Odvirování PC, zrychlení počítače, vzdálená pomoc prostřednictvím služby neslape.cz

Tak jsem tu zase :) A prosím o kontrolu logu prosím :)

Máte problém s virem? Vložte sem log z FRST nebo RSIT.

Moderátor: Moderátoři

Pravidla fóra
Pokud chcete pomoc, vložte log z FRST [návod zde] nebo RSIT [návod zde]

Jednotlivé thready budou po vyřešení uzamčeny. Stejně tak ty, které budou nečinné déle než 14 dní. Vizte Pravidlo o zamykání témat. Děkujeme za pochopení.

!NOVINKA!
Nově lze využívat služby vzdálené pomoci, kdy se k vašemu počítači připojí odborník a bližší informace o problému si od vás získá telefonicky! Více na www.neslape.cz
Zamčeno
Zpráva
Autor
HornyCZ
Návštěvník
Návštěvník
Příspěvky: 25
Registrován: 22 dub 2015 10:08

Tak jsem tu zase :) A prosím o kontrolu logu prosím :)

#1 Příspěvek od HornyCZ »

Moc děkuji za vaší ochotu a předem děkuji za odpověď a snahu :)
  • Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 20-04-2015
    Ran by okayokay-pc (administrator) on VIQULINKA on 24-04-2015 21:55:41
    Running from C:\Users\okayokay-pc\Desktop
    Loaded Profiles: okayokay-pc (Available profiles: okayokay-pc)
    Platform: Windows 8.1 (X64) OS Language: Čeština (Česká republika)
    Internet Explorer Version 11 (Default browser: FF)
    Boot Mode: Normal
    Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/33 ... scan-tool/

    ==================== Processes (Whitelisted) =================

    (If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

    (ASUSTeK Computer Inc.) C:\Windows\System32\FBAgent.exe
    (Microsoft Corporation) C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe
    (Microsoft Corporation) C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe
    (Microsoft Corporation) C:\Program Files\Microsoft Office 15\ClientX64\officeclicktorun.exe
    (Microsoft Corporation) C:\Windows\System32\dasHost.exe
    (Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe
    (Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe
    (Microsoft Corporation) C:\Program Files\Windows Defender\MsMpEng.exe
    (Microsoft Corporation) C:\Program Files\Windows Defender\NisSrv.exe
    (Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes Anti-Malware\mbam.exe
    (Microsoft Corporation) C:\Windows\System32\SkyDrive.exe
    (Qualcomm Atheros Commnucations) C:\Program Files (x86)\Bluetooth Suite\BtvStack.exe
    (Intel Corporation) C:\Windows\System32\igfxpers.exe
    (Microsoft Corporation) C:\Windows\System32\StikyNot.exe
    () C:\Program Files (x86)\Bluetooth Suite\ActivateDesktop.exe
    (ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\AsLdrSrv.exe
    (ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\HControl.exe
    (ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\KBFiltr.exe
    (ASUS) C:\Program Files (x86)\ASUS\ASUS InstantOn\InsOnSrv.exe
    (Adobe Systems Incorporated) C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe
    (ASUS) C:\Program Files (x86)\ASUS\ASUS InstantOn\InsOnWMI.exe
    (ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATKOSD2\ATKOSD2.exe
    (ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATK Media\DMedia.exe
    (Qualcomm Atheros Commnucations) C:\Program Files (x86)\Bluetooth Suite\AdminService.exe
    (ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATKGFNEX\GFNEXSrv.exe
    (Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe
    (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe
    (Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe
    (Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
    (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\Jhi_service.exe
    (ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\ASUS Live Update\LiveUpdate.exe
    (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
    (ASUS) C:\Program Files\ASUS\P4G\BatteryLife.exe
    (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
    (ASUSTek Computer Inc.) C:\Program Files\ASUS\ASUS VivoBook\ASUSWakeupService.exe
    (ASUS) C:\Program Files (x86)\ASUS\Splendid\ACMON.exe
    (ASUSTeK Computer Inc.) C:\Program Files\ASUS\ASUS VivoBook\VivoBook.exe
    (Atheros) C:\Program Files (x86)\Bluetooth Suite\Ath_CoexAgent.exe
    () C:\Program Files (x86)\ASUS\Splendid\ColorUService.exe
    (AsusTek) C:\Program Files (x86)\ASUS\ASUS Smart Gesture\AsTPCenter\x64\AsusTPLoader.exe
    (ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\ASUS Smart Gesture\QuickGesture\x64\QuickGesture64.exe
    (ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\ASUS Smart Gesture\QuickGesture\x86\QuickGesture.exe
    (AsusTek) C:\Program Files (x86)\ASUS\ASUS Smart Gesture\AsTPCenter\x64\AsusTPCenter.exe
    (ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\USBChargerPlus\USBChargerPlus.exe
    (AsusTek) C:\Program Files (x86)\ASUS\ASUS Smart Gesture\AsTPCenter\x64\AsusTPHelper.exe
    (Microsoft Corporation) C:\Program Files\Windows Defender\MpCmdRun.exe
    (Microsoft Corporation) C:\Windows\WinSxS\amd64_microsoft-windows-servicingstack_31bf3856ad364e35_6.3.9600.17477_none_fa2b7d3b9b36c7b4\TiWorker.exe


    ==================== Registry (Whitelisted) ==================

    (If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

    HKLM-x32\...\Winlogon: [Userinit] [X]
    Winlogon\Notify\igfxcui: C:\WINDOWS\system32\igfxdev.dll (Intel Corporation)
    HKLM\...\Policies\Explorer\Run: [BtvStack] => C:\Program Files (x86)\Bluetooth Suite\BtvStack.exe [129664 2012-12-28] ( (Qualcomm Atheros Commnucations))
    HKU\S-1-5-21-36292207-1243957256-28351842-1001\...\Run: [Skype] => C:\Program Files (x86)\Skype\Phone\Skype.exe [31682144 2015-03-25] (Skype Technologies S.A.)
    HKU\S-1-5-21-36292207-1243957256-28351842-1001\...\Run: [RESTART_STICKY_NOTES] => C:\Windows\System32\StikyNot.exe [479744 2014-10-29] (Microsoft Corporation)
    HKU\S-1-5-21-36292207-1243957256-28351842-1001\Control Panel\Desktop\\SCRNSAVE.EXE -> C:\Windows\system32\Bubbles.scr [788480 2014-10-29] (Microsoft Corporation)
    ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => No File
    ShellIconOverlayIdentifiers: [AsusWSShellExt_B] -> {6D4133E5-0742-4ADC-8A8C-9303440F7190} => C:\Program Files (x86)\ASUS\WebStorage Sync Agent\1.1.10.123\ASUSWSShellExt64.dll [2012-03-13] (ASUS Cloud Corporation.)
    ShellIconOverlayIdentifiers: [AsusWSShellExt_O] -> {64174815-8D98-4CE6-8646-4C039977D808} => C:\Program Files (x86)\ASUS\WebStorage Sync Agent\1.1.10.123\ASUSWSShellExt64.dll [2012-03-13] (ASUS Cloud Corporation.)
    ShellIconOverlayIdentifiers: [AsusWSShellExt_U] -> {1C5AB7B1-0B38-4EC4-9093-7FD277E2AF4D} => C:\Program Files (x86)\ASUS\WebStorage Sync Agent\1.1.10.123\ASUSWSShellExt64.dll [2012-03-13] (ASUS Cloud Corporation.)
    ShellIconOverlayIdentifiers-x32: [ SkyDrivePro1 (ErrorConflict)] -> {8BA85C75-763B-4103-94EB-9470F12FE0F7} => C:\Program Files\Microsoft Office 15\root\Office15\GROOVEEX.DLL [2015-03-15] (Microsoft Corporation)
    ShellIconOverlayIdentifiers-x32: [ SkyDrivePro2 (SyncInProgress)] -> {CD55129A-B1A1-438E-A425-CEBC7DC684EE} => C:\Program Files\Microsoft Office 15\root\Office15\GROOVEEX.DLL [2015-03-15] (Microsoft Corporation)
    ShellIconOverlayIdentifiers-x32: [ SkyDrivePro3 (InSync)] -> {E768CD3B-BDDC-436D-9C13-E1B39CA257B1} => C:\Program Files\Microsoft Office 15\root\Office15\GROOVEEX.DLL [2015-03-15] (Microsoft Corporation)

    ==================== Internet (Whitelisted) ====================

    (If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

    HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer: Policy restriction <======= ATTENTION
    HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL =
    HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL =
    HKU\S-1-5-21-36292207-1243957256-28351842-1001\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.msn.com/?pc=SKY2&ocid=SKY2DHP&osmkt=en-ww
    SearchScopes: HKLM-x32 -> {15C4DF55-4B67-495A-A3D3-A497C4A49EE0} URL = http://search.seznam.cz/?sourceid=quick ... earchTerms}
    SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
    SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
    SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
    SearchScopes: HKU\S-1-5-21-36292207-1243957256-28351842-1001 -> {012E1000-F331-11DB-8314-0800200C9A66} URL = http://www.google.com/search?q={searchTerms}
    SearchScopes: HKU\S-1-5-21-36292207-1243957256-28351842-1001 -> {15C4DF55-4B67-495A-A3D3-A497C4A49EE0} URL = http://search.seznam.cz/?sourceid=quick ... earchTerms}
    BHO: Lync Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX64\Microsoft Office\Office15\OCHelper.dll [2015-03-15] (Microsoft Corporation)
    BHO: Skype Click to Call for Internet Explorer -> {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} -> C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll [2014-07-14] (Microsoft Corporation)
    BHO: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL [2013-03-06] (Microsoft Corporation)
    BHO: Microsoft SkyDrive Pro Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX64\Microsoft Office\Office15\GROOVEEX.DLL [2015-03-15] (Microsoft Corporation)
    BHO-x32: Lync Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office 15\root\Office15\OCHelper.dll [2015-02-10] (Microsoft Corporation)
    BHO-x32: Skype Click to Call for Internet Explorer -> {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} -> C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll [2014-07-14] (Microsoft Corporation)
    BHO-x32: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files (x86)\Microsoft Office\Office14\URLREDIR.DLL [2013-03-06] (Microsoft Corporation)
    BHO-x32: Microsoft SkyDrive Pro Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files\Microsoft Office 15\root\Office15\GROOVEEX.DLL [2015-03-15] (Microsoft Corporation)
    Handler-x32: osf - {D924BDC6-C83A-4BD5-90D0-095128A113D1} - C:\Program Files\Microsoft Office 15\root\Office15\MSOSB.DLL [2015-02-03] (Microsoft Corporation)
    Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll [2014-05-02] (Skype Technologies)
    Handler: skypec2c - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll [2014-07-14] (Microsoft Corporation)
    Handler-x32: skypec2c - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll [2014-07-14] (Microsoft Corporation)
    Tcpip\Parameters: [DhcpNameServer] 89.190.65.200 89.190.64.20

    FireFox:
    ========
    FF ProfilePath: C:\Users\okayokay-pc\AppData\Roaming\Mozilla\Firefox\Profiles\zbxssnxh.default
    FF NewTab: about:newtab
    FF Homepage: about:home
    FF Plugin: @adobe.com/FlashPlayer -> C:\WINDOWS\system32\Macromed\Flash\NPSWF64_17_0_0_169.dll [2015-04-14] ()
    FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~1\MICROS~1\Office14\NPAUTHZ.DLL [2010-01-09] (Microsoft Corporation)
    FF Plugin-x32: @adobe.com/FlashPlayer -> C:\WINDOWS\SysWOW64\Macromed\Flash\NPSWF32_17_0_0_169.dll [2015-04-14] ()
    FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=2.1.42 -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll [2012-06-06] (Intel Corporation)
    FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll [2012-06-06] (Intel Corporation)
    FF Plugin-x32: @microsoft.com/Lync,version=15.0 -> C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX86\Mozilla Firefox\plugins\npmeetingjoinpluginoc.dll [2014-12-14] (Microsoft Corporation)
    FF Plugin-x32: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~2\MICROS~1\Office14\NPAUTHZ.DLL [2010-01-09] (Microsoft Corporation)
    FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office 15\root\Office15\NPSPWRAP.DLL [2014-12-14] (Microsoft Corporation)
    FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3505.0912 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2012-09-12] (Microsoft Corporation)
    FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.26.9\npGoogleUpdate3.dll [2015-02-04] (Google Inc.)
    FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.26.9\npGoogleUpdate3.dll [2015-02-04] (Google Inc.)
    FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll [2014-08-03] (Adobe Systems Inc.)
    FF SearchPlugin: C:\Users\okayokay-pc\AppData\Roaming\Mozilla\Firefox\Profiles\zbxssnxh.default\searchplugins\badoo.xml [2014-09-17]
    FF HKLM-x32\...\Thunderbird\Extensions: [msktbird@mcafee.com] - C:\Program Files\McAfee\MSK
    StartMenuInternet: FIREFOX.EXE - C:\Program Files\Nightly\firefox.exe

