Odvirování PC, zrychlení počítače, vzdálená pomoc prostřednictvím služby neslape.cz

Bundled.toolbar.ask, injector.BTSB, MSIL/kryptik.bgl

Máte problém s virem? Vložte sem log z FRST nebo RSIT.

Moderátor: Moderátoři

Pravidla fóra
Pokud chcete pomoc, vložte log z FRST [návod zde] nebo RSIT [návod zde]

Jednotlivé thready budou po vyřešení uzamčeny. Stejně tak ty, které budou nečinné déle než 14 dní. Vizte Pravidlo o zamykání témat. Děkujeme za pochopení.

!NOVINKA!
Nově lze využívat služby vzdálené pomoci, kdy se k vašemu počítači připojí odborník a bližší informace o problému si od vás získá telefonicky! Více na www.neslape.cz
Odpovědět
Zpráva
Autor
michal776
Návštěvník
Návštěvník
Příspěvky: 13
Registrován: 27 čer 2007 22:08

Bundled.toolbar.ask, injector.BTSB, MSIL/kryptik.bgl

#1 Příspěvek od michal776 »

Dobrý den, eset online scanner našel na synátorovo ntb výše uvedené viry. Sice odstranil infikované soubory, ale nemyslím si že úplně. Prosím o pomoc s úplným vyčištěním.
Předem děkuji.

Logfile of random's system information tool 1.10 (written by random/random)
Run by Míša at 2016-01-23 13:46:42
Microsoft Windows 8.1 s aplikací Bing
System drive C: has 138 GB (72%) free of 191 GB
Total RAM: 3983 MB (70% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 13:46:49, on 23. 1. 2016
Platform: Unknown Windows (WinNT 6.02.1008)
MSIE: Internet Explorer v11.0 (11.00.9600.18123)
Boot mode: Normal

Running processes:
C:\Program Files (x86)\ASUS\USBChargerPlus\USBChargerPlus.exe
C:\Program Files (x86)\ASUS\Splendid\ACMON.exe
C:\Program Files (x86)\ASUS\ATK Package\ATK Media\DMedia.exe
C:\Program Files (x86)\ASUS\ATK Package\ATKOSD2\ATKOSD2.exe
C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
C:\Windows\SysWOW64\RunDll32.exe
C:\Program Files\trend micro\Míša.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://asus13.msn.com/?pc=ASJB
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkID= ... 6AFD35E6B5
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/p/?LinkId=255141
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
F2 - REG:system.ini: UserInit=userinit.exe
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre1.8.0_31\bin\ssv.dll
O2 - BHO: (no name) - {D5FEC983-01DB-414A-9456-AF95AC9ED7B5} - (no file)
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre1.8.0_31\bin\jp2ssv.dll
O4 - HKLM\..\Run: [ASUSPRP] "C:\Program Files (x86)\ASUS\APRP\APRP.EXE"
O4 - HKLM\..\Run: [seznam-listicka-distribuce] "C:\Program Files (x86)\Seznam.cz\distribution\szninstall.exe" -s -d listicka 1 szn-software-listicka cz.seznam.software.autoupdate
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"
O4 - Startup: MyPC Backup.lnk = C:\Program Files (x86)\OLBPre\OLBPre.exe
O4 - Global Startup: Bluetooth.lnk = ?
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O16 - DPF: {7530BFB8-7293-4D34-9923-61A11451AFC5} (OnlineScanner Control) - http://download.eset.com/special/eos/OnlineScanner.cab
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
O23 - Service: ASLDR Service (ASLDRService) - ASUSTek Computer Inc. - C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\AsLdrSrv.exe
O23 - Service: ATKGFNEX Service (ATKGFNEXSrv) - ASUS - C:\Program Files (x86)\ASUS\ATK Package\ATKGFNEX\GFNEXSrv.exe
O23 - Service: @oem25.inf,%BlueBcmBtRSupport.SVCNAME%;Bluetooth Driver Management Service (BcmBtRSupport) - Unknown owner - C:\Windows\system32\BtwRSupportService.exe (file missing)
O23 - Service: Bluetooth Service (btwdins) - Broadcom Corporation. - C:\Program Files\WIDCOMM\Bluetooth Software\btwdins.exe
O23 - Service: Intel(R) Content Protection HECI Service (cphs) - Intel Corporation - C:\Windows\SysWow64\IntelCpHeciSvc.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)
O23 - Service: GamesAppIntegrationService - WildTangent - C:\Program Files (x86)\WildTangent Games\App\GamesAppIntegrationService.exe
O23 - Service: GamesAppService - WildTangent, Inc. - C:\Program Files (x86)\WildTangent Games\App\GamesAppService.exe
O23 - Service: Intel(R) Integrated Clock Controller Service - Intel(R) ICCS (ICCS) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Integrated Clock Controller Service\ICCProxy.exe
O23 - Service: @%SystemRoot%\system32\ieetwcollectorres.dll,-1000 (IEEtwCollectorService) - Unknown owner - C:\Windows\system32\IEEtwCollector.exe (file missing)
O23 - Service: Intel(R) Capability Licensing Service Interface - Intel(R) Corporation - C:\Program Files\Intel\TXE Components\TCS\HeciServer.exe
O23 - Service: Intel(R) Capability Licensing Service TCP IP Interface - Intel(R) Corporation - C:\Program Files\Intel\TXE Components\TCS\SocketHeciServer.exe
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)
O23 - Service: @%ProgramFiles%\Windows Defender\MpAsDesc.dll,-320 (WdNisSvc) - Unknown owner - C:\Program Files (x86)\Windows Defender\NisSrv.exe (file missing)
O23 - Service: @%ProgramFiles%\Windows Defender\MpAsDesc.dll,-310 (WinDefend) - Unknown owner - C:\Program Files (x86)\Windows Defender\MsMpEng.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)

--
End of file - 7253 bytes

======Listing Processes======





wininit.exe

C:\Windows\system32\lsass.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Windows\system32\svchost.exe -k RPCSS
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\system32\svchost.exe -k netsvcs
C:\Windows\system32\svchost.exe -k LocalService
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k NetworkService
C:\Windows\system32\WLANExt.exe 917771230832
"C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\AsLdrSrv.exe"
\??\C:\Windows\system32\conhost.exe 0x4
"C:\Program Files (x86)\ASUS\ATK Package\ATKGFNEX\GFNEXSrv.exe"
C:\Windows\System32\spoolsv.exe
C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
"C:\Program Files\WIDCOMM\Bluetooth Software\btwdins.exe"
C:\Windows\System32\svchost.exe -k utcsvc
"C:\Program Files\Intel\TXE Components\TCS\HeciServer.exe"
C:\Windows\system32\SearchIndexer.exe /Embedding
"C:\Program Files (x86)\WildTangent Games\App\GamesAppIntegrationService.exe"

C:\Windows\System32\WinLogon.exe -SpecialSession
-hiberboot
"C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\HControl.exe"
taskhostex.exe
"C:\Program Files (x86)\ASUS\USBChargerPlus\USBChargerPlus.exe"
"C:\Program Files (x86)\ASUS\Splendid\ACMON.exe"
C:\Windows\Explorer.EXE
KBFiltr.exe
"C:\Program Files (x86)\ASUS\ATK Package\ATK Media\DMedia.exe"
"C:\Program Files (x86)\ASUS\ATK Package\ATKOSD2\ATKOSD2.exe"
"C:\Program Files (x86)\ASUS\ASUS Smart Gesture\AsTPCenter\x64\AsusTPLoader.exe"
"C:\Program Files (x86)\ASUS\ASUS Smart Gesture\AsTPCenter\x64\AsusTPCenter.exe"
"C:\Program Files\Internet Explorer\iexplore.exe" -ServerName:DefaultBrowserServer
"C:\Program Files\Internet Explorer\iexplore.exe" SCODEF:988 CREDAT:267777 /prefetch:1
"C:\Windows\System32\igfxtray.exe"
"C:\Windows\System32\hkcmd.exe"
"C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe"
"C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"
"C:\Program Files\WIDCOMM\Bluetooth Software\BtStackServer.exe" -Embedding
"C:\Windows\System32\Macromed\Flash\FlashUtil_ActiveX.exe" -Embedding
C:\Windows\System32\RuntimeBroker.exe -Embedding
"C:\Windows\system32\GWX\GWX.exe"
"C:\Program Files (x86)\ASUS\ASUS Smart Gesture\AsTPCenter\x64\AsusTPHelper.exe"
"C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe" -s
"C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe" /MAXX4

"C:\Windows\system32\igfxsrvc.exe" -Embedding
"C:\Program Files\Internet Explorer\iexplore.exe" SCODEF:988 CREDAT:726549 /prefetch:1
"C:\Windows\system32\SearchProtocolHost.exe" Global\UsGthrFltPipeMssGthrPipe_S-1-5-21-3100587719-2383120411-71358407-10019_ Global\UsGthrCtrlFltPipeMssGthrPipe_S-1-5-21-3100587719-2383120411-71358407-10019 1 -2147483646 "Software\Microsoft\Windows Search" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT; MS Search 4.0 Robot)" "C:\ProgramData\Microsoft\Search\Data\Temp\usgthrsvc" "DownLevelDaemon" "1"
"C:\Windows\SysWOW64\RunDll32.exe" "C:\Program Files\WIDCOMM\Bluetooth Software\SysWOW64\BtMmHook.dll",SetAndWaitBtMmHook

"C:\Users\Míša\AppData\Local\Microsoft\Windows\INetCache\IE\SU00GSHP\RSITx64.exe"
C:\Windows\system32\wbem\wmiprvse.exe

======Scheduled tasks folder======

C:\Windows\tasks\Adobe Flash Player Updater.job - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
C:\Windows\tasks\Norton Security Scan for Míša.job - C:\PROGRA~2\NORTON~2\Engine\410~1.28\Nss.exe /scan-quick /scheduled

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
Java(tm) Plug-In SSV Helper - C:\Program Files (x86)\Java\jre1.8.0_31\bin\ssv.dll [2015-01-31 460712]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{D5FEC983-01DB-414A-9456-AF95AC9ED7B5}]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files (x86)\Java\jre1.8.0_31\bin\jp2ssv.dll [2015-01-31 172968]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"IgfxTray"=C:\Windows\system32\igfxtray.exe [2014-02-19 391152]
"HotKeysCmds"=C:\Windows\system32\hkcmd.exe [2014-02-19 771568]

[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]
"ASUSPRP"=C:\Program Files (x86)\ASUS\APRP\APRP.EXE [2014-04-23 1080992]
"seznam-listicka-distribuce"=C:\Program Files (x86)\Seznam.cz\distribution\szninstall.exe [2013-05-16 1062472]
"SunJavaUpdateSched"=C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [2014-12-17 508800]

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup
Bluetooth.lnk - C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe

C:\Users\Míša\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
MyPC Backup.lnk - C:\Program Files (x86)\OLBPre\OLBPre.exe

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\igfxcui]
C:\Windows\system32\igfxdev.dll [2014-01-16 624640]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\iaioi2ce.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MCODS]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\mcpltsvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\MCODS]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\mcpltsvc]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"DisableTaskMgr"=0

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoRun"=0
"NoFolderOptions"=0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"VIDC.YUY2"=msyuv.dll
"vidc.i420"=iyuv_32.dll
"msacm.msgsm610"=msgsm32.acm
"msacm.msg711"=msg711.acm
"VIDC.YVYU"=msyuv.dll
"VIDC.YVU9"=tsbyuv.dll
"wavemapper"=msacm32.drv
"midimapper"=midimap.dll
"VIDC.UYVY"=msyuv.dll
"VIDC.IYUV"=iyuv_32.dll
"vidc.mrle"=msrle32.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msadpcm"=msadp32.acm
"vidc.msvc"=msvidc32.dll
"MSVideo8"=VfWWDM32.dll
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv
"wave4"=wdmaud.drv
"midi4"=wdmaud.drv
"mixer4"=wdmaud.drv
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"aux1"=wdmaud.drv

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*

======List of files/folders created in the last 1 month======

2016-01-23 13:46:42 ----D---- C:\rsit
2016-01-23 13:46:42 ----D---- C:\Program Files\trend micro
2016-01-22 21:12:19 ----D---- C:\Program Files (x86)\ESET
2016-01-22 20:46:34 ----D---- C:\Program Files (x86)\VS Revo Group
2015-12-29 16:39:40 ----D---- C:\Program Files\7-Zip

======List of files/folders modified in the last 1 month======

2016-07-16 20:11:54 ----D---- C:\Users\Míša\AppData\Roaming\Seznam.cz
2016-07-16 20:11:00 ----D---- C:\Program Files (x86)\Opera
2016-07-16 20:10:54 ----D---- C:\Users\Míša\AppData\Roaming\Opera Software
2016-07-08 17:24:45 ----D---- C:\Windows\system32\config
2016-07-05 19:51:06 ----D---- C:\Windows\CbsTemp
2016-07-01 18:35:22 ----D---- C:\Windows\AppReadiness
2016-01-23 13:46:42 ----RD---- C:\Program Files
2016-01-23 13:40:54 ----D---- C:\Windows\system32\sru
2016-01-22 22:50:17 ----D---- C:\Windows\Prefetch
2016-01-22 22:49:26 ----SHD---- C:\Windows\Installer
2016-01-22 22:49:03 ----D---- C:\Program Files (x86)\OLBPre
2016-01-22 21:17:02 ----AD---- C:\Windows
2016-01-22 21:12:20 ----SD---- C:\Windows\Downloaded Program Files
2016-01-22 21:12:19 ----RD---- C:\Program Files (x86)
2016-01-22 20:51:35 ----D---- C:\Program Files (x86)\Mozilla Firefox
2016-01-22 20:48:47 ----D---- C:\Program Files (x86)\Common Files
2016-01-22 20:48:47 ----D---- C:\Program Files (x86)\ASUS
2016-01-22 20:48:03 ----SHD---- C:\System Volume Information
2016-01-22 20:37:54 ----D---- C:\Program Files (x86)\Mozilla Maintenance Service
2016-01-22 20:22:31 ----D---- C:\Windows\system32\NDF
2016-01-22 20:20:38 ----AD---- C:\Windows\Temp
2016-01-22 20:20:13 ----D---- C:\Windows\system32\Tasks
2016-01-22 20:19:45 ----HD---- C:\ProgramData
2016-01-02 11:42:07 ----D---- C:\Users\Míša\AppData\Roaming\.minecraft
2016-01-02 11:19:09 ----D---- C:\Windows\WinSxS
2016-01-02 11:19:09 ----D---- C:\Windows\SysWOW64
2015-12-29 18:27:10 ----D---- C:\Windows\Microsoft.NET
2015-12-29 16:56:53 ----D---- C:\Windows\Inf
2015-12-29 12:11:18 ----HD---- C:\Program Files\WindowsApps
2015-12-26 21:15:44 ----SD---- C:\Windows\SYSWOW64\GWX
2015-12-26 21:15:44 ----SD---- C:\Windows\system32\GWX
2015-12-26 21:15:41 ----D---- C:\Windows\SYSWOW64\cs-CZ
2015-12-26 21:15:41 ----D---- C:\Windows\system32\cs-CZ
2015-12-26 21:15:29 ----RD---- C:\Windows\System32
2015-12-26 09:48:43 ----A---- C:\Windows\SYSWOW64\FlashPlayerApp.exe

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 MBI;@oem8.inf,%MBI.SVCDESC%;Intel(R) Sideband Fabric Device Service; C:\Windows\System32\drivers\MBI.sys [2013-10-28 29464]
R1 ATKWMIACPIIO;ATKWMIACPI Driver; \??\C:\Program Files (x86)\ASUS\ATK Package\ATK WMIACPI\atkwmiacpi64.sys [2013-07-02 19768]
R1 eeCtrl;Symantec Eraser Control driver; \??\C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\eeCtrl64.sys [2015-12-19 498512]
R1 vwififlt;@%SystemRoot%\System32\drivers\vwififlt.sys,-259; C:\Windows\system32\DRIVERS\vwififlt.sys [2014-04-30 71680]
R2 ASMMAP64;ASMMAP64; \??\C:\Program Files (x86)\ASUS\ATK Package\ATKGFNEX\ASMMAP64.sys [2009-07-02 15416]
R3 AiCharger;ASUS Charger Driver; C:\Windows\system32\DRIVERS\AiCharger.sys [2014-03-27 17152]
R3 ATP;@oem17.inf,%PS2.DeviceDesc%;ASUS Input Device; C:\Windows\System32\drivers\AsusTP.sys [2014-03-31 71952]
R3 bcbtums;@oem25.inf,%BCBTUMS.SvcDesc%;Bluetooth RAM Firmware Download USB Filter; C:\Windows\system32\drivers\bcbtums.sys [2013-11-14 170712]
R3 BCM43XX;@oem20.inf,%BCM43XX_Service_DispName%;Broadcom 802.11 Network Adapter Driver; C:\Windows\system32\DRIVERS\bcmwl63a.sys [2014-10-08 7546544]
R3 BthEnum;@bth.inf,%BthEnum.SVCDESC%;Služba Bluetooth Enumerator; C:\Windows\System32\drivers\BthEnum.sys [2014-10-29 53248]
R3 BthLEEnum;@bthleenum.inf,%BthLEEnum.SVCDESC%;Bluetooth Low Energy Driver; C:\Windows\system32\DRIVERS\BthLEEnum.sys [2014-03-18 226304]
R3 BthPan;@bthpan.inf,%BthPan.DisplayName%;Bluetooth Device (Personal Area Network); C:\Windows\System32\drivers\bthpan.sys [2015-07-10 118272]
R3 BTHUSB;@bth.inf,%BTHUSB.SvcDesc%;Ovladač rozhraní USB radiostanice Bluetooth; C:\Windows\System32\Drivers\BTHUSB.sys [2014-10-29 81920]
R3 btwampfl;@oem25.inf,%btwampfl.ServiceName%;btwampfl; C:\Windows\system32\DRIVERS\btwampfl.sys [2014-02-03 166616]
R3 btwaudio;@oem21.inf,%btaudio.SvcDesc%;Bluetooth Audio Device Service; C:\Windows\system32\drivers\btwaudio.sys [2014-03-19 190168]
R3 btwavdt;@oem21.inf,%btwavdt.SvcDesc%;Bluetooth AVDT; C:\Windows\System32\drivers\btwavdt.sys [2014-03-19 229080]
R3 btwl2cap;@oem24.inf,%btwl2cap.SVCDESC%;Bluetooth L2CAP Service; C:\Windows\system32\DRIVERS\btwl2cap.sys [2012-07-27 40248]
R3 GPIO;@oem10.inf,%GPIO.SVCDESC%;Intel SoC GPIO Controller Driver; C:\Windows\System32\drivers\iaiogpioe.sys [2013-11-11 31232]
R3 HIDSwitch;@oem28.inf,%ASSW.DisplayName%;ASUS Wireless Radio Control; C:\Windows\System32\drivers\AsHIDSwitch64.sys [2013-10-08 20280]
R3 iaioi2c;@oem9.inf,%Driver_Service.Desc%;I2C Controller Service; C:\Windows\System32\drivers\iaioi2ce.sys [2013-11-11 67584]
R3 igfx;igfx; C:\Windows\system32\DRIVERS\igdkmd64.sys [2014-01-16 4222976]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\Windows\system32\drivers\RTKVHD64.sys [2015-05-19 4466392]
R3 IntcDAud;@oem12.inf,%IntcDAud.SvcDesc%;Intel(R) Display Audio; C:\Windows\system32\DRIVERS\IntcDAud.sys [2014-01-16 450520]
R3 iwdbus;@oem15.inf,%iwdbus.SVCDESC%;IWD Bus Enumerator; C:\Windows\System32\drivers\iwdbus.sys [2013-12-27 27032]
R3 kbfiltr;@oem27.inf,%kbfiltr.SvcDesc%;Keyboard Filter; C:\Windows\System32\drivers\kbfiltr.sys [2012-08-06 17280]
R3 RFCOMM;@tdibth.inf,%RFCOMM.DisplayName%;Bluetooth Device (RFCOMM Protocol TDI); C:\Windows\System32\drivers\rfcomm.sys [2015-01-30 167424]
R3 RSBASTOR;@oem19.inf,%Rts5208%;Realtek PCIE CardReader Driver - BA; C:\Windows\system32\DRIVERS\RtsBaStor.sys [2013-07-12 309976]
R3 RTL8168;@oem18.inf,%rtl8168.Service.DispName%;Realtek 8168 NT Driver; C:\Windows\system32\DRIVERS\Rt630x64.sys [2014-01-08 848088]
R3 TXEIx64;@oem11.inf,%TEE_SvcDesc%;Intel(R) Trusted Execution Engine Interface ; C:\Windows\System32\drivers\TXEIx64.sys [2014-01-15 88592]
R3 usbvideo;@usbvideo.inf,%USBVideo.SvcDesc%;USB Video Device (WDM); C:\Windows\System32\Drivers\usbvideo.sys [2014-06-21 212736]
R3 vwifimp;@%SystemRoot%\System32\drivers\vwifimp.sys,-261; C:\Windows\system32\DRIVERS\vwifimp.sys [2014-04-30 38912]
S0 iaStorA;iaStorA; C:\Windows\System32\drivers\iaStorA.sys [2013-12-16 632168]
S3 AgereSoftModem;@mdmags64.inf,%FullProductName%;Agere Systems Soft Modem; C:\Windows\system32\DRIVERS\agrsm64.sys [2013-06-18 1146880]
S3 BTHPORT;@bth.inf,%BTHPORT.SvcDesc%;Ovladač portu Bluetooth; C:\Windows\System32\Drivers\BTHport.sys [2015-05-11 1201664]
S3 btwrchid;btwrchid; C:\Windows\System32\drivers\btwrchid.sys [2014-03-19 38616]
S3 e1iexpress;@net1ic64.inf,%e1iExpress.Service.DispName%;Intel(R) PRO/1000 PCI Express Network Connection Driver I; C:\Windows\system32\DRIVERS\e1i63x64.sys [2013-06-18 460288]
S3 intaud_WaveExtensible;@oem14.inf,%INTAUD_WEX.SvcDesc%;Intel WiDi Audio Device; C:\Windows\system32\drivers\intelaud.sys [2013-12-27 38296]
S3 NETwNs64;@netwsw00.inf,___ %NIC_Service_DispName_WIN7_64%;___ Intel(R) Wireless WiFi Link 5000 Series Adapter Driver for Windows 7 - 64 Bit; C:\Windows\system32\DRIVERS\Netwsw00.sys [2013-06-18 11518976]
S3 WinUsb;@WUDFUsbccidDriver.inf,%WinUsb_Service_DisplayName%;WinUSB Driver; C:\Windows\System32\drivers\WinUSB.sys [2013-08-22 78848]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 ASLDRService;ASLDR Service; C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\AsLdrSrv.exe [2014-03-26 115512]
R2 ATKGFNEXSrv;ATKGFNEX Service; C:\Program Files (x86)\ASUS\ATK Package\ATKGFNEX\GFNEXSrv.exe [2011-11-21 96896]
R2 btwdins;Bluetooth Service; C:\Program Files\WIDCOMM\Bluetooth Software\btwdins.exe [2014-03-18 976600]
R2 DiagTrack;@%SystemRoot%\system32\UtcResources.dll,-3001; C:\Windows\System32\svchost.exe [2014-10-29 38792]
R2 GamesAppIntegrationService;GamesAppIntegrationService; C:\Program Files (x86)\WildTangent Games\App\GamesAppIntegrationService.exe [2014-01-28 227904]
R2 Intel(R) Capability Licensing Service Interface;Intel(R) Capability Licensing Service Interface; C:\Program Files\Intel\TXE Components\TCS\HeciServer.exe [2013-07-01 733696]
S2 BcmBtRSupport;@oem25.inf,%BlueBcmBtRSupport.SVCNAME%;Bluetooth Driver Management Service; C:\Windows\system32\BtwRSupportService.exe [2013-11-14 2251992]
S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service; C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2015-12-29 269504]
S3 BthHFSrv;@%SystemRoot%\System32\BthHFSrv.dll,-103; C:\Windows\System32\svchost.exe [2014-10-29 38792]
S3 cphs;Intel(R) Content Protection HECI Service; C:\Windows\SysWow64\IntelCpHeciSvc.exe [2014-02-19 279024]
S3 FontCache3.0.0.0;@%SystemRoot%\system32\PresentationHost.exe,-3309; C:\Windows\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe [2014-03-18 43696]
S3 GamesAppService;GamesAppService; C:\Program Files (x86)\WildTangent Games\App\GamesAppService.exe [2010-10-12 206072]
S3 ICCS;Intel(R) Integrated Clock Controller Service - Intel(R) ICCS; C:\Program Files (x86)\Intel\Intel(R) Integrated Clock Controller Service\ICCProxy.exe [2012-04-24 169752]
S3 Intel(R) Capability Licensing Service TCP IP Interface;Intel(R) Capability Licensing Service TCP IP Interface; C:\Program Files\Intel\TXE Components\TCS\SocketHeciServer.exe [2013-07-01 822232]

