Kontrola Logu

[Patriciusd]

Zdravím mohli by ste mi prosím skontrolovať log z RSITU? mám menšie podozrenie na vír.....

Logfile of random's system information tool 1.09 (written by random/random)
Run by Rudo at 2013-06-12 11:07:09
Microsoft Windows 7 Professional Service Pack 1
System drive C: has 67 GB (67%) free of 100 GB
Total RAM: 3575 MB (56% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 11:07:10, on 12. 6. 2013
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v10.0 (10.00.9200.16576)
Boot mode: Normal

Running processes:
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Windows\system32\taskhost.exe
C:\Program Files\VIA\VIAudioi\VDeck\VDeck.exe
C:\Program Files\Microsoft Security Client\msseces.exe
C:\Program Files\uTorrent\uTorrent.exe
C:\Windows\System32\StikyNot.exe
C:\Program Files\TeamViewer\Version8\TeamViewer.exe
C:\Users\Rudo\Desktop\RSIT(1).exe
C:\Program Files\trend micro\Rudo.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.delta-search.com/?affID=1197 ... 6D04ADDCF6
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/p/?LinkId=255141
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/p/?LinkId=255141
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
O2 - BHO: RealNetworks Download and Record Plugin for Internet Explorer - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\IE\rndlbrowserrecordplugin.dll
O2 - BHO: Web Assistant Helper - {336D0C35-8A85-403a-B9D2-65C292C39087} - C:\Program Files\Web Assistant\Extension32.dll
O4 - HKLM\..\Run: [HDAudDeck] C:\Program Files\VIA\VIAudioi\VDeck\VDeck.exe -r
O4 - HKLM\..\Run: [MSC] "C:\Program Files\Microsoft Security Client\msseces.exe" -hide -runkey
O4 - HKLM\..\RunOnce: [Malwarebytes Anti-Malware (cleanup)] rundll32.exe "C:\ProgramData\Malwarebytes\Malwarebytes' Anti-Malware\cleanup.dll",ProcessCleanupScript
O4 - HKCU\..\Run: [uTorrent] "C:\Program Files\uTorrent\uTorrent.exe" /MINIMIZED
O4 - HKCU\..\Run: [RESTART_STICKY_NOTES] C:\Windows\System32\StikyNot.exe
O4 - HKCU\..\RunOnce: [DeleteMarkAny] C:\Windows\system32\MASetupCleaner.exe C:\Program Files\MarkAny\ContentSafer
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'NETWORK SERVICE')
O8 - Extra context menu item: Download with &Media Finder - C:\Program Files\Media Finder\hook.html
O8 - Extra context menu item: E&xportovať do programu Microsoft Excel - res://C:\PROGRA~1\MICROS~1\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: Zdroje informácií - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~1\OFFICE11\REFIEBAR.DLL
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O23 - Service: ArcSoft Connect Daemon (ACDaemon) - ArcSoft Inc. - C:\Program Files\Common Files\ArcSoft\Connection Service\Bin\ACService.exe
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: AMD External Events Utility - AMD - C:\Windows\system32\atiesrxx.exe
O23 - Service: FLEXnet Licensing Service - Acresso Software Inc. - C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
O23 - Service: Služba Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: Služba Google Update (gupdatem) (gupdatem) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Mozilla Foundation - C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe
O23 - Service: NVIDIA Driver Helper Service (NVSvc) - NVIDIA Corporation - C:\Windows\system32\nvvsvc.exe
O23 - Service: PSPR Control Service (PSPRSERV) - ElcomSoft Co. Ltd. - G:\Program Files\Elcomsoft\Proactive System Password Recovery\psprserv.exe
O23 - Service: RealNetworks Downloader Resolver Service - Unknown owner - C:\Program Files\RealNetworks\RealDownloader\rndlresolversvc.exe
O23 - Service: ServiceLayer - Nokia. - C:\Program Files\PC Connectivity Solution\ServiceLayer.exe
O23 - Service: Skype Updater (SkypeUpdate) - Skype Technologies - C:\Program Files\Skype\Updater\Updater.exe
O23 - Service: NVIDIA Stereoscopic 3D Driver Service (Stereo Service) - NVIDIA Corporation - C:\Program Files\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
O23 - Service: TeamViewer 8 (TeamViewer8) - TeamViewer GmbH - C:\Program Files\TeamViewer\Version8\TeamViewer_Service.exe
O23 - Service: Toolbar Updater (TolbarUpdater) - Unknown owner - C:\Users\Rudo\AppData\Local\Temp\ToolbarUpdater.exe
O23 - Service: Web Assistant Updater - Unknown owner - C:\Program Files\Web Assistant\ExtensionUpdaterService.exe

--
End of file - 5716 bytes

======Scheduled tasks folder======

C:\Windows\tasks\Adobe Flash Player Updater.job
C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
C:\Windows\tasks\GoogleUpdateTaskMachineUA.job

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{3049C3E9-B461-4BC5-8870-4C09146192CA}]
RealNetworks Download and Record Plugin for Internet Explorer - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\IE\rndlbrowserrecordplugin.dll [2012-11-29 539888]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{336D0C35-8A85-403a-B9D2-65C292C39087}]
Web Assistant - C:\Program Files\Web Assistant\Extension32.dll [2012-06-25 162816]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"HDAudDeck"=C:\Program Files\VIA\VIAudioi\VDeck\VDeck.exe [2010-02-10 1713152]
"MSC"=C:\Program Files\Microsoft Security Client\msseces.exe [2013-01-27 947152]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\RunOnce]
"Malwarebytes Anti-Malware (cleanup)"=C:\ProgramData\Malwarebytes\Malwarebytes' Anti-Malware\cleanup.dll [2013-04-04 1127496]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"AdobeBridge"= []
"uTorrent"=C:\Program Files\uTorrent\uTorrent.exe [2013-04-12 802136]
"RESTART_STICKY_NOTES"=C:\Windows\System32\StikyNot.exe [2009-07-14 354304]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\RunOnce]
"DeleteMarkAny"=C:\Windows\system32\MASetupCleaner.exe [2012-08-28 24576]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe ARM]
C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2013-04-04 958576]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ArcSoft Connection Service]
C:\Program Files\Common Files\ArcSoft\Connection Service\Bin\ACDaemon.exe [2010-10-27 207424]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\StartCCC]
C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [2011-07-07 336384]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\TkBellExe]
C:\Program Files\Real\RealPlayer\update\realsched.exe [2012-12-23 295072]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED}

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=credssp.dll

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MsMpSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\MsMpSvc]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorAdmin"=5
"ConsentPromptBehaviorUser"=3
"EnableUIADesktopToggle"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1
"DisableTaskMgr"=0
"DisableCMD"=0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.msadpcm"=msadp32.acm
"midimapper"=midimap.dll
"wavemapper"=msacm32.drv
"VIDC.UYVY"=msyuv.dll
"VIDC.YUY2"=msyuv.dll
"VIDC.YVYU"=msyuv.dll
"VIDC.IYUV"=iyuv_32.dll
"vidc.i420"=iyuv_32.dll
"VIDC.YVU9"=tsbyuv.dll
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"vidc.cvid"=iccvid.dll
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"aux1"=wdmaud.drv
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv
"wave2"=wdmaud.drv
"midi2"=wdmaud.drv
"mixer2"=wdmaud.drv
"aux2"=wdmaud.drv
"wave3"=wdmaud.drv
"midi3"=wdmaud.drv
"mixer3"=wdmaud.drv
"aux3"=wdmaud.drv
"MSVideo8"=VfWWDM32.dll
"wave4"=wdmaud.drv
"midi4"=wdmaud.drv
"mixer4"=wdmaud.drv
"aux4"=wdmaud.drv
"wave5"=wdmaud.drv
"midi5"=wdmaud.drv
"mixer5"=wdmaud.drv
"aux5"=wdmaud.drv
"msacm.l3codec"=l3codecp.acm
"vidc.VP60"=C:\Windows\system32\vp6vfw.dll
"vidc.VP61"=C:\Windows\system32\vp6vfw.dll

