Spam na webu na IPOD

Zpráva

11188 · #1 Příspěvek od **11188** » 24 úno 2013 09:56

Zdravím.neustále nemohu odstranit viz z webových stranek.Neustále jsou ve článcích odkazy ,když na ně najedu ,tak se zobrazí reklama na IPOD.

Vše jsem vyzkoušel antiviry ,ale nic nepomohlo....Na zahraničním foru se tento problém řeší zde,ale moc tomu nerozumím.
http://www.pcproblemfix.com/how-to-remo ... l-removal/

#2 Příspěvek od **vyosek** » 24 úno 2013 09:59

Zdravim a pekne dopoledne preji

Z kristalove koule se spatne vesti a navic mi zapadla do snehu, takze zatim nevim kde muze byt ten virus co pisete

Ale dosti legracek, kouknem na to

Poprosim Vas o log z RSIT dle tohoto navodu http://forum.viry.cz/viewtopic.php?f=13&t=105895

Stahnete AdwCleaner http://general-changelog-team.fr/fr/dow ... adwcleaner

Ulozte nejlepe na plochu
Ukoncete vsechny programy
Kliknete na Search
Probehne skenovani a pak se objevi log, pripadne bude ulozen na systemovem disku jako AdwCleaner[R?].txt, ten sem vlozte

11188 · #3 Příspěvek od **11188** » 17 bře 2013 09:38

Zdravím,tak je to čím dále tím horší.V každé druhé větě ve článku je modře podbarvený odkaz na iphone aj.

zasílám log:
Logfile of random's system information tool 1.09 (written by random/random)
Run by Uzivatel at 2013-03-17 09:35:57
Systém Microsoft Windows XP Professional Service Pack 3
System drive C: has 46 GB (60%) free of 76 GB
Total RAM: 1021 MB (17% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 9:36:15, on 17.3.2013
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\Program Files\AVAST Software\Avast\AvastSvc.exe
C:\WINDOWS\system32\spoolsv.exe
c:\program files\idt\intelxpv_v103\wdm\STacSV.exe
C:\Documents and Settings\All Users\Data aplikací\Premium\ContinueToSave\ContinueToSave.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\IDT\WDM\sttray.exe
C:\Program Files\AVAST Software\Avast\avastUI.exe
C:\Program Files\ScanSoft\OmniPageSE4\OpwareSE4.exe
C:\Program Files\Canon\MyPrinter\BJMyPrt.exe
C:\Program Files\pdfconverter.com\FreePDF Creator\itFPCPrnDisp.exe
C:\Program Files\ABBYY FineReader 10\Bonus.ScreenshotReader.exe
C:\Program Files\Common Files\Java\Java Update\jusched.exe
C:\Program Files\Seznam.cz\bin\postak.exe
C:\Program Files\ICQ7.7\ICQ.exe
C:\Program Files\Skype\Phone\Skype.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Nokia\Nokia PC Suite 7\PCSuite.exe
C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe
C:\Documents and Settings\Uzivatel\Data aplikací\Dropbox\bin\Dropbox.exe
C:\Program Files\OpenOffice.org 3\program\soffice.exe
C:\Program Files\OpenOffice.org 3\program\soffice.bin
C:\Program Files\SUPERAntiSpyware\SASCORE.EXE
C:\Program Files\Common Files\ABBYY\FineReader\10.00\Licensing\PE\NetworkLicenseServer.exe
C:\Program Files\Common Files\ABBYY\FineReader\9.00\Licensing\PE\NetworkLicenseServer.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\DreamCom Server\dcsrvice.exe
C:\Program Files\FireBird\bin\ibserver.exe
C:\Program Files\Java\jre7\bin\jqs.exe
C:\Documents and Settings\All Users\Data aplikací\Skype\Toolbars\Skype C2C Service\c2c_service.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\PC Connectivity Solution\ServiceLayer.exe
C:\WINDOWS\system32\wbem\wmiapsrv.exe
C:\Program Files\PC Connectivity Solution\Transports\NclUSBSrv.exe
C:\Program Files\PC Connectivity Solution\Transports\NclRSSrv.exe
C:\WINDOWS\system32\wuauclt.exe
C:\Program Files\Common Files\Java\Java Update\jucheck.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\Mozilla Firefox\plugin-container.exe
C:\Documents and Settings\Uzivatel\Dokumenty\RSIT.exe
C:\Program Files\trend micro\Uzivatel.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.seznam.cz/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Odkazy
R3 - URLSearchHook: (no name) - - (no file)
R3 - URLSearchHook: software 112 Toolbar - {bbbf1eb3-7bfb-4e87-81e7-d1b35ddde87a} - C:\Program Files\software_112\prxtbsof2.dll
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll
O2 - BHO: avast! WebRep - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll
O2 - BHO: SaveByclick - {9799D2A4-9E5D-273A-A151-307711EE5039} - C:\Documents and Settings\All Users\Data aplikací\SaveByclick\51083c38c6947.dll
O2 - BHO: SkypeIEPluginBHO - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O2 - BHO: software 112 - {bbbf1eb3-7bfb-4e87-81e7-d1b35ddde87a} - C:\Program Files\software_112\prxtbsof2.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll
O2 - BHO: Ukazatel S-Rank - {EA837F48-5AD1-443E-AE34-FFE03CBF3099} - C:\Program Files\Seznam.cz\core.3.dll (file missing)
O3 - Toolbar: avast! WebRep - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll
O3 - Toolbar: software 112 Toolbar - {bbbf1eb3-7bfb-4e87-81e7-d1b35ddde87a} - C:\Program Files\software_112\prxtbsof2.dll
O4 - HKLM\..\Run: [SysTrayApp] %ProgramFiles%\IDT\WDM\sttray.exe
O4 - HKLM\..\Run: [avast] "C:\Program Files\AVAST Software\Avast\avastUI.exe" /nogui
O4 - HKLM\..\Run: [SSBkgdUpdate] "C:\Program Files\Common Files\Scansoft Shared\SSBkgdUpdate\SSBkgdupdate.exe" -Embedding -boot
O4 - HKLM\..\Run: [OpwareSE4] "C:\Program Files\ScanSoft\OmniPageSE4\OpwareSE4.exe"
O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKLM\..\Run: [CanonMyPrinter] C:\Program Files\Canon\MyPrinter\BJMyPrt.exe /logon
O4 - HKLM\..\Run: [Free PDF Print Dispatcher] C:\Program Files\pdfconverter.com\FreePDF Creator\itFPCPrnDisp.exe
O4 - HKLM\..\Run: [Bonus.SSR.FR10] "C:\Program Files\ABBYY FineReader 10\Bonus.ScreenshotReader.exe" /autorun
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Common Files\Java\Java Update\jusched.exe"
O4 - HKCU\..\Run: [ccleaner] "C:\Programy\CCleaner\CCleaner.exe" /AUTO
O4 - HKCU\..\Run: [Seznam Postak] "C:\Program Files\Seznam.cz\bin\postak.exe" -s
O4 - HKCU\..\Run: [ICQ] "C:\Program Files\ICQ7.7\ICQ.exe" silent loginmode=4
O4 - HKCU\..\Run: [Skype] "C:\Program Files\Skype\Phone\Skype.exe" /minimized /regrun
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [Smart Driver Updater] C:\Program Files\Smart Driver Updater\SDULauncher.exe
O4 - HKCU\..\Run: [PC Suite Tray] "C:\Program Files\Nokia\Nokia PC Suite 7\PCSuite.exe" -onlytray
O4 - HKCU\..\Run: [SUPERAntiSpyware] C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe
O4 - HKCU\..\Run: [Pokki] "%USERPROFILE%\Local Settings\Application Data\Pokki\Engine\pokki.exe"
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\S-1-5-18\..\RunOnce: [_nltide_2] regsvr32 /s /n /i:U shell32 (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - HKUS\.DEFAULT\..\RunOnce: [_nltide_2] regsvr32 /s /n /i:U shell32 (User 'Default user')
O4 - Startup: Dropbox.lnk = ?
O4 - Startup: OpenOffice.org 3.2.lnk = C:\Program Files\OpenOffice.org 3\program\quickstart.exe
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000
O8 - Extra context menu item: Send To &Bluetooth - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie_ctx.htm
O9 - Extra button: ICQ7.7 - {77F665FD-3F60-4B0A-AE14-EC124B7A7FCE} - C:\Program Files\ICQ7.7\ICQ.exe
O9 - Extra 'Tools' menuitem: ICQ7.7 - {77F665FD-3F60-4B0A-AE14-EC124B7A7FCE} - C:\Program Files\ICQ7.7\ICQ.exe
O9 - Extra button: Skype Click to Call - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O18 - Protocol: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O22 - SharedTaskScheduler: Browseui preloader - {438755C2-A8BA-11D1-B96B-00A0C90312E1} - C:\WINDOWS\system32\browseui.dll
O22 - SharedTaskScheduler: Proces mezipaměti kategorií součástí - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\WINDOWS\system32\browseui.dll
O23 - Service: SAS Core Service (!SASCORE) - SUPERAntiSpyware.com - C:\Program Files\SUPERAntiSpyware\SASCORE.EXE
O23 - Service: ABBYY FineReader 10 PE Licensing Service (ABBYY.Licensing.FineReader.Professional.10.0) - ABBYY - C:\Program Files\Common Files\ABBYY\FineReader\10.00\Licensing\PE\NetworkLicenseServer.exe
O23 - Service: ABBYY FineReader 9.0 PE Licensing Service (ABBYY.Licensing.FineReader.Professional.9.0) - ABBYY (BIT Software) - C:\Program Files\Common Files\ABBYY\FineReader\9.00\Licensing\PE\NetworkLicenseServer.exe
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\WINDOWS\system32\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: avast! Antivirus - AVAST Software - C:\Program Files\AVAST Software\Avast\AvastSvc.exe
O23 - Service: DreamCom Server (DreamService) - Unknown owner - C:\Program Files\DreamCom Server\dcsrvice.exe
O23 - Service: Služba Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: Služba Google Update (gupdatem) (gupdatem) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: Firebird Server (InterBaseServer) - Unknown owner - C:\Program.exe (file missing)
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Oracle Corporation - C:\Program Files\Java\jre7\bin\jqs.exe
O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Mozilla Foundation - C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe
O23 - Service: ServiceLayer - Nokia - C:\Program Files\PC Connectivity Solution\ServiceLayer.exe
O23 - Service: Skype C2C Service - Skype Technologies S.A. - C:\Documents and Settings\All Users\Data aplikací\Skype\Toolbars\Skype C2C Service\c2c_service.exe
O23 - Service: Skype Updater (SkypeUpdate) - Skype Technologies - C:\Program Files\Skype\Updater\Updater.exe
O23 - Service: Audio Service (STacSV) - IDT, Inc. - c:\program files\idt\intelxpv_v103\wdm\STacSV.exe

--
End of file - 10460 bytes

======Scheduled tasks folder======

C:\WINDOWS\tasks\Adobe Flash Player Updater.job
C:\WINDOWS\tasks\avast! Emergency Update.job
C:\WINDOWS\tasks\ContinueToSaveUpdaterTask{36AE6EA7-AFFE-4AB6-AFC6-E9E5A5666A09}.job
C:\WINDOWS\tasks\GoogleUpdateTaskMachineCore.job
C:\WINDOWS\tasks\GoogleUpdateTaskMachineUA.job

=========Mozilla firefox=========

ProfilePath - C:\Documents and Settings\Uzivatel\Data aplikací\Mozilla\Firefox\Profiles\io68j5st.default-1357168552828

prefs.js - "browser.startup.homepage" - "http://www.seznam.cz/"
prefs.js - "keyword.URL" - "http://search.conduit.com/ResultsExt.as ... M=UM_ID&q="

"wrc@avast.com"=C:\Program Files\AVAST Software\Avast\WebRep\FF

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 11.6.602.180 Plugin
"Path"=C:\WINDOWS\system32\Macromed\Flash\NPSWF32_11_6_602_180.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@canon.com/EPPEX]
"Description"=Canon Easy-PhotoPrint EX
"Path"=C:\Program Files\Canon\Easy-PhotoPrint EX\NPEZFFPI.DLL

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@Google.com/GoogleEarthPlugin]
"Description"=Google Earth in your browser
"Path"=C:\Program Files\Google\Google Earth\plugin\npgeplugin.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@java.com/DTPlugin,version=10.15.2]
"Description"=Java™ Deployment Toolkit
"Path"=C:\WINDOWS\system32\npDeployJava1.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@java.com/JavaPlugin,version=10.15.2]
"Description"=Oracle® Next Generation Java™ Plug-In
"Path"=C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0]
"Description"=Ag Player Plugin
"Path"=c:\Program Files\Microsoft Silverlight\5.1.20125.0\npctrl.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@tools.google.com/Google Update;version=3]
"Description"=Google Update
"Path"=C:\Program Files\Google\Update\1.3.21.135\npGoogleUpdate3.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@tools.google.com/Google Update;version=9]
"Description"=Google Update
"Path"=C:\Program Files\Google\Update\1.3.21.135\npGoogleUpdate3.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\Adobe Reader]
"Description"=Handles PDFs in-place in Firefox
"Path"=C:\Program Files\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll

C:\Program Files\Mozilla Firefox\extensions\
{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A}
{972ce4c6-7e08-4474-a285-3208198ce6fd}

C:\Program Files\Mozilla Firefox\components\
binary.manifest
browsercomps.dll

C:\Program Files\Mozilla Firefox\searchplugins\
google.xml
heureka-cz.xml
jyxo-cz.xml
seznam-cz.xml
slunecnice-cz.xml
wikipedia-cz.xml

C:\Documents and Settings\Uzivatel\Data aplikací\Mozilla\Firefox\Profiles\io68j5st.default-1357168552828\extensions\
51083c38c67da@51083c38c6811.com
{bbbf1eb3-7bfb-4e87-81e7-d1b35ddde87a}
{ea614400-e918-4741-9a97-7a972ff7c30b}

C:\Documents and Settings\Uzivatel\Data aplikací\Mozilla\Firefox\Profiles\io68j5st.default-1357168552828\searchplugins\
software-112-customized-web-search.xml

