wifi-omezeny pristup/instalace ovladace-pristup odepren, atd

Zpráva

daleko · #1 Příspěvek od **daleko** » 08 kvě 2014 02:20

Dobry den,
objevilo se nekolik po sobe jdoucich problemu:
1) vlozen cizy flaskdisk - nenainstalovany ovladace, neni mozna jakakoliv prace s ni
2) o nekolik dni pozdeji nesel ntb vubec vypnout ani restartovat
3) pres USB pripojen mobil drive normalne spolupracujici, ale najednou nespolupracuje

nekde jsem nasel radu a odinstaloval antivirus (avast) a firewall (comodo) a spolu s nim pro mne neznamy soubor comodo dragon - odinstalovano pomoci Advanced Unistaler Pro

4) ihned po restartu wifi zahlasila "omozeny pristup" a nelze se pripojit na net, po diagnostice hlasi problem se sitovym adapterem (wifi, bluethoot, LAN)
5) pri pokusu o preinstalaci ovladace adapteru wifi vyskocilo hlaseni, ze software byl nalezen, ale "pristup byl odepren" (vse provadeno jako spravce)

Omluvte nepritomnost diakritiky a nestandartni casy komunikace, pisu z ciziho pc z opacne strany zemekoule.

Prosim o radu ci pomoc. Prikladam Logy z FRST64.
Dekuji

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 08-05-2014 01
Ran by spravce (administrator) on LENOVO-PC on 08-05-2014 02:53:37
Running from C:\Users\spravce\Desktop
Windows 7 Ultimate Service Pack 1 (X64) OS Language: Czech
Internet Explorer Version 11
Boot Mode: Normal

The only official download link for FRST:
Download link for 32-Bit version: http://www.bleepingcomputer.com/downloa ... ool/dl/81/
Download link for 64-Bit Version: http://www.bleepingcomputer.com/downloa ... ool/dl/82/
Download link from any site other than Bleeping Computer is unpermitted or outdated.
See tutorial for FRST: http://www.geekstogo.com/forum/topic/33 ... scan-tool/

==================== Processes (Whitelisted) =================

(Comodo Security Solutions, Inc.) C:\Program Files (x86)\Common Files\COMODO\launcher_service.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
(IDT, Inc.) C:\Program Files\IDT\WDM\stacsv64.exe
(Microsoft Corporation) C:\Windows\System32\wlanext.exe
(APN LLC.) C:\Program Files (x86)\AskPartnerNetwork\Toolbar\apnmcp.exe
(Qualcomm Atheros Commnucations) C:\Program Files (x86)\Bluetooth Suite\AdminService.exe
(Microsoft Corporation) C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe
(Microsoft Corporation) C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe
(Bandoo Media Inc) C:\Program Files (x86)\Movies Toolbar\Datamngr\DatamngrCoordinator.exe
(Comodo Security Solutions, Inc.) C:\Program Files (x86)\Common Files\COMODO\GeekBuddyRSP.exe
(Bandoo Media Inc) C:\Program Files (x86)\Movies Toolbar\Datamngr\DatamngrCoordinator.exe
(Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\Jhi_service.exe
(Atheros) C:\Program Files (x86)\Bluetooth Suite\Ath_CoexAgent.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
(Qualcomm Atheros Commnucations) C:\Program Files (x86)\Bluetooth Suite\BtvStack.exe
(ELAN Microelectronics Corp.) C:\Program Files\Elantech\ETDCtrl.exe
(IDT, Inc.) C:\Program Files\IDT\WDM\sttray64.exe
(Dolby Laboratories Inc.) C:\Program Files (x86)\Dolby Advanced Audio v2\pcee4.exe
(Intel Corporation) C:\Windows\System32\igfxtray.exe
(Intel Corporation) C:\Windows\System32\hkcmd.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
(Lenovo (Beijing) Limited) C:\Program Files (x86)\Lenovo\Energy Management\Energy Management.exe
(Lenovo(beijing) Limited) C:\Program Files (x86)\Lenovo\Energy Management\utility.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Integrated Clock Controller Service\ICCProxy.exe
(Comodo Security Solutions, Inc.) C:\Program Files (x86)\Comodo\GeekBuddy\unit_manager.exe
(Comodo Security Solutions, Inc.) C:\Program Files (x86)\Comodo\GeekBuddy\unit.exe
(ELAN Microelectronics Corp.) C:\Program Files\Elantech\ETDCtrlHelper.exe
(ELAN Microelectronics Corp.) C:\Program Files\Elantech\ETDIntelligent.exe
(Vimicro) C:\Program Files (x86)\USB Camera\VM331STI.EXE
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
() C:\Program Files (x86)\DivX\DivX Update\DivXUpdate.exe
() C:\Users\spravce\AppData\Roaming\Seznam.cz\bin\szndesktop.exe
(APN) C:\Program Files (x86)\AskPartnerNetwork\Toolbar\Updater\TBNotifier.exe
(Comodo Security Solutions, Inc.) C:\Program Files (x86)\Common Files\COMODO\GeekBuddyRSP.exe
(APN LLC.) C:\Users\spravce\AppData\Local\VNT\vntldr.exe
(Qualcomm Atheros) C:\Program Files (x86)\Bluetooth Suite\BtTray.exe
(Bandoo Media Inc) C:\Program Files (x86)\Movies Toolbar\Datamngr\DatamngrUI.exe
() C:\Users\spravce\AppData\Roaming\Seznam.cz\bin\chromeUpdatePref.exe

==================== Registry (Whitelisted) ==================

HKLM\...\Run: [ETDCtrl] => C:\Program Files\Elantech\ETDCtrl.exe [2876816 2013-03-06] (ELAN Microelectronics Corp.)
HKLM\...\Run: [SysTrayApp] => C:\Program Files\IDT\WDM\sttray64.exe [1703424 2013-04-25] (IDT, Inc.)
HKLM\...\Run: [DolbyTrayApp] => c:\program files (x86)\Dolby Advanced Audio v2\pcee4.exe [508144 2012-08-31] (Dolby Laboratories Inc.)
HKLM\...\Run: [Energy Management] => C:\Program Files (x86)\Lenovo\Energy Management\Energy Management.exe [17080376 2013-10-25] (Lenovo (Beijing) Limited)
HKLM\...\Run: [EnergyUtility] => C:\Program Files (x86)\Lenovo\Energy Management\Utility.exe [191544 2013-10-25] (Lenovo(beijing) Limited)
HKLM-x32\...\Run: [Dolby Advanced Audio v2] => C:\Program Files (x86)\Dolby Advanced Audio v2\pcee4.exe [508144 2012-08-31] (Dolby Laboratories Inc.)
HKLM-x32\...\Run: [331BigDog] => C:\Program Files (x86)\USB Camera\VM331STI.EXE [548864 2013-03-12] (Vimicro)
HKLM-x32\...\Run: [USB3MON] => C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe [292088 2013-02-22] (Intel Corporation)
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [254336 2013-07-02] (Oracle Corporation)
HKLM-x32\...\Run: [Adobe ARM] => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959904 2013-11-21] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [BCSSync] => C:\Program Files (x86)\Microsoft Office\Office14\BCSSync.exe [89184 2012-11-05] (Microsoft Corporation)
HKLM-x32\...\Run: [DivXMediaServer] => C:\Program Files (x86)\DivX\DivX Media Server\DivXMediaServer.exe [450560 2013-12-23] (DivX, LLC)
HKLM-x32\...\Run: [DivXUpdate] => C:\Program Files (x86)\DivX\DivX Update\DivXUpdate.exe [1861968 2013-11-15] ()
HKLM-x32\...\Run: [seznam-listicka-distribuce] => C:\Program Files (x86)\Seznam.cz\distribution\szninstall.exe [1062472 2013-05-16] ()
HKLM-x32\...\Run: [ApnTBMon] => C:\Program Files (x86)\AskPartnerNetwork\Toolbar\Updater\TBNotifier.exe [1758160 2014-02-13] (APN)
HKLM-x32\...\Run: [VNT] => C:\Program Files (x86)\VNT\vntldr.exe [195536 2014-02-13] (APN LLC.)
HKLM-x32\...\Run: [tvncontrol] => C:\Program Files (x86)\Common Files\COMODO\GeekBuddyRSP.exe [2327248 2014-03-20] (Comodo Security Solutions, Inc.)
Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation)
HKLM\...\Policies\Explorer\Run: [BtvStack] => C:\Program Files (x86)\Bluetooth Suite\BtvStack.exe [131712 2013-01-25] ( (Qualcomm Atheros Commnucations))
HKU\.DEFAULT\...\RunOnce: [SPReview] - C:\Windows\System32\SPReview\SPReview.exe [301568 2013-11-10] (Microsoft Corporation)
HKU\S-1-5-21-2337024723-3800431968-2900454187-1003\...\Run: [Seznam.chromeUpdatePref] => C:\Users\spravce\AppData\Roaming\Seznam.cz\bin\chromeUpdatePref.exe [942080 2013-02-13] ()
HKU\S-1-5-21-2337024723-3800431968-2900454187-1003\...\Run: [cz.seznam.software.szndesktop] => C:\Users\spravce\AppData\Roaming\Seznam.cz\bin\wszndesktop.exe [92152 2013-01-22] ()
HKU\S-1-5-21-2337024723-3800431968-2900454187-1003\...\Run: [cz.seznam.software.autoupdate] => C:\Users\spravce\AppData\Roaming\Seznam.cz\szninstall.exe [1009288 2012-09-13] ()
IFEO\bitguard.exe: [Debugger] tasklist.exe
IFEO\bprotect.exe: [Debugger] tasklist.exe
IFEO\bpsvc.exe: [Debugger] tasklist.exe
IFEO\browsemngr.exe: [Debugger] tasklist.exe
IFEO\browserdefender.exe: [Debugger] tasklist.exe
IFEO\browsermngr.exe: [Debugger] tasklist.exe
IFEO\browserprotect.exe: [Debugger] tasklist.exe
IFEO\browsersafeguard.exe: [Debugger] tasklist.exe
IFEO\bundlesweetimsetup.exe: [Debugger] tasklist.exe
IFEO\cltmngsvc.exe: [Debugger] tasklist.exe
IFEO\delta babylon.exe: [Debugger] tasklist.exe
IFEO\delta tb.exe: [Debugger] tasklist.exe
IFEO\delta2.exe: [Debugger] tasklist.exe
IFEO\deltainstaller.exe: [Debugger] tasklist.exe
IFEO\deltasetup.exe: [Debugger] tasklist.exe
IFEO\deltatb.exe: [Debugger] tasklist.exe
IFEO\deltatb_2501-c733154b.exe: [Debugger] tasklist.exe
IFEO\dprotectsvc.exe: [Debugger] tasklist.exe
IFEO\iminentsetup.exe: [Debugger] tasklist.exe
IFEO\jumpflip: [Debugger] tasklist.exe
IFEO\protectedsearch.exe: [Debugger] tasklist.exe
IFEO\rjatydimofu.exe: [Debugger] tasklist.exe
IFEO\searchinstaller.exe: [Debugger] tasklist.exe
IFEO\searchprotection.exe: [Debugger] tasklist.exe
IFEO\searchprotector.exe: [Debugger] tasklist.exe
IFEO\searchsettings.exe: [Debugger] tasklist.exe
IFEO\searchsettings64.exe: [Debugger] tasklist.exe
IFEO\snapdo.exe: [Debugger] tasklist.exe
IFEO\stinst32.exe: [Debugger] tasklist.exe
IFEO\stinst64.exe: [Debugger] tasklist.exe
IFEO\sweetimsetup.exe: [Debugger] tasklist.exe
IFEO\tbdelta.exetoolbar783881609.exe: [Debugger] tasklist.exe
IFEO\umbrella.exe: [Debugger] tasklist.exe
IFEO\utiljumpflip.exe: [Debugger] tasklist.exe
IFEO\volaro: [Debugger] tasklist.exe
IFEO\vonteera: [Debugger] tasklist.exe
IFEO\websteroids.exe: [Debugger] tasklist.exe
IFEO\websteroidsservice.exe: [Debugger] tasklist.exe
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Start GeekBuddy.lnk
ShortcutTarget: Start GeekBuddy.lnk -> C:\Program Files (x86)\Comodo\GeekBuddy\launcher.exe (Comodo Security Solutions, Inc.)
HKLM\...\AppCertDlls: [x86] -> C:\Program Files (x86)\Movies Toolbar\Datamngr\apcrtldr.dll [490496 2014-04-13] () <===== ATTENTION
HKLM\...\AppCertDlls: [x64] -> C:\Program Files (x86)\Movies Toolbar\Datamngr\x64\apcrtldr.dll [665088 2014-04-13] () <===== ATTENTION

