Jak odstranit Omniboxes - prosím o radu
Napsal: 18 črc 2015 13:06
Zdravím,
prosím o pomoc: po aktualizaci KMPlayeru se mi v Chrome místo Googlu objevilo jakési Omniboxes, nepomohla ani Revo odinstalace. Teď mi v prohlížeči pořád vyskakují nějaká okna, reklamy, vyhledávací lišty a jiné blbosti... Můžu poprosit o radu, jak se toho zbavit? Předem díky moc a přikládám logy:
Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 18-07-2015
Ran by Lubosh (administrator) on POPO-498C751C3E on 18-07-2015 13:56:34
Running from C:\Documents and Settings\Lubosh\Plocha
Loaded Profiles: Lubosh (Available Profiles: Lubosh)
Platform: Systém Microsoft Windows XP Professional Service Pack 3 (X86) OS Language: Čeština
Internet Explorer Version 8 (Default browser: Chrome)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/33 ... scan-tool/
==================== Processes (Whitelisted) =================
(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)
(Avast Software s.r.o.) C:\Program Files\AVAST Software\Avast\AvastSvc.exe
(DTools LIMITED) C:\Documents and Settings\All Users\Data aplikací\WindowsMangerProtect\ProtectWindowsManager.exe
(Avast Software s.r.o.) C:\Program Files\AVAST Software\Avast\AvastUI.exe
(Microsoft Corporation) C:\WINDOWS\system32\wbem\unsecapp.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
() C:\Program Files\Common Files\87737dd0-ad90-4193-bd48-336966b8d777\updater.exe
() C:\Documents and Settings\All Users\Data aplikací\87737dd0-ad90-4193-bd48-336966b8d777\plugincontainer.exe
() C:\Documents and Settings\All Users\Data aplikací\87737dd0-ad90-4193-bd48-336966b8d777\plugins\2\Plugin.exe
() C:\Documents and Settings\All Users\Data aplikací\87737dd0-ad90-4193-bd48-336966b8d777\plugins\5\Plugin.exe
() C:\Documents and Settings\All Users\Data aplikací\87737dd0-ad90-4193-bd48-336966b8d777\plugins\8\Plugin.exe
() C:\Documents and Settings\All Users\Data aplikací\87737dd0-ad90-4193-bd48-336966b8d777\plugins\7\Plugin.exe
() C:\Documents and Settings\All Users\Data aplikací\87737dd0-ad90-4193-bd48-336966b8d777\plugins\10\Plugin.exe
() C:\Documents and Settings\All Users\Data aplikací\87737dd0-ad90-4193-bd48-336966b8d777\plugins\3\Plugin.exe
() C:\Documents and Settings\All Users\Data aplikací\87737dd0-ad90-4193-bd48-336966b8d777\plugins\7\Plugin.exe
() C:\Documents and Settings\All Users\Data aplikací\87737dd0-ad90-4193-bd48-336966b8d777\plugins\3\Plugin.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Microsoft Corporation) C:\WINDOWS\system32\wscntfy.exe
==================== Registry (Whitelisted) ==================
(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)
HKLM\...\Run: [AvastUI.exe] => C:\Program Files\AVAST Software\Avast\AvastUI.exe [5515496 2015-05-26] (Avast Software s.r.o.)
HKLM\...\Run: [KernelFaultCheck] => %systemroot%\system32\dumprep 0 -k
HKLM\...\Run: [SunJavaUpdateSched] => C:\Program Files\Common Files\Java\Java Update\jusched.exe [335232 2015-04-10] (Oracle Corporation)
HKU\S-1-5-21-746137067-484763869-839522115-1003\...\Run: [UpdateAdmin] => C:\Documents and Settings\Lubosh\Local Settings\Data aplikací\UpdateAdmin\UpdateAdmin.exe [225552 2014-10-16] (DownloadAdmin)
ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShell.dll [2015-05-26] (Avast Software s.r.o.)
==================== Internet (Whitelisted) ====================
(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)
HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer: Policy restriction <======= ATTENTION
HKU\S-1-5-21-746137067-484763869-839522115-1003\SOFTWARE\Policies\Microsoft\Internet Explorer: Policy restriction <======= ATTENTION
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.com/?trackid=sp-006
HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.google.com/search?trackid=s ... earchTerms}
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL =
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL =
HKLM\Software\Microsoft\Internet Explorer\Main,Local Page =
HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.microsoft.com/isapi/redir.dl ... r=iesearch
HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.microsoft.com/isapi/redir.dl ... ar=msnhome
HKU\S-1-5-21-746137067-484763869-839522115-1003\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.com/?trackid=sp-006
HKU\S-1-5-21-746137067-484763869-839522115-1003\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.google.com/search?trackid=s ... earchTerms}
HKU\S-1-5-21-746137067-484763869-839522115-1003\Software\Microsoft\Internet Explorer\Main,Search Bar = https://www.google.com/?trackid=sp-006
HKLM\SOFTWARE\Microsoft\Internet Explorer\AboutURLs,Tabs: "about:newtab" <======= ATTENTION
SearchScopes: HKLM -> DefaultScope {E9410C70-B6AE-41FF-AB71-32F4B279EA5F} URL = https://www.google.com/search?trackid=s ... earchTerms}
SearchScopes: HKLM -> {15C4DF55-4B67-495A-A3D3-A497C4A49EE0} URL = http://search.seznam.cz/?sourceid=quick ... earchTerms}
SearchScopes: HKLM -> {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = http://www.omniboxes.com/web/?type=ds&t ... earchTerms}
SearchScopes: HKLM -> {E9410C70-B6AE-41FF-AB71-32F4B279EA5F} URL = https://www.google.com/search?trackid=s ... earchTerms}
SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-21-746137067-484763869-839522115-1003 -> DefaultScope {E9410C70-B6AE-41FF-AB71-32F4B279EA5F} URL = https://www.google.com/search?trackid=s ... earchTerms}
SearchScopes: HKU\S-1-5-21-746137067-484763869-839522115-1003 -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = http://www.omniboxes.com/web/?utm_sourc ... earchTerms}
SearchScopes: HKU\S-1-5-21-746137067-484763869-839522115-1003 -> {15C4DF55-4B67-495A-A3D3-A497C4A49EE0} URL = http://www.omniboxes.com/web/?utm_sourc ... earchTerms}
SearchScopes: HKU\S-1-5-21-746137067-484763869-839522115-1003 -> {2023ECEC-E06A-4372-A1C7-0B49F9E0FFF0} URL = http://www.omniboxes.com/web/?utm_sourc ... earchTerms}
SearchScopes: HKU\S-1-5-21-746137067-484763869-839522115-1003 -> {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = http://www.omniboxes.com/web/?utm_sourc ... earchTerms}
SearchScopes: HKU\S-1-5-21-746137067-484763869-839522115-1003 -> {E733165D-CBCF-4FDA-883E-ADEF965B476C} URL = http://www.omniboxes.com/web/?utm_sourc ... earchTerms}
SearchScopes: HKU\S-1-5-21-746137067-484763869-839522115-1003 -> {E9410C70-B6AE-41FF-AB71-32F4B279EA5F} URL = https://www.google.com/search?trackid=s ... earchTerms}
BHO: Adobe PDF Link Helper -> {18DF081C-E8AD-4283-A596-FA578C2EBDC3} -> C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2012-09-23] (Adobe Systems Incorporated)
BHO: Record Page -> {2335267c-dbba-4dd5-a9d0-c4db8e6a75a4} -> C:\Program Files\Record Page\Extensions\2335267c-dbba-4dd5-a9d0-c4db8e6a75a4.dll [2015-07-14] ()
BHO: No Name -> {51D26BB4-4D2C-4AE4-9873-5FF41B6DED1F} -> No File
BHO: Groove GFS Browser Helper -> {72853161-30C5-4D22-B7F9-0BBC1D38A37E} -> C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll [2006-10-27] (Microsoft Corporation)
BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre1.8.0_45\bin\ssv.dll [2015-07-18] (Oracle Corporation)
BHO: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2015-03-26] (Avast Software s.r.o.)
