Awardhotspot reklamy

Máte problém s virem? Vložte sem log z FRST nebo RSIT.

Moderátor: Moderátoři

Pravidla fóra
Pokud chcete pomoc, vložte log z FRST [návod zde] nebo RSIT [návod zde]

Jednotlivé thready budou po vyřešení uzamčeny. Stejně tak ty, které budou nečinné déle než 14 dní. Vizte Pravidlo o zamykání témat. Děkujeme za pochopení.

!NOVINKA!
Nově lze využívat služby vzdálené pomoci, kdy se k vašemu počítači připojí odborník a bližší informace o problému si od vás získá telefonicky! Více na www.neslape.cz

Vážení uživaterlé!
Ve dnech 4. - 6-9.2026 budou někteříí naši členové na každoročním srazu fóra. Žádáme vás, abyste měli strpení, nemusí se na na řešení vašeho problému dostat hned. Děkujeme za pochopení.
Zamčeno
Zpráva
Autor
tuhyk
Návštěvník
Návštěvník
Příspěvky: 6
Registrován: 13 Led 2014 13:02

Awardhotspot reklamy

#1 Příspěvek od tuhyk »

Dobrý den, mám stejný problém, jako je řešen tady: http://forum.viry.cz/viewtopic.php?f=13&t=134332. Díky za rady :)

můj log je: alwarebytes Anti-Malware (Zkušební verze Malwarebytes Anti-Malware.) 1.75.0.1300
www.malwarebytes.org

Verze: v2014.01.13.03

Windows 8 x64 NTFS
Internet Explorer 10.0.9200.16750
Terezka :: TERKA [administrátor]

Ochrana: Povolena

13. 1. 2014 12:48:21
MBAM-log-2014-01-13 (12-59-48).txt

Typ: Rychlá kontrola
Nastavení kontroly povoleno: Paměť | Po spuštění | Registr | Systémové soubory | Heuristická analýza Extra | Heuristická analýza Shuriken | PUP | PUM
Nastavení kontroly zakázáno: P2P
Kontrolované objekty: 240652
Uplynulý čas: 8 minut, 10 sekund

Nalezené procesy v paměti: 1
C:\ProgramData\QuickSet\SK.Enhancer\SK.Enhancer.exe (PUP.Optional.MultiPlug.A) -> 9440 -> Nebyla provedena žádná instrukce.

Nalezené moduly v paměti: 0
(Žádné škodlivé položky nebyly zjištěny)

Nalezené klíče v registru: 2
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\S-161304646 (PUP.Optional.MultiPlug.A) -> Nebyla provedena žádná instrukce.
HKCU\Software\Conduit\FF (PUP.Optional.Conduit.A) -> Nebyla provedena žádná instrukce.

Nalezené hodnoty v registru: 0
(Žádné škodlivé položky nebyly zjištěny)

Nalezené datové položky v registru: 0
(Žádné škodlivé položky nebyly zjištěny)

Nalezené složky: 4
C:\Users\Terezka\AppData\Local\Temp\CT3289075 (PUP.Optional.Conduit.A) -> Nebyla provedena žádná instrukce.
C:\Users\Terezka\AppData\Local\Temp\CT3289075\xpi (PUP.Optional.Conduit.A) -> Nebyla provedena žádná instrukce.
C:\Users\Terezka\AppData\Local\Temp\CT3289075\xpi\defaults (PUP.Optional.Conduit.A) -> Nebyla provedena žádná instrukce.
C:\Users\Terezka\AppData\Local\Temp\CT3289075\xpi\defaults\preferences (PUP.Optional.Conduit.A) -> Nebyla provedena žádná instrukce.

Nalezené soubory: 19
C:\ProgramData\QuickSet\SK.Enhancer\SK.Enhancer.exe (PUP.Optional.MultiPlug.A) -> Nebyla provedena žádná instrukce.
C:\$Recycle.Bin\S-1-5-21-2815119995-1780246843-4195622244-1003\$RASHT9E.exe (PUP.Optional.OneClickDownloader.A) -> Nebyla provedena žádná instrukce.
C:\$Recycle.Bin\S-1-5-21-2815119995-1780246843-4195622244-1003\$RDX3RSD.exe (PUP.Optional.InstalleRex) -> Nebyla provedena žádná instrukce.
C:\$Recycle.Bin\S-1-5-21-2815119995-1780246843-4195622244-1003\$REK1JWL.exe (PUP.Optional.InstalleRex) -> Nebyla provedena žádná instrukce.
C:\$Recycle.Bin\S-1-5-21-2815119995-1780246843-4195622244-1003\$RGBLHZA.exe (PUP.Optional.InstalleRex) -> Nebyla provedena žádná instrukce.
C:\$Recycle.Bin\S-1-5-21-2815119995-1780246843-4195622244-1003\$RHD5TIR.exe (PUP.Optional.InstalleRex) -> Nebyla provedena žádná instrukce.
C:\$Recycle.Bin\S-1-5-21-2815119995-1780246843-4195622244-1003\$RQ25NIS.exe (PUP.Optional.InstalleRex) -> Nebyla provedena žádná instrukce.
C:\$Recycle.Bin\S-1-5-21-2815119995-1780246843-4195622244-1003\$RV4EGRD.exe (PUP.Optional.InstalleRex) -> Nebyla provedena žádná instrukce.
C:\$Recycle.Bin\S-1-5-21-2815119995-1780246843-4195622244-1003\$RW0ZYPK.exe (PUP.Optional.InstalleRex) -> Nebyla provedena žádná instrukce.
C:\Users\Terezka\AppData\Local\Temp\ckupiWPx.exe.part (PUP.BundleInstaller.DW) -> Nebyla provedena žádná instrukce.
C:\Users\Terezka\AppData\Local\Temp\IB8fOKez.exe.part (PUP.BundleInstaller.DW) -> Nebyla provedena žádná instrukce.
C:\Users\Terezka\AppData\Local\Temp\oPWkkOxb.exe.part (PUP.Optional.OpenCandy) -> Nebyla provedena žádná instrukce.
C:\Users\Terezka\Local Settings\Temporary Internet Files\Content.IE5\2CVOZEAF\agent2[1].exe (PUP.Optional.MultiPlug.A) -> Nebyla provedena žádná instrukce.
C:\Users\Terezka\Local Settings\Temporary Internet Files\Content.IE5\2CVOZEAF\psupport_install[1].exe (PUP.Optional.SProtect.A) -> Nebyla provedena žádná instrukce.
C:\Users\Terezka\AppData\Local\Temp\CT3289075\conduit.xml (PUP.Optional.Conduit.A) -> Nebyla provedena žádná instrukce.
C:\Users\Terezka\AppData\Local\Temp\CT3289075\CT3289075.xpi (PUP.Optional.Conduit.A) -> Nebyla provedena žádná instrukce.
C:\Users\Terezka\AppData\Local\Temp\CT3289075\version.txt (PUP.Optional.Conduit.A) -> Nebyla provedena žádná instrukce.
C:\Users\Terezka\AppData\Local\Temp\CT3289075\xpi\install.rdf (PUP.Optional.Conduit.A) -> Nebyla provedena žádná instrukce.
C:\Users\Terezka\AppData\Local\Temp\CT3289075\xpi\defaults\preferences\defaults.js (PUP.Optional.Conduit.A) -> Nebyla provedena žádná instrukce.

(konec)
Nahoru
Avatar uživatele
vyosek
VIP
VIP
Příspěvky: 56365
Registrován: 07 Lis 2006 15:24
Místo/Bydliště: Šalingrad - Brno

Re: Awardhotspot reklamy

#2 Příspěvek od vyosek »

Zdravim, pekne odpoledne preji a vitam vas u nas na foru :welcome:

:arrow: Nalezy MBAMu smazte, objevi se log, ten rad uvidim

:arrow: Stahnete AdwCleaner http://general-changelog-team.fr/fr/dow ... adwcleaner
  • Ulozte nejlepe na plochu
  • Ukoncete vsechny programy
  • Kliknete na Scan a nasledne Clean
  • Probehne oprava, restart PC a pak se objevi log, pripadne bude ulozen ve slozce c:\AdwCleaner\AdwCleaner[S?].txt, ten sem vlozte
"Kdo víno má a nepije,kdo hrozny má a nejí je, kdo ženu má a nelíbá, kdo zábavě se vyhýbá, na toho vemte bič a hůl, to není člověk, to je vůl."
Člen Obrázek od 1. února 2011.
Nahoru
tuhyk
Návštěvník
Návštěvník
Příspěvky: 6
Registrován: 13 Led 2014 13:02

Re: Awardhotspot reklamy

#3 Příspěvek od tuhyk »

log po smazání v MBAMu:
Malwarebytes Anti-Malware (Zkušební verze Malwarebytes Anti-Malware.) 1.75.0.1300
www.malwarebytes.org

Verze: v2014.01.13.03

Windows 8 x64 NTFS
Internet Explorer 10.0.9200.16750
Terezka :: TERKA [administrátor]

Ochrana: Povolena

13. 1. 2014 13:27:27
mbam-log-2014-01-13 (13-27-27).txt

Typ: Rychlá kontrola
Nastavení kontroly povoleno: Paměť | Po spuštění | Registr | Systémové soubory | Heuristická analýza Extra | Heuristická analýza Shuriken | PUP | PUM
Nastavení kontroly zakázáno: P2P
Kontrolované objekty: 240515
Uplynulý čas: 6 minut, 7 sekund

Nalezené procesy v paměti: 1
C:\ProgramData\QuickSet\SK.Enhancer\SK.Enhancer.exe (PUP.Optional.MultiPlug.A) -> 9440 -> Bude smazán při restartu.

Nalezené moduly v paměti: 0
(Žádné škodlivé položky nebyly zjištěny)

Nalezené klíče v registru: 2
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\S-161304646 (PUP.Optional.MultiPlug.A) -> Přesun do karantény a smazání se zdařilo.
HKCU\Software\Conduit\FF (PUP.Optional.Conduit.A) -> Přesun do karantény a smazání se zdařilo.

Nalezené hodnoty v registru: 0
(Žádné škodlivé položky nebyly zjištěny)

Nalezené datové položky v registru: 0
(Žádné škodlivé položky nebyly zjištěny)

Nalezené složky: 4
C:\Users\Terezka\AppData\Local\Temp\CT3289075 (PUP.Optional.Conduit.A) -> Přesun do karantény a smazání se zdařilo.
C:\Users\Terezka\AppData\Local\Temp\CT3289075\xpi (PUP.Optional.Conduit.A) -> Přesun do karantény a smazání se zdařilo.
C:\Users\Terezka\AppData\Local\Temp\CT3289075\xpi\defaults (PUP.Optional.Conduit.A) -> Přesun do karantény a smazání se zdařilo.
C:\Users\Terezka\AppData\Local\Temp\CT3289075\xpi\defaults\preferences (PUP.Optional.Conduit.A) -> Přesun do karantény a smazání se zdařilo.

