kontrola logu

[xrobat]

Dobrý den,
prosím o kontrolu logu, dochází k ukončení prohlížeče chrome při zadání "chrome://settings" + sami se mi otvírají v chromu okna "hitsnews.ru"
Díky J.Táborský

Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version: 11-01-2017
Ran by taborsky (administrator) on TABORSKY-W7 (12-01-2017 16:34:46)
Running from C:\Users\taborsky\Desktop
Loaded Profiles: taborsky (Available Profiles: kpsag & UpdatusUser & taborsky)
Platform: Windows 7 Professional Service Pack 1 (X64) Language: Čeština (Česká republika)
Internet Explorer Version 11 (Default browser: Chrome)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/33 ... scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2013\avgwdsvc.exe
() C:\Program Files (x86)\Chemstations\CHEMCAD\sysauth_service.exe
(FileOpen Systems Inc.) C:\Program Files\FileOpen\Services\FileOpenManager64.exe
(SafeNet Inc.) C:\Windows\System32\hasplms.exe
(Bdrive Inc.) C:\Program Files\MacroData Inc\NetDrive\ndsvc.exe
(SafeNet, Inc.) C:\Program Files (x86)\Common Files\SafeNet Sentinel\Sentinel Keys Server\sntlkeyssrvr.exe
(SafeNet, Inc) C:\Program Files (x86)\Common Files\SafeNet Sentinel\Sentinel Protection Server\WinNT\spnsrvnt.exe
(SafeNet, Inc.) C:\Program Files (x86)\Common Files\SafeNet Sentinel\Sentinel Security Runtime\sntlsrtsrvr.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\Version9\TeamViewer_Service.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\Version9\TeamViewer.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\Version9\tv_w32.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\Version9\tv_x64.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.32.7\GoogleCrashHandler.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.32.7\GoogleCrashHandler64.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(FileOpen Systems Inc.) C:\Program Files\FileOpen\Services\FileOpenBroker64.exe
(ICQ, LLC.) C:\Program Files (x86)\ICQ7M\ICQ.exe
(Skype Technologies S.A.) C:\Program Files (x86)\Skype\Phone\Skype.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2013\avgui.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(C. Ghisler & Co.) C:\Program Files (x86)\WinCmd601\Totalcmd.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Microsoft Corporation) C:\Windows\winsxs\amd64_microsoft-windows-i..etexplorer-optional_31bf3856ad364e35_11.2.9600.18314_none_7b179df5c2cc57fc\iexplore.exe
(forum.viry.cz) C:\Users\taborsky\Desktop\FRSTLauncher.exe

==================== Registry (Whitelisted) ====================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [RtHDVCpl] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [11776104 2011-02-11] (Realtek Semiconductor)
HKLM\...\Run: [pdfFactory Pro Dispatcher v3] => C:\Windows\system32\spool\DRIVERS\x64\3\fppdis3a.exe [754688 2009-12-15] (FinePrint Software, LLC)
HKLM\...\Run: [FileOpenBroker] => C:\Program Files\FileOpen\Services\FileOpenBroker64.exe [1566200 2015-11-09] (FileOpen Systems Inc.)
HKLM-x32\...\Run: [AVG_UI] => C:\Program Files (x86)\AVG\AVG2013\avgui.exe [4431848 2015-12-15] (AVG Technologies CZ, s.r.o.)
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [587288 2016-09-22] (Oracle Corporation)
HKU\S-1-5-21-2645362398-634994700-1304489594-1002\...\Run: [ICQ] => C:\Program Files (x86)\ICQ7M\ICQ.exe [127040 2012-12-03] (ICQ, LLC.)
HKU\S-1-5-21-2645362398-634994700-1304489594-1002\...\Run: [DAEMON Tools Lite] => C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe [3673728 2012-11-06] (DT Soft Ltd)
HKU\S-1-5-21-2645362398-634994700-1304489594-1002\...\Run: [Skype] => C:\Program Files (x86)\Skype\Phone\Skype.exe [27226072 2016-11-15] (Skype Technologies S.A.)
HKU\S-1-5-21-2645362398-634994700-1304489594-1002\...\MountPoints2: {2035acce-b5b2-11e4-812b-50e549305d87} - C:\Windows\system32\RunDLL32.EXE Shell32.DLL,ShellExec_RunDLL F:\InstallPVElite.html
HKU\S-1-5-21-2645362398-634994700-1304489594-1002\...\MountPoints2: {2970e612-b2d3-11e5-9438-50e549305d87} - F:\Lenovo_Suite.exe
HKU\S-1-5-21-2645362398-634994700-1304489594-1002\...\MountPoints2: {8e7e81ea-b2ee-11e2-9802-50e549305d87} - G:\Startme.exe
HKU\S-1-5-21-2645362398-634994700-1304489594-1002\Control Panel\Desktop\\SCRNSAVE.EXE -> C:\Windows\system32\ssText3d.scr [333824 2010-11-21] (Microsoft Corporation)
ShellIconOverlayIdentifiers: [AutoCAD Digital Signatures Icon Overlay Handler] -> {36A21736-36C2-4C11-8ACB-D4136F2B57BD} => C:\Windows\system32\AcSignIcon.dll [2009-02-09] (Autodesk, Inc.)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Adobe Gamma Loader.lnk [2012-07-24]
ShortcutTarget: Adobe Gamma Loader.lnk -> C:\Program Files (x86)\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe (Adobe Systems, Inc.)
GroupPolicy: Restriction <======= ATTENTION
GroupPolicy\User: Restriction <======= ATTENTION

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

Tcpip\Parameters: [DhcpNameServer] 192.168.4.180
Tcpip\..\Interfaces\{025972D8-045C-4547-B75E-CFA624D169E3}: [DhcpNameServer] 192.168.4.180

Internet Explorer:
==================
SearchScopes: HKU\S-1-5-21-2645362398-634994700-1304489594-1002 -> {EEE6C360-6118-11DC-9C72-001320C79847} URL = hxxp://search.sweetim.com/search.asp?src=6&q={searchTerms}&barid={D44514EA-E4AC-11E2-B199-50E549305D87}&&st=23&ptr=100
SearchScopes: HKU\S-1-5-21-2645362398-634994700-1304489594-1002 -> {FFEBBF0A-C22C-4172-89FF-45215A135AC7} URL = hxxp://go.mail.ru/distib/ep/?q={SearchTerms}&product_id=%7B158C4843-7CE9-4189-AB0A-96AEF66FAFE5%7D&gp=811041
BHO: No Name -> {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} -> No File
BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre1.8.0_111\bin\ssv.dll [2017-01-04] (Oracle Corporation)
BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre1.8.0_111\bin\jp2ssv.dll [2017-01-04] (Oracle Corporation)
BHO-x32: No Name -> {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} -> No File
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_111\bin\ssv.dll [2017-01-04] (Oracle Corporation)
BHO-x32: Ďîčńę@Mail.Ru -> {8E8F97CD-60B5-456F-A201-73065652D099} -> C:\Users\taborsky\AppData\Local\Mail.Ru\Sputnik\IESearchPlugin.dll [2017-01-12] (Mail.Ru)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_111\bin\jp2ssv.dll [2017-01-04] (Oracle Corporation)
DPF: HKLM-x32 {D27CDB6E-AE6D-11CF-96B8-444553540000} hxxp://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
Handler: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - No File
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll [2016-09-23] (Skype Technologies)