==================== Internet (Whitelisted) ====================

SearchScopes: HKLM - {9BB47C17-9C68-4BB3-B188-DD9AF0FD2406} URL = http://dts.search.ask.com/sr?src=ieb&gc ... earchTerms}
SearchScopes: HKLM-x32 - {9BB47C17-9C68-4BB3-B188-DD9AF0FD2406} URL = http://dts.search.ask.com/sr?src=ieb&gc ... earchTerms}
BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files\Microsoft Office\Office14\GROOVEEX.DLL (Microsoft Corporation)
BHO: Skype add-on for Internet Explorer - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll (Microsoft Corporation)
BHO: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)
BHO: Movies Toolbar (Dist. by Bandoo Media, Inc.) - {d1dac034-9fd9-4c13-a388-d2e10e57707f} - C:\Program Files (x86)\Movies Toolbar\Datamngr\SRTOOL~1\IE\searchresultsDx64.dll ()
BHO-x32: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files (x86)\Microsoft Office\Office14\GROOVEEX.DLL (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO-x32: Skype Browser Helper - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll (Microsoft Corporation)
BHO-x32: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files (x86)\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
Toolbar: HKLM - avast! WebRep - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - No File
Toolbar: HKLM - Movies Toolbar (Dist. by Bandoo Media, Inc.) - {d1dac034-9fd9-4c13-a388-d2e10e57707f} - C:\Program Files (x86)\Movies Toolbar\Datamngr\SRTOOL~1\IE\searchresultsDx64.dll ()
Toolbar: HKLM - No Name - {CC1A175A-E45B-41ED-A30C-C9B1D7A0C02F} - No File
Handler: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll (Microsoft Corporation)
Handler-x32: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll (Microsoft Corporation)
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Tcpip\Parameters: [DhcpNameServer] 192.168.1.254
Tcpip\..\Interfaces\{0FE64004-DD9C-4D1D-98DF-FEDBFEE6D324}: [NameServer]156.154.70.22,156.154.71.22
Tcpip\..\Interfaces\{4C7D31AD-CE0E-4D28-B5C7-6062BE47A2F8}: [NameServer]156.154.70.22,156.154.71.22

FireFox:
========
FF Plugin: @microsoft.com/GENUINE - disabled No File
FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 - C:\PROGRA~1\MICROS~2\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF Plugin-x32: @divx.com/DivX VOD Helper,version=1.0.0 - C:\Program Files (x86)\DivX\DivX OVS Helper\npovshelper.dll (DivX, LLC.)
FF Plugin-x32: @divx.com/DivX Web Player Plug-In,version=1.0.0 - C:\Program Files (x86)\DivX\DivX Web Player\npdivx32.dll (DivX, LLC)
FF Plugin-x32: @google.com/npPicasa3,version=3.0.0 - C:\Program Files (x86)\Google\Picasa3\npPicasa3.dll (Google, Inc.)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=2.1.42 - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll (Intel Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll (Intel Corporation)
FF Plugin-x32: @java.com/DTPlugin,version=10.45.2 - C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=10.45.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @microsoft.com/GENUINE - disabled No File
FF Plugin-x32: @microsoft.com/OfficeAuthz,version=14.0 - C:\PROGRA~2\MICROS~1\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 - C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL (Microsoft Corporation)
FF Plugin-x32: @nvidia.com/3DVision - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation)
FF Plugin-x32: @nvidia.com/3DVisionStreaming - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.24.7\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.24.7\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)

Chrome:
=======
CHR HomePage: hxxp://www.seznam.cz/?clid=12454
CHR Extension: (Ask Toolbar) - C:\Users\spravce\AppData\Local\Google\Chrome\User Data\Default\Extensions\aaaajfocmnnhjaajccaelhippajhaeod [2014-05-07]
CHR Extension: (Docs) - C:\Users\spravce\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2014-05-07]
CHR Extension: (Disk Google) - C:\Users\spravce\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2014-05-07]
CHR Extension: (YouTube) - C:\Users\spravce\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2014-05-07]
CHR Extension: (Vyhledávání Google) - C:\Users\spravce\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2014-05-07]
CHR Extension: (Skype Click to Call) - C:\Users\spravce\AppData\Local\Google\Chrome\User Data\Default\Extensions\lifbcibllhkdhoafpjfnlhfpfgnpldfl [2014-05-07]
CHR Extension: (Gmail) - C:\Users\spravce\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2014-05-07]
CHR HKLM-x32\...\Chrome\Extension: [aaaaabcbmongicmdegkmmfgdickgnnob] - C:\Users\LENOVO\AppData\Local\ilividmoviestoolbar181\GC\toolbar.crx [2013-12-11]
CHR HKLM-x32\...\Chrome\Extension: [aaaajfocmnnhjaajccaelhippajhaeod] - C:\ProgramData\AskPartnerNetwork\Toolbar\ATU4-V7\CRX\ToolbarCR.crx [2014-02-24]
CHR HKLM-x32\...\Chrome\Extension: [lifbcibllhkdhoafpjfnlhfpfgnpldfl] - C:\Program Files (x86)\Skype\Toolbars\ChromeExtension\skype_chrome_extension.crx [2014-03-03]

==================== Services (Whitelisted) =================

R2 APNMCP; C:\Program Files (x86)\AskPartnerNetwork\Toolbar\apnmcp.exe [166352 2014-02-13] (APN LLC.)
R2 AtherosSvc; C:\Program Files (x86)\Bluetooth Suite\adminservice.exe [227456 2013-01-25] (Qualcomm Atheros Commnucations)
R2 c2cautoupdatesvc; C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe [1363584 2014-03-03] (Microsoft Corporation)
R2 c2cpnrsvc; C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe [1748608 2014-03-03] (Microsoft Corporation)
R2 CLPSLauncher; C:\Program Files (x86)\Common Files\COMODO\launcher_service.exe [70352 2014-03-20] (Comodo Security Solutions, Inc.)
R2 DatamngrCoordinator; C:\Program Files (x86)\Movies Toolbar\Datamngr\DatamngrCoordinator.exe [3545088 2014-04-13] (Bandoo Media Inc)
R2 GeekBuddyRSP; C:\Program Files (x86)\Common Files\COMODO\GeekBuddyRSP.exe [2327248 2014-03-20] (Comodo Security Solutions, Inc.)
R2 Intel(R) ME Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe [128896 2012-09-18] (Intel Corporation)
R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [165760 2012-09-18] (Intel Corporation)
R2 ZAtheros Bt and Wlan Coex Agent; C:\Program Files (x86)\Bluetooth Suite\Ath_CoexAgent.exe [323584 2013-01-24] (Atheros)

==================== Drivers (Whitelisted) ====================

R3 bcbtums; C:\Windows\System32\drivers\bcbtums.sys [170200 2013-03-27] (Broadcom Corporation.)
R3 BTATH_LWFLT; C:\Windows\System32\DRIVERS\btath_lwflt.sys [77464 2013-01-24] (Qualcomm Atheros)
R1 dtsoftbus01; C:\Windows\System32\DRIVERS\dtsoftbus01.sys [283064 2014-01-19] (Disc Soft Ltd)
R1 F06DEFF2-5B9C-490D-910F-35D3A9119622; C:\Program Files (x86)\Movies Toolbar\Datamngr\x64\setmgrc1.cfg [36216 2014-04-13] (Bandoo Media Inc)
R3 L1C; C:\Windows\System32\DRIVERS\L1C62x64.sys [117912 2012-11-20] (Qualcomm Atheros Co., Ltd.)
R3 vm331avs; C:\Windows\System32\Drivers\vm331avs.sys [1049984 2013-03-15] (Vimicro Corporation)
S3 Synth3dVsc; System32\drivers\synth3dvsc.sys [X]
S3 tsusbhub; system32\drivers\tsusbhub.sys [X]
S3 VGPU; System32\drivers\rdvgkmd.sys [X]

