VIRY.CZ

Zdravím,

prosím o kontrolu logu z RSIT - ve Firefoxu mě pořád otravují Ads by name a různé přesměrování po kliknutí na odkazy.

Díky

Logfile of random's system information tool 1.10 (written by random/random)
Run by Tom at 2015-04-07 21:19:28
Microsoft Windows 7 Home Premium Service Pack 1
System drive C: has 449 GB (94%) free of 477 GB
Total RAM: 2047 MB (51% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 21:19:32, on 7.4.2015
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v11.0 (11.00.9600.17689)
Boot mode: Normal

Running processes:
C:\Windows\system32\taskhost.exe
C:\Windows\Explorer.EXE
C:\Windows\system32\Dwm.exe
C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
C:\Program Files\Microsoft Security Client\msseces.exe
C:\Program Files\Windows Sidebar\sidebar.exe
C:\Program Files\CCleaner\CCleaner.exe
C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
C:\Program Files\TeamViewer\TeamViewer.exe
C:\Windows\system32\taskeng.exe
C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe
C:\Windows\system32\taskhost.exe
C:\Users\Tom\Downloads\RSIT.exe
C:\Program Files\trend micro\Tom.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = Preserve
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page =
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/p/?LinkId=255141
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/p/?LinkId=255141
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\PROGRA~1\MICROS~3\Office14\GROOVEEX.DLL
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.8.0_40\bin\ssv.dll
O2 - BHO: URLRedirectionBHO - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\PROGRA~1\MICROS~3\Office14\URLREDIR.DLL
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre1.8.0_40\bin\jp2ssv.dll
O4 - HKLM\..\Run: [StartCCC] "C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\x86\CLIStart.exe" MSRun
O4 - HKLM\..\Run: [BCSSync] "C:\Program Files\Microsoft Office\Office14\BCSSync.exe" /DelayServices
O4 - HKLM\..\Run: [MSC] "c:\Program Files\Microsoft Security Client\msseces.exe" -hide -runkey
O4 - HKCU\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun
O4 - HKCU\..\Run: [CCleaner Monitoring] "C:\Program Files\CCleaner\CCleaner.exe" /MONITOR
O4 - HKUS\S-1-5-18\..\Run: [Skype] "C:\Program Files\Skype\Phone\Skype.exe" /minimized /regrun (User 'SYSTEM')
O4 - HKUS\S-1-5-18\..\RunOnce: [SPReview] "C:\Windows\System32\SPReview\SPReview.exe" /sp:1 /errorfwlink:"http://go.microsoft.com/fwlink/?LinkID=122915" /build:7601 (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [Skype] "C:\Program Files\Skype\Phone\Skype.exe" /minimized /regrun (User 'Default user')
O4 - HKUS\.DEFAULT\..\RunOnce: [SPReview] "C:\Windows\System32\SPReview\SPReview.exe" /sp:1 /errorfwlink:"http://go.microsoft.com/fwlink/?LinkID=122915" /build:7601 (User 'Default user')
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O18 - Filter hijack: text/xml - {807573E5-5146-11D5-A672-00B0D022E945} - C:\Program Files\Common Files\Microsoft Shared\OFFICE14\MSOXMLMF.DLL
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: AMD External Events Utility - AMD - C:\Windows\system32\atiesrxx.exe
O23 - Service: Služba Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: Služba Google Update (gupdatem) (gupdatem) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Mozilla Foundation - C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe
O23 - Service: Skype Updater (SkypeUpdate) - Skype Technologies - C:\Program Files\Skype\Updater\Updater.exe
O23 - Service: TeamViewer 10 (TeamViewer) - TeamViewer GmbH - C:\Program Files\TeamViewer\TeamViewer_Service.exe

--
End of file - 4713 bytes

======Scheduled tasks folder======

C:\Windows\tasks\Adobe Flash Player Updater.job - C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe
C:\Windows\tasks\GoogleUpdateTaskMachineCore.job - C:\Program Files\Google\Update\GoogleUpdate.exe /c
C:\Windows\tasks\GoogleUpdateTaskMachineUA.job - C:\Program Files\Google\Update\GoogleUpdate.exe /ua /installsource scheduler

=========Mozilla firefox=========

ProfilePath - C:\Users\Tom\AppData\Roaming\Mozilla\Firefox\Profiles\8abxiw2z.default-1428430118731

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 17.0.0.134 Plugin
"Path"=C:\Windows\system32\Macromed\Flash\NPSWF32_17_0_0_134.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@adobe.com/ShockwavePlayer]
"Description"=Adobe Shockwave Player
"Path"=C:\Windows\system32\Adobe\Director\np32dsw_1211151.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@java.com/DTPlugin,version=11.40.2]
"Description"=Java™ Deployment Toolkit
"Path"=C:\Program Files\Java\jre1.8.0_40\bin\dtplugin\npDeployJava1.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@java.com/JavaPlugin,version=11.40.2]
"Description"=Oracle® Next Generation Java™ Plug-In
"Path"=C:\Program Files\Java\jre1.8.0_40\bin\plugin2\npjp2.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@microsoft.com/GENUINE]
"Description"=
"Path"=disabled

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0]
"Description"=Ag Player Plugin
"Path"=C:\Program Files\Microsoft Silverlight\5.1.30514.0\npctrl.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@microsoft.com/OfficeAuthz,version=14.0]
"Description"=Office Authorization plug-in for NPAPI browsers
"Path"=C:\PROGRA~1\MICROS~3\Office14\NPAUTHZ.DLL

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@microsoft.com/SharePoint,version=14.0]
"Description"=Microsoft SharePoint Plug-in for Firefox
"Path"=C:\PROGRA~1\MICROS~3\Office14\NPSPWRAP.DLL

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@tools.google.com/Google Update;version=3]
"Description"=Google Update
"Path"=C:\Program Files\Google\Update\1.3.26.9\npGoogleUpdate3.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@tools.google.com/Google Update;version=9]
"Description"=Google Update
"Path"=C:\Program Files\Google\Update\1.3.26.9\npGoogleUpdate3.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@videolan.org/vlc,version=2.1.3]
"Description"=VLC Multimedia Plugin
"Path"=C:\Program Files\VideoLAN\VLC\npvlc.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@videolan.org/vlc,version=2.1.5]
"Description"=VLC Multimedia Plugin
"Path"=C:\Program Files\VideoLAN\VLC\npvlc.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\Adobe Reader]
"Description"=Handles PDFs in-place in Firefox
"Path"=C:\Program Files\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll


======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{72853161-30C5-4D22-B7F9-0BBC1D38A37E}]
Groove GFS Browser Helper - C:\PROGRA~1\MICROS~3\Office14\GROOVEEX.DLL [2013-12-19 4171480]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
Java(tm) Plug-In SSV Helper - C:\Program Files\Java\jre1.8.0_40\bin\ssv.dll [2015-03-11 460712]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{B4F3A835-0E21-4959-BA22-42B3008E02FF}]
Office Document Cache Handler - C:\PROGRA~1\MICROS~3\Office14\URLREDIR.DLL [2013-03-06 562904]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre1.8.0_40\bin\jp2ssv.dll [2015-03-11 172968]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"StartCCC"=C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\x86\CLIStart.exe [2014-04-17 748256]
"BCSSync"=C:\Program Files\Microsoft Office\Office14\BCSSync.exe [2012-11-05 89184]
"MSC"=c:\Program Files\Microsoft Security Client\msseces.exe [2015-01-30 978520]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"Sidebar"=C:\Program Files\Windows Sidebar\sidebar.exe [2010-11-20 1174016]
"CCleaner Monitoring"=C:\Program Files\CCleaner\CCleaner.exe [2015-03-13 5529880]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{B5A7F190-DDA6-4420-B3BA-52453494E6CD}"=C:\PROGRA~1\MICROS~3\Office14\GROOVEEX.DLL [2013-12-19 4171480]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=credssp.dll