FireFox:
========
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_11_5_502_110.dll [2012-12-07] ()
FF Plugin: @java.com/DTPlugin,version=11.111.2 -> C:\Program Files\Java\jre1.8.0_111\bin\dtplugin\npDeployJava1.dll [2017-01-04] (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=11.111.2 -> C:\Program Files\Java\jre1.8.0_111\bin\plugin2\npjp2.dll [2017-01-04] (Oracle Corporation)
FF Plugin: @microsoft.com/GENUINE -> C:\Windows\system32\Wat\npWatWeb.dll [2012-06-21] (Microsoft Corporation)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files\Microsoft Silverlight\5.1.41212.0\npctrl.dll [2015-12-11] ( Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_5_502_110.dll [2012-12-07] ()
FF Plugin-x32: @java.com/DTPlugin,version=11.111.2 -> C:\Program Files (x86)\Java\jre1.8.0_111\bin\dtplugin\npDeployJava1.dll [2017-01-04] (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=11.111.2 -> C:\Program Files (x86)\Java\jre1.8.0_111\bin\plugin2\npjp2.dll [2017-01-04] (Oracle Corporation)
FF Plugin-x32: @microsoft.com/GENUINE -> C:\Windows\system32\Wat\npWatWeb.dll [2012-06-21] (Microsoft Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files (x86)\Microsoft Silverlight\5.1.41212.0\npctrl.dll [2015-12-11] ( Microsoft Corporation)
FF Plugin-x32: @nvidia.com/3DVision -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll [2013-01-18] (NVIDIA Corporation)
FF Plugin-x32: @nvidia.com/3DVisionStreaming -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll [2013-01-18] (NVIDIA Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.32.7\npGoogleUpdate3.dll [2017-01-12] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.32.7\npGoogleUpdate3.dll [2017-01-12] (Google Inc.)
FF Plugin-x32: @videolan.org/vlc,version=2.2.0 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2015-02-27] (VideoLAN)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll [2016-12-17] (Adobe Systems Inc.)
FF Plugin HKU\S-1-5-21-2645362398-634994700-1304489594-1002: @unity3d.com/UnityPlayer,version=1.0 -> C:\Users\taborsky\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll [2013-07-20] (Unity Technologies ApS)
FF Plugin ProgramFiles/Appdata: C:\Users\taborsky\AppData\Roaming\mozilla\plugins\npatgpc.dll [2015-04-13] (Cisco WebEx LLC)

Chrome:
=======
CHR HomePage: Default -> hxxp://www.idnes.cz/
CHR StartupUrls: Default -> "hxxp://www.idnes.cz/"
CHR Profile: C:\Users\taborsky\AppData\Local\Google\Chrome\User Data\Default [2017-01-12]
CHR Extension: (Prezentace Google) - C:\Users\taborsky\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2017-01-12]
CHR Extension: (Dokumenty Google) - C:\Users\taborsky\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2017-01-12]
CHR Extension: (Disk Google) - C:\Users\taborsky\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2017-01-12]
CHR Extension: (YouTube) - C:\Users\taborsky\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2017-01-12]
CHR Extension: (Java API Search) - C:\Users\taborsky\AppData\Local\Google\Chrome\User Data\Default\Extensions\dphfngjamcomlehblpblaacingmaojnm [2017-01-12]
CHR Extension: (Tabulky Google) - C:\Users\taborsky\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2017-01-12]
CHR Extension: (Dokumenty Google offline) - C:\Users\taborsky\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2017-01-12]
CHR Extension: (Cisco WebEx Extension) - C:\Users\taborsky\AppData\Local\Google\Chrome\User Data\Default\Extensions\jlhmfgmfgeifomenelglieieghnjghma [2017-01-12]
CHR Extension: (Platby Internetového obchodu Chrome) - C:\Users\taborsky\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2017-01-12]
CHR Extension: (Gmail) - C:\Users\taborsky\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2017-01-12]
CHR Extension: (Chrome Media Router) - C:\Users\taborsky\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2017-01-12]
CHR HKLM-x32\...\Chrome\Extension: [nbdbmopeebalgaeghmjoegpkngglikgn] - C:\Program Files (x86)\FreeHDSport.TV\freehdsporttv10.crx [2013-06-30]
StartMenuInternet: Google Chrome.FIRPS77TRSXZA4DHYIAU3YPSIQ - C:\Users\kpsag\AppData\Local\Google\Chrome\Application\chrome.exe

==================== Services (Whitelisted) ====================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

S2 ANSYS, Inc. License Manager; C:\Program Files\ANSYS Inc\Shared Files\Licensing\winx64\ansysli_server.exe [4856320 2014-01-07] (ANSYS, Inc.) [File not signed]
S3 AppleChargerSrv; C:\Windows\System32\AppleChargerSrv.exe [31272 2010-04-06] ()
S2 AVGIDSAgent; C:\Program Files (x86)\AVG\AVG2013\avgidsagent.exe [4948456 2015-10-05] (AVG Technologies CZ, s.r.o.)
R2 avgwd; C:\Program Files (x86)\AVG\AVG2013\avgwdsvc.exe [283136 2013-11-20] (AVG Technologies CZ, s.r.o.)
R2 CHEMCAD System Authorization; C:\Program Files (x86)\Chemstations\CHEMCAD\sysauth_service.exe [451592 2015-06-22] ()
R2 FileOpenManager; C:\Program Files\FileOpen\Services\FileOpenManager64.exe [380920 2015-11-09] (FileOpen Systems Inc.)
R2 hasplms; C:\Windows\system32\hasplms.exe [4683144 2014-07-17] (SafeNet Inc.)
R2 ndsvc; C:\Program Files\MacroData Inc\NetDrive\ndsvc.exe [2791424 2013-02-01] (Bdrive Inc.) [File not signed]
R2 SentinelKeysServer; C:\Program Files (x86)\Common Files\SafeNet Sentinel\Sentinel Keys Server\sntlkeyssrvr.exe [376832 2013-01-09] (SafeNet, Inc.) [File not signed]
R2 SentinelProtectionServer; C:\Program Files (x86)\Common Files\SafeNet Sentinel\Sentinel Protection Server\WinNT\spnsrvnt.exe [1259872 2013-01-09] (SafeNet, Inc)
R2 SentinelSecurityRuntime; C:\Program Files (x86)\Common Files\SafeNet Sentinel\Sentinel Security Runtime\sntlsrtsrvr.exe [293216 2013-01-09] (SafeNet, Inc.)
S3 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2013-05-27] (Microsoft Corporation)

===================== Drivers (Whitelisted) ======================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

S3 akshasp; C:\Windows\System32\DRIVERS\akshasp.sys [60488 2013-03-15] (SafeNet Inc.)
S3 akshhl; C:\Windows\System32\DRIVERS\akshhl.sys [63944 2013-03-15] (SafeNet Inc.)
S3 aksusb; C:\Windows\System32\DRIVERS\aksusb.sys [303624 2013-08-01] (SafeNet Inc.)
R1 AppleCharger; C:\Windows\System32\DRIVERS\AppleCharger.sys [21104 2011-01-10] ()
R1 AVGIDSDriver; C:\Windows\System32\DRIVERS\avgidsdrivera.sys [246072 2013-11-25] (AVG Technologies CZ, s.r.o.)
R0 AVGIDSHA; C:\Windows\System32\DRIVERS\avgidsha.sys [158160 2015-05-21] (AVG Technologies CZ, s.r.o.)
R1 Avgldx64; C:\Windows\System32\DRIVERS\avgldx64.sys [209720 2014-11-03] (AVG Technologies CZ, s.r.o.)
R0 Avgloga; C:\Windows\System32\DRIVERS\avgloga.sys [360400 2015-05-21] (AVG Technologies CZ, s.r.o.)
R0 Avgmfx64; C:\Windows\System32\DRIVERS\avgmfx64.sys [204192 2016-03-03] (AVG Technologies CZ, s.r.o.)
R0 Avgrkx64; C:\Windows\System32\DRIVERS\avgrkx64.sys [45880 2013-10-23] (AVG Technologies CZ, s.r.o.)
R1 Avgtdia; C:\Windows\System32\DRIVERS\avgtdia.sys [249296 2015-05-26] (AVG Technologies CZ, s.r.o.)
R1 dtsoftbus01; C:\Windows\System32\DRIVERS\dtsoftbus01.sys [283200 2015-04-24] (DT Soft Ltd)
R2 hardlock; C:\Windows\system32\drivers\hardlock.sys [331608 2014-07-17] (SafeNet Inc.)
S3 ndfs; C:\Program Files\MacroData Inc\NetDrive\ndfs.sys [63712 2013-02-01] (Bdrive Inc.)
R0 pwdrvio; C:\Windows\System32\pwdrvio.sys [19152 2013-09-30] ()
S3 pwdspio; C:\Windows\system32\pwdspio.sys [12504 2013-09-30] ()
R2 Sentinel64; C:\Windows\System32\Drivers\Sentinel64.sys [145448 2009-09-17] (SafeNet, Inc.)
S3 gdrv; \??\C:\Windows\gdrv.sys [X]

==================== NetSvcs (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)


