22 11:53:53 ----D---- C:\Users\Tata\AppData\Roaming\DAEMON Tools Lite
2013-11-21 23:26:16 ----D---- C:\Windows\system32\LogFiles
2013-11-20 23:48:41 ----D---- C:\Windows\system32\Tasks
2013-11-19 10:19:10 ----D---- C:\Program Files\Opera
2013-11-13 10:45:41 ----D---- C:\Windows\rescache
2013-11-13 08:55:03 ----D---- C:\Windows\winsxs
2013-11-13 08:27:55 ----D---- C:\Windows\system32\drivers\en-US
2013-11-13 08:27:55 ----D---- C:\Windows\system32\cs-CZ
2013-11-13 08:27:54 ----D---- C:\Windows\system32\wbem
2013-11-13 08:27:51 ----D---- C:\Windows\system32\DriverStore
2013-11-13 08:16:52 ----D---- C:\ProgramData\Microsoft Help
2013-11-13 08:16:01 ----D---- C:\Windows\system32\catroot2
2013-11-13 08:16:01 ----D---- C:\Windows\system32\catroot
2013-11-13 08:10:34 ----D---- C:\Windows\system32\MRT
2013-11-13 07:54:00 ----A---- C:\Windows\system32\MRT.exe
2013-11-12 08:58:47 ----D---- C:\Program Files\Internet Explorer
2013-11-12 08:58:46 ----D---- C:\Windows\system32\migration
2013-11-12 08:58:46 ----D---- C:\Windows\system32\en-US
2013-11-12 08:58:46 ----D---- C:\Windows\PolicyDefinitions
2013-11-12 07:58:50 ----D---- C:\Windows\Logs
2013-11-12 00:00:49 ----D---- C:\Program Files\WinRAR
2013-11-10 19:55:35 ----RSD---- C:\Windows\Fonts
2013-11-10 19:49:52 ----D---- C:\ProgramData\DAEMON Tools Lite
2013-11-07 13:53:33 ----D---- C:\Users\Tata\AppData\Roaming\Skype
2013-11-04 08:46:48 ----D---- C:\Windows\inf

