Odvirování PC, zrychlení počítače, vzdálená pomoc prostřednictvím služby neslape.cz

"policejní" vir - AVG koupeno, nepomohlo

Máte problém s virem? Vložte sem log z FRST nebo RSIT.

Moderátor: Moderátoři

Pravidla fóra
Pokud chcete pomoc, vložte log z FRST [návod zde] nebo RSIT [návod zde]

Jednotlivé thready budou po vyřešení uzamčeny. Stejně tak ty, které budou nečinné déle než 14 dní. Vizte Pravidlo o zamykání témat. Děkujeme za pochopení.

!NOVINKA!
Nově lze využívat služby vzdálené pomoci, kdy se k vašemu počítači připojí odborník a bližší informace o problému si od vás získá telefonicky! Více na www.neslape.cz
Zpráva
Autor
Uživatelský avatar
Rudy
Site Admin
Site Admin
Příspěvky: 118375
Registrován: 30 říj 2003 13:42
Bydliště: Plzeň
Kontaktovat uživatele:

Re: "policejní" vir - AVG koupeno, nepomohlo

#16 Příspěvek od Rudy »

Rádo se stalo! :)
Dotazy a logy vkládejte pouze do vašich threadů. Soukromé zprávy, icq a e-maily neslouží k řešení vašich problémů.

Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.

Navštivte: Obrázek

e-mail: rudy(zavináč)forum.viry.cz

Varování:
Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!


Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.

horenak
Návštěvník
Návštěvník
Příspěvky: 16
Registrován: 05 zář 2013 21:17

Re: "policejní" vir - AVG koupeno, nepomohlo

#17 Příspěvek od horenak »

Dobrý den, hlásím se znova. Problém se nevrátil, ale od znovuzprovoznění počítače je všechno nesmírně pomalé a na webové stránky se nezobrazují korektně, zejména tlačítka - viz přiložený screenshot. Dá se tomu ještě odpomoct prosím?

horenak
Návštěvník
Návštěvník
Příspěvky: 16
Registrován: 05 zář 2013 21:17

Re: "policejní" vir - AVG koupeno, nepomohlo

#18 Příspěvek od horenak »

Po přihlášení se objeví tato hláška, nevím, jestli to s tím zpomalením a divným zobrazováním webu může souviset:

Chyba při načítání souboru C:\Dokumen~1\Petr\Locals~1\Temp\hcnxejejbzqrlsklbzb.bfg Uvedený modul nebyl nalezen.

Uživatelský avatar
Rudy
Site Admin
Site Admin
Příspěvky: 118375
Registrován: 30 říj 2003 13:42
Bydliště: Plzeň
Kontaktovat uživatele:

Re: "policejní" vir - AVG koupeno, nepomohlo

#19 Příspěvek od Rudy »

Stáhněte FRST: http://vyosek.ic.cz/pro_usery/FRSTLauncher.exe a uložte na plochu. Spusťte a klikněte na >Scan<. Po skončení skenu se objeví log, který sem zkopírujte.
Dotazy a logy vkládejte pouze do vašich threadů. Soukromé zprávy, icq a e-maily neslouží k řešení vašich problémů.

Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.

Navštivte: Obrázek

e-mail: rudy(zavináč)forum.viry.cz

Varování:
Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!


Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.

horenak
Návštěvník
Návštěvník
Příspěvky: 16
Registrován: 05 zář 2013 21:17

Re: "policejní" vir - AVG koupeno, nepomohlo

#20 Příspěvek od horenak »

Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 09-09-2013 02
Ran by Petr (administrator) on PC-BAE24E97DB84 on 12-09-2013 17:47:46
Running from C:\Documents and Settings\Petr\Plocha
Microsoft Windows XP Home Edition Service Pack 3 (X86) OS Language: Czech
Internet Explorer Version 8
Boot Mode: Normal

==================== Processes (Whitelisted) ===================

(ATI Technologies Inc.) C:\WINDOWS\system32\Ati2evxx.exe
(ATI Technologies Inc.) C:\WINDOWS\system32\Ati2evxx.exe
(AVG) C:\Program Files\AVG\AVG PC Tuneup 2011\BoostSpeed.exe
(Microsoft Corporation) C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe
(Advanced Micro Devices Inc.) C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
() C:\Program Files\DivX\DivX Update\DivXUpdate.exe
() C:\Program Files\AVG Secure Search\vprot.exe
(LogMeIn Inc.) C:\Program Files\LogMeIn Hamachi\hamachi-2-ui.exe
(Skype Technologies S.A.) C:\Program Files\Skype\Phone\Skype.exe
(Apple Computer, Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(Hewlett-Packard Co.) C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpohmr08.exe
(Hewlett-Packard) C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpotdd01.exe
(LogMeIn Inc.) C:\Program Files\LogMeIn Hamachi\hamachi-2.exe
(Sun Microsystems, Inc.) C:\Program Files\Java\jre6\bin\jqs.exe
(ATI Technologies Inc.) C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\ccc.exe
() C:\Program Files\CDBurnerXP\NMSAccessU.exe
(Pandora.TV) C:\Program Files\PANDORA.TV\PanService\PandoraService.exe
(Hewlett-Packard Co.) C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpoevm08.exe
() C:\WINDOWS\system32\PnkBstrA.exe
(QIP.ru) C:\Program Files\QipGuard\QipGuard.exe
(PandoraTV) C:\Program Files\PANDORA.TV\PanService\PanProcess.exe
(AVG Secure Search) C:\Program Files\Common Files\AVG Secure Search\vToolbarUpdater\15.5.0\ToolbarUpdater.exe
() C:\Program Files\Common Files\AVG Secure Search\vToolbarUpdater\15.5.0\loggingserver.exe
(Hewlett-Packard Co.) C:\Program Files\Hewlett-Packard\Digital Imaging\Bin\hpoSTS08.exe
(Microsoft Corporation) C:\Program Files\Internet Explorer\iexplore.exe
(Microsoft Corporation) C:\WINDOWS\system32\msiexec.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files\AVG\AVG2013\avgidsagent.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files\AVG\AVG2013\avgfws.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files\AVG\AVG2013\avgwdsvc.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files\AVG\AVG2013\avgnsx.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files\AVG\AVG2013\avgemcx.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files\AVG\AVG2013\avgrsx.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files\AVG\AVG2013\avgcsrvx.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files\AVG\AVG2013\avgcsrvx.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files\AVG\AVG2013\avgui.exe

==================== Registry (Whitelisted) ==================

HKLM\...\Run: [StartCCC] - C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [98304 2010-08-25] (Advanced Micro Devices, Inc.)
HKLM\...\Run: [ATICustomerCare] - C:\Program Files\ATI\ATICustomerCare\ATICustomerCare.exe [311296 2010-03-04] (Advanced Micro Devices, Inc.)
HKLM\...\Run: [Adobe Reader Speed Launcher] - C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe [35696 2009-02-27] (Adobe Systems Incorporated)
HKLM\...\Run: [GrooveMonitor] - C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe [30040 2009-02-26] (Microsoft Corporation)
HKLM\...\Run: [QuickTime Task] - C:\Program Files\QuickTime\qttask.exe [421888 2011-10-24] (Apple Inc.)
HKLM\...\Run: [DivXUpdate] - C:\Program Files\DivX\DivX Update\DivXUpdate.exe [1259376 2011-07-29] ()
HKLM\...\Run: [AVG_UI] - C:\Program Files\AVG\AVG2013\avgui.exe [4411440 2013-08-15] (AVG Technologies CZ, s.r.o.)
HKLM\...\Run: [vProt] - C:\Program Files\AVG Secure Search\vprot.exe [2314416 2013-08-15] ()
HKLM\...\Run: [LogMeIn Hamachi Ui] - C:\Program Files\LogMeIn Hamachi\hamachi-2-ui.exe [2255184 2013-06-28] (LogMeIn Inc.)
Winlogon\Notify\AtiExtEvent: Ati2evxx.dll (ATI Technologies Inc.)
HKLM\...\Policies\Explorer: [NoDrives] 0
HKCU\...\Run: [Skype] - C:\Program Files\Skype\Phone\Skype.exe [19875432 2013-06-21] (Skype Technologies S.A.)
HKCU\...\Run: [ADUDReminder] - C:\Program Files\Advanced Driver Updater\adu.exe [9320816 2013-04-18] (Systweak Inc)
HKCU\...\Policies\Explorer: [NoDrives] 0
MountPoints2: {41f114e8-f742-11df-8fae-0019212b7c3e} - "G:\WD SmartWare.exe" autoplay=true
MountPoints2: {6bba4754-7035-11e0-90d7-0019212b7c3e} - F:\LaunchU3.exe -a
MountPoints2: {7aeb35fc-e221-11df-8f78-0019212b7c3e} - F:\DPFMate.exe
HKU\Mamka\...\Run: [ICQ] - "C:\Program Files\ICQ7.2\ICQ.exe" silent loginmode=4
HKU\Mamka\...\RunOnce: [FlashPlayerUpdate] - C:\WINDOWS\system32\Macromed\Flash\FlashUtil32_11_7_700_224_ActiveX.exe -update activex
HKU\Ondra\...\Run: [DAEMON Tools Lite] - C:\Program Files\DAEMON Tools Lite\DTLite.exe [ 2011-11-10] (DT Soft Ltd)
HKU\pc\...\Run: [DIMProbíhá stahování aktualizace...1300677038363] - c:\documents and settings\all users\data aplikací\corel\downloads\540215253_410003\1300677038363\dim_params.xml [ 2011-12-23] ()
HKU\pc\...\Run: [Sony PC Companion] - C:\Program Files\Sony\Sony PC Companion\PCCompanion.exe [ 2013-05-29] (Sony)
Startup: C:\Documents and Settings\All Users\Nabídka Start\Programy\Po spuštění\hp psc 1000 series.lnk
ShortcutTarget: hp psc 1000 series.lnk -> C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpohmr08.exe (Hewlett-Packard Co.)
Startup: C:\Documents and Settings\All Users\Nabídka Start\Programy\Po spuštění\hpoddt01.exe.lnk
ShortcutTarget: hpoddt01.exe.lnk -> C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpotdd01.exe (Hewlett-Packard)
Startup: C:\Documents and Settings\Jakub\Nabídka Start\Programy\Po spuštění\Výřezy obrazovky a spuštění aplikace OneNote 2007.lnk
ShortcutTarget: Výřezy obrazovky a spuštění aplikace OneNote 2007.lnk -> C:\Program Files\Microsoft Office\Office12\ONENOTEM.EXE (Microsoft Corporation)
Startup: C:\Documents and Settings\Petr\Nabídka Start\Programy\Po spuštění\byblkslrqybjejcxnch.lnk
ShortcutTarget: byblkslrqybjejcxnch.lnk -> C:\DOCUME~1\Petr\LOCALS~1\Temp\hcnxcjejbyqrlsklbyb.bfg (No File)
BootExecute: autocheck autochk * C:\PROGRA~1\AVG\AVG2013\avgrsx.exe /sync /restart

