PC-HELP.CZ

Zdravím. Mám už dost pomalí notebook. Navíc mi začalo při spuštění vyskakovat nějaké okno status a chce to instalační CD, které nemám. Vůbec netuším o co jde. Před tím to nedělalo a nejsem si vědom, že bych instaloval v poslední době nějaký program, který by to mohl spustit. Spíše to bude asi zavirované. Avast nic nenašel. Tady je log.

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 10:58:18, on 18.8.2013
Platform: Unknown Windows (WinNT 6.01.3505 SP1)
MSIE: Internet Explorer v10.0 (10.00.9200.16660)
Boot mode: Normal

Running processes:
C:\windows\system32\taskhost.exe
C:\windows\system32\Dwm.exe
C:\windows\Explorer.EXE
C:\Program Files\Malwarebytes' Anti-Malware\mbamgui.exe
C:\windows\system32\taskeng.exe
C:\Program Files\ASUS\ATK Package\ATKOSD2\ATKOSD2.exe
C:\Windows\WindowsMobile\wmdc.exe
C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe
C:\Windows\System32\igfxtray.exe
C:\Windows\System32\hkcmd.exe
C:\Windows\System32\igfxpers.exe
C:\windows\system32\igfxsrvc.exe
C:\Program Files\Asus\ATK Package\ATK Media\DMedia.exe
C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
C:\Program Files\AVAST Software\Avast\AvastUI.exe
C:\Program Files\Common Files\Java\Java Update\jusched.exe
C:\Program Files\Elantech\ETDCtrl.exe
C:\Program Files\Windows Sidebar\sidebar.exe
C:\Program Files\Sony\Sony PC Companion\PCCompanion.exe
C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
C:\Users\Zdendys\AppData\Local\Facebook\Messenger\2.1.4814.0\FacebookMessenger.exe
C:\Program Files\Elantech\ETDCtrlHelper.exe
C:\Program Files\Microsoft Office\Office14\ONENOTEM.EXE
C:\Program Files\Elantech\ETDGesture.exe
C:\Program Files\Sony\Sony PC Companion\PCCompanionInfo.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\windows\system32\SearchFilterHost.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://search.zonealarm.com/?src=hp&tbi ... sId=&ver=&
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/p/?LinkId=255141
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/p/?LinkId=255141
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page =
O2 - BHO: HP Print Enhancer - {0347C33E-8762-4905-BF09-768834316C61} - C:\Program Files\HP\Digital Imaging\Smart Web Printing\hpswp_printenhancer.dll
O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\PROGRA~1\MIF5BA~1\Office14\GROOVEEX.DLL
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll
O2 - BHO: avast! WebRep - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll
O2 - BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: SkypeIEPluginBHO - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O2 - BHO: URLRedirectionBHO - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\PROGRA~1\MIF5BA~1\Office14\URLREDIR.DLL
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll
O2 - BHO: HP Smart BHO Class - {FFFFFFFF-CF4E-4F2B-BDC2-0E72E116A856} - C:\Program Files\HP\Digital Imaging\Smart Web Printing\hpswp_BHO.dll
O3 - Toolbar: avast! WebRep - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll
O4 - HKLM\..\Run: [Windows Mobile Device Center] %windir%\WindowsMobile\wmdc.exe
O4 - HKLM\..\Run: [BCSSync] "C:\Program Files\Microsoft Office\Office14\BCSSync.exe" /DelayServices
O4 - HKLM\..\Run: [SuperHybridEngine] AsusSender.exe C:\Program Files\ASUS\SHE\SuperHybridEngine.exe
O4 - HKLM\..\Run: [Eee Docking] C:\Program Files\ASUS\Eee Docking\Eee Docking.exe autorun
O4 - HKLM\..\Run: [RtHDVCpl] C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe -s
O4 - HKLM\..\Run: [IgfxTray] C:\windows\system32\igfxtray.exe
O4 - HKLM\..\Run: [HotKeysCmds] C:\windows\system32\hkcmd.exe
O4 - HKLM\..\Run: [Persistence] C:\windows\system32\igfxpers.exe
O4 - HKLM\..\Run: [ATKOSD2] C:\Program Files\ASUS\ATK Package\ATKOSD2\ATKOSD2.exe
O4 - HKLM\..\Run: [ATKMEDIA] C:\Program Files\ASUS\ATK Package\ATK Media\DMedia.exe
O4 - HKLM\..\Run: [HotkeyMon] AsusSender.exe C:\Program Files\ASUS\HotkeyService\HotKeyMon.exe
O4 - HKLM\..\Run: [HotkeyService] AsusSender.exe C:\Program Files\ASUS\HotkeyService\HotkeyService.exe
O4 - HKLM\..\Run: [IAStorIcon] C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
O4 - HKLM\..\Run: [hpqSRMon] C:\Program Files\HP\Digital Imaging\bin\hpqSRMon.exe
O4 - HKLM\..\Run: [avast] "C:\Program Files\AVAST Software\Avast\avastUI.exe" /nogui
O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKLM\..\Run: [APSDaemon] "C:\Program Files\Common Files\Apple\Apple Application Support\APSDaemon.exe"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Common Files\Java\Java Update\jusched.exe"
O4 - HKLM\..\Run: [ETDCtrl] %ProgramFiles%\Elantech\ETDCtrl.exe
O4 - HKCU\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun
O4 - HKCU\..\Run: [] C:\Program Files\Samsung\Kies\External\FirmwareUpdate\KiesPDLR.exe
O4 - HKCU\..\Run: [Google Update] "C:\Users\Zdendys\AppData\Local\Google\Update\GoogleUpdate.exe" /c
O4 - HKCU\..\Run: [Sony PC Companion] "C:\Program Files\Sony\Sony PC Companion\PCCompanion.exe" /Background
O4 - Startup: Facebook Messenger.lnk = Zdendys\AppData\Local\Facebook\Messenger\2.1.4814.0\FacebookMessenger.exe
O4 - Startup: fliptoast.lnk = C:\Program Files\fliptoast\fliptoast.exe
O4 - Startup: Výřezy obrazovky a spuštění aplikace OneNote 2010.lnk = C:\Program Files\Microsoft Office\Office14\ONENOTEM.EXE
O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Excel - res://C:\PROGRA~1\MIF5BA~1\Office14\EXCEL.EXE/3000
O8 - Extra context menu item: Od&eslat do aplikace OneNote - res://C:\PROGRA~1\MIF5BA~1\Office14\ONBttnIE.dll/105
O9 - Extra button: @C:\Program Files\Windows Live\Writer\WindowsLiveWriterShortcuts.dll,-1004 - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra 'Tools' menuitem: @C:\Program Files\Windows Live\Writer\WindowsLiveWriterShortcuts.dll,-1003 - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra button: Odeslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files\Microsoft Office\Office14\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: Od&eslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files\Microsoft Office\Office14\ONBttnIE.dll
O9 - Extra button: @C:\windows\WindowsMobile\INetRepl.dll,-222 - {2EAF5BB1-070F-11D3-9307-00C04FAE2D4F} - C:\windows\WindowsMobile\INetRepl.dll
O9 - Extra button: (no name) - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\windows\WindowsMobile\INetRepl.dll
O9 - Extra 'Tools' menuitem: @C:\windows\WindowsMobile\INetRepl.dll,-223 - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\windows\WindowsMobile\INetRepl.dll
O9 - Extra button: (no name) - {45d8438c-b51d-47a8-aeea-9061535f25f1} - (no file)
O9 - Extra button: P&ropojené poznámky aplikace OneNote - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files\Microsoft Office\Office14\ONBttnIELinkedNotes.dll
O9 - Extra 'Tools' menuitem: P&ropojené poznámky aplikace OneNote - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files\Microsoft Office\Office14\ONBttnIELinkedNotes.dll
O9 - Extra button: Skype Click to Call - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O9 - Extra button: Zobrazit nebo skrýt HP Smart Web Printing - {DDE87865-83C5-48c4-8357-2F5B1AA84522} - C:\Program Files\HP\Digital Imaging\Smart Web Printing\hpswp_BHO.dll
O10 - Unknown file in Winsock LSP: c:\program files\common files\microsoft shared\windows live\wlidnsp.dll
O10 - Unknown file in Winsock LSP: c:\program files\common files\microsoft shared\windows live\wlidnsp.dll
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O18 - Protocol: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O18 - Protocol: wlpg - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} - C:\Program Files\Windows Live\Photo Gallery\AlbumDownloadProtocolHandler.dll
O18 - Filter hijack: text/xml - {807573E5-5146-11D5-A672-00B0D022E945} - C:\Program Files\Common Files\Microsoft Shared\OFFICE14\MSOXMLMF.DLL
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: Asus Launcher Service (AsusService) - Unknown owner - C:\windows\system32\AsusService.exe
O23 - Service: ATKGFNEX Service (ATKGFNEXSrv) - ASUS - C:\Program Files\ASUS\ATK Package\ATKGFNEX\GFNEXSrv.exe
O23 - Service: avast! Antivirus - AVAST Software - C:\Program Files\AVAST Software\Avast\AvastSvc.exe
O23 - Service: Služba Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: Služba Google Update (gupdatem) (gupdatem) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: Úložná technologie Intel(R) Rapid (IAStorDataMgrSvc) - Intel Corporation - C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
O23 - Service: MBAMScheduler - Malwarebytes Corporation - C:\Program Files\Malwarebytes' Anti-Malware\mbamscheduler.exe
O23 - Service: MBAMService - Malwarebytes Corporation - C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe
O23 - Service: Skype C2C Service - Skype Technologies S.A. - C:\ProgramData\Skype\Toolbars\Skype C2C Service\c2c_service.exe
O23 - Service: Skype Updater (SkypeUpdate) - Skype Technologies - C:\Program Files\Skype\Updater\Updater.exe
O23 - Service: Sony PC Companion - Avanquest Software - C:\Program Files\Sony\Sony PC Companion\PCCService.exe

