prosím o pomoc :-(

[Rudy]

Zdravím!
Spusťte tuto utilitu:

Stáhněte AdwCleaner http://general-changelog-team.fr/fr/dow ... adwcleaner
Uložte na plochu
Ukončete všechny programy
Klikněte nejprve na >Scan< a pak na >Clean<.
Proběhne skenováni a pak se objeví log, který sem vložte.

[Rudy]

Toto je OK. Otevřte poznámkový blok a zkopírujte do něj:

Start
HKU\S-1-5-21-854197151-3482271168-3196824506-1000\...\MountPoints2: H - H:\Autorun.exe
HKU\S-1-5-21-854197151-3482271168-3196824506-1000\...\MountPoints2: I - I:\Autorun.exe
HKU\S-1-5-21-854197151-3482271168-3196824506-1000\...\MountPoints2: {2292152e-e27e-11e3-99bc-dca9713d0937} - J:\Autorun.exe
HKU\S-1-5-21-854197151-3482271168-3196824506-1000\...\MountPoints2: {300d9da7-8942-11e4-be43-dca9713d0937} - H:\Autorun.exe
HKU\S-1-5-21-854197151-3482271168-3196824506-1000\...\MountPoints2: {300d9dd3-8942-11e4-be43-dca9713d0937} - H:\Autorun.exe
HKU\S-1-5-21-854197151-3482271168-3196824506-1000\...\MountPoints2: {35082e35-89ae-11e4-a8ef-806e6f6e6963} - I:\Autorun.exe
HKU\S-1-5-21-854197151-3482271168-3196824506-1000\...\MountPoints2: {42118f99-0f19-11e4-a02d-6c626d344700} - H:\Autorun.exe
HKU\S-1-5-21-854197151-3482271168-3196824506-1000\...\MountPoints2: {42119037-0f19-11e4-a02d-6c626d344700} - H:\Autorun.exe
HKU\S-1-5-21-854197151-3482271168-3196824506-1000\...\MountPoints2: {49f23dfb-4ea9-11e4-9530-6c626d344700} - H:\LG_PC_Programs.exe
HKU\S-1-5-21-854197151-3482271168-3196824506-1000\...\MountPoints2: {6743c996-38ca-11e4-8dbd-dca9713d0937} - H:\Autorun.exe
HKU\S-1-5-21-854197151-3482271168-3196824506-1000\...\MountPoints2: {6743ca3a-38ca-11e4-8dbd-dca9713d0937} - H:\Autorun.exe
HKU\S-1-5-21-854197151-3482271168-3196824506-1000\...\MountPoints2: {6743cabf-38ca-11e4-8dbd-dca9713d0937} - H:\Autorun.exe
HKU\S-1-5-21-854197151-3482271168-3196824506-1000\...\MountPoints2: {6743d018-38ca-11e4-8dbd-6c626d344700} - H:\Autorun.exe
HKU\S-1-5-21-854197151-3482271168-3196824506-1000\...\MountPoints2: {6743d096-38ca-11e4-8dbd-6c626d344700} - H:\Autorun.exe
HKU\S-1-5-21-854197151-3482271168-3196824506-1000\...\MountPoints2: {706326fe-d69d-11e3-8d1a-6c626d344700} - I:\Autorun.exe
HKU\S-1-5-21-854197151-3482271168-3196824506-1000\...\MountPoints2: {803880f7-d9ad-11e3-96bc-6c626d344700} - I:\Autorun.exe
HKU\S-1-5-21-854197151-3482271168-3196824506-1000\...\MountPoints2: {8195eb08-caf2-11e3-a8bb-6c626d344700} - H:\.\Setup.exe AUTORUN=1
HKU\S-1-5-21-854197151-3482271168-3196824506-1000\...\MountPoints2: {a9b45b9c-d504-11e3-aba8-dca9713d0937} - H:\Autorun.exe
HKU\S-1-5-21-854197151-3482271168-3196824506-1000\...\MountPoints2: {a9b45beb-d504-11e3-aba8-dca9713d0937} - I:\Autorun.exe
HKU\S-1-5-21-854197151-3482271168-3196824506-1000\...\MountPoints2: {a9b45c26-d504-11e3-aba8-dca9713d0937} - I:\Autorun.exe
HKU\S-1-5-21-854197151-3482271168-3196824506-1000\...\MountPoints2: {a9b45c3d-d504-11e3-aba8-dca9713d0937} - I:\Autorun.exe
HKU\S-1-5-21-854197151-3482271168-3196824506-1000\...\MountPoints2: {a9b45deb-d504-11e3-aba8-6c626d344700} - I:\Autorun.exe
HKU\S-1-5-21-854197151-3482271168-3196824506-1000\...\MountPoints2: {a9b45fe7-d504-11e3-aba8-6c626d344700} - I:\Autorun.exe
HKU\S-1-5-21-854197151-3482271168-3196824506-1000\...\MountPoints2: {cf7ce05f-330a-11e3-9c14-6c626d344700} - I:\KODAK_Software_Downloader.exe