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.seznam.cz/
HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.microsoft.com/isapi/redir.dl ... r=iesearch
HKCU\Software\Microsoft\Internet Explorer\Main,ICQ Search = http://search.icq.com/search/results.ph ... &ch_id=osd
HKLM\Software\Microsoft\Internet Explorer\Main,SearchAssistant = http://www.microsoft.com/isapi/redir.dl ... r=iesearch
HKLM\Software\Microsoft\Internet Explorer\Main,CustomizeSearch = http://www.microsoft.com/isapi/redir.dl ... r=iesearch
URLSearchHook: (No Name) - {95289393-33EA-4F8D-B952-483415B9C955} - No File
URLSearchHook: (No Name) - {D8278076-BC68-4484-9233-6E7F1628B56C} - No File
URLSearchHook: (No Name) - {D3D233D5-9F6D-436C-B6C7-E63F77503B30} - No File
SearchScopes: HKCU - DefaultScope {95289393-33EA-4F8D-B952-483415B9C955} URL = http://search.qip.ru/?query={searchTerms}
SearchScopes: HKCU - {1CB20BF0-BBAE-40A7-93F4-6435FF3D0411} URL = http://www.crawler.com/search/dispatche ... tbid=60040
SearchScopes: HKCU - {20829534-0A1D-48A3-B130-11F4F28822CD} URL = http://asksearch.ask.com/redirect?clien ... earchTerms}&
SearchScopes: HKCU - {6552C7DD-90A4-4387-B795-F8F96747DE19} URL = http://search.icq.com/search/results.ph ... &ch_id=osd
SearchScopes: HKCU - {95289393-33EA-4F8D-B952-483415B9C955} URL = http://search.qip.ru/?query={searchTerms}
SearchScopes: HKCU - {C04B7D22-5AEC-4561-8F49-27F6269208F6} URL = http://toolbar.inbox.com/search/dispatc ... 093&lng=cs
BHO: No Name - {11BF46C6-B3DE-48BD-BF70-3AD85CAB80B5} - C:\PROGRA~1\SITERA~1\SiteRank.dll (Crawler, LLC)
BHO: Adobe PDF Link Helper - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll (Adobe Systems Incorporated)
BHO: DivX Plus Web Player HTML5 <video> - {326E768D-4182-46FD-9C16-1449A49795F4} - C:\Program Files\DivX\DivX Plus Web Player\ie\DivXHTML5\DivXHTML5.dll (DivX, LLC)
BHO: AVG Safe Search - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - C:\Program Files\AVG\AVG2012\avgssie.dll No File
BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll (Microsoft Corporation)
BHO: AVG Security Toolbar - {95B7759C-8C7F-4BF1-B163-73684A933233} - C:\Program Files\AVG Secure Search\15.5.0.2\AVG Secure Search_toolbar.dll (AVG Secure Search)
BHO: Adobe PDF Conversion Toolbar Helper - {AE7CD045-E861-484f-8273-0445EE161910} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated)
BHO: Skype Browser Helper - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll (Sun Microsystems, Inc.)
BHO: JQSIEStartDetectorImpl Class - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll (Sun Microsystems, Inc.)
BHO: SmartSelect Class - {F4971EE7-DAA0-4053-9964-665D8EE6A077} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated)
Toolbar: HKLM - Adobe PDF - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated)
Toolbar: HKLM - AVG Security Toolbar - {95B7759C-8C7F-4BF1-B163-73684A933233} - C:\Program Files\AVG Secure Search\15.5.0.2\AVG Secure Search_toolbar.dll (AVG Secure Search)
Toolbar: HKCU -&Adresa - {01E04581-4EEE-11D0-BFE9-00AA005B4383} - C:\Windows\system32\browseui.dll (Společnost Microsoft)
Toolbar: HKCU -&Odkazy - {0E5CBF21-D15F-11D0-8301-00AA005B4383} - C:\Windows\system32\SHELL32.dll (Microsoft Corporation)
Toolbar: HKCU -Adobe PDF - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated)
Toolbar: HKCU - No Name - {D7E97865-918F-41E4-9CD0-25AB1C574CE8} - No File
Toolbar: HKCU - No Name - {4B4D5056-3600-A76A-76A7-7A786E7484D7} - No File
Toolbar: HKCU - No Name - {E7DF6BFF-55A5-4EB7-A673-4ED3E9456D39} - No File
DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinsta ... s-i586.cab
DPF: {CAFEEFAC-0014-0002-0019-ABCDEFFEDCBA} http://java.sun.com/products/plugin/aut ... s-i586.cab
DPF: {CAFEEFAC-0016-0000-0026-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinsta ... s-i586.cab
DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinsta ... s-i586.cab
Handler: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Program Files\Microsoft Office\Office12\GrooveSystemServices.dll (Microsoft Corporation)
Handler: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - C:\Program Files\AVG\AVG2012\avgpp.dll No File
Handler: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL (Skype Technologies)
Handler: viprotocol - {B658800C-F66E-4EF3-AB85-6C0C227862A9} - C:\Program Files\Common Files\AVG Secure Search\ViProtocolInstaller\15.5.0\ViProtocol.dll (AVG Secure Search)
Winsock: Catalog5 04 C:\Program Files\Bonjour\mdnsNSP.dll [94208] (Apple Computer, Inc.)
Tcpip\Parameters: [DhcpNameServer] 10.0.0.138

FireFox:
========
FF ProfilePath: C:\Documents and Settings\Petr\Data aplikací\Mozilla\Firefox\Profiles\y9f1tj2o.default
FF Homepage: hxxp://www.search.ask.com/?l=dis&o=APN10749&gc ... 2013-04-23
FF SelectedSearchEngine: Ask Search
FF SearchEngineOrder.1: Ask Search
FF Plugin: @adobe.com/FlashPlayer - C:\WINDOWS\system32\Macromed\Flash\NPSWF32_11_8_800_168.dll ()
FF Plugin: @avg.com/AVG SiteSafety plugin,version=11.0.0.1,application/x-avg-sitesafety-plugin - C:\Program Files\Common Files\AVG Secure Search\SiteSafetyInstaller\15.5.0\\npsitesafety.dll (AVG Technologies)
FF Plugin: @divx.com/DivX Browser Plugin,version=1.0.0 - C:\Program Files\DivX\DivX Plus Web Player\npdivx32.dll (DivX, LLC)
FF Plugin: @divx.com/DivX VOD Helper,version=1.0.0 - C:\Program Files\DivX\DivX OVS Helper\npovshelper.dll (DivX, LLC.)
FF Plugin: @gamersfirst.com/LiveLauncher - C:\Program Files\GamersFirst\LIVE!\nplivelauncher.dll No File
FF Plugin: @Google.com/GoogleEarthPlugin - C:\Program Files\Google\Google Earth\plugin\npgeplugin.dll (Google)
FF Plugin: @google.com/npPicasa3,version=3.0.0 - C:\Program Files\Google\Picasa3\npPicasa3.dll (Google, Inc.)
FF Plugin: @java.com/JavaPlugin - C:\Program Files\Java\jre6\bin\new_plugin\npjp2.dll (Sun Microsystems, Inc.)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files\Microsoft Silverlight\5.1.20513.0\npctrl.dll ( Microsoft Corporation)
FF Plugin: @microsoft.com/WPF,version=3.5 - c:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation)
FF Plugin: @pandonetworks.com/PandoWebPlugin - C:\Program Files\Pando Networks\Media Booster\npPandoWebPlugin.dll (Pando Networks)
FF Plugin: @playstation.com/PsndlCheck,version=1.00 - C:\Program Files\Sony\PLAYSTATION Network Downloader\nppsndl.dll (Sony Computer Entertainment Inc.)
FF Plugin: @SonyCreativeSoftware.com/Media Go,version=1.0 - C:\Program Files\Sony\Media Go\npmediago.dll (Sony Network Entertainment International LLC)
FF Plugin: @tools.google.com/Google Update;version=3 - C:\Program Files\Google\Update\1.3.21.153\npGoogleUpdate3.dll (Google Inc.)
FF Plugin: @tools.google.com/Google Update;version=9 - C:\Program Files\Google\Update\1.3.21.153\npGoogleUpdate3.dll (Google Inc.)
FF Plugin HKCU: pandonetworks.com/PandoWebPlugin - C:\Program Files\Pando Networks\Media Booster\npPandoWebPlugin.dll (Pando Networks)
FF SearchPlugin: C:\Documents and Settings\Petr\Data aplikací\Mozilla\Firefox\Profiles\y9f1tj2o.default\searchplugins\ask-search.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\searchplugins\avg-secure-search.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\searchplugins\heureka-cz.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\searchplugins\jyxo-cz.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\searchplugins\seznam-cz.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\searchplugins\slunecnice-cz.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\avg-secure-search.xml
FF Extension: Skype Click to Call - C:\Program Files\Mozilla Firefox\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A}
FF Extension: Java Console - C:\Program Files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0026-ABCDEFFEDCBA}
FF Extension: Skype Click to Call - C:\Program Files\Mozilla Firefox\browser\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A}
FF HKLM\...\Firefox\Extensions: [{20a82645-c095-46ed-80e3-08825760534b}] - C:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\
FF Extension: Microsoft .NET Framework Assistant - C:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\
FF HKLM\...\Firefox\Extensions: [jqs@sun.com] - C:\Program Files\Java\jre6\lib\deploy\jqs\ff
FF Extension: Java Quick Starter - C:\Program Files\Java\jre6\lib\deploy\jqs\ff
FF HKLM\...\Firefox\Extensions: [siteranker@siteranker.com] - C:\Program Files\SiteRanker\firefox\
FF Extension: SiteRanker - C:\Program Files\SiteRanker\firefox\
FF HKLM\...\Firefox\Extensions: [{23fcfd51-4958-4f00-80a3-ae97e717ed8b}] - C:\Program Files\DivX\DivX Plus Web Player\firefox\DivXHTML5
FF Extension: DivX Plus Web Player HTML5 <video> - C:\Program Files\DivX\DivX Plus Web Player\firefox\DivXHTML5
FF HKLM\...\Firefox\Extensions: [bkmrksync@nokia.com] - C:\Program Files\Nokia\Nokia PC Suite 7\bkmrksync\
FF Extension: PC Sync 2 Synchronisation Extension - C:\Program Files\Nokia\Nokia PC Suite 7\bkmrksync\

