Tak jsem tu zase - PC se chová divně. Pracuji s MS Excel a převáděním dat a je to jaksi nestabilní, těžko se to popisuje. Příčinou může být myš, ale v nastavení se nic nezměnilo. Soubory se otvírají a zavírají příliš zrychleně, mimo kontrolu, špatně se pracuje s daty v MS excel, protože to neustále "ulítává", občas blbnou i jiné soubory. PC je jinak pomalejší, než by bylo žádoucí.
Vím, že je to dost nespecifické, ale asi tam je nějaký "rušič", potřebovala bych ho raději vyloučit. Takže zčásti jako preventivka, části podezření na nějaké "zlobítko". Moc děkuji za kontrolu logu.
--------------
Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 29-05-2015
Ran by uzivatel (administrator) on NTBACER on 30-05-2015 19:56:44
Running from C:\Documents and Settings\uzivatel\Plocha
Loaded Profiles: uzivatel (Available Profiles: uzivatel)
Platform: Systém Microsoft Windows XP Professional Service Pack 3 (X86) OS Language: Čeština
Internet Explorer Version 8 (Default browser not detected!)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/33 ... scan-tool/
==================== Processes (Whitelisted) =================
(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)
(Avast Software s.r.o.) C:\Program Files\AVAST Software\Avast\AvastUI.exe
(Avast Software s.r.o.) C:\Program Files\AVAST Software\Avast\AvastSvc.exe
(Microsoft Corporation) C:\WINDOWS\system32\wbem\unsecapp.exe
(Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe
(Ghisler Software GmbH) C:\totalcmd\TOTALCMD.EXE
(Mozilla Corporation) C:\Program Files\Mozilla Firefox\plugin-container.exe
==================== Registry (Whitelisted) ==================
(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)
HKLM\...\Run: [AvastUI.exe] => C:\Program Files\AVAST Software\Avast\AvastUI.exe [5515496 2015-05-02] (Avast Software s.r.o.)
ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShell.dll [2015-05-02] (Avast Software s.r.o.)
==================== Internet (Whitelisted) ====================
(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)
HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.microsoft.com/isapi/redir.dl ... r=iesearch
HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.microsoft.com/isapi/redir.dl ... ar=msnhome
HKU\S-1-5-21-343818398-1547161642-1801674531-1003\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.centrum.cz/
URLSearchHook: [S-1-5-21-343818398-1547161642-1801674531-1003] ATTENTION ==> Default URLSearchHook is missing.
SearchScopes: HKU\S-1-5-21-343818398-1547161642-1801674531-1003 -> {012E1000-F331-11DB-8314-0800200C9A66} URL = http://www.google.com/search?q={searchTerms}
BHO: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2015-04-11] (Avast Software s.r.o.)
DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinsta ... s-i586.cab
DPF: {CAFEEFAC-0016-0000-0029-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinsta ... s-i586.cab
DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinsta ... s-i586.cab
DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} http://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab
Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - c:\Program Files\Common Files\Skype\Skype4COM.dll [2011-11-03] (Skype Technologies)
Tcpip\Parameters: [DhcpNameServer] 213.46.172.36 213.46.172.37
FireFox:
========
FF ProfilePath: C:\Documents and Settings\uzivatel\Data aplikací\Mozilla\Firefox\Profiles\1m6ofwn1.default-1430766865906
FF Plugin: @adobe.com/FlashPlayer -> C:\WINDOWS\system32\Macromed\Flash\NPSWF32_16_0_0_305.dll [2015-02-08] ()
FF Plugin: @xstandard.com/XStandard -> C:\Program Files\XStandard\Bin\NPXStandard.dll [2010-11-16] (Belus Technology Inc.)
FF Plugin: Adobe Reader -> C:\Program Files\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll [2014-08-05] (Adobe Systems Inc.)
FF HKLM\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\AVAST Software\Avast\WebRep\FF
FF Extension: Avast Online Security - C:\Program Files\AVAST Software\Avast\WebRep\FF [2011-05-08]
Chrome:
=======
CHR HKLM\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChrome.crx [2015-03-18]
========================== Services (Whitelisted) =================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [343336 2015-05-02] (Avast Software s.r.o.)
S2 MBAMService; C:\Program Files\Malwarebytes Anti-Malware\mbamservice.exe [1080120 2015-04-14] (Malwarebytes Corporation)
==================== Drivers (Whitelisted) ====================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
S3 AR5416; C:\WINDOWS\System32\DRIVERS\athw.sys [1585728 2009-09-30] (Atheros Communications, Inc.)
R2 aswHwid; C:\WINDOWS\system32\drivers\aswHwid.sys [24144 2015-05-02] ()
R2 aswMonFlt; C:\WINDOWS\system32\drivers\aswMonFlt.sys [74976 2015-05-02] (Avast Software s.r.o.)
R1 aswRdr; C:\WINDOWS\system32\drivers\aswRdr.sys [55200 2015-05-02] (Avast Software s.r.o.)
R0 aswRvrt; C:\WINDOWS\system32\Drivers\aswRvrt.sys [49904 2015-05-02] ()
R1 aswSnx; C:\WINDOWS\system32\drivers\aswSnx.sys [787760 2015-05-02] (Avast Software s.r.o.)
R1 aswSP; C:\WINDOWS\system32\drivers\aswSP.sys [427992 2015-05-02] (Avast Software s.r.o.)
R1 aswTdi; C:\WINDOWS\system32\drivers\aswTdi.sys [57888 2015-05-02] (Avast Software s.r.o.)
R0 aswVmm; C:\WINDOWS\system32\Drivers\aswVmm.sys [209048 2015-05-02] ()
R2 Ethpdrv; C:\WINDOWS\System32\DRIVERS\ethpdrv.sys [9728 2005-09-08] (Gemfor s.r.o.) [File not signed]
S3 IntcHdmiAddService; C:\WINDOWS\System32\drivers\IntcHdmi.sys [105984 2007-05-05] (Intel(R) Corporation) [File not signed]
S3 ipw_bus; C:\WINDOWS\System32\DRIVERS\ipw_bus.sys [58320 2005-09-27] (MCCI)
S3 ipw_mdfl; C:\WINDOWS\System32\DRIVERS\ipw_mdfl.sys [8272 2005-09-27] (MCCI)
S3 ipw_mdm; C:\WINDOWS\System32\DRIVERS\ipw_mdm.sys [95440 2005-09-27] (MCCI)
S3 MBAMProtector; C:\WINDOWS\system32\drivers\mbam.sys [23256 2015-04-14] (Malwarebytes Corporation)
R3 tap0901; C:\WINDOWS\System32\DRIVERS\tap0901.sys [35288 2013-08-22] (The OpenVPN Project)
==================== NetSvcs (Whitelisted) ===================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
==================== One Month Created files and folders ========
(If an entry is included in the fixlist, the file/folder will be moved.)
2015-05-30 19:48 - 2015-05-30 19:48 - 00000325 _____ () C:\Documents and Settings\uzivatel\Plocha\Addition.txt
2015-05-30 19:47 - 2015-05-30 19:56 - 00006506 _____ () C:\Documents and Settings\uzivatel\Plocha\FRST.txt
2015-05-30 19:47 - 2015-05-30 19:47 - 00000000 ____D () C:\Documents and Settings\uzivatel\Plocha\FRST-OlderVersion
2015-05-30 19:46 - 2015-05-30 19:46 - 00000000 ____D () C:\Documents and Settings\All Users\Nabídka Start\Programy\Malwarebytes Anti-Malware
2015-05-30 19:45 - 2015-05-30 19:46 - 00000000 ____D () C:\Program Files\Malwarebytes Anti-Malware
2015-05-30 19:45 - 2015-04-14 09:37 - 00120024 _____ (Malwarebytes Corporation) C:\WINDOWS\system32\Drivers\mbamchameleon.sys
2015-05-30 19:45 - 2015-04-14 09:37 - 00023256 _____ (Malwarebytes Corporation) C:\WINDOWS\system32\Drivers\mbam.sys
2015-05-24 19:38 - 2015-05-24 19:40 - 00000000 ____D () C:\Documents and Settings\uzivatel\Dokumenty\2015-05-24
2015-05-18 22:59 - 2015-05-20 17:19 - 00000000 ____D () C:\Program Files\Mozilla Firefox
2015-05-13 18:39 - 2015-05-14 20:16 - 00000000 ____D () C:\My Web Sites
2015-05-13 18:31 - 2015-05-13 18:31 - 00000706 _____ () C:\Documents and Settings\uzivatel\Plocha\HTTrack Website Copier.lnk
2015-05-13 18:31 - 2015-05-13 18:31 - 00000000 ____D () C:\Program Files\WinHTTrack
2015-05-13 18:31 - 2015-05-13 18:31 - 00000000 ____D () C:\Documents and Settings\All Users\Nabídka Start\Programy\WinHTTrack
2015-05-10 20:04 - 2015-05-23 20:58 - 00000000 ____D () C:\Documents and Settings\uzivatel\Dokumenty\skeny
2015-05-04 21:14 - 2015-05-04 21:14 - 00000000 ____D () C:\Documents and Settings\uzivatel\Plocha\Původní data aplikace Firefox
2015-05-02 13:52 - 2015-05-02 13:53 - 00000000 ____D () C:\Documents and Settings\uzivatel\Dokumenty\mi osmaci
2015-05-02 13:29 - 2015-05-02 13:29 - 00291312 _____ (Avast Software s.r.o.) C:\WINDOWS\system32\aswBoot.exe
2015-05-02 13:29 - 2015-05-02 13:29 - 00043112 _____ (Avast Software s.r.o.) C:\WINDOWS\avastSS.scr
==================== One Month Modified files and folders ========
(If an entry is included in the fixlist, the file/folder will be moved.)
