Mám v počítači vir?

[Tanea]

Dobrý den. Už je to asi 3 týdny, co mi počítač nefunguje tak, jak by měl, ale příde mi, že se to pořád zhoršuje. Nejdříve se mi nějak začal sekat facebook - šla jsem na něj, přihlásila jsem se a chtěla si prohlížet, co je nového, ale obrázky se nenačítali, jako kdybych neměla internet a chat mi psal, že čeká na spojení, přitom hned vedle mého pokoje máme wifi a ještě jeden počítač, který na wifi jel úplně normálně. Poté, asi další týden, když jste šli na nějakou stránku, se stránka nenačetla, ale vyskočila tam takové okénko, kde se psalo: Toto připojení není důvěryhodné.Požádali jste Firefox o zabezpečené připojení k serveru support.norton.com, ale nelze ověřit, že tomu tak skutečně je. Pokud je požadováno zabezpečené připojení, měl by server předložit důvěryhodnou identifikaci a tím prokázat, že se připojujete na správné místo. Nicméně, identita tohoto serveru nemohla být ověřena. Co mám teď dělat? Pokud se k tomuto serveru obvykle připojujete bez problému, může tato chyba znamenat, že se za tento server někdo snaží vydávat, a neměli byste pokračovat.

Dále zase facebook, teď se už vůbec normálně nenačte, ale zatím jsem zjistila, že se to děje jen s facebookem, zobrazí se to přesně takhle místo normálního vzhledu a když na cokoliv kliknu nic to nedělá:

Facebook
0 Žádosti

2 Zprávy
Poslat novou zprávu
Příchozí zprávyDalší

Zobrazit starší
Zobrazit vše
4 Upozornění
Upozornění
Označit jako přečtené · Nastavení
Upozornění
Zobrazit vše

Anet Pejsová
Vyhledat přátele
Hlavní stránka
Přehled soukromí
Přehled soukromí
Hledat
Přehled soukromí
Zobrazit další nastaveníNavštívit Centrum nápovědy
Nastavení účtu
Vytvořit stránku
Reklamy
Záznamy o aktivitách
0
Nastavení
Nápověda
Nahlásit problém


O Facebooku Vytvořit reklamu Vytvořit stránku Vývojáři Kariéra Soukromí Soubory cookie Podmínky použití Nápověda
Facebook © 2014 · Čeština

Taky teď jak hledám nějaké stránky o virech tak se mi místo stránky zobrazilo tohle:Chyba parsování XML: Neočekávaný stav parseru Adresa: jar:file:///C:/Program%20Files/Mozilla%20Firefox/omni.ja!/chrome/toolkit/content/global/netError.xhtml Řádek 305, sloupec 54: <div id="ed_netTimeout">&netTimeout.longDesc;</div>

Nebo když jdu na kralici.cz a chci tam sdílet fotku svého králíčka, píše mi to pod kolonku "přidat fotku" : No runtime found. Achjo!

Teď jsem si ještě všimla, že se mi vůbec nezaznamenává historie počítače! Bože... Nevíte co s tím? Právě si nechávám kontrolovat počítač Microsoft Security Essentials a dala jsem úplné prohledávání, tak uvidím. Pokud si toto přece jen přečtete a poradíte mi, budu jen ráda, Mockrát vám předem děkuji!

[Márty84]

Zdravim

Nejprve dejte log z RSIT http://forum.viry.cz/viewtopic.php?f=13&t=130786

[Tanea]

Dobře. Je tohle doufám to co po mě chcete

Logfile of random's system information tool 1.06 (written by random/random)
Run by Jarda at 2013-03-06 16:10:37
Microsoft Windows XP Home Edition Service Pack 3
System drive C: has 153 GB (50%) free of 305 GB
Total RAM: 3327 MB (73% free)

HijackThis download failed

======Scheduled tasks folder======

C:\WINDOWS\tasks\Adobe Flash Player Updater.job
C:\WINDOWS\tasks\GoogleUpdateTaskMachineCore.job
C:\WINDOWS\tasks\GoogleUpdateTaskMachineUA.job
C:\WINDOWS\tasks\Microsoft Antimalware Scheduled Scan.job
C:\WINDOWS\tasks\Norton Security Scan for Jarda.job
C:\WINDOWS\tasks\RealPlayerRealUpgradeLogonTaskS-1-5-21-507921405-606747145-682003330-1004.job
C:\WINDOWS\tasks\RealPlayerRealUpgradeScheduledTaskS-1-5-21-507921405-606747145-682003330-1004.job
C:\WINDOWS\tasks\RealUpgradeLogonTaskS-1-5-21-507921405-606747145-682003330-1004.job
C:\WINDOWS\tasks\RealUpgradeScheduledTaskS-1-5-21-507921405-606747145-682003330-1004.job
C:\WINDOWS\tasks\Scheduled Update for Ask Toolbar.job

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{0E8A89AD-95D7-40EB-8D9D-083EF7066A01}]
MSS+ Identifier - C:\Program Files\McAfee Security Scan\3.8.130\McAfeeMSS_IE.dll [2013-09-06 95648]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
Adobe PDF Link Helper - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2012-03-26 75200]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{3049C3E9-B461-4BC5-8870-4C09146192CA}]
RealNetworks Download and Record Plugin for Internet Explorer - C:\Documents and Settings\All Users\Data aplikací\RealNetworks\RealDownloader\BrowserPlugins\IE\rndlbrowserrecordplugin.dll [2013-04-16 540328]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{72853161-30C5-4D22-B7F9-0BBC1D38A37E}]
Groove GFS Browser Helper - C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll [2009-02-26 2217832]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
Java(tm) Plug-In SSV Helper - C:\Program Files\Java\jre7\bin\ssv.dll [2013-12-02 462760]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AA58ED58-01DD-4d91-8333-CF10577473F7}]
Google Toolbar Helper - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll [2013-03-07 194128]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}]
Skype Browser Helper - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll [2013-09-16 4502400]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AF69DE43-7D58-4638-B6FA-CE66B5AD205D}]
Google Toolbar Notifier BHO - C:\Program Files\Google\GoogleToolbarNotifier\5.7.9012.1008\swg.dll [2013-03-07 1001936]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{D4027C7F-154A-4066-A1AD-4243D8127440}]
Ask Toolbar - C:\Program Files\Ask.com\GenericAskToolbar.dll [2013-04-25 1520776]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre7\bin\jp2ssv.dll [2013-12-02 171944]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{D4027C7F-154A-4066-A1AD-4243D8127440} - Ask Toolbar - C:\Program Files\Ask.com\GenericAskToolbar.dll [2013-04-25 1520776]
{2318C2B1-4965-11d4-9B18-009027A5CD4F} - Google Toolbar - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll [2013-03-07 194128]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"NvCplDaemon"=C:\WINDOWS\system32\NvCpl.dll [2009-05-08 13594624]
"nwiz"=nwiz.exe /install []
"RTHDCPL"=C:\WINDOWS\RTHDCPL.EXE [2009-03-12 17531392]
"RemoteControl8"=C:\Program Files\CyberLink\PowerDVD8\PDVD8Serv.exe [2008-03-20 83240]
"PDVD8LanguageShortcut"=C:\Program Files\CyberLink\PowerDVD8\Language\Language.exe [2007-12-14 50472]
"HP Software Update"=C:\Program Files\HP\HP Software Update\HPWuSchd2.exe [2007-03-11 49152]
"Adobe Reader Speed Launcher"=C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe [2012-03-27 37296]
"Adobe ARM"=C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2013-04-04 958576]
"MSC"=c:\Program Files\Microsoft Security Client\msseces.exe [2013-10-23 948440]
"reboot"=C:\Program Files\remoteAP\reboot.exe []
""= []
"ApnUpdater"=C:\Program Files\Ask.com\Updater\Updater.exe [2013-04-25 1648264]
"seznam-listicka-distribuce"=C:\Program Files\Seznam.cz\distribution\szninstall.exe [2013-03-21 1061960]
"TkBellExe"=C:\program files\real\realplayer\update\realsched.exe [2013-07-13 295512]
"Corel File Shell Monitor"=C:\Program Files\Corel\Corel Paint Shop Pro Photo X2\CorelIOMonitor.exe [2008-01-15 16200]
"GrooveMonitor"=C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe [2009-02-26 30040]
"mssbgkSrv"=C:\WINDOWS\inf\mssbgk.vbe [2013-08-27 1558]
"SunJavaUpdateSched"=C:\Program Files\Common Files\Java\Java Update\jusched.exe [2013-07-02 254336]
"Corel Photo Downloader"=C:\Program Files\Common Files\Corel\Corel PhotoDownloader\Corel Photo Downloader.exe [2007-12-14 531784]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"=C:\WINDOWS\system32\ctfmon.exe [2008-04-14 15360]
"Uniblue RegistryBooster 2"=C:\Program Files\Uniblue\RegistryBooster 2\RegistryBooster.exe /S []
"MSMSGS"=C:\Program Files\Messenger\msmsgs.exe [2008-04-14 1695232]
"EA Core"=C:\Program Files\Electronic Arts\EADM\Core.exe -silent []
"Sony PC Companion"=C:\Program Files\Sony\Sony PC Companion\PCCompanion.exe [2013-10-31 449760]
"DAEMON Tools Lite"=C:\Program Files\DAEMON Tools Lite\DTLite.exe [2012-04-17 3671872]
"Skype"=C:\Program Files\Skype\Phone\Skype.exe [2013-11-14 20584608]
"cz.seznam.software.autoupdate"=C:\Documents and Settings\Jarda\Data aplikací\Seznam.cz\szninstall.exe [2013-05-16 1062472]
"cz.seznam.software.szndesktop"=C:\Documents and Settings\Jarda\Data aplikací\Seznam.cz\bin\wszndesktop.exe [2013-04-12 92664]
"BitComet"=C:\Program Files\BitComet\BitComet.exe /tray []
"swg"=C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe [2013-03-07 39408]