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*

======List of files/folders created in the last 1 month======

2013-06-12 11:05:16 ----D---- C:\rsit
2013-06-12 10:53:02 ----A---- C:\Windows\system32\drivers\bvnsfqna.sys
2013-05-31 14:00:35 ----D---- C:\Program Files\Cheat Engine 6.2
2013-05-26 10:58:48 ----A---- C:\Windows\system32\time.dat
2013-05-24 17:59:44 ----D---- C:\Windows\system32\dictionaries
2013-05-24 17:59:44 ----A---- C:\Windows\system32\Skybound.Gecko.dll
2013-05-24 17:59:44 ----A---- C:\Windows\system32\redit.exe
2013-05-24 17:59:44 ----A---- C:\Windows\system32\plugin-container.exe
2013-05-24 17:59:44 ----A---- C:\Windows\system32\plds4.dll
2013-05-24 17:59:44 ----A---- C:\Windows\system32\plc4.dll
2013-05-24 17:59:44 ----A---- C:\Windows\system32\nssutil3.dll
2013-05-24 17:59:44 ----A---- C:\Windows\system32\nssdbm3.dll
2013-05-24 17:59:44 ----A---- C:\Windows\system32\nssckbi.dll
2013-05-24 17:59:44 ----A---- C:\Windows\system32\nss3.dll
2013-05-24 17:59:44 ----A---- C:\Windows\system32\nspr4.dll
2013-05-24 17:59:44 ----A---- C:\Windows\system32\msvcp80.dll
2013-05-24 17:59:44 ----A---- C:\Windows\system32\msvcm80.dll
2013-05-24 17:59:44 ----A---- C:\Windows\system32\mozsqlite3.dll
2013-05-24 17:59:44 ----A---- C:\Windows\system32\mozjs.dll
2013-05-24 17:59:44 ----A---- C:\Windows\system32\mozglue.dll
2013-05-24 17:59:44 ----A---- C:\Windows\system32\mozalloc.dll
2013-05-24 17:59:44 ----A---- C:\Windows\system32\libGLESv2.dll
2013-05-24 17:59:44 ----A---- C:\Windows\system32\libEGL.dll
2013-05-24 17:59:44 ----A---- C:\Windows\system32\js.exe
2013-05-24 17:59:44 ----A---- C:\Windows\system32\IA2Marshal.dll
2013-05-24 17:59:43 ----D---- C:\Windows\system32\profile
2013-05-24 17:59:43 ----D---- C:\Windows\system32\plugins
2013-05-24 17:59:43 ----D---- C:\Windows\system32\components
2013-05-24 17:59:43 ----A---- C:\Windows\system32\xul.dll
2013-05-24 17:59:43 ----A---- C:\Windows\system32\xpcshell.exe
2013-05-24 17:59:43 ----A---- C:\Windows\system32\xpcom.dll
2013-05-24 17:59:43 ----A---- C:\Windows\system32\ssl3.dll
2013-05-24 17:59:43 ----A---- C:\Windows\system32\softokn3.dll
2013-05-24 17:59:43 ----A---- C:\Windows\system32\smime3.dll
2013-05-24 17:59:43 ----A---- C:\Windows\system32\gkmedias.dll
2013-05-24 17:59:43 ----A---- C:\Windows\system32\freebl3.dll
2013-05-24 17:59:43 ----A---- C:\Windows\system32\AccessibleMarshal.dll
2013-05-24 17:59:42 ----A---- C:\Windows\system32\winmonitor.exe
2013-05-24 17:59:40 ----A---- C:\Windows\system32\libs.exe
2013-05-24 09:56:39 ----D---- C:\Program Files\Mozilla Firefox
2013-05-20 10:21:02 ----A---- C:\Windows\system32\WdfCoInstaller01005.dll
2013-05-20 10:21:02 ----A---- C:\Windows\system32\drivers\WdfCoInstaller01005.dll
2013-05-20 10:21:02 ----A---- C:\Windows\system32\drivers\ssadwh.sys
2013-05-20 10:21:02 ----A---- C:\Windows\system32\drivers\ssadcm.sys
2013-05-15 08:42:26 ----A---- C:\Windows\system32\jsproxy.dll
2013-05-15 08:42:26 ----A---- C:\Windows\system32\jscript9.dll
2013-05-15 08:42:26 ----A---- C:\Windows\system32\jscript.dll
2013-05-15 08:42:26 ----A---- C:\Windows\system32\iesetup.dll
2013-05-15 08:42:25 ----A---- C:\Windows\system32\urlmon.dll
2013-05-15 08:42:25 ----A---- C:\Windows\system32\RegisterIEPKEYs.exe
2013-05-15 08:42:25 ----A---- C:\Windows\system32\msfeeds.dll
2013-05-15 08:42:25 ----A---- C:\Windows\system32\ieui.dll
2013-05-15 08:42:25 ----A---- C:\Windows\system32\iesysprep.dll
2013-05-15 08:42:25 ----A---- C:\Windows\system32\iernonce.dll
2013-05-15 08:42:25 ----A---- C:\Windows\system32\ie4uinit.exe
2013-05-15 08:42:24 ----A---- C:\Windows\system32\iertutil.dll
2013-05-15 08:42:23 ----A---- C:\Windows\system32\wininet.dll
2013-05-15 08:42:22 ----A---- C:\Windows\system32\ieframe.dll
2013-05-15 08:42:20 ----A---- C:\Windows\system32\mshtml.dll
2013-05-15 08:22:34 ----A---- C:\Windows\system32\wwansvc.dll
2013-05-15 08:22:34 ----A---- C:\Windows\system32\wwanprotdim.dll
2013-05-15 08:22:34 ----A---- C:\Windows\system32\win32k.sys
2013-05-15 08:22:25 ----A---- C:\Windows\system32\drivers\dxgmms1.sys
2013-05-15 08:22:25 ----A---- C:\Windows\system32\drivers\dxgkrnl.sys
2013-05-15 08:22:23 ----A---- C:\Windows\system32\shell32.dll
2013-05-15 08:22:23 ----A---- C:\Windows\system32\shdocvw.dll
2013-05-15 08:22:23 ----A---- C:\Windows\system32\consent.exe
2013-05-15 08:22:23 ----A---- C:\Windows\system32\authui.dll
2013-05-15 08:22:23 ----A---- C:\Windows\system32\appinfo.dll

======List of files/folders modified in the last 1 month======

2013-06-12 11:07:10 ----D---- C:\Program Files\trend micro
2013-06-12 11:05:28 ----D---- C:\Windows\Temp
2013-06-12 11:03:27 ----D---- C:\Users\Rudo\AppData\Roaming\uTorrent
2013-06-12 11:01:49 ----HD---- C:\ProgramData
2013-06-12 10:59:52 ----RD---- C:\Program Files
2013-06-12 10:59:27 ----D---- C:\Users\Rudo\AppData\Roaming\Samsung
2013-06-12 10:59:27 ----D---- C:\Program Files\Samsung
2013-06-12 10:59:22 ----D---- C:\Windows\system32\DriverStore
2013-06-12 10:59:22 ----D---- C:\Windows\system32\catroot2
2013-06-12 10:59:22 ----D---- C:\Windows\system32\catroot
2013-06-12 10:59:22 ----D---- C:\Windows\inf
2013-06-12 10:58:40 ----SHD---- C:\Windows\Installer
2013-06-12 10:58:40 ----SHD---- C:\Config.Msi
2013-06-12 10:58:40 ----HD---- C:\Program Files\InstallShield Installation Information
2013-06-12 10:58:40 ----D---- C:\Windows\System32
2013-06-12 10:58:34 ----D---- C:\Windows
2013-06-12 10:58:08 ----SHD---- C:\System Volume Information
2013-06-12 10:57:26 ----RSD---- C:\Windows\assembly
2013-06-12 10:57:03 ----D---- C:\Program Files\EA GAMES
2013-06-12 10:56:13 ----D---- C:\Windows\Prefetch
2013-06-12 10:53:11 ----D---- C:\Windows\system32\drivers
2013-06-12 10:53:02 ----HD---- C:\Windows\msdownld.tmp
2013-06-12 10:02:17 ----A---- C:\Windows\system32\FlashPlayerApp.exe
2013-06-12 08:46:49 ----A---- C:\Windows\system32\PerfStringBackup.INI
2013-06-12 08:40:53 ----D---- C:\Windows\system32\Tasks
2013-06-12 08:40:47 ----D---- C:\ProgramData\NVIDIA
2013-06-11 23:34:05 ----D---- C:\Windows\system32\config
2013-06-10 14:20:34 ----D---- C:\Users\Rudo\AppData\Roaming\DAEMON Tools Lite
2013-06-10 14:20:26 ----D---- C:\Windows\Panther
2013-06-10 14:20:25 ----D---- C:\Windows\Minidump
2013-06-10 14:20:25 ----D---- C:\Windows\Logs
2013-06-10 14:20:25 ----D---- C:\Windows\debug
2013-06-10 14:16:59 ----D---- C:\Windows\pss
2013-06-10 14:10:21 ----D---- C:\Program Files\Common Files
2013-06-10 14:07:36 ----D---- C:\Program Files\Oracle
2013-06-10 12:05:01 ----D---- C:\Users\Rudo\AppData\Roaming\vlc
2013-06-07 08:33:08 ----D---- C:\Windows\Vss
2013-06-07 08:33:08 ----D---- C:\Windows\addins
2013-05-31 14:00:35 ----D---- C:\Users\Rudo\AppData\Roaming\OpenCandy
2013-05-24 17:23:48 ----D---- C:\Program Files\Mozilla Maintenance Service
2013-05-20 10:23:04 ----D---- C:\Windows\Microsoft.NET
2013-05-16 07:44:59 ----D---- C:\Windows\rescache
2013-05-15 11:24:30 ----D---- C:\Windows\winsxs
2013-05-15 11:22:18 ----D---- C:\Program Files\Internet Explorer
2013-05-15 11:22:17 ----D---- C:\Windows\system32\sk-SK
2013-05-15 11:22:17 ----D---- C:\Windows\AppPatch
2013-05-15 08:43:44 ----A---- C:\Windows\win.ini
2013-05-15 08:37:58 ----A---- C:\Windows\system32\MRT.exe
2013-05-13 20:39:38 ----D---- C:\Users\Rudo\AppData\Roaming\Skype

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 MpFilter;Microsoft Malware Protection Driver; C:\Windows\system32\DRIVERS\MpFilter.sys [2013-01-20 195296]
R0 pciide;pciide; C:\Windows\system32\drivers\pciide.sys [2009-07-14 12368]
R0 rdyboost;ReadyBoost; C:\Windows\System32\drivers\rdyboost.sys [2010-11-20 173440]
R0 vmbus;@%SystemRoot%\system32\vmbusres.dll,-1000; C:\Windows\system32\drivers\vmbus.sys [2010-11-20 175360]
R1 AsIO;AsIO; C:\Windows\system32\drivers\AsIO.sys [2007-12-17 12400]
R1 CSC;@%systemroot%\system32\cscsvc.dll,-202; C:\Windows\system32\drivers\csc.sys [2010-11-20 388096]
R1 dtsoftbus01;DAEMON Tools Virtual Bus Driver; C:\Windows\system32\DRIVERS\dtsoftbus01.sys [2012-10-08 242240]
R1 MpKsl3976d24b;MpKsl3976d24b; \??\C:\ProgramData\Microsoft\Microsoft Antimalware\Definition Updates\{07157A0C-2BE1-4B98-A82A-CBAA97571838}\MpKsl3976d24b.sys [2013-06-12 29904]
R1 vwififlt;Virtual WiFi Filter Driver; C:\Windows\system32\DRIVERS\vwififlt.sys [2009-07-14 48128]
R2 adfs;adfs; C:\Windows\system32\drivers\adfs.sys [2008-08-14 74720]
R2 NisDrv;Microsoft Network Inspection System; C:\Windows\system32\DRIVERS\NisDrvWFP.sys [2013-01-20 100328]
R3 amdkmdag;amdkmdag; C:\Windows\system32\DRIVERS\atikmdag.sys [2011-07-08 8312832]
R3 amdkmdap;amdkmdap; C:\Windows\system32\DRIVERS\atikmpag.sys [2011-07-08 244736]
R3 AtiHDAudioService;ATI Function Driver for HD Audio Service; C:\Windows\system32\drivers\AtihdW73.sys [2011-03-30 100880]
R3 KMWDFILTERx86;HIDServiceDesc; C:\Windows\system32\DRIVERS\KMWDFILTER.sys [2009-04-29 25088]
R3 MTsensor;ATK0110 ACPI UTILITY; C:\Windows\system32\DRIVERS\ASACPI.sys [2009-07-16 13216]
R3 RTL8167;Realtek 8167 NT Driver; C:\Windows\system32\DRIVERS\Rt86win7.sys [2009-07-14 139776]
R3 VIAHdAudAddService;VIA High Definition Audio Driver Service; C:\Windows\system32\drivers\viahduaa.sys [2010-01-11 1119232]
S0 ietlf;ietlf; C:\Windows\System32\drivers\bvnsfqna.sys [2013-06-12 54016]
S0 vmci;VMware VMCI Bus Driver; C:\Windows\system32\DRIVERS\vmci.sys []
S1 ihssaslm;ihssaslm; \??\C:\Windows\system32\drivers\ihssaslm.sys []
S2 Parvdm;Parvdm; C:\Windows\system32\DRIVERS\parvdm.sys [2009-07-14 8704]
S3 aic78xx;aic78xx; C:\Windows\system32\DRIVERS\djsvs.sys [2009-07-14 70720]
S3 AIDA64Driver;FinalWire AIDA64 Kernel Driver; \??\F:\AIDA\kerneld.x32 []
S3 amdagp;AMD AGP Bus Filter Driver; C:\Windows\system32\drivers\amdagp.sys [2009-07-14 53312]
S3 Andbus;LGE Android Platform Composite USB Device; C:\Windows\system32\DRIVERS\lgandbus.sys []
S3 AndDiag;LGE Android Platform USB Serial Port; C:\Windows\system32\DRIVERS\lganddiag.sys []
S3 AndGps;LGE Android Platform USB GPS NMEA Port; C:\Windows\system32\DRIVERS\lgandgps.sys []
S3 ANDModem;LGE Android Platform USB Modem; C:\Windows\system32\DRIVERS\lgandmodem.sys []
S3 athur;Atheros AR9271 Wireless Network Adapter Service; C:\Windows\system32\DRIVERS\athur.sys [2010-01-05 1500160]
S3 b57nd60x;Broadcom NetXtreme Gigabit Ethernet - NDIS 6.0; C:\Windows\system32\DRIVERS\b57nd60x.sys [2009-07-14 229888]
S3 EverestDriver;Lavalys EVEREST Kernel Driver; \??\C:\Program Files\Lavalys\EVEREST Home Edition\kerneld.wnt []
S3 lgbusenum;LG Bluetooth Bus Enumerator; C:\Windows\system32\DRIVERS\lgbtbus.sys []
S3 lmimirr;lmimirr; C:\Windows\system32\DRIVERS\lmimirr.sys []
S3 pccsmcfd;PCCS Mode Change Filter Driver; C:\Windows\system32\DRIVERS\pccsmcfd.sys [2008-08-26 18816]
S3 pwdrvio;pwdrvio; \??\C:\Windows\system32\pwdrvio.sys [2011-09-02 16472]
S3 pwdspio;pwdspio; \??\C:\Windows\system32\pwdspio.sys [2011-09-02 11104]
S3 RDPDR;Terminal Server Device Redirector Driver; C:\Windows\System32\drivers\rdpdr.sys [2010-11-20 133632]
S3 s3cap;s3cap; C:\Windows\system32\drivers\vms3cap.sys [2010-11-20 5632]
S3 sisagp;SIS AGP Bus Filter; C:\Windows\system32\drivers\sisagp.sys [2009-07-14 52304]
S3 storvsc;storvsc; C:\Windows\system32\drivers\storvsc.sys [2010-11-20 28032]
S3 TrueSight;TrueSight; \??\c:\windows\system32\drivers\TrueSight.sys [2011-11-23 111872]
S3 TsUsbFlt;TsUsbFlt; C:\Windows\system32\drivers\tsusbflt.sys [2010-11-20 52224]
S3 usbscan;USB Scanner Driver; C:\Windows\system32\DRIVERS\usbscan.sys [2009-07-14 35840]
S3 viaagp;VIA AGP Bus Filter; C:\Windows\system32\drivers\viaagp.sys [2009-07-14 53328]
S3 ViaC7;VIA C7 Processor Driver; C:\Windows\system32\DRIVERS\viac7.sys [2009-07-14 52736]
S3 VMBusHID;VMBusHID; C:\Windows\system32\drivers\VMBusHID.sys [2010-11-20 17920]
S3 VMnetAdapter;VMware Virtual Ethernet Adapter Driver; C:\Windows\system32\DRIVERS\vmnetadapter.sys []
S3 WinUsb;SAMSUNG Android USB Driver; C:\Windows\system32\DRIVERS\WinUsb.sys [2010-11-20 35968]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 ACDaemon;ArcSoft Connect Daemon; C:\Program Files\Common Files\ArcSoft\Connection Service\Bin\ACService.exe [2010-03-18 113152]
R2 AdobeARMservice;Adobe Acrobat Update Service; C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe [2013-05-10 65640]
R2 AMD External Events Utility;AMD External Events Utility; C:\Windows\system32\atiesrxx.exe [2011-07-08 176128]
R2 CscService;@%systemroot%\system32\cscsvc.dll,-200; C:\Windows\System32\svchost.exe [2009-07-14 20992]
R2 MDM;Machine Debug Manager; C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE [2003-06-20 322120]
R2 MsMpSvc;Microsoft Antimalware Service; C:\Program Files\Microsoft Security Client\MsMpEng.exe [2013-01-27 20456]
R2 NVSvc;NVIDIA Driver Helper Service; C:\Windows\system32\nvvsvc.exe [2011-02-28 608872]
R2 RealNetworks Downloader Resolver Service;RealNetworks Downloader Resolver Service; C:\Program Files\RealNetworks\RealDownloader\rndlresolversvc.exe [2012-11-29 38608]
R2 Stereo Service;NVIDIA Stereoscopic 3D Driver Service; C:\Program Files\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe [2011-02-28 378472]
R2 TeamViewer8;TeamViewer 8; C:\Program Files\TeamViewer\Version8\TeamViewer_Service.exe [2013-04-23 3574624]
R2 TolbarUpdater;Toolbar Updater; C:\Users\Rudo\AppData\Local\Temp\ToolbarUpdater.exe [2012-10-30 508416]
R2 Web Assistant Updater;Web Assistant Updater; C:\Program Files\Web Assistant\ExtensionUpdaterService.exe [2012-06-25 185856]
R3 AppMgmt;@appmgmts.dll,-3250; C:\Windows\system32\svchost.exe [2009-07-14 20992]
R3 NisSrv;@C:\Program Files\Microsoft Security Client\MpAsDesc.dll,-243; C:\Program Files\Microsoft Security Client\NisSrv.exe [2013-01-27 295232]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
S2 gupdate;Služba Google Update (gupdate); C:\Program Files\Google\Update\GoogleUpdate.exe [2012-06-12 116648]
S2 SkypeUpdate;Skype Updater; C:\Program Files\Skype\Updater\Updater.exe [2013-01-08 161536]
S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service; C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2013-06-12 256904]
S3 FLEXnet Licensing Service;FLEXnet Licensing Service; C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe [2012-10-08 655624]
S3 gupdatem;Služba Google Update (gupdatem); C:\Program Files\Google\Update\GoogleUpdate.exe [2012-06-12 116648]
S3 MozillaMaintenance;Mozilla Maintenance Service; C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe [2013-05-24 117144]
S3 ose;Office Source Engine; C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2003-07-28 89136]
S3 PeerDistSvc;@%SystemRoot%\system32\peerdistsvc.dll,-9000; C:\Windows\System32\svchost.exe [2009-07-14 20992]
S3 PSPRSERV;PSPR Control Service; G:\Program Files\Elcomsoft\Proactive System Password Recovery\psprserv.exe [2009-05-19 69632]
S3 ServiceLayer;ServiceLayer; C:\Program Files\PC Connectivity Solution\ServiceLayer.exe [2008-11-11 620544]
S3 StorSvc;@%SystemRoot%\System32\StorSvc.dll,-100; C:\Windows\System32\svchost.exe [2009-07-14 20992]
S3 UmRdpService;@%SystemRoot%\system32\umrdp.dll,-1000; C:\Windows\System32\svchost.exe [2009-07-14 20992]
S3 WatAdminSvc;@%SystemRoot%\system32\Wat\WatUX.exe,-601; C:\Windows\system32\Wat\WatAdminSvc.exe [2011-11-23 1343400]

-----------------EOF-----------------

[vyosek]

Zdravim

Z ceho vase podezreni prameni

Stahnete AdwCleaner http://general-changelog-team.fr/fr/dow ... adwcleaner

• Ulozte nejlepe na plochu
• Ukoncete vsechny programy
• Kliknete na Prohledat
• Probehne skenovani a pak se objevi log, pripadne bude ulozen na systemovem disku jako AdwCleaner[R?].txt, ten sem vlozte

[Patriciusd]

Tak po určitom čase keď mám zapnutý PC mi z ničoho nič spustí nejakú nahrávku po Rusky hovoriaceho chalana. Všetko vypnem a nahrávka ide ďalej. po čase sa vypne ... tu je LOG :

# AdwCleaner v2.303 - Log vytvorený 12/06/2013 o 12:03:07
# Aktualizované 08/06/2013 Xplode
# Operaený systém : Windows 7 Professional Service Pack 1 (32 bits)
# Uživateľ : Rudo - RUDO-PC
# Spustený systém : Normálny
# Spustené z : C:\Users\Rudo\Desktop\adwcleaner.exe
# Voľba [Prehľada?]


***** [Služby] *****

Nájdené : Web Assistant Updater

***** [Súbory / Adresáre] *****

Adresár Nájdené : C:\Program Files\Web Assistant
Adresár Nájdené : C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Media Finder
Adresár Nájdené : C:\Users\Rudo\AppData\Local\TempDir
Adresár Nájdené : C:\Users\Rudo\AppData\Roaming\Babylon
Adresár Nájdené : C:\Users\Rudo\AppData\Roaming\Media Finder
Adresár Nájdené : C:\Users\Rudo\AppData\Roaming\Mozilla\Extensions\{ec8030f7-c20a-464f-9b0e-13a3a9e97384}\gencrawler@some.com
Adresár Nájdené : C:\Users\Rudo\AppData\Roaming\Mozilla\Firefox\Profiles\uja28vkk.default\SweetPacksToolbarData
Adresár Nájdené : C:\Users\Rudo\AppData\Roaming\OpenCandy
Súbor Nájdené : C:\Program Files\Mozilla Firefox\searchplugins\babylon.xml
Súbor Nájdené : C:\user.js
Súbor Nájdené : C:\Users\Rudo\AppData\Roaming\Mozilla\Firefox\Profiles\uja28vkk.default\searchplugins\delta.xml
Súbor Nájdené : C:\Users\Rudo\AppData\Roaming\Mozilla\Firefox\Profiles\uja28vkk.default\searchplugins\MyStart Search.xml
Súbor Nájdené : C:\Users\Rudo\AppData\Roaming\Mozilla\Firefox\Profiles\uja28vkk.default\searchplugins\SweetIm.xml

***** [Registre] *****

Hodnota Nájdené : HKLM\SOFTWARE\Mozilla\Firefox\extensions [{336D0C35-8A85-403a-B9D2-65C292C39087}]
Kľúe Nájdené : HKCU\Software\1ClickDownload
Kľúe Nájdené : HKCU\Software\90d68cb23fbd44
Kľúe Nájdené : HKCU\Software\APN PIP
Kľúe Nájdené : HKCU\Software\BabylonToolbar
Kľúe Nájdené : HKCU\Software\Conduit
Kľúe Nájdené : HKCU\Software\DataMngr
Kľúe Nájdené : HKCU\Software\IM
Kľúe Nájdené : HKCU\Software\ImInstaller
Kľúe Nájdené : HKCU\Software\incredibar.com
Kľúe Nájdené : HKCU\Software\MediaFinder
Kľúe Nájdené : HKCU\Software\Microsoft\Internet Explorer\MenuExt\Download with &Media Finder
Kľúe Nájdené : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{0ECDF796-C2DC-4D79-A620-CCE0C0A66CC9}
Kľúe Nájdené : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{CFF4DB9B-135F-47C0-9269-B4C6572FD61A}
Kľúe Nájdené : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{EEE6C360-6118-11DC-9C72-001320C79847}
Kľúe Nájdené : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{336D0C35-8A85-403A-B9D2-65C292C39087}
Kľúe Nájdené : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{336D0C35-8A85-403A-B9D2-65C292C39087}
Kľúe Nájdené : HKCU\Software\Softonic
Kľúe Nájdené : HKLM\Software\Babylon
Kľúe Nájdené : HKLM\SOFTWARE\Classes\AppID\{608D3067-77E8-463D-9084-908966806826}
Kľúe Nájdené : HKLM\SOFTWARE\Classes\AppID\{B302A1BD-0157-49FA-90F1-4E94F22C7B4B}
Kľúe Nájdené : HKLM\SOFTWARE\Classes\AppID\{BDB69379-802F-4EAF-B541-F8DE92DD98DB}
Kľúe Nájdené : HKLM\SOFTWARE\Classes\AppID\{C26644C4-2A12-4CA6-8F2E-0EDE6CF018F3}
Kľúe Nájdené : HKLM\SOFTWARE\Classes\AppID\Extension.DLL
Kľúe Nájdené : HKLM\SOFTWARE\Classes\bbylntlbr.bbylntlbrHlpr
Kľúe Nájdené : HKLM\SOFTWARE\Classes\bbylntlbr.bbylntlbrHlpr.1
Kľúe Nájdené : HKLM\SOFTWARE\Classes\CLSID\{336D0C35-8A85-403A-B9D2-65C292C39087}
Kľúe Nájdené : HKLM\SOFTWARE\Classes\CLSID\{35B8892D-C3FB-4D88-990D-31DB2EBD72BD}
Kľúe Nájdené : HKLM\SOFTWARE\Classes\CLSID\{80922EE0-8A76-46AE-95D5-BD3C3FE0708D}
Kľúe Nájdené : HKLM\SOFTWARE\Classes\Extension.ExtensionHelperObject
Kľúe Nájdené : HKLM\SOFTWARE\Classes\Extension.ExtensionHelperObject.1
Kľúe Nájdené : HKLM\SOFTWARE\Classes\Interface\{3F607E46-0D3C-4442-B1DE-DE7FA4768F5C}
Kľúe Nájdené : HKLM\SOFTWARE\Classes\Interface\{A36867C6-302D-49FC-9D8E-1EB037B5F1AB}
Kľúe Nájdené : HKLM\SOFTWARE\Classes\Interface\{FE0273D1-99DF-4AC0-87D5-1371C6271785}
Kľúe Nájdené : HKLM\SOFTWARE\Classes\MF
Kľúe Nájdené : HKLM\SOFTWARE\Classes\Prod.cap
Kľúe Nájdené : HKLM\SOFTWARE\Classes\TypeLib\{1D5A4199-956E-49BC-B89F-6A35C57C0D13}
Kľúe Nájdené : HKLM\SOFTWARE\Classes\TypeLib\{93E3D79C-0786-48FF-9329-93BC9F6DC2B3}
Kľúe Nájdené : HKLM\Software\Conduit
Kľúe Nájdené : HKLM\Software\DataMngr
Kľúe Nájdené : HKLM\SOFTWARE\Google\Chrome\Extensions\dlnembnfbcpjnepmfjmngjenhhajpdfd
Kľúe Nájdené : HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{EEE6C360-6118-11DC-9C72-001320C79847}
Kľúe Nájdené : HKLM\SOFTWARE\Microsoft\Tracing\Babylon_RASAPI32
Kľúe Nájdené : HKLM\SOFTWARE\Microsoft\Tracing\Babylon_RASMANCS
Kľúe Nájdené : HKLM\SOFTWARE\Microsoft\Tracing\BabylonTC_RASAPI32
Kľúe Nájdené : HKLM\SOFTWARE\Microsoft\Tracing\BabylonTC_RASMANCS
Kľúe Nájdené : HKLM\SOFTWARE\Microsoft\Tracing\incredibar_installer_RASAPI32
Kľúe Nájdené : HKLM\SOFTWARE\Microsoft\Tracing\incredibar_installer_RASMANCS
Kľúe Nájdené : HKLM\SOFTWARE\Microsoft\Tracing\IncredibarToolbar_RASAPI32
Kľúe Nájdené : HKLM\SOFTWARE\Microsoft\Tracing\IncredibarToolbar_RASMANCS
Kľúe Nájdené : HKLM\SOFTWARE\Microsoft\Tracing\MyBabylontb_RASAPI32
Kľúe Nájdené : HKLM\SOFTWARE\Microsoft\Tracing\MyBabylontb_RASMANCS
Kľúe Nájdené : HKLM\SOFTWARE\Microsoft\Tracing\SweetIM_RASAPI32
Kľúe Nájdené : HKLM\SOFTWARE\Microsoft\Tracing\SweetIM_RASMANCS
Kľúe Nájdené : HKLM\SOFTWARE\Microsoft\Tracing\SweetPacksUpdateManager_RASAPI32
Kľúe Nájdené : HKLM\SOFTWARE\Microsoft\Tracing\SweetPacksUpdateManager_RASMANCS
Kľúe Nájdené : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{336D0C35-8A85-403A-B9D2-65C292C39087}
Kľúe Nájdené : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{336D0C35-8A85-403a-B9D2-65C292C39087}_is1
Kľúe Nájdené : HKLM\Software\PIP
Kľúe Nájdené : HKLM\SOFTWARE\Software
Kľúe Nájdené : HKLM\Software\Tarma Installer
Kľúe Nájdené : HKLM\Software\Web Assistant
Kľúe Nájdené : HKU\S-1-5-21-212740431-3511978268-304090613-1000\Software\Microsoft\Internet Explorer\SearchScopes\{0ECDF796-C2DC-4D79-A620-CCE0C0A66CC9}
Kľúe Nájdené : HKU\S-1-5-21-212740431-3511978268-304090613-1000\Software\Microsoft\Internet Explorer\SearchScopes\{CFF4DB9B-135F-47C0-9269-B4C6572FD61A}
Kľúe Nájdené : HKU\S-1-5-21-212740431-3511978268-304090613-1000\Software\Microsoft\Internet Explorer\SearchScopes\{EEE6C360-6118-11DC-9C72-001320C79847}

***** [Internetové prehliadaee] *****

-\\ Internet Explorer v10.0.9200.16576

[HKCU\Software\Microsoft\Internet Explorer\Main - Start Page] = hxxp://www.delta-search.com/?affID=119776&tt=1 ... 6D04ADDCF6

-\\ Mozilla Firefox v21.0 (sk)

Súbor : C:\Users\Rudo\AppData\Roaming\Mozilla\Firefox\Profiles\uja28vkk.default\prefs.js

