VIRY.CZ

Hmm...diky za nfo. Předám ... a tímto asi toto vlákno uzavřeme - a rovnou třeba smazat ...

Díky.

Zdravím,
prosím o kontrolu logu, tuším, že se na tomto pc nachází pár brzd. Děkuji.

Logfile of random's system information tool 1.10 (written by random/random)
Run by Pyromachine at 2015-06-21 23:20:06
Microsoft Windows 7 Ultimate
System drive C: has 42 GB (38%) free of 110 GB
Total RAM: 2046 MB ...

Malwarebytes' Anti-Malware 1.45
www.malwarebytes.org

Verze databáze: 3934

Windows 6.1.7600
Internet Explorer 8.0.7600.16385

30.3.2010 22:56:19
mbam-log-2010-03-30 (22-56-19).txt

Typ skenu: Úplný sken (C:\|D:\|E:\|)
Skenované objekty: 247034
Uplynulý čas: 29 minuta(y), 49 sekunda(y)

Infikované ...

Jdu na restart

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\onsrvr.exe (Security.Hijack) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\optimize.exe (Security.Hijack ...

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\expert.exe (Security.Hijack) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\explore.exe (Security.Hijack) -> Quarantined ...

Malwarebytes' Anti-Malware 1.45
www.malwarebytes.org

Verze databáze: 3934

Windows 6.1.7600
Internet Explorer 8.0.7600.16385

30.3.2010 22:20:58
mbam-log-2010-03-30 (22-20-58).txt

Typ skenu: Úplný sken (C:\|D:\|E:\|)
Skenované objekty: 245375
Uplynulý čas: 29 minuta(y), 1 sekunda(y)

Infikované ...

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\wimmun32.exe (Security.Hijack) -> No action taken.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\win-bugsfix.exe (Security.Hijack) -> No action taken.
HKEY ...

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\kazza.exe (Security.Hijack) -> No action taken.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\keenvalue.exe (Security.Hijack) -> No action taken.
HKEY_LOCAL ...

Malwarebytes' Anti-Malware 1.45
www.malwarebytes.org

Verze databáze: 3934

Windows 6.1.7600
Internet Explorer 8.0.7600.16385

30.3.2010 21:52:05
mbam-log-2010-03-30 (21-52-05).txt

Typ skenu: Úplný sken (C:\|D:\|E:\|)
Skenované objekty: 245375
Uplynulý čas: 29 minuta(y), 1 sekunda(y)

Infikované ...

Oba soubory již byly testovány s výsledkem 0/42 (0%)

Níže je LOG po restartu
________________________
All processes killed
========== OTL ==========
C:\ProgramData\3728e\Quarantine Items folder moved successfully.
C:\ProgramData\3728e\CUASys folder moved successfully.
C:\ProgramData\3728e\BackUp ...

O27 - HKLM IFEO\setupvameeval.exe: Debugger - svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\sgssfw32.exe: Debugger - svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\sh.exe: Debugger - svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\shellspyinstall.exe: Debugger - svchost.exe (Microsoft ...

O27 - HKLM IFEO\_avp32.exe: Debugger - svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\_avpcc.exe: Debugger - svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\_avpm.exe: Debugger - svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\~1.exe: Debugger - svchost.exe (Microsoft Corporation)
O27 ...

O27: 64bit: - HKLM IFEO\mpfagent.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27: 64bit: - HKLM IFEO\mpfservice.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27: 64bit: - HKLM IFEO\MPFSrv.exe: Debugger - C:\Windows\SysNative\svchost.exe ...

O27: 64bit: - HKLM IFEO\_avp32.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27: 64bit: - HKLM IFEO\_avpcc.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27: 64bit: - HKLM IFEO\_avpm.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft ...