Zmizla ikona internetu , totálne zavírované poprosím pomoc

Zpráva

Juraj1973 · #1 Příspěvek od **Juraj1973** » 04 pro 2014 21:23

Pozdravujem Vás po krátkom čase... ale pred tým som mal väčši pauzu, no aj teraz by som Vás nežiadal o pomoc, keby sa nejednalo o dobrú priateľku, ktorá ma pôvodne oslovila len aby som sa pozrel na jej počítač , či si má kúpiť nový, lebo jej na ňom už nič nie je.. najprv som je stiahol nod.. a ani neviem kolko toho našlo.. potom som adwclearom niečo potom mbamom link nižšie (ak sa mám ísť podľa návodu tu a mám ísť najprv podľa FRST .odpravedlňujem sa a usmernite ma) Ďakujem za Váš čas a ochotu

Malwarebytes Anti-Malware 1.75.0.1300
www.malwarebytes.org

Verzia databázy: v2014.12.04.07

Windows XP Service Pack 3 x86 NTFS
Internet Explorer 6.0.2900.5512
Admin :: FUJITSUSIEMENS [administrátor]

4.12.2014 19:33:32
mbam-log-2014-12-04 (19-33-32).txt

Typ kontroly: Úplná kontrola (C:\|)
Možnosti kontroly zapnuté: Pamäť | Po spustení | Registre | Systémové súbory | Heuristika/Extra | Heuristika/Shuriken | PUP | PUM
Možnosti kontroly vypnuté: P2P
Objektov kontrolovaných: 631805
Uplynutý čas: 1 hod, 11 min, 45 sek

Detegované služby pamäte: 0
(Škodlivé položky neboli zistené)

Detegované moduly pamäte: 0
(Škodlivé položky neboli zistené)

Detegované registračné kľúče: 8
HKCR\CLSID\{038cb5c7-48ea-4af9-94e0-a1646542e62b} (PUP.Optional.ClientConnect) -> Bude odstránený po reštartovaní.
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{038CB5C7-48EA-4AF9-94E0-A1646542E62B} (PUP.Optional.ClientConnect) -> Pridanie do karantény a zmazanie úspešné.
HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{038CB5C7-48EA-4AF9-94E0-A1646542E62B} (PUP.Optional.ClientConnect) -> Pridanie do karantény a zmazanie úspešné.
HKCR\iMeshIEHelper.DNSGuard (PUP.Optional.iMeshMusicBoxTB.A) -> Pridanie do karantény a zmazanie úspešné.
HKCR\iMeshIEHelper.DNSGuard.1 (PUP.Optional.iMeshMusicBoxTB.A) -> Pridanie do karantény a zmazanie úspešné.
HKLM\SOFTWARE\Google\Chrome\Extensions\aaaaabcbmongicmdegkmmfgdickgnnob (PUP.Optional.MoviesToolBar.A) -> Pridanie do karantény a zmazanie úspešné.
HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\${dtUserElevationPolicyID} (PUP.Optional.DataMangr.A) -> Pridanie do karantény a zmazanie úspešné.
HKLM\System\CurrentControlSet\Services\MaintainerSvc2.83.1635684 (PUP.Optional.MaintainerSvc.A) -> Pridanie do karantény a zmazanie úspešné.

Detegované registračné hodnoty: 2
HKCU\SOFTWARE\Microsoft\Internet Explorer\Toolbar\WebBrowser|{038CB5C7-48EA-4AF9-94E0-A1646542E62B} (PUP.Optional.ClientConnect) -> Dáta: ÇµŚęHůJ”ŕˇdeBć+ -> Pridanie do karantény a zmazanie úspešné.
HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar|{038CB5C7-48EA-4AF9-94E0-A1646542E62B} (PUP.Optional.ClientConnect) -> Dáta: ToggleEN Toolbar -> Pridanie do karantény a zmazanie úspešné.

Detegované položky registračných dát: 0
(Škodlivé položky neboli zistené)

Detegované priečinky: 43
C:\Documents and Settings\Mimi\Application Data\PriceGong (PUP.Optional.PriceGong.A) -> Pridanie do karantény a zmazanie úspešné.
C:\Documents and Settings\Mimi\Application Data\PriceGong\Data (PUP.Optional.PriceGong.A) -> Pridanie do karantény a zmazanie úspešné.
C:\Documents and Settings\Mimi_2\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\okbdcdmpkkncigegdkhhhamjblgjbfja (PUP.Optional.SerialTrunc.A) -> Pridanie do karantény a zmazanie úspešné.
C:\Documents and Settings\Mimi_2\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\okbdcdmpkkncigegdkhhhamjblgjbfja\1.0.1_0 (PUP.Optional.SerialTrunc.A) -> Pridanie do karantény a zmazanie úspešné.
C:\Documents and Settings\Admin\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\aaaaabcbmongicmdegkmmfgdickgnnob (PUP.Optional.MoviesToolBar.A) -> Pridanie do karantény a zmazanie úspešné.
C:\Documents and Settings\Admin\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\aaaaabcbmongicmdegkmmfgdickgnnob\35.4_0 (PUP.Optional.MoviesToolBar.A) -> Pridanie do karantény a zmazanie úspešné.
C:\Documents and Settings\Admin\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\aaaaabcbmongicmdegkmmfgdickgnnob\35.4_0\common (PUP.Optional.MoviesToolBar.A) -> Pridanie do karantény a zmazanie úspešné.
C:\Documents and Settings\Admin\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\aaaaabcbmongicmdegkmmfgdickgnnob\35.4_0\config (PUP.Optional.MoviesToolBar.A) -> Pridanie do karantény a zmazanie úspešné.
C:\Documents and Settings\Admin\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\aaaaabcbmongicmdegkmmfgdickgnnob\35.4_0\config\skin (PUP.Optional.MoviesToolBar.A) -> Pridanie do karantény a zmazanie úspešné.
C:\Documents and Settings\Admin\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\aaaaabcbmongicmdegkmmfgdickgnnob\35.4_0\config\skin\images (PUP.Optional.MoviesToolBar.A) -> Pridanie do karantény a zmazanie úspešné.
C:\Documents and Settings\Admin\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\aaaaabcbmongicmdegkmmfgdickgnnob\35.4_0\config\skin\images\logo (PUP.Optional.MoviesToolBar.A) -> Pridanie do karantény a zmazanie úspešné.
C:\Documents and Settings\Admin\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\aaaaabcbmongicmdegkmmfgdickgnnob\35.4_0\dropdown (PUP.Optional.MoviesToolBar.A) -> Pridanie do karantény a zmazanie úspešné.
C:\Documents and Settings\Admin\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\aaaaabcbmongicmdegkmmfgdickgnnob\35.4_0\dropdown\common (PUP.Optional.MoviesToolBar.A) -> Pridanie do karantény a zmazanie úspešné.
C:\Documents and Settings\Admin\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\aaaaabcbmongicmdegkmmfgdickgnnob\35.4_0\dropdown\css (PUP.Optional.MoviesToolBar.A) -> Pridanie do karantény a zmazanie úspešné.
C:\Documents and Settings\Admin\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\aaaaabcbmongicmdegkmmfgdickgnnob\35.4_0\dropdown\images (PUP.Optional.MoviesToolBar.A) -> Pridanie do karantény a zmazanie úspešné.
C:\Documents and Settings\Admin\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\aaaaabcbmongicmdegkmmfgdickgnnob\35.4_0\dropdown\js (PUP.Optional.MoviesToolBar.A) -> Pridanie do karantény a zmazanie úspešné.
C:\Documents and Settings\Admin\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\aaaaabcbmongicmdegkmmfgdickgnnob\35.4_0\_metadata (PUP.Optional.MoviesToolBar.A) -> Pridanie do karantény a zmazanie úspešné.
C:\Documents and Settings\Emmka\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\aaaaabcbmongicmdegkmmfgdickgnnob (PUP.Optional.MoviesToolBar.A) -> Pridanie do karantény a zmazanie úspešné.
C:\Documents and Settings\Emmka\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\aaaaabcbmongicmdegkmmfgdickgnnob\35.4_0 (PUP.Optional.MoviesToolBar.A) -> Pridanie do karantény a zmazanie úspešné.
C:\Documents and Settings\Emmka\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\aaaaabcbmongicmdegkmmfgdickgnnob\35.4_0\common (PUP.Optional.MoviesToolBar.A) -> Pridanie do karantény a zmazanie úspešné.
C:\Documents and Settings\Emmka\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\aaaaabcbmongicmdegkmmfgdickgnnob\35.4_0\config (PUP.Optional.MoviesToolBar.A) -> Pridanie do karantény a zmazanie úspešné.
C:\Documents and Settings\Emmka\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\aaaaabcbmongicmdegkmmfgdickgnnob\35.4_0\config\skin (PUP.Optional.MoviesToolBar.A) -> Pridanie do karantény a zmazanie úspešné.
C:\Documents and Settings\Emmka\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\aaaaabcbmongicmdegkmmfgdickgnnob\35.4_0\config\skin\images (PUP.Optional.MoviesToolBar.A) -> Pridanie do karantény a zmazanie úspešné.
C:\Documents and Settings\Emmka\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\aaaaabcbmongicmdegkmmfgdickgnnob\35.4_0\config\skin\images\logo (PUP.Optional.MoviesToolBar.A) -> Pridanie do karantény a zmazanie úspešné.
C:\Documents and Settings\Emmka\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\aaaaabcbmongicmdegkmmfgdickgnnob\35.4_0\dropdown (PUP.Optional.MoviesToolBar.A) -> Pridanie do karantény a zmazanie úspešné.
C:\Documents and Settings\Emmka\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\aaaaabcbmongicmdegkmmfgdickgnnob\35.4_0\dropdown\common (PUP.Optional.MoviesToolBar.A) -> Pridanie do karantény a zmazanie úspešné.
C:\Documents and Settings\Emmka\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\aaaaabcbmongicmdegkmmfgdickgnnob\35.4_0\dropdown\css (PUP.Optional.MoviesToolBar.A) -> Pridanie do karantény a zmazanie úspešné.
C:\Documents and Settings\Emmka\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\aaaaabcbmongicmdegkmmfgdickgnnob\35.4_0\dropdown\images (PUP.Optional.MoviesToolBar.A) -> Pridanie do karantény a zmazanie úspešné.
C:\Documents and Settings\Emmka\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\aaaaabcbmongicmdegkmmfgdickgnnob\35.4_0\dropdown\js (PUP.Optional.MoviesToolBar.A) -> Pridanie do karantény a zmazanie úspešné.
C:\Documents and Settings\Emmka\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\aaaaabcbmongicmdegkmmfgdickgnnob\35.4_0\_metadata (PUP.Optional.MoviesToolBar.A) -> Pridanie do karantény a zmazanie úspešné.
C:\Documents and Settings\Mimi_2\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\aaaaabcbmongicmdegkmmfgdickgnnob (PUP.Optional.MoviesToolBar.A) -> Pridanie do karantény a zmazanie úspešné.
C:\Documents and Settings\Mimi_2\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\aaaaabcbmongicmdegkmmfgdickgnnob\35.4_0 (PUP.Optional.MoviesToolBar.A) -> Pridanie do karantény a zmazanie úspešné.
C:\Documents and Settings\Mimi_2\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\aaaaabcbmongicmdegkmmfgdickgnnob\35.4_0\common (PUP.Optional.MoviesToolBar.A) -> Pridanie do karantény a zmazanie úspešné.
C:\Documents and Settings\Mimi_2\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\aaaaabcbmongicmdegkmmfgdickgnnob\35.4_0\config (PUP.Optional.MoviesToolBar.A) -> Pridanie do karantény a zmazanie úspešné.
C:\Documents and Settings\Mimi_2\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\aaaaabcbmongicmdegkmmfgdickgnnob\35.4_0\config\skin (PUP.Optional.MoviesToolBar.A) -> Pridanie do karantény a zmazanie úspešné.
C:\Documents and Settings\Mimi_2\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\aaaaabcbmongicmdegkmmfgdickgnnob\35.4_0\config\skin\images (PUP.Optional.MoviesToolBar.A) -> Pridanie do karantény a zmazanie úspešné.
C:\Documents and Settings\Mimi_2\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\aaaaabcbmongicmdegkmmfgdickgnnob\35.4_0\config\skin\images\logo (PUP.Optional.MoviesToolBar.A) -> Pridanie do karantény a zmazanie úspešné.
C:\Documents and Settings\Mimi_2\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\aaaaabcbmongicmdegkmmfgdickgnnob\35.4_0\dropdown (PUP.Optional.MoviesToolBar.A) -> Pridanie do karantény a zmazanie úspešné.
C:\Documents and Settings\Mimi_2\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\aaaaabcbmongicmdegkmmfgdickgnnob\35.4_0\dropdown\common (PUP.Optional.MoviesToolBar.A) -> Pridanie do karantény a zmazanie úspešné.
C:\Documents and Settings\Mimi_2\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\aaaaabcbmongicmdegkmmfgdickgnnob\35.4_0\dropdown\css (PUP.Optional.MoviesToolBar.A) -> Pridanie do karantény a zmazanie úspešné.
C:\Documents and Settings\Mimi_2\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\aaaaabcbmongicmdegkmmfgdickgnnob\35.4_0\dropdown\images (PUP.Optional.MoviesToolBar.A) -> Pridanie do karantény a zmazanie úspešné.
C:\Documents and Settings\Mimi_2\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\aaaaabcbmongicmdegkmmfgdickgnnob\35.4_0\dropdown\js (PUP.Optional.MoviesToolBar.A) -> Pridanie do karantény a zmazanie úspešné.
C:\Documents and Settings\Mimi_2\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\aaaaabcbmongicmdegkmmfgdickgnnob\35.4_0\_metadata (PUP.Optional.MoviesToolBar.A) -> Pridanie do karantény a zmazanie úspešné.

