prosim o kontrolu logu dekuji

[edadeni]

Na domovske strance mi vyskakuje webserches a vyskakuji mi reklamni stranky .


Malwarebytes Anti-Malware
www.malwarebytes.org

Scan Date: 15. 2. 2015
Scan Time: 16:25:59
Logfile: NNN.txt
Administrator: Yes

Version: 2.00.4.1028
Malware Database: v2015.02.15.03
Rootkit Database: v2015.02.03.01
License: Trial
Malware Protection: Enabled
Malicious Website Protection: Enabled
Self-protection: Disabled

OS: Windows 8.1
CPU: x64
File System: NTFS
User: VladimA­ra

Scan Type: Threat Scan
Result: Completed
Objects Scanned: 413622
Time Elapsed: 26 min, 2 sec

Memory: Enabled
Startup: Enabled
Filesystem: Enabled
Archives: Enabled
Rootkits: Disabled
Heuristics: Enabled
PUP: Enabled
PUM: Enabled

Processes: 0
(No malicious items detected)

Modules: 0
(No malicious items detected)

Registry Keys: 0
(No malicious items detected)

Registry Values: 0
(No malicious items detected)

Registry Data: 0
(No malicious items detected)

Folders: 8
PUP.Optional.WPM.A, C:\ProgramData\WindowsMangerProtect, , [c5fa918d602af640b451c0ac877cab55],
PUP.Optional.FileDownloader, C:\Program Files (x86)\YourFileDownloaderUpdater, , [d2ed21fd7614fa3c19aaa3d43ec53ec2],
PUP.Optional.BoxRock.A, C:\Program Files (x86)\Box Rock, , [6c53a6789af0fd39ec76b7c742c1e11f],
PUP.Optional.BoxRock.A, C:\Program Files (x86)\Box Rock\bin, , [6c53a6789af0fd39ec76b7c742c1e11f],
PUP.Optional.LuckyTab.A, C:\Program Files (x86)\LuckyTab, , [734cc559acdec3733775add5a85b44bc],
PUP.Optional.LuckyTab.A, C:\Users\VladimA­ra\AppData\Roaming\Microsoft\Windows\Start Menu\LuckyTab, , [5d62b46a4149c6709a01760de221fc04],
PUP.Optional.IHProtectUpDate.A, C:\ProgramData\IHProtectUpDate, , [447b5dc18dfd43f37c28a6e22dd6b54b],
PUP.Optional.IHProtectUpDate.A, C:\ProgramData\IHProtectUpDate\update, , [447b5dc18dfd43f37c28a6e22dd6b54b],

Files: 13
PUP.Optional.WPM.A, C:\ProgramData\WindowsMangerProtect\ProtectWindowsManager.exe, , [c5fa918d602af640b451c0ac877cab55],
PUP.Optional.FileDownloader, C:\Program Files (x86)\YourFileDownloaderUpdater\htmlayout.dll, , [d2ed21fd7614fa3c19aaa3d43ec53ec2],
PUP.Optional.FileDownloader, C:\Program Files (x86)\YourFileDownloaderUpdater\YourFileDownloaderUpdater.exe, , [d2ed21fd7614fa3c19aaa3d43ec53ec2],
PUP.Optional.BoxRock.A, C:\Program Files (x86)\Box Rock\updateBoxRock.exe, , [6c53a6789af0fd39ec76b7c742c1e11f],
PUP.Optional.BoxRock.A, C:\Program Files (x86)\Box Rock\bin\BoxRock.BrowserAdapter.exe, , [6c53a6789af0fd39ec76b7c742c1e11f],
PUP.Optional.BoxRock.A, C:\Program Files (x86)\Box Rock\bin\BoxRock.BrowserAdapter64.exe, , [6c53a6789af0fd39ec76b7c742c1e11f],
PUP.Optional.BoxRock.A, C:\Program Files (x86)\Box Rock\bin\BoxRock.expext.exe, , [6c53a6789af0fd39ec76b7c742c1e11f],
PUP.Optional.BoxRock.A, C:\Program Files (x86)\Box Rock\bin\BoxRock.expextdll.dll, , [6c53a6789af0fd39ec76b7c742c1e11f],
PUP.Optional.BoxRock.A, C:\Program Files (x86)\Box Rock\bin\BoxRock.PurBrowse64.exe, , [6c53a6789af0fd39ec76b7c742c1e11f],
PUP.Optional.BoxRock.A, C:\Program Files (x86)\Box Rock\bin\BrowserAdapter.7z, , [6c53a6789af0fd39ec76b7c742c1e11f],
PUP.Optional.BoxRock.A, C:\Program Files (x86)\Box Rock\bin\sqlite3.dll, , [6c53a6789af0fd39ec76b7c742c1e11f],
PUP.Optional.BoxRock.A, C:\Program Files (x86)\Box Rock\bin\utilBoxRock.exe, , [6c53a6789af0fd39ec76b7c742c1e11f],
PUP.Optional.LuckyTab.A, C:\Program Files (x86)\LuckyTab\LuckyTab.exe, , [734cc559acdec3733775add5a85b44bc],

Physical Sectors: 0
(No malicious items detected)


(end)

[Reklama]

[edadeni]

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 16:57:12, on 15. 2. 2015
Platform: Unknown Windows (WinNT 6.02.1008)
MSIE: Internet Explorer v11.0 (11.00.9600.17416)
Boot mode: Normal

Running processes:
C:\Program Files (x86)\Launch Manager\LManager.exe
C:\Users\Vladimíra\Desktop\hijackthis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://istart.webssearches.com/?type=hp ... X621CT2BET
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://www.bing.com/search?q={searchTerms}
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.bing.com/search?q={searchTerms}
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = www.google.com
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = www.google.com
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = www.google.com
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = www.google.com
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = www.google.com
R1 - HKCU\Software\Microsoft\Internet Explorer\Search,Default_Search_URL = http://www.bing.com/search?q={searchTerms}
R1 - HKCU\Software\Microsoft\Internet Explorer\Search,SearchAssistant = http://www.bing.com/search?q={searchTerms}
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
F2 - REG:system.ini: UserInit=userinit.exe
O2 - BHO: MSS+ Identifier - {0E8A89AD-95D7-40EB-8D9D-083EF7066A01} - (no file)
O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - (no file)
O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\PROGRA~2\MICROS~1\Office14\GROOVEEX.DLL
O2 - BHO: (no name) - {9030D464-4C02-4ABF-8ECC-5164760863C6} - (no file)
O2 - BHO: SkypeIEPluginBHO - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
O2 - BHO: URLRedirectionBHO - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\PROGRA~2\MICROS~1\Office14\URLREDIR.DLL
O4 - HKLM\..\Run: [APSDaemon] "C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe"
O4 - HKLM\..\Run: [KiesTrayAgent] C:\Program Files (x86)\Samsung\Kies\KiesTrayAgent.exe
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files (x86)\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [mncbongSrv] C:\WINDOWS\system32\mncbong.vbe
O4 - Startup: tbhcn.lnk = ?
O4 - Global Startup: McAfee Security Scan Plus.lnk = C:\Program Files\McAfee Security Scan\3.8.150\SSScheduler.exe
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Excel - res://C:\PROGRA~2\MICROS~1\Office14\EXCEL.EXE/3000
O8 - Extra context menu item: Od&eslat do aplikace OneNote - res://C:\PROGRA~2\MICROS~1\Office14\ONBttnIE.dll/105
O9 - Extra button: Blog This - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra 'Tools' menuitem: &Blog This in Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra button: Odeslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: Od&eslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIE.dll
O9 - Extra button: P&ropojené poznámky aplikace OneNote - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIELinkedNotes.dll
O9 - Extra 'Tools' menuitem: P&ropojené poznámky aplikace OneNote - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIELinkedNotes.dll
O9 - Extra button: Skype Click to Call settings - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
O9 - Extra button: Free YouTube Download - {EE932B49-D5C0-4D19-A3DA-CE0849258DE6} - (no file)
O9 - Extra 'Tools' menuitem: Free YouTube Download - {EE932B49-D5C0-4D19-A3DA-CE0849258DE6} - (no file)
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O18 - Protocol: skypec2c - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
O18 - Filter hijack: text/xml - {807573E5-5146-11D5-A672-00B0D022E945} - C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\MSOXMLMF.DLL
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\WINDOWS\System32\alg.exe (file missing)
O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
O23 - Service: Bonjour Service - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: Intel(R) Content Protection HECI Service (cphs) - Intel Corporation - C:\WINDOWS\SysWow64\IntelCpHeciSvc.exe
O23 - Service: Device Fast-lane Service (DeviceFastLaneService) - Acer Incorporated - C:\Program Files\Packard Bell\Packard Bell Device Fast-lane\DeviceFastLaneSvc.exe
O23 - Service: Dritek WMI Service (DsiWMIService) - Dritek System Inc. - C:\Program Files (x86)\Launch Manager\dsiwmis.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\WINDOWS\System32\lsass.exe (file missing)
O23 - Service: ePower Service (ePowerSvc) - Acer Incorporated - C:\Program Files\Packard Bell\Packard Bell Power Management\ePowerSvc.exe
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\WINDOWS\system32\fxssvc.exe (file missing)
O23 - Service: GamesAppService - WildTangent, Inc. - C:\Program Files (x86)\WildTangent Games\App\GamesAppService.exe
O23 - Service: @%SystemRoot%\system32\ieetwcollectorres.dll,-1000 (IEEtwCollectorService) - Unknown owner - C:\WINDOWS\system32\IEEtwCollector.exe (file missing)
O23 - Service: Intel(R) Capability Licensing Service Interface - Intel(R) Corporation - C:\Program Files\Intel\iCLS Client\HeciServer.exe
O23 - Service: iPod Service - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: Intel(R) Dynamic Application Loader Host Interface Service (jhi_service) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: Intel(R) Management and Security Application Local Management Service (LMS) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
O23 - Service: MBAMScheduler - Malwarebytes Corporation - C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe
O23 - Service: MBAMService - Malwarebytes Corporation - C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe
O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Mozilla Foundation - C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\WINDOWS\System32\msdtc.exe (file missing)
O23 - Service: Nero Update (NAUpdate) - Nero AG - C:\Program Files (x86)\Nero\Update\NASvc.exe
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: Dritek RF Button Command Service (RfButtonDriverService) - Dritek System INC. - C:\Windows\RfBtnSvc64.exe
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\WINDOWS\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: Skype Updater (SkypeUpdate) - Skype Technologies - C:\Program Files (x86)\Skype\Updater\Updater.exe
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\WINDOWS\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\WINDOWS\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\WINDOWS\system32\sppsvc.exe (file missing)
O23 - Service: SInstalátor (ssinstall) - PS Media s.r.o. - C:\WINDOWS\SysWOW64\ssins.exe
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\WINDOWS\system32\UI0Detect.exe (file missing)
O23 - Service: Intel(R) Management and Security Application User Notification Service (UNS) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\WINDOWS\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\WINDOWS\system32\vssvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\WINDOWS\system32\wbengine.exe (file missing)
O23 - Service: @%ProgramFiles%\Windows Defender\MpAsDesc.dll,-320 (WdNisSvc) - Unknown owner - C:\Program Files (x86)\Windows Defender\NisSrv.exe (file missing)
O23 - Service: @%ProgramFiles%\Windows Defender\MpAsDesc.dll,-310 (WinDefend) - Unknown owner - C:\Program Files (x86)\Windows Defender\MsMpEng.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\WINDOWS\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)

--
End of file - 10457 bytes

[edadeni]

procisteno ccleanerem atf a tfc a jeste pridavam log s ADW


# AdwCleaner v4.110 - Logfile created 15/02/2015 at 16:59:32
# Updated 05/02/2015 by Xplode
# Database : 2015-02-14.2 [Server]
# Operating system : Windows 8.1 (x64)
# Username : Vladimíra - VLADKA
# Running from : C:\Users\Vladimíra\Desktop\adwcleaner_4.110.exe
# Option : Scan

***** [ Services ] *****


***** [ Files / Folders ] *****

File Found : C:\Users\Vladimíra\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\tbhcn.lnk
File Found : C:\Users\Vladimíra\AppData\Roaming\Mozilla\Firefox\Profiles\p5jfm6ef.default\user.js
Folder Found : C:\Program Files (x86)\Box Rock
Folder Found : C:\Program Files (x86)\Box Rock
Folder Found : C:\Program Files (x86)\BrowserCompanion
Folder Found : C:\Program Files (x86)\LuckyTab
Folder Found : C:\Program Files (x86)\XTab
Folder Found : C:\Program Files (x86)\YourFileDownloaderUpdater
Folder Found : C:\ProgramData\IHProtectUpDate
Folder Found : C:\ProgramData\WindowsMangerProtect
Folder Found : C:\Users\Vladimíra\AppData\Roaming\BrowserCompanion
Folder Found : C:\Users\Vladimíra\AppData\Roaming\Microsoft\Windows\Start Menu\LuckyTab

***** [ Scheduled tasks ] *****

Task Found : Update Service YourFileDownloader
Task Found : LuckyTab

***** [ Shortcuts ] *****


***** [ Registry ] *****

Data Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings [ProxyOverride] - *.local
Key Found : HKCU\Software\APN PIP
Key Found : HKCU\Software\Blabbers
Key Found : HKCU\Software\Box Rock
Key Found : HKCU\Software\Box Rock
Key Found : HKCU\Software\Classes\pokki
Key Found : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}
Key Found : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{2023ECEC-E06A-4372-A1C7-0B49F9E0FFF0}
Key Found : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{BD896318-9E74-4F80-A860-B7F502969199}
Key Found : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{d3f22a84-2a84-49eb-91e6-5dadaaf0165d}
Key Found : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{E733165D-CBCF-4FDA-883E-ADEF965B476C}
Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{EE932B49-D5C0-4D19-A3DA-CE0849258DE6}
Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{AE07101B-46D4-4A98-AF68-0333EA26E113}
Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{EE932B49-D5C0-4D19-A3DA-CE0849258DE6}
Key Found : HKCU\Software\Myfree Codec
Key Found : [x64] HKCU\Software\APN PIP
Key Found : [x64] HKCU\Software\Blabbers
Key Found : [x64] HKCU\Software\Box Rock
Key Found : [x64] HKCU\Software\Box Rock
Key Found : [x64] HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}
Key Found : [x64] HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{2023ECEC-E06A-4372-A1C7-0B49F9E0FFF0}
Key Found : [x64] HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{BD896318-9E74-4F80-A860-B7F502969199}
Key Found : [x64] HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{d3f22a84-2a84-49eb-91e6-5dadaaf0165d}
Key Found : [x64] HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{D3F22A84-2A84-49EB-91E6-5DADAAF0165D}
Key Found : [x64] HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{E733165D-CBCF-4FDA-883E-ADEF965B476C}
Key Found : [x64] HKCU\Software\Myfree Codec
Key Found : HKLM\SOFTWARE\Box Rock
Key Found : HKLM\SOFTWARE\Box Rock
Key Found : HKLM\SOFTWARE\BrowserCompanion
Key Found : HKLM\SOFTWARE\Classes\AppID\{20EDC024-43C5-423E-B7F5-FD93523E0D9F}
Key Found : HKLM\SOFTWARE\Classes\AppID\{373ED12D-B306-43AC-9485-A7C5133DC34C}
Key Found : HKLM\SOFTWARE\Classes\AppID\{4D076AB4-7562-427A-B5D2-BD96E19DEE56}
Key Found : HKLM\SOFTWARE\Classes\AppID\{ED6535E7-F778-48A5-A060-549D30024511}
Key Found : HKLM\SOFTWARE\Classes\AppID\secman.DLL
Key Found : HKLM\SOFTWARE\Classes\AppID\tdataprotocol.DLL
Key Found : HKLM\SOFTWARE\Classes\AppID\updatebho.DLL
Key Found : HKLM\SOFTWARE\Classes\AppID\wit4ie.DLL
Key Found : HKLM\SOFTWARE\Classes\CLSID\{1AA60054-57D9-4F99-9A55-D0FBFBE7ECD3}
Key Found : HKLM\SOFTWARE\Classes\CLSID\{66EEF543-A9AC-4A9D-AA3C-1ED148AC8EEE}
Key Found : HKLM\SOFTWARE\Classes\CLSID\{826D7151-8D99-434B-8540-082B8C2AE556}
Key Found : HKLM\SOFTWARE\Classes\CLSID\{AE07101B-46D4-4A98-AF68-0333EA26E113}
Key Found : HKLM\SOFTWARE\Classes\Interface\{66EEF543-A9AC-4A9D-AA3C-1ED148AC8EEE}
Key Found : HKLM\SOFTWARE\Classes\Interface\{66EEF543-A9AC-4A9D-AA3C-1ED148AC8FFE}
Key Found : HKLM\SOFTWARE\Classes\secman.OutlookSecurityManager
Key Found : HKLM\SOFTWARE\Classes\secman.OutlookSecurityManager.1
Key Found : HKLM\SOFTWARE\Classes\TypeLib\{11549FE4-7C5A-4C17-9FC3-56FC5162A994}
Key Found : HKLM\SOFTWARE\Microsoft\Internet Explorer\Extensions\{EE932B49-D5C0-4D19-A3DA-CE0849258DE6}
Key Found : HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{d3f22a84-2a84-49eb-91e6-5dadaaf0165d}
Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\IMBoosterARP
Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\IminentToolbar
Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\SearchProtect
Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Your Software Deals_is1
Key Found : HKLM\SOFTWARE\Myfree Codec
Key Found : HKLM\SOFTWARE\PIP
Key Found : HKLM\SOFTWARE\SupDp
Key Found : HKLM\SOFTWARE\YourFileDownloader
Key Found : HKLM\SYSTEM\CurrentControlSet\Services\EventLog\Application\Update Box Rock
Key Found : HKLM\SYSTEM\CurrentControlSet\Services\EventLog\Application\Util Box Rock
Key Found : [x64] HKLM\SOFTWARE\Classes\CLSID\{AE07101B-46D4-4A98-AF68-0333EA26E113}
Key Found : [x64] HKLM\SOFTWARE\Classes\Interface\{66EEF543-A9AC-4A9D-AA3C-1ED148AC8EEE}
Key Found : [x64] HKLM\SOFTWARE\Classes\Interface\{66EEF543-A9AC-4A9D-AA3C-1ED148AC8FFE}
Key Found : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\3152E1F19977892449DC968802CE8964
Key Found : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\649A52D257CA5DB4EAAE8BA9EB23E467
Value Found : HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser [{D4027C7F-154A-4066-A1AD-4243D8127440}]

***** [ Web browsers ] *****

-\\ Internet Explorer v11.0.9600.17416

Setting Found : HKCU\Software\Microsoft\Internet Explorer\Main [Default_Page_URL] - hxxp://istart.webssearches.com/?type=hp ... X621CT2BET

-\\ Mozilla Firefox v35.0.1 (x86 cs)

