kontrola logu

[altrok]

Krasny den Vam preju


Pokud je Vas log dlouhy a nevejde se do jednoho prispevku (je delsi nez 100.000 znaku), pridejte do nazvu tematu informaci o tom, ze je log dlouhy a je rozdelen do vice casti (napr. "virus, 3 posty"). Primarne resime temata bez odpovedi, takze ve Vasem pripade to vypada, ze se Vam jiz nektery z kolegu venuje a tema snadno zapadne.


Vlozte jeste prosim obsah logu Addition.txt - https://forum.viry.cz/viewtopic.php?f=13&t=133100

[altrok]

Log se sice vesel do jednoho prispevku, ale... zalozil jste tema a do nej jste si 3x sam odpovedel. Primarne resime temata bez odpovedi, takze ve Vasem pripade to vypada, ze se Vam jiz nektery z kolegu venuje a tema snadno zapadne. Netreba zakladat nove tema - staci, kdyz vlozite obsah logu Addition.txt (vizte muj predesly prispevek).

[altrok]

Po restartu dejte vedet, jak se PC chova.

• Znovu spustte FRST.exe/FRST64.exe
• stisknete Ctrl + y (obe klavesy zaroven)
• otevre se fixlist.txt, do nejz vlozte obsah bileho pole nize
• stisknete Ctrl + s (ulozite zmeny), pote fixlist zavrete
• kliknete na tlacitko Fix
• po restartu bude vedle FRST vytvoren fixlog, jehoz obsah vlozte do pristi odpovedi