--
End of file - 10941 bytes

Stáhni si ATF Cleaner
Poklepej na ATF Cleaner.exe, klikni na select all found, poté:
-Když používáš Firefox (Mozzila), klikni na Firefox nahoře a vyber: Select All, poté klikni na Empty Selected.
-Když používáš Operu, klikni nahoře na Operu a vyber: Select All, poté klikni na Empty Selected.
Po vyčištění klikni na Exit k zavření programu.
ATF-Cleaner je jednoduchý nástroj na odstranìní historie z webového prohlížeče. Program dokáže odstranit cache, cookies, historii a další stopy po surfování na Internetu. Mezi podporované prohlížeče patří Internet Explorer, Firefox a Opera. Aplikace navíc umí odstranit doèasné soubory Windows, vysypat koš atd.

Stáhni si Malwarebytes' Anti-Malware
Nainstaluj a spusť ho
- na konci instalace se ujisti že máš zvoleny/zatrhnuty obě možnosti:
Update Malwarebytes' Anti-Malware (Aktualizace Malwarebytes' Anti-Malware) a Launch Malwarebytes' Anti-Malware (Spustit aplikaci Malwarebytes' Anti-Malware), pokud jo tak klikni na tlačítko Finish
- pokud bude nalezena aktualizace, tak se stáhne a nainstaluje
- program se po té spustí a nech vybranou možnost Perform Quick Scan (Provést rychlý sken) a klikni na tlačítko Scan (Skenovat)
- po probìhnutí programu se ti objeví hláška tak klikni na OK a pak na tlačítko Show Results
- pak zvol možnost Save Logfile a ulož si log na plochu
- po té klikni na tlačítko Exit, objeví se ti hláška tak zvol Ano
(zatím nic nemaž!).
Vlož sem pak obsah toho logu.

Stáhni AdwCleaner
Ulož si ho na svojí plochu
Ukonči všechny programy, okna a prohlížeče
Spusť program poklepáním a klikni na „Search“
Po skenu se objeví log (jinak je uložen systémovem disku jako AdwCleaner[R?].txt), jeho obsah sem celý vlož.

Malwarebytes Anti-Malware (PRO) 1.75.0.1300
www.malwarebytes.org

Verze: v2013.08.17.04

Windows 7 Service Pack 1 x86 NTFS
Internet Explorer 10.0.9200.16660
Zdendys :: ZDENDYS-PC [administrátor]

Ochrana: Zakázána

18.8.2013 18:31:12
MBAM-log-2013-08-18 (18-48-25).txt

Typ: Rychlá kontrola
Nastavení kontroly povoleno: Paměť | Po spuštění | Registr | Systémové soubory | Heuristická analýza Extra | Heuristická analýza Shuriken | PUP | PUM
Nastavení kontroly zakázáno: P2P
Kontrolované objekty: 215850
Uplynulý čas: 16 minut, 17 sekund

Nalezené procesy v paměti: 0
(Žádné škodlivé položky nebyly zjištěny)

Nalezené moduly v paměti: 0
(Žádné škodlivé položky nebyly zjištěny)

Nalezené klíče v registru: 0
(Žádné škodlivé položky nebyly zjištěny)

Nalezené hodnoty v registru: 0
(Žádné škodlivé položky nebyly zjištěny)

Nalezené datové položky v registru: 0
(Žádné škodlivé položky nebyly zjištěny)

Nalezené složky: 0
(Žádné škodlivé položky nebyly zjištěny)

Nalezené soubory: 3
C:\Windows\Installer\a9da9d.msi (PUP.Optional.SweetIM) -> Nebyla provedena žádná instrukce.
C:\Windows\Installer\a9daa3.msi (PUP.Optional.SweetIM) -> Nebyla provedena žádná instrukce.
C:\Windows\Installer\a9daa9.msi (PUP.Optional.SweetIM) -> Nebyla provedena žádná instrukce.

