Vetřelec v PC?

Zpráva

#16 Příspěvek od **Márty84** » 12 lis 2016 09:16

Napiste mi velikost adresare plochy (C:\Users\Zrzka\Plocha)

Vypnete trvale Windows Defender.

Otevrete si poznamkovy blok a zkopirujte do nej tento skript

Kód: Vybrat vše

Start
CloseProcesses:
CreateRestorePoint:

HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer: Restriction <======= ATTENTION
HKU\S-1-5-21-2992113071-3650989354-1145625972-1002\SOFTWARE\Policies\Microsoft\Internet Explorer: Restriction <======= ATTENTION
HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dl ... r=iesearch
HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.microsoft.com/isapi/redir.dl ... ar=msnhome
HKU\S-1-5-21-2992113071-3650989354-1145625972-1002\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dl ... r=iesearch

S3 catchme; \??\C:\ComboFix\catchme.sys [X]
S3 MBAMSwissArmy; \??\C:\Windows\system32\drivers\MBAMSwissArmy.sys [X]

2016-11-08 20:59 - 2016-11-10 15:44 - 00000000 ____D C:\Program Files (x86)\Malwarebytes Anti-Malware
2016-11-08 20:59 - 2016-11-08 20:59 - 00000000 ____D C:\ProgramData\Malwarebytes

