Odvirování PC, zrychlení počítače, vzdálená pomoc prostřednictvím služby neslape.cz

mam virusy v pc

Máte problém s virem? Vložte sem log z FRST nebo RSIT.

Moderátor: Moderátoři

Pravidla fóra
Pokud chcete pomoc, vložte log z FRST [návod zde] nebo RSIT [návod zde]

Jednotlivé thready budou po vyřešení uzamčeny. Stejně tak ty, které budou nečinné déle než 14 dní. Vizte Pravidlo o zamykání témat. Děkujeme za pochopení.

!NOVINKA!
Nově lze využívat služby vzdálené pomoci, kdy se k vašemu počítači připojí odborník a bližší informace o problému si od vás získá telefonicky! Více na www.neslape.cz
Odpovědět
Zpráva
Autor
andrej
Návštěvník
Návštěvník
Příspěvky: 6
Registrován: 12 bře 2015 10:29

mam virusy v pc

#1 Příspěvek od andrej »

mam zavírovaný pc všetko ide pomaly. prikladám log z hjt






Logfile of random's system information tool 1.10 (written by random/random)
Run by NB at 2015-03-12 10:31:48
Microsoft Windows 7 Professional Service Pack 1
System drive C: has 85 GB (28%) free of 305 GB
Total RAM: 3069 MB (52% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 10:32:02, on 12. 3. 2015
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v11.0 (11.00.9600.17689)
Boot mode: Normal

Running processes:
C:\Program Files (x86)\Spyware Clear\SpywareClearShield.exe
C:\Program Files (x86)\Spyware Clear\SpywareClearUpdate.exe
C:\Users\NB\AppData\Roaming\uTorrent\uTorrent.exe
C:\Program Files (x86)\Skype\Phone\Skype.exe
C:\Users\NB\AppData\Roaming\Seznam.cz\bin\szndesktop.exe
C:\Program Files (x86)\Safety Optimizer\SafetyOptimizer.exe
C:\Program Files (x86)\SiteRanker\SiteRankTray.exe
C:\Program Files (x86)\AppGraffiti\AppGraffiti.exe
C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
C:\Program Files\trend micro\NB.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.sk/?gws_rd=ssl
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/p/?LinkId=255141
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/p/?LinkId=255141
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
F2 - REG:system.ini: UserInit=userinit.exe
O2 - BHO: (no name) - {11BF46C6-B3DE-48BD-BF70-3AD85CAB80B5} - C:\PROGRA~2\SITERA~1\SiteRank.dll
O2 - BHO: AppGraffiti - {6F6A5334-78E9-4D9B-8182-8B41EA8C39EF} - C:\PROGRA~2\APPGRA~1\APPGRA~1.DLL
O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\PROGRA~2\MICROS~2\Office14\GROOVEEX.DLL
O2 - BHO: SkypeIEPluginBHO - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
O2 - BHO: URLRedirectionBHO - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\PROGRA~2\MICROS~2\Office14\URLREDIR.DLL
O4 - HKLM\..\Run: [BCSSync] "C:\Program Files (x86)\Microsoft Office\Office14\BCSSync.exe" /DelayServices
O4 - HKLM\..\Run: [seznam-listicka-distribuce] "C:\Program Files (x86)\Seznam.cz\distribution\szninstall.exe" -s -d listicka 1 szn-software-listicka cz.seznam.software.autoupdate
O4 - HKLM\..\Run: [SiteRanker] "C:\Program Files (x86)\SiteRanker\SiteRankTray.exe"
O4 - HKLM\..\Run: [AppGraffiti] "C:\Program Files (x86)\AppGraffiti\AppGraffiti.exe"
O4 - HKCU\..\Run: [uTorrent] "C:\Users\NB\AppData\Roaming\uTorrent\uTorrent.exe" /MINIMIZED
O4 - HKCU\..\Run: [cz.seznam.software.autoupdate] "C:\Users\NB\AppData\Roaming\Seznam.cz\szninstall.exe" -c
O4 - HKCU\..\Run: [cz.seznam.software.szndesktop] "C:\Users\NB\AppData\Roaming\Seznam.cz\bin\wszndesktop.exe" -q
O4 - HKCU\..\Run: [Skype] "C:\Program Files (x86)\Skype\Phone\Skype.exe" /minimized /regrun
O4 - HKCU\..\Run: [Viber] "C:\Users\NB\AppData\Local\Viber\Viber.exe"
O4 - HKCU\..\Run: [Facebook Update] "C:\Users\NB\AppData\Local\Facebook\Update\FacebookUpdate.exe" /c /nocrashserver
O4 - HKCU\..\Run: [AGupdate] C:\Program Files (x86)\AppGraffiti\AGupdate.exe
O4 - HKCU\..\Run: [Safety Optimizer] C:\Program Files (x86)\Safety Optimizer\SafetyOptimizer.exe /tray
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-21-1022382763-4278777700-1617752943-1003\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'UpdatusUser')
O4 - HKUS\S-1-5-21-1022382763-4278777700-1617752943-1003\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'UpdatusUser')
O8 - Extra context menu item: E&xportovať do programu Microsoft Excel - res://C:\PROGRA~2\MICROS~2\Office14\EXCEL.EXE/3000
O8 - Extra context menu item: Od&oslať do programu OneNote - res://C:\PROGRA~2\MICROS~2\Office14\ONBttnIE.dll/105
O9 - Extra button: Odoslať do programu OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: Od&oslať do programu OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIE.dll
O9 - Extra button: &Prepojené poznámky programu OneNote - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIELinkedNotes.dll
O9 - Extra 'Tools' menuitem: &Prepojené poznámky programu OneNote - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIELinkedNotes.dll
O9 - Extra button: Skype Click to Call settings - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O18 - Protocol: skypec2c - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
O18 - Filter hijack: text/xml - {807573E5-5146-11D5-A672-00B0D022E945} - C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\MSOXMLMF.DLL
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: Andrea ST Filters Service (AESTFilters) - Andrea Electronics Corporation - C:\Windows\System32\DriverStore\FileRepository\stwrt64.inf_amd64_neutral_960c1f056a541068\AESTSr64.exe
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)
O23 - Service: Služba Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Služba Google Update (gupdatem) (gupdatem) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Google Software Updater (gusvc) - Google - C:\Program Files (x86)\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: HP Service (hpsrv) - Unknown owner - C:\Windows\system32\Hpservice.exe (file missing)
O23 - Service: @%SystemRoot%\system32\ieetwcollectorres.dll,-1000 (IEEtwCollectorService) - Unknown owner - C:\Windows\system32\IEEtwCollector.exe (file missing)
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: NVIDIA Display Driver Service (nvsvc) - Unknown owner - C:\Windows\system32\nvvsvc.exe (file missing)
O23 - Service: NVIDIA Update Service Daemon (nvUpdatusService) - NVIDIA Corporation - C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Spyware Clear Realtime Shield Service (SC_Svc) - Crawler Group - C:\Program Files (x86)\Spyware Clear\SC_svc64.exe
O23 - Service: Skype Updater (SkypeUpdate) - Skype Technologies - C:\Program Files (x86)\Skype\Updater\Updater.exe
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)
O23 - Service: SInstalátor (ssinstall) - PS Media s.r.o. - C:\Windows\SysWOW64\ssins.exe
O23 - Service: Audio Service (STacSV) - IDT, Inc. - C:\Windows\System32\DriverStore\FileRepository\stwrt64.inf_amd64_neutral_960c1f056a541068\STacSV64.exe
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\Wat\WatUX.exe,-601 (WatAdminSvc) - Unknown owner - C:\Windows\system32\Wat\WatAdminSvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)