Nalezené soubory: 19
C:\ProgramData\QuickSet\SK.Enhancer\SK.Enhancer.exe (PUP.Optional.MultiPlug.A) -> Bude smazán při restartu.
C:\$Recycle.Bin\S-1-5-21-2815119995-1780246843-4195622244-1003\$RASHT9E.exe (PUP.Optional.OneClickDownloader.A) -> Přesun do karantény a smazání se zdařilo.
C:\$Recycle.Bin\S-1-5-21-2815119995-1780246843-4195622244-1003\$RDX3RSD.exe (PUP.Optional.InstalleRex) -> Přesun do karantény a smazání se zdařilo.
C:\$Recycle.Bin\S-1-5-21-2815119995-1780246843-4195622244-1003\$REK1JWL.exe (PUP.Optional.InstalleRex) -> Přesun do karantény a smazání se zdařilo.
C:\$Recycle.Bin\S-1-5-21-2815119995-1780246843-4195622244-1003\$RGBLHZA.exe (PUP.Optional.InstalleRex) -> Přesun do karantény a smazání se zdařilo.
C:\$Recycle.Bin\S-1-5-21-2815119995-1780246843-4195622244-1003\$RHD5TIR.exe (PUP.Optional.InstalleRex) -> Přesun do karantény a smazání se zdařilo.
C:\$Recycle.Bin\S-1-5-21-2815119995-1780246843-4195622244-1003\$RQ25NIS.exe (PUP.Optional.InstalleRex) -> Přesun do karantény a smazání se zdařilo.
C:\$Recycle.Bin\S-1-5-21-2815119995-1780246843-4195622244-1003\$RV4EGRD.exe (PUP.Optional.InstalleRex) -> Přesun do karantény a smazání se zdařilo.
C:\$Recycle.Bin\S-1-5-21-2815119995-1780246843-4195622244-1003\$RW0ZYPK.exe (PUP.Optional.InstalleRex) -> Přesun do karantény a smazání se zdařilo.
C:\Users\Terezka\AppData\Local\Temp\ckupiWPx.exe.part (PUP.BundleInstaller.DW) -> Přesun do karantény a smazání se zdařilo.
C:\Users\Terezka\AppData\Local\Temp\IB8fOKez.exe.part (PUP.BundleInstaller.DW) -> Bude smazán při restartu.
C:\Users\Terezka\AppData\Local\Temp\oPWkkOxb.exe.part (PUP.Optional.OpenCandy) -> Přesun do karantény a smazání se zdařilo.
C:\Users\Terezka\Local Settings\Temporary Internet Files\Content.IE5\2CVOZEAF\agent2[1].exe (PUP.Optional.MultiPlug.A) -> Přesun do karantény a smazání se zdařilo.
C:\Users\Terezka\Local Settings\Temporary Internet Files\Content.IE5\2CVOZEAF\psupport_install[1].exe (PUP.Optional.SProtect.A) -> Přesun do karantény a smazání se zdařilo.
C:\Users\Terezka\AppData\Local\Temp\CT3289075\conduit.xml (PUP.Optional.Conduit.A) -> Přesun do karantény a smazání se zdařilo.
C:\Users\Terezka\AppData\Local\Temp\CT3289075\CT3289075.xpi (PUP.Optional.Conduit.A) -> Přesun do karantény a smazání se zdařilo.
C:\Users\Terezka\AppData\Local\Temp\CT3289075\version.txt (PUP.Optional.Conduit.A) -> Přesun do karantény a smazání se zdařilo.
C:\Users\Terezka\AppData\Local\Temp\CT3289075\xpi\install.rdf (PUP.Optional.Conduit.A) -> Přesun do karantény a smazání se zdařilo.
C:\Users\Terezka\AppData\Local\Temp\CT3289075\xpi\defaults\preferences\defaults.js (PUP.Optional.Conduit.A) -> Přesun do karantény a smazání se zdařilo.

(konec)

po ADW cleaner:
AdwCleaner v3.017 - Report created 13/01/2014 at 13:42:57
# Updated 12/01/2014 by Xplode
# Operating System : Windows 8 (64 bits)
# Username : Terezka - TERKA
# Running from : C:\Users\Terezka\Desktop\adwcleaner.exe
# Option : Clean

***** [ Services ] *****


***** [ Files / Folders ] *****

Folder Deleted : C:\ProgramData\QuickSet
Folder Deleted : C:\Users\Terezka\AppData\Roaming\Mozilla\Firefox\Profiles\p0l6vk48.default\Extensions\toolbar@ask.com

***** [ Shortcuts ] *****


***** [ Registry ] *****

Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\CLSID\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{17B10E59-09E1-4C39-A738-6774D7AB7778}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{1AD2049E-E483-4425-8555-8E0775ACB631}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{23119123-0854-469D-807A-171568457991}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{2D73F2D0-2FAB-458E-977D-2F9050E0ED60}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{2D9083CE-8758-4704-BA57-3C891D7452BD}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{3E9469AF-E866-4476-B767-810630F1F6E7}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{47700C35-9E3E-4DAD-934C-0CE28A87237C}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{72063D77-7590-4DA9-A7F8-F5ECAF3632C4}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{7FC87AC5-FA93-476E-A32C-A941229DED0B}
Key Deleted : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}
Key Deleted : HKCU\Software\Conduit
Key Deleted : HKCU\Software\AppDataLow\Software\SmartBar
Key Deleted : HKLM\Software\Conduit

***** [ Browsers ] *****

-\\ Internet Explorer v10.0.9200.16537


-\\ Mozilla Firefox v26.0 (cs)

[ File : C:\Users\Terezka\AppData\Roaming\Mozilla\Firefox\Profiles\p0l6vk48.default\prefs.js ]