==================== NetSvcs (Whitelisted) ===================

==================== One Month Created Files and Folders ========

2014-05-08 02:53 - 2014-05-08 02:53 - 00019018 _____ () C:\Users\spravce\Desktop\FRST.txt
2014-05-08 02:52 - 2014-05-08 02:53 - 00000000 ____D () C:\FRST
2014-05-08 02:50 - 2014-05-08 12:30 - 02063872 _____ (Farbar) C:\Users\spravce\Desktop\FRST64.exe
2014-05-08 01:31 - 2014-05-08 11:27 - 64576296 _____ (Lenovo Group Limited ) C:\Users\spravce\Desktop\wlan120w7.exe
2014-05-08 01:31 - 2014-05-08 01:31 - 00000000 ____D () C:\Users\spravce\AppData\Roaming\WinRAR
2014-05-07 23:36 - 2014-05-07 23:36 - 00000000 ____D () C:\Users\spravce\AppData\Local\Innovative Solutions
2014-05-07 23:31 - 2014-05-07 23:31 - 00000000 ____D () C:\Users\spravce\AppData\Local\Google
2014-05-07 23:26 - 2014-05-07 23:26 - 00000000 ____D () C:\Users\spravce\Documents\Bluetooth Folder
2014-05-07 23:26 - 2014-05-07 23:26 - 00000000 ____D () C:\Users\spravce\AppData\Local\BMExplorer
2014-05-07 23:25 - 2014-05-08 01:42 - 00000000 ____D () C:\Users\spravce\AppData\Roaming\Seznam.cz
2014-05-07 23:25 - 2014-05-07 23:32 - 00002259 _____ () C:\Users\spravce\Desktop\Google Chrome.lnk
2014-05-07 23:25 - 2014-05-07 23:30 - 00000000 ___RD () C:\Users\spravce\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
2014-05-07 23:25 - 2014-05-07 23:30 - 00000000 ___RD () C:\Users\spravce\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance
2014-05-07 23:25 - 2014-05-07 23:30 - 00000000 ___RD () C:\Users\spravce\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools
2014-05-07 23:25 - 2014-05-07 23:30 - 00000000 ___RD () C:\Users\spravce\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories
2014-05-07 23:25 - 2014-05-07 23:30 - 00000000 ____D () C:\Users\spravce\AppData\Local\VNT
2014-05-07 23:25 - 2014-05-07 23:30 - 00000000 ____D () C:\Users\spravce
2014-05-07 23:25 - 2014-05-07 23:25 - 00001397 _____ () C:\Users\spravce\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2014-05-07 23:25 - 2014-05-07 23:25 - 00000020 ___SH () C:\Users\spravce\ntuser.ini
2014-05-07 23:25 - 2014-05-07 23:25 - 00000000 _SHDL () C:\Users\spravce\Šablony
2014-05-07 23:25 - 2014-05-07 23:25 - 00000000 _SHDL () C:\Users\spravce\Soubory cookie
2014-05-07 23:25 - 2014-05-07 23:25 - 00000000 _SHDL () C:\Users\spravce\Poslední
2014-05-07 23:25 - 2014-05-07 23:25 - 00000000 _SHDL () C:\Users\spravce\Okolní tiskárny
2014-05-07 23:25 - 2014-05-07 23:25 - 00000000 _SHDL () C:\Users\spravce\Okolní síť
2014-05-07 23:25 - 2014-05-07 23:25 - 00000000 _SHDL () C:\Users\spravce\Nabídka Start
2014-05-07 23:25 - 2014-05-07 23:25 - 00000000 _SHDL () C:\Users\spravce\Dokumenty
2014-05-07 23:25 - 2014-05-07 23:25 - 00000000 _SHDL () C:\Users\spravce\Documents\Obrázky
2014-05-07 23:25 - 2014-05-07 23:25 - 00000000 _SHDL () C:\Users\spravce\Documents\Hudba
2014-05-07 23:25 - 2014-05-07 23:25 - 00000000 _SHDL () C:\Users\spravce\Documents\Filmy
2014-05-07 23:25 - 2014-05-07 23:25 - 00000000 _SHDL () C:\Users\spravce\Data aplikací
2014-05-07 23:25 - 2014-05-07 23:25 - 00000000 _SHDL () C:\Users\spravce\AppData\Roaming\Microsoft\Windows\Start Menu\Programy
2014-05-07 23:25 - 2014-05-07 23:25 - 00000000 _SHDL () C:\Users\spravce\AppData\Local\Data aplikací
2014-05-07 23:25 - 2014-05-07 23:25 - 00000000 ____D () C:\Users\spravce\AppData\Roaming\Atheros
2014-05-07 23:25 - 2014-05-07 23:25 - 00000000 ____D () C:\Users\spravce\AppData\Roaming\Adobe
2014-05-07 23:25 - 2014-05-07 23:25 - 00000000 ____D () C:\Users\spravce\AppData\Local\VirtualStore
2014-05-07 23:25 - 2013-11-09 23:57 - 00000000 ____D () C:\Users\spravce\AppData\Local\Microsoft Help
2014-05-07 21:32 - 2014-05-08 01:34 - 00000392 _____ () C:\Windows\setupact.log
2014-05-07 21:32 - 2014-05-07 21:32 - 00000000 _____ () C:\Windows\setuperr.log
2014-05-07 10:21 - 2014-05-07 10:57 - 00007601 _____ () C:\Users\LENOVO\AppData\Local\resmon.resmoncfg
2014-05-07 10:01 - 2014-05-07 10:01 - 00000000 __SHD () C:\Users\LENOVO\AppData\Local\EmieUserList
2014-05-07 10:01 - 2014-05-07 10:01 - 00000000 __SHD () C:\Users\LENOVO\AppData\Local\EmieSiteList
2014-05-07 02:34 - 2014-05-07 23:30 - 00000000 ___SD () C:\Windows\system32\CompatTel
2014-05-07 02:34 - 2014-05-07 23:30 - 00000000 ____D () C:\Program Files\NVIDIA Corporation
2014-05-06 04:39 - 2014-04-14 04:24 - 00465408 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll
2014-05-06 04:39 - 2014-04-14 04:19 - 00424448 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll
2014-05-06 03:00 - 2014-04-29 16:01 - 23547904 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-05-06 03:00 - 2014-04-29 15:40 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2014-05-06 03:00 - 2014-04-29 14:48 - 17384448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2014-05-06 03:00 - 2014-04-29 14:34 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2014-05-02 02:04 - 2014-05-02 02:18 - 00943275 _____ () C:\Users\LENOVO\Downloads\cburner.0.7.0.426.zip
2014-04-27 09:33 - 2014-05-08 02:53 - 00000000 ____D () C:\ProgramData\Datamngr
2014-04-23 03:53 - 2014-03-06 11:31 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2014-04-23 03:53 - 2014-03-06 10:59 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2014-04-23 03:53 - 2014-03-06 10:57 - 00548352 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2014-04-23 03:53 - 2014-03-06 10:57 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2014-04-23 03:53 - 2014-03-06 10:53 - 02767360 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2014-04-23 03:53 - 2014-03-06 10:40 - 00051200 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2014-04-23 03:53 - 2014-03-06 10:39 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2014-04-23 03:53 - 2014-03-06 10:32 - 00574976 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2014-04-23 03:53 - 2014-03-06 10:29 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2014-04-23 03:53 - 2014-03-06 10:29 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2014-04-23 03:53 - 2014-03-06 10:28 - 00752640 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2014-04-23 03:53 - 2014-03-06 10:15 - 00940032 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2014-04-23 03:53 - 2014-03-06 10:11 - 05784064 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2014-04-23 03:53 - 2014-03-06 10:09 - 00453120 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2014-04-23 03:53 - 2014-03-06 10:03 - 00586240 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2014-04-23 03:53 - 2014-03-06 10:02 - 00455168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2014-04-23 03:53 - 2014-03-06 10:02 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2014-04-23 03:53 - 2014-03-06 10:01 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2014-04-23 03:53 - 2014-03-06 09:56 - 00038400 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2014-04-23 03:53 - 2014-03-06 09:48 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2014-04-23 03:53 - 2014-03-06 09:47 - 02178048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2014-04-23 03:53 - 2014-03-06 09:46 - 04254720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2014-04-23 03:53 - 2014-03-06 09:46 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2014-04-23 03:53 - 2014-03-06 09:45 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2014-04-23 03:53 - 2014-03-06 09:42 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2014-04-23 03:53 - 2014-03-06 09:40 - 00440832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2014-04-23 03:53 - 2014-03-06 09:38 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2014-04-23 03:53 - 2014-03-06 09:36 - 00592896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2014-04-23 03:53 - 2014-03-06 09:22 - 00367616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2014-04-23 03:53 - 2014-03-06 09:21 - 00628736 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2014-04-23 03:53 - 2014-03-06 09:13 - 00032256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll
2014-04-23 03:53 - 2014-03-06 09:11 - 02043904 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2014-04-23 03:53 - 2014-03-06 09:07 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2014-04-23 03:53 - 2014-03-06 09:01 - 00244224 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2014-04-23 03:53 - 2014-03-06 08:53 - 13551104 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2014-04-23 03:53 - 2014-03-06 08:46 - 00524288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2014-04-23 03:53 - 2014-03-06 08:40 - 01967104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2014-04-23 03:53 - 2014-03-06 08:36 - 11745792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2014-04-23 03:53 - 2014-03-06 08:22 - 02260480 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2014-04-23 03:53 - 2014-03-06 07:58 - 01400832 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2014-04-23 03:53 - 2014-03-06 07:50 - 00846336 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2014-04-23 03:53 - 2014-03-06 07:43 - 00704512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2014-04-23 03:53 - 2014-03-06 07:41 - 01789440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2014-04-23 03:53 - 2014-03-06 07:36 - 01143808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2014-04-20 04:20 - 2014-05-07 23:30 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Rajče
2014-04-20 04:20 - 2014-04-20 04:20 - 00000967 _____ () C:\Users\Public\Desktop\Rajče průvodce.lnk
2014-04-20 04:20 - 2014-04-20 04:20 - 00000000 ____D () C:\Program Files (x86)\rajce
2014-04-20 04:18 - 2014-04-20 04:19 - 08274192 _____ (rajce.net ) C:\Users\LENOVO\Downloads\rajce-267.exe
2014-04-20 04:16 - 2014-03-04 11:44 - 01163264 _____ (Microsoft Corporation) C:\Windows\system32\kernel32.dll
2014-04-20 04:16 - 2014-03-04 11:44 - 00362496 _____ (Microsoft Corporation) C:\Windows\system32\wow64win.dll
2014-04-20 04:16 - 2014-03-04 11:44 - 00243712 _____ (Microsoft Corporation) C:\Windows\system32\wow64.dll
2014-04-20 04:16 - 2014-03-04 11:44 - 00016384 _____ (Microsoft Corporation) C:\Windows\system32\ntvdm64.dll
2014-04-20 04:16 - 2014-03-04 11:44 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\wow64cpu.dll
2014-04-20 04:16 - 2014-03-04 11:17 - 00014336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntvdm64.dll
2014-04-20 04:16 - 2014-03-04 11:16 - 01114112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kernel32.dll
2014-04-20 04:16 - 2014-03-04 11:16 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\setup16.exe
2014-04-20 04:16 - 2014-03-04 11:16 - 00005120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wow32.dll
2014-04-20 04:16 - 2014-03-04 10:09 - 00007680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\instnm.exe
2014-04-20 04:16 - 2014-03-04 10:09 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\user.exe
2014-04-20 04:16 - 2014-02-04 04:35 - 00274880 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\msiscsi.sys
2014-04-20 04:16 - 2014-02-04 04:35 - 00190912 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\storport.sys
2014-04-20 04:16 - 2014-02-04 04:35 - 00027584 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\Diskdump.sys
2014-04-20 04:16 - 2014-02-04 04:28 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\iologmsg.dll
2014-04-20 04:16 - 2014-02-04 04:00 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iologmsg.dll
2014-04-20 04:16 - 2014-01-24 04:37 - 01684928 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ntfs.sys
2014-04-20 04:10 - 2014-05-06 00:20 - 00000000 ___RD () C:\Users\LENOVO\Desktop\FOTKY ZÉLAND
2014-04-16 18:52 - 2014-04-16 18:58 - 00000000 ____D () C:\Users\LENOVO\Desktop\ANGLIČTINA
2014-04-16 16:58 - 2014-04-25 03:51 - 00000000 ___RD () C:\Users\LENOVO\Desktop\MÍŠA
2014-04-16 16:46 - 2014-04-16 16:46 - 00000000 ____D () C:\Users\LENOVO\AppData\Roaming\WinRAR
2014-04-16 16:42 - 2014-05-07 23:30 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinRAR
2014-04-16 16:42 - 2014-04-16 16:42 - 00000000 ____D () C:\Users\LENOVO\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR
2014-04-16 16:42 - 2014-04-16 16:42 - 00000000 ____D () C:\Program Files (x86)\WinRAR
2014-04-15 16:55 - 2014-04-15 15:45 - 08147727 _____ () C:\Users\LENOVO\Desktop\wrarcz-setup.exe
2014-04-15 16:55 - 2014-04-15 15:41 - 01365248 _____ (Viber Media Inc) C:\Users\LENOVO\Desktop\ViberSetup.exe

