Kontrola disku při spuštění pc

[Mmoni]

Dobrý den, prosím o pomoc. Při každém zapnutí pc se spouští kontrola disku "Některý z disku vyžaduje kontrolu konzistence." V systému logu se vždycky objeví 2x chyba ntfs v čase zapnutí pc a někdy během dne upozornění W32time. Je třeba si udělat zálohu dat a pořídit si nový disk?

Díky za pomoc!:)

[Roli]

Zdravím, což o to kontrola disku se dá vypnout :

Přes Start >> Spustit >> napiš - cmd >> OK

do otevřeného okna s blikajícím kurzorem nakopíruj chkntfs /x c:

stiskni ENTER


Ale jestli si máš zálohovat data Ti takhle na dálku neřeknu, protože z křišťálové koule věštit neumím.


Stáhni HD Tune a otestuj HDD.

Benchmark - Test disku Klikni na tlačítko Start a vyčkej dokud se nezaplní celý graf. Poté se dozvíš přenosovou rychlost a přístupový čas pevného disku.

Info Přesná kapacita, souborový systém, podporované funkce, verze firmware, sériové číslo a typ zapojení disků.

Health - Kondice Seznam důležitých parametrů a jejich hodnoty. Ideální je mít všude OK.

Když je nějaká položka žlutá pravděpodobně brzy změní status na failed. Když je červená má status failed, to by znamenalo výměnu disku.

Error Scan - Hledání chyb Klikni na tlačítko Start a program prozkoumá disk zda na něm nejsou vadné bloky.

Pokud na konci testu jsou všechny zelené, je vše v pořádku. Když je byť jeden z nich červený, doporučuji zazálohovat data a počítat s výměnou disku.

Teplota Teploměr nahoře a číslo vedle něj znázorňují teplotu disku. Normální hodnota je pod 50°C. Teplota ale nesmí přesáhnout 60°C, program upozorní když dosáhne hranice 55°C.


Pak dej vědět jak to dopadlo.

[Mmoni]

Vypadá na to, že to dopadlo dobře

Teplota disku se pohybuje mezi 40-50°C

Benchmark - trasnsfer rate, min 9MB/sec, max 54.6, aver 45.1MB/sec
access time 14.4 ms
burst rate 68.5MB/sec
CPU usage 12.9 %

Health - všude je OK

Error scan - nenašel se žádný červený, vše je zelené.

[Roli]

Vypadá na to, že to dopadlo dobře

Ještě mi sem dej když už jsi tu aktuální log z Rsit a písni jak ten start PC.

[Mmoni]

Při startu pc pořád se spoučtí chkdsk:/

Tady je můj log

Logfile of random's system information tool 1.06 (written by random/random)
Run by Milan at 2014-04-09 22:30:47
Microsoft Windows XP Home Edition Service Pack 3
System drive C: has 2 GB (5%) free of 30 GB
Total RAM: 767 MB (64% free)

HijackThis download failed

======Scheduled tasks folder======

C:\WINDOWS\tasks\Adobe Flash Player Updater.job
C:\WINDOWS\tasks\avast! Emergency Update.job
C:\WINDOWS\tasks\GoogleUpdateTaskMachineCore.job
C:\WINDOWS\tasks\GoogleUpdateTaskMachineUA.job
C:\WINDOWS\tasks\Měsíční oznamování konce poskytování služeb pro Microsoft Windows XP.job
C:\WINDOWS\tasks\Přihlášení k oznamování konce poskytování služeb pro Microsoft Windows XP.job
C:\WINDOWS\tasks\User_Feed_Synchronization-{DB5DBF21-49F8-43AB-8877-98394C4532DA}.job

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{8E5E2654-AD2D-48bf-AC2D-D17F00898D06}]
avast! Online Security - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2014-04-04 597816]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9b9dcae3-be34-424c-8d73-75e305a9e091}]
Search Assistant BHO - C:\Program Files\WeatherBlink\bar\1.bin\gcSrcAs.dll [2014-04-04 139336]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{dc9051c2-8f55-479a-97a4-747980d9047f}]
Toolbar BHO - C:\PROGRA~1\WEATHE~2\bar\1.bin\gcbar.dll [2014-04-04 860232]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{f20de5e0-2a6e-4c54-985f-1cf59551ce39} - WeatherBlink - C:\Program Files\WeatherBlink\bar\1.bin\gcbar.dll [2014-04-04 860232]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"Adobe ARM"=C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2013-11-21 959904]
"AvastUI.exe"=C:\Program Files\AVAST Software\Avast\AvastUI.exe [2014-04-04 3854640]
"WeatherBlink Home Page Guard 32 bit"=C:\PROGRA~1\WEATHE~2\bar\1.bin\AppIntegrator.exe [2014-04-04 421448]
"WeatherBlink Search Scope Monitor"=C:\PROGRA~1\WEATHE~2\bar\1.bin\gcsrchmn.exe [2014-04-04 55368]
"WeatherBlink Browser Plugin Loader"=C:\PROGRA~1\WEATHE~2\bar\1.bin\gcbrmon.exe [2014-04-04 61512]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"=C:\WINDOWS\system32\ctfmon.exe [2008-04-14 15360]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll [2006-10-18 133632]
UPnPMonitor - {e57ce738-33e8-4c51-8354-bb4de9d215d1} - C:\WINDOWS\system32\upnpui.dll [2008-04-14 239616]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Wdf01000.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\UploadMgr]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Wdf01000.sys]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=145

