Odvirování PC, zrychlení počítače, vzdálená pomoc prostřednictvím služby neslape.cz

Awardhotspot reklamy

Máte problém s virem? Vložte sem log z FRST nebo RSIT.

Moderátor: Moderátoři

Pravidla fóra
Pokud chcete pomoc, vložte log z FRST [návod zde] nebo RSIT [návod zde]

Jednotlivé thready budou po vyřešení uzamčeny. Stejně tak ty, které budou nečinné déle než 14 dní. Vizte Pravidlo o zamykání témat. Děkujeme za pochopení.

!NOVINKA!
Nově lze využívat služby vzdálené pomoci, kdy se k vašemu počítači připojí odborník a bližší informace o problému si od vás získá telefonicky! Více na www.neslape.cz
Zamčeno
Zpráva
Autor
tuhyk
Návštěvník
Návštěvník
Příspěvky: 6
Registrován: 13 led 2014 13:02

Awardhotspot reklamy

#1 Příspěvek od tuhyk »

Dobrý den, mám stejný problém, jako je řešen tady: http://forum.viry.cz/viewtopic.php?f=13&t=134332. Díky za rady :)

můj log je: alwarebytes Anti-Malware (Zkušební verze Malwarebytes Anti-Malware.) 1.75.0.1300
www.malwarebytes.org

Verze: v2014.01.13.03

Windows 8 x64 NTFS
Internet Explorer 10.0.9200.16750
Terezka :: TERKA [administrátor]

Ochrana: Povolena

13. 1. 2014 12:48:21
MBAM-log-2014-01-13 (12-59-48).txt

Typ: Rychlá kontrola
Nastavení kontroly povoleno: Paměť | Po spuštění | Registr | Systémové soubory | Heuristická analýza Extra | Heuristická analýza Shuriken | PUP | PUM
Nastavení kontroly zakázáno: P2P
Kontrolované objekty: 240652
Uplynulý čas: 8 minut, 10 sekund

Nalezené procesy v paměti: 1
C:\ProgramData\QuickSet\SK.Enhancer\SK.Enhancer.exe (PUP.Optional.MultiPlug.A) -> 9440 -> Nebyla provedena žádná instrukce.

Nalezené moduly v paměti: 0
(Žádné škodlivé položky nebyly zjištěny)

Nalezené klíče v registru: 2
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\S-161304646 (PUP.Optional.MultiPlug.A) -> Nebyla provedena žádná instrukce.
HKCU\Software\Conduit\FF (PUP.Optional.Conduit.A) -> Nebyla provedena žádná instrukce.

Nalezené hodnoty v registru: 0
(Žádné škodlivé položky nebyly zjištěny)

Nalezené datové položky v registru: 0
(Žádné škodlivé položky nebyly zjištěny)

Nalezené složky: 4
C:\Users\Terezka\AppData\Local\Temp\CT3289075 (PUP.Optional.Conduit.A) -> Nebyla provedena žádná instrukce.
C:\Users\Terezka\AppData\Local\Temp\CT3289075\xpi (PUP.Optional.Conduit.A) -> Nebyla provedena žádná instrukce.
C:\Users\Terezka\AppData\Local\Temp\CT3289075\xpi\defaults (PUP.Optional.Conduit.A) -> Nebyla provedena žádná instrukce.
C:\Users\Terezka\AppData\Local\Temp\CT3289075\xpi\defaults\preferences (PUP.Optional.Conduit.A) -> Nebyla provedena žádná instrukce.

Nalezené soubory: 19
C:\ProgramData\QuickSet\SK.Enhancer\SK.Enhancer.exe (PUP.Optional.MultiPlug.A) -> Nebyla provedena žádná instrukce.
C:\$Recycle.Bin\S-1-5-21-2815119995-1780246843-4195622244-1003\$RASHT9E.exe (PUP.Optional.OneClickDownloader.A) -> Nebyla provedena žádná instrukce.
C:\$Recycle.Bin\S-1-5-21-2815119995-1780246843-4195622244-1003\$RDX3RSD.exe (PUP.Optional.InstalleRex) -> Nebyla provedena žádná instrukce.
C:\$Recycle.Bin\S-1-5-21-2815119995-1780246843-4195622244-1003\$REK1JWL.exe (PUP.Optional.InstalleRex) -> Nebyla provedena žádná instrukce.
C:\$Recycle.Bin\S-1-5-21-2815119995-1780246843-4195622244-1003\$RGBLHZA.exe (PUP.Optional.InstalleRex) -> Nebyla provedena žádná instrukce.
C:\$Recycle.Bin\S-1-5-21-2815119995-1780246843-4195622244-1003\$RHD5TIR.exe (PUP.Optional.InstalleRex) -> Nebyla provedena žádná instrukce.
C:\$Recycle.Bin\S-1-5-21-2815119995-1780246843-4195622244-1003\$RQ25NIS.exe (PUP.Optional.InstalleRex) -> Nebyla provedena žádná instrukce.
C:\$Recycle.Bin\S-1-5-21-2815119995-1780246843-4195622244-1003\$RV4EGRD.exe (PUP.Optional.InstalleRex) -> Nebyla provedena žádná instrukce.
C:\$Recycle.Bin\S-1-5-21-2815119995-1780246843-4195622244-1003\$RW0ZYPK.exe (PUP.Optional.InstalleRex) -> Nebyla provedena žádná instrukce.
C:\Users\Terezka\AppData\Local\Temp\ckupiWPx.exe.part (PUP.BundleInstaller.DW) -> Nebyla provedena žádná instrukce.
C:\Users\Terezka\AppData\Local\Temp\IB8fOKez.exe.part (PUP.BundleInstaller.DW) -> Nebyla provedena žádná instrukce.
C:\Users\Terezka\AppData\Local\Temp\oPWkkOxb.exe.part (PUP.Optional.OpenCandy) -> Nebyla provedena žádná instrukce.
C:\Users\Terezka\Local Settings\Temporary Internet Files\Content.IE5\2CVOZEAF\agent2[1].exe (PUP.Optional.MultiPlug.A) -> Nebyla provedena žádná instrukce.
C:\Users\Terezka\Local Settings\Temporary Internet Files\Content.IE5\2CVOZEAF\psupport_install[1].exe (PUP.Optional.SProtect.A) -> Nebyla provedena žádná instrukce.
C:\Users\Terezka\AppData\Local\Temp\CT3289075\conduit.xml (PUP.Optional.Conduit.A) -> Nebyla provedena žádná instrukce.
C:\Users\Terezka\AppData\Local\Temp\CT3289075\CT3289075.xpi (PUP.Optional.Conduit.A) -> Nebyla provedena žádná instrukce.
C:\Users\Terezka\AppData\Local\Temp\CT3289075\version.txt (PUP.Optional.Conduit.A) -> Nebyla provedena žádná instrukce.
C:\Users\Terezka\AppData\Local\Temp\CT3289075\xpi\install.rdf (PUP.Optional.Conduit.A) -> Nebyla provedena žádná instrukce.
C:\Users\Terezka\AppData\Local\Temp\CT3289075\xpi\defaults\preferences\defaults.js (PUP.Optional.Conduit.A) -> Nebyla provedena žádná instrukce.

(konec)
Nahoru
Uživatelský avatar
vyosek
VIP
VIP
Příspěvky: 56373
Registrován: 07 lis 2006 15:24
Bydliště: Šalingrad - Brno

Re: Awardhotspot reklamy

#2 Příspěvek od vyosek »

Zdravim, pekne odpoledne preji a vitam vas u nas na foru :welcome:

:arrow: Nalezy MBAMu smazte, objevi se log, ten rad uvidim

:arrow: Stahnete AdwCleaner http://general-changelog-team.fr/fr/dow ... adwcleaner
  • Ulozte nejlepe na plochu
  • Ukoncete vsechny programy
  • Kliknete na Scan a nasledne Clean
  • Probehne oprava, restart PC a pak se objevi log, pripadne bude ulozen ve slozce c:\AdwCleaner\AdwCleaner[S?].txt, ten sem vlozte
"Kdo víno má a nepije,kdo hrozny má a nejí je, kdo ženu má a nelíbá, kdo zábavě se vyhýbá, na toho vemte bič a hůl, to není člověk, to je vůl."
Člen Obrázek od 1. února 2011.
Nahoru
tuhyk
Návštěvník
Návštěvník
Příspěvky: 6
Registrován: 13 led 2014 13:02

Re: Awardhotspot reklamy

#3 Příspěvek od tuhyk »

log po smazání v MBAMu:
Malwarebytes Anti-Malware (Zkušební verze Malwarebytes Anti-Malware.) 1.75.0.1300
www.malwarebytes.org

Verze: v2014.01.13.03

Windows 8 x64 NTFS
Internet Explorer 10.0.9200.16750
Terezka :: TERKA [administrátor]

Ochrana: Povolena

13. 1. 2014 13:27:27
mbam-log-2014-01-13 (13-27-27).txt

Typ: Rychlá kontrola
Nastavení kontroly povoleno: Paměť | Po spuštění | Registr | Systémové soubory | Heuristická analýza Extra | Heuristická analýza Shuriken | PUP | PUM
Nastavení kontroly zakázáno: P2P
Kontrolované objekty: 240515
Uplynulý čas: 6 minut, 7 sekund

Nalezené procesy v paměti: 1
C:\ProgramData\QuickSet\SK.Enhancer\SK.Enhancer.exe (PUP.Optional.MultiPlug.A) -> 9440 -> Bude smazán při restartu.

Nalezené moduly v paměti: 0
(Žádné škodlivé položky nebyly zjištěny)

Nalezené klíče v registru: 2
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\S-161304646 (PUP.Optional.MultiPlug.A) -> Přesun do karantény a smazání se zdařilo.
HKCU\Software\Conduit\FF (PUP.Optional.Conduit.A) -> Přesun do karantény a smazání se zdařilo.

Nalezené hodnoty v registru: 0
(Žádné škodlivé položky nebyly zjištěny)

Nalezené datové položky v registru: 0
(Žádné škodlivé položky nebyly zjištěny)

Nalezené složky: 4
C:\Users\Terezka\AppData\Local\Temp\CT3289075 (PUP.Optional.Conduit.A) -> Přesun do karantény a smazání se zdařilo.
C:\Users\Terezka\AppData\Local\Temp\CT3289075\xpi (PUP.Optional.Conduit.A) -> Přesun do karantény a smazání se zdařilo.
C:\Users\Terezka\AppData\Local\Temp\CT3289075\xpi\defaults (PUP.Optional.Conduit.A) -> Přesun do karantény a smazání se zdařilo.
C:\Users\Terezka\AppData\Local\Temp\CT3289075\xpi\defaults\preferences (PUP.Optional.Conduit.A) -> Přesun do karantény a smazání se zdařilo.