Line Deleted : user_pref("CT3220468.BT_Stats.enc", "eyJsYXN0X2xvZyI6MTM2NDU3NjYxNiwidXVpZCI6NDkzMTY1MjA0NzE4Nzk5LCJzZXFfaWQiOjIsInNzYiI6MTM2NDQxNzYwMH0=");
Line Deleted : user_pref("CT3220468.ENABALE_HISTORY", "{\"dataType\":\"string\",\"data\":\"true\"}");
Line Deleted : user_pref("CT3220468.ENABLE_RETURN_WEB_SEARCH_ON_THE_PAGE", "{\"dataType\":\"string\",\"data\":\"true\"}");
Line Deleted : user_pref("CT3220468.FirstTime", "true");
Line Deleted : user_pref("CT3220468.FirstTimeFF3", "true");
Line Deleted : user_pref("CT3220468.LoginRevertSettingsEnabled", true);
Line Deleted : user_pref("CT3220468.PG_ENABLE", "dHJ1ZQ==");
Line Deleted : user_pref("CT3220468.PG_ENABLE.enc", "dHJ1ZQ==");
Line Deleted : user_pref("CT3220468.RevertSettingsEnabled", true);
Line Deleted : user_pref("CT3220468.SearchFromAddressBarUrl", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT3220468&SearchSource=2&q=");
Line Deleted : user_pref("CT3220468.UserID", "UN79846323234224651");
Line Deleted : user_pref("CT3220468.addressBarTakeOverEnabledInHidden", "true");
Line Deleted : user_pref("CT3220468.browser.search.defaultthis.engineName", true);
Line Deleted : user_pref("CT3220468.embeddedsData", "[{\"appId\":\"129813684258939747\",\"apiPermissions\":{\"crossDomainAjax\":true,\"getMainFrameTitle\":true,\"getMainFrameUrl\":true,\"getSearchTerm\":true,\"insta[...]
Line Deleted : user_pref("CT3220468.enableAlerts", "always");
Line Deleted : user_pref("CT3220468.enableFix404ByUser", "FALSE");
Line Deleted : user_pref("CT3220468.firstTimeDialogOpened", "true");
Line Deleted : user_pref("CT3220468.fixPageNotFoundErrorByUser", "TRUE");
Line Deleted : user_pref("CT3220468.fixPageNotFoundErrorInHidden", "true");
Line Deleted : user_pref("CT3220468.fixUrls", true);
Line Deleted : user_pref("CT3220468.installType", "Unknown");
Line Deleted : user_pref("CT3220468.isCheckedStartAsHidden", true);
Line Deleted : user_pref("CT3220468.isEnableAllDialogs", "{\"dataType\":\"string\",\"data\":\"true\"}");
Line Deleted : user_pref("CT3220468.isFirstTimeToolbarLoading", "false");
Line Deleted : user_pref("CT3220468.isNewTabEnabled", false);
Line Deleted : user_pref("CT3220468.isPerformedSmartBarTransition", "true");
Line Deleted : user_pref("CT3220468.isToolbarShrinked", "{\"dataType\":\"string\",\"data\":\"false\"}");
Line Deleted : user_pref("CT3220468.isWelcomPage", "{\"dataType\":\"boolean\",\"data\":\"true\"}");
Line Deleted : user_pref("CT3220468.keyword", true);
Line Deleted : user_pref("CT3220468.lastVersion", "10.15.0.562");
Line Deleted : user_pref("CT3220468.mam_gk_appStateReportTime.enc", "MTM2NDYzODg2MDE1Ng==");
Line Deleted : user_pref("CT3220468.mam_gk_appState_CouponBuddy.enc", "b24=");
Line Deleted : user_pref("CT3220468.mam_gk_appState_PriceGong.enc", "b24=");
Line Deleted : user_pref("CT3220468.mam_gk_appsData.enc", "eyJhcHBzIjpbeyJpZCI6IlByaWNlR29uZyIsInVybCI6Imh0dHA6Ly9wcmljZWdvbmcuY29uZHVpdGFwcHMuY29tL01BTS92MS9odG1sX2NvbXAuaHRtbCIsIm9wdGlvbnNEaWFsb2ciOnsiZGlzcGxheU5h[...]
Line Deleted : user_pref("CT3220468.mam_gk_appsDefaultEnabled.enc", "bnVsbA==");
Line Deleted : user_pref("CT3220468.mam_gk_configuration.enc", "eyJjb25maWd1cmF0aW9uIjpbeyJpZCI6IkNvdXBvbkJ1ZGR5IiwiY3JpdGVyaWFzIjpbeyJjcml0ZXJpYUlkIjoiNmNjN2Q4MzUtMTQwNS00NTZhLThhNTYtNGM1ZjRjN2NiYmFhIiwiZG9tYWlucyI[...]
Line Deleted : user_pref("CT3220468.mam_gk_currentVersion.enc", "MS40LjQuNg==");
Line Deleted : user_pref("CT3220468.mam_gk_eventsCache.enc", "eyI2Zjg1ZTgzOC02MTJmLTQyMDItOTdmMy00N2QwMTMwZDI3YTEiOnsidG9waWMiOiJzZW5kVXNhZ2UiLCJkYXRhIjp7ImNhdGVnb3J5IjoiV2VsY29tZSIsImFjdGlvbiI6IlZpZXcifSwidW5pcXVlS[...]
Line Deleted : user_pref("CT3220468.mam_gk_first_time.enc", "MQ==");
Line Deleted : user_pref("CT3220468.mam_gk_gadgetOpen.enc", "MA==");
Line Deleted : user_pref("CT3220468.mam_gk_lastLoginTime.enc", "MTM2NDYzODg2MDE1OA==");
Line Deleted : user_pref("CT3220468.mam_gk_localization.enc", "eyJnYWRnZXRDb250ZW50UG9saWN5Ijp7IlRleHQiOiJDb250ZW50IFBvbGljeSJ9LCJnYWRnZXREZXNjcmlwdGlvblByaW1hcnkiOnsiVGV4dCI6IlZhbHVlIEFwcHMgZW5yaWNoZXMgeW91ciB3ZWIg[...]
Line Deleted : user_pref("CT3220468.mam_gk_pgUnloadedOnce.enc", "dHJ1ZQ==");
Line Deleted : user_pref("CT3220468.mam_gk_settings1.4.4.6.enc", "eyJTdGF0dXMiOiJzdWNjZWVkZWQiLCJEYXRhIjp7ImludGVydmFsIjoyNDAsInN0YW1wIjoiMTk1XzAiLCJpc1Rlc3QiOnRydWUsImlzV2VsY29tZUV4cGVyaWVuY2VFbmFibGVkQnlEZWZhdWx0I[...]
Line Deleted : user_pref("CT3220468.mam_gk_showCloseButton.enc", "dHJ1ZQ==");
Line Deleted : user_pref("CT3220468.mam_gk_showWelcomeGadget.enc", "ZmFsc2U=");
Line Deleted : user_pref("CT3220468.mam_gk_userId.enc", "YWQ1YzFmYmYtMzBkOC00YTU4LWE5ZWMtNWIwOTkzODRjMjlj");
Line Deleted : user_pref("CT3220468.migrateAppsAndComponents", true);
Line Deleted : user_pref("CT3220468.navigationAliasesJson", "{\"EB_SEARCH_TERM\":\"\",\"EB_MAIN_FRAME_URL\":\"\",\"EB_MAIN_FRAME_TITLE\":\"\",\"EB_TOOLBAR_SUB_DOMAIN\":\"hxxp://uTorrentControlv2.OurToolbar.com/\",\"[...]
Line Deleted : user_pref("CT3220468.price-gong.isManagedApp", "true");
Line Deleted : user_pref("CT3220468.search.searchAppId", "129813684258939747");
Line Deleted : user_pref("CT3220468.search.searchCount", "0");
Line Deleted : user_pref("CT3220468.searchInNewTabEnabled", "false");
Line Deleted : user_pref("CT3220468.searchInNewTabEnabledByUser", "false");
Line Deleted : user_pref("CT3220468.searchInNewTabEnabledInHidden", "true");
Line Deleted : user_pref("CT3220468.selectToSearchBoxEnabled", "{\"dataType\":\"string\",\"data\":\"true\"}");
Line Deleted : user_pref("CT3220468.serviceLayer_service_login_isFirstLoginInvoked", "{\"dataType\":\"boolean\",\"data\":\"true\"}");
Line Deleted : user_pref("CT3220468.serviceLayer_service_login_loginCount", "{\"dataType\":\"number\",\"data\":\"4\"}");
Line Deleted : user_pref("CT3220468.serviceLayer_service_toolbarGrouping_activeCTID", "{\"dataType\":\"string\",\"data\":\"CT3220468\"}");
Line Deleted : user_pref("CT3220468.serviceLayer_service_toolbarGrouping_activeDownloadUrl", "{\"dataType\":\"string\",\"data\":\"hxxp://uTorrentControlv2.OurToolbar.com//xpi\"}");
Line Deleted : user_pref("CT3220468.serviceLayer_service_toolbarGrouping_activeToolbarName", "{\"dataType\":\"string\",\"data\":\"uTorrentControl_v2\"}");
Line Deleted : user_pref("CT3220468.serviceLayer_service_toolbarGrouping_invoked", "{\"dataType\":\"string\",\"data\":\"true\"}");
Line Deleted : user_pref("CT3220468.serviceLayer_services_appTrackingFirstTime_lastUpdate", "1364484149974");
Line Deleted : user_pref("CT3220468.serviceLayer_services_appsMetadata_lastUpdate", "1364501452182");
Line Deleted : user_pref("CT3220468.serviceLayer_services_gottenAppsContextMenu_lastUpdate", "1364484149794");
Line Deleted : user_pref("CT3220468.serviceLayer_services_location_lastUpdate", "1364501565961");
Line Deleted : user_pref("CT3220468.serviceLayer_services_login_10.13.40.15_lastUpdate", "1358404600820");
Line Deleted : user_pref("CT3220468.serviceLayer_services_login_10.14.370.524_lastUpdate", "1364407230842");
Line Deleted : user_pref("CT3220468.serviceLayer_services_login_10.14.40.128_lastUpdate", "1359708824140");
Line Deleted : user_pref("CT3220468.serviceLayer_services_login_10.14.42.7_lastUpdate", "1361050088939");
Line Deleted : user_pref("CT3220468.serviceLayer_services_login_10.14.65.43_lastUpdate", "1363182489861");
Line Deleted : user_pref("CT3220468.serviceLayer_services_login_10.15.0.562_lastUpdate", "1364484149525");
Line Deleted : user_pref("CT3220468.serviceLayer_services_otherAppsContextMenu_lastUpdate", "1364484149872");
Line Deleted : user_pref("CT3220468.serviceLayer_services_searchAPI_lastUpdate", "1364484149967");
Line Deleted : user_pref("CT3220468.serviceLayer_services_serviceMap_lastUpdate", "1364501565781");
Line Deleted : user_pref("CT3220468.serviceLayer_services_toolbarContextMenu_lastUpdate", "1364484149701");
Line Deleted : user_pref("CT3220468.serviceLayer_services_toolbarSettings_lastUpdate", "1364501451864");
Line Deleted : user_pref("CT3220468.serviceLayer_services_translation_lastUpdate", "1364501568485");
Line Deleted : user_pref("CT3220468.settingsINI", true);
Line Deleted : user_pref("CT3220468.showToolbarPermission", "false");
Line Deleted : user_pref("CT3220468.smartbar.CTID", "CT3220468");
Line Deleted : user_pref("CT3220468.smartbar.Uninstall", "0");
Line Deleted : user_pref("CT3220468.smartbar.toolbarName", "uTorrentControl_v2 ");
Line Deleted : user_pref("CT3220468.toolbarBornServerTime", "14-9-2012");
Line Deleted : user_pref("CT3220468.toolbarCurrentServerTime", "28-3-2013");
Line Deleted : user_pref("CT3220468.toolbarLoginClientTime", "Wed Mar 13 2013 15:20:39 GMT+0100");
Line Deleted : user_pref("CT3220468.url_history0001.enc", "aHR0cDovL3d3dy5mYWNlYm9vay5jb20vP3JlZj10bl90bm1uOjo6Y2xpY2toYW5kbGVyOjo6MTM2NDU3Njc2MDExNywsLGh0dHA6Ly93d3cuZmFjZWJvb2suY29tLyM6OjpjbGlja2hhbmRsZXI6OjoxMzY0[...]
Line Deleted : user_pref("CT3220468_Firefox.csv", "[{\"from\":\"Abs Layer\",\"action\":\"loading toolbar\",\"time\":1364638848766,\"isWithState\":\"\",\"timeFromStart\":0,\"timeFromPrev\":0}]");
Line Deleted : user_pref("CT3289075_Firefox.csv", "[{\"from\":\"Abs Layer\",\"action\":\"loading toolbar\",\"time\":1368353189696,\"isWithState\":\"\",\"timeFromStart\":0,\"timeFromPrev\":0}]");
Line Deleted : user_pref("Smartbar.ConduitSearchEngineList", "");
Line Deleted : user_pref("Smartbar.ConduitSearchUrlList", "");
Line Deleted : user_pref("Smartbar.keywordURLSelectedCTID", "CT3220468");
Line Deleted : user_pref("browser.search.defaultengine", "Ask.com");
Line Deleted : user_pref("browser.search.order.1", "Ask.com");
Line Deleted : user_pref("extensions.SKp5CjA.scode", "(function(){try{if(window.self.location.hostname.indexOf(\"acebook.co\")>-1){return};}catch(e){};if(window.self.location.protocol.indexOf('hxxp')>-1 && window.se[...]
Line Deleted : user_pref("extensions.asktb.ff-original-keyword-url", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT3220468&SearchSource=2&q=");
Line Deleted : user_pref("extensions.mywebsearch.prevDefaultEngine", "Ask.com");
Line Deleted : user_pref("extensions.mywebsearch.prevKwdEnabled", true);
Line Deleted : user_pref("extensions.mywebsearch.prevKwdURL", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT3220468&SearchSource=2&CUI=UN79846323234224651&UM=UM_ID&q=");
Line Deleted : user_pref("extensions.mywebsearch.prevSelectedEngine", "Google");
Line Deleted : user_pref("extensions.tfFdHQqOZTqE.scode", "(function(){try{if(window.self.location.hostname.indexOf(\"acebook.co\")>-1){return};}catch(e){};if(window.self.location.protocol.indexOf('hxxp')>-1 && wind[...]
Line Deleted : user_pref("extensions.toolbar.mindspark._4zMembers_.homepage", "hxxp://home.mywebsearch.com/index.jhtml?ptb=67290390-2F69-4DF6-AB47-BE43161FDEAA&n=77fc67a5&p2=^HJ^xdm073^YY^cz&si=pconverter");
Line Deleted : user_pref("extensions.toolbar.mindspark._4zMembers_.hp.enabled", true);
Line Deleted : user_pref("extensions.toolbar.mindspark._4zMembers_.hp.lastGuardTime", -1445083690);
Line Deleted : user_pref("extensions.toolbar.mindspark._4zMembers_.hp.numGuards", 1);
Line Deleted : user_pref("extensions.toolbar.mindspark._4zMembers_.initialized", true);
Line Deleted : user_pref("extensions.toolbar.mindspark._4zMembers_.installation.contextKey", "");
Line Deleted : user_pref("extensions.toolbar.mindspark._4zMembers_.installation.installDate", "2013030309");
Line Deleted : user_pref("extensions.toolbar.mindspark._4zMembers_.installation.partnerId", "^HJ^xdm073^YY^cz");
Line Deleted : user_pref("extensions.toolbar.mindspark._4zMembers_.installation.partnerSubId", "pconverter");
Line Deleted : user_pref("extensions.toolbar.mindspark._4zMembers_.installation.success", true);
Line Deleted : user_pref("extensions.toolbar.mindspark._4zMembers_.installation.toolbarId", "67290390-2F69-4DF6-AB47-BE43161FDEAA");
Line Deleted : user_pref("extensions.toolbar.mindspark._4zMembers_.lastActivePing", "1368705637071");
Line Deleted : user_pref("extensions.toolbar.mindspark._4zMembers_.options.defaultSearch", true);
Line Deleted : user_pref("extensions.toolbar.mindspark._4zMembers_.options.homePageEnabled", true);
Line Deleted : user_pref("extensions.toolbar.mindspark._4zMembers_.options.keywordEnabled", true);
Line Deleted : user_pref("extensions.toolbar.mindspark._4zMembers_.options.tabEnabled", true);
Line Deleted : user_pref("extensions.toolbar.mindspark._4zMembers_.searchHistory", "ftp.biomed.cas.cz");
Line Deleted : user_pref("extensions.toolbar.mindspark._4zMembers_.weather.location", "10001");
Line Deleted : user_pref("extensions.toolbar.mindspark.hp.enabled", true);
Line Deleted : user_pref("extensions.toolbar.mindspark.hp.enabled.guid", "videodownloadconverter@mindspark.com");
Line Deleted : user_pref("extensions.toolbar.mindspark.lastInstalled", "videodownloadconverter@mindspark.com");
Line Deleted : user_pref("extensions.uxoPD.scode", "(function(){try{if(window.self.location.hostname.indexOf(\"acebook.co\")>-1){return};}catch(e){};if(window.self.location.protocol.indexOf('hxxp')>-1 && window.self[...]
Line Deleted : user_pref("smartbar.machineId", "R0PFRZFGT598QKA7FY00AG4ATBNT8KJDI0FBWDXK0IWDVKAVEA7ITSIRLQT7IYEJFERANP2GUNNMKGIKER/FFQ");

[ File : C:\Users\Adam\AppData\Roaming\Mozilla\Firefox\Profiles\975bo2b5.default\prefs.js ]


*************************

AdwCleaner[R0].txt - [15411 octets] - [13/01/2014 13:29:56]
AdwCleaner[R1].txt - [15472 octets] - [13/01/2014 13:40:51]
AdwCleaner[S0].txt - [15593 octets] - [13/01/2014 13:42:57]

########## EOF - C:\AdwCleaner\AdwCleaner[S0].txt - [15654 octets] ##########
Nahoru
Avatar uživatele
vyosek
VIP
VIP
Příspěvky: 56365
Registrován: 07 Lis 2006 15:24
Místo/Bydliště: Šalingrad - Brno

Re: Awardhotspot reklamy

#4 Příspěvek od vyosek »

