PC-HELP.CZ

České diskuzní fórum o počítačích
https://pc-help.cnews.cz/

Prosím o kontrolu

https://pc-help.cnews.cz/viewtopic.php?f=70&t=141190

Stránka 1 z 2

Prosím o kontrolu

Napsal: 02 říj 2014 10:26
od kipon
Poslední dobou mám problém s NTB firmy toshiba s win 8. Zdá se mi občas pomalý a v některých případech mi nejde vypnout ani restartovat, jde pouze uložit ke spánku. Při najíždění se občas oběví černá plocha a nic se neděje. Dle průzkumu fóra jsem našel, že mám udělat LOG v programu HJT. Tak tady ho přidávám:



Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 10:11:04, on 2. 10. 2014
Platform: Unknown Windows (WinNT 6.02.1008)
MSIE: Internet Explorer v11.0 (11.00.9600.17278)
Boot mode: Normal

Running processes:
C:\Program Files (x86)\TOSHIBA\System Setting\TSleepSrv.exe
C:\Program Files (x86)\Settings Manager\smdmf\smdmfu.exe
C:\Users\Jakub\Desktop\programy\HijackThis\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://toshiba13.msn.com
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page =
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/p/?LinkId=255141
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/p/?LinkId=255141
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
F2 - REG:system.ini: UserInit=userinit.exe
O2 - BHO: SkypeIEPluginBHO - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
O4 - HKLM\..\Run: [ToshibaDynamicIconUtility] "C:\Program Files\TOSHIBA\TOSHIBA Places Icon Utility\TosDIMonitor.exe"
O4 - HKLM\..\Run: [StartCCC] "C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun
O4 - HKLM\..\Run: [TPUReg(x86)] "C:\Program Files\TOSHIBA\Password Utility\TosPU.exe" /Retimes
O4 - HKLM\..\Run: [TPUReg] "C:\Program Files (x86)\TOSHIBA\Password Utility\TosPU.exe" /Retimes
O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKLM\..\Run: [mobilegeni daemon] C:\Program Files (x86)\Mobogenie\DaemonProcess.exe
O4 - HKCU\..\Run: [NextLive] C:\windows\SysWOW64\rundll32.exe "C:\Users\Jakub\AppData\Roaming\newnext.me\nengine.dll",EntryPoint -m l
O4 - HKCU\..\Run: [SUPERAntiSpyware] C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Excel - res://C:\PROGRA~2\MICROS~1\Office12\EXCEL.EXE/3000
O9 - Extra button: Skype Click to Call settings - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~2\MICROS~1\Office12\REFIEBAR.DLL
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O18 - Protocol: skypec2c - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
O23 - Service: SAS Core Service (!SASCORE) - SUPERAntiSpyware.com - C:\Program Files\SUPERAntiSpyware\SASCORE64.EXE
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\WINDOWS\System32\alg.exe (file missing)
O23 - Service: AMD External Events Utility - Unknown owner - C:\WINDOWS\system32\atiesrxx.exe (file missing)
O23 - Service: Dragon Age: Prameny - aktualizace obsahu (DAUpdaterSvc) - BioWare - C:\Program Files (x86)\Dragon Age\bin_ship\DAUpdaterSvc.Service.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\WINDOWS\System32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\WINDOWS\system32\fxssvc.exe (file missing)
O23 - Service: GamesAppService - WildTangent, Inc. - C:\Program Files (x86)\WildTangent Games\App\GamesAppService.exe
O23 - Service: GFNEX Service (GFNEXSrv) - Unknown owner - C:\Program Files (x86)\TOSHIBA\Password Utility\GFNEXSrv.exe
O23 - Service: Služba Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Služba Google Update (gupdatem) (gupdatem) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: @%SystemRoot%\system32\ieetwcollectorres.dll,-1000 (IEEtwCollectorService) - Unknown owner - C:\WINDOWS\system32\IEEtwCollector.exe (file missing)
O23 - Service: Intel(R) Capability Licensing Service Interface - Intel(R) Corporation - C:\Program Files\Intel\iCLS Client\HeciServer.exe
O23 - Service: Intel(R) ME Service - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe
O23 - Service: Intel(R) Dynamic Application Loader Host Interface Service (jhi_service) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: Intel(R) Management and Security Application Local Management Service (LMS) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Mozilla Foundation - C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\WINDOWS\System32\msdtc.exe (file missing)
O23 - Service: Nero Update (NAUpdate) - Nero AG - C:\Program Files (x86)\Nero\Update\NASvc.exe
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\WINDOWS\system32\locator.exe (file missing)
O23 - Service: Realtek Audio Service (RtkAudioService) - Realtek Semiconductor - C:\Program Files\Realtek\Audio\HDA\RtkAudioService64.exe
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: SmdmF Service (SmdmFService) - Aztec Media Inc - C:\Program Files (x86)\Settings Manager\smdmf\SmdmFService.exe
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\WINDOWS\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\WINDOWS\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\WINDOWS\system32\sppsvc.exe (file missing)
O23 - Service: TEMPRO Service (TemproMonitoringService) - Toshiba Europe GmbH - C:\Program Files (x86)\Toshiba TEMPRO\TemproSvc.exe
O23 - Service: TMachInfo - TOSHIBA Corporation - C:\Program Files\TOSHIBA\TOSHIBA Service Station\TMachInfo.exe
O23 - Service: TOSHIBA Optical Disc Drive Service (TODDSrv) - Unknown owner - C:\Windows\system32\TODDSrv.exe (file missing)
O23 - Service: TOSHIBA eco Utility Service - TOSHIBA Corporation - C:\Program Files\TOSHIBA\Teco\TecoService.exe
O23 - Service: TPCH Service (TPCHSrv) - TOSHIBA Corporation - C:\Program Files\TOSHIBA\TPHM\TPCHSrv.exe
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\WINDOWS\system32\UI0Detect.exe (file missing)
O23 - Service: Intel(R) Management and Security Application User Notification Service (UNS) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\WINDOWS\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\WINDOWS\system32\vssvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\WINDOWS\system32\wbengine.exe (file missing)
O23 - Service: @%ProgramFiles%\Windows Defender\MpAsDesc.dll,-320 (WdNisSvc) - Unknown owner - C:\Program Files (x86)\Windows Defender\NisSrv.exe (file missing)
O23 - Service: @%ProgramFiles%\Windows Defender\MpAsDesc.dll,-310 (WinDefend) - Unknown owner - C:\Program Files (x86)\Windows Defender\MsMpEng.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\WINDOWS\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)

--
End of file - 9137 bytes

Re: Prosím o kontrolu

Napsal: 02 říj 2014 10:31
od memphisto
Stáhni si ATF Cleaner
Poklepej na ATF Cleaner.exe, klikni na select all found, poté:
-Když používáš Firefox (Mozzila), klikni na Firefox nahoře a vyber: Select All, poté klikni na Empty Selected.
-Když používáš Operu, klikni nahoře na Operu a vyber: Select All, poté klikni na Empty Selected.
Po vyčištění klikni na Exit k zavření programu.
ATF-Cleaner je jednoduchý nástroj na odstranìní historie z webového prohlížeče. Program dokáže odstranit cache, cookies, historii a další stopy po surfování na Internetu. Mezi podporované prohlížeče patří Internet Explorer, Firefox a Opera. Aplikace navíc umí odstranit doèasné soubory Windows, vysypat koš atd.
- Pokud používáš jen Google Chrome , tak ATF nemusíš použít.

Stáhni si TFC
Otevři soubor a zavři všechny ostatní okna, Klikni na Start k zahájení procesu. Program by neměl trvat dlouho.
Poté by se měl PC restartovat, pokud ne , proveď sám.

Stáhni AdwCleaner
Ulož si ho na svojí plochu
Ukonči všechny programy, okna a prohlížeče
Spusť program poklepáním a klikni na „Search“
Po skenu se objeví log (jinak je uložen systémovem disku jako AdwCleaner[R?].txt), jeho obsah sem celý vlož.


Stáhni si Malwarebytes' Anti-Malware
Nainstaluj a spusť ho
- na konci instalace se ujisti že máš zvoleny/zatrhnuty obě možnosti:
Update Malwarebytes' Anti-Malware (Aktualizace Malwarebytes' Anti-Malware) a Launch Malwarebytes' Anti-Malware (Spustit aplikaci Malwarebytes' Anti-Malware), pokud jo tak klikni na tlačítko Finish
- pokud bude nalezena aktualizace, tak se stáhne a nainstaluje
- program se po té spustí a nech vybranou možnost Perform Quick Scan (Provést rychlý sken) a klikni na tlačítko Scan (Skenovat)
- po probìhnutí programu se ti objeví hláška tak klikni na OK a pak na tlačítko Show Results
- pak zvol možnost Save Logfile a ulož si log na plochu
- po té klikni na tlačítko Exit, objeví se ti hláška tak zvol Ano
(zatím nic nemaž!).
Vlož sem pak obsah toho logu.