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
Adobe PDF Link Helper - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2012-12-18 66280]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
Java(tm) Plug-In SSV Helper - C:\Program Files\Java\jre7\bin\ssv.dll [2013-03-01 461216]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{8E5E2654-AD2D-48bf-AC2D-D17F00898D06}]
avast! WebRep - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2012-07-03 1160792]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9799D2A4-9E5D-273A-A151-307711EE5039}]
SaveByclick - C:\Documents and Settings\All Users\Data aplikací\SaveByclick\51083c38c6947.dll [2013-01-29 120832]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}]
Skype Browser Helper - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll [2013-01-31 4528760]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{bbbf1eb3-7bfb-4e87-81e7-d1b35ddde87a}]
software 112 Toolbar - C:\Program Files\software_112\prxtbsof2.dll [2013-03-05 231168]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre7\bin\jp2ssv.dll [2013-03-01 170912]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{EA837F48-5AD1-443E-AE34-FFE03CBF3099}]
Ukazatel S-Rank - C:\Program Files\Seznam.cz\core.3.dll []

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - avast! WebRep - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2012-07-03 1160792]
{bbbf1eb3-7bfb-4e87-81e7-d1b35ddde87a} - software 112 Toolbar - C:\Program Files\software_112\prxtbsof2.dll [2013-03-05 231168]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"SysTrayApp"=C:\Program Files\IDT\WDM\sttray.exe [2009-03-12 483422]
"avast"=C:\Program Files\AVAST Software\Avast\avastUI.exe [2012-07-03 4273976]
"SSBkgdUpdate"=C:\Program Files\Common Files\Scansoft Shared\SSBkgdUpdate\SSBkgdupdate.exe [2006-10-25 210472]
"OpwareSE4"=C:\Program Files\ScanSoft\OmniPageSE4\OpwareSE4.exe [2007-02-04 79400]
"Adobe ARM"=C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2012-12-03 946352]
"CanonMyPrinter"=C:\Program Files\Canon\MyPrinter\BJMyPrt.exe [2010-07-25 2569616]
"Free PDF Print Dispatcher"=C:\Program Files\pdfconverter.com\FreePDF Creator\itFPCPrnDisp.exe [2010-01-15 25600]
"Bonus.SSR.FR10"=C:\Program Files\ABBYY FineReader 10\Bonus.ScreenshotReader.exe [2011-04-13 941320]
"SunJavaUpdateSched"=C:\Program Files\Common Files\Java\Java Update\jusched.exe [2012-07-03 252848]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"ccleaner"=C:\Programy\CCleaner\CCleaner.exe [2011-06-24 2423608]
"Seznam Postak"=C:\Program Files\Seznam.cz\bin\postak.exe [2012-01-10 491040]
"ICQ"=C:\Program Files\ICQ7.7\ICQ.exe [2012-01-23 127040]
"Skype"=C:\Program Files\Skype\Phone\Skype.exe [2012-07-13 17418928]
"ctfmon.exe"=C:\WINDOWS\system32\ctfmon.exe [2008-04-14 15360]
"Smart Driver Updater"=C:\Program Files\Smart Driver Updater\SDULauncher.exe []
"PC Suite Tray"=C:\Program Files\Nokia\Nokia PC Suite 7\PCSuite.exe [2012-06-26 1516632]
"SUPERAntiSpyware"=C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe [2012-11-01 4763008]
"Pokki"=C:\Documents and Settings\Uzivatel\Local Settings\Application Data\Pokki\Engine\pokki.exe []

C:\Documents and Settings\Uzivatel\Nabídka Start\Programy\Po spuštění
Dropbox.lnk - C:\Documents and Settings\Uzivatel\Data aplikací\Dropbox\bin\Dropbox.exe
OpenOffice.org 3.2.lnk - C:\Program Files\OpenOffice.org 3\program\quickstart.exe

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\AtiExtEvent]
C:\WINDOWS\system32\Ati2evxx.dll [2010-02-11 155648]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\WgaLogon]
C:\WINDOWS\system32\WgaLogon.dll [2009-03-10 265096]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{5AE067D3-9AFB-48E0-853A-EBB7F4A000DA}"=C:\Program Files\SUPERAntiSpyware\SASSEH.DLL [2011-07-19 113024]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\!SASCORE]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Wdf01000.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\!SASCORE]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Wdf01000.sys]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=323
"NoDriveAutoRun"=67108863

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveAutoRun"=67108863
"NoDriveTypeAutoRun"=323

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"C:\Program Files\Microsoft Office\Office12\OUTLOOK.EXE"="C:\Program Files\Microsoft Office\Office12\OUTLOOK.EXE:*:Enabled:Microsoft Office Outlook"
"C:\Program Files\ICQ7.7\ICQ.exe"="C:\Program Files\ICQ7.7\ICQ.exe:*:Enabled:ICQ7.7"
"C:\Program Files\TeamViewer\Version7\TeamViewer.exe"="C:\Program Files\TeamViewer\Version7\TeamViewer.exe:*:Enabled:Teamviewer Remote Control Application"
"C:\Program Files\TeamViewer\Version7\TeamViewer_Service.exe"="C:\Program Files\TeamViewer\Version7\TeamViewer_Service.exe:*:Enabled:Teamviewer Remote Control Service"
"C:\Documents and Settings\Uzivatel\Plocha\Odorik.exe"="C:\Documents and Settings\Uzivatel\Plocha\Odorik.exe:*:Enabled:Odorik.exe"
"C:\Documents and Settings\Uzivatel\Data aplikací\Dropbox\bin\Dropbox.exe"="C:\Documents and Settings\Uzivatel\Data aplikací\Dropbox\bin\Dropbox.exe:*:Enabled:Dropbox"
"C:\Program Files\Skype\Phone\Skype.exe"="C:\Program Files\Skype\Phone\Skype.exe:*:Enabled:Skype"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"C:\Program Files\ICQ7.7\ICQ.exe"="C:\Program Files\ICQ7.7\ICQ.exe:*:Enabled:ICQ7.7"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"midimapper"=midimap.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msadpcm"=msadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.trspch"=tssoft32.acm
"vidc.cvid"=iccvid.dll
"vidc.I420"=msh263.drv
"vidc.iv31"=ir32_32.dll
"vidc.iv32"=ir32_32.dll
"vidc.iv41"=ir41_32.ax
"vidc.iyuv"=iyuv_32.dll
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"vidc.uyvy"=msyuv.dll
"vidc.yuy2"=msyuv.dll
"vidc.yvu9"=tsbyuv.dll
"vidc.yvyu"=msyuv.dll
"wavemapper"=msacm32.drv
"msacm.msg723"=msg723.acm
"vidc.M263"=msh263.drv
"vidc.M261"=msh261.drv
"msacm.msaudio1"=msaud32.acm
"msacm.sl_anet"=sl_anet.acm
"msacm.iac2"=C:\WINDOWS\system32\iac25_32.ax
"vidc.iv50"=ir50_32.dll
"msacm.l3acm"=C:\WINDOWS\system32\l3codeca.acm
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"VIDC.FFDS"=C:\PROGRA~1\COMBIN~1\Filters\FFDShow\ff_vfw.dll

======File associations======

.js - edit - "C:\Program Files\Macromedia\Dreamweaver 8\dreamweaver.exe" "%1"
.reg - edit -
.reg - open -

======List of files/folders created in the last 1 month======

2013-03-17 09:35:57 ----D---- C:\rsit
2013-03-08 17:01:06 ----D---- C:\Program Files\Mozilla Firefox
2013-03-03 18:57:53 ----A---- C:\WINDOWS\system32\DBCLIENT.DLL
2013-03-03 18:57:50 ----D---- C:\Program Files\Common Files\Borland Shared
2013-03-03 18:57:37 ----D---- C:\Program Files\ProFact 3.0 Free
2013-03-01 23:41:48 ----D---- C:\Program Files\Sweet Home 3D
2013-03-01 23:41:48 ----D---- C:\Documents and Settings\Uzivatel\Data aplikací\OpenCandy
2013-03-01 23:40:56 ----D---- C:\Program Files\Common Files\Java
2013-03-01 23:40:33 ----A---- C:\WINDOWS\system32\javaws.exe
2013-03-01 23:40:20 ----A---- C:\WINDOWS\system32\WindowsAccessBridge.dll
2013-03-01 23:40:20 ----A---- C:\WINDOWS\system32\javaw.exe
2013-03-01 23:40:20 ----A---- C:\WINDOWS\system32\java.exe

======List of files/folders modified in the last 1 month======

2013-03-17 09:36:15 ----D---- C:\Program Files\trend micro
2013-03-17 09:36:02 ----D---- C:\WINDOWS\Prefetch
2013-03-17 09:17:00 ----D---- C:\WINDOWS\Temp
2013-03-17 08:48:04 ----D---- C:\WINDOWS\SoftwareDistribution
2013-03-17 08:47:33 ----D---- C:\WINDOWS\system32\CatRoot2
2013-03-17 08:47:24 ----D---- C:\Documents and Settings\Uzivatel\Data aplikací\Dropbox
2013-03-17 08:47:02 ----D---- C:\WINDOWS
2013-03-16 23:55:08 ----N---- C:\WINDOWS\SchedLgU.Txt
2013-03-16 23:09:28 ----D---- C:\Documents and Settings\Uzivatel\Data aplikací\Skype
2013-03-16 21:18:01 ----D---- C:\WINDOWS\system32
2013-03-16 16:11:59 ----D---- C:\Program Files\software_112
2013-03-16 16:10:43 ----D---- C:\Documents and Settings\Uzivatel\Data aplikací\PriceGong
2013-03-14 15:44:49 ----D---- C:\WINDOWS\Debug
2013-03-14 15:44:12 ----D---- C:\Program Files\Microsoft Silverlight
2013-03-14 10:41:57 ----A---- C:\WINDOWS\system32\MRT.exe
2013-03-14 10:41:50 ----SHD---- C:\WINDOWS\Installer
2013-03-14 10:41:48 ----D---- C:\Documents and Settings\All Users\Data aplikací\Microsoft Help
2013-03-14 10:40:57 ----HD---- C:\WINDOWS\inf
2013-03-14 10:40:46 ----RSHDC---- C:\WINDOWS\system32\dllcache
2013-03-14 10:40:43 ----D---- C:\Program Files\Internet Explorer
2013-03-14 10:40:29 ----D---- C:\WINDOWS\ie8updates
2013-03-14 10:39:56 ----HD---- C:\WINDOWS\$hf_mig$
2013-03-12 22:55:18 ----A---- C:\WINDOWS\system32\FlashPlayerApp.exe
2013-03-09 08:26:28 ----D---- C:\Program Files\Mozilla Maintenance Service
2013-03-09 02:31:10 ----RD---- C:\Program Files
2013-03-08 08:37:57 ----D---- C:\Documents and Settings\Uzivatel\Data aplikací\PDF reDirect
2013-03-04 17:26:43 ----D---- C:\Documents and Settings\Uzivatel\Data aplikací\Nokia
2013-03-03 18:57:50 ----D---- C:\Program Files\Common Files
2013-03-03 17:02:20 ----D---- C:\Program Files\Aplikace MB
2013-03-02 23:01:32 ----D---- C:\Documents and Settings\Uzivatel\Data aplikací\ICQ
2013-03-02 17:21:02 ----D---- C:\Program Files\Google
2013-03-01 23:39:55 ----AC---- C:\WINDOWS\system32\npdeployJava1.dll
2013-03-01 23:39:55 ----A---- C:\WINDOWS\system32\deployJava1.dll
2013-03-01 23:39:39 ----D---- C:\Program Files\Java
2013-03-01 03:27:55 ----A---- C:\WINDOWS\system32\mshtml.dll
2013-02-23 09:41:34 ----D---- C:\Program Files\ABBYY FineReader 10