C:\Documents and Settings\All Users\Nabídka Start\Programy\Po spuštění
HP Digital Imaging Monitor.lnk - C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
McAfee Security Scan Plus.lnk - C:\Program Files\McAfee Security Scan\3.8.130\SSScheduler.exe
WinZip Quick Pick.lnk - C:\Program Files\WinZip\WZQKPICK.EXE

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll [2006-10-18 133632]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{B5A7F190-DDA6-4420-B3BA-52453494E6CD}"=C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll [2009-02-26 2217832]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MsMpSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Wdf01000.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\MsMpSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Wdf01000.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{1a3e09be-1e45-494b-9174-d7385b45bbf5}]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=145

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"HonorAutoRunSetting"=

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"C:\Program Files\Microsoft Games\Zoo Tycoon 2\zt.exe"="C:\Program Files\Microsoft Games\Zoo Tycoon 2\zt.exe:*:Enabled:Zoo Tycoon 2 Executable"
"C:\Program Files\Realore\Tiny Cars 2\TinyCars2.exe"="C:\Program Files\Realore\Tiny Cars 2\TinyCars2.exe:*:Disabled:TinyCars2"
"C:\Program Files\Electronic Arts\EADM\Core.exe"="C:\Program Files\Electronic Arts\EADM\Core.exe:*:Enabled:EA Download Manager"
"C:\Program Files\Skype\Plugin Manager\skypePM.exe"="C:\Program Files\Skype\Plugin Manager\skypePM.exe:*:Enabled:Skype Extras Manager"
"C:\Program Files\Sony Ericsson\Update Engine\Sony Ericsson Update Engine.exe"="C:\Program Files\Sony Ericsson\Update Engine\Sony Ericsson Update Engine.exe:*:Enabled:Update Engine"
"C:\Documents and Settings\Jarda\Data aplikací\uTorrent\utorrent.exe"="C:\Documents and Settings\Jarda\Data aplikací\uTorrent\utorrent.exe:*:Enabled:µTorrent"
"C:\Documents and Settings\Jarda\Data aplikací\uTorrent\updates\3.3.1_30017.exe"="C:\Documents and Settings\Jarda\Data aplikací\uTorrent\updates\3.3.1_30017.exe:*:Enabled:µTorrent"
"C:\Program Files\Microsoft Office\Office12\OUTLOOK.EXE"="C:\Program Files\Microsoft Office\Office12\OUTLOOK.EXE:*:Enabled:Microsoft Office Outlook"
"C:\Program Files\Microsoft Office\Office12\GROOVE.EXE"="C:\Program Files\Microsoft Office\Office12\GROOVE.EXE:*:Enabled:Microsoft Office Groove"
"C:\Program Files\Microsoft Office\Office12\ONENOTE.EXE"="C:\Program Files\Microsoft Office\Office12\ONENOTE.EXE:*:Enabled:Microsoft Office OneNote"
"C:\Program Files\BitComet\BitComet.exe"="C:\Program Files\BitComet\BitComet.exe:*:Enabled:BitComet.exe"
"C:\Documents and Settings\Jarda\Local Settings\Temp\nsdA1F.tmp\uTorrent.exe"="C:\Documents and Settings\Jarda\Local Settings\Temp\nsdA1F.tmp\uTorrent.exe:*:Enabled:µTorrent"
"C:\Documents and Settings\Jarda\Local Settings\Temp\nsbA85.tmp\uTorrent.exe"="C:\Documents and Settings\Jarda\Local Settings\Temp\nsbA85.tmp\uTorrent.exe:*:Enabled:µTorrent"
"C:\Program Files\Skype\Phone\Skype.exe"="C:\Program Files\Skype\Phone\Skype.exe:*:Enabled:Skype"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{53a734b1-b32b-11e2-b4a5-406186114c53}]
shell\AutoRun\command - F:\Autorun.exe

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{a2b3f8e8-0d8e-11df-af51-406186114c53}]
shell\AutoRun\command - F:\LaunchU3.exe -a

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{ffba4406-49f4-11e2-b40b-406186114c53}]
shell\AutoRun\command - E:\Startme.exe


======List of files/folders created in the last 1 months======

2014-02-17 17:51:54 ----D---- C:\Documents and Settings\All Users\Data aplikací\Protexis
2014-02-17 17:25:07 ----D---- C:\Program Files\Microsoft SDKs
2014-02-17 17:25:03 ----D---- C:\Program Files\Microsoft Visual Studio 9.0
2014-02-17 17:23:39 ----D---- C:\Program Files\Common Files\Protexis
2014-02-17 17:12:20 ----D---- C:\Documents and Settings\All Users\Data aplikací\CorelDRAW Graphics Suite X5
2014-02-14 16:01:05 ----D---- C:\Program Files\Mozilla Firefox
2014-02-13 17:53:18 ----HDC---- C:\WINDOWS\$NtUninstallKB2916036$
2014-01-17 18:09:29 ----D---- C:\Documents and Settings\All Users\Data aplikací\InstallMate
2014-01-16 10:43:38 ----HDC---- C:\WINDOWS\$NtUninstallKB2914368$
2013-12-13 21:22:51 ----HDC---- C:\WINDOWS\$NtUninstallKB2898715$
2013-12-13 21:22:45 ----HDC---- C:\WINDOWS\$NtUninstallKB2904266$
2013-12-13 21:19:52 ----HDC---- C:\WINDOWS\$NtUninstallKB2893294$
2013-12-13 21:19:46 ----HDC---- C:\WINDOWS\$NtUninstallKB2893984$
2013-12-13 21:19:39 ----HDC---- C:\WINDOWS\$NtUninstallKB2892075$
2013-12-02 10:50:51 ----D---- C:\Program Files\Common Files\Java
2013-12-02 10:50:32 ----A---- C:\WINDOWS\system32\javaws.exe
2013-12-02 10:50:24 ----A---- C:\WINDOWS\system32\WindowsAccessBridge.dll
2013-12-02 10:50:24 ----A---- C:\WINDOWS\system32\javaw.exe
2013-12-02 10:50:24 ----A---- C:\WINDOWS\system32\java.exe
2013-12-02 10:49:50 ----D---- C:\Program Files\Java
2013-11-16 14:24:04 ----D---- C:\Program Files\The Sims 3 Island Paradise
2013-11-15 11:33:47 ----D---- C:\Program Files\Norton Security Scan
2013-11-14 19:59:56 ----HDC---- C:\WINDOWS\$NtUninstallKB2868626$
2013-11-14 19:59:21 ----HDC---- C:\WINDOWS\$NtUninstallKB2900986$
2013-11-14 19:59:07 ----HDC---- C:\WINDOWS\$NtUninstallKB2862152$
2013-11-14 19:59:01 ----HDC---- C:\WINDOWS\$NtUninstallKB2876331$
2013-10-20 11:48:53 ----D---- C:\Downloads
2013-10-20 11:48:32 ----D---- C:\Documents and Settings\Jarda\Data aplikací\BitComet
2013-10-19 15:22:40 ----RHD---- C:\Documents and Settings\Jarda\Data aplikací\SecuROM
2013-10-09 17:39:41 ----HDC---- C:\WINDOWS\$NtUninstallKB2847311$
2013-10-09 17:38:59 ----HDC---- C:\WINDOWS\$NtUninstallKB2862335$
2013-10-09 17:34:20 ----HDC---- C:\WINDOWS\$NtUninstallKB2884256$
2013-10-09 17:34:11 ----HDC---- C:\WINDOWS\$NtUninstallKB2868038$
2013-10-09 17:32:43 ----HDC---- C:\WINDOWS\$NtUninstallKB2883150$
2013-10-09 17:32:35 ----HDC---- C:\WINDOWS\$NtUninstallKB2862330$
2013-10-06 11:52:34 ----A---- C:\WINDOWS\system32\msonpmon.dll
2013-10-06 11:50:22 ----D---- C:\Program Files\Microsoft Works
2013-10-06 11:49:38 ----D---- C:\Program Files\Common Files\DESIGNER
2013-10-06 11:48:39 ----D---- C:\Program Files\Microsoft.NET
2013-10-06 11:37:36 ----D---- C:\Program Files\Microsoft Visual Studio 8
2013-10-06 11:35:58 ----D---- C:\Documents and Settings\All Users\Data aplikací\Microsoft Help
2013-09-20 16:32:45 ----D---- C:\Program Files\Common Files\Corel
2013-09-18 14:58:46 ----D---- C:\Documents and Settings\Jarda\Data aplikací\Corel
2013-09-18 14:58:39 ----D---- C:\Documents and Settings\All Users\Data aplikací\Corel
2013-09-17 18:44:00 ----D---- C:\Program Files\Corel
2013-09-17 18:43:50 ----D---- C:\Documents and Settings\Jarda\Data aplikací\InstallShield
2013-09-15 07:36:40 ----D---- C:\Documents and Settings\Jarda\Data aplikací\uTorrent
2013-09-13 16:31:40 ----HDC---- C:\WINDOWS\$NtUninstallKB2876315$
2013-09-13 16:31:33 ----HDC---- C:\WINDOWS\$NtUninstallKB2876217$
2013-09-13 16:31:24 ----HDC---- C:\WINDOWS\$NtUninstallKB2864063$
2013-08-29 19:15:56 ----HDC---- C:\WINDOWS\$NtUninstallKB2834904-v2_WM11$
2013-08-16 08:37:26 ----HDC---- C:\WINDOWS\$NtUninstallKB2850869$
2013-08-16 08:37:13 ----HDC---- C:\WINDOWS\$NtUninstallKB2859537$
2013-08-16 08:37:03 ----HDC---- C:\WINDOWS\$NtUninstallKB2863058$
2013-08-16 08:36:19 ----HDC---- C:\WINDOWS\$NtUninstallKB2849470$
2013-08-12 14:25:00 ----D---- C:\Documents and Settings\Jarda\Data aplikací\PhotoScape
2013-08-12 14:24:30 ----D---- C:\Program Files\PhotoScape
2013-07-31 07:35:18 ----D---- C:\WINDOWS\system32\MRT
2013-07-19 00:18:04 ----A---- C:\WINDOWS\system32\PresentationCFFRasterizerNative_v0300.dll
2013-07-13 21:39:17 ----HDC---- C:\WINDOWS\$NtUninstallKB2834904_WM11$
2013-07-13 21:39:12 ----HDC---- C:\WINDOWS\$NtUninstallKB2834886$
2013-07-13 21:38:34 ----HDC---- C:\WINDOWS\$NtUninstallKB2850851$
2013-07-13 21:38:04 ----HDC---- C:\WINDOWS\$NtUninstallKB2845187$
2013-07-13 12:30:08 ----D---- C:\Program Files\RealNetworks
2013-07-13 12:30:08 ----D---- C:\Documents and Settings\All Users\Data aplikací\RealNetworks
2013-06-15 16:56:17 ----HDC---- C:\WINDOWS\$NtUninstallKB2839229$
2013-06-11 21:09:34 ----D---- C:\McAfee Security Scan
2013-05-15 05:57:52 ----HDC---- C:\WINDOWS\$NtUninstallKB2820197$
2013-05-15 05:55:36 ----HDC---- C:\WINDOWS\$NtUninstallKB2829361$
2013-05-03 14:22:15 ----D---- C:\Program Files\Seznam.cz
2013-05-03 14:21:33 ----D---- C:\Documents and Settings\Jarda\Data aplikací\Seznam.cz
2013-04-22 22:25:16 ----D---- C:\Documents and Settings\Jarda\Data aplikací\novar
2013-04-22 22:17:44 ----D---- C:\novar
2013-04-20 09:53:29 ----D---- C:\Program Files\Common Files\Skype
2013-04-19 15:05:18 ----D---- C:\Documents and Settings\All Users\Data aplikací\Sony Ericsson
2013-04-19 15:04:31 ----D---- C:\Program Files\Sony Ericsson
2013-04-15 15:25:18 ----HDC---- C:\WINDOWS\$NtUninstallKB2808735$
2013-04-15 15:25:11 ----HDC---- C:\WINDOWS\$NtUninstallKB2820917$
2013-04-15 15:22:15 ----HDC---- C:\WINDOWS\$NtUninstallKB2813345$
2013-04-15 15:22:02 ----HDC---- C:\WINDOWS\$NtUninstallKB2813170$
2013-03-17 20:19:35 ----HDC---- C:\WINDOWS\$NtUninstallKB2807986$
2013-03-12 10:47:24 ----D---- C:\Program Files\MyPC Backup
2013-03-12 10:47:18 ----A---- C:\WINDOWS\system32\roboot.exe
2013-03-12 10:47:15 ----D---- C:\Program Files\77zip
2013-03-12 10:46:39 ----D---- C:\Program Files\Speed Test 127
2013-03-12 10:46:38 ----D---- C:\Program Files\PC Performer
2013-03-11 16:28:01 ----D---- C:\Documents and Settings\Jarda\Data aplikací\update_tc
2013-03-07 15:11:45 ----D---- C:\Documents and Settings\Jarda\Data aplikací\Ulead Systems
2013-03-06 15:58:32 ----D---- C:\rsit
2013-03-06 15:58:32 ----D---- C:\Program Files\trend micro
2013-02-13 17:16:34 ----HDC---- C:\WINDOWS\$NtUninstallKB2778344$
2013-02-13 17:15:51 ----HDC---- C:\WINDOWS\$NtUninstallKB2799494$
2013-02-13 17:15:37 ----HDC---- C:\WINDOWS\$NtUninstallKB2802968$
2013-02-13 17:15:29 ----HDC---- C:\WINDOWS\$NtUninstallKB2780091$
2013-02-12 13:36:54 ----D---- C:\WINDOWS\Minidump

