Problémy s vyskakujícími reklamními okny a panely

[Ivošisko]

Sorry, v první fázi jsem Tě nepochopil:

Log z MBAM:

Malwarebytes Anti-Malware (Zkušební verze Malwarebytes Anti-Malware.) 1.75.0.1300
www.malwarebytes.org

Verze: v2015.08.12.04

Windows XP Service Pack 3 x86 NTFS
Internet Explorer 8.0.6001.18702
uzivatel :: PCNEW [administrátor]

Ochrana: Povolena

12.8.2015 17:38:55
MBAM-log-2015-08-12 (20-31-15).txt

Typ: Kompletní kontrola (C:\|)
Nastavení kontroly povoleno: Paměť | Po spuštění | Registr | Systémové soubory | Heuristická analýza Extra | Heuristická analýza Shuriken | PUP | PUM
Nastavení kontroly zakázáno: P2P
Kontrolované objekty: 358756
Uplynulý čas: 53 minut, 5 sekund

Nalezené procesy v paměti: 0
(Žádné škodlivé položky nebyly zjištěny)

Nalezené moduly v paměti: 0
(Žádné škodlivé položky nebyly zjištěny)

Nalezené klíče v registru: 0
(Žádné škodlivé položky nebyly zjištěny)

Nalezené hodnoty v registru: 0
(Žádné škodlivé položky nebyly zjištěny)

Nalezené datové položky v registru: 0
(Žádné škodlivé položky nebyly zjištěny)

Nalezené složky: 0
(Žádné škodlivé položky nebyly zjištěny)

Nalezené soubory: 2
C:\Documents and Settings\uzivatel\Local Settings\Data aplikací\Google\Chrome\User Data\Default\Local Storage\https_wanderburst-a.akamaihd.net_0.localstorage (PUP.Optional.WanderBurst.A) -> Nebyla provedena žádná instrukce.
C:\Documents and Settings\uzivatel\Local Settings\Data aplikací\Google\Chrome\User Data\Default\Local Storage\https_wanderburst-a.akamaihd.net_0.localstorage-journal (PUP.Optional.WanderBurst.A) -> Nebyla provedena žádná instrukce.

(konec)

[Ivošisko]

Turistické Buřty jsou zde pořád.....

Log z RSIT:


Logfile of random's system information tool 1.10 (written by random/random)
Run by uzivatel at 2015-08-12 21:54:40
Systém Microsoft Windows XP Professional Service Pack 3
System drive C: has 24 GB (21%) free of 114 GB
Total RAM: 3007 MB (82% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 21:54:54, on 12.8.2015
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\AVAST Software\Avast\AvastSvc.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Analog Devices\Core\smax4pnp.exe
C:\Program Files\AVAST Software\Avast\AvastUI.exe
C:\Program Files\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\wuauclt.exe
C:\WINDOWS\system32\wbem\unsecapp.exe
C:\Documents and Settings\uzivatel\Plocha\RSIT.exe
C:\Program Files\trend micro\uzivatel.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Odkazy
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll
O2 - BHO: avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll
O4 - HKLM\..\Run: [JMB36X IDE Setup] C:\WINDOWS\JM\JMInsIDE.exe
O4 - HKLM\..\Run: [JMB36X Configure] C:\WINDOWS\system32\JMRaidSetup.exe boot
O4 - HKLM\..\Run: [SoundMAXPnP] C:\Program Files\Analog Devices\Core\smax4pnp.exe
O4 - HKLM\..\Run: [AvastUI.exe] "C:\Program Files\AVAST Software\Avast\AvastUI.exe" /nogui
O4 - HKLM\..\Run: [NUSB3MON] "C:\Program Files\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe"
O4 - HKCU\..\Run: [uTorrent] "C:\Documents and Settings\uzivatel\Data aplikací\uTorrent\utorrent.exe"
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Office Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: Zdroje informací - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {0CCA191D-13A6-4E29-B746-314DEE697D83} (Facebook Photo Uploader 5 Control) - http://upload.facebook.com/controls/200 ... oader5.cab
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/s ... wflash.cab
O22 - SharedTaskScheduler: Browseui preloader - {438755C2-A8BA-11D1-B96B-00A0C90312E1} - C:\WINDOWS\system32\browseui.dll
O22 - SharedTaskScheduler: Proces mezipaměti kategorií součástí - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\WINDOWS\system32\browseui.dll
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\WINDOWS\system32\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: Avast Antivirus (avast! Antivirus) - Avast Software s.r.o. - C:\Program Files\AVAST Software\Avast\AvastSvc.exe
O23 - Service: MBAMScheduler - Malwarebytes Corporation - C:\Program Files\Malwarebytes' Anti-Malware\mbamscheduler.exe
O23 - Service: MBAMService - Malwarebytes Corporation - C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe

--
End of file - 4934 bytes

======Scheduled tasks folder======

C:\WINDOWS\tasks\Adobe Flash Player Updater.job - C:\WINDOWS\system32\Macromed\Flash\FlashPlayerUpdateService.exe
C:\WINDOWS\tasks\avast! Emergency Update.job - C:\Program Files\AVAST Software\Avast\AvastEmUpdate.exe
C:\WINDOWS\tasks\User_Feed_Synchronization-{79D0B19C-05FC-4F37-8300-D83CFD8BCC1A}.job - C:\WINDOWS\system32\msfeedssync.exe sync