AlternateDataStreams: C:\ProgramData:gs5sys [4608]
AlternateDataStreams: C:\Users\All Users:gs5sys [4608]
AlternateDataStreams: C:\Users\Zrzka:gs5sys [18434]
AlternateDataStreams: C:\ProgramData\Application Data:gs5sys [4608]
AlternateDataStreams: C:\ProgramData\Data aplikací:gs5sys [4608]
AlternateDataStreams: C:\ProgramData\TEMP:02A78DF6 [129]
AlternateDataStreams: C:\ProgramData\TEMP:0410A323 [131]
AlternateDataStreams: C:\ProgramData\TEMP:04ADB7A6 [120]
AlternateDataStreams: C:\ProgramData\TEMP:07CBFAD5 [121]
AlternateDataStreams: C:\ProgramData\TEMP:08DB8D99 [139]
AlternateDataStreams: C:\ProgramData\TEMP:0AE2C68F [101]
AlternateDataStreams: C:\ProgramData\TEMP:0C65EA0E [468]
AlternateDataStreams: C:\ProgramData\TEMP:0E8117B1 [122]
AlternateDataStreams: C:\ProgramData\TEMP:10CB85CA [133]
AlternateDataStreams: C:\ProgramData\TEMP:10D45FC3 [123]
AlternateDataStreams: C:\ProgramData\TEMP:1416AAA6 [258]
AlternateDataStreams: C:\ProgramData\TEMP:15381DB9 [147]
AlternateDataStreams: C:\ProgramData\TEMP:1585E7B2 [130]
AlternateDataStreams: C:\ProgramData\TEMP:16F42F1F [132]
AlternateDataStreams: C:\ProgramData\TEMP:1740DC47 [117]
AlternateDataStreams: C:\ProgramData\TEMP:19C541B5 [126]
AlternateDataStreams: C:\ProgramData\TEMP:1ADC4BD5 [120]
AlternateDataStreams: C:\ProgramData\TEMP:1F96ED45 [124]
AlternateDataStreams: C:\ProgramData\TEMP:217A2A36 [238]
AlternateDataStreams: C:\ProgramData\TEMP:2216A431 [252]
AlternateDataStreams: C:\ProgramData\TEMP:236FF5C6 [119]
AlternateDataStreams: C:\ProgramData\TEMP:258D2F8B [146]
AlternateDataStreams: C:\ProgramData\TEMP:2701CA70 [124]
AlternateDataStreams: C:\ProgramData\TEMP:28819F45 [125]
AlternateDataStreams: C:\ProgramData\TEMP:2ADF9928 [119]
AlternateDataStreams: C:\ProgramData\TEMP:2AE74FF9 [138]
AlternateDataStreams: C:\ProgramData\TEMP:2C678471 [119]
AlternateDataStreams: C:\ProgramData\TEMP:2C84CA43 [146]
AlternateDataStreams: C:\ProgramData\TEMP:2CA4B471 [135]
AlternateDataStreams: C:\ProgramData\TEMP:2CB9631F [134]
AlternateDataStreams: C:\ProgramData\TEMP:2DB4FB78 [148]
AlternateDataStreams: C:\ProgramData\TEMP:2F4A0A6B [114]
AlternateDataStreams: C:\ProgramData\TEMP:349E5B74 [120]
AlternateDataStreams: C:\ProgramData\TEMP:371A321E [284]
AlternateDataStreams: C:\ProgramData\TEMP:375FC7E7 [116]
AlternateDataStreams: C:\ProgramData\TEMP:385E2CFD [105]
AlternateDataStreams: C:\ProgramData\TEMP:38A0E181 [136]
AlternateDataStreams: C:\ProgramData\TEMP:38FF076E [462]
AlternateDataStreams: C:\ProgramData\TEMP:39CB2031 [182]
AlternateDataStreams: C:\ProgramData\TEMP:39EDBD33 [143]
AlternateDataStreams: C:\ProgramData\TEMP:3A4676D7 [128]
AlternateDataStreams: C:\ProgramData\TEMP:3B454A5C [125]
AlternateDataStreams: C:\ProgramData\TEMP:3B75B877 [143]
AlternateDataStreams: C:\ProgramData\TEMP:3C0887BF [131]
AlternateDataStreams: C:\ProgramData\TEMP:3D507E52 [148]
AlternateDataStreams: C:\ProgramData\TEMP:3E8A3E87 [144]
AlternateDataStreams: C:\ProgramData\TEMP:425759C6 [238]
AlternateDataStreams: C:\ProgramData\TEMP:432EC713 [140]
AlternateDataStreams: C:\ProgramData\TEMP:437B1C75 [366]
AlternateDataStreams: C:\ProgramData\TEMP:469B47D8 [119]
AlternateDataStreams: C:\ProgramData\TEMP:4826868B [152]
AlternateDataStreams: C:\ProgramData\TEMP:490BCC52 [118]
AlternateDataStreams: C:\ProgramData\TEMP:4B6A9FDA [362]
AlternateDataStreams: C:\ProgramData\TEMP:4B8122EA [258]
AlternateDataStreams: C:\ProgramData\TEMP:4C16B46B [122]
AlternateDataStreams: C:\ProgramData\TEMP:4C4BD66D [131]
AlternateDataStreams: C:\ProgramData\TEMP:4C5C1DD3 [146]
AlternateDataStreams: C:\ProgramData\TEMP:4D28BE4D [286]
AlternateDataStreams: C:\ProgramData\TEMP:5335CE76 [118]
AlternateDataStreams: C:\ProgramData\TEMP:53BA2DF6 [143]
AlternateDataStreams: C:\ProgramData\TEMP:55422315 [118]
AlternateDataStreams: C:\ProgramData\TEMP:56C66609 [130]
AlternateDataStreams: C:\ProgramData\TEMP:56D92042 [292]
AlternateDataStreams: C:\ProgramData\TEMP:56F368C9 [122]
AlternateDataStreams: C:\ProgramData\TEMP:5B09C4D9 [129]
AlternateDataStreams: C:\ProgramData\TEMP:5ED747B8 [368]
AlternateDataStreams: C:\ProgramData\TEMP:60E0AB2A [486]
AlternateDataStreams: C:\ProgramData\TEMP:629F8518 [118]
AlternateDataStreams: C:\ProgramData\TEMP:62AC0CCE [141]
AlternateDataStreams: C:\ProgramData\TEMP:63C29481 [286]
AlternateDataStreams: C:\ProgramData\TEMP:6423D635 [132]
AlternateDataStreams: C:\ProgramData\TEMP:696F7DA7 [286]
AlternateDataStreams: C:\ProgramData\TEMP:6B7447D4 [135]
AlternateDataStreams: C:\ProgramData\TEMP:6BF0805F [107]
AlternateDataStreams: C:\ProgramData\TEMP:6DDFD746 [127]
AlternateDataStreams: C:\ProgramData\TEMP:6E11933F [141]
AlternateDataStreams: C:\ProgramData\TEMP:6E6A4F42 [352]
AlternateDataStreams: C:\ProgramData\TEMP:73461BFA [123]
AlternateDataStreams: C:\ProgramData\TEMP:73B78E79 [122]
AlternateDataStreams: C:\ProgramData\TEMP:751D6870 [234]
AlternateDataStreams: C:\ProgramData\TEMP:75E82066 [95]
AlternateDataStreams: C:\ProgramData\TEMP:76466F4C [125]
AlternateDataStreams: C:\ProgramData\TEMP:7687A3E3 [334]
AlternateDataStreams: C:\ProgramData\TEMP:7804B508 [130]
AlternateDataStreams: C:\ProgramData\TEMP:7BB584AA [133]
AlternateDataStreams: C:\ProgramData\TEMP:7D288858 [135]
AlternateDataStreams: C:\ProgramData\TEMP:7EBCAF87 [117]
AlternateDataStreams: C:\ProgramData\TEMP:7FA0D639 [338]
AlternateDataStreams: C:\ProgramData\TEMP:831C6B2D [420]
AlternateDataStreams: C:\ProgramData\TEMP:86043CD3 [131]
AlternateDataStreams: C:\ProgramData\TEMP:884C7316 [216]
AlternateDataStreams: C:\ProgramData\TEMP:8967C154 [127]
AlternateDataStreams: C:\ProgramData\TEMP:896FF808 [137]
AlternateDataStreams: C:\ProgramData\TEMP:89FC8EEB [152]
AlternateDataStreams: C:\ProgramData\TEMP:8A40FEFF [125]
AlternateDataStreams: C:\ProgramData\TEMP:8A633BE5 [212]
AlternateDataStreams: C:\ProgramData\TEMP:8B69E3C3 [124]
AlternateDataStreams: C:\ProgramData\TEMP:8BCF4DE2 [123]
AlternateDataStreams: C:\ProgramData\TEMP:8BE7A048 [118]
AlternateDataStreams: C:\ProgramData\TEMP:8C12CFCD [145]
AlternateDataStreams: C:\ProgramData\TEMP:8C6D1905 [131]
AlternateDataStreams: C:\ProgramData\TEMP:8D565A9B [150]
AlternateDataStreams: C:\ProgramData\TEMP:8DD20B4A [118]
AlternateDataStreams: C:\ProgramData\TEMP:908A1B53 [147]
AlternateDataStreams: C:\ProgramData\TEMP:91191703 [119]
AlternateDataStreams: C:\ProgramData\TEMP:971DCCE2 [116]
AlternateDataStreams: C:\ProgramData\TEMP:9758CFB3 [122]
AlternateDataStreams: C:\ProgramData\TEMP:97BDBF49 [131]
AlternateDataStreams: C:\ProgramData\TEMP:9CF728A6 [133]
AlternateDataStreams: C:\ProgramData\TEMP:9D0A16E4 [370]
AlternateDataStreams: C:\ProgramData\TEMP:9E2BD6A9 [105]
AlternateDataStreams: C:\ProgramData\TEMP:9E5EA7A3 [125]
AlternateDataStreams: C:\ProgramData\TEMP:9FCF32A8 [127]
AlternateDataStreams: C:\ProgramData\TEMP:A01F3A87 [286]
AlternateDataStreams: C:\ProgramData\TEMP:A1023D41 [137]
AlternateDataStreams: C:\ProgramData\TEMP:A10E88DE [147]
AlternateDataStreams: C:\ProgramData\TEMP:A1A86E40 [134]
AlternateDataStreams: C:\ProgramData\TEMP:A1E6FE0F [149]
AlternateDataStreams: C:\ProgramData\TEMP:A2B3764A [129]
AlternateDataStreams: C:\ProgramData\TEMP:A4241298 [226]
AlternateDataStreams: C:\ProgramData\TEMP:A69FAA24 [129]
AlternateDataStreams: C:\ProgramData\TEMP:A6D89509 [119]
AlternateDataStreams: C:\ProgramData\TEMP:A843AC18 [127]
AlternateDataStreams: C:\ProgramData\TEMP:A851461E [139]
AlternateDataStreams: C:\ProgramData\TEMP:A88BE334 [134]
AlternateDataStreams: C:\ProgramData\TEMP:A9056F42 [126]
AlternateDataStreams: C:\ProgramData\TEMP:A9204B0E [146]
AlternateDataStreams: C:\ProgramData\TEMP:A9F13D2D [119]
AlternateDataStreams: C:\ProgramData\TEMP:AA004D25 [104]
AlternateDataStreams: C:\ProgramData\TEMP:AD020DC3 [145]
AlternateDataStreams: C:\ProgramData\TEMP:B01EC114 [132]
AlternateDataStreams: C:\ProgramData\TEMP:B139DDF3 [123]
AlternateDataStreams: C:\ProgramData\TEMP:B4530133 [135]
AlternateDataStreams: C:\ProgramData\TEMP:B6E6C4EA [134]
AlternateDataStreams: C:\ProgramData\TEMP:BA24E689 [121]
AlternateDataStreams: C:\ProgramData\TEMP:BE0654D6 [137]
AlternateDataStreams: C:\ProgramData\TEMP:C43C957E [132]
AlternateDataStreams: C:\ProgramData\TEMP:C453123E [126]
AlternateDataStreams: C:\ProgramData\TEMP:C6C9D74D [127]
AlternateDataStreams: C:\ProgramData\TEMP:C82210DD [136]
AlternateDataStreams: C:\ProgramData\TEMP:C85CD339 [101]
AlternateDataStreams: C:\ProgramData\TEMP:C900B47A [122]
AlternateDataStreams: C:\ProgramData\TEMP:CAB0171A [140]
AlternateDataStreams: C:\ProgramData\TEMP:CAF8DAC8 [139]
AlternateDataStreams: C:\ProgramData\TEMP:CB959782 [382]
AlternateDataStreams: C:\ProgramData\TEMP:CBAF0C30 [133]
AlternateDataStreams: C:\ProgramData\TEMP:CE8A42A3 [136]
AlternateDataStreams: C:\ProgramData\TEMP:D0AB0B4A [127]
AlternateDataStreams: C:\ProgramData\TEMP:D1FE35E7 [131]
AlternateDataStreams: C:\ProgramData\TEMP:D254266B [143]
AlternateDataStreams: C:\ProgramData\TEMP:D354012D [123]
AlternateDataStreams: C:\ProgramData\TEMP:D3A8AA31 [134]
AlternateDataStreams: C:\ProgramData\TEMP:D6D084A5 [282]
AlternateDataStreams: C:\ProgramData\TEMP:D882BE37 [112]
AlternateDataStreams: C:\ProgramData\TEMP:D885A57E [114]
AlternateDataStreams: C:\ProgramData\TEMP:D987CB43 [147]
AlternateDataStreams: C:\ProgramData\TEMP:DA7655EA [119]
AlternateDataStreams: C:\ProgramData\TEMP:DD95E6D9 [122]
AlternateDataStreams: C:\ProgramData\TEMP:E0848D16 [140]
AlternateDataStreams: C:\ProgramData\TEMP:E153075C [145]
AlternateDataStreams: C:\ProgramData\TEMP:E1D06077 [137]
AlternateDataStreams: C:\ProgramData\TEMP:E2C8DF7A [143]
AlternateDataStreams: C:\ProgramData\TEMP:E5BA9ADD [235]
AlternateDataStreams: C:\ProgramData\TEMP:E5F8E280 [132]
AlternateDataStreams: C:\ProgramData\TEMP:E962FBDB [110]
AlternateDataStreams: C:\ProgramData\TEMP:EAEE7554 [286]
AlternateDataStreams: C:\ProgramData\TEMP:EE69D7DF [209]
AlternateDataStreams: C:\ProgramData\TEMP:EECF83D1 [119]
AlternateDataStreams: C:\ProgramData\TEMP:EFE4FB84 [298]
AlternateDataStreams: C:\ProgramData\TEMP:F1F936DF [286]
AlternateDataStreams: C:\ProgramData\TEMP:F2DC4B0B [126]
AlternateDataStreams: C:\ProgramData\TEMP:F44D3C53 [121]
AlternateDataStreams: C:\ProgramData\TEMP:F52A6209 [102]
AlternateDataStreams: C:\ProgramData\TEMP:F5E30F6A [300]
AlternateDataStreams: C:\ProgramData\TEMP:F6DA3F39 [145]
AlternateDataStreams: C:\ProgramData\TEMP:F98E6C67 [282]
AlternateDataStreams: C:\ProgramData\TEMP:FD786DCA [498]
AlternateDataStreams: C:\ProgramData\TEMP:FEE00EB9 [136]
AlternateDataStreams: C:\Users\Public\Documents\desktop.ini:gs5sys [16386]
AlternateDataStreams: C:\Users\Zrzka\Data aplikací:gs5sys [16386]
AlternateDataStreams: C:\Users\Zrzka\Local Settings:gs5sys [16386]
AlternateDataStreams: C:\Users\Zrzka\Soubory cookie:gs5sys [16386]
AlternateDataStreams: C:\Users\Zrzka\Šablony:gs5sys [15362]
AlternateDataStreams: C:\Users\Zrzka\Desktop\desktop.ini:gs5sys [3840]
AlternateDataStreams: C:\Users\Zrzka\AppData\Local:gs5sys [16386]
AlternateDataStreams: C:\Users\Zrzka\AppData\Roaming:gs5sys [16386]
AlternateDataStreams: C:\Users\Zrzka\AppData\Local\Data aplikací:gs5sys [16386]
AlternateDataStreams: C:\Users\Zrzka\AppData\Local\History:gs5sys [17410]
AlternateDataStreams: C:\Users\Zrzka\Documents\desktop.ini:gs5sys [16386]

Hosts:
EmptyTemp:
Reboot:
End

Vlevo nahore kliknete na napis Soubor
Kliknete na napis Ulozit jako...
Napiste spravne ten cerveny nazev fixlist a ulozte na plochu.
Vypnete antivir i dalsi pripadne zabezpeceni.
Spustte FRST jako spravce, kliknete na napis Fix a program vykona prikazy.
Po restartu pc by se mel objevit novy log - s nazvem fixlog, ten mi sem zase zkopirujte.

