VIRY.CZ

Ahoj, moc se omlouvám za otravování, bohužel jsem si zřejmě stáhla vir, neustále mi vyskakují reklamy od Ads by bettersurf.

Můj log viz níže, děkuji moc všem za pomoc:) :

Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 14-12-2013 01
Ran by TOSHIBA (administrator) on TOSHIBA-PC on 14-12-2013 23:19:21
Running from C:\Users\TOSHIBA\Desktop
Microsoft Windows 7 Professional Service Pack 1 (X86) OS Language: Czech
Internet Explorer Version 10
Boot Mode: Normal

==================== Processes (Whitelisted) ===================

() C:\Program Files\ATK Hotkey\ASLDRSrv.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe
(LSI Corporation) C:\Program Files\LSI SoftModem\agrsmsvc.exe
() C:\Windows\System32\dmwu.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastUI.exe
(Intel Corporation) C:\Windows\System32\igfxtray.exe
(Intel Corporation) C:\Windows\System32\hkcmd.exe
(Intel Corporation) C:\Windows\System32\igfxsrvc.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe
(ATK0100) C:\Program Files\ATK Hotkey\HControl.exe
(Adobe Systems Incorporated) C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe
(Microsoft Corporation) C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe
(SweetIM Technologies Ltd.) C:\Program Files\SweetIM\Messenger\SweetIM.exe
(SweetIM Technologies Ltd.) C:\Program Files\SweetIM\Communicator\SweetPacksUpdateManager.exe
(Microsoft Corporation) C:\Windows\System32\StikyNot.exe
() C:\Windows\System32\jmdp\stij.exe
(Google Inc.) C:\Users\TOSHIBA\AppData\Local\Google\Chrome\Application\old_chrome.exe
(Google Inc.) C:\Users\TOSHIBA\AppData\Local\Google\Chrome\Application\old_chrome.exe
(Google Inc.) C:\Users\TOSHIBA\AppData\Local\Google\Chrome\Application\old_chrome.exe
() C:\Program Files\ATK Hotkey\ATKOSD.exe
(Google Inc.) C:\Users\TOSHIBA\AppData\Local\Google\Chrome\Application\old_chrome.exe
(Google Inc.) C:\Users\TOSHIBA\AppData\Local\Google\Chrome\Application\old_chrome.exe
(Microsoft Corporation) C:\Windows\System32\wuauclt.exe
(Google Inc.) C:\Users\TOSHIBA\AppData\Local\Google\Chrome\Application\old_chrome.exe
(Google Inc.) C:\Users\TOSHIBA\AppData\Local\Google\Chrome\Application\old_chrome.exe
(forum.viry.cz) C:\Users\TOSHIBA\Desktop\FRSTLauncher.exe

==================== Registry (Whitelisted) ==================

HKLM\...\Run: [avast] - C:\Program Files\AVAST Software\Avast\AvastUI.exe [4273976 2012-07-03] (AVAST Software)
HKLM\...\Run: [HotKeysCmds] - C:\Windows\system32\hkcmd.exe [ ] ()
HKLM\...\Run: [RTHDVCPL] - C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe [11487848 2011-12-13] (Realtek Semiconductor)
HKLM\...\Run: [Adobe ARM] - C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [958576 2013-04-04] (Adobe Systems Incorporated)
HKLM\...\Run: [GrooveMonitor] - C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe [30040 2009-02-26] (Microsoft Corporation)
HKLM\...\Run: [SweetIM] - C:\Program Files\SweetIM\Messenger\SweetIM.exe [115032 2012-10-04] (SweetIM Technologies Ltd.)
HKLM\...\Run: [Sweetpacks Communicator] - C:\Program Files\SweetIM\Communicator\SweetPacksUpdateManager.exe [231768 2012-08-15] (SweetIM Technologies Ltd.)
HKCU\...\Run: [Google Update] - C:\Users\TOSHIBA\AppData\Local\Google\Update\GoogleUpdate.exe [136176 2012-02-13] (Google Inc.)
HKCU\...\Run: [DAEMON Tools Lite] - C:\Program Files\DAEMON Tools Lite\DTLite.exe [3481408 2012-02-13] (DT Soft Ltd)
HKCU\...\Run: [RESTART_STICKY_NOTES] - C:\Windows\System32\StikyNot.exe [354304 2009-07-14] (Microsoft Corporation)
MountPoints2: {d139e1a1-5735-11e1-a417-001d60f45112} - G:\SETUP.EXE
MountPoints2: {d360ad16-cc5b-11e1-ba5d-001d60f45112} - F:\LGAutoRun.exe

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://home.sweetim.com/?crg=3.1010000. ... 1D60F45112}
SearchScopes: HKLM - DefaultScope {EEE6C360-6118-11DC-9C72-001320C79847} URL = http://search.sweetim.com/search.asp?sr ... 1D60F45112}
SearchScopes: HKLM - {EEE6C360-6118-11DC-9C72-001320C79847} URL = http://search.sweetim.com/search.asp?sr ... 1D60F45112}
SearchScopes: HKCU - DefaultScope {EEE6C360-6118-11DC-9C72-001320C79847} URL = http://mysearch.sweetpacks.com?src=6&q= ... ms}&barid=&
SearchScopes: HKCU - {EEE6C360-6118-11DC-9C72-001320C79847} URL = http://mysearch.sweetpacks.com?src=6&q= ... ms}&barid=&
BHO: Adobe PDF Link Helper - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll (Adobe Systems Incorporated)
BHO: BetterSurf - {6E3C6B04-08FE-43BC-8E50-F90285024DEA} - C:\Program Files\BetterSurf\ie\BetterSurf.dll ()
BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll (Microsoft Corporation)
BHO: avast! WebRep - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)
BHO: SweetPacks Browser Helper - {EEE6C35C-6118-11DC-9C72-001320C79847} - C:\Program Files\SweetIM\Toolbars\Internet Explorer\mgToolbarIE.dll (SweetIM Technologies Ltd.)
Toolbar: HKLM - avast! WebRep - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)
Toolbar: HKLM - SweetPacks Toolbar for Internet Explorer - {EEE6C35B-6118-11DC-9C72-001320C79847} - C:\Program Files\SweetIM\Toolbars\Internet Explorer\mgToolbarIE.dll (SweetIM Technologies Ltd.)
Toolbar: HKCU - SweetPacks Toolbar for Internet Explorer - {EEE6C35B-6118-11DC-9C72-001320C79847} - C:\Program Files\SweetIM\Toolbars\Internet Explorer\mgToolbarIE.dll (SweetIM Technologies Ltd.)
Handler: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Program Files\Microsoft Office\Office12\GrooveSystemServices.dll (Microsoft Corporation)
Tcpip\Parameters: [DhcpNameServer] 192.168.1.1
Tcpip\..\Interfaces\{6281D40F-7EEF-4A9C-ACC5-88D95637ED62}: [NameServer]192.168.1.200

Chrome:
=======
CHR HomePage: hxxp://www.sweetpacks-search.com/?barid=&src=10&
CHR RestoreOnStartup: ""
CHR DefaultSearchKeyword: google.cz
CHR DefaultSearchProvider: Google
CHR DefaultSearchURL: {google:baseURL}search?q={searchTerms}&{google:RLZ}{google:originalQueryForSuggestion}{google:assistedQueryStats}{google:searchFieldtrialParameter}{google:searchClient}{google:sourceId}{google:instantExtendedEnabledParameter}{google:omniboxStartMarginParameter}ie={inputEncoding}
CHR Plugin: (Shockwave Flash) - C:\Users\TOSHIBA\AppData\Local\Google\Chrome\Application\29.0.1547.66\PepperFlash\pepflashplayer.dll ()
CHR Plugin: (Chrome Remote Desktop Viewer) - internal-remoting-viewer
CHR Plugin: (Native Client) - C:\Users\TOSHIBA\AppData\Local\Google\Chrome\Application\29.0.1547.66\ppGoogleNaClPluginChrome.dll ()
CHR Plugin: (Chrome PDF Viewer) - C:\Users\TOSHIBA\AppData\Local\Google\Chrome\Application\29.0.1547.66\pdf.dll ()
CHR Plugin: (Adobe Acrobat) - C:\Program Files\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
CHR Plugin: (Picasa) - C:\Program Files\Google\Picasa3\npPicasa3.dll (Google, Inc.)
CHR Plugin: (Silverlight Plug-In) - C:\Program Files\Microsoft Silverlight\5.1.20513.0\npctrl.dll No File
CHR Plugin: (Google Update) - C:\Users\TOSHIBA\AppData\Local\Google\Update\1.3.21.153\npGoogleUpdate3.dll No File
CHR Extension: (BetterSurf) - C:\Users\TOSHIBA\AppData\Local\Google\Chrome\User Data\Default\Extensions\dedmngkbaffkenlfdcbganndoghblmap\1.0_0
CHR Extension: (avast! WebRep) - C:\Users\TOSHIBA\AppData\Local\Google\Chrome\User Data\Default\Extensions\icmlaeflemplmjndnaapfdbbnpncnbda\7.0.1456_1
CHR Extension: (Google Wallet) - C:\Users\TOSHIBA\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.5.0_0
CHR HKLM\...\Chrome\Extension: [dedmngkbaffkenlfdcbganndoghblmap] - C:\Program Files\BetterSurf\ch\Chrome.crx
CHR HKLM\...\Chrome\Extension: [icmlaeflemplmjndnaapfdbbnpncnbda] - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChrome.crx
CHR HKLM\...\Chrome\Extension: [ogccgbmabaphcakpiclgcnmcnimhokcj] - C:\Users\TOSHIBA\AppData\Local\Google\Chrome\User Data\Default\External Extensions\{EEE6C373-6118-11DC-9C72-001320C79847}\SweetNT.crx
CHR StartMenuInternet: Google Chrome - C:\Users\TOSHIBA\AppData\Local\Google\Chrome\Application\chrome.exe