==================== One Month Modified Files and Folders =======

2014-05-08 12:30 - 2014-05-08 02:50 - 02063872 _____ (Farbar) C:\Users\spravce\Desktop\FRST64.exe
2014-05-08 11:27 - 2014-05-08 01:31 - 64576296 _____ (Lenovo Group Limited ) C:\Users\spravce\Desktop\wlan120w7.exe
2014-05-08 02:53 - 2014-05-08 02:53 - 00019018 _____ () C:\Users\spravce\Desktop\FRST.txt
2014-05-08 02:53 - 2014-05-08 02:52 - 00000000 ____D () C:\FRST
2014-05-08 02:53 - 2014-04-27 09:33 - 00000000 ____D () C:\ProgramData\Datamngr
2014-05-08 02:53 - 2013-10-25 12:13 - 02005513 _____ () C:\Windows\WindowsUpdate.log
2014-05-08 01:52 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\system32\NDF
2014-05-08 01:42 - 2014-05-07 23:25 - 00000000 ____D () C:\Users\spravce\AppData\Roaming\Seznam.cz
2014-05-08 01:41 - 2009-07-14 06:45 - 00020880 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-05-08 01:41 - 2009-07-14 06:45 - 00020880 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-05-08 01:39 - 2013-10-28 21:16 - 00000952 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2014-05-08 01:38 - 2009-07-14 17:18 - 00668890 _____ () C:\Windows\system32\perfh005.dat
2014-05-08 01:38 - 2009-07-14 17:18 - 00141518 _____ () C:\Windows\system32\perfc005.dat
2014-05-08 01:38 - 2009-07-14 07:13 - 01583642 _____ () C:\Windows\system32\PerfStringBackup.INI
2014-05-08 01:37 - 2014-02-02 18:44 - 00000342 _____ () C:\Windows\Tasks\dsmonitor.job
2014-05-08 01:37 - 2013-10-28 21:16 - 00000948 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2014-05-08 01:34 - 2014-05-07 21:32 - 00000392 _____ () C:\Windows\setupact.log
2014-05-08 01:34 - 2013-10-31 07:32 - 00000266 _____ () C:\Windows\Tasks\AutoKMS.job
2014-05-08 01:34 - 2013-10-25 10:35 - 00000000 ____D () C:\ProgramData\NVIDIA
2014-05-08 01:34 - 2009-07-14 07:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2014-05-08 01:31 - 2014-05-08 01:31 - 00000000 ____D () C:\Users\spravce\AppData\Roaming\WinRAR
2014-05-07 23:38 - 2013-10-28 20:43 - 00000000 ____D () C:\ProgramData\Innovative Solutions
2014-05-07 23:36 - 2014-05-07 23:36 - 00000000 ____D () C:\Users\spravce\AppData\Local\Innovative Solutions
2014-05-07 23:32 - 2014-05-07 23:25 - 00002259 _____ () C:\Users\spravce\Desktop\Google Chrome.lnk
2014-05-07 23:31 - 2014-05-07 23:31 - 00000000 ____D () C:\Users\spravce\AppData\Local\Google
2014-05-07 23:30 - 2014-05-07 23:25 - 00000000 ___RD () C:\Users\spravce\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
2014-05-07 23:30 - 2014-05-07 23:25 - 00000000 ___RD () C:\Users\spravce\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance
2014-05-07 23:30 - 2014-05-07 23:25 - 00000000 ___RD () C:\Users\spravce\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools
2014-05-07 23:30 - 2014-05-07 23:25 - 00000000 ___RD () C:\Users\spravce\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories
2014-05-07 23:30 - 2014-05-07 23:25 - 00000000 ____D () C:\Users\spravce\AppData\Local\VNT
2014-05-07 23:30 - 2014-05-07 23:25 - 00000000 ____D () C:\Users\spravce
2014-05-07 23:30 - 2014-05-07 02:34 - 00000000 ___SD () C:\Windows\system32\CompatTel
2014-05-07 23:30 - 2014-05-07 02:34 - 00000000 ____D () C:\Program Files\NVIDIA Corporation
2014-05-07 23:30 - 2014-04-20 04:20 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Rajče
2014-05-07 23:30 - 2014-04-16 16:42 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinRAR
2014-05-07 23:30 - 2014-03-22 12:59 - 00000000 ____D () C:\Users\LENOVO\AppData\Roaming\vlc
2014-05-07 23:30 - 2014-03-10 17:52 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype
2014-05-07 23:30 - 2014-03-10 16:50 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\aTube Catcher
2014-05-07 23:30 - 2014-02-18 10:15 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CCleaner
2014-05-07 23:30 - 2014-02-12 12:30 - 00000000 ____D () C:\Users\LENOVO\AppData\Roaming\Seznam.cz
2014-05-07 23:30 - 2014-02-12 12:30 - 00000000 ____D () C:\Users\LENOVO\AppData\Roaming\GHISLER
2014-05-07 23:30 - 2014-02-06 20:27 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Codec Pack
2014-05-07 23:30 - 2014-02-02 18:44 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Uniblue
2014-05-07 23:30 - 2014-01-31 19:30 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\EA Games
2014-05-07 23:30 - 2014-01-29 11:54 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DivX
2014-05-07 23:30 - 2014-01-06 18:41 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Comodo
2014-05-07 23:30 - 2013-10-31 07:26 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\SharePoint
2014-05-07 23:30 - 2013-10-31 07:26 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office
2014-05-07 23:30 - 2013-10-28 21:16 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome
2014-05-07 23:30 - 2013-10-28 20:43 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Advanced Uninstaller PRO
2014-05-07 23:30 - 2013-10-28 20:24 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Picasa 3
2014-05-07 23:30 - 2013-10-25 10:52 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java
2014-05-07 23:30 - 2013-10-25 09:44 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Dolby
2014-05-07 23:30 - 2013-10-25 06:18 - 00000000 ____D () C:\Users\LENOVO
2014-05-07 23:30 - 2009-07-14 17:36 - 00000000 ___RD () C:\Users\Public\Recorded TV
2014-05-07 23:30 - 2009-07-14 07:32 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Games
2014-05-07 23:30 - 2009-07-14 07:32 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools
2014-05-07 23:30 - 2009-07-14 05:20 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup
2014-05-07 23:30 - 2009-07-14 05:20 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Maintenance
2014-05-07 23:30 - 2009-07-14 05:20 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories
2014-05-07 23:30 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\system32\Msdtc
2014-05-07 23:30 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\registration
2014-05-07 23:26 - 2014-05-07 23:26 - 00000000 ____D () C:\Users\spravce\Documents\Bluetooth Folder
2014-05-07 23:26 - 2014-05-07 23:26 - 00000000 ____D () C:\Users\spravce\AppData\Local\BMExplorer
2014-05-07 23:26 - 2013-10-25 06:56 - 00000000 ____D () C:\ProgramData\Atheros
2014-05-07 23:25 - 2014-05-07 23:25 - 00001397 _____ () C:\Users\spravce\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2014-05-07 23:25 - 2014-05-07 23:25 - 00000020 ___SH () C:\Users\spravce\ntuser.ini
2014-05-07 23:25 - 2014-05-07 23:25 - 00000000 _SHDL () C:\Users\spravce\Šablony
2014-05-07 23:25 - 2014-05-07 23:25 - 00000000 _SHDL () C:\Users\spravce\Soubory cookie
2014-05-07 23:25 - 2014-05-07 23:25 - 00000000 _SHDL () C:\Users\spravce\Poslední
2014-05-07 23:25 - 2014-05-07 23:25 - 00000000 _SHDL () C:\Users\spravce\Okolní tiskárny
2014-05-07 23:25 - 2014-05-07 23:25 - 00000000 _SHDL () C:\Users\spravce\Okolní síť
2014-05-07 23:25 - 2014-05-07 23:25 - 00000000 _SHDL () C:\Users\spravce\Nabídka Start
2014-05-07 23:25 - 2014-05-07 23:25 - 00000000 _SHDL () C:\Users\spravce\Dokumenty
2014-05-07 23:25 - 2014-05-07 23:25 - 00000000 _SHDL () C:\Users\spravce\Documents\Obrázky
2014-05-07 23:25 - 2014-05-07 23:25 - 00000000 _SHDL () C:\Users\spravce\Documents\Hudba
2014-05-07 23:25 - 2014-05-07 23:25 - 00000000 _SHDL () C:\Users\spravce\Documents\Filmy
2014-05-07 23:25 - 2014-05-07 23:25 - 00000000 _SHDL () C:\Users\spravce\Data aplikací
2014-05-07 23:25 - 2014-05-07 23:25 - 00000000 _SHDL () C:\Users\spravce\AppData\Roaming\Microsoft\Windows\Start Menu\Programy
2014-05-07 23:25 - 2014-05-07 23:25 - 00000000 _SHDL () C:\Users\spravce\AppData\Local\Data aplikací
2014-05-07 23:25 - 2014-05-07 23:25 - 00000000 ____D () C:\Users\spravce\AppData\Roaming\Atheros
2014-05-07 23:25 - 2014-05-07 23:25 - 00000000 ____D () C:\Users\spravce\AppData\Roaming\Adobe
2014-05-07 23:25 - 2014-05-07 23:25 - 00000000 ____D () C:\Users\spravce\AppData\Local\VirtualStore
2014-05-07 23:19 - 2014-01-31 19:50 - 00000000 ____D () C:\Users\LENOVO\Documents\Command and Conquer Generals Zero Hour Data
2014-05-07 23:10 - 2013-10-25 10:35 - 00000000 ____D () C:\Program Files (x86)\NVIDIA Corporation
2014-05-07 21:32 - 2014-05-07 21:32 - 00000000 _____ () C:\Windows\setuperr.log
2014-05-07 11:04 - 2014-01-18 17:23 - 00000000 ____D () C:\Users\LENOVO\AppData\Local\Microsoft Games
2014-05-07 10:59 - 2013-11-10 01:49 - 00000000 ____D () C:\Users\LENOVO\AppData\Local\CrashDumps
2014-05-07 10:57 - 2014-05-07 10:21 - 00007601 _____ () C:\Users\LENOVO\AppData\Local\resmon.resmoncfg
2014-05-07 10:26 - 2013-10-25 06:54 - 00000000 ____D () C:\Users\LENOVO\Documents\Bluetooth Folder
2014-05-07 10:01 - 2014-05-07 10:01 - 00000000 __SHD () C:\Users\LENOVO\AppData\Local\EmieUserList
2014-05-07 10:01 - 2014-05-07 10:01 - 00000000 __SHD () C:\Users\LENOVO\AppData\Local\EmieSiteList
2014-05-07 09:44 - 2014-01-06 18:41 - 00000000 ____D () C:\ProgramData\COMODO
2014-05-07 09:43 - 2013-10-28 22:28 - 00000000 ____D () C:\ProgramData\AVAST Software
2014-05-07 09:42 - 2014-01-06 18:43 - 00000000 ____D () C:\Windows\System32\Tasks\COMODO
2014-05-07 09:30 - 2014-01-06 18:40 - 00000000 ____D () C:\Program Files (x86)\Comodo
2014-05-07 03:33 - 2014-01-13 15:09 - 00000000 ___RD () C:\Users\LENOVO\Desktop\FOTEČKY
2014-05-06 09:34 - 2013-10-28 21:16 - 00003948 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA
2014-05-06 09:34 - 2013-10-28 21:16 - 00003696 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore
2014-05-06 06:40 - 2014-02-07 15:47 - 00000000 ___RD () C:\Users\LENOVO\Desktop\NOVÝ ZÉLAND
2014-05-06 00:20 - 2014-04-20 04:10 - 00000000 ___RD () C:\Users\LENOVO\Desktop\FOTKY ZÉLAND
2014-05-05 23:07 - 2014-03-10 17:52 - 00000000 ____D () C:\Users\LENOVO\AppData\Roaming\Skype
2014-05-02 02:18 - 2014-05-02 02:04 - 00943275 _____ () C:\Users\LENOVO\Downloads\cburner.0.7.0.426.zip
2014-05-02 02:10 - 2014-01-19 16:24 - 00000000 ____D () C:\Users\LENOVO\AppData\Roaming\DAEMON Tools Lite
2014-05-02 02:01 - 2014-01-21 13:36 - 00000000 ____D () C:\Users\LENOVO\Desktop\HUDBA
2014-05-01 21:30 - 2014-01-10 17:20 - 00000000 ___RD () C:\Users\LENOVO\Desktop\Happyneuron Brain Jogging
2014-04-29 23:59 - 2014-02-18 08:42 - 00000000 ____D () C:\Users\LENOVO\Desktop\m
2014-04-29 16:01 - 2014-05-06 03:00 - 23547904 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-04-29 15:40 - 2014-05-06 03:00 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2014-04-29 14:48 - 2014-05-06 03:00 - 17384448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2014-04-29 14:34 - 2014-05-06 03:00 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2014-04-29 02:34 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\rescache
2014-04-25 03:51 - 2014-04-16 16:58 - 00000000 ___RD () C:\Users\LENOVO\Desktop\MÍŠA
2014-04-23 05:27 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\PolicyDefinitions
2014-04-21 05:38 - 2013-10-31 07:07 - 00000000 ____D () C:\ProgramData\Microsoft Help
2014-04-21 05:37 - 2013-10-25 07:48 - 00000000 ____D () C:\Windows\system32\MRT
2014-04-21 05:35 - 2013-10-25 07:48 - 90655440 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2014-04-20 04:20 - 2014-04-20 04:20 - 00000967 _____ () C:\Users\Public\Desktop\Rajče průvodce.lnk
2014-04-20 04:20 - 2014-04-20 04:20 - 00000000 ____D () C:\Program Files (x86)\rajce
2014-04-20 04:19 - 2014-04-20 04:18 - 08274192 _____ (rajce.net ) C:\Users\LENOVO\Downloads\rajce-267.exe
2014-04-16 18:58 - 2014-04-16 18:52 - 00000000 ____D () C:\Users\LENOVO\Desktop\ANGLIČTINA
2014-04-16 16:52 - 2014-01-07 13:29 - 00000000 ___RD () C:\Users\LENOVO\Desktop\FILMY
2014-04-16 16:51 - 2014-01-10 17:23 - 00000000 ___RD () C:\Users\LENOVO\Desktop\E-KNIHY
2014-04-16 16:46 - 2014-04-16 16:46 - 00000000 ____D () C:\Users\LENOVO\AppData\Roaming\WinRAR
2014-04-16 16:42 - 2014-04-16 16:42 - 00000000 ____D () C:\Users\LENOVO\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR
2014-04-16 16:42 - 2014-04-16 16:42 - 00000000 ____D () C:\Program Files (x86)\WinRAR
2014-04-15 15:45 - 2014-04-15 16:55 - 08147727 _____ () C:\Users\LENOVO\Desktop\wrarcz-setup.exe
2014-04-15 15:41 - 2014-04-15 16:55 - 01365248 _____ (Viber Media Inc) C:\Users\LENOVO\Desktop\ViberSetup.exe
2014-04-14 04:24 - 2014-05-06 04:39 - 00465408 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll
2014-04-14 04:19 - 2014-05-06 04:39 - 00424448 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll

Files to move or delete:
====================
C:\Program Files (x86)\Movies Toolbar\Datamngr\apcrtldr.dll
C:\Program Files (x86)\Movies Toolbar\Datamngr\x64\apcrtldr.dll

==================== Bamital & volsnap Check =================

C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\rpcss.dll => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit

LastRegBack: 2014-04-29 01:14

==================== End Of Log ============================

#2 Příspěvek od **stell** » 08 kvě 2014 10:44

Zdravim
Vitaj u nas.
1:Odinstaluj vsetko od commodo
aj Comodo\GeekBuddy
2:Odinstaluj OFFICE>>mas to nelegal>>AutoKMS.exe

2:Otvor poznamkovy blok, a skopiruj kod do poznamkoveho bloku bez textu kod.
Uloz to Na plochu>>ako Vsetky subory>>nazov>>fixlist.txt
Spust ako admin program FRST64>>>a Teraz klikni na Knoflik>>FIX
Na plochu sa ti ulozi textak>>FIXLOG.txt>>obsah sem vloz.