BHO: Adobe PDF Conversion Toolbar Helper -> {AE7CD045-E861-484f-8273-0445EE161910} -> C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll [2012-01-03] (Adobe Systems Incorporated)
BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre1.8.0_45\bin\jp2ssv.dll [2015-07-18] (Oracle Corporation)
BHO: SmartSelect Class -> {F4971EE7-DAA0-4053-9964-665D8EE6A077} -> C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll [2012-01-03] (Adobe Systems Incorporated)
Toolbar: HKLM - Adobe PDF - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll [2012-01-03] (Adobe Systems Incorporated)
Toolbar: HKU\S-1-5-21-746137067-484763869-839522115-1003 -> &Adresa - {01E04581-4EEE-11D0-BFE9-00AA005B4383} - C:\WINDOWS\system32\browseui.dll [2014-02-25] (Společnost Microsoft)
DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} http://windowsupdate.microsoft.com/wind ... 6675732765
Handler: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Program Files\Microsoft Office\Office12\GrooveSystemServices.dll [2006-10-27] (Microsoft Corporation)
Tcpip\Parameters: [DhcpNameServer] 213.46.172.36 213.46.172.37
Tcpip\..\Interfaces\{69CC7630-A94B-4A7E-9C7F-48497FC4055A}: [DhcpNameServer] 213.46.172.36 213.46.172.37
StartMenuInternet: IEXPLORE.EXE - C:\Program Files\Internet Explorer\iexplore.exe http://www.omniboxes.com/?type=sc&ts=14 ... A8F2534976
FireFox:
========
FF Plugin: @adobe.com/FlashPlayer -> C:\WINDOWS\system32\Macromed\Flash\NPSWF32_18_0_0_209.dll [2015-07-14] ()
FF Plugin: @java.com/DTPlugin,version=11.45.2 -> C:\Program Files\Java\jre1.8.0_45\bin\dtplugin\npDeployJava1.dll [2015-07-18] (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=11.45.2 -> C:\Program Files\Java\jre1.8.0_45\bin\plugin2\npjp2.dll [2015-07-18] (Oracle Corporation)
FF Plugin: @tools.google.com/Google Update;version=3 -> C:\Program Files\Google\Update\1.3.26.9\npGoogleUpdate3.dll [2015-02-05] (Google Inc.)
FF Plugin: @tools.google.com/Google Update;version=9 -> C:\Program Files\Google\Update\1.3.26.9\npGoogleUpdate3.dll [2015-02-05] (Google Inc.)
FF Plugin: @videolan.org/vlc,version=2.1.5 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2014-07-23] (VideoLAN)
FF Plugin: Adobe Acrobat -> C:\Program Files\Adobe\Acrobat 10.0\Acrobat\Air\nppdf32.dll [2012-01-03] (Adobe Systems Inc.)
FF Plugin: Adobe Reader -> C:\Program Files\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll [2014-08-05] (Adobe Systems Inc.)
FF Plugin: adobe.com/AdobeAAMDetect -> C:\Program Files\Common Files\Adobe\OOBE\PDApp\CCM\Utilities\npAdobeAAMDetect32.dll [2012-09-20] (Adobe Systems)
FF Plugin: adobe.com/AdobeExManDetect -> C:\Program Files\Adobe\Adobe Extension Manager CS6\npAdobeExManDetectX86.dll [2013-12-02] (Adobe Systems)
FF HKLM\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\AVAST Software\Avast\WebRep\FF
FF Extension: Avast Online Security - C:\Program Files\AVAST Software\Avast\WebRep\FF [2014-08-09]
FF HKLM\...\Firefox\Extensions: [web2pdfextension@web2pdf.adobedotcom] - C:\Program Files\Adobe\Acrobat 10.0\Acrobat\Browser\WCFirefoxExtn
FF Extension: Adobe Acrobat - Create PDF - C:\Program Files\Adobe\Acrobat 10.0\Acrobat\Browser\WCFirefoxExtn [2014-11-07]
Chrome:
=======
CHR Profile: C:\Documents and Settings\Lubosh\Local Settings\Data aplikací\Google\Chrome\User Data\Default
CHR Extension: (Google Docs) - C:\Documents and Settings\Lubosh\Local Settings\Data aplikací\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2014-07-30]
CHR Extension: (Google Drive) - C:\Documents and Settings\Lubosh\Local Settings\Data aplikací\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2014-07-30]
CHR Extension: (YouTube) - C:\Documents and Settings\Lubosh\Local Settings\Data aplikací\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2014-07-30]
CHR Extension: (Google Search) - C:\Documents and Settings\Lubosh\Local Settings\Data aplikací\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2014-07-30]
CHR Extension: (AdBlock) - C:\Documents and Settings\Lubosh\Local Settings\Data aplikací\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom [2014-12-15]
CHR Extension: (Avast Online Security) - C:\Documents and Settings\Lubosh\Local Settings\Data aplikací\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki [2014-08-10]
CHR Extension: (Google Wallet) - C:\Documents and Settings\Lubosh\Local Settings\Data aplikací\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2014-07-30]
CHR Extension: (Gmail) - C:\Documents and Settings\Lubosh\Local Settings\Data aplikací\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2014-07-30]
CHR Profile: C:\Documents and Settings\Lubosh\Local Settings\Data aplikací\Google\Chrome\User Data\Profile 1
CHR Extension: (No Name) - C:\Documents and Settings\Lubosh\Local Settings\Data aplikací\Google\Chrome\User Data\Profile 1\Extensions\Temp(2) [2015-03-26]
CHR Profile: C:\Documents and Settings\Lubosh\Local Settings\Data aplikací\Google\Chrome\User Data\Profile 2
CHR Extension: (No Name) - C:\Documents and Settings\Lubosh\Local Settings\Data aplikací\Google\Chrome\User Data\Profile 2\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2015-03-26]
CHR Extension: (No Name) - C:\Documents and Settings\Lubosh\Local Settings\Data aplikací\Google\Chrome\User Data\Profile 2\Extensions\aohghmighlieiainnegkcijnfilokake [2015-03-26]
CHR Extension: (Google Drive) - C:\Documents and Settings\Lubosh\Local Settings\Data aplikací\Google\Chrome\User Data\Profile 2\Extensions\apdfllckaahabafndbhieahigkjlhalf [2015-07-18]
CHR Extension: (Google Search) - C:\Documents and Settings\Lubosh\Local Settings\Data aplikací\Google\Chrome\User Data\Profile 2\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2015-03-28]
CHR Extension: (No Name) - C:\Documents and Settings\Lubosh\Local Settings\Data aplikací\Google\Chrome\User Data\Profile 2\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2015-03-26]
CHR Extension: (AdBlock) - C:\Documents and Settings\Lubosh\Local Settings\Data aplikací\Google\Chrome\User Data\Profile 2\Extensions\gighmmpiobklfepjocnamgkkbiglidom [2015-04-06]
CHR Extension: (Google Wallet) - C:\Documents and Settings\Lubosh\Local Settings\Data aplikací\Google\Chrome\User Data\Profile 2\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2015-05-15]
CHR Extension: (Gmail) - C:\Documents and Settings\Lubosh\Local Settings\Data aplikací\Google\Chrome\User Data\Profile 2\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2015-03-28]
CHR HKLM\...\Chrome\Extension: [bpegkgagfojjbcpkihigfmkojdmmimdf] - No Path Or update_url value
CHR HKLM\...\Chrome\Extension: [ehgldbbpchgpcfagfpfjgoomddhccfgh] - No Path Or update_url value
CHR HKLM\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChrome.crx [2015-03-26]
StartMenuInternet: chrome.exe - C:\Program Files\Google\Chrome\Application\chrome.exe http://www.omniboxes.com/?type=sc&ts=14 ... A8F2534976
========================== Services (Whitelisted) =================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [343336 2015-05-26] (Avast Software s.r.o.)