Re: Prosím o kontrolu

Napsal: 02 říj 2014 11:08
od kipon
Tady je ten ADWCleaner


# AdwCleaner v3.311 - Report created 02/10/2014 at 11:05:54
# Updated 30/09/2014 by Xplode
# Operating System : Windows 8.1 (64 bits)
# Username : Jakub - PC-KIPON
# Running from : C:\Users\Jakub\Desktop\adwcleaner_3.311.exe
# Option : Scan

***** [ Services ] *****

Service Found : F06DEFF2-5B9C-490D-910F-35D3A9119622
Service Found : SmdmFService

***** [ Files / Folders ] *****

File Found : C:\Program Files (x86)\Mozilla Firefox\browser\searchplugins\default-search.xml
File Found : C:\Users\Jakub\AppData\Roaming\Mozilla\Firefox\Profiles\voafjvsm.default\invalidprefs.js
File Found : C:\Users\Jakub\AppData\Roaming\Mozilla\Firefox\Profiles\voafjvsm.default\searchplugins\default-search.xml
File Found : C:\Users\Jakub\daemonprocess.txt
File Found : C:\Users\Public\Desktop\eBay.lnk
Folder Found : C:\Program Files (x86)\Linkey
Folder Found : C:\Program Files (x86)\SecretSauce
Folder Found : C:\Program Files (x86)\Settings Manager
Folder Found : C:\Program Files (x86)\TornTV.com
Folder Found : C:\ProgramData\smdmf
Folder Found : C:\ProgramData\systemk
Folder Found : C:\Users\Jakub\AppData\Local\genienext
Folder Found : C:\Users\Jakub\AppData\LocalLow\DataMngr
Folder Found : C:\Users\Jakub\AppData\Roaming\FirefoxToolbar
Folder Found : C:\Users\Jakub\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\TornTV.com
Folder Found : C:\Users\Jakub\AppData\Roaming\newnext.me
Folder Found : C:\Users\Jakub\AppData\Roaming\OpenCandy
Folder Found : C:\Users\Jakub\AppData\Roaming\Settings Manager

***** [ Scheduled Tasks ] *****


***** [ Shortcuts ] *****


***** [ Registry ] *****

Key Found : HKCU\Software\1ClickDownload
Key Found : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{9BB47C17-9C68-4BB3-B188-DD9AF0FD2476}
Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{0FFD0EF2-DBE9-483A-80C4-D2C331DA1CE4}
Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{0FFD0EF2-DBE9-483A-80C4-D2C331DA1CE4}
Key Found : HKCU\Software\Softonic
Key Found : HKCU\Software\SystemK
Key Found : [x64] HKCU\Software\1ClickDownload
Key Found : [x64] HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{9BB47C17-9C68-4BB3-B188-DD9AF0FD2476}
Key Found : [x64] HKCU\Software\Softonic
Key Found : [x64] HKCU\Software\SystemK
Key Found : HKLM\SOFTWARE\Classes\AppID\{C007DADD-132A-624C-088E-59EE6CF0711F}
Key Found : HKLM\SOFTWARE\Classes\CLSID\{1AA60054-57D9-4F99-9A55-D0FBFBE7ECD3}
Key Found : HKLM\SOFTWARE\Classes\CLSID\{4AA46D49-459F-4358-B4D1-169048547C23}
Key Found : HKLM\SOFTWARE\Classes\CLSID\{54739D49-AC03-4C57-9264-C5195596B3A1}
Key Found : HKLM\SOFTWARE\Google\Chrome\Extensions\dbpebffoameokfhnaaedmefjncfboino
Key Found : HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{9BB47C17-9C68-4BB3-B188-DD9AF0FD2476}
Key Found : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\bitguard.exe
Key Found : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\bitguard.exe
Key Found : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\bprotect.exe
Key Found : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\bprotect.exe
Key Found : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\bpsvc.exe
Key Found : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\browserdefender.exe
Key Found : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\browserdefender.exe
Key Found : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\browserprotect.exe
Key Found : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\browserprotect.exe
Key Found : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\browsersafeguard.exe
Key Found : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\dprotectsvc.exe
Key Found : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\jumpflip
Key Found : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\protectedsearch.exe
Key Found : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\searchinstaller.exe
Key Found : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\searchprotection.exe
Key Found : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\searchprotector.exe
Key Found : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\searchsettings.exe
Key Found : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\searchsettings64.exe
Key Found : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\snapdo.exe
Key Found : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\stinst32.exe
Key Found : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\stinst64.exe
Key Found : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\umbrella.exe
Key Found : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\utiljumpflip.exe
Key Found : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\volaro
Key Found : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\vonteera
Key Found : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\websteroids.exe
Key Found : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\websteroidsservice.exe
Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{90120000-00B2-0405-0000-0000000FF1CE}
Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Settings Manager
Key Found : HKLM\SOFTWARE\SmdmF
Key Found : HKLM\SOFTWARE\SystemK
Key Found : [x64] HKLM\SOFTWARE\Classes\CLSID\{4AA46D49-459F-4358-B4D1-169048547C23}
Key Found : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{9BB47C17-9C68-4BB3-B188-DD9AF0FD2476}
Value Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Run [NextLive]
Value Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run [mobilegeni daemon]
Value Found : HKLM\SYSTEM\ControlSet001\Control\Session Manager\AppCertDlls [x64]
Value Found : HKLM\SYSTEM\ControlSet001\Control\Session Manager\AppCertDlls [x86]
Value Found : HKLM\SYSTEM\CurrentControlSet\Control\Session Manager\AppCertDlls [x64]
Value Found : HKLM\SYSTEM\CurrentControlSet\Control\Session Manager\AppCertDlls [x86]

***** [ Browsers ] *****

-\\ Internet Explorer v11.0.9600.17278


-\\ Mozilla Firefox v32.0.3 (x86 cs)

[ File : C:\Users\Jakub\AppData\Roaming\Mozilla\Firefox\Profiles\voafjvsm.default\prefs.js ]


-\\ Google Chrome v

*************************

AdwCleaner[R0].txt - [6952 octets] - [02/10/2014 11:05:54]

########## EOF - C:\AdwCleaner\AdwCleaner[R0].txt - [7012 octets] ##########

Re: Prosím o kontrolu

Napsal: 02 říj 2014 11:33
od kipon
Tady je Malwarebytes:

Malwarebytes Anti-Malware
www.malwarebytes.org

Scan Date: 2. 10. 2014
Scan Time: 11:15:37
Logfile: log alwarebytes.txt
Administrator: Yes

Version: 2.00.2.1012
Malware Database: v2014.10.02.03
Rootkit Database: v2014.09.19.01
License: Trial
Malware Protection: Enabled
Malicious Website Protection: Enabled
Self-protection: Disabled

OS: Windows 8.1
CPU: x64
File System: NTFS
User: Jakub

Scan Type: Threat Scan
Result: Completed
Objects Scanned: 324565
Time Elapsed: 14 min, 39 sec

Memory: Enabled
Startup: Enabled
Filesystem: Enabled
Archives: Enabled
Rootkits: Disabled
Heuristics: Enabled
PUP: Enabled
PUM: Enabled

Processes: 2
PUP.Optional.SettingsManager.A, C:\Program Files (x86)\Settings Manager\smdmf\SmdmFService.exe, 1844, , [6d7ed936a8d4bc7a4922eebafe0359a7]
PUP.Optional.SettingsManager.A, C:\Program Files (x86)\Settings Manager\smdmf\SmdmFService.exe, 2024, , [6d7ed936a8d4bc7a4922eebafe0359a7]

Modules: 10
PUP.Optional.SettingsManager.A, C:\Program Files (x86)\Settings Manager\smdmf\smdmf.dll, , [ca213cd3b4c852e4b6b5c1e7ab56a45c],
PUP.Optional.SettingsManager.A, C:\Users\Jakub\AppData\Roaming\FirefoxToolbar\Settings Manager\smdmf\components\SmdmFHlpFF32.dll, , [29c269a6c6b6f3431b504a5ee81959a7],
PUP.Optional.SettingsManager.A, C:\Program Files (x86)\Settings Manager\smdmf\smdmfldr.dll, , [78731bf41c603afc0645f507bd454ab6],
PUP.Optional.SettingsManager.A, C:\Program Files (x86)\Settings Manager\smdmf\smdmfldr.dll, , [78731bf41c603afc0645f507bd454ab6],
PUP.Optional.SettingsManager.A, C:\Program Files (x86)\Settings Manager\smdmf\sysapcrt.dll, , [78731bf41c603afc0645f507bd454ab6],
PUP.Optional.SettingsManager.A, C:\Program Files (x86)\Settings Manager\smdmf\sysapcrt.dll, , [78731bf41c603afc0645f507bd454ab6],
PUP.Optional.SettingsManager.A, C:\Program Files (x86)\Settings Manager\smdmf\sysapcrt.dll, , [78731bf41c603afc0645f507bd454ab6],
PUP.Optional.SettingsManager.A, C:\Program Files (x86)\Settings Manager\smdmf\sysapcrt.dll, , [78731bf41c603afc0645f507bd454ab6],
PUP.Optional.SettingsManager.A, C:\Program Files (x86)\Settings Manager\smdmf\sysapcrt.dll, , [78731bf41c603afc0645f507bd454ab6],
PUP.Optional.SettingsManager.A, C:\Program Files (x86)\Settings Manager\smdmf\sysapcrt.dll, , [78731bf41c603afc0645f507bd454ab6],

