prosím kontrola logu

Zpráva

Sustr1975 · #1 Příspěvek od **Sustr1975** » 13 led 2015 19:05

prosím o kontrolu logu

Run by uzivatel at 2015-01-13 16:46:39
Microsoft Windows XP Home Edition Service Pack 3
System drive C: has 182 GB (71%) free of 256 GB
Total RAM: 1015 MB (27% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 16:47:02, on 13.1.2015
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
c:\PROGRA~1\AVG\AVG2015\avgrsx.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\WIDCOMM\Bluetooth Software\bin\btwdins.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\AVG\AVG2015\avgidsagent.exe
C:\Program Files\AVG\AVG2015\avgwdsvc.exe
C:\Program Files\Java\jre7\bin\jqs.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Common Files\AVG Secure Search\vToolbarUpdater\3.2.0\ToolbarUpdater.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Common Files\AVG Secure Search\vToolbarUpdater\3.2.0\loggingserver.exe
C:\WINDOWS\RTHDCPL.EXE
C:\WINDOWS\SOUNDMAN.EXE
C:\Program Files\Elantech\ETDCtrl.exe
C:\WINDOWS\system32\igfxtray.exe
C:\WINDOWS\system32\hkcmd.exe
C:\Program Files\EeePC\ACPI\AsTray.exe
C:\Program Files\EeePC\ACPI\AsAcpiSvr.exe
C:\Program Files\EeePC\ACPI\AsEPCMon.exe
C:\Program Files\Common Files\Java\Java Update\jusched.exe
C:\WINDOWS\system32\igfxsrvc.exe
C:\WINDOWS\system32\igfxext.exe
C:\WINDOWS\system32\wbem\wmiapsrv.exe
C:\Program Files\AVG\AVG2015\avgnsx.exe
C:\Program Files\AVG\AVG2015\avgemcx.exe
C:\Program Files\AVG\AVG2015\avgui.exe
C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe
C:\Program Files\AVG Web TuneUp\vprot.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe
C:\PROGRA~1\WIDCOMM\BLUETO~1\BTSTAC~1.EXE
C:\Program Files\Common Files\Java\Java Update\jucheck.exe
C:\Program Files\AVG\AVG2015\avgcsrvx.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Documents and Settings\uzivatel\Dokumenty\Stažené soubory\RSIT(1).exe
C:\Program Files\trend micro\uzivatel.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://seznam.cz/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Odkazy
O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\PROGRA~1\MICROS~2\Office12\GRA8E1~1.DLL
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll
O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE
O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
O4 - HKLM\..\Run: [AlcWzrd] ALCWZRD.EXE
O4 - HKLM\..\Run: [Alcmtr] ALCMTR.EXE
O4 - HKLM\..\Run: [ETDWare] C:\Program Files\Elantech\ETDCtrl.exe
O4 - HKLM\..\Run: [IgfxTray] C:\WINDOWS\system32\igfxtray.exe
O4 - HKLM\..\Run: [HotKeysCmds] C:\WINDOWS\system32\hkcmd.exe
O4 - HKLM\..\Run: [Persistence] C:\WINDOWS\system32\igfxpers.exe
O4 - HKLM\..\Run: [AsusTray] C:\Program Files\EeePC\ACPI\AsTray.exe
O4 - HKLM\..\Run: [AsusACPIServer] C:\Program Files\EeePC\ACPI\AsAcpiSvr.exe
O4 - HKLM\..\Run: [AsusEPCMonitor] C:\Program Files\EeePC\ACPI\AsEPCMon.exe
O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Common Files\Java\Java Update\jusched.exe"
O4 - HKLM\..\Run: [AVG_UI] "C:\Program Files\AVG\AVG2015\avgui.exe" /TRAYONLY
O4 - HKLM\..\Run: [GrooveMonitor] "C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe"
O4 - HKLM\..\Run: [vProt] "C:\Program Files\AVG Web TuneUp\vprot.exe"
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - Global Startup: Bluetooth.lnk = ?
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000
O8 - Extra context menu item: Send to &Bluetooth Device... - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie_ctx.htm
O8 - Extra context menu item: Send To Bluetooth - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
O9 - Extra button: Odeslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: Od&eslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL
O9 - Extra button: @btrez.dll,-4015 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
O9 - Extra 'Tools' menuitem: @btrez.dll,-12650 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\PROGRA~1\MICROS~2\Office12\GR99D3~1.DLL
O18 - Protocol: viprotocol - {B658800C-F66E-4EF3-AB85-6C0C227862A9} - C:\Program Files\Common Files\AVG Secure Search\ViProtocolInstaller\3.2.0\ViProtocol.dll
O22 - SharedTaskScheduler: Browseui preloader - {438755C2-A8BA-11D1-B96B-00A0C90312E1} - C:\WINDOWS\system32\browseui.dll
O22 - SharedTaskScheduler: Proces mezipaměti kategorií součástí - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\WINDOWS\system32\browseui.dll
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\WINDOWS\system32\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: AVGIDSAgent - AVG Technologies CZ, s.r.o. - C:\Program Files\AVG\AVG2015\avgidsagent.exe
O23 - Service: AVG WatchDog (avgwd) - AVG Technologies CZ, s.r.o. - C:\Program Files\AVG\AVG2015\avgwdsvc.exe
O23 - Service: Bluetooth Service (btwdins) - Broadcom Corporation. - C:\Program Files\WIDCOMM\Bluetooth Software\bin\btwdins.exe
O23 - Service: Služba Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: Služba Google Update (gupdatem) (gupdatem) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Oracle Corporation - C:\Program Files\Java\jre7\bin\jqs.exe
O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Mozilla Foundation - C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe
O23 - Service: vToolbarUpdater3.2.0 - Unknown owner - C:\Program Files\Common Files\AVG Secure Search\vToolbarUpdater\3.2.0\ToolbarUpdater.exe

--
End of file - 7833 bytes

======Scheduled tasks folder======

C:\WINDOWS\tasks\Adobe Flash Player Updater.job - C:\WINDOWS\system32\Macromed\Flash\FlashPlayerUpdateService.exe
C:\WINDOWS\tasks\GoogleUpdateTaskMachineCore.job - C:\Program Files\Google\Update\GoogleUpdate.exe /c
C:\WINDOWS\tasks\GoogleUpdateTaskMachineUA.job - C:\Program Files\Google\Update\GoogleUpdate.exe /ua /installsource scheduler
C:\WINDOWS\tasks\Měsíční oznamování konce poskytování služeb pro Microsoft Windows XP.job - C:\WINDOWS\system32\xp_eos.exe
C:\WINDOWS\tasks\Přihlášení k oznamování konce poskytování služeb pro Microsoft Windows XP.job - C:\WINDOWS\system32\xp_eos.exe -c

=========Mozilla firefox=========

ProfilePath - C:\Documents and Settings\uzivatel\Data aplikací\Mozilla\Firefox\Profiles\zf3cd8bs.default

prefs.js - "browser.startup.homepage" - "https://www.google.cz/?gws_rd=ssl"
prefs.js - "keyword.URL" - ""

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 15.0.0.246 Plugin
"Path"=C:\WINDOWS\system32\Macromed\Flash\NPSWF32_15_0_0_246.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@avg.com/AVG SiteSafety plugin,version=11.0.0.1,application/x-avg-sitesafety-plugin]
"Description"=
"Path"=C:\Program Files\Common Files\AVG Secure Search\SiteSafetyInstaller\3.2.0\\npsitesafety.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@java.com/DTPlugin,version=10.67.2]
"Description"=Java™ Deployment Toolkit
"Path"=C:\Program Files\Java\jre7\bin\dtplugin\npDeployJava1.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@java.com/JavaPlugin,version=10.67.2]
"Description"=Oracle® Next Generation Java™ Plug-In
"Path"=C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@tools.google.com/Google Update;version=3]
"Description"=Google Update
"Path"=C:\Program Files\Google\Update\1.3.25.11\npGoogleUpdate3.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@tools.google.com/Google Update;version=9]
"Description"=Google Update
"Path"=C:\Program Files\Google\Update\1.3.25.11\npGoogleUpdate3.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\Adobe Reader]
"Description"=Handles PDFs in-place in Firefox
"Path"=C:\Program Files\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll

C:\Documents and Settings\uzivatel\Data aplikací\Mozilla\Firefox\Profiles\zf3cd8bs.default\extensions\
avg@toolbar

C:\Documents and Settings\uzivatel\Data aplikací\Mozilla\Firefox\Profiles\zf3cd8bs.default\searchplugins\
avg-secure-search.xml

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{72853161-30C5-4D22-B7F9-0BBC1D38A37E}]
Groove GFS Browser Helper - C:\PROGRA~1\MICROS~2\Office12\GRA8E1~1.DLL [2006-10-26 2210608]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
Java(tm) Plug-In SSV Helper - C:\Program Files\Java\jre7\bin\ssv.dll [2014-08-25 462760]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre7\bin\jp2ssv.dll [2014-08-25 171944]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"RTHDCPL"=C:\WINDOWS\RTHDCPL.EXE [2008-04-28 16861696]
"SoundMan"=C:\WINDOWS\SOUNDMAN.EXE [2006-07-21 86016]
"AlcWzrd"=C:\WINDOWS\ALCWZRD.EXE [2006-05-04 2808832]
"Alcmtr"=C:\WINDOWS\ALCMTR.EXE [2005-05-04 69632]
"ETDWare"=C:\Program Files\Elantech\ETDCtrl.exe [2008-04-24 335872]
"IgfxTray"=C:\WINDOWS\system32\igfxtray.exe [2007-12-19 135168]
"HotKeysCmds"=C:\WINDOWS\system32\hkcmd.exe [2007-12-19 159744]
"Persistence"=C:\WINDOWS\system32\igfxpers.exe [2007-12-19 131072]
""= []
"AsusTray"=C:\Program Files\EeePC\ACPI\AsTray.exe [2008-12-04 114688]
"AsusACPIServer"=C:\Program Files\EeePC\ACPI\AsAcpiSvr.exe [2008-12-17 622592]
"AsusEPCMonitor"=C:\Program Files\EeePC\ACPI\AsEPCMon.exe [2008-05-21 94208]
"Adobe ARM"=C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2014-08-21 959176]
"SunJavaUpdateSched"=C:\Program Files\Common Files\Java\Java Update\jusched.exe [2014-07-25 256896]
"AVG_UI"=C:\Program Files\AVG\AVG2015\avgui.exe [2014-12-18 3667472]
"GrooveMonitor"=C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe [2006-10-26 31016]
"vProt"=C:\Program Files\AVG Web TuneUp\vprot.exe [2014-10-07 2662424]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"=C:\WINDOWS\system32\ctfmon.exe [2008-04-14 15360]

C:\Documents and Settings\All Users\Nabídka Start\Programy\Po spuštění
Bluetooth.lnk - C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\igfxcui]
C:\WINDOWS\system32\igfxdev.dll [2007-12-19 208896]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{B5A7F190-DDA6-4420-B3BA-52453494E6CD}"=C:\PROGRA~1\MICROS~2\Office12\GRA8E1~1.DLL [2006-10-26 2210608]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=145

