PC-HELP.CZ

Ahojte,
mam strasne spomaleny PC ledva sa zapne a ked uz tak, velmi dlho sa nacita internet a prosim vas o kontrolu logu. Neviem som skopiroval dobre

Logfile of Trend Micro HijackThis v2.0.5
Scan saved at 19:39:27, on 19. 2. 2014
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v11.0 (11.00.9600.16518)

FIREFOX: 27.0.1 (sk)
Boot mode: Normal

Running processes:
C:\Windows\system32\taskhost.exe
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe
C:\Program Files\LogMeIn\x86\LogMeInSystray.exe
C:\Program Files\Mobogenie\DaemonProcess.exe
C:\Program Files\AVAST Software\Avast\AvastUI.exe
C:\Program Files\AVG SafeGuard toolbar\vprot.exe
C:\Program Files\McAfee Security Scan\3.8.130\SSScheduler.exe
C:\Program Files\TuneUp Utilities 2012\TuneUpUtilitiesApp32.exe
C:\Windows\system32\wuauclt.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Users\Denis.admin-PC\Downloads\HijackThis.exe
C:\Program Files\Mobogenie\mgusb.exe
C:\Windows\system32\conhost.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/p/?LinkId=255141
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/p/?LinkId=255141
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/p/?LinkId=255141
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
O2 - BHO: MSS+ Identifier - {0E8A89AD-95D7-40EB-8D9D-083EF7066A01} - C:\Program Files\McAfee Security Scan\3.8.130\McAfeeMSS_IE.dll
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll
O2 - BHO: avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll
O2 - BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: (no name) - {95B7759C-8C7F-4BF1-B163-73684A933233} - (no file)
O2 - BHO: SkypeIEPluginBHO - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll
O2 - BHO: SmileysWeLoveToolbar - {E4EF8A64-0A30-48F5-B3FE-5FDA978DA775} - C:\Program Files\Smileys We Love Toolbar for IE\adxloader.dll
O3 - Toolbar: avast! Online Security - {CC1A175A-E45B-41ED-A30C-C9B1D7A0C02F} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll
O3 - Toolbar: SmileysWeLove - {CF0F43AB-9C23-4D7B-8040-201B82844854} - C:\Program Files\Smileys We Love Toolbar for IE\adxloader.dll
O3 - Toolbar: (no name) - {95B7759C-8C7F-4BF1-B163-73684A933233} - (no file)
O4 - HKLM\..\Run: [RtHDVCpl] C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe -s
O4 - HKLM\..\Run: [IObit Malware Fighter] "C:\Program Files\IObit\IObit Malware Fighter\IMF.exe" /autostart
O4 - HKLM\..\Run: [LogMeIn GUI] "C:\Program Files\LogMeIn\x86\LogMeInSystray.exe"
O4 - HKLM\..\Run: [mobilegeni daemon] C:\Program Files\Mobogenie\DaemonProcess.exe
O4 - HKLM\..\Run: [AvastUI.exe] "C:\Program Files\AVAST Software\Avast\AvastUI.exe" /nogui
O4 - HKLM\..\Run: [vProt] "C:\Program Files\AVG SafeGuard toolbar\vprot.exe"
O4 - Global Startup: McAfee Security Scan Plus.lnk = C:\Program Files\McAfee Security Scan\3.8.130\SSScheduler.exe
O9 - Extra button: Skype Click to Call - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL
O10 - Unknown file in Winsock LSP: c:\program files\common files\microsoft shared\windows live\wlidnsp.dll
O10 - Unknown file in Winsock LSP: c:\program files\common files\microsoft shared\windows live\wlidnsp.dll
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O18 - Protocol: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\Skype4COM.dll
O18 - Protocol: viprotocol - {B658800C-F66E-4EF3-AB85-6C0C227862A9} - C:\Program Files\Common Files\AVG Secure Search\ViProtocolInstaller\17.3.0\ViProtocol.dll
O20 - AppInit_DLLs: c:\progra~2\bitguard\2.7.1832.68\{c16c1ccb-1111-4e5c-a2f3-533ad2fec8e8}\bitguard.dll
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: Advanced SystemCare Service 6 (AdvancedSystemCareService6) - IObit - C:\Program Files\IObit\Advanced SystemCare 6\ASCService.exe
O23 - Service: avast! Antivirus - AVAST Software - C:\Program Files\AVAST Software\Avast\AvastSvc.exe
O23 - Service: Computer Backup (MyPC Backup) (BackupStack) - Just Develop It - C:\Program Files\MyPC Backup\BackupStack.exe
O23 - Service: Služba Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: Služba Google Update (gupdatem) (gupdatem) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: IMF Service (IMFservice) - IObit - C:\Program Files\IObit\IObit Malware Fighter\IMFsrv.exe
O23 - Service: LMIGuardianSvc - LogMeIn, Inc. - C:\Program Files\LogMeIn\x86\LMIGuardianSvc.exe
O23 - Service: LogMeIn Maintenance Service (LMIMaint) - LogMeIn, Inc. - C:\Program Files\LogMeIn\x86\RaMaint.exe
O23 - Service: LogMeIn - LogMeIn, Inc. - C:\Program Files\LogMeIn\x86\LogMeIn.exe
O23 - Service: McAfee Security Scan Component Host Service (McComponentHostService) - McAfee, Inc. - C:\Program Files\McAfee Security Scan\3.8.130\McCHSvc.exe
O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Mozilla Foundation - C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe
O23 - Service: Overwolf Updater Service (OverwolfUpdaterService) - Overwolf LTD - C:\Program Files\Overwolf\OverwolfUpdater.exe
O23 - Service: Skype Updater (SkypeUpdate) - Skype Technologies - C:\Program Files\Skype\Updater\Updater.exe
O23 - Service: Steam Client Service - Valve Corporation - C:\Program Files\Common Files\Steam\SteamService.exe
O23 - Service: TuneUp Utilities Service (TuneUp.UtilitiesSvc) - TuneUp Software - C:\Program Files\TuneUp Utilities 2012\TuneUpUtilitiesService32.exe
O23 - Service: vToolbarUpdater17.3.0 - Unknown owner - C:\Program Files\Common Files\AVG Secure Search\vToolbarUpdater\17.3.0\ToolbarUpdater.exe

--
End of file - 7397 bytes

Stáhni si ATF Cleaner
Poklepej na ATF Cleaner.exe, klikni na select all found, poté:
-Když používáš Firefox (Mozzila), klikni na Firefox nahoře a vyber: Select All, poté klikni na Empty Selected.
-Když používáš Operu, klikni nahoře na Operu a vyber: Select All, poté klikni na Empty Selected. Poté klikni na Main (hlavní stránku ) a klikni na Empty Selected.
Po vyčištění klikni na Exit k zavření programu.
ATF-Cleaner je jednoduchý nástroj na odstranění historie z webového prohlížeče. Program dokáže odstranit cache, cookies, historii a další stopy po surfování na Internetu. Mezi podporované prohlížeče patří Internet Explorer, Firefox a Opera. Aplikace navíc umí odstranit dočasné soubory Windows, vysypat koš atd.


Stáhni si TFC
Otevři soubor a zavři všechny ostatní okna, Klikni na Start k zahájení procesu. Program by neměl trvat dlouho.
Poté by se měl PC restartovat, pokud ne , proveď sám.

Stáhni AdwCleaner (by Xplode)

Ulož si ho na svojí plochu
Ukonči všechny programy , okna a prohlížeče
Spusť program poklepáním a klikni na „Prohledat-Scan“
Po skenu se objeví log ( jinak je uložen systémovem disku jako AdwCleaner[R?].txt), jeho obsah sem celý vlož.

Stáhni si Malwarebytes' Anti-Malware
Nainstaluj a spusť ho
- na konci instalace se ujisti že máš zvoleny/zatrhnuty obě možnosti:
Aktualizace Malwarebytes' Anti-Malware a Spustit aplikaci Malwarebytes' Anti-Malware, pokud jo tak klikni na tlačítko konec
- pokud bude nalezena aktualizace, tak se stáhne a nainstaluje
- program se po té spustí a nech vybranou možnost Provést rychlý sken a klikni na tlačítko Skenovat
- po proběhnutí programu se ti objeví hláška tak klikni na OK a pak na tlačítko Zobrazit výsledky
- pak zvol možnost uložit log a ulož si log na plochu
- po té klikni na tlačítko Exit, objeví se ti hláška tak zvol Ano
(zatím nic nemaž!).
Vlož sem pak obsah toho logu.

Pokud budou problémy , spusť v nouz. režimu.

Obsah loga z adwcleaner:
# AdwCleaner v3.019 - Report created 21/02/2014 at 13:06:38
# Updated 17/02/2014 by Xplode
# Operating System : Windows 7 Home Premium Service Pack 1 (32 bits)
# Username : Denis - ADMIN-PC
# Running from : C:\Users\Denis.admin-PC\Desktop\adwcleaner.exe
# Option : Scan

***** [ Services ] *****

Service Found : BackupStack
Service Found : vToolbarUpdater17.3.0

***** [ Files / Folders ] *****

File Found : C:\Program Files\Mozilla Firefox\browser\searchplugins\safeguard-secure-search.xml
File Found : C:\Windows\system32\roboot.exe
File Found : C:\Windows\System32\Tasks\BitGuard
File Found : C:\Windows\System32\Tasks\FTdownloader V4.0-codedownloader
File Found : C:\Windows\System32\Tasks\NCH Software
File Found : C:\Windows\Tasks\FTdownloader V4.0-codedownloader.job
Folder Found C:\Program Files\AVG SafeGuard toolbar
Folder Found C:\Program Files\Common Files\AVG Secure Search
Folder Found C:\Program Files\driver-soft
Folder Found C:\Program Files\FTdownloader V4.0
Folder Found C:\Program Files\FTdownloader V4.0
Folder Found C:\Program Files\FTDownloader.com
Folder Found C:\Program Files\Mobogenie
Folder Found C:\Program Files\MyPC Backup
Folder Found C:\Program Files\NCH Software
Folder Found C:\Program Files\optimizer pro
Folder Found C:\Program Files\PC Speed Maximizer
Folder Found C:\Program Files\VideoDownloadConverter_4z
Folder Found C:\ProgramData\apn
Folder Found C:\ProgramData\AVG SafeGuard toolbar
Folder Found C:\ProgramData\Babylon
Folder Found C:\ProgramData\boost_interprocess
Folder Found C:\ProgramData\Microsoft\Windows\Start Menu\Programs\optimizer pro
Folder Found C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PC Speed Maximizer
Folder Found C:\ProgramData\NCH Software

