Odvirování PC, zrychlení počítače, vzdálená pomoc prostřednictvím služby neslape.cz

vyskakováním reklamních oken - Radim 1938

Máte problém s virem? Vložte sem log z FRST nebo RSIT.

Moderátor: Moderátoři

Pravidla fóra
Pokud chcete pomoc, vložte log z FRST [návod zde] nebo RSIT [návod zde]

Jednotlivé thready budou po vyřešení uzamčeny. Stejně tak ty, které budou nečinné déle než 14 dní. Vizte Pravidlo o zamykání témat. Děkujeme za pochopení.

!NOVINKA!
Nově lze využívat služby vzdálené pomoci, kdy se k vašemu počítači připojí odborník a bližší informace o problému si od vás získá telefonicky! Více na www.neslape.cz
Zamčeno
Zpráva
Autor
Radim 1938
Návštěvník
Návštěvník
Příspěvky: 4
Registrován: 20 říj 2014 05:21

vyskakováním reklamních oken - Radim 1938

#1 Příspěvek od Radim 1938 »

Dobrý den,
řeším tento problém již podruhé, poprvé když se mi toto stalo, že začla náhodně vyskakovat okna s reklamou, tak jsem postupoval dle pokynů zde napsaných, stáhl si JRT a adwcleaner, po spuštění bylo vše v pořádku, dnes mi nastala stejná situace, začala mi vyskakovat jedna reklama přes druhou a to tak, že během pár vteřin mám zakrytou celou obrazovku, tak jsem opět postupoval podle pokynů, ale tentokrát to nepomohlo, nejsem žádný IT a je to pro mě španělská vesnice. Nevím co mám dělat. všiml jsem si jen toho, že u adwcleaneru po skenování v okně nejsou žádné údaje, přesto odkliknu clean a počítač se potom restartuje a nic. reklamy stále vyskakují. v předchzím případě jsem po scanování v adwcleaneru měl v okně soupis asi věcí které to našlo (opravdu tomu nehovím :) ) a po odkliknutí clean je to smazalo a byl klid, ale teď nic. ?? poradíte mi někdo? předem děkuji za odpověď
Naposledy upravil(a) vyosek dne 20 říj 2014 07:26, celkem upraveno 1 x.
Důvod: Tema oddeleno od puvodniho - do cizich se nevstupuje
Nahoru
Uživatelský avatar
JaRon
Moderátor
Moderátor
Příspěvky: 15729
Registrován: 29 bře 2005 13:39
Bydliště: BB-SK

Re: vyskakováním reklamních oken - Radim 1938

#2 Příspěvek od JaRon »

ahoj
k zakladnej diagnostike potrebujeme log RSIT
FRST |ADWCleaner |MBAM |CCleaner |AVPTool

V prípade spokojnosti je možné podporiť fórum https://platba.viry.cz/payment/
Nahoru
Radim 1938
Návštěvník
Návštěvník
Příspěvky: 4
Registrován: 20 říj 2014 05:21

Re: vyskakováním reklamních oken - Radim 1938

#3 Příspěvek od Radim 1938 »

opravdu jem antitalent je to toto? co potřebujete?

Logfile of random's system information tool 1.10 (written by random/random)
Run by Radim at 2014-10-20 20:13:34
Microsoft Windows 7 Home Premium Service Pack 1
System drive C: has 4 GB (1%) free of 288 GB
Total RAM: 2813 MB (46% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 20:13:53, on 20.10.2014
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v11.0 (11.00.9600.17344)
Boot mode: Normal