(konec)

# AdwCleaner v2.306 - Log vytvooen 18/08/2013 v 18:56:16
# Aktualizováno 19/07/2013 Xplode
# Operaení systém : Windows 7 Starter Service Pack 1 (32 bits)
# Uživatel : Zdendys - ZDENDYS-PC
# Spuštin systém : Normální
# Spuštino z : C:\Users\Zdendys\Downloads\adwcleaner.exe
# Volba [Prohledat]


***** [Služby] *****


***** [Soubory / Složky] *****

Složka Nalezeno : C:\Program Files\Red Sky
Složka Nalezeno : C:\Users\Zdendys\AppData\Local\DownTango
Složka Nalezeno : C:\Users\Zdendys\AppData\LocalLow\SimplyTech
Složka Nalezeno : C:\Users\Zdendys\AppData\Roaming\CheckPoint\ZoneAlarm LTD Toolbar
Soubor Nalezeno : C:\Program Files\mozilla firefox\searchplugins\Web Search.xml
Soubor Nalezeno : C:\windows\system32\roboot.exe

***** [Registry] *****

Klíe Nalezeno : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}
Klíe Nalezeno : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}
Klíe Nalezeno : HKCU\Software\systweak
Klíe Nalezeno : HKLM\SOFTWARE\Classes\AppID\{3FC27B34-0C19-49DA-875E-1875DDD4A6B2}
Klíe Nalezeno : HKLM\SOFTWARE\Classes\AppID\{4D076AB4-7562-427A-B5D2-BD96E19DEE56}
Klíe Nalezeno : HKLM\SOFTWARE\Classes\AppID\secman.DLL
Klíe Nalezeno : HKLM\SOFTWARE\Classes\CLSID\{898EA8C8-E7FF-479B-8935-AEC46303B9E5}
Klíe Nalezeno : HKLM\SOFTWARE\Classes\CLSID\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}
Klíe Nalezeno : HKLM\SOFTWARE\Classes\Interface\{8DA8B89E-0C65-403B-8231-AB22ECFA0687}
Klíe Nalezeno : HKLM\SOFTWARE\Classes\Interface\{A928E66C-F501-4E66-9953-855C712F93B2}
Klíe Nalezeno : HKLM\SOFTWARE\Classes\Interface\{B0E28FA0-DF07-44B6-95CE-48BE26DB9266}
Klíe Nalezeno : HKLM\SOFTWARE\Classes\Interface\{E6B4EE8F-C38E-4994-BE28-229A3F92262C}
Klíe Nalezeno : HKLM\SOFTWARE\Classes\Interface\{FCA8936E-403A-4487-A966-70F80F1D5A6A}
Klíe Nalezeno : HKLM\SOFTWARE\Classes\TypeLib\{212C2C4F-C845-4FBC-9561-C833A13D8DCE}
Klíe Nalezeno : HKLM\SOFTWARE\Classes\TypeLib\{3C5D1D57-16C8-473C-A552-37B8D88596FE}
Klíe Nalezeno : HKLM\SOFTWARE\Classes\TypeLib\{4A115D8A-6A7B-4C72-92B1-2E2D01F36979}
Klíe Nalezeno : HKLM\SOFTWARE\Classes\TypeLib\{99DF8440-814E-497F-BDDD-FB93E9E9DF96}
Klíe Nalezeno : HKLM\SOFTWARE\Microsoft\Internet Explorer\Extensions\{898EA8C8-E7FF-479B-8935-AEC46303B9E5}
Klíe Nalezeno : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{83CAD530-387D-40FD-82EA-B9E863D92A9B}
Klíe Nalezeno : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{CFD485F0-96BD-47CD-BB6D-CD7DDA95F102}
Klíe Nalezeno : HKLM\SOFTWARE\Microsoft\Tracing\BundleSweetIMSetup_RASAPI32
Klíe Nalezeno : HKLM\SOFTWARE\Microsoft\Tracing\BundleSweetIMSetup_RASMANCS
Klíe Nalezeno : HKLM\SOFTWARE\Microsoft\Tracing\CToolbar_RASMANCS
Klíe Nalezeno : HKLM\SOFTWARE\Microsoft\Tracing\I Want This_RASAPI32
Klíe Nalezeno : HKLM\SOFTWARE\Microsoft\Tracing\I Want This_RASMANCS
Klíe Nalezeno : HKLM\SOFTWARE\Microsoft\Tracing\SweetPacksUpdateManager_RASAPI32
Klíe Nalezeno : HKLM\SOFTWARE\Microsoft\Tracing\SweetPacksUpdateManager_RASMANCS
Klíe Nalezeno : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}
Klíe Nalezeno : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UpgradeCodes\789034A89BAC50E4782F0A7BDBF75632
Klíe Nalezeno : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UpgradeCodes\A97CEC23332751B47BA4B95BAA50C9D0
Klíe Nalezeno : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\F754C503375A13344B22388E18DFE87E
Klíe Nalezeno : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{96E2E493-C484-43E3-9B95-D62EE7D40D3A}
Klíe Nalezeno : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Freemake Video Converter_is1
Klíe Nalezeno : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\ZoneAlarm LTD Toolbar
Klíe Nalezeno : HKLM\SOFTWARE\MozillaPlugins\@checkpoint.com/FFApi

***** [Internetové prohlížeee] *****

-\\ Internet Explorer v10.0.9200.16660

[HKCU\Software\Microsoft\Internet Explorer\SearchUrl - (Default)] = hxxp://search.certified-toolbar.com?si= ... tid=592&q=%s
[HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchUrl - (Default)] = hxxp://search.certified-toolbar.com?si= ... tid=592&q=%s

-\\ Google Chrome v28.0.1500.95

Soubor : C:\Users\Zdendys\AppData\Local\Google\Chrome\User Data\Default\Preferences

[OK] Soubor je eistý.

*************************

AdwCleaner[R1].txt - [23774 octets] - [24/01/2013 00:37:03]
AdwCleaner[R2].txt - [23835 octets] - [24/01/2013 00:40:22]
AdwCleaner[R3].txt - [4650 octets] - [18/08/2013 18:56:16]
AdwCleaner[S1].txt - [24500 octets] - [24/01/2013 00:41:43]

########## EOF - C:\AdwCleaner[R3].txt - [4771 octets] ##########

V Mbam i adw nech vše smazat a dodej logy po smazání

Stáhni si RogueKiller
32bit.:
http://www.sur-la-toile.com/RogueKiller/RogueKiller.exe
64bit.:
http://www.sur-la-toile.com/RogueKiller ... lerX64.exe
na svojí plochu.
- Zavři všechny ostatní programy a prohlížeče.
- Pro OS Vista a win7 spusť program RogueKiller.exe jako správce , u XP poklepáním.
- počkej až skončí Prescan -vyhledávání škodlivých procesů.
- Zkontroluj , zda máš zaškrtnuto:
Kontrola MBR
Kontrola Faked
Antirootkit
-Potom klikni na „Prohledat“.
- Program skenuje procesy PC. Po proskenování klikni na „Zpráva“celý obsah logu sem zkopíruj.
Pokud je program blokován , zkus ho spustit několikrát. Pokud dále program nepůjde spustit a pracovat, přejmenuj ho na winlogon.exe.

Stáhni si Junkware Removal Tool

na svojí plochu.
Deaktivuj si svůj antivirový program.
Pravým tl. myši klikni na JRT.exe a vyber „spustit jako správce“. Pro pokračování budeš vyzván ke stisknutí jakékoliv klávesy. Na nějakou klikni.
Začne skenování programu. Skenování může trvat dloho , podle množství nákaz. Po ukončení skenu se objeví log (JRT.txt) , který se uloží na ploše.
Zkopíruj sem prosím celý jeho obsah.