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
Java(tm) Plug-In SSV Helper - C:\Program Files\Java\jre7\bin\ssv.dll [2015-07-08 462760]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{8E5E2654-AD2D-48bf-AC2D-D17F00898D06}]
avast! Online Security - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2015-07-08 565304]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre7\bin\jp2ssv.dll [2015-07-08 171944]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"JMB36X IDE Setup"=C:\WINDOWS\JM\JMInsIDE.exe [2006-10-30 36864]
"JMB36X Configure"=C:\WINDOWS\system32\JMRaidSetup.exe [2006-10-30 1953792]
"SoundMAXPnP"=C:\Program Files\Analog Devices\Core\smax4pnp.exe [2006-12-18 868352]
"AvastUI.exe"=C:\Program Files\AVAST Software\Avast\AvastUI.exe [2015-07-08 5515496]
"NUSB3MON"=C:\Program Files\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe [2011-09-16 115048]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"uTorrent"=C:\Documents and Settings\uzivatel\Data aplikací\uTorrent\utorrent.exe [2015-02-22 416168]
"ctfmon.exe"=C:\WINDOWS\system32\ctfmon.exe [2008-04-14 15360]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\WgaLogon]
C:\WINDOWS\system32\WgaLogon.dll [2009-03-10 265096]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll [2006-10-18 133632]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"DisableTaskMgr"=0

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1
"SoftwareSASGeneration"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=0
"NoDrives"=0

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveAutoRun"=67108863
"NoDriveTypeAutoRun"=255
"NoDrives"=0
"HonorAutoRunSetting"=1

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"C:\Program Files\InterVideo\DVD6\WinDVD.exe"="C:\Program Files\InterVideo\DVD6\WinDVD.exe:*:Enabled:WinDVD"
"C:\Program Files\ICQ6\ICQ.exe"="C:\Program Files\ICQ6\ICQ.exe:*:Enabled:ICQ6"
"C:\Program Files\totalcmd\TOTALCMD.EXE"="C:\Program Files\totalcmd\TOTALCMD.EXE:*:Enabled:Total Commander 32 bit international version, file manager replacement for Windows"
"C:\WINDOWS\system32\winver.exe"="C:\WINDOWS\system32\winver.exe:*:Enabled:winver"
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"C:\Program Files\ICQ6.5\ICQ.exe"="C:\Program Files\ICQ6.5\ICQ.exe:*:Enabled:ICQ6"
"C:\Program Files\Sprite Software\Sprite Backup\spriteservice.exe"="C:\Program Files\Sprite Software\Sprite Backup\spriteservice.exe:*:Enabled:Sprite PC Service"
"C:\Program Files\Opera\opera.exe"="C:\Program Files\Opera\opera.exe:*:Enabled:Opera Internet Browser"
"C:\Program Files\ICQ7.5\ICQ.exe"="C:\Program Files\ICQ7.5\ICQ.exe:*:Enabled:ICQ"
"C:\Program Files\Pinnacle\Studio 15\Programs\RM.exe"="C:\Program Files\Pinnacle\Studio 15\Programs\RM.exe:*:Enabled:Render Manager"
"C:\Program Files\Pinnacle\Studio 15\Programs\Studio.exe"="C:\Program Files\Pinnacle\Studio 15\Programs\Studio.exe:*:Enabled:Studio"
"C:\Program Files\Pinnacle\Studio 15\Programs\umi.exe"="C:\Program Files\Pinnacle\Studio 15\Programs\umi.exe:*:Enabled:umi"
"C:\Documents and Settings\uzivatel\Data aplikací\uTorrent\utorrent.exe"="C:\Documents and Settings\uzivatel\Data aplikací\uTorrent\utorrent.exe:*:Enabled:µTorrent"
"C:\Program Files\Google\Chrome\Application\chrome.exe"="C:\Program Files\Google\Chrome\Application\chrome.exe:*:Enabled:Google Chrome"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"midimapper"=midimap.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msadpcm"=msadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.trspch"=tssoft32.acm
"vidc.cvid"=iccvid.dll
"vidc.I420"=msh263.drv
"vidc.iv31"=ir32_32.dll
"vidc.iv32"=ir32_32.dll
"vidc.iv41"=ir41_32.ax
"vidc.iyuv"=iyuv_32.dll
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"vidc.uyvy"=msyuv.dll
"vidc.yuy2"=msyuv.dll
"vidc.yvu9"=tsbyuv.dll
"vidc.yvyu"=msyuv.dll
"wavemapper"=msacm32.drv
"msacm.msg723"=msg723.acm
"vidc.M263"=msh263.drv
"vidc.M261"=msh261.drv
"msacm.msaudio1"=msaud32.acm
"msacm.sl_anet"=sl_anet.acm
"msacm.iac2"=C:\WINDOWS\system32\iac25_32.ax
"vidc.iv50"=ir50_32.dll
"msacm.l3acm"=C:\WINDOWS\system32\l3codeca.acm
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv
"vidc.VP60"=vp6vfw.dll
"vidc.VP61"=vp6vfw.dll
"vidc.xvid"=xvidvfw.dll
"vidc.ffds"=ff_vfw.dll
"vidc.vp62"=vp6vfw.dll
"msacm.ac3filter"=ac3filter.acm
"msacm.divxa32"=DivXa32.acm
"msacm.lameacm"=LameACM.acm
"msacm.vorbis"=vorbis.acm