--
End of file - 10345 bytes

======Listing Processes======



\SystemRoot\System32\smss.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
wininit.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
C:\Windows\system32\services.exe
C:\Windows\system32\lsass.exe
C:\Windows\system32\lsm.exe
winlogon.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
"C:\Windows\system32\nvvsvc.exe"
C:\Windows\system32\svchost.exe -k RPCSS
"C:\Program Files\Microsoft Security Client\MsMpEng.exe"
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k LocalService
C:\Windows\system32\svchost.exe -k netsvcs
C:\Windows\system32\Hpservice.exe
"C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe"
C:\Windows\system32\nvvsvc.exe -session -first
C:\Windows\system32\svchost.exe -k NetworkService
C:\Windows\System32\spoolsv.exe
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
C:\Windows\Explorer.EXE
"C:\Windows\system32\Dwm.exe"
"taskhost.exe"
"C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe"
C:\Windows\System32\DriverStore\FileRepository\stwrt64.inf_amd64_neutral_960c1f056a541068\AESTSr64.exe
"C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe" /service
"C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe" /service
C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
"C:\Program Files (x86)\Spyware Clear\SC_svc64.exe"
"C:\Program Files (x86)\Google\Update\1.3.26.9\GoogleCrashHandler.exe"
C:\Windows\SysWOW64\ssins.exe
C:\Windows\system32\svchost.exe -k imgsvc
"C:/Program Files/NVIDIA Corporation/Display/nvtray.exe" -user_has_logged_in 1
"C:\Program Files (x86)\Spyware Clear\SpywareClearShield.exe"
"C:\Program Files\Microsoft Security Client\NisSrv.exe"
"C:\Program Files (x86)\Google\Update\1.3.26.9\GoogleCrashHandler64.exe"
C:\Windows\system32\SearchIndexer.exe /Embedding
"C:\Program Files (x86)\Spyware Clear\SpywareClearUpdate.exe"
"C:\Program Files\Microsoft Security Client\msseces.exe" -hide -runkey
"C:\Users\NB\AppData\Roaming\uTorrent\uTorrent.exe" /MINIMIZED
"C:\Program Files (x86)\Skype\Phone\Skype.exe" /minimized /regrun
szndesktop.exe default start
"C:\Users\NB\AppData\Roaming\Seznam.cz\bin\listicka-x64.exe"
\??\C:\Windows\system32\conhost.exe "-13161262663713719316904482481682475219714283835-1385579005-182567160361308559
"C:\Program Files (x86)\Safety Optimizer\SafetyOptimizer.exe" /tray
"C:\Program Files (x86)\SiteRanker\SiteRankTray.exe"
"C:\Program Files (x86)\AppGraffiti\AppGraffiti.exe"
"C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe"
"C:\Windows\system32\SearchProtocolHost.exe" Global\UsGthrFltPipeMssGthrPipe2_ Global\UsGthrCtrlFltPipeMssGthrPipe2 1 -2147483646 "Software\Microsoft\Windows Search" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT; MS Search 4.0 Robot)" "C:\ProgramData\Microsoft\Search\Data\Temp\usgthrsvc" "DownLevelDaemon"
"C:\Program Files\Internet Explorer\iexplore.exe"
"C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:3280 CREDAT:275457 /prefetch:2

"C:\Users\NB\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\AGZQVF0T\RSITx64.exe"
C:\Windows\system32\wbem\wmiprvse.exe
"C:\Windows\system32\SearchFilterHost.exe" 0 512 516 524 65536 520

======Scheduled tasks folder======

C:\Windows\tasks\Adobe Flash Player Updater.job - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
C:\Windows\tasks\FacebookUpdateTaskUserS-1-5-21-1022382763-4278777700-1617752943-1001Core.job - C:\Users\NB\AppData\Local\Facebook\Update\FacebookUpdate.exe /c /nocrashserver
C:\Windows\tasks\FacebookUpdateTaskUserS-1-5-21-1022382763-4278777700-1617752943-1001UA.job - C:\Users\NB\AppData\Local\Facebook\Update\FacebookUpdate.exe /ua /installsource scheduler
C:\Windows\tasks\GoogleUpdateTaskMachineCore.job - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe /c
C:\Windows\tasks\GoogleUpdateTaskMachineUA.job - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe /ua /installsource scheduler

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{11BF46C6-B3DE-48BD-BF70-3AD85CAB80B5}]
C:\PROGRA~2\SITERA~1\SiteR64.dll [2014-09-19 6463376]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{6F6A5334-78E9-4D9B-8182-8B41EA8C39EF}]
AppGraffiti - C:\PROGRA~2\APPGRA~1\APPGRA~2.DLL [2014-07-09 1627072]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{72853161-30C5-4D22-B7F9-0BBC1D38A37E}]
Groove GFS Browser Helper - C:\PROGRA~1\MICROS~2\Office14\GROOVEEX.DLL [2013-12-18 6671064]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{B4F3A835-0E21-4959-BA22-42B3008E02FF}]
Office Document Cache Handler - C:\PROGRA~1\MICROS~2\Office14\URLREDIR.DLL [2013-03-06 690392]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{11BF46C6-B3DE-48BD-BF70-3AD85CAB80B5}]
C:\PROGRA~2\SITERA~1\SiteRank.dll [2014-09-19 1216472]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{6F6A5334-78E9-4D9B-8182-8B41EA8C39EF}]
AppGraffiti - C:\PROGRA~2\APPGRA~1\APPGRA~1.DLL [2014-07-09 1014208]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{72853161-30C5-4D22-B7F9-0BBC1D38A37E}]
Groove GFS Browser Helper - C:\PROGRA~2\MICROS~2\Office14\GROOVEEX.DLL [2013-12-18 4171480]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}]
Skype Click to Call for Internet Explorer - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll [2014-07-14 1709152]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{B4F3A835-0E21-4959-BA22-42B3008E02FF}]
Office Document Cache Handler - C:\PROGRA~2\MICROS~2\Office14\URLREDIR.DLL [2013-03-06 562904]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"SysTrayApp"=C:\Program Files\IDT\WDM\sttray64.exe [2010-03-23 487424]
"SpywareClearShield"=C:\Program Files (x86)\Spyware Clear\SpywareClearShield.exe [2015-01-20 3742528]
"SpywareClearUpdater"=C:\Program Files (x86)\Spyware Clear\SpywareClearUpdate.exe [2015-01-20 5412672]
"MSC"=C:\Program Files\Microsoft Security Client\msseces.exe [2015-01-30 1332296]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"uTorrent"=C:\Users\NB\AppData\Roaming\uTorrent\uTorrent.exe [2015-03-04 1742928]
"cz.seznam.software.autoupdate"=C:\Users\NB\AppData\Roaming\Seznam.cz\szninstall.exe [2013-05-16 1062472]
"cz.seznam.software.szndesktop"=C:\Users\NB\AppData\Roaming\Seznam.cz\bin\wszndesktop.exe [2013-04-12 92664]
"Skype"=C:\Program Files (x86)\Skype\Phone\Skype.exe [2015-01-23 31087200]
"Viber"=C:\Users\NB\AppData\Local\Viber\Viber.exe []
"Facebook Update"=C:\Users\NB\AppData\Local\Facebook\Update\FacebookUpdate.exe [2014-11-12 138096]
"AGupdate"=C:\Program Files (x86)\AppGraffiti\AGupdate.exe [2013-03-19 894048]
"Safety Optimizer"=C:\Program Files (x86)\Safety Optimizer\SafetyOptimizer.exe [2014-10-07 2426736]

[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]
"BCSSync"=C:\Program Files (x86)\Microsoft Office\Office14\BCSSync.exe [2012-11-05 89184]
"seznam-listicka-distribuce"=C:\Program Files (x86)\Seznam.cz\distribution\szninstall.exe [2013-05-16 1062472]
"SiteRanker"=C:\Program Files (x86)\SiteRanker\SiteRankTray.exe [2014-09-19 1084888]
"AppGraffiti"=C:\Program Files (x86)\AppGraffiti\AppGraffiti.exe [2014-07-09 1220544]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{B5A7F190-DDA6-4420-B3BA-52453494E6CD}"=C:\PROGRA~1\MICROS~2\Office14\GROOVEEX.DLL [2013-12-18 6671064]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{B5A7F190-DDA6-4420-B3BA-52453494E6CD}"=C:\PROGRA~2\MICROS~2\Office14\GROOVEEX.DLL [2013-12-18 4171480]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=credssp.dll

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MsMpSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\MsMpSvc]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorAdmin"=0
"ConsentPromptBehaviorUser"=3
"EnableLUA"=0
"EnableUIADesktopToggle"=0
"PromptOnSecureDesktop"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=145

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoActiveDesktop"=1
"NoActiveDesktopChanges"=1
"ForceActiveDesktopOn"=0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.msadpcm"=msadp32.acm
"midimapper"=midimap.dll
"wavemapper"=msacm32.drv
"VIDC.UYVY"=msyuv.dll
"VIDC.YUY2"=msyuv.dll
"VIDC.YVYU"=msyuv.dll
"VIDC.IYUV"=iyuv_32.dll
"vidc.i420"=iyuv_32.dll
"VIDC.YVU9"=tsbyuv.dll
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"MSVideo8"=VfWWDM32.dll
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"aux"=wdmaud.drv