[p5jfm6ef.default] - Line Found : user_pref("browser.search.selectedEngine", "webssearches");
[p5jfm6ef.default] - Line Found : user_pref("browser.uiCustomization.state", "{\"placements\":{\"PanelUI-contents\":[\"edit-controls\",\"zoom-controls\",\"new-window-button\",\"privatebrowsing-button\",\"save-page-button\",\"print-but[...]
[p5jfm6ef.default] - Line Found : user_pref("extensions.helperbar.Country", "Czech Republic");
[p5jfm6ef.default] - Line Found : user_pref("extensions.helperbar.DockingPositionDown", false);
[p5jfm6ef.default] - Line Found : user_pref("extensions.helperbar.LastHiddenTime", 22928738);
[p5jfm6ef.default] - Line Found : user_pref("extensions.helperbar.SmartbarDisabled", true);
[p5jfm6ef.default] - Line Found : user_pref("extensions.helperbar.SmartbarStateMinimaized", false);
[p5jfm6ef.default] - Line Found : user_pref("extensions.helperbar.UserID", "80ea876d-6910-4a23-b65a-79214b230252");
[p5jfm6ef.default] - Line Found : user_pref("extensions.helperbar.Visibility", true);
[p5jfm6ef.default] - Line Found : user_pref("extensions.helperbar.countryiso", "cz");
[p5jfm6ef.default] - Line Found : user_pref("extensions.helperbar.date", "b0304");
[p5jfm6ef.default] - Line Found : user_pref("extensions.helperbar.downloadprovider", "messengerplus");
[p5jfm6ef.default] - Line Found : user_pref("extensions.helperbar.installationid", "80ea876d-6910-4a23-b65a-79214b230252");
[p5jfm6ef.default] - Line Found : user_pref("extensions.helperbar.ppctid", "mpls_lin");
[p5jfm6ef.default] - Line Found : user_pref("extensions.helperbar.publisher", "messengerplus");
[p5jfm6ef.default] - Line Found : user_pref("extensions.mywebsearch.prevDefaultEngine", "Google");
[p5jfm6ef.default] - Line Found : user_pref("extensions.mywebsearch.prevKwdEnabled", false);
[p5jfm6ef.default] - Line Found : user_pref("extensions.mywebsearch.prevSelectedEngine", "Google");
[p5jfm6ef.default] - Line Found : user_pref("extensions.toolbar.mindspark._5aMembers_.homepage", "hxxp://home.tb.ask.com/index.jhtml?ptb=0909971F-E286-492D-867A-BB136523C498&n=77fd520f&p2=^GR^xdm518^YYA^cz");
[p5jfm6ef.default] - Line Found : user_pref("extensions.toolbar.mindspark._5aMembers_.initialized", true);
[p5jfm6ef.default] - Line Found : user_pref("extensions.toolbar.mindspark._5aMembers_.installation.contextKey", "");
[p5jfm6ef.default] - Line Found : user_pref("extensions.toolbar.mindspark._5aMembers_.installation.installDate", "2013090319");
[p5jfm6ef.default] - Line Found : user_pref("extensions.toolbar.mindspark._5aMembers_.installation.partnerId", "^GR^xdm518^YYA^cz");
[p5jfm6ef.default] - Line Found : user_pref("extensions.toolbar.mindspark._5aMembers_.installation.partnerSubId", "");
[p5jfm6ef.default] - Line Found : user_pref("extensions.toolbar.mindspark._5aMembers_.installation.success", true);
[p5jfm6ef.default] - Line Found : user_pref("extensions.toolbar.mindspark._5aMembers_.installation.toolbarId", "0909971F-E286-492D-867A-BB136523C498");
[p5jfm6ef.default] - Line Found : user_pref("extensions.toolbar.mindspark._5aMembers_.lastActivePing", "1378230974358");
[p5jfm6ef.default] - Line Found : user_pref("extensions.toolbar.mindspark._5aMembers_.options.defaultSearch", false);
[p5jfm6ef.default] - Line Found : user_pref("extensions.toolbar.mindspark._5aMembers_.options.homePageEnabled", false);
[p5jfm6ef.default] - Line Found : user_pref("extensions.toolbar.mindspark._5aMembers_.options.keywordEnabled", true);
[p5jfm6ef.default] - Line Found : user_pref("extensions.toolbar.mindspark._5aMembers_.options.tabEnabled", true);
[p5jfm6ef.default] - Line Found : user_pref("extensions.toolbar.mindspark._5aMembers_.weather.location", "10001");
[p5jfm6ef.default] - Line Found : user_pref("extensions.toolbar.mindspark.lastInstalled", "mywebface@mindspark.com");
*************************

AdwCleaner[R0].txt - [10374 bytes] - [15/02/2015 16:59:32]

########## EOF - C:\AdwCleaner\AdwCleaner[R0].txt - [10434 bytes] ##########

[jaro3]

Spusť znovu AdwCleaner (u Windows Vista či Windows7, klikni na AdwCleaner pravým a vyber „Spustit jako správce“
klikni na „Prohledat-Scan“, po prohledání klikni na „ Vymazat-Clean“

Program provede opravu, po automatickém restartu neukáže log (C:\AdwCleaner [S?].txt) , jeho obsah sem celý vlož.

Stáhni si Junkware Removal Tool by Thisisu

na svojí plochu.

Deaktivuj si svůj antivirový program. Pravým tl. myši klikni na JRT.exe a vyber „spustit jako správce“. Pro pokračování budeš vyzván ke stisknutí jakékoliv klávesy. Na nějakou klikni.
Začne skenování programu. Skenování může trvat dloho , podle množství nákaz. Po ukončení skenu se objeví log (JRT.txt) , který se uloží na ploše.
Zkopíruj sem prosím celý jeho obsah.

Stáhni si Malwarebytes' Anti-Malware
- Při instalaci odeber zatržítko u „Povolit bezplatnou zkušební verzi Malwarebytes' Anti-Malware Premium“
Nainstaluj a spusť ho
- na konci instalace se ujisti že máš zvoleny/zatrhnuty obě možnosti:
Aktualizace Malwarebytes' Anti-Malware a Spustit aplikaci Malwarebytes' Anti-Malware, pokud jo tak klikni na tlačítko konec
- pokud bude nalezena aktualizace, tak se stáhne a nainstaluje
- program se po té spustí a klikni na Skenovat nyní a
- po proběhnutí programu se ti objeví hláška vpravo dole tak klikni na b] Kopírovat do schránky [/b]a a vlož sem celý log.

- po té klikni na tlačítko Exit, objeví se ti hláška tak zvol Ano
(zatím nic nemaž!).

Pokud budou problémy , spusť v nouz. režimu.