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MsMpSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\MsMpSvc]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorUser"=3
"EnableLUA"=0
"EnableUIADesktopToggle"=0
"PromptOnSecureDesktop"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=145

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.msadpcm"=msadp32.acm
"midimapper"=midimap.dll
"wavemapper"=msacm32.drv
"vidc.uyvy"=msyuv.dll
"vidc.yuy2"=msyuv.dll
"vidc.yvyu"=msyuv.dll
"vidc.iyuv"=iyuv_32.dll
"vidc.i420"=iyuv_32.dll
"vidc.yvu9"=tsbyuv.dll
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"vidc.cvid"=iccvid.dll
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"aux1"=wdmaud.drv

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*

======List of files/folders created in the last 1 month======

2015-04-07 21:01:05 ----D---- C:\Program Files\trend micro
2015-04-07 21:01:04 ----D---- C:\rsit
2015-04-07 20:49:27 ----A---- C:\Windows\system32\drivers\TrueSight.sys
2015-04-07 20:49:26 ----D---- C:\ProgramData\RogueKiller
2015-04-07 20:36:52 ----SHD---- C:\$RECYCLE.BIN
2015-04-07 20:33:08 ----D---- C:\AdwCleaner
2015-04-07 19:30:31 ----D---- C:\Windows\Minidump
2015-04-07 19:21:54 ----D---- C:\Windows\erdnt
2015-04-07 19:08:43 ----D---- C:\Program Files\CCleaner
2015-04-07 18:45:34 ----D---- C:\Program Files\Enigma Software Group
2015-04-07 18:44:32 ----D---- C:\Windows\AF54923662584AC6A0435B5B89C6EB61.TMP
2015-04-07 18:44:31 ----D---- C:\Program Files\Common Files\Wise Installation Wizard
2015-04-06 03:00:39 ----SD---- C:\Windows\system32\GWX
2015-04-03 16:17:02 ----A---- C:\Windows\wininit.ini
2015-04-03 15:27:50 ----D---- C:\ProgramData\Spybot - Search & Destroy
2015-04-03 13:58:55 ----D---- C:\ProgramData\Malwarebytes
2015-03-27 07:48:58 ----D---- C:\Program Files\Mozilla Firefox
2015-03-25 10:17:29 ----A---- C:\Windows\system32\generaltel.dll
2015-03-25 10:17:29 ----A---- C:\Windows\system32\appraiser.dll
2015-03-25 10:17:29 ----A---- C:\Windows\system32\aeinv.dll
2015-03-25 10:17:29 ----A---- C:\Windows\system32\acmigration.dll
2015-03-25 10:17:28 ----A---- C:\Windows\system32\invagent.dll
2015-03-25 10:17:28 ----A---- C:\Windows\system32\devinv.dll
2015-03-25 10:17:27 ----A---- C:\Windows\system32\aepic.dll
2015-03-25 10:17:27 ----A---- C:\Windows\system32\aepdu.dll
2015-03-18 23:04:57 ----D---- C:\Program Files\Common Files\DESIGNER
2015-03-11 17:40:00 ----D---- C:\ProgramData\AutoKMS
2015-03-11 17:08:33 ----D---- C:\Program Files\Microsoft Security Client
2015-03-11 17:06:48 ----A---- C:\Windows\system32\msctf.dll
2015-03-11 17:06:44 ----A---- C:\Windows\system32\win32k.sys
2015-03-11 17:06:36 ----A---- C:\Windows\system32\WindowsCodecs.dll
2015-03-11 17:06:22 ----A---- C:\Windows\system32\shell32.dll
2015-03-11 17:06:08 ----A---- C:\Windows\system32\lpk.dll
2015-03-11 17:06:08 ----A---- C:\Windows\system32\atmfd.dll
2015-03-11 17:06:07 ----A---- C:\Windows\system32\fontsub.dll
2015-03-11 17:06:07 ----A---- C:\Windows\system32\dciman32.dll
2015-03-11 17:06:07 ----A---- C:\Windows\system32\atmlib.dll
2015-03-11 17:04:48 ----A---- C:\Windows\system32\JavaScriptCollectionAgent.dll
2015-03-11 17:04:48 ----A---- C:\Windows\system32\ieetwcollector.exe
2015-03-11 17:04:46 ----A---- C:\Windows\system32\ieetwproxystub.dll
2015-03-11 17:04:44 ----A---- C:\Windows\system32\MsSpellCheckingFacility.exe
2015-03-11 17:04:44 ----A---- C:\Windows\system32\iernonce.dll
2015-03-11 17:04:44 ----A---- C:\Windows\system32\ie4uinit.exe
2015-03-11 17:04:42 ----A---- C:\Windows\system32\urlmon.dll
2015-03-11 17:04:42 ----A---- C:\Windows\system32\msfeeds.dll
2015-03-11 17:04:42 ----A---- C:\Windows\system32\jsproxy.dll
2015-03-11 17:04:42 ----A---- C:\Windows\system32\jscript9diag.dll
2015-03-11 17:04:42 ----A---- C:\Windows\system32\ieUnatt.exe
2015-03-11 17:04:42 ----A---- C:\Windows\system32\iedkcs32.dll
2015-03-11 17:04:42 ----A---- C:\Windows\system32\ieapfltr.dll
2015-03-11 17:04:42 ----A---- C:\Windows\system32\dxtmsft.dll
2015-03-11 17:04:40 ----A---- C:\Windows\system32\msrating.dll
2015-03-11 17:04:40 ----A---- C:\Windows\system32\iesetup.dll
2015-03-11 17:04:39 ----A---- C:\Windows\system32\wininet.dll
2015-03-11 17:04:39 ----A---- C:\Windows\system32\ieetwcollectorres.dll
2015-03-11 17:04:39 ----A---- C:\Windows\system32\dxtrans.dll
2015-03-11 17:04:38 ----A---- C:\Windows\system32\ieui.dll
2015-03-11 17:04:38 ----A---- C:\Windows\system32\ieframe.dll
2015-03-11 17:04:37 ----A---- C:\Windows\system32\mshtmlmedia.dll
2015-03-11 17:04:37 ----A---- C:\Windows\system32\mshtmled.dll
2015-03-11 17:04:37 ----A---- C:\Windows\system32\MshtmlDac.dll
2015-03-11 17:04:36 ----A---- C:\Windows\system32\mshtml.dll
2015-03-11 17:04:36 ----A---- C:\Windows\system32\iertutil.dll
2015-03-11 17:04:35 ----A---- C:\Windows\system32\vbscript.dll
2015-03-11 17:04:35 ----A---- C:\Windows\system32\jscript9.dll
2015-03-11 17:01:39 ----A---- C:\Windows\system32\ubpm.dll
2015-03-11 17:01:25 ----A---- C:\Windows\system32\drivers\ksecpkg.sys
2015-03-11 17:01:24 ----A---- C:\Windows\system32\wdigest.dll