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"D:\1nsane\Game.exe"="D:\1nsane\Game.exe:*:Enabled:INSANE"
"C:\Program Files\Winamp\winamp.exe"="C:\Program Files\Winamp\winamp.exe:*:Disabled:Winamp"
"C:\Program Files\ICQ7.6\ICQ.exe"="C:\Program Files\ICQ7.6\ICQ.exe:*:Enabled:ICQ7.6"
"D:\TM\TmNationsForever\TmForever.exe"="D:\TM\TmNationsForever\TmForever.exe:*:Enabled:TmForever"
"C:\Program Files\Bonjour\mDNSResponder.exe"="C:\Program Files\Bonjour\mDNSResponder.exe:*:Enabled:Bonjour"
"C:\Codemasters\Insane\Game.exe"="C:\Codemasters\Insane\Game.exe:*:Enabled:INSANE"
"D:\kyodai\kyodai.exe"="D:\kyodai\kyodai.exe:*:Enabled:kyodai"
"C:\Program Files\YourFileDownloader\Downloader.exe"="C:\Program Files\YourFileDownloader\Downloader.exe:*:Enabled:YourFile Downloader"
"C:\Program Files\YourFileDownloader\YourFile.exe"="C:\Program Files\YourFileDownloader\YourFile.exe:*:Enabled:YourFile Downloader"
"C:\Program Files\Electronic Arts\Need For Speed III\nfs3.exe"="C:\Program Files\Electronic Arts\Need For Speed III\nfs3.exe:*:Disabled:Need For Speed III for Win32"
"D:\free video\Programs\RM.exe"="D:\free video\Programs\RM.exe:*:Enabled:Render Manager"
"D:\free video\Programs\umi.exe"="D:\free video\Programs\umi.exe:*:Enabled:umi"
"D:\free video\Programs\VideoSpin.exe"="D:\free video\Programs\VideoSpin.exe:*:Enabled:Pinnacle VideoSpin"
"C:\WINDOWS\system32\dpnsvr.exe"="C:\WINDOWS\system32\dpnsvr.exe:*:Disabled:Microsoft DirectPlay8 Server"
"E:\setup\HPPNIPRINT01.EXE"="E:\setup\HPPNIPRINT01.EXE:*:Enabled:hppniprint01.exe"
"E:\setup\HPPNIPRINT64.EXE"="E:\setup\HPPNIPRINT64.EXE:*:Enabled:hppniprint64.exe"
"E:\setup\HPPNICIFS01.EXE"="E:\setup\HPPNICIFS01.EXE:*:Enabled:hppnicifs01.exe"
"E:\setup\HPBTPG.EXE"="E:\setup\HPBTPG.EXE:*:Enabled:hpbtpg.exe"
"E:\setup\LaunchApp.exe"="E:\setup\LaunchApp.exe:*:Enabled:launchapp.exe"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"C:\Program Files\ICQ7.6\ICQ.exe"="C:\Program Files\ICQ7.6\ICQ.exe:*:Enabled:ICQ7.6"

======List of files/folders created in the last 3 months======

2014-04-09 21:59:04 ----D---- C:\Program Files\trend micro
2014-04-09 21:59:02 ----D---- C:\rsit
2014-04-09 20:34:24 ----D---- C:\Program Files\HD Tune
2014-04-09 17:29:26 ----HDC---- C:\WINDOWS\$NtUninstallKB2922229$
2014-04-09 17:26:19 ----A---- C:\WINDOWS\imsins.BAK
2014-04-04 20:43:46 ----D---- C:\Program Files\OpenOffice.org 3
2014-04-04 20:11:42 ----D---- C:\Documents and Settings\Milan\Data aplikací\WeatherBlink
2014-04-04 20:09:55 ----D---- C:\Program Files\WeatherBlink
2014-03-29 19:13:33 ----A---- C:\WINDOWS\hpntwksetup.ini
2014-03-26 10:58:38 ----N---- C:\WINDOWS\system32\MpSigStub.exe
2014-03-24 19:29:21 ----D---- C:\Program Files\PhotoScape
2014-03-24 19:19:16 ----D---- C:\Program Files\GIMP 2
2014-03-24 19:12:52 ----D---- C:\Documents and Settings\Milan\Data aplikací\OpenOffice
2014-03-24 19:00:15 ----D---- C:\Program Files\OpenOffice 4
2014-03-23 01:18:05 ----HDC---- C:\WINDOWS\$NtUninstallKB2934207$
2014-03-22 17:25:59 ----N---- C:\WINDOWS\system32\xp_eos.exe
2014-03-12 07:41:57 ----HDC---- C:\WINDOWS\$NtUninstallKB2929961$
2014-03-12 07:41:47 ----HDC---- C:\WINDOWS\$NtUninstallKB2930275$
2014-03-09 15:43:36 ----HD---- C:\WINDOWS\PIF
2014-03-09 15:42:39 ----D---- C:\WINDOWS\startm~1
2014-02-13 03:01:50 ----HDC---- C:\WINDOWS\$NtUninstallKB2916036$
2014-01-16 00:26:34 ----HDC---- C:\WINDOWS\$NtUninstallKB2914368$

======List of files/folders modified in the last 3 months======

2014-04-09 22:24:15 ----D---- C:\WINDOWS\system32
2014-04-09 22:24:14 ----A---- C:\WINDOWS\system32\PerfStringBackup.INI
2014-04-09 22:20:20 ----D---- C:\WINDOWS\Temp
2014-04-09 22:05:23 ----A---- C:\WINDOWS\SchedLgU.Txt
2014-04-09 22:02:58 ----D---- C:\WINDOWS\Prefetch
2014-04-09 22:02:38 ----D---- C:\Documents and Settings\Milan\Data aplikací\Winamp
2014-04-09 21:59:04 ----D---- C:\Program Files
2014-04-09 17:46:39 ----D---- C:\WINDOWS
2014-04-09 17:29:31 ----HD---- C:\WINDOWS\inf
2014-04-09 17:29:28 ----RSHDC---- C:\WINDOWS\system32\dllcache
2014-04-09 17:29:17 ----D---- C:\WINDOWS\system32\MRT
2014-04-09 17:27:11 ----D---- C:\WINDOWS\Debug
2014-04-09 17:26:43 ----A---- C:\WINDOWS\system32\MRT.exe
2014-04-09 17:26:14 ----D---- C:\Program Files\Internet Explorer
2014-04-09 17:26:02 ----D---- C:\WINDOWS\ie8updates
2014-04-09 06:07:23 ----D---- C:\WINDOWS\system32\CatRoot2
2014-04-05 04:49:25 ----HD---- C:\Config.Msi
2014-04-04 22:19:38 ----SHD---- C:\WINDOWS\Installer
2014-04-04 22:18:59 ----RSD---- C:\WINDOWS\assembly
2014-04-04 22:17:45 ----RSD---- C:\WINDOWS\Fonts
2014-04-04 21:07:12 ----D---- C:\WINDOWS\WinSxS
2014-04-04 11:53:42 ----SD---- C:\WINDOWS\Tasks
2014-04-04 11:53:19 ----A---- C:\WINDOWS\system32\aswBoot.exe
2014-03-30 19:59:00 ----D---- C:\Documents and Settings\Milan\Data aplikací\DAEMON Tools Lite
2014-03-29 19:16:14 ----DC---- C:\WINDOWS\system32\DRVSTORE
2014-03-26 14:35:11 ----D---- C:\WINDOWS\system32\drivers
2014-03-26 10:54:43 ----SD---- C:\Documents and Settings\All Users\Data aplikací\Microsoft
2014-03-24 18:51:49 ----D---- C:\Program Files\Google
2014-03-24 17:24:01 ----D---- C:\Documents and Settings\All Users\Data aplikací\DAEMON Tools Lite
2014-03-24 10:50:42 ----D---- C:\Program Files\Common Files
2014-03-24 10:50:14 ----D---- C:\Program Files\Adobe
2014-03-12 12:47:44 ----A---- C:\WINDOWS\system32\kernel32.dll
2014-03-11 22:40:24 ----A---- C:\WINDOWS\system32\FlashPlayerApp.exe
2014-03-06 19:58:44 ----A---- C:\WINDOWS\system32\wininet.dll
2014-03-06 19:58:44 ----A---- C:\WINDOWS\system32\urlmon.dll
2014-03-06 19:58:44 ----A---- C:\WINDOWS\system32\url.dll
2014-03-06 19:58:44 ----A---- C:\WINDOWS\system32\mshtml.dll
2014-03-06 19:58:44 ----A---- C:\WINDOWS\system32\msfeedsbs.dll
2014-03-06 19:58:44 ----A---- C:\WINDOWS\system32\msfeeds.dll
2014-03-06 19:58:44 ----A---- C:\WINDOWS\system32\iertutil.dll
2014-03-06 19:58:44 ----A---- C:\WINDOWS\system32\iepeers.dll
2014-03-06 19:58:44 ----A---- C:\WINDOWS\system32\ieframe.dll
2014-03-06 19:58:44 ----A---- C:\WINDOWS\system32\corpol.dll
2014-03-06 19:58:44 -------- C:\WINDOWS\system32\occache.dll
2014-03-06 19:58:44 -------- C:\WINDOWS\system32\mstime.dll
2014-03-06 19:58:44 -------- C:\WINDOWS\system32\mshtmled.dll
2014-03-06 19:58:44 -------- C:\WINDOWS\system32\licmgr10.dll
2014-03-06 19:58:44 -------- C:\WINDOWS\system32\jsproxy.dll
2014-03-06 19:58:44 -------- C:\WINDOWS\system32\iedkcs32.dll
2014-03-06 06:17:24 -------- C:\WINDOWS\system32\ie4uinit.exe
2014-02-13 08:03:34 ----D---- C:\WINDOWS\Microsoft.NET
2014-02-11 10:41:50 ----D---- C:\Program Files\Common Files\Adobe AIR
2014-02-05 10:55:05 ----A---- C:\WINDOWS\system32\qedit.dll
2014-01-24 10:46:20 ----D---- C:\WINDOWS\network diagnostic
2014-01-13 08:25:08 ----D---- C:\Program Files\WinRAR
2014-01-12 10:39:41 ----HD---- C:\Program Files\InstallShield Installation Information