    Chrome:
    =======
    CHR Profile: C:\Users\okayokay-pc\AppData\Local\Google\Chrome\User Data\Default
    CHR Extension: (Google Docs) - C:\Users\okayokay-pc\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2014-03-11]
    CHR Extension: (Google Drive) - C:\Users\okayokay-pc\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2014-03-11]
    CHR Extension: (Raindrops) - C:\Users\okayokay-pc\AppData\Local\Google\Chrome\User Data\Default\Extensions\bcipapbfhdnmgihoimbjiadmhpcgcnil [2014-09-30]
    CHR Extension: (YouTube) - C:\Users\okayokay-pc\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2014-03-11]
    CHR Extension: (Google Search) - C:\Users\okayokay-pc\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2014-03-11]
    CHR Extension: (Bookmark Manager) - C:\Users\okayokay-pc\AppData\Local\Google\Chrome\User Data\Default\Extensions\gmlllbghnfkpflemihljekbapjopfjik [2015-04-22]
    CHR Extension: (Skype Click to Call) - C:\Users\okayokay-pc\AppData\Local\Google\Chrome\User Data\Default\Extensions\lifbcibllhkdhoafpjfnlhfpfgnpldfl [2014-03-13]
    CHR Extension: (Google Wallet) - C:\Users\okayokay-pc\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2014-03-11]
    CHR Extension: (Gmail) - C:\Users\okayokay-pc\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2014-03-11]
    CHR HKLM-x32\...\Chrome\Extension: [lifbcibllhkdhoafpjfnlhfpfgnpldfl] - C:\Program Files (x86)\Skype\Toolbars\ChromeExtension\skype_chrome_extension.crx [2014-07-14]

    ==================== Services (Whitelisted) =================

    (If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

    R3 ASUS InstantOn; C:\Program Files (x86)\ASUS\ASUS InstantOn\InsOnSrv.exe [277120 2012-04-13] (ASUS)
    R3 AtherosSvc; C:\Program Files (x86)\Bluetooth Suite\adminservice.exe [226944 2012-12-28] (Qualcomm Atheros Commnucations) [File not signed]
    S3 BthHFSrv; C:\Windows\System32\BthHFSrv.dll [324608 2014-10-29] (Microsoft Corporation)
    R2 c2cautoupdatesvc; C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe [1390176 2014-07-14] (Microsoft Corporation)
    R2 c2cpnrsvc; C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe [1767520 2014-07-14] (Microsoft Corporation)
    R2 ClickToRunSvc; C:\Program Files\Microsoft Office 15\ClientX64\OfficeClickToRun.exe [2714800 2015-02-10] (Microsoft Corporation)
    R3 Intel(R) ME Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe [129856 2012-06-27] (Intel Corporation)
    R3 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [166720 2012-06-25] (Intel Corporation)
    R2 MBAMScheduler; C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe [1871160 2014-11-21] (Malwarebytes Corporation)
    R2 MBAMService; C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe [969016 2014-11-21] (Malwarebytes Corporation)
    R3 WakeupService; C:\Program Files\ASUS\ASUS VivoBook\ASUSWakeupService.exe [45488 2012-12-20] (ASUSTek Computer Inc.)
    R3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [366520 2015-02-04] (Microsoft Corporation)
    R2 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [23792 2015-02-04] (Microsoft Corporation)
    R3 ZAtheros Bt and Wlan Coex Agent; C:\Program Files (x86)\Bluetooth Suite\Ath_CoexAgent.exe [323584 2012-12-28] (Atheros) [File not signed]

    ==================== Drivers (Whitelisted) ====================

    (If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

    R3 ATP; C:\Windows\System32\drivers\AsusTP.sys [65784 2013-01-16] (ASUS Corporation)
    R3 BTATH_LWFLT; C:\Windows\system32\DRIVERS\btath_lwflt.sys [77464 2012-12-28] (Qualcomm Atheros)
    R3 BthLEEnum; C:\Windows\system32\DRIVERS\BthLEEnum.sys [226304 2014-09-24] (Microsoft Corporation)
    R3 kbfiltr; C:\Windows\System32\drivers\kbfiltr.sys [14992 2012-08-02] ( )
    R3 MBAMProtector; C:\WINDOWS\system32\drivers\mbam.sys [25816 2014-11-21] (Malwarebytes Corporation)
    R3 MBAMSwissArmy; C:\WINDOWS\system32\drivers\MBAMSwissArmy.sys [129752 2015-04-24] (Malwarebytes Corporation)
    R3 MBAMWebAccessControl; C:\WINDOWS\system32\drivers\mwac.sys [64216 2014-11-21] (Malwarebytes Corporation)
    R3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [114496 2015-02-04] (Microsoft Corporation)

    ==================== NetSvcs (Whitelisted) ===================

    (If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)
  • Additional scan result of Farbar Recovery Scan Tool (x64) Version: 20-04-2015
    Ran by okayokay-pc at 2015-04-24 21:54:49
    Running from C:\Users\okayokay-pc\Desktop
    Boot Mode: Normal
    ==========================================================


    ==================== Security Center ========================

    (If an entry is included in the fixlist, it will be removed.)

    AV: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
    AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

    ==================== Installed Programs ======================

    (Only the adware programs with "hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)

    Adobe Flash Player 17 NPAPI (HKLM-x32\...\Adobe Flash Player NPAPI) (Version: 17.0.0.169 - Adobe Systems Incorporated)
    Adobe Reader X (10.1.11) MUI (HKLM-x32\...\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}) (Version: 10.1.11 - Adobe Systems Incorporated)
    Aktualizace produktu Microsoft Office Excel 2007 Help (KB963678) (HKLM-x32\...\{90120000-0016-0405-0000-0000000FF1CE}_ENTERPRISE_{0A1FAC46-B899-421D-B1A2-470896DC45DB}) (Version: - Microsoft)
    Aktualizace produktu Microsoft Office Powerpoint 2007 Help (KB963669) (HKLM-x32\...\{90120000-0018-0405-0000-0000000FF1CE}_ENTERPRISE_{5260BB53-C1F7-4A3B-9AEB-3EC9B37FF194}) (Version: - Microsoft)
    Aktualizace produktu Microsoft Office Word 2007 Help (KB963665) (HKLM-x32\...\{90120000-001B-0405-0000-0000000FF1CE}_ENTERPRISE_{E68DD413-B834-4923-8181-0A03B7555187}) (Version: - Microsoft)
    Alcor Micro USB Card Reader (HKLM-x32\...\AmUStor) (Version: 3.4.117.01527 - Alcor Micro Corp.)
    Alcor Micro USB Card Reader (x32 Version: 3.4.117.01527 - Alcor Micro Corp.) Hidden
    ASUS Instant Connect (HKLM-x32\...\{89ECB85A-D933-4CEA-9116-5CBC9C2ED95B}) (Version: 1.2.8 - ASUS)
    ASUS InstantOn (HKLM-x32\...\{749F674B-2674-47E8-879C-5626A06B2A91}) (Version: 3.0.5 - ASUS)
    ASUS LifeFrame3 (HKLM-x32\...\{1DBD1F12-ED93-49C0-A7CC-56CBDE488158}) (Version: 3.1.13 - ASUS)
    ASUS Live Update (HKLM-x32\...\{FA540E67-095C-4A1B-97BA-4D547DEC9AF4}) (Version: 3.1.8 - ASUS)
    ASUS Power4Gear Hybrid (HKLM\...\{9B6239BF-4E85-4590-8D72-51E30DB1A9AA}) (Version: 2.1.7 - ASUS)
    ASUS S200 Product Demo (HKLM-x32\...\{5E396FE4-6110-41C9-9B1F-2F30A4A13715}) (Version: 1.0.0 - ASUS)
    ASUS Screen Saver (HKLM\...\{0FBEEDF8-30FA-4FA3-B31F-C9C7E7E8DFA2}) (Version: 1.0.1 - ASUS)
    ASUS Smart Gesture (HKLM-x32\...\{4D3286A6-F6AB-498A-82A4-E4F040529F3D}) (Version: 1.1.3 - ASUS)
    ASUS Splendid Video Enhancement Technology (HKLM-x32\...\{0969AF05-4FF6-4C00-9406-43599238DE0D}) (Version: 2.01.0002 - ASUS)
    ASUS Tutor (HKLM-x32\...\{58172D66-2F69-4215-9AEC-ED8196023736}) (Version: 1.0.8 - ASUS)
    ASUS USB Charger Plus (HKLM-x32\...\{A859E3E5-C62F-4BFA-AF1D-2B95E03166AF}) (Version: 2.1.5 - ASUS)
    ASUS VivoBook (HKLM\...\{04FDBE69-F9FD-42A2-9008-E5CE7F60C6BE}) (Version: 1.0.26 - ASUS)
    ASUS WebStorage Sync Agent (HKLM-x32\...\ASUS WebStorage) (Version: 1.1.10.123 - ASUS Cloud Corporation)
    Atheros Communications Inc.(R) AR81Family Gigabit/Fast Ethernet Driver (HKLM-x32\...\{3108C217-BE83-42E4-AE9E-A56A2A92E549}) (Version: 2.1.0.7 - Atheros Communications Inc.)
    ATK Package (HKLM-x32\...\{AB5C933E-5C7D-4D30-B314-9C83A49B94BE}) (Version: 1.0.0027 - ASUS)
    Badoo Desktop (HKLM-x32\...\{D0AF8BD9-79A6-45D6-8B71-25281B1300A7}) (Version: 1.6.58.1220 - Badoo)
    D3DX10 (x32 Version: 15.4.2368.0902 - Microsoft) Hidden
    Dropbox (HKU\S-1-5-21-36292207-1243957256-28351842-1001\...\Dropbox) (Version: 2.6.24 - Dropbox, Inc.)
    Fotogaléria (x32 Version: 16.4.3505.0912 - Microsoft Corporation) Hidden
    Fotogalerie (x32 Version: 16.4.3505.0912 - Microsoft Corporation) Hidden
    Fotótár (x32 Version: 16.4.3505.0912 - Microsoft Corporation) Hidden
    Galeria fotografii (x32 Version: 16.4.3505.0912 - Microsoft Corporation) Hidden
    Google Chrome (HKLM-x32\...\Google Chrome) (Version: 42.0.2311.90 - Google Inc.)
    Google Update Helper (x32 Version: 1.3.25.11 - Google Inc.) Hidden
    Google Update Helper (x32 Version: 1.3.26.9 - Google Inc.) Hidden
    Intel(R) Management Engine Components (HKLM-x32\...\{65153EA5-8B6E-43B6-857B-C6E4FC25798A}) (Version: 8.1.0.1252 - Intel Corporation)
    Intel(R) Processor Graphics (HKLM-x32\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 9.17.10.3347 - Intel Corporation)
    Intel(R) SDK for OpenCL - CPU Only Runtime Package (HKLM-x32\...\{FCB3772C-B7D0-4933-B1A9-3707EBACC573}) (Version: 2.0.0.37149 - Intel Corporation)
    Malwarebytes Anti-Malware verze 2.0.4.1028 (HKLM-x32\...\Malwarebytes Anti-Malware_is1) (Version: 2.0.4.1028 - Malwarebytes Corporation)
    Microsoft Office 2007 Service Pack 3 (SP3) (HKLM-x32\...\{90120000-0030-0000-0000-0000000FF1CE}_ENTERPRISE_{6E107EB7-8B55-48BF-ACCB-199F86A2CD93}) (Version: - Microsoft)
    Microsoft Office 365 ProPlus - cs-cz (HKLM\...\O365ProPlusRetail - cs-cz) (Version: 15.0.4701.1002 - Microsoft Corporation)
    Microsoft Office Enterprise 2007 (HKLM-x32\...\ENTERPRISE) (Version: 12.0.6612.1000 - Microsoft Corporation)
    Microsoft Office Professional 2010 (HKLM-x32\...\Office14.SingleImage) (Version: 14.0.7015.1000 - Microsoft Corporation)
    Microsoft SkyDrive (HKU\S-1-5-21-36292207-1243957256-28351842-1001\...\SkyDriveSetup.exe) (Version: 16.4.6013.0910 - Microsoft Corporation)
    Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM-x32\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation)
    Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
    Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
    Microsoft Visual Studio 2010 Tools for Office Runtime (x64) (HKLM\...\Microsoft Visual Studio 2010 Tools for Office Runtime (x64)) (Version: 10.0.50903 - Microsoft Corporation)
    Movie Maker (x32 Version: 16.4.3505.0912 - Microsoft Corporation) Hidden
    Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 35.0a1 - Mozilla)
    MyBitCast 2.0 (HKLM-x32\...\MyBitCast) (Version: 2.0 - ASUS)
    Nightly 36.0a1 (x64 en-US) (HKLM\...\Nightly 36.0a1 (x64 en-US)) (Version: 36.0a1 - Mozilla)
    Office 15 Click-to-Run Extensibility Component (x32 Version: 15.0.4701.1002 - Microsoft Corporation) Hidden
    Office 15 Click-to-Run Licensing Component (Version: 15.0.4701.1002 - Microsoft Corporation) Hidden
    Office 15 Click-to-Run Localization Component (x32 Version: 15.0.4701.1002 - Microsoft Corporation) Hidden
    Podstawowe programy Windows Live (x32 Version: 16.4.3505.0912 - Microsoft Corporation) Hidden
    Qualcomm Atheros Bluetooth Suite (64) (HKLM\...\{A84A4FB1-D703-48DB-89E0-68B6499D2801}) (Version: 8.0.0.218 - Qualcomm Atheros Communications)
    Qualcomm Atheros Client Installation Program (HKLM-x32\...\{28006915-2739-4EBE-B5E8-49B25D32EB33}) (Version: 10.0 - Qualcomm Atheros)
    Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.6798 - Realtek Semiconductor Corp.)
    Service Pack 2 for Microsoft Office 2010 (KB2687455) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{DE28B448-32E8-4E8F-84F0-A52B21A49B5B}) (Version: - Microsoft)
    Shared C Run-time for x64 (HKLM\...\{EF79C448-6946-4D71-8134-03407888C054}) (Version: 10.0.0 - McAfee)
    Skype Click to Call (HKLM-x32\...\{6D1221A9-17BF-4EC0-81F2-27D30EC30701}) (Version: 7.3.16540.9015 - Microsoft Corporation)
    Skype™ 7.3 (HKLM-x32\...\{24991BA0-F0EE-44AD-9CC8-5EC50AECF6B7}) (Version: 7.3.101 - Skype Technologies S.A.)
    Update for 2007 Microsoft Office System (KB967642) (HKLM-x32\...\{90120000-0030-0000-0000-0000000FF1CE}_ENTERPRISE_{C444285D-5E4F-48A4-91DD-47AAAA68E92D}) (Version: - Microsoft)
    Windows Driver Package - ASUS (ATP) Mouse (01/10/2013 1.0.0.170) (HKLM\...\4A9DE1E9EBC800B7F01739D4DE7363EF6751BDF5) (Version: 01/10/2013 1.0.0.170 - ASUS)
    Windows Live Essentials (HKLM-x32\...\WinLiveSuite) (Version: 16.4.3505.0912 - Microsoft Corporation)
    WinFlash (HKLM-x32\...\{8F21291E-0444-4B1D-B9F9-4370A73E346D}) (Version: 2.41.1 - ASUS)
    WinRAR 5.01 (32-bit) (HKLM-x32\...\WinRAR archiver) (Version: 5.01.0 - win.rar GmbH)

