VIRY.CZ

Pomáháme v boji s počítačovou havěti!
https://forum.viry.cz:443/

Váš prehliadač bol zablokovaný

https://forum.viry.cz:443/viewtopic.php?t=134279

Stránka 1 z 2

Váš prehliadač bol zablokovaný

Napsal: 25 lis 2013 19:57
od Juraj1973
no dcérenka si pozerala nejaké rozprávky a naraz ma zavolala že svietilo toto čo je v nadpise + že vaše súbory sú zašifrované a mám zaplatiť či čo ešte

firefox mi ide vypnúť cez správcu úloh stahol som FRST a posielam log pozriete sa mi na to prosím, poprípade ako pokračovať - Ďakujem


can result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 25-11-2013
Ran by owner (administrator) on OWNER-PC on 25-11-2013 19:39:36
Running from C:\Users\owner\Downloads
Windows 7 Home Premium (X64) OS Language: Czech
Internet Explorer Version 9
Boot Mode: Normal

==================== Processes (Whitelisted) =================

(AMD) C:\Windows\System32\atiesrxx.exe
(AMD) C:\Windows\System32\atieclxx.exe
(Andrea Electronics Corporation) C:\Program Files\Realtek\Audio\HDA\AERTSr64.exe
(Broadcom Corporation.) C:\Program Files\WIDCOMM\Bluetooth Software\btwdins.exe
(ESET) C:\Program Files\ESET\ESET NOD32 Antivirus\x86\ekrn.exe
(Freemake) C:\ProgramData\Freemake\FreemakeUtilsService\FreemakeUtilsService.exe
() C:\Program Files (x86)\Dell DataSafe Local Backup\Components\Scheduler\STService.exe
(PC Tools) C:\Program Files (x86)\Common Files\PC Tools\sMonitor\StartManSvc.exe
(Dell Inc.) C:\Program Files\Dell\QuickSet\quickset.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(SoftThinks SAS) C:\Program Files (x86)\Dell DataSafe Local Backup\SftService.exe
(Skype Technologies S.A.) C:\ProgramData\Skype\Toolbars\Skype C2C Service\c2c_service.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\Version7\TeamViewer_Service.exe
(SoftThinks - Dell) C:\Program Files (x86)\Dell DataSafe Local Backup\Components\DSUpdate\DSUpd.exe
(Alps Electric Co., Ltd.) C:\Program Files\DellTPad\Apoint.exe
(Alps Electric Co., Ltd.) C:\Program Files\DellTPad\ApMsgFwd.exe
(ESET) C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe
(CANON INC.) C:\Program Files\Canon\MyPrinter\BJMYPRT.EXE
(Alps Electric Co., Ltd.) C:\Program Files\DellTPad\hidfind.exe
(Alps Electric Co., Ltd.) C:\Program Files\DellTPad\ApntEx.exe
(Skype Technologies S.A.) C:\Program Files (x86)\Skype\Phone\Skype.exe
(Samsung) C:\Program Files (x86)\Samsung\Kies\Kies.exe
(Broadcom Corporation.) C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe
() C:\Program Files (x86)\Roxio\Roxio Burn\RoxioBurnLauncher.exe
(Sun Microsystems, Inc.) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
(Adobe Systems Incorporated) C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe
(Samsung Electronics Co., Ltd.) C:\Program Files (x86)\Samsung\Kies\KiesTrayAgent.exe
(PC Tools) C:\Program Files (x86)\Common Files\PC Tools\sMonitor\SSDMonitor.exe
(SoftThinks - Dell) C:\Program Files (x86)\Dell DataSafe Local Backup\Toaster.exe
(ATI Technologies Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
(Broadcom Corporation.) C:\Program Files\WIDCOMM\Bluetooth Software\BTStackServer.exe
(Broadcom Corporation.) C:\Program Files\WIDCOMM\Bluetooth Software\BluetoothHeadsetProxy.exe
(Sun Microsystems, Inc.) C:\Program Files (x86)\Common Files\Java\Java Update\jucheck.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe

==================== Registry (Whitelisted) ==================

HKLM\...\Run: [QuickSet] - C:\Program Files\Dell\QuickSet\quickset.exe [3202928 2010-04-02] (Dell Inc.)
HKLM\...\Run: [RtHDVCpl] - C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [10810912 2010-05-21] (Realtek Semiconductor)
HKLM\...\Run: [Apoint] - C:\Program Files\DellTPad\Apoint.exe [384296 2010-04-05] (Alps Electric Co., Ltd.)
HKLM\...\Run: [egui] - C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe [4035152 2011-09-22] (ESET)
HKLM\...\Run: [CanonMyPrinter] - C:\Program Files\Canon\MyPrinter\BJMYPRT.EXE [2726728 2010-03-25] (CANON INC.)
HKLM-x32\...\RunOnce: ["C:\Program Files (x86)\Dell DataSafe Local Backup\Components\DSUpdate\DSUpdate.exe"] - "C:\Program Files (x86)\Dell DataSafe Local Backup\Components\DSUpdate\DSUpdate.exe" [560128 2011-09-15] (Dell)
HKLM-x32\...\RunOnce: [Launcher] - C:\Program Files (x86)\Dell DataSafe Local Backup\Components\Scheduler\Launcher.exe [165184 2011-01-13] (Softthinks)
HKCU\...\Run: [] - C:\Program Files (x86)\Samsung\Kies\External\FirmwareUpdate\KiesPDLR.exe [1106288 2013-05-23] (Samsung)
HKCU\...\Run: [Skype] - C:\Program Files (x86)\Skype\Phone\Skype.exe [20549280 2013-10-21] (Skype Technologies S.A.)
HKCU\...\Run: [KiesPreload] - C:\Program Files (x86)\Samsung\Kies\Kies.exe [1561968 2013-05-23] (Samsung)
MountPoints2: E - E:\AutoRun.exe
MountPoints2: {96157708-96a8-11e0-b71d-f04da27bc1de} - E:\AutoRun.exe
MountPoints2: {9615771d-96a8-11e0-b71d-f04da27bc1de} - E:\AutoRun.exe
MountPoints2: {c0eb633c-9845-11e0-bd71-f04da27bc1de} - E:\AutoRun.exe
MountPoints2: {d7b939e8-977f-11e0-9493-f04da27bc1de} - E:\AutoRun.exe
HKLM-x32\...\Run: [StartCCC] - C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [102400 2010-03-24] (Advanced Micro Devices, Inc.)
HKLM-x32\...\Run: [Dell Webcam Central] - C:\Program Files (x86)\Dell Webcam\Dell Webcam Central\WebcamDell2.exe [409744 2009-06-24] (Creative Technology Ltd)
HKLM-x32\...\Run: [Desktop Disc Tool] - C:\Program Files (x86)\Roxio\Roxio Burn\RoxioBurnLauncher.exe [498160 2009-12-15] ()
HKLM-x32\...\Run: [SunJavaUpdateSched] - C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [252848 2012-07-03] (Sun Microsystems, Inc.)
HKLM-x32\...\Run: [Adobe ARM] - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [958576 2013-04-04] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [] - [x]
HKLM-x32\...\Run: [KiesTrayAgent] - C:\Program Files (x86)\Samsung\Kies\KiesTrayAgent.exe [311152 2013-05-23] (Samsung Electronics Co., Ltd.)
HKLM-x32\...\Run: [SSDMonitor] - C:\Program Files (x86)\Common Files\PC Tools\sMonitor\SSDMonitor.exe [105120 2012-08-21] (PC Tools)
AppInit_DLLs: C:\Windows\System32\ [0 ] ()
AppInit_DLLs-x32: [ ] ()