==================== One Month Created files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2017-01-12 16:34 - 2017-01-12 16:34 - 00016631 _____ C:\Users\taborsky\Desktop\FRST.txt
2017-01-12 16:30 - 2017-01-12 16:30 - 00112640 _____ (forum.viry.cz) C:\Users\taborsky\Desktop\FRSTLauncher.exe
2017-01-12 16:28 - 2017-01-12 16:28 - 00112640 _____ (forum.viry.cz) C:\Users\taborsky\Downloads\Nepotvrzeno 72477.crdownload
2017-01-12 16:28 - 2017-01-12 16:28 - 00112640 _____ (forum.viry.cz) C:\Users\taborsky\Downloads\Nepotvrzeno 289372.crdownload
2017-01-12 16:25 - 2017-01-12 16:34 - 00000000 ____D C:\FRST
2017-01-12 16:24 - 2017-01-12 16:24 - 02419200 _____ (Farbar) C:\Users\taborsky\Desktop\FRST64.exe
2017-01-12 15:39 - 2017-01-12 15:45 - 00003384 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA
2017-01-12 15:39 - 2017-01-12 15:45 - 00003256 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore
2017-01-12 15:39 - 2017-01-12 15:39 - 00002267 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2017-01-12 15:39 - 2017-01-12 15:39 - 00002255 _____ C:\Users\Public\Desktop\Google Chrome.lnk
2017-01-12 14:00 - 2017-01-12 14:00 - 00006222 _____ C:\Users\taborsky\Documents\cc_20170112_140006.reg
2017-01-12 14:00 - 2017-01-12 14:00 - 00000396 _____ C:\Users\taborsky\Documents\cc_20170112_140021.reg
2017-01-12 12:29 - 2017-01-12 12:34 - 418352476 _____ C:\Users\taborsky\Downloads\shop_lyfter__.mp4
2017-01-12 12:26 - 2017-01-12 12:34 - 321860544 _____ C:\Users\taborsky\Downloads\shop_lyfter_.mp4
2017-01-12 12:21 - 2017-01-12 12:33 - 1624215456 _____ C:\Users\taborsky\Downloads\let_me_suck_you-5.mp4
2017-01-12 12:21 - 2017-01-12 12:25 - 709237916 _____ C:\Users\taborsky\Downloads\let_me_suck_you-4.mp4
2017-01-12 12:20 - 2017-01-12 12:24 - 268839289 _____ C:\Users\taborsky\Downloads\tushy_adria.mp4
2017-01-12 11:18 - 2017-01-12 13:54 - 00000000 ____D C:\Users\taborsky\AppData\Local\Amigo
2017-01-12 11:18 - 2017-01-12 11:18 - 00003638 _____ C:\Windows\System32\Tasks\hitsnews
2017-01-12 11:18 - 2017-01-12 11:18 - 00000000 ____D C:\Users\taborsky\AppData\Local\Mail.Ru
2017-01-12 11:18 - 2017-01-12 11:18 - 00000000 ____D C:\ProgramData\Mail.Ru
2017-01-12 10:55 - 2017-01-12 10:55 - 00000000 ____D C:\Windows\hsperfdata_taborsky
2017-01-12 10:55 - 2017-01-12 10:55 - 00000000 ____D C:\Users\taborsky\AppData\Local\eclipse
2017-01-12 10:54 - 2017-01-12 10:57 - 00000000 ____D C:\Users\taborsky\AppData\Roaming\Zona
2017-01-11 13:08 - 2017-01-11 13:29 - 1529951430 _____ C:\Users\taborsky\Downloads\HeOnHo_karol_lilien.mp4
2017-01-11 13:05 - 2017-01-11 13:31 - 1682998918 _____ C:\Users\taborsky\Downloads\HeOnHo_lady_dee.mp4
2017-01-09 10:05 - 2017-01-09 11:40 - 1688200783 _____ C:\Users\taborsky\Downloads\POVBitch_mea.melone.and.wendy.moon.mp4
2017-01-06 13:58 - 2017-01-06 13:58 - 00064259 _____ C:\Users\taborsky\Desktop\SEZNAM_2016.pdf
2017-01-04 08:58 - 2017-01-04 08:58 - 00097856 _____ (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll
2017-01-04 08:58 - 2017-01-04 08:58 - 00000000 ____D C:\Program Files (x86)\Java
2017-01-04 08:58 - 2017-01-04 08:55 - 00110144 _____ (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-64.dll
2016-12-21 17:37 - 2016-12-21 17:37 - 00435181 _____ C:\Users\taborsky\Downloads\Doklad_163924500PV.pdf
2016-12-21 17:31 - 2016-12-21 17:31 - 02455868 _____ C:\Users\taborsky\Downloads\2617010400_31-EV104.pdf
2016-12-20 16:25 - 2016-12-20 16:25 - 07204056 _____ C:\Users\taborsky\Downloads\cela_pisen-data.mp3
2016-12-15 17:45 - 2016-12-15 17:45 - 07632896 _____ C:\Users\taborsky\Downloads\ATOMEX_GROUP_PREZENTACE_201211.pps

==================== One Month Modified files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2017-01-12 16:29 - 2012-11-28 11:19 - 00000000 ____D C:\Users\taborsky\AppData\Roaming\Skype
2017-01-12 16:12 - 2009-07-14 05:45 - 00032096 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2017-01-12 16:12 - 2009-07-14 05:45 - 00032096 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2017-01-12 16:09 - 2015-03-18 15:16 - 00720302 _____ C:\Windows\system32\perfh019.dat
2017-01-12 16:09 - 2015-03-18 15:16 - 00152548 _____ C:\Windows\system32\perfc019.dat
2017-01-12 16:09 - 2011-04-12 09:34 - 00674234 _____ C:\Windows\system32\perfh005.dat
2017-01-12 16:09 - 2011-04-12 09:34 - 00143782 _____ C:\Windows\system32\perfc005.dat
2017-01-12 16:09 - 2009-07-14 06:13 - 02466190 _____ C:\Windows\system32\PerfStringBackup.INI
2017-01-12 16:09 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\inf
2017-01-12 16:08 - 2012-06-21 07:04 - 00005731 _____ C:\Windows\WINCMD.INI
2017-01-12 16:06 - 2012-06-21 08:14 - 00000962 _____ C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2645362398-634994700-1304489594-1000UA.job
2017-01-12 16:05 - 2013-07-04 14:22 - 00001218 _____ C:\Windows\Tasks\FreeHDSport TV-updater.job
2017-01-12 16:05 - 2013-07-04 14:22 - 00001212 _____ C:\Windows\Tasks\FreeHDSport TV-codedownloader.job
2017-01-12 16:05 - 2013-07-04 14:22 - 00001122 _____ C:\Windows\Tasks\FreeHDSport TV-enabler.job
2017-01-12 16:05 - 2012-11-28 10:36 - 00000000 ____D C:\Users\taborsky\AppData\Roaming\ICQ
2017-01-12 16:03 - 2012-06-21 06:34 - 00000000 ____D C:\ProgramData\NVIDIA
2017-01-12 16:03 - 2009-07-14 06:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2017-01-12 15:39 - 2012-11-27 15:31 - 00000000 ____D C:\Users\taborsky\AppData\Local\Google
2017-01-12 15:39 - 2012-11-27 15:31 - 00000000 ____D C:\Users\taborsky\AppData\Local\Deployment
2017-01-12 15:39 - 2012-11-27 15:31 - 00000000 ____D C:\Program Files (x86)\Google
2017-01-12 12:34 - 2012-06-21 06:52 - 00000000 ____D C:\ProgramData\MFAData
2017-01-12 11:18 - 2009-07-14 04:20 - 00000000 ___HD C:\Windows\system32\GroupPolicy
2017-01-12 11:18 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\SysWOW64\GroupPolicy
2017-01-12 11:06 - 2012-06-21 08:14 - 00000910 _____ C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2645362398-634994700-1304489594-1000Core.job
2017-01-12 10:55 - 2012-12-12 14:58 - 00000000 ____D C:\Users\taborsky\AppData\Roaming\Mozilla
2017-01-11 09:22 - 2014-11-07 08:22 - 00002441 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Reader XI.lnk
2017-01-10 21:14 - 2015-01-05 08:36 - 00004476 _____ C:\Windows\System32\Tasks\Adobe Acrobat Update Task
2017-01-10 08:25 - 2016-04-04 09:36 - 00000000 ____D C:\ProgramData\boost_interprocess
2017-01-06 12:59 - 2016-09-24 11:16 - 00000000 ____D C:\Users\taborsky\Downloads\00
2017-01-06 10:19 - 2016-07-25 14:14 - 00000000 ____D C:\Users\taborsky\Downloads\0
2017-01-06 08:29 - 2009-07-14 06:08 - 00032618 _____ C:\Windows\Tasks\SCHEDLGU.TXT
2017-01-05 15:07 - 2013-05-15 15:07 - 00053721 _____ C:\Windows\VVD.INI
2017-01-05 10:29 - 2013-05-15 15:07 - 00001057 _____ C:\Windows\CADCNTRL.INI
2017-01-04 08:58 - 2014-11-07 08:20 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java
2017-01-04 08:58 - 2013-12-06 08:40 - 00000000 ____D C:\ProgramData\Oracle
2017-01-04 08:57 - 2016-04-21 08:37 - 00000000 ____D C:\Program Files\Java
2017-01-04 08:55 - 2016-04-21 08:37 - 00110144 _____ (Oracle Corporation) C:\Windows\system32\WindowsAccessBridge-64.dll
2016-12-18 05:27 - 2013-06-19 12:27 - 00000000 ____D C:\Users\taborsky\AppData\Local\ElevatedDiagnostics
2016-12-15 17:41 - 2016-02-08 10:20 - 00000000 ____D C:\Program Files (x86)\VVD_16
2016-12-14 08:16 - 2016-01-04 12:09 - 00000000 ___RD C:\Program Files (x86)\Skype
2016-12-14 08:16 - 2012-11-28 11:19 - 00000000 ____D C:\ProgramData\Skype