    ==================== Custom CLSID (selected items): ==========================

    (If an entry is included in the fixlist, it will be removed from registry. Any eventual file will not be moved.)

    CustomCLSID: HKU\S-1-5-21-36292207-1243957256-28351842-1001_Classes\CLSID\{A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E}\InprocServer32 -> C:\Users\okayokay-pc\AppData\Local\Microsoft\SkyDrive\16.4.6013.0910\amd64\SkyDriveShell64.dll (Microsoft Corporation)
    CustomCLSID: HKU\S-1-5-21-36292207-1243957256-28351842-1001_Classes\CLSID\{BBACC218-34EA-4666-9D7A-C78F2274A524}\InprocServer32 -> C:\Users\okayokay-pc\AppData\Local\Microsoft\SkyDrive\16.4.6013.0910\amd64\SkyDriveShell64.dll (Microsoft Corporation)
    CustomCLSID: HKU\S-1-5-21-36292207-1243957256-28351842-1001_Classes\CLSID\{F241C880-6982-4CE5-8CF7-7085BA96DA5A}\InprocServer32 -> C:\Users\okayokay-pc\AppData\Local\Microsoft\SkyDrive\16.4.6013.0910\amd64\SkyDriveShell64.dll (Microsoft Corporation)
    CustomCLSID: HKU\S-1-5-21-36292207-1243957256-28351842-1001_Classes\CLSID\{F8071786-1FD0-4A66-81A1-3CBE29274458}\InprocServer32 -> C:\Users\okayokay-pc\AppData\Local\Microsoft\SkyDrive\16.4.6013.0910\amd64\FileSyncApi64.dll (Microsoft Corporation)
    CustomCLSID: HKU\S-1-5-21-36292207-1243957256-28351842-1001_Classes\CLSID\{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\okayokay-pc\AppData\Roaming\Dropbox\bin\DropboxExt64.22.dll (Dropbox, Inc.)
    CustomCLSID: HKU\S-1-5-21-36292207-1243957256-28351842-1001_Classes\CLSID\{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\okayokay-pc\AppData\Roaming\Dropbox\bin\DropboxExt64.22.dll (Dropbox, Inc.)
    CustomCLSID: HKU\S-1-5-21-36292207-1243957256-28351842-1001_Classes\CLSID\{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\okayokay-pc\AppData\Roaming\Dropbox\bin\DropboxExt64.22.dll (Dropbox, Inc.)
    CustomCLSID: HKU\S-1-5-21-36292207-1243957256-28351842-1001_Classes\CLSID\{FB314EDC-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\okayokay-pc\AppData\Roaming\Dropbox\bin\DropboxExt64.22.dll (Dropbox, Inc.)

    ==================== Restore Points =========================

    23-03-2015 21:18:17 Naplánovaný kontrolní bod
    07-04-2015 19:05:20 Windows Update
    15-04-2015 20:44:40 Windows Update
    22-04-2015 18:58:38 Windows Update
    24-04-2015 19:03:29 avast! antivirus system restore point

    ==================== Hosts content: ==========================

    (If needed Hosts: directive could be included in the fixlist to reset Hosts.)

    2013-08-22 14:25 - 2015-04-24 20:59 - 00000753 ____A C:\WINDOWS\system32\Drivers\etc\hosts

    127.0.0.1 localhost

    ==================== Scheduled Tasks (whitelisted) =============

    (If an entry is included in the fixlist, it will be removed from registry. Any associated file could be listed separately to be moved.)

    Task: {062B2A6B-DBE8-4D75-8321-43495A7059D4} - System32\Tasks\Microsoft\Windows\Setup\gwx\refreshgwxcontent => C:\Windows\system32\GWX\GWXConfigManager.exe [2015-03-24] (Microsoft Corporation)
    Task: {0F92A006-C9EA-4AFB-A46D-E9144E97766E} - System32\Tasks\ASUS USB Charger Plus => C:\Program Files (x86)\ASUS\USBChargerPlus\USBChargerPlus.exe [2012-09-18] (ASUSTek Computer Inc.)
    Task: {15207341-7F91-45B5-923D-77BB959B832C} - \ASUS Patch for Touch Panel No Task File <==== ATTENTION
    Task: {183D6759-4632-4BD2-A6F5-C3068CC9E909} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2014-03-11] (Google Inc.)
    Task: {1EBB11B0-4B79-4733-8F38-D782C4D7C545} - System32\Tasks\Microsoft\Office\Office Automatic Updates => C:\Program Files\Microsoft Office 15\ClientX64\OfficeC2RClient.exe [2015-02-10] (Microsoft Corporation)
    Task: {31DEA0AE-BA67-4046-A79E-D40719177945} - System32\Tasks\ASUS VivoBook => C:\Program Files\ASUS\ASUS VivoBook\VivoBook.exe [2012-12-25] (ASUSTeK Computer Inc.)
    Task: {340B8E24-DB9A-40E0-8671-27A14DABC907} - System32\Tasks\Microsoft\Office\Office Subscription Maintenance => C:\Program Files\Microsoft Office 15\root\vfs\ProgramFilesCommonx86\Microsoft Shared\OFFICE15\OLicenseHeartbeat.exe [2015-03-15] (Microsoft Corporation)
    Task: {41CBE208-B663-4401-9439-E85C56DE28BC} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentLogOn => C:\Program Files\Microsoft Office 15\root\Office15\msoia.exe [2015-03-15] (Microsoft Corporation)
    Task: {4A72C680-DC63-4ED0-9DB7-9254E9333085} - System32\Tasks\Microsoft\Windows\RemovalTools\MRT_HB => C:\WINDOWS\system32\MRT.exe [2015-04-15] (Microsoft Corporation)
    Task: {4CD2D2F2-DF39-4F34-B20E-F39F7FB29F60} - System32\Tasks\ASUS P4G => C:\Program Files\ASUS\P4G\BatteryLife.exe [2012-08-24] (ASUS)
    Task: {4EE6A9DD-3213-4960-B3B1-D3ACF63FD4E4} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentFallBack => C:\Program Files\Microsoft Office 15\root\Office15\msoia.exe [2015-03-15] (Microsoft Corporation)
    Task: {597A52D5-B31E-40B6-82CC-57B9865C834A} - System32\Tasks\Microsoft\Windows\Setup\gwx\launchtrayprocess => C:\Windows\system32\GWX\GWX.exe [2015-03-24] (Microsoft Corporation)
    Task: {5A309A9D-78AC-469C-AF72-ABDBB68F4876} - System32\Tasks\Microsoft\Windows\Setup\gwx\runappraiser => C:\Windows\system32\GWX\GWXConfigManager.exe [2015-03-24] (Microsoft Corporation)
    Task: {68C28E35-E568-4847-A251-830775FC5F43} - System32\Tasks\ASUS Live Update => C:\Program Files (x86)\ASUS\ASUS Live Update\LiveUpdate.exe [2012-07-25] (ASUSTeK Computer Inc.)
    Task: {6C49087B-D15A-49C2-BDB4-249630B40AA0} - \RegClean Pro_UPDATES No Task File <==== ATTENTION
    Task: {7B582EBB-BAD5-44FB-AA00-7D2AE504A7C2} - System32\Tasks\ASUS Splendid ACMON => C:\Program Files (x86)\ASUS\Splendid\ACMON.exe [2012-11-29] (ASUS)
    Task: {8383D82D-B48B-4F77-8795-4D78EC4BA07C} - System32\Tasks\ASUS Touchpad Launcher (x64) => C:\Program Files (x86)\ASUS\ASUS Smart Gesture\AsTPCenter\x64\AsusTPLauncher.exe [2013-01-16] (AsusTek)
    Task: {9F7A383E-34F0-40BE-82C1-135C0F8E5002} - System32\Tasks\ASUS Splendid ColorU => C:\Program Files (x86)\ASUS\Splendid\ColorUService.exe [2012-11-29] ()
    Task: {BAB0BC2D-9BB5-4D0F-AF93-59B471188E91} - \RegClean Pro_DEFAULT No Task File <==== ATTENTION
    Task: {BE1EE08A-5618-43C5-9EB1-A54B1C8A7492} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2014-03-11] (Google Inc.)
    Task: {C3B2E072-D8AB-4DBB-866A-B4445AA423FF} - \avastBCLRestartS-1-5-21-36292207-1243957256-28351842-1001 No Task File <==== ATTENTION
    Task: {C667D5F0-683B-41CA-A75B-2152E6269781} - System32\Tasks\OfficeSoftwareProtectionPlatform\SvcRestartTask => Sc.exe start osppsvc
    Task: {DFC4E633-F4F4-48D7-8454-38033A0D4A68} - System32\Tasks\Microsoft\Windows\Setup\gwx\refreshgwxconfig => C:\Windows\system32\GWX\GWXConfigManager.exe [2015-03-24] (Microsoft Corporation)
    Task: {E0164CCE-AACB-4764-B92F-CD436ACB5A0B} - System32\Tasks\{75ABC5FA-5EE6-4D62-9E70-507661C63F9F} => pcalua.exe -a "C:\Program Files (x86)\Mv2Player\Mv2PlayerPlus.exe" -d "C:\Program Files (x86)\Mv2Player"
    Task: {ECE7EDEC-5CDE-4FD6-BC6F-D75B935B0A08} - \RegClean Pro No Task File <==== ATTENTION
    Task: {EDA88410-3E5B-4613-906C-4D563A3639E1} - System32\Tasks\Microsoft\Office\Office ClickToRun Service Monitor => C:\Program Files\Microsoft Office 15\ClientX64\OfficeC2RClient.exe [2015-02-10] (Microsoft Corporation)
    Task: {F2C89EFE-BA47-4859-AAD6-7CB988A93CB4} - System32\Tasks\Norton Product InstallerIdle => C:\Users\OKAYOK~1\AppData\Local\Temp\is1219359723\18122B8A_stp\SymInstallStub.exe <==== ATTENTION
    Task: {F9916D50-4C0C-4D49-BB8A-1AE79084ECAB} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2015-04-14] (Adobe Systems Incorporated)
    Task: C:\WINDOWS\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
    Task: C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
    Task: C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
    Task: C:\WINDOWS\Tasks\Norton Product InstallerIdle.job => C:\Users\OKAYOK~1\AppData\Local\Temp\is1219359723\18122B8A_stp\SymInstallStub.exe