Zrzoun · #17 Příspěvek od **Zrzoun** » 12 lis 2016 12:15

Plocha má velikost 41,9 MB a velikost na disku 42 MB
36 souborů, 2 složek

Zrzoun · #18 Příspěvek od **Zrzoun** » 12 lis 2016 12:26

Fix result of Farbar Recovery Scan Tool (x64) Version: 12-11-2016
Ran by Zrzka (12-11-2016 12:18:30) Run:2
Running from C:\Users\Zrzka\Desktop
Loaded Profiles: Zrzka (Available Profiles: oem & Zrzka)
Boot Mode: Normal
==============================================

fixlist content:
*****************
Start
CloseProcesses:
CreateRestorePoint:

HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer: Restriction <======= ATTENTION
HKU\S-1-5-21-2992113071-3650989354-1145625972-1002\SOFTWARE\Policies\Microsoft\Internet Explorer: Restriction <======= ATTENTION
HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dl ... r=iesearch
HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.microsoft.com/isapi/redir.dl ... ar=msnhome
HKU\S-1-5-21-2992113071-3650989354-1145625972-1002\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dl ... r=iesearch

S3 catchme; \??\C:\ComboFix\catchme.sys [X]
S3 MBAMSwissArmy; \??\C:\Windows\system32\drivers\MBAMSwissArmy.sys [X]

2016-11-08 20:59 - 2016-11-10 15:44 - 00000000 ____D C:\Program Files (x86)\Malwarebytes Anti-Malware
2016-11-08 20:59 - 2016-11-08 20:59 - 00000000 ____D C:\ProgramData\Malwarebytes