Nalezené soubory: 19
C:\ProgramData\QuickSet\SK.Enhancer\SK.Enhancer.exe (PUP.Optional.MultiPlug.A) -> Bude smazán při restartu.
C:\$Recycle.Bin\S-1-5-21-2815119995-1780246843-4195622244-1003\$RASHT9E.exe (PUP.Optional.OneClickDownloader.A) -> Přesun do karantény a smazání se zdařilo.
C:\$Recycle.Bin\S-1-5-21-2815119995-1780246843-4195622244-1003\$RDX3RSD.exe (PUP.Optional.InstalleRex) -> Přesun do karantény a smazání se zdařilo.
C:\$Recycle.Bin\S-1-5-21-2815119995-1780246843-4195622244-1003\$REK1JWL.exe (PUP.Optional.InstalleRex) -> Přesun do karantény a smazání se zdařilo.
C:\$Recycle.Bin\S-1-5-21-2815119995-1780246843-4195622244-1003\$RGBLHZA.exe (PUP.Optional.InstalleRex) -> Přesun do karantény a smazání se zdařilo.
C:\$Recycle.Bin\S-1-5-21-2815119995-1780246843-4195622244-1003\$RHD5TIR.exe (PUP.Optional.InstalleRex) -> Přesun do karantény a smazání se zdařilo.
C:\$Recycle.Bin\S-1-5-21-2815119995-1780246843-4195622244-1003\$RQ25NIS.exe (PUP.Optional.InstalleRex) -> Přesun do karantény a smazání se zdařilo.
C:\$Recycle.Bin\S-1-5-21-2815119995-1780246843-4195622244-1003\$RV4EGRD.exe (PUP.Optional.InstalleRex) -> Přesun do karantény a smazání se zdařilo.
C:\$Recycle.Bin\S-1-5-21-2815119995-1780246843-4195622244-1003\$RW0ZYPK.exe (PUP.Optional.InstalleRex) -> Přesun do karantény a smazání se zdařilo.
C:\Users\Terezka\AppData\Local\Temp\ckupiWPx.exe.part (PUP.BundleInstaller.DW) -> Přesun do karantény a smazání se zdařilo.
C:\Users\Terezka\AppData\Local\Temp\IB8fOKez.exe.part (PUP.BundleInstaller.DW) -> Bude smazán při restartu.
C:\Users\Terezka\AppData\Local\Temp\oPWkkOxb.exe.part (PUP.Optional.OpenCandy) -> Přesun do karantény a smazání se zdařilo.
C:\Users\Terezka\Local Settings\Temporary Internet Files\Content.IE5\2CVOZEAF\agent2[1].exe (PUP.Optional.MultiPlug.A) -> Přesun do karantény a smazání se zdařilo.
C:\Users\Terezka\Local Settings\Temporary Internet Files\Content.IE5\2CVOZEAF\psupport_install[1].exe (PUP.Optional.SProtect.A) -> Přesun do karantény a smazání se zdařilo.
C:\Users\Terezka\AppData\Local\Temp\CT3289075\conduit.xml (PUP.Optional.Conduit.A) -> Přesun do karantény a smazání se zdařilo.
C:\Users\Terezka\AppData\Local\Temp\CT3289075\CT3289075.xpi (PUP.Optional.Conduit.A) -> Přesun do karantény a smazání se zdařilo.
C:\Users\Terezka\AppData\Local\Temp\CT3289075\version.txt (PUP.Optional.Conduit.A) -> Přesun do karantény a smazání se zdařilo.
C:\Users\Terezka\AppData\Local\Temp\CT3289075\xpi\install.rdf (PUP.Optional.Conduit.A) -> Přesun do karantény a smazání se zdařilo.
C:\Users\Terezka\AppData\Local\Temp\CT3289075\xpi\defaults\preferences\defaults.js (PUP.Optional.Conduit.A) -> Přesun do karantény a smazání se zdařilo.

(konec)

po ADW cleaner:
AdwCleaner v3.017 - Report created 13/01/2014 at 13:42:57
# Updated 12/01/2014 by Xplode
# Operating System : Windows 8 (64 bits)
# Username : Terezka - TERKA
# Running from : C:\Users\Terezka\Desktop\adwcleaner.exe
# Option : Clean

***** [ Services ] *****


***** [ Files / Folders ] *****

Folder Deleted : C:\ProgramData\QuickSet
Folder Deleted : C:\Users\Terezka\AppData\Roaming\Mozilla\Firefox\Profiles\p0l6vk48.default\Extensions\toolbar@ask.com

***** [ Shortcuts ] *****


***** [ Registry ] *****

Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\CLSID\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{17B10E59-09E1-4C39-A738-6774D7AB7778}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{1AD2049E-E483-4425-8555-8E0775ACB631}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{23119123-0854-469D-807A-171568457991}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{2D73F2D0-2FAB-458E-977D-2F9050E0ED60}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{2D9083CE-8758-4704-BA57-3C891D7452BD}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{3E9469AF-E866-4476-B767-810630F1F6E7}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{47700C35-9E3E-4DAD-934C-0CE28A87237C}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{72063D77-7590-4DA9-A7F8-F5ECAF3632C4}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{7FC87AC5-FA93-476E-A32C-A941229DED0B}
Key Deleted : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}
Key Deleted : HKCU\Software\Conduit
Key Deleted : HKCU\Software\AppDataLow\Software\SmartBar
Key Deleted : HKLM\Software\Conduit

***** [ Browsers ] *****

-\\ Internet Explorer v10.0.9200.16537


-\\ Mozilla Firefox v26.0 (cs)

[ File : C:\Users\Terezka\AppData\Roaming\Mozilla\Firefox\Profiles\p0l6vk48.default\prefs.js ]