2015-05-30 19:56 - 2015-03-23 00:37 - 00000000 ____D () C:\FRST
2015-05-30 19:56 - 2015-03-22 13:53 - 00000000 ____D () C:\Documents and Settings\uzivatel\Local Settings\Temp
2015-05-30 19:48 - 2009-12-23 01:59 - 00000000 ____D () C:\Documents and Settings\uzivatel\Plocha
2015-05-30 19:47 - 2015-03-23 00:36 - 01147392 _____ (Farbar) C:\Documents and Settings\uzivatel\Plocha\FRST.exe
2015-05-30 19:46 - 2009-12-23 02:44 - 00000000 ___RD () C:\Documents and Settings\All Users\Nabídka Start\Programy
2015-05-30 19:46 - 2009-12-23 02:44 - 00000000 ____D () C:\Documents and Settings\All Users\Plocha
2015-05-30 19:42 - 2010-03-14 14:26 - 00000000 ____D () C:\Documents and Settings\uzivatel\Dokumenty\Stažené soubory
2015-05-30 19:00 - 2009-12-23 01:59 - 00000000 ____D () C:\Documents and Settings\uzivatel
2015-05-30 18:04 - 2014-09-16 21:18 - 00000000 ____D () C:\Program Files\CCleaner
2015-05-30 18:04 - 2011-01-15 09:44 - 00000682 _____ () C:\Documents and Settings\All Users\Plocha\CCleaner.lnk
2015-05-30 13:57 - 2009-12-23 01:59 - 00000000 ___RD () C:\Documents and Settings\uzivatel\Dokumenty
2015-05-30 08:26 - 2009-12-23 02:45 - 00928972 _____ () C:\WINDOWS\system32\PerfStringBackup.INI
2015-05-30 08:22 - 2009-12-23 01:54 - 01341485 ____N () C:\WINDOWS\WindowsUpdate.log
2015-05-30 08:21 - 2009-12-23 02:48 - 00000159 ____N () C:\WINDOWS\wiadebug.log
2015-05-30 08:21 - 2009-12-23 02:48 - 00000049 ____N () C:\WINDOWS\wiaservc.log
2015-05-29 22:56 - 2009-12-23 01:59 - 00000272 ___SH () C:\Documents and Settings\uzivatel\ntuser.ini
2015-05-29 19:15 - 2001-10-25 18:00 - 00002206 _____ () C:\WINDOWS\system32\wpa.dbl
2015-05-28 20:01 - 2014-09-18 21:36 - 00002563 _____ () C:\Documents and Settings\uzivatel\Plocha\Microsoft Office Word 2007.lnk
2015-05-28 19:20 - 2009-12-23 01:59 - 00000000 ___RD () C:\Documents and Settings\uzivatel\Dokumenty\Obrázky
2015-05-28 18:49 - 2015-03-21 23:14 - 00000000 ____D () C:\Documents and Settings\uzivatel\Dokumenty\osmaci
2015-05-28 18:43 - 2010-05-23 20:11 - 00155588 ____H () C:\treeinfo.wc
2015-05-28 18:16 - 2011-08-06 11:24 - 00000000 ____D () C:\Documents and Settings\uzivatel\Dokumenty\prace
2015-05-24 19:40 - 2014-05-07 19:38 - 00036363 _____ () C:\WINDOWS\CSTBox.INI
2015-05-23 20:56 - 2013-06-22 18:43 - 00000000 ____D () C:\Documents and Settings\uzivatel\Dokumenty\recepty
2015-05-23 20:54 - 2010-05-25 13:44 - 00000000 ____D () C:\Documents and Settings\uzivatel\Dokumenty\rodiny
2015-05-23 20:54 - 2010-01-15 18:29 - 00000000 ____D () C:\Documents and Settings\uzivatel\Dokumenty\works
2015-05-23 11:01 - 2014-09-18 21:36 - 00002477 _____ () C:\Documents and Settings\uzivatel\Plocha\Microsoft Office Excel 2007.lnk
2015-05-20 17:19 - 2014-09-18 20:33 - 00000000 ____D () C:\Program Files\Mozilla Maintenance Service
2015-05-17 10:11 - 2010-01-15 18:35 - 00000000 ____D () C:\Documents and Settings\uzivatel\Dokumenty\ROCENKY
2015-05-17 08:51 - 2010-12-05 21:29 - 00000000 ____D () C:\Documents and Settings\uzivatel\Dokumenty\chov dostihy dle zemi
2015-05-17 00:22 - 2010-01-15 18:33 - 00000000 ____D () C:\Documents and Settings\uzivatel\Dokumenty\books
2015-05-14 20:17 - 2009-12-23 02:45 - 00000000 ____D () C:\temp
2015-05-04 23:12 - 2014-03-02 15:10 - 00000000 ____D () C:\Documents and Settings\uzivatel\Dokumenty\www
2015-05-02 13:29 - 2014-08-01 21:32 - 00024144 _____ () C:\WINDOWS\system32\Drivers\aswHwid.sys
2015-05-02 13:29 - 2013-03-17 14:50 - 00209048 _____ () C:\WINDOWS\system32\Drivers\aswVmm.sys
2015-05-02 13:29 - 2013-03-17 14:50 - 00074976 _____ (Avast Software s.r.o.) C:\WINDOWS\system32\Drivers\aswMonFlt.sys
2015-05-02 13:29 - 2013-03-17 14:50 - 00049904 _____ () C:\WINDOWS\system32\Drivers\aswRvrt.sys
2015-05-02 13:29 - 2012-07-09 08:06 - 00000316 ____H () C:\WINDOWS\Tasks\avast! Emergency Update.job
2015-05-02 13:29 - 2011-05-08 08:45 - 00427992 _____ (Avast Software s.r.o.) C:\WINDOWS\system32\Drivers\aswSP.sys
2015-05-02 13:29 - 2011-05-08 08:45 - 00057888 _____ (Avast Software s.r.o.) C:\WINDOWS\system32\Drivers\aswTdi.sys
2015-05-02 13:29 - 2011-05-08 08:45 - 00055200 _____ (Avast Software s.r.o.) C:\WINDOWS\system32\Drivers\aswRdr.sys
2015-05-02 13:28 - 2011-05-08 08:45 - 00787760 _____ (Avast Software s.r.o.) C:\WINDOWS\system32\Drivers\aswSnx.sys
==================== Files in the root of some directories =======
2010-01-09 18:35 - 2013-09-28 01:21 - 0123392 _____ () C:\Documents and Settings\uzivatel\Local Settings\Data aplikací\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
2011-10-16 23:03 - 2012-05-28 23:17 - 0002568 _____ () C:\Documents and Settings\uzivatel\Local Settings\Data aplikací\SRDownloader(1).err
2011-10-16 21:28 - 2012-11-03 15:07 - 0001080 _____ () C:\Documents and Settings\uzivatel\Local Settings\Data aplikací\SRDownloader(1).nast
2010-10-01 22:52 - 2012-08-10 18:48 - 0001064 ____C () C:\Documents and Settings\uzivatel\Local Settings\Data aplikací\SRDownloader.err
2010-10-01 22:59 - 2012-08-10 21:39 - 0001120 ____C () C:\Documents and Settings\uzivatel\Local Settings\Data aplikací\SRDownloader.nast
Some files in TEMP:
====================
C:\Documents and Settings\uzivatel\Local Settings\Temp\RtkBtMnt.exe
==================== Bamital & volsnap Check =================
(There is no automatic fix for files that do not pass verification.)
C:\WINDOWS\explorer.exe => File is digitally signed
C:\WINDOWS\system32\winlogon.exe => File is digitally signed
C:\WINDOWS\system32\svchost.exe => File is digitally signed
C:\WINDOWS\system32\services.exe => File is digitally signed
C:\WINDOWS\system32\User32.dll => File is digitally signed
C:\WINDOWS\system32\userinit.exe => File is digitally signed
C:\WINDOWS\system32\rpcss.dll => File is digitally signed
C:\WINDOWS\system32\Drivers\volsnap.sys => File is digitally signed
==================== End of log ============================
Odvirování PC, zrychlení počítače, vzdálená pomoc prostřednictvím služby neslape.cz
Zlobí to - možná jen myš, možná nějaký rušič v PC
Moderátor: Moderátoři
Pravidla fóra
Jednotlivé thready budou po vyřešení uzamčeny. Stejně tak ty, které budou nečinné déle než 14 dní. Vizte Pravidlo o zamykání témat. Děkujeme za pochopení.