R2 Service Mgr RecordPage; C:\Documents and Settings\All Users\Data aplikací\87737dd0-ad90-4193-bd48-336966b8d777\plugincontainer.exe [650504 2015-07-18] ()
S3 SwitchBoard; C:\Program Files\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [517096 2010-02-19] (Adobe Systems Incorporated) [File not signed]
R2 Update Mgr RecordPage; C:\Program Files\Common Files\87737dd0-ad90-4193-bd48-336966b8d777\updater.exe [572680 2015-07-18] ()
R2 WindowsMangerProtect; C:\Documents and Settings\All Users\Data aplikací\WindowsMangerProtect\ProtectWindowsManager.exe [707240 2015-07-14] (DTools LIMITED) <==== ATTENTION
==================== Drivers (Whitelisted) ====================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
R3 aeaudio; C:\WINDOWS\System32\drivers\aeaudio.sys [100224 2003-03-13] (Andrea Electronics Corporation) [File not signed]
R2 aswHwid; C:\WINDOWS\system32\drivers\aswHwid.sys [24144 2015-05-26] ()
R2 aswMonFlt; C:\WINDOWS\system32\drivers\aswMonFlt.sys [74976 2015-05-26] (Avast Software s.r.o.)
R1 aswRdr; C:\WINDOWS\system32\drivers\aswRdr.sys [55200 2015-05-26] (Avast Software s.r.o.)
R0 aswRvrt; C:\WINDOWS\system32\Drivers\aswRvrt.sys [49904 2015-05-26] ()
R1 aswSnx; C:\WINDOWS\system32\drivers\aswSnx.sys [787760 2015-05-26] (Avast Software s.r.o.)
R1 aswSP; C:\WINDOWS\system32\drivers\aswSP.sys [428120 2015-06-26] (Avast Software s.r.o.)
R1 aswTdi; C:\WINDOWS\system32\drivers\aswTdi.sys [57888 2015-05-26] (Avast Software s.r.o.)
R0 aswVmm; C:\WINDOWS\system32\Drivers\aswVmm.sys [209048 2015-05-26] ()
R3 b57w2k; C:\WINDOWS\System32\DRIVERS\b57xp32.sys [156160 2006-05-10] (Broadcom Corporation) [File not signed]
S3 massfilter; C:\WINDOWS\System32\drivers\massfilter.sys [9216 2010-02-22] (MBB Incorporated)
R2 npf; C:\WINDOWS\System32\drivers\npf.sys [50704 2010-01-27] (CACE Technologies, Inc.)
R3 smwdm; C:\WINDOWS\System32\drivers\smwdm.sys [578304 2003-05-27] (Analog Devices, Inc.) [File not signed]
U5 ScsiPort; C:\WINDOWS\system32\drivers\scsiport.sys [96384 2008-04-14] (Microsoft Corporation)
==================== NetSvcs (Whitelisted) ===================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
==================== One Month Created files and folders ========
(If an entry is included in the fixlist, the file/folder will be moved.)
2015-07-18 13:56 - 2015-07-18 13:57 - 00019083 _____ C:\Documents and Settings\Lubosh\Plocha\FRST.txt
2015-07-18 13:56 - 2015-07-18 13:56 - 00000000 ____D C:\FRST
2015-07-18 13:55 - 2015-07-18 13:55 - 01637376 _____ (Farbar) C:\Documents and Settings\Lubosh\Plocha\FRST.exe
2015-07-18 13:53 - 2015-07-18 13:53 - 00112640 _____ (forum.viry.cz) C:\Documents and Settings\Lubosh\Plocha\Nepotvrzeno 498664.crdownload
2015-07-18 13:50 - 2015-07-18 13:50 - 00015107 _____ C:\WINDOWS\setupapi.log
2015-07-18 13:50 - 2015-07-18 13:50 - 00000000 _____ C:\WINDOWS\setuperr.log
2015-07-18 13:50 - 2015-07-18 13:50 - 00000000 _____ C:\WINDOWS\setupact.log
2015-07-18 12:40 - 2015-07-18 12:40 - 00000000 ____D C:\Program Files\Common Files\Java
2015-07-18 12:28 - 2015-07-18 12:38 - 00096680 _____ (Oracle Corporation) C:\WINDOWS\system32\WindowsAccessBridge.dll
2015-07-15 22:58 - 2015-07-18 13:35 - 00001612 _____ C:\WINDOWS\wmsetup.log
2015-07-14 23:11 - 2015-07-18 13:11 - 00000346 _____ C:\WINDOWS\Tasks\UpdateAdmin.job
2015-07-14 23:11 - 2015-07-18 12:59 - 00000000 ____D C:\Documents and Settings\All Users\Data aplikací\87737dd0-ad90-4193-bd48-336966b8d777
2015-07-14 23:11 - 2015-07-18 12:53 - 00000000 ____D C:\Program Files\Common Files\87737dd0-ad90-4193-bd48-336966b8d777
2015-07-14 23:11 - 2015-07-14 23:11 - 00000000 ____D C:\Program Files\Record Page
2015-07-14 23:11 - 2015-07-14 23:11 - 00000000 ____D C:\Documents and Settings\Lubosh\Local Settings\Data aplikací\UpdateAdmin
2015-07-14 23:11 - 2015-07-14 23:11 - 00000000 ____D C:\Documents and Settings\All Users\Nabídka Start\Programy\UpdateAdmin
2015-07-14 23:11 - 2015-07-14 23:11 - 00000000 ____D C:\Documents and Settings\All Users\Data aplikací\WindowsMangerProtect
2015-07-14 23:11 - 2015-07-14 23:11 - 00000000 ____D C:\Documents and Settings\All Users\Data aplikací\IHProtectUpDate
2015-07-14 23:11 - 2015-07-14 23:11 - 00000000 _____ C:\WINDOWS\prleth.sys
2015-07-14 23:11 - 2015-07-14 23:11 - 00000000 _____ C:\WINDOWS\hgfs.sys
2015-07-01 09:41 - 2015-07-01 09:41 - 00000308 _____ C:\Documents and Settings\Lubosh\Plocha\stažený soubor
2015-06-25 02:13 - 2015-07-14 20:13 - 18524336 _____ (Adobe Systems Incorporated) C:\WINDOWS\system32\FlashPlayerInstaller.exe
2015-06-24 00:07 - 2015-06-24 00:07 - 00033794 _____ C:\Documents and Settings\Lubosh\Plocha\video-1435096526.mp4.mp4
==================== One Month Modified files and folders ========
(If an entry is included in the fixlist, the file/folder will be moved.)