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"C:\Program Files\Google\Chrome\Application\chrome.exe"="C:\Program Files\Google\Chrome\Application\chrome.exe:*:Enabled:Google Chrome"
"C:\Program Files\AVG\AVG2014\avgmfapx.exe"="C:\Program Files\AVG\AVG2014\avgmfapx.exe:*:Enabled:Instalátor AVG"
"C:\Program Files\Microsoft Office\Office12\OUTLOOK.EXE"="C:\Program Files\Microsoft Office\Office12\OUTLOOK.EXE:*:Enabled:Microsoft Office Outlook"
"C:\Program Files\Microsoft Office\Office12\GROOVE.EXE"="C:\Program Files\Microsoft Office\Office12\GROOVE.EXE:*:Enabled:Microsoft Office Groove"
"C:\Program Files\Microsoft Office\Office12\ONENOTE.EXE"="C:\Program Files\Microsoft Office\Office12\ONENOTE.EXE:*:Enabled:Microsoft Office OneNote"
"C:\Program Files\AVG\AVG2015\avgmfapx.exe"="C:\Program Files\AVG\AVG2015\avgmfapx.exe:*:Enabled:Instalátor AVG"
"C:\Program Files\AVG\AVG2015\avgnsx.exe"="C:\Program Files\AVG\AVG2015\avgnsx.exe:*:Enabled:Webový štít"
"C:\Program Files\AVG\AVG2015\avgdiagex.exe"="C:\Program Files\AVG\AVG2015\avgdiagex.exe:*:Enabled:AVG Diagnostika 2015"
"C:\Program Files\AVG\AVG2015\avgemcx.exe"="C:\Program Files\AVG\AVG2015\avgemcx.exe:*:Enabled:Obecná kontrola pošty"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"midimapper"=midimap.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msadpcm"=msadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.trspch"=tssoft32.acm
"vidc.cvid"=iccvid.dll
"vidc.I420"=msh263.drv
"vidc.iv31"=ir32_32.dll
"vidc.iv32"=ir32_32.dll
"vidc.iv41"=ir41_32.ax
"VIDC.IYUV"=iyuv_32.dll
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"VIDC.UYVY"=msyuv.dll
"VIDC.YUY2"=msyuv.dll
"VIDC.YVU9"=tsbyuv.dll
"VIDC.YVYU"=msyuv.dll
"wavemapper"=msacm32.drv
"MSVideo8"=VfWWDM32.dll
"msacm.msg723"=msg723.acm
"vidc.M263"=msh263.drv
"vidc.M261"=msh261.drv
"msacm.msaudio1"=msaud32.acm
"msacm.sl_anet"=sl_anet.acm
"msacm.iac2"=C:\WINDOWS\system32\iac25_32.ax
"vidc.iv50"=ir50_32.dll
"msacm.l3acm"=l3codeca.acm
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"wave2"=wdmaud.drv
"midi2"=wdmaud.drv
"mixer2"=wdmaud.drv
"wave3"=wdmaud.drv
"midi3"=wdmaud.drv
"mixer3"=wdmaud.drv
"VIDC.LAGS"=lagarith.dll
"VIDC.X264"=x264vfw.dll
"VIDC.XVID"=xvidvfw.dll
"VIDC.FFDS"=ff_vfw.dll
"msacm.ac3acm"=ac3acm.acm
"msacm.lameacm"=lameACM.acm

======List of files/folders created in the last 1 month======

2015-01-13 16:46:41 ----D---- C:\Program Files\trend micro
2015-01-13 16:46:39 ----D---- C:\rsit
2015-01-12 15:37:27 ----D---- C:\Documents and Settings\uzivatel\Data aplikací\WinRAR

======List of files/folders modified in the last 1 month======

2015-01-13 16:46:41 ----RD---- C:\Program Files
2015-01-13 16:46:36 ----D---- C:\WINDOWS\Prefetch
2015-01-13 16:45:50 ----D---- C:\WINDOWS\Temp
2015-01-13 15:31:11 ----D---- C:\Documents and Settings\All Users\Data aplikací\MFAData
2015-01-13 15:30:00 ----SHD---- C:\WINDOWS\Installer
2015-01-13 15:29:20 ----D---- C:\WINDOWS\system32\CatRoot2
2015-01-12 15:48:38 ----D---- C:\WINDOWS
2015-01-12 15:47:26 ----A---- C:\WINDOWS\SchedLgU.Txt
2015-01-12 15:42:22 ----D---- C:\WINDOWS\system32\drivers
2015-01-12 15:42:21 ----HD---- C:\WINDOWS\inf
2015-01-04 21:37:47 ----D---- C:\WINDOWS\system32
2014-12-25 16:43:32 ----SD---- C:\Documents and Settings\uzivatel\Data aplikací\Microsoft
2014-12-22 19:20:41 ----D---- C:\WINDOWS\Minidump

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 AVGIDSHX;AVGIDSHX; C:\WINDOWS\system32\DRIVERS\avgidshx.sys [2014-11-18 154904]
R0 Avglogx;AVG Logging Driver; C:\WINDOWS\system32\DRIVERS\avglogx.sys [2014-07-18 230680]
R0 Avgmfx86;AVG Mini-Filter Resident Anti-Virus Shield; C:\WINDOWS\system32\DRIVERS\avgmfx86.sys [2014-10-05 98584]
R0 Avgrkx86;AVG Anti-Rootkit Driver; C:\WINDOWS\system32\DRIVERS\avgrkx86.sys [2014-06-18 27416]
R1 Avgdiskx;AVG Disk Driver; C:\WINDOWS\system32\DRIVERS\avgdiskx.sys [2014-06-18 121624]
R1 AVGIDSDriverl;AVGIDSDriverl; C:\WINDOWS\system32\DRIVERS\avgidsdriverlx.sys [2014-12-08 192792]
R1 AVGIDSShim;AVGIDSShim; C:\WINDOWS\system32\DRIVERS\avgidsshimx.sys [2014-06-18 21272]
R1 Avgldx86;AVG AVI Loader Driver; C:\WINDOWS\system32\DRIVERS\avgldx86.sys [2014-08-28 192792]
R1 Avgtdix;AVG TDI Driver; C:\WINDOWS\system32\DRIVERS\avgtdix.sys [2014-10-10 200984]
R1 avgtp;avgtp; \??\C:\WINDOWS\system32\drivers\avgtpx86.sys []
R1 intelppm;Řadič procesoru Intel; C:\WINDOWS\system32\DRIVERS\intelppm.sys [2008-04-14 40192]
R3 AsusACPI;ASUS ACPI Driver; C:\WINDOWS\system32\DRIVERS\ASUSACPI.sys [2008-04-08 10752]
R3 btaudio;Bluetooth Audio Device; C:\WINDOWS\system32\drivers\btaudio.sys [2007-12-10 539640]
R3 BTDriver;Bluetooth Virtual Communications Driver; C:\WINDOWS\system32\DRIVERS\btport.sys [2007-03-23 37424]
R3 BTKRNL;Bluetooth Bus Enumerator; C:\WINDOWS\system32\DRIVERS\btkrnl.sys [2007-11-21 879624]
R3 BTWDNDIS;Bluetooth LAN Access Server; C:\WINDOWS\system32\DRIVERS\btwdndis.sys [2007-06-29 156392]
R3 btwhid;btwhid; C:\WINDOWS\system32\DRIVERS\btwhid.sys [2007-03-31 55352]
R3 BTWUSB;WIDCOMM USB Bluetooth Driver; C:\WINDOWS\System32\Drivers\btwusb.sys [2007-11-27 74688]
R3 HDAudBus;Ovladač Microsoft UAA pro sběrnici High Definition Audio; C:\WINDOWS\system32\DRIVERS\HDAudBus.sys [2008-04-13 144384]
R3 ialm;ialm; C:\WINDOWS\system32\DRIVERS\igxpmp32.sys [2007-12-19 5854688]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\WINDOWS\system32\drivers\RtkHDAud.sys [2008-04-28 4733440]
R3 Ktp;Elantech Smart-Pad; C:\WINDOWS\system32\DRIVERS\ETD.sys [2008-04-30 26112]
R3 L1e;Miniport Driver for Atheros AR8121/AR8113/AR8114 PCI-E Ethernet Controller; C:\WINDOWS\system32\DRIVERS\l1e51x86.sys [2008-03-12 36864]
R3 RT80x86;Ralink 802.11n Wireless Driver; C:\WINDOWS\system32\DRIVERS\RT2860.sys [2008-09-24 704384]
R3 usbccgp;Obecný nadřazený ovladač Microsoft USB; C:\WINDOWS\system32\DRIVERS\usbccgp.sys [2013-08-09 32384]
R3 usbuhci;Ovladač Microsoft univerzálního hostitelského řadiče USB od společnosti Microsoft; C:\WINDOWS\system32\DRIVERS\usbuhci.sys [2008-04-13 20608]
R3 usbvideo;Zobrazovací zařízení USB (WDM); C:\WINDOWS\System32\Drivers\usbvideo.sys [2013-07-17 123008]
S3 CCDECODE;Dekodér Closed Caption; C:\WINDOWS\system32\DRIVERS\CCDECODE.sys [2008-04-14 17024]
S3 HidUsb;Ovladač třídy standardu HID; C:\WINDOWS\system32\DRIVERS\hidusb.sys [2008-04-13 10368]
S3 mouhid;Ovladač myši standardu HID; C:\WINDOWS\system32\DRIVERS\mouhid.sys [2001-10-24 12160]
S3 MSTEE;Microsoft Streaming Tee/Sink-to-Sink Converter; C:\WINDOWS\system32\drivers\MSTEE.sys [2008-04-14 5504]
S3 NABTSFEC;NABTS/FEC VBI Codec; C:\WINDOWS\system32\DRIVERS\NABTSFEC.sys [2008-04-14 85248]
S3 NdisIP;Microsoft TV/Video Connection; C:\WINDOWS\system32\DRIVERS\NdisIP.sys [2008-04-14 10880]
S3 SLIP;BDA Slip De-Framer; C:\WINDOWS\system32\DRIVERS\SLIP.sys [2008-04-14 11136]
S3 streamip;BDA IPSink; C:\WINDOWS\system32\DRIVERS\StreamIP.sys [2008-04-14 15232]
S3 usbprint;Třída USB Printer; C:\WINDOWS\system32\DRIVERS\usbprint.sys [2008-04-14 25856]
S3 usbscan;Ovladač skeneru USB; C:\WINDOWS\system32\DRIVERS\usbscan.sys [2013-07-03 14976]
S3 usbstor;Ovladač velkokapacitního paměťového zařízení USB; C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS [2008-04-13 26368]
S3 WSTCODEC;Dálnopisný kodek světového standardu; C:\WINDOWS\system32\DRIVERS\WSTCODEC.SYS [2008-04-14 19200]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 AVGIDSAgent;AVGIDSAgent; C:\Program Files\AVG\AVG2015\avgidsagent.exe [2014-12-18 3432976]
R2 avgwd;AVG WatchDog; C:\Program Files\AVG\AVG2015\avgwdsvc.exe [2014-12-18 298080]
R2 btwdins;Bluetooth Service; C:\Program Files\WIDCOMM\Bluetooth Software\bin\btwdins.exe [2008-01-29 264800]
R2 JavaQuickStarterService;Java Quick Starter; C:\Program Files\Java\jre7\bin\jqs.exe [2014-08-25 182696]
R2 vToolbarUpdater3.2.0;vToolbarUpdater3.2.0; C:\Program Files\Common Files\AVG Secure Search\vToolbarUpdater\3.2.0\ToolbarUpdater.exe [2014-09-02 1843736]
S2 gupdate;Služba Google Update (gupdate); C:\Program Files\Google\Update\GoogleUpdate.exe [2014-08-25 116648]
S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service; C:\WINDOWS\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2014-12-10 267440]
S3 gupdatem;Služba Google Update (gupdatem); C:\Program Files\Google\Update\GoogleUpdate.exe [2014-08-25 116648]
S3 Microsoft Office Groove Audit Service;Microsoft Office Groove Audit Service; C:\Program Files\Microsoft Office\Office12\GrooveAuditService.exe [2006-10-26 65824]
S3 MozillaMaintenance;Mozilla Maintenance Service; C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe [2014-12-09 114800]
S3 odserv;Microsoft Office Diagnostics Service; C:\Program Files\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE [2006-10-26 441136]
S3 ose;Office Source Engine; C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2006-10-26 145184]