[edadeni]

# AdwCleaner v4.110 - Logfile created 15/02/2015 at 20:54:00
# Updated 05/02/2015 by Xplode
# Database : 2015-02-05.2 [Local]
# Operating system : Windows 8.1 (x64)
# Username : Vladimíra - VLADKA
# Running from : C:\Users\Vladimíra\Desktop\adwcleaner_4.110.exe
# Option : Cleaning

***** [ Services ] *****


***** [ Files / Folders ] *****

Folder Deleted : C:\ProgramData\WindowsMangerProtect
Folder Deleted : C:\ProgramData\IHProtectUpDate
Folder Deleted : C:\Program Files (x86)\BrowserCompanion
Folder Deleted : C:\Program Files (x86)\YourFileDownloaderUpdater
Folder Deleted : C:\Program Files (x86)\LuckyTab
Folder Deleted : C:\Program Files (x86)\Box Rock
Folder Deleted : C:\Program Files (x86)\XTab
Folder Deleted : C:\Users\Vladimíra\AppData\Roaming\BrowserCompanion
Folder Deleted : C:\Users\Vladimíra\AppData\Roaming\Microsoft\Windows\Start Menu\LuckyTab
File Deleted : C:\Users\Vladimíra\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\tbhcn.lnk
File Deleted : C:\Users\Vladimíra\AppData\Roaming\Mozilla\Firefox\Profiles\p5jfm6ef.default\user.js

***** [ Scheduled tasks ] *****

Task Deleted : Update Service YourFileDownloader
Task Deleted : LuckyTab

***** [ Shortcuts ] *****

Shortcut Disinfected : C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk
Shortcut Disinfected : C:\Users\Vladimíra\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
Shortcut Disinfected : C:\Users\Vladimíra\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Launch Internet Explorer Browser.lnk
Shortcut Disinfected : C:\Users\Vladimíra\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Internet Explorer.lnk
Shortcut Disinfected : C:\Users\Vladimíra\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Mozilla Firefox.lnk

***** [ Registry ] *****

Key Deleted : HKCU\Software\Classes\pokki
Key Deleted : HKLM\SOFTWARE\Classes\AppID\secman.DLL
Key Deleted : HKLM\SOFTWARE\Classes\AppID\tdataprotocol.DLL
Key Deleted : HKLM\SOFTWARE\Classes\AppID\updatebho.DLL
Key Deleted : HKLM\SOFTWARE\Classes\AppID\wit4ie.DLL
Key Deleted : HKLM\SOFTWARE\Classes\secman.OutlookSecurityManager
Key Deleted : HKLM\SOFTWARE\Classes\secman.OutlookSecurityManager.1
Key Deleted : HKLM\SYSTEM\CurrentControlSet\Services\EventLog\Application\Update Box Rock
Key Deleted : HKLM\SYSTEM\CurrentControlSet\Services\EventLog\Application\Util Box Rock
Key Deleted : HKLM\SOFTWARE\Classes\AppID\{20EDC024-43C5-423E-B7F5-FD93523E0D9F}
Key Deleted : HKLM\SOFTWARE\Classes\AppID\{373ED12D-B306-43AC-9485-A7C5133DC34C}
Key Deleted : HKLM\SOFTWARE\Classes\AppID\{4D076AB4-7562-427A-B5D2-BD96E19DEE56}
Key Deleted : HKLM\SOFTWARE\Classes\AppID\{ED6535E7-F778-48A5-A060-549D30024511}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{1AA60054-57D9-4F99-9A55-D0FBFBE7ECD3}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{66EEF543-A9AC-4A9D-AA3C-1ED148AC8EEE}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{826D7151-8D99-434B-8540-082B8C2AE556}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{AE07101B-46D4-4A98-AF68-0333EA26E113}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{66EEF543-A9AC-4A9D-AA3C-1ED148AC8EEE}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{66EEF543-A9AC-4A9D-AA3C-1ED148AC8FFE}
Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{11549FE4-7C5A-4C17-9FC3-56FC5162A994}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{AE07101B-46D4-4A98-AF68-0333EA26E113}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{EE932B49-D5C0-4D19-A3DA-CE0849258DE6}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{EE932B49-D5C0-4D19-A3DA-CE0849258DE6}
Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Extensions\{EE932B49-D5C0-4D19-A3DA-CE0849258DE6}
Value Deleted : HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser [{D4027C7F-154A-4066-A1AD-4243D8127440}]
Key Deleted : [x64] HKLM\SOFTWARE\Classes\CLSID\{AE07101B-46D4-4A98-AF68-0333EA26E113}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{66EEF543-A9AC-4A9D-AA3C-1ED148AC8EEE}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{66EEF543-A9AC-4A9D-AA3C-1ED148AC8FFE}
Key Deleted : [x64] HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{D3F22A84-2A84-49EB-91E6-5DADAAF0165D}
Key Deleted : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}
Key Deleted : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{2023ECEC-E06A-4372-A1C7-0B49F9E0FFF0}
Key Deleted : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{BD896318-9E74-4F80-A860-B7F502969199}
Key Deleted : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{E733165D-CBCF-4FDA-883E-ADEF965B476C}
Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{d3f22a84-2a84-49eb-91e6-5dadaaf0165d}
Key Deleted : HKCU\Software\APN PIP
Key Deleted : HKCU\Software\Blabbers
Key Deleted : HKCU\Software\Myfree Codec
Key Deleted : HKCU\Software\Box Rock
Key Deleted : HKLM\SOFTWARE\BrowserCompanion
Key Deleted : HKLM\SOFTWARE\Myfree Codec
Key Deleted : HKLM\SOFTWARE\PIP
Key Deleted : HKLM\SOFTWARE\SupDp
Key Deleted : HKLM\SOFTWARE\YourFileDownloader
Key Deleted : HKLM\SOFTWARE\Box Rock
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\IMBoosterARP
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\IminentToolbar
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\SearchProtect
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Your Software Deals_is1
Key Deleted : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\3152E1F19977892449DC968802CE8964
Key Deleted : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\649A52D257CA5DB4EAAE8BA9EB23E467
Data Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings [ProxyOverride] - *.local

