Odvirování PC, zrychlení počítače, vzdálená pomoc prostřednictvím služby neslape.cz

Prosim o kontrolu a pomoc s av666@weekendwarrior55

Máte problém s virem? Vložte sem log z FRST nebo RSIT.

Moderátor: Moderátoři

Pravidla fóra
Pokud chcete pomoc, vložte log z FRST [návod zde] nebo RSIT [návod zde]

Jednotlivé thready budou po vyřešení uzamčeny. Stejně tak ty, které budou nečinné déle než 14 dní. Vizte Pravidlo o zamykání témat. Děkujeme za pochopení.

!NOVINKA!
Nově lze využívat služby vzdálené pomoci, kdy se k vašemu počítači připojí odborník a bližší informace o problému si od vás získá telefonicky! Více na www.neslape.cz
Odpovědět
Zpráva
Autor
Aldamer
Návštěvník
Návštěvník
Příspěvky: 7
Registrován: 06 pro 2015 10:19

Prosim o kontrolu a pomoc s av666@weekendwarrior55

#1 Příspěvek od Aldamer »

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 10:15:09, on 6.12.2015
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Windows Defender\MsMpEng.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\ESET\ESET Smart Security\ekrn.exe
C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE
C:\WINDOWS\system32\IoctlSvc.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\PixArt\PAC207\Monitor.exe
C:\WINDOWS\RTHDCPL.EXE
C:\Program Files\ESET\ESET Smart Security\egui.exe
C:\Program Files\Windows Defender\MSASCui.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Messenger\msmsgs.exe
C:\Program Files\CCleaner\CCleaner.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Documents and Settings\M&J\Dokumenty\Stažené soubory\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.seznam.cz/
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page =
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O4 - HKLM\..\Run: [PAC207_Monitor] C:\WINDOWS\PixArt\PAC207\Monitor.exe
O4 - HKLM\..\Run: [Monitor] C:\WINDOWS\PixArt\PAC207\Monitor.exe
O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE
O4 - HKLM\..\Run: [NeroFilterCheck] C:\Program Files\Common Files\Ahead\Lib\NeroCheck.exe
O4 - HKLM\..\Run: [egui] "C:\Program Files\ESET\ESET Smart Security\egui.exe" /hide /waitservice
O4 - HKLM\..\Run: [Windows Defender] "C:\Program Files\Windows Defender\MSASCui.exe" -hide
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKCU\..\Run: [CCleaner Monitoring] "C:\Program Files\CCleaner\CCleaner.exe" /MONITOR
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Office Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: Odeslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: Od&eslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O23 - Service: ESET HTTP Server (EhttpSrv) - ESET - C:\Program Files\ESET\ESET Smart Security\EHttpSrv.exe
O23 - Service: ESET Service (ekrn) - ESET - C:\Program Files\ESET\ESET Smart Security\ekrn.exe
O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Mozilla Foundation - C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe
O23 - Service: NBService - Nero AG - C:\Program Files\Nero\Nero 7\Nero BackItUp\NBService.exe
O23 - Service: NMIndexingService - Nero AG - C:\Program Files\Common Files\Ahead\Lib\NMIndexingService.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: PLFlash DeviceIoControl Service - Prolific Technology Inc. - C:\WINDOWS\system32\IoctlSvc.exe

Zkusil jsem vycistit SpyHunterem, ale nedari se, navic to zasifrovalo soubory v dokumentech a na plose : Noze nalezy.txt.id-6304444540_av666@weekendwarrior55.com.
Poprosim o radu co s tim a hlavne jak opravit prepsane soubory, po odmazani pridaneho textu soubory nejsou citelne.
Dekuji
Nahoru
Uživatelský avatar
Rudy
Site Admin
Site Admin
Příspěvky: 119673
Registrován: 30 říj 2003 13:42
Bydliště: Plzeň
Kontaktovat uživatele:
Kontaktovat uživatele Rudy

Re: Prosim o kontrolu a pomoc s av666@weekendwarrior55

#2 Příspěvek od Rudy »

Zdravím!
Dejte log FRST: http://forum.viry.cz/viewtopic.php?f=13&t=133100 . HijackThis je už dávno za zenitem.
Dotazy a logy vkládejte pouze do vašich threadů. Soukromé zprávy, icq a e-maily neslouží k řešení vašich problémů.

Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.

Navštivte: Obrázek

e-mail: rudy(zavináč)forum.viry.cz

Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!


Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Nahoru
Aldamer
Návštěvník
Návštěvník
Příspěvky: 7
Registrován: 06 pro 2015 10:19

Re: Prosim o kontrolu a pomoc s av666@weekendwarrior55

#3 Příspěvek od Aldamer »

Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version:05-12-2015
Ran by M&J (administrator) on MJ91AEX (06-12-2015 11:27:41)
Running from C:\Documents and Settings\M&J\Dokumenty\Stažené soubory
Loaded Profiles: M&J (Available Profiles: M&J & Administrator)
Platform: Microsoft Windows XP Home Edition Service Pack 3 (X86) Language: Čeština
Internet Explorer Version 8 (Default browser: FF)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/33 ... scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(Microsoft Corporation) C:\Program Files\Windows Defender\MsMpEng.exe
(ESET) C:\Program Files\ESET\ESET Smart Security\ekrn.exe
(Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE
(Prolific Technology Inc.) C:\WINDOWS\system32\IoctlSvc.exe
(PixArt Imaging Incorporation) C:\WINDOWS\PixArt\Pac207\Monitor.exe
(Realtek Semiconductor Corp.) C:\WINDOWS\RTHDCPL.EXE
(ESET) C:\Program Files\ESET\ESET Smart Security\egui.exe
(Microsoft Corporation) C:\Program Files\Windows Defender\MSASCui.exe
(Microsoft Corporation) C:\Program Files\Messenger\msmsgs.exe
(Piriform Ltd) C:\Program Files\CCleaner\CCleaner.exe
(Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe
(Trend Micro Inc.) C:\Documents and Settings\M&J\Dokumenty\Stažené soubory\HijackThis.exe


==================== Registry (Whitelisted) ===========================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [PAC207_Monitor] => C:\WINDOWS\PixArt\PAC207\Monitor.exe [319488 2006-11-03] (PixArt Imaging Incorporation)
HKLM\...\Run: [Monitor] => C:\WINDOWS\PixArt\PAC207\Monitor.exe [319488 2006-11-03] (PixArt Imaging Incorporation)
HKLM\...\Run: [RTHDCPL] => C:\WINDOWS\RTHDCPL.EXE [18782720 2009-11-02] (Realtek Semiconductor Corp.)
HKLM\...\Run: [NeroFilterCheck] => C:\Program Files\Common Files\Ahead\Lib\NeroCheck.exe [570664 2008-05-28] (Nero AG)
HKLM\...\Run: [egui] => C:\Program Files\ESET\ESET Smart Security\egui.exe [2054360 2009-11-16] (ESET)
HKLM\...\Run: [Windows Defender] => C:\Program Files\Windows Defender\MSASCui.exe [866584 2006-11-03] (Microsoft Corporation)
HKU\S-1-5-21-1935655697-1085031214-1801674531-1004\...\Run: [MSMSGS] => C:\Program Files\Messenger\msmsgs.exe [1695232 2008-04-14] (Microsoft Corporation)
HKU\S-1-5-21-1935655697-1085031214-1801674531-1004\...\Run: [CCleaner Monitoring] => C:\Program Files\CCleaner\CCleaner.exe [6602152 2015-11-16] (Piriform Ltd)
HKU\S-1-5-18\...\Run: [DWQueuedReporting] => C:\Program Files\Common Files\Microsoft Shared\DW\DWTRIG20.EXE [434080 2011-07-27] (Microsoft Corporation)
HKU\S-1-5-18\Control Panel\Desktop\\SCRNSAVE.EXE -> (None)
ShellExecuteHooks: Microsoft AntiMalware ShellExecuteHook - {091EB208-39DD-417D-A5DD-7E2C2D8FB9CB} - C:\Program Files\Windows Defender\MpShHook.dll [83224 2006-11-03] (Microsoft Corporation)

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

Tcpip\Parameters: [DhcpNameServer] 192.168.100.254
Tcpip\..\Interfaces\{7583D67E-2074-4F50-A918-CA5BF8B680ED}: [DhcpNameServer] 192.168.100.254
Tcpip\..\Interfaces\{D36E2C09-75A8-4853-8DA4-007AA3E57A5B}: [DhcpNameServer] 213.46.172.36 213.46.172.37

Internet Explorer:
==================
HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.google.com
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL =
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://www.google.com
HKLM\Software\Microsoft\Internet Explorer\Main,Local Page =
HKU\S-1-5-21-1935655697-1085031214-1801674531-1004\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.seznam.cz/
BHO: Adobe PDF Link Helper -> {18DF081C-E8AD-4283-A596-FA578C2EBDC3} -> C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2012-09-23] (Adobe Systems Incorporated)
Toolbar: HKU\S-1-5-21-1935655697-1085031214-1801674531-1004 -> &Adresa - {01E04581-4EEE-11D0-BFE9-00AA005B4383} - C:\WINDOWS\system32\browseui.dll [2008-04-14] (Společnost Microsoft)

FireFox:
========
FF ProfilePath: C:\Documents and Settings\M&J\Data aplikací\Mozilla\Firefox\Profiles\th3gvl0z.default
FF Plugin: @adobe.com/FlashPlayer -> C:\WINDOWS\system32\Macromed\Flash\NPSWF32.dll [2010-01-27] ()
FF Plugin: @microsoft.com/WPF,version=3.5 -> c:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll [2008-07-29] (Microsoft Corporation)
FF Plugin: Adobe Reader -> C:\Program Files\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll [2012-09-23] (Adobe Systems Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\NPOFF12.DLL [2006-10-26] (Microsoft Corporation)
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\nppdf32.dll [2012-09-23] (Adobe Systems Inc.)
FF HKLM\...\Firefox\Extensions: [{20a82645-c095-46ed-80e3-08825760534b}] - c:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension
FF Extension: Microsoft .NET Framework Assistant - c:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension [2013-10-18] [not signed]
FF HKLM\...\Thunderbird\Extensions: [eplgTb@eset.com] - C:\Program Files\ESET\ESET Smart Security\Mozilla Thunderbird
FF Extension: Eset Plugin - C:\Program Files\ESET\ESET Smart Security\Mozilla Thunderbird [2010-01-07] [not signed]

==================== Services (Whitelisted) ========================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

S3 EhttpSrv; C:\Program Files\ESET\ESET Smart Security\EHttpSrv.exe [20680 2009-11-16] (ESET)
R2 ekrn; C:\Program Files\ESET\ESET Smart Security\ekrn.exe [735960 2009-11-16] (ESET)
R2 PLFlash DeviceIoControl Service; C:\WINDOWS\system32\IoctlSvc.exe [81920 2006-12-19] (Prolific Technology Inc.) [File not signed]
R2 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [13592 2006-11-03] (Microsoft Corporation)

===================== Drivers (Whitelisted) ==========================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

S3 Ambfilt; C:\WINDOWS\System32\drivers\Ambfilt.sys [1684736 2008-08-05] (Creative)
S3 CCDECODE; C:\WINDOWS\System32\DRIVERS\CCDECODE.sys [17024 2008-04-14] (Microsoft Corporation)
R2 eamon; C:\WINDOWS\System32\DRIVERS\eamon.sys [116520 2009-11-16] (ESET)
R1 ehdrv; C:\WINDOWS\System32\DRIVERS\ehdrv.sys [108792 2009-11-16] (ESET)
R3 EL90XBC; C:\WINDOWS\System32\DRIVERS\el90xbc5.sys [66591 2001-08-17] (3Com Corporation)
R2 epfw; C:\WINDOWS\System32\DRIVERS\epfw.sys [135048 2009-11-16] (ESET)
R3 Epfwndis; C:\WINDOWS\System32\DRIVERS\Epfwndis.sys [33096 2009-06-19] (ESET)
R1 epfwtdi; C:\WINDOWS\System32\DRIVERS\epfwtdi.sys [55768 2009-11-16] (ESET)
S3 EsgScanner; C:\WINDOWS\System32\DRIVERS\EsgScanner.sys [19984 2015-12-05] ()
R3 mf; C:\WINDOWS\System32\DRIVERS\mf.sys [63744 2008-04-13] (Microsoft Corporation)
S3 Monfilt; C:\WINDOWS\System32\drivers\Monfilt.sys [1389056 2006-01-04] (Creative Technology Ltd.)
S3 NdisIP; C:\WINDOWS\System32\DRIVERS\NdisIP.sys [10880 2008-04-14] (Microsoft Corporation)
R3 NmPar; C:\WINDOWS\System32\DRIVERS\NmPar.sys [80256 2008-12-24] (Windows (R) 2000 DDK provider)
R3 nmserial; C:\WINDOWS\System32\DRIVERS\nmserial.sys [70016 2008-12-16] (Windows (R) 2000 DDK provider)
S3 PAC207; C:\WINDOWS\System32\DRIVERS\PFC027.SYS [616064 2007-10-25] (PixArt Imaging Inc.) [File not signed]
R3 RT73; C:\WINDOWS\System32\DRIVERS\rt73.sys [465152 2008-10-23] (Ralink Technology, Corp.) [File not signed]
S3 RTL8169; C:\WINDOWS\System32\DRIVERS\Rtlh86.sys [168448 2009-07-03] (Realtek ) [File not signed]
S1 wceusbsh; C:\WINDOWS\System32\DRIVERS\wceusbsh.sys [31744 2008-04-14] (Microsoft Corporation)
S4 IntelIde; no ImagePath
U1 WS2IFSL; no ImagePath