Chrome:
=======
CHR HomePage: hxxp://www.search.ask.com/?l=dis&o=APN10749cr& ... 2013-04-23
CHR RestoreOnStartup: "hxxp://www.google.com/"
CHR DefaultSearchURL: (Ask Search) - http://asksearch.ask.com/redirect?clien ... earchTerms}
CHR DefaultSuggestURL: (Ask Search) - http://ss.websearch.ask.com/query?qsrc= ... earchTerms}
CHR Plugin: (Remoting Viewer) - internal-remoting-viewer
CHR Plugin: (Native Client) - C:\Program Files\Google\Chrome\Application\29.0.1547.62\ppGoogleNaClPluginChrome.dll ()
CHR Plugin: (Chrome PDF Viewer) - C:\Program Files\Google\Chrome\Application\29.0.1547.62\pdf.dll ()
CHR Plugin: (Shockwave Flash) - C:\Program Files\Google\Chrome\Application\29.0.1547.62\gcswf32.dll No File
CHR Plugin: (Shockwave Flash) - C:\WINDOWS\system32\Macromed\Flash\NPSWF32_11_2_202_235.dll No File
CHR Plugin: (AVG Internet Security) - C:\Documents and Settings\Petr\Local Settings\Data aplikac\u00ED\Google\Chrome\User Data\Default\Extensions\jmfkcklnlgedgbglfkkgedjfmejoahla\12.0.0.1901_0\plugins/avgnpss.dll No File
CHR Plugin: (Adobe Acrobat) - C:\Program Files\Adobe\Reader 9.0\Reader\Browser\nppdf32.dll (Adobe Systems Inc.)
CHR Plugin: (Java Deployment Toolkit 6.0.260.3) - C:\Program Files\Java\jre6\bin\new_plugin\npdeployJava1.dll (Sun Microsystems, Inc.)
CHR Plugin: (Java(TM) Platform SE 6 U26) - C:\Program Files\Java\jre6\bin\new_plugin\npjp2.dll (Sun Microsystems, Inc.)
CHR Plugin: (QuickTime Plug-in 7.7.1) - C:\Program Files\QuickTime\plugins\npqtplugin.dll (Apple Inc.)
CHR Plugin: (QuickTime Plug-in 7.7.1) - C:\Program Files\QuickTime\plugins\npqtplugin2.dll (Apple Inc.)
CHR Plugin: (QuickTime Plug-in 7.7.1) - C:\Program Files\QuickTime\plugins\npqtplugin3.dll (Apple Inc.)
CHR Plugin: (QuickTime Plug-in 7.7.1) - C:\Program Files\QuickTime\plugins\npqtplugin4.dll (Apple Inc.)
CHR Plugin: (QuickTime Plug-in 7.7.1) - C:\Program Files\QuickTime\plugins\npqtplugin5.dll (Apple Inc.)
CHR Plugin: (QuickTime Plug-in 7.7.1) - C:\Program Files\QuickTime\plugins\npqtplugin6.dll (Apple Inc.)
CHR Plugin: (QuickTime Plug-in 7.7.1) - C:\Program Files\QuickTime\plugins\npqtplugin7.dll (Apple Inc.)
CHR Plugin: (Microsoft\u00AE DRM) - C:\Program Files\Windows Media Player\npdrmv2.dll (Microsoft Corporation)
CHR Plugin: (Microsoft\u00AE DRM) - C:\Program Files\Windows Media Player\npwmsdrm.dll (Microsoft Corporation)
CHR Plugin: (Windows Media Player Plug-in Dynamic Link Library) - C:\Program Files\Windows Media Player\npdsplay.dll (Microsoft Corporation (written by Digital Renaissance Inc.))
CHR Plugin: (DivX VOD Helper Plug-in) - C:\Program Files\DivX\DivX OVS Helper\npovshelper.dll (DivX, LLC.)
CHR Plugin: (DivX Plus Web Player) - C:\Program Files\DivX\DivX Plus Web Player\npdivx32.dll (DivX, LLC)
CHR Plugin: (Google Earth Plugin) - C:\Program Files\Google\Google Earth\plugin\npgeplugin.dll (Google)
CHR Plugin: (Picasa) - C:\Program Files\Google\Picasa3\npPicasa3.dll (Google, Inc.)
CHR Plugin: (Google Update) - C:\Program Files\Google\Update\1.3.21.111\npGoogleUpdate3.dll No File
CHR Plugin: (Pando Web Plugin) - C:\Program Files\Pando Networks\Media Booster\npPandoWebPlugin.dll (Pando Networks)
CHR Plugin: (Media Go Detector) - C:\Program Files\Sony\Media Go\npmediago.dll (Sony Network Entertainment International LLC)
CHR Plugin: (PlayStation(R)Network Downloader Check Plug-in) - C:\Program Files\Sony\PLAYSTATION Network Downloader\nppsndl.dll (Sony Computer Entertainment Inc.)
CHR Plugin: (Windows Presentation Foundation) - c:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation)
CHR Extension: (YouTube) - C:\DOCUME~1\Petr\LOCALS~1\Data aplikací\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.6_0
CHR Extension: (Google Search) - C:\DOCUME~1\Petr\LOCALS~1\Data aplikací\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0
CHR Extension: (Skype Click to Call) - C:\DOCUME~1\Petr\LOCALS~1\Data aplikací\Google\Chrome\User Data\Default\Extensions\lifbcibllhkdhoafpjfnlhfpfgnpldfl\6.11.0.13348_0
CHR Extension: (Chrome In-App Payments service) - C:\DOCUME~1\Petr\LOCALS~1\Data aplikací\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.4.10_0
CHR Extension: (DivX Plus Web Player HTML5 \u003Cvideo\u003E) - C:\DOCUME~1\Petr\LOCALS~1\Data aplikací\Google\Chrome\User Data\Default\Extensions\nneajnkjbffgblleaoojgaacokifdkhm\2.1.2.145_0
CHR Extension: (Gmail) - C:\DOCUME~1\Petr\LOCALS~1\Data aplikací\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_1
CHR HKLM\...\Chrome\Extension: [lifbcibllhkdhoafpjfnlhfpfgnpldfl] - C:\Program Files\Skype\Toolbars\Skype for Chromium\skype_chrome_extension.crx
CHR HKLM\...\Chrome\Extension: [nneajnkjbffgblleaoojgaacokifdkhm] - C:\Program Files\DivX\DivX Plus Web Player\chrome\DivXHTML5\DivXHTML5.crx

========================== Services (Whitelisted) =================

S3 Adobe Version Cue CS4; C:\Program Files\Common Files\Adobe\Adobe Version Cue CS4\Server\bin\VersionCueCS4.exe [284016 2008-08-15] (Adobe Systems Incorporated)
R2 avgfws; C:\Program Files\AVG\AVG2013\avgfws.exe [1432080 2013-09-04] (AVG Technologies CZ, s.r.o.)
R2 AVGIDSAgent; C:\Program Files\AVG\AVG2013\avgidsagent.exe [4939312 2013-07-04] (AVG Technologies CZ, s.r.o.)
R2 avgwd; C:\Program Files\AVG\AVG2013\avgwdsvc.exe [283136 2013-07-23] (AVG Technologies CZ, s.r.o.)
R2 Hamachi2Svc; C:\Program Files\LogMeIn Hamachi\hamachi-2.exe [1440080 2013-06-28] (LogMeIn Inc.)
R2 NMSAccess; C:\Program Files\CDBurnerXP\NMSAccessU.exe [71096 2010-03-04] ()
R2 PanService; C:\Program Files\PANDORA.TV\PanService\PandoraService.exe [625304 2012-09-28] (Pandora.TV)
R2 PnkBstrA; C:\WINDOWS\system32\PnkBstrA.exe [76888 2012-12-09] ()
R2 QipGuard; C:\Program Files\QipGuard\QipGuard.exe [190336 2011-07-18] (QIP.ru)
S3 Sony PC Companion; C:\Program Files\Sony\Sony PC Companion\PCCService.exe [155824 2013-02-04] (Avanquest Software)
R2 vToolbarUpdater15.5.0; C:\Program Files\Common Files\AVG Secure Search\vToolbarUpdater\15.5.0\ToolbarUpdater.exe [1643184 2013-08-15] (AVG Secure Search)
R2 JavaQuickStarterService; "C:\Program Files\Java\jre6\bin\jqs.exe" -service -config "C:\Program Files\Java\jre6\lib\deploy\jqs\jqs.conf"
S3 WMZuneComm; "c:\Program Files\Zune\WMZuneComm.exe" [x]
S3 ZuneNetworkSvc; "c:\Program Files\Zune\ZuneNss.exe" [x]
S3 ZuneWlanCfgSvc; "c:\Program Files\Zune\ZuneWlanCfgSvc.exe" [x]