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 aswRvrt;avast! Revert; C:\Windows\system32\drivers\aswRvrt.sys [2013-10-21 49944]
R0 aswVmm;avast! VM Monitor; C:\Windows\system32\drivers\aswVmm.sys [2013-10-21 178304]
R0 rdyboost;ReadyBoost; C:\Windows\System32\drivers\rdyboost.sys [2010-11-20 173440]
R0 vmbus;@%SystemRoot%\system32\vmbusres.dll,-1000; C:\Windows\system32\drivers\vmbus.sys [2010-11-20 175360]
R1 aswRdr;aswRdr; \??\C:\Windows\system32\drivers\aswRdr2.sys [2013-10-21 79720]
R1 aswSnx;aswSnx; \??\C:\Windows\system32\drivers\aswSnx.sys [2013-10-21 774392]
R1 aswSP;aswSP; \??\C:\Windows\system32\drivers\aswSP.sys [2013-11-08 403440]
R1 aswTdi;aswTdi; \??\C:\Windows\system32\drivers\aswTdi.sys [2013-10-21 57672]
R1 CSC;@%systemroot%\system32\cscsvc.dll,-202; C:\Windows\system32\drivers\csc.sys [2010-11-20 388096]
R1 dtsoftbus01;DAEMON Tools Virtual Bus Driver; C:\Windows\system32\DRIVERS\dtsoftbus01.sys [2013-09-30 242240]
R1 vwififlt;Virtual WiFi Filter Driver; C:\Windows\system32\DRIVERS\vwififlt.sys [2009-07-14 48128]
R2 aswFsBlk;aswFsBlk; \??\C:\Windows\system32\drivers\aswFsBlk.sys [2013-10-21 35656]
R2 aswMonFlt;aswMonFlt; \??\C:\Windows\system32\drivers\aswMonFlt.sys [2013-10-21 70384]
R3 ALCXWDM;Service for Realtek AC97 Audio (WDM); C:\Windows\system32\drivers\RTKVAC.SYS [2009-06-19 4172832]
R3 BCM43XX;Broadcom 802.11 Network Adapter Driver; C:\Windows\system32\DRIVERS\bcmwl6.sys [2009-07-07 2506232]
R3 FETNDIS;VIA Rhine-Family Fast Ethernet Adapter Driver; C:\Windows\system32\DRIVERS\fetnd6.sys [2009-07-13 44032]
R3 smserial;smserial; C:\Windows\system32\DRIVERS\smserial.sys [2005-04-07 923826]
R3 viagfx;viagfx; C:\Windows\system32\DRIVERS\vtmini.sys [2005-12-27 247040]
S2 Parvdm;Parvdm; C:\Windows\system32\DRIVERS\parvdm.sys [2009-07-14 8704]
S3 aic78xx;aic78xx; C:\Windows\system32\DRIVERS\djsvs.sys [2009-07-14 70720]
S3 amdagp;Ovladač filtru AMD portu AGP; C:\Windows\system32\drivers\amdagp.sys [2009-07-14 53312]
S3 b57nd60x;Broadcom NetXtreme Gigabit Ethernet - NDIS 6.0; C:\Windows\system32\DRIVERS\b57nd60x.sys [2009-07-13 229888]
S3 cpuz134;cpuz134; \??\C:\Program Files\CPUID\PC Wizard 2010\pcwiz_x32.sys [2010-07-09 20328]
S3 nmwcd;Nokia USB Phone Parent Driver; C:\Windows\system32\drivers\ccdcmb.sys [2013-01-23 18560]
S3 nmwcdc;Nokia USB Communication Driver; C:\Windows\system32\drivers\ccdcmbo.sys [2013-01-23 23168]
S3 pccsmcfd;PCCS Mode Change Filter Driver; C:\Windows\system32\DRIVERS\pccsmcfd.sys [2012-10-17 19072]
S3 pciide;pciide; C:\Windows\system32\drivers\pciide.sys [2009-07-14 12368]
S3 RDPDR;Terminal Server Device Redirector Driver; C:\Windows\System32\drivers\rdpdr.sys [2010-11-20 133632]
S3 RdpVideoMiniport;Remote Desktop Video Miniport Driver; C:\Windows\System32\drivers\rdpvideominiport.sys [2012-08-23 14848]
S3 s3cap;s3cap; C:\Windows\system32\drivers\vms3cap.sys [2010-11-20 5632]
S3 sisagp;Filtr SIS sběrnice AGP; C:\Windows\system32\drivers\sisagp.sys [2009-07-14 52304]
S3 storvsc;storvsc; C:\Windows\system32\drivers\storvsc.sys [2010-11-20 28032]
S3 TsUsbFlt;@%SystemRoot%\system32\drivers\tsusbflt.sys,-1; C:\Windows\System32\drivers\tsusbflt.sys [2013-10-02 49152]
S3 upperdev;upperdev; C:\Windows\system32\DRIVERS\usbser_lowerflt.sys [2013-01-23 8192]
S3 usbser;USB Modem Driver; C:\Windows\system32\DRIVERS\usbser.sys [2013-08-29 28160]
S3 UsbserFilt;UsbserFilt; C:\Windows\system32\DRIVERS\usbser_lowerfltj.sys [2013-01-23 8192]
S3 viaagp;Filtr VIA sběrnice AGP; C:\Windows\system32\drivers\viaagp.sys [2009-07-14 53328]
S3 ViaC7;VIA C7 Processor Driver; C:\Windows\system32\DRIVERS\viac7.sys [2009-07-14 52736]
S3 VMBusHID;VMBusHID; C:\Windows\system32\drivers\VMBusHID.sys [2010-11-20 17920]
S3 WinUsb;WinUsb; C:\Windows\system32\DRIVERS\WinUsb.sys [2010-11-20 35968]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 AdobeARMservice;Adobe Acrobat Update Service; C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe [2013-09-05 65640]
R2 avast! Antivirus;avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [2013-10-21 50344]
R2 CscService;@%systemroot%\system32\cscsvc.dll,-200; C:\Windows\System32\svchost.exe [2009-07-14 20992]
R2 wlidsvc;Windows Live ID Sign-in Assistant; C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE [2011-03-28 1713536]
R3 osppsvc;Office Software Protection Platform; C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE [2010-01-09 4640000]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
S2 gupdate;Služba Google Update (gupdate); C:\Program Files\Google\Update\GoogleUpdate.exe [2013-09-30 116648]
S2 SkypeUpdate;Skype Updater; C:\Program Files\Skype\Updater\Updater.exe [2013-09-05 171680]
S3 AppMgmt;@appmgmts.dll,-3250; C:\Windows\system32\svchost.exe [2009-07-14 20992]
S3 FLEXnet Licensing Service;FLEXnet Licensing Service; C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe [2013-10-15 651720]
S3 gupdatem;Služba Google Update (gupdatem); C:\Program Files\Google\Update\GoogleUpdate.exe [2013-09-30 116648]
S3 IEEtwCollectorService;@%SystemRoot%\system32\ieetwcollectorres.dll,-1000; C:\Windows\system32\IEEtwCollector.exe [2013-11-12 108032]
S3 Microsoft SharePoint Workspace Audit Service;Microsoft SharePoint Workspace Audit Service; C:\Program Files\Microsoft Office\Office14\GROOVE.EXE [2013-03-08 30798512]
S3 ose;Office Source Engine; C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2010-01-09 149352]
S3 PeerDistSvc;@%SystemRoot%\system32\peerdistsvc.dll,-9000; C:\Windows\System32\svchost.exe [2009-07-14 20992]
S3 ServiceLayer;ServiceLayer; C:\Program Files\PC Connectivity Solution\ServiceLayer.exe [2013-04-18 737616]
S3 StorSvc;@%SystemRoot%\System32\StorSvc.dll,-100; C:\Windows\System32\svchost.exe [2009-07-14 20992]
S3 UmRdpService;@%SystemRoot%\system32\umrdp.dll,-1000; C:\Windows\System32\svchost.exe [2009-07-14 20992]
S3 WatAdminSvc;@%SystemRoot%\system32\Wat\WatUX.exe,-601; C:\Windows\system32\Wat\WatAdminSvc.exe [2013-09-30 1343400]

-----------------EOF-----------------

Zdravím!
Nejprve zkuste obnovu systému k datu, kdy korektně fungoval.

Systém mi nabízí pouze jeden bod obnovy a to včera, kdy jsem se poněkolikáté pokoušel nainstalovat aktualizaci (Microsoft NET Framework). Jiný bod obnovy nenabízí a problémy trvají mnohem déle.

Zkuste utilitu FixIt: http://support.microsoft.com/fixit/cs-cz .

Při pokusu o opravu pomocí fixit vyskočilo okno s touto chybovou hláškou:

csc.exe - Chybná bitová kopie
C:\Windows\Microsoft.NET\Framework\v2.0.50727\alink.dll není navržena na spuštění v systému Windows nebo obsahuje chybu. Pokuste se program nainstalovat znovu pomocí původního instalačního média nebo se obraťte na správce systému nebo dodavatele softwaru s žádostí o pomoc.

Fix it následně skončil, že nemůže pokračovat. Něco podobného (jen se souborem StructuredQuery.dll) se mi objevovalo, když jsem se snažil o úpravu avi souborů pomocí mpeg4modifier. Ten ale po zavření chybové hlášky operaci dokončil správně.