***** [ Web browsers ] *****

-\\ Internet Explorer v11.0.9600.17416

Setting Restored : HKCU\Software\Microsoft\Internet Explorer\Main [Default_Page_URL]

-\\ Mozilla Firefox v35.0.1 (x86 cs)

[p5jfm6ef.default\prefs.js] - Line Deleted : user_pref("browser.search.selectedEngine", "webssearches");
[p5jfm6ef.default\prefs.js] - Line Deleted : user_pref("browser.uiCustomization.state", "{\"placements\":{\"PanelUI-contents\":[\"edit-controls\",\"zoom-controls\",\"new-window-button\",\"privatebrowsing-button\",\"save-page-button\",\"print-but[...]
[p5jfm6ef.default\prefs.js] - Line Deleted : user_pref("extensions.helperbar.Country", "Czech Republic");
[p5jfm6ef.default\prefs.js] - Line Deleted : user_pref("extensions.helperbar.DockingPositionDown", false);
[p5jfm6ef.default\prefs.js] - Line Deleted : user_pref("extensions.helperbar.LastHiddenTime", 22928738);
[p5jfm6ef.default\prefs.js] - Line Deleted : user_pref("extensions.helperbar.SmartbarDisabled", true);
[p5jfm6ef.default\prefs.js] - Line Deleted : user_pref("extensions.helperbar.SmartbarStateMinimaized", false);
[p5jfm6ef.default\prefs.js] - Line Deleted : user_pref("extensions.helperbar.UserID", "80ea876d-6910-4a23-b65a-79214b230252");
[p5jfm6ef.default\prefs.js] - Line Deleted : user_pref("extensions.helperbar.Visibility", true);
[p5jfm6ef.default\prefs.js] - Line Deleted : user_pref("extensions.helperbar.countryiso", "cz");
[p5jfm6ef.default\prefs.js] - Line Deleted : user_pref("extensions.helperbar.date", "b0304");
[p5jfm6ef.default\prefs.js] - Line Deleted : user_pref("extensions.helperbar.downloadprovider", "messengerplus");
[p5jfm6ef.default\prefs.js] - Line Deleted : user_pref("extensions.helperbar.installationid", "80ea876d-6910-4a23-b65a-79214b230252");
[p5jfm6ef.default\prefs.js] - Line Deleted : user_pref("extensions.helperbar.ppctid", "mpls_lin");
[p5jfm6ef.default\prefs.js] - Line Deleted : user_pref("extensions.helperbar.publisher", "messengerplus");
[p5jfm6ef.default\prefs.js] - Line Deleted : user_pref("extensions.mywebsearch.prevDefaultEngine", "Google");
[p5jfm6ef.default\prefs.js] - Line Deleted : user_pref("extensions.mywebsearch.prevKwdEnabled", false);
[p5jfm6ef.default\prefs.js] - Line Deleted : user_pref("extensions.mywebsearch.prevSelectedEngine", "Google");
[p5jfm6ef.default\prefs.js] - Line Deleted : user_pref("extensions.toolbar.mindspark._5aMembers_.homepage", "hxxp://home.tb.ask.com/index.jhtml?ptb=0909971F-E286-492D-867A-BB136523C498&n=77fd520f&p2=^GR^xdm518^YYA^cz");
[p5jfm6ef.default\prefs.js] - Line Deleted : user_pref("extensions.toolbar.mindspark._5aMembers_.initialized", true);
[p5jfm6ef.default\prefs.js] - Line Deleted : user_pref("extensions.toolbar.mindspark._5aMembers_.installation.contextKey", "");
[p5jfm6ef.default\prefs.js] - Line Deleted : user_pref("extensions.toolbar.mindspark._5aMembers_.installation.installDate", "2013090319");
[p5jfm6ef.default\prefs.js] - Line Deleted : user_pref("extensions.toolbar.mindspark._5aMembers_.installation.partnerId", "^GR^xdm518^YYA^cz");
[p5jfm6ef.default\prefs.js] - Line Deleted : user_pref("extensions.toolbar.mindspark._5aMembers_.installation.partnerSubId", "");
[p5jfm6ef.default\prefs.js] - Line Deleted : user_pref("extensions.toolbar.mindspark._5aMembers_.installation.success", true);
[p5jfm6ef.default\prefs.js] - Line Deleted : user_pref("extensions.toolbar.mindspark._5aMembers_.installation.toolbarId", "0909971F-E286-492D-867A-BB136523C498");
[p5jfm6ef.default\prefs.js] - Line Deleted : user_pref("extensions.toolbar.mindspark._5aMembers_.lastActivePing", "1378230974358");
[p5jfm6ef.default\prefs.js] - Line Deleted : user_pref("extensions.toolbar.mindspark._5aMembers_.options.defaultSearch", false);
[p5jfm6ef.default\prefs.js] - Line Deleted : user_pref("extensions.toolbar.mindspark._5aMembers_.options.homePageEnabled", false);
[p5jfm6ef.default\prefs.js] - Line Deleted : user_pref("extensions.toolbar.mindspark._5aMembers_.options.keywordEnabled", true);
[p5jfm6ef.default\prefs.js] - Line Deleted : user_pref("extensions.toolbar.mindspark._5aMembers_.options.tabEnabled", true);
[p5jfm6ef.default\prefs.js] - Line Deleted : user_pref("extensions.toolbar.mindspark._5aMembers_.weather.location", "10001");
[p5jfm6ef.default\prefs.js] - Line Deleted : user_pref("extensions.toolbar.mindspark.lastInstalled", "mywebface@mindspark.com");