Poprosim o log dle tohoto navodu http://forum.viry.cz/viewtopic.php?f=13&t=133100
"Kdo víno má a nepije,kdo hrozny má a nejí je, kdo ženu má a nelíbá, kdo zábavě se vyhýbá, na toho vemte bič a hůl, to není člověk, to je vůl."
Člen Obrázek od 1. února 2011.
Nahoru
tuhyk
Návštěvník
Návštěvník
Příspěvky: 6
Registrován: 13 Led 2014 13:02

Re: Awardhotspot reklamy

#5 Příspěvek od tuhyk »

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 13-01-2014 01
Ran by Terezka (administrator) on TERKA on 13-01-2014 14:10:23
Running from C:\Users\Terezka\Desktop
Windows 8 (X64) OS Language: Czech
Internet Explorer Version 10
Boot Mode: Normal

==================== Processes (Whitelisted) =================

(AuthenTec, Inc) C:\Program Files\Lenovo Fingerprint Reader\TrueSuiteService.exe
(Lenovo.) C:\Windows\System32\ibmpmsvc.exe
(IvoSoft) C:\Program Files\Classic Shell\ClassicShellService.exe
(Microsoft Corporation) C:\Windows\System32\wlanext.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(Conexant Systems Inc.) C:\Windows\System32\CxAudMsg64.exe
(Intel(R) Corporation) C:\Program Files\Intel\WiFi\bin\EvtEng.exe
(Microsoft Corporation) C:\Windows\System32\dasHost.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe
(Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\Jhi_service.exe
(LENOVO INCORPORATED.) C:\Program Files\Lenovo\SystemAgent\SystemAgentService.exe
(Lenovo Group Limited) C:\Program Files\Lenovo\Communications Utility\CamMute.exe
(Lenovo Group Limited) C:\Program Files\Lenovo\Communications Utility\TPKNRSVC.exe
(Lenovo Corporation) C:\Program Files\Lenovo\Communications Utility\vcamsvc.exe
(Lenovo Group Limited) C:\Program Files\Lenovo\VIRTSCRL\lvvsst.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe
(Lenovo) C:\Program Files (x86)\ThinkPad\Utilities\PWMDBSVC.exe
(AuthenTec Inc.) C:\Program Files\Lenovo Fingerprint Reader\TouchControl.exe
(IvoSoft) C:\Program Files\Classic Shell\ClassicStartMenu.exe
(Intel(R) Corporation) C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe
(Lenovo Group Limited) C:\Program Files\Lenovo\VIRTSCRL\virtscrl.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
(Conexant Systems, Inc.) C:\Windows\SysWOW64\SASrv.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe
(Skype Technologies S.A.) C:\ProgramData\Skype\Toolbars\Skype C2C Service\c2c_service.exe
(Microsoft Corporation) C:\Program Files\Windows Defender\MsMpEng.exe
(Intel® Corporation) C:\Program Files\Intel\WiFi\bin\ZeroConfigService.exe
(Lenovo Group Limited) C:\Program Files\Lenovo\HOTKEY\micmute.exe
(Lenovo Group Limited) C:\Program Files\Lenovo\HOTKEY\tphkload.exe
(Lenovo Group Limited) C:\Program Files\Lenovo\HOTKEY\tpnumlkd.exe
(Lenovo Group Limited) C:\Program Files\Lenovo\HOTKEY\mkrmsg.exe
(Lenovo Group Limited) C:\Program Files\Lenovo\HOTKEY\tposd.exe
(Lenovo Group Limited) C:\Program Files\Lenovo\HOTKEY\shtctky.exe
(AuthenTec, Inc.) C:\Program Files\Common Files\AuthenTec\TrueService.exe
(AuthenTec, Inc.) C:\Program Files\Common Files\AuthenTec\TrueService.exe
(Microsoft Corporation) C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16.4.4206.722_x64__8wekyb3d8bbwe\LiveComm.exe
(CyberLink Corp.) C:\Program Files (x86)\CyberLink\PowerDVD10\PDVD10Serv.exe
(Intel Corporation) C:\Windows\System32\hkcmd.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
(CyberLink) C:\Program Files (x86)\CyberLink\Power2Go\CLMLSvc.exe
(Conexant Systems, Inc.) C:\Program Files\CONEXANT\cAudioFilterAgent\CAudioFilterAgent64.exe
() C:\Program Files\CONEXANT\ForteConfig\fmapp.exe
(Lenovo.) C:\Windows\System32\TpShocks.exe
(Lenovo) C:\Program Files\Lenovo\Lenovo Mobile Hotspot\MobileHotspotclient.exe
(Dolby Laboratories Inc.) C:\Program Files (x86)\Dolby Advanced Audio v2\pcee4.exe
(Lenovo Corporation) C:\Program Files\Lenovo\Communications Utility\TpKnrres.exe
(Motorola Solutions, Inc.) C:\Program Files (x86)\Intel\Bluetooth\devmonsrv.exe
(Motorola Solutions, Inc.) C:\Program Files (x86)\Intel\Bluetooth\obexsrv.exe
(Skype Technologies S.A.) C:\Program Files (x86)\Skype\Phone\Skype.exe
(McAfee, Inc.) C:\Program Files\McAfee Security Scan\3.8.130\SSScheduler.exe
(Ricoh co.,Ltd.) C:\Program Files (x86)\Integrated Camera Driver\X64\RCIMGDIR.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(Apple Inc.) C:\Program Files (x86)\iTunes\iTunesHelper.exe
(Lenovo Corporation) C:\Program Files\Lenovo\Communications Utility\vcamsvchlpr.exe
(Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPLpr.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
() C:\Program Files\Lenovo Fingerprint Reader\x86\IEWebSiteLogon.exe
(Intel Corporation) C:\Program Files\Intel\BluetoothHS\BTHSAmpPalService.exe
(Intel(R) Corporation) C:\Program Files\Intel\BluetoothHS\BTHSSecurityMgr.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Lenovo) C:\Program Files\Lenovo\Lenovo Mobile Hotspot\LnvHotSpotSvc.exe
() C:\Program Files (x86)\Lenovo\LocationAware\loctaskmgr.exe
() C:\Program Files (x86)\Lenovo\LocationAware\lpdagent.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
(Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_11_7_700_224.exe
(Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_11_7_700_224.exe
(forum.viry.cz) C:\Users\Terezka\Desktop\FRSTLauncher.exe


==================== Registry (Whitelisted) ==================

HKLM\...\Run: [BTMTrayAgent] - C:\Program Files (x86)\Intel\Bluetooth\btmshell.dll [11554688 2012-08-08] (Motorola Solutions, Inc.)
HKLM\...\Run: [SmartAudio] - C:\Program Files\CONEXANT\SAII\SACpl.exe [1647616 2012-06-13] (Conexant Systems, Inc.)
HKLM\...\Run: [cAudioFilterAgent] - C:\Program Files\Conexant\cAudioFilterAgent\cAudioFilterAgent64.exe [887968 2012-06-15] (Conexant Systems, Inc.)
HKLM\...\Run: [ForteConfig] - C:\Program Files\Conexant\ForteConfig\fmapp.exe [49056 2010-10-26] ()
HKLM\...\Run: [TpShocks] - C:\Windows\system32\TpShocks.exe [222720 2012-08-24] (Lenovo.)
HKLM\...\Run: [] - [x]
HKLM\...\Run: [LnvMobHotspotClient] - C:\Program Files\Lenovo\Lenovo Mobile Hotspot\MobileHotspotclient.exe [1010784 2012-08-20] (Lenovo)
HKLM\...\Run: [LENOVO.TPKNRRES] - C:\Program Files\Lenovo\Communications Utility\TPKNRRES.exe [564320 2012-08-13] (Lenovo Corporation)
HKLM-x32\...\Run: [IMSS] - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IMSS\PIconStartup.exe [133440 2012-07-19] (Intel Corporation)
HKLM-x32\...\Run: [RotateImage] - C:\Program Files (x86)\Integrated Camera Driver\X64\RCIMGDIR.exe [59392 2012-05-03] (Ricoh co.,Ltd.)
HKLM-x32\...\Run: [GrooveMonitor] - C:\Program Files (x86)\Microsoft Office\Office12\GrooveMonitor.exe [31016 2006-10-27] (Microsoft Corporation)
HKLM-x32\...\Run: [Adobe ARM] - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [926896 2012-09-23] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [SunJavaUpdateSched] - C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [256384 2013-08-15] (Oracle Corporation)
HKLM-x32\...\Run: [APSDaemon] - C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [59720 2013-04-21] (Apple Inc.)
HKLM-x32\...\Run: [iTunesHelper] - C:\Program Files (x86)\iTunes\iTunesHelper.exe [152392 2013-08-16] (Apple Inc.)
Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation)
HKCU\...\Run: [Seznam.chromeUpdatePref] - C:\Users\Terezka\AppData\Roaming\Seznam.cz\bin\chromeUpdatePref.exe remove
HKCU\...\Run: [Skype] - C:\Program Files (x86)\Skype\Phone\Skype.exe [20587168 2013-11-18] (Skype Technologies S.A.)
HKCU\...\Run: [Google Update] - C:\Users\Terezka\AppData\Local\Google\Update\GoogleUpdate.exe [116648 2014-01-11] (Google Inc.)
HKU\Default\...\RunOnce: [Lenovo.ShowBand] - C:\Program Files\Lenovo\SimpleTap DeskBand\ShowBand.exe [40360 2012-09-20] (Lenovo)
HKU\Default User\...\RunOnce: [Lenovo.ShowBand] - C:\Program Files\Lenovo\SimpleTap DeskBand\ShowBand.exe [40360 2012-09-20] (Lenovo)

==================== Internet (Whitelisted) ====================

ProxyEnable: Internet Explorer proxy is enabled.
ProxyServer: cache.natur.cuni.cz:3128
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.ncbi.nlm.nih.gov/pubmed/
HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://lenovo13-comm.msn.com
HKCU\Software\Microsoft\Internet Explorer\Main,Default_Secondary_Page_URL = http://www.lenovo.com/welcome/thinkpad
SearchScopes: HKLM - DefaultScope {421F62A5-6438-4372-BF97-6D20E0D2074C} URL = http://www.bing.com/search?q={searchTer ... &pc=MALCJS
SearchScopes: HKLM - {421F62A5-6438-4372-BF97-6D20E0D2074C} URL = http://www.bing.com/search?q={searchTer ... &pc=MALCJS
SearchScopes: HKLM-x32 - {421F62A5-6438-4372-BF97-6D20E0D2074C} URL = http://www.bing.com/search?q={searchTer ... &pc=MALCJS
SearchScopes: HKCU - {421F62A5-6438-4372-BF97-6D20E0D2074C} URL =
BHO: ExplorerBHO Class - {449D0D6E-2412-4E61-B68F-1CB625CD9E52} - C:\Program Files\Classic Shell\ClassicExplorer64.dll (IvoSoft)
BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre8\bin\ssv.dll (Oracle Corporation)
BHO: TrueSuite Browser Helper Object - {8590886E-EC8C-43C1-A32C-E4C2B0B6395B} - C:\Program Files\Lenovo Fingerprint Reader\IEBHO.DLL (AuthenTec Inc.)
BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre8\bin\jp2ssv.dll (Oracle Corporation)
BHO: ClassicIE9BHO Class - {EA801577-E6AD-4BD5-8F71-4BE0154331A4} - C:\Program Files\Classic Shell\ClassicIE9DLL_64.dll (IvoSoft)
BHO-x32: MSS+ Identifier - {0E8A89AD-95D7-40EB-8D9D-083EF7066A01} - C:\Program Files\McAfee Security Scan\3.8.130\McAfeeMSS_IE.dll (McAfee, Inc.)
BHO-x32: Adobe PDF Link Helper - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll (Adobe Systems Incorporated)
BHO-x32: ExplorerBHO Class - {449D0D6E-2412-4E61-B68F-1CB625CD9E52} - C:\Program Files\Classic Shell\ClassicExplorer32.dll (IvoSoft)
BHO-x32: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files (x86)\Microsoft Office\Office12\GrooveShellExtensions.dll (Microsoft Corporation)
BHO-x32: TrueSuite Browser Helper Object - {8590886E-EC8C-43C1-A32C-E4C2B0B6395B} - C:\Program Files\Lenovo Fingerprint Reader\x86\IEBHO.dll (AuthenTec Inc.)
BHO-x32: ClassicIE9BHO Class - {EA801577-E6AD-4BD5-8F71-4BE0154331A4} - C:\Program Files\Classic Shell\ClassicIE9DLL_32.dll (IvoSoft)
Toolbar: HKLM - Classic Explorer Bar - {553891B7-A0D5-4526-BE18-D3CE461D6310} - C:\Program Files\Classic Shell\ClassicExplorer64.dll (IvoSoft)
Toolbar: HKLM-x32 - Classic Explorer Bar - {553891B7-A0D5-4526-BE18-D3CE461D6310} - C:\Program Files\Classic Shell\ClassicExplorer32.dll (IvoSoft)
DPF: HKLM-x32 {4FF78044-96B4-4312-A5B7-FDA3CB328095}
Handler: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll (Skype Technologies S.A.)
Handler-x32: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Tcpip\Parameters: [DhcpNameServer] 10.0.0.138