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R1 Aavmker4;avast! Asynchronous Virus Monitor; C:\WINDOWS\system32\drivers\Aavmker4.sys [2012-07-03 25256]
R1 aswRdr;aswRdr; C:\WINDOWS\system32\drivers\aswRdr.sys [2012-07-03 35928]
R1 aswSnx;aswSnx; C:\WINDOWS\system32\drivers\aswSnx.sys [2012-07-03 721000]
R1 aswSP;aswSP; C:\WINDOWS\system32\drivers\aswSP.sys [2012-07-03 353688]
R1 aswTdi;avast! Network Shield Support; C:\WINDOWS\system32\drivers\aswTdi.sys [2012-07-03 54232]
R1 intelppm;Řadič procesoru Intel; C:\WINDOWS\system32\DRIVERS\intelppm.sys [2008-04-14 40192]
R1 SASDIFSV;SASDIFSV; \??\C:\Program Files\SUPERAntiSpyware\SASDIFSV.SYS []
R1 SASKUTIL;SASKUTIL; \??\C:\Program Files\SUPERAntiSpyware\SASKUTIL.SYS []
R1 WS2IFSL;Windows Socket 2.0 Non-IFS Service Provider Support Environment; C:\WINDOWS\System32\drivers\ws2ifsl.sys [2004-08-18 12032]
R2 aswFsBlk;aswFsBlk; C:\WINDOWS\system32\drivers\aswFsBlk.sys [2012-07-03 21256]
R2 aswMon2;avast! Standard Shield Support; C:\WINDOWS\system32\drivers\aswMon2.sys [2012-07-03 97608]
R3 ati2mtag;ati2mtag; C:\WINDOWS\system32\DRIVERS\ati2mtag.sys [2010-02-11 3565056]
R3 E100B;Intel(R) PRO Network Connection Driver; C:\WINDOWS\system32\DRIVERS\e100b325.sys [2007-11-16 165496]
R3 HDAudBus;Ovladač Microsoft UAA pro sběrnici High Definition Audio; C:\WINDOWS\system32\DRIVERS\HDAudBus.sys [2008-04-13 144384]
R3 HidUsb;Ovladač třídy standardu HID; C:\WINDOWS\system32\DRIVERS\hidusb.sys [2008-04-13 10368]
R3 LgBttPort;LGE Bluetooth TransPort; C:\WINDOWS\system32\DRIVERS\lgbtport.sys [2009-09-29 12160]
R3 lgbusenum;LG Bluetooth Bus Enumerator; C:\WINDOWS\system32\DRIVERS\lgbtbus.sys [2009-09-29 10496]
R3 LGVMODEM;LGE Virtual Modem; C:\WINDOWS\system32\DRIVERS\lgvmodem.sys [2009-09-29 12928]
R3 mouhid;Ovladač myši standardu HID; C:\WINDOWS\system32\DRIVERS\mouhid.sys [2001-10-24 12160]
R3 STHDA;IDT High Definition Audio CODEC; C:\WINDOWS\system32\drivers\sthda.sys [2009-03-12 1550613]
R3 StillCam;Ovladač digitálního fotoaparátu pro sériový port; C:\WINDOWS\system32\DRIVERS\serscan.sys [2001-10-24 6784]
R3 usbuhci;Ovladač Microsoft univerzálního hostitelského řadiče USB od společnosti Microsoft; C:\WINDOWS\system32\DRIVERS\usbuhci.sys [2008-04-13 20608]
S1 kbdhid;Ovladač klávesnice standardu HID; C:\WINDOWS\system32\DRIVERS\kbdhid.sys [2008-04-14 14592]
S3 adusbser;AnyDATA USB Device for Legacy Serial Communication; C:\WINDOWS\system32\DRIVERS\adusbser.sys [2009-11-06 106880]
S3 btkrnl;Enumenátor sběrnice Bluetooth; C:\WINDOWS\system32\DRIVERS\btkrnl.sys []
S3 cpuz133;cpuz133; \??\C:\DOCUME~1\Uzivatel\LOCALS~1\Temp\cpuz133\cpuz133_x32.sys []
S3 nmwcd;Nokia USB Phone Parent Driver; C:\WINDOWS\system32\drivers\ccdcmb.sys [2012-01-09 18176]
S3 nmwcdc;Nokia USB Communication Driver; C:\WINDOWS\system32\drivers\ccdcmbo.sys [2012-01-09 23168]
S3 nmwcdnsu;Nokia USB Flashing Phone Parent; C:\WINDOWS\system32\drivers\nmwcdnsu.sys [2012-01-09 137600]
S3 nmwcdnsuc;Nokia USB Flashing Generic; C:\WINDOWS\system32\drivers\nmwcdnsuc.sys [2012-01-09 8576]
S3 pccsmcfd;PCCS Mode Change Filter Driver; C:\WINDOWS\system32\DRIVERS\pccsmcfd.sys [2012-06-11 19072]
S3 upperdev;upperdev; C:\WINDOWS\system32\DRIVERS\usbser_lowerflt.sys [2012-01-09 8192]
S3 usbccgp;Obecný nadřazený ovladač Microsoft USB; C:\WINDOWS\system32\DRIVERS\usbccgp.sys [2008-04-13 32128]
S3 usbprint;Třída USB Printer; C:\WINDOWS\system32\DRIVERS\usbprint.sys [2008-04-14 25856]
S3 usbscan;Ovladač skeneru USB; C:\WINDOWS\system32\DRIVERS\usbscan.sys [2008-04-13 15104]
S3 usbser;USB Modem Driver; C:\WINDOWS\system32\drivers\usbser.sys [2008-04-14 26112]
S3 UsbserFilt;UsbserFilt; C:\WINDOWS\system32\DRIVERS\usbser_lowerfltj.sys [2012-01-09 8192]
S3 USBSTOR;Ovladač velkokapacitního paměťového zařízení USB; C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS [2008-04-13 26368]
S3 Wdf01000;Kernel Mode Driver Frameworks service; C:\WINDOWS\System32\Drivers\wdf01000.sys [2009-07-14 444136]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 !SASCORE;SAS Core Service; C:\Program Files\SUPERAntiSpyware\SASCORE.EXE [2012-07-11 116608]
R2 ABBYY.Licensing.FineReader.Professional.10.0;ABBYY FineReader 10 PE Licensing Service; C:\Program Files\Common Files\ABBYY\FineReader\10.00\Licensing\PE\NetworkLicenseServer.exe [2010-07-22 814344]
R2 ABBYY.Licensing.FineReader.Professional.9.0;ABBYY FineReader 9.0 PE Licensing Service; C:\Program Files\Common Files\ABBYY\FineReader\9.00\Licensing\PE\NetworkLicenseServer.exe [2007-12-06 660768]
R2 Ati HotKey Poller;Ati HotKey Poller; C:\WINDOWS\system32\Ati2evxx.exe [2010-02-11 602112]
R2 avast! Antivirus;avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [2012-07-03 44808]
R2 DreamService;DreamCom Server; C:\Program Files\DreamCom Server\dcsrvice.exe [2005-01-25 442368]
R2 InterBaseServer;Firebird Server; C:\Program Files\FireBird\bin\ibserver -s []
R2 JavaQuickStarterService;Java Quick Starter; C:\Program Files\Java\jre7\bin\jqs.exe [2013-03-01 170912]
R2 Skype C2C Service;Skype C2C Service; C:\Documents and Settings\All Users\Data aplikací\Skype\Toolbars\Skype C2C Service\c2c_service.exe [2013-01-31 3289208]
R2 STacSV;Audio Service; c:\program files\idt\intelxpv_v103\wdm\STacSV.exe [2009-03-12 254036]
R3 ServiceLayer;ServiceLayer; C:\Program Files\PC Connectivity Solution\ServiceLayer.exe [2012-06-11 724376]
S2 gupdate;Služba Google Update (gupdate); C:\Program Files\Google\Update\GoogleUpdate.exe [2012-01-13 136176]
S2 SkypeUpdate;Skype Updater; C:\Program Files\Skype\Updater\Updater.exe [2012-07-13 160944]
S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service; C:\WINDOWS\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2013-03-12 253656]
S3 gupdatem;Služba Google Update (gupdatem); C:\Program Files\Google\Update\GoogleUpdate.exe [2012-01-13 136176]
S3 MozillaMaintenance;Mozilla Maintenance Service; C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe [2013-03-08 115608]
S3 odserv;Microsoft Office Diagnostics Service; C:\Program Files\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE [2011-07-20 440696]
S3 ose;Office Source Engine; C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2006-10-26 145184]

-----------------EOF-----------------

11188 · #4 Příspěvek od **11188** » 17 bře 2013 09:41

a tady je ten ADWcleaner:
# AdwCleaner v2.114 - Logfile created 03/17/2013 at 09:39:31
# Updated 05/03/2013 by Xplode
# Operating system : Microsoft Windows XP Service Pack 3 (32 bits)
# User : Uzivatel - PC001
# Boot Mode : Normal
# Running from : C:\Documents and Settings\Uzivatel\Dokumenty\adwcleaner.exe
# Option [Search]

***** [Services] *****

***** [Files / Folders] *****

Folder Found : C:\Documents and Settings\All Users\Data aplikací\ClickIT
Folder Found : C:\Documents and Settings\All Users\Data aplikací\continuetosave
Folder Found : C:\Documents and Settings\All Users\Data aplikací\InstallMate
Folder Found : C:\Documents and Settings\All Users\Data aplikací\Premium
Folder Found : C:\Documents and Settings\All Users\Data aplikací\RightClick
Folder Found : C:\Documents and Settings\All Users\Data aplikací\SaveByclick
Folder Found : C:\Documents and Settings\All Users\Nabídka Start\Programy\continuetosave
Folder Found : C:\Documents and Settings\All Users\Nabídka Start\Programy\SaveByclick
Folder Found : C:\Documents and Settings\Uzivatel\Data aplikací\Mozilla\Firefox\Profiles\io68j5st.default-1357168552828\CT3272278
Folder Found : C:\Documents and Settings\Uzivatel\Data aplikací\Mozilla\Firefox\Profiles\io68j5st.default-1357168552828\extensions\{bbbf1eb3-7bfb-4e87-81e7-d1b35ddde87a}
Folder Found : C:\Documents and Settings\Uzivatel\Data aplikací\Mozilla\Firefox\Profiles\io68j5st.default-1357168552828\Smartbar
Folder Found : C:\Documents and Settings\Uzivatel\Data aplikací\OpenCandy
Folder Found : C:\Documents and Settings\Uzivatel\Data aplikací\PriceGong
Folder Found : C:\Documents and Settings\Uzivatel\Local Settings\Data aplikací\Conduit
Folder Found : C:\Documents and Settings\Uzivatel\Local Settings\Data aplikací\software_112
Folder Found : C:\Program Files\Conduit
Folder Found : C:\Program Files\software_112

***** [Registry] *****

Key Found : HKCU\Software\AppDataLow\SProtector
Key Found : HKCU\Software\Conduit
Key Found : HKCU\Software\ConduitSearchScopes
Key Found : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{AFDBDDAA-5D3F-42EE-B79C-185A7020515B}
Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{9799D2A4-9E5D-273A-A151-307711EE5039}
Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{9799D2A4-9E5D-273A-A151-307711EE5039}
Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{F21AB227-62AA-46DF-B42D-DF0E41E5AE8F}
Key Found : HKCU\Software\PriceGong
Key Found : HKCU\Software\SmartBar
Key Found : HKCU\Software\software_112
Key Found : HKCU\Software\YourFileDownloader
Key Found : HKCU\Toolbar
Key Found : HKLM\SOFTWARE\Classes\AppID\{BDB69379-802F-4EAF-B541-F8DE92DD98DB}
Key Found : HKLM\SOFTWARE\Classes\CLSID\{3C471948-F874-49F5-B338-4F214A2EE0B1}
Key Found : HKLM\SOFTWARE\Classes\CLSID\{9799D2A4-9E5D-273A-A151-307711EE5039}
Key Found : HKLM\SOFTWARE\Classes\CLSID\{BBBF1EB3-7BFB-4E87-81E7-D1B35DDDE87A}
Key Found : HKLM\SOFTWARE\Classes\CLSID\{F21AB227-62AA-46DF-B42D-DF0E41E5AE8F}
Key Found : HKLM\SOFTWARE\Classes\Toolbar.CT3272278
Key Found : HKLM\SOFTWARE\Classes\TypeLib\{E2343056-CC08-46AC-B898-BFC7ACF4E755}
Key Found : HKLM\Software\Conduit
Key Found : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{2A65ADAB-588B-4EAB-87B1-439F81A8C4C7}
Key Found : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{44479DDD-206B-4C23-B104-E375A4357ED7}
Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Management\ARPCache\{26B5A6D1-1F75-3B59-5825-E4D4CAE3445D}
Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Management\ARPCache\software_112 Toolbar
Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9799D2A4-9E5D-273A-A151-307711EE5039}
Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{BBBF1EB3-7BFB-4E87-81E7-D1B35DDDE87A}
Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{F21AB227-62AA-46DF-B42D-DF0E41E5AE8F}
Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{26B5A6D1-1F75-3B59-5825-E4D4CAE3445D}
Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\software_112 Toolbar
Key Found : HKLM\Software\software_112
Key Found : HKLM\Software\SProtector
Key Found : HKLM\Software\YourFileDownloader
Key Found : HKU\S-1-5-21-299502267-1177238915-1407829469-1003\Software\Microsoft\Internet Explorer\SearchScopes\{AFDBDDAA-5D3F-42EE-B79C-185A7020515B}
Value Found : HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser [{BBBF1EB3-7BFB-4E87-81E7-D1B35DDDE87A}]
Value Found : HKCU\Software\Microsoft\Internet Explorer\URLSearchHooks [{BBBF1EB3-7BFB-4E87-81E7-D1B35DDDE87A}]
Value Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Run [Smart Driver Updater]
Value Found : HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{BBBF1EB3-7BFB-4E87-81E7-D1B35DDDE87A}]

***** [Internet Browsers] *****

-\\ Internet Explorer v8.0.6001.18702

[OK] Registry is clean.

-\\ Mozilla Firefox v19.0.2 (cs)

File : C:\Documents and Settings\Uzivatel\Data aplikací\Mozilla\Firefox\Profiles\io68j5st.default-1357168552828\prefs.js