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R1 AmdK7;Ovladač procesoru AMD K7; C:\WINDOWS\System32\DRIVERS\amdk7.sys [2008-04-14 41600]
R1 AswRdr;aswRdr; C:\WINDOWS\system32\drivers\aswRdr.sys [2014-04-04 54832]
R1 aswSnx;aswSnx; C:\WINDOWS\system32\drivers\aswSnx.sys [2014-04-04 776976]
R1 aswSP;aswSP; C:\WINDOWS\system32\drivers\aswSP.sys [2014-04-04 411552]
R1 aswTdi;aswTdi; C:\WINDOWS\system32\drivers\aswTdi.sys [2014-04-04 57672]
R1 dtsoftbus01;DAEMON Tools Virtual Bus Driver; C:\WINDOWS\system32\DRIVERS\dtsoftbus01.sys [2012-03-10 232512]
R1 kbdhid;Ovladač klávesnice standardu HID; C:\WINDOWS\system32\DRIVERS\kbdhid.sys [2008-04-14 14592]
R2 aswMonFlt;aswMonFlt; C:\WINDOWS\system32\drivers\aswMonFlt.sys [2014-04-04 67824]
R3 ALCXWDM;Service for Realtek AC97 Audio (WDM); C:\WINDOWS\system32\drivers\ALCXWDM.SYS [2008-09-24 4122368]
R3 Arp1394;Protokol 1394 ARP Client; C:\WINDOWS\System32\DRIVERS\arp1394.sys [2008-04-14 60800]
R3 ati2mtag;ati2mtag; C:\WINDOWS\System32\DRIVERS\ati2mtag.sys [2004-08-17 701440]
R3 FETNDIS;VIA PCI 10/100Mb Fast Ethernet Adapter NT Driver; C:\WINDOWS\System32\DRIVERS\fetnd5.sys [2001-08-17 27165]
R3 HidUsb;Ovladač třídy standardu HID; C:\WINDOWS\system32\DRIVERS\hidusb.sys [2008-04-14 10368]
R3 mouhid;Ovladač myši standardu HID; C:\WINDOWS\System32\DRIVERS\mouhid.sys [2001-10-24 12160]
R3 NIC1394;1394 Net Driver; C:\WINDOWS\System32\DRIVERS\nic1394.sys [2008-04-14 61824]
R3 ROOTMODEM;Microsoft Legacy Modem Driver; C:\WINDOWS\System32\Drivers\RootMdm.sys [2003-04-16 5888]
R3 usbehci;Ovladač miniportu rozšířeného radiče hostitele Microsoft USB 2.0; C:\WINDOWS\System32\DRIVERS\usbehci.sys [2009-03-18 30336]
R3 usbhub;Rozbočovač umožnující USB2; C:\WINDOWS\System32\DRIVERS\usbhub.sys [2008-04-14 59520]
R3 usbuhci;Ovladač Microsoft univerzálního hostitelského řadiče USB od společnosti Microsoft; C:\WINDOWS\System32\DRIVERS\usbuhci.sys [2008-04-14 20608]
R3 vulfnths;VIA USB Host Controller Lower Filter; C:\WINDOWS\System32\Drivers\vulfnth.sys [2003-08-04 6912]
R3 vulfntrs;VIA USB Roothub Lower Filter; C:\WINDOWS\System32\Drivers\vulfntr.sys [2003-08-04 11392]
S3 ALCXSENS;Service for WDM 3D Audio Driver; C:\WINDOWS\system32\drivers\ALCXSENS.SYS []
S3 aswTap;avast! SecureLine TAP Adapter v3; C:\WINDOWS\system32\DRIVERS\aswTap.sys [2013-10-23 35272]
S3 AtmLane;Emulace protokolu ATM v síti LAN; C:\WINDOWS\system32\DRIVERS\atmlane.sys [2008-04-14 55808]
S3 esgiguard;esgiguard; \??\C:\Program Files\Enigma Software Group\SpyHunter\esgiguard.sys []
S3 EverestDriver;Lavalys EVEREST Kernel Driver; \??\C:\Program Files\Lavalys\EVEREST Ultimate Edition\kerneld.wnt []
S3 MBAMSwissArmy;MBAMSwissArmy; \??\C:\WINDOWS\system32\drivers\mbamswissarmy.sys []
S3 nmwcd;Nokia USB Phone Parent Driver; C:\WINDOWS\system32\drivers\ccdcmb.sys [2011-08-17 18176]
S3 nmwcdc;Nokia USB Communication Driver; C:\WINDOWS\system32\drivers\ccdcmbo.sys [2011-08-17 23168]
S3 upperdev;upperdev; C:\WINDOWS\system32\DRIVERS\usbser_lowerflt.sys [2011-08-17 8192]
S3 usbccgp;Obecný nadřazený ovladač Microsoft USB; C:\WINDOWS\system32\DRIVERS\usbccgp.sys [2013-08-09 32384]
S3 usbprint;Třída USB Printer; C:\WINDOWS\system32\DRIVERS\usbprint.sys [2008-04-14 25856]
S3 usbser;USB Modem Driver; C:\WINDOWS\system32\drivers\usbser.sys [2013-08-29 26240]
S3 UsbserFilt;UsbserFilt; C:\WINDOWS\system32\DRIVERS\usbser_lowerfltj.sys [2011-08-17 8192]
S3 USBSTOR;Ovladač velkokapacitního paměťového zařízení USB; C:\WINDOWS\System32\DRIVERS\USBSTOR.SYS [2008-04-14 26368]
S3 Wdf01000;Kernel Mode Driver Frameworks service; C:\WINDOWS\System32\Drivers\wdf01000.sys [2009-07-14 444136]
S3 WpdUsb;WpdUsb; C:\WINDOWS\System32\Drivers\wpdusb.sys [2006-10-18 38528]
S3 WudfRd;Windows Driver Foundation - User-mode Driver Framework Reflector; C:\WINDOWS\system32\DRIVERS\wudfrd.sys [2006-09-28 82944]
S4 aswKbd;aswKbd; \??\C:\WINDOWS\system32\drivers\aswKbd.sys []
S4 IntelIde;IntelIde; C:\WINDOWS\system32\drivers\IntelIde.sys []