Registry Keys: 15
PUP.Optional.SettingsManager.A, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\SmdmFService, , [6d7ed936a8d4bc7a4922eebafe0359a7],
PUP.Optional.BrowseFox.A, HKLM\SOFTWARE\CLASSES\CLSID\{4AA46D49-459F-4358-B4D1-169048547C23}, , [a645ce41bdbf3501a70aac20a55d7987],
PUP.Optional.BrowseFox.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{4AA46D49-459F-4358-B4D1-169048547C23}, , [a645ce41bdbf3501a70aac20a55d7987],
PUP.Optional.SecretSauce.A, HKU\S-1-5-21-1172351876-2203468645-2939403968-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\SETTINGS\{0FFD0EF2-DBE9-483A-80C4-D2C331DA1CE4}, , [a744010ec6b657df49eed8c1d0326f91],
PUP.Optional.SecretSauce.A, HKU\S-1-5-21-1172351876-2203468645-2939403968-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\STATS\{0FFD0EF2-DBE9-483A-80C4-D2C331DA1CE4}, , [a744010ec6b657df49eed8c1d0326f91],
PUP.Optional.SettingsManager.A, HKLM\SOFTWARE\WOW6432NODE\SmdmF, , [19d2709f3d3f88ae9d4a4fc3b053d52b],
PUP.Optional.SystemK.A, HKLM\SOFTWARE\WOW6432NODE\SystemK, , [17d413fc1b6192a4ca4b7f97f211f010],
PUP.Optional.SettingsManager.A, HKLM\SOFTWARE\WOW6432NODE\SYSTEMK\General, , [2bc0e6292755ab8bebe5280b976c7090],
PUP.Optional.1ClickDownload.A, HKU\S-1-5-21-1172351876-2203468645-2939403968-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\1ClickDownload, , [648787886319da5c7c161147d1332cd4],
PUP.Optional.SystemK.A, HKU\S-1-5-21-1172351876-2203468645-2939403968-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\SystemK, , [826921ee33491521679be63cf80b3ec2],
PUP.Optional.Softonic.A, HKU\S-1-5-21-1172351876-2203468645-2939403968-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\SOFTONIC\Universal Downloader, , [21caf21d3844f93d56cafa364eb539c7],
PUP.Optional.SettingsManager.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\Settings Manager, , [a249759a5725072fa23d8066e71bd927],
PUP.Optional.SettingsManager.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{54739D49-AC03-4C57-9264-C5195596B3A1}, , [78731bf41c603afc0645f507bd454ab6],
PUP.Optional.SettingsManager.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{E1842850-FB16-4471-B327-7343FBAED55C}, , [78731bf41c603afc0645f507bd454ab6],
PUP.Optional.SettingsManager.A, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\F06DEFF2-5B9C-490D-910F-35D3A9119622, , [78731bf41c603afc0645f507bd454ab6],

Registry Values: 4
PUP.Optional.NextLive.A, HKU\S-1-5-21-1172351876-2203468645-2939403968-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN|NextLive, C:\windows\SysWOW64\rundll32.exe "C:\Users\Jakub\AppData\Roaming\newnext.me\nengine.dll",EntryPoint -m l, , [896232dd1b616bcb7461f175629fa55b]
PUP.Optional.SettingsManager.A, HKLM\SOFTWARE\WOW6432NODE\SYSTEMK|browser, cr, , [fdeed03fc4b892a47061191a43c032ce]
PUP.Optional.SettingsManager, HKLM\SYSTEM\CURRENTCONTROLSET\CONTROL\SESSION MANAGER\APPCERTDLLS|x86, C:\Program Files (x86)\Settings Manager\smdmf\sysapcrt.dll, , [5398729dbebe40f6d9960a0c02017a86]
PUP.Optional.SettingsManager, HKLM\SYSTEM\CURRENTCONTROLSET\CONTROL\SESSION MANAGER\APPCERTDLLS|x64, C:\Program Files (x86)\Settings Manager\smdmf\x64\sysapcrt.dll, , [3ab178970e6ee650f679987e15eeff01]

Registry Data: 0
(No malicious items detected)

Folders: 21
PUP.Optional.SecretSauce.A, C:\Program Files (x86)\SecretSauce, , [c922010ec8b4ca6ca959ed7910f4669a],
PUP.Optional.OpenCandy, C:\Users\Jakub\AppData\Roaming\OpenCandy, , [76757e91fb819d9919e9f9e70df59070],
PUP.Optional.OpenCandy, C:\Users\Jakub\AppData\Roaming\OpenCandy\8FB80CB68BD148F9AF5CA415212B2B1E, , [76757e91fb819d9919e9f9e70df59070],
PUP.Optional.OpenCandy, C:\Users\Jakub\AppData\Roaming\OpenCandy\9A2E575EBFE64579AE367C5AFF4EF587, , [76757e91fb819d9919e9f9e70df59070],
PUP.Optional.NextLive.A, C:\Users\Jakub\AppData\Roaming\newnext.me, , [5e8d010ed7a59f97ecbc7170ca3823dd],
PUP.Optional.NextLive.A, C:\Users\Jakub\AppData\Roaming\newnext.me\cache, , [5e8d010ed7a59f97ecbc7170ca3823dd],
PUP.Optional.Datamngr.A, C:\Users\Jakub\AppData\LocalLow\DataMngr, , [2ebdcb440e6ea88e1d39618546bc03fd],
PUP.Optional.SettingsManager.A, C:\Program Files (x86)\Settings Manager\systemk, , [a249759a5725072fa23d8066e71bd927],
PUP.Optional.SettingsManager.A, C:\Program Files (x86)\Settings Manager\systemk\x64, , [a249759a5725072fa23d8066e71bd927],
PUP.Optional.TornTV.A, C:\Program Files (x86)\TornTV.com, , [806b719e2854989eb135776fc24006fa],
PUP.Optional.SystemK.A, C:\Users\Jakub\AppData\Roaming\Settings Manager\systemk, , [866522edc0bc52e4b34521d3d52da15f],
PUP.Optional.SystemK.A, C:\Users\Jakub\AppData\Roaming\Settings Manager\systemk\components, , [866522edc0bc52e4b34521d3d52da15f],
PUP.Optional.SystemK.A, C:\Users\Jakub\AppData\Roaming\Settings Manager\systemk\content, , [866522edc0bc52e4b34521d3d52da15f],
PUP.Optional.SettingsManager.A, C:\Program Files (x86)\Settings Manager\smdmf, , [78731bf41c603afc0645f507bd454ab6],
PUP.Optional.SettingsManager.A, C:\Program Files (x86)\Settings Manager\smdmf\x64, , [78731bf41c603afc0645f507bd454ab6],
PUP.Optional.SettingsManager.A, C:\ProgramData\smdmf, , [16d522ed384413237612a85908fba55b],
PUP.Optional.SettingsManager.A, C:\Users\Jakub\AppData\Roaming\FirefoxToolbar\Settings Manager, , [09e2c24db8c4e4523257c938c3405da3],
PUP.Optional.SettingsManager.A, C:\Users\Jakub\AppData\Roaming\FirefoxToolbar\Settings Manager\smdmf, , [09e2c24db8c4e4523257c938c3405da3],
PUP.Optional.SettingsManager.A, C:\Users\Jakub\AppData\Roaming\FirefoxToolbar\Settings Manager\smdmf\components, , [09e2c24db8c4e4523257c938c3405da3],
PUP.Optional.SettingsManager.A, C:\Users\Jakub\AppData\Roaming\FirefoxToolbar\Settings Manager\smdmf\content, , [09e2c24db8c4e4523257c938c3405da3],
PUP.Optional.TornTV.A, C:\Users\Jakub\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\TornTV.com, , [42a934dbcdafad89e40df117f90a827e],