Running processes:
C:\windows\system32\taskhost.exe
C:\windows\system32\Dwm.exe
C:\windows\Explorer.EXE
C:\Program Files\Hewlett-Packard\HP Wireless Assistant\HPWAMain.exe
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\Program Files\Canon\MyPrinter\BJMYPRT.EXE
C:\Program Files\Adobe\Photoshop Elements 6.0\apdproxy.exe
C:\Program Files\ESET\ESET Smart Security\egui.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\HP\HP Wireless Comfort Mouse\TSR\xDaemon.exe
C:\Program Files\Hewlett-Packard\HP Advisor\HPAdvisor.exe
C:\Program Files\Common Files\LightScribe\LightScribeControlPanel.exe
C:\Program Files\Seznam.cz\bin\postak.exe
C:\Program Files\Philips\Philips Songbird\extensions\philips-autoplay@philips.com\application\PhilipsSongbirdLauncher.exe
C:\Program Files\Windows Sidebar\sidebar.exe
C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
C:\Program Files\Skype\Phone\Skype.exe
C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe
C:\Program Files\McAfee Security Scan\3.8.150\SSScheduler.exe
C:\Program Files\Microsoft Office\Office12\ONENOTEM.EXE
C:\Program Files\WIDCOMM\Bluetooth Software\BtStackServer.exe
C:\PROGRA~1\Raptr\raptr.exe
C:\Program Files\Hewlett-Packard\Shared\hpqToaster.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
C:\PROGRA~1\Raptr\raptr_im.exe
C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
C:\windows\system32\taskeng.exe
C:\Program Files\Mozilla Firefox\plugin-container.exe
C:\windows\system32\Macromed\Flash\FlashPlayerPlugin_15_0_0_152.exe
C:\windows\system32\Macromed\Flash\FlashPlayerPlugin_15_0_0_152.exe
C:\windows\system32\SearchFilterHost.exe
C:\Users\Radim\Downloads\RSIT.exe
C:\Program Files\trend micro\Radim.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
O2 - BHO: MSS+ Identifier - {0E8A89AD-95D7-40EB-8D9D-083EF7066A01} - C:\Program Files\McAfee Security Scan\3.8.150\McAfeeMSS_IE.dll
O2 - BHO: NetXfer - {83B80A9C-D91A-4F22-8DCF-EA7204039F79} - C:\Program Files\Xi\NetXfer\NXIEHelper.dll
O2 - BHO: Pomocník pro přihlášení ke službě Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: neurowise - {d08ab008-0647-4784-8e2c-5769cd4a7c3a} - C:\Program Files\neurowise\neurowisebho.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll (file missing)
O2 - BHO: HP Network Check Helper - {E76FD755-C1BA-4DCB-9F13-99BD91223ADE} - C:\Program Files\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\HPNetworkCheckPlugin.dll
O2 - BHO: Ukazatel S-Rank - {EA837F48-5AD1-443E-AE34-FFE03CBF3099} - C:\Program Files\Seznam.cz\bin\core.4.dll
O3 - Toolbar: (no name) - {0BF43445-2F28-4351-9252-17FE6E806AA0} - (no file)
O3 - Toolbar: Nástroje Lištičky - {1EA00BE1-6E54-4E2A-8099-680300BF23E1} - C:\Program Files\Seznam.cz\toolbar\toolbar.dll
O3 - Toolbar: NetTransport - {C16CBAAC-A75C-4DB5-A0DD-CDF5CAFCDD3A} - C:\Program Files\Xi\NetXfer\NXToolBar.dll
O4 - HKLM\..\Run: [WirelessAssistant] C:\Program Files\Hewlett-Packard\HP Wireless Assistant\HPWAMain.exe
O4 - HKLM\..\Run: [SynTPEnh] %ProgramFiles%\Synaptics\SynTP\SynTPEnh.exe
O4 - HKLM\..\Run: [StartCCC] "C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun
O4 - HKLM\..\Run: [CanonSolutionMenu] C:\Program Files\Canon\SolutionMenu\CNSLMAIN.exe /logon
O4 - HKLM\..\Run: [CanonMyPrinter] C:\Program Files\Canon\MyPrinter\BJMyPrt.exe /logon
O4 - HKLM\..\Run: [Adobe Photo Downloader] "C:\Program Files\Adobe\Photoshop Elements 6.0\apdproxy.exe"
O4 - HKLM\..\Run: [egui] "C:\Program Files\ESET\ESET Smart Security\egui.exe" /hide /waitservice
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [NeroFilterCheck] C:\windows\system32\NeroCheck.exe
O4 - HKLM\..\Run: [HP Input Device Main Program] C:\Program Files\HP\HP Wireless Comfort Mouse\TSR\xDaemon.exe
O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKLM\..\RunOnce: [NCPluginUpdater] "C:\Program Files\Hewlett-Packard\HP Health Check\ActiveCheck\product_line\NCPluginUpdater.exe" Update
O4 - HKCU\..\Run: [HPADVISOR] C:\Program Files\Hewlett-Packard\HP Advisor\HPAdvisor.exe view=DOCKVIEW
O4 - HKCU\..\Run: [LightScribe Control Panel] C:\Program Files\Common Files\LightScribe\LightScribeControlPanel.exe -hidden
O4 - HKCU\..\Run: [Raptr] C:\PROGRA~1\Raptr\raptrstub.exe --startup
O4 - HKCU\..\Run: [Seznam Postak] "C:\Program Files\Seznam.cz\bin\postak.exe" -s
O4 - HKCU\..\Run: [PhilipsSongbirdLauncher] C:\Program Files\Philips\Philips Songbird\extensions\philips-autoplay@philips.com\application\PhilipsSongbirdLauncher.exe
O4 - HKCU\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun
O4 - HKCU\..\Run: [Skype] "C:\Program Files\Skype\Phone\Skype.exe" /minimized /regrun
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'NETWORK SERVICE')
O4 - Startup: Výřezy obrazovky a spuštění aplikace OneNote 2007.lnk = C:\Program Files\Microsoft Office\Office12\ONENOTEM.EXE
O4 - Global Startup: Bluetooth.lnk = ?
O4 - Global Startup: McAfee Security Scan Plus.lnk = C:\Program Files\McAfee Security Scan\3.8.150\SSScheduler.exe
O8 - Extra context menu item: E&xport to Microsoft Excel - res://c:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Office Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O8 - Extra context menu item: Odeslat obrázek do zařízení &Bluetooth... - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie_ctx.htm
O8 - Extra context menu item: Odeslat stránku do zařízení &Bluetooth... - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
O8 - Extra context menu item: Stáhnout pomocí NetXferu - C:\Program Files\Xi\NetXfer\NXAddLink.html
O8 - Extra context menu item: Stáhnout vše pomocí Net&Xferu - C:\Program Files\Xi\NetXfer\NXAddList.html
O9 - Extra button: Nastavení Lištičky ... - {0E46D7B6-887D-4F81-B4CA-FCC92AF73610} - C:\Program Files\Seznam.cz\listicka.dll
O9 - Extra 'Tools' menuitem: Nastavení Lištičky ... - {0E46D7B6-887D-4F81-B4CA-FCC92AF73610} - C:\Program Files\Seznam.cz\listicka.dll
O9 - Extra button: @C:\Program Files\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\HPNetworkCheckPlugin.dll,-103 - {25510184-5A38-4A99-B273-DCA8EEF6CD08} - C:\Program Files\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\NCLauncherFromIE.exe
O9 - Extra 'Tools' menuitem: @C:\Program Files\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\HPNetworkCheckPlugin.dll,-102 - {25510184-5A38-4A99-B273-DCA8EEF6CD08} - C:\Program Files\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\NCLauncherFromIE.exe
O9 - Extra button: Odeslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: Od&eslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll
O9 - Extra button: Zvýrazňovač slov Lištičky - {4E6D6F90-31CA-4878-A7A3-1CD50F115A69} - C:\Program Files\Seznam.cz\listicka.dll
O9 - Extra 'Tools' menuitem: Zvýrazňovač slov Lištičky - {4E6D6F90-31CA-4878-A7A3-1CD50F115A69} - C:\Program Files\Seznam.cz\listicka.dll
O9 - Extra button: Skype Click to Call - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O9 - Extra 'Tools' menuitem: Skype Click to Call - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O9 - Extra button: Zdroje informací - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: @C:\Program Files\WIDCOMM\Bluetooth Software\btrez.dll,-4015 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
O9 - Extra 'Tools' menuitem: @C:\Program Files\WIDCOMM\Bluetooth Software\btrez.dll,-12650 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O15 - Trusted Zone: http://*.mcafee.com (HKLM)
O15 - Trusted Zone: http://betavscan.mcafeeasap.com (HKLM)
O15 - Trusted Zone: http://vs.mcafeeasap.com (HKLM)
O15 - Trusted Zone: http://www.mcafeeasap.com (HKLM)
O15 - ESC Trusted Zone: http://*.mcafee.com (HKLM)
O15 - ESC Trusted Zone: http://betavscan.mcafeeasap.com (HKLM)
O15 - ESC Trusted Zone: http://vs.mcafeeasap.com (HKLM)
O15 - ESC Trusted Zone: http://www.mcafeeasap.com (HKLM)
O17 - HKLM\System\CCS\Services\Tcpip\..\{4BA66BA9-B38B-4934-80DA-3CC935515B4A}: NameServer = 94.142.233.120,94.142.233.1
O18 - Protocol: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O20 - AppInit_DLLs:
O23 - Service: Adobe Active File Monitor V6 (AdobeActiveFileMonitor6.0) - Unknown owner - C:\Program Files\Adobe\Photoshop Elements 6.0\PhotoshopElementsFileAgent.exe
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: Agere Modem Call Progress Audio (AgereModemAudio) - LSI Corporation - C:\Program Files\LSI SoftModem\agrsmsvc.exe
O23 - Service: AMD External Events Utility - AMD - C:\windows\system32\atiesrxx.exe
O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
O23 - Service: Bonjour Service - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: Bluetooth Service (btwdins) - Broadcom Corporation. - C:\Program Files\WIDCOMM\Bluetooth Software\btwdins.exe
O23 - Service: ESET HTTP Server (EhttpSrv) - ESET - C:\Program Files\ESET\ESET Smart Security\EHttpSrv.exe
O23 - Service: ESET Service (ekrn) - ESET - C:\Program Files\ESET\ESET Smart Security\ekrn.exe
O23 - Service: FLEXnet Licensing Service - Macrovision Europe Ltd. - C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
O23 - Service: Služba Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: Služba Google Update (gupdatem) (gupdatem) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: HP Support Assistant Service - Hewlett-Packard Company - C:\Program Files\Hewlett-Packard\HP Support Framework\hpsa_service.exe
O23 - Service: HP Software Framework Service (hpqwmiex) - Hewlett-Packard Company - C:\Program Files\Hewlett-Packard\Shared\hpqWmiEx.exe
O23 - Service: Inkjet Printer/Scanner Extended Survey Program (IJPLMSVC) - Unknown owner - C:\Program Files\Canon\IJPLM\IJPLMSVC.EXE
O23 - Service: iPod Service - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files\Common Files\LightScribe\LSSrvc.exe
O23 - Service: McAfee Security Scan Component Host Service (McComponentHostService) - McAfee, Inc. - C:\Program Files\McAfee Security Scan\3.8.150\McCHSvc.exe
O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Mozilla Foundation - C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe
O23 - Service: RoxMediaDB10 - Sonic Solutions - c:\Program Files\Common Files\Roxio Shared\10.0\SharedCOM\RoxMediaDB10.exe
O23 - Service: Skype Updater (SkypeUpdate) - Skype Technologies - C:\Program Files\Skype\Updater\Updater.exe
O23 - Service: stllssvr - MicroVision Development, Inc. - c:\Program Files\Common Files\SureThing Shared\stllssvr.exe
O23 - Service: Update neurowise - Unknown owner - C:\Program Files\neurowise\updateneurowise.exe
O23 - Service: Util neurowise - Unknown owner - C:\Program Files\neurowise\bin\utilneurowise.exe

