VIRY.CZ

Prosím vás o pomoc. Můj syn spustil comp se systémem win xp a pospuštění mu to napsalo hlášku "chyba se spuštěním CPY.EXE. Tak googlil a našel radu že může opravit systémové soubory nástrojem windows repair tool. Tak si ho našel na bleepingcomputer a spustil. Ihned po spuštění se objevilo okno kde se odpočítával čas do restartu a comp se restartoval a jaké bylo překvapení když to na nás chtělo po restartu heslo do přihlášení. Žádné heslo jsme do tá chvíle neměli. Šel jsem tedy do nouzáku a tam jsem dal změnu hesla a po restartu jsem ho zadal. Systém se sice spustil ale jen v nouzáku. A tak je to stále dokola. Restart-nouzák. Restart-nouzák. Dal jsem v nouzáku malvabytesantimalvare, ale nic nenašel. Nomůžem dát ani obnovu systému. Nepomohlo ani poslední známá fukční konfigurace a ani příkaz rstrui.exe v příkazovém řádku na obnovu systému. Vždy se to vrátí do nouzáku.Prosím o jakoukoliv radu.Děkuji vám. Zde rsit.
Logfile of random's system information tool 1.09 (written by random/random)
Run by Administrator at 2017-01-26 09:30:03
Systém Microsoft Windows XP Professional Service Pack 3
System drive C: has 32 GB (65%) free of 50 GB
Total RAM: 3061 MB (81% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 9:30:05, on 26.1.2017
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Safe mode with network support

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Program Files\Malwarebytes' Anti-Malware\mbam.exe
C:\Documents and Settings\Admin\Plocha\RSIT.exe
C:\Program Files\trend micro\Administrator.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page =
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
R3 - Default URLSearchHook is missing
O1 - Hosts: ˙ţ127.0.0.1 localhost
O1 - Hosts: ::1 localhost
O2 - BHO: (no name) - {2DB66063-BB98-466A-AA0D-3E7ACF5ED853} - (no file)
O2 - BHO: avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll
O3 - Toolbar: (no name) - {BFC32E1D-EE75-4A48-BC60-104E11EE2431} - (no file)
O3 - Toolbar: Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll
O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE
O4 - HKLM\..\Run: [V0700Mon.exe] C:\WINDOWS\V0700Mon.exe
O4 - HKLM\..\Run: [AvastUI.exe] "C:\Program Files\AVAST Software\Avast\AvastUI.exe" /nogui
O4 - HKLM\..\Run: [ccApp] "C:\Program Files\Common Files\Symantec Shared\ccApp.exe"
O4 - HKLM\..\Run: [seznam-listicka-distribuce] "C:\Program Files\Seznam.cz\distribution\szninstall.exe" -s -d listicka 1 szn-software-listicka cz.seznam.software.autoupdate
O4 - HKLM\..\Run: [IgfxTray] C:\WINDOWS\system32\igfxtray.exe
O4 - HKLM\..\Run: [HotKeysCmds] C:\WINDOWS\system32\hkcmd.exe
O4 - HKLM\..\Run: [Persistence] C:\WINDOWS\system32\igfxpers.exe
O4 - HKLM\..\Run: [StartCCC] "C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun
O4 - HKLM\..\RunOnce: [Malwarebytes Anti-Malware] C:\Program Files\Malwarebytes' Anti-Malware\mbamgui.exe /install /silent
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O9 - Extra button: Zdroje informací - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: (no name) - {BFC32E1D-EE75-4A48-BC60-104E11EE2431} - (no file)
O9 - Extra button: (no name) - {CC963627-B1DC-40E0-B52A-CF21EE748449} - C:\WINDOWS\system32\shdocvw.dll
O9 - Extra 'Tools' menuitem: &Nastavit překladač - {CC963627-B1DC-40E0-B52A-CF21EE748449} - C:\WINDOWS\system32\shdocvw.dll
O9 - Extra button: (no name) - {CC963627-B1DC-40E0-B52A-CF21EE748450} - C:\WINDOWS\system32\shdocvw.dll
O9 - Extra 'Tools' menuitem: &Slovník - {CC963627-B1DC-40E0-B52A-CF21EE748450} - C:\WINDOWS\system32\shdocvw.dll
O9 - Extra button: (no name) - {CC963627-B1DC-40E0-B52A-CF21EE748451} - C:\WINDOWS\system32\shdocvw.dll
O9 - Extra 'Tools' menuitem: Přeložit &označený text - {CC963627-B1DC-40E0-B52A-CF21EE748451} - C:\WINDOWS\system32\shdocvw.dll
O9 - Extra button: (no name) - {CC963627-B1DC-40E0-B52A-CF21EE748452} - C:\WINDOWS\system32\shdocvw.dll
O9 - Extra 'Tools' menuitem: Přeložit &stránku - {CC963627-B1DC-40E0-B52A-CF21EE748452} - C:\WINDOWS\system32\shdocvw.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe (file missing)
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe (file missing)
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/windowsupda ... 5821088819
O16 - DPF: {D4B68B83-8710-488B-A692-D74B50BA558E} (Creative Software AutoUpdate Support Package 2) - http://ccfiles.creative.com/Web/softwar ... PIDPDE.cab
O16 - DPF: {F6ACF75C-C32C-447B-9BEF-46B766368D29} (Creative Software AutoUpdate Support Package 1) - http://ccfiles.creative.com/Web/softwar ... /CTPID.cab
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O22 - SharedTaskScheduler: Browseui preloader - {438755C2-A8BA-11D1-B96B-00A0C90312E1} - C:\WINDOWS\system32\browseui.dll
O22 - SharedTaskScheduler: Proces mezipaměti kategorií součástí - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\WINDOWS\system32\browseui.dll
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\WINDOWS\system32\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
O23 - Service: Avast Antivirus (avast! Antivirus) - AVAST Software - C:\Program Files\AVAST Software\Avast\AvastSvc.exe
O23 - Service: Služba Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: Služba Google Update (gupdatem) (gupdatem) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: Google Software Updater (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: Intel(R) Management and Security Application Local Management Service (LMS) - Intel Corporation - C:\Program Files\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
O23 - Service: MBAMService - Malwarebytes Corporation - C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe
O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Mozilla Foundation - C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe
O23 - Service: Skype Updater (SkypeUpdate) - Skype Technologies - C:\Program Files\Skype\Updater\Updater.exe
O23 - Service: TeamViewer 8 (TeamViewer8) - TeamViewer GmbH - C:\Program Files\TeamViewer\Version8\TeamViewer_Service.exe
O23 - Service: Intel(R) Management and Security Application User Notification Service (UNS) - Intel Corporation - C:\Program Files\Intel\Intel(R) Management Engine Components\UNS\UNS.exe

--
End of file - 7580 bytes

======Scheduled tasks folder======

C:\WINDOWS\tasks\Adobe Flash Player Updater.job
C:\WINDOWS\tasks\avast! Emergency Update.job
C:\WINDOWS\tasks\GoogleUpdateTaskMachineCore.job
C:\WINDOWS\tasks\GoogleUpdateTaskMachineUA.job
C:\WINDOWS\tasks\Měsíční oznamování konce poskytování služeb pro Microsoft Windows XP.job
C:\WINDOWS\tasks\Přihlášení k oznamování konce poskytování služeb pro Microsoft Windows XP.job
C:\WINDOWS\tasks\SafeZone scheduled Autoupdate 1465826939.job

