Prosím o kontrolu logu - virus Skypemoticons
Napsal: 09 zář 2014 23:29
Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 23:24:25, on 9.9.2014
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v11.0 (11.00.9600.17239)
Boot mode: Normal
Running processes:
C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe
C:\Program Files (x86)\Skype\Phone\Skype.exe
C:\Program Files (x86)\Steam\Steam.exe
C:\Program Files (x86)\Bloody4\Bloody4\Bloody4.exe
C:\Program Files (x86)\Origin\Origin.exe
C:\Program Files (x86)\Microsoft Office\Office15\ONENOTEM.EXE
C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe
C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
C:\Program Files (x86)\Steam\bin\steamwebhelper.exe
C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Users\Matyas\Downloads\hijackthis.exe
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.com
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/p/?LinkId=255141
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.com
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
F2 - REG:system.ini: UserInit=userinit.exe,
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: Lync Click to Call BHO - {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} - C:\Program Files (x86)\Microsoft Office\Office15\OCHelper.dll
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll
O2 - BHO: URLRedirectionBHO - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\PROGRA~2\MICROS~2\Office15\URLREDIR.DLL
O2 - BHO: Microsoft SkyDrive Pro Browser Helper - {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} - C:\PROGRA~2\MICROS~2\Office15\GROOVEEX.DLL
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll
O4 - HKLM\..\Run: [USB3MON] "C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe"
O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"
O4 - HKCU\..\Run: [Skype] "C:\Program Files (x86)\Skype\Phone\Skype.exe" /minimized /regrun
O4 - HKCU\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun
O4 - HKCU\..\Run: [Steam] "C:\Program Files (x86)\Steam\steam.exe" -silent
O4 - HKCU\..\Run: [Bloody2] "C:\Program Files (x86)\Bloody4\Bloody4\Bloody4.exe" Minimum
O4 - HKCU\..\Run: [EADM] "C:\Program Files (x86)\Origin\Origin.exe" -AutoStart
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'NETWORK SERVICE')
O4 - Startup: Odeslat do OneNote.lnk = C:\Program Files (x86)\Microsoft Office\Office15\ONENOTEM.EXE
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~2\MICROS~2\Office15\EXCEL.EXE/3000
O8 - Extra context menu item: Se&nd to OneNote - res://C:\PROGRA~2\MICROS~2\Office15\ONBttnIE.dll/105
O9 - Extra button: Send to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files (x86)\Microsoft Office\Office15\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: Se&nd to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files (x86)\Microsoft Office\Office15\ONBttnIE.dll
O9 - Extra button: Lync Click to Call - {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} - C:\Program Files (x86)\Microsoft Office\Office15\OCHelper.dll
O9 - Extra 'Tools' menuitem: Lync Click to Call - {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} - C:\Program Files (x86)\Microsoft Office\Office15\OCHelper.dll
O9 - Extra button: OneNote Lin&ked Notes - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files (x86)\Microsoft Office\Office15\ONBttnIELinkedNotes.dll
O9 - Extra 'Tools' menuitem: OneNote Lin&ked Notes - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files (x86)\Microsoft Office\Office15\ONBttnIELinkedNotes.dll
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O18 - Protocol: osf - {D924BDC6-C83A-4BD5-90D0-095128A113D1} - C:\Program Files (x86)\Microsoft Office\Office15\MSOSB.DLL
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~2\COMMON~1\Skype\SKYPE4~1.DLL
O18 - Filter hijack: text/xml - {807583E5-5146-11D5-A672-00B0D022E945} - C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE15\MSOXMLMF.DLL
O20 - AppInit_DLLs: c:\windows\syswow64\nvinit.dll
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
O23 - Service: AppleChargerSrv - Unknown owner - C:\Windows\system32\AppleChargerSrv.exe (file missing)
O23 - Service: Stavová služba ASP.NET (aspnet_state) - Unknown owner - C:\Windows\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe (file missing)
O23 - Service: Intel(R) Content Protection HECI Service (cphs) - Intel Corporation - C:\Windows\SysWow64\IntelCpHeciSvc.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)
O23 - Service: Futuremark SystemInfo Service - Futuremark Corporation - C:\Program Files (x86)\Futuremark\Futuremark SystemInfo\FMSISvc.exe
O23 - Service: Služba Google Update (gupdate) (gupdate) - Unknown owner - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe (file missing)
O23 - Service: Služba Google Update (gupdatem) (gupdatem) - Unknown owner - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe (file missing)