AlternateDataStreams: C:\ProgramData:gs5sys [4608]
AlternateDataStreams: C:\Users\All Users:gs5sys [4608]
AlternateDataStreams: C:\Users\Zrzka:gs5sys [18434]
AlternateDataStreams: C:\ProgramData\Application Data:gs5sys [4608]
AlternateDataStreams: C:\ProgramData\Data aplikací:gs5sys [4608]
AlternateDataStreams: C:\ProgramData\TEMP:02A78DF6 [129]
AlternateDataStreams: C:\ProgramData\TEMP:0410A323 [131]
AlternateDataStreams: C:\ProgramData\TEMP:04ADB7A6 [120]
AlternateDataStreams: C:\ProgramData\TEMP:07CBFAD5 [121]
AlternateDataStreams: C:\ProgramData\TEMP:08DB8D99 [139]
AlternateDataStreams: C:\ProgramData\TEMP:0AE2C68F [101]
AlternateDataStreams: C:\ProgramData\TEMP:0C65EA0E [468]
AlternateDataStreams: C:\ProgramData\TEMP:0E8117B1 [122]
AlternateDataStreams: C:\ProgramData\TEMP:10CB85CA [133]
AlternateDataStreams: C:\ProgramData\TEMP:10D45FC3 [123]
AlternateDataStreams: C:\ProgramData\TEMP:1416AAA6 [258]
AlternateDataStreams: C:\ProgramData\TEMP:15381DB9 [147]
AlternateDataStreams: C:\ProgramData\TEMP:1585E7B2 [130]
AlternateDataStreams: C:\ProgramData\TEMP:16F42F1F [132]
AlternateDataStreams: C:\ProgramData\TEMP:1740DC47 [117]
AlternateDataStreams: C:\ProgramData\TEMP:19C541B5 [126]
AlternateDataStreams: C:\ProgramData\TEMP:1ADC4BD5 [120]
AlternateDataStreams: C:\ProgramData\TEMP:1F96ED45 [124]
AlternateDataStreams: C:\ProgramData\TEMP:217A2A36 [238]
AlternateDataStreams: C:\ProgramData\TEMP:2216A431 [252]
AlternateDataStreams: C:\ProgramData\TEMP:236FF5C6 [119]
AlternateDataStreams: C:\ProgramData\TEMP:258D2F8B [146]
AlternateDataStreams: C:\ProgramData\TEMP:2701CA70 [124]
AlternateDataStreams: C:\ProgramData\TEMP:28819F45 [125]
AlternateDataStreams: C:\ProgramData\TEMP:2ADF9928 [119]
AlternateDataStreams: C:\ProgramData\TEMP:2AE74FF9 [138]
AlternateDataStreams: C:\ProgramData\TEMP:2C678471 [119]
AlternateDataStreams: C:\ProgramData\TEMP:2C84CA43 [146]
AlternateDataStreams: C:\ProgramData\TEMP:2CA4B471 [135]
AlternateDataStreams: C:\ProgramData\TEMP:2CB9631F [134]
AlternateDataStreams: C:\ProgramData\TEMP:2DB4FB78 [148]
AlternateDataStreams: C:\ProgramData\TEMP:2F4A0A6B [114]
AlternateDataStreams: C:\ProgramData\TEMP:349E5B74 [120]
AlternateDataStreams: C:\ProgramData\TEMP:371A321E [284]
AlternateDataStreams: C:\ProgramData\TEMP:375FC7E7 [116]
AlternateDataStreams: C:\ProgramData\TEMP:385E2CFD [105]
AlternateDataStreams: C:\ProgramData\TEMP:38A0E181 [136]
AlternateDataStreams: C:\ProgramData\TEMP:38FF076E [462]
AlternateDataStreams: C:\ProgramData\TEMP:39CB2031 [182]
AlternateDataStreams: C:\ProgramData\TEMP:39EDBD33 [143]
AlternateDataStreams: C:\ProgramData\TEMP:3A4676D7 [128]
AlternateDataStreams: C:\ProgramData\TEMP:3B454A5C [125]
AlternateDataStreams: C:\ProgramData\TEMP:3B75B877 [143]
AlternateDataStreams: C:\ProgramData\TEMP:3C0887BF [131]
AlternateDataStreams: C:\ProgramData\TEMP:3D507E52 [148]
AlternateDataStreams: C:\ProgramData\TEMP:3E8A3E87 [144]
AlternateDataStreams: C:\ProgramData\TEMP:425759C6 [238]
AlternateDataStreams: C:\ProgramData\TEMP:432EC713 [140]
AlternateDataStreams: C:\ProgramData\TEMP:437B1C75 [366]
AlternateDataStreams: C:\ProgramData\TEMP:469B47D8 [119]
AlternateDataStreams: C:\ProgramData\TEMP:4826868B [152]
AlternateDataStreams: C:\ProgramData\TEMP:490BCC52 [118]
AlternateDataStreams: C:\ProgramData\TEMP:4B6A9FDA [362]
AlternateDataStreams: C:\ProgramData\TEMP:4B8122EA [258]
AlternateDataStreams: C:\ProgramData\TEMP:4C16B46B [122]
AlternateDataStreams: C:\ProgramData\TEMP:4C4BD66D [131]
AlternateDataStreams: C:\ProgramData\TEMP:4C5C1DD3 [146]
AlternateDataStreams: C:\ProgramData\TEMP:4D28BE4D [286]
AlternateDataStreams: C:\ProgramData\TEMP:5335CE76 [118]
AlternateDataStreams: C:\ProgramData\TEMP:53BA2DF6 [143]
AlternateDataStreams: C:\ProgramData\TEMP:55422315 [118]
AlternateDataStreams: C:\ProgramData\TEMP:56C66609 [130]
AlternateDataStreams: C:\ProgramData\TEMP:56D92042 [292]
AlternateDataStreams: C:\ProgramData\TEMP:56F368C9 [122]
AlternateDataStreams: C:\ProgramData\TEMP:5B09C4D9 [129]
AlternateDataStreams: C:\ProgramData\TEMP:5ED747B8 [368]
AlternateDataStreams: C:\ProgramData\TEMP:60E0AB2A [486]
AlternateDataStreams: C:\ProgramData\TEMP:629F8518 [118]
AlternateDataStreams: C:\ProgramData\TEMP:62AC0CCE [141]
AlternateDataStreams: C:\ProgramData\TEMP:63C29481 [286]
AlternateDataStreams: C:\ProgramData\TEMP:6423D635 [132]
AlternateDataStreams: C:\ProgramData\TEMP:696F7DA7 [286]
AlternateDataStreams: C:\ProgramData\TEMP:6B7447D4 [135]
AlternateDataStreams: C:\ProgramData\TEMP:6BF0805F [107]
AlternateDataStreams: C:\ProgramData\TEMP:6DDFD746 [127]
AlternateDataStreams: C:\ProgramData\TEMP:6E11933F [141]
AlternateDataStreams: C:\ProgramData\TEMP:6E6A4F42 [352]
AlternateDataStreams: C:\ProgramData\TEMP:73461BFA [123]
AlternateDataStreams: C:\ProgramData\TEMP:73B78E79 [122]
AlternateDataStreams: C:\ProgramData\TEMP:751D6870 [234]
AlternateDataStreams: C:\ProgramData\TEMP:75E82066 [95]
AlternateDataStreams: C:\ProgramData\TEMP:76466F4C [125]
AlternateDataStreams: C:\ProgramData\TEMP:7687A3E3 [334]
AlternateDataStreams: C:\ProgramData\TEMP:7804B508 [130]
AlternateDataStreams: C:\ProgramData\TEMP:7BB584AA [133]
AlternateDataStreams: C:\ProgramData\TEMP:7D288858 [135]
AlternateDataStreams: C:\ProgramData\TEMP:7EBCAF87 [117]
AlternateDataStreams: C:\ProgramData\TEMP:7FA0D639 [338]
AlternateDataStreams: C:\ProgramData\TEMP:831C6B2D [420]
AlternateDataStreams: C:\ProgramData\TEMP:86043CD3 [131]
AlternateDataStreams: C:\ProgramData\TEMP:884C7316 [216]
AlternateDataStreams: C:\ProgramData\TEMP:8967C154 [127]
AlternateDataStreams: C:\ProgramData\TEMP:896FF808 [137]
AlternateDataStreams: C:\ProgramData\TEMP:89FC8EEB [152]
AlternateDataStreams: C:\ProgramData\TEMP:8A40FEFF [125]
AlternateDataStreams: C:\ProgramData\TEMP:8A633BE5 [212]
AlternateDataStreams: C:\ProgramData\TEMP:8B69E3C3 [124]
AlternateDataStreams: C:\ProgramData\TEMP:8BCF4DE2 [123]
AlternateDataStreams: C:\ProgramData\TEMP:8BE7A048 [118]
AlternateDataStreams: C:\ProgramData\TEMP:8C12CFCD [145]
AlternateDataStreams: C:\ProgramData\TEMP:8C6D1905 [131]
AlternateDataStreams: C:\ProgramData\TEMP:8D565A9B [150]
AlternateDataStreams: C:\ProgramData\TEMP:8DD20B4A [118]
AlternateDataStreams: C:\ProgramData\TEMP:908A1B53 [147]
AlternateDataStreams: C:\ProgramData\TEMP:91191703 [119]
AlternateDataStreams: C:\ProgramData\TEMP:971DCCE2 [116]
AlternateDataStreams: C:\ProgramData\TEMP:9758CFB3 [122]
AlternateDataStreams: C:\ProgramData\TEMP:97BDBF49 [131]
AlternateDataStreams: C:\ProgramData\TEMP:9CF728A6 [133]
AlternateDataStreams: C:\ProgramData\TEMP:9D0A16E4 [370]
AlternateDataStreams: C:\ProgramData\TEMP:9E2BD6A9 [105]
AlternateDataStreams: C:\ProgramData\TEMP:9E5EA7A3 [125]
AlternateDataStreams: C:\ProgramData\TEMP:9FCF32A8 [127]
AlternateDataStreams: C:\ProgramData\TEMP:A01F3A87 [286]
AlternateDataStreams: C:\ProgramData\TEMP:A1023D41 [137]
AlternateDataStreams: C:\ProgramData\TEMP:A10E88DE [147]
AlternateDataStreams: C:\ProgramData\TEMP:A1A86E40 [134]
AlternateDataStreams: C:\ProgramData\TEMP:A1E6FE0F [149]
AlternateDataStreams: C:\ProgramData\TEMP:A2B3764A [129]
AlternateDataStreams: C:\ProgramData\TEMP:A4241298 [226]
AlternateDataStreams: C:\ProgramData\TEMP:A69FAA24 [129]
AlternateDataStreams: C:\ProgramData\TEMP:A6D89509 [119]
AlternateDataStreams: C:\ProgramData\TEMP:A843AC18 [127]
AlternateDataStreams: C:\ProgramData\TEMP:A851461E [139]
AlternateDataStreams: C:\ProgramData\TEMP:A88BE334 [134]
AlternateDataStreams: C:\ProgramData\TEMP:A9056F42 [126]
AlternateDataStreams: C:\ProgramData\TEMP:A9204B0E [146]
AlternateDataStreams: C:\ProgramData\TEMP:A9F13D2D [119]
AlternateDataStreams: C:\ProgramData\TEMP:AA004D25 [104]
AlternateDataStreams: C:\ProgramData\TEMP:AD020DC3 [145]
AlternateDataStreams: C:\ProgramData\TEMP:B01EC114 [132]
AlternateDataStreams: C:\ProgramData\TEMP:B139DDF3 [123]
AlternateDataStreams: C:\ProgramData\TEMP:B4530133 [135]
AlternateDataStreams: C:\ProgramData\TEMP:B6E6C4EA [134]
AlternateDataStreams: C:\ProgramData\TEMP:BA24E689 [121]
AlternateDataStreams: C:\ProgramData\TEMP:BE0654D6 [137]
AlternateDataStreams: C:\ProgramData\TEMP:C43C957E [132]
AlternateDataStreams: C:\ProgramData\TEMP:C453123E [126]
AlternateDataStreams: C:\ProgramData\TEMP:C6C9D74D [127]
AlternateDataStreams: C:\ProgramData\TEMP:C82210DD [136]
AlternateDataStreams: C:\ProgramData\TEMP:C85CD339 [101]
AlternateDataStreams: C:\ProgramData\TEMP:C900B47A [122]
AlternateDataStreams: C:\ProgramData\TEMP:CAB0171A [140]
AlternateDataStreams: C:\ProgramData\TEMP:CAF8DAC8 [139]
AlternateDataStreams: C:\ProgramData\TEMP:CB959782 [382]
AlternateDataStreams: C:\ProgramData\TEMP:CBAF0C30 [133]
AlternateDataStreams: C:\ProgramData\TEMP:CE8A42A3 [136]
AlternateDataStreams: C:\ProgramData\TEMP:D0AB0B4A [127]
AlternateDataStreams: C:\ProgramData\TEMP:D1FE35E7 [131]
AlternateDataStreams: C:\ProgramData\TEMP:D254266B [143]
AlternateDataStreams: C:\ProgramData\TEMP:D354012D [123]
AlternateDataStreams: C:\ProgramData\TEMP:D3A8AA31 [134]
AlternateDataStreams: C:\ProgramData\TEMP:D6D084A5 [282]
AlternateDataStreams: C:\ProgramData\TEMP:D882BE37 [112]
AlternateDataStreams: C:\ProgramData\TEMP:D885A57E [114]
AlternateDataStreams: C:\ProgramData\TEMP:D987CB43 [147]
AlternateDataStreams: C:\ProgramData\TEMP:DA7655EA [119]
AlternateDataStreams: C:\ProgramData\TEMP:DD95E6D9 [122]
AlternateDataStreams: C:\ProgramData\TEMP:E0848D16 [140]
AlternateDataStreams: C:\ProgramData\TEMP:E153075C [145]
AlternateDataStreams: C:\ProgramData\TEMP:E1D06077 [137]
AlternateDataStreams: C:\ProgramData\TEMP:E2C8DF7A [143]
AlternateDataStreams: C:\ProgramData\TEMP:E5BA9ADD [235]
AlternateDataStreams: C:\ProgramData\TEMP:E5F8E280 [132]
AlternateDataStreams: C:\ProgramData\TEMP:E962FBDB [110]
AlternateDataStreams: C:\ProgramData\TEMP:EAEE7554 [286]
AlternateDataStreams: C:\ProgramData\TEMP:EE69D7DF [209]
AlternateDataStreams: C:\ProgramData\TEMP:EECF83D1 [119]
AlternateDataStreams: C:\ProgramData\TEMP:EFE4FB84 [298]
AlternateDataStreams: C:\ProgramData\TEMP:F1F936DF [286]
AlternateDataStreams: C:\ProgramData\TEMP:F2DC4B0B [126]
AlternateDataStreams: C:\ProgramData\TEMP:F44D3C53 [121]
AlternateDataStreams: C:\ProgramData\TEMP:F52A6209 [102]
AlternateDataStreams: C:\ProgramData\TEMP:F5E30F6A [300]
AlternateDataStreams: C:\ProgramData\TEMP:F6DA3F39 [145]
AlternateDataStreams: C:\ProgramData\TEMP:F98E6C67 [282]
AlternateDataStreams: C:\ProgramData\TEMP:FD786DCA [498]
AlternateDataStreams: C:\ProgramData\TEMP:FEE00EB9 [136]
AlternateDataStreams: C:\Users\Public\Documents\desktop.ini:gs5sys [16386]
AlternateDataStreams: C:\Users\Zrzka\Data aplikací:gs5sys [16386]
AlternateDataStreams: C:\Users\Zrzka\Local Settings:gs5sys [16386]
AlternateDataStreams: C:\Users\Zrzka\Soubory cookie:gs5sys [16386]
AlternateDataStreams: C:\Users\Zrzka\Šablony:gs5sys [15362]
AlternateDataStreams: C:\Users\Zrzka\Desktop\desktop.ini:gs5sys [3840]
AlternateDataStreams: C:\Users\Zrzka\AppData\Local:gs5sys [16386]
AlternateDataStreams: C:\Users\Zrzka\AppData\Roaming:gs5sys [16386]
AlternateDataStreams: C:\Users\Zrzka\AppData\Local\Data aplikací:gs5sys [16386]
AlternateDataStreams: C:\Users\Zrzka\AppData\Local\History:gs5sys [17410]
AlternateDataStreams: C:\Users\Zrzka\Documents\desktop.ini:gs5sys [16386]