2015-03-11 17:01:24 ----A---- C:\Windows\system32\TSpkg.dll
2015-03-11 17:01:24 ----A---- C:\Windows\system32\schannel.dll
2015-03-11 17:01:24 ----A---- C:\Windows\system32\ncrypt.dll
2015-03-11 17:01:24 ----A---- C:\Windows\system32\msv1_0.dll
2015-03-11 17:01:24 ----A---- C:\Windows\system32\lsasrv.dll
2015-03-11 17:01:24 ----A---- C:\Windows\system32\kerberos.dll
2015-03-11 17:01:24 ----A---- C:\Windows\system32\drivers\ksecdd.sys
2015-03-11 17:01:24 ----A---- C:\Windows\system32\auditpol.exe
2015-03-11 17:01:23 ----A---- C:\Windows\system32\sspisrv.dll
2015-03-11 17:01:23 ----A---- C:\Windows\system32\sspicli.dll
2015-03-11 17:01:23 ----A---- C:\Windows\system32\secur32.dll
2015-03-11 17:01:23 ----A---- C:\Windows\system32\msobjs.dll
2015-03-11 17:01:23 ----A---- C:\Windows\system32\msaudite.dll
2015-03-11 17:01:23 ----A---- C:\Windows\system32\lsass.exe
2015-03-11 17:01:23 ----A---- C:\Windows\system32\credssp.dll
2015-03-11 17:01:23 ----A---- C:\Windows\system32\adtschema.dll
2015-03-11 16:54:12 ----A---- C:\Windows\system32\WMPhoto.dll
2015-03-11 16:32:59 ----A---- C:\Windows\system32\mf.dll
2015-03-11 16:32:58 ----A---- C:\Windows\system32\wmp.dll
2015-03-11 16:32:55 ----A---- C:\Windows\system32\ntoskrnl.exe
2015-03-11 16:32:55 ----A---- C:\Windows\system32\ntkrnlpa.exe
2015-03-11 16:32:55 ----A---- C:\Windows\system32\crypt32.dll
2015-03-11 16:32:53 ----A---- C:\Windows\system32\drivers\cng.sys
2015-03-11 16:32:50 ----A---- C:\Windows\system32\drivers\mountmgr.sys
2015-03-11 16:32:48 ----A---- C:\Windows\system32\srcore.dll
2015-03-11 16:32:46 ----A---- C:\Windows\system32\winload.exe
2015-03-11 16:32:43 ----A---- C:\Windows\system32\quartz.dll
2015-03-11 16:32:40 ----A---- C:\Windows\system32\rstrui.exe
2015-03-11 16:32:40 ----A---- C:\Windows\system32\drmv2clt.dll
2015-03-11 16:32:39 ----A---- C:\Windows\system32\qdvd.dll
2015-03-11 16:32:39 ----A---- C:\Windows\system32\cryptui.dll
2015-03-11 16:32:39 ----A---- C:\Windows\system32\blackbox.dll
2015-03-11 16:32:38 ----A---- C:\Windows\system32\wintrust.dll
2015-03-11 16:32:38 ----A---- C:\Windows\system32\pcasvc.dll
2015-03-11 16:32:38 ----A---- C:\Windows\system32\cryptnet.dll
2015-03-11 16:32:36 ----A---- C:\Windows\system32\wmdrmsdk.dll
2015-03-11 16:32:35 ----A---- C:\Windows\system32\mfplat.dll
2015-03-11 16:32:34 ----A---- C:\Windows\system32\evr.dll
2015-03-11 16:32:34 ----A---- C:\Windows\system32\drmmgrtn.dll
2015-03-11 16:32:33 ----A---- C:\Windows\system32\msscp.dll
2015-03-11 16:32:33 ----A---- C:\Windows\system32\cryptsvc.dll
2015-03-11 16:32:32 ----A---- C:\Windows\system32\audiosrv.dll
2015-03-11 16:32:31 ----A---- C:\Windows\system32\audiodg.exe
2015-03-11 16:32:28 ----A---- C:\Windows\system32\msnetobj.dll
2015-03-11 16:32:28 ----A---- C:\Windows\system32\AudioEng.dll
2015-03-11 16:32:26 ----A---- C:\Windows\system32\pcadm.dll
2015-03-11 16:32:23 ----A---- C:\Windows\system32\rrinstaller.exe
2015-03-11 16:32:23 ----A---- C:\Windows\system32\AUDIOKSE.dll
2015-03-11 16:32:22 ----A---- C:\Windows\system32\smss.exe
2015-03-11 16:32:21 ----A---- C:\Windows\system32\drivers\PEAuth.sys
2015-03-11 16:32:20 ----A---- C:\Windows\system32\mfps.dll
2015-03-11 16:32:20 ----A---- C:\Windows\system32\appidapi.dll
2015-03-11 16:32:18 ----A---- C:\Windows\system32\srclient.dll
2015-03-11 16:32:18 ----A---- C:\Windows\system32\AudioSes.dll
2015-03-11 16:32:18 ----A---- C:\Windows\system32\appidpolicyconverter.exe
2015-03-11 16:32:17 ----A---- C:\Windows\system32\pcawrk.exe
2015-03-11 16:32:17 ----A---- C:\Windows\system32\cryptsp.dll
2015-03-11 16:32:16 ----A---- C:\Windows\system32\setbcdlocale.dll
2015-03-11 16:32:16 ----A---- C:\Windows\system32\mfpmp.exe
2015-03-11 16:32:16 ----A---- C:\Windows\system32\csrsrv.dll
2015-03-11 16:32:16 ----A---- C:\Windows\system32\appidsvc.dll
2015-03-11 16:32:15 ----A---- C:\Windows\system32\pcalua.exe
2015-03-11 16:32:15 ----A---- C:\Windows\system32\msmmsp.dll
2015-03-11 16:32:15 ----A---- C:\Windows\system32\EncDump.dll
2015-03-11 16:32:14 ----A---- C:\Windows\system32\drivers\appid.sys
2015-03-11 16:32:14 ----A---- C:\Windows\system32\appidcertstorecheck.exe
2015-03-11 16:32:09 ----A---- C:\Windows\system32\spwmp.dll
2015-03-11 16:32:09 ----A---- C:\Windows\system32\pcaevts.dll
2015-03-11 16:32:09 ----A---- C:\Windows\system32\dxmasf.dll
2015-03-11 16:32:09 ----A---- C:\Windows\system32\apisetschema.dll
2015-03-11 16:32:08 ----A---- C:\Windows\system32\wmploc.DLL
2015-03-11 16:31:58 ----A---- C:\Windows\system32\mferror.dll
2015-03-11 16:26:39 ----D---- C:\Program Files\Common Files\Java
2015-03-11 16:18:23 ----D---- C:\Program Files\Cobian Backup 11
2015-03-11 16:10:31 ----D---- C:\Program Files\Microsoft Synchronization Services
2015-03-11 16:09:27 ----D---- C:\Windows\PCHEALTH
2015-03-11 16:09:27 ----D---- C:\Program Files\Microsoft SQL Server Compact Edition
2015-03-11 16:04:26 ----D---- C:\Program Files\Microsoft Analysis Services
2015-03-11 16:03:21 ----D---- C:\Program Files\Microsoft Office
2015-03-11 16:03:20 ----D---- C:\ProgramData\Microsoft Help
2015-03-11 16:02:48 ----RHD---- C:\MSOCache