==================== Drivers (Whitelisted) ====================

S3 Ambfilt; C:\Windows\System32\drivers\Ambfilt.sys [1691480 2009-11-18] (Creative)
R1 AmdPPM; C:\Windows\System32\DRIVERS\AmdPPM.sys [33792 2007-04-16] (Advanced Micro Devices)
R3 Avgfwdx; C:\Windows\System32\DRIVERS\avgfwdx.sys [30944 2012-01-12] (AVG Technologies CZ, s.r.o.)
S3 Avgfwfd; C:\Windows\System32\DRIVERS\avgfwdx.sys [30944 2012-01-12] (AVG Technologies CZ, s.r.o.)
R1 AVGIDSDriver; C:\Windows\System32\DRIVERS\avgidsdriverx.sys [208184 2013-07-20] (AVG Technologies CZ, s.r.o.)
R0 AVGIDSHX; C:\Windows\System32\DRIVERS\avgidshx.sys [60216 2013-07-20] (AVG Technologies CZ, s.r.o.)
R1 AVGIDSShim; C:\Windows\System32\DRIVERS\avgidsshimx.sys [22328 2013-09-10] (AVG Technologies CZ, s.r.o.)
R1 Avgldx86; C:\Windows\System32\DRIVERS\avgldx86.sys [171320 2013-07-20] (AVG Technologies CZ, s.r.o.)
R0 Avglogx; C:\Windows\System32\DRIVERS\avglogx.sys [246072 2013-07-20] (AVG Technologies CZ, s.r.o.)
R0 Avgmfx86; C:\Windows\System32\DRIVERS\avgmfx86.sys [96568 2013-07-01] (AVG Technologies CZ, s.r.o.)
R0 Avgrkx86; C:\Windows\System32\DRIVERS\avgrkx86.sys [39224 2013-09-05] (AVG Technologies CZ, s.r.o.)
R1 Avgtdix; C:\Windows\System32\DRIVERS\avgtdix.sys [182072 2013-03-21] (AVG Technologies CZ, s.r.o.)
R1 avgtp; C:\WINDOWS\system32\drivers\avgtpx86.sys [37664 2013-08-15] (AVG Technologies)
R3 ctljystk; C:\Windows\System32\DRIVERS\ctljystk.sys [3712 2001-08-17] (Creative Technology Ltd.)
R1 dtsoftbus01; C:\Windows\System32\DRIVERS\dtsoftbus01.sys [239168 2012-02-08] (DT Soft Ltd)
R3 hamachi; C:\Windows\System32\DRIVERS\hamachi.sys [26176 2010-02-03] (LogMeIn, Inc.)
S3 HPZid412; C:\Windows\System32\DRIVERS\HPZid412.sys [49920 2005-10-22] (HP)
S3 HPZipr12; C:\Windows\System32\DRIVERS\HPZipr12.sys [16080 2003-03-09] (HP)
S3 HPZius12; C:\Windows\System32\DRIVERS\HPZius12.sys [21456 2003-03-09] (HP)
S3 KMWDFILTER; C:\Windows\System32\DRIVERS\KMWDFILTER.sys [17408 2008-10-09] (Windows (R) Codename Longhorn DDK provider)
S3 Monfilt; C:\Windows\System32\drivers\Monfilt.sys [1395800 2009-11-18] (Creative Technology Ltd.)
R0 nvgts; C:\Windows\System32\DRIVERS\nvgts.sys [165920 2009-08-04] (NVIDIA Corporation)
R2 PfModNT; C:\WINDOWS\system32\PfModNT.sys [6752 1999-12-17] (Creative Technology Ltd.)
S3 rtl8139; C:\Windows\System32\DRIVERS\RTL8139.SYS [20992 2008-04-13] (Realtek Semiconductor Corporation)
R0 sptd; C:\Windows\System32\Drivers\sptd.sys [428088 2011-12-04] ()
R3 yukonwxp; C:\Windows\System32\DRIVERS\yk51x86.sys [250496 2006-11-22] (Marvell)
R2 zumbus; C:\Windows\System32\DRIVERS\zumbus.sys [41472 2011-08-05] (Microsoft Corporation)
U3 aphxsn1t; C:\Windows\System32\Drivers\aphxsn1t.sys [0 ] (Microsoft Corporation)
S3 catchme; \??\C:\ComboFix\catchme.sys [x]
S1 HWiNFO32; \??\C:\DOCUME~1\pc\LOCALS~1\Temp\HWiNFO32.SYS [x]
S4 IntelIde; No ImagePath
S3 StarOpen; No ImagePath
U3 TlntSvr;
S3 WINFLASH; \??\C:\Documents and Settings\pc\Plocha\BIOS_R01\WinFlash.sys [x]

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2013-09-12 17:46 - 2013-09-12 07:55 - 00045802 _____ C:\Documents and Settings\Petr\Plocha\logmodification.bat
2013-09-12 17:46 - 2013-09-11 22:34 - 01082587 _____ (Farbar) C:\Documents and Settings\Petr\Plocha\FRST.exe
2013-09-12 17:37 - 2013-09-12 17:37 - 00000000 ____D C:\WINDOWS\LastGood
2013-09-12 00:17 - 2013-09-12 00:17 - 09430408 _____ (Adobe Systems Incorporated) C:\WINDOWS\system32\FlashPlayerInstaller.exe
2013-09-12 00:02 - 2013-09-12 17:48 - 00530647 _____ C:\WINDOWS\setupapi.log
2013-09-09 22:09 - 2013-09-09 22:09 - 00008598 _____ C:\Documents and Settings\Ondra\Plocha\Addition.rar
2013-09-09 22:09 - 2013-09-09 22:09 - 00000000 ____D C:\Documents and Settings\Ondra\Data aplikací\WinRAR
2013-09-09 22:05 - 2013-09-09 22:05 - 00050650 _____ C:\Documents and Settings\Ondra\Plocha\FRST.txt
2013-09-09 22:04 - 2013-09-09 22:05 - 00037669 _____ C:\Documents and Settings\Ondra\Plocha\Addition.txt
2013-09-09 22:02 - 2013-09-09 22:49 - 00000000 ____D C:\FRST
2013-09-09 22:02 - 2013-09-09 22:02 - 00364544 _____ (forum.viry.cz) C:\Documents and Settings\Ondra\Plocha\FRSTLauncher.exe
2013-09-09 22:02 - 2013-09-09 16:55 - 01082349 _____ (Farbar) C:\Documents and Settings\Ondra\Plocha\FRST.exe
2013-09-09 18:18 - 2013-09-12 17:29 - 00000374 _____ C:\WINDOWS\system32\Drivers\etc\hosts.ics
2013-09-09 01:06 - 2013-09-09 01:06 - 00024689 _____ C:\ComboFix.txt
2013-09-09 00:44 - 2013-09-09 01:07 - 00000000 ____D C:\ComboFix
2013-09-08 23:58 - 2013-09-08 23:58 - 00008192 ____H C:\WINDOWS\system32\config\SECURITY.tmp.LOG
2013-09-08 23:58 - 2013-09-08 23:58 - 00000000 ____H C:\WINDOWS\system32\config\system.tmp.LOG
2013-09-08 23:58 - 2013-09-08 23:58 - 00000000 ____H C:\WINDOWS\system32\config\software.tmp.LOG
2013-09-08 23:58 - 2013-09-08 23:58 - 00000000 ____H C:\WINDOWS\system32\config\SAM.tmp.LOG
2013-09-08 23:58 - 2013-09-08 23:58 - 00000000 ____H C:\WINDOWS\system32\config\default.tmp.LOG
2013-09-08 23:21 - 2013-09-08 23:21 - 05124111 ____R (Swearware) C:\Documents and Settings\Ondra\Plocha\ComboFix.exe
2013-09-05 23:50 - 2013-09-05 23:50 - 00000000 ____D C:\Documents and Settings\Ondra\Data aplikací\SiteRanker
2013-09-05 23:50 - 2013-09-05 23:50 - 00000000 ____D C:\Documents and Settings\Ondra\Data aplikací\AppGraffiti
2013-09-05 23:02 - 2013-09-05 23:02 - 00000000 _RSHD C:\cmdcons
2013-09-05 23:02 - 2010-10-01 14:51 - 00000211 _____ C:\Boot.bak
2013-09-05 23:02 - 2004-08-03 23:00 - 00261312 __RSH C:\cmldr
2013-09-05 22:55 - 2011-06-26 08:45 - 00256000 _____ C:\WINDOWS\PEV.exe
2013-09-05 22:55 - 2010-11-07 19:20 - 00208896 _____ C:\WINDOWS\MBR.exe
2013-09-05 22:55 - 2009-04-20 06:56 - 00060416 _____ (NirSoft) C:\WINDOWS\NIRCMD.exe
2013-09-05 22:55 - 2000-08-31 02:00 - 00518144 _____ (SteelWerX) C:\WINDOWS\SWREG.exe
2013-09-05 22:55 - 2000-08-31 02:00 - 00406528 _____ (SteelWerX) C:\WINDOWS\SWSC.exe
2013-09-05 22:55 - 2000-08-31 02:00 - 00212480 _____ (SteelWerX) C:\WINDOWS\SWXCACLS.exe
2013-09-05 22:55 - 2000-08-31 02:00 - 00098816 _____ C:\WINDOWS\sed.exe
2013-09-05 22:55 - 2000-08-31 02:00 - 00080412 _____ C:\WINDOWS\grep.exe
2013-09-05 22:55 - 2000-08-31 02:00 - 00068096 _____ C:\WINDOWS\zip.exe
2013-09-05 22:53 - 2013-09-09 01:06 - 00000000 ____D C:\Qoobox
2013-09-05 22:53 - 2013-09-08 23:58 - 00000000 ____D C:\WINDOWS\erdnt
2013-09-05 22:53 - 2013-09-05 22:53 - 00000000 ___RD C:\Documents and Settings\Ondra\Dokumenty\Filmy
2013-09-05 22:24 - 2013-09-05 22:24 - 00000000 ____D C:\rsit
2013-09-05 22:24 - 2013-09-05 22:24 - 00000000 ____D C:\Program Files\trend micro
2013-09-05 18:37 - 2013-09-05 18:37 - 00000000 _____ C:\Documents and Settings\All Users\Data aplikací\fobrlof.dat
2013-09-03 22:34 - 2013-09-04 22:34 - 00000276 _____ C:\WINDOWS\Tasks\AdvancedDriverUpdater_UPDATES.job
2013-09-03 22:34 - 2013-09-03 22:34 - 00000000 ____D C:\Documents and Settings\Petr\Data aplikací\Systweak
2013-09-03 22:31 - 2013-09-03 22:31 - 00000000 ____D C:\Documents and Settings\Petr\Data aplikací\Ashampoo
2013-09-03 22:30 - 2013-09-03 22:30 - 00000970 _____ C:\Documents and Settings\All Users\Plocha\Ashampoo Burning Studio 6 FREE.lnk
2013-09-03 22:30 - 2013-09-03 22:30 - 00000756 _____ C:\Documents and Settings\All Users\Plocha\Advanced Driver Updater.lnk
2013-09-03 22:30 - 2013-09-03 22:30 - 00000249 _____ C:\Documents and Settings\All Users\Plocha\Your Software Deals.url
2013-09-03 22:30 - 2013-09-03 22:30 - 00000000 ____D C:\Program Files\Ashampoo
2013-09-03 22:30 - 2013-09-03 22:30 - 00000000 ____D C:\Program Files\Advanced Driver Updater
2013-09-03 22:30 - 2013-09-03 22:30 - 00000000 ____D C:\Documents and Settings\All Users\Data aplikací\Ashampoo
2013-09-03 22:27 - 2013-09-03 22:27 - 12891208 _____ (Ashampoo GmbH & Co. KG ) C:\Documents and Settings\Petr\Plocha\ashampoo_burning_studio_6_free_6.84_13471.exe
2013-09-03 22:11 - 2013-09-03 22:11 - 00000421 _____ C:\Documents and Settings\Petr\Plocha\registraÄŤni-kod.txt
2013-08-28 21:20 - 2013-08-28 21:20 - 00000000 ____D C:\Program Files\LogMeIn Hamachi
2013-08-28 17:08 - 2013-08-28 17:08 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2834904-v2_WM11$
2013-08-26 17:15 - 2013-08-26 17:15 - 00000000 ____D C:\Documents and Settings\Ondra\Data aplikací\AVG2013
2013-08-26 17:15 - 2013-08-26 17:15 - 00000000 ____D C:\Documents and Settings\Ondra\Data aplikací\AVG Secure Search
2013-08-19 18:14 - 2013-08-19 18:26 - 00000000 ____D C:\Documents and Settings\Petr\Dokumenty\2. Fremdsprache
2013-08-15 14:58 - 2013-08-15 14:58 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2863058$
2013-08-15 14:58 - 2013-08-15 14:58 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2859537$
2013-08-15 14:58 - 2013-08-15 14:58 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2850869$
2013-08-15 14:58 - 2013-08-15 14:58 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2849470$