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 avast! Antivirus;avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [2014-04-04 50344]
R2 MDM;Machine Debug Manager; C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\mdm.exe [2006-10-26 335872]
R2 WudfSvc;Windows Driver Foundation - User-mode Driver Framework; C:\WINDOWS\system32\svchost.exe [2008-04-14 14336]
S2 gupdate;Služba Google Update (gupdate); C:\Program Files\Google\Update\GoogleUpdate.exe [2014-03-24 116648]
S2 WeatherBlinkService;WeatherBlinkService; C:\PROGRA~1\WEATHE~2\bar\1.bin\gcbarsvc.exe [2014-04-04 88648]
S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service; C:\WINDOWS\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2014-03-11 257928]
S3 aspnet_state;Stavová služba ASP.NET; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe [2008-07-25 34312]
S3 clr_optimization_v2.0.50727_32;.NET Runtime Optimization Service v2.0.50727_X86; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe [2008-07-25 69632]
S3 FontCache3.0.0.0;Windows Presentation Foundation Font Cache 3.0.0.0; C:\WINDOWS\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe [2008-07-29 46104]
S3 gupdatem;Služba Google Update (gupdatem); C:\Program Files\Google\Update\GoogleUpdate.exe [2014-03-24 116648]
S3 idsvc;Služba Windows CardSpace; C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe [2008-07-29 881664]
S3 WMPNetworkSvc;Služba Windows Media Player Network Sharing; C:\Program Files\Windows Media Player\WMPNetwk.exe [2007-01-05 913920]
S4 avast! Firewall;avast! Firewall; C:\Program Files\AVAST Software\Avast\afwServ.exe []
S4 NetTcpPortSharing;Služba sdílení portů Net.Tcp; C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe [2008-07-29 132096]

-----------------EOF-----------------

[JaRon]

ospravedlnujem sa za vstup:
- skontroluj si systemovy cas, zda sa, ze mas +1 hod
- vo vypise su disky C - D - E >> napis k tomu blizsie
- daj postupne vsetky disky skontrolovat s chkdsk a ten ktory bude mat chyby zopakuj s chkdsk /r

[Mmoni]

Všechny disky jsem nechala skontrolovat v chkdsk, ale nenašly se žádné chyby. Při startu PC se už nespouští kontrola disku.

[Roli]

V Naplánovaných úlohách smaž :

GoogleUpdateTaskMachineCore.job
GoogleUpdateTaskMachineUA.job
Měsíční oznamování konce poskytování služeb pro Microsoft Windows XP.job
Přihlášení k oznamování konce poskytování služeb pro Microsoft Windows XP.job


Smaž nepotřebné soubory

pomocí CCleaneru

návod :

Čistič - tady vyčistíš PC od nepotřebných souborů a vysypeš Koš

Registry - tady vyčistíš registry (před použitím doporučuji udělat jejich zálohu kterou CCleaner nabízí)

čištění registru je třeba několikrát zopakovat !

Nástroje - tady lze odinstalovat programy, upravit co se spustí po Startu systému a obnovit systém


Stáhni a ulož na plochu AdwCleaner,

ukonči všechny programy včetně prohlížeče a dvojklikem spusť,

objeví se okno kde vlevo nahoře klikni na Scan.

Po té proběhne sken a po jeho skončení klikni na Report a to co na Tebe vypadne mi sem zkopíruj.

[Mmoni]

# AdwCleaner v3.023 - Report created 10/04/2014 at 19:49:35
# Updated 01/04/2014 by Xplode
# Operating System : Microsoft Windows XP Service Pack 3 (32 bits)
# Username : Milan - LIPKA-DOMA
# Running from : C:\Documents and Settings\Milan\Plocha\adwcleaner.exe
# Option : Scan

***** [ Services ] *****


***** [ Files / Folders ] *****

File Found : C:\DOCUME~1\Milan\LOCALS~1\Temp\Uninstall.exe
File Found : C:\Documents and Settings\Milan\Data aplikací\Mozilla\Firefox\Profiles\nahd6ha2.default\searchplugins\Askcom.xml
File Found : C:\Documents and Settings\Milan\Data aplikací\Mozilla\Firefox\Profiles\nahd6ha2.default\searchplugins\search.xml
File Found : C:\Documents and Settings\Milan\Data aplikací\Mozilla\Firefox\Profiles\nahd6ha2.default\user.js
File Found : C:\Documents and Settings\Milan\Local Settings\Data aplikací\Google\Chrome\User Data\Default\Local Storage\chrome-extension_eooncjejnppfjjklapaamhcdmjbilmde_0.localstorage
File Found : C:\WINDOWS\system32\roboot.exe
Folder Found : C:\Documents and Settings\Milan\Data aplikací\Mozilla\Firefox\Profiles\nahd6ha2.default\Extensions\5002912cdbe4e@5002912cdbe87.info
Folder Found : C:\Documents and Settings\Milan\Data aplikací\Mozilla\Firefox\Profiles\nahd6ha2.default\Extensions\ffxtlbr@babylon.com
Folder Found : C:\Documents and Settings\Milan\Data aplikací\Mozilla\Firefox\Profiles\nahd6ha2.default\Extensions\ffxtlbr@babylon.com
Folder Found : C:\Documents and Settings\Milan\Data aplikací\Mozilla\Firefox\Profiles\nahd6ha2.default\Extensions\ffxtlbr@funmoods.com
Folder Found : C:\Documents and Settings\Milan\Data aplikací\Mozilla\Firefox\Profiles\nahd6ha2.default\Extensions\ffxtlbr@funmoods.com
Folder Found : C:\Documents and Settings\Milan\Data aplikací\Mozilla\Firefox\Profiles\nahd6ha2.default\Extensions\gcffxtbr@WeatherBlink.com
Folder Found C:\Documents and Settings\All Users\Data aplikací\Babylon
Folder Found C:\Documents and Settings\All Users\Data aplikací\WxDFastUpdater
Folder Found C:\Documents and Settings\Milan\Data aplikací\Babylon
Folder Found C:\Documents and Settings\Milan\Data aplikací\Systweak
Folder Found C:\Documents and Settings\Milan\Data aplikací\Yandex
Folder Found C:\Documents and Settings\Milan\Local Settings\Data aplikací\iac
Folder Found C:\Documents and Settings\Milan\Local Settings\Data aplikací\Yandex
Folder Found C:\Program Files\MyPC Backup