======List of files/folders modified in the last 1 month======

2015-04-07 21:17:07 ----RD---- C:\Program Files
2015-04-07 21:17:07 ----D---- C:\Windows\system32\drivers
2015-04-07 21:14:24 ----D---- C:\Windows\Temp
2015-04-07 21:04:41 ----D---- C:\Windows\Tasks
2015-04-07 21:04:41 ----D---- C:\Windows\system32\Tasks
2015-04-07 21:00:49 ----SHD---- C:\Windows\Installer
2015-04-07 21:00:49 ----SD---- C:\Users\Tom\AppData\Roaming\Microsoft
2015-04-07 21:00:43 ----D---- C:\Windows\System32
2015-04-07 20:59:51 ----D---- C:\Windows\inf
2015-04-07 20:59:24 ----SHD---- C:\System Volume Information
2015-04-07 20:49:26 ----HD---- C:\ProgramData
2015-04-07 20:40:46 ----D---- C:\Windows\SoftwareDistribution
2015-04-07 20:40:25 ----D---- C:\Windows
2015-04-07 20:40:03 ----D---- C:\Program Files\WinRAR
2015-04-07 20:35:04 ----D---- C:\Windows\system32\config
2015-04-07 20:35:01 ----D---- C:\Program Files\TeamViewer
2015-04-07 20:34:28 ----D---- C:\Program Files\Common Files
2015-04-07 19:54:12 ----RSD---- C:\Windows\Fonts
2015-04-07 19:22:16 ----D---- C:\Windows\Prefetch
2015-04-07 19:09:37 ----D---- C:\Users\Tom\AppData\Roaming\TeamViewer
2015-04-06 03:01:02 ----D---- C:\Windows\winsxs
2015-04-06 03:00:54 ----D---- C:\Windows\Logs
2015-04-03 16:17:03 ----SD---- C:\ProgramData\Microsoft
2015-04-03 16:13:20 ----A---- C:\Windows\system32\PerfStringBackup.INI
2015-04-03 14:48:25 ----D---- C:\Downloads
2015-04-03 14:31:21 ----A---- C:\Windows\system32\FlashPlayerApp.exe
2015-04-03 14:26:43 ----D---- C:\Windows\registration
2015-04-03 13:59:38 ----D---- C:\Windows\debug
2015-03-30 16:22:26 ----D---- C:\Program Files\Mozilla Maintenance Service
2015-03-27 07:26:01 ----SD---- C:\Windows\system32\CompatTel
2015-03-27 07:26:01 ----D---- C:\Windows\system32\wbem
2015-03-27 07:26:01 ----D---- C:\Windows\system32\appraiser
2015-03-27 07:26:00 ----D---- C:\Windows\AppPatch
2015-03-18 04:10:49 ----D---- C:\Windows\Microsoft.NET
2015-03-18 04:09:32 ----RSD---- C:\Windows\assembly
2015-03-17 13:19:49 ----D---- C:\Windows\rescache
2015-03-17 12:42:47 ----SHD---- C:\Boot
2015-03-17 12:37:48 ----D---- C:\Windows\system32\en-US
2015-03-17 12:37:47 ----D---- C:\Program Files\Internet Explorer
2015-03-17 12:37:46 ----D---- C:\Windows\system32\cs-CZ
2015-03-17 12:37:44 ----D---- C:\Windows\system32\Dism
2015-03-17 12:37:44 ----D---- C:\Program Files\Windows Media Player
2015-03-17 12:37:42 ----D---- C:\Windows\system32\Boot
2015-03-12 00:28:12 ----D---- C:\Windows\system32\MRT
2015-03-12 00:23:50 ----A---- C:\Windows\system32\MRT.exe
2015-03-12 00:18:43 ----D---- C:\Program Files\Microsoft Silverlight
2015-03-11 17:12:44 ----D---- C:\ProgramData\AVG2014
2015-03-11 17:12:39 ----D---- C:\ProgramData\MFAData
2015-03-11 16:50:48 ----D---- C:\Windows\system32\catroot2
2015-03-11 16:46:37 ----D---- C:\Program Files\LibreOffice 4
2015-03-11 16:32:23 ----D---- C:\ProgramData\Oracle
2015-03-11 16:30:31 ----D---- C:\Program Files\Java
2015-03-11 16:25:01 ----A---- C:\Windows\system32\WindowsAccessBridge.dll
2015-03-11 16:12:21 ----D---- C:\Program Files\Common Files\microsoft shared
2015-03-11 16:09:27 ----D---- C:\Program Files\Microsoft.NET
2015-03-11 16:04:47 ----D---- C:\Windows\ShellNew

