virus alebo cerv v mojom PC s win 7

Máte problém s virem? Vložte sem log z FRST nebo RSIT.

Moderátor: Moderátoři

Pravidla fóra
Pokud chcete pomoc, vložte log z FRST [návod zde] nebo RSIT [návod zde]

Jednotlivé thready budou po vyřešení uzamčeny. Stejně tak ty, které budou nečinné déle než 14 dní. Vizte Pravidlo o zamykání témat. Děkujeme za pochopení.

!NOVINKA!
Nově lze využívat služby vzdálené pomoci, kdy se k vašemu počítači připojí odborník a bližší informace o problému si od vás získá telefonicky! Více na www.neslape.cz

Vážení uživaterlé!
Ve dnech 4. - 6-9.2026 budou někteříí naši členové na každoročním srazu fóra. Žádáme vás, abyste měli strpení, nemusí se na na řešení vašeho problému dostat hned. Děkujeme za pochopení.
Odpovědět
Zpráva
Autor
solide
Návštěvník
Návštěvník
Příspěvky: 58
Registrován: 07 Lis 2006 09:41

virus alebo cerv v mojom PC s win 7

#1 Příspěvek od solide »

ahoj mam problem s mojim pocitacom. Po case ked v Google chrome alebo IE kliknem na konkretny odkaz na sranku ktoru potrebujem otvorit tak sa mi namiesto zvolenej sranky spusti stahovanie programu: yet_another_cleaner_mat a poto sa mi pripadne otvoria nove stranky s hrami, takto sa to deje dookola. Neporadi niekto ako sa to vola a co s tym? Dakujem J

Prikladam log s FRST:

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 22-04-2014
Ran by ideacentre (administrator) on IDEACENTRE-PC on 23-04-2014 12:20:48
Running from C:\Users\ideacentre\Desktop
Windows 7 Home Premium Service Pack 1 (X64) OS Language: 041B
Internet Explorer Version 10
Boot Mode: Normal

The only official download link for FRST:
Download link for 32-Bit version: http://www.bleepingcomputer.com/downloa ... ool/dl/81/
Download link for 64-Bit Version: http://www.bleepingcomputer.com/downloa ... ool/dl/82/
Download link from any site other than Bleeping Computer is unpermitted or outdated.
See tutorial for FRST: http://www.geekstogo.com/forum/topic/33 ... scan-tool/

==================== Processes (Whitelisted) =================

(NVIDIA Corporation) C:\windows\system32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\NvXDSync.exe
(NVIDIA Corporation) C:\windows\system32\nvvsvc.exe
(Microsoft Corporation) C:\windows\SYSTEM32\WISPTIS.EXE
(Acronis) C:\Program Files (x86)\Common Files\Acronis\Schedule2\schedul2.exe
(Acronis) C:\Program Files (x86)\Common Files\Acronis\CDP\afcdpsrv.exe
(Broadcom Corporation.) C:\Program Files\Lenovo\Bluetooth Software\btwdins.exe
(Intel Corporation) C:\windows\system32\IProsetMonitor.exe
(McAfee, Inc.) C:\windows\system32\mfevtps.exe
(Samsung Electronics Co., Ltd.) C:\windows\system32\spool\drivers\x64\3\NetFaxServer64.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\Version9\TeamViewer_Service.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(McAfee, Inc.) C:\Program Files\Common Files\McAfee\SystemCore\mcshield.exe
(McAfee, Inc.) C:\Program Files\Common Files\McAfee\SystemCore\mfefire.exe
(McAfee, Inc.) C:\Program Files\Common Files\mcafee\McSvcHost\McSvHost.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe
(Microsoft Corporation) C:\windows\SYSTEM32\WISPTIS.EXE
() C:\Program Files\Common Files\Common Desktop Agent\CDASrv.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\Version9\TeamViewer.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(Acronis) C:\Program Files (x86)\Common Files\Acronis\Schedule2\schedhlp.exe
(Sony) C:\Program Files (x86)\Sony\Sony PC Companion\PCCompanion.exe
() C:\Users\ideacentre\AppData\Local\WebPlayer\AppsHat\WebPlayer.exe
(Skype Technologies S.A.) C:\Program Files (x86)\Skype\Phone\Skype.exe
(Siber Systems) C:\Program Files (x86)\Siber Systems\AI RoboForm\robotaskbaricon.exe
() C:\Program Files (x86)\Sony\Sony PC Companion\PCCompanionInfo.exe
(Broadcom Corporation.) C:\Program Files\Lenovo\Bluetooth Software\BTTray.exe
(Samsung Electronics Co., Ltd.) C:\Windows\System32\spool\drivers\x64\3\NetFaxTray64.exe
(JME) C:\Program Files (x86)\jmesoft\hotkey.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\Version9\tv_w32.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\Version9\tv_x64.exe
(SRS Labs, Inc.) C:\Program Files\SRS Labs\SRS Control Panel\SRSPanel_64.exe
(Renesas Electronics Corporation) C:\Program Files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe
(Lenovo) C:\Program Files\Lenovo\Lenovo Eye Distance System\Lenovo Eye Distance System.exe
(Lenovo) C:\Program Files\Lenovo\Lenovo Brightness System\Lenovo Dynamic Brightness System.exe
(CyberLink) C:\Program Files (x86)\Lenovo\YouCam\YCMMirage.exe
() C:\Program Files (x86)\Lenovo\Lenovo EBook&QuickNotes\TMCMonitor.exe
(CyberLink) C:\Program Files (x86)\Lenovo\Power2Go\CLMLSvc.exe
() C:\Program Files\Lenovo\Bluetooth Manager\BluetoothManager.exe
(CHENGDU YIWO Tech Development Co., Ltd) C:\Program Files (x86)\EaseUS\EaseUS Partition Master 9.3.0\bin\EpmNews.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
() C:\Program Files (x86)\Acronis\TrueImageHome\TrueImageMonitor.exe
(Acronis) C:\Program Files (x86)\Common Files\Acronis\TibMounter\TibMounterMonitor.exe
(Microsoft Corporation) C:\windows\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe
(Broadcom Corporation.) C:\Program Files\Lenovo\Bluetooth Software\BtStackServer.exe
(Broadcom Corporation.) C:\Program Files\Lenovo\Bluetooth Software\Bluetooth Headset Helper.exe
(F.J. Wechselberger) C:\Program Files (x86)\MyPhoneExplorer\MyPhoneExplorer.exe
() C:\Program Files (x86)\MyPhoneExplorer\DLL\adb.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Acronis) C:\Program Files (x86)\Common Files\Acronis\SyncAgent\syncagentsrv.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
(Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\Ink\InputPersonalization.exe
(Microsoft Corporation) C:\Program Files\Internet Explorer\iexplore.exe
(Adobe Systems Incorporated) C:\windows\system32\Macromed\Flash\FlashUtil64_12_0_0_77_ActiveX.exe
(Microsoft Corporation) C:\Program Files (x86)\Microsoft Office\Office14\OUTLOOK.EXE
(Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE
() C:\Program Files (x86)\Common Files\Acronis\TrueImageHome\TrueImageHomeNotify.exe
() C:\Program Files (x86)\Common Files\Acronis\TrueImageHome\TrueImageHomeService.exe
() C:\Program Files (x86)\PC Translator\wtran32.exe
(Microsoft Corporation) C:\Program Files (x86)\Microsoft Office\Office14\WINWORD.EXE
(Microsoft Corporation) C:\windows\splwow64.exe
(forum.viry.cz) C:\Users\ideacentre\Desktop\FRSTLauncher.exe