========================== Services (Whitelisted) =================

R2 AgereModemAudio; C:\Program Files\LSI SoftModem\agrsmsvc.exe [14336 2009-03-27] (LSI Corporation)
R2 ASLDRService; C:\Program Files\ATK Hotkey\ASLDRSrv.exe [94208 2007-02-05] ()
R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [44808 2012-07-03] (AVAST Software)
R2 IBUpdaterService; C:\Windows\system32\dmwu.exe [1432368 2013-10-15] ()

==================== Drivers (Whitelisted) ====================

R2 aswFsBlk; C:\Windows\System32\Drivers\aswFsBlk.sys [21256 2012-07-03] (AVAST Software)
R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [57656 2012-07-03] (AVAST Software)
R1 aswRdr; C:\Windows\System32\Drivers\aswrdr2.sys [44784 2012-07-03] (AVAST Software)
R1 aswSnx; C:\Windows\System32\Drivers\aswSnx.sys [721000 2012-07-03] (AVAST Software)
R1 aswSP; C:\Windows\System32\Drivers\aswSP.sys [353688 2012-07-03] (AVAST Software)
R1 aswTdi; C:\Windows\System32\Drivers\aswTdi.sys [54232 2012-07-03] (AVAST Software)
R1 dtsoftbus01; C:\Windows\System32\DRIVERS\dtsoftbus01.sys [242240 2012-02-14] (DT Soft Ltd)
R3 MTsensor; C:\Windows\System32\DRIVERS\ATKACPI.sys [7680 2007-07-31] (ATK0100)
R3 RTL8187B; C:\Windows\System32\DRIVERS\RTL8187B.sys [379904 2010-03-31] (Realtek Semiconductor Corporation )

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2013-12-14 23:19 - 2013-12-14 23:20 - 00010011 _____ C:\Users\TOSHIBA\Desktop\FRST.txt
2013-12-14 23:18 - 2013-12-14 23:18 - 00000000 ____D C:\FRST
2013-12-14 23:14 - 2013-12-14 23:14 - 00112640 _____ (forum.viry.cz) C:\Users\TOSHIBA\Desktop\FRSTLauncher.exe
2013-12-14 23:13 - 2013-12-14 23:13 - 01060897 _____ (Farbar) C:\Users\TOSHIBA\Desktop\FRST.exe
2013-12-12 23:06 - 2013-12-12 23:06 - 00006991 _____ C:\Users\TOSHIBA\Desktop\oprava vyznačeno sl.odt
2013-12-12 23:05 - 2013-12-12 23:05 - 00007249 _____ C:\Users\TOSHIBA\Documents\oprava vyznačeno sl.odt
2013-12-12 22:36 - 2013-12-12 22:36 - 00005864 _____ C:\Users\TOSHIBA\Desktop\text oprava.odt
2013-12-09 23:12 - 2013-12-09 23:12 - 00000000 ____D C:\Users\TOSHIBA\AppData\Local\M-Photo_Ltd
2013-12-09 21:04 - 2013-12-09 21:04 - 00000000 ____D C:\ProgramData\M-Photo
2013-12-09 21:03 - 2013-12-09 21:03 - 00001814 _____ C:\Users\Public\Desktop\AKCE_MCL.lnk
2013-12-09 21:02 - 2013-12-09 22:57 - 00000000 ____D C:\AKCE_MCL
2013-12-09 21:02 - 2013-12-09 21:02 - 19727745 _____ C:\Windows\system32\AKCE_MCL_AKCE_MCL_uninstaller.exe
2013-12-03 10:42 - 2013-12-09 16:03 - 00009527 _____ C:\Windows\IE11_main.log
2013-11-24 14:36 - 2013-11-24 14:36 - 00000877 _____ C:\Users\Public\Desktop\µTorrent.lnk
2013-11-24 14:34 - 2013-11-25 22:44 - 00000000 ____D C:\Users\TOSHIBA\AppData\Roaming\uTorrent
2013-11-20 21:27 - 2013-11-20 21:33 - 00043082 _____ C:\Users\TOSHIBA\Desktop\hranolková daň.odt
2013-11-18 23:07 - 2013-10-12 08:04 - 00042496 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2013-11-18 23:07 - 2013-10-12 08:03 - 01138176 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2013-11-18 23:07 - 2013-10-12 08:02 - 02877952 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2013-11-18 23:07 - 2013-10-12 08:02 - 00690688 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2013-11-18 23:07 - 2013-10-12 08:02 - 00493056 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2013-11-18 23:07 - 2013-10-12 08:02 - 00391168 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2013-11-18 23:07 - 2013-10-12 08:02 - 00109056 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll
2013-11-18 23:07 - 2013-10-12 08:02 - 00061440 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2013-11-18 23:07 - 2013-10-12 08:02 - 00039424 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2013-11-18 23:07 - 2013-10-12 08:02 - 00033280 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2013-11-18 23:07 - 2013-10-12 07:08 - 02706432 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2013-11-18 23:07 - 2013-10-12 06:15 - 00071680 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe
2013-11-18 23:06 - 2013-10-12 08:03 - 01767936 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2013-11-18 23:06 - 2013-10-12 08:02 - 14355968 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2013-11-18 23:06 - 2013-10-12 08:02 - 13761024 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2013-11-18 23:06 - 2013-10-12 08:02 - 02049024 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll

==================== One Month Modified Files and Folders =======

2013-12-14 23:20 - 2013-12-14 23:19 - 00010011 _____ C:\Users\TOSHIBA\Desktop\FRST.txt
2013-12-14 23:18 - 2013-12-14 23:18 - 00000000 ____D C:\FRST
2013-12-14 23:14 - 2013-12-14 23:14 - 00112640 _____ (forum.viry.cz) C:\Users\TOSHIBA\Desktop\FRSTLauncher.exe
2013-12-14 23:14 - 2009-07-14 05:34 - 00014256 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2013-12-14 23:14 - 2009-07-14 05:34 - 00014256 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2013-12-14 23:13 - 2013-12-14 23:13 - 01060897 _____ (Farbar) C:\Users\TOSHIBA\Desktop\FRST.exe
2013-12-14 23:09 - 2012-02-13 10:25 - 02064495 _____ C:\Windows\WindowsUpdate.log
2013-12-14 22:56 - 2012-12-24 13:54 - 00000364 _____ C:\Windows\Tasks\AmiUpdXp.job
2013-12-14 22:55 - 2009-07-14 05:53 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2013-12-14 22:55 - 2009-07-14 05:39 - 00075967 _____ C:\Windows\setupact.log
2013-12-12 23:06 - 2013-12-12 23:06 - 00006991 _____ C:\Users\TOSHIBA\Desktop\oprava vyznačeno sl.odt
2013-12-12 23:05 - 2013-12-12 23:05 - 00007249 _____ C:\Users\TOSHIBA\Documents\oprava vyznačeno sl.odt
2013-12-12 22:36 - 2013-12-12 22:36 - 00005864 _____ C:\Users\TOSHIBA\Desktop\text oprava.odt
2013-12-12 22:28 - 2012-02-13 12:27 - 00000970 _____ C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-324523848-1973888014-2835286221-1000UA.job
2013-12-12 21:28 - 2012-02-13 12:27 - 00000918 _____ C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-324523848-1973888014-2835286221-1000Core.job
2013-12-09 23:12 - 2013-12-09 23:12 - 00000000 ____D C:\Users\TOSHIBA\AppData\Local\M-Photo_Ltd
2013-12-09 22:57 - 2013-12-09 21:02 - 00000000 ____D C:\AKCE_MCL
2013-12-09 21:04 - 2013-12-09 21:04 - 00000000 ____D C:\ProgramData\M-Photo
2013-12-09 21:03 - 2013-12-09 21:03 - 00001814 _____ C:\Users\Public\Desktop\AKCE_MCL.lnk
2013-12-09 21:02 - 2013-12-09 21:02 - 19727745 _____ C:\Windows\system32\AKCE_MCL_AKCE_MCL_uninstaller.exe
2013-12-09 16:03 - 2013-12-03 10:42 - 00009527 _____ C:\Windows\IE11_main.log
2013-12-09 10:28 - 2012-02-13 12:30 - 00002376 _____ C:\Users\TOSHIBA\Desktop\Google Chrome.lnk
2013-11-29 16:40 - 2012-02-13 10:40 - 01478586 _____ C:\Windows\system32\PerfStringBackup.INI
2013-11-26 10:05 - 2012-02-14 17:58 - 00010352 _____ C:\Windows\PFRO.log
2013-11-25 22:44 - 2013-11-24 14:34 - 00000000 ____D C:\Users\TOSHIBA\AppData\Roaming\uTorrent
2013-11-24 23:56 - 2009-07-14 03:37 - 00000000 ____D C:\Windows\rescache
2013-11-24 14:36 - 2013-11-24 14:36 - 00000877 _____ C:\Users\Public\Desktop\µTorrent.lnk
2013-11-20 21:33 - 2013-11-20 21:27 - 00043082 _____ C:\Users\TOSHIBA\Desktop\hranolková daň.odt
2013-11-18 23:21 - 2012-02-14 19:49 - 00000000 ____D C:\ProgramData\Microsoft Help
2013-11-18 23:05 - 2013-08-19 20:47 - 00000000 ____D C:\Windows\system32\MRT
2013-11-18 22:56 - 2012-02-13 17:03 - 80340640 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe

Some content of TEMP:
====================
C:\Users\TOSHIBA\AppData\Local\Temp\BetterSurf.exe
C:\Users\TOSHIBA\AppData\Local\Temp\DTLite4453-0297.exe
C:\Users\TOSHIBA\AppData\Local\Temp\GenericUninstall.exe
C:\Users\TOSHIBA\AppData\Local\Temp\IcqUpdater.exe
C:\Users\TOSHIBA\AppData\Local\Temp\KMP_3.3.0.33.exe
C:\Users\TOSHIBA\AppData\Local\Temp\KMP_3.4.0.59.exe
C:\Users\TOSHIBA\AppData\Local\Temp\KMP_3.5.0.77.exe
C:\Users\TOSHIBA\AppData\Local\Temp\KMP_3.6.0.87.exe
C:\Users\TOSHIBA\AppData\Local\Temp\KMP_3.7.0.109.exe
C:\Users\TOSHIBA\AppData\Local\Temp\KMP_3.7.0.113.exe
C:\Users\TOSHIBA\AppData\Local\Temp\mgsqlite3.dll
C:\Users\TOSHIBA\AppData\Local\Temp\ose00000.exe
C:\Users\TOSHIBA\AppData\Local\Temp\PicasaUpdater_20ad.exe
C:\Users\TOSHIBA\AppData\Local\Temp\PicasaUpdater_2d22.exe
C:\Users\TOSHIBA\AppData\Local\Temp\Shortcut_bundlesweetimsetup.exe
C:\Users\TOSHIBA\AppData\Local\Temp\SimboApp.exe
C:\Users\TOSHIBA\AppData\Local\Temp\SIMEEIInstaller.exe
C:\Users\TOSHIBA\AppData\Local\Temp\uninstaller.exe
C:\Users\TOSHIBA\AppData\Local\Temp\Updater.exe


==================== Bamital & volsnap Check =================

C:\Windows\explorer.exe => MD5 is legit
C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit



===***===***===***=== Extract of Additional scan result of Farbar Recovery Scan Tool ===***===***===***===

==================== Drive and Memory info ===================



==================== MBR and Partition Table ==================


==================== Scheduled Tasks (whitelisted) ==================

Task: C:\Windows\Tasks\AmiUpdXp.job => C:\Users\TOSHIBA\AppData\Local\SwvUpdater\Updater.exe <==== ATTENTION
Task: C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-324523848-1973888014-2835286221-1000Core.job => C:\Users\TOSHIBA\AppData\Local\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-324523848-1973888014-2835286221-1000UA.job => C:\Users\TOSHIBA\AppData\Local\Google\Update\GoogleUpdate.exe

==================== Alternate Data Streams (whitelisted) ==================


==================== Security Center ==================

AV: avast! Antivirus (Enabled - Up to date) {2B2D1395-420B-D5C9-657E-930FE358FC3C}
AS: avast! Antivirus (Enabled - Up to date) {904CF271-6431-DA47-5FCE-A87D98DFB681}
AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}



===***===***===***=== Supplementary Scan createdy by FRSTLauncher ===***===***===***===
Posledni aktualizace FRSTLauncheru: 25_11_2013 (01)
Posledni aktualizace Modifikacniho skriptu: 30_09_2013 (01)


***** Velikost "Plochy" *****

Velikost slozky "C:\Users\TOSHIBA\Desktop" je 2954 MB.


***** Startup Programs *****


***** Firewall rules *****

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
DisableNotifications REG_DWORD 0x0
EnableFirewall REG_DWORD 0x1

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
DisableNotifications REG_DWORD 0x0
EnableFirewall REG_DWORD 0x1

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\GloballyOpenPorts\List]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\GloballyOpenPorts\List]


***** System Restore *****

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SystemRestore]
"Generalize_DisableSR"=dword:00000000


==================== End Of Log ==============================

Zdravim a pekny vecer preji

Stahnete Shortcut Cleaner http://www.bleepingcomputer.com/downloa ... t-cleaner/

• Ulozte nejlepe na plochu
• Ukoncete vsechny programy
• Spustte tradicne dvouklikem
• Probehne skenovani a pak se objevi log, pripadne bude ulozen v miste spusteni jako sc-cleaner.txt, ten sem vlozte

Stahnete Junkware Removal Tool http://thisisudax.org/downloads/JRT.exe

• Ulozte nejlepe na plochu
• Po spusteni se zobrazi licencni podminky, stisknete libovolnou klavesu
• Probehne vytvoreni zalohy a nasledne prohledavani
• Probehne skenovani a pak se objevi log, pripadne bude ulozen v c:\JRT jako JRT.txt, ten sem vlozte

Stahnete AdwCleaner http://general-changelog-team.fr/fr/dow ... adwcleaner

• Ulozte nejlepe na plochu
• Ukoncete vsechny programy
• Kliknete na Scan a nasledne Clean
• Probehne oprava, restart PC a pak se objevi log, pripadne bude ulozen ve slozce c:\AdwCleaner\AdwCleaner[S?].txt, ten sem vlozte

Dobrý večer, moc děkuji za pomoc:
1.)Shortcut Cleaner 1.2.6 by Lawrence Abrams (Grinler)
http://www.bleepingcomputer.com/
Copyright 2008-2013 BleepingComputer.com
More Information about Shortcut Cleaner can be found at this link:
http://www.bleepingcomputer.com/downloa ... t-cleaner/

Windows Version: Windows 7 Professional Service Pack 1
Program started at: 12/15/2013 12:05:39 AM.

Scanning for registry hijacks:

* No issues found in the Registry.

Searching for Hijacked Shortcuts:

Searching C:\Users\TOSHIBA\AppData\Roaming\Microsoft\Windows\Start Menu\

Searching C:\ProgramData\Microsoft\Windows\Start Menu\

Searching C:\Users\TOSHIBA\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\

Searching C:\Users\Public\Desktop\

Searching C:\Users\TOSHIBA\Desktop


0 bad shortcuts found.

Program finished at: 12/15/2013 12:05:43 AM
Execution time: 0 hours(s), 0 minute(s), and 4 seconds(s)

2.)~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Junkware Removal Tool (JRT) by Thisisu
Version: 6.0.8 (11.05.2013:1)
OS: Windows 7 Professional x86
Ran by TOSHIBA on ne 15.12.2013 at 0:12:57,04
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~




~~~ Services



~~~ Registry Values

Successfully repaired: [Registry Value] HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main\\Start Page
Successfully repaired: [Registry Value] HKEY_USERS\.DEFAULT\Software\Microsoft\Internet Explorer\Main\\Start Page
Successfully repaired: [Registry Value] HKEY_USERS\S-1-5-18\Software\Microsoft\Internet Explorer\Main\\Start Page
Successfully repaired: [Registry Value] HKEY_USERS\S-1-5-19\Software\Microsoft\Internet Explorer\Main\\Start Page
Successfully repaired: [Registry Value] HKEY_USERS\S-1-5-20\Software\Microsoft\Internet Explorer\Main\\Start Page
Successfully repaired: [Registry Value] HKEY_USERS\S-1-5-21-324523848-1973888014-2835286221-1000\Software\Microsoft\Internet Explorer\Main\\Start Page



~~~ Registry Keys

Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\sim-packages
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\sweetie.ietoolbar
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\sweetie.ietoolbar.1
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\sweetim_urlsearchhook.toolbarurlsearchhook
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\toolbar3.sweetie
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\toolbar3.sweetie.1
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\CLSID\{67BD9EEB-AA06-4329-A940-D250019300C9}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\Interface\{9EDC0C90-2B5B-4512-953E-35767BAD5C67}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\Interface\{A439801C-961D-452C-AB42-7848E9CBD289}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\Interface\{EEE6C358-6118-11DC-9C72-001320C79847}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\Interface\{EEE6C35A-6118-11DC-9C72-001320C79847}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\Interface\{F4EBB1E2-21F3-4786-8CF4-16EC5925867F}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\TypeLib\{4D3B167E-5FD8-4276-8FD7-9DF19C1E4D19}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\TypeLib\{A0EE0278-2986-4E5A-884E-A3BF0357E476}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\TypeLib\{EEE6C35E-6118-11DC-9C72-001320C79847}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\TypeLib\{EEE6C35F-6118-11DC-9C72-001320C79847}
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\im
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\iminstaller
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\sweetim
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\wnlt
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\InternetRegistry\REGISTRY\USER\S-1-5-21-324523848-1973888014-2835286221-1000\Software\sweetim
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\sweetim
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\wnlt
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\applications\ilividsetupv1.exe
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\mediaplayer.graphicsutils
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\mediaplayer.graphicsutils.1
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\mgmediaplayer.gifanimator
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\mgmediaplayer.gifanimator.1
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\sweetim_urlsearchhook.toolbarurlsearchhook.1
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\updater.amiupd
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\updater.amiupd.1
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{EEE6C367-6118-11DC-9C72-001320C79847}
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Tracing\apnstub_rasapi32
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Tracing\apnstub_rasmancs
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Tracing\bundlesweetimsetup_rasapi32
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Tracing\bundlesweetimsetup_rasmancs
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Tracing\sweetim_rasapi32
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Tracing\sweetim_rasmancs
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Tracing\sweetpacksupdatemanager_rasapi32
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Tracing\sweetpacksupdatemanager_rasmancs
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\App Paths\sweetim.exe
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\wnlt
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\{0110ef3b-85d7-4365-b585-4c521cfa9064}
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\{99c91fc5-db5b-4aa0-bb70-5d89c5a4df96}
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\{a0c9df2b-89b5-4483-8983-18a68200f1b4}
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\{ea8fa6be-29be-4af2-9352-841f83215eb0}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\CLSID\{EEE6C35B-6118-11DC-9C72-001320C79847}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\CLSID\{EEE6C35C-6118-11DC-9C72-001320C79847}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\CLSID\{EEE6C35D-6118-11DC-9C72-001320C79847}
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Tracing\AskSLib_RASAPI32
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Tracing\AskSLib_RASMANCS
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{EEE6C35C-6118-11DC-9C72-001320C79847}
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchScopes\{EEE6C360-6118-11DC-9C72-001320C79847}
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\SearchScopes\{EEE6C360-6118-11DC-9C72-001320C79847}