*************************

AdwCleaner[R0].txt - [10578 bytes] - [15/02/2015 16:59:32]
AdwCleaner[R1].txt - [10637 bytes] - [15/02/2015 20:51:30]
AdwCleaner[S0].txt - [10554 bytes] - [15/02/2015 20:54:00]

########## EOF - C:\AdwCleaner\AdwCleaner[S0].txt - [10614 bytes] ##########

[edadeni]

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Junkware Removal Tool (JRT) by Thisisu
Version: 6.4.2 (02.02.2015:1)
OS: Windows 8.1 x64
Ran by Vladimˇra on ne 15. 02. 2015 at 21:00:50,86
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~




~~~ Services



~~~ Registry Values



~~~ Registry Keys

Successfully deleted: [Registry Key - Orphan] HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{0E8A89AD-95D7-40EB-8D9D-083EF7066A01}
Successfully deleted: [Registry Key - Orphan] HKEY_CLASSES_ROOT\CLSID\{0E8A89AD-95D7-40EB-8D9D-083EF7066A01}
Successfully deleted: [Registry Key - Orphan] HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{5C255C8A-E604-49b4-9D64-90988571CECB}
Successfully deleted: [Registry Key - Orphan] HKEY_CLASSES_ROOT\CLSID\{5C255C8A-E604-49b4-9D64-90988571CECB}
Successfully deleted: [Registry Key - Orphan] HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}
Successfully deleted: [Registry Key - Orphan] HKEY_CLASSES_ROOT\CLSID\{9030D464-4C02-4ABF-8ECC-5164760863C6}
Successfully deleted: [Registry Key - Orphan] HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{0E8A89AD-95D7-40EB-8D9D-083EF7066A01}
Successfully deleted: [Registry Key - Orphan] HKEY_CLASSES_ROOT\CLSID\{0E8A89AD-95D7-40EB-8D9D-083EF7066A01}
Successfully deleted: [Registry Key - Orphan] HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{5C255C8A-E604-49b4-9D64-90988571CECB}
Successfully deleted: [Registry Key - Orphan] HKEY_CLASSES_ROOT\CLSID\{5C255C8A-E604-49b4-9D64-90988571CECB}
Successfully deleted: [Registry Key - Orphan] HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}
Successfully deleted: [Registry Key - Orphan] HKEY_CLASSES_ROOT\CLSID\{9030D464-4C02-4ABF-8ECC-5164760863C6}



~~~ Files



~~~ Folders

Successfully deleted: [Folder] "C:\Program Files (x86)\myfree codec"



~~~ FireFox

Successfully deleted the following from C:\Users\Vladimˇra\AppData\Roaming\mozilla\firefox\profiles\p5jfm6ef.default\prefs.js

user_pref("browser.uiCustomization.state", "{\"placements\":{\"PanelUI-contents\":[\"edit-controls\",\"zoom-controls\",\"new-window-button\",\"privatebrowsing-button\",\"save-
Emptied folder: C:\Users\Vladimˇra\AppData\Roaming\mozilla\firefox\profiles\p5jfm6ef.default\minidumps [161 files]



~~~ Event Viewer Logs were cleared





~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on ne 15. 02. 2015 at 21:03:23,61
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

[jaro3]

Co MbAM?

Stáhni si RogueKiller by Adlice Software
32bit.:
http://www.sur-la-toile.com/RogueKiller/RogueKiller.exe
64bit.:
http://www.sur-la-toile.com/RogueKiller ... lerX64.exe
na svojí plochu.
- Zavři všechny ostatní programy a prohlížeče.
- Pro OS Vista a win7 spusť program RogueKiller.exe jako správce , u XP poklepáním.
- počkej až skončí Prescan -vyhledávání škodlivých procesů.
- Zkontroluj , zda máš zaškrtnuto:
Kontrola MBR
Offline Reg
Antirootkit
-Potom klikni na „Prohledat“.
- Program skenuje procesy PC. Po proskenování klikni na „Zpráva“celý obsah logu sem zkopíruj.
Pokud je program blokován , zkus ho spustit několikrát. Pokud dále program nepůjde spustit a pracovat, přejmenuj ho na winlogon.exe.