==================== Registry (Whitelisted) ==================

HKLM\...\Run: [UpdatePRCShortCut] => C:\Program Files\Lenovo\OneKey App\Lenovo Rescue System\MUITransfer\MUIStartMenu.exe [222504 2009-05-14] (CyberLink Corp.)
HKLM\...\Run: [Lenovo EE Boot Optimizer] => C:\Program Files (x86)\Lenovo\Boot Optimizer\PopWnd.exe [114688 2011-12-24] (Lenovo)
HKLM\...\Run: [CDAServer] => C:\Program Files\Common Files\Common Desktop Agent\CDASrv.exe [462712 2012-03-09] ()
HKLM\...\Run: [RtHDVCpl] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [11775592 2011-01-18] (Realtek Semiconductor)
HKLM\...\Run: [Služba Acronis Scheduler2] => C:\Program Files (x86)\Common Files\Acronis\Schedule2\schedhlp.exe [519504 2013-08-21] (Acronis)
HKLM-x32\...\Run: [jmekey] => C:\Program Files (x86)\jmesoft\hotkey.exe [225280 2009-08-25] (JME)
HKLM-x32\...\Run: [NUSB3MON] => C:\Program Files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe [113288 2010-11-17] (Renesas Electronics Corporation)
HKLM-x32\...\Run: [Lenovo Eye Distance System] => C:\Program Files\Lenovo\Lenovo Eye Distance System\Lenovo Eye Distance System.exe [265216 2010-09-09] (Lenovo)
HKLM-x32\...\Run: [Lenovo Dynamic Brightness System] => C:\Program Files\Lenovo\Lenovo Brightness System\Lenovo Dynamic Brightness System.exe [287232 2011-02-25] (Lenovo)
HKLM-x32\...\Run: [mcui_exe] => "C:\Program Files\McAfee.com\Agent\mcagent.exe" /runkey
HKLM-x32\...\Run: [YouCam Mirage] => C:\Program Files (x86)\Lenovo\YouCam\YCMMirage.exe [136488 2011-01-29] (CyberLink)
HKLM-x32\...\Run: [YouCam Tray] => C:\Program Files (x86)\Lenovo\YouCam\YouCam.exe [228448 2011-01-29] (CyberLink Corp.)
HKLM-x32\...\Run: [TMCMonitor] => C:\Program Files (x86)\Lenovo\Lenovo EBook&QuickNotes\TMCMonitor.exe [53248 2009-11-10] ()
HKLM-x32\...\Run: [UpdatePRCShortCut] => C:\Program Files\Lenovo\OneKey App\Lenovo Rescue System\MUITransfer\MUIStartMenu.exe [222504 2009-05-14] (CyberLink Corp.)
HKLM-x32\...\Run: [SetDefaultSCR] => C:\Program Files (x86)\Lenovo\Lenovo Screensaver\SetDefaultSCR.exe [102400 2009-12-31] (Lenovo)
HKLM-x32\...\Run: [CLMLServer] => C:\Program Files (x86)\Lenovo\Power2Go\CLMLSvc.exe [103720 2009-12-05] (CyberLink)
HKLM-x32\...\Run: [Bluetooth Manager] => C:\Program Files\Lenovo\Bluetooth Manager\BluetoothManager.exe [552448 2010-07-17] ()
HKLM-x32\...\Run: [EaseUS EPM tray] => C:\Program Files (x86)\EaseUS\EaseUS Partition Master 9.3.0\bin\EpmNews.exe [2081792 2013-03-29] (CHENGDU YIWO Tech Development Co., Ltd)
HKLM-x32\...\Run: [IAStorIcon] => C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe [283160 2010-11-06] (Intel Corporation)
HKLM-x32\...\Run: [] => [X]
HKLM-x32\...\Run: [TrueImageMonitor.exe] => C:\Program Files (x86)\Acronis\TrueImageHome\TrueImageMonitor.exe [7801088 2013-09-20] ()
HKLM-x32\...\Run: [AcronisTibMounterMonitor] => C:\Program Files (x86)\Common Files\Acronis\TibMounter\TibMounterMonitor.exe [1105328 2013-01-10] (Acronis)
HKLM\...\Policies\Explorer: [NoControlPanel] 0
HKU\S-1-5-21-4082759503-1401401991-2524271345-1001\...\Run: [swg] => C:\Program Files (x86)\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe [39408 2011-12-24] (Google Inc.)
HKU\S-1-5-21-4082759503-1401401991-2524271345-1001\...\Run: [Sony PC Companion] => C:\Program Files (x86)\Sony\Sony PC Companion\PCCompanion.exe [449760 2013-10-31] (Sony)
HKU\S-1-5-21-4082759503-1401401991-2524271345-1001\...\Run: [AppsHat] => C:\Users\ideacentre\AppData\Local\WebPlayer\AppsHat\WebPlayer.exe [202752 2012-10-26] ()
HKU\S-1-5-21-4082759503-1401401991-2524271345-1001\...\Run: [Nektra OEAPI] => [X]
HKU\S-1-5-21-4082759503-1401401991-2524271345-1001\...\Run: [OEXPRESS] => [X]
HKU\S-1-5-21-4082759503-1401401991-2524271345-1001\...\Run: [Skype] => C:\Program Files (x86)\Skype\Phone\Skype.exe [20922016 2014-02-10] (Skype Technologies S.A.)
HKU\S-1-5-21-4082759503-1401401991-2524271345-1001\...\Run: [RoboForm] => C:\Program Files (x86)\Siber Systems\AI RoboForm\RoboTaskBarIcon.exe [107000 2014-03-06] (Siber Systems)
HKU\S-1-5-21-4082759503-1401401991-2524271345-1001\...\RunOnce: [FlashPlayerUpdate] - C:\windows\system32\Macromed\Flash\FlashUtil64_12_0_0_77_ActiveX.exe [531848 2014-03-12] (Adobe Systems Incorporated)
HKU\S-1-5-21-4082759503-1401401991-2524271345-1001\...\Policies\Explorer: [NoLowDiskSpaceChecks] 1