Files: 148
PUP.Optional.SettingsManager.A, C:\Program Files (x86)\Settings Manager\smdmf\SmdmFService.exe, , [6d7ed936a8d4bc7a4922eebafe0359a7],
PUP.Optional.SettingsManager.A, C:\Program Files (x86)\Settings Manager\smdmf\smdmf.dll, , [ca213cd3b4c852e4b6b5c1e7ab56a45c],
PUP.Optional.SettingsManager.A, C:\Users\Jakub\AppData\Roaming\FirefoxToolbar\Settings Manager\smdmf\components\SmdmFHlpFF32.dll, , [29c269a6c6b6f3431b504a5ee81959a7],
PUP.Optional.NextLive.A, C:\Users\Jakub\AppData\Roaming\newnext.me\nengine.dll, , [896232dd1b616bcb7461f175629fa55b],
PUP.Optional.SecretSauce.A, C:\Program Files (x86)\SecretSauce\updateSecretSauce.exe, , [5a9142cda3d92d09dc5b1453be434eb2],
PUP.Optional.OpenCandy.A, C:\Users\Jakub\Downloads\Winamp-fullsetup.exe, , [07e4fe11fb81c96d4b52330f1be5d828],
PUP.Optional.OneClickDownloader.A, C:\Users\Jakub\Downloads\HDvid-codec-FF.exe, , [1dce22ed562678be9dc02afa45bc55ab],
PUP.Optional.NextLive.A, C:\Users\Jakub\AppData\Local\genienext\nengine.dll, , [4d9ebf50bebe85b129ac066004fda25e],
PUP.Optional.DefaultSearch.A, C:\Users\Jakub\AppData\Roaming\Mozilla\Firefox\Profiles\voafjvsm.default\searchplugins\default-search.xml, , [1ecde02fd1ab82b40cbd56dd2cd7738d],
PUP.Optional.DefaultSearch.A, C:\Program Files (x86)\Mozilla Firefox\browser\searchplugins\default-search.xml, , [5f8c26e9b9c31422953562d1e71cdf21],
PUP.Optional.SecretSauce.A, C:\Program Files (x86)\SecretSauce\SecretSauce.ico, , [c922010ec8b4ca6ca959ed7910f4669a],
PUP.Optional.SecretSauce.A, C:\Program Files (x86)\SecretSauce\dbpebffoameokfhnaaedmefjncfboino.crx, , [c922010ec8b4ca6ca959ed7910f4669a],
PUP.Optional.SecretSauce.A, C:\Program Files (x86)\SecretSauce\sqlite3.exe, , [c922010ec8b4ca6ca959ed7910f4669a],
PUP.Optional.OpenCandy, C:\Users\Jakub\AppData\Roaming\OpenCandy\8FB80CB68BD148F9AF5CA415212B2B1E\AVG-PC-TuneUp2014.exe, , [76757e91fb819d9919e9f9e70df59070],
PUP.Optional.OpenCandy, C:\Users\Jakub\AppData\Roaming\OpenCandy\9A2E575EBFE64579AE367C5AFF4EF587\chrometest3.html, , [76757e91fb819d9919e9f9e70df59070],
PUP.Optional.NextLive.A, C:\Users\Jakub\AppData\Roaming\newnext.me\nengine.cookie, , [5e8d010ed7a59f97ecbc7170ca3823dd],
PUP.Optional.NextLive.A, C:\Users\Jakub\AppData\Roaming\newnext.me\cache\spark.bin, , [5e8d010ed7a59f97ecbc7170ca3823dd],
PUP.Optional.Datamngr.A, C:\Users\Jakub\AppData\LocalLow\DataMngr\{99BB1406-1CFB-488C-90D1-2D978E04F707}64, , [2ebdcb440e6ea88e1d39618546bc03fd],
PUP.Optional.SettingsManager.A, C:\Program Files (x86)\Settings Manager\systemk\del_DM_LL_nsc40E.dll, , [a249759a5725072fa23d8066e71bd927],
PUP.Optional.SettingsManager.A, C:\Program Files (x86)\Settings Manager\systemk\favicon.ico, , [a249759a5725072fa23d8066e71bd927],
PUP.Optional.SettingsManager.A, C:\Program Files (x86)\Settings Manager\systemk\Helper.dll, , [a249759a5725072fa23d8066e71bd927],
PUP.Optional.SettingsManager.A, C:\Program Files (x86)\Settings Manager\systemk\Internet Explorer Settings.exe, , [a249759a5725072fa23d8066e71bd927],
PUP.Optional.SettingsManager.A, C:\Program Files (x86)\Settings Manager\systemk\OldCoordinator_nsp7B6F.exe, , [a249759a5725072fa23d8066e71bd927],
PUP.Optional.SettingsManager.A, C:\Program Files (x86)\Settings Manager\systemk\smdmf.dll, , [a249759a5725072fa23d8066e71bd927],
PUP.Optional.SettingsManager.A, C:\Program Files (x86)\Settings Manager\systemk\smdmfldr.dll, , [a249759a5725072fa23d8066e71bd927],
PUP.Optional.SettingsManager.A, C:\Program Files (x86)\Settings Manager\systemk\smdmfldr_u.dll, , [a249759a5725072fa23d8066e71bd927],
PUP.Optional.SettingsManager.A, C:\Program Files (x86)\Settings Manager\systemk\sysapcrt.dll, , [a249759a5725072fa23d8066e71bd927],
PUP.Optional.SettingsManager.A, C:\Program Files (x86)\Settings Manager\systemk\syskldr.dll, , [a249759a5725072fa23d8066e71bd927],
PUP.Optional.SettingsManager.A, C:\Program Files (x86)\Settings Manager\systemk\systemk.dll, , [a249759a5725072fa23d8066e71bd927],
PUP.Optional.SettingsManager.A, C:\Program Files (x86)\Settings Manager\systemk\systemkbho.dll, , [a249759a5725072fa23d8066e71bd927],
PUP.Optional.SettingsManager.A, C:\Program Files (x86)\Settings Manager\systemk\systemkmgrc2.cfg, , [a249759a5725072fa23d8066e71bd927],
PUP.Optional.SettingsManager.A, C:\Program Files (x86)\Settings Manager\systemk\systemku.exe, , [a249759a5725072fa23d8066e71bd927],
PUP.Optional.SettingsManager.A, C:\Program Files (x86)\Settings Manager\systemk\tbicon.exe, , [a249759a5725072fa23d8066e71bd927],
PUP.Optional.SettingsManager.A, C:\Program Files (x86)\Settings Manager\systemk\Uninstall.exe, , [a249759a5725072fa23d8066e71bd927],
PUP.Optional.SettingsManager.A, C:\Program Files (x86)\Settings Manager\systemk\x64\del_DM_LL_nsc40E.dll, , [a249759a5725072fa23d8066e71bd927],
PUP.Optional.SettingsManager.A, C:\Program Files (x86)\Settings Manager\systemk\x64\Internet Explorer Settings.exe, , [a249759a5725072fa23d8066e71bd927],
PUP.Optional.SettingsManager.A, C:\Program Files (x86)\Settings Manager\systemk\x64\smdmf.dll, , [a249759a5725072fa23d8066e71bd927],
PUP.Optional.SettingsManager.A, C:\Program Files (x86)\Settings Manager\systemk\x64\smdmfldr.dll, , [a249759a5725072fa23d8066e71bd927],
PUP.Optional.SettingsManager.A, C:\Program Files (x86)\Settings Manager\systemk\x64\smdmfldr_u.dll, , [a249759a5725072fa23d8066e71bd927],
PUP.Optional.SettingsManager.A, C:\Program Files (x86)\Settings Manager\systemk\x64\sysapcrt.dll, , [a249759a5725072fa23d8066e71bd927],
PUP.Optional.SettingsManager.A, C:\Program Files (x86)\Settings Manager\systemk\x64\systemkbho.dll, , [a249759a5725072fa23d8066e71bd927],
PUP.Optional.SettingsManager.A, C:\Program Files (x86)\Settings Manager\systemk\x64\systemkmgrc2.cfg, , [a249759a5725072fa23d8066e71bd927],
PUP.Optional.SystemK.A, C:\Users\Jakub\AppData\Roaming\Settings Manager\systemk\chrome.manifest, , [866522edc0bc52e4b34521d3d52da15f],
PUP.Optional.SystemK.A, C:\Users\Jakub\AppData\Roaming\Settings Manager\systemk\install.rdf, , [866522edc0bc52e4b34521d3d52da15f],
PUP.Optional.SystemK.A, C:\Users\Jakub\AppData\Roaming\Settings Manager\systemk\components\SystemKHlpFF14.dll, , [866522edc0bc52e4b34521d3d52da15f],
PUP.Optional.SystemK.A, C:\Users\Jakub\AppData\Roaming\Settings Manager\systemk\components\SystemKHlpFF.xpt, , [866522edc0bc52e4b34521d3d52da15f],
PUP.Optional.SystemK.A, C:\Users\Jakub\AppData\Roaming\Settings Manager\systemk\components\SystemKHlpFF10.dll, , [866522edc0bc52e4b34521d3d52da15f],
PUP.Optional.SystemK.A, C:\Users\Jakub\AppData\Roaming\Settings Manager\systemk\components\SystemKHlpFF11.dll, , [866522edc0bc52e4b34521d3d52da15f],
PUP.Optional.SystemK.A, C:\Users\Jakub\AppData\Roaming\Settings Manager\systemk\components\SystemKHlpFF12.dll, , [866522edc0bc52e4b34521d3d52da15f],
PUP.Optional.SystemK.A, C:\Users\Jakub\AppData\Roaming\Settings Manager\systemk\components\SystemKHlpFF13.dll, , [866522edc0bc52e4b34521d3d52da15f],
PUP.Optional.SystemK.A, C:\Users\Jakub\AppData\Roaming\Settings Manager\systemk\components\SystemKHlpFF15.dll, , [866522edc0bc52e4b34521d3d52da15f],
PUP.Optional.SystemK.A, C:\Users\Jakub\AppData\Roaming\Settings Manager\systemk\components\SystemKHlpFF16.dll, , [866522edc0bc52e4b34521d3d52da15f],
PUP.Optional.SystemK.A, C:\Users\Jakub\AppData\Roaming\Settings Manager\systemk\components\SystemKHlpFF17.dll, , [866522edc0bc52e4b34521d3d52da15f],