==================== Files in the root of some directories =======

2012-12-20 08:52 - 2016-09-16 13:32 - 0000033 _____ () C:\Users\taborsky\AppData\Roaming\PV_ACAD.bin
2015-08-14 14:06 - 2015-08-14 14:09 - 0007680 _____ () C:\Users\taborsky\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
2013-02-27 12:30 - 2015-01-16 14:04 - 0007599 _____ () C:\Users\taborsky\AppData\Local\Resmon.ResmonCfg

Some files in TEMP:
====================
C:\Users\kpsag\AppData\Local\Temp\AcDeltree.exe
C:\Users\kpsag\AppData\Local\Temp\JavaIC.dll
C:\Users\kpsag\AppData\Local\Temp\jre-6u33-windows-i586-iftw.exe
C:\Users\kpsag\AppData\Local\Temp\jre-7u7-windows-i586-iftw.exe
C:\Users\kpsag\AppData\Local\Temp\jre-7u9-windows-i586-iftw.exe
C:\Users\kpsag\AppData\Local\Temp\msscct32.dll
C:\Users\kpsag\AppData\Local\Temp\_isE81.exe


==================== Bamital & volsnap ======================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\system32\winlogon.exe => File is digitally signed
C:\Windows\system32\wininit.exe => File is digitally signed
C:\Windows\SysWOW64\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\system32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\system32\services.exe => File is digitally signed
C:\Windows\system32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\system32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\system32\rpcss.dll => File is digitally signed
C:\Windows\system32\dnsapi.dll => File is digitally signed
C:\Windows\SysWOW64\dnsapi.dll => File is digitally signed
C:\Windows\system32\Drivers\volsnap.sys => File is digitally signed

LastRegBack: 2017-01-07 06:54

==================== End of FRST.txt ============================



===***===***===***=== Extract of Additional scan result of Farbar Recovery Scan Tool ===***===***===***===

==================== Drive and Memory info ===================

Drive c: () (Fixed) (Total:195.21 GB) (Free:21.16 GB) NTFS
Drive d: () (Fixed) (Total:736.2 GB) (Free:35.56 GB) NTFS
Drive f: (ctyrka-1) (Fixed) (Total:1863.14 GB) (Free:1616.96 GB) NTFS
Drive g: (terka) (Fixed) (Total:931.51 GB) (Free:3.24 GB) NTFS
Drive h: (ctyrka-2) (Fixed) (Total:1862.76 GB) (Free:1018.08 GB) NTFS
Drive n: () (Network) (Total:1861.88 GB) (Free:824.76 GB)
Drive x: () (Network) (Total:1861.88 GB) (Free:824.76 GB)
Drive y: () (Network) (Total:1861.88 GB) (Free:824.76 GB)
Drive z: () (Network) (Total:1861.88 GB) (Free:824.76 GB)

Available physical RAM: 12904.14 MB
Total physical RAM: 16367.12 MB
Percentage of memory in use: 21%

==================== MBR and Partition Table ==================

Reduce PDF Size (HKLM-x32\...\{32BD8FD9-8990-46A0-B86B-857F11014DF6}_is1) (Version: - reducepdfsize.com)
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 931.5 GB) (Disk ID: 3C90B3EA)
Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=195.2 GB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=736.2 GB) - (Type=07 NTFS)
Disk: 1 (MBR Code: Windows 7 or 8) (Size: 3726 GB) (Disk ID: 00000000)
Disk: 6 (MBR Code: Windows XP) (Size: 931.5 GB) (Disk ID: 00021631)
Partition 1: (Not Active) - (Size=931.5 GB) - (Type=07 NTFS)

==================== Scheduled Tasks (whitelisted) ==================

(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)
Task: C:\Windows\Tasks\FreeHDSport TV-codedownloader.job => C:\Program Files (x86)\FreeHDSport TV\FreeHDSport TV-codedownloader.exe
Task: C:\Windows\Tasks\FreeHDSport TV-enabler.job => C:\Program Files (x86)\FreeHDSport TV\FreeHDSport TV-enabler.exe
Task: C:\Windows\Tasks\FreeHDSport TV-updater.job => C:\Program Files (x86)\FreeHDSport TV\FreeHDSport TV-updater.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2645362398-634994700-1304489594-1000Core.job => C:\Users\kpsag\AppData\Local\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2645362398-634994700-1304489594-1000UA.job => C:\Users\kpsag\AppData\Local\Google\Update\GoogleUpdate.exe

==================== Alternate Data Streams (whitelisted) ==================


==================== Security Center ==================

AV: AVG AntiVirus Business Edition (Disabled - Up to date) {0E9420C4-06B3-7FA0-3AB1-6E49CB52ECD9}
AV: AVG update module (Disabled - Up to date) {4D41356F-32AD-7C42-C820-63775EE4F413}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: AVG update module (Disabled - Up to date) {F620D48B-1497-73CC-F290-58052563BEAE}
AS: AVG AntiVirus Business Edition (Disabled - Up to date) {B5F5C120-2089-702E-0001-553BB0D5A664}



===***===***===***=== Supplementary Scan createdy by FRSTLauncher ===***===***===***===
Posledni aktualizace FRSTLauncheru: 25_11_2013 (01)
Posledni aktualizace Modifikacniho skriptu: 30_09_2013 (01)


***** Velikost "Plochy" *****

Velikost slozky "C:\Users\taborsky\Desktop" je 64 MB.


***** Startup Programs *****


***** Firewall rules *****

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
EnableFirewall REG_DWORD 0x1
DisableNotifications REG_DWORD 0x0

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
EnableFirewall REG_DWORD 0x1
DisableNotifications REG_DWORD 0x0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\GloballyOpenPorts\List]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\GloballyOpenPorts\List]


***** System Restore *****

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SystemRestore]
"Generalize_DisableSR"=dword:00000000


==================== End Of Log ==============================

[JaRon]

ahoj,
pouzi navod kolegu http://forum.viry.cz/viewtopic.php?f=13 ... e#p1471517
oba kroky

[xrobat]

Zoek.exe v5.0.0.1 Updated 19-September-2016
Tool run by taborsky on p  13.01.2017 at 9:34:24,01.
Microsoft Windows 7 Professional 6.1.7601 Service Pack 1 x64
Running in: Normal Mode Internet Access Detected
Launched: C:\Users\taborsky\Desktop\zoek.exe [Scan all users] [Script inserted]

==== System Restore Info ======================

13.1.2017 9:35:10 Zoek.exe System Restore Point Created Successfully.