--
End of file - 13546 bytes

======Scheduled tasks folder======

C:\windows\tasks\Adobe Flash Player Updater.job - C:\windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe
C:\windows\tasks\GoogleUpdateTaskMachineCore.job - C:\Program Files\Google\Update\GoogleUpdate.exe /c
C:\windows\tasks\GoogleUpdateTaskMachineUA.job - C:\Program Files\Google\Update\GoogleUpdate.exe /ua /installsource scheduler
C:\windows\tasks\HPCeeScheduleForRadim.job - C:\Program Files\Hewlett-Packard\HP Ceement\HPCEE.exe HPCeeScheduleForRadim (null)

=========Mozilla firefox=========

ProfilePath - C:\Users\Radim\AppData\Roaming\Mozilla\Firefox\Profiles\mepp1f1e.default

prefs.js - "browser.search.useDBForOrder" - true

"fbphotozoom@installdaddy.com"=C:\Program Files\fbphotozoom\fbphotozoom.xpi


[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 15.0.0.152 Plugin
"Path"=C:\windows\system32\Macromed\Flash\NPSWF32_15_0_0_152.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@Apple.com/iTunes,version=]
"Description"=iTunes Detector Plug-in
"Path"=

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@Apple.com/iTunes,version=1.0]
"Description"=
"Path"=C:\Program Files\iTunes\Mozilla Plugins\npitunes.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@Google.com/GoogleEarthPlugin]
"Description"=Google Earth in your browser
"Path"=C:\Program Files\Google\Google Earth\plugin\npgeplugin.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@microsoft.com/GENUINE]
"Description"=
"Path"=disabled

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@tools.google.com/Google Update;version=3]
"Description"=Google Update
"Path"=C:\Program Files\Google\Update\1.3.24.15\npGoogleUpdate3.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@tools.google.com/Google Update;version=9]
"Description"=Google Update
"Path"=C:\Program Files\Google\Update\1.3.24.15\npGoogleUpdate3.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\Adobe Reader]
"Description"=Handles PDFs in-place in Firefox
"Path"=C:\Program Files\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll

C:\Program Files\Mozilla Firefox\extensions\
{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A}

C:\Program Files\Mozilla Firefox\components\
nsIQTScriptablePlugin.xpt

C:\Program Files\Mozilla Firefox\plugins\
npdeploytk.dll
NPOFF12.DLL
NPOFFICE.DLL
nppdf32.dll
npqtplugin.dll
npqtplugin2.dll
npqtplugin3.dll
npqtplugin4.dll
npqtplugin5.dll
npqtplugin6.dll
npqtplugin7.dll
QuickTimePlugin.class

C:\Users\Radim\AppData\Roaming\Mozilla\Firefox\Profiles\mepp1f1e.default\extensions\
{60005104-EF2D-E736-0B08-7124B447ED0B}

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{0E8A89AD-95D7-40EB-8D9D-083EF7066A01}]
MSS+ Identifier - C:\Program Files\McAfee Security Scan\3.8.150\McAfeeMSS_IE.dll [2014-04-09 96128]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{83B80A9C-D91A-4F22-8DCF-EA7204039F79}]
NXIECatcher Class - C:\Program Files\Xi\NetXfer\NXIEHelper.dll [2013-11-15 53248]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
Pomocník pro přihlášení ke službě Windows Live - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2009-02-17 408440]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{d08ab008-0647-4784-8e2c-5769cd4a7c3a}]
neurowise - C:\Program Files\neurowise\neurowisebho.dll [2014-10-18 250144]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre6\bin\jp2ssv.dll []

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{E76FD755-C1BA-4DCB-9F13-99BD91223ADE}]
HP Network Check Helper - C:\Program Files\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\HPNetworkCheckPlugin.dll [2013-08-28 286520]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{EA837F48-5AD1-443E-AE34-FFE03CBF3099}]
Ukazatel S-Rank - C:\Program Files\Seznam.cz\bin\core.4.dll [2012-01-10 1151520]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{0BF43445-2F28-4351-9252-17FE6E806AA0}
{1EA00BE1-6E54-4E2A-8099-680300BF23E1} - Nástroje Lištičky - C:\Program Files\Seznam.cz\toolbar\toolbar.dll [2010-10-06 187672]
{C16CBAAC-A75C-4DB5-A0DD-CDF5CAFCDD3A} - NetTransport - C:\Program Files\Xi\NetXfer\NXToolBar.dll [2013-11-14 57344]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"WirelessAssistant"=C:\Program Files\Hewlett-Packard\HP Wireless Assistant\HPWAMain.exe [2009-07-23 498744]
"SynTPEnh"=C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2009-07-30 1545512]
"StartCCC"=C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [2009-08-04 98304]
"CanonSolutionMenu"=C:\Program Files\Canon\SolutionMenu\CNSLMAIN.exe [2007-10-25 652624]
"CanonMyPrinter"=C:\Program Files\Canon\MyPrinter\BJMyPrt.exe [2007-09-13 1603152]
"Adobe Photo Downloader"=C:\Program Files\Adobe\Photoshop Elements 6.0\apdproxy.exe [2007-09-11 67488]
"egui"=C:\Program Files\ESET\ESET Smart Security\egui.exe [2009-09-11 2054360]
"QuickTime Task"=C:\Program Files\QuickTime\QTTask.exe [2010-03-18 421888]
"iTunesHelper"=C:\Program Files\iTunes\iTunesHelper.exe [2010-06-15 141624]
"NeroFilterCheck"=C:\windows\system32\NeroCheck.exe [2001-07-09 155648]
"HP Input Device Main Program"=C:\Program Files\HP\HP Wireless Comfort Mouse\TSR\xDaemon.exe [2008-10-17 356352]
"Adobe ARM"=C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2014-08-21 959176]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\RunOnce]
"NCPluginUpdater"=C:\Program Files\Hewlett-Packard\HP Health Check\ActiveCheck\product_line\NCPluginUpdater.exe [2014-10-07 21720]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"HPADVISOR"=C:\Program Files\Hewlett-Packard\HP Advisor\HPAdvisor.exe [2009-07-16 1668664]
"LightScribe Control Panel"=C:\Program Files\Common Files\LightScribe\LightScribeControlPanel.exe [2009-06-17 2363392]
"Raptr"=C:\PROGRA~1\Raptr\raptrstub.exe [2014-10-17 55568]
"Seznam Postak"=C:\Program Files\Seznam.cz\bin\postak.exe [2012-01-10 491040]
"PhilipsSongbirdLauncher"=C:\Program Files\Philips\Philips Songbird\extensions\philips-autoplay@philips.com\application\PhilipsSongbirdLauncher.exe [2011-09-15 346624]
"Sidebar"=C:\Program Files\Windows Sidebar\sidebar.exe [2010-11-20 1174016]
"Skype"=C:\Program Files\Skype\Phone\Skype.exe [2014-08-27 22041192]

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup
Bluetooth.lnk - C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe
McAfee Security Scan Plus.lnk - C:\Program Files\McAfee Security Scan\3.8.150\SSScheduler.exe

C:\Users\Radim\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
Výřezy obrazovky a spuštění aplikace OneNote 2007.lnk - C:\Program Files\Microsoft Office\Office12\ONENOTEM.EXE

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
"AppInit_DLLs"=" "