***** [ Shortcuts ] *****


***** [ Registry ] *****

Key Found : HKCU\Software\Alexa Internet
Key Found : HKCU\Software\bbrs_002.tb
Key Found : HKCU\Software\distromatic
Key Found : HKCU\Software\Microsoft\Internet Explorer\LowRegistry\ICQ\ICQToolBar
Key Found : HKCU\Software\Microsoft\Internet Explorer\MenuExt\&Search
Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MenuOrder\Start Menu\Programs\MyPC Backup
Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{3CA2F312-6F6E-4B53-A66E-4E65E497C8C0}
Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{CD1A63BA-A08C-431B-9A34-F240AADC728D}
Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{EA582743-9076-4178-9AA6-7393FDF4D5CE}
Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{F443A627-5009-4323-9C1D-7FD598D0D712}
Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{3CA2F312-6F6E-4B53-A66E-4E65E497C8C0}
Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{7CAEFAFC-9A1E-4BCC-94DD-BC7D8D52717A}
Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{CD1A63BA-A08C-431B-9A34-F240AADC728D}
Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{EA582743-9076-4178-9AA6-7393FDF4D5CE}
Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{F443A627-5009-4323-9C1D-7FD598D0D712}
Key Found : HKCU\Software\Softonic
Key Found : HKLM\SOFTWARE\Classes\AlxSSB.AlxTBSSB
Key Found : HKLM\SOFTWARE\Classes\AlxSSB.AlxTBSSB.1
Key Found : HKLM\SOFTWARE\Classes\AppID\{1F02FB61-2BE5-4C16-8199-AEAA16EB0342}
Key Found : HKLM\SOFTWARE\Classes\CLSID\{1AA60054-57D9-4F99-9A55-D0FBFBE7ECD3}
Key Found : HKLM\SOFTWARE\Classes\CLSID\{DE9028D0-5FFA-4E69-94E3-89EE8741F468}
Key Found : HKLM\SOFTWARE\Classes\FTDownloader
Key Found : HKLM\SOFTWARE\Classes\Prod.cap
Key Found : HKLM\SOFTWARE\Classes\TypeLib\{13ABD093-D46F-40DF-A608-47E162EC799D}
Key Found : HKLM\SOFTWARE\Classes\TypeLib\{DA9FC525-41ED-4C00-B046-946DA7CDD305}
Key Found : HKLM\SOFTWARE\Google\Chrome\Extensions\bbffdhejhaoiflnpooogkckfdcmmjppn
Key Found : HKLM\Software\ICQ\ICQToolbar
Key Found : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{E57091A7-B5F0-4C42-9329-72ED3E59ED31}
Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Management\ARPCache\allin1convert_8hbar uninstall firefox
Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Management\ARPCache\Amazon Browser Bar
Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Management\ARPCache\RegClean Pro_is1
Key Found : HKLM\Software\systweak
Value Found : HKCU\Software\Microsoft\Internet Explorer\Main [Backup.old.Start Page]
Value Found : HKCU\Software\Microsoft\Internet Explorer\Main [ICQ Search]
Value Found : HKLM\SOFTWARE\Microsoft\Internet Explorer\AboutURLs [bProtectTabs]
Value Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run [WeatherBlink Browser Plugin Loader]
Value Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run [WeatherBlink Search Scope Monitor]
Value Found : HKLM\SOFTWARE\Mozilla\Firefox\Extensions [5002912cdbe4e@5002912cdbe87.info]
Value Found : HKLM\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List [C:\Program Files\YourFileDownloader\Downloader.exe]
Value Found : HKLM\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List [C:\Program Files\YourFileDownloader\YourFile.exe]

***** [ Browsers ] *****

-\\ Internet Explorer v8.0.6001.18702

Setting Found : HKLM\SOFTWARE\Microsoft\Internet Explorer\AboutURls [Tabs] - hxxp://mixidj.delta-search.com/?babsrc=NT_ss&mntrId=1C630040CA737EC6&affID=121136&tsp=5008

-\\ Mozilla Firefox v

[ File : C:\Documents and Settings\Milan\Data aplikací\Mozilla\Firefox\Profiles\nahd6ha2.default\prefs.js ]