Nájdené : user_pref("browser.search.defaultenginename", "SweetIM Search");
Nájdené : user_pref("extensions.BabylonToolbar_i.aflt", "babsst");
Nájdené : user_pref("extensions.BabylonToolbar_i.babExt", "");
Nájdené : user_pref("extensions.BabylonToolbar_i.babTrack", "affID=112059&tt=010712_5");
Nájdené : user_pref("extensions.BabylonToolbar_i.hardId", "b68e63a5000000000000f46d04addcf6");
Nájdené : user_pref("extensions.BabylonToolbar_i.id", "b68e63a5000000000000f46d04addcf6");
Nájdené : user_pref("extensions.BabylonToolbar_i.instlDay", "15525");
Nájdené : user_pref("extensions.BabylonToolbar_i.instlRef", "sst");
Nájdené : user_pref("extensions.BabylonToolbar_i.prdct", "BabylonToolbar");
Nájdené : user_pref("extensions.BabylonToolbar_i.prtnrId", "babylon");
Nájdené : user_pref("extensions.BabylonToolbar_i.smplGrp", "none");
Nájdené : user_pref("extensions.BabylonToolbar_i.srcExt", "ss");
Nájdené : user_pref("extensions.BabylonToolbar_i.tlbrId", "base");
Nájdené : user_pref("extensions.BabylonToolbar_i.vrsn", "1.5.3.17");
Nájdené : user_pref("extensions.BabylonToolbar_i.vrsnTs", "1.5.3.178:59:26");
Nájdené : user_pref("extensions.BabylonToolbar_i.vrsni", "1.5.3.17");
Nájdené : user_pref("extensions.delta.admin", false);
Nájdené : user_pref("extensions.delta.aflt", "babsst");
Nájdené : user_pref("extensions.delta.appId", "{C26644C4-2A12-4CA6-8F2E-0EDE6CF018F3}");
Nájdené : user_pref("extensions.delta.autoRvrt", "false");
Nájdené : user_pref("extensions.delta.dfltLng", "en");
Nájdené : user_pref("extensions.delta.excTlbr", false);
Nájdené : user_pref("extensions.delta.id", "b68e63a5000000000000f46d04addcf6");
Nájdené : user_pref("extensions.delta.instlDay", "15796");
Nájdené : user_pref("extensions.delta.instlRef", "sst");
Nájdené : user_pref("extensions.delta.newTab", false);
Nájdené : user_pref("extensions.delta.prdct", "delta");
Nájdené : user_pref("extensions.delta.prtnrId", "delta");
Nájdené : user_pref("extensions.delta.rvrt", "false");
Nájdené : user_pref("extensions.delta.smplGrp", "none");
Nájdené : user_pref("extensions.delta.tlbrId", "base");
Nájdené : user_pref("extensions.delta.tlbrSrchUrl", "");
Nájdené : user_pref("extensions.delta.vrsn", "1.8.10.0");
Nájdené : user_pref("extensions.delta.vrsnTs", "1.8.10.014:52:33");
Nájdené : user_pref("extensions.delta.vrsni", "1.8.10.0");
Nájdené : user_pref("extensions.incredibar_i.aflt", "orgnl");
Nájdené : user_pref("extensions.incredibar_i.dfltLng", "");
Nájdené : user_pref("extensions.incredibar_i.did", "10671");
Nájdené : user_pref("extensions.incredibar_i.excTlbr", false);
Nájdené : user_pref("extensions.incredibar_i.id", "b68e63a5000000000000f46d04addcf6");
Nájdené : user_pref("extensions.incredibar_i.installerproductid", "26");
Nájdené : user_pref("extensions.incredibar_i.instlDay", "15536");
Nájdené : user_pref("extensions.incredibar_i.instlRef", "");
Nájdené : user_pref("extensions.incredibar_i.ms_url_id", "");
Nájdené : user_pref("extensions.incredibar_i.newTab", false);
Nájdené : user_pref("extensions.incredibar_i.ppd", "");
Nájdené : user_pref("extensions.incredibar_i.prdct", "incredibar");
Nájdené : user_pref("extensions.incredibar_i.productid", "26");
Nájdené : user_pref("extensions.incredibar_i.prtnrId", "Incredibar");
Nájdené : user_pref("extensions.incredibar_i.smplGrp", "none");
Nájdené : user_pref("extensions.incredibar_i.tlbrId", "base");
Nájdené : user_pref("extensions.incredibar_i.tlbrSrchUrl", "hxxp://mystart.Incredibar.com/?a=6R8z4Od7mc&loc=IB[...]
Nájdené : user_pref("extensions.incredibar_i.upn2", "6R8z4Od7mc");
Nájdené : user_pref("extensions.incredibar_i.upn2n", "92824710205150580");
Nájdené : user_pref("extensions.incredibar_i.vrsn", "1.5.11.14");
Nájdené : user_pref("extensions.incredibar_i.vrsnTs", "1.5.11.1417:43:15");
Nájdené : user_pref("extensions.incredibar_i.vrsni", "1.5.11.14");
Nájdené : user_pref("sweetim.toolbar.Visibility.VisibilityGuardLastUnHide", "0");
Nájdené : user_pref("sweetim.toolbar.Visibility.enable", "true");
Nájdené : user_pref("sweetim.toolbar.Visibility.intervaldays", "7");
Nájdené : user_pref("sweetim.toolbar.cda.DisableOveride.enable", "true");
Nájdené : user_pref("sweetim.toolbar.cda.HideOveride.enable", "true");
Nájdené : user_pref("sweetim.toolbar.cda.RemoveOveride.enable", "true");
Nájdené : user_pref("sweetim.toolbar.dialogs.0.enable", "true");
Nájdené : user_pref("sweetim.toolbar.dialogs.0.handler", "chrome://sim_toolbar_package/content/optionsdialog-h[...]
Nájdené : user_pref("sweetim.toolbar.dialogs.0.height", "335");
Nájdené : user_pref("sweetim.toolbar.dialogs.0.id", "id_options_dialog");
Nájdené : user_pref("sweetim.toolbar.dialogs.0.title", "$string.config.label;");
Nájdené : user_pref("sweetim.toolbar.dialogs.0.url", "hxxp://www.sweetim.com/simffbar/options_remote_ff_1_6.ht[...]
Nájdené : user_pref("sweetim.toolbar.dialogs.0.width", "761");
Nájdené : user_pref("sweetim.toolbar.dialogs.1.enable", "true");
Nájdené : user_pref("sweetim.toolbar.dialogs.1.handler", "chrome://sim_toolbar_package/content/exampledialog-h[...]
Nájdené : user_pref("sweetim.toolbar.dialogs.1.height", "300");
Nájdené : user_pref("sweetim.toolbar.dialogs.1.id", "id_example_dialog");
Nájdené : user_pref("sweetim.toolbar.dialogs.1.title", "Example (unit-test) dialog");
Nájdené : user_pref("sweetim.toolbar.dialogs.1.url", "chrome://sim_toolbar_package/content/exampledialog.html"[...]
Nájdené : user_pref("sweetim.toolbar.dialogs.1.width", "500");
Nájdené : user_pref("sweetim.toolbar.dialogs.2.enable", "true");
Nájdené : user_pref("sweetim.toolbar.dialogs.2.handler", "chrome://sim_toolbar_package/content/cdadialog-handl[...]
Nájdené : user_pref("sweetim.toolbar.dialogs.2.height", "150");
Nájdené : user_pref("sweetim.toolbar.dialogs.2.id", "id_dialog_hide_disable_remove");
Nájdené : user_pref("sweetim.toolbar.dialogs.2.title", "Option Dialog");
Nájdené : user_pref("sweetim.toolbar.dialogs.2.url", "hxxp://www.sweetim.com/simffbar/simcdadialog.asp");
Nájdené : user_pref("sweetim.toolbar.dialogs.2.width", "530");
Nájdené : user_pref("sweetim.toolbar.dnscatch.domain-blacklist", ".*.sweetim.com/.*|.*.facebook.com/.*|.*.goog[...]
Nájdené : user_pref("sweetim.toolbar.highlight.colors", "#FFFF00,#00FFE4,#5AFF00,#0087FF,#FFCC00,#FF00F0");
Nájdené : user_pref("sweetim.toolbar.logger.ConsoleHandler.MinReportLevel", "7");
Nájdené : user_pref("sweetim.toolbar.logger.FileHandler.FileName", "ff-toolbar.log");
Nájdené : user_pref("sweetim.toolbar.logger.FileHandler.MaxFileSize", "200000");
Nájdené : user_pref("sweetim.toolbar.logger.FileHandler.MinReportLevel", "7");
Nájdené : user_pref("sweetim.toolbar.mode.debug", "false");
Nájdené : user_pref("sweetim.toolbar.scripts.0.addcontextdiv", "true");
Nájdené : user_pref("sweetim.toolbar.scripts.0.callback", "simVerification");
Nájdené : user_pref("sweetim.toolbar.scripts.0.domain-blacklist", "");
Nájdené : user_pref("sweetim.toolbar.scripts.0.domain-whitelist", "hxxp://(www.|apps.)?facebook\\.com.*");
Nájdené : user_pref("sweetim.toolbar.scripts.0.elementid", "id_script_sim_fb");
Nájdené : user_pref("sweetim.toolbar.scripts.0.enable", "true");
Nájdené : user_pref("sweetim.toolbar.scripts.0.id", "id_script_fb");
Nájdené : user_pref("sweetim.toolbar.scripts.0.url", "hxxp://sc.sweetim.com/apps/in/fb/infb.js");
Nájdené : user_pref("sweetim.toolbar.scripts.1.addcontextdiv", "true");
Nájdené : user_pref("sweetim.toolbar.scripts.1.callback", "simVerification");
Nájdené : user_pref("sweetim.toolbar.scripts.1.domain-blacklist", "");
Nájdené : user_pref("sweetim.toolbar.scripts.1.domain-whitelist", "hxxps://(www.|apps.)?facebook\\.com.*");
Nájdené : user_pref("sweetim.toolbar.scripts.1.elementid", "id_script_sim_fb");
Nájdené : user_pref("sweetim.toolbar.scripts.1.enable", "false");
Nájdené : user_pref("sweetim.toolbar.scripts.1.id", "id_script_fb_hxxpS");
Nájdené : user_pref("sweetim.toolbar.scripts.1.url", "hxxps://sc.sweetim.com/apps/in/fb/infb.js");
Nájdené : user_pref("sweetim.toolbar.scripts.2.addcontextdiv", "false");
Nájdené : user_pref("sweetim.toolbar.scripts.2.callback", "");
Nájdené : user_pref("sweetim.toolbar.scripts.2.domain-blacklist", ".*.google..*|.*.bing..*|.*.live..*|.*.msn..[...]
Nájdené : user_pref("sweetim.toolbar.scripts.2.domain-whitelist", "");
Nájdené : user_pref("sweetim.toolbar.scripts.2.elementid", "id_predict_include_script");
Nájdené : user_pref("sweetim.toolbar.scripts.2.enable", "false");
Nájdené : user_pref("sweetim.toolbar.scripts.2.id", "id_script_prad");
Nájdené : user_pref("sweetim.toolbar.scripts.2.url", "hxxp://cdn1.certified-apps.com/scripts/shared/enable.js?[...]
Nájdené : user_pref("sweetim.toolbar.search.external", "<?xml version=\"1.0\"?><TOOLBAR><EXTERNAL_SEARCH engin[...]
Nájdené : user_pref("sweetim.toolbar.search.history.capacity", "10");
Nájdené : user_pref("sweetim.toolbar.searchguard.enable", "false");
Nájdené : user_pref("sweetim.toolbar.searchguard.initialized_by_rc", "true");
Nájdené : user_pref("sweetim.toolbar.simapp_id", "{82375480-3B8F-4F3F-80F8-7A6281E36317}");
Nájdené : user_pref("sweetim.toolbar.version", "1.6.0.3");

-\\ Google Chrome v [Nemôžem získa? verziu]

Súbor : C:\Users\Rudo\AppData\Local\Google\Chrome\User Data\Default\Preferences

[OK] Súbor je eistý.