==================== One Month Modified Files and Folders =======

2013-09-12 17:48 - 2010-10-01 16:50 - 00000254 _____ C:\WINDOWS\wiadebug.log
2013-09-12 17:46 - 2013-09-12 17:46 - 00364544 _____ (forum.viry.cz) C:\Documents and Settings\Petr\Plocha\FRSTLauncher.exe
2013-09-12 17:46 - 2010-10-06 22:12 - 00000000 ___HD C:\Documents and Settings\Petr\Local Settings\Data aplikací
2013-09-12 17:46 - 2010-10-06 22:12 - 00000000 ____D C:\Documents and Settings\Petr\Plocha
2013-09-12 17:44 - 2011-11-03 17:54 - 00000000 ____D C:\Documents and Settings\All Users\Data aplikací\MFAData
2013-09-12 17:37 - 2013-09-12 17:37 - 00000000 ____D C:\WINDOWS\LastGood
2013-09-12 17:37 - 2013-07-25 23:30 - 00000714 _____ C:\Documents and Settings\All Users\Plocha\AVG 2013.lnk
2013-09-12 17:37 - 2010-10-01 16:48 - 00000000 ___RD C:\Documents and Settings\All Users\Nabídka Start\Programy
2013-09-12 17:37 - 2010-10-01 16:48 - 00000000 ____D C:\Documents and Settings\All Users\Plocha
2013-09-12 17:34 - 2010-10-01 14:55 - 01069996 _____ C:\WINDOWS\WindowsUpdate.log
2013-09-12 17:29 - 2013-09-09 18:18 - 00000374 _____ C:\WINDOWS\system32\Drivers\etc\hosts.ics
2013-09-12 17:29 - 2010-10-01 16:50 - 00000049 _____ C:\WINDOWS\wiaservc.log
2013-09-12 17:28 - 2011-11-03 18:17 - 00000424 _____ C:\WINDOWS\Tasks\AVG PC Tuneup 2011 Integrator Start On Petr Logon.job
2013-09-12 17:28 - 2010-10-01 15:05 - 00000006 ____H C:\WINDOWS\Tasks\SA.DAT
2013-09-12 08:48 - 2010-10-06 22:12 - 00000178 ___SH C:\Documents and Settings\Petr\ntuser.ini
2013-09-12 08:48 - 2010-10-05 11:41 - 00524288 _____ C:\WINDOWS\system32\config\ACEEvent.evt
2013-09-12 08:48 - 2010-10-01 15:05 - 00032592 _____ C:\WINDOWS\SchedLgU.Txt
2013-09-12 07:55 - 2013-09-12 17:46 - 00045802 _____ C:\Documents and Settings\Petr\Plocha\logmodification.bat
2013-09-12 01:17 - 2012-04-28 16:19 - 00000914 _____ C:\WINDOWS\Tasks\Adobe Flash Player Updater.job
2013-09-12 01:17 - 2010-11-14 18:38 - 00000178 ___SH C:\Documents and Settings\Ondra\ntuser.ini
2013-09-12 00:17 - 2013-09-12 00:17 - 09430408 _____ (Adobe Systems Incorporated) C:\WINDOWS\system32\FlashPlayerInstaller.exe
2013-09-12 00:17 - 2012-04-28 16:19 - 00692616 _____ (Adobe Systems Incorporated) C:\WINDOWS\system32\FlashPlayerApp.exe
2013-09-12 00:17 - 2011-05-14 16:33 - 00071048 _____ (Adobe Systems Incorporated) C:\WINDOWS\system32\FlashPlayerCPLApp.cpl
2013-09-12 00:02 - 2010-10-06 22:12 - 00000000 ____D C:\Documents and Settings\Petr
2013-09-11 23:37 - 2010-10-06 22:12 - 00000000 ___RD C:\Documents and Settings\Petr\Dokumenty
2013-09-11 22:34 - 2013-09-12 17:46 - 01082587 _____ (Farbar) C:\Documents and Settings\Petr\Plocha\FRST.exe
2013-09-10 01:34 - 2011-12-23 13:32 - 00022328 _____ (AVG Technologies CZ, s.r.o.) C:\WINDOWS\system32\Drivers\avgidsshimx.sys
2013-09-09 23:55 - 2011-02-11 03:17 - 00000000 ____D C:\Documents and Settings\Petr\Data aplikací\Skype
2013-09-09 22:49 - 2013-09-09 22:02 - 00000000 ____D C:\FRST
2013-09-09 22:49 - 2010-11-14 18:38 - 00000000 ____D C:\Documents and Settings\Ondra\Plocha
2013-09-09 22:31 - 2010-11-14 18:38 - 00000000 ____D C:\Documents and Settings\Ondra\Data aplikací\Adobe
2013-09-09 22:09 - 2013-09-09 22:09 - 00008598 _____ C:\Documents and Settings\Ondra\Plocha\Addition.rar
2013-09-09 22:09 - 2013-09-09 22:09 - 00000000 ____D C:\Documents and Settings\Ondra\Data aplikací\WinRAR
2013-09-09 22:09 - 2010-11-14 18:38 - 00000000 __RHD C:\Documents and Settings\Ondra\Data aplikací
2013-09-09 22:09 - 2010-11-14 18:38 - 00000000 ___HD C:\Documents and Settings\Ondra\Local Settings\Data aplikací
2013-09-09 22:05 - 2013-09-09 22:05 - 00050650 _____ C:\Documents and Settings\Ondra\Plocha\FRST.txt
2013-09-09 22:05 - 2013-09-09 22:04 - 00037669 _____ C:\Documents and Settings\Ondra\Plocha\Addition.txt
2013-09-09 22:02 - 2013-09-09 22:02 - 00364544 _____ (forum.viry.cz) C:\Documents and Settings\Ondra\Plocha\FRSTLauncher.exe
2013-09-09 21:12 - 2011-10-31 23:00 - 00000284 _____ C:\WINDOWS\Tasks\AppleSoftwareUpdate.job
2013-09-09 21:11 - 2010-11-14 18:38 - 00000000 ____D C:\Documents and Settings\Ondra
2013-09-09 16:55 - 2013-09-09 22:02 - 01082349 _____ (Farbar) C:\Documents and Settings\Ondra\Plocha\FRST.exe
2013-09-09 01:07 - 2013-09-09 00:44 - 00000000 ____D C:\ComboFix
2013-09-09 01:06 - 2013-09-09 01:06 - 00024689 _____ C:\ComboFix.txt
2013-09-09 01:06 - 2013-09-05 22:53 - 00000000 ____D C:\Qoobox
2013-09-09 01:00 - 2008-04-14 14:00 - 00000227 _____ C:\WINDOWS\system.ini
2013-09-09 00:45 - 2010-10-06 22:12 - 00000000 __RHD C:\Documents and Settings\Petr\Data aplikací
2013-09-08 23:59 - 2010-10-01 16:41 - 00262144 _____ C:\WINDOWS\system32\config\SECURITY.bak
2013-09-08 23:59 - 2010-10-01 16:41 - 00024576 _____ C:\WINDOWS\system32\config\SAM.bak
2013-09-08 23:59 - 2010-10-01 16:40 - 52428800 _____ C:\WINDOWS\system32\config\software.bak
2013-09-08 23:59 - 2010-10-01 16:40 - 12058624 _____ C:\WINDOWS\system32\config\system.bak
2013-09-08 23:59 - 2010-10-01 16:40 - 00524288 _____ C:\WINDOWS\system32\config\default.bak
2013-09-08 23:58 - 2013-09-08 23:58 - 00008192 ____H C:\WINDOWS\system32\config\SECURITY.tmp.LOG
2013-09-08 23:58 - 2013-09-08 23:58 - 00000000 ____H C:\WINDOWS\system32\config\system.tmp.LOG
2013-09-08 23:58 - 2013-09-08 23:58 - 00000000 ____H C:\WINDOWS\system32\config\software.tmp.LOG
2013-09-08 23:58 - 2013-09-08 23:58 - 00000000 ____H C:\WINDOWS\system32\config\SAM.tmp.LOG
2013-09-08 23:58 - 2013-09-08 23:58 - 00000000 ____H C:\WINDOWS\system32\config\default.tmp.LOG
2013-09-08 23:58 - 2013-09-05 22:53 - 00000000 ____D C:\WINDOWS\erdnt
2013-09-08 23:21 - 2013-09-08 23:21 - 05124111 ____R (Swearware) C:\Documents and Settings\Ondra\Plocha\ComboFix.exe
2013-09-08 23:07 - 2010-10-01 16:47 - 00000000 __RHD C:\Documents and Settings\All Users\Data aplikací
2013-09-08 23:02 - 2010-10-01 14:58 - 00000000 __SHD C:\Documents and Settings\NetworkService