Dejte log ComboFix:

Stahnete a ulozte nejlepe na plochu ComboFix: http://download.bleepingcomputer.com/sUBs/ComboFix.exe

pote spustte aplikaci pod uctem s administratorskym opravnenim

hned po startu se zobrazi obrazovka s licencnimi podminkami, pokracujte kliknutim na tlacitko Ano.

v klidu si postavte na kafe (cela akce trva cca. 5-10 minut, nekdy i dele - dle toho, o jak rychly stroj se

jedna a kolika soubory se skener bude muset prodirat), behem skenu se nepokousejte spoustet zadne jine

aplikace ani nic jineho

behem skenovani nepropadejte panice, vas stroj muze byt restartovan (predevsim pri prvni aplikaci skeneru)

upozorneni: pokud pouzivate antispyware s rezidentnim stitem, prepnete jeho rezidentni stit do Install Mode,

pripadne jej po dobu skenu uplne deaktivujte, protoze dochazi pri skenu a vymazu pripadneho malware k

nezadoucim kolizim s rezidentem antispyware.

Spustil jsem ComboFix (viz log níže) a po restartu vyskočilo chybové okno:

Fatal Error!
Error creating child process

a po chvíli

C:\Users\Tata\AppData\Roaming\Seznam.cz\szninstall.exe
Unable to start process 'C:\Users\Tata\AppData\Roaming\Seznam.cz\sznsetup.exe -V' Error nr: 1018 - Pokus použít neplatnou operaci na klíč registru, který je označen pro odstranění.
-----
LightSpeed::UnableToStartProcessException::UnableToStartProcessException(364): Exception: Unable to start process 'C:\Users\Tata\AppData\Roaming\Seznam.cz\sznsetup.exe -V' Error nr: 1018 - Pokus použít neplatnou operaci na klíč registru, který je označen pro odstranění.
(class LightSpeed::UnableToStartProcessException, LightSpeed::UnableToStartProcessException::UnableToStartProcessException)


log:

ComboFix 13-12-01.01 - Tata 03.12.2013 21:36:16.1.1 - x86
Microsoft Windows 7 Professional 6.1.7601.1.1250.420.1029.18.958.512 [GMT 1:00]
Spuštěný z: c:\users\Tata\Desktop\ComboFix.exe
AV: avast! Antivirus *Disabled/Updated* {17AD7D40-BA12-9C46-7131-94903A54AD8B}
SP: avast! Antivirus *Disabled/Updated* {ACCC9CA4-9C28-93C8-4B81-AFE241D3E736}
SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.
.
((((((((((((((((((((((((((((((((((((((( Ostatní výmazy )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
c:\users\Tata\AppData\Local\Temp\_MEI14402\_ctypes.pyd
c:\users\Tata\AppData\Local\Temp\_MEI14402\_elementtree.pyd
c:\users\Tata\AppData\Local\Temp\_MEI14402\_hashlib.pyd
c:\users\Tata\AppData\Local\Temp\_MEI14402\_multiprocessing.pyd
c:\users\Tata\AppData\Local\Temp\_MEI14402\_socket.pyd
c:\users\Tata\AppData\Local\Temp\_MEI14402\_ssl.pyd
c:\users\Tata\AppData\Local\Temp\_MEI14402\msvcp100.dll
c:\users\Tata\AppData\Local\Temp\_MEI14402\msvcr100.dll
c:\users\Tata\AppData\Local\Temp\_MEI14402\pyexpat.pyd
c:\users\Tata\AppData\Local\Temp\_MEI14402\pysqlite2._sqlite.pyd
c:\users\Tata\AppData\Local\Temp\_MEI14402\python27.dll
c:\users\Tata\AppData\Local\Temp\_MEI14402\pythoncom27.dll
c:\users\Tata\AppData\Local\Temp\_MEI14402\PyWinTypes27.dll
c:\users\Tata\AppData\Local\Temp\_MEI14402\select.pyd
c:\users\Tata\AppData\Local\Temp\_MEI14402\unicodedata.pyd
c:\users\Tata\AppData\Local\Temp\_MEI14402\win32api.pyd
c:\users\Tata\AppData\Local\Temp\_MEI14402\win32com.shell.shell.pyd
c:\users\Tata\AppData\Local\Temp\_MEI14402\win32crypt.pyd
c:\users\Tata\AppData\Local\Temp\_MEI14402\win32event.pyd
c:\users\Tata\AppData\Local\Temp\_MEI14402\win32file.pyd
c:\users\Tata\AppData\Local\Temp\_MEI14402\win32inet.pyd
c:\users\Tata\AppData\Local\Temp\_MEI14402\win32pdh.pyd
c:\users\Tata\AppData\Local\Temp\_MEI14402\win32process.pyd
c:\users\Tata\AppData\Local\Temp\_MEI14402\win32profile.pyd
c:\users\Tata\AppData\Local\Temp\_MEI14402\win32security.pyd
c:\users\Tata\AppData\Local\Temp\_MEI14402\win32ts.pyd
c:\users\Tata\AppData\Local\Temp\_MEI14402\windows._cacheinvalidation.pyd
c:\users\Tata\AppData\Local\Temp\_MEI14402\wx._controls_.pyd
c:\users\Tata\AppData\Local\Temp\_MEI14402\wx._core_.pyd
c:\users\Tata\AppData\Local\Temp\_MEI14402\wx._gdi_.pyd
c:\users\Tata\AppData\Local\Temp\_MEI14402\wx._html2.pyd
c:\users\Tata\AppData\Local\Temp\_MEI14402\wx._misc_.pyd
c:\users\Tata\AppData\Local\Temp\_MEI14402\wx._windows_.pyd
c:\users\Tata\AppData\Local\Temp\_MEI14402\wx._wizard.pyd
c:\users\Tata\AppData\Local\Temp\_MEI14402\wxbase294u_net_vc90.dll
c:\users\Tata\AppData\Local\Temp\_MEI14402\wxbase294u_vc90.dll
c:\users\Tata\AppData\Local\Temp\_MEI14402\wxmsw294u_adv_vc90.dll
c:\users\Tata\AppData\Local\Temp\_MEI14402\wxmsw294u_core_vc90.dll
c:\users\Tata\AppData\Local\Temp\_MEI14402\wxmsw294u_html_vc90.dll
c:\users\Tata\AppData\Local\Temp\_MEI14402\wxmsw294u_webview_vc90.dll
.
.
((((((((((((((((((((((((( Soubory vytvořené od 2013-11-03 do 2013-12-03 )))))))))))))))))))))))))))))))
.
.
2013-12-02 13:22 . 2013-12-02 13:23 -------- d-----w- c:\program files\trend micro
2013-12-02 13:22 . 2013-12-02 13:23 -------- d-----w- C:\rsit
2013-12-02 13:12 . 2013-12-02 13:12 -------- d--h--w- c:\windows\PIF
2013-12-02 13:04 . 2013-12-02 13:04 -------- d-----w- c:\windows\system32\Nová složka
2013-12-02 12:54 . 2013-12-02 12:54 63920 ----a-w- c:\windows\system32\drivers\vmx_svga.sys
2013-12-02 12:54 . 2013-12-02 12:54 11696 ----a-w- c:\windows\system32\drivers\vmmouse.sys
2013-12-02 12:54 . 2013-12-02 12:54 117552 ----a-w- c:\windows\system32\drivers\vmhgfs.sys
2013-12-02 12:54 . 2013-12-02 12:54 19504 ----a-w- c:\windows\system32\drivers\vmdebug.sys
2013-12-02 12:54 . 2013-12-02 12:54 54960 ----a-w- c:\windows\system32\drivers\vmci.sys
2013-12-02 12:54 . 2013-12-02 12:54 25008 ----a-w- c:\windows\system32\drivers\vmaudio.sys
2013-12-02 12:53 . 2013-12-02 12:54 118784 ----a-w- c:\windows\system32\drivers\E1G60I32.sys
2013-12-02 12:52 . 2013-12-02 12:53 368749 ----a-w- c:\windows\system32\Spool\prtprocs\w32x86\TPWinPrn.dll
2013-12-02 12:50 . 2013-12-02 12:51 16432 ----a-w- c:\windows\system32\vmx_mode.dll
2013-12-02 12:50 . 2013-12-02 12:50 173232 ----a-w- c:\windows\system32\vmx_fb.dll
2013-12-02 12:50 . 2013-12-02 12:50 35888 ----a-w- c:\windows\system32\vmhgfs.dll
2013-12-02 12:50 . 2013-12-02 12:50 111856 ----a-w- c:\windows\system32\TPVMW32.dll
2013-12-02 12:50 . 2013-12-02 12:50 9104 ----a-w- c:\windows\system32\TPVMMonUIjpn.dll
2013-12-02 12:50 . 2013-12-02 12:50 9104 ----a-w- c:\windows\system32\TPVMMonUIdeu.dll
2013-12-02 12:50 . 2013-12-02 12:50 79208 ----a-w- c:\windows\system32\TPVMMonUI.dll
2013-12-02 12:50 . 2013-12-02 12:50 9632 ----a-w- c:\windows\system32\TPVMMonjpn.dll
2013-12-02 12:50 . 2013-12-02 12:50 23960 ----a-w- c:\windows\system32\TPVMMondeu.dll
2013-12-02 12:49 . 2013-12-02 12:50 284016 ----a-w- c:\windows\system32\TPVMMon.dll
2013-12-02 12:49 . 2013-12-02 12:49 423208 ----a-w- c:\windows\system32\TPSvc.dll
2013-12-02 12:48 . 2013-12-02 12:48 18432 ----a-w- c:\windows\system32\corpol.dll
2013-12-02 12:48 . 2013-12-02 12:48 73216 ----a-w- c:\windows\system32\admparse.dll
2013-12-02 12:48 . 2013-12-02 12:48 131584 ----a-w- c:\windows\system32\aaclient.dll
2013-12-02 12:38 . 2013-12-02 12:38 -------- d-----w- c:\programdata\Weskysoft
2013-12-02 11:56 . 2013-12-02 11:56 -------- d-----w- c:\program files\DLLSuite
2013-11-20 22:40 . 2013-11-20 22:40 -------- d-----w- c:\users\Tata\AppData\Roaming\IrfanView
2013-11-20 22:40 . 2013-11-20 22:40 -------- d-----w- c:\program files\IrfanView
2013-11-13 07:15 . 2013-10-01 23:45 32256 ----a-w- c:\windows\system32\TsUsbGDCoInstaller.dll
2013-11-13 07:15 . 2013-10-02 00:32 12800 ----a-w- c:\windows\system32\TsUsbRedirectionGroupPolicyControl.exe