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*

======List of files/folders created in the last 1 month======

2015-03-12 10:31:48 ----D---- C:\rsit
2015-03-12 10:31:48 ----D---- C:\Program Files\trend micro
2015-03-11 09:44:17 ----A---- C:\Windows\SYSWOW64\atmfd.dll
2015-03-11 09:44:17 ----A---- C:\Windows\system32\lpk.dll
2015-03-11 09:44:17 ----A---- C:\Windows\system32\atmlib.dll
2015-03-11 09:44:17 ----A---- C:\Windows\system32\atmfd.dll
2015-03-11 09:44:16 ----A---- C:\Windows\SYSWOW64\dciman32.dll
2015-03-11 09:44:16 ----A---- C:\Windows\SYSWOW64\atmlib.dll
2015-03-11 09:44:16 ----A---- C:\Windows\system32\fontsub.dll
2015-03-11 09:44:16 ----A---- C:\Windows\system32\dciman32.dll
2015-03-11 09:44:15 ----A---- C:\Windows\SYSWOW64\lpk.dll
2015-03-11 09:44:15 ----A---- C:\Windows\SYSWOW64\fontsub.dll
2015-03-11 09:44:01 ----A---- C:\Windows\system32\blackbox.dll
2015-03-11 09:44:00 ----A---- C:\Windows\SYSWOW64\blackbox.dll
2015-03-11 09:44:00 ----A---- C:\Windows\system32\drmv2clt.dll
2015-03-11 09:43:59 ----A---- C:\Windows\SYSWOW64\drmv2clt.dll
2015-03-11 09:43:57 ----A---- C:\Windows\system32\wmp.dll
2015-03-11 09:43:55 ----A---- C:\Windows\SYSWOW64\wmdrmsdk.dll
2015-03-11 09:43:55 ----A---- C:\Windows\SYSWOW64\mf.dll
2015-03-11 09:43:55 ----A---- C:\Windows\system32\wmdrmsdk.dll
2015-03-11 09:43:55 ----A---- C:\Windows\system32\ntoskrnl.exe
2015-03-11 09:43:54 ----A---- C:\Windows\SYSWOW64\wmp.dll
2015-03-11 09:43:51 ----A---- C:\Windows\system32\drmmgrtn.dll
2015-03-11 09:43:51 ----A---- C:\Windows\system32\crypt32.dll
2015-03-11 09:43:50 ----A---- C:\Windows\SYSWOW64\drmmgrtn.dll
2015-03-11 09:43:50 ----A---- C:\Windows\system32\drivers\PEAuth.sys
2015-03-11 09:43:49 ----A---- C:\Windows\SYSWOW64\crypt32.dll
2015-03-11 09:43:49 ----A---- C:\Windows\system32\quartz.dll
2015-03-11 09:43:48 ----A---- C:\Windows\system32\evr.dll
2015-03-11 09:43:47 ----A---- C:\Windows\SYSWOW64\ntoskrnl.exe
2015-03-11 09:43:47 ----A---- C:\Windows\SYSWOW64\ntkrnlpa.exe
2015-03-11 09:43:46 ----A---- C:\Windows\system32\cryptui.dll
2015-03-11 09:43:45 ----A---- C:\Windows\SYSWOW64\evr.dll
2015-03-11 09:43:45 ----A---- C:\Windows\system32\mfplat.dll
2015-03-11 09:43:44 ----A---- C:\Windows\SYSWOW64\quartz.dll
2015-03-11 09:43:44 ----A---- C:\Windows\SYSWOW64\cryptui.dll
2015-03-11 09:43:44 ----A---- C:\Windows\system32\winresume.exe
2015-03-11 09:43:44 ----A---- C:\Windows\system32\pcasvc.dll
2015-03-11 09:43:43 ----A---- C:\Windows\SYSWOW64\mfplat.dll
2015-03-11 09:43:43 ----A---- C:\Windows\SYSWOW64\cryptsp.dll
2015-03-11 09:43:43 ----A---- C:\Windows\system32\drivers\mountmgr.sys
2015-03-11 09:43:43 ----A---- C:\Windows\system32\cryptsp.dll
2015-03-11 09:43:42 ----A---- C:\Windows\system32\msscp.dll
2015-03-11 09:43:42 ----A---- C:\Windows\system32\mf.dll
2015-03-11 09:43:41 ----A---- C:\Windows\system32\winload.exe
2015-03-11 09:43:39 ----A---- C:\Windows\system32\msnetobj.dll
2015-03-11 09:43:38 ----A---- C:\Windows\SYSWOW64\qdvd.dll
2015-03-11 09:43:38 ----A---- C:\Windows\system32\appidsvc.dll
2015-03-11 09:43:37 ----A---- C:\Windows\SYSWOW64\msscp.dll
2015-03-11 09:43:37 ----A---- C:\Windows\system32\cryptnet.dll
2015-03-11 09:43:37 ----A---- C:\Windows\system32\ci.dll
2015-03-11 09:43:37 ----A---- C:\Windows\system32\audiosrv.dll
2015-03-11 09:43:36 ----A---- C:\Windows\SYSWOW64\wintrust.dll
2015-03-11 09:43:36 ----A---- C:\Windows\system32\wintrust.dll
2015-03-11 09:43:36 ----A---- C:\Windows\system32\srcore.dll
2015-03-11 09:43:35 ----A---- C:\Windows\SYSWOW64\cryptnet.dll
2015-03-11 09:43:35 ----A---- C:\Windows\system32\rstrui.exe
2015-03-11 09:43:35 ----A---- C:\Windows\system32\drivers\appid.sys
2015-03-11 09:43:35 ----A---- C:\Windows\system32\audiodg.exe
2015-03-11 09:43:34 ----A---- C:\Windows\SYSWOW64\cryptsvc.dll
2015-03-11 09:43:34 ----A---- C:\Windows\system32\AUDIOKSE.dll
2015-03-11 09:43:33 ----A---- C:\Windows\SYSWOW64\msnetobj.dll
2015-03-11 09:43:33 ----A---- C:\Windows\system32\qdvd.dll
2015-03-11 09:43:33 ----A---- C:\Windows\system32\AudioSes.dll
2015-03-11 09:43:32 ----A---- C:\Windows\system32\cryptsvc.dll
2015-03-11 09:43:30 ----A---- C:\Windows\SYSWOW64\AudioEng.dll
2015-03-11 09:43:30 ----A---- C:\Windows\system32\pcadm.dll
2015-03-11 09:43:30 ----A---- C:\Windows\system32\AudioEng.dll
2015-03-11 09:43:29 ----A---- C:\Windows\system32\rrinstaller.exe
2015-03-11 09:43:28 ----A---- C:\Windows\SYSWOW64\rrinstaller.exe
2015-03-11 09:43:28 ----A---- C:\Windows\SYSWOW64\AUDIOKSE.dll
2015-03-11 09:43:28 ----A---- C:\Windows\system32\appidpolicyconverter.exe
2015-03-11 09:43:27 ----A---- C:\Windows\system32\smss.exe
2015-03-11 09:43:27 ----A---- C:\Windows\system32\mfps.dll
2015-03-11 09:43:26 ----A---- C:\Windows\SYSWOW64\mfps.dll
2015-03-11 09:43:26 ----A---- C:\Windows\SYSWOW64\appidapi.dll
2015-03-11 09:43:26 ----A---- C:\Windows\system32\pcawrk.exe
2015-03-11 09:43:26 ----A---- C:\Windows\system32\msmmsp.dll
2015-03-11 09:43:26 ----A---- C:\Windows\system32\appidapi.dll
2015-03-11 09:43:25 ----A---- C:\Windows\SYSWOW64\mfpmp.exe
2015-03-11 09:43:25 ----A---- C:\Windows\SYSWOW64\AudioSes.dll
2015-03-11 09:43:25 ----A---- C:\Windows\system32\srclient.dll
2015-03-11 09:43:25 ----A---- C:\Windows\system32\setbcdlocale.dll
2015-03-11 09:43:25 ----A---- C:\Windows\system32\pcalua.exe
2015-03-11 09:43:25 ----A---- C:\Windows\system32\mfpmp.exe
2015-03-11 09:43:25 ----A---- C:\Windows\system32\EncDump.dll
2015-03-11 09:43:24 ----A---- C:\Windows\SYSWOW64\srclient.dll
2015-03-11 09:43:24 ----A---- C:\Windows\system32\csrsrv.dll
2015-03-11 09:43:24 ----A---- C:\Windows\system32\appidcertstorecheck.exe
2015-03-11 09:43:21 ----A---- C:\Windows\SYSWOW64\spwmp.dll
2015-03-11 09:43:21 ----A---- C:\Windows\SYSWOW64\dxmasf.dll
2015-03-11 09:43:21 ----A---- C:\Windows\system32\spwmp.dll
2015-03-11 09:43:21 ----A---- C:\Windows\system32\dxmasf.dll
2015-03-11 09:43:20 ----A---- C:\Windows\SYSWOW64\apisetschema.dll
2015-03-11 09:43:20 ----A---- C:\Windows\system32\pcaevts.dll
2015-03-11 09:43:20 ----A---- C:\Windows\system32\apisetschema.dll
2015-03-11 09:43:19 ----A---- C:\Windows\SYSWOW64\wmploc.DLL
2015-03-11 09:43:19 ----A---- C:\Windows\system32\wmploc.DLL
2015-03-11 09:43:17 ----A---- C:\Windows\SYSWOW64\mferror.dll
2015-03-11 09:43:17 ----A---- C:\Windows\system32\mferror.dll
2015-03-11 09:39:35 ----A---- C:\Windows\SYSWOW64\ubpm.dll