==== Reset Hosts File ======================

# Copyright (c) 1993-2006 Microsoft Corp.
#
# This is a sample HOSTS file used by Microsoft TCP/IP for Windows.
#
# This file contains the mappings of IP addresses to host names. Each
# entry should be kept on an individual line. The IP address should
# be placed in the first column followed by the corresponding host name.
# The IP address and the host name should be separated by at least one
# space.
#
# Additionally, comments (such as these) may be inserted on individual
# lines or following the machine name denoted by a '#' symbol.
#
# For example:
#
# 102.54.94.97 rhino.acme.com # source server
# 38.25.63.10 x.acme.com # x client host

# localhost name resolution is handled within DNS itself.
127.0.0.1 localhost
::1 localhost

==== Empty Folders Check ======================

C:\PROGRA~2\MSXML 4.0 deleted successfully
C:\PROGRA~3\boost_interprocess deleted successfully
C:\PROGRA~3\Navisworks 2011 deleted successfully
C:\Users\taborsky\AppData\Roaming\WinRAR deleted successfully
C:\Users\kpsag\AppData\Local\ProjectDirectory deleted successfully
C:\Users\taborsky\AppData\Local\EmieBrowserModeList deleted successfully
C:\Users\taborsky\AppData\Local\EmieSiteList deleted successfully
C:\Users\taborsky\AppData\Local\EmieUserList deleted successfully
C:\Users\taborsky\AppData\Local\ProjectDirectory deleted successfully
C:\Users\taborsky\AppData\Local\Skype deleted successfully

==== Deleting CLSID Registry Keys ======================

HKEY_USERS\S-1-5-21-2645362398-634994700-1304489594-1002\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} deleted successfully
HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{11111111-1111-1111-1111-110311531136} deleted successfully
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Extension Compatibility\{3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} deleted successfully
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Extension Compatibility\{3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} deleted successfully
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} deleted successfully
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} deleted successfully

==== Deleting CLSID Registry Values ======================

HKEY_USERS\S-1-5-21-2645362398-634994700-1304489594-1002\Software\Microsoft\Internet Explorer\Approved Extensions\{11111111-1111-1111-1111-110311531136} deleted successfully

==== Deleting Services ======================


==== FireFox Fix ======================

Deleted from C:\Users\taborsky\AppData\Roaming\Mozilla\Firefox\Profiles\extensions\prefs.js:

Added to C:\Users\taborsky\AppData\Roaming\Mozilla\Firefox\Profiles\extensions\prefs.js:
user_pref("browser.startup.homepage", "about:home");
user_pref("browser.newtab.url", "about:newtab");

Deleted from C:\Users\taborsky\AppData\Roaming\Thunderbird\Profiles\s0cshatm.default\prefs.js:

Added to C:\Users\taborsky\AppData\Roaming\Thunderbird\Profiles\s0cshatm.default\prefs.js:
user_pref("browser.startup.homepage", "about:home");
user_pref("browser.newtab.url", "about:newtab");

==== Deleting Files \ Folders ======================

C:\Users\taborsky\AppData\Roaming\Zona not found
C:\PROGRA~3\10928663190178419378 not found
C:\PROGRA~2\FreeHDSport.TV not found
C:\Users\taborsky\AppData\Roaming\Download Manager not found
C:\PROGRA~2\FreeHDSport TV deleted
C:\ObjLinkMap.xml deleted
C:\PROGRA~3\Package Cache deleted
C:\Users\taborsky\AppData\Local\Unity deleted
C:\Users\taborsky\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\LSHunter.TV deleted
C:\Users\taborsky\Downloads\HDVidCodec (1).exe deleted
C:\Users\taborsky\Downloads\HDVidCodec.exe deleted
C:\Users\taborsky\Downloads\ReimageRepair.exe deleted
C:\Users\kpsag\AppData\LocalLow\SkwConfig.bin deleted
C:\Users\taborsky\AppData\LocalLow\Unity deleted
C:\windows\SysNative\tasks\RunAsStdUser Task deleted
C:\Windows\SysNative\config\systemprofile\Searches deleted
C:\Windows\Syswow64\mjcm deleted
C:\windows\SysNative\tprb deleted
C:\windows\SysNative\GroupPolicy\Machine deleted
C:\windows\SysNative\GroupPolicy\User deleted
C:\windows\SysNative\GroupPolicy\GPT.INI deleted
C:\Windows\Syswow64\GroupPolicy\gpt.ini deleted

==== Orphaned Tasks deleted from Registry ======================

RunAsStdUser Task deleted

==== Firefox Start and Search pages ======================

ProfilePath: C:\Users\taborsky\AppData\Roaming\Mozilla\Firefox\Profiles\extensions
user_pref("browser.startup.homepage", "about:home");
user_pref("browser.newtab.url", "about:newtab");

ProfilePath: C:\Users\taborsky\AppData\Roaming\Thunderbird\Profiles\s0cshatm.default
user_pref("browser.startup.homepage", "about:home");
user_pref("browser.newtab.url", "about:newtab");

==== Firefox Extensions ======================

==== Firefox Plugins ======================


==== Chromium Look ======================


FreeHDSport TV 3 - kpsag\AppData\Local\Google\Chrome\User Data\Default\Extensions\nbdbmopeebalgaeghmjoegpkngglikgn
Java API Search - taborsky\AppData\Local\Google\Chrome\User Data\Default\Extensions\dphfngjamcomlehblpblaacingmaojnm
Chrome Media Router - taborsky\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm

==== Chromium Fix ======================

C:\Users\taborsky\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_adsid.dfiles.eu_0.localstorage deleted successfully
C:\Users\taborsky\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_adsid.dfiles.eu_0.localstorage-journal deleted successfully
C:\Users\kpsag\AppData\Local\Google\Chrome\User Data\Default\Extensions\nbdbmopeebalgaeghmjoegpkngglikgn deleted successfully

==== Set IE to Default ======================

Old Values:
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
"Start Page"="http://go.microsoft.com/fwlink/p/?LinkId=255141"

New Values:
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
"Start Page"="http://go.microsoft.com/fwlink/p/?LinkId=255141"

==== All HKLM and HKCU SearchScopes ======================

HKLM\SearchScopes "DefaultScope"="{0633EE93-D776-472f-A0FF-E1416B8B2E3A}"
HKLM\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A} - http://www.bing.com/search?q={searchTerms}&FORM=IE8SRC
HKLM\Wow6432Node\SearchScopes "DefaultScope"="{0633EE93-D776-472f-A0FF-E1416B8B2E3A}"
HKLM\Wow6432Node\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A} - http://www.bing.com/search?q={searchTerms}&FORM=IE8SRC
HKCU\SearchScopes "DefaultScope"="{0633EE93-D776-472f-A0FF-E1416B8B2E3A}"
HKCU\SearchScopes\{012E1000-F331-11DB-8314-0800200C9A66} - http://www.google.com/search?q={searchTerms}
HKCU\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A} - http://www.bing.com/search?q={searchTer ... 02&pc=UE08

==== Reset Google Chrome ======================

C:\Users\kpsag\AppData\Local\Google\Chrome\User Data\Default\Preferences was reset successfully
C:\Users\kpsag\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences was reset successfully
C:\Users\taborsky\AppData\Local\Google\Chrome\User Data\Default\Preferences was reset successfully
C:\Users\taborsky\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences was reset successfully
C:\Users\kpsag\AppData\Local\Google\Chrome\User Data\Default\Web Data was reset successfully
C:\Users\kpsag\AppData\Local\Google\Chrome\User Data\Default\Web Data-journal was reset successfully
C:\Users\taborsky\AppData\Local\Google\Chrome\User Data\Default\Web Data will be reset at reboot
C:\Users\taborsky\AppData\Local\Google\Chrome\User Data\Default\Web Data-journal will be reset at reboot

==== Deleting Registry Keys ======================

HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Uninstall\UnityWebPlayer deleted successfully

==== Empty IE Cache ======================

C:\Windows\system32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully
C:\Users\kpsag\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully
C:\Users\kpsag\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5 emptied successfully
C:\Users\kpsag\AppData\Local\Temp\Temporary Internet Files\Content.IE5 emptied successfully
C:\Users\taborsky\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully
C:\Windows\SysNative\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully
C:\Windows\sysWoW64\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully
C:\Windows\serviceprofiles\networkservice\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully
C:\Windows\serviceprofiles\Localservice\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully
C:\Windows\sysWOW64\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully

==== Empty FireFox Cache ======================

No FireFox Cache found

==== Empty Chrome Cache ======================

C:\Users\kpsag\AppData\Local\Google\Chrome\User Data\Default\Cache emptied successfully
C:\Users\taborsky\AppData\Local\Google\Chrome\User Data\Default\Cache will be emptied at reboot

==== Empty All Flash Cache ======================

Flash Cache Emptied Successfully

==== Empty All Java Cache ======================

Java Cache cleared successfully

==== C:\zoek_backup content ======================

C:\zoek_backup (files=107 folders=50 78443768 bytes)