Kód: Vybrat vše

Start
C:\Users\spravce\AppData\Local\VNT\vntldr.exe
C:\Users\spravce\AppData\Local\VNT
C:\Program Files (x86)\AskPartnerNetwork\Toolbar\Updater\TBNotifier.exe
C:\Program Files (x86)\AskPartnerNetwork
C:\Program Files (x86)\AskPartnerNetwork\Toolbar\apnmcp.exe
C:\Program Files (x86)\Movies Toolbar\Datamngr\DatamngrUI.exe
C:\Program Files (x86)\Movies Toolbar\Datamngr
C:\Program Files (x86)\Movies Toolbar
HKLM\...\Run: [SysTrayApp] => C:\Program Files\IDT\WDM\sttray64.exe [1703424 2013-04-25] (IDT, Inc.)
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [254336 2013-07-02] (Oracle Corporation)
HKLM-x32\...\Run: [Adobe ARM] => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959904 2013-11-21] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [DivXMediaServer] => C:\Program Files (x86)\DivX\DivX Media Server\DivXMediaServer.exe [450560 2013-12-23] (DivX, LLC)
HKLM-x32\...\Run: [DivXUpdate] => C:\Program Files (x86)\DivX\DivX Update\DivXUpdate.exe [1861968 2013-11-15] ()
HKLM-x32\...\Run: [ApnTBMon] => C:\Program Files (x86)\AskPartnerNetwork\Toolbar\Updater\TBNotifier.exe [1758160 2014-02-13] (APN)
HKLM-x32\...\Run: [VNT] => C:\Program Files (x86)\VNT\vntldr.exe [195536 2014-02-13] (APN LLC.)
HKLM-x32\...\Run: [tvncontrol] => C:\Program Files (x86)\Common Files\COMODO\GeekBuddyRSP.exe [2327248 2014-03-20] (Comodo Security Solutions, Inc.)
SearchScopes: HKLM - {9BB47C17-9C68-4BB3-B188-DD9AF0FD2406} URL = http://dts.search.ask.com/sr?src=ieb&gc ... nrs=AG6&q={searchTerms}
SearchScopes: HKLM-x32 - {9BB47C17-9C68-4BB3-B188-DD9AF0FD2406} URL = http://dts.search.ask.com/sr?src=ieb&gc ... nrs=AG6&q={searchTerms}
IFEO\bitguard.exe: [Debugger] tasklist.exe
IFEO\bprotect.exe: [Debugger] tasklist.exe
IFEO\bpsvc.exe: [Debugger] tasklist.exe
IFEO\browsemngr.exe: [Debugger] tasklist.exe
IFEO\browserdefender.exe: [Debugger] tasklist.exe
IFEO\browsermngr.exe: [Debugger] tasklist.exe
IFEO\browserprotect.exe: [Debugger] tasklist.exe
IFEO\browsersafeguard.exe: [Debugger] tasklist.exe
IFEO\bundlesweetimsetup.exe: [Debugger] tasklist.exe
IFEO\cltmngsvc.exe: [Debugger] tasklist.exe
IFEO\delta babylon.exe: [Debugger] tasklist.exe
IFEO\delta tb.exe: [Debugger] tasklist.exe
IFEO\delta2.exe: [Debugger] tasklist.exe
IFEO\deltainstaller.exe: [Debugger] tasklist.exe
IFEO\deltasetup.exe: [Debugger] tasklist.exe
IFEO\deltatb.exe: [Debugger] tasklist.exe
IFEO\deltatb_2501-c733154b.exe: [Debugger] tasklist.exe
IFEO\dprotectsvc.exe: [Debugger] tasklist.exe
IFEO\iminentsetup.exe: [Debugger] tasklist.exe
IFEO\jumpflip: [Debugger] tasklist.exe
IFEO\protectedsearch.exe: [Debugger] tasklist.exe
IFEO\rjatydimofu.exe: [Debugger] tasklist.exe
IFEO\searchinstaller.exe: [Debugger] tasklist.exe
IFEO\searchprotection.exe: [Debugger] tasklist.exe
IFEO\searchprotector.exe: [Debugger] tasklist.exe
IFEO\searchsettings.exe: [Debugger] tasklist.exe
IFEO\searchsettings64.exe: [Debugger] tasklist.exe
IFEO\snapdo.exe: [Debugger] tasklist.exe
IFEO\stinst32.exe: [Debugger] tasklist.exe
IFEO\stinst64.exe: [Debugger] tasklist.exe
IFEO\sweetimsetup.exe: [Debugger] tasklist.exe
IFEO\tbdelta.exetoolbar783881609.exe: [Debugger] tasklist.exe
IFEO\umbrella.exe: [Debugger] tasklist.exe
IFEO\utiljumpflip.exe: [Debugger] tasklist.exe
IFEO\volaro: [Debugger] tasklist.exe
IFEO\vonteera: [Debugger] tasklist.exe
IFEO\websteroids.exe: [Debugger] tasklist.exe
IFEO\websteroidsservice.exe: [Debugger] tasklist.exe
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Start GeekBuddy.lnk
ShortcutTarget: Start GeekBuddy.lnk -> C:\Program Files (x86)\Comodo\GeekBuddy\launcher.exe (Comodo Security Solutions, Inc.)
HKLM\...\AppCertDlls: [x86] -> C:\Program Files (x86)\Movies Toolbar\Datamngr\apcrtldr.dll [490496 2014-04-13] () <===== ATTENTION
HKLM\...\AppCertDlls: [x64] -> C:\Program Files (x86)\Movies Toolbar\Datamngr\x64\apcrtldr.dll [665088 2014-04-13] () <===== ATTENTION
BHO: Skype add-on for Internet Explorer - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll (Microsoft Corporation)
BHO: Movies Toolbar (Dist. by Bandoo Media, Inc.) - {d1dac034-9fd9-4c13-a388-d2e10e57707f} - C:\Program Files (x86)\Movies Toolbar\Datamngr\SRTOOL~1\IE\searchresultsDx64.dll ()
Toolbar: HKLM - Movies Toolbar (Dist. by Bandoo Media, Inc.) - {d1dac034-9fd9-4c13-a388-d2e10e57707f} - C:\Program Files (x86)\Movies Toolbar\Datamngr\SRTOOL~1\IE\searchresultsDx64.dll ()
Toolbar: HKLM - No Name - {CC1A175A-E45B-41ED-A30C-C9B1D7A0C02F} - No File
Handler: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll (Microsoft Corporation)
FF Plugin: @microsoft.com/GENUINE - disabled No File
CHR HKLM-x32\...\Chrome\Extension: [aaaaabcbmongicmdegkmmfgdickgnnob] - C:\Users\LENOVO\AppData\Local\ilividmoviestoolbar181\GC\toolbar.crx [2013-12-11]
CHR HKLM-x32\...\Chrome\Extension: [aaaajfocmnnhjaajccaelhippajhaeod] - C:\ProgramData\AskPartnerNetwork\Toolbar\ATU4-V7\CRX\ToolbarCR.crx [2014-02-24]
CHR HKLM-x32\...\Chrome\Extension: [lifbcibllhkdhoafpjfnlhfpfgnpldfl] - C:\Program Files (x86)\Skype\Toolbars\ChromeExtension\skype_chrome_extension.crx [2014-03-03]
R2 APNMCP; C:\Program Files (x86)\AskPartnerNetwork\Toolbar\apnmcp.exe [166352 2014-02-13] (APN LLC.)
C:\Program Files (x86)\AskPartnerNetwork\Toolbar\apnmcp.exe
R1 F06DEFF2-5B9C-490D-910F-35D3A9119622; C:\Program Files (x86)\Movies Toolbar\Datamngr\x64\setmgrc1.cfg [36216 2014-04-13] (Bandoo Media Inc)
C:\Program Files (x86)\Movies Toolbar\Datamngr\x64\setmgrc1.cfg 
C:\ProgramData\Datamngr
C:\Program Files (x86)\Movies Toolbar\Datamngr\apcrtldr.dll
C:\Program Files (x86)\Movies Toolbar\Datamngr\x64\apcrtldr.dll
Task: {04CFEBF2-A91A-441D-A154-4D520EB78F08} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2013-10-28] (Google Inc.)
Task: {50F09FFC-7DCE-4546-AC00-14BB53F827D0} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2013-10-28] (Google Inc.)
Task: {562D5460-AA5C-4143-AEAA-F7040729CDB3} - System32\Tasks\{6C3AF186-71C2-45E7-8573-C9DE7A4E844A} => Iexplore.exe http://www.skype.com/go/downloading?source=lightinstaller&ver=6.2.0.106&LastError=12007
Task: {56B923F6-F6F3-42CF-8406-3A6A30C17D65} - System32\Tasks\{1050B1FF-9BC8-4098-8DBF-FF58164CB0DE} => Iexplore.exe http://www.skype.com/go/downloading?source=lightinstaller&ver=6.2.0.106&LastError=12007
Task: {5DFE62B5-E23D-4998-AE5C-65C9191229FB} - System32\Tasks\dsmonitor => C:\Program Files (x86)\Uniblue\DriverScanner\dsmonitor.exe [2013-01-16] (Uniblue Systems Ltd)
Task: {7E24AD76-CFD5-42C1-8DFC-2746FDD1DD18} - System32\Tasks\AutoKMS => C:\Windows\AutoKMS\AutoKMS.exe
Task: {8A09C874-43B2-48D2-ACA3-64C42DFE927E} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2014-01-21] (Piriform Ltd)
Task: C:\Windows\Tasks\AutoKMS.job => C:\Windows\AutoKMS\AutoKMS.exe
Task: C:\Windows\Tasks\dsmonitor.job => C:\Program Files (x86)\Uniblue\DriverScanner\dsmonitor.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
AlternateDataStreams: C:\Windows:C54B8C3560419C42
Hosts:
End

daleko · #3 Příspěvek od **daleko** » 11 kvě 2014 06:24

Ahoj dobra duse,
odinstalovano a log prilozen do prilohy.