FireFox:
========
FF ProfilePath: C:\Users\Terezka\AppData\Roaming\Mozilla\Firefox\Profiles\p0l6vk48.default
FF DefaultSearchEngine: Centrum.cz
FF SelectedSearchEngine: Centrum.cz
FF Homepage: hxxp://google.com/
FF Keyword.URL: hxxp://search.centrum.cz/?charset=UTF-8&channel_id=ch-toolbar-ff,ch-toolbar-ff-searchbox&utm_source=ch-toolbar&utm_medium=ff-centrum-cz&utm_content=toolbar-searchbox&q=
FF NetworkProxy: "type", 0
FF Plugin: @adobe.com/FlashPlayer - C:\windows\system32\Macromed\Flash\NPSWF64_11_7_700_224.dll ()
FF Plugin: @java.com/DTPlugin,version=11.0.2 - C:\windows\system32\npDeployJava1.dll (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=11.0.2 - C:\Program Files\Java\jre8\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer - C:\windows\SysWOW64\Macromed\Flash\NPSWF32_11_7_700_224.dll ()
FF Plugin-x32: @Apple.com/iTunes,version=1.0 - C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll ()
FF Plugin-x32: @authentec.com/ffwloplugin - C:\Program Files\Lenovo Fingerprint Reader\npffwloplugin.dll (AuthenTec, Inc)
FF Plugin-x32: @exent.com/npExentControl,version=7.1.0.1 - C:\Program Files (x86)\FreeRide Games\npExentControl.dll (Exent Technologies Ltd.)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=2.1.42 - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll (Intel Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll (Intel Corporation)
FF Plugin-x32: @mcafee.com/McAfeeMssPlugin - C:\Program Files\McAfee Security Scan\3.8.130\npMcAfeeMss.dll (McAfee, Inc.)
FF Plugin-x32: @videolan.org/vlc,version=2.0.6 - C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin HKCU: @talk.google.com/GoogleTalkPlugin - C:\Users\Terezka\AppData\Roaming\Mozilla\plugins\npgoogletalk.dll (Google)
FF Plugin HKCU: @talk.google.com/O1DPlugin - C:\Users\Terezka\AppData\Roaming\Mozilla\plugins\npo1d.dll (Google)
FF Plugin HKCU: @talk.google.com/O3DPlugin - C:\Users\Terezka\AppData\Roaming\Mozilla\plugins\npgtpo3dautoplugin.dll ()
FF Plugin HKCU: @tools.google.com/Google Update;version=3 - C:\Users\Terezka\AppData\Local\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.)
FF Plugin HKCU: @tools.google.com/Google Update;version=9 - C:\Users\Terezka\AppData\Local\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\NPOFF12.DLL (Microsoft Corporation)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\nppdf32.dll (Adobe Systems Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npwachk.dll (Nullsoft, Inc.)
FF Plugin ProgramFiles/Appdata: C:\Users\Terezka\AppData\Roaming\mozilla\plugins\npgoogletalk.dll (Google)
FF Plugin ProgramFiles/Appdata: C:\Users\Terezka\AppData\Roaming\mozilla\plugins\npgtpo3dautoplugin.dll ()
FF Plugin ProgramFiles/Appdata: C:\Users\Terezka\AppData\Roaming\mozilla\plugins\npo1d.dll (Google)
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\heureka-cz.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\jyxo-cz.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\seznam-cz.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\slunecnice-cz.xml
FF Extension: surf aNd keep - C:\Users\Terezka\AppData\Roaming\Mozilla\Firefox\Profiles\p0l6vk48.default\Extensions\frnbuye@jtsv-.com [2013-11-23]
FF Extension: suurff anD keep - C:\Users\Terezka\AppData\Roaming\Mozilla\Firefox\Profiles\p0l6vk48.default\Extensions\iwtgwehzc@rzsaspbs.co.uk [2013-12-03]
FF Extension: Bloglovin' - C:\Users\Terezka\AppData\Roaming\Mozilla\Firefox\Profiles\p0l6vk48.default\Extensions\jid1-JrxwyxPdCKWWcw@jetpack [2013-05-12]
FF Extension: surF aond kEoep - C:\Users\Terezka\AppData\Roaming\Mozilla\Firefox\Profiles\p0l6vk48.default\Extensions\oyitqrj2ngdxk@hiauy.co.uk [2013-11-30]
FF Extension: Lišta Centrum.cz - C:\Users\Terezka\AppData\Roaming\Mozilla\Firefox\Profiles\p0l6vk48.default\Extensions\toolbar@centrumholdings.com [2014-01-12]
FF Extension: Zotero Word for Windows Integration - C:\Users\Terezka\AppData\Roaming\Mozilla\Firefox\Profiles\p0l6vk48.default\Extensions\zoteroWinWordIntegration@zotero.org [2013-12-15]
FF Extension: Zotero - C:\Users\Terezka\AppData\Roaming\Mozilla\Firefox\Profiles\p0l6vk48.default\Extensions\zotero@chnm.gmu.edu.xpi [2013-10-15]
FF Extension: All-in-One Sidebar - C:\Users\Terezka\AppData\Roaming\Mozilla\Firefox\Profiles\p0l6vk48.default\Extensions\{097d3191-e6fa-4728-9826-b533d755359d}.xpi [2013-05-18]
FF Extension: Adblock Plus - C:\Users\Terezka\AppData\Roaming\Mozilla\Firefox\Profiles\p0l6vk48.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2013-08-19]
FF Extension: Skype Click to Call - C:\Program Files (x86)\Mozilla Firefox\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A} [2014-01-11]
FF Extension: Skype Click to Call - C:\Program Files (x86)\Mozilla Firefox\browser\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A} [2014-01-11]
FF StartMenuInternet: FIREFOX.EXE - C:\Program Files (x86)\Mozilla Firefox EN\firefox.exe

==================== Services (Whitelisted) =================

U2 ClassicShellService; C:\Program Files\Classic Shell\ClassicShellService.exe [68608 2013-06-29] (IvoSoft)
U2 FPLService; C:\Program Files\Lenovo Fingerprint Reader\TrueSuiteService.exe [2139496 2012-08-31] (AuthenTec, Inc)
U2 Intel(R) ME Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe [129856 2012-07-05] (Intel Corporation)
U2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [166720 2012-07-05] (Intel Corporation)
U2 Lenovo System Agent Service; C:\Program Files\lenovo\SystemAgent\SystemAgentService.exe [559504 2012-08-16] (LENOVO INCORPORATED.)
U2 LENOVO.TVTVCAM; C:\Program Files\Lenovo\Communications Utility\vcamsvc.exe [222304 2012-08-13] (Lenovo Corporation)
U2 Lenovo.VIRTSCRLSVC; C:\Program Files\LENOVO\VIRTSCRL\lvvsst.exe [136288 2012-08-11] (Lenovo Group Limited)
U2 LnvHotSpotSvc; C:\Program Files\Lenovo\Lenovo Mobile Hotspot\LnvHotSpotSvc.exe [457824 2012-08-20] (Lenovo)
U2 LocationTaskManager; C:\Program Files (x86)\Lenovo\LocationAware\loctaskmgr.exe [458336 2012-08-15] ()
U2 MBAMScheduler; C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe [418376 2013-04-04] (Malwarebytes Corporation)
U2 MBAMService; C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe [701512 2013-04-04] (Malwarebytes Corporation)
U3 McComponentHostService; C:\Program Files\McAfee Security Scan\3.8.130\McCHSvc.exe [288776 2013-09-06] (McAfee, Inc.)
U3 MyWiFiDHCPDNS; C:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe [273136 2013-08-28] ()
U3 SUService; C:\Program Files (x86)\Lenovo\System Update\SUService.exe [21928 2012-08-16] ()
U3 TrueService; C:\Program Files\Common Files\AuthenTec\TrueService.exe [401256 2012-07-16] (AuthenTec, Inc.)
U2 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [16048 2013-07-02] (Microsoft Corporation)
U2 ZeroConfigService; C:\Program Files\Intel\WiFi\bin\ZeroConfigService.exe [3378416 2013-08-28] (Intel® Corporation)

==================== Drivers (Whitelisted) ====================

U3 BthLEEnum; C:\Windows\system32\DRIVERS\BthLEEnum.sys [202752 2012-07-26] (Microsoft Corporation)
U3 MBAMProtector; C:\windows\system32\drivers\mbam.sys [25928 2013-04-04] (Malwarebytes Corporation)
U3 NETwNe64; C:\Windows\system32\DRIVERS\NETwew00.sys [3345376 2013-10-08] (Intel Corporation)
U3 RCUVCAVS; C:\Windows\system32\DRIVERS\RCUVCAVS.sys [149632 2012-08-02] (Ricoh co.,Ltd.)
U3 RSP2STOR; C:\Windows\system32\DRIVERS\RtsP2Stor.sys [266896 2012-06-13] (Realtek Semiconductor Corp.)
U3 SmbDrvI; C:\Windows\system32\DRIVERS\Smb_driver_Intel.sys [43832 2012-08-05] (Synaptics Incorporated)
U3 SWIX64; C:\Program Files (x86)\Lenovo\System Update\tvsuhd64.sys [33856 2011-06-16] (Lenovo Group Limited)
U3 usb3Hub; C:\Windows\System32\drivers\usb3Hub.sys [48096 2012-08-10] (Windows (R) Win 7 DDK provider)
U2 X5XSEx_Pr148; C:\Program Files (x86)\FreeRide Games\X5XSEx_Pr148.Sys [56136 2012-08-02] (Exent Technologies Ltd.)
U3 XHCIPort; C:\Windows\System32\drivers\XHCIPort.sys [188384 2012-08-10] (Windows (R) Win 7 DDK provider)