======List of files/folders modified in the last 1 months======

2014-02-20 17:03:20 ----D---- C:\WINDOWS\Microsoft.NET
2014-02-17 17:31:48 ----RSD---- C:\WINDOWS\assembly
2014-02-17 17:27:08 ----SD---- C:\Documents and Settings\Jarda\Data aplikací\Microsoft
2014-02-17 17:27:08 ----SD---- C:\Documents and Settings\All Users\Data aplikací\Microsoft
2014-02-17 17:25:43 ----D---- C:\Program Files\Common Files\Microsoft Shared
2014-02-17 17:23:54 ----RSD---- C:\WINDOWS\Fonts
2014-02-17 17:23:39 ----D---- C:\Program Files\Common Files
2014-02-15 22:03:59 ----A---- C:\WINDOWS\system32\PerfStringBackup.INI
2014-02-14 16:42:59 ----D---- C:\Program Files\Mozilla Maintenance Service
2014-02-13 17:53:20 ----RSHDC---- C:\WINDOWS\system32\dllcache
2014-02-13 17:45:38 ----A---- C:\WINDOWS\system32\MRT.exe
2014-02-13 17:45:27 ----A---- C:\WINDOWS\imsins.BAK
2014-02-13 17:45:22 ----D---- C:\Program Files\Internet Explorer
2014-02-13 17:45:04 ----D---- C:\WINDOWS\ie8updates
2014-02-12 19:37:55 ----DC---- C:\WINDOWS\system32\DRVSTORE
2014-02-06 04:38:36 ----A---- C:\WINDOWS\system32\wininet.dll
2014-02-06 00:08:34 ----N---- C:\WINDOWS\system32\occache.dll
2014-02-06 00:08:34 ----N---- C:\WINDOWS\system32\jsproxy.dll
2014-02-06 00:08:34 ----A---- C:\WINDOWS\system32\urlmon.dll
2014-02-06 00:08:34 ----A---- C:\WINDOWS\system32\url.dll
2014-02-06 00:08:34 ----A---- C:\WINDOWS\system32\mstime.dll
2014-02-06 00:08:34 ----A---- C:\WINDOWS\system32\mshtmled.dll
2014-02-06 00:08:34 ----A---- C:\WINDOWS\system32\mshtml.dll
2014-02-06 00:08:34 ----A---- C:\WINDOWS\system32\msfeedsbs.dll
2014-02-06 00:08:34 ----A---- C:\WINDOWS\system32\msfeeds.dll
2014-02-06 00:08:34 ----A---- C:\WINDOWS\system32\licmgr10.dll
2014-02-06 00:08:33 ----N---- C:\WINDOWS\system32\iepeers.dll
2014-02-06 00:08:33 ----N---- C:\WINDOWS\system32\iedkcs32.dll
2014-02-06 00:08:33 ----A---- C:\WINDOWS\system32\iertutil.dll
2014-02-06 00:08:33 ----A---- C:\WINDOWS\system32\ieframe.dll
2014-02-06 00:08:33 ----A---- C:\WINDOWS\system32\corpol.dll
2014-02-05 23:24:06 ----N---- C:\WINDOWS\system32\ie4uinit.exe
2014-01-19 08:32:23 ----N---- C:\WINDOWS\system32\MpSigStub.exe
2014-01-16 10:43:40 ----D---- C:\WINDOWS\system32\drivers
2014-01-15 18:03:24 ----D---- C:\Program Files\Common Files\Symantec Shared
2014-01-04 04:12:50 ----A---- C:\WINDOWS\system32\vbscript.dll
2013-12-13 17:01:53 ----A---- C:\WINDOWS\system32\FlashPlayerApp.exe
2013-12-10 17:40:21 ----D---- C:\Documents and Settings\All Users\Data aplikací\Skype
2013-12-10 17:40:16 ----RD---- C:\Program Files\Skype
2013-12-05 12:26:03 ----A---- C:\WINDOWS\system32\msxml3.dll
2013-11-19 18:17:11 ----D---- C:\Program Files\Microsoft Security Client
2013-11-19 16:03:51 ----D---- C:\Program Files\McAfee Security Scan
2013-11-16 11:48:34 ----D---- C:\Program Files\PSPad editor
2013-11-15 11:33:47 ----D---- C:\Program Files\NortonInstaller
2013-11-15 11:33:47 ----D---- C:\Documents and Settings\All Users\Data aplikací\Norton
2013-11-15 11:33:42 ----D---- C:\Documents and Settings\All Users\Data aplikací\NortonInstaller
2013-11-13 04:00:05 ----A---- C:\WINDOWS\system32\imagehlp.dll
2013-11-13 02:13:57 ----A---- C:\WINDOWS\system32\tzchange.exe
2013-11-07 06:38:00 ----A---- C:\WINDOWS\system32\rpcrt4.dll
2013-11-06 02:36:42 ----A---- C:\WINDOWS\system32\xpsp4res.dll
2013-10-24 00:45:28 ----A---- C:\WINDOWS\system32\scrrun.dll
2013-10-20 11:22:09 ----D---- C:\Documents and Settings\Jarda\Data aplikací\DAEMON Tools Lite
2013-10-12 16:57:30 ----A---- C:\WINDOWS\system32\oakley.dll
2013-10-09 16:24:50 ----A---- C:\WINDOWS\win.ini
2013-10-09 15:29:28 ----D---- C:\Program Files\Common Files\System
2013-10-09 14:13:11 ----A---- C:\WINDOWS\system32\gdi32.dll
2013-10-07 12:00:01 ----A---- C:\WINDOWS\system32\crypt32.dll
2013-10-06 19:59:36 ----D---- C:\WINDOWS\system32\CatRoot
2013-10-06 11:57:58 ----D---- C:\WINDOWS\SHELLNEW
2013-10-06 11:52:23 ----D---- C:\WINDOWS\system32\config
2013-10-06 11:49:54 ----D---- C:\Program Files\Microsoft Office
2013-10-06 11:46:35 ----D---- C:\WINDOWS\Help
2013-09-15 10:09:29 ----D---- C:\Program Files\Origin
2013-09-15 10:09:04 ----D---- C:\Documents and Settings\All Users\Data aplikací\Origin
2013-09-04 12:28:02 ----N---- C:\WINDOWS\system32\spmsg.dll
2013-08-29 14:42:05 ----D---- C:\Program Files\Ask.com
2013-08-09 02:56:34 ----A---- C:\WINDOWS\system32\themeui.dll
2013-08-05 14:30:13 ----A---- C:\WINDOWS\system32\ole32.dll
2013-08-03 00:48:38 ----N---- C:\WINDOWS\system32\wmvdecod.dll
2013-07-13 21:25:22 ----D---- C:\WINDOWS\system32\XPSViewer
2013-07-13 12:31:21 ----D---- C:\Documents and Settings\Jarda\Data aplikací\RealNetworks
2013-07-13 12:26:41 ----D---- C:\Documents and Settings\All Users\Data aplikací\Real
2013-07-13 12:26:17 ----A---- C:\WINDOWS\system32\rmoc3260.dll
2013-07-13 12:25:24 ----A---- C:\WINDOWS\system32\pndx5032.dll
2013-07-13 12:25:24 ----A---- C:\WINDOWS\system32\pndx5016.dll
2013-07-13 12:25:01 ----A---- C:\WINDOWS\system32\pncrt.dll
2013-07-13 12:23:30 ----A---- C:\WINDOWS\system32\msvcr71.dll
2013-07-13 12:23:30 ----A---- C:\WINDOWS\system32\msvcp71.dll
2013-07-10 11:37:49 ----A---- C:\WINDOWS\system32\usp10.dll
2013-07-04 08:34:02 ----A---- C:\WINDOWS\system32\ntkrnlpa.exe
2013-07-04 08:34:01 ----A---- C:\WINDOWS\system32\ntoskrnl.exe
2013-06-04 08:23:01 ----A---- C:\WINDOWS\system32\qedit.dll
2013-06-04 01:53:15 ----A---- C:\WINDOWS\system32\atmfd.dll
2013-05-15 05:57:51 ----HD---- C:\WINDOWS\$hf_mig$
2013-05-03 14:21:29 ----D---- C:\totalcmd
2013-04-22 22:24:08 ----A---- C:\WINDOWS\iun6002.exe
2013-03-12 13:36:00 ----A---- C:\WINDOWS\SchedLgU.Txt
2013-03-12 10:47:18 ----D---- C:\WINDOWS\system32
2013-03-11 16:29:06 ----D---- C:\WINDOWS
2013-03-11 16:23:48 ----HD---- C:\WINDOWS\inf
2013-03-09 11:59:33 ----D---- C:\Program Files\Electronic Arts
2013-03-09 11:59:31 ----HD---- C:\Program Files\InstallShield Installation Information
2013-03-08 09:36:15 ----A---- C:\WINDOWS\system32\winsrv.dll
2013-03-07 15:11:30 ----D---- C:\Program Files\Google
2013-03-07 15:11:28 ----SHD---- C:\WINDOWS\Installer
2013-03-07 15:07:09 ----D---- C:\WINDOWS\WinSxS
2013-03-06 16:09:29 ----D---- C:\WINDOWS\system32\CatRoot2
2013-03-06 16:08:32 ----D---- C:\Documents and Settings\Jarda\Data aplikací\Skype
2013-03-06 16:07:53 ----D---- C:\WINDOWS\Prefetch
2013-03-06 16:07:43 ----D---- C:\WINDOWS\Temp
2013-03-06 16:07:07 ----SD---- C:\WINDOWS\Tasks
2013-03-06 15:58:32 ----RD---- C:\Program Files
2013-02-27 15:35:06 ----D---- C:\Documents and Settings\Jarda\Data aplikací\U3
2013-02-27 08:58:28 ----A---- C:\WINDOWS\system32\mstscax.dll