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 MpFilter;Microsoft Malware Protection Driver; C:\Windows\system32\DRIVERS\MpFilter.sys [2014-11-15 239224]
R0 rdyboost;ReadyBoost; C:\Windows\System32\drivers\rdyboost.sys [2010-11-20 173440]
R1 MpKslffef2748;MpKslffef2748; \??\c:\ProgramData\Microsoft\Microsoft Antimalware\Definition Updates\{0E1DDE51-EAFE-4091-90CF-B414B846BE17}\MpKslffef2748.sys [2015-04-07 39464]
R2 NisDrv;Microsoft Network Inspection System; C:\Windows\system32\DRIVERS\NisDrvWFP.sys [2014-11-15 95408]
R2 SSPORT;SSPORT; \??\C:\Windows\system32\Drivers\SSPORT.sys [2013-04-18 5120]
R3 amdkmdag;amdkmdag; C:\Windows\system32\DRIVERS\atikmdag.sys [2014-04-18 13515264]
R3 amdkmdap;amdkmdap; C:\Windows\system32\DRIVERS\atikmpag.sys [2014-04-18 512000]
R3 AtiHDAudioService;AMD Function Driver for HD Audio Service; C:\Windows\system32\drivers\AtihdW73.sys [2013-12-19 77824]
R3 MBAMSwissArmy;MBAMSwissArmy; \??\C:\Windows\system32\drivers\MBAMSwissArmy.sys []
R3 RTL8167;Ovladač Realtek 8167 NT; C:\Windows\system32\DRIVERS\Rt86win7.sys [2009-07-14 139776]
R3 usbscan;Ovladač skeneru USB; C:\Windows\system32\DRIVERS\usbscan.sys [2013-07-03 36352]
S2 Parvdm;Parvdm; C:\Windows\system32\DRIVERS\parvdm.sys [2009-07-14 8704]
S3 aic78xx;aic78xx; C:\Windows\system32\DRIVERS\djsvs.sys [2009-07-14 70720]
S3 amdagp;Ovladač filtru AMD portu AGP; C:\Windows\system32\drivers\amdagp.sys [2009-07-14 53312]
S3 b57nd60x;Broadcom NetXtreme Gigabit Ethernet - NDIS 6.0; C:\Windows\system32\DRIVERS\b57nd60x.sys [2009-07-14 229888]
S3 BridgeMP;@%SystemRoot%\system32\bridgeres.dll,-1; C:\Windows\system32\DRIVERS\bridge.sys [2009-07-14 78336]
S3 esgiguard;esgiguard; \??\C:\Program Files\Enigma Software Group\SpyHunter\esgiguard.sys []
S3 pciide;pciide; C:\Windows\system32\drivers\pciide.sys [2009-07-14 12368]
S3 sisagp;Filtr SIS sběrnice AGP; C:\Windows\system32\drivers\sisagp.sys [2009-07-14 52304]
S3 TsUsbFlt;@%SystemRoot%\system32\drivers\tsusbflt.sys,-1; C:\Windows\System32\drivers\tsusbflt.sys [2010-11-20 52224]
S3 viaagp;Filtr VIA sběrnice AGP; C:\Windows\system32\drivers\viaagp.sys [2009-07-14 53328]
S3 ViaC7;VIA C7 Processor Driver; C:\Windows\system32\DRIVERS\viac7.sys [2009-07-14 52736]
S3 WinUsb;WinUsb; C:\Windows\system32\DRIVERS\WinUsb.sys [2010-11-20 35968]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 AdobeARMservice;Adobe Acrobat Update Service; C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe [2014-12-19 81088]
R2 AMD External Events Utility;AMD External Events Utility; C:\Windows\system32\atiesrxx.exe [2014-04-18 208896]
R2 MsMpSvc;Microsoft Antimalware Service; c:\Program Files\Microsoft Security Client\MsMpEng.exe [2015-01-30 22184]
R2 TeamViewer;TeamViewer 10; C:\Program Files\TeamViewer\TeamViewer_Service.exe [2015-03-30 5448464]
R3 NisSrv;@c:\Program Files\Microsoft Security Client\MpAsDesc.dll,-243; c:\Program Files\Microsoft Security Client\NisSrv.exe [2015-01-30 284472]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2013-09-11 105144]
S2 gupdate;Služba Google Update (gupdate); C:\Program Files\Google\Update\GoogleUpdate.exe [2014-05-16 116648]
S2 SkypeUpdate;Skype Updater; C:\Program Files\Skype\Updater\Updater.exe [2014-04-03 315008]
S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service; C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2015-04-03 268464]
S3 gupdatem;Služba Google Update (gupdatem); C:\Program Files\Google\Update\GoogleUpdate.exe [2014-05-16 116648]
S3 IEEtwCollectorService;@%SystemRoot%\system32\ieetwcollectorres.dll,-1000; C:\Windows\system32\IEEtwCollector.exe [2015-02-20 102912]
S3 Microsoft SharePoint Workspace Audit Service;Microsoft SharePoint Workspace Audit Service; C:\Program Files\Microsoft Office\Office14\GROOVE.EXE [2013-12-19 30814400]
S3 MozillaMaintenance;Mozilla Maintenance Service; C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe [2015-03-27 148080]
S3 ose;Office Source Engine; C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2010-01-09 149352]
S3 osppsvc;Office Software Protection Platform; C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE [2010-01-09 4640000]
S3 WatAdminSvc;@%SystemRoot%\system32\Wat\WatUX.exe,-601; C:\Windows\system32\Wat\WatAdminSvc.exe [2014-05-16 1343400]
S4 aspnet_state;Stavová služba ASP.NET; C:\Windows\Microsoft.NET\Framework\v4.0.30319\aspnet_state.exe [2013-09-11 46688]
S4 NetMsmqActivator;@C:\Windows\Microsoft.NET\Framework\v4.0.30319\\ServiceModelInstallRC.dll,-8195; C:\Windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe [2013-09-11 139856]
S4 NetPipeActivator;@C:\Windows\Microsoft.NET\Framework\v4.0.30319\\ServiceModelInstallRC.dll,-8197; C:\Windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe [2013-09-11 139856]
S4 NetTcpActivator;@C:\Windows\Microsoft.NET\Framework\v4.0.30319\\ServiceModelInstallRC.dll,-8199; C:\Windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe [2013-09-11 139856]

-----------------EOF-----------------

Zdravím!
Spusťte tuto utilitu:

Stáhněte AdwCleaner http://general-changelog-team.fr/fr/dow ... adwcleaner
Uložte na plochu
Ukončete všechny programy
Klikněte nejprve na >Scan< a pak na >Clean<.
Proběhne skenováni a pak se objeví log, který sem vložte.

Zdravím,

zde je log z ADWCleaneru, nenašel nic.

# AdwCleaner v4.200 - Log vytvooen 07/04/2015 v 21:33:21
# Aktualizováno 29/03/2015 by Xplode
# Databáze : 2015-04-06.3 [Server]
# Operaení system : Windows 7 Home Premium Service Pack 1 (x86)
# Uživatelské jméno : Tom - MILAN-PC
# Spuštino z : C:\Users\Tom\Desktop\adwcleaner_4.200.exe
# Nastavení : Eištiní

***** [ Služby ] *****


***** [ Soubory / Složky ] *****


***** [ Naplánované úlohy ] *****


***** [ Zástupci ] *****


***** [ Registry ] *****


***** [ Prohlížeee ] *****

-\\ Internet Explorer v11.0.9600.17689


-\\ Mozilla Firefox v36.0.4 (x86 cs)


-\\ Google Chrome v41.0.2272.118


*************************

AdwCleaner[R0].txt - [4287 bytu] - [07/04/2015 20:33:13]
AdwCleaner[R1].txt - [914 bytu] - [07/04/2015 21:32:35]
AdwCleaner[S0].txt - [4305 bytu] - [07/04/2015 20:34:28]
AdwCleaner[S1].txt - [840 bytu] - [07/04/2015 21:33:21]

########## EOF - C:\AdwCleaner\AdwCleaner[S1].txt - [897 bytu] ##########

Toto je OK. Stáhněte OTM: http://oldtimer.geekstogo.com/OTM.exe a uložte na plochu. Spusťte a do levého okna zkopírujte:

:files
C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
C:\Windows\tasks\GoogleUpdateTaskMachineUA.job
C:\Windows\AF54923662584AC6A0435B5B89C6EB61.TMP

:commands
[Purity]
[Emptytemp]
[Emptyflash]

a klikněte na >MoveIt!<. Po skenu restartujte PC a dejte nový log RSIT.

Zdravím,

omlouvám se za zpoždení, dostal jsem se k tomu PC znovu až teď. OTM proběhlo, problém přetrvává.