==================== NetSvcs (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)


==================== One Month Created files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2015-12-06 11:27 - 2015-12-06 11:27 - 00000000 ____D C:\FRST
2015-12-06 10:07 - 2015-12-06 10:07 - 00001804 _____ C:\Documents and Settings\All Users\Nabídka Start\Programy\Adobe Reader XI.lnk
2015-12-06 10:07 - 2015-12-06 10:07 - 00001734 _____ C:\Documents and Settings\All Users\Plocha\Adobe Reader XI.lnk
2015-12-06 08:31 - 2015-12-06 10:08 - 00004062 _____ C:\WINDOWS\SchedLgU.Txt
2015-12-06 08:12 - 2015-12-06 08:12 - 00000682 _____ C:\Documents and Settings\All Users\Plocha\CCleaner.lnk
2015-12-06 08:12 - 2015-12-06 08:12 - 00000000 ____D C:\Program Files\CCleaner
2015-12-06 08:12 - 2015-12-06 08:12 - 00000000 ____D C:\Documents and Settings\All Users\Nabídka Start\Programy\CCleaner
2015-12-06 07:52 - 2015-12-06 07:52 - 00000664 _____ C:\WINDOWS\system32\d3d9caps.dat
2015-12-06 00:06 - 2015-08-15 13:42 - 00000000 ____D C:\Documents and Settings\M&J\Plocha\SpyHunter 4.19.13.4482 & Portable (menin)
2015-12-05 23:54 - 2015-12-05 23:54 - 00000000 ____D C:\Program Files\Malwarebytes Anti-Malware
2015-12-05 23:54 - 2015-12-05 23:54 - 00000000 ____D C:\Documents and Settings\All Users\Nabídka Start\Programy\Malwarebytes Anti-Malware
2015-12-05 23:54 - 2015-12-05 23:54 - 00000000 ____D C:\Documents and Settings\All Users\Data aplikací\Malwarebytes
2015-12-05 23:54 - 2015-10-05 09:50 - 00121560 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\mbamchameleon.sys
2015-12-05 23:54 - 2015-10-05 09:50 - 00023256 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\mbam.sys
2015-12-05 23:53 - 2015-11-13 13:27 - 00000000 ____D C:\Documents and Settings\M&J\Plocha\MBAM - MalwareBytes.Anti-Malware.Premium.v2.2.0.1024+activator
2015-12-05 23:38 - 2015-12-05 23:38 - 00019984 _____ C:\WINDOWS\system32\Drivers\EsgScanner.sys
2015-12-05 23:32 - 2015-12-05 23:33 - 00005120 ___SH C:\Documents and Settings\M&J\Data aplikací\Thumbs.db
2015-12-05 23:14 - 2015-12-05 23:14 - 00000000 _____ C:\23990098.$$$
2015-12-05 23:11 - 2015-12-05 23:11 - 06485059 _____ C:\WINDOWS\REGBK00.ZIP
2015-12-05 23:04 - 2015-12-05 23:04 - 00000000 ____D C:\WINDOWS\VDLL.DLL
2015-12-05 23:04 - 2015-12-05 23:04 - 00000000 ____D C:\WINDOWS\system32\runouce.exe
2015-12-05 23:04 - 2015-12-05 23:04 - 00000000 ____D C:\WINDOWS\rundll16.exe
2015-12-05 23:04 - 2015-12-05 23:04 - 00000000 ____D C:\WINDOWS\RUNDL132.EXE
2015-12-05 23:04 - 2015-12-05 23:04 - 00000000 ____D C:\WINDOWS\logo1_.exe
2015-12-05 23:04 - 2015-12-05 23:04 - 00000000 ____D C:\WINDOWS\logo_1.exe
2015-12-05 22:52 - 2015-12-05 23:04 - 00000054 _____ C:\WINDOWS\Lic.xxx
2015-12-05 22:52 - 2015-12-05 22:52 - 00632064 _____ (Microsoft Corporation) C:\WINDOWS\system32\msvcr80.dll
2015-12-05 22:52 - 2015-12-05 22:52 - 00554240 _____ (Microsoft Corporation) C:\WINDOWS\system32\msvcp80.dll
2015-12-05 22:52 - 2015-12-05 22:52 - 00034048 _____ (MicroWorld Technologies Inc.) C:\WINDOWS\system32\eEmpty.exe
2015-12-05 22:52 - 2008-04-14 13:00 - 00147968 _____ (Microsoft Corporation) C:\WINDOWS\REGEDIT.COM
2015-12-05 22:52 - 2008-04-14 13:00 - 00147968 _____ (Microsoft Corporation) C:\WINDOWS\R.COM
2015-12-05 22:52 - 2008-04-14 13:00 - 00137216 _____ (Microsoft Corporation) C:\WINDOWS\system32\TASKMGR.COM
2015-12-05 22:52 - 2008-04-14 13:00 - 00137216 _____ (Microsoft Corporation) C:\WINDOWS\system32\T.COM
2015-12-05 22:52 - 2005-09-22 23:22 - 00000522 _____ C:\WINDOWS\system32\Microsoft.VC80.CRT.manifest
2015-12-05 22:51 - 2015-12-05 22:51 - 00000000 ____D C:\Program Files\Common Files\MicroWorld
2015-12-05 22:51 - 2015-12-05 22:51 - 00000000 ____D C:\Documents and Settings\All Users\Data aplikací\MicroWorld
2015-12-05 22:47 - 2015-12-05 22:47 - 00000000 ____D C:\Documents and Settings\M&J\Plocha\TL-WN321G_100324
2015-12-05 22:47 - 2015-12-05 22:40 - 61052072 _____ C:\Documents and Settings\M&J\Plocha\MWAV.exe
2015-12-05 22:47 - 2008-10-23 11:16 - 00465152 _____ (Ralink Technology, Corp.) C:\WINDOWS\system32\Drivers\rt73.sys
2015-12-05 21:49 - 2015-12-05 22:56 - 00000000 ____D C:\WINDOWS\027B5748C40941FE949B7B81A8304EF4.TMP
2015-12-05 21:49 - 2015-12-05 21:49 - 00000000 ____D C:\Program Files\Common Files\Wise Installation Wizard
2015-12-05 21:38 - 2015-12-05 21:52 - 00001599 _____ C:\Documents and Settings\Administrator\Nabídka Start\Programy\Vzdálená pomoc.lnk
2015-12-05 21:38 - 2015-12-05 21:42 - 00000178 ___SH C:\Documents and Settings\Administrator\ntuser.ini
2015-12-05 21:38 - 2015-12-05 21:40 - 00000000 ____D C:\Documents and Settings\Administrator\Local Settings\Temp
2015-12-05 21:38 - 2015-12-05 21:38 - 00000000 ____D C:\Documents and Settings\Administrator
2015-12-05 21:38 - 2015-12-03 13:30 - 00000000 ___HD C:\Documents and Settings\Administrator\Šablony
2015-12-05 21:38 - 2009-12-07 18:09 - 00000000 ___HD C:\Documents and Settings\Administrator\Local Settings\Data aplikací
2015-12-05 21:38 - 2009-12-07 18:09 - 00000000 ____D C:\Documents and Settings\Administrator\Local Settings\Data aplikací\Microsoft Help
2015-12-05 21:38 - 2009-12-07 18:07 - 00000000 __SHD C:\Documents and Settings\Administrator\IETldCache
2015-12-05 21:38 - 2009-10-03 17:02 - 00000000 __RHD C:\Documents and Settings\Administrator\Data aplikací
2015-12-05 21:38 - 2009-10-03 17:02 - 00000000 ___RD C:\Documents and Settings\Administrator\Nabídka Start\Programy\Po spuštění
2015-12-05 21:38 - 2009-10-03 17:02 - 00000000 ___RD C:\Documents and Settings\Administrator\Nabídka Start
2015-12-05 21:38 - 2009-10-03 17:02 - 00000000 ___HD C:\Documents and Settings\Administrator\Okolní tiskárny
2015-12-05 21:38 - 2009-10-03 17:02 - 00000000 ___HD C:\Documents and Settings\Administrator\Okolní síť
2015-12-05 21:38 - 2009-10-03 17:02 - 00000000 ____D C:\Documents and Settings\Administrator\Plocha
2015-12-05 21:38 - 2009-10-03 17:02 - 00000000 ____D C:\Documents and Settings\Administrator\Oblíbené položky
2015-12-05 21:38 - 2009-10-03 17:02 - 00000000 ____D C:\Documents and Settings\Administrator\Dokumenty
2015-12-05 21:38 - 2009-10-03 15:21 - 00000792 _____ C:\Documents and Settings\Administrator\Nabídka Start\Programy\Windows Media Player.lnk
2015-12-05 21:38 - 2009-10-03 15:21 - 00000000 ___RD C:\Documents and Settings\Administrator\Nabídka Start\Programy\Příslušenství
2015-12-05 21:38 - 2009-10-03 15:21 - 00000000 ___RD C:\Documents and Settings\Administrator\Nabídka Start\Programy
2015-12-03 19:49 - 2015-12-03 19:49 - 00000000 ___HD C:\WINDOWS\PIF
2015-11-28 11:33 - 2015-12-03 13:47 - 00002116 _____ C:\Documents and Settings\M&J\Plocha\Ryby Agregát.txt.id-6304444540_av666@weekendwarrior55.com
2015-11-17 00:29 - 2015-12-03 13:47 - 00235339 _____ C:\Documents and Settings\M&J\Plocha\361_2000 Sb..txt.id-6304444540_av666@weekendwarrior55.com
2015-11-16 10:36 - 2015-11-16 10:46 - 00000724 _____ C:\Documents and Settings\All Users\Plocha\Mozilla Firefox.lnk
2015-11-15 00:19 - 2015-12-03 13:47 - 00001668 _____ C:\Documents and Settings\M&J\Plocha\Výkon světelných zdrojů.txt.id-6304444540_av666@weekendwarrior55.com
2015-11-14 20:33 - 2015-12-03 13:47 - 00009172 _____ C:\Documents and Settings\M&J\Plocha\Lumen Watt.txt.id-6304444540_av666@weekendwarrior55.com
2015-11-12 11:54 - 2015-12-03 13:47 - 00030068 _____ C:\Documents and Settings\M&J\Plocha\AU Tom.txt.id-6304444540_av666@weekendwarrior55.com
2015-11-12 08:32 - 2015-12-03 13:47 - 00004724 _____ C:\Documents and Settings\M&J\Plocha\AU Separace.txt.id-6304444540_av666@weekendwarrior55.com
2015-11-11 22:20 - 2015-12-03 13:47 - 00000116 _____ C:\Documents and Settings\M&J\Plocha\Spektrum.txt.id-6304444540_av666@weekendwarrior55.com
2015-11-09 23:08 - 2015-12-03 13:47 - 00010212 _____ C:\Documents and Settings\M&J\Plocha\Hnojiva.txt.id-6304444540_av666@weekendwarrior55.com
2015-11-09 18:05 - 2015-12-03 13:47 - 00000820 _____ C:\Documents and Settings\M&J\Plocha\Spektrum rust.txt.id-6304444540_av666@weekendwarrior55.com
2015-11-08 22:32 - 2015-12-03 13:47 - 00038301 _____ C:\Documents and Settings\M&J\Plocha\Pestoování.txt.id-6304444540_av666@weekendwarrior55.com
2015-11-06 22:16 - 2015-11-16 10:46 - 00000000 ____D C:\Program Files\Mozilla Firefox