2015-03-11 09:39:35 ----A---- C:\Windows\system32\ubpm.dll
2015-03-11 09:39:29 ----A---- C:\Windows\SYSWOW64\shell32.dll
2015-03-11 09:39:29 ----A---- C:\Windows\system32\shell32.dll
2015-03-11 09:39:22 ----A---- C:\Windows\SYSWOW64\schannel.dll
2015-03-11 09:39:22 ----A---- C:\Windows\system32\schannel.dll
2015-03-11 09:39:22 ----A---- C:\Windows\system32\lsasrv.dll
2015-03-11 09:39:22 ----A---- C:\Windows\system32\drivers\ksecpkg.sys
2015-03-11 09:39:22 ----A---- C:\Windows\system32\drivers\ksecdd.sys
2015-03-11 09:39:22 ----A---- C:\Windows\system32\drivers\cng.sys
2015-03-11 09:39:21 ----A---- C:\Windows\SYSWOW64\msv1_0.dll
2015-03-11 09:39:21 ----A---- C:\Windows\SYSWOW64\kerberos.dll
2015-03-11 09:39:21 ----A---- C:\Windows\system32\kerberos.dll
2015-03-11 09:39:20 ----A---- C:\Windows\SYSWOW64\ncrypt.dll
2015-03-11 09:39:20 ----A---- C:\Windows\system32\wdigest.dll
2015-03-11 09:39:20 ----A---- C:\Windows\system32\TSpkg.dll
2015-03-11 09:39:20 ----A---- C:\Windows\system32\ncrypt.dll
2015-03-11 09:39:20 ----A---- C:\Windows\system32\msv1_0.dll
2015-03-11 09:39:19 ----A---- C:\Windows\SYSWOW64\wdigest.dll
2015-03-11 09:39:19 ----A---- C:\Windows\SYSWOW64\TSpkg.dll
2015-03-11 09:39:19 ----A---- C:\Windows\SYSWOW64\auditpol.exe
2015-03-11 09:39:19 ----A---- C:\Windows\system32\sspisrv.dll
2015-03-11 09:39:19 ----A---- C:\Windows\system32\sspicli.dll
2015-03-11 09:39:19 ----A---- C:\Windows\system32\lsass.exe
2015-03-11 09:39:19 ----A---- C:\Windows\system32\credssp.dll
2015-03-11 09:39:19 ----A---- C:\Windows\system32\auditpol.exe
2015-03-11 09:39:18 ----A---- C:\Windows\SYSWOW64\sspicli.dll
2015-03-11 09:39:18 ----A---- C:\Windows\SYSWOW64\secur32.dll
2015-03-11 09:39:18 ----A---- C:\Windows\SYSWOW64\credssp.dll
2015-03-11 09:39:18 ----A---- C:\Windows\system32\secur32.dll
2015-03-11 09:39:17 ----A---- C:\Windows\SYSWOW64\msobjs.dll
2015-03-11 09:39:17 ----A---- C:\Windows\SYSWOW64\msaudite.dll
2015-03-11 09:39:17 ----A---- C:\Windows\SYSWOW64\adtschema.dll
2015-03-11 09:39:17 ----A---- C:\Windows\system32\msobjs.dll
2015-03-11 09:39:17 ----A---- C:\Windows\system32\msaudite.dll
2015-03-11 09:39:17 ----A---- C:\Windows\system32\adtschema.dll
2015-03-11 09:37:50 ----A---- C:\Windows\SYSWOW64\msctf.dll
2015-03-11 09:37:50 ----A---- C:\Windows\system32\msctf.dll
2015-03-11 09:37:46 ----A---- C:\Windows\SYSWOW64\WindowsCodecs.dll
2015-03-11 09:37:46 ----A---- C:\Windows\system32\WindowsCodecs.dll
2015-03-11 09:37:38 ----A---- C:\Windows\system32\win32k.sys
2015-03-11 09:37:33 ----A---- C:\Windows\SYSWOW64\ieetwproxystub.dll
2015-03-11 09:37:31 ----A---- C:\Windows\SYSWOW64\mshtmled.dll
2015-03-11 09:37:31 ----A---- C:\Windows\SYSWOW64\iernonce.dll
2015-03-11 09:37:31 ----A---- C:\Windows\system32\ieetwproxystub.dll
2015-03-11 09:37:31 ----A---- C:\Windows\system32\ieetwcollector.exe
2015-03-11 09:37:30 ----A---- C:\Windows\SYSWOW64\MshtmlDac.dll
2015-03-11 09:37:29 ----A---- C:\Windows\SYSWOW64\urlmon.dll
2015-03-11 09:37:29 ----A---- C:\Windows\SYSWOW64\msfeeds.dll
2015-03-11 09:37:29 ----A---- C:\Windows\SYSWOW64\JavaScriptCollectionAgent.dll
2015-03-11 09:37:29 ----A---- C:\Windows\SYSWOW64\iedkcs32.dll
2015-03-11 09:37:29 ----A---- C:\Windows\SYSWOW64\dxtrans.dll
2015-03-11 09:37:29 ----A---- C:\Windows\system32\JavaScriptCollectionAgent.dll
2015-03-11 09:37:29 ----A---- C:\Windows\system32\iernonce.dll
2015-03-11 09:37:29 ----A---- C:\Windows\system32\ie4uinit.exe
2015-03-11 09:37:28 ----A---- C:\Windows\SYSWOW64\mshtml.dll
2015-03-11 09:37:27 ----A---- C:\Windows\SYSWOW64\iesetup.dll
2015-03-11 09:37:26 ----A---- C:\Windows\SYSWOW64\ieapfltr.dll
2015-03-11 09:37:25 ----A---- C:\Windows\system32\iedkcs32.dll
2015-03-11 09:37:24 ----A---- C:\Windows\SYSWOW64\jsproxy.dll
2015-03-11 09:37:24 ----A---- C:\Windows\SYSWOW64\jscript9diag.dll
2015-03-11 09:37:24 ----A---- C:\Windows\SYSWOW64\iertutil.dll
2015-03-11 09:37:24 ----A---- C:\Windows\system32\urlmon.dll
2015-03-11 09:37:24 ----A---- C:\Windows\system32\ieetwcollectorres.dll
2015-03-11 09:37:23 ----A---- C:\Windows\SYSWOW64\ieUnatt.exe
2015-03-11 09:37:23 ----A---- C:\Windows\SYSWOW64\ieui.dll
2015-03-11 09:37:23 ----A---- C:\Windows\SYSWOW64\dxtmsft.dll
2015-03-11 09:37:23 ----A---- C:\Windows\system32\MsSpellCheckingFacility.exe
2015-03-11 09:37:23 ----A---- C:\Windows\system32\msfeeds.dll
2015-03-11 09:37:23 ----A---- C:\Windows\system32\dxtrans.dll
2015-03-11 09:37:22 ----A---- C:\Windows\SYSWOW64\ieframe.dll
2015-03-11 09:37:22 ----A---- C:\Windows\system32\iesetup.dll
2015-03-11 09:37:21 ----A---- C:\Windows\system32\ieapfltr.dll
2015-03-11 09:37:20 ----A---- C:\Windows\system32\iertutil.dll
2015-03-11 09:37:19 ----A---- C:\Windows\SYSWOW64\mshtmlmedia.dll
2015-03-11 09:37:19 ----A---- C:\Windows\SYSWOW64\jscript9.dll
2015-03-11 09:37:18 ----A---- C:\Windows\SYSWOW64\wininet.dll
2015-03-11 09:37:18 ----A---- C:\Windows\SYSWOW64\vbscript.dll
2015-03-11 09:37:18 ----A---- C:\Windows\system32\jsproxy.dll
2015-03-11 09:37:18 ----A---- C:\Windows\system32\ieUnatt.exe
2015-03-11 09:37:17 ----A---- C:\Windows\SYSWOW64\msrating.dll
2015-03-11 09:37:17 ----A---- C:\Windows\system32\dxtmsft.dll
2015-03-11 09:37:16 ----A---- C:\Windows\system32\ieui.dll
2015-03-11 09:37:16 ----A---- C:\Windows\system32\ieframe.dll
2015-03-11 09:37:15 ----A---- C:\Windows\system32\mshtmlmedia.dll
2015-03-11 09:37:15 ----A---- C:\Windows\system32\mshtmled.dll
2015-03-11 09:37:15 ----A---- C:\Windows\system32\jscript9diag.dll
2015-03-11 09:37:15 ----A---- C:\Windows\system32\jscript9.dll
2015-03-11 09:37:14 ----A---- C:\Windows\system32\vbscript.dll
2015-03-11 09:37:13 ----A---- C:\Windows\system32\wininet.dll
2015-03-11 09:37:12 ----A---- C:\Windows\system32\MshtmlDac.dll
2015-03-11 09:37:11 ----A---- C:\Windows\system32\msrating.dll
2015-03-11 09:37:09 ----A---- C:\Windows\system32\mshtml.dll
2015-03-11 09:35:18 ----A---- C:\Windows\system32\WMPhoto.dll
2015-03-11 09:35:17 ----A---- C:\Windows\SYSWOW64\WMPhoto.dll
2015-03-06 20:59:07 ----A---- C:\Windows\system32\wdi.dll
2015-03-06 20:59:07 ----A---- C:\Windows\system32\powertracker.dll
2015-03-06 20:59:07 ----A---- C:\Windows\system32\perftrack.dll
2015-03-06 20:59:06 ----A---- C:\Windows\SYSWOW64\wdi.dll
2015-03-01 12:24:02 ----D---- C:\Users\NB\AppData\Roaming\vlc
2015-03-01 12:22:43 ----D---- C:\Program Files (x86)\VideoLAN
2015-02-17 15:26:28 ----A---- C:\Windows\SYSWOW64\FM20.DLL