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=credssp.dll

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"DisableTaskMgr"=0

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorAdmin"=5
"ConsentPromptBehaviorUser"=3
"EnableUIADesktopToggle"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.msadpcm"=msadp32.acm
"midimapper"=midimap.dll
"wavemapper"=msacm32.drv
"VIDC.UYVY"=msyuv.dll
"VIDC.YUY2"=msyuv.dll
"VIDC.YVYU"=msyuv.dll
"VIDC.IYUV"=iyuv_32.dll
"vidc.i420"=iyuv_32.dll
"VIDC.YVU9"=tsbyuv.dll
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"vidc.cvid"=iccvid.dll
"MSVideo8"=VfWWDM32.dll
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"msacm.siren"=sirenacm.dll
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv
"vidc.xvid"=xvidvfw.dll

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*

======List of files/folders created in the last 1 month======

2014-10-20 20:13:35 ----D---- C:\Program Files\trend micro
2014-10-20 20:13:34 ----D---- C:\rsit
2014-10-18 14:33:44 ----D---- C:\Users\Radim\AppData\Roaming\Xi
2014-10-18 14:33:25 ----A---- C:\windows\system32\drivers\npf.sys
2014-10-18 14:33:21 ----D---- C:\Program Files\Xi
2014-10-18 14:32:10 ----D---- C:\Program Files\neurowise
2014-10-15 18:54:30 ----A---- C:\windows\system32\generaltel.dll
2014-10-15 18:54:29 ----A---- C:\windows\system32\aepdu.dll
2014-10-15 18:54:25 ----A---- C:\windows\system32\aeinv.dll
2014-10-15 18:54:23 ----A---- C:\windows\system32\win32k.sys
2014-10-15 18:53:38 ----A---- C:\windows\system32\rastls.dll
2014-10-15 18:53:34 ----A---- C:\windows\system32\JavaScriptCollectionAgent.dll
2014-10-15 18:53:34 ----A---- C:\windows\system32\ieetwproxystub.dll
2014-10-15 18:53:34 ----A---- C:\windows\system32\ieetwcollector.exe
2014-10-15 18:53:32 ----A---- C:\windows\system32\MsSpellCheckingFacility.exe
2014-10-15 18:53:31 ----A---- C:\windows\system32\jsproxy.dll
2014-10-15 18:53:31 ----A---- C:\windows\system32\ieUnatt.exe
2014-10-15 18:53:31 ----A---- C:\windows\system32\ieetwcollectorres.dll
2014-10-15 18:53:31 ----A---- C:\windows\system32\dxtmsft.dll
2014-10-15 18:53:30 ----A---- C:\windows\system32\vbscript.dll
2014-10-15 18:53:29 ----A---- C:\windows\system32\wininet.dll
2014-10-15 18:53:27 ----A---- C:\windows\system32\dxtrans.dll
2014-10-15 18:53:26 ----A---- C:\windows\system32\ieui.dll
2014-10-15 18:53:25 ----A---- C:\windows\system32\mshtmled.dll
2014-10-15 18:53:23 ----A---- C:\windows\system32\mshtmlmedia.dll
2014-10-15 18:53:22 ----A---- C:\windows\system32\MshtmlDac.dll
2014-10-15 18:53:21 ----A---- C:\windows\system32\iertutil.dll
2014-10-15 18:53:18 ----A---- C:\windows\system32\jscript9diag.dll
2014-10-15 18:53:16 ----A---- C:\windows\system32\jscript9.dll
2014-10-15 18:53:08 ----A---- C:\windows\system32\mshtml.dll
2014-10-15 18:53:04 ----A---- C:\windows\system32\iernonce.dll
2014-10-15 18:53:04 ----A---- C:\windows\system32\ie4uinit.exe
2014-10-15 18:53:03 ----A---- C:\windows\system32\urlmon.dll
2014-10-15 18:52:52 ----A---- C:\windows\system32\iedkcs32.dll
2014-10-15 18:52:50 ----A---- C:\windows\system32\ieapfltr.dll
2014-10-15 18:52:48 ----A---- C:\windows\system32\msfeeds.dll
2014-10-15 18:52:33 ----A---- C:\windows\system32\msrating.dll
2014-10-15 18:52:32 ----A---- C:\windows\system32\iesetup.dll
2014-10-15 18:52:18 ----A---- C:\windows\system32\ieframe.dll
2014-10-15 18:52:02 ----A---- C:\windows\system32\mscorier.dll
2014-10-15 18:52:02 ----A---- C:\windows\system32\dfshim.dll
2014-10-15 18:52:01 ----A---- C:\windows\system32\mscories.dll
2014-10-15 18:51:31 ----A---- C:\windows\system32\mstscax.dll
2014-10-15 18:51:29 ----A---- C:\windows\system32\mstsc.exe
2014-10-15 18:51:23 ----A---- C:\windows\system32\termsrv.dll
2014-10-15 18:51:21 ----A---- C:\windows\system32\winsta.dll
2014-10-15 18:51:20 ----A---- C:\windows\system32\winlogon.exe
2014-10-15 18:51:20 ----A---- C:\windows\system32\rdpcorekmts.dll
2014-10-15 18:51:20 ----A---- C:\windows\system32\drivers\rdpwd.sys
2014-10-15 18:51:19 ----A---- C:\windows\system32\aaclient.dll
2014-10-15 18:51:18 ----A---- C:\windows\system32\TSpkg.dll
2014-10-15 18:51:18 ----A---- C:\windows\system32\drivers\tssecsrv.sys
2014-10-15 18:51:18 ----A---- C:\windows\system32\credssp.dll
2014-10-15 18:50:12 ----A---- C:\windows\system32\msi.dll
2014-10-15 18:49:09 ----A---- C:\windows\system32\packager.dll
2014-10-15 18:48:52 ----A---- C:\windows\system32\blackbox.dll
2014-10-15 18:48:51 ----A---- C:\windows\system32\drmv2clt.dll
2014-10-15 18:48:47 ----A---- C:\windows\system32\wmdrmsdk.dll
2014-10-15 18:48:36 ----A---- C:\windows\system32\wmp.dll
2014-10-15 18:48:25 ----A---- C:\windows\system32\mf.dll
2014-10-15 18:48:24 ----A---- C:\windows\system32\drmmgrtn.dll
2014-10-15 18:48:22 ----A---- C:\windows\system32\AUDIOKSE.dll
2014-10-15 18:48:21 ----A---- C:\windows\system32\ci.dll
2014-10-15 18:48:18 ----A---- C:\windows\system32\drivers\PEAuth.sys
2014-10-15 18:48:17 ----A---- C:\windows\system32\AudioSes.dll
2014-10-15 18:48:15 ----A---- C:\windows\system32\winload.exe
2014-10-15 18:48:14 ----A---- C:\windows\system32\winresume.exe
2014-10-15 18:48:10 ----A---- C:\windows\system32\ntkrnlpa.exe
2014-10-15 18:48:06 ----A---- C:\windows\system32\EncDump.dll
2014-10-15 18:48:05 ----A---- C:\windows\system32\cryptsvc.dll
2014-10-15 18:48:04 ----A---- C:\windows\system32\wintrust.dll
2014-10-15 18:48:00 ----A---- C:\windows\system32\ntoskrnl.exe
2014-10-15 18:47:57 ----A---- C:\windows\system32\evr.dll
2014-10-15 18:47:55 ----A---- C:\windows\system32\quartz.dll
2014-10-15 18:47:51 ----A---- C:\windows\system32\crypt32.dll
2014-10-15 18:47:49 ----A---- C:\windows\system32\pcasvc.dll
2014-10-15 18:47:49 ----A---- C:\windows\system32\cryptui.dll
2014-10-15 18:47:48 ----A---- C:\windows\system32\mfplat.dll
2014-10-15 18:47:46 ----A---- C:\windows\system32\cryptsp.dll
2014-10-15 18:47:46 ----A---- C:\windows\system32\AudioEng.dll
2014-10-15 18:47:43 ----A---- C:\windows\system32\msscp.dll
2014-10-15 18:47:43 ----A---- C:\windows\system32\audiosrv.dll
2014-10-15 18:47:42 ----A---- C:\windows\system32\msnetobj.dll
2014-10-15 18:47:42 ----A---- C:\windows\system32\audiodg.exe
2014-10-15 18:47:41 ----A---- C:\windows\system32\rrinstaller.exe
2014-10-15 18:47:41 ----A---- C:\windows\system32\mfps.dll
2014-10-15 18:47:41 ----A---- C:\windows\system32\appidsvc.dll
2014-10-15 18:47:40 ----A---- C:\windows\system32\appidpolicyconverter.exe
2014-10-15 18:47:39 ----A---- C:\windows\system32\appidapi.dll
2014-10-15 18:47:37 ----A---- C:\windows\system32\setbcdlocale.dll
2014-10-15 18:47:37 ----A---- C:\windows\system32\mfpmp.exe
2014-10-15 18:47:36 ----A---- C:\windows\system32\drivers\appid.sys
2014-10-15 18:47:35 ----A---- C:\windows\system32\appidcertstorecheck.exe
2014-10-15 18:47:34 ----A---- C:\windows\system32\wmploc.DLL
2014-10-15 18:47:34 ----A---- C:\windows\system32\spwmp.dll
2014-10-15 18:47:34 ----A---- C:\windows\system32\mferror.dll
2014-10-15 18:47:34 ----A---- C:\windows\system32\dxmasf.dll
2014-10-15 18:22:55 ----ASH---- C:\pagefile.sys
2014-10-01 14:23:08 ----D---- C:\Users\Radim\AppData\Roaming\Softland
2014-10-01 14:17:46 ----D---- C:\ProgramData\Softland
2014-10-01 14:16:40 ----D---- C:\Program Files\Softland
2014-10-01 14:16:15 ----D---- C:\ProgramData\regid.2008-09.org.wixtoolset
2014-10-01 14:16:14 ----D---- C:\ProgramData\Package Cache
2014-10-01 10:06:31 ----D---- C:\Program Files\Common Files\Skype
2014-10-01 07:51:45 ----A---- C:\windows\system32\qdvd.dll
2014-09-25 10:55:44 ----D---- C:\Program Files\Mozilla Firefox
2014-09-24 10:11:39 ----A---- C:\windows\system32\tzres.dll