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2014-01-13 14:10 - 2014-01-13 14:10 - 00020922 _____ C:\Users\Terezka\Desktop\FRST.txt
2014-01-13 14:09 - 2014-01-13 14:09 - 00000000 ____D C:\FRST
2014-01-13 14:08 - 2014-01-13 14:08 - 02075648 _____ (Farbar) C:\Users\Terezka\Desktop\FRST64.exe
2014-01-13 14:08 - 2014-01-13 14:08 - 00112640 _____ (forum.viry.cz) C:\Users\Terezka\Desktop\FRSTLauncher.exe
2014-01-13 13:29 - 2014-01-13 13:43 - 00000000 ____D C:\AdwCleaner
2014-01-13 13:27 - 2014-01-13 13:27 - 01236282 _____ C:\Users\Terezka\Desktop\adwcleaner.exe
2014-01-13 12:46 - 2014-01-13 12:46 - 00000000 ____D C:\Users\Terezka\AppData\Roaming\Malwarebytes
2014-01-13 12:46 - 2014-01-13 12:46 - 00000000 ____D C:\ProgramData\Malwarebytes
2014-01-13 12:46 - 2014-01-13 12:46 - 00000000 ____D C:\Program Files (x86)\Malwarebytes' Anti-Malware
2014-01-13 12:46 - 2013-04-04 14:50 - 00025928 _____ (Malwarebytes Corporation) C:\windows\system32\Drivers\mbam.sys
2014-01-11 01:19 - 2014-01-13 13:31 - 00000982 _____ C:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2815119995-1780246843-4195622244-1003UA.job
2014-01-11 01:19 - 2014-01-11 01:31 - 00000930 _____ C:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2815119995-1780246843-4195622244-1003Core.job
2014-01-11 01:19 - 2014-01-11 01:26 - 00003932 _____ C:\windows\System32\Tasks\GoogleUpdateTaskUserS-1-5-21-2815119995-1780246843-4195622244-1003UA
2014-01-11 01:19 - 2014-01-11 01:26 - 00003552 _____ C:\windows\System32\Tasks\GoogleUpdateTaskUserS-1-5-21-2815119995-1780246843-4195622244-1003Core
2014-01-11 01:19 - 2014-01-11 01:19 - 00000000 ____D C:\Users\Terezka\AppData\Local\Google
2014-01-11 00:45 - 2014-01-12 14:16 - 00000000 ____D C:\Users\Terezka\AppData\Roaming\Skype
2014-01-11 00:44 - 2014-01-11 00:45 - 00000000 ___RD C:\Program Files (x86)\Skype
2014-01-11 00:44 - 2014-01-11 00:45 - 00000000 ____D C:\ProgramData\Skype
2014-01-11 00:44 - 2014-01-11 00:44 - 00002731 _____ C:\Users\Public\Desktop\Skype.lnk
2014-01-11 00:36 - 2013-06-27 10:59 - 00000000 ____D C:\Program Files\firefox
2014-01-10 11:54 - 2014-01-10 11:54 - 00004096 ____H C:\Users\Terezka\AppData\Local\keyfile3.drm
2013-12-27 17:13 - 2013-12-27 17:13 - 00000000 ____D C:\Users\Terezka\Documents\CyberLink
2013-12-27 17:13 - 2013-12-27 17:13 - 00000000 ____D C:\Users\Terezka\AppData\Roaming\WebApp
2013-12-27 17:13 - 2013-12-27 17:13 - 00000000 ____D C:\Users\Terezka\AppData\Roaming\CyberLink
2013-12-27 17:13 - 2013-12-27 17:13 - 00000000 ____D C:\Users\Public\CyberLink
2013-12-23 16:33 - 2014-01-11 00:45 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2013-12-15 19:37 - 2013-12-15 19:37 - 00437392 _____ C:\windows\system32\FNTCACHE.DAT

==================== One Month Modified Files and Folders =======

2014-01-13 14:10 - 2014-01-13 14:10 - 00020922 _____ C:\Users\Terezka\Desktop\FRST.txt
2014-01-13 14:09 - 2014-01-13 14:09 - 00000000 ____D C:\FRST
2014-01-13 14:08 - 2014-01-13 14:08 - 02075648 _____ (Farbar) C:\Users\Terezka\Desktop\FRST64.exe
2014-01-13 14:08 - 2014-01-13 14:08 - 00112640 _____ (forum.viry.cz) C:\Users\Terezka\Desktop\FRSTLauncher.exe
2014-01-13 14:05 - 2012-10-07 11:26 - 01065912 _____ C:\windows\WindowsUpdate.log
2014-01-13 14:00 - 2012-07-26 09:12 - 00000000 ____D C:\windows\system32\sru
2014-01-13 13:44 - 2013-12-03 22:19 - 00000464 ____H C:\windows\Tasks\SK.Enhancer-S-161304646.job
2014-01-13 13:44 - 2012-07-26 08:22 - 00000006 ____H C:\windows\Tasks\SA.DAT
2014-01-13 13:43 - 2014-01-13 13:29 - 00000000 ____D C:\AdwCleaner
2014-01-13 13:43 - 2012-07-26 06:26 - 00524288 ___SH C:\windows\system32\config\BBI
2014-01-13 13:37 - 2013-04-16 05:55 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2014-01-13 13:37 - 2012-09-13 19:32 - 00474498 _____ C:\windows\PFRO.log
2014-01-13 13:31 - 2014-01-11 01:19 - 00000982 _____ C:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2815119995-1780246843-4195622244-1003UA.job
2014-01-13 13:29 - 2013-04-15 20:34 - 00000000 ____D C:\setup
2014-01-13 13:27 - 2014-01-13 13:27 - 01236282 _____ C:\Users\Terezka\Desktop\adwcleaner.exe
2014-01-13 13:27 - 2013-04-15 20:26 - 00000000 ____D C:\Users\Terezka\AppData\Local\CrashDumps
2014-01-13 12:46 - 2014-01-13 12:46 - 00000000 ____D C:\Users\Terezka\AppData\Roaming\Malwarebytes
2014-01-13 12:46 - 2014-01-13 12:46 - 00000000 ____D C:\ProgramData\Malwarebytes
2014-01-13 12:46 - 2014-01-13 12:46 - 00000000 ____D C:\Program Files (x86)\Malwarebytes' Anti-Malware
2014-01-13 12:37 - 2013-10-02 18:24 - 00000000 ____D C:\Users\Terezka\Documents\5.semestr
2014-01-12 14:16 - 2014-01-11 00:45 - 00000000 ____D C:\Users\Terezka\AppData\Roaming\Skype
2014-01-12 10:13 - 2012-10-07 12:07 - 00727488 _____ C:\windows\system32\perfh005.dat
2014-01-12 10:13 - 2012-10-07 12:07 - 00148006 _____ C:\windows\system32\perfc005.dat
2014-01-12 10:13 - 2012-07-26 08:28 - 01714430 _____ C:\windows\system32\PerfStringBackup.INI
2014-01-11 08:47 - 2012-07-26 09:12 - 00000000 ____D C:\windows\AUInstallAgent
2014-01-11 01:31 - 2014-01-11 01:19 - 00000930 _____ C:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2815119995-1780246843-4195622244-1003Core.job
2014-01-11 01:26 - 2014-01-11 01:19 - 00003932 _____ C:\windows\System32\Tasks\GoogleUpdateTaskUserS-1-5-21-2815119995-1780246843-4195622244-1003UA
2014-01-11 01:26 - 2014-01-11 01:19 - 00003552 _____ C:\windows\System32\Tasks\GoogleUpdateTaskUserS-1-5-21-2815119995-1780246843-4195622244-1003Core
2014-01-11 01:19 - 2014-01-11 01:19 - 00000000 ____D C:\Users\Terezka\AppData\Local\Google
2014-01-11 01:19 - 2013-04-16 05:56 - 00000000 ____D C:\Users\Terezka\AppData\Roaming\Mozilla
2014-01-11 00:45 - 2014-01-11 00:44 - 00000000 ___RD C:\Program Files (x86)\Skype
2014-01-11 00:45 - 2014-01-11 00:44 - 00000000 ____D C:\ProgramData\Skype
2014-01-11 00:45 - 2013-12-23 16:33 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2014-01-11 00:44 - 2014-01-11 00:44 - 00002731 _____ C:\Users\Public\Desktop\Skype.lnk
2014-01-10 11:54 - 2014-01-10 11:54 - 00004096 ____H C:\Users\Terezka\AppData\Local\keyfile3.drm
2014-01-05 01:01 - 2013-05-11 20:11 - 00000000 ____D C:\Users\Terezka\AppData\Roaming\uTorrent
2014-01-05 00:58 - 2013-05-18 08:34 - 00000000 ____D C:\Users\Terezka\AppData\Roaming\vlc
2013-12-29 13:36 - 2013-10-27 21:05 - 00000000 ____D C:\Users\Terezka\Documents\Moje přijaté soubory
2013-12-27 17:13 - 2013-12-27 17:13 - 00000000 ____D C:\Users\Terezka\Documents\CyberLink
2013-12-27 17:13 - 2013-12-27 17:13 - 00000000 ____D C:\Users\Terezka\AppData\Roaming\WebApp
2013-12-27 17:13 - 2013-12-27 17:13 - 00000000 ____D C:\Users\Terezka\AppData\Roaming\CyberLink
2013-12-27 17:13 - 2013-12-27 17:13 - 00000000 ____D C:\Users\Public\CyberLink
2013-12-27 17:13 - 2012-10-07 11:26 - 00000000 ____D C:\ProgramData\CyberLink
2013-12-24 09:56 - 2013-04-19 05:06 - 00000000 ____D C:\Users\Terezka\Desktop\mitolab práce
2013-12-15 19:37 - 2013-12-15 19:37 - 00437392 _____ C:\windows\system32\FNTCACHE.DAT
2013-12-15 11:56 - 2013-08-15 22:48 - 00000000 ____D C:\windows\system32\MRT
2013-12-15 09:59 - 2013-04-16 06:17 - 90708896 _____ (Microsoft Corporation) C:\windows\system32\MRT.exe
2013-12-14 23:08 - 2013-11-23 20:36 - 00000000 ____D C:\ProgramData\InstallMate

Some content of TEMP:
====================
C:\Users\Terezka\AppData\Local\Temp\fp_pl_pfs_installer.exe
C:\Users\Terezka\AppData\Local\Temp\ose00000.exe
C:\Users\Terezka\AppData\Local\Temp\{E638ABC1-0067-474b-A379-87CFE81E7848}.exe
C:\Users\Terezka\AppData\Local\Temp\~F52C.exe


==================== Bamital & volsnap Check =================

C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\rpcss.dll => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit


LastRegBack: 2013-12-28 11:59




===***===***===***=== Extract of Additional scan result of Farbar Recovery Scan Tool ===***===***===***===

==================== Drive and Memory info ===================

Drive c: (Windows8_OS) (Fixed) (Total:453.11 GB) (Free:350.54 GB) NTFS ==>[System with boot components (obtained from reading drive)]

Available physical RAM: 2098.42 MB
Total physical RAM: 3937.46 MB
Percentage of memory in use: 46%

==================== MBR and Partition Table ==================

Disk: 0 (Size: 466 GB) (Disk ID: 69677AFB)

==================== Scheduled Tasks (whitelisted) ==================

Task: C:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2815119995-1780246843-4195622244-1003Core.job => C:\Users\Terezka\AppData\Local\Google\Update\GoogleUpdate.exe
Task: C:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2815119995-1780246843-4195622244-1003UA.job => C:\Users\Terezka\AppData\Local\Google\Update\GoogleUpdate.exe
Task: C:\windows\Tasks\SK.Enhancer-S-161304646.job => c:\programdata\quickset\sk.enhancer\SK.Enhancer.exe <==== ATTENTION

==================== Alternate Data Streams (whitelisted) ==================


==================== Security Center ==================

AV: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}



===***===***===***=== Supplementary Scan createdy by FRSTLauncher ===***===***===***===
Posledni aktualizace FRSTLauncheru: 25_11_2013 (01)
Posledni aktualizace Modifikacniho skriptu: 30_09_2013 (01)


***** Velikost "Plochy" *****

Velikost slozky "C:\Users\Terezka\Desktop" je 244 MB.


