PC si dělá co chce log přiložen

[ramiri]

Dobrý den. Rád bych poprosil o radu. Manželčin NTB si poslední dobou dělá co chce, touchpad funguje jak se mu chce, skoro pořád nepíše háčky a čárky (přes klávesu shift, přes oháčkovaná tlačítka to jde), uprostřed práce s programy se program bez ničeho jen tak vypne atd... Už jsem z toho trochu bezradný a mám podezření na nějakou havěť. Udělal jsem tedy LOG a přikládám, je tam něco v nepořádku?

Předem děkuji za pomoc a čas s tím strávený.

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 11:12:25, on 26.1.2019
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v11.0 (11.00.9600.18739)
Boot mode: Normal

Running processes:
C:\Users\Radka\AppData\Local\FluxSoftware\Flux\flux.exe
C:\Users\Radka\AppData\Local\Programs\Opera\assistant\browser_assistant.exe
C:\Program Files (x86)\Baidu Security\Baidu Antivirus\5.4.3.122701.0\BavTray.exe
C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe
C:\Program Files (x86)\XnView\xnview.exe
C:\Program Files (x86)\XnView\xnview.exe
F:\hijackthis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
F2 - REG:system.ini: UserInit=userinit.exe
O1 - Hosts: 46.28.106.64 www.vyletemzasvetem.cz
O1 - Hosts: 46.28.106.64 vyletemzasvetem.cz
O1 - Hosts: 0.0.0.1 mssplus.mcafee.com
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: Pomocná služba pro přihlášení k účtu Microsoft - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O4 - HKLM\..\Run: [Baidu Antivirus] "C:\Program Files (x86)\Baidu Security\Baidu Antivirus\5.4.3.122701.0\BavTray.exe" -auto
O4 - HKLM\..\Run: [IAStorIcon] C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
O4 - HKCU\..\Run: [f.lux] "C:\Users\Radka\AppData\Local\FluxSoftware\Flux\flux.exe" /noshow
O4 - HKCU\..\Run: [Opera Browser Assistant] C:\Users\Radka\AppData\Local\Programs\Opera\assistant\browser_assistant.exe
O4 - HKUS\S-1-5-18\..\RunOnce: [SPReview] "C:\Windows\System32\SPReview\SPReview.exe" /sp:1 /errorfwlink:"http://go.microsoft.com/fwlink/?LinkID=122915" /build:7601 (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\RunOnce: [SPReview] "C:\Windows\System32\SPReview\SPReview.exe" /sp:1 /errorfwlink:"http://go.microsoft.com/fwlink/?LinkID=122915" /build:7601 (User 'Default user')
O4 - Startup: Microsoft Corporation.jse
O4 - Startup: setup.js
O8 - Extra context menu item: Download linked video with MP4 Downloader - res://C:\Program Files (x86)\Tomabo\MP4 Player\MP4D_IE.dll/301
O8 - Extra context menu item: Download video on this page - res://C:\Program Files (x86)\Tomabo\MP4 Player\YTVD_IE.dll/300
O8 - Extra context menu item: Download video this links to - res://C:\Program Files (x86)\Tomabo\MP4 Player\YTVD_IE.dll/301
O8 - Extra context menu item: Download video with MP4 Downloader - res://C:\Program Files (x86)\Tomabo\MP4 Player\MP4D_IE.dll/300
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Excel - res://C:\PROGRA~2\MICROS~1\Office12\EXCEL.EXE/3000
O9 - Extra button: Download Video - {7EB7296C-BEA5-444A-AAAA-1DF97CA6CB6E} - res://C:\Program Files (x86)\Tomabo\MP4 Player\MP4D_IE.dll/300 (file missing)
O9 - Extra 'Tools' menuitem: Download video with MP4 Downloader - {7EB7296C-BEA5-444A-AAAA-1DF97CA6CB6E} - res://C:\Program Files (x86)\Tomabo\MP4 Player\MP4D_IE.dll/300 (file missing)
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~2\MICROS~1\Office12\REFIEBAR.DLL
O9 - Extra button: Download Video - {B4FECE59-6D0A-4EE6-A07F-E6A94F846E55} - res://C:\Program Files (x86)\Tomabo\MP4 Player\YTVD_IE.dll/300 (file missing)
O9 - Extra 'Tools' menuitem: Download video on this page - {B4FECE59-6D0A-4EE6-A07F-E6A94F846E55} - res://C:\Program Files (x86)\Tomabo\MP4 Player\YTVD_IE.dll/300 (file missing)
O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll
O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll
O10 - Unknown file in Winsock LSP: c:\windows\system32\vsocklib.dll
O10 - Unknown file in Winsock LSP: c:\windows\system32\vsocklib.dll
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/s ... wflash.cab
O18 - Protocol: wlpg - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} - C:\Program Files (x86)\Windows Live\Photo Gallery\AlbumDownloadProtocolHandler.dll
O20 - AppInit_DLLs: C:\Windows\SysWOW64\nvinit.dll
O23 - Service: adaware antivirus service (adawareantivirusservice) - Unknown owner - C:\Program Files\adaware\adaware antivirus\adaware antivirus\12.6.997.11652\AdAwareService.exe
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
O23 - Service: Intel® Centrino® Wireless Bluetooth® 3.0 + High Speed Service (AMPPALR3) - Intel Corporation - C:\Program Files\Intel\BluetoothHS\BTHSAmpPalService.exe
O23 - Service: Baidu Antivirus Service (BavSvc) - Baidu, Inc. - C:\Program Files (x86)\Baidu Security\Baidu Antivirus\5.4.3.122701.0\BavSvc.exe
O23 - Service: Baidu BdSandbox Virtual Service (BdSandboxSrv) - Baidu, Inc. - C:\Program Files (x86)\Baidu Security\Baidu Antivirus\5.4.3.122701.0\BdSandboxSrv64.exe
O23 - Service: Baidu Hips Service (BHipsSvc) - Baidu, Inc. - C:\Program Files (x86)\Baidu Security\Baidu Antivirus\5.4.3.122701.0\BHipsSvc.exe
O23 - Service: Intel(R) Centrino(R) Wireless Bluetooth(R) 3.0 + High Speed Security Service (BTHSSecurityMgr) - Intel(R) Corporation - C:\Program Files\Intel\BluetoothHS\BTHSSecurityMgr.exe
O23 - Service: Bluetooth Service (btwdins) - Broadcom Corporation. - C:\Program Files\Lenovo\Bluetooth Software\btwdins.exe
O23 - Service: Intel(R) Content Protection HECI Service (cphs) - Intel Corporation - C:\Windows\SysWow64\IntelCpHeciSvc.exe
O23 - Service: @C:\Windows\system32\CxAudMsg64.exe,-100 (CxAudMsg) - Unknown owner - C:\Windows\system32\CxAudMsg64.exe (file missing)
O23 - Service: Intel® PROSet/Wireless WiMAX Red Bend Device Management Service (DMAgent) - Red Bend Ltd. - C:\Program Files\Intel\WiMAX\Bin\DMAgent.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)
O23 - Service: Intel(R) PROSet/Wireless Event Log (EvtEng) - Intel(R) Corporation - C:\Program Files\Intel\WiFi\bin\EvtEng.exe
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)
O23 - Service: Google Chrome Elevation Service (GoogleChromeElevationService) - Google Inc. - C:\Program Files (x86)\Google\Chrome\Application\71.0.3578.98\elevation_service.exe
O23 - Service: Služba Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Služba Google Update (gupdatem) (gupdatem) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Úložná technologie Intel(R) Rapid (IAStorDataMgrSvc) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
O23 - Service: @%SystemRoot%\system32\ieetwcollectorres.dll,-1000 (IEEtwCollectorService) - Unknown owner - C:\Windows\system32\IEEtwCollector.exe (file missing)
O23 - Service: Intel(R) Capability Licensing Service Interface - Intel(R) Corporation - c:\Program Files\Intel\iCLS Client\HeciServer.exe
O23 - Service: Intel(R) Dynamic Application Loader Host Interface Service (jhi_service) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Intel(R) Management and Security Application Local Management Service (LMS) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
O23 - Service: Wireless PAN DHCP Server (MyWiFiDHCPDNS) - Unknown owner - C:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: NVIDIA Display Driver Service (nvsvc) - Unknown owner - C:\Windows\system32\nvvsvc.exe (file missing)
O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Intel(R) PROSet/Wireless Registry Service (RegSrvc) - Intel(R) Corporation - C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
O23 - Service: Intel(R) Management and Security Application User Notification Service (UNS) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
O23 - Service: VMware Authorization Service (VMAuthdService) - VMware, Inc. - C:\Program Files (x86)\VMware\VMware Player\vmware-authd.exe
O23 - Service: VMware DHCP Service (VMnetDHCP) - VMware, Inc. - C:\WINDOWS\SYSWOW64\VMNETDHCP.EXE
O23 - Service: VMware USB Arbitration Service (VMUSBArbService) - VMware, Inc. - C:\Program Files (x86)\Common Files\VMware\USB\vmware-usbarbitrator64.exe
O23 - Service: VMware NAT Service - VMware, Inc. - C:\WINDOWS\SYSWOW64\VMNAT.EXE
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\Wat\WatUX.exe,-601 (WatAdminSvc) - Unknown owner - C:\Windows\system32\Wat\WatAdminSvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)
O23 - Service: Intel® PROSet/Wireless WiMAX Service (WiMAXAppSrv) - Intel(R) Corporation - C:\Program Files\Intel\WiMAX\Bin\AppSrv.exe
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)
O23 - Service: Intel(R) PROSet/Wireless Zero Configuration Service (ZeroConfigService) - Intel® Corporation - C:\Program Files\Intel\WiFi\bin\ZeroConfigService.exe

--
End of file - 11966 bytes

[Rudy]

Zdravím!
Dejte logy FRST+Addition: https://forum.viry.cz/viewtopic.php?f=13&t=154679 . HJT už je dávno za svým zenitem.

[ramiri]

Děkuji za rychlou reakci, omlouvám se, myslel jsem že to tak bude stačit. Hned jsem to napravil a v raru (je tam obojí) přikládám

Děkuji moc za ochotu.

[Rudy]

Teď spusťte tuto utilitu:

Ulozte na plochu AdwCleaner https://malwarebytes.com/adwcleaner/ nebo http://www.bleepingcomputer.com/download/adwcleaner/

ukoncete vsechny programy
odsouhlaste licencni podmiky (EULA) klikem na Souhlasim
kliknete pravym na ikonu AdwCleaneru a vyberte Spustit jako spravce (v pripade Win XP spustte obycejne dvojklikem)
kliknete na Skenovat nyni (Scan now), pote na Cisteni a opravy (Clean and Repair)
po restartu na Vas vyskoci log (pripadne jej najdete v C:\AdwCleaner\Logs\AdwCleaner[Cxx].txt), jehoz obsah zkopirujte do pristi odpovedi

[ramiri]

Děkuji moc, uděláno, výsledek zde:

# -------------------------------
# Malwarebytes AdwCleaner 7.2.6.0
# -------------------------------
# Build: 12-18-2018
# Database: 2019-01-21.1 (Cloud)
# Support: https://www.malwarebytes.com/support
#
# -------------------------------
# Mode: Clean
# -------------------------------
# Start: 01-26-2019
# Duration: 00:00:11
# OS: Windows 7 Home Premium
# Cleaned: 34
# Failed: 0


***** [ Services ] *****

Deleted bassvc

***** [ Folders ] *****

Deleted C:\Users\Radka\AppData\Roaming\Wise Euask
Deleted C:\Users\Public\Documents\Downloaded Installers
Deleted C:\Users\Public\Documents\Guid
Deleted C:\Users\Public\Documents\pc faster
Deleted C:\ProgramData\Microsoft\Windows\Start Menu\Programs\MP4 Player
Deleted C:\Users\Radka\AppData\Roaming\OpenCandy
Deleted C:\Program Files (x86)\Seznam.cz
Deleted C:\Users\Radka\AppData\Roaming\Seznam.cz
Deleted C:\ProgramData\Microsoft\Windows\Start Menu\Programs\SlimDrivers
Deleted C:\Program Files (x86)\SlimDrivers
Deleted C:\ProgramData\SlimWare Utilities, Inc
Deleted C:\Users\Radka\AppData\Local\slimware utilities inc
Deleted C:\Users\Radka\AppData\Local\Temp\VideoConverter

***** [ Files ] *****

Deleted C:\Windows\System32\drivers\swdumon.sys
Deleted C:\ProgramData\Duplicaterecord.js

***** [ DLL ] *****

No malicious DLLs cleaned.

***** [ WMI ] *****

No malicious WMI cleaned.

***** [ Shortcuts ] *****

No malicious shortcuts cleaned.

***** [ Tasks ] *****

No malicious tasks cleaned.

***** [ Registry ] *****

Deleted HKLM\Software\Classes\CLSID\{0A93904A-BB1E-4A0C-9753-B57B9AE272CC}
Deleted HKLM\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules|{8F93ED97-30C8-4B7D-A566-722C299B7FA7}
Deleted HKLM\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules|{D60E4A90-1FF8-40AE-B6BB-E18F50F7356B}
Deleted HKLM\Software\Microsoft\Shared Tools\MSConfig\services\bassvc
Deleted HKLM\Software\Microsoft\Shared Tools\MSConfig\startupreg\cz.seznam.software.szndesktop
Deleted HKLM\Software\Microsoft\Shared Tools\MSConfig\startupreg\cz.seznam.software.autoupdate
Deleted HKLM\Software\Microsoft\Shared Tools\MSConfig\startupreg\seznam-listicka-distribuce
Deleted HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\SeznamInstall
Deleted HKCU\Software\Seznam.cz
Deleted HKCU\Software\Mozilla\NativeMessagingHosts\sznpp_nm
Deleted HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\SlimDrivers
Deleted HKLM\Software\Wow6432Node\SLIMWARE UTILITIES, INC.
Deleted HKCU\Software\SlimWare Utilities Inc
Deleted HKLM\Software\Wow6432Node\SlimWare Utilities Inc
Deleted HKLM\Software\DtsEncodeTools

***** [ Chromium (and derivatives) ] *****

Deleted Seznam doplněk - Email

***** [ Chromium URLs ] *****

Deleted akcniceny.cz
Deleted slunecnice.cz

***** [ Firefox (and derivatives) ] *****

No malicious Firefox entries cleaned.

***** [ Firefox URLs ] *****

No malicious Firefox URLs cleaned.


*************************

[+] Delete Tracing Keys
[+] Reset Winsock

*************************

AdwCleaner[S00].txt - [3933 octets] - [26/01/2019 12:56:42]

########## EOF - C:\AdwCleaner\Logs\AdwCleaner[C00].txt ##########

[Rudy]

Dejte nové logy FRST+Addititon.

[ramiri]

Přiloženo Děkuji.

[Rudy]

Otevřte poznámkový blok a zkopírujte do něj:

Start

CloseProcesses:
HKU\S-1-5-19\Control Panel\Desktop\\SCRNSAVE.EXE ->
HKU\S-1-5-20\Control Panel\Desktop\\SCRNSAVE.EXE ->
HKU\S-1-5-21-3421731538-1396672586-2054023457-1000\...\MountPoints2: F - F:\HiSuiteDownLoader.exe
HKU\S-1-5-21-3421731538-1396672586-2054023457-1000\...\MountPoints2: {68b4d7b4-2480-11e5-badf-c0143dd142ba} - F:\LaunchU3.exe -a
HKU\S-1-5-21-3421731538-1396672586-2054023457-1000\...\MountPoints2: {ae017c66-58d4-11e8-b083-de2758c50c6f} - F:\HiSuiteDownLoader.exe
HKU\S-1-5-21-3421731538-1396672586-2054023457-1000\Control Panel\Desktop\\SCRNSAVE.EXE ->
HKU\S-1-5-18\Control Panel\Desktop\\SCRNSAVE.EXE ->
CHR HKLM\SOFTWARE\Policies\Google: Restriction <==== ATTENTION
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL =
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL =
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL =
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL =
FF Plugin: @microsoft.com/GENUINE -> disabled [No File]
FF Plugin-x32: @microsoft.com/GENUINE -> disabled [No File]
S2 appaskseatch; \??\C:\Windows\system32\drivers\adtschange.sys [X]
U3 aswbdisk; no ImagePath
S1 vonetframe; \??\C:\Windows\system32\drivers\vonetframe.sys [X]
C:\Windows\System32\Tasks\{5A1D3BDB-807F-409A-AEE8-AA275BD19962}
C:\Users\Radka\AppData\Local\Temp
ShellIconOverlayIdentifiers: [00asw] -> {472083B0-C522-11CF-8763-00608CC02F24} => -> No File
ShellIconOverlayIdentifiers: [BaiduAntivirusIconLock] -> {0A93904A-BB1E-4a0c-9753-B57B9AE272CC} => -> No File
Task: {37A7C715-79EF-4E72-8E5C-05827710FBD0} - System32\Tasks\anydesk => C:\Users\Radka\AppData\Local\Temp\setup.js [2018-09-22] () <==== ATTENTION
Task: {4CF027DD-336E-4A13-9CCF-A5EE3A5BE968} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-08-30] (Google Inc.)
Task: {62B85998-571E-420C-8A45-F671789BF8C5} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-08-30] (Google Inc.)

EmptyTemp:
Hosts:
End

Uložte do F:\ jako fixlist.txt. Spusťte znovu FRST a klikněte na >Fix<. Po skončení akce se objeví log, který sem zkopírujte.

[ramiri]

Děkuji, uděláno dle návodu, výpis zde:

Fix result of Farbar Recovery Scan Tool (x64) Version: 26.01.2019
Ran by Radka (26-01-2019 17:06:17) Run:1
Running from F:\
Loaded Profiles: Radka (Available Profiles: Radka)
Boot Mode: Normal
==============================================

fixlist content:
*****************
Start

CloseProcesses:
HKU\S-1-5-19\Control Panel\Desktop\\SCRNSAVE.EXE ->
HKU\S-1-5-20\Control Panel\Desktop\\SCRNSAVE.EXE ->
HKU\S-1-5-21-3421731538-1396672586-2054023457-1000\...\MountPoints2: F - F:\HiSuiteDownLoader.exe
HKU\S-1-5-21-3421731538-1396672586-2054023457-1000\...\MountPoints2: {68b4d7b4-2480-11e5-badf-c0143dd142ba} - F:\LaunchU3.exe -a
HKU\S-1-5-21-3421731538-1396672586-2054023457-1000\...\MountPoints2: {ae017c66-58d4-11e8-b083-de2758c50c6f} - F:\HiSuiteDownLoader.exe
HKU\S-1-5-21-3421731538-1396672586-2054023457-1000\Control Panel\Desktop\\SCRNSAVE.EXE ->
HKU\S-1-5-18\Control Panel\Desktop\\SCRNSAVE.EXE ->
CHR HKLM\SOFTWARE\Policies\Google: Restriction <==== ATTENTION
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL =
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL =
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL =
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL =
FF Plugin: @microsoft.com/GENUINE -> disabled [No File]
FF Plugin-x32: @microsoft.com/GENUINE -> disabled [No File]
S2 appaskseatch; \??\C:\Windows\system32\drivers\adtschange.sys [X]
U3 aswbdisk; no ImagePath
S1 vonetframe; \??\C:\Windows\system32\drivers\vonetframe.sys [X]
C:\Windows\System32\Tasks\{5A1D3BDB-807F-409A-AEE8-AA275BD19962}
C:\Users\Radka\AppData\Local\Temp
ShellIconOverlayIdentifiers: [00asw] -> {472083B0-C522-11CF-8763-00608CC02F24} => -> No File
ShellIconOverlayIdentifiers: [BaiduAntivirusIconLock] -> {0A93904A-BB1E-4a0c-9753-B57B9AE272CC} => -> No File
Task: {37A7C715-79EF-4E72-8E5C-05827710FBD0} - System32\Tasks\anydesk => C:\Users\Radka\AppData\Local\Temp\setup.js [2018-09-22] () <==== ATTENTION
Task: {4CF027DD-336E-4A13-9CCF-A5EE3A5BE968} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-08-30] (Google Inc.)
Task: {62B85998-571E-420C-8A45-F671789BF8C5} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-08-30] (Google Inc.)

EmptyTemp:
Hosts:
End
*****************

Processes closed successfully.
"HKU\S-1-5-19\Control Panel\Desktop\\SCRNSAVE.EXE" => removed successfully
"HKU\S-1-5-20\Control Panel\Desktop\\SCRNSAVE.EXE" => removed successfully
HKU\S-1-5-21-3421731538-1396672586-2054023457-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\F => removed successfully
HKU\S-1-5-21-3421731538-1396672586-2054023457-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{68b4d7b4-2480-11e5-badf-c0143dd142ba} => removed successfully
HKLM\Software\Classes\CLSID\{68b4d7b4-2480-11e5-badf-c0143dd142ba} => not found
HKU\S-1-5-21-3421731538-1396672586-2054023457-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{ae017c66-58d4-11e8-b083-de2758c50c6f} => removed successfully
HKLM\Software\Classes\CLSID\{ae017c66-58d4-11e8-b083-de2758c50c6f} => not found
"HKU\S-1-5-21-3421731538-1396672586-2054023457-1000\Control Panel\Desktop\\SCRNSAVE.EXE" => removed successfully
"HKU\S-1-5-18\Control Panel\Desktop\\SCRNSAVE.EXE" => removed successfully
HKLM\SOFTWARE\Policies\Google => removed successfully
HKLM\Software\\Microsoft\Internet Explorer\Main\\Default_Page_URL => value restored successfully
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main\\Default_Page_URL => value restored successfully
HKLM\Software\\Microsoft\Internet Explorer\Main\\Default_Search_URL => value restored successfully
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main\\Default_Search_URL => value restored successfully
HKLM\Software\MozillaPlugins\@microsoft.com/GENUINE => removed successfully
HKLM\Software\Wow6432Node\MozillaPlugins\@microsoft.com/GENUINE => removed successfully
HKLM\System\CurrentControlSet\Services\appaskseatch => removed successfully
appaskseatch => service removed successfully
HKLM\System\CurrentControlSet\Services\aswbdisk => removed successfully
aswbdisk => service removed successfully
HKLM\System\CurrentControlSet\Services\vonetframe => removed successfully
vonetframe => service removed successfully
C:\Windows\System32\Tasks\{5A1D3BDB-807F-409A-AEE8-AA275BD19962} => moved successfully

"C:\Users\Radka\AppData\Local\Temp" folder move:

Could not move "C:\Users\Radka\AppData\Local\Temp" => Scheduled to move on reboot.

HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\ShellIconOverlayIdentifiers\00asw => removed successfully
HKLM\Software\Classes\CLSID\{472083B0-C522-11CF-8763-00608CC02F24} => not found
HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\ShellIconOverlayIdentifiers\BaiduAntivirusIconLock => removed successfully
HKLM\Software\Classes\CLSID\{0A93904A-BB1E-4a0c-9753-B57B9AE272CC} => not found
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{37A7C715-79EF-4E72-8E5C-05827710FBD0}" => removed successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{37A7C715-79EF-4E72-8E5C-05827710FBD0}" => removed successfully
C:\Windows\System32\Tasks\anydesk => moved successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\anydesk" => removed successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{4CF027DD-336E-4A13-9CCF-A5EE3A5BE968}" => removed successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{4CF027DD-336E-4A13-9CCF-A5EE3A5BE968}" => removed successfully
C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA => moved successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\GoogleUpdateTaskMachineUA" => removed successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{62B85998-571E-420C-8A45-F671789BF8C5}" => removed successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{62B85998-571E-420C-8A45-F671789BF8C5}" => removed successfully
C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore => moved successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\GoogleUpdateTaskMachineCore" => removed successfully
C:\Windows\System32\Drivers\etc\hosts => moved successfully
Hosts restored successfully.

=========== EmptyTemp: ==========

BITS transfer queue => 8388608 B
DOMStore, IE Recovery, AppCache, Feeds Cache, Thumbcache, IconCache => 70448400 B
Java, Flash, Steam htmlcache => 938 B
Windows/system/drivers => 202422545 B
Edge => 0 B
Chrome => 811731757 B
Firefox => 0 B
Opera => 28974414 B

Temp, IE cache, history, cookies, recent:
Users => 0 B
Default => 66228 B
Public => 0 B
ProgramData => 0 B
systemprofile => 8790181 B
systemprofile32 => 83427 B
LocalService => 132244 B
NetworkService => 230656 B
Radka => 1816577447 B

RecycleBin => 11404868612 B
EmptyTemp: => 13.4 GB temporary data Removed.

================================

Result of scheduled files to move (Boot Mode: Normal) (Date&Time: 26-01-2019 17:16:11)

C:\Users\Radka\AppData\Local\Temp => Could not move

==== End of Fixlog 17:16:15 ====

[Rudy]

OK. Nastala nějaká změna?

[ramiri]

Vypadá to zatím dobře, háčky a čárky jdou normálně, lightroom nepadá, jediné co se nezměnilo je že posouvání na touchpadu (na pravé straně místo kolečka myši se pouze šoupe) tak po jakémkoliv restartu nebo znovuzapnutí nejde, musím dát myš, elan, nastavení, kliknout na posun a použít, pak do vypnutí normálně funguje, jinak to ipadá dobře. Což už je oprati předchozímu stavu super

Moc děkuji.

[Rudy]

Ještě můžete zkusit odebrat (odinstalovat) touchpad ve správci zařízení. Pak restartujte PC. Při novém startu bude touchpad znovu načten. Nakonec vyzkoušejte funkci.

[ramiri]

Dobrý den.

Omlouvám se že píšu až teď, ale měl jsem nějaké běhání. Tak situace se opět změnila:

Touchpad už je v provozu, to se povedlo.

Háčky/čárky - občas to ještě blbne, ale je to sporadické, občas jde ok, občas při zmáčknutí shiftu a klávesy na háček hned napíše 2háčky vedle sebe

Ale co se změnilo a zhoršilo:
Lightroom se závratně zpomalil, při každém otevírání žádá schválení změn v PC (dříve šel spustit normálně) a při ukládání fotek začne problikávat a přeskakovat, nabýhá okno s názvem BEZEL (asi na vteřinu) - musím ho přes správce úloh ukončit a pak lightroom pustit znovu a dát uložit - to se také markantně zpomalilo.

Chtěl jsem si nainstalovat SlimDrivers, stáhne se, nainstaluje a když skončím instalci a dám ať se rovnou spustí - nic se nestane a nikde nainstalovaný není.

LOG opět přiložen.

Děkuji za rady.

[Rudy]

Udělejte ještě kompletní sken MBAM: http://www.malwarebytes.org/mbam.php a dejte log. Předem nic nemažte.

[ramiri]

Dobrý den.

Hotovo, scan uložen do txt a zatím ponechán tak jak je, děkuji:
Malwarebytes
www.malwarebytes.com

-Podrobnosti logovacího souboru-
Datum skenování: 04.02.19
Čas skenování: 12:34
Logovací soubor: e2be81b8-2870-11e9-9bcf-c0143dd142ba.json

-Informace o softwaru-
Verze: 3.6.1.2711
Verze komponentů: 1.0.527
Aktualizovat verzi balíku komponent: 1.0.9106
Licence: Zkušební

-Systémová informace-
OS: Windows 7 Service Pack 1
CPU: x64
Systém souborů: NTFS
Uživatel: Radka-PC\Radka

-Shrnutí skenování-
Typ skenování: Skenování hrozeb (Threat Scan)
Spuštění skenování: Ruční
Výsledek: Dokončeno
Skenované objekty: 242696
Zjištěné hrozby: 72
Hrozby umístěné do karantény: 0
Uplynulý čas: 6 min, 55 sek

-Možnosti skenování-
Paměť: Povoleno
Start: Povoleno
Systém souborů: Povoleno
Archivy: Povoleno
Rootkity: Zakázáno
Heuristika: Povoleno
Potenciálně nežádoucí program: Detekovat
Potenciálně nežádoucí modifikace: Detekovat

-Podrobnosti skenování-
Proces: 0
(Nebyly zjištěny žádné škodlivé položky)

Modul: 0
(Nebyly zjištěny žádné škodlivé položky)

Klíč registru: 3
Trojan.Agent.VBS, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\SCHEDULE\TASKCACHE\TREE\anydesk, Žádná uživatelská akce, [2792], [578859],1.0.9106
Trojan.Agent.VBS, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\SCHEDULE\TASKCACHE\TASKS\{E7CA7826-C01C-434E-8143-CB00EBBD4ACF}, Žádná uživatelská akce, [2792], [578859],1.0.9106
Trojan.Agent.VBS, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\SCHEDULE\TASKCACHE\PLAIN\{E7CA7826-C01C-434E-8143-CB00EBBD4ACF}, Žádná uživatelská akce, [2792], [578859],1.0.9106

Hodnota v registru: 2
Trojan.Agent.VBS, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\SCHEDULE\TASKCACHE\TASKS\{E7CA7826-C01C-434E-8143-CB00EBBD4ACF}|PATH, Žádná uživatelská akce, [2792], [578861],1.0.9106
PUP.Optional.eShield.Generic, HKU\S-1-5-21-3421731538-1396672586-2054023457-1000\SOFTWARE\GOOGLE\CHROME\PREFERENCEMACS\Default\extensions.settings|mmdkdncigplhkbhcfifnimpdficjhhnn, Žádná uživatelská akce, [14461], [443243],1.0.9106

Data registrů: 0
(Nebyly zjištěny žádné škodlivé položky)

Datové proudy: 0
(Nebyly zjištěny žádné škodlivé položky)

Adresář: 10
PUP.Optional.MirageISO, C:\USERS\PUBLIC\DOCUMENTS\XMUPDATE, Žádná uživatelská akce, [4543], [443706],1.0.9106
PUP.Optional.eShield.Generic, C:\USERS\RADKA\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\Default\Local Extension Settings\mmdkdncigplhkbhcfifnimpdficjhhnn, Žádná uživatelská akce, [14461], [443243],1.0.9106
PUP.Optional.eShield.Generic, C:\Users\Radka\AppData\Local\Google\Chrome\User Data\Default\Extensions\mmdkdncigplhkbhcfifnimpdficjhhnn\1.0.18.104_0\newtab\images, Žádná uživatelská akce, [14461], [443243],1.0.9106
PUP.Optional.eShield.Generic, C:\Users\Radka\AppData\Local\Google\Chrome\User Data\Default\Extensions\mmdkdncigplhkbhcfifnimpdficjhhnn\1.0.18.104_0\lib\images, Žádná uživatelská akce, [14461], [443243],1.0.9106
PUP.Optional.eShield.Generic, C:\Users\Radka\AppData\Local\Google\Chrome\User Data\Default\Extensions\mmdkdncigplhkbhcfifnimpdficjhhnn\1.0.18.104_0\_metadata, Žádná uživatelská akce, [14461], [443243],1.0.9106
PUP.Optional.eShield.Generic, C:\Users\Radka\AppData\Local\Google\Chrome\User Data\Default\Extensions\mmdkdncigplhkbhcfifnimpdficjhhnn\1.0.18.104_0\newtab, Žádná uživatelská akce, [14461], [443243],1.0.9106
PUP.Optional.eShield.Generic, C:\Users\Radka\AppData\Local\Google\Chrome\User Data\Default\Extensions\mmdkdncigplhkbhcfifnimpdficjhhnn\1.0.18.104_0\icons, Žádná uživatelská akce, [14461], [443243],1.0.9106
PUP.Optional.eShield.Generic, C:\Users\Radka\AppData\Local\Google\Chrome\User Data\Default\Extensions\mmdkdncigplhkbhcfifnimpdficjhhnn\1.0.18.104_0\lib, Žádná uživatelská akce, [14461], [443243],1.0.9106
PUP.Optional.eShield.Generic, C:\Users\Radka\AppData\Local\Google\Chrome\User Data\Default\Extensions\mmdkdncigplhkbhcfifnimpdficjhhnn\1.0.18.104_0, Žádná uživatelská akce, [14461], [443243],1.0.9106
PUP.Optional.eShield.Generic, C:\USERS\RADKA\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\EXTENSIONS\MMDKDNCIGPLHKBHCFIFNIMPDFICJHHNN, Žádná uživatelská akce, [14461], [443243],1.0.9106

Soubor: 57
Trojan.Agent.E, C:\USERS\RADKA\APPDATA\LOCAL\TEMP\TMP.EXE, Žádná uživatelská akce, [3706], [234066],1.0.9106
Trojan.Agent.TMP, C:\USERS\RADKA\APPDATA\ROAMING\TMP.EXE, Žádná uživatelská akce, [4344], [232273],1.0.9106
PUP.Optional.MirageISO, C:\USERS\PUBLIC\DOCUMENTS\XMUPDATE\CONF.DB, Žádná uživatelská akce, [4543], [443706],1.0.9106
Trojan.Agent.VBS, C:\WINDOWS\SYSTEM32\TASKS\ANYDESK, Žádná uživatelská akce, [2792], [578859],1.0.9106
Trojan.Downloader.JS, C:\USERS\RADKA\APPDATA\ROAMING\MICROSOFT\WINDOWS\START MENU\PROGRAMS\STARTUP\SETUP.JS, Žádná uživatelská akce, [5824], [610266],1.0.9106
PUP.Optional.eShield.Generic, C:\Users\Radka\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\mmdkdncigplhkbhcfifnimpdficjhhnn\000003.log, Žádná uživatelská akce, [14461], [443243],1.0.9106
PUP.Optional.eShield.Generic, C:\Users\Radka\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\mmdkdncigplhkbhcfifnimpdficjhhnn\CURRENT, Žádná uživatelská akce, [14461], [443243],1.0.9106
PUP.Optional.eShield.Generic, C:\Users\Radka\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\mmdkdncigplhkbhcfifnimpdficjhhnn\LOCK, Žádná uživatelská akce, [14461], [443243],1.0.9106
PUP.Optional.eShield.Generic, C:\Users\Radka\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\mmdkdncigplhkbhcfifnimpdficjhhnn\LOG, Žádná uživatelská akce, [14461], [443243],1.0.9106
PUP.Optional.eShield.Generic, C:\Users\Radka\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\mmdkdncigplhkbhcfifnimpdficjhhnn\MANIFEST-000001, Žádná uživatelská akce, [14461], [443243],1.0.9106
PUP.Optional.eShield.Generic, C:\USERS\RADKA\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\Default\Secure Preferences, Žádná uživatelská akce, [14461], [443243],1.0.9106
PUP.Optional.eShield.Generic, C:\USERS\RADKA\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\Default\Preferences, Žádná uživatelská akce, [14461], [443243],1.0.9106
PUP.Optional.eShield.Generic, C:\USERS\RADKA\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\EXTENSIONS\MMDKDNCIGPLHKBHCFIFNIMPDFICJHHNN\1.0.18.104_0\BACKGROUND.JS, Žádná uživatelská akce, [14461], [443243],1.0.9106
PUP.Optional.eShield.Generic, C:\Users\Radka\AppData\Local\Google\Chrome\User Data\Default\Extensions\mmdkdncigplhkbhcfifnimpdficjhhnn\1.0.18.104_0\icons\128.png, Žádná uživatelská akce, [14461], [443243],1.0.9106
PUP.Optional.eShield.Generic, C:\Users\Radka\AppData\Local\Google\Chrome\User Data\Default\Extensions\mmdkdncigplhkbhcfifnimpdficjhhnn\1.0.18.104_0\icons\16.png, Žádná uživatelská akce, [14461], [443243],1.0.9106
PUP.Optional.eShield.Generic, C:\Users\Radka\AppData\Local\Google\Chrome\User Data\Default\Extensions\mmdkdncigplhkbhcfifnimpdficjhhnn\1.0.18.104_0\icons\32.png, Žádná uživatelská akce, [14461], [443243],1.0.9106
PUP.Optional.eShield.Generic, C:\Users\Radka\AppData\Local\Google\Chrome\User Data\Default\Extensions\mmdkdncigplhkbhcfifnimpdficjhhnn\1.0.18.104_0\icons\48.png, Žádná uživatelská akce, [14461], [443243],1.0.9106
PUP.Optional.eShield.Generic, C:\Users\Radka\AppData\Local\Google\Chrome\User Data\Default\Extensions\mmdkdncigplhkbhcfifnimpdficjhhnn\1.0.18.104_0\lib\images\ui-bg_flat_0_aaaaaa_40x100.png, Žádná uživatelská akce, [14461], [443243],1.0.9106
PUP.Optional.eShield.Generic, C:\Users\Radka\AppData\Local\Google\Chrome\User Data\Default\Extensions\mmdkdncigplhkbhcfifnimpdficjhhnn\1.0.18.104_0\lib\images\ui-bg_flat_75_ffffff_40x100.png, Žádná uživatelská akce, [14461], [443243],1.0.9106
PUP.Optional.eShield.Generic, C:\Users\Radka\AppData\Local\Google\Chrome\User Data\Default\Extensions\mmdkdncigplhkbhcfifnimpdficjhhnn\1.0.18.104_0\lib\images\ui-bg_glass_55_fbf9ee_1x400.png, Žádná uživatelská akce, [14461], [443243],1.0.9106
PUP.Optional.eShield.Generic, C:\Users\Radka\AppData\Local\Google\Chrome\User Data\Default\Extensions\mmdkdncigplhkbhcfifnimpdficjhhnn\1.0.18.104_0\lib\images\ui-bg_glass_65_ffffff_1x400.png, Žádná uživatelská akce, [14461], [443243],1.0.9106
PUP.Optional.eShield.Generic, C:\Users\Radka\AppData\Local\Google\Chrome\User Data\Default\Extensions\mmdkdncigplhkbhcfifnimpdficjhhnn\1.0.18.104_0\lib\images\ui-bg_glass_75_dadada_1x400.png, Žádná uživatelská akce, [14461], [443243],1.0.9106
PUP.Optional.eShield.Generic, C:\Users\Radka\AppData\Local\Google\Chrome\User Data\Default\Extensions\mmdkdncigplhkbhcfifnimpdficjhhnn\1.0.18.104_0\lib\images\ui-bg_glass_75_e6e6e6_1x400.png, Žádná uživatelská akce, [14461], [443243],1.0.9106
PUP.Optional.eShield.Generic, C:\Users\Radka\AppData\Local\Google\Chrome\User Data\Default\Extensions\mmdkdncigplhkbhcfifnimpdficjhhnn\1.0.18.104_0\lib\images\ui-bg_glass_95_fef1ec_1x400.png, Žádná uživatelská akce, [14461], [443243],1.0.9106
PUP.Optional.eShield.Generic, C:\Users\Radka\AppData\Local\Google\Chrome\User Data\Default\Extensions\mmdkdncigplhkbhcfifnimpdficjhhnn\1.0.18.104_0\lib\images\ui-bg_highlight-soft_75_cccccc_1x100.png, Žádná uživatelská akce, [14461], [443243],1.0.9106
PUP.Optional.eShield.Generic, C:\Users\Radka\AppData\Local\Google\Chrome\User Data\Default\Extensions\mmdkdncigplhkbhcfifnimpdficjhhnn\1.0.18.104_0\lib\images\ui-icons_222222_256x240.png, Žádná uživatelská akce, [14461], [443243],1.0.9106
PUP.Optional.eShield.Generic, C:\Users\Radka\AppData\Local\Google\Chrome\User Data\Default\Extensions\mmdkdncigplhkbhcfifnimpdficjhhnn\1.0.18.104_0\lib\images\ui-icons_2e83ff_256x240.png, Žádná uživatelská akce, [14461], [443243],1.0.9106
PUP.Optional.eShield.Generic, C:\Users\Radka\AppData\Local\Google\Chrome\User Data\Default\Extensions\mmdkdncigplhkbhcfifnimpdficjhhnn\1.0.18.104_0\lib\images\ui-icons_454545_256x240.png, Žádná uživatelská akce, [14461], [443243],1.0.9106
PUP.Optional.eShield.Generic, C:\Users\Radka\AppData\Local\Google\Chrome\User Data\Default\Extensions\mmdkdncigplhkbhcfifnimpdficjhhnn\1.0.18.104_0\lib\images\ui-icons_888888_256x240.png, Žádná uživatelská akce, [14461], [443243],1.0.9106
PUP.Optional.eShield.Generic, C:\Users\Radka\AppData\Local\Google\Chrome\User Data\Default\Extensions\mmdkdncigplhkbhcfifnimpdficjhhnn\1.0.18.104_0\lib\images\ui-icons_cd0a0a_256x240.png, Žádná uživatelská akce, [14461], [443243],1.0.9106
PUP.Optional.eShield.Generic, C:\Users\Radka\AppData\Local\Google\Chrome\User Data\Default\Extensions\mmdkdncigplhkbhcfifnimpdficjhhnn\1.0.18.104_0\lib\jquery-3.2.1.min.js, Žádná uživatelská akce, [14461], [443243],1.0.9106
PUP.Optional.eShield.Generic, C:\Users\Radka\AppData\Local\Google\Chrome\User Data\Default\Extensions\mmdkdncigplhkbhcfifnimpdficjhhnn\1.0.18.104_0\lib\jquery-ui.css, Žádná uživatelská akce, [14461], [443243],1.0.9106
PUP.Optional.eShield.Generic, C:\Users\Radka\AppData\Local\Google\Chrome\User Data\Default\Extensions\mmdkdncigplhkbhcfifnimpdficjhhnn\1.0.18.104_0\lib\jquery-ui.js, Žádná uživatelská akce, [14461], [443243],1.0.9106
PUP.Optional.eShield.Generic, C:\Users\Radka\AppData\Local\Google\Chrome\User Data\Default\Extensions\mmdkdncigplhkbhcfifnimpdficjhhnn\1.0.18.104_0\lib\on-off-switch.css, Žádná uživatelská akce, [14461], [443243],1.0.9106
PUP.Optional.eShield.Generic, C:\Users\Radka\AppData\Local\Google\Chrome\User Data\Default\Extensions\mmdkdncigplhkbhcfifnimpdficjhhnn\1.0.18.104_0\lib\on-off-switch.js, Žádná uživatelská akce, [14461], [443243],1.0.9106
PUP.Optional.eShield.Generic, C:\Users\Radka\AppData\Local\Google\Chrome\User Data\Default\Extensions\mmdkdncigplhkbhcfifnimpdficjhhnn\1.0.18.104_0\newtab\images\bar.png, Žádná uživatelská akce, [14461], [443243],1.0.9106
PUP.Optional.eShield.Generic, C:\Users\Radka\AppData\Local\Google\Chrome\User Data\Default\Extensions\mmdkdncigplhkbhcfifnimpdficjhhnn\1.0.18.104_0\newtab\images\close.png, Žádná uživatelská akce, [14461], [443243],1.0.9106
PUP.Optional.eShield.Generic, C:\Users\Radka\AppData\Local\Google\Chrome\User Data\Default\Extensions\mmdkdncigplhkbhcfifnimpdficjhhnn\1.0.18.104_0\newtab\images\incognito.png, Žádná uživatelská akce, [14461], [443243],1.0.9106
PUP.Optional.eShield.Generic, C:\Users\Radka\AppData\Local\Google\Chrome\User Data\Default\Extensions\mmdkdncigplhkbhcfifnimpdficjhhnn\1.0.18.104_0\newtab\images\logo.png, Žádná uživatelská akce, [14461], [443243],1.0.9106
PUP.Optional.eShield.Generic, C:\Users\Radka\AppData\Local\Google\Chrome\User Data\Default\Extensions\mmdkdncigplhkbhcfifnimpdficjhhnn\1.0.18.104_0\newtab\images\logotop.png, Žádná uživatelská akce, [14461], [443243],1.0.9106
PUP.Optional.eShield.Generic, C:\Users\Radka\AppData\Local\Google\Chrome\User Data\Default\Extensions\mmdkdncigplhkbhcfifnimpdficjhhnn\1.0.18.104_0\newtab\blank.css, Žádná uživatelská akce, [14461], [443243],1.0.9106
PUP.Optional.eShield.Generic, C:\Users\Radka\AppData\Local\Google\Chrome\User Data\Default\Extensions\mmdkdncigplhkbhcfifnimpdficjhhnn\1.0.18.104_0\newtab\blank.html, Žádná uživatelská akce, [14461], [443243],1.0.9106
PUP.Optional.eShield.Generic, C:\Users\Radka\AppData\Local\Google\Chrome\User Data\Default\Extensions\mmdkdncigplhkbhcfifnimpdficjhhnn\1.0.18.104_0\newtab\learnmore.css, Žádná uživatelská akce, [14461], [443243],1.0.9106
PUP.Optional.eShield.Generic, C:\Users\Radka\AppData\Local\Google\Chrome\User Data\Default\Extensions\mmdkdncigplhkbhcfifnimpdficjhhnn\1.0.18.104_0\newtab\learnmore.html, Žádná uživatelská akce, [14461], [443243],1.0.9106
PUP.Optional.eShield.Generic, C:\Users\Radka\AppData\Local\Google\Chrome\User Data\Default\Extensions\mmdkdncigplhkbhcfifnimpdficjhhnn\1.0.18.104_0\_metadata\verified_contents.json, Žádná uživatelská akce, [14461], [443243],1.0.9106
PUP.Optional.eShield.Generic, C:\Users\Radka\AppData\Local\Google\Chrome\User Data\Default\Extensions\mmdkdncigplhkbhcfifnimpdficjhhnn\1.0.18.104_0\content.js, Žádná uživatelská akce, [14461], [443243],1.0.9106
PUP.Optional.eShield.Generic, C:\Users\Radka\AppData\Local\Google\Chrome\User Data\Default\Extensions\mmdkdncigplhkbhcfifnimpdficjhhnn\1.0.18.104_0\manifest.json, Žádná uživatelská akce, [14461], [443243],1.0.9106
Backdoor.NetWiredRC, C:\USERS\RADKA\APPDATA\ROAMING\SYSTEM32\SHOSTS.EXE, Žádná uživatelská akce, [3775], [405085],1.0.9106
Trojan.MalPack.MSIL.Generic, C:\USERS\RADKA\APPDATA\ROAMING\SYTES.EXE, Žádná uživatelská akce, [10027], [581257],1.0.9106
Trojan.MalPack.MSIL.Generic, C:\USERS\RADKA\APPDATA\LOCAL\TEMP\XMXE3WU.PUTTY.EXE, Žádná uživatelská akce, [10027], [584865],1.0.9106
PUP.Optional.SlimCleanerPlus, C:\USERS\RADKA\DOWNLOADS\SLIMDRIVERS-SETUP.EXE, Žádná uživatelská akce, [1483], [472306],1.0.9106
Generic.Malware/Suspicious, C:\USERS\RADKA\DOWNLOADS\IZARC_SETUP.EXE, Žádná uživatelská akce, [0], [392686],1.0.9106
PUP.Optional.OpenCandy, C:\USERS\RADKA\DOWNLOADS\PHOTOSCAPE_V3.7.EXE, Žádná uživatelská akce, [1117], [297667],1.0.9106
PUP.Optional.Seznam, C:\USERS\RADKA\DOWNLOADS\PICASA39-SETUP.EXE, Žádná uživatelská akce, [579], [623984],1.0.9106
PUP.Optional.Seznam, C:\USERS\RADKA\DOWNLOADS\TRIAL_VEGASPRO15_DLM.EXE, Žádná uživatelská akce, [579], [623984],1.0.9106
PUP.Optional.SlimCleanerPlus, C:\USERS\RADKA\DOWNLOADS\SLIMDRIVERS-SETUP (1).EXE, Žádná uživatelská akce, [1483], [472306],1.0.9106
PUP.Optional.SlimCleanerPlus, C:\WINDOWS\INSTALLER\1F86DB0.MSI, Žádná uživatelská akce, [1483], [472306],1.0.9106

Fyzický sektor: 0
(Nebyly zjištěny žádné škodlivé položky)

WMI: 0
(Nebyly zjištěny žádné škodlivé položky)


(end)