Jednotlivé thready budou po vyřešení uzamčeny. Stejně tak ty, které budou nečinné déle než 14 dní. Vizte Pravidlo o zamykání témat. Děkujeme za pochopení.
-
Rudy
- Site Admin
- Příspěvky: 118256
- Registrován: 30 říj 2003 13:42
- Bydliště: Plzeň
- Kontaktovat uživatele:
Re: Zlobí to - možná jen myš, možná nějaký rušič v PC
Zdravím!
Spusťte tuto utilitu:
Spusťte tuto utilitu:
Stáhněte AdwCleaner http://general-changelog-team.fr/fr/dow ... adwcleaner
Uložte na plochu
Ukončete všechny programy
Klikněte nejprve na >Scan< a pak na >Clean<.
Proběhne skenováni a pak se objeví log, který sem vložte.
Dotazy a logy vkládejte pouze do vašich threadů. Soukromé zprávy, icq a e-maily neslouží k řešení vašich problémů.
Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.
Navštivte:
e-mail: rudy(zavináč)forum.viry.cz
Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!
Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.
Navštivte:
e-mail: rudy(zavináč)forum.viry.cz
Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!
Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Re: Zlobí to - možná jen myš, možná nějaký rušič v PC
Dobrý večer! 
nevypadá to, že by to něco našlo
# AdwCleaner v4.205 - Logfile created 30/05/2015 at 22:10:39
# Updated 21/05/2015 by Xplode
# Database : 2015-05-21.2 [Local]
# Operating system : Microsoft Windows XP Service Pack 3 (x86)
# Username : uzivatel - NTBACER
# Running from : c:\Documents and Settings\uzivatel\Dokumenty\Stažené soubory\adwcleaner_4.205.exe
# Option : Cleaning
***** [ Services ] *****
***** [ Files / Folders ] *****
File Deleted : C:\Documents and Settings\uzivatel\Local Settings\Data aplikací\Comodo\Dragon\User Data\Default\Local Storage\chrome-extension_cmaiofennmphjldldcpphcechfnnohja_0.localstorage
***** [ Scheduled tasks ] *****
***** [ Shortcuts ] *****
***** [ Registry ] *****
***** [ Web browsers ] *****
-\\ Internet Explorer v0.0.0.0
-\\ Mozilla Firefox v38.0.1 (x86 cs)
-\\ Comodo Dragon v
*************************
AdwCleaner[R0].txt - [999 bytes] - [30/05/2015 22:08:53]
AdwCleaner[S0].txt - [927 bytes] - [30/05/2015 22:10:39]
########## EOF - C:\AdwCleaner\AdwCleaner[S0].txt - [985 bytes] ##########
nevypadá to, že by to něco našlo
# AdwCleaner v4.205 - Logfile created 30/05/2015 at 22:10:39
# Updated 21/05/2015 by Xplode
# Database : 2015-05-21.2 [Local]
# Operating system : Microsoft Windows XP Service Pack 3 (x86)
# Username : uzivatel - NTBACER
# Running from : c:\Documents and Settings\uzivatel\Dokumenty\Stažené soubory\adwcleaner_4.205.exe
# Option : Cleaning
***** [ Services ] *****
***** [ Files / Folders ] *****
File Deleted : C:\Documents and Settings\uzivatel\Local Settings\Data aplikací\Comodo\Dragon\User Data\Default\Local Storage\chrome-extension_cmaiofennmphjldldcpphcechfnnohja_0.localstorage
***** [ Scheduled tasks ] *****
***** [ Shortcuts ] *****
***** [ Registry ] *****
***** [ Web browsers ] *****
-\\ Internet Explorer v0.0.0.0
-\\ Mozilla Firefox v38.0.1 (x86 cs)
-\\ Comodo Dragon v
*************************
AdwCleaner[R0].txt - [999 bytes] - [30/05/2015 22:08:53]
AdwCleaner[S0].txt - [927 bytes] - [30/05/2015 22:10:39]
########## EOF - C:\AdwCleaner\AdwCleaner[S0].txt - [985 bytes] ##########
-
Rudy
- Site Admin
- Příspěvky: 118256
- Registrován: 30 říj 2003 13:42
- Bydliště: Plzeň
- Kontaktovat uživatele:
Re: Zlobí to - možná jen myš, možná nějaký rušič v PC
Dejte nový log FRST.
Dotazy a logy vkládejte pouze do vašich threadů. Soukromé zprávy, icq a e-maily neslouží k řešení vašich problémů.
Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.
Navštivte:
e-mail: rudy(zavináč)forum.viry.cz
Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!
Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.
Navštivte:
e-mail: rudy(zavináč)forum.viry.cz
Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!
Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Re: Zlobí to - možná jen myš, možná nějaký rušič v PC
Zde je:)
Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 29-05-2015
Ran by uzivatel (administrator) on NTBACER on 30-05-2015 23:04:59
Running from C:\Documents and Settings\uzivatel\Plocha
Loaded Profiles: uzivatel (Available Profiles: uzivatel)
Platform: Systém Microsoft Windows XP Professional Service Pack 3 (X86) OS Language: Čeština
Internet Explorer Version 8 (Default browser not detected!)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/33 ... scan-tool/
==================== Processes (Whitelisted) =================
(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)
(Avast Software s.r.o.) C:\Program Files\AVAST Software\Avast\AvastUI.exe
(Avast Software s.r.o.) C:\Program Files\AVAST Software\Avast\AvastSvc.exe
(Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe
(Microsoft Corporation) C:\WINDOWS\system32\wbem\unsecapp.exe
(Ghisler Software GmbH) C:\totalcmd\TOTALCMD.EXE
(Microsoft Corporation) C:\Program Files\Microsoft Office\Office12\EXCEL.EXE
(Mozilla Corporation) C:\Program Files\Mozilla Firefox\plugin-container.exe
==================== Registry (Whitelisted) ==================
(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)
HKLM\...\Run: [AvastUI.exe] => C:\Program Files\AVAST Software\Avast\AvastUI.exe [5515496 2015-05-02] (Avast Software s.r.o.)
ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShell.dll [2015-05-02] (Avast Software s.r.o.)
==================== Internet (Whitelisted) ====================
(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)
HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.microsoft.com/isapi/redir.dl ... r=iesearch
HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.microsoft.com/isapi/redir.dl ... ar=msnhome
HKU\S-1-5-21-343818398-1547161642-1801674531-1003\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.centrum.cz/
URLSearchHook: [S-1-5-21-343818398-1547161642-1801674531-1003] ATTENTION ==> Default URLSearchHook is missing.
SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-21-343818398-1547161642-1801674531-1003 -> {012E1000-F331-11DB-8314-0800200C9A66} URL = http://www.google.com/search?q={searchTerms}
BHO: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2015-04-11] (Avast Software s.r.o.)
DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinsta ... s-i586.cab
DPF: {CAFEEFAC-0016-0000-0029-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinsta ... s-i586.cab
DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinsta ... s-i586.cab
DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} http://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab
Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - c:\Program Files\Common Files\Skype\Skype4COM.dll [2011-11-03] (Skype Technologies)
Tcpip\Parameters: [DhcpNameServer] 213.46.172.36 213.46.172.37
FireFox:
========
FF ProfilePath: C:\Documents and Settings\uzivatel\Data aplikací\Mozilla\Firefox\Profiles\1m6ofwn1.default-1430766865906
FF Plugin: @adobe.com/FlashPlayer -> C:\WINDOWS\system32\Macromed\Flash\NPSWF32_16_0_0_305.dll [2015-02-08] ()
FF Plugin: @xstandard.com/XStandard -> C:\Program Files\XStandard\Bin\NPXStandard.dll [2010-11-16] (Belus Technology Inc.)
FF Plugin: Adobe Reader -> C:\Program Files\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll [2014-08-05] (Adobe Systems Inc.)
FF HKLM\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\AVAST Software\Avast\WebRep\FF
FF Extension: Avast Online Security - C:\Program Files\AVAST Software\Avast\WebRep\FF [2011-05-08]
Chrome:
=======
CHR HKLM\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChrome.crx [2015-03-18]
========================== Services (Whitelisted) =================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [343336 2015-05-02] (Avast Software s.r.o.)
S2 MBAMService; C:\Program Files\Malwarebytes Anti-Malware\mbamservice.exe [1080120 2015-04-14] (Malwarebytes Corporation)
==================== Drivers (Whitelisted) ====================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
S3 AR5416; C:\WINDOWS\System32\DRIVERS\athw.sys [1585728 2009-09-30] (Atheros Communications, Inc.)