    ==================== Loaded Modules (whitelisted) ==============

    2014-12-14 12:24 - 2014-05-20 08:19 - 00105640 _____ () C:\Program Files\Microsoft Office 15\ClientX64\ApiClient.dll
    2012-12-28 13:07 - 2012-12-28 13:07 - 00011264 _____ () C:\Program Files (x86)\Bluetooth Suite\Modules\ActivateDesktopDebugger\ActivateDesktopDebugger.dll
    2012-12-28 13:04 - 2012-12-28 13:04 - 00084480 _____ () C:\Program Files (x86)\Bluetooth Suite\Modules\Map\MAP.dll
    2014-01-29 23:02 - 2014-01-29 23:02 - 00094208 _____ () C:\Windows\System32\IccLibDll_x64.dll
    2012-12-28 13:09 - 2012-12-28 13:09 - 00012928 _____ () C:\Program Files (x86)\Bluetooth Suite\ActivateDesktop.exe
    2012-08-24 18:26 - 2012-08-24 18:26 - 00031360 _____ () C:\Program Files\ASUS\P4G\DevMng.dll
    2013-08-22 08:19 - 2013-08-22 07:54 - 00049664 _____ () C:\WINDOWS\system32\WinMetadata\Windows.Graphics.winmd
    2013-08-22 08:19 - 2013-08-22 07:54 - 00030208 _____ () C:\WINDOWS\system32\WinMetadata\Windows.Foundation.winmd
    2012-11-29 18:15 - 2012-11-29 18:15 - 00171224 _____ () C:\Program Files (x86)\ASUS\Splendid\ColorUService.exe
    2013-02-18 17:03 - 2012-06-25 11:41 - 01198912 _____ () C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\ACE.dll

    ==================== Alternate Data Streams (whitelisted) =========

    (If an entry is included in the fixlist, only the Alternate Data Streams will be removed.)

    AlternateDataStreams: C:\ProgramData\TEMP:C5831B98
    AlternateDataStreams: C:\Users\okayokay-pc\OneDrive:ms-properties

    ==================== Safe Mode (whitelisted) ===================

    (If an item is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)


    ==================== EXE Association (whitelisted) ===============

    (If an entry is included in the fixlist, the default will be restored. None default entries will be removed.)


    ==================== Internet Explorer trusted/restricted ===============

    (If an entry is included in the fixlist, the associated entry will be removed from the registry.)

    IE trusted site: HKU\S-1-5-21-36292207-1243957256-28351842-1001\...\sharepoint.com -> hxxps://sionhighschool.sharepoint.com


    ==================== Other Areas ============================

    (Currently there is no automatic fix for this section.)

    HKU\S-1-5-21-36292207-1243957256-28351842-1001\Control Panel\Desktop\\Wallpaper -> C:\Users\okayokay-pc\Desktop\11146006_1078282468865224_978787482_n.jpg
    DNS Servers: 89.190.65.200 - 89.190.64.20

    ==================== MSCONFIG/TASK MANAGER disabled items ==

    (Currently there is no automatic fix for this section.)

    MSCONFIG\startupreg: Adobe ARM => "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
    MSCONFIG\startupreg: Adobe Reader Speed Launcher => "C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Reader_sl.exe"
    MSCONFIG\startupreg: ASUSPRP => "C:\Program Files (x86)\ASUS\APRP\APRP.EXE"
    MSCONFIG\startupreg: ASUSWebStorage => C:\Program Files (x86)\ASUS\WebStorage Sync Agent\1.1.10.123\AsusWSPanel.exe /S
    MSCONFIG\startupreg: DisableS3S4 => c:\windows\temp\DisableS3S464\sethigh.cmd
    MSCONFIG\startupreg: RtHDVBg => C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe /MAXX3
    MSCONFIG\startupreg: RTHDVCPL => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe -s
    HKLM\...\StartupApproved\Run32: => "AvastUI.exe"
    HKU\S-1-5-21-36292207-1243957256-28351842-1001\...\StartupApproved\Run: => "Skype"

    ==================== Accounts: =============================

    Administrator (S-1-5-21-36292207-1243957256-28351842-500 - Administrator - Disabled)
    Guest (S-1-5-21-36292207-1243957256-28351842-501 - Limited - Disabled)
    okayokay-pc (S-1-5-21-36292207-1243957256-28351842-1001 - Administrator - Enabled) => C:\Users\okayokay-pc

    ==================== Faulty Device Manager Devices =============


    ==================== Event log errors: =========================

    Application errors:
    ==================
    Error: (04/24/2015 09:12:44 PM) (Source: SideBySide) (EventID: 35) (User: )
    Description: Generování kontextu aktivace pro UccApi,processorArchitecture="AMD64",type="win32",version="15.0.0.0"1 se nezdařilo. Chyba v souboru manifestu nebo zásady UccApi,processorArchitecture="AMD64",type="win32",version="15.0.0.0"2 na řádku UccApi,processorArchitecture="AMD64",type="win32",version="15.0.0.0"3.
    Identita komponenty nalezená v manifestu nesouhlasí s identitou požadované komponenty.
    Odkaz je UccApi,processorArchitecture="AMD64",type="win32",version="15.0.0.0".
    Definice je UccApi,processorArchitecture="x86",type="win32",version="15.0.0.0".
    Podrobnější diagnostické údaje získáte pomocí programu sxstrace.exe.

    Error: (04/24/2015 08:39:25 PM) (Source: SideBySide) (EventID: 35) (User: )
    Description: Generování kontextu aktivace pro UccApi,processorArchitecture="AMD64",type="win32",version="15.0.0.0"1 se nezdařilo. Chyba v souboru manifestu nebo zásady UccApi,processorArchitecture="AMD64",type="win32",version="15.0.0.0"2 na řádku UccApi,processorArchitecture="AMD64",type="win32",version="15.0.0.0"3.
    Identita komponenty nalezená v manifestu nesouhlasí s identitou požadované komponenty.
    Odkaz je UccApi,processorArchitecture="AMD64",type="win32",version="15.0.0.0".
    Definice je UccApi,processorArchitecture="x86",type="win32",version="15.0.0.0".
    Podrobnější diagnostické údaje získáte pomocí programu sxstrace.exe.

    Error: (04/24/2015 07:19:30 PM) (Source: Application Error) (EventID: 1000) (User: )
    Description: Název chybující aplikace: MsMpEng.exe, verze: 4.7.205.0, časové razítko: 0x54cb5aeb
    Název chybujícího modulu: mpengine.dll, verze: 1.1.9700.0, časové razítko: 0x51d28fcb
    Kód výjimky: 0xc0000005
    Posun chyby: 0x00000000005615b7
    ID chybujícího procesu: 0x700
    Čas spuštění chybující aplikace: 0xMsMpEng.exe0
    Cesta k chybující aplikaci: MsMpEng.exe1
    Cesta k chybujícímu modulu: MsMpEng.exe2
    ID zprávy: MsMpEng.exe3
    Úplný název chybujícího balíčku: MsMpEng.exe4
    ID aplikace související s chybujícím balíčkem: MsMpEng.exe5

    Error: (04/23/2015 06:34:48 AM) (Source: SideBySide) (EventID: 35) (User: )
    Description: Generování kontextu aktivace pro UccApi,processorArchitecture="AMD64",type="win32",version="15.0.0.0"1 se nezdařilo. Chyba v souboru manifestu nebo zásady UccApi,processorArchitecture="AMD64",type="win32",version="15.0.0.0"2 na řádku UccApi,processorArchitecture="AMD64",type="win32",version="15.0.0.0"3.
    Identita komponenty nalezená v manifestu nesouhlasí s identitou požadované komponenty.
    Odkaz je UccApi,processorArchitecture="AMD64",type="win32",version="15.0.0.0".
    Definice je UccApi,processorArchitecture="x86",type="win32",version="15.0.0.0".
    Podrobnější diagnostické údaje získáte pomocí programu sxstrace.exe.

    Error: (04/22/2015 09:04:55 PM) (Source: SideBySide) (EventID: 35) (User: )
    Description: Generování kontextu aktivace pro UccApi,processorArchitecture="AMD64",type="win32",version="15.0.0.0"1 se nezdařilo. Chyba v souboru manifestu nebo zásady UccApi,processorArchitecture="AMD64",type="win32",version="15.0.0.0"2 na řádku UccApi,processorArchitecture="AMD64",type="win32",version="15.0.0.0"3.
    Identita komponenty nalezená v manifestu nesouhlasí s identitou požadované komponenty.
    Odkaz je UccApi,processorArchitecture="AMD64",type="win32",version="15.0.0.0".
    Definice je UccApi,processorArchitecture="x86",type="win32",version="15.0.0.0".
    Podrobnější diagnostické údaje získáte pomocí programu sxstrace.exe.

    Error: (04/22/2015 09:17:57 PM) (Source: Microsoft-Windows-AppModel-State) (EventID: 10) (User: VIQULINKA)
    Description: windows_ie_ac_0013

    Error: (04/22/2015 09:17:57 PM) (Source: Microsoft-Windows-AppModel-State) (EventID: 10) (User: VIQULINKA)
    Description: oice_15_974fa576_32c1d314_b033

    Error: (04/22/2015 09:17:57 PM) (Source: Microsoft-Windows-AppModel-State) (EventID: 10) (User: VIQULINKA)
    Description: oice_15_974fa576_32c1d314_8bd3

    Error: (04/22/2015 09:17:57 PM) (Source: Microsoft-Windows-AppModel-State) (EventID: 10) (User: VIQULINKA)
    Description: oice_15_974fa576_32c1d314_33c93

    Error: (04/22/2015 09:17:57 PM) (Source: Microsoft-Windows-AppModel-State) (EventID: 10) (User: VIQULINKA)
    Description: oice_15_974fa576_32c1d314_323a3


    System errors:
    =============
    Error: (04/24/2015 08:52:00 PM) (Source: DCOM) (EventID: 10010) (User: VIQULINKA)
    Description: {D63B10C5-BB46-4990-A94F-E40B9D520160}

    Error: (04/24/2015 09:24:36 PM) (Source: Service Control Manager) (EventID: 7030) (User: )
    Description: Služba PEVSystemStart je označena jako interaktivní služba. Avšak systém je nakonfigurován tak, že neumožňuje použití interaktivní služby. Tato služba nebude fungovat správně.

    Error: (04/24/2015 09:24:35 PM) (Source: Service Control Manager) (EventID: 7030) (User: )
    Description: Služba PEVSystemStart je označena jako interaktivní služba. Avšak systém je nakonfigurován tak, že neumožňuje použití interaktivní služby. Tato služba nebude fungovat správně.