***** [ Shortcuts ] *****


***** [ Registry ] *****

Key Found : HKCU\Software\AppDataLow\Software\Crossrider
Key Found : HKCU\Software\AppDataLow\Software\FTdownloader V4.0
Key Found : HKCU\Software\AppDataLow\Software\FTdownloader V4.0
Key Found : HKCU\Software\AVG SafeGuard toolbar
Key Found : HKCU\Software\InstallCore
Key Found : HKLM\Software\AVG SafeGuard toolbar
Key Found : HKLM\Software\AVG Security Toolbar
Key Found : HKLM\SOFTWARE\Classes\AmiBs.Installer
Key Found : HKLM\SOFTWARE\Classes\AmiBs.Installer.1
Key Found : HKLM\SOFTWARE\Classes\AppID\{1FDFF5A2-7BB1-48E1-8081-7236812B12B2}
Key Found : HKLM\SOFTWARE\Classes\AppID\{33CB14BC-58BB-4B3A-9877-7946A3F41BAE}
Key Found : HKLM\SOFTWARE\Classes\AppID\{38495740-0035-4471-851E-F5BBB86AB085}
Key Found : HKLM\SOFTWARE\Classes\AppID\{72D89EBF-0C5D-4190-91FD-398E45F1D007}
Key Found : HKLM\SOFTWARE\Classes\AppID\{7ABBFE1C-E485-44AA-8F36-353751B4124D}
Key Found : HKLM\SOFTWARE\Classes\AppID\DefaultTabBHO.DLL
Key Found : HKLM\SOFTWARE\Classes\AppID\ViProtocol.DLL
Key Found : HKLM\SOFTWARE\Classes\CLSID\{059EACC2-1ABE-49E8-928D-DC8BD355B7A9}
Key Found : HKLM\SOFTWARE\Classes\CLSID\{4C836512-BB70-11D2-A5A7-00105A9C91C6}
Key Found : HKLM\SOFTWARE\Classes\CLSID\{4E92DB5F-AAD9-49D3-8EAB-B40CBE5B1FF7}
Key Found : HKLM\SOFTWARE\Classes\CLSID\{6FDBBC21-E399-4542-B4CE-86326E1F0727}
Key Found : HKLM\SOFTWARE\Classes\CLSID\{7B878FD4-8F19-46DB-94B1-4CABFF80679C}
Key Found : HKLM\SOFTWARE\Classes\CLSID\{8BA495EF-6CD5-413A-8AEF-483631B98C4F}
Key Found : HKLM\SOFTWARE\Classes\CLSID\{8C71E394-2E6F-452A-AB7D-C17E78307083}
Key Found : HKLM\SOFTWARE\Classes\CLSID\{933B95E2-E7B7-4AD9-B952-7AC336682AE3}
Key Found : HKLM\SOFTWARE\Classes\CLSID\{A6FEED89-3BCD-4D19-9DC2-3E613A80A2A4}
Key Found : HKLM\SOFTWARE\Classes\CLSID\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}
Key Found : HKLM\SOFTWARE\Classes\CLSID\{B658800C-F66E-4EF3-AB85-6C0C227862A9}
Key Found : HKLM\SOFTWARE\Classes\CLSID\{BADB1512-759C-4792-A18A-DD6BDC4E1991}
Key Found : HKLM\SOFTWARE\Classes\CLSID\{DB797690-40E0-11D2-9BD5-0060082AE372}
Key Found : HKLM\SOFTWARE\Classes\CLSID\{E54FBC83-9028-45AC-A5B9-D5DA828E59C2}
Key Found : HKLM\SOFTWARE\Classes\CLSID\{F25AF245-4A81-40DC-92F9-E9021F207706}
Key Found : HKLM\SOFTWARE\Classes\FTDownloader
Key Found : HKLM\SOFTWARE\Classes\Interface\{03E2A1F3-4402-4121-8B35-733216D61217}
Key Found : HKLM\SOFTWARE\Classes\Interface\{4E92DB5F-AAD9-49D3-8EAB-B40CBE5B1FF7}
Key Found : HKLM\SOFTWARE\Classes\Interface\{9E3B11F6-4179-4603-A71B-A55F4BCB0BEC}
Key Found : HKLM\SOFTWARE\Classes\Interface\{C401D2CE-DC27-45C7-BC0C-8E6EA7F085D6}
Key Found : HKLM\SOFTWARE\Classes\Interface\{D54C859C-6066-4F31-8FE0-2AAEDCAE67D7}
Key Found : HKLM\SOFTWARE\Classes\protocols\handler\viprotocol
Key Found : HKLM\SOFTWARE\Classes\ScriptHelper.ScriptHelperApi
Key Found : HKLM\SOFTWARE\Classes\ScriptHelper.ScriptHelperApi.1
Key Found : HKLM\SOFTWARE\Classes\TypeLib\{633AA60B-C339-46C3-951F-047F9822C473}
Key Found : HKLM\SOFTWARE\Classes\TypeLib\{74FB6AFD-DD77-4CEB-83BD-AB2B63E63C93}
Key Found : HKLM\SOFTWARE\Classes\TypeLib\{9156C8F9-B397-4DEF-8AC5-5966221A134A}
Key Found : HKLM\SOFTWARE\Classes\TypeLib\{9C049BA6-EA47-4AC3-AED6-A66D8DC9E1D8}
Key Found : HKLM\SOFTWARE\Classes\TypeLib\{A8E5842E-102B-4289-9D57-3B3F5B5E15D3}
Key Found : HKLM\SOFTWARE\Classes\TypeLib\{C2AC8A0E-E48E-484B-A71C-C7A937FAAB94}
Key Found : HKLM\SOFTWARE\Classes\TypeLib\{DB797681-40E0-11D2-9BD5-0060082AE372}
Key Found : HKLM\SOFTWARE\Classes\ViProtocol.ViProtocolOLE
Key Found : HKLM\SOFTWARE\Classes\ViProtocol.ViProtocolOLE.1
Key Found : HKLM\Software\Conduit
Key Found : HKLM\Software\DataMngr
Key Found : HKLM\SOFTWARE\dedbdcb23bb849
Key Found : HKLM\Software\Driver-Soft
Key Found : HKLM\Software\FTdownloader V4.0
Key Found : HKLM\Software\FTdownloader V4.0
Key Found : HKLM\SOFTWARE\Google\Chrome\Extensions\fjbbjfdilbioabojmcplalojlmdngbjl
Key Found : HKLM\SOFTWARE\Google\Chrome\Extensions\lgnbhdnimikkoodkogjlcllngimhlapp
Key Found : HKLM\SOFTWARE\Google\Chrome\Extensions\pialekdjmfmckiccfkgbbgphficjdekh
Key Found : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{105ce2f6-6c71-4553-95db-0521a2c0f060}
Key Found : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{105CE2F6-6C71-4553-95DB-0521A2C0F060}
Key Found : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{2D9083CE-8758-4704-BA57-3C891D7452BD}
Key Found : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{3D429207-4689-492D-A0E5-CDC5DFBB5005}
Key Found : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{4ac48e96-eb40-4792-9d9d-70d59d8754ba}
Key Found : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{4AC48E96-EB40-4792-9D9D-70D59D8754BA}
Key Found : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{5935e203-f846-461d-89df-435059efcbb8}
Key Found : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{5935E203-F846-461D-89DF-435059EFCBB8}
Key Found : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{6419A700-23B8-46EA-800B-C0EA78E133A2}
Key Found : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{6419a700-23b8-46ea-800b-c0ea78e133a2}
Key Found : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{9BC852D3-9D70-4611-9AFC-016840417A4C}
Key Found : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{9bc852d3-9d70-4611-9afc-016840417a4c}
Key Found : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{E7DF6BFF-55A5-4EB7-A673-4ED3E9456D39}
Key Found : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{F25AF245-4A81-40DC-92F9-E9021F207706}
Key Found : HKLM\SOFTWARE\Microsoft\Tracing\apnstub_RASAPI32
Key Found : HKLM\SOFTWARE\Microsoft\Tracing\apnstub_RASMANCS
Key Found : HKLM\SOFTWARE\Microsoft\Tracing\BundleSweetIMSetup_RASAPI32
Key Found : HKLM\SOFTWARE\Microsoft\Tracing\ftdownloader v4_RASAPI32
Key Found : HKLM\SOFTWARE\Microsoft\Tracing\iLividSetupV1_RASAPI32
Key Found : HKLM\SOFTWARE\Microsoft\Tracing\iLividSetupV1_RASMANCS
Key Found : HKLM\SOFTWARE\Microsoft\Tracing\optimizerpro_rasapi32
Key Found : HKLM\SOFTWARE\Microsoft\Tracing\optprostart_rasapi32
Key Found : HKLM\SOFTWARE\Microsoft\Tracing\SetupDataMngr_Searchqu_RASAPI32
Key Found : HKLM\SOFTWARE\Microsoft\Tracing\SetupDataMngr_Searchqu_RASMANCS
Key Found : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_for_grand-theft-auto-san-andreas_RASAPI32
Key Found : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_for_hamachi_RASAPI32
Key Found : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\BitGuard
Key Found : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\FTdownloader V4.0-codedownloader
Key Found : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{3D43AD3D-044E-4B67-940B-0596962FB6E7}
Key Found : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{572C7971-2B01-4203-BFEC-6D2168A9EC2E}
Key Found : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{AC25C581-C243-4899-84D7-F2B3F2A42682}
Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\Mobogenie.exe
Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\MobogenieAdd
Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\mypc backup
Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{95B7759C-8C7F-4BF1-B163-73684A933233}
Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}
Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{1F6F39C1-00A8-4752-A94C-D0EA92D978B6}
Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{5354D921-3F52-47C5-938D-77A2FB6DEFE7}
Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{71144427-1368-4D18-8DC9-2AE3CC4C4F83}
Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{7F6AFBF1-E065-4627-A2FD-810366367D01}
Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{99E1F6FD-2E94-4CF6-8344-1BA63CD3BD9B}
Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{A1E28287-1A31-4B0F-8D05-AA8C465D3C5A}
Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{C6FDD0C3-266A-4DC3-B459-28C697C44CDC}
Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{ED345812-2722-4DCA-9976-D01832DB44EE}
Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{F25AF245-4A81-40DC-92F9-E9021F207706}
Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\1ClickDownload
Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\AVG SafeGuard toolbar
Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\FTdownloader V4.0
Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\FTdownloader V4.0
Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Mobogenie
Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\MyPC Backup
Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Optimizer Pro_is1
Key Found : HKLM\SOFTWARE\MozillaPlugins\@avg.com/AVG SiteSafety plugin,version=11.0.0.1,application/x-avg-sitesafety-plugin
Key Found : HKLM\SOFTWARE\MozillaPlugins\@VideoDownloadConverter_4z.com/Plugin
Key Found : HKLM\Software\NCH Software
Key Found : HKLM\Software\systweak
Key Found : HKLM\Software\VideoDownloadConverter_4z
Value Found : HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{95B7759C-8C7F-4BF1-B163-73684A933233}]
Value Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run [mobilegeni daemon]
Value Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run [vProt]
Value Found : HKLM\SOFTWARE\Mozilla\Firefox\Extensions [Avg@toolbar]