Zde je nový log z RSIT:

Logfile of random's system information tool 1.10 (written by random/random)
Run by Tom at 2015-04-12 10:06:41
Microsoft Windows 7 Home Premium Service Pack 1
System drive C: has 449 GB (94%) free of 477 GB
Total RAM: 2047 MB (65% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 10:06:46, on 12.4.2015
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v11.0 (11.00.9600.17689)
Boot mode: Normal

Running processes:
C:\Windows\system32\Dwm.exe
C:\Windows\system32\taskhost.exe
C:\Windows\Explorer.EXE
C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
C:\Program Files\Microsoft Security Client\msseces.exe
C:\Program Files\Windows Sidebar\sidebar.exe
C:\Program Files\CCleaner\CCleaner.exe
C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
C:\Program Files\TeamViewer\TeamViewer.exe
C:\Windows\system32\SearchFilterHost.exe
C:\Users\Tom\Downloads\RSIT.exe
C:\Program Files\trend micro\Tom.exe
C:\Windows\system32\DllHost.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = Preserve
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page =
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/p/?LinkId=255141
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/p/?LinkId=255141
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\PROGRA~1\MICROS~3\Office14\GROOVEEX.DLL
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.8.0_40\bin\ssv.dll
O2 - BHO: URLRedirectionBHO - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\PROGRA~1\MICROS~3\Office14\URLREDIR.DLL
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre1.8.0_40\bin\jp2ssv.dll
O4 - HKLM\..\Run: [StartCCC] "C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\x86\CLIStart.exe" MSRun
O4 - HKLM\..\Run: [BCSSync] "C:\Program Files\Microsoft Office\Office14\BCSSync.exe" /DelayServices
O4 - HKLM\..\Run: [MSC] "c:\Program Files\Microsoft Security Client\msseces.exe" -hide -runkey
O4 - HKCU\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun
O4 - HKCU\..\Run: [CCleaner Monitoring] "C:\Program Files\CCleaner\CCleaner.exe" /MONITOR
O4 - HKUS\S-1-5-18\..\Run: [Skype] "C:\Program Files\Skype\Phone\Skype.exe" /minimized /regrun (User 'SYSTEM')
O4 - HKUS\S-1-5-18\..\RunOnce: [SPReview] "C:\Windows\System32\SPReview\SPReview.exe" /sp:1 /errorfwlink:"http://go.microsoft.com/fwlink/?LinkID=122915" /build:7601 (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [Skype] "C:\Program Files\Skype\Phone\Skype.exe" /minimized /regrun (User 'Default user')
O4 - HKUS\.DEFAULT\..\RunOnce: [SPReview] "C:\Windows\System32\SPReview\SPReview.exe" /sp:1 /errorfwlink:"http://go.microsoft.com/fwlink/?LinkID=122915" /build:7601 (User 'Default user')
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O18 - Filter hijack: text/xml - {807573E5-5146-11D5-A672-00B0D022E945} - C:\Program Files\Common Files\Microsoft Shared\OFFICE14\MSOXMLMF.DLL
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: AMD External Events Utility - AMD - C:\Windows\system32\atiesrxx.exe
O23 - Service: Služba Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: Služba Google Update (gupdatem) (gupdatem) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Mozilla Foundation - C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe
O23 - Service: Skype Updater (SkypeUpdate) - Skype Technologies - C:\Program Files\Skype\Updater\Updater.exe
O23 - Service: TeamViewer 10 (TeamViewer) - TeamViewer GmbH - C:\Program Files\TeamViewer\TeamViewer_Service.exe

--
End of file - 4664 bytes

======Scheduled tasks folder======

C:\Windows\tasks\Adobe Flash Player Updater.job - C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe

=========Mozilla firefox=========

ProfilePath - C:\Users\Tom\AppData\Roaming\Mozilla\Firefox\Profiles\8abxiw2z.default-1428430118731

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 17.0.0.134 Plugin
"Path"=C:\Windows\system32\Macromed\Flash\NPSWF32_17_0_0_134.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@adobe.com/ShockwavePlayer]
"Description"=Adobe Shockwave Player
"Path"=C:\Windows\system32\Adobe\Director\np32dsw_1211151.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@java.com/DTPlugin,version=11.40.2]
"Description"=Java™ Deployment Toolkit
"Path"=C:\Program Files\Java\jre1.8.0_40\bin\dtplugin\npDeployJava1.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@java.com/JavaPlugin,version=11.40.2]
"Description"=Oracle® Next Generation Java™ Plug-In
"Path"=C:\Program Files\Java\jre1.8.0_40\bin\plugin2\npjp2.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@microsoft.com/GENUINE]
"Description"=
"Path"=disabled

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0]
"Description"=Ag Player Plugin
"Path"=C:\Program Files\Microsoft Silverlight\5.1.30514.0\npctrl.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@microsoft.com/OfficeAuthz,version=14.0]
"Description"=Office Authorization plug-in for NPAPI browsers
"Path"=C:\PROGRA~1\MICROS~3\Office14\NPAUTHZ.DLL

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@microsoft.com/SharePoint,version=14.0]
"Description"=Microsoft SharePoint Plug-in for Firefox
"Path"=C:\PROGRA~1\MICROS~3\Office14\NPSPWRAP.DLL

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@tools.google.com/Google Update;version=3]
"Description"=Google Update
"Path"=C:\Program Files\Google\Update\1.3.26.9\npGoogleUpdate3.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@tools.google.com/Google Update;version=9]
"Description"=Google Update
"Path"=C:\Program Files\Google\Update\1.3.26.9\npGoogleUpdate3.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@videolan.org/vlc,version=2.1.3]
"Description"=VLC Multimedia Plugin
"Path"=C:\Program Files\VideoLAN\VLC\npvlc.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@videolan.org/vlc,version=2.1.5]
"Description"=VLC Multimedia Plugin
"Path"=C:\Program Files\VideoLAN\VLC\npvlc.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\Adobe Reader]
"Description"=Handles PDFs in-place in Firefox
"Path"=C:\Program Files\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll


======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{72853161-30C5-4D22-B7F9-0BBC1D38A37E}]
Groove GFS Browser Helper - C:\PROGRA~1\MICROS~3\Office14\GROOVEEX.DLL [2013-12-19 4171480]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
Java(tm) Plug-In SSV Helper - C:\Program Files\Java\jre1.8.0_40\bin\ssv.dll [2015-03-11 460712]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{B4F3A835-0E21-4959-BA22-42B3008E02FF}]
Office Document Cache Handler - C:\PROGRA~1\MICROS~3\Office14\URLREDIR.DLL [2013-03-06 562904]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre1.8.0_40\bin\jp2ssv.dll [2015-03-11 172968]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"StartCCC"=C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\x86\CLIStart.exe [2014-04-17 748256]
"BCSSync"=C:\Program Files\Microsoft Office\Office14\BCSSync.exe [2012-11-05 89184]
"MSC"=c:\Program Files\Microsoft Security Client\msseces.exe [2015-01-30 978520]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"Sidebar"=C:\Program Files\Windows Sidebar\sidebar.exe [2010-11-20 1174016]
"CCleaner Monitoring"=C:\Program Files\CCleaner\CCleaner.exe [2015-03-13 5529880]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{B5A7F190-DDA6-4420-B3BA-52453494E6CD}"=C:\PROGRA~1\MICROS~3\Office14\GROOVEEX.DLL [2013-12-19 4171480]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=credssp.dll

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MsMpSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\MsMpSvc]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorUser"=3
"EnableLUA"=0
"EnableUIADesktopToggle"=0
"PromptOnSecureDesktop"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=145

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.msadpcm"=msadp32.acm
"midimapper"=midimap.dll
"wavemapper"=msacm32.drv
"vidc.uyvy"=msyuv.dll
"vidc.yuy2"=msyuv.dll
"vidc.yvyu"=msyuv.dll
"vidc.iyuv"=iyuv_32.dll
"vidc.i420"=iyuv_32.dll
"vidc.yvu9"=tsbyuv.dll
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"vidc.cvid"=iccvid.dll
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"aux1"=wdmaud.drv

