Ulozte na plochu AdwCleaner https://malwarebytes.com/adwcleaner/ nebo http://www.bleepingcomputer.com/download/adwcleaner/
ukoncete vsechny programy
odsouhlaste licencni podmiky (EULA) klikem na Souhlasim
kliknete pravym na ikonu AdwCleaneru a vyberte Spustit jako spravce (v pripade Win XP spustte obycejne dvojklikem)
kliknete na Skenovat nyni (Scan now), pote na Cisteni a opravy (Clean and Repair)
po restartu na Vas vyskoci log (pripadne jej najdete v C:\AdwCleaner\Logs\AdwCleaner[Cxx].txt), jehoz obsah zkopirujte do pristi odpovedi
Uložte na plochu jako fixlist.txt. Spusťte znovu FRST a klikněte na >Fix<. Po skončení akce se objeví log, který sem zkopírujte.Start
CloseProcesses:
HKLM Group Policy restriction on software: %systemroot%\system32\mrt.exe <==== ATTENTION
HKU\S-1-5-21-649847758-3809949159-3738805346-1000\...\MountPoints2: K - "K:\autorun.exe"
FF HKLM\SOFTWARE\Policies\Mozilla\Firefox: Restriction <==== ATTENTION
Task: {009183EF-955F-4A24-88A6-89493A567A67} - \Microsoft\Windows\UNP\RunCampaignManager -> No File <==== ATTENTION
Task: {287300EC-C84E-48FD-A864-F3365A53AE0A} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [144200 2015-08-30] (Google Inc -> Google Inc.)
Task: {2D1EF769-3C71-4CDB-8D33-78454D44C4BB} - System32\Tasks\{19550D02-41E1-43BA-A29D-9B6D691DADA9} => C:\Windows\system32\pcalua.exe -a C:\Users\Milan\Desktop\sb4setup\sb4setup.exe -d C:\Users\Milan\Desktop\sb4setup
Task: {39161959-CAC9-4FAB-B8C0-E7DCFDB319FF} - \Microsoft\Windows\Setup\gwx\refreshgwxcontent -> No File <==== ATTENTION
Task: {41AD63E7-2C7D-448D-B795-B25FD067FD4B} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [144200 2015-08-30] (Google Inc -> Google Inc.)
Task: {E25D25BD-526C-4D8B-9AC8-EF81315C64CB} - System32\Tasks\GoogleUpdateTaskUserS-1-5-21-649847758-3809949159-3738805346-1000UA => C:\Users\Milan\AppData\Local\Google\Update\GoogleUpdate.exe [144200 2015-08-27] (Google Inc -> Google Inc.)
Task: {EB3BD7D0-DDF4-49D6-8F51-0ADCC41DB961} - System32\Tasks\GoogleUpdateTaskUserS-1-5-21-649847758-3809949159-3738805346-1000Core1d2589a1a98f6ac => C:\Users\Milan\AppData\Local\Google\Update\GoogleUpdate.exe [144200 2015-08-27] (Google Inc -> Google Inc.)
Task: {F2726DE6-2626-4E07-8D76-0496ECC837B8} - System32\Tasks\GoogleUpdateTaskUserS-1-5-21-649847758-3809949159-3738805346-1000Core => C:\Users\Milan\AppData\Local\Google\Update\GoogleUpdate.exe [144200 2015-08-27] (Google Inc -> Google Inc.)
Task: C:\WINDOWS\Tasks\GoogleUpdateTaskUserS-1-5-21-649847758-3809949159-3738805346-1000Core.job => C:\Users\Milan\AppData\Local\Google\Update\GoogleUpdate.exe
Task: C:\WINDOWS\Tasks\GoogleUpdateTaskUserS-1-5-21-649847758-3809949159-3738805346-1000UA.job => C:\Users\Milan\AppData\Local\Google\Update\GoogleUpdate.exe
BHO-x32: No Name -> {72853161-30C5-4D22-B7F9-0BBC1D38A37E} -> No File
FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~1\MICROS~2\Office14\NPAUTHZ.DLL [No File]
S3 ALSysIO; \??\C:\Users\Milan\AppData\Local\Temp\ALSysIO64.sys [X] <==== ATTENTION
C:\WINDOWS\system32\Tasks\GoogleUpdateTaskMachineUA
C:\WINDOWS\system32\Tasks\GoogleUpdateTaskMachineCore
C:\Users\Milan\AppData\Local\{D3888F8A-3218-484F-A400-9534C71E6DD7}
HKU\S-1-5-21-649847758-3809949159-3738805346-1000\...\ChromeHTML: -> <==== ATTENTION
ShellIconOverlayIdentifiers: [00asw] -> {472083B0-C522-11CF-8763-00608CC02F24} => -> No File
HKLM\software\microsoft\Windows\CurrentVersion\Telephony\Providers => ProviderFileName2 -> ndptsp.tsp (No File)
FirewallRules: [{5DBE10EC-F86A-4EE9-B18D-59EF7601C2D7}] => (Block) %ProgramFiles%\Sony\Vegas Pro 13.0\vegas130.exe No File
FirewallRules: [{C833CEF9-A4F3-4B97-A90A-759DF3D0A8B1}] => (Block) %ProgramFiles%\Adobe\Adobe Photoshop Lightroom 5.6\lightroom.exe No File
FirewallRules: [TCP Query User{B52A4685-A763-415F-B344-7E7597FB6C05}Q:\games\world_of_tanks\wotlauncher.exe] => (Allow) Q:\games\world_of_tanks\wotlauncher.exe No File
FirewallRules: [UDP Query User{64727737-B646-4604-AAEC-46E285CBFF32}Q:\games\world_of_tanks\wotlauncher.exe] => (Allow) Q:\games\world_of_tanks\wotlauncher.exe No File
FirewallRules: [{04DBDE33-115C-4E5C-9607-1B7A33300686}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe (Apple Inc. -> Apple Inc.)
FirewallRules: [{13BB42EF-1623-41BF-9CF0-E43CCACE86E4}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe (Apple Inc. -> Apple Inc.)
FirewallRules: [{496D24E1-093C-47CB-B5A7-51D7DFFD30D9}] => (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exe (Apple Inc. -> Apple Inc.)
FirewallRules: [{A1B031D7-9000-469B-960F-A04799E0A61E}] => (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exe (Apple Inc. -> Apple Inc.)
C:\Users\Milan\AppData\Local\Opera Software\Opera Stable\Cache\f_01ac56
C:\Users\Milan\Downloads\2bf1af61-7e16-49dd-9d8a-7ada94284d55.tmp
EmptyTemp:
End