Line Found : user_pref("extensions.BabylonToolbar_i.aflt", "babsst");
Line Found : user_pref("extensions.BabylonToolbar_i.babExt", "");
Line Found : user_pref("extensions.BabylonToolbar_i.babTrack", "affID=112470&tt=060612_5_");
Line Found : user_pref("extensions.BabylonToolbar_i.hardId", "1c6300760000000000000040ca737ec6");
Line Found : user_pref("extensions.BabylonToolbar_i.id", "1c6300760000000000000040ca737ec6");
Line Found : user_pref("extensions.BabylonToolbar_i.instlDay", "15536");
Line Found : user_pref("extensions.BabylonToolbar_i.instlRef", "sst");
Line Found : user_pref("extensions.BabylonToolbar_i.newTab", false);
Line Found : user_pref("extensions.BabylonToolbar_i.prdct", "BabylonToolbar");
Line Found : user_pref("extensions.BabylonToolbar_i.prtnrId", "babylon");
Line Found : user_pref("extensions.BabylonToolbar_i.smplGrp", "none");
Line Found : user_pref("extensions.BabylonToolbar_i.srcExt", "ss");
Line Found : user_pref("extensions.BabylonToolbar_i.tlbrId", "base");
Line Found : user_pref("extensions.BabylonToolbar_i.vrsn", "1.5.3.17");
Line Found : user_pref("extensions.BabylonToolbar_i.vrsnTs", "1.5.3.1711:47:07");
Line Found : user_pref("extensions.BabylonToolbar_i.vrsni", "1.5.3.17");
Line Found : user_pref("extensions.funmoods.aflt", "orgnl");
Line Found : user_pref("extensions.funmoods.autoRvrt", false);
Line Found : user_pref("extensions.funmoods.dfltLng", "");
Line Found : user_pref("extensions.funmoods.dfltSrch", true);
Line Found : user_pref("extensions.funmoods.dnsErr", true);
Line Found : user_pref("extensions.funmoods.envrmnt", "production");
Line Found : user_pref("extensions.funmoods.excTlbr", false);
Line Found : user_pref("extensions.funmoods.hmpg", true);
Line Found : user_pref("extensions.funmoods.hmpgUrl", "hxxp://searchfunmoods.com/?f=1&a=orgnl&chnl=&cd=2XzuyEtN2Y1L1QzutDtDyEtD0C0AyBtAyB0E0CyCtDtDyByCtN0D0Tzu0CtBtDyBtN1L2XzutBtFtCtFtDtFtAtDtC&cr=1085386716");
Line Found : user_pref("extensions.funmoods.id", "0040CA737EC60076");
Line Found : user_pref("extensions.funmoods.instlDay", "15546");
Line Found : user_pref("extensions.funmoods.instlRef", "");
Line Found : user_pref("extensions.funmoods.isdcmntcmplt", true);
Line Found : user_pref("extensions.funmoods.mntrvrsn", "1.3.0");
Line Found : user_pref("extensions.funmoods.newTabUrl", "hxxp://searchfunmoods.com/?f=2&a=orgnl&chnl=&cd=2XzuyEtN2Y1L1QzutDtDyEtD0C0AyBtAyB0E0CyCtDtDyByCtN0D0Tzu0CtBtDyBtN1L2XzutBtFtCtFtDtFtAtDtC&cr=1085386716");
Line Found : user_pref("extensions.funmoods.prdct", "funmoods");
Line Found : user_pref("extensions.funmoods.prtnrId", "funmoods");
Line Found : user_pref("extensions.funmoods.srchPrvdr", "Search");
Line Found : user_pref("extensions.funmoods.tlbrId", "base");
Line Found : user_pref("extensions.funmoods.tlbrSrchUrl", "hxxp://searchfunmoods.com/?f=3&a=orgnl&chnl=&cd=2XzuyEtN2Y1L1QzutDtDyEtD0C0AyBtAyB0E0CyCtDtDyByCtN0D0Tzu0CtBtDyBtN1L2XzutBtFtCtFtDtFtAtDtC&cr=1085386716&q[...]
Line Found : user_pref("extensions.funmoods.vrsn", "1.5.23.22");
Line Found : user_pref("extensions.funmoods.vrsni", "1.5.23.22");
Line Found : user_pref("extensions.funmoods_i.newTab", true);
Line Found : user_pref("extensions.funmoods_i.smplGrp", "none");
Line Found : user_pref("extensions.funmoods_i.vrsnTs", "1.5.23.2219:38:40");

-\\ Google Chrome v34.0.1847.116

[ File : C:\Documents and Settings\Milan\Local Settings\Data aplikací\Google\Chrome\User Data\Default\preferences ]


*************************

AdwCleaner[R0].txt - [9885 octets] - [10/04/2014 19:49:35]

########## EOF - C:\AdwCleaner\AdwCleaner[R0].txt - [9945 octets] ##########

[Roli]

Znovu spusť AdwCleaner ale tentokrát klikni na Clean,

proběhne restart PC kdy dojde ke smazání nepořádku.

Po té mi sem zase zkopíruj Report.


Pak ještě použij Mbam z mého popdisu a dej mi sem z něj log, předem nic nemazat !

[Mmoni]

# AdwCleaner v3.023 - Report created 11/04/2014 at 10:48:04
# Updated 01/04/2014 by Xplode
# Operating System : Microsoft Windows XP Service Pack 3 (32 bits)
# Username : Milan - LIPKA-DOMA
# Running from : C:\Documents and Settings\Milan\Plocha\adwcleaner.exe
# Option : Clean

***** [ Services ] *****


***** [ Files / Folders ] *****

Folder Deleted : C:\Documents and Settings\All Users\Data aplikací\Babylon
Folder Deleted : C:\Documents and Settings\All Users\Data aplikací\WxDFastUpdater
Folder Deleted : C:\Program Files\MyPC Backup
Folder Deleted : C:\Documents and Settings\Milan\Local Settings\Data aplikací\iac
Folder Deleted : C:\Documents and Settings\Milan\Local Settings\Data aplikací\Yandex
Folder Deleted : C:\Documents and Settings\Milan\Data aplikací\Babylon
Folder Deleted : C:\Documents and Settings\Milan\Data aplikací\Systweak
Folder Deleted : C:\Documents and Settings\Milan\Data aplikací\Yandex
Folder Deleted : C:\Documents and Settings\Milan\Data aplikací\Mozilla\Firefox\Profiles\nahd6ha2.default\Extensions\ffxtlbr@babylon.com
Folder Deleted : C:\Documents and Settings\Milan\Data aplikací\Mozilla\Firefox\Profiles\nahd6ha2.default\Extensions\ffxtlbr@funmoods.com
Folder Deleted : C:\Documents and Settings\Milan\Data aplikací\Mozilla\Firefox\Profiles\nahd6ha2.default\Extensions\5002912cdbe4e@5002912cdbe87.info
Folder Deleted : C:\Documents and Settings\Milan\Data aplikací\Mozilla\Firefox\Profiles\nahd6ha2.default\Extensions\gcffxtbr@WeatherBlink.com
File Deleted : C:\WINDOWS\system32\roboot.exe
File Deleted : C:\DOCUME~1\Milan\LOCALS~1\Temp\Uninstall.exe
File Deleted : C:\Documents and Settings\Milan\Data aplikací\Mozilla\Firefox\Profiles\nahd6ha2.default\searchplugins\Askcom.xml
File Deleted : C:\Documents and Settings\Milan\Data aplikací\Mozilla\Firefox\Profiles\nahd6ha2.default\searchplugins\search.xml
File Deleted : C:\Documents and Settings\Milan\Data aplikací\Mozilla\Firefox\Profiles\nahd6ha2.default\user.js
File Deleted : C:\Documents and Settings\Milan\Local Settings\Data aplikací\Google\Chrome\User Data\Default\Local Storage\chrome-extension_eooncjejnppfjjklapaamhcdmjbilmde_0.localstorage