***** Startup Programs *****


***** Firewall rules *****

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
EnableFirewall REG_DWORD 0x1
DisableNotifications REG_DWORD 0x0

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
EnableFirewall REG_DWORD 0x1
DisableNotifications REG_DWORD 0x0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\GloballyOpenPorts\List]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\GloballyOpenPorts\List]


***** System Restore *****

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SystemRestore]
"DisableSR"=dword:00000000
"Generalize_DisableSR"=dword:00000000


==================== End Of Log ==============================
Přílohy
Addition.rar
(5.16 KiB) Staženo 59 x
Nahoru
Avatar uživatele
vyosek
VIP
VIP
Příspěvky: 56365
Registrován: 07 Lis 2006 15:24
Místo/Bydliště: Šalingrad - Brno

Re: Awardhotspot reklamy

#6 Příspěvek od vyosek »

:arrow: Odinstalujte McAfee Security Scan

:arrow: Tvorba fixlistu pro FRST
  • Spustte poznamkovy blok (Start-spustit-notepad)
  • Zkopirujte skript nize

  • Kód: Vybrat vše

    Start
HKLM\...\Run: [] - [x]
HKLM-x32\...\Run: [GrooveMonitor] - C:\Program Files (x86)\Microsoft Office\Office12\GrooveMonitor.exe [31016 2006-10-27] (Microsoft Corporation)
HKLM-x32\...\Run: [Adobe ARM] - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [926896 2012-09-23] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [SunJavaUpdateSched] - C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [256384 2013-08-15] (Oracle Corporation)
HKLM-x32\...\Run: [APSDaemon] - C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [59720 2013-04-21] (Apple Inc.)
HKLM-x32\...\Run: [iTunesHelper] - C:\Program Files (x86)\iTunes\iTunesHelper.exe [152392 2013-08-16] (Apple Inc.)
HKCU\...\Run: [Seznam.chromeUpdatePref] - C:\Users\Terezka\AppData\Roaming\Seznam.cz\bin\chromeUpdatePref.exe remove
HKCU\...\Run: [Skype] - C:\Program Files (x86)\Skype\Phone\Skype.exe [20587168 2013-11-18] (Skype Technologies S.A.)
HKCU\...\Run: [Google Update] - C:\Users\Terezka\AppData\Local\Google\Update\GoogleUpdate.exe [116648 2014-01-11] (Google Inc.)
HKU\Default\...\RunOnce: [Lenovo.ShowBand] - C:\Program Files\Lenovo\SimpleTap DeskBand\ShowBand.exe [40360 2012-09-20] (Lenovo)
HKU\Default User\...\RunOnce: [Lenovo.ShowBand] - C:\Program Files\Lenovo\SimpleTap DeskBand\ShowBand.exe [40360 2012-09-20] (Lenovo)

ProxyEnable: Internet Explorer proxy is enabled.
ProxyServer: cache.natur.cuni.cz:3128
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.ncbi.nlm.nih.gov/pubmed/
HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://lenovo13-comm.msn.com
HKCU\Software\Microsoft\Internet Explorer\Main,Default_Secondary_Page_URL = http://www.lenovo.com/welcome/thinkpad
SearchScopes: HKLM - DefaultScope {421F62A5-6438-4372-BF97-6D20E0D2074C} URL = http://www.bing.com/search?q={searchTerms}&form=IE10TR&src=IE10TR&pc=MALCJS
SearchScopes: HKLM - {421F62A5-6438-4372-BF97-6D20E0D2074C} URL = http://www.bing.com/search?q={searchTerms}&form=IE10TR&src=IE10TR&pc=MALCJS
SearchScopes: HKLM-x32 - {421F62A5-6438-4372-BF97-6D20E0D2074C} URL = http://www.bing.com/search?q={searchTerms}&form=IE10TR&src=IE10TR&pc=MALCJS
SearchScopes: HKCU - {421F62A5-6438-4372-BF97-6D20E0D2074C} URL = 
BHO-x32: MSS+ Identifier - {0E8A89AD-95D7-40EB-8D9D-083EF7066A01} - C:\Program Files\McAfee Security Scan\3.8.130\McAfeeMSS_IE.dll (McAfee, Inc.)

FF DefaultSearchEngine: Centrum.cz
FF SelectedSearchEngine: Centrum.cz
FF Homepage: hxxp://google.com/
FF Keyword.URL: hxxp://search.centrum.cz/?charset=UTF-8 ... archbox&q=
FF NetworkProxy: "type", 0
FF Plugin-x32: @mcafee.com/McAfeeMssPlugin - C:\Program Files\McAfee Security Scan\3.8.130\npMcAfeeMss.dll (McAfee, Inc.)
FF Extension: surf aNd keep - C:\Users\Terezka\AppData\Roaming\Mozilla\Firefox\Profiles\p0l6vk48.default\Extensions\frnbuye@jtsv-.com [2013-11-23]
FF Extension: suurff anD keep - C:\Users\Terezka\AppData\Roaming\Mozilla\Firefox\Profiles\p0l6vk48.default\Extensions\iwtgwehzc@rzsaspbs.co.uk [2013-12-03]
FF Extension: surF aond kEoep - C:\Users\Terezka\AppData\Roaming\Mozilla\Firefox\Profiles\p0l6vk48.default\Extensions\oyitqrj2ngdxk@hiauy.co.uk [2013-11-30]

2014-01-13 14:08 - 2014-01-13 14:08 - 00112640 _____ (forum.viry.cz) C:\Users\Terezka\Desktop\FRSTLauncher.exe
2014-01-13 13:27 - 2014-01-13 13:27 - 01236282 _____ C:\Users\Terezka\Desktop\adwcleaner.exe
C:\ProgramData\QuickSet
C:\Program Files\McAfee Security Scan\
C:\Users\Terezka\AppData\Local\Temp\fp_pl_pfs_installer.exe
C:\Users\Terezka\AppData\Local\Temp\ose00000.exe
C:\Users\Terezka\AppData\Local\Temp\{E638ABC1-0067-474b-A379-87CFE81E7848}.exe
C:\Users\Terezka\AppData\Local\Temp\~F52C.exe

Task: C:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2815119995-1780246843-4195622244-1003Core.job => C:\Users\Terezka\AppData\Local\Google\Update\GoogleUpdate.exe
Task: C:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2815119995-1780246843-4195622244-1003UA.job => C:\Users\Terezka\AppData\Local\Google\Update\GoogleUpdate.exe
Task: C:\windows\Tasks\SK.Enhancer-S-161304646.job => c:\programdata\quickset\sk.enhancer\SK.Enhancer.exe <==== ATTENTION

Hosts:
CMD: shutdown /r /f /t 2

End
  • Ulozte vytvoreny TXT jako fixlist.txt
  • Presunte vytvoreny fixlist vedle FRST
:arrow: Spustte znovu FRST.exe
  • Kliknete na Fix
  • Probehne oprava a vytvori log Fixlog.txt
:arrow: Restart PC a dejte mi sem fixlog.txt
"Kdo víno má a nepije,kdo hrozny má a nejí je, kdo ženu má a nelíbá, kdo zábavě se vyhýbá, na toho vemte bič a hůl, to není člověk, to je vůl."
Člen Obrázek od 1. února 2011.
Nahoru
tuhyk
Návštěvník
Návštěvník
Příspěvky: 6
Registrován: 13 Led 2014 13:02

Re: Awardhotspot reklamy

#7 Příspěvek od tuhyk »

Fix result of Farbar Recovery Tool (FRST written by Farbar) (x64) Version: 13-01-2014 01
Ran by Terezka at 2014-01-13 15:49:23 Run:1
Running from C:\Users\Terezka\Desktop
Boot Mode: Normal
==============================================

Content of fixlist:
*****************
Start
HKLM\...\Run: [] - [x]
HKLM-x32\...\Run: [GrooveMonitor] - C:\Program Files (x86)\Microsoft Office\Office12\GrooveMonitor.exe [31016 2006-10-27] (Microsoft Corporation)
HKLM-x32\...\Run: [Adobe ARM] - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [926896 2012-09-23] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [SunJavaUpdateSched] - C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [256384 2013-08-15] (Oracle Corporation)
HKLM-x32\...\Run: [APSDaemon] - C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [59720 2013-04-21] (Apple Inc.)
HKLM-x32\...\Run: [iTunesHelper] - C:\Program Files (x86)\iTunes\iTunesHelper.exe [152392 2013-08-16] (Apple Inc.)
HKCU\...\Run: [Seznam.chromeUpdatePref] - C:\Users\Terezka\AppData\Roaming\Seznam.cz\bin\chromeUpdatePref.exe remove
HKCU\...\Run: [Skype] - C:\Program Files (x86)\Skype\Phone\Skype.exe [20587168 2013-11-18] (Skype Technologies S.A.)
HKCU\...\Run: [Google Update] - C:\Users\Terezka\AppData\Local\Google\Update\GoogleUpdate.exe [116648 2014-01-11] (Google Inc.)
HKU\Default\...\RunOnce: [Lenovo.ShowBand] - C:\Program Files\Lenovo\SimpleTap DeskBand\ShowBand.exe [40360 2012-09-20] (Lenovo)
HKU\Default User\...\RunOnce: [Lenovo.ShowBand] - C:\Program Files\Lenovo\SimpleTap DeskBand\ShowBand.exe [40360 2012-09-20] (Lenovo)

ProxyEnable: Internet Explorer proxy is enabled.
ProxyServer: cache.natur.cuni.cz:3128
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.ncbi.nlm.nih.gov/pubmed/
HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://lenovo13-comm.msn.com
HKCU\Software\Microsoft\Internet Explorer\Main,Default_Secondary_Page_URL = http://www.lenovo.com/welcome/thinkpad
SearchScopes: HKLM - DefaultScope {421F62A5-6438-4372-BF97-6D20E0D2074C} URL = http://www.bing.com/search?q={searchTer ... &pc=MALCJS
SearchScopes: HKLM - {421F62A5-6438-4372-BF97-6D20E0D2074C} URL = http://www.bing.com/search?q={searchTer ... &pc=MALCJS
SearchScopes: HKLM-x32 - {421F62A5-6438-4372-BF97-6D20E0D2074C} URL = http://www.bing.com/search?q={searchTer ... &pc=MALCJS
SearchScopes: HKCU - {421F62A5-6438-4372-BF97-6D20E0D2074C} URL =
BHO-x32: MSS+ Identifier - {0E8A89AD-95D7-40EB-8D9D-083EF7066A01} - C:\Program Files\McAfee Security Scan\3.8.130\McAfeeMSS_IE.dll (McAfee, Inc.)