======List of files/folders created in the last 1 month======

2015-08-12 17:24:25 ----SHD---- C:\RECYCLER
2015-08-12 16:42:28 ----D---- C:\rsit
2015-08-12 15:12:24 ----D---- C:\Program Files\Malwarebytes' Anti-Malware
2015-08-12 15:12:24 ----A---- C:\WINDOWS\system32\drivers\mbam.sys
2015-08-12 13:37:19 ----A---- C:\WINDOWS\system32\FlashPlayerInstaller.exe
2015-08-12 13:24:00 ----D---- C:\WINDOWS\Temp
2015-08-12 13:24:00 ----A---- C:\WINDOWS\zoek-delete.exe
2015-08-12 13:16:55 ----D---- C:\zoek_backup
2015-08-12 07:19:14 ----A---- C:\WINDOWS\ntbtlog.txt
2015-08-12 00:03:53 ----D---- C:\AdwCleaner
2015-08-10 18:04:00 ----D---- C:\Program Files\PowerArchiver
2015-08-10 13:06:12 ----D---- C:\Program Files\VS Revo Group
2015-08-10 09:57:56 ----D---- C:\WINDOWS\system32\NtmsData
2015-08-07 15:17:56 ----A---- C:\DelFix.txt
2015-08-07 09:05:17 ----SHD---- C:\WINDOWS\CSC
2015-08-04 10:27:34 ----A---- C:\MBAM-log-2015-08-04 (10-27-13).txt
2015-08-04 06:24:45 ----A---- C:\MBAM-log-2015-08-04 (06-23-39).txt
2015-08-03 19:02:35 ----D---- C:\Documents and Settings\uzivatel\Data aplikací\Malwarebytes
2015-08-03 19:01:40 ----D---- C:\Documents and Settings\All Users\Data aplikací\Malwarebytes
2015-08-03 15:24:26 ----A---- C:\cleanup.bat
2015-07-22 06:38:20 ----D---- C:\Program Files\Seznam.cz
2015-07-22 06:37:58 ----D---- C:\Documents and Settings\uzivatel\Data aplikací\Seznam.cz
2015-07-22 06:37:06 ----D---- C:\Program Files\Microsoft Silverlight
2015-07-19 15:20:18 ----D---- C:\Program Files\trend micro
2015-07-19 14:19:37 ----D---- C:\Documents and Settings\uzivatel\Data aplikací\STV Software
2015-07-19 14:16:12 ----A---- C:\WINDOWS\prleth.sys
2015-07-19 14:16:12 ----A---- C:\WINDOWS\hgfs.sys
2015-07-18 20:29:28 ----D---- C:\Program Files\SpeedFan
2015-07-16 11:36:07 ----D---- C:\Documents and Settings\uzivatel\Data aplikací\Wondershare
2015-07-16 11:31:20 ----D---- C:\Documents and Settings\All Users\Data aplikací\wondershare
2015-07-16 10:36:17 ----A---- C:\WINDOWS\system32\ZSHP1020.EXE
2015-07-16 10:36:17 ----A---- C:\WINDOWS\system32\ZLhp1020.DLL
2015-07-16 10:30:33 ----A---- C:\WINDOWS\system32\zshp1020s.dll
2015-07-16 10:30:26 ----D---- C:\Program Files\HP
2015-07-16 10:30:26 ----A---- C:\WINDOWS\system32\Difxapi.dll
2015-07-16 10:29:57 ----D---- C:\Documents and Settings\uzivatel\Data aplikací\HP
2015-07-16 10:29:18 ----D---- C:\hp_lj1020_Full_Solution

======List of files/folders modified in the last 1 month======

2015-08-12 21:54:47 ----D---- C:\WINDOWS\Prefetch
2015-08-12 21:54:23 ----D---- C:\Documents and Settings\uzivatel\Data aplikací\uTorrent
2015-08-12 21:52:03 ----D---- C:\WINDOWS\system32\drivers
2015-08-12 21:52:02 ----A---- C:\WINDOWS\SchedLgU.Txt
2015-08-12 21:51:32 ----HDC---- C:\WINDOWS\$NtUninstallKB2719985$
2015-08-12 17:26:19 ----RD---- C:\Program Files
2015-08-12 16:30:58 ----HDC---- C:\WINDOWS\$NtUninstallKB956744$
2015-08-12 14:43:43 ----D---- C:\WINDOWS\system32
2015-08-12 13:37:32 ----A---- C:\WINDOWS\system32\FlashPlayerApp.exe
2015-08-12 13:25:20 ----D---- C:\WINDOWS
2015-08-12 13:22:48 ----D---- C:\Program Files\Common Files
2015-08-12 13:18:13 ----D---- C:\WINDOWS\system32\drivers\etc
2015-08-11 11:43:01 ----D---- C:\Documents and Settings\uzivatel\Data aplikací\eM Client
2015-08-10 18:04:18 ----SHD---- C:\WINDOWS\Installer
2015-08-10 16:23:15 ----D---- C:\WINDOWS\WinSxS
2015-08-10 09:19:44 ----D---- C:\WINDOWS\system32\CatRoot2
2015-08-07 16:50:51 ----D---- C:\Program Files\Defraggler
2015-08-07 16:47:19 ----D---- C:\WINDOWS\Debug
2015-08-07 09:07:54 ----SD---- C:\WINDOWS\Tasks
2015-08-04 18:09:52 ----HDC---- C:\WINDOWS\$NtUninstallKB2712808$
2015-08-03 13:30:22 ----D---- C:\Program Files\CCleaner
2015-08-03 08:25:20 ----D---- C:\Program Files\Adobe
2015-07-22 06:39:20 ----D---- C:\Program Files\Adobe Media Player
2015-07-20 18:26:25 ----D---- C:\Documents and Settings\uzivatel\Data aplikací\Subtitle Edit
2015-07-19 14:18:13 ----SD---- C:\Documents and Settings\All Users\Data aplikací\Microsoft
2015-07-18 08:02:50 ----D---- C:\Documents and Settings\All Users\Data aplikací\Adobe
2015-07-16 11:45:33 ----SD---- C:\Documents and Settings\uzivatel\Data aplikací\Microsoft
2015-07-16 11:45:33 ----D---- C:\Documents and Settings\uzivatel\Data aplikací\Adobe
2015-07-16 11:30:24 ----RSD---- C:\WINDOWS\Fonts
2015-07-16 10:36:10 ----HD---- C:\WINDOWS\inf
2015-07-16 10:30:33 ----DC---- C:\WINDOWS\system32\DRVSTORE
2015-07-16 02:01:17 ----D---- C:\Documents and Settings\All Users\Data aplikací\ashampoo
2015-07-14 20:02:09 ----D---- C:\Program Files\Common Files\Adobe

