VIRY.CZ

Pomáháme v boji s počítačovou havěti!
https://forum.viry.cz:443/

Prosím o kontolu, virus policie ČR.

https://forum.viry.cz:443/viewtopic.php?t=132770

Stránka 1 z 2

Prosím o kontolu, virus policie ČR.

Napsal: 15 zář 2013 07:24
od RomanL2
Dobrý den, kamarád mi donesl NB s tím, že někde něco odklikl a následovně mu vyskočil virus "Policie ČR". Tady se to neprojevilo, nicméně NB se chová jaksi divně, prosím tedy o kontrolu. RSIT se nějak nechtěl spustit, tak jsem ho přejmenoval a spustil v nouzovém režimu, potom proběhl.
Zde log z RSIT:

Logfile of random's system information tool 1.09 (written by random/random)
Run by Martin - Micka at 2013-08-24 07:13:13
WIN_XP Service Pack 3
System drive C: has 400 MB (10%) free of 4 GB
Total RAM: 1015 MB (83% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 7:15:21, on 24.8.2013
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Safe mode

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\Documents and Settings\Martin - Micka\Plocha\AAA.com
C:\Program Files\trend micro\Martin - Micka.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.seznam.cz/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Odkazy
O1 - Hosts: 80.188.162.134 mv-zfp01.mv-zfp.local
O1 - Hosts: 80.188.162.134 mv-zfp.local
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: AVG Do Not Track - {31332EEF-CB9F-458F-AFEB-D30E9A66B6BA} - C:\Program Files\AVG\AVG2012\avgdtiex.dll
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre6\bin\ssv.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O4 - HKLM\..\Run: [IgfxTray] C:\WINDOWS\system32\igfxtray.exe
O4 - HKLM\..\Run: [HotKeysCmds] C:\WINDOWS\system32\hkcmd.exe
O4 - HKLM\..\Run: [Persistence] C:\WINDOWS\system32\igfxpers.exe
O4 - HKLM\..\Run: [AsusTray] C:\Program Files\EeePC\ACPI\AsTray.exe
O4 - HKLM\..\Run: [AsusACPIServer] C:\Program Files\EeePC\ACPI\AsAcpiSvr.exe
O4 - HKLM\..\Run: [AsusEPCMonitor] C:\Program Files\EeePC\ACPI\AsEPCMon.exe
O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE
O4 - HKLM\..\Run: [AVG_TRAY] "C:\Program Files\AVG\AVG2012\avgtray.exe"
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [ISUSPM] "C:\Documents and Settings\All Users\Data aplikací\Macrovision\FLEXnet Connect\6\ISUSPM.exe" -scheduler
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User '?')
O4 - HKUS\S-1-5-21-182040007-1575703354-185196347-1006\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe (User '?')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe (User '?')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe (User 'Default user')
O4 - S-1-5-21-182040007-1575703354-185196347-1006 Startup: Kooperativa - PDF Server.lnk = C:\Program Files\Kooperativa\KoopPxBN\KoopPDFServerSA.exe (User '?')
O4 - S-1-5-21-182040007-1575703354-185196347-1006 Startup: qautxkxkpjiqtmeskkc.lnk = C:\WINDOWS\system32\rundll32.exe (User '?')
O4 - Startup: Kooperativa - PDF Server.lnk = C:\Program Files\Kooperativa\KoopPxBN\KoopPDFServerSA.exe
O4 - Startup: qautxkxkpjiqtmeskkc.lnk = C:\WINDOWS\system32\rundll32.exe
O4 - Global Startup: AutoRun OSCleaner.lnk = ?
O4 - Global Startup: Bluetooth.lnk = ?
O4 - Global Startup: SuperHybridEngine.lnk = ?
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Excel - res://D:\PROGRA~1\MICROS~3\Office10\EXCEL.EXE/3000
O8 - Extra context menu item: Odeslat do zařízení &Bluetooth... - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie_ctx.htm
O8 - Extra context menu item: Odeslat do zařízení Bluetooth - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
O9 - Extra button: AVG Do Not Track - {68BCFFE1-A2DA-4B40-9068-87ECBFC19D16} - C:\Program Files\AVG\AVG2012\avgdtiex.dll
O9 - Extra button: @btrez.dll,-4015 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
O9 - Extra 'Tools' menuitem: @btrez.dll,-12650 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://www.update.microsoft.com/microso ... 7993014187
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://www.update.microsoft.com/microso ... 7992855671
O18 - Protocol: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - C:\Program Files\AVG\AVG2012\avgpp.dll
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O22 - SharedTaskScheduler: Browseui preloader - {438755C2-A8BA-11D1-B96B-00A0C90312E1} - C:\WINDOWS\system32\browseui.dll
O22 - SharedTaskScheduler: Proces mezipaměti kategorií součástí - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\WINDOWS\system32\browseui.dll
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\WINDOWS\system32\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: AVGIDSAgent - AVG Technologies CZ, s.r.o. - C:\Program Files\AVG\AVG2012\AVGIDSAgent.exe
O23 - Service: AVG WatchDog (avgwd) - AVG Technologies CZ, s.r.o. - C:\Program Files\AVG\AVG2012\avgwdsvc.exe
O23 - Service: Bluetooth Service (btwdins) - Broadcom Corporation. - C:\Program Files\WIDCOMM\Bluetooth Software\bin\btwdins.exe
O23 - Service: Služba Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: Služba Google Update (gupdatem) (gupdatem) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: IviRegMgr - InterVideo - C:\Program Files\Common Files\InterVideo\RegMgr\iviRegMgr.exe
O23 - Service: KoopPdfService - Unknown owner - C:\Program Files\Kooperativa\Services\KoopPDFServer.exe
O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Mozilla Foundation - C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe
O23 - Service: Skype Updater (SkypeUpdate) - Skype Technologies - C:\Program Files\Skype\Updater\Updater.exe

--
End of file - 6872 bytes

======Scheduled tasks folder======

C:\WINDOWS\tasks\Adobe Flash Player Updater.job
C:\WINDOWS\tasks\GoogleUpdateTaskMachineCore.job
C:\WINDOWS\tasks\GoogleUpdateTaskMachineUA.job

=========Mozilla firefox=========

ProfilePath - C:\Documents and Settings\Martin - Micka\Data aplikací\Mozilla\Firefox\Profiles\toyemuvc.default

"{20a82645-c095-46ed-80e3-08825760534b}"=C:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\
"{F53C93F1-07D5-430c-86D4-C9531B27DFAF}"=C:\Program Files\AVG\AVG2012\Firefox\DoNotTrack\


[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 10
"Path"=C:\WINDOWS\system32\Macromed\Flash\NPSWF32.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@java.com/JavaPlugin]
"Description"=Oracle® Next Generation Java™ Plug-In
"Path"=C:\Program Files\Java\jre6\bin\plugin2\npjp2.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@microsoft.com/WPF,version=3.5]
"Description"=Windows Presentation Foundation plug-in for Mozilla browsers
"Path"=C:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@tools.google.com/Google Update;version=3]
"Description"=Google Update
"Path"=C:\Program Files\Google\Update\1.3.21.153\npGoogleUpdate3.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@tools.google.com/Google Update;version=9]
"Description"=Google Update
"Path"=C:\Program Files\Google\Update\1.3.21.153\npGoogleUpdate3.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\Adobe Reader]
"Description"=Handles PDFs in-place in Firefox
"Path"=C:\Program Files\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll

C:\Program Files\Mozilla Firefox\extensions\
{972ce4c6-7e08-4474-a285-3208198ce6fd}

C:\Program Files\Mozilla Firefox\components\
binary.manifest
browsercomps.dll

C:\Program Files\Mozilla Firefox\searchplugins\
google.xml
heureka-cz.xml
jyxo-cz.xml
seznam-cz.xml
slunecnice-cz.xml
wikipedia-cz.xml

C:\Documents and Settings\Martin - Micka\Data aplikací\Mozilla\Firefox\Profiles\toyemuvc.default\extensions\
{ea614400-e918-4741-9a97-7a972ff7c30b}

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
Adobe PDF Link Helper - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2012-01-03 63912]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{31332EEF-CB9F-458F-AFEB-D30E9A66B6BA}]
AVG Do Not Track - C:\Program Files\AVG\AVG2012\avgdtiex.dll [2012-08-13 938104]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
Java(tm) Plug-In SSV Helper - C:\Program Files\Java\jre6\bin\ssv.dll [2012-02-25 325408]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre6\bin\jp2ssv.dll [2012-02-25 42272]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"IgfxTray"=C:\WINDOWS\system32\igfxtray.exe [2007-12-19 135168]
"HotKeysCmds"=C:\WINDOWS\system32\hkcmd.exe [2007-12-19 159744]
"Persistence"=C:\WINDOWS\system32\igfxpers.exe [2007-12-19 131072]
"AsusTray"=C:\Program Files\EeePC\ACPI\AsTray.exe [2008-06-03 98304]
"AsusACPIServer"=C:\Program Files\EeePC\ACPI\AsAcpiSvr.exe [2008-06-03 479232]
"AsusEPCMonitor"=C:\Program Files\EeePC\ACPI\AsEPCMon.exe [2008-05-21 94208]
"RTHDCPL"=C:\WINDOWS\RTHDCPL.EXE [2011-12-05 20065384]
"AVG_TRAY"=C:\Program Files\AVG\AVG2012\avgtray.exe [2012-07-31 2596984]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"=C:\WINDOWS\system32\ctfmon.exe [2008-04-14 15360]
"ISUSPM"=C:\Documents and Settings\All Users\Data aplikací\Macrovision\FLEXnet Connect\6\ISUSPM.exe [2007-07-12 226904]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe Reader Speed Launcher]
C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\MsnMsgr]
C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe /background []

C:\Documents and Settings\All Users\Nabídka Start\Programy\Po spuštění
AutoRun OSCleaner.lnk - C:\Program Files\ASUS\Asus OS Cleaner\AsOSCleaner.exe
Bluetooth.lnk - C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe
SuperHybridEngine.lnk - C:\Program Files\Asus\EeePC\Super Hybrid Engine\SuperHybridEngine.exe

C:\Documents and Settings\Martin - Micka\Nabídka Start\Programy\Po spuštění
Kooperativa - PDF Server.lnk - C:\Program Files\Kooperativa\KoopPxBN\KoopPDFServerSA.exe
qautxkxkpjiqtmeskkc.lnk - C:\WINDOWS\system32\rundll32.exe

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\igfxcui]
C:\WINDOWS\system32\igfxdev.dll [2007-12-19 208896]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=145