-----------------EOF-----------------

#2 Příspěvek od **vyosek** » 13 led 2015 22:56

Zdravim

Odinstalujte AVG Secure Search a AVG Web TuneUp

Trvate na antiviru AVG? U nas neni moc obliben - vysoka atez, slaba detekce

Stahnete AdwCleaner http://general-changelog-team.fr/fr/dow ... adwcleaner

Ulozte nejlepe na plochu
Ukoncete vsechny programy
Po spusteni probehne stazeni databaze
Kliknete na Scan a nasledne Clean
Probehne oprava, restart PC a pak se objevi log, pripadne bude ulozen ve slozce c:\AdwCleaner\AdwCleaner[S?].txt, ten sem vlozte

Sustr1975 · #3 Příspěvek od **Sustr1975** » 14 led 2015 15:38

# AdwCleaner v4.107 - Report created 14/01/2015 at 00:13:34
# Updated 07/01/2015 by Xplode
# Database : 2015-01-13.2 [Live]
# Operating System : Microsoft Windows XP Service Pack 3 (32 bits)
# Username : uzivatel - UZIVATEL-7B4015
# Running from : C:\Documents and Settings\uzivatel\Dokumenty\Stažené soubory\adwcleaner_4.107(1).exe
# Option : Clean

***** [ Services ] *****

***** [ Files / Folders ] *****

File Deleted : C:\Documents and Settings\uzivatel\Data aplikací\Mozilla\Firefox\Profiles\zf3cd8bs.default\searchplugins\ask-web-search.xml

***** [ Scheduled Tasks ] *****

***** [ Shortcuts ] *****

***** [ Registry ] *****

***** [ Browsers ] *****

-\\ Internet Explorer v8.0.6001.18702

-\\ Mozilla Firefox v34.0.5 (x86 cs)

[zf3cd8bs.default\prefs.js] - Line Deleted : user_pref("browser.search.defaultenginename", "Ask Web Search");
[zf3cd8bs.default\prefs.js] - Line Deleted : user_pref("browser.search.selectedEngine", "Ask Web Search");
[zf3cd8bs.default\prefs.js] - Line Deleted : user_pref("browser.startup.homepage", "hxxp://home.tb.ask.com/index.jhtml?ptb=0380032F-E841-4177-BF44-8A35632A040E&n=781aa254&p2=^BA5^xdm007^YYA^cz&si=CJHc4beJksMCFabLtAodSVwAhg");
[zf3cd8bs.default\prefs.js] - Line Deleted : user_pref("extensions.mywebsearch.prevKwdEnabled", true);
[zf3cd8bs.default\prefs.js] - Line Deleted : user_pref("extensions.mywebsearch.prevKwdURL", "");
[zf3cd8bs.default\prefs.js] - Line Deleted : user_pref("extensions.toolbar.mindspark._9pMembers_.BUTTON_STRUCTURE", "[{\"b\":221354507,\"c\":\"mindspark.magnify\",\"p\":\"L.0\"},{\"b\":221354508,\"c\":\"mindspark.entersearchterms\",\"p\":\"L.0.0[...]
[zf3cd8bs.default\prefs.js] - Line Deleted : user_pref("extensions.toolbar.mindspark._9pMembers_.browser.search.defaultenginename.prev", "Google");
[zf3cd8bs.default\prefs.js] - Line Deleted : user_pref("extensions.toolbar.mindspark._9pMembers_.browser.search.defaultenginename.savedPrev", "true");
[zf3cd8bs.default\prefs.js] - Line Deleted : user_pref("extensions.toolbar.mindspark._9pMembers_.browser.search.defaultenginename.tb", "Ask Web Search");
[zf3cd8bs.default\prefs.js] - Line Deleted : user_pref("extensions.toolbar.mindspark._9pMembers_.browser.search.selectedEngine.prev", "Google");
[zf3cd8bs.default\prefs.js] - Line Deleted : user_pref("extensions.toolbar.mindspark._9pMembers_.browser.search.selectedEngine.savedPrev", "true");
[zf3cd8bs.default\prefs.js] - Line Deleted : user_pref("extensions.toolbar.mindspark._9pMembers_.browser.search.selectedEngine.tb", "Ask Web Search");
[zf3cd8bs.default\prefs.js] - Line Deleted : user_pref("extensions.toolbar.mindspark._9pMembers_.browser.startup.homepage.prev", "hxxps://www.google.cz/?gws_rd=ssl");
[zf3cd8bs.default\prefs.js] - Line Deleted : user_pref("extensions.toolbar.mindspark._9pMembers_.browser.startup.homepage.savedPrev", "true");
[zf3cd8bs.default\prefs.js] - Line Deleted : user_pref("extensions.toolbar.mindspark._9pMembers_.browser.startup.homepage.tb", "hxxp://home.tb.ask.com/index.jhtml?ptb=0380032F-E841-4177-BF44-8A35632A040E&n=781aa254&p2=^BA5^xdm007^YYA^cz&si=CJHc4[...]
[zf3cd8bs.default\prefs.js] - Line Deleted : user_pref("extensions.toolbar.mindspark._9pMembers_.browser.startup.page.savedPrev", 1);
[zf3cd8bs.default\prefs.js] - Line Deleted : user_pref("extensions.toolbar.mindspark._9pMembers_.browser.startup.page.tb", 1);
[zf3cd8bs.default\prefs.js] - Line Deleted : user_pref("extensions.toolbar.mindspark._9pMembers_.browser.version.last", "34.0");
[zf3cd8bs.default\prefs.js] - Line Deleted : user_pref("extensions.toolbar.mindspark._9pMembers_.firstKnownVersion", "6.83.5.42197");
[zf3cd8bs.default\prefs.js] - Line Deleted : user_pref("extensions.toolbar.mindspark._9pMembers_.homepage", "hxxp://home.tb.ask.com/index.jhtml?ptb=0380032F-E841-4177-BF44-8A35632A040E&n=781aa254&p2=^BA5^xdm007^YYA^cz&si=CJHc4beJksMCFabLtAodSVwA[...]
[zf3cd8bs.default\prefs.js] - Line Deleted : user_pref("extensions.toolbar.mindspark._9pMembers_.hp.enabled", true);
[zf3cd8bs.default\prefs.js] - Line Deleted : user_pref("extensions.toolbar.mindspark._9pMembers_.hp.guardType", "HPR");
[zf3cd8bs.default\prefs.js] - Line Deleted : user_pref("extensions.toolbar.mindspark._9pMembers_.hp.user.defined", false);
[zf3cd8bs.default\prefs.js] - Line Deleted : user_pref("extensions.toolbar.mindspark._9pMembers_.initialized", true);
[zf3cd8bs.default\prefs.js] - Line Deleted : user_pref("extensions.toolbar.mindspark._9pMembers_.installKeysSource", "Cookies");
[zf3cd8bs.default\prefs.js] - Line Deleted : user_pref("extensions.toolbar.mindspark._9pMembers_.installType", "XPI");
[zf3cd8bs.default\prefs.js] - Line Deleted : user_pref("extensions.toolbar.mindspark._9pMembers_.installation.contextKey", "");
[zf3cd8bs.default\prefs.js] - Line Deleted : user_pref("extensions.toolbar.mindspark._9pMembers_.installation.installDate", "2015011412");
[zf3cd8bs.default\prefs.js] - Line Deleted : user_pref("extensions.toolbar.mindspark._9pMembers_.installation.partnerId", "^BA5^xdm007^YYA^cz");
[zf3cd8bs.default\prefs.js] - Line Deleted : user_pref("extensions.toolbar.mindspark._9pMembers_.installation.partnerSubId", "CJHc4beJksMCFabLtAodSVwAhg");
[zf3cd8bs.default\prefs.js] - Line Deleted : user_pref("extensions.toolbar.mindspark._9pMembers_.installation.pixelUrl", "hxxp://free.onlinemapfinder.com/install_pixels.jhtml?partner=^BA5^xdm007^YYA^cz&sub_id=CJHc4beJksMCFabLtAodSVwAhg&coId=b8f6[...]
[zf3cd8bs.default\prefs.js] - Line Deleted : user_pref("extensions.toolbar.mindspark._9pMembers_.installation.success", true);
[zf3cd8bs.default\prefs.js] - Line Deleted : user_pref("extensions.toolbar.mindspark._9pMembers_.installation.toolbarId", "0380032F-E841-4177-BF44-8A35632A040E");
[zf3cd8bs.default\prefs.js] - Line Deleted : user_pref("extensions.toolbar.mindspark._9pMembers_.isCompliantUninstallImplementation", true);
[zf3cd8bs.default\prefs.js] - Line Deleted : user_pref("extensions.toolbar.mindspark._9pMembers_.lastActivePing", "1421190103585");
[zf3cd8bs.default\prefs.js] - Line Deleted : user_pref("extensions.toolbar.mindspark._9pMembers_.lastKnownVersion", "6.83.5.42197");
[zf3cd8bs.default\prefs.js] - Line Deleted : user_pref("extensions.toolbar.mindspark._9pMembers_.options.defaultSearch", true);
[zf3cd8bs.default\prefs.js] - Line Deleted : user_pref("extensions.toolbar.mindspark._9pMembers_.options.homePageEnabled", true);
[zf3cd8bs.default\prefs.js] - Line Deleted : user_pref("extensions.toolbar.mindspark._9pMembers_.options.keywordEnabled", true);
[zf3cd8bs.default\prefs.js] - Line Deleted : user_pref("extensions.toolbar.mindspark._9pMembers_.options.tabEnabled", true);
[zf3cd8bs.default\prefs.js] - Line Deleted : user_pref("extensions.toolbar.mindspark._9pMembers_.partnerPixelFired", true);
[zf3cd8bs.default\prefs.js] - Line Deleted : user_pref("extensions.toolbar.mindspark._9pMembers_.successUrl", "hxxp://free.onlinemapfinder.com/installComplete.jhtml");
[zf3cd8bs.default\prefs.js] - Line Deleted : user_pref("extensions.toolbar.mindspark._9pMembers_.toolbar.ownSearch", true);
[zf3cd8bs.default\prefs.js] - Line Deleted : user_pref("extensions.toolbar.mindspark._9pMembers_.toolbarCollapsed", false);
[zf3cd8bs.default\prefs.js] - Line Deleted : user_pref("extensions.toolbar.mindspark.hp.enabled", true);
[zf3cd8bs.default\prefs.js] - Line Deleted : user_pref("extensions.toolbar.mindspark.hp.enabled.guid", "onlinemapfinder@mindspark.com");
[zf3cd8bs.default\prefs.js] - Line Deleted : user_pref("extensions.toolbar.mindspark.lastInstalled", "onlinemapfinder@mindspark.com");
[zf3cd8bs.default\prefs.js] - Line Deleted : user_pref("keyword.URL", "hxxp://search.tb.ask.com/search/GGmain.jhtml?st=kwd&ptb=0380032F-E841-4177-BF44-8A35632A040E&n=781aa254&ind=2015011412&p2=^BA5^xdm007^YYA^cz&si=CJHc4beJksMCFabLtAodSVwAhg&sea[...]