Hosts:
EmptyTemp:
Reboot:
End
*****************

Processes closed successfully.
Restore point was successfully created.
"HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer" => key removed successfully
"HKU\S-1-5-21-2992113071-3650989354-1145625972-1002\SOFTWARE\Policies\Microsoft\Internet Explorer" => key removed successfully
HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main\\Search Page => value removed successfully
HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main\\Start Page => value removed successfully
HKU\S-1-5-21-2992113071-3650989354-1145625972-1002\Software\Microsoft\Internet Explorer\Main\\Search Page => value restored successfully
catchme => service removed successfully
MBAMSwissArmy => service removed successfully
C:\Program Files (x86)\Malwarebytes Anti-Malware => moved successfully
C:\ProgramData\Malwarebytes => moved successfully
C:\ProgramData => ":gs5sys" ADS removed successfully.
"C:\Users\All Users" => ":gs5sys" ADS not found.
C:\Users\Zrzka => ":gs5sys" ADS removed successfully.
"C:\ProgramData\Application Data" => ":gs5sys" ADS not found.
"C:\ProgramData\Data aplikací" => ":gs5sys" ADS not found.
C:\ProgramData\TEMP => ":02A78DF6" ADS removed successfully.
C:\ProgramData\TEMP => ":0410A323" ADS removed successfully.
C:\ProgramData\TEMP => ":04ADB7A6" ADS removed successfully.
C:\ProgramData\TEMP => ":07CBFAD5" ADS removed successfully.
C:\ProgramData\TEMP => ":08DB8D99" ADS removed successfully.
C:\ProgramData\TEMP => ":0AE2C68F" ADS removed successfully.
C:\ProgramData\TEMP => ":0C65EA0E" ADS removed successfully.
C:\ProgramData\TEMP => ":0E8117B1" ADS removed successfully.
C:\ProgramData\TEMP => ":10CB85CA" ADS removed successfully.
C:\ProgramData\TEMP => ":10D45FC3" ADS removed successfully.
C:\ProgramData\TEMP => ":1416AAA6" ADS removed successfully.
C:\ProgramData\TEMP => ":15381DB9" ADS removed successfully.
C:\ProgramData\TEMP => ":1585E7B2" ADS removed successfully.
C:\ProgramData\TEMP => ":16F42F1F" ADS removed successfully.
C:\ProgramData\TEMP => ":1740DC47" ADS removed successfully.
C:\ProgramData\TEMP => ":19C541B5" ADS removed successfully.
C:\ProgramData\TEMP => ":1ADC4BD5" ADS removed successfully.
C:\ProgramData\TEMP => ":1F96ED45" ADS removed successfully.
C:\ProgramData\TEMP => ":217A2A36" ADS removed successfully.
C:\ProgramData\TEMP => ":2216A431" ADS removed successfully.
C:\ProgramData\TEMP => ":236FF5C6" ADS removed successfully.
C:\ProgramData\TEMP => ":258D2F8B" ADS removed successfully.
C:\ProgramData\TEMP => ":2701CA70" ADS removed successfully.
C:\ProgramData\TEMP => ":28819F45" ADS removed successfully.
C:\ProgramData\TEMP => ":2ADF9928" ADS removed successfully.
C:\ProgramData\TEMP => ":2AE74FF9" ADS removed successfully.
C:\ProgramData\TEMP => ":2C678471" ADS removed successfully.
C:\ProgramData\TEMP => ":2C84CA43" ADS removed successfully.
C:\ProgramData\TEMP => ":2CA4B471" ADS removed successfully.
C:\ProgramData\TEMP => ":2CB9631F" ADS removed successfully.
C:\ProgramData\TEMP => ":2DB4FB78" ADS removed successfully.
C:\ProgramData\TEMP => ":2F4A0A6B" ADS removed successfully.
C:\ProgramData\TEMP => ":349E5B74" ADS removed successfully.
C:\ProgramData\TEMP => ":371A321E" ADS removed successfully.
C:\ProgramData\TEMP => ":375FC7E7" ADS removed successfully.
C:\ProgramData\TEMP => ":385E2CFD" ADS removed successfully.
C:\ProgramData\TEMP => ":38A0E181" ADS removed successfully.
C:\ProgramData\TEMP => ":38FF076E" ADS removed successfully.
C:\ProgramData\TEMP => ":39CB2031" ADS removed successfully.
C:\ProgramData\TEMP => ":39EDBD33" ADS removed successfully.
C:\ProgramData\TEMP => ":3A4676D7" ADS removed successfully.
C:\ProgramData\TEMP => ":3B454A5C" ADS removed successfully.
C:\ProgramData\TEMP => ":3B75B877" ADS removed successfully.
C:\ProgramData\TEMP => ":3C0887BF" ADS removed successfully.
C:\ProgramData\TEMP => ":3D507E52" ADS removed successfully.
C:\ProgramData\TEMP => ":3E8A3E87" ADS removed successfully.
C:\ProgramData\TEMP => ":425759C6" ADS removed successfully.
C:\ProgramData\TEMP => ":432EC713" ADS removed successfully.
C:\ProgramData\TEMP => ":437B1C75" ADS removed successfully.
C:\ProgramData\TEMP => ":469B47D8" ADS removed successfully.
C:\ProgramData\TEMP => ":4826868B" ADS removed successfully.
C:\ProgramData\TEMP => ":490BCC52" ADS removed successfully.
C:\ProgramData\TEMP => ":4B6A9FDA" ADS removed successfully.
C:\ProgramData\TEMP => ":4B8122EA" ADS removed successfully.
C:\ProgramData\TEMP => ":4C16B46B" ADS removed successfully.
C:\ProgramData\TEMP => ":4C4BD66D" ADS removed successfully.
C:\ProgramData\TEMP => ":4C5C1DD3" ADS removed successfully.
C:\ProgramData\TEMP => ":4D28BE4D" ADS removed successfully.
C:\ProgramData\TEMP => ":5335CE76" ADS removed successfully.
C:\ProgramData\TEMP => ":53BA2DF6" ADS removed successfully.
C:\ProgramData\TEMP => ":55422315" ADS removed successfully.
C:\ProgramData\TEMP => ":56C66609" ADS removed successfully.
C:\ProgramData\TEMP => ":56D92042" ADS removed successfully.
C:\ProgramData\TEMP => ":56F368C9" ADS removed successfully.
C:\ProgramData\TEMP => ":5B09C4D9" ADS removed successfully.
C:\ProgramData\TEMP => ":5ED747B8" ADS removed successfully.
C:\ProgramData\TEMP => ":60E0AB2A" ADS removed successfully.
C:\ProgramData\TEMP => ":629F8518" ADS removed successfully.
C:\ProgramData\TEMP => ":62AC0CCE" ADS removed successfully.
C:\ProgramData\TEMP => ":63C29481" ADS removed successfully.
C:\ProgramData\TEMP => ":6423D635" ADS removed successfully.
C:\ProgramData\TEMP => ":696F7DA7" ADS removed successfully.
C:\ProgramData\TEMP => ":6B7447D4" ADS removed successfully.
C:\ProgramData\TEMP => ":6BF0805F" ADS removed successfully.
C:\ProgramData\TEMP => ":6DDFD746" ADS removed successfully.
C:\ProgramData\TEMP => ":6E11933F" ADS removed successfully.
C:\ProgramData\TEMP => ":6E6A4F42" ADS removed successfully.
C:\ProgramData\TEMP => ":73461BFA" ADS removed successfully.
C:\ProgramData\TEMP => ":73B78E79" ADS removed successfully.
C:\ProgramData\TEMP => ":751D6870" ADS removed successfully.
C:\ProgramData\TEMP => ":75E82066" ADS removed successfully.
C:\ProgramData\TEMP => ":76466F4C" ADS removed successfully.
C:\ProgramData\TEMP => ":7687A3E3" ADS removed successfully.
C:\ProgramData\TEMP => ":7804B508" ADS removed successfully.
C:\ProgramData\TEMP => ":7BB584AA" ADS removed successfully.
C:\ProgramData\TEMP => ":7D288858" ADS removed successfully.
C:\ProgramData\TEMP => ":7EBCAF87" ADS removed successfully.
C:\ProgramData\TEMP => ":7FA0D639" ADS removed successfully.
C:\ProgramData\TEMP => ":831C6B2D" ADS removed successfully.
C:\ProgramData\TEMP => ":86043CD3" ADS removed successfully.
C:\ProgramData\TEMP => ":884C7316" ADS removed successfully.