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 aswRvrt;avast! Revert; C:\WINDOWS\system32\drivers\aswRvrt.sys [2015-07-08 49904]
R0 aswVmm;avast! VM Monitor; C:\WINDOWS\system32\drivers\aswVmm.sys [2015-07-08 209048]
R0 giveio;giveio; C:\WINDOWS\system32\giveio.sys [1996-04-03 5248]
R0 JGOGO;JMicron Hot-Plug Driver; C:\WINDOWS\system32\DRIVERS\JGOGO.sys [2006-02-07 6912]
R0 JRAID;JRAID; C:\WINDOWS\system32\DRIVERS\jraid.sys [2006-10-30 43648]
R0 sfdrv01;StarForce Protection Environment Driver (version 1.x); C:\WINDOWS\System32\drivers\sfdrv01.sys [2005-01-14 47616]
R0 sfhlp02;StarForce Protection Helper Driver (version 2.x); C:\WINDOWS\System32\drivers\sfhlp02.sys [2004-10-28 6656]
R0 speedfan;speedfan; C:\WINDOWS\system32\speedfan.sys [2012-12-29 24184]
R0 sptd;sptd; C:\WINDOWS\System32\Drivers\sptd.sys [2010-01-03 691696]
R0 WudfPf;Windows Driver Foundation - User-mode Driver Framework Platform Driver; C:\WINDOWS\system32\DRIVERS\WudfPf.sys [2006-09-28 77568]
R1 aswRdr;aswRdr; C:\WINDOWS\system32\drivers\aswRdr.sys [2015-07-08 55200]
R1 aswSnx;aswSnx; C:\WINDOWS\system32\drivers\aswSnx.sys [2015-07-08 787760]
R1 aswSP;aswSP; C:\WINDOWS\system32\drivers\aswSP.sys [2015-07-08 428120]
R1 aswTdi;aswTdi; C:\WINDOWS\system32\drivers\aswTdi.sys [2015-07-08 57888]
R1 intelppm;Řadič procesoru Intel; C:\WINDOWS\system32\DRIVERS\intelppm.sys [2008-04-14 40192]
R1 kbdhid;Ovladač klávesnice standardu HID; C:\WINDOWS\system32\DRIVERS\kbdhid.sys [2008-04-14 14592]
R2 aswHwid;avast! HardwareID; C:\WINDOWS\system32\drivers\aswHwid.sys [2015-07-08 24144]
R2 aswMonFlt;aswMonFlt; C:\WINDOWS\system32\drivers\aswMonFlt.sys [2015-07-08 74976]
R3 ADIHdAudAddService;ADI UAA Function Driver for High Definition Audio Service; C:\WINDOWS\system32\drivers\ADIHdAud.sys [2007-01-16 293888]
R3 AEAudio;AE Audio Service; C:\WINDOWS\system32\drivers\AEAudio.sys [2006-08-07 93952]
R3 GEARAspiWDM;GEAR ASPI Filter Driver; C:\WINDOWS\system32\DRIVERS\GEARAspiWDM.sys [2009-01-15 23848]
R3 HDAudBus;Ovladač Microsoft UAA pro sběrnici High Definition Audio; C:\WINDOWS\system32\DRIVERS\HDAudBus.sys [2008-04-13 144384]
R3 HidUsb;Ovladač třídy standardu HID; C:\WINDOWS\system32\DRIVERS\hidusb.sys [2008-04-13 10368]
R3 mouhid;Ovladač myši standardu HID; C:\WINDOWS\system32\DRIVERS\mouhid.sys [2001-10-24 12160]
R3 MTsensor;ATK0110 ACPI UTILITY; C:\WINDOWS\system32\DRIVERS\ASACPI.sys [2004-08-13 5810]
R3 nusb3hub;Renesas Electronics USB 3.0 Hub Driver; C:\WINDOWS\system32\DRIVERS\nusb3hub.sys [2012-05-10 75904]
R3 nusb3xhc;Renesas Electronics USB 3.0 Host Controller Driver; C:\WINDOWS\system32\DRIVERS\nusb3xhc.sys [2012-05-10 168448]
R3 nv;nv; C:\WINDOWS\system32\DRIVERS\nv4_mini.sys [2013-02-08 12648960]
R3 RTLE8023xp;Realtek 10/100/1000 PCI-E NIC Family NDIS XP Driver; C:\WINDOWS\system32\DRIVERS\Rtenicxp.sys [2006-07-27 83712]
R3 SenFiltService;SenFilt Service; C:\WINDOWS\system32\drivers\Senfilt.sys [2006-03-17 392960]
R3 usbccgp;Obecný nadřazený ovladač Microsoft USB; C:\WINDOWS\system32\DRIVERS\usbccgp.sys [2013-08-09 32384]
R3 usbprint;Třída USB Printer; C:\WINDOWS\system32\DRIVERS\usbprint.sys [2008-04-13 25856]
R3 USBSTOR;Ovladač velkokapacitního paměťového zařízení USB; C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS [2008-04-13 26368]
R3 usbuhci;Ovladač Microsoft univerzálního hostitelského řadiče USB od společnosti Microsoft; C:\WINDOWS\system32\DRIVERS\usbuhci.sys [2008-04-13 20608]
S1 SASKUTIL;SASKUTIL; \??\C:\Program Files\SUPERAntiSpyware\SASKUTIL.sys []
S1 sensorsview;sensorsview; \??\C:\Program Files\SensorsViewPro41\drv\sensorsview32.sys []
S3 aibxrz9o;aibxrz9o; C:\WINDOWS\system32\drivers\aibxrz9o.sys []
S3 MarvinBus;Pinnacle Marvin Bus; C:\WINDOWS\system32\DRIVERS\MarvinBus.sys [2005-09-23 171520]
S3 MBAMProtector;MBAMProtector; \??\C:\WINDOWS\system32\drivers\mbam.sys []
S3 PCTINDIS5;PCTINDIS5 NDIS Protocol Driver; \??\C:\WINDOWS\system32\PCTINDIS5.SYS []
S3 USBAAPL;Apple Mobile USB Driver; C:\WINDOWS\System32\Drivers\usbaapl.sys []
S3 usbscan;Ovladač skeneru USB; C:\WINDOWS\system32\DRIVERS\usbscan.sys [2013-07-03 14976]
S3 w900bus;Sony Ericsson 900i driver (WDM); C:\WINDOWS\system32\DRIVERS\w900bus.sys []
S3 w900mdfl;Sony Ericsson 900i USB WMC Modem Filter; C:\WINDOWS\system32\DRIVERS\w900mdfl.sys []
S3 w900mdm;Sony Ericsson 900i USB WMC Modem Drivers; C:\WINDOWS\system32\DRIVERS\w900mdm.sys []
S3 w900mgmt;Sony Ericsson 900i USB WMC Device Management Drivers; C:\WINDOWS\system32\DRIVERS\w900mgmt.sys []
S3 w900obex;Sony Ericsson 900i USB WMC OBEX Interface Drivers; C:\WINDOWS\system32\DRIVERS\w900obex.sys []
S3 wceusbsh;Windows CE USB Serial Host Driver; C:\WINDOWS\system32\DRIVERS\wceusbsh.sys [2006-11-06 28672]
S3 WpdUsb;WpdUsb; C:\WINDOWS\system32\DRIVERS\wpdusb.sys [2006-10-18 38528]
S3 WudfRd;Windows Driver Foundation - User-mode Driver Framework Reflector; C:\WINDOWS\system32\DRIVERS\wudfrd.sys [2006-09-28 82944]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 avast! Antivirus;Avast Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [2015-07-08 343336]
R2 MDM;Machine Debug Manager; C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE [2003-06-19 322120]
R2 WudfSvc;Windows Driver Foundation - User-mode Driver Framework; C:\WINDOWS\system32\svchost.exe [2008-04-14 14336]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\WINDOWS\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
S2 MBAMService;MBAMService; C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe [2013-04-04 701512]
S2 MBAMScheduler;MBAMScheduler; C:\Program Files\Malwarebytes' Anti-Malware\mbamscheduler.exe [2013-04-04 418376]
S2 NVSvc;NVIDIA Display Driver Service; C:\WINDOWS\system32\nvsvc32.exe [2008-09-18 163908]
S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service; C:\WINDOWS\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2015-08-12 269000]
S3 aspnet_state;ASP.NET State Service; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe [2008-07-25 34312]
S3 FontCache3.0.0.0;Windows Presentation Foundation Font Cache 3.0.0.0; c:\WINDOWS\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe [2008-07-29 46104]
S3 idsvc;Windows CardSpace; c:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe [2008-07-29 881664]
S3 ose;Office Source Engine; C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2003-07-28 89136]
S3 WMPNetworkSvc;Služba Windows Media Player Network Sharing; C:\Program Files\Windows Media Player\WMPNetwk.exe [2007-01-05 913920]
S3 WPFFontCache_v0400;Windows Presentation Foundation Font Cache 4.0.0.0; C:\WINDOWS\Microsoft.NET\Framework\v4.0.30319\WPF\WPFFontCache_v0400.exe [2013-07-20 754856]
S4 clr_optimization_v2.0.50727_32;.NET Runtime Optimization Service v2.0.50727_X86; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe [2008-07-25 69632]
S4 NetTcpPortSharing;Net.Tcp Port Sharing Service; c:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe [2008-07-29 132096]