~~~ Files

Successfully deleted: [File] "C:\Users\TOSHIBA\appdata\locallow\SkwConfig.bin"
Failed to delete: [File] "C:\Windows\system32\dmwu.exe"
Failed to delete: [File] "C:\Windows\system32\imhttpcomm.dll"



~~~ Folders

Successfully deleted: [Folder] "C:\ProgramData\sweetim"
Successfully deleted: [Folder] "C:\Users\TOSHIBA\appdata\local\apn"
Successfully deleted: [Folder] "C:\Users\TOSHIBA\appdata\local\swvupdater"
Successfully deleted: [Folder] "C:\Users\TOSHIBA\appdata\locallow\sweetim"
Failed to delete: [Folder] "C:\Program Files\sweetim"
Successfully deleted: [Folder] "C:\Program Files\sweetpacks bundle uninstaller"
Successfully deleted: [Folder] "C:\Windows\system32\arfc"
Failed to delete: [Folder] "C:\Windows\system32\jmdp"
Successfully deleted: [Folder] "C:\Windows\system32\wnlt"



~~~ Event Viewer Logs were cleared





~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on ne 15.12.2013 at 0:20:34,96
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

3.)
# AdwCleaner v3.015 - Report created 15/12/2013 at 00:23:27
# Updated 10/12/2013 by Xplode
# Operating System : Windows 7 Professional Service Pack 1 (32 bits)
# Username : TOSHIBA - TOSHIBA-PC
# Running from : C:\Users\TOSHIBA\Desktop\adwcleaner.exe
# Option : Clean

***** [ Services ] *****

[#] Service Deleted : IBUpdaterService

***** [ Files / Folders ] *****

Folder Deleted : C:\Program Files\BetterSurf
Folder Deleted : C:\Program Files\SweetIM
Folder Deleted : C:\Windows\Installer\{A0C9DF2B-89B5-4483-8983-18A68200F1B4}
Folder Deleted : C:\Windows\system32\jmdp
Folder Deleted : C:\Users\TOSHIBA\AppData\Local\PackageAware
Folder Deleted : C:\Users\TOSHIBA\AppData\Local\Google\Chrome\User Data\Default\Extensions\dedmngkbaffkenlfdcbganndoghblmap
File Deleted : C:\Windows\system32\dmwu.exe
File Deleted : C:\Windows\system32\ImhxxpComm.dll

***** [ Shortcuts ] *****


***** [ Registry ] *****

Value Deleted : HKLM\SOFTWARE\Mozilla\Firefox\Extensions [xz123@ya456.com]
Key Deleted : HKLM\SOFTWARE\Google\Chrome\Extensions\dedmngkbaffkenlfdcbganndoghblmap
Key Deleted : HKLM\SOFTWARE\Google\Chrome\Extensions\ogccgbmabaphcakpiclgcnmcnimhokcj
Value Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDLLs [C:\Program Files\SweetIM\Toolbars\Internet Explorer\mgHelperApp.exe]
Value Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDLLs [C:\Program Files\SweetIM\Toolbars\Internet Explorer\mgToolbarProxy.dll]
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{6E3C6B04-08FE-43BC-8E50-F90285024DEA}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{82AC53B4-164C-4B07-A016-437A8388B81A}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{A4A0CB15-8465-4F58-A7E5-73084EA2A064}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{462862BE-9A5C-49A5-9CBD-A649EAC63645}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{EEE6C359-6118-11DC-9C72-001320C79847}
Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{0113A098-06EA-4776-A011-D75590778F1E}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{6E3C6B04-08FE-43BC-8E50-F90285024DEA}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{6E3C6B04-08FE-43BC-8E50-F90285024DEA}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{EEE6C35B-6118-11DC-9C72-001320C79847}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{EEE6C35C-6118-11DC-9C72-001320C79847}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{6E3C6B04-08FE-43BC-8E50-F90285024DEA}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{EEE6C35B-6118-11DC-9C72-001320C79847}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{EEE6C35C-6118-11DC-9C72-001320C79847}
Value Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{EEE6C35B-6118-11DC-9C72-001320C79847}]
Value Deleted : HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser [{EEE6C35B-6118-11DC-9C72-001320C79847}]
Key Deleted : HKCU\Software\IM
Key Deleted : HKCU\Software\wnlt
Key Deleted : HKLM\Software\BetterSurf
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Sweetpacks Bundle Uninstaller
Key Deleted : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\02F47BF73B948514FAACADD8CBBDF37D
Key Deleted : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\07D5290CDBDAE4242926B8E6CA650501
Key Deleted : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\080D9F5E1E95FEE4794CE438E635239E
Key Deleted : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\08E33F7B61DEFF24BB9673ED7D467636
Key Deleted : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\0E3D8A5B48622A445A7DF73FEFF32C3F
Key Deleted : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\0FF2AEFF45EEA0A48A4B33C1973B6094
Key Deleted : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\12BF94BD06C95F343A77631402B9556A
Key Deleted : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\1E264E0A5959A1C46BA9175A878B12EA
Key Deleted : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\2124D8A8CF720FD44866190AF560228E
Key Deleted : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\27A325ACED8CA4743A30127638591ADB
Key Deleted : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\2E6768B6932D112438F047C54D180635
Key Deleted : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\305B09CE8C53A214DB58887F62F25536
Key Deleted : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\34EDDB1BFB3A2D448845F3EFD0F15A43
Key Deleted : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\350D17402BD84234EAF7D32F08172D7C
Key Deleted : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\351716A953E21214898904032EAE2E81
Key Deleted : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\397C771A7BCAC904697C3EC629ED33ED
Key Deleted : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\3EE8C5F419057E1478A654868CEE60B5
Key Deleted : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\427EA997C413D1D47907CBFC7B2DB432
Key Deleted : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\4318DF19719275242801CBE292063A4C
Key Deleted : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\45FC115D1FEAEF849A4E1610D6EC8BF0
Key Deleted : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\46A5861A389ADB844AF89E31BC9DF0A1
Key Deleted : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\4735D908D66E1BA46B6C2D7185A12B2B
Key Deleted : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\49B0E1A6FF50BBE4289E4E23DE6EA0C7
Key Deleted : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\4CCCAC049F34D0540AAC13011398BEDB
Key Deleted : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\5C4389D0BFB302C479DE4178BD5D9EBA
Key Deleted : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\5D2B09BDEF4FE54418E6F3373CDBC7AC
Key Deleted : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\61B65D3397A1FBF4CB1571B5E4F6B5B0
Key Deleted : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\68E8A05C60DD9254591DBD16C94EDDBF
Key Deleted : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\697E782CF574CC34CBB9566440BA12BC
Key Deleted : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\69D6A6B2ED56AF24EA6335EAD6E91CA4
Key Deleted : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\6AE27A8613CF7EA4782F2886F67295E5
Key Deleted : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\75D5168E5E176C24981B4E5DBD991078
Key Deleted : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\76D8378E2DDAED3428720A631F6E3BF0
Key Deleted : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\7CE172051F585E04187BCB97570BFA74
Key Deleted : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\7FFA128C2B0FF414D805FC5627883401
Key Deleted : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\86A901BA5265452499DCBF719C378EE3
Key Deleted : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\86EDC790504E1834DBC20C9A04328FD2
Key Deleted : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\8724E58E6C7D00C48A0D4F3345EB2C26
Key Deleted : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\88ABD1CD5C40EC84789A7F6EF86DAC5E
Key Deleted : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\97C3D0F82E712E241A2F969F45E3351C
Key Deleted : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\980289C22F80A7C4BB9323DC61255E4E
Key Deleted : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\98CC8BF5A4A6E6C4ABF7051DDAB8B058
Key Deleted : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\9A001B259DB7D694E818BE29B973992C
Key Deleted : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\9A4B7EF3789F871419D9302583B20C15
Key Deleted : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\9E7F556BF224D804D96A96F0F6344789
Key Deleted : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\A189D17A469616C4688D23E192996267
Key Deleted : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\A6C53B0F76C44004A8F36716213017DB
Key Deleted : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\AB676B0E1B9EFA049B9F7DDDA9645734
Key Deleted : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\B31BBB0B825EDEF45AB0FE7099C68C81
Key Deleted : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\B471D8D7319336B4CA89374ED0D7B806
Key Deleted : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\B59F2D8189784CC46A4597F2842480B0
Key Deleted : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\BAE2EC163C6A68A48921573E0E7E199D
Key Deleted : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\BC30043663AA2CA4DA1DAA9CA5FDCC75
Key Deleted : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\BD746FB95FB8E5B45BF66BE54D5FD91F
Key Deleted : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\BF4F885EDEE45644EB1E0C99E0162399
Key Deleted : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\C06C6662FA5B04646829E4A460857770
Key Deleted : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\CCF399FCD6D2D3F46BF02A1378654FC9
Key Deleted : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\CE21F3FD57B244142880EF15A165A156
Key Deleted : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\CEEB3E14ABE8270419B0FD762E18F7C6
Key Deleted : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\D149C1355C98DE24E82CEFBD996FE06A
Key Deleted : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\D15DAF33C220F91468A1D7D57C31ACD7
Key Deleted : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\D3BA76A44C779424889063D5098ED2D6
Key Deleted : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\D6D0EB9FDBD90C04D92A7E729058F10D
Key Deleted : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\DB59FDB786388EA4D897F3EE715683AC
Key Deleted : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\DB8DAD19CFBCC2049A4477183787E8C5
Key Deleted : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\E1C820A74ED67374BA048B52CB3C3804
Key Deleted : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\E4748F9A4181FCE46A23C13B517B9420
Key Deleted : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\EC65F200D112357449C8B1BC3CFA03D0
Key Deleted : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\ED1B5E9A3BDB51349BF96E842C062D98
Key Deleted : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\F327D0C73C0973644A21E8CC852267A0
Key Deleted : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\F754C503375A13344B22388E18DFE87E
Key Deleted : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\FA96423FE2B98E248A3B23548D1E22D9
Key Deleted : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\FDC83385E6C239F4C876A77A37DF581D
Key Deleted : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\FECBC2BC14DA6CD459BD59A041709836
Key Deleted : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\B2FD9C0A5B9838449838816A28001F4B
Key Deleted : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\B3FE01107D5856345B58C425C1AF0946
Key Deleted : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\EB6AF8AEEB922FA4392548F13812E50B
Key Deleted : HKLM\Software\Classes\Installer\Features\B2FD9C0A5B9838449838816A28001F4B
Key Deleted : HKLM\Software\Classes\Installer\Features\B3FE01107D5856345B58C425C1AF0946
Key Deleted : HKLM\Software\Classes\Installer\Features\EB6AF8AEEB922FA4392548F13812E50B
Key Deleted : HKLM\Software\Classes\Installer\Products\B2FD9C0A5B9838449838816A28001F4B
Key Deleted : HKLM\Software\Classes\Installer\Products\B3FE01107D5856345B58C425C1AF0946
Key Deleted : HKLM\Software\Classes\Installer\Products\EB6AF8AEEB922FA4392548F13812E50B
Key Deleted : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UpgradeCodes\789034A89BAC50E4782F0A7BDBF75632
Key Deleted : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UpgradeCodes\A97CEC23332751B47BA4B95BAA50C9D0