-----------------EOF-----------------
Nahoru
Uživatelský avatar
Rudy
Site Admin
Site Admin
Příspěvky: 119673
Registrován: 30 říj 2003 13:42
Bydliště: Plzeň
Kontaktovat uživatele:
Kontaktovat uživatele Rudy

Re: Bundled.toolbar.ask, injector.BTSB, MSIL/kryptik.bgl

#2 Příspěvek od Rudy »

Zdravím!
Udělejte kompletní sken MBAM: http://www.malwarebytes.org/mbam.php a dejte log. Předem nic nemažte.
Dotazy a logy vkládejte pouze do vašich threadů. Soukromé zprávy, icq a e-maily neslouží k řešení vašich problémů.

Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.

Navštivte: Obrázek

e-mail: rudy(zavináč)forum.viry.cz

Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!


Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Nahoru
michal776
Návštěvník
Návštěvník
Příspěvky: 13
Registrován: 27 čer 2007 22:08

Re: Bundled.toolbar.ask, injector.BTSB, MSIL/kryptik.bgl

#3 Příspěvek od michal776 »

Dobrý den, tady vkládám výsledky.

Malwarebytes Anti-Malware
www.malwarebytes.org

Datum skenování: 24. 1. 2016
Čas skenování: 13:38
Protokol: scan.txt
Správce: Ano

Verze: 2.2.0.1024
Databáze malwaru: v2016.01.24.03
Databáze rootkitů: v2016.01.20.01
Licence: Zkušební verze
Ochrana proti malwaru: Zapnuto
Ochrana proti škodlivým webovým stránkám: Zapnuto
Ochrana programu: Vypnuto

OS: Windows 8.1
CPU: x64
Souborový systém: NTFS
Uživatel: Míša

Typ skenu: Sken hrozeb
Výsledek: Dokončeno
Prohledaných objektů: 327989
Uplynulý čas: 14 min, 12 sek

Paměť: Zapnuto
Po spuštění: Zapnuto
Souborový systém: Zapnuto
Archivy: Zapnuto
Rootkity: Vypnuto
Heuristika: Zapnuto
PUP: Zapnuto
PUM: Zapnuto

Procesy: 0
(Nenalezeny žádné škodlivé položky)

Moduly: 0
(Nenalezeny žádné škodlivé položky)

Klíče registru: 12
PUP.Optional.WinManger, HKLM\SOFTWARE\CLASSES\APPID\{85198F55-85AC-498A-BFE4-BBC33840F4AB}, , [1b5826170b8e8ea858bf2662d42e1ae6],
PUP.Optional.WinManger, HKLM\SOFTWARE\WOW6432NODE\CLASSES\APPID\{85198F55-85AC-498A-BFE4-BBC33840F4AB}, , [1b5826170b8e8ea858bf2662d42e1ae6],
PUP.Optional.WinManger, HKLM\SOFTWARE\CLASSES\WOW6432NODE\APPID\{85198F55-85AC-498A-BFE4-BBC33840F4AB}, , [1b5826170b8e8ea858bf2662d42e1ae6],
PUP.Optional.MyPCBackup, HKLM\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\OLBPre, , [8ae9d06d40592f077685644ad0348f71],
PUP.Optional.MyPCBackup, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\SCHEDULE\TASKCACHE\TREE\LaunchPreSignup, , [4132a9948b0e96a0f753c810af5442be],
PUP.Optional.Elex, HKLM\SOFTWARE\WOW6432NODE\ihpmserver, , [680be05d1881dd59843201fa40c332ce],
PUP.Optional.YourSearching.ShrtCln, HKLM\SOFTWARE\WOW6432NODE\yoursearchingSoftware, , [02717dc03f5a89ad99205ed5b45032ce],
PUP.Optional.YourSearching.ShrtCln, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\yoursearching, , [ff74ff3ed1c81c1a586044ef44c031cf],
PUP.Optional.Elex, HKLM\SOFTWARE\WOW6432NODE\RAYDLD, , [87ecf24b4950fb3b95d6627be22059a7],
PUP.Optional.APNToolBar.Gen, HKU\S-1-5-18\SOFTWARE\AskPartnerNetwork, , [076c69d4aaefe3533237f6e90bf7cc34],
PUP.Optional.InstallCore, HKU\S-1-5-21-3100587719-2383120411-71358407-1001\SOFTWARE\ICSW1.17, , [8be89aa33267e94d1493b21c46bdb34d],
PUP.Optional.DeskCut, HKU\S-1-5-21-3100587719-2383120411-71358407-1001\SOFTWARE\MOZILLA\EXTENDS, , [9cd746f746531c1ae2c8368c20e328d8],

Hodnoty registru: 4
PUP.Optional.MyPCBackup, HKLM\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\OLBPRE|DisplayName, MyPC Backup , , [c5ae2a136633201689fb63d2be4619e7]
PUP.Optional.DeskCut, HKLM\SOFTWARE\WOW6432NODE\MOZILLA\FIREFOX\EXTENSIONS|deskCutv2@gmail.com, C:\Users\Míša\AppData\Roaming\Mozilla\Firefox\Profiles\snmq48r6.default\extensions\deskCutv2@gmail.com, , [85ee1e1f316839fdcdde19a947bcb64a]
PUP.Optional.Elex, HKLM\SOFTWARE\WOW6432NODE\RAYDLD|dir, C:\Program Files (x86)\RayDld, , [87ecf24b4950fb3b95d6627be22059a7]
PUP.Optional.DeskCut, HKU\S-1-5-21-3100587719-2383120411-71358407-1001\SOFTWARE\MOZILLA\EXTENDS|appid, deskCutv2@gmail.com, , [9cd746f746531c1ae2c8368c20e328d8]

Data registru: 0
(Nenalezeny žádné škodlivé položky)