==================== Internet (Whitelisted) ====================

StartMenuInternet: IEXPLORE.EXE - C:\Program Files (x86)\Internet Explorer\iexplore.exe
SearchScopes: HKLM - DefaultScope value is missing.
SearchScopes: HKLM-x32 - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKCU - DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = http://startsear.ch/?aff=1&src=sp&cf=1c ... earchTerms}
SearchScopes: HKCU - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = http://startsear.ch/?aff=1&src=sp&cf=1c ... earchTerms}
SearchScopes: HKCU - {4FDC0B76-E639-416E-A86A-C5694FAD6B10} URL = http://websearch.ask.com/redirect?clien ... 1AE2B8A048
BHO: Skype add-on for Internet Explorer - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll (Skype Technologies S.A.)
BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll (Sun Microsystems, Inc.)
BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO-x32: Skype Browser Helper - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
Handler: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll (Skype Technologies S.A.)
Handler-x32: http\0x00000001 - {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
Handler-x32: http\oledb - {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
Handler-x32: https\0x00000001 - {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
Handler-x32: https\oledb - {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
Handler-x32: msdaipp\0x00000001 - {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
Handler-x32: msdaipp\oledb - {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
Handler-x32: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Filter: text/xml - {807553E5-5146-11D5-A672-00B0D022E945} - No File
Tcpip\Parameters: [DhcpNameServer] 192.168.2.1

FireFox:
========
FF ProfilePath: C:\Users\owner\AppData\Roaming\Mozilla\Firefox\Profiles\sigrvhxy.default
FF Homepage: hxxp://www.google.sk/
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_11_9_900_117.dll ()
FF Plugin: @microsoft.com/GENUINE - disabled No File
FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_9_900_117.dll ()
FF Plugin-x32: @adobe.com/ShockwavePlayer - C:\Windows\SysWOW64\Adobe\Director\np32dsw_1203133.dll (Adobe Systems, Inc.)
FF Plugin-x32: @Google.com/GoogleEarthPlugin - C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll (Google)
FF Plugin-x32: @java.com/DTPlugin,version=10.6.2 - C:\Windows\SysWOW64\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=10.6.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @microsoft.com/GENUINE - disabled No File
FF Plugin-x32: @playstation.com/PsndlCheck,version=1.00 - C:\Program Files (x86)\Sony\PLAYSTATION Network Downloader\nppsndl.dll (Sony Computer Entertainment Inc.)
FF Plugin-x32: @SonyCreativeSoftware.com/Media Go,version=1.0 - C:\Program Files (x86)\Sony\Media Go\npmediago.dll (Sony Network Entertainment International LLC)
FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.21.165\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.21.165\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @veetle.com/veetleCorePlugin,version=0.9.18 - C:\Program Files (x86)\Veetle\plugins\npVeetle.dll (Veetle Inc)
FF Plugin-x32: @veetle.com/veetlePlayerPlugin,version=0.9.18 - C:\Program Files (x86)\Veetle\Player\npvlc.dll (Veetle Inc)
FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\atlas-sk.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\azet-sk.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\dunaj-sk.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\slovnik-sk.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\zoznam-sk.xml
FF Extension: DVDVideoSoft Menu - C:\Users\owner\AppData\Roaming\Mozilla\Firefox\Profiles\sigrvhxy.default\Extensions\{ACAA314B-EEBA-48e4-AD47-84E31C44796C}.xpi
FF Extension: Skype Click to Call - C:\Program Files (x86)\Mozilla Firefox\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A}
FF Extension: Skype Click to Call - C:\Program Files (x86)\Mozilla Firefox\browser\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A}
FF HKLM\...\Thunderbird\Extensions: [eplgTb@eset.com] - C:\Program Files\ESET\ESET NOD32 Antivirus\Mozilla Thunderbird
FF Extension: ESET Smart Security Extension - C:\Program Files\ESET\ESET NOD32 Antivirus\Mozilla Thunderbird
FF HKLM-x32\...\Firefox\Extensions: [fmconverter@gmail.com] - C:\Program Files (x86)\Freemake\Freemake Video Converter\BrowserPlugin\Firefox\
FF Extension: Freemake Video Converter Plugin - C:\Program Files (x86)\Freemake\Freemake Video Converter\BrowserPlugin\Firefox\
FF HKLM-x32\...\Thunderbird\Extensions: [eplgTb@eset.com] - C:\Program Files\ESET\ESET NOD32 Antivirus\Mozilla Thunderbird
FF Extension: ESET Smart Security Extension - C:\Program Files\ESET\ESET NOD32 Antivirus\Mozilla Thunderbird
FF HKLM-x32\...\Thunderbird\Extensions: [te_9.0@nokia.com] - C:\Program Files (x86)\Nokia\Nokia Suite\Connectors\Thunderbird Connector\ThunderbirdExtension_9.0
FF Extension: Thunderbird Address Book Synchronisation Extension - C:\Program Files (x86)\Nokia\Nokia Suite\Connectors\Thunderbird Connector\ThunderbirdExtension_9.0