Detegované súbory: 288
C:\Documents and Settings\Admin\Local Settings\Application Data\ToggleEN\prxtbTog2.dll (PUP.Optional.ClientConnect) -> Pridanie do karantény a zmazanie úspešné.
C:\RECYCLER\S-1-5-21-839522115-1214440339-682003330-1008\Dc102.exe (PUP.Optional.YourFileDownloader) -> Pridanie do karantény a zmazanie úspešné.
C:\RECYCLER\S-1-5-21-839522115-1214440339-682003330-1008\Dc96.exe (PUP.Optional.Bandoo) -> Pridanie do karantény a zmazanie úspešné.
C:\WINDOWS\Temp\b45e4455\SetupDataMngr_iLivid.exe (PUP.Optional.Ilivid) -> Pridanie do karantény a zmazanie úspešné.
C:\AdwCleaner\Quarantine\C\Documents and Settings\Admin\Application Data\pay-by-ads\Yahoo! Search\1.3.12.4\dsrlte.exe.vir (PUP.Optional.PayByAds.A) -> Pridanie do karantény a zmazanie úspešné.
C:\AdwCleaner\Quarantine\C\Documents and Settings\Admin\Application Data\pay-by-ads\Yahoo! Search\1.3.12.4\dsrsetup.exe.vir (PUP.Optional.PayByAds.A) -> Pridanie do karantény a zmazanie úspešné.
C:\AdwCleaner\Quarantine\C\Documents and Settings\Admin\Application Data\pay-by-ads\Yahoo! Search\1.3.12.4\res.dll.vir (PUP.Optional.PayByAds.A) -> Pridanie do karantény a zmazanie úspešné.
C:\AdwCleaner\Quarantine\C\Documents and Settings\Admin\Application Data\pay-by-ads\Yahoo! Search\1.3.15.4\dsrsetup.exe.vir (PUP.Optional.PayByAds.A) -> Pridanie do karantény a zmazanie úspešné.
C:\AdwCleaner\Quarantine\C\Documents and Settings\Admin\Application Data\pay-by-ads\Yahoo! Search\1.3.15.4\res.dll.vir (PUP.Optional.PayByAds.A) -> Pridanie do karantény a zmazanie úspešné.
C:\AdwCleaner\Quarantine\C\Documents and Settings\Admin\Local Settings\Application Data\Conduit\Community Alerts\Alert.dll.vir (PUP.Optional.ClientConnect) -> Pridanie do karantény a zmazanie úspešné.
C:\AdwCleaner\Quarantine\C\Documents and Settings\Admin\Local Settings\Application Data\Conduit\CT2077543\ToggleENAutoUpdaterHelper.exe.vir (PUP.Optional.ClientConnect) -> Pridanie do karantény a zmazanie úspešné.
C:\AdwCleaner\Quarantine\C\Documents and Settings\Emmka\Application Data\pay-by-ads\Yahoo! Search\1.3.15.4\dsrlte.exe.vir (PUP.Optional.PayByAds.A) -> Pridanie do karantény a zmazanie úspešné.
C:\AdwCleaner\Quarantine\C\Documents and Settings\Emmka\Application Data\pay-by-ads\Yahoo! Search\1.3.8.2\dsrlte.exe.vir (PUP.Optional.PayByAds.A) -> Pridanie do karantény a zmazanie úspešné.
C:\AdwCleaner\Quarantine\C\Documents and Settings\Guest\AppData\LocalLow\bbrs_002.tb\content\BCHelper.exe.vir (PUP.Optional.Blabbers) -> Pridanie do karantény a zmazanie úspešné.
C:\AdwCleaner\Quarantine\C\Documents and Settings\Mimi_2\Application Data\pay-by-ads\Yahoo! Search\1.3.12.4\dsrlte.exe.vir (PUP.Optional.PayByAds.A) -> Pridanie do karantény a zmazanie úspešné.
C:\AdwCleaner\Quarantine\C\Documents and Settings\Mimi_2\Application Data\pay-by-ads\Yahoo! Search\1.3.12.4\dsrsetup.exe.vir (PUP.Optional.PayByAds.A) -> Pridanie do karantény a zmazanie úspešné.
C:\AdwCleaner\Quarantine\C\Documents and Settings\Mimi_2\Application Data\pay-by-ads\Yahoo! Search\1.3.12.4\res.dll.vir (PUP.Optional.PayByAds.A) -> Pridanie do karantény a zmazanie úspešné.
C:\AdwCleaner\Quarantine\C\Program Files\Conduit\Community Alerts\Alert0.dll.vir (PUP.Optional.Conduit) -> Pridanie do karantény a zmazanie úspešné.
C:\AdwCleaner\Quarantine\C\Program Files\FunWebProducts\Installr\1.bin\F3EZSETP.DLL.vir (PUP.Optional.FunWebProducts.A) -> Pridanie do karantény a zmazanie úspešné.
C:\AdwCleaner\Quarantine\C\Program Files\FunWebProducts\Installr\2.bin\F3EZSETP.DLL.vir (PUP.Optional.FunWebProducts.A) -> Pridanie do karantény a zmazanie úspešné.
C:\AdwCleaner\Quarantine\C\Program Files\Movies Toolbar\Datamngr\Uninstall.exe.vir (PUP.Optional.Ilivid) -> Pridanie do karantény a zmazanie úspešné.
C:\AdwCleaner\Quarantine\C\Program Files\Movies Toolbar\Datamngr\SRTOOL~1\GC\uninstall.exe.vir (PUP.Optional.MoviesToolBar.A) -> Pridanie do karantény a zmazanie úspešné.
C:\AdwCleaner\Quarantine\C\Program Files\Movies Toolbar\Datamngr\SRTOOL~1\IE\uninstall.exe.vir (PUP.Optional.MoviesToolBar.A) -> Pridanie do karantény a zmazanie úspešné.
C:\AdwCleaner\Quarantine\C\Program Files\SerialTrunc\bin\SerialTrunc.OfSvc.exe.PendingOverwrite.vir (PUP.Optional.PayByAds.A) -> Pridanie do karantény a zmazanie úspešné.
C:\AdwCleaner\Quarantine\C\Program Files\SerialTrunc\bin\SerialTrunc.OfSvc.exe.tmp.vir (PUP.Optional.PayByAds.A) -> Pridanie do karantény a zmazanie úspešné.
C:\AdwCleaner\Quarantine\C\Program Files\SerialTrunc\bin\SerialTrunc.OfSvc.exe.vir (PUP.Optional.PayByAds.A) -> Pridanie do karantény a zmazanie úspešné.
C:\AdwCleaner\Quarantine\C\Program Files\SerialTrunc\bin\tmpDA.tmp.vir (PUP.Optional.SerialTrunc.A) -> Pridanie do karantény a zmazanie úspešné.
C:\AdwCleaner\Quarantine\C\Program Files\SerialTrunc\bin\{47351c22-0d6c-4658-a617-795d251145e2}.dll.vir (Adware.SwiftBrowse) -> Pridanie do karantény a zmazanie úspešné.
C:\AdwCleaner\Quarantine\C\Program Files\SerialTrunc\bin\{c1a40b4d-8d65-4ccf-92ca-4fa87c334bf3}.dll.vir (Adware.SwiftBrowse) -> Pridanie do karantény a zmazanie úspešné.
C:\AdwCleaner\Quarantine\C\Program Files\SerialTrunc\bin\plugins\SerialTrunc.Bromon.dll.vir (PUP.Optional.Sanbreel.A) -> Pridanie do karantény a zmazanie úspešné.
C:\AdwCleaner\Quarantine\C\Program Files\SerialTrunc\bin\plugins\SerialTrunc.BroStats.dll.vir (PUP.Optional.Sanbreel.A) -> Pridanie do karantény a zmazanie úspešné.
C:\AdwCleaner\Quarantine\C\Program Files\SerialTrunc\bin\plugins\SerialTrunc.CompatibilityChecker.dll.vir (PUP.Optional.Sanbreel.A) -> Pridanie do karantény a zmazanie úspešné.
C:\AdwCleaner\Quarantine\C\Program Files\SerialTrunc\bin\plugins\SerialTrunc.OfSvc.dll.vir (PUP.Optional.Sanbreel.A) -> Pridanie do karantény a zmazanie úspešné.
C:\Documents and Settings\Admin\Local Settings\Application Data\BrotherSoft_Extreme\tbBro1.dll (PUP.Optional.ClientConnect) -> Pridanie do karantény a zmazanie úspešné.
C:\Documents and Settings\Admin\Local Settings\Application Data\ToggleEN\hk64tbTog2.dll (PUP.Optional.ClientConnect) -> Pridanie do karantény a zmazanie úspešné.
C:\Documents and Settings\Admin\Local Settings\Application Data\ToggleEN\hktbTog2.dll (PUP.Optional.ClientConnect) -> Pridanie do karantény a zmazanie úspešné.
C:\Documents and Settings\Admin\Local Settings\Application Data\ToggleEN\ldrtbTog2.dll (PUP.Optional.ClientConnect) -> Pridanie do karantény a zmazanie úspešné.
C:\Documents and Settings\Admin\Local Settings\Application Data\ToggleEN\tbTog1.dll (PUP.Optional.ClientConnect) -> Pridanie do karantény a zmazanie úspešné.
C:\Documents and Settings\Admin\Local Settings\Application Data\ToggleEN\tbTog2.dll (PUP.Optional.ClientConnect) -> Pridanie do karantény a zmazanie úspešné.
C:\Documents and Settings\Admin\Local Settings\Temp\SQLite.dll (PUP.Optional.SweetIM) -> Pridanie do karantény a zmazanie úspešné.
C:\Documents and Settings\Admin\Local Settings\Temporary Internet Files\Content.IE5\N8P0BDH0\tbedrs[1].dll (PUP.Optional.ClientConnect) -> Pridanie do karantény a zmazanie úspešné.
C:\Documents and Settings\Emmka\Local Settings\Application Data\BrotherSoft_Extreme\tbBro1.dll (PUP.Optional.ClientConnect) -> Pridanie do karantény a zmazanie úspešné.
C:\Documents and Settings\Guest\Application Data\110.exe (Worm.Dorkbot) -> Pridanie do karantény a zmazanie úspešné.
C:\Documents and Settings\Guest\Application Data\118.exe (Worm.Dorkbot) -> Pridanie do karantény a zmazanie úspešné.
C:\Documents and Settings\Guest\Application Data\128E.exe (Worm.Dorkbot) -> Pridanie do karantény a zmazanie úspešné.
C:\Documents and Settings\Guest\Application Data\13F3.exe (PUP.BitCoinMiner) -> Pridanie do karantény a zmazanie úspešné.
C:\Documents and Settings\Guest\Application Data\14.exe (Worm.Dorkbot) -> Pridanie do karantény a zmazanie úspešné.
C:\Documents and Settings\Guest\Application Data\154E.exe (PUP.HiddenStart.H) -> Pridanie do karantény a zmazanie úspešné.
C:\Documents and Settings\Guest\Application Data\16A.exe (Worm.Dorkbot) -> Pridanie do karantény a zmazanie úspešné.
C:\Documents and Settings\Guest\Application Data\16C.exe (Worm.Dorkbot) -> Pridanie do karantény a zmazanie úspešné.
C:\Documents and Settings\Guest\Application Data\17A6.exe (PUP.HiddenStart.H) -> Pridanie do karantény a zmazanie úspešné.
C:\Documents and Settings\Guest\Application Data\195.exe (Worm.Dorkbot) -> Pridanie do karantény a zmazanie úspešné.
C:\Documents and Settings\Guest\Application Data\1A3.exe (PUP.BitCoinMiner) -> Pridanie do karantény a zmazanie úspešné.
C:\Documents and Settings\Guest\Application Data\1A5.exe (PUP.BitCoinMiner) -> Pridanie do karantény a zmazanie úspešné.
C:\Documents and Settings\Guest\Application Data\1F0.exe (Worm.Dorkbot) -> Pridanie do karantény a zmazanie úspešné.
C:\Documents and Settings\Guest\Application Data\223.exe (PUP.BitCoinMiner) -> Pridanie do karantény a zmazanie úspešné.
C:\Documents and Settings\Guest\Application Data\23.exe (PUP.BitCoinMiner) -> Pridanie do karantény a zmazanie úspešné.
C:\Documents and Settings\Guest\Application Data\27A.exe (Worm.Dorkbot) -> Pridanie do karantény a zmazanie úspešné.
C:\Documents and Settings\Guest\Application Data\27B.exe (Worm.Dorkbot) -> Pridanie do karantény a zmazanie úspešné.
C:\Documents and Settings\Guest\Application Data\2C63.exe (PUP.HiddenStart.H) -> Pridanie do karantény a zmazanie úspešné.
C:\Documents and Settings\Guest\Application Data\2CA.exe (PUP.BitCoinMiner) -> Pridanie do karantény a zmazanie úspešné.
C:\Documents and Settings\Guest\Application Data\304.exe (Worm.Dorkbot) -> Pridanie do karantény a zmazanie úspešné.
C:\Documents and Settings\Guest\Application Data\31.exe (PUP.BitCoinMiner) -> Pridanie do karantény a zmazanie úspešné.
C:\Documents and Settings\Guest\Application Data\35F.exe (Worm.Dorkbot) -> Pridanie do karantény a zmazanie úspešné.
C:\Documents and Settings\Guest\Application Data\36.exe (Worm.Dorkbot) -> Pridanie do karantény a zmazanie úspešné.
C:\Documents and Settings\Guest\Application Data\36E.exe (Worm.Dorkbot) -> Pridanie do karantény a zmazanie úspešné.
C:\Documents and Settings\Guest\Application Data\384.exe (Worm.Dorkbot) -> Pridanie do karantény a zmazanie úspešné.
C:\Documents and Settings\Guest\Application Data\394.exe (Worm.Dorkbot) -> Pridanie do karantény a zmazanie úspešné.
C:\Documents and Settings\Guest\Application Data\3C.exe (Worm.Dorkbot) -> Pridanie do karantény a zmazanie úspešné.
C:\Documents and Settings\Guest\Application Data\3D.exe (PUP.BitCoinMiner) -> Pridanie do karantény a zmazanie úspešné.
C:\Documents and Settings\Guest\Application Data\40.exe (PUP.HiddenStart.H) -> Pridanie do karantény a zmazanie úspešné.
C:\Documents and Settings\Guest\Application Data\41.exe (PUP.HiddenStart.H) -> Pridanie do karantény a zmazanie úspešné.
C:\Documents and Settings\Guest\Application Data\42.exe (PUP.BitCoinMiner) -> Pridanie do karantény a zmazanie úspešné.
C:\Documents and Settings\Guest\Application Data\440.exe (Worm.Dorkbot) -> Pridanie do karantény a zmazanie úspešné.
C:\Documents and Settings\Guest\Application Data\46DB.exe (Worm.Dorkbot) -> Pridanie do karantény a zmazanie úspešné.
C:\Documents and Settings\Guest\Application Data\4B.exe (PUP.BitCoinMiner) -> Pridanie do karantény a zmazanie úspešné.
C:\Documents and Settings\Guest\Application Data\4C.exe (PUP.HiddenStart.H) -> Pridanie do karantény a zmazanie úspešné.
C:\Documents and Settings\Guest\Application Data\4D.exe (PUP.HiddenStart.H) -> Pridanie do karantény a zmazanie úspešné.
C:\Documents and Settings\Guest\Application Data\4E8.exe (Worm.Dorkbot) -> Pridanie do karantény a zmazanie úspešné.
C:\Documents and Settings\Guest\Application Data\50.exe (PUP.BitCoinMiner) -> Pridanie do karantény a zmazanie úspešné.
C:\Documents and Settings\Guest\Application Data\530.exe (PUP.HiddenStart.H) -> Pridanie do karantény a zmazanie úspešné.
C:\Documents and Settings\Guest\Application Data\54.exe (Worm.Dorkbot) -> Pridanie do karantény a zmazanie úspešné.
C:\Documents and Settings\Guest\Application Data\56D.exe (Worm.Dorkbot) -> Pridanie do karantény a zmazanie úspešné.
C:\Documents and Settings\Guest\Application Data\5A7.exe (PUP.BitCoinMiner) -> Pridanie do karantény a zmazanie úspešné.
C:\Documents and Settings\Guest\Application Data\5AC.exe (PUP.BitCoinMiner) -> Pridanie do karantény a zmazanie úspešné.
C:\Documents and Settings\Guest\Application Data\6.exe (PUP.HiddenStart.H) -> Pridanie do karantény a zmazanie úspešné.
C:\Documents and Settings\Guest\Application Data\61.exe (PUP.HiddenStart.H) -> Pridanie do karantény a zmazanie úspešné.
C:\Documents and Settings\Guest\Application Data\62.exe (Worm.Dorkbot) -> Pridanie do karantény a zmazanie úspešné.
C:\Documents and Settings\Guest\Application Data\68E.exe (Worm.Dorkbot) -> Pridanie do karantény a zmazanie úspešné.
C:\Documents and Settings\Guest\Application Data\6F.exe (Worm.Dorkbot) -> Pridanie do karantény a zmazanie úspešné.
C:\Documents and Settings\Guest\Application Data\7184.exe (PUP.HiddenStart.H) -> Pridanie do karantény a zmazanie úspešné.
C:\Documents and Settings\Guest\Application Data\72.exe (PUP.BitCoinMiner) -> Pridanie do karantény a zmazanie úspešné.
C:\Documents and Settings\Guest\Application Data\722.exe (PUP.BitCoinMiner) -> Pridanie do karantény a zmazanie úspešné.
C:\Documents and Settings\Guest\Application Data\73.exe (PUP.HiddenStart.H) -> Pridanie do karantény a zmazanie úspešné.
C:\Documents and Settings\Guest\Application Data\76.exe (PUP.BitCoinMiner) -> Pridanie do karantény a zmazanie úspešné.
C:\Documents and Settings\Guest\Application Data\7D.exe (PUP.HiddenStart.H) -> Pridanie do karantény a zmazanie úspešné.
C:\Documents and Settings\Guest\Application Data\7E.exe (PUP.HiddenStart.H) -> Pridanie do karantény a zmazanie úspešné.
C:\Documents and Settings\Guest\Application Data\81.exe (PUP.BitCoinMiner) -> Pridanie do karantény a zmazanie úspešné.
C:\Documents and Settings\Guest\Application Data\8B.exe (Worm.Dorkbot) -> Pridanie do karantény a zmazanie úspešné.
C:\Documents and Settings\Guest\Application Data\93.exe (Worm.Dorkbot) -> Pridanie do karantény a zmazanie úspešné.
C:\Documents and Settings\Guest\Application Data\938.exe (Worm.Dorkbot) -> Pridanie do karantény a zmazanie úspešné.
C:\Documents and Settings\Guest\Application Data\98.exe (Worm.Dorkbot) -> Pridanie do karantény a zmazanie úspešné.
C:\Documents and Settings\Guest\Application Data\9A0.exe (PUP.BitCoinMiner) -> Pridanie do karantény a zmazanie úspešné.
C:\Documents and Settings\Guest\Application Data\9E.exe (PUP.BitCoinMiner) -> Pridanie do karantény a zmazanie úspešné.
C:\Documents and Settings\Guest\Application Data\AC.exe (PUP.BitCoinMiner) -> Pridanie do karantény a zmazanie úspešné.
C:\Documents and Settings\Guest\Application Data\B2.exe (PUP.HiddenStart.H) -> Pridanie do karantény a zmazanie úspešné.
C:\Documents and Settings\Guest\Application Data\D5.exe (Worm.Dorkbot) -> Pridanie do karantény a zmazanie úspešné.
C:\Documents and Settings\Guest\Application Data\DC5.exe (Worm.Dorkbot) -> Pridanie do karantény a zmazanie úspešné.
C:\Documents and Settings\Guest\Application Data\E5.exe (PUP.BitCoinMiner) -> Pridanie do karantény a zmazanie úspešné.
C:\Documents and Settings\Guest\Application Data\FD.exe (Worm.Dorkbot) -> Pridanie do karantény a zmazanie úspešné.
C:\Documents and Settings\Guest\Local Settings\Temp\hid.exe (PUP.HideStart) -> Pridanie do karantény a zmazanie úspešné.
C:\Documents and Settings\Guest\Local Settings\Temp\SQLite.dll (PUP.Optional.SweetIM) -> Pridanie do karantény a zmazanie úspešné.
C:\Documents and Settings\Guest\Local Settings\Temp\Winlogo.exe (Trojan.BCMiner) -> Pridanie do karantény a zmazanie úspešné.
C:\Documents and Settings\Guest\Local Settings\Temp\Winlogo2.exe (Trojan.BCMiner) -> Pridanie do karantény a zmazanie úspešné.
C:\Documents and Settings\Guest\Local Settings\Temp\x30811.exe (PUP.BitMiner) -> Pridanie do karantény a zmazanie úspešné.
C:\Documents and Settings\Guest\Start Menu\Programs\Startup\xD.exe (PUP.HiddenStart.H) -> Pridanie do karantény a zmazanie úspešné.
C:\Documents and Settings\Mimi_2\Local Settings\Application Data\BrotherSoft_Extreme\tbBro1.dll (PUP.Optional.ClientConnect) -> Pridanie do karantény a zmazanie úspešné.
C:\Documents and Settings\Mimi_2\Local Settings\Temp\nsqE8D\Uninstall.exe (PUP.Optional.Ilivid) -> Pridanie do karantény a zmazanie úspešné.
C:\Documents and Settings\Mimi_2\Local Settings\Temp\nsqE8D\nsdEA6.tmp\nsbEB1.exe (PUP.Optional.Ilivid) -> Pridanie do karantény a zmazanie úspešné.
C:\Documents and Settings\Mimi_2\Local Settings\Temp\nsxEB5\nsqEBE.tmp\iLividMediaBar.exe (PUP.Optional.MoviesToolBar.A) -> Pridanie do karantény a zmazanie úspešné.
C:\Documents and Settings\Mimi_2\Local Settings\Temp\nsxEB5\nsqEBE.tmp\mediabar.exe (PUP.Optional.MoviesToolBar.A) -> Pridanie do karantény a zmazanie úspešné.
C:\Program Files\Mozilla Firefox\searchplugins\SearchquWebSearch.xml (PUP.Optional.SearchQu.A) -> Pridanie do karantény a zmazanie úspešné.
C:\Program Files\Mozilla Firefox\searchplugins\iMeshWebSearch.xml (PUP.Optional.ImeshWebSearch.A) -> Pridanie do karantény a zmazanie úspešné.
C:\Documents and Settings\Guest\Local Settings\Temp\blabbers-ff-le.xpi (PUP.Blabbers) -> Pridanie do karantény a zmazanie úspešné.
C:\Documents and Settings\Guest\Application Data\23.exe (Trojan.Agent) -> Pridanie do karantény a zmazanie úspešné.
C:\Documents and Settings\Guest\Application Data\31.exe (Trojan.Agent) -> Pridanie do karantény a zmazanie úspešné.
C:\Documents and Settings\Guest\Application Data\3D.exe (Trojan.Agent) -> Pridanie do karantény a zmazanie úspešné.
C:\Documents and Settings\Guest\Application Data\40.exe (Trojan.Agent) -> Pridanie do karantény a zmazanie úspešné.
C:\Documents and Settings\Guest\Application Data\41.exe (Trojan.Agent) -> Pridanie do karantény a zmazanie úspešné.
C:\Documents and Settings\Guest\Application Data\42.exe (Trojan.Agent) -> Pridanie do karantény a zmazanie úspešné.
C:\Documents and Settings\Guest\Application Data\4B.exe (Trojan.Agent) -> Pridanie do karantény a zmazanie úspešné.
C:\Documents and Settings\Guest\Application Data\4C.exe (Trojan.Agent) -> Pridanie do karantény a zmazanie úspešné.
C:\Documents and Settings\Guest\Application Data\4D.exe (Trojan.Agent) -> Pridanie do karantény a zmazanie úspešné.
C:\Documents and Settings\Guest\Application Data\50.exe (Trojan.Agent) -> Pridanie do karantény a zmazanie úspešné.
C:\Documents and Settings\Guest\Application Data\61.exe (Trojan.Agent) -> Pridanie do karantény a zmazanie úspešné.
C:\Documents and Settings\Guest\Application Data\72.exe (Trojan.Agent) -> Pridanie do karantény a zmazanie úspešné.
C:\Documents and Settings\Guest\Application Data\73.exe (Trojan.Agent) -> Pridanie do karantény a zmazanie úspešné.
C:\Documents and Settings\Guest\Application Data\76.exe (Trojan.Agent) -> Pridanie do karantény a zmazanie úspešné.
C:\Documents and Settings\Guest\Application Data\7D.exe (Trojan.Agent) -> Pridanie do karantény a zmazanie úspešné.
C:\Documents and Settings\Guest\Application Data\7E.exe (Trojan.Agent) -> Pridanie do karantény a zmazanie úspešné.
C:\Documents and Settings\Guest\Application Data\81.exe (Trojan.Agent) -> Pridanie do karantény a zmazanie úspešné.
C:\Documents and Settings\Guest\Application Data\9E.exe (Trojan.Agent) -> Pridanie do karantény a zmazanie úspešné.
C:\Documents and Settings\Guest\Start Menu\Programs\Startup\xD.exe (Trojan.Agent) -> Pridanie do karantény a zmazanie úspešné.
C:\Documents and Settings\Guest\Application Data\6.exe (Trojan.Downloader) -> Pridanie do karantény a zmazanie úspešné.
C:\Documents and Settings\Guest\Application Data\63.exe (Trojan.Banker) -> Pridanie do karantény a zmazanie úspešné.
C:\Documents and Settings\Guest\Application Data\6D.exe (Trojan.Banker) -> Pridanie do karantény a zmazanie úspešné.
C:\Documents and Settings\Guest\Application Data\1289.exe (Trojan.Agent.Gen) -> Pridanie do karantény a zmazanie úspešné.
C:\Documents and Settings\Guest\Application Data\1670.exe (Trojan.Agent.Gen) -> Pridanie do karantény a zmazanie úspešné.
C:\Documents and Settings\Guest\Application Data\2795.exe (Trojan.Agent.Gen) -> Pridanie do karantény a zmazanie úspešné.
C:\Documents and Settings\Guest\Application Data\3977.exe (Trojan.Agent.Gen) -> Pridanie do karantény a zmazanie úspešné.
C:\Documents and Settings\Guest\Application Data\4229.exe (Trojan.Agent.Gen) -> Pridanie do karantény a zmazanie úspešné.
C:\Documents and Settings\Guest\Application Data\5091.exe (Trojan.Agent.Gen) -> Pridanie do karantény a zmazanie úspešné.
C:\Documents and Settings\Guest\Application Data\5975.exe (Trojan.Agent.Gen) -> Pridanie do karantény a zmazanie úspešné.
C:\Documents and Settings\Guest\Application Data\7184.exe (Trojan.Agent.Gen) -> Pridanie do karantény a zmazanie úspešné.
C:\Documents and Settings\Mimi\Application Data\Mozilla\Extensions\{1FD91A9C-410C-4090-BBCC-55D3450EF433} (PUP.Optional.Searchqu.A) -> Pridanie do karantény a zmazanie úspešné.
C:\Documents and Settings\Guest\Application Data\2C63.exe (Backdoor.Agent.Gen) -> Pridanie do karantény a zmazanie úspešné.
C:\Documents and Settings\Guest\Application Data\3A72.exe (Backdoor.Agent.Gen) -> Pridanie do karantény a zmazanie úspešné.
C:\Documents and Settings\Mimi\Application Data\PriceGong\Data\1.txt (PUP.Optional.PriceGong.A) -> Pridanie do karantény a zmazanie úspešné.
C:\Documents and Settings\Mimi\Application Data\PriceGong\Data\a.txt (PUP.Optional.PriceGong.A) -> Pridanie do karantény a zmazanie úspešné.
C:\Documents and Settings\Mimi\Application Data\PriceGong\Data\b.txt (PUP.Optional.PriceGong.A) -> Pridanie do karantény a zmazanie úspešné.
C:\Documents and Settings\Mimi\Application Data\PriceGong\Data\c.txt (PUP.Optional.PriceGong.A) -> Pridanie do karantény a zmazanie úspešné.
C:\Documents and Settings\Mimi\Application Data\PriceGong\Data\d.txt (PUP.Optional.PriceGong.A) -> Pridanie do karantény a zmazanie úspešné.
C:\Documents and Settings\Mimi\Application Data\PriceGong\Data\e.txt (PUP.Optional.PriceGong.A) -> Pridanie do karantény a zmazanie úspešné.
C:\Documents and Settings\Mimi\Application Data\PriceGong\Data\f.txt (PUP.Optional.PriceGong.A) -> Pridanie do karantény a zmazanie úspešné.
C:\Documents and Settings\Mimi\Application Data\PriceGong\Data\g.txt (PUP.Optional.PriceGong.A) -> Pridanie do karantény a zmazanie úspešné.
C:\Documents and Settings\Mimi\Application Data\PriceGong\Data\h.txt (PUP.Optional.PriceGong.A) -> Pridanie do karantény a zmazanie úspešné.
C:\Documents and Settings\Mimi\Application Data\PriceGong\Data\i.txt (PUP.Optional.PriceGong.A) -> Pridanie do karantény a zmazanie úspešné.
C:\Documents and Settings\Mimi\Application Data\PriceGong\Data\j.txt (PUP.Optional.PriceGong.A) -> Pridanie do karantény a zmazanie úspešné.
C:\Documents and Settings\Mimi\Application Data\PriceGong\Data\k.txt (PUP.Optional.PriceGong.A) -> Pridanie do karantény a zmazanie úspešné.
C:\Documents and Settings\Mimi\Application Data\PriceGong\Data\l.txt (PUP.Optional.PriceGong.A) -> Pridanie do karantény a zmazanie úspešné.
C:\Documents and Settings\Mimi\Application Data\PriceGong\Data\m.txt (PUP.Optional.PriceGong.A) -> Pridanie do karantény a zmazanie úspešné.
C:\Documents and Settings\Mimi\Application Data\PriceGong\Data\mru.xml (PUP.Optional.PriceGong.A) -> Pridanie do karantény a zmazanie úspešné.
C:\Documents and Settings\Mimi\Application Data\PriceGong\Data\n.txt (PUP.Optional.PriceGong.A) -> Pridanie do karantény a zmazanie úspešné.
C:\Documents and Settings\Mimi\Application Data\PriceGong\Data\o.txt (PUP.Optional.PriceGong.A) -> Pridanie do karantény a zmazanie úspešné.
C:\Documents and Settings\Mimi\Application Data\PriceGong\Data\p.txt (PUP.Optional.PriceGong.A) -> Pridanie do karantény a zmazanie úspešné.
C:\Documents and Settings\Mimi\Application Data\PriceGong\Data\q.txt (PUP.Optional.PriceGong.A) -> Pridanie do karantény a zmazanie úspešné.
C:\Documents and Settings\Mimi\Application Data\PriceGong\Data\r.txt (PUP.Optional.PriceGong.A) -> Pridanie do karantény a zmazanie úspešné.
C:\Documents and Settings\Mimi\Application Data\PriceGong\Data\s.txt (PUP.Optional.PriceGong.A) -> Pridanie do karantény a zmazanie úspešné.
C:\Documents and Settings\Mimi\Application Data\PriceGong\Data\t.txt (PUP.Optional.PriceGong.A) -> Pridanie do karantény a zmazanie úspešné.
C:\Documents and Settings\Mimi\Application Data\PriceGong\Data\u.txt (PUP.Optional.PriceGong.A) -> Pridanie do karantény a zmazanie úspešné.