O23 - Service: Intel(R) Rapid Storage Technology (IAStorDataMgrSvc) - Intel Corporation - C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
O23 - Service: @%SystemRoot%\system32\ieetwcollectorres.dll,-1000 (IEEtwCollectorService) - Unknown owner - C:\Windows\system32\IEEtwCollector.exe (file missing)
O23 - Service: Intel(R) Capability Licensing Service Interface - Intel(R) Corporation - C:\Program Files\Intel\iCLS Client\HeciServer.exe
O23 - Service: Intel(R) Capability Licensing Service TCP IP Interface - Intel(R) Corporation - C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe
O23 - Service: Intel(R) Dynamic Application Loader Host Interface Service (jhi_service) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Intel(R) Management and Security Application Local Management Service (LMS) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: NVIDIA Network Service (NvNetworkService) - NVIDIA Corporation - C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
O23 - Service: NVIDIA Streamer Service (NvStreamSvc) - NVIDIA Corporation - C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
O23 - Service: NVIDIA Display Driver Service (nvsvc) - Unknown owner - C:\Windows\system32\nvvsvc.exe (file missing)
O23 - Service: PnkBstrA - Unknown owner - C:\Windows\system32\PnkBstrA.exe
O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Skype Updater (SkypeUpdate) - Skype Technologies - C:\Program Files (x86)\Skype\Updater\Updater.exe
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)
O23 - Service: Steam Client Service - Valve Corporation - C:\Program Files (x86)\Common Files\Steam\SteamService.exe
O23 - Service: NVIDIA Stereoscopic 3D Driver Service (Stereo Service) - NVIDIA Corporation - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
O23 - Service: TeamViewer 9 (TeamViewer9) - TeamViewer GmbH - C:\Program Files (x86)\TeamViewer\Version9\TeamViewer_Service.exe
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\Wat\WatUX.exe,-601 (WatAdminSvc) - Unknown owner - C:\Windows\system32\Wat\WatAdminSvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)
--
End of file - 11805 bytes
Ještě předtím jsem to projel MBAM, ale pořád mi nejdou smazat doplňky z Google Chrome
tady je log
Malwarebytes Anti-Malware
http://www.malwarebytes.org
Scan Date: 9.9.2014
Scan Time: 21:40:09
Logfile: vir2.txt
Administrator: Yes
Version: 2.00.2.1012
Malware Database: v2014.09.09.05
Rootkit Database: v2014.08.21.01
License: Free
Malware Protection: Disabled
Malicious Website Protection: Disabled
Self-protection: Disabled
OS: Windows 7 Service Pack 1
CPU: x64
File System: NTFS
User: Matyas
Scan Type: Threat Scan
Result: Completed
Objects Scanned: 345908
Time Elapsed: 9 min, 12 sec
Memory: Enabled
Startup: Enabled
Filesystem: Enabled
Archives: Enabled
Rootkits: Disabled
Heuristics: Enabled
PUP: Enabled
PUM: Enabled
Processes: 0
(No malicious items detected)
Modules: 0
(No malicious items detected)
Registry Keys: 17
PUP.Optional.Multiplug, HKLM\SOFTWARE\CLASSES\TYPELIB\{157B1AA6-3E5C-404A-9118-C1D91F537040}, Quarantined, [0c8d41aae695ea4ce079681603ffec14],
PUP.Optional.Multiplug, HKLM\SOFTWARE\CLASSES\INTERFACE\{3B3F3AAD-FB97-49FF-BFEE-D22869AC4326}, Quarantined, [0c8d41aae695ea4ce079681603ffec14],
PUP.Optional.Multiplug, HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{3B3F3AAD-FB97-49FF-BFEE-D22869AC4326}, Quarantined, [0c8d41aae695ea4ce079681603ffec14],
PUP.Optional.Multiplug, HKLM\SOFTWARE\WOW6432NODE\CLASSES\TYPELIB\{157B1AA6-3E5C-404A-9118-C1D91F537040}, Quarantined, [0c8d41aae695ea4ce079681603ffec14],
PUP.Optional.OutBrowse, HKLM\SOFTWARE\CLASSES\TYPELIB\{DCABB943-792E-44C4-9029-ECBEE6265AF9}, Quarantined, [07924c9f3d3eb0865c09e4a0cf33d32d],
PUP.Optional.OutBrowse, HKLM\SOFTWARE\CLASSES\INTERFACE\{3408AC0D-510E-4808-8F7B-6B70B1F88534}, Quarantined, [07924c9f3d3eb0865c09e4a0cf33d32d],
PUP.Optional.OutBrowse, HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{3408AC0D-510E-4808-8F7B-6B70B1F88534}, Quarantined, [07924c9f3d3eb0865c09e4a0cf33d32d],
PUP.Optional.OutBrowse, HKLM\SOFTWARE\WOW6432NODE\CLASSES\TYPELIB\{DCABB943-792E-44C4-9029-ECBEE6265AF9}, Quarantined, [07924c9f3d3eb0865c09e4a0cf33d32d],
PUP.Optional.iWebar.A, HKLM\SOFTWARE\WOW6432NODE\iWebar, Quarantined, [11883ead84f778be9eadfc4d887cd42c],
PUP.Optional.SavePass.A, HKLM\SOFTWARE\WOW6432NODE\SavePass, Quarantined, [910815d6f18ac76ffc9e0b095ca78d73],
PUP.Optional.FastSearchings, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{BB74DE59-BC4C-4172-9AC4-73315F71CFFE}, Quarantined, [dcbd816a1c5f171f123962017292e917],
PUP.Optional.MultiPlug, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\{4820778D-AB0D-6D18-C316-52A6A0E1D507}, Quarantined, [8d0cab4089f245f1d77b38c19072a957],