-\\ Google Chrome v39.0.2171.95

*************************

AdwCleaner[R0].txt - [1308 octets] - [13/01/2015 23:43:17]
AdwCleaner[R1].txt - [7668 octets] - [14/01/2015 00:08:21]
AdwCleaner[S0].txt - [1290 octets] - [13/01/2015 23:52:51]
AdwCleaner[S1].txt - [8119 octets] - [14/01/2015 00:13:34]

########## EOF - C:\AdwCleaner\AdwCleaner[S1].txt - [8179 octets] ##########

#4 Příspěvek od **vyosek** » 14 led 2015 15:45

Stahnete Zoek.exe http://hijackthis.nl/smeenk/ a ulozte jej na plochu

Pokud pouzivate Win Vista ci W7, kliknete na Zoek pravym a dejte Run As Administrator ci Spustit jako spravce
Do okna vlozte skript nize

Kód: Vybrat vše

autoclean;
resethosts;
emptyclsid;
IEdefaults;
FFdefaults;
CHRdefaults;
emptyIEcache;
emptyFFcache;
emptyCHRcache;
emptyalltemp;
emptyflash;
emptyjava;
emptyrecycle.bin;

Nasledne kliknete na Run Script
PC provede opravu, restartuje se a da Vam log, jeho obsah vlozte sem

Sustr1975 · #5 Příspěvek od **Sustr1975** » 14 led 2015 16:39

Zoek.exe v5.0.0.0 Updated 14-01-2015
Tool run by uzivatel on st 14.01.2015 at 16:21:28,92.
Microsoft Windows XP Home Edition 5.1.2600 Service Pack 3 x86
Running in: Normal Mode Internet Access Detected
Launched: C:\Documents and Settings\uzivatel\Dokumenty\Stažené soubory\zoek.exe [Scan all users] [Quick Scan] [Auto Clean]

==== System Restore Info ======================

14.1.2015 16:23:10 Zoek.exe System Restore Point Created Succesfully.

==== Deleting CLSID Registry Keys ======================

==== Deleting CLSID Registry Values ======================

==== Deleting Services ======================

==== Deleting Files \ Folders ======================

C:\WINDOWS\SET3.tmp deleted
C:\WINDOWS\SET4.tmp deleted
C:\WINDOWS\SET8.tmp deleted

==== Files Recently Created / Modified ======================

====== C:\WINDOWS ====
====== C:\DOCUME~1\uzivatel\LOCALS~1\Temp ====
====== Java Cache =====
====== C:\WINDOWS\system32 =====
====== C:\WINDOWS\system32\drivers =====
====== C:\WINDOWS\Tasks ======
====== C:\WINDOWS\Temp ======
======= C:\Program Files =====
2015-01-13 15:46:41 -------- d-----w- C:\Program Files\trend micro
======= C: =====
====== C:\Documents and Settings\uzivatel\Data aplikací ======
====== C:\Documents and Settings\uzivatel ======
2015-01-13 23:23:40 61CA40317EBF1254770BF8B495B3F8DA 2191360 ----a-w- C:\Documents and Settings\uzivatel\Plocha\adwcleaner_4.107(1).exe

====== C: exe-files ==
2015-01-13 23:23:40 61CA40317EBF1254770BF8B495B3F8DA 2191360 ----a-w- C:\Documents and Settings\uzivatel\Plocha\adwcleaner_4.107(1).exe
2015-01-13 23:00:27 61CA40317EBF1254770BF8B495B3F8DA 2191360 ----a-w- C:\Documents and Settings\uzivatel\Dokumenty\Stažené soubory\adwcleaner_4.107(1).exe
2015-01-13 22:24:49 61CA40317EBF1254770BF8B495B3F8DA 2191360 ----a-w- C:\RECYCLER\S-1-5-21-839522115-1336601894-796845957-1004\Dc43.exe
2015-01-13 15:46:42 9A2347903D6EDB84C10F288BC0578C1C 388608 ----a-w- C:\Program Files\trend micro\uzivatel.exe
2015-01-13 15:44:57 8685FAF50C04F9A9C2F56FF64B0B7ACB 1107968 ----a-w- C:\RECYCLER\S-1-5-21-839522115-1336601894-796845957-1004\Dc38.exe
2015-01-13 14:46:02 8685FAF50C04F9A9C2F56FF64B0B7ACB 1107968 ----a-w- C:\RECYCLER\S-1-5-21-839522115-1336601894-796845957-1004\Dc37.exe
=== C: other files ==

==== Startup Registry Enabled ======================

[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="C:\WINDOWS\system32\CTFMON.EXE"

[HKEY_USERS\S-1-5-19\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="C:\WINDOWS\system32\CTFMON.EXE"

[HKEY_USERS\S-1-5-20\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="C:\WINDOWS\system32\CTFMON.EXE"

[HKEY_USERS\S-1-5-21-839522115-1336601894-796845957-1004\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="C:\WINDOWS\system32\ctfmon.exe"

[HKEY_USERS\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="C:\WINDOWS\system32\CTFMON.EXE"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"RTHDCPL"="RTHDCPL.EXE"
"SoundMan"="SOUNDMAN.EXE"
"AlcWzrd"="ALCWZRD.EXE"
"Alcmtr"="ALCMTR.EXE"
"ETDWare"="C:\Program Files\Elantech\ETDCtrl.exe"
"IgfxTray"="C:\WINDOWS\system32\igfxtray.exe"
"HotKeysCmds"="C:\WINDOWS\system32\hkcmd.exe"
"Persistence"="C:\WINDOWS\system32\igfxpers.exe"
"AsusTray"="C:\Program Files\EeePC\ACPI\AsTray.exe"
"AsusACPIServer"="C:\Program Files\EeePC\ACPI\AsAcpiSvr.exe"
"AsusEPCMonitor"="C:\Program Files\EeePC\ACPI\AsEPCMon.exe"
"Adobe ARM"="C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
"SunJavaUpdateSched"="C:\Program Files\Common Files\Java\Java Update\jusched.exe"
"GrooveMonitor"="C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe"

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="C:\WINDOWS\system32\ctfmon.exe"

==== Task Scheduler Jobs ======================

C:\WINDOWS\tasks\Adobe Flash Player Updater.job --a------ C:\WINDOWS\system32\Macromed\Flash\FlashPlayerUpdateService.exe [10.12.2014 21:15]
C:\WINDOWS\tasks\GoogleUpdateTaskMachineCore.job --a------ C:\Program Files\Google\Update\GoogleUpdate.exe [25.08.2014 11:02]
C:\WINDOWS\tasks\GoogleUpdateTaskMachineUA.job --a------ C:\Program Files\Google\Update\GoogleUpdate.exe [25.08.2014 11:02]
C:\WINDOWS\tasks\Měsíční oznamování konce poskytování služeb pro Microsoft Windows XP.job [Undetermined Task]
C:\WINDOWS\tasks\Přihlášení k oznamování konce poskytování služeb pro Microsoft Windows XP.job [Undetermined Task]

==== Set IE to Default ======================

Old Values:
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
"Start Page"="http://seznam.cz/"

New Values:
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
"Start Page"="http://seznam.cz/"

==== All HKCU SearchScopes ======================

HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes
"DefaultScope"="{0633EE93-D776-472f-A0FF-E1416B8B2E3A}"
{012E1000-F331-11DB-8314-0800200C9A66} Google Url="http://www.google.com/search?q={searchTerms}"
{0633EE93-D776-472f-A0FF-E1416B8B2E3A} Bing Url="http://www.bing.com/search?q={searchTer ... ORM=IE8SRC"

==== Empty IE Cache ======================

C:\Documents and Settings\Default User\Local Settings\Temporary Internet Files\Content.IE5 emptied successfully
C:\Documents and Settings\NetworkService\Local Settings\Temporary Internet Files\Content.IE5 emptied successfully
C:\Documents and Settings\uzivatel\Local Settings\Temp\acrord32_sbx\Temporary Internet Files\Content.IE5 emptied successfully
C:\Documents and Settings\uzivatel\Plocha\zaloha\Michal\Local Settings\Temporary Internet Files\Content.IE5 emptied successfully
C:\Documents and Settings\uzivatel\Plocha\zaloha\Monika\Local Settings\Temp\acrord32_sbx\Temporary Internet Files\Content.IE5 emptied successfully
C:\Documents and Settings\uzivatel\Plocha\zaloha\Monika\Local Settings\Temporary Internet Files\Content.IE5 emptied successfully
C:\WINDOWS\system32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5 emptied successfully
C:\WINDOWS\system32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5 emptied successfully
C:\Documents and Settings\LocalService\Local Settings\Temporary Internet Files\Content.IE5\index.dat will be deleted at reboot
C:\Documents and Settings\uzivatel\Local Settings\Temporary Internet Files\Content.IE5\index.dat will be deleted at reboot

==== Empty FireFox Cache ======================

No FireFox Profiles found

==== Empty Chrome Cache ======================

No Chrome User Data found

==== Empty All Flash Cache ======================

No Flash Cache Found

==== Empty All Java Cache ======================

No Java Cache Found

==== C:\zoek_backup content ======================

C:\zoek_backup (files=4 folders=0 2351891 bytes)

==== Empty Temp Folders ======================

C:\WINDOWS\Temp will be emptied at reboot

==== After Reboot ======================

==== Empty Temp Folders ======================

C:\WINDOWS\Temp successfully emptied
C:\DOCUME~1\uzivatel\LOCALS~1\Temp successfully emptied

==== Empty Recycle Bin ======================

C:\RECYCLER successfully emptied

==== Deleting Files / Folders ======================

"C:\Documents and Settings\LocalService\Local Settings\Temporary Internet Files\Content.IE5\index.dat" not deleted
"C:\Documents and Settings\uzivatel\Local Settings\Temporary Internet Files\Content.IE5\index.dat" not found

==== EOF on st 14.01.2015 at 16:37:51,12 ======================

Sustr1975 · #6 Příspěvek od **Sustr1975** » 14 led 2015 19:15

první byla chyba promiňte, posílám nové

Zoek.exe v5.0.0.0 Updated 14-01-2015
Tool run by uzivatel on st 14.01.2015 at 18:51:31,73.
Microsoft Windows XP Home Edition 5.1.2600 Service Pack 3 x86
Running in: Normal Mode Internet Access Detected
Launched: C:\Documents and Settings\uzivatel\Dokumenty\Stažené soubory\zoek.exe [Scan all users] [Script inserted]