Found : user_pref("CT3272278.1000082.isDisplayHidden", "true");
Found : user_pref("CT3272278.1000082.state", "{\"state\":\"stopped\",\"text\":\"Californi...\",\"description[...]
Found : user_pref("CT3272278.ENABALE_HISTORY", "{\"dataType\":\"string\",\"data\":\"true\"}");
Found : user_pref("CT3272278.ENABLE_RETURN_WEB_SEARCH_ON_THE_PAGE", "{\"dataType\":\"string\",\"data\":\"tru[...]
Found : user_pref("CT3272278.FirstTime", "true");
Found : user_pref("CT3272278.FirstTimeFF3", "true");
Found : user_pref("CT3272278.InstallDate", "9/1/2013 22:52:36");
Found : user_pref("CT3272278.LoginRevertSettingsEnabled", true);
Found : user_pref("CT3272278.RevertSettingsEnabled", true);
Found : user_pref("CT3272278.SearchFromAddressBarUrl", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT327[...]
Found : user_pref("CT3272278.TopHitsConfig.enc", "ew0KICAgICJzcHJpdGVVcmwiOiAiaHR0cDovL3N0b3JhZ2UuY29uZHVpdC[...]
Found : user_pref("CT3272278.UserID", "UN98371165471941067");
Found : user_pref("CT3272278.addressBarTakeOverEnabledInHidden", "true");
Found : user_pref("CT3272278.autoDisableScopes", -1);
Found : user_pref("CT3272278.browser.search.defaultthis.engineName", true);
Found : user_pref("CT3272278.defaultSearch", "true");
Found : user_pref("CT3272278.enableAlerts", "always");
Found : user_pref("CT3272278.enableFix404ByUser", "FALSE");
Found : user_pref("CT3272278.enableSearchFromAddressBar", "true");
Found : user_pref("CT3272278.firstTimeDialogOpened", "true");
Found : user_pref("CT3272278.fixPageNotFoundError", "true");
Found : user_pref("CT3272278.fixPageNotFoundErrorByUser", "true");
Found : user_pref("CT3272278.fixPageNotFoundErrorInHidden", "true");
Found : user_pref("CT3272278.fixUrls", true);
Found : user_pref("CT3272278.installId", "conduit.exe");
Found : user_pref("CT3272278.installType", "conduitnsisintegration");
Found : user_pref("CT3272278.isCheckedStartAsHidden", true);
Found : user_pref("CT3272278.isEnableAllDialogs", "{\"dataType\":\"string\",\"data\":\"true\"}");
Found : user_pref("CT3272278.isFirstTimeToolbarLoading", "false");
Found : user_pref("CT3272278.isNewTabEnabled", false);
Found : user_pref("CT3272278.isPerformedSmartBarTransition", "true");
Found : user_pref("CT3272278.isToolbarShrinked", "{\"dataType\":\"string\",\"data\":\"false\"}");
Found : user_pref("CT3272278.keyword", true);
Found : user_pref("CT3272278.lastNewTabSettings", "{\"isEnabled\":false,\"newTabUrl\":\"hxxp://search.condui[...]
Found : user_pref("CT3272278.lastVersion", "10.14.65.43");
Found : user_pref("CT3272278.migrateAppsAndComponents", true);
Found : user_pref("CT3272278.navigationAliasesJson", "{\"EB_SEARCH_TERM\":\"\",\"EB_MAIN_FRAME_URL\":\"\",\"[...]
Found : user_pref("CT3272278.openThankYouPage", "false");
Found : user_pref("CT3272278.openUninstallPage", "true");
Found : user_pref("CT3272278.revertSettingsEnabled", "false");
Found : user_pref("CT3272278.search.searchAppId", "10000002");
Found : user_pref("CT3272278.search.searchCount", "0");
Found : user_pref("CT3272278.searchInNewTabEnabledByUser", "true");
Found : user_pref("CT3272278.searchInNewTabEnabledInHidden", "true");
Found : user_pref("CT3272278.selectToSearchBoxEnabled", "{\"dataType\":\"string\",\"data\":\"true\"}");
Found : user_pref("CT3272278.serviceLayer_service_login_isFirstLoginInvoked", "{\"dataType\":\"boolean\",\"d[...]
Found : user_pref("CT3272278.serviceLayer_service_login_loginCount", "{\"dataType\":\"number\",\"data\":\"4\[...]
Found : user_pref("CT3272278.serviceLayer_service_toolbarGrouping_activeCTID", "{\"dataType\":\"string\",\"d[...]
Found : user_pref("CT3272278.serviceLayer_service_toolbarGrouping_activeDownloadUrl", "{\"dataType\":\"strin[...]
Found : user_pref("CT3272278.serviceLayer_service_toolbarGrouping_activeToolbarName", "{\"dataType\":\"strin[...]
Found : user_pref("CT3272278.serviceLayer_service_toolbarGrouping_invoked", "{\"dataType\":\"string\",\"data[...]
Found : user_pref("CT3272278.serviceLayer_services_appTrackingFirstTime_lastUpdate", "1357769739887");
Found : user_pref("CT3272278.serviceLayer_services_login_10.13.40.15_lastUpdate", "1358374494921");
Found : user_pref("CT3272278.serviceLayer_services_login_10.14.40.128_lastUpdate", "1359324878808");
Found : user_pref("CT3272278.serviceLayer_services_login_10.14.42.7_lastUpdate", "1360792137823");
Found : user_pref("CT3272278.serviceLayer_services_login_10.14.65.43_lastUpdate", "1363472085815");
Found : user_pref("CT3272278.serviceLayer_services_searchAPI_lastUpdate", "1357768387083");
Found : user_pref("CT3272278.serviceLayer_services_serviceMap_lastUpdate", "1363467727549");
Found : user_pref("CT3272278.serviceLayer_services_toolbarSettings_lastUpdate", "1363472921659");
Found : user_pref("CT3272278.serviceLayer_services_translation_lastUpdate", "1363467729327");
Found : user_pref("CT3272278.settingsINI", true);
Found : user_pref("CT3272278.shouldFirstTimeDialog", "false");
Found : user_pref("CT3272278.smartbar.CTID", "CT3272278");
Found : user_pref("CT3272278.smartbar.Uninstall", "0");
Found : user_pref("CT3272278.smartbar.homepage", true);
Found : user_pref("CT3272278.smartbar.isHidden", true);
Found : user_pref("CT3272278.smartbar.toolbarName", "software 112 ");
Found : user_pref("CT3272278.startPage", "userChanged");
Found : user_pref("CT3272278.toolbarBornServerTime", "10-1-2013");
Found : user_pref("CT3272278.toolbarCurrentServerTime", "17-3-2013");
Found : user_pref("CT3272278_Firefox.csv", "[{\"from\":\"Abs Layer\",\"action\":\"loading toolbar\",\"time\"[...]
Found : user_pref("Smartbar.ConduitHomepagesList", "");
Found : user_pref("Smartbar.ConduitSearchEngineList", "software 112 Customized Web Search");
Found : user_pref("Smartbar.ConduitSearchUrlList", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT3272278[...]
Found : user_pref("Smartbar.SearchFromAddressBarSavedUrl", "data:text/plain,keyword.URL=hxxp://search.seznam[...]
Found : user_pref("Smartbar.keywordURLSelectedCTID", "CT3272278");
Found : user_pref("browser.search.selectedEngine", "software 112 Customized Web Search");
Found : user_pref("extensions.51083c38c6882.scode", "(function(){try{if('aol.com,mail.google.com,premiumrepo[...]
Found : user_pref("keyword.URL", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT3272278&SearchSource=2&CU[...]
Found : user_pref("smartbar.conduitHomepageList", "hxxp://search.conduit.com/?ctid=CT3272278&SearchSource=13[...]
Found : user_pref("smartbar.conduitSearchAddressUrlList", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT[...]
Found : user_pref("smartbar.machineId", "/JJWJGVEX++7BLYX0G2CY/ADG8CVEF0H5AMJPPIBCWABUDS6VMXEDWJ+WHDLDLB+BIM[...]
Found : user_pref("smartbar.originalHomepage", "hxxp://www.seznam.cz");
Found : user_pref("smartbar.originalSearchAddressUrl", "data:text/plain,keyword.URL=hxxp://search.seznam.cz/[...]
Found : user_pref("smartbar.originalSearchEngine", false);

-\\ Google Chrome v [Unable to get version]

File : C:\Documents and Settings\Uzivatel\Local Settings\Data aplikací\Google\Chrome\User Data\Default\Preferences

[OK] File is clean.

*************************

AdwCleaner[R3].txt - [12388 octets] - [17/03/2013 09:39:31]

########## EOF - C:\AdwCleaner[R3].txt - [12449 octets] ##########

11188 · #5 Příspěvek od **11188** » 17 bře 2013 13:57

Už mě začali vyskakovat i nové okna třeba když se přihlásím na nějaké stranky....jsem z toho zoufalý...projel sem to ccleanerem ale nic to nenašlo....

#6 Příspěvek od **vyosek** » 17 bře 2013 14:12

CCleaner neslouzi k odstranovani haveti

Spustte znovu AdwCleaner

Pokud pouzivate Win Vista ci W7, kliknete na AdwCleaner pravym a dejte Run As Administrator ci Spustit jako spravce
Kliknete na Delete
PC provede opravu, restartuje se a da Vam log (C:\AdwCleaner [S1].txt) , jeho obsah vlozte sem

11188 · #7 Příspěvek od **11188** » 17 bře 2013 14:24

Já mám ještě windows XP mám to i přes to provést?

11188 · #8 Příspěvek od **11188** » 17 bře 2013 14:28

# AdwCleaner v2.114 - Logfile created 03/17/2013 at 14:24:06
# Updated 05/03/2013 by Xplode
# Operating system : Microsoft Windows XP Service Pack 3 (32 bits)
# User : Uzivatel - PC001
# Boot Mode : Normal
# Running from : C:\Documents and Settings\Uzivatel\Dokumenty\adwcleaner.exe
# Option [Search]

***** [Services] *****

***** [Files / Folders] *****

Folder Found : C:\Documents and Settings\All Users\Data aplikací\ClickIT
Folder Found : C:\Documents and Settings\All Users\Data aplikací\continuetosave
Folder Found : C:\Documents and Settings\All Users\Data aplikací\InstallMate
Folder Found : C:\Documents and Settings\All Users\Data aplikací\Premium
Folder Found : C:\Documents and Settings\All Users\Data aplikací\RightClick
Folder Found : C:\Documents and Settings\All Users\Data aplikací\SaveByclick
Folder Found : C:\Documents and Settings\All Users\Nabídka Start\Programy\continuetosave
Folder Found : C:\Documents and Settings\All Users\Nabídka Start\Programy\SaveByclick
Folder Found : C:\Documents and Settings\Uzivatel\Data aplikací\Mozilla\Firefox\Profiles\io68j5st.default-1357168552828\CT3272278
Folder Found : C:\Documents and Settings\Uzivatel\Data aplikací\Mozilla\Firefox\Profiles\io68j5st.default-1357168552828\extensions\{bbbf1eb3-7bfb-4e87-81e7-d1b35ddde87a}
Folder Found : C:\Documents and Settings\Uzivatel\Data aplikací\Mozilla\Firefox\Profiles\io68j5st.default-1357168552828\Smartbar
Folder Found : C:\Documents and Settings\Uzivatel\Data aplikací\OpenCandy
Folder Found : C:\Documents and Settings\Uzivatel\Data aplikací\PriceGong
Folder Found : C:\Documents and Settings\Uzivatel\Local Settings\Data aplikací\Conduit
Folder Found : C:\Documents and Settings\Uzivatel\Local Settings\Data aplikací\software_112
Folder Found : C:\Program Files\Conduit
Folder Found : C:\Program Files\software_112

***** [Registry] *****

Key Found : HKCU\Software\AppDataLow\SProtector
Key Found : HKCU\Software\Conduit
Key Found : HKCU\Software\ConduitSearchScopes
Key Found : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{AFDBDDAA-5D3F-42EE-B79C-185A7020515B}
Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{9799D2A4-9E5D-273A-A151-307711EE5039}
Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{9799D2A4-9E5D-273A-A151-307711EE5039}
Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{F21AB227-62AA-46DF-B42D-DF0E41E5AE8F}
Key Found : HKCU\Software\PriceGong
Key Found : HKCU\Software\SmartBar
Key Found : HKCU\Software\software_112
Key Found : HKCU\Software\YourFileDownloader
Key Found : HKCU\Toolbar
Key Found : HKLM\SOFTWARE\Classes\AppID\{BDB69379-802F-4EAF-B541-F8DE92DD98DB}
Key Found : HKLM\SOFTWARE\Classes\CLSID\{3C471948-F874-49F5-B338-4F214A2EE0B1}
Key Found : HKLM\SOFTWARE\Classes\CLSID\{9799D2A4-9E5D-273A-A151-307711EE5039}
Key Found : HKLM\SOFTWARE\Classes\CLSID\{BBBF1EB3-7BFB-4E87-81E7-D1B35DDDE87A}
Key Found : HKLM\SOFTWARE\Classes\CLSID\{F21AB227-62AA-46DF-B42D-DF0E41E5AE8F}
Key Found : HKLM\SOFTWARE\Classes\Toolbar.CT3272278
Key Found : HKLM\SOFTWARE\Classes\TypeLib\{E2343056-CC08-46AC-B898-BFC7ACF4E755}
Key Found : HKLM\Software\Conduit
Key Found : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{2A65ADAB-588B-4EAB-87B1-439F81A8C4C7}
Key Found : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{44479DDD-206B-4C23-B104-E375A4357ED7}
Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Management\ARPCache\{26B5A6D1-1F75-3B59-5825-E4D4CAE3445D}
Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Management\ARPCache\software_112 Toolbar
Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9799D2A4-9E5D-273A-A151-307711EE5039}
Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{BBBF1EB3-7BFB-4E87-81E7-D1B35DDDE87A}
Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{F21AB227-62AA-46DF-B42D-DF0E41E5AE8F}
Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{26B5A6D1-1F75-3B59-5825-E4D4CAE3445D}
Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\software_112 Toolbar
Key Found : HKLM\Software\software_112
Key Found : HKLM\Software\SProtector
Key Found : HKLM\Software\YourFileDownloader
Key Found : HKU\S-1-5-21-299502267-1177238915-1407829469-1003\Software\Microsoft\Internet Explorer\SearchScopes\{AFDBDDAA-5D3F-42EE-B79C-185A7020515B}
Value Found : HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser [{BBBF1EB3-7BFB-4E87-81E7-D1B35DDDE87A}]
Value Found : HKCU\Software\Microsoft\Internet Explorer\URLSearchHooks [{BBBF1EB3-7BFB-4E87-81E7-D1B35DDDE87A}]
Value Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Run [Smart Driver Updater]
Value Found : HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{BBBF1EB3-7BFB-4E87-81E7-D1B35DDDE87A}]

***** [Internet Browsers] *****

-\\ Internet Explorer v8.0.6001.18702

[OK] Registry is clean.