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.sk/
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = about:blank
SearchScopes: HKLM - DefaultScope {0191A6B0-1154-4C22-9182-23A95BBE92D9} URL = http://www.google.com/search?q={searchTerms}
SearchScopes: HKLM - {0191A6B0-1154-4C22-9182-23A95BBE92D9} URL = http://www.google.com/search?q={searchTerms}
SearchScopes: HKLM-x32 - DefaultScope {0191A6B0-1154-4C22-9182-23A95BBE92D9} URL = http://www.google.com/search?q={searchTerms}
SearchScopes: HKLM-x32 - {0191A6B0-1154-4C22-9182-23A95BBE92D9} URL = http://www.google.com/search?q={searchTerms}
SearchScopes: HKCU - {0191A6B0-1154-4C22-9182-23A95BBE92D9} URL = http://www.google.com/search?q={searchTerms}
SearchScopes: HKCU - {A0A3CD6E-6F56-4545-9094-DF822ECED4F7} URL = http://tv.seznam.cz/hledej?w={searchTer ... arch_13415
BHO: No Name - {11111111-1111-1111-1111-110411851159} - No File
BHO: RoboForm Toolbar Helper - {724d43a9-0d85-11d4-9908-00400523e39a} - C:\Program Files (x86)\Siber Systems\AI RoboForm\RoboForm-x64.dll (Siber Systems Inc.)
BHO: No Name - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - No File
BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO: No Name - {9030D464-4C02-4ABF-8ECC-5164760863C6} - No File
BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll (Google Inc.)
BHO: No Name - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - No File
BHO: No Name - {DBC80044-A445-435b-BC74-9C25C1C588A9} - No File
BHO-x32: No Name - {11111111-1111-1111-1111-110411851159} - No File
BHO-x32: WebTransBHO Class - {2DB66063-BB98-466A-AA0D-3E7ACF5ED853} - C:\Program Files (x86)\Translator\WebIE.dll No File
BHO-x32: RoboForm Toolbar Helper - {724d43a9-0d85-11d4-9908-00400523e39a} - C:\Program Files (x86)\Siber Systems\AI RoboForm\roboform.dll (Siber Systems Inc.)
BHO-x32: No Name - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - No File
BHO-x32: No Name - {9030D464-4C02-4ABF-8ECC-5164760863C6} - No File
BHO-x32: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)
BHO-x32: Adobe PDF Conversion Toolbar Helper - {AE7CD045-E861-484f-8273-0445EE161910} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated)
BHO-x32: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files (x86)\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)
BHO-x32: No Name - {DBC80044-A445-435b-BC74-9C25C1C588A9} - No File
BHO-x32: SmartSelect Class - {F4971EE7-DAA0-4053-9964-665D8EE6A077} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated)
Toolbar: HKLM - &RoboForm Toolbar - {724d43a0-0d85-11d4-9908-00400523e39a} - C:\Program Files (x86)\Siber Systems\AI RoboForm\RoboForm-x64.dll (Siber Systems Inc.)
Toolbar: HKLM - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll (Google Inc.)
Toolbar: HKLM-x32 - Adobe PDF - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated)
Toolbar: HKLM-x32 - WebTranslator - {BFC32E1D-EE75-4A48-BC60-104E11EE2431} - C:\Program Files (x86)\PC Translator\webie.dll ()
Toolbar: HKLM-x32 - &RoboForm Toolbar - {724d43a0-0d85-11d4-9908-00400523e39a} - C:\Program Files (x86)\Siber Systems\AI RoboForm\roboform.dll (Siber Systems Inc.)
Toolbar: HKLM-x32 - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)
Toolbar: HKCU - Google Toolbar - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll (Google Inc.)
Toolbar: HKCU - &RoboForm Toolbar - {724D43A0-0D85-11D4-9908-00400523E39A} - C:\Program Files (x86)\Siber Systems\AI RoboForm\RoboForm-x64.dll (Siber Systems Inc.)
Toolbar: HKCU - No Name - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - No File
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Hosts: There are more than one entry in Hosts. See Hosts section of Addition.txt
Tcpip\Parameters: [DhcpNameServer] 192.168.170.1 192.168.210.1 192.168.210.253

FireFox:
========
FF ProfilePath: C:\Users\ideacentre\AppData\Roaming\Mozilla\Firefox\Profiles\m8jb4xws.default
FF NewTab: about:blank
FF SearchEngineOrder.1: Google
FF SelectedSearchEngine: Google
FF Homepage: about:blank
FF Plugin: @java.com/DTPlugin,version=10.51.2 - C:\Program Files\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=10.51.2 - C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin: @microsoft.com/GENUINE - disabled No File
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files\Microsoft Silverlight\5.1.30214.0\npctrl.dll ( Microsoft Corporation)
FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 - C:\PROGRA~1\MICROS~2\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF Plugin-x32: @java.com/JavaPlugin - C:\Program Files (x86)\Java\jre6\bin\new_plugin\npjp2.dll No File
FF Plugin-x32: @microsoft.com/GENUINE - disabled No File
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files (x86)\Microsoft Silverlight\5.1.30214.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/OfficeAuthz,version=14.0 - C:\PROGRA~2\MICROS~1\Office14\NPAUTHZ.DLL No File
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 - C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll No File
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3508.1109 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll No File
FF Plugin-x32: @nvidia.com/3DVision - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll No File
FF Plugin-x32: @nvidia.com/3DVisionStreaming - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll No File
FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.23.9\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.23.9\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll No File
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\atlas-sk.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\azet-sk.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\dunaj-sk.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\slovnik-sk.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\zoznam-sk.xml
FF Extension: Apps Hat - C:\Users\ideacentre\AppData\Roaming\Mozilla\Firefox\Profiles\m8jb4xws.default\Extensions\39ed7c16-185d-4f88-b976-666d4928ba01@fe4550c1-7a4f-4a62-ad1c-45e0afdf81a4.com [2014-01-21]
FF Extension: WebTran - C:\Users\ideacentre\AppData\Roaming\Mozilla\Firefox\Profiles\m8jb4xws.default\Extensions\{003D3EDC-99B9-4a34-9C20-60CB94F7E829}.xpi [2014-02-05]
FF Extension: Java Console - C:\Program Files (x86)\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0025-ABCDEFFEDCBA} [2014-01-21]
FF HKLM-x32\...\Firefox\Extensions: [{22119944-ED35-4ab1-910B-E619EA06A115}] - C:\Program Files (x86)\Siber Systems\AI RoboForm\Firefox
FF Extension: Roboform Toolbar for Firefox - C:\Program Files (x86)\Siber Systems\AI RoboForm\Firefox [2014-03-06]