2013-09-08 22:46 - 2011-06-16 01:48 - 00000664 _____ C:\WINDOWS\system32\d3d9caps.dat
2013-09-08 22:44 - 2008-04-14 14:00 - 00013646 _____ C:\WINDOWS\system32\wpa.dbl
2013-09-06 00:30 - 2010-11-14 18:38 - 00000000 ___RD C:\Documents and Settings\Ondra\Oblíbené položky
2013-09-05 23:50 - 2013-09-05 23:50 - 00000000 ____D C:\Documents and Settings\Ondra\Data aplikací\SiteRanker
2013-09-05 23:50 - 2013-09-05 23:50 - 00000000 ____D C:\Documents and Settings\Ondra\Data aplikací\AppGraffiti
2013-09-05 23:02 - 2013-09-05 23:02 - 00000000 _RSHD C:\cmdcons
2013-09-05 23:02 - 2010-10-01 16:40 - 00000327 __RSH C:\boot.ini
2013-09-05 22:53 - 2013-09-05 22:53 - 00000000 ___RD C:\Documents and Settings\Ondra\Dokumenty\Filmy
2013-09-05 22:53 - 2010-11-14 18:38 - 00000000 ___RD C:\Documents and Settings\Ondra\Nabídka Start\Programy
2013-09-05 22:53 - 2010-11-14 18:38 - 00000000 ___RD C:\Documents and Settings\Ondra\Dokumenty
2013-09-05 22:24 - 2013-09-05 22:24 - 00000000 ____D C:\rsit
2013-09-05 22:24 - 2013-09-05 22:24 - 00000000 ____D C:\Program Files\trend micro
2013-09-05 18:47 - 2012-08-22 13:16 - 00000000 ____D C:\Documents and Settings\Ondra\Data aplikací\DAEMON Tools Lite
2013-09-05 18:47 - 2012-04-02 17:56 - 00000000 ____D C:\WINDOWS\Minidump
2013-09-05 18:37 - 2013-09-05 18:37 - 00000000 _____ C:\Documents and Settings\All Users\Data aplikací\fobrlof.dat
2013-09-05 18:33 - 2010-10-06 22:12 - 00000000 ___RD C:\Documents and Settings\Petr\Nabídka Start\Programy\Po spuštění
2013-09-05 01:43 - 2011-09-13 07:30 - 00039224 _____ (AVG Technologies CZ, s.r.o.) C:\WINDOWS\system32\Drivers\avgrkx86.sys
2013-09-04 22:34 - 2013-09-03 22:34 - 00000276 _____ C:\WINDOWS\Tasks\AdvancedDriverUpdater_UPDATES.job
2013-09-03 22:34 - 2013-09-03 22:34 - 00000000 ____D C:\Documents and Settings\Petr\Data aplikací\Systweak
2013-09-03 22:31 - 2013-09-03 22:31 - 00000000 ____D C:\Documents and Settings\Petr\Data aplikací\Ashampoo
2013-09-03 22:30 - 2013-09-03 22:30 - 00000970 _____ C:\Documents and Settings\All Users\Plocha\Ashampoo Burning Studio 6 FREE.lnk
2013-09-03 22:30 - 2013-09-03 22:30 - 00000756 _____ C:\Documents and Settings\All Users\Plocha\Advanced Driver Updater.lnk
2013-09-03 22:30 - 2013-09-03 22:30 - 00000249 _____ C:\Documents and Settings\All Users\Plocha\Your Software Deals.url
2013-09-03 22:30 - 2013-09-03 22:30 - 00000000 ____D C:\Program Files\Ashampoo
2013-09-03 22:30 - 2013-09-03 22:30 - 00000000 ____D C:\Program Files\Advanced Driver Updater
2013-09-03 22:30 - 2013-09-03 22:30 - 00000000 ____D C:\Documents and Settings\All Users\Data aplikací\Ashampoo
2013-09-03 22:27 - 2013-09-03 22:27 - 12891208 _____ (Ashampoo GmbH & Co. KG ) C:\Documents and Settings\Petr\Plocha\ashampoo_burning_studio_6_free_6.84_13471.exe
2013-09-03 22:11 - 2013-09-03 22:11 - 00000421 _____ C:\Documents and Settings\Petr\Plocha\registraÄŤni-kod.txt
2013-09-03 15:20 - 2010-10-06 22:12 - 00000000 ___RD C:\Documents and Settings\Petr\Oblíbené položky
2013-09-03 14:46 - 2010-10-06 21:35 - 00000000 ___RD C:\Program Files\Skype
2013-09-03 14:46 - 2010-10-06 21:35 - 00000000 ____D C:\Documents and Settings\All Users\Data aplikací\Skype
2013-09-01 23:42 - 2013-02-07 22:25 - 00000000 ____D C:\Documents and Settings\Petr\Dokumenty\CardRecovery
2013-09-01 22:27 - 2010-10-06 22:12 - 00000000 ___RD C:\Documents and Settings\Petr\Dokumenty\Obrázky
2013-08-28 21:20 - 2013-08-28 21:20 - 00000000 ____D C:\Program Files\LogMeIn Hamachi
2013-08-28 17:08 - 2013-08-28 17:08 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2834904-v2_WM11$
2013-08-27 17:03 - 2010-10-06 22:12 - 00000000 ___RD C:\Documents and Settings\Petr\Dokumenty\Hudba
2013-08-26 18:46 - 2013-05-13 22:35 - 00000000 ____D C:\Documents and Settings\Petr\Dokumenty\Fotografování
2013-08-26 17:15 - 2013-08-26 17:15 - 00000000 ____D C:\Documents and Settings\Ondra\Data aplikací\AVG2013
2013-08-26 17:15 - 2013-08-26 17:15 - 00000000 ____D C:\Documents and Settings\Ondra\Data aplikací\AVG Secure Search
2013-08-22 13:30 - 2010-10-01 15:05 - 00000178 ___SH C:\Documents and Settings\pc\ntuser.ini
2013-08-19 18:26 - 2013-08-19 18:14 - 00000000 ____D C:\Documents and Settings\Petr\Dokumenty\2. Fremdsprache
2013-08-18 20:30 - 2013-02-24 01:43 - 00000000 ____D C:\Documents and Settings\Petr\Dokumenty\Tvorba
2013-08-15 15:05 - 2013-08-12 01:01 - 00000000 ____D C:\WINDOWS\system32\MRT
2013-08-15 15:05 - 2010-10-18 18:36 - 00000000 ____D C:\WINDOWS\ie8updates
2013-08-15 15:01 - 2010-10-05 09:35 - 00000000 ____D C:\WINDOWS\Microsoft.NET
2013-08-15 15:00 - 2010-10-18 18:31 - 75778376 _____ (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
2013-08-15 15:00 - 2010-10-07 09:51 - 00000000 ____D C:\Documents and Settings\All Users\Data aplikací\Microsoft Help
2013-08-15 14:58 - 2013-08-15 14:58 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2863058$
2013-08-15 14:58 - 2013-08-15 14:58 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2859537$
2013-08-15 14:58 - 2013-08-15 14:58 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2850869$
2013-08-15 14:58 - 2013-08-15 14:58 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2849470$
2013-08-15 14:57 - 2010-10-01 16:42 - 01026360 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2013-08-15 14:21 - 2013-07-25 23:30 - 00037664 _____ (AVG Technologies) C:\WINDOWS\system32\Drivers\avgtpx86.sys
2013-08-15 14:21 - 2013-07-25 23:30 - 00000000 ____D C:\Program Files\AVG Secure Search

Files to move or delete:
====================
C:\Documents and Settings\Default User\hpothb07.dat
C:\Documents and Settings\Mamka\Local Settings\Temp\swt-win32-3349.dll
C:\Documents and Settings\pc\Local Settings\Temp\AutoRun.exe
C:\Documents and Settings\pc\Local Settings\Temp\AutoRunGUI.dll
C:\Documents and Settings\pc\Local Settings\Temp\SkypeSetup.exe
C:\Documents and Settings\pc\Local Settings\Temp\swt-win32-3349.dll
C:\DOCUME~1\Petr\LOCALS~1\Temp\catchme.dll