RogueKiller V8.6.5 [Aug 5 2013] by Tigzy
mail : tigzyRK<at>gmail<dot>com
Podpora : http://www.adlice.com/forum/
Webové stránky : http://www.adlice.com/softwares/roguekiller/
: http://tigzyrk.blogspot.com/

Operační systém : Windows 7 (6.1.7601 Service Pack 1) 32 bits version
Spuštěno v : Normální režim
Uživatel : Zdendys [Práva správce]
Mód : Kontrola -- Datum : 08/18/2013 21:43:24
| ARK || FAK || MBR |

¤¤¤ Škodlivé procesy: : 0 ¤¤¤

¤¤¤ ¤¤¤ Záznamy Registrů: : 8 ¤¤¤
[RUN][SUSP PATH] HKCU\[...]\Run : Google Update ("C:\Users\Zdendys\AppData\Local\Google\Update\GoogleUpdate.exe" /c [7]) -> NALEZENO
[RUN][SUSP PATH] HKUS\S-1-5-21-2508874819-1690819645-4204201855-1000\[...]\Run : Google Update ("C:\Users\Zdendys\AppData\Local\Google\Update\GoogleUpdate.exe" /c [7]) -> NALEZENO
[HJ DESK] HKCU\[...]\ClassicStartMenu : {59031a47-3f72-44a7-89c5-5595fe6b30ee} (1) -> NALEZENO
[HJ DESK] HKCU\[...]\ClassicStartMenu : {20D04FE0-3AEA-1069-A2D8-08002B30309D} (1) -> NALEZENO
[HJ DESK] HKCU\[...]\NewStartPanel : {59031a47-3f72-44a7-89c5-5595fe6b30ee} (1) -> NALEZENO
[HJ DESK] HKCU\[...]\NewStartPanel : {20D04FE0-3AEA-1069-A2D8-08002B30309D} (1) -> NALEZENO
[HJ DESK] HKLM\[...]\NewStartPanel : {59031a47-3f72-44a7-89c5-5595fe6b30ee} (1) -> NALEZENO
[HJ DESK] HKLM\[...]\NewStartPanel : {20D04FE0-3AEA-1069-A2D8-08002B30309D} (1) -> NALEZENO

¤¤¤ naplánované úlohy : 4 ¤¤¤
[V1][SUSP PATH] GoogleUpdateTaskUserS-1-5-21-2508874819-1690819645-4204201855-1000UA.job : C:\Users\Zdendys\AppData\Local\Google\Update\GoogleUpdate.exe - /ua /installsource scheduler [7][x] -> NALEZENO
[V1][SUSP PATH] GoogleUpdateTaskUserS-1-5-21-2508874819-1690819645-4204201855-1000Core.job : C:\Users\Zdendys\AppData\Local\Google\Update\GoogleUpdate.exe - /c [7] -> NALEZENO
[V2][SUSP PATH] GoogleUpdateTaskUserS-1-5-21-2508874819-1690819645-4204201855-1000Core : C:\Users\Zdendys\AppData\Local\Google\Update\GoogleUpdate.exe - /c [7] -> NALEZENO
[V2][SUSP PATH] GoogleUpdateTaskUserS-1-5-21-2508874819-1690819645-4204201855-1000UA : C:\Users\Zdendys\AppData\Local\Google\Update\GoogleUpdate.exe - /ua /installsource scheduler [7][x] -> NALEZENO

¤¤¤ spuštění položky : 1 ¤¤¤
[Zdendys][SUSP UNIC] Výřezy obrazovky a spuštění aplikace OneNote 2010.lnk : C:\Users\Zdendys\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Výřezy obrazovky a spuštění aplikace OneNote 2010.lnk @C:\Program Files\Microsoft Office\Office14\ONENOTEM.EXE /tsr [-][7] -> NALEZENO

¤¤¤ Webové prohlížeče : 0 ¤¤¤

¤¤¤ Zvláštní soubory / Složky: ¤¤¤

¤¤¤ Ovladač : [NAHRÁNO] ¤¤¤

¤¤¤ Externí včelstvo: ¤¤¤

¤¤¤ Nákaza : ¤¤¤

¤¤¤ Soubor HOSTS: ¤¤¤
--> %SystemRoot%\System32\drivers\etc\hosts


127.0.0.1 localhost


¤¤¤ Kontrola MBR: ¤¤¤

+++++ PhysicalDrive0: Hitachi HTS543225A7A384 +++++
--- User ---
[MBR] 29b22aae1270017d1bb1959ce2a20a13
[BSP] 7c365635f9c3b145df0aa285278e9bd2 : Windows 7/8 MBR Code
Partition table:
0 - [ACTIVE] NTFS (0x07) [VISIBLE] Offset (sectors): 2048 | Size: 102400 Mo
1 - [XXXXXX] FAT32 (0x1b) [HIDDEN!] Offset (sectors): 209717248 | Size: 15360 Mo
2 - [XXXXXX] NTFS (0x07) [VISIBLE] Offset (sectors): 241174528 | Size: 120697 Mo
3 - [XXXXXX] UNKNOWN (0x00) [VISIBLE] Offset (sectors): 488361984 | Size: 16 Mo
User = LL1 ... OK!
User = LL2 ... OK!

Dokončeno : << RKreport[0]_S_08182013_214324.txt >>

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Junkware Removal Tool (JRT) by Thisisu
Version: 5.4.9 (08.17.2013:3)
OS: Windows 7 Starter x86
Ran by Zdendys on ne 18.08.2013 at 21:54:06,91
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~




~~~ Services



~~~ Registry Values

Successfully repaired: [Registry Value] HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}\\DisplayName
Successfully repaired: [Registry Value] HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}\\URL



~~~ Registry Keys

Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\AppID\{4D076AB4-7562-427A-B5D2-BD96E19DEE56}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\AppID\secman.dll
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\sweetim
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\systweak
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\sweetim
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Tracing\apnstub_rasapi32
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Tracing\apnstub_rasmancs
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Tracing\bundlesweetimsetup_rasapi32
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Tracing\bundlesweetimsetup_rasmancs
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Tracing\ctoolbar_rasmancs
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Tracing\i want this_rasapi32
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Tracing\i want this_rasmancs
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Tracing\sweetpacksupdatemanager_rasapi32
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Tracing\sweetpacksupdatemanager_rasmancs
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Tracing\AskInstallChecker-1_RASAPI32
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Tracing\AskInstallChecker-1_RASMANCS