Chrome:
=======
CHR DefaultSearchURL: (Ask) - http://websearch.ask.com/redirect?clien ... earchTerms}
CHR DefaultSuggestURL: (Ask) - http://ss.websearch.ask.com/query?qsrc= ... earchTerms}
CHR Plugin: (Shockwave Flash) - C:\Program Files (x86)\Google\Chrome\Application\31.0.1650.57\PepperFlash\pepflashplayer.dll ()
CHR Plugin: (Chrome Remote Desktop Viewer) - internal-remoting-viewer
CHR Plugin: (Native Client) - C:\Program Files (x86)\Google\Chrome\Application\31.0.1650.57\ppGoogleNaClPluginChrome.dll ()
CHR Plugin: (Chrome PDF Viewer) - C:\Program Files (x86)\Google\Chrome\Application\31.0.1650.57\pdf.dll ()
CHR Plugin: (Adobe Acrobat) - C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Browser\nppdf32.dll (Adobe Systems Inc.)
CHR Plugin: (Google Update) - C:\Program Files (x86)\Google\Update\1.3.21.135\npGoogleUpdate3.dll No File
CHR Plugin: (Java(TM) Platform SE 7 U6) - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
CHR Plugin: (Media Go Detector) - C:\Program Files (x86)\Sony\Media Go\npmediago.dll (Sony Network Entertainment International LLC)
CHR Plugin: (PlayStation(R)Network Downloader Check Plug-in) - C:\Program Files (x86)\Sony\PLAYSTATION Network Downloader\nppsndl.dll (Sony Computer Entertainment Inc.)
CHR Plugin: (Veetle TV Player) - C:\Program Files (x86)\Veetle\Player\npvlc.dll (Veetle Inc)
CHR Plugin: (Veetle TV Core) - C:\Program Files (x86)\Veetle\plugins\npVeetle.dll (Veetle Inc)
CHR Plugin: (Shockwave for Director) - C:\Windows\SysWOW64\Adobe\Director\np32dsw_1167637.dll No File
CHR Plugin: (Shockwave Flash) - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_6_602_180.dll No File
CHR Plugin: (Java Deployment Toolkit 7.0.60.24) - C:\Windows\SysWOW64\npDeployJava1.dll (Oracle Corporation)
CHR Extension: (Freemake Video Converter) - C:\Users\owner\AppData\Local\Google\Chrome\User Data\Default\Extensions\jbolfgndggfhhpbnkgnpjkfhinclbigj\1.0.0_0
CHR Extension: (Skype Click to Call) - C:\Users\owner\AppData\Local\Google\Chrome\User Data\Default\Extensions\lifbcibllhkdhoafpjfnlhfpfgnpldfl\6.13.0.13771_0
CHR Extension: (Google Wallet) - C:\Users\owner\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.5.0_0
CHR HKLM-x32\...\Chrome\Extension: [jbolfgndggfhhpbnkgnpjkfhinclbigj] - C:\Program Files (x86)\Freemake\Freemake Video Converter\BrowserPlugin\Chrome\Freemake.Plugin.Chrome.crx
CHR HKLM-x32\...\Chrome\Extension: [lifbcibllhkdhoafpjfnlhfpfgnpldfl] - C:\Program Files (x86)\Skype\Toolbars\Skype for Chromium\skype_chrome_extension.crx
CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION

==================== Services (Whitelisted) =================

R2 ekrn; C:\Program Files\ESET\ESET NOD32 Antivirus\x86\ekrn.exe [974944 2011-09-22] (ESET)
R2 Freemake Improver; C:\ProgramData\Freemake\FreemakeUtilsService\FreemakeUtilsService.exe [101888 2013-09-26] (Freemake)
R2 PCToolsSSDMonitorSvc; C:\Program Files (x86)\Common Files\PC Tools\sMonitor\StartManSvc.exe [794272 2012-08-21] (PC Tools)

==================== Drivers (Whitelisted) ====================

S2 Angelnt; C:\Windows\SysWow64\Drivers\ANGELNT.SYS [51072 2013-01-17] (Identcode Ltd.)
R2 eamonm; C:\Windows\System32\DRIVERS\eamonm.sys [202576 2011-08-09] (ESET)
R1 ehdrv; C:\Windows\System32\DRIVERS\ehdrv.sys [146432 2011-08-04] (ESET)
R2 epfwwfpr; C:\Windows\System32\DRIVERS\epfwwfpr.sys [137144 2011-08-04] (ESET)
S3 hwusbdev; C:\Windows\System32\DRIVERS\ewusbdev.sys [114560 2009-11-09] (Huawei Technologies Co., Ltd.)
S3 ssm_bus; C:\Windows\System32\DRIVERS\ssm_bus.sys [136192 2013-05-02] (MCCI Corporation)
S3 ssm_mdfl; C:\Windows\System32\DRIVERS\ssm_mdfl.sys [18944 2013-05-02] (MCCI Corporation)
S3 ssm_mdm; C:\Windows\System32\DRIVERS\ssm_mdm.sys [172032 2013-05-02] (MCCI Corporation)
R2 SSPORT; C:\Windows\SysWow64\Drivers\SSPORT.sys [11576 2009-10-28] (Samsung Electronics)
S3 dgderdrv; System32\drivers\dgderdrv.sys [x]
S2 DgiVecp; \??\C:\Windows\system32\Drivers\DgiVecp.sys [x]

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2013-11-25 19:39 - 2013-11-25 19:40 - 00017258 _____ C:\Users\owner\Downloads\FRST.txt
2013-11-25 19:37 - 2013-11-25 19:37 - 00000000 ____D C:\FRST
2013-11-25 19:36 - 2013-11-25 19:37 - 01958504 _____ (Farbar) C:\Users\owner\Downloads\FRST64.exe
2013-11-20 21:04 - 2013-11-20 21:14 - 00000000 ____D C:\Users\owner\Desktop\PIndarky 11 2013
2013-11-16 23:27 - 2013-11-16 23:28 - 13079688 _____ (Microsoft Corporation) C:\Users\owner\Downloads\Silverlight_x64.exe
2013-11-15 23:50 - 2013-11-16 09:22 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2013-11-12 06:54 - 2013-11-12 06:54 - 13538459 _____ C:\Users\owner\Desktop\fotky na vyvolanie.zip
2013-11-11 20:45 - 2013-11-11 20:45 - 00000000 ____D C:\Program Files (x86)\Autodesk
2013-11-03 20:44 - 2013-11-03 20:44 - 03317805 _____ C:\Users\owner\Downloads\Dokladova cast ponuky.zip
2013-11-03 16:58 - 2013-11-03 16:58 - 01545212 _____ C:\Users\owner\Downloads\Podmienky súťaže SEP000103961.zip
2013-11-03 15:25 - 2013-11-03 15:25 - 00013167 _____ C:\Users\owner\Downloads\Unimont ponuka TIG,MIG,MMA 23.10.2013..xlsx
2013-11-03 15:20 - 2013-11-22 11:17 - 00000000 ____D C:\Users\owner\Documents\UNI-MONT
2013-10-28 19:13 - 2013-10-28 19:13 - 00001942 _____ C:\Users\owner\Downloads\zvonenie1.vem