HKU\S-1-5-21-854197151-3482271168-3196824506-1000\...\MountPoints2: {d1592c22-0139-11e4-aab1-dca9713d0937} - I:\Autorun.exe
HKU\S-1-5-21-854197151-3482271168-3196824506-1000\...\MountPoints2: {d5889128-97fd-11e4-8af0-6c626d344700} - H:\LG_PC_Programs.exe
HKU\S-1-5-21-854197151-3482271168-3196824506-1000\...\MountPoints2: {ee35b244-14a2-11e3-a6f4-806e6f6e6963} - H:\Autorun.exe
HKU\S-1-5-21-854197151-3482271168-3196824506-1000\...\MountPoints2: {ee35b548-14a2-11e3-a6f4-dca9713d0937} - H:\Autorun.exe
GroupPolicy: Group Policy on Chrome detected <======= ATTENTION
CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page =
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL =
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL =
HKU\S-1-5-21-854197151-3482271168-3196824506-1000\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.gooe.cz/
SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
BHO: Skype Click to Call for Internet Explorer -> {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} -> C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll [2014-07-14] (Microsoft Corporation)
C:\Program Files (x86)\Skype\Toolbars
Toolbar: HKLM - No Name - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - No File
Handler: skypec2c - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll [2014-07-14] (Microsoft Corporation)
Handler-x32: skypec2c - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll [2014-07-14] (Microsoft Corporation)
FF Plugin: @microsoft.com/GENUINE -> disabled No File
FF Plugin-x32: @microsoft.com/GENUINE -> disabled No File
CHR StartupUrls: Default -> "hxxp://www.seznam.cz/", "hxxp://www.msn.com/?pc=UP97&ocid=UP97DHP", "hxxp://search.ividi.org/?src=tbhp&id=0e9119aa0000000000006c626d344700&affilt=3", "hxxp://www.google.com/ig/redirectdomain?brand=ASUT&bmod=ASUT"
CHR HKLM-x32\...\Chrome\Extension: [lifbcibllhkdhoafpjfnlhfpfgnpldfl] - C:\Program Files (x86)\Skype\Toolbars\ChromeExtension\skype_chrome_extension.crx [2014-07-14]
R2 c2cautoupdatesvc; C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe [1390176 2014-07-14] (Microsoft Corporation)
R2 c2cpnrsvc; C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe [1767520 2014-07-14] (Microsoft Corporation)
C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
c:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-854197151-3482271168-3196824506-1000UA.job
C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-854197151-3482271168-3196824506-1000Core.job
C:\Users\Aldair\AppData\Local\Temp
End

Uložte na plochu jako fixlist.txt. Spusťte znovu FRST a klikněte na >Fix<. Po skončení akce se objeví log, který sem zkopírujte.

Doporučuji odinstalovat AdvancedSystemCare. Důvod: viewtopic.php?f=14&t=127320&hilit=iobit .

[Rudy]

Nepíšete sice, o jakou pomoc žádáte, nicméně nastala nějaká změna?

[Rudy]

Udělejte kompletní sken MBAM: http://www.malwarebytes.org/mbam.php a dejte log. Předem nic nemažte.

[Rudy]

Vše, co MBAM nalezl, smažte.

[Rudy]

Chrome zazálohujte pomocí ChromeBackup: http://www.stahuj.centrum.cz/internet_a ... me-backup/ . Pak Chrome odinstalujte vč. jeho profilu. Znovu nainstalujte a zpět ze zálohy nakopírujte pouze záložky, příp. hesla.

[Rudy]

Nemáte zač! Odvděčit? Děláme to jako relax. Jestli ale chcete, pak:

1. povězte o nás dalším, nebo

2. http://forum.viry.cz/viewtopic.php?f=7&t=78175