======List of files/folders modified in the last 1 month======

2015-03-12 10:31:57 ----D---- C:\Windows\Temp
2015-03-12 10:31:52 ----D---- C:\Users\NB\AppData\Roaming\uTorrent
2015-03-12 10:31:48 ----RD---- C:\Program Files
2015-03-12 10:30:36 ----D---- C:\Windows\tracing
2015-03-12 10:27:41 ----D---- C:\Users\NB\AppData\Roaming\Seznam.cz
2015-03-12 10:24:03 ----D---- C:\Users\NB\AppData\Roaming\Skype
2015-03-12 10:22:37 ----D---- C:\ProgramData\Spyware Clear
2015-03-12 09:54:21 ----SHD---- C:\Boot
2015-03-12 09:54:21 ----D---- C:\Windows\winsxs
2015-03-12 09:53:39 ----D---- C:\Windows\system32\config
2015-03-12 09:50:22 ----D---- C:\Windows\SysWOW64
2015-03-12 09:50:22 ----D---- C:\Windows\System32
2015-03-12 09:50:21 ----D---- C:\Windows\SYSWOW64\sk-SK
2015-03-12 09:50:21 ----D---- C:\Windows\SYSWOW64\Dism
2015-03-12 09:50:21 ----D---- C:\Program Files\Windows Media Player
2015-03-12 09:50:21 ----D---- C:\Program Files (x86)\Windows Media Player
2015-03-12 09:50:20 ----D---- C:\Windows\system32\drivers
2015-03-12 09:50:19 ----D---- C:\Windows\system32\sk-SK
2015-03-12 09:50:19 ----D---- C:\Windows\system32\en-US
2015-03-12 09:50:19 ----D---- C:\Windows\system32\Dism
2015-03-12 09:50:19 ----D---- C:\Windows\system32\CodeIntegrity
2015-03-12 09:50:19 ----D---- C:\Windows\system32\Boot
2015-03-12 09:50:17 ----D---- C:\Windows\SYSWOW64\en-US
2015-03-12 09:50:15 ----D---- C:\Program Files\Internet Explorer
2015-03-12 09:50:11 ----D---- C:\Program Files (x86)\Internet Explorer
2015-03-12 09:22:59 ----SHD---- C:\Windows\Installer
2015-03-12 09:22:01 ----D---- C:\Program Files (x86)\Google
2015-03-12 09:21:07 ----SHD---- C:\System Volume Information
2015-03-12 09:16:59 ----D---- C:\ProgramData\Microsoft Help
2015-03-12 09:16:28 ----A---- C:\Windows\win.ini
2015-03-12 09:13:06 ----RD---- C:\Program Files (x86)
2015-03-12 08:44:26 ----D---- C:\Windows\system32\MRT
2015-03-12 08:44:20 ----A---- C:\Windows\system32\MRT.exe
2015-03-12 08:38:42 ----D---- C:\Windows\Prefetch
2015-03-11 19:32:53 ----D---- C:\Program Files (x86)\SiteRanker
2015-03-11 14:15:32 ----A---- C:\Windows\system32\PerfStringBackup.INI
2015-03-11 14:15:31 ----D---- C:\Windows\inf
2015-03-11 09:32:18 ----D---- C:\Windows\system32\catroot2
2015-03-10 20:22:06 ----D---- C:\Windows\system32\NDF
2015-03-06 20:48:57 ----D---- C:\Windows\Tasks
2015-03-06 20:48:57 ----D---- C:\Windows\system32\wfp
2015-03-06 20:48:57 ----D---- C:\Windows\system32\Tasks
2015-03-06 20:48:57 ----D---- C:\Windows\system32\DriverStore
2015-03-06 20:48:57 ----D---- C:\Windows
2015-03-06 20:48:33 ----D---- C:\Windows\system32\wbem
2015-03-06 20:48:33 ----D---- C:\Windows\registration
2015-03-03 14:17:35 ----N---- C:\Windows\system32\MpSigStub.exe
2015-02-20 12:52:22 ----RD---- C:\Program Files (x86)\Skype
2015-02-20 12:52:11 ----D---- C:\ProgramData\Skype
2015-02-17 12:31:43 ----D---- C:\Windows\rescache
2015-02-14 03:37:24 ----SD---- C:\Windows\system32\CompatTel
2015-02-14 03:37:24 ----D---- C:\Windows\system32\appraiser
2015-02-13 08:16:15 ----D---- C:\Windows\Microsoft.NET
2015-02-13 08:12:53 ----RSD---- C:\Windows\assembly
2015-02-13 07:57:20 ----D---- C:\Windows\system32\catroot
2015-02-13 07:50:18 ----D---- C:\Program Files\Common Files\Microsoft Shared
2015-02-13 07:48:36 ----D---- C:\Program Files\Microsoft Security Client
2015-02-13 07:48:34 ----D---- C:\Program Files (x86)\Microsoft Security Client