PUP.Optional.SystemK.A, C:\Users\Jakub\AppData\Roaming\Settings Manager\systemk\components\SystemKHlpFF18.dll, , [866522edc0bc52e4b34521d3d52da15f],
PUP.Optional.SystemK.A, C:\Users\Jakub\AppData\Roaming\Settings Manager\systemk\components\SystemKHlpFF19.dll, , [866522edc0bc52e4b34521d3d52da15f],
PUP.Optional.SystemK.A, C:\Users\Jakub\AppData\Roaming\Settings Manager\systemk\components\SystemKHlpFF2.dll, , [866522edc0bc52e4b34521d3d52da15f],
PUP.Optional.SystemK.A, C:\Users\Jakub\AppData\Roaming\Settings Manager\systemk\components\SystemKHlpFF20.dll, , [866522edc0bc52e4b34521d3d52da15f],
PUP.Optional.SystemK.A, C:\Users\Jakub\AppData\Roaming\Settings Manager\systemk\components\SystemKHlpFF21.dll, , [866522edc0bc52e4b34521d3d52da15f],
PUP.Optional.SystemK.A, C:\Users\Jakub\AppData\Roaming\Settings Manager\systemk\components\SystemKHlpFF22.dll, , [866522edc0bc52e4b34521d3d52da15f],
PUP.Optional.SystemK.A, C:\Users\Jakub\AppData\Roaming\Settings Manager\systemk\components\SystemKHlpFF23.dll, , [866522edc0bc52e4b34521d3d52da15f],
PUP.Optional.SystemK.A, C:\Users\Jakub\AppData\Roaming\Settings Manager\systemk\components\SystemKHlpFF24.dll, , [866522edc0bc52e4b34521d3d52da15f],
PUP.Optional.SystemK.A, C:\Users\Jakub\AppData\Roaming\Settings Manager\systemk\components\SystemKHlpFF25.dll, , [866522edc0bc52e4b34521d3d52da15f],
PUP.Optional.SystemK.A, C:\Users\Jakub\AppData\Roaming\Settings Manager\systemk\components\SystemKHlpFF26.dll, , [866522edc0bc52e4b34521d3d52da15f],
PUP.Optional.SystemK.A, C:\Users\Jakub\AppData\Roaming\Settings Manager\systemk\components\SystemKHlpFF27.dll, , [866522edc0bc52e4b34521d3d52da15f],
PUP.Optional.SystemK.A, C:\Users\Jakub\AppData\Roaming\Settings Manager\systemk\components\SystemKHlpFF28.dll, , [866522edc0bc52e4b34521d3d52da15f],
PUP.Optional.SystemK.A, C:\Users\Jakub\AppData\Roaming\Settings Manager\systemk\components\SystemKHlpFF29.dll, , [866522edc0bc52e4b34521d3d52da15f],
PUP.Optional.SystemK.A, C:\Users\Jakub\AppData\Roaming\Settings Manager\systemk\components\SystemKHlpFF30.dll, , [866522edc0bc52e4b34521d3d52da15f],
PUP.Optional.SystemK.A, C:\Users\Jakub\AppData\Roaming\Settings Manager\systemk\components\SystemKHlpFF4.dll, , [866522edc0bc52e4b34521d3d52da15f],
PUP.Optional.SystemK.A, C:\Users\Jakub\AppData\Roaming\Settings Manager\systemk\components\SystemKHlpFF5.dll, , [866522edc0bc52e4b34521d3d52da15f],
PUP.Optional.SystemK.A, C:\Users\Jakub\AppData\Roaming\Settings Manager\systemk\components\SystemKHlpFF6.dll, , [866522edc0bc52e4b34521d3d52da15f],
PUP.Optional.SystemK.A, C:\Users\Jakub\AppData\Roaming\Settings Manager\systemk\components\SystemKHlpFF7.dll, , [866522edc0bc52e4b34521d3d52da15f],
PUP.Optional.SystemK.A, C:\Users\Jakub\AppData\Roaming\Settings Manager\systemk\components\SystemKHlpFF8.dll, , [866522edc0bc52e4b34521d3d52da15f],
PUP.Optional.SystemK.A, C:\Users\Jakub\AppData\Roaming\Settings Manager\systemk\components\SystemKHlpFF9.dll, , [866522edc0bc52e4b34521d3d52da15f],
PUP.Optional.SystemK.A, C:\Users\Jakub\AppData\Roaming\Settings Manager\systemk\content\DnsBHO.js, , [866522edc0bc52e4b34521d3d52da15f],
PUP.Optional.SystemK.A, C:\Users\Jakub\AppData\Roaming\Settings Manager\systemk\content\Error404BHO.js, , [866522edc0bc52e4b34521d3d52da15f],
PUP.Optional.SystemK.A, C:\Users\Jakub\AppData\Roaming\Settings Manager\systemk\content\MainBHO.js, , [866522edc0bc52e4b34521d3d52da15f],
PUP.Optional.SystemK.A, C:\Users\Jakub\AppData\Roaming\Settings Manager\systemk\content\NativeHelper.js, , [866522edc0bc52e4b34521d3d52da15f],
PUP.Optional.SystemK.A, C:\Users\Jakub\AppData\Roaming\Settings Manager\systemk\content\NewTabBHO.js, , [866522edc0bc52e4b34521d3d52da15f],
PUP.Optional.SystemK.A, C:\Users\Jakub\AppData\Roaming\Settings Manager\systemk\content\overlay.js, , [866522edc0bc52e4b34521d3d52da15f],
PUP.Optional.SystemK.A, C:\Users\Jakub\AppData\Roaming\Settings Manager\systemk\content\overlay.xul, , [866522edc0bc52e4b34521d3d52da15f],
PUP.Optional.SystemK.A, C:\Users\Jakub\AppData\Roaming\Settings Manager\systemk\content\RelatedSearch.js, , [866522edc0bc52e4b34521d3d52da15f],
PUP.Optional.SystemK.A, C:\Users\Jakub\AppData\Roaming\Settings Manager\systemk\content\RequestPreserver.js, , [866522edc0bc52e4b34521d3d52da15f],
PUP.Optional.SystemK.A, C:\Users\Jakub\AppData\Roaming\Settings Manager\systemk\content\SearchBHO.js, , [866522edc0bc52e4b34521d3d52da15f],
PUP.Optional.SystemK.A, C:\Users\Jakub\AppData\Roaming\Settings Manager\systemk\content\SettingManager.js, , [866522edc0bc52e4b34521d3d52da15f],
PUP.Optional.SettingsManager.A, C:\Program Files (x86)\Settings Manager\smdmf\favicon.ico, , [78731bf41c603afc0645f507bd454ab6],
PUP.Optional.SettingsManager.A, C:\Program Files (x86)\Settings Manager\smdmf\Helper.dll, , [78731bf41c603afc0645f507bd454ab6],
PUP.Optional.SettingsManager.A, C:\Program Files (x86)\Settings Manager\smdmf\Internet Explorer Settings.exe, , [78731bf41c603afc0645f507bd454ab6],
PUP.Optional.SettingsManager.A, C:\Program Files (x86)\Settings Manager\smdmf\smdmfbho.dll, , [78731bf41c603afc0645f507bd454ab6],
PUP.Optional.SettingsManager.A, C:\Program Files (x86)\Settings Manager\smdmf\smdmfldr.dll, , [78731bf41c603afc0645f507bd454ab6],
PUP.Optional.SettingsManager.A, C:\Program Files (x86)\Settings Manager\smdmf\smdmfldr_u.dll, , [78731bf41c603afc0645f507bd454ab6],
PUP.Optional.SettingsManager.A, C:\Program Files (x86)\Settings Manager\smdmf\smdmfmgrc2.cfg, , [78731bf41c603afc0645f507bd454ab6],
PUP.Optional.SettingsManager.A, C:\Program Files (x86)\Settings Manager\smdmf\smdmfu.exe, , [78731bf41c603afc0645f507bd454ab6],
PUP.Optional.SettingsManager.A, C:\Program Files (x86)\Settings Manager\smdmf\sysapcrt.dll, , [78731bf41c603afc0645f507bd454ab6],
PUP.Optional.SettingsManager.A, C:\Program Files (x86)\Settings Manager\smdmf\tbicon.exe, , [78731bf41c603afc0645f507bd454ab6],
PUP.Optional.SettingsManager.A, C:\Program Files (x86)\Settings Manager\smdmf\Uninstall.exe, , [78731bf41c603afc0645f507bd454ab6],
PUP.Optional.SettingsManager.A, C:\Program Files (x86)\Settings Manager\smdmf\x64\Internet Explorer Settings.exe, , [78731bf41c603afc0645f507bd454ab6],
PUP.Optional.SettingsManager.A, C:\Program Files (x86)\Settings Manager\smdmf\x64\smdmf.dll, , [78731bf41c603afc0645f507bd454ab6],
PUP.Optional.SettingsManager.A, C:\Program Files (x86)\Settings Manager\smdmf\x64\smdmfbho.dll, , [78731bf41c603afc0645f507bd454ab6],
PUP.Optional.SettingsManager.A, C:\Program Files (x86)\Settings Manager\smdmf\x64\smdmfldr.dll, , [78731bf41c603afc0645f507bd454ab6],
PUP.Optional.SettingsManager.A, C:\Program Files (x86)\Settings Manager\smdmf\x64\smdmfldr_u.dll, , [78731bf41c603afc0645f507bd454ab6],
PUP.Optional.SettingsManager.A, C:\Program Files (x86)\Settings Manager\smdmf\x64\smdmfmgrc2.cfg, , [78731bf41c603afc0645f507bd454ab6],
PUP.Optional.SettingsManager.A, C:\Program Files (x86)\Settings Manager\smdmf\x64\sysapcrt.dll, , [78731bf41c603afc0645f507bd454ab6],
PUP.Optional.SettingsManager.A, C:\ProgramData\smdmf\coordinator.cfg, , [16d522ed384413237612a85908fba55b],
PUP.Optional.SettingsManager.A, C:\ProgramData\smdmf\general.cfg, , [16d522ed384413237612a85908fba55b],