PUP.Optional.WebSearchInfo, HKU\S-1-5-21-4084047389-3241440864-1831413040-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{BB74DE59-BC4C-4172-9AC4-73315F71CFFE}, Quarantined, [9bfe6f7c93e884b2f5bb63ece420dc24],
PUP.Optional.GlobalUpdate.A, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\IMAGE FILE EXECUTION OPTIONS\GOOGLEUPDATE.EXE, Quarantined, [fe9b58933e3d280ec49ffde9aa58669a],
PUP.Optional.GlobalUpdate.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS NT\CURRENTVERSION\IMAGE FILE EXECUTION OPTIONS\GOOGLEUPDATE.EXE, Quarantined, [fe9b58933e3d280ec49ffde9aa58669a],
PUP.Optional.ShopperPro, HKLM\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXPLORER\BROWSER HELPER OBJECTS\{A5A51D2A-505A-4D84-AFC6-E0FA87E47B8C}, Quarantined, [b8e1f2f907745adc1e4022dac0440ef2],
PUP.Optional.ShopperPro, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\PREAPPROVED\{A5A51D2A-505A-4D84-AFC6-E0FA87E47B8C}, Quarantined, [b8e1f2f907745adc1e4022dac0440ef2],
Registry Values: 2
PUP.Optional.WebSearchInfo, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES|DefaultScope, {BB74DE59-BC4C-4172-9AC4-73315F71CFFE}, Quarantined, [45549c4faccfe0564946cc99c0445ea2]
PUP.Optional.WebSearchInfo, HKU\S-1-5-21-4084047389-3241440864-1831413040-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES|DefaultScope, {BB74DE59-BC4C-4172-9AC4-73315F71CFFE}, Quarantined, [544549a243386fc7525faca3be460000]
Registry Data: 2
PUP.Optional.WebSearchInfo, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\MAIN|Start Page, http://websearch.fixsearch.info/?pid=13 ... Z&unqvl=61, Good: (http://www.google.com), Bad: (http://websearch.fixsearch.info/?pid=13 ... Z&unqvl=61),Replaced,[1b7e2cbfaecd2511e09720ccda2a07f9]
PUP.Optional.WebSearchInfo, HKU\S-1-5-21-4084047389-3241440864-1831413040-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\INTERNET EXPLORER\MAIN|Start Page, http://websearch.fixsearch.info/?pid=13 ... Z&unqvl=61, Good: (http://www.google.com), Bad: (http://websearch.fixsearch.info/?pid=13 ... Z&unqvl=61),Replaced,[653408e3abd045f1a0d69854cc385ba5]
Folders: 4
PUP.Optional.Booster.A, C:\ProgramData\Trusted Publisher\PC_Booster, Quarantined, [7128ba311566ba7c8ea6b133d1310af6],
PUP.Optional.GlobalUpdate.A, C:\Users\Matyas\AppData\Local\Temp\comh.253941, Quarantined, [fe9b58933e3d280ec49ffde9aa58669a],
PUP.Optional.GlobalUpdate.A, C:\Users\Matyas\AppData\Local\Temp\comh.378003, Quarantined, [207945a6d9a29c9aeb786d799d65fc04],
PUP.Optional.GlobalUpdate.A, C:\Users\Matyas\AppData\Local\Temp\comh.45437, Quarantined, [1188f8f389f2ab8bfb68d90da161a759],
Files: 49
PUP.Optional.Multiplug, C:\Users\Matyas\AppData\Local\Temp\s5lk.exe, Quarantined, [0c8d41aae695ea4ce079681603ffec14],
PUP.Optional.OutBrowse, C:\Users\Matyas\AppData\Local\Temp\DownloadManager.exe, Quarantined, [07924c9f3d3eb0865c09e4a0cf33d32d],
PUP.Optional.MultiPlug, C:\$Recycle.Bin\S-1-5-21-4084047389-3241440864-1831413040-1000\$RYOWPHT.exe, Quarantined, [9702f6f53f3cdf5794848f2a39c89070],
PUP.Optional.CrossRider, C:\Users\Matyas\AppData\Local\Temp\Install_18591\iwebar.exe, Quarantined, [e0b9ffecb3c80531c944ecbf43be6799],
PUP.Optional.CrossRider, C:\Users\Matyas\AppData\Local\Temp\Install_18591\sense.exe, Quarantined, [41587f6c7dfe57dfb954812a7f8234cc],
PUP.Optional.Goobzo, C:\Users\Matyas\AppData\Local\Temp\Install_18591\shopperpro.exe, Quarantined, [1f7ae7048bf0e155ae55d50e06fe36ca],
PUP.Optional.MultiPlug, C:\Users\Matyas\AppData\Local\Temp\s5s0\temp\extIE_setup.exe, Quarantined, [1584b13ac6b5e94dde16c6f1d1305fa1],
PUP.Optional.MultiPlug.A, C:\Users\Matyas\AppData\Local\Temp\s5s0\temp\hpds_setup.exe, Quarantined, [fd9c7576f289023445e7cdf5bb4627d9],
Trojan.SProtector, C:\Users\Matyas\AppData\Local\Temp\s5s0\temp\putfu.exe, Quarantined, [4e4bcf1c90ebb58134ef29364bb6dc24],
PUP.Optional.MultiPlug, C:\Users\Matyas\AppData\Local\Temp\s5s0\temp\setupbc.exe, Quarantined, [ecad47a45328fa3c8470e2d5b44d01ff],
PUP.Optional.MultiPlug, C:\Users\Matyas\AppData\Local\Temp\s5s0\temp\setupespl.exe, Quarantined, [dfbad61593e851e5d420f3c4669b837d],
PUP.Optional.MultiPlug, C:\Users\Matyas\AppData\Local\Temp\s5s0\temp\setupytb.exe, Quarantined, [0c8d14d70d6e91a5e113a61154ad6d93],
PUP.Optional.Booster.A, C:\Users\Matyas\AppData\Local\Temp\s5s0\temp\usetup.exe, Quarantined, [4a4f10db1863191d4948086c788af010],
PUP.Optional.Ciuvo.A, C:\Users\Matyas\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_api.ciuvo.com_0.localstorage, Quarantined, [fa9fd01b2754eb4bf946aa62e51eac54],
PUP.Optional.Ciuvo.A, C:\Users\Matyas\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_api.ciuvo.com_0.localstorage-journal, Quarantined, [bcddc12af78438fe4ef1d23aff04fd03],
PUP.Optional.ShoppingGate.A, C:\Users\Matyas\AppData\Local\Google\Chrome\User Data\Default\Local Storage\https_inst.shoppingate.info_0.localstorage, Quarantined, [d4c5db10b9c22d09746eb45e20e355ab],