***** [ Browsers ] *****

-\\ Internet Explorer v11.0.9600.16518


-\\ Mozilla Firefox v27.0.1 (sk)

-\\ Google Chrome v33.0.1750.117

*************************

AdwCleaner[R0].txt - [12035 octets] - [21/02/2014 13:06:38]

########## EOF - C:\AdwCleaner\AdwCleaner[R0].txt - [12096 octets] ##########

Obsah loga z Malwarebytes Anti-Malware:
Malwarebytes Anti-Malware (Skúšobná verzia) 1.75.0.1300
www.malwarebytes.org

Verzia databázy: v2014.02.21.06

Windows 7 Service Pack 1 x86 NTFS
Internet Explorer 11.0.9600.16518
Denis :: ADMIN-PC [administrátor]

Ochrana: Zapnuté

21. 2. 2014 13:13:21
MBAM-log-2014-02-21 (13-26-04).txt

Typ kontroly: Rýchla kontrola
Možnosti kontroly zapnuté: Pamäť | Po spustení | Registre | Systémové súbory | Heuristika/Extra | Heuristika/Shuriken | PUP | PUM
Možnosti kontroly vypnuté: P2P
Objektov kontrolovaných: 349756
Uplynutý čas: 12 min, 24 sek

Detegované služby pamäte: 0
(Škodlivé položky neboli zistené)

Detegované moduly pamäte: 0
(Škodlivé položky neboli zistené)

Detegované registračné kľúče: 24
HKCR\AppID\{33CB14BC-58BB-4B3A-9877-7946A3F41BAE} (PUP.Optional.Babylon.A) -> Žiadna úloha nevykonaná.
HKCR\AppID\{38495740-0035-4471-851E-F5BBB86AB085} (PUP.Optional.DefaultTab.A) -> Žiadna úloha nevykonaná.
HKCR\AppID\{72D89EBF-0C5D-4190-91FD-398E45F1D007} (PUP.Optional.DefaultTab.A) -> Žiadna úloha nevykonaná.
HKCR\CLSID\{A6FEED89-3BCD-4D19-9DC2-3E613A80A2A4} (PUP.Optional.Amonetize.A) -> Žiadna úloha nevykonaná.
HKCR\AmiBs.Installer.1 (PUP.Optional.Amonetize.A) -> Žiadna úloha nevykonaná.
HKCR\AmiBs.Installer (PUP.Optional.Amonetize.A) -> Žiadna úloha nevykonaná.
HKCR\CLSID\{CF0F43AB-9C23-4D7B-8040-201B82844854} (PUP.Optional.SmileysWeLove.A) -> Žiadna úloha nevykonaná.
HKCR\CLSID\{E4EF8A64-0A30-48F5-B3FE-5FDA978DA775} (PUP.Optional.SmileysWeLove.A) -> Žiadna úloha nevykonaná.
HKCR\SmileysWeLoveToolbar.IEModule (PUP.Optional.SmileysWeLove.A) -> Žiadna úloha nevykonaná.
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{E4EF8A64-0A30-48F5-B3FE-5FDA978DA775} (PUP.Optional.SmileysWeLove.A) -> Žiadna úloha nevykonaná.
HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{E4EF8A64-0A30-48F5-B3FE-5FDA978DA775} (PUP.Optional.SmileysWeLove.A) -> Žiadna úloha nevykonaná.
HKCR\SmileysWeLoveToolbar.SWLIEToolbar (PUP.Optional.SmileysWeLove.A) -> Žiadna úloha nevykonaná.
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{7F6AFBF1-E065-4627-A2FD-810366367D01} (PUP.Optional.DefaultTab.A) -> Žiadna úloha nevykonaná.
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{A1E28287-1A31-4B0F-8D05-AA8C465D3C5A} (PUP.Optional.DefaultTab.A) -> Žiadna úloha nevykonaná.
HKCR\AppID\DefaultTabBHO.DLL (PUP.Optional.DefaultTab.A) -> Žiadna úloha nevykonaná.
HKCU\Software\AppDataLow\Software\Crossrider (PUP.Optional.CrossRider.A) -> Žiadna úloha nevykonaná.
HKCU\Software\AppDataLow\Software\FTdownloader V4.0 (PUP.Optional.FTdownloader.A) -> Žiadna úloha nevykonaná.
HKCU\Software\InstallCore\1I1T1Q1S (PUP.Optional.InstallCore.A) -> Žiadna úloha nevykonaná.
HKCU\SOFTWARE\INSTALLCORE (PUP.Optional.InstallCore.A) -> Žiadna úloha nevykonaná.
HKLM\SOFTWARE\Google\Chrome\Extensions\pialekdjmfmckiccfkgbbgphficjdekh (PUP.Optional.Babylon.A) -> Žiadna úloha nevykonaná.
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\ccleaner.exe (Security.Hijack) -> Žiadna úloha nevykonaná.
HKLM\Software\FTdownloader V4.0 (PUP.Optional.FTdownloader.A) -> Žiadna úloha nevykonaná.
HKLM\SOFTWARE\SWEETIM (PUP.Optional.SweetIM.A) -> Žiadna úloha nevykonaná.
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\FTdownloader V4.0 (PUP.Optional.FTdownloader.A) -> Žiadna úloha nevykonaná.

Detegované registračné hodnoty: 4
HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar|{CF0F43AB-9C23-4D7B-8040-201B82844854} (PUP.Optional.SmileysWeLove.A) -> Dáta: SmileysWeLoveToolbar.IEModule -> Žiadna úloha nevykonaná.
HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar\{CF0F43AB-9C23-4D7B-8040-201B82844854} (PUP.Optional.SmileysWeLove.A) -> Dáta: -> Žiadna úloha nevykonaná.
HKCU\Software\InstallCore|tb (PUP.Optional.InstallCore.A) -> Dáta: 0F -> Žiadna úloha nevykonaná.
HKLM\Software\SweetIM|simapp_id (PUP.Optional.SweetIM.A) -> Dáta: {FD084931-0992-11E3-95AB-00064F42C1E0} -> Žiadna úloha nevykonaná.

Detegované položky registračných dát: 0
(Škodlivé položky neboli zistené)

Detegované priečinky: 10
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\OPTIMIZER PRO (PUP.Optional.OptimizerPro.A) -> Žiadna úloha nevykonaná.
C:\Program Files\SMILEYS WE LOVE TOOLBAR FOR IE (PUP.Optional.SmileysWeLove.A) -> Žiadna úloha nevykonaná.
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\SMILEYSWELOVE FOR IE (PUP.Optional.SmileysWeLove.A) -> Žiadna úloha nevykonaná.
C:\Users\admin\AppData\Roaming\OPENCANDY (PUP.Optional.OpenCandy) -> Žiadna úloha nevykonaná.
C:\Users\admin\AppData\Roaming\OPENCANDY\506F49A257AA4CEFAB6208D158DD1441 (PUP.Optional.OpenCandy) -> Žiadna úloha nevykonaná.
C:\Users\admin\AppData\Roaming\DEFAULTTAB\DEFAULTTAB (PUP.Optional.DefaultTab.A) -> Žiadna úloha nevykonaná.
C:\Users\admin\AppData\Roaming\DEFAULTTAB\DEFAULTTAB\Apps (PUP.Optional.DefaultTab.A) -> Žiadna úloha nevykonaná.
C:\Users\admin\AppData\Roaming\newnext.me (PUP.Optional.NextLive.A) -> Žiadna úloha nevykonaná.
C:\Users\admin\AppData\Roaming\newnext.me\cache (PUP.Optional.NextLive.A) -> Žiadna úloha nevykonaná.
C:\Program Files\FTDOWNLOADER V4.0 (PUP.Optional.FTdownloader.A) -> Žiadna úloha nevykonaná.