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"HonorAutoRunSetting"=1

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"C:\Program Files\Windows Live\Messenger\msnmsgr.exe"="C:\Program Files\Windows Live\Messenger\msnmsgr.exe:*:Enabled:Windows Live Messenger"
"C:\Program Files\Windows Live\Messenger\livecall.exe"="C:\Program Files\Windows Live\Messenger\livecall.exe:*:Enabled:Windows Live Messenger (Phone)"
"C:\WINDOWS\system32\dxdiag.exe"="C:\WINDOWS\system32\dxdiag.exe:*:Enabled:Microsoft DirectX Diagnostic Tool"
"C:\Program Files\Cue\Director\Rtwdf32.exe"="C:\Program Files\Cue\Director\Rtwdf32.exe:*:Enabled:Cue Design Director RunTime for Win32"
"D:\Program Files\Microsoft Office Communicator\communicator.exe"="D:\Program Files\Microsoft Office Communicator\communicator.exe:*:Enabled:Communicator"
"D:\Program Files\Cue\Director\Rtwdf32.exe"="D:\Program Files\Cue\Director\Rtwdf32.exe:*:Enabled:Cue Design Director RunTime for Win32"
"D:\Program Files\Skype\Phone\Skype.exe"="D:\Program Files\Skype\Phone\Skype.exe:*:Enabled:Skype"
"D:\Program Files\AVG\AVG2012\avgmfapx.exe"="D:\Program Files\AVG\AVG2012\avgmfapx.exe:*:Enabled:Instalátor AVG"
"D:\Program Files\AVG\AVG2012\avgnsx.exe"="D:\Program Files\AVG\AVG2012\avgnsx.exe:*:Enabled:Webový štít"
"D:\Program Files\AVG\AVG2012\avgdiagex.exe"="D:\Program Files\AVG\AVG2012\avgdiagex.exe:*:Enabled:AVG Diagnostika 2012"
"D:\Program Files\AVG\AVG2012\avgemcx.exe"="D:\Program Files\AVG\AVG2012\avgemcx.exe:*:Enabled:Obecná kontrola pošty"
"C:\Program Files\Skype\Phone\Skype.exe"="C:\Program Files\Skype\Phone\Skype.exe:*:Enabled:Skype. Take a deep breath "

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"C:\Program Files\Windows Live\Messenger\msnmsgr.exe"="C:\Program Files\Windows Live\Messenger\msnmsgr.exe:*:Enabled:Windows Live Messenger"
"C:\Program Files\Windows Live\Messenger\livecall.exe"="C:\Program Files\Windows Live\Messenger\livecall.exe:*:Enabled:Windows Live Messenger (Phone)"
"D:\Program Files\Microsoft Office Communicator\communicator.exe"="D:\Program Files\Microsoft Office Communicator\communicator.exe:*:Enabled:Microsoft Office Communicator 2007"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"midimapper"=midimap.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msadpcm"=msadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.trspch"=tssoft32.acm
"vidc.cvid"=iccvid.dll
"VIDC.I420"=msh263.drv
"vidc.iv31"=ir32_32.dll
"vidc.iv32"=ir32_32.dll
"vidc.iv41"=ir41_32.ax
"VIDC.IYUV"=iyuv_32.dll
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"VIDC.UYVY"=msyuv.dll
"VIDC.YUY2"=msyuv.dll
"VIDC.YVU9"=tsbyuv.dll
"VIDC.YVYU"=msyuv.dll
"wavemapper"=msacm32.drv
"MSVideo8"=VfWWDM32.dll
"msacm.msg723"=msg723.acm
"vidc.M263"=msh263.drv
"vidc.M261"=msh261.drv
"msacm.msaudio1"=msaud32.acm
"msacm.sl_anet"=sl_anet.acm
"msacm.iac2"=C:\WINDOWS\system32\iac25_32.ax
"vidc.iv50"=ir50_32.dll
"msacm.l3acm"=C:\WINDOWS\system32\l3codeca.acm
"wave4"=wdmaud.drv
"midi4"=wdmaud.drv
"mixer4"=wdmaud.drv
"aux1"=wdmaud.drv
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"wave2"=wdmaud.drv
"midi2"=wdmaud.drv
"mixer2"=wdmaud.drv
"wave3"=wdmaud.drv
"midi3"=wdmaud.drv
"mixer3"=wdmaud.drv
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv

======List of files/folders created in the last 1 month======

2013-08-24 07:11:34 ----A---- C:\WINDOWS\ntbtlog.txt
2013-08-24 06:57:09 ----D---- C:\Program Files\trend micro
2013-08-24 06:56:39 ----D---- C:\rsit

======List of files/folders modified in the last 1 month======

2013-08-24 07:11:34 ----D---- C:\WINDOWS
2013-08-24 07:10:48 ----A---- C:\WINDOWS\SchedLgU.Txt
2013-08-24 07:00:25 ----D---- C:\WINDOWS\Prefetch
2013-08-24 06:41:52 ----D---- C:\WINDOWS\Temp
2013-08-24 06:41:52 ----D---- C:\WINDOWS\system32
2013-08-24 06:41:41 ----A---- C:\WINDOWS\system32\FlashPlayerApp.exe

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 AVGIDSHX;AVGIDSHX; C:\WINDOWS\system32\DRIVERS\avgidshx.sys [2012-04-19 24896]
R0 Avgrkx86;AVG Anti-Rootkit Driver; C:\WINDOWS\system32\DRIVERS\avgrkx86.sys [2012-01-31 31952]
R3 AsusACPI;ASUS ACPI Driver; C:\WINDOWS\system32\DRIVERS\ASUSACPI.sys [2007-07-26 11264]
R3 HDAudBus;Ovladač Microsoft UAA pro sběrnici High Definition Audio; C:\WINDOWS\system32\DRIVERS\HDAudBus.sys [2008-04-14 144384]
R3 HidUsb;Ovladač třídy standardu HID; C:\WINDOWS\system32\DRIVERS\hidusb.sys [2008-04-14 10368]
R3 mouhid;Ovladač myši standardu HID; C:\WINDOWS\system32\DRIVERS\mouhid.sys [2001-10-24 12160]
R3 usbuhci;Ovladač Microsoft univerzálního hostitelského řadiče USB od společnosti Microsoft; C:\WINDOWS\system32\DRIVERS\usbuhci.sys [2008-04-14 20608]
S1 Avgldx86;AVG AVI Loader Driver; C:\WINDOWS\system32\DRIVERS\avgldx86.sys [2012-11-08 250080]
S1 Avgmfx86;AVG Mini-Filter Resident Anti-Virus Shield; C:\WINDOWS\system32\DRIVERS\avgmfx86.sys [2011-12-23 41040]
S1 Avgtdix;AVG TDI Driver; C:\WINDOWS\system32\DRIVERS\avgtdix.sys [2012-08-24 301920]
S1 intelppm;Řadič procesoru Intel; C:\WINDOWS\system32\DRIVERS\intelppm.sys [2008-04-14 40192]
S3 adusbser;AnyDATA USB Device for Legacy Serial Communication; C:\WINDOWS\system32\DRIVERS\adusbser.sys []
S3 Ambfilt;Ambfilt; C:\WINDOWS\system32\drivers\Ambfilt.sys [2009-11-18 1691480]
S3 AVGIDSDriver;AVGIDSDriver; C:\WINDOWS\system32\DRIVERS\avgidsdriverx.sys [2012-12-10 142176]
S3 AVGIDSFilter;AVGIDSFilter; C:\WINDOWS\system32\DRIVERS\avgidsfilterx.sys [2011-12-23 24144]
S3 AVGIDSShim;AVGIDSShim; C:\WINDOWS\system32\DRIVERS\avgidsshimx.sys [2011-12-23 17232]
S3 btaudio;Zvukové zařízení Bluetooth; C:\WINDOWS\system32\drivers\btaudio.sys [2008-04-15 534440]
S3 BTDriver;Bluetooth Virtual Communications Driver; C:\WINDOWS\system32\DRIVERS\btport.sys []
S3 BTKRNL;Enumenátor sběrnice Bluetooth; C:\WINDOWS\system32\DRIVERS\btkrnl.sys [2008-04-15 990632]
S3 BTWDNDIS;Bluetooth LAN Access Server; C:\WINDOWS\system32\DRIVERS\btwdndis.sys []
S3 btwhid;btwhid; C:\WINDOWS\system32\DRIVERS\btwhid.sys []
S3 BTWUSB;WIDCOMM USB Bluetooth Driver; C:\WINDOWS\System32\Drivers\btwusb.sys [2008-03-27 47272]
S3 CCDECODE;Dekodér Closed Caption; C:\WINDOWS\system32\DRIVERS\CCDECODE.sys [2008-04-14 17024]
S3 hwdatacard;Huawei DataCard USB Modem and USB Serial; C:\WINDOWS\system32\DRIVERS\ewusbmdm.sys [2008-03-28 101120]
S3 ialm;ialm; C:\WINDOWS\system32\DRIVERS\igxpmp32.sys [2007-12-19 5854688]
S3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\WINDOWS\system32\drivers\RtkHDAud.sys [2011-12-13 7069288]
S3 L1e;Miniport Driver for Atheros AR8121/AR8113/AR8114 PCI-E Ethernet Controller; C:\WINDOWS\system32\DRIVERS\l1e51x86.sys [2008-03-12 36864]
S3 Monfilt;Monfilt; C:\WINDOWS\system32\drivers\Monfilt.sys [2009-11-18 1395800]
S3 MSTEE;Microsoft Streaming Tee/Sink-to-Sink Converter; C:\WINDOWS\system32\drivers\MSTEE.sys [2008-04-14 5504]
S3 NABTSFEC;NABTS/FEC VBI Codec; C:\WINDOWS\system32\DRIVERS\NABTSFEC.sys [2008-04-14 85248]
S3 NdisIP;Microsoft TV/Video Connection; C:\WINDOWS\system32\DRIVERS\NdisIP.sys [2008-04-14 10880]
S3 RT80x86;Ralink 802.11n Wireless Driver; C:\WINDOWS\system32\DRIVERS\RT2860.sys [2008-03-28 625024]
S3 SLIP;BDA Slip De-Framer; C:\WINDOWS\system32\DRIVERS\SLIP.sys [2008-04-14 11136]
S3 streamip;BDA IPSink; C:\WINDOWS\system32\DRIVERS\StreamIP.sys [2008-04-14 15232]
S3 usbccgp;Obecný nadřazený ovladač Microsoft USB; C:\WINDOWS\system32\DRIVERS\usbccgp.sys [2008-04-14 32128]
S3 usbprint;Třída USB Printer; C:\WINDOWS\system32\DRIVERS\usbprint.sys [2008-04-14 25856]
S3 usbstor;Ovladač velkokapacitního paměťového zařízení USB; C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS [2008-04-14 26368]
S3 usbvideo;Zobrazovací zařízení USB (WDM); C:\WINDOWS\System32\Drivers\usbvideo.sys [2008-04-14 121984]
S3 WSTCODEC;Dálnopisný kodek světového standardu; C:\WINDOWS\system32\DRIVERS\WSTCODEC.SYS [2008-04-14 19200]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

