Moderátor: Moderátoři
Nebylo to spise po aplikaci nejakeho cracku do te hry? Nebo je snad zakoupena? Dejte log z RSIT http://forum.viry.cz/viewtopic.php?f=13&t=130786
od 1. února 2011. stáhni podle systému Farbar Recovery Scan Tool pro 32bit http://www.bleepingcomputer.com/downloa ... scan-tool/ Nastavení FRST a získání logu:
od 1. února 2011. Jen se zeptam pouzivate legalni operacni system, nejvyssi licence Ultimate zrovna neni bezna. 
od 1. února 2011. FRST si stahne a ulozte na plochu, ne jak ted do docasnych souboru
Running from C:\Users\LaMa\AppData\Local\Opera\Opera\temporary_downloads
Po policejnim viru tam jsou jeste zbytky, odstranime Tvorba fixlistu pro FRST
Kód: Vybrat vše
HKCU\...\Policies\system: [LogonHoursAction] 2
HKCU\...\Policies\system: [DontDisplayLogonHoursWarnings] 1
HKU\Herní\...\Policies\system: [LogonHoursAction] 2
HKU\Herní\...\Policies\system: [DontDisplayLogonHoursWarnings] 1
HKU\Kapitán\...\Run: [Skype] - "C:\Program Files\Skype\Phone\Skype.exe" /minimized /regrun [x]
HKU\Kapitán\...\Policies\system: [LogonHoursAction] 2
HKU\Kapitán\...\Policies\system: [DontDisplayLogonHoursWarnings] 1
Startup: C:\Users\LaMa\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\sisi.exe ()
Startup: C:\Users\Herní\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MC service.lnk
ShortcutTarget: MC service.lnk -> C:\Users\LaMa\Downloads\Hstart_4.1-bi\hstartt.exe (No File)
Startup: C:\Users\LaMa\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MC service.lnk
ShortcutTarget: MC service.lnk -> C:\Users\LaMa\Downloads\Hstart_4.1-bi\hstartt.exe (No File)
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://search.babylon.com/?affID=119293 ... FF08904093
HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.centrum.cz/?utm_source=ch-br ... nt=default
SearchScopes: HKCU - DefaultScope {E7D5C6AA-7574-4AF7-A662-92FE33215811} URL = http://search.centrum.cz/index.php?utm_ ... er,IE-9&q={searchTerms}
SearchScopes: HKCU - {0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9} URL = http://www.delta-search.com/?q={searchTerms}&affID=119293&tt=gc_&babsrc=SP_ss&mntrId=F61700FF08904093
SearchScopes: HKCU - {c99fdc39-a1ae-4b24-8d71-e5274f8d7c54} URL = http://search.hotspotshield.com/g/results.php?c=s&q={searchTerms}
SearchScopes: HKCU - {E7D5C6AA-7574-4AF7-A662-92FE33215811} URL = http://search.centrum.cz/index.php?utm_ ... er,IE-9&q={searchTerms}
BHO: Hotspot Shield Class - {F9E4A054-E9B1-4BC3-83A3-76A1AE736170} - C:\Program Files\Hotspot Shield\HssIE\HssIE.dll (AnchorFree Inc.)
FF user.js: detected! => C:\Users\LaMa\AppData\Roaming\Mozilla\Firefox\Profiles\ngr2m2kv.default\user.js
FF NewTab: hxxp://www.delta-search.com/?affID=1192 ... FF08904093
FF SelectedSearchEngine: Delta Search
FF Homepage: hxxp://search.babylon.com/?affID=119293 ... FF08904093
\afurladvisor@anchorfree.com
S2 Winmgmt; C:\PROGRA~2\00el.dat [x]
REG: reg delete HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run /v NtVdmSrv /f
REG: reg delete HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run /v SwitchBoard /f
REG: reg delete HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run /v Skype /f
REG: reg delete HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NBKeyScan /f
REG: reg delete HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\sers /f
REG: reg delete HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Sony PC Companion /f
REG: reg delete HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Steam /f
REG: reg delete HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\uTorrent /f
REG: reg delete HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^GamePark klient 2.lnk /f
REG: reg delete HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Users^Herní^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^regmonstd.lnk /f
C:\Users\HAXXRAKSAMP\RakSAMP.exe
C:\Windows\inf\ntvdm.vbe
C:\PROGRA~2\00el.dat
C:\Users\LaMa\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\sisi.exe
C:\Windows\tasks\Adobe Flash Player Updater.job
Jeste jdeme dale, je tam toho dost Stahnete AdwCleaner http://general-changelog-team.fr/fr/dow ... adwcleaner
od 1. února 2011. Spustte znovu AdwCleaner
od 1. února 2011. Stahnete Malwarebytes' Anti-Malware (zkracene MBAM) http://forum.viry.cz/viewtopic.php?f=29&t=115222
od 1. února 2011.
Přispějete na provoz fóra?