==== Empty Temp Folders ======================

C:\Users\Default\AppData\Local\Temp emptied successfully
C:\Users\Default User\AppData\Local\Temp emptied successfully
C:\Users\kpsag\AppData\Local\Temp emptied successfully
C:\Users\taborsky\AppData\Local\Temp will be emptied at reboot
C:\Users\UpdatusUser\AppData\Local\Temp emptied successfully
C:\Windows\serviceprofiles\networkservice\AppData\Local\Temp emptied successfully
C:\Windows\serviceprofiles\Localservice\AppData\Local\Temp emptied successfully
C:\Windows\Temp will be emptied at reboot

==== After Reboot ======================

==== Empty Temp Folders ======================

C:\Windows\Temp successfully emptied
C:\Users\taborsky\AppData\Local\Temp successfully emptied

==== Empty Recycle Bin ======================

C:\$RECYCLE.BIN successfully emptied

==== Deleting Files / Folders ======================

"C:\Users\taborsky\AppData\Local\Google\Chrome\User Data\Default\Web Data" not found
"C:\Users\taborsky\AppData\Local\Google\Chrome\User Data\Default\Web Data-journal" not found
"C:\Users\taborsky\AppData\Local\Google\Chrome\User Data\Default\Cache\data_0" deleted
"C:\Users\taborsky\AppData\Local\Google\Chrome\User Data\Default\Cache\data_1" deleted
"C:\Users\taborsky\AppData\Local\Google\Chrome\User Data\Default\Cache\data_2" deleted
"C:\Users\taborsky\AppData\Local\Google\Chrome\User Data\Default\Cache\data_3" deleted
"C:\Users\taborsky\AppData\Local\Google\Chrome\User Data\Default\Cache\index" deleted

==== EOF on p  13.01.2017 at 9:52:58,58 ======================

[xrobat]

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Junkware Removal Tool (JRT) by Malwarebytes
Version: 8.1.0 (12.05.2016)
Operating System: Windows 7 Professional x64
Ran by taborsky (Administrator) on p  13.01.2017 at 9:38:57,64
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~




File System: 47

Successfully deleted: C:\ProgramData\10928663190178419378 (Folder)
Successfully deleted: C:\Users\taborsky\AppData\Local\amigo (Folder)
Successfully deleted: C:\Users\taborsky\Appdata\LocalLow\skwconfig.bin (File)
Successfully deleted: C:\Users\taborsky\AppData\Roaming\download manager (Folder)
Successfully deleted: C:\Users\taborsky\AppData\Roaming\Mozilla\Firefox\Profiles\extensions\fhdp3@freehdsp.tv.xpi (File)
Successfully deleted: C:\Users\taborsky\AppData\Roaming\Mozilla\Firefox\Profiles\extensions\user.js (File)
Successfully deleted: C:\Users\taborsky\AppData\Roaming\zona (Folder)
Successfully deleted: C:\Windows\system32\ljkb (Folder)
Successfully deleted: C:\Windows\system32\Tasks\FreeHDSport TV-codedownloader (Task)
Successfully deleted: C:\Windows\system32\Tasks\FreeHDSport TV-enabler (Task)
Successfully deleted: C:\Windows\system32\Tasks\FreeHDSport TV-updater (Task)
Successfully deleted: C:\Windows\Tasks\FreeHDSport TV-codedownloader.job (Task)
Successfully deleted: C:\Windows\Tasks\FreeHDSport TV-enabler.job (Task)
Successfully deleted: C:\Windows\Tasks\FreeHDSport TV-updater.job (Task)
Successfully deleted: C:\Program Files (x86)\freehdsport.tv (Folder)
Successfully deleted: C:\Users\taborsky\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\0PS72R2M (Temporary Internet Files Folder)
Successfully deleted: C:\Users\taborsky\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\2U0FKUEE (Temporary Internet Files Folder)
Successfully deleted: C:\Users\taborsky\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\62AXOPQ5 (Temporary Internet Files Folder)
Successfully deleted: C:\Users\taborsky\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\6EPBWESQ (Temporary Internet Files Folder)
Successfully deleted: C:\Users\taborsky\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\7ZARC9AZ (Temporary Internet Files Folder)
Successfully deleted: C:\Users\taborsky\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\82TLIZTK (Temporary Internet Files Folder)
Successfully deleted: C:\Users\taborsky\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ASI226Y0 (Temporary Internet Files Folder)
Successfully deleted: C:\Users\taborsky\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\CIG1Q1DD (Temporary Internet Files Folder)
Successfully deleted: C:\Users\taborsky\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\FZG8CKJ5 (Temporary Internet Files Folder)
Successfully deleted: C:\Users\taborsky\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\G4CZ1GOK (Temporary Internet Files Folder)
Successfully deleted: C:\Users\taborsky\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\HG49ARAP (Temporary Internet Files Folder)
Successfully deleted: C:\Users\taborsky\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\HZEOJKBC (Temporary Internet Files Folder)
Successfully deleted: C:\Users\taborsky\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\JJRS8NDK (Temporary Internet Files Folder)
Successfully deleted: C:\Users\taborsky\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\LIXMVQOA (Temporary Internet Files Folder)
Successfully deleted: C:\Users\taborsky\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\OACSDDBT (Temporary Internet Files Folder)
Successfully deleted: C:\Users\taborsky\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\UUW82BA4 (Temporary Internet Files Folder)
Successfully deleted: C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\0PS72R2M (Temporary Internet Files Folder)
Successfully deleted: C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\2U0FKUEE (Temporary Internet Files Folder)
Successfully deleted: C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\62AXOPQ5 (Temporary Internet Files Folder)
Successfully deleted: C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\6EPBWESQ (Temporary Internet Files Folder)
Successfully deleted: C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\7ZARC9AZ (Temporary Internet Files Folder)
Successfully deleted: C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\82TLIZTK (Temporary Internet Files Folder)
Successfully deleted: C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ASI226Y0 (Temporary Internet Files Folder)
Successfully deleted: C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\CIG1Q1DD (Temporary Internet Files Folder)
Successfully deleted: C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\FZG8CKJ5 (Temporary Internet Files Folder)
Successfully deleted: C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\G4CZ1GOK (Temporary Internet Files Folder)
Successfully deleted: C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\HG49ARAP (Temporary Internet Files Folder)
Successfully deleted: C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\HZEOJKBC (Temporary Internet Files Folder)
Successfully deleted: C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\JJRS8NDK (Temporary Internet Files Folder)
Successfully deleted: C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\LIXMVQOA (Temporary Internet Files Folder)
Successfully deleted: C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\OACSDDBT (Temporary Internet Files Folder)
Successfully deleted: C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\UUW82BA4 (Temporary Internet Files Folder)



Registry: 5

Successfully deleted: HKLM\Software\Google\Chrome\Extensions\nbdbmopeebalgaeghmjoegpkngglikgn (Registry Key)
Successfully deleted: HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{EEE6C360-6118-11DC-9C72-001320C79847} (Registry Key)
Successfully deleted: HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{FFEBBF0A-C22C-4172-89FF-45215A135AC7} (Registry Key)
Successfully deleted: HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{8E8F97CD-60B5-456F-A201-73065652D099} (Registry Key)
Successfully deleted: HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{8E8F97CD-60B5-456F-A201-73065652D099} (Registry Key)




~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on p  13.01.2017 at 9:41:58,46
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

[JaRon]

este docisti s ADWCleanerom a napis, ci je vsetko OK ?