***** [ Browsers ] *****

-\\ Internet Explorer v10.0.9200.16736


-\\ Google Chrome v

[ File : C:\Users\TOSHIBA\AppData\Local\Google\Chrome\User Data\Default\preferences ]

Deleted : homepage

*************************

AdwCleaner[R0].txt - [14505 octets] - [15/12/2013 00:21:57]
AdwCleaner[S0].txt - [14603 octets] - [15/12/2013 00:23:27]

########## EOF - C:\AdwCleaner\AdwCleaner[S0].txt - [14664 octets] ##########


Poradíte mi, prosím, jak dál?

Poprosim nyni o log dle tohoto navodu http://forum.viry.cz/viewtopic.php?f=13&t=133100

děkuji moc, zde:

Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 14-12-2013 01
Ran by TOSHIBA (administrator) on TOSHIBA-PC on 15-12-2013 00:55:28
Running from C:\Users\TOSHIBA\Desktop
Microsoft Windows 7 Professional Service Pack 1 (X86) OS Language: Czech
Internet Explorer Version 10
Boot Mode: Normal

==================== Processes (Whitelisted) ===================

() C:\Program Files\ATK Hotkey\ASLDRSrv.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe
(ATK0100) C:\Program Files\ATK Hotkey\HControl.exe
(LSI Corporation) C:\Program Files\LSI SoftModem\agrsmsvc.exe
() C:\Program Files\ATK Hotkey\ATKOSD.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastUI.exe
(Intel Corporation) C:\Windows\System32\igfxtray.exe
(Intel Corporation) C:\Windows\System32\igfxsrvc.exe
(Intel Corporation) C:\Windows\System32\hkcmd.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe
(Adobe Systems Incorporated) C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe
(Microsoft Corporation) C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe
(Google Inc.) C:\Users\TOSHIBA\AppData\Local\Google\Chrome\Application\old_chrome.exe
(Google Inc.) C:\Users\TOSHIBA\AppData\Local\Google\Chrome\Application\old_chrome.exe
(Google Inc.) C:\Users\TOSHIBA\AppData\Local\Google\Chrome\Application\old_chrome.exe
(Google Inc.) C:\Users\TOSHIBA\AppData\Local\Google\Chrome\Application\old_chrome.exe
(Microsoft Corporation) C:\Windows\System32\wuauclt.exe
(Google Inc.) C:\Users\TOSHIBA\AppData\Local\Google\Chrome\Application\old_chrome.exe
(Google Inc.) C:\Users\TOSHIBA\AppData\Local\Google\Chrome\Application\old_chrome.exe
(forum.viry.cz) C:\Users\TOSHIBA\Desktop\FRSTLauncher.exe

==================== Registry (Whitelisted) ==================

HKLM\...\Run: [avast] - C:\Program Files\AVAST Software\Avast\AvastUI.exe [4273976 2012-07-03] (AVAST Software)
HKLM\...\Run: [HotKeysCmds] - C:\Windows\system32\hkcmd.exe [ ] ()
HKLM\...\Run: [RTHDVCPL] - C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe [11487848 2011-12-13] (Realtek Semiconductor)
HKLM\...\Run: [Adobe ARM] - C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [958576 2013-04-04] (Adobe Systems Incorporated)
HKLM\...\Run: [GrooveMonitor] - C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe [30040 2009-02-26] (Microsoft Corporation)
HKCU\...\Run: [Google Update] - C:\Users\TOSHIBA\AppData\Local\Google\Update\GoogleUpdate.exe [136176 2012-02-13] (Google Inc.)
HKCU\...\Run: [DAEMON Tools Lite] - C:\Program Files\DAEMON Tools Lite\DTLite.exe [3481408 2012-02-13] (DT Soft Ltd)
MountPoints2: {d139e1a1-5735-11e1-a417-001d60f45112} - G:\SETUP.EXE
MountPoints2: {d360ad16-cc5b-11e1-ba5d-001d60f45112} - F:\LGAutoRun.exe

==================== Internet (Whitelisted) ====================

SearchScopes: HKLM - DefaultScope value is missing.
BHO: Adobe PDF Link Helper - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll (Adobe Systems Incorporated)
BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll (Microsoft Corporation)
BHO: avast! WebRep - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)
Toolbar: HKLM - avast! WebRep - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)
Handler: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Program Files\Microsoft Office\Office12\GrooveSystemServices.dll (Microsoft Corporation)
Tcpip\Parameters: [DhcpNameServer] 192.168.1.1
Tcpip\..\Interfaces\{6281D40F-7EEF-4A9C-ACC5-88D95637ED62}: [NameServer]192.168.1.200

Chrome:
=======
CHR HomePage: hxxp://www.google.com
CHR RestoreOnStartup: ""
CHR DefaultSearchKeyword: google.cz
CHR DefaultSearchProvider: Google
CHR DefaultSearchURL: {google:baseURL}search?q={searchTerms}&{google:RLZ}{google:originalQueryForSuggestion}{google:assistedQueryStats}{google:searchFieldtrialParameter}{google:searchClient}{google:sourceId}{google:instantExtendedEnabledParameter}{google:omniboxStartMarginParameter}ie={inputEncoding}
CHR Extension: (avast! WebRep) - C:\Users\TOSHIBA\AppData\Local\Google\Chrome\User Data\Default\Extensions\icmlaeflemplmjndnaapfdbbnpncnbda\7.0.1456_1
CHR Extension: (Google Wallet) - C:\Users\TOSHIBA\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.5.0_0
CHR HKLM\...\Chrome\Extension: [icmlaeflemplmjndnaapfdbbnpncnbda] - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChrome.crx
CHR StartMenuInternet: Google Chrome - C:\Users\TOSHIBA\AppData\Local\Google\Chrome\Application\chrome.exe

========================== Services (Whitelisted) =================

R2 AgereModemAudio; C:\Program Files\LSI SoftModem\agrsmsvc.exe [14336 2009-03-27] (LSI Corporation)
R2 ASLDRService; C:\Program Files\ATK Hotkey\ASLDRSrv.exe [94208 2007-02-05] ()
R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [44808 2012-07-03] (AVAST Software)

==================== Drivers (Whitelisted) ====================

R2 aswFsBlk; C:\Windows\System32\Drivers\aswFsBlk.sys [21256 2012-07-03] (AVAST Software)
R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [57656 2012-07-03] (AVAST Software)
R1 aswRdr; C:\Windows\System32\Drivers\aswrdr2.sys [44784 2012-07-03] (AVAST Software)
R1 aswSnx; C:\Windows\System32\Drivers\aswSnx.sys [721000 2012-07-03] (AVAST Software)
R1 aswSP; C:\Windows\System32\Drivers\aswSP.sys [353688 2012-07-03] (AVAST Software)
R1 aswTdi; C:\Windows\System32\Drivers\aswTdi.sys [54232 2012-07-03] (AVAST Software)
R1 dtsoftbus01; C:\Windows\System32\DRIVERS\dtsoftbus01.sys [242240 2012-02-14] (DT Soft Ltd)
R3 MTsensor; C:\Windows\System32\DRIVERS\ATKACPI.sys [7680 2007-07-31] (ATK0100)
R3 RTL8187B; C:\Windows\System32\DRIVERS\RTL8187B.sys [379904 2010-03-31] (Realtek Semiconductor Corporation )