***** [ Shortcuts ] *****


***** [ Registry ] *****

Value Deleted : HKLM\SOFTWARE\Mozilla\Firefox\Extensions [5002912cdbe4e@5002912cdbe87.info]
Key Deleted : HKLM\SOFTWARE\Google\Chrome\Extensions\bbffdhejhaoiflnpooogkckfdcmmjppn
Key Deleted : HKCU\Software\Microsoft\Internet Explorer\LowRegistry\ICQ\ICQToolBar
Value Deleted : HKCU\Software\Microsoft\Internet Explorer\Main [Backup.old.Start Page]
Value Deleted : HKCU\Software\Microsoft\Internet Explorer\Main [ICQ Search]
Key Deleted : HKCU\Software\Microsoft\Internet Explorer\MenuExt\&Search
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MenuOrder\Start Menu\Programs\MyPC Backup
Key Deleted : HKLM\SOFTWARE\Classes\AlxSSB.AlxTBSSB
Key Deleted : HKLM\SOFTWARE\Classes\AlxSSB.AlxTBSSB.1
Key Deleted : HKLM\SOFTWARE\Classes\FTDownloader
Key Deleted : HKLM\SOFTWARE\Classes\Prod.cap
Value Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\AboutURLs [bProtectTabs]
Value Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run [WeatherBlink Search Scope Monitor]
Value Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run [WeatherBlink Browser Plugin Loader]
Key Deleted : HKLM\SOFTWARE\Classes\AppID\{1F02FB61-2BE5-4C16-8199-AEAA16EB0342}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{1AA60054-57D9-4F99-9A55-D0FBFBE7ECD3}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{DE9028D0-5FFA-4E69-94E3-89EE8741F468}
Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{13ABD093-D46F-40DF-A608-47E162EC799D}
Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{DA9FC525-41ED-4C00-B046-946DA7CDD305}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{3CA2F312-6F6E-4B53-A66E-4E65E497C8C0}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{7CAEFAFC-9A1E-4BCC-94DD-BC7D8D52717A}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{CD1A63BA-A08C-431B-9A34-F240AADC728D}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{EA582743-9076-4178-9AA6-7393FDF4D5CE}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{F443A627-5009-4323-9C1D-7FD598D0D712}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{3CA2F312-6F6E-4B53-A66E-4E65E497C8C0}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{CD1A63BA-A08C-431B-9A34-F240AADC728D}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{EA582743-9076-4178-9AA6-7393FDF4D5CE}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{F443A627-5009-4323-9C1D-7FD598D0D712}
Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{E57091A7-B5F0-4C42-9329-72ED3E59ED31}
Value Deleted : HKLM\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List [C:\Program Files\YourFileDownloader\Downloader.exe]
Value Deleted : HKLM\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List [C:\Program Files\YourFileDownloader\YourFile.exe]
Key Deleted : HKCU\Software\Alexa Internet
Key Deleted : HKCU\Software\bbrs_002.tb
Key Deleted : HKCU\Software\distromatic
Key Deleted : HKCU\Software\Softonic
Key Deleted : HKLM\Software\ICQ\ICQToolbar
Key Deleted : HKLM\Software\systweak
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Management\ARPCache\allin1convert_8hbar uninstall firefox
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Management\ARPCache\Amazon Browser Bar
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Management\ARPCache\RegClean Pro_is1

***** [ Browsers ] *****

-\\ Internet Explorer v8.0.6001.18702

Setting Restored : HKLM\SOFTWARE\Microsoft\Internet Explorer\AboutURls [Tabs]

-\\ Mozilla Firefox v

[ File : C:\Documents and Settings\Milan\Data aplikací\Mozilla\Firefox\Profiles\nahd6ha2.default\prefs.js ]

Line Deleted : user_pref("extensions.BabylonToolbar_i.aflt", "babsst");
Line Deleted : user_pref("extensions.BabylonToolbar_i.babExt", "");
Line Deleted : user_pref("extensions.BabylonToolbar_i.babTrack", "affID=112470&tt=060612_5_");
Line Deleted : user_pref("extensions.BabylonToolbar_i.hardId", "1c6300760000000000000040ca737ec6");
Line Deleted : user_pref("extensions.BabylonToolbar_i.id", "1c6300760000000000000040ca737ec6");
Line Deleted : user_pref("extensions.BabylonToolbar_i.instlDay", "15536");
Line Deleted : user_pref("extensions.BabylonToolbar_i.instlRef", "sst");
Line Deleted : user_pref("extensions.BabylonToolbar_i.newTab", false);
Line Deleted : user_pref("extensions.BabylonToolbar_i.prdct", "BabylonToolbar");
Line Deleted : user_pref("extensions.BabylonToolbar_i.prtnrId", "babylon");
Line Deleted : user_pref("extensions.BabylonToolbar_i.smplGrp", "none");
Line Deleted : user_pref("extensions.BabylonToolbar_i.srcExt", "ss");
Line Deleted : user_pref("extensions.BabylonToolbar_i.tlbrId", "base");
Line Deleted : user_pref("extensions.BabylonToolbar_i.vrsn", "1.5.3.17");
Line Deleted : user_pref("extensions.BabylonToolbar_i.vrsnTs", "1.5.3.1711:47:07");
Line Deleted : user_pref("extensions.BabylonToolbar_i.vrsni", "1.5.3.17");
Line Deleted : user_pref("extensions.funmoods.aflt", "orgnl");
Line Deleted : user_pref("extensions.funmoods.autoRvrt", false);
Line Deleted : user_pref("extensions.funmoods.dfltLng", "");
Line Deleted : user_pref("extensions.funmoods.dfltSrch", true);
Line Deleted : user_pref("extensions.funmoods.dnsErr", true);
Line Deleted : user_pref("extensions.funmoods.envrmnt", "production");
Line Deleted : user_pref("extensions.funmoods.excTlbr", false);
Line Deleted : user_pref("extensions.funmoods.hmpg", true);
Line Deleted : user_pref("extensions.funmoods.hmpgUrl", "hxxp://searchfunmoods.com/?f=1&a=orgnl&chnl=&cd=2XzuyEtN2Y1L1QzutDtDyEtD0C0AyBtAyB0E0CyCtDtDyByCtN0D0Tzu0CtBtDyBtN1L2XzutBtFtCtFtDtFtAtDtC&cr=1085386716");
Line Deleted : user_pref("extensions.funmoods.id", "0040CA737EC60076");
Line Deleted : user_pref("extensions.funmoods.instlDay", "15546");
Line Deleted : user_pref("extensions.funmoods.instlRef", "");
Line Deleted : user_pref("extensions.funmoods.isdcmntcmplt", true);
Line Deleted : user_pref("extensions.funmoods.mntrvrsn", "1.3.0");
Line Deleted : user_pref("extensions.funmoods.newTabUrl", "hxxp://searchfunmoods.com/?f=2&a=orgnl&chnl=&cd=2XzuyEtN2Y1L1QzutDtDyEtD0C0AyBtAyB0E0CyCtDtDyByCtN0D0Tzu0CtBtDyBtN1L2XzutBtFtCtFtDtFtAtDtC&cr=1085386716");
Line Deleted : user_pref("extensions.funmoods.prdct", "funmoods");
Line Deleted : user_pref("extensions.funmoods.prtnrId", "funmoods");
Line Deleted : user_pref("extensions.funmoods.srchPrvdr", "Search");
Line Deleted : user_pref("extensions.funmoods.tlbrId", "base");
Line Deleted : user_pref("extensions.funmoods.tlbrSrchUrl", "hxxp://searchfunmoods.com/?f=3&a=orgnl&chnl=&cd=2XzuyEtN2Y1L1QzutDtDyEtD0C0AyBtAyB0E0CyCtDtDyByCtN0D0Tzu0CtBtDyBtN1L2XzutBtFtCtFtDtFtAtDtC&cr=1085386716&q[...]
Line Deleted : user_pref("extensions.funmoods.vrsn", "1.5.23.22");
Line Deleted : user_pref("extensions.funmoods.vrsni", "1.5.23.22");
Line Deleted : user_pref("extensions.funmoods_i.newTab", true);
Line Deleted : user_pref("extensions.funmoods_i.smplGrp", "none");
Line Deleted : user_pref("extensions.funmoods_i.vrsnTs", "1.5.23.2219:38:40");