~~~ Files

Successfully deleted: [File] "C:\windows\system32\roboot.exe"



~~~ Folders

Successfully deleted: [Folder] "C:\Users\Zdendys\AppData\Roaming\systweak"
Successfully deleted: [Folder] "C:\Users\Zdendys\appdata\local\downtango"
Successfully deleted: [Folder] "C:\Users\Zdendys\appdata\locallow\simplytech"
Successfully deleted: [Empty Folder] C:\Users\Zdendys\appdata\local\{009B92C1-45C7-4D32-A733-051F9BE4A113}
Successfully deleted: [Empty Folder] C:\Users\Zdendys\appdata\local\{039868F7-7081-41BE-81DA-BF39A74B2AF3}
Successfully deleted: [Empty Folder] C:\Users\Zdendys\appdata\local\{044372CC-BE9A-43A7-BA02-214FC721655E}
Successfully deleted: [Empty Folder] C:\Users\Zdendys\appdata\local\{05AE7E21-8CF7-4D72-ADD3-FBF071C220FA}
Successfully deleted: [Empty Folder] C:\Users\Zdendys\appdata\local\{0883F3F3-85A6-4DBB-BAD6-18D5D1D58F0A}
Successfully deleted: [Empty Folder] C:\Users\Zdendys\appdata\local\{0DBE8629-E263-46FC-A1FF-DDD065B2D1C6}
Successfully deleted: [Empty Folder] C:\Users\Zdendys\appdata\local\{0DDF86E2-63D7-4115-B0A2-868B6AF694A4}
Successfully deleted: [Empty Folder] C:\Users\Zdendys\appdata\local\{131F449A-99E5-4E0E-A958-07D947E13F7A}
Successfully deleted: [Empty Folder] C:\Users\Zdendys\appdata\local\{131F6FE9-BC22-4FD7-B809-9584A2B953F3}
Successfully deleted: [Empty Folder] C:\Users\Zdendys\appdata\local\{15364A42-8271-4134-AB8D-4AE82444136B}
Successfully deleted: [Empty Folder] C:\Users\Zdendys\appdata\local\{1666A652-A635-43A0-A097-1803C9C6B645}
Successfully deleted: [Empty Folder] C:\Users\Zdendys\appdata\local\{17FED774-4A4E-4C06-B167-A785627CA4E9}
Successfully deleted: [Empty Folder] C:\Users\Zdendys\appdata\local\{1C7A3AF2-268A-490B-B6A8-DDFBA6D0FE76}
Successfully deleted: [Empty Folder] C:\Users\Zdendys\appdata\local\{1D6A469C-EF22-4635-85F3-CE711CF57E10}
Successfully deleted: [Empty Folder] C:\Users\Zdendys\appdata\local\{1F34BA1E-1176-4A8F-B590-E66FDC656E2E}
Successfully deleted: [Empty Folder] C:\Users\Zdendys\appdata\local\{1F390861-DBCE-4DE9-8B3C-EE775E46A3C2}
Successfully deleted: [Empty Folder] C:\Users\Zdendys\appdata\local\{1F3BDE01-895D-4E80-A4CE-2F990502762B}
Successfully deleted: [Empty Folder] C:\Users\Zdendys\appdata\local\{221B9FDC-E600-402E-A867-D86ECE9FF003}
Successfully deleted: [Empty Folder] C:\Users\Zdendys\appdata\local\{229947DF-2326-414F-A1B8-D7397968F4B9}
Successfully deleted: [Empty Folder] C:\Users\Zdendys\appdata\local\{22B83641-F5F4-49CB-A079-367150BBD766}
Successfully deleted: [Empty Folder] C:\Users\Zdendys\appdata\local\{2820C83B-958C-4BF4-80A6-ED318E6B077E}
Successfully deleted: [Empty Folder] C:\Users\Zdendys\appdata\local\{29E2FD17-D2C1-4396-9C63-08C728C97744}
Successfully deleted: [Empty Folder] C:\Users\Zdendys\appdata\local\{2AED1D34-D3C7-4064-89E1-487A0C8CA0CE}
Successfully deleted: [Empty Folder] C:\Users\Zdendys\appdata\local\{3072E339-AC63-47F1-99D7-32CA9956C4F7}
Successfully deleted: [Empty Folder] C:\Users\Zdendys\appdata\local\{30C90BE1-8AF1-49BE-B506-89FB27E06A8F}
Successfully deleted: [Empty Folder] C:\Users\Zdendys\appdata\local\{31C6B27B-66F3-46CA-BF17-4EAC77DF2996}
Successfully deleted: [Empty Folder] C:\Users\Zdendys\appdata\local\{34B553CF-CB77-46AF-9E5F-6B4E4522ABA7}
Successfully deleted: [Empty Folder] C:\Users\Zdendys\appdata\local\{35A82C18-244A-42EE-A9F0-F2AD355A88B4}
Successfully deleted: [Empty Folder] C:\Users\Zdendys\appdata\local\{38DD3A48-2D28-430E-99FD-4673949BF4C3}
Successfully deleted: [Empty Folder] C:\Users\Zdendys\appdata\local\{396A36C4-EB59-485C-B070-4C9A508560D7}
Successfully deleted: [Empty Folder] C:\Users\Zdendys\appdata\local\{3EACAF76-DA4B-4CC6-BA28-CB06B5975971}
Successfully deleted: [Empty Folder] C:\Users\Zdendys\appdata\local\{3FAA8EA0-F759-483C-B785-FEF0B2FA52EC}
Successfully deleted: [Empty Folder] C:\Users\Zdendys\appdata\local\{40365C89-B996-4AA1-9D5C-BEEB62F33F00}
Successfully deleted: [Empty Folder] C:\Users\Zdendys\appdata\local\{40986D30-0C41-40E8-A7F0-E57D505B31DE}
Successfully deleted: [Empty Folder] C:\Users\Zdendys\appdata\local\{4802F7B4-CC77-4250-B821-214987AA615C}
Successfully deleted: [Empty Folder] C:\Users\Zdendys\appdata\local\{497D8E8F-5C30-4777-8720-FA4ECB59CF71}