R2 aswHwid; C:\WINDOWS\system32\drivers\aswHwid.sys [24144 2015-05-02] ()
R2 aswMonFlt; C:\WINDOWS\system32\drivers\aswMonFlt.sys [74976 2015-05-02] (Avast Software s.r.o.)
R1 aswRdr; C:\WINDOWS\system32\drivers\aswRdr.sys [55200 2015-05-02] (Avast Software s.r.o.)
R0 aswRvrt; C:\WINDOWS\system32\Drivers\aswRvrt.sys [49904 2015-05-02] ()
R1 aswSnx; C:\WINDOWS\system32\drivers\aswSnx.sys [787760 2015-05-02] (Avast Software s.r.o.)
R1 aswSP; C:\WINDOWS\system32\drivers\aswSP.sys [427992 2015-05-02] (Avast Software s.r.o.)
R1 aswTdi; C:\WINDOWS\system32\drivers\aswTdi.sys [57888 2015-05-02] (Avast Software s.r.o.)
R0 aswVmm; C:\WINDOWS\system32\Drivers\aswVmm.sys [209048 2015-05-02] ()
R2 Ethpdrv; C:\WINDOWS\System32\DRIVERS\ethpdrv.sys [9728 2005-09-08] (Gemfor s.r.o.) [File not signed]
S3 IntcHdmiAddService; C:\WINDOWS\System32\drivers\IntcHdmi.sys [105984 2007-05-05] (Intel(R) Corporation) [File not signed]
S3 ipw_bus; C:\WINDOWS\System32\DRIVERS\ipw_bus.sys [58320 2005-09-27] (MCCI)
S3 ipw_mdfl; C:\WINDOWS\System32\DRIVERS\ipw_mdfl.sys [8272 2005-09-27] (MCCI)
S3 ipw_mdm; C:\WINDOWS\System32\DRIVERS\ipw_mdm.sys [95440 2005-09-27] (MCCI)
R3 MBAMProtector; C:\WINDOWS\system32\drivers\mbam.sys [23256 2015-04-14] (Malwarebytes Corporation)
R3 tap0901; C:\WINDOWS\System32\DRIVERS\tap0901.sys [35288 2013-08-22] (The OpenVPN Project)
==================== NetSvcs (Whitelisted) ===================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
==================== One Month Created files and folders ========
(If an entry is included in the fixlist, the file/folder will be moved.)
2015-05-30 22:08 - 2015-05-30 22:10 - 00000000 ____D () C:\AdwCleaner
2015-05-30 19:48 - 2015-05-30 19:48 - 00000325 _____ () C:\Documents and Settings\uzivatel\Plocha\Addition.txt
2015-05-30 19:47 - 2015-05-30 23:05 - 00006854 _____ () C:\Documents and Settings\uzivatel\Plocha\FRST.txt
2015-05-30 19:47 - 2015-05-30 19:47 - 00000000 ____D () C:\Documents and Settings\uzivatel\Plocha\FRST-OlderVersion
2015-05-30 19:46 - 2015-05-30 19:46 - 00000000 ____D () C:\Documents and Settings\All Users\Nabídka Start\Programy\Malwarebytes Anti-Malware
2015-05-30 19:45 - 2015-05-30 19:46 - 00000000 ____D () C:\Program Files\Malwarebytes Anti-Malware
2015-05-30 19:45 - 2015-04-14 09:37 - 00120024 _____ (Malwarebytes Corporation) C:\WINDOWS\system32\Drivers\mbamchameleon.sys
2015-05-30 19:45 - 2015-04-14 09:37 - 00023256 _____ (Malwarebytes Corporation) C:\WINDOWS\system32\Drivers\mbam.sys
2015-05-24 19:38 - 2015-05-24 19:40 - 00000000 ____D () C:\Documents and Settings\uzivatel\Dokumenty\2015-05-24
2015-05-18 22:59 - 2015-05-20 17:19 - 00000000 ____D () C:\Program Files\Mozilla Firefox
2015-05-13 18:39 - 2015-05-14 20:16 - 00000000 ____D () C:\My Web Sites
2015-05-13 18:31 - 2015-05-13 18:31 - 00000706 _____ () C:\Documents and Settings\uzivatel\Plocha\HTTrack Website Copier.lnk
2015-05-13 18:31 - 2015-05-13 18:31 - 00000000 ____D () C:\Program Files\WinHTTrack
2015-05-13 18:31 - 2015-05-13 18:31 - 00000000 ____D () C:\Documents and Settings\All Users\Nabídka Start\Programy\WinHTTrack
2015-05-10 20:04 - 2015-05-23 20:58 - 00000000 ____D () C:\Documents and Settings\uzivatel\Dokumenty\skeny
2015-05-04 21:14 - 2015-05-04 21:14 - 00000000 ____D () C:\Documents and Settings\uzivatel\Plocha\Původní data aplikace Firefox
2015-05-02 13:52 - 2015-05-02 13:53 - 00000000 ____D () C:\Documents and Settings\uzivatel\Dokumenty\mi osmaci
2015-05-02 13:29 - 2015-05-02 13:29 - 00291312 _____ (Avast Software s.r.o.) C:\WINDOWS\system32\aswBoot.exe
2015-05-02 13:29 - 2015-05-02 13:29 - 00043112 _____ (Avast Software s.r.o.) C:\WINDOWS\avastSS.scr
==================== One Month Modified files and folders ========
(If an entry is included in the fixlist, the file/folder will be moved.)
2015-05-30 23:06 - 2015-03-22 13:53 - 00000000 ____D () C:\Documents and Settings\uzivatel\Local Settings\Temp
2015-05-30 23:05 - 2015-03-23 00:37 - 00000000 ____D () C:\FRST
2015-05-30 22:17 - 2009-12-23 02:45 - 00928972 _____ () C:\WINDOWS\system32\PerfStringBackup.INI
2015-05-30 22:14 - 2009-12-23 01:54 - 01344675 _____ () C:\WINDOWS\WindowsUpdate.log
2015-05-30 22:13 - 2009-12-23 02:48 - 00000159 _____ () C:\WINDOWS\wiadebug.log
2015-05-30 22:13 - 2009-12-23 02:48 - 00000049 _____ () C:\WINDOWS\wiaservc.log
2015-05-30 22:11 - 2009-12-23 01:59 - 00000272 ___SH () C:\Documents and Settings\uzivatel\ntuser.ini
2015-05-30 22:11 - 2009-12-23 01:59 - 00000000 ____D () C:\Documents and Settings\uzivatel
2015-05-30 22:10 - 2009-12-23 01:58 - 00000178 ___SH () C:\Documents and Settings\LocalService\ntuser.ini
2015-05-30 22:08 - 2010-03-14 14:26 - 00000000 ____D () C:\Documents and Settings\uzivatel\Dokumenty\Stažené soubory
2015-05-30 20:31 - 2010-05-23 20:11 - 00154986 ____H () C:\treeinfo.wc
2015-05-30 20:31 - 2009-12-23 01:59 - 00000000 ___RD () C:\Documents and Settings\uzivatel\Dokumenty
2015-05-30 19:48 - 2009-12-23 01:59 - 00000000 ____D () C:\Documents and Settings\uzivatel\Plocha
2015-05-30 19:47 - 2015-03-23 00:36 - 01147392 _____ (Farbar) C:\Documents and Settings\uzivatel\Plocha\FRST.exe
2015-05-30 19:46 - 2009-12-23 02:44 - 00000000 ___RD () C:\Documents and Settings\All Users\Nabídka Start\Programy
2015-05-30 19:46 - 2009-12-23 02:44 - 00000000 ____D () C:\Documents and Settings\All Users\Plocha
2015-05-30 18:04 - 2014-09-16 21:18 - 00000000 ____D () C:\Program Files\CCleaner
2015-05-30 18:04 - 2011-01-15 09:44 - 00000682 _____ () C:\Documents and Settings\All Users\Plocha\CCleaner.lnk
2015-05-29 19:15 - 2001-10-25 18:00 - 00002206 _____ () C:\WINDOWS\system32\wpa.dbl
2015-05-28 20:01 - 2014-09-18 21:36 - 00002563 _____ () C:\Documents and Settings\uzivatel\Plocha\Microsoft Office Word 2007.lnk
2015-05-28 19:20 - 2009-12-23 01:59 - 00000000 ___RD () C:\Documents and Settings\uzivatel\Dokumenty\Obrázky
2015-05-28 18:49 - 2015-03-21 23:14 - 00000000 ____D () C:\Documents and Settings\uzivatel\Dokumenty\osmaci
2015-05-28 18:16 - 2011-08-06 11:24 - 00000000 ____D () C:\Documents and Settings\uzivatel\Dokumenty\prace
2015-05-24 19:40 - 2014-05-07 19:38 - 00036363 _____ () C:\WINDOWS\CSTBox.INI
2015-05-23 20:56 - 2013-06-22 18:43 - 00000000 ____D () C:\Documents and Settings\uzivatel\Dokumenty\recepty
2015-05-23 20:54 - 2010-05-25 13:44 - 00000000 ____D () C:\Documents and Settings\uzivatel\Dokumenty\rodiny
2015-05-23 20:54 - 2010-01-15 18:29 - 00000000 ____D () C:\Documents and Settings\uzivatel\Dokumenty\works
2015-05-23 11:01 - 2014-09-18 21:36 - 00002477 _____ () C:\Documents and Settings\uzivatel\Plocha\Microsoft Office Excel 2007.lnk
2015-05-20 17:19 - 2014-09-18 20:33 - 00000000 ____D () C:\Program Files\Mozilla Maintenance Service
2015-05-17 10:11 - 2010-01-15 18:35 - 00000000 ____D () C:\Documents and Settings\uzivatel\Dokumenty\ROCENKY
2015-05-17 08:51 - 2010-12-05 21:29 - 00000000 ____D () C:\Documents and Settings\uzivatel\Dokumenty\chov dostihy dle zemi
2015-05-17 00:22 - 2010-01-15 18:33 - 00000000 ____D () C:\Documents and Settings\uzivatel\Dokumenty\books
2015-05-14 20:17 - 2009-12-23 02:45 - 00000000 ____D () C:\temp