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 hpdskflt;HP Filter; C:\Windows\system32\DRIVERS\hpdskflt.sys [2011-05-13 30008]
R0 MpFilter;Microsoft Malware Protection Driver; C:\Windows\system32\DRIVERS\MpFilter.sys [2014-11-15 274696]
R0 rdyboost;ReadyBoost; C:\Windows\System32\drivers\rdyboost.sys [2010-11-21 213888]
R1 CSC;@%systemroot%\system32\cscsvc.dll,-202; C:\Windows\system32\drivers\csc.sys [2010-11-21 514560]
R1 vwififlt;Virtual WiFi Filter Driver; C:\Windows\system32\DRIVERS\vwififlt.sys [2009-07-14 59904]
R2 NisDrv;Microsoft Network Inspection System; C:\Windows\system32\DRIVERS\NisDrvWFP.sys [2014-11-15 124560]
R2 sp_rsdrv2;Spyware Terminator Driver Filter; C:\Windows\system32\DRIVERS\stflt.sys [2011-08-24 51496]
R3 Accelerometer;HP Mobile Data Protection Sensor; C:\Windows\system32\DRIVERS\Accelerometer.sys [2011-05-13 43320]
R3 JMCR;JMCR; C:\Windows\system32\DRIVERS\jmcr.sys [2008-08-07 143360]
R3 NETw5s64;Intel(R) Wireless WiFi Link 5000 Series Adapter Driver for Windows 7 - 64 Bit; C:\Windows\system32\DRIVERS\NETw5s64.sys [2010-01-13 7675392]
R3 NVHDA;Service for NVIDIA High Definition Audio Driver; C:\Windows\system32\drivers\nvhda64v.sys [2008-08-06 56352]
R3 RTL8167;Realtek 8167 NT Driver; C:\Windows\system32\DRIVERS\Rt64win7.sys [2009-06-10 187392]
R3 vwifimp;Microsoft Virtual WiFi Miniport Service; C:\Windows\system32\DRIVERS\vwifimp.sys [2009-07-14 17920]
S3 dmvsc;dmvsc; C:\Windows\system32\drivers\dmvsc.sys [2010-11-21 71168]
S3 netw5v64;Intel(R) Wireless WiFi Link 5000 Series Adapter Driver for Windows Vista 64 Bit; C:\Windows\system32\DRIVERS\netw5v64.sys [2009-06-10 5434368]
S3 pciide;pciide; C:\Windows\system32\drivers\pciide.sys [2009-07-14 12352]
S3 RDPDR;Terminal Server Device Redirector Driver; C:\Windows\System32\drivers\rdpdr.sys [2010-11-21 165888]
S3 s3cap;s3cap; C:\Windows\system32\drivers\vms3cap.sys [2010-11-21 6656]
S3 sdbus;sdbus; C:\Windows\system32\DRIVERS\sdbus.sys [2010-11-21 109056]
S3 STHDA;IDT High Definition Audio CODEC; C:\Windows\system32\DRIVERS\stwrt64.sys [2010-03-23 505344]
S3 storvsc;storvsc; C:\Windows\system32\drivers\storvsc.sys [2010-11-21 34688]
S3 TsUsbFlt;TsUsbFlt; C:\Windows\system32\drivers\tsusbflt.sys [2010-11-21 59392]
S3 TsUsbGD;Remote Desktop Generic USB Device; C:\Windows\system32\drivers\TsUsbGD.sys [2010-11-21 31232]
S3 vmbus;vmbus; C:\Windows\system32\drivers\vmbus.sys [2010-11-21 199552]
S3 VMBusHID;VMBusHID; C:\Windows\system32\drivers\VMBusHID.sys [2010-11-21 21760]
S3 WinUsb;WinUsb; C:\Windows\system32\DRIVERS\WinUsb.sys [2010-11-21 41984]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 AdobeARMservice;Adobe Acrobat Update Service; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [2014-12-19 81088]
R2 AESTFilters;Andrea ST Filters Service; C:\Windows\System32\DriverStore\FileRepository\stwrt64.inf_amd64_neutral_960c1f056a541068\AESTSr64.exe [2009-03-02 89600]
R2 c2cautoupdatesvc;Skype Click to Call Updater; C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe [2014-07-14 1390176]
R2 c2cpnrsvc;Skype Click to Call PNR Service; C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe [2014-07-14 1767520]
R2 CscService;@%systemroot%\system32\cscsvc.dll,-200; C:\Windows\System32\svchost.exe [2009-07-14 27136]
R2 hpsrv;HP Service; C:\Windows\system32\Hpservice.exe [2011-05-13 30520]
R2 MsMpSvc;Microsoft Antimalware Service; C:\Program Files\Microsoft Security Client\MsMpEng.exe [2015-01-30 23784]
R2 nvsvc;NVIDIA Display Driver Service; C:\Windows\system32\nvvsvc.exe [2013-10-23 922912]
R2 nvUpdatusService;NVIDIA Update Service Daemon; C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe [2013-10-27 1364256]
R2 SC_Svc;Spyware Clear Realtime Shield Service; C:\Program Files (x86)\Spyware Clear\SC_svc64.exe [2015-01-20 3006784]
R2 ssinstall;SInstalátor; C:\Windows\SysWOW64\ssins.exe [2014-06-09 2324216]
R3 NisSrv;@C:\Program Files\Microsoft Security Client\MpAsDesc.dll,-243; C:\Program Files\Microsoft Security Client\NisSrv.exe [2015-01-30 366512]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2013-09-11 105144]
S2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2013-09-11 124088]
S2 gupdate;Služba Google Update (gupdate); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2014-05-19 116648]
S2 SkypeUpdate;Skype Updater; C:\Program Files (x86)\Skype\Updater\Updater.exe [2015-01-02 315488]
S2 STacSV;Audio Service; C:\Windows\System32\DriverStore\FileRepository\stwrt64.inf_amd64_neutral_960c1f056a541068\STacSV64.exe [2010-03-23 247808]
S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service; C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2015-02-05 267440]
S3 AppMgmt;@appmgmts.dll,-3250; C:\Windows\system32\svchost.exe [2009-07-14 27136]
S3 gupdatem;Služba Google Update (gupdatem); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2014-05-19 116648]
S3 gusvc;Google Software Updater; C:\Program Files (x86)\Google\Common\Google Updater\GoogleUpdaterService.exe [2014-05-19 194032]
S3 IEEtwCollectorService;@%SystemRoot%\system32\ieetwcollectorres.dll,-1000; C:\Windows\system32\IEEtwCollector.exe [2015-02-20 114688]
S3 Microsoft SharePoint Workspace Audit Service;Microsoft SharePoint Workspace Audit Service; C:\Program Files (x86)\Microsoft Office\Office14\GROOVE.EXE [2013-12-18 30814400]
S3 ose;Office Source Engine; C:\Program Files (x86)\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2010-01-09 149352]
S3 osppsvc;Office Software Protection Platform; C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE [2010-01-09 4925184]
S3 PeerDistSvc;@%SystemRoot%\system32\peerdistsvc.dll,-9000; C:\Windows\System32\svchost.exe [2009-07-14 27136]
S3 StorSvc;@%SystemRoot%\System32\StorSvc.dll,-100; C:\Windows\System32\svchost.exe [2009-07-14 27136]
S3 UmRdpService;@%SystemRoot%\system32\umrdp.dll,-1000; C:\Windows\System32\svchost.exe [2009-07-14 27136]
S3 WatAdminSvc;@%SystemRoot%\system32\Wat\WatUX.exe,-601; C:\Windows\system32\Wat\WatAdminSvc.exe [2014-04-17 1255736]
S4 aspnet_state;ASP.NET State Service; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\aspnet_state.exe [2013-09-11 51808]
S4 NetMsmqActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8195; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2013-09-11 139856]
S4 NetPipeActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8197; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2013-09-11 139856]
S4 NetTcpActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8199; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2013-09-11 139856]

-----------------EOF-----------------
Nahoru
Uživatelský avatar
vyosek
VIP
VIP
Příspěvky: 56373
Registrován: 07 lis 2006 15:24
Bydliště: Šalingrad - Brno

Re: mam virusy v pc

#2 Příspěvek od vyosek »

Zdravim :)

:arrow: Stahnete AdwCleaner http://general-changelog-team.fr/fr/dow ... adwcleaner
  • Ulozte nejlepe na plochu
  • Ukoncete vsechny programy
  • Po spusteni probehne stazeni databaze
  • Kliknete na Scan a nasledne Clean
  • Probehne oprava, restart PC a pak se objevi log, pripadne bude ulozen ve slozce c:\AdwCleaner\AdwCleaner[S?].txt, ten sem vlozte
:arrow: Stahnete Zoek.exe http://hijackthis.nl/smeenk/ a ulozte jej na plochu
  • Pokud pouzivate Win Vista ci W7, kliknete na Zoek pravym a dejte Run As Administrator ci Spustit jako spravce
  • Do okna vlozte skript nize

  • Kód: Vybrat vše

    autoclean;
resethosts;
emptyclsid;
IEdefaults;
FFdefaults;
CHRdefaults;
emptyIEcache;
emptyFFcache;
emptyCHRcache;
emptyalltemp;
emptyflash;
emptyjava;
emptyrecycle.bin;
  • Nasledne kliknete na Run Script
  • PC provede opravu, restartuje se a da Vam log, jeho obsah vlozte sem
"Kdo víno má a nepije,kdo hrozny má a nejí je, kdo ženu má a nelíbá, kdo zábavě se vyhýbá, na toho vemte bič a hůl, to není člověk, to je vůl."
Člen Obrázek od 1. února 2011.
Nahoru
andrej
Návštěvník
Návštěvník
Příspěvky: 6
Registrován: 12 bře 2015 10:29