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{2DB66063-BB98-466A-AA0D-3E7ACF5ED853}]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{8E5E2654-AD2D-48bf-AC2D-D17F00898D06}]
avast! Online Security - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2016-10-24 664848]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AA58ED58-01DD-4d91-8333-CF10577473F7}]
Google Toolbar Helper - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll [2015-12-22 194504]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{BFC32E1D-EE75-4A48-BC60-104E11EE2431}
{2318C2B1-4965-11d4-9B18-009027A5CD4F} - Google Toolbar - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll [2015-12-22 194504]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"RTHDCPL"=C:\WINDOWS\RTHDCPL.EXE [2010-11-16 19722344]
"V0700Mon.exe"=C:\WINDOWS\V0700Mon.exe [2010-08-18 28672]
"AvastUI.exe"=C:\Program Files\AVAST Software\Avast\AvastUI.exe [2016-11-15 9080768]
"ccApp"=C:\Program Files\Common Files\Symantec Shared\ccApp.exe [2010-08-10 115560]
"seznam-listicka-distribuce"=C:\Program Files\Seznam.cz\distribution\szninstall.exe [2013-05-16 1062472]
"IgfxTray"=C:\WINDOWS\system32\igfxtray.exe [2013-02-12 136704]
"HotKeysCmds"=C:\WINDOWS\system32\hkcmd.exe [2013-02-12 174592]
"Persistence"=C:\WINDOWS\system32\igfxpers.exe [2013-02-12 162816]
"StartCCC"=C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [2014-01-07 98304]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\RunOnce]
"Malwarebytes Anti-Malware"=C:\Program Files\Malwarebytes' Anti-Malware\mbamgui.exe [2012-01-13 460872]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"=C:\WINDOWS\system32\CTFMON.EXE [2008-04-14 15360]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\services]
"ccSetMgr"=2
"ccEvtMgr"=2
"gupdatem"=3
"gupdate"=2

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\AtiExtEvent]
C:\WINDOWS\system32\Ati2evxx.dll [2008-03-29 126976]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\igfxcui]
C:\WINDOWS\system32\igfxdev.dll [2013-02-12 301568]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\WgaLogon]
C:\WINDOWS\system32\WgaLogon.dll [2009-03-10 265096]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll [2006-10-18 133632]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\AppXSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\BITS]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\ClipSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\msiserver]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\SharedAccess]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\swprv]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\TweakingRemoveSafeBoot]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\vss]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Wdf01000.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WSService]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AppXSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\BITS]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\ClipSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\msiserver]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\SamSs]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\SmcService]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\srv]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\srv2]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\srvnet]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\swprv]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\TweakingRemoveSafeBoot]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\vss]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Wdf01000.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WSService]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1
"SoftwareSASGeneration"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=145

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveAutoRun"=67108863
"NoDriveTypeAutoRun"=323

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"C:\Program Files\uTorrent\uTorrent.exe"="C:\Program Files\uTorrent\uTorrent.exe:*:Enabled:µTorrent"
"C:\Program Files\Symantec\Symantec Endpoint Protection\Smc.exe"="C:\Program Files\Symantec\Symantec Endpoint Protection\Smc.exe:*:Enabled:SMC Service"
"C:\Program Files\Symantec\Symantec Endpoint Protection\SNAC.EXE"="C:\Program Files\Symantec\Symantec Endpoint Protection\SNAC.EXE:*:Enabled:SNAC Service"
"C:\Program Files\Common Files\Symantec Shared\ccApp.exe"="C:\Program Files\Common Files\Symantec Shared\ccApp.exe:*:Enabled:Symantec Email"
"C:\Program Files\Google\Chrome\Application\chrome.exe"="C:\Program Files\Google\Chrome\Application\chrome.exe:*:Enabled:Google Chrome"
"C:\Program Files\TeamViewer\Version8\TeamViewer.exe"="C:\Program Files\TeamViewer\Version8\TeamViewer.exe:*:Enabled:Teamviewer Remote Control Application"
"C:\Program Files\TeamViewer\Version8\TeamViewer_Service.exe"="C:\Program Files\TeamViewer\Version8\TeamViewer_Service.exe:*:Enabled:Teamviewer Remote Control Service"
"C:\WINDOWS\system32\dpvsetup.exe"="C:\WINDOWS\system32\dpvsetup.exe:*:Enabled:Microsoft DirectPlay Voice Test"
"C:\WINDOWS\system32\rundll32.exe"="C:\WINDOWS\system32\rundll32.exe:*:Enabled:Run a DLL as an App"
"C:\Program Files\Skype\Phone\Skype.exe"="C:\Program Files\Skype\Phone\Skype.exe:*:Enabled:Skype"
"C:\Program Files\Mozilla Firefox\firefox.exe"="C:\Program Files\Mozilla Firefox\firefox.exe:*:Enabled:Firefox (C:\Program Files\Mozilla Firefox)"
"C:\Documents and Settings\Admin\Data aplikací\uTorrent\utorrent.exe"="C:\Documents and Settings\Admin\Data aplikací\uTorrent\utorrent.exe:*:Enabled:µTorrent"
"C:\Program Files\VideoLAN\VLC\vlc.exe"="C:\Program Files\VideoLAN\VLC\vlc.exe:*:Enabled:VLC media player 2.1.3"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"midimapper"=midimap.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msadpcm"=msadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.trspch"=tssoft32.acm
"vidc.cvid"=iccvid.dll
"VIDC.I420"=msh263.drv
"vidc.iv31"=ir32_32.dll
"vidc.iv32"=ir32_32.dll
"vidc.iv41"=ir41_32.ax
"VIDC.IYUV"=iyuv_32.dll
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"VIDC.UYVY"=msyuv.dll
"VIDC.YUY2"=msyuv.dll
"VIDC.YVU9"=tsbyuv.dll
"VIDC.YVYU"=msyuv.dll
"wavemapper"=msacm32.drv
"msacm.msg723"=msg723.acm
"vidc.M263"=msh263.drv
"vidc.M261"=msh261.drv
"msacm.msaudio1"=msaud32.acm
"msacm.sl_anet"=sl_anet.acm
"msacm.iac2"=C:\WINDOWS\system32\iac25_32.ax
"vidc.iv50"=ir50_32.dll
"msacm.l3acm"=C:\WINDOWS\system32\l3codeca.acm
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv
"VIDC.FFDS"=C:\PROGRA~1\COMBIN~1\Filters\FFDShow\ff_vfw.dll
"MSVideo8"=VfWWDM32.dll
"wave2"=wdmaud.drv
"midi2"=wdmaud.drv
"mixer2"=wdmaud.drv
"aux2"=wdmaud.drv
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"aux1"=wdmaud.drv
"wave3"=wdmaud.drv
"midi3"=wdmaud.drv
"mixer3"=wdmaud.drv
"aux3"=wdmaud.drv