Chrome:
=======
CHR HomePage: about:blank
CHR StartupUrls: "hxxp://www.google.sk/"
CHR DefaultSearchKeyword: google
CHR DefaultSearchURL: http://www.google.com/search?q={searchTerms}
CHR DefaultNewTabURL:
CHR Extension: (Dokumenty Google) - C:\Users\ideacentre\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2014-02-11]
CHR Extension: (Disk Google) - C:\Users\ideacentre\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2014-02-11]
CHR Extension: (YouTube) - C:\Users\ideacentre\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2014-02-11]
CHR Extension: (Hľadať v Google) - C:\Users\ideacentre\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2014-02-11]
CHR Extension: (Peňaženka Google) - C:\Users\ideacentre\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2014-01-20]
CHR Extension: (Apps Hat) - C:\Users\ideacentre\AppData\Local\Google\Chrome\User Data\Default\Extensions\pbffpbffjfiigoledmkcibcbadpbenec [2014-02-25]
CHR Extension: (Gmail) - C:\Users\ideacentre\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2014-02-11]

==================== Services (Whitelisted) =================

R2 btwdins; C:\Program Files\Lenovo\Bluetooth Software\btwdins.exe [966432 2011-01-20] (Broadcom Corporation.)
R2 Intel(R) PROSet Monitoring Service; C:\windows\SysWOW64\IProsetMonitor.exe [0 2014-02-07] ()
S2 McNASvc; C:\Program Files\Common Files\mcafee\McSvcHost\McSvHost.exe [355440 2009-12-14] (McAfee, Inc.)
R2 McProxy; C:\Program Files\Common Files\mcafee\McSvcHost\McSvHost.exe [355440 2009-12-14] (McAfee, Inc.)
R2 McShield; C:\Program Files\Common Files\McAfee\SystemCore\\mcshield.exe [199304 2012-05-25] (McAfee, Inc.)
R2 mfefire; C:\Program Files\Common Files\McAfee\SystemCore\\mfefire.exe [219752 2014-01-27] (McAfee, Inc.)
R2 mfevtp; C:\windows\system32\mfevtps.exe [185792 2014-01-27] (McAfee, Inc.)
R2 mfevtp; C:\windows\SysWOW64\mfevtps.exe [0 2014-02-07] ()
R2 NVSvc; C:\Windows\SysWOW64\nvvsvc.exe [0 2014-02-07] ()
R2 Samsung Network Fax Server; C:\windows\system32\spool\drivers\x64\3\NetFaxServer64.exe [506928 2013-02-05] (Samsung Electronics Co., Ltd.)
R2 Spooler; C:\Windows\SysWOW64\spoolsv.exe [0 2014-02-07] ()

==================== Drivers (Whitelisted) ====================

R3 AVerPola; C:\Windows\System32\DRIVERS\AVerPola.sys [504064 2010-06-22] (AVerMedia TECHNOLOGIES, Inc.)
R3 BTWDPAN; C:\Windows\System32\DRIVERS\btwdpan.sys [89128 2011-01-20] (Broadcom Corporation.)
S3 cfwids; C:\Windows\System32\drivers\cfwids.sys [70592 2014-01-27] (McAfee, Inc.)
S3 epmntdrv; C:\windows\system32\epmntdrv.sys [17480 2013-03-07] ()
S3 epmntdrv; C:\windows\SysWOW64\epmntdrv.sys [13896 2013-03-07] ()
S3 EuGdiDrv; C:\windows\system32\EuGdiDrv.sys [9800 2013-03-07] ()
S3 EuGdiDrv; C:\windows\SysWOW64\EuGdiDrv.sys [9160 2013-03-07] ()
R3 mfeapfk; C:\Windows\System32\drivers\mfeapfk.sys [180272 2014-01-27] (McAfee, Inc.)
R3 mfeavfk; C:\Windows\System32\drivers\mfeavfk.sys [311600 2014-01-27] (McAfee, Inc.)
U3 mfeavfk01; No ImagePath
R3 mfefirek; C:\Windows\System32\drivers\mfefirek.sys [520696 2014-01-27] (McAfee, Inc.)
R0 mfehidk; C:\Windows\System32\drivers\mfehidk.sys [783864 2014-01-27] (McAfee, Inc.)
S3 mferkdet; C:\Windows\System32\drivers\mferkdet.sys [100912 2012-02-22] (McAfee, Inc.)
R0 tib; C:\Windows\System32\DRIVERS\tib.sys [1120032 2014-03-12] (Acronis International GmbH)
R0 tib_mounter; C:\Windows\System32\DRIVERS\tib_mounter.sys [183224 2014-03-12] (Acronis)
R0 vidsflt; C:\Windows\System32\DRIVERS\vidsflt.sys [117024 2014-03-12] (Acronis International GmbH)
R3 VMC412; C:\Windows\System32\Drivers\VMC412.sys [239872 2010-08-18] (Vimicro Corporation)
R0 WinI2C-DDC; C:\Windows\System32\drivers\DDCDrv.sys [20832 2008-04-08] (Nicomsoft Ltd.)
R0 WinI2C-DDC; C:\Windows\SysWOW64\drivers\DDCDrv.sys [15712 2010-03-23] (Nicomsoft Ltd.)
S2 mfewfpk; system32\drivers\mfewfpk.sys [X]