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R1 dtsoftbus01;DAEMON Tools Virtual Bus Driver; C:\WINDOWS\system32\DRIVERS\dtsoftbus01.sys [2013-01-12 242240]
R1 eusk2par;Aladdin SmartKey Parallel Driver; \??\C:\WINDOWS\system32\Drivers\eusk2par.sys []
R1 intelppm;Řadič procesoru Intel; C:\WINDOWS\system32\DRIVERS\intelppm.sys [2008-04-14 40192]
R1 WmiAcpi;Microsoft Windows Management Interface for ACPI; C:\WINDOWS\system32\DRIVERS\wmiacpi.sys [2008-04-14 8832]
R3 CmBatt;Microsoft AC Adapter Driver; C:\WINDOWS\system32\DRIVERS\CmBatt.sys [2008-04-14 13952]
R3 HDAudBus;Ovladač Microsoft UAA pro sběrnici High Definition Audio; C:\WINDOWS\system32\DRIVERS\HDAudBus.sys [2008-04-14 144384]
R3 HidUsb;Ovladač třídy standardu HID; C:\WINDOWS\system32\DRIVERS\hidusb.sys [2008-04-14 10368]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\WINDOWS\system32\drivers\RtkHDAud.sys [2009-03-12 5051904]
R3 mouhid;Ovladač myši standardu HID; C:\WINDOWS\system32\DRIVERS\mouhid.sys [2001-10-24 12160]
R3 nv;nv; C:\WINDOWS\system32\DRIVERS\nv4_mini.sys [2009-05-08 6256064]
R3 NVENETFD;NVIDIA nForce 10/100/1000 Mbps Ethernet ; C:\WINDOWS\system32\DRIVERS\NVENETFD.sys [2008-07-07 54784]
R3 NVHDA;Service for NVIDIA High Definition Audio Driver; C:\WINDOWS\system32\drivers\nvhda32.sys [2008-12-22 45344]
R3 nvnetbus;NVIDIA Network Bus Enumerator; C:\WINDOWS\system32\DRIVERS\nvnetbus.sys [2008-07-07 22016]
R3 nvsmu;nvsmu; C:\WINDOWS\system32\DRIVERS\nvsmu.sys [2008-08-24 14208]
R3 RSUSBSTOR;RtsUStor.Sys Realtek USB Card Reader; C:\WINDOWS\System32\Drivers\RtsUStor.sys [2009-05-15 165888]
R3 RT80x86;Ralink 802.11n Wireless Driver; C:\WINDOWS\system32\DRIVERS\RT2860.sys [2009-08-04 1042176]
R3 TuneUpUtilitiesDrv;TuneUpUtilitiesDrv; \??\C:\Program Files\TuneUp Utilities 2013\TuneUpUtilitiesDriver32.sys []
R3 usbccgp;Obecný nadřazený ovladač Microsoft USB; C:\WINDOWS\system32\DRIVERS\usbccgp.sys [2013-08-09 32384]
R3 usbehci;Ovladač miniportu rozšířeného radiče hostitele Microsoft USB 2.0; C:\WINDOWS\system32\DRIVERS\usbehci.sys [2009-03-18 30336]
R3 usbhub;Rozbočovač umožnující USB2; C:\WINDOWS\system32\DRIVERS\usbhub.sys [2008-04-14 59520]
R3 usbohci;Ovladač Miniport otevřeného hostitelského řadiče Microsoft USB; C:\WINDOWS\system32\DRIVERS\usbohci.sys [2008-04-14 17152]
R3 usbvideo;Zobrazovací zařízení USB (WDM); C:\WINDOWS\System32\Drivers\usbvideo.sys [2013-07-17 123008]
S1 MpKsl31fc548f;MpKsl31fc548f; \??\c:\Documents and Settings\All Users\Data aplikací\Microsoft\Microsoft Antimalware\Definition Updates\{6078F8B1-C0A2-4E43-B1FC-FF5A9F383F09}\MpKsl31fc548f.sys []
S3 Ambfilt;Ambfilt; C:\WINDOWS\system32\drivers\Ambfilt.sys [2008-08-05 1684736]
S3 CCDECODE;Dekodér Closed Caption; C:\WINDOWS\system32\DRIVERS\CCDECODE.sys [2008-04-14 17024]
S3 HPZid412;IEEE-1284.4 Driver HPZid412; C:\WINDOWS\system32\DRIVERS\HPZid412.sys [2007-03-08 49920]
S3 HPZipr12;Print Class Driver for IEEE-1284.4 HPZipr12; C:\WINDOWS\system32\DRIVERS\HPZipr12.sys [2007-03-08 16496]
S3 HPZius12;USB to IEEE-1284.4 Translation Driver HPZius12; C:\WINDOWS\system32\DRIVERS\HPZius12.sys [2007-03-08 21568]
S3 Monfilt;Monfilt; C:\WINDOWS\system32\drivers\Monfilt.sys [2006-01-04 1389056]
S3 MSTEE;Microsoft Streaming Tee/Sink-to-Sink Converter; C:\WINDOWS\system32\drivers\MSTEE.sys [2008-04-14 5504]
S3 NABTSFEC;NABTS/FEC VBI Codec; C:\WINDOWS\system32\DRIVERS\NABTSFEC.sys [2008-04-14 85248]
S3 NdisIP;Microsoft TV/Video Connection; C:\WINDOWS\system32\DRIVERS\NdisIP.sys [2008-04-14 10880]
S3 nmwcd;Nokia USB Phone Parent Driver; C:\WINDOWS\system32\drivers\ccdcmb.sys [2011-08-17 18176]
S3 nmwcdc;Nokia USB Communication Driver; C:\WINDOWS\system32\drivers\ccdcmbo.sys [2011-08-17 23168]
S3 NSNDIS5;NSNDIS5 NDIS Protocol Driver; \??\C:\WINDOWS\system32\NSNDIS5.SYS []
S3 RtsUIR;Realtek IR Driver; C:\WINDOWS\system32\DRIVERS\Rts516xIR.sys []
S3 SLIP;BDA Slip De-Framer; C:\WINDOWS\system32\DRIVERS\SLIP.sys [2008-04-14 11136]
S3 streamip;BDA IPSink; C:\WINDOWS\system32\DRIVERS\StreamIP.sys [2008-04-14 15232]
S3 upperdev;upperdev; C:\WINDOWS\system32\DRIVERS\usbser_lowerflt.sys [2011-08-17 8192]
S3 usb_rndisx;Adaptér USB RNDIS; C:\WINDOWS\system32\DRIVERS\usb8023x.sys [2013-02-12 12928]
S3 USBCCID;Realtek Smartcard Reader Driver; C:\WINDOWS\system32\DRIVERS\RtsUCcid.sys []
S3 usbprint;Třída USB Printer; C:\WINDOWS\system32\DRIVERS\usbprint.sys [2008-04-14 25856]
S3 usbscan;Ovladač skeneru USB; C:\WINDOWS\system32\DRIVERS\usbscan.sys [2013-07-03 14976]
S3 usbser;USB Modem Driver; C:\WINDOWS\system32\drivers\usbser.sys [2013-08-29 26240]
S3 UsbserFilt;UsbserFilt; C:\WINDOWS\system32\DRIVERS\usbser_lowerfltj.sys [2011-08-17 8192]
S3 usbstor;Ovladač velkokapacitního paměťového zařízení USB; C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS [2008-04-14 26368]
S3 Wdf01000;Kernel Mode Driver Frameworks service; C:\WINDOWS\System32\Drivers\wdf01000.sys [2009-07-14 444136]
S3 WinUSB;Sony sa0104 ADB Interface; C:\WINDOWS\system32\DRIVERS\WinUSB.sys [2009-07-13 34944]
S3 WpdUsb;WpdUsb; C:\WINDOWS\system32\DRIVERS\wpdusb.sys [2006-10-18 38528]
S3 WSTCODEC;Dálnopisný kodek světového standardu; C:\WINDOWS\system32\DRIVERS\WSTCODEC.SYS [2008-04-14 19200]
S3 WudfRd;Windows Driver Foundation - User-mode Driver Framework Reflector; C:\WINDOWS\system32\DRIVERS\wudfrd.sys [2006-09-28 82944]
S4 IntelIde;IntelIde; C:\WINDOWS\system32\drivers\IntelIde.sys []