Detegované súbory: 51
C:\Program Files\SMILEYS WE LOVE TOOLBAR FOR IE\ADXLOADER.DLL (PUP.Optional.SmileysWeLove.A) -> Žiadna úloha nevykonaná.
C:\Users\admin\AppData\Roaming\newnext.me\nengine.dll (PUP.Optional.NextLive.A) -> Žiadna úloha nevykonaná.
C:\Users\admin\AppData\Roaming\rmi\bsplayer-2.6.6.1075.exe (PUP.Optional.Conduit) -> Žiadna úloha nevykonaná.
C:\Users\admin\Downloads\bsplayer-2.6.6.1075 (1).exe (PUP.Optional.OpenCandy) -> Žiadna úloha nevykonaná.
C:\Users\admin\Downloads\minecraftdl_31043.exe (PUP.Optional.Tarma) -> Žiadna úloha nevykonaná.
C:\Users\deti\Downloads\GameHouse-Installer_am-1912titanicmystery_gamehouse_.exe (PUP.Optional.OpenCandy) -> Žiadna úloha nevykonaná.
C:\Users\Konto\Downloads\bsplayer-2.6.6.1075.exe (PUP.Optional.OpenCandy) -> Žiadna úloha nevykonaná.
C:\Users\Konto\Downloads\rcp_dcomnew_util_300.exe (PUP.Optional.RegCleanPro) -> Žiadna úloha nevykonaná.
C:\Windows\Tasks\FTDOWNLOADER V4.0-CODEDOWNLOADER.JOB (PUP.Optional.FTdownloader.A) -> Žiadna úloha nevykonaná.
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\OPTIMIZER PRO\OPTIMIZER PRO ON THE WEB.LNK (PUP.Optional.OptimizerPro.A) -> Žiadna úloha nevykonaná.
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\OPTIMIZER PRO\Help.lnk (PUP.Optional.OptimizerPro.A) -> Žiadna úloha nevykonaná.
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\OPTIMIZER PRO\Optimizer Pro.lnk (PUP.Optional.OptimizerPro.A) -> Žiadna úloha nevykonaná.
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\OPTIMIZER PRO\Uninstall Optimizer Pro.lnk (PUP.Optional.OptimizerPro.A) -> Žiadna úloha nevykonaná.
C:\Users\deti\AppData\Roaming\Mozilla\Extensions\{1FD91A9C-410C-4090-BBCC-55D3450EF433} (PUP.Optional.Searchqu.A) -> Žiadna úloha nevykonaná.
C:\Windows\System32\roboot.exe (PUP.Optional.PCPerformer.A) -> Žiadna úloha nevykonaná.
C:\Windows\inf\ntvdm.inf (Malware.Trace) -> Žiadna úloha nevykonaná.
C:\Program Files\SMILEYS WE LOVE TOOLBAR FOR IE\SMILEYSWELOVE.ICO (PUP.Optional.SmileysWeLove.A) -> Žiadna úloha nevykonaná.
C:\Program Files\SMILEYS WE LOVE TOOLBAR FOR IE\AddinExpress.IE.dll (PUP.Optional.SmileysWeLove.A) -> Žiadna úloha nevykonaná.
C:\Program Files\SMILEYS WE LOVE TOOLBAR FOR IE\AddinExpress.IE.tlb (PUP.Optional.SmileysWeLove.A) -> Žiadna úloha nevykonaná.
C:\Program Files\SMILEYS WE LOVE TOOLBAR FOR IE\adxloader.dll.manifest (PUP.Optional.SmileysWeLove.A) -> Žiadna úloha nevykonaná.
C:\Program Files\SMILEYS WE LOVE TOOLBAR FOR IE\adxloader.exe (PUP.Optional.SmileysWeLove.A) -> Žiadna úloha nevykonaná.
C:\Program Files\SMILEYS WE LOVE TOOLBAR FOR IE\adxloader64.dll (PUP.Optional.SmileysWeLove.A) -> Žiadna úloha nevykonaná.
C:\Program Files\SMILEYS WE LOVE TOOLBAR FOR IE\adxregistrator.exe (PUP.Optional.SmileysWeLove.A) -> Žiadna úloha nevykonaná.
C:\Program Files\SMILEYS WE LOVE TOOLBAR FOR IE\HtmlAgilityPack.dll (PUP.Optional.SmileysWeLove.A) -> Žiadna úloha nevykonaná.
C:\Program Files\SMILEYS WE LOVE TOOLBAR FOR IE\Interop.SHDocVw.dll (PUP.Optional.SmileysWeLove.A) -> Žiadna úloha nevykonaná.
C:\Program Files\SMILEYS WE LOVE TOOLBAR FOR IE\Microsoft.mshtml.dll (PUP.Optional.SmileysWeLove.A) -> Žiadna úloha nevykonaná.
C:\Program Files\SMILEYS WE LOVE TOOLBAR FOR IE\SmileysWeLoveToolbar.dll (PUP.Optional.SmileysWeLove.A) -> Žiadna úloha nevykonaná.
C:\Program Files\SMILEYS WE LOVE TOOLBAR FOR IE\SWLCustomInstaller.dll (PUP.Optional.SmileysWeLove.A) -> Žiadna úloha nevykonaná.
C:\Program Files\SMILEYS WE LOVE TOOLBAR FOR IE\SWLCustomInstaller.InstallState (PUP.Optional.SmileysWeLove.A) -> Žiadna úloha nevykonaná.
C:\Program Files\SMILEYS WE LOVE TOOLBAR FOR IE\SWLHelperLibrary.dll (PUP.Optional.SmileysWeLove.A) -> Žiadna úloha nevykonaná.
C:\Program Files\SMILEYS WE LOVE TOOLBAR FOR IE\SWLSettingsApp.exe (PUP.Optional.SmileysWeLove.A) -> Žiadna úloha nevykonaná.
C:\Program Files\SMILEYS WE LOVE TOOLBAR FOR IE\SWLSettingsApp.exe.config (PUP.Optional.SmileysWeLove.A) -> Žiadna úloha nevykonaná.
C:\Program Files\SMILEYS WE LOVE TOOLBAR FOR IE\System.Net.Json.dll (PUP.Optional.SmileysWeLove.A) -> Žiadna úloha nevykonaná.
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\SMILEYSWELOVE FOR IE\SMILEYSWELOVE SETTINGS FOR IE.LNK (PUP.Optional.SmileysWeLove.A) -> Žiadna úloha nevykonaná.
C:\Users\admin\AppData\Roaming\OPENCANDY\506F49A257AA4CEFAB6208D158DD1441\SmileysWeLove_SetupS_cdn.exe (PUP.Optional.OpenCandy) -> Žiadna úloha nevykonaná.
C:\Users\admin\AppData\Roaming\newnext.me\nengine.cookie (PUP.Optional.NextLive.A) -> Žiadna úloha nevykonaná.
C:\Users\admin\AppData\Roaming\newnext.me\cache\spark.bin (PUP.Optional.NextLive.A) -> Žiadna úloha nevykonaná.
C:\Program Files\FTDOWNLOADER V4.0\background.html (PUP.Optional.FTdownloader.A) -> Žiadna úloha nevykonaná.
C:\Program Files\FTDOWNLOADER V4.0\FTdownloader V4.0-bg.exe (PUP.Optional.FTdownloader.A) -> Žiadna úloha nevykonaná.
C:\Program Files\FTDOWNLOADER V4.0\FTdownloader V4.0-bho.dll (PUP.Optional.FTdownloader.A) -> Žiadna úloha nevykonaná.
C:\Program Files\FTDOWNLOADER V4.0\FTdownloader V4.0-buttonutil.dll (PUP.Optional.FTdownloader.A) -> Žiadna úloha nevykonaná.
C:\Program Files\FTDOWNLOADER V4.0\FTdownloader V4.0-buttonutil.exe (PUP.Optional.FTdownloader.A) -> Žiadna úloha nevykonaná.
C:\Program Files\FTDOWNLOADER V4.0\FTdownloader V4.0-buttonutil64.dll (PUP.Optional.FTdownloader.A) -> Žiadna úloha nevykonaná.
C:\Program Files\FTDOWNLOADER V4.0\FTdownloader V4.0-buttonutil64.exe (PUP.Optional.FTdownloader.A) -> Žiadna úloha nevykonaná.
C:\Program Files\FTDOWNLOADER V4.0\FTdownloader V4.0-codedownloader.exe (PUP.Optional.FTdownloader.A) -> Žiadna úloha nevykonaná.
C:\Program Files\FTDOWNLOADER V4.0\FTdownloader V4.0-enabler.exe (PUP.Optional.FTdownloader.A) -> Žiadna úloha nevykonaná.
C:\Program Files\FTDOWNLOADER V4.0\FTdownloader V4.0-helper.exe (PUP.Optional.FTdownloader.A) -> Žiadna úloha nevykonaná.
C:\Program Files\FTDOWNLOADER V4.0\FTdownloader V4.0.ico (PUP.Optional.FTdownloader.A) -> Žiadna úloha nevykonaná.
C:\Program Files\FTDOWNLOADER V4.0\Installer.log (PUP.Optional.FTdownloader.A) -> Žiadna úloha nevykonaná.
C:\Program Files\FTDOWNLOADER V4.0\Uninstall.exe (PUP.Optional.FTdownloader.A) -> Žiadna úloha nevykonaná.
C:\Program Files\FTDOWNLOADER V4.0\utils.exe (PUP.Optional.FTdownloader.A) -> Žiadna úloha nevykonaná.

(koniec)

Stáhni si Junkware Removal Tool

na svojí plochu.
Deaktivuj si svůj antivirový program.
Pravým tl. myši klikni na JRT.exe a vyber „spustit jako správce“. Pro pokračování budeš vyzván ke stisknutí jakékoliv klávesy. Na nějakou klikni.
Začne skenování programu. Skenování může trvat dloho , podle množství nákaz. Po ukončení skenu se objeví log (JRT.txt) , který se uloží na ploše.
Zkopíruj sem prosím celý jeho obsah.

====================================================

Znovu spusť MbAM a dej Scan
- po proběhnutí programu se ti objeví hláška tak klikni na OK a pak na tlačítko Show Results
- ujistit se že máš zatrhnuté všechny vypsané nálezy a klikni na tlačítko Remove Selected
- když skončí odstraňování tak se ti zobrazí log, tak ho sem dej.
- pak zvol v programu OK a pak program ukonči přes Exit

====================================================

Spusť znovu AdwCleaner (u Windows Vista či Windows7, klikni na AdwCleaner pravým a vyber „Spustit jako správce“
Klikni na „ Smazat“
Program provede opravu, po automatickém restartu neukáže log (C:\AdwCleaner [S?].txt) , jeho obsah sem celý vlož.

====================================================

Stáhni si RogueKiller
32bit.:
http://www.sur-la-toile.com/RogueKiller/RogueKiller.exe
64bit.:
http://www.sur-la-toile.com/RogueKiller ... lerX64.exe
na svojí plochu.
- Zavři všechny ostatní programy a prohlížeče.
- Pro OS Vista a win7 spusť program RogueKiller.exe jako správce , u XP poklepáním.
- počkej až skončí Prescan -vyhledávání škodlivých procesů.
- Zkontroluj , zda máš zaškrtnuto:
Kontrola MBR
Kontrola Faked
Antirootkit
-Potom klikni na „Prohledat“.
- Program skenuje procesy PC. Po proskenování klikni na „Zpráva“celý obsah logu sem zkopíruj.
Pokud je program blokován , zkus ho spustit několikrát. Pokud dále program nepůjde spustit a pracovat, přejmenuj ho na winlogon.exe.