==== Older Logs ======================

C:\zoek-results2015-01-14-153751.log 7676 bytes

==== Reset Hosts File ======================

# Copyright (c) 1993-2006 Microsoft Corp.
#
# This is a sample HOSTS file used by Microsoft TCP/IP for Windows.
#
# This file contains the mappings of IP addresses to host names. Each
# entry should be kept on an individual line. The IP address should
# be placed in the first column followed by the corresponding host name.
# The IP address and the host name should be separated by at least one
# space.
#
# Additionally, comments (such as these) may be inserted on individual
# lines or following the machine name denoted by a '#' symbol.
#
# For example:
#
# 102.54.94.97 rhino.acme.com # source server
# 38.25.63.10 x.acme.com # x client host

127.0.0.1 localhost

==== Deleting CLSID Registry Keys ======================

==== Deleting CLSID Registry Values ======================

==== Deleting Services ======================

==== Set IE to Default ======================

Old Values:
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
"Start Page"="http://seznam.cz/"

New Values:
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
"Start Page"="http://seznam.cz/"

==== All HKCU SearchScopes ======================

HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes
"DefaultScope"="{0633EE93-D776-472f-A0FF-E1416B8B2E3A}"
{012E1000-F331-11DB-8314-0800200C9A66} Google Url="http://www.google.com/search?q={searchTerms}"
{0633EE93-D776-472f-A0FF-E1416B8B2E3A} Bing Url="http://www.bing.com/search?q={searchTer ... ORM=IE8SRC"

==== Reset Google Chrome ======================

Nothing found to reset

==== Empty IE Cache ======================

C:\Documents and Settings\Default User\Local Settings\Temporary Internet Files\Content.IE5 emptied successfully
C:\Documents and Settings\NetworkService\Local Settings\Temporary Internet Files\Content.IE5 emptied successfully
C:\Documents and Settings\uzivatel\Plocha\zaloha\Michal\Local Settings\Temporary Internet Files\Content.IE5 emptied successfully
C:\Documents and Settings\uzivatel\Plocha\zaloha\Monika\Local Settings\Temp\acrord32_sbx\Temporary Internet Files\Content.IE5 emptied successfully
C:\Documents and Settings\uzivatel\Plocha\zaloha\Monika\Local Settings\Temporary Internet Files\Content.IE5 emptied successfully
C:\WINDOWS\system32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5 emptied successfully
C:\WINDOWS\system32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5 emptied successfully
C:\Documents and Settings\LocalService\Local Settings\Temporary Internet Files\Content.IE5\index.dat will be deleted at reboot
C:\Documents and Settings\uzivatel\Local Settings\Temporary Internet Files\Content.IE5\index.dat will be deleted at reboot

==== Empty FireFox Cache ======================

No FireFox Profiles found

==== Empty Chrome Cache ======================

No Chrome User Data found

==== Empty All Flash Cache ======================

No Flash Cache Found

==== Empty All Java Cache ======================

No Java Cache Found

==== C:\zoek_backup content ======================

C:\zoek_backup (files=4 folders=0 2351891 bytes)

==== Empty Temp Folders ======================

C:\WINDOWS\Temp will be emptied at reboot

==== After Reboot ======================

==== Empty Temp Folders ======================

C:\WINDOWS\Temp successfully emptied
C:\DOCUME~1\uzivatel\LOCALS~1\Temp successfully emptied

==== Empty Recycle Bin ======================

C:\RECYCLER successfully emptied

==== Deleting Files / Folders ======================

"C:\Documents and Settings\LocalService\Local Settings\Temporary Internet Files\Content.IE5\index.dat" not deleted
"C:\Documents and Settings\uzivatel\Local Settings\Temporary Internet Files\Content.IE5\index.dat" not found

==== EOF on st 14.01.2015 at 19:05:46,21 ======================

#7 Příspěvek od **vyosek** » 14 led 2015 20:52

Poprosim nyni o FRST http://forum.viry.cz/viewtopic.php?f=30&t=133101

Sustr1975 · #8 Příspěvek od **Sustr1975** » 15 led 2015 06:57

Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 14-01-2015 01
Ran by uzivatel (administrator) on UZIVATEL-7B4015 on 15-01-2015 00:57:41
Running from C:\Documents and Settings\uzivatel\Plocha
Loaded Profiles: uzivatel (Available profiles: uzivatel)
Platform: Microsoft Windows XP Home Edition Service Pack 3 (X86) OS Language: Čeština
Internet Explorer Version 8 (Default browser: FF)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/33 ... scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(Broadcom Corporation.) C:\Program Files\WIDCOMM\Bluetooth Software\bin\btwdins.exe
(Oracle Corporation) C:\Program Files\Java\jre7\bin\jqs.exe
(Realtek Semiconductor Corp.) C:\WINDOWS\RTHDCPL.exe
(Realtek Semiconductor Corp.) C:\WINDOWS\SoundMan.exe
(ELANTECH Devices Corp.) C:\Program Files\Elantech\ETDCTRL.EXE
(Intel Corporation) C:\WINDOWS\system32\igfxtray.exe
(Intel Corporation) C:\WINDOWS\system32\hkcmd.exe
(ASUSTeK Computer Inc.) C:\Program Files\EeePC\ACPI\AsTray.exe
(ASUSTeK Computer Inc.) C:\Program Files\EeePC\ACPI\AsAcpiSvr.exe
(ASUSTeK Computer Inc.) C:\Program Files\EeePC\ACPI\AsEPCMon.exe
(Intel Corporation) C:\WINDOWS\system32\igfxsrvc.exe
(Oracle Corporation) C:\Program Files\Common Files\Java\Java Update\jusched.exe
(Microsoft Corporation) C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe
(Broadcom Corporation.) C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe
(Intel Corporation) C:\WINDOWS\system32\igfxext.exe
(Broadcom Corporation.) C:\Program Files\WIDCOMM\Bluetooth Software\BTStackServer.exe
(Microsoft Corporation) C:\WINDOWS\system32\wuauclt.exe
(Oracle Corporation) C:\Program Files\Common Files\Java\Java Update\jucheck.exe
(ESET) C:\Program Files\ESET\ESET Smart Security\ekrn.exe
(ESET) C:\Program Files\ESET\ESET Smart Security\egui.exe
(forum.viry.cz) C:\Documents and Settings\uzivatel\Plocha\FRSTLauncher.exe

==================== Registry (Whitelisted) ==================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [RTHDCPL] => C:\WINDOWS\RTHDCPL.EXE [16861696 2008-04-28] (Realtek Semiconductor Corp.)
HKLM\...\Run: [SoundMan] => C:\WINDOWS\SOUNDMAN.EXE [86016 2006-07-21] (Realtek Semiconductor Corp.)
HKLM\...\Run: [AlcWzrd] => C:\WINDOWS\ALCWZRD.EXE [2808832 2006-05-04] (RealTek Semicoductor Corp.)
HKLM\...\Run: [Alcmtr] => C:\WINDOWS\ALCMTR.EXE [69632 2005-05-04] (Realtek Semiconductor Corp.)
HKLM\...\Run: [ETDWare] => C:\Program Files\Elantech\ETDCtrl.exe [335872 2008-04-24] (ELANTECH Devices Corp.)
HKLM\...\Run: [] => [X]
HKLM\...\Run: [AsusTray] => C:\Program Files\EeePC\ACPI\AsTray.exe [114688 2008-12-04] (ASUSTeK Computer Inc.)
HKLM\...\Run: [AsusACPIServer] => C:\Program Files\EeePC\ACPI\AsAcpiSvr.exe [622592 2008-12-17] (ASUSTeK Computer Inc.)
HKLM\...\Run: [AsusEPCMonitor] => C:\Program Files\EeePC\ACPI\AsEPCMon.exe [94208 2008-05-21] (ASUSTeK Computer Inc.)
HKLM\...\Run: [Adobe ARM] => C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959176 2014-08-21] (Adobe Systems Incorporated)
HKLM\...\Run: [SunJavaUpdateSched] => C:\Program Files\Common Files\Java\Java Update\jusched.exe [256896 2014-07-25] (Oracle Corporation)
HKLM\...\Run: [GrooveMonitor] => C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe [31016 2006-10-26] (Microsoft Corporation)
HKLM\...\Run: [egui] => C:\Program Files\ESET\ESET Smart Security\egui.exe [5088456 2014-10-01] (ESET)
Startup: C:\Documents and Settings\All Users\Nabídka Start\Programy\Po spuštění\Bluetooth.lnk
ShortcutTarget: Bluetooth.lnk -> C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe (Broadcom Corporation.)

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

HKU\S-1-5-21-839522115-1336601894-796845957-1004\Software\Microsoft\Internet Explorer\Main,Start Page = http://seznam.cz/
HKU\S-1-5-21-839522115-1336601894-796845957-1004\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.microsoft.com/isapi/redir.dl ... r=iesearch
SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-21-839522115-1336601894-796845957-1004 -> {012E1000-F331-11DB-8314-0800200C9A66} URL = http://www.google.com/search?q={searchTerms}
BHO: Groove GFS Browser Helper -> {72853161-30C5-4D22-B7F9-0BBC1D38A37E} -> C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll (Microsoft Corporation)
BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
Handler: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Program Files\Microsoft Office\Office12\GrooveSystemServices.dll (Microsoft Corporation)
Tcpip\Parameters: [DhcpNameServer] 192.168.1.101

FireFox:
========
FF ProfilePath: C:\Documents and Settings\uzivatel\Data aplikací\Mozilla\Firefox\Profiles\zf3cd8bs.default
FF DefaultSearchEngine: Ask Web Search
FF SelectedSearchEngine: Ask Web Search
FF Homepage: hxxp://home.tb.ask.com/index.jhtml?ptb=0380032F-E841-4177-BF44-8A35632A040E&n=781aa254&p2=^BA5^xdm007^YYA^cz&si=CJHc4beJksMCFabLtAodSVwAhg
FF Keyword.URL: hxxp://search.tb.ask.com/search/GGmain.jhtml?st=kwd&ptb=0380032F-E841-4177-BF44-8A35632A040E&n=781aa254&ind=2015011412&p2=^BA5^xdm007^YYA^cz&si=CJHc4beJksMCFabLtAodSVwAhg&searchfor=
FF Plugin: @adobe.com/FlashPlayer -> C:\WINDOWS\system32\Macromed\Flash\NPSWF32_16_0_0_257.dll ()
FF Plugin: @java.com/DTPlugin,version=10.67.2 -> C:\Program Files\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=10.67.2 -> C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin: @tools.google.com/Google Update;version=3 -> C:\Program Files\Google\Update\1.3.25.11\npGoogleUpdate3.dll (Google Inc.)
FF Plugin: @tools.google.com/Google Update;version=9 -> C:\Program Files\Google\Update\1.3.25.11\npGoogleUpdate3.dll (Google Inc.)
FF Plugin: Adobe Reader -> C:\Program Files\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF SearchPlugin: C:\Documents and Settings\uzivatel\Data aplikací\Mozilla\Firefox\Profiles\zf3cd8bs.default\searchplugins\ask-web-search.xml
FF Extension: OnlineMapFinder - C:\Documents and Settings\uzivatel\Data aplikací\Mozilla\Firefox\Profiles\zf3cd8bs.default\Extensions\9pffxtbr@OnlineMapFinder_9p.com [2015-01-14]