==================== One Month Modified files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2015-12-06 11:27 - 2010-01-07 13:33 - 00000000 ____D C:\Documents and Settings\M&J\Dokumenty\Stažené soubory
2015-12-06 11:27 - 2009-10-03 16:54 - 00000000 ____D C:\WINDOWS
2015-12-06 11:27 - 2009-10-03 15:28 - 00000000 ____D C:\Documents and Settings\M&J\Local Settings\Temp
2015-12-06 10:12 - 2010-02-03 10:28 - 00000330 ____H C:\WINDOWS\Tasks\MP Scheduled Scan.job
2015-12-06 10:09 - 2014-03-12 07:50 - 00000218 _____ C:\WINDOWS\Tasks\Přihlášení k oznamování konce poskytování služeb pro Microsoft Windows XP.job
2015-12-06 10:09 - 2009-10-03 15:26 - 00000006 ____H C:\WINDOWS\Tasks\SA.DAT
2015-12-06 10:08 - 2009-10-03 15:28 - 00000178 ___SH C:\Documents and Settings\M&J\ntuser.ini
2015-12-06 10:07 - 2014-01-07 21:16 - 00000000 ____D C:\Program Files\Common Files\Adobe
2015-12-06 10:07 - 2010-01-13 17:50 - 00000000 ____D C:\Program Files\Adobe
2015-12-06 10:07 - 2009-10-05 15:48 - 00000000 ____D C:\Documents and Settings\All Users\Data aplikací\Adobe
2015-12-06 10:07 - 2009-10-03 17:02 - 00000000 ___RD C:\Documents and Settings\All Users\Nabídka Start\Programy
2015-12-06 10:07 - 2009-10-03 17:02 - 00000000 ____D C:\Documents and Settings\All Users\Plocha
2015-12-06 10:06 - 2009-10-05 15:49 - 00000000 ____D C:\Documents and Settings\M&J\Local Settings\Data aplikací\Adobe
2015-12-06 08:46 - 2009-10-03 15:20 - 00000000 ___SD C:\WINDOWS\Downloaded Program Files
2015-12-06 08:41 - 2009-10-05 15:48 - 00004384 _____ C:\WINDOWS\WINCMD.INI
2015-12-06 08:21 - 2009-12-23 00:29 - 00000000 ____D C:\WINDOWS\Minidump
2015-12-06 08:21 - 2009-10-03 15:28 - 00000000 ____D C:\Documents and Settings\M&J
2015-12-06 08:14 - 2009-10-03 15:28 - 00000000 ____D C:\Documents and Settings\M&J\Plocha
2015-12-06 06:34 - 2009-10-03 15:28 - 00000000 ___RD C:\Documents and Settings\M&J\Nabídka Start\Programy\Po spuštění
2015-12-06 02:51 - 2009-10-03 15:24 - 00000000 ____D C:\Documents and Settings\NetworkService\Local Settings\Temp
2015-12-05 23:39 - 2009-10-03 16:54 - 00000000 ___HD C:\WINDOWS\inf
2015-12-05 23:39 - 2009-10-03 15:28 - 00000000 __RHD C:\Documents and Settings\M&J\Data aplikací
2015-12-05 22:57 - 2009-10-03 15:28 - 00000000 ___RD C:\Documents and Settings\M&J\Nabídka Start\Programy
2015-12-05 22:51 - 2009-10-03 17:02 - 00000000 __RHD C:\Documents and Settings\All Users\Data aplikací
2015-12-05 22:50 - 2009-10-03 17:03 - 01022012 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2015-12-05 22:50 - 2008-04-14 13:00 - 00429454 _____ C:\WINDOWS\system32\perfh005.dat
2015-12-05 22:50 - 2008-04-14 13:00 - 00078466 _____ C:\WINDOWS\system32\perfc005.dat
2015-12-05 22:18 - 2009-10-03 15:28 - 00001599 _____ C:\Documents and Settings\M&J\Nabídka Start\Programy\Vzdálená pomoc.lnk
2015-12-05 21:52 - 2009-10-03 15:21 - 00001599 _____ C:\Documents and Settings\Default User\Nabídka Start\Programy\Vzdálená pomoc.lnk
2015-12-05 21:38 - 2009-10-03 17:01 - 00000000 ____D C:\Documents and Settings
2015-12-05 21:22 - 2008-04-14 13:00 - 00013646 _____ C:\WINDOWS\system32\wpa.dbl
2015-12-04 13:57 - 2010-09-30 09:10 - 00722452 ____H C:\treeinfo.wc
2015-12-04 13:55 - 2010-01-07 15:25 - 00000000 ____D C:\Program Files\_001
2015-12-04 02:08 - 2014-02-11 09:57 - 00000000 ____D C:\Program Files\_Hotovo
2015-12-04 00:15 - 2009-11-27 22:31 - 00000069 _____ C:\WINDOWS\NeroDigital.ini
2015-12-03 17:37 - 2015-01-10 10:21 - 00000000 ____D C:\Program Files\_Mobil
2015-12-03 13:49 - 2012-05-22 09:52 - 00000000 ____D C:\preload
2015-12-03 13:48 - 2011-08-06 09:55 - 00000000 ____D C:\Documents and Settings\M&J\Dokumenty\@Družstvo_Liben
2015-12-03 13:48 - 2009-12-07 14:35 - 00000000 ____D C:\Documents and Settings\M&J\Dokumenty\@Jana
2015-12-03 13:48 - 2009-10-03 15:28 - 00000000 ___RD C:\Documents and Settings\M&J\Dokumenty\Obrázky
2015-12-03 13:47 - 2015-10-31 15:51 - 00155747 _____ C:\Documents and Settings\M&J\Plocha\Zadost o prechod naroku na prukaz OZP.pdf.id-6304444540_av666@weekendwarrior55.com
2015-12-03 13:47 - 2015-10-31 14:12 - 00001908 _____ C:\Documents and Settings\M&J\Plocha\ZTP_P.txt.id-6304444540_av666@weekendwarrior55.com
2015-12-03 13:47 - 2015-10-30 22:47 - 00009908 _____ C:\Documents and Settings\M&J\Plocha\Dobývání měsíce.txt
2015-12-03 13:47 - 2015-10-21 12:32 - 00005092 _____ C:\Documents and Settings\M&J\Plocha\Google.txt.id-6304444540_av666@weekendwarrior55.com
2015-12-03 13:47 - 2015-10-16 11:20 - 00003620 _____ C:\Documents and Settings\M&J\Plocha\Dobíjení Autobaterie.txt.id-6304444540_av666@weekendwarrior55.com
2015-12-03 13:47 - 2015-10-12 15:06 - 00002116 _____ C:\Documents and Settings\M&J\Plocha\Svetelo Kelvin.txt.id-6304444540_av666@weekendwarrior55.com
2015-12-03 13:47 - 2015-10-10 21:56 - 00127841 _____ C:\Documents and Settings\M&J\Plocha\0ce69f4c-9c62-4131-ad8f-6cdca8619b15.jpg.id-6304444540_av666@weekendwarrior55.com
2015-12-03 13:47 - 2015-10-02 17:46 - 00015940 _____ C:\Documents and Settings\M&J\Plocha\Demark GPS.txt.id-6304444540_av666@weekendwarrior55.com
2015-12-03 13:47 - 2015-10-01 16:56 - 00029684 _____ C:\Documents and Settings\M&J\Plocha\Demark Linie.txt.id-6304444540_av666@weekendwarrior55.com
2015-12-03 13:47 - 2015-09-25 07:55 - 00014084 _____ C:\Documents and Settings\M&J\Plocha\Detektor.txt.id-6304444540_av666@weekendwarrior55.com
2015-12-03 13:47 - 2015-08-30 16:01 - 00002532 _____ C:\Documents and Settings\M&J\Plocha\Irisin PAV70.txt.id-6304444540_av666@weekendwarrior55.com
2015-12-03 13:47 - 2015-06-10 12:56 - 00060633 _____ C:\Documents and Settings\M&J\Plocha\1968.txt.id-6304444540_av666@weekendwarrior55.com
2015-12-03 13:47 - 2015-06-10 09:57 - 00000564 _____ C:\Documents and Settings\M&J\Plocha\Brus.txt.id-6304444540_av666@weekendwarrior55.com
2015-12-03 13:47 - 2015-05-28 21:09 - 00002452 _____ C:\Documents and Settings\M&J\Plocha\Mutant.txt.id-6304444540_av666@weekendwarrior55.com
2015-12-03 13:47 - 2015-05-01 15:40 - 00000996 _____ C:\Documents and Settings\M&J\Plocha\Zavadero.txt.id-6304444540_av666@weekendwarrior55.com
2015-12-03 13:47 - 2015-05-01 06:54 - 00001732 _____ C:\Documents and Settings\M&J\Plocha\Janovec zasilky.txt.id-6304444540_av666@weekendwarrior55.com
2015-12-03 13:47 - 2015-04-10 18:57 - 00123718 _____ C:\Documents and Settings\M&J\Plocha\Prospekce zlato2.txt.id-6304444540_av666@weekendwarrior55.com
2015-12-03 13:47 - 2015-04-10 18:46 - 00039296 _____ C:\Documents and Settings\M&J\Plocha\Zlato Prospekce.txt.id-6304444540_av666@weekendwarrior55.com
2015-12-03 13:47 - 2015-04-06 13:48 - 00009700 _____ C:\Documents and Settings\M&J\Plocha\Vltavíny.txt.id-6304444540_av666@weekendwarrior55.com
2015-12-03 13:47 - 2015-03-31 21:14 - 00003412 _____ C:\Documents and Settings\M&J\Plocha\Spirztual.txt.id-6304444540_av666@weekendwarrior55.com
2015-12-03 13:47 - 2015-03-30 08:01 - 00000804 _____ C:\Documents and Settings\M&J\Plocha\Kubů_Byt.txt.id-6304444540_av666@weekendwarrior55.com
2015-12-03 13:47 - 2015-03-30 06:18 - 00214020 _____ C:\Documents and Settings\M&J\Plocha\ZlatoMapa.doc.id-6304444540_av666@weekendwarrior55.com
2015-12-03 13:47 - 2015-03-28 14:41 - 00024068 _____ C:\Documents and Settings\M&J\Plocha\Jil Pro Každého.txt.id-6304444540_av666@weekendwarrior55.com
2015-12-03 13:47 - 2015-03-27 23:04 - 00107289 _____ C:\Documents and Settings\M&J\Plocha\J I L Universita2.txt.id-6304444540_av666@weekendwarrior55.com
2015-12-03 13:47 - 2015-02-23 22:37 - 00005204 _____ C:\Documents and Settings\M&J\Plocha\Meteorit.txt.id-6304444540_av666@weekendwarrior55.com
2015-12-03 13:47 - 2015-02-21 23:17 - 00005684 _____ C:\Documents and Settings\M&J\Plocha\Noze nalezy.txt.id-6304444540_av666@weekendwarrior55.com
2015-12-03 13:47 - 2014-10-23 08:39 - 00000500 _____ C:\Documents and Settings\M&J\Plocha\Retezy.txt.id-6304444540_av666@weekendwarrior55.com
2015-12-03 13:47 - 2014-09-21 13:23 - 00005252 _____ C:\Documents and Settings\M&J\Plocha\Extrakce Ultrazvuk.txt.id-6304444540_av666@weekendwarrior55.com
2015-12-03 13:47 - 2014-09-17 21:07 - 00000420 _____ C:\Documents and Settings\M&J\Plocha\Linky.txt.id-6304444540_av666@weekendwarrior55.com
2015-12-03 13:47 - 2014-06-08 18:26 - 00012388 _____ C:\Documents and Settings\M&J\Plocha\Kamen zubni.txt.id-6304444540_av666@weekendwarrior55.com
2015-12-03 13:47 - 2014-04-27 19:22 - 00038360 _____ C:\Documents and Settings\M&J\Plocha\Občan.txt.id-6304444540_av666@weekendwarrior55.com
2015-12-03 13:47 - 2014-04-27 11:54 - 00031947 _____ C:\Documents and Settings\M&J\Plocha\Předhled odchylek vyúčtování tepla.pdf.id-6304444540_av666@weekendwarrior55.com
2015-12-03 13:47 - 2014-04-14 11:35 - 00001252 _____ C:\Documents and Settings\M&J\Plocha\Eta.txt.id-6304444540_av666@weekendwarrior55.com
2015-12-03 13:47 - 2013-11-07 19:11 - 12998782 _____ C:\Documents and Settings\M&J\Plocha\korektury 6. 11..pdf.id-6304444540_av666@weekendwarrior55.com
2015-12-03 13:47 - 2011-07-20 08:20 - 00000180 ____H C:\Documents and Settings\M&J\Plocha\~$rd_Delo.doc.id-6304444540_av666@weekendwarrior55.com
2015-12-03 13:47 - 2010-01-08 08:42 - 00000000 ____D C:\Documents and Settings\M&J\Dokumenty\@Spolecne
2015-12-03 13:47 - 2009-11-27 16:53 - 00000000 ___RD C:\Documents and Settings\M&J\Dokumenty\Kamera
2015-12-03 13:47 - 2009-10-03 15:28 - 00000000 ___HD C:\Documents and Settings\M&J\Šablony
2015-12-03 13:43 - 2010-01-08 08:34 - 00000000 ____D C:\Documents and Settings\M&J\Dokumenty\@Druzstvo_HJ
2015-12-03 13:41 - 2009-12-07 14:18 - 00000000 ____D C:\Documents and Settings\M&J\Dokumenty\@Milan
2015-12-03 13:35 - 2009-11-27 15:53 - 00000000 ____D C:\Documents and Settings\M&J\Local Settings\Data aplikací\GHISLER
2015-12-03 13:35 - 2009-10-03 15:31 - 05900282 ____H C:\Documents and Settings\M&J\Local Settings\Data aplikací\IconCache.db.id-6304444540_av666@weekendwarrior55.com
2015-12-03 13:35 - 2009-10-03 15:28 - 00000000 ___HD C:\Documents and Settings\M&J\Local Settings\Data aplikací
2015-12-03 13:30 - 2009-10-03 17:02 - 00000000 ___HD C:\Documents and Settings\Default User\Šablony
2015-12-01 14:12 - 2009-10-03 15:28 - 00000000 ___RD C:\Documents and Settings\M&J\Dokumenty
2015-11-23 12:20 - 2010-03-08 18:19 - 00002563 _____ C:\Documents and Settings\M&J\Plocha\Microsoft Office Word 2007.lnk
2015-11-16 17:35 - 2012-05-16 20:43 - 00000000 ____D C:\Program Files\Mozilla Maintenance Service
2015-11-16 10:46 - 2012-05-16 20:43 - 00000730 _____ C:\Documents and Settings\All Users\Nabídka Start\Programy\Mozilla Firefox.lnk
2015-11-11 12:29 - 2013-08-02 09:11 - 00000000 ____D C:\WINDOWS\system32\MRT
2015-11-11 12:27 - 2009-10-05 08:56 - 143250520 _____ (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
2015-11-11 12:26 - 2009-11-27 13:45 - 00000000 ____D C:\Documents and Settings\All Users\Data aplikací\Microsoft Help
2015-11-08 18:58 - 2009-10-03 16:54 - 00000000 ____D C:\WINDOWS\Network Diagnostic
2015-11-08 15:00 - 2014-03-12 07:50 - 00000212 _____ C:\WINDOWS\Tasks\Měsíční oznamování konce poskytování služeb pro Microsoft Windows XP.job

==================== Files in the root of some directories =======

2015-12-05 23:32 - 2015-12-05 23:33 - 0005120 ___SH () C:\Documents and Settings\M&J\Data aplikací\Thumbs.db
2009-10-06 08:50 - 2015-10-31 18:14 - 0184832 _____ () C:\Documents and Settings\M&J\Local Settings\Data aplikací\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini

Some zero byte size files/folders:
==========================
C:\Windows\logo1_.exe
C:\Windows\logo_1.exe
C:\Windows\RUNDL132.EXE
C:\Windows\rundll16.exe
C:\Windows\VDLL.DLL
C:\Windows\System32\runouce.exe

==================== Bamital & volsnap =================

(There is no automatic fix for files that do not pass verification.)