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2013-12-15 00:55 - 2013-12-15 00:55 - 00006358 _____ C:\Users\TOSHIBA\Desktop\FRST.txt
2013-12-15 00:29 - 2013-12-15 00:29 - 00003148 _____ C:\Users\TOSHIBA\Desktop\AdwCleaner[S0].rar
2013-12-15 00:29 - 2013-12-15 00:29 - 00001486 _____ C:\Users\TOSHIBA\Desktop\JRT.rar
2013-12-15 00:29 - 2013-12-15 00:29 - 00000681 _____ C:\Users\TOSHIBA\Desktop\sc-cleaner.rar
2013-12-15 00:27 - 2013-12-15 00:27 - 00014745 _____ C:\Users\TOSHIBA\Desktop\AdwCleaner[S0].txt
2013-12-15 00:21 - 2013-12-15 00:23 - 00000000 ____D C:\AdwCleaner
2013-12-15 00:21 - 2013-12-15 00:21 - 00007900 _____ C:\Users\TOSHIBA\Desktop\JRTt.tx.txt
2013-12-15 00:20 - 2013-12-15 00:20 - 00007900 _____ C:\Users\TOSHIBA\Desktop\JRT.txt
2013-12-15 00:14 - 2013-12-15 00:14 - 01226802 _____ C:\Users\TOSHIBA\Desktop\adwcleaner.exe
2013-12-15 00:11 - 2013-12-15 00:11 - 00000000 ____D C:\Windows\ERUNT
2013-12-15 00:09 - 2013-12-15 00:10 - 01034531 _____ (Thisisu) C:\Users\TOSHIBA\Desktop\JRT.exe
2013-12-15 00:09 - 2013-12-15 00:09 - 00001808 _____ C:\Users\TOSHIBA\Desktop\sc-cleaner.txt
2013-12-15 00:05 - 2013-12-15 00:05 - 00001808 _____ C:\sc-cleaner.txt
2013-12-15 00:03 - 2013-12-15 00:04 - 00406264 _____ (Bleeping Computer, LLC) C:\Users\TOSHIBA\Desktop\sc-cleaner.exe
2013-12-14 23:30 - 2013-12-14 23:30 - 00002987 _____ C:\Users\TOSHIBA\Desktop\Addition.rar
2013-12-14 23:18 - 2013-12-14 23:18 - 00000000 ____D C:\FRST
2013-12-14 23:14 - 2013-12-14 23:14 - 00112640 _____ (forum.viry.cz) C:\Users\TOSHIBA\Desktop\FRSTLauncher.exe
2013-12-14 23:13 - 2013-12-14 23:13 - 01060897 _____ (Farbar) C:\Users\TOSHIBA\Desktop\FRST.exe
2013-12-12 23:06 - 2013-12-12 23:06 - 00006991 _____ C:\Users\TOSHIBA\Desktop\oprava vyznačeno sl.odt
2013-12-12 23:05 - 2013-12-12 23:05 - 00007249 _____ C:\Users\TOSHIBA\Documents\oprava vyznačeno sl.odt
2013-12-12 22:36 - 2013-12-12 22:36 - 00005864 _____ C:\Users\TOSHIBA\Desktop\text oprava.odt
2013-12-09 23:12 - 2013-12-09 23:12 - 00000000 ____D C:\Users\TOSHIBA\AppData\Local\M-Photo_Ltd
2013-12-09 21:04 - 2013-12-09 21:04 - 00000000 ____D C:\ProgramData\M-Photo
2013-12-09 21:03 - 2013-12-09 21:03 - 00001814 _____ C:\Users\Public\Desktop\AKCE_MCL.lnk
2013-12-09 21:02 - 2013-12-09 22:57 - 00000000 ____D C:\AKCE_MCL
2013-12-09 21:02 - 2013-12-09 21:02 - 19727745 _____ C:\Windows\system32\AKCE_MCL_AKCE_MCL_uninstaller.exe
2013-12-03 10:42 - 2013-12-09 16:03 - 00009527 _____ C:\Windows\IE11_main.log
2013-11-24 14:36 - 2013-11-24 14:36 - 00000877 _____ C:\Users\Public\Desktop\µTorrent.lnk
2013-11-24 14:34 - 2013-11-25 22:44 - 00000000 ____D C:\Users\TOSHIBA\AppData\Roaming\uTorrent
2013-11-20 21:27 - 2013-11-20 21:33 - 00043082 _____ C:\Users\TOSHIBA\Desktop\hranolková daň.odt
2013-11-18 23:07 - 2013-10-12 08:04 - 00042496 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2013-11-18 23:07 - 2013-10-12 08:03 - 01138176 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2013-11-18 23:07 - 2013-10-12 08:02 - 02877952 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2013-11-18 23:07 - 2013-10-12 08:02 - 00690688 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2013-11-18 23:07 - 2013-10-12 08:02 - 00493056 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2013-11-18 23:07 - 2013-10-12 08:02 - 00391168 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2013-11-18 23:07 - 2013-10-12 08:02 - 00109056 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll
2013-11-18 23:07 - 2013-10-12 08:02 - 00061440 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2013-11-18 23:07 - 2013-10-12 08:02 - 00039424 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2013-11-18 23:07 - 2013-10-12 08:02 - 00033280 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2013-11-18 23:07 - 2013-10-12 07:08 - 02706432 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2013-11-18 23:07 - 2013-10-12 06:15 - 00071680 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe
2013-11-18 23:06 - 2013-10-12 08:03 - 01767936 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2013-11-18 23:06 - 2013-10-12 08:02 - 14355968 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2013-11-18 23:06 - 2013-10-12 08:02 - 13761024 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2013-11-18 23:06 - 2013-10-12 08:02 - 02049024 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll

==================== One Month Modified Files and Folders =======

2013-12-15 00:55 - 2013-12-15 00:55 - 00006358 _____ C:\Users\TOSHIBA\Desktop\FRST.txt
2013-12-15 00:51 - 2012-02-13 10:25 - 02079479 _____ C:\Windows\WindowsUpdate.log
2013-12-15 00:32 - 2009-07-14 05:34 - 00014256 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2013-12-15 00:32 - 2009-07-14 05:34 - 00014256 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2013-12-15 00:29 - 2013-12-15 00:29 - 00003148 _____ C:\Users\TOSHIBA\Desktop\AdwCleaner[S0].rar
2013-12-15 00:29 - 2013-12-15 00:29 - 00001486 _____ C:\Users\TOSHIBA\Desktop\JRT.rar
2013-12-15 00:29 - 2013-12-15 00:29 - 00000681 _____ C:\Users\TOSHIBA\Desktop\sc-cleaner.rar
2013-12-15 00:28 - 2012-02-13 12:27 - 00000970 _____ C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-324523848-1973888014-2835286221-1000UA.job
2013-12-15 00:27 - 2013-12-15 00:27 - 00014745 _____ C:\Users\TOSHIBA\Desktop\AdwCleaner[S0].txt
2013-12-15 00:25 - 2009-07-14 05:53 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2013-12-15 00:25 - 2009-07-14 05:39 - 00076023 _____ C:\Windows\setupact.log
2013-12-15 00:23 - 2013-12-15 00:21 - 00000000 ____D C:\AdwCleaner
2013-12-15 00:21 - 2013-12-15 00:21 - 00007900 _____ C:\Users\TOSHIBA\Desktop\JRTt.tx.txt
2013-12-15 00:20 - 2013-12-15 00:20 - 00007900 _____ C:\Users\TOSHIBA\Desktop\JRT.txt
2013-12-15 00:14 - 2013-12-15 00:14 - 01226802 _____ C:\Users\TOSHIBA\Desktop\adwcleaner.exe
2013-12-15 00:11 - 2013-12-15 00:11 - 00000000 ____D C:\Windows\ERUNT
2013-12-15 00:10 - 2013-12-15 00:09 - 01034531 _____ (Thisisu) C:\Users\TOSHIBA\Desktop\JRT.exe
2013-12-15 00:09 - 2013-12-15 00:09 - 00001808 _____ C:\Users\TOSHIBA\Desktop\sc-cleaner.txt
2013-12-15 00:05 - 2013-12-15 00:05 - 00001808 _____ C:\sc-cleaner.txt
2013-12-15 00:04 - 2013-12-15 00:03 - 00406264 _____ (Bleeping Computer, LLC) C:\Users\TOSHIBA\Desktop\sc-cleaner.exe
2013-12-14 23:30 - 2013-12-14 23:30 - 00002987 _____ C:\Users\TOSHIBA\Desktop\Addition.rar
2013-12-14 23:18 - 2013-12-14 23:18 - 00000000 ____D C:\FRST
2013-12-14 23:14 - 2013-12-14 23:14 - 00112640 _____ (forum.viry.cz) C:\Users\TOSHIBA\Desktop\FRSTLauncher.exe
2013-12-14 23:13 - 2013-12-14 23:13 - 01060897 _____ (Farbar) C:\Users\TOSHIBA\Desktop\FRST.exe
2013-12-12 23:06 - 2013-12-12 23:06 - 00006991 _____ C:\Users\TOSHIBA\Desktop\oprava vyznačeno sl.odt
2013-12-12 23:05 - 2013-12-12 23:05 - 00007249 _____ C:\Users\TOSHIBA\Documents\oprava vyznačeno sl.odt
2013-12-12 22:36 - 2013-12-12 22:36 - 00005864 _____ C:\Users\TOSHIBA\Desktop\text oprava.odt
2013-12-12 21:28 - 2012-02-13 12:27 - 00000918 _____ C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-324523848-1973888014-2835286221-1000Core.job
2013-12-09 23:12 - 2013-12-09 23:12 - 00000000 ____D C:\Users\TOSHIBA\AppData\Local\M-Photo_Ltd
2013-12-09 22:57 - 2013-12-09 21:02 - 00000000 ____D C:\AKCE_MCL
2013-12-09 21:04 - 2013-12-09 21:04 - 00000000 ____D C:\ProgramData\M-Photo
2013-12-09 21:03 - 2013-12-09 21:03 - 00001814 _____ C:\Users\Public\Desktop\AKCE_MCL.lnk
2013-12-09 21:02 - 2013-12-09 21:02 - 19727745 _____ C:\Windows\system32\AKCE_MCL_AKCE_MCL_uninstaller.exe
2013-12-09 16:03 - 2013-12-03 10:42 - 00009527 _____ C:\Windows\IE11_main.log
2013-12-09 10:28 - 2012-02-13 12:30 - 00002376 _____ C:\Users\TOSHIBA\Desktop\Google Chrome.lnk
2013-11-29 16:40 - 2012-02-13 10:40 - 01478586 _____ C:\Windows\system32\PerfStringBackup.INI
2013-11-26 10:05 - 2012-02-14 17:58 - 00010352 _____ C:\Windows\PFRO.log
2013-11-25 22:44 - 2013-11-24 14:34 - 00000000 ____D C:\Users\TOSHIBA\AppData\Roaming\uTorrent
2013-11-24 23:56 - 2009-07-14 03:37 - 00000000 ____D C:\Windows\rescache
2013-11-24 14:36 - 2013-11-24 14:36 - 00000877 _____ C:\Users\Public\Desktop\µTorrent.lnk
2013-11-20 21:33 - 2013-11-20 21:27 - 00043082 _____ C:\Users\TOSHIBA\Desktop\hranolková daň.odt
2013-11-18 23:21 - 2012-02-14 19:49 - 00000000 ____D C:\ProgramData\Microsoft Help
2013-11-18 23:05 - 2013-08-19 20:47 - 00000000 ____D C:\Windows\system32\MRT
2013-11-18 22:56 - 2012-02-13 17:03 - 80340640 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe

Some content of TEMP:
====================
C:\Users\TOSHIBA\AppData\Local\Temp\BetterSurf.exe
C:\Users\TOSHIBA\AppData\Local\Temp\DTLite4453-0297.exe
C:\Users\TOSHIBA\AppData\Local\Temp\GenericUninstall.exe
C:\Users\TOSHIBA\AppData\Local\Temp\IcqUpdater.exe
C:\Users\TOSHIBA\AppData\Local\Temp\KMP_3.3.0.33.exe
C:\Users\TOSHIBA\AppData\Local\Temp\KMP_3.4.0.59.exe
C:\Users\TOSHIBA\AppData\Local\Temp\KMP_3.5.0.77.exe
C:\Users\TOSHIBA\AppData\Local\Temp\KMP_3.6.0.87.exe
C:\Users\TOSHIBA\AppData\Local\Temp\KMP_3.7.0.109.exe
C:\Users\TOSHIBA\AppData\Local\Temp\KMP_3.7.0.113.exe
C:\Users\TOSHIBA\AppData\Local\Temp\mgsqlite3.dll
C:\Users\TOSHIBA\AppData\Local\Temp\ose00000.exe
C:\Users\TOSHIBA\AppData\Local\Temp\PicasaUpdater_20ad.exe
C:\Users\TOSHIBA\AppData\Local\Temp\PicasaUpdater_2d22.exe
C:\Users\TOSHIBA\AppData\Local\Temp\Quarantine.exe
C:\Users\TOSHIBA\AppData\Local\Temp\Shortcut_bundlesweetimsetup.exe
C:\Users\TOSHIBA\AppData\Local\Temp\SimboApp.exe
C:\Users\TOSHIBA\AppData\Local\Temp\SIMEEIInstaller.exe
C:\Users\TOSHIBA\AppData\Local\Temp\uninstaller.exe
C:\Users\TOSHIBA\AppData\Local\Temp\Updater.exe


==================== Bamital & volsnap Check =================

C:\Windows\explorer.exe => MD5 is legit
C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit



===***===***===***=== Extract of Additional scan result of Farbar Recovery Scan Tool ===***===***===***===

==================== Drive and Memory info ===================



==================== MBR and Partition Table ==================


==================== Scheduled Tasks (whitelisted) ==================

Task: C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-324523848-1973888014-2835286221-1000Core.job => C:\Users\TOSHIBA\AppData\Local\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-324523848-1973888014-2835286221-1000UA.job => C:\Users\TOSHIBA\AppData\Local\Google\Update\GoogleUpdate.exe

==================== Alternate Data Streams (whitelisted) ==================


==================== Security Center ==================

AV: avast! Antivirus (Enabled - Up to date) {2B2D1395-420B-D5C9-657E-930FE358FC3C}
AS: avast! Antivirus (Enabled - Up to date) {904CF271-6431-DA47-5FCE-A87D98DFB681}
AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}



===***===***===***=== Supplementary Scan createdy by FRSTLauncher ===***===***===***===
Posledni aktualizace FRSTLauncheru: 25_11_2013 (01)
Posledni aktualizace Modifikacniho skriptu: 30_09_2013 (01)


***** Velikost "Plochy" *****

Velikost slozky "C:\Users\TOSHIBA\Desktop" je 2957 MB.


***** Startup Programs *****


***** Firewall rules *****

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
DisableNotifications REG_DWORD 0x0
EnableFirewall REG_DWORD 0x1

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
DisableNotifications REG_DWORD 0x0
EnableFirewall REG_DWORD 0x1

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\GloballyOpenPorts\List]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\GloballyOpenPorts\List]


***** System Restore *****

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SystemRestore]
"Generalize_DisableSR"=dword:00000000


==================== End Of Log ==============================

v pořádku?:)

Ted to pomazeme, tohle byla jen kontrola

Tvorba fixlistu pro FRST

• Spustte poznamkovy blok (Start-spustit-notepad)
• Zkopirujte skript nize

• Kód: Vybrat vše

  Start
  HKLM\...\Run: [Adobe ARM] - C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [958576 2013-04-04] (Adobe Systems Incorporated)
  HKLM\...\Run: [GrooveMonitor] - C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe [30040 2009-02-26] (Microsoft Corporation)
  HKCU\...\Run: [Google Update] - C:\Users\TOSHIBA\AppData\Local\Google\Update\GoogleUpdate.exe [136176 2012-02-13] (Google Inc.)
  HKCU\...\Run: [DAEMON Tools Lite] - C:\Program Files\DAEMON Tools Lite\DTLite.exe [3481408 2012-02-13] (DT Soft Ltd)
  MountPoints2: {d139e1a1-5735-11e1-a417-001d60f45112} - G:\SETUP.EXE
  MountPoints2: {d360ad16-cc5b-11e1-ba5d-001d60f45112} - F:\LGAutoRun.exe
  
  SearchScopes: HKLM - DefaultScope value is missing.
  
  C:\Users\TOSHIBA\AppData\Local\Temp\BetterSurf.exe
  C:\Users\TOSHIBA\AppData\Local\Temp\DTLite4453-0297.exe
  C:\Users\TOSHIBA\AppData\Local\Temp\GenericUninstall.exe
  C:\Users\TOSHIBA\AppData\Local\Temp\IcqUpdater.exe
  C:\Users\TOSHIBA\AppData\Local\Temp\KMP_3.3.0.33.exe
  C:\Users\TOSHIBA\AppData\Local\Temp\KMP_3.4.0.59.exe
  C:\Users\TOSHIBA\AppData\Local\Temp\KMP_3.5.0.77.exe
  C:\Users\TOSHIBA\AppData\Local\Temp\KMP_3.6.0.87.exe
  C:\Users\TOSHIBA\AppData\Local\Temp\KMP_3.7.0.109.exe
  C:\Users\TOSHIBA\AppData\Local\Temp\KMP_3.7.0.113.exe
  C:\Users\TOSHIBA\AppData\Local\Temp\mgsqlite3.dll
  C:\Users\TOSHIBA\AppData\Local\Temp\ose00000.exe
  C:\Users\TOSHIBA\AppData\Local\Temp\PicasaUpdater_20ad.exe
  C:\Users\TOSHIBA\AppData\Local\Temp\PicasaUpdater_2d22.exe
  C:\Users\TOSHIBA\AppData\Local\Temp\Quarantine.exe
  C:\Users\TOSHIBA\AppData\Local\Temp\Shortcut_bundlesweetimsetup.exe
  C:\Users\TOSHIBA\AppData\Local\Temp\SimboApp.exe
  C:\Users\TOSHIBA\AppData\Local\Temp\SIMEEIInstaller.exe
  C:\Users\TOSHIBA\AppData\Local\Temp\uninstaller.exe
  C:\Users\TOSHIBA\AppData\Local\Temp\Updater.exe
  