C:\ProgramData\TEMP => ":8967C154" ADS removed successfully.
C:\ProgramData\TEMP => ":896FF808" ADS removed successfully.
C:\ProgramData\TEMP => ":89FC8EEB" ADS removed successfully.
C:\ProgramData\TEMP => ":8A40FEFF" ADS removed successfully.
C:\ProgramData\TEMP => ":8A633BE5" ADS removed successfully.
C:\ProgramData\TEMP => ":8B69E3C3" ADS removed successfully.
C:\ProgramData\TEMP => ":8BCF4DE2" ADS removed successfully.
C:\ProgramData\TEMP => ":8BE7A048" ADS removed successfully.
C:\ProgramData\TEMP => ":8C12CFCD" ADS removed successfully.
C:\ProgramData\TEMP => ":8C6D1905" ADS removed successfully.
C:\ProgramData\TEMP => ":8D565A9B" ADS removed successfully.
C:\ProgramData\TEMP => ":8DD20B4A" ADS removed successfully.
C:\ProgramData\TEMP => ":908A1B53" ADS removed successfully.
C:\ProgramData\TEMP => ":91191703" ADS removed successfully.
C:\ProgramData\TEMP => ":971DCCE2" ADS removed successfully.
C:\ProgramData\TEMP => ":9758CFB3" ADS removed successfully.
C:\ProgramData\TEMP => ":97BDBF49" ADS removed successfully.
C:\ProgramData\TEMP => ":9CF728A6" ADS removed successfully.
C:\ProgramData\TEMP => ":9D0A16E4" ADS removed successfully.
C:\ProgramData\TEMP => ":9E2BD6A9" ADS removed successfully.
C:\ProgramData\TEMP => ":9E5EA7A3" ADS removed successfully.
C:\ProgramData\TEMP => ":9FCF32A8" ADS removed successfully.
C:\ProgramData\TEMP => ":A01F3A87" ADS removed successfully.
C:\ProgramData\TEMP => ":A1023D41" ADS removed successfully.
C:\ProgramData\TEMP => ":A10E88DE" ADS removed successfully.
C:\ProgramData\TEMP => ":A1A86E40" ADS removed successfully.
C:\ProgramData\TEMP => ":A1E6FE0F" ADS removed successfully.
C:\ProgramData\TEMP => ":A2B3764A" ADS removed successfully.
C:\ProgramData\TEMP => ":A4241298" ADS removed successfully.
C:\ProgramData\TEMP => ":A69FAA24" ADS removed successfully.
C:\ProgramData\TEMP => ":A6D89509" ADS removed successfully.
C:\ProgramData\TEMP => ":A843AC18" ADS removed successfully.
C:\ProgramData\TEMP => ":A851461E" ADS removed successfully.
C:\ProgramData\TEMP => ":A88BE334" ADS removed successfully.
C:\ProgramData\TEMP => ":A9056F42" ADS removed successfully.
C:\ProgramData\TEMP => ":A9204B0E" ADS removed successfully.
C:\ProgramData\TEMP => ":A9F13D2D" ADS removed successfully.
C:\ProgramData\TEMP => ":AA004D25" ADS removed successfully.
C:\ProgramData\TEMP => ":AD020DC3" ADS removed successfully.
C:\ProgramData\TEMP => ":B01EC114" ADS removed successfully.
C:\ProgramData\TEMP => ":B139DDF3" ADS removed successfully.
C:\ProgramData\TEMP => ":B4530133" ADS removed successfully.
C:\ProgramData\TEMP => ":B6E6C4EA" ADS removed successfully.
C:\ProgramData\TEMP => ":BA24E689" ADS removed successfully.
C:\ProgramData\TEMP => ":BE0654D6" ADS removed successfully.
C:\ProgramData\TEMP => ":C43C957E" ADS removed successfully.
C:\ProgramData\TEMP => ":C453123E" ADS removed successfully.
C:\ProgramData\TEMP => ":C6C9D74D" ADS removed successfully.
C:\ProgramData\TEMP => ":C82210DD" ADS removed successfully.
C:\ProgramData\TEMP => ":C85CD339" ADS removed successfully.
C:\ProgramData\TEMP => ":C900B47A" ADS removed successfully.
C:\ProgramData\TEMP => ":CAB0171A" ADS removed successfully.
C:\ProgramData\TEMP => ":CAF8DAC8" ADS removed successfully.
C:\ProgramData\TEMP => ":CB959782" ADS removed successfully.
C:\ProgramData\TEMP => ":CBAF0C30" ADS removed successfully.
C:\ProgramData\TEMP => ":CE8A42A3" ADS removed successfully.
C:\ProgramData\TEMP => ":D0AB0B4A" ADS removed successfully.
C:\ProgramData\TEMP => ":D1FE35E7" ADS removed successfully.
C:\ProgramData\TEMP => ":D254266B" ADS removed successfully.
C:\ProgramData\TEMP => ":D354012D" ADS removed successfully.
C:\ProgramData\TEMP => ":D3A8AA31" ADS removed successfully.
C:\ProgramData\TEMP => ":D6D084A5" ADS removed successfully.
C:\ProgramData\TEMP => ":D882BE37" ADS removed successfully.
C:\ProgramData\TEMP => ":D885A57E" ADS removed successfully.
C:\ProgramData\TEMP => ":D987CB43" ADS removed successfully.
C:\ProgramData\TEMP => ":DA7655EA" ADS removed successfully.
C:\ProgramData\TEMP => ":DD95E6D9" ADS removed successfully.
C:\ProgramData\TEMP => ":E0848D16" ADS removed successfully.
C:\ProgramData\TEMP => ":E153075C" ADS removed successfully.
C:\ProgramData\TEMP => ":E1D06077" ADS removed successfully.
C:\ProgramData\TEMP => ":E2C8DF7A" ADS removed successfully.
C:\ProgramData\TEMP => ":E5BA9ADD" ADS removed successfully.
C:\ProgramData\TEMP => ":E5F8E280" ADS removed successfully.
C:\ProgramData\TEMP => ":E962FBDB" ADS removed successfully.
C:\ProgramData\TEMP => ":EAEE7554" ADS removed successfully.
C:\ProgramData\TEMP => ":EE69D7DF" ADS removed successfully.
C:\ProgramData\TEMP => ":EECF83D1" ADS removed successfully.
C:\ProgramData\TEMP => ":EFE4FB84" ADS removed successfully.
C:\ProgramData\TEMP => ":F1F936DF" ADS removed successfully.
C:\ProgramData\TEMP => ":F2DC4B0B" ADS removed successfully.
C:\ProgramData\TEMP => ":F44D3C53" ADS removed successfully.
C:\ProgramData\TEMP => ":F52A6209" ADS removed successfully.
C:\ProgramData\TEMP => ":F5E30F6A" ADS removed successfully.
C:\ProgramData\TEMP => ":F6DA3F39" ADS removed successfully.
C:\ProgramData\TEMP => ":F98E6C67" ADS removed successfully.
C:\ProgramData\TEMP => ":FD786DCA" ADS removed successfully.
C:\ProgramData\TEMP => ":FEE00EB9" ADS removed successfully.
C:\Users\Public\Documents\desktop.ini => ":gs5sys" ADS removed successfully.
C:\Users\Zrzka\Data aplikací => ":gs5sys" ADS removed successfully.
C:\Users\Zrzka\Local Settings => ":gs5sys" ADS removed successfully.
C:\Users\Zrzka\Soubory cookie => ":gs5sys" ADS removed successfully.
C:\Users\Zrzka\Šablony => ":gs5sys" ADS removed successfully.
C:\Users\Zrzka\Desktop\desktop.ini => ":gs5sys" ADS removed successfully.
"C:\Users\Zrzka\AppData\Local" => ":gs5sys" ADS not found.
"C:\Users\Zrzka\AppData\Roaming" => ":gs5sys" ADS not found.
"C:\Users\Zrzka\AppData\Local\Data aplikací" => ":gs5sys" ADS not found.
C:\Users\Zrzka\AppData\Local\History => ":gs5sys" ADS removed successfully.
C:\Users\Zrzka\Documents\desktop.ini => ":gs5sys" ADS removed successfully.
C:\Windows\System32\Drivers\etc\hosts => moved successfully
Hosts restored successfully.

=========== EmptyTemp: ==========

BITS transfer queue => 8388608 B
DOMStore, IE Recovery, AppCache, Feeds Cache, Thumbcache, IconCache => 40657367 B
Java, Flash, Steam htmlcache => 246935663 B
Windows/system/drivers => 0 B
Edge => 0 B
Chrome => 491513034 B
Firefox => 0 B
Opera => 0 B

Temp, IE cache, history, cookies, recent:
Default => 33125 B
Public => 0 B
ProgramData => 0 B
systemprofile => 33125 B
systemprofile32 => 50067 B
LocalService => 33125 B
NetworkService => 56501 B
oem => 393061 B
Zrzka => 821231404 B

RecycleBin => 2511250 B
EmptyTemp: => 1.5 GB temporary data Removed.