C:\WINDOWS\explorer.exe => File is digitally signed
C:\WINDOWS\system32\winlogon.exe => File is digitally signed
C:\WINDOWS\system32\svchost.exe => File is digitally signed
C:\WINDOWS\system32\services.exe => File is digitally signed
C:\WINDOWS\system32\User32.dll => File is digitally signed
C:\WINDOWS\system32\userinit.exe => File is digitally signed
C:\WINDOWS\system32\rpcss.dll => File is digitally signed
C:\WINDOWS\system32\dnsapi.dll => File is digitally signed
C:\WINDOWS\system32\Drivers\volsnap.sys => File is digitally signed

==================== End of FRST.txt ============================
Nahoru
Uživatelský avatar
Rudy
Site Admin
Site Admin
Příspěvky: 119673
Registrován: 30 říj 2003 13:42
Bydliště: Plzeň
Kontaktovat uživatele:
Kontaktovat uživatele Rudy

Re: Prosim o kontrolu a pomoc s av666@weekendwarrior55

#4 Příspěvek od Rudy »

Teď spusťte tuto utilitu:
Stáhněte AdwCleaner http://general-changelog-team.fr/fr/dow ... adwcleaner
Uložte na plochu
Ukončete všechny programy
Klikněte nejprve na >Scan< a pak na >Clean<.
Proběhne skenováni a pak se objeví log, který sem vložte.
Dotazy a logy vkládejte pouze do vašich threadů. Soukromé zprávy, icq a e-maily neslouží k řešení vašich problémů.

Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.

Navštivte: Obrázek

e-mail: rudy(zavináč)forum.viry.cz

Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!


Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Nahoru
Aldamer
Návštěvník
Návštěvník
Příspěvky: 7
Registrován: 06 pro 2015 10:19

Re: Prosim o kontrolu a pomoc s av666@weekendwarrior55

#5 Příspěvek od Aldamer »

Vynutil si restartovani, pote ukazal toto:

# AdwCleaner v5.023 - Logfile created 06/12/2015 at 13:02:59
# Updated 30/11/2015 by Xplode
# Database : 2015-12-03.1 [Server]
# Operating system : Microsoft Windows XP Service Pack 3 (x86)
# Username : M&J - MJ91AEX
# Running from : C:\Documents and Settings\M&J\Plocha\adwcleaner_5.023.exe
# Option : Cleaning
# Support : http://toolslib.net/forum

***** [ Services ] *****


***** [ Folders ] *****

[-] Folder Deleted : C:\Documents and Settings\M&J\Data aplikací\download Manager

***** [ Files ] *****


***** [ DLLs ] *****


***** [ Shortcuts ] *****


***** [ Scheduled tasks ] *****


***** [ Registry ] *****

[-] Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{3CCC052E-BDEE-408A-BEA7-90914EF2964B}
[-] Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{61F47056-E400-43D3-AF1E-AB7DFFD4C4AD}
[-] Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{E2B98EEA-EE55-4E9B-A8C1-6E5288DF785A}
[-] Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{3CA2F312-6F6E-4B53-A66E-4E65E497C8C0}
[-] Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{3CA2F312-6F6E-4B53-A66E-4E65E497C8C0}

***** [ Web browsers ] *****


*************************

:: "Tracing" keys removed
:: Winsock settings cleared

########## EOF - C:\AdwCleaner\AdwCleaner[C1].txt - [1264 bytes] ##########
Nahoru
Uživatelský avatar
Rudy
Site Admin
Site Admin
Příspěvky: 119673
Registrován: 30 říj 2003 13:42
Bydliště: Plzeň
Kontaktovat uživatele:
Kontaktovat uživatele Rudy

Re: Prosim o kontrolu a pomoc s av666@weekendwarrior55

#6 Příspěvek od Rudy »

Dejte nový log FRST.
Dotazy a logy vkládejte pouze do vašich threadů. Soukromé zprávy, icq a e-maily neslouží k řešení vašich problémů.

Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.

Navštivte: Obrázek

e-mail: rudy(zavináč)forum.viry.cz

Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!


Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Nahoru
Aldamer
Návštěvník
Návštěvník
Příspěvky: 7
Registrován: 06 pro 2015 10:19

Re: Prosim o kontrolu a pomoc s av666@weekendwarrior55

#7 Příspěvek od Aldamer »

Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version:05-12-2015
Ran by M&J (administrator) on MJ91AEX (06-12-2015 17:32:03)
Running from C:\Documents and Settings\M&J\Plocha
Loaded Profiles: M&J (Available Profiles: M&J & Administrator)
Platform: Microsoft Windows XP Home Edition Service Pack 3 (X86) Language: Čeština
Internet Explorer Version 8 (Default browser: FF)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/33 ... scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(Microsoft Corporation) C:\Program Files\Windows Defender\MsMpEng.exe
(ESET) C:\Program Files\ESET\ESET Smart Security\ekrn.exe
(Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE
(Prolific Technology Inc.) C:\WINDOWS\system32\IoctlSvc.exe
(Microsoft Corporation) C:\WINDOWS\system32\wuauclt.exe
(PixArt Imaging Incorporation) C:\WINDOWS\PixArt\Pac207\Monitor.exe
(Realtek Semiconductor Corp.) C:\WINDOWS\RTHDCPL.EXE
(ESET) C:\Program Files\ESET\ESET Smart Security\egui.exe
(Microsoft Corporation) C:\Program Files\Windows Defender\MSASCui.exe
(Microsoft Corporation) C:\Program Files\Messenger\msmsgs.exe
(Piriform Ltd) C:\Program Files\CCleaner\CCleaner.exe
(Microsoft Corporation) C:\WINDOWS\system32\dllhost.exe


==================== Registry (Whitelisted) ===========================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [PAC207_Monitor] => C:\WINDOWS\PixArt\PAC207\Monitor.exe [319488 2006-11-03] (PixArt Imaging Incorporation)
HKLM\...\Run: [Monitor] => C:\WINDOWS\PixArt\PAC207\Monitor.exe [319488 2006-11-03] (PixArt Imaging Incorporation)
HKLM\...\Run: [RTHDCPL] => C:\WINDOWS\RTHDCPL.EXE [18782720 2009-11-02] (Realtek Semiconductor Corp.)
HKLM\...\Run: [NeroFilterCheck] => C:\Program Files\Common Files\Ahead\Lib\NeroCheck.exe [570664 2008-05-28] (Nero AG)
HKLM\...\Run: [egui] => C:\Program Files\ESET\ESET Smart Security\egui.exe [2054360 2009-11-16] (ESET)
HKLM\...\Run: [Windows Defender] => C:\Program Files\Windows Defender\MSASCui.exe [866584 2006-11-03] (Microsoft Corporation)
HKU\S-1-5-21-1935655697-1085031214-1801674531-1004\...\Run: [MSMSGS] => C:\Program Files\Messenger\msmsgs.exe [1695232 2008-04-14] (Microsoft Corporation)
HKU\S-1-5-21-1935655697-1085031214-1801674531-1004\...\Run: [CCleaner Monitoring] => C:\Program Files\CCleaner\CCleaner.exe [6602152 2015-11-16] (Piriform Ltd)
HKU\S-1-5-18\...\Run: [DWQueuedReporting] => C:\Program Files\Common Files\Microsoft Shared\DW\DWTRIG20.EXE [434080 2011-07-27] (Microsoft Corporation)
HKU\S-1-5-18\Control Panel\Desktop\\SCRNSAVE.EXE -> (None)
ShellExecuteHooks: Microsoft AntiMalware ShellExecuteHook - {091EB208-39DD-417D-A5DD-7E2C2D8FB9CB} - C:\Program Files\Windows Defender\MpShHook.dll [83224 2006-11-03] (Microsoft Corporation)

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

Tcpip\Parameters: [DhcpNameServer] 192.168.100.254
Tcpip\..\Interfaces\{7583D67E-2074-4F50-A918-CA5BF8B680ED}: [DhcpNameServer] 192.168.100.254
Tcpip\..\Interfaces\{D36E2C09-75A8-4853-8DA4-007AA3E57A5B}: [DhcpNameServer] 213.46.172.36 213.46.172.37

Internet Explorer:
==================
HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.google.com
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL =
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://www.google.com
HKLM\Software\Microsoft\Internet Explorer\Main,Local Page =
HKU\S-1-5-21-1935655697-1085031214-1801674531-1004\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.seznam.cz/
BHO: Adobe PDF Link Helper -> {18DF081C-E8AD-4283-A596-FA578C2EBDC3} -> C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2012-09-23] (Adobe Systems Incorporated)
Toolbar: HKU\S-1-5-21-1935655697-1085031214-1801674531-1004 -> &Adresa - {01E04581-4EEE-11D0-BFE9-00AA005B4383} - C:\WINDOWS\system32\browseui.dll [2008-04-14] (Společnost Microsoft)

FireFox:
========
FF ProfilePath: C:\Documents and Settings\M&J\Data aplikací\Mozilla\Firefox\Profiles\th3gvl0z.default
FF Plugin: @adobe.com/FlashPlayer -> C:\WINDOWS\system32\Macromed\Flash\NPSWF32_19_0_0_245.dll [2015-12-06] ()
FF Plugin: @microsoft.com/WPF,version=3.5 -> c:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll [2008-07-29] (Microsoft Corporation)
FF Plugin: Adobe Reader -> C:\Program Files\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll [2012-09-23] (Adobe Systems Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\NPOFF12.DLL [2006-10-26] (Microsoft Corporation)
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\nppdf32.dll [2012-09-23] (Adobe Systems Inc.)
FF HKLM\...\Firefox\Extensions: [{20a82645-c095-46ed-80e3-08825760534b}] - c:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension
FF Extension: Microsoft .NET Framework Assistant - c:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension [2013-10-18] [not signed]
FF HKLM\...\Thunderbird\Extensions: [eplgTb@eset.com] - C:\Program Files\ESET\ESET Smart Security\Mozilla Thunderbird
FF Extension: Eset Plugin - C:\Program Files\ESET\ESET Smart Security\Mozilla Thunderbird [2010-01-07] [not signed]

==================== Services (Whitelisted) ========================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

S3 EhttpSrv; C:\Program Files\ESET\ESET Smart Security\EHttpSrv.exe [20680 2009-11-16] (ESET)
R2 ekrn; C:\Program Files\ESET\ESET Smart Security\ekrn.exe [735960 2009-11-16] (ESET)
R2 PLFlash DeviceIoControl Service; C:\WINDOWS\system32\IoctlSvc.exe [81920 2006-12-19] (Prolific Technology Inc.) [File not signed]
R2 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [13592 2006-11-03] (Microsoft Corporation)

===================== Drivers (Whitelisted) ==========================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

S3 Ambfilt; C:\WINDOWS\System32\drivers\Ambfilt.sys [1684736 2008-08-05] (Creative)
S3 CCDECODE; C:\WINDOWS\System32\DRIVERS\CCDECODE.sys [17024 2008-04-14] (Microsoft Corporation)
R2 eamon; C:\WINDOWS\System32\DRIVERS\eamon.sys [116520 2009-11-16] (ESET)
R1 ehdrv; C:\WINDOWS\System32\DRIVERS\ehdrv.sys [108792 2009-11-16] (ESET)
R3 EL90XBC; C:\WINDOWS\System32\DRIVERS\el90xbc5.sys [66591 2001-08-17] (3Com Corporation)
R2 epfw; C:\WINDOWS\System32\DRIVERS\epfw.sys [135048 2009-11-16] (ESET)
R3 Epfwndis; C:\WINDOWS\System32\DRIVERS\Epfwndis.sys [33096 2009-06-19] (ESET)
R1 epfwtdi; C:\WINDOWS\System32\DRIVERS\epfwtdi.sys [55768 2009-11-16] (ESET)
S3 EsgScanner; C:\WINDOWS\System32\DRIVERS\EsgScanner.sys [19984 2015-12-05] ()
R3 mf; C:\WINDOWS\System32\DRIVERS\mf.sys [63744 2008-04-13] (Microsoft Corporation)
S3 Monfilt; C:\WINDOWS\System32\drivers\Monfilt.sys [1389056 2006-01-04] (Creative Technology Ltd.)
S3 NdisIP; C:\WINDOWS\System32\DRIVERS\NdisIP.sys [10880 2008-04-14] (Microsoft Corporation)
R3 NmPar; C:\WINDOWS\System32\DRIVERS\NmPar.sys [80256 2008-12-24] (Windows (R) 2000 DDK provider)
R3 nmserial; C:\WINDOWS\System32\DRIVERS\nmserial.sys [70016 2008-12-16] (Windows (R) 2000 DDK provider)
S3 PAC207; C:\WINDOWS\System32\DRIVERS\PFC027.SYS [616064 2007-10-25] (PixArt Imaging Inc.) [File not signed]
R3 RT73; C:\WINDOWS\System32\DRIVERS\rt73.sys [465152 2008-10-23] (Ralink Technology, Corp.) [File not signed]
S3 RTL8169; C:\WINDOWS\System32\DRIVERS\Rtlh86.sys [168448 2009-07-03] (Realtek ) [File not signed]
S1 wceusbsh; C:\WINDOWS\System32\DRIVERS\wceusbsh.sys [31744 2008-04-14] (Microsoft Corporation)
S4 IntelIde; no ImagePath
U1 WS2IFSL; no ImagePath