======List of files/folders created in the last 1 month======

2017-01-26 09:26:45 ----D---- C:\Documents and Settings\Administrator\Data aplikací\Malwarebytes
2017-01-26 09:13:47 ----SD---- C:\Documents and Settings\Administrator\Data aplikací\Microsoft
2017-01-26 09:13:47 ----ASH---- C:\Documents and Settings\Administrator\Data aplikací\desktop.ini
2017-01-23 11:50:56 ----D---- C:\Program Files\Subtitle Edit
2017-01-22 23:59:46 ----N---- C:\WINDOWS\system32\ati2sgag.exe
2017-01-22 23:48:42 ----D---- C:\Documents and Settings\All Users\Data aplikací\ATI
2017-01-22 23:45:32 ----A---- C:\WINDOWS\system32\drivers\AtihdXP3.sys
2017-01-22 23:45:10 ----N---- C:\WINDOWS\system32\SET1AE.tmp
2017-01-22 23:45:10 ----A---- C:\WINDOWS\system32\Oemdspif.dll
2017-01-22 23:45:10 ----A---- C:\WINDOWS\system32\drivers\ati2mtag.sys
2017-01-22 23:45:10 ----A---- C:\WINDOWS\system32\drivers\ati2erec.dll
2017-01-22 23:45:10 ----A---- C:\WINDOWS\system32\ativvaxx.dll
2017-01-22 23:45:10 ----A---- C:\WINDOWS\system32\ativvamv.dll
2017-01-22 23:45:10 ----A---- C:\WINDOWS\system32\ativva6x.dat
2017-01-22 23:45:10 ----A---- C:\WINDOWS\system32\ativva5x.dat
2017-01-22 23:45:10 ----A---- C:\WINDOWS\system32\ativcoxx.dll
2017-01-22 23:45:10 ----A---- C:\WINDOWS\system32\atitvo32.dll
2017-01-22 23:45:10 ----A---- C:\WINDOWS\system32\atipdlxx.dll
2017-01-22 23:45:10 ----A---- C:\WINDOWS\system32\atimpc32.dll
2017-01-22 23:45:10 ----A---- C:\WINDOWS\system32\atiicdxx.dat
2017-01-22 23:45:10 ----A---- C:\WINDOWS\system32\ATIDDC.DLL
2017-01-22 23:45:10 ----A---- C:\WINDOWS\system32\atiapfxx.exe
2017-01-22 23:45:10 ----A---- C:\WINDOWS\system32\atiadlxx.dll
2017-01-22 23:45:10 ----A---- C:\WINDOWS\system32\ati3duag.dll
2017-01-22 23:45:10 ----A---- C:\WINDOWS\system32\Ati2mdxx.exe
2017-01-22 23:45:10 ----A---- C:\WINDOWS\system32\ati2evxx.exe
2017-01-22 23:45:10 ----A---- C:\WINDOWS\system32\ati2evxx.dll
2017-01-22 23:45:10 ----A---- C:\WINDOWS\system32\ati2dvag.dll
2017-01-22 23:45:10 ----A---- C:\WINDOWS\system32\ati2cqag.dll
2017-01-22 23:45:10 ----A---- C:\WINDOWS\system32\amdpcom32.dll
2017-01-22 23:44:51 ----D---- C:\Program Files\ATI
2017-01-22 23:32:57 ----D---- C:\Documents and Settings\All Users\Data aplikací\Package Cache
2017-01-22 13:32:03 ----A---- C:\WINDOWS\system32\FlashPlayerApp.exe
2017-01-22 12:59:49 ----A---- C:\WINDOWS\system32\ssleay32.dll
2017-01-22 12:59:49 ----A---- C:\WINDOWS\system32\ssinstall-uninstall.bat
2017-01-22 12:59:49 ----A---- C:\WINDOWS\system32\libeay32.dll
2017-01-22 12:59:48 ----A---- C:\WINDOWS\system32\ssins.exe
2017-01-22 12:53:00 ----D---- C:\WINDOWS\system32\Adobe
2017-01-19 17:43:13 ----D---- C:\totalcmd
2017-01-18 17:05:40 ----D---- C:\Program Files\Geeks3D
2017-01-18 14:12:41 ----D---- C:\Program Files\MSECache
2017-01-18 13:11:09 ----A---- C:\WINDOWS\system32\ativvaxx.dat
2017-01-18 13:11:08 ----A---- C:\WINDOWS\system32\atiok3x2.dll
2017-01-18 13:11:08 ----A---- C:\WINDOWS\system32\atioglx2.dll
2017-01-18 13:11:08 ----A---- C:\WINDOWS\system32\ATIODE.exe
2017-01-18 13:11:08 ----A---- C:\WINDOWS\system32\ATIODCLI.exe
2017-01-18 13:11:08 ----A---- C:\WINDOWS\system32\atikvmag.dll
2017-01-18 13:11:08 ----A---- C:\WINDOWS\system32\atiiiexx.dll
2017-01-18 13:11:08 ----A---- C:\WINDOWS\system32\ATIDEMGX.dll
2017-01-18 13:11:07 ----A---- C:\WINDOWS\system32\ati2edxx.dll
2017-01-18 12:49:08 ----D---- C:\Program Files\Swiss
2017-01-18 12:32:32 ----D---- C:\Program Files\ATI Technologies
2017-01-18 12:05:35 ----D---- C:\AMD
2017-01-09 14:17:26 ----D---- C:\Program Files\Everest 2011
2017-01-09 14:14:40 ----D---- C:\Program Files\Audacity
2017-01-03 09:53:46 ----A---- C:\WINDOWS\system32\igfxCoIn_v5437.dll
2016-12-28 12:45:53 ----D---- C:\Program Files\Seznam.cz