    Error: (04/24/2015 09:24:35 PM) (Source: Service Control Manager) (EventID: 7030) (User: )
    Description: Služba PEVSystemStart je označena jako interaktivní služba. Avšak systém je nakonfigurován tak, že neumožňuje použití interaktivní služby. Tato služba nebude fungovat správně.

    Error: (04/24/2015 09:24:34 PM) (Source: Service Control Manager) (EventID: 7030) (User: )
    Description: Služba PEVSystemStart je označena jako interaktivní služba. Avšak systém je nakonfigurován tak, že neumožňuje použití interaktivní služby. Tato služba nebude fungovat správně.

    Error: (04/24/2015 09:24:34 PM) (Source: Service Control Manager) (EventID: 7030) (User: )
    Description: Služba PEVSystemStart je označena jako interaktivní služba. Avšak systém je nakonfigurován tak, že neumožňuje použití interaktivní služby. Tato služba nebude fungovat správně.

    Error: (04/24/2015 08:56:40 PM) (Source: Microsoft-Windows-Kernel-Power) (EventID: 137) (User: )
    Description: 4

    Error: (04/24/2015 08:34:25 PM) (Source: Service Control Manager) (EventID: 7031) (User: )
    Description: Služba Windows Search byla nečekaně ukončena. Stalo se to 2 krát. Následující opravná akce bude spuštěna za 30000 milisekund: Restartovat službu.

    Error: (04/24/2015 08:34:25 PM) (Source: Service Control Manager) (EventID: 7031) (User: )
    Description: Služba Služba zařazování tisku byla nečekaně ukončena. Stalo se to 2 krát. Následující opravná akce bude spuštěna za 5000 milisekund: Restartovat službu.

    Error: (04/24/2015 08:34:25 PM) (Source: Service Control Manager) (EventID: 7031) (User: )
    Description: Služba Intel(R) Capability Licensing Service Interface byla nečekaně ukončena. Stalo se to 1 krát. Následující opravná akce bude spuštěna za 0 milisekund: Restartovat službu.


    Microsoft Office Sessions:
    =========================

    CodeIntegrity Errors:
    ===================================
    Date: 2015-04-24 21:38:25.195
    Description: Code Integrity determined that a process (\Device\HarddiskVolume4\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume4\PROGRA~1\COMMON~1\MICROS~1\OFFICE12\MSOXMLMF.DLL that did not meet the Custom 3 / Antimalware signing level requirements.


    ==================== Memory info ===========================

    Processor: Intel(R) Celeron(R) CPU 847 @ 1.10GHz
    Percentage of memory in use: 36%
    Total physical RAM: 3979.61 MB
    Available physical RAM: 2538.66 MB
    Total Pagefile: 4683.61 MB
    Available Pagefile: 3050.98 MB
    Total Virtual: 131072 MB
    Available Virtual: 131071.8 MB

    ==================== Drives ================================

    Drive c: (OS) (Fixed) (Total:118.8 GB) (Free:39.23 GB) NTFS ==>[System with boot components (obtained from reading drive)]
    Drive d: (Data) (Fixed) (Total:157.55 GB) (Free:157.22 GB) NTFS
    Drive e: (PUBLIC) (Removable) (Total:7.45 GB) (Free:3.91 GB) FAT32

    ==================== MBR & Partition Table ==================

    ========================================================
    Disk: 0 (Size: 298.1 GB) (Disk ID: 1FEB4A9B)

    Partition: GPT Partition Type.

    ========================================================
    Disk: 1 (MBR Code: Windows XP) (Size: 7.5 GB) (Disk ID: C3072E18)
    Partition 1: (Not Active) - (Size=7.4 GB) - (Type=0C)

    ==================== End Of Log ============================
Nahoru
Uživatelský avatar
Rudy
Site Admin
Site Admin
Příspěvky: 119677
Registrován: 30 říj 2003 13:42
Bydliště: Plzeň
Kontaktovat uživatele:
Kontaktovat uživatele Rudy

Re: Tak jsem tu zase :) A prosím o kontrolu logu prosím :)

#2 Příspěvek od Rudy »

Zdravím!
Spusťte tuto utilitu:
Stáhněte AdwCleaner http://general-changelog-team.fr/fr/dow ... adwcleaner
Uložte na plochu
Ukončete všechny programy
Klikněte nejprve na >Scan< a pak na >Clean<.
Proběhne skenováni a pak se objeví log, který sem vložte.
Dotazy a logy vkládejte pouze do vašich threadů. Soukromé zprávy, icq a e-maily neslouží k řešení vašich problémů.

Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.

Navštivte: Obrázek

e-mail: rudy(zavináč)forum.viry.cz

Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!


Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Nahoru
HornyCZ
Návštěvník
Návštěvník
Příspěvky: 25
Registrován: 22 dub 2015 10:08

Re: Tak jsem tu zase :) A prosím o kontrolu logu prosím :)

#3 Příspěvek od HornyCZ »

Děkuji za odpověď, ale tento krok jsem už učinil sám :) A výsledkem bylo následné odstranění několika problémů a mám pocit, že několik z nich jsou vloženy do karantény. Ty vám k této odpovědi doložím

AdwCleaner[RO]

  • # AdwCleaner v4.202 - Log vytvořen 24/04/2015 v 20:31:26
    # Aktualizováno 23/04/2015 by Xplode
    # Databáze : 2015-04-23.2 [Server]
    # Operační system : Windows 8.1 (x64)
    # Uživatelské jméno : okayokay-pc - VIQULINKA
    # Spuštěno z : C:\Users\okayokay-pc\Downloads\adwcleaner_4.202.exe
    # Nastavení : Sken

    ***** [ Služby ] *****

    Služba Nalezeno : sp_rsdrv2
    Služba Nalezeno : {572f484b-455f-44b0-9d6a-da3ad2071365}w64
    Služba Nalezeno : {646e947e-f0e6-4d0e-b21e-d62ca97183e2}Gw64
    Služba Nalezeno : {646e947e-f0e6-4d0e-b21e-d62ca97183e2}w64

    ***** [ Soubory / Složky ] *****

    Složka Nalezeno : C:\Program Files (x86)\Probit Software
    Složka Nalezeno : C:\Program Files (x86)\webporpoise
    Složka Nalezeno : C:\Users\okayokay-pc\AppData\Local\pay-by-ads
    Složka Nalezeno : C:\Users\okayokay-pc\AppData\Roaming\Probit Software
    Soubor Nalezeno : C:\END
    Soubor Nalezeno : C:\Users\okayokay-pc\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_bsplayer.en.softonic.com_0.localstorage
    Soubor Nalezeno : C:\Users\okayokay-pc\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_bsplayer.en.softonic.com_0.localstorage-journal
    Soubor Nalezeno : C:\Users\okayokay-pc\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_cs.reimageplus.com_0.localstorage
    Soubor Nalezeno : C:\Users\okayokay-pc\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_cs.reimageplus.com_0.localstorage-journal
    Soubor Nalezeno : C:\Users\okayokay-pc\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_en.softonic.com_0.localstorage
    Soubor Nalezeno : C:\Users\okayokay-pc\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_en.softonic.com_0.localstorage-journal
    Soubor Nalezeno : C:\Users\okayokay-pc\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_mozilla-firefox.en.softonic.com_0.localstorage
    Soubor Nalezeno : C:\Users\okayokay-pc\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_mozilla-firefox.en.softonic.com_0.localstorage-journal
    Soubor Nalezeno : C:\Users\okayokay-pc\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_plarium.com_0.localstorage
    Soubor Nalezeno : C:\Users\okayokay-pc\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_plarium.com_0.localstorage-journal
    Soubor Nalezeno : C:\Users\okayokay-pc\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_vlc-windows-8.en.softonic.com_0.localstorage
    Soubor Nalezeno : C:\Users\okayokay-pc\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_vlc-windows-8.en.softonic.com_0.localstorage-journal
    Soubor Nalezeno : C:\Users\okayokay-pc\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_wlogin.icq.com_0.localstorage
    Soubor Nalezeno : C:\Users\okayokay-pc\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_wlogin.icq.com_0.localstorage-journal
    Soubor Nalezeno : C:\Users\okayokay-pc\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_www.mysearchpage.net_0.localstorage
    Soubor Nalezeno : C:\Users\okayokay-pc\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_www.mysearchpage.net_0.localstorage-journal
    Soubor Nalezeno : C:\Users\okayokay-pc\AppData\Roaming\Mozilla\Firefox\Profiles\zbxssnxh.default\searchplugins\dsrlte.xml
    Soubor Nalezeno : C:\WINDOWS\System32\drivers\{572f484b-455f-44b0-9d6a-da3ad2071365}w64.sys
    Soubor Nalezeno : C:\WINDOWS\System32\drivers\{646e947e-f0e6-4d0e-b21e-d62ca97183e2}Gw64.sys
    Soubor Nalezeno : C:\WINDOWS\System32\drivers\{646e947e-f0e6-4d0e-b21e-d62ca97183e2}w64.sys
    Soubor Nalezeno : C:\WINDOWS\System32\roboot64.exe

    ***** [ Naplánované úlohy ] *****

    Úloha Nalezeno : Yahoo! Search
    Úloha Nalezeno : Yahoo! Search Updater

    ***** [ Zástupci ] *****


    ***** [ Registry ] *****

    Hodnota Nalezeno : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{31264A33-A653-46C4-AF49-1232C59A7DA5}]
    Klíč Nalezeno : HKCU\Software\Classes\keepmysearch
    Klíč Nalezeno : HKCU\Software\Easy Speed Check
    Klíč Nalezeno : HKCU\Software\Google\Chrome\Extensions\fcfenmboojpjinhpgggodefccipikbpd
    Klíč Nalezeno : HKCU\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage\ask.com
    Klíč Nalezeno : HKCU\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage\icq.com
    Klíč Nalezeno : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{6EDDD673-7548-421E-A704-4704A324F88E}
    Klíč Nalezeno : HKCU\Software\webporpoise
    Klíč Nalezeno : [x64] HKCU\Software\Easy Speed Check
    Klíč Nalezeno : [x64] HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{6EDDD673-7548-421E-A704-4704A324F88E}
    Klíč Nalezeno : [x64] HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{8A244612-A1F7-11E0-95C0-E71F4824019B}
    Klíč Nalezeno : [x64] HKCU\Software\webporpoise
    Klíč Nalezeno : HKLM\SOFTWARE\Classes\CLSID\{1AA60054-57D9-4F99-9A55-D0FBFBE7ECD3}
    Klíč Nalezeno : HKLM\SOFTWARE\Classes\CLSID\{3A1209A4-8568-40F0-9B5E-4A06A2A06417}
    Klíč Nalezeno : HKLM\SOFTWARE\Classes\CLSID\{4AA46D49-459F-4358-B4D1-169048547C23}
    Klíč Nalezeno : HKLM\SOFTWARE\Classes\CLSID\{5A4E3A41-FA55-4BDA-AED7-CEBE6E7BCB52}
    Klíč Nalezeno : HKLM\SOFTWARE\Classes\CLSID\{5A4E3A41-FA55-4BDA-AED7-CEBE6E7BCB52}
    Klíč Nalezeno : HKLM\SOFTWARE\Classes\Interface\{4E6354DE-9115-4AEE-BD21-C46C3E8A49DB}
    Klíč Nalezeno : HKLM\SOFTWARE\Classes\Interface\{FC073BDA-C115-4A1D-9DF9-9B5C461482E5}
    Klíč Nalezeno : HKLM\SOFTWARE\Classes\Toolbar.CT3329621
    Klíč Nalezeno : HKLM\SOFTWARE\Classes\TypeLib\{A2D733A7-73B0-4C6B-B0C7-06A432950B66}
    Klíč Nalezeno : HKLM\SOFTWARE\Classes\TypeLib\{A2D733A7-73B0-4C6B-B0C7-06A432950B66}
    Klíč Nalezeno : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{D1DAC034-9FD9-4C13-A388-D2E10E57707F}
    Klíč Nalezeno : HKLM\SOFTWARE\webporpoise
    Klíč Nalezeno : HKLM\SYSTEM\CurrentControlSet\Services\EventLog\Application\Update webporpoise
    Klíč Nalezeno : HKLM\SYSTEM\CurrentControlSet\Services\EventLog\Application\Util webporpoise
    Klíč Nalezeno : [x64] HKLM\SOFTWARE\Classes\CLSID\{31264A33-A653-46C4-AF49-1232C59A7DA5}
    Klíč Nalezeno : [x64] HKLM\SOFTWARE\Classes\CLSID\{3A1209A4-8568-40F0-9B5E-4A06A2A06417}
    Klíč Nalezeno : [x64] HKLM\SOFTWARE\Classes\CLSID\{4AA46D49-459F-4358-B4D1-169048547C23}
    Klíč Nalezeno : [x64] HKLM\SOFTWARE\Classes\CLSID\{5A4E3A41-FA55-4BDA-AED7-CEBE6E7BCB52}
    Klíč Nalezeno : [x64] HKLM\SOFTWARE\Classes\CLSID\{5A4E3A41-FA55-4BDA-AED7-CEBE6E7BCB52}
    Klíč Nalezeno : [x64] HKLM\SOFTWARE\Classes\Interface\{4E6354DE-9115-4AEE-BD21-C46C3E8A49DB}
    Klíč Nalezeno : [x64] HKLM\SOFTWARE\Classes\Interface\{FC073BDA-C115-4A1D-9DF9-9B5C461482E5}
    Klíč Nalezeno : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\webporpoise