Line Deleted : user_pref("CT3220468.BT_Stats.enc", "eyJsYXN0X2xvZyI6MTM2NDU3NjYxNiwidXVpZCI6NDkzMTY1MjA0NzE4Nzk5LCJzZXFfaWQiOjIsInNzYiI6MTM2NDQxNzYwMH0=");
Line Deleted : user_pref("CT3220468.ENABALE_HISTORY", "{\"dataType\":\"string\",\"data\":\"true\"}");
Line Deleted : user_pref("CT3220468.ENABLE_RETURN_WEB_SEARCH_ON_THE_PAGE", "{\"dataType\":\"string\",\"data\":\"true\"}");
Line Deleted : user_pref("CT3220468.FirstTime", "true");
Line Deleted : user_pref("CT3220468.FirstTimeFF3", "true");
Line Deleted : user_pref("CT3220468.LoginRevertSettingsEnabled", true);
Line Deleted : user_pref("CT3220468.PG_ENABLE", "dHJ1ZQ==");
Line Deleted : user_pref("CT3220468.PG_ENABLE.enc", "dHJ1ZQ==");
Line Deleted : user_pref("CT3220468.RevertSettingsEnabled", true);
Line Deleted : user_pref("CT3220468.SearchFromAddressBarUrl", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT3220468&SearchSource=2&q=");
Line Deleted : user_pref("CT3220468.UserID", "UN79846323234224651");
Line Deleted : user_pref("CT3220468.addressBarTakeOverEnabledInHidden", "true");
Line Deleted : user_pref("CT3220468.browser.search.defaultthis.engineName", true);
Line Deleted : user_pref("CT3220468.embeddedsData", "[{\"appId\":\"129813684258939747\",\"apiPermissions\":{\"crossDomainAjax\":true,\"getMainFrameTitle\":true,\"getMainFrameUrl\":true,\"getSearchTerm\":true,\"insta[...]
Line Deleted : user_pref("CT3220468.enableAlerts", "always");
Line Deleted : user_pref("CT3220468.enableFix404ByUser", "FALSE");
Line Deleted : user_pref("CT3220468.firstTimeDialogOpened", "true");
Line Deleted : user_pref("CT3220468.fixPageNotFoundErrorByUser", "TRUE");
Line Deleted : user_pref("CT3220468.fixPageNotFoundErrorInHidden", "true");
Line Deleted : user_pref("CT3220468.fixUrls", true);
Line Deleted : user_pref("CT3220468.installType", "Unknown");
Line Deleted : user_pref("CT3220468.isCheckedStartAsHidden", true);
Line Deleted : user_pref("CT3220468.isEnableAllDialogs", "{\"dataType\":\"string\",\"data\":\"true\"}");
Line Deleted : user_pref("CT3220468.isFirstTimeToolbarLoading", "false");
Line Deleted : user_pref("CT3220468.isNewTabEnabled", false);
Line Deleted : user_pref("CT3220468.isPerformedSmartBarTransition", "true");
Line Deleted : user_pref("CT3220468.isToolbarShrinked", "{\"dataType\":\"string\",\"data\":\"false\"}");
Line Deleted : user_pref("CT3220468.isWelcomPage", "{\"dataType\":\"boolean\",\"data\":\"true\"}");
Line Deleted : user_pref("CT3220468.keyword", true);
Line Deleted : user_pref("CT3220468.lastVersion", "10.15.0.562");
Line Deleted : user_pref("CT3220468.mam_gk_appStateReportTime.enc", "MTM2NDYzODg2MDE1Ng==");
Line Deleted : user_pref("CT3220468.mam_gk_appState_CouponBuddy.enc", "b24=");
Line Deleted : user_pref("CT3220468.mam_gk_appState_PriceGong.enc", "b24=");
Line Deleted : user_pref("CT3220468.mam_gk_appsData.enc", "eyJhcHBzIjpbeyJpZCI6IlByaWNlR29uZyIsInVybCI6Imh0dHA6Ly9wcmljZWdvbmcuY29uZHVpdGFwcHMuY29tL01BTS92MS9odG1sX2NvbXAuaHRtbCIsIm9wdGlvbnNEaWFsb2ciOnsiZGlzcGxheU5h[...]
Line Deleted : user_pref("CT3220468.mam_gk_appsDefaultEnabled.enc", "bnVsbA==");
Line Deleted : user_pref("CT3220468.mam_gk_configuration.enc", "eyJjb25maWd1cmF0aW9uIjpbeyJpZCI6IkNvdXBvbkJ1ZGR5IiwiY3JpdGVyaWFzIjpbeyJjcml0ZXJpYUlkIjoiNmNjN2Q4MzUtMTQwNS00NTZhLThhNTYtNGM1ZjRjN2NiYmFhIiwiZG9tYWlucyI[...]
Line Deleted : user_pref("CT3220468.mam_gk_currentVersion.enc", "MS40LjQuNg==");
Line Deleted : user_pref("CT3220468.mam_gk_eventsCache.enc", "eyI2Zjg1ZTgzOC02MTJmLTQyMDItOTdmMy00N2QwMTMwZDI3YTEiOnsidG9waWMiOiJzZW5kVXNhZ2UiLCJkYXRhIjp7ImNhdGVnb3J5IjoiV2VsY29tZSIsImFjdGlvbiI6IlZpZXcifSwidW5pcXVlS[...]
Line Deleted : user_pref("CT3220468.mam_gk_first_time.enc", "MQ==");
Line Deleted : user_pref("CT3220468.mam_gk_gadgetOpen.enc", "MA==");
Line Deleted : user_pref("CT3220468.mam_gk_lastLoginTime.enc", "MTM2NDYzODg2MDE1OA==");
Line Deleted : user_pref("CT3220468.mam_gk_localization.enc", "eyJnYWRnZXRDb250ZW50UG9saWN5Ijp7IlRleHQiOiJDb250ZW50IFBvbGljeSJ9LCJnYWRnZXREZXNjcmlwdGlvblByaW1hcnkiOnsiVGV4dCI6IlZhbHVlIEFwcHMgZW5yaWNoZXMgeW91ciB3ZWIg[...]
Line Deleted : user_pref("CT3220468.mam_gk_pgUnloadedOnce.enc", "dHJ1ZQ==");
Line Deleted : user_pref("CT3220468.mam_gk_settings1.4.4.6.enc", "eyJTdGF0dXMiOiJzdWNjZWVkZWQiLCJEYXRhIjp7ImludGVydmFsIjoyNDAsInN0YW1wIjoiMTk1XzAiLCJpc1Rlc3QiOnRydWUsImlzV2VsY29tZUV4cGVyaWVuY2VFbmFibGVkQnlEZWZhdWx0I[...]
Line Deleted : user_pref("CT3220468.mam_gk_showCloseButton.enc", "dHJ1ZQ==");
Line Deleted : user_pref("CT3220468.mam_gk_showWelcomeGadget.enc", "ZmFsc2U=");
Line Deleted : user_pref("CT3220468.mam_gk_userId.enc", "YWQ1YzFmYmYtMzBkOC00YTU4LWE5ZWMtNWIwOTkzODRjMjlj");
Line Deleted : user_pref("CT3220468.migrateAppsAndComponents", true);
Line Deleted : user_pref("CT3220468.navigationAliasesJson", "{\"EB_SEARCH_TERM\":\"\",\"EB_MAIN_FRAME_URL\":\"\",\"EB_MAIN_FRAME_TITLE\":\"\",\"EB_TOOLBAR_SUB_DOMAIN\":\"hxxp://uTorrentControlv2.OurToolbar.com/\",\"[...]
Line Deleted : user_pref("CT3220468.price-gong.isManagedApp", "true");
Line Deleted : user_pref("CT3220468.search.searchAppId", "129813684258939747");
Line Deleted : user_pref("CT3220468.search.searchCount", "0");
Line Deleted : user_pref("CT3220468.searchInNewTabEnabled", "false");
Line Deleted : user_pref("CT3220468.searchInNewTabEnabledByUser", "false");
Line Deleted : user_pref("CT3220468.searchInNewTabEnabledInHidden", "true");
Line Deleted : user_pref("CT3220468.selectToSearchBoxEnabled", "{\"dataType\":\"string\",\"data\":\"true\"}");
Line Deleted : user_pref("CT3220468.serviceLayer_service_login_isFirstLoginInvoked", "{\"dataType\":\"boolean\",\"data\":\"true\"}");
Line Deleted : user_pref("CT3220468.serviceLayer_service_login_loginCount", "{\"dataType\":\"number\",\"data\":\"4\"}");
Line Deleted : user_pref("CT3220468.serviceLayer_service_toolbarGrouping_activeCTID", "{\"dataType\":\"string\",\"data\":\"CT3220468\"}");
Line Deleted : user_pref("CT3220468.serviceLayer_service_toolbarGrouping_activeDownloadUrl", "{\"dataType\":\"string\",\"data\":\"hxxp://uTorrentControlv2.OurToolbar.com//xpi\"}");
Line Deleted : user_pref("CT3220468.serviceLayer_service_toolbarGrouping_activeToolbarName", "{\"dataType\":\"string\",\"data\":\"uTorrentControl_v2\"}");
Line Deleted : user_pref("CT3220468.serviceLayer_service_toolbarGrouping_invoked", "{\"dataType\":\"string\",\"data\":\"true\"}");
Line Deleted : user_pref("CT3220468.serviceLayer_services_appTrackingFirstTime_lastUpdate", "1364484149974");
Line Deleted : user_pref("CT3220468.serviceLayer_services_appsMetadata_lastUpdate", "1364501452182");
Line Deleted : user_pref("CT3220468.serviceLayer_services_gottenAppsContextMenu_lastUpdate", "1364484149794");
Line Deleted : user_pref("CT3220468.serviceLayer_services_location_lastUpdate", "1364501565961");
Line Deleted : user_pref("CT3220468.serviceLayer_services_login_10.13.40.15_lastUpdate", "1358404600820");
Line Deleted : user_pref("CT3220468.serviceLayer_services_login_10.14.370.524_lastUpdate", "1364407230842");
Line Deleted : user_pref("CT3220468.serviceLayer_services_login_10.14.40.128_lastUpdate", "1359708824140");
Line Deleted : user_pref("CT3220468.serviceLayer_services_login_10.14.42.7_lastUpdate", "1361050088939");
Line Deleted : user_pref("CT3220468.serviceLayer_services_login_10.14.65.43_lastUpdate", "1363182489861");
Line Deleted : user_pref("CT3220468.serviceLayer_services_login_10.15.0.562_lastUpdate", "1364484149525");
Line Deleted : user_pref("CT3220468.serviceLayer_services_otherAppsContextMenu_lastUpdate", "1364484149872");
Line Deleted : user_pref("CT3220468.serviceLayer_services_searchAPI_lastUpdate", "1364484149967");
Line Deleted : user_pref("CT3220468.serviceLayer_services_serviceMap_lastUpdate", "1364501565781");
Line Deleted : user_pref("CT3220468.serviceLayer_services_toolbarContextMenu_lastUpdate", "1364484149701");
Line Deleted : user_pref("CT3220468.serviceLayer_services_toolbarSettings_lastUpdate", "1364501451864");
Line Deleted : user_pref("CT3220468.serviceLayer_services_translation_lastUpdate", "1364501568485");
Line Deleted : user_pref("CT3220468.settingsINI", true);
Line Deleted : user_pref("CT3220468.showToolbarPermission", "false");
Line Deleted : user_pref("CT3220468.smartbar.CTID", "CT3220468");
Line Deleted : user_pref("CT3220468.smartbar.Uninstall", "0");
Line Deleted : user_pref("CT3220468.smartbar.toolbarName", "uTorrentControl_v2 ");
Line Deleted : user_pref("CT3220468.toolbarBornServerTime", "14-9-2012");
Line Deleted : user_pref("CT3220468.toolbarCurrentServerTime", "28-3-2013");
Line Deleted : user_pref("CT3220468.toolbarLoginClientTime", "Wed Mar 13 2013 15:20:39 GMT+0100");
Line Deleted : user_pref("CT3220468.url_history0001.enc", "aHR0cDovL3d3dy5mYWNlYm9vay5jb20vP3JlZj10bl90bm1uOjo6Y2xpY2toYW5kbGVyOjo6MTM2NDU3Njc2MDExNywsLGh0dHA6Ly93d3cuZmFjZWJvb2suY29tLyM6OjpjbGlja2hhbmRsZXI6OjoxMzY0[...]
Line Deleted : user_pref("CT3220468_Firefox.csv", "[{\"from\":\"Abs Layer\",\"action\":\"loading toolbar\",\"time\":1364638848766,\"isWithState\":\"\",\"timeFromStart\":0,\"timeFromPrev\":0}]");
Line Deleted : user_pref("CT3289075_Firefox.csv", "[{\"from\":\"Abs Layer\",\"action\":\"loading toolbar\",\"time\":1368353189696,\"isWithState\":\"\",\"timeFromStart\":0,\"timeFromPrev\":0}]");
Line Deleted : user_pref("Smartbar.ConduitSearchEngineList", "");
Line Deleted : user_pref("Smartbar.ConduitSearchUrlList", "");
Line Deleted : user_pref("Smartbar.keywordURLSelectedCTID", "CT3220468");
Line Deleted : user_pref("browser.search.defaultengine", "Ask.com");
Line Deleted : user_pref("browser.search.order.1", "Ask.com");
Line Deleted : user_pref("extensions.SKp5CjA.scode", "(function(){try{if(window.self.location.hostname.indexOf(\"acebook.co\")>-1){return};}catch(e){};if(window.self.location.protocol.indexOf('hxxp')>-1 && window.se[...]
Line Deleted : user_pref("extensions.asktb.ff-original-keyword-url", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT3220468&SearchSource=2&q=");
Line Deleted : user_pref("extensions.mywebsearch.prevDefaultEngine", "Ask.com");
Line Deleted : user_pref("extensions.mywebsearch.prevKwdEnabled", true);
Line Deleted : user_pref("extensions.mywebsearch.prevKwdURL", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT3220468&SearchSource=2&CUI=UN79846323234224651&UM=UM_ID&q=");
Line Deleted : user_pref("extensions.mywebsearch.prevSelectedEngine", "Google");
Line Deleted : user_pref("extensions.tfFdHQqOZTqE.scode", "(function(){try{if(window.self.location.hostname.indexOf(\"acebook.co\")>-1){return};}catch(e){};if(window.self.location.protocol.indexOf('hxxp')>-1 && wind[...]
Line Deleted : user_pref("extensions.toolbar.mindspark._4zMembers_.homepage", "hxxp://home.mywebsearch.com/index.jhtml?ptb=67290390-2F69-4DF6-AB47-BE43161FDEAA&n=77fc67a5&p2=^HJ^xdm073^YY^cz&si=pconverter");
Line Deleted : user_pref("extensions.toolbar.mindspark._4zMembers_.hp.enabled", true);
Line Deleted : user_pref("extensions.toolbar.mindspark._4zMembers_.hp.lastGuardTime", -1445083690);
Line Deleted : user_pref("extensions.toolbar.mindspark._4zMembers_.hp.numGuards", 1);
Line Deleted : user_pref("extensions.toolbar.mindspark._4zMembers_.initialized", true);
Line Deleted : user_pref("extensions.toolbar.mindspark._4zMembers_.installation.contextKey", "");
Line Deleted : user_pref("extensions.toolbar.mindspark._4zMembers_.installation.installDate", "2013030309");
Line Deleted : user_pref("extensions.toolbar.mindspark._4zMembers_.installation.partnerId", "^HJ^xdm073^YY^cz");
Line Deleted : user_pref("extensions.toolbar.mindspark._4zMembers_.installation.partnerSubId", "pconverter");
Line Deleted : user_pref("extensions.toolbar.mindspark._4zMembers_.installation.success", true);
Line Deleted : user_pref("extensions.toolbar.mindspark._4zMembers_.installation.toolbarId", "67290390-2F69-4DF6-AB47-BE43161FDEAA");
Line Deleted : user_pref("extensions.toolbar.mindspark._4zMembers_.lastActivePing", "1368705637071");
Line Deleted : user_pref("extensions.toolbar.mindspark._4zMembers_.options.defaultSearch", true);
Line Deleted : user_pref("extensions.toolbar.mindspark._4zMembers_.options.homePageEnabled", true);
Line Deleted : user_pref("extensions.toolbar.mindspark._4zMembers_.options.keywordEnabled", true);
Line Deleted : user_pref("extensions.toolbar.mindspark._4zMembers_.options.tabEnabled", true);
Line Deleted : user_pref("extensions.toolbar.mindspark._4zMembers_.searchHistory", "ftp.biomed.cas.cz");
Line Deleted : user_pref("extensions.toolbar.mindspark._4zMembers_.weather.location", "10001");
Line Deleted : user_pref("extensions.toolbar.mindspark.hp.enabled", true);
Line Deleted : user_pref("extensions.toolbar.mindspark.hp.enabled.guid", "videodownloadconverter@mindspark.com");
Line Deleted : user_pref("extensions.toolbar.mindspark.lastInstalled", "videodownloadconverter@mindspark.com");
Line Deleted : user_pref("extensions.uxoPD.scode", "(function(){try{if(window.self.location.hostname.indexOf(\"acebook.co\")>-1){return};}catch(e){};if(window.self.location.protocol.indexOf('hxxp')>-1 && window.self[...]
Line Deleted : user_pref("smartbar.machineId", "R0PFRZFGT598QKA7FY00AG4ATBNT8KJDI0FBWDXK0IWDVKAVEA7ITSIRLQT7IYEJFERANP2GUNNMKGIKER/FFQ");

[ File : C:\Users\Adam\AppData\Roaming\Mozilla\Firefox\Profiles\975bo2b5.default\prefs.js ]


*************************

AdwCleaner[R0].txt - [15411 octets] - [13/01/2014 13:29:56]
AdwCleaner[R1].txt - [15472 octets] - [13/01/2014 13:40:51]
AdwCleaner[S0].txt - [15593 octets] - [13/01/2014 13:42:57]

########## EOF - C:\AdwCleaner\AdwCleaner[S0].txt - [15654 octets] ##########
Nahoru
Uživatelský avatar
vyosek
VIP
VIP
Příspěvky: 56373
Registrován: 07 lis 2006 15:24
Bydliště: Šalingrad - Brno

Re: Awardhotspot reklamy

#4 Příspěvek od vyosek »