PUP.Optional.SettingsManager.A, C:\ProgramData\smdmf\S-1-5-21-1172351876-2203468645-2939403968-1001.cfg, , [16d522ed384413237612a85908fba55b],
PUP.Optional.SettingsManager.A, C:\Users\Jakub\AppData\Roaming\FirefoxToolbar\Settings Manager\smdmf\chrome.manifest, , [09e2c24db8c4e4523257c938c3405da3],
PUP.Optional.SettingsManager.A, C:\Users\Jakub\AppData\Roaming\FirefoxToolbar\Settings Manager\smdmf\install.rdf, , [09e2c24db8c4e4523257c938c3405da3],
PUP.Optional.SettingsManager.A, C:\Users\Jakub\AppData\Roaming\FirefoxToolbar\Settings Manager\smdmf\components\SmdmFHlpFF15.dll, , [09e2c24db8c4e4523257c938c3405da3],
PUP.Optional.SettingsManager.A, C:\Users\Jakub\AppData\Roaming\FirefoxToolbar\Settings Manager\smdmf\components\SmdmFHlpFF.xpt, , [09e2c24db8c4e4523257c938c3405da3],
PUP.Optional.SettingsManager.A, C:\Users\Jakub\AppData\Roaming\FirefoxToolbar\Settings Manager\smdmf\components\SmdmFHlpFF10.dll, , [09e2c24db8c4e4523257c938c3405da3],
PUP.Optional.SettingsManager.A, C:\Users\Jakub\AppData\Roaming\FirefoxToolbar\Settings Manager\smdmf\components\SmdmFHlpFF11.dll, , [09e2c24db8c4e4523257c938c3405da3],
PUP.Optional.SettingsManager.A, C:\Users\Jakub\AppData\Roaming\FirefoxToolbar\Settings Manager\smdmf\components\SmdmFHlpFF12.dll, , [09e2c24db8c4e4523257c938c3405da3],
PUP.Optional.SettingsManager.A, C:\Users\Jakub\AppData\Roaming\FirefoxToolbar\Settings Manager\smdmf\components\SmdmFHlpFF13.dll, , [09e2c24db8c4e4523257c938c3405da3],
PUP.Optional.SettingsManager.A, C:\Users\Jakub\AppData\Roaming\FirefoxToolbar\Settings Manager\smdmf\components\SmdmFHlpFF14.dll, , [09e2c24db8c4e4523257c938c3405da3],
PUP.Optional.SettingsManager.A, C:\Users\Jakub\AppData\Roaming\FirefoxToolbar\Settings Manager\smdmf\components\SmdmFHlpFF16.dll, , [09e2c24db8c4e4523257c938c3405da3],
PUP.Optional.SettingsManager.A, C:\Users\Jakub\AppData\Roaming\FirefoxToolbar\Settings Manager\smdmf\components\SmdmFHlpFF17.dll, , [09e2c24db8c4e4523257c938c3405da3],
PUP.Optional.SettingsManager.A, C:\Users\Jakub\AppData\Roaming\FirefoxToolbar\Settings Manager\smdmf\components\SmdmFHlpFF18.dll, , [09e2c24db8c4e4523257c938c3405da3],
PUP.Optional.SettingsManager.A, C:\Users\Jakub\AppData\Roaming\FirefoxToolbar\Settings Manager\smdmf\components\SmdmFHlpFF19.dll, , [09e2c24db8c4e4523257c938c3405da3],
PUP.Optional.SettingsManager.A, C:\Users\Jakub\AppData\Roaming\FirefoxToolbar\Settings Manager\smdmf\components\SmdmFHlpFF2.dll, , [09e2c24db8c4e4523257c938c3405da3],
PUP.Optional.SettingsManager.A, C:\Users\Jakub\AppData\Roaming\FirefoxToolbar\Settings Manager\smdmf\components\SmdmFHlpFF20.dll, , [09e2c24db8c4e4523257c938c3405da3],
PUP.Optional.SettingsManager.A, C:\Users\Jakub\AppData\Roaming\FirefoxToolbar\Settings Manager\smdmf\components\SmdmFHlpFF21.dll, , [09e2c24db8c4e4523257c938c3405da3],
PUP.Optional.SettingsManager.A, C:\Users\Jakub\AppData\Roaming\FirefoxToolbar\Settings Manager\smdmf\components\SmdmFHlpFF22.dll, , [09e2c24db8c4e4523257c938c3405da3],
PUP.Optional.SettingsManager.A, C:\Users\Jakub\AppData\Roaming\FirefoxToolbar\Settings Manager\smdmf\components\SmdmFHlpFF23.dll, , [09e2c24db8c4e4523257c938c3405da3],
PUP.Optional.SettingsManager.A, C:\Users\Jakub\AppData\Roaming\FirefoxToolbar\Settings Manager\smdmf\components\SmdmFHlpFF24.dll, , [09e2c24db8c4e4523257c938c3405da3],
PUP.Optional.SettingsManager.A, C:\Users\Jakub\AppData\Roaming\FirefoxToolbar\Settings Manager\smdmf\components\SmdmFHlpFF25.dll, , [09e2c24db8c4e4523257c938c3405da3],
PUP.Optional.SettingsManager.A, C:\Users\Jakub\AppData\Roaming\FirefoxToolbar\Settings Manager\smdmf\components\SmdmFHlpFF26.dll, , [09e2c24db8c4e4523257c938c3405da3],
PUP.Optional.SettingsManager.A, C:\Users\Jakub\AppData\Roaming\FirefoxToolbar\Settings Manager\smdmf\components\SmdmFHlpFF27.dll, , [09e2c24db8c4e4523257c938c3405da3],
PUP.Optional.SettingsManager.A, C:\Users\Jakub\AppData\Roaming\FirefoxToolbar\Settings Manager\smdmf\components\SmdmFHlpFF28.dll, , [09e2c24db8c4e4523257c938c3405da3],
PUP.Optional.SettingsManager.A, C:\Users\Jakub\AppData\Roaming\FirefoxToolbar\Settings Manager\smdmf\components\SmdmFHlpFF29.dll, , [09e2c24db8c4e4523257c938c3405da3],
PUP.Optional.SettingsManager.A, C:\Users\Jakub\AppData\Roaming\FirefoxToolbar\Settings Manager\smdmf\components\SmdmFHlpFF30.dll, , [09e2c24db8c4e4523257c938c3405da3],
PUP.Optional.SettingsManager.A, C:\Users\Jakub\AppData\Roaming\FirefoxToolbar\Settings Manager\smdmf\components\SmdmFHlpFF31.dll, , [09e2c24db8c4e4523257c938c3405da3],
PUP.Optional.SettingsManager.A, C:\Users\Jakub\AppData\Roaming\FirefoxToolbar\Settings Manager\smdmf\components\SmdmFHlpFF4.dll, , [09e2c24db8c4e4523257c938c3405da3],
PUP.Optional.SettingsManager.A, C:\Users\Jakub\AppData\Roaming\FirefoxToolbar\Settings Manager\smdmf\components\SmdmFHlpFF5.dll, , [09e2c24db8c4e4523257c938c3405da3],
PUP.Optional.SettingsManager.A, C:\Users\Jakub\AppData\Roaming\FirefoxToolbar\Settings Manager\smdmf\components\SmdmFHlpFF6.dll, , [09e2c24db8c4e4523257c938c3405da3],
PUP.Optional.SettingsManager.A, C:\Users\Jakub\AppData\Roaming\FirefoxToolbar\Settings Manager\smdmf\components\SmdmFHlpFF7.dll, , [09e2c24db8c4e4523257c938c3405da3],
PUP.Optional.SettingsManager.A, C:\Users\Jakub\AppData\Roaming\FirefoxToolbar\Settings Manager\smdmf\components\SmdmFHlpFF8.dll, , [09e2c24db8c4e4523257c938c3405da3],
PUP.Optional.SettingsManager.A, C:\Users\Jakub\AppData\Roaming\FirefoxToolbar\Settings Manager\smdmf\components\SmdmFHlpFF9.dll, , [09e2c24db8c4e4523257c938c3405da3],
PUP.Optional.SettingsManager.A, C:\Users\Jakub\AppData\Roaming\FirefoxToolbar\Settings Manager\smdmf\content\DnsBHO.js, , [09e2c24db8c4e4523257c938c3405da3],
PUP.Optional.SettingsManager.A, C:\Users\Jakub\AppData\Roaming\FirefoxToolbar\Settings Manager\smdmf\content\Error404BHO.js, , [09e2c24db8c4e4523257c938c3405da3],
PUP.Optional.SettingsManager.A, C:\Users\Jakub\AppData\Roaming\FirefoxToolbar\Settings Manager\smdmf\content\MainBHO.js, , [09e2c24db8c4e4523257c938c3405da3],
PUP.Optional.SettingsManager.A, C:\Users\Jakub\AppData\Roaming\FirefoxToolbar\Settings Manager\smdmf\content\NativeHelper.js, , [09e2c24db8c4e4523257c938c3405da3],
PUP.Optional.SettingsManager.A, C:\Users\Jakub\AppData\Roaming\FirefoxToolbar\Settings Manager\smdmf\content\NewTabBHO.js, , [09e2c24db8c4e4523257c938c3405da3],
PUP.Optional.SettingsManager.A, C:\Users\Jakub\AppData\Roaming\FirefoxToolbar\Settings Manager\smdmf\content\overlay.js, , [09e2c24db8c4e4523257c938c3405da3],
PUP.Optional.SettingsManager.A, C:\Users\Jakub\AppData\Roaming\FirefoxToolbar\Settings Manager\smdmf\content\overlay.xul, , [09e2c24db8c4e4523257c938c3405da3],
PUP.Optional.SettingsManager.A, C:\Users\Jakub\AppData\Roaming\FirefoxToolbar\Settings Manager\smdmf\content\RelatedSearch.js, , [09e2c24db8c4e4523257c938c3405da3],
PUP.Optional.SettingsManager.A, C:\Users\Jakub\AppData\Roaming\FirefoxToolbar\Settings Manager\smdmf\content\RequestPreserver.js, , [09e2c24db8c4e4523257c938c3405da3],
PUP.Optional.SettingsManager.A, C:\Users\Jakub\AppData\Roaming\FirefoxToolbar\Settings Manager\smdmf\content\SearchBHO.js, , [09e2c24db8c4e4523257c938c3405da3],
PUP.Optional.SettingsManager.A, C:\Users\Jakub\AppData\Roaming\FirefoxToolbar\Settings Manager\smdmf\content\SettingManager.js, , [09e2c24db8c4e4523257c938c3405da3],