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2014-04-23 12:20 - 2014-04-23 12:20 - 00022816 _____ () C:\Users\ideacentre\Desktop\FRST.txt
2014-04-23 12:16 - 2014-04-23 12:16 - 00112640 _____ (forum.viry.cz) C:\Users\ideacentre\Desktop\FRSTLauncher.exe
2014-04-23 12:15 - 2014-04-23 12:15 - 02061312 _____ (Farbar) C:\Users\ideacentre\Desktop\FRST64.exe
2014-04-23 12:13 - 2014-04-23 12:20 - 00000000 ____D () C:\FRST
2014-04-23 09:36 - 2014-04-23 09:36 - 00000000 ____D () C:\Users\ideacentre\AppData\Local\GHISLER
2014-04-22 15:32 - 2014-04-22 15:32 - 06780928 _____ () C:\Users\ideacentre\Downloads\Finacny_Manazment_7semester_148slidov.ppt
2014-04-21 19:44 - 2014-04-21 19:44 - 00903288 _____ () C:\Users\ideacentre\Downloads\yet_another_cleaner_mat (1).exe
2014-04-18 09:02 - 2014-04-18 09:02 - 00903288 _____ () C:\Users\ideacentre\Downloads\yet_another_cleaner_mat.exe
2014-04-17 14:14 - 2014-04-17 14:14 - 00005783 _____ () C:\Users\ideacentre\Desktop\Photoshop - odkaz.lnk
2014-04-15 20:36 - 2014-03-13 08:33 - 02238976 _____ (Microsoft Corporation) C:\windows\system32\wininet.dll
2014-04-15 20:36 - 2014-03-13 08:33 - 01365504 _____ (Microsoft Corporation) C:\windows\system32\urlmon.dll
2014-04-15 20:36 - 2014-03-13 08:33 - 00051712 _____ (Microsoft Corporation) C:\windows\system32\ie4uinit.exe
2014-04-15 20:36 - 2014-03-13 08:32 - 19273728 _____ (Microsoft Corporation) C:\windows\system32\mshtml.dll
2014-04-15 20:36 - 2014-03-13 08:32 - 03959808 _____ (Microsoft Corporation) C:\windows\system32\jscript9.dll
2014-04-15 20:36 - 2014-03-13 08:32 - 00855552 _____ (Microsoft Corporation) C:\windows\system32\jscript.dll
2014-04-15 20:36 - 2014-03-13 08:32 - 00603136 _____ (Microsoft Corporation) C:\windows\system32\msfeeds.dll
2014-04-15 20:36 - 2014-03-13 08:32 - 00197120 _____ (Microsoft Corporation) C:\windows\system32\msrating.dll
2014-04-15 20:36 - 2014-03-13 08:32 - 00053760 _____ (Microsoft Corporation) C:\windows\system32\jsproxy.dll
2014-04-15 20:36 - 2014-03-13 08:31 - 15404544 _____ (Microsoft Corporation) C:\windows\system32\ieframe.dll
2014-04-15 20:36 - 2014-03-13 08:31 - 02648576 _____ (Microsoft Corporation) C:\windows\system32\iertutil.dll
2014-04-15 20:36 - 2014-03-13 08:31 - 00526336 _____ (Microsoft Corporation) C:\windows\system32\ieui.dll
2014-04-15 20:36 - 2014-03-13 08:31 - 00136704 _____ (Microsoft Corporation) C:\windows\system32\iesysprep.dll
2014-04-15 20:36 - 2014-03-13 08:31 - 00067072 _____ (Microsoft Corporation) C:\windows\system32\iesetup.dll
2014-04-15 20:36 - 2014-03-13 08:31 - 00039936 _____ (Microsoft Corporation) C:\windows\system32\iernonce.dll
2014-04-15 20:36 - 2014-03-13 07:10 - 01766400 _____ (Microsoft Corporation) C:\windows\SysWOW64\wininet.dll
2014-04-15 20:36 - 2014-03-13 07:10 - 01140736 _____ (Microsoft Corporation) C:\windows\SysWOW64\urlmon.dll
2014-04-15 20:36 - 2014-03-13 07:09 - 14358016 _____ (Microsoft Corporation) C:\windows\SysWOW64\mshtml.dll
2014-04-15 20:36 - 2014-03-13 07:09 - 13761024 _____ (Microsoft Corporation) C:\windows\SysWOW64\ieframe.dll
2014-04-15 20:36 - 2014-03-13 07:09 - 02877952 _____ (Microsoft Corporation) C:\windows\SysWOW64\jscript9.dll
2014-04-15 20:36 - 2014-03-13 07:09 - 02049536 _____ (Microsoft Corporation) C:\windows\SysWOW64\iertutil.dll
2014-04-15 20:36 - 2014-03-13 07:09 - 00690688 _____ (Microsoft Corporation) C:\windows\SysWOW64\jscript.dll
2014-04-15 20:36 - 2014-03-13 07:09 - 00493056 _____ (Microsoft Corporation) C:\windows\SysWOW64\msfeeds.dll
2014-04-15 20:36 - 2014-03-13 07:09 - 00391168 _____ (Microsoft Corporation) C:\windows\SysWOW64\ieui.dll
2014-04-15 20:36 - 2014-03-13 07:09 - 00163840 _____ (Microsoft Corporation) C:\windows\SysWOW64\msrating.dll
2014-04-15 20:36 - 2014-03-13 07:09 - 00109056 _____ (Microsoft Corporation) C:\windows\SysWOW64\iesysprep.dll
2014-04-15 20:36 - 2014-03-13 07:09 - 00061440 _____ (Microsoft Corporation) C:\windows\SysWOW64\iesetup.dll
2014-04-15 20:36 - 2014-03-13 07:09 - 00039936 _____ (Microsoft Corporation) C:\windows\SysWOW64\jsproxy.dll
2014-04-15 20:36 - 2014-03-13 07:09 - 00033280 _____ (Microsoft Corporation) C:\windows\SysWOW64\iernonce.dll
2014-04-15 20:36 - 2014-03-13 06:57 - 02706432 _____ (Microsoft Corporation) C:\windows\system32\mshtml.tlb
2014-04-15 20:36 - 2014-03-13 06:47 - 02706432 _____ (Microsoft Corporation) C:\windows\SysWOW64\mshtml.tlb
2014-04-15 20:36 - 2014-03-13 05:59 - 00089600 _____ (Microsoft Corporation) C:\windows\system32\RegisterIEPKEYs.exe
2014-04-15 20:36 - 2014-03-13 05:51 - 00071680 _____ (Microsoft Corporation) C:\windows\SysWOW64\RegisterIEPKEYs.exe
2014-04-15 20:35 - 2014-04-15 20:35 - 00000000 ____D () C:\Users\ideacentre\Downloads\McAfee-AntiVirus-Plus-Cracked-DLL-janco
2014-04-15 20:35 - 2014-04-15 20:35 - 00000000 ____D () C:\Program Files\McAfee.com
2014-04-15 20:35 - 2014-04-15 20:35 - 00000000 ____D () C:\Program Files\McAfee
2014-04-15 20:27 - 2014-03-04 11:44 - 01163264 _____ (Microsoft Corporation) C:\windows\system32\kernel32.dll
2014-04-15 20:27 - 2014-03-04 11:44 - 00362496 _____ (Microsoft Corporation) C:\windows\system32\wow64win.dll
2014-04-15 20:27 - 2014-03-04 11:44 - 00243712 _____ (Microsoft Corporation) C:\windows\system32\wow64.dll
2014-04-15 20:27 - 2014-03-04 11:44 - 00016384 _____ (Microsoft Corporation) C:\windows\system32\ntvdm64.dll
2014-04-15 20:27 - 2014-03-04 11:44 - 00013312 _____ (Microsoft Corporation) C:\windows\system32\wow64cpu.dll
2014-04-15 20:27 - 2014-03-04 11:17 - 00014336 _____ (Microsoft Corporation) C:\windows\SysWOW64\ntvdm64.dll
2014-04-15 20:27 - 2014-03-04 11:16 - 01114112 _____ (Microsoft Corporation) C:\windows\SysWOW64\kernel32.dll
2014-04-15 20:27 - 2014-03-04 11:16 - 00025600 _____ (Microsoft Corporation) C:\windows\SysWOW64\setup16.exe
2014-04-15 20:27 - 2014-03-04 11:16 - 00005120 _____ (Microsoft Corporation) C:\windows\SysWOW64\wow32.dll
2014-04-15 20:27 - 2014-03-04 10:09 - 00007680 _____ (Microsoft Corporation) C:\windows\SysWOW64\instnm.exe
2014-04-15 20:27 - 2014-03-04 10:09 - 00002048 _____ (Microsoft Corporation) C:\windows\SysWOW64\user.exe
2014-04-15 20:27 - 2014-02-04 04:35 - 00274880 _____ (Microsoft Corporation) C:\windows\system32\Drivers\msiscsi.sys
2014-04-15 20:27 - 2014-02-04 04:35 - 00190912 _____ (Microsoft Corporation) C:\windows\system32\Drivers\storport.sys
2014-04-15 20:27 - 2014-02-04 04:35 - 00027584 _____ (Microsoft Corporation) C:\windows\system32\Drivers\Diskdump.sys
2014-04-15 20:27 - 2014-02-04 04:28 - 00002048 _____ (Microsoft Corporation) C:\windows\system32\iologmsg.dll
2014-04-15 20:27 - 2014-02-04 04:00 - 00002048 _____ (Microsoft Corporation) C:\windows\SysWOW64\iologmsg.dll
2014-04-15 20:27 - 2014-01-24 04:37 - 01684928 _____ (Microsoft Corporation) C:\windows\system32\Drivers\ntfs.sys
2014-04-15 20:20 - 2014-04-15 20:27 - 116109639 _____ () C:\Users\ideacentre\Downloads\McAfee-AntiVirus-Plus-Cracked-DLL-janco.rar
2014-03-30 08:40 - 2014-03-30 08:40 - 00000000 ____D () C:\zaloha outlook ideacentre