Poprosim o log dle tohoto navodu http://forum.viry.cz/viewtopic.php?f=13&t=133100
"Kdo víno má a nepije,kdo hrozny má a nejí je, kdo ženu má a nelíbá, kdo zábavě se vyhýbá, na toho vemte bič a hůl, to není člověk, to je vůl."
Člen Obrázek od 1. února 2011.
Nahoru
tuhyk
Návštěvník
Návštěvník
Příspěvky: 6
Registrován: 13 led 2014 13:02

Re: Awardhotspot reklamy

#5 Příspěvek od tuhyk »

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 13-01-2014 01
Ran by Terezka (administrator) on TERKA on 13-01-2014 14:10:23
Running from C:\Users\Terezka\Desktop
Windows 8 (X64) OS Language: Czech
Internet Explorer Version 10
Boot Mode: Normal

==================== Processes (Whitelisted) =================

(AuthenTec, Inc) C:\Program Files\Lenovo Fingerprint Reader\TrueSuiteService.exe
(Lenovo.) C:\Windows\System32\ibmpmsvc.exe
(IvoSoft) C:\Program Files\Classic Shell\ClassicShellService.exe
(Microsoft Corporation) C:\Windows\System32\wlanext.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(Conexant Systems Inc.) C:\Windows\System32\CxAudMsg64.exe
(Intel(R) Corporation) C:\Program Files\Intel\WiFi\bin\EvtEng.exe
(Microsoft Corporation) C:\Windows\System32\dasHost.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe
(Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\Jhi_service.exe
(LENOVO INCORPORATED.) C:\Program Files\Lenovo\SystemAgent\SystemAgentService.exe
(Lenovo Group Limited) C:\Program Files\Lenovo\Communications Utility\CamMute.exe
(Lenovo Group Limited) C:\Program Files\Lenovo\Communications Utility\TPKNRSVC.exe
(Lenovo Corporation) C:\Program Files\Lenovo\Communications Utility\vcamsvc.exe
(Lenovo Group Limited) C:\Program Files\Lenovo\VIRTSCRL\lvvsst.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe
(Lenovo) C:\Program Files (x86)\ThinkPad\Utilities\PWMDBSVC.exe
(AuthenTec Inc.) C:\Program Files\Lenovo Fingerprint Reader\TouchControl.exe
(IvoSoft) C:\Program Files\Classic Shell\ClassicStartMenu.exe
(Intel(R) Corporation) C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe
(Lenovo Group Limited) C:\Program Files\Lenovo\VIRTSCRL\virtscrl.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
(Conexant Systems, Inc.) C:\Windows\SysWOW64\SASrv.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe
(Skype Technologies S.A.) C:\ProgramData\Skype\Toolbars\Skype C2C Service\c2c_service.exe
(Microsoft Corporation) C:\Program Files\Windows Defender\MsMpEng.exe
(Intel® Corporation) C:\Program Files\Intel\WiFi\bin\ZeroConfigService.exe
(Lenovo Group Limited) C:\Program Files\Lenovo\HOTKEY\micmute.exe
(Lenovo Group Limited) C:\Program Files\Lenovo\HOTKEY\tphkload.exe
(Lenovo Group Limited) C:\Program Files\Lenovo\HOTKEY\tpnumlkd.exe
(Lenovo Group Limited) C:\Program Files\Lenovo\HOTKEY\mkrmsg.exe
(Lenovo Group Limited) C:\Program Files\Lenovo\HOTKEY\tposd.exe
(Lenovo Group Limited) C:\Program Files\Lenovo\HOTKEY\shtctky.exe
(AuthenTec, Inc.) C:\Program Files\Common Files\AuthenTec\TrueService.exe
(AuthenTec, Inc.) C:\Program Files\Common Files\AuthenTec\TrueService.exe
(Microsoft Corporation) C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16.4.4206.722_x64__8wekyb3d8bbwe\LiveComm.exe
(CyberLink Corp.) C:\Program Files (x86)\CyberLink\PowerDVD10\PDVD10Serv.exe
(Intel Corporation) C:\Windows\System32\hkcmd.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
(CyberLink) C:\Program Files (x86)\CyberLink\Power2Go\CLMLSvc.exe
(Conexant Systems, Inc.) C:\Program Files\CONEXANT\cAudioFilterAgent\CAudioFilterAgent64.exe
() C:\Program Files\CONEXANT\ForteConfig\fmapp.exe
(Lenovo.) C:\Windows\System32\TpShocks.exe
(Lenovo) C:\Program Files\Lenovo\Lenovo Mobile Hotspot\MobileHotspotclient.exe
(Dolby Laboratories Inc.) C:\Program Files (x86)\Dolby Advanced Audio v2\pcee4.exe
(Lenovo Corporation) C:\Program Files\Lenovo\Communications Utility\TpKnrres.exe
(Motorola Solutions, Inc.) C:\Program Files (x86)\Intel\Bluetooth\devmonsrv.exe
(Motorola Solutions, Inc.) C:\Program Files (x86)\Intel\Bluetooth\obexsrv.exe
(Skype Technologies S.A.) C:\Program Files (x86)\Skype\Phone\Skype.exe
(McAfee, Inc.) C:\Program Files\McAfee Security Scan\3.8.130\SSScheduler.exe
(Ricoh co.,Ltd.) C:\Program Files (x86)\Integrated Camera Driver\X64\RCIMGDIR.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(Apple Inc.) C:\Program Files (x86)\iTunes\iTunesHelper.exe
(Lenovo Corporation) C:\Program Files\Lenovo\Communications Utility\vcamsvchlpr.exe
(Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPLpr.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
() C:\Program Files\Lenovo Fingerprint Reader\x86\IEWebSiteLogon.exe
(Intel Corporation) C:\Program Files\Intel\BluetoothHS\BTHSAmpPalService.exe
(Intel(R) Corporation) C:\Program Files\Intel\BluetoothHS\BTHSSecurityMgr.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Lenovo) C:\Program Files\Lenovo\Lenovo Mobile Hotspot\LnvHotSpotSvc.exe
() C:\Program Files (x86)\Lenovo\LocationAware\loctaskmgr.exe
() C:\Program Files (x86)\Lenovo\LocationAware\lpdagent.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
(Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_11_7_700_224.exe
(Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_11_7_700_224.exe
(forum.viry.cz) C:\Users\Terezka\Desktop\FRSTLauncher.exe


==================== Registry (Whitelisted) ==================

HKLM\...\Run: [BTMTrayAgent] - C:\Program Files (x86)\Intel\Bluetooth\btmshell.dll [11554688 2012-08-08] (Motorola Solutions, Inc.)
HKLM\...\Run: [SmartAudio] - C:\Program Files\CONEXANT\SAII\SACpl.exe [1647616 2012-06-13] (Conexant Systems, Inc.)
HKLM\...\Run: [cAudioFilterAgent] - C:\Program Files\Conexant\cAudioFilterAgent\cAudioFilterAgent64.exe [887968 2012-06-15] (Conexant Systems, Inc.)
HKLM\...\Run: [ForteConfig] - C:\Program Files\Conexant\ForteConfig\fmapp.exe [49056 2010-10-26] ()
HKLM\...\Run: [TpShocks] - C:\Windows\system32\TpShocks.exe [222720 2012-08-24] (Lenovo.)
HKLM\...\Run: [] - [x]
HKLM\...\Run: [LnvMobHotspotClient] - C:\Program Files\Lenovo\Lenovo Mobile Hotspot\MobileHotspotclient.exe [1010784 2012-08-20] (Lenovo)
HKLM\...\Run: [LENOVO.TPKNRRES] - C:\Program Files\Lenovo\Communications Utility\TPKNRRES.exe [564320 2012-08-13] (Lenovo Corporation)
HKLM-x32\...\Run: [IMSS] - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IMSS\PIconStartup.exe [133440 2012-07-19] (Intel Corporation)
HKLM-x32\...\Run: [RotateImage] - C:\Program Files (x86)\Integrated Camera Driver\X64\RCIMGDIR.exe [59392 2012-05-03] (Ricoh co.,Ltd.)
HKLM-x32\...\Run: [GrooveMonitor] - C:\Program Files (x86)\Microsoft Office\Office12\GrooveMonitor.exe [31016 2006-10-27] (Microsoft Corporation)
HKLM-x32\...\Run: [Adobe ARM] - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [926896 2012-09-23] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [SunJavaUpdateSched] - C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [256384 2013-08-15] (Oracle Corporation)
HKLM-x32\...\Run: [APSDaemon] - C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [59720 2013-04-21] (Apple Inc.)
HKLM-x32\...\Run: [iTunesHelper] - C:\Program Files (x86)\iTunes\iTunesHelper.exe [152392 2013-08-16] (Apple Inc.)
Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation)
HKCU\...\Run: [Seznam.chromeUpdatePref] - C:\Users\Terezka\AppData\Roaming\Seznam.cz\bin\chromeUpdatePref.exe remove
HKCU\...\Run: [Skype] - C:\Program Files (x86)\Skype\Phone\Skype.exe [20587168 2013-11-18] (Skype Technologies S.A.)
HKCU\...\Run: [Google Update] - C:\Users\Terezka\AppData\Local\Google\Update\GoogleUpdate.exe [116648 2014-01-11] (Google Inc.)
HKU\Default\...\RunOnce: [Lenovo.ShowBand] - C:\Program Files\Lenovo\SimpleTap DeskBand\ShowBand.exe [40360 2012-09-20] (Lenovo)
HKU\Default User\...\RunOnce: [Lenovo.ShowBand] - C:\Program Files\Lenovo\SimpleTap DeskBand\ShowBand.exe [40360 2012-09-20] (Lenovo)

==================== Internet (Whitelisted) ====================

ProxyEnable: Internet Explorer proxy is enabled.
ProxyServer: cache.natur.cuni.cz:3128
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.ncbi.nlm.nih.gov/pubmed/
HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://lenovo13-comm.msn.com
HKCU\Software\Microsoft\Internet Explorer\Main,Default_Secondary_Page_URL = http://www.lenovo.com/welcome/thinkpad
SearchScopes: HKLM - DefaultScope {421F62A5-6438-4372-BF97-6D20E0D2074C} URL = http://www.bing.com/search?q={searchTer ... &pc=MALCJS
SearchScopes: HKLM - {421F62A5-6438-4372-BF97-6D20E0D2074C} URL = http://www.bing.com/search?q={searchTer ... &pc=MALCJS
SearchScopes: HKLM-x32 - {421F62A5-6438-4372-BF97-6D20E0D2074C} URL = http://www.bing.com/search?q={searchTer ... &pc=MALCJS
SearchScopes: HKCU - {421F62A5-6438-4372-BF97-6D20E0D2074C} URL =
BHO: ExplorerBHO Class - {449D0D6E-2412-4E61-B68F-1CB625CD9E52} - C:\Program Files\Classic Shell\ClassicExplorer64.dll (IvoSoft)
BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre8\bin\ssv.dll (Oracle Corporation)
BHO: TrueSuite Browser Helper Object - {8590886E-EC8C-43C1-A32C-E4C2B0B6395B} - C:\Program Files\Lenovo Fingerprint Reader\IEBHO.DLL (AuthenTec Inc.)
BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre8\bin\jp2ssv.dll (Oracle Corporation)
BHO: ClassicIE9BHO Class - {EA801577-E6AD-4BD5-8F71-4BE0154331A4} - C:\Program Files\Classic Shell\ClassicIE9DLL_64.dll (IvoSoft)
BHO-x32: MSS+ Identifier - {0E8A89AD-95D7-40EB-8D9D-083EF7066A01} - C:\Program Files\McAfee Security Scan\3.8.130\McAfeeMSS_IE.dll (McAfee, Inc.)
BHO-x32: Adobe PDF Link Helper - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll (Adobe Systems Incorporated)
BHO-x32: ExplorerBHO Class - {449D0D6E-2412-4E61-B68F-1CB625CD9E52} - C:\Program Files\Classic Shell\ClassicExplorer32.dll (IvoSoft)
BHO-x32: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files (x86)\Microsoft Office\Office12\GrooveShellExtensions.dll (Microsoft Corporation)
BHO-x32: TrueSuite Browser Helper Object - {8590886E-EC8C-43C1-A32C-E4C2B0B6395B} - C:\Program Files\Lenovo Fingerprint Reader\x86\IEBHO.dll (AuthenTec Inc.)
BHO-x32: ClassicIE9BHO Class - {EA801577-E6AD-4BD5-8F71-4BE0154331A4} - C:\Program Files\Classic Shell\ClassicIE9DLL_32.dll (IvoSoft)
Toolbar: HKLM - Classic Explorer Bar - {553891B7-A0D5-4526-BE18-D3CE461D6310} - C:\Program Files\Classic Shell\ClassicExplorer64.dll (IvoSoft)
Toolbar: HKLM-x32 - Classic Explorer Bar - {553891B7-A0D5-4526-BE18-D3CE461D6310} - C:\Program Files\Classic Shell\ClassicExplorer32.dll (IvoSoft)
DPF: HKLM-x32 {4FF78044-96B4-4312-A5B7-FDA3CB328095}
Handler: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll (Skype Technologies S.A.)
Handler-x32: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Tcpip\Parameters: [DhcpNameServer] 10.0.0.138