Obsah loga z JRT (asi )
#
# A fatal error has been detected by the Java Runtime Environment:
#
# Internal Error (virtualspace.cpp:114), pid=158308, tid=160264
# fatal error: os::release_memory failed
#
# JRE version: (7.0_51-b13) (build )
# Java VM: Java HotSpot(TM) Client VM (24.51-b03 mixed mode windows-x86 )
# Failed to write core dump. Minidumps are not enabled by default on client versions of Windows
#
# If you would like to submit a bug report, please visit:
# http://bugreport.sun.com/bugreport/crash.jsp
#

--------------- T H R E A D ---------------

Current thread (0x00aba800): JavaThread "Unknown thread" [_thread_in_vm, id=160264, stack(0x00ae0000,0x00b30000)]

Stack: [0x00ae0000,0x00b30000], sp=0x00b2f788, free space=317k
Native frames: (J=compiled Java code, j=interpreted, Vv=VM code, C=native code)
V [jvm.dll+0x18e0f1]
V [jvm.dll+0x187e66]
V [jvm.dll+0x16422c]
V [jvm.dll+0x16470b]
V [jvm.dll+0x89a16]
V [jvm.dll+0x874e6]
V [jvm.dll+0x861f2]
V [jvm.dll+0x905c3]
V [jvm.dll+0x13dc14]
V [jvm.dll+0x16076c]
V [jvm.dll+0xc8ebf]
C [javaw.exe+0x13ce]
C [javaw.exe+0x1e40]
C [javaw.exe+0xa5b1]
C [javaw.exe+0xa63b]
C [kernel32.dll+0x4ed5c]
C [ntdll.dll+0x637eb]
C [ntdll.dll+0x637be]


--------------- P R O C E S S ---------------

Java Threads: ( => current thread )

Other Threads:

=>0x00aba800 (exited) JavaThread "Unknown thread" [_thread_in_vm, id=160264, stack(0x00ae0000,0x00b30000)]

VM state:not at safepoint (not fully initialized)

VM Mutex/Monitor currently owned by a thread: None

GC Heap History (0 events):
No events

Deoptimization events (0 events):
No events

Internal exceptions (0 events):
No events

Events (0 events):
No events


Dynamic libraries:
0x012d0000 - 0x012ff000 C:\Program Files\Java\jre7\bin\javaw.exe
0x774c0000 - 0x775fc000 C:\Windows\SYSTEM32\ntdll.dll
0x76e00000 - 0x76ed4000 C:\Windows\system32\kernel32.dll
0x757c0000 - 0x7580b000 C:\Windows\system32\KERNELBASE.dll
0x767b0000 - 0x76850000 C:\Windows\system32\ADVAPI32.dll
0x77280000 - 0x7732c000 C:\Windows\system32\msvcrt.dll
0x776d0000 - 0x776e9000 C:\Windows\SYSTEM32\sechost.dll
0x77620000 - 0x776c2000 C:\Windows\system32\RPCRT4.dll
0x768b0000 - 0x76979000 C:\Windows\system32\USER32.dll
0x76850000 - 0x7689e000 C:\Windows\system32\GDI32.dll
0x76580000 - 0x7658a000 C:\Windows\system32\LPK.dll
0x766c0000 - 0x7675d000 C:\Windows\system32\USP10.dll
0x740b0000 - 0x7424e000 C:\Windows\WinSxS\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2\COMCTL32.dll
0x77220000 - 0x77277000 C:\Windows\system32\SHLWAPI.dll
0x753d0000 - 0x7541c000 C:\Windows\system32\apphelp.dll
0x65e40000 - 0x65ecd000 C:\Windows\AppPatch\AcLayers.DLL
0x753b0000 - 0x753cb000 C:\Windows\system32\SspiCli.dll
0x75910000 - 0x7655a000 C:\Windows\system32\SHELL32.dll
0x77360000 - 0x774bc000 C:\Windows\system32\ole32.dll
0x76ff0000 - 0x7707f000 C:\Windows\system32\OLEAUT32.dll
0x74ae0000 - 0x74af7000 C:\Windows\system32\USERENV.dll
0x754d0000 - 0x754db000 C:\Windows\system32\profapi.dll
0x74910000 - 0x74961000 C:\Windows\system32\WINSPOOL.DRV
0x74a60000 - 0x74a72000 C:\Windows\system32\MPR.dll
0x76560000 - 0x7657f000 C:\Windows\system32\IMM32.DLL
0x76ee0000 - 0x76fac000 C:\Windows\system32\MSCTF.dll
0x65770000 - 0x6582f000 C:\Program Files\Java\jre7\bin\msvcr100.dll
0x5ae80000 - 0x5b200000 C:\Program Files\Java\jre7\bin\client\jvm.dll
0x74a50000 - 0x74a57000 C:\Windows\system32\WSOCK32.dll
0x76fb0000 - 0x76fe5000 C:\Windows\system32\WS2_32.dll
0x77610000 - 0x77616000 C:\Windows\system32\NSI.dll
0x74820000 - 0x74852000 C:\Windows\system32\WINMM.dll
0x768a0000 - 0x768a5000 C:\Windows\system32\PSAPI.DLL
0x68720000 - 0x68755000 C:\Program Files\Java\jre7\bin\splashscreen.dll
0x73f30000 - 0x73f70000 C:\Windows\system32\uxtheme.dll
0x687a0000 - 0x687ac000 C:\Program Files\Java\jre7\bin\verify.dll
0x68700000 - 0x68720000 C:\Program Files\Java\jre7\bin\java.dll
0x75450000 - 0x7545c000 C:\Windows\system32\CRYPTBASE.dll
0x68660000 - 0x68673000 C:\Program Files\Java\jre7\bin\zip.dll
0x65d40000 - 0x65e2b000 C:\Windows\system32\dbghelp.dll

VM Arguments:
jvm_args: -Xms256m -Xmx512m
java_command: C:\Users\Denis.admin-PC\Desktop\Minecraft-Launcher-1.7.2-Warez.exe
Launcher Type: SUN_STANDARD

Environment Variables:
PATH=C:\Program Files\Common Files\Microsoft Shared\Windows Live;C:\Windows\system32;C:\Windows;C:\Windows\System32\Wbem;C:\Windows\System32\WindowsPowerShell\v1.0\;C:\Program Files\Windows Live\Shared;C:\Program Files\Java\jre7\bin
USERNAME=Denis
OS=Windows_NT
PROCESSOR_IDENTIFIER=x86 Family 6 Model 23 Stepping 10, GenuineIntel



--------------- S Y S T E M ---------------

OS: Windows 7 Build 7601 Service Pack 1

CPU:total 2 (2 cores per cpu, 1 threads per core) family 6 model 23 stepping 10, cmov, cx8, fxsr, mmx, sse, sse2, sse3, ssse3, tsc

Memory: 4k page, physical 1831416k(136632k free), swap 4080580k(407228k free)

vm_info: Java HotSpot(TM) Client VM (24.51-b03) for windows-x86 JRE (1.7.0_51-b13), built on Dec 18 2013 19:09:58 by "java_re" with unknown MS VC++:1600



time: Sat Feb 22 12:50:26 2014
elapsed time: 2 seconds

Obsah loga z MbAM:
Malwarebytes Anti-Malware (Skúšobná verzia) 1.75.0.1300
www.malwarebytes.org

Verzia databázy: v2014.02.22.04

Windows 7 Service Pack 1 x86 NTFS
Internet Explorer 11.0.9600.16518
Denis :: ADMIN-PC [administrátor]

Ochrana: Zapnuté

23. 2. 2014 10:20:54
mbam-log-2014-02-23 (10-20-54).txt

Typ kontroly: Rýchla kontrola
Možnosti kontroly zapnuté: Pamäť | Po spustení | Registre | Systémové súbory | Heuristika/Extra | Heuristika/Shuriken | PUP | PUM
Možnosti kontroly vypnuté: P2P
Objektov kontrolovaných: 350800
Uplynutý čas: 15 min, 9 sek

Detegované služby pamäte: 0
(Škodlivé položky neboli zistené)

Detegované moduly pamäte: 0
(Škodlivé položky neboli zistené)

Detegované registračné kľúče: 24
HKCR\AppID\{33CB14BC-58BB-4B3A-9877-7946A3F41BAE} (PUP.Optional.Babylon.A) -> Pridanie do karantény a zmazanie úspešné.
HKCR\AppID\{38495740-0035-4471-851E-F5BBB86AB085} (PUP.Optional.DefaultTab.A) -> Pridanie do karantény a zmazanie úspešné.
HKCR\AppID\{72D89EBF-0C5D-4190-91FD-398E45F1D007} (PUP.Optional.DefaultTab.A) -> Pridanie do karantény a zmazanie úspešné.
HKCR\CLSID\{A6FEED89-3BCD-4D19-9DC2-3E613A80A2A4} (PUP.Optional.Amonetize.A) -> Pridanie do karantény a zmazanie úspešné.
HKCR\AmiBs.Installer.1 (PUP.Optional.Amonetize.A) -> Pridanie do karantény a zmazanie úspešné.
HKCR\AmiBs.Installer (PUP.Optional.Amonetize.A) -> Pridanie do karantény a zmazanie úspešné.
HKCR\CLSID\{CF0F43AB-9C23-4D7B-8040-201B82844854} (PUP.Optional.SmileysWeLove.A) -> Pridanie do karantény a zmazanie úspešné.
HKCR\CLSID\{E4EF8A64-0A30-48F5-B3FE-5FDA978DA775} (PUP.Optional.SmileysWeLove.A) -> Pridanie do karantény a zmazanie úspešné.
HKCR\SmileysWeLoveToolbar.IEModule (PUP.Optional.SmileysWeLove.A) -> Pridanie do karantény a zmazanie úspešné.
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{E4EF8A64-0A30-48F5-B3FE-5FDA978DA775} (PUP.Optional.SmileysWeLove.A) -> Pridanie do karantény a zmazanie úspešné.
HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{E4EF8A64-0A30-48F5-B3FE-5FDA978DA775} (PUP.Optional.SmileysWeLove.A) -> Pridanie do karantény a zmazanie úspešné.
HKCR\SmileysWeLoveToolbar.SWLIEToolbar (PUP.Optional.SmileysWeLove.A) -> Pridanie do karantény a zmazanie úspešné.
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{7F6AFBF1-E065-4627-A2FD-810366367D01} (PUP.Optional.DefaultTab.A) -> Pridanie do karantény a zmazanie úspešné.
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{A1E28287-1A31-4B0F-8D05-AA8C465D3C5A} (PUP.Optional.DefaultTab.A) -> Pridanie do karantény a zmazanie úspešné.
HKCR\AppID\DefaultTabBHO.DLL (PUP.Optional.DefaultTab.A) -> Pridanie do karantény a zmazanie úspešné.
HKCU\Software\AppDataLow\Software\Crossrider (PUP.Optional.CrossRider.A) -> Pridanie do karantény a zmazanie úspešné.
HKCU\Software\AppDataLow\Software\FTdownloader V4.0 (PUP.Optional.FTdownloader.A) -> Pridanie do karantény a zmazanie úspešné.
HKCU\Software\InstallCore\1I1T1Q1S (PUP.Optional.InstallCore.A) -> Pridanie do karantény a zmazanie úspešné.
HKCU\SOFTWARE\INSTALLCORE (PUP.Optional.InstallCore.A) -> Pridanie do karantény a zmazanie úspešné.
HKLM\SOFTWARE\Google\Chrome\Extensions\pialekdjmfmckiccfkgbbgphficjdekh (PUP.Optional.Babylon.A) -> Pridanie do karantény a zmazanie úspešné.
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\ccleaner.exe (Security.Hijack) -> Pridanie do karantény a zmazanie úspešné.
HKLM\Software\FTdownloader V4.0 (PUP.Optional.FTdownloader.A) -> Pridanie do karantény a zmazanie úspešné.
HKLM\SOFTWARE\SWEETIM (PUP.Optional.SweetIM.A) -> Pridanie do karantény a zmazanie úspešné.
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\FTdownloader V4.0 (PUP.Optional.FTdownloader.A) -> Pridanie do karantény a zmazanie úspešné.