-----------------EOF-----------------

[Ivošisko]

Ještě jsem si povšiml malého rozdílu (asi o nic nejde) - Panely/Přidat odebrat sw neobsahuje, ale REVO zobrazuje položku: Windows Genuine Advantege Validation Tool (KB 892130)

[cernohous13]

Windows Genuine Advantege Validation Tool (KB 892130)
slouží ke kontrole legálnosti OS - Microsoft nechat

pokud už nemáš System Look
Stáhni "System Look" - http://jpshortstuff.247fixes.com/SystemLook.exe

Spusť jej a do okna zkopíruj

Kód: Vybrat vše

:filefind
*wanderburst*
*wander burst*
:regfind
wanderburst
wander burst
:dir
*wanderburst*
*wander burst*

Klik na "Look" a po scanu sem zkopíruj výsledek hledání

[Ivošisko]

Log ze SystemLook:

SystemLook 30.07.11 by jpshortstuff
Log created at 07:29 on 13/08/2015 by uzivatel
Administrator - Elevation successful

========== filefind ==========

Searching for "*wanderburst*"
C:\Documents and Settings\uzivatel\Local Settings\Data aplikací\Google\Chrome\User Data\Default\Local Storage\https_wanderburst-a.akamaihd.net_0.localstorage --a---- 374784 bytes [19:55 12/08/2015] [05:29 13/08/2015] 6A4DAF5E58580E28D907E7D89ED101A6
C:\Documents and Settings\uzivatel\Local Settings\Data aplikací\Google\Chrome\User Data\Default\Local Storage\https_wanderburst-a.akamaihd.net_0.localstorage-journal --a---- 16384 bytes [19:55 12/08/2015] [05:29 13/08/2015] 61D1D5D57A55745769F471DB38ADB62D

Searching for "*wander burst*"
No files found.

========== regfind ==========

Searching for "wanderburst"
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{d45929a2-951f-4eb4-91be-79125af755f0}]
"LocalService"="Update Mgr WanderBurst"
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{ea2a7a62-0df5-4a16-af66-adad032f76c8}]
"LocalService"="Service Mgr WanderBurst"
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{383C4480-BBA7-4B1C-B57D-95CB0F8540AA}]
@="IWanderBurstBHO"
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{28324772-D0E5-4546-B23C-EDF8296D3C22}\1.0]
@="WanderBurstIEClientLib"
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\Root\LEGACY_SERVICE_MGR_WANDERBURST]
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\Root\LEGACY_SERVICE_MGR_WANDERBURST\0000]
"Service"="Service Mgr WanderBurst"
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\Root\LEGACY_SERVICE_MGR_WANDERBURST\0000]
"DeviceDesc"="Service Mgr WanderBurst"
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\Root\LEGACY_UPDATE_MGR_WANDERBURST]
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\Root\LEGACY_UPDATE_MGR_WANDERBURST\0000]
"Service"="Update Mgr WanderBurst"
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\Root\LEGACY_UPDATE_MGR_WANDERBURST\0000]
"DeviceDesc"="Update Mgr WanderBurst"
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet003\Enum\Root\LEGACY_SERVICE_MGR_WANDERBURST]
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet003\Enum\Root\LEGACY_SERVICE_MGR_WANDERBURST\0000]
"Service"="Service Mgr WanderBurst"
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet003\Enum\Root\LEGACY_SERVICE_MGR_WANDERBURST\0000]
"DeviceDesc"="Service Mgr WanderBurst"
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet003\Enum\Root\LEGACY_UPDATE_MGR_WANDERBURST]
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet003\Enum\Root\LEGACY_UPDATE_MGR_WANDERBURST\0000]
"Service"="Update Mgr WanderBurst"
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet003\Enum\Root\LEGACY_UPDATE_MGR_WANDERBURST\0000]
"DeviceDesc"="Update Mgr WanderBurst"
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_SERVICE_MGR_WANDERBURST]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_SERVICE_MGR_WANDERBURST\0000]
"Service"="Service Mgr WanderBurst"
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_SERVICE_MGR_WANDERBURST\0000]
"DeviceDesc"="Service Mgr WanderBurst"
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_UPDATE_MGR_WANDERBURST]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_UPDATE_MGR_WANDERBURST\0000]
"Service"="Update Mgr WanderBurst"
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_UPDATE_MGR_WANDERBURST\0000]
"DeviceDesc"="Update Mgr WanderBurst"