-\\ Mozilla Firefox v19.0.2 (cs)

File : C:\Documents and Settings\Uzivatel\Data aplikací\Mozilla\Firefox\Profiles\io68j5st.default-1357168552828\prefs.js

Found : user_pref("CT3272278.1000082.isDisplayHidden", "true");
Found : user_pref("CT3272278.1000082.state", "{\"state\":\"stopped\",\"text\":\"Californi...\",\"description[...]
Found : user_pref("CT3272278.ENABALE_HISTORY", "{\"dataType\":\"string\",\"data\":\"true\"}");
Found : user_pref("CT3272278.ENABLE_RETURN_WEB_SEARCH_ON_THE_PAGE", "{\"dataType\":\"string\",\"data\":\"tru[...]
Found : user_pref("CT3272278.FirstTime", "true");
Found : user_pref("CT3272278.FirstTimeFF3", "true");
Found : user_pref("CT3272278.InstallDate", "9/1/2013 22:52:36");
Found : user_pref("CT3272278.LoginRevertSettingsEnabled", true);
Found : user_pref("CT3272278.RevertSettingsEnabled", true);
Found : user_pref("CT3272278.SearchFromAddressBarUrl", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT327[...]
Found : user_pref("CT3272278.TopHitsConfig.enc", "ew0KICAgICJzcHJpdGVVcmwiOiAiaHR0cDovL3N0b3JhZ2UuY29uZHVpdC[...]
Found : user_pref("CT3272278.UserID", "UN98371165471941067");
Found : user_pref("CT3272278.addressBarTakeOverEnabledInHidden", "true");
Found : user_pref("CT3272278.autoDisableScopes", -1);
Found : user_pref("CT3272278.browser.search.defaultthis.engineName", true);
Found : user_pref("CT3272278.defaultSearch", "true");
Found : user_pref("CT3272278.enableAlerts", "always");
Found : user_pref("CT3272278.enableFix404ByUser", "FALSE");
Found : user_pref("CT3272278.enableSearchFromAddressBar", "true");
Found : user_pref("CT3272278.firstTimeDialogOpened", "true");
Found : user_pref("CT3272278.fixPageNotFoundError", "true");
Found : user_pref("CT3272278.fixPageNotFoundErrorByUser", "true");
Found : user_pref("CT3272278.fixPageNotFoundErrorInHidden", "true");
Found : user_pref("CT3272278.fixUrls", true);
Found : user_pref("CT3272278.installId", "conduit.exe");
Found : user_pref("CT3272278.installType", "conduitnsisintegration");
Found : user_pref("CT3272278.isCheckedStartAsHidden", true);
Found : user_pref("CT3272278.isEnableAllDialogs", "{\"dataType\":\"string\",\"data\":\"true\"}");
Found : user_pref("CT3272278.isFirstTimeToolbarLoading", "false");
Found : user_pref("CT3272278.isNewTabEnabled", false);
Found : user_pref("CT3272278.isPerformedSmartBarTransition", "true");
Found : user_pref("CT3272278.isToolbarShrinked", "{\"dataType\":\"string\",\"data\":\"false\"}");
Found : user_pref("CT3272278.keyword", true);
Found : user_pref("CT3272278.lastNewTabSettings", "{\"isEnabled\":false,\"newTabUrl\":\"hxxp://search.condui[...]
Found : user_pref("CT3272278.lastVersion", "10.14.65.43");
Found : user_pref("CT3272278.migrateAppsAndComponents", true);
Found : user_pref("CT3272278.navigationAliasesJson", "{\"EB_SEARCH_TERM\":\"\",\"EB_MAIN_FRAME_URL\":\"hxxp%[...]
Found : user_pref("CT3272278.newSettings", "{\"dataType\":\"boolean\",\"data\":\"true\"}");
Found : user_pref("CT3272278.openThankYouPage", "false");
Found : user_pref("CT3272278.openUninstallPage", "true");
Found : user_pref("CT3272278.revertSettingsEnabled", "false");
Found : user_pref("CT3272278.search.searchAppId", "10000002");
Found : user_pref("CT3272278.search.searchCount", "0");
Found : user_pref("CT3272278.searchInNewTabEnabledByUser", "true");
Found : user_pref("CT3272278.searchInNewTabEnabledInHidden", "true");
Found : user_pref("CT3272278.selectToSearchBoxEnabled", "{\"dataType\":\"string\",\"data\":\"true\"}");
Found : user_pref("CT3272278.serviceLayer_service_login_isFirstLoginInvoked", "{\"dataType\":\"boolean\",\"d[...]
Found : user_pref("CT3272278.serviceLayer_service_login_loginCount", "{\"dataType\":\"number\",\"data\":\"4\[...]
Found : user_pref("CT3272278.serviceLayer_service_toolbarGrouping_activeCTID", "{\"dataType\":\"string\",\"d[...]
Found : user_pref("CT3272278.serviceLayer_service_toolbarGrouping_activeDownloadUrl", "{\"dataType\":\"strin[...]
Found : user_pref("CT3272278.serviceLayer_service_toolbarGrouping_activeToolbarName", "{\"dataType\":\"strin[...]
Found : user_pref("CT3272278.serviceLayer_service_toolbarGrouping_invoked", "{\"dataType\":\"string\",\"data[...]
Found : user_pref("CT3272278.serviceLayer_services_appTrackingFirstTime_lastUpdate", "1357769739887");
Found : user_pref("CT3272278.serviceLayer_services_login_10.13.40.15_lastUpdate", "1358374494921");
Found : user_pref("CT3272278.serviceLayer_services_login_10.14.40.128_lastUpdate", "1359324878808");
Found : user_pref("CT3272278.serviceLayer_services_login_10.14.42.7_lastUpdate", "1360792137823");
Found : user_pref("CT3272278.serviceLayer_services_login_10.14.65.43_lastUpdate", "1363521284627");
Found : user_pref("CT3272278.serviceLayer_services_searchAPI_lastUpdate", "1357768387083");
Found : user_pref("CT3272278.serviceLayer_services_serviceMap_lastUpdate", "1363467727549");
Found : user_pref("CT3272278.serviceLayer_services_toolbarSettings_lastUpdate", "1363521284963");
Found : user_pref("CT3272278.serviceLayer_services_translation_lastUpdate", "1363467729327");
Found : user_pref("CT3272278.settingsINI", true);
Found : user_pref("CT3272278.shouldFirstTimeDialog", "false");
Found : user_pref("CT3272278.smartbar.CTID", "CT3272278");
Found : user_pref("CT3272278.smartbar.Uninstall", "0");
Found : user_pref("CT3272278.smartbar.homepage", true);
Found : user_pref("CT3272278.smartbar.isHidden", true);
Found : user_pref("CT3272278.smartbar.toolbarName", "software 112 ");
Found : user_pref("CT3272278.startPage", "userChanged");
Found : user_pref("CT3272278.toolbarBornServerTime", "10-1-2013");
Found : user_pref("CT3272278.toolbarCurrentServerTime", "17-3-2013");
Found : user_pref("CT3272278_Firefox.csv", "[{\"from\":\"Abs Layer\",\"action\":\"loading toolbar\",\"time\"[...]
Found : user_pref("Smartbar.ConduitHomepagesList", "");
Found : user_pref("Smartbar.ConduitSearchEngineList", "software 112 Customized Web Search");
Found : user_pref("Smartbar.ConduitSearchUrlList", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT3272278[...]
Found : user_pref("Smartbar.SearchFromAddressBarSavedUrl", "data:text/plain,keyword.URL=hxxp://search.seznam[...]
Found : user_pref("Smartbar.keywordURLSelectedCTID", "CT3272278");
Found : user_pref("browser.search.selectedEngine", "software 112 Customized Web Search");
Found : user_pref("extensions.51083c38c6882.scode", "(function(){try{if('aol.com,mail.google.com,premiumrepo[...]
Found : user_pref("keyword.URL", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT3272278&SearchSource=2&CU[...]
Found : user_pref("smartbar.conduitHomepageList", "hxxp://search.conduit.com/?ctid=CT3272278&SearchSource=13[...]
Found : user_pref("smartbar.conduitSearchAddressUrlList", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT[...]
Found : user_pref("smartbar.machineId", "/JJWJGVEX++7BLYX0G2CY/ADG8CVEF0H5AMJPPIBCWABUDS6VMXEDWJ+WHDLDLB+BIM[...]
Found : user_pref("smartbar.originalHomepage", "hxxp://www.seznam.cz");
Found : user_pref("smartbar.originalSearchAddressUrl", "data:text/plain,keyword.URL=hxxp://search.seznam.cz/[...]
Found : user_pref("smartbar.originalSearchEngine", false);

-\\ Google Chrome v [Unable to get version]

File : C:\Documents and Settings\Uzivatel\Local Settings\Data aplikací\Google\Chrome\User Data\Default\Preferences

[OK] File is clean.

*************************

AdwCleaner[R3].txt - [12519 octets] - [17/03/2013 09:39:31]
AdwCleaner[R4].txt - [12542 octets] - [17/03/2013 14:24:06]

########## EOF - C:\AdwCleaner[R4].txt - [12603 octets] ##########

#9 Příspěvek od **vyosek** » 17 bře 2013 14:31

Dal jste znovu Search, je potreba dat Delete

11188 · #10 Příspěvek od **11188** » 17 bře 2013 14:57

Takhle by to již mělo byt v pořádku:

# AdwCleaner v2.114 - Logfile created 03/17/2013 at 14:51:03
# Updated 05/03/2013 by Xplode
# Operating system : Microsoft Windows XP Service Pack 3 (32 bits)
# User : Uzivatel - PC001
# Boot Mode : Normal
# Running from : C:\Documents and Settings\Uzivatel\Dokumenty\adwcleaner.exe
# Option [Delete]

***** [Services] *****

***** [Files / Folders] *****

Deleted on reboot : C:\Documents and Settings\All Users\Data aplikací\Premium
Folder Deleted : C:\Documents and Settings\All Users\Data aplikací\ClickIT
Folder Deleted : C:\Documents and Settings\All Users\Data aplikací\continuetosave
Folder Deleted : C:\Documents and Settings\All Users\Data aplikací\InstallMate
Folder Deleted : C:\Documents and Settings\All Users\Data aplikací\RightClick
Folder Deleted : C:\Documents and Settings\All Users\Data aplikací\SaveByclick
Folder Deleted : C:\Documents and Settings\All Users\Nabídka Start\Programy\continuetosave
Folder Deleted : C:\Documents and Settings\All Users\Nabídka Start\Programy\SaveByclick
Folder Deleted : C:\Documents and Settings\Uzivatel\Data aplikací\Mozilla\Firefox\Profiles\io68j5st.default-1357168552828\CT3272278
Folder Deleted : C:\Documents and Settings\Uzivatel\Data aplikací\Mozilla\Firefox\Profiles\io68j5st.default-1357168552828\extensions\{bbbf1eb3-7bfb-4e87-81e7-d1b35ddde87a}
Folder Deleted : C:\Documents and Settings\Uzivatel\Data aplikací\Mozilla\Firefox\Profiles\io68j5st.default-1357168552828\Smartbar
Folder Deleted : C:\Documents and Settings\Uzivatel\Data aplikací\OpenCandy
Folder Deleted : C:\Documents and Settings\Uzivatel\Data aplikací\PriceGong
Folder Deleted : C:\Documents and Settings\Uzivatel\Local Settings\Data aplikací\Conduit
Folder Deleted : C:\Documents and Settings\Uzivatel\Local Settings\Data aplikací\software_112
Folder Deleted : C:\Program Files\Conduit
Folder Deleted : C:\Program Files\software_112

***** [Registry] *****

Key Deleted : HKCU\Software\AppDataLow\SProtector
Key Deleted : HKCU\Software\Conduit
Key Deleted : HKCU\Software\ConduitSearchScopes
Key Deleted : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{AFDBDDAA-5D3F-42EE-B79C-185A7020515B}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{9799D2A4-9E5D-273A-A151-307711EE5039}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{9799D2A4-9E5D-273A-A151-307711EE5039}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{F21AB227-62AA-46DF-B42D-DF0E41E5AE8F}
Key Deleted : HKCU\Software\PriceGong
Key Deleted : HKCU\Software\SmartBar
Key Deleted : HKCU\Software\software_112
Key Deleted : HKCU\Software\YourFileDownloader
Key Deleted : HKCU\Toolbar
Key Deleted : HKLM\SOFTWARE\Classes\AppID\{BDB69379-802F-4EAF-B541-F8DE92DD98DB}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{3C471948-F874-49F5-B338-4F214A2EE0B1}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{9799D2A4-9E5D-273A-A151-307711EE5039}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{BBBF1EB3-7BFB-4E87-81E7-D1B35DDDE87A}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{F21AB227-62AA-46DF-B42D-DF0E41E5AE8F}
Key Deleted : HKLM\SOFTWARE\Classes\Toolbar.CT3272278
Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{E2343056-CC08-46AC-B898-BFC7ACF4E755}
Key Deleted : HKLM\Software\Conduit
Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{2A65ADAB-588B-4EAB-87B1-439F81A8C4C7}
Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{44479DDD-206B-4C23-B104-E375A4357ED7}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Management\ARPCache\{26B5A6D1-1F75-3B59-5825-E4D4CAE3445D}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Management\ARPCache\software_112 Toolbar
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9799D2A4-9E5D-273A-A151-307711EE5039}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{BBBF1EB3-7BFB-4E87-81E7-D1B35DDDE87A}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{F21AB227-62AA-46DF-B42D-DF0E41E5AE8F}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{26B5A6D1-1F75-3B59-5825-E4D4CAE3445D}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\software_112 Toolbar
Key Deleted : HKLM\Software\software_112
Key Deleted : HKLM\Software\SProtector
Key Deleted : HKLM\Software\YourFileDownloader
Value Deleted : HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser [{BBBF1EB3-7BFB-4E87-81E7-D1B35DDDE87A}]
Value Deleted : HKCU\Software\Microsoft\Internet Explorer\URLSearchHooks [{BBBF1EB3-7BFB-4E87-81E7-D1B35DDDE87A}]
Value Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Run [Smart Driver Updater]
Value Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{BBBF1EB3-7BFB-4E87-81E7-D1B35DDDE87A}]

***** [Internet Browsers] *****

-\\ Internet Explorer v8.0.6001.18702

[OK] Registry is clean.

-\\ Mozilla Firefox v19.0.2 (cs)

File : C:\Documents and Settings\Uzivatel\Data aplikací\Mozilla\Firefox\Profiles\io68j5st.default-1357168552828\prefs.js