Detegované registračné hodnoty: 4
HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar|{CF0F43AB-9C23-4D7B-8040-201B82844854} (PUP.Optional.SmileysWeLove.A) -> Dáta: SmileysWeLoveToolbar.IEModule -> Pridanie do karantény a zmazanie úspešné.
HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar\{CF0F43AB-9C23-4D7B-8040-201B82844854} (PUP.Optional.SmileysWeLove.A) -> Dáta: -> Pridanie do karantény a zmazanie úspešné.
HKCU\Software\InstallCore|tb (PUP.Optional.InstallCore.A) -> Dáta: 0F -> Pridanie do karantény a zmazanie úspešné.
HKLM\Software\SweetIM|simapp_id (PUP.Optional.SweetIM.A) -> Dáta: {FD084931-0992-11E3-95AB-00064F42C1E0} -> Pridanie do karantény a zmazanie úspešné.

Detegované položky registračných dát: 0
(Škodlivé položky neboli zistené)

Detegované priečinky: 10
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\OPTIMIZER PRO (PUP.Optional.OptimizerPro.A) -> Pridanie do karantény a zmazanie úspešné.
C:\Program Files\SMILEYS WE LOVE TOOLBAR FOR IE (PUP.Optional.SmileysWeLove.A) -> Pridanie do karantény a zmazanie úspešné.
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\SMILEYSWELOVE FOR IE (PUP.Optional.SmileysWeLove.A) -> Pridanie do karantény a zmazanie úspešné.
C:\Users\admin\AppData\Roaming\OPENCANDY (PUP.Optional.OpenCandy) -> Pridanie do karantény a zmazanie úspešné.
C:\Users\admin\AppData\Roaming\OPENCANDY\506F49A257AA4CEFAB6208D158DD1441 (PUP.Optional.OpenCandy) -> Pridanie do karantény a zmazanie úspešné.
C:\Users\admin\AppData\Roaming\DEFAULTTAB\DEFAULTTAB (PUP.Optional.DefaultTab.A) -> Pridanie do karantény a zmazanie úspešné.
C:\Users\admin\AppData\Roaming\DEFAULTTAB\DEFAULTTAB\Apps (PUP.Optional.DefaultTab.A) -> Pridanie do karantény a zmazanie úspešné.
C:\Users\admin\AppData\Roaming\newnext.me (PUP.Optional.NextLive.A) -> Pridanie do karantény a zmazanie úspešné.
C:\Users\admin\AppData\Roaming\newnext.me\cache (PUP.Optional.NextLive.A) -> Pridanie do karantény a zmazanie úspešné.
C:\Program Files\FTDOWNLOADER V4.0 (PUP.Optional.FTdownloader.A) -> Pridanie do karantény a zmazanie úspešné.

Detegované súbory: 49
C:\Program Files\SMILEYS WE LOVE TOOLBAR FOR IE\ADXLOADER.DLL (PUP.Optional.SmileysWeLove.A) -> Pridanie do karantény a zmazanie úspešné.
C:\Users\admin\AppData\Roaming\newnext.me\nengine.dll (PUP.Optional.NextLive.A) -> Pridanie do karantény a zmazanie úspešné.
C:\Users\admin\AppData\Roaming\rmi\bsplayer-2.6.6.1075.exe (PUP.Optional.Conduit) -> Pridanie do karantény a zmazanie úspešné.
C:\Users\admin\Downloads\bsplayer-2.6.6.1075 (1).exe (PUP.Optional.OpenCandy) -> Pridanie do karantény a zmazanie úspešné.
C:\Users\admin\Downloads\minecraftdl_31043.exe (PUP.Optional.Tarma) -> Pridanie do karantény a zmazanie úspešné.
C:\Users\deti\Downloads\GameHouse-Installer_am-1912titanicmystery_gamehouse_.exe (PUP.Optional.OpenCandy) -> Pridanie do karantény a zmazanie úspešné.
C:\Users\Konto\Downloads\bsplayer-2.6.6.1075.exe (PUP.Optional.OpenCandy) -> Pridanie do karantény a zmazanie úspešné.
C:\Users\Konto\Downloads\rcp_dcomnew_util_300.exe (PUP.Optional.RegCleanPro) -> Pridanie do karantény a zmazanie úspešné.
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\OPTIMIZER PRO\OPTIMIZER PRO ON THE WEB.LNK (PUP.Optional.OptimizerPro.A) -> Pridanie do karantény a zmazanie úspešné.
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\OPTIMIZER PRO\Help.lnk (PUP.Optional.OptimizerPro.A) -> Pridanie do karantény a zmazanie úspešné.
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\OPTIMIZER PRO\Optimizer Pro.lnk (PUP.Optional.OptimizerPro.A) -> Pridanie do karantény a zmazanie úspešné.
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\OPTIMIZER PRO\Uninstall Optimizer Pro.lnk (PUP.Optional.OptimizerPro.A) -> Pridanie do karantény a zmazanie úspešné.
C:\Users\deti\AppData\Roaming\Mozilla\Extensions\{1FD91A9C-410C-4090-BBCC-55D3450EF433} (PUP.Optional.Searchqu.A) -> Pridanie do karantény a zmazanie úspešné.
C:\Windows\System32\roboot.exe (PUP.Optional.PCPerformer.A) -> Pridanie do karantény a zmazanie úspešné.
C:\Program Files\SMILEYS WE LOVE TOOLBAR FOR IE\SMILEYSWELOVE.ICO (PUP.Optional.SmileysWeLove.A) -> Pridanie do karantény a zmazanie úspešné.
C:\Program Files\SMILEYS WE LOVE TOOLBAR FOR IE\AddinExpress.IE.dll (PUP.Optional.SmileysWeLove.A) -> Pridanie do karantény a zmazanie úspešné.
C:\Program Files\SMILEYS WE LOVE TOOLBAR FOR IE\AddinExpress.IE.tlb (PUP.Optional.SmileysWeLove.A) -> Pridanie do karantény a zmazanie úspešné.
C:\Program Files\SMILEYS WE LOVE TOOLBAR FOR IE\adxloader.dll.manifest (PUP.Optional.SmileysWeLove.A) -> Pridanie do karantény a zmazanie úspešné.
C:\Program Files\SMILEYS WE LOVE TOOLBAR FOR IE\adxloader.exe (PUP.Optional.SmileysWeLove.A) -> Pridanie do karantény a zmazanie úspešné.
C:\Program Files\SMILEYS WE LOVE TOOLBAR FOR IE\adxloader64.dll (PUP.Optional.SmileysWeLove.A) -> Pridanie do karantény a zmazanie úspešné.
C:\Program Files\SMILEYS WE LOVE TOOLBAR FOR IE\adxregistrator.exe (PUP.Optional.SmileysWeLove.A) -> Pridanie do karantény a zmazanie úspešné.
C:\Program Files\SMILEYS WE LOVE TOOLBAR FOR IE\HtmlAgilityPack.dll (PUP.Optional.SmileysWeLove.A) -> Pridanie do karantény a zmazanie úspešné.
C:\Program Files\SMILEYS WE LOVE TOOLBAR FOR IE\Interop.SHDocVw.dll (PUP.Optional.SmileysWeLove.A) -> Pridanie do karantény a zmazanie úspešné.
C:\Program Files\SMILEYS WE LOVE TOOLBAR FOR IE\Microsoft.mshtml.dll (PUP.Optional.SmileysWeLove.A) -> Pridanie do karantény a zmazanie úspešné.
C:\Program Files\SMILEYS WE LOVE TOOLBAR FOR IE\SmileysWeLoveToolbar.dll (PUP.Optional.SmileysWeLove.A) -> Pridanie do karantény a zmazanie úspešné.
C:\Program Files\SMILEYS WE LOVE TOOLBAR FOR IE\SWLCustomInstaller.dll (PUP.Optional.SmileysWeLove.A) -> Pridanie do karantény a zmazanie úspešné.
C:\Program Files\SMILEYS WE LOVE TOOLBAR FOR IE\SWLCustomInstaller.InstallState (PUP.Optional.SmileysWeLove.A) -> Pridanie do karantény a zmazanie úspešné.
C:\Program Files\SMILEYS WE LOVE TOOLBAR FOR IE\SWLHelperLibrary.dll (PUP.Optional.SmileysWeLove.A) -> Pridanie do karantény a zmazanie úspešné.
C:\Program Files\SMILEYS WE LOVE TOOLBAR FOR IE\SWLSettingsApp.exe (PUP.Optional.SmileysWeLove.A) -> Pridanie do karantény a zmazanie úspešné.
C:\Program Files\SMILEYS WE LOVE TOOLBAR FOR IE\SWLSettingsApp.exe.config (PUP.Optional.SmileysWeLove.A) -> Pridanie do karantény a zmazanie úspešné.
C:\Program Files\SMILEYS WE LOVE TOOLBAR FOR IE\System.Net.Json.dll (PUP.Optional.SmileysWeLove.A) -> Pridanie do karantény a zmazanie úspešné.
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\SMILEYSWELOVE FOR IE\SMILEYSWELOVE SETTINGS FOR IE.LNK (PUP.Optional.SmileysWeLove.A) -> Pridanie do karantény a zmazanie úspešné.
C:\Users\admin\AppData\Roaming\OPENCANDY\506F49A257AA4CEFAB6208D158DD1441\SmileysWeLove_SetupS_cdn.exe (PUP.Optional.OpenCandy) -> Pridanie do karantény a zmazanie úspešné.
C:\Users\admin\AppData\Roaming\newnext.me\nengine.cookie (PUP.Optional.NextLive.A) -> Pridanie do karantény a zmazanie úspešné.
C:\Users\admin\AppData\Roaming\newnext.me\cache\spark.bin (PUP.Optional.NextLive.A) -> Pridanie do karantény a zmazanie úspešné.
C:\Program Files\FTDOWNLOADER V4.0\background.html (PUP.Optional.FTdownloader.A) -> Pridanie do karantény a zmazanie úspešné.
C:\Program Files\FTDOWNLOADER V4.0\FTdownloader V4.0-bg.exe (PUP.Optional.FTdownloader.A) -> Pridanie do karantény a zmazanie úspešné.
C:\Program Files\FTDOWNLOADER V4.0\FTdownloader V4.0-bho.dll (PUP.Optional.FTdownloader.A) -> Pridanie do karantény a zmazanie úspešné.
C:\Program Files\FTDOWNLOADER V4.0\FTdownloader V4.0-buttonutil.dll (PUP.Optional.FTdownloader.A) -> Pridanie do karantény a zmazanie úspešné.
C:\Program Files\FTDOWNLOADER V4.0\FTdownloader V4.0-buttonutil.exe (PUP.Optional.FTdownloader.A) -> Pridanie do karantény a zmazanie úspešné.
C:\Program Files\FTDOWNLOADER V4.0\FTdownloader V4.0-buttonutil64.dll (PUP.Optional.FTdownloader.A) -> Pridanie do karantény a zmazanie úspešné.
C:\Program Files\FTDOWNLOADER V4.0\FTdownloader V4.0-buttonutil64.exe (PUP.Optional.FTdownloader.A) -> Pridanie do karantény a zmazanie úspešné.
C:\Program Files\FTDOWNLOADER V4.0\FTdownloader V4.0-codedownloader.exe (PUP.Optional.FTdownloader.A) -> Pridanie do karantény a zmazanie úspešné.
C:\Program Files\FTDOWNLOADER V4.0\FTdownloader V4.0-enabler.exe (PUP.Optional.FTdownloader.A) -> Pridanie do karantény a zmazanie úspešné.
C:\Program Files\FTDOWNLOADER V4.0\FTdownloader V4.0-helper.exe (PUP.Optional.FTdownloader.A) -> Pridanie do karantény a zmazanie úspešné.
C:\Program Files\FTDOWNLOADER V4.0\FTdownloader V4.0.ico (PUP.Optional.FTdownloader.A) -> Pridanie do karantény a zmazanie úspešné.
C:\Program Files\FTDOWNLOADER V4.0\Installer.log (PUP.Optional.FTdownloader.A) -> Pridanie do karantény a zmazanie úspešné.
C:\Program Files\FTDOWNLOADER V4.0\Uninstall.exe (PUP.Optional.FTdownloader.A) -> Pridanie do karantény a zmazanie úspešné.
C:\Program Files\FTDOWNLOADER V4.0\utils.exe (PUP.Optional.FTdownloader.A) -> Pridanie do karantény a zmazanie úspešné.