Searching for "wander burst"
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{28324772-D0E5-4546-B23C-EDF8296D3C22}\1.0\0\win32]
@="C:\Program Files\Wander Burst\Extensions\0f4e02f8-f10e-493d-a1a7-3aed7ba7b110.dll"
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{28324772-D0E5-4546-B23C-EDF8296D3C22}\1.0\HELPDIR]
@="C:\Program Files\Wander Burst\Extensions"

========== dir ==========

*wanderburst* - Unable to find folder.

*wander burst* - Unable to find folder.

-= EOF =-

[cernohous13]

Jelikož jsme OTM odinstalovali - opakujeme

Stáhni OTM z jednoho odkazu a rozbal nejlépe na plochu.
http://oldtimer.geekstogo.com/OTM.exe
http://www.itxassociates.com/OT-Tools/OTM.exe

Spusť program „OTM.exe“
Do okna pod žlutou čáru vlož celý text zeleným písmem ze „Scriptu“

Klikni na červené „MoveIt!“

Při nabídce restartu „YES“
a log potom najdeš v C:\_OTM\MovedFiles\ - dej mi ho sem na kontrolu

Script

Kód: Vybrat vše

:Commands
[emptytemp]
[emptyflash]
[emptyjava]

:Files
%windir%\system32\*.tmp.dll /s
%windir%\system32\SET*.tmp /s
%windir%\*.tmp /s
C:\Documents and Settings\uzivatel\Local Settings\Data aplikací\Google\Chrome\User Data\Default\Local Storage\https_wanderburst-a.akamaihd.net_0.localstorage
C:\Documents and Settings\uzivatel\Local Settings\Data aplikací\Google\Chrome\User Data\Default\Local Storage\https_wanderburst-a.akamaihd.net_0.localstorage-journal

:Reg
[-HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{28324772-D0E5-4546-B23C-EDF8296D3C22}\1.0\0\win32]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{28324772-D0E5-4546-B23C-EDF8296D3C22}\1.0\HELPDIR]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{d45929a2-951f-4eb4-91be-79125af755f0}]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{ea2a7a62-0df5-4a16-af66-adad032f76c8}]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{383C4480-BBA7-4B1C-B57D-95CB0F8540AA}]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{28324772-D0E5-4546-B23C-EDF8296D3C22}\1.0]
[-HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\Root\LEGACY_SERVICE_MGR_WANDERBURST]
[-HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\Root\LEGACY_SERVICE_MGR_WANDERBURST\0000]
[-HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\Root\LEGACY_SERVICE_MGR_WANDERBURST\0000]
[-HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\Root\LEGACY_UPDATE_MGR_WANDERBURST]
[-HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\Root\LEGACY_UPDATE_MGR_WANDERBURST\0000]
[-HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\Root\LEGACY_UPDATE_MGR_WANDERBURST\0000]
[-HKEY_LOCAL_MACHINE\SYSTEM\ControlSet003\Enum\Root\LEGACY_SERVICE_MGR_WANDERBURST]
[-HKEY_LOCAL_MACHINE\SYSTEM\ControlSet003\Enum\Root\LEGACY_SERVICE_MGR_WANDERBURST\0000]
[-HKEY_LOCAL_MACHINE\SYSTEM\ControlSet003\Enum\Root\LEGACY_SERVICE_MGR_WANDERBURST\0000]
[-HKEY_LOCAL_MACHINE\SYSTEM\ControlSet003\Enum\Root\LEGACY_UPDATE_MGR_WANDERBURST]
[-HKEY_LOCAL_MACHINE\SYSTEM\ControlSet003\Enum\Root\LEGACY_UPDATE_MGR_WANDERBURST\0000]
[-HKEY_LOCAL_MACHINE\SYSTEM\ControlSet003\Enum\Root\LEGACY_UPDATE_MGR_WANDERBURST\0000]
[-HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_SERVICE_MGR_WANDERBURST]
[-HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_SERVICE_MGR_WANDERBURST\0000]
[-HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_SERVICE_MGR_WANDERBURST\0000]
[-HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_UPDATE_MGR_WANDERBURST]
[-HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_UPDATE_MGR_WANDERBURST\0000]
[-HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_UPDATE_MGR_WANDERBURST\0000]
[-HKEY_CLASSES_ROOT\CLSID\{0f4e02f8-f10e-493d-a1a7-3aed7ba7b110}\InprocServer32\]
[-HKEY_CLASSES_ROOT\CLSID\{0f4e02f8-f10e-493d-a1a7-3aed7ba7b110}]

po restartu opakuj System Look s předchozím scriptem - log sem

[Ivošisko]

Log OTM:

All processes killed
========== COMMANDS ==========

[EMPTYTEMP]

User: All Users

User: Default User
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes
->Flash cache emptied: 0 bytes