======List of files/folders modified in the last 1 month======

2017-01-26 09:30:05 ----D---- C:\Program Files\trend micro
2017-01-26 09:27:43 ----D---- C:\WINDOWS\system32\drivers
2017-01-26 09:27:14 ----D---- C:\Program Files\Malwarebytes' Anti-Malware
2017-01-26 09:26:49 ----D---- C:\WINDOWS\system32
2017-01-26 09:26:49 ----A---- C:\WINDOWS\system32\PerfStringBackup.INI
2017-01-26 09:26:36 ----SHD---- C:\RECYCLER
2017-01-26 09:21:37 ----D---- C:\AdwCleaner
2017-01-26 09:13:47 ----D---- C:\Documents and Settings
2017-01-26 08:58:39 ----D---- C:\WINDOWS
2017-01-26 08:57:03 ----A---- C:\WINDOWS\SchedLgU.Txt
2017-01-26 08:57:01 ----A---- C:\WINDOWS\system32\log.txt
2017-01-26 08:56:31 ----D---- C:\WINDOWS\Temp
2017-01-26 08:56:25 ----RASH---- C:\boot.ini
2017-01-26 08:49:05 ----SHD---- C:\WINDOWS\Installer
2017-01-26 08:49:04 ----RSD---- C:\WINDOWS\assembly
2017-01-26 08:47:54 ----D---- C:\WINDOWS\WinSxS
2017-01-26 08:47:10 ----D---- C:\WINDOWS\Prefetch
2017-01-24 15:45:20 ----D---- C:\WINDOWS\Microsoft.NET
2017-01-23 11:50:56 ----D---- C:\Program Files
2017-01-23 11:39:22 ----D---- C:\WINDOWS\system32\en-US
2017-01-23 11:39:14 ----D---- C:\Program Files\Microsoft.NET
2017-01-23 00:01:52 ----D---- C:\WINDOWS\system32\CatRoot2
2017-01-23 00:01:45 ----HD---- C:\WINDOWS\inf
2017-01-22 23:59:45 ----RSHDC---- C:\WINDOWS\system32\dllcache
2017-01-22 23:59:33 ----HD---- C:\Program Files\InstallShield Installation Information
2017-01-22 23:48:43 ----D---- C:\WINDOWS\system32\config
2017-01-22 23:45:32 ----DC---- C:\WINDOWS\system32\DRVSTORE
2017-01-22 23:45:00 ----D---- C:\Program Files\Common Files\Microsoft Shared
2017-01-22 23:22:54 ----D---- C:\Program Files\Common Files
2017-01-22 13:32:04 ----SD---- C:\WINDOWS\Tasks
2017-01-22 13:32:02 ----D---- C:\WINDOWS\system32\Macromed
2017-01-18 14:12:51 ----RSD---- C:\WINDOWS\Fonts
2017-01-18 14:12:50 ----D---- C:\Program Files\Microsoft Office
2017-01-03 09:54:13 ----D---- C:\WINDOWS\system32\ReinstallBackups
2017-01-02 23:20:44 ----D---- C:\TRANSLAT
2017-01-02 23:14:51 ----D---- C:\Program Files\Lingea
2017-01-02 23:14:25 ----D---- C:\Program Files\Common Files\Lingea Shared

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 mv61xx;mv61xx; C:\WINDOWS\system32\DRIVERS\mv61xx.sys [2010-10-06 156200]
R0 ohci1394;Hostitelský řadič IEEE 1394 dle standardu OHCI VIA; C:\WINDOWS\system32\DRIVERS\ohci1394.sys [2008-04-14 61696]
R0 PxHelp20;PxHelp20; C:\WINDOWS\System32\Drivers\PxHelp20.sys [2011-03-04 45648]
R0 WudfPf;Windows Driver Foundation - User-mode Driver Framework Platform Driver; C:\WINDOWS\system32\DRIVERS\WudfPf.sys [2006-09-28 77568]
R1 aswKbd;aswKbd; C:\WINDOWS\system32\drivers\aswKbd.sys [2016-09-11 35096]
R1 aswRdr;aswRdr; C:\WINDOWS\system32\drivers\aswRdr.sys [2016-09-11 64272]
R1 WmiAcpi;Microsoft Windows Management Interface for ACPI; C:\WINDOWS\system32\DRIVERS\wmiacpi.sys [2008-04-14 8832]
R1 WS2IFSL;Windows Socket 2.0 Non-IFS Service Provider Support Environment; C:\WINDOWS\System32\drivers\ws2ifsl.sys [2008-04-14 12032]
R3 asmthub3;ASMedia USB3 Hub Service; C:\WINDOWS\system32\DRIVERS\asmthub3.sys [2010-12-08 95720]
R3 asmtxhci;ASMEDIA XHCI Service; C:\WINDOWS\system32\DRIVERS\asmtxhci.sys [2010-12-08 292840]
R3 HDAudBus;Ovladač Microsoft UAA pro sběrnici High Definition Audio; C:\WINDOWS\system32\DRIVERS\HDAudBus.sys [2008-04-14 144384]
R3 hidusb;Ovladač třídy standardu HID; C:\WINDOWS\system32\DRIVERS\hidusb.sys [2008-04-14 10368]
R3 MEI;Intel(R) Management Engine Interface; C:\WINDOWS\system32\DRIVERS\HECI.sys [2010-10-19 41088]
R3 mouhid;Ovladač myši standardu HID; C:\WINDOWS\system32\DRIVERS\mouhid.sys [2008-04-14 12160]
R3 RTLE8023xp;Realtek 10/100/1000 PCI-E NIC Family NDIS XP Driver; C:\WINDOWS\system32\DRIVERS\Rtenicxp.sys [2010-09-09 234728]
R3 USBSTOR;Ovladač velkokapacitního paměťového zařízení USB; C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS [2008-04-13 26368]
R4 exFat;exFat; C:\WINDOWS\system32\drivers\exFat.sys [2008-09-29 133632]
S0 aswRvrt;avast! Revert; C:\WINDOWS\system32\drivers\aswRvrt.sys [2016-09-11 60424]
S0 aswVmm;avast! VM Monitor; C:\WINDOWS\system32\drivers\aswVmm.sys [2016-10-19 224752]
S1 aswSnx;aswSnx; C:\WINDOWS\system32\drivers\aswSnx.sys [2016-09-13 735488]
S1 aswSP;aswSP; C:\WINDOWS\system32\drivers\aswSP.sys [2016-09-23 433768]
S1 intelppm;Řadič procesoru Intel; C:\WINDOWS\system32\DRIVERS\intelppm.sys [2008-04-14 40192]
S1 kbdhid;Ovladač klávesnice standardu HID; C:\WINDOWS\system32\DRIVERS\kbdhid.sys [2008-04-14 14592]
S2 aswMonFlt;aswMonFlt; C:\WINDOWS\system32\drivers\aswMonFlt.sys [2016-09-11 92256]
S2 WiseFs;WiseFS; \??\C:\WINDOWS\WiseFs32.sys []
S3 Ambfilt;Ambfilt; C:\WINDOWS\system32\drivers\Ambfilt.sys [2009-11-18 1691480]
S3 Arp1394;Protokol 1394 ARP Client; C:\WINDOWS\system32\DRIVERS\arp1394.sys [2008-04-14 60800]
S3 aswHwid;avast! HardwareID; C:\WINDOWS\system32\drivers\aswHwid.sys [2016-09-11 34008]
S3 aswStmXP;Avast StreamFilter Driver; C:\WINDOWS\system32\drivers\aswStmXP.sys [2016-09-11 184592]
S3 aswTdi;aswTdi; C:\WINDOWS\system32\drivers\aswTdi.sys [2016-09-11 66688]
S3 ati2mtag;ati2mtag; C:\WINDOWS\system32\DRIVERS\ati2mtag.sys [2008-03-29 2873856]
S3 AtiHDAudioService;ATI Function Driver for HD Audio Service; C:\WINDOWS\system32\drivers\AtihdXP3.sys [2012-05-14 103040]
S3 CCDECODE;Dekodér Closed Caption; C:\WINDOWS\system32\DRIVERS\CCDECODE.sys [2008-04-13 17024]
S3 CtClsFlt;Creative Camera Class Upper Filter Driver; C:\WINDOWS\system32\DRIVERS\CtClsFlt.sys []
S3 EverestDriver;Lavalys EVEREST Kernel Driver; \??\C:\Program Files\Everest 2011\kerneld.wnt []
S3 ialm;ialm; C:\WINDOWS\system32\DRIVERS\igxpmp32.sys [2013-02-12 2530720]
S3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\WINDOWS\system32\drivers\RtkHDAud.sys [2010-11-23 6203496]
S3 IntcDAud;Intel(R) Display Audio; C:\WINDOWS\system32\DRIVERS\IntcDAud.sys [2010-10-14 260864]
S3 MBAMProtector;MBAMProtector; \??\C:\WINDOWS\system32\drivers\mbam.sys []
S3 MBAMSwissArmy;MBAMSwissArmy; \??\C:\WINDOWS\system32\drivers\mbamswissarmy.sys []
S3 Monfilt;Monfilt; C:\WINDOWS\system32\drivers\Monfilt.sys [2009-11-18 1395800]
S3 MSTEE;Microsoft Streaming Tee/Sink-to-Sink Converter; C:\WINDOWS\system32\drivers\MSTEE.sys [2008-04-13 5504]
S3 NABTSFEC;NABTS/FEC VBI Codec; C:\WINDOWS\system32\DRIVERS\NABTSFEC.sys [2008-04-13 85248]
S3 NdisIP;Microsoft TV/Video Connection; C:\WINDOWS\system32\DRIVERS\NdisIP.sys [2008-04-13 10880]
S3 NIC1394;1394 Net Driver; C:\WINDOWS\system32\DRIVERS\nic1394.sys [2008-04-14 61824]
S3 Revoflt;Revoflt; C:\WINDOWS\system32\DRIVERS\revoflt.sys [2009-12-30 27064]
S3 SLIP;BDA Slip De-Framer; C:\WINDOWS\system32\DRIVERS\SLIP.sys [2008-04-13 11136]
S3 streamip;BDA IPSink; C:\WINDOWS\system32\DRIVERS\StreamIP.sys [2008-04-13 15232]
S3 usbaudio;Ovladač zvukové karty USB (WDM); C:\WINDOWS\system32\drivers\usbaudio.sys [2013-07-17 60160]
S3 usbccgp;Obecný nadřazený ovladač Microsoft USB; C:\WINDOWS\system32\DRIVERS\usbccgp.sys [2013-08-09 32384]
S3 usbscan;Ovladač skeneru USB; C:\WINDOWS\system32\DRIVERS\usbscan.sys [2013-07-03 14976]
S3 usbser;USB Modem Driver; C:\WINDOWS\system32\drivers\usbser.sys [2013-08-29 26240]
S3 usbvideo;Zobrazovací zařízení USB (WDM); C:\WINDOWS\System32\Drivers\usbvideo.sys [2013-07-17 123008]
S3 V0700Afx;Creative Camera VF0700 Audio Effects Driver; C:\WINDOWS\system32\DRIVERS\V0700Afx.sys [2010-10-20 302720]
S3 V0700Vid;Creative Live! Cam Chat HD Driver; C:\WINDOWS\system32\DRIVERS\V0700Vid.sys [2010-10-18 322304]
S3 Wdf01000;Kernel Mode Driver Frameworks service; C:\WINDOWS\System32\Drivers\wdf01000.sys [2009-07-14 444136]
S3 WpdUsb;WpdUsb; C:\WINDOWS\system32\DRIVERS\wpdusb.sys [2006-10-18 38528]
S3 WSTCODEC;Dálnopisný kodek světového standardu; C:\WINDOWS\system32\DRIVERS\WSTCODEC.SYS [2008-04-13 19200]
S3 WudfRd;Windows Driver Foundation - User-mode Driver Framework Reflector; C:\WINDOWS\system32\DRIVERS\wudfrd.sys [2006-09-28 82944]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