2013-11-13 07:15 . 2013-10-02 00:42 49152 ----a-w- c:\windows\system32\drivers\TsUsbFlt.sys
2013-11-13 07:15 . 2013-10-02 00:30 14336 ----a-w- c:\windows\system32\TsUsbRedirectionGroupPolicyExtension.dll
2013-11-13 07:15 . 2013-10-02 00:14 50176 ----a-w- c:\windows\system32\MsRdpWebAccess.dll
2013-11-13 07:15 . 2013-10-02 00:14 17920 ----a-w- c:\windows\system32\wksprtPS.dll
2013-11-13 07:15 . 2013-10-01 23:58 53248 ----a-w- c:\windows\system32\tsgqec.dll
2013-11-13 07:15 . 2013-10-01 23:08 855552 ----a-w- c:\windows\system32\rdvidcrl.dll
2013-11-13 07:15 . 2013-10-01 23:00 76288 ----a-w- c:\windows\system32\TSWbPrxy.exe
2013-11-13 07:15 . 2013-10-01 22:53 350208 ----a-w- c:\windows\system32\wksprt.exe
2013-11-13 07:15 . 2013-10-01 22:34 1068544 ----a-w- c:\windows\system32\mstsc.exe
2013-11-13 07:15 . 2013-10-01 20:55 5698048 ----a-w- c:\windows\system32\mstscax.dll
2013-11-13 06:51 . 2013-09-25 02:01 67520 ----a-w- c:\windows\system32\drivers\ksecdd.sys
2013-11-13 06:51 . 2013-09-25 01:57 247808 ----a-w- c:\windows\system32\schannel.dll
2013-11-13 06:50 . 2013-09-25 02:01 136640 ----a-w- c:\windows\system32\drivers\ksecpkg.sys
2013-11-13 06:50 . 2013-09-25 01:56 1038848 ----a-w- c:\windows\system32\lsasrv.dll
2013-11-13 06:50 . 2013-07-04 12:16 369848 ----a-w- c:\windows\system32\drivers\cng.sys
2013-11-13 06:50 . 2013-09-25 01:57 99840 ----a-w- c:\windows\system32\sspicli.dll
2013-11-13 06:50 . 2013-09-25 01:57 22016 ----a-w- c:\windows\system32\secur32.dll
2013-11-13 06:50 . 2013-09-25 01:56 220160 ----a-w- c:\windows\system32\ncrypt.dll
2013-11-13 06:50 . 2013-09-25 00:49 22016 ----a-w- c:\windows\system32\lsass.exe
2013-11-13 06:50 . 2013-09-25 00:49 15872 ----a-w- c:\windows\system32\sspisrv.dll
2013-11-13 06:50 . 2013-10-04 01:56 1796096 ----a-w- c:\windows\system32\authui.dll
2013-11-13 06:50 . 2013-10-04 01:58 152576 ----a-w- c:\windows\system32\SmartcardCredentialProvider.dll
2013-11-13 06:50 . 2013-10-04 01:56 168960 ----a-w- c:\windows\system32\credui.dll
2013-11-13 06:50 . 2013-09-25 01:57 792576 ----a-w- c:\windows\system32\TSWorkspace.dll
2013-11-13 06:49 . 2013-10-12 02:01 679424 ----a-w- c:\windows\system32\IKEEXT.DLL
2013-11-13 06:49 . 2013-10-12 02:03 656896 ----a-w- c:\windows\system32\nshwfp.dll
2013-11-13 06:49 . 2013-10-12 02:01 216576 ----a-w- c:\windows\system32\FWPUCLNT.DLL
2013-11-13 06:49 . 2013-10-03 01:58 305152 ----a-w- c:\windows\system32\gdi32.dll
2013-11-13 06:48 . 2013-10-05 19:57 1168384 ----a-w- c:\windows\system32\crypt32.dll
2013-11-10 19:52 . 2013-12-01 19:10 -------- d-----w- c:\users\Tata\AppData\Roaming\Mp3tag
2013-11-10 19:52 . 2013-11-10 19:52 -------- d-----w- c:\program files\Mp3tag
2013-11-10 18:55 . 2000-05-22 21:58 608448 ----a-w- c:\windows\system32\comctl32.ocx
2013-11-10 18:55 . 2013-11-10 18:56 -------- d-----w- c:\program files\Total Video Converter
2013-11-09 14:43 . 2012-06-17 21:10 965120 ----a-w- c:\windows\system32\ac3filter.acm
2013-11-09 14:43 . 2013-11-09 14:43 -------- d-----w- c:\program files\AC3Filter
.
.
.
(((((((((((((((((((((((((((((((((((((((( Find3M výpis ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2013-12-01 16:11 . 2013-09-30 14:07 692616 ----a-w- c:\windows\system32\FlashPlayerApp.exe
2013-12-01 16:11 . 2013-09-30 14:07 71048 ----a-w- c:\windows\system32\FlashPlayerCPLApp.cpl
2013-11-08 17:02 . 2013-09-30 13:37 403440 ----a-w- c:\windows\system32\drivers\aswsp.sys
2013-10-21 20:18 . 2013-09-30 13:36 57672 ----a-w- c:\windows\system32\drivers\aswTdi.sys
2013-10-21 20:18 . 2013-09-30 13:36 178304 ----a-w- c:\windows\system32\drivers\aswVmm.sys
2013-10-21 20:18 . 2013-09-30 13:37 35656 ----a-w- c:\windows\system32\drivers\aswFsBlk.sys
2013-10-21 20:18 . 2013-09-30 13:37 79720 ----a-w- c:\windows\system32\drivers\aswRdr2.sys
2013-10-21 20:18 . 2013-09-30 13:36 774392 ----a-w- c:\windows\system32\drivers\aswSnx.sys
2013-10-21 20:18 . 2013-09-30 13:36 49944 ----a-w- c:\windows\system32\drivers\aswRvrt.sys
2013-10-21 20:18 . 2013-09-30 13:36 70384 ----a-w- c:\windows\system32\drivers\aswMonFlt.sys
2013-10-21 20:18 . 2013-09-30 13:36 269216 ----a-w- c:\windows\system32\aswBoot.exe
2013-10-21 20:18 . 2013-09-30 13:35 43152 ----a-w- c:\windows\avastSS.scr
2013-10-21 07:02 . 2013-10-21 07:02 94632 ----a-w- c:\windows\system32\WindowsAccessBridge.dll
2013-10-04 13:01 . 2013-10-04 13:01 49152 ----a-w- c:\windows\system32\taskhost.exe
2013-10-04 13:00 . 2013-10-04 13:00 9728 ---ha-w- c:\windows\system32\api-ms-win-downlevel-shlwapi-l1-1-0.dll
2013-10-04 13:00 . 2013-10-04 13:00 906240 ----a-w- c:\windows\system32\FntCache.dll
2013-10-04 13:00 . 2013-10-04 13:00 604160 ----a-w- c:\windows\system32\d3d10level9.dll
2013-10-04 13:00 . 2013-10-04 13:00 5632 ---ha-w- c:\windows\system32\api-ms-win-downlevel-shlwapi-l2-1-0.dll
2013-10-04 13:00 . 2013-10-04 13:00 5632 ---ha-w- c:\windows\system32\api-ms-win-downlevel-ole32-l1-1-0.dll
2013-10-04 13:00 . 2013-10-04 13:00 417792 ----a-w- c:\windows\system32\WMPhoto.dll
2013-10-04 13:00 . 2013-10-04 13:00 4096 ---ha-w- c:\windows\system32\api-ms-win-downlevel-user32-l1-1-0.dll
2013-10-04 13:00 . 2013-10-04 13:00 364544 ----a-w- c:\windows\system32\XpsGdiConverter.dll
2013-10-04 13:00 . 2013-10-04 13:00 3584 ---ha-w- c:\windows\system32\api-ms-win-downlevel-advapi32-l2-1-0.dll
2013-10-04 13:00 . 2013-10-04 13:00 3419136 ----a-w- c:\windows\system32\d2d1.dll
2013-10-04 13:00 . 2013-10-04 13:00 3072 ---ha-w- c:\windows\system32\api-ms-win-downlevel-version-l1-1-0.dll
2013-10-04 13:00 . 2013-10-04 13:00 3072 ---ha-w- c:\windows\system32\api-ms-win-downlevel-shell32-l1-1-0.dll
2013-10-04 13:00 . 2013-10-04 13:00 293376 ----a-w- c:\windows\system32\dxgi.dll