======List of files/folders modified in the last 1 month======

2014-10-20 20:13:47 ----D---- C:\windows\Temp
2014-10-20 20:13:47 ----D---- C:\windows\Prefetch
2014-10-20 20:13:35 ----RD---- C:\Program Files
2014-10-20 20:06:56 ----D---- C:\Users\Radim\AppData\Roaming\Raptr
2014-10-20 20:05:32 ----D---- C:\Users\Radim\AppData\Roaming\Skype
2014-10-20 20:04:13 ----D---- C:\windows\system32\config
2014-10-20 06:11:01 ----D---- C:\AdwCleaner
2014-10-19 12:50:26 ----D---- C:\windows\Minidump
2014-10-19 12:50:26 ----D---- C:\Windows
2014-10-19 09:49:41 ----SHD---- C:\System Volume Information
2014-10-19 09:21:40 ----SHD---- C:\windows\Installer
2014-10-18 15:43:46 ----D---- C:\windows\Tasks
2014-10-18 15:43:46 ----D---- C:\windows\system32\Tasks
2014-10-18 15:31:33 ----D---- C:\Program Files\Raptr
2014-10-18 15:26:31 ----HD---- C:\ProgramData
2014-10-18 15:21:45 ----D---- C:\windows\System32
2014-10-18 14:33:25 ----D---- C:\windows\system32\drivers
2014-10-17 18:52:08 ----D---- C:\windows\Microsoft.NET
2014-10-17 14:19:52 ----RSD---- C:\windows\assembly
2014-10-16 18:06:51 ----D---- C:\windows\system32\catroot2
2014-10-16 18:05:46 ----D---- C:\windows\winsxs
2014-10-16 18:02:09 ----SD---- C:\windows\system32\CompatTel
2014-10-16 18:02:08 ----D---- C:\windows\system32\en-US
2014-10-16 18:02:07 ----D---- C:\Program Files\Internet Explorer
2014-10-16 18:02:05 ----D---- C:\windows\system32\cs-CZ
2014-10-16 18:02:02 ----D---- C:\windows\system32\Dism
2014-10-16 18:02:02 ----D---- C:\Program Files\Windows Media Player
2014-10-16 18:02:00 ----D---- C:\windows\system32\CodeIntegrity
2014-10-16 18:02:00 ----D---- C:\windows\system32\Boot
2014-10-16 00:05:17 ----D---- C:\ProgramData\Microsoft Help
2014-10-15 23:50:39 ----D---- C:\windows\system32\MRT
2014-10-15 23:50:34 ----A---- C:\windows\system32\MRT.exe
2014-10-15 18:46:59 ----D---- C:\windows\system32\catroot
2014-10-14 20:00:33 ----A---- C:\windows\system32\HP_ActiveX_Patch_NOT_DETECTED.txt
2014-10-08 17:17:50 ----D---- C:\windows\inf
2014-10-08 17:17:50 ----A---- C:\windows\system32\PerfStringBackup.INI
2014-10-07 17:25:20 ----D---- C:\Program Files\Recuva
2014-10-01 14:17:19 ----D---- C:\windows\system32\DriverStore
2014-10-01 14:05:32 ----D---- C:\Program Files\Common Files\Adobe
2014-10-01 14:05:24 ----D---- C:\ProgramData\Adobe
2014-10-01 14:05:18 ----D---- C:\Program Files\Adobe
2014-10-01 11:15:04 ----D---- C:\windows\ModemLogs
2014-10-01 11:14:59 ----D---- C:\windows\system32\FxsTmp
2014-10-01 10:06:51 ----D---- C:\ProgramData\Skype
2014-10-01 10:06:31 ----RD---- C:\Program Files\Skype
2014-10-01 10:06:31 ----D---- C:\Program Files\Common Files
2014-10-01 09:55:14 ----D---- C:\windows\system32\wfp
2014-10-01 09:55:11 ----D---- C:\windows\system32\wbem
2014-10-01 09:53:22 ----D---- C:\windows\registration
2014-10-01 09:53:13 ----SD---- C:\Users\Radim\AppData\Roaming\Microsoft
2014-09-30 08:32:27 ----D---- C:\Users\Radim\AppData\Roaming\BSplayer
2014-09-26 13:50:05 ----D---- C:\Program Files\Mozilla Maintenance Service