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 hpqddsvc;Služba HP CUE DeviceDiscovery; C:\WINDOWS\system32\svchost.exe [2008-04-14 14336]
R2 JavaQuickStarterService;Java Quick Starter; C:\Program Files\Java\jre7\bin\jqs.exe [2013-12-02 182696]
R2 MDM;Machine Debug Manager; C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE [2003-06-19 322120]
R2 MsMpSvc;Microsoft Antimalware Service; c:\Program Files\Microsoft Security Client\MsMpEng.exe [2013-10-23 22208]
R2 Net Driver HPZ12;Net Driver HPZ12; C:\WINDOWS\System32\svchost.exe [2008-04-14 14336]
R2 NVSvc;NVIDIA Display Driver Service; C:\WINDOWS\system32\nvsvc32.exe [2009-05-08 168005]
R2 Pml Driver HPZ12;Pml Driver HPZ12; C:\WINDOWS\System32\svchost.exe [2008-04-14 14336]
R2 ProtexisLicensing;ProtexisLicensing; C:\WINDOWS\system32\PSIService.exe [2007-06-05 177704]
R2 PSI_SVC_2;Protexis Licensing V2; c:\Program Files\Common Files\Protexis\License Service\PsiService_2.exe [2010-03-10 189728]
R2 RealNetworks Downloader Resolver Service;RealNetworks Downloader Resolver Service; C:\Program Files\RealNetworks\RealDownloader\rndlresolversvc.exe [2013-04-16 39056]
R2 Skype C2C Service;Skype C2C Service; C:\Documents and Settings\All Users\Data aplikací\Skype\Toolbars\Skype C2C Service\c2c_service.exe [2013-09-16 3273088]
R2 TuneUp.UtilitiesSvc;TuneUp Utilities Service; C:\Program Files\TuneUp Utilities 2013\TuneUpUtilitiesService32.exe [2012-11-02 1699168]
R2 WudfSvc;Windows Driver Foundation - User-mode Driver Framework; C:\WINDOWS\system32\svchost.exe [2008-04-14 14336]
R3 hpqcxs08;hpqcxs08; C:\WINDOWS\system32\svchost.exe [2008-04-14 14336]
S2 gupdate1ca834e3afbd1f0;Služba Google Update (gupdate1ca834e3afbd1f0); C:\Program Files\Google\Update\GoogleUpdate.exe [2009-12-22 133104]
S2 SkypeUpdate;Skype Updater; C:\Program Files\Skype\Updater\Updater.exe [2013-09-05 171680]
S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service; C:\WINDOWS\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2013-12-13 257416]
S3 aspnet_state;ASP.NET State Service; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe [2008-07-25 34312]
S3 clr_optimization_v2.0.50727_32;.NET Runtime Optimization Service v2.0.50727_X86; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe [2008-07-25 69632]
S3 FontCache3.0.0.0;Windows Presentation Foundation Font Cache 3.0.0.0; c:\WINDOWS\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe [2008-07-29 46104]
S3 gupdatem;Služba Google Update (gupdatem); C:\Program Files\Google\Update\GoogleUpdate.exe [2009-12-22 133104]
S3 gusvc;Google Software Updater; C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe [2013-03-07 194032]
S3 idsvc;Windows CardSpace; c:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe [2008-07-29 881664]
S3 McComponentHostService;McAfee Security Scan Component Host Service; C:\Program Files\McAfee Security Scan\3.8.130\McCHSvc.exe [2013-09-06 235216]
S3 Microsoft Office Groove Audit Service;Microsoft Office Groove Audit Service; C:\Program Files\Microsoft Office\Office12\GrooveAuditService.exe [2009-02-26 64856]
S3 MozillaMaintenance;Mozilla Maintenance Service; C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe [2014-02-14 118896]
S3 odserv;Microsoft Office Diagnostics Service; C:\Program Files\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE [2011-07-20 440696]
S3 ose;Office Source Engine; C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2006-10-26 145184]
S3 Sony PC Companion;Sony PC Companion; C:\Program Files\Sony\Sony PC Companion\PCCService.exe [2013-02-04 155824]
S4 NetTcpPortSharing;Net.Tcp Port Sharing Service; c:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe [2008-07-29 132096]

-----------------EOF-----------------

[Márty84]

Je to ono, jen by to chtelo novejsi verzi RSIT

Aktualizujem skener
Smazte RSIT a slozku C:\Program Files\trend micro , pokud ji najdete.
Pak stahnete nove RSIT http://images.malwareremoval.com/random/RSIT.exe a az si z nej vyzadam dalsi log, pouzijete ho.


Nepotesim vas, mate zavirovano


Stahnete AdwCleaner http://general-changelog-team.fr/fr/dow ... adwcleaner a ulozte ho na plochu.
Ukoncete vsechny programy, jinak to AdwCleaner udela za vas.
Spustte ho.
Kliknete na Scan a program zacne pracovat.
Az skonci, vyplivne na vas log (pokud ne, najdete ho zde C:\AdwCleaner\AdwCleaner[R?].txt ), ten mi sem zkopirujte.

[Tanea]

Je to ono? (Omlouvám se, ale je mi 14 a vůbec tomu nerozumím, jsem moc ráda že mě takhle navádíte)

# AdwCleaner v3.020 - Report created 06/03/2013 at 16:22:52
# Updated 27/02/2014 by Xplode
# Operating System : Microsoft Windows XP Service Pack 3 (32 bits)
# Username : Jarda - NOTEBOOK
# Running from : C:\Documents and Settings\Jarda\Plocha\adwcleaner.exe
# Option : Scan

***** [ Services ] *****


***** [ Files / Folders ] *****

File Found : C:\Documents and Settings\All Users\Plocha\iLivid.lnk
File Found : C:\Documents and Settings\Jarda\Data aplikací\Mozilla\Firefox\Profiles\x9qspwg6.default\searchplugins\Askcom.xml
File Found : C:\Documents and Settings\Jarda\Data aplikací\Mozilla\Firefox\Profiles\x9qspwg6.default\searchplugins\bingp.xml
File Found : C:\Documents and Settings\Jarda\Data aplikací\Mozilla\Firefox\Profiles\x9qspwg6.default\searchplugins\Search_Results.xml
File Found : C:\WINDOWS\system32\roboot.exe
File Found : C:\WINDOWS\Tasks\Scheduled Update for Ask Toolbar.job
Folder Found : C:\Documents and Settings\Jarda\Data aplikací\Mozilla\Firefox\Profiles\x9qspwg6.default\Extensions\{F34C9277-6577-4DFF-B2D7-7D58092F272F}
Folder Found : C:\Documents and Settings\Jarda\Data aplikací\Mozilla\Firefox\Profiles\x9qspwg6.default\Extensions\toolbar@ask.com
Folder Found : C:\Documents and Settings\Jarda\Local Settings\Data aplikací\Google\Chrome\User Data\Default\Extensions\aaaaojmikegpiepcfdkkjaplodkpfmlo
Folder Found C:\Documents and Settings\All Users\Data aplikací\Ask
Folder Found C:\Documents and Settings\All Users\Data aplikací\boost_interprocess
Folder Found C:\Documents and Settings\All Users\Nabídka Start\Programy\PC Performer
Folder Found C:\Documents and Settings\Jarda\Data aplikací\ilividtoolbarguid
Folder Found C:\Documents and Settings\Jarda\Data aplikací\OpenCandy
Folder Found C:\Documents and Settings\Jarda\Data aplikací\uniblue
Folder Found C:\Documents and Settings\Jarda\Local Settings\Data aplikací\apn
Folder Found C:\Documents and Settings\Jarda\Local Settings\Data aplikací\AskToolbar
Folder Found C:\Program Files\Ask.com
Folder Found C:\Program Files\MyPC Backup
Folder Found C:\Program Files\PC Performer
Folder Found C:\Program Files\Search Results Toolbar
Folder Found C:\WINDOWS\installer\{86d4b82a-abed-442a-be86-96357b70f4fe}