2013-10-04 13:00 . 2013-10-04 13:00 2560 ---ha-w- c:\windows\system32\api-ms-win-downlevel-normaliz-l1-1-0.dll
2013-10-04 13:00 . 2013-10-04 13:00 249856 ----a-w- c:\windows\system32\d3d10_1core.dll
2013-10-04 13:00 . 2013-10-04 13:00 2284544 ----a-w- c:\windows\system32\msmpeg2vdec.dll
2013-10-04 13:00 . 2013-10-04 13:00 220160 ----a-w- c:\windows\system32\d3d10core.dll
2013-10-04 13:00 . 2013-10-04 13:00 207872 ----a-w- c:\windows\system32\WindowsCodecsExt.dll
2013-10-04 13:00 . 2013-10-04 13:00 1988096 ----a-w- c:\windows\system32\d3d10warp.dll
2013-10-04 13:00 . 2013-10-04 13:00 187392 ----a-w- c:\windows\system32\UIAnimation.dll
2013-10-04 13:00 . 2013-10-04 13:00 161792 ----a-w- c:\windows\system32\d3d10_1.dll
2013-10-04 13:00 . 2013-10-04 13:00 1158144 ----a-w- c:\windows\system32\XpsPrint.dll
2013-10-04 13:00 . 2013-10-04 13:00 1080832 ----a-w- c:\windows\system32\d3d10.dll
2013-10-04 13:00 . 2013-10-04 13:00 10752 ---ha-w- c:\windows\system32\api-ms-win-downlevel-advapi32-l1-1-0.dll
2013-10-04 12:57 . 2013-10-04 12:57 1505280 ----a-w- c:\windows\system32\d3d11.dll
2013-10-03 11:27 . 2009-07-14 02:05 152576 ----a-w- c:\windows\system32\msclmd.dll
2013-10-03 07:12 . 2011-03-28 16:36 22240 ----a-w- c:\programdata\Microsoft\IdentityCRL\production\ppcrlconfig600.dll
2013-10-02 02:46 . 2013-11-13 07:15 3072 ----a-w- c:\windows\system32\drivers\en-US\tsusbflt.sys.mui
2013-09-30 21:27 . 2013-09-30 21:32 832872 ----a-w- c:\windows\system32\Flash.ocx
2013-09-30 21:00 . 2013-09-30 21:00 242240 ----a-w- c:\windows\system32\drivers\dtsoftbus01.sys
2013-09-25 01:57 . 2013-11-13 06:51 247808 ----a-w- c:\windows\system32\schannel.dll
2013-09-15 22:50 . 2013-09-30 13:26 7328304 ----a-w- c:\programdata\Microsoft\Windows Defender\Definition Updates\{CEFE1081-53DE-49CC-A7F1-B6D0416900C1}\mpengine.dll
2013-09-14 00:48 . 2013-10-14 08:31 338944 ----a-w- c:\windows\system32\drivers\afd.sys
2013-09-08 02:07 . 2013-10-14 08:31 1294272 ----a-w- c:\windows\system32\drivers\tcpip.sys
2013-09-08 02:03 . 2013-10-14 08:31 231424 ----a-w- c:\windows\system32\mswsock.dll
.
.
(((((((((((((((((((((((((((((((((( Spouštěcí body v registru )))))))))))))))))))))))))))))))))))))))))))))
.
.
*Poznámka* prázdné záznamy a legitimní výchozí údaje nejsou zobrazeny.
REGEDIT4
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ SkyDrive1]
@="{F241C880-6982-4CE5-8CF7-7085BA96DA5A}"
[HKEY_CLASSES_ROOT\CLSID\{F241C880-6982-4CE5-8CF7-7085BA96DA5A}]
2013-09-30 19:53 222832 ----a-w- c:\users\Tata\AppData\Local\Microsoft\SkyDrive\17.0.2015.0811\SkyDriveShell.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ SkyDrive2]
@="{A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E}"
[HKEY_CLASSES_ROOT\CLSID\{A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E}]
2013-09-30 19:53 222832 ----a-w- c:\users\Tata\AppData\Local\Microsoft\SkyDrive\17.0.2015.0811\SkyDriveShell.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ SkyDrive3]
@="{BBACC218-34EA-4666-9D7A-C78F2274A524}"
[HKEY_CLASSES_ROOT\CLSID\{BBACC218-34EA-4666-9D7A-C78F2274A524}]
2013-09-30 19:53 222832 ----a-w- c:\users\Tata\AppData\Local\Microsoft\SkyDrive\17.0.2015.0811\SkyDriveShell.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\00avast]
@="{472083B0-C522-11CF-8763-00608CC02F24}"
[HKEY_CLASSES_ROOT\CLSID\{472083B0-C522-11CF-8763-00608CC02F24}]
2013-10-21 20:17 321752 ----a-w- c:\program files\AVAST Software\Avast\ashShell.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\GDriveBlacklistedOverlay]
@="{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D42}"
[HKEY_CLASSES_ROOT\CLSID\{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D42}]
2013-09-25 15:37 579024 ----a-w- c:\program files\Google\Drive\googledrivesync32.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\GDriveSharedEditOverlay]
@="{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D44}"
[HKEY_CLASSES_ROOT\CLSID\{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D44}]
2013-09-25 15:37 579024 ----a-w- c:\program files\Google\Drive\googledrivesync32.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\GDriveSharedViewOverlay]
@="{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D43}"
[HKEY_CLASSES_ROOT\CLSID\{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D43}]
2013-09-25 15:37 579024 ----a-w- c:\program files\Google\Drive\googledrivesync32.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\GDriveSyncedOverlay]
@="{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D40}"
[HKEY_CLASSES_ROOT\CLSID\{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D40}]
2013-09-25 15:37 579024 ----a-w- c:\program files\Google\Drive\googledrivesync32.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\GDriveSyncingOverlay]
@="{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D41}"
[HKEY_CLASSES_ROOT\CLSID\{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D41}]
2013-09-25 15:37 579024 ----a-w- c:\program files\Google\Drive\googledrivesync32.dll
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"cz.seznam.software.autoupdate"="c:\users\Tata\AppData\Roaming\Seznam.cz\szninstall.exe" [2013-05-16 1062472]
"cz.seznam.software.szndesktop"="c:\users\Tata\AppData\Roaming\Seznam.cz\bin\wszndesktop.exe" [2013-04-12 92664]
"GoogleDriveSync"="c:\program files\Google\Drive\googledrivesync.exe" [2013-09-25 20133824]
"SkyDrive"="c:\users\Tata\AppData\Local\Microsoft\SkyDrive\SkyDrive.exe" [2013-09-30 257136]
"DAEMON Tools Lite"="c:\program files\DAEMON Tools Lite\DTLite.exe" [2013-03-14 3672640]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"SoundMan"="SOUNDMAN.EXE" [2009-04-14 604704]
"seznam-listicka-distribuce"="c:\program files\Seznam.cz\distribution\szninstall.exe" [2013-05-16 1062472]
"SMSERIAL"="sm56hlpr.exe" [2005-04-07 544768]