2015-07-18 13:57 - 2015-04-21 20:33 - 00000000 ____D C:\Documents and Settings\Lubosh\Local Settings\temp
2015-07-18 13:56 - 2014-07-29 23:22 - 00000000 ____D C:\Documents and Settings\Lubosh\Plocha
2015-07-18 13:35 - 2014-07-29 23:16 - 01841254 _____ C:\WINDOWS\WindowsUpdate.log
2015-07-18 13:14 - 2014-07-29 23:22 - 00000000 __RHD C:\Documents and Settings\Lubosh\Data aplikací
2015-07-18 13:13 - 2014-08-28 21:04 - 00000914 _____ C:\WINDOWS\Tasks\Adobe Flash Player Updater.job
2015-07-18 12:38 - 2014-08-10 22:16 - 00146432 _____ (Oracle Corporation) C:\WINDOWS\system32\javacpl.cpl
2015-07-18 12:34 - 2014-08-10 22:13 - 00000000 ____D C:\Program Files\Java
2015-07-18 11:51 - 2014-08-09 16:39 - 00000364 ____H C:\WINDOWS\Tasks\avast! Emergency Update.job
2015-07-18 11:45 - 2014-08-09 16:29 - 00000315 _____ C:\WINDOWS\wiadebug.log
2015-07-18 11:45 - 2014-08-09 16:29 - 00000049 _____ C:\WINDOWS\wiaservc.log
2015-07-18 11:45 - 2014-07-29 23:20 - 00000006 ____H C:\WINDOWS\Tasks\SA.DAT
2015-07-18 02:22 - 2014-07-29 23:22 - 00000178 ___SH C:\Documents and Settings\Lubosh\ntuser.ini
2015-07-18 02:22 - 2014-07-29 23:20 - 00032486 _____ C:\WINDOWS\SchedLgU.Txt
2015-07-18 02:21 - 2014-07-30 05:50 - 00000000 ____D C:\Documents and Settings\Lubosh\Data aplikací\vlc
2015-07-18 02:00 - 2014-08-09 16:30 - 00000344 _____ C:\WINDOWS\Tasks\AdobeAAMUpdater-1.0-POPO-498C751C3E-Lubosh.job
2015-07-18 02:00 - 2014-08-09 16:19 - 00000000 ____D C:\Documents and Settings\Lubosh\Local Settings\Data aplikací\Adobe
2015-07-18 00:25 - 2007-08-02 14:00 - 00012984 _____ C:\WINDOWS\system32\wpa.dbl
2015-07-16 14:39 - 2014-07-31 05:09 - 00001549 _____ C:\Documents and Settings\Lubosh\Plocha\KMP Games.lnk
2015-07-16 14:22 - 2014-07-31 05:33 - 00000000 ____D C:\WINDOWS\system32\MRT
2015-07-16 01:23 - 2014-08-16 17:12 - 00000000 ___RD C:\Documents and Settings\Lubosh\Dokumenty\Filmy
2015-07-15 18:29 - 2014-07-30 01:06 - 00000000 ___RD C:\Documents and Settings\All Users\Nabídka Start
2015-07-14 23:14 - 2015-01-04 00:01 - 00000522 _____ C:\Documents and Settings\Lubosh\Plocha\KMPlayer.lnk
2015-07-14 23:14 - 2015-01-04 00:00 - 00000000 ____D C:\KMPlayer
2015-07-14 23:11 - 2014-07-30 01:06 - 00000000 __RHD C:\Documents and Settings\All Users\Data aplikací
2015-07-14 23:11 - 2014-07-30 01:06 - 00000000 ___RD C:\Documents and Settings\All Users\Nabídka Start\Programy
2015-07-14 23:11 - 2014-07-29 23:22 - 00000000 ___HD C:\Documents and Settings\Lubosh\Local Settings\Data aplikací
2015-07-14 23:10 - 2014-07-30 00:30 - 00002095 _____ C:\Documents and Settings\All Users\Plocha\Google Chrome.lnk
2015-07-14 23:10 - 2014-07-29 23:22 - 00001085 _____ C:\Documents and Settings\Lubosh\Nabídka Start\Programy\Internet Explorer.lnk
2015-07-14 22:39 - 2014-07-30 21:33 - 00000000 ____D C:\Documents and Settings\Lubosh\Data aplikací\uTorrent
2015-07-14 20:13 - 2014-08-01 10:11 - 00778416 _____ (Adobe Systems Incorporated) C:\WINDOWS\system32\FlashPlayerApp.exe
2015-07-14 20:13 - 2014-08-01 10:11 - 00142512 _____ (Adobe Systems Incorporated) C:\WINDOWS\system32\FlashPlayerCPLApp.cpl
2015-07-12 21:52 - 2014-07-30 05:45 - 00100352 _____ C:\Documents and Settings\Lubosh\Local Settings\Data aplikací\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
2015-07-12 21:37 - 2014-08-12 09:48 - 00000000 ____D C:\WINDOWS\Minidump
2015-07-12 21:36 - 2014-07-29 23:22 - 00000000 ____D C:\Documents and Settings\Lubosh
2015-07-03 08:49 - 2014-07-31 05:32 - 127070192 _____ (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
2015-06-27 22:38 - 2014-07-29 23:22 - 00000000 ___RD C:\Documents and Settings\Lubosh\Dokumenty\Hudba
2015-06-26 18:24 - 2014-08-09 16:39 - 00428120 _____ (Avast Software s.r.o.) C:\WINDOWS\system32\Drivers\aswsp.sys
==================== Files in the root of some directories =======
2014-07-30 05:45 - 2015-07-12 21:52 - 0100352 _____ () C:\Documents and Settings\Lubosh\Local Settings\Data aplikací\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
2014-08-05 12:46 - 2014-08-05 12:46 - 0000878 ____C () C:\Documents and Settings\Lubosh\Local Settings\Data aplikací\recently-used.xbel
Some files in TEMP:
====================
C:\Documents and Settings\Lubosh\Local Settings\temp\KMPAddedCode_KMP_adpageopen_Step1.exe
C:\Documents and Settings\Lubosh\Local Settings\temp\KMP_3.9.1.138.exe
==================== Bamital & volsnap Check =================
(There is no automatic fix for files that do not pass verification.)