==================== One Month Modified Files and Folders =======

2013-11-25 19:40 - 2013-11-25 19:39 - 00017258 _____ C:\Users\owner\Downloads\FRST.txt
2013-11-25 19:40 - 2011-06-10 22:06 - 00000000 ____D C:\Users\owner\AppData\Roaming\Skype
2013-11-25 19:37 - 2013-11-25 19:37 - 00000000 ____D C:\FRST
2013-11-25 19:37 - 2013-11-25 19:36 - 01958504 _____ (Farbar) C:\Users\owner\Downloads\FRST64.exe
2013-11-25 19:37 - 2011-08-04 19:23 - 00000934 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2013-11-25 19:37 - 2010-07-26 07:23 - 00626670 _____ C:\Windows\system32\perfh005.dat
2013-11-25 19:37 - 2010-07-26 07:23 - 00123250 _____ C:\Windows\system32\perfc005.dat
2013-11-25 19:37 - 2009-07-14 06:13 - 01478982 _____ C:\Windows\system32\PerfStringBackup.INI
2013-11-25 19:36 - 2012-04-09 17:52 - 00000914 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2013-11-25 19:20 - 2013-07-16 17:13 - 00000284 _____ C:\Windows\Tasks\RMSchedule.job
2013-11-25 19:20 - 2012-10-19 18:00 - 00000414 _____ C:\Windows\SysWOW64\AppLog.log
2013-11-25 18:37 - 2011-08-04 19:23 - 00000930 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2013-11-25 18:06 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\tracing
2013-11-25 17:18 - 2009-07-14 05:45 - 00013872 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2013-11-25 17:18 - 2009-07-14 05:45 - 00013872 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2013-11-25 17:12 - 2010-07-26 04:34 - 01208001 _____ C:\Windows\WindowsUpdate.log
2013-11-25 17:10 - 2013-09-15 10:26 - 00010102 _____ C:\Windows\setupact.log
2013-11-25 17:10 - 2013-07-16 18:00 - 00000284 _____ C:\Windows\Tasks\RMAutoUpdate.job
2013-11-25 17:10 - 2012-10-18 18:51 - 00000000 ____D C:\Program Files (x86)\PC Tools Registry Mechanic
2013-11-25 17:10 - 2011-06-10 09:39 - 00000000 ____D C:\Users\owner\AppData\Local\SoftThinks
2013-11-25 17:10 - 2010-07-26 05:09 - 00000000 ____D C:\Program Files (x86)\Dell DataSafe Local Backup
2013-11-25 17:10 - 2009-07-14 06:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2013-11-24 20:55 - 2012-08-28 17:46 - 00000000 ____D C:\Users\owner\AppData\Roaming\.minecraft
2013-11-23 22:24 - 2011-07-31 11:02 - 00003970 _____ C:\Windows\System32\Tasks\User_Feed_Synchronization-{DE531049-7CE3-4D89-B729-94458F8ED52B}
2013-11-22 23:42 - 2011-08-20 09:48 - 00000060 _____ C:\Windows\wpd99.drv
2013-11-22 23:42 - 2011-08-20 09:48 - 00000000 ____D C:\ProgramData\pdf995
2013-11-22 23:39 - 2012-10-27 12:08 - 00000000 ____D C:\Users\owner\Desktop\mirka
2013-11-22 11:17 - 2013-11-03 15:20 - 00000000 ____D C:\Users\owner\Documents\UNI-MONT
2013-11-20 21:14 - 2013-11-20 21:04 - 00000000 ____D C:\Users\owner\Desktop\PIndarky 11 2013
2013-11-16 23:28 - 2013-11-16 23:27 - 13079688 _____ (Microsoft Corporation) C:\Users\owner\Downloads\Silverlight_x64.exe
2013-11-16 21:58 - 2012-05-03 10:28 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2013-11-16 09:22 - 2013-11-15 23:50 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2013-11-15 09:03 - 2011-08-04 19:26 - 00002185 _____ C:\Users\Public\Desktop\Google Chrome.lnk
2013-11-13 15:49 - 2013-09-16 14:37 - 00006340 _____ C:\Windows\PFRO.log
2013-11-12 20:21 - 2013-07-28 10:16 - 00000000 ____D C:\Users\owner\Desktop\DINO PARK AUDI
2013-11-12 16:49 - 2013-10-06 09:58 - 00000000 ____D C:\Users\owner\Desktop\fotky na vyvolanie
2013-11-12 06:54 - 2013-11-12 06:54 - 13538459 _____ C:\Users\owner\Desktop\fotky na vyvolanie.zip
2013-11-11 20:45 - 2013-11-11 20:45 - 00000000 ____D C:\Program Files (x86)\Autodesk
2013-11-09 19:06 - 2013-10-24 17:28 - 00000000 ____D C:\Users\owner\Desktop\PINDARE
2013-11-09 15:18 - 2010-07-26 05:10 - 00000000 ___RD C:\Program Files (x86)\Skype
2013-11-09 15:18 - 2010-07-26 05:10 - 00000000 ____D C:\ProgramData\Skype
2013-11-03 22:52 - 2013-07-12 21:35 - 00000000 ____D C:\Users\owner\Desktop\PDF súbory
2013-11-03 20:44 - 2013-11-03 20:44 - 03317805 _____ C:\Users\owner\Downloads\Dokladova cast ponuky.zip
2013-11-03 16:58 - 2013-11-03 16:58 - 01545212 _____ C:\Users\owner\Downloads\Podmienky súťaže SEP000103961.zip
2013-11-03 15:25 - 2013-11-03 15:25 - 00013167 _____ C:\Users\owner\Downloads\Unimont ponuka TIG,MIG,MMA 23.10.2013..xlsx
2013-10-29 17:20 - 2012-04-10 11:29 - 00000000 ____D C:\Users\owner\Desktop\Jurko projekty skola
2013-10-29 17:20 - 2012-04-10 11:27 - 00000000 ____D C:\Users\owner\Desktop\Mirka a jej skola
2013-10-29 17:19 - 2012-05-07 11:41 - 00000000 ___RD C:\Users\owner\Desktop\dianka
2013-10-28 19:13 - 2013-10-28 19:13 - 00001942 _____ C:\Users\owner\Downloads\zvonenie1.vem

Some content of TEMP:
====================
C:\Users\owner\AppData\Local\Temp\FreemakeVideoConverter_4.0.4.4.exe
C:\Users\owner\AppData\Local\Temp\lk5d3m4j.dll