================================

The system needed a reboot.

==== End of Fixlog 12:19:50 ====

#19 Příspěvek od **Márty84** » 12 lis 2016 17:21

Vsechny tyto programy - vcetne pripadne instalace - spoustejte jako spravce (kliknete na ne pravym mysidlem a zvolte - Spustit jako spravce)

Prejmenujte ComboFix na Uninstall a spustte ho. CF by se mel odinstalovat.

vyosek píše: DelFix https://toolslib.net/downloads/finish/2/
Stahnete a spustte

Ponechte zatrzitkou pouze u volby Remove disinfection tools

Kliknete na Run

Stahnete Ccleaner http://www.filehippo.com/download_ccleaner a spustte.
Pri instalaci pozor na toolbar (ci jine doplnky), jestli vam nabidne jeho instalaci, tak zruste zatrzitko.
Po spusteni se ocitnete ve funkci Cistic. Vlevo je spousta zatrzitek. Pozor dejte hlavne na kos, pokud nechate zatrzene, vzdy ho vysype.
Dale, podle toho jak je nastaven, smaze vsechna hesla ulozena na netu!!! Takze jestli mate nastavene, at si pocitac hesla pamatuje (coz neni pro bezpecnost dobre), budete je muset pak napsat znova rucne (napr mail, facebook, ruzna fora atd.)
Kliknete na Analyzovat a az dokonci analyzu, kliknete na Spustit Cleaner.
Potom kliknete vlevo na funkci Registry
Kliknete na Hledej problemy, kdyz najde, kliknete na Opravit problemy. Nabidne Vam zalohu, tu udelejte a ulozte ji tak, at ji v pripade potreby najdete.
Funkce Nastroje umoznuje odinstalovani programu. Je dukladnejsi nez samotny windows!
(Pokud je v pc vice uzivatelskych uctu, pouzijte program i v nich)

Defragmentujte disk(y) (SSD Disky ne!)
Stahnete program Defraggler https://www.piriform.com/defraggler/download/standard
Pri instalaci opet pozor na toolbar a dalsi nesmysly.
Po nainstalovani program spustte a kliknete na Analyzovat, po analyze kliknete na Defragmentovat a programek odvede svou praci.

Pak napiste, jak to s pc vypada.

Zrzoun · #20 Příspěvek od **Zrzoun** » 14 lis 2016 21:02

přes víkend jsem udělala defrag a všechny ty napsané kroky... už jsem pomalu chtěla slavit, protože z mailu nic nechodí, resp. nevrací se mi ty stupidní nedoručitelný maily. Chtěla jsem si najít film a ejhle, google hlásil, že z mé sítě eviduje nějaký podezřelý aktivity či co a že mám zadat kód. Jsem tak paranoidní, že jsem naběhla na chrom a tam mě to v klidu nechal google vyhledat. Tak už nevím, co dělám špatně.

Informace o této stránce

Naše systémy zjistily, že vaše počítačová síť je zdrojem neobvyklého provozu. Účelem této stránky je zkontrolovat, zda požadavky odesíláte skutečně vy, a ne robot. Důvod:

Adresa IP: 178.22.116.252
Čas: 2016-11-14T19:57:50Z
Adresa URL: https://www.google.cz/search?sclient=ps ... NCSR&noj=1

#21 Příspěvek od **Márty84** » 15 lis 2016 19:33

To obcas zahlasi i mi

Obvykle je to chvilkova zalezitost a jede se dal. Nebo to hlasi porad?

Zrzoun · #22 Příspěvek od **Zrzoun** » 15 lis 2016 21:43

Ne, dneska uz to nehlásí. Nicméně ted se mi pomerne5 natvrdo zasekl pocitac. Musela jsem ho natvrdo vypnout. Explorer hlásil asi tak "miliardu" dat ve správci dat v procesech prestoze nebyl spuštěn, resp. natvrdo jsem vynutila ukončení v aplikaci. Chtela jsem to ofotit, ale neslo mi pustit vůbec nic. A komp jen hucel jak o život bez vysledne. Vubec nechapu, co se to s nim děje.

#23 Příspěvek od **Márty84** » 16 lis 2016 03:15

Explorer je systemovy soubor, ten je spusten vzdycky. Pokud to tedy nebyl iexplorer.

Stahnete crystal disk info http://www.slunecnice.cz/sw/crystaldiskinfo/
Nainstalujte (pozor na pripadne doplnky, ty odmitnete zrusenim zatrzitka) a spustte jako spravce. Za chvili se zobrazi vysledek.
Kliknete nahore na napis Úpravy a pak na napis Kopírovat. To co se zkopiruje (ulozi se to do pameti) mi sem vlozte (ctrl + V)

Zrzoun · #24 Příspěvek od **Zrzoun** » 16 lis 2016 22:18

----------------------------------------------------------------------------
CrystalDiskInfo 7.0.4 (C) 2008-2016 hiyohiyo
Crystal Dew World : http://crystalmark.info/
----------------------------------------------------------------------------

OS : Windows 7 Home Premium SP1 [6.1 Build 7601] (x64)
Date : 2016/11/16 22:16:53

-- Controller Map ----------------------------------------------------------
- ATA Channel 0 (0) [ATA]
- ATA Channel 1 (1) [ATA]
+ ATA Channel 0 (0) [ATA]
- WDC WD10EALX-009BA0 ATA Device
+ ATA Channel 1 (1) [ATA]
- HL-DT-ST DVDRAM GH22NS50 ATA Device
+ PCI Standardní dvoukanálový řadič IDE [ATA]
- ATA Channel 0 (0)
- ATA Channel 1 (1)
+ PCI Standardní dvoukanálový řadič IDE [ATA]
- ATA Channel 0 (0)
- ATA Channel 1 (1)

-- Disk List ---------------------------------------------------------------
(1) WDC WD10EALX-009BA0 : 1000.2 GB [0/0/1, pd1] - wd

----------------------------------------------------------------------------
(1) WDC WD10EALX-009BA0
----------------------------------------------------------------------------
Model : WDC WD10EALX-009BA0
Firmware : 15.01H15
Serial Number : WD-WCATR8791112
Disk Size : 1000.2 GB (8.4/137.4/1000.2/1000.2)
Buffer Size : 32767 KB
Queue Depth : 32
# of Sectors : 1953525168
Rotation Rate : Neznámy údaj
Interface : Serial ATA
Major Version : ATA8-ACS
Minor Version : ----
Transfer Mode : SATA/300 | SATA/600
Power On Hours : 14262 hod.
Power On Count : 5653 krát
Temperature : 35 C (95 F)
Health Status : Dobrý
Features : S.M.A.R.T., 48bit LBA, NCQ
APM Level : ----
AAM Level : ----
Drive Letter : C: G: H:

-- S.M.A.R.T. --------------------------------------------------------------
ID Cur Wor Thr RawValues(6) Attribute Name
01 200 200 _51 000000000000 Počet chyb čtení
03 172 170 _21 000000001106 Čas na roztočení ploten
04 _95 _95 __0 000000001627 Počet spuštění/zastavení
05 200 200 140 000000000000 Počet přemapovaných sektorů
07 200 200 __0 000000000000 Počet chybných hledání
09 _81 _81 __0 0000000037B6 Hodin v činnosti
0A 100 100 __0 000000000000 Počet opakovaných pokusů o roztočení ploten
0B 100 100 __0 000000000000 Počet pokusů o překalibrování
0C _95 _95 __0 000000001615 Počet cyklů zapnutí zařízení
C0 200 200 __0 000000000019 Počet vypnutí disku
C1 199 199 __0 00000000160D Počet cyklů načítání/vymazání
C2 112 100 __0 000000000023 Teplota
C4 200 200 __0 000000000000 Počet udalostí s číslem realokování sektorů
C5 200 200 __0 000000000000 Počet podezřelých sektorů
C6 200 200 __0 000000000000 Počet neopravitelných sektorů
C7 200 200 __0 000000000000 Počet chyb v kontrolním součtu UltraDMA
C8 200 200 __0 000000000000 Počet chyb při zápisu sektorů