C:\Documents and Settings\Mimi\Application Data\PriceGong\Data\v.txt (PUP.Optional.PriceGong.A) -> Pridanie do karantény a zmazanie úspešné.
C:\Documents and Settings\Mimi\Application Data\PriceGong\Data\w.txt (PUP.Optional.PriceGong.A) -> Pridanie do karantény a zmazanie úspešné.
C:\Documents and Settings\Mimi\Application Data\PriceGong\Data\x.txt (PUP.Optional.PriceGong.A) -> Pridanie do karantény a zmazanie úspešné.
C:\Documents and Settings\Mimi\Application Data\PriceGong\Data\y.txt (PUP.Optional.PriceGong.A) -> Pridanie do karantény a zmazanie úspešné.
C:\Documents and Settings\Mimi\Application Data\PriceGong\Data\z.txt (PUP.Optional.PriceGong.A) -> Pridanie do karantény a zmazanie úspešné.
C:\Documents and Settings\Mimi_2\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\okbdcdmpkkncigegdkhhhamjblgjbfja\1.0.1_0\background.js (PUP.Optional.SerialTrunc.A) -> Pridanie do karantény a zmazanie úspešné.
C:\Documents and Settings\Mimi_2\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\okbdcdmpkkncigegdkhhhamjblgjbfja\1.0.1_0\content.js (PUP.Optional.SerialTrunc.A) -> Pridanie do karantény a zmazanie úspešné.
C:\Documents and Settings\Mimi_2\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\okbdcdmpkkncigegdkhhhamjblgjbfja\1.0.1_0\icon.png (PUP.Optional.SerialTrunc.A) -> Pridanie do karantény a zmazanie úspešné.
C:\Documents and Settings\Mimi_2\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\okbdcdmpkkncigegdkhhhamjblgjbfja\1.0.1_0\manifest.json (PUP.Optional.SerialTrunc.A) -> Pridanie do karantény a zmazanie úspešné.
C:\Documents and Settings\Admin\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\aaaaabcbmongicmdegkmmfgdickgnnob\35.4_0\manifest.json (PUP.Optional.MoviesToolBar.A) -> Pridanie do karantény a zmazanie úspešné.
C:\Documents and Settings\Admin\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\aaaaabcbmongicmdegkmmfgdickgnnob\35.4_0\common\background.js (PUP.Optional.MoviesToolBar.A) -> Pridanie do karantény a zmazanie úspešné.
C:\Documents and Settings\Admin\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\aaaaabcbmongicmdegkmmfgdickgnnob\35.4_0\common\config.js (PUP.Optional.MoviesToolBar.A) -> Pridanie do karantény a zmazanie úspešné.
C:\Documents and Settings\Admin\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\aaaaabcbmongicmdegkmmfgdickgnnob\35.4_0\common\registry.js (PUP.Optional.MoviesToolBar.A) -> Pridanie do karantény a zmazanie úspešné.
C:\Documents and Settings\Admin\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\aaaaabcbmongicmdegkmmfgdickgnnob\35.4_0\common\reporting.js (PUP.Optional.MoviesToolBar.A) -> Pridanie do karantény a zmazanie úspešné.
C:\Documents and Settings\Admin\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\aaaaabcbmongicmdegkmmfgdickgnnob\35.4_0\common\utils.js (PUP.Optional.MoviesToolBar.A) -> Pridanie do karantény a zmazanie úspešné.
C:\Documents and Settings\Admin\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\aaaaabcbmongicmdegkmmfgdickgnnob\35.4_0\config\build.json (PUP.Optional.MoviesToolBar.A) -> Pridanie do karantény a zmazanie úspešné.
C:\Documents and Settings\Admin\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\aaaaabcbmongicmdegkmmfgdickgnnob\35.4_0\config\skin\images\logo\logo_128x.png (PUP.Optional.MoviesToolBar.A) -> Pridanie do karantény a zmazanie úspešné.
C:\Documents and Settings\Admin\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\aaaaabcbmongicmdegkmmfgdickgnnob\35.4_0\config\skin\images\logo\logo_19x.png (PUP.Optional.MoviesToolBar.A) -> Pridanie do karantény a zmazanie úspešné.
C:\Documents and Settings\Admin\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\aaaaabcbmongicmdegkmmfgdickgnnob\35.4_0\config\skin\images\logo\logo_24x.png (PUP.Optional.MoviesToolBar.A) -> Pridanie do karantény a zmazanie úspešné.
C:\Documents and Settings\Admin\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\aaaaabcbmongicmdegkmmfgdickgnnob\35.4_0\config\skin\images\logo\logo_32x.png (PUP.Optional.MoviesToolBar.A) -> Pridanie do karantény a zmazanie úspešné.
C:\Documents and Settings\Admin\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\aaaaabcbmongicmdegkmmfgdickgnnob\35.4_0\config\skin\images\logo\logo_grey_19x.png (PUP.Optional.MoviesToolBar.A) -> Pridanie do karantény a zmazanie úspešné.
C:\Documents and Settings\Admin\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\aaaaabcbmongicmdegkmmfgdickgnnob\35.4_0\config\skin\images\logo\toolbar-icons.png (PUP.Optional.MoviesToolBar.A) -> Pridanie do karantény a zmazanie úspešné.
C:\Documents and Settings\Admin\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\aaaaabcbmongicmdegkmmfgdickgnnob\35.4_0\dropdown\popup.html (PUP.Optional.MoviesToolBar.A) -> Pridanie do karantény a zmazanie úspešné.
C:\Documents and Settings\Admin\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\aaaaabcbmongicmdegkmmfgdickgnnob\35.4_0\dropdown\css\bootstrap.css (PUP.Optional.MoviesToolBar.A) -> Pridanie do karantény a zmazanie úspešné.
C:\Documents and Settings\Admin\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\aaaaabcbmongicmdegkmmfgdickgnnob\35.4_0\dropdown\css\bootstrap.css.map (PUP.Optional.MoviesToolBar.A) -> Pridanie do karantény a zmazanie úspešné.
C:\Documents and Settings\Admin\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\aaaaabcbmongicmdegkmmfgdickgnnob\35.4_0\dropdown\css\uninstallInfo.css (PUP.Optional.MoviesToolBar.A) -> Pridanie do karantény a zmazanie úspešné.
C:\Documents and Settings\Admin\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\aaaaabcbmongicmdegkmmfgdickgnnob\35.4_0\dropdown\images\ask_logo.png (PUP.Optional.MoviesToolBar.A) -> Pridanie do karantény a zmazanie úspešné.
C:\Documents and Settings\Admin\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\aaaaabcbmongicmdegkmmfgdickgnnob\35.4_0\dropdown\images\cinema.png (PUP.Optional.MoviesToolBar.A) -> Pridanie do karantény a zmazanie úspešné.
C:\Documents and Settings\Admin\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\aaaaabcbmongicmdegkmmfgdickgnnob\35.4_0\dropdown\images\comedy.png (PUP.Optional.MoviesToolBar.A) -> Pridanie do karantény a zmazanie úspešné.
C:\Documents and Settings\Admin\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\aaaaabcbmongicmdegkmmfgdickgnnob\35.4_0\dropdown\images\m.png (PUP.Optional.MoviesToolBar.A) -> Pridanie do karantény a zmazanie úspešné.
C:\Documents and Settings\Admin\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\aaaaabcbmongicmdegkmmfgdickgnnob\35.4_0\dropdown\images\magazine.png (PUP.Optional.MoviesToolBar.A) -> Pridanie do karantény a zmazanie úspešné.
C:\Documents and Settings\Admin\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\aaaaabcbmongicmdegkmmfgdickgnnob\35.4_0\dropdown\images\movies.png (PUP.Optional.MoviesToolBar.A) -> Pridanie do karantény a zmazanie úspešné.
C:\Documents and Settings\Admin\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\aaaaabcbmongicmdegkmmfgdickgnnob\35.4_0\dropdown\images\options.png (PUP.Optional.MoviesToolBar.A) -> Pridanie do karantény a zmazanie úspešné.
C:\Documents and Settings\Admin\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\aaaaabcbmongicmdegkmmfgdickgnnob\35.4_0\dropdown\images\reviews.png (PUP.Optional.MoviesToolBar.A) -> Pridanie do karantény a zmazanie úspešné.
C:\Documents and Settings\Admin\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\aaaaabcbmongicmdegkmmfgdickgnnob\35.4_0\dropdown\images\search.png (PUP.Optional.MoviesToolBar.A) -> Pridanie do karantény a zmazanie úspešné.
C:\Documents and Settings\Admin\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\aaaaabcbmongicmdegkmmfgdickgnnob\35.4_0\dropdown\images\star.png (PUP.Optional.MoviesToolBar.A) -> Pridanie do karantény a zmazanie úspešné.
C:\Documents and Settings\Admin\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\aaaaabcbmongicmdegkmmfgdickgnnob\35.4_0\dropdown\images\toolbar-icon-ask.ico (PUP.Optional.MoviesToolBar.A) -> Pridanie do karantény a zmazanie úspešné.
C:\Documents and Settings\Admin\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\aaaaabcbmongicmdegkmmfgdickgnnob\35.4_0\dropdown\images\trailers.png (PUP.Optional.MoviesToolBar.A) -> Pridanie do karantény a zmazanie úspešné.
C:\Documents and Settings\Admin\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\aaaaabcbmongicmdegkmmfgdickgnnob\35.4_0\dropdown\js\bootstrap.js (PUP.Optional.MoviesToolBar.A) -> Pridanie do karantény a zmazanie úspešné.
C:\Documents and Settings\Admin\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\aaaaabcbmongicmdegkmmfgdickgnnob\35.4_0\dropdown\js\jquery.js (PUP.Optional.MoviesToolBar.A) -> Pridanie do karantény a zmazanie úspešné.
C:\Documents and Settings\Admin\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\aaaaabcbmongicmdegkmmfgdickgnnob\35.4_0\dropdown\js\popup.js (PUP.Optional.MoviesToolBar.A) -> Pridanie do karantény a zmazanie úspešné.
C:\Documents and Settings\Admin\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\aaaaabcbmongicmdegkmmfgdickgnnob\35.4_0\_metadata\verified_contents.json (PUP.Optional.MoviesToolBar.A) -> Pridanie do karantény a zmazanie úspešné.
C:\Documents and Settings\Emmka\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\aaaaabcbmongicmdegkmmfgdickgnnob\35.4_0\manifest.json (PUP.Optional.MoviesToolBar.A) -> Pridanie do karantény a zmazanie úspešné.
C:\Documents and Settings\Emmka\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\aaaaabcbmongicmdegkmmfgdickgnnob\35.4_0\common\background.js (PUP.Optional.MoviesToolBar.A) -> Pridanie do karantény a zmazanie úspešné.
C:\Documents and Settings\Emmka\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\aaaaabcbmongicmdegkmmfgdickgnnob\35.4_0\common\config.js (PUP.Optional.MoviesToolBar.A) -> Pridanie do karantény a zmazanie úspešné.
C:\Documents and Settings\Emmka\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\aaaaabcbmongicmdegkmmfgdickgnnob\35.4_0\common\registry.js (PUP.Optional.MoviesToolBar.A) -> Pridanie do karantény a zmazanie úspešné.
C:\Documents and Settings\Emmka\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\aaaaabcbmongicmdegkmmfgdickgnnob\35.4_0\common\reporting.js (PUP.Optional.MoviesToolBar.A) -> Pridanie do karantény a zmazanie úspešné.
C:\Documents and Settings\Emmka\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\aaaaabcbmongicmdegkmmfgdickgnnob\35.4_0\common\utils.js (PUP.Optional.MoviesToolBar.A) -> Pridanie do karantény a zmazanie úspešné.
C:\Documents and Settings\Emmka\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\aaaaabcbmongicmdegkmmfgdickgnnob\35.4_0\config\build.json (PUP.Optional.MoviesToolBar.A) -> Pridanie do karantény a zmazanie úspešné.
C:\Documents and Settings\Emmka\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\aaaaabcbmongicmdegkmmfgdickgnnob\35.4_0\config\skin\images\logo\logo_128x.png (PUP.Optional.MoviesToolBar.A) -> Pridanie do karantény a zmazanie úspešné.
C:\Documents and Settings\Emmka\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\aaaaabcbmongicmdegkmmfgdickgnnob\35.4_0\config\skin\images\logo\logo_19x.png (PUP.Optional.MoviesToolBar.A) -> Pridanie do karantény a zmazanie úspešné.
C:\Documents and Settings\Emmka\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\aaaaabcbmongicmdegkmmfgdickgnnob\35.4_0\config\skin\images\logo\logo_24x.png (PUP.Optional.MoviesToolBar.A) -> Pridanie do karantény a zmazanie úspešné.
C:\Documents and Settings\Emmka\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\aaaaabcbmongicmdegkmmfgdickgnnob\35.4_0\config\skin\images\logo\logo_32x.png (PUP.Optional.MoviesToolBar.A) -> Pridanie do karantény a zmazanie úspešné.
C:\Documents and Settings\Emmka\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\aaaaabcbmongicmdegkmmfgdickgnnob\35.4_0\config\skin\images\logo\logo_grey_19x.png (PUP.Optional.MoviesToolBar.A) -> Pridanie do karantény a zmazanie úspešné.
C:\Documents and Settings\Emmka\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\aaaaabcbmongicmdegkmmfgdickgnnob\35.4_0\config\skin\images\logo\toolbar-icons.png (PUP.Optional.MoviesToolBar.A) -> Pridanie do karantény a zmazanie úspešné.
C:\Documents and Settings\Emmka\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\aaaaabcbmongicmdegkmmfgdickgnnob\35.4_0\dropdown\popup.html (PUP.Optional.MoviesToolBar.A) -> Pridanie do karantény a zmazanie úspešné.
C:\Documents and Settings\Emmka\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\aaaaabcbmongicmdegkmmfgdickgnnob\35.4_0\dropdown\css\bootstrap.css (PUP.Optional.MoviesToolBar.A) -> Pridanie do karantény a zmazanie úspešné.
C:\Documents and Settings\Emmka\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\aaaaabcbmongicmdegkmmfgdickgnnob\35.4_0\dropdown\css\bootstrap.css.map (PUP.Optional.MoviesToolBar.A) -> Pridanie do karantény a zmazanie úspešné.
C:\Documents and Settings\Emmka\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\aaaaabcbmongicmdegkmmfgdickgnnob\35.4_0\dropdown\css\uninstallInfo.css (PUP.Optional.MoviesToolBar.A) -> Pridanie do karantény a zmazanie úspešné.
C:\Documents and Settings\Emmka\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\aaaaabcbmongicmdegkmmfgdickgnnob\35.4_0\dropdown\images\ask_logo.png (PUP.Optional.MoviesToolBar.A) -> Pridanie do karantény a zmazanie úspešné.
C:\Documents and Settings\Emmka\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\aaaaabcbmongicmdegkmmfgdickgnnob\35.4_0\dropdown\images\cinema.png (PUP.Optional.MoviesToolBar.A) -> Pridanie do karantény a zmazanie úspešné.
C:\Documents and Settings\Emmka\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\aaaaabcbmongicmdegkmmfgdickgnnob\35.4_0\dropdown\images\comedy.png (PUP.Optional.MoviesToolBar.A) -> Pridanie do karantény a zmazanie úspešné.
C:\Documents and Settings\Emmka\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\aaaaabcbmongicmdegkmmfgdickgnnob\35.4_0\dropdown\images\m.png (PUP.Optional.MoviesToolBar.A) -> Pridanie do karantény a zmazanie úspešné.
C:\Documents and Settings\Emmka\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\aaaaabcbmongicmdegkmmfgdickgnnob\35.4_0\dropdown\images\magazine.png (PUP.Optional.MoviesToolBar.A) -> Pridanie do karantény a zmazanie úspešné.
C:\Documents and Settings\Emmka\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\aaaaabcbmongicmdegkmmfgdickgnnob\35.4_0\dropdown\images\movies.png (PUP.Optional.MoviesToolBar.A) -> Pridanie do karantény a zmazanie úspešné.
C:\Documents and Settings\Emmka\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\aaaaabcbmongicmdegkmmfgdickgnnob\35.4_0\dropdown\images\options.png (PUP.Optional.MoviesToolBar.A) -> Pridanie do karantény a zmazanie úspešné.
C:\Documents and Settings\Emmka\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\aaaaabcbmongicmdegkmmfgdickgnnob\35.4_0\dropdown\images\reviews.png (PUP.Optional.MoviesToolBar.A) -> Pridanie do karantény a zmazanie úspešné.
C:\Documents and Settings\Emmka\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\aaaaabcbmongicmdegkmmfgdickgnnob\35.4_0\dropdown\images\search.png (PUP.Optional.MoviesToolBar.A) -> Pridanie do karantény a zmazanie úspešné.
C:\Documents and Settings\Emmka\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\aaaaabcbmongicmdegkmmfgdickgnnob\35.4_0\dropdown\images\star.png (PUP.Optional.MoviesToolBar.A) -> Pridanie do karantény a zmazanie úspešné.
C:\Documents and Settings\Emmka\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\aaaaabcbmongicmdegkmmfgdickgnnob\35.4_0\dropdown\images\toolbar-icon-ask.ico (PUP.Optional.MoviesToolBar.A) -> Pridanie do karantény a zmazanie úspešné.
C:\Documents and Settings\Emmka\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\aaaaabcbmongicmdegkmmfgdickgnnob\35.4_0\dropdown\images\trailers.png (PUP.Optional.MoviesToolBar.A) -> Pridanie do karantény a zmazanie úspešné.
C:\Documents and Settings\Emmka\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\aaaaabcbmongicmdegkmmfgdickgnnob\35.4_0\dropdown\js\bootstrap.js (PUP.Optional.MoviesToolBar.A) -> Pridanie do karantény a zmazanie úspešné.
C:\Documents and Settings\Emmka\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\aaaaabcbmongicmdegkmmfgdickgnnob\35.4_0\dropdown\js\jquery.js (PUP.Optional.MoviesToolBar.A) -> Pridanie do karantény a zmazanie úspešné.
C:\Documents and Settings\Emmka\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\aaaaabcbmongicmdegkmmfgdickgnnob\35.4_0\dropdown\js\popup.js (PUP.Optional.MoviesToolBar.A) -> Pridanie do karantény a zmazanie úspešné.
C:\Documents and Settings\Emmka\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\aaaaabcbmongicmdegkmmfgdickgnnob\35.4_0\_metadata\verified_contents.json (PUP.Optional.MoviesToolBar.A) -> Pridanie do karantény a zmazanie úspešné.
C:\Documents and Settings\Mimi_2\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\aaaaabcbmongicmdegkmmfgdickgnnob\35.4_0\manifest.json (PUP.Optional.MoviesToolBar.A) -> Pridanie do karantény a zmazanie úspešné.
C:\Documents and Settings\Mimi_2\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\aaaaabcbmongicmdegkmmfgdickgnnob\35.4_0\common\background.js (PUP.Optional.MoviesToolBar.A) -> Pridanie do karantény a zmazanie úspešné.
C:\Documents and Settings\Mimi_2\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\aaaaabcbmongicmdegkmmfgdickgnnob\35.4_0\common\config.js (PUP.Optional.MoviesToolBar.A) -> Pridanie do karantény a zmazanie úspešné.
C:\Documents and Settings\Mimi_2\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\aaaaabcbmongicmdegkmmfgdickgnnob\35.4_0\common\registry.js (PUP.Optional.MoviesToolBar.A) -> Pridanie do karantény a zmazanie úspešné.
C:\Documents and Settings\Mimi_2\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\aaaaabcbmongicmdegkmmfgdickgnnob\35.4_0\common\reporting.js (PUP.Optional.MoviesToolBar.A) -> Pridanie do karantény a zmazanie úspešné.
C:\Documents and Settings\Mimi_2\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\aaaaabcbmongicmdegkmmfgdickgnnob\35.4_0\common\utils.js (PUP.Optional.MoviesToolBar.A) -> Pridanie do karantény a zmazanie úspešné.
C:\Documents and Settings\Mimi_2\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\aaaaabcbmongicmdegkmmfgdickgnnob\35.4_0\config\build.json (PUP.Optional.MoviesToolBar.A) -> Pridanie do karantény a zmazanie úspešné.
C:\Documents and Settings\Mimi_2\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\aaaaabcbmongicmdegkmmfgdickgnnob\35.4_0\config\skin\images\logo\logo_128x.png (PUP.Optional.MoviesToolBar.A) -> Pridanie do karantény a zmazanie úspešné.
C:\Documents and Settings\Mimi_2\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\aaaaabcbmongicmdegkmmfgdickgnnob\35.4_0\config\skin\images\logo\logo_19x.png (PUP.Optional.MoviesToolBar.A) -> Pridanie do karantény a zmazanie úspešné.
C:\Documents and Settings\Mimi_2\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\aaaaabcbmongicmdegkmmfgdickgnnob\35.4_0\config\skin\images\logo\logo_24x.png (PUP.Optional.MoviesToolBar.A) -> Pridanie do karantény a zmazanie úspešné.
C:\Documents and Settings\Mimi_2\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\aaaaabcbmongicmdegkmmfgdickgnnob\35.4_0\config\skin\images\logo\logo_32x.png (PUP.Optional.MoviesToolBar.A) -> Pridanie do karantény a zmazanie úspešné.
C:\Documents and Settings\Mimi_2\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\aaaaabcbmongicmdegkmmfgdickgnnob\35.4_0\config\skin\images\logo\logo_grey_19x.png (PUP.Optional.MoviesToolBar.A) -> Pridanie do karantény a zmazanie úspešné.
C:\Documents and Settings\Mimi_2\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\aaaaabcbmongicmdegkmmfgdickgnnob\35.4_0\config\skin\images\logo\toolbar-icons.png (PUP.Optional.MoviesToolBar.A) -> Pridanie do karantény a zmazanie úspešné.
C:\Documents and Settings\Mimi_2\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\aaaaabcbmongicmdegkmmfgdickgnnob\35.4_0\dropdown\popup.html (PUP.Optional.MoviesToolBar.A) -> Pridanie do karantény a zmazanie úspešné.
C:\Documents and Settings\Mimi_2\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\aaaaabcbmongicmdegkmmfgdickgnnob\35.4_0\dropdown\css\bootstrap.css (PUP.Optional.MoviesToolBar.A) -> Pridanie do karantény a zmazanie úspešné.
C:\Documents and Settings\Mimi_2\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\aaaaabcbmongicmdegkmmfgdickgnnob\35.4_0\dropdown\css\bootstrap.css.map (PUP.Optional.MoviesToolBar.A) -> Pridanie do karantény a zmazanie úspešné.
C:\Documents and Settings\Mimi_2\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\aaaaabcbmongicmdegkmmfgdickgnnob\35.4_0\dropdown\css\uninstallInfo.css (PUP.Optional.MoviesToolBar.A) -> Pridanie do karantény a zmazanie úspešné.
C:\Documents and Settings\Mimi_2\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\aaaaabcbmongicmdegkmmfgdickgnnob\35.4_0\dropdown\images\ask_logo.png (PUP.Optional.MoviesToolBar.A) -> Pridanie do karantény a zmazanie úspešné.
C:\Documents and Settings\Mimi_2\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\aaaaabcbmongicmdegkmmfgdickgnnob\35.4_0\dropdown\images\cinema.png (PUP.Optional.MoviesToolBar.A) -> Pridanie do karantény a zmazanie úspešné.
C:\Documents and Settings\Mimi_2\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\aaaaabcbmongicmdegkmmfgdickgnnob\35.4_0\dropdown\images\comedy.png (PUP.Optional.MoviesToolBar.A) -> Pridanie do karantény a zmazanie úspešné.
C:\Documents and Settings\Mimi_2\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\aaaaabcbmongicmdegkmmfgdickgnnob\35.4_0\dropdown\images\m.png (PUP.Optional.MoviesToolBar.A) -> Pridanie do karantény a zmazanie úspešné.
C:\Documents and Settings\Mimi_2\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\aaaaabcbmongicmdegkmmfgdickgnnob\35.4_0\dropdown\images\magazine.png (PUP.Optional.MoviesToolBar.A) -> Pridanie do karantény a zmazanie úspešné.
C:\Documents and Settings\Mimi_2\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\aaaaabcbmongicmdegkmmfgdickgnnob\35.4_0\dropdown\images\movies.png (PUP.Optional.MoviesToolBar.A) -> Pridanie do karantény a zmazanie úspešné.
C:\Documents and Settings\Mimi_2\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\aaaaabcbmongicmdegkmmfgdickgnnob\35.4_0\dropdown\images\options.png (PUP.Optional.MoviesToolBar.A) -> Pridanie do karantény a zmazanie úspešné.
C:\Documents and Settings\Mimi_2\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\aaaaabcbmongicmdegkmmfgdickgnnob\35.4_0\dropdown\images\reviews.png (PUP.Optional.MoviesToolBar.A) -> Pridanie do karantény a zmazanie úspešné.
C:\Documents and Settings\Mimi_2\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\aaaaabcbmongicmdegkmmfgdickgnnob\35.4_0\dropdown\images\search.png (PUP.Optional.MoviesToolBar.A) -> Pridanie do karantény a zmazanie úspešné.
C:\Documents and Settings\Mimi_2\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\aaaaabcbmongicmdegkmmfgdickgnnob\35.4_0\dropdown\images\star.png (PUP.Optional.MoviesToolBar.A) -> Pridanie do karantény a zmazanie úspešné.
C:\Documents and Settings\Mimi_2\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\aaaaabcbmongicmdegkmmfgdickgnnob\35.4_0\dropdown\images\toolbar-icon-ask.ico (PUP.Optional.MoviesToolBar.A) -> Pridanie do karantény a zmazanie úspešné.
C:\Documents and Settings\Mimi_2\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\aaaaabcbmongicmdegkmmfgdickgnnob\35.4_0\dropdown\images\trailers.png (PUP.Optional.MoviesToolBar.A) -> Pridanie do karantény a zmazanie úspešné.
C:\Documents and Settings\Mimi_2\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\aaaaabcbmongicmdegkmmfgdickgnnob\35.4_0\dropdown\js\bootstrap.js (PUP.Optional.MoviesToolBar.A) -> Pridanie do karantény a zmazanie úspešné.
C:\Documents and Settings\Mimi_2\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\aaaaabcbmongicmdegkmmfgdickgnnob\35.4_0\dropdown\js\jquery.js (PUP.Optional.MoviesToolBar.A) -> Pridanie do karantény a zmazanie úspešné.
C:\Documents and Settings\Mimi_2\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\aaaaabcbmongicmdegkmmfgdickgnnob\35.4_0\dropdown\js\popup.js (PUP.Optional.MoviesToolBar.A) -> Pridanie do karantény a zmazanie úspešné.
C:\Documents and Settings\Mimi_2\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\aaaaabcbmongicmdegkmmfgdickgnnob\35.4_0\_metadata\verified_contents.json (PUP.Optional.MoviesToolBar.A) -> Pridanie do karantény a zmazanie úspešné.