FF DefaultSearchEngine: Centrum.cz
FF SelectedSearchEngine: Centrum.cz
FF Homepage: hxxp://google.com/
FF Keyword.URL: hxxp://search.centrum.cz/?charset=UTF-8 ... archbox&q=
FF NetworkProxy: "type", 0
FF Plugin-x32: @mcafee.com/McAfeeMssPlugin - C:\Program Files\McAfee Security Scan\3.8.130\npMcAfeeMss.dll (McAfee, Inc.)
FF Extension: surf aNd keep - C:\Users\Terezka\AppData\Roaming\Mozilla\Firefox\Profiles\p0l6vk48.default\Extensions\frnbuye@jtsv-.com [2013-11-23]
FF Extension: suurff anD keep - C:\Users\Terezka\AppData\Roaming\Mozilla\Firefox\Profiles\p0l6vk48.default\Extensions\iwtgwehzc@rzsaspbs.co.uk [2013-12-03]
FF Extension: surF aond kEoep - C:\Users\Terezka\AppData\Roaming\Mozilla\Firefox\Profiles\p0l6vk48.default\Extensions\oyitqrj2ngdxk@hiauy.co.uk [2013-11-30]

2014-01-13 14:08 - 2014-01-13 14:08 - 00112640 _____ (forum.viry.cz) C:\Users\Terezka\Desktop\FRSTLauncher.exe
2014-01-13 13:27 - 2014-01-13 13:27 - 01236282 _____ C:\Users\Terezka\Desktop\adwcleaner.exe
C:\ProgramData\QuickSet
C:\Program Files\McAfee Security Scan\
C:\Users\Terezka\AppData\Local\Temp\fp_pl_pfs_installer.exe
C:\Users\Terezka\AppData\Local\Temp\ose00000.exe
C:\Users\Terezka\AppData\Local\Temp\{E638ABC1-0067-474b-A379-87CFE81E7848}.exe
C:\Users\Terezka\AppData\Local\Temp\~F52C.exe

Task: C:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2815119995-1780246843-4195622244-1003Core.job => C:\Users\Terezka\AppData\Local\Google\Update\GoogleUpdate.exe
Task: C:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2815119995-1780246843-4195622244-1003UA.job => C:\Users\Terezka\AppData\Local\Google\Update\GoogleUpdate.exe
Task: C:\windows\Tasks\SK.Enhancer-S-161304646.job => c:\programdata\quickset\sk.enhancer\SK.Enhancer.exe <==== ATTENTION

Hosts:
CMD: shutdown /r /f /t 2

End
*****************

HKLM\Software\Microsoft\Windows\CurrentVersion\Run\\ => Value deleted successfully.
HKLM\Software\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\\GrooveMonitor => Value deleted successfully.
HKLM\Software\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\\Adobe ARM => Value deleted successfully.
HKLM\Software\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\\SunJavaUpdateSched => Value deleted successfully.
HKLM\Software\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\\APSDaemon => Value deleted successfully.
HKLM\Software\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\\iTunesHelper => Value deleted successfully.
HKCU\Software\Microsoft\Windows\CurrentVersion\Run\\Seznam.chromeUpdatePref => Value deleted successfully.
HKCU\Software\Microsoft\Windows\CurrentVersion\Run\\Skype => Value deleted successfully.
HKCU\Software\Microsoft\Windows\CurrentVersion\Run\\Google Update => Value deleted successfully.
HKU\Default\Software\Microsoft\Windows\CurrentVersion\RunOnce\\Lenovo.ShowBand => Value deleted successfully.
HKU\Default User\Software\Microsoft\Windows\CurrentVersion\RunOnce\\Lenovo.ShowBand => Value not found.
HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\\ProxyEnable => Value deleted successfully.
HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\\ProxyServer => Value deleted successfully.
HKCU\Software\Microsoft\Internet Explorer\Main\\Start Page => Value was restored successfully.
HKCU\Software\Microsoft\Internet Explorer\Main\\Default_Page_URL => Value was restored successfully.
HKCU\Software\Microsoft\Internet Explorer\Main\\Default_Secondary_Page_URL => Value deleted successfully.
HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope => Value was restored successfully.
HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{421F62A5-6438-4372-BF97-6D20E0D2074C} => Key deleted successfully.
HKCR\CLSID\{421F62A5-6438-4372-BF97-6D20E0D2074C} => Key not found.
HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\SearchScopes\{421F62A5-6438-4372-BF97-6D20E0D2074C} => Key deleted successfully.
HKCR\Wow6432Node\CLSID\{421F62A5-6438-4372-BF97-6D20E0D2074C} => Key not found.
HKCU\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{421F62A5-6438-4372-BF97-6D20E0D2074C} => Key deleted successfully.
HKCR\CLSID\{421F62A5-6438-4372-BF97-6D20E0D2074C} => Key not found.
HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{0E8A89AD-95D7-40EB-8D9D-083EF7066A01} => Key not found.
HKCR\Wow6432Node\CLSID\{0E8A89AD-95D7-40EB-8D9D-083EF7066A01} => Key not found.
Firefox DefaultSearchEngine deleted successfully.
Firefox SelectedSearchEngine deleted successfully.
Firefox homepage deleted successfully.
Firefox Keyword.URL deleted successfully.
Firefox Proxy settings were reset.
HKLM\Software\Wow6432Node\MozillaPlugins\@mcafee.com/McAfeeMssPlugin => Key not found.
C:\Program Files\McAfee Security Scan\3.8.130\npMcAfeeMss.dll not found.
C:\Users\Terezka\AppData\Roaming\Mozilla\Firefox\Profiles\p0l6vk48.default\Extensions\frnbuye@jtsv-.com => Moved successfully.
C:\Users\Terezka\AppData\Roaming\Mozilla\Firefox\Profiles\p0l6vk48.default\Extensions\iwtgwehzc@rzsaspbs.co.uk => Moved successfully.
C:\Users\Terezka\AppData\Roaming\Mozilla\Firefox\Profiles\p0l6vk48.default\Extensions\oyitqrj2ngdxk@hiauy.co.uk => Moved successfully.
C:\Users\Terezka\Desktop\FRSTLauncher.exe => Moved successfully.
C:\Users\Terezka\Desktop\adwcleaner.exe => Moved successfully.
"C:\ProgramData\QuickSet" => File/Directory not found.

"C:\Program Files\McAfee Security Scan\" directory move:

C:\Program Files\McAfee Security Scan\3.8.130\McAfeeMSS_IE.dll => Moved successfully.
"C:\Program Files\McAfee Security Scan\" => Directory moved successfully.

C:\Users\Terezka\AppData\Local\Temp\fp_pl_pfs_installer.exe => Moved successfully.
C:\Users\Terezka\AppData\Local\Temp\ose00000.exe => Moved successfully.
C:\Users\Terezka\AppData\Local\Temp\{E638ABC1-0067-474b-A379-87CFE81E7848}.exe => Moved successfully.
C:\Users\Terezka\AppData\Local\Temp\~F52C.exe => Moved successfully.
C:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2815119995-1780246843-4195622244-1003Core.job => Moved successfully.
C:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2815119995-1780246843-4195622244-1003UA.job => Moved successfully.
C:\windows\Tasks\SK.Enhancer-S-161304646.job => Moved successfully.
C:\Windows\System32\Drivers\etc\hosts => Moved successfully.
Hosts was reset successfully.

========= shutdown /r /f /t 2 =========


========= End of CMD: =========



The system needs a manual reboot.

==== End of Fixlog ====
Nahoru
Avatar uživatele
vyosek
VIP
VIP
Příspěvky: 56365
Registrován: 07 Lis 2006 15:24
Místo/Bydliště: Šalingrad - Brno

Re: Awardhotspot reklamy

#8 Příspěvek od vyosek »

:arrow: T-Cleaner http://vyosek.tym.cz/pro_usery/T-Cleaner.exe
  • Stahnete a spustte
  • Pro potvrzeni volby mackejte A, Enter
  • Po pouziti utilitu smazte
  • Antiviry touhou utilitu chybne oznacit jako vir - jedna se o falesny poplach - takze v pohode stahnete (pripadne vypnete pri stahovani antivir)
:arrow: OTC http://oldtimer.geekstogo.com/OTC.exe
  • Stahnete a spustte
  • Kliknete na CleanUp a potvrdte YES
  • Program uklidi a restartuje PC

:arrow: TFC http://oldtimer.geekstogo.com/TFC.exe
  • Stahnete a spustte
  • Kliknete na Start a potvrdte OK
  • Program uklidi a restartuje pc
  • Po pouziti utilitu smazte
:arrow: Stahnete Ccleaner http://forum.viry.cz/viewtopic.php?t=7478
Panel čistič
  • Vse nechte jak je, jen dejte Analyzovat a pote Spustit CCleaner
Panel registry
  • dejte Hledej problémy
  • nasledne Opravit problémy - zalohu registru doporucuji udelat, opravte vsechny problemy
  • postup opakujte dokud nebude bez problemu - vetsinou cca 3x
Panel nástroje
  • Zde muzete odinstalovat nepotrebne programy
CCleaner doporucuji pouzivat cca jednou za tyden

:arrow: V MBAMu udelejte uplnou\kompletni kontrolu, log pak opet sem
"Kdo víno má a nepije,kdo hrozny má a nejí je, kdo ženu má a nelíbá, kdo zábavě se vyhýbá, na toho vemte bič a hůl, to není člověk, to je vůl."
Člen Obrázek od 1. února 2011.
Nahoru
tuhyk
Návštěvník
Návštěvník
Příspěvky: 6
Registrován: 13 Led 2014 13:02

Re: Awardhotspot reklamy

#9 Příspěvek od tuhyk »

Malwarebytes Anti-Malware (Zkušební verze Malwarebytes Anti-Malware.) 1.75.0.1300
www.malwarebytes.org

Verze: v2014.01.13.03

Windows 8 x64 NTFS
Internet Explorer 10.0.9200.16750
Terezka :: TERKA [administrátor]

Ochrana: Povolena

13. 1. 2014 16:16:36
MBAM-log-2014-01-13 (17-06-51).txt

Typ: Kompletní kontrola (C:\|)
Nastavení kontroly povoleno: Paměť | Po spuštění | Registr | Systémové soubory | Heuristická analýza Extra | Heuristická analýza Shuriken | PUP | PUM
Nastavení kontroly zakázáno: P2P
Kontrolované objekty: 418908
Uplynulý čas: 48 minut, 35 sekund

Nalezené procesy v paměti: 0
(Žádné škodlivé položky nebyly zjištěny)

Nalezené moduly v paměti: 0
(Žádné škodlivé položky nebyly zjištěny)

Nalezené klíče v registru: 0
(Žádné škodlivé položky nebyly zjištěny)

Nalezené hodnoty v registru: 0
(Žádné škodlivé položky nebyly zjištěny)

Nalezené datové položky v registru: 0
(Žádné škodlivé položky nebyly zjištěny)

Nalezené složky: 0
(Žádné škodlivé položky nebyly zjištěny)

Nalezené soubory: 1
C:\setup\winamp563_full_emusic-7plus_all.exe (PUP.Optional.OpenCandy) -> Nebyla provedena žádná instrukce.

(konec)
Nahoru
Avatar uživatele
vyosek
VIP
VIP
Příspěvky: 56365
Registrován: 07 Lis 2006 15:24
Místo/Bydliště: Šalingrad - Brno

Re: Awardhotspot reklamy

#10 Příspěvek od vyosek »

:arrow: Nalez mazat nemusite

:arrow: Jak se chova PC??
"Kdo víno má a nepije,kdo hrozny má a nejí je, kdo ženu má a nelíbá, kdo zábavě se vyhýbá, na toho vemte bič a hůl, to není člověk, to je vůl."
Člen Obrázek od 1. února 2011.
Nahoru
tuhyk
Návštěvník
Návštěvník
Příspěvky: 6
Registrován: 13 Led 2014 13:02

Re: Awardhotspot reklamy

#11 Příspěvek od tuhyk »

Vypadá to, že jsem se zbavila vyskakovacích oken, bílých pruhů v záhlaví web stránek i těch zelených odkazů awardhot spot:) Díky moc!! :thumbsup:
Nahoru
Avatar uživatele
vyosek
VIP
VIP
Příspěvky: 56365
Registrován: 07 Lis 2006 15:24
Místo/Bydliště: Šalingrad - Brno

Re: Awardhotspot reklamy

#12 Příspěvek od vyosek »

Nemate zac, rad jsem pomohl :worship: Zase nekdy Obrázek

A na zaklade Pravidla o zamykani temat :lock:
"Kdo víno má a nepije,kdo hrozny má a nejí je, kdo ženu má a nelíbá, kdo zábavě se vyhýbá, na toho vemte bič a hůl, to není člověk, to je vůl."
Člen Obrázek od 1. února 2011.
Nahoru
Zamčeno

Vrátit se na „Řešení problémů, logy“