-- IDENTIFY_DEVICE ---------------------------------------------------------
0 1 2 3 4 5 6 7 8 9
000: 427A 3FFF C837 0010 0000 0000 003F 0000 0000 0000
010: 2020 2020 2057 442D 5743 4154 5238 3739 3131 3132
020: 0000 FFFF 0032 3135 2E30 3148 3135 5744 4320 5744
030: 3130 4541 4C58 2D30 3039 4241 3020 2020 2020 2020
040: 2020 2020 2020 2020 2020 2020 2020 8010 0000 2F00
050: 4001 0000 0000 0007 3FFF 0010 003F FC10 00FB 0110
060: FFFF 0FFF 0000 0007 0003 0078 0078 0078 0078 0000
070: 0000 0000 0000 0000 0000 001F 170E 0004 0044 0040
080: 01FE 0000 746B 7D61 4123 7469 BC41 4123 407F 005A
090: 005A 0000 FFFE 0000 0000 0000 0000 0000 0000 0000
100: 6DB0 7470 0000 0000 0000 0000 0000 0000 5001 4EE2
110: 063F 1680 0000 0000 0000 0000 0000 0000 0000 4018
120: 4018 0000 0000 0000 0000 0000 0000 0000 0029 0000
130: 0000 0000 0000 16E2 0000 0000 0000 0000 0000 0000
140: 0000 0000 0004 0000 0000 0000 0000 0000 0000 0000
150: 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000
160: 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000
170: 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000
180: 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000
190: 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000
200: 0000 0000 0000 0000 0000 0000 3037 0000 0000 0000
210: 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000
220: 0000 0000 103E 0000 0000 0000 0000 0000 0000 0000
230: 0000 0000 0000 0000 0001 1000 0000 0000 0000 0000
240: 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000
250: 0000 0000 0000 0000 0000 79A5

-- SMART_READ_DATA ---------------------------------------------------------
+0 +1 +2 +3 +4 +5 +6 +7 +8 +9 +A +B +C +D +E +F
000: 10 00 01 2F 00 C8 C8 00 00 00 00 00 00 00 03 27
010: 00 AC AA 06 11 00 00 00 00 00 04 32 00 5F 5F 27
020: 16 00 00 00 00 00 05 33 00 C8 C8 00 00 00 00 00
030: 00 00 07 2E 00 C8 C8 00 00 00 00 00 00 00 09 32
040: 00 51 51 B6 37 00 00 00 00 00 0A 32 00 64 64 00
050: 00 00 00 00 00 00 0B 32 00 64 64 00 00 00 00 00
060: 00 00 0C 32 00 5F 5F 15 16 00 00 00 00 00 C0 32
070: 00 C8 C8 19 00 00 00 00 00 00 C1 32 00 C7 C7 0D
080: 16 00 00 00 00 00 C2 22 00 70 64 23 00 00 00 00
090: 00 00 C4 32 00 C8 C8 00 00 00 00 00 00 00 C5 32
0A0: 00 C8 C8 00 00 00 00 00 00 00 C6 30 00 C8 C8 00
0B0: 00 00 00 00 00 00 C7 32 00 C8 C8 00 00 00 00 00
0C0: 00 00 C8 08 00 C8 C8 00 00 00 00 00 00 00 00 00
0D0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
0E0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
0F0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
100: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
110: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
120: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
130: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
140: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
150: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
160: 00 00 00 00 00 00 00 00 00 00 84 00 24 45 01 7B
170: 03 00 01 00 02 CC 05 00 00 00 00 00 00 00 00 00
180: 00 00 01 04 00 00 00 00 00 00 00 00 00 00 00 00
190: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
1A0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
1B0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
1C0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
1D0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
1E0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
1F0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 06

-- SMART_READ_THRESHOLD ----------------------------------------------------
+0 +1 +2 +3 +4 +5 +6 +7 +8 +9 +A +B +C +D +E +F
000: 10 00 01 33 C8 C8 C8 C8 00 00 00 00 00 00 03 15
010: 00 00 00 00 00 00 00 00 00 00 04 00 00 00 00 00
020: 00 00 00 00 00 00 05 8C 00 00 00 00 00 00 00 00
030: 00 00 07 00 C8 C8 C8 C8 00 00 00 00 00 00 09 00
040: 00 00 00 00 00 00 00 00 00 00 0A 00 00 00 00 00
050: 00 00 00 00 00 00 0B 00 00 00 00 00 00 00 00 00
060: 00 00 0C 00 00 00 00 00 00 00 00 00 00 00 C0 00
070: 00 00 00 00 00 00 00 00 00 00 C1 00 00 00 00 00
080: 00 00 00 00 00 00 C2 00 00 00 00 00 00 00 00 00
090: 00 00 C4 00 00 00 00 00 00 00 00 00 00 00 C5 00
0A0: 00 00 00 00 00 00 00 00 00 00 C6 00 00 00 00 00
0B0: 00 00 00 00 00 00 C7 00 00 00 00 00 00 00 00 00
0C0: 00 00 C8 00 C8 C8 C8 C8 00 00 00 00 00 00 00 00
0D0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
0E0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
0F0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
100: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
110: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
120: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
130: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
140: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
150: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
160: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
170: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
180: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
190: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
1A0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
1B0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
1C0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
1D0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
1E0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
1F0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 5D

#25 Příspěvek od **Márty84** » 17 lis 2016 08:28

Toto je OK. To zamrznuti se stalo jen jednou, nebo se to opakuje?

Zrzoun · #26 Příspěvek od **Zrzoun** » 17 lis 2016 11:59

občas se mu to stane, ale většinou spíš při nějakých náročnějších hrách, což mu toleruju, je to stařeček

jen mě znervóznila v souvislosti předchozím stavem ta neovladatelnost a že se to stalo, když jel jen IE.
Jestli to dobře chápu, měl by být v pořádku, že? Co mu bylo? Potřebuju vědět, čemu se vyvarovat. To rozesílání mailů je opravdu velice nepříjemné. Dělám v bance a nemůžu si dovolit, aby z mého pc chodily kolegům spamy

#27 Příspěvek od **Márty84** » 17 lis 2016 14:35

Zrzoun píše:Jestli to dobře chápu, měl by být v pořádku, že?

Zadnou havet nevidim.

Zrzoun píše:Co mu bylo?

Podle logu nic zvlastniho

Zrzoun píše:Potřebuju vědět, čemu se vyvarovat. To rozesílání mailů je opravdu velice nepříjemné. Dělám v bance a nemůžu si dovolit, aby z mého pc chodily kolegům spamy

Tady je problem, ze to vubec nemusi mit souvislost s vasim pocitacem. Mohla jste se na mail podivat i nekde jinde? Treba u znamych, nebo proste na jinem pristroji. Mohl byt zavirovany ten jiny pocitac a tak mohlo byt prozrazeno heslo. Kazdopadne pokud jste to jeste neudelala, zmente si heslo.

Zrzoun · #28 Příspěvek od **Zrzoun** » 18 lis 2016 00:26

Márty84 píše:
Zrzoun píše:Jestli to dobře chápu, měl by být v pořádku, že?
Zadnou havet nevidim. Tak to je pro mě dobrá zpráva, aspoň vím, odkud vítr nevane.

Zrzoun píše:Co mu bylo?
Podle logu nic zvlastniho

Zrzoun píše:Potřebuju vědět, čemu se vyvarovat. To rozesílání mailů je opravdu velice nepříjemné. Dělám v bance a nemůžu si dovolit, aby z mého pc chodily kolegům spamy
Tady je problem, ze to vubec nemusi mit souvislost s vasim pocitacem. Mohla jste se na mail podivat i nekde jinde? Treba u znamych, nebo proste na jinem pristroji. Mohl byt zavirovany ten jiny pocitac a tak mohlo byt prozrazeno heslo. Kazdopadne pokud jste to jeste neudelala, zmente si heslo.

A tohle je právě to, co mě znervózňuje nejvíc. Za poslední měsíc jsem byla jen na tomhle PC a na PC v práci. A jsem si opravdu hodně jistá, že práci žádnej brouk není. Heslo jsem si samozřejmě pokaždé změnila, ale víte jak to je, milion aplikací, milion hesel, pak u toho sedím a cvakám jednu možnost za druhou, představa toho, že si co měsíc měním soukromý heslo mě dost děsí

Jedině, že by to byl mobil. To by mohlo být ono

#29 Příspěvek od **Márty84** » 18 lis 2016 10:18

Zrzoun píše:A jsem si opravdu hodně jistá, že práci žádnej brouk není.

Jiste neni nikdy nic

Zrzoun píše:Jedině, že by to byl mobil.

Samozrejme, muze to byt i mobil, nebo tablet, proste cokoliv, kde jste byla na mailu.

Zrzoun · #30 Příspěvek od **Zrzoun** » 18 lis 2016 11:31

Dobře, děkuju moc za pomoc.

Jste úplně nejlepší ITáci, se kterejma jsem měla kdy co dočinění

VIRY.CZ

Vetřelec v PC?

Re: Vetřelec v PC?

Re: Vetřelec v PC?

Re: Vetřelec v PC?

Re: Vetřelec v PC?

Re: Vetřelec v PC?

Re: Vetřelec v PC?

Re: Vetřelec v PC?

Re: Vetřelec v PC?

Re: Vetřelec v PC?

Re: Vetřelec v PC?

Re: Vetřelec v PC?

Re: Vetřelec v PC?

Re: Vetřelec v PC?

Re: Vetřelec v PC?

Re: Vetřelec v PC?