User: LocalService
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 33170 bytes
->Opera cache emptied: 0 bytes

User: NetworkService
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 33170 bytes

User: uzivatel
->Temp folder emptied: 4772981 bytes
->Temporary Internet Files folder emptied: 5292545 bytes
->Java cache emptied: 0 bytes
->FireFox cache emptied: 0 bytes
->Google Chrome cache emptied: 99922627 bytes
->Flash cache emptied: 0 bytes

%systemdrive% .tmp files removed: 0 bytes
%systemroot% .tmp files removed: 0 bytes
%systemroot%\System32 .tmp files removed: 0 bytes
%systemroot%\System32\dllcache .tmp files removed: 0 bytes
%systemroot%\System32\drivers .tmp files removed: 0 bytes
Windows Temp folder emptied: 499371 bytes
%systemroot%\system32\config\systemprofile\Local Settings\Temp folder emptied: 0 bytes
%systemroot%\system32\config\systemprofile\Local Settings\Temporary Internet Files folder emptied: 0 bytes
RecycleBin emptied: 1139534011 bytes

Total Files Cleaned = 1 192,00 mb


[EMPTYFLASH]

User: All Users

User: Default User
->Flash cache emptied: 0 bytes

User: LocalService

User: NetworkService

User: uzivatel
->Flash cache emptied: 0 bytes

Total Flash Files Cleaned = 0,00 mb


[EMPTYJAVA]

User: All Users

User: Default User

User: LocalService

User: NetworkService

User: uzivatel
->Java cache emptied: 0 bytes

Total Java Files Cleaned = 0,00 mb

========== FILES ==========
File/Folder C:\WINDOWS\system32\*.tmp.dll not found.
File/Folder C:\WINDOWS\system32\SET*.tmp not found.
C:\WINDOWS\Installer\MSI38.tmp moved successfully.
C:\Documents and Settings\uzivatel\Local Settings\Data aplikací\Google\Chrome\User Data\Default\Local Storage\https_wanderburst-a.akamaihd.net_0.localstorage moved successfully.
C:\Documents and Settings\uzivatel\Local Settings\Data aplikací\Google\Chrome\User Data\Default\Local Storage\https_wanderburst-a.akamaihd.net_0.localstorage-journal moved successfully.
========== REGISTRY ==========
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{28324772-D0E5-4546-B23C-EDF8296D3C22}\1.0\0\win32\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{28324772-D0E5-4546-B23C-EDF8296D3C22}\1.0\HELPDIR\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{d45929a2-951f-4eb4-91be-79125af755f0}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{d45929a2-951f-4eb4-91be-79125af755f0}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{ea2a7a62-0df5-4a16-af66-adad032f76c8}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{ea2a7a62-0df5-4a16-af66-adad032f76c8}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{383C4480-BBA7-4B1C-B57D-95CB0F8540AA}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{383C4480-BBA7-4B1C-B57D-95CB0F8540AA}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{28324772-D0E5-4546-B23C-EDF8296D3C22}\1.0\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\Root\LEGACY_SERVICE_MGR_WANDERBURST\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\Root\LEGACY_SERVICE_MGR_WANDERBURST\0000\ not found.
Registry key HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\Root\LEGACY_SERVICE_MGR_WANDERBURST\0000\ not found.
Registry key HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\Root\LEGACY_UPDATE_MGR_WANDERBURST\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\Root\LEGACY_UPDATE_MGR_WANDERBURST\0000\ not found.
Registry key HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\Root\LEGACY_UPDATE_MGR_WANDERBURST\0000\ not found.
Registry key HKEY_LOCAL_MACHINE\SYSTEM\ControlSet003\Enum\Root\LEGACY_SERVICE_MGR_WANDERBURST\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SYSTEM\ControlSet003\Enum\Root\LEGACY_SERVICE_MGR_WANDERBURST\0000\ not found.
Registry key HKEY_LOCAL_MACHINE\SYSTEM\ControlSet003\Enum\Root\LEGACY_SERVICE_MGR_WANDERBURST\0000\ not found.
Registry key HKEY_LOCAL_MACHINE\SYSTEM\ControlSet003\Enum\Root\LEGACY_UPDATE_MGR_WANDERBURST\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SYSTEM\ControlSet003\Enum\Root\LEGACY_UPDATE_MGR_WANDERBURST\0000\ not found.
Registry key HKEY_LOCAL_MACHINE\SYSTEM\ControlSet003\Enum\Root\LEGACY_UPDATE_MGR_WANDERBURST\0000\ not found.
Registry key HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_SERVICE_MGR_WANDERBURST\ not found.
Registry key HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_SERVICE_MGR_WANDERBURST\0000\ not found.
Registry key HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_SERVICE_MGR_WANDERBURST\0000\ not found.
Registry key HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_UPDATE_MGR_WANDERBURST\ not found.
Registry key HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_UPDATE_MGR_WANDERBURST\0000\ not found.
Registry key HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_UPDATE_MGR_WANDERBURST\0000\ not found.
Registry key HKEY_CLASSES_ROOT\CLSID\{0f4e02f8-f10e-493d-a1a7-3aed7ba7b110}\InprocServer32\ not found.
Registry key HKEY_CLASSES_ROOT\CLSID\{0f4e02f8-f10e-493d-a1a7-3aed7ba7b110}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{0f4e02f8-f10e-493d-a1a7-3aed7ba7b110}\ not found.