Physical Sectors: 0
(No malicious items detected)


(end)

Re: Prosím o kontrolu

Napsal: 02 říj 2014 16:26
od memphisto
V Mbam i adw nech vše smazat a dodej logy po smazání

Stáhni si RogueKiller
32bit.:
http://www.sur-la-toile.com/RogueKiller/RogueKiller.exe
64bit.:
http://www.sur-la-toile.com/RogueKiller ... lerX64.exe
na svojí plochu.
- Zavři všechny ostatní programy a prohlížeče.
- Pro OS Vista a win7 spusť program RogueKiller.exe jako správce , u XP poklepáním.
- počkej až skončí Prescan -vyhledávání škodlivých procesů.
- Zkontroluj , zda máš zaškrtnuto:
Kontrola MBR
Kontrola Faked
Antirootkit
-Potom klikni na „Prohledat“.
- Program skenuje procesy PC. Po proskenování klikni na „Zpráva“celý obsah logu sem zkopíruj.
Pokud je program blokován , zkus ho spustit několikrát. Pokud dále program nepůjde spustit a pracovat, přejmenuj ho na winlogon.exe.

Stáhni si Junkware Removal Tool

na svojí plochu.
Deaktivuj si svůj antivirový program.
Pravým tl. myši klikni na JRT.exe a vyber „spustit jako správce“. Pro pokračování budeš vyzván ke stisknutí jakékoliv klávesy. Na nějakou klikni.
Začne skenování programu. Skenování může trvat dloho , podle množství nákaz. Po ukončení skenu se objeví log (JRT.txt) , který se uloží na ploše.
Zkopíruj sem prosím celý jeho obsah.

Re: Prosím o kontrolu

Napsal: 02 říj 2014 20:58
od kipon
# AdwCleaner v3.311 - Report created 02/10/2014 at 20:55:15
# Updated 30/09/2014 by Xplode
# Operating System : Windows 8.1 (64 bits)
# Username : Jakub - PC-KIPON
# Running from : C:\Users\Jakub\Desktop\adwcleaner_3.311.exe
# Option : Clean

***** [ Services ] *****

[#] Service Deleted : F06DEFF2-5B9C-490D-910F-35D3A9119622
[#] Service Deleted : SmdmFService

***** [ Files / Folders ] *****

Folder Deleted : C:\ProgramData\smdmf
Folder Deleted : C:\ProgramData\systemk
Folder Deleted : C:\Program Files (x86)\Linkey
Folder Deleted : C:\Program Files (x86)\SecretSauce
Folder Deleted : C:\Program Files (x86)\Settings Manager
Folder Deleted : C:\Program Files (x86)\TornTV.com
Folder Deleted : C:\Users\Jakub\AppData\Local\genienext
Folder Deleted : C:\Users\Jakub\AppData\LocalLow\DataMngr
Folder Deleted : C:\Users\Jakub\AppData\Roaming\FirefoxToolbar
Folder Deleted : C:\Users\Jakub\AppData\Roaming\newnext.me
Folder Deleted : C:\Users\Jakub\AppData\Roaming\OpenCandy
Folder Deleted : C:\Users\Jakub\AppData\Roaming\Settings Manager
Folder Deleted : C:\Users\Jakub\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\TornTV.com
File Deleted : C:\Users\Public\Desktop\eBay.lnk
File Deleted : C:\Users\Jakub\daemonprocess.txt
File Deleted : C:\Users\Jakub\AppData\Roaming\Mozilla\Firefox\Profiles\voafjvsm.default\invalidprefs.js
File Deleted : C:\Users\Jakub\AppData\Roaming\Mozilla\Firefox\Profiles\voafjvsm.default\searchplugins\default-search.xml
File Deleted : C:\Program Files (x86)\Mozilla Firefox\browser\searchplugins\default-search.xml

***** [ Scheduled Tasks ] *****


***** [ Shortcuts ] *****


***** [ Registry ] *****

Key Deleted : HKLM\SOFTWARE\Google\Chrome\Extensions\dbpebffoameokfhnaaedmefjncfboino
Value Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Run [NextLive]
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\bitguard.exe
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\bprotect.exe
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\browserdefender.exe
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\browserprotect.exe
Value Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run [mobilegeni daemon]
Value Deleted : HKLM\SYSTEM\ControlSet001\Control\Session Manager\AppCertDlls [x64]
Value Deleted : HKLM\SYSTEM\ControlSet001\Control\Session Manager\AppCertDlls [x86]
Key Deleted : HKLM\SOFTWARE\Classes\AppID\{C007DADD-132A-624C-088E-59EE6CF0711F}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{1AA60054-57D9-4F99-9A55-D0FBFBE7ECD3}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{4AA46D49-459F-4358-B4D1-169048547C23}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{54739D49-AC03-4C57-9264-C5195596B3A1}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{0FFD0EF2-DBE9-483A-80C4-D2C331DA1CE4}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{0FFD0EF2-DBE9-483A-80C4-D2C331DA1CE4}
Key Deleted : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{9BB47C17-9C68-4BB3-B188-DD9AF0FD2476}
Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{9BB47C17-9C68-4BB3-B188-DD9AF0FD2476}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\CLSID\{4AA46D49-459F-4358-B4D1-169048547C23}
Key Deleted : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{9BB47C17-9C68-4BB3-B188-DD9AF0FD2476}
Key Deleted : HKCU\Software\1ClickDownload
Key Deleted : HKCU\Software\Softonic
Key Deleted : HKCU\Software\SystemK
Key Deleted : HKLM\SOFTWARE\SmdmF
Key Deleted : HKLM\SOFTWARE\SystemK
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Settings Manager
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{90120000-00B2-0405-0000-0000000FF1CE}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\bpsvc.exe
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\browsersafeguard.exe
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\dprotectsvc.exe
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\jumpflip
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\protectedsearch.exe
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\searchinstaller.exe
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\searchprotection.exe
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\searchprotector.exe
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\searchsettings.exe
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\searchsettings64.exe
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\snapdo.exe
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\stinst32.exe
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\stinst64.exe
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\umbrella.exe
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\utiljumpflip.exe
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\volaro
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\vonteera
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\websteroids.exe
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\websteroidsservice.exe

***** [ Browsers ] *****

-\\ Internet Explorer v11.0.9600.17278


-\\ Mozilla Firefox v32.0.3 (x86 cs)

[ File : C:\Users\Jakub\AppData\Roaming\Mozilla\Firefox\Profiles\voafjvsm.default\prefs.js ]


-\\ Google Chrome v

*************************

AdwCleaner[R0].txt - [7116 octets] - [02/10/2014 11:05:54]
AdwCleaner[R1].txt - [7176 octets] - [02/10/2014 20:53:31]
AdwCleaner[S0].txt - [6376 octets] - [02/10/2014 20:55:15]

########## EOF - C:\AdwCleaner\AdwCleaner[S0].txt - [6436 octets]

Re: Prosím o kontrolu

Napsal: 02 říj 2014 21:05
od kipon
Malwarebytes Anti-Malware
www.malwarebytes.org

Scan Date: 2. 10. 2014
Scan Time: 20:59:44
Logfile: večer.txt
Administrator: Yes

Version: 2.00.2.1012
Malware Database: v2014.10.02.07
Rootkit Database: v2014.09.19.01
License: Trial
Malware Protection: Enabled
Malicious Website Protection: Enabled
Self-protection: Disabled

OS: Windows 8.1
CPU: x64
File System: NTFS
User: Jakub

Scan Type: Hyper Scan
Result: Completed
Objects Scanned: 274087
Time Elapsed: 4 min, 45 sec

Memory: Enabled
Startup: Enabled
Filesystem: Disabled
Archives: Enabled
Rootkits: Disabled
Heuristics: Enabled
PUP: Enabled
PUM: Enabled

Processes: 0
(No malicious items detected)

Modules: 0
(No malicious items detected)

Registry Keys: 0
(No malicious items detected)

Registry Values: 0
(No malicious items detected)

Registry Data: 0
(No malicious items detected)

Folders: 0
(No malicious items detected)

Files: 0
(No malicious items detected)

Physical Sectors: 0
(No malicious items detected)


(end)

Re: Prosím o kontrolu

Napsal: 02 říj 2014 22:00
od jaro3
Stáhni si Junkware Removal Tool by Thisisu

na svojí plochu.

Deaktivuj si svůj antivirový program. Pravým tl. myši klikni na JRT.exe a vyber „spustit jako správce“. Pro pokračování budeš vyzván ke stisknutí jakékoliv klávesy. Na nějakou klikni.
Začne skenování programu. Skenování může trvat dloho , podle množství nákaz. Po ukončení skenu se objeví log (JRT.txt) , který se uloží na ploše.
Zkopíruj sem prosím celý jeho obsah.

Stáhni si RogueKiller by Adlice Software
32bit.:
http://www.sur-la-toile.com/RogueKiller/RogueKiller.exe
64bit.:
http://www.sur-la-toile.com/RogueKiller ... lerX64.exe
na svojí plochu.
- Zavři všechny ostatní programy a prohlížeče.
- Pro OS Vista a win7 spusť program RogueKiller.exe jako správce , u XP poklepáním.
- počkej až skončí Prescan -vyhledávání škodlivých procesů.
- Zkontroluj , zda máš zaškrtnuto:
Kontrola MBR
Kontrola Faked
Antirootkit
-Potom klikni na „Prohledat“.
- Program skenuje procesy PC. Po proskenování klikni na „Zpráva“celý obsah logu sem zkopíruj.
Pokud je program blokován , zkus ho spustit několikrát. Pokud dále program nepůjde spustit a pracovat, přejmenuj ho na winlogon.exe.