==================== Bamital & volsnap Check =================

C:\Windows\explorer.exe
[2008-04-14 14:00] - [2008-04-14 14:00] - 1034240 ____A (Microsoft Corporation) 27afd587c462e280ee046b8cca3c2cd1

C:\Windows\System32\winlogon.exe
[2008-04-14 14:00] - [2008-04-14 14:00] - 0507904 ____A (Microsoft Corporation) cddb1f8e1aea356f3ad106f2cf9b7fea

C:\Windows\System32\svchost.exe
[2008-04-14 14:00] - [2008-04-14 14:00] - 0014336 ____A (Microsoft Corporation) be4a520e29b6391f49e79ccc52044d93

C:\Windows\System32\services.exe
[2008-04-14 14:00] - [2009-02-09 13:25] - 0111104 ____A (Microsoft Corporation) 9ef697af07bb8dd82c3b02ca953a95b7

C:\Windows\System32\User32.dll
[2008-04-14 14:00] - [2008-04-14 14:00] - 0578560 ____A (Microsoft Corporation) e16e0990967374e76f3e40cacafd3d53

C:\Windows\System32\userinit.exe
[2008-04-14 14:00] - [2008-04-14 14:00] - 0026112 ____A (Microsoft Corporation) 7dc1830f22e7d275b438127b68030239

C:\Windows\System32\Drivers\volsnap.sys
[2008-04-14 14:00] - [2008-04-14 14:00] - 0052480 ____A (Microsoft Corporation) 28a4b296b47782173c346e376cb374d1


==================== End Of Log ============================

Uživatelský avatar
Rudy
Site Admin
Site Admin
Příspěvky: 118375
Registrován: 30 říj 2003 13:42
Bydliště: Plzeň
Kontaktovat uživatele:

Re: "policejní" vir - AVG koupeno, nepomohlo

#21 Příspěvek od Rudy »

Otevřte poznámkový blok a zkopírujte do něj:
Start
MountPoints2: {41f114e8-f742-11df-8fae-0019212b7c3e} - "G:\WD SmartWare.exe" autoplay=true
MountPoints2: {6bba4754-7035-11e0-90d7-0019212b7c3e} - F:\LaunchU3.exe -a
MountPoints2: {7aeb35fc-e221-11df-8f78-0019212b7c3e} - F:\DPFMate.exe
Startup: C:\Documents and Settings\Petr\Nabídka Start\Programy\Po spuštění\byblkslrqybjejcxnch.lnk
ShortcutTarget: byblkslrqybjejcxnch.lnk -> C:\DOCUME~1\Petr\LOCALS~1\Temp\hcnxcjejbyqrlsklbyb.bfg (No File)
HKCU\Software\Microsoft\Internet Explorer\Main,ICQ Search = http://search.icq.com/search/results.ph ... &ch_id=osd
URLSearchHook: (No Name) - {95289393-33EA-4F8D-B952-483415B9C955} - No File
URLSearchHook: (No Name) - {D8278076-BC68-4484-9233-6E7F1628B56C} - No File
URLSearchHook: (No Name) - {D3D233D5-9F6D-436C-B6C7-E63F77503B30} - No File
SearchScopes: HKCU - DefaultScope {95289393-33EA-4F8D-B952-483415B9C955} URL = http://search.qip.ru/?query={searchTerms}
SearchScopes: HKCU - {1CB20BF0-BBAE-40A7-93F4-6435FF3D0411} URL = http://www.crawler.com/search/dispatche ... pl=11&qkw={searchTerms}&tbid=60040
SearchScopes: HKCU - {20829534-0A1D-48A3-B130-11F4F28822CD} URL = http://asksearch.ask.com/redirect?clien ... apn_ptnrs=^AUC&apn_dtid=^YYYYYY^YY^CZ&apn_dbr=ie_8.0.6001.18702&doi=2013-04-23&q={searchTerms}&
SearchScopes: HKCU - {6552C7DD-90A4-4387-B795-F8F96747DE19} URL = http://search.icq.com/search/results.ph ... &ch_id=osd
SearchScopes: HKCU - {95289393-33EA-4F8D-B952-483415B9C955} URL = http://search.qip.ru/?query={searchTerms}
SearchScopes: HKCU - {C04B7D22-5AEC-4561-8F49-27F6269208F6} URL = http://toolbar.inbox.com/search/dispatc ... tp=bs&qkw={searchTerms}&tbid=80093&lng=cs
BHO: No Name - {11BF46C6-B3DE-48BD-BF70-3AD85CAB80B5} - C:\PROGRA~1\SITERA~1\SiteRank.dll (Crawler, LLC)
Toolbar: HKCU - No Name - {D7E97865-918F-41E4-9CD0-25AB1C574CE8} - No File
Toolbar: HKCU - No Name - {4B4D5056-3600-A76A-76A7-7A786E7484D7} - No File
Toolbar: HKCU - No Name - {E7DF6BFF-55A5-4EB7-A673-4ED3E9456D39} - No File
Handler: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
FF ProfilePath: C:\Documents and Settings\Petr\Data aplikací\Mozilla\Firefox\Profiles\y9f1tj2o.default
FF Homepage: hxxp://www.search.ask.com/?l=dis&o=APN1 ... apn_ptnrs=^AUC&apn_dtid=^YYYYYY^YY^CZ&p2=^AUC^YYYYYY^YY^CZ&tpid=KMPV6&apn_dbr=ie_8.0.6001.18702&apn_uid=7A472A6F-64C7-46E1-BAF9-BD94BD3359BE&itbv=11.8.1.343&doi=2013-04-23
FF SelectedSearchEngine: Ask Search
FF SearchEngineOrder.1: Ask Search
CHR HomePage: hxxp://www.search.ask.com/?l=dis&o=APN1 ... apn_ptnrs=^AUC&apn_dtid=^YYYYYY^YY^CZ&p2=^AUC^YYYYYY^YY^CZ&tpid=KMPV6&apn_dbr=ie_8.0.6001.18702&apn_uid=7A472A6F-64C7-46E1-BAF9-BD94BD3359BE&itbv=11.8.1.343&doi=2013-04-23
CHR DefaultSearchURL: (Ask Search) - http://asksearch.ask.com/redirect?clien ... apn_ptnrs=^AUC&apn_dtid=^YYYYYY^YY^CZ&apn_dbr=ie_8.0.6001.18702&&q={searchTerms}
CHR DefaultSuggestURL: (Ask Search) - http://ss.websearch.ask.com/query?qsrc= ... earchTerms}
S3 ZuneNetworkSvc; "c:\Program Files\Zune\ZuneNss.exe" [x]
S3 ZuneWlanCfgSvc; "c:\Program Files\Zune\ZuneWlanCfgSvc.exe" [x]
End
Uložte na plochu jako fixlist.txt. Spusťte znovu FRST a klikněte na >Fix<. Po skončení akce se objeví log, který sem zkopírujte.
Dotazy a logy vkládejte pouze do vašich threadů. Soukromé zprávy, icq a e-maily neslouží k řešení vašich problémů.

Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.

Navštivte: Obrázek

e-mail: rudy(zavináč)forum.viry.cz

Varování:
Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!


Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.

horenak
Návštěvník
Návštěvník
Příspěvky: 16
Registrován: 05 zář 2013 21:17

Re: "policejní" vir - AVG koupeno, nepomohlo

#22 Příspěvek od horenak »

Fix result of Farbar Recovery Tool (FRST written by Farbar) (x86) Version: 09-09-2013 02
Ran by Petr at 2013-09-12 21:48:52 Run:2
Running from C:\Documents and Settings\Petr\Plocha
Boot Mode: Normal