  Kód: Vybrat vše

  Start
  CreateRestorePoint:
  CloseProcesses:
  Task: {040684E2-746B-4AC4-9B31-F3FA271305A8} - System32\Tasks\{A5924B5D-8DB4-4C60-BCB5-A5EADE420759} => C:\Windows\system32\pcalua.exe -a H:\SETUP.EXE -d H:\
  Task: {30769E10-E67C-485F-A31D-721A1775331C} - System32\Tasks\{702AD2F2-E751-4E1C-845F-44FD9612CE84} => C:\Diablo II\Diablo II.exe
  Task: {6ECDFA05-FB6D-496D-B6D5-A89FFB99765A} - System32\Tasks\{66698E77-C66E-40C4-8C7C-3A397B7787CB} => C:\Windows\system32\pcalua.exe -a H:\SETUP.EXE -d H:\
  File: C:\Users\Tepan\AppData\Roaming\Microsoft\Windows\Helper.exe
  Task: {96073FA8-FFE0-4116-9778-58C141C7CFDC} - System32\Tasks\{FAD530BE-DABB-4A35-898F-C241A00668FC} => C:\Diablo II\Diablo II.exe
  File: C:\Windows\DIIUnin.exe
  Task: {BE599165-223F-4809-9E9C-A712556793CA} - System32\Tasks\{C0DF86F4-0923-4C31-B17E-898DF0E55CE3} => C:\Diablo II\Diablo II.exe
  Task: {F38ADF1F-FF55-4786-9411-B757136AA54B} - System32\Tasks\{3559EB80-0C68-40A4-98DF-A26E945BC2B7} => C:\Program Files (x86)\L.A. Noire\LANLauncher.exe [2012-11-16] (Rockstar Games)
  Task: {FC8FD362-B9DF-427B-8BD4-15C1E091F9E6} - System32\Tasks\{DF2A06B5-02CE-43BA-9124-365E2BDF7438} => C:\Program Files (x86)\L.A. Noire\LANLauncher.exe [2012-11-16] (Rockstar Games)
  Task: {FEC1C32C-9F24-4811-A16B-E02101FCB4A3} - System32\Tasks\{05B2A4A4-A4BB-4C53-96E1-786E630B5985} => C:\Diablo II\Diablo II.exe
  Shortcut: C:\Users\Tepan\Desktop\firеfох – zástuрсе.lnk -> C:\Program Files (x86)\Mozilla Firefox\firefox.exe (Mozilla Corporation) <==== Cyrillic
  Shortcut: C:\Users\Tepan\Desktop\Spoustece\DАEМОN Tооls Lite.lnk -> C:\Users\Tepan\AppData\Roaming\Browsers\exe.rehcnualtd.bat (No File) <==== Cyrillic
  Shortcut: C:\Users\Tepan\Desktop\Hry\LАNLaunсhеr – zástuрcе.lnk -> C:\Users\Tepan\AppData\Roaming\Browsers\exe.rehcnualnal.bat (No File) <==== Cyrillic
  Shortcut: C:\Users\Tepan\Desktop\Hry\МАFIА II .lnk -> C:\Users\Tepan\AppData\Roaming\Browsers\exe.rehcnual.bat (No File) <==== Cyrillic
  Shortcut: C:\Users\Tepan\Desktop\Hry\Тhe Sаboteur.lnk -> C:\Users\Tepan\AppData\Roaming\Browsers\exe.rehcnualruetobas.bat (No File) <==== Cyrillic
  Shortcut: C:\Users\Tepan\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Gооglе Сhrоmе.lnk -> C:\Users\Tepan\AppData\Local\Google\Chrome\Application\chrome.exe (Google Inc.) <==== Cyrillic
  Shortcut: C:\Users\Tepan\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Aplikace Chrome\Рřístаv (29) _ Рrimа РLАY.lnk -> C:\Users\Tepan\AppData\Local\Google\Chrome\Application\chrome.exe (Google Inc.) <==== Cyrillic
  Shortcut: C:\Users\Tepan\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Gоoglе Сhrоmе.lnk -> C:\Users\Tepan\AppData\Roaming\Browsers\exe.emorhc.bat (No File) <==== Cyrillic
  Shortcut: C:\Users\Tepan\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\firеfох – zástuрсе.lnk -> C:\Program Files (x86)\Mozilla Firefox\firefox.exe (Mozilla Corporation) <==== Cyrillic
  Shortcut: C:\Users\Tepan\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Gооglе Сhrоmе.lnk -> C:\Users\Tepan\AppData\Local\Google\Chrome\Application\chrome.exe (Google Inc.) <==== Cyrillic
  ShortcutWithArgument: C:\Users\Tepan\AppData\Local\Google\Chrome\User Data\Default\Web Applications\_crx_cjmammaianfcnbbchgeeajdcifiihglj\Přístav (29) _ Prima PLAY.lnk -> C:\Users\Tepan\AppData\Local\Google\Chrome\Application\chrome.exe (Google Inc.) -> --profile-directory=Default --app-id=cjmammaianfcnbbchgeeajdcifiihglj
  CMD: dir "C:\Users\Tepan\AppData\Roaming\Browsers"
  C:\Program Files\Plumbytes Software
  U2 pbamw_service; C:\Program Files\Plumbytes Software\Plumbytes Anti-Malware\AmwService.exe [126192 2017-07-06] (PLUMBYTES)
  2017-07-06 00:52 - 2017-07-06 05:03 - 00000000 ____D C:\Users\Tepan\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Plumbytes Anti-Malware
  2017-07-06 00:34 - 2017-07-06 00:53 - 00000000 ____D C:\Users\Tepan\AppData\Local\{12A8CCFE-3C33-4995-BAD8-074E4C5B22FD}
  2017-07-06 00:34 - 2017-07-06 00:51 - 00000000 ____D C:\Program Files\Plumbytes Software
  Folder: C:\Users\Tepan\AppData\Roaming\sacrop0irlp
  Folder: C:\Program Files\E1COARUNPT
  Folder: C:\Program Files (x86)\OneSystemCare
  Folder: C:\Windows\System32\Tasks\System
  Folder: C:\Windows\System32\Tasks\Remediation
  ContextMenuHandlers01: [XXX Groove GFS Context Menu Handler XXX] -> {6C467336-8281-4E60-8204-430CED96822D} => -> No File
  ContextMenuHandlers03: [XXX Groove GFS Context Menu Handler XXX] -> {6C467336-8281-4E60-8204-430CED96822D} => -> No File
  ContextMenuHandlers04: [XXX Groove GFS Context Menu Handler XXX] -> {6C467336-8281-4E60-8204-430CED96822D} => -> No File
  ContextMenuHandlers05: [XXX Groove GFS Context Menu Handler XXX] -> {6C467336-8281-4E60-8204-430CED96822D} => -> No File
  ContextMenuHandlers06: [XXX Groove GFS Context Menu Handler XXX] -> {6C467336-8281-4E60-8204-430CED96822D} => -> No File
  CMD: dir "C:\Windows\Inf" /AD
  CMD: dir "C:\PROGRA~1"
  CMD: dir "C:\PROGRA~2"
  CMD: dir "C:\PROGRA~3"
  CMD: dir "%localappdata%"
  CMD: dir "%appdata%"
  Hosts:
  EmptyTemp:
  End