Successfully deleted: [Empty Folder] C:\Users\Zdendys\appdata\local\{4A098C4B-3339-41A0-AA3C-F9630E0FFC4F}
Successfully deleted: [Empty Folder] C:\Users\Zdendys\appdata\local\{4CBADF4F-083C-4A9E-978D-5A1D94E3BBD3}
Successfully deleted: [Empty Folder] C:\Users\Zdendys\appdata\local\{4D41B310-3964-4B13-9E1F-F147A8600CD4}
Successfully deleted: [Empty Folder] C:\Users\Zdendys\appdata\local\{4D9D7E05-3FBB-4698-ABE9-1268204A54B2}
Successfully deleted: [Empty Folder] C:\Users\Zdendys\appdata\local\{4E7C7877-4DB4-4905-97E8-A1AECAD6F1AD}
Successfully deleted: [Empty Folder] C:\Users\Zdendys\appdata\local\{540BA223-8466-44A3-A876-239001D2B6ED}
Successfully deleted: [Empty Folder] C:\Users\Zdendys\appdata\local\{550DF975-52CE-4DDA-86E7-FA464C0B7C0E}
Successfully deleted: [Empty Folder] C:\Users\Zdendys\appdata\local\{5634E3AB-4923-4AE3-B8AE-E5E4AF420365}
Successfully deleted: [Empty Folder] C:\Users\Zdendys\appdata\local\{57A47140-B576-4592-BD62-38271DAAE13F}
Successfully deleted: [Empty Folder] C:\Users\Zdendys\appdata\local\{5898184A-53BF-4C85-801C-F002A24A7C0A}
Successfully deleted: [Empty Folder] C:\Users\Zdendys\appdata\local\{5951BADA-C0D4-4D81-9862-9F4DC9B31ED1}
Successfully deleted: [Empty Folder] C:\Users\Zdendys\appdata\local\{5ABB7DC5-915D-45BE-82EA-3A6893DECA8C}
Successfully deleted: [Empty Folder] C:\Users\Zdendys\appdata\local\{5E08C8B2-D773-4097-89B3-928647C8FE2A}
Successfully deleted: [Empty Folder] C:\Users\Zdendys\appdata\local\{5F197B0C-2E5B-4E3F-898E-F4917841D424}
Successfully deleted: [Empty Folder] C:\Users\Zdendys\appdata\local\{5F68A3C2-E828-49A6-AF42-463E29B7397A}
Successfully deleted: [Empty Folder] C:\Users\Zdendys\appdata\local\{624BA554-540E-4E5A-9A2F-94800A5DC232}
Successfully deleted: [Empty Folder] C:\Users\Zdendys\appdata\local\{6651E3B6-51FE-4F79-96B3-1CE2444DC8EC}
Successfully deleted: [Empty Folder] C:\Users\Zdendys\appdata\local\{6733E8F9-15E0-441A-96BE-5CD99CA21832}
Successfully deleted: [Empty Folder] C:\Users\Zdendys\appdata\local\{69502111-413C-4868-9E56-1F27B807B6FF}
Successfully deleted: [Empty Folder] C:\Users\Zdendys\appdata\local\{695A13EB-4AA0-44D2-9AD9-4D88D06002BC}
Successfully deleted: [Empty Folder] C:\Users\Zdendys\appdata\local\{6D4F4D63-78C6-481C-B439-3491AF2FAEB2}
Successfully deleted: [Empty Folder] C:\Users\Zdendys\appdata\local\{719840F8-A1A2-4774-9838-0F78FD1ABBF2}
Successfully deleted: [Empty Folder] C:\Users\Zdendys\appdata\local\{7451438A-E4D8-42C6-90EC-65A9FE4B6443}
Successfully deleted: [Empty Folder] C:\Users\Zdendys\appdata\local\{79DA8765-37C0-4570-9A74-1C57BB6B298D}
Successfully deleted: [Empty Folder] C:\Users\Zdendys\appdata\local\{7DD34AB4-8E4F-4378-8E05-1D6FF905B120}
Successfully deleted: [Empty Folder] C:\Users\Zdendys\appdata\local\{7EC77AE8-DA1F-4658-838C-6E642FADC859}
Successfully deleted: [Empty Folder] C:\Users\Zdendys\appdata\local\{80418E04-B615-4884-992D-CF08C7743CBA}
Successfully deleted: [Empty Folder] C:\Users\Zdendys\appdata\local\{82BCAEFF-DA1A-4C2A-A3D2-BFA13CA8952D}
Successfully deleted: [Empty Folder] C:\Users\Zdendys\appdata\local\{83071E83-AD55-4869-8860-7C922B4D565B}
Successfully deleted: [Empty Folder] C:\Users\Zdendys\appdata\local\{83F573DD-03A5-4168-B255-2FCE79BEDD9C}
Successfully deleted: [Empty Folder] C:\Users\Zdendys\appdata\local\{8BD15DBA-657C-4B43-A38A-83C72BFF3C12}
Successfully deleted: [Empty Folder] C:\Users\Zdendys\appdata\local\{912754BB-D9E1-47D4-8E91-76CF7317006D}
Successfully deleted: [Empty Folder] C:\Users\Zdendys\appdata\local\{96B68503-5A3A-4297-BFBB-C5F53983976D}
Successfully deleted: [Empty Folder] C:\Users\Zdendys\appdata\local\{9934E7B2-4244-4356-A1EF-A2979C9FD905}
Successfully deleted: [Empty Folder] C:\Users\Zdendys\appdata\local\{9D9C5ECB-8E3D-4083-99D4-9607E108D805}
Successfully deleted: [Empty Folder] C:\Users\Zdendys\appdata\local\{A0A70485-B5B5-4CD6-BA66-726DC00703CD}
Successfully deleted: [Empty Folder] C:\Users\Zdendys\appdata\local\{A2118A2B-3FC6-4AA9-917F-DB806FBC993A}
Successfully deleted: [Empty Folder] C:\Users\Zdendys\appdata\local\{A7B9BAF6-053C-4EBF-AA14-A5C038208EBB}
Successfully deleted: [Empty Folder] C:\Users\Zdendys\appdata\local\{A7D0558B-BBE2-437B-A1DB-62CBB3199554}
Successfully deleted: [Empty Folder] C:\Users\Zdendys\appdata\local\{A840C43A-CF22-48CC-ACE0-1B154C20D758}