Chrome:
=======
CHR Profile: C:\Documents and Settings\uzivatel\Local Settings\Data aplikací\Google\Chrome\User Data\Default
CHR Extension: (Google Docs) - C:\Documents and Settings\uzivatel\Local Settings\Data aplikací\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2014-08-25]
CHR Extension: (Google Drive) - C:\Documents and Settings\uzivatel\Local Settings\Data aplikací\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2014-08-25]
CHR Extension: (YouTube) - C:\Documents and Settings\uzivatel\Local Settings\Data aplikací\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2014-08-25]
CHR Extension: (Google Search) - C:\Documents and Settings\uzivatel\Local Settings\Data aplikací\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2014-08-25]
CHR Extension: (Google Wallet) - C:\Documents and Settings\uzivatel\Local Settings\Data aplikací\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2014-08-25]
CHR Extension: (Gmail) - C:\Documents and Settings\uzivatel\Local Settings\Data aplikací\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2014-08-25]

========================== Services (Whitelisted) =================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R2 ekrn; C:\Program Files\ESET\ESET Smart Security\ekrn.exe [1349576 2014-10-01] (ESET)
R2 JavaQuickStarterService; C:\Program Files\Java\jre7\bin\jqs.exe [182696 2014-08-25] (Oracle Corporation)
S3 SwPrv; C:\WINDOWS\system32\dllhost.exe /Processid:{93CEFEE5-46AB-46C4-8E40-96E4F8133141}

==================== Drivers (Whitelisted) ====================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R3 AsusACPI; C:\WINDOWS\System32\DRIVERS\ASUSACPI.sys [10752 2008-04-08] (ASUSTeK Computer Inc.)
R3 btaudio; C:\WINDOWS\System32\drivers\btaudio.sys [539640 2007-12-10] (Broadcom Corporation.)
R3 BTDriver; C:\WINDOWS\System32\DRIVERS\btport.sys [37424 2007-03-23] (Broadcom Corporation.)
R3 BTKRNL; C:\WINDOWS\System32\DRIVERS\btkrnl.sys [879624 2007-11-21] (Broadcom Corporation.)
R3 BTWDNDIS; C:\WINDOWS\System32\DRIVERS\btwdndis.sys [156392 2007-06-29] (Broadcom Corporation.)
R3 btwhid; C:\WINDOWS\System32\DRIVERS\btwhid.sys [55352 2007-03-31] (Broadcom Corporation.)
R3 BTWUSB; C:\WINDOWS\System32\Drivers\btwusb.sys [74688 2007-11-27] (Broadcom Corporation.)
S3 CCDECODE; C:\WINDOWS\System32\DRIVERS\CCDECODE.sys [17024 2008-04-14] (Microsoft Corporation)
R1 eamonm; C:\WINDOWS\System32\DRIVERS\eamonm.sys [191928 2014-10-10] (ESET)
S0 edevmon; C:\WINDOWS\System32\DRIVERS\edevmon.sys [190368 2014-10-10] (ESET)
R1 ehdrv; C:\WINDOWS\System32\DRIVERS\ehdrv.sys [135296 2014-10-10] (ESET)
R2 epfw; C:\WINDOWS\System32\DRIVERS\epfw.sys [176448 2014-10-10] (ESET)
R3 Epfwndis; C:\WINDOWS\System32\DRIVERS\Epfwndis.sys [39464 2014-10-10] (ESET)
R1 epfwtdi; C:\WINDOWS\System32\DRIVERS\epfwtdi.sys [63160 2014-10-10] (ESET)
R3 Ktp; C:\WINDOWS\System32\DRIVERS\ETD.sys [26112 2008-04-30] (ELANTECH Devices Corp.) [File not signed]
R3 L1e; C:\WINDOWS\System32\DRIVERS\l1e51x86.sys [36864 2008-03-12] (Atheros Communications, Inc.)
S3 NdisIP; C:\WINDOWS\System32\DRIVERS\NdisIP.sys [10880 2008-04-14] (Microsoft Corporation)
R3 RT80x86; C:\WINDOWS\System32\DRIVERS\RT2860.sys [704384 2008-09-24] (Ralink Technology, Corp.)
S4 IntelIde; No ImagePath
U1 WS2IFSL; No ImagePath

==================== NetSvcs (Whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)

==================== One Month Created Files and Folders ========

(If an entry is included in the fixlist, the file\folder will be moved.)

2015-01-15 00:57 - 2015-01-15 00:58 - 00011152 _____ () C:\Documents and Settings\uzivatel\Plocha\FRST.txt
2015-01-15 00:32 - 2015-01-15 00:32 - 00112640 _____ (forum.viry.cz) C:\Documents and Settings\uzivatel\Plocha\FRSTLauncher.exe
2015-01-15 00:31 - 2015-01-14 22:34 - 01116672 _____ (Farbar) C:\Documents and Settings\uzivatel\Plocha\FRST.exe
2015-01-14 22:45 - 2015-01-15 00:57 - 00000000 ____D () C:\FRST
2015-01-14 21:21 - 2015-01-14 21:21 - 00000000 ____D () C:\Documents and Settings\uzivatel\Local Settings\Data aplikací\ESET
2015-01-14 21:21 - 2015-01-14 21:21 - 00000000 ____D () C:\Documents and Settings\uzivatel\Data aplikací\ESET
2015-01-14 21:20 - 2015-01-14 21:20 - 00000000 ____D () C:\Documents and Settings\LocalService\Local Settings\Data aplikací\ESET
2015-01-14 21:19 - 2015-01-14 21:20 - 00000000 ____D () C:\WINDOWS\LastGood
2015-01-14 21:18 - 2015-01-14 21:18 - 00000000 ____D () C:\Program Files\ESET
2015-01-14 21:18 - 2015-01-14 21:18 - 00000000 ____D () C:\Documents and Settings\All Users\Nabídka Start\Programy\ESET
2015-01-14 21:18 - 2015-01-14 21:18 - 00000000 ____D () C:\Documents and Settings\All Users\Data aplikací\ESET
2015-01-14 19:04 - 2015-01-15 00:58 - 00000000 ____D () C:\Documents and Settings\uzivatel\Local Settings\Temp
2015-01-14 19:04 - 2015-01-14 18:51 - 00024064 _____ () C:\WINDOWS\zoek-delete.exe
2015-01-14 18:53 - 2015-01-14 16:37 - 00007676 _____ () C:\zoek-results2015-01-14-153751.log
2015-01-14 16:23 - 2015-01-14 19:05 - 00004457 _____ () C:\zoek-results.log
2015-01-14 16:21 - 2015-01-14 16:32 - 00000000 ____D () C:\zoek_backup
2015-01-13 16:46 - 2015-01-14 20:18 - 00000000 ____D () C:\Program Files\trend micro
2015-01-12 15:37 - 2015-01-12 15:37 - 00000000 ____D () C:\Documents and Settings\uzivatel\Data aplikací\WinRAR
2014-12-26 23:13 - 2014-12-26 23:13 - 00000000 ____D () C:\Documents and Settings\uzivatel\Dokumenty\Historie plateb _ Era jednoduše_soubory
2014-12-26 23:13 - 2014-12-26 21:49 - 00119051 _____ () C:\Documents and Settings\uzivatel\Dokumenty\Historie plateb _ Era jednoduše.htm
2014-12-25 16:39 - 2014-12-25 17:01 - 00000000 ____D () C:\Documents and Settings\uzivatel\Dokumenty\Vánoce
2014-12-22 19:20 - 2014-12-22 19:20 - 00090112 _____ () C:\WINDOWS\Minidump\Mini122214-01.dmp

==================== One Month Modified Files and Folders =======

(If an entry is included in the fixlist, the file\folder will be moved.)

2015-01-15 00:57 - 2014-08-25 10:06 - 00000000 ___HD () C:\Documents and Settings\uzivatel\Local Settings\Data aplikací
2015-01-15 00:57 - 2014-08-25 10:06 - 00000000 ____D () C:\Documents and Settings\uzivatel\Plocha
2015-01-15 00:33 - 2014-08-25 11:02 - 00000000 ____D () C:\Documents and Settings\uzivatel\Dokumenty\Stažené soubory
2015-01-15 00:18 - 2014-08-25 11:02 - 00000940 _____ () C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job
2015-01-15 00:15 - 2014-08-25 11:11 - 00000914 _____ () C:\WINDOWS\Tasks\Adobe Flash Player Updater.job
2015-01-15 00:04 - 2014-08-25 09:57 - 01627908 _____ () C:\WINDOWS\WindowsUpdate.log
2015-01-14 21:21 - 2014-08-25 10:06 - 00000000 __RHD () C:\Documents and Settings\uzivatel\Data aplikací
2015-01-14 21:20 - 2014-08-25 11:41 - 00704792 _____ () C:\WINDOWS\setupapi.log
2015-01-14 21:20 - 2014-08-25 10:04 - 00000000 ___HD () C:\Documents and Settings\LocalService\Local Settings\Data aplikací
2015-01-14 21:18 - 2014-08-25 11:42 - 00000000 ___RD () C:\Documents and Settings\All Users\Nabídka Start\Programy
2015-01-14 21:18 - 2014-08-25 11:41 - 00000000 __RHD () C:\Documents and Settings\All Users\Data aplikací
2015-01-14 21:06 - 2014-08-25 11:43 - 00947425 _____ () C:\WINDOWS\FaxSetup.log
2015-01-14 21:06 - 2014-08-25 11:43 - 00516790 _____ () C:\WINDOWS\ocgen.log
2015-01-14 21:06 - 2014-08-25 11:43 - 00376187 _____ () C:\WINDOWS\tsoc.log
2015-01-14 21:06 - 2014-08-25 11:43 - 00325369 _____ () C:\WINDOWS\comsetup.log
2015-01-14 21:06 - 2014-08-25 11:43 - 00197683 _____ () C:\WINDOWS\ntdtcsetup.log
2015-01-14 21:06 - 2014-08-25 11:43 - 00148213 _____ () C:\WINDOWS\iis6.log
2015-01-14 21:06 - 2014-08-25 11:43 - 00059782 _____ () C:\WINDOWS\ocmsn.log
2015-01-14 21:06 - 2014-08-25 11:43 - 00048809 _____ () C:\WINDOWS\msgsocm.log
2015-01-14 21:06 - 2014-08-25 11:43 - 00001917 _____ () C:\WINDOWS\imsins.log
2015-01-14 21:06 - 2014-08-25 11:43 - 00001917 _____ () C:\WINDOWS\imsins.BAK
2015-01-14 20:20 - 2014-08-25 13:56 - 00000228 _____ () C:\WINDOWS\Tasks\Přihlášení k oznamování konce poskytování služeb pro Microsoft Windows XP.job
2015-01-14 20:20 - 2014-08-25 11:46 - 00000159 _____ () C:\WINDOWS\wiadebug.log
2015-01-14 20:20 - 2014-08-25 11:46 - 00000049 _____ () C:\WINDOWS\wiaservc.log
2015-01-14 20:20 - 2014-08-25 11:02 - 00000936 _____ () C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job
2015-01-14 20:20 - 2014-08-25 10:04 - 00000006 ____H () C:\WINDOWS\Tasks\SA.DAT
2015-01-14 20:19 - 2014-08-25 11:42 - 00000000 ____D () C:\Documents and Settings\All Users\Plocha
2015-01-14 20:19 - 2014-08-25 11:15 - 00000000 ___HD () C:\$AVG
2015-01-14 20:18 - 2014-08-25 11:14 - 00000000 ____D () C:\Documents and Settings\All Users\Data aplikací\MFAData
2015-01-14 20:16 - 2014-08-25 10:04 - 00032474 _____ () C:\WINDOWS\SchedLgU.Txt
2015-01-14 19:05 - 2014-08-25 10:06 - 00000178 ___SH () C:\Documents and Settings\uzivatel\ntuser.ini
2015-01-14 17:15 - 2014-08-25 11:11 - 00701616 _____ (Adobe Systems Incorporated) C:\WINDOWS\system32\FlashPlayerApp.exe
2015-01-14 17:15 - 2014-08-25 11:11 - 00071344 _____ (Adobe Systems Incorporated) C:\WINDOWS\system32\FlashPlayerCPLApp.cpl
2015-01-14 00:06 - 2014-08-25 11:43 - 00720908 _____ () C:\WINDOWS\system32\PerfStringBackup.INI
2015-01-13 23:37 - 2014-10-21 14:24 - 00000000 ____D () C:\Documents and Settings\All Users\Data aplikací\AVG2015
2015-01-13 23:37 - 2004-08-18 12:00 - 00012984 _____ () C:\WINDOWS\system32\wpa.dbl
2015-01-08 15:00 - 2014-08-25 13:56 - 00000222 _____ () C:\WINDOWS\Tasks\Měsíční oznamování konce poskytování služeb pro Microsoft Windows XP.job
2015-01-06 02:05 - 2014-08-25 09:54 - 00015713 _____ () C:\WINDOWS\wmsetup.log
2015-01-04 22:14 - 2014-11-24 21:51 - 00000000 ____D () C:\Documents and Settings\uzivatel\Plocha\Nepoužívané odkazy plochy
2014-12-28 10:48 - 2014-08-25 10:06 - 00000000 ___RD () C:\Documents and Settings\uzivatel\Dokumenty
2014-12-28 10:47 - 2014-09-01 16:06 - 00002563 _____ () C:\Documents and Settings\uzivatel\Plocha\Microsoft Office Word 2007.lnk
2014-12-22 19:20 - 2014-11-17 14:18 - 00000000 ____D () C:\WINDOWS\Minidump