(koniec)

#2 Příspěvek od **Rudy** » 04 pro 2014 21:49

Zdravím!
Vše, co MBAM nalezl, smažte. Dejte log RSIT: http://forum.viry.cz/viewtopic.php?f=13&t=130786 .

Juraj1973 · #3 Příspěvek od **Juraj1973** » 04 pro 2014 21:56

Logfile of random's system information tool 1.10 (written by random/random)
Run by Admin at 2014-12-04 21:53:37
Systém Microsoft Windows XP Home Edition Service Pack 3
System drive C: has 705 MB (2%) free of 38 GB
Total RAM: 3062 MB (70% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 21:53:48, on 4.12.2014
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP3 (6.00.2900.5512)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe
C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\mdm.exe
C:\Program Files\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\TeamViewer\TeamViewer_Service.exe
c:\program files\teamviewer\TeamViewer_Desktop.exe
C:\WINDOWS\Explorer.EXE
c:\program files\teamviewer\TeamViewer.exe
C:\Program Files\TeamViewer\tv_w32.exe
C:\WINDOWS\system32\hkcmd.exe
C:\WINDOWS\system32\igfxpers.exe
C:\Program Files\Common Files\Java\Java Update\jusched.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\WINDOWS\system32\wuauclt.exe
C:\Program Files\Skype\Phone\Skype.exe
C:\Program Files\Common Files\Java\Java Update\jucheck.exe
C:\WINDOWS\system32\NOTEPAD.EXE
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Documents and Settings\Admin\Desktop\RSIT.exe
C:\Program Files\trend micro\Admin.exe

R3 - Default URLSearchHook is missing
O2 - BHO: Adobe PDF Link Helper - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: Softonic-Eng7 - {414b6d9d-4a95-4e8d-b5b1-149dd2d93bb3} - (no file)
O2 - BHO: BrotherSoft Extreme - {51a86bb3-6602-4c85-92a5-130ee4864f13} - C:\Program Files\BrotherSoft_Extreme\prxtbBrot.dll
O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - (no file)
O2 - BHO: Search Helper - {6EBF7485-159F-4bff-A14F-B9E3AAC4465B} - C:\Program Files\Microsoft\Search Enhancement Pack\Search Helper\SearchHelper.dll
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll
O2 - BHO: GdfrDUEn - {A3CF7606-E683-4375-A372-96B75DA0AEF7} - (no file)
O2 - BHO: MediaBar - {ABB49B3B-AB7D-4ED0-9135-93FD5AA4F69F} - (no file)
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll
O2 - BHO: (no name) - {E15A8DC0-8516-42A1-81EA-DC94EC1ACF10} - (no file)
O3 - Toolbar: (no name) - {21FA44EF-376D-4D53-9B0F-8A89D3229068} - (no file)
O3 - Toolbar: (no name) - {ABB49B3B-AB7D-4ED0-9135-93FD5AA4F69F} - (no file)
O3 - Toolbar: (no name) - {414b6d9d-4a95-4e8d-b5b1-149dd2d93bb3} - (no file)
O3 - Toolbar: BrotherSoft Extreme Toolbar - {51a86bb3-6602-4c85-92a5-130ee4864f13} - C:\Program Files\BrotherSoft_Extreme\prxtbBrot.dll
O4 - HKLM\..\Run: [igfxtray] C:\WINDOWS\system32\igfxtray.exe
O4 - HKLM\..\Run: [igfxhkcmd] C:\WINDOWS\system32\hkcmd.exe
O4 - HKLM\..\Run: [igfxpers] C:\WINDOWS\system32\igfxpers.exe
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [APSDaemon] "C:\Program Files\Common Files\Apple\Apple Application Support\APSDaemon.exe"
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Common Files\Java\Java Update\jusched.exe"
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [egui] "C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe" /hide /waitservice
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [Xfmqmn] C:\Documents and Settings\Admin\Application Data\Xfmqmn.exe
O4 - HKCU\..\Run: [Skype] "C:\Program Files\Skype\Phone\Skype.exe" /minimized /regrun
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe (User 'SYSTEM')
O4 - HKUS\S-1-5-18\..\RunOnce: [RunNarrator] Narrator.exe (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe (User 'Default user')
O4 - HKUS\.DEFAULT\..\RunOnce: [RunNarrator] Narrator.exe (User 'Default user')
O8 - Extra context menu item: E&xportovať do programu Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000
O9 - Extra button: Blog This - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\WINDOWS\system32\shdocvw.dll
O9 - Extra 'Tools' menuitem: &Blog This in Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\WINDOWS\system32\shdocvw.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O22 - SharedTaskScheduler: Browseui preloader - {438755C2-A8BA-11D1-B96B-00A0C90312E1} - C:\WINDOWS\system32\browseui.dll
O22 - SharedTaskScheduler: Component Categories cache daemon - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\WINDOWS\system32\browseui.dll
O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
O23 - Service: Bonjour Service - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: ESET Service (ekrn) - ESET - C:\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe
O23 - Service: iPod Service - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Mozilla Foundation - C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe
O23 - Service: TeamViewer 10 (TeamViewer) - TeamViewer GmbH - C:\Program Files\TeamViewer\TeamViewer_Service.exe
O24 - Desktop Component 0: (no name) - http://www.kovozvar.sk/kovozvar/album/B ... ok_005.JPG

--
End of file - 6466 bytes

======Scheduled tasks folder======

C:\WINDOWS\tasks\AppleSoftwareUpdate.job - C:\Program Files\Apple Software Update\SoftwareUpdate.exe -task
C:\WINDOWS\tasks\FacebookUpdateTaskUserS-1-5-21-839522115-1214440339-682003330-1008Core.job - C:\Documents and Settings\Mimi_2\Local Settings\Application Data\Facebook\Update\FacebookUpdate.exe /c /nocrashserver
C:\WINDOWS\tasks\FacebookUpdateTaskUserS-1-5-21-839522115-1214440339-682003330-1008UA.job - C:\Documents and Settings\Mimi_2\Local Settings\Application Data\Facebook\Update\FacebookUpdate.exe /ua /installsource scheduler
C:\WINDOWS\tasks\Microsoft Windows XP End of Service Notification Logon.job - C:\WINDOWS\system32\xp_eos.exe -c
C:\WINDOWS\tasks\Microsoft Windows XP End of Service Notification Monthly.job - C:\WINDOWS\system32\xp_eos.exe

=========Mozilla firefox=========

ProfilePath - C:\Documents and Settings\Admin\Application Data\Mozilla\Firefox\Profiles\arztdx66.default

prefs.js - "browser.search.useDBForOrder" - true
prefs.js - "extensions.enabledItems" - "{20a82645-c095-46ed-80e3-08825760534b}:1.1, {B13721C7-F507-4982-B2E5-502A71474FED}:3.3.0.3971, {1FD91A9C-410C-4090-BBCC-55D3450EF433}:2.0, {28D35620-51D9-11DE-9D13-2DB156D89593}:3.1, {7FF99715-3016-4381-84CE-E4E4C9673020}:1.0, {972ce4c6-7e08-4474-a285-3208198ce6fd}:3.6.13"

"{20a82645-c095-46ed-80e3-08825760534b}"=c:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@Apple.com/iTunes,version=]
"Description"=Doplnok iTunes Detector
"Path"=

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@Apple.com/iTunes,version=1.0]
"Description"=
"Path"=C:\Program Files\iTunes\Mozilla Plugins\npitunes.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@java.com/DTPlugin,version=10.45.2]
"Description"=Java™ Deployment Toolkit
"Path"=C:\Program Files\Java\jre7\bin\dtplugin\npDeployJava1.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@java.com/JavaPlugin,version=10.45.2]
"Description"=Oracle® Next Generation Java™ Plug-In
"Path"=C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@microsoft.com/WLPG,version=14.0.8117.0416]
"Description"=WLPG Install MIME type
"Path"=C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@microsoft.com/WPF,version=3.5]
"Description"=Windows Presentation Foundation plug-in for Mozilla browsers
"Path"=c:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll

C:\Program Files\Mozilla Firefox\extensions\
{B13721C7-F507-4982-B2E5-502A71474FED}

C:\Program Files\Mozilla Firefox\components\
aboutCertError.js.moz-backup
aboutPrivateBrowsing.js.moz-backup
aboutRights.js.moz-backup
aboutRobots.js.moz-backup
aboutSessionRestore.js.moz-backup
FeedProcessor.js.moz-backup
fuelApplication.js.moz-backup
NetworkGeolocationProvider.js.moz-backup
nsBadCertHandler.js.moz-backup
nsContentDispatchChooser.js.moz-backup
nsContentPrefService.js.moz-backup
nsDownloadManagerUI.js.moz-backup
nsHandlerService.js.moz-backup
nsLoginInfo.js.moz-backup
nsLoginManager.js.moz-backup
nsLoginManagerPrompter.js.moz-backup
nsPlacesDBFlush.js.moz-backup
nsPlacesTransactionsService.js.moz-backup
nsPostUpdateWin.js.moz-backup
nsProxyAutoConfig.js.moz-backup
nsSearchSuggestions.js.moz-backup
nsSetDefaultBrowser.js.moz-backup
nsTaggingService.js.moz-backup
nsTryToClose.js.moz-backup
nsWebHandlerApp.js.moz-backup
pluginGlue.js.moz-backup
storage-Legacy.js.moz-backup
storage-mozStorage.js.moz-backup
txEXSLTRegExFunctions.js.moz-backup

C:\Program Files\Mozilla Firefox\plugins\
NPOFF12.DLL
nppdf32.dll

C:\Program Files\Mozilla Firefox\searchplugins\
atlas-sk.xml.moz-backup
azet-sk.xml.moz-backup
dunaj-sk.xml.moz-backup
eBay.xml.moz-backup
google.xml.moz-backup
slovnik-sk.xml.moz-backup
wikipedia-sk.xml.moz-backup
zoznam-sk.xml.moz-backup

C:\Documents and Settings\Admin\Application Data\Mozilla\Firefox\Profiles\arztdx66.default\extensions\
{28D35620-51D9-11DE-9D13-2DB156D89593}

C:\Documents and Settings\Admin\Application Data\Mozilla\Firefox\Profiles\arztdx66.default\searchplugins\
mj-snr.xml