Složky: 35
PUP.Optional.PreBackup, C:\Program Files (x86)\OLBPre, , [82f1ca73d8c10135416aefee7a898b75],
PUP.Optional.APNToolBar.Gen, C:\ProgramData\APN\APN-Stub, , [175c48f524750e28f790871ef80ad030],
PUP.Optional.DeskCut, C:\Users\Míša\AppData\Roaming\Mozilla\Firefox\Profiles\snmq48r6.default\extensions\deskCutv2@gmail.com, , [b1c29ca1a8f1c472024c1f96d32faa56],
PUP.Optional.DeskCut, C:\Users\Míša\AppData\Roaming\Mozilla\Firefox\Profiles\snmq48r6.default\extensions\deskCutv2@gmail.com\chrome, , [b1c29ca1a8f1c472024c1f96d32faa56],
PUP.Optional.DeskCut, C:\Users\Míša\AppData\Roaming\Mozilla\Firefox\Profiles\snmq48r6.default\extensions\deskCutv2@gmail.com\chrome\content, , [b1c29ca1a8f1c472024c1f96d32faa56],
PUP.Optional.DeskCut, C:\Users\Míša\AppData\Roaming\Mozilla\Firefox\Profiles\snmq48r6.default\extensions\deskCutv2@gmail.com\chrome\content\include, , [b1c29ca1a8f1c472024c1f96d32faa56],
PUP.Optional.DeskCut, C:\Users\Míša\AppData\Roaming\Mozilla\Firefox\Profiles\snmq48r6.default\extensions\deskCutv2@gmail.com\chrome\content\include\tools, , [b1c29ca1a8f1c472024c1f96d32faa56],
PUP.Optional.DeskCut, C:\Users\Míša\AppData\Roaming\Mozilla\Firefox\Profiles\snmq48r6.default\extensions\deskCutv2@gmail.com\chrome\content\js, , [b1c29ca1a8f1c472024c1f96d32faa56],
PUP.Optional.DeskCut, C:\Users\Míša\AppData\Roaming\Mozilla\Firefox\Profiles\snmq48r6.default\extensions\deskCutv2@gmail.com\chrome\content\js\lib, , [b1c29ca1a8f1c472024c1f96d32faa56],
PUP.Optional.DeskCut, C:\Users\Míša\AppData\Roaming\Mozilla\Firefox\Profiles\snmq48r6.default\extensions\deskCutv2@gmail.com\chrome\content\js\module, , [b1c29ca1a8f1c472024c1f96d32faa56],
PUP.Optional.DeskCut, C:\Users\Míša\AppData\Roaming\Mozilla\Firefox\Profiles\snmq48r6.default\extensions\deskCutv2@gmail.com\chrome\content\js\pack, , [b1c29ca1a8f1c472024c1f96d32faa56],
PUP.Optional.DeskCut, C:\Users\Míša\AppData\Roaming\Mozilla\Firefox\Profiles\snmq48r6.default\extensions\deskCutv2@gmail.com\chrome\locale, , [b1c29ca1a8f1c472024c1f96d32faa56],
PUP.Optional.DeskCut, C:\Users\Míša\AppData\Roaming\Mozilla\Firefox\Profiles\snmq48r6.default\extensions\deskCutv2@gmail.com\chrome\locale\en, , [b1c29ca1a8f1c472024c1f96d32faa56],
PUP.Optional.DeskCut, C:\Users\Míša\AppData\Roaming\Mozilla\Firefox\Profiles\snmq48r6.default\extensions\deskCutv2@gmail.com\chrome\locale\en-US, , [b1c29ca1a8f1c472024c1f96d32faa56],
PUP.Optional.DeskCut, C:\Users\Míša\AppData\Roaming\Mozilla\Firefox\Profiles\snmq48r6.default\extensions\deskCutv2@gmail.com\chrome\locale\es, , [b1c29ca1a8f1c472024c1f96d32faa56],
PUP.Optional.DeskCut, C:\Users\Míša\AppData\Roaming\Mozilla\Firefox\Profiles\snmq48r6.default\extensions\deskCutv2@gmail.com\chrome\locale\es-419, , [b1c29ca1a8f1c472024c1f96d32faa56],
PUP.Optional.DeskCut, C:\Users\Míša\AppData\Roaming\Mozilla\Firefox\Profiles\snmq48r6.default\extensions\deskCutv2@gmail.com\chrome\locale\fr, , [b1c29ca1a8f1c472024c1f96d32faa56],
PUP.Optional.DeskCut, C:\Users\Míša\AppData\Roaming\Mozilla\Firefox\Profiles\snmq48r6.default\extensions\deskCutv2@gmail.com\chrome\locale\fr-BE, , [b1c29ca1a8f1c472024c1f96d32faa56],
PUP.Optional.DeskCut, C:\Users\Míša\AppData\Roaming\Mozilla\Firefox\Profiles\snmq48r6.default\extensions\deskCutv2@gmail.com\chrome\locale\fr-CA, , [b1c29ca1a8f1c472024c1f96d32faa56],
PUP.Optional.DeskCut, C:\Users\Míša\AppData\Roaming\Mozilla\Firefox\Profiles\snmq48r6.default\extensions\deskCutv2@gmail.com\chrome\locale\fr-CH, , [b1c29ca1a8f1c472024c1f96d32faa56],
PUP.Optional.DeskCut, C:\Users\Míša\AppData\Roaming\Mozilla\Firefox\Profiles\snmq48r6.default\extensions\deskCutv2@gmail.com\chrome\locale\fr-LU, , [b1c29ca1a8f1c472024c1f96d32faa56],
PUP.Optional.DeskCut, C:\Users\Míša\AppData\Roaming\Mozilla\Firefox\Profiles\snmq48r6.default\extensions\deskCutv2@gmail.com\chrome\locale\it, , [b1c29ca1a8f1c472024c1f96d32faa56],
PUP.Optional.DeskCut, C:\Users\Míša\AppData\Roaming\Mozilla\Firefox\Profiles\snmq48r6.default\extensions\deskCutv2@gmail.com\chrome\locale\it-CH, , [b1c29ca1a8f1c472024c1f96d32faa56],
PUP.Optional.DeskCut, C:\Users\Míša\AppData\Roaming\Mozilla\Firefox\Profiles\snmq48r6.default\extensions\deskCutv2@gmail.com\chrome\locale\pl, , [b1c29ca1a8f1c472024c1f96d32faa56],
PUP.Optional.DeskCut, C:\Users\Míša\AppData\Roaming\Mozilla\Firefox\Profiles\snmq48r6.default\extensions\deskCutv2@gmail.com\chrome\locale\pt-BR, , [b1c29ca1a8f1c472024c1f96d32faa56],
PUP.Optional.DeskCut, C:\Users\Míša\AppData\Roaming\Mozilla\Firefox\Profiles\snmq48r6.default\extensions\deskCutv2@gmail.com\chrome\locale\ru, , [b1c29ca1a8f1c472024c1f96d32faa56],
PUP.Optional.DeskCut, C:\Users\Míša\AppData\Roaming\Mozilla\Firefox\Profiles\snmq48r6.default\extensions\deskCutv2@gmail.com\chrome\locale\ru-MO, , [b1c29ca1a8f1c472024c1f96d32faa56],
PUP.Optional.DeskCut, C:\Users\Míša\AppData\Roaming\Mozilla\Firefox\Profiles\snmq48r6.default\extensions\deskCutv2@gmail.com\chrome\locale\tr, , [b1c29ca1a8f1c472024c1f96d32faa56],
PUP.Optional.DeskCut, C:\Users\Míša\AppData\Roaming\Mozilla\Firefox\Profiles\snmq48r6.default\extensions\deskCutv2@gmail.com\chrome\locale\vi, , [b1c29ca1a8f1c472024c1f96d32faa56],
PUP.Optional.DeskCut, C:\Users\Míša\AppData\Roaming\Mozilla\Firefox\Profiles\snmq48r6.default\extensions\deskCutv2@gmail.com\chrome\locale\zh-CN, , [b1c29ca1a8f1c472024c1f96d32faa56],
PUP.Optional.DeskCut, C:\Users\Míša\AppData\Roaming\Mozilla\Firefox\Profiles\snmq48r6.default\extensions\deskCutv2@gmail.com\chrome\locale\zh-TW, , [b1c29ca1a8f1c472024c1f96d32faa56],
PUP.Optional.DeskCut, C:\Users\Míša\AppData\Roaming\Mozilla\Firefox\Profiles\snmq48r6.default\extensions\deskCutv2@gmail.com\chrome\skin, , [b1c29ca1a8f1c472024c1f96d32faa56],
PUP.Optional.DeskCut, C:\Users\Míša\AppData\Roaming\Mozilla\Firefox\Profiles\snmq48r6.default\extensions\deskCutv2@gmail.com\defaults, , [b1c29ca1a8f1c472024c1f96d32faa56],
PUP.Optional.DeskCut, C:\Users\Míša\AppData\Roaming\Mozilla\Firefox\Profiles\snmq48r6.default\extensions\deskCutv2@gmail.com\defaults\preferences, , [b1c29ca1a8f1c472024c1f96d32faa56],
PUP.Optional.DeskCut, C:\Users\Míša\AppData\Roaming\Mozilla\Firefox\Profiles\snmq48r6.default\extensions\deskCutv2@gmail.com\modules, , [b1c29ca1a8f1c472024c1f96d32faa56],