==================== One Month Modified Files and Folders =======

2014-04-23 12:20 - 2014-04-23 12:20 - 00022816 _____ () C:\Users\ideacentre\Desktop\FRST.txt
2014-04-23 12:20 - 2014-04-23 12:13 - 00000000 ____D () C:\FRST
2014-04-23 12:18 - 2011-12-24 01:18 - 00000950 _____ () C:\windows\Tasks\GoogleUpdateTaskMachineUA.job
2014-04-23 12:16 - 2014-04-23 12:16 - 00112640 _____ (forum.viry.cz) C:\Users\ideacentre\Desktop\FRSTLauncher.exe
2014-04-23 12:16 - 2014-01-20 17:09 - 00000000 ____D () C:\Users\ideacentre\Documents\Súbory programu Outlook
2014-04-23 12:15 - 2014-04-23 12:15 - 02061312 _____ (Farbar) C:\Users\ideacentre\Desktop\FRST64.exe
2014-04-23 12:06 - 2014-01-20 19:16 - 00000000 ____D () C:\Users\ideacentre\AppData\Roaming\Skype
2014-04-23 11:26 - 2014-02-25 20:40 - 00000830 _____ () C:\windows\Tasks\Adobe Flash Player Updater.job
2014-04-23 11:21 - 2011-12-24 00:18 - 01056126 _____ () C:\windows\WindowsUpdate.log
2014-04-23 09:38 - 2009-07-14 06:45 - 00020688 ____H () C:\windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-04-23 09:38 - 2009-07-14 06:45 - 00020688 ____H () C:\windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-04-23 09:36 - 2014-04-23 09:36 - 00000000 ____D () C:\Users\ideacentre\AppData\Local\GHISLER
2014-04-23 08:22 - 2009-07-14 07:13 - 00786558 _____ () C:\windows\system32\PerfStringBackup.INI
2014-04-23 08:07 - 2011-12-24 01:17 - 00498325 _____ () C:\windows\system32\fastboot.set
2014-04-23 08:06 - 2014-01-21 14:52 - 00002008 _____ () C:\windows\Tasks\Apps Hat-chromeinstaller.job
2014-04-23 08:06 - 2011-12-24 01:18 - 00000946 _____ () C:\windows\Tasks\GoogleUpdateTaskMachineCore.job
2014-04-23 08:06 - 2011-12-24 00:20 - 00000000 ____D () C:\ProgramData\NVIDIA
2014-04-23 08:06 - 2009-07-14 07:08 - 00000006 ____H () C:\windows\Tasks\SA.DAT
2014-04-23 08:06 - 2009-07-14 06:51 - 00003661 _____ () C:\windows\setupact.log
2014-04-22 15:32 - 2014-04-22 15:32 - 06780928 _____ () C:\Users\ideacentre\Downloads\Finacny_Manazment_7semester_148slidov.ppt
2014-04-21 19:44 - 2014-04-21 19:44 - 00903288 _____ () C:\Users\ideacentre\Downloads\yet_another_cleaner_mat (1).exe
2014-04-21 19:35 - 2014-02-06 15:34 - 00000121 _____ () C:\Users\Public\LMDebug.log
2014-04-18 09:02 - 2014-04-18 09:02 - 00903288 _____ () C:\Users\ideacentre\Downloads\yet_another_cleaner_mat.exe
2014-04-17 14:14 - 2014-04-17 14:14 - 00005783 _____ () C:\Users\ideacentre\Desktop\Photoshop - odkaz.lnk
2014-04-17 13:52 - 2014-01-21 13:14 - 00000000 ____D () C:\Users\ideacentre\AppData\Local\Adobe
2014-04-17 12:48 - 2014-01-16 16:01 - 00000000 ____D () C:\Users\ideacentre\AppData\Roaming\Adobe
2014-04-16 12:22 - 2011-12-24 00:31 - 00791308 _____ () C:\windows\SysWOW64\PerfStringBackup.INI
2014-04-16 08:59 - 2010-11-21 05:47 - 00271256 _____ () C:\windows\PFRO.log
2014-04-15 20:42 - 2014-01-19 19:58 - 00000000 ____D () C:\ProgramData\Microsoft Help
2014-04-15 20:41 - 2014-01-22 17:13 - 00000000 ____D () C:\windows\system32\MRT
2014-04-15 20:40 - 2014-01-22 17:13 - 90655440 _____ (Microsoft Corporation) C:\windows\system32\MRT.exe
2014-04-15 20:36 - 2011-12-24 01:00 - 00000000 ____D () C:\ProgramData\McAfee
2014-04-15 20:36 - 2011-12-24 01:00 - 00000000 ____D () C:\Program Files\Common Files\mcafee
2014-04-15 20:35 - 2014-04-15 20:35 - 00000000 ____D () C:\Users\ideacentre\Downloads\McAfee-AntiVirus-Plus-Cracked-DLL-janco
2014-04-15 20:35 - 2014-04-15 20:35 - 00000000 ____D () C:\Program Files\McAfee.com
2014-04-15 20:35 - 2014-04-15 20:35 - 00000000 ____D () C:\Program Files\McAfee
2014-04-15 20:32 - 2011-12-24 01:00 - 00000000 ____D () C:\Program Files (x86)\McAfee
2014-04-15 20:28 - 2014-02-16 16:50 - 00000000 ____D () C:\Users\Administrator
2014-04-15 20:27 - 2014-04-15 20:20 - 116109639 _____ () C:\Users\ideacentre\Downloads\McAfee-AntiVirus-Plus-Cracked-DLL-janco.rar
2014-04-15 20:26 - 2014-01-17 16:39 - 00001090 _____ () C:\Users\Public\Desktop\TeamViewer 9.lnk
2014-04-15 20:13 - 2011-12-24 01:18 - 00003946 _____ () C:\windows\System32\Tasks\GoogleUpdateTaskMachineUA
2014-04-15 20:13 - 2011-12-24 01:18 - 00003694 _____ () C:\windows\System32\Tasks\GoogleUpdateTaskMachineCore
2014-04-15 20:11 - 2014-01-21 14:43 - 00258830 _____ () C:\windows\DPINST.LOG
2014-04-15 20:10 - 2014-01-21 14:43 - 00002026 _____ () C:\Users\Public\Desktop\Sony PC Companion 2.1.lnk
2014-04-15 20:10 - 2011-12-24 00:16 - 00000000 ___HD () C:\Program Files (x86)\InstallShield Installation Information
2014-03-31 09:35 - 2010-11-21 05:27 - 00270496 ____N (Microsoft Corporation) C:\windows\system32\MpSigStub.exe
2014-03-30 08:40 - 2014-03-30 08:40 - 00000000 ____D () C:\zaloha outlook ideacentre