2015-05-04 23:12 - 2014-03-02 15:10 - 00000000 ____D () C:\Documents and Settings\uzivatel\Dokumenty\www
2015-05-02 13:29 - 2014-08-01 21:32 - 00024144 _____ () C:\WINDOWS\system32\Drivers\aswHwid.sys
2015-05-02 13:29 - 2013-03-17 14:50 - 00209048 _____ () C:\WINDOWS\system32\Drivers\aswVmm.sys
2015-05-02 13:29 - 2013-03-17 14:50 - 00074976 _____ (Avast Software s.r.o.) C:\WINDOWS\system32\Drivers\aswMonFlt.sys
2015-05-02 13:29 - 2013-03-17 14:50 - 00049904 _____ () C:\WINDOWS\system32\Drivers\aswRvrt.sys
2015-05-02 13:29 - 2012-07-09 08:06 - 00000316 ____H () C:\WINDOWS\Tasks\avast! Emergency Update.job
2015-05-02 13:29 - 2011-05-08 08:45 - 00427992 _____ (Avast Software s.r.o.) C:\WINDOWS\system32\Drivers\aswSP.sys
2015-05-02 13:29 - 2011-05-08 08:45 - 00057888 _____ (Avast Software s.r.o.) C:\WINDOWS\system32\Drivers\aswTdi.sys
2015-05-02 13:29 - 2011-05-08 08:45 - 00055200 _____ (Avast Software s.r.o.) C:\WINDOWS\system32\Drivers\aswRdr.sys
2015-05-02 13:28 - 2011-05-08 08:45 - 00787760 _____ (Avast Software s.r.o.) C:\WINDOWS\system32\Drivers\aswSnx.sys
==================== Files in the root of some directories =======
2010-01-09 18:35 - 2013-09-28 01:21 - 0123392 _____ () C:\Documents and Settings\uzivatel\Local Settings\Data aplikací\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
2011-10-16 23:03 - 2012-05-28 23:17 - 0002568 _____ () C:\Documents and Settings\uzivatel\Local Settings\Data aplikací\SRDownloader(1).err
2011-10-16 21:28 - 2012-11-03 15:07 - 0001080 _____ () C:\Documents and Settings\uzivatel\Local Settings\Data aplikací\SRDownloader(1).nast
2010-10-01 22:52 - 2012-08-10 18:48 - 0001064 ____C () C:\Documents and Settings\uzivatel\Local Settings\Data aplikací\SRDownloader.err
2010-10-01 22:59 - 2012-08-10 21:39 - 0001120 ____C () C:\Documents and Settings\uzivatel\Local Settings\Data aplikací\SRDownloader.nast
Some files in TEMP:
====================
C:\Documents and Settings\uzivatel\Local Settings\Temp\Quarantine.exe
C:\Documents and Settings\uzivatel\Local Settings\Temp\RtkBtMnt.exe
C:\Documents and Settings\uzivatel\Local Settings\Temp\sqlite3.dll
==================== Bamital & volsnap Check =================
(There is no automatic fix for files that do not pass verification.)
C:\WINDOWS\explorer.exe => File is digitally signed
C:\WINDOWS\system32\winlogon.exe => File is digitally signed
C:\WINDOWS\system32\svchost.exe => File is digitally signed
C:\WINDOWS\system32\services.exe => File is digitally signed
C:\WINDOWS\system32\User32.dll => File is digitally signed
C:\WINDOWS\system32\userinit.exe => File is digitally signed
C:\WINDOWS\system32\rpcss.dll => File is digitally signed
C:\WINDOWS\system32\Drivers\volsnap.sys => File is digitally signed
==================== End of log ============================
Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 29-05-2015
Ran by uzivatel (administrator) on NTBACER on 30-05-2015 23:04:59
Running from C:\Documents and Settings\uzivatel\Plocha
Loaded Profiles: uzivatel (Available Profiles: uzivatel)
Platform: Systém Microsoft Windows XP Professional Service Pack 3 (X86) OS Language: Čeština
Internet Explorer Version 8 (Default browser not detected!)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/33 ... scan-tool/
==================== Processes (Whitelisted) =================
(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)
(Avast Software s.r.o.) C:\Program Files\AVAST Software\Avast\AvastUI.exe
(Avast Software s.r.o.) C:\Program Files\AVAST Software\Avast\AvastSvc.exe
(Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe
(Microsoft Corporation) C:\WINDOWS\system32\wbem\unsecapp.exe
(Ghisler Software GmbH) C:\totalcmd\TOTALCMD.EXE
(Microsoft Corporation) C:\Program Files\Microsoft Office\Office12\EXCEL.EXE
(Mozilla Corporation) C:\Program Files\Mozilla Firefox\plugin-container.exe
==================== Registry (Whitelisted) ==================
(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)
HKLM\...\Run: [AvastUI.exe] => C:\Program Files\AVAST Software\Avast\AvastUI.exe [5515496 2015-05-02] (Avast Software s.r.o.)
ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShell.dll [2015-05-02] (Avast Software s.r.o.)
==================== Internet (Whitelisted) ====================
(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)
HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.microsoft.com/isapi/redir.dl ... r=iesearch
HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.microsoft.com/isapi/redir.dl ... ar=msnhome
HKU\S-1-5-21-343818398-1547161642-1801674531-1003\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.centrum.cz/
URLSearchHook: [S-1-5-21-343818398-1547161642-1801674531-1003] ATTENTION ==> Default URLSearchHook is missing.
SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-21-343818398-1547161642-1801674531-1003 -> {012E1000-F331-11DB-8314-0800200C9A66} URL = http://www.google.com/search?q={searchTerms}
BHO: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2015-04-11] (Avast Software s.r.o.)
DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinsta ... s-i586.cab
DPF: {CAFEEFAC-0016-0000-0029-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinsta ... s-i586.cab
DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinsta ... s-i586.cab
DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} http://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab
Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - c:\Program Files\Common Files\Skype\Skype4COM.dll [2011-11-03] (Skype Technologies)
Tcpip\Parameters: [DhcpNameServer] 213.46.172.36 213.46.172.37
FireFox:
========
FF ProfilePath: C:\Documents and Settings\uzivatel\Data aplikací\Mozilla\Firefox\Profiles\1m6ofwn1.default-1430766865906
FF Plugin: @adobe.com/FlashPlayer -> C:\WINDOWS\system32\Macromed\Flash\NPSWF32_16_0_0_305.dll [2015-02-08] ()
FF Plugin: @xstandard.com/XStandard -> C:\Program Files\XStandard\Bin\NPXStandard.dll [2010-11-16] (Belus Technology Inc.)
FF Plugin: Adobe Reader -> C:\Program Files\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll [2014-08-05] (Adobe Systems Inc.)
FF HKLM\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\AVAST Software\Avast\WebRep\FF
FF Extension: Avast Online Security - C:\Program Files\AVAST Software\Avast\WebRep\FF [2011-05-08]
Chrome:
=======
CHR HKLM\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChrome.crx [2015-03-18]
========================== Services (Whitelisted) =================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [343336 2015-05-02] (Avast Software s.r.o.)
S2 MBAMService; C:\Program Files\Malwarebytes Anti-Malware\mbamservice.exe [1080120 2015-04-14] (Malwarebytes Corporation)
==================== Drivers (Whitelisted) ====================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
S3 AR5416; C:\WINDOWS\System32\DRIVERS\athw.sys [1585728 2009-09-30] (Atheros Communications, Inc.)
R2 aswHwid; C:\WINDOWS\system32\drivers\aswHwid.sys [24144 2015-05-02] ()
R2 aswMonFlt; C:\WINDOWS\system32\drivers\aswMonFlt.sys [74976 2015-05-02] (Avast Software s.r.o.)