Soubory: 79
PUP.Optional.MyPCBackup, C:\Program Files (x86)\OLBPre\OLBPre.Vexe, , [a7cc47f64653c86e258462772dd43dc3],
PUP.Optional.MyPCBackup, C:\Program Files (x86)\OLBPre\uninst.exe, , [8ae9d06d40592f077685644ad0348f71],
PUP.Optional.MindSpark, C:\Users\Míša\AppData\Roaming\Mozilla\Firefox\Profiles\snmq48r6.default\searchplugins\ask-web-search.xml, , [046f82bb1188ab8b3c9e4291798add23],
PUP.Optional.MyPCBackup, C:\Users\Míša\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MyPC Backup.lnk, , [373cef4ea8f18ea824236e6aea19a35d],
PUP.Optional.MyPCBackup, C:\Windows\System32\Tasks\LaunchPreSignup, , [adc6231a31685adc48008553e3201ae6],
PUP.Optional.PreBackup, C:\Program Files (x86)\OLBPre\OLBPre.exe.config, , [82f1ca73d8c10135416aefee7a898b75],
PUP.Optional.PreBackup, C:\Program Files (x86)\OLBPre\aff.jdat, , [82f1ca73d8c10135416aefee7a898b75],
PUP.Optional.PreBackup, C:\Program Files (x86)\OLBPre\brand.jdat, , [82f1ca73d8c10135416aefee7a898b75],
PUP.Optional.PreBackup, C:\Program Files (x86)\OLBPre\de_DE.mo, , [82f1ca73d8c10135416aefee7a898b75],
PUP.Optional.PreBackup, C:\Program Files (x86)\OLBPre\es_ES.mo, , [82f1ca73d8c10135416aefee7a898b75],
PUP.Optional.PreBackup, C:\Program Files (x86)\OLBPre\fr_FR.mo, , [82f1ca73d8c10135416aefee7a898b75],
PUP.Optional.PreBackup, C:\Program Files (x86)\OLBPre\it_IT.mo, , [82f1ca73d8c10135416aefee7a898b75],
PUP.Optional.PreBackup, C:\Program Files (x86)\OLBPre\LinqBridge.dll, , [82f1ca73d8c10135416aefee7a898b75],
PUP.Optional.PreBackup, C:\Program Files (x86)\OLBPre\pt_PT.mo, , [82f1ca73d8c10135416aefee7a898b75],
PUP.Optional.PreBackup, C:\Program Files (x86)\OLBPre\state.jdat, , [82f1ca73d8c10135416aefee7a898b75],
PUP.Optional.YourSearching.ShrtCln, C:\Users\Míša\AppData\Roaming\Mozilla\Firefox\Profiles\snmq48r6.default\searchplugins\yoursearching.xml, , [571c97a66138c571931f4ae9d72d0af6],
PUP.Optional.DeskCut, C:\Users\Míša\AppData\Roaming\Mozilla\Firefox\Profiles\snmq48r6.default\extensions\deskCutv2@gmail.com\chrome.manifest, , [b1c29ca1a8f1c472024c1f96d32faa56],
PUP.Optional.DeskCut, C:\Users\Míša\AppData\Roaming\Mozilla\Firefox\Profiles\snmq48r6.default\extensions\deskCutv2@gmail.com\install.rdf, , [b1c29ca1a8f1c472024c1f96d32faa56],
PUP.Optional.DeskCut, C:\Users\Míša\AppData\Roaming\Mozilla\Firefox\Profiles\snmq48r6.default\extensions\deskCutv2@gmail.com\chrome\content\index.html, , [b1c29ca1a8f1c472024c1f96d32faa56],
PUP.Optional.DeskCut, C:\Users\Míša\AppData\Roaming\Mozilla\Firefox\Profiles\snmq48r6.default\extensions\deskCutv2@gmail.com\chrome\content\quick_start.js, , [b1c29ca1a8f1c472024c1f96d32faa56],
PUP.Optional.DeskCut, C:\Users\Míša\AppData\Roaming\Mozilla\Firefox\Profiles\snmq48r6.default\extensions\deskCutv2@gmail.com\chrome\content\quick_start.xul, , [b1c29ca1a8f1c472024c1f96d32faa56],
PUP.Optional.DeskCut, C:\Users\Míša\AppData\Roaming\Mozilla\Firefox\Profiles\snmq48r6.default\extensions\deskCutv2@gmail.com\chrome\content\include\speed_dial.js, , [b1c29ca1a8f1c472024c1f96d32faa56],
PUP.Optional.DeskCut, C:\Users\Míša\AppData\Roaming\Mozilla\Firefox\Profiles\snmq48r6.default\extensions\deskCutv2@gmail.com\chrome\content\include\tools\about_blank_hook.js, , [b1c29ca1a8f1c472024c1f96d32faa56],
PUP.Optional.DeskCut, C:\Users\Míša\AppData\Roaming\Mozilla\Firefox\Profiles\snmq48r6.default\extensions\deskCutv2@gmail.com\chrome\content\include\tools\misc.js, , [b1c29ca1a8f1c472024c1f96d32faa56],
PUP.Optional.DeskCut, C:\Users\Míša\AppData\Roaming\Mozilla\Firefox\Profiles\snmq48r6.default\extensions\deskCutv2@gmail.com\chrome\content\include\tools\popup_image_helper.js, , [b1c29ca1a8f1c472024c1f96d32faa56],
PUP.Optional.DeskCut, C:\Users\Míša\AppData\Roaming\Mozilla\Firefox\Profiles\snmq48r6.default\extensions\deskCutv2@gmail.com\chrome\content\include\tools\urlrequestor.js, , [b1c29ca1a8f1c472024c1f96d32faa56],
PUP.Optional.DeskCut, C:\Users\Míša\AppData\Roaming\Mozilla\Firefox\Profiles\snmq48r6.default\extensions\deskCutv2@gmail.com\chrome\content\js\lib\doT.min.js, , [b1c29ca1a8f1c472024c1f96d32faa56],
PUP.Optional.DeskCut, C:\Users\Míša\AppData\Roaming\Mozilla\Firefox\Profiles\snmq48r6.default\extensions\deskCutv2@gmail.com\chrome\content\js\lib\jquery-2.1.0.min.js, , [b1c29ca1a8f1c472024c1f96d32faa56],
PUP.Optional.DeskCut, C:\Users\Míša\AppData\Roaming\Mozilla\Firefox\Profiles\snmq48r6.default\extensions\deskCutv2@gmail.com\chrome\content\js\lib\jquery.autocomplete.js, , [b1c29ca1a8f1c472024c1f96d32faa56],
PUP.Optional.DeskCut, C:\Users\Míša\AppData\Roaming\Mozilla\Firefox\Profiles\snmq48r6.default\extensions\deskCutv2@gmail.com\chrome\content\js\module\hotSearch.js, , [b1c29ca1a8f1c472024c1f96d32faa56],
PUP.Optional.DeskCut, C:\Users\Míša\AppData\Roaming\Mozilla\Firefox\Profiles\snmq48r6.default\extensions\deskCutv2@gmail.com\chrome\content\js\module\mostgrid.js, , [b1c29ca1a8f1c472024c1f96d32faa56],
PUP.Optional.DeskCut, C:\Users\Míša\AppData\Roaming\Mozilla\Firefox\Profiles\snmq48r6.default\extensions\deskCutv2@gmail.com\chrome\content\js\module\search.js, , [b1c29ca1a8f1c472024c1f96d32faa56],