Files to move or delete:
====================
C:\ProgramData\flashax10.exe


Some content of TEMP:
====================
C:\Users\ideacentre\AppData\Local\Temp\917b0b87-3358-4e79-93de-3dfc2fc99ed0.exe
C:\Users\ideacentre\AppData\Local\Temp\ose00000.exe
C:\Users\ideacentre\AppData\Local\Temp\UN32.EXE


==================== Bamital & volsnap Check =================

C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\rpcss.dll => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit


LastRegBack: 2014-03-14 14:15




===***===***===***=== Extract of Additional scan result of Farbar Recovery Scan Tool ===***===***===***===

==================== Drive and Memory info ===================

Drive c: () (Fixed) (Total:440.59 GB) (Free:376.01 GB) NTFS ==>[Drive with boot components (obtained from BCD)]
Drive e: () (Removable) (Total:3.8 GB) (Free:3.78 GB) FAT32
Drive f: (DATA) (Fixed) (Total:1397.15 GB) (Free:1187.98 GB) NTFS
Drive g: () (Removable) (Total:14.77 GB) (Free:11.19 GB) FAT32

Available physical RAM: 5196.13 MB
Total physical RAM: 8171.64 MB
Percentage of memory in use: 36%

==================== MBR and Partition Table ==================

Disk: 0 (MBR Code: Windows 7 or 8) (Size: 1863 GB) (Disk ID: D19F8542)
Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=441 GB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=-198627950592) - (Type=05)
Disk: 1 (Size: 4 GB) (Disk ID: 4550B0C9)
Partition 1: (Not Active) - (Size=4 GB) - (Type=0B)
Disk: 2 (Size: 15 GB) (Disk ID: 2A4D5F7C)
Partition 1: (Active) - (Size=15 GB) - (Type=0C)

==================== Scheduled Tasks (whitelisted) ==================

Task: C:\windows\Tasks\Adobe Flash Player Updater.job => C:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\windows\Tasks\Apps Hat-chromeinstaller.job => C:\Program Files (x86)\Apps Hat\Apps Hat-chromeinstaller.exe <==== ATTENTION
Task: C:\windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe

==================== Alternate Data Streams (whitelisted) ==================


==================== Security Center ==================

AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}



===***===***===***=== Supplementary Scan createdy by FRSTLauncher ===***===***===***===
Posledni aktualizace FRSTLauncheru: 25_11_2013 (01)
Posledni aktualizace Modifikacniho skriptu: 30_09_2013 (01)


***** Velikost "Plochy" *****

Velikost slozky "C:\Users\ideacentre\Desktop" je 2 MB.