PUP.Optional.ShoppingGate.A, C:\Users\Matyas\AppData\Local\Google\Chrome\User Data\Default\Local Storage\https_inst.shoppingate.info_0.localstorage-journal, Quarantined, [31689853d9a2e056fce63dd5b54e9967],
PUP.Optional.Superfish.A, C:\Users\Matyas\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_www.superfish.com_0.localstorage, Quarantined, [49500cdf43387abc84b52ce74ab9a957],
PUP.Optional.Superfish.A, C:\Users\Matyas\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_www.superfish.com_0.localstorage-journal, Quarantined, [85145992f7844aec42f7858e9c67c739],
PUP.Optional.GlobalUpdate.A, C:\Users\Matyas\AppData\Local\Temp\comh.253941\GoogleCrashHandler.exe, Quarantined, [fe9b58933e3d280ec49ffde9aa58669a],
PUP.Optional.GlobalUpdate.A, C:\Users\Matyas\AppData\Local\Temp\comh.253941\GoogleUpdate.exe, Quarantined, [fe9b58933e3d280ec49ffde9aa58669a],
PUP.Optional.GlobalUpdate.A, C:\Users\Matyas\AppData\Local\Temp\comh.253941\GoogleUpdateBroker.exe, Quarantined, [fe9b58933e3d280ec49ffde9aa58669a],
PUP.Optional.GlobalUpdate.A, C:\Users\Matyas\AppData\Local\Temp\comh.253941\GoogleUpdateHelper.msi, Quarantined, [fe9b58933e3d280ec49ffde9aa58669a],
PUP.Optional.GlobalUpdate.A, C:\Users\Matyas\AppData\Local\Temp\comh.253941\GoogleUpdateOnDemand.exe, Quarantined, [fe9b58933e3d280ec49ffde9aa58669a],
PUP.Optional.GlobalUpdate.A, C:\Users\Matyas\AppData\Local\Temp\comh.253941\goopdate.dll, Quarantined, [fe9b58933e3d280ec49ffde9aa58669a],
PUP.Optional.GlobalUpdate.A, C:\Users\Matyas\AppData\Local\Temp\comh.253941\goopdateres_en.dll, Quarantined, [fe9b58933e3d280ec49ffde9aa58669a],
PUP.Optional.GlobalUpdate.A, C:\Users\Matyas\AppData\Local\Temp\comh.253941\npGoogleUpdate4.dll, Quarantined, [fe9b58933e3d280ec49ffde9aa58669a],
PUP.Optional.GlobalUpdate.A, C:\Users\Matyas\AppData\Local\Temp\comh.253941\psmachine.dll, Quarantined, [fe9b58933e3d280ec49ffde9aa58669a],
PUP.Optional.GlobalUpdate.A, C:\Users\Matyas\AppData\Local\Temp\comh.253941\psuser.dll, Quarantined, [fe9b58933e3d280ec49ffde9aa58669a],
PUP.Optional.GlobalUpdate.A, C:\Users\Matyas\AppData\Local\Temp\comh.378003\GoogleCrashHandler.exe, Quarantined, [207945a6d9a29c9aeb786d799d65fc04],
PUP.Optional.GlobalUpdate.A, C:\Users\Matyas\AppData\Local\Temp\comh.378003\GoogleUpdate.exe, Quarantined, [207945a6d9a29c9aeb786d799d65fc04],
PUP.Optional.GlobalUpdate.A, C:\Users\Matyas\AppData\Local\Temp\comh.378003\GoogleUpdateBroker.exe, Quarantined, [207945a6d9a29c9aeb786d799d65fc04],
PUP.Optional.GlobalUpdate.A, C:\Users\Matyas\AppData\Local\Temp\comh.378003\GoogleUpdateHelper.msi, Quarantined, [207945a6d9a29c9aeb786d799d65fc04],
PUP.Optional.GlobalUpdate.A, C:\Users\Matyas\AppData\Local\Temp\comh.378003\GoogleUpdateOnDemand.exe, Quarantined, [207945a6d9a29c9aeb786d799d65fc04],
PUP.Optional.GlobalUpdate.A, C:\Users\Matyas\AppData\Local\Temp\comh.378003\goopdate.dll, Quarantined, [207945a6d9a29c9aeb786d799d65fc04],
PUP.Optional.GlobalUpdate.A, C:\Users\Matyas\AppData\Local\Temp\comh.378003\goopdateres_en.dll, Quarantined, [207945a6d9a29c9aeb786d799d65fc04],
PUP.Optional.GlobalUpdate.A, C:\Users\Matyas\AppData\Local\Temp\comh.378003\npGoogleUpdate4.dll, Quarantined, [207945a6d9a29c9aeb786d799d65fc04],
PUP.Optional.GlobalUpdate.A, C:\Users\Matyas\AppData\Local\Temp\comh.378003\psmachine.dll, Quarantined, [207945a6d9a29c9aeb786d799d65fc04],
PUP.Optional.GlobalUpdate.A, C:\Users\Matyas\AppData\Local\Temp\comh.378003\psuser.dll, Quarantined, [207945a6d9a29c9aeb786d799d65fc04],
PUP.Optional.GlobalUpdate.A, C:\Users\Matyas\AppData\Local\Temp\comh.45437\GoogleCrashHandler.exe, Quarantined, [1188f8f389f2ab8bfb68d90da161a759],
PUP.Optional.GlobalUpdate.A, C:\Users\Matyas\AppData\Local\Temp\comh.45437\GoogleUpdate.exe, Quarantined, [1188f8f389f2ab8bfb68d90da161a759],
PUP.Optional.GlobalUpdate.A, C:\Users\Matyas\AppData\Local\Temp\comh.45437\GoogleUpdateBroker.exe, Quarantined, [1188f8f389f2ab8bfb68d90da161a759],
PUP.Optional.GlobalUpdate.A, C:\Users\Matyas\AppData\Local\Temp\comh.45437\GoogleUpdateHelper.msi, Quarantined, [1188f8f389f2ab8bfb68d90da161a759],
PUP.Optional.GlobalUpdate.A, C:\Users\Matyas\AppData\Local\Temp\comh.45437\GoogleUpdateOnDemand.exe, Quarantined, [1188f8f389f2ab8bfb68d90da161a759],
PUP.Optional.GlobalUpdate.A, C:\Users\Matyas\AppData\Local\Temp\comh.45437\goopdate.dll, Quarantined, [1188f8f389f2ab8bfb68d90da161a759],
PUP.Optional.GlobalUpdate.A, C:\Users\Matyas\AppData\Local\Temp\comh.45437\goopdateres_en.dll, Quarantined, [1188f8f389f2ab8bfb68d90da161a759],
PUP.Optional.GlobalUpdate.A, C:\Users\Matyas\AppData\Local\Temp\comh.45437\npGoogleUpdate4.dll, Quarantined, [1188f8f389f2ab8bfb68d90da161a759],
PUP.Optional.GlobalUpdate.A, C:\Users\Matyas\AppData\Local\Temp\comh.45437\psmachine.dll, Quarantined, [1188f8f389f2ab8bfb68d90da161a759],
PUP.Optional.GlobalUpdate.A, C:\Users\Matyas\AppData\Local\Temp\comh.45437\psuser.dll, Quarantined, [1188f8f389f2ab8bfb68d90da161a759],