[xrobat]

Bohužel pořád: Program Google Chrome přestal pracovat - Ukončit Program!
Taky je log

# AdwCleaner v6.042 - Log vytvořen 13/01/2017 v 10:29:26
# Aktualizováno dne 06/01/2017 z Malwarebytes
# Databáze : 2017-01-11.1 [Server]
# Operační systém : Windows 7 Professional Service Pack 1 (X64)
# Uživatelské jméno : taborsky - TABORSKY-W7
# Spuštěno z : C:\Users\taborsky\Desktop\adwcleaner_6.042.exe
# Mod: Čištění
# Podpora : https://www.malwarebytes.com/support



***** [ Služby ] *****



***** [ Složky ] *****

[-] Složka smazána: C:\Users\taborsky\AppData\Local\Mail.Ru
[-] Složka smazána: C:\ProgramData\Mail.Ru
[#] Složka smazána po restartu: C:\ProgramData\Application Data\Mail.Ru


***** [ Soubory ] *****



***** [ DLL ] *****



***** [ WMI ] *****



***** [ Zástupci ] *****



***** [ Naplánované úlohy ] *****



***** [ Registry ] *****

[-] Klíč smazán: HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{c11ce4d0-9c73-491d-a95c-23c0b7bbd490}
[-] Klíč smazán: HKLM\SOFTWARE\Classes\AppID\{C007DADD-132A-624C-088E-59EE6CF0711F}
[-] Klíč smazán: HKLM\SOFTWARE\Classes\CLSID\{1AA60054-57D9-4F99-9A55-D0FBFBE7ECD3}
[-] Klíč smazán: HKLM\SOFTWARE\Classes\CLSID\{3CCC052E-BDEE-408A-BEA7-90914EF2964B}
[-] Klíč smazán: HKLM\SOFTWARE\Classes\CLSID\{61F47056-E400-43D3-AF1E-AB7DFFD4C4AD}
[-] Klíč smazán: HKLM\SOFTWARE\Classes\CLSID\{E2B98EEA-EE55-4E9B-A8C1-6E5288DF785A}
[-] Klíč smazán: HKLM\SOFTWARE\Classes\CLSID\{8E8F97CD-60B5-456F-A201-73065652D099}
[-] Klíč smazán: HKLM\SOFTWARE\Classes\Interface\{237FDFDB-3722-470E-8BA8-90196DABE967}
[-] Klíč smazán: HKLM\SOFTWARE\Classes\TypeLib\{F126C9FC-9299-40F2-BD42-C59023AD1E7F}
[-] Klíč smazán: HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{8E8F97CD-60B5-456F-A201-73065652D099}
[-] Klíč smazán: HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{8E8F97CD-60B5-456F-A201-73065652D099}
[-] Klíč smazán: HKU\.DEFAULT\Software\ImInstaller
[-] Klíč smazán: HKU\.DEFAULT\Software\SweetIM
[-] Klíč smazán: HKU\.DEFAULT\Software\WNLT
[-] Klíč smazán: HKU\S-1-5-21-2645362398-634994700-1304489594-1002\Software\1ClickDownload
[-] Klíč smazán: HKU\S-1-5-21-2645362398-634994700-1304489594-1002\Software\Appscion
[-] Klíč smazán: HKU\S-1-5-21-2645362398-634994700-1304489594-1002\Software\ImInstaller
[-] Klíč smazán: HKU\S-1-5-21-2645362398-634994700-1304489594-1002\Software\InstalledBrowserExtensions
[-] Klíč smazán: HKU\S-1-5-21-2645362398-634994700-1304489594-1002\Software\PRODUCTSETUP
[-] Klíč smazán: HKU\S-1-5-21-2645362398-634994700-1304489594-1002\Software\SweetIM
[-] Klíč smazán: HKU\S-1-5-21-2645362398-634994700-1304489594-1002\Software\WEBAPP
[-] Klíč smazán: HKU\S-1-5-21-2645362398-634994700-1304489594-1002\Software\zona
[-] Klíč smazán: HKU\S-1-5-21-2645362398-634994700-1304489594-1002\Software\Mail.Ru
[-] Klíč smazán: HKU\S-1-5-21-2645362398-634994700-1304489594-1002\Software\csastats
[-] Klíč smazán: HKU\S-1-5-21-2645362398-634994700-1304489594-1002\Software\AppDataLow\Software\Crossrider
[-] Klíč smazán: HKU\S-1-5-21-2645362398-634994700-1304489594-1002\Software\AppDataLow\Software\FreeHDSport TV
[-] Klíč smazán: HKU\S-1-5-21-2645362398-634994700-1304489594-1002\Software\AppDataLow\Software\Mail.Ru
[-] Klíč smazán: HKCU\Software\Microsoft\Internet Explorer\InternetRegistry\REGISTRY\USER\S-1-5-21-2645362398-634994700-1304489594-1002\Software\SweetIM
[#] Klíč smazán po restartu: HKU\S-1-5-18\Software\ImInstaller
[#] Klíč smazán po restartu: HKU\S-1-5-18\Software\SweetIM
[#] Klíč smazán po restartu: HKU\S-1-5-18\Software\WNLT
[#] Klíč smazán po restartu: HKCU\Software\1ClickDownload
[#] Klíč smazán po restartu: HKCU\Software\Appscion
[#] Klíč smazán po restartu: HKCU\Software\ImInstaller
[#] Klíč smazán po restartu: HKCU\Software\InstalledBrowserExtensions
[#] Klíč smazán po restartu: HKCU\Software\PRODUCTSETUP
[#] Klíč smazán po restartu: HKCU\Software\SweetIM
[#] Klíč smazán po restartu: HKCU\Software\WEBAPP
[#] Klíč smazán po restartu: HKCU\Software\zona
[#] Klíč smazán po restartu: HKCU\Software\Mail.Ru
[#] Klíč smazán po restartu: HKCU\Software\csastats
[#] Klíč smazán po restartu: HKCU\Software\AppDataLow\Software\Crossrider
[#] Klíč smazán po restartu: HKCU\Software\AppDataLow\Software\FreeHDSport TV
[#] Klíč smazán po restartu: HKCU\Software\AppDataLow\Software\Mail.Ru
[-] Klíč smazán: HKLM\SOFTWARE\FreeHDSport TV
[-] Klíč smazán: HKLM\SOFTWARE\SweetIM
[#] Klíč smazán po restartu: [x64] HKCU\Software\Microsoft\Internet Explorer\InternetRegistry\REGISTRY\USER\S-1-5-21-2645362398-634994700-1304489594-1002\Software\SweetIM
[#] Klíč smazán po restartu: [x64] HKCU\Software\1ClickDownload
[#] Klíč smazán po restartu: [x64] HKCU\Software\Appscion
[#] Klíč smazán po restartu: [x64] HKCU\Software\ImInstaller
[#] Klíč smazán po restartu: [x64] HKCU\Software\InstalledBrowserExtensions
[#] Klíč smazán po restartu: [x64] HKCU\Software\PRODUCTSETUP
[#] Klíč smazán po restartu: [x64] HKCU\Software\SweetIM
[#] Klíč smazán po restartu: [x64] HKCU\Software\WEBAPP
[#] Klíč smazán po restartu: [x64] HKCU\Software\zona
[#] Klíč smazán po restartu: [x64] HKCU\Software\Mail.Ru
[#] Klíč smazán po restartu: [x64] HKCU\Software\csastats
[#] Klíč smazán po restartu: [x64] HKCU\Software\AppDataLow\Software\Crossrider
[#] Klíč smazán po restartu: [x64] HKCU\Software\AppDataLow\Software\FreeHDSport TV
[#] Klíč smazán po restartu: [x64] HKCU\Software\AppDataLow\Software\Mail.Ru
[-] Klíč smazán: [x64] HKLM\SOFTWARE\Speedchecker Limited


***** [ Prohlížeče ] *****



*************************

:: "Tracing" klíče smazány
:: Winsock nastavení vyčištěno

*************************

C:\AdwCleaner\AdwCleaner[C0].txt - [5814 Bajty] - [13/01/2017 10:29:26]
C:\AdwCleaner\AdwCleaner[S0].txt - [5715 Bajty] - [13/01/2017 10:28:10]

########## EOF - C:\AdwCleaner\AdwCleaner[C0].txt - [5960 Bajty] ##########

[JaRon]

kedze to bolo vrchovate zasvinene, doporucujem Chrome preinstalovat

[xrobat]

Než jsem psal tak jsem přeinstaloval Chrome + nyní znova, ale nepomohlo to ...
Díky za jakoukoli radu

[JaRon]

prescanuj PC s MBAM

[xrobat]

Nevím jestli skenování proběhlo se správným nastavením - realita nebyla shodná s návodem viz
http://forum.viry.cz/viewtopic.php?f=29&t=144868
Tady je log:

Malwarebytes
www.malwarebytes.com

-Podrobnosti logovacího souboru-
Datum skenování: 13.01.17
Čas skenování: 12:16
Logovací soubor: Malwarebytes.txt
Správce: Ano

-Informace o softwaru-
Verze: 3.0.5.1299
Verze komponentů: 1.0.43
Aktualizovat verzi balíku komponent: 1.0.1001
Licence: Zkušební

-Systémová informace-
OS: Windows 7 Service Pack 1
CPU: x64
Systém souborů: NTFS
Uživatel: TABORSKY-W7\taborsky

-Shrnutí skenování-
Typ skenování: Skenování hrozeb (Threat Scan)
Výsledek: Dokončeno
Skenované objekty: 436896
Uplynulý čas: 3 min, 34 sek