"BCSSync"="c:\program files\Microsoft Office\Office14\BCSSync.exe" [2012-11-05 89184]
"Adobe ARM"="c:\program files\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2013-04-04 958576]
"VTTimer"="VTTimer.exe" [2005-03-08 53248]
"VTTrayp"="VTtrayp.exe" [2005-11-01 163840]
"Adobe Acrobat Speed Launcher"="c:\program files\Adobe\Acrobat 9.0\Acrobat\Acrobat_sl.exe" [2008-06-12 37232]
"Acrobat Assistant 8.0"="c:\program files\Adobe\Acrobat 9.0\Acrobat\Acrotray.exe" [2008-06-11 640376]
"SunJavaUpdateSched"="c:\program files\Common Files\Java\Java Update\jusched.exe" [2013-07-02 254336]
"AvastUI.exe"="c:\program files\AVAST Software\Avast\AvastUI.exe" [2013-10-22 3567800]
.
[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\RunOnce]
"SPReview"="c:\windows\System32\SPReview\SPReview.exe" [2013-10-03 280576]
.
c:\users\Tata\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\
Výřezy obrazovky a spuštění aplikace OneNote 2010.lnk - c:\program files\Microsoft Office\Office14\ONENOTEM.EXE /tsr [2013-6-25 228552]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorAdmin"= 0 (0x0)
"ConsentPromptBehaviorUser"= 3 (0x3)
"EnableLUA"= 0 (0x0)
"EnableUIADesktopToggle"= 0 (0x0)
"PromptOnSecureDesktop"= 0 (0x0)
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\drivers32]
"mixer"=wdmaud.drv
.
R2 SkypeUpdate;Skype Updater;c:\program files\Skype\Updater\Updater.exe [2013-09-05 171680]
R3 cpuz134;cpuz134;c:\program files\CPUID\PC Wizard 2010\pcwiz_x32.sys [2010-07-09 20328]
R3 IEEtwCollectorService;Internet Explorer ETW Collector Service;c:\windows\system32\IEEtwCollector.exe [2013-11-12 108032]
R3 RdpVideoMiniport;Remote Desktop Video Miniport Driver;c:\windows\system32\drivers\rdpvideominiport.sys [2012-08-23 14848]
R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys [2013-10-02 49152]
R3 WatAdminSvc;Služba Technologie aktivace Windows;c:\windows\system32\Wat\WatAdminSvc.exe [2013-09-30 1343400]
S0 aswRvrt;avast! Revert; [x]
S0 aswVmm;avast! VM Monitor; [x]
S1 aswSnx;aswSnx;c:\windows\system32\drivers\aswSnx.sys [2013-10-21 774392]
S1 aswSP;aswSP;c:\windows\system32\drivers\aswSP.sys [2013-11-08 403440]
S1 dtsoftbus01;DAEMON Tools Virtual Bus Driver;c:\windows\system32\DRIVERS\dtsoftbus01.sys [2013-09-30 242240]
S2 aswFsBlk;aswFsBlk;c:\windows\system32\drivers\aswFsBlk.sys [2013-10-21 35656]
S2 aswMonFlt;aswMonFlt;c:\windows\system32\drivers\aswMonFlt.sys [2013-10-21 70384]
.
.
--- Ostatní služby/ovladače v paměti ---
.
*NewlyCreated* - WS2IFSL
.
[HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{8A69D345-D564-463c-AFF1-A69D9E530F96}]
2013-11-16 13:19 1210320 ----a-w- c:\program files\Google\Chrome\Application\31.0.1650.57\Installer\chrmstp.exe
.
Obsah adresáře 'Naplánované úlohy'
.
2013-12-03 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
- c:\program files\Google\Update\GoogleUpdate.exe [2013-09-30 13:37]
.
2013-12-03 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
- c:\program files\Google\Update\GoogleUpdate.exe [2013-09-30 13:37]
.
.
------- Doplňkový sken -------
.
uStart Page = https://www.google.cz/
IE: E&xportovat do aplikace Microsoft Excel - c:\progra~1\MICROS~1\Office14\EXCEL.EXE/3000
IE: Od&eslat do aplikace OneNote - c:\progra~1\MICROS~1\Office14\ONBttnIE.dll/105
IE: Prevést cíl vazby do Adobe PDF - c:\program files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll/AcroIECaptureSelLinks.html
IE: Prevést cíl vazby do existujícího PDF - c:\program files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll/AcroIEAppendSelLinks.html
IE: Prevést do Adobe PDF - c:\program files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll/AcroIECapture.html
IE: Pridat do stávajícího PDF - c:\program files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll/AcroIEAppend.html
TCP: DhcpNameServer = 10.0.0.138
FF - ProfilePath - c:\users\Tata\AppData\Roaming\Mozilla\Firefox\Profiles\eedqz3mr.default\
.
- - - - NEPLATNÉ POLOŽKY ODSTRANĚNÉ Z REGISTRU - - - -
.
AddRemove-bi_uninstaller - c:\users\Tata\Local Settings\Application Data\Bundled software uninstaller\bi_client.exe
.
.
.
--------------------- ZAMKNUTÉ KLÍČE V REGISTRU ---------------------
.
[HKEY_LOCAL_MACHINE\system\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0000\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\system\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0001\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\system\ControlSet001\Control\PCW\Security]
@Denied: (Full) (Everyone)
.
------------------------ Jiné spuštené procesy ------------------------
.
c:\program files\AVAST Software\Avast\AvastSvc.exe
c:\program files\Common Files\Adobe\ARM\1.0\armsvc.exe
c:\program files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
c:\windows\system32\taskhost.exe
c:\program files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe
c:\windows\AutoKMS\AutoKMS.exe
c:\windows\system32\conhost.exe
c:\windows\system32\conhost.exe
c:\windows\SOUNDMAN.EXE
c:\windows\sm56hlpr.exe
c:\windows\System32\VTTimer.exe
c:\program files\Microsoft Office\Office14\ONENOTEM.EXE
c:\users\Tata\AppData\Roaming\Seznam.cz\bin\szndesktop.exe
c:\program files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE
c:\program files\Windows Media Player\wmpnetwk.exe
c:\windows\system32\sppsvc.exe
c:\windows\Microsoft.NET\Framework\v2.0.50727\vbc.exe
c:\program files\AVAST Software\Avast\AvastEmUpdate.exe
.
**************************************************************************
.
Celkový čas: 2013-12-03 22:02:00 - počítač byl restartován
ComboFix-quarantined-files.txt 2013-12-03 21:01
.
Před spuštěním: Volných bajtů: 10 643 406 848
Po spuštění: Volných bajtů: 14 176 092 160
.
- - End Of File - - 420A0146CF31C94E331401A3A1119605
A36C5E4F47E84449FF07ED3517B43A31