S2 Ati HotKey Poller;Ati HotKey Poller; C:\WINDOWS\system32\Ati2evxx.exe [2008-03-29 536576]
S2 ATI Smart;ATI Smart; C:\WINDOWS\system32\ati2sgag.exe [2008-03-28 593920]
S2 avast! Antivirus;Avast Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [2016-09-11 197128]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\WINDOWS\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
S2 gupdate;Služba Google Update (gupdate); C:\Program Files\Google\Update\GoogleUpdate.exe [2015-08-31 144200]
S2 LMS;Intel(R) Management and Security Application Local Management Service; C:\Program Files\Intel\Intel(R) Management Engine Components\LMS\LMS.exe [2011-02-01 326168]
S2 MBAMService;MBAMService; C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe [2012-01-13 652360]
S2 MDM;Machine Debug Manager; C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE [2003-06-19 322120]
S2 SkypeUpdate;Skype Updater; C:\Program Files\Skype\Updater\Updater.exe [2016-09-20 324224]
S2 TeamViewer8;TeamViewer 8; C:\Program Files\TeamViewer\Version8\TeamViewer_Service.exe [2015-06-24 5097232]
S2 UNS;Intel(R) Management and Security Application User Notification Service; C:\Program Files\Intel\Intel(R) Management Engine Components\UNS\UNS.exe [2011-02-01 2656280]
S2 WudfSvc;Windows Driver Foundation - User-mode Driver Framework; C:\WINDOWS\system32\svchost.exe [2008-04-14 14336]
S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service; C:\WINDOWS\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2017-01-22 270936]
S3 aspnet_state;Stavová služba ASP.NET; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe [2008-07-25 34312]
S3 FontCache3.0.0.0;Windows Presentation Foundation Font Cache 3.0.0.0; c:\WINDOWS\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe [2008-07-29 46104]
S3 gupdatem;Služba Google Update (gupdatem); C:\Program Files\Google\Update\GoogleUpdate.exe [2015-08-31 144200]
S3 gusvc;Google Software Updater; C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe [2014-10-15 194032]
S3 idsvc;Služba Windows CardSpace; c:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe [2008-07-29 881664]
S3 MozillaMaintenance;Mozilla Maintenance Service; C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe [2016-12-17 172488]
S3 ose;Office Source Engine; C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2003-07-28 89136]
S3 WMPNetworkSvc;Služba Windows Media Player Network Sharing; C:\Program Files\Windows Media Player\WMPNetwk.exe [2007-01-05 913920]
S3 WPFFontCache_v0400;Windows Presentation Foundation Font Cache 4.0.0.0; C:\WINDOWS\Microsoft.NET\Framework\v4.0.30319\WPF\WPFFontCache_v0400.exe [2013-07-20 754856]
S4 clr_optimization_v2.0.50727_32;.NET Runtime Optimization Service v2.0.50727_X86; c:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe [2008-07-25 69632]
S4 NetTcpPortSharing;Služba sdílení portů Net.Tcp; c:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe [2008-07-29 132096]

-----------------EOF-----------------

ahoj,
doporucujem spustit ComboFix - v núdzovom rezime (kedze iny nejde)
si tu stary pardal, linky a navod si najdes

díky udělám.

