Stránka 2 z 2

Re: Nežádoucí programy v PC

Napsal: 30 dub 2016 09:48
od Hook_1hp
Zdravím,
:arrow: Malwarebytes Anti-Rootkit BETA 1.9.3.1001
www.malwarebytes.org

Database version:
main: v2016.04.30.02
rootkit: v2016.04.17.01

Windows 7 Service Pack 1 x64 NTFS
Internet Explorer 11.0.9600.17843
Ladislav :: LADISLAV-HP [administrator]

30.4.2016 10:18:10
mbar-log-2016-04-30 (10-18-10).txt

Scan type: Quick scan
Scan options enabled: Anti-Rootkit | Drivers | MBR | Physical Sectors | Memory | Startup | Registry | File System | Heuristics/Extra | Heuristics/Shuriken
Scan options disabled:
Objects scanned: 354868
Time elapsed: 27 minute(s), 48 second(s)

Memory Processes Detected: 0
(No malicious items detected)

Memory Modules Detected: 0
(No malicious items detected)

Registry Keys Detected: 0
(No malicious items detected)

Registry Values Detected: 0
(No malicious items detected)

Registry Data Items Detected: 0
(No malicious items detected)

Folders Detected: 0
(No malicious items detected)

Files Detected: 0
(No malicious items detected)

Physical Sectors Detected: 0
(No malicious items detected)

(end)

Re: Nežádoucí programy v PC

Napsal: 01 kvě 2016 22:38
od altrok
  • Do Poznamkoveho bloku (Start -> spustit -> notepad) zkopirujte obsah bileho pole
  • ulozte na plochu jako fixlist (Typ souboru: Textovy dokument)
  • znovu spustte FRST a kliknete na Fix
  • po restartu bude na plose ulozen fixlog, jehoz obsah vlozte do pristi odpovedi

    Kód: Vybrat vše

    Start
    CreateRestorePoint:
    CloseProcesses:
    HKU\S-1-5-21-450129140-1224967779-4017086383-1000\...\MountPoints2: {dcf78152-5996-11e1-86ed-806e6f6e6963} - C:\Windows\system32\RunDLL32.EXE Shell32.DLL,ShellExec_RunDLL E:\start.exe
    Startup: C:\Users\Ladislav\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MyPC Backup.lnk [2016-04-15]
    ShortcutTarget: MyPC Backup.lnk -> C:\Program Files (x86)\OLBPre\OLBPre.exe (No File)
    SearchScopes: HKLM-x32 -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
    BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre6\bin\jp2ssv.dll => No File
    2016-04-15 14:32 - 2016-04-26 10:54 - 00000000 ____D C:\Program Files (x86)\OLBPre
    2016-04-15 14:32 - 2016-04-15 14:32 - 00001823 _____ C:\Users\Ladislav\Desktop\MyPC Backup.lnk
    File: C:\Windows\system32\Ikeext.etl
    2016-03-31 19:16 - 2016-04-27 19:58 - 00000000 ____D C:\Users\Ladislav\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Imperia Online
    2016-03-31 19:16 - 2016-03-31 19:16 - 00000000 ____D C:\Users\Ladislav\AppData\Roaming\ImperiaOnline
    2016-03-31 19:14 - 2016-03-31 19:14 - 05096956 _____ C:\Users\Ladislav\Downloads\Lego.Star.Wars.Iii.The.Clone.W.keygen.exe.zip
    Folder: C:\ProgramData\PDFC
    Task: {3DBFBAAF-815F-4C4B-83C8-167FC10EDF12} - System32\Tasks\LaunchPreSignup => C:\Program Files (x86)\OLBPre\OLBPre.exe <==== ATTENTION
    EmptyTemp:
    End