Successfully deleted: [Empty Folder] C:\Users\Zdendys\appdata\local\{A8AF5380-589A-4CA0-AB7A-79A1C9E2A53A}
Successfully deleted: [Empty Folder] C:\Users\Zdendys\appdata\local\{ABC937EF-6CB3-4DCA-BF73-8AC8FDA885AF}
Successfully deleted: [Empty Folder] C:\Users\Zdendys\appdata\local\{AEB84DD4-25C7-4299-A675-DDB84DFC1CC2}
Successfully deleted: [Empty Folder] C:\Users\Zdendys\appdata\local\{B0B3BB80-2F94-4F68-AA99-08C07901EE9A}
Successfully deleted: [Empty Folder] C:\Users\Zdendys\appdata\local\{B4E451C1-C0CE-4BA0-A6D1-A8A19C81DD73}
Successfully deleted: [Empty Folder] C:\Users\Zdendys\appdata\local\{B6400033-933E-4FE3-A668-BCFE50FA97F5}
Successfully deleted: [Empty Folder] C:\Users\Zdendys\appdata\local\{BAA47571-600C-40DC-906C-E10B04C9B704}
Successfully deleted: [Empty Folder] C:\Users\Zdendys\appdata\local\{BE5952D8-A555-430B-96E0-0776BD731E01}
Successfully deleted: [Empty Folder] C:\Users\Zdendys\appdata\local\{C24BB4C3-AFDB-4E0A-8CD1-748DE878687B}
Successfully deleted: [Empty Folder] C:\Users\Zdendys\appdata\local\{C5F7321E-8A7D-4F57-A56D-FB669033C7E5}
Successfully deleted: [Empty Folder] C:\Users\Zdendys\appdata\local\{C613173C-8ED0-4C60-B04B-7013F45C3BE6}
Successfully deleted: [Empty Folder] C:\Users\Zdendys\appdata\local\{C798771A-1522-47C5-B170-E06E345F7933}
Successfully deleted: [Empty Folder] C:\Users\Zdendys\appdata\local\{C7D78734-90F2-4F64-B92B-75A15295457A}
Successfully deleted: [Empty Folder] C:\Users\Zdendys\appdata\local\{CD9584D6-83ED-4DA7-A258-682F190D02D1}
Successfully deleted: [Empty Folder] C:\Users\Zdendys\appdata\local\{CEAD9851-BA50-440F-9D9F-C8100ED40490}
Successfully deleted: [Empty Folder] C:\Users\Zdendys\appdata\local\{D1DD2B95-A6B1-48F9-97C1-69E3EF54A776}
Successfully deleted: [Empty Folder] C:\Users\Zdendys\appdata\local\{D5A15F75-6912-4A1D-861E-8EF7965CF7B1}
Successfully deleted: [Empty Folder] C:\Users\Zdendys\appdata\local\{D5EA959E-5AB8-47CC-9281-EAC80BF08F12}
Successfully deleted: [Empty Folder] C:\Users\Zdendys\appdata\local\{D7AA339E-9986-4F39-8EEB-96EF69934D96}
Successfully deleted: [Empty Folder] C:\Users\Zdendys\appdata\local\{D84C857E-5DF2-40DA-9978-9FA9EBD1C8CD}
Successfully deleted: [Empty Folder] C:\Users\Zdendys\appdata\local\{D8957C32-4177-483C-B6B0-FE18CB69EB07}
Successfully deleted: [Empty Folder] C:\Users\Zdendys\appdata\local\{DC2B7D24-10C5-489C-902B-F93A0B666558}
Successfully deleted: [Empty Folder] C:\Users\Zdendys\appdata\local\{DC7306A6-C588-4716-ACA2-018B9B10AFF9}
Successfully deleted: [Empty Folder] C:\Users\Zdendys\appdata\local\{DD736AC3-AA0D-445D-9E81-F4AFCAC19CCC}
Successfully deleted: [Empty Folder] C:\Users\Zdendys\appdata\local\{E17CE6F7-B8EF-4C74-A30A-25C343897296}
Successfully deleted: [Empty Folder] C:\Users\Zdendys\appdata\local\{E45C8F94-B359-4493-8F3B-537C75C68F64}
Successfully deleted: [Empty Folder] C:\Users\Zdendys\appdata\local\{E4E5D4D3-992C-403A-9932-3CFE984898A8}
Successfully deleted: [Empty Folder] C:\Users\Zdendys\appdata\local\{E77F70B1-AEBF-4306-B2A4-AD7BCC16739C}
Successfully deleted: [Empty Folder] C:\Users\Zdendys\appdata\local\{ECB9D454-573D-4E1B-8EE9-7668A48F5B57}
Successfully deleted: [Empty Folder] C:\Users\Zdendys\appdata\local\{ECC71AF1-22C0-41D3-AE80-862A9DF3059D}
Successfully deleted: [Empty Folder] C:\Users\Zdendys\appdata\local\{ED563E12-034E-47B4-BA30-8EBE2DD0778C}
Successfully deleted: [Empty Folder] C:\Users\Zdendys\appdata\local\{ED6303C3-6077-4F13-A1E5-EB2CAFEBDB0A}
Successfully deleted: [Empty Folder] C:\Users\Zdendys\appdata\local\{ED90AF33-5DE4-4200-BC33-DFCCFB55E070}
Successfully deleted: [Empty Folder] C:\Users\Zdendys\appdata\local\{F4569B5D-ACD6-4003-BA94-B098F2510895}
Successfully deleted: [Empty Folder] C:\Users\Zdendys\appdata\local\{F7493059-3E9C-40CD-B184-22D83521E3A2}
Successfully deleted: [Empty Folder] C:\Users\Zdendys\appdata\local\{FA738608-C1E2-475D-B1FC-48A9F8B5473E}
Successfully deleted: [Empty Folder] C:\Users\Zdendys\appdata\local\{FD020294-EAED-45AA-8CA2-35C972B7873E}
Successfully deleted: [Empty Folder] C:\Users\Zdendys\appdata\local\{FF43CDDE-D557-4DFA-A7F8-1EE59D797F08}
Successfully deleted: [Empty Folder] C:\Users\Zdendys\appdata\local\{FF7FD2FD-4EE8-4A37-B70F-E931D8739EAD}