Error patří nějaké utilitě od Seznamu. Ze systému bylo pár šmejdů smazáno, zbytek logu vypadá čistý. Nastala nějaká změna?

Bohužel, žádná změna

Ještě na jednu věc jsem si vzpomněl. Když otevírám soubor v nějakém programu, tak mám v okně Otevřít v rozbalovací nabídce možnost vybrat, které typy souborů se v okně v dané složce zobrazí. Nyní, ať vyberu jakýkoli typ souborů, zobrazují se vždy všechny soubory všech typů.

Taky jsem se někde dočetl, že může být problematické použití programu Microsoft Toolkit. Nedávno jsem s ním po přeinstalování aktivoval Windows, protože to bylo pohodlnější než telefonická aktivace, kterou jsem dělal dřív.

frankiedlouhan píše:Ještě na jednu věc jsem si vzpomněl. Když otevírám soubor v nějakém programu, tak mám v okně Otevřít v rozbalovací nabídce možnost vybrat, které typy souborů se v okně v dané složce zobrazí. Nyní, ať vyberu jakýkoli typ souborů, zobrazují se vždy všechny soubory všech typů.

Tak o tomhle nevím. Mohl byste ještě zkusit FixIt: http://support.microsoft.com/fixit/cs-cz . CF odinstalujte pomocí T-Cleaneru: http://vyosek.ic.cz/pro_usery/T-Cleaner.exe .

Fix it stále hází stejnu chybu

Pak už je pouze oprava systému z instal. médie.