Physical Sectors: 0
(No malicious items detected)
(end)
Scan saved at 23:24:25, on 9.9.2014
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v11.0 (11.00.9600.17239)
Boot mode: Normal
Running processes:
C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe
C:\Program Files (x86)\Skype\Phone\Skype.exe
C:\Program Files (x86)\Steam\Steam.exe
C:\Program Files (x86)\Bloody4\Bloody4\Bloody4.exe
C:\Program Files (x86)\Origin\Origin.exe
C:\Program Files (x86)\Microsoft Office\Office15\ONENOTEM.EXE
C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe
C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
C:\Program Files (x86)\Steam\bin\steamwebhelper.exe
C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Users\Matyas\Downloads\hijackthis.exe
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.com
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/p/?LinkId=255141
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.com
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
F2 - REG:system.ini: UserInit=userinit.exe,
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: Lync Click to Call BHO - {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} - C:\Program Files (x86)\Microsoft Office\Office15\OCHelper.dll
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll
O2 - BHO: URLRedirectionBHO - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\PROGRA~2\MICROS~2\Office15\URLREDIR.DLL
O2 - BHO: Microsoft SkyDrive Pro Browser Helper - {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} - C:\PROGRA~2\MICROS~2\Office15\GROOVEEX.DLL
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll
O4 - HKLM\..\Run: [USB3MON] "C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe"
O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"
O4 - HKCU\..\Run: [Skype] "C:\Program Files (x86)\Skype\Phone\Skype.exe" /minimized /regrun
O4 - HKCU\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun
O4 - HKCU\..\Run: [Steam] "C:\Program Files (x86)\Steam\steam.exe" -silent
O4 - HKCU\..\Run: [Bloody2] "C:\Program Files (x86)\Bloody4\Bloody4\Bloody4.exe" Minimum
O4 - HKCU\..\Run: [EADM] "C:\Program Files (x86)\Origin\Origin.exe" -AutoStart
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'NETWORK SERVICE')
O4 - Startup: Odeslat do OneNote.lnk = C:\Program Files (x86)\Microsoft Office\Office15\ONENOTEM.EXE
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~2\MICROS~2\Office15\EXCEL.EXE/3000
O8 - Extra context menu item: Se&nd to OneNote - res://C:\PROGRA~2\MICROS~2\Office15\ONBttnIE.dll/105
O9 - Extra button: Send to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files (x86)\Microsoft Office\Office15\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: Se&nd to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files (x86)\Microsoft Office\Office15\ONBttnIE.dll
O9 - Extra button: Lync Click to Call - {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} - C:\Program Files (x86)\Microsoft Office\Office15\OCHelper.dll
O9 - Extra 'Tools' menuitem: Lync Click to Call - {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} - C:\Program Files (x86)\Microsoft Office\Office15\OCHelper.dll
O9 - Extra button: OneNote Lin&ked Notes - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files (x86)\Microsoft Office\Office15\ONBttnIELinkedNotes.dll
O9 - Extra 'Tools' menuitem: OneNote Lin&ked Notes - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files (x86)\Microsoft Office\Office15\ONBttnIELinkedNotes.dll
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O18 - Protocol: osf - {D924BDC6-C83A-4BD5-90D0-095128A113D1} - C:\Program Files (x86)\Microsoft Office\Office15\MSOSB.DLL
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~2\COMMON~1\Skype\SKYPE4~1.DLL
O18 - Filter hijack: text/xml - {807583E5-5146-11D5-A672-00B0D022E945} - C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE15\MSOXMLMF.DLL
O20 - AppInit_DLLs: c:\windows\syswow64\nvinit.dll
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
O23 - Service: AppleChargerSrv - Unknown owner - C:\Windows\system32\AppleChargerSrv.exe (file missing)
O23 - Service: Stavová služba ASP.NET (aspnet_state) - Unknown owner - C:\Windows\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe (file missing)
O23 - Service: Intel(R) Content Protection HECI Service (cphs) - Intel Corporation - C:\Windows\SysWow64\IntelCpHeciSvc.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)
O23 - Service: Futuremark SystemInfo Service - Futuremark Corporation - C:\Program Files (x86)\Futuremark\Futuremark SystemInfo\FMSISvc.exe
O23 - Service: Služba Google Update (gupdate) (gupdate) - Unknown owner - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe (file missing)
O23 - Service: Služba Google Update (gupdatem) (gupdatem) - Unknown owner - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe (file missing)