==================== NetSvcs (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)


==================== One Month Created files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2015-12-06 17:31 - 2015-12-06 17:31 - 00780488 _____ (Adobe Systems Incorporated) C:\WINDOWS\system32\FlashPlayerApp.exe
2015-12-06 17:31 - 2015-12-06 17:31 - 00142536 _____ (Adobe Systems Incorporated) C:\WINDOWS\system32\FlashPlayerCPLApp.cpl
2015-12-06 17:31 - 2015-12-06 17:31 - 00000914 _____ C:\WINDOWS\Tasks\Adobe Flash Player Updater.job
2015-12-06 13:00 - 2015-12-06 13:02 - 00000000 ____D C:\AdwCleaner
2015-12-06 12:58 - 2015-12-06 12:59 - 01736704 _____ C:\Documents and Settings\M&J\Plocha\adwcleaner_5.023.exe
2015-12-06 11:28 - 2015-12-06 11:29 - 00055632 _____ C:\Documents and Settings\M&J\Plocha\Addition.txt
2015-12-06 11:27 - 2015-12-06 17:32 - 00008532 _____ C:\Documents and Settings\M&J\Plocha\FRST.txt
2015-12-06 11:27 - 2015-12-06 17:32 - 00000000 ____D C:\FRST
2015-12-06 11:26 - 2015-12-06 11:26 - 01719808 _____ (Farbar) C:\Documents and Settings\M&J\Plocha\FRST.exe
2015-12-06 10:07 - 2015-12-06 10:07 - 00001804 _____ C:\Documents and Settings\All Users\Nabídka Start\Programy\Adobe Reader XI.lnk
2015-12-06 10:07 - 2015-12-06 10:07 - 00001734 _____ C:\Documents and Settings\All Users\Plocha\Adobe Reader XI.lnk
2015-12-06 08:31 - 2015-12-06 15:26 - 00005686 _____ C:\WINDOWS\SchedLgU.Txt
2015-12-06 08:12 - 2015-12-06 08:12 - 00000682 _____ C:\Documents and Settings\All Users\Plocha\CCleaner.lnk
2015-12-06 08:12 - 2015-12-06 08:12 - 00000000 ____D C:\Program Files\CCleaner
2015-12-06 08:12 - 2015-12-06 08:12 - 00000000 ____D C:\Documents and Settings\All Users\Nabídka Start\Programy\CCleaner
2015-12-06 07:52 - 2015-12-06 07:52 - 00000664 _____ C:\WINDOWS\system32\d3d9caps.dat
2015-12-06 00:06 - 2015-08-15 13:42 - 00000000 ____D C:\Documents and Settings\M&J\Plocha\SpyHunter 4.19.13.4482 & Portable (menin)
2015-12-05 23:54 - 2015-12-05 23:54 - 00000000 ____D C:\Program Files\Malwarebytes Anti-Malware
2015-12-05 23:54 - 2015-12-05 23:54 - 00000000 ____D C:\Documents and Settings\All Users\Nabídka Start\Programy\Malwarebytes Anti-Malware
2015-12-05 23:54 - 2015-12-05 23:54 - 00000000 ____D C:\Documents and Settings\All Users\Data aplikací\Malwarebytes
2015-12-05 23:54 - 2015-10-05 09:50 - 00121560 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\mbamchameleon.sys
2015-12-05 23:54 - 2015-10-05 09:50 - 00023256 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\mbam.sys
2015-12-05 23:53 - 2015-11-13 13:27 - 00000000 ____D C:\Documents and Settings\M&J\Plocha\MBAM - MalwareBytes.Anti-Malware.Premium.v2.2.0.1024+activator
2015-12-05 23:38 - 2015-12-05 23:38 - 00019984 _____ C:\WINDOWS\system32\Drivers\EsgScanner.sys
2015-12-05 23:32 - 2015-12-05 23:33 - 00005120 ___SH C:\Documents and Settings\M&J\Data aplikací\Thumbs.db
2015-12-05 23:14 - 2015-12-05 23:14 - 00000000 _____ C:\23990098.$$$
2015-12-05 23:11 - 2015-12-05 23:11 - 06485059 _____ C:\WINDOWS\REGBK00.ZIP
2015-12-05 23:04 - 2015-12-05 23:04 - 00000000 ____D C:\WINDOWS\VDLL.DLL
2015-12-05 23:04 - 2015-12-05 23:04 - 00000000 ____D C:\WINDOWS\system32\runouce.exe
2015-12-05 23:04 - 2015-12-05 23:04 - 00000000 ____D C:\WINDOWS\rundll16.exe
2015-12-05 23:04 - 2015-12-05 23:04 - 00000000 ____D C:\WINDOWS\RUNDL132.EXE
2015-12-05 23:04 - 2015-12-05 23:04 - 00000000 ____D C:\WINDOWS\logo1_.exe
2015-12-05 23:04 - 2015-12-05 23:04 - 00000000 ____D C:\WINDOWS\logo_1.exe
2015-12-05 22:52 - 2015-12-05 23:04 - 00000054 _____ C:\WINDOWS\Lic.xxx
2015-12-05 22:52 - 2015-12-05 22:52 - 00632064 _____ (Microsoft Corporation) C:\WINDOWS\system32\msvcr80.dll
2015-12-05 22:52 - 2015-12-05 22:52 - 00554240 _____ (Microsoft Corporation) C:\WINDOWS\system32\msvcp80.dll
2015-12-05 22:52 - 2015-12-05 22:52 - 00034048 _____ (MicroWorld Technologies Inc.) C:\WINDOWS\system32\eEmpty.exe
2015-12-05 22:52 - 2008-04-14 13:00 - 00147968 _____ (Microsoft Corporation) C:\WINDOWS\REGEDIT.COM
2015-12-05 22:52 - 2008-04-14 13:00 - 00147968 _____ (Microsoft Corporation) C:\WINDOWS\R.COM
2015-12-05 22:52 - 2008-04-14 13:00 - 00137216 _____ (Microsoft Corporation) C:\WINDOWS\system32\TASKMGR.COM
2015-12-05 22:52 - 2008-04-14 13:00 - 00137216 _____ (Microsoft Corporation) C:\WINDOWS\system32\T.COM
2015-12-05 22:52 - 2005-09-22 23:22 - 00000522 _____ C:\WINDOWS\system32\Microsoft.VC80.CRT.manifest
2015-12-05 22:51 - 2015-12-05 22:51 - 00000000 ____D C:\Program Files\Common Files\MicroWorld
2015-12-05 22:51 - 2015-12-05 22:51 - 00000000 ____D C:\Documents and Settings\All Users\Data aplikací\MicroWorld
2015-12-05 22:47 - 2015-12-05 22:47 - 00000000 ____D C:\Documents and Settings\M&J\Plocha\TL-WN321G_100324
2015-12-05 22:47 - 2015-12-05 22:40 - 61052072 _____ C:\Documents and Settings\M&J\Plocha\MWAV.exe
2015-12-05 22:47 - 2008-10-23 11:16 - 00465152 _____ (Ralink Technology, Corp.) C:\WINDOWS\system32\Drivers\rt73.sys
2015-12-05 21:49 - 2015-12-05 22:56 - 00000000 ____D C:\WINDOWS\027B5748C40941FE949B7B81A8304EF4.TMP
2015-12-05 21:49 - 2015-12-05 21:49 - 00000000 ____D C:\Program Files\Common Files\Wise Installation Wizard
2015-12-05 21:38 - 2015-12-05 21:52 - 00001599 _____ C:\Documents and Settings\Administrator\Nabídka Start\Programy\Vzdálená pomoc.lnk
2015-12-05 21:38 - 2015-12-05 21:42 - 00000178 ___SH C:\Documents and Settings\Administrator\ntuser.ini
2015-12-05 21:38 - 2015-12-05 21:40 - 00000000 ____D C:\Documents and Settings\Administrator\Local Settings\Temp
2015-12-05 21:38 - 2015-12-05 21:38 - 00000000 ____D C:\Documents and Settings\Administrator
2015-12-05 21:38 - 2015-12-03 13:30 - 00000000 ___HD C:\Documents and Settings\Administrator\Šablony
2015-12-05 21:38 - 2009-12-07 18:09 - 00000000 ___HD C:\Documents and Settings\Administrator\Local Settings\Data aplikací
2015-12-05 21:38 - 2009-12-07 18:09 - 00000000 ____D C:\Documents and Settings\Administrator\Local Settings\Data aplikací\Microsoft Help
2015-12-05 21:38 - 2009-12-07 18:07 - 00000000 __SHD C:\Documents and Settings\Administrator\IETldCache
2015-12-05 21:38 - 2009-10-03 17:02 - 00000000 __RHD C:\Documents and Settings\Administrator\Data aplikací
2015-12-05 21:38 - 2009-10-03 17:02 - 00000000 ___RD C:\Documents and Settings\Administrator\Nabídka Start\Programy\Po spuštění
2015-12-05 21:38 - 2009-10-03 17:02 - 00000000 ___RD C:\Documents and Settings\Administrator\Nabídka Start
2015-12-05 21:38 - 2009-10-03 17:02 - 00000000 ___HD C:\Documents and Settings\Administrator\Okolní tiskárny
2015-12-05 21:38 - 2009-10-03 17:02 - 00000000 ___HD C:\Documents and Settings\Administrator\Okolní síť
2015-12-05 21:38 - 2009-10-03 17:02 - 00000000 ____D C:\Documents and Settings\Administrator\Plocha
2015-12-05 21:38 - 2009-10-03 17:02 - 00000000 ____D C:\Documents and Settings\Administrator\Oblíbené položky
2015-12-05 21:38 - 2009-10-03 17:02 - 00000000 ____D C:\Documents and Settings\Administrator\Dokumenty
2015-12-05 21:38 - 2009-10-03 15:21 - 00000792 _____ C:\Documents and Settings\Administrator\Nabídka Start\Programy\Windows Media Player.lnk
2015-12-05 21:38 - 2009-10-03 15:21 - 00000000 ___RD C:\Documents and Settings\Administrator\Nabídka Start\Programy\Příslušenství
2015-12-05 21:38 - 2009-10-03 15:21 - 00000000 ___RD C:\Documents and Settings\Administrator\Nabídka Start\Programy
2015-12-03 19:49 - 2015-12-03 19:49 - 00000000 ___HD C:\WINDOWS\PIF
2015-11-28 11:33 - 2015-12-03 13:47 - 00002116 _____ C:\Documents and Settings\M&J\Plocha\Ryby Agregát.txt.id-6304444540_av666@weekendwarrior55.com
2015-11-17 00:29 - 2015-12-03 13:47 - 00235339 _____ C:\Documents and Settings\M&J\Plocha\361_2000 Sb..txt.id-6304444540_av666@weekendwarrior55.com
2015-11-16 10:36 - 2015-11-16 10:46 - 00000724 _____ C:\Documents and Settings\All Users\Plocha\Mozilla Firefox.lnk
2015-11-15 00:19 - 2015-12-03 13:47 - 00001668 _____ C:\Documents and Settings\M&J\Plocha\Výkon světelných zdrojů.txt.id-6304444540_av666@weekendwarrior55.com
2015-11-14 20:33 - 2015-12-03 13:47 - 00009172 _____ C:\Documents and Settings\M&J\Plocha\Lumen Watt.txt.id-6304444540_av666@weekendwarrior55.com
2015-11-12 11:54 - 2015-12-03 13:47 - 00030068 _____ C:\Documents and Settings\M&J\Plocha\AU Tom.txt.id-6304444540_av666@weekendwarrior55.com
2015-11-12 08:32 - 2015-12-03 13:47 - 00004724 _____ C:\Documents and Settings\M&J\Plocha\AU Separace.txt.id-6304444540_av666@weekendwarrior55.com
2015-11-11 22:20 - 2015-12-03 13:47 - 00000116 _____ C:\Documents and Settings\M&J\Plocha\Spektrum.txt.id-6304444540_av666@weekendwarrior55.com
2015-11-09 23:08 - 2015-12-03 13:47 - 00010212 _____ C:\Documents and Settings\M&J\Plocha\Hnojiva.txt.id-6304444540_av666@weekendwarrior55.com
2015-11-09 18:05 - 2015-12-03 13:47 - 00000820 _____ C:\Documents and Settings\M&J\Plocha\Spektrum rust.txt.id-6304444540_av666@weekendwarrior55.com
2015-11-08 22:32 - 2015-12-03 13:47 - 00038301 _____ C:\Documents and Settings\M&J\Plocha\Pestoování.txt.id-6304444540_av666@weekendwarrior55.com
2015-11-06 22:16 - 2015-11-16 10:46 - 00000000 ____D C:\Program Files\Mozilla Firefox