S2 AVGIDSAgent;AVGIDSAgent; C:\Program Files\AVG\AVG2012\AVGIDSAgent.exe [2012-08-13 5167736]
S2 avgwd;AVG WatchDog; C:\Program Files\AVG\AVG2012\avgwdsvc.exe [2012-02-14 193288]
S2 btwdins;Bluetooth Service; C:\Program Files\WIDCOMM\Bluetooth Software\bin\btwdins.exe [2008-04-14 342624]
S2 gupdate;Služba Google Update (gupdate); C:\Program Files\Google\Update\GoogleUpdate.exe [2013-01-13 116648]
S2 IviRegMgr;IviRegMgr; C:\Program Files\Common Files\InterVideo\RegMgr\iviRegMgr.exe [2007-01-04 112152]
S2 KoopPdfService;KoopPdfService; C:\Program Files\Kooperativa\Services\KoopPDFServer.exe [2010-07-10 450560]
S2 SkypeUpdate;Skype Updater; C:\Program Files\Skype\Updater\Updater.exe [2012-07-13 160944]
S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service; C:\WINDOWS\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2013-08-24 257416]
S3 aspnet_state;ASP.NET State Service; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe [2008-07-25 34312]
S3 clr_optimization_v2.0.50727_32;.NET Runtime Optimization Service v2.0.50727_X86; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe [2008-07-25 69632]
S3 FontCache3.0.0.0;Windows Presentation Foundation Font Cache 3.0.0.0; C:\WINDOWS\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe [2008-07-29 46104]
S3 gupdatem;Služba Google Update (gupdatem); C:\Program Files\Google\Update\GoogleUpdate.exe [2013-01-13 116648]
S3 idsvc;Windows CardSpace; C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe [2008-07-29 881664]
S3 MozillaMaintenance;Mozilla Maintenance Service; C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe [2013-04-16 115608]
S4 NetTcpPortSharing;Net.Tcp Port Sharing Service; C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe [2008-07-29 132096]

-----------------EOF-----------------

Re: Prosím o kontolu, virus policie ČR.

Napsal: 15 zář 2013 07:27
od vyosek
Zdravim :)

:arrow: Toto je zalostne maly disk, syste se kazdou chvili dusi...na windows a dalsi SW pro bezny chod je potreba aspon 10GB disk
System drive C: has 400 MB (10%) free of 4 GB
:arrow: Trvate na antiviru AVG - u nas neni moc obliben - vysoka zatez systemu, slabsi detekce :?:

:arrow: Jedna se do domaci ntb nebo nejaky pracovni\firemni?

Re: Prosím o kontolu, virus policie ČR.

Napsal: 15 zář 2013 07:51
od RomanL2
Nijak moc na AVG netrvám, je tam pokud vím u něho nějak historicky od začátku, a NB je čistě soukromý, je to jenom malý Asus EEE s diskem 4GB v podstatě jenom na hraní.

Re: Prosím o kontolu, virus policie ČR.

Napsal: 15 zář 2013 07:56
od vyosek
:arrow: Avg je spise parodie na antivir :arcisit:

:arrow: Odinstalujte Avg a pak pouzijte jeste http://download.avg.com/filedir/util/av ... 2_2125.exe

:arrow: Nainstalujte Avast Free http://www.avast.com/get/gWR5mo92

:arrow: Dejte log z FRSTL http://forum.viry.cz/viewtopic.php?f=13&t=132519

Re: Prosím o kontolu, virus policie ČR.

Napsal: 15 zář 2013 09:34
od RomanL2
Tak to AVG bylo nějaké rozbité, nešlo normálně ani odinstalovat, zabral až ten odinstalátor. Farbar nejde spustit, dává jakousi hlášku o nutnosti stáhnout ho z konkrétního místa, ale ani to nejde. Dám to do přílohy.

EDIT: Už mi to došlo, musí to být spuštěno z IE, ne z Chrome. Zde log:

Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 15-09-2013 03
Ran by Martin - Micka (administrator) on YOUR-CFAVE4Y9J6 on 15-09-2013 10:43:51
Running from D:\Temp\Dočasné soubory Internetu\Content.IE5\I6E10OSP
Microsoft Windows XP Service Pack 3 (X86) OS Language: Czech
Internet Explorer Version 8
Boot Mode: Normal

==================== Could not list processes ===============

==================== Registry (Whitelisted) ==================

HKLM\...\Run: [HotKeysCmds] - C:\WINDOWS\system32\hkcmd.exe [ ] ()
HKLM\...\Run: [AsusTray] - C:\Program Files\EeePC\ACPI\AsTray.exe [98304 2008-06-03] (ASUSTeK Computer Inc.)
HKLM\...\Run: [AsusACPIServer] - C:\Program Files\EeePC\ACPI\AsAcpiSvr.exe [479232 2008-06-03] (ASUSTeK Computer Inc.)
HKLM\...\Run: [AsusEPCMonitor] - C:\Program Files\EeePC\ACPI\AsEPCMon.exe [94208 2008-05-21] (ASUSTeK Computer Inc.)
HKLM\...\Run: [RTHDCPL] - C:\Windows\RTHDCPL.EXE [20065384 2011-12-05] (Realtek Semiconductor Corp.)
HKLM\...\Run: [avast] - D:\Program Files\AVAST Software\Avast\avastUI.exe [4858968 2013-05-09] (AVAST Software)
MountPoints2: {1bb34d4c-bd10-11e1-a7ed-0015afe715d4} - E:\StartVMCLite.exe
MountPoints2: {1bb34d4d-bd10-11e1-a7ed-0015afe715d4} - E:\StartVMCLite.exe
MountPoints2: {30a07e06-443d-11e1-a7cf-0015afe715d4} - E:\StartVMCLite.exe
MountPoints2: {42400b0e-6300-11e1-a7e1-0015afe715d4} - E:\StartVMCLite.exe
MountPoints2: {702e6002-4bba-11de-a73c-0015afe715d4} - E:\LaunchU3.exe -a
MountPoints2: {7606fb18-8ac4-11dd-a670-0015afe715d4} - E:\LaunchU3.exe -a
Startup: C:\Documents and Settings\All Users\Nabídka Start\Programy\Po spuštění\AutoRun OSCleaner.lnk
ShortcutTarget: AutoRun OSCleaner.lnk -> C:\Program Files\ASUS\Asus OS Cleaner\AsOSCleaner.exe ()
Startup: C:\Documents and Settings\All Users\Nabídka Start\Programy\Po spuštění\Bluetooth.lnk
ShortcutTarget: Bluetooth.lnk -> C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe (Broadcom Corporation.)
Startup: C:\Documents and Settings\All Users\Nabídka Start\Programy\Po spuštění\SuperHybridEngine.lnk
ShortcutTarget: SuperHybridEngine.lnk -> C:\Program Files\Asus\EeePC\Super Hybrid Engine\SuperHybridEngine.exe (ASUSTeK Computer Inc.)

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.seznam.cz/
HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.microsoft.com/isapi/redir.dl ... r=iesearch
SearchScopes: HKCU - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
BHO: Adobe PDF Link Helper - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll (Adobe Systems Incorporated)
BHO: AVG Do Not Track - {31332EEF-CB9F-458F-AFEB-D30E9A66B6BA} - C:\Program Files\AVG\AVG2012\avgdtiex.dll No File
BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre6\bin\ssv.dll (Sun Microsystems, Inc.)
BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll (Sun Microsystems, Inc.)
Toolbar: HKCU -&Adresa - {01E04581-4EEE-11D0-BFE9-00AA005B4383} - C:\Windows\system32\browseui.dll (Společnost Microsoft)
Toolbar: HKCU -&Odkazy - {0E5CBF21-D15F-11D0-8301-00AA005B4383} - C:\Windows\system32\SHELL32.dll (Microsoft Corporation)
Toolbar: HKCU - No Name - {E7DF6BFF-55A5-4EB7-A673-4ED3E9456D39} - No File
DPF: {31435657-9980-0010-8000-00AA00389B71} http://download.microsoft.com/download/ ... vc1dmo.cab
DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinsta ... s-i586.cab
DPF: {CAFEEFAC-0016-0000-0031-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinsta ... s-i586.cab
DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinsta ... s-i586.cab
DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} http://fpdownload.macromedia.com/pub/sh ... wflash.cab
Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL (Skype Technologies)
Hosts: There are more than one entry in Hosts. See Hosts section of Addition.txt
Tcpip\Parameters: [DhcpNameServer] 10.133.0.37 10.133.37.37

FireFox:
========
FF ProfilePath: C:\Documents and Settings\Martin - Micka\Data aplikací\Mozilla\Firefox\Profiles\toyemuvc.default
FF Plugin: @adobe.com/FlashPlayer - C:\WINDOWS\system32\Macromed\Flash\NPSWF32.dll ()
FF Plugin: @java.com/JavaPlugin - C:\Program Files\Java\jre6\bin\plugin2\npjp2.dll (Sun Microsystems, Inc.)
FF Plugin: @microsoft.com/WPF,version=3.5 - C:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation)
FF Plugin: @tools.google.com/Google Update;version=3 - C:\Program Files\Google\Update\1.3.21.153\npGoogleUpdate3.dll (Google Inc.)
FF Plugin: @tools.google.com/Google Update;version=9 - C:\Program Files\Google\Update\1.3.21.153\npGoogleUpdate3.dll (Google Inc.)
FF Plugin: Adobe Reader - C:\Program Files\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin HKCU: @unity3d.com/UnityPlayer,version=1.0 - C:\Documents and Settings\Martin - Micka\Local Settings\Data aplikací\Unity\WebPlayer\loader\npUnity3D32.dll (Unity Technologies ApS)
FF SearchPlugin: C:\Program Files\mozilla firefox\searchplugins\heureka-cz.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\searchplugins\jyxo-cz.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\searchplugins\seznam-cz.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\searchplugins\slunecnice-cz.xml
FF Extension: Seznam lištička - C:\Documents and Settings\Martin - Micka\Data aplikací\Mozilla\Firefox\Profiles\toyemuvc.default\Extensions\{ea614400-e918-4741-9a97-7a972ff7c30b}
FF HKLM\...\Firefox\Extensions: [{20a82645-c095-46ed-80e3-08825760534b}] - C:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\
FF Extension: Microsoft .NET Framework Assistant - C:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\
FF HKLM\...\Firefox\Extensions: [{F53C93F1-07D5-430c-86D4-C9531B27DFAF}] - C:\Program Files\AVG\AVG2012\Firefox\DoNotTrack\
FF Extension: AVG Do Not Track - C:\Program Files\AVG\AVG2012\Firefox\DoNotTrack\