Re: Prosím o kontrolu

Napsal: 03 říj 2014 07:35
od kipon
RogueKiller V9.2.13.0 (x64) [Sep 25 2014] by Adlice Software
mail : http://www.adlice.com/contact/
Podpora : http://forum.adlice.com
Webové stránky : http://www.adlice.com/softwares/roguekiller/
: http://www.adlice.com

Operační systém : Windows 8.1 (6.3.9200 ) 64 bits version
Spuštěno v : Normální režim
Uživatel : Jakub [Práva správce]
Mód : Kontrola -- Datum : 10/03/2014 07:33:15

¤¤¤ Škodlivé procesy: : 0 ¤¤¤

¤¤¤ ¤¤¤ Záznamy Registrů: : 14 ¤¤¤
[PUM.Dns] (X64) HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Tcpip\Parameters | DhcpNameServer : 10.0.0.138 -> NALEZENO
[PUM.Dns] (X64) HKEY_LOCAL_MACHINE\System\ControlSet001\Services\Tcpip\Parameters | DhcpNameServer : 10.0.0.138 -> NALEZENO
[PUM.Dns] (X64) HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Tcpip\Parameters\Interfaces\{F601D1F1-DC02-4EB6-A843-B2BF5914CBC8} | DhcpNameServer : 10.0.0.138 -> NALEZENO
[PUM.Dns] (X64) HKEY_LOCAL_MACHINE\System\ControlSet001\Services\Tcpip\Parameters\Interfaces\{F601D1F1-DC02-4EB6-A843-B2BF5914CBC8} | DhcpNameServer : 10.0.0.138 -> NALEZENO
[PUM.Policies] (X64) HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System | DisableTaskMgr : 0 -> NALEZENO
[PUM.Policies] (X64) HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System | DisableRegistryTools : 0 -> NALEZENO
[PUM.Policies] (X86) HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System | DisableTaskMgr : 0 -> NALEZENO
[PUM.Policies] (X86) HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System | DisableRegistryTools : 0 -> NALEZENO
[PUM.DesktopIcons] (X64) HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\HideDesktopIcons\NewStartPanel | {20D04FE0-3AEA-1069-A2D8-08002B30309D} : 1 -> NALEZENO
[PUM.DesktopIcons] (X64) HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\HideDesktopIcons\NewStartPanel | {59031a47-3f72-44a7-89c5-5595fe6b30ee} : 1 -> NALEZENO
[PUM.DesktopIcons] (X86) HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\HideDesktopIcons\NewStartPanel | {20D04FE0-3AEA-1069-A2D8-08002B30309D} : 1 -> NALEZENO
[PUM.DesktopIcons] (X86) HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\HideDesktopIcons\NewStartPanel | {59031a47-3f72-44a7-89c5-5595fe6b30ee} : 1 -> NALEZENO
[PUM.HomePage] (X64) HKEY_USERS\S-1-5-21-1172351876-2203468645-2939403968-1001\Software\Microsoft\Internet Explorer\Main | Start Page : -> NALEZENO
[PUM.HomePage] (X86) HKEY_USERS\S-1-5-21-1172351876-2203468645-2939403968-1001\Software\Microsoft\Internet Explorer\Main | Start Page : -> NALEZENO

¤¤¤ naplánované úlohy : 0 ¤¤¤

¤¤¤ Soubory : 0 ¤¤¤

¤¤¤ Soubor HOSTS : 0 ¤¤¤

¤¤¤ Antirootkit : 0 (Driver: NAHRÁNO) ¤¤¤

¤¤¤ Webové prohlížeče : 1 ¤¤¤
[PUM.HomePage][FIREFX:Config] voafjvsm.default : user_pref("browser.startup.homepage", "chrome://foxcub/content/speedDial/speedDial.html"); -> NALEZENO

¤¤¤ Kontrola MBR : ¤¤¤
+++++ PhysicalDrive0: TOSHIBA MK6475GSX +++++
--- User ---
[MBR] a84dd93b5b19931ceaddbccc47850486
[BSP] df4f83c1f72e36823a12b0dfc7617313 : Empty MBR Code
Partition table:
0 - [XXXXXX] UNKNOWN (0x0) [VISIBLE] Offset (sectors): 1 | Size: 2097152 MB
User = LL1 ... OK
User = LL2 ... OK

Re: Prosím o kontrolu

Napsal: 03 říj 2014 07:39
od kipon
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Junkware Removal Tool (JRT) by Thisisu
Version: 6.2.6 (10.02.2014:1)
OS: Windows 8.1 x64
Ran by Jakub on p  03. 10. 2014 at 7:36:57,24
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~




~~~ Services



~~~ Registry Values



~~~ Registry Keys

Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchScopes\{8FCCDB16-6FA0-4135-BF95-29A6393699C7}



~~~ Files



~~~ Folders

Successfully deleted: [Folder] "C:\WINDOWS\syswow64\ai_recyclebin"



~~~ FireFox

Emptied folder: C:\Users\Jakub\AppData\Roaming\mozilla\firefox\profiles\voafjvsm.default\minidumps [14 files]



~~~ Event Viewer Logs were cleared





~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on p  03. 10. 2014 at 7:38:18,02
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

Re: Prosím o kontrolu

Napsal: 03 říj 2014 10:10
od jaro3
Zavři všechny programy a prohlížeče. Deaktivuj antivir a firewall.
Prosím, odpoj všechny USB nebo externí disky z počítače před spuštěním tohoto programu.
Spusť znovu RogueKiller ( Pro Windows Vista nebo Windows 7, klepni pravým a vyber "Spustit jako správce", ve Windows XP poklepej ke spuštění).
- Počkej, až Prescan dokončí práci...
- Pak klikni na "Prohledat " ,po jeho skončení:


- V záložkách (Registry , Tasks , Web Browser apod.) vše zatrhni (dej zatržítka)

- Klikni na "Smazat"
- Počkej, dokud Status box nezobrazí " Mazání dokončeno "
- Klikni na "Zpráva " a zkopíruj a vlož obsah té zprávy prosím sem. Log je možno nalézt v RKreport [číslo]. txt na ploše.
- Zavři RogueKiller

Stáhni
Zoek.exe

a uloz si ho na plochu.
Zavři všechny ostatní programy , okna i prohlížeče.
Spusť Zoek.exe ( u win vista , win7, 8 klikni na něj pravým a vyber : „Spustit jako správce“
- pozor , náběh programu může trvat déle.

Do okna programu vlož skript níže:

Kód: Vybrat vše

autoclean;
emptyclsid;
iedefaults;
FFdefaults;
CHRdefaults;
emptyalltemp;
resethosts;


klikni na Run Script
Program provede sken , opravu, sken i oprava může trvat i více minut ,je třeba posečkat do konce. Do okna neklikej!
Program nabídne restart , potvrď .

Po restartu se může nějaký čas ukázat pouze černá plocha , to je normální. Je třeba počkat až se vytvoří log. Ten si můžeš uložit třeba do dokumentů , jinak se sám ukládá do:
C:\zoek-results.log
Zkopíruj sem celý obsah toho logu.

Re: Prosím o kontrolu

Napsal: 03 říj 2014 10:45
od kipon
RogueKiller V9.2.13.0 (x64) [Sep 25 2014] by Adlice Software
mail : http://www.adlice.com/contact/
Podpora : http://forum.adlice.com
Webové stránky : http://www.adlice.com/softwares/roguekiller/
: http://www.adlice.com

Operační systém : Windows 8.1 (6.3.9200 ) 64 bits version
Spuštěno v : Normální režim
Uživatel : Jakub [Práva správce]
Mód : Odebrat -- Datum : 10/03/2014 10:43:56

¤¤¤ Škodlivé procesy: : 0 ¤¤¤

¤¤¤ ¤¤¤ Záznamy Registrů: : 0 ¤¤¤

¤¤¤ naplánované úlohy : 0 ¤¤¤

¤¤¤ Soubory : 0 ¤¤¤

¤¤¤ Soubor HOSTS : 0 ¤¤¤

¤¤¤ Antirootkit : 0 (Driver: NAHRÁNO) ¤¤¤

¤¤¤ Webové prohlížeče : 0 ¤¤¤

¤¤¤ Kontrola MBR : ¤¤¤
+++++ PhysicalDrive0: TOSHIBA MK6475GSX +++++
--- User ---
[MBR] a84dd93b5b19931ceaddbccc47850486
[BSP] df4f83c1f72e36823a12b0dfc7617313 : Empty MBR Code
Partition table:
0 - [XXXXXX] UNKNOWN (0x0) [VISIBLE] Offset (sectors): 1 | Size: 2097152 MB
User = LL1 ... OK
User = LL2 ... OK


============================================
RKreport_SCN_10032014_073315.log - RKreport_SCN_10032014_103411.log - RKreport_DEL_10032014_103611.log - RKreport_SCN_10032014_104006.log
RKreport_DEL_10032014_104034.log - RKreport_SCN_10032014_104320.log
Časové pásmo: UTC+02:00
Stránka 1 z 2
Powered by phpBB® Forum Software © phpBB Limited
https://www.phpbb.com/