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*

======List of files/folders created in the last 1 month======

2015-04-08 14:20:01 ----D---- C:\Program Files\Mozilla Firefox
2015-04-07 22:39:29 ----D---- C:\_OTM
2015-04-07 21:01:05 ----D---- C:\Program Files\trend micro
2015-04-07 21:01:04 ----D---- C:\rsit
2015-04-07 20:49:27 ----A---- C:\Windows\system32\drivers\TrueSight.sys
2015-04-07 20:49:26 ----D---- C:\ProgramData\RogueKiller
2015-04-07 20:36:52 ----SHD---- C:\$RECYCLE.BIN
2015-04-07 20:33:08 ----D---- C:\AdwCleaner
2015-04-07 19:30:31 ----D---- C:\Windows\Minidump
2015-04-07 19:21:54 ----D---- C:\Windows\erdnt
2015-04-07 19:08:43 ----D---- C:\Program Files\CCleaner
2015-04-07 18:45:34 ----D---- C:\Program Files\Enigma Software Group
2015-04-07 18:44:31 ----D---- C:\Program Files\Common Files\Wise Installation Wizard
2015-04-06 03:00:39 ----SD---- C:\Windows\system32\GWX
2015-04-03 16:17:02 ----A---- C:\Windows\wininit.ini
2015-04-03 15:27:50 ----D---- C:\ProgramData\Spybot - Search & Destroy
2015-04-03 13:58:55 ----D---- C:\ProgramData\Malwarebytes
2015-03-25 10:17:29 ----A---- C:\Windows\system32\generaltel.dll
2015-03-25 10:17:29 ----A---- C:\Windows\system32\appraiser.dll
2015-03-25 10:17:29 ----A---- C:\Windows\system32\aeinv.dll
2015-03-25 10:17:29 ----A---- C:\Windows\system32\acmigration.dll
2015-03-25 10:17:28 ----A---- C:\Windows\system32\invagent.dll
2015-03-25 10:17:28 ----A---- C:\Windows\system32\devinv.dll
2015-03-25 10:17:27 ----A---- C:\Windows\system32\aepic.dll
2015-03-25 10:17:27 ----A---- C:\Windows\system32\aepdu.dll
2015-03-18 23:04:57 ----D---- C:\Program Files\Common Files\DESIGNER

======List of files/folders modified in the last 1 month======

2015-04-12 10:06:46 ----D---- C:\Windows\Prefetch
2015-04-12 10:04:10 ----D---- C:\Windows\Temp
2015-04-12 01:21:44 ----D---- C:\Windows\system32\config
2015-04-11 07:48:25 ----SHD---- C:\System Volume Information
2015-04-11 07:45:42 ----D---- C:\Program Files\Mozilla Maintenance Service
2015-04-08 16:40:23 ----RD---- C:\Program Files
2015-04-08 16:35:50 ----SD---- C:\Users\Tom\AppData\Roaming\Microsoft
2015-04-07 22:39:29 ----D---- C:\Windows\Tasks
2015-04-07 22:39:29 ----D---- C:\Windows
2015-04-07 21:34:23 ----D---- C:\Program Files\WinRAR
2015-04-07 21:17:07 ----D---- C:\Windows\system32\drivers
2015-04-07 21:04:41 ----D---- C:\Windows\system32\Tasks
2015-04-07 21:00:49 ----SHD---- C:\Windows\Installer
2015-04-07 21:00:43 ----D---- C:\Windows\System32
2015-04-07 20:59:51 ----D---- C:\Windows\inf
2015-04-07 20:49:26 ----HD---- C:\ProgramData
2015-04-07 20:40:46 ----D---- C:\Windows\SoftwareDistribution
2015-04-07 20:35:01 ----D---- C:\Program Files\TeamViewer
2015-04-07 20:34:28 ----D---- C:\Program Files\Common Files
2015-04-07 19:54:12 ----RSD---- C:\Windows\Fonts
2015-04-07 19:09:37 ----D---- C:\Users\Tom\AppData\Roaming\TeamViewer
2015-04-06 03:01:02 ----D---- C:\Windows\winsxs
2015-04-06 03:00:54 ----D---- C:\Windows\Logs
2015-04-03 16:17:03 ----SD---- C:\ProgramData\Microsoft
2015-04-03 16:13:20 ----A---- C:\Windows\system32\PerfStringBackup.INI
2015-04-03 14:48:25 ----D---- C:\Downloads
2015-04-03 14:31:21 ----A---- C:\Windows\system32\FlashPlayerApp.exe
2015-04-03 14:26:43 ----D---- C:\Windows\registration
2015-04-03 13:59:38 ----D---- C:\Windows\debug
2015-03-31 17:52:42 ----D---- C:\ProgramData\Microsoft Help
2015-03-27 07:26:01 ----SD---- C:\Windows\system32\CompatTel
2015-03-27 07:26:01 ----D---- C:\Windows\system32\wbem
2015-03-27 07:26:01 ----D---- C:\Windows\system32\appraiser
2015-03-27 07:26:00 ----D---- C:\Windows\AppPatch
2015-03-18 04:10:49 ----D---- C:\Windows\Microsoft.NET
2015-03-18 04:09:32 ----RSD---- C:\Windows\assembly
2015-03-17 13:19:49 ----D---- C:\Windows\rescache
2015-03-17 12:42:47 ----SHD---- C:\Boot
2015-03-17 12:37:48 ----D---- C:\Windows\system32\en-US
2015-03-17 12:37:47 ----D---- C:\Program Files\Internet Explorer
2015-03-17 12:37:46 ----D---- C:\Windows\system32\cs-CZ
2015-03-17 12:37:44 ----D---- C:\Windows\system32\Dism
2015-03-17 12:37:44 ----D---- C:\Program Files\Windows Media Player
2015-03-17 12:37:42 ----D---- C:\Windows\system32\Boot