***** [ Shortcuts ] *****


***** [ Registry ] *****

Key Found : HKCU\Software\1ClickDownload
Key Found : HKCU\Software\APN
Key Found : HKCU\Software\Ask.com
Key Found : HKCU\Software\AskToolbar
Key Found : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{9BB47C17-9C68-4BB3-B188-DD9AF0FD2406}
Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\{79A765E1-C399-405B-85AF-466F52E918B0}
Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}
Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{D4027C7F-154A-4066-A1AD-4243D8127440}
Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{00000000-6E41-4FD3-8538-502F5495E5FC}
Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}
Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{D4027C7F-154A-4066-A1AD-4243D8127440}
Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\{79A765E1-C399-405B-85AF-466F52E918B0}
Key Found : HKLM\Software\APN
Key Found : HKLM\Software\AskToolbar
Key Found : HKLM\SOFTWARE\Classes\AppID\{9B0CB95C-933A-4B8C-B6D4-EDCD19A43874}
Key Found : HKLM\SOFTWARE\Classes\AppID\GenericAskToolbar.DLL
Key Found : HKLM\SOFTWARE\Classes\CLSID\{00000000-6E41-4FD3-8538-502F5495E5FC}
Key Found : HKLM\SOFTWARE\Classes\CLSID\{00000001-4FEF-40D3-B3FA-E0531B897F98}
Key Found : HKLM\SOFTWARE\Classes\CLSID\{64697678-0000-0010-8000-00AA00389B71}
Key Found : HKLM\SOFTWARE\Classes\CLSID\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}
Key Found : HKLM\SOFTWARE\Classes\CLSID\{D4027C7F-154A-4066-A1AD-4243D8127440}
Key Found : HKLM\SOFTWARE\Classes\GenericAskToolbar.ToolbarWnd
Key Found : HKLM\SOFTWARE\Classes\GenericAskToolbar.ToolbarWnd.1
Key Found : HKLM\Software\Classes\Installer\Features\A28B4D68DEBAA244EB686953B7074FEF
Key Found : HKLM\Software\Classes\Installer\Products\A28B4D68DEBAA244EB686953B7074FEF
Key Found : HKLM\SOFTWARE\Classes\Interface\{6C434537-053E-486D-B62A-160059D9D456}
Key Found : HKLM\SOFTWARE\Classes\Interface\{91CF619A-4686-4CA4-9232-3B2E6B63AA92}
Key Found : HKLM\SOFTWARE\Classes\Interface\{AC71B60E-94C9-4EDE-BA46-E146747BB67E}
Key Found : HKLM\SOFTWARE\Classes\protector_dll.protectorbho
Key Found : HKLM\SOFTWARE\Classes\protector_dll.protectorbho.1
Key Found : HKLM\SOFTWARE\Classes\TypeLib\{2996F0E7-292B-4CAE-893F-47B8B1C05B56}
Key Found : HKLM\SOFTWARE\Google\Chrome\Extensions\aaaaojmikegpiepcfdkkjaplodkpfmlo
Key Found : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{A5AA24EA-11B8-4113-95AE-9ED71DEAF12A}
Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Management\ARPCache\{86D4B82A-ABED-442A-BE86-96357B70F4FE}
Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}
Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{D4027C7F-154A-4066-A1AD-4243D8127440}
Key Found : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UpgradeCodes\F928123A039649549966D4C29D35B1C9
Key Found : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\0CFE535C35F99574E8340BFA75BF92C2
Key Found : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\0E12F736682067FDE4D1158D5940A82E
Key Found : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\1A24B5BB8521B03E0C8D908F5ABC0AE6
Key Found : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\261F213D1F55267499B1F87D0CC3BCF7
Key Found : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\2B0D56C4F4C46D844A57FFED6F0D2852
Key Found : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\49D4375FE41653242AEA4C969E4E65E0
Key Found : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\6AA0923513360135B272E8289C5F13FA
Key Found : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\6F7467AF8F29C134CBBAB394ECCFDE96
Key Found : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\741B4ADF27276464790022C965AB6DA8
Key Found : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\7DE196B10195F5647A2B21B761F3DE01
Key Found : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\922525DCC5199162F8935747CA3D8E59
Key Found : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\9D4F5849367142E4685ED8C25E44C5ED
Key Found : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\A5875B04372C19545BEB90D4D606C472
Key Found : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\A876D9E80B896EC44A8620248CC79296
Key Found : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\B66FFAB725B92594C986DE826A867888
Key Found : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\BCDA179D619B91648538E3394CAC94CC
Key Found : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\D677B1A9671D4D4004F6F2A4469E86EA
Key Found : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\DD1402A9DD4215A43ABDE169A41AFA0E
Key Found : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\E36E114A0EAD2AD46B381D23AD69CDDF
Key Found : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\EF8E618DB3AEDFBB384561B5C548F65E
Key Found : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\A28B4D68DEBAA244EB686953B7074FEF
Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{86D4B82A-ABED-442A-BE86-96357B70F4FE}
Value Found : HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser [{D4027C7F-154A-4066-A1AD-4243D8127440}]
Value Found : HKCU\Software\Microsoft\Internet Explorer\URLSearchHooks [{00000000-6E41-4FD3-8538-502F5495E5FC}]
Value Found : HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{D4027C7F-154A-4066-A1AD-4243D8127440}]
Value Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run [ApnUpdater]

***** [ Browsers ] *****

-\\ Internet Explorer v8.0.6001.18702


-\\ Mozilla Firefox v27.0.1 (cs)

[ File : C:\Documents and Settings\Jarda\Data aplikací\Mozilla\Firefox\Profiles\x9qspwg6.default\prefs.js ]

Line Found : user_pref("browser.search.defaultengine", "Ask.com");
Line Found : user_pref("browser.search.order.1", "Search Results");
Line Found : user_pref("extensions.asktb.ff-original-keyword-url", "");

-\\ Google Chrome v33.0.1750.117

[ File : C:\Documents and Settings\Jarda\Local Settings\Data aplikací\Google\Chrome\User Data\Default\preferences ]


*************************

AdwCleaner[R0].txt - [9319 octets] - [06/03/2013 16:22:52]

########## EOF - C:\AdwCleaner\AdwCleaner[R0].txt - [9379 octets] ##########

[Márty84]

Je to ono

Znovu ukoncete vsechny programy a spustte AdwCleaner. (Pokud ho mate stale otevreny, rovnou kliknete na Clean)
Tentokrat kliknete na Scan a az dobehne, tak hned na Clean
Program zacne pracovat (muze dojit k restartu pc) a vyplivne dalsi log (pripadne bude zde C:\AdwCleaner\AdwCleaner [S?].txt ). Ten mi sem zase zkopirujte.

[Tanea]

Tady:

# AdwCleaner v3.020 - Report created 06/03/2013 at 16:33:33
# Updated 27/02/2014 by Xplode
# Operating System : Microsoft Windows XP Service Pack 3 (32 bits)
# Username : Jarda - NOTEBOOK
# Running from : C:\Documents and Settings\Jarda\Plocha\adwcleaner.exe
# Option : Clean

***** [ Services ] *****


***** [ Files / Folders ] *****

Folder Deleted : C:\Program Files\Search Results Toolbar
Folder Deleted : C:\WINDOWS\installer\{86d4b82a-abed-442a-be86-96357b70f4fe}
Folder Deleted : C:\Documents and Settings\Jarda\Local Settings\Data aplikací\apn
Folder Deleted : C:\Documents and Settings\Jarda\Local Settings\Data aplikací\AskToolbar
Folder Deleted : C:\Documents and Settings\Jarda\Data aplikací\ilividtoolbarguid
Folder Deleted : C:\Documents and Settings\Jarda\Data aplikací\OpenCandy
Folder Deleted : C:\Documents and Settings\Jarda\Data aplikací\uniblue
Folder Deleted : C:\Documents and Settings\Jarda\Data aplikací\Mozilla\Firefox\Profiles\x9qspwg6.default\Extensions\{F34C9277-6577-4DFF-B2D7-7D58092F272F}
Folder Deleted : C:\Documents and Settings\Jarda\Data aplikací\Mozilla\Firefox\Profiles\x9qspwg6.default\Extensions\toolbar@ask.com
[!] Folder Deleted : C:\Documents and Settings\Jarda\Local Settings\Data aplikací\Google\Chrome\User Data\Default\Extensions\aaaaojmikegpiepcfdkkjaplodkpfmlo
File Deleted : C:\Documents and Settings\All Users\Plocha\iLivid.lnk
File Deleted : C:\WINDOWS\system32\roboot.exe
File Deleted : C:\Documents and Settings\Jarda\Data aplikací\Mozilla\Firefox\Profiles\x9qspwg6.default\searchplugins\Askcom.xml
File Deleted : C:\Documents and Settings\Jarda\Data aplikací\Mozilla\Firefox\Profiles\x9qspwg6.default\searchplugins\bingp.xml
File Deleted : C:\Documents and Settings\Jarda\Data aplikací\Mozilla\Firefox\Profiles\x9qspwg6.default\searchplugins\Search_Results.xml
File Deleted : C:\WINDOWS\Tasks\Scheduled Update for Ask Toolbar.job