OTM by OldTimer - Version 3.1.21.0 log created on 08132015_084811



Log SystemLook:

SystemLook 30.07.11 by jpshortstuff
Log created at 08:54 on 13/08/2015 by uzivatel
Administrator - Elevation successful

========== filefind ==========

Searching for "*wanderburst*"
C:\Documents and Settings\uzivatel\Local Settings\Data aplikací\Google\Chrome\User Data\Default\Local Storage\https_wanderburst-a.akamaihd.net_0.localstorage --a---- 373760 bytes [06:52 13/08/2015] [06:54 13/08/2015] 58DEFD9D1F67938B00856DDABC0391DF
C:\Documents and Settings\uzivatel\Local Settings\Data aplikací\Google\Chrome\User Data\Default\Local Storage\https_wanderburst-a.akamaihd.net_0.localstorage-journal --a---- 4640 bytes [06:52 13/08/2015] [06:54 13/08/2015] 03EA6D66672BF6FB338F20FDE176AA85
C:\_OTM\MovedFiles\08132015_084811\C_Documents and Settings\uzivatel\Local Settings\Data aplikací\Google\Chrome\User Data\Default\Local Storage\https_wanderburst-a.akamaihd.net_0.localstorage --a---- 375808 bytes [19:55 12/08/2015] [06:47 13/08/2015] E61AFDB9DA740683B43FC8C0AB98F127
C:\_OTM\MovedFiles\08132015_084811\C_Documents and Settings\uzivatel\Local Settings\Data aplikací\Google\Chrome\User Data\Default\Local Storage\https_wanderburst-a.akamaihd.net_0.localstorage-journal --a---- 16384 bytes [19:55 12/08/2015] [06:47 13/08/2015] CC757DF7CF8A61E6F0D6C894F7215144

Searching for "*wander burst*"
No files found.

========== regfind ==========

Searching for "wanderburst"
No data found.

Searching for "wander burst"
No data found.

========== dir ==========

*wanderburst* - Unable to find folder.

*wander burst* - Unable to find folder.

-= EOF =-

[cernohous13]

znovu MBAM a končně toho buřta nech odstranit

Nalezené soubory: 2
C:\Documents and Settings\uzivatel\Local Settings\Data aplikací\Google\Chrome\User Data\Default\Local Storage\https_wanderburst-a.akamaihd.net_0.localstorage (PUP.Optional.WanderBurst.A) -> Nebyla provedena žádná instrukce.
C:\Documents and Settings\uzivatel\Local Settings\Data aplikací\Google\Chrome\User Data\Default\Local Storage\https_wanderburst-a.akamaihd.net_0.localstorage-journal (PUP.Optional.WanderBurst.A) -> Nebyla provedena žádná instrukce.

nález MBAM nech odstranit

[Ivošisko]

Nález z MBAM jsem nechal odstranit pokaždé (pokud budeš chtít, tak zdůvodním, proč jsi dostával log pouze ze scanu). Tentokrát jsem opět položky opět označil a nechal je odstranit a log z tohoto odstranění přikládám. Ovšem Buřty se mi stále opékají na monitoru.....

Log z MBAM po odstranění nálezu:


Malwarebytes Anti-Malware (Zkušební verze Malwarebytes Anti-Malware.) 1.75.0.1300
www.malwarebytes.org

Verze: v2015.08.13.03

Windows XP Service Pack 3 x86 NTFS
Internet Explorer 8.0.6001.18702
uzivatel :: PCNEW [administrátor]

Ochrana: Zakázána

13.8.2015 11:44:45
mbam-log-2015-08-13 (11-44-45).txt

Typ: Kompletní kontrola (C:\|)
Nastavení kontroly povoleno: Paměť | Po spuštění | Registr | Systémové soubory | Heuristická analýza Extra | Heuristická analýza Shuriken | PUP | PUM
Nastavení kontroly zakázáno: P2P
Kontrolované objekty: 358230
Uplynulý čas: 50 minut, 43 sekund

Nalezené procesy v paměti: 0
(Žádné škodlivé položky nebyly zjištěny)

Nalezené moduly v paměti: 0
(Žádné škodlivé položky nebyly zjištěny)

Nalezené klíče v registru: 0
(Žádné škodlivé položky nebyly zjištěny)

Nalezené hodnoty v registru: 0
(Žádné škodlivé položky nebyly zjištěny)

Nalezené datové položky v registru: 0
(Žádné škodlivé položky nebyly zjištěny)

Nalezené složky: 0
(Žádné škodlivé položky nebyly zjištěny)

Nalezené soubory: 2
C:\Documents and Settings\uzivatel\Local Settings\Data aplikací\Google\Chrome\User Data\Default\Local Storage\https_wanderburst-a.akamaihd.net_0.localstorage (PUP.Optional.WanderBurst.A) -> Přesun do karantény a smazání se zdařilo.
C:\Documents and Settings\uzivatel\Local Settings\Data aplikací\Google\Chrome\User Data\Default\Local Storage\https_wanderburst-a.akamaihd.net_0.localstorage-journal (PUP.Optional.WanderBurst.A) -> Přesun do karantény a smazání se zdařilo.

(konec)

[Ivošisko]

Jen tak z prdele jsem koukl (bohužel neznalý EN, tak přes translátor) na tuto stránku:

https://translate.google.cz/translate?h ... rev=search

a zaujala mě tam pasáž, hovořící o zástupci - viz obr.:

[cernohous13]

Spusť Internet Explorer -> Nástroje -> Spravovat doplňky -> Panely nástrojů a rozšíření
Máš tam špekáčka? tak pravým a zakázat

Firefox -> Nástroje -> Správce doplňků -> Rozšíření -> najdi škodnou -> Odebrat
zkontroluj i Zásuvné moduly -> tam nastav na roletce vpravo -> Nespuštět

Chrome -> tam si budeš muset poradit podle tebou uvedené stránky
Pro Google Chrome uživatele:
"mřížka" -> Rozšíření/Extensions atd.

[Ivošisko]

Nikde jsem nic nenašel a reklamy se mi pořád vysmívají

[cernohous13]

klik pravým na ikonu zástupce Google Chrome -> Vlastnosti
v řádku Cíl: musí záznam končit ...chrome.exe"
pokud je tam něco dalšího tak smazat

[Ivošisko]

To jsem už udělal předtím, ale bez výsledku - v současné chvíli je ten zápis tak, jak má být (tím chci říct, že se tam zatím nic nepřidalo) - ovšem reklamy naskakují stále

[cernohous13]

problémy má jenom Chrome a další prohlížeče jsou OK?
pak už by zbývala jen přeinstalace