Some content of TEMP:
====================
C:\Documents and Settings\uzivatel\Local Settings\Temp\InstHelper.exe

==================== Bamital & volsnap Check =================

(There is no automatic fix for files that do not pass verification.)

C:\WINDOWS\explorer.exe => File is digitally signed
C:\WINDOWS\system32\winlogon.exe => File is digitally signed
C:\WINDOWS\system32\svchost.exe => File is digitally signed
C:\WINDOWS\system32\services.exe => File is digitally signed
C:\WINDOWS\system32\User32.dll => File is digitally signed
C:\WINDOWS\system32\userinit.exe => File is digitally signed
C:\WINDOWS\system32\rpcss.dll => File is digitally signed
C:\WINDOWS\system32\Drivers\volsnap.sys => File is digitally signed

===***===***===***=== Extract of Additional scan result of Farbar Recovery Scan Tool ===***===***===***===

==================== Drive and Memory info ===================

==================== MBR and Partition Table ==================

==================== Scheduled Tasks (whitelisted) ==================

==================== Alternate Data Streams (whitelisted) ==================

==================== Security Center ==================

AV: ESET Smart Security 8.0 (Disabled - Up to date) {E5E70D32-0101-4F12-8FB0-D96ACA4F34C0}
FW: AVG Internet Security 2015 (Disabled) {17DDD097-36FF-435F-9E1B-52D74245D6BF}
FW: ESET Personální firewall (Disabled) {E5E70D32-0101-4340-86A3-A7B0F1C8FFE0}

===***===***===***=== Supplementary Scan createdy by FRSTLauncher ===***===***===***===
Posledni aktualizace FRSTLauncheru: 25_11_2013 (01)
Posledni aktualizace Modifikacniho skriptu: 30_09_2013 (01)

***** Velikost "Plochy" *****

Velikost slozky "C:\Documents and Settings\uzivatel\Plocha" je 58033 MB.

***** Startup Programs *****

***** Firewall rules *****

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
EnableFirewall REG_DWORD 0x0

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
EnableFirewall REG_DWORD 0x0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
"%windir%\\Network Diagnostic\\xpnetdiag.exe"="%windir%\\Network Diagnostic\\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"%windir%\\system32\\sessmgr.exe"="%windir%\\system32\\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"%windir%\\Network Diagnostic\\xpnetdiag.exe"="%windir%\\Network Diagnostic\\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"%windir%\\system32\\sessmgr.exe"="%windir%\\system32\\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"C:\\Program Files\\Google\\Chrome\\Application\\chrome.exe"="C:\\Program Files\\Google\\Chrome\\Application\\chrome.exe:*:Enabled:Google Chrome"
"C:\\Program Files\\AVG\\AVG2014\\avgmfapx.exe"="C:\\Program Files\\AVG\\AVG2014\\avgmfapx.exe:*:Enabled:Instaltor AVG"
"C:\\Program Files\\Microsoft Office\\Office12\\OUTLOOK.EXE"="C:\\Program Files\\Microsoft Office\\Office12\\OUTLOOK.EXE:*:Enabled:Microsoft Office Outlook"
"C:\\Program Files\\Microsoft Office\\Office12\\GROOVE.EXE"="C:\\Program Files\\Microsoft Office\\Office12\\GROOVE.EXE:*:Enabled:Microsoft Office Groove"
"C:\\Program Files\\Microsoft Office\\Office12\\ONENOTE.EXE"="C:\\Program Files\\Microsoft Office\\Office12\\ONENOTE.EXE:*:Enabled:Microsoft Office OneNote"
"C:\\Program Files\\AVG\\AVG2015\\avgmfapx.exe"="C:\\Program Files\\AVG\\AVG2015\\avgmfapx.exe:*:Enabled:Instaltor AVG"

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\GloballyOpenPorts\List]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\GloballyOpenPorts\List]

***** System Restore *****

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SystemRestore]
"DisableSR"=dword:00000000

==================== End Of Log ==============================
Additional scan result of Farbar Recovery Scan Tool (x86) Version: 14-01-2015 01
Ran by uzivatel at 2015-01-15 00:58:47
Running from C:\Documents and Settings\uzivatel\Plocha
Boot Mode: Normal
==========================================================

==================== Security Center ========================

(If an entry is included in the fixlist, it will be removed.)

AV: ESET Smart Security 8.0 (Disabled - Up to date) {E5E70D32-0101-4F12-8FB0-D96ACA4F34C0}
FW: AVG Internet Security 2015 (Disabled) {17DDD097-36FF-435F-9E1B-52D74245D6BF}
FW: ESET Personální firewall (Disabled) {E5E70D32-0101-4340-86A3-A7B0F1C8FFE0}

==================== Installed Programs ======================

(Only the adware programs with "hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)

#9 Příspěvek od **vyosek** » 15 led 2015 11:31

Tvorba fixlistu pro FRST

Spustte poznamkovy blok (Start-spustit-notepad)
Zkopirujte skript nize

Kód: Vybrat vše

Start
CloseProcesses:
CreateRestorePoint:

HKLM\...\Run: [] => [X]
HKLM\...\Run: [Adobe ARM] => C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959176 2014-08-21] (Adobe Systems Incorporated)
HKLM\...\Run: [SunJavaUpdateSched] => C:\Program Files\Common Files\Java\Java Update\jusched.exe [256896 2014-07-25] (Oracle Corporation)
HKLM\...\Run: [GrooveMonitor] => C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe [31016 2006-10-26] (Microsoft Corporation)

SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 

FF DefaultSearchEngine: Ask Web Search
FF SelectedSearchEngine: Ask Web Search
FF Homepage: hxxp://home.tb.ask.com/index.jhtml?ptb= ... 1aa254&p2=^BA5^xdm007^YYA^cz&si=CJHc4beJksMCFabLtAodSVwAhg
FF Keyword.URL: hxxp://search.tb.ask.com/search/GGmain. ... 011412&p2=^BA5^xdm007^YYA^cz&si=CJHc4beJksMCFabLtAodSVwAhg&searchfor=
FF SearchPlugin: C:\Documents and Settings\uzivatel\Data aplikací\Mozilla\Firefox\Profiles\zf3cd8bs.default\searchplugins\ask-web-search.xml

DisableService: JavaQuickStarterService

S4 IntelIde; No ImagePath
U1 WS2IFSL; No ImagePath

2015-01-15 00:57 - 2015-01-15 00:58 - 00011152 _____ () C:\Documents and Settings\uzivatel\Plocha\FRST.txt
2015-01-15 00:32 - 2015-01-15 00:32 - 00112640 _____ (forum.viry.cz) C:\Documents and Settings\uzivatel\Plocha\FRSTLauncher.exe
2015-01-14 19:04 - 2015-01-14 18:51 - 00024064 _____ () C:\WINDOWS\zoek-delete.exe
2015-01-14 18:53 - 2015-01-14 16:37 - 00007676 _____ () C:\zoek-results2015-01-14-153751.log
2015-01-14 16:23 - 2015-01-14 19:05 - 00004457 _____ () C:\zoek-results.log
2015-01-14 16:21 - 2015-01-14 16:32 - 00000000 ____D () C:\zoek_backup
2015-01-13 16:46 - 2015-01-14 20:18 - 00000000 ____D () C:\Program Files\trend micro
2015-01-14 21:06 - 2014-08-25 11:43 - 00947425 _____ () C:\WINDOWS\FaxSetup.log
2015-01-14 21:06 - 2014-08-25 11:43 - 00516790 _____ () C:\WINDOWS\ocgen.log
2015-01-14 21:06 - 2014-08-25 11:43 - 00376187 _____ () C:\WINDOWS\tsoc.log
2015-01-14 21:06 - 2014-08-25 11:43 - 00325369 _____ () C:\WINDOWS\comsetup.log
2015-01-14 21:06 - 2014-08-25 11:43 - 00197683 _____ () C:\WINDOWS\ntdtcsetup.log
2015-01-14 21:06 - 2014-08-25 11:43 - 00148213 _____ () C:\WINDOWS\iis6.log
2015-01-14 21:06 - 2014-08-25 11:43 - 00059782 _____ () C:\WINDOWS\ocmsn.log
2015-01-14 21:06 - 2014-08-25 11:43 - 00048809 _____ () C:\WINDOWS\msgsocm.log
2015-01-14 21:06 - 2014-08-25 11:43 - 00001917 _____ () C:\WINDOWS\imsins.log
2015-01-14 21:06 - 2014-08-25 11:43 - 00001917 _____ () C:\WINDOWS\imsins.BAK
2015-01-14 20:20 - 2014-08-25 11:46 - 00000159 _____ () C:\WINDOWS\wiadebug.log
2015-01-14 20:20 - 2014-08-25 11:46 - 00000049 _____ () C:\WINDOWS\wiaservc.log
2015-01-14 20:19 - 2014-08-25 11:15 - 00000000 ___HD () C:\$AVG
2015-01-14 20:18 - 2014-08-25 11:14 - 00000000 ____D () C:\Documents and Settings\All Users\Data aplikací\MFAData
2015-01-13 23:37 - 2014-10-21 14:24 - 00000000 ____D () C:\Documents and Settings\All Users\Data aplikací\AVG2015