Chrome:
=======
CHR Extension: (Google Docs) - C:\DOCUME~1\MARTIN~1\LOCALS~1\Data aplikací\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.5_0
CHR Extension: (Google Drive) - C:\DOCUME~1\MARTIN~1\LOCALS~1\Data aplikací\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.3_0
CHR Extension: (YouTube) - C:\DOCUME~1\MARTIN~1\LOCALS~1\Data aplikací\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.6_0
CHR Extension: (Google Search) - C:\DOCUME~1\MARTIN~1\LOCALS~1\Data aplikací\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0
CHR Extension: (Gmail) - C:\DOCUME~1\MARTIN~1\LOCALS~1\Data aplikací\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0
CHR HKLM\...\Chrome\Extension: [ndibdjnfmopecpmkdieinmbadjfpblof] - C:\Program Files\AVG\AVG2012\Chrome\donottrack.crx

========================== Services (Whitelisted) =================

R2 avast! Antivirus; D:\Program Files\AVAST Software\Avast\AvastSvc.exe [46808 2013-05-09] (AVAST Software)
R2 KoopPdfService; C:\Program Files\Kooperativa\Services\KoopPDFServer.exe [450560 2010-07-10] ()
S2 winmgmt; C:\DOCUME~1\ALLUSE~1\DATAAP~1\ckksemtqijpkxkxtuaq.bfg [x]

==================== Drivers (Whitelisted) ====================

S3 Ambfilt; C:\Windows\System32\drivers\Ambfilt.sys [1691480 2009-11-18] (Creative)
R3 AsusACPI; C:\Windows\System32\DRIVERS\ASUSACPI.sys [11264 2007-07-26] (ASUSTeK Computer Inc.)
R2 aswFsBlk; C:\Windows\System32\Drivers\aswFsBlk.sys [29816 2013-08-30] (AVAST Software)
R2 aswMonFlt; C:\WINDOWS\system32\drivers\aswMonFlt.sys [66336 2013-08-30] (AVAST Software)
R1 AswRdr; C:\Windows\System32\Drivers\AswRdr.sys [49760 2013-08-30] (AVAST Software)
R0 aswRvrt; C:\Windows\System32\Drivers\aswRvrt.sys [49376 2013-08-30] ()
R1 aswSnx; C:\Windows\System32\Drivers\aswSnx.sys [770344 2013-08-30] (AVAST Software)
R1 aswSP; C:\Windows\System32\Drivers\aswSP.sys [369584 2013-08-30] (AVAST Software)
R1 aswTdi; C:\Windows\System32\Drivers\aswTdi.sys [56080 2013-08-30] (AVAST Software)
R0 aswVmm; C:\Windows\System32\Drivers\aswVmm.sys [177864 2013-08-30] ()
S3 btaudio; C:\Windows\System32\drivers\btaudio.sys [534440 2008-04-15] (Broadcom Corporation.)
R3 BTKRNL; C:\Windows\System32\DRIVERS\btkrnl.sys [990632 2008-04-15] (Broadcom Corporation.)
S3 BTWUSB; C:\Windows\System32\Drivers\btwusb.sys [47272 2008-03-27] (Broadcom Corporation.)
R3 L1e; C:\Windows\System32\DRIVERS\l1e51x86.sys [36864 2008-03-12] (Atheros Communications, Inc.)
S3 Monfilt; C:\Windows\System32\drivers\Monfilt.sys [1395800 2009-11-18] (Creative Technology Ltd.)
S3 NdisIP; C:\Windows\System32\DRIVERS\NdisIP.sys [10880 2008-04-14] (Microsoft Corporation)
R3 RT80x86; C:\Windows\System32\DRIVERS\RT2860.sys [625024 2008-03-28] (Ralink Technology, Corp.)
S3 adusbser; system32\DRIVERS\adusbser.sys [x]
S0 AVGIDSHX; system32\DRIVERS\avgidshx.sys [x]
S3 AVGIDSShim; system32\DRIVERS\avgidsshimx.sys [x]
S3 BTDriver; system32\DRIVERS\btport.sys [x]
S3 BTWDNDIS; system32\DRIVERS\btwdndis.sys [x]
S3 btwhid; system32\DRIVERS\btwhid.sys [x]
S4 IntelIde; No ImagePath
U1 WS2IFSL;

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2013-09-15 10:41 - 2013-09-15 10:41 - 00000000 ____D C:\FRST
2013-09-15 10:02 - 2013-09-15 10:02 - 00000000 ____D C:\Documents and Settings\Martin - Micka\Local Settings\Data aplikací\qb03D988.CB
2013-09-15 10:02 - 2013-09-15 04:15 - 01084047 _____ (Farbar) C:\Documents and Settings\Martin - Micka\Plocha\FRST.exe
2013-09-15 10:02 - 2013-09-14 15:47 - 00046330 _____ C:\Documents and Settings\Martin - Micka\Plocha\logmodification.bat
2013-09-15 10:02 - 2013-09-14 10:45 - 00001498 _____ C:\Documents and Settings\Martin - Micka\Plocha\SecurityCenter.vbs
2013-09-15 10:00 - 2013-09-15 10:00 - 00000000 ____D C:\Documents and Settings\Martin - Micka\Local Settings\Data aplikací\qb024915.91
2013-09-15 09:50 - 2013-09-15 09:50 - 00000000 ____D C:\Documents and Settings\Martin - Micka\Local Settings\Data aplikací\qb045408.E8
2013-08-24 08:28 - 2013-09-15 09:58 - 00000316 ____H C:\WINDOWS\Tasks\avast! Emergency Update.job
2013-08-24 08:28 - 2013-08-30 09:48 - 00770344 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswSnx.sys
2013-08-24 08:28 - 2013-08-30 09:48 - 00369584 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswSP.sys
2013-08-24 08:28 - 2013-08-30 09:48 - 00177864 _____ C:\WINDOWS\system32\Drivers\aswVmm.sys
2013-08-24 08:28 - 2013-08-30 09:48 - 00066336 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswMonFlt.sys
2013-08-24 08:28 - 2013-08-30 09:48 - 00056080 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswTdi.sys
2013-08-24 08:28 - 2013-08-30 09:48 - 00049760 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswRdr.sys
2013-08-24 08:28 - 2013-08-30 09:48 - 00049376 _____ C:\WINDOWS\system32\Drivers\aswRvrt.sys
2013-08-24 08:28 - 2013-08-30 09:48 - 00029816 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswFsBlk.sys
2013-08-24 08:28 - 2013-08-30 09:47 - 00229648 _____ (AVAST Software) C:\WINDOWS\system32\aswBoot.exe
2013-08-24 08:28 - 2013-08-24 08:28 - 00000773 _____ C:\Documents and Settings\All Users\Plocha\avast! Free Antivirus.lnk
2013-08-24 08:28 - 2013-08-24 08:28 - 00000175 _____ C:\WINDOWS\system32\Drivers\aswVmm.sys.sum
2013-08-24 08:28 - 2013-08-24 08:28 - 00000175 _____ C:\WINDOWS\system32\Drivers\aswSP.sys.sum
2013-08-24 08:28 - 2013-08-24 08:28 - 00000175 _____ C:\WINDOWS\system32\Drivers\aswSnx.sys.sum
2013-08-24 08:28 - 2013-08-24 08:28 - 00000000 ____D C:\Documents and Settings\All Users\Nabídka Start\Programy\avast! Free Antivirus
2013-08-24 08:26 - 2013-08-30 09:47 - 00041664 _____ (AVAST Software) C:\WINDOWS\avastSS.scr
2013-08-24 08:24 - 2013-08-24 08:24 - 00000000 ____D C:\Program Files\AVAST Software
2013-08-24 08:23 - 2013-08-24 08:24 - 00000000 ____D C:\Documents and Settings\All Users\Data aplikací\AVAST Software
2013-08-24 07:45 - 2013-08-24 07:45 - 00000000 ____D C:\Program Files\Macrovision Corporation
2013-08-24 06:57 - 2013-08-24 07:13 - 00000000 ____D C:\Program Files\trend micro
2013-08-24 06:56 - 2013-08-24 06:59 - 00000000 ____D C:\rsit
2013-08-24 06:56 - 2013-08-24 06:56 - 00781383 _____ C:\Documents and Settings\Martin - Micka\Plocha\AAA.com