C:\WINDOWS\explorer.exe => File is digitally signed
C:\WINDOWS\system32\winlogon.exe => File is digitally signed
C:\WINDOWS\system32\svchost.exe => File is digitally signed
C:\WINDOWS\system32\services.exe => File is digitally signed
C:\WINDOWS\system32\User32.dll => File is digitally signed
C:\WINDOWS\system32\userinit.exe => File is digitally signed
C:\WINDOWS\system32\rpcss.dll => File is digitally signed
C:\WINDOWS\system32\Drivers\volsnap.sys => File is digitally signed
==================== End of log ============================
prosím o pomoc: po aktualizaci KMPlayeru se mi v Chrome místo Googlu objevilo jakési Omniboxes, nepomohla ani Revo odinstalace. Teď mi v prohlížeči pořád vyskakují nějaká okna, reklamy, vyhledávací lišty a jiné blbosti... Můžu poprosit o radu, jak se toho zbavit? Předem díky moc a přikládám logy:
Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 18-07-2015
Ran by Lubosh (administrator) on POPO-498C751C3E on 18-07-2015 13:56:34
Running from C:\Documents and Settings\Lubosh\Plocha
Loaded Profiles: Lubosh (Available Profiles: Lubosh)
Platform: Systém Microsoft Windows XP Professional Service Pack 3 (X86) OS Language: Čeština
Internet Explorer Version 8 (Default browser: Chrome)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/33 ... scan-tool/
==================== Processes (Whitelisted) =================
(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)
(Avast Software s.r.o.) C:\Program Files\AVAST Software\Avast\AvastSvc.exe
(DTools LIMITED) C:\Documents and Settings\All Users\Data aplikací\WindowsMangerProtect\ProtectWindowsManager.exe
(Avast Software s.r.o.) C:\Program Files\AVAST Software\Avast\AvastUI.exe
(Microsoft Corporation) C:\WINDOWS\system32\wbem\unsecapp.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
() C:\Program Files\Common Files\87737dd0-ad90-4193-bd48-336966b8d777\updater.exe
() C:\Documents and Settings\All Users\Data aplikací\87737dd0-ad90-4193-bd48-336966b8d777\plugincontainer.exe
() C:\Documents and Settings\All Users\Data aplikací\87737dd0-ad90-4193-bd48-336966b8d777\plugins\2\Plugin.exe
() C:\Documents and Settings\All Users\Data aplikací\87737dd0-ad90-4193-bd48-336966b8d777\plugins\5\Plugin.exe
() C:\Documents and Settings\All Users\Data aplikací\87737dd0-ad90-4193-bd48-336966b8d777\plugins\8\Plugin.exe
() C:\Documents and Settings\All Users\Data aplikací\87737dd0-ad90-4193-bd48-336966b8d777\plugins\7\Plugin.exe
() C:\Documents and Settings\All Users\Data aplikací\87737dd0-ad90-4193-bd48-336966b8d777\plugins\10\Plugin.exe
() C:\Documents and Settings\All Users\Data aplikací\87737dd0-ad90-4193-bd48-336966b8d777\plugins\3\Plugin.exe
() C:\Documents and Settings\All Users\Data aplikací\87737dd0-ad90-4193-bd48-336966b8d777\plugins\7\Plugin.exe
() C:\Documents and Settings\All Users\Data aplikací\87737dd0-ad90-4193-bd48-336966b8d777\plugins\3\Plugin.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Microsoft Corporation) C:\WINDOWS\system32\wscntfy.exe
==================== Registry (Whitelisted) ==================
(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)
HKLM\...\Run: [AvastUI.exe] => C:\Program Files\AVAST Software\Avast\AvastUI.exe [5515496 2015-05-26] (Avast Software s.r.o.)
HKLM\...\Run: [KernelFaultCheck] => %systemroot%\system32\dumprep 0 -k
HKLM\...\Run: [SunJavaUpdateSched] => C:\Program Files\Common Files\Java\Java Update\jusched.exe [335232 2015-04-10] (Oracle Corporation)
HKU\S-1-5-21-746137067-484763869-839522115-1003\...\Run: [UpdateAdmin] => C:\Documents and Settings\Lubosh\Local Settings\Data aplikací\UpdateAdmin\UpdateAdmin.exe [225552 2014-10-16] (DownloadAdmin)
ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShell.dll [2015-05-26] (Avast Software s.r.o.)
==================== Internet (Whitelisted) ====================
(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)
HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer: Policy restriction <======= ATTENTION
HKU\S-1-5-21-746137067-484763869-839522115-1003\SOFTWARE\Policies\Microsoft\Internet Explorer: Policy restriction <======= ATTENTION
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.com/?trackid=sp-006
HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.google.com/search?trackid=s ... earchTerms}
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL =
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL =
HKLM\Software\Microsoft\Internet Explorer\Main,Local Page =
HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.microsoft.com/isapi/redir.dl ... r=iesearch
HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.microsoft.com/isapi/redir.dl ... ar=msnhome
HKU\S-1-5-21-746137067-484763869-839522115-1003\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.com/?trackid=sp-006
HKU\S-1-5-21-746137067-484763869-839522115-1003\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.google.com/search?trackid=s ... earchTerms}
HKU\S-1-5-21-746137067-484763869-839522115-1003\Software\Microsoft\Internet Explorer\Main,Search Bar = https://www.google.com/?trackid=sp-006
HKLM\SOFTWARE\Microsoft\Internet Explorer\AboutURLs,Tabs: "about:newtab" <======= ATTENTION
SearchScopes: HKLM -> DefaultScope {E9410C70-B6AE-41FF-AB71-32F4B279EA5F} URL = https://www.google.com/search?trackid=s ... earchTerms}
SearchScopes: HKLM -> {15C4DF55-4B67-495A-A3D3-A497C4A49EE0} URL = http://search.seznam.cz/?sourceid=quick ... earchTerms}
SearchScopes: HKLM -> {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = http://www.omniboxes.com/web/?type=ds&t ... earchTerms}
SearchScopes: HKLM -> {E9410C70-B6AE-41FF-AB71-32F4B279EA5F} URL = https://www.google.com/search?trackid=s ... earchTerms}
SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-21-746137067-484763869-839522115-1003 -> DefaultScope {E9410C70-B6AE-41FF-AB71-32F4B279EA5F} URL = https://www.google.com/search?trackid=s ... earchTerms}
SearchScopes: HKU\S-1-5-21-746137067-484763869-839522115-1003 -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = http://www.omniboxes.com/web/?utm_sourc ... earchTerms}
SearchScopes: HKU\S-1-5-21-746137067-484763869-839522115-1003 -> {15C4DF55-4B67-495A-A3D3-A497C4A49EE0} URL = http://www.omniboxes.com/web/?utm_sourc ... earchTerms}
SearchScopes: HKU\S-1-5-21-746137067-484763869-839522115-1003 -> {2023ECEC-E06A-4372-A1C7-0B49F9E0FFF0} URL = http://www.omniboxes.com/web/?utm_sourc ... earchTerms}
SearchScopes: HKU\S-1-5-21-746137067-484763869-839522115-1003 -> {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = http://www.omniboxes.com/web/?utm_sourc ... earchTerms}
SearchScopes: HKU\S-1-5-21-746137067-484763869-839522115-1003 -> {E733165D-CBCF-4FDA-883E-ADEF965B476C} URL = http://www.omniboxes.com/web/?utm_sourc ... earchTerms}
SearchScopes: HKU\S-1-5-21-746137067-484763869-839522115-1003 -> {E9410C70-B6AE-41FF-AB71-32F4B279EA5F} URL = https://www.google.com/search?trackid=s ... earchTerms}
BHO: Adobe PDF Link Helper -> {18DF081C-E8AD-4283-A596-FA578C2EBDC3} -> C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2012-09-23] (Adobe Systems Incorporated)
BHO: Record Page -> {2335267c-dbba-4dd5-a9d0-c4db8e6a75a4} -> C:\Program Files\Record Page\Extensions\2335267c-dbba-4dd5-a9d0-c4db8e6a75a4.dll [2015-07-14] ()
BHO: No Name -> {51D26BB4-4D2C-4AE4-9873-5FF41B6DED1F} -> No File
BHO: Groove GFS Browser Helper -> {72853161-30C5-4D22-B7F9-0BBC1D38A37E} -> C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll [2006-10-27] (Microsoft Corporation)
BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre1.8.0_45\bin\ssv.dll [2015-07-18] (Oracle Corporation)
BHO: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2015-03-26] (Avast Software s.r.o.)