-\\ Google Chrome v34.0.1847.116

[ File : C:\Documents and Settings\Milan\Local Settings\Data aplikací\Google\Chrome\User Data\Default\preferences ]


*************************

AdwCleaner[R0].txt - [10025 octets] - [10/04/2014 19:49:35]
AdwCleaner[R1].txt - [10087 octets] - [11/04/2014 10:46:10]
AdwCleaner[S0].txt - [9861 octets] - [11/04/2014 10:48:04]

########## EOF - C:\AdwCleaner\AdwCleaner[S0].txt - [9921 octets] ##########



Párkrát jsem zkoušela nainstalovat ten Mbam, ale vždycky mi hlásíl nějaké chyby.

[cernohous13]

Zdravím a omlouvám se za vstup

MBAM 2.0 si nerozumí s WinXP - nejprve odinstaluj http://downloads.malwarebytes.org/file/mbam_clean
a stáhni verzi 1.75 http://www.bleepingcomputer.com/downloa ... i-malware/

[Mmoni]

Malwarebytes Anti-Malware 1.75.0.1300
www.malwarebytes.org

Verze: v2014.04.11.06

Windows XP Service Pack 3 x86 NTFS
Internet Explorer 8.0.6001.18702
Milan :: LIPKA-DOMA [administrátor]

11.4.2014 14:31:22
MBAM-log-2014-04-11 (16-44-26).txt

Typ: Kompletní kontrola (C:\|D:\|)
Nastavení kontroly povoleno: Paměť | Po spuštění | Registr | Systémové soubory | Heuristická analýza Extra | Heuristická analýza Shuriken | PUP | PUM
Nastavení kontroly zakázáno: P2P
Kontrolované objekty: 302766
Uplynulý čas: 1 hodin, 44 minut, 56 sekund

Nalezené procesy v paměti: 0
(Žádné škodlivé položky nebyly zjištěny)

Nalezené moduly v paměti: 0
(Žádné škodlivé položky nebyly zjištěny)

Nalezené klíče v registru: 1
HKLM\SYSTEM\CurrentControlSet\Services\WeatherBlinkService (PUP.Optional.AudioToAudioToolBar.A) -> Nebyla provedena žádná instrukce.

Nalezené hodnoty v registru: 1
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run|WeatherBlink Home Page Guard 32 bit (PUP.Optional.MindSpark) -> Data: "C:\PROGRA~1\WEATHE~2\bar\1.bin\AppIntegrator.exe" -> Nebyla provedena žádná instrukce.

Nalezené datové položky v registru: 0
(Žádné škodlivé položky nebyly zjištěny)

Nalezené složky: 0
(Žádné škodlivé položky nebyly zjištěny)

Nalezené soubory: 12
C:\Program Files\WeatherBlink\bar\1.bin\gcbarsvc.exe (PUP.Optional.AudioToAudioToolBar.A) -> Nebyla provedena žádná instrukce.
C:\Program Files\WeatherBlink\bar\1.bin\gcbrmon.exe (PUP.Optional.MindSpark.A) -> Nebyla provedena žádná instrukce.
C:\Program Files\WeatherBlink\bar\1.bin\gcbrstub.dll (PUP.Optional.MindSpark.A) -> Nebyla provedena žádná instrukce.
C:\Program Files\WeatherBlink\bar\1.bin\gcidle.dll (PUP.Optional.MindSpark.A) -> Nebyla provedena žádná instrukce.
C:\Program Files\ICQ7.6\install_dll\OCSetupHlp.dll (PUP.Optional.OpenCandy) -> Nebyla provedena žádná instrukce.
C:\System Volume Information\_restore{46FF8442-8968-4F56-B9BB-7DC3B420B2E8}\RP348\A0097379.exe (PUP.Optional.OpenCandy) -> Nebyla provedena žádná instrukce.
C:\System Volume Information\_restore{46FF8442-8968-4F56-B9BB-7DC3B420B2E8}\RP357\A0099757.exe (PUP.Optional.MindSpark.A) -> Nebyla provedena žádná instrukce.
C:\System Volume Information\_restore{46FF8442-8968-4F56-B9BB-7DC3B420B2E8}\RP357\A0099791.exe (PUP.Optional.MindSpark.A) -> Nebyla provedena žádná instrukce.
C:\System Volume Information\_restore{46FF8442-8968-4F56-B9BB-7DC3B420B2E8}\RP357\A0099797.exe (PUP.Optional.MindSpark.A) -> Nebyla provedena žádná instrukce.
D:\PhotoScape_V3-6-3.exe (PUP.Optional.OpenCandy) -> Nebyla provedena žádná instrukce.
D:\winamp5621_full_emusic-7plus_en-us.exe (PUP.Optional.OpenCandy) -> Nebyla provedena žádná instrukce.
C:\Program Files\WeatherBlink\bar\1.bin\APPINTEGRATOR.EXE (PUP.Optional.MindSpark) -> Nebyla provedena žádná instrukce.

(konec)



Nevím proč u některých položek nebyla provedená instrukce. Už se mě tady někdo jednou ptal na cracknutý windows, ale máme normálně zakoupenou licenci.

[cernohous13]

zatím jsi jen scanoval

po ukončení -> Zobrazit výsledky -> zkontrolovat zda je vše označeno -> Odstranit označené
vyběhne log, ve kterém budou záznamy tohoto typu:
Nalezené soubory
C:\Program Files\xxxxxx -> Umístnění do karantény a smazání se zdařilo.

[Roli]

zatím jsi jen scanoval

po ukončení -> Zobrazit výsledky -> zkontrolovat zda je vše označeno -> Odstranit označené
vyběhne log, ve kterém budou záznamy tohoto typu:
Nalezené soubory
C:\Program Files\xxxxxx -> Umístnění do karantény a smazání se zdařilo.