==================== One Month Modified Files and Folders =======

2013-09-15 10:41 - 2013-09-15 10:41 - 00000000 ____D C:\FRST
2013-09-15 10:41 - 2013-02-02 14:05 - 00000914 _____ C:\WINDOWS\Tasks\Adobe Flash Player Updater.job
2013-09-15 10:34 - 2013-01-13 08:37 - 00000956 _____ C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job
2013-09-15 10:34 - 2008-09-11 17:44 - 00000000 ___RD C:\Documents and Settings\Martin - Micka\Dokumenty
2013-09-15 10:02 - 2013-09-15 10:02 - 00000000 ____D C:\Documents and Settings\Martin - Micka\Local Settings\Data aplikací\qb03D988.CB
2013-09-15 10:02 - 2008-09-11 17:44 - 00000000 ___HD C:\Documents and Settings\Martin - Micka\Local Settings\Data aplikací
2013-09-15 10:02 - 2008-09-11 17:44 - 00000000 ____D C:\Documents and Settings\Martin - Micka\Plocha
2013-09-15 10:02 - 2008-05-15 09:50 - 02008178 _____ C:\WINDOWS\WindowsUpdate.log
2013-09-15 10:00 - 2013-09-15 10:00 - 00000000 ____D C:\Documents and Settings\Martin - Micka\Local Settings\Data aplikací\qb024915.91
2013-09-15 09:59 - 2013-01-30 14:58 - 00000000 ____D C:\Documents and Settings\Martin - Micka\Dokumenty\Stažené soubory
2013-09-15 09:58 - 2013-08-24 08:28 - 00000316 ____H C:\WINDOWS\Tasks\avast! Emergency Update.job
2013-09-15 09:58 - 2013-01-13 08:37 - 00000952 _____ C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job
2013-09-15 09:58 - 2008-08-26 02:22 - 00000006 ____H C:\WINDOWS\Tasks\SA.DAT
2013-09-15 09:58 - 2008-05-15 11:40 - 00000049 _____ C:\WINDOWS\wiaservc.log
2013-09-15 09:58 - 2008-05-15 11:39 - 00000159 _____ C:\WINDOWS\wiadebug.log
2013-09-15 09:50 - 2013-09-15 09:50 - 00000000 ____D C:\Documents and Settings\Martin - Micka\Local Settings\Data aplikací\qb045408.E8
2013-09-15 09:47 - 2008-09-11 17:44 - 00000000 ____D C:\Documents and Settings\Martin - Micka
2013-09-15 09:46 - 2008-09-11 17:44 - 00000000 ___RD C:\Documents and Settings\Martin - Micka\Nabídka Start\Programy\Po spuštění
2013-09-15 09:45 - 2008-09-11 17:44 - 00000178 ___SH C:\Documents and Settings\Martin - Micka\ntuser.ini
2013-09-15 09:45 - 2008-08-26 02:22 - 00032552 ____N C:\WINDOWS\SchedLgU.Txt
2013-09-15 09:44 - 2008-05-15 09:54 - 00002504 _____ C:\WINDOWS\system32\CONFIG.NT
2013-09-15 09:41 - 2008-05-07 23:58 - 00001158 _____ C:\WINDOWS\system32\wpa.dbl
2013-09-15 04:15 - 2013-09-15 10:02 - 01084047 _____ (Farbar) C:\Documents and Settings\Martin - Micka\Plocha\FRST.exe
2013-09-14 15:47 - 2013-09-15 10:02 - 00046330 _____ C:\Documents and Settings\Martin - Micka\Plocha\logmodification.bat
2013-09-14 10:45 - 2013-09-15 10:02 - 00001498 _____ C:\Documents and Settings\Martin - Micka\Plocha\SecurityCenter.vbs
2013-08-30 09:48 - 2013-08-24 08:28 - 00770344 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswSnx.sys
2013-08-30 09:48 - 2013-08-24 08:28 - 00369584 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswSP.sys
2013-08-30 09:48 - 2013-08-24 08:28 - 00177864 _____ C:\WINDOWS\system32\Drivers\aswVmm.sys
2013-08-30 09:48 - 2013-08-24 08:28 - 00066336 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswMonFlt.sys
2013-08-30 09:48 - 2013-08-24 08:28 - 00056080 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswTdi.sys
2013-08-30 09:48 - 2013-08-24 08:28 - 00049760 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswRdr.sys
2013-08-30 09:48 - 2013-08-24 08:28 - 00049376 _____ C:\WINDOWS\system32\Drivers\aswRvrt.sys
2013-08-30 09:48 - 2013-08-24 08:28 - 00029816 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswFsBlk.sys
2013-08-30 09:47 - 2013-08-24 08:28 - 00229648 _____ (AVAST Software) C:\WINDOWS\system32\aswBoot.exe
2013-08-30 09:47 - 2013-08-24 08:26 - 00041664 _____ (AVAST Software) C:\WINDOWS\avastSS.scr
2013-08-24 08:28 - 2013-08-24 08:28 - 00000773 _____ C:\Documents and Settings\All Users\Plocha\avast! Free Antivirus.lnk
2013-08-24 08:28 - 2013-08-24 08:28 - 00000175 _____ C:\WINDOWS\system32\Drivers\aswVmm.sys.sum
2013-08-24 08:28 - 2013-08-24 08:28 - 00000175 _____ C:\WINDOWS\system32\Drivers\aswSP.sys.sum
2013-08-24 08:28 - 2013-08-24 08:28 - 00000175 _____ C:\WINDOWS\system32\Drivers\aswSnx.sys.sum
2013-08-24 08:28 - 2013-08-24 08:28 - 00000000 ____D C:\Documents and Settings\All Users\Nabídka Start\Programy\avast! Free Antivirus
2013-08-24 08:28 - 2008-05-15 11:35 - 00000000 ___RD C:\Documents and Settings\All Users\Nabídka Start\Programy
2013-08-24 08:28 - 2008-05-15 11:35 - 00000000 ____D C:\Documents and Settings\All Users\Plocha
2013-08-24 08:26 - 2009-04-16 10:19 - 00000000 ____D C:\Program Files\Common Files\Microsoft Shared
2013-08-24 08:24 - 2013-08-24 08:24 - 00000000 ____D C:\Program Files\AVAST Software
2013-08-24 08:24 - 2013-08-24 08:23 - 00000000 ____D C:\Documents and Settings\All Users\Data aplikací\AVAST Software
2013-08-24 08:23 - 2008-05-15 11:34 - 00000000 __RHD C:\Documents and Settings\All Users\Data aplikací
2013-08-24 08:08 - 2012-02-25 19:37 - 00000000 ____D C:\Documents and Settings\All Users\Data aplikací\AVG2012
2013-08-24 08:08 - 2012-02-25 19:28 - 00000000 ____D C:\Documents and Settings\All Users\Data aplikací\MFAData
2013-08-24 07:45 - 2013-08-24 07:45 - 00000000 ____D C:\Program Files\Macrovision Corporation
2013-08-24 07:13 - 2013-08-24 06:57 - 00000000 ____D C:\Program Files\trend micro
2013-08-24 06:59 - 2013-08-24 06:56 - 00000000 ____D C:\rsit
2013-08-24 06:56 - 2013-08-24 06:56 - 00781383 _____ C:\Documents and Settings\Martin - Micka\Plocha\AAA.com
2013-08-24 06:41 - 2013-02-02 14:04 - 00692616 _____ (Adobe Systems Incorporated) C:\WINDOWS\system32\FlashPlayerApp.exe
2013-08-24 06:41 - 2012-02-12 12:54 - 00071048 _____ (Adobe Systems Incorporated) C:\WINDOWS\system32\FlashPlayerCPLApp.cpl

==================== Bamital & volsnap Check =================

C:\Windows\explorer.exe
[2008-05-07 23:57] - [2008-04-14 14:00] - 1034240 ____A (Microsoft Corporation) 27afd587c462e280ee046b8cca3c2cd1

C:\Windows\System32\winlogon.exe
[2008-05-07 23:58] - [2008-04-14 14:00] - 0507904 ____A (Microsoft Corporation) cddb1f8e1aea356f3ad106f2cf9b7fea

C:\Windows\System32\svchost.exe
[2008-05-07 23:58] - [2008-04-14 14:00] - 0014336 ____A (Microsoft Corporation) be4a520e29b6391f49e79ccc52044d93

C:\Windows\System32\services.exe
[2008-05-07 23:58] - [2009-02-09 13:25] - 0111104 ____A (Microsoft Corporation) 9ef697af07bb8dd82c3b02ca953a95b7

C:\Windows\System32\User32.dll
[2008-05-07 23:58] - [2008-04-14 14:00] - 0578560 ____A (Microsoft Corporation) e16e0990967374e76f3e40cacafd3d53

C:\Windows\System32\userinit.exe
[2008-05-07 23:58] - [2008-04-14 14:00] - 0026112 ____A (Microsoft Corporation) 7dc1830f22e7d275b438127b68030239

C:\Windows\System32\Drivers\volsnap.sys
[2008-05-07 23:58] - [2008-04-14 14:00] - 0052480 ____A (Microsoft Corporation) 28a4b296b47782173c346e376cb374d1


==================== End Of Log ============================

Re: Prosím o kontolu, virus policie ČR.

Napsal: 15 zář 2013 09:58
od vyosek
:arrow: Ulozte prosim FRSTLauncher primo na plochu a ne sem Running from D:\Temp\Dočasné soubory Internetu\Content.IE5\I6E10OSP

:arrow: Spustte znovu FRSTLauncher a log z nej mi sem dejte

Re: Prosím o kontolu, virus policie ČR.

Napsal: 15 zář 2013 19:02
od RomanL2
Pokud se launcher nebo přímo FSRT.exe umístí na plochu (nebo jinam) nejde spustit a vypíše tuto hlášku: viz. příloha.

Re: Prosím o kontolu, virus policie ČR.

Napsal: 16 zář 2013 08:11
od vyosek
:arrow: Smazte prosim rucne tyto soubory a slozky
C:\Documents and Settings\Martin - Micka\Plocha\logmodification.bat
C:\Documents and Settings\Martin - Micka\Plocha\SecurityCenter.vbs
C:\Documents and Settings\Martin - Micka\Plocha\FRSTLauncher.exe
C:\Documents and Settings\Martin - Micka\Local Settings\Data aplikací\qb045408.E8
C:\Documents and Settings\Martin - Micka\Local Settings\Data aplikací\qb024915.91
C:\Documents and Settings\Martin - Micka\Local Settings\Data aplikací\qb03D988.CB
:arrow: Stahnete si novy FRST odsud http://www.bleepingcomputer.com/downloa ... scan-tool/ Pouzivate 32bit OS, takze stahnete prislusnou verzi

:arrow: Spustte FRST a kliknete na Scan, po chvili se objevi log, ten mi sem vlozte

Re: Prosím o kontolu, virus policie ČR.

Napsal: 16 zář 2013 16:50
od RomanL2
Zde log z FRST:

Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 16-09-2013
Ran by Martin - Micka (administrator) on YOUR-CFAVE4Y9J6 on 16-09-2013 17:43:20
Running from C:\Documents and Settings\Martin - Micka\Dokumenty\Downloads
Microsoft Windows XP Service Pack 3 (X86) OS Language: Czech
Internet Explorer Version 8
Boot Mode: Normal

==================== Could not list processes ===============

==================== Registry (Whitelisted) ==================

HKLM\...\Run: [HotKeysCmds] - C:\WINDOWS\system32\hkcmd.exe [ ] ()
HKLM\...\Run: [AsusTray] - C:\Program Files\EeePC\ACPI\AsTray.exe [98304 2008-06-03] (ASUSTeK Computer Inc.)
HKLM\...\Run: [AsusACPIServer] - C:\Program Files\EeePC\ACPI\AsAcpiSvr.exe [479232 2008-06-03] (ASUSTeK Computer Inc.)
HKLM\...\Run: [AsusEPCMonitor] - C:\Program Files\EeePC\ACPI\AsEPCMon.exe [94208 2008-05-21] (ASUSTeK Computer Inc.)
HKLM\...\Run: [RTHDCPL] - C:\Windows\RTHDCPL.EXE [20065384 2011-12-05] (Realtek Semiconductor Corp.)
HKLM\...\Run: [avast] - D:\Program Files\AVAST Software\Avast\avastUI.exe [4858968 2013-05-09] (AVAST Software)
MountPoints2: {1bb34d4c-bd10-11e1-a7ed-0015afe715d4} - E:\StartVMCLite.exe
MountPoints2: {1bb34d4d-bd10-11e1-a7ed-0015afe715d4} - E:\StartVMCLite.exe
MountPoints2: {30a07e06-443d-11e1-a7cf-0015afe715d4} - E:\StartVMCLite.exe
MountPoints2: {42400b0e-6300-11e1-a7e1-0015afe715d4} - E:\StartVMCLite.exe
MountPoints2: {702e6002-4bba-11de-a73c-0015afe715d4} - E:\LaunchU3.exe -a
MountPoints2: {7606fb18-8ac4-11dd-a670-0015afe715d4} - E:\LaunchU3.exe -a
Startup: C:\Documents and Settings\All Users\Nabídka Start\Programy\Po spuštění\AutoRun OSCleaner.lnk
ShortcutTarget: AutoRun OSCleaner.lnk -> C:\Program Files\ASUS\Asus OS Cleaner\AsOSCleaner.exe ()
Startup: C:\Documents and Settings\All Users\Nabídka Start\Programy\Po spuštění\Bluetooth.lnk
ShortcutTarget: Bluetooth.lnk -> C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe (Broadcom Corporation.)
Startup: C:\Documents and Settings\All Users\Nabídka Start\Programy\Po spuštění\SuperHybridEngine.lnk
ShortcutTarget: SuperHybridEngine.lnk -> C:\Program Files\Asus\EeePC\Super Hybrid Engine\SuperHybridEngine.exe (ASUSTeK Computer Inc.)