    ***** [ Prohlížeče ] *****

    -\\ Internet Explorer v11.0.9600.17416


    -\\ Mozilla Firefox v

    [zbxssnxh.default] - Řádek Nalezeno : user_pref("browser.newtab.url", "hxxp://rts.dsrlte.com/?m=tab&affID=na");

    -\\ Google Chrome v42.0.2311.90

    [C:\Users\okayokay-pc\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences] - Nalezeno [Extension] : aaaaabcbmongicmdegkmmfgdickgnnob
    [C:\Users\okayokay-pc\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences] - Nalezeno [Extension] : fcfenmboojpjinhpgggodefccipikbpd

    *************************

    AdwCleaner[R0].txt - [7220 bytů] - [24/04/2015 20:31:26]

    ########## EOF - C:\AdwCleaner\AdwCleaner[R0].txt - [7278 bytů] ##########

AdwCleaner[SO]



  • # AdwCleaner v4.202 - Log vytvořen 24/04/2015 v 20:34:07
    # Aktualizováno 23/04/2015 by Xplode
    # Databáze : 2015-04-23.2 [Server]
    # Operační system : Windows 8.1 (x64)
    # Uživatelské jméno : okayokay-pc - VIQULINKA
    # Spuštěno z : C:\Users\okayokay-pc\Downloads\adwcleaner_4.202.exe
    # Nastavení : Čištění

    ***** [ Služby ] *****

    Služba Smazáno : {572f484b-455f-44b0-9d6a-da3ad2071365}w64
    Služba Smazáno : {646e947e-f0e6-4d0e-b21e-d62ca97183e2}Gw64
    Služba Smazáno : {646e947e-f0e6-4d0e-b21e-d62ca97183e2}w64

    ***** [ Soubory / Složky ] *****

    Složka Smazáno : C:\Program Files (x86)\Probit Software
    Složka Smazáno : C:\Program Files (x86)\webporpoise
    Složka Smazáno : C:\Users\okayokay-pc\AppData\Local\pay-by-ads
    Složka Smazáno : C:\Users\okayokay-pc\AppData\Roaming\Probit Software
    Soubor Smazáno : C:\END
    Soubor Smazáno : C:\WINDOWS\System32\roboot64.exe
    Soubor Smazáno : C:\WINDOWS\System32\drivers\{572f484b-455f-44b0-9d6a-da3ad2071365}w64.sys
    Soubor Smazáno : C:\WINDOWS\System32\drivers\{646e947e-f0e6-4d0e-b21e-d62ca97183e2}Gw64.sys
    Soubor Smazáno : C:\WINDOWS\System32\drivers\{646e947e-f0e6-4d0e-b21e-d62ca97183e2}w64.sys
    Soubor Smazáno : C:\Users\okayokay-pc\AppData\Roaming\Mozilla\Firefox\Profiles\zbxssnxh.default\searchplugins\dsrlte.xml
    Soubor Smazáno : C:\Users\okayokay-pc\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_bsplayer.en.softonic.com_0.localstorage
    Soubor Smazáno : C:\Users\okayokay-pc\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_bsplayer.en.softonic.com_0.localstorage-journal
    Soubor Smazáno : C:\Users\okayokay-pc\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_cs.reimageplus.com_0.localstorage
    Soubor Smazáno : C:\Users\okayokay-pc\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_cs.reimageplus.com_0.localstorage-journal
    Soubor Smazáno : C:\Users\okayokay-pc\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_en.softonic.com_0.localstorage
    Soubor Smazáno : C:\Users\okayokay-pc\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_en.softonic.com_0.localstorage-journal
    Soubor Smazáno : C:\Users\okayokay-pc\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_mozilla-firefox.en.softonic.com_0.localstorage
    Soubor Smazáno : C:\Users\okayokay-pc\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_mozilla-firefox.en.softonic.com_0.localstorage-journal
    Soubor Smazáno : C:\Users\okayokay-pc\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_plarium.com_0.localstorage
    Soubor Smazáno : C:\Users\okayokay-pc\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_plarium.com_0.localstorage-journal
    Soubor Smazáno : C:\Users\okayokay-pc\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_vlc-windows-8.en.softonic.com_0.localstorage
    Soubor Smazáno : C:\Users\okayokay-pc\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_vlc-windows-8.en.softonic.com_0.localstorage-journal
    Soubor Smazáno : C:\Users\okayokay-pc\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_wlogin.icq.com_0.localstorage
    Soubor Smazáno : C:\Users\okayokay-pc\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_wlogin.icq.com_0.localstorage-journal
    Soubor Smazáno : C:\Users\okayokay-pc\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_www.mysearchpage.net_0.localstorage
    Soubor Smazáno : C:\Users\okayokay-pc\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_www.mysearchpage.net_0.localstorage-journal

    ***** [ Naplánované úlohy ] *****

    Úloha Smazáno : Yahoo! Search
    Úloha Smazáno : Yahoo! Search Updater

    ***** [ Zástupci ] *****


    ***** [ Registry ] *****

    Klíč Smazáno : HKCU\Software\Google\Chrome\Extensions\fcfenmboojpjinhpgggodefccipikbpd
    Klíč Smazáno : HKCU\Software\Classes\keepmysearch
    Klíč Smazáno : HKLM\SYSTEM\CurrentControlSet\Services\EventLog\Application\Update webporpoise
    Klíč Smazáno : HKLM\SYSTEM\CurrentControlSet\Services\EventLog\Application\Util webporpoise
    Klíč Smazáno : HKLM\SOFTWARE\Classes\Toolbar.CT3329621
    Klíč Smazáno : HKLM\SOFTWARE\Classes\CLSID\{1AA60054-57D9-4F99-9A55-D0FBFBE7ECD3}
    Klíč Smazáno : HKLM\SOFTWARE\Classes\CLSID\{4AA46D49-459F-4358-B4D1-169048547C23}
    Klíč Smazáno : HKLM\SOFTWARE\Classes\CLSID\{5A4E3A41-FA55-4BDA-AED7-CEBE6E7BCB52}
    Klíč Smazáno : HKLM\SOFTWARE\Classes\CLSID\{3A1209A4-8568-40F0-9B5E-4A06A2A06417}
    Klíč Smazáno : HKLM\SOFTWARE\Classes\Interface\{4E6354DE-9115-4AEE-BD21-C46C3E8A49DB}
    Klíč Smazáno : HKLM\SOFTWARE\Classes\Interface\{FC073BDA-C115-4A1D-9DF9-9B5C461482E5}
    Klíč Smazáno : HKLM\SOFTWARE\Classes\TypeLib\{A2D733A7-73B0-4C6B-B0C7-06A432950B66}
    Klíč Smazáno : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{D1DAC034-9FD9-4C13-A388-D2E10E57707F}
    Klíč Smazáno : [x64] HKLM\SOFTWARE\Classes\CLSID\{4AA46D49-459F-4358-B4D1-169048547C23}
    Klíč Smazáno : [x64] HKLM\SOFTWARE\Classes\CLSID\{5A4E3A41-FA55-4BDA-AED7-CEBE6E7BCB52}
    Klíč Smazáno : [x64] HKLM\SOFTWARE\Classes\CLSID\{3A1209A4-8568-40F0-9B5E-4A06A2A06417}
    Klíč Smazáno : [x64] HKLM\SOFTWARE\Classes\CLSID\{31264A33-A653-46C4-AF49-1232C59A7DA5}
    Klíč Smazáno : [x64] HKLM\SOFTWARE\Classes\Interface\{4E6354DE-9115-4AEE-BD21-C46C3E8A49DB}
    Klíč Smazáno : [x64] HKLM\SOFTWARE\Classes\Interface\{FC073BDA-C115-4A1D-9DF9-9B5C461482E5}
    Hodnota Smazáno : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{31264A33-A653-46C4-AF49-1232C59A7DA5}]
    Klíč Smazáno : [x64] HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{8A244612-A1F7-11E0-95C0-E71F4824019B}
    Klíč Smazáno : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{6EDDD673-7548-421E-A704-4704A324F88E}
    Klíč Smazáno : HKCU\Software\Easy Speed Check
    Klíč Smazáno : HKCU\Software\webporpoise
    Klíč Smazáno : HKLM\SOFTWARE\webporpoise
    Klíč Smazáno : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\webporpoise
    Klíč Smazáno : HKCU\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage\ask.com
    Klíč Smazáno : HKCU\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage\icq.com

    ***** [ Prohlížeče ] *****

    -\\ Internet Explorer v11.0.9600.17416


    -\\ Mozilla Firefox v

    [zbxssnxh.default\prefs.js] - Řádek Smazáno : user_pref("browser.newtab.url", "hxxp://rts.dsrlte.com/?m=tab&affID=na");

    -\\ Google Chrome v42.0.2311.90

    [C:\Users\okayokay-pc\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences] - Smazáno [Extension] : aaaaabcbmongicmdegkmmfgdickgnnob
    [C:\Users\okayokay-pc\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences] - Smazáno [Extension] : fcfenmboojpjinhpgggodefccipikbpd

    *************************

    AdwCleaner[R0].txt - [7408 bytů] - [24/04/2015 20:31:26]
    AdwCleaner[S0].txt - [6735 bytů] - [24/04/2015 20:34:07]

    ########## EOF - C:\AdwCleaner\AdwCleaner[S0].txt - [6793 bytů] ##########



AdwCleaner [Quarintine]