Re: mam virusy v pc

#3 Příspěvek od andrej »

cleaner nasiel jeden spiware ten vymazal a zoek mi nesiel spustit a ked sa spustil asi po 10 minutach tak tu je log


Zoek.exe is running now.
Do not start any browser windows, they may get closed automatically.
Please wait! This window will close when finished.
A logfile will open afterwards and can also be found on your systemdrive as zoek-results.log
Nahoru
andrej
Návštěvník
Návštěvník
Příspěvky: 6
Registrován: 12 bře 2015 10:29

Re: mam virusy v pc

#4 Příspěvek od andrej »

Zoek.exe v5.0.0.0 Updated 11-March-2015
Tool run by NB on çt 12. 03. 2015 at 14:54:58,84.
Microsoft Windows 7 Professional 6.1.7601 Service Pack 1 x64
Running in: Normal Mode Internet Access Detected
Launched: C:\Users\NB\Desktop\zoek.scr [Scan all users] [Script inserted]

===== Runcheck 15:00:14,56 =====

--- Create Environment Variables 15:00:16,97
--- Checking Input 15:00:31,83
--- Reset Hosts File 15:00:55,75
--- AU AppData Check 15:00:57,20
--- Remove From Windows Installer 15:01:02,32
Nahoru
andrej
Návštěvník
Návštěvník
Příspěvky: 6
Registrován: 12 bře 2015 10:29

Re: mam virusy v pc

#5 Příspěvek od andrej »

===== Runcheck 15:00:14,56 =====

--- Create Environment Variables 15:00:16,97
--- Checking Input 15:00:31,83
--- Reset Hosts File 15:00:55,75
--- AU AppData Check 15:00:57,20
--- Remove From Windows Installer 15:01:02,32
--- Empty Folders Check 15:02:56,62
--- Registry HKLM Software Check 15:02:56,73
--- Quick Launch Shortcut Check 15:03:22,04
--- IE Startpage Check 15:03:28,86
Nahoru
andrej
Návštěvník
Návštěvník
Příspěvky: 6
Registrován: 12 bře 2015 10:29

Re: mam virusy v pc

#6 Příspěvek od andrej »

===== Runcheck 15:00:14,56 =====

--- Create Environment Variables 15:00:16,97
--- Checking Input 15:00:31,83
--- Reset Hosts File 15:00:55,75
--- AU AppData Check 15:00:57,20
--- Remove From Windows Installer 15:01:02,32
--- Empty Folders Check 15:02:56,62
--- Registry HKLM Software Check 15:02:56,73
--- Quick Launch Shortcut Check 15:03:22,04
--- IE Startpage Check 15:03:28,86
--- Program Files DB Check 15:05:35,19
--- C:\Users\Default\AppData\Roaming DB Check 15:06:49,06
--- C:\Users\Default User\AppData\Roaming DB Check 15:06:49,06
--- C:\Users\NB\AppData\Roaming DB Check 15:06:49,06
--- C:\Users\UpdatusUser\AppData\Roaming DB Check 15:06:49,06
--- C:\Windows\SysNative\config\systemprofile\AppData\Roaming DB Check 15:06:49,06
--- C:\Windows\sysWoW64\config\systemprofile\AppData\Roaming DB Check 15:06:49,06
--- C:\Windows\serviceprofiles\networkservice\AppData\Roaming DB Check 15:06:49,06
--- C:\Windows\serviceprofiles\Localservice\AppData\Roaming DB Check 15:06:49,06
--- C:\Users\NB DB Check 15:11:07,24
--- C:\PROGRA~3 DB Check 15:11:34,70
--- C:\Users\Default\AppData\Local DB Check 15:11:43,39
--- C:\Users\Default User\AppData\Local DB Check 15:11:43,39
--- C:\Users\NB\AppData\Local DB Check 15:11:43,39
Nahoru
andrej
Návštěvník
Návštěvník
Příspěvky: 6
Registrován: 12 bře 2015 10:29

Re: mam virusy v pc

#7 Příspěvek od andrej »

Zoek.exe v5.0.0.0 Updated 11-March-2015
Tool run by NB on çt 12. 03. 2015 at 14:54:58,84.
Microsoft Windows 7 Professional 6.1.7601 Service Pack 1 x64
Running in: Normal Mode Internet Access Detected
Launched: C:\Users\NB\Desktop\zoek.scr [Scan all users] [Script inserted]

==== Older Logs ======================

C:\zoek-results2015-03-12-134714.log 1300 bytes

==== Reset Hosts File ======================

# Copyright (c) 1993-2006 Microsoft Corp.
#
# This is a sample HOSTS file used by Microsoft TCP/IP for Windows.
#
# This file contains the mappings of IP addresses to host names. Each
# entry should be kept on an individual line. The IP address should
# be placed in the first column followed by the corresponding host name.
# The IP address and the host name should be separated by at least one
# space.
#
# Additionally, comments (such as these) may be inserted on individual
# lines or following the machine name denoted by a '#' symbol.
#
# For example:
#
# 102.54.94.97 rhino.acme.com # source server
# 38.25.63.10 x.acme.com # x client host

# localhost name resolution is handled within DNS itself.
127.0.0.1 localhost
::1 localhost

==== Empty Folders Check ======================

C:\PROGRA~2\Winamp deleted successfully
C:\Users\NB\AppData\Roaming\QuickScan deleted successfully
C:\Users\NB\AppData\Local\Avg2013 deleted successfully

==== Deleting CLSID Registry Keys ======================

HKEY_USERS\S-1-5-21-1022382763-4278777700-1617752943-1001\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{11BF46C6-B3DE-48BD-BF70-3AD85CAB80B6} deleted successfully
HKEY_USERS\S-1-5-21-1022382763-4278777700-1617752943-1001\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{ECCA77AD-EF06-4650-B6FC-7A0E90687EB4} deleted successfully
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{11BF46C6-B3DE-48BD-BF70-3AD85CAB80B5} deleted successfully
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{ECCA77AD-EF06-4650-B6FC-7A0E90687EB4} deleted successfully

==== Deleting CLSID Registry Values ======================


==== Deleting Services ======================


==== FireFox Fix ======================

Deleted from C:\Users\NB\AppData\Roaming\Mozilla\Firefox\Profiles\zhxsp126.default\prefs.js:

Added to C:\Users\NB\AppData\Roaming\Mozilla\Firefox\Profiles\zhxsp126.default\prefs.js:
user_pref("browser.startup.homepage", "about:home");
user_pref("browser.newtab.url", "about:newtab");

==== Deleting Files \ Folders ======================

C:\PROGRA~2\Winamp not found
C:\extensions deleted
C:\PROGRA~3\Avg_Update_0814av deleted
C:\Users\NB\AppData\Local\CRE deleted
C:\Windows\SysNative\config\systemprofile\Searches deleted

==== Firefox Start and Search pages ======================

ProfilePath: C:\Users\NB\AppData\Roaming\Mozilla\Firefox\Profiles\zhxsp126.default
user_pref("browser.startup.homepage", "about:home");
user_pref("browser.newtab.url", "about:newtab");

==== Firefox Extensions ======================

==== Firefox Plugins ======================

Profilepath: C:\Users\NB\AppData\Roaming\Mozilla\Firefox\Profiles\zhxsp126.default
3CD19649B2C3023D65E67C056457A2BC - C:\Users\NB\AppData\Local\Facebook\Video\Skype\npFacebookVideoCalling.dll - Facebook Video Calling Plugin


==== Chromium Look ======================

HKEY_LOCAL_MACHINE\SOFTWARE\Google\Chrome\Extensions
fnelgfmpooffemibikhmcklfnnimgijo - C:\Users\NB\AppData\Local\CRE\fnelgfmpooffemibikhmcklfnnimgijo.crx[]
lifbcibllhkdhoafpjfnlhfpfgnpldfl - C:\Program Files (x86)\Skype\Toolbars\ChromeExtension\skype_chrome_extension.crx[11. 04. 2014 18:46]

HKEY_CURRENT_USER\SOFTWARE\Google\Chrome\Extensions
fnelgfmpooffemibikhmcklfnnimgijo - C:\Users\NB\AppData\Local\CRE\fnelgfmpooffemibikhmcklfnnimgijo.crx[]