***** Startup Programs *****


***** Firewall rules *****

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
EnableFirewall REG_DWORD 0x1
DisableNotifications REG_DWORD 0x0

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
EnableFirewall REG_DWORD 0x1
DisableNotifications REG_DWORD 0x0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\GloballyOpenPorts\List]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\GloballyOpenPorts\List]


***** System Restore *****

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SystemRestore]
"Generalize_DisableSR"=dword:00000000


==================== End Of Log ==============================
Přílohy
Addition.rar
Additional scan result v RARe
(11.05 KiB) Staženo 77 x
Nahoru
Avatar uživatele
vyosek
VIP
VIP
Příspěvky: 56365
Registrován: 07 Lis 2006 15:24
Místo/Bydliště: Šalingrad - Brno

Re: virus alebo cerv v mojom PC s win 7

#2 Příspěvek od vyosek »

Zdravim :)

:arrow: Stahnete Junkware Removal Tool http://thisisudax.org/downloads/JRT.exe
  • Ulozte nejlepe na plochu
  • Po spusteni se zobrazi licencni podminky, stisknete libovolnou klavesu
  • Probehne vytvoreni zalohy a nasledne prohledavani
  • Probehne skenovani a pak se objevi log, pripadne bude ulozen v c:\JRT jako JRT.txt, ten sem vlozte
:arrow: Stahnete AdwCleaner http://general-changelog-team.fr/fr/dow ... adwcleaner
  • Ulozte nejlepe na plochu
  • Ukoncete vsechny programy
  • Kliknete na Scan a nasledne Clean
  • Probehne oprava, restart PC a pak se objevi log, pripadne bude ulozen ve slozce c:\AdwCleaner\AdwCleaner[S?].txt, ten sem vlozte
"Kdo víno má a nepije,kdo hrozny má a nejí je, kdo ženu má a nelíbá, kdo zábavě se vyhýbá, na toho vemte bič a hůl, to není člověk, to je vůl."
Člen Obrázek od 1. února 2011.
Nahoru
solide
Návštěvník
Návštěvník
Příspěvky: 58
Registrován: 07 Lis 2006 09:41

Re: virus alebo cerv v mojom PC s win 7

#3 Příspěvek od solide »

prikladam log z JRT:

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Junkware Removal Tool (JRT) by Thisisu
Version: 6.1.4 (04.06.2014:1)
OS: Windows 7 Home Premium x64
Ran by ideacentre on st 23. 04. 2014 at 12:41:32,21
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~




~~~ Services



~~~ Registry Values



~~~ Registry Keys



~~~ Files



~~~ Folders



~~~ FireFox

Successfully deleted the following from C:\Users\ideacentre\AppData\Roaming\mozilla\firefox\profiles\m8jb4xws.default\prefs.js

user_pref("extensions.a39ed7c16185d4f88b976666d4928ba01fe4550c17a4f4a62ad1c45e0afdf81a4com48559.48559.internaldb.Resources_meta.value", "%7B%2219x19.png%22%3A%7B%22id%22%3A485
user_pref("extensions.a39ed7c16185d4f88b976666d4928ba01fe4550c17a4f4a62ad1c45e0afdf81a4com48559.48559.internaldb.Resources_resource_485550.value", "%22data%3Aimage/png%3Bbase6
user_pref("extensions.crossrider.bic", "144028753f5664524e2b2c778ca9209b");



~~~ Event Viewer Logs were cleared





~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on st 23. 04. 2014 at 12:47:06,91
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Nahoru
solide
Návštěvník
Návštěvník
Příspěvky: 58
Registrován: 07 Lis 2006 09:41

Re: virus alebo cerv v mojom PC s win 7

#4 Příspěvek od solide »

pocitac som "vycistil" adwar cleanerom, presne podla postupu. po zaverecnom restarte a nastartovani mi prestal ist IE, Google chrome sa spusti ale opat rovnako, chce instalovat subor: yet_another_cleaner_mat co som pisal. Prikladam log adwar cleaner SO


# AdwCleaner v3.201 - Report created 23/04/2014 at 12:51:27
# Updated 22/04/2014 by Xplode
# Operating System : Windows 7 Home Premium Service Pack 1 (64 bits)
# Username : ideacentre - IDEACENTRE-PC
# Running from : C:\Users\ideacentre\Desktop\adwcleaner.exe
# Option : Clean

***** [ Services ] *****


***** [ Files / Folders ] *****

Folder Deleted : C:\Users\ideacentre\.android
Folder Deleted : C:\Users\ideacentre\AppData\Local\AppsHat Mobile Apps
Folder Deleted : C:\Users\ideacentre\AppData\Local\webplayer
Folder Deleted : C:\Users\ideacentre\AppData\Roaming\eCyber
Folder Deleted : C:\Users\Ivetka\AppData\Roaming\eCyber
Folder Deleted : C:\Users\Ivetka\AppData\Roaming\iSafe

***** [ Shortcuts ] *****

Shortcut Disinfected : C:\Users\ideacentre\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\AppsHat\Uninstall.lnk

***** [ Registry ] *****

Value Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Run [AppsHat]
Key Deleted : HKCU\Software\Webplayer
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\AppsHat Mobile Apps

***** [ Browsers ] *****

-\\ Internet Explorer v10.0.9200.16866


-\\ Mozilla Firefox v26.0 (sk)

[ File : C:\Users\ideacentre\AppData\Roaming\Mozilla\Firefox\Profiles\m8jb4xws.default\prefs.js ]


-\\ Google Chrome v34.0.1847.116

[ File : C:\Users\ideacentre\AppData\Local\Google\Chrome\User Data\Default\preferences ]


[ File : C:\Users\Ivetka\AppData\Local\Google\Chrome\User Data\Default\preferences ]


*************************

AdwCleaner[R0].txt - [1761 octets] - [23/04/2014 12:50:32]
AdwCleaner[S0].txt - [1615 octets] - [23/04/2014 12:51:27]

########## EOF - C:\AdwCleaner\AdwCleaner[S0].txt - [1675 octets] ##########
_
Nahoru
Avatar uživatele
vyosek
VIP
VIP
Příspěvky: 56365
Registrován: 07 Lis 2006 15:24
Místo/Bydliště: Šalingrad - Brno

Re: virus alebo cerv v mojom PC s win 7

#5 Příspěvek od vyosek »

:arrow: Pokracujem tedy dale :James008:

:arrow: Stahnete Zoek.exe http://hijackthis.nl/smeenk/ a ulozte jej na plochu
  • Pokud pouzivate Win Vista ci W7, kliknete na Zoek pravym a dejte Run As Administrator ci Spustit jako spravce
  • Do okna vlozte skript nize

  • Kód: Vybrat vše

    autoclean;
emptyclsid;
iedefaults;
FFdefaults;
CHRdefaults;
emptyalltemp;
resethosts;
  • Nasledne kliknete na Run Script
  • PC provede opravu, restartuje se a da Vam log, jeho obsah vlozte sem
"Kdo víno má a nepije,kdo hrozny má a nejí je, kdo ženu má a nelíbá, kdo zábavě se vyhýbá, na toho vemte bič a hůl, to není člověk, to je vůl."
Člen Obrázek od 1. února 2011.
Nahoru
Odpovědět

Vrátit se na „Řešení problémů, logy“