*************************

AdwCleaner[R1].txt - [16033 octets] - [12/06/2013 12:03:07]

########## EOF - C:\AdwCleaner[R1].txt - [16094 octets] ##########

[vyosek]

Spustte znovu AdwCleaner

• Pokud pouzivate Win Vista ci W7, kliknete na AdwCleaner pravym a dejte Run As Administrator ci Spustit jako spravce
• Kliknete na Smazat
• PC provede opravu, restartuje se a da Vam log (C:\AdwCleaner [S1].txt) , jeho obsah vlozte sem

[Patriciusd]

log:

# AdwCleaner v2.303 - Log vytvorený 12/06/2013 o 12:08:38
# Aktualizované 08/06/2013 Xplode
# Operaený systém : Windows 7 Professional Service Pack 1 (32 bits)
# Uživateľ : Rudo - RUDO-PC
# Spustený systém : Normálny
# Spustené z : C:\Users\Rudo\Desktop\adwcleaner.exe
# Voľba [Vymaza?]


***** [Služby] *****

Zastavené & vymazané : Web Assistant Updater

***** [Súbory / Adresáre] *****

Adresár Vymazané : C:\Program Files\Web Assistant
Adresár Vymazané : C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Media Finder
Adresár Vymazané : C:\Users\Rudo\AppData\Local\TempDir
Adresár Vymazané : C:\Users\Rudo\AppData\Roaming\Babylon
Adresár Vymazané : C:\Users\Rudo\AppData\Roaming\Media Finder
Adresár Vymazané : C:\Users\Rudo\AppData\Roaming\Mozilla\Extensions\{ec8030f7-c20a-464f-9b0e-13a3a9e97384}\gencrawler@some.com
Adresár Vymazané : C:\Users\Rudo\AppData\Roaming\Mozilla\Firefox\Profiles\uja28vkk.default\SweetPacksToolbarData
Adresár Vymazané : C:\Users\Rudo\AppData\Roaming\OpenCandy
Súbor Vymazané : C:\Program Files\Mozilla Firefox\searchplugins\babylon.xml
Súbor Vymazané : C:\user.js
Súbor Vymazané : C:\Users\Rudo\AppData\Roaming\Mozilla\Firefox\Profiles\uja28vkk.default\searchplugins\delta.xml
Súbor Vymazané : C:\Users\Rudo\AppData\Roaming\Mozilla\Firefox\Profiles\uja28vkk.default\searchplugins\MyStart Search.xml
Súbor Vymazané : C:\Users\Rudo\AppData\Roaming\Mozilla\Firefox\Profiles\uja28vkk.default\searchplugins\SweetIm.xml

***** [Registre] *****

Hodnota Vymazané : HKLM\SOFTWARE\Mozilla\Firefox\extensions [{336D0C35-8A85-403a-B9D2-65C292C39087}]
Kľúe Vymazané : HKCU\Software\1ClickDownload
Kľúe Vymazané : HKCU\Software\90d68cb23fbd44
Kľúe Vymazané : HKCU\Software\APN PIP
Kľúe Vymazané : HKCU\Software\BabylonToolbar
Kľúe Vymazané : HKCU\Software\Conduit
Kľúe Vymazané : HKCU\Software\DataMngr
Kľúe Vymazané : HKCU\Software\IM
Kľúe Vymazané : HKCU\Software\ImInstaller
Kľúe Vymazané : HKCU\Software\incredibar.com
Kľúe Vymazané : HKCU\Software\MediaFinder
Kľúe Vymazané : HKCU\Software\Microsoft\Internet Explorer\MenuExt\Download with &Media Finder
Kľúe Vymazané : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{0ECDF796-C2DC-4D79-A620-CCE0C0A66CC9}
Kľúe Vymazané : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{CFF4DB9B-135F-47C0-9269-B4C6572FD61A}
Kľúe Vymazané : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{EEE6C360-6118-11DC-9C72-001320C79847}
Kľúe Vymazané : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{336D0C35-8A85-403A-B9D2-65C292C39087}
Kľúe Vymazané : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{336D0C35-8A85-403A-B9D2-65C292C39087}
Kľúe Vymazané : HKCU\Software\Softonic
Kľúe Vymazané : HKLM\Software\Babylon
Kľúe Vymazané : HKLM\SOFTWARE\Classes\AppID\{608D3067-77E8-463D-9084-908966806826}
Kľúe Vymazané : HKLM\SOFTWARE\Classes\AppID\{B302A1BD-0157-49FA-90F1-4E94F22C7B4B}
Kľúe Vymazané : HKLM\SOFTWARE\Classes\AppID\{BDB69379-802F-4EAF-B541-F8DE92DD98DB}
Kľúe Vymazané : HKLM\SOFTWARE\Classes\AppID\{C26644C4-2A12-4CA6-8F2E-0EDE6CF018F3}
Kľúe Vymazané : HKLM\SOFTWARE\Classes\AppID\Extension.DLL
Kľúe Vymazané : HKLM\SOFTWARE\Classes\bbylntlbr.bbylntlbrHlpr
Kľúe Vymazané : HKLM\SOFTWARE\Classes\bbylntlbr.bbylntlbrHlpr.1
Kľúe Vymazané : HKLM\SOFTWARE\Classes\CLSID\{336D0C35-8A85-403A-B9D2-65C292C39087}
Kľúe Vymazané : HKLM\SOFTWARE\Classes\CLSID\{35B8892D-C3FB-4D88-990D-31DB2EBD72BD}
Kľúe Vymazané : HKLM\SOFTWARE\Classes\CLSID\{80922EE0-8A76-46AE-95D5-BD3C3FE0708D}
Kľúe Vymazané : HKLM\SOFTWARE\Classes\Extension.ExtensionHelperObject
Kľúe Vymazané : HKLM\SOFTWARE\Classes\Extension.ExtensionHelperObject.1
Kľúe Vymazané : HKLM\SOFTWARE\Classes\Interface\{3F607E46-0D3C-4442-B1DE-DE7FA4768F5C}
Kľúe Vymazané : HKLM\SOFTWARE\Classes\Interface\{A36867C6-302D-49FC-9D8E-1EB037B5F1AB}
Kľúe Vymazané : HKLM\SOFTWARE\Classes\Interface\{FE0273D1-99DF-4AC0-87D5-1371C6271785}
Kľúe Vymazané : HKLM\SOFTWARE\Classes\MF
Kľúe Vymazané : HKLM\SOFTWARE\Classes\Prod.cap
Kľúe Vymazané : HKLM\SOFTWARE\Classes\TypeLib\{1D5A4199-956E-49BC-B89F-6A35C57C0D13}
Kľúe Vymazané : HKLM\SOFTWARE\Classes\TypeLib\{93E3D79C-0786-48FF-9329-93BC9F6DC2B3}
Kľúe Vymazané : HKLM\Software\Conduit
Kľúe Vymazané : HKLM\Software\DataMngr
Kľúe Vymazané : HKLM\SOFTWARE\Google\Chrome\Extensions\dlnembnfbcpjnepmfjmngjenhhajpdfd
Kľúe Vymazané : HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{EEE6C360-6118-11DC-9C72-001320C79847}
Kľúe Vymazané : HKLM\SOFTWARE\Microsoft\Tracing\Babylon_RASAPI32
Kľúe Vymazané : HKLM\SOFTWARE\Microsoft\Tracing\Babylon_RASMANCS
Kľúe Vymazané : HKLM\SOFTWARE\Microsoft\Tracing\BabylonTC_RASAPI32
Kľúe Vymazané : HKLM\SOFTWARE\Microsoft\Tracing\BabylonTC_RASMANCS
Kľúe Vymazané : HKLM\SOFTWARE\Microsoft\Tracing\incredibar_installer_RASAPI32
Kľúe Vymazané : HKLM\SOFTWARE\Microsoft\Tracing\incredibar_installer_RASMANCS
Kľúe Vymazané : HKLM\SOFTWARE\Microsoft\Tracing\IncredibarToolbar_RASAPI32
Kľúe Vymazané : HKLM\SOFTWARE\Microsoft\Tracing\IncredibarToolbar_RASMANCS
Kľúe Vymazané : HKLM\SOFTWARE\Microsoft\Tracing\MyBabylontb_RASAPI32
Kľúe Vymazané : HKLM\SOFTWARE\Microsoft\Tracing\MyBabylontb_RASMANCS
Kľúe Vymazané : HKLM\SOFTWARE\Microsoft\Tracing\SweetIM_RASAPI32
Kľúe Vymazané : HKLM\SOFTWARE\Microsoft\Tracing\SweetIM_RASMANCS
Kľúe Vymazané : HKLM\SOFTWARE\Microsoft\Tracing\SweetPacksUpdateManager_RASAPI32
Kľúe Vymazané : HKLM\SOFTWARE\Microsoft\Tracing\SweetPacksUpdateManager_RASMANCS
Kľúe Vymazané : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{336D0C35-8A85-403A-B9D2-65C292C39087}
Kľúe Vymazané : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{336D0C35-8A85-403a-B9D2-65C292C39087}_is1
Kľúe Vymazané : HKLM\Software\PIP
Kľúe Vymazané : HKLM\SOFTWARE\Software
Kľúe Vymazané : HKLM\Software\Tarma Installer
Kľúe Vymazané : HKLM\Software\Web Assistant

***** [Internetové prehliadaee] *****

-\\ Internet Explorer v10.0.9200.16576

Zamenené : [HKCU\Software\Microsoft\Internet Explorer\Main - Start Page] = hxxp://www.delta-search.com/?affID=119776&tt=1 ... 6D04ADDCF6 --> hxxp://www.google.com

-\\ Mozilla Firefox v21.0 (sk)

Súbor : C:\Users\Rudo\AppData\Roaming\Mozilla\Firefox\Profiles\uja28vkk.default\prefs.js

C:\Users\Rudo\AppData\Roaming\Mozilla\Firefox\Profiles\uja28vkk.default\user.js ... Vymazané !

Vymazané : user_pref("browser.search.defaultenginename", "SweetIM Search");
Vymazané : user_pref("extensions.BabylonToolbar_i.aflt", "babsst");
Vymazané : user_pref("extensions.BabylonToolbar_i.babExt", "");
Vymazané : user_pref("extensions.BabylonToolbar_i.babTrack", "affID=112059&tt=010712_5");
Vymazané : user_pref("extensions.BabylonToolbar_i.hardId", "b68e63a5000000000000f46d04addcf6");
Vymazané : user_pref("extensions.BabylonToolbar_i.id", "b68e63a5000000000000f46d04addcf6");
Vymazané : user_pref("extensions.BabylonToolbar_i.instlDay", "15525");
Vymazané : user_pref("extensions.BabylonToolbar_i.instlRef", "sst");
Vymazané : user_pref("extensions.BabylonToolbar_i.prdct", "BabylonToolbar");
Vymazané : user_pref("extensions.BabylonToolbar_i.prtnrId", "babylon");
Vymazané : user_pref("extensions.BabylonToolbar_i.smplGrp", "none");
Vymazané : user_pref("extensions.BabylonToolbar_i.srcExt", "ss");
Vymazané : user_pref("extensions.BabylonToolbar_i.tlbrId", "base");
Vymazané : user_pref("extensions.BabylonToolbar_i.vrsn", "1.5.3.17");
Vymazané : user_pref("extensions.BabylonToolbar_i.vrsnTs", "1.5.3.178:59:26");
Vymazané : user_pref("extensions.BabylonToolbar_i.vrsni", "1.5.3.17");
Vymazané : user_pref("extensions.delta.admin", false);
Vymazané : user_pref("extensions.delta.aflt", "babsst");
Vymazané : user_pref("extensions.delta.appId", "{C26644C4-2A12-4CA6-8F2E-0EDE6CF018F3}");
Vymazané : user_pref("extensions.delta.autoRvrt", "false");
Vymazané : user_pref("extensions.delta.dfltLng", "en");
Vymazané : user_pref("extensions.delta.excTlbr", false);
Vymazané : user_pref("extensions.delta.id", "b68e63a5000000000000f46d04addcf6");
Vymazané : user_pref("extensions.delta.instlDay", "15796");
Vymazané : user_pref("extensions.delta.instlRef", "sst");
Vymazané : user_pref("extensions.delta.newTab", false);
Vymazané : user_pref("extensions.delta.prdct", "delta");
Vymazané : user_pref("extensions.delta.prtnrId", "delta");
Vymazané : user_pref("extensions.delta.rvrt", "false");
Vymazané : user_pref("extensions.delta.smplGrp", "none");
Vymazané : user_pref("extensions.delta.tlbrId", "base");
Vymazané : user_pref("extensions.delta.tlbrSrchUrl", "");
Vymazané : user_pref("extensions.delta.vrsn", "1.8.10.0");
Vymazané : user_pref("extensions.delta.vrsnTs", "1.8.10.014:52:33");
Vymazané : user_pref("extensions.delta.vrsni", "1.8.10.0");
Vymazané : user_pref("extensions.incredibar_i.aflt", "orgnl");
Vymazané : user_pref("extensions.incredibar_i.dfltLng", "");
Vymazané : user_pref("extensions.incredibar_i.did", "10671");
Vymazané : user_pref("extensions.incredibar_i.excTlbr", false);
Vymazané : user_pref("extensions.incredibar_i.id", "b68e63a5000000000000f46d04addcf6");
Vymazané : user_pref("extensions.incredibar_i.installerproductid", "26");
Vymazané : user_pref("extensions.incredibar_i.instlDay", "15536");
Vymazané : user_pref("extensions.incredibar_i.instlRef", "");
Vymazané : user_pref("extensions.incredibar_i.ms_url_id", "");
Vymazané : user_pref("extensions.incredibar_i.newTab", false);
Vymazané : user_pref("extensions.incredibar_i.ppd", "");
Vymazané : user_pref("extensions.incredibar_i.prdct", "incredibar");
Vymazané : user_pref("extensions.incredibar_i.productid", "26");
Vymazané : user_pref("extensions.incredibar_i.prtnrId", "Incredibar");
Vymazané : user_pref("extensions.incredibar_i.smplGrp", "none");
Vymazané : user_pref("extensions.incredibar_i.tlbrId", "base");
Vymazané : user_pref("extensions.incredibar_i.tlbrSrchUrl", "hxxp://mystart.Incredibar.com/?a=6R8z4Od7mc&loc=IB[...]
Vymazané : user_pref("extensions.incredibar_i.upn2", "6R8z4Od7mc");
Vymazané : user_pref("extensions.incredibar_i.upn2n", "92824710205150580");
Vymazané : user_pref("extensions.incredibar_i.vrsn", "1.5.11.14");
Vymazané : user_pref("extensions.incredibar_i.vrsnTs", "1.5.11.1417:43:15");
Vymazané : user_pref("extensions.incredibar_i.vrsni", "1.5.11.14");
Vymazané : user_pref("sweetim.toolbar.Visibility.VisibilityGuardLastUnHide", "0");
Vymazané : user_pref("sweetim.toolbar.Visibility.enable", "true");
Vymazané : user_pref("sweetim.toolbar.Visibility.intervaldays", "7");
Vymazané : user_pref("sweetim.toolbar.cda.DisableOveride.enable", "true");
Vymazané : user_pref("sweetim.toolbar.cda.HideOveride.enable", "true");
Vymazané : user_pref("sweetim.toolbar.cda.RemoveOveride.enable", "true");
Vymazané : user_pref("sweetim.toolbar.dialogs.0.enable", "true");
Vymazané : user_pref("sweetim.toolbar.dialogs.0.handler", "chrome://sim_toolbar_package/content/optionsdialog-h[...]
Vymazané : user_pref("sweetim.toolbar.dialogs.0.height", "335");
Vymazané : user_pref("sweetim.toolbar.dialogs.0.id", "id_options_dialog");
Vymazané : user_pref("sweetim.toolbar.dialogs.0.title", "$string.config.label;");
Vymazané : user_pref("sweetim.toolbar.dialogs.0.url", "hxxp://www.sweetim.com/simffbar/options_remote_ff_1_6.ht[...]
Vymazané : user_pref("sweetim.toolbar.dialogs.0.width", "761");
Vymazané : user_pref("sweetim.toolbar.dialogs.1.enable", "true");
Vymazané : user_pref("sweetim.toolbar.dialogs.1.handler", "chrome://sim_toolbar_package/content/exampledialog-h[...]
Vymazané : user_pref("sweetim.toolbar.dialogs.1.height", "300");
Vymazané : user_pref("sweetim.toolbar.dialogs.1.id", "id_example_dialog");
Vymazané : user_pref("sweetim.toolbar.dialogs.1.title", "Example (unit-test) dialog");
Vymazané : user_pref("sweetim.toolbar.dialogs.1.url", "chrome://sim_toolbar_package/content/exampledialog.html"[...]
Vymazané : user_pref("sweetim.toolbar.dialogs.1.width", "500");
Vymazané : user_pref("sweetim.toolbar.dialogs.2.enable", "true");
Vymazané : user_pref("sweetim.toolbar.dialogs.2.handler", "chrome://sim_toolbar_package/content/cdadialog-handl[...]
Vymazané : user_pref("sweetim.toolbar.dialogs.2.height", "150");
Vymazané : user_pref("sweetim.toolbar.dialogs.2.id", "id_dialog_hide_disable_remove");
Vymazané : user_pref("sweetim.toolbar.dialogs.2.title", "Option Dialog");
Vymazané : user_pref("sweetim.toolbar.dialogs.2.url", "hxxp://www.sweetim.com/simffbar/simcdadialog.asp");
Vymazané : user_pref("sweetim.toolbar.dialogs.2.width", "530");
Vymazané : user_pref("sweetim.toolbar.dnscatch.domain-blacklist", ".*.sweetim.com/.*|.*.facebook.com/.*|.*.goog[...]
Vymazané : user_pref("sweetim.toolbar.highlight.colors", "#FFFF00,#00FFE4,#5AFF00,#0087FF,#FFCC00,#FF00F0");
Vymazané : user_pref("sweetim.toolbar.logger.ConsoleHandler.MinReportLevel", "7");
Vymazané : user_pref("sweetim.toolbar.logger.FileHandler.FileName", "ff-toolbar.log");
Vymazané : user_pref("sweetim.toolbar.logger.FileHandler.MaxFileSize", "200000");
Vymazané : user_pref("sweetim.toolbar.logger.FileHandler.MinReportLevel", "7");
Vymazané : user_pref("sweetim.toolbar.mode.debug", "false");
Vymazané : user_pref("sweetim.toolbar.scripts.0.addcontextdiv", "true");
Vymazané : user_pref("sweetim.toolbar.scripts.0.callback", "simVerification");
Vymazané : user_pref("sweetim.toolbar.scripts.0.domain-blacklist", "");
Vymazané : user_pref("sweetim.toolbar.scripts.0.domain-whitelist", "hxxp://(www.|apps.)?facebook\\.com.*");
Vymazané : user_pref("sweetim.toolbar.scripts.0.elementid", "id_script_sim_fb");
Vymazané : user_pref("sweetim.toolbar.scripts.0.enable", "true");
Vymazané : user_pref("sweetim.toolbar.scripts.0.id", "id_script_fb");
Vymazané : user_pref("sweetim.toolbar.scripts.0.url", "hxxp://sc.sweetim.com/apps/in/fb/infb.js");
Vymazané : user_pref("sweetim.toolbar.scripts.1.addcontextdiv", "true");
Vymazané : user_pref("sweetim.toolbar.scripts.1.callback", "simVerification");
Vymazané : user_pref("sweetim.toolbar.scripts.1.domain-blacklist", "");
Vymazané : user_pref("sweetim.toolbar.scripts.1.domain-whitelist", "hxxps://(www.|apps.)?facebook\\.com.*");
Vymazané : user_pref("sweetim.toolbar.scripts.1.elementid", "id_script_sim_fb");
Vymazané : user_pref("sweetim.toolbar.scripts.1.enable", "false");
Vymazané : user_pref("sweetim.toolbar.scripts.1.id", "id_script_fb_hxxpS");
Vymazané : user_pref("sweetim.toolbar.scripts.1.url", "hxxps://sc.sweetim.com/apps/in/fb/infb.js");
Vymazané : user_pref("sweetim.toolbar.scripts.2.addcontextdiv", "false");
Vymazané : user_pref("sweetim.toolbar.scripts.2.callback", "");
Vymazané : user_pref("sweetim.toolbar.scripts.2.domain-blacklist", ".*.google..*|.*.bing..*|.*.live..*|.*.msn..[...]
Vymazané : user_pref("sweetim.toolbar.scripts.2.domain-whitelist", "");
Vymazané : user_pref("sweetim.toolbar.scripts.2.elementid", "id_predict_include_script");
Vymazané : user_pref("sweetim.toolbar.scripts.2.enable", "false");
Vymazané : user_pref("sweetim.toolbar.scripts.2.id", "id_script_prad");
Vymazané : user_pref("sweetim.toolbar.scripts.2.url", "hxxp://cdn1.certified-apps.com/scripts/shared/enable.js?[...]
Vymazané : user_pref("sweetim.toolbar.search.external", "<?xml version=\"1.0\"?><TOOLBAR><EXTERNAL_SEARCH engin[...]
Vymazané : user_pref("sweetim.toolbar.search.history.capacity", "10");
Vymazané : user_pref("sweetim.toolbar.searchguard.enable", "false");
Vymazané : user_pref("sweetim.toolbar.searchguard.initialized_by_rc", "true");
Vymazané : user_pref("sweetim.toolbar.simapp_id", "{82375480-3B8F-4F3F-80F8-7A6281E36317}");
Vymazané : user_pref("sweetim.toolbar.version", "1.6.0.3");