==================== One Month Modified files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2015-12-06 17:33 - 2010-02-03 10:28 - 00000330 ____H C:\WINDOWS\Tasks\MP Scheduled Scan.job
2015-12-06 17:32 - 2009-10-03 15:28 - 00000000 ____D C:\Documents and Settings\M&J\Local Settings\Temp
2015-12-06 17:30 - 2014-03-12 07:50 - 00000218 _____ C:\WINDOWS\Tasks\Přihlášení k oznamování konce poskytování služeb pro Microsoft Windows XP.job
2015-12-06 17:30 - 2009-10-03 16:54 - 00000000 ___HD C:\WINDOWS\inf
2015-12-06 17:30 - 2009-10-03 16:54 - 00000000 ____D C:\WINDOWS
2015-12-06 17:30 - 2009-10-03 15:26 - 00000006 ____H C:\WINDOWS\Tasks\SA.DAT
2015-12-06 15:26 - 2009-10-03 15:28 - 00000178 ___SH C:\Documents and Settings\M&J\ntuser.ini
2015-12-06 12:59 - 2010-01-07 13:33 - 00000000 ____D C:\Documents and Settings\M&J\Dokumenty\Stažené soubory
2015-12-06 12:59 - 2009-10-03 15:28 - 00000000 ____D C:\Documents and Settings\M&J\Plocha
2015-12-06 10:07 - 2014-01-07 21:16 - 00000000 ____D C:\Program Files\Common Files\Adobe
2015-12-06 10:07 - 2010-01-13 17:50 - 00000000 ____D C:\Program Files\Adobe
2015-12-06 10:07 - 2009-10-05 15:48 - 00000000 ____D C:\Documents and Settings\All Users\Data aplikací\Adobe
2015-12-06 10:07 - 2009-10-03 17:02 - 00000000 ___RD C:\Documents and Settings\All Users\Nabídka Start\Programy
2015-12-06 10:07 - 2009-10-03 17:02 - 00000000 ____D C:\Documents and Settings\All Users\Plocha
2015-12-06 10:06 - 2009-10-05 15:49 - 00000000 ____D C:\Documents and Settings\M&J\Local Settings\Data aplikací\Adobe
2015-12-06 08:46 - 2009-10-03 15:20 - 00000000 ___SD C:\WINDOWS\Downloaded Program Files
2015-12-06 08:41 - 2009-10-05 15:48 - 00004384 _____ C:\WINDOWS\WINCMD.INI
2015-12-06 08:21 - 2009-12-23 00:29 - 00000000 ____D C:\WINDOWS\Minidump
2015-12-06 08:21 - 2009-10-03 15:28 - 00000000 ____D C:\Documents and Settings\M&J
2015-12-06 06:34 - 2009-10-03 15:28 - 00000000 ___RD C:\Documents and Settings\M&J\Nabídka Start\Programy\Po spuštění
2015-12-06 02:51 - 2009-10-03 15:24 - 00000000 ____D C:\Documents and Settings\NetworkService\Local Settings\Temp
2015-12-05 23:39 - 2009-10-03 15:28 - 00000000 __RHD C:\Documents and Settings\M&J\Data aplikací
2015-12-05 22:57 - 2009-10-03 15:28 - 00000000 ___RD C:\Documents and Settings\M&J\Nabídka Start\Programy
2015-12-05 22:51 - 2009-10-03 17:02 - 00000000 __RHD C:\Documents and Settings\All Users\Data aplikací
2015-12-05 22:50 - 2009-10-03 17:03 - 01022012 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2015-12-05 22:50 - 2008-04-14 13:00 - 00429454 _____ C:\WINDOWS\system32\perfh005.dat
2015-12-05 22:50 - 2008-04-14 13:00 - 00078466 _____ C:\WINDOWS\system32\perfc005.dat
2015-12-05 22:18 - 2009-10-03 15:28 - 00001599 _____ C:\Documents and Settings\M&J\Nabídka Start\Programy\Vzdálená pomoc.lnk
2015-12-05 21:52 - 2009-10-03 15:21 - 00001599 _____ C:\Documents and Settings\Default User\Nabídka Start\Programy\Vzdálená pomoc.lnk
2015-12-05 21:38 - 2009-10-03 17:01 - 00000000 ____D C:\Documents and Settings
2015-12-05 21:22 - 2008-04-14 13:00 - 00013646 _____ C:\WINDOWS\system32\wpa.dbl
2015-12-04 13:57 - 2010-09-30 09:10 - 00722452 ____H C:\treeinfo.wc
2015-12-04 13:55 - 2010-01-07 15:25 - 00000000 ____D C:\Program Files\_001
2015-12-04 02:08 - 2014-02-11 09:57 - 00000000 ____D C:\Program Files\_Hotovo
2015-12-04 00:15 - 2009-11-27 22:31 - 00000069 _____ C:\WINDOWS\NeroDigital.ini
2015-12-03 17:37 - 2015-01-10 10:21 - 00000000 ____D C:\Program Files\_Mobil
2015-12-03 13:49 - 2012-05-22 09:52 - 00000000 ____D C:\preload
2015-12-03 13:48 - 2011-08-06 09:55 - 00000000 ____D C:\Documents and Settings\M&J\Dokumenty\@Družstvo_Liben
2015-12-03 13:48 - 2009-12-07 14:35 - 00000000 ____D C:\Documents and Settings\M&J\Dokumenty\@Jana
2015-12-03 13:48 - 2009-10-03 15:28 - 00000000 ___RD C:\Documents and Settings\M&J\Dokumenty\Obrázky
2015-12-03 13:47 - 2015-10-31 15:51 - 00155747 _____ C:\Documents and Settings\M&J\Plocha\Zadost o prechod naroku na prukaz OZP.pdf.id-6304444540_av666@weekendwarrior55.com
2015-12-03 13:47 - 2015-10-31 14:12 - 00001908 _____ C:\Documents and Settings\M&J\Plocha\ZTP_P.txt.id-6304444540_av666@weekendwarrior55.com
2015-12-03 13:47 - 2015-10-30 22:47 - 00009908 _____ C:\Documents and Settings\M&J\Plocha\Dobývání měsíce.txt
2015-12-03 13:47 - 2015-10-21 12:32 - 00005092 _____ C:\Documents and Settings\M&J\Plocha\Google.txt.id-6304444540_av666@weekendwarrior55.com
2015-12-03 13:47 - 2015-10-16 11:20 - 00003620 _____ C:\Documents and Settings\M&J\Plocha\Dobíjení Autobaterie.txt.id-6304444540_av666@weekendwarrior55.com
2015-12-03 13:47 - 2015-10-12 15:06 - 00002116 _____ C:\Documents and Settings\M&J\Plocha\Svetelo Kelvin.txt.id-6304444540_av666@weekendwarrior55.com
2015-12-03 13:47 - 2015-10-10 21:56 - 00127841 _____ C:\Documents and Settings\M&J\Plocha\0ce69f4c-9c62-4131-ad8f-6cdca8619b15.jpg.id-6304444540_av666@weekendwarrior55.com
2015-12-03 13:47 - 2015-10-02 17:46 - 00015940 _____ C:\Documents and Settings\M&J\Plocha\Demark GPS.txt.id-6304444540_av666@weekendwarrior55.com
2015-12-03 13:47 - 2015-10-01 16:56 - 00029684 _____ C:\Documents and Settings\M&J\Plocha\Demark Linie.txt.id-6304444540_av666@weekendwarrior55.com
2015-12-03 13:47 - 2015-09-25 07:55 - 00014084 _____ C:\Documents and Settings\M&J\Plocha\Detektor.txt.id-6304444540_av666@weekendwarrior55.com
2015-12-03 13:47 - 2015-08-30 16:01 - 00002532 _____ C:\Documents and Settings\M&J\Plocha\Irisin PAV70.txt.id-6304444540_av666@weekendwarrior55.com
2015-12-03 13:47 - 2015-06-10 12:56 - 00060633 _____ C:\Documents and Settings\M&J\Plocha\1968.txt.id-6304444540_av666@weekendwarrior55.com
2015-12-03 13:47 - 2015-06-10 09:57 - 00000564 _____ C:\Documents and Settings\M&J\Plocha\Brus.txt.id-6304444540_av666@weekendwarrior55.com
2015-12-03 13:47 - 2015-05-28 21:09 - 00002452 _____ C:\Documents and Settings\M&J\Plocha\Mutant.txt.id-6304444540_av666@weekendwarrior55.com
2015-12-03 13:47 - 2015-05-01 15:40 - 00000996 _____ C:\Documents and Settings\M&J\Plocha\Zavadero.txt.id-6304444540_av666@weekendwarrior55.com
2015-12-03 13:47 - 2015-05-01 06:54 - 00001732 _____ C:\Documents and Settings\M&J\Plocha\Janovec zasilky.txt.id-6304444540_av666@weekendwarrior55.com
2015-12-03 13:47 - 2015-04-10 18:57 - 00123718 _____ C:\Documents and Settings\M&J\Plocha\Prospekce zlato2.txt.id-6304444540_av666@weekendwarrior55.com
2015-12-03 13:47 - 2015-04-10 18:46 - 00039296 _____ C:\Documents and Settings\M&J\Plocha\Zlato Prospekce.txt.id-6304444540_av666@weekendwarrior55.com
2015-12-03 13:47 - 2015-04-06 13:48 - 00009700 _____ C:\Documents and Settings\M&J\Plocha\Vltavíny.txt.id-6304444540_av666@weekendwarrior55.com
2015-12-03 13:47 - 2015-03-31 21:14 - 00003412 _____ C:\Documents and Settings\M&J\Plocha\Spirztual.txt.id-6304444540_av666@weekendwarrior55.com
2015-12-03 13:47 - 2015-03-30 08:01 - 00000804 _____ C:\Documents and Settings\M&J\Plocha\Kubů_Byt.txt.id-6304444540_av666@weekendwarrior55.com
2015-12-03 13:47 - 2015-03-30 06:18 - 00214020 _____ C:\Documents and Settings\M&J\Plocha\ZlatoMapa.doc.id-6304444540_av666@weekendwarrior55.com
2015-12-03 13:47 - 2015-03-28 14:41 - 00024068 _____ C:\Documents and Settings\M&J\Plocha\Jil Pro Každého.txt.id-6304444540_av666@weekendwarrior55.com
2015-12-03 13:47 - 2015-03-27 23:04 - 00107289 _____ C:\Documents and Settings\M&J\Plocha\J I L Universita2.txt.id-6304444540_av666@weekendwarrior55.com
2015-12-03 13:47 - 2015-02-23 22:37 - 00005204 _____ C:\Documents and Settings\M&J\Plocha\Meteorit.txt.id-6304444540_av666@weekendwarrior55.com
2015-12-03 13:47 - 2015-02-21 23:17 - 00005684 _____ C:\Documents and Settings\M&J\Plocha\Noze nalezy.txt.id-6304444540_av666@weekendwarrior55.com
2015-12-03 13:47 - 2014-10-23 08:39 - 00000500 _____ C:\Documents and Settings\M&J\Plocha\Retezy.txt.id-6304444540_av666@weekendwarrior55.com
2015-12-03 13:47 - 2014-09-21 13:23 - 00005252 _____ C:\Documents and Settings\M&J\Plocha\Extrakce Ultrazvuk.txt.id-6304444540_av666@weekendwarrior55.com
2015-12-03 13:47 - 2014-09-17 21:07 - 00000420 _____ C:\Documents and Settings\M&J\Plocha\Linky.txt.id-6304444540_av666@weekendwarrior55.com
2015-12-03 13:47 - 2014-06-08 18:26 - 00012388 _____ C:\Documents and Settings\M&J\Plocha\Kamen zubni.txt.id-6304444540_av666@weekendwarrior55.com
2015-12-03 13:47 - 2014-04-27 19:22 - 00038360 _____ C:\Documents and Settings\M&J\Plocha\Občan.txt.id-6304444540_av666@weekendwarrior55.com
2015-12-03 13:47 - 2014-04-27 11:54 - 00031947 _____ C:\Documents and Settings\M&J\Plocha\Předhled odchylek vyúčtování tepla.pdf.id-6304444540_av666@weekendwarrior55.com
2015-12-03 13:47 - 2014-04-14 11:35 - 00001252 _____ C:\Documents and Settings\M&J\Plocha\Eta.txt.id-6304444540_av666@weekendwarrior55.com
2015-12-03 13:47 - 2013-11-07 19:11 - 12998782 _____ C:\Documents and Settings\M&J\Plocha\korektury 6. 11..pdf.id-6304444540_av666@weekendwarrior55.com
2015-12-03 13:47 - 2011-07-20 08:20 - 00000180 ____H C:\Documents and Settings\M&J\Plocha\~$rd_Delo.doc.id-6304444540_av666@weekendwarrior55.com
2015-12-03 13:47 - 2010-01-08 08:42 - 00000000 ____D C:\Documents and Settings\M&J\Dokumenty\@Spolecne
2015-12-03 13:47 - 2009-11-27 16:53 - 00000000 ___RD C:\Documents and Settings\M&J\Dokumenty\Kamera
2015-12-03 13:47 - 2009-10-03 15:28 - 00000000 ___HD C:\Documents and Settings\M&J\Šablony
2015-12-03 13:43 - 2010-01-08 08:34 - 00000000 ____D C:\Documents and Settings\M&J\Dokumenty\@Druzstvo_HJ
2015-12-03 13:41 - 2009-12-07 14:18 - 00000000 ____D C:\Documents and Settings\M&J\Dokumenty\@Milan
2015-12-03 13:35 - 2009-11-27 15:53 - 00000000 ____D C:\Documents and Settings\M&J\Local Settings\Data aplikací\GHISLER
2015-12-03 13:35 - 2009-10-03 15:31 - 05900282 ____H C:\Documents and Settings\M&J\Local Settings\Data aplikací\IconCache.db.id-6304444540_av666@weekendwarrior55.com
2015-12-03 13:35 - 2009-10-03 15:28 - 00000000 ___HD C:\Documents and Settings\M&J\Local Settings\Data aplikací
2015-12-03 13:30 - 2009-10-03 17:02 - 00000000 ___HD C:\Documents and Settings\Default User\Šablony
2015-12-01 14:12 - 2009-10-03 15:28 - 00000000 ___RD C:\Documents and Settings\M&J\Dokumenty
2015-11-23 12:20 - 2010-03-08 18:19 - 00002563 _____ C:\Documents and Settings\M&J\Plocha\Microsoft Office Word 2007.lnk
2015-11-16 17:35 - 2012-05-16 20:43 - 00000000 ____D C:\Program Files\Mozilla Maintenance Service
2015-11-16 10:46 - 2012-05-16 20:43 - 00000730 _____ C:\Documents and Settings\All Users\Nabídka Start\Programy\Mozilla Firefox.lnk
2015-11-11 12:29 - 2013-08-02 09:11 - 00000000 ____D C:\WINDOWS\system32\MRT
2015-11-11 12:27 - 2009-10-05 08:56 - 143250520 _____ (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
2015-11-11 12:26 - 2009-11-27 13:45 - 00000000 ____D C:\Documents and Settings\All Users\Data aplikací\Microsoft Help
2015-11-08 18:58 - 2009-10-03 16:54 - 00000000 ____D C:\WINDOWS\Network Diagnostic
2015-11-08 15:00 - 2014-03-12 07:50 - 00000212 _____ C:\WINDOWS\Tasks\Měsíční oznamování konce poskytování služeb pro Microsoft Windows XP.job