***** [ Shortcuts ] *****


***** [ Registry ] *****

Key Deleted : HKLM\SOFTWARE\Google\Chrome\Extensions\aaaaojmikegpiepcfdkkjaplodkpfmlo
Key Deleted : HKLM\SOFTWARE\Classes\AppID\GenericAskToolbar.DLL
Key Deleted : HKLM\SOFTWARE\Classes\GenericAskToolbar.ToolbarWnd
Key Deleted : HKLM\SOFTWARE\Classes\GenericAskToolbar.ToolbarWnd.1
Key Deleted : HKLM\SOFTWARE\Classes\protector_dll.protectorbho
Key Deleted : HKLM\SOFTWARE\Classes\protector_dll.protectorbho.1
Value Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run [ApnUpdater]
Key Deleted : HKLM\SOFTWARE\Classes\AppID\{9B0CB95C-933A-4B8C-B6D4-EDCD19A43874}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{00000000-6E41-4FD3-8538-502F5495E5FC}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{00000001-4FEF-40D3-B3FA-E0531B897F98}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{64697678-0000-0010-8000-00AA00389B71}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{D4027C7F-154A-4066-A1AD-4243D8127440}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{6C434537-053E-486D-B62A-160059D9D456}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{91CF619A-4686-4CA4-9232-3B2E6B63AA92}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{AC71B60E-94C9-4EDE-BA46-E146747BB67E}
Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{2996F0E7-292B-4CAE-893F-47B8B1C05B56}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{D4027C7F-154A-4066-A1AD-4243D8127440}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{00000000-6E41-4FD3-8538-502F5495E5FC}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{D4027C7F-154A-4066-A1AD-4243D8127440}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{D4027C7F-154A-4066-A1AD-4243D8127440}
Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{A5AA24EA-11B8-4113-95AE-9ED71DEAF12A}
Key Deleted : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{9BB47C17-9C68-4BB3-B188-DD9AF0FD2406}
Value Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{D4027C7F-154A-4066-A1AD-4243D8127440}]
Value Deleted : HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser [{D4027C7F-154A-4066-A1AD-4243D8127440}]
Value Deleted : HKCU\Software\Microsoft\Internet Explorer\URLSearchHooks [{00000000-6E41-4FD3-8538-502F5495E5FC}]
Key Deleted : HKCU\Software\1ClickDownload
Key Deleted : HKCU\Software\APN
Key Deleted : HKCU\Software\Ask.com
Key Deleted : HKCU\Software\AskToolbar
Key Deleted : HKLM\Software\APN
Key Deleted : HKLM\Software\AskToolbar
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\{79A765E1-C399-405B-85AF-466F52E918B0}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{86D4B82A-ABED-442A-BE86-96357B70F4FE}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\{79A765E1-C399-405B-85AF-466F52E918B0}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Management\ARPCache\{86D4B82A-ABED-442A-BE86-96357B70F4FE}
Key Deleted : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\0CFE535C35F99574E8340BFA75BF92C2
Key Deleted : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\0E12F736682067FDE4D1158D5940A82E
Key Deleted : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\1A24B5BB8521B03E0C8D908F5ABC0AE6
Key Deleted : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\261F213D1F55267499B1F87D0CC3BCF7
Key Deleted : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\2B0D56C4F4C46D844A57FFED6F0D2852
Key Deleted : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\49D4375FE41653242AEA4C969E4E65E0
Key Deleted : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\6AA0923513360135B272E8289C5F13FA
Key Deleted : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\6F7467AF8F29C134CBBAB394ECCFDE96
Key Deleted : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\741B4ADF27276464790022C965AB6DA8
Key Deleted : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\7DE196B10195F5647A2B21B761F3DE01
Key Deleted : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\922525DCC5199162F8935747CA3D8E59
Key Deleted : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\9D4F5849367142E4685ED8C25E44C5ED
Key Deleted : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\A5875B04372C19545BEB90D4D606C472
Key Deleted : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\A876D9E80B896EC44A8620248CC79296
Key Deleted : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\B66FFAB725B92594C986DE826A867888
Key Deleted : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\BCDA179D619B91648538E3394CAC94CC
Key Deleted : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\D677B1A9671D4D4004F6F2A4469E86EA
Key Deleted : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\DD1402A9DD4215A43ABDE169A41AFA0E
Key Deleted : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\E36E114A0EAD2AD46B381D23AD69CDDF
Key Deleted : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\EF8E618DB3AEDFBB384561B5C548F65E
Key Deleted : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\A28B4D68DEBAA244EB686953B7074FEF
Key Deleted : HKLM\Software\Classes\Installer\Features\A28B4D68DEBAA244EB686953B7074FEF
Key Deleted : HKLM\Software\Classes\Installer\Products\A28B4D68DEBAA244EB686953B7074FEF
Key Deleted : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UpgradeCodes\F928123A039649549966D4C29D35B1C9

***** [ Browsers ] *****

-\\ Internet Explorer v8.0.6001.18702


-\\ Mozilla Firefox v27.0.1 (cs)

[ File : C:\Documents and Settings\Jarda\Data aplikací\Mozilla\Firefox\Profiles\x9qspwg6.default\prefs.js ]

Line Deleted : user_pref("browser.search.defaultengine", "Ask.com");
Line Deleted : user_pref("browser.search.order.1", "Search Results");
Line Deleted : user_pref("extensions.asktb.ff-original-keyword-url", "");

-\\ Google Chrome v33.0.1750.117

[ File : C:\Documents and Settings\Jarda\Local Settings\Data aplikací\Google\Chrome\User Data\Default\preferences ]


*************************

AdwCleaner[R0].txt - [9459 octets] - [06/03/2013 16:22:52]
AdwCleaner[R1].txt - [9215 octets] - [06/03/2013 16:32:41]
AdwCleaner[S0].txt - [736 octets] - [06/03/2013 16:28:06]
AdwCleaner[S1].txt - [9318 octets] - [06/03/2013 16:33:33]

########## EOF - C:\AdwCleaner\AdwCleaner[S1].txt - [9378 octets] ##########

[Márty84]

Vyborne, sikulka


Udelejte !!!kompletni!!! kontrolu s MBAM http://forum.viry.cz/viewtopic.php?f=29&t=115222 a dejte sem vysledky. Predem nic nemazte, miva obcas falesne detekce

[Tanea]

No konečně je to hotové! 2 hodiny! Ale tady máte výsledky

Malwarebytes Anti-Malware 1.75.0.1300
www.malwarebytes.org

Verze: v2014.03.06.06

Windows XP Service Pack 3 x86 NTFS
Internet Explorer 8.0.6001.18702
Jarda :: NOTEBOOK [administrátor]

6.3.2013 16:43:58
MBAM-log-2013-03-06 (18-48-49).txt

Typ: Kompletní kontrola (C:\|)
Nastavení kontroly povoleno: Paměť | Po spuštění | Registr | Systémové soubory | Heuristická analýza Extra | Heuristická analýza Shuriken | PUP | PUM
Nastavení kontroly zakázáno: P2P
Kontrolované objekty: 323619
Uplynulý čas: 2 hodin, 3 minut, 18 sekund

Nalezené procesy v paměti: 0
(Žádné škodlivé položky nebyly zjištěny)

Nalezené moduly v paměti: 0
(Žádné škodlivé položky nebyly zjištěny)

Nalezené klíče v registru: 0
(Žádné škodlivé položky nebyly zjištěny)

Nalezené hodnoty v registru: 1
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run|mssbgkSrv (Trojan.Agent.VBSGen) -> Data: C:\WINDOWS\inf\mssbgk.vbe -> Nebyla provedena žádná instrukce.

Nalezené datové položky v registru: 0
(Žádné škodlivé položky nebyly zjištěny)

Nalezené složky: 1
C:\Program Files\Speed Test 127 (PUP.Optional.SpeedTest.A) -> Nebyla provedena žádná instrukce.