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
Adobe PDF Link Helper - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2009-02-27 75128]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{414b6d9d-4a95-4e8d-b5b1-149dd2d93bb3}]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{51a86bb3-6602-4c85-92a5-130ee4864f13}]
BrotherSoft Extreme Toolbar - C:\Program Files\BrotherSoft_Extreme\prxtbBrot.dll [2011-03-28 176936]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{5C255C8A-E604-49b4-9D64-90988571CECB}]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{6EBF7485-159F-4bff-A14F-B9E3AAC4465B}]
Search Helper - C:\Program Files\Microsoft\Search Enhancement Pack\Search Helper\SearchHelper.dll [2009-01-14 92504]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
Java(tm) Plug-In SSV Helper - C:\Program Files\Java\jre7\bin\ssv.dll [2013-10-08 462760]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{A3CF7606-E683-4375-A372-96B75DA0AEF7}]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{ABB49B3B-AB7D-4ED0-9135-93FD5AA4F69F}]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre7\bin\jp2ssv.dll [2013-10-08 171944]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{E15A8DC0-8516-42A1-81EA-DC94EC1ACF10}]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{21FA44EF-376D-4D53-9B0F-8A89D3229068}
{ABB49B3B-AB7D-4ED0-9135-93FD5AA4F69F}
{414b6d9d-4a95-4e8d-b5b1-149dd2d93bb3}
{51a86bb3-6602-4c85-92a5-130ee4864f13} - BrotherSoft Extreme Toolbar - C:\Program Files\BrotherSoft_Extreme\prxtbBrot.dll [2011-03-28 176936]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"igfxtray"=C:\WINDOWS\system32\igfxtray.exe [2006-02-07 94208]
"igfxhkcmd"=C:\WINDOWS\system32\hkcmd.exe [2006-02-07 77824]
"igfxpers"=C:\WINDOWS\system32\igfxpers.exe [2006-02-07 118784]
"Adobe Reader Speed Launcher"=C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe [2009-02-27 35696]
"NeroFilterCheck"=C:\WINDOWS\system32\NeroCheck.exe [2001-07-09 155648]
"APSDaemon"=C:\Program Files\Common Files\Apple\Apple Application Support\APSDaemon.exe [2014-02-06 43848]
"SunJavaUpdateSched"=C:\Program Files\Common Files\Java\Java Update\jusched.exe [2013-07-02 254336]
"iTunesHelper"=C:\Program Files\iTunes\iTunesHelper.exe [2014-02-06 152392]
"egui"=C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe [2014-10-01 5088456]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"ctfmon.exe"=C:\WINDOWS\system32\ctfmon.exe [2008-04-14 15360]
"Xfmqmn"=C:\Documents and Settings\Admin\Application Data\Xfmqmn.exe []
"Skype"=C:\Program Files\Skype\Phone\Skype.exe [2014-05-08 21444224]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\igfxcui]
C:\WINDOWS\system32\igfxdev.dll [2006-02-07 139264]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=145

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"HonorAutoRunSetting"=1

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"C:\Program Files\Microsoft Office\Office12\OUTLOOK.EXE"="C:\Program Files\Microsoft Office\Office12\OUTLOOK.EXE:*:Enabled:Microsoft Office Outlook"
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"C:\Program Files\Windows Live\Messenger\wlcsdk.exe"="C:\Program Files\Windows Live\Messenger\wlcsdk.exe:*:Enabled:Windows Live Call"
"C:\Program Files\Windows Live\Messenger\msnmsgr.exe"="C:\Program Files\Windows Live\Messenger\msnmsgr.exe:*:Enabled:Windows Live Messenger"
"C:\Program Files\Skype\Plugin Manager\skypePM.exe"="C:\Program Files\Skype\Plugin Manager\skypePM.exe:*:Enabled:Skype Extras Manager"
"C:\Program Files\Google\Google Earth\client\googleearth.exe"="C:\Program Files\Google\Google Earth\client\googleearth.exe:*:Disabled:Google Earth"
"C:\Program Files\iMesh Applications\iMesh\iMesh.exe"="C:\Program Files\iMesh Applications\iMesh\iMesh.exe:*:Enabled:iMesh"
"C:\Documents and Settings\Mimi\My Documents\Downloads\SweetImSetup.exe"="C:\Documents and Settings\Mimi\My Documents\Downloads\SweetImSetup.exe:*:Enabled:SweetIM Installer"
"C:\Program Files\Pinnacle\VideoSpin\Programs\RM.exe"="C:\Program Files\Pinnacle\VideoSpin\Programs\RM.exe:*:Enabled:Render Manager"
"C:\Program Files\Pinnacle\VideoSpin\Programs\umi.exe"="C:\Program Files\Pinnacle\VideoSpin\Programs\umi.exe:*:Enabled:umi"
"C:\Program Files\Pinnacle\VideoSpin\Programs\VideoSpin.exe"="C:\Program Files\Pinnacle\VideoSpin\Programs\VideoSpin.exe:*:Enabled:Pinnacle VideoSpin"
"C:\Documents and Settings\All Users\Application Data\SweetIM\Messenger\update\sweetimsetup.exe"="C:\Documents and Settings\All Users\Application Data\SweetIM\Messenger\update\sweetimsetup.exe:*:Enabled:SweetIM Installer"
"C:\Program Files\Sega\Virtua Tennis 4\VT4.exe"="C:\Program Files\Sega\Virtua Tennis 4\VT4.exe:*:Enabled:Virtua Tennis 4™"
"C:\Documents and Settings\Guest\Local Settings\Application Data\Skype\Phone\Skype.exe"="C:\Documents and Settings\Guest\Local Settings\Application Data\Skype\Phone\Skype.exe:*:Enabled:Skype"
"C:\Program Files\Bonjour\mDNSResponder.exe"="C:\Program Files\Bonjour\mDNSResponder.exe:*:Enabled:Bonjour Service"
"C:\Program Files\iTunes\iTunes.exe"="C:\Program Files\iTunes\iTunes.exe:*:Enabled:iTunes"
"C:\Program Files\Movies Toolbar\Datamngr\SRTOOL~1\IE\dtuser.exe"="C:\Program Files\Movies Toolbar\Datamngr\SRTOOL~1\IE\dtuser.exe:*:Enabled:Movies Toolbar (Dist. by Bandoo Media, Inc.) DTX Broker"
"C:\Program Files\Skype\Phone\Skype.exe"="C:\Program Files\Skype\Phone\Skype.exe:*:Enabled:Skype"
"C:\Documents and Settings\Guest\Local Settings\Application Data\Facebook\Video\Skype\FacebookVideoCalling.exe"="C:\Documents and Settings\Guest\Local Settings\Application Data\Facebook\Video\Skype\FacebookVideoCalling.exe:*:Enabled:Facebook Video Calling Plugin"
"C:\Program Files\TeamViewer\TeamViewer.exe"="C:\Program Files\TeamViewer\TeamViewer.exe:*:Enabled:Teamviewer Remote Control Application"
"C:\Program Files\TeamViewer\TeamViewer_Service.exe"="C:\Program Files\TeamViewer\TeamViewer_Service.exe:*:Enabled:Teamviewer Remote Control Service"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"C:\Program Files\Windows Live\Messenger\wlcsdk.exe"="C:\Program Files\Windows Live\Messenger\wlcsdk.exe:*:Enabled:Windows Live Call"
"C:\Program Files\Windows Live\Messenger\msnmsgr.exe"="C:\Program Files\Windows Live\Messenger\msnmsgr.exe:*:Enabled:Windows Live Messenger"
"C:\Program Files\iMesh Applications\iMesh\iMesh.exe"="C:\Program Files\iMesh Applications\iMesh\iMesh.exe:*:Enabled:iMesh"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"midimapper"=midimap.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msadpcm"=msadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.trspch"=tssoft32.acm
"vidc.cvid"=iccvid.dll
"VIDC.I420"=lvcodec2.dll
"vidc.iv31"=ir32_32.dll
"vidc.iv32"=ir32_32.dll
"vidc.iv41"=ir41_32.ax
"VIDC.IYUV"=iyuv_32.dll
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"VIDC.UYVY"=msyuv.dll
"VIDC.YUY2"=msyuv.dll
"VIDC.YVU9"=tsbyuv.dll
"VIDC.YVYU"=msyuv.dll
"wavemapper"=msacm32.drv
"msacm.msg723"=msg723.acm
"vidc.M263"=msh263.drv
"vidc.M261"=msh261.drv
"msacm.msaudio1"=msaud32.acm
"msacm.sl_anet"=sl_anet.acm
"msacm.iac2"=C:\WINDOWS\system32\iac25_32.ax
"vidc.iv50"=ir50_32.dll
"msacm.l3acm"=C:\WINDOWS\system32\l3codeca.acm
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"vidc.ffds"=ffdshow.ax
"msacm.ac3filter"=ac3filter.acm
"vidc.VP60"=C:\WINDOWS\system32\vp6vfw.dll
"vidc.VP61"=C:\WINDOWS\system32\vp6vfw.dll
"msacm.siren"=sirenacm.dll
"vidc.mjpg"=pvmjpg30.dll
"VIDC.FMVC"=fmcodec.dll
"MSVideo8"=VfWWDM32.dll
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"aux"=wdmaud.drv
"MSVideo"=vfwwdm32.dll

======List of files/folders created in the last 1 month======

2014-12-04 21:53:38 ----D---- C:\Program Files\trend micro
2014-12-04 21:53:37 ----D---- C:\rsit
2014-12-04 19:26:02 ----D---- C:\Documents and Settings\Admin\Application Data\Malwarebytes
2014-12-04 19:25:46 ----D---- C:\Program Files\Malwarebytes' Anti-Malware
2014-12-04 19:25:46 ----A---- C:\WINDOWS\system32\drivers\mbam.sys
2014-12-04 19:00:19 ----D---- C:\AdwCleaner
2014-12-04 18:40:31 ----D---- C:\Documents and Settings\All Users\Application Data\Malwarebytes
2014-12-03 19:30:54 ----D---- C:\Program Files\ESET
2014-12-03 19:14:15 ----D---- C:\Program Files\TeamViewer
2014-12-03 19:05:26 ----D---- C:\Program Files\CCleaner
2014-12-03 19:02:12 ----D---- C:\Program Files\Mozilla Maintenance Service
2014-12-03 19:02:12 ----D---- C:\Documents and Settings\All Users\Application Data\Mozilla
2014-11-23 17:44:05 ----D---- C:\cc3779aab551a07f0247328ec8
2014-11-11 17:39:56 ----D---- C:\Program Files\GUM5FE.tmp

======List of files/folders modified in the last 1 month======

2014-12-04 21:53:42 ----D---- C:\WINDOWS\Prefetch
2014-12-04 21:53:38 ----D---- C:\Program Files
2014-12-04 21:19:09 ----D---- C:\WINDOWS\Temp
2014-12-04 21:09:11 ----HDC---- C:\WINDOWS\$NtUninstallKB2695962$
2014-12-04 21:09:11 ----D---- C:\WINDOWS\system32\drivers
2014-12-04 21:08:56 ----A---- C:\WINDOWS\SchedLgU.Txt
2014-12-04 19:06:48 ----D---- C:\WINDOWS\system32
2014-12-04 19:06:13 ----D---- C:\Documents and Settings\All Users\Application Data\ICQ
2014-12-04 18:32:45 ----D---- C:\Documents and Settings\Admin\Application Data\Skype
2014-12-04 18:28:39 ----D---- C:\Program Files\Common Files\Microsoft Shared
2014-12-04 18:25:58 ----SHD---- C:\WINDOWS\Installer
2014-12-04 18:25:58 ----D---- C:\Documents and Settings\All Users\Application Data\Microsoft Help
2014-12-03 19:41:55 ----D---- C:\WINDOWS
2014-12-03 19:34:17 ----HD---- C:\WINDOWS\inf
2014-12-03 19:34:08 ----D---- C:\WINDOWS\system32\CatRoot2
2014-12-03 19:29:32 ----A---- C:\WINDOWS\win.ini
2014-12-03 19:14:39 ----RSD---- C:\WINDOWS\Fonts
2014-12-03 19:11:07 ----D---- C:\Documents and Settings\All Users\Application Data\BlueStacksSetup
2014-12-03 19:10:24 ----D---- C:\WINDOWS\Minidump
2014-12-03 19:10:24 ----D---- C:\WINDOWS\Logs
2014-12-03 19:10:24 ----D---- C:\WINDOWS\Debug
2014-12-03 19:01:43 ----D---- C:\Program Files\Mozilla Firefox
2014-12-03 18:02:57 ----D---- C:\Documents and Settings\All Users\Application Data\0df3a3ff-f340-47c8-bd12-69f1b8f009ac
2014-11-25 17:04:13 ----SD---- C:\Documents and Settings\Admin\Application Data\Microsoft
2014-11-25 17:02:08 ----SD---- C:\WINDOWS\Tasks
2014-11-25 17:02:08 ----D---- C:\Program Files\Google
2014-11-25 08:26:35 ----D---- C:\Program Files\ToggleEN
2014-11-15 20:05:26 ----D---- C:\Documents and Settings

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R1 eamonm;eamonm; C:\WINDOWS\system32\DRIVERS\eamonm.sys [2014-10-10 191928]
R1 ehdrv;ehdrv; C:\WINDOWS\system32\DRIVERS\ehdrv.sys [2014-10-10 135296]
R1 epfwtdir;epfwtdir; C:\WINDOWS\system32\DRIVERS\epfwtdir.sys [2014-10-10 119792]
R1 intelppm;Intel Processor Driver; C:\WINDOWS\system32\DRIVERS\intelppm.sys [2008-04-13 36352]
R2 fssfltr;FssFltr; C:\WINDOWS\system32\DRIVERS\fssfltr_tdi.sys [2010-04-28 54760]
R3 b57w2k;Broadcom NetXtreme Gigabit Ethernet; C:\WINDOWS\system32\DRIVERS\b57xp32.sys [2004-06-19 190336]
R3 GEARAspiWDM;GEAR ASPI Filter Driver; C:\WINDOWS\system32\DRIVERS\GEARAspiWDM.sys [2012-08-21 26840]
R3 HidUsb;Microsoft HID Class Driver; C:\WINDOWS\system32\DRIVERS\hidusb.sys [2008-04-13 10368]
R3 ialm;ialm; C:\WINDOWS\system32\DRIVERS\ialmnt5.sys [2006-02-07 1399615]
R3 mouhid;Mouse HID Driver; C:\WINDOWS\system32\DRIVERS\mouhid.sys [2001-08-17 12160]
R3 smwdm;smwdm; C:\WINDOWS\system32\drivers\smwdm.sys [2004-07-08 267392]
R3 usbuhci;Microsoft USB Universal Host Controller Miniport Driver; C:\WINDOWS\system32\DRIVERS\usbuhci.sys [2008-04-13 20608]
S1 kbdhid;Keyboard HID Driver; C:\WINDOWS\system32\DRIVERS\kbdhid.sys [2008-04-13 14592]
S3 AX88772;USB2.0 to Fast Ethernet Adapter; C:\WINDOWS\system32\DRIVERS\ax88772.sys [2009-09-03 46720]
S3 CCDECODE;Closed Caption Decoder; C:\WINDOWS\system32\DRIVERS\CCDECODE.sys [2004-07-09 16384]
S3 FlrnUSB;Leadtek USB Network Interface; C:\WINDOWS\system32\DRIVERS\LtkUSB.sys [2010-09-13 41907]
S3 hwdatacard;Huawei DataCard USB Modem and USB Serial; C:\WINDOWS\system32\DRIVERS\ewusbmdm.sys []
S3 massfilter_hs;ZTE HandSet Mass Storage Filter Driver; C:\WINDOWS\system32\drivers\massfilter_hs.sys [2011-02-15 9216]
S3 MSTEE;Microsoft Streaming Tee/Sink-to-Sink Converter; C:\WINDOWS\system32\drivers\MSTEE.sys [2002-12-12 5504]
S3 NABTSFEC;NABTS/FEC VBI Codec; C:\WINDOWS\system32\DRIVERS\NABTSFEC.sys [2004-07-09 83968]
S3 NdisIP;Microsoft TV/Video Connection; C:\WINDOWS\system32\DRIVERS\NdisIP.sys [2004-07-09 10112]
S3 PID_PEPI;Logitech QuickCam IM(PID_PEPI); C:\WINDOWS\system32\DRIVERS\LV302V32.SYS [2009-04-30 2687512]
S3 SLIP;BDA Slip De-Framer; C:\WINDOWS\system32\DRIVERS\SLIP.sys [2004-07-09 10880]
S3 streamip;BDA IPSink; C:\WINDOWS\system32\DRIVERS\StreamIP.sys [2004-07-09 14976]
S3 USBAAPL;Apple Mobile USB Driver; C:\WINDOWS\System32\Drivers\usbaapl.sys [2013-03-18 45056]
S3 usbaudio;USB Audio Driver (WDM); C:\WINDOWS\system32\drivers\usbaudio.sys [2013-07-17 60160]
S3 usbccgp;Microsoft USB Generic Parent Driver; C:\WINDOWS\system32\DRIVERS\usbccgp.sys [2013-08-09 32384]
S3 usbscan;USB Scanner Driver; C:\WINDOWS\system32\DRIVERS\usbscan.sys [2013-07-03 14976]
S3 USBSTOR;USB Mass Storage Driver; C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS [2008-04-13 26368]
S3 usbvideo;USB Video Device (WDM); C:\WINDOWS\System32\Drivers\usbvideo.sys [2013-07-17 123008]
S3 WSTCODEC;World Standard Teletext Codec; C:\WINDOWS\system32\DRIVERS\WSTCODEC.SYS [2004-07-09 18688]
S3 zgwhsdiag;HSPA WCDMA Handset Diagnostic Port; C:\WINDOWS\system32\DRIVERS\gwhsdiag.sys [2011-02-15 106240]
S3 zgwhsmdm;HSPAHandSet WCDMA Handset USB Modem; C:\WINDOWS\system32\DRIVERS\gwhsmdm.sys [2011-02-15 106240]
S3 zgwhsnmea;WCDMA Handset NMEA Port; C:\WINDOWS\system32\DRIVERS\gwhsnmea.sys [2011-02-15 106240]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 Apple Mobile Device;Apple Mobile Device; C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe [2014-01-07 43336]
R2 Bonjour Service;Bonjour Service; C:\Program Files\Bonjour\mDNSResponder.exe [2011-08-30 390504]
R2 ekrn;ESET Service; C:\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe [2014-10-01 1349576]
R2 MDM;Machine Debug Manager; C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\mdm.exe [2006-10-26 335872]
R2 SeaPort;SeaPort; C:\Program Files\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe [2009-01-14 226656]
R2 TeamViewer;TeamViewer 10; C:\Program Files\TeamViewer\TeamViewer_Service.exe [2014-11-28 5419792]
R3 iPod Service;iPod Service; C:\Program Files\iPod\bin\iPodService.exe [2014-02-06 553288]
S3 aspnet_state;ASP.NET State Service; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe [2008-07-25 34312]
S3 clr_optimization_v2.0.50727_32;.NET Runtime Optimization Service v2.0.50727_X86; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe [2008-07-25 69632]
S3 FontCache3.0.0.0;Windows Presentation Foundation Font Cache 3.0.0.0; c:\WINDOWS\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe [2008-07-29 46104]
S3 idsvc;Windows CardSpace; c:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe [2008-07-29 881664]
S3 MozillaMaintenance;Mozilla Maintenance Service; C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe [2014-09-24 114288]
S3 odserv;Microsoft Office Diagnostics Service; C:\Program Files\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE [2008-11-04 441712]
S3 ose;Office Source Engine; C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2006-10-26 145184]
S4 NetTcpPortSharing;Net.Tcp Port Sharing Service; c:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe [2008-07-29 132096]

-----------------EOF-----------------

#4 Příspěvek od **Rudy** » 04 pro 2014 22:29

Teď spusťte tuto utilitu:

Stáhněte AdwCleaner http://general-changelog-team.fr/fr/dow ... adwcleaner
Uložte na plochu
Ukončete všechny programy
Klikněte nejprve na >Scan< a pak na >Clean<.
Proběhne skenováni a pak se objeví log, který sem vložte.