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.seznam.cz/
HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.microsoft.com/isapi/redir.dl ... r=iesearch
SearchScopes: HKCU - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
BHO: Adobe PDF Link Helper - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll (Adobe Systems Incorporated)
BHO: AVG Do Not Track - {31332EEF-CB9F-458F-AFEB-D30E9A66B6BA} - C:\Program Files\AVG\AVG2012\avgdtiex.dll No File
BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre6\bin\ssv.dll (Sun Microsystems, Inc.)
BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll (Sun Microsystems, Inc.)
Toolbar: HKCU -&Adresa - {01E04581-4EEE-11D0-BFE9-00AA005B4383} - C:\Windows\system32\browseui.dll (Společnost Microsoft)
Toolbar: HKCU -&Odkazy - {0E5CBF21-D15F-11D0-8301-00AA005B4383} - C:\Windows\system32\SHELL32.dll (Microsoft Corporation)
Toolbar: HKCU - No Name - {E7DF6BFF-55A5-4EB7-A673-4ED3E9456D39} - No File
DPF: {31435657-9980-0010-8000-00AA00389B71} http://download.microsoft.com/download/ ... vc1dmo.cab
DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinsta ... s-i586.cab
DPF: {CAFEEFAC-0016-0000-0031-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinsta ... s-i586.cab
DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinsta ... s-i586.cab
DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} http://fpdownload.macromedia.com/pub/sh ... wflash.cab
Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL (Skype Technologies)
Hosts: There are more than one entry in Hosts. See Hosts section of Addition.txt
Tcpip\Parameters: [DhcpNameServer] 10.133.0.37 10.133.37.37

FireFox:
========
FF ProfilePath: C:\Documents and Settings\Martin - Micka\Data aplikací\Mozilla\Firefox\Profiles\toyemuvc.default
FF Plugin: @adobe.com/FlashPlayer - C:\WINDOWS\system32\Macromed\Flash\NPSWF32.dll ()
FF Plugin: @java.com/JavaPlugin - C:\Program Files\Java\jre6\bin\plugin2\npjp2.dll (Sun Microsystems, Inc.)
FF Plugin: @microsoft.com/WPF,version=3.5 - C:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation)
FF Plugin: @tools.google.com/Google Update;version=3 - C:\Program Files\Google\Update\1.3.21.153\npGoogleUpdate3.dll (Google Inc.)
FF Plugin: @tools.google.com/Google Update;version=9 - C:\Program Files\Google\Update\1.3.21.153\npGoogleUpdate3.dll (Google Inc.)
FF Plugin: Adobe Reader - C:\Program Files\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin HKCU: @unity3d.com/UnityPlayer,version=1.0 - C:\Documents and Settings\Martin - Micka\Local Settings\Data aplikací\Unity\WebPlayer\loader\npUnity3D32.dll (Unity Technologies ApS)
FF SearchPlugin: C:\Program Files\mozilla firefox\searchplugins\heureka-cz.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\searchplugins\jyxo-cz.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\searchplugins\seznam-cz.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\searchplugins\slunecnice-cz.xml
FF Extension: Seznam lištička - C:\Documents and Settings\Martin - Micka\Data aplikací\Mozilla\Firefox\Profiles\toyemuvc.default\Extensions\{ea614400-e918-4741-9a97-7a972ff7c30b}
FF HKLM\...\Firefox\Extensions: [{20a82645-c095-46ed-80e3-08825760534b}] - C:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\
FF Extension: Microsoft .NET Framework Assistant - C:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\
FF HKLM\...\Firefox\Extensions: [{F53C93F1-07D5-430c-86D4-C9531B27DFAF}] - C:\Program Files\AVG\AVG2012\Firefox\DoNotTrack\
FF Extension: AVG Do Not Track - C:\Program Files\AVG\AVG2012\Firefox\DoNotTrack\

Chrome:
=======
CHR RestoreOnStartup: "hxxp://www.seznam.cz/"
CHR DefaultSearchURL: (Google) - {google:baseURL}search?q={searchTerms}&{google:RLZ}{google:originalQueryForSuggestion}{google:assistedQueryStats}{google:searchFieldtrialParameter}{google:searchClient}{google:sourceId}{google:instantExtendedEnabledParameter}{google:omniboxStartMarginParameter}ie={inputEncoding}
CHR DefaultSuggestURL: (Google) - {google:baseSuggestURL}search?{google:searchFieldtrialParameter}client={google:suggestClient}&q={searchTerms}&{google:cursorPosition}{google:zeroPrefixUrl}sugkey={google:suggestAPIKeyParameter}
CHR Plugin: (Shockwave Flash) - C:\Program Files\Google\Chrome\Application\29.0.1547.66\PepperFlash\pepflashplayer.dll ()
CHR Plugin: (Chrome Remote Desktop Viewer) - internal-remoting-viewer
CHR Plugin: (Native Client) - C:\Program Files\Google\Chrome\Application\29.0.1547.66\ppGoogleNaClPluginChrome.dll ()
CHR Plugin: (Chrome PDF Viewer) - C:\Program Files\Google\Chrome\Application\29.0.1547.66\pdf.dll ()
CHR Plugin: (Adobe Acrobat) - C:\Program Files\Adobe\Reader 10.0\Reader\Browser\nppdf32.dll (Adobe Systems Inc.)
CHR Plugin: (Microsoft\u00AE DRM) - C:\Program Files\Windows Media Player\npdrmv2.dll (Microsoft Corporation)
CHR Plugin: (Windows Media Player Plug-in Dynamic Link Library) - C:\Program Files\Windows Media Player\npdsplay.dll (Microsoft Corporation (written by Digital Renaissance Inc.))
CHR Plugin: (Microsoft\u00AE DRM) - C:\Program Files\Windows Media Player\npwmsdrm.dll (Microsoft Corporation)
CHR Plugin: (Google Update) - C:\Program Files\Google\Update\1.3.21.123\npGoogleUpdate3.dll No File
CHR Plugin: (Java(TM) Platform SE 6 U31) - C:\Program Files\Java\jre6\bin\plugin2\npjp2.dll (Sun Microsystems, Inc.)
CHR Plugin: (Windows Presentation Foundation) - C:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation)
CHR Plugin: (Shockwave Flash) - C:\WINDOWS\system32\Macromed\Flash\NPSWF32.dll ()
CHR Extension: (Google Docs) - C:\DOCUME~1\MARTIN~1\LOCALS~1\Data aplikací\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.5_0
CHR Extension: (Google Drive) - C:\DOCUME~1\MARTIN~1\LOCALS~1\Data aplikací\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.3_0
CHR Extension: (YouTube) - C:\DOCUME~1\MARTIN~1\LOCALS~1\Data aplikací\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.6_0
CHR Extension: (Google Search) - C:\DOCUME~1\MARTIN~1\LOCALS~1\Data aplikací\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0
CHR Extension: (Chrome In-App Payments service) - C:\DOCUME~1\MARTIN~1\LOCALS~1\Data aplikací\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.4.11_0
CHR Extension: (Gmail) - C:\DOCUME~1\MARTIN~1\LOCALS~1\Data aplikací\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0
CHR HKLM\...\Chrome\Extension: [ndibdjnfmopecpmkdieinmbadjfpblof] - C:\Program Files\AVG\AVG2012\Chrome\donottrack.crx

========================== Services (Whitelisted) =================

R2 avast! Antivirus; D:\Program Files\AVAST Software\Avast\AvastSvc.exe [46808 2013-05-09] (AVAST Software)
R2 KoopPdfService; C:\Program Files\Kooperativa\Services\KoopPDFServer.exe [450560 2010-07-10] ()
S2 winmgmt; C:\DOCUME~1\ALLUSE~1\DATAAP~1\ckksemtqijpkxkxtuaq.bfg [x]

==================== Drivers (Whitelisted) ====================

S3 Ambfilt; C:\Windows\System32\drivers\Ambfilt.sys [1691480 2009-11-18] (Creative)
R3 AsusACPI; C:\Windows\System32\DRIVERS\ASUSACPI.sys [11264 2007-07-26] (ASUSTeK Computer Inc.)
R2 aswFsBlk; C:\Windows\System32\Drivers\aswFsBlk.sys [29816 2013-08-30] (AVAST Software)
R2 aswMonFlt; C:\WINDOWS\system32\drivers\aswMonFlt.sys [66336 2013-08-30] (AVAST Software)
R1 AswRdr; C:\Windows\System32\Drivers\AswRdr.sys [49760 2013-08-30] (AVAST Software)
R0 aswRvrt; C:\Windows\System32\Drivers\aswRvrt.sys [49376 2013-08-30] ()
R1 aswSnx; C:\Windows\System32\Drivers\aswSnx.sys [770344 2013-08-30] (AVAST Software)
R1 aswSP; C:\Windows\System32\Drivers\aswSP.sys [369584 2013-08-30] (AVAST Software)
R1 aswTdi; C:\Windows\System32\Drivers\aswTdi.sys [56080 2013-08-30] (AVAST Software)
R0 aswVmm; C:\Windows\System32\Drivers\aswVmm.sys [177864 2013-08-30] ()
S3 btaudio; C:\Windows\System32\drivers\btaudio.sys [534440 2008-04-15] (Broadcom Corporation.)
R3 BTKRNL; C:\Windows\System32\DRIVERS\btkrnl.sys [990632 2008-04-15] (Broadcom Corporation.)
S3 BTWUSB; C:\Windows\System32\Drivers\btwusb.sys [47272 2008-03-27] (Broadcom Corporation.)
R3 L1e; C:\Windows\System32\DRIVERS\l1e51x86.sys [36864 2008-03-12] (Atheros Communications, Inc.)
S3 Monfilt; C:\Windows\System32\drivers\Monfilt.sys [1395800 2009-11-18] (Creative Technology Ltd.)
S3 NdisIP; C:\Windows\System32\DRIVERS\NdisIP.sys [10880 2008-04-14] (Microsoft Corporation)
R3 RT80x86; C:\Windows\System32\DRIVERS\RT2860.sys [625024 2008-03-28] (Ralink Technology, Corp.)
S3 adusbser; system32\DRIVERS\adusbser.sys [x]
S0 AVGIDSHX; system32\DRIVERS\avgidshx.sys [x]
S3 AVGIDSShim; system32\DRIVERS\avgidsshimx.sys [x]
S3 BTDriver; system32\DRIVERS\btport.sys [x]
S3 BTWDNDIS; system32\DRIVERS\btwdndis.sys [x]
S3 btwhid; system32\DRIVERS\btwhid.sys [x]
S4 IntelIde; No ImagePath
U1 WS2IFSL;