R1 aswRdr; C:\WINDOWS\system32\drivers\aswRdr.sys [55200 2015-05-02] (Avast Software s.r.o.)
R0 aswRvrt; C:\WINDOWS\system32\Drivers\aswRvrt.sys [49904 2015-05-02] ()
R1 aswSnx; C:\WINDOWS\system32\drivers\aswSnx.sys [787760 2015-05-02] (Avast Software s.r.o.)
R1 aswSP; C:\WINDOWS\system32\drivers\aswSP.sys [427992 2015-05-02] (Avast Software s.r.o.)
R1 aswTdi; C:\WINDOWS\system32\drivers\aswTdi.sys [57888 2015-05-02] (Avast Software s.r.o.)
R0 aswVmm; C:\WINDOWS\system32\Drivers\aswVmm.sys [209048 2015-05-02] ()
R2 Ethpdrv; C:\WINDOWS\System32\DRIVERS\ethpdrv.sys [9728 2005-09-08] (Gemfor s.r.o.) [File not signed]
S3 IntcHdmiAddService; C:\WINDOWS\System32\drivers\IntcHdmi.sys [105984 2007-05-05] (Intel(R) Corporation) [File not signed]
S3 ipw_bus; C:\WINDOWS\System32\DRIVERS\ipw_bus.sys [58320 2005-09-27] (MCCI)
S3 ipw_mdfl; C:\WINDOWS\System32\DRIVERS\ipw_mdfl.sys [8272 2005-09-27] (MCCI)
S3 ipw_mdm; C:\WINDOWS\System32\DRIVERS\ipw_mdm.sys [95440 2005-09-27] (MCCI)
R3 MBAMProtector; C:\WINDOWS\system32\drivers\mbam.sys [23256 2015-04-14] (Malwarebytes Corporation)
R3 tap0901; C:\WINDOWS\System32\DRIVERS\tap0901.sys [35288 2013-08-22] (The OpenVPN Project)
==================== NetSvcs (Whitelisted) ===================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
==================== One Month Created files and folders ========
(If an entry is included in the fixlist, the file/folder will be moved.)
2015-05-30 22:08 - 2015-05-30 22:10 - 00000000 ____D () C:\AdwCleaner
2015-05-30 19:48 - 2015-05-30 19:48 - 00000325 _____ () C:\Documents and Settings\uzivatel\Plocha\Addition.txt
2015-05-30 19:47 - 2015-05-30 23:05 - 00006854 _____ () C:\Documents and Settings\uzivatel\Plocha\FRST.txt
2015-05-30 19:47 - 2015-05-30 19:47 - 00000000 ____D () C:\Documents and Settings\uzivatel\Plocha\FRST-OlderVersion
2015-05-30 19:46 - 2015-05-30 19:46 - 00000000 ____D () C:\Documents and Settings\All Users\Nabídka Start\Programy\Malwarebytes Anti-Malware
2015-05-30 19:45 - 2015-05-30 19:46 - 00000000 ____D () C:\Program Files\Malwarebytes Anti-Malware
2015-05-30 19:45 - 2015-04-14 09:37 - 00120024 _____ (Malwarebytes Corporation) C:\WINDOWS\system32\Drivers\mbamchameleon.sys
2015-05-30 19:45 - 2015-04-14 09:37 - 00023256 _____ (Malwarebytes Corporation) C:\WINDOWS\system32\Drivers\mbam.sys
2015-05-24 19:38 - 2015-05-24 19:40 - 00000000 ____D () C:\Documents and Settings\uzivatel\Dokumenty\2015-05-24
2015-05-18 22:59 - 2015-05-20 17:19 - 00000000 ____D () C:\Program Files\Mozilla Firefox
2015-05-13 18:39 - 2015-05-14 20:16 - 00000000 ____D () C:\My Web Sites
2015-05-13 18:31 - 2015-05-13 18:31 - 00000706 _____ () C:\Documents and Settings\uzivatel\Plocha\HTTrack Website Copier.lnk
2015-05-13 18:31 - 2015-05-13 18:31 - 00000000 ____D () C:\Program Files\WinHTTrack
2015-05-13 18:31 - 2015-05-13 18:31 - 00000000 ____D () C:\Documents and Settings\All Users\Nabídka Start\Programy\WinHTTrack
2015-05-10 20:04 - 2015-05-23 20:58 - 00000000 ____D () C:\Documents and Settings\uzivatel\Dokumenty\skeny
2015-05-04 21:14 - 2015-05-04 21:14 - 00000000 ____D () C:\Documents and Settings\uzivatel\Plocha\Původní data aplikace Firefox
2015-05-02 13:52 - 2015-05-02 13:53 - 00000000 ____D () C:\Documents and Settings\uzivatel\Dokumenty\mi osmaci
2015-05-02 13:29 - 2015-05-02 13:29 - 00291312 _____ (Avast Software s.r.o.) C:\WINDOWS\system32\aswBoot.exe
2015-05-02 13:29 - 2015-05-02 13:29 - 00043112 _____ (Avast Software s.r.o.) C:\WINDOWS\avastSS.scr
==================== One Month Modified files and folders ========
(If an entry is included in the fixlist, the file/folder will be moved.)
2015-05-30 23:06 - 2015-03-22 13:53 - 00000000 ____D () C:\Documents and Settings\uzivatel\Local Settings\Temp
2015-05-30 23:05 - 2015-03-23 00:37 - 00000000 ____D () C:\FRST
2015-05-30 22:17 - 2009-12-23 02:45 - 00928972 _____ () C:\WINDOWS\system32\PerfStringBackup.INI
2015-05-30 22:14 - 2009-12-23 01:54 - 01344675 _____ () C:\WINDOWS\WindowsUpdate.log
2015-05-30 22:13 - 2009-12-23 02:48 - 00000159 _____ () C:\WINDOWS\wiadebug.log
2015-05-30 22:13 - 2009-12-23 02:48 - 00000049 _____ () C:\WINDOWS\wiaservc.log
2015-05-30 22:11 - 2009-12-23 01:59 - 00000272 ___SH () C:\Documents and Settings\uzivatel\ntuser.ini
2015-05-30 22:11 - 2009-12-23 01:59 - 00000000 ____D () C:\Documents and Settings\uzivatel
2015-05-30 22:10 - 2009-12-23 01:58 - 00000178 ___SH () C:\Documents and Settings\LocalService\ntuser.ini
2015-05-30 22:08 - 2010-03-14 14:26 - 00000000 ____D () C:\Documents and Settings\uzivatel\Dokumenty\Stažené soubory
2015-05-30 20:31 - 2010-05-23 20:11 - 00154986 ____H () C:\treeinfo.wc
2015-05-30 20:31 - 2009-12-23 01:59 - 00000000 ___RD () C:\Documents and Settings\uzivatel\Dokumenty
2015-05-30 19:48 - 2009-12-23 01:59 - 00000000 ____D () C:\Documents and Settings\uzivatel\Plocha
2015-05-30 19:47 - 2015-03-23 00:36 - 01147392 _____ (Farbar) C:\Documents and Settings\uzivatel\Plocha\FRST.exe
2015-05-30 19:46 - 2009-12-23 02:44 - 00000000 ___RD () C:\Documents and Settings\All Users\Nabídka Start\Programy
2015-05-30 19:46 - 2009-12-23 02:44 - 00000000 ____D () C:\Documents and Settings\All Users\Plocha
2015-05-30 18:04 - 2014-09-16 21:18 - 00000000 ____D () C:\Program Files\CCleaner
2015-05-30 18:04 - 2011-01-15 09:44 - 00000682 _____ () C:\Documents and Settings\All Users\Plocha\CCleaner.lnk
2015-05-29 19:15 - 2001-10-25 18:00 - 00002206 _____ () C:\WINDOWS\system32\wpa.dbl
2015-05-28 20:01 - 2014-09-18 21:36 - 00002563 _____ () C:\Documents and Settings\uzivatel\Plocha\Microsoft Office Word 2007.lnk
2015-05-28 19:20 - 2009-12-23 01:59 - 00000000 ___RD () C:\Documents and Settings\uzivatel\Dokumenty\Obrázky
2015-05-28 18:49 - 2015-03-21 23:14 - 00000000 ____D () C:\Documents and Settings\uzivatel\Dokumenty\osmaci
2015-05-28 18:16 - 2011-08-06 11:24 - 00000000 ____D () C:\Documents and Settings\uzivatel\Dokumenty\prace
2015-05-24 19:40 - 2014-05-07 19:38 - 00036363 _____ () C:\WINDOWS\CSTBox.INI
2015-05-23 20:56 - 2013-06-22 18:43 - 00000000 ____D () C:\Documents and Settings\uzivatel\Dokumenty\recepty
2015-05-23 20:54 - 2010-05-25 13:44 - 00000000 ____D () C:\Documents and Settings\uzivatel\Dokumenty\rodiny
2015-05-23 20:54 - 2010-01-15 18:29 - 00000000 ____D () C:\Documents and Settings\uzivatel\Dokumenty\works
2015-05-23 11:01 - 2014-09-18 21:36 - 00002477 _____ () C:\Documents and Settings\uzivatel\Plocha\Microsoft Office Excel 2007.lnk
2015-05-20 17:19 - 2014-09-18 20:33 - 00000000 ____D () C:\Program Files\Mozilla Maintenance Service
2015-05-17 10:11 - 2010-01-15 18:35 - 00000000 ____D () C:\Documents and Settings\uzivatel\Dokumenty\ROCENKY
2015-05-17 08:51 - 2010-12-05 21:29 - 00000000 ____D () C:\Documents and Settings\uzivatel\Dokumenty\chov dostihy dle zemi
2015-05-17 00:22 - 2010-01-15 18:33 - 00000000 ____D () C:\Documents and Settings\uzivatel\Dokumenty\books
2015-05-14 20:17 - 2009-12-23 02:45 - 00000000 ____D () C:\temp
2015-05-04 23:12 - 2014-03-02 15:10 - 00000000 ____D () C:\Documents and Settings\uzivatel\Dokumenty\www