==================== Bamital & volsnap Check =================

C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit


LastRegBack: 2013-11-23 16:34

==================== End Of Log ============================

Re: Váš prehliadač bol zablokovaný

Napsal: 25 lis 2013 20:13
od vyosek
Zdravim :)

:arrow: Ty zasifrovane soubory, nooo to bude asi problem :?:

:arrow: Muzete dat prosim screen zasiforvanych souboru = co ukazuji kdyz je chcete otevrit

Re: Váš prehliadač bol zablokovaný

Napsal: 25 lis 2013 20:29
od Juraj1973
nerobí mi to žiadny problém, len tú stránku mi v prehliadači nešlo zavrieť.. až cez správcu úloh, inak sa PC chová normálne... ja len že či mi tam niečo neostalo

je to táto stránka hxxp://minv.sk.id516821102-1350262064.s6818.com/?flow_id=6630&860532=98946/case_id=20210 Pozor, neskúšať niekto kto by to nemal mať pod kontrolou !!!

Re: Váš prehliadač bol zablokovaný

Napsal: 25 lis 2013 20:31
od vyosek
:arrow: Stahnete Malwarebytes Anti-Rootkit http://www.bleepingcomputer.com/downloa ... i-rootkit/
  • Ulozte nejlepe na Plochu a rozbalte
  • Spustte kliknutim na mbar
  • Nyni postupne kliknete na Next a Update
  • Po dokonceni update (aktualizace) databaze kliknete opet na Next
  • Nechte zaskrtnute vsechny tri moznosti a klinete na Scan cimz spustite prohledavani PC
  • Po dokonceni skenu (cca 5 minutek) zkontrolujte, zda-li je u vsech nalezu (samozrejme pokud budou) zatrzitko
  • Tez zkontrolujte, jetsli je zatrzitko u Create Restore point
  • Nyni kliknete na CleanUp cimz nalezenou infekci odstranime
  • PC bude restartovan
  • Slozka mbar by mela obsahovat log (a zrejme se i sam otevre) mbar-log-rok-mesic-den (hodina-minuta-sekunda).txt, ten mi sem dejte

Re: Váš prehliadač bol zablokovaný

Napsal: 25 lis 2013 22:23
od Juraj1973
malware nenájdený .. myslíte že do PC sa nedostalo nič ?

Re: Váš prehliadač bol zablokovaný

Napsal: 25 lis 2013 22:24
od vyosek
:arrow: Toto byl jen rychly test aby nam pripadne malware neblokoval dalsi kroky

:arrow: Stahnete Malwarebytes' Anti-Malware (zkracene MBAM) http://forum.viry.cz/viewtopic.php?f=29&t=115222
  • Provedte aktualizaci
  • Provedte uplny sken - nic nemazte :!:
  • MBAM miva obcas falesne detekce, proto vlozte log do prispevku a pockejte na posouzeni

Re: Váš prehliadač bol zablokovaný

Napsal: 26 lis 2013 23:06
od Juraj1973
tak uplny scan mi "teprve" beží.. (všimol som si až neskôr)

rychly dopadol takto alwarebytes Anti-Malware (Zkušební verze Malwarebytes Anti-Malware.) 1.75.0.1300
www.malwarebytes.org

Verze: v2013.11.26.10

Windows 7 x64 NTFS
Internet Explorer 9.0.8112.16421
owner :: OWNER-PC [administrátor]

Ochrana: Povolena

26.11.2013 22:22:53
MBAM-log-2013-11-26 (22-51-30).txt

Typ: Rychlá kontrola
Nastavení kontroly povoleno: Paměť | Po spuštění | Registr | Systémové soubory | Heuristická analýza Extra | Heuristická analýza Shuriken | PUP | PUM
Nastavení kontroly zakázáno: P2P
Kontrolované objekty: 212385
Uplynulý čas: 19 minut, 30 sekund

Nalezené procesy v paměti: 0
(Žádné škodlivé položky nebyly zjištěny)

Nalezené moduly v paměti: 0
(Žádné škodlivé položky nebyly zjištěny)

Nalezené klíče v registru: 0
(Žádné škodlivé položky nebyly zjištěny)

Nalezené hodnoty v registru: 0
(Žádné škodlivé položky nebyly zjištěny)

Nalezené datové položky v registru: 0
(Žádné škodlivé položky nebyly zjištěny)

Nalezené složky: 2
C:\Users\owner\AppData\Roaming\OpenCandy (PUP.Optional.OpenCandy) -> Nebyla provedena žádná instrukce.
C:\Users\owner\AppData\Roaming\OpenCandy\B9005A13C1674389B9D4ADDD60D6C030 (PUP.Optional.OpenCandy) -> Nebyla provedena žádná instrukce.

Nalezené soubory: 8
C:\Users\owner\AppData\Roaming\OpenCandy\B9005A13C1674389B9D4ADDD60D6C030\LatestDLMgr.exe (PUP.Optional.OpenCandy.A) -> Nebyla provedena žádná instrukce.
C:\Users\owner\AppData\Local\Temp\FreemakeVideoConverter_4.0.4.4.exe (PUP.Optional.OpenCandy) -> Nebyla provedena žádná instrukce.
C:\Users\owner\Downloads\FreemakeVideoConverterSetup.exe (PUP.Optional.OpenCandy) -> Nebyla provedena žádná instrukce.
C:\Users\owner\Downloads\rcpsetup_softonic_englobal.exe (PUP.Optional.RegCleanerPro) -> Nebyla provedena žádná instrukce.
C:\Users\owner\Downloads\veetle-0.9.18.exe (PUP.Optional.OpenCandy) -> Nebyla provedena žádná instrukce.
C:\Users\owner\AppData\Roaming\Mozilla\Extensions\{1FD91A9C-410C-4090-BBCC-55D3450EF433} (PUP.Optional.Searchqu.A) -> Nebyla provedena žádná instrukce.
C:\Users\owner\AppData\Roaming\OpenCandy\B9005A13C1674389B9D4ADDD60D6C030\5879.ico (PUP.Optional.OpenCandy) -> Nebyla provedena žádná instrukce.
C:\Users\owner\AppData\Roaming\OpenCandy\B9005A13C1674389B9D4ADDD60D6C030\PasswordBoxCHSTORE_p1v0.exe (PUP.Optional.OpenCandy) -> Nebyla provedena žádná instrukce.

(konec)
z tohoto asi nič netreba mazať, či ?

Re: Váš prehliadač bol zablokovaný

Napsal: 26 lis 2013 23:14
od vyosek
Prave naopak, vse smazte, jen droppery a reklamni adware...