Napsalo mě to že antivir je stále spuštěn.V procesech ale nebyl. Pak že potřebuje stáhnout konzolu pro zotavení a po potvrzení napsal že se to nepodařilo stáhnout.le nicméně pokračuje. Tak test dokončen a resetovalo se to a problém pokračuje. Stále nabíhá do nouzáku.teď po restartu vytváří combofix log report.Ještě jsem zkoušel nabootovat z cd xp konzolu pro zotavení a když mě dalo vybrat systém který má opravit tak tam bylo jren 1: C:\Windows a pod tím "vyberte systém který chcete opravit a nebo enter pro ukončení. Tak dám volbu 1(napíšu 1 a enter) a nic se nedějě.Posílám log
ComboFix 17-01-13.01 - Admin 26.01.2017 11:59:51.1.4 - x86 NETWORK
Systém Microsoft Windows XP Professional 5.1.2600.3.1250.420.1029.18.3061.2104 [GMT 1:00]
Spuštěný z: c:\documents and settings\Admin\Plocha\ComboFix.exe
AV: Avast Antivirus *Enabled/Updated* {7591db91-41f0-48a3-b128-1a293fd8233d}
.
VAROVÁNÍ - NA TOMTO POČÍTAČI NENÍ NAINSTALOVÁNA KONZOLA PRO ZOTAVENÍ !!
.
.
((((((((((((((((((((((((((((((((((((((( Ostatní výmazy )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
c:\documents and settings\Admin\WINDOWS
c:\windows\IsUn0405.exe
c:\windows\ST6UNST.000
c:\windows\system32\DEBUG.log
c:\windows\system32\quartz.dll.tmp
c:\windows\system32\SET1AE.tmp
G:\AUTORUN.INF . . . . nemohl být smazán
.
.
((((((((((((((((((((((((( Soubory vytvořené od 2016-12-26 do 2017-01-26 )))))))))))))))))))))))))))))))
.
.
2017-01-26 08:13 . 2017-01-26 09:32 -------- d-----w- c:\documents and settings\Administrator
2017-01-26 07:32 . 2017-01-26 07:37 -------- d-----w- c:\documents and settings\Admin\Data aplikací\Seznam.cz
2017-01-23 10:50 . 2017-01-23 10:55 -------- d-----w- c:\documents and settings\Admin\Data aplikací\Subtitle Edit
2017-01-23 10:50 . 2017-01-23 10:50 -------- d-----w- c:\program files\Subtitle Edit
2017-01-22 23:14 . 2017-01-22 23:14 -------- d-sh--w- c:\documents and settings\NetworkService\IETldCache
2017-01-22 23:00 . 2017-01-22 23:00 0 ----a-w- c:\windows\ativpsrm.bin
2017-01-22 22:59 . 2008-03-28 20:05 593920 ------w- c:\windows\system32\ati2sgag.exe
2017-01-22 22:48 . 2017-01-22 22:48 -------- d-----w- c:\documents and settings\All Users\Data aplikací\ATI
2017-01-22 22:48 . 2017-01-22 22:48 -------- d-----w- c:\documents and settings\Admin\Local Settings\Data aplikací\ATI
2017-01-22 22:48 . 2017-01-22 22:48 -------- d-----w- c:\documents and settings\Admin\Data aplikací\ATI
2017-01-22 22:44 . 2017-01-22 22:44 -------- d-----w- c:\program files\ATI
2017-01-22 22:32 . 2017-01-22 22:33 -------- d-----w- c:\documents and settings\All Users\Data aplikací\Package Cache
2017-01-22 12:32 . 2017-01-22 12:32 802904 ----a-w- c:\windows\system32\FlashPlayerApp.exe
2017-01-22 12:32 . 2017-01-22 12:32 144472 ----a-w- c:\windows\system32\FlashPlayerCPLApp.cpl
2017-01-22 11:59 . 2017-01-22 11:59 79 ----a-w- c:\windows\system32\ssinstall-uninstall.bat
2017-01-22 11:59 . 2017-01-22 11:59 359936 ----a-w- c:\windows\system32\ssleay32.dll
2017-01-22 11:59 . 2017-01-22 11:59 1363456 ----a-w- c:\windows\system32\libeay32.dll
2017-01-22 11:59 . 2017-01-22 11:59 4696960 ----a-w- c:\windows\system32\ssins.exe
2017-01-22 11:53 . 2017-01-22 11:53 -------- d-----w- c:\windows\system32\Adobe
2017-01-19 16:47 . 2017-01-23 15:21 -------- d-----w- c:\documents and settings\Admin\Local Settings\Data aplikací\GHISLER
2017-01-19 16:43 . 2017-01-19 16:45 -------- d-----w- C:\totalcmd
2017-01-19 16:43 . 2017-01-19 16:43 -------- d-----w- c:\documents and settings\Admin\Data aplikací\GHISLER
2017-01-18 16:05 . 2017-01-18 16:05 -------- d-----w- c:\program files\Geeks3D
2017-01-18 13:12 . 2017-01-18 13:12 -------- d-----w- c:\program files\MSECache
2017-01-18 12:11 . 2008-03-28 20:05 212992 ----a-w- c:\program files\Common Files\InstallShield\Engine\6\Intel 32\ILog.dll
2017-01-18 12:11 . 2008-03-29 12:19 9801728 ----a-w- c:\windows\system32\atioglx2.dll
2017-01-18 12:11 . 2008-03-29 11:40 167936 ----a-w- c:\windows\system32\atiok3x2.dll
2017-01-18 12:11 . 2008-03-29 11:05 372736 ----a-w- c:\windows\system32\ATIDEMGX.dll
2017-01-18 12:11 . 2008-03-29 10:39 307200 ----a-w- c:\windows\system32\atiiiexx.dll
2017-01-18 12:11 . 2008-03-29 10:21 393216 ----a-w- c:\windows\system32\atikvmag.dll
2017-01-18 12:11 . 2007-08-22 04:51 81920 ----a-w- c:\windows\system32\ATIODE.exe
2017-01-18 12:11 . 2007-08-22 02:36 40960 ----a-w- c:\windows\system32\ATIODCLI.exe
2017-01-18 12:11 . 2008-03-29 10:55 43520 ----a-w- c:\windows\system32\ati2edxx.dll
2017-01-18 11:50 . 2017-01-18 11:50 -------- d-----w- c:\documents and settings\Admin\Data aplikací\Ghostbuster
2017-01-18 11:49 . 2017-01-18 11:49 -------- d-----w- c:\program files\Swiss
2017-01-18 11:32 . 2017-01-22 22:46 -------- d-----w- c:\program files\ATI Technologies
2017-01-18 11:05 . 2017-01-18 11:31 -------- d-----w- C:\AMD
2017-01-09 13:17 . 2017-01-22 22:37 -------- d-----w- c:\program files\Everest 2011
2017-01-09 13:14 . 2017-01-09 13:16 -------- d-----w- c:\documents and settings\Admin\Data aplikací\Audacity
2017-01-09 13:14 . 2017-01-09 13:14 -------- d-----w- c:\program files\Audacity
2017-01-03 08:53 . 2013-02-12 15:22 102400 ----a-w- c:\windows\system32\igfxCoIn_v5437.dll
2016-12-28 11:45 . 2016-12-28 11:45 -------- d-----w- c:\program files\Seznam.cz
.
.
.
(((((((((((((((((((((((((((((((((((((((( Find3M výpis ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2017-01-03 08:53 . 2011-05-19 18:58 435712 ----a-w- c:\windows\system32\igfxrtrk.lrc
2016-11-08 16:56 . 2016-09-13 15:56 5610688 ----a-w- c:\windows\system32\FlashPlayerInstaller.exe
.
.
(((((((((((((((((((((((((((((((((( Spouštěcí body v registru )))))))))))))))))))))))))))))))))))))))))))))
.
.
*Poznámka* prázdné záznamy a legitimní výchozí údaje nejsou zobrazeny.
REGEDIT4
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\00avast]
@="{472083B0-C522-11CF-8763-00608CC02F24}"
[HKEY_CLASSES_ROOT\CLSID\{472083B0-C522-11CF-8763-00608CC02F24}]
2016-09-11 17:37 832488 ----a-w- c:\program files\AVAST Software\Avast\ashShell.dll
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"CCleaner Monitoring"="c:\program files\CCleaner\CCleaner.exe" [2015-05-08 6369048]
"Skype"="c:\program files\Skype\Phone\Skype.exe" [2016-11-15 27219928]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"AvastUI.exe"="c:\program files\AVAST Software\Avast\AvastUI.exe" [2016-11-15 9080768]
"ccApp"="c:\program files\Common Files\Symantec Shared\ccApp.exe" [2010-08-10 115560]
"seznam-listicka-distribuce"="c:\program files\Seznam.cz\distribution\szninstall.exe" [2013-05-16 1062472]
"IgfxTray"="c:\windows\system32\igfxtray.exe" [2013-02-12 136704]
"HotKeysCmds"="c:\windows\system32\hkcmd.exe" [2013-02-12 174592]
"Persistence"="c:\windows\system32\igfxpers.exe" [2013-02-12 162816]
"StartCCC"="c:\program files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" [2014-01-07 98304]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce]
"Malwarebytes Anti-Malware"="c:\program files\Malwarebytes' Anti-Malware\mbamgui.exe" [2012-01-13 460872]
.
[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="c:\windows\system32\CTFMON.EXE" [2008-04-14 15360]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"SoftwareSASGeneration"= 1 (0x1)
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Wdf01000.sys]
@="Driver"
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\RTHDCPL]