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2013-09-15 10:50 - 2013-09-15 10:50 - 00012160 _____ C:\Documents and Settings\Martin - Micka\Dokumenty\Addition.txt
2013-09-15 10:50 - 2013-09-15 10:50 - 00003384 _____ C:\Documents and Settings\Martin - Micka\Dokumenty\Addition.zip
2013-09-15 10:41 - 2013-09-15 10:41 - 00000000 ____D C:\FRST
2013-09-15 09:50 - 2013-09-15 09:50 - 00365056 _____ (forum.viry.cz) C:\Documents and Settings\Martin - Micka\Plocha\FRSTLauncher.exe
2013-08-24 08:28 - 2013-09-16 17:26 - 00000316 ____H C:\WINDOWS\Tasks\avast! Emergency Update.job
2013-08-24 08:28 - 2013-08-30 09:48 - 00770344 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswSnx.sys
2013-08-24 08:28 - 2013-08-30 09:48 - 00369584 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswSP.sys
2013-08-24 08:28 - 2013-08-30 09:48 - 00177864 _____ C:\WINDOWS\system32\Drivers\aswVmm.sys
2013-08-24 08:28 - 2013-08-30 09:48 - 00066336 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswMonFlt.sys
2013-08-24 08:28 - 2013-08-30 09:48 - 00056080 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswTdi.sys
2013-08-24 08:28 - 2013-08-30 09:48 - 00049760 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswRdr.sys
2013-08-24 08:28 - 2013-08-30 09:48 - 00049376 _____ C:\WINDOWS\system32\Drivers\aswRvrt.sys
2013-08-24 08:28 - 2013-08-30 09:48 - 00029816 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswFsBlk.sys
2013-08-24 08:28 - 2013-08-30 09:47 - 00229648 _____ (AVAST Software) C:\WINDOWS\system32\aswBoot.exe
2013-08-24 08:28 - 2013-08-24 08:28 - 00000773 _____ C:\Documents and Settings\All Users\Plocha\avast! Free Antivirus.lnk
2013-08-24 08:28 - 2013-08-24 08:28 - 00000175 _____ C:\WINDOWS\system32\Drivers\aswVmm.sys.sum
2013-08-24 08:28 - 2013-08-24 08:28 - 00000175 _____ C:\WINDOWS\system32\Drivers\aswSP.sys.sum
2013-08-24 08:28 - 2013-08-24 08:28 - 00000175 _____ C:\WINDOWS\system32\Drivers\aswSnx.sys.sum
2013-08-24 08:28 - 2013-08-24 08:28 - 00000000 ____D C:\Documents and Settings\All Users\Nabídka Start\Programy\avast! Free Antivirus
2013-08-24 08:26 - 2013-08-30 09:47 - 00041664 _____ (AVAST Software) C:\WINDOWS\avastSS.scr
2013-08-24 08:24 - 2013-08-24 08:24 - 00000000 ____D C:\Program Files\AVAST Software
2013-08-24 08:23 - 2013-08-24 08:24 - 00000000 ____D C:\Documents and Settings\All Users\Data aplikací\AVAST Software
2013-08-24 07:45 - 2013-08-24 07:45 - 00000000 ____D C:\Program Files\Macrovision Corporation
2013-08-24 06:57 - 2013-08-24 07:13 - 00000000 ____D C:\Program Files\trend micro
2013-08-24 06:56 - 2013-08-24 06:59 - 00000000 ____D C:\rsit
2013-08-24 06:56 - 2013-08-24 06:56 - 00781383 _____ C:\Documents and Settings\Martin - Micka\Plocha\AAA.com

==================== One Month Modified Files and Folders =======

2013-09-16 17:43 - 2008-09-11 17:44 - 00000000 ____D C:\Documents and Settings\Martin - Micka\Plocha
2013-09-16 17:41 - 2013-02-02 14:05 - 00000914 _____ C:\WINDOWS\Tasks\Adobe Flash Player Updater.job
2013-09-16 17:40 - 2008-09-11 17:44 - 00000000 ___HD C:\Documents and Settings\Martin - Micka\Local Settings\Data aplikací
2013-09-16 17:34 - 2013-01-13 08:37 - 00000956 _____ C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job
2013-09-16 17:29 - 2008-05-15 09:50 - 02011077 _____ C:\WINDOWS\WindowsUpdate.log
2013-09-16 17:26 - 2013-08-24 08:28 - 00000316 ____H C:\WINDOWS\Tasks\avast! Emergency Update.job
2013-09-16 17:26 - 2013-01-13 08:37 - 00000952 _____ C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job
2013-09-16 17:26 - 2008-08-26 02:22 - 00000006 ____H C:\WINDOWS\Tasks\SA.DAT
2013-09-16 17:26 - 2008-05-15 11:40 - 00000049 _____ C:\WINDOWS\wiaservc.log
2013-09-16 17:26 - 2008-05-15 11:39 - 00000159 _____ C:\WINDOWS\wiadebug.log
2013-09-15 20:04 - 2008-08-26 02:22 - 00032586 _____ C:\WINDOWS\SchedLgU.Txt
2013-09-15 20:03 - 2008-09-11 17:44 - 00000178 ___SH C:\Documents and Settings\Martin - Micka\ntuser.ini
2013-09-15 14:36 - 2013-01-13 08:40 - 00001813 _____ C:\Documents and Settings\All Users\Plocha\Google Chrome.lnk
2013-09-15 10:50 - 2013-09-15 10:50 - 00012160 _____ C:\Documents and Settings\Martin - Micka\Dokumenty\Addition.txt
2013-09-15 10:50 - 2013-09-15 10:50 - 00003384 _____ C:\Documents and Settings\Martin - Micka\Dokumenty\Addition.zip
2013-09-15 10:50 - 2008-09-11 17:44 - 00000000 ___RD C:\Documents and Settings\Martin - Micka\Dokumenty
2013-09-15 10:41 - 2013-09-15 10:41 - 00000000 ____D C:\FRST
2013-09-15 09:59 - 2013-01-30 14:58 - 00000000 ____D C:\Documents and Settings\Martin - Micka\Dokumenty\Stažené soubory
2013-09-15 09:50 - 2013-09-15 09:50 - 00365056 _____ (forum.viry.cz) C:\Documents and Settings\Martin - Micka\Plocha\FRSTLauncher.exe
2013-09-15 09:47 - 2008-09-11 17:44 - 00000000 ____D C:\Documents and Settings\Martin - Micka
2013-09-15 09:46 - 2008-09-11 17:44 - 00000000 ___RD C:\Documents and Settings\Martin - Micka\Nabídka Start\Programy\Po spuštění
2013-09-15 09:44 - 2008-05-15 09:54 - 00002504 _____ C:\WINDOWS\system32\CONFIG.NT
2013-09-15 09:41 - 2008-05-07 23:58 - 00001158 _____ C:\WINDOWS\system32\wpa.dbl
2013-08-30 09:48 - 2013-08-24 08:28 - 00770344 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswSnx.sys
2013-08-30 09:48 - 2013-08-24 08:28 - 00369584 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswSP.sys
2013-08-30 09:48 - 2013-08-24 08:28 - 00177864 _____ C:\WINDOWS\system32\Drivers\aswVmm.sys
2013-08-30 09:48 - 2013-08-24 08:28 - 00066336 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswMonFlt.sys
2013-08-30 09:48 - 2013-08-24 08:28 - 00056080 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswTdi.sys
2013-08-30 09:48 - 2013-08-24 08:28 - 00049760 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswRdr.sys
2013-08-30 09:48 - 2013-08-24 08:28 - 00049376 _____ C:\WINDOWS\system32\Drivers\aswRvrt.sys
2013-08-30 09:48 - 2013-08-24 08:28 - 00029816 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswFsBlk.sys
2013-08-30 09:47 - 2013-08-24 08:28 - 00229648 _____ (AVAST Software) C:\WINDOWS\system32\aswBoot.exe
2013-08-30 09:47 - 2013-08-24 08:26 - 00041664 _____ (AVAST Software) C:\WINDOWS\avastSS.scr
2013-08-24 08:28 - 2013-08-24 08:28 - 00000773 _____ C:\Documents and Settings\All Users\Plocha\avast! Free Antivirus.lnk
2013-08-24 08:28 - 2013-08-24 08:28 - 00000175 _____ C:\WINDOWS\system32\Drivers\aswVmm.sys.sum
2013-08-24 08:28 - 2013-08-24 08:28 - 00000175 _____ C:\WINDOWS\system32\Drivers\aswSP.sys.sum
2013-08-24 08:28 - 2013-08-24 08:28 - 00000175 _____ C:\WINDOWS\system32\Drivers\aswSnx.sys.sum
2013-08-24 08:28 - 2013-08-24 08:28 - 00000000 ____D C:\Documents and Settings\All Users\Nabídka Start\Programy\avast! Free Antivirus
2013-08-24 08:28 - 2008-05-15 11:35 - 00000000 ___RD C:\Documents and Settings\All Users\Nabídka Start\Programy
2013-08-24 08:28 - 2008-05-15 11:35 - 00000000 ____D C:\Documents and Settings\All Users\Plocha
2013-08-24 08:26 - 2009-04-16 10:19 - 00000000 ____D C:\Program Files\Common Files\Microsoft Shared
2013-08-24 08:24 - 2013-08-24 08:24 - 00000000 ____D C:\Program Files\AVAST Software
2013-08-24 08:24 - 2013-08-24 08:23 - 00000000 ____D C:\Documents and Settings\All Users\Data aplikací\AVAST Software
2013-08-24 08:23 - 2008-05-15 11:34 - 00000000 __RHD C:\Documents and Settings\All Users\Data aplikací
2013-08-24 08:08 - 2012-02-25 19:37 - 00000000 ____D C:\Documents and Settings\All Users\Data aplikací\AVG2012
2013-08-24 08:08 - 2012-02-25 19:28 - 00000000 ____D C:\Documents and Settings\All Users\Data aplikací\MFAData
2013-08-24 07:45 - 2013-08-24 07:45 - 00000000 ____D C:\Program Files\Macrovision Corporation
2013-08-24 07:13 - 2013-08-24 06:57 - 00000000 ____D C:\Program Files\trend micro
2013-08-24 06:59 - 2013-08-24 06:56 - 00000000 ____D C:\rsit
2013-08-24 06:56 - 2013-08-24 06:56 - 00781383 _____ C:\Documents and Settings\Martin - Micka\Plocha\AAA.com
2013-08-24 06:41 - 2013-02-02 14:04 - 00692616 _____ (Adobe Systems Incorporated) C:\WINDOWS\system32\FlashPlayerApp.exe
2013-08-24 06:41 - 2012-02-12 12:54 - 00071048 _____ (Adobe Systems Incorporated) C:\WINDOWS\system32\FlashPlayerCPLApp.cpl