Juraj1973 · #5 Příspěvek od **Juraj1973** » 04 pro 2014 22:55

# AdwCleaner v4.103 - Report created 04/12/2014 at 22:44:44
# Updated 01/12/2014 by Xplode
# Database : 2014-12-01.1 [Local]
# Operating System : Microsoft Windows XP Service Pack 3 (32 bits)
# Username : Admin - FUJITSUSIEMENS
# Running from : C:\Documents and Settings\Admin\Desktop\adwcleaner_4.103.exe
# Option : Clean

***** [ Services ] *****

***** [ Files / Folders ] *****

***** [ Scheduled Tasks ] *****

***** [ Shortcuts ] *****

***** [ Registry ] *****

***** [ Browsers ] *****

-\\ Internet Explorer v6.0.2900.5512

-\\ Mozilla Firefox v32.0.3 (x86 sk)

-\\ Google Chrome v

[C:\Documents and Settings\Mimi_2\Local Settings\Application Data\Google\Chrome\User Data\Default\preferences] - Deleted [Startup_URLs] : hxxp://www.search.ask.com/?o=APN10645A&gct=hp& ... 30-308&t=4

*************************

AdwCleaner[R0].txt - [35107 octets] - [04/12/2014 19:00:25]
AdwCleaner[R1].txt - [1194 octets] - [04/12/2014 22:33:03]
AdwCleaner[R2].txt - [1193 octets] - [04/12/2014 22:35:40]
AdwCleaner[S0].txt - [34902 octets] - [04/12/2014 19:06:05]
AdwCleaner[S1].txt - [1118 octets] - [04/12/2014 22:44:44]

########## EOF - C:\AdwCleaner\AdwCleaner[S1].txt - [1178 octets] ##########

#6 Příspěvek od **Rudy** » 05 pro 2014 18:31

Poprosím o nový log RSIT.

Juraj1973 · #7 Příspěvek od **Juraj1973** » 05 pro 2014 19:24

Logfile of random's system information tool 1.10 (written by random/random)
Run by Admin at 2014-12-05 19:22:54
Systém Microsoft Windows XP Home Edition Service Pack 3
System drive C: has 600 MB (2%) free of 38 GB
Total RAM: 3062 MB (78% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 19:23:02, on 5.12.2014
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP3 (6.00.2900.5512)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\hkcmd.exe
C:\WINDOWS\system32\igfxpers.exe
C:\Program Files\Common Files\Java\Java Update\jusched.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Skype\Phone\Skype.exe
C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe
C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\mdm.exe
C:\Program Files\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\TeamViewer\TeamViewer_Service.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\Program Files\Common Files\Java\Java Update\jucheck.exe
C:\WINDOWS\system32\wuauclt.exe
C:\WINDOWS\system32\wuauclt.exe
C:\Program Files\TeamViewer\TeamViewer.exe
C:\Program Files\TeamViewer\tv_w32.exe
c:\program files\teamviewer\TeamViewer_Desktop.exe
C:\Documents and Settings\Admin\Desktop\RSIT.exe
C:\Program Files\trend micro\Admin.exe

R3 - Default URLSearchHook is missing
O2 - BHO: Adobe PDF Link Helper - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: Softonic-Eng7 - {414b6d9d-4a95-4e8d-b5b1-149dd2d93bb3} - (no file)
O2 - BHO: BrotherSoft Extreme - {51a86bb3-6602-4c85-92a5-130ee4864f13} - C:\Program Files\BrotherSoft_Extreme\prxtbBrot.dll
O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - (no file)
O2 - BHO: Search Helper - {6EBF7485-159F-4bff-A14F-B9E3AAC4465B} - C:\Program Files\Microsoft\Search Enhancement Pack\Search Helper\SearchHelper.dll
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll
O2 - BHO: GdfrDUEn - {A3CF7606-E683-4375-A372-96B75DA0AEF7} - (no file)
O2 - BHO: MediaBar - {ABB49B3B-AB7D-4ED0-9135-93FD5AA4F69F} - (no file)
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll
O2 - BHO: (no name) - {E15A8DC0-8516-42A1-81EA-DC94EC1ACF10} - (no file)
O3 - Toolbar: (no name) - {21FA44EF-376D-4D53-9B0F-8A89D3229068} - (no file)
O3 - Toolbar: (no name) - {ABB49B3B-AB7D-4ED0-9135-93FD5AA4F69F} - (no file)
O3 - Toolbar: (no name) - {414b6d9d-4a95-4e8d-b5b1-149dd2d93bb3} - (no file)
O3 - Toolbar: BrotherSoft Extreme Toolbar - {51a86bb3-6602-4c85-92a5-130ee4864f13} - C:\Program Files\BrotherSoft_Extreme\prxtbBrot.dll
O4 - HKLM\..\Run: [igfxtray] C:\WINDOWS\system32\igfxtray.exe
O4 - HKLM\..\Run: [igfxhkcmd] C:\WINDOWS\system32\hkcmd.exe
O4 - HKLM\..\Run: [igfxpers] C:\WINDOWS\system32\igfxpers.exe
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [APSDaemon] "C:\Program Files\Common Files\Apple\Apple Application Support\APSDaemon.exe"
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Common Files\Java\Java Update\jusched.exe"
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [egui] "C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe" /hide /waitservice
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [Xfmqmn] C:\Documents and Settings\Admin\Application Data\Xfmqmn.exe
O4 - HKCU\..\Run: [Skype] "C:\Program Files\Skype\Phone\Skype.exe" /minimized /regrun
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe (User 'SYSTEM')
O4 - HKUS\S-1-5-18\..\RunOnce: [RunNarrator] Narrator.exe (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe (User 'Default user')
O4 - HKUS\.DEFAULT\..\RunOnce: [RunNarrator] Narrator.exe (User 'Default user')
O8 - Extra context menu item: E&xportovať do programu Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000
O9 - Extra button: Blog This - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\WINDOWS\system32\shdocvw.dll
O9 - Extra 'Tools' menuitem: &Blog This in Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\WINDOWS\system32\shdocvw.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O22 - SharedTaskScheduler: Browseui preloader - {438755C2-A8BA-11D1-B96B-00A0C90312E1} - C:\WINDOWS\system32\browseui.dll
O22 - SharedTaskScheduler: Component Categories cache daemon - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\WINDOWS\system32\browseui.dll
O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
O23 - Service: Bonjour Service - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: ESET Service (ekrn) - ESET - C:\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe
O23 - Service: iPod Service - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Mozilla Foundation - C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe
O23 - Service: TeamViewer 10 (TeamViewer) - TeamViewer GmbH - C:\Program Files\TeamViewer\TeamViewer_Service.exe
O24 - Desktop Component 0: (no name) - http://www.kovozvar.sk/kovozvar/album/B ... ok_005.JPG

--
End of file - 6420 bytes

======Scheduled tasks folder======

C:\WINDOWS\tasks\AppleSoftwareUpdate.job - C:\Program Files\Apple Software Update\SoftwareUpdate.exe -task
C:\WINDOWS\tasks\FacebookUpdateTaskUserS-1-5-21-839522115-1214440339-682003330-1008Core.job - C:\Documents and Settings\Mimi_2\Local Settings\Application Data\Facebook\Update\FacebookUpdate.exe /c /nocrashserver
C:\WINDOWS\tasks\FacebookUpdateTaskUserS-1-5-21-839522115-1214440339-682003330-1008UA.job - C:\Documents and Settings\Mimi_2\Local Settings\Application Data\Facebook\Update\FacebookUpdate.exe /ua /installsource scheduler
C:\WINDOWS\tasks\Microsoft Windows XP End of Service Notification Logon.job - C:\WINDOWS\system32\xp_eos.exe -c
C:\WINDOWS\tasks\Microsoft Windows XP End of Service Notification Monthly.job - C:\WINDOWS\system32\xp_eos.exe

=========Mozilla firefox=========

ProfilePath - C:\Documents and Settings\Admin\Application Data\Mozilla\Firefox\Profiles\arztdx66.default

prefs.js - "browser.search.useDBForOrder" - true
prefs.js - "extensions.enabledItems" - "{20a82645-c095-46ed-80e3-08825760534b}:1.1, {B13721C7-F507-4982-B2E5-502A71474FED}:3.3.0.3971, {1FD91A9C-410C-4090-BBCC-55D3450EF433}:2.0, {28D35620-51D9-11DE-9D13-2DB156D89593}:3.1, {7FF99715-3016-4381-84CE-E4E4C9673020}:1.0, {972ce4c6-7e08-4474-a285-3208198ce6fd}:3.6.13"

"{20a82645-c095-46ed-80e3-08825760534b}"=c:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@Apple.com/iTunes,version=]
"Description"=Doplnok iTunes Detector
"Path"=

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@Apple.com/iTunes,version=1.0]
"Description"=
"Path"=C:\Program Files\iTunes\Mozilla Plugins\npitunes.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@java.com/DTPlugin,version=10.45.2]
"Description"=Java™ Deployment Toolkit
"Path"=C:\Program Files\Java\jre7\bin\dtplugin\npDeployJava1.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@java.com/JavaPlugin,version=10.45.2]
"Description"=Oracle® Next Generation Java™ Plug-In
"Path"=C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@microsoft.com/WLPG,version=14.0.8117.0416]
"Description"=WLPG Install MIME type
"Path"=C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@microsoft.com/WPF,version=3.5]
"Description"=Windows Presentation Foundation plug-in for Mozilla browsers
"Path"=c:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll

C:\Program Files\Mozilla Firefox\extensions\
{B13721C7-F507-4982-B2E5-502A71474FED}

C:\Program Files\Mozilla Firefox\components\
aboutCertError.js.moz-backup
aboutPrivateBrowsing.js.moz-backup
aboutRights.js.moz-backup
aboutRobots.js.moz-backup
aboutSessionRestore.js.moz-backup
FeedProcessor.js.moz-backup
fuelApplication.js.moz-backup
NetworkGeolocationProvider.js.moz-backup
nsBadCertHandler.js.moz-backup
nsContentDispatchChooser.js.moz-backup
nsContentPrefService.js.moz-backup
nsDownloadManagerUI.js.moz-backup
nsHandlerService.js.moz-backup
nsLoginInfo.js.moz-backup
nsLoginManager.js.moz-backup
nsLoginManagerPrompter.js.moz-backup
nsPlacesDBFlush.js.moz-backup
nsPlacesTransactionsService.js.moz-backup
nsPostUpdateWin.js.moz-backup
nsProxyAutoConfig.js.moz-backup
nsSearchSuggestions.js.moz-backup
nsSetDefaultBrowser.js.moz-backup
nsTaggingService.js.moz-backup
nsTryToClose.js.moz-backup
nsWebHandlerApp.js.moz-backup
pluginGlue.js.moz-backup
storage-Legacy.js.moz-backup
storage-mozStorage.js.moz-backup
txEXSLTRegExFunctions.js.moz-backup

C:\Program Files\Mozilla Firefox\plugins\
NPOFF12.DLL
nppdf32.dll

C:\Program Files\Mozilla Firefox\searchplugins\
atlas-sk.xml.moz-backup
azet-sk.xml.moz-backup
dunaj-sk.xml.moz-backup
eBay.xml.moz-backup
google.xml.moz-backup
slovnik-sk.xml.moz-backup
wikipedia-sk.xml.moz-backup
zoznam-sk.xml.moz-backup

C:\Documents and Settings\Admin\Application Data\Mozilla\Firefox\Profiles\arztdx66.default\extensions\
{28D35620-51D9-11DE-9D13-2DB156D89593}

C:\Documents and Settings\Admin\Application Data\Mozilla\Firefox\Profiles\arztdx66.default\searchplugins\
mj-snr.xml

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
Adobe PDF Link Helper - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2009-02-27 75128]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{414b6d9d-4a95-4e8d-b5b1-149dd2d93bb3}]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{51a86bb3-6602-4c85-92a5-130ee4864f13}]
BrotherSoft Extreme Toolbar - C:\Program Files\BrotherSoft_Extreme\prxtbBrot.dll [2011-03-28 176936]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{5C255C8A-E604-49b4-9D64-90988571CECB}]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{6EBF7485-159F-4bff-A14F-B9E3AAC4465B}]
Search Helper - C:\Program Files\Microsoft\Search Enhancement Pack\Search Helper\SearchHelper.dll [2009-01-14 92504]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
Java(tm) Plug-In SSV Helper - C:\Program Files\Java\jre7\bin\ssv.dll [2013-10-08 462760]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{A3CF7606-E683-4375-A372-96B75DA0AEF7}]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{ABB49B3B-AB7D-4ED0-9135-93FD5AA4F69F}]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre7\bin\jp2ssv.dll [2013-10-08 171944]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{E15A8DC0-8516-42A1-81EA-DC94EC1ACF10}]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{21FA44EF-376D-4D53-9B0F-8A89D3229068}
{ABB49B3B-AB7D-4ED0-9135-93FD5AA4F69F}
{414b6d9d-4a95-4e8d-b5b1-149dd2d93bb3}
{51a86bb3-6602-4c85-92a5-130ee4864f13} - BrotherSoft Extreme Toolbar - C:\Program Files\BrotherSoft_Extreme\prxtbBrot.dll [2011-03-28 176936]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"igfxtray"=C:\WINDOWS\system32\igfxtray.exe [2006-02-07 94208]
"igfxhkcmd"=C:\WINDOWS\system32\hkcmd.exe [2006-02-07 77824]
"igfxpers"=C:\WINDOWS\system32\igfxpers.exe [2006-02-07 118784]
"Adobe Reader Speed Launcher"=C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe [2009-02-27 35696]
"NeroFilterCheck"=C:\WINDOWS\system32\NeroCheck.exe [2001-07-09 155648]
"APSDaemon"=C:\Program Files\Common Files\Apple\Apple Application Support\APSDaemon.exe [2014-02-06 43848]
"SunJavaUpdateSched"=C:\Program Files\Common Files\Java\Java Update\jusched.exe [2013-07-02 254336]
"iTunesHelper"=C:\Program Files\iTunes\iTunesHelper.exe [2014-02-06 152392]
"egui"=C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe [2014-10-01 5088456]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"ctfmon.exe"=C:\WINDOWS\system32\ctfmon.exe [2008-04-14 15360]
"Xfmqmn"=C:\Documents and Settings\Admin\Application Data\Xfmqmn.exe []
"Skype"=C:\Program Files\Skype\Phone\Skype.exe [2014-05-08 21444224]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\igfxcui]
C:\WINDOWS\system32\igfxdev.dll [2006-02-07 139264]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=145

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"HonorAutoRunSetting"=1

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"C:\Program Files\Microsoft Office\Office12\OUTLOOK.EXE"="C:\Program Files\Microsoft Office\Office12\OUTLOOK.EXE:*:Enabled:Microsoft Office Outlook"
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"C:\Program Files\Windows Live\Messenger\wlcsdk.exe"="C:\Program Files\Windows Live\Messenger\wlcsdk.exe:*:Enabled:Windows Live Call"
"C:\Program Files\Windows Live\Messenger\msnmsgr.exe"="C:\Program Files\Windows Live\Messenger\msnmsgr.exe:*:Enabled:Windows Live Messenger"
"C:\Program Files\Skype\Plugin Manager\skypePM.exe"="C:\Program Files\Skype\Plugin Manager\skypePM.exe:*:Enabled:Skype Extras Manager"
"C:\Program Files\Google\Google Earth\client\googleearth.exe"="C:\Program Files\Google\Google Earth\client\googleearth.exe:*:Disabled:Google Earth"
"C:\Program Files\iMesh Applications\iMesh\iMesh.exe"="C:\Program Files\iMesh Applications\iMesh\iMesh.exe:*:Enabled:iMesh"
"C:\Documents and Settings\Mimi\My Documents\Downloads\SweetImSetup.exe"="C:\Documents and Settings\Mimi\My Documents\Downloads\SweetImSetup.exe:*:Enabled:SweetIM Installer"
"C:\Program Files\Pinnacle\VideoSpin\Programs\RM.exe"="C:\Program Files\Pinnacle\VideoSpin\Programs\RM.exe:*:Enabled:Render Manager"
"C:\Program Files\Pinnacle\VideoSpin\Programs\umi.exe"="C:\Program Files\Pinnacle\VideoSpin\Programs\umi.exe:*:Enabled:umi"
"C:\Program Files\Pinnacle\VideoSpin\Programs\VideoSpin.exe"="C:\Program Files\Pinnacle\VideoSpin\Programs\VideoSpin.exe:*:Enabled:Pinnacle VideoSpin"
"C:\Documents and Settings\All Users\Application Data\SweetIM\Messenger\update\sweetimsetup.exe"="C:\Documents and Settings\All Users\Application Data\SweetIM\Messenger\update\sweetimsetup.exe:*:Enabled:SweetIM Installer"
"C:\Program Files\Sega\Virtua Tennis 4\VT4.exe"="C:\Program Files\Sega\Virtua Tennis 4\VT4.exe:*:Enabled:Virtua Tennis 4™"
"C:\Documents and Settings\Guest\Local Settings\Application Data\Skype\Phone\Skype.exe"="C:\Documents and Settings\Guest\Local Settings\Application Data\Skype\Phone\Skype.exe:*:Enabled:Skype"
"C:\Program Files\Bonjour\mDNSResponder.exe"="C:\Program Files\Bonjour\mDNSResponder.exe:*:Enabled:Bonjour Service"
"C:\Program Files\iTunes\iTunes.exe"="C:\Program Files\iTunes\iTunes.exe:*:Enabled:iTunes"
"C:\Program Files\Movies Toolbar\Datamngr\SRTOOL~1\IE\dtuser.exe"="C:\Program Files\Movies Toolbar\Datamngr\SRTOOL~1\IE\dtuser.exe:*:Enabled:Movies Toolbar (Dist. by Bandoo Media, Inc.) DTX Broker"
"C:\Program Files\Skype\Phone\Skype.exe"="C:\Program Files\Skype\Phone\Skype.exe:*:Enabled:Skype"
"C:\Documents and Settings\Guest\Local Settings\Application Data\Facebook\Video\Skype\FacebookVideoCalling.exe"="C:\Documents and Settings\Guest\Local Settings\Application Data\Facebook\Video\Skype\FacebookVideoCalling.exe:*:Enabled:Facebook Video Calling Plugin"
"C:\Program Files\TeamViewer\TeamViewer.exe"="C:\Program Files\TeamViewer\TeamViewer.exe:*:Enabled:Teamviewer Remote Control Application"
"C:\Program Files\TeamViewer\TeamViewer_Service.exe"="C:\Program Files\TeamViewer\TeamViewer_Service.exe:*:Enabled:Teamviewer Remote Control Service"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"C:\Program Files\Windows Live\Messenger\wlcsdk.exe"="C:\Program Files\Windows Live\Messenger\wlcsdk.exe:*:Enabled:Windows Live Call"
"C:\Program Files\Windows Live\Messenger\msnmsgr.exe"="C:\Program Files\Windows Live\Messenger\msnmsgr.exe:*:Enabled:Windows Live Messenger"
"C:\Program Files\iMesh Applications\iMesh\iMesh.exe"="C:\Program Files\iMesh Applications\iMesh\iMesh.exe:*:Enabled:iMesh"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"midimapper"=midimap.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msadpcm"=msadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.trspch"=tssoft32.acm
"vidc.cvid"=iccvid.dll
"VIDC.I420"=lvcodec2.dll
"vidc.iv31"=ir32_32.dll
"vidc.iv32"=ir32_32.dll
"vidc.iv41"=ir41_32.ax
"VIDC.IYUV"=iyuv_32.dll
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"VIDC.UYVY"=msyuv.dll
"VIDC.YUY2"=msyuv.dll
"VIDC.YVU9"=tsbyuv.dll
"VIDC.YVYU"=msyuv.dll
"wavemapper"=msacm32.drv
"msacm.msg723"=msg723.acm
"vidc.M263"=msh263.drv
"vidc.M261"=msh261.drv
"msacm.msaudio1"=msaud32.acm
"msacm.sl_anet"=sl_anet.acm
"msacm.iac2"=C:\WINDOWS\system32\iac25_32.ax
"vidc.iv50"=ir50_32.dll
"msacm.l3acm"=C:\WINDOWS\system32\l3codeca.acm
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"vidc.ffds"=ffdshow.ax
"msacm.ac3filter"=ac3filter.acm
"vidc.VP60"=C:\WINDOWS\system32\vp6vfw.dll
"vidc.VP61"=C:\WINDOWS\system32\vp6vfw.dll
"msacm.siren"=sirenacm.dll
"vidc.mjpg"=pvmjpg30.dll
"VIDC.FMVC"=fmcodec.dll
"MSVideo8"=VfWWDM32.dll
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"aux"=wdmaud.drv
"MSVideo"=vfwwdm32.dll

======List of files/folders created in the last 1 month======

2014-12-04 21:53:38 ----D---- C:\Program Files\trend micro
2014-12-04 21:53:37 ----D---- C:\rsit
2014-12-04 19:26:02 ----D---- C:\Documents and Settings\Admin\Application Data\Malwarebytes
2014-12-04 19:25:46 ----D---- C:\Program Files\Malwarebytes' Anti-Malware
2014-12-04 19:25:46 ----A---- C:\WINDOWS\system32\drivers\mbam.sys
2014-12-04 19:00:19 ----D---- C:\AdwCleaner
2014-12-04 18:40:31 ----D---- C:\Documents and Settings\All Users\Application Data\Malwarebytes
2014-12-03 19:30:54 ----D---- C:\Program Files\ESET
2014-12-03 19:14:15 ----D---- C:\Program Files\TeamViewer
2014-12-03 19:05:26 ----D---- C:\Program Files\CCleaner
2014-12-03 19:02:12 ----D---- C:\Program Files\Mozilla Maintenance Service
2014-12-03 19:02:12 ----D---- C:\Documents and Settings\All Users\Application Data\Mozilla
2014-11-23 17:44:05 ----D---- C:\cc3779aab551a07f0247328ec8
2014-11-11 17:39:56 ----D---- C:\Program Files\GUM5FE.tmp