(koniec)
Ten tretí skopírujem po reštarte PC.

Obsah z adwcleaner:
Value Deleted : HKLM\SOFTWARE\Mozilla\Firefox\Extensions [Avg@toolbar]
Key Deleted : HKLM\SOFTWARE\Google\Chrome\Extensions\fjbbjfdilbioabojmcplalojlmdngbjl
Key Deleted : HKLM\SOFTWARE\Google\Chrome\Extensions\lgnbhdnimikkoodkogjlcllngimhlapp
[#] Key Deleted : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{AC25C581-C243-4899-84D7-F2B3F2A42682}
[#] Key Deleted : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{AC25C581-C243-4899-84D7-F2B3F2A42682}
[#] Key Deleted : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{3D43AD3D-044E-4B67-940B-0596962FB6E7}
Key Deleted : HKLM\SOFTWARE\Classes\AppID\ViProtocol.DLL
Key Deleted : HKLM\SOFTWARE\Classes\FTDownloader
Key Deleted : HKLM\SOFTWARE\Classes\protocols\handler\viprotocol
Key Deleted : HKLM\SOFTWARE\Classes\ScriptHelper.ScriptHelperApi
Key Deleted : HKLM\SOFTWARE\Classes\ScriptHelper.ScriptHelperApi.1
Key Deleted : HKLM\SOFTWARE\Classes\ViProtocol.ViProtocolOLE
Key Deleted : HKLM\SOFTWARE\Classes\ViProtocol.ViProtocolOLE.1
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\apnstub_RASAPI32
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\apnstub_RASMANCS
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\BundleSweetIMSetup_RASAPI32
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\ftdownloader v4_RASAPI32
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\iLividSetupV1_RASAPI32
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\iLividSetupV1_RASMANCS
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\optimizerpro_rasapi32
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\optprostart_rasapi32
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\SetupDataMngr_Searchqu_RASAPI32
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\SetupDataMngr_Searchqu_RASMANCS
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\Mobogenie.exe
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\MobogenieAdd
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\mypc backup
Value Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run [mobilegeni daemon]
Value Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run [vProt]
Key Deleted : HKLM\SOFTWARE\MozillaPlugins\@avg.com/AVG SiteSafety plugin,version=11.0.0.1,application/x-avg-sitesafety-plugin
Key Deleted : HKLM\SOFTWARE\MozillaPlugins\@VideoDownloadConverter_4z.com/Plugin
Key Deleted : HKLM\SOFTWARE\dedbdcb23bb849
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_for_grand-theft-auto-san-andreas_RASAPI32
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_for_hamachi_RASAPI32
Key Deleted : HKLM\SOFTWARE\Classes\AppID\{1FDFF5A2-7BB1-48E1-8081-7236812B12B2}
Key Deleted : HKLM\SOFTWARE\Classes\AppID\{7ABBFE1C-E485-44AA-8F36-353751B4124D}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{059EACC2-1ABE-49E8-928D-DC8BD355B7A9}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{4C836512-BB70-11D2-A5A7-00105A9C91C6}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{4E92DB5F-AAD9-49D3-8EAB-B40CBE5B1FF7}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{6FDBBC21-E399-4542-B4CE-86326E1F0727}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{7B878FD4-8F19-46DB-94B1-4CABFF80679C}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{8BA495EF-6CD5-413A-8AEF-483631B98C4F}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{8C71E394-2E6F-452A-AB7D-C17E78307083}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{933B95E2-E7B7-4AD9-B952-7AC336682AE3}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{B658800C-F66E-4EF3-AB85-6C0C227862A9}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{BADB1512-759C-4792-A18A-DD6BDC4E1991}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{DB797690-40E0-11D2-9BD5-0060082AE372}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{E54FBC83-9028-45AC-A5B9-D5DA828E59C2}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{F25AF245-4A81-40DC-92F9-E9021F207706}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{03E2A1F3-4402-4121-8B35-733216D61217}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{4E92DB5F-AAD9-49D3-8EAB-B40CBE5B1FF7}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{9E3B11F6-4179-4603-A71B-A55F4BCB0BEC}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{C401D2CE-DC27-45C7-BC0C-8E6EA7F085D6}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{D54C859C-6066-4F31-8FE0-2AAEDCAE67D7}
Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{633AA60B-C339-46C3-951F-047F9822C473}
Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{74FB6AFD-DD77-4CEB-83BD-AB2B63E63C93}
Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{9156C8F9-B397-4DEF-8AC5-5966221A134A}
Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{9C049BA6-EA47-4AC3-AED6-A66D8DC9E1D8}
Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{A8E5842E-102B-4289-9D57-3B3F5B5E15D3}
Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{C2AC8A0E-E48E-484B-A71C-C7A937FAAB94}
Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{DB797681-40E0-11D2-9BD5-0060082AE372}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{95B7759C-8C7F-4BF1-B163-73684A933233}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{1F6F39C1-00A8-4752-A94C-D0EA92D978B6}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{5354D921-3F52-47C5-938D-77A2FB6DEFE7}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{71144427-1368-4D18-8DC9-2AE3CC4C4F83}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{99E1F6FD-2E94-4CF6-8344-1BA63CD3BD9B}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{C6FDD0C3-266A-4DC3-B459-28C697C44CDC}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{ED345812-2722-4DCA-9976-D01832DB44EE}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{F25AF245-4A81-40DC-92F9-E9021F207706}
Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{105CE2F6-6C71-4553-95DB-0521A2C0F060}
Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{2D9083CE-8758-4704-BA57-3C891D7452BD}
Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{3D429207-4689-492D-A0E5-CDC5DFBB5005}
Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{4AC48E96-EB40-4792-9D9D-70D59D8754BA}
Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{5935E203-F846-461D-89DF-435059EFCBB8}
Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{6419A700-23B8-46EA-800B-C0EA78E133A2}
Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{9BC852D3-9D70-4611-9AFC-016840417A4C}
Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{E7DF6BFF-55A5-4EB7-A673-4ED3E9456D39}
Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{F25AF245-4A81-40DC-92F9-E9021F207706}
Value Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{95B7759C-8C7F-4BF1-B163-73684A933233}]
Key Deleted : HKCU\Software\AVG SafeGuard toolbar
Key Deleted : HKLM\Software\AVG SafeGuard toolbar
Key Deleted : HKLM\Software\AVG Security Toolbar
Key Deleted : HKLM\Software\Conduit
Key Deleted : HKLM\Software\DataMngr
Key Deleted : HKLM\Software\Driver-Soft
Key Deleted : HKLM\Software\NCH Software
Key Deleted : HKLM\Software\systweak
Key Deleted : HKLM\Software\VideoDownloadConverter_4z
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\1ClickDownload
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\AVG SafeGuard toolbar
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Mobogenie
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\MyPC Backup
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Optimizer Pro_is1