==================== Bamital & volsnap Check =================

C:\Windows\explorer.exe
[2008-05-07 23:57] - [2008-04-14 14:00] - 1034240 ____A (Microsoft Corporation) 27afd587c462e280ee046b8cca3c2cd1

C:\Windows\System32\winlogon.exe
[2008-05-07 23:58] - [2008-04-14 14:00] - 0507904 ____A (Microsoft Corporation) cddb1f8e1aea356f3ad106f2cf9b7fea

C:\Windows\System32\svchost.exe
[2008-05-07 23:58] - [2008-04-14 14:00] - 0014336 ____A (Microsoft Corporation) be4a520e29b6391f49e79ccc52044d93

C:\Windows\System32\services.exe
[2008-05-07 23:58] - [2009-02-09 13:25] - 0111104 ____A (Microsoft Corporation) 9ef697af07bb8dd82c3b02ca953a95b7

C:\Windows\System32\User32.dll
[2008-05-07 23:58] - [2008-04-14 14:00] - 0578560 ____A (Microsoft Corporation) e16e0990967374e76f3e40cacafd3d53

C:\Windows\System32\userinit.exe
[2008-05-07 23:58] - [2008-04-14 14:00] - 0026112 ____A (Microsoft Corporation) 7dc1830f22e7d275b438127b68030239

C:\Windows\System32\Drivers\volsnap.sys
[2008-05-07 23:58] - [2008-04-14 14:00] - 0052480 ____A (Microsoft Corporation) 28a4b296b47782173c346e376cb374d1


==================== End Of Log ============================

Re: Prosím o kontolu, virus policie ČR.

Napsal: 16 zář 2013 19:40
od vyosek
:arrow: Tvorba fixlistu pro FRST
  • Spustte poznamkovy blok (Start-spustit-notepad)
  • Zkopirujte skript nize

  • Kód: Vybrat vše

    Start
HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.microsoft.com/isapi/redir.dl ... r=iesearch
SearchScopes: HKCU - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
Toolbar: HKCU - No Name - {E7DF6BFF-55A5-4EB7-A673-4ED3E9456D39} - No File
BHO: AVG Do Not Track - {31332EEF-CB9F-458F-AFEB-D30E9A66B6BA} - C:\Program Files\AVG\AVG2012\avgdtiex.dll No File

FF HKLM\...\Firefox\Extensions: [{F53C93F1-07D5-430c-86D4-C9531B27DFAF}] - C:\Program Files\AVG\AVG2012\Firefox\DoNotTrack\
FF Extension: AVG Do Not Track - C:\Program Files\AVG\AVG2012\Firefox\DoNotTrack\

CHR HKLM\...\Chrome\Extension: [ndibdjnfmopecpmkdieinmbadjfpblof] - C:\Program Files\AVG\AVG2012\Chrome\donottrack.crx

S2 winmgmt; C:\DOCUME~1\ALLUSE~1\DATAAP~1\ckksemtqijpkxkxtuaq.bfg [x]

2013-09-15 09:50 - 2013-09-15 09:50 - 00365056 _____ (forum.viry.cz) C:\Documents and Settings\Martin - Micka\Plocha\FRSTLauncher.exe
2013-08-24 06:56 - 2013-08-24 06:56 - 00781383 _____ C:\Documents and Settings\Martin - Micka\Plocha\AAA.com
2013-08-24 08:08 - 2012-02-25 19:37 - 00000000 ____D C:\Documents and Settings\All Users\Data aplikací\AVG2012
2013-08-24 08:08 - 2012-02-25 19:28 - 00000000 ____D C:\Documents and Settings\All Users\Data aplikací\MFAData
C:\Program Files\AVG

Hosts:
CMD: shutdown /r /f /t 2
End
  • Ulozte vytvoreny TXT jako fixlist.txt
  • Presunte vytvoreny fixlist vedle FRST
:arrow: Spustte znovu FRST.exe
  • Kliknete na Fix
  • Probehne oprava a vytvori log Fixlog.txt
:arrow: Restart PC a dejte mi sem fixlog.txt

Re: Prosím o kontolu, virus policie ČR.

Napsal: 18 zář 2013 09:03
od RomanL2
FRST doběhl s nějakou chybou týkající se fixlistu, bohužel jsem to nestačil opsat, ale Fixlog se vytvořil:

Fix result of Farbar Recovery Tool (FRST written by Farbar) (x86) Version: 16-09-2013
Ran by Martin - Micka at 2013-09-18 09:49:41 Run:1
Running from C:\Documents and Settings\Martin - Micka\Dokumenty\Downloads
Boot Mode: Normal

==============================================

Content of fixlist:
*****************
Start
HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.microsoft.com/isapi/redir.dl ... r=iesearch
SearchScopes: HKCU - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
Toolbar: HKCU - No Name - {E7DF6BFF-55A5-4EB7-A673-4ED3E9456D39} - No File
BHO: AVG Do Not Track - {31332EEF-CB9F-458F-AFEB-D30E9A66B6BA} - C:\Program Files\AVG\AVG2012\avgdtiex.dll No File

FF HKLM\...\Firefox\Extensions: [{F53C93F1-07D5-430c-86D4-C9531B27DFAF}] - C:\Program Files\AVG\AVG2012\Firefox\DoNotTrack\
FF Extension: AVG Do Not Track - C:\Program Files\AVG\AVG2012\Firefox\DoNotTrack\

CHR HKLM\...\Chrome\Extension: [ndibdjnfmopecpmkdieinmbadjfpblof] - C:\Program Files\AVG\AVG2012\Chrome\donottrack.crx

S2 winmgmt; C:\DOCUME~1\ALLUSE~1\DATAAP~1\ckksemtqijpkxkxtuaq.bfg [x]

2013-09-15 09:50 - 2013-09-15 09:50 - 00365056 _____ (forum.viry.cz) C:\Documents and Settings\Martin - Micka\Plocha\FRSTLauncher.exe
2013-08-24 06:56 - 2013-08-24 06:56 - 00781383 _____ C:\Documents and Settings\Martin - Micka\Plocha\AAA.com
2013-08-24 08:08 - 2012-02-25 19:37 - 00000000 ____D C:\Documents and Settings\All Users\Data aplikací\AVG2012
2013-08-24 08:08 - 2012-02-25 19:28 - 00000000 ____D C:\Documents and Settings\All Users\Data aplikací\MFAData
C:\Program Files\AVG

Hosts:
CMD: shutdown /r /f /t 2
End
*****************

HKCU\Software\Microsoft\Internet Explorer\Main\\Search Page => Value was restored successfully.
HKCU\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A} => Key deleted successfully.
HKCR\Wow6432Node\CLSID\{0633EE93-D776-472f-A0FF-E1416B8B2E3A} => Key not found.
HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\\{E7DF6BFF-55A5-4EB7-A673-4ED3E9456D39} => Value deleted successfully.
HKCR\CLSID\{E7DF6BFF-55A5-4EB7-A673-4ED3E9456D39} => Key deleted successfully.
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{31332EEF-CB9F-458F-AFEB-D30E9A66B6BA} => Key deleted successfully.
HKCR\CLSID\{31332EEF-CB9F-458F-AFEB-D30E9A66B6BA} => Key deleted successfully.
HKLM\Software\Mozilla\Firefox\Extensions\\{F53C93F1-07D5-430c-86D4-C9531B27DFAF} => Value deleted successfully.
C:\Program Files\AVG\AVG2012\Firefox\DoNotTrack\ => Moved successfully.
HKLM\SOFTWARE\Google\Chrome\Extensions\ndibdjnfmopecpmkdieinmbadjfpblof => Key deleted successfully.
"C:\Program Files\AVG\AVG2012\Chrome\donottrack.crx" => File/Directory not found.
winmgmt => Service restored successfully.
C:\Documents and Settings\Martin - Micka\Plocha\FRSTLauncher.exe => Moved successfully.

Re: Prosím o kontolu, virus policie ČR.

Napsal: 18 zář 2013 21:41
od vyosek
Vypada to OK, jak se chova PC :???:

Re: Prosím o kontolu, virus policie ČR.

Napsal: 19 zář 2013 18:56
od RomanL2
V podstatě docela dobře, a řekl bych, že je vidět i určité zrychlení. Jinak mně osobně se tady ten virus nijak neprojevil. Je to zvláštní, už podruhé mi známí donesli PC (pokaždé jiní a řešil jsem to pochopitelně zde, u odborníků) s tím, že jim tam vyjíždí ten Virus Policie ČR, ale když jsem to spustil, tak se mi to tam nikdy neobjevilo. No, snad tím lépe.

Re: Prosím o kontolu, virus policie ČR.

Napsal: 19 zář 2013 22:21
od vyosek
Tak jeste uklidime :James008:

:arrow: T-Cleaner http://vyosek.ic.cz/pro_usery/T-Cleaner.exe
  • Stahnete a spustte
  • Pro potvrzeni volby mackejte A, Enter
  • Po pouziti utilitu smazte
  • Antiviry touhou utilitu chybne oznacit jako vir - jedna se o falesny poplach - takze v pohode stahnete (pripadne vypnete pri stahovani antivir)
:arrow: OTC http://oldtimer.geekstogo.com/OTC.exe
  • Stahnete a spustte
  • Kliknete na CleanUp a potvrdte YES
  • Program uklidi a restartuje PC

:arrow: TFC http://oldtimer.geekstogo.com/TFC.exe
  • Stahnete a spustte
  • Kliknete na Start a potvrdte OK
  • Program uklidi a restartuje pc
  • Po pouziti utilitu smazte
:arrow: Stahnete Ccleaner http://forum.viry.cz/viewtopic.php?t=7478
Panel čistič
  • Vse nechte jak je, jen dejte Analyzovat a pote Spustit CCleaner
Panel registry
  • dejte Hledej problémy
  • nasledne Opravit problémy - zalohu registru doporucuji udelat, opravte vsechny problemy
  • postup opakujte dokud nebude bez problemu - vetsinou cca 3x
Panel nástroje
  • Zde muzete odinstalovat nepotrebne programy
CCleaner doporucuji pouzivat cca jednou za tyden

:arrow: A pokud nejsou problemy ci dotazy, je to z me strany vse :|

Re: Prosím o kontolu, virus policie ČR.

Napsal: 21 zář 2013 07:41
od RomanL2
NB vypadá v pořádku, děkuji za pomoc.
Všechny časy jsou v UTC+01:00
Stránka 1 z 2

Založeno na phpBB® Forum Software © phpBB Limited

Český překlad – phpBB.cz