-\\ Google Chrome v [Nemôžem získa? verziu]

Súbor : C:\Users\Rudo\AppData\Local\Google\Chrome\User Data\Default\Preferences

[OK] Súbor je eistý.

*************************

AdwCleaner[R1].txt - [16164 octets] - [12/06/2013 12:03:07]
AdwCleaner[S1].txt - [15974 octets] - [12/06/2013 12:08:38]

########## EOF - C:\AdwCleaner[S1].txt - [16035 octets] ##########

[vyosek]

Stahnete Malwarebytes Anti-Rootkit http://www.bleepingcomputer.com/downloa ... i-rootkit/

• Ulozte nejlepe na Plochu a rozbalte
• Spustte kliknutim na mbanr
• Nyni postupne kliknete na Next a Update
• Po dokonceni update (aktualizace) databaze kliknete opet na Next
• Nechte zaskrtnute vsechny tri moznosti a klinete na Scan cimz spustite prohledavani PC
• Po dokonceni skenu (cca 5 minutek) zkontrolujte, zda-li je u vsech nalezu (samozrejme pokud budou) zatrzitko
• Tez zkontrolujte, jetsli je zatrzitko u Create Restore point
• Nyni kliknete na CleanUp cimz nalezenou infekci odstranime
• PC bude restartovan
• Slozka mbar by mela obsahovat log (a zrejme se i sam otevre) mbar-log-rok-mesic-den (hodina-minuta-sekunda).txt, ten mi sem dejte

Stahnete Malwarebytes' Anti-Malware (zkracene MBAM) http://forum.viry.cz/viewtopic.php?f=29&t=115222

• Provedte aktualizaci
• Provedte uplny sken - nic nemazte
• MBAM miva obcas falesne detekce, proto vlozte log do prispevku a pockejte na posouzeni

[Patriciusd]

Anti-Rootkit nič nenašiel...

Malwarebytes Anti-Rootkit BETA 1.06.0.1003
http://www.malwarebytes.org

Database version: v2013.06.13.03

Windows 7 Service Pack 1 x86 NTFS
Internet Explorer 10.0.9200.16618
Rudo :: RUDO-PC [administrator]

13. 6. 2013 8:15:13
mbar-log-2013-06-13 (08-15-13).txt

Scan type: Quick scan
Scan options enabled: Anti-Rootkit | Drivers | MBR | Physical Sectors | Memory | Startup | Registry | File System | Heuristics/Extra | Heuristics/Shuriken | PUM | P2P
Scan options disabled: Deep Anti-Rootkit Scan | PUP
Objects scanned: 207048
Time elapsed: 10 minute(s), 12 second(s)

Memory Processes Detected: 0
(No malicious items detected)

Memory Modules Detected: 0
(No malicious items detected)

Registry Keys Detected: 0
(No malicious items detected)

Registry Values Detected: 0
(No malicious items detected)

Registry Data Items Detected: 0
(No malicious items detected)

Folders Detected: 0
(No malicious items detected)

Files Detected: 0
(No malicious items detected)

Physical Sectors Detected: 0
(No malicious items detected)

(end)

[vyosek]

Fajn, nyni MBAM...

[Patriciusd]

log z MBAM :

Malwarebytes Anti-Malware 1.75.0.1300
www.malwarebytes.org

Verzia databázy: v2013.06.13.03

Windows 7 Service Pack 1 x86 NTFS
Internet Explorer 10.0.9200.16618
Rudo :: RUDO-PC [administrátor]

13. 6. 2013 8:29:57
MBAM-log-2013-06-13 (09-42-29).txt

Typ kontroly: Úplná kontrola (C:\|D:\|G:\|H:\|I:\|)
Možnosti kontroly zapnuté: Pamäť | Po spustení | Registre | Systémové súbory | Heuristika/Extra | Heuristika/Shuriken | PUP | PUM
Možnosti kontroly vypnuté: P2P
Objektov kontrolovaných: 407158
Uplynutý čas: 1 hod, 12 min, 16 sek

Detegované služby pamäte: 0
(Škodlivé položky neboli zistené)

Detegované moduly pamäte: 0
(Škodlivé položky neboli zistené)

Detegované registračné kľúče: 0
(Škodlivé položky neboli zistené)

Detegované registračné hodnoty: 0
(Škodlivé položky neboli zistené)

Detegované položky registračných dát: 0
(Škodlivé položky neboli zistené)

Detegované priečinky: 0
(Škodlivé položky neboli zistené)

Detegované súbory: 2
I:\System Volume Information\_restore{A6037213-43D1-4461-BD51-B4EA7855244D}\RP224\A0090499.exe (Risktool.KillFiles) -> Žiadna úloha nevykonaná.
I:\System Volume Information\_restore{DFA38322-E9A9-4A99-A4BA-A7EA126AE0E5}\RP5\A0000299.exe (Risktool.KillFiles) -> Žiadna úloha nevykonaná.

(koniec)

[vyosek]

Havet se usadila v bodech obnoveni - smazte je dle navodu kolegy riffa http://www.viry.cz/forum/viewtopic.php?f=11&t=47040

T-Cleaner http://vyosek.ic.cz/pro_usery/T-Cleaner.exe

• Stahnete a spustte
• Pro potvrzeni volby mackejte A, Enter
• Po pouziti utilitu smazte
• Antiviry touhou utilitu chybne oznacit jako vir - jedna se o falesny poplach - takze v pohode stahnete (pripadne vypnete pri stahovani antivir)

OTC http://oldtimer.geekstogo.com/OTC.exe

• Stahnete a spustte
• Kliknete na CleanUp a potvrdte YES
• Program uklidi a restartuje PC

TFC http://oldtimer.geekstogo.com/TFC.exe

• Stahnete a spustte
• Kliknete na Start a potvrdte OK
• Program uklidi a restartuje pc
• Po pouziti utilitu smazte

Stahnete Ccleaner http://forum.viry.cz/viewtopic.php?t=7478
Panel čistič

• Vse nechte jak je, jen dejte Analyzovat a pote Spustit CCleaner

Panel registry

• dejte Hledej problémy
• nasledne Opravit problémy - zalohu registru doporucuji udelat, opravte vsechny problemy
• postup opakujte dokud nebude bez problemu - vetsinou cca 3x

Panel nástroje

• Zde muzete odinstalovat nepotrebne programy

CCleaner doporucuji pouzivat cca jednou za tyden

A pokud nejsou problemy ci dotazy, je to z me strany vse

[Patriciusd]

Nejde mi obnova systému lebo nemám zálohu či čo nerozumiem tomu.... Stačí ísť do Vlastnosti počítača... dať ochranu systému, konfigurácia a vymazať? takto sa vymaže System Volume Information?

[vyosek]

Smazte tedy nalezy MBAMu to postaci

[Patriciusd]

Tak nakoniec som urobil všetko podľa vaších pokynov... Ďakujem za váš čas a pomoc cenním si to..... Vďaka !

[vyosek]

Nemate zac, rad jsem pomohl Zase nekdy

A na zaklade Pravidla o zamykani temat