***** [ Browsers ] *****

-\\ Internet Explorer v11.0.9600.16518


-\\ Mozilla Firefox v27.0.1 (sk)

-\\ Google Chrome v33.0.1750.117

*************************

AdwCleaner[R0].txt - [9666 octets] - [23/02/2014 11:02:17]
AdwCleaner[S0].txt - [9895 octets] - [23/02/2014 11:03:14]

########## EOF - C:\AdwCleaner\AdwCleaner[S0].txt - [9955 octets] ##########

Obsah z RogueKiller:
RogueKiller V8.8.8 [Feb 19 2014] by Tigzy
mail : tigzyRK<at>gmail<dot>com
Feedback : http://forum.adlice.com
Webové stránky : http://www.adlice.com/softwares/roguekiller/
Blog : http://www.adlice.com

Operačný systém : Windows 7 (6.1.7601 Service Pack 1) 32 bits version
Spustené v : Normálny režim
Užívateľ : Denis [Práva Správcu]
Režim : Kontrola -- Dátum : 02/23/2014 11:16:26
| ARK || FAK || MBR |

¤¤¤ Škodlivé procesy : 0 ¤¤¤

¤¤¤ Záznamy Registrov : 5 ¤¤¤
[HJ POL][PUM] HKCU\[...]\System : DisableTaskMgr (0) -> NÁJDENÉ
[HJ POL][PUM] HKCU\[...]\System : DisableRegistryTools (0) -> NÁJDENÉ
[HJ DESK][PUM] HKLM\[...]\NewStartPanel : {59031a47-3f72-44a7-89c5-5595fe6b30ee} (1) -> NÁJDENÉ
[HJ DESK][PUM] HKLM\[...]\NewStartPanel : {20D04FE0-3AEA-1069-A2D8-08002B30309D} (1) -> NÁJDENÉ
[APPINIT][SUSP PATH] HKLM\[...]\Windows : AppInit_DLLs (c:\progra~2\bitguard\2.7.1832.68\{c16c1ccb-1111-4e5c-a2f3-533ad2fec8e8}\bitguard.dll [x]) -> NÁJDENÉ

¤¤¤ naplánované úlohy : 2 ¤¤¤
[V2][SUSP PATH] DTReg : C:\Users\admin\AppData\Roaming\defaulttab\defaulttab\DTReg.exe [x] -> NÁJDENÉ
[V2][SUSP PATH] {5B2343BE-E296-4AB5-8758-86486C04349B} : C:\Users\deti\Desktop\Prince of Persia T2T\PrinceOfPersia.exe [x] -> NÁJDENÉ

¤¤¤ spustenie položky : 0 ¤¤¤

¤¤¤ webové prehliadače : 0 ¤¤¤

¤¤¤ Browser Addons : 0 ¤¤¤

¤¤¤ Zvláštne súbory / Adresáre: ¤¤¤

¤¤¤ Ovládač : [NAHRATÉ] ¤¤¤

¤¤¤ Vonkajšie Hives: ¤¤¤

¤¤¤ Nákaza : ¤¤¤

¤¤¤ Súbor HOSTS: ¤¤¤
--> %SystemRoot%\System32\drivers\etc\hosts




¤¤¤ Kontrola MBR: ¤¤¤

+++++ PhysicalDrive0: (\\.\PHYSICALDRIVE0 @ IDE) WDC WD3200AAJS-00B4A0 ATA Device +++++
--- User ---
[MBR] 92c5a34147c4a87dae34516deb7dbd3d
[BSP] ec712c6fca251d2668591c803f1fd119 : Windows 7/8 MBR Code
Partition table:
0 - [ACTIVE] NTFS (0x07) [VISIBLE] Offset (sectors): 2048 | Size: 100 Mo
1 - [XXXXXX] NTFS (0x07) [VISIBLE] Offset (sectors): 206848 | Size: 305143 Mo
User = LL1 ... OK!
User = LL2 ... OK!

Dokončené : << RKreport[0]_S_02232014_111626.txt >>

Spusť RogueKiller ( Pro Windows Vista nebo Windows 7, klepni pravým a vyber "Spustit jako správce", ve Windows XP poklepej ke spuštění).
- Počkej, až Prescan dokončí práci...
- Počkej, dokud status okno zobrazuje "Prohledat "
- Klikni na "Smazat"
- Počkej, dokud Status box zobrazuje "Smazání- Finished "
- Klikni na "Zprávy " a zkopíruj a vlož obsah té zprávy prosím sem. Log je možno nalézt v RKreport [číslo]. txt na ploše.
- Zavři RogueKiller

Vypni rezidentní štít antiviru a antispywaru
Stáhni si ComboFix (by sUBs)
a ulož si ho na plochu.
Ukonči všechna aktivní okna a spusť ho.
- Po spuštění se zobrazí podmínky užití, potvrď je stiskem tlačítka Ano
- Dále postupuj dle pokynů, během aplikování ComboFixu neklikej do zobrazujícího se okna
- Po dokončení skenování by měl program vytvořit log - C:\ComboFix.txt - zkopíruj sem prosím celý jeho obsah
Pokud bude po kontrole problém spustit aplikace nebo bude vyskakovat hláška o pokusu použít neplatnou operaci na klíč registru, který je oznaèen pro odstranění, stačí restartovat počítač.

Obsah loga z RogueKiller:
RogueKiller V8.8.8 [Feb 19 2014] by Tigzy
mail : tigzyRK<at>gmail<dot>com
Feedback : http://forum.adlice.com
Webové stránky : http://www.adlice.com/softwares/roguekiller/
Blog : http://www.adlice.com

Operačný systém : Windows 7 (6.1.7601 Service Pack 1) 32 bits version
Spustené v : Normálny režim
Užívateľ : Denis [Práva Správcu]
Režim : Odebrať -- Dátum : 02/23/2014 21:21:58
| ARK || FAK || MBR |

¤¤¤ Škodlivé procesy : 0 ¤¤¤

¤¤¤ Záznamy Registrov : 5 ¤¤¤
[HJ POL][PUM] HKCU\[...]\System : DisableTaskMgr (0) -> VYMAZANÉ
[HJ POL][PUM] HKCU\[...]\System : DisableRegistryTools (0) -> VYMAZANÉ
[HJ DESK][PUM] HKLM\[...]\NewStartPanel : {59031a47-3f72-44a7-89c5-5595fe6b30ee} (1) -> NAHRADENÉ (0)
[HJ DESK][PUM] HKLM\[...]\NewStartPanel : {20D04FE0-3AEA-1069-A2D8-08002B30309D} (1) -> NAHRADENÉ (0)
[APPINIT][SUSP PATH] HKLM\[...]\Windows : AppInit_DLLs (c:\progra~2\bitguard\2.7.1832.68\{c16c1ccb-1111-4e5c-a2f3-533ad2fec8e8}\bitguard.dll [x]) -> NAHRADENÉ ()

¤¤¤ naplánované úlohy : 2 ¤¤¤
[V2][SUSP PATH] DTReg : C:\Users\admin\AppData\Roaming\defaulttab\defaulttab\DTReg.exe [x] -> VYMAZANÉ
[V2][SUSP PATH] {5B2343BE-E296-4AB5-8758-86486C04349B} : C:\Users\deti\Desktop\Prince of Persia T2T\PrinceOfPersia.exe [x] -> VYMAZANÉ

¤¤¤ spustenie položky : 0 ¤¤¤

¤¤¤ webové prehliadače : 0 ¤¤¤

¤¤¤ Browser Addons : 0 ¤¤¤

¤¤¤ Zvláštne súbory / Adresáre: ¤¤¤

¤¤¤ Ovládač : [NAHRATÉ] ¤¤¤
[Inline] EAT @firefox.exe (LdrLoadDll) : ntdll.dll -> HOOKED (C:\Program Files\Mozilla Firefox\mozglue.dll @ 0x68B31FFD)

¤¤¤ Vonkajšie Hives: ¤¤¤

¤¤¤ Nákaza : ¤¤¤

¤¤¤ Súbor HOSTS: ¤¤¤
--> %SystemRoot%\System32\drivers\etc\hosts




¤¤¤ Kontrola MBR: ¤¤¤

+++++ PhysicalDrive0: (\\.\PHYSICALDRIVE0 @ IDE) WDC WD3200AAJS-00B4A0 ATA Device +++++
--- User ---
[MBR] 92c5a34147c4a87dae34516deb7dbd3d
[BSP] ec712c6fca251d2668591c803f1fd119 : Windows 7/8 MBR Code
Partition table:
0 - [ACTIVE] NTFS (0x07) [VISIBLE] Offset (sectors): 2048 | Size: 100 Mo
1 - [XXXXXX] NTFS (0x07) [VISIBLE] Offset (sectors): 206848 | Size: 305143 Mo
User = LL1 ... OK!
User = LL2 ... OK!

Dokončené : << RKreport[0]_D_02232014_212158.txt >>
RKreport[0]_S_02232014_111626.txt;RKreport[0]_S_02232014_212104.txt

Obsah loga z ComboFix:

Ten sem dam zajtra

JRT znovu , dal si sem jiný log...

+
Stáhni si TDSSKiller
Na svojí plochu.Ujisti se , že máš zavřeny všechny ostatní aplikace a prohlížeče. Rozbal soubor a spusť TDSSKiller.exe. Restartuj PC . Log z TDSSKilleru najdeš zde:
C:\TDSSKiller. 2.8.16.0_(datum)_log.txt , vlož sem prosím celý obsah logu.
-pokud bude mít log více než 60.000 znaků , rozděl ho a vlož do více příspěvků

Pak teprve Combofix.