PUP.Optional.DeskCut, C:\Users\Míša\AppData\Roaming\Mozilla\Firefox\Profiles\snmq48r6.default\extensions\deskCutv2@gmail.com\chrome\content\js\module\stat.js, , [b1c29ca1a8f1c472024c1f96d32faa56],
PUP.Optional.DeskCut, C:\Users\Míša\AppData\Roaming\Mozilla\Firefox\Profiles\snmq48r6.default\extensions\deskCutv2@gmail.com\chrome\content\js\pack\common.js, , [b1c29ca1a8f1c472024c1f96d32faa56],
PUP.Optional.DeskCut, C:\Users\Míša\AppData\Roaming\Mozilla\Firefox\Profiles\snmq48r6.default\extensions\deskCutv2@gmail.com\chrome\content\js\pack\ga.js, , [b1c29ca1a8f1c472024c1f96d32faa56],
PUP.Optional.DeskCut, C:\Users\Míša\AppData\Roaming\Mozilla\Firefox\Profiles\snmq48r6.default\extensions\deskCutv2@gmail.com\chrome\content\js\pack\xagainit.js, , [b1c29ca1a8f1c472024c1f96d32faa56],
PUP.Optional.DeskCut, C:\Users\Míša\AppData\Roaming\Mozilla\Firefox\Profiles\snmq48r6.default\extensions\deskCutv2@gmail.com\chrome\locale\en\locale.properties, , [b1c29ca1a8f1c472024c1f96d32faa56],
PUP.Optional.DeskCut, C:\Users\Míša\AppData\Roaming\Mozilla\Firefox\Profiles\snmq48r6.default\extensions\deskCutv2@gmail.com\chrome\locale\en-US\locale.properties, , [b1c29ca1a8f1c472024c1f96d32faa56],
PUP.Optional.DeskCut, C:\Users\Míša\AppData\Roaming\Mozilla\Firefox\Profiles\snmq48r6.default\extensions\deskCutv2@gmail.com\chrome\locale\es\locale.properties, , [b1c29ca1a8f1c472024c1f96d32faa56],
PUP.Optional.DeskCut, C:\Users\Míša\AppData\Roaming\Mozilla\Firefox\Profiles\snmq48r6.default\extensions\deskCutv2@gmail.com\chrome\locale\es-419\locale.properties, , [b1c29ca1a8f1c472024c1f96d32faa56],
PUP.Optional.DeskCut, C:\Users\Míša\AppData\Roaming\Mozilla\Firefox\Profiles\snmq48r6.default\extensions\deskCutv2@gmail.com\chrome\locale\fr\locale.properties, , [b1c29ca1a8f1c472024c1f96d32faa56],
PUP.Optional.DeskCut, C:\Users\Míša\AppData\Roaming\Mozilla\Firefox\Profiles\snmq48r6.default\extensions\deskCutv2@gmail.com\chrome\locale\fr-BE\locale.properties, , [b1c29ca1a8f1c472024c1f96d32faa56],
PUP.Optional.DeskCut, C:\Users\Míša\AppData\Roaming\Mozilla\Firefox\Profiles\snmq48r6.default\extensions\deskCutv2@gmail.com\chrome\locale\fr-CA\locale.properties, , [b1c29ca1a8f1c472024c1f96d32faa56],
PUP.Optional.DeskCut, C:\Users\Míša\AppData\Roaming\Mozilla\Firefox\Profiles\snmq48r6.default\extensions\deskCutv2@gmail.com\chrome\locale\fr-CH\locale.properties, , [b1c29ca1a8f1c472024c1f96d32faa56],
PUP.Optional.DeskCut, C:\Users\Míša\AppData\Roaming\Mozilla\Firefox\Profiles\snmq48r6.default\extensions\deskCutv2@gmail.com\chrome\locale\fr-LU\locale.properties, , [b1c29ca1a8f1c472024c1f96d32faa56],
PUP.Optional.DeskCut, C:\Users\Míša\AppData\Roaming\Mozilla\Firefox\Profiles\snmq48r6.default\extensions\deskCutv2@gmail.com\chrome\locale\it\locale.properties, , [b1c29ca1a8f1c472024c1f96d32faa56],
PUP.Optional.DeskCut, C:\Users\Míša\AppData\Roaming\Mozilla\Firefox\Profiles\snmq48r6.default\extensions\deskCutv2@gmail.com\chrome\locale\it-CH\locale.properties, , [b1c29ca1a8f1c472024c1f96d32faa56],
PUP.Optional.DeskCut, C:\Users\Míša\AppData\Roaming\Mozilla\Firefox\Profiles\snmq48r6.default\extensions\deskCutv2@gmail.com\chrome\locale\pl\locale.properties, , [b1c29ca1a8f1c472024c1f96d32faa56],
PUP.Optional.DeskCut, C:\Users\Míša\AppData\Roaming\Mozilla\Firefox\Profiles\snmq48r6.default\extensions\deskCutv2@gmail.com\chrome\locale\pt-BR\locale.properties, , [b1c29ca1a8f1c472024c1f96d32faa56],
PUP.Optional.DeskCut, C:\Users\Míša\AppData\Roaming\Mozilla\Firefox\Profiles\snmq48r6.default\extensions\deskCutv2@gmail.com\chrome\locale\ru\locale.properties, , [b1c29ca1a8f1c472024c1f96d32faa56],
PUP.Optional.DeskCut, C:\Users\Míša\AppData\Roaming\Mozilla\Firefox\Profiles\snmq48r6.default\extensions\deskCutv2@gmail.com\chrome\locale\ru-MO\locale.properties, , [b1c29ca1a8f1c472024c1f96d32faa56],
PUP.Optional.DeskCut, C:\Users\Míša\AppData\Roaming\Mozilla\Firefox\Profiles\snmq48r6.default\extensions\deskCutv2@gmail.com\chrome\locale\tr\locale.properties, , [b1c29ca1a8f1c472024c1f96d32faa56],
PUP.Optional.DeskCut, C:\Users\Míša\AppData\Roaming\Mozilla\Firefox\Profiles\snmq48r6.default\extensions\deskCutv2@gmail.com\chrome\locale\vi\locale.properties, , [b1c29ca1a8f1c472024c1f96d32faa56],
PUP.Optional.DeskCut, C:\Users\Míša\AppData\Roaming\Mozilla\Firefox\Profiles\snmq48r6.default\extensions\deskCutv2@gmail.com\chrome\locale\zh-CN\locale.properties, , [b1c29ca1a8f1c472024c1f96d32faa56],
PUP.Optional.DeskCut, C:\Users\Míša\AppData\Roaming\Mozilla\Firefox\Profiles\snmq48r6.default\extensions\deskCutv2@gmail.com\chrome\locale\zh-TW\locale.properties, , [b1c29ca1a8f1c472024c1f96d32faa56],
PUP.Optional.DeskCut, C:\Users\Míša\AppData\Roaming\Mozilla\Firefox\Profiles\snmq48r6.default\extensions\deskCutv2@gmail.com\chrome\skin\default_logo.png, , [b1c29ca1a8f1c472024c1f96d32faa56],
PUP.Optional.DeskCut, C:\Users\Míša\AppData\Roaming\Mozilla\Firefox\Profiles\snmq48r6.default\extensions\deskCutv2@gmail.com\chrome\skin\googlelogo.png, , [b1c29ca1a8f1c472024c1f96d32faa56],