O23 - Service: Intel(R) Rapid Storage Technology (IAStorDataMgrSvc) - Intel Corporation - C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
O23 - Service: @%SystemRoot%\system32\ieetwcollectorres.dll,-1000 (IEEtwCollectorService) - Unknown owner - C:\Windows\system32\IEEtwCollector.exe (file missing)
O23 - Service: Intel(R) Capability Licensing Service Interface - Intel(R) Corporation - C:\Program Files\Intel\iCLS Client\HeciServer.exe
O23 - Service: Intel(R) Capability Licensing Service TCP IP Interface - Intel(R) Corporation - C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe
O23 - Service: Intel(R) Dynamic Application Loader Host Interface Service (jhi_service) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Intel(R) Management and Security Application Local Management Service (LMS) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: NVIDIA Network Service (NvNetworkService) - NVIDIA Corporation - C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
O23 - Service: NVIDIA Streamer Service (NvStreamSvc) - NVIDIA Corporation - C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
O23 - Service: NVIDIA Display Driver Service (nvsvc) - Unknown owner - C:\Windows\system32\nvvsvc.exe (file missing)
O23 - Service: PnkBstrA - Unknown owner - C:\Windows\system32\PnkBstrA.exe
O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Skype Updater (SkypeUpdate) - Skype Technologies - C:\Program Files (x86)\Skype\Updater\Updater.exe
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)
O23 - Service: Steam Client Service - Valve Corporation - C:\Program Files (x86)\Common Files\Steam\SteamService.exe
O23 - Service: NVIDIA Stereoscopic 3D Driver Service (Stereo Service) - NVIDIA Corporation - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
O23 - Service: TeamViewer 9 (TeamViewer9) - TeamViewer GmbH - C:\Program Files (x86)\TeamViewer\Version9\TeamViewer_Service.exe
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\Wat\WatUX.exe,-601 (WatAdminSvc) - Unknown owner - C:\Windows\system32\Wat\WatAdminSvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)
--
End of file - 11805 bytes
Ještě předtím jsem to projel MBAM, ale pořád mi nejdou smazat doplňky z Google Chrome
tady je log
Malwarebytes Anti-Malware
http://www.malwarebytes.org
Scan Date: 9.9.2014
Scan Time: 21:40:09
Logfile: vir2.txt
Administrator: Yes
Version: 2.00.2.1012
Malware Database: v2014.09.09.05
Rootkit Database: v2014.08.21.01
License: Free
Malware Protection: Disabled
Malicious Website Protection: Disabled
Self-protection: Disabled
OS: Windows 7 Service Pack 1
CPU: x64
File System: NTFS
User: Matyas
Scan Type: Threat Scan
Result: Completed
Objects Scanned: 345908
Time Elapsed: 9 min, 12 sec
Memory: Enabled
Startup: Enabled
Filesystem: Enabled
Archives: Enabled
Rootkits: Disabled
Heuristics: Enabled
PUP: Enabled
PUM: Enabled
Processes: 0
(No malicious items detected)
Modules: 0
(No malicious items detected)
Registry Keys: 17
PUP.Optional.Multiplug, HKLM\SOFTWARE\CLASSES\TYPELIB\{157B1AA6-3E5C-404A-9118-C1D91F537040}, Quarantined, [0c8d41aae695ea4ce079681603ffec14],
PUP.Optional.Multiplug, HKLM\SOFTWARE\CLASSES\INTERFACE\{3B3F3AAD-FB97-49FF-BFEE-D22869AC4326}, Quarantined, [0c8d41aae695ea4ce079681603ffec14],
PUP.Optional.Multiplug, HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{3B3F3AAD-FB97-49FF-BFEE-D22869AC4326}, Quarantined, [0c8d41aae695ea4ce079681603ffec14],
PUP.Optional.Multiplug, HKLM\SOFTWARE\WOW6432NODE\CLASSES\TYPELIB\{157B1AA6-3E5C-404A-9118-C1D91F537040}, Quarantined, [0c8d41aae695ea4ce079681603ffec14],
PUP.Optional.OutBrowse, HKLM\SOFTWARE\CLASSES\TYPELIB\{DCABB943-792E-44C4-9029-ECBEE6265AF9}, Quarantined, [07924c9f3d3eb0865c09e4a0cf33d32d],
PUP.Optional.OutBrowse, HKLM\SOFTWARE\CLASSES\INTERFACE\{3408AC0D-510E-4808-8F7B-6B70B1F88534}, Quarantined, [07924c9f3d3eb0865c09e4a0cf33d32d],
PUP.Optional.OutBrowse, HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{3408AC0D-510E-4808-8F7B-6B70B1F88534}, Quarantined, [07924c9f3d3eb0865c09e4a0cf33d32d],
PUP.Optional.OutBrowse, HKLM\SOFTWARE\WOW6432NODE\CLASSES\TYPELIB\{DCABB943-792E-44C4-9029-ECBEE6265AF9}, Quarantined, [07924c9f3d3eb0865c09e4a0cf33d32d],
PUP.Optional.iWebar.A, HKLM\SOFTWARE\WOW6432NODE\iWebar, Quarantined, [11883ead84f778be9eadfc4d887cd42c],
PUP.Optional.SavePass.A, HKLM\SOFTWARE\WOW6432NODE\SavePass, Quarantined, [910815d6f18ac76ffc9e0b095ca78d73],
PUP.Optional.FastSearchings, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{BB74DE59-BC4C-4172-9AC4-73315F71CFFE}, Quarantined, [dcbd816a1c5f171f123962017292e917],
PUP.Optional.MultiPlug, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\{4820778D-AB0D-6D18-C316-52A6A0E1D507}, Quarantined, [8d0cab4089f245f1d77b38c19072a957],
PUP.Optional.WebSearchInfo, HKU\S-1-5-21-4084047389-3241440864-1831413040-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{BB74DE59-BC4C-4172-9AC4-73315F71CFFE}, Quarantined, [9bfe6f7c93e884b2f5bb63ece420dc24],