FireFox:
========
FF ProfilePath: C:\Users\Terezka\AppData\Roaming\Mozilla\Firefox\Profiles\p0l6vk48.default
FF DefaultSearchEngine: Centrum.cz
FF SelectedSearchEngine: Centrum.cz
FF Homepage: hxxp://google.com/
FF Keyword.URL: hxxp://search.centrum.cz/?charset=UTF-8&channel_id=ch-toolbar-ff,ch-toolbar-ff-searchbox&utm_source=ch-toolbar&utm_medium=ff-centrum-cz&utm_content=toolbar-searchbox&q=
FF NetworkProxy: "type", 0
FF Plugin: @adobe.com/FlashPlayer - C:\windows\system32\Macromed\Flash\NPSWF64_11_7_700_224.dll ()
FF Plugin: @java.com/DTPlugin,version=11.0.2 - C:\windows\system32\npDeployJava1.dll (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=11.0.2 - C:\Program Files\Java\jre8\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer - C:\windows\SysWOW64\Macromed\Flash\NPSWF32_11_7_700_224.dll ()
FF Plugin-x32: @Apple.com/iTunes,version=1.0 - C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll ()
FF Plugin-x32: @authentec.com/ffwloplugin - C:\Program Files\Lenovo Fingerprint Reader\npffwloplugin.dll (AuthenTec, Inc)
FF Plugin-x32: @exent.com/npExentControl,version=7.1.0.1 - C:\Program Files (x86)\FreeRide Games\npExentControl.dll (Exent Technologies Ltd.)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=2.1.42 - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll (Intel Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll (Intel Corporation)
FF Plugin-x32: @mcafee.com/McAfeeMssPlugin - C:\Program Files\McAfee Security Scan\3.8.130\npMcAfeeMss.dll (McAfee, Inc.)
FF Plugin-x32: @videolan.org/vlc,version=2.0.6 - C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin HKCU: @talk.google.com/GoogleTalkPlugin - C:\Users\Terezka\AppData\Roaming\Mozilla\plugins\npgoogletalk.dll (Google)
FF Plugin HKCU: @talk.google.com/O1DPlugin - C:\Users\Terezka\AppData\Roaming\Mozilla\plugins\npo1d.dll (Google)
FF Plugin HKCU: @talk.google.com/O3DPlugin - C:\Users\Terezka\AppData\Roaming\Mozilla\plugins\npgtpo3dautoplugin.dll ()
FF Plugin HKCU: @tools.google.com/Google Update;version=3 - C:\Users\Terezka\AppData\Local\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.)
FF Plugin HKCU: @tools.google.com/Google Update;version=9 - C:\Users\Terezka\AppData\Local\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\NPOFF12.DLL (Microsoft Corporation)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\nppdf32.dll (Adobe Systems Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npwachk.dll (Nullsoft, Inc.)
FF Plugin ProgramFiles/Appdata: C:\Users\Terezka\AppData\Roaming\mozilla\plugins\npgoogletalk.dll (Google)
FF Plugin ProgramFiles/Appdata: C:\Users\Terezka\AppData\Roaming\mozilla\plugins\npgtpo3dautoplugin.dll ()
FF Plugin ProgramFiles/Appdata: C:\Users\Terezka\AppData\Roaming\mozilla\plugins\npo1d.dll (Google)
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\heureka-cz.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\jyxo-cz.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\seznam-cz.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\slunecnice-cz.xml
FF Extension: surf aNd keep - C:\Users\Terezka\AppData\Roaming\Mozilla\Firefox\Profiles\p0l6vk48.default\Extensions\frnbuye@jtsv-.com [2013-11-23]
FF Extension: suurff anD keep - C:\Users\Terezka\AppData\Roaming\Mozilla\Firefox\Profiles\p0l6vk48.default\Extensions\iwtgwehzc@rzsaspbs.co.uk [2013-12-03]
FF Extension: Bloglovin' - C:\Users\Terezka\AppData\Roaming\Mozilla\Firefox\Profiles\p0l6vk48.default\Extensions\jid1-JrxwyxPdCKWWcw@jetpack [2013-05-12]
FF Extension: surF aond kEoep - C:\Users\Terezka\AppData\Roaming\Mozilla\Firefox\Profiles\p0l6vk48.default\Extensions\oyitqrj2ngdxk@hiauy.co.uk [2013-11-30]
FF Extension: Lišta Centrum.cz - C:\Users\Terezka\AppData\Roaming\Mozilla\Firefox\Profiles\p0l6vk48.default\Extensions\toolbar@centrumholdings.com [2014-01-12]
FF Extension: Zotero Word for Windows Integration - C:\Users\Terezka\AppData\Roaming\Mozilla\Firefox\Profiles\p0l6vk48.default\Extensions\zoteroWinWordIntegration@zotero.org [2013-12-15]
FF Extension: Zotero - C:\Users\Terezka\AppData\Roaming\Mozilla\Firefox\Profiles\p0l6vk48.default\Extensions\zotero@chnm.gmu.edu.xpi [2013-10-15]
FF Extension: All-in-One Sidebar - C:\Users\Terezka\AppData\Roaming\Mozilla\Firefox\Profiles\p0l6vk48.default\Extensions\{097d3191-e6fa-4728-9826-b533d755359d}.xpi [2013-05-18]
FF Extension: Adblock Plus - C:\Users\Terezka\AppData\Roaming\Mozilla\Firefox\Profiles\p0l6vk48.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2013-08-19]
FF Extension: Skype Click to Call - C:\Program Files (x86)\Mozilla Firefox\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A} [2014-01-11]
FF Extension: Skype Click to Call - C:\Program Files (x86)\Mozilla Firefox\browser\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A} [2014-01-11]
FF StartMenuInternet: FIREFOX.EXE - C:\Program Files (x86)\Mozilla Firefox EN\firefox.exe

==================== Services (Whitelisted) =================

U2 ClassicShellService; C:\Program Files\Classic Shell\ClassicShellService.exe [68608 2013-06-29] (IvoSoft)
U2 FPLService; C:\Program Files\Lenovo Fingerprint Reader\TrueSuiteService.exe [2139496 2012-08-31] (AuthenTec, Inc)
U2 Intel(R) ME Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe [129856 2012-07-05] (Intel Corporation)
U2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [166720 2012-07-05] (Intel Corporation)
U2 Lenovo System Agent Service; C:\Program Files\lenovo\SystemAgent\SystemAgentService.exe [559504 2012-08-16] (LENOVO INCORPORATED.)
U2 LENOVO.TVTVCAM; C:\Program Files\Lenovo\Communications Utility\vcamsvc.exe [222304 2012-08-13] (Lenovo Corporation)
U2 Lenovo.VIRTSCRLSVC; C:\Program Files\LENOVO\VIRTSCRL\lvvsst.exe [136288 2012-08-11] (Lenovo Group Limited)
U2 LnvHotSpotSvc; C:\Program Files\Lenovo\Lenovo Mobile Hotspot\LnvHotSpotSvc.exe [457824 2012-08-20] (Lenovo)
U2 LocationTaskManager; C:\Program Files (x86)\Lenovo\LocationAware\loctaskmgr.exe [458336 2012-08-15] ()
U2 MBAMScheduler; C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe [418376 2013-04-04] (Malwarebytes Corporation)
U2 MBAMService; C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe [701512 2013-04-04] (Malwarebytes Corporation)
U3 McComponentHostService; C:\Program Files\McAfee Security Scan\3.8.130\McCHSvc.exe [288776 2013-09-06] (McAfee, Inc.)
U3 MyWiFiDHCPDNS; C:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe [273136 2013-08-28] ()
U3 SUService; C:\Program Files (x86)\Lenovo\System Update\SUService.exe [21928 2012-08-16] ()
U3 TrueService; C:\Program Files\Common Files\AuthenTec\TrueService.exe [401256 2012-07-16] (AuthenTec, Inc.)
U2 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [16048 2013-07-02] (Microsoft Corporation)
U2 ZeroConfigService; C:\Program Files\Intel\WiFi\bin\ZeroConfigService.exe [3378416 2013-08-28] (Intel® Corporation)

==================== Drivers (Whitelisted) ====================

U3 BthLEEnum; C:\Windows\system32\DRIVERS\BthLEEnum.sys [202752 2012-07-26] (Microsoft Corporation)
U3 MBAMProtector; C:\windows\system32\drivers\mbam.sys [25928 2013-04-04] (Malwarebytes Corporation)
U3 NETwNe64; C:\Windows\system32\DRIVERS\NETwew00.sys [3345376 2013-10-08] (Intel Corporation)
U3 RCUVCAVS; C:\Windows\system32\DRIVERS\RCUVCAVS.sys [149632 2012-08-02] (Ricoh co.,Ltd.)
U3 RSP2STOR; C:\Windows\system32\DRIVERS\RtsP2Stor.sys [266896 2012-06-13] (Realtek Semiconductor Corp.)
U3 SmbDrvI; C:\Windows\system32\DRIVERS\Smb_driver_Intel.sys [43832 2012-08-05] (Synaptics Incorporated)
U3 SWIX64; C:\Program Files (x86)\Lenovo\System Update\tvsuhd64.sys [33856 2011-06-16] (Lenovo Group Limited)
U3 usb3Hub; C:\Windows\System32\drivers\usb3Hub.sys [48096 2012-08-10] (Windows (R) Win 7 DDK provider)
U2 X5XSEx_Pr148; C:\Program Files (x86)\FreeRide Games\X5XSEx_Pr148.Sys [56136 2012-08-02] (Exent Technologies Ltd.)
U3 XHCIPort; C:\Windows\System32\drivers\XHCIPort.sys [188384 2012-08-10] (Windows (R) Win 7 DDK provider)