#4 Příspěvek od **stell** » 11 kvě 2014 07:19

Stahnete Junkware Removal Tool
http://thisisudax.org/downloads/JRT.exe

Ulozte nejlepe na plochu
Po spusteni se zobrazi licencni podminky, stisknete libovolnou klavesu
Probehne vytvoreni zalohy a nasledne prohledavani
Probehne skenovani a pak se objevi log, pripadne bude ulozen v c:\JRT jako JRT.txt, ten sem vlozte

Stahnete AdwCleaner
http://www.viruskasino.com/2012/09/adwcleaner.html
Ulozte nejlepe na plochu
Ukoncete vsechny programy
Kliknete na Scan a nasledne Clean
Probehne oprava, restart PC a pak se objevi log, pripadne bude ulozen ve slozce c:\AdwCleaner\AdwCleaner[S?].txt, ten sem vlozte

stiahnite si Malwarebytes Anti - Malware na plochu
http://downloads.malwarebytes.org/file/mbam
Spustit - mbam - setup - 2.0.0.x a postupuj podľa pokynov na inštaláciu programu .
Aktualizovat, a spustit scan.
Keď je skenovanie dokončené, ak tam boli detekcie, kliknite na tlačidlo Apply Actions .
Vo väčšine prípadov, bude vyžadovaný reštart.
Počkajte, až sa zobrazí výzva na reštartovanie počítača , kliknite na Áno.
Po reštarte, otvorte mbam ešte raz.
Kliknite na záložku História>>>>Application Logs> Aplikačné protokoly.
Dvojitým kliknutím na log, ktorý zobrazuje aj dátum a čas kontroly .
Kliknutím na tlačidlo "Kopírovať do schránky"Copy to Clipboard
Vložiť obsah schránky do svojej odpovede.

daleko · #5 Příspěvek od **daleko** » 11 kvě 2014 21:44

stazeno, skenovano dle navodu...az na:
1) po akci cleaneru se vsechny akce ntb znacne zpomalily (nyni jiz ok)
2) anti malware nesel aktualizovat, protoze stale neni pristup k siti
3) po restartu ntb po anti malware skenu vyskocilo okno - v priloze print screen - vyskakuje pouze u uctu spravce, ale tentokrat se pri pokusu o vypnuti kousl cely ntb, na plose zustalo jen toto okno plus pozadi a nesel spravce uloh ani restart, musel jsem ho natvrdo vypnout, po novem nabehnuti uz vypnout slo

JRT:

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Junkware Removal Tool (JRT) by Thisisu
Version: 6.1.4 (04.06.2014:1)
OS: Windows 7 Ultimate x64
Ran by spravce on ne 11.05.2014 at 21:33:17,62
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

~~~ Services

~~~ Registry Values

~~~ Registry Keys

Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\AppID\{BB711CB0-C70B-482E-9852-EC05EBD71DBB}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\AppID\scripthelper.exe
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\CLSID\{A40DC6C5-79D0-4CA8-A185-8FF989AF1115}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\CLSID\{CC1AC828-BB47-4361-AFB5-96EEE259DD87}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\CLSID\{DE9028D0-5FFA-4E69-94E3-89EE8741F468}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\CLSID\{E7DF6BFF-55A5-4EB7-A673-4ED3E9456D39}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\Interface\{03E2A1F3-4402-4121-8B35-733216D61217}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\Interface\{9E3B11F6-4179-4603-A71B-A55F4BCB0BEC}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\TypeLib\{9C049BA6-EA47-4AC3-AED6-A66D8DC9E1D8}
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\conduit
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\driverscanner
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\searchquiehelper.dnsguard
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\searchquiehelper.dnsguard.1
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\{c2f8ca82-2bd9-4513-b2d1-08a47914c1da}_is1
Successfully deleted: [Registry Key] "hkey_current_user\software\askpartnernetwork"
Successfully deleted: [Registry Key] "hkey_local_machine\software\askpartnernetwork"

~~~ Files

~~~ Folders

Successfully deleted: [Folder] "C:\ProgramData\apn"
Successfully deleted: [Folder] "C:\ProgramData\conduit"
Failed to delete: [Folder] "C:\ProgramData\datamngr"
Successfully deleted: [Folder] "C:\ProgramData\wincert"
Failed to delete: [Folder] "C:\Program Files (x86)\movies toolbar"
Successfully deleted: [Folder] "C:\ProgramData\Microsoft\Windows\Start Menu\Programs\uniblue"
Failed to delete: [Folder] "C:\ProgramData\AskPartnerNetwork"

~~~ Event Viewer Logs were cleared

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on ne 11.05.2014 at 21:39:04,25
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

Cleaner (RO)

# AdwCleaner v3.207 - Report created 11/05/2014 at 21:40:24
# Updated 05/05/2014 by Xplode
# Operating System : Windows 7 Ultimate Service Pack 1 (64 bits)
# Username : spravce - LENOVO-PC
# Running from : C:\Users\spravce\Desktop\adwcleaner.exe
# Option : Scan

***** [ Services ] *****

Service Found : DatamngrCoordinator
Service Found : F06DEFF2-5B9C-490D-910F-35D3A9119622

***** [ Files / Folders ] *****

File Found : C:\Users\LENOVO\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\iLivid.lnk
Folder Found : C:\Program Files (x86)\Movies Toolbar
Folder Found : C:\Program Files (x86)\Uniblue
Folder Found : C:\Program Files (x86)\Uniblue\DriverScanner
Folder Found : C:\ProgramData\AskPartnerNetwork
Folder Found : C:\ProgramData\BitGuard
Folder Found : C:\ProgramData\Browser Manager
Folder Found : C:\ProgramData\BrowserProtect
Folder Found : C:\ProgramData\DataMngr
Folder Found : C:\Users\LENOVO\AppData\Local\Google\Chrome\User Data\Default\Extensions\aaaaabcbmongicmdegkmmfgdickgnnob
Folder Found : C:\Users\LENOVO\AppData\Local\iLivid
Folder Found : C:\Users\LENOVO\AppData\Local\ilividmoviestoolbar181
Folder Found : C:\Users\LENOVO\AppData\Local\Temp\apn
Folder Found : C:\Users\LENOVO\AppData\LocalLow\DataMngr
Folder Found : C:\Users\LENOVO\AppData\LocalLow\ilividmoviestoolbar181
Folder Found : C:\Users\LENOVO\AppData\Roaming\Uniblue
Folder Found : C:\Users\LENOVO\AppData\Roaming\Uniblue\DriverScanner
Folder Found : C:\Users\spravce\AppData\Local\Temp\apn
Folder Found : C:\Users\spravce\AppData\LocalLow\ilividmoviestoolbar181

***** [ Shortcuts ] *****

***** [ Registry ] *****

Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{D1DAC034-9FD9-4C13-A388-D2E10E57707F}
Key Found : HKLM\SOFTWARE\Classes\iLivid.torrent
Key Found : HKLM\SOFTWARE\Classes\Interface\{1B730ACF-26A3-447B-9994-14AEE0EB72CC}
Key Found : HKLM\SOFTWARE\Classes\TypeLib\{6A4BCABA-C437-4C76-A54E-AF31B8A76CB9}
Key Found : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{D1DAC034-9FD9-4C13-A388-D2E10E57707F}
Key Found : HKLM\SOFTWARE\Microsoft\Tracing\avg-secure-search-installer_RASAPI32
Key Found : HKLM\SOFTWARE\Microsoft\Tracing\avg-secure-search-installer_RASMANCS
Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{D1DAC034-9FD9-4C13-A388-D2E10E57707F}
Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\ilividmoviestoolbar181CR
Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\ilividmoviestoolbar181IE
Key Found : HKLM\Software\Uniblue
Key Found : HKLM\Software\Uniblue\DriverScanner
Key Found : [x64] HKLM\SOFTWARE\Classes\CLSID\{318A227B-5E9F-45BD-8999-7F8F10CA4CF5}
Key Found : [x64] HKLM\SOFTWARE\Classes\CLSID\{A40DC6C5-79D0-4CA8-A185-8FF989AF1115}
Key Found : [x64] HKLM\SOFTWARE\Classes\CLSID\{CC1AC828-BB47-4361-AFB5-96EEE259DD87}
Key Found : [x64] HKLM\SOFTWARE\Classes\Interface\{03E2A1F3-4402-4121-8B35-733216D61217}
Key Found : [x64] HKLM\SOFTWARE\Classes\Interface\{1B730ACF-26A3-447B-9994-14AEE0EB72CC}
Key Found : [x64] HKLM\SOFTWARE\Classes\Interface\{9E3B11F6-4179-4603-A71B-A55F4BCB0BEC}
Key Found : [x64] HKLM\SOFTWARE\DivX\Install\Setup\WizardLayout\ConduitToolbar
Value Found : HKLM\SYSTEM\ControlSet001\Control\Session Manager\AppCertDlls [x64]
Value Found : HKLM\SYSTEM\ControlSet001\Control\Session Manager\AppCertDlls [x86]
Value Found : HKLM\SYSTEM\ControlSet002\Control\Session Manager\AppCertDlls [x64]
Value Found : HKLM\SYSTEM\ControlSet002\Control\Session Manager\AppCertDlls [x86]
Value Found : HKLM\SYSTEM\CurrentControlSet\Control\Session Manager\AppCertDlls [x64]
Value Found : HKLM\SYSTEM\CurrentControlSet\Control\Session Manager\AppCertDlls [x86]
Value Found : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{318A227B-5E9F-45BD-8999-7F8F10CA4CF5}]

***** [ Browsers ] *****

-\\ Internet Explorer v11.0.9600.17041

-\\ Google Chrome v34.0.1847.131

[ File : C:\Users\LENOVO\AppData\Local\Google\Chrome\User Data\Default\preferences ]

Found [Extension] : aaaaabcbmongicmdegkmmfgdickgnnob

[ File : C:\Users\spravce\AppData\Local\Google\Chrome\User Data\Default\preferences ]

*************************

AdwCleaner[R0].txt - [4217 octets] - [11/05/2014 21:40:24]

########## EOF - C:\AdwCleaner\AdwCleaner[R0].txt - [4277 octets] ##########

Cleaner (SO)

# AdwCleaner v3.207 - Report created 11/05/2014 at 21:41:03
# Updated 05/05/2014 by Xplode
# Operating System : Windows 7 Ultimate Service Pack 1 (64 bits)
# Username : spravce - LENOVO-PC
# Running from : C:\Users\spravce\Desktop\adwcleaner.exe
# Option : Clean

***** [ Services ] *****

[#] Service Deleted : DatamngrCoordinator
Service Deleted : F06DEFF2-5B9C-490D-910F-35D3A9119622

***** [ Files / Folders ] *****

Folder Deleted : C:\ProgramData\AskPartnerNetwork
[#] Folder Deleted : C:\ProgramData\BitGuard
[#] Folder Deleted : C:\ProgramData\Browser Manager
[#] Folder Deleted : C:\ProgramData\BrowserProtect
[!] Folder Deleted : C:\ProgramData\DataMngr
[!] Folder Deleted : C:\Program Files (x86)\Movies Toolbar
Folder Deleted : C:\Program Files (x86)\Uniblue
Folder Deleted : C:\Users\LENOVO\AppData\Local\iLivid
Folder Deleted : C:\Users\LENOVO\AppData\Local\ilividmoviestoolbar181
Folder Deleted : C:\Users\LENOVO\AppData\Local\Temp\apn
Folder Deleted : C:\Users\LENOVO\AppData\LocalLow\DataMngr
Folder Deleted : C:\Users\LENOVO\AppData\LocalLow\ilividmoviestoolbar181
Folder Deleted : C:\Users\LENOVO\AppData\Roaming\Uniblue
Folder Deleted : C:\Users\spravce\AppData\Local\Temp\apn
Folder Deleted : C:\Users\spravce\AppData\LocalLow\ilividmoviestoolbar181
Folder Deleted : C:\Users\LENOVO\AppData\Local\Google\Chrome\User Data\Default\Extensions\aaaaabcbmongicmdegkmmfgdickgnnob
File Deleted : C:\Users\LENOVO\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\iLivid.lnk