PUP.Optional.GlobalUpdate.A, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\IMAGE FILE EXECUTION OPTIONS\GOOGLEUPDATE.EXE, Quarantined, [fe9b58933e3d280ec49ffde9aa58669a],
PUP.Optional.GlobalUpdate.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS NT\CURRENTVERSION\IMAGE FILE EXECUTION OPTIONS\GOOGLEUPDATE.EXE, Quarantined, [fe9b58933e3d280ec49ffde9aa58669a],
PUP.Optional.ShopperPro, HKLM\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXPLORER\BROWSER HELPER OBJECTS\{A5A51D2A-505A-4D84-AFC6-E0FA87E47B8C}, Quarantined, [b8e1f2f907745adc1e4022dac0440ef2],
PUP.Optional.ShopperPro, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\PREAPPROVED\{A5A51D2A-505A-4D84-AFC6-E0FA87E47B8C}, Quarantined, [b8e1f2f907745adc1e4022dac0440ef2],
Registry Values: 2
PUP.Optional.WebSearchInfo, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES|DefaultScope, {BB74DE59-BC4C-4172-9AC4-73315F71CFFE}, Quarantined, [45549c4faccfe0564946cc99c0445ea2]
PUP.Optional.WebSearchInfo, HKU\S-1-5-21-4084047389-3241440864-1831413040-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES|DefaultScope, {BB74DE59-BC4C-4172-9AC4-73315F71CFFE}, Quarantined, [544549a243386fc7525faca3be460000]
Registry Data: 2
PUP.Optional.WebSearchInfo, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\MAIN|Start Page, http://websearch.fixsearch.info/?pid=13 ... Z&unqvl=61, Good: (http://www.google.com), Bad: (http://websearch.fixsearch.info/?pid=13 ... Z&unqvl=61),Replaced,[1b7e2cbfaecd2511e09720ccda2a07f9]
PUP.Optional.WebSearchInfo, HKU\S-1-5-21-4084047389-3241440864-1831413040-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\INTERNET EXPLORER\MAIN|Start Page, http://websearch.fixsearch.info/?pid=13 ... Z&unqvl=61, Good: (http://www.google.com), Bad: (http://websearch.fixsearch.info/?pid=13 ... Z&unqvl=61),Replaced,[653408e3abd045f1a0d69854cc385ba5]
Folders: 4
PUP.Optional.Booster.A, C:\ProgramData\Trusted Publisher\PC_Booster, Quarantined, [7128ba311566ba7c8ea6b133d1310af6],
PUP.Optional.GlobalUpdate.A, C:\Users\Matyas\AppData\Local\Temp\comh.253941, Quarantined, [fe9b58933e3d280ec49ffde9aa58669a],
PUP.Optional.GlobalUpdate.A, C:\Users\Matyas\AppData\Local\Temp\comh.378003, Quarantined, [207945a6d9a29c9aeb786d799d65fc04],
PUP.Optional.GlobalUpdate.A, C:\Users\Matyas\AppData\Local\Temp\comh.45437, Quarantined, [1188f8f389f2ab8bfb68d90da161a759],
Files: 49
PUP.Optional.Multiplug, C:\Users\Matyas\AppData\Local\Temp\s5lk.exe, Quarantined, [0c8d41aae695ea4ce079681603ffec14],
PUP.Optional.OutBrowse, C:\Users\Matyas\AppData\Local\Temp\DownloadManager.exe, Quarantined, [07924c9f3d3eb0865c09e4a0cf33d32d],
PUP.Optional.MultiPlug, C:\$Recycle.Bin\S-1-5-21-4084047389-3241440864-1831413040-1000\$RYOWPHT.exe, Quarantined, [9702f6f53f3cdf5794848f2a39c89070],
PUP.Optional.CrossRider, C:\Users\Matyas\AppData\Local\Temp\Install_18591\iwebar.exe, Quarantined, [e0b9ffecb3c80531c944ecbf43be6799],
PUP.Optional.CrossRider, C:\Users\Matyas\AppData\Local\Temp\Install_18591\sense.exe, Quarantined, [41587f6c7dfe57dfb954812a7f8234cc],
PUP.Optional.Goobzo, C:\Users\Matyas\AppData\Local\Temp\Install_18591\shopperpro.exe, Quarantined, [1f7ae7048bf0e155ae55d50e06fe36ca],
PUP.Optional.MultiPlug, C:\Users\Matyas\AppData\Local\Temp\s5s0\temp\extIE_setup.exe, Quarantined, [1584b13ac6b5e94dde16c6f1d1305fa1],
PUP.Optional.MultiPlug.A, C:\Users\Matyas\AppData\Local\Temp\s5s0\temp\hpds_setup.exe, Quarantined, [fd9c7576f289023445e7cdf5bb4627d9],
Trojan.SProtector, C:\Users\Matyas\AppData\Local\Temp\s5s0\temp\putfu.exe, Quarantined, [4e4bcf1c90ebb58134ef29364bb6dc24],
PUP.Optional.MultiPlug, C:\Users\Matyas\AppData\Local\Temp\s5s0\temp\setupbc.exe, Quarantined, [ecad47a45328fa3c8470e2d5b44d01ff],
PUP.Optional.MultiPlug, C:\Users\Matyas\AppData\Local\Temp\s5s0\temp\setupespl.exe, Quarantined, [dfbad61593e851e5d420f3c4669b837d],
PUP.Optional.MultiPlug, C:\Users\Matyas\AppData\Local\Temp\s5s0\temp\setupytb.exe, Quarantined, [0c8d14d70d6e91a5e113a61154ad6d93],
PUP.Optional.Booster.A, C:\Users\Matyas\AppData\Local\Temp\s5s0\temp\usetup.exe, Quarantined, [4a4f10db1863191d4948086c788af010],
PUP.Optional.Ciuvo.A, C:\Users\Matyas\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_api.ciuvo.com_0.localstorage, Quarantined, [fa9fd01b2754eb4bf946aa62e51eac54],
PUP.Optional.Ciuvo.A, C:\Users\Matyas\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_api.ciuvo.com_0.localstorage-journal, Quarantined, [bcddc12af78438fe4ef1d23aff04fd03],
PUP.Optional.ShoppingGate.A, C:\Users\Matyas\AppData\Local\Google\Chrome\User Data\Default\Local Storage\https_inst.shoppingate.info_0.localstorage, Quarantined, [d4c5db10b9c22d09746eb45e20e355ab],
PUP.Optional.ShoppingGate.A, C:\Users\Matyas\AppData\Local\Google\Chrome\User Data\Default\Local Storage\https_inst.shoppingate.info_0.localstorage-journal, Quarantined, [31689853d9a2e056fce63dd5b54e9967],