2010-11-16 12:34 19722344 ----a-w- c:\windows\RTHDCPL.EXE
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\V0700Mon.exe]
2010-08-17 23:00 28672 ----a-w- c:\windows\V0700Mon.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\services]
"ccSetMgr"=2 (0x2)
"ccEvtMgr"=2 (0x2)
"gupdatem"=3 (0x3)
"gupdate"=2 (0x2)
.
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\Network Diagnostic\\xpnetdiag.exe"=
"%windir%\\system32\\sessmgr.exe"=
"c:\\Program Files\\uTorrent\\uTorrent.exe"=
"c:\\Program Files\\Symantec\\Symantec Endpoint Protection\\Smc.exe"=
"c:\\Program Files\\Symantec\\Symantec Endpoint Protection\\SNAC.EXE"=
"c:\\Program Files\\Common Files\\Symantec Shared\\ccApp.exe"=
"c:\\Program Files\\Google\\Chrome\\Application\\chrome.exe"=
"c:\\Program Files\\TeamViewer\\Version8\\TeamViewer.exe"=
"c:\\Program Files\\TeamViewer\\Version8\\TeamViewer_Service.exe"=
"c:\\WINDOWS\\system32\\dpvsetup.exe"=
"c:\\Program Files\\Skype\\Phone\\Skype.exe"=
"c:\\Program Files\\Mozilla Firefox\\firefox.exe"=
"c:\\Documents and Settings\\Admin\\Data aplikací\\uTorrent\\utorrent.exe"=
"c:\\Program Files\\VideoLAN\\VLC\\vlc.exe"=
.
R0 mv61xx;mv61xx;c:\windows\system32\drivers\mv61xx.sys [6.10.2010 6:52 156200]
R1 aswKbd;aswKbd;c:\windows\system32\drivers\aswKbd.sys [31.5.2016 3:16 35096]
R3 asmthub3;ASMedia USB3 Hub Service;c:\windows\system32\drivers\asmthub3.sys [19.5.2011 20:02 95720]
R3 asmtxhci;ASMEDIA XHCI Service;c:\windows\system32\drivers\asmtxhci.sys [19.5.2011 20:02 292840]
R3 MEI;Intel(R) Management Engine Interface;c:\windows\system32\drivers\HECI.sys [19.5.2011 20:11 41088]
S0 aswRvrt;avast! Revert;c:\windows\system32\drivers\aswRvrt.sys [15.5.2014 16:23 60424]
S0 aswVmm;avast! VM Monitor;c:\windows\system32\drivers\aswvmm.sys [15.5.2014 16:23 224752]
S1 aswSnx;aswSnx;c:\windows\system32\drivers\aswsnx.sys [15.5.2014 16:23 735488]
S1 aswSP;aswSP;c:\windows\system32\drivers\aswsp.sys [15.5.2014 16:23 433768]
S2 aswMonFlt;aswMonFlt;c:\windows\system32\drivers\aswMonFlt.sys [15.5.2014 16:23 92256]
S2 MBAMService;MBAMService;c:\program files\Malwarebytes' Anti-Malware\mbamservice.exe [18.3.2012 10:47 652360]
S2 SkypeUpdate;Skype Updater;c:\program files\Skype\Updater\Updater.exe [20.9.2016 11:54 324224]
S2 TeamViewer8;TeamViewer 8;c:\program files\TeamViewer\Version8\TeamViewer_Service.exe [20.3.2013 18:08 5097232]
S2 UNS;Intel(R) Management and Security Application User Notification Service;c:\program files\Intel\Intel(R) Management Engine Components\UNS\UNS.exe [19.5.2011 20:11 2656280]
S2 WiseFs;WiseFS;c:\windows\WiseFs32.sys [28.9.2016 8:16 11696]
S3 Ambfilt;Ambfilt;c:\windows\system32\drivers\Ambfilt.sys [19.5.2011 16:56 1691480]
S3 aswHwid;avast! HardwareID;c:\windows\system32\drivers\aswHwid.sys [15.5.2014 16:23 34008]
S3 aswStmXP;Avast StreamFilter Driver;c:\windows\system32\drivers\aswStmXP.sys [31.5.2016 3:16 184592]
S3 AtiHDAudioService;ATI Function Driver for HD Audio Service;c:\windows\system32\drivers\AtihdXP3.sys [22.1.2017 23:45 103040]
S3 CtClsFlt;Creative Camera Class Upper Filter Driver;c:\windows\system32\DRIVERS\CtClsFlt.sys --> c:\windows\system32\DRIVERS\CtClsFlt.sys [?]
S3 EverestDriver;Lavalys EVEREST Kernel Driver;c:\program files\Everest 2011\kerneld.wnt [9.1.2017 14:17 28272]
S3 IntcDAud;Intel(R) Display Audio;c:\windows\system32\drivers\IntcDAud.sys [19.5.2011 19:58 260864]
S3 MBAMProtector;MBAMProtector;c:\windows\system32\drivers\mbam.sys [18.3.2012 10:47 20464]
S3 Revoflt;Revoflt;c:\windows\system32\drivers\revoflt.sys [15.9.2012 16:00 27064]
S3 V0700Afx;Creative Camera VF0700 Audio Effects Driver;c:\windows\system32\drivers\V0700Afx.sys [20.10.2010 13:24 302720]
S3 V0700Vid;Creative Live! Cam Chat HD Driver;c:\windows\system32\drivers\V0700Vid.sys [18.10.2010 322304]
.
--- Ostatní služby/ovladače v paměti ---
.
*Deregistered* - EraserUtilRebootDrv
*Deregistered* - SYMTDI
.
[HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{8A69D345-D564-463c-AFF1-A69D9E530F96}]
2016-04-07 17:46 1106072 ----a-w- c:\program files\Google\Chrome\Application\49.0.2623.112\Installer\chrmstp.exe
.
Obsah adresáře 'Naplánované úlohy'
.
2017-01-26 c:\windows\Tasks\Adobe Flash Player Updater.job
- c:\windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2013-03-20 12:32]
.
2017-01-26 c:\windows\Tasks\avast! Emergency Update.job
- c:\program files\AVAST Software\Avast\AvastEmUpdate.exe [2016-09-11 17:37]
.
2017-01-26 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
- c:\program files\Google\Update\GoogleUpdate.exe [2012-01-18 13:23]
.
2017-01-26 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
- c:\program files\Google\Update\GoogleUpdate.exe [2012-01-18 13:23]
.
2017-01-08 c:\windows\Tasks\Měsíční oznamování konce poskytování služeb pro Microsoft Windows XP.job
- c:\windows\system32\xp_eos.exe [2014-03-10 23:28]
.
2017-01-26 c:\windows\Tasks\Přihlášení k oznamování konce poskytování služeb pro Microsoft Windows XP.job
- c:\windows\system32\xp_eos.exe [2014-03-10 23:28]
.
2017-01-26 c:\windows\Tasks\SafeZone scheduled Autoupdate 1465826939.job
- c:\program files\AVAST Software\SZBrowser\launcher.exe [2016-06-13 08:42]
.
.
------- Doplňkový sken -------
.
uStart Page = hxxp://www.google.com/
IE: E&xportovat do aplikace Microsoft Office Excel - c:\progra~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
IE: {{CC963627-B1DC-40E0-B52A-CF21EE748449} - {CC963627-B1DC-40E0-B52A-CF21EE748449} -
IE: {{CC963627-B1DC-40E0-B52A-CF21EE748450} - {CC963627-B1DC-40E0-B52A-CF21EE748450} -
IE: {{CC963627-B1DC-40E0-B52A-CF21EE748451} - {CC963627-B1DC-40E0-B52A-CF21EE748451} -
IE: {{CC963627-B1DC-40E0-B52A-CF21EE748452} - {CC963627-B1DC-40E0-B52A-CF21EE748452} -
Trusted Zone: local.sinstalator.cz
Trusted Zone: local.sinstalator.cz\PACS
TCP: DhcpNameServer = 213.46.172.36 213.46.172.37
FF - ProfilePath - c:\documents and settings\Admin\Data aplikací\Mozilla\Firefox\Profiles\ukc03etx.default\
FF - prefs.js: browser.startup.homepage - hxxp://www.seznam.cz/
FF - prefs.js: keyword.URL - hxxp://search.seznam.cz/?sourceid=undefined&q=
FF - prefs.js: network.proxy.type - 0
.
- - - - NEPLATNÉ POLOŽKY ODSTRANĚNÉ Z REGISTRU - - - -
.
HKCU-Run-Nektra OEAPI - (no file)
HKCU-Run-WEBTRAN - (no file)
HKCU-Run-swg - c:\program files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
AddRemove-SeznamInstall - c:\documents and settings\Admin\Data aplikací\Seznam.cz\szninstall.exe
.
.
.
**************************************************************************
.
catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2017-01-26 12:07
Windows 5.1.2600 Service Pack 3 NTFS
.
skenování skrytých procesů ...
.
skenování skrytých položek 'Po spuštění' ...
.
skenování skrytých souborů ...
.
sken byl úspešně dokončen
skryté soubory: 0
.
**************************************************************************
.
[HKEY_LOCAL_MACHINE\System\ControlSet002\Services\EverestDriver]
"ImagePath"="\??\c:\program files\Everest 2011\kerneld.wnt"
.
--------------------- Knihovny navázané na běžící procesy ---------------------
.
- - - - - - - > 'winlogon.exe'(632)
c:\windows\system32\Ati2evxx.dll
.
Celkový čas: 2017-01-26 12:09:11 - počítač byl restartován
ComboFix-quarantined-files.txt 2017-01-26 11:09
.
Před spuštěním: Volných bajtů: 33 837 731 840
Po spuštění: Volných bajtů: 34 282 545 152
.
- - End Of File - - C78B299381F6A34F919D921446DF410C
413FC2A0C716421B3158746D63736515