BHO: Adobe PDF Conversion Toolbar Helper -> {AE7CD045-E861-484f-8273-0445EE161910} -> C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll [2012-01-03] (Adobe Systems Incorporated)
BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre1.8.0_45\bin\jp2ssv.dll [2015-07-18] (Oracle Corporation)
BHO: SmartSelect Class -> {F4971EE7-DAA0-4053-9964-665D8EE6A077} -> C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll [2012-01-03] (Adobe Systems Incorporated)
Toolbar: HKLM - Adobe PDF - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll [2012-01-03] (Adobe Systems Incorporated)
Toolbar: HKU\S-1-5-21-746137067-484763869-839522115-1003 -> &Adresa - {01E04581-4EEE-11D0-BFE9-00AA005B4383} - C:\WINDOWS\system32\browseui.dll [2014-02-25] (Společnost Microsoft)
DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} http://windowsupdate.microsoft.com/wind ... 6675732765
Handler: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Program Files\Microsoft Office\Office12\GrooveSystemServices.dll [2006-10-27] (Microsoft Corporation)
Tcpip\Parameters: [DhcpNameServer] 213.46.172.36 213.46.172.37
Tcpip\..\Interfaces\{69CC7630-A94B-4A7E-9C7F-48497FC4055A}: [DhcpNameServer] 213.46.172.36 213.46.172.37
StartMenuInternet: IEXPLORE.EXE - C:\Program Files\Internet Explorer\iexplore.exe http://www.omniboxes.com/?type=sc&ts=14 ... A8F2534976
FireFox:
========
FF Plugin: @adobe.com/FlashPlayer -> C:\WINDOWS\system32\Macromed\Flash\NPSWF32_18_0_0_209.dll [2015-07-14] ()
FF Plugin: @java.com/DTPlugin,version=11.45.2 -> C:\Program Files\Java\jre1.8.0_45\bin\dtplugin\npDeployJava1.dll [2015-07-18] (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=11.45.2 -> C:\Program Files\Java\jre1.8.0_45\bin\plugin2\npjp2.dll [2015-07-18] (Oracle Corporation)
FF Plugin: @tools.google.com/Google Update;version=3 -> C:\Program Files\Google\Update\1.3.26.9\npGoogleUpdate3.dll [2015-02-05] (Google Inc.)
FF Plugin: @tools.google.com/Google Update;version=9 -> C:\Program Files\Google\Update\1.3.26.9\npGoogleUpdate3.dll [2015-02-05] (Google Inc.)
FF Plugin: @videolan.org/vlc,version=2.1.5 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2014-07-23] (VideoLAN)
FF Plugin: Adobe Acrobat -> C:\Program Files\Adobe\Acrobat 10.0\Acrobat\Air\nppdf32.dll [2012-01-03] (Adobe Systems Inc.)
FF Plugin: Adobe Reader -> C:\Program Files\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll [2014-08-05] (Adobe Systems Inc.)
FF Plugin: adobe.com/AdobeAAMDetect -> C:\Program Files\Common Files\Adobe\OOBE\PDApp\CCM\Utilities\npAdobeAAMDetect32.dll [2012-09-20] (Adobe Systems)
FF Plugin: adobe.com/AdobeExManDetect -> C:\Program Files\Adobe\Adobe Extension Manager CS6\npAdobeExManDetectX86.dll [2013-12-02] (Adobe Systems)
FF HKLM\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\AVAST Software\Avast\WebRep\FF
FF Extension: Avast Online Security - C:\Program Files\AVAST Software\Avast\WebRep\FF [2014-08-09]
FF HKLM\...\Firefox\Extensions: [web2pdfextension@web2pdf.adobedotcom] - C:\Program Files\Adobe\Acrobat 10.0\Acrobat\Browser\WCFirefoxExtn
FF Extension: Adobe Acrobat - Create PDF - C:\Program Files\Adobe\Acrobat 10.0\Acrobat\Browser\WCFirefoxExtn [2014-11-07]
Chrome:
=======
CHR Profile: C:\Documents and Settings\Lubosh\Local Settings\Data aplikací\Google\Chrome\User Data\Default
CHR Extension: (Google Docs) - C:\Documents and Settings\Lubosh\Local Settings\Data aplikací\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2014-07-30]
CHR Extension: (Google Drive) - C:\Documents and Settings\Lubosh\Local Settings\Data aplikací\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2014-07-30]
CHR Extension: (YouTube) - C:\Documents and Settings\Lubosh\Local Settings\Data aplikací\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2014-07-30]
CHR Extension: (Google Search) - C:\Documents and Settings\Lubosh\Local Settings\Data aplikací\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2014-07-30]
CHR Extension: (AdBlock) - C:\Documents and Settings\Lubosh\Local Settings\Data aplikací\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom [2014-12-15]
CHR Extension: (Avast Online Security) - C:\Documents and Settings\Lubosh\Local Settings\Data aplikací\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki [2014-08-10]
CHR Extension: (Google Wallet) - C:\Documents and Settings\Lubosh\Local Settings\Data aplikací\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2014-07-30]
CHR Extension: (Gmail) - C:\Documents and Settings\Lubosh\Local Settings\Data aplikací\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2014-07-30]
CHR Profile: C:\Documents and Settings\Lubosh\Local Settings\Data aplikací\Google\Chrome\User Data\Profile 1
CHR Extension: (No Name) - C:\Documents and Settings\Lubosh\Local Settings\Data aplikací\Google\Chrome\User Data\Profile 1\Extensions\Temp(2) [2015-03-26]
CHR Profile: C:\Documents and Settings\Lubosh\Local Settings\Data aplikací\Google\Chrome\User Data\Profile 2
CHR Extension: (No Name) - C:\Documents and Settings\Lubosh\Local Settings\Data aplikací\Google\Chrome\User Data\Profile 2\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2015-03-26]
CHR Extension: (No Name) - C:\Documents and Settings\Lubosh\Local Settings\Data aplikací\Google\Chrome\User Data\Profile 2\Extensions\aohghmighlieiainnegkcijnfilokake [2015-03-26]
CHR Extension: (Google Drive) - C:\Documents and Settings\Lubosh\Local Settings\Data aplikací\Google\Chrome\User Data\Profile 2\Extensions\apdfllckaahabafndbhieahigkjlhalf [2015-07-18]
CHR Extension: (Google Search) - C:\Documents and Settings\Lubosh\Local Settings\Data aplikací\Google\Chrome\User Data\Profile 2\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2015-03-28]
CHR Extension: (No Name) - C:\Documents and Settings\Lubosh\Local Settings\Data aplikací\Google\Chrome\User Data\Profile 2\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2015-03-26]
CHR Extension: (AdBlock) - C:\Documents and Settings\Lubosh\Local Settings\Data aplikací\Google\Chrome\User Data\Profile 2\Extensions\gighmmpiobklfepjocnamgkkbiglidom [2015-04-06]
CHR Extension: (Google Wallet) - C:\Documents and Settings\Lubosh\Local Settings\Data aplikací\Google\Chrome\User Data\Profile 2\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2015-05-15]
CHR Extension: (Gmail) - C:\Documents and Settings\Lubosh\Local Settings\Data aplikací\Google\Chrome\User Data\Profile 2\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2015-03-28]
CHR HKLM\...\Chrome\Extension: [bpegkgagfojjbcpkihigfmkojdmmimdf] - No Path Or update_url value
CHR HKLM\...\Chrome\Extension: [ehgldbbpchgpcfagfpfjgoomddhccfgh] - No Path Or update_url value
CHR HKLM\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChrome.crx [2015-03-26]
StartMenuInternet: chrome.exe - C:\Program Files\Google\Chrome\Application\chrome.exe http://www.omniboxes.com/?type=sc&ts=14 ... A8F2534976
========================== Services (Whitelisted) =================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [343336 2015-05-26] (Avast Software s.r.o.)