-Možnosti skenování-
Paměť: Povoleno
Start: Povoleno
Systém souborů: Povoleno
Archivy: Povoleno
Rootkity: Zakázáno
Heuristika: Povoleno
Potenciálně nežádoucí program: Povoleno
Potenciálně nežádoucí modifikace: Povoleno

-Podrobnosti skenování-
Proces: 1
PUP.Optional.TweakBit.Generic, C:\USERS\TABORSKY\DESKTOP\PC-REPAIR-SETUP.EXE, Žádná uživatelská akce, [2494], [349180],1.0.1001

Modul: 1
PUP.Optional.TweakBit.Generic, C:\USERS\TABORSKY\DESKTOP\PC-REPAIR-SETUP.EXE, Žádná uživatelská akce, [2494], [349180],1.0.1001

Klíč registru: 8
PUP.Optional.CrossRider, HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{55555555-5555-5555-5555-550355535536}, Žádná uživatelská akce, [306], [324197],1.0.1001
PUP.Optional.CrossRider, HKLM\SOFTWARE\CLASSES\WOW6432NODE\INTERFACE\{55555555-5555-5555-5555-550355535536}, Žádná uživatelská akce, [306], [324197],1.0.1001
PUP.Optional.CrossRider, HKLM\SOFTWARE\CLASSES\INTERFACE\{55555555-5555-5555-5555-550355535536}, Žádná uživatelská akce, [306], [324197],1.0.1001
PUP.Optional.SweetIM, HKU\S-1-5-21-2645362398-634994700-1304489594-1000\SOFTWARE\SweetIM, Žádná uživatelská akce, [1432], [243758],1.0.1001
PUP.Optional.CrossRider, HKU\S-1-5-21-2645362398-634994700-1304489594-1000\SOFTWARE\APPDATALOW\SOFTWARE\Crossrider, Žádná uživatelská akce, [306], [237370],1.0.1001
PUP.Optional.FreeHDSportTV, HKU\S-1-5-21-2645362398-634994700-1304489594-1000\SOFTWARE\APPDATALOW\SOFTWARE\FreeHDSport TV, Žádná uživatelská akce, [8489], [238513],1.0.1001
PUP.Optional.CrossRider, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{12c1f3f5-4fb2-4191-a1fd-ca464e6823c0}, Žádná uživatelská akce, [306], [237509],1.0.1001
PUP.Optional.CrossRider, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{6fa9c2c7-b82c-4944-b077-e1d8ea9e2b3d}, Žádná uživatelská akce, [306], [237508],1.0.1001

Hodnota v registru: 11
PUP.Optional.Perion, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\SHAREDACCESS\PARAMETERS\FIREWALLPOLICY\FIREWALLRULES|{8E9AD526-8EDE-49DB-B7B5-2831DD2E5FC2}, Žádná uživatelská akce, [1826], [257567],1.0.1001
PUP.Optional.Perion, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\SHAREDACCESS\PARAMETERS\FIREWALLPOLICY\FIREWALLRULES|{B758F1A0-A796-4E15-A2B8-FA18B8FF24A3}, Žádná uživatelská akce, [1826], [257567],1.0.1001
PUP.Optional.Perion, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\SHAREDACCESS\PARAMETERS\FIREWALLPOLICY\FIREWALLRULES|{78D5FD89-06F6-4648-8A0D-6817F82BEE72}, Žádná uživatelská akce, [1826], [257566],1.0.1001
PUP.Optional.Perion, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\SHAREDACCESS\PARAMETERS\FIREWALLPOLICY\FIREWALLRULES|{9ED081D1-ACE5-4627-940D-C97E634BC9BA}, Žádná uživatelská akce, [1826], [257566],1.0.1001
PUP.Optional.Perion, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\SHAREDACCESS\PARAMETERS\FIREWALLPOLICY\FIREWALLRULES|{11F5C0AA-D8DC-45F5-8058-8C93C5ED10C3}, Žádná uživatelská akce, [1826], [257567],1.0.1001
PUP.Optional.Perion, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\SHAREDACCESS\PARAMETERS\FIREWALLPOLICY\FIREWALLRULES|{926D6F0E-DB8D-4F66-AF4F-9DDC8D3EA00E}, Žádná uživatelská akce, [1826], [257567],1.0.1001
PUP.Optional.Perion, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\SHAREDACCESS\PARAMETERS\FIREWALLPOLICY\FIREWALLRULES|{2D4864FD-ED0C-44AB-A512-1E8B1E0E42D1}, Žádná uživatelská akce, [1826], [257566],1.0.1001
PUP.Optional.Perion, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\SHAREDACCESS\PARAMETERS\FIREWALLPOLICY\FIREWALLRULES|{8A80093B-4774-4CD3-827D-212064ED5D11}, Žádná uživatelská akce, [1826], [257566],1.0.1001
PUP.Optional.CrossRider.Generic, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\MAIN\FEATURECONTROL\FEATURE_BROWSER_EMULATION|FREEHDSPORT TV-BG.EXE, Žádná uživatelská akce, [1234], [260099],1.0.1001
PUP.Optional.CrossRider, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{12c1f3f5-4fb2-4191-a1fd-ca464e6823c0}|APPNAME, Žádná uživatelská akce, [306], [237509],1.0.1001
PUP.Optional.CrossRider, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{6fa9c2c7-b82c-4944-b077-e1d8ea9e2b3d}|APPNAME, Žádná uživatelská akce, [306], [237508],1.0.1001

Datové proudy: 0
(Nebyly zjištěny žádné škodlivé položky)

Adresář: 0
(Nebyly zjištěny žádné škodlivé položky)

Soubor: 4
PUP.Optional.TweakBit.Generic, C:\USERS\TABORSKY\DESKTOP\PC-REPAIR-SETUP.EXE, Žádná uživatelská akce, [2494], [349180],1.0.1001
PUP.Optional.TweakBit, C:\USERS\TABORSKY\DESKTOP\RESUME TWEAKBIT PCREPAIR INSTALLATION.LNK, Žádná uživatelská akce, [1418], [349154],1.0.1001
PUP.Optional.CoolMirage, C:\USERS\TABORSKY\DOWNLOADS\DOWNLOAD_FILE.EXE, Žádná uživatelská akce, [6325], [301022],1.0.1001
PUP.Optional.OpenCandy, C:\USERS\TABORSKY\DOWNLOADS\DTLITE4461-0327.EXE, Žádná uživatelská akce, [645], [297667],1.0.1001

Fyzický sektor: 0
(Nebyly zjištěny žádné škodlivé položky)


(end)

[JaRon]

vsetko najdene nechaj zmazat v MBAM - restart - zopakuj kontrolu MBAM

[xrobat]

MBAM projel bez závad - problém zůstává!
Log zde:

Malwarebytes
www.malwarebytes.com

-Podrobnosti logovacího souboru-
Datum skenování: 13.01.17
Čas skenování: 14:58
Logovací soubor: Malwarebytes2A.txt
Správce: Ano

-Informace o softwaru-
Verze: 3.0.5.1299
Verze komponentů: 1.0.43
Aktualizovat verzi balíku komponent: 1.0.1003
Licence: Zkušební

-Systémová informace-
OS: Windows 7 Service Pack 1
CPU: x64
Systém souborů: NTFS
Uživatel: TABORSKY-W7\taborsky

-Shrnutí skenování-
Typ skenování: Vlastní skenování
Výsledek: Dokončeno
Skenované objekty: 688042
Uplynulý čas: 2 hod, 4 min, 35 sek

-Možnosti skenování-
Paměť: Povoleno
Start: Povoleno
Systém souborů: Povoleno
Archivy: Povoleno
Rootkity: Povoleno
Heuristika: Povoleno
Potenciálně nežádoucí program: Povoleno
Potenciálně nežádoucí modifikace: Povoleno

-Podrobnosti skenování-
Proces: 0
(Nebyly zjištěny žádné škodlivé položky)

Modul: 0
(Nebyly zjištěny žádné škodlivé položky)

Klíč registru: 0
(Nebyly zjištěny žádné škodlivé položky)

Hodnota v registru: 0
(Nebyly zjištěny žádné škodlivé položky)

Datové proudy: 0
(Nebyly zjištěny žádné škodlivé položky)

Adresář: 0
(Nebyly zjištěny žádné škodlivé položky)

Soubor: 0
(Nebyly zjištěny žádné škodlivé položky)

Fyzický sektor: 0
(Nebyly zjištěny žádné škodlivé položky)


(end)

[altrok]

Hezky den,

dejte prosim nove logy z FRST (FRST.txt i Addition.txt).