======List of files/folders modified in the last 1 month======

2014-12-05 19:19:47 ----D---- C:\WINDOWS\Temp
2014-12-05 14:20:28 ----D---- C:\WINDOWS\Prefetch
2014-12-05 14:15:26 ----D---- C:\Documents and Settings\Admin\Application Data\Skype
2014-12-04 23:35:00 ----A---- C:\WINDOWS\SchedLgU.Txt
2014-12-04 21:53:38 ----D---- C:\Program Files
2014-12-04 21:09:11 ----HDC---- C:\WINDOWS\$NtUninstallKB2695962$
2014-12-04 21:09:11 ----D---- C:\WINDOWS\system32\drivers
2014-12-04 19:06:48 ----D---- C:\WINDOWS\system32
2014-12-04 19:06:13 ----D---- C:\Documents and Settings\All Users\Application Data\ICQ
2014-12-04 18:28:39 ----D---- C:\Program Files\Common Files\Microsoft Shared
2014-12-04 18:25:58 ----SHD---- C:\WINDOWS\Installer
2014-12-04 18:25:58 ----D---- C:\Documents and Settings\All Users\Application Data\Microsoft Help
2014-12-03 19:41:55 ----D---- C:\WINDOWS
2014-12-03 19:34:17 ----HD---- C:\WINDOWS\inf
2014-12-03 19:34:08 ----D---- C:\WINDOWS\system32\CatRoot2
2014-12-03 19:29:32 ----A---- C:\WINDOWS\win.ini
2014-12-03 19:14:39 ----RSD---- C:\WINDOWS\Fonts
2014-12-03 19:11:07 ----D---- C:\Documents and Settings\All Users\Application Data\BlueStacksSetup
2014-12-03 19:10:24 ----D---- C:\WINDOWS\Minidump
2014-12-03 19:10:24 ----D---- C:\WINDOWS\Logs
2014-12-03 19:10:24 ----D---- C:\WINDOWS\Debug
2014-12-03 19:01:43 ----D---- C:\Program Files\Mozilla Firefox
2014-12-03 18:02:57 ----D---- C:\Documents and Settings\All Users\Application Data\0df3a3ff-f340-47c8-bd12-69f1b8f009ac
2014-11-25 17:04:13 ----SD---- C:\Documents and Settings\Admin\Application Data\Microsoft
2014-11-25 17:02:08 ----SD---- C:\WINDOWS\Tasks
2014-11-25 17:02:08 ----D---- C:\Program Files\Google
2014-11-25 08:26:35 ----D---- C:\Program Files\ToggleEN
2014-11-15 20:05:26 ----D---- C:\Documents and Settings

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R1 eamonm;eamonm; C:\WINDOWS\system32\DRIVERS\eamonm.sys [2014-10-10 191928]
R1 ehdrv;ehdrv; C:\WINDOWS\system32\DRIVERS\ehdrv.sys [2014-10-10 135296]
R1 epfwtdir;epfwtdir; C:\WINDOWS\system32\DRIVERS\epfwtdir.sys [2014-10-10 119792]
R1 intelppm;Intel Processor Driver; C:\WINDOWS\system32\DRIVERS\intelppm.sys [2008-04-13 36352]
R2 fssfltr;FssFltr; C:\WINDOWS\system32\DRIVERS\fssfltr_tdi.sys [2010-04-28 54760]
R3 b57w2k;Broadcom NetXtreme Gigabit Ethernet; C:\WINDOWS\system32\DRIVERS\b57xp32.sys [2004-06-19 190336]
R3 GEARAspiWDM;GEAR ASPI Filter Driver; C:\WINDOWS\system32\DRIVERS\GEARAspiWDM.sys [2012-08-21 26840]
R3 HidUsb;Microsoft HID Class Driver; C:\WINDOWS\system32\DRIVERS\hidusb.sys [2008-04-13 10368]
R3 ialm;ialm; C:\WINDOWS\system32\DRIVERS\ialmnt5.sys [2006-02-07 1399615]
R3 mouhid;Mouse HID Driver; C:\WINDOWS\system32\DRIVERS\mouhid.sys [2001-08-17 12160]
R3 smwdm;smwdm; C:\WINDOWS\system32\drivers\smwdm.sys [2004-07-08 267392]
R3 usbuhci;Microsoft USB Universal Host Controller Miniport Driver; C:\WINDOWS\system32\DRIVERS\usbuhci.sys [2008-04-13 20608]
S1 kbdhid;Keyboard HID Driver; C:\WINDOWS\system32\DRIVERS\kbdhid.sys [2008-04-13 14592]
S3 AX88772;USB2.0 to Fast Ethernet Adapter; C:\WINDOWS\system32\DRIVERS\ax88772.sys [2009-09-03 46720]
S3 CCDECODE;Closed Caption Decoder; C:\WINDOWS\system32\DRIVERS\CCDECODE.sys [2004-07-09 16384]
S3 FlrnUSB;Leadtek USB Network Interface; C:\WINDOWS\system32\DRIVERS\LtkUSB.sys [2010-09-13 41907]
S3 hwdatacard;Huawei DataCard USB Modem and USB Serial; C:\WINDOWS\system32\DRIVERS\ewusbmdm.sys []
S3 massfilter_hs;ZTE HandSet Mass Storage Filter Driver; C:\WINDOWS\system32\drivers\massfilter_hs.sys [2011-02-15 9216]
S3 MSTEE;Microsoft Streaming Tee/Sink-to-Sink Converter; C:\WINDOWS\system32\drivers\MSTEE.sys [2002-12-12 5504]
S3 NABTSFEC;NABTS/FEC VBI Codec; C:\WINDOWS\system32\DRIVERS\NABTSFEC.sys [2004-07-09 83968]
S3 NdisIP;Microsoft TV/Video Connection; C:\WINDOWS\system32\DRIVERS\NdisIP.sys [2004-07-09 10112]
S3 PID_PEPI;Logitech QuickCam IM(PID_PEPI); C:\WINDOWS\system32\DRIVERS\LV302V32.SYS [2009-04-30 2687512]
S3 SLIP;BDA Slip De-Framer; C:\WINDOWS\system32\DRIVERS\SLIP.sys [2004-07-09 10880]
S3 streamip;BDA IPSink; C:\WINDOWS\system32\DRIVERS\StreamIP.sys [2004-07-09 14976]
S3 USBAAPL;Apple Mobile USB Driver; C:\WINDOWS\System32\Drivers\usbaapl.sys [2013-03-18 45056]
S3 usbaudio;USB Audio Driver (WDM); C:\WINDOWS\system32\drivers\usbaudio.sys [2013-07-17 60160]
S3 usbccgp;Microsoft USB Generic Parent Driver; C:\WINDOWS\system32\DRIVERS\usbccgp.sys [2013-08-09 32384]
S3 usbscan;USB Scanner Driver; C:\WINDOWS\system32\DRIVERS\usbscan.sys [2013-07-03 14976]
S3 USBSTOR;USB Mass Storage Driver; C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS [2008-04-13 26368]
S3 usbvideo;USB Video Device (WDM); C:\WINDOWS\System32\Drivers\usbvideo.sys [2013-07-17 123008]
S3 WSTCODEC;World Standard Teletext Codec; C:\WINDOWS\system32\DRIVERS\WSTCODEC.SYS [2004-07-09 18688]
S3 zgwhsdiag;HSPA WCDMA Handset Diagnostic Port; C:\WINDOWS\system32\DRIVERS\gwhsdiag.sys [2011-02-15 106240]
S3 zgwhsmdm;HSPAHandSet WCDMA Handset USB Modem; C:\WINDOWS\system32\DRIVERS\gwhsmdm.sys [2011-02-15 106240]
S3 zgwhsnmea;WCDMA Handset NMEA Port; C:\WINDOWS\system32\DRIVERS\gwhsnmea.sys [2011-02-15 106240]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 Apple Mobile Device;Apple Mobile Device; C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe [2014-01-07 43336]
R2 Bonjour Service;Bonjour Service; C:\Program Files\Bonjour\mDNSResponder.exe [2011-08-30 390504]
R2 ekrn;ESET Service; C:\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe [2014-10-01 1349576]
R2 MDM;Machine Debug Manager; C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\mdm.exe [2006-10-26 335872]
R2 SeaPort;SeaPort; C:\Program Files\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe [2009-01-14 226656]
R2 TeamViewer;TeamViewer 10; C:\Program Files\TeamViewer\TeamViewer_Service.exe [2014-11-28 5419792]
R3 iPod Service;iPod Service; C:\Program Files\iPod\bin\iPodService.exe [2014-02-06 553288]
S3 aspnet_state;ASP.NET State Service; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe [2008-07-25 34312]
S3 clr_optimization_v2.0.50727_32;.NET Runtime Optimization Service v2.0.50727_X86; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe [2008-07-25 69632]
S3 FontCache3.0.0.0;Windows Presentation Foundation Font Cache 3.0.0.0; c:\WINDOWS\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe [2008-07-29 46104]
S3 idsvc;Windows CardSpace; c:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe [2008-07-29 881664]
S3 MozillaMaintenance;Mozilla Maintenance Service; C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe [2014-09-24 114288]
S3 odserv;Microsoft Office Diagnostics Service; C:\Program Files\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE [2008-11-04 441712]
S3 ose;Office Source Engine; C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2006-10-26 145184]
S4 NetTcpPortSharing;Net.Tcp Port Sharing Service; c:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe [2008-07-29 132096]

-----------------EOF-----------------

#8 Příspěvek od **Rudy** » 05 pro 2014 20:07

Stáhněte OTM: http://oldtimer.geekstogo.com/OTM.exe a uložte na plochu. Spusťte a do levého okna zkopírujte:

:files
C:\Documents and Settings\Admin\Application Data\Xfmqmn.exe
C:\WINDOWS\tasks\FacebookUpdateTaskUserS-1-5-21-839522115-1214440339-682003330-1008Core.job
C:\WINDOWS\tasks\FacebookUpdateTaskUserS-1-5-21-839522115-1214440339-682003330-1008UA.job
C:\Program Files\GUM5FE.tmp

:reg
[-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{414b6d9d-4a95-4e8d-b5b1-149dd2d93bb3}]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{5C255C8A-E604-49b4-9D64-90988571CECB}]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{A3CF7606-E683-4375-A372-96B75DA0AEF7}]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{ABB49B3B-AB7D-4ED0-9135-93FD5AA4F69F}]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{E15A8DC0-8516-42A1-81EA-DC94EC1ACF10}]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"SunJavaUpdateSched"=-
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"Xfmqmn"=-

:services
SeaPort

:commands
[Purity]
[Emptytemp]
[Emptyflash]

a klikněte na >MoveIt!<. Po skenu restartujte PC a dejte nový log RSIT.

Juraj1973 · #9 Příspěvek od **Juraj1973** » 05 pro 2014 21:00

dúfam že to prebehlo o.k. lebo PC obsluhijem cez teamviewer a počas výkonu ma prerušilo, keď som sa prihlásil tak už na ľavej strane OTM nič nebolo a na pravej niečo červenými písmenami no keď som to minimalizoval tak mi ostala prazdna plocha a PC sa muselo reštartovať tlačidlom

tu je RSIT
Logfile of random's system information tool 1.10 (written by random/random)
Run by Admin at 2014-12-05 20:57:00
Systém Microsoft Windows XP Home Edition Service Pack 3
System drive C: has 2 GB (5%) free of 38 GB
Total RAM: 3062 MB (80% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 20:57:13, on 5.12.2014
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP3 (6.00.2900.5512)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\hkcmd.exe
C:\WINDOWS\system32\igfxpers.exe
C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Skype\Phone\Skype.exe
C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe
C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\mdm.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\TeamViewer\TeamViewer_Service.exe
C:\WINDOWS\system32\wuauclt.exe
C:\Program Files\TeamViewer\TeamViewer.exe
C:\Program Files\TeamViewer\tv_w32.exe
C:\Program Files\iPod\bin\iPodService.exe
c:\program files\teamviewer\TeamViewer_Desktop.exe
C:\WINDOWS\system32\wuauclt.exe
C:\Documents and Settings\Admin\Desktop\RSIT.exe
C:\Program Files\trend micro\Admin.exe

R3 - Default URLSearchHook is missing
O2 - BHO: Adobe PDF Link Helper - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: BrotherSoft Extreme - {51a86bb3-6602-4c85-92a5-130ee4864f13} - C:\Program Files\BrotherSoft_Extreme\prxtbBrot.dll
O2 - BHO: Search Helper - {6EBF7485-159F-4bff-A14F-B9E3AAC4465B} - C:\Program Files\Microsoft\Search Enhancement Pack\Search Helper\SearchHelper.dll
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll
O4 - HKLM\..\Run: [igfxtray] C:\WINDOWS\system32\igfxtray.exe
O4 - HKLM\..\Run: [igfxhkcmd] C:\WINDOWS\system32\hkcmd.exe
O4 - HKLM\..\Run: [igfxpers] C:\WINDOWS\system32\igfxpers.exe
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [APSDaemon] "C:\Program Files\Common Files\Apple\Apple Application Support\APSDaemon.exe"
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [egui] "C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe" /hide /waitservice
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [Skype] "C:\Program Files\Skype\Phone\Skype.exe" /minimized /regrun
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe (User 'SYSTEM')
O4 - HKUS\S-1-5-18\..\RunOnce: [RunNarrator] Narrator.exe (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe (User 'Default user')
O4 - HKUS\.DEFAULT\..\RunOnce: [RunNarrator] Narrator.exe (User 'Default user')
O8 - Extra context menu item: E&xportovať do programu Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000
O9 - Extra button: Blog This - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\WINDOWS\system32\shdocvw.dll
O9 - Extra 'Tools' menuitem: &Blog This in Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\WINDOWS\system32\shdocvw.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O22 - SharedTaskScheduler: Browseui preloader - {438755C2-A8BA-11D1-B96B-00A0C90312E1} - C:\WINDOWS\system32\browseui.dll
O22 - SharedTaskScheduler: Component Categories cache daemon - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\WINDOWS\system32\browseui.dll
O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
O23 - Service: Bonjour Service - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: ESET Service (ekrn) - ESET - C:\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe
O23 - Service: iPod Service - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Mozilla Foundation - C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe
O23 - Service: TeamViewer 10 (TeamViewer) - TeamViewer GmbH - C:\Program Files\TeamViewer\TeamViewer_Service.exe
O24 - Desktop Component 0: (no name) - http://www.kovozvar.sk/kovozvar/album/B ... ok_005.JPG

--
End of file - 5352 bytes

======Scheduled tasks folder======

C:\WINDOWS\tasks\AppleSoftwareUpdate.job - C:\Program Files\Apple Software Update\SoftwareUpdate.exe -task
C:\WINDOWS\tasks\Microsoft Windows XP End of Service Notification Logon.job - C:\WINDOWS\system32\xp_eos.exe -c
C:\WINDOWS\tasks\Microsoft Windows XP End of Service Notification Monthly.job - C:\WINDOWS\system32\xp_eos.exe

=========Mozilla firefox=========

ProfilePath - C:\Documents and Settings\Admin\Application Data\Mozilla\Firefox\Profiles\arztdx66.default

prefs.js - "browser.search.useDBForOrder" - true
prefs.js - "extensions.enabledItems" - "{20a82645-c095-46ed-80e3-08825760534b}:1.1, {B13721C7-F507-4982-B2E5-502A71474FED}:3.3.0.3971, {1FD91A9C-410C-4090-BBCC-55D3450EF433}:2.0, {28D35620-51D9-11DE-9D13-2DB156D89593}:3.1, {7FF99715-3016-4381-84CE-E4E4C9673020}:1.0, {972ce4c6-7e08-4474-a285-3208198ce6fd}:3.6.13"

"{20a82645-c095-46ed-80e3-08825760534b}"=c:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@Apple.com/iTunes,version=]
"Description"=Doplnok iTunes Detector
"Path"=

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@Apple.com/iTunes,version=1.0]
"Description"=
"Path"=C:\Program Files\iTunes\Mozilla Plugins\npitunes.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@java.com/DTPlugin,version=10.45.2]
"Description"=Java™ Deployment Toolkit
"Path"=C:\Program Files\Java\jre7\bin\dtplugin\npDeployJava1.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@java.com/JavaPlugin,version=10.45.2]
"Description"=Oracle® Next Generation Java™ Plug-In
"Path"=C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@microsoft.com/WLPG,version=14.0.8117.0416]
"Description"=WLPG Install MIME type
"Path"=C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@microsoft.com/WPF,version=3.5]
"Description"=Windows Presentation Foundation plug-in for Mozilla browsers
"Path"=c:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll

C:\Program Files\Mozilla Firefox\extensions\
{B13721C7-F507-4982-B2E5-502A71474FED}

C:\Program Files\Mozilla Firefox\components\
aboutCertError.js.moz-backup
aboutPrivateBrowsing.js.moz-backup
aboutRights.js.moz-backup
aboutRobots.js.moz-backup
aboutSessionRestore.js.moz-backup
FeedProcessor.js.moz-backup
fuelApplication.js.moz-backup
NetworkGeolocationProvider.js.moz-backup
nsBadCertHandler.js.moz-backup
nsContentDispatchChooser.js.moz-backup
nsContentPrefService.js.moz-backup
nsDownloadManagerUI.js.moz-backup
nsHandlerService.js.moz-backup
nsLoginInfo.js.moz-backup
nsLoginManager.js.moz-backup
nsLoginManagerPrompter.js.moz-backup
nsPlacesDBFlush.js.moz-backup
nsPlacesTransactionsService.js.moz-backup
nsPostUpdateWin.js.moz-backup
nsProxyAutoConfig.js.moz-backup
nsSearchSuggestions.js.moz-backup
nsSetDefaultBrowser.js.moz-backup
nsTaggingService.js.moz-backup
nsTryToClose.js.moz-backup
nsWebHandlerApp.js.moz-backup
pluginGlue.js.moz-backup
storage-Legacy.js.moz-backup
storage-mozStorage.js.moz-backup
txEXSLTRegExFunctions.js.moz-backup

C:\Program Files\Mozilla Firefox\plugins\
NPOFF12.DLL
nppdf32.dll

C:\Program Files\Mozilla Firefox\searchplugins\
atlas-sk.xml.moz-backup
azet-sk.xml.moz-backup
dunaj-sk.xml.moz-backup
eBay.xml.moz-backup
google.xml.moz-backup
slovnik-sk.xml.moz-backup
wikipedia-sk.xml.moz-backup
zoznam-sk.xml.moz-backup

C:\Documents and Settings\Admin\Application Data\Mozilla\Firefox\Profiles\arztdx66.default\extensions\
{28D35620-51D9-11DE-9D13-2DB156D89593}

C:\Documents and Settings\Admin\Application Data\Mozilla\Firefox\Profiles\arztdx66.default\searchplugins\
mj-snr.xml

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
Adobe PDF Link Helper - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2009-02-27 75128]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{51a86bb3-6602-4c85-92a5-130ee4864f13}]
BrotherSoft Extreme Toolbar - C:\Program Files\BrotherSoft_Extreme\prxtbBrot.dll [2011-03-28 176936]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{6EBF7485-159F-4bff-A14F-B9E3AAC4465B}]
Search Helper - C:\Program Files\Microsoft\Search Enhancement Pack\Search Helper\SearchHelper.dll [2009-01-14 92504]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
Java(tm) Plug-In SSV Helper - C:\Program Files\Java\jre7\bin\ssv.dll [2013-10-08 462760]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre7\bin\jp2ssv.dll [2013-10-08 171944]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"igfxtray"=C:\WINDOWS\system32\igfxtray.exe [2006-02-07 94208]
"igfxhkcmd"=C:\WINDOWS\system32\hkcmd.exe [2006-02-07 77824]
"igfxpers"=C:\WINDOWS\system32\igfxpers.exe [2006-02-07 118784]
"Adobe Reader Speed Launcher"=C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe [2009-02-27 35696]
"NeroFilterCheck"=C:\WINDOWS\system32\NeroCheck.exe [2001-07-09 155648]
"APSDaemon"=C:\Program Files\Common Files\Apple\Apple Application Support\APSDaemon.exe [2014-02-06 43848]
"iTunesHelper"=C:\Program Files\iTunes\iTunesHelper.exe [2014-02-06 152392]
"egui"=C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe [2014-10-01 5088456]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"ctfmon.exe"=C:\WINDOWS\system32\ctfmon.exe [2008-04-14 15360]
"Skype"=C:\Program Files\Skype\Phone\Skype.exe [2014-05-08 21444224]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\igfxcui]
C:\WINDOWS\system32\igfxdev.dll [2006-02-07 139264]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=145