R2 Service Mgr RecordPage; C:\Documents and Settings\All Users\Data aplikací\87737dd0-ad90-4193-bd48-336966b8d777\plugincontainer.exe [650504 2015-07-18] ()
S3 SwitchBoard; C:\Program Files\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [517096 2010-02-19] (Adobe Systems Incorporated) [File not signed]
R2 Update Mgr RecordPage; C:\Program Files\Common Files\87737dd0-ad90-4193-bd48-336966b8d777\updater.exe [572680 2015-07-18] ()
R2 WindowsMangerProtect; C:\Documents and Settings\All Users\Data aplikací\WindowsMangerProtect\ProtectWindowsManager.exe [707240 2015-07-14] (DTools LIMITED) <==== ATTENTION
==================== Drivers (Whitelisted) ====================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
R3 aeaudio; C:\WINDOWS\System32\drivers\aeaudio.sys [100224 2003-03-13] (Andrea Electronics Corporation) [File not signed]
R2 aswHwid; C:\WINDOWS\system32\drivers\aswHwid.sys [24144 2015-05-26] ()
R2 aswMonFlt; C:\WINDOWS\system32\drivers\aswMonFlt.sys [74976 2015-05-26] (Avast Software s.r.o.)
R1 aswRdr; C:\WINDOWS\system32\drivers\aswRdr.sys [55200 2015-05-26] (Avast Software s.r.o.)
R0 aswRvrt; C:\WINDOWS\system32\Drivers\aswRvrt.sys [49904 2015-05-26] ()
R1 aswSnx; C:\WINDOWS\system32\drivers\aswSnx.sys [787760 2015-05-26] (Avast Software s.r.o.)
R1 aswSP; C:\WINDOWS\system32\drivers\aswSP.sys [428120 2015-06-26] (Avast Software s.r.o.)
R1 aswTdi; C:\WINDOWS\system32\drivers\aswTdi.sys [57888 2015-05-26] (Avast Software s.r.o.)
R0 aswVmm; C:\WINDOWS\system32\Drivers\aswVmm.sys [209048 2015-05-26] ()
R3 b57w2k; C:\WINDOWS\System32\DRIVERS\b57xp32.sys [156160 2006-05-10] (Broadcom Corporation) [File not signed]
S3 massfilter; C:\WINDOWS\System32\drivers\massfilter.sys [9216 2010-02-22] (MBB Incorporated)
R2 npf; C:\WINDOWS\System32\drivers\npf.sys [50704 2010-01-27] (CACE Technologies, Inc.)
R3 smwdm; C:\WINDOWS\System32\drivers\smwdm.sys [578304 2003-05-27] (Analog Devices, Inc.) [File not signed]
U5 ScsiPort; C:\WINDOWS\system32\drivers\scsiport.sys [96384 2008-04-14] (Microsoft Corporation)
==================== NetSvcs (Whitelisted) ===================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
==================== One Month Created files and folders ========
(If an entry is included in the fixlist, the file/folder will be moved.)
2015-07-18 13:56 - 2015-07-18 13:57 - 00019083 _____ C:\Documents and Settings\Lubosh\Plocha\FRST.txt
2015-07-18 13:56 - 2015-07-18 13:56 - 00000000 ____D C:\FRST
2015-07-18 13:55 - 2015-07-18 13:55 - 01637376 _____ (Farbar) C:\Documents and Settings\Lubosh\Plocha\FRST.exe
2015-07-18 13:53 - 2015-07-18 13:53 - 00112640 _____ (forum.viry.cz) C:\Documents and Settings\Lubosh\Plocha\Nepotvrzeno 498664.crdownload
2015-07-18 13:50 - 2015-07-18 13:50 - 00015107 _____ C:\WINDOWS\setupapi.log
2015-07-18 13:50 - 2015-07-18 13:50 - 00000000 _____ C:\WINDOWS\setuperr.log
2015-07-18 13:50 - 2015-07-18 13:50 - 00000000 _____ C:\WINDOWS\setupact.log
2015-07-18 12:40 - 2015-07-18 12:40 - 00000000 ____D C:\Program Files\Common Files\Java
2015-07-18 12:28 - 2015-07-18 12:38 - 00096680 _____ (Oracle Corporation) C:\WINDOWS\system32\WindowsAccessBridge.dll
2015-07-15 22:58 - 2015-07-18 13:35 - 00001612 _____ C:\WINDOWS\wmsetup.log
2015-07-14 23:11 - 2015-07-18 13:11 - 00000346 _____ C:\WINDOWS\Tasks\UpdateAdmin.job
2015-07-14 23:11 - 2015-07-18 12:59 - 00000000 ____D C:\Documents and Settings\All Users\Data aplikací\87737dd0-ad90-4193-bd48-336966b8d777
2015-07-14 23:11 - 2015-07-18 12:53 - 00000000 ____D C:\Program Files\Common Files\87737dd0-ad90-4193-bd48-336966b8d777
2015-07-14 23:11 - 2015-07-14 23:11 - 00000000 ____D C:\Program Files\Record Page
2015-07-14 23:11 - 2015-07-14 23:11 - 00000000 ____D C:\Documents and Settings\Lubosh\Local Settings\Data aplikací\UpdateAdmin
2015-07-14 23:11 - 2015-07-14 23:11 - 00000000 ____D C:\Documents and Settings\All Users\Nabídka Start\Programy\UpdateAdmin
2015-07-14 23:11 - 2015-07-14 23:11 - 00000000 ____D C:\Documents and Settings\All Users\Data aplikací\WindowsMangerProtect
2015-07-14 23:11 - 2015-07-14 23:11 - 00000000 ____D C:\Documents and Settings\All Users\Data aplikací\IHProtectUpDate
2015-07-14 23:11 - 2015-07-14 23:11 - 00000000 _____ C:\WINDOWS\prleth.sys
2015-07-14 23:11 - 2015-07-14 23:11 - 00000000 _____ C:\WINDOWS\hgfs.sys
2015-07-01 09:41 - 2015-07-01 09:41 - 00000308 _____ C:\Documents and Settings\Lubosh\Plocha\stažený soubor
2015-06-25 02:13 - 2015-07-14 20:13 - 18524336 _____ (Adobe Systems Incorporated) C:\WINDOWS\system32\FlashPlayerInstaller.exe
2015-06-24 00:07 - 2015-06-24 00:07 - 00033794 _____ C:\Documents and Settings\Lubosh\Plocha\video-1435096526.mp4.mp4
==================== One Month Modified files and folders ========
(If an entry is included in the fixlist, the file/folder will be moved.)