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 aic78xx;aic78xx; C:\windows\system32\DRIVERS\djsvs.sys [2009-07-14 70720]
R0 AtiPcie;AMD PCI Express (3GIO) Filter; C:\windows\system32\DRIVERS\AtiPcie.sys [2009-05-04 14392]
R0 pciide;pciide; C:\windows\system32\drivers\pciide.sys [2009-07-14 12368]
R0 PxHelp20;PxHelp20; C:\windows\System32\Drivers\PxHelp20.sys [2009-07-09 45200]
R0 rdyboost;ReadyBoost; C:\windows\System32\drivers\rdyboost.sys [2010-11-20 173440]
R1 ehdrv;ehdrv; C:\windows\system32\DRIVERS\ehdrv.sys [2009-09-11 108792]
R1 mfehidk;McAfee Inc. mfehidk; C:\windows\system32\drivers\mfehidk.sys [2009-05-16 214024]
R1 mfetdik;McAfee Inc. mfetdik; C:\windows\system32\drivers\mfetdik.sys [2009-05-16 55336]
R1 vwififlt;Virtual WiFi Filter Driver; C:\windows\system32\DRIVERS\vwififlt.sys [2009-07-14 48128]
R2 eamon;eamon; C:\windows\system32\DRIVERS\eamon.sys [2009-09-11 116008]
R2 epfw;epfw; C:\windows\system32\DRIVERS\epfw.sys [2009-09-11 135048]
R2 epfwwfp;epfwwfp; C:\windows\system32\DRIVERS\epfwwfp.sys [2009-09-11 38240]
R3 AgereSoftModem;Agere Systems Soft Modem; C:\windows\system32\DRIVERS\AGRSM.sys [2009-07-27 1161664]
R3 atikmdag;atikmdag; C:\windows\system32\DRIVERS\atikmdag.sys [2009-08-04 4994048]
R3 BCM43XX;Ovladač síťového adaptéru Broadcom 802.11; C:\windows\system32\DRIVERS\bcmwl6.sys [2010-01-18 2506232]
R3 BthEnum;Ovladač pro Bluetooth Request Block; C:\windows\system32\drivers\BthEnum.sys [2009-07-14 34816]
R3 BthPan;Bluetooth Device (Personal Area Network); C:\windows\system32\DRIVERS\bthpan.sys [2009-07-14 93696]
R3 BTHUSB;Ovladač rozhraní USB radiostanice Bluetooth; C:\windows\System32\Drivers\BTHUSB.sys [2011-04-28 60416]
R3 btwaudio;Bluetooth Audio Device Service; C:\windows\system32\drivers\btwaudio.sys [2009-07-01 86056]
R3 btwavdt;Bluetooth AVDT Service; C:\windows\system32\DRIVERS\btwavdt.sys [2009-07-01 108072]
R3 btwl2cap;Bluetooth L2CAP Service; C:\windows\system32\DRIVERS\btwl2cap.sys [2009-04-08 29472]
R3 btwrchid;btwrchid; C:\windows\system32\DRIVERS\btwrchid.sys [2009-07-01 18344]
R3 Epfwndis;Eset Personal Firewall; C:\windows\system32\DRIVERS\Epfwndis.sys [2009-06-19 33096]
R3 GEARAspiWDM;GEAR ASPI Filter Driver; C:\windows\system32\DRIVERS\GEARAspiWDM.sys [2010-02-12 15664]
R3 RFCOMM;Bluetooth Device (RFCOMM Protocol TDI); C:\windows\system32\DRIVERS\rfcomm.sys [2009-07-14 129536]
R3 SNP2UVC;USB2.0 PC Camera (SNP2UVC); C:\windows\system32\DRIVERS\snp2uvc.sys [2009-07-02 1765168]
R3 SynTP;Synaptics TouchPad Driver; C:\windows\system32\DRIVERS\SynTP.sys [2009-07-30 213680]
R3 usbscan;Ovladač skeneru USB; C:\windows\system32\drivers\usbscan.sys [2013-07-03 36352]
R3 vwifimp;Microsoft Virtual WiFi Miniport Service; C:\windows\system32\DRIVERS\vwifimp.sys [2009-07-14 14336]
S2 Parvdm;Parvdm; C:\windows\system32\DRIVERS\parvdm.sys [2009-07-14 8704]
S3 amdagp;Ovladač filtru AMD portu AGP; C:\windows\system32\drivers\amdagp.sys [2009-07-14 53312]
S3 b57nd60x;Broadcom NetXtreme Gigabit Ethernet - NDIS 6.0; C:\windows\system32\DRIVERS\b57nd60x.sys [2009-07-14 229888]
S3 BTHPORT;Ovladač portu Bluetooth; C:\windows\System32\Drivers\BTHport.sys [2012-07-06 393728]
S3 HpqKbFiltr;HpqKbFilter Driver; C:\windows\system32\DRIVERS\HpqKbFiltr.sys [2009-04-29 15872]
S3 hwdatacard;Huawei DataCard USB Modem and USB Serial; C:\windows\system32\DRIVERS\ewusbmdm.sys [2008-09-26 101760]
S3 igfx;igfx; C:\windows\system32\DRIVERS\igdkmd32.sys [2009-06-10 4756480]
S3 MfeAVFK;McAfee Inc. MfeAVFK; C:\windows\system32\drivers\MfeAVFK.sys [2009-05-16 79816]
S3 MfeBOPK;McAfee Inc. MfeBOPK; C:\windows\system32\drivers\MfeBOPK.sys [2009-05-16 35272]
S3 MfeRKDK;McAfee Inc. MfeRKDK; C:\windows\system32\drivers\MfeRKDK.sys [2009-05-16 34248]
S3 NPF;WinPcap Packet Driver (NPF); C:\windows\system32\drivers\NPF.sys [2013-03-01 36600]
S3 sisagp;Filtr SIS sběrnice AGP; C:\windows\system32\drivers\sisagp.sys [2009-07-14 52304]
S3 STHDA;IDT High Definition Audio CODEC; C:\windows\system32\DRIVERS\stwrt.sys []
S3 TPM;TPM; C:\windows\system32\drivers\tpm.sys [2009-07-14 30720]
S3 TsUsbFlt;@%SystemRoot%\system32\drivers\tsusbflt.sys,-1; C:\windows\System32\drivers\tsusbflt.sys [2010-11-20 52224]
S3 upperdev;upperdev; C:\windows\system32\DRIVERS\usbser_lowerflt.sys []
S3 viaagp;Filtr VIA sběrnice AGP; C:\windows\system32\drivers\viaagp.sys [2009-07-14 53328]
S3 ViaC7;VIA C7 Processor Driver; C:\windows\system32\DRIVERS\viac7.sys [2009-07-14 52736]
S3 WinUsb;WinUsb; C:\windows\system32\DRIVERS\WinUsb.sys [2010-11-20 35968]
S3 WPRO_40_1340;WinPcap Packet Driver (WPRO_40_1340); C:\windows\system32\drivers\WPRO_40_1340.sys []