Deleted : user_pref("CT3272278.1000082.isDisplayHidden", "true");
Deleted : user_pref("CT3272278.1000082.state", "{\"state\":\"stopped\",\"text\":\"Californi...\",\"description[...]
Deleted : user_pref("CT3272278.ENABALE_HISTORY", "{\"dataType\":\"string\",\"data\":\"true\"}");
Deleted : user_pref("CT3272278.ENABLE_RETURN_WEB_SEARCH_ON_THE_PAGE", "{\"dataType\":\"string\",\"data\":\"tru[...]
Deleted : user_pref("CT3272278.FirstTime", "true");
Deleted : user_pref("CT3272278.FirstTimeFF3", "true");
Deleted : user_pref("CT3272278.InstallDate", "9/1/2013 22:52:36");
Deleted : user_pref("CT3272278.LoginRevertSettingsEnabled", true);
Deleted : user_pref("CT3272278.RevertSettingsEnabled", true);
Deleted : user_pref("CT3272278.SearchFromAddressBarUrl", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT327[...]
Deleted : user_pref("CT3272278.TopHitsConfig.enc", "ew0KICAgICJzcHJpdGVVcmwiOiAiaHR0cDovL3N0b3JhZ2UuY29uZHVpdC[...]
Deleted : user_pref("CT3272278.UserID", "UN98371165471941067");
Deleted : user_pref("CT3272278.addressBarTakeOverEnabledInHidden", "true");
Deleted : user_pref("CT3272278.autoDisableScopes", -1);
Deleted : user_pref("CT3272278.browser.search.defaultthis.engineName", true);
Deleted : user_pref("CT3272278.defaultSearch", "true");
Deleted : user_pref("CT3272278.enableAlerts", "always");
Deleted : user_pref("CT3272278.enableFix404ByUser", "FALSE");
Deleted : user_pref("CT3272278.enableSearchFromAddressBar", "true");
Deleted : user_pref("CT3272278.firstTimeDialogOpened", "true");
Deleted : user_pref("CT3272278.fixPageNotFoundError", "true");
Deleted : user_pref("CT3272278.fixPageNotFoundErrorByUser", "true");
Deleted : user_pref("CT3272278.fixPageNotFoundErrorInHidden", "true");
Deleted : user_pref("CT3272278.fixUrls", true);
Deleted : user_pref("CT3272278.installId", "conduit.exe");
Deleted : user_pref("CT3272278.installType", "conduitnsisintegration");
Deleted : user_pref("CT3272278.isCheckedStartAsHidden", true);
Deleted : user_pref("CT3272278.isEnableAllDialogs", "{\"dataType\":\"string\",\"data\":\"true\"}");
Deleted : user_pref("CT3272278.isFirstTimeToolbarLoading", "false");
Deleted : user_pref("CT3272278.isNewTabEnabled", false);
Deleted : user_pref("CT3272278.isPerformedSmartBarTransition", "true");
Deleted : user_pref("CT3272278.isToolbarShrinked", "{\"dataType\":\"string\",\"data\":\"false\"}");
Deleted : user_pref("CT3272278.keyword", true);
Deleted : user_pref("CT3272278.lastNewTabSettings", "{\"isEnabled\":false,\"newTabUrl\":\"hxxp://search.condui[...]
Deleted : user_pref("CT3272278.lastVersion", "10.14.65.43");
Deleted : user_pref("CT3272278.migrateAppsAndComponents", true);
Deleted : user_pref("CT3272278.navigationAliasesJson", "{\"EB_SEARCH_TERM\":\"\",\"EB_MAIN_FRAME_URL\":\"\",\"[...]
Deleted : user_pref("CT3272278.openThankYouPage", "false");
Deleted : user_pref("CT3272278.openUninstallPage", "true");
Deleted : user_pref("CT3272278.revertSettingsEnabled", "false");
Deleted : user_pref("CT3272278.search.searchAppId", "10000002");
Deleted : user_pref("CT3272278.search.searchCount", "0");
Deleted : user_pref("CT3272278.searchInNewTabEnabledByUser", "true");
Deleted : user_pref("CT3272278.searchInNewTabEnabledInHidden", "true");
Deleted : user_pref("CT3272278.selectToSearchBoxEnabled", "{\"dataType\":\"string\",\"data\":\"true\"}");
Deleted : user_pref("CT3272278.serviceLayer_service_login_isFirstLoginInvoked", "{\"dataType\":\"boolean\",\"d[...]
Deleted : user_pref("CT3272278.serviceLayer_service_login_loginCount", "{\"dataType\":\"number\",\"data\":\"4\[...]
Deleted : user_pref("CT3272278.serviceLayer_service_toolbarGrouping_activeCTID", "{\"dataType\":\"string\",\"d[...]
Deleted : user_pref("CT3272278.serviceLayer_service_toolbarGrouping_activeDownloadUrl", "{\"dataType\":\"strin[...]
Deleted : user_pref("CT3272278.serviceLayer_service_toolbarGrouping_activeToolbarName", "{\"dataType\":\"strin[...]
Deleted : user_pref("CT3272278.serviceLayer_service_toolbarGrouping_invoked", "{\"dataType\":\"string\",\"data[...]
Deleted : user_pref("CT3272278.serviceLayer_services_appTrackingFirstTime_lastUpdate", "1357769739887");
Deleted : user_pref("CT3272278.serviceLayer_services_login_10.13.40.15_lastUpdate", "1358374494921");
Deleted : user_pref("CT3272278.serviceLayer_services_login_10.14.40.128_lastUpdate", "1359324878808");
Deleted : user_pref("CT3272278.serviceLayer_services_login_10.14.42.7_lastUpdate", "1360792137823");
Deleted : user_pref("CT3272278.serviceLayer_services_login_10.14.65.43_lastUpdate", "1363521284627");
Deleted : user_pref("CT3272278.serviceLayer_services_searchAPI_lastUpdate", "1357768387083");
Deleted : user_pref("CT3272278.serviceLayer_services_serviceMap_lastUpdate", "1363467727549");
Deleted : user_pref("CT3272278.serviceLayer_services_toolbarSettings_lastUpdate", "1363521284963");
Deleted : user_pref("CT3272278.serviceLayer_services_translation_lastUpdate", "1363467729327");
Deleted : user_pref("CT3272278.settingsINI", true);
Deleted : user_pref("CT3272278.shouldFirstTimeDialog", "false");
Deleted : user_pref("CT3272278.smartbar.CTID", "CT3272278");
Deleted : user_pref("CT3272278.smartbar.Uninstall", "0");
Deleted : user_pref("CT3272278.smartbar.homepage", true);
Deleted : user_pref("CT3272278.smartbar.isHidden", true);
Deleted : user_pref("CT3272278.smartbar.toolbarName", "software 112 ");
Deleted : user_pref("CT3272278.startPage", "userChanged");
Deleted : user_pref("CT3272278.toolbarBornServerTime", "10-1-2013");
Deleted : user_pref("CT3272278.toolbarCurrentServerTime", "17-3-2013");
Deleted : user_pref("CT3272278_Firefox.csv", "[{\"from\":\"Abs Layer\",\"action\":\"loading toolbar\",\"time\"[...]
Deleted : user_pref("Smartbar.ConduitHomepagesList", "");
Deleted : user_pref("Smartbar.ConduitSearchEngineList", "software 112 Customized Web Search");
Deleted : user_pref("Smartbar.ConduitSearchUrlList", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT3272278[...]
Deleted : user_pref("Smartbar.SearchFromAddressBarSavedUrl", "data:text/plain,keyword.URL=hxxp://search.seznam[...]
Deleted : user_pref("Smartbar.keywordURLSelectedCTID", "CT3272278");
Deleted : user_pref("browser.search.selectedEngine", "software 112 Customized Web Search");
Deleted : user_pref("extensions.51083c38c6882.scode", "(function(){try{if('aol.com,mail.google.com,premiumrepo[...]
Deleted : user_pref("keyword.URL", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT3272278&SearchSource=2&CU[...]
Deleted : user_pref("smartbar.conduitHomepageList", "hxxp://search.conduit.com/?ctid=CT3272278&SearchSource=13[...]
Deleted : user_pref("smartbar.conduitSearchAddressUrlList", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT[...]
Deleted : user_pref("smartbar.machineId", "/JJWJGVEX++7BLYX0G2CY/ADG8CVEF0H5AMJPPIBCWABUDS6VMXEDWJ+WHDLDLB+BIM[...]
Deleted : user_pref("smartbar.originalHomepage", "hxxp://www.seznam.cz");
Deleted : user_pref("smartbar.originalSearchAddressUrl", "data:text/plain,keyword.URL=hxxp://search.seznam.cz/[...]
Deleted : user_pref("smartbar.originalSearchEngine", false);

-\\ Google Chrome v [Unable to get version]

File : C:\Documents and Settings\Uzivatel\Local Settings\Data aplikací\Google\Chrome\User Data\Default\Preferences

[OK] File is clean.

*************************

AdwCleaner[R3].txt - [12519 octets] - [17/03/2013 09:39:31]
AdwCleaner[R4].txt - [12673 octets] - [17/03/2013 14:24:06]
AdwCleaner[S2].txt - [12637 octets] - [17/03/2013 14:51:03]

########## EOF - C:\AdwCleaner[S2].txt - [12698 octets] ##########

#11 Příspěvek od **vyosek** » 17 bře 2013 15:25

Poprosim DDS http://forum.viry.cz/viewtopic.php?f=13&t=125171

PROSIM CTETE DUKLADNE NAVOD - TATO UTILITA MA VELKOU SCHOPNOST MAZAT A JE NUTNE JI APLIKOVAT JEN NA DOPORUCENI, JINAK VAM MUZE JIT SYSTEM DO KYTEK

Stahnete a ulozte na plochu Combofix http://download.bleepingcomputer.com/sUBs/ComboFix.exe

Vypnete vsechny rezidentni bezpecnostní programy - firewally, antiviry, antispywary apod.
Pokud mate Win XP spustte pod uctem Spravce\Administratora
Pokud mate Win Vista ci Win 7, kliknete na Combofix pravym a dejte Run As Administrator ci Spustit jako spravce
Ihned po startu se zobrazi stranka s licencnim ujednanim, pokracujte kliknutim na Ano
Pokud Vam CF nabidne instalaci Konzoly pro zotaveni, tak souhlaste
Dale postupujte dle pokynu, behem scanu nechte PC naprosto v klidu - nespoustejte zadne aplikace a neklikejte do zobrazujiciho se okna
Scan by mel trvat cca 10 min, ale pokud bude PC hodne zaneseno, muze se cas prodlouzit
Po dokonceni skenu a pripadnem restartu CF zobrazi log, pripadne jej najdete zde C:\ComboFix.txt, jeho obsah sem vlozte
Detailni postup vc. obrazku mate zde http://www.bleepingcomputer.com/combofi ... t-combofix