PUP.Optional.DeskCut, C:\Users\Míša\AppData\Roaming\Mozilla\Firefox\Profiles\snmq48r6.default\extensions\deskCutv2@gmail.com\chrome\skin\google_trends.png, , [b1c29ca1a8f1c472024c1f96d32faa56],
PUP.Optional.DeskCut, C:\Users\Míša\AppData\Roaming\Mozilla\Firefox\Profiles\snmq48r6.default\extensions\deskCutv2@gmail.com\chrome\skin\icon.png, , [b1c29ca1a8f1c472024c1f96d32faa56],
PUP.Optional.DeskCut, C:\Users\Míša\AppData\Roaming\Mozilla\Firefox\Profiles\snmq48r6.default\extensions\deskCutv2@gmail.com\chrome\skin\loading.gif, , [b1c29ca1a8f1c472024c1f96d32faa56],
PUP.Optional.DeskCut, C:\Users\Míša\AppData\Roaming\Mozilla\Firefox\Profiles\snmq48r6.default\extensions\deskCutv2@gmail.com\chrome\skin\logo.png, , [b1c29ca1a8f1c472024c1f96d32faa56],
PUP.Optional.DeskCut, C:\Users\Míša\AppData\Roaming\Mozilla\Firefox\Profiles\snmq48r6.default\extensions\deskCutv2@gmail.com\chrome\skin\luck.png, , [b1c29ca1a8f1c472024c1f96d32faa56],
PUP.Optional.DeskCut, C:\Users\Míša\AppData\Roaming\Mozilla\Firefox\Profiles\snmq48r6.default\extensions\deskCutv2@gmail.com\chrome\skin\newtab.ico, , [b1c29ca1a8f1c472024c1f96d32faa56],
PUP.Optional.DeskCut, C:\Users\Míša\AppData\Roaming\Mozilla\Firefox\Profiles\snmq48r6.default\extensions\deskCutv2@gmail.com\chrome\skin\simple.css, , [b1c29ca1a8f1c472024c1f96d32faa56],
PUP.Optional.DeskCut, C:\Users\Míša\AppData\Roaming\Mozilla\Firefox\Profiles\snmq48r6.default\extensions\deskCutv2@gmail.com\chrome\skin\style.css, , [b1c29ca1a8f1c472024c1f96d32faa56],
PUP.Optional.DeskCut, C:\Users\Míša\AppData\Roaming\Mozilla\Firefox\Profiles\snmq48r6.default\extensions\deskCutv2@gmail.com\defaults\preferences\fvd.js, , [b1c29ca1a8f1c472024c1f96d32faa56],
PUP.Optional.DeskCut, C:\Users\Míša\AppData\Roaming\Mozilla\Firefox\Profiles\snmq48r6.default\extensions\deskCutv2@gmail.com\defaults\preferences\preferences.js, , [b1c29ca1a8f1c472024c1f96d32faa56],
PUP.Optional.DeskCut, C:\Users\Míša\AppData\Roaming\Mozilla\Firefox\Profiles\snmq48r6.default\extensions\deskCutv2@gmail.com\modules\addonmanager.js, , [b1c29ca1a8f1c472024c1f96d32faa56],
PUP.Optional.DeskCut, C:\Users\Míša\AppData\Roaming\Mozilla\Firefox\Profiles\snmq48r6.default\extensions\deskCutv2@gmail.com\modules\aes.js, , [b1c29ca1a8f1c472024c1f96d32faa56],
PUP.Optional.DeskCut, C:\Users\Míša\AppData\Roaming\Mozilla\Firefox\Profiles\snmq48r6.default\extensions\deskCutv2@gmail.com\modules\config.js, , [b1c29ca1a8f1c472024c1f96d32faa56],
PUP.Optional.DeskCut, C:\Users\Míša\AppData\Roaming\Mozilla\Firefox\Profiles\snmq48r6.default\extensions\deskCutv2@gmail.com\modules\dialogs.js, , [b1c29ca1a8f1c472024c1f96d32faa56],
PUP.Optional.DeskCut, C:\Users\Míša\AppData\Roaming\Mozilla\Firefox\Profiles\snmq48r6.default\extensions\deskCutv2@gmail.com\modules\last_tab.js, , [b1c29ca1a8f1c472024c1f96d32faa56],
PUP.Optional.DeskCut, C:\Users\Míša\AppData\Roaming\Mozilla\Firefox\Profiles\snmq48r6.default\extensions\deskCutv2@gmail.com\modules\misc.js, , [b1c29ca1a8f1c472024c1f96d32faa56],
PUP.Optional.DeskCut, C:\Users\Míša\AppData\Roaming\Mozilla\Firefox\Profiles\snmq48r6.default\extensions\deskCutv2@gmail.com\modules\properties.js, , [b1c29ca1a8f1c472024c1f96d32faa56],
PUP.Optional.DeskCut, C:\Users\Míša\AppData\Roaming\Mozilla\Firefox\Profiles\snmq48r6.default\extensions\deskCutv2@gmail.com\modules\remoterequest.js, , [b1c29ca1a8f1c472024c1f96d32faa56],
PUP.Optional.DeskCut, C:\Users\Míša\AppData\Roaming\Mozilla\Firefox\Profiles\snmq48r6.default\extensions\deskCutv2@gmail.com\modules\restoreprefs.js, , [b1c29ca1a8f1c472024c1f96d32faa56],
PUP.Optional.DeskCut, C:\Users\Míša\AppData\Roaming\Mozilla\Firefox\Profiles\snmq48r6.default\extensions\deskCutv2@gmail.com\modules\settings.js, , [b1c29ca1a8f1c472024c1f96d32faa56],
PUP.Optional.OurSearch, C:\Users\Míša\AppData\Roaming\Mozilla\Firefox\Profiles\snmq48r6.default\prefs.js, Dobré: (), Špatné: (user_pref("browser.newtab.url", "http://www.yoursearching.com/newtab/?ty ... a3k96a3k96");), ,[f77cd667c8d1eb4b245158905ca81ae6]
PUP.Optional.DeskCut, C:\Users\Míša\AppData\Roaming\Mozilla\Firefox\Profiles\snmq48r6.default\prefs.js, Dobré: (), Špatné: (deskCutv2@gmail.com), ,[640f0736f4a5eb4bda96866aff05bd43]

Fyzické sektory: 0
(Nenalezeny žádné škodlivé položky)


(end)
Nahoru
Uživatelský avatar
Rudy
Site Admin
Site Admin
Příspěvky: 119673
Registrován: 30 říj 2003 13:42
Bydliště: Plzeň
Kontaktovat uživatele:
Kontaktovat uživatele Rudy

Re: Bundled.toolbar.ask, injector.BTSB, MSIL/kryptik.bgl

#4 Příspěvek od Rudy »

Všechny nálezy smažte.
Dotazy a logy vkládejte pouze do vašich threadů. Soukromé zprávy, icq a e-maily neslouží k řešení vašich problémů.

Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.

Navštivte: Obrázek

e-mail: rudy(zavináč)forum.viry.cz

Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!


Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Nahoru
Odpovědět

Zpět na „Řešení problémů, logy“