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 AdobeActiveFileMonitor6.0;Adobe Active File Monitor V6; C:\Program Files\Adobe\Photoshop Elements 6.0\PhotoshopElementsFileAgent.exe [2007-09-11 124832]
R2 AdobeARMservice;Adobe Acrobat Update Service; C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe [2014-09-12 64704]
R2 AgereModemAudio;Agere Modem Call Progress Audio; C:\Program Files\LSI SoftModem\agrsmsvc.exe [2009-07-27 14336]
R2 AMD External Events Utility;AMD External Events Utility; C:\windows\system32\atiesrxx.exe [2009-08-04 176128]
R2 Apple Mobile Device;Apple Mobile Device; C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe [2010-06-10 144176]
R2 Bonjour Service;Bonjour Service; C:\Program Files\Bonjour\mDNSResponder.exe [2010-05-18 345376]
R2 btwdins;Bluetooth Service; C:\Program Files\WIDCOMM\Bluetooth Software\btwdins.exe [2009-07-30 582944]
R2 ekrn;ESET Service; C:\Program Files\ESET\ESET Smart Security\ekrn.exe [2009-09-11 735960]
R2 HP Support Assistant Service;HP Support Assistant Service; C:\Program Files\Hewlett-Packard\HP Support Framework\hpsa_service.exe [2013-11-04 92160]
R2 LightScribeService;LightScribeService Direct Disc Labeling Service; C:\Program Files\Common Files\LightScribe\LSSrvc.exe [2009-06-17 73728]
R2 NovaPdfServer;novaPDF Server; C:\Program Files\Softland\novaPDF 8\Server\novapdfs.exe [2014-08-01 204576]
R2 Update neurowise;Update neurowise; C:\Program Files\neurowise\updateneurowise.exe [2014-10-20 523552]
R2 Util neurowise;Util neurowise; C:\Program Files\neurowise\bin\utilneurowise.exe [2014-10-20 523552]
R3 hpqwmiex;HP Software Framework Service; C:\Program Files\Hewlett-Packard\Shared\hpqWmiEx.exe [2013-05-13 1129760]
R3 iPod Service;iPod Service; C:\Program Files\iPod\bin\iPodService.exe [2010-06-15 540472]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2013-09-11 105144]
S2 gupdate;Služba Google Update (gupdate); C:\Program Files\Google\Update\GoogleUpdate.exe [2010-08-26 135664]
S2 SkypeUpdate;Skype Updater; C:\Program Files\Skype\Updater\Updater.exe [2014-04-03 315008]
S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service; C:\windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2014-09-15 267440]
S3 EhttpSrv;ESET HTTP Server; C:\Program Files\ESET\ESET Smart Security\EHttpSrv.exe [2009-09-11 20680]
S3 FLEXnet Licensing Service;FLEXnet Licensing Service; C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe [2010-02-02 654848]
S3 gupdatem;Služba Google Update (gupdatem); C:\Program Files\Google\Update\GoogleUpdate.exe [2010-08-26 135664]
S3 IEEtwCollectorService;@%SystemRoot%\system32\ieetwcollectorres.dll,-1000; C:\windows\system32\IEEtwCollector.exe [2014-09-19 108032]
S3 IJPLMSVC;Inkjet Printer/Scanner Extended Survey Program; C:\Program Files\Canon\IJPLM\IJPLMSVC.EXE [2008-01-22 103808]
S3 McComponentHostService;McAfee Security Scan Component Host Service; C:\Program Files\McAfee Security Scan\3.8.150\McCHSvc.exe [2014-04-09 235696]
S3 MozillaMaintenance;Mozilla Maintenance Service; C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe [2014-09-25 114288]
S3 odserv;Microsoft Office Diagnostics Service; C:\Program Files\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE [2011-07-20 440696]
S3 ose;Office Source Engine; C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2006-10-26 145184]
S3 RoxMediaDB10;RoxMediaDB10; c:\Program Files\Common Files\Roxio Shared\10.0\SharedCOM\RoxMediaDB10.exe [2009-06-13 1120752]
S3 stllssvr;stllssvr; c:\Program Files\Common Files\SureThing Shared\stllssvr.exe [2009-04-30 74392]
S3 WatAdminSvc;@%SystemRoot%\system32\Wat\WatUX.exe,-601; C:\windows\system32\Wat\WatAdminSvc.exe [2010-05-20 1343400]
S4 aspnet_state;Stavová služba ASP.NET; C:\windows\Microsoft.NET\Framework\v4.0.30319\aspnet_state.exe [2013-09-11 46688]
S4 NetMsmqActivator;@C:\windows\Microsoft.NET\Framework\v4.0.30319\\ServiceModelInstallRC.dll,-8195; C:\windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe [2013-09-11 139856]
S4 NetPipeActivator;@C:\windows\Microsoft.NET\Framework\v4.0.30319\\ServiceModelInstallRC.dll,-8197; C:\windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe [2013-09-11 139856]
S4 NetTcpActivator;@C:\windows\Microsoft.NET\Framework\v4.0.30319\\ServiceModelInstallRC.dll,-8199; C:\windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe [2013-09-11 139856]

-----------------EOF-----------------
Nahoru
Uživatelský avatar
JaRon
Moderátor
Moderátor
Příspěvky: 15729
Registrován: 29 bře 2005 13:39
Bydliště: BB-SK

Re: vyskakováním reklamních oken - Radim 1938

#4 Příspěvek od JaRon »

urobil si to dobre :)
teraz nainstaluj MBAM - prescanuj a nechaj vycistit PC - log vloz
FRST |ADWCleaner |MBAM |CCleaner |AVPTool

V prípade spokojnosti je možné podporiť fórum https://platba.viry.cz/payment/
Nahoru
Radim 1938
Návštěvník
Návštěvník
Příspěvky: 4
Registrován: 20 říj 2014 05:21

Re: vyskakováním reklamních oken - Radim 1938

#5 Příspěvek od Radim 1938 »

Malwarebytes Anti-Malware
www.malwarebytes.org

Datum skenování: 21.10.2014
Čas skenování: 19:45:59
Protokol: mod.txt
Správce: Ano

Verze: 2.00.3.1025
Databáze malwaru: v2014.10.21.08
Databáze rootkitů: v2014.10.20.01
Licence: Zkušební verze
Ochrana proti malwaru: Zapnuto
Ochrana proti škodlivým webovým stránkám: Zapnuto
Sebeobrany: Vypnuto

OS: Windows 7 Service Pack 1
CPU: x86
Souborový systém: NTFS
Uživatel: Radim

Typ skenu: Sken hrozeb
Výsledek: Dokončeno
Prohledaných objektů: 312957
Uplynulý čas: 27 min, 54 sek

Paměť: Zapnuto
Po spuštění: Zapnuto
Souborový systém: Zapnuto
Archivy: Zapnuto
Rootkity: Vypnuto
Heuristika: Zapnuto
PUP: Zapnuto
PUM: Zapnuto

Procesy: 2
PUP.Optional.Neurowise.A, C:\Program Files\neurowise\updateneurowise.exe, 2156, Smazat při restartu, [1943db3cf28a73c33d838529b44d04fc]
PUP.Optional.Neurowise.A, C:\Program Files\neurowise\bin\utilneurowise.exe, 2224, Smazat při restartu, [6fed7a9d037996a0744c4a64be4307f9]

Moduly: 0
(Žádné zákerné zjištěny položek)

Klíče registru: 13
PUP.Optional.Neurowise.A, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\Update neurowise, Do karantény, [1943db3cf28a73c33d838529b44d04fc],
PUP.Optional.Neurowise.A, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\Util neurowise, Do karantény, [6fed7a9d037996a0744c4a64be4307f9],
PUP.Optional.Neurowise.A, HKLM\SOFTWARE\CLASSES\CLSID\{d08ab008-0647-4784-8e2c-5769cd4a7c3a}, Do karantény, [203c4ccbe29ac670f0cf07a78c75bd43],
PUP.Optional.Neurowise.A, HKLM\SOFTWARE\CLASSES\TYPELIB\{724dd777-5654-4d06-b3bc-c2ff56615998}, Do karantény, [203c4ccbe29ac670f0cf07a78c75bd43],
PUP.Optional.Neurowise.A, HKLM\SOFTWARE\CLASSES\INTERFACE\{E693A372-A8D4-4CBD-B011-66358BEA2F48}, Do karantény, [203c4ccbe29ac670f0cf07a78c75bd43],
PUP.Optional.Neurowise.A, HKLM\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXPLORER\BROWSER HELPER OBJECTS\{D08AB008-0647-4784-8E2C-5769CD4A7C3A}, Do karantény, [203c4ccbe29ac670f0cf07a78c75bd43],
PUP.Optional.Neurowise.A, HKLM\SOFTWARE\CLASSES\CLSID\{D08AB008-0647-4784-8E2C-5769CD4A7C3A}\INPROCSERVER32, Do karantény, [203c4ccbe29ac670f0cf07a78c75bd43],
PUP.Optional.BrowseFox.A, HKLM\SOFTWARE\CLASSES\CLSID\{4AA46D49-459F-4358-B4D1-169048547C23}, Do karantény, [9fbd5dba2557181e710a6f6c58aaa060],
PUP.Optional.Neurowise.A, HKLM\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\neurowise, Do karantény, [79e371a615676fc71874d3565ca7a957],
PUP.Optional.Neurowise.A, HKLM\SOFTWARE\neurowise, Do karantény, [89d33ddaff7da88ec8c564c541c2b34d],
PUP.Optional.FBPhotoZoom.A, HKLM\SOFTWARE\GOOGLE\CHROME\EXTENSIONS\mpieaakhacmfleokhjcjnpcnmnmpfkid, Do karantény, [fd5f4acd05770531528a94f4d72da957],
PUP.Optional.DataMngr.A, HKU\S-1-5-18-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\Datamngr, Do karantény, [5507bc5bc5b7b680ebe9b6b41fe5d927],
PUP.Optional.Neurowise.A, HKU\S-1-5-21-96372541-2469937655-519909426-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\neurowise, Do karantény, [2636090edaa226106d2156d3b84b25db],