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2014-01-13 14:10 - 2014-01-13 14:10 - 00020922 _____ C:\Users\Terezka\Desktop\FRST.txt
2014-01-13 14:09 - 2014-01-13 14:09 - 00000000 ____D C:\FRST
2014-01-13 14:08 - 2014-01-13 14:08 - 02075648 _____ (Farbar) C:\Users\Terezka\Desktop\FRST64.exe
2014-01-13 14:08 - 2014-01-13 14:08 - 00112640 _____ (forum.viry.cz) C:\Users\Terezka\Desktop\FRSTLauncher.exe
2014-01-13 13:29 - 2014-01-13 13:43 - 00000000 ____D C:\AdwCleaner
2014-01-13 13:27 - 2014-01-13 13:27 - 01236282 _____ C:\Users\Terezka\Desktop\adwcleaner.exe
2014-01-13 12:46 - 2014-01-13 12:46 - 00000000 ____D C:\Users\Terezka\AppData\Roaming\Malwarebytes
2014-01-13 12:46 - 2014-01-13 12:46 - 00000000 ____D C:\ProgramData\Malwarebytes
2014-01-13 12:46 - 2014-01-13 12:46 - 00000000 ____D C:\Program Files (x86)\Malwarebytes' Anti-Malware
2014-01-13 12:46 - 2013-04-04 14:50 - 00025928 _____ (Malwarebytes Corporation) C:\windows\system32\Drivers\mbam.sys
2014-01-11 01:19 - 2014-01-13 13:31 - 00000982 _____ C:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2815119995-1780246843-4195622244-1003UA.job
2014-01-11 01:19 - 2014-01-11 01:31 - 00000930 _____ C:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2815119995-1780246843-4195622244-1003Core.job
2014-01-11 01:19 - 2014-01-11 01:26 - 00003932 _____ C:\windows\System32\Tasks\GoogleUpdateTaskUserS-1-5-21-2815119995-1780246843-4195622244-1003UA
2014-01-11 01:19 - 2014-01-11 01:26 - 00003552 _____ C:\windows\System32\Tasks\GoogleUpdateTaskUserS-1-5-21-2815119995-1780246843-4195622244-1003Core
2014-01-11 01:19 - 2014-01-11 01:19 - 00000000 ____D C:\Users\Terezka\AppData\Local\Google
2014-01-11 00:45 - 2014-01-12 14:16 - 00000000 ____D C:\Users\Terezka\AppData\Roaming\Skype
2014-01-11 00:44 - 2014-01-11 00:45 - 00000000 ___RD C:\Program Files (x86)\Skype
2014-01-11 00:44 - 2014-01-11 00:45 - 00000000 ____D C:\ProgramData\Skype
2014-01-11 00:44 - 2014-01-11 00:44 - 00002731 _____ C:\Users\Public\Desktop\Skype.lnk
2014-01-11 00:36 - 2013-06-27 10:59 - 00000000 ____D C:\Program Files\firefox
2014-01-10 11:54 - 2014-01-10 11:54 - 00004096 ____H C:\Users\Terezka\AppData\Local\keyfile3.drm
2013-12-27 17:13 - 2013-12-27 17:13 - 00000000 ____D C:\Users\Terezka\Documents\CyberLink
2013-12-27 17:13 - 2013-12-27 17:13 - 00000000 ____D C:\Users\Terezka\AppData\Roaming\WebApp
2013-12-27 17:13 - 2013-12-27 17:13 - 00000000 ____D C:\Users\Terezka\AppData\Roaming\CyberLink
2013-12-27 17:13 - 2013-12-27 17:13 - 00000000 ____D C:\Users\Public\CyberLink
2013-12-23 16:33 - 2014-01-11 00:45 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2013-12-15 19:37 - 2013-12-15 19:37 - 00437392 _____ C:\windows\system32\FNTCACHE.DAT

==================== One Month Modified Files and Folders =======

2014-01-13 14:10 - 2014-01-13 14:10 - 00020922 _____ C:\Users\Terezka\Desktop\FRST.txt
2014-01-13 14:09 - 2014-01-13 14:09 - 00000000 ____D C:\FRST
2014-01-13 14:08 - 2014-01-13 14:08 - 02075648 _____ (Farbar) C:\Users\Terezka\Desktop\FRST64.exe
2014-01-13 14:08 - 2014-01-13 14:08 - 00112640 _____ (forum.viry.cz) C:\Users\Terezka\Desktop\FRSTLauncher.exe
2014-01-13 14:05 - 2012-10-07 11:26 - 01065912 _____ C:\windows\WindowsUpdate.log
2014-01-13 14:00 - 2012-07-26 09:12 - 00000000 ____D C:\windows\system32\sru
2014-01-13 13:44 - 2013-12-03 22:19 - 00000464 ____H C:\windows\Tasks\SK.Enhancer-S-161304646.job
2014-01-13 13:44 - 2012-07-26 08:22 - 00000006 ____H C:\windows\Tasks\SA.DAT
2014-01-13 13:43 - 2014-01-13 13:29 - 00000000 ____D C:\AdwCleaner
2014-01-13 13:43 - 2012-07-26 06:26 - 00524288 ___SH C:\windows\system32\config\BBI
2014-01-13 13:37 - 2013-04-16 05:55 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2014-01-13 13:37 - 2012-09-13 19:32 - 00474498 _____ C:\windows\PFRO.log
2014-01-13 13:31 - 2014-01-11 01:19 - 00000982 _____ C:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2815119995-1780246843-4195622244-1003UA.job
2014-01-13 13:29 - 2013-04-15 20:34 - 00000000 ____D C:\setup
2014-01-13 13:27 - 2014-01-13 13:27 - 01236282 _____ C:\Users\Terezka\Desktop\adwcleaner.exe
2014-01-13 13:27 - 2013-04-15 20:26 - 00000000 ____D C:\Users\Terezka\AppData\Local\CrashDumps
2014-01-13 12:46 - 2014-01-13 12:46 - 00000000 ____D C:\Users\Terezka\AppData\Roaming\Malwarebytes
2014-01-13 12:46 - 2014-01-13 12:46 - 00000000 ____D C:\ProgramData\Malwarebytes
2014-01-13 12:46 - 2014-01-13 12:46 - 00000000 ____D C:\Program Files (x86)\Malwarebytes' Anti-Malware
2014-01-13 12:37 - 2013-10-02 18:24 - 00000000 ____D C:\Users\Terezka\Documents\5.semestr
2014-01-12 14:16 - 2014-01-11 00:45 - 00000000 ____D C:\Users\Terezka\AppData\Roaming\Skype
2014-01-12 10:13 - 2012-10-07 12:07 - 00727488 _____ C:\windows\system32\perfh005.dat
2014-01-12 10:13 - 2012-10-07 12:07 - 00148006 _____ C:\windows\system32\perfc005.dat
2014-01-12 10:13 - 2012-07-26 08:28 - 01714430 _____ C:\windows\system32\PerfStringBackup.INI
2014-01-11 08:47 - 2012-07-26 09:12 - 00000000 ____D C:\windows\AUInstallAgent
2014-01-11 01:31 - 2014-01-11 01:19 - 00000930 _____ C:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2815119995-1780246843-4195622244-1003Core.job
2014-01-11 01:26 - 2014-01-11 01:19 - 00003932 _____ C:\windows\System32\Tasks\GoogleUpdateTaskUserS-1-5-21-2815119995-1780246843-4195622244-1003UA
2014-01-11 01:26 - 2014-01-11 01:19 - 00003552 _____ C:\windows\System32\Tasks\GoogleUpdateTaskUserS-1-5-21-2815119995-1780246843-4195622244-1003Core
2014-01-11 01:19 - 2014-01-11 01:19 - 00000000 ____D C:\Users\Terezka\AppData\Local\Google
2014-01-11 01:19 - 2013-04-16 05:56 - 00000000 ____D C:\Users\Terezka\AppData\Roaming\Mozilla
2014-01-11 00:45 - 2014-01-11 00:44 - 00000000 ___RD C:\Program Files (x86)\Skype
2014-01-11 00:45 - 2014-01-11 00:44 - 00000000 ____D C:\ProgramData\Skype
2014-01-11 00:45 - 2013-12-23 16:33 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2014-01-11 00:44 - 2014-01-11 00:44 - 00002731 _____ C:\Users\Public\Desktop\Skype.lnk
2014-01-10 11:54 - 2014-01-10 11:54 - 00004096 ____H C:\Users\Terezka\AppData\Local\keyfile3.drm
2014-01-05 01:01 - 2013-05-11 20:11 - 00000000 ____D C:\Users\Terezka\AppData\Roaming\uTorrent
2014-01-05 00:58 - 2013-05-18 08:34 - 00000000 ____D C:\Users\Terezka\AppData\Roaming\vlc
2013-12-29 13:36 - 2013-10-27 21:05 - 00000000 ____D C:\Users\Terezka\Documents\Moje přijaté soubory
2013-12-27 17:13 - 2013-12-27 17:13 - 00000000 ____D C:\Users\Terezka\Documents\CyberLink
2013-12-27 17:13 - 2013-12-27 17:13 - 00000000 ____D C:\Users\Terezka\AppData\Roaming\WebApp
2013-12-27 17:13 - 2013-12-27 17:13 - 00000000 ____D C:\Users\Terezka\AppData\Roaming\CyberLink
2013-12-27 17:13 - 2013-12-27 17:13 - 00000000 ____D C:\Users\Public\CyberLink
2013-12-27 17:13 - 2012-10-07 11:26 - 00000000 ____D C:\ProgramData\CyberLink
2013-12-24 09:56 - 2013-04-19 05:06 - 00000000 ____D C:\Users\Terezka\Desktop\mitolab práce
2013-12-15 19:37 - 2013-12-15 19:37 - 00437392 _____ C:\windows\system32\FNTCACHE.DAT
2013-12-15 11:56 - 2013-08-15 22:48 - 00000000 ____D C:\windows\system32\MRT
2013-12-15 09:59 - 2013-04-16 06:17 - 90708896 _____ (Microsoft Corporation) C:\windows\system32\MRT.exe
2013-12-14 23:08 - 2013-11-23 20:36 - 00000000 ____D C:\ProgramData\InstallMate

Some content of TEMP:
====================
C:\Users\Terezka\AppData\Local\Temp\fp_pl_pfs_installer.exe
C:\Users\Terezka\AppData\Local\Temp\ose00000.exe
C:\Users\Terezka\AppData\Local\Temp\{E638ABC1-0067-474b-A379-87CFE81E7848}.exe
C:\Users\Terezka\AppData\Local\Temp\~F52C.exe


==================== Bamital & volsnap Check =================

C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\rpcss.dll => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit


LastRegBack: 2013-12-28 11:59




===***===***===***=== Extract of Additional scan result of Farbar Recovery Scan Tool ===***===***===***===

==================== Drive and Memory info ===================

Drive c: (Windows8_OS) (Fixed) (Total:453.11 GB) (Free:350.54 GB) NTFS ==>[System with boot components (obtained from reading drive)]

Available physical RAM: 2098.42 MB
Total physical RAM: 3937.46 MB
Percentage of memory in use: 46%

==================== MBR and Partition Table ==================

Disk: 0 (Size: 466 GB) (Disk ID: 69677AFB)

==================== Scheduled Tasks (whitelisted) ==================

Task: C:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2815119995-1780246843-4195622244-1003Core.job => C:\Users\Terezka\AppData\Local\Google\Update\GoogleUpdate.exe
Task: C:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2815119995-1780246843-4195622244-1003UA.job => C:\Users\Terezka\AppData\Local\Google\Update\GoogleUpdate.exe
Task: C:\windows\Tasks\SK.Enhancer-S-161304646.job => c:\programdata\quickset\sk.enhancer\SK.Enhancer.exe <==== ATTENTION

==================== Alternate Data Streams (whitelisted) ==================


==================== Security Center ==================

AV: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}



===***===***===***=== Supplementary Scan createdy by FRSTLauncher ===***===***===***===
Posledni aktualizace FRSTLauncheru: 25_11_2013 (01)
Posledni aktualizace Modifikacniho skriptu: 30_09_2013 (01)


***** Velikost "Plochy" *****

Velikost slozky "C:\Users\Terezka\Desktop" je 244 MB.