  • C:\Program Files (x86)\webporpoise\7za.exe->C:\AdwCleaner\Quarantine\C\Program Files (x86)\webporpoise\7za.exe.vir
    C:\Program Files (x86)\webporpoise\dgihlahjcobhicckdihcglcaolmmbgbn.crx->C:\AdwCleaner\Quarantine\C\Program Files (x86)\webporpoise\dgihlahjcobhicckdihcglcaolmmbgbn.crx.vir
    C:\Program Files (x86)\webporpoise\updatewebporpoise.InstallState->C:\AdwCleaner\Quarantine\C\Program Files (x86)\webporpoise\updatewebporpoise.InstallState.vir
    C:\Program Files (x86)\webporpoise\webporpoise.ico->C:\AdwCleaner\Quarantine\C\Program Files (x86)\webporpoise\webporpoise.ico.vir
    C:\Program Files (x86)\webporpoise\webporpoiseUninstall.exe->C:\AdwCleaner\Quarantine\C\Program Files (x86)\webporpoise\webporpoiseUninstall.exe.vir
    C:\Program Files (x86)\webporpoise\bin\646e947ef0e64d0eb21e.dll->C:\AdwCleaner\Quarantine\C\Program Files (x86)\webporpoise\bin\646e947ef0e64d0eb21e.dll.vir
    C:\Program Files (x86)\webporpoise\bin\646e947ef0e64d0eb21e64.dll->C:\AdwCleaner\Quarantine\C\Program Files (x86)\webporpoise\bin\646e947ef0e64d0eb21e64.dll.vir
    C:\Program Files (x86)\webporpoise\bin\7za.exe->C:\AdwCleaner\Quarantine\C\Program Files (x86)\webporpoise\bin\7za.exe.vir
    C:\Program Files (x86)\webporpoise\bin\BrowserAdapter.7z->C:\AdwCleaner\Quarantine\C\Program Files (x86)\webporpoise\bin\BrowserAdapter.7z.vir
    C:\Program Files (x86)\webporpoise\bin\sqlite3.dll->C:\AdwCleaner\Quarantine\C\Program Files (x86)\webporpoise\bin\sqlite3.dll.vir
    C:\Program Files (x86)\webporpoise\bin\utilwebporpoise.InstallState->C:\AdwCleaner\Quarantine\C\Program Files (x86)\webporpoise\bin\utilwebporpoise.InstallState.vir
    C:\Program Files (x86)\webporpoise\bin\webporpoise.BOAS.zip->C:\AdwCleaner\Quarantine\C\Program Files (x86)\webporpoise\bin\webporpoise.BOAS.zip.vir
    C:\Program Files (x86)\webporpoise\bin\webporpoise.BrowserAdapter.exe->C:\AdwCleaner\Quarantine\C\Program Files (x86)\webporpoise\bin\webporpoise.BrowserAdapter.exe.vir
    C:\Program Files (x86)\webporpoise\bin\webporpoise.BrowserAdapter64.exe->C:\AdwCleaner\Quarantine\C\Program Files (x86)\webporpoise\bin\webporpoise.BrowserAdapter64.exe.vir
    C:\Program Files (x86)\webporpoise\bin\webporpoise.PurBrowse.zip->C:\AdwCleaner\Quarantine\C\Program Files (x86)\webporpoise\bin\webporpoise.PurBrowse.zip.vir
    C:\Program Files (x86)\webporpoise\bin\webporpoise.PurBrowse64.exe->C:\AdwCleaner\Quarantine\C\Program Files (x86)\webporpoise\bin\webporpoise.PurBrowse64.exe.vir
    C:\Program Files (x86)\webporpoise\bin\webporpoise.PurBrowseG.zip->C:\AdwCleaner\Quarantine\C\Program Files (x86)\webporpoise\bin\webporpoise.PurBrowseG.zip.vir
    C:\Program Files (x86)\webporpoise\bin\{572f484b-455f-44b0-9d6a-da3ad2071365}.dll->C:\AdwCleaner\Quarantine\C\Program Files (x86)\webporpoise\bin\{572f484b-455f-44b0-9d6a-da3ad2071365}.dll.vir
    C:\Program Files (x86)\webporpoise\bin\{646e947e-f0e6-4d0e-b21e-d62ca97183e2}.dll->C:\AdwCleaner\Quarantine\C\Program Files (x86)\webporpoise\bin\{646e947e-f0e6-4d0e-b21e-d62ca97183e2}.dll.vir
    C:\Program Files (x86)\webporpoise\bin\{646e947e-f0e6-4d0e-b21e-d62ca97183e2}64.dll->C:\AdwCleaner\Quarantine\C\Program Files (x86)\webporpoise\bin\{646e947e-f0e6-4d0e-b21e-d62ca97183e2}64.dll.vir
    C:\Program Files (x86)\webporpoise\bin\plugins\webporpoise.GCUpdate.dll->C:\AdwCleaner\Quarantine\C\Program Files (x86)\webporpoise\bin\plugins\webporpoise.GCUpdate.dll.vir
    C:\Program Files (x86)\webporpoise\bin\plugins\webporpoise.Msvcmon.dll->C:\AdwCleaner\Quarantine\C\Program Files (x86)\webporpoise\bin\plugins\webporpoise.Msvcmon.dll.vir
    C:\Program Files (x86)\webporpoise\bin\plugins\webporpoise.PurBrowseG.dll->C:\AdwCleaner\Quarantine\C\Program Files (x86)\webporpoise\bin\plugins\webporpoise.PurBrowseG.dll.vir
    C:\Users\okayokay-pc\AppData\Local\pay-by-ads\Yahoo! Search\1.3.8.2\app.ini->C:\AdwCleaner\Quarantine\C\Users\okayokay-pc\AppData\Local\pay-by-ads\Yahoo! Search\1.3.8.2\app.ini.vir
    C:\Users\okayokay-pc\AppData\Local\pay-by-ads\Yahoo! Search\1.3.8.2\ffxtn.dll->C:\AdwCleaner\Quarantine\C\Users\okayokay-pc\AppData\Local\pay-by-ads\Yahoo! Search\1.3.8.2\ffxtn.dll.vir
    C:\Users\okayokay-pc\AppData\Local\pay-by-ads\Yahoo! Search\1.3.8.2\ieds.xml->C:\AdwCleaner\Quarantine\C\Users\okayokay-pc\AppData\Local\pay-by-ads\Yahoo! Search\1.3.8.2\ieds.xml.vir
    C:\Users\okayokay-pc\AppData\Local\pay-by-ads\Yahoo! Search\1.3.8.2\rvt.js->C:\AdwCleaner\Quarantine\C\Users\okayokay-pc\AppData\Local\pay-by-ads\Yahoo! Search\1.3.8.2\rvt.js.vir
    C:\Users\okayokay-pc\AppData\Local\pay-by-ads\Yahoo! Search\1.3.8.2\serp.js->C:\AdwCleaner\Quarantine\C\Users\okayokay-pc\AppData\Local\pay-by-ads\Yahoo! Search\1.3.8.2\serp.js.vir
    C:\Users\okayokay-pc\AppData\Local\pay-by-ads\Yahoo! Search\1.3.8.2\sqlite.dll->C:\AdwCleaner\Quarantine\C\Users\okayokay-pc\AppData\Local\pay-by-ads\Yahoo! Search\1.3.8.2\sqlite.dll.vir
    C:\Users\okayokay-pc\AppData\Local\pay-by-ads\Yahoo! Search\1.3.15.4\app.ini->C:\AdwCleaner\Quarantine\C\Users\okayokay-pc\AppData\Local\pay-by-ads\Yahoo! Search\1.3.15.4\app.ini.vir
    C:\Users\okayokay-pc\AppData\Local\pay-by-ads\Yahoo! Search\1.3.15.4\firefoxt.dll->C:\AdwCleaner\Quarantine\C\Users\okayokay-pc\AppData\Local\pay-by-ads\Yahoo! Search\1.3.15.4\firefoxt.dll.vir
    C:\Users\okayokay-pc\AppData\Local\pay-by-ads\Yahoo! Search\1.3.15.4\ieds.xml->C:\AdwCleaner\Quarantine\C\Users\okayokay-pc\AppData\Local\pay-by-ads\Yahoo! Search\1.3.15.4\ieds.xml.vir
    C:\Users\okayokay-pc\AppData\Local\pay-by-ads\Yahoo! Search\1.3.15.4\res.dll->C:\AdwCleaner\Quarantine\C\Users\okayokay-pc\AppData\Local\pay-by-ads\Yahoo! Search\1.3.15.4\res.dll.vir
    C:\Users\okayokay-pc\AppData\Local\pay-by-ads\Yahoo! Search\1.3.15.4\rvt.js->C:\AdwCleaner\Quarantine\C\Users\okayokay-pc\AppData\Local\pay-by-ads\Yahoo! Search\1.3.15.4\rvt.js.vir
    C:\Users\okayokay-pc\AppData\Local\pay-by-ads\Yahoo! Search\1.3.15.4\serp.js->C:\AdwCleaner\Quarantine\C\Users\okayokay-pc\AppData\Local\pay-by-ads\Yahoo! Search\1.3.15.4\serp.js.vir
    C:\Users\okayokay-pc\AppData\Local\pay-by-ads\Yahoo! Search\1.3.15.4\sqlite.dll->C:\AdwCleaner\Quarantine\C\Users\okayokay-pc\AppData\Local\pay-by-ads\Yahoo! Search\1.3.15.4\sqlite.dll.vir
    C:\END->C:\AdwCleaner\Quarantine\C\END.vir
    C:\WINDOWS\System32\roboot64.exe->C:\AdwCleaner\Quarantine\C\WINDOWS\System32\roboot64.exe.vir
    C:\WINDOWS\System32\drivers\{572f484b-455f-44b0-9d6a-da3ad2071365}w64.sys->C:\AdwCleaner\Quarantine\C\WINDOWS\System32\drivers\{572f484b-455f-44b0-9d6a-da3ad2071365}w64.sys.vir
    C:\WINDOWS\System32\drivers\{646e947e-f0e6-4d0e-b21e-d62ca97183e2}Gw64.sys->C:\AdwCleaner\Quarantine\C\WINDOWS\System32\drivers\{646e947e-f0e6-4d0e-b21e-d62ca97183e2}Gw64.sys.vir
    C:\WINDOWS\System32\drivers\{646e947e-f0e6-4d0e-b21e-d62ca97183e2}w64.sys->C:\AdwCleaner\Quarantine\C\WINDOWS\System32\drivers\{646e947e-f0e6-4d0e-b21e-d62ca97183e2}w64.sys.vir
    C:\Users\okayokay-pc\AppData\Roaming\Mozilla\Firefox\Profiles\zbxssnxh.default\searchplugins\dsrlte.xml->C:\AdwCleaner\Quarantine\C\Users\okayokay-pc\AppData\Roaming\Mozilla\Firefox\Profiles\zbxssnxh.default\searchplugins\dsrlte.xml.vir
    C:\Users\okayokay-pc\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_bsplayer.en.softonic.com_0.localstorage->C:\AdwCleaner\Quarantine\C\Users\okayokay-pc\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_bsplayer.en.softonic.com_0.localstorage.vir
    C:\Users\okayokay-pc\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_bsplayer.en.softonic.com_0.localstorage-journal->C:\AdwCleaner\Quarantine\C\Users\okayokay-pc\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_bsplayer.en.softonic.com_0.localstorage-journal.vir
    C:\Users\okayokay-pc\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_cs.reimageplus.com_0.localstorage->C:\AdwCleaner\Quarantine\C\Users\okayokay-pc\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_cs.reimageplus.com_0.localstorage.vir
    C:\Users\okayokay-pc\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_cs.reimageplus.com_0.localstorage-journal->C:\AdwCleaner\Quarantine\C\Users\okayokay-pc\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_cs.reimageplus.com_0.localstorage-journal.vir
    C:\Users\okayokay-pc\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_en.softonic.com_0.localstorage->C:\AdwCleaner\Quarantine\C\Users\okayokay-pc\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_en.softonic.com_0.localstorage.vir
    C:\Users\okayokay-pc\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_en.softonic.com_0.localstorage-journal->C:\AdwCleaner\Quarantine\C\Users\okayokay-pc\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_en.softonic.com_0.localstorage-journal.vir
    C:\Users\okayokay-pc\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_mozilla-firefox.en.softonic.com_0.localstorage->C:\AdwCleaner\Quarantine\C\Users\okayokay-pc\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_mozilla-firefox.en.softonic.com_0.localstorage.vir
    C:\Users\okayokay-pc\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_mozilla-firefox.en.softonic.com_0.localstorage-journal->C:\AdwCleaner\Quarantine\C\Users\okayokay-pc\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_mozilla-firefox.en.softonic.com_0.localstorage-journal.vir
    C:\Users\okayokay-pc\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_plarium.com_0.localstorage->C:\AdwCleaner\Quarantine\C\Users\okayokay-pc\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_plarium.com_0.localstorage.vir
    C:\Users\okayokay-pc\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_plarium.com_0.localstorage-journal->C:\AdwCleaner\Quarantine\C\Users\okayokay-pc\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_plarium.com_0.localstorage-journal.vir
    C:\Users\okayokay-pc\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_vlc-windows-8.en.softonic.com_0.localstorage->C:\AdwCleaner\Quarantine\C\Users\okayokay-pc\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_vlc-windows-8.en.softonic.com_0.localstorage.vir
    C:\Users\okayokay-pc\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_vlc-windows-8.en.softonic.com_0.localstorage-journal->C:\AdwCleaner\Quarantine\C\Users\okayokay-pc\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_vlc-windows-8.en.softonic.com_0.localstorage-journal.vir
    C:\Users\okayokay-pc\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_wlogin.icq.com_0.localstorage->C:\AdwCleaner\Quarantine\C\Users\okayokay-pc\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_wlogin.icq.com_0.localstorage.vir
    C:\Users\okayokay-pc\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_wlogin.icq.com_0.localstorage-journal->C:\AdwCleaner\Quarantine\C\Users\okayokay-pc\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_wlogin.icq.com_0.localstorage-journal.vir
    C:\Users\okayokay-pc\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_www.mysearchpage.net_0.localstorage->C:\AdwCleaner\Quarantine\C\Users\okayokay-pc\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_www.mysearchpage.net_0.localstorage.vir
    C:\Users\okayokay-pc\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_www.mysearchpage.net_0.localstorage-journal->C:\AdwCleaner\Quarantine\C\Users\okayokay-pc\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_www.mysearchpage.net_0.localstorage-journal.vir
Nahoru
Uživatelský avatar
Rudy
Site Admin
Site Admin
Příspěvky: 119677
Registrován: 30 říj 2003 13:42
Bydliště: Plzeň
Kontaktovat uživatele:
Kontaktovat uživatele Rudy

Re: Tak jsem tu zase :) A prosím o kontrolu logu prosím :)

#4 Příspěvek od Rudy »

Dejte nový log FRST.
Dotazy a logy vkládejte pouze do vašich threadů. Soukromé zprávy, icq a e-maily neslouží k řešení vašich problémů.

Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.

Navštivte: Obrázek

e-mail: rudy(zavináč)forum.viry.cz

Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!


Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Nahoru
HornyCZ
Návštěvník
Návštěvník
Příspěvky: 25
Registrován: 22 dub 2015 10:08

Re: Tak jsem tu zase :) A prosím o kontrolu logu prosím :)

#5 Příspěvek od HornyCZ »

Ten FRST log co jsem vám poslal, tak ten byl dělaný už po spuštění AdwClaner-u :) Omlouvám se, udělal jsem už krok dopředu :)
Nahoru
Uživatelský avatar
Rudy
Site Admin
Site Admin
Příspěvky: 119677
Registrován: 30 říj 2003 13:42
Bydliště: Plzeň
Kontaktovat uživatele:
Kontaktovat uživatele Rudy

Re: Tak jsem tu zase :) A prosím o kontrolu logu prosím :)

#6 Příspěvek od Rudy »

Otevřte poznámkový blok a zkopírujte do něj:
Start
HKLM-x32\...\Winlogon: [Userinit] [X]
ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => No File
HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer: Policy restriction <======= ATTENTION
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL =
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL =
SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
BHO: Skype Click to Call for Internet Explorer -> {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} -> C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll [2014-07-14] (Microsoft Corporation)
C:\Program Files (x86)\Skype\Toolbars
Handler: skypec2c - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll [2014-07-14] (Microsoft Corporation)
Handler-x32: skypec2c - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll [2014-07-14] (Microsoft Corporation)
CHR HKLM-x32\...\Chrome\Extension: [lifbcibllhkdhoafpjfnlhfpfgnpldfl] - C:\Program Files (x86)\Skype\Toolbars\ChromeExtension\skype_chrome_extension.crx [2014-07-14]
R2 c2cautoupdatesvc; C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe [1390176 2014-07-14] (Microsoft Corporation)
R2 c2cpnrsvc; C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe [1767520 2014-07-14] (Microsoft Corporation)
Task: {15207341-7F91-45B5-923D-77BB959B832C} - \ASUS Patch for Touch Panel No Task File <==== ATTENTION
ask: {6C49087B-D15A-49C2-BDB4-249630B40AA0} - \RegClean Pro_UPDATES No Task File <==== ATTENTION
Task: {BAB0BC2D-9BB5-4D0F-AF93-59B471188E91} - \RegClean Pro_DEFAULT No Task File <==== ATTENTION
Task: {C3B2E072-D8AB-4DBB-866A-B4445AA423FF} - \avastBCLRestartS-1-5-21-36292207-1243957256-28351842-1001 No Task File <==== ATTENTION
Task: {ECE7EDEC-5CDE-4FD6-BC6F-D75B935B0A08} - \RegClean Pro No Task File <==== ATTENTION
Task: C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
AlternateDataStreams: C:\ProgramData\TEMP:C5831B98
AlternateDataStreams: C:\Users\okayokay-pc\OneDrive:ms-properties
End
Uložte na plochu jako fixlist.txt. Spusťte znovu FRST a klikněte na >Fix<. Po skončení akce se objeví log, který sem zkopírujte.
Dotazy a logy vkládejte pouze do vašich threadů. Soukromé zprávy, icq a e-maily neslouží k řešení vašich problémů.

Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.

Navštivte: Obrázek

e-mail: rudy(zavináč)forum.viry.cz

Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!


Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Nahoru
HornyCZ
Návštěvník
Návštěvník
Příspěvky: 25
Registrován: 22 dub 2015 10:08

Re: Tak jsem tu zase :) A prosím o kontrolu logu prosím :)

#7 Příspěvek od HornyCZ »

Tak tady je výsledek Fixlogu :)

  • Fix result of Farbar Recovery Tool (FRST written by Farbar) (x64) Version: 02-05-2015
    Ran by okayokay-pc at 2015-05-03 12:53:41 Run:1
    Running from C:\Users\okayokay-pc\Desktop
    Loaded Profiles: okayokay-pc (Available profiles: okayokay-pc)
    Boot Mode: Normal
    ==============================================

    Content of fixlist:
    *****************
    Start
    HKLM-x32\...\Winlogon: [Userinit] [X]
    ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => No File
    HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer: Policy restriction <======= ATTENTION
    HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL =
    HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL =
    SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
    SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
    SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
    BHO: Skype Click to Call for Internet Explorer -> {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} -> C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll [2014-07-14] (Microsoft Corporation)
    C:\Program Files (x86)\Skype\Toolbars
    Handler: skypec2c - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll [2014-07-14] (Microsoft Corporation)
    Handler-x32: skypec2c - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll [2014-07-14] (Microsoft Corporation)
    CHR HKLM-x32\...\Chrome\Extension: [lifbcibllhkdhoafpjfnlhfpfgnpldfl] - C:\Program Files (x86)\Skype\Toolbars\ChromeExtension\skype_chrome_extension.crx [2014-07-14]
    R2 c2cautoupdatesvc; C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe [1390176 2014-07-14] (Microsoft Corporation)
    R2 c2cpnrsvc; C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe [1767520 2014-07-14] (Microsoft Corporation)
    Task: {15207341-7F91-45B5-923D-77BB959B832C} - \ASUS Patch for Touch Panel No Task File <==== ATTENTION
    ask: {6C49087B-D15A-49C2-BDB4-249630B40AA0} - \RegClean Pro_UPDATES No Task File <==== ATTENTION
    Task: {BAB0BC2D-9BB5-4D0F-AF93-59B471188E91} - \RegClean Pro_DEFAULT No Task File <==== ATTENTION
    Task: {C3B2E072-D8AB-4DBB-866A-B4445AA423FF} - \avastBCLRestartS-1-5-21-36292207-1243957256-28351842-1001 No Task File <==== ATTENTION
    Task: {ECE7EDEC-5CDE-4FD6-BC6F-D75B935B0A08} - \RegClean Pro No Task File <==== ATTENTION
    Task: C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
    Task: C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
    AlternateDataStreams: C:\ProgramData\TEMP:C5831B98
    AlternateDataStreams: C:\Users\okayokay-pc\OneDrive:ms-properties
    End
    *****************

    HKLM\Software\WOW6432Node\Microsoft\Windows NT\CurrentVersion\Winlogon\\Userinit => Value was restored successfully.
    "HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\ShellIconOverlayIdentifiers\00avast" => Key deleted successfully.
    HKCR\CLSID\{472083B0-C522-11CF-8763-00608CC02F24} => Key not found.
    "HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer" => Key deleted successfully.
    HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main\\Default_Page_URL => Value was restored successfully.
    HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main\\Default_Search_URL => Value was restored successfully.
    HKU\.DEFAULT\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope => value deleted successfully.
    HKU\S-1-5-19\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope => value deleted successfully.
    HKU\S-1-5-20\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope => value deleted successfully.
    "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}" => Key deleted successfully.
    "HKCR\CLSID\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}" => Key deleted successfully.
    C:\Program Files (x86)\Skype\Toolbars => Moved successfully.
    "HKCR\PROTOCOLS\Handler\skypec2c" => Key deleted successfully.
    "HKCR\CLSID\{91774881-D725-4E58-B298-07617B9B86A8}" => Key deleted successfully.
    HKCR\Wow6432Node\PROTOCOLS\Handler\skypec2c => Key not found.
    "HKCR\Wow6432Node\CLSID\{91774881-D725-4E58-B298-07617B9B86A8}" => Key deleted successfully.
    "HKLM\SOFTWARE\Wow6432Node\Google\Chrome\Extensions\lifbcibllhkdhoafpjfnlhfpfgnpldfl" => Key deleted successfully.
    "C:\Program Files (x86)\Skype\Toolbars\ChromeExtension\skype_chrome_extension.crx" => File/Directory not found.
    c2cautoupdatesvc => Unable to stop service
    c2cautoupdatesvc => Service deleted successfully.
    c2cpnrsvc => Unable to stop service
    c2cpnrsvc => Service deleted successfully.
    "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{15207341-7F91-45B5-923D-77BB959B832C}" => Key deleted successfully.
    "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{15207341-7F91-45B5-923D-77BB959B832C}" => Key deleted successfully.
    "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\ASUS Patch for Touch Panel" => Key deleted successfully.
    ask: {6C49087B-D15A-49C2-BDB4-249630B40AA0} - \RegClean Pro_UPDATES No Task File <==== ATTENTION => Error: No automatic fix found for this entry.
    "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{BAB0BC2D-9BB5-4D0F-AF93-59B471188E91}" => Key deleted successfully.
    "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{BAB0BC2D-9BB5-4D0F-AF93-59B471188E91}" => Key deleted successfully.
    HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\RegClean Pro_DEFAULT => Key not found.
    "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{C3B2E072-D8AB-4DBB-866A-B4445AA423FF}" => Key deleted successfully.
    "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{C3B2E072-D8AB-4DBB-866A-B4445AA423FF}" => Key deleted successfully.
    "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\avastBCLRestartS-1-5-21-36292207-1243957256-28351842-1001" => Key deleted successfully.
    "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{ECE7EDEC-5CDE-4FD6-BC6F-D75B935B0A08}" => Key deleted successfully.
    "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{ECE7EDEC-5CDE-4FD6-BC6F-D75B935B0A08}" => Key deleted successfully.
    HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\RegClean Pro => Key not found.
    C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job => Moved successfully.
    C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job => Moved successfully.
    C:\ProgramData\TEMP => ":C5831B98" ADS removed successfully.
    C:\Users\okayokay-pc\OneDrive => ":ms-properties" ADS removed successfully.


    The system needed a reboot.

    ==== End of Fixlog 12:53:55 ====
Nahoru
Uživatelský avatar
Rudy
Site Admin
Site Admin
Příspěvky: 119677
Registrován: 30 říj 2003 13:42
Bydliště: Plzeň
Kontaktovat uživatele:
Kontaktovat uživatele Rudy

Re: Tak jsem tu zase :) A prosím o kontrolu logu prosím :)

#8 Příspěvek od Rudy »

Smazáno. Je ještě nějaký problém?
Dotazy a logy vkládejte pouze do vašich threadů. Soukromé zprávy, icq a e-maily neslouží k řešení vašich problémů.

Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.

Navštivte: Obrázek

e-mail: rudy(zavináč)forum.viry.cz

Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!


Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Nahoru
HornyCZ
Návštěvník
Návštěvník
Příspěvky: 25
Registrován: 22 dub 2015 10:08

Re: Tak jsem tu zase :) A prosím o kontrolu logu prosím :)

#9 Příspěvek od HornyCZ »

Myslím že ne, naprostá spokojenost :) Velice děkuji :)
Nahoru
Uživatelský avatar
Rudy
Site Admin
Site Admin
Příspěvky: 119677
Registrován: 30 říj 2003 13:42
Bydliště: Plzeň
Kontaktovat uživatele:
Kontaktovat uživatele Rudy

Re: Tak jsem tu zase :) A prosím o kontrolu logu prosím :)

#10 Příspěvek od Rudy »

Rádo se stalo! :)
Dotazy a logy vkládejte pouze do vašich threadů. Soukromé zprávy, icq a e-maily neslouží k řešení vašich problémů.

Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.

Navštivte: Obrázek

e-mail: rudy(zavináč)forum.viry.cz

Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!


Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Nahoru
Zamčeno

Zpět na „Řešení problémů, logy“