PUP.Optional.Superfish.A, C:\Users\Matyas\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_www.superfish.com_0.localstorage, Quarantined, [49500cdf43387abc84b52ce74ab9a957],
PUP.Optional.Superfish.A, C:\Users\Matyas\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_www.superfish.com_0.localstorage-journal, Quarantined, [85145992f7844aec42f7858e9c67c739],
PUP.Optional.GlobalUpdate.A, C:\Users\Matyas\AppData\Local\Temp\comh.253941\GoogleCrashHandler.exe, Quarantined, [fe9b58933e3d280ec49ffde9aa58669a],
PUP.Optional.GlobalUpdate.A, C:\Users\Matyas\AppData\Local\Temp\comh.253941\GoogleUpdate.exe, Quarantined, [fe9b58933e3d280ec49ffde9aa58669a],
PUP.Optional.GlobalUpdate.A, C:\Users\Matyas\AppData\Local\Temp\comh.253941\GoogleUpdateBroker.exe, Quarantined, [fe9b58933e3d280ec49ffde9aa58669a],
PUP.Optional.GlobalUpdate.A, C:\Users\Matyas\AppData\Local\Temp\comh.253941\GoogleUpdateHelper.msi, Quarantined, [fe9b58933e3d280ec49ffde9aa58669a],
PUP.Optional.GlobalUpdate.A, C:\Users\Matyas\AppData\Local\Temp\comh.253941\GoogleUpdateOnDemand.exe, Quarantined, [fe9b58933e3d280ec49ffde9aa58669a],
PUP.Optional.GlobalUpdate.A, C:\Users\Matyas\AppData\Local\Temp\comh.253941\goopdate.dll, Quarantined, [fe9b58933e3d280ec49ffde9aa58669a],
PUP.Optional.GlobalUpdate.A, C:\Users\Matyas\AppData\Local\Temp\comh.253941\goopdateres_en.dll, Quarantined, [fe9b58933e3d280ec49ffde9aa58669a],
PUP.Optional.GlobalUpdate.A, C:\Users\Matyas\AppData\Local\Temp\comh.253941\npGoogleUpdate4.dll, Quarantined, [fe9b58933e3d280ec49ffde9aa58669a],
PUP.Optional.GlobalUpdate.A, C:\Users\Matyas\AppData\Local\Temp\comh.253941\psmachine.dll, Quarantined, [fe9b58933e3d280ec49ffde9aa58669a],
PUP.Optional.GlobalUpdate.A, C:\Users\Matyas\AppData\Local\Temp\comh.253941\psuser.dll, Quarantined, [fe9b58933e3d280ec49ffde9aa58669a],
PUP.Optional.GlobalUpdate.A, C:\Users\Matyas\AppData\Local\Temp\comh.378003\GoogleCrashHandler.exe, Quarantined, [207945a6d9a29c9aeb786d799d65fc04],
PUP.Optional.GlobalUpdate.A, C:\Users\Matyas\AppData\Local\Temp\comh.378003\GoogleUpdate.exe, Quarantined, [207945a6d9a29c9aeb786d799d65fc04],
PUP.Optional.GlobalUpdate.A, C:\Users\Matyas\AppData\Local\Temp\comh.378003\GoogleUpdateBroker.exe, Quarantined, [207945a6d9a29c9aeb786d799d65fc04],
PUP.Optional.GlobalUpdate.A, C:\Users\Matyas\AppData\Local\Temp\comh.378003\GoogleUpdateHelper.msi, Quarantined, [207945a6d9a29c9aeb786d799d65fc04],
PUP.Optional.GlobalUpdate.A, C:\Users\Matyas\AppData\Local\Temp\comh.378003\GoogleUpdateOnDemand.exe, Quarantined, [207945a6d9a29c9aeb786d799d65fc04],
PUP.Optional.GlobalUpdate.A, C:\Users\Matyas\AppData\Local\Temp\comh.378003\goopdate.dll, Quarantined, [207945a6d9a29c9aeb786d799d65fc04],
PUP.Optional.GlobalUpdate.A, C:\Users\Matyas\AppData\Local\Temp\comh.378003\goopdateres_en.dll, Quarantined, [207945a6d9a29c9aeb786d799d65fc04],
PUP.Optional.GlobalUpdate.A, C:\Users\Matyas\AppData\Local\Temp\comh.378003\npGoogleUpdate4.dll, Quarantined, [207945a6d9a29c9aeb786d799d65fc04],
PUP.Optional.GlobalUpdate.A, C:\Users\Matyas\AppData\Local\Temp\comh.378003\psmachine.dll, Quarantined, [207945a6d9a29c9aeb786d799d65fc04],
PUP.Optional.GlobalUpdate.A, C:\Users\Matyas\AppData\Local\Temp\comh.378003\psuser.dll, Quarantined, [207945a6d9a29c9aeb786d799d65fc04],
PUP.Optional.GlobalUpdate.A, C:\Users\Matyas\AppData\Local\Temp\comh.45437\GoogleCrashHandler.exe, Quarantined, [1188f8f389f2ab8bfb68d90da161a759],
PUP.Optional.GlobalUpdate.A, C:\Users\Matyas\AppData\Local\Temp\comh.45437\GoogleUpdate.exe, Quarantined, [1188f8f389f2ab8bfb68d90da161a759],
PUP.Optional.GlobalUpdate.A, C:\Users\Matyas\AppData\Local\Temp\comh.45437\GoogleUpdateBroker.exe, Quarantined, [1188f8f389f2ab8bfb68d90da161a759],
PUP.Optional.GlobalUpdate.A, C:\Users\Matyas\AppData\Local\Temp\comh.45437\GoogleUpdateHelper.msi, Quarantined, [1188f8f389f2ab8bfb68d90da161a759],
PUP.Optional.GlobalUpdate.A, C:\Users\Matyas\AppData\Local\Temp\comh.45437\GoogleUpdateOnDemand.exe, Quarantined, [1188f8f389f2ab8bfb68d90da161a759],
PUP.Optional.GlobalUpdate.A, C:\Users\Matyas\AppData\Local\Temp\comh.45437\goopdate.dll, Quarantined, [1188f8f389f2ab8bfb68d90da161a759],
PUP.Optional.GlobalUpdate.A, C:\Users\Matyas\AppData\Local\Temp\comh.45437\goopdateres_en.dll, Quarantined, [1188f8f389f2ab8bfb68d90da161a759],
PUP.Optional.GlobalUpdate.A, C:\Users\Matyas\AppData\Local\Temp\comh.45437\npGoogleUpdate4.dll, Quarantined, [1188f8f389f2ab8bfb68d90da161a759],
PUP.Optional.GlobalUpdate.A, C:\Users\Matyas\AppData\Local\Temp\comh.45437\psmachine.dll, Quarantined, [1188f8f389f2ab8bfb68d90da161a759],
PUP.Optional.GlobalUpdate.A, C:\Users\Matyas\AppData\Local\Temp\comh.45437\psuser.dll, Quarantined, [1188f8f389f2ab8bfb68d90da161a759],
Physical Sectors: 0
(No malicious items detected)
(end)