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 MpFilter;Microsoft Malware Protection Driver; C:\Windows\system32\DRIVERS\MpFilter.sys [2014-11-15 239224]
R0 rdyboost;ReadyBoost; C:\Windows\System32\drivers\rdyboost.sys [2010-11-20 173440]
R2 NisDrv;Microsoft Network Inspection System; C:\Windows\system32\DRIVERS\NisDrvWFP.sys [2014-11-15 95408]
R2 SSPORT;SSPORT; \??\C:\Windows\system32\Drivers\SSPORT.sys [2013-04-18 5120]
R3 amdkmdag;amdkmdag; C:\Windows\system32\DRIVERS\atikmdag.sys [2014-04-18 13515264]
R3 amdkmdap;amdkmdap; C:\Windows\system32\DRIVERS\atikmpag.sys [2014-04-18 512000]
R3 AtiHDAudioService;AMD Function Driver for HD Audio Service; C:\Windows\system32\drivers\AtihdW73.sys [2013-12-19 77824]
R3 RTL8167;Ovladač Realtek 8167 NT; C:\Windows\system32\DRIVERS\Rt86win7.sys [2009-07-14 139776]
R3 usbscan;Ovladač skeneru USB; C:\Windows\system32\DRIVERS\usbscan.sys [2013-07-03 36352]
S2 Parvdm;Parvdm; C:\Windows\system32\DRIVERS\parvdm.sys [2009-07-14 8704]
S3 aic78xx;aic78xx; C:\Windows\system32\DRIVERS\djsvs.sys [2009-07-14 70720]
S3 amdagp;Ovladač filtru AMD portu AGP; C:\Windows\system32\drivers\amdagp.sys [2009-07-14 53312]
S3 b57nd60x;Broadcom NetXtreme Gigabit Ethernet - NDIS 6.0; C:\Windows\system32\DRIVERS\b57nd60x.sys [2009-07-14 229888]
S3 BridgeMP;@%SystemRoot%\system32\bridgeres.dll,-1; C:\Windows\system32\DRIVERS\bridge.sys [2009-07-14 78336]
S3 esgiguard;esgiguard; \??\C:\Program Files\Enigma Software Group\SpyHunter\esgiguard.sys []
S3 MBAMSwissArmy;MBAMSwissArmy; \??\C:\Windows\system32\drivers\MBAMSwissArmy.sys []
S3 pciide;pciide; C:\Windows\system32\drivers\pciide.sys [2009-07-14 12368]
S3 sisagp;Filtr SIS sběrnice AGP; C:\Windows\system32\drivers\sisagp.sys [2009-07-14 52304]
S3 TsUsbFlt;@%SystemRoot%\system32\drivers\tsusbflt.sys,-1; C:\Windows\System32\drivers\tsusbflt.sys [2010-11-20 52224]
S3 viaagp;Filtr VIA sběrnice AGP; C:\Windows\system32\drivers\viaagp.sys [2009-07-14 53328]
S3 ViaC7;VIA C7 Processor Driver; C:\Windows\system32\DRIVERS\viac7.sys [2009-07-14 52736]
S3 WinUsb;WinUsb; C:\Windows\system32\DRIVERS\WinUsb.sys [2010-11-20 35968]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 AdobeARMservice;Adobe Acrobat Update Service; C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe [2014-12-19 81088]
R2 AMD External Events Utility;AMD External Events Utility; C:\Windows\system32\atiesrxx.exe [2014-04-18 208896]
R2 MsMpSvc;Microsoft Antimalware Service; c:\Program Files\Microsoft Security Client\MsMpEng.exe [2015-01-30 22184]
R2 TeamViewer;TeamViewer 10; C:\Program Files\TeamViewer\TeamViewer_Service.exe [2015-03-30 5448464]
R3 NisSrv;@c:\Program Files\Microsoft Security Client\MpAsDesc.dll,-243; c:\Program Files\Microsoft Security Client\NisSrv.exe [2015-01-30 284472]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2013-09-11 105144]
S2 gupdate;Služba Google Update (gupdate); C:\Program Files\Google\Update\GoogleUpdate.exe [2014-05-16 116648]
S2 SkypeUpdate;Skype Updater; C:\Program Files\Skype\Updater\Updater.exe [2014-04-03 315008]
S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service; C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2015-04-03 268464]
S3 gupdatem;Služba Google Update (gupdatem); C:\Program Files\Google\Update\GoogleUpdate.exe [2014-05-16 116648]
S3 IEEtwCollectorService;@%SystemRoot%\system32\ieetwcollectorres.dll,-1000; C:\Windows\system32\IEEtwCollector.exe [2015-02-20 102912]
S3 Microsoft SharePoint Workspace Audit Service;Microsoft SharePoint Workspace Audit Service; C:\Program Files\Microsoft Office\Office14\GROOVE.EXE [2013-12-19 30814400]
S3 MozillaMaintenance;Mozilla Maintenance Service; C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe [2015-04-08 148080]
S3 ose;Office Source Engine; C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2010-01-09 149352]
S3 osppsvc;Office Software Protection Platform; C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE [2010-01-09 4640000]
S3 WatAdminSvc;@%SystemRoot%\system32\Wat\WatUX.exe,-601; C:\Windows\system32\Wat\WatAdminSvc.exe [2014-05-16 1343400]
S4 aspnet_state;Stavová služba ASP.NET; C:\Windows\Microsoft.NET\Framework\v4.0.30319\aspnet_state.exe [2013-09-11 46688]
S4 NetMsmqActivator;@C:\Windows\Microsoft.NET\Framework\v4.0.30319\\ServiceModelInstallRC.dll,-8195; C:\Windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe [2013-09-11 139856]
S4 NetPipeActivator;@C:\Windows\Microsoft.NET\Framework\v4.0.30319\\ServiceModelInstallRC.dll,-8197; C:\Windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe [2013-09-11 139856]
S4 NetTcpActivator;@C:\Windows\Microsoft.NET\Framework\v4.0.30319\\ServiceModelInstallRC.dll,-8199; C:\Windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe [2013-09-11 139856]

-----------------EOF-----------------

Log je již OK. Znovu spusťte OTM a klikněte na >CleanUp!<. OTM po sobě uklidí. Nakonec restartujte PC.
Udělejte kompletní sken MBAM: http://www.malwarebytes.org/mbam.php a dejte log. Předem nic nemažte.

Zde je log z MBAM:

Malwarebytes Anti-Malware
www.malwarebytes.org

Datum skenování: 12.4.2015
Čas skenování: 11:39:55
Protokol:
Správce: Ano

Verze: 2.01.4.1018
Databáze malwaru: v2015.04.11.08
Databáze rootkitů: v2015.03.31.01
Licence: Bezplatná verze
Ochrana proti malwaru: Vypnuto
Ochrana proti škodlivým webovým stránkám: Vypnuto
Ochrana programu: Vypnuto

OS: Windows 7 Service Pack 1
CPU: x86
Souborový systém: NTFS
Uživatel: Tom

Typ skenu: Vlastní sken
Výsledek: Dokončeno
Prohledaných objektů: 403312
Uplynulý čas: 48 min, 0 sek

Paměť: Zapnuto
Po spuštění: Zapnuto
Souborový systém: Zapnuto
Archivy: Zapnuto
Rootkity: Zapnuto
Heuristika: Zapnuto
PUP: Zapnuto
PUM: Zapnuto

Procesy: 0
(Nenalezeny žádné škodlivé položky)

Moduly: 0
(Nenalezeny žádné škodlivé položky)

Klíče registru: 0
(Nenalezeny žádné škodlivé položky)

Hodnoty registru: 0
(Nenalezeny žádné škodlivé položky)

Data registru: 0
(Nenalezeny žádné škodlivé položky)

Složky: 0
(Nenalezeny žádné škodlivé položky)

Soubory: 2
BitcoinMiner, C:\Windows\inf\msbcvvtk\msbcvvtk.exe, , [a7ad105b563468ce9884df4ea75adc24],
Trojan.Agent.W, C:\Windows\Setup\SCRIPTS\Windows7Loader.exe, , [66eecc9f8ffbe94d5a40f7afe91cec14],

Fyzické sektory: 0
(Nenalezeny žádné škodlivé položky)


(end)

Vše, co MBAM nalezl, smažte.

Smazáno, restartováno, pročištěno CCleanerem, problém trvá.

Tak po úplné odinstalaci Firefoxu, včetně smazání profilu a všech ostatních složek, a nové instalaci se zatím problém neprojevil.
Zatím tedy moc díky, téma se můžete uzavřít, pokud by se to objevilo znovu, napíšu.

Přesně tohle bych vám teď navrhl. FF lze zazálohovat pomocí MozBackup: http://www.stahuj.centrum.cz/utility_a_ ... mozbackup/ Po nové instalaci nakopírujete zpět jen záložky a hesla.