  Task: C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-324523848-1973888014-2835286221-1000Core.job => C:\Users\TOSHIBA\AppData\Local\Google\Update\GoogleUpdate.exe
  Task: C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-324523848-1973888014-2835286221-1000UA.job => C:\Users\TOSHIBA\AppData\Local\Google\Update\GoogleUpdate.exe
  
  Hosts:
  CMD: shutdown /r /f /t 2
  
  End

• Ulozte vytvoreny TXT jako fixlist.txt
• Presunte vytvoreny fixlist vedle FRST

Spustte znovu FRST.exe

• Kliknete na Fix
• Probehne oprava a vytvori log Fixlog.txt

Restart PC a dejte mi sem fixlog.txt

Děkuji opět a velmi, fixlog:

Fix result of Farbar Recovery Tool (FRST written by Farbar) (x86) Version: 14-12-2013 01
Ran by TOSHIBA at 2013-12-15 01:06:17 Run:1
Running from C:\Users\TOSHIBA\Desktop
Boot Mode: Normal

==============================================

Content of fixlist:
*****************
Start
HKLM\...\Run: [Adobe ARM] - C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [958576 2013-04-04] (Adobe Systems Incorporated)
HKLM\...\Run: [GrooveMonitor] - C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe [30040 2009-02-26] (Microsoft Corporation)
HKCU\...\Run: [Google Update] - C:\Users\TOSHIBA\AppData\Local\Google\Update\GoogleUpdate.exe [136176 2012-02-13] (Google Inc.)
HKCU\...\Run: [DAEMON Tools Lite] - C:\Program Files\DAEMON Tools Lite\DTLite.exe [3481408 2012-02-13] (DT Soft Ltd)
MountPoints2: {d139e1a1-5735-11e1-a417-001d60f45112} - G:\SETUP.EXE
MountPoints2: {d360ad16-cc5b-11e1-ba5d-001d60f45112} - F:\LGAutoRun.exe

SearchScopes: HKLM - DefaultScope value is missing.

C:\Users\TOSHIBA\AppData\Local\Temp\BetterSurf.exe
C:\Users\TOSHIBA\AppData\Local\Temp\DTLite4453-0297.exe
C:\Users\TOSHIBA\AppData\Local\Temp\GenericUninstall.exe
C:\Users\TOSHIBA\AppData\Local\Temp\IcqUpdater.exe
C:\Users\TOSHIBA\AppData\Local\Temp\KMP_3.3.0.33.exe
C:\Users\TOSHIBA\AppData\Local\Temp\KMP_3.4.0.59.exe
C:\Users\TOSHIBA\AppData\Local\Temp\KMP_3.5.0.77.exe
C:\Users\TOSHIBA\AppData\Local\Temp\KMP_3.6.0.87.exe
C:\Users\TOSHIBA\AppData\Local\Temp\KMP_3.7.0.109.exe
C:\Users\TOSHIBA\AppData\Local\Temp\KMP_3.7.0.113.exe
C:\Users\TOSHIBA\AppData\Local\Temp\mgsqlite3.dll
C:\Users\TOSHIBA\AppData\Local\Temp\ose00000.exe
C:\Users\TOSHIBA\AppData\Local\Temp\PicasaUpdater_20ad.exe
C:\Users\TOSHIBA\AppData\Local\Temp\PicasaUpdater_2d22.exe
C:\Users\TOSHIBA\AppData\Local\Temp\Quarantine.exe
C:\Users\TOSHIBA\AppData\Local\Temp\Shortcut_bundlesweetimsetup.exe
C:\Users\TOSHIBA\AppData\Local\Temp\SimboApp.exe
C:\Users\TOSHIBA\AppData\Local\Temp\SIMEEIInstaller.exe
C:\Users\TOSHIBA\AppData\Local\Temp\uninstaller.exe
C:\Users\TOSHIBA\AppData\Local\Temp\Updater.exe

Task: C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-324523848-1973888014-2835286221-1000Core.job => C:\Users\TOSHIBA\AppData\Local\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-324523848-1973888014-2835286221-1000UA.job => C:\Users\TOSHIBA\AppData\Local\Google\Update\GoogleUpdate.exe

Hosts:
CMD: shutdown /r /f /t 2

End
*****************

HKLM\Software\Microsoft\Windows\CurrentVersion\Run\\Adobe ARM => Value deleted successfully.
HKLM\Software\Microsoft\Windows\CurrentVersion\Run\\GrooveMonitor => Value deleted successfully.
HKCU\Software\Microsoft\Windows\CurrentVersion\Run\\Google Update => Value deleted successfully.
HKCU\Software\Microsoft\Windows\CurrentVersion\Run\\DAEMON Tools Lite => Value deleted successfully.
HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{d139e1a1-5735-11e1-a417-001d60f45112} => Key deleted successfully.
HKCR\CLSID\{d139e1a1-5735-11e1-a417-001d60f45112} => Key not found.
HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{d360ad16-cc5b-11e1-ba5d-001d60f45112} => Key deleted successfully.
HKCR\CLSID\{d360ad16-cc5b-11e1-ba5d-001d60f45112} => Key not found.
HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope => Value was restored successfully.
C:\Users\TOSHIBA\AppData\Local\Temp\BetterSurf.exe => Moved successfully.
C:\Users\TOSHIBA\AppData\Local\Temp\DTLite4453-0297.exe => Moved successfully.
C:\Users\TOSHIBA\AppData\Local\Temp\GenericUninstall.exe => Moved successfully.
C:\Users\TOSHIBA\AppData\Local\Temp\IcqUpdater.exe => Moved successfully.
C:\Users\TOSHIBA\AppData\Local\Temp\KMP_3.3.0.33.exe => Moved successfully.
C:\Users\TOSHIBA\AppData\Local\Temp\KMP_3.4.0.59.exe => Moved successfully.
C:\Users\TOSHIBA\AppData\Local\Temp\KMP_3.5.0.77.exe => Moved successfully.
C:\Users\TOSHIBA\AppData\Local\Temp\KMP_3.6.0.87.exe => Moved successfully.
C:\Users\TOSHIBA\AppData\Local\Temp\KMP_3.7.0.109.exe => Moved successfully.
C:\Users\TOSHIBA\AppData\Local\Temp\KMP_3.7.0.113.exe => Moved successfully.
C:\Users\TOSHIBA\AppData\Local\Temp\mgsqlite3.dll => Moved successfully.
C:\Users\TOSHIBA\AppData\Local\Temp\ose00000.exe => Moved successfully.
C:\Users\TOSHIBA\AppData\Local\Temp\PicasaUpdater_20ad.exe => Moved successfully.
C:\Users\TOSHIBA\AppData\Local\Temp\PicasaUpdater_2d22.exe => Moved successfully.
C:\Users\TOSHIBA\AppData\Local\Temp\Quarantine.exe => Moved successfully.
C:\Users\TOSHIBA\AppData\Local\Temp\Shortcut_bundlesweetimsetup.exe => Moved successfully.
C:\Users\TOSHIBA\AppData\Local\Temp\SimboApp.exe => Moved successfully.
C:\Users\TOSHIBA\AppData\Local\Temp\SIMEEIInstaller.exe => Moved successfully.
C:\Users\TOSHIBA\AppData\Local\Temp\uninstaller.exe => Moved successfully.
C:\Users\TOSHIBA\AppData\Local\Temp\Updater.exe => Moved successfully.
C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-324523848-1973888014-2835286221-1000Core.job => Moved successfully.
C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-324523848-1973888014-2835286221-1000UA.job => Moved successfully.
C:\Windows\System32\Drivers\etc\hosts => Moved successfully.
Hosts was reset successfully.

========= shutdown /r /f /t 2 =========


========= End of CMD: =========


==== End of Fixlog ====

Co teď:)?

T-Cleaner http://vyosek.ic.cz/pro_usery/T-Cleaner.exe

• Stahnete a spustte
• Pro potvrzeni volby mackejte A, Enter
• Po pouziti utilitu smazte
• Antiviry touhou utilitu chybne oznacit jako vir - jedna se o falesny poplach - takze v pohode stahnete (pripadne vypnete pri stahovani antivir)

OTC http://oldtimer.geekstogo.com/OTC.exe

• Stahnete a spustte
• Kliknete na CleanUp a potvrdte YES
• Program uklidi a restartuje PC

TFC http://oldtimer.geekstogo.com/TFC.exe

• Stahnete a spustte
• Kliknete na Start a potvrdte OK
• Program uklidi a restartuje pc
• Po pouziti utilitu smazte

Stahnete Ccleaner http://forum.viry.cz/viewtopic.php?t=7478
Panel čistič

• Vse nechte jak je, jen dejte Analyzovat a pote Spustit CCleaner

Panel registry

• dejte Hledej problémy
• nasledne Opravit problémy - zalohu registru doporucuji udelat, opravte vsechny problemy
• postup opakujte dokud nebude bez problemu - vetsinou cca 3x

Panel nástroje

• Zde muzete odinstalovat nepotrebne programy

CCleaner doporucuji pouzivat cca jednou za tyden

Napiste jak se chova PC

Krásný den,

tak mám hotovo, vypadá to, že už je vše v pořádku, reklamy nikde a rychlost stoprocentní.

Děkuji moc za pomoc i za existenci tohoto fóra, Cleaner budu používat

Mějte se

Nemate zac, rad jsem pomohl Zase nekdy

A na zaklade Pravidla o zamykani temat