Nalezené soubory: 61
C:\Documents and Settings\Jarda\Data aplikací\update_tc\update.exe (Backdoor.Bot.AI) -> Nebyla provedena žádná instrukce.
C:\Documents and Settings\Jarda\Dokumenty\DeamonTools.exe (PUP.Optional.OpenCandy) -> Nebyla provedena žádná instrukce.
C:\Documents and Settings\Jarda\Dokumenty\iLividSetup.exe (PUP.Optional.Bandoo) -> Nebyla provedena žádná instrukce.
C:\Documents and Settings\Jarda\Dokumenty\Stažené soubory\77ZipSetup.exe (PUP.Optional.InstallBrain) -> Nebyla provedena žádná instrukce.
C:\Documents and Settings\Jarda\Dokumenty\Stažené soubory\PhotoScape-setup.exe (PUP.Optional.OpenCandy) -> Nebyla provedena žádná instrukce.
C:\Documents and Settings\Jarda\Dokumenty\Stažené soubory\SoftonicDownloader_for_music-editing-master.exe (PUP.Optional.Softonic.A) -> Nebyla provedena žádná instrukce.
C:\Documents and Settings\Jarda\Dokumenty\Stažené soubory\iLividSetup-r933-n-bf.exe (PUP.Optional.Bandoo) -> Nebyla provedena žádná instrukce.
C:\Documents and Settings\Jarda\Local Settings\Temp\dLX0tAYm.exe.part (PUP.Optional.Somoto.A) -> Nebyla provedena žádná instrukce.
C:\Documents and Settings\Jarda\Local Settings\Temp\ibtmpc810619\app_12924.decrpt (PUP.Optional.PCPerformer.A) -> Nebyla provedena žádná instrukce.
C:\Documents and Settings\Jarda\Local Settings\Temp\ibtmpc810619\app_9087 (PUP.Optional.BesttoolBars) -> Nebyla provedena žádná instrukce.
C:\Documents and Settings\Jarda\Local Settings\Temp\ibtmpc810619\PCPerformerSetup (PUP.Optional.PCPerformer.A) -> Nebyla provedena žádná instrukce.
C:\Documents and Settings\Jarda\Local Settings\Temp\ibtmpc810619\SpeedanAlysisSetup (PUP.Optional.BesttoolBars) -> Nebyla provedena žádná instrukce.
C:\Documents and Settings\Jarda\Local Settings\Temp\speedtest127\speedtest127.exe (PUP.Optional.BesttoolBars) -> Nebyla provedena žádná instrukce.
C:\Documents and Settings\Jarda\Local Settings\Temp\nsyB3C.tmp\PhotoScape_V3.6.3.exe (PUP.Optional.OpenCandy) -> Nebyla provedena žádná instrukce.
C:\AdwCleaner\Quarantine\C\WINDOWS\system32\roboot.exe.vir (PUP.Optional.PCPerformer.A) -> Nebyla provedena žádná instrukce.
C:\Program Files\Speed Test 127\AddonsFramework.Typelib.dll (PUP.Optional.BesttoolBars) -> Nebyla provedena žádná instrukce.
C:\Program Files\Speed Test 127\AddonsFramework.Typelib64.dll (PUP.Optional.BesttoolBars) -> Nebyla provedena žádná instrukce.
C:\Program Files\The Sims 3 Island Paradise\The Sims 3 Island Paradise.exe (Backdoor.Bot.AI) -> Nebyla provedena žádná instrukce.
C:\Program Files\The Sims 3 Island Paradise\The Sims 3 Island Paradise.rar (Backdoor.Bot.AI) -> Nebyla provedena žádná instrukce.
C:\Program Files\The Sims 3 Island Paradise\The Sims 3 Island Paradise\The Sims 3 Island Paradise.exe (Backdoor.Bot.AI) -> Nebyla provedena žádná instrukce.
C:\System Volume Information\_restore{3A088933-1A4B-4E86-BC15-37794B3AF12A}\RP1336\A0179508.exe (Backdoor.Bot.AI) -> Nebyla provedena žádná instrukce.
C:\System Volume Information\_restore{3A088933-1A4B-4E86-BC15-37794B3AF12A}\RP1337\A0179533.exe (Backdoor.Bot.AI) -> Nebyla provedena žádná instrukce.
C:\System Volume Information\_restore{3A088933-1A4B-4E86-BC15-37794B3AF12A}\RP1337\A0179528.exe (BitcoinMiner) -> Nebyla provedena žádná instrukce.
C:\System Volume Information\_restore{3A088933-1A4B-4E86-BC15-37794B3AF12A}\RP1337\A0181565.exe (PUP.Optional.Installrex) -> Nebyla provedena žádná instrukce.
C:\System Volume Information\_restore{3A088933-1A4B-4E86-BC15-37794B3AF12A}\RP1337\A0181567.exe (Backdoor.Bot.AI) -> Nebyla provedena žádná instrukce.
C:\System Volume Information\_restore{3A088933-1A4B-4E86-BC15-37794B3AF12A}\RP1337\A0181569.exe (Backdoor.Bot.AI) -> Nebyla provedena žádná instrukce.
C:\System Volume Information\_restore{3A088933-1A4B-4E86-BC15-37794B3AF12A}\RP1337\A0183560.exe (PUP.Optional.PCPerformer.A) -> Nebyla provedena žádná instrukce.
C:\WINDOWS\inf\msstnyd\msstnyd.exe (BitcoinMiner) -> Nebyla provedena žádná instrukce.
C:\WINDOWS\inf\mssbgk.vbe (Trojan.Agent.VBSGen) -> Nebyla provedena žádná instrukce.
C:\Program Files\Speed Test 127\DeskTopIcon.ico (PUP.Optional.SpeedTest.A) -> Nebyla provedena žádná instrukce.
C:\Program Files\Speed Test 127\background.html (PUP.Optional.SpeedTest.A) -> Nebyla provedena žádná instrukce.
C:\Program Files\Speed Test 127\BackgroundHost.exe (PUP.Optional.SpeedTest.A) -> Nebyla provedena žádná instrukce.
C:\Program Files\Speed Test 127\BackgroundHost64.exe (PUP.Optional.SpeedTest.A) -> Nebyla provedena žádná instrukce.
C:\Program Files\Speed Test 127\button.js (PUP.Optional.SpeedTest.A) -> Nebyla provedena žádná instrukce.
C:\Program Files\Speed Test 127\ButtonSite.dll (PUP.Optional.SpeedTest.A) -> Nebyla provedena žádná instrukce.
C:\Program Files\Speed Test 127\ButtonSite64.dll (PUP.Optional.SpeedTest.A) -> Nebyla provedena žádná instrukce.
C:\Program Files\Speed Test 127\config.xml (PUP.Optional.SpeedTest.A) -> Nebyla provedena žádná instrukce.
C:\Program Files\Speed Test 127\content.js (PUP.Optional.SpeedTest.A) -> Nebyla provedena žádná instrukce.
C:\Program Files\Speed Test 127\icon128.ico (PUP.Optional.SpeedTest.A) -> Nebyla provedena žádná instrukce.
C:\Program Files\Speed Test 127\icon128.png (PUP.Optional.SpeedTest.A) -> Nebyla provedena žádná instrukce.
C:\Program Files\Speed Test 127\icon16.ico (PUP.Optional.SpeedTest.A) -> Nebyla provedena žádná instrukce.
C:\Program Files\Speed Test 127\icon16.png (PUP.Optional.SpeedTest.A) -> Nebyla provedena žádná instrukce.
C:\Program Files\Speed Test 127\icon18.ico (PUP.Optional.SpeedTest.A) -> Nebyla provedena žádná instrukce.
C:\Program Files\Speed Test 127\icon18.png (PUP.Optional.SpeedTest.A) -> Nebyla provedena žádná instrukce.
C:\Program Files\Speed Test 127\icon24.ico (PUP.Optional.SpeedTest.A) -> Nebyla provedena žádná instrukce.
C:\Program Files\Speed Test 127\icon24.png (PUP.Optional.SpeedTest.A) -> Nebyla provedena žádná instrukce.
C:\Program Files\Speed Test 127\icon32.ico (PUP.Optional.SpeedTest.A) -> Nebyla provedena žádná instrukce.
C:\Program Files\Speed Test 127\icon32.png (PUP.Optional.SpeedTest.A) -> Nebyla provedena žádná instrukce.
C:\Program Files\Speed Test 127\icon48.ico (PUP.Optional.SpeedTest.A) -> Nebyla provedena žádná instrukce.
C:\Program Files\Speed Test 127\icon48.png (PUP.Optional.SpeedTest.A) -> Nebyla provedena žádná instrukce.
C:\Program Files\Speed Test 127\icon64.ico (PUP.Optional.SpeedTest.A) -> Nebyla provedena žádná instrukce.
C:\Program Files\Speed Test 127\icon64.png (PUP.Optional.SpeedTest.A) -> Nebyla provedena žádná instrukce.
C:\Program Files\Speed Test 127\jquery-1.9.1.min.js (PUP.Optional.SpeedTest.A) -> Nebyla provedena žádná instrukce.
C:\Program Files\Speed Test 127\json2.min.js (PUP.Optional.SpeedTest.A) -> Nebyla provedena žádná instrukce.
C:\Program Files\Speed Test 127\options.htm (PUP.Optional.SpeedTest.A) -> Nebyla provedena žádná instrukce.
C:\Program Files\Speed Test 127\rjs.js (PUP.Optional.SpeedTest.A) -> Nebyla provedena žádná instrukce.
C:\Program Files\Speed Test 127\ScriptHost.dll (PUP.Optional.SpeedTest.A) -> Nebyla provedena žádná instrukce.
C:\Program Files\Speed Test 127\ScriptHost64.dll (PUP.Optional.SpeedTest.A) -> Nebyla provedena žádná instrukce.
C:\Program Files\Speed Test 127\uninstall.exe (PUP.Optional.SpeedTest.A) -> Nebyla provedena žádná instrukce.
C:\Program Files\Speed Test 127\updater.js (PUP.Optional.SpeedTest.A) -> Nebyla provedena žádná instrukce.
C:\Program Files\Speed Test 127\updaterWrapper.js (PUP.Optional.SpeedTest.A) -> Nebyla provedena žádná instrukce.

(konec)

[Tanea]

Mohl byste někdo...? Ráda bych to měla dneska hotové.

[Márty84]

My si do temat nelezeme, takze musite vydrzet. A dneska to urcite nebude, protoze je to dost prolezle a ty skeny trvaji dost dlouho, bohuzel.


Postupujte presne v tomto poradi.
1) MBAM nezavirejte, jen minimalizujte.
2) Vymazte/Vypnete vytvareni bodu obnovy http://forum.viry.cz/viewtopic.php?f=46&t=47040 , ale nerestartujte pc.
3) Ted nechte nalezy MBAM odstranit a restartujte pc.
4) Udelejte novy test s MBAM a dejte sem vysledky.

[Tanea]

Dobře, promiňte. Ale Nemůže se u toho postupu co jste mi dal nic zásadního stát s notebookem, že ne?

[Márty84]

V pohode

Pokud budete postupovat podle navodu, nic se stat nemuze. Body obnovy je potreba vymazat, protoze je v nich ta havet a ta by se porad vracela. Proto je potreba vymazani bodu obnovy i nalezu MBAM sloucit, oboji se totiz dokonci restartem pc.

Jestli neco nebude jasne, saci se zeptat, zkusim to vysvetlit podrobneji

[Tanea]

A ještě mě tak napadlo... Nemůžete z toho co jsem vám poslala vyčíst nějaké soukromé informace?

[Márty84]

Jako jake napriklad? Muzu zjistit jake programy mate v pc a pripadne jak mate pojmenovane soubory (treba obrazky a dokumenty). Ale krom nazvu nevim nic, obsah mi to neukaze. Kazdopadne pokud chcete pc odvirovat, jina moznost neni A logy tu dava kazdy, takze kdyby to pro uzivatele bylo nejak neprijemne, tezko by sem chodili pravidelne



26.3. pro neaktivitu http://forum.viry.cz/viewtopic.php?f=12&t=123975