Seznam Lištička - Email - NB\AppData\Local\Google\Chrome\User Data\Default\Extensions\bgjpfhpjcgdppjbgnpnjllokbmcdllig
Seznam Lištička - Slovník - NB\AppData\Local\Google\Chrome\User Data\Default\Extensions\blmojkbhnkkphngknkmgccmlenfaelkd
uTorrentControl_v6b - NB\AppData\Local\Google\Chrome\User Data\Default\Extensions\fnelgfmpooffemibikhmcklfnnimgijo
Skype Click to Call - NB\AppData\Local\Google\Chrome\User Data\Default\Extensions\lifbcibllhkdhoafpjfnlhfpfgnpldfl
Seznam Lištička - Rychlá volba - NB\AppData\Local\Google\Chrome\User Data\Default\Extensions\olfeabkoenfaoljndfecamgilllcpiak

==== Chromium Fix ======================

C:\Users\NB\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_fnelgfmpooffemibikhmcklfnnimgijo_0.localstorage deleted successfully
C:\Users\NB\AppData\Local\Google\Chrome\User Data\Default\databases\chrome-extension_fnelgfmpooffemibikhmcklfnnimgijo_0 deleted successfully
C:\Users\NB\AppData\Local\Google\Chrome\User Data\Default\Extensions\fnelgfmpooffemibikhmcklfnnimgijo deleted successfully

==== Set IE to Default ======================

Old Values:
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
"Start Page"="https://www.google.sk/?gws_rd=ssl"

New Values:
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
"Start Page"="https://www.google.sk/?gws_rd=ssl"

==== All HKCU SearchScopes ======================

HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes
"DefaultScope"="{0633EE93-D776-472f-A0FF-E1416B8B2E3A}"
{012E1000-F331-11DB-8314-0800200C9A66} Google Url="http://www.google.com/search?q={searchTerms}"
{0633EE93-D776-472f-A0FF-E1416B8B2E3A} Bing Url="http://www.bing.com/search?q={searchTer ... ORM=IE8SRC"
{1E3C3D01-0B36-45EA-91C2-22A4C9EA0EB2} Slovnˇk CZ/EN Url="http://slovnik.seznam.cz/?q={searchTerm ... arch_19068"
{3449D5D0-E822-4358-A68D-BE9453269E15} Encyklopedie Seznam Url="http://encyklopedie.seznam.cz/search?q= ... arch_19068"
{65591122-5D8D-4C7D-AC58-599FC8DCEC24} Novinky.cz Url="http://www.novinky.cz/hledej?w={searchT ... arch_19068"
{6A1806CD-94D4-4689-BA73-E35EA1EA9990} Google Url="https://www.google.com/search?q={searchTerms}"
{A954383C-3C0B-451D-9843-A14FA5DFD7D2} Seznam TV Program Url="http://tv.seznam.cz/hledej?w={searchTer ... arch_19068"
{B4E194D8-79D5-4FBB-A6DC-FA03B89F66D9} Slovnˇk EN/CZ Url="http://slovnik.seznam.cz/?q={searchTerm ... arch_19068"
{B543CE4E-AADA-4678-B1E7-7FC56BBEEF04} Firmy.cz Url="http://www.firmy.cz/?q={searchTerms}&so ... arch_19068"
{BD367E48-4DB3-4A08-9D97-120ACDF34A15} Seznam Url="http://search.seznam.cz/?q={searchTerms ... arch_19068"
{D4289529-9A7C-4612-81DD-2C75F78A4FE6} Zbo§ˇ.cz Url="http://www.zbozi.cz/?q={searchTerms}&r= ... arch_19068"
{E7DAF31C-4244-4252-9515-76620735F0C7} Mapy.cz Url="http://www.mapy.cz/?query={searchTerms} ... arch_19068"

==== Reset Google Chrome ======================

C:\Users\NB\AppData\Local\Google\Chrome\User Data\Default\Preferences was reset successfully
C:\Users\NB\AppData\Local\Google\Chrome\User Data\Default\Web Data was reset successfully

==== Deleting Registry Keys ======================

HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Google\Chrome\Extensions\fnelgfmpooffemibikhmcklfnnimgijo deleted successfully
HKEY_CURRENT_USER\SOFTWARE\Google\Chrome\Extensions\fnelgfmpooffemibikhmcklfnnimgijo deleted successfully

==== Empty IE Cache ======================

C:\Windows\system32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully
C:\Users\Default\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully
C:\Users\NB\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5 emptied successfully
C:\Users\UpdatusUser\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully
C:\Windows\SysNative\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully
C:\Windows\sysWoW64\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully
C:\Windows\serviceprofiles\networkservice\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully
C:\Windows\serviceprofiles\Localservice\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully
C:\Windows\sysWOW64\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully
C:\Users\NB\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\1R1E9AFY will be deleted at reboot

==== Empty FireFox Cache ======================

C:\Users\NB\AppData\Local\Mozilla\Firefox\Profiles\zhxsp126.default\cache2 emptied successfully

==== Empty Chrome Cache ======================

C:\Users\NB\AppData\Local\Google\Chrome\User Data\Default\Cache emptied successfully

==== Empty All Flash Cache ======================

Flash Cache is not empty, a reboot is needed

==== Empty All Java Cache ======================

No Java Cache Found

==== C:\zoek_backup content ======================

C:\zoek_backup (files=581 folders=122 15806217 bytes)

==== Empty Temp Folders ======================

C:\Users\Default\AppData\Local\Temp emptied successfully
C:\Users\Default User\AppData\Local\Temp emptied successfully
C:\Users\NB\AppData\Local\Temp will be emptied at reboot
C:\Users\UpdatusUser\AppData\Local\Temp emptied successfully
C:\Windows\serviceprofiles\networkservice\AppData\Local\Temp will be emptied at reboot
C:\Windows\serviceprofiles\Localservice\AppData\Local\Temp emptied successfully
C:\Windows\Temp will be emptied at reboot

==== After Reboot ======================

==== Empty Temp Folders ======================

C:\Windows\Temp successfully emptied
C:\Users\NB\AppData\Local\Temp successfully emptied

==== Empty Recycle Bin ======================

C:\$RECYCLE.BIN successfully emptied

==== Deleting Files / Folders ======================

"C:\Users\NB\AppData\Local\Google\Chrome\User Data\Default\Extensions\fnelgfmpooffemibikhmcklfnnimgijo" not found
"C:\Users\NB\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\1R1E9AFY" not found
"C:\Users\NB\AppData\Roaming\Macromedia\Flash Player\#SharedObjects\LPYHYWNJ\cdn1.l3.ui.4tube.com" not found
"C:\Users\NB\AppData\Roaming\Macromedia\Flash Player\#SharedObjects\LPYHYWNJ\cdn1.l3.ui.porntube.com" not found
"C:\Users\NB\AppData\Roaming\Macromedia\Flash Player\#SharedObjects\LPYHYWNJ\cdn1.videos.tours.webcams.com" not found
"C:\Users\NB\AppData\Roaming\Macromedia\Flash Player\#SharedObjects\LPYHYWNJ\images.boobinspector.com" not found
"C:\Users\NB\AppData\Roaming\Macromedia\Flash Player\#SharedObjects\LPYHYWNJ\va1en.sftcdn.net" not found
"C:\Users\NB\AppData\Roaming\Macromedia\Flash Player\#SharedObjects\LPYHYWNJ\www.absoluporn.com" not found
"C:\Users\NB\AppData\Roaming\Macromedia\Flash Player\#SharedObjects\LPYHYWNJ\www.bravoteens.com" not found
"C:\Windows\serviceprofiles\networkservice\AppData\Local\Temp\Low" not deleted

==== EOF on çt 12. 03. 2015 at 16:27:58,69 ======================





tu je komplet ten log
Nahoru
Uživatelský avatar
vyosek
VIP
VIP
Příspěvky: 56373
Registrován: 07 lis 2006 15:24
Bydliště: Šalingrad - Brno

Re: mam virusy v pc

#8 Příspěvek od vyosek »

Poprosim o FRST http://forum.viry.cz/viewtopic.php?f=13&t=133100
"Kdo víno má a nepije,kdo hrozny má a nejí je, kdo ženu má a nelíbá, kdo zábavě se vyhýbá, na toho vemte bič a hůl, to není člověk, to je vůl."
Člen Obrázek od 1. února 2011.
Nahoru
Odpovědět

Zpět na „Řešení problémů, logy“