=

odinstaluj MBAM + c:\program files\Subtitle Edit
+
reinstaloval si ovladace grafiky preco ?

Instaloval jsem extérní grafiku ati radeon hd 2400 series. Byl teda problém s instalací a sehnáním správných ovladačů. Ale nakonec se chytla a už týden to běželo v cajku. Až dnes po instalaci removal tool. Proč bych měl dát pryč subtitleedit?Potřebuji ho na psaní přečasování titulků.

kludne si titulkovac nechaj, potrebujeme sa len niecoho chytit, toto vidim ako SW problem
proste nieco novoinstalovane zhadzuje system ,,,
prip. skus s príkazového riadku sfc /scannow a nasledne aj chkdsk /f
toto nevidim ako virovy problem

když dám v příkazovém řádku sfc /scannow, tak mě to píše: chybový kod je 0x000006ba server RPC není k dispozici.
Když otevřu př.řádek tak je tam c:Document andd setting\Administrator a úvozovka.Je to ok?
Jen opakuji že dnes po spuštění compu to napsalo hlášku s problémem chyba cpy.exe. Tak jsem vygooglil že je pořeba opravit systémové soubory a to nástrojem removal tool. Hned potom se to stalo. po instalaci opravy restart a hned nouzák. A také se instalovala aktualizace net framevork.

Hezky den,

presvedcte se prosim jeste, zda neco nenastavilo spousteni nouzoveho rezimu.
Win+R -> msconfig -> http://pad1.whstatic.com/images/thumb/5 ... Step-7.jpg

Měl jste plnou pravdu. Jste borec.Ten váš screen bot.ini mě pomohl. Bylo tam nastaveno safeboot. Tak jsem to zrušil a systém naběhl jak má. Ale nevím co to mohlo způsobit.Myslíte že ted je to ok?

jarda.otta píše:Ale nevím co to mohlo způsobit.

Clovek, program nebo poltergeist.

jarda.otta píše:Myslíte že ted je to ok?

Z dosud vlozenych logu se zda vsechno ok. Pro jistotu vas poprosim o vlozeni novych logu FRST.txt a Addition.txt.

jarda.otta píše:Tak jsem vygooglil že je pořeba opravit systémové soubory a to nástrojem removal tool. Hned potom se to stalo. po instalaci opravy restart a hned nouzák.

Ahoj, lze se domnívat, že ten removal tool potřeboval pracovat v nouzovém režimu a tak si to nastavil