Hodnoty registru: 1
PUP.Optional.FBPhotoZoom.A, HKLM\SOFTWARE\MOZILLA\FIREFOX\EXTENSIONS|fbphotozoom@installdaddy.com, C:\Program Files\fbphotozoom\fbphotozoom.xpi, Do karantény, [4d0fa86f3448d462fddedbadce3656aa]

Data registru: 0
(Žádné zákerné zjištěny položek)

Složky: 4
PUP.Optional.Neurowise.A, C:\Program Files\neurowise, Smazat při restartu, [79e371a615676fc71874d3565ca7a957],
PUP.Optional.Neurowise.A, C:\Program Files\neurowise\bin, Smazat při restartu, [79e371a615676fc71874d3565ca7a957],
PUP.Optional.Neurowise.A, C:\Program Files\neurowise\bin\plugins, Do karantény, [79e371a615676fc71874d3565ca7a957],
PUP.Optional.MindSpark.A, C:\Users\Radim\AppData\Roaming\Mozilla\Firefox\Profiles\mepp1f1e.default\OnlineMapFinder_9p, Do karantény, [d18b1205d6a695a19cabf008ea18a35d],

Soubory: 19
PUP.Optional.Neurowise.A, C:\Program Files\neurowise\updateneurowise.exe, Smazat při restartu, [1943db3cf28a73c33d838529b44d04fc],
PUP.Optional.Neurowise.A, C:\Program Files\neurowise\bin\utilneurowise.exe, Smazat při restartu, [6fed7a9d037996a0744c4a64be4307f9],
PUP.Optional.Neurowise.A, C:\Program Files\neurowise\neurowisebho.dll, Do karantény, [203c4ccbe29ac670f0cf07a78c75bd43],
PUP.Adware.Agent, C:\$Recycle.Bin\S-1-5-21-96372541-2469937655-519909426-1001\$RROJ8TE.rar\theyr_dicography.[cook_book].rar.exe, Do karantény, [cd8fa4738cf0ff37e3f5d73034cc3cc4],
PUP.Optional.Neurowise.A, C:\Users\Radim\AppData\Roaming\Mozilla\Firefox\Profiles\mepp1f1e.default\extensions\{fe651286-52a1-461b-a17a-f258b4b81968}.xpi, Do karantény, [213b7b9c18646acc6829968f5fa4ae52],
PUP.Optional.Neurowise.A, C:\Program Files\neurowise\neurowise.ico, Do karantény, [79e371a615676fc71874d3565ca7a957],
PUP.Optional.Neurowise.A, C:\Program Files\neurowise\0, Do karantény, [79e371a615676fc71874d3565ca7a957],
PUP.Optional.Neurowise.A, C:\Program Files\neurowise\neurowiseUninstall.exe, Do karantény, [79e371a615676fc71874d3565ca7a957],
PUP.Optional.Neurowise.A, C:\Program Files\neurowise\updateneurowise.InstallState, Do karantény, [79e371a615676fc71874d3565ca7a957],
PUP.Optional.Neurowise.A, C:\Program Files\neurowise\bin\sqlite3.dll, Do karantény, [79e371a615676fc71874d3565ca7a957],
PUP.Optional.Neurowise.A, C:\Program Files\neurowise\bin\utilneurowise.InstallState, Do karantény, [79e371a615676fc71874d3565ca7a957],
PUP.Optional.Neurowise.A, C:\Program Files\neurowise\bin\plugins\neurowise.Bromon.dll, Do karantény, [79e371a615676fc71874d3565ca7a957],
PUP.Optional.Neurowise.A, C:\Program Files\neurowise\bin\plugins\neurowise.BroStats.dll, Do karantény, [79e371a615676fc71874d3565ca7a957],
PUP.Optional.Neurowise.A, C:\Program Files\neurowise\bin\plugins\neurowise.CompatibilityChecker.dll, Do karantény, [79e371a615676fc71874d3565ca7a957],
PUP.Optional.Neurowise.A, C:\Program Files\neurowise\bin\plugins\neurowise.FFUpdate.dll, Do karantény, [79e371a615676fc71874d3565ca7a957],
PUP.Optional.Neurowise.A, C:\Program Files\neurowise\bin\plugins\neurowise.IEUpdate.dll, Do karantény, [79e371a615676fc71874d3565ca7a957],
PUP.Optional.SweetPacks.A, C:\Users\Radim\AppData\Local\Temp\BundleSweetIMSetup.exe, Do karantény, [bba1a077017b63d3c66ef23b9c679f61],
PUP.Optional.Babylon.A, C:\Users\Radim\AppData\Local\Temp\MybabylonTB.exe, Do karantény, [7ddff027423ad85e75c1c865788be917],
PUP.Optional.MindSpark.A, C:\Users\Radim\AppData\Roaming\Mozilla\Firefox\Profiles\mepp1f1e.default\OnlineMapFinder_9p\B24BC1ED-0CD4-4826-902F-54D3EC21A9AC.sqlite, Do karantény, [d18b1205d6a695a19cabf008ea18a35d],

Fyzické sektory: 0
(Žádné zákerné zjištěny položek)


(end)
Nahoru
Uživatelský avatar
JaRon
Moderátor
Moderátor
Příspěvky: 15729
Registrován: 29 bře 2005 13:39
Bydliště: BB-SK

Re: vyskakováním reklamních oken - Radim 1938

#6 Příspěvek od JaRon »

"nervak" bol zmazany, malo by byt po problemoch :) je tak :???:
FRST |ADWCleaner |MBAM |CCleaner |AVPTool

V prípade spokojnosti je možné podporiť fórum https://platba.viry.cz/payment/
Nahoru
Radim 1938
Návštěvník
Návštěvník
Příspěvky: 4
Registrován: 20 říj 2014 05:21

Re: vyskakováním reklamních oken - Radim 1938

#7 Příspěvek od Radim 1938 »

Vypadá to že ano.

Mnohokrát děkuji za pomoc !
Nahoru
Uživatelský avatar
JaRon
Moderátor
Moderátor
Příspěvky: 15729
Registrován: 29 bře 2005 13:39
Bydliště: BB-SK

Re: vyskakováním reklamních oken - Radim 1938

#8 Příspěvek od JaRon »

rado sa stalo :)
FRST |ADWCleaner |MBAM |CCleaner |AVPTool

V prípade spokojnosti je možné podporiť fórum https://platba.viry.cz/payment/
Nahoru
Zamčeno

Zpět na „Řešení problémů, logy“