==============================================

Content of fixlist:
*****************
Start
MountPoints2: {41f114e8-f742-11df-8fae-0019212b7c3e} - "G:\WD SmartWare.exe" autoplay=true
MountPoints2: {6bba4754-7035-11e0-90d7-0019212b7c3e} - F:\LaunchU3.exe -a
MountPoints2: {7aeb35fc-e221-11df-8f78-0019212b7c3e} - F:\DPFMate.exe
Startup: C:\Documents and Settings\Petr\Nabídka Start\Programy\Po spuštění\byblkslrqybjejcxnch.lnk
ShortcutTarget: byblkslrqybjejcxnch.lnk -> C:\DOCUME~1\Petr\LOCALS~1\Temp\hcnxcjejbyqrlsklbyb.bfg (No File)
HKCU\Software\Microsoft\Internet Explorer\Main,ICQ Search = http://search.icq.com/search/results.ph ... &ch_id=osd
URLSearchHook: (No Name) - {95289393-33EA-4F8D-B952-483415B9C955} - No File
URLSearchHook: (No Name) - {D8278076-BC68-4484-9233-6E7F1628B56C} - No File
URLSearchHook: (No Name) - {D3D233D5-9F6D-436C-B6C7-E63F77503B30} - No File
SearchScopes: HKCU - DefaultScope {95289393-33EA-4F8D-B952-483415B9C955} URL = http://search.qip.ru/?query={searchTerms}
SearchScopes: HKCU - {1CB20BF0-BBAE-40A7-93F4-6435FF3D0411} URL = http://www.crawler.com/search/dispatche ... pl=11&qkw={searchTerms}&tbid=60040
SearchScopes: HKCU - {20829534-0A1D-48A3-B130-11F4F28822CD} URL = http://asksearch.ask.com/redirect?clien ... apn_ptnrs=^AUC&apn_dtid=^YYYYYY^YY^CZ&apn_dbr=ie_8.0.6001.18702&doi=2013-04-23&q={searchTerms}&
SearchScopes: HKCU - {6552C7DD-90A4-4387-B795-F8F96747DE19} URL = http://search.icq.com/search/results.ph ... &ch_id=osd
SearchScopes: HKCU - {95289393-33EA-4F8D-B952-483415B9C955} URL = http://search.qip.ru/?query={searchTerms}
SearchScopes: HKCU - {C04B7D22-5AEC-4561-8F49-27F6269208F6} URL = http://toolbar.inbox.com/search/dispatc ... tp=bs&qkw={searchTerms}&tbid=80093&lng=cs
BHO: No Name - {11BF46C6-B3DE-48BD-BF70-3AD85CAB80B5} - C:\PROGRA~1\SITERA~1\SiteRank.dll (Crawler, LLC)
Toolbar: HKCU - No Name - {D7E97865-918F-41E4-9CD0-25AB1C574CE8} - No File
Toolbar: HKCU - No Name - {4B4D5056-3600-A76A-76A7-7A786E7484D7} - No File
Toolbar: HKCU - No Name - {E7DF6BFF-55A5-4EB7-A673-4ED3E9456D39} - No File
Handler: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
FF ProfilePath: C:\Documents and Settings\Petr\Data aplikací\Mozilla\Firefox\Profiles\y9f1tj2o.default
FF Homepage: hxxp://www.search.ask.com/?l=dis&o=APN1 ... apn_ptnrs=^AUC&apn_dtid=^YYYYYY^YY^CZ&p2=^AUC^YYYYYY^YY^CZ&tpid=KMPV6&apn_dbr=ie_8.0.6001.18702&apn_uid=7A472A6F-64C7-46E1-BAF9-BD94BD3359BE&itbv=11.8.1.343&doi=2013-04-23
FF SelectedSearchEngine: Ask Search
FF SearchEngineOrder.1: Ask Search
CHR HomePage: hxxp://www.search.ask.com/?l=dis&o=APN1 ... apn_ptnrs=^AUC&apn_dtid=^YYYYYY^YY^CZ&p2=^AUC^YYYYYY^YY^CZ&tpid=KMPV6&apn_dbr=ie_8.0.6001.18702&apn_uid=7A472A6F-64C7-46E1-BAF9-BD94BD3359BE&itbv=11.8.1.343&doi=2013-04-23
CHR DefaultSearchURL: (Ask Search) - http://asksearch.ask.com/redirect?clien ... apn_ptnrs=^AUC&apn_dtid=^YYYYYY^YY^CZ&apn_dbr=ie_8.0.6001.18702&&q={searchTerms}
CHR DefaultSuggestURL: (Ask Search) - http://ss.websearch.ask.com/query?qsrc= ... earchTerms}
S3 ZuneNetworkSvc; "c:\Program Files\Zune\ZuneNss.exe" [x]
S3 ZuneWlanCfgSvc; "c:\Program Files\Zune\ZuneWlanCfgSvc.exe" [x]
End



*****************

HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{41f114e8-f742-11df-8fae-0019212b7c3e} => Key deleted successfully.
HKCR\CLSID\{41f114e8-f742-11df-8fae-0019212b7c3e} => Key not found.
HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{6bba4754-7035-11e0-90d7-0019212b7c3e} => Key deleted successfully.
HKCR\CLSID\{6bba4754-7035-11e0-90d7-0019212b7c3e} => Key not found.
HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{7aeb35fc-e221-11df-8f78-0019212b7c3e} => Key deleted successfully.
HKCR\CLSID\{7aeb35fc-e221-11df-8f78-0019212b7c3e} => Key not found.
C:\Documents and Settings\Petr\Nabídka Start\Programy\Po spuštění\byblkslrqybjejcxnch.lnk => Moved successfully.
C:\DOCUME~1\Petr\LOCALS~1\Temp\hcnxcjejbyqrlsklbyb.bfg not found.
HKCU\Software\Microsoft\Internet Explorer\Main\\ICQ Search => Value deleted successfully.
HKCU\Software\Microsoft\Internet Explorer\URLSearchHooks\\{95289393-33EA-4F8D-B952-483415B9C955} => Value deleted successfully.
HKCR\CLSID\{95289393-33EA-4F8D-B952-483415B9C955} => Key not found.
HKCU\Software\Microsoft\Internet Explorer\URLSearchHooks\\{D8278076-BC68-4484-9233-6E7F1628B56C} => Value deleted successfully.
HKCR\CLSID\{D8278076-BC68-4484-9233-6E7F1628B56C} => Key not found.
HKCU\Software\Microsoft\Internet Explorer\URLSearchHooks\\{D3D233D5-9F6D-436C-B6C7-E63F77503B30} => Value deleted successfully.
HKCR\CLSID\{D3D233D5-9F6D-436C-B6C7-E63F77503B30} => Key not found.
HKCU\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope => Value deleted successfully.
HKCU\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{1CB20BF0-BBAE-40A7-93F4-6435FF3D0411} => Key deleted successfully.
HKCR\Wow6432Node\CLSID\{1CB20BF0-BBAE-40A7-93F4-6435FF3D0411} => Key not found.
HKCU\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{20829534-0A1D-48A3-B130-11F4F28822CD} => Key deleted successfully.
HKCR\Wow6432Node\CLSID\{20829534-0A1D-48A3-B130-11F4F28822CD} => Key not found.
HKCU\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{6552C7DD-90A4-4387-B795-F8F96747DE19} => Key deleted successfully.
HKCR\Wow6432Node\CLSID\{6552C7DD-90A4-4387-B795-F8F96747DE19} => Key not found.
HKCU\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{95289393-33EA-4F8D-B952-483415B9C955} => Key deleted successfully.
HKCR\Wow6432Node\CLSID\{95289393-33EA-4F8D-B952-483415B9C955} => Key not found.
HKCU\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{C04B7D22-5AEC-4561-8F49-27F6269208F6} => Key deleted successfully.
HKCR\Wow6432Node\CLSID\{C04B7D22-5AEC-4561-8F49-27F6269208F6} => Key not found.
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{11BF46C6-B3DE-48BD-BF70-3AD85CAB80B5} => Key deleted successfully.
HKCR\CLSID\{11BF46C6-B3DE-48BD-BF70-3AD85CAB80B5} => Key deleted successfully.
HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\\{D7E97865-918F-41E4-9CD0-25AB1C574CE8} => Value deleted successfully.
HKCR\CLSID\{D7E97865-918F-41E4-9CD0-25AB1C574CE8} => Key not found.
HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\\{4B4D5056-3600-A76A-76A7-7A786E7484D7} => Value deleted successfully.
HKCR\CLSID\{4B4D5056-3600-A76A-76A7-7A786E7484D7} => Key not found.
HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\\{E7DF6BFF-55A5-4EB7-A673-4ED3E9456D39} => Value deleted successfully.
HKCR\CLSID\{E7DF6BFF-55A5-4EB7-A673-4ED3E9456D39} => Key not found.
HKCR\PROTOCOLS\Handler\skype-ie-addon-data => Key deleted successfully.
HKCR\CLSID\{91774881-D725-4E58-B298-07617B9B86A8} => Key deleted successfully.
C:\DOCUME~1\Petr\LOCALS~1\Temp\hcnxcjejbyqrlsklbyb.bfg => Should not be moved.
Firefox homepage deleted successfully.
Firefox SelectedSearchEngine deleted successfully.
Firefox SearchEngineOrder.1 deleted successfully.
CHR HomePage: hxxp://www.search.ask.com/?l=dis&o=APN1 ... apn_ptnrs=^AUC&apn_dtid=^YYYYYY^YY^CZ&p2=^AUC^YYYYYY^YY^CZ&tpid=KMPV6&apn_dbr=ie_8.0.6001.18702&apn_uid=7A472A6F-64C7-46E1-BAF9-BD94BD3359BE&itbv=11.8.1.343&doi=2013-04-23 ==> The Chrome "Settings" can be used to fix the entry.
CHR DefaultSearchURL: (Ask Search) - http://asksearch.ask.com/redirect?clien ... apn_ptnrs=^AUC&apn_dtid=^YYYYYY^YY^CZ&apn_dbr=ie_8.0.6001.18702&&q={searchTerms} ==> The Chrome "Settings" can be used to fix the entry.
CHR DefaultSuggestURL: (Ask Search) - http://ss.websearch.ask.com/query?qsrc= ... earchTerms} ==> The Chrome "Settings" can be used to fix the entry.
ZuneNetworkSvc => Service deleted successfully.
ZuneWlanCfgSvc => Service deleted successfully.

==== End of Fixlog ====

Uživatelský avatar
Rudy
Site Admin
Site Admin
Příspěvky: 118375
Registrován: 30 říj 2003 13:42
Bydliště: Plzeň
Kontaktovat uživatele:

Re: "policejní" vir - AVG koupeno, nepomohlo

#23 Příspěvek od Rudy »

Smazáno. Nastala nějaká změna?
Dotazy a logy vkládejte pouze do vašich threadů. Soukromé zprávy, icq a e-maily neslouží k řešení vašich problémů.

Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.

Navštivte: Obrázek

e-mail: rudy(zavináč)forum.viry.cz

Varování:
Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!


Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.

horenak
Návštěvník
Návštěvník
Příspěvky: 16
Registrován: 05 zář 2013 21:17

Re: "policejní" vir - AVG koupeno, nepomohlo

#24 Příspěvek od horenak »

Bohužel. Už to snad není tak strašně pomalé, ale (ne)zobrazování prvků webových stránek je požád stejné.

Uživatelský avatar
Rudy
Site Admin
Site Admin
Příspěvky: 118375
Registrován: 30 říj 2003 13:42
Bydliště: Plzeň
Kontaktovat uživatele:

Re: "policejní" vir - AVG koupeno, nepomohlo

#25 Příspěvek od Rudy »

Zkuste přeinstalovat prohlížeč.
Dotazy a logy vkládejte pouze do vašich threadů. Soukromé zprávy, icq a e-maily neslouží k řešení vašich problémů.

Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.

Navštivte: Obrázek

e-mail: rudy(zavináč)forum.viry.cz

Varování:
Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!


Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.

Odpovědět