==================== Files in the root of some directories =======

2015-12-05 23:32 - 2015-12-05 23:33 - 0005120 ___SH () C:\Documents and Settings\M&J\Data aplikací\Thumbs.db
2009-10-06 08:50 - 2015-10-31 18:14 - 0184832 _____ () C:\Documents and Settings\M&J\Local Settings\Data aplikací\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini

Some files in TEMP:
====================
C:\Documents and Settings\M&J\Local Settings\Temp\FlashPlayerUpdate.exe
C:\Documents and Settings\M&J\Local Settings\Temp\sqlite3.dll


Some zero byte size files/folders:
==========================
C:\Windows\logo1_.exe
C:\Windows\logo_1.exe
C:\Windows\RUNDL132.EXE
C:\Windows\rundll16.exe
C:\Windows\VDLL.DLL
C:\Windows\System32\runouce.exe

==================== Bamital & volsnap =================

(There is no automatic fix for files that do not pass verification.)

C:\WINDOWS\explorer.exe => File is digitally signed
C:\WINDOWS\system32\winlogon.exe => File is digitally signed
C:\WINDOWS\system32\svchost.exe => File is digitally signed
C:\WINDOWS\system32\services.exe => File is digitally signed
C:\WINDOWS\system32\User32.dll => File is digitally signed
C:\WINDOWS\system32\userinit.exe => File is digitally signed
C:\WINDOWS\system32\rpcss.dll => File is digitally signed
C:\WINDOWS\system32\dnsapi.dll => File is digitally signed
C:\WINDOWS\system32\Drivers\volsnap.sys => File is digitally signed

==================== End of FRST.txt ============================
Nahoru
Uživatelský avatar
Rudy
Site Admin
Site Admin
Příspěvky: 119673
Registrován: 30 říj 2003 13:42
Bydliště: Plzeň
Kontaktovat uživatele:
Kontaktovat uživatele Rudy

Re: Prosim o kontrolu a pomoc s av666@weekendwarrior55

#8 Příspěvek od Rudy »

Otevřte poznámkový blok a zkopírujte do něj:
Start
HKLM\...\Run: [NeroFilterCheck] => C:\Program Files\Common Files\Ahead\Lib\NeroCheck.exe [570664 2008-05-28] (Nero AG)
S4 IntelIde; no ImagePath
U1 WS2IFSL; no ImagePath
C:\WINDOWS\027B5748C40941FE949B7B81A8304EF4.TMP
C:\Documents and Settings\M&J\Plocha\Ryby Agregát.txt.id-6304444540_av666@weekendwarrior55.com
C:\Documents and Settings\M&J\Plocha\361_2000 Sb..txt.id-6304444540_av666@weekendwarrior55.com
C:\Documents and Settings\M&J\Plocha\Výkon světelných zdrojů.txt.id-6304444540_av666@weekendwarrior55.com
C:\Documents and Settings\M&J\Plocha\Lumen Watt.txt.id-6304444540_av666@weekendwarrior55.com
C:\Documents and Settings\M&J\Plocha\AU Tom.txt.id-6304444540_av666@weekendwarrior55.com
C:\Documents and Settings\M&J\Plocha\AU Separace.txt.id-6304444540_av666@weekendwarrior55.com
C:\Documents and Settings\M&J\Plocha\Spektrum.txt.id-6304444540_av666@weekendwarrior55.com
C:\Documents and Settings\M&J\Plocha\Hnojiva.txt.id-6304444540_av666@weekendwarrior55.com
C:\Documents and Settings\M&J\Plocha\Spektrum rust.txt.id-6304444540_av666@weekendwarrior55.com
C:\Documents and Settings\M&J\Plocha\Pestoování.txt.id-6304444540_av666@weekendwarrior55.com
C:\Documents and Settings\M&J\Plocha\Zadost o prechod naroku na prukaz OZP.pdf.id-6304444540_av666@weekendwarrior55.com
C:\Documents and Settings\M&J\Plocha\ZTP_P.txt.id-6304444540_av666@weekendwarrior55.com
C:\Documents and Settings\M&J\Plocha\Dobíjení Autobaterie.txt.id-6304444540_av666@wee ... rior55.com
C:\Documents and Settings\M&J\Plocha\Svetelo Kelvin.txt.id-6304444540_av666@weekendwarrior55.com
C:\Documents and Settings\M&J\Plocha\0ce69f4c-9c62-4131-ad8f-6cdca8619b15.jpg.id-6304444540_av666@weekendwarrior55.com
C:\Documents and Settings\M&J\Plocha\Demark GPS.txt.id-6304444540_av666@weekendwarrior55.com
C:\Documents and Settings\M&J\Plocha\Demark Linie.txt.id-6304444540_av666@weekendwarrior55.com
C:\Documents and Settings\M&J\Plocha\Detektor.txt.id-6304444540_av666@weekendwarrior55.com
C:\Documents and Settings\M&J\Plocha\Irisin PAV70.txt.id-6304444540_av666@weekendwarrior55.com
C:\Documents and Settings\M&J\Plocha\1968.txt.id-6304444540_av666@weekendwarrior55.com
C:\Documents and Settings\M&J\Plocha\Brus.txt.id-6304444540_av666@weekendwarrior55.com
C:\Documents and Settings\M&J\Plocha\Mutant.txt.id-6304444540_av666@weekendwarrior55.com
C:\Documents and Settings\M&J\Plocha\Zavadero.txt.id-6304444540_av666@weekendwarrior55.com
C:\Documents and Settings\M&J\Plocha\Janovec zasilky.txt.id-6304444540_av666@weekendwarrior55.com
C:\Documents and Settings\M&J\Plocha\Prospekce zlato2.txt.id-6304444540_av666@weekendwarrior55.com
C:\Documents and Settings\M&J\Plocha\Zlato Prospekce.txt.id-6304444540_av666@weekendwarrior55.com
C:\Documents and Settings\M&J\Plocha\Vltavíny.txt.id-6304444540_av666@weekendwarrior55.com
C:\Documents and Settings\M&J\Plocha\Spirztual.txt.id-6304444540_av666@weekendwarrior55.com
C:\Documents and Settings\M&J\Plocha\Kubů_Byt.txt.id-6304444540_av666@weekendwarrior55.com
C:\Documents and Settings\M&J\Plocha\ZlatoMapa.doc.id-6304444540_av666@weekendwarrior55.com
C:\Documents and Settings\M&J\Plocha\Jil Pro Každého.txt.id-6304444540_av666@weekendwarrior55.com
C:\Documents and Settings\M&J\Plocha\J I L Universita2.txt.id-6304444540_av666@wee ... rior55.com
C:\Documents and Settings\M&J\Plocha\Meteorit.txt.id-6304444540_av666@weekendwarrior55.com
C:\Documents and Settings\M&J\Plocha\Noze nalezy.txt.id-6304444540_av666@weekendwarrior55.com
C:\Documents and Settings\M&J\Plocha\Retezy.txt.id-6304444540_av666@weekendwarrior55.com
C:\Documents and Settings\M&J\Plocha\Extrakce Ultrazvuk.txt.id-6304444540_av666@weekendwarrior55.com
C:\Documents and Settings\M&J\Plocha\Linky.txt.id-6304444540_av666@weekendwarrior55.com
C:\Documents and Settings\M&J\Plocha\Kamen zubni.txt.id-6304444540_av666@weekendwarrior55.com
C:\Documents and Settings\M&J\Plocha\Občan.txt.id-6304444540_av666@weekendwarrior55.com
C:\Documents and Settings\M&J\Plocha\Předhled odchylek vyúčtování tepla.pdf.id-6304444540_av666@weekendwarrior55.com
C:\Documents and Settings\M&J\Plocha\Eta.txt.id-6304444540_av666@weekendwarrior55.com
C:\Documents and Settings\M&J\Plocha\korektury 6. 11..pdf.id-6304444540_av666@weekendwarrior55.com
C:\Documents and Settings\M&J\Plocha\~$rd_Delo.doc.id-6304444540_av666@weekendwarrior55.com
C:\Documents and Settings\M&J\Local Settings\Data aplikací\IconCache.db.id-6304444540_av666@weekendwarrior55.com
C:\Documents and Settings\M&J\Local Settings\Data aplikací\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
C:\Documents and Settings\M&J\Local Settings\Temp
C:\Windows\logo1_.exe
C:\Windows\logo_1.exe
C:\Windows\RUNDL132.EXE
C:\Windows\rundll16.exe
C:\Windows\VDLL.DLL
C:\Windows\System32\runouce.exe
End
Uložte na plochu jako fixlist.txt. Spusťte znovu FRST a klikněte na >Fix<. Po skončení akce se objeví log, který sem zkopírujte.
Dotazy a logy vkládejte pouze do vašich threadů. Soukromé zprávy, icq a e-maily neslouží k řešení vašich problémů.

Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.

Navštivte: Obrázek

e-mail: rudy(zavináč)forum.viry.cz

Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!


Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Nahoru
Aldamer
Návštěvník
Návštěvník
Příspěvky: 7
Registrován: 06 pro 2015 10:19

Re: Prosim o kontrolu a pomoc s av666@weekendwarrior55

#9 Příspěvek od Aldamer »

Fix result of Farbar Recovery Scan Tool (x86) Version:05-12-2015
Ran by M&J (2015-12-06 21:02:52) Run:1
Running from C:\Documents and Settings\M&J\Plocha
Loaded Profiles: M&J (Available Profiles: M&J & Administrator)
Boot Mode: Normal