2015-07-18 13:57 - 2015-04-21 20:33 - 00000000 ____D C:\Documents and Settings\Lubosh\Local Settings\temp
2015-07-18 13:56 - 2014-07-29 23:22 - 00000000 ____D C:\Documents and Settings\Lubosh\Plocha
2015-07-18 13:35 - 2014-07-29 23:16 - 01841254 _____ C:\WINDOWS\WindowsUpdate.log
2015-07-18 13:14 - 2014-07-29 23:22 - 00000000 __RHD C:\Documents and Settings\Lubosh\Data aplikací
2015-07-18 13:13 - 2014-08-28 21:04 - 00000914 _____ C:\WINDOWS\Tasks\Adobe Flash Player Updater.job
2015-07-18 12:38 - 2014-08-10 22:16 - 00146432 _____ (Oracle Corporation) C:\WINDOWS\system32\javacpl.cpl
2015-07-18 12:34 - 2014-08-10 22:13 - 00000000 ____D C:\Program Files\Java
2015-07-18 11:51 - 2014-08-09 16:39 - 00000364 ____H C:\WINDOWS\Tasks\avast! Emergency Update.job
2015-07-18 11:45 - 2014-08-09 16:29 - 00000315 _____ C:\WINDOWS\wiadebug.log
2015-07-18 11:45 - 2014-08-09 16:29 - 00000049 _____ C:\WINDOWS\wiaservc.log
2015-07-18 11:45 - 2014-07-29 23:20 - 00000006 ____H C:\WINDOWS\Tasks\SA.DAT
2015-07-18 02:22 - 2014-07-29 23:22 - 00000178 ___SH C:\Documents and Settings\Lubosh\ntuser.ini
2015-07-18 02:22 - 2014-07-29 23:20 - 00032486 _____ C:\WINDOWS\SchedLgU.Txt
2015-07-18 02:21 - 2014-07-30 05:50 - 00000000 ____D C:\Documents and Settings\Lubosh\Data aplikací\vlc
2015-07-18 02:00 - 2014-08-09 16:30 - 00000344 _____ C:\WINDOWS\Tasks\AdobeAAMUpdater-1.0-POPO-498C751C3E-Lubosh.job
2015-07-18 02:00 - 2014-08-09 16:19 - 00000000 ____D C:\Documents and Settings\Lubosh\Local Settings\Data aplikací\Adobe
2015-07-18 00:25 - 2007-08-02 14:00 - 00012984 _____ C:\WINDOWS\system32\wpa.dbl
2015-07-16 14:39 - 2014-07-31 05:09 - 00001549 _____ C:\Documents and Settings\Lubosh\Plocha\KMP Games.lnk
2015-07-16 14:22 - 2014-07-31 05:33 - 00000000 ____D C:\WINDOWS\system32\MRT
2015-07-16 01:23 - 2014-08-16 17:12 - 00000000 ___RD C:\Documents and Settings\Lubosh\Dokumenty\Filmy
2015-07-15 18:29 - 2014-07-30 01:06 - 00000000 ___RD C:\Documents and Settings\All Users\Nabídka Start
2015-07-14 23:14 - 2015-01-04 00:01 - 00000522 _____ C:\Documents and Settings\Lubosh\Plocha\KMPlayer.lnk
2015-07-14 23:14 - 2015-01-04 00:00 - 00000000 ____D C:\KMPlayer
2015-07-14 23:11 - 2014-07-30 01:06 - 00000000 __RHD C:\Documents and Settings\All Users\Data aplikací
2015-07-14 23:11 - 2014-07-30 01:06 - 00000000 ___RD C:\Documents and Settings\All Users\Nabídka Start\Programy
2015-07-14 23:11 - 2014-07-29 23:22 - 00000000 ___HD C:\Documents and Settings\Lubosh\Local Settings\Data aplikací
2015-07-14 23:10 - 2014-07-30 00:30 - 00002095 _____ C:\Documents and Settings\All Users\Plocha\Google Chrome.lnk
2015-07-14 23:10 - 2014-07-29 23:22 - 00001085 _____ C:\Documents and Settings\Lubosh\Nabídka Start\Programy\Internet Explorer.lnk
2015-07-14 22:39 - 2014-07-30 21:33 - 00000000 ____D C:\Documents and Settings\Lubosh\Data aplikací\uTorrent
2015-07-14 20:13 - 2014-08-01 10:11 - 00778416 _____ (Adobe Systems Incorporated) C:\WINDOWS\system32\FlashPlayerApp.exe
2015-07-14 20:13 - 2014-08-01 10:11 - 00142512 _____ (Adobe Systems Incorporated) C:\WINDOWS\system32\FlashPlayerCPLApp.cpl
2015-07-12 21:52 - 2014-07-30 05:45 - 00100352 _____ C:\Documents and Settings\Lubosh\Local Settings\Data aplikací\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
2015-07-12 21:37 - 2014-08-12 09:48 - 00000000 ____D C:\WINDOWS\Minidump
2015-07-12 21:36 - 2014-07-29 23:22 - 00000000 ____D C:\Documents and Settings\Lubosh
2015-07-03 08:49 - 2014-07-31 05:32 - 127070192 _____ (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
2015-06-27 22:38 - 2014-07-29 23:22 - 00000000 ___RD C:\Documents and Settings\Lubosh\Dokumenty\Hudba
2015-06-26 18:24 - 2014-08-09 16:39 - 00428120 _____ (Avast Software s.r.o.) C:\WINDOWS\system32\Drivers\aswsp.sys
==================== Files in the root of some directories =======
2014-07-30 05:45 - 2015-07-12 21:52 - 0100352 _____ () C:\Documents and Settings\Lubosh\Local Settings\Data aplikací\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
2014-08-05 12:46 - 2014-08-05 12:46 - 0000878 ____C () C:\Documents and Settings\Lubosh\Local Settings\Data aplikací\recently-used.xbel
Some files in TEMP:
====================
C:\Documents and Settings\Lubosh\Local Settings\temp\KMPAddedCode_KMP_adpageopen_Step1.exe
C:\Documents and Settings\Lubosh\Local Settings\temp\KMP_3.9.1.138.exe
==================== Bamital & volsnap Check =================
(There is no automatic fix for files that do not pass verification.)
C:\WINDOWS\explorer.exe => File is digitally signed
C:\WINDOWS\system32\winlogon.exe => File is digitally signed
C:\WINDOWS\system32\svchost.exe => File is digitally signed
C:\WINDOWS\system32\services.exe => File is digitally signed
C:\WINDOWS\system32\User32.dll => File is digitally signed
C:\WINDOWS\system32\userinit.exe => File is digitally signed
C:\WINDOWS\system32\rpcss.dll => File is digitally signed
C:\WINDOWS\system32\Drivers\volsnap.sys => File is digitally signed
==================== End of log ============================