2015-05-02 13:29 - 2014-08-01 21:32 - 00024144 _____ () C:\WINDOWS\system32\Drivers\aswHwid.sys
2015-05-02 13:29 - 2013-03-17 14:50 - 00209048 _____ () C:\WINDOWS\system32\Drivers\aswVmm.sys
2015-05-02 13:29 - 2013-03-17 14:50 - 00074976 _____ (Avast Software s.r.o.) C:\WINDOWS\system32\Drivers\aswMonFlt.sys
2015-05-02 13:29 - 2013-03-17 14:50 - 00049904 _____ () C:\WINDOWS\system32\Drivers\aswRvrt.sys
2015-05-02 13:29 - 2012-07-09 08:06 - 00000316 ____H () C:\WINDOWS\Tasks\avast! Emergency Update.job
2015-05-02 13:29 - 2011-05-08 08:45 - 00427992 _____ (Avast Software s.r.o.) C:\WINDOWS\system32\Drivers\aswSP.sys
2015-05-02 13:29 - 2011-05-08 08:45 - 00057888 _____ (Avast Software s.r.o.) C:\WINDOWS\system32\Drivers\aswTdi.sys
2015-05-02 13:29 - 2011-05-08 08:45 - 00055200 _____ (Avast Software s.r.o.) C:\WINDOWS\system32\Drivers\aswRdr.sys
2015-05-02 13:28 - 2011-05-08 08:45 - 00787760 _____ (Avast Software s.r.o.) C:\WINDOWS\system32\Drivers\aswSnx.sys
==================== Files in the root of some directories =======
2010-01-09 18:35 - 2013-09-28 01:21 - 0123392 _____ () C:\Documents and Settings\uzivatel\Local Settings\Data aplikací\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
2011-10-16 23:03 - 2012-05-28 23:17 - 0002568 _____ () C:\Documents and Settings\uzivatel\Local Settings\Data aplikací\SRDownloader(1).err
2011-10-16 21:28 - 2012-11-03 15:07 - 0001080 _____ () C:\Documents and Settings\uzivatel\Local Settings\Data aplikací\SRDownloader(1).nast
2010-10-01 22:52 - 2012-08-10 18:48 - 0001064 ____C () C:\Documents and Settings\uzivatel\Local Settings\Data aplikací\SRDownloader.err
2010-10-01 22:59 - 2012-08-10 21:39 - 0001120 ____C () C:\Documents and Settings\uzivatel\Local Settings\Data aplikací\SRDownloader.nast
Some files in TEMP:
====================
C:\Documents and Settings\uzivatel\Local Settings\Temp\Quarantine.exe
C:\Documents and Settings\uzivatel\Local Settings\Temp\RtkBtMnt.exe
C:\Documents and Settings\uzivatel\Local Settings\Temp\sqlite3.dll
==================== Bamital & volsnap Check =================
(There is no automatic fix for files that do not pass verification.)
C:\WINDOWS\explorer.exe => File is digitally signed
C:\WINDOWS\system32\winlogon.exe => File is digitally signed
C:\WINDOWS\system32\svchost.exe => File is digitally signed
C:\WINDOWS\system32\services.exe => File is digitally signed
C:\WINDOWS\system32\User32.dll => File is digitally signed
C:\WINDOWS\system32\userinit.exe => File is digitally signed
C:\WINDOWS\system32\rpcss.dll => File is digitally signed
C:\WINDOWS\system32\Drivers\volsnap.sys => File is digitally signed
==================== End of log ============================
-
Rudy
- Site Admin
- Příspěvky: 118256
- Registrován: 30 říj 2003 13:42
- Bydliště: Plzeň
- Kontaktovat uživatele:
Re: Zlobí to - možná jen myš, možná nějaký rušič v PC
Otevřte poznámkový blok a zkopírujte do něj:
Uložte na plochu jako fixlist.txt. Spusťte znovu FRST a klikněte na >Fix<. Po skončení akce se objeví log, který sem zkopírujte.Start
SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
C:\WINDOWS\system32\wpa.dbl
C:\Documents and Settings\uzivatel\Local Settings\Temp
End
Dotazy a logy vkládejte pouze do vašich threadů. Soukromé zprávy, icq a e-maily neslouží k řešení vašich problémů.
Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.
Navštivte:
e-mail: rudy(zavináč)forum.viry.cz
Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!
Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.
Navštivte:
e-mail: rudy(zavináč)forum.viry.cz
Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!
Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Re: Zlobí to - možná jen myš, možná nějaký rušič v PC
Provedeno a nový:
Fix result of Farbar Recovery Scan Tool (x86) Version: 29-05-2015
Ran by uzivatel at 2015-06-01 20:35:19 Run:2
Running from C:\Documents and Settings\uzivatel\Plocha
Loaded Profiles: uzivatel (Available Profiles: uzivatel)
Boot Mode: Normal
==============================================
fixlist content:
*****************
Start
SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
C:\WINDOWS\system32\wpa.dbl
C:\Documents and Settings\uzivatel\Local Settings\Temp
End
*****************
HKU\.DEFAULT\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope => value Removed successfully.
HKU\S-1-5-19\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope => value Removed successfully.
HKU\S-1-5-20\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope => value Removed successfully.
C:\WINDOWS\system32\wpa.dbl => Moved successfully.
C:\Documents and Settings\uzivatel\Local Settings\Temp => Moved successfully.
==== End of Fixlog 20:35:20 ====
Fix result of Farbar Recovery Scan Tool (x86) Version: 29-05-2015
Ran by uzivatel at 2015-06-01 20:35:19 Run:2
Running from C:\Documents and Settings\uzivatel\Plocha
Loaded Profiles: uzivatel (Available Profiles: uzivatel)
Boot Mode: Normal
==============================================
fixlist content:
*****************
Start
SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
C:\WINDOWS\system32\wpa.dbl
C:\Documents and Settings\uzivatel\Local Settings\Temp
End
*****************
HKU\.DEFAULT\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope => value Removed successfully.
HKU\S-1-5-19\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope => value Removed successfully.
HKU\S-1-5-20\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope => value Removed successfully.
C:\WINDOWS\system32\wpa.dbl => Moved successfully.
C:\Documents and Settings\uzivatel\Local Settings\Temp => Moved successfully.
==== End of Fixlog 20:35:20 ====
Re: Zlobí to - možná jen myš, možná nějaký rušič v PC
a tady nový FRST
Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 29-05-2015
Ran by uzivatel (administrator) on NTBACER on 01-06-2015 20:37:40
Running from C:\Documents and Settings\uzivatel\Plocha
Loaded Profiles: uzivatel (Available Profiles: uzivatel)
Platform: Systém Microsoft Windows XP Professional Service Pack 3 (X86) OS Language: Čeština
Internet Explorer Version 8 (Default browser not detected!)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/33 ... scan-tool/
==================== Processes (Whitelisted) =================
(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)
==================== Internet (Whitelisted) ====================
(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)
HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.microsoft.com/isapi/redir.dl ... r=iesearch
HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.microsoft.com/isapi/redir.dl ... ar=msnhome
HKU\S-1-5-21-343818398-1547161642-1801674531-1003\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.centrum.cz/
URLSearchHook: [S-1-5-21-343818398-1547161642-1801674531-1003] ATTENTION ==> Default URLSearchHook is missing.
SearchScopes: HKU\S-1-5-21-343818398-1547161642-1801674531-1003 -> {012E1000-F331-11DB-8314-0800200C9A66} URL = http://www.google.com/search?q={searchTerms}
BHO: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2015-04-11] (Avast Software s.r.o.)
DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinsta ... s-i586.cab
DPF: {CAFEEFAC-0016-0000-0029-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinsta ... s-i586.cab
DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinsta ... s-i586.cab
DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} http://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab
Tcpip\Parameters: [DhcpNameServer] 213.46.172.36 213.46.172.37
FireFox:
========
FF ProfilePath: C:\Documents and Settings\uzivatel\Data aplikací\Mozilla\Firefox\Profiles\1m6ofwn1.default-1430766865906
FF Plugin: @adobe.com/FlashPlayer -> C:\WINDOWS\system32\Macromed\Flash\NPSWF32_16_0_0_305.dll [2015-02-08] ()
FF Plugin: @xstandard.com/XStandard -> C:\Program Files\XStandard\Bin\NPXStandard.dll [2010-11-16] (Belus Technology Inc.)
FF Plugin: Adobe Reader -> C:\Program Files\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll [2014-08-05] (Adobe Systems Inc.)
FF HKLM\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\AVAST Software\Avast\WebRep\FF
FF Extension: Avast Online Security - C:\Program Files\AVAST Software\Avast\WebRep\FF [2011-05-08]
Chrome:
=======
CHR HKLM\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChrome.crx [2015-03-18]
==================== NetSvcs (Whitelisted) ===================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
==================== Files in the root of some directories =======
2010-01-09 18:35 - 2013-09-28 01:21 - 0123392 _____ () C:\Documents and Settings\uzivatel\Local Settings\Data aplikací\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
2011-10-16 23:03 - 2012-05-28 23:17 - 0002568 _____ () C:\Documents and Settings\uzivatel\Local Settings\Data aplikací\SRDownloader(1).err
2011-10-16 21:28 - 2012-11-03 15:07 - 0001080 _____ () C:\Documents and Settings\uzivatel\Local Settings\Data aplikací\SRDownloader(1).nast
2010-10-01 22:52 - 2012-08-10 18:48 - 0001064 ____C () C:\Documents and Settings\uzivatel\Local Settings\Data aplikací\SRDownloader.err
2010-10-01 22:59 - 2012-08-10 21:39 - 0001120 ____C () C:\Documents and Settings\uzivatel\Local Settings\Data aplikací\SRDownloader.nast
==================== Bamital & volsnap Check =================
(There is no automatic fix for files that do not pass verification.)
C:\WINDOWS\explorer.exe => File is digitally signed
C:\WINDOWS\system32\winlogon.exe => File is digitally signed
C:\WINDOWS\system32\svchost.exe => File is digitally signed
C:\WINDOWS\system32\services.exe => File is digitally signed
C:\WINDOWS\system32\User32.dll => File is digitally signed
C:\WINDOWS\system32\userinit.exe => File is digitally signed
C:\WINDOWS\system32\rpcss.dll => File is digitally signed
C:\WINDOWS\system32\Drivers\volsnap.sys => File is digitally signed
==================== End of log ============================
Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 29-05-2015
Ran by uzivatel (administrator) on NTBACER on 01-06-2015 20:37:40
Running from C:\Documents and Settings\uzivatel\Plocha
Loaded Profiles: uzivatel (Available Profiles: uzivatel)
Platform: Systém Microsoft Windows XP Professional Service Pack 3 (X86) OS Language: Čeština
Internet Explorer Version 8 (Default browser not detected!)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/33 ... scan-tool/
==================== Processes (Whitelisted) =================
(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)
==================== Internet (Whitelisted) ====================
(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)
HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.microsoft.com/isapi/redir.dl ... r=iesearch
HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.microsoft.com/isapi/redir.dl ... ar=msnhome
HKU\S-1-5-21-343818398-1547161642-1801674531-1003\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.centrum.cz/
URLSearchHook: [S-1-5-21-343818398-1547161642-1801674531-1003] ATTENTION ==> Default URLSearchHook is missing.
SearchScopes: HKU\S-1-5-21-343818398-1547161642-1801674531-1003 -> {012E1000-F331-11DB-8314-0800200C9A66} URL = http://www.google.com/search?q={searchTerms}
BHO: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2015-04-11] (Avast Software s.r.o.)
DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinsta ... s-i586.cab
DPF: {CAFEEFAC-0016-0000-0029-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinsta ... s-i586.cab
DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinsta ... s-i586.cab
DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} http://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab
Tcpip\Parameters: [DhcpNameServer] 213.46.172.36 213.46.172.37
FireFox:
========
FF ProfilePath: C:\Documents and Settings\uzivatel\Data aplikací\Mozilla\Firefox\Profiles\1m6ofwn1.default-1430766865906
FF Plugin: @adobe.com/FlashPlayer -> C:\WINDOWS\system32\Macromed\Flash\NPSWF32_16_0_0_305.dll [2015-02-08] ()
FF Plugin: @xstandard.com/XStandard -> C:\Program Files\XStandard\Bin\NPXStandard.dll [2010-11-16] (Belus Technology Inc.)
FF Plugin: Adobe Reader -> C:\Program Files\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll [2014-08-05] (Adobe Systems Inc.)
FF HKLM\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\AVAST Software\Avast\WebRep\FF
FF Extension: Avast Online Security - C:\Program Files\AVAST Software\Avast\WebRep\FF [2011-05-08]
Chrome:
=======
CHR HKLM\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChrome.crx [2015-03-18]
==================== NetSvcs (Whitelisted) ===================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
==================== Files in the root of some directories =======
2010-01-09 18:35 - 2013-09-28 01:21 - 0123392 _____ () C:\Documents and Settings\uzivatel\Local Settings\Data aplikací\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
2011-10-16 23:03 - 2012-05-28 23:17 - 0002568 _____ () C:\Documents and Settings\uzivatel\Local Settings\Data aplikací\SRDownloader(1).err
2011-10-16 21:28 - 2012-11-03 15:07 - 0001080 _____ () C:\Documents and Settings\uzivatel\Local Settings\Data aplikací\SRDownloader(1).nast
2010-10-01 22:52 - 2012-08-10 18:48 - 0001064 ____C () C:\Documents and Settings\uzivatel\Local Settings\Data aplikací\SRDownloader.err
2010-10-01 22:59 - 2012-08-10 21:39 - 0001120 ____C () C:\Documents and Settings\uzivatel\Local Settings\Data aplikací\SRDownloader.nast
==================== Bamital & volsnap Check =================
(There is no automatic fix for files that do not pass verification.)
C:\WINDOWS\explorer.exe => File is digitally signed
C:\WINDOWS\system32\winlogon.exe => File is digitally signed
C:\WINDOWS\system32\svchost.exe => File is digitally signed
C:\WINDOWS\system32\services.exe => File is digitally signed
C:\WINDOWS\system32\User32.dll => File is digitally signed
C:\WINDOWS\system32\userinit.exe => File is digitally signed
C:\WINDOWS\system32\rpcss.dll => File is digitally signed
C:\WINDOWS\system32\Drivers\volsnap.sys => File is digitally signed
==================== End of log ============================
-
Rudy
- Site Admin
- Příspěvky: 118256
- Registrován: 30 říj 2003 13:42
- Bydliště: Plzeň
- Kontaktovat uživatele:
Re: Zlobí to - možná jen myš, možná nějaký rušič v PC
Smazáno. Nastala nějaká změna?
Dotazy a logy vkládejte pouze do vašich threadů. Soukromé zprávy, icq a e-maily neslouží k řešení vašich problémů.
Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.
Navštivte:
e-mail: rudy(zavináč)forum.viry.cz
Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!
Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.
Navštivte:
e-mail: rudy(zavináč)forum.viry.cz
Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!
Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Re: Zlobí to - možná jen myš, možná nějaký rušič v PC
Ano, PC už je hodný a nechová se "divně", není ani zpomalený nebo naopak překotný. 
Co tam bylo za breberku?
Jinak moc děkuji a po výplatě jako vždy posílám příspěvek
Co tam bylo za breberku?
Jinak moc děkuji a po výplatě jako vždy posílám příspěvek
-
Rudy
- Site Admin
- Příspěvky: 118256
- Registrován: 30 říj 2003 13:42
- Bydliště: Plzeň
- Kontaktovat uživatele:
Re: Zlobí to - možná jen myš, možná nějaký rušič v PC
AdWary, zbytečnosti a nekorektní rozšíření v Chrome. Vše je smazáno.
Dotazy a logy vkládejte pouze do vašich threadů. Soukromé zprávy, icq a e-maily neslouží k řešení vašich problémů.
Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.
Navštivte:
e-mail: rudy(zavináč)forum.viry.cz
Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!
Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.
Navštivte:
e-mail: rudy(zavináč)forum.viry.cz
Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!
Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
-
Rudy
- Site Admin
- Příspěvky: 118256
- Registrován: 30 říj 2003 13:42
- Bydliště: Plzeň
- Kontaktovat uživatele:
Re: Zlobí to - možná jen myš, možná nějaký rušič v PC
Rádo se stalo!
Dotazy a logy vkládejte pouze do vašich threadů. Soukromé zprávy, icq a e-maily neslouží k řešení vašich problémů.
Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.
Navštivte:
e-mail: rudy(zavináč)forum.viry.cz
Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!
Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.
Navštivte:
e-mail: rudy(zavináč)forum.viry.cz
Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!
Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Přispějete na provoz fóra?