***** [ Shortcuts ] *****

***** [ Registry ] *****

Key Deleted : HKLM\SOFTWARE\Classes\iLivid.torrent
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\avg-secure-search-installer_RASAPI32
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\avg-secure-search-installer_RASMANCS
Value Deleted : HKLM\SYSTEM\ControlSet001\Control\Session Manager\AppCertDlls [x64]
Value Deleted : HKLM\SYSTEM\ControlSet001\Control\Session Manager\AppCertDlls [x86]
Value Deleted : HKLM\SYSTEM\ControlSet002\Control\Session Manager\AppCertDlls [x64]
Value Deleted : HKLM\SYSTEM\ControlSet002\Control\Session Manager\AppCertDlls [x86]
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{1B730ACF-26A3-447B-9994-14AEE0EB72CC}
Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{6A4BCABA-C437-4C76-A54E-AF31B8A76CB9}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{D1DAC034-9FD9-4C13-A388-D2E10E57707F}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{D1DAC034-9FD9-4C13-A388-D2E10E57707F}
Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{D1DAC034-9FD9-4C13-A388-D2E10E57707F}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\CLSID\{318A227B-5E9F-45BD-8999-7F8F10CA4CF5}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\CLSID\{A40DC6C5-79D0-4CA8-A185-8FF989AF1115}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\CLSID\{CC1AC828-BB47-4361-AFB5-96EEE259DD87}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{03E2A1F3-4402-4121-8B35-733216D61217}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{1B730ACF-26A3-447B-9994-14AEE0EB72CC}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{9E3B11F6-4179-4603-A71B-A55F4BCB0BEC}
Value Deleted : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{318A227B-5E9F-45BD-8999-7F8F10CA4CF5}]
Key Deleted : HKLM\Software\Uniblue
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\ilividmoviestoolbar181CR
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\ilividmoviestoolbar181IE
Key Deleted : [x64] HKLM\SOFTWARE\DivX\Install\Setup\WizardLayout\ConduitToolbar

***** [ Browsers ] *****

-\\ Internet Explorer v11.0.9600.17041

-\\ Google Chrome v34.0.1847.131

[ File : C:\Users\LENOVO\AppData\Local\Google\Chrome\User Data\Default\preferences ]

Deleted [Extension] : aaaaabcbmongicmdegkmmfgdickgnnob

[ File : C:\Users\spravce\AppData\Local\Google\Chrome\User Data\Default\preferences ]

*************************

AdwCleaner[R0].txt - [4389 octets] - [11/05/2014 21:40:24]
AdwCleaner[S0].txt - [4034 octets] - [11/05/2014 21:41:03]

########## EOF - C:\AdwCleaner\AdwCleaner[S0].txt - [4094 octets] ##########

Anti-Malware

Malwarebytes Anti-Malware
http://www.malwarebytes.org

Scan Date: 11.5.2014
Scan Time: 22:00:09
Logfile: a-m.txt
Administrator: Yes

Version: 2.00.1.1004
Malware Database: v2014.03.04.09
Rootkit Database: v2014.02.20.01
License: Trial
Malware Protection: Enabled
Malicious Website Protection: Enabled
Chameleon: Disabled

OS: Windows 7 Service Pack 1
CPU: x64
File System: NTFS
User: spravce

Scan Type: Threat Scan
Result: Completed
Objects Scanned: 256723
Time Elapsed: 9 min, 49 sec

Memory: Enabled
Startup: Enabled
Filesystem: Enabled
Archives: Enabled
Rootkits: Disabled
Shuriken: Enabled
PUP: Enabled
PUM: Enabled

Processes: 0
(No malicious items detected)

Modules: 0
(No malicious items detected)

Registry Keys: 3
PUP.Optional.Datamngr.A, HKU\S-1-5-21-2337024723-3800431968-2900454187-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\SETTINGS\{A40DC6C5-79D0-4ca8-A185-8FF989AF1115}, Quarantined, [94b5e31c730747ef31b4c1b331d1a15f],
PUP.Optional.DataMngr.A, HKU\S-1-5-21-2337024723-3800431968-2900454187-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\Datamngr, Quarantined, [f455db243347dc5a099eb2f855ae39c7],
PUP.Optional.MoviesToolBar.A, HKU\S-1-5-21-2337024723-3800431968-2900454187-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\ilividmoviestoolbar181, Quarantined, [8cbdf10eb8c2b87e4a008a0b4ab8659b],

Registry Values: 0
(No malicious items detected)

Registry Data: 0
(No malicious items detected)

Folders: 0
(No malicious items detected)

Files: 1
PUP.Optional.Spigot.A, C:\Users\LENOVO\Downloads\atubecatcher-setup.exe, Quarantined, [480112ede49690a6dbd6e87ea1603fc1],

Physical Sectors: 0
(No malicious items detected)

(end)

plus prilozen obrazek

#6 Příspěvek od **stell** » 11 kvě 2014 22:01

prscreen>>toto vypisuje chrome, nemas pripojenie, tak vypisuje, chce sa aktualizovat...

Stiahnite si prosím MiniToolBox, a uložte ho na plochu a spustite ,
http://www.bleepingcomputer.com/downloa ... box/dl/65/

a zafajknut nasledujúce políčka:
Flush DNS
Report IE Proxy Settings
Reset IE Proxy Settings
Report FF Proxy Settings
Reset FF Proxy Settings
List content of Hosts
List IP configuration
List Winsock Entries
List last 10 Event Viewer log
List Users, Partitions and Memory size.

Kliknite na tlačidlo Go az sa ukaze vysledok (Result.txt). Kópia Result.txt bude uložený v rovnakom adresári kde je nástroj spustený, obsah vloz sem.
Poznámka: Pri použití voľby "Reset FF Nastavenie proxy servera" Firefox by mal byť uzatvorený.
Dnes alebo zajtra sa na to pozriem.

daleko · #7 Příspěvek od **daleko** » 11 kvě 2014 22:32

ok, posilam vypis.
diky

MiniToolBox by Farbar Version: 23-01-2014
Ran by spravce (administrator) on 11-05-2014 at 23:28:45
Running from "C:\Users\spravce\Desktop"
Microsoft Windows 7 Ultimate Service Pack 1 (X64)
Boot Mode: Normal
***************************************************************************

========================= Flush DNS: ===================================

Konfigurace protokolu IP syst‚mu Windows

MezipamØœ pýekl d n¡ DNS byla £spØçnØ vypr zdnØna.

========================= IE Proxy Settings: ==============================

Proxy is not enabled.
No Proxy Server is set.

"Reset IE Proxy Settings": IE Proxy Settings were reset.
========================= Hosts content: =================================

========================= IP Configuration: ================================

Síový adaptér Broadcom 802.11n = Bezdrátové pøipojení k síti (Connected)
Qualcomm Atheros AR8172/8176/8178 PCI-E Fast Ethernet Controller (NDIS 6.20) = Pøipojení k místní síti (Media disconnected)
Zaøízení Bluetooth (sí PAN) = Síové pøipojení Bluetooth (Media disconnected)

# ----------------------------------
# Konfigurace protokolu IPv4
# ----------------------------------
pushd interface ipv4

reset
set global icmpredirects=enabled

popd
# Konec konfigurace protokolu IPv4

Konfigurace protokolu IP syst‚mu Windows

N zev hostitele . . . . . . . . . : LENOVO-PC
Prim rn¡ pý¡pona DNS. . . . . . . :
Typ uzlu . . . . . . . . . . . . : hybridn¡
Povoleno smØrov n¡ IP . . . . . . : Ne
WINS Proxy povoleno . . . . . . . : Ne

Adapt‚r pro tunelov‚ pýipojen¡ Pýipojen¡ k m¡stn¡ s¡ti* 13:

Stav m‚dia . . . . . . . . . . . : odpojeno
Pý¡pona DNS podle pýipojen¡ . . . :
Popis . . . . . . . . . . . . . . : Teredo Tunneling Pseudo-Interface
Fyzick Adresa. . . . . . . . . . : 00-00-00-00-00-00-00-E0
Protokol DHCP povolen . . . . . . : Ne
Automatick konfigurace povolena : Ano
Server: UnKnown
Address: 127.0.0.1

Hostitele google.com se pomoc¡ pý¡kazu Ping nepodaýilo naj¡t.
Zkontrolujte n zev hostitele a akci opakujte.
Server: UnKnown
Address: 127.0.0.1

Hostitele yahoo.com se pomoc¡ pý¡kazu Ping nepodaýilo naj¡t.
Zkontrolujte n zev hostitele a akci opakujte.

Pý¡kaz PING na 127.0.0.1 - 32 bajt… dat:
OdpovØÔ od 127.0.0.1: bajty=32 Ÿas < 1ms TTL=128
OdpovØÔ od 127.0.0.1: bajty=32 Ÿas < 1ms TTL=128

Statistika ping pro 127.0.0.1:
Pakety: Odeslan‚ = 2, Pýijat‚ = 2, Ztracen‚ = 0 (ztr ta 0%),
Pýibli§n doba do pýijet¡ odezvy v milisekund ch:
Minimum = 0ms, Maximum = 0ms, Pr…mØr = 0ms
===========================================================================
Seznam rozhran¡
1...........................Software Loopback Interface 1
18...00 00 00 00 00 00 00 e0 Teredo Tunneling Pseudo-Interface
===========================================================================

IPv4 SmØrovac¡ tabulka
===========================================================================
Aktivn¡ smØrov n¡:
C¡l v s¡ti S¡œov maska Br na Rozhran¡ Metrika
127.0.0.0 255.0.0.0 Propojen‚ 127.0.0.1 306
127.0.0.1 255.255.255.255 Propojen‚ 127.0.0.1 306
127.255.255.255 255.255.255.255 Propojen‚ 127.0.0.1 306
224.0.0.0 240.0.0.0 Propojen‚ 127.0.0.1 306
255.255.255.255 255.255.255.255 Propojen‚ 127.0.0.1 306
===========================================================================
Trval‚ trasy:
¦ dn‚

IPv6 SmØrovac¡ tabulka
===========================================================================
Aktivn¡ smØrov n¡:
Rozhran¡ Metrika C¡l v s¡ti Br na
1 306 ::1/128 Propojen‚
1 306 ff00::/8 Propojen‚
===========================================================================
Trval‚ trasy:
¦ dn‚
========================= Winsock entries =====================================

Catalog5 01 C:\Windows\SysWOW64\NLAapi.dll [52224] (Microsoft Corporation)
Catalog5 02 C:\Windows\SysWOW64\napinsp.dll [52224] (Microsoft Corporation)
Catalog5 03 C:\Windows\SysWOW64\pnrpnsp.dll [65024] (Microsoft Corporation)
Catalog5 04 C:\Windows\SysWOW64\pnrpnsp.dll [65024] (Microsoft Corporation)
Catalog5 05 C:\Windows\SysWOW64\wshbth.dll [36352] (Microsoft Corporation)
Catalog5 06 C:\Windows\SysWOW64\mswsock.dll [231424] (Microsoft Corporation)
Catalog5 07 C:\Windows\SysWOW64\winrnr.dll [20992] (Microsoft Corporation)
Catalog9 01 C:\Windows\SysWOW64\mswsock.dll [231424] (Microsoft Corporation)
Catalog9 02 C:\Windows\SysWOW64\mswsock.dll [231424] (Microsoft Corporation)
Catalog9 03 C:\Windows\SysWOW64\mswsock.dll [231424] (Microsoft Corporation)
Catalog9 04 C:\Windows\SysWOW64\mswsock.dll [231424] (Microsoft Corporation)
Catalog9 05 C:\Windows\SysWOW64\mswsock.dll [231424] (Microsoft Corporation)
Catalog9 06 C:\Windows\SysWOW64\mswsock.dll [231424] (Microsoft Corporation)
Catalog9 07 C:\Windows\SysWOW64\mswsock.dll [231424] (Microsoft Corporation)
Catalog9 08 C:\Windows\SysWOW64\mswsock.dll [231424] (Microsoft Corporation)
Catalog9 09 C:\Windows\SysWOW64\mswsock.dll [231424] (Microsoft Corporation)
Catalog9 10 C:\Windows\SysWOW64\mswsock.dll [231424] (Microsoft Corporation)
Catalog9 11 C:\Windows\SysWOW64\mswsock.dll [231424] (Microsoft Corporation)
x64-Catalog5 01 C:\Windows\System32\NLAapi.dll [70656] (Microsoft Corporation)
x64-Catalog5 02 C:\Windows\System32\napinsp.dll [68096] (Microsoft Corporation)
x64-Catalog5 03 C:\Windows\System32\pnrpnsp.dll [86016] (Microsoft Corporation)
x64-Catalog5 04 C:\Windows\System32\pnrpnsp.dll [86016] (Microsoft Corporation)
x64-Catalog5 05 C:\Windows\System32\wshbth.dll [47104] (Microsoft Corporation)
x64-Catalog5 06 C:\Windows\System32\mswsock.dll [327168] (Microsoft Corporation)
x64-Catalog5 07 C:\Windows\System32\winrnr.dll [28672] (Microsoft Corporation)
x64-Catalog9 01 C:\Windows\System32\mswsock.dll [327168] (Microsoft Corporation)
x64-Catalog9 02 C:\Windows\System32\mswsock.dll [327168] (Microsoft Corporation)
x64-Catalog9 03 C:\Windows\System32\mswsock.dll [327168] (Microsoft Corporation)
x64-Catalog9 04 C:\Windows\System32\mswsock.dll [327168] (Microsoft Corporation)
x64-Catalog9 05 C:\Windows\System32\mswsock.dll [327168] (Microsoft Corporation)
x64-Catalog9 06 C:\Windows\System32\mswsock.dll [327168] (Microsoft Corporation)
x64-Catalog9 07 C:\Windows\System32\mswsock.dll [327168] (Microsoft Corporation)
x64-Catalog9 08 C:\Windows\System32\mswsock.dll [327168] (Microsoft Corporation)
x64-Catalog9 09 C:\Windows\System32\mswsock.dll [327168] (Microsoft Corporation)
x64-Catalog9 10 C:\Windows\System32\mswsock.dll [327168] (Microsoft Corporation)
x64-Catalog9 11 C:\Windows\System32\mswsock.dll [327168] (Microsoft Corporation)

========================= Event log errors: ===============================

Application errors:
==================

System errors:
=============
Error: (05/11/2014 10:07:06 PM) (Source: Service Control Manager) (User: )
Description: Pøi èekání na pøipojení služby Služba Zasílání zpráv o chybách systému Windows bylo dosaženo èasového limitu (30000 ms).