***** Startup Programs *****


***** Firewall rules *****

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
EnableFirewall REG_DWORD 0x1
DisableNotifications REG_DWORD 0x0

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
EnableFirewall REG_DWORD 0x1
DisableNotifications REG_DWORD 0x0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\GloballyOpenPorts\List]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\GloballyOpenPorts\List]


***** System Restore *****

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SystemRestore]
"DisableSR"=dword:00000000
"Generalize_DisableSR"=dword:00000000


==================== End Of Log ==============================
Přílohy
Addition.rar
(5.16 KiB) Staženo 41 x
Nahoru
Uživatelský avatar
vyosek
VIP
VIP
Příspěvky: 56373
Registrován: 07 lis 2006 15:24
Bydliště: Šalingrad - Brno

Re: Awardhotspot reklamy

#6 Příspěvek od vyosek »

:arrow: Odinstalujte McAfee Security Scan

:arrow: Tvorba fixlistu pro FRST
  • Spustte poznamkovy blok (Start-spustit-notepad)
  • Zkopirujte skript nize

  • Kód: Vybrat vše

    Start
HKLM\...\Run: [] - [x]
HKLM-x32\...\Run: [GrooveMonitor] - C:\Program Files (x86)\Microsoft Office\Office12\GrooveMonitor.exe [31016 2006-10-27] (Microsoft Corporation)
HKLM-x32\...\Run: [Adobe ARM] - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [926896 2012-09-23] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [SunJavaUpdateSched] - C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [256384 2013-08-15] (Oracle Corporation)
HKLM-x32\...\Run: [APSDaemon] - C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [59720 2013-04-21] (Apple Inc.)
HKLM-x32\...\Run: [iTunesHelper] - C:\Program Files (x86)\iTunes\iTunesHelper.exe [152392 2013-08-16] (Apple Inc.)
HKCU\...\Run: [Seznam.chromeUpdatePref] - C:\Users\Terezka\AppData\Roaming\Seznam.cz\bin\chromeUpdatePref.exe remove
HKCU\...\Run: [Skype] - C:\Program Files (x86)\Skype\Phone\Skype.exe [20587168 2013-11-18] (Skype Technologies S.A.)
HKCU\...\Run: [Google Update] - C:\Users\Terezka\AppData\Local\Google\Update\GoogleUpdate.exe [116648 2014-01-11] (Google Inc.)
HKU\Default\...\RunOnce: [Lenovo.ShowBand] - C:\Program Files\Lenovo\SimpleTap DeskBand\ShowBand.exe [40360 2012-09-20] (Lenovo)
HKU\Default User\...\RunOnce: [Lenovo.ShowBand] - C:\Program Files\Lenovo\SimpleTap DeskBand\ShowBand.exe [40360 2012-09-20] (Lenovo)

ProxyEnable: Internet Explorer proxy is enabled.
ProxyServer: cache.natur.cuni.cz:3128
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.ncbi.nlm.nih.gov/pubmed/
HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://lenovo13-comm.msn.com
HKCU\Software\Microsoft\Internet Explorer\Main,Default_Secondary_Page_URL = http://www.lenovo.com/welcome/thinkpad
SearchScopes: HKLM - DefaultScope {421F62A5-6438-4372-BF97-6D20E0D2074C} URL = http://www.bing.com/search?q={searchTerms}&form=IE10TR&src=IE10TR&pc=MALCJS
SearchScopes: HKLM - {421F62A5-6438-4372-BF97-6D20E0D2074C} URL = http://www.bing.com/search?q={searchTerms}&form=IE10TR&src=IE10TR&pc=MALCJS
SearchScopes: HKLM-x32 - {421F62A5-6438-4372-BF97-6D20E0D2074C} URL = http://www.bing.com/search?q={searchTerms}&form=IE10TR&src=IE10TR&pc=MALCJS
SearchScopes: HKCU - {421F62A5-6438-4372-BF97-6D20E0D2074C} URL = 
BHO-x32: MSS+ Identifier - {0E8A89AD-95D7-40EB-8D9D-083EF7066A01} - C:\Program Files\McAfee Security Scan\3.8.130\McAfeeMSS_IE.dll (McAfee, Inc.)

FF DefaultSearchEngine: Centrum.cz
FF SelectedSearchEngine: Centrum.cz
FF Homepage: hxxp://google.com/
FF Keyword.URL: hxxp://search.centrum.cz/?charset=UTF-8 ... archbox&q=
FF NetworkProxy: "type", 0
FF Plugin-x32: @mcafee.com/McAfeeMssPlugin - C:\Program Files\McAfee Security Scan\3.8.130\npMcAfeeMss.dll (McAfee, Inc.)
FF Extension: surf aNd keep - C:\Users\Terezka\AppData\Roaming\Mozilla\Firefox\Profiles\p0l6vk48.default\Extensions\frnbuye@jtsv-.com [2013-11-23]
FF Extension: suurff anD keep - C:\Users\Terezka\AppData\Roaming\Mozilla\Firefox\Profiles\p0l6vk48.default\Extensions\iwtgwehzc@rzsaspbs.co.uk [2013-12-03]
FF Extension: surF aond kEoep - C:\Users\Terezka\AppData\Roaming\Mozilla\Firefox\Profiles\p0l6vk48.default\Extensions\oyitqrj2ngdxk@hiauy.co.uk [2013-11-30]

2014-01-13 14:08 - 2014-01-13 14:08 - 00112640 _____ (forum.viry.cz) C:\Users\Terezka\Desktop\FRSTLauncher.exe
2014-01-13 13:27 - 2014-01-13 13:27 - 01236282 _____ C:\Users\Terezka\Desktop\adwcleaner.exe
C:\ProgramData\QuickSet
C:\Program Files\McAfee Security Scan\
C:\Users\Terezka\AppData\Local\Temp\fp_pl_pfs_installer.exe
C:\Users\Terezka\AppData\Local\Temp\ose00000.exe
C:\Users\Terezka\AppData\Local\Temp\{E638ABC1-0067-474b-A379-87CFE81E7848}.exe
C:\Users\Terezka\AppData\Local\Temp\~F52C.exe

Task: C:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2815119995-1780246843-4195622244-1003Core.job => C:\Users\Terezka\AppData\Local\Google\Update\GoogleUpdate.exe
Task: C:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2815119995-1780246843-4195622244-1003UA.job => C:\Users\Terezka\AppData\Local\Google\Update\GoogleUpdate.exe
Task: C:\windows\Tasks\SK.Enhancer-S-161304646.job => c:\programdata\quickset\sk.enhancer\SK.Enhancer.exe <==== ATTENTION

Hosts:
CMD: shutdown /r /f /t 2

End
  • Ulozte vytvoreny TXT jako fixlist.txt
  • Presunte vytvoreny fixlist vedle FRST
:arrow: Spustte znovu FRST.exe
  • Kliknete na Fix
  • Probehne oprava a vytvori log Fixlog.txt
:arrow: Restart PC a dejte mi sem fixlog.txt
"Kdo víno má a nepije,kdo hrozny má a nejí je, kdo ženu má a nelíbá, kdo zábavě se vyhýbá, na toho vemte bič a hůl, to není člověk, to je vůl."
Člen Obrázek od 1. února 2011.
Nahoru
tuhyk
Návštěvník
Návštěvník
Příspěvky: 6
Registrován: 13 led 2014 13:02

Re: Awardhotspot reklamy

#7 Příspěvek od tuhyk »

Fix result of Farbar Recovery Tool (FRST written by Farbar) (x64) Version: 13-01-2014 01
Ran by Terezka at 2014-01-13 15:49:23 Run:1
Running from C:\Users\Terezka\Desktop
Boot Mode: Normal
==============================================

Content of fixlist:
*****************
Start
HKLM\...\Run: [] - [x]
HKLM-x32\...\Run: [GrooveMonitor] - C:\Program Files (x86)\Microsoft Office\Office12\GrooveMonitor.exe [31016 2006-10-27] (Microsoft Corporation)
HKLM-x32\...\Run: [Adobe ARM] - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [926896 2012-09-23] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [SunJavaUpdateSched] - C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [256384 2013-08-15] (Oracle Corporation)
HKLM-x32\...\Run: [APSDaemon] - C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [59720 2013-04-21] (Apple Inc.)
HKLM-x32\...\Run: [iTunesHelper] - C:\Program Files (x86)\iTunes\iTunesHelper.exe [152392 2013-08-16] (Apple Inc.)
HKCU\...\Run: [Seznam.chromeUpdatePref] - C:\Users\Terezka\AppData\Roaming\Seznam.cz\bin\chromeUpdatePref.exe remove
HKCU\...\Run: [Skype] - C:\Program Files (x86)\Skype\Phone\Skype.exe [20587168 2013-11-18] (Skype Technologies S.A.)
HKCU\...\Run: [Google Update] - C:\Users\Terezka\AppData\Local\Google\Update\GoogleUpdate.exe [116648 2014-01-11] (Google Inc.)
HKU\Default\...\RunOnce: [Lenovo.ShowBand] - C:\Program Files\Lenovo\SimpleTap DeskBand\ShowBand.exe [40360 2012-09-20] (Lenovo)
HKU\Default User\...\RunOnce: [Lenovo.ShowBand] - C:\Program Files\Lenovo\SimpleTap DeskBand\ShowBand.exe [40360 2012-09-20] (Lenovo)

ProxyEnable: Internet Explorer proxy is enabled.
ProxyServer: cache.natur.cuni.cz:3128
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.ncbi.nlm.nih.gov/pubmed/
HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://lenovo13-comm.msn.com
HKCU\Software\Microsoft\Internet Explorer\Main,Default_Secondary_Page_URL = http://www.lenovo.com/welcome/thinkpad
SearchScopes: HKLM - DefaultScope {421F62A5-6438-4372-BF97-6D20E0D2074C} URL = http://www.bing.com/search?q={searchTer ... &pc=MALCJS
SearchScopes: HKLM - {421F62A5-6438-4372-BF97-6D20E0D2074C} URL = http://www.bing.com/search?q={searchTer ... &pc=MALCJS
SearchScopes: HKLM-x32 - {421F62A5-6438-4372-BF97-6D20E0D2074C} URL = http://www.bing.com/search?q={searchTer ... &pc=MALCJS
SearchScopes: HKCU - {421F62A5-6438-4372-BF97-6D20E0D2074C} URL =
BHO-x32: MSS+ Identifier - {0E8A89AD-95D7-40EB-8D9D-083EF7066A01} - C:\Program Files\McAfee Security Scan\3.8.130\McAfeeMSS_IE.dll (McAfee, Inc.)