Na uplny sken si pockam...

Re: Váš prehliadač bol zablokovaný

Napsal: 27 lis 2013 23:58
od Juraj1973
sorry už bolo veľa hodín.. log nižšie.. no všetko som mazal

Malwarebytes Anti-Malware (Zkušební verze Malwarebytes Anti-Malware.) 1.75.0.1300
www.malwarebytes.org

Verze: v2013.11.26.10

Windows 7 x64 NTFS
Internet Explorer 9.0.8112.16421
owner :: OWNER-PC [administrátor]

Ochrana: Povolena

26.11.2013 23:38:41
mbam-log-2013-11-26 (23-38-41).txt

Typ: Kompletní kontrola (C:\|)
Nastavení kontroly povoleno: Paměť | Po spuštění | Registr | Systémové soubory | Heuristická analýza Extra | Heuristická analýza Shuriken | PUP | PUM
Nastavení kontroly zakázáno: P2P
Kontrolované objekty: 393399
Uplynulý čas: 1 hodin, 28 minut, 1 sekund

Nalezené procesy v paměti: 0
(Žádné škodlivé položky nebyly zjištěny)

Nalezené moduly v paměti: 0
(Žádné škodlivé položky nebyly zjištěny)

Nalezené klíče v registru: 0
(Žádné škodlivé položky nebyly zjištěny)

Nalezené hodnoty v registru: 0
(Žádné škodlivé položky nebyly zjištěny)

Nalezené datové položky v registru: 0
(Žádné škodlivé položky nebyly zjištěny)

Nalezené složky: 0
(Žádné škodlivé položky nebyly zjištěny)

Nalezené soubory: 5
C:\Users\owner\AppData\Local\Google\Chrome\User Data\Default\File System\000\t\00\00000000 (PUP.Optional.OneClickDownloader.A) -> Přesun do karantény a smazání se zdařilo.
C:\Users\owner\Desktop\Juro notebook\Místní disk (C)\pdf.zip (RiskWare.Tool.CK) -> Přesun do karantény a smazání se zdařilo.
C:\Users\owner\Desktop\Juro notebook\Místní disk (C)\Preberanie\WinXP.Manager.v6.0.5.KeyGen.Only.rar (RiskWare.Tool.CK) -> Přesun do karantény a smazání se zdařilo.
C:\Users\owner\Desktop\Juro notebook\Místní disk (C)\Preberanie\WinXP.Manager.v6.0.5.KeyGen.Only\keygen.exe (RiskWare.Tool.CK) -> Přesun do karantény a smazání se zdařilo.
C:\Users\owner\Desktop\Juro notebook\Plocha\Ja rozne plocha\Stiahnuté súbory\cacheman.exe (Malware.NSPack) -> Přesun do karantény a smazání se zdařilo.

(konec)

Re: Váš prehliadač bol zablokovaný

Napsal: 28 lis 2013 16:56
od vyosek
:arrow: Tvorba fixlistu pro FRST
  • Spustte poznamkovy blok (Start-spustit-notepad)
  • Zkopirujte skript nize

  • Kód: Vybrat vše

    Start
HKLM-x32\...\RunOnce: ["C:\Program Files (x86)\Dell DataSafe Local Backup\Components\DSUpdate\DSUpdate.exe"] - "C:\Program Files (x86)\Dell DataSafe Local Backup\Components\DSUpdate\DSUpdate.exe" [560128 2011-09-15] (Dell)
HKLM-x32\...\RunOnce: [Launcher] - C:\Program Files (x86)\Dell DataSafe Local Backup\Components\Scheduler\Launcher.exe [165184 2011-01-13] (Softthinks)
HKCU\...\Run: [] - C:\Program Files (x86)\Samsung\Kies\External\FirmwareUpdate\KiesPDLR.exe [1106288 2013-05-23] (Samsung)
HKCU\...\Run: [Skype] - C:\Program Files (x86)\Skype\Phone\Skype.exe [20549280 2013-10-21] (Skype Technologies S.A.)
HKCU\...\Run: [KiesPreload] - C:\Program Files (x86)\Samsung\Kies\Kies.exe [1561968 2013-05-23] (Samsung)
MountPoints2: E - E:\AutoRun.exe
MountPoints2: {96157708-96a8-11e0-b71d-f04da27bc1de} - E:\AutoRun.exe
MountPoints2: {9615771d-96a8-11e0-b71d-f04da27bc1de} - E:\AutoRun.exe
MountPoints2: {c0eb633c-9845-11e0-bd71-f04da27bc1de} - E:\AutoRun.exe
MountPoints2: {d7b939e8-977f-11e0-9493-f04da27bc1de} - E:\AutoRun.exe
HKLM-x32\...\Run: [SunJavaUpdateSched] - C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [252848 2012-07-03] (Sun Microsystems, Inc.)
HKLM-x32\...\Run: [Adobe ARM] - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [958576 2013-04-04] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [] - [x]
HKLM-x32\...\Run: [KiesTrayAgent] - C:\Program Files (x86)\Samsung\Kies\KiesTrayAgent.exe [311152 2013-05-23] (Samsung Electronics Co., Ltd.)
HKLM-x32\...\Run: [SSDMonitor] - C:\Program Files (x86)\Common Files\PC Tools\sMonitor\SSDMonitor.exe [105120 2012-08-21] (PC Tools)
AppInit_DLLs: C:\Windows\System32\ [0 ] ()
AppInit_DLLs-x32: [ ] ()

SearchScopes: HKLM - DefaultScope value is missing.
SearchScopes: HKLM-x32 - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKCU - DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = http://startsear.ch/?aff=1&src=sp&cf=1c ... 27bc1de&q={searchTerms}
SearchScopes: HKCU - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = http://startsear.ch/?aff=1&src=sp&cf=1c ... 27bc1de&q={searchTerms}
SearchScopes: HKCU - {4FDC0B76-E639-416E-A86A-C5694FAD6B10} URL = http://websearch.ask.com/redirect?clien ... &src=kw&q={searchTerms}&locale=en_EU&apn_ptnrs=PV&apn_dtid=YYYYYYYYSK&apn_uid=6c4bf9d9-6789-400f-ad3c-aa79e126b798&apn_sauid=D569A2D2-CD34-4767-BBF2-8D1AE2B8A048
BHO: Skype add-on for Internet Explorer - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll (Skype Technologies S.A.)
Filter: text/xml - {807553E5-5146-11D5-A672-00B0D022E945} - No File