Error: (05/11/2014 10:05:37 PM) (Source: Service Control Manager) (User: )
Description: Služba Instalaèní služba modulù systému Windows neuspìla pøi spuštìní v dùsledku následující chyby:
%%1053

Error: (05/11/2014 10:05:37 PM) (Source: Service Control Manager) (User: )
Description: Pøi èekání na pøipojení služby Instalaèní služba modulù systému Windows bylo dosaženo èasového limitu (30000 ms).

Error: (05/11/2014 10:04:31 PM) (Source: Service Control Manager) (User: )
Description: Služba Instalaèní služba modulù systému Windows neuspìla pøi spuštìní v dùsledku následující chyby:
%%1053

Error: (05/11/2014 10:04:31 PM) (Source: Service Control Manager) (User: )
Description: Pøi èekání na pøipojení služby Instalaèní služba modulù systému Windows bylo dosaženo èasového limitu (30000 ms).

Error: (05/11/2014 10:04:31 PM) (Source: DCOM) (User: )
Description: 1053TrustedInstaller{752073A1-23F2-4396-85F0-8FDB879ED0ED}

Microsoft Office Sessions:
=========================

CodeIntegrity Errors:
===================================
Date: 2013-10-25 09:04:39.646
Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\drivers\stwrt64.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.

Date: 2013-10-25 09:04:39.614
Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\drivers\stwrt64.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.

Date: 2013-10-25 09:02:24.469
Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\drivers\stwrt64.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.

Date: 2013-10-25 09:02:24.438
Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\drivers\stwrt64.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.

Date: 2013-10-25 06:56:25.966
Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\drivers\stwrt64.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.

Date: 2013-10-25 06:56:25.950
Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\drivers\stwrt64.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.

Date: 2013-10-25 06:50:57.925
Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\drivers\stwrt64.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.

Date: 2013-10-25 06:50:57.910
Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\drivers\stwrt64.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.

Date: 2013-10-25 06:47:48.774
Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\drivers\stwrt64.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.

Date: 2013-10-25 06:47:48.758
Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\drivers\stwrt64.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.

========================= Memory info: ===================================

Percentage of memory in use: 32%
Total physical RAM: 3975.36 MB
Available physical RAM: 2674.14 MB
Total Pagefile: 7948.89 MB
Available Pagefile: 6496.37 MB
Total Virtual: 4095.88 MB
Available Virtual: 3976.68 MB

========================= Partitions: =====================================

1 Drive c: () (Fixed) (Total:368.01 GB) (Free:226.6 GB) NTFS
2 Drive d: () (Fixed) (Total:97.66 GB) (Free:96.55 GB) NTFS
5 Drive i: (Transcend) (Removable) (Total:7.46 GB) (Free:6.48 GB) FAT32

========================= Users: ========================================

U§ivatelsk‚ £Ÿty pro \\LENOVO-PC

Administrator Guest LENOVO
spravce
Pý¡kaz byl £spØçnØ dokonŸen.

**** End of log ****

#8 Příspěvek od **stell** » 11 kvě 2014 22:50

ide internet ci nie??
Preto ze tu pise, ze wifi je connetcted
Síový adaptér Broadcom 802.11n = Bezdrátové pøipojení k síti (Connected)
Este sprav bataka, a log vloz sem

Kód: Vybrat vše

 @echo off
cd\
>face.txt (
ipconfig /all
nslookup facebook.com
ping -n 3 facebook.com
echo.
route print
)
start face.txt
del %0

daleko · #9 Příspěvek od **daleko** » 11 kvě 2014 23:48

net nejde, stale hlasi "omezeny pristup" (i pred tim to psalo ze broadcom je pripojen, ale pozadovalo to ovladac a k jeho instalaci "byl odepren pristup")
promin, co to po me chces... "Este sprav bataka, a log vloz sem" ...co je bataka? a kam mam vlozit tebou vlozeny kod?
dik

#10 Příspěvek od **stell** » 12 kvě 2014 06:53

1:Otvorte Notepad (Poznámkový blok) a skopíruj do neho text.

Kód: Vybrat vše

 @echo off
cd\
>face.txt (
ipconfig /all
nslookup facebook.com
ping -n 3 facebook.com
echo.
route print
)
start face.txt
del %0

2:Potom klikneme na záložku Súbor v menu Uložiť ako..
3:Ako je Názov súboru, tak do toho riadku napíšeme:oprava.bat
4:Typ súboru tak tam vyberiete všetky súbory .
5:A uložíme ho na plochu.
6:2 x klikneme naň, alebo pravý klik a spustiť ako správca.

obsah face.txt skopiruj sem.

daleko · #11 Příspěvek od **daleko** » 13 kvě 2014 06:06

to je hned jina
dik

Windows IP Configuration

Host Name . . . . . . . . . . . . : David-PC
Primary Dns Suffix . . . . . . . :
Node Type . . . . . . . . . . . . : Hybrid
IP Routing Enabled. . . . . . . . : No
WINS Proxy Enabled. . . . . . . . : No
DNS Suffix Search List. . . . . . : telecom

Ethernet adapter Local Area Connection:

Connection-specific DNS Suffix . : telecom
Description . . . . . . . . . . . : Qualcomm Atheros AR8161/8165 PCI-E Gigabit Ethernet Controller (NDIS 6.20)
Physical Address. . . . . . . . . : 94-DE-80-3A-DE-23
DHCP Enabled. . . . . . . . . . . : Yes
Autoconfiguration Enabled . . . . : Yes
Link-local IPv6 Address . . . . . : fe80::61ba:688f:8463:a5c1%11(Preferred)
IPv4 Address. . . . . . . . . . . : 192.168.1.64(Preferred)
Subnet Mask . . . . . . . . . . . : 255.255.255.0
Lease Obtained. . . . . . . . . . : Tuesday, 13 May 2014 1:02:03 p.m.
Lease Expires . . . . . . . . . . : Wednesday, 14 May 2014 1:02:02 p.m.
Default Gateway . . . . . . . . . : 192.168.1.254
DHCP Server . . . . . . . . . . . : 192.168.1.254
DHCPv6 IAID . . . . . . . . . . . : 244637312
DHCPv6 Client DUID. . . . . . . . : 00-01-00-01-1A-61-DC-D3-94-DE-80-3A-DE-23
DNS Servers . . . . . . . . . . . : 192.168.1.254
NetBIOS over Tcpip. . . . . . . . : Enabled

Tunnel adapter isatap.telecom:

Media State . . . . . . . . . . . : Media disconnected
Connection-specific DNS Suffix . : telecom
Description . . . . . . . . . . . : Microsoft ISATAP Adapter
Physical Address. . . . . . . . . : 00-00-00-00-00-00-00-E0
DHCP Enabled. . . . . . . . . . . : No
Autoconfiguration Enabled . . . . : Yes

Tunnel adapter Teredo Tunneling Pseudo-Interface:

Connection-specific DNS Suffix . :
Description . . . . . . . . . . . : Teredo Tunneling Pseudo-Interface
Physical Address. . . . . . . . . : 00-00-00-00-00-00-00-E0
DHCP Enabled. . . . . . . . . . . : No
Autoconfiguration Enabled . . . . : Yes
IPv6 Address. . . . . . . . . . . : 2001:0:5ef5:79fb:cf9

85c6:7799(Preferred)
Link-local IPv6 Address . . . . . : fe80::cf9

85c6:7799%12(Preferred)
Default Gateway . . . . . . . . . : ::
NetBIOS over Tcpip. . . . . . . . : Disabled
Server: telecom.telecom
Address: 192.168.1.254

Name: facebook.com
Addresses: 2a03

2110:df07:face:b00c:0:1
173.252.110.27

Pinging facebook.com [173.252.110.27] with 32 bytes of data:
Reply from 173.252.110.27: bytes=32 time=227ms TTL=82

Ping statistics for 173.252.110.27:
Packets: Sent = 1, Received = 1, Lost = 0 (0% loss),
Approximate round trip times in milli-seconds:
Minimum = 227ms, Maximum = 227ms, Average = 227ms

#12 Příspěvek od **stell** » 13 kvě 2014 06:34

ako vidis
Qualcomm Atheros AR8161/8165 PCI-E Gigabit Ethernet Controller
Cize Ethernet, kablovy internet je funkcny.

Ale nevidim tam Wifi adaptér Broadcom
Síový adaptér Broadcom 802.11n = Bezdrátové pøipojení k síti.

Treba ist do spravce zariadeni>>v zozname najst sietovy adapter Broadcom, a preinstalovat, odinstalovat>>restart, system by to mal po restarte nainstalovat, ak najde ovladace, ak nie, tak treba ovladace najst a rucne nainstalovat.

daleko · #13 Příspěvek od **daleko** » 13 kvě 2014 06:37

jak uz jsem psal, pri pokusu o tuto akci mi byl "odepren pristup"...jina rada?

daleko · #14 Příspěvek od **daleko** » 13 kvě 2014 06:38

ale idu vyskouset jeste jednou, treba pomohly predesle akce...

#15 Příspěvek od **stell** » 13 kvě 2014 06:40

no vyskusaj teraz, preto ze mal si tam plno smejdov, ak nepojde tak skus to v nudzovom rezime, pod akym uctom robis??Admin, alebo standartny ucet, ??

VIRY.CZ

wifi-omezeny pristup/instalace ovladace-pristup odepren, atd

wifi-omezeny pristup/instalace ovladace-pristup odepren, atd

Re: wifi-omezeny pristup/instalace ovladace-pristup odepren,

Re: wifi-omezeny pristup/instalace ovladace-pristup odepren,

Re: wifi-omezeny pristup/instalace ovladace-pristup odepren,

Re: wifi-omezeny pristup/instalace ovladace-pristup odepren,

Re: wifi-omezeny pristup/instalace ovladace-pristup odepren,

Re: wifi-omezeny pristup/instalace ovladace-pristup odepren,

Re: wifi-omezeny pristup/instalace ovladace-pristup odepren,

Re: wifi-omezeny pristup/instalace ovladace-pristup odepren,

Re: wifi-omezeny pristup/instalace ovladace-pristup odepren,

Re: wifi-omezeny pristup/instalace ovladace-pristup odepren,

Re: wifi-omezeny pristup/instalace ovladace-pristup odepren,

Re: wifi-omezeny pristup/instalace ovladace-pristup odepren,

Re: wifi-omezeny pristup/instalace ovladace-pristup odepren,

Re: wifi-omezeny pristup/instalace ovladace-pristup odepren,