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"HonorAutoRunSetting"=1

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"C:\Program Files\Microsoft Office\Office12\OUTLOOK.EXE"="C:\Program Files\Microsoft Office\Office12\OUTLOOK.EXE:*:Enabled:Microsoft Office Outlook"
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"C:\Program Files\Windows Live\Messenger\wlcsdk.exe"="C:\Program Files\Windows Live\Messenger\wlcsdk.exe:*:Enabled:Windows Live Call"
"C:\Program Files\Windows Live\Messenger\msnmsgr.exe"="C:\Program Files\Windows Live\Messenger\msnmsgr.exe:*:Enabled:Windows Live Messenger"
"C:\Program Files\Skype\Plugin Manager\skypePM.exe"="C:\Program Files\Skype\Plugin Manager\skypePM.exe:*:Enabled:Skype Extras Manager"
"C:\Program Files\Google\Google Earth\client\googleearth.exe"="C:\Program Files\Google\Google Earth\client\googleearth.exe:*:Disabled:Google Earth"
"C:\Program Files\iMesh Applications\iMesh\iMesh.exe"="C:\Program Files\iMesh Applications\iMesh\iMesh.exe:*:Enabled:iMesh"
"C:\Documents and Settings\Mimi\My Documents\Downloads\SweetImSetup.exe"="C:\Documents and Settings\Mimi\My Documents\Downloads\SweetImSetup.exe:*:Enabled:SweetIM Installer"
"C:\Program Files\Pinnacle\VideoSpin\Programs\RM.exe"="C:\Program Files\Pinnacle\VideoSpin\Programs\RM.exe:*:Enabled:Render Manager"
"C:\Program Files\Pinnacle\VideoSpin\Programs\umi.exe"="C:\Program Files\Pinnacle\VideoSpin\Programs\umi.exe:*:Enabled:umi"
"C:\Program Files\Pinnacle\VideoSpin\Programs\VideoSpin.exe"="C:\Program Files\Pinnacle\VideoSpin\Programs\VideoSpin.exe:*:Enabled:Pinnacle VideoSpin"
"C:\Documents and Settings\All Users\Application Data\SweetIM\Messenger\update\sweetimsetup.exe"="C:\Documents and Settings\All Users\Application Data\SweetIM\Messenger\update\sweetimsetup.exe:*:Enabled:SweetIM Installer"
"C:\Program Files\Sega\Virtua Tennis 4\VT4.exe"="C:\Program Files\Sega\Virtua Tennis 4\VT4.exe:*:Enabled:Virtua Tennis 4™"
"C:\Documents and Settings\Guest\Local Settings\Application Data\Skype\Phone\Skype.exe"="C:\Documents and Settings\Guest\Local Settings\Application Data\Skype\Phone\Skype.exe:*:Enabled:Skype"
"C:\Program Files\Bonjour\mDNSResponder.exe"="C:\Program Files\Bonjour\mDNSResponder.exe:*:Enabled:Bonjour Service"
"C:\Program Files\iTunes\iTunes.exe"="C:\Program Files\iTunes\iTunes.exe:*:Enabled:iTunes"
"C:\Program Files\Movies Toolbar\Datamngr\SRTOOL~1\IE\dtuser.exe"="C:\Program Files\Movies Toolbar\Datamngr\SRTOOL~1\IE\dtuser.exe:*:Enabled:Movies Toolbar (Dist. by Bandoo Media, Inc.) DTX Broker"
"C:\Program Files\Skype\Phone\Skype.exe"="C:\Program Files\Skype\Phone\Skype.exe:*:Enabled:Skype"
"C:\Documents and Settings\Guest\Local Settings\Application Data\Facebook\Video\Skype\FacebookVideoCalling.exe"="C:\Documents and Settings\Guest\Local Settings\Application Data\Facebook\Video\Skype\FacebookVideoCalling.exe:*:Enabled:Facebook Video Calling Plugin"
"C:\Program Files\TeamViewer\TeamViewer.exe"="C:\Program Files\TeamViewer\TeamViewer.exe:*:Enabled:Teamviewer Remote Control Application"
"C:\Program Files\TeamViewer\TeamViewer_Service.exe"="C:\Program Files\TeamViewer\TeamViewer_Service.exe:*:Enabled:Teamviewer Remote Control Service"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"C:\Program Files\Windows Live\Messenger\wlcsdk.exe"="C:\Program Files\Windows Live\Messenger\wlcsdk.exe:*:Enabled:Windows Live Call"
"C:\Program Files\Windows Live\Messenger\msnmsgr.exe"="C:\Program Files\Windows Live\Messenger\msnmsgr.exe:*:Enabled:Windows Live Messenger"
"C:\Program Files\iMesh Applications\iMesh\iMesh.exe"="C:\Program Files\iMesh Applications\iMesh\iMesh.exe:*:Enabled:iMesh"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"midimapper"=midimap.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msadpcm"=msadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.trspch"=tssoft32.acm
"vidc.cvid"=iccvid.dll
"VIDC.I420"=lvcodec2.dll
"vidc.iv31"=ir32_32.dll
"vidc.iv32"=ir32_32.dll
"vidc.iv41"=ir41_32.ax
"VIDC.IYUV"=iyuv_32.dll
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"VIDC.UYVY"=msyuv.dll
"VIDC.YUY2"=msyuv.dll
"VIDC.YVU9"=tsbyuv.dll
"VIDC.YVYU"=msyuv.dll
"wavemapper"=msacm32.drv
"msacm.msg723"=msg723.acm
"vidc.M263"=msh263.drv
"vidc.M261"=msh261.drv
"msacm.msaudio1"=msaud32.acm
"msacm.sl_anet"=sl_anet.acm
"msacm.iac2"=C:\WINDOWS\system32\iac25_32.ax
"vidc.iv50"=ir50_32.dll
"msacm.l3acm"=C:\WINDOWS\system32\l3codeca.acm
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"vidc.ffds"=ffdshow.ax
"msacm.ac3filter"=ac3filter.acm
"vidc.VP60"=C:\WINDOWS\system32\vp6vfw.dll
"vidc.VP61"=C:\WINDOWS\system32\vp6vfw.dll
"msacm.siren"=sirenacm.dll
"vidc.mjpg"=pvmjpg30.dll
"VIDC.FMVC"=fmcodec.dll
"MSVideo8"=VfWWDM32.dll
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"aux"=wdmaud.drv
"MSVideo"=vfwwdm32.dll

======List of files/folders created in the last 1 month======

2014-12-05 20:47:30 ----D---- C:\_OTM
2014-12-04 21:53:38 ----D---- C:\Program Files\trend micro
2014-12-04 21:53:37 ----D---- C:\rsit
2014-12-04 19:26:02 ----D---- C:\Documents and Settings\Admin\Application Data\Malwarebytes
2014-12-04 19:25:46 ----D---- C:\Program Files\Malwarebytes' Anti-Malware
2014-12-04 19:25:46 ----A---- C:\WINDOWS\system32\drivers\mbam.sys
2014-12-04 19:00:19 ----D---- C:\AdwCleaner
2014-12-04 18:40:31 ----D---- C:\Documents and Settings\All Users\Application Data\Malwarebytes
2014-12-03 19:30:54 ----D---- C:\Program Files\ESET
2014-12-03 19:14:15 ----D---- C:\Program Files\TeamViewer
2014-12-03 19:05:26 ----D---- C:\Program Files\CCleaner
2014-12-03 19:02:12 ----D---- C:\Program Files\Mozilla Maintenance Service
2014-12-03 19:02:12 ----D---- C:\Documents and Settings\All Users\Application Data\Mozilla
2014-11-23 17:44:05 ----D---- C:\cc3779aab551a07f0247328ec8

======List of files/folders modified in the last 1 month======

2014-12-05 20:54:49 ----D---- C:\WINDOWS\Prefetch
2014-12-05 20:54:09 ----D---- C:\WINDOWS\Temp
2014-12-05 20:53:35 ----D---- C:\WINDOWS\system32
2014-12-05 20:51:50 ----A---- C:\WINDOWS\SchedLgU.Txt
2014-12-05 20:47:33 ----SD---- C:\WINDOWS\Tasks
2014-12-05 20:47:33 ----D---- C:\Program Files
2014-12-05 14:24:07 ----SHD---- C:\WINDOWS\Installer
2014-12-05 14:15:26 ----D---- C:\Documents and Settings\Admin\Application Data\Skype
2014-12-04 21:09:11 ----HDC---- C:\WINDOWS\$NtUninstallKB2695962$
2014-12-04 21:09:11 ----D---- C:\WINDOWS\system32\drivers
2014-12-04 19:06:13 ----D---- C:\Documents and Settings\All Users\Application Data\ICQ
2014-12-04 18:28:39 ----D---- C:\Program Files\Common Files\Microsoft Shared
2014-12-04 18:25:58 ----D---- C:\Documents and Settings\All Users\Application Data\Microsoft Help
2014-12-03 19:41:55 ----D---- C:\WINDOWS
2014-12-03 19:34:17 ----HD---- C:\WINDOWS\inf
2014-12-03 19:34:08 ----D---- C:\WINDOWS\system32\CatRoot2
2014-12-03 19:29:32 ----A---- C:\WINDOWS\win.ini
2014-12-03 19:14:39 ----RSD---- C:\WINDOWS\Fonts
2014-12-03 19:11:07 ----D---- C:\Documents and Settings\All Users\Application Data\BlueStacksSetup
2014-12-03 19:10:24 ----D---- C:\WINDOWS\Minidump
2014-12-03 19:10:24 ----D---- C:\WINDOWS\Logs
2014-12-03 19:10:24 ----D---- C:\WINDOWS\Debug
2014-12-03 19:01:43 ----D---- C:\Program Files\Mozilla Firefox
2014-12-03 18:02:57 ----D---- C:\Documents and Settings\All Users\Application Data\0df3a3ff-f340-47c8-bd12-69f1b8f009ac
2014-11-25 17:04:13 ----SD---- C:\Documents and Settings\Admin\Application Data\Microsoft
2014-11-25 17:02:08 ----D---- C:\Program Files\Google
2014-11-25 08:26:35 ----D---- C:\Program Files\ToggleEN
2014-11-15 20:05:26 ----D---- C:\Documents and Settings

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R1 eamonm;eamonm; C:\WINDOWS\system32\DRIVERS\eamonm.sys [2014-10-10 191928]
R1 ehdrv;ehdrv; C:\WINDOWS\system32\DRIVERS\ehdrv.sys [2014-10-10 135296]
R1 epfwtdir;epfwtdir; C:\WINDOWS\system32\DRIVERS\epfwtdir.sys [2014-10-10 119792]
R1 intelppm;Intel Processor Driver; C:\WINDOWS\system32\DRIVERS\intelppm.sys [2008-04-13 36352]
R2 fssfltr;FssFltr; C:\WINDOWS\system32\DRIVERS\fssfltr_tdi.sys [2010-04-28 54760]
R3 b57w2k;Broadcom NetXtreme Gigabit Ethernet; C:\WINDOWS\system32\DRIVERS\b57xp32.sys [2004-06-19 190336]
R3 GEARAspiWDM;GEAR ASPI Filter Driver; C:\WINDOWS\system32\DRIVERS\GEARAspiWDM.sys [2012-08-21 26840]
R3 HidUsb;Microsoft HID Class Driver; C:\WINDOWS\system32\DRIVERS\hidusb.sys [2008-04-13 10368]
R3 ialm;ialm; C:\WINDOWS\system32\DRIVERS\ialmnt5.sys [2006-02-07 1399615]
R3 mouhid;Mouse HID Driver; C:\WINDOWS\system32\DRIVERS\mouhid.sys [2001-08-17 12160]
R3 smwdm;smwdm; C:\WINDOWS\system32\drivers\smwdm.sys [2004-07-08 267392]
R3 usbuhci;Microsoft USB Universal Host Controller Miniport Driver; C:\WINDOWS\system32\DRIVERS\usbuhci.sys [2008-04-13 20608]
S1 kbdhid;Keyboard HID Driver; C:\WINDOWS\system32\DRIVERS\kbdhid.sys [2008-04-13 14592]
S3 AX88772;USB2.0 to Fast Ethernet Adapter; C:\WINDOWS\system32\DRIVERS\ax88772.sys [2009-09-03 46720]
S3 CCDECODE;Closed Caption Decoder; C:\WINDOWS\system32\DRIVERS\CCDECODE.sys [2004-07-09 16384]
S3 FlrnUSB;Leadtek USB Network Interface; C:\WINDOWS\system32\DRIVERS\LtkUSB.sys [2010-09-13 41907]
S3 hwdatacard;Huawei DataCard USB Modem and USB Serial; C:\WINDOWS\system32\DRIVERS\ewusbmdm.sys []
S3 massfilter_hs;ZTE HandSet Mass Storage Filter Driver; C:\WINDOWS\system32\drivers\massfilter_hs.sys [2011-02-15 9216]
S3 MSTEE;Microsoft Streaming Tee/Sink-to-Sink Converter; C:\WINDOWS\system32\drivers\MSTEE.sys [2002-12-12 5504]
S3 NABTSFEC;NABTS/FEC VBI Codec; C:\WINDOWS\system32\DRIVERS\NABTSFEC.sys [2004-07-09 83968]
S3 NdisIP;Microsoft TV/Video Connection; C:\WINDOWS\system32\DRIVERS\NdisIP.sys [2004-07-09 10112]
S3 PID_PEPI;Logitech QuickCam IM(PID_PEPI); C:\WINDOWS\system32\DRIVERS\LV302V32.SYS [2009-04-30 2687512]
S3 SLIP;BDA Slip De-Framer; C:\WINDOWS\system32\DRIVERS\SLIP.sys [2004-07-09 10880]
S3 streamip;BDA IPSink; C:\WINDOWS\system32\DRIVERS\StreamIP.sys [2004-07-09 14976]
S3 USBAAPL;Apple Mobile USB Driver; C:\WINDOWS\System32\Drivers\usbaapl.sys [2013-03-18 45056]
S3 usbaudio;USB Audio Driver (WDM); C:\WINDOWS\system32\drivers\usbaudio.sys [2013-07-17 60160]
S3 usbccgp;Microsoft USB Generic Parent Driver; C:\WINDOWS\system32\DRIVERS\usbccgp.sys [2013-08-09 32384]
S3 usbscan;USB Scanner Driver; C:\WINDOWS\system32\DRIVERS\usbscan.sys [2013-07-03 14976]
S3 USBSTOR;USB Mass Storage Driver; C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS [2008-04-13 26368]
S3 usbvideo;USB Video Device (WDM); C:\WINDOWS\System32\Drivers\usbvideo.sys [2013-07-17 123008]
S3 WSTCODEC;World Standard Teletext Codec; C:\WINDOWS\system32\DRIVERS\WSTCODEC.SYS [2004-07-09 18688]
S3 zgwhsdiag;HSPA WCDMA Handset Diagnostic Port; C:\WINDOWS\system32\DRIVERS\gwhsdiag.sys [2011-02-15 106240]
S3 zgwhsmdm;HSPAHandSet WCDMA Handset USB Modem; C:\WINDOWS\system32\DRIVERS\gwhsmdm.sys [2011-02-15 106240]
S3 zgwhsnmea;WCDMA Handset NMEA Port; C:\WINDOWS\system32\DRIVERS\gwhsnmea.sys [2011-02-15 106240]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 Apple Mobile Device;Apple Mobile Device; C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe [2014-01-07 43336]
R2 Bonjour Service;Bonjour Service; C:\Program Files\Bonjour\mDNSResponder.exe [2011-08-30 390504]
R2 ekrn;ESET Service; C:\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe [2014-10-01 1349576]
R2 MDM;Machine Debug Manager; C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\mdm.exe [2006-10-26 335872]
R2 TeamViewer;TeamViewer 10; C:\Program Files\TeamViewer\TeamViewer_Service.exe [2014-11-28 5419792]
R3 iPod Service;iPod Service; C:\Program Files\iPod\bin\iPodService.exe [2014-02-06 553288]
S3 aspnet_state;ASP.NET State Service; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe [2008-07-25 34312]
S3 clr_optimization_v2.0.50727_32;.NET Runtime Optimization Service v2.0.50727_X86; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe [2008-07-25 69632]
S3 FontCache3.0.0.0;Windows Presentation Foundation Font Cache 3.0.0.0; c:\WINDOWS\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe [2008-07-29 46104]
S3 idsvc;Windows CardSpace; c:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe [2008-07-29 881664]
S3 MozillaMaintenance;Mozilla Maintenance Service; C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe [2014-09-24 114288]
S3 odserv;Microsoft Office Diagnostics Service; C:\Program Files\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE [2008-11-04 441712]
S3 ose;Office Source Engine; C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2006-10-26 145184]
S4 NetTcpPortSharing;Net.Tcp Port Sharing Service; c:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe [2008-07-29 132096]

-----------------EOF-----------------

#10 Příspěvek od **Rudy** » 05 pro 2014 21:07

Dvouklikem na soubor spusťte HijackThis. Klikněte na "Do a system scan only" a v otevřeném okně vlevo ve čtverečcích zaškrtněte:

R3 - Default URLSearchHook is missing
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe (User 'SYSTEM')
O4 - HKUS\S-1-5-18\..\RunOnce: [RunNarrator] Narrator.exe (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe (User 'Default user')
O4 - HKUS\.DEFAULT\..\RunOnce: [RunNarrator] Narrator.exe (User 'Default user')

Klikněte na >FixChecked<. Pak znovu spusťte OTM a klikněte na >CleanUp!<. OTM po sobě uklidí. Nakonec restartujte PC.

Máte málo volného místa na systémovém disku. Přesuňte některá svá data na jiné úložiště, příp. odinstalujte nepoužívané aplikace.

Juraj1973 · #11 Příspěvek od **Juraj1973** » 05 pro 2014 21:11

HijackThis si mám stiahnuť predpokladám (správne ?)

#12 Příspěvek od **Rudy** » 05 pro 2014 21:15

Nee. Klikněte na soubor C:\Program Files\trend micro\Admin.exe a on se spustí. Zapoměl jsem prve napsat ten soubor. Omlouvám se.

Juraj1973 · #13 Příspěvek od **Juraj1973** » 05 pro 2014 21:23

Rudy píše:Pak znovu spusťte OTM a klikněte na >CleanUp!<. OTM po sobě uklidí. Nakonec restartujte PC.

Máte málo volného místa na systémovém disku. Přesuňte některá svá data na jiné úložiště, příp. odinstalujte nepoužívané aplikace.

malo by byť hotovo ? včera sme spolu prechádzali veci a fakt neviem kde sú obsadené tie GB ? skúsim niečo pohladať čo by sa dalo mazať

#14 Příspěvek od **Rudy** » 05 pro 2014 22:22

Vaše data (dokumenty, fotky, videa apod.) přesuňte na jiné úložiště. Nepoužívané aplikace odinstalujte (nemažte). Od zbytečností byl systém vyčištěn.

Juraj1973 · #15 Příspěvek od **Juraj1973** » 05 pro 2014 22:25

Ďakujem veľmi pekne za Vášu pomoc , čas a ochotu. Nech sa darí !

VIRY.CZ

Zmizla ikona internetu , totálne zavírované poprosím pomoc

Zmizla ikona internetu , totálne zavírované poprosím pomoc

Re: Zmizla ikona internetu , totálne zavírované poprosím pom

Re: Zmizla ikona internetu , totálne zavírované poprosím pom

Re: Zmizla ikona internetu , totálne zavírované poprosím pom

Re: Zmizla ikona internetu , totálne zavírované poprosím pom

Re: Zmizla ikona internetu , totálne zavírované poprosím pom

Re: Zmizla ikona internetu , totálne zavírované poprosím pom

Re: Zmizla ikona internetu , totálne zavírované poprosím pom

Re: Zmizla ikona internetu , totálne zavírované poprosím pom

Re: Zmizla ikona internetu , totálne zavírované poprosím pom

Re: Zmizla ikona internetu , totálne zavírované poprosím pom

Re: Zmizla ikona internetu , totálne zavírované poprosím pom

Re: Zmizla ikona internetu , totálne zavírované poprosím pom

Re: Zmizla ikona internetu , totálne zavírované poprosím pom

Re: Zmizla ikona internetu , totálne zavírované poprosím pom