CHR DefaultSearchURL: (Ask) - http://websearch.ask.com/redirect?clien ... YYYYYSK&q={searchTerms}
CHR DefaultSuggestURL: (Ask) - http://ss.websearch.ask.com/query?qsrc= ... =prefix&q={searchTerms}
CHR Plugin: (Google Update) - C:\Program Files (x86)\Google\Update\1.3.21.135\npGoogleUpdate3.dll No File
CHR Plugin: (Shockwave for Director) - C:\Windows\SysWOW64\Adobe\Director\np32dsw_1167637.dll No File
CHR Plugin: (Shockwave Flash) - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_6_602_180.dll No File
CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION

S3 dgderdrv; System32\drivers\dgderdrv.sys [x]
S2 DgiVecp; \??\C:\Windows\system32\Drivers\DgiVecp.sys [x]

C:\Users\owner\AppData\Local\Temp\FreemakeVideoConverter_4.0.4.4.exe
C:\Users\owner\AppData\Local\Temp\lk5d3m4j.dll

Hosts:
CMD: shutdown /r /f /t 2

End
  • Ulozte vytvoreny TXT jako fixlist.txt
  • Presunte vytvoreny fixlist vedle FRST
:arrow: Spustte znovu FRST.exe
  • Kliknete na Fix
  • Probehne oprava a vytvori log Fixlog.txt
:arrow: Restart PC a dejte mi sem fixlog.txt

Re: Váš prehliadač bol zablokovaný

Napsal: 28 lis 2013 22:30
od Juraj1973
Fix result of Farbar Recovery Tool (FRST written by Farbar) (x64) Version: 25-11-2013
Ran by owner at 2013-11-28 22:20:25 Run:1
Running from C:\Users\owner\Desktop
Boot Mode: Normal
==============================================

Content of fixlist:
*****************
Start
HKLM-x32\...\RunOnce: ["C:\Program Files (x86)\Dell DataSafe Local Backup\Components\DSUpdate\DSUpdate.exe"] - "C:\Program Files (x86)\Dell DataSafe Local Backup\Components\DSUpdate\DSUpdate.exe" [560128 2011-09-15] (Dell)
HKLM-x32\...\RunOnce: [Launcher] - C:\Program Files (x86)\Dell DataSafe Local Backup\Components\Scheduler\Launcher.exe [165184 2011-01-13] (Softthinks)
HKCU\...\Run: [] - C:\Program Files (x86)\Samsung\Kies\External\FirmwareUpdate\KiesPDLR.exe [1106288 2013-05-23] (Samsung)
HKCU\...\Run: [Skype] - C:\Program Files (x86)\Skype\Phone\Skype.exe [20549280 2013-10-21] (Skype Technologies S.A.)
HKCU\...\Run: [KiesPreload] - C:\Program Files (x86)\Samsung\Kies\Kies.exe [1561968 2013-05-23] (Samsung)
MountPoints2: E - E:\AutoRun.exe
MountPoints2: {96157708-96a8-11e0-b71d-f04da27bc1de} - E:\AutoRun.exe
MountPoints2: {9615771d-96a8-11e0-b71d-f04da27bc1de} - E:\AutoRun.exe
MountPoints2: {c0eb633c-9845-11e0-bd71-f04da27bc1de} - E:\AutoRun.exe
MountPoints2: {d7b939e8-977f-11e0-9493-f04da27bc1de} - E:\AutoRun.exe
HKLM-x32\...\Run: [SunJavaUpdateSched] - C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [252848 2012-07-03] (Sun Microsystems, Inc.)
HKLM-x32\...\Run: [Adobe ARM] - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [958576 2013-04-04] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [] - [x]
HKLM-x32\...\Run: [KiesTrayAgent] - C:\Program Files (x86)\Samsung\Kies\KiesTrayAgent.exe [311152 2013-05-23] (Samsung Electronics Co., Ltd.)
HKLM-x32\...\Run: [SSDMonitor] - C:\Program Files (x86)\Common Files\PC Tools\sMonitor\SSDMonitor.exe [105120 2012-08-21] (PC Tools)
AppInit_DLLs: C:\Windows\System32\ [0 ] ()
AppInit_DLLs-x32: [ ] ()

SearchScopes: HKLM - DefaultScope value is missing.
SearchScopes: HKLM-x32 - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKCU - DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = http://startsear.ch/?aff=1&src=sp&cf=1c ... 27bc1de&q={searchTerms}
SearchScopes: HKCU - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = http://startsear.ch/?aff=1&src=sp&cf=1c ... 27bc1de&q={searchTerms}
SearchScopes: HKCU - {4FDC0B76-E639-416E-A86A-C5694FAD6B10} URL = http://websearch.ask.com/redirect?clien ... &src=kw&q={searchTerms}&locale=en_EU&apn_ptnrs=PV&apn_dtid=YYYYYYYYSK&apn_uid=6c4bf9d9-6789-400f-ad3c-aa79e126b798&apn_sauid=D569A2D2-CD34-4767-BBF2-8D1AE2B8A048
BHO: Skype add-on for Internet Explorer - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll (Skype Technologies S.A.)
Filter: text/xml - {807553E5-5146-11D5-A672-00B0D022E945} - No File

CHR DefaultSearchURL: (Ask) - http://websearch.ask.com/redirect?clien ... YYYYYSK&q={searchTerms}
CHR DefaultSuggestURL: (Ask) - http://ss.websearch.ask.com/query?qsrc= ... =prefix&q={searchTerms}
CHR Plugin: (Google Update) - C:\Program Files (x86)\Google\Update\1.3.21.135\npGoogleUpdate3.dll No File
CHR Plugin: (Shockwave for Director) - C:\Windows\SysWOW64\Adobe\Director\np32dsw_1167637.dll No File
CHR Plugin: (Shockwave Flash) - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_6_602_180.dll No File
CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION

S3 dgderdrv; System32\drivers\dgderdrv.sys [x]
S2 DgiVecp; \??\C:\Windows\system32\Drivers\DgiVecp.sys [x]

C:\Users\owner\AppData\Local\Temp\FreemakeVideoConverter_4.0.4.4.exe
C:\Users\owner\AppData\Local\Temp\lk5d3m4j.dll

Hosts:
CMD: shutdown /r /f /t 2

End
*****************

HKLM\Software\WOW6432Node\Microsoft\Windows\CurrentVersion\RunOnce\\"C:\Program Files (x86)\Dell DataSafe Local Backup\Components\DSUpdate\DSUpdate.exe" => Value deleted successfully.
HKLM\Software\WOW6432Node\Microsoft\Windows\CurrentVersion\RunOnce\\Launcher => Value deleted successfully.
HKCU\Software\Microsoft\Windows\CurrentVersion\Run\\ => Value deleted successfully.
HKCU\Software\Microsoft\Windows\CurrentVersion\Run\\Skype => Value deleted successfully.
HKCU\Software\Microsoft\Windows\CurrentVersion\Run\\KiesPreload => Value deleted successfully.
HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\E => Key deleted successfully.
HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{96157708-96a8-11e0-b71d-f04da27bc1de} => Key deleted successfully.
HKCR\CLSID\{96157708-96a8-11e0-b71d-f04da27bc1de} => Key not found.
HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{9615771d-96a8-11e0-b71d-f04da27bc1de} => Key deleted successfully.
HKCR\CLSID\{9615771d-96a8-11e0-b71d-f04da27bc1de} => Key not found.
HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{c0eb633c-9845-11e0-bd71-f04da27bc1de} => Key deleted successfully.
HKCR\CLSID\{c0eb633c-9845-11e0-bd71-f04da27bc1de} => Key not found.
HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{d7b939e8-977f-11e0-9493-f04da27bc1de} => Key deleted successfully.
HKCR\CLSID\{d7b939e8-977f-11e0-9493-f04da27bc1de} => Key not found.
HKLM\Software\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\\SunJavaUpdateSched => Value deleted successfully.
HKLM\Software\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\\Adobe ARM => Value deleted successfully.
HKLM\Software\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\\ => Value deleted successfully.
HKLM\Software\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\\KiesTrayAgent => Value deleted successfully.
HKLM\Software\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\\SSDMonitor => Value deleted successfully.
HKLM\Software\Microsoft\Windows NT\CurrentVersion\Windows\\AppInit_DLLs => Value was restored successfully.
HKLM\Software\Wow6432Node\Microsoft\Windows NT\CurrentVersion\Windows\\AppInit_DLLs => Value was restored successfully.
HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope => Value was restored successfully.
HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A} => Key deleted successfully.
HKCR\Wow6432Node\CLSID\{0633EE93-D776-472f-A0FF-E1416B8B2E3A} => Key not found.
HKCU\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope => Value deleted successfully.
HKCU\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A} => Key deleted successfully.
HKCR\CLSID\{0633EE93-D776-472f-A0FF-E1416B8B2E3A} => Key not found.
HKCU\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{4FDC0B76-E639-416E-A86A-C5694FAD6B10} => Key deleted successfully.
HKCR\CLSID\{4FDC0B76-E639-416E-A86A-C5694FAD6B10} => Key not found.
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497} => Key deleted successfully.
HKCR\CLSID\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497} => Key deleted successfully.
HKCR\PROTOCOLS\Filter\text/xml => Key deleted successfully.
HKCR\CLSID\{807553E5-5146-11D5-A672-00B0D022E945} => Key not found.
CHR DefaultSearchURL: (Ask) - http://websearch.ask.com/redirect?clien ... YYYYYSK&q={searchTerms} ==> The Chrome "Settings" can be used to fix the entry.
CHR DefaultSuggestURL: (Ask) - http://ss.websearch.ask.com/query?qsrc= ... =prefix&q={searchTerms} ==> The Chrome "Settings" can be used to fix the entry.
C:\Program Files (x86)\Google\Update\1.3.21.135\npGoogleUpdate3.dll not found.
C:\Windows\SysWOW64\Adobe\Director\np32dsw_1167637.dll not found.
C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_6_602_180.dll not found.
HKLM\SOFTWARE\Policies\Google => Key deleted successfully.
dgderdrv => Service deleted successfully.
DgiVecp => Service deleted successfully.
"C:\Users\owner\AppData\Local\Temp\FreemakeVideoConverter_4.0.4.4.exe" => File/Directory not found.
C:\Users\owner\AppData\Local\Temp\lk5d3m4j.dll => Moved successfully.
C:\Windows\System32\Drivers\etc\hosts => Moved successfully.
Hosts was reset successfully.

========= shutdown /r /f /t 2 =========


========= End of CMD: =========


==== End of Fixlog ====

Re: Váš prehliadač bol zablokovaný

Napsal: 28 lis 2013 22:50
od vyosek
Jak se chova PC :???:

Re: Váš prehliadač bol zablokovaný

Napsal: 29 lis 2013 19:48
od Juraj1973
.. šlape bez problémov.. ďakujem za pomoc, čas a ochotu

Re: Váš prehliadač bol zablokovaný

Napsal: 29 lis 2013 20:08
od vyosek
Tak jeste uklidime :James008:

:arrow: T-Cleaner http://vyosek.ic.cz/pro_usery/T-Cleaner.exe
  • Stahnete a spustte
  • Pro potvrzeni volby mackejte A, Enter
  • Po pouziti utilitu smazte
  • Antiviry touhou utilitu chybne oznacit jako vir - jedna se o falesny poplach - takze v pohode stahnete (pripadne vypnete pri stahovani antivir)
:arrow: OTC http://oldtimer.geekstogo.com/OTC.exe
  • Stahnete a spustte
  • Kliknete na CleanUp a potvrdte YES
  • Program uklidi a restartuje PC

:arrow: TFC http://oldtimer.geekstogo.com/TFC.exe
  • Stahnete a spustte
  • Kliknete na Start a potvrdte OK
  • Program uklidi a restartuje pc
  • Po pouziti utilitu smazte
:arrow: Stahnete Ccleaner http://forum.viry.cz/viewtopic.php?t=7478
Panel čistič
  • Vse nechte jak je, jen dejte Analyzovat a pote Spustit CCleaner
Panel registry
  • dejte Hledej problémy
  • nasledne Opravit problémy - zalohu registru doporucuji udelat, opravte vsechny problemy
  • postup opakujte dokud nebude bez problemu - vetsinou cca 3x
Panel nástroje
  • Zde muzete odinstalovat nepotrebne programy
CCleaner doporucuji pouzivat cca jednou za tyden

:arrow: A pokud nejsou problemy ci dotazy, je to z me strany vse :|

Re: Váš prehliadač bol zablokovaný

Napsal: 03 pro 2013 18:18
od Juraj1973
uff.. prateľu, po aplikácii T-cleaner-u sa mi "rozhasil" celý firefox, neotvára mi stránky korektne a nemôžem ho používať.. skúšal som preinštalovať, vymazať a čo ja viem čo, bez výsledku mozilla firefox mi proste notvára stránky tak ako má (rozhádzané, bez obrázkov a pod)
Všechny časy jsou v UTC+01:00
Stránka 1 z 2

Založeno na phpBB® Forum Software © phpBB Limited

Český překlad – phpBB.cz