~~~ Chrome

Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Google\Chrome\Extensions\ejdabpabkmacjiiooccecnpakonoibah



~~~ Event Viewer Logs were cleared





~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on ne 18.08.2013 at 22:02:57,61
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

Po restartu či spuštění noťasu mi stále vyskakuje toto. Nechápu,proč to začlo dělat a k čemu je to vázaný.

memphisto píše:V Mbam i adw nech vše smazat a dodej logy po smazání

Zavři všechny programy a prohlížeče. Deaktivuj antivir a firewall.
Prosím, odpoj všechny USB nebo externí disky z počítače před spuštěním tohoto programu.

Spusť RogueKiller ( Pro Windows Vista nebo Windows 7, klepni pravým a vyber "Spustit jako správce", ve Windows XP poklepej ke spuštění).
- Počkej, až Prescan dokončí práci...
- Počkej, dokud status okno zobrazuje "Prohledat "

- Klikni na "Smazat"
- Počkej, dokud Status box zobrazuje "Smazání skončeno "
- Klikni na "Zprávy " a zkopíruj a vlož obsah té zprávy prosím sem. Log je možno nalézt v RKreport [číslo]. txt na ploše.
- Zavři RogueKiller

Stáhni si TDSSKiller
Na svojí plochu.Ujisti se , že máš zavřeny všechny ostatní aplikace a prohlížeče. Rozbal soubor a spusť TDSSKiller.exe. Restartuj PC . Log z TDSSKilleru najdeš zde:
C:\TDSSKiller. 2.8.16.0_(datum)_log.txt , vlož sem prosím celý obsah logu.

Malwarebytes Anti-Malware (PRO) 1.75.0.1300
www.malwarebytes.org

Verze: v2013.08.19.05

Windows 7 Service Pack 1 x86 NTFS
Internet Explorer 10.0.9200.16660
Zdendys :: ZDENDYS-PC [administrátor]

Ochrana: Zakázána

19.8.2013 23:16:57
mbam-log-2013-08-19 (23-16-57).txt

Typ: Rychlá kontrola
Nastavení kontroly povoleno: Paměť | Po spuštění | Registr | Systémové soubory | Heuristická analýza Extra | Heuristická analýza Shuriken | PUP | PUM
Nastavení kontroly zakázáno: P2P
Kontrolované objekty: 216155
Uplynulý čas: 16 minut, 19 sekund

Nalezené procesy v paměti: 0
(Žádné škodlivé položky nebyly zjištěny)

Nalezené moduly v paměti: 0
(Žádné škodlivé položky nebyly zjištěny)

Nalezené klíče v registru: 0
(Žádné škodlivé položky nebyly zjištěny)

Nalezené hodnoty v registru: 0
(Žádné škodlivé položky nebyly zjištěny)

Nalezené datové položky v registru: 0
(Žádné škodlivé položky nebyly zjištěny)

Nalezené složky: 0
(Žádné škodlivé položky nebyly zjištěny)

Nalezené soubory: 0
(Žádné škodlivé položky nebyly zjištěny)

(konec)

# AdwCleaner v2.306 - Log vytvooen 19/08/2013 v 23:40:23
# Aktualizováno 19/07/2013 Xplode
# Operaení systém : Windows 7 Starter Service Pack 1 (32 bits)
# Uživatel : Zdendys - ZDENDYS-PC
# Spuštin systém : Normální
# Spuštino z : C:\Users\Zdendys\Downloads\adwcleaner.exe
# Volba [Vymazat]


***** [Služby] *****


***** [Soubory / Složky] *****

Složka Vymazáno : C:\Program Files\Red Sky
Složka Vymazáno : C:\Users\Zdendys\AppData\Roaming\CheckPoint\ZoneAlarm LTD Toolbar
Soubor Vymazáno : C:\Program Files\mozilla firefox\searchplugins\Web Search.xml

***** [Registry] *****

Klíe Vymazáno : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}
Klíe Vymazáno : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}
Klíe Vymazáno : HKLM\SOFTWARE\Classes\AppID\{3FC27B34-0C19-49DA-875E-1875DDD4A6B2}
Klíe Vymazáno : HKLM\SOFTWARE\Classes\CLSID\{898EA8C8-E7FF-479B-8935-AEC46303B9E5}
Klíe Vymazáno : HKLM\SOFTWARE\Classes\CLSID\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}
Klíe Vymazáno : HKLM\SOFTWARE\Classes\Interface\{8DA8B89E-0C65-403B-8231-AB22ECFA0687}
Klíe Vymazáno : HKLM\SOFTWARE\Classes\Interface\{A928E66C-F501-4E66-9953-855C712F93B2}
Klíe Vymazáno : HKLM\SOFTWARE\Classes\Interface\{B0E28FA0-DF07-44B6-95CE-48BE26DB9266}
Klíe Vymazáno : HKLM\SOFTWARE\Classes\Interface\{E6B4EE8F-C38E-4994-BE28-229A3F92262C}
Klíe Vymazáno : HKLM\SOFTWARE\Classes\Interface\{FCA8936E-403A-4487-A966-70F80F1D5A6A}
Klíe Vymazáno : HKLM\SOFTWARE\Classes\TypeLib\{212C2C4F-C845-4FBC-9561-C833A13D8DCE}
Klíe Vymazáno : HKLM\SOFTWARE\Classes\TypeLib\{3C5D1D57-16C8-473C-A552-37B8D88596FE}
Klíe Vymazáno : HKLM\SOFTWARE\Classes\TypeLib\{4A115D8A-6A7B-4C72-92B1-2E2D01F36979}
Klíe Vymazáno : HKLM\SOFTWARE\Classes\TypeLib\{99DF8440-814E-497F-BDDD-FB93E9E9DF96}
Klíe Vymazáno : HKLM\SOFTWARE\Microsoft\Internet Explorer\Extensions\{898EA8C8-E7FF-479B-8935-AEC46303B9E5}
Klíe Vymazáno : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{83CAD530-387D-40FD-82EA-B9E863D92A9B}
Klíe Vymazáno : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{CFD485F0-96BD-47CD-BB6D-CD7DDA95F102}
Klíe Vymazáno : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}
Klíe Vymazáno : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UpgradeCodes\789034A89BAC50E4782F0A7BDBF75632
Klíe Vymazáno : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UpgradeCodes\A97CEC23332751B47BA4B95BAA50C9D0
Klíe Vymazáno : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\F754C503375A13344B22388E18DFE87E
Klíe Vymazáno : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{96E2E493-C484-43E3-9B95-D62EE7D40D3A}
Klíe Vymazáno : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Freemake Video Converter_is1
Klíe Vymazáno : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\ZoneAlarm LTD Toolbar
Klíe Vymazáno : HKLM\SOFTWARE\MozillaPlugins\@checkpoint.com/FFApi

***** [Internetové prohlížeee] *****

-\\ Internet Explorer v10.0.9200.16660

Zaminino : [HKCU\Software\Microsoft\Internet Explorer\SearchUrl - (Default)] = hxxp://search.certified-toolbar.com?si= ... tid=592&q=%s --> hxxp://www.google.com
Zaminino : [HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchUrl - (Default)] = hxxp://search.certified-toolbar.com?si= ... tid=592&q=%s --> hxxp://www.google.com

-\\ Google Chrome v28.0.1500.95

Soubor : C:\Users\Zdendys\AppData\Local\Google\Chrome\User Data\Default\Preferences

[OK] Soubor je eistý.

*************************

AdwCleaner[R1].txt - [23774 octets] - [24/01/2013 00:37:03]
AdwCleaner[R2].txt - [23835 octets] - [24/01/2013 00:40:22]
AdwCleaner[R3].txt - [4840 octets] - [18/08/2013 18:56:16]
AdwCleaner[R4].txt - [4021 octets] - [19/08/2013 23:37:52]
AdwCleaner[S1].txt - [24500 octets] - [24/01/2013 00:41:43]
AdwCleaner[S2].txt - [4024 octets] - [19/08/2013 23:40:23]

########## EOF - C:\AdwCleaner[S2].txt - [4084 octets] ##########

RogueKiller V8.6.5 [Aug 5 2013] by Tigzy
mail : tigzyRK<at>gmail<dot>com
Podpora : http://www.adlice.com/forum/
Webové stránky : http://www.adlice.com/softwares/roguekiller/
: http://tigzyrk.blogspot.com/

Operační systém : Windows 7 (6.1.7601 Service Pack 1) 32 bits version
Spuštěno v : Normální režim
Uživatel : Zdendys [Práva správce]
Mód : Odebrat -- Datum : 08/20/2013 00:04:10
| ARK || FAK || MBR |

¤¤¤ Škodlivé procesy: : 0 ¤¤¤

¤¤¤ ¤¤¤ Záznamy Registrů: : 2 ¤¤¤
[HJ POL] HKCU\[...]\System : DisableTaskMgr (0) -> VYMAZÁNO
[HJ POL] HKCU\[...]\System : DisableRegistryTools (0) -> VYMAZÁNO

¤¤¤ naplánované úlohy : 0 ¤¤¤

¤¤¤ spuštění položky : 0 ¤¤¤

¤¤¤ Webové prohlížeče : 0 ¤¤¤

¤¤¤ Zvláštní soubory / Složky: ¤¤¤

¤¤¤ Ovladač : [NAHRÁNO] ¤¤¤

¤¤¤ Externí včelstvo: ¤¤¤

¤¤¤ Nákaza : ¤¤¤

¤¤¤ Soubor HOSTS: ¤¤¤
--> %SystemRoot%\System32\drivers\etc\hosts


127.0.0.1 localhost


¤¤¤ Kontrola MBR: ¤¤¤

+++++ PhysicalDrive0: Hitachi HTS543225A7A384 +++++
--- User ---
[MBR] 29b22aae1270017d1bb1959ce2a20a13
[BSP] 7c365635f9c3b145df0aa285278e9bd2 : Windows 7/8 MBR Code
Partition table:
0 - [ACTIVE] NTFS (0x07) [VISIBLE] Offset (sectors): 2048 | Size: 102400 Mo
1 - [XXXXXX] FAT32 (0x1b) [HIDDEN!] Offset (sectors): 209717248 | Size: 15360 Mo
2 - [XXXXXX] NTFS (0x07) [VISIBLE] Offset (sectors): 241174528 | Size: 120697 Mo
3 - [XXXXXX] UNKNOWN (0x00) [VISIBLE] Offset (sectors): 488361984 | Size: 16 Mo
User = LL1 ... OK!
User = LL2 ... OK!

Dokončeno : << RKreport[0]_D_08202013_000410.txt >>
RKreport[0]_D_08182013_215049.txt;RKreport[0]_S_08182013_214324.txt;RKreport[0]_S_08202013_000009.txt