FF DefaultSearchEngine: Centrum.cz
FF SelectedSearchEngine: Centrum.cz
FF Homepage: hxxp://google.com/
FF Keyword.URL: hxxp://search.centrum.cz/?charset=UTF-8 ... archbox&q=
FF NetworkProxy: "type", 0
FF Plugin-x32: @mcafee.com/McAfeeMssPlugin - C:\Program Files\McAfee Security Scan\3.8.130\npMcAfeeMss.dll (McAfee, Inc.)
FF Extension: surf aNd keep - C:\Users\Terezka\AppData\Roaming\Mozilla\Firefox\Profiles\p0l6vk48.default\Extensions\frnbuye@jtsv-.com [2013-11-23]
FF Extension: suurff anD keep - C:\Users\Terezka\AppData\Roaming\Mozilla\Firefox\Profiles\p0l6vk48.default\Extensions\iwtgwehzc@rzsaspbs.co.uk [2013-12-03]
FF Extension: surF aond kEoep - C:\Users\Terezka\AppData\Roaming\Mozilla\Firefox\Profiles\p0l6vk48.default\Extensions\oyitqrj2ngdxk@hiauy.co.uk [2013-11-30]

2014-01-13 14:08 - 2014-01-13 14:08 - 00112640 _____ (forum.viry.cz) C:\Users\Terezka\Desktop\FRSTLauncher.exe
2014-01-13 13:27 - 2014-01-13 13:27 - 01236282 _____ C:\Users\Terezka\Desktop\adwcleaner.exe
C:\ProgramData\QuickSet
C:\Program Files\McAfee Security Scan\
C:\Users\Terezka\AppData\Local\Temp\fp_pl_pfs_installer.exe
C:\Users\Terezka\AppData\Local\Temp\ose00000.exe
C:\Users\Terezka\AppData\Local\Temp\{E638ABC1-0067-474b-A379-87CFE81E7848}.exe
C:\Users\Terezka\AppData\Local\Temp\~F52C.exe

Task: C:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2815119995-1780246843-4195622244-1003Core.job => C:\Users\Terezka\AppData\Local\Google\Update\GoogleUpdate.exe
Task: C:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2815119995-1780246843-4195622244-1003UA.job => C:\Users\Terezka\AppData\Local\Google\Update\GoogleUpdate.exe
Task: C:\windows\Tasks\SK.Enhancer-S-161304646.job => c:\programdata\quickset\sk.enhancer\SK.Enhancer.exe <==== ATTENTION

Hosts:
CMD: shutdown /r /f /t 2

End
*****************

HKLM\Software\Microsoft\Windows\CurrentVersion\Run\\ => Value deleted successfully.
HKLM\Software\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\\GrooveMonitor => Value deleted successfully.
HKLM\Software\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\\Adobe ARM => Value deleted successfully.
HKLM\Software\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\\SunJavaUpdateSched => Value deleted successfully.
HKLM\Software\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\\APSDaemon => Value deleted successfully.
HKLM\Software\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\\iTunesHelper => Value deleted successfully.
HKCU\Software\Microsoft\Windows\CurrentVersion\Run\\Seznam.chromeUpdatePref => Value deleted successfully.
HKCU\Software\Microsoft\Windows\CurrentVersion\Run\\Skype => Value deleted successfully.
HKCU\Software\Microsoft\Windows\CurrentVersion\Run\\Google Update => Value deleted successfully.
HKU\Default\Software\Microsoft\Windows\CurrentVersion\RunOnce\\Lenovo.ShowBand => Value deleted successfully.
HKU\Default User\Software\Microsoft\Windows\CurrentVersion\RunOnce\\Lenovo.ShowBand => Value not found.
HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\\ProxyEnable => Value deleted successfully.
HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\\ProxyServer => Value deleted successfully.
HKCU\Software\Microsoft\Internet Explorer\Main\\Start Page => Value was restored successfully.
HKCU\Software\Microsoft\Internet Explorer\Main\\Default_Page_URL => Value was restored successfully.
HKCU\Software\Microsoft\Internet Explorer\Main\\Default_Secondary_Page_URL => Value deleted successfully.
HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope => Value was restored successfully.
HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{421F62A5-6438-4372-BF97-6D20E0D2074C} => Key deleted successfully.
HKCR\CLSID\{421F62A5-6438-4372-BF97-6D20E0D2074C} => Key not found.
HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\SearchScopes\{421F62A5-6438-4372-BF97-6D20E0D2074C} => Key deleted successfully.
HKCR\Wow6432Node\CLSID\{421F62A5-6438-4372-BF97-6D20E0D2074C} => Key not found.
HKCU\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{421F62A5-6438-4372-BF97-6D20E0D2074C} => Key deleted successfully.
HKCR\CLSID\{421F62A5-6438-4372-BF97-6D20E0D2074C} => Key not found.
HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{0E8A89AD-95D7-40EB-8D9D-083EF7066A01} => Key not found.
HKCR\Wow6432Node\CLSID\{0E8A89AD-95D7-40EB-8D9D-083EF7066A01} => Key not found.
Firefox DefaultSearchEngine deleted successfully.
Firefox SelectedSearchEngine deleted successfully.
Firefox homepage deleted successfully.
Firefox Keyword.URL deleted successfully.
Firefox Proxy settings were reset.
HKLM\Software\Wow6432Node\MozillaPlugins\@mcafee.com/McAfeeMssPlugin => Key not found.
C:\Program Files\McAfee Security Scan\3.8.130\npMcAfeeMss.dll not found.
C:\Users\Terezka\AppData\Roaming\Mozilla\Firefox\Profiles\p0l6vk48.default\Extensions\frnbuye@jtsv-.com => Moved successfully.
C:\Users\Terezka\AppData\Roaming\Mozilla\Firefox\Profiles\p0l6vk48.default\Extensions\iwtgwehzc@rzsaspbs.co.uk => Moved successfully.
C:\Users\Terezka\AppData\Roaming\Mozilla\Firefox\Profiles\p0l6vk48.default\Extensions\oyitqrj2ngdxk@hiauy.co.uk => Moved successfully.
C:\Users\Terezka\Desktop\FRSTLauncher.exe => Moved successfully.
C:\Users\Terezka\Desktop\adwcleaner.exe => Moved successfully.
"C:\ProgramData\QuickSet" => File/Directory not found.

"C:\Program Files\McAfee Security Scan\" directory move:

C:\Program Files\McAfee Security Scan\3.8.130\McAfeeMSS_IE.dll => Moved successfully.
"C:\Program Files\McAfee Security Scan\" => Directory moved successfully.

C:\Users\Terezka\AppData\Local\Temp\fp_pl_pfs_installer.exe => Moved successfully.
C:\Users\Terezka\AppData\Local\Temp\ose00000.exe => Moved successfully.
C:\Users\Terezka\AppData\Local\Temp\{E638ABC1-0067-474b-A379-87CFE81E7848}.exe => Moved successfully.
C:\Users\Terezka\AppData\Local\Temp\~F52C.exe => Moved successfully.
C:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2815119995-1780246843-4195622244-1003Core.job => Moved successfully.
C:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2815119995-1780246843-4195622244-1003UA.job => Moved successfully.
C:\windows\Tasks\SK.Enhancer-S-161304646.job => Moved successfully.
C:\Windows\System32\Drivers\etc\hosts => Moved successfully.
Hosts was reset successfully.

========= shutdown /r /f /t 2 =========


========= End of CMD: =========



The system needs a manual reboot.

==== End of Fixlog ====
Nahoru
Uživatelský avatar
vyosek
VIP
VIP
Příspěvky: 56373
Registrován: 07 lis 2006 15:24
Bydliště: Šalingrad - Brno

Re: Awardhotspot reklamy

#8 Příspěvek od vyosek »

:arrow: T-Cleaner http://vyosek.tym.cz/pro_usery/T-Cleaner.exe
  • Stahnete a spustte
  • Pro potvrzeni volby mackejte A, Enter
  • Po pouziti utilitu smazte
  • Antiviry touhou utilitu chybne oznacit jako vir - jedna se o falesny poplach - takze v pohode stahnete (pripadne vypnete pri stahovani antivir)
:arrow: OTC http://oldtimer.geekstogo.com/OTC.exe
  • Stahnete a spustte
  • Kliknete na CleanUp a potvrdte YES
  • Program uklidi a restartuje PC

:arrow: TFC http://oldtimer.geekstogo.com/TFC.exe
  • Stahnete a spustte
  • Kliknete na Start a potvrdte OK
  • Program uklidi a restartuje pc
  • Po pouziti utilitu smazte
:arrow: Stahnete Ccleaner http://forum.viry.cz/viewtopic.php?t=7478
Panel čistič
  • Vse nechte jak je, jen dejte Analyzovat a pote Spustit CCleaner
Panel registry
  • dejte Hledej problémy
  • nasledne Opravit problémy - zalohu registru doporucuji udelat, opravte vsechny problemy
  • postup opakujte dokud nebude bez problemu - vetsinou cca 3x
Panel nástroje
  • Zde muzete odinstalovat nepotrebne programy
CCleaner doporucuji pouzivat cca jednou za tyden

:arrow: V MBAMu udelejte uplnou\kompletni kontrolu, log pak opet sem
"Kdo víno má a nepije,kdo hrozny má a nejí je, kdo ženu má a nelíbá, kdo zábavě se vyhýbá, na toho vemte bič a hůl, to není člověk, to je vůl."
Člen Obrázek od 1. února 2011.
Nahoru
tuhyk
Návštěvník
Návštěvník
Příspěvky: 6
Registrován: 13 led 2014 13:02

Re: Awardhotspot reklamy

#9 Příspěvek od tuhyk »

Malwarebytes Anti-Malware (Zkušební verze Malwarebytes Anti-Malware.) 1.75.0.1300
www.malwarebytes.org

Verze: v2014.01.13.03

Windows 8 x64 NTFS
Internet Explorer 10.0.9200.16750
Terezka :: TERKA [administrátor]

Ochrana: Povolena

13. 1. 2014 16:16:36
MBAM-log-2014-01-13 (17-06-51).txt

Typ: Kompletní kontrola (C:\|)
Nastavení kontroly povoleno: Paměť | Po spuštění | Registr | Systémové soubory | Heuristická analýza Extra | Heuristická analýza Shuriken | PUP | PUM
Nastavení kontroly zakázáno: P2P
Kontrolované objekty: 418908
Uplynulý čas: 48 minut, 35 sekund

Nalezené procesy v paměti: 0
(Žádné škodlivé položky nebyly zjištěny)

Nalezené moduly v paměti: 0
(Žádné škodlivé položky nebyly zjištěny)

Nalezené klíče v registru: 0
(Žádné škodlivé položky nebyly zjištěny)

Nalezené hodnoty v registru: 0
(Žádné škodlivé položky nebyly zjištěny)

Nalezené datové položky v registru: 0
(Žádné škodlivé položky nebyly zjištěny)

Nalezené složky: 0
(Žádné škodlivé položky nebyly zjištěny)

Nalezené soubory: 1
C:\setup\winamp563_full_emusic-7plus_all.exe (PUP.Optional.OpenCandy) -> Nebyla provedena žádná instrukce.

(konec)
Nahoru
Uživatelský avatar
vyosek
VIP
VIP
Příspěvky: 56373
Registrován: 07 lis 2006 15:24
Bydliště: Šalingrad - Brno

Re: Awardhotspot reklamy

#10 Příspěvek od vyosek »

:arrow: Nalez mazat nemusite

:arrow: Jak se chova PC??
"Kdo víno má a nepije,kdo hrozny má a nejí je, kdo ženu má a nelíbá, kdo zábavě se vyhýbá, na toho vemte bič a hůl, to není člověk, to je vůl."
Člen Obrázek od 1. února 2011.
Nahoru
tuhyk
Návštěvník
Návštěvník
Příspěvky: 6
Registrován: 13 led 2014 13:02

Re: Awardhotspot reklamy

#11 Příspěvek od tuhyk »

Vypadá to, že jsem se zbavila vyskakovacích oken, bílých pruhů v záhlaví web stránek i těch zelených odkazů awardhot spot:) Díky moc!! :thumbsup:
Nahoru
Uživatelský avatar
vyosek
VIP
VIP
Příspěvky: 56373
Registrován: 07 lis 2006 15:24
Bydliště: Šalingrad - Brno

Re: Awardhotspot reklamy

#12 Příspěvek od vyosek »

Nemate zac, rad jsem pomohl :worship: Zase nekdy Obrázek

A na zaklade Pravidla o zamykani temat :lock:
"Kdo víno má a nepije,kdo hrozny má a nejí je, kdo ženu má a nelíbá, kdo zábavě se vyhýbá, na toho vemte bič a hůl, to není člověk, to je vůl."
Člen Obrázek od 1. února 2011.
Nahoru
Zamčeno

Zpět na „Řešení problémů, logy“