==============================================

fixlist content:
*****************
Start
HKLM\...\Run: [NeroFilterCheck] => C:\Program Files\Common Files\Ahead\Lib\NeroCheck.exe [570664 2008-05-28] (Nero AG)
S4 IntelIde; no ImagePath
U1 WS2IFSL; no ImagePath
C:\WINDOWS\027B5748C40941FE949B7B81A8304EF4.TMP
C:\Documents and Settings\M&J\Plocha\Ryby Agregát.txt.id-6304444540_av666@weekendwarrior55.com
C:\Documents and Settings\M&J\Plocha\361_2000 Sb..txt.id-6304444540_av666@weekendwarrior55.com
C:\Documents and Settings\M&J\Plocha\Výkon světelných zdrojů.txt.id-6304444540_av666@weekendwarrior55.com
C:\Documents and Settings\M&J\Plocha\Lumen Watt.txt.id-6304444540_av666@weekendwarrior55.com
C:\Documents and Settings\M&J\Plocha\AU Tom.txt.id-6304444540_av666@weekendwarrior55.com
C:\Documents and Settings\M&J\Plocha\AU Separace.txt.id-6304444540_av666@weekendwarrior55.com
C:\Documents and Settings\M&J\Plocha\Spektrum.txt.id-6304444540_av666@weekendwarrior55.com
C:\Documents and Settings\M&J\Plocha\Hnojiva.txt.id-6304444540_av666@weekendwarrior55.com
C:\Documents and Settings\M&J\Plocha\Spektrum rust.txt.id-6304444540_av666@weekendwarrior55.com
C:\Documents and Settings\M&J\Plocha\Pestoování.txt.id-6304444540_av666@weekendwarrior55.com
C:\Documents and Settings\M&J\Plocha\Zadost o prechod naroku na prukaz OZP.pdf.id-6304444540_av666@weekendwarrior55.com
C:\Documents and Settings\M&J\Plocha\ZTP_P.txt.id-6304444540_av666@weekendwarrior55.com
C:\Documents and Settings\M&J\Plocha\Dobíjení Autobaterie.txt.id-6304444540_av666@wee ... rior55.com
C:\Documents and Settings\M&J\Plocha\Svetelo Kelvin.txt.id-6304444540_av666@weekendwarrior55.com
C:\Documents and Settings\M&J\Plocha\0ce69f4c-9c62-4131-ad8f-6cdca8619b15.jpg.id-6304444540_av666@weekendwarrior55.com
C:\Documents and Settings\M&J\Plocha\Demark GPS.txt.id-6304444540_av666@weekendwarrior55.com
C:\Documents and Settings\M&J\Plocha\Demark Linie.txt.id-6304444540_av666@weekendwarrior55.com
C:\Documents and Settings\M&J\Plocha\Detektor.txt.id-6304444540_av666@weekendwarrior55.com
C:\Documents and Settings\M&J\Plocha\Irisin PAV70.txt.id-6304444540_av666@weekendwarrior55.com
C:\Documents and Settings\M&J\Plocha\1968.txt.id-6304444540_av666@weekendwarrior55.com
C:\Documents and Settings\M&J\Plocha\Brus.txt.id-6304444540_av666@weekendwarrior55.com
C:\Documents and Settings\M&J\Plocha\Mutant.txt.id-6304444540_av666@weekendwarrior55.com
C:\Documents and Settings\M&J\Plocha\Zavadero.txt.id-6304444540_av666@weekendwarrior55.com
C:\Documents and Settings\M&J\Plocha\Janovec zasilky.txt.id-6304444540_av666@weekendwarrior55.com
C:\Documents and Settings\M&J\Plocha\Prospekce zlato2.txt.id-6304444540_av666@weekendwarrior55.com
C:\Documents and Settings\M&J\Plocha\Zlato Prospekce.txt.id-6304444540_av666@weekendwarrior55.com
C:\Documents and Settings\M&J\Plocha\Vltavíny.txt.id-6304444540_av666@weekendwarrior55.com
C:\Documents and Settings\M&J\Plocha\Spirztual.txt.id-6304444540_av666@weekendwarrior55.com
C:\Documents and Settings\M&J\Plocha\Kubů_Byt.txt.id-6304444540_av666@weekendwarrior55.com
C:\Documents and Settings\M&J\Plocha\ZlatoMapa.doc.id-6304444540_av666@weekendwarrior55.com
C:\Documents and Settings\M&J\Plocha\Jil Pro Každého.txt.id-6304444540_av666@weekendwarrior55.com
C:\Documents and Settings\M&J\Plocha\J I L Universita2.txt.id-6304444540_av666@wee ... rior55.com
C:\Documents and Settings\M&J\Plocha\Meteorit.txt.id-6304444540_av666@weekendwarrior55.com
C:\Documents and Settings\M&J\Plocha\Noze nalezy.txt.id-6304444540_av666@weekendwarrior55.com
C:\Documents and Settings\M&J\Plocha\Retezy.txt.id-6304444540_av666@weekendwarrior55.com
C:\Documents and Settings\M&J\Plocha\Extrakce Ultrazvuk.txt.id-6304444540_av666@weekendwarrior55.com
C:\Documents and Settings\M&J\Plocha\Linky.txt.id-6304444540_av666@weekendwarrior55.com
C:\Documents and Settings\M&J\Plocha\Kamen zubni.txt.id-6304444540_av666@weekendwarrior55.com
C:\Documents and Settings\M&J\Plocha\Občan.txt.id-6304444540_av666@weekendwarrior55.com
C:\Documents and Settings\M&J\Plocha\Předhled odchylek vyúčtování tepla.pdf.id-6304444540_av666@weekendwarrior55.com
C:\Documents and Settings\M&J\Plocha\Eta.txt.id-6304444540_av666@weekendwarrior55.com
C:\Documents and Settings\M&J\Plocha\korektury 6. 11..pdf.id-6304444540_av666@weekendwarrior55.com
C:\Documents and Settings\M&J\Plocha\~$rd_Delo.doc.id-6304444540_av666@weekendwarrior55.com
C:\Documents and Settings\M&J\Local Settings\Data aplikací\IconCache.db.id-6304444540_av666@weekendwarrior55.com
C:\Documents and Settings\M&J\Local Settings\Data aplikací\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
C:\Documents and Settings\M&J\Local Settings\Temp
C:\Windows\logo1_.exe
C:\Windows\logo_1.exe
C:\Windows\RUNDL132.EXE
C:\Windows\rundll16.exe
C:\Windows\VDLL.DLL
C:\Windows\System32\runouce.exe
End
*****************

HKLM\Software\Microsoft\Windows\CurrentVersion\Run\\NeroFilterCheck => value removed successfully.
IntelIde => service removed successfully.
WS2IFSL => service removed successfully.
C:\WINDOWS\027B5748C40941FE949B7B81A8304EF4.TMP => moved successfully
C:\Documents and Settings\M&J\Plocha\Ryby Agregát.txt.id-6304444540_av666@weekendwarrior55.com => moved successfully
C:\Documents and Settings\M&J\Plocha\361_2000 Sb..txt.id-6304444540_av666@weekendwarrior55.com => moved successfully
C:\Documents and Settings\M&J\Plocha\Výkon světelných zdrojů.txt.id-6304444540_av666@weekendwarrior55.com => moved successfully
C:\Documents and Settings\M&J\Plocha\Lumen Watt.txt.id-6304444540_av666@weekendwarrior55.com => moved successfully
C:\Documents and Settings\M&J\Plocha\AU Tom.txt.id-6304444540_av666@weekendwarrior55.com => moved successfully
C:\Documents and Settings\M&J\Plocha\AU Separace.txt.id-6304444540_av666@weekendwarrior55.com => moved successfully
C:\Documents and Settings\M&J\Plocha\Spektrum.txt.id-6304444540_av666@weekendwarrior55.com => moved successfully
C:\Documents and Settings\M&J\Plocha\Hnojiva.txt.id-6304444540_av666@weekendwarrior55.com => moved successfully
C:\Documents and Settings\M&J\Plocha\Spektrum rust.txt.id-6304444540_av666@weekendwarrior55.com => moved successfully
C:\Documents and Settings\M&J\Plocha\Pestoování.txt.id-6304444540_av666@weekendwarrior55.com => moved successfully
C:\Documents and Settings\M&J\Plocha\Zadost o prechod naroku na prukaz OZP.pdf.id-6304444540_av666@weekendwarrior55.com => moved successfully
C:\Documents and Settings\M&J\Plocha\ZTP_P.txt.id-6304444540_av666@weekendwarrior55.com => moved successfully
"C:\Documents and Settings\M&J\Plocha\Dobíjení Autobaterie.txt.id-6304444540_av666@wee ... rior55.com" => not found.
C:\Documents and Settings\M&J\Plocha\Svetelo Kelvin.txt.id-6304444540_av666@weekendwarrior55.com => moved successfully
C:\Documents and Settings\M&J\Plocha\0ce69f4c-9c62-4131-ad8f-6cdca8619b15.jpg.id-6304444540_av666@weekendwarrior55.com => moved successfully
C:\Documents and Settings\M&J\Plocha\Demark GPS.txt.id-6304444540_av666@weekendwarrior55.com => moved successfully
C:\Documents and Settings\M&J\Plocha\Demark Linie.txt.id-6304444540_av666@weekendwarrior55.com => moved successfully
C:\Documents and Settings\M&J\Plocha\Detektor.txt.id-6304444540_av666@weekendwarrior55.com => moved successfully
C:\Documents and Settings\M&J\Plocha\Irisin PAV70.txt.id-6304444540_av666@weekendwarrior55.com => moved successfully
C:\Documents and Settings\M&J\Plocha\1968.txt.id-6304444540_av666@weekendwarrior55.com => moved successfully
C:\Documents and Settings\M&J\Plocha\Brus.txt.id-6304444540_av666@weekendwarrior55.com => moved successfully
C:\Documents and Settings\M&J\Plocha\Mutant.txt.id-6304444540_av666@weekendwarrior55.com => moved successfully
C:\Documents and Settings\M&J\Plocha\Zavadero.txt.id-6304444540_av666@weekendwarrior55.com => moved successfully
C:\Documents and Settings\M&J\Plocha\Janovec zasilky.txt.id-6304444540_av666@weekendwarrior55.com => moved successfully
C:\Documents and Settings\M&J\Plocha\Prospekce zlato2.txt.id-6304444540_av666@weekendwarrior55.com => moved successfully
C:\Documents and Settings\M&J\Plocha\Zlato Prospekce.txt.id-6304444540_av666@weekendwarrior55.com => moved successfully
C:\Documents and Settings\M&J\Plocha\Vltavíny.txt.id-6304444540_av666@weekendwarrior55.com => moved successfully
C:\Documents and Settings\M&J\Plocha\Spirztual.txt.id-6304444540_av666@weekendwarrior55.com => moved successfully
C:\Documents and Settings\M&J\Plocha\Kubů_Byt.txt.id-6304444540_av666@weekendwarrior55.com => moved successfully
C:\Documents and Settings\M&J\Plocha\ZlatoMapa.doc.id-6304444540_av666@weekendwarrior55.com => moved successfully
C:\Documents and Settings\M&J\Plocha\Jil Pro Každého.txt.id-6304444540_av666@weekendwarrior55.com => moved successfully
"C:\Documents and Settings\M&J\Plocha\J I L Universita2.txt.id-6304444540_av666@wee ... rior55.com" => not found.
C:\Documents and Settings\M&J\Plocha\Meteorit.txt.id-6304444540_av666@weekendwarrior55.com => moved successfully
C:\Documents and Settings\M&J\Plocha\Noze nalezy.txt.id-6304444540_av666@weekendwarrior55.com => moved successfully
C:\Documents and Settings\M&J\Plocha\Retezy.txt.id-6304444540_av666@weekendwarrior55.com => moved successfully
C:\Documents and Settings\M&J\Plocha\Extrakce Ultrazvuk.txt.id-6304444540_av666@weekendwarrior55.com => moved successfully
C:\Documents and Settings\M&J\Plocha\Linky.txt.id-6304444540_av666@weekendwarrior55.com => moved successfully
C:\Documents and Settings\M&J\Plocha\Kamen zubni.txt.id-6304444540_av666@weekendwarrior55.com => moved successfully
C:\Documents and Settings\M&J\Plocha\Občan.txt.id-6304444540_av666@weekendwarrior55.com => moved successfully
C:\Documents and Settings\M&J\Plocha\Předhled odchylek vyúčtování tepla.pdf.id-6304444540_av666@weekendwarrior55.com => moved successfully
C:\Documents and Settings\M&J\Plocha\Eta.txt.id-6304444540_av666@weekendwarrior55.com => moved successfully
C:\Documents and Settings\M&J\Plocha\korektury 6. 11..pdf.id-6304444540_av666@weekendwarrior55.com => moved successfully
C:\Documents and Settings\M&J\Plocha\~$rd_Delo.doc.id-6304444540_av666@weekendwarrior55.com => moved successfully
C:\Documents and Settings\M&J\Local Settings\Data aplikací\IconCache.db.id-6304444540_av666@weekendwarrior55.com => moved successfully
C:\Documents and Settings\M&J\Local Settings\Data aplikací\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini => moved successfully
C:\Documents and Settings\M&J\Local Settings\Temp => moved successfully
C:\Windows\logo1_.exe => moved successfully
C:\Windows\logo_1.exe => moved successfully
C:\Windows\RUNDL132.EXE => moved successfully
C:\Windows\rundll16.exe => moved successfully
C:\Windows\VDLL.DLL => moved successfully
C:\Windows\System32\runouce.exe => moved successfully

==== End of Fixlog 21:02:56 ====
Nahoru
Uživatelský avatar
Rudy
Site Admin
Site Admin
Příspěvky: 119673
Registrován: 30 říj 2003 13:42
Bydliště: Plzeň
Kontaktovat uživatele:
Kontaktovat uživatele Rudy

Re: Prosim o kontrolu a pomoc s av666@weekendwarrior55

#10 Příspěvek od Rudy »

Smazáno. Nastala nějaká změna?
Dotazy a logy vkládejte pouze do vašich threadů. Soukromé zprávy, icq a e-maily neslouží k řešení vašich problémů.

Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.

Navštivte: Obrázek

e-mail: rudy(zavináč)forum.viry.cz

Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!


Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Nahoru
Aldamer
Návštěvník
Návštěvník
Příspěvky: 7
Registrován: 06 pro 2015 10:19

Re: Prosim o kontrolu a pomoc s av666@weekendwarrior55

#11 Příspěvek od Aldamer »

PC se chova normalne, bohuzel soubory v dokumentech jsou necitelne.
Je nejaka sance na jejich zachranu??
Nahoru
Uživatelský avatar
Rudy
Site Admin
Site Admin
Příspěvky: 119673
Registrován: 30 říj 2003 13:42
Bydliště: Plzeň
Kontaktovat uživatele:
Kontaktovat uživatele Rudy

Re: Prosim o kontrolu a pomoc s av666@weekendwarrior55

#12 Příspěvek od Rudy »

Jediná možnost je obnova ze stínových kopií: https://support.microsoft.com/cs-cz/kb/832217
Dotazy a logy vkládejte pouze do vašich threadů. Soukromé zprávy, icq a e-maily neslouží k řešení vašich problémů.

Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.

Navštivte: Obrázek

e-mail: rudy(zavináč)forum.viry.cz

Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!


Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Nahoru
Aldamer
Návštěvník
Návštěvník
Příspěvky: 7
Registrován: 06 pro 2015 10:19

Re: Prosim o kontrolu a pomoc s av666@weekendwarrior55

#13 Příspěvek od Aldamer »

Dekuji za info a Vas cas, zkusil jsem poslat jeste report na Eset, kazdopadne to stejne asi vyresi reinstalace systemu na Win 7.
Nahoru
Uživatelský avatar
stell
VIP in memoriam
VIP in memoriam
Příspěvky: 5175
Registrován: 09 pro 2007 09:27
Bydliště: SK-REVUCA
Kontaktovat uživatele:
Kontaktovat uživatele stell

Re: Prosim o kontrolu a pomoc s av666@weekendwarrior55

#14 Příspěvek od stell »

Zdravim
Poznamka:
Desifrovanie podla mna na 99% je mozne.
Pekny den.
Dôležité informácie.
NEŠLAPE Vám počítač?
Je zavirovaný? Šlape pomalu? Nefunguje program? Problém s instalací?
Využíjte služby vzdálené pomoci!
Obrázek
e-mail: stell(zavináč)forum.viry.cz
Thanks! Vďaka!
Obrázek
Nahoru
Odpovědět

Zpět na „Řešení problémů, logy“