11188 · #12 Příspěvek od **11188** » 17 bře 2013 15:59

.
UNLESS SPECIFICALLY INSTRUCTED, DO NOT POST THIS LOG.
IF REQUESTED, ZIP IT UP & ATTACH IT
.
DDS (Ver_2012-11-20.01)
.
Systém Microsoft Windows XP Professional
Boot Device: \Device\HarddiskVolume1
Install Date: 2.8.2011 22:33:20
System Uptime: 17.3.2013 15:48:04 (0 hours ago)
.
Motherboard: Intel Corporation | | D946GZIS
Processor: Intel(R) Pentium(R) 4 CPU 3.00GHz | LGA 775 | 2997/200mhz
.
==== Disk Partitions =========================
.
A: is Removable
C: is FIXED (NTFS) - 74 GiB total, 45,102 GiB free.
D: is CDROM (CDFS)
.
==== Disabled Device Manager Items =============
.
==== System Restore Points ===================
.
RP88: 8.2.2013 17:50:12 - Kontrolní bod systému
RP89: 9.2.2013 22:50:10 - Kontrolní bod systému
RP90: 10.2.2013 23:04:25 - Kontrolní bod systému
RP91: 12.2.2013 15:00:07 - Kontrolní bod systému
RP92: 13.2.2013 13:52:47 - Software Distribution Service 3.0
RP93: 15.2.2013 3:52:48 - Kontrolní bod systému
RP94: 16.2.2013 14:59:44 - Kontrolní bod systému
RP95: 17.2.2013 15:17:22 - Kontrolní bod systému
RP96: 18.2.2013 16:10:56 - Kontrolní bod systému
RP97: 19.2.2013 21:24:57 - Kontrolní bod systému
RP98: 21.2.2013 0:00:04 - Kontrolní bod systému
RP99: 22.2.2013 21:59:29 - Kontrolní bod systému
RP100: 24.2.2013 17:51:47 - Kontrolní bod systému
RP101: 25.2.2013 22:17:12 - Kontrolní bod systému
RP102: 27.2.2013 19:04:13 - Kontrolní bod systému
RP103: 1.3.2013 23:38:16 - Removed Java(TM) 7 Update 2
RP104: 1.3.2013 23:39:36 - Installed Java 7 Update 15
RP105: 4.3.2013 0:03:33 - Kontrolní bod systému
RP106: 5.3.2013 17:19:30 - Kontrolní bod systému
RP107: 6.3.2013 18:46:30 - Kontrolní bod systému
RP108: 8.3.2013 11:44:24 - Kontrolní bod systému
RP109: 9.3.2013 12:45:31 - Kontrolní bod systému
RP110: 10.3.2013 21:33:44 - Kontrolní bod systému
RP111: 12.3.2013 9:24:56 - Kontrolní bod systému
RP112: 13.3.2013 19:17:57 - Kontrolní bod systému
RP113: 14.3.2013 10:38:23 - Software Distribution Service 3.0
RP114: 15.3.2013 12:01:25 - Kontrolní bod systému
RP115: 16.3.2013 16:41:57 - Kontrolní bod systému
.
==== Installed Programs ======================
.
ABBYY FineReader 10 Professional Edition
ABBYY FineReader 9.0 Professional Edition
Adobe Flash Player 11 ActiveX
Adobe Flash Player 11 Plugin
Adobe Reader X (10.1.6) - Czech
Aktualizace systému Windows Internet Explorer 8 (KB2447568)
Aktualizace systému Windows XP (KB2345886)
Aktualizace systému Windows XP (KB2641690)
Aktualizace systému Windows XP (KB2661254-v2)
Aktualizace systému Windows XP (KB2718704)
Aktualizace systému Windows XP (KB2736233)
Aktualizace systému Windows XP (KB2749655)
Aktualizace systému Windows XP (KB971737)
Aktualizace zabezpečení pro Microsoft Windows (KB2564958)
Aktualizace zabezpečení systému Windows Internet Explorer 8 (KB2510531)
Aktualizace zabezpečení systému Windows Internet Explorer 8 (KB2530548)
Aktualizace zabezpečení systému Windows Internet Explorer 8 (KB2544521)
Aktualizace zabezpečení systému Windows Internet Explorer 8 (KB2618444)
Aktualizace zabezpečení systému Windows Internet Explorer 8 (KB2647516)
Aktualizace zabezpečení systému Windows Internet Explorer 8 (KB2675157)
Aktualizace zabezpečení systému Windows Internet Explorer 8 (KB2699988)
Aktualizace zabezpečení systému Windows Internet Explorer 8 (KB2722913)
Aktualizace zabezpečení systému Windows Internet Explorer 8 (KB2744842)
Aktualizace zabezpečení systému Windows Internet Explorer 8 (KB2761465)
Aktualizace zabezpečení systému Windows Internet Explorer 8 (KB2792100)
Aktualizace zabezpečení systému Windows Internet Explorer 8 (KB2797052)
Aktualizace zabezpečení systému Windows Internet Explorer 8 (KB2799329)
Aktualizace zabezpečení systému Windows Internet Explorer 8 (KB2809289)
Aktualizace zabezpečení systému Windows Internet Explorer 8 (KB982381)
Aktualizace zabezpečení systému Windows XP (KB2536276-v2)
Aktualizace zabezpečení systému Windows XP (KB2544893-v2)
Aktualizace zabezpečení systému Windows XP (KB2566454)
Aktualizace zabezpečení systému Windows XP (KB2570222)
Aktualizace zabezpečení systému Windows XP (KB2570947)
Aktualizace zabezpečení systému Windows XP (KB2584146)
Aktualizace zabezpečení systému Windows XP (KB2585542)
Aktualizace zabezpečení systému Windows XP (KB2592799)
Aktualizace zabezpečení systému Windows XP (KB2598479)
Aktualizace zabezpečení systému Windows XP (KB2603381)
Aktualizace zabezpečení systému Windows XP (KB2618451)
Aktualizace zabezpečení systému Windows XP (KB2619339)
Aktualizace zabezpečení systému Windows XP (KB2620712)
Aktualizace zabezpečení systému Windows XP (KB2621440)
Aktualizace zabezpečení systému Windows XP (KB2624667)
Aktualizace zabezpečení systému Windows XP (KB2631813)
Aktualizace zabezpečení systému Windows XP (KB2633171)
Aktualizace zabezpečení systému Windows XP (KB2639417)
Aktualizace zabezpečení systému Windows XP (KB2641653)
Aktualizace zabezpečení systému Windows XP (KB2646524)
Aktualizace zabezpečení systému Windows XP (KB2647518)
Aktualizace zabezpečení systému Windows XP (KB2653956)
Aktualizace zabezpečení systému Windows XP (KB2655992)
Aktualizace zabezpečení systému Windows XP (KB2659262)
Aktualizace zabezpečení systému Windows XP (KB2660465)
Aktualizace zabezpečení systému Windows XP (KB2661637)
Aktualizace zabezpečení systému Windows XP (KB2676562)
Aktualizace zabezpečení systému Windows XP (KB2685939)
Aktualizace zabezpečení systému Windows XP (KB2686509)
Aktualizace zabezpečení systému Windows XP (KB2691442)
Aktualizace zabezpečení systému Windows XP (KB2695962)
Aktualizace zabezpečení systému Windows XP (KB2698365)
Aktualizace zabezpečení systému Windows XP (KB2705219)
Aktualizace zabezpečení systému Windows XP (KB2707511)
Aktualizace zabezpečení systému Windows XP (KB2709162)
Aktualizace zabezpečení systému Windows XP (KB2712808)
Aktualizace zabezpečení systému Windows XP (KB2718523)
Aktualizace zabezpečení systému Windows XP (KB2719985)
Aktualizace zabezpečení systému Windows XP (KB2723135)
Aktualizace zabezpečení systému Windows XP (KB2724197)
Aktualizace zabezpečení systému Windows XP (KB2727528)
Aktualizace zabezpečení systému Windows XP (KB2731847)
Aktualizace zabezpečení systému Windows XP (KB2753842-v2)
Aktualizace zabezpečení systému Windows XP (KB2753842)
Aktualizace zabezpečení systému Windows XP (KB2757638)
Aktualizace zabezpečení systému Windows XP (KB2758857)
Aktualizace zabezpečení systému Windows XP (KB2761226)
Aktualizace zabezpečení systému Windows XP (KB2770660)
Aktualizace zabezpečení systému Windows XP (KB2778344)
Aktualizace zabezpečení systému Windows XP (KB2779030)
Aktualizace zabezpečení systému Windows XP (KB2780091)
Aktualizace zabezpečení systému Windows XP (KB2799494)
Aktualizace zabezpečení systému Windows XP (KB2802968)
Aktualizace zabezpečení systému Windows XP (KB970430)
ATI Display Driver
avast! Free Antivirus
Balíček ovladače systému Windows - AnyDATA.NET (adusbser) Modem (07/08/2009 2.0.6.7)
Balíček ovladače systému Windows - AnyDATA.NET (adusbser) Ports (07/08/2009 2.0.6.7)
Balíček ovladače systému Windows - Nokia Modem (02/25/2011 4.7)
Balíček ovladače systému Windows - Nokia Modem (02/25/2011 7.01.0.9)
Balíček ovladače systému Windows - Nokia pccsmcfd “LegacyDriver” (05/31/2012 7.1.2.0)
Canon Easy-PhotoPrint EX
Canon MP Navigator EX 4.1
Canon MP140 series
Canon MX360 series MP Drivers
Canon My Printer
Canon Nástroj pro rychlou volbu
CCleaner
Combined Community Codec Pack 2010-10-10
ContinueToSave
Defraggler
DreamCom Server
Dropbox
E-Mailer 7.4 (17.05.2010)
Fakturky 5.2F
Fakturky 5.3F
Foxit PDF Editor
FreePDF Creator
Freeware HTI PDF Creator 4.0
Garmin MapSource
Garmin USB Drivers
Google Earth
Google Update Helper
ICQ7.7
IDT Audio
Intel(R) Network Connections Drivers
Java 7 Update 15
Java Auto Updater
Java(TM) 6 Update 26
LG Bluetooth Drivers
LG United Mobile Drivers
Macromedia Dreamweaver 8
Macromedia Extension Manager
Microsoft Kernel-Mode Driver Framework Feature Pack 1.9
Microsoft Office 2007 Service Pack 3 (SP3)
Microsoft Office Access MUI (Czech) 2007
Microsoft Office Enterprise 2007
Microsoft Office Excel MUI (Czech) 2007
Microsoft Office Groove MUI (Czech) 2007
Microsoft Office InfoPath MUI (Czech) 2007
Microsoft Office OneNote MUI (Czech) 2007
Microsoft Office Outlook MUI (Czech) 2007
Microsoft Office PowerPoint MUI (Czech) 2007
Microsoft Office Proof (Czech) 2007
Microsoft Office Proof (English) 2007
Microsoft Office Proof (German) 2007
Microsoft Office Proof (Slovak) 2007
Microsoft Office Proofing (Czech) 2007
Microsoft Office Proofing Tools 2007 Service Pack 3 (SP3)
Microsoft Office Publisher MUI (Czech) 2007
Microsoft Office Shared MUI (Czech) 2007
Microsoft Office Word MUI (Czech) 2007
Microsoft Silverlight
Microsoft Software Update for Web Folders (Czech) 12
Microsoft Visual C++ 2005 Redistributable
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161
Mozilla Firefox 19.0.2 (x86 cs)
Mozilla Maintenance Service
MSVC90_x86
MSXML 4.0 SP2 (KB954430)
MSXML 4.0 SP2 (KB973688)
MSXML 4.0 SP2 Parser and SDK
MSXML 6.0 Parser
Nokia Connectivity Cable Driver
Nokia PC Suite
Nvu 1.0
OpenOffice.org 3.2
Oprava Hotfix systému Windows XP (KB2633952)
Oprava Hotfix systému Windows XP (KB2756822)
Oprava Hotfix systému Windows XP (KB2779562)
PC Connectivity Solution
PhotoFiltre
Pokki
ProFact 3.0 Free
Registrace uživatele zařízení Canon MX360 series
SaveByClick
ScanSoft OmniPage SE 4
Security Update for CAPICOM (KB931906)
Security Update for Microsoft Office 2007 suites (KB2596615) 32-Bit Edition
Security Update for Microsoft Office 2007 suites (KB2596672) 32-Bit Edition
Security Update for Microsoft Office 2007 suites (KB2596744) 32-Bit Edition
Security Update for Microsoft Office 2007 suites (KB2596754) 32-Bit Edition
Security Update for Microsoft Office 2007 suites (KB2596785) 32-Bit Edition
Security Update for Microsoft Office 2007 suites (KB2596792) 32-Bit Edition
Security Update for Microsoft Office 2007 suites (KB2596871) 32-Bit Edition
Security Update for Microsoft Office 2007 suites (KB2597969) 32-Bit Edition
Security Update for Microsoft Office 2007 suites (KB2687311) 32-Bit Edition
Security Update for Microsoft Office 2007 suites (KB2687439) 32-Bit Edition
Security Update for Microsoft Office 2007 suites (KB2687441) 32-Bit Edition
Security Update for Microsoft Office 2007 suites (KB2687499) 32-Bit Edition
Security Update for Microsoft Office 2007 suites (KB2760416) 32-Bit Edition
Security Update for Microsoft Office Excel 2007 (KB2687307) 32-Bit Edition
Security Update for Microsoft Office InfoPath 2007 (KB2687440) 32-Bit Edition
Security Update for Microsoft Office PowerPoint 2007 (KB2596764) 32-Bit Edition
Security Update for Microsoft Office PowerPoint 2007 (KB2596912) 32-Bit Edition
Security Update for Microsoft Office Publisher 2007 (KB2596705) 32-Bit Edition
Security Update for Microsoft Office Word 2007 (KB2760421) 32-Bit Edition
Seznam Pošťák 2 (Všichni uživatelé tohoto počítače.)
SimpleOCR 3.1
Skype Click to Call
Skype™ 5.10
SUPERAntiSpyware
Sweet Home 3D version 3.7
TeamViewer 7
TOPO Czech 2010
Ufonuv fofr internet
Update for 2007 Microsoft Office System (KB967642)
Update for Microsoft Office 2007 suites (KB2596620) 32-Bit Edition
Update for Microsoft Office 2007 suites (KB2596660) 32-Bit Edition
Update for Microsoft Office 2007 suites (KB2596802) 32-Bit Edition
Update for Microsoft Office 2007 suites (KB2596848) 32-Bit Edition
Update for Microsoft Office 2007 suites (KB2767916) 32-Bit Edition
Update for Microsoft Office Outlook 2007 (KB2687404) 32-Bit Edition
Update for Microsoft Office Outlook 2007 Junk Email Filter (KB2768024) 32-Bit Edition
WebFldrs XP
Windows Driver Package - Garmin (grmnusb) GARMIN Devices (06/03/2009 2.3.0.0)
Windows Genuine Advantage Notifications (KB905474)
Windows Internet Explorer 8
WinRAR 4.01 (32-bit)
Wise Registry Cleaner 7.62
.
==== End Of File ===========================

11188 · #13 Příspěvek od **11188** » 17 bře 2013 17:40

Je z toho logu něco patrné nebo pozná někdo kde je tedy problém?díkas

#14 Příspěvek od **vyosek** » 17 bře 2013 18:11

Jednak jste dal spatny log, ja chci DDS.txt ne Attach.txt a pak jeste cekam na ComboFix