2015-01-14 20:20 - 2014-08-25 13:56 - 00000228 _____ () C:\WINDOWS\Tasks\Přihlášení k oznamování konce poskytování služeb pro Microsoft Windows XP.job
2015-01-14 20:20 - 2014-08-25 11:02 - 00000936 _____ () C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job
2015-01-08 15:00 - 2014-08-25 13:56 - 00000222 _____ () C:\WINDOWS\Tasks\Měsíční oznamování konce poskytování služeb pro Microsoft Windows XP.job

Hosts:
EmptyTemp:
Reboot:
End

Ulozte vytvoreny TXT jako fixlist.txt
Presunte vytvoreny fixlist vedle FRST

Spustte znovu FRST.exe

Kliknete na Fix
Probehne oprava a vytvori log Fixlog.txt

Restart PC a dejte mi sem fixlog.txt

Sustr1975 · #10 Příspěvek od **Sustr1975** » 15 led 2015 12:43

Fix result of Farbar Recovery Tool (FRST written by Farbar) (x86) Version: 14-01-2015 01
Ran by uzivatel at 2015-01-15 12:35:00 Run:1
Running from C:\Documents and Settings\uzivatel\Plocha
Loaded Profiles: uzivatel (Available profiles: uzivatel)
Boot Mode: Normal

==============================================

Content of fixlist:
*****************
Start
CloseProcesses:
CreateRestorePoint:

HKLM\...\Run: [] => [X]
HKLM\...\Run: [Adobe ARM] => C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959176 2014-08-21] (Adobe Systems Incorporated)
HKLM\...\Run: [SunJavaUpdateSched] => C:\Program Files\Common Files\Java\Java Update\jusched.exe [256896 2014-07-25] (Oracle Corporation)
HKLM\...\Run: [GrooveMonitor] => C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe [31016 2006-10-26] (Microsoft Corporation)

SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =

FF DefaultSearchEngine: Ask Web Search
FF SelectedSearchEngine: Ask Web Search
FF Homepage: hxxp://home.tb.ask.com/index.jhtml?ptb= ... 1aa254&p2=^BA5^xdm007^YYA^cz&si=CJHc4beJksMCFabLtAodSVwAhg
FF Keyword.URL: hxxp://search.tb.ask.com/search/GGmain. ... 011412&p2=^BA5^xdm007^YYA^cz&si=CJHc4beJksMCFabLtAodSVwAhg&searchfor=
FF SearchPlugin: C:\Documents and Settings\uzivatel\Data aplikací\Mozilla\Firefox\Profiles\zf3cd8bs.default\searchplugins\ask-web-search.xml

DisableService: JavaQuickStarterService

S4 IntelIde; No ImagePath
U1 WS2IFSL; No ImagePath

2015-01-15 00:57 - 2015-01-15 00:58 - 00011152 _____ () C:\Documents and Settings\uzivatel\Plocha\FRST.txt
2015-01-15 00:32 - 2015-01-15 00:32 - 00112640 _____ (forum.viry.cz) C:\Documents and Settings\uzivatel\Plocha\FRSTLauncher.exe
2015-01-14 19:04 - 2015-01-14 18:51 - 00024064 _____ () C:\WINDOWS\zoek-delete.exe
2015-01-14 18:53 - 2015-01-14 16:37 - 00007676 _____ () C:\zoek-results2015-01-14-153751.log
2015-01-14 16:23 - 2015-01-14 19:05 - 00004457 _____ () C:\zoek-results.log
2015-01-14 16:21 - 2015-01-14 16:32 - 00000000 ____D () C:\zoek_backup
2015-01-13 16:46 - 2015-01-14 20:18 - 00000000 ____D () C:\Program Files\trend micro
2015-01-14 21:06 - 2014-08-25 11:43 - 00947425 _____ () C:\WINDOWS\FaxSetup.log
2015-01-14 21:06 - 2014-08-25 11:43 - 00516790 _____ () C:\WINDOWS\ocgen.log
2015-01-14 21:06 - 2014-08-25 11:43 - 00376187 _____ () C:\WINDOWS\tsoc.log
2015-01-14 21:06 - 2014-08-25 11:43 - 00325369 _____ () C:\WINDOWS\comsetup.log
2015-01-14 21:06 - 2014-08-25 11:43 - 00197683 _____ () C:\WINDOWS\ntdtcsetup.log
2015-01-14 21:06 - 2014-08-25 11:43 - 00148213 _____ () C:\WINDOWS\iis6.log
2015-01-14 21:06 - 2014-08-25 11:43 - 00059782 _____ () C:\WINDOWS\ocmsn.log
2015-01-14 21:06 - 2014-08-25 11:43 - 00048809 _____ () C:\WINDOWS\msgsocm.log
2015-01-14 21:06 - 2014-08-25 11:43 - 00001917 _____ () C:\WINDOWS\imsins.log
2015-01-14 21:06 - 2014-08-25 11:43 - 00001917 _____ () C:\WINDOWS\imsins.BAK
2015-01-14 20:20 - 2014-08-25 11:46 - 00000159 _____ () C:\WINDOWS\wiadebug.log
2015-01-14 20:20 - 2014-08-25 11:46 - 00000049 _____ () C:\WINDOWS\wiaservc.log
2015-01-14 20:19 - 2014-08-25 11:15 - 00000000 ___HD () C:\$AVG
2015-01-14 20:18 - 2014-08-25 11:14 - 00000000 ____D () C:\Documents and Settings\All Users\Data aplikací\MFAData
2015-01-13 23:37 - 2014-10-21 14:24 - 00000000 ____D () C:\Documents and Settings\All Users\Data aplikací\AVG2015

2015-01-14 20:20 - 2014-08-25 13:56 - 00000228 _____ () C:\WINDOWS\Tasks\Přihlášení k oznamování konce poskytování služeb pro Microsoft Windows XP.job
2015-01-14 20:20 - 2014-08-25 11:02 - 00000936 _____ () C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job
2015-01-08 15:00 - 2014-08-25 13:56 - 00000222 _____ () C:\WINDOWS\Tasks\Měsíční oznamování konce poskytování služeb pro Microsoft Windows XP.job

Hosts:
EmptyTemp:
Reboot:
End
*****************

Processes closed successfully.
Restore point was successfully created.
HKLM\Software\Microsoft\Windows\CurrentVersion\Run\\ => value deleted successfully.
HKLM\Software\Microsoft\Windows\CurrentVersion\Run\\Adobe ARM => value deleted successfully.
HKLM\Software\Microsoft\Windows\CurrentVersion\Run\\SunJavaUpdateSched => value deleted successfully.
HKLM\Software\Microsoft\Windows\CurrentVersion\Run\\GrooveMonitor => value deleted successfully.
HKU\.DEFAULT\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope => value deleted successfully.
HKU\S-1-5-19\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope => value deleted successfully.
HKU\S-1-5-20\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope => value deleted successfully.
Firefox DefaultSearchEngine deleted successfully.
Firefox SelectedSearchEngine deleted successfully.
Firefox homepage deleted successfully.
Firefox Keyword.URL deleted successfully.
C:\Documents and Settings\uzivatel\Data aplikací\Mozilla\Firefox\Profiles\zf3cd8bs.default\searchplugins\ask-web-search.xml => Moved successfully.
JavaQuickStarterService service was disabled
IntelIde => Service deleted successfully.
WS2IFSL => Service deleted successfully.
"C:\Documents and Settings\uzivatel\Plocha\FRST.txt" => File/Directory not found.
C:\Documents and Settings\uzivatel\Plocha\FRSTLauncher.exe => Moved successfully.
C:\WINDOWS\zoek-delete.exe => Moved successfully.
C:\zoek-results2015-01-14-153751.log => Moved successfully.
C:\zoek-results.log => Moved successfully.
C:\zoek_backup => Moved successfully.
C:\Program Files\trend micro => Moved successfully.
C:\WINDOWS\FaxSetup.log => Moved successfully.
C:\WINDOWS\ocgen.log => Moved successfully.
C:\WINDOWS\tsoc.log => Moved successfully.
C:\WINDOWS\comsetup.log => Moved successfully.
C:\WINDOWS\ntdtcsetup.log => Moved successfully.
C:\WINDOWS\iis6.log => Moved successfully.
C:\WINDOWS\ocmsn.log => Moved successfully.
C:\WINDOWS\msgsocm.log => Moved successfully.
C:\WINDOWS\imsins.log => Moved successfully.
C:\WINDOWS\imsins.BAK => Moved successfully.
Could not move "C:\WINDOWS\wiadebug.log" => Scheduled to move on reboot.
Could not move "C:\WINDOWS\wiaservc.log" => Scheduled to move on reboot.
C:\$AVG => Moved successfully.
C:\Documents and Settings\All Users\Data aplikací\MFAData => Moved successfully.
C:\Documents and Settings\All Users\Data aplikací\AVG2015 => Moved successfully.
C:\WINDOWS\Tasks\Přihlášení k oznamování konce poskytování služeb pro Microsoft Windows XP.job => Moved successfully.
C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job => Moved successfully.
C:\WINDOWS\Tasks\Měsíční oznamování konce poskytování služeb pro Microsoft Windows XP.job => Moved successfully.
C:\Windows\System32\Drivers\etc\hosts => Moved successfully.
Hosts was reset successfully.
EmptyTemp: => Removed 279.4 MB temporary data.

=> Result of Scheduled Files to move (Boot Mode: Normal) (Date&Time: 2015-01-15 12:38:29)<=

"C:\WINDOWS\wiadebug.log" => File could not move.
"C:\WINDOWS\wiaservc.log" => File could not move.

==== End of Fixlog 12:38:30 ====

#11 Příspěvek od **vyosek** » 15 led 2015 12:45

Tak jeste uklidime

DelFix https://toolslib.net/downloads/finish/2/

Stahnete a spustte
Ponechte zatrzitkou pouze u volby Remote disinfection tools
Kliknete na Run

Stahnete Ccleaner https://www.piriform.com/ccleaner/download/standard
Panel čistič

Vse nechte jak je, jen dejte Analyzovat a pote Spustit CCleaner

Panel registry

dejte Hledej problémy
nasledne Opravit problémy - zalohu registru doporucuji udelat, opravte vsechny problemy
postup opakujte dokud nebude bez problemu - vetsinou cca 3x

Panel nástroje

Zde muzete odinstalovat nepotrebne programy

CCleaner doporucuji pouzivat cca jednou za tyden

A pokud nejsou problemy ci dotazy, je to z me strany vse

Sustr1975 · #12 Příspěvek od **Sustr1975** » 15 led 2015 13:03

Předem děkuji. Potřebuji CCleaner verze je placená nebo free? Jinak mám Eset Smart Security 8 na měsíc ale budu kupovat na delší dobu. Jen už vím musím se hlídat.

#13 Příspěvek od **vyosek** » 15 led 2015 13:41

CCleaner staci bohate free verze, ESET Smart Security je velmi kvalitni a komplexni ochrana

VIRY.CZ

prosím kontrola logu

prosím kontrola logu

Re: prosím kontrola logu

Re: prosím kontrola logu

Re: prosím kontrola logu

Re: prosím kontrola logu

Re: prosím kontrola logu

Re: prosím kontrola logu

Re: prosím kontrola logu

Re: prosím kontrola logu

Re: prosím kontrola logu

Re: prosím kontrola logu

Re: prosím kontrola logu

Re: prosím kontrola logu