11188 · #15 Příspěvek od **11188** » 17 bře 2013 18:36

ComboFix 13-03-17.01 - Uzivatel 17.03.2013 18:21:15.2.2 - x86
Systém Microsoft Windows XP Professional 5.1.2600.3.1250.420.1029.18.1021.246 [GMT 1:00]
Spuštěný z: c:\documents and settings\Uzivatel\Dokumenty\ComboFix.exe
AV: avast! Antivirus *Disabled/Updated* {7591DB91-41F0-48A3-B128-1A293FD8233D}
.
.
((((((((((((((((((((((((( Soubory vytvořené od 2013-02-17 do 2013-03-17 )))))))))))))))))))))))))))))))
.
.
2013-03-17 08:35 . 2013-03-17 08:36 -------- d-----w- C:\rsit
2013-03-03 17:57 . 1999-11-12 04:11 183808 ----a-w- c:\windows\system32\BDEADMIN.CPL
2013-03-03 17:57 . 1999-01-20 04:01 210032 ----a-w- c:\windows\system32\DBCLIENT.DLL
2013-03-03 17:57 . 2013-03-03 17:57 -------- d-----w- c:\program files\Common Files\Borland Shared
2013-03-03 17:57 . 2013-03-03 17:57 -------- d-----w- c:\documents and settings\Uzivatel\Local Settings\Data aplikací\eXmind
2013-03-03 17:57 . 2013-03-03 18:02 -------- d-----w- c:\program files\ProFact 3.0 Free
2013-03-01 22:44 . 2013-03-14 17:47 -------- d-----w- c:\documents and settings\Uzivatel\Local Settings\Data aplikací\Pokki
2013-03-01 22:41 . 2013-03-01 22:42 -------- d-----w- c:\program files\Sweet Home 3D
2013-03-01 22:40 . 2013-03-01 22:40 -------- d-----w- c:\program files\Common Files\Java
2013-03-01 22:40 . 2013-03-01 22:40 94112 ----a-w- c:\windows\system32\WindowsAccessBridge.dll
.
.
.
(((((((((((((((((((((((((((((((((((((((( Find3M výpis ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2013-03-12 21:55 . 2012-04-10 07:16 693976 ----a-w- c:\windows\system32\FlashPlayerApp.exe
2013-03-12 21:55 . 2012-01-12 22:55 73432 ----a-w- c:\windows\system32\FlashPlayerCPLApp.cpl
2013-03-01 22:39 . 2011-08-02 21:17 143872 ----a-w- c:\windows\system32\javacpl.cpl
2013-03-01 22:39 . 2012-01-12 22:05 861088 -c--a-w- c:\windows\system32\npdeployJava1.dll
2013-03-01 22:39 . 2011-08-02 21:17 782240 ----a-w- c:\windows\system32\deployJava1.dll
2013-02-05 20:15 . 2009-03-19 18:41 916480 ----a-w- c:\windows\system32\wininet.dll
2013-02-05 20:15 . 2009-03-19 18:41 43520 ------w- c:\windows\system32\licmgr10.dll
2013-02-05 20:15 . 2009-03-19 18:41 1469440 ------w- c:\windows\system32\inetcpl.cpl
2013-02-05 05:53 . 2009-03-19 18:41 385024 ------w- c:\windows\system32\html.iec
2013-01-26 03:55 . 2008-04-14 06:51 552448 ----a-w- c:\windows\system32\oleaut32.dll
2013-01-07 07:26 . 2008-04-14 06:06 2150912 ----a-w- c:\windows\system32\ntoskrnl.exe
2013-01-07 07:26 . 2008-04-14 08:06 2029568 ----a-w- c:\windows\system32\ntkrnlpa.exe
2013-01-04 10:10 . 2008-04-14 05:45 1867264 ----a-w- c:\windows\system32\win32k.sys
2013-01-02 06:49 . 2008-04-14 06:52 148992 ----a-w- c:\windows\system32\mpg2splt.ax
2013-01-02 06:49 . 2008-04-14 06:51 1294848 ----a-w- c:\windows\system32\quartz.dll
2012-12-27 17:38 . 2012-12-27 17:38 106557 ----a-w- c:\windows\system32\btw_ci.dll
2013-03-08 16:01 . 2013-03-08 16:01 263064 ----a-w- c:\program files\mozilla firefox\components\browsercomps.dll
.
.
------- Sigcheck -------
Note: Unsigned files aren't necessarily malware.
.
[-] 2009-05-20 . 1E603EA2A3FDBAE9E5B88A8CB3C03124 . 1571840 . . [5.1.2600.5512] . . c:\windows\system32\sfcfiles.dll
.
(((((((((((((((((((((((((((((((((( Spouštěcí body v registru )))))))))))))))))))))))))))))))))))))))))))))
.
.
*Poznámka* prázdné záznamy a legitimní výchozí údaje nejsou zobrazeny.
REGEDIT4
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\00avast]
@="{472083B0-C522-11CF-8763-00608CC02F24}"
[HKEY_CLASSES_ROOT\CLSID\{472083B0-C522-11CF-8763-00608CC02F24}]
2012-07-03 16:21 121528 ----a-w- c:\program files\AVAST Software\Avast\ashShell.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt1]
@="{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}"
[HKEY_CLASSES_ROOT\CLSID\{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}]
2012-11-13 23:32 129272 ----a-w- c:\documents and settings\Uzivatel\Data aplikací\Dropbox\bin\DropboxExt.17.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt2]
@="{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}"
[HKEY_CLASSES_ROOT\CLSID\{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}]
2012-11-13 23:32 129272 ----a-w- c:\documents and settings\Uzivatel\Data aplikací\Dropbox\bin\DropboxExt.17.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt3]
@="{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}"
[HKEY_CLASSES_ROOT\CLSID\{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}]
2012-11-13 23:32 129272 ----a-w- c:\documents and settings\Uzivatel\Data aplikací\Dropbox\bin\DropboxExt.17.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt4]
@="{FB314EDC-A251-47B7-93E1-CDD82E34AF8B}"
[HKEY_CLASSES_ROOT\CLSID\{FB314EDC-A251-47B7-93E1-CDD82E34AF8B}]
2012-11-13 23:32 129272 ----a-w- c:\documents and settings\Uzivatel\Data aplikací\Dropbox\bin\DropboxExt.17.dll
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"ccleaner"="c:\programy\CCleaner\CCleaner.exe" [2011-06-24 2423608]
"Seznam Postak"="c:\program files\Seznam.cz\bin\postak.exe" [2012-01-10 491040]
"ICQ"="c:\program files\ICQ7.7\ICQ.exe" [2012-01-23 127040]
"Skype"="c:\program files\Skype\Phone\Skype.exe" [2012-07-13 17418928]
"PC Suite Tray"="c:\program files\Nokia\Nokia PC Suite 7\PCSuite.exe" [2012-06-26 1516632]
"SUPERAntiSpyware"="c:\program files\SUPERAntiSpyware\SUPERAntiSpyware.exe" [2012-11-01 4763008]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"SysTrayApp"="c:\program files\IDT\WDM\sttray.exe" [2009-03-12 483422]
"avast"="c:\program files\AVAST Software\Avast\avastUI.exe" [2012-07-03 4273976]
"SSBkgdUpdate"="c:\program files\Common Files\Scansoft Shared\SSBkgdUpdate\SSBkgdupdate.exe" [2006-10-25 210472]
"OpwareSE4"="c:\program files\ScanSoft\OmniPageSE4\OpwareSE4.exe" [2007-02-04 79400]
"Adobe ARM"="c:\program files\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2012-12-03 946352]
"CanonMyPrinter"="c:\program files\Canon\MyPrinter\BJMyPrt.exe" [2010-07-25 2569616]
"Free PDF Print Dispatcher"="c:\program files\pdfconverter.com\FreePDF Creator\itFPCPrnDisp.exe" [2010-01-15 25600]
"Bonus.SSR.FR10"="c:\program files\ABBYY FineReader 10\Bonus.ScreenshotReader.exe" [2011-04-13 941320]
"SunJavaUpdateSched"="c:\program files\Common Files\Java\Java Update\jusched.exe" [2012-07-03 252848]
.
[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="c:\windows\system32\CTFMON.EXE" [2008-04-14 15360]
.
[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\RunOnce]
"_nltide_2"="shell32" [X]
.
c:\documents and settings\Uzivatel\Nabídka Start\Programy\Po spuštění\
Dropbox.lnk - c:\documents and settings\Uzivatel\Data aplikací\Dropbox\bin\Dropbox.exe [2013-1-20 28539272]
OpenOffice.org 3.2.lnk - c:\program files\OpenOffice.org 3\program\quickstart.exe [2010-2-16 384512]
.
[hkey_local_machine\software\microsoft\windows\currentversion\explorer\ShellExecuteHooks]
"{5AE067D3-9AFB-48E0-853A-EBB7F4A000DA}"= "c:\program files\SUPERAntiSpyware\SASSEH.DLL" [2011-07-19 113024]
.
[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\session manager]
BootExecute REG_MULTI_SZ dfboottime \??\c:\windows\System32\dfboottime.cfg\0autocheck autochk *
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\!SASCORE]
@=""
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Wdf01000.sys]
@="Driver"
.
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\Network Diagnostic\\xpnetdiag.exe"=
"%windir%\\system32\\sessmgr.exe"=
"c:\\Program Files\\Microsoft Office\\Office12\\OUTLOOK.EXE"=
"c:\\Program Files\\ICQ7.7\\ICQ.exe"=
"c:\\Program Files\\TeamViewer\\Version7\\TeamViewer.exe"=
"c:\\Program Files\\TeamViewer\\Version7\\TeamViewer_Service.exe"=
"c:\\Documents and Settings\\Uzivatel\\Plocha\\Odorik.exe"=
"c:\\Documents and Settings\\Uzivatel\\Data aplikací\\Dropbox\\bin\\Dropbox.exe"=
"c:\\Program Files\\Skype\\Phone\\Skype.exe"=
.
R1 aswSnx;aswSnx;c:\windows\system32\drivers\aswSnx.sys [3.8.2011 19:16 721000]
R1 aswSP;aswSP;c:\windows\system32\drivers\aswSP.sys [3.8.2011 19:16 353688]
R1 SASDIFSV;SASDIFSV;c:\program files\SUPERAntiSpyware\sasdifsv.sys [22.7.2011 17:27 12880]
R1 SASKUTIL;SASKUTIL;c:\program files\SUPERAntiSpyware\SASKUTIL.SYS [12.7.2011 22:55 67664]
R2 !SASCORE;SAS Core Service;c:\program files\SUPERAntiSpyware\SASCore.exe [11.7.2012 19:54 116608]
R2 ABBYY.Licensing.FineReader.Professional.10.0;ABBYY FineReader 10 PE Licensing Service;c:\program files\Common Files\ABBYY\FineReader\10.00\Licensing\PE\NetworkLicenseServer.exe [22.7.2010 19:07 814344]
R2 ABBYY.Licensing.FineReader.Professional.9.0;ABBYY FineReader 9.0 PE Licensing Service;c:\program files\Common Files\ABBYY\FineReader\9.00\Licensing\PE\NetworkLicenseServer.exe [6.12.2007 21:03 660768]
R2 aswFsBlk;aswFsBlk;c:\windows\system32\drivers\aswFsBlk.sys [3.8.2011 19:16 21256]
R3 LgBttPort;LGE Bluetooth TransPort;c:\windows\system32\drivers\lgbtport.sys [29.9.2009 8:11 12160]
R3 lgbusenum;LG Bluetooth Bus Enumerator;c:\windows\system32\drivers\lgbtbus.sys [29.9.2009 8:11 10496]
R3 LGVMODEM;LGE Virtual Modem;c:\windows\system32\drivers\lgvmodem.sys [29.9.2009 8:11 12928]
S2 DreamService;DreamCom Server;c:\program files\DreamCom Server\dcsrvice.exe [25.1.2005 8:43 442368]
S2 Skype C2C Service;Skype C2C Service;c:\documents and settings\All Users\Data aplikací\Skype\Toolbars\Skype C2C Service\c2c_service.exe [31.1.2013 10:38 3289208]
S2 SkypeUpdate;Skype Updater;c:\program files\Skype\Updater\Updater.exe [13.7.2012 12:28 160944]
S3 adusbser;AnyDATA USB Device for Legacy Serial Communication;c:\windows\system32\drivers\adusbser.sys [3.5.2012 22:12 106880]
S3 cpuz133;cpuz133;\??\c:\docume~1\Uzivatel\LOCALS~1\Temp\cpuz133\cpuz133_x32.sys --> c:\docume~1\Uzivatel\LOCALS~1\Temp\cpuz133\cpuz133_x32.sys [?]
S3 nmwcdnsu;Nokia USB Flashing Phone Parent;c:\windows\system32\drivers\nmwcdnsu.sys [7.8.2012 20:04 137600]
S3 nmwcdnsuc;Nokia USB Flashing Generic;c:\windows\system32\drivers\nmwcdnsuc.sys [7.8.2012 20:04 8576]
.
Obsah adresáře 'Naplánované úlohy'
.
2013-03-17 c:\windows\Tasks\Adobe Flash Player Updater.job
- c:\windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2012-04-10 21:55]
.
2013-03-17 c:\windows\Tasks\avast! Emergency Update.job
- c:\program files\AVAST Software\Avast\AvastEmUpdate.exe [2012-07-19 16:21]
.
2013-03-17 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
- c:\program files\Google\Update\GoogleUpdate.exe [2012-01-13 00:11]
.
2013-03-17 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
- c:\program files\Google\Update\GoogleUpdate.exe [2012-01-13 00:11]
.
.
------- Doplňkový sken -------
.
uStart Page = hxxp://www.seznam.cz/
IE: E&xportovat do aplikace Microsoft Excel - c:\progra~1\MICROS~2\Office12\EXCEL.EXE/3000
IE: Send To &Bluetooth - c:\program files\WIDCOMM\Bluetooth Software\btsendto_ie_ctx.htm
IE: {{77F665FD-3F60-4B0A-AE14-EC124B7A7FCE} - c:\program files\ICQ7.7\ICQ.exe
TCP: DhcpNameServer = 10.0.0.138
FF - ProfilePath - c:\documents and settings\Uzivatel\Data aplikací\Mozilla\Firefox\Profiles\io68j5st.default-1357168552828\
FF - prefs.js: browser.startup.homepage - hxxp://www.seznam.cz/
FF - ExtSQL: 2013-01-29 22:16; 51083c38c67da@51083c38c6811.com; c:\documents and settings\Uzivatel\Data aplikacĂÂ\Mozilla\Firefox\Profiles\io68j5st.default-1357168552828\extensions\51083c38c67da@51083c38c6811.com
.
.
------- Asociace souborů -------
.
.reg=Regedit.Document
.
- - - - NEPLATNÉ POLOŽKY ODSTRANĚNÉ Z REGISTRU - - - -
.
HKCU-Run-Pokki - c:\documents and settings\Uzivatel\Local Settings\Application Data\Pokki\Engine\pokki.exe
AddRemove-ContinueToSave - c:\docume~1\ALLUSE~1\DATAAP~1\INSTAL~3\CONTIN~1\Setup.exe
AddRemove-{080C4A68-5A75-4098-A273-1257D3EF689E} - c:\docume~1\ALLUSE~1\DATAAP~1\INSTAL~3\{080C4~1\Setup.exe
AddRemove-{C1C6816E-CBB3-A748-85F9-A8B47B68985B} - c:\documents and settings\All Users\Data aplikací\continuetosave\uninstall.exe
AddRemove-{D9249364-1156-496E-AB85-597402C7B192} - c:\docume~1\ALLUSE~1\DATAAP~1\INSTAL~3\{D9249~1\Setup.exe
AddRemove-{F4C847C3-2A09-568F-B464-622B2F2B6535} - c:\docume~1\ALLUSE~1\DATAAP~1\INSTAL~3\{F4C84~1\Setup.exe
AddRemove-Pokki - c:\documents and settings\Uzivatel\Local Settings\Application Data\Pokki\Engine\Uninstall.exe
.
.
.
**************************************************************************
.
catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2013-03-17 18:28
Windows 5.1.2600 Service Pack 3 NTFS
.
skenování skrytých procesů ...
.
skenování skrytých položek 'Po spuštění' ...
.
skenování skrytých souborů ...
.
sken byl úspešně dokončen
skryté soubory: 0
.
**************************************************************************
.
[HKEY_LOCAL_MACHINE\System\ControlSet001\Services\InterBaseServer]
"ImagePath"="c:\program files\FireBird\bin\ibserver -s"
.
--------------------- ZAMKNUTÉ KLÍČE V REGISTRU ---------------------
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\WINDOWS\\system32\\Macromed\\Flash\\FlashUtil32_11_6_602_180_ActiveX.exe,-101"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\Elevation]
"Enabled"=dword:00000001
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\LocalServer32]
@="c:\\WINDOWS\\system32\\Macromed\\Flash\\FlashUtil32_11_6_602_180_ActiveX.exe"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
.
[HKEY_LOCAL_MACHINE\software\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="IFlashBroker5"
.
[HKEY_LOCAL_MACHINE\software\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"
.
[HKEY_LOCAL_MACHINE\software\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
.
--------------------- Knihovny navázané na běžící procesy ---------------------
.
- - - - - - - > 'winlogon.exe'(728)
c:\windows\system32\Ati2evxx.dll
.
- - - - - - - > 'explorer.exe'(2736)
c:\program files\ScanSoft\OmniPageSE4\OpHookSE4.dll
c:\documents and settings\Uzivatel\Data aplikací\Dropbox\bin\DropboxExt.17.dll
c:\windows\system32\webcheck.dll
.
Celkový čas: 2013-03-17 18:31:03
ComboFix-quarantined-files.txt 2013-03-17 17:31
.
Před spuštěním: Volných bajtů: 48 307 191 808
Po spuštění: Volných bajtů: 48 455 352 320
.
- - End Of File - - 2A4ECFBA2CC70E42B82B1ABB2ACEF3B5

VIRY.CZ

Spam na webu na IPOD

Spam na webu na IPOD

Re: Spam na webu na IPOD

Re: Spam na webu na IPOD

Re: Spam na webu na IPOD

Re: Spam na webu na IPOD

Re: Spam na webu na IPOD

Re: Spam na webu na IPOD

Re: Spam na webu na IPOD

Re: Spam na webu na IPOD

Re: Spam na webu na IPOD

Re: Spam na webu na IPOD

Re: Spam na webu na IPOD

Re: Spam na webu